@vielzeug/archive 26.11.4 → 26.11.6

package/dist/worker/publications.js

@@ -1,14 +1,14 @@
 import { ARCHIVE_LIMITS as e, SESSION_MAX_AGE_SECONDS as t, archiveAliasSchema as n, archiveCollectionMetaSchema as r, archiveHealthSchema as i, archiveIdentitySchema as a, archiveLikeStateSchema as o, archiveLikedIdsSchema as s, archiveLikesPageSchema as c, archiveModerationLogSchema as l, archiveOwnReportsSchema as u, archiveReportsSchema as d, archiveSortSchema as f, isWellFormedText as p, uuidSchema as m } from "../contract.js";
-import { ApiError as h, badRequest as g, conflict as _, forbidden as v, invalid as y, json as b, noStore as x, notFound as S, queryParams as C, readJsonBody as w } from "./http.js";
-import { SQL as T, likedPublicationsSql as E, likesPageSql as D, listPublicationsSql as O, moderationLogSql as k, reportsPageSql as A } from "./sql.js";
-import { forwardPage as j, forwardPageParams as M, nextCursor as N } from "./_pagination.js";
+import { forwardPage as h, forwardPageParams as g, nextCursor as _ } from "./_pagination.js";
+import { ApiError as v, badRequest as y, conflict as b, forbidden as x, invalid as S, json as C, noStore as w, notFound as T, queryParams as E, readJsonBody as D } from "./http.js";
+import { SQL as O, likedPublicationsSql as k, likesPageSql as A, listPublicationsSql as j, moderationLogSql as M, reportsPageSql as N } from "./sql.js";
 import { s as P } from "@vielzeug/spell";
-//#region src/worker/publications.ts
+// src/worker/publications.ts
 async function databaseCall(e) {
 	try {
 		return await e();
 	} catch (e) {
-		throw new h(500, "internal", "The service is not available.", {
+		throw new v(500, "internal", "The service is not available.", {
 			cause: e,
 			diagnostic: { kind: "database" }
 		});
@@ -18,7 +18,7 @@ var first = (e, t, ...n) => databaseCall(() => e.DB.prepare(t).bind(...n).first(
 	let r = await e.DB.prepare(t).bind(...n).all();
 	if (!Array.isArray(r.results)) throw Error("Missing database query results");
 	return r.results;
-}), run = (e, t, ...n) => databaseCall(() => e.DB.prepare(t).bind(...n).run()), uuid = () => crypto.randomUUID(), now = () => (/* @__PURE__ */ new Date()).toISOString(), recordUnavailable = () => new h(503, "record-unavailable", "The record is not available.", { diagnostic: { kind: "record" } }), F = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i, rowToEntry = (e, t) => {
+}), run = (e, t, ...n) => databaseCall(() => e.DB.prepare(t).bind(...n).run()), uuid = () => crypto.randomUUID(), now = () => (/* @__PURE__ */ new Date()).toISOString(), recordUnavailable = () => new v(503, "record-unavailable", "The record is not available.", { diagnostic: { kind: "record" } }), F = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i, rowToEntry = (e, t) => {
 	let n;
 	try {
 		n = JSON.parse(t.payload_json);
@@ -51,11 +51,11 @@ var first = (e, t, ...n) => databaseCall(() => e.DB.prepare(t).bind(...n).first(
 		hidden: t.hidden_at !== null
 	};
 }, entryById = async (e, t, n) => {
-	let r = await first(t, T.publication, n, e.name);
+	let r = await first(t, O.publication, n, e.name);
 	return r === null ? null : rowToEntry(e, r);
 }, searchMatchFor = (t) => {
 	if (t === null) return;
-	if (t.length > e.searchChars) throw g();
+	if (t.length > e.searchChars) throw y();
 	let n = (t.match(/[\p{L}\p{N}]+/gu) ?? []).slice(0, e.searchTerms);
 	if (n.length !== 0) return n.map((e) => `"${e}"*`).join(" ");
 }, entryCursorContext = (e) => JSON.stringify([
@@ -71,13 +71,13 @@ var first = (e, t, ...n) => databaseCall(() => e.DB.prepare(t).bind(...n).first(
 	likeCount: e.like_count
 }), I = 16, vocabValues = (e, t, n) => {
 	let r = e.getAll(t);
-	if (r.length > I) throw g();
+	if (r.length > I) throw y();
 	let i = [...new Set(r)].sort();
-	if (i.some((e) => !n.includes(e))) throw g();
+	if (i.some((e) => !n.includes(e))) throw y();
 	return i;
 };
 async function listEntries(e, t, n) {
-	let r = new URL(t.url), i = C(r, [
+	let r = new URL(t.url), i = E(r, [
 		"author",
 		"cursor",
 		"filter",
@@ -86,9 +86,9 @@ async function listEntries(e, t, n) {
 		"sort",
 		"tag"
 	], ["filter", "tag"]), a = i.get("sort") ?? "recent", o = f.safeParse(a);
-	if (!o.success) throw g();
+	if (!o.success) throw y();
 	let s = vocabValues(i, "filter", e.filters), c = vocabValues(i, "tag", e.tags), l = i.get("author");
-	if (l !== null && !F.test(l)) throw g();
+	if (l !== null && !F.test(l)) throw y();
 	let u = searchMatchFor(i.get("search")), d = entryCursorContext({
 		author: l ?? void 0,
 		collection: e.name,
@@ -96,7 +96,7 @@ async function listEntries(e, t, n) {
 		searchMatch: u,
 		sort: o.data,
 		tags: c
-	}), { cursor: p, limit: m } = M(i, d), h = {
+	}), { cursor: p, limit: m } = g(i, d), h = {
 		author: l ?? void 0,
 		collection: e.name,
 		cursor: p === null ? void 0 : {
@@ -109,11 +109,11 @@ async function listEntries(e, t, n) {
 		searchMatch: u,
 		sort: o.data,
 		tags: c
-	}, _ = O(h), v = await all(n, _.sql, ..._.parameters), y = v.slice(0, m), S = y.at(-1), w = {
-		cursor: v.length > m && S !== void 0 ? N(cursorFromRow(S), d) : null,
-		entries: y.map((t) => rowToEntry(e, t))
+	}, v = j(h), b = await all(n, v.sql, ...v.parameters), x = b.slice(0, m), S = x.at(-1), T = {
+		cursor: b.length > m && S !== void 0 ? _(cursorFromRow(S), d) : null,
+		entries: x.map((t) => rowToEntry(e, t))
 	};
-	return b(200, w, x);
+	return C(200, T, w);
 }
 function collectionMeta(e) {
 	let t = r.safeParse({
@@ -122,17 +122,17 @@ function collectionMeta(e) {
 		tags: [...e.tags].sort()
 	});
 	if (!t.success) throw recordUnavailable();
-	return b(200, t.data, x);
+	return C(200, t.data, w);
 }
 async function getEntry(e, t, n) {
 	let r = await entryById(e, t, n);
-	if (r === null) throw S();
-	return b(200, r, x);
+	if (r === null) throw T();
+	return C(200, r, w);
 }
 async function healthJson(t, n) {
 	let r = null, a = null;
 	try {
-		r = (await first(n, T.schemaVersion))?.applied ?? 0;
+		r = (await first(n, O.schemaVersion))?.applied ?? 0;
