@wildo-ai/saas-backend-lib 1.1.12 → 1.1.13

package/dist/esm/compliance/electronic-signatures/signature-request-evidence-files.backend.js

@@ -20,8 +20,17 @@ var __param = (this && this.__param) || function (paramIndex, decorator) {
  *
  * The order is the approval seal relay's: write the files UNLINKED, move the request (the move names them), then link
  * them. A move that is lost (another re-read moved the request first) discards the files at once; they are unlinked in
- * any case, so the files cleanup removes them. A link that fails leaves the request naming a file the cleanup will
- * remove: logged at error, as the relay does for its manifested copy.
+ * any case, so the files cleanup removes them.
+ *
+ * A link that does not happen at once is NOT lost. The signed document is scanned where a scanner runs, and a file is
+ * not linkable while its scan is in flight (`FILE_LINKABLE_STATUSES` leaves `SCANNING` out), so with a scanner the first
+ * link of a signed document is refused nearly every time. The link therefore answers what happened
+ * ({@link SignatureRequestEvidenceLinkOutcome}) instead of retrying blindly, and the signature-request poll links every
+ * evidence file of a recently SIGNED request that is not linked yet (`linkPendingEvidence`), for longer than the files
+ * cleanup waits before it removes an unlinked file. Only a file that can never be this request's (gone, infected,
+ * quarantined, failed, or linked elsewhere) is LOST, and that is logged at error and counted.
+ * (Until 2026-11-12 the link was tried three times in a row and then logged as lost: with a scanner, every signed
+ * document was lost.)
  *
  * Scanning: the signed document's bytes come from the vendor. Where the application runs a scanner, they are scanned
  * before anything may serve them; where it runs none, they are kept unscanned rather than not kept, because the evidence
@@ -29,12 +38,37 @@ var __param = (this && this.__param) || function (paramIndex, decorator) {
  * (a signature, its field and appearance, a DSS) before anything is written.
  */
 import { inject, injectable, optional } from 'inversify';
-import { CORE_APP_ROLES, CoreResourceOperation, CoreResourceType, FileDerivationRole, ResourcePrimaryScope } from '@wildo-ai/saas-models';
+import { CORE_APP_ROLES, CoreResourceOperation, CoreResourceType, FILE_LINKABLE_STATUSES, FileDerivationRole, FileStatus, ResourcePrimaryScope } from '@wildo-ai/saas-models';
 import { SAAS_SERVICE_TYPES } from '../../inject/models/service-types.js';
 import { ServerProducedFileScan, writeServerProducedFile } from '../../files/services/server-produced-file-writer.backend.js';
 import { describeCaughtError } from '../../errors/utils/error-log-level-classification.backend.utils.js';
-/** How many times linking an evidence file to its SIGNED request is tried before it is logged as lost. */
-export const EVIDENCE_LINK_ATTEMPTS = 3;
+/**
+ * What one link of an evidence file to its SIGNED request did. Total over the file's states: the caller decides from it
+ * whether a later poll must try again.
+ */
+export var SignatureRequestEvidenceLinkOutcome;
+(function (SignatureRequestEvidenceLinkOutcome) {
+    /** Linked now. */
+    SignatureRequestEvidenceLinkOutcome["LINKED"] = "linked";
+    /** Already linked to this request and field (a later poll's link, or an earlier one that succeeded). */
+    SignatureRequestEvidenceLinkOutcome["ALREADY_LINKED"] = "already_linked";
+    /** Not linkable yet: its scan (or its upload) has not ended. A later poll links it. */
+    SignatureRequestEvidenceLinkOutcome["NOT_YET_LINKABLE"] = "not_yet_linkable";
+    /** The link failed for a reason that may pass (the store could not be read or written). A later poll tries again. */
+    SignatureRequestEvidenceLinkOutcome["FAILED"] = "failed";
+    /**
+     * It can never be this request's: gone, or in a state no link leaves (infected, quarantined, failed, deleted, orphaned),
+     * or linked to another record. The request names evidence that is not kept.
+     */
+    SignatureRequestEvidenceLinkOutcome["LOST"] = "lost";
+})(SignatureRequestEvidenceLinkOutcome || (SignatureRequestEvidenceLinkOutcome = {}));
+/** The outcomes a later poll must link again. */
+export const SIGNATURE_EVIDENCE_LINK_RETRIED = new Set([
+    SignatureRequestEvidenceLinkOutcome.NOT_YET_LINKABLE,
+    SignatureRequestEvidenceLinkOutcome.FAILED,
+]);
+/** File states whose link is only waiting: a scan in flight, an upload not finished. */
+const EVIDENCE_FILE_STATES_AWAITING_LINK = new Set([FileStatus.SCANNING, FileStatus.PENDING]);
 /** The request's two evidence fields. */
 export var SignatureRequestEvidenceField;
 (function (SignatureRequestEvidenceField) {
@@ -49,12 +83,14 @@ let SignatureRequestEvidenceFilesBackendService = class SignatureRequestEvidence
     fileWriter;
     files;
     contexts;
+    repositories;
     resources;
-    constructor(logger, fileWriter, files, contexts, resources) {
+    constructor(logger, fileWriter, files, contexts, repositories, resources) {
         this.logger = logger;
         this.fileWriter = fileWriter;
         this.files = files;
         this.contexts = contexts;
+        this.repositories = repositories;
         this.resources = resources;
     }
     async write(input) {
@@ -76,21 +112,29 @@ let SignatureRequestEvidenceFilesBackendService = class SignatureRequestEvidence
         return written.fileId;
     }
     async link(fileId, request, field) {
-        // A few attempts: a request already SIGNED names this file, and an unlinked file is the cleanup's, so a link that
-        // fails for good loses evidence that cannot be produced again (stated residual: no later run re-links it).