 	} catch {
 		a = "database-unavailable";
 	}
@@ -149,12 +149,12 @@ async function healthJson(t, n) {
 		status: a === null ? "ok" : "degraded"
 	});
 	if (!o.success) throw recordUnavailable();
-	return b(a === null ? 200 : 503, o.data, x);
+	return C(a === null ? 200 : 503, o.data, w);
 }
 var identityJson = (e, t) => {
 	let n = a.safeParse(t);
 	if (!n.success) throw recordUnavailable();
-	return b(e, n.data, x);
+	return C(e, n.data, w);
 };
 function getMe(e) {
 	return identityJson(200, e?.publisher ? {
@@ -164,18 +164,18 @@ function getMe(e) {
 	} : null);
 }
 async function registerMe(e, t, n) {
-	let r = await w(e), i = L.safeParse(r);
-	if (!i.success) throw y();
-	let a = i.data.name ?? "", o = await first(t, T.publisher, n.subject.issuer, n.subject.subject);
+	let r = await D(e), i = L.safeParse(r);
+	if (!i.success) throw S();
+	let a = i.data.name ?? "", o = await first(t, O.publisher, n.subject.issuer, n.subject.subject);
 	if (o !== null) return identityJson(200, {
 		id: o.id,
 		name: o.display_name,
 		operator: n.operator
 	});
 	let s = uuid();
-	await run(t, T.insertPublisher, s, n.subject.issuer, n.subject.subject, a, now(), n.subject.issuer, n.subject.subject, Date.now());
-	let c = await first(t, T.publisher, n.subject.issuer, n.subject.subject);
-	if (c === null) throw await first(t, T.revokedSubject, n.subject.issuer, n.subject.subject, Date.now()) === null ? _() : new h(401, "unauthenticated", "Sign-in is required.");
+	await run(t, O.insertPublisher, s, n.subject.issuer, n.subject.subject, a, now(), n.subject.issuer, n.subject.subject, Date.now());
+	let c = await first(t, O.publisher, n.subject.issuer, n.subject.subject);
+	if (c === null) throw await first(t, O.revokedSubject, n.subject.issuer, n.subject.subject, Date.now()) === null ? b() : new v(401, "unauthenticated", "Sign-in is required.");
 	return identityJson(201, {
 		id: c.id,
 		name: c.display_name,
@@ -183,37 +183,37 @@ async function registerMe(e, t, n) {
 	});
 }
 async function renameMe(e, t, n) {
-	let r = requirePublisherRow(n), i = await w(e), a = R.safeParse(i);
-	if (!a.success) throw y();
-	return a.data.name !== r.displayName && await run(t, T.renamePublisher, a.data.name, r.id, a.data.name), identityJson(200, {
+	let r = requirePublisherRow(n), i = await D(e), a = R.safeParse(i);
+	if (!a.success) throw S();
+	return a.data.name !== r.displayName && await run(t, O.renamePublisher, a.data.name, r.id, a.data.name), identityJson(200, {
 		id: r.id,
 		name: a.data.name,
 		operator: n.operator
 	});
 }
 async function deleteProfile(e, t) {
-	return t.publisher !== null && await run(e, T.deletePublisher, t.publisher.id), new Response(null, {
+	return t.publisher !== null && await run(e, O.deletePublisher, t.publisher.id), new Response(null, {
 		headers: { "cache-control": "no-store" },
 		status: 204
 	});
 }
 async function deleteAccountProfile(e, n) {
 	let { issuer: r, subject: i } = n.subject;
-	return await databaseCall(() => e.DB.batch([e.DB.prepare(T.revokeSubject).bind(r, i, Date.now() + (t + 10) * 1e3), e.DB.prepare(T.deleteSubjectPublisher).bind(r, i)])), new Response(null, {
-		headers: x,
+	return await databaseCall(() => e.DB.batch([e.DB.prepare(O.revokeSubject).bind(r, i, Date.now() + (t + 10) * 1e3), e.DB.prepare(O.deleteSubjectPublisher).bind(r, i)])), new Response(null, {
+		headers: w,
 		status: 204
 	});
 }
 async function erasePublisher(e, t, n) {
 	let r = requireOperatorRow(t);
-	return await databaseCall(() => e.DB.batch([e.DB.prepare(T.auditErasure).bind(uuid(), r.id, now(), n), e.DB.prepare(T.deletePublisher).bind(n)])), new Response(null, {
-		headers: x,
+	return await databaseCall(() => e.DB.batch([e.DB.prepare(O.auditErasure).bind(uuid(), r.id, now(), n), e.DB.prepare(O.deletePublisher).bind(n)])), new Response(null, {
+		headers: w,
 		status: 204
 	});
 }
 async function listModerationLog(e, t, n) {
 	requireOperatorRow(n);
-	let r = "moderation-log", { cursor: i, limit: a } = j(e, r), o = k({
+	let r = "moderation-log", { cursor: i, limit: a } = h(e, r), o = M({
 		cursor: i,
 		limit: a + 1
 	}), s = await all(t, o.sql, ...o.parameters), c = s.slice(0, a), u = c.at(-1), d = l.safeParse({
@@ -225,55 +225,55 @@ async function listModerationLog(e, t, n) {
 			operatorId: e.operator_id,
 			targetId: e.target_id
 		})),
-		cursor: s.length > a && u !== void 0 ? N({
+		cursor: s.length > a && u !== void 0 ? _({
 			createdAt: u.created_at,
 			id: u.id
 		}, r) : null
 	});
 	if (!d.success) throw recordUnavailable();
-	return b(200, d.data, x);
+	return C(200, d.data, w);
 }
 var requirePublisherRow = (e) => {
-	if (e.publisher === null) throw v("Register before publishing.");
+	if (e.publisher === null) throw x("Register before publishing.");
 	return e.publisher;
 }, requireOperatorRow = (e) => {
-	if (!e.operator) throw v("Operator access is required.");
-	if (e.publisher === null) throw v("Register before moderating.");
+	if (!e.operator) throw x("Operator access is required.");
+	if (e.publisher === null) throw x("Register before moderating.");
 	return e.publisher;
 }, L = P.object({ name: n.optional() }), R = P.object({ name: n });
 async function myPublications(t, n, r) {
-	if (r.publisher === null) return b(200, { entries: [] }, x);
-	let i = await all(n, T.ownPublications, r.publisher.id, t.name, e.maxPublications);
-	return b(200, { entries: i.map((e) => rowToOwnedEntry(t, e)) }, x);
+	if (r.publisher === null) return C(200, { entries: [] }, w);
+	let i = await all(n, O.ownPublications, r.publisher.id, t.name, e.maxPublications);
+	return C(200, { entries: i.map((e) => rowToOwnedEntry(t, e)) }, w);
 }
 async function myLikes(t, n, r) {
 	let i = new URL(t.url).searchParams.get("ids");
 	if (i === null) {
-		let e = `likes:${r.publisher?.id ?? "unregistered"}`, { cursor: i, limit: a } = j(t, e);
-		if (r.publisher === null) return b(200, {
+		let e = `likes:${r.publisher?.id ?? "unregistered"}`, { cursor: i, limit: a } = h(t, e);
+		if (r.publisher === null) return C(200, {
 			cursor: null,
 			ids: []
-		}, x);
-		let o = D(r.publisher.id, {
+		}, w);
+		let o = A(r.publisher.id, {
 			cursor: i,
 			limit: a + 1
 		}), s = await all(n, o.sql, ...o.parameters), l = s.slice(0, a), u = l.at(-1), d = c.safeParse({
-			cursor: s.length > a && u !== void 0 ? N({
+			cursor: s.length > a && u !== void 0 ? _({
 				createdAt: u.created_at,
 				id: u.publication_id
 			}, e) : null,
 			ids: l.map((e) => e.publication_id)
 		});
 		if (!d.success) throw recordUnavailable();
-		return b(200, d.data, x);
+		return C(200, d.data, w);
 	}
-	C(new URL(t.url), ["ids"]);
+	E(new URL(t.url), ["ids"]);
 	let a = [...new Set(i.split(","))];
-	if (a.length > e.likeStateIds || a.some((e) => !F.test(e))) throw g();
-	if (r.publisher === null) return b(200, { ids: [] }, x);
-	let o = E(r.publisher.id, a), l = await all(n, o.sql, ...o.parameters), u = new Set(l.map((e) => e.publication_id)), d = { ids: a.filter((e) => u.has(e)) }, f = s.safeParse(d);
+	if (a.length > e.likeStateIds || a.some((e) => !F.test(e))) throw y();
+	if (r.publisher === null) return C(200, { ids: [] }, w);
+	let o = k(r.publisher.id, a), l = await all(n, o.sql, ...o.parameters), u = new Set(l.map((e) => e.publication_id)), d = { ids: a.filter((e) => u.has(e)) }, f = s.safeParse(d);
 	if (!f.success) throw recordUnavailable();
-	return b(200, f.data, x);
+	return C(200, f.data, w);
 }
 var z = P.object({
 	clientKey: m,
@@ -284,135 +284,135 @@ var z = P.object({
 });
 async function resolveRetryRecord(e, t, n, r) {
 	if (n === null || n.expires_at <= Date.now()) return null;
-	if (n.payload_hash !== r) throw _("That key was used for a different payload.");
-	if (n.publication_id === null) throw new h(410, "gone", "That publication was removed.");
+	if (n.payload_hash !== r) throw b("That key was used for a different payload.");
+	if (n.publication_id === null) throw new v(410, "gone", "That publication was removed.");
 	let i = await entryById(e, t, n.publication_id);
-	return i === null ? "vanished" : b(200, i, x);
+	return i === null ? "vanished" : C(200, i, w);
 }
 async function publishEntry(t, n, r, i, a) {
-	if (!i.publishingEnabled) throw new h(503, "publishing-disabled", "Publishing is currently disabled.");
-	let o = requirePublisherRow(a), s = await w(n), c = z.safeParse(s);
-	if (!c.success) throw y();
+	if (!i.publishingEnabled) throw new v(503, "publishing-disabled", "Publishing is currently disabled.");
+	let o = requirePublisherRow(a), s = await D(n), c = z.safeParse(s);
+	if (!c.success) throw S();
 	let { clientKey: l } = c.data, u = await t.derive(c.data.payload);
-	if (u === null) throw y();
-	let d = u.canonicalJson, f = u.contentHash, p = o.id, m = t.name, g = await resolveRetryRecord(t, r, await first(r, T.request, p, m, l), f);
-	if (g !== null && g !== "vanished") return g;
-	let S = await first(r, T.publicationByKey, p, m, l);
-	if (S !== null) {
-		if (S.hidden_at !== null) throw v("This entry is under moderation review.");
-		if (S.content_hash !== f) throw _("That key was used for a different payload.");
-		return b(200, rowToEntry(t, S), x);
+	if (u === null) throw S();
+	let d = u.canonicalJson, f = u.contentHash, p = o.id, m = t.name, h = await resolveRetryRecord(t, r, await first(r, O.request, p, m, l), f);
+	if (h !== null && h !== "vanished") return h;
+	let g = await first(r, O.publicationByKey, p, m, l);
+	if (g !== null) {
+		if (g.hidden_at !== null) throw x("This entry is under moderation review.");
+		if (g.content_hash !== f) throw b("That key was used for a different payload.");
+		return C(200, rowToEntry(t, g), w);
 	}
-	let C = now(), E = Date.now() + e.idempotencyRetentionMs, D = JSON.stringify(u.tags);
+	let _ = now(), y = Date.now() + e.idempotencyRetentionMs, T = JSON.stringify(u.tags);
 	if (((await databaseCall(() => r.DB.batch([
-		r.DB.prepare(T.expireRequests).bind(Date.now()),
-		r.DB.prepare(T.insertPublication).bind(uuid(), p, m, l, 1, u.contentVersion, d, f, u.filter, u.title, D, C, C, p, m, e.maxPublications, p, m, l, Date.now()),
-		r.DB.prepare(T.insertRequest).bind(p, m, l, f, C, E, p, m, l, f)
+		r.DB.prepare(O.expireRequests).bind(Date.now()),
+		r.DB.prepare(O.insertPublication).bind(uuid(), p, m, l, 1, u.contentVersion, d, f, u.filter, u.title, T, _, _, p, m, e.maxPublications, p, m, l, Date.now()),
+		r.DB.prepare(O.insertRequest).bind(p, m, l, f, _, y, p, m, l, f)
 	])))[1]?.meta?.changes ?? 0) === 0) {
-		let e = await resolveRetryRecord(t, r, await first(r, T.request, p, m, l), f);
-		if (e === "vanished") throw new h(410, "gone", "That publication was removed.");
+		let e = await resolveRetryRecord(t, r, await first(r, O.request, p, m, l), f);
+		if (e === "vanished") throw new v(410, "gone", "That publication was removed.");
 		if (e !== null) return e;
-		let n = await first(r, T.publicationByKey, p, m, l);
-		if (n !== null && n.hidden_at !== null) throw v("This entry is under moderation review.");
-		if (n !== null && n.content_hash === f) return b(200, rowToEntry(t, n), x);
-		throw n === null ? new h(429, "quota", "Publication quota reached.") : _("That key was used for a different payload.");
+		let n = await first(r, O.publicationByKey, p, m, l);
+		if (n !== null && n.hidden_at !== null) throw x("This entry is under moderation review.");
+		if (n !== null && n.content_hash === f) return C(200, rowToEntry(t, n), w);
+		throw n === null ? new v(429, "quota", "Publication quota reached.") : b("That key was used for a different payload.");
 	}
-	let O = await first(r, T.publicationByKey, p, m, l);
-	if (O === null) throw _();
-	return b(201, rowToEntry(t, O), x);
+	let E = await first(r, O.publicationByKey, p, m, l);
+	if (E === null) throw b();
+	return C(201, rowToEntry(t, E), w);
 }
 async function updateEntry(e, t, n, r, i, a) {
-	if (!r.publishingEnabled) throw new h(503, "publishing-disabled", "Publishing is currently disabled.");
-	let o = requirePublisherRow(i), s = await first(n, T.publicationAny, a, e.name);