-        let lastError;
-        for (let attempt = 0; attempt < EVIDENCE_LINK_ATTEMPTS; attempt += 1) {
-            try {
-                await this.files.linkFileToResource(fileId, CoreResourceType.SIGNATURE_REQUESTS, String(request._id), field, await this.internalContext(), undefined, request);
-                return;
-            }
-            catch (error) {
-                lastError = error;
+        const requestId = String(request._id);
+        try {
+            const file = await this.repositories.readUnscopedByKey(CoreResourceType.FILES, { _id: fileId });
+            if (!file?.status)
+                return SignatureRequestEvidenceLinkOutcome.LOST;
+            if (file.status === FileStatus.LINKED) {
+                const ours = file.linkedResourceType === CoreResourceType.SIGNATURE_REQUESTS && String(file.linkedResourceId) === requestId && file.linkedFieldName === field;
+                return ours ? SignatureRequestEvidenceLinkOutcome.ALREADY_LINKED : SignatureRequestEvidenceLinkOutcome.LOST;
             }
+            if (EVIDENCE_FILE_STATES_AWAITING_LINK.has(file.status))
+                return SignatureRequestEvidenceLinkOutcome.NOT_YET_LINKABLE;
+            if (!FILE_LINKABLE_STATUSES.has(file.status))
+                return SignatureRequestEvidenceLinkOutcome.LOST;
+            await this.files.linkFileToResource(fileId, CoreResourceType.SIGNATURE_REQUESTS, requestId, field, await this.internalContext(), undefined, request);
+            return SignatureRequestEvidenceLinkOutcome.LINKED;
+        }
+        catch (error) {
+            // A file whose scan began between the read and the link, or a store that did not answer: the next poll tries again.
+            this.logger.warn('[signature-requests] An evidence file could not be linked to its signature request now; the poll tries again', {
+                signatureRequestId: requestId, fileId, field, error: describeCaughtError(error),
+            });
+            return SignatureRequestEvidenceLinkOutcome.FAILED;
         }
-        this.logger.error('[signature-requests] An evidence file could not be linked to its signature request; the files cleanup will remove it and the request will name a file that is gone', {
-            signatureRequestId: String(request._id), fileId, field, attempts: EVIDENCE_LINK_ATTEMPTS, error: describeCaughtError(lastError),
-        });
     }
     async discard(fileId) {
         try {
@@ -118,9 +162,10 @@ SignatureRequestEvidenceFilesBackendService = __decorate([
     __param(1, inject(SAAS_SERVICE_TYPES.ServerProducedFileWriterDependencies)),
     __param(2, inject(SAAS_SERVICE_TYPES.FilesBackendService)),
     __param(3, inject(SAAS_SERVICE_TYPES.ExecutionContextCreatorBackendService)),
-    __param(4, inject(SAAS_SERVICE_TYPES.ResourceRegistryService)),
-    __param(4, optional()),
-    __metadata("design:paramtypes", [Object, Object, Object, Object, Object])
+    __param(4, inject(SAAS_SERVICE_TYPES.RepositoriesRegistryHandlerService)),
+    __param(5, inject(SAAS_SERVICE_TYPES.ResourceRegistryService)),
+    __param(5, optional()),
+    __metadata("design:paramtypes", [Object, Object, Object, Object, Object, Object])
 ], SignatureRequestEvidenceFilesBackendService);
 export { SignatureRequestEvidenceFilesBackendService };
 //# sourceMappingURL=signature-request-evidence-files.backend.js.map

package/dist/esm/compliance/electronic-signatures/signature-request-evidence-files.backend.js.map

@@ -1 +1 @@
-{"version":3,"file":"signature-request-evidence-files.backend.js","sourceRoot":"","sources":["../../../../src/compliance/electronic-signatures/signature-request-evidence-files.backend.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACzD,OAAO,EAAE,cAAc,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,oBAAoB,EAAqB,MAAM,uBAAuB,CAAC;AAE7J,OAAO,EAAE,kBAAkB,EAAE,MAAM,gDAAgD,CAAC;AAKpF,OAAO,EAAE,sBAAsB,EAAE,uBAAuB,EAA6C,MAAM,uEAAuE,CAAC;AACnL,OAAO,EAAE,mBAAmB,EAAE,MAAM,8EAA8E,CAAC;AAEnH,0GAA0G;AAC1G,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC;AAExC,yCAAyC;AACzC,MAAM,CAAN,IAAY,6BAKX;AALD,WAAY,6BAA6B;IACvC,+CAA+C;IAC/C,mEAAkC,CAAA;IAClC,0CAA0C;IAC1C,2EAA0C,CAAA;AAC5C,CAAC,EALW,6BAA6B,KAA7B,6BAA6B,QAKxC;AAkBD,0FAA0F;AAEnF,IAAM,2CAA2C,GAAjD,MAAM,2CAA2C;IAEA;IAC8B;IACjB;IACkB;IACF;IALnF,YACsD,MAA6C,EACf,UAAgD,EACjE,KAA6E,EAC3D,QAAmF,EACrF,SAAmF;QAJhH,WAAM,GAAN,MAAM,CAAuC;QACf,eAAU,GAAV,UAAU,CAAsC;QACjE,UAAK,GAAL,KAAK,CAAwE;QAC3D,aAAQ,GAAR,QAAQ,CAA2E;QACrF,cAAS,GAAT,SAAS,CAA0E;IACnK,CAAC;IAEJ,KAAK,CAAC,KAAK,CAAC,KAA4D;QACtE,MAAM,cAAc,GAAG,KAAK,CAAC,KAAK,KAAK,6BAA6B,CAAC,eAAe,CAAC;QACrF,MAAM,cAAc,GAAG,OAAO,KAAK,CAAC,OAAO,CAAC,cAAc,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;QACnH,MAAM,OAAO,GAAG,MAAM,uBAAuB,CAAC,IAAI,CAAC,UAAU,EAAE;YAC7D,YAAY,EAAE,gBAAgB,CAAC,kBAAkC;YACjE,SAAS,EAAE,KAAK,CAAC,KAAK;YACtB,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC;YAC/B,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,aAAa,EAAE,KAAK,CAAC,OAAO;YAC5B,gBAAgB,EAAE,MAAM,IAAI,CAAC,eAAe,EAAE;YAC9C,6GAA6G;YAC7G,IAAI,EAAE,cAAc,IAAI,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,sBAAsB,CAAC,QAAQ,CAAC,CAAC,CAAC,sBAAsB,CAAC,IAAI;YACpH,GAAG,CAAC,cAAc,IAAI,cAAc,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,EAAE,MAAM,EAAE,cAAc,EAAE,IAAI,EAAE,kBAAkB,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrI,WAAW,EAAE,cAAc,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,+BAA+B;SACzF,CAAC,CAAC;QACH,OAAO,OAAO,CAAC,MAAM,CAAC;IACxB,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,MAAc,EAAE,OAA0C,EAAE,KAAoC;QACzG,kHAAkH;QAClH,2GAA2G;QAC3G,IAAI,SAAkB,CAAC;QACvB,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,sBAAsB,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;YACrE,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,MAAM,EAAE,gBAAgB,CAAC,kBAAkC,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,MAAM,IAAI,CAAC,eAAe,EAAE,EAAE,SAAS,EAAE,OAAkC,CAAC,CAAC;gBAC1M,OAAO;YACT,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,SAAS,GAAG,KAAK,CAAC;YACpB,CAAC;QACH,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,oKAAoK,EAAE;YACtL,kBAAkB,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,sBAAsB,EAAE,KAAK,EAAE,mBAAmB,CAAC,SAAS,CAAC;SAChI,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,MAAc;QAC1B,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,MAAM,EAAE,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC,CAAC;QAC5E,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,6IAA6I,EAAE;gBAC9J,MAAM,EAAE,KAAK,EAAE,mBAAmB,CAAC,KAAK,CAAC;aAC1C,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,uGAAuG;IAC/F,eAAe;QACrB,OAAO,IAAI,CAAC,QAAQ,CAAC,0BAA0B,CAAC;YAC9C,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,8BAA8B,CAAC,gBAAgB,CAAC,kBAAkB,EAAE,qBAAqB,CAAC,IAAI,CAAC;YAC1H,+BAA+B,EAAE,IAAI,GAAG,EAAE;YAC1C,YAAY,EAAE,IAAI;YAClB,cAAc,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC,EAAE,mBAAmB,EAAE,oBAAoB,CAAC,WAAW,EAAE,CAAC;SAClH,CAAC,CAAC;IACd,CAAC;CACF,CAAA;AAhEY,2CAA2C;IADvD,UAAU,EAAE;IAGR,WAAA,MAAM,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAA;IACjC,WAAA,MAAM,CAAC,kBAAkB,CAAC,oCAAoC,CAAC,CAAA;IAC/D,WAAA,MAAM,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,CAAA;IAC9C,WAAA,MAAM,CAAC,kBAAkB,CAAC,qCAAqC,CAAC,CAAA;IAChE,WAAA,MAAM,CAAC,kBAAkB,CAAC,uBAAuB,CAAC,CAAA;IAAE,WAAA,QAAQ,EAAE,CAAA;;GANtD,2CAA2C,CAgEvD","sourcesContent":["/**\n * # Where a SIGNED request keeps its evidence (#2293)\n *\n * Two files of the request's own, written when the signed document validates and named in the SAME write that makes the\n * request SIGNED: the signed document the vendor returned (`signedDocument`, derived from the original as a\n * `VENDOR_SIGNED_COPY`) and the validation's evidence (`validationEvidence`, JSON). They go with the request, so with the\n * deliverable's record (#2924), and its holds keep them (#2902).\n *\n * The order is the approval seal relay's: write the files UNLINKED, move the request (the move names them), then link\n * them. A move that is lost (another re-read moved the request first) discards the files at once; they are unlinked in\n * any case, so the files cleanup removes them. A link that fails leaves the request naming a file the cleanup will\n * remove: logged at error, as the relay does for its manifested copy.\n *\n * Scanning: the signed document's bytes come from the vendor. Where the application runs a scanner, they are scanned\n * before anything may serve them; where it runs none, they are kept unscanned rather than not kept, because the evidence\n * of a signature cannot be produced again. What the vendor appended was confined by the structure check of the validator\n * (a signature, its field and appearance, a DSS) before anything is written.\n */\nimport { inject, injectable, optional } from 'inversify';\nimport { CORE_APP_ROLES, CoreResourceOperation, CoreResourceType, FileDerivationRole, ResourcePrimaryScope, type ResourceType } from '@wildo-ai/saas-models';\n\nimport { SAAS_SERVICE_TYPES } from '~wildo-backend-lib/inject/models/service-types';\nimport type { LoggerService } from '~wildo-backend-lib/monitoring/logger/services/logger.service';\nimport type { FilesBackendService } from '~wildo-backend-lib/files/services/files.backend.service';\nimport type { ExecutionContextCreatorBackendService } from '~wildo-backend-lib/runtime/services/execution-context-creator.backend.service';\nimport type { ResourcesRegistryBackendService } from '~wildo-backend-lib/resources/services/resources-registry.backend.service';\nimport { ServerProducedFileScan, writeServerProducedFile, type ServerProducedFileWriterDependencies } from '~wildo-backend-lib/files/services/server-produced-file-writer.backend';\nimport { describeCaughtError } from '~wildo-backend-lib/errors/utils/error-log-level-classification.backend.utils';\n\n/** How many times linking an evidence file to its SIGNED request is tried before it is logged as lost. */\nexport const EVIDENCE_LINK_ATTEMPTS = 3;\n\n/** The request's two evidence fields. */\nexport enum SignatureRequestEvidenceField {\n  /** The signed document the vendor returned. */\n  