-	if (s === null || s.owner_id !== o.id) throw S();
-	if (s.hidden_at !== null) throw v("This entry is under moderation review.");
-	let c = await w(t), l = B.safeParse(c);
-	if (!l.success) throw y();
+	if (!r.publishingEnabled) throw new v(503, "publishing-disabled", "Publishing is currently disabled.");
+	let o = requirePublisherRow(i), s = await first(n, O.publicationAny, a, e.name);
+	if (s === null || s.owner_id !== o.id) throw T();
+	if (s.hidden_at !== null) throw x("This entry is under moderation review.");
+	let c = await D(t), l = B.safeParse(c);
+	if (!l.success) throw S();
 	let { expectedRevision: u } = l.data;
-	if (u !== s.revision) throw _();
+	if (u !== s.revision) throw b();
 	let d = await e.derive(l.data.payload);
-	if (d === null) throw y();
+	if (d === null) throw S();
 	let f = d.canonicalJson, p = d.contentHash;
 	if (p === s.content_hash) {
-		let t = await first(n, T.publicationAny, a, e.name);
-		if (t === null || t.owner_id !== o.id) throw S();
-		if (t.hidden_at !== null) throw v("This entry is under moderation review.");
-		if (t.revision !== u) throw _();
-		return b(200, rowToEntry(e, t), x);
+		let t = await first(n, O.publicationAny, a, e.name);
+		if (t === null || t.owner_id !== o.id) throw T();
+		if (t.hidden_at !== null) throw x("This entry is under moderation review.");
+		if (t.revision !== u) throw b();
+		return C(200, rowToEntry(e, t), w);
 	}
 	let m = JSON.stringify(d.tags);
-	if (((await run(n, T.updatePublication, 1, d.contentVersion, f, p, d.filter, d.title, m, now(), a, o.id, u, p)).meta?.changes ?? 0) === 0) {
-		let t = await first(n, T.publicationAny, a, e.name);
-		throw t === null ? S() : t.hidden_at === null ? _() : v("This entry is under moderation review.");
+	if (((await run(n, O.updatePublication, 1, d.contentVersion, f, p, d.filter, d.title, m, now(), a, o.id, u, p)).meta?.changes ?? 0) === 0) {
+		let t = await first(n, O.publicationAny, a, e.name);
+		throw t === null ? T() : t.hidden_at === null ? b() : x("This entry is under moderation review.");
 	}
-	let g = await entryById(e, n, a);
-	if (g === null) throw S();
-	return b(200, g, x);
+	let h = await entryById(e, n, a);
+	if (h === null) throw T();
+	return C(200, h, w);
 }
 async function deleteEntry(e, t, n, r) {
 	if (n.operator) {
 		let i = requireOperatorRow(n);
-		await databaseCall(() => t.DB.batch([t.DB.prepare(T.auditRemoval).bind(uuid(), i.id, now(), r, e.name), t.DB.prepare(T.removePublicationAny).bind(r, e.name)]));
+		await databaseCall(() => t.DB.batch([t.DB.prepare(O.auditRemoval).bind(uuid(), i.id, now(), r, e.name), t.DB.prepare(O.removePublicationAny).bind(r, e.name)]));
 	} else {
-		let i = requirePublisherRow(n), a = await first(t, T.publicationAny, r, e.name);
+		let i = requirePublisherRow(n), a = await first(t, O.publicationAny, r, e.name);
 		if (a === null) return new Response(null, {
-			headers: x,
+			headers: w,
 			status: 204
 		});
-		if (a.owner_id !== i.id) throw S();
-		await run(t, T.removePublication, r, i.id);
+		if (a.owner_id !== i.id) throw T();
+		await run(t, O.removePublication, r, i.id);
 	}
 	return new Response(null, {
-		headers: x,
+		headers: w,
 		status: 204
 	});
 }
 async function setLike(e, t, n, r, i, a) {
 	let s = requirePublisherRow(r);
-	if (a && !n.likesEnabled) throw new h(503, "likes-disabled", "Likes are currently disabled.");
-	if (await first(t, T.publication, i, e.name) === null) throw S();
-	a ? await run(t, T.insertLike, s.id, now(), i) : await run(t, T.removeLike, i, s.id);
-	let c = await first(t, T.likeState, s.id, i);
-	if (c === null) throw S();
+	if (a && !n.likesEnabled) throw new v(503, "likes-disabled", "Likes are currently disabled.");
+	if (await first(t, O.publication, i, e.name) === null) throw T();
+	a ? await run(t, O.insertLike, s.id, now(), i) : await run(t, O.removeLike, i, s.id);
+	let c = await first(t, O.likeState, s.id, i);
+	if (c === null) throw T();
 	let l = {
 		id: c.id,
 		likeCount: c.like_count,
 		liked: c.liked === 1
 	}, u = o.safeParse(l);
 	if (!u.success) throw recordUnavailable();
-	return b(200, u.data, x);
+	return C(200, u.data, w);
 }
 var V = P.object({ reason: P.string().check(p).trim().min(1).max(e.reportReasonChars) });
 async function reportEntry(e, t, n, r, i) {
-	let a = requirePublisherRow(r), o = await w(t), s = V.safeParse(o);
-	if (!s.success) throw y();
-	if (await first(n, T.publication, i, e.name) === null) throw S();
-	return await run(n, T.insertReport, uuid(), a.id, s.data.reason, now(), i, e.name), new Response(null, {
-		headers: x,
+	let a = requirePublisherRow(r), o = await D(t), s = V.safeParse(o);
+	if (!s.success) throw S();
+	if (await first(n, O.publication, i, e.name) === null) throw T();
+	return await run(n, O.insertReport, uuid(), a.id, s.data.reason, now(), i, e.name), new Response(null, {
+		headers: w,
 		status: 204
 	});
 }
 async function setHidden(e, t, n, r, i) {
 	let a = requireOperatorRow(n);
-	if (await first(t, T.publicationAny, r, e.name) === null) throw S();
-	let o = i ? t.DB.prepare(T.hidePublication).bind(now(), r, e.name) : t.DB.prepare(T.unhidePublication).bind(r, e.name);
-	return await databaseCall(() => t.DB.batch([t.DB.prepare(T.auditHide).bind(uuid(), a.id, i ? "hide" : "unhide", now(), r, e.name, Number(i)), o])), new Response(null, {
-		headers: x,
+	if (await first(t, O.publicationAny, r, e.name) === null) throw T();
+	let o = i ? t.DB.prepare(O.hidePublication).bind(now(), r, e.name) : t.DB.prepare(O.unhidePublication).bind(r, e.name);
+	return await databaseCall(() => t.DB.batch([t.DB.prepare(O.auditHide).bind(uuid(), a.id, i ? "hide" : "unhide", now(), r, e.name, Number(i)), o])), new Response(null, {
+		headers: w,
 		status: 204
 	});
 }
 async function listReports(e, t, n, r) {
 	requireOperatorRow(r);
 	let i = new URL(t.url).searchParams.get("status") ?? "unresolved";
-	if (i !== "unresolved" && i !== "resolved") throw g();