SIGNED_DOCUMENT = 'signedDocument',\n  /** The validation's evidence, as JSON. */\n  VALIDATION_EVIDENCE = 'validationEvidence',\n}\n\n/** What the signature-request service asks of the evidence store. A port, so a unit test holds its files in memory. */\nexport interface SignatureRequestEvidenceFiles {\n  /** Write one evidence file of the request, unlinked; answers its id. Throws when it cannot be written. */\n  write(input: {\n    readonly request: Readonly<Record<string, unknown>>;\n    readonly field: SignatureRequestEvidenceField;\n    readonly bytes: Uint8Array;\n    readonly mimeType: string;\n    readonly filename: string;\n  }): Promise<string>;\n  /** Link a file the request names to it, so the teardown and the holds find it. Never throws. */\n  link(fileId: string, request: Readonly<Record<string, unknown>>, field: SignatureRequestEvidenceField): Promise<void>;\n  /** Delete a file whose request move was lost. Never throws: an unlinked file is the cleanup's otherwise. */\n  discard(fileId: string): Promise<void>;\n}\n\n/** The engine's evidence store: the server-produced file writer and the files service. */\n@injectable()\nexport class SignatureRequestEvidenceFilesBackendService implements SignatureRequestEvidenceFiles {\n  constructor(\n    @inject(SAAS_SERVICE_TYPES.Logger) private readonly logger: Pick<LoggerService, 'error' | 'warn'>,\n    @inject(SAAS_SERVICE_TYPES.ServerProducedFileWriterDependencies) private readonly fileWriter: ServerProducedFileWriterDependencies,\n    @inject(SAAS_SERVICE_TYPES.FilesBackendService) private readonly files: Pick<FilesBackendService, 'linkFileToResource' | 'deleteDetachedFile'>,\n    @inject(SAAS_SERVICE_TYPES.ExecutionContextCreatorBackendService) private readonly contexts: Pick<ExecutionContextCreatorBackendService, 'createForInternalOperation'>,\n    @inject(SAAS_SERVICE_TYPES.ResourceRegistryService) @optional() private readonly resources?: Pick<ResourcesRegistryBackendService, 'getServiceOperationPathDefault'>,\n  ) {}\n\n  async write(input: Parameters<SignatureRequestEvidenceFiles['write']>[0]): Promise<string> {\n    const signedDocument = input.field === SignatureRequestEvidenceField.SIGNED_DOCUMENT;\n    const originalFileId = typeof input.request.originalFileId === 'string' ? input.request.originalFileId : undefined;\n    const written = await writeServerProducedFile(this.fileWriter, {\n      resourceType: CoreResourceType.SIGNATURE_REQUESTS as ResourceType,\n      fieldName: input.field,\n      bytes: Buffer.from(input.bytes),\n      mimeType: input.mimeType,\n      filename: input.filename,\n      scopeOwnerRow: input.request,\n      executionContext: await this.internalContext(),\n      // The vendor's bytes are scanned where a scanner runs; the engine's own JSON is not (see the module header).\n      scan: signedDocument && this.fileWriter.fileScanning ? ServerProducedFileScan.REQUIRED : ServerProducedFileScan.NONE,\n      ...(signedDocument && originalFileId ? { derivedFrom: { fileId: originalFileId, role: FileDerivationRole.VENDOR_SIGNED_COPY } } : {}),\n      describedAs: signedDocument ? 'vendor-signed document' : 'signature validation evidence',\n    });\n    return written.fileId;\n  }\n\n  async link(fileId: string, request: Readonly<Record<string, unknown>>, field: SignatureRequestEvidenceField): Promise<void> {\n    // A few attempts: a request already SIGNED names this file, and an unlinked file is the cleanup's, so a link that\n    // fails for good loses evidence that cannot be produced again (stated residual: no later run re-links it).\n    let lastError: unknown;\n    for (let attempt = 0; attempt < EVIDENCE_LINK_ATTEMPTS; attempt += 1) {\n      try {\n        await this.files.linkFileToResource(fileId, CoreResourceType.SIGNATURE_REQUESTS as ResourceType, String(request._id), field, await this.internalContext(), undefined, request as Record<string, unknown>);\n        return;\n      } catch (error) {\n        lastError = error;\n      }\n    }\n    this.logger.error('[signature-requests] An evidence file could not be linked to its signature request; the files cleanup will remove it and the request will name a file that is gone', {\n      signatureRequestId: String(request._id), fileId, field, attempts: EVIDENCE_LINK_ATTEMPTS, error: describeCaughtError(lastError),\n    });\n  }\n\n  async discard(fileId: string): Promise<void> {\n    try {\n      await this.files.deleteDetachedFile(fileId, await this.internalContext());\n    } catch (error) {\n      this.logger.warn('[signature-requests] An evidence file whose request move was lost could not be deleted now; it is unlinked, so the files cleanup removes it', {\n        fileId, error: describeCaughtError(error),\n      });\n    }\n  }\n\n  /** The application's own context for these files, as a super-administrator would act (the relay's). */\n  private internalContext() {\n    return this.contexts.createForInternalOperation({\n      operation: this.resources?.getServiceOperationPathDefault(CoreResourceType.SIGNATURE_REQUESTS, CoreResourceOperation.READ),\n      contextResourcesFieldIdentifier: new Map(),\n      initiatorIds: null,\n      initiatorRoles: [{ roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN], relatedPrimaryScope: ResourcePrimaryScope.APPLICATION }],\n    } as never);\n  }\n}\n"]}