-	let a = `reports:${e.name}:${i}`, { cursor: o, limit: s } = j(t, a, ["status"]), c = A({
+	if (i !== "unresolved" && i !== "resolved") throw y();
+	let a = `reports:${e.name}:${i}`, { cursor: o, limit: s } = h(t, a, ["status"]), c = N({
 		collection: e.name,
 		resolved: i === "resolved"
 	}, {
 		cursor: o,
 		limit: s + 1
 	}), l = await all(n, c.sql, ...c.parameters), u = l.slice(0, s), f = u.at(-1), p = d.safeParse({
-		cursor: l.length > s && f !== void 0 ? N({
+		cursor: l.length > s && f !== void 0 ? _({
 			createdAt: f.created_at,
 			id: f.id
 		}, a) : null,
@@ -430,26 +430,26 @@ async function listReports(e, t, n, r) {
 		}))
 	});
 	if (!p.success) throw recordUnavailable();
-	return b(200, p.data, x);
+	return C(200, p.data, w);
 }
 async function resolveReport(e, t, n, r) {
-	if (requireOperatorRow(n), await first(t, T.reportById, r, e.name) === null) throw S();
-	return await run(t, T.resolveReport, now(), r, e.name), new Response(null, {
-		headers: x,
+	if (requireOperatorRow(n), await first(t, O.reportById, r, e.name) === null) throw T();
+	return await run(t, O.resolveReport, now(), r, e.name), new Response(null, {
+		headers: w,
 		status: 204
 	});
 }
 async function myReports(e, t, n) {
-	let r = `own-reports:${n.publisher?.id ?? "unregistered"}`, { cursor: i, limit: a } = j(e, r);
-	if (n.publisher === null) return b(200, {
+	let r = `own-reports:${n.publisher?.id ?? "unregistered"}`, { cursor: i, limit: a } = h(e, r);
+	if (n.publisher === null) return C(200, {
 		cursor: null,
 		reports: []
-	}, x);
-	let o = A({ publisherId: n.publisher.id }, {
+	}, w);
+	let o = N({ publisherId: n.publisher.id }, {
 		cursor: i,
 		limit: a + 1
 	}), s = await all(t, o.sql, ...o.parameters), c = s.slice(0, a), l = c.at(-1), d = u.safeParse({
-		cursor: s.length > a && l !== void 0 ? N({
+		cursor: s.length > a && l !== void 0 ? _({
 			createdAt: l.created_at,
 			id: l.id
 		}, r) : null,
@@ -463,9 +463,8 @@ async function myReports(e, t, n) {
 		}))
 	});
 	if (!d.success) throw recordUnavailable();
-	return b(200, d.data, x);
+	return C(200, d.data, w);
 }
-//#endregion
 export { collectionMeta, deleteAccountProfile, deleteEntry, deleteProfile, erasePublisher, getEntry, getMe, healthJson, listEntries, listModerationLog, listReports, myLikes, myPublications, myReports, publishEntry, registerMe, renameMe, reportEntry, requireOperatorRow, requirePublisherRow, resolveReport, setHidden, setLike, updateEntry };
 
 //# sourceMappingURL=publications.js.map

package/dist/worker/sql.js

@@ -1,4 +1,4 @@
-//#region src/worker/sql.ts
+// src/worker/sql.ts
 var e = {
 	auditErasure: "INSERT INTO moderation_actions(id, operator_id, action, collection, target_id, created_at)\n    SELECT ?, ?, 'erase-publisher', NULL, id, ? FROM publishers WHERE id = ?",
 	auditHide: "INSERT INTO moderation_actions(id, operator_id, action, collection, target_id, created_at)\n    SELECT ?, ?, ?, collection, id, ? FROM publications\n    WHERE id = ? AND collection = ? AND (hidden_at IS NOT NULL) <> ?",
@@ -98,7 +98,6 @@ function likedPublicationsSql(e, t) {
       AND publication_id IN (${t.map(() => "?").join(", ") || "NULL"})`
 	};
 }
-//#endregion
 export { e as SQL, likedPublicationsSql, likesPageSql, listPublicationsSql, moderationLogSql, reportsPageSql };
 
 //# sourceMappingURL=sql.js.map

package/dist/worker/worker.cjs

@@ -1,2 +1,2 @@
-const e=require("../contract.cjs"),t=require("./http.cjs"),n=require("../errors.cjs"),r=require("./sql.cjs"),i=require("./auth.cjs"),a=require("./env.cjs"),o=require("./publications.cjs");var s=[{id:`accountErase`,label:`/me/account`,methods:[`DELETE`],pattern:/^\/api\/v1\/me\/account$/},{id:`health`,label:`/health`,methods:[`GET`],pattern:/^\/api\/v1\/health$/},{id:`signOut`,label:`/sign-out`,methods:[`POST`],pattern:/^\/api\/v1\/sign-out$/},{id:`resolveReport`,label:`/collections/:collection/reports/:id/resolved`,methods:[`PUT`],pattern:/^\/api\/v1\/collections\/([a-z0-9-]+)\/reports\/([0-9a-f-]{36})\/resolved$/i},{id:`meta`,label:`/collections/:collection`,methods:[`GET`],pattern:/^\/api\/v1\/collections\/([a-z0-9-]+)$/},{id:`reports`,label:`/collections/:collection/reports`,methods:[`GET`],pattern:/^\/api\/v1\/collections\/([a-z0-9-]+)\/reports$/},{id:`entries`,label:`/collections/:collection/entries`,methods:[`GET`,`POST`],pattern:/^\/api\/v1\/collections\/([a-z0-9-]+)\/entries$/},{id:`entry`,label:`/collections/:collection/entries/:id`,methods:[`GET`,`PUT`,`DELETE`],pattern:/^\/api\/v1\/collections\/([a-z0-9-]+)\/entries\/([0-9a-f-]{36})$/i},{id:`like`,label:`/collections/:collection/entries/:id/like`,methods:[`PUT`,`DELETE`],pattern:/^\/api\/v1\/collections\/([a-z0-9-]+)\/entries\/([0-9a-f-]{36})\/like$/i},{id:`report`,label:`/collections/:collection/entries/:id/report`,methods:[`POST`],pattern:/^\/api\/v1\/collections\/([a-z0-9-]+)\/entries\/([0-9a-f-]{36})\/report$/i},{id:`hidden`,label:`/collections/:collection/entries/:id/hidden`,methods:[`PUT`,`DELETE`],pattern:/^\/api\/v1\/collections\/([a-z0-9-]+)\/entries\/([0-9a-f-]{36})\/hidden$/i},{id:`modLog`,label:`/moderation-log`,methods:[`GET`],pattern:/^\/api\/v1\/moderation-log$/},{id:`publisherErase`,label:`/publishers/:id`,methods:[`DELETE`],pattern:/^\/api\/v1\/publishers\/([0-9a-f-]{36})$/i},{id:`me`,label:`/me`,methods:[`GET`,`POST`,`PUT`,`DELETE`],pattern:/^\/api\/v1\/me$/},{id:`mePublications`,label:`/me/publications`,methods:[`GET`],pattern:/^\/api\/v1\/me\/publications$/},{id:`meLikes`,label:`/me/likes`,methods:[`GET`],pattern:/^\/api\/v1\/me\/likes$/},{id:`meReports`,label:`/me/reports`,methods:[`GET`],pattern:/^\/api\/v1\/me\/reports$/}],matchRoute=e=>{for(let t of s){let n=e.match(t.pattern);if(n)return{id:t.id,label:t.label,methods:t.methods,segments:n.slice(1)}}return null},routeLabel=e=>matchRoute(e)?.label??`unknown`,c=/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i,l=new Set([`entry`,`like`,`report`,`hidden`,`resolveReport`]),notAllowed=()=>new t.ApiError(405,`method-not-allowed`,`That method is not supported here.