+{"version":3,"file":"signature-request-evidence-files.backend.js","sourceRoot":"","sources":["../../../../src/compliance/electronic-signatures/signature-request-evidence-files.backend.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACzD,OAAO,EAAE,cAAc,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,kBAAkB,EAAE,UAAU,EAAE,oBAAoB,EAAqB,MAAM,uBAAuB,CAAC;AAEjM,OAAO,EAAE,kBAAkB,EAAE,MAAM,gDAAgD,CAAC;AAMpF,OAAO,EAAE,sBAAsB,EAAE,uBAAuB,EAA6C,MAAM,uEAAuE,CAAC;AACnL,OAAO,EAAE,mBAAmB,EAAE,MAAM,8EAA8E,CAAC;AAEnH;;;GAGG;AACH,MAAM,CAAN,IAAY,mCAcX;AAdD,WAAY,mCAAmC;IAC7C,kBAAkB;IAClB,wDAAiB,CAAA;IACjB,wGAAwG;IACxG,wEAAiC,CAAA;IACjC,uFAAuF;IACvF,4EAAqC,CAAA;IACrC,qHAAqH;IACrH,wDAAiB,CAAA;IACjB;;;OAGG;IACH,oDAAa,CAAA;AACf,CAAC,EAdW,mCAAmC,KAAnC,mCAAmC,QAc9C;AAED,iDAAiD;AACjD,MAAM,CAAC,MAAM,+BAA+B,GAAqD,IAAI,GAAG,CAAC;IACvG,mCAAmC,CAAC,gBAAgB;IACpD,mCAAmC,CAAC,MAAM;CAC3C,CAAC,CAAC;AAEH,wFAAwF;AACxF,MAAM,kCAAkC,GAA4B,IAAI,GAAG,CAAC,CAAC,UAAU,CAAC,QAAQ,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC;AAEvH,yCAAyC;AACzC,MAAM,CAAN,IAAY,6BAKX;AALD,WAAY,6BAA6B;IACvC,+CAA+C;IAC/C,mEAAkC,CAAA;IAClC,0CAA0C;IAC1C,2EAA0C,CAAA;AAC5C,CAAC,EALW,6BAA6B,KAA7B,6BAA6B,QAKxC;AAkBD,0FAA0F;AAEnF,IAAM,2CAA2C,GAAjD,MAAM,2CAA2C;IAEA;IAC8B;IACjB;IACkB;IAEH;IACC;IAPnF,YACsD,MAAmC,EACL,UAAgD,EACjE,KAA6E,EAC3D,QAAmF,EAEtF,YAAkF,EACjF,SAAmF;QANhH,WAAM,GAAN,MAAM,CAA6B;QACL,eAAU,GAAV,UAAU,CAAsC;QACjE,UAAK,GAAL,KAAK,CAAwE;QAC3D,aAAQ,GAAR,QAAQ,CAA2E;QAEtF,iBAAY,GAAZ,YAAY,CAAsE;QACjF,cAAS,GAAT,SAAS,CAA0E;IACnK,CAAC;IAEJ,KAAK,CAAC,KAAK,CAAC,KAA4D;QACtE,MAAM,cAAc,GAAG,KAAK,CAAC,KAAK,KAAK,6BAA6B,CAAC,eAAe,CAAC;QACrF,MAAM,cAAc,GAAG,OAAO,KAAK,CAAC,OAAO,CAAC,cAAc,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;QACnH,MAAM,OAAO,GAAG,MAAM,uBAAuB,CAAC,IAAI,CAAC,UAAU,EAAE;YAC7D,YAAY,EAAE,gBAAgB,CAAC,kBAAkC;YACjE,SAAS,EAAE,KAAK,CAAC,KAAK;YACtB,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC;YAC/B,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,aAAa,EAAE,KAAK,CAAC,OAAO;YAC5B,gBAAgB,EAAE,MAAM,IAAI,CAAC,eAAe,EAAE;YAC9C,6GAA6G;YAC7G,IAAI,EAAE,cAAc,IAAI,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,sBAAsB,CAAC,QAAQ,CAAC,CAAC,CAAC,sBAAsB,CAAC,IAAI;YACpH,GAAG,CAAC,cAAc,IAAI,cAAc,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,EAAE,MAAM,EAAE,cAAc,EAAE,IAAI,EAAE,kBAAkB,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrI,WAAW,EAAE,cAAc,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,+BAA+B;SACzF,CAAC,CAAC;QACH,OAAO,OAAO,CAAC,MAAM,CAAC;IACxB,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,MAAc,EAAE,OAA0C,EAAE,KAAoC;QACzG,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACtC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,iBAAiB,CACpD,gBAAgB,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,CACxC,CAAC;YACF,IAAI,CAAC,IAAI,EAAE,MAAM;gBAAE,OAAO,mCAAmC,CAAC,IAAI,CAAC;YACnE,IAAI,IAAI,CAAC,MAAM,KAAK,UAAU,CAAC,MAAM,EAAE,CAAC;gBACtC,MAAM,IAAI,GAAG,IAAI,CAAC,kBAAkB,KAAK,gBAAgB,CAAC,kBAAkB,IAAI,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,KAAK,SAAS,IAAI,IAAI,CAAC,eAAe,KAAK,KAAK,CAAC;gBAC9J,OAAO,IAAI,CAAC,CAAC,CAAC,mCAAmC,CAAC,cAAc,CAAC,CAAC,CAAC,mCAAmC,CAAC,IAAI,CAAC;YAC9G,CAAC;YACD,IAAI,kCAAkC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC;gBAAE,OAAO,mCAAmC,CAAC,gBAAgB,CAAC;YACrH,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC;gBAAE,OAAO,mCAAmC,CAAC,IAAI,CAAC;YAC9F,MAAM,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,MAAM,EAAE,gBAAgB,CAAC,kBAAkC,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,IAAI,CAAC,eAAe,EAAE,EAAE,SAAS,EAAE,OAAkC,CAAC,CAAC;YAChM,OAAO,mCAAmC,CAAC,MAAM,CAAC;QACpD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,oHAAoH;YACpH,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,8GAA8G,EAAE;gBAC/H,kBAAkB,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,mBAAmB,CAAC,KAAK,CAAC;aAChF,CAAC,CAAC;YACH,OAAO,mCAAmC,CAAC,MAAM,CAAC;QACpD,CAAC;IACH,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,MAAc;QAC1B,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,MAAM,EAAE,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC,CAAC;QAC5E,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,6IAA6I,EAAE;gBAC9J,MAAM,EAAE,KAAK,EAAE,mBAAmB,CAAC,KAAK,CAAC;aAC1C,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,uGAAuG;IAC/F,eAAe;QACrB,OAAO,IAAI,CAAC,QAAQ,CAAC,0BAA0B,CAAC;YAC9C,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,8BAA8B,CAAC,gBAAgB,CAAC,kBAAkB,EAAE,qBAAqB,CAAC,IAAI,CAAC;YAC1H,+BAA+B,EAAE,IAAI,GAAG,EAAE;YAC1C,YAAY,EAAE,IAAI;YAClB,cAAc,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC,EAAE,mBAAmB,EAAE,oBAAoB,CAAC,WAAW,EAAE,CAAC;SAClH,CAAC,CAAC;IACd,CAAC;CACF,CAAA;AAzEY,2CAA2C;IADvD,UAAU,EAAE;IAGR,WAAA,MAAM,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAA;IACjC,WAAA,MAAM,CAAC,kBAAkB,CAAC,oCAAoC,CAAC,CAAA;IAC/D,WAAA,MAAM,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,CAAA;IAC9C,WAAA,MAAM,CAAC,kBAAkB,CAAC,qCAAqC,CAAC,CAAA;IAEhE,WAAA,MAAM,CAAC,kBAAkB,CAAC,kCAAkC,CAAC,CAAA;IAC7D,WAAA,MAAM,CAAC,kBAAkB,CAAC,uBAAuB,CAAC,CAAA;IAAE,WAAA,QAAQ,EAAE,CAAA;;GARtD,2CAA2C,CAyEvD","sourcesContent":["/**\n * # Where a SIGNED request keeps its evidence (#2293)\n *\n * Two files of the request's own, written when the signed document validates and named in the SAME write that makes the\n * request SIGNED: the signed document the vendor returned (`signedDocument`, derived from the original as a\n * `VENDOR_SIGNED_COPY`) and the validation's evidence (`validationEvidence`, JSON). They go with the request, so with the\n * deliverable's record (#2924), and its holds keep them (#2902).\n *\n * The order is the approval seal relay's: write the files UNLINKED, move the request (the move names them), then link\n * them. A move that is lost (another re-read moved the request first) discards the files at once; they are unlinked in\n * any case, so the files cleanup removes them.\n *\n * A link that does not happen at once is NOT lost. The signed document is scanned where a scanner runs, and a file is\n * not linkable while its scan is in flight (`FILE_LINKABLE_STATUSES` leaves `SCANNING` out), so with a scanner the first\n * link of a signed document is refused nearly every time. The link therefore answers what happened\n * ({@link SignatureRequestEvidenceLinkOutcome}) instead of retrying blindly, and the signature-request poll links every\n * evidence file of a recently SIGNED request that is not linked yet (`linkPendingEvidence`), for longer than the files\n * cleanup waits before it removes an unlinked file. Only a file that can never be this request's (gone, infected,\n * quarantined, failed, or linked elsewhere) is LOST, and that is logged at error and counted.\n * (Until 2026-11-12 the link was tried three times in a row and then logged as lost: with a scanner, every signed\n * document was lost.)\n *\n * Scanning: the signed document's bytes come from the vendor. Where the application runs a scanner, they are scanned\n * before anything may serve them; where it runs none, they are kept unscanned rather than not kept, because the evidence\n * of a signature cannot be produced again. What the vendor appended was confined by the structure check of the validator\n * (a signature, its field and appearance, a DSS) before anything is written.\n */\nimport { inject, injectable, optional } from 'inversify';\nimport { CORE_APP_ROLES, CoreResourceOperation, CoreResourceType, FILE_LINKABLE_STATUSES, FileDerivationRole, FileStatus, ResourcePrimaryScope, type ResourceType } from '@wildo-ai/saas-models';\n\nimport { SAAS_SERVICE_TYPES } from '~wildo-backend-lib/inject/models/service-types';\nimport type { LoggerService } from '~wildo-backend-lib/monitoring/logger/services/logger.service';\nimport type { FilesBackendService } from '~wildo-backend-lib/files/services/files.backend.service';\nimport type { ExecutionContextCreatorBackendService } from '~wildo-backend-lib/runtime/services/execution-context-creator.backend.service';\nimport type { RepositoriesRegistryHandlerBackendService } from '~wildo-backend-lib/base-classes/services/repositories/repositories-registry-handler.backend.service';\nimport type { ResourcesRegistryBackendService } from '~wildo-backend-lib/resources/services/resources-registry.backend.service';\nimport { ServerProducedFileScan, writeServerProducedFile, type ServerProducedFileWriterDependencies } from '~wildo-backend-lib/files/services/server-produced-file-writer.backend';\nimport { describeCaughtError } from '~wildo-backend-lib/errors/utils/error-log-level-classification.backend.utils';\n\n/**\n * What one link of an evidence file to its SIGNED request did. Total over the file's states: the caller decides from it\n * whether a later poll must try again.\n */\nexport enum SignatureRequestEvidenceLinkOutcome {\n  /** Linked now. */\n  LINKED = 'linked',\n  /** Already linked to this request and field (a later poll's link, or an earlier one that succeeded). */\n  ALREADY_LINKED = 'already_linked',\n  /** Not linkable yet: its scan (or its upload) has not ended. A later poll links it. */\n  NOT_YET_LINKABLE = 'not_yet_linkable',\n  /** The link failed for a reason that may pass (the store could not be read or written). A later poll tries again. */\n  FAILED = 'failed',\n  /**\n   * It can never be this request's: gone, or in a state no link leaves (infected, quarantined, failed, deleted, orphaned),\n   * or linked to another record. The request names evidence that is not kept.\n   */\n  LOST = 'lost',\n}\n\n/** The outcomes a later poll must link again. */\nexport const SIGNATURE_EVIDENCE_LINK_RETRIED: ReadonlySet<SignatureRequestEvidenceLinkOutcome> = new Set([\n  SignatureRequestEvidenceLinkOutcome.NOT_YET_LINKABLE,\n  SignatureRequestEvidenceLinkOutcome.FAILED,\n]);\n\n/** File states whose link is only waiting: a scan in flight, an upload not finished. */\nconst EVIDENCE_FILE_STATES_AWAITING_LINK: ReadonlySet<FileStatus> = new Set([FileStatus.SCANNING, FileStatus.PENDING]);\n\n/** The request's two evidence fields. */\nexport enum SignatureRequestEvidenceField {\n  /** The signed document the vendor returned. */\n  SIGNED_DOCUMENT = 'signedDocument',\n  /** The validation's evidence, as JSON. */\n  VALIDATION_EVIDENCE = 'validationEvidence',\n}\n\n/** What the signature-request service asks of the evidence store. A port, so a unit test holds its files in memory. */\nexport interface SignatureRequestEvidenceFiles {\n  /** Write one evidence file of the request, unlinked; answers its id. Throws when it cannot be written. */\n  write(input: {\n    readonly request: Readonly<Record<string, unknown>>;\n    readonly field: SignatureRequestEvidenceField;\n    readonly bytes: Uint8Array;\n    readonly mimeType: string;\n    readonly filename: string;\n  }): Promise<string>;\n  /** Link a file the request names to it, so the teardown and the holds find it, and answer what happened. Never throws. */\n  link(fileId: string, request: Readonly<Record<string, unknown>>, field: SignatureRequestEvidenceField): Promise<SignatureRequestEvidenceLinkOutcome>;\n  /** Delete a file whose request move was lost. Never throws: an unlinked file is the cleanup's otherwise. */\n  discard(fileId: string): Promise<void>;\n}\n\n/** The engine's evidence store: the server-produced file writer and the files service. */\n@injectable()\nexport class SignatureRequestEvidenceFilesBackendService implements SignatureRequestEvidenceFiles {\n  constructor(\n    @inject(SAAS_SERVICE_TYPES.Logger) private readonly logger: Pick<LoggerService, 'warn'>,\n    @inject(SAAS_SERVICE_TYPES.ServerProducedFileWriterDependencies) private readonly fileWriter: ServerProducedFileWriterDependencies,\n    @inject(SAAS_SERVICE_TYPES.FilesBackendService) private readonly files: Pick<FilesBackendService, 'linkFileToResource' | 'deleteDetachedFile'>,\n    @inject(SAAS_SERVICE_TYPES.ExecutionContextCreatorBackendService) private readonly contexts: Pick<ExecutionContextCreatorBackendService, 'createForInternalOperation'>,\n    /** The file's state, read as the inbound-email receiver reads its stored files: the infrastructure read, no access check. */\n    @inject(SAAS_SERVICE_TYPES.RepositoriesRegistryHandlerService) private readonly repositories: Pick<RepositoriesRegistryHandlerBackendService, 'readUnscopedByKey'>,\n    @inject(SAAS_SERVICE_TYPES.ResourceRegistryService) @optional() private readonly resources?: Pick<ResourcesRegistryBackendService, 'getServiceOperationPathDefault'>,\n  ) {}\n\n  async write(input: Parameters<SignatureRequestEvidenceFiles['write']>[0]): Promise<string> {\n    const signedDocument = input.field === SignatureRequestEvidenceField.SIGNED_DOCUMENT;\n    const originalFileId = typeof input.request.originalFileId === 'string' ? input.request.originalFileId : undefined;\n    const written = await writeServerProducedFile(this.fileWriter, {\n      resourceType: CoreResourceType.SIGNATURE_REQUESTS as ResourceType,\n      fieldName: input.field,\n      bytes: Buffer.from(input.bytes),\n      mimeType: input.mimeType,\n      filename: input.filename,\n      scopeOwnerRow: input.request,\n      executionContext: await this.internalContext(),\n      // The vendor's bytes are scanned where a scanner runs; the engine's own JSON is not (see the module header).\n      scan: signedDocument && this.fileWriter.fileScanning ? ServerProducedFileScan.REQUIRED : ServerProducedFileScan.NONE,\n      ...(signedDocument && originalFileId ? { derivedFrom: { fileId: originalFileId, role: FileDerivationRole.VENDOR_SIGNED_COPY } } : {}),\n      describedAs: signedDocument ? 'vendor-signed document' : 'signature validation evidence',\n    });\n    return written.fileId;\n  }\n\n  async link(fileId: string, request: Readonly<Record<string, unknown>>, field: SignatureRequestEvidenceField): Promise<SignatureRequestEvidenceLinkOutcome> {\n    const requestId = String(request._id);\n    try {\n      const file = await this.repositories.readUnscopedByKey<{ status?: FileStatus; linkedResourceType?: string; linkedResourceId?: unknown; linkedFieldName?: string }>(\n        CoreResourceType.FILES, { _id: fileId },\n      );\n      if (!file?.status) return SignatureRequestEvidenceLinkOutcome.LOST;\n      if (file.status === FileStatus.LINKED) {\n        const ours = file.linkedResourceType === CoreResourceType.SIGNATURE_REQUESTS && String(file.linkedResourceId) === requestId && file.linkedFieldName === field;\n        return ours ? SignatureRequestEvidenceLinkOutcome.ALREADY_LINKED : SignatureRequestEvidenceLinkOutcome.LOST;\n      }\n      if (EVIDENCE_FILE_STATES_AWAITING_LINK.has(file.status)) return SignatureRequestEvidenceLinkOutcome.NOT_YET_LINKABLE;\n      if (!FILE_LINKABLE_STATUSES.has(file.status)) return SignatureRequestEvidenceLinkOutcome.LOST;\n      await this.files.linkFileToResource(fileId, CoreResourceType.SIGNATURE_REQUESTS as ResourceType, requestId, field, await this.internalContext(), undefined, request as Record<string, unknown>);\n      return SignatureRequestEvidenceLinkOutcome.LINKED;\n    } catch (error) {\n      // A file whose scan began between the read and the link, or a store that did not answer: the next poll tries again.