`),u=new WeakMap,rateLimitHash=async(e,t)=>{let n=u.get(e);n===void 0&&(n=crypto.subtle.importKey(`raw`,new TextEncoder().encode(e.rateLimitPepper),{hash:`SHA-256`,name:`HMAC`},!1,[`sign`]),u.set(e,n));let r=await crypto.subtle.sign(`HMAC`,await n,new TextEncoder().encode(t));return[...new Uint8Array(r)].map(e=>e.toString(16).padStart(2,`0`)).join(``)},d=60;async function readLimit(e,n,r){let i=r.headers.get(`cf-connecting-ip`)??(e.appEnv===`local`?`127.0.0.1`:null);if(i===null)throw new t.ApiError(503,`unavailable`,`The service is temporarily unavailable.`);let{success:a}=await n.READ_LIMIT.limit({key:await rateLimitHash(e,i)});if(!a)throw new t.ApiError(429,`rate-limited`,`Too many requests. Try again later.`,{retryAfterSeconds:d})}async function writeLimit(e,n,r,i){let{success:a}=await n.WRITE_LIMIT.limit({key:await rateLimitHash(e,JSON.stringify([r,i]))});if(!a)throw new t.ApiError(429,`rate-limited`,`Too many requests. Try again later.`,{retryAfterSeconds:d})}async function cachedPublicGet(t,n,r,i){if(t.headers.get(`cookie`)!==null||t.headers.get(`authorization`)!==null)return r();let a=new URL(t.url);a.search=new URLSearchParams([...a.searchParams.entries()].sort(([e],[t])=>e<t?-1:+(e>t))).toString();let o=caches.default,s=new Request(a.toString(),{method:`GET`}),c=await o.match(s).catch(()=>{i()});if(c)return c;let l=await r();return l.headers.set(`cache-control`,`public, max-age=${e.ARCHIVE_LIMITS.publicCacheSeconds}, s-maxage=${e.ARCHIVE_LIMITS.publicCacheSeconds}`),n.waitUntil(o.put(s,l.clone()).catch(i)),l}var withCors=(e,n,r)=>{let i=t.corsHeaders(n,r);if(Object.keys(i).length===0)return e;let a=new Response(e.body,e);for(let[e,t]of Object.entries(i))a.headers.set(e,t);return a};function requireExpectedPublisher(n,r,i){if(i||r.publisher===null)return;let a=n.headers.get(e.PUBLISHER_HEADER);if(a===null||!c.test(a))throw new t.ApiError(400,`bad-request`,`The request is not valid.`);if(a!==r.publisher.id)throw new t.ApiError(409,`publisher-changed`,`The signed-in publisher changed since this request was prepared.`)}function createArchiveWorker(s){let u=new Map;for(let e of s){if(u.has(e.name))throw new n.ArchiveDefinitionError(`Duplicate archive collection: ${e.name}`);u.set(e.name,e)}let collectionFor=e=>{let n=u.get(e);if(n===void 0)throw new t.ApiError(404,`not-found`,`No such route.`);return n};async function handle(e,n,r){let s=a.apiConfig(n),d=new URL(e.url),{pathname:f}=d,p=e.method;if(!f.startsWith(`/api/v1/`))throw new t.ApiError(404,`not-found`,`No such route.`);if(p===`OPTIONS`)return t.preflight(e,s);let m=matchRoute(f);if(m===null)throw new t.ApiError(404,`not-found`,`No such route.`);if(!m.methods.includes(p))throw notAllowed();if(l.has(m.id)&&!c.test(m.segments[1]??``))throw t.badRequest();if(m.id===`health`)return withCors(await o.healthJson(s,n),e,s);m.id===`reports`&&t.queryParams(d,[`cursor`,`limit`,`status`]),await readLimit(s,n,e);let h=p!==`GET`&&p!==`HEAD`&&p!==`OPTIONS`;h&&t.requireMutationGuard(e,s);let g=p===`GET`&&(m.id===`meta`||m.id===`entries`||m.id===`entry`),_=m.id===`signOut`&&p===`POST`,v=g||_?null:await i.verifySession(e,s,n,m.id===`accountErase`);if(h){if(_)return withCors(t.json(200,{ok:!0},{"cache-control":`no-store`,"set-cookie":t.expiredSessionCookie(s.appEnv===`production`)}),e,s);let r=i.requireSession(v);requireExpectedPublisher(e,r,m.id===`me`&&p===`POST`),await writeLimit(s,n,r.subject.issuer,r.subject.subject)}let jsonWithCors=t=>withCors(t,e,s);switch(m.id){case`meta`:return t.queryParams(d,[]),jsonWithCors(o.collectionMeta(collectionFor(m.segments[0]??``)));case`entries`:{let t=collectionFor(m.segments[0]??``);if(p===`GET`)return jsonWithCors(await cachedPublicGet(e,r,()=>o.listEntries(t,e,n),()=>emit({diagnostic:{kind:`cache`},type:`cache-error`})));if(p===`POST`)return jsonWithCors(await o.publishEntry(t,e,n,s,i.requireSession(v)));throw notAllowed()}case`entry`:{let r=collectionFor(m.segments[0]??``),a=m.segments[1]??``;if(p===`GET`)return t.queryParams(d,[]),jsonWithCors(await o.getEntry(r,n,a));if(p===`PUT`)return jsonWithCors(await o.updateEntry(r,e,n,s,i.requireSession(v),a));if(p===`DELETE`)return jsonWithCors(await o.deleteEntry(r,n,i.requireSession(v),a));throw notAllowed()}case`like`:{let e=collectionFor(m.segments[0]??``),t=m.segments[1]??``;if(p===`PUT`)return jsonWithCors(await o.setLike(e,n,s,i.requireSession(v),t,!0));if(p===`DELETE`)return jsonWithCors(await o.setLike(e,n,s,i.requireSession(v),t,!1));throw notAllowed()}case`report`:{if(p!==`POST`)throw notAllowed();let t=collectionFor(m.segments[0]??``);return jsonWithCors(await o.reportEntry(t,e,n,i.requireSession(v),m.segments[1]??``))}case`hidden`:{if(p!==`PUT`&&p!==`DELETE`)throw notAllowed();let e=collectionFor(m.segments[0]??``);return jsonWithCors(await o.setHidden(e,n,i.requireSession(v),m.segments[1]??``,p===`PUT`))}case`reports`:{let t=i.requireSession(v);return requireExpectedPublisher(e,t,!1),jsonWithCors(await o.listReports(collectionFor(m.segments[0]??``),e,n,t))}case`resolveReport`:return t.queryParams(d,[]),jsonWithCors(await o.resolveReport(collectionFor(m.segments[0]??``),n,i.requireSession(v),m.segments[1]??``));case`modLog`:{let t=i.requireSession(v);return requireExpectedPublisher(e,t,!1),jsonWithCors(await o.listModerationLog(e,n,t))}case`publisherErase`:if(p!==`DELETE`)throw notAllowed();return jsonWithCors(await o.erasePublisher(n,i.requireSession(v),m.segments[0]??``));case`accountErase`:return t.queryParams(d,[]),jsonWithCors(await o.deleteAccountProfile(n,i.requireSession(v)));case`me`:if(p===`GET`)return jsonWithCors(o.getMe(v));if(p===`POST`)return jsonWithCors(await o.registerMe(e,n,i.requireSession(v)));if(p===`PUT`)return jsonWithCors(await o.renameMe(e,n,i.requireSession(v)));if(p===`DELETE`)return jsonWithCors(await o.deleteProfile(n,i.requireSession(v)));throw notAllowed();case`mePublications`:case`meLikes`:case`meReports`:{let r=i.requireSession(v);if(requireExpectedPublisher(e,r,!1),m.id===`mePublications`){let e=t.queryParams(d,[`collection`]).get(`collection`);if(e===null)throw t.badRequest();let i=u.get(e);if(i===void 0)throw t.badRequest();return jsonWithCors(await o.myPublications(i,n,r))}return jsonWithCors(await(m.id===`meReports`?o.myReports(e,n,r):o.myLikes(e,n,r)))}default:throw notAllowed()}}let d=new Set,emit=e=>{if(d.size!==0)for(let t of d)try{t(e)}catch{}};return{async fetch(r,i,o){let s=crypto.randomUUID(),c=routeLabel(new URL(r.url).pathname),l=Date.now();try{let t=await handle(r,i,o),n;return t.status===503&&c===`/health`&&(n={kind:e.archiveHealthSchema.parse(await t.clone().json()).reason===`database-unavailable`?`database`:`schema`}),emit({code:t.ok?`ok`:`unavailable`,ms:Date.now()-l,requestId:s,route:c,status:t.status,type:`request`,...n===void 0?{}:{diagnostic:n}}),t}catch(e){let o=t.toErrorResponse(e,s);emit({code:e instanceof t.ApiError?e.code:`internal`,diagnostic:e instanceof t.ApiError?e.diagnostic:{kind:e instanceof n.ArchiveDerivationError?`collection`:`internal`},ms:Date.now()-l,requestId:s,route:c,status:o.status,type:`request`});try{return withCors(o,r,a.apiConfig(i))}catch{return o}}},async scheduled(e,t,n){try{let e=Date.now(),n=await t.DB.batch([t.DB.prepare(r.SQL.expireRequests).bind(e),t.DB.prepare(r.SQL.expireRevocations).bind(e)]);emit({removed:n.reduce((e,t)=>e+(t.meta?.changes??0),0),status:`ok`,type:`scheduled`})}catch(e){throw emit({diagnostic:{kind:`database`},status:`failed`,type:`scheduled`}),e}},tap(e,t){let n=t?.signal;if(n?.aborted)return()=>{};let off=()=>{d.delete(e),n?.removeEventListener(`abort`,off)};return d.add(e),n?.addEventListener(`abort`,off,{once:!0}),off}}}exports.createArchiveWorker=createArchiveWorker;
+const e=require("../contract.cjs"),t=require("../errors.cjs"),n=require("./auth.cjs"),r=require("./env.cjs"),i=require("./http.cjs"),a=require("./publications.cjs"),o=require("./sql.cjs");var s=[{id:`accountErase`,label:`/me/account`,methods:[`DELETE`],pattern:/^\/api\/v1\/me\/account$/},{id:`health`,label:`/health`,methods:[`GET`],pattern:/^\/api\/v1\/health$/},{id:`signOut`,label:`/sign-out`,methods:[`POST`],pattern:/^\/api\/v1\/sign-out$/},{id:`resolveReport`,label:`/collections/:collection/reports/:id/resolved`,methods:[`PUT`],pattern:/^\/api\/v1\/collections\/([a-z0-9-]+)\/reports\/([0-9a-f-]{36})\/resolved$/i},{id:`meta`,label:`/collections/:collection`,methods:[`GET`],pattern:/^\/api\/v1\/collections\/([a-z0-9-]+)$/},{id:`reports`,label:`/collections/:collection/reports`,methods:[`GET`],pattern:/^\/api\/v1\/collections\/([a-z0-9-]+)\/reports$/},{id:`entries`,label:`/collections/:collection/entries`,methods:[`GET`,`POST`],pattern:/^\/api\/v1\/collections\/([a-z0-9-]+)\/entries$/},{id:`entry`,label:`/collections/:collection/entries/:id`,methods:[`GET`,`PUT`,`DELETE`],pattern:/^\/api\/v1\/collections\/([a-z0-9-]+)\/entries\/([0-9a-f-]{36})$/i},{id:`like`,label:`/collections/:collection/entries/:id/like`,methods:[`PUT`,`DELETE`],pattern:/^\/api\/v1\/collections\/([a-z0-9-]+)\/entries\/([0-9a-f-]{36})\/like$/i},{id:`report`,label:`/collections/:collection/entries/:id/report`,methods:[`POST`],pattern:/^\/api\/v1\/collections\/([a-z0-9-]+)\/entries\/([0-9a-f-]{36})\/report$/i},{id:`hidden`,label:`/collections/:collection/entries/:id/hidden`,methods:[`PUT`,`DELETE`],pattern:/^\/api\/v1\/collections\/([a-z0-9-]+)\/entries\/([0-9a-f-]{36})\/hidden$/i},{id:`modLog`,label:`/moderation-log`,methods:[`GET`],pattern:/^\/api\/v1\/moderation-log$/},{id:`publisherErase`,label:`/publishers/:id`,methods:[`DELETE`],pattern:/^\/api\/v1\/publishers\/([0-9a-f-]{36})$/i},{id:`me`,label:`/me`,methods:[`GET`,`POST`,`PUT`,`DELETE`],pattern:/^\/api\/v1\/me$/},{id:`mePublications`,label:`/me/publications`,methods:[`GET`],pattern:/^\/api\/v1\/me\/publications$/},{id:`meLikes`,label:`/me/likes`,methods:[`GET`],pattern:/^\/api\/v1\/me\/likes$/},{id:`meReports`,label:`/me/reports`,methods:[`GET`],pattern:/^\/api\/v1\/me\/reports$/}],matchRoute=e=>{for(let t of s){let n=e.match(t.pattern);if(n)return{id:t.id,label:t.label,methods:t.methods,segments:n.slice(1)}}return null},routeLabel=e=>matchRoute(e)?.label??`unknown`,c=/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i,l=new Set([`entry`,`like`,`report`,`hidden`,`resolveReport`]),notAllowed=()=>new i.ApiError(405,`method-not-allowed`,`That method is not supported here.`),u=new WeakMap,rateLimitHash=async(e,t)=>{let n=u.get(e);n===void 0&&(n=crypto.subtle.importKey(`raw`,new TextEncoder().encode(e.rateLimitPepper),{hash:`SHA-256`,name:`HMAC`},!1,[`sign`]),u.set(e,n));let r=await crypto.subtle.sign(`HMAC`,await n,new TextEncoder().encode(t));return[...new Uint8Array(r)].map(e=>e.toString(16).padStart(2,`0`)).join(``)},d=60;async function readLimit(e,t,n){let r=n.headers.get(`cf-connecting-ip`)??(e.appEnv===`local`?`127.0.0.1`:null);if(r===null)throw new i.ApiError(503,`unavailable`,`The service is temporarily unavailable.`);let{success:a}=await t.READ_LIMIT.limit({key:await rateLimitHash(e,r)});if(!a)throw new i.ApiError(429,`rate-limited`,`Too many requests. Try again later.`,{retryAfterSeconds:d})}async function writeLimit(e,t,n,r){let{success:a}=await t.WRITE_LIMIT.limit({key:await rateLimitHash(e,JSON.stringify([n,r]))});if(!a)throw new i.ApiError(429,`rate-limited`,`Too many requests. Try again later.`,{retryAfterSeconds:d})}async function cachedPublicGet(t,n,r,i){if(t.headers.get(`cookie`)!==null||t.headers.get(`authorization`)!==null)return r();let a=new URL(t.url);a.search=new URLSearchParams([...a.searchParams.entries()].sort(([e],[t])=>e<t?-1:+(e>t))).toString();let o=caches.default,s=new Request(a.toString(),{method:`GET`}),c=await o.match(s).catch(()=>{i()});if(c)return c;let l=await r();return l.headers.set(`cache-control`,`public, max-age=${e.ARCHIVE_LIMITS.publicCacheSeconds}, s-maxage=${e.ARCHIVE_LIMITS.publicCacheSeconds}`),n.waitUntil(o.put(s,l.clone()).catch(i)),l}var withCors=(e,t,n)=>{let r=i.corsHeaders(t,n);if(Object.keys(r).length===0)return e;let a=new Response(e.body,e);for(let[e,t]of Object.entries(r))a.headers.set(e,t);return a};function requireExpectedPublisher(t,n,r){if(r||n.publisher===null)return;let a=t.headers.get(e.PUBLISHER_HEADER);if(a===null||!c.test(a))throw new i.ApiError(400,`bad-request`,`The request is not valid.