\n      this.logger.warn('[signature-requests] An evidence file could not be linked to its signature request now; the poll tries again', {\n        signatureRequestId: requestId, fileId, field, error: describeCaughtError(error),\n      });\n      return SignatureRequestEvidenceLinkOutcome.FAILED;\n    }\n  }\n\n  async discard(fileId: string): Promise<void> {\n    try {\n      await this.files.deleteDetachedFile(fileId, await this.internalContext());\n    } catch (error) {\n      this.logger.warn('[signature-requests] An evidence file whose request move was lost could not be deleted now; it is unlinked, so the files cleanup removes it', {\n        fileId, error: describeCaughtError(error),\n      });\n    }\n  }\n\n  /** The application's own context for these files, as a super-administrator would act (the relay's). */\n  private internalContext() {\n    return this.contexts.createForInternalOperation({\n      operation: this.resources?.getServiceOperationPathDefault(CoreResourceType.SIGNATURE_REQUESTS, CoreResourceOperation.READ),\n      contextResourcesFieldIdentifier: new Map(),\n      initiatorIds: null,\n      initiatorRoles: [{ roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN], relatedPrimaryScope: ResourcePrimaryScope.APPLICATION }],\n    } as never);\n  }\n}\n"]}

package/dist/esm/compliance/electronic-signatures/signature-request-poll.batch.backend.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"signature-request-poll.batch.backend.service.d.ts","sourceRoot":"","sources":["../../../../src/compliance/electronic-signatures/signature-request-poll.batch.backend.service.ts"],"names":[],"mappings":"AAeA,OAAO,EAAE,iCAAiC,EAAE,MAAM,4FAA4F,CAAC;AA8B/I,wBAAgB,+BAA+B,IAAI,UAAU,CAAC,OAAO,iCAAiC,CAAC,CAqBtG"}
+{"version":3,"file":"signature-request-poll.batch.backend.service.d.ts","sourceRoot":"","sources":["../../../../src/compliance/electronic-signatures/signature-request-poll.batch.backend.service.ts"],"names":[],"mappings":"AAmBA,OAAO,EAAE,iCAAiC,EAAE,MAAM,4FAA4F,CAAC;AAsC/I,wBAAgB,+BAA+B,IAAI,UAAU,CAAC,OAAO,iCAAiC,CAAC,CA0BtG"}

package/dist/esm/compliance/electronic-signatures/signature-request-poll.batch.backend.service.js

@@ -9,6 +9,10 @@
  * It also SENDS the deliverables approved since the last run whose tool declares an electronic signature
  * (`SignatureRequestTriggerBackendService`), before re-reading, so a request sent this run is read on the next.
  *
+ * Then it LINKS the evidence files of the requests SIGNED in the last two days that are not linked yet
+ * (`linkPendingEvidence`): a signed document is scanned on write where a scanner runs, and a file is not linkable until
+ * its scan ends, so its link is usually this run's work rather than the re-read's.
+ *
  * This output is the run's durable record: a steady `notRead` means a vendor is down or a provider answers unusably, and a
  * steady `deferredByBudget` means the bounds are too small for the open population.
  */
@@ -36,6 +40,14 @@ const SignatureRequestPollOutputSchema = z.strictObject({
     dispatchSent: Count,
     /** Deliverables whose sending was refused this run; each is logged. */
     dispatchRefused: Count,
+    /** SIGNED requests of the last two days whose evidence files were looked at. */
+    evidenceExamined: Count,
+    /** Evidence files linked this run. */
+    evidenceLinked: Count,
+    /** Evidence files not linkable yet (scan in flight) or whose link failed for now: the next run tries again. */
+    evidenceLinkPending: Count,
+    /** Evidence files that can never be linked: a SIGNED request names evidence nothing keeps. Each is logged once. */
+    evidenceLost: Count,
     durationMs: Count,
 });
 export function createSignatureRequestPollBatch() {
@@ -56,7 +68,12 @@ export function createSignatureRequestPollBatch() {
             const startTime = Date.now();
             const dispatch = await dependencies.trigger.sendSealedDeliverables();
             const report = await dependencies.signatureRequests.pollOpenRequests();
-            return { ...report, dispatchExamined: dispatch.examined, dispatchSent: dispatch.sent, dispatchRefused: dispatch.refused, durationMs: Date.now() - startTime };
+            const evidence = await dependencies.signatureRequests.linkPendingEvidence();
+            return {
+                ...report, dispatchExamined: dispatch.examined, dispatchSent: dispatch.sent, dispatchRefused: dispatch.refused,
+                evidenceExamined: evidence.examined, evidenceLinked: evidence.linked, evidenceLinkPending: evidence.pending, evidenceLost: evidence.lost,
+                durationMs: Date.now() - startTime,
+            };
         },
     });
 }

package/dist/esm/compliance/electronic-signatures/signature-request-poll.batch.backend