`);if(a!==n.publisher.id)throw new i.ApiError(409,`publisher-changed`,`The signed-in publisher changed since this request was prepared.`)}function createArchiveWorker(s){let u=new Map;for(let e of s){if(u.has(e.name))throw new t.ArchiveDefinitionError(`Duplicate archive collection: ${e.name}`);u.set(e.name,e)}let collectionFor=e=>{let t=u.get(e);if(t===void 0)throw new i.ApiError(404,`not-found`,`No such route.`);return t};async function handle(e,t,o){let s=r.apiConfig(t),d=new URL(e.url),{pathname:f}=d,p=e.method;if(!f.startsWith(`/api/v1/`))throw new i.ApiError(404,`not-found`,`No such route.`);if(p===`OPTIONS`)return i.preflight(e,s);let m=matchRoute(f);if(m===null)throw new i.ApiError(404,`not-found`,`No such route.`);if(!m.methods.includes(p))throw notAllowed();if(l.has(m.id)&&!c.test(m.segments[1]??``))throw i.badRequest();if(m.id===`health`)return withCors(await a.healthJson(s,t),e,s);m.id===`reports`&&i.queryParams(d,[`cursor`,`limit`,`status`]),await readLimit(s,t,e);let h=p!==`GET`&&p!==`HEAD`&&p!==`OPTIONS`;h&&i.requireMutationGuard(e,s);let g=p===`GET`&&(m.id===`meta`||m.id===`entries`||m.id===`entry`),_=m.id===`signOut`&&p===`POST`,v=g||_?null:await n.verifySession(e,s,t,m.id===`accountErase`);if(h){if(_)return withCors(i.json(200,{ok:!0},{"cache-control":`no-store`,"set-cookie":i.expiredSessionCookie(s.appEnv===`production`)}),e,s);let r=n.requireSession(v);requireExpectedPublisher(e,r,m.id===`me`&&p===`POST`),await writeLimit(s,t,r.subject.issuer,r.subject.subject)}let jsonWithCors=t=>withCors(t,e,s);switch(m.id){case`meta`:return i.queryParams(d,[]),jsonWithCors(a.collectionMeta(collectionFor(m.segments[0]??``)));case`entries`:{let r=collectionFor(m.segments[0]??``);if(p===`GET`)return jsonWithCors(await cachedPublicGet(e,o,()=>a.listEntries(r,e,t),()=>emit({diagnostic:{kind:`cache`},type:`cache-error`})));if(p===`POST`)return jsonWithCors(await a.publishEntry(r,e,t,s,n.requireSession(v)));throw notAllowed()}case`entry`:{let r=collectionFor(m.segments[0]??``),o=m.segments[1]??``;if(p===`GET`)return i.queryParams(d,[]),jsonWithCors(await a.getEntry(r,t,o));if(p===`PUT`)return jsonWithCors(await a.updateEntry(r,e,t,s,n.requireSession(v),o));if(p===`DELETE`)return jsonWithCors(await a.deleteEntry(r,t,n.requireSession(v),o));throw notAllowed()}case`like`:{let e=collectionFor(m.segments[0]??``),r=m.segments[1]??``;if(p===`PUT`)return jsonWithCors(await a.setLike(e,t,s,n.requireSession(v),r,!0));if(p===`DELETE`)return jsonWithCors(await a.setLike(e,t,s,n.requireSession(v),r,!1));throw notAllowed()}case`report`:{if(p!==`POST`)throw notAllowed();let r=collectionFor(m.segments[0]??``);return jsonWithCors(await a.reportEntry(r,e,t,n.requireSession(v),m.segments[1]??``))}case`hidden`:{if(p!==`PUT`&&p!==`DELETE`)throw notAllowed();let e=collectionFor(m.segments[0]??``);return jsonWithCors(await a.setHidden(e,t,n.requireSession(v),m.segments[1]??``,p===`PUT`))}case`reports`:{let r=n.requireSession(v);return requireExpectedPublisher(e,r,!1),jsonWithCors(await a.listReports(collectionFor(m.segments[0]??``),e,t,r))}case`resolveReport`:return i.queryParams(d,[]),jsonWithCors(await a.resolveReport(collectionFor(m.segments[0]??``),t,n.requireSession(v),m.segments[1]??``));case`modLog`:{let r=n.requireSession(v);return requireExpectedPublisher(e,r,!1),jsonWithCors(await a.listModerationLog(e,t,r))}case`publisherErase`:if(p!==`DELETE`)throw notAllowed();return jsonWithCors(await a.erasePublisher(t,n.requireSession(v),m.segments[0]??``));case`accountErase`:return i.queryParams(d,[]),jsonWithCors(await a.deleteAccountProfile(t,n.requireSession(v)));case`me`:if(p===`GET`)return jsonWithCors(a.getMe(v));if(p===`POST`)return jsonWithCors(await a.registerMe(e,t,n.requireSession(v)));if(p===`PUT`)return jsonWithCors(await a.renameMe(e,t,n.requireSession(v)));if(p===`DELETE`)return jsonWithCors(await a.deleteProfile(t,n.requireSession(v)));throw notAllowed();case`mePublications`:case`meLikes`:case`meReports`:{let r=n.requireSession(v);if(requireExpectedPublisher(e,r,!1),m.id===`mePublications`){let e=i.queryParams(d,[`collection`]).get(`collection`);if(e===null)throw i.badRequest();let n=u.get(e);if(n===void 0)throw i.badRequest();return jsonWithCors(await a.myPublications(n,t,r))}return jsonWithCors(await(m.id===`meReports`?a.myReports(e,t,r):a.myLikes(e,t,r)))}default:throw notAllowed()}}let d=new Set,emit=e=>{if(d.size!==0)for(let t of d)try{t(e)}catch{}};return{async fetch(n,a,o){let s=crypto.randomUUID(),c=routeLabel(new URL(n.url).pathname),l=Date.now();try{let t=await handle(n,a,o),r;return t.status===503&&c===`/health`&&(r={kind:e.archiveHealthSchema.parse(await t.clone().json()).reason===`database-unavailable`?`database`:`schema`}),emit({code:t.ok?`ok`:`unavailable`,ms:Date.now()-l,requestId:s,route:c,status:t.status,type:`request`,...r===void 0?{}:{diagnostic:r}}),t}catch(e){let o=i.toErrorResponse(e,s);emit({code:e instanceof i.ApiError?e.code:`internal`,diagnostic:e instanceof i.ApiError?e.diagnostic:{kind:e instanceof t.ArchiveDerivationError?`collection`:`internal`},ms:Date.now()-l,requestId:s,route:c,status:o.status,type:`request`});try{return withCors(o,n,r.apiConfig(a))}catch{return o}}},async scheduled(e,t,n){try{let e=Date.now(),n=await t.DB.batch([t.DB.prepare(o.SQL.expireRequests).bind(e),t.DB.prepare(o.SQL.expireRevocations).bind(e)]);emit({removed:n.reduce((e,t)=>e+(t.meta?.changes??0),0),status:`ok`,type:`scheduled`})}catch(e){throw emit({diagnostic:{kind:`database`},status:`failed`,type:`scheduled`}),e}},tap(e,t){let n=t?.signal;if(n?.aborted)return()=>{};let off=()=>{d.delete(e),n?.removeEventListener(`abort`,off)};return d.add(e),n?.addEventListener(`abort`,off,{once:!0}),off}}}exports.createArchiveWorker=createArchiveWorker;
 //# sourceMappingURL=worker.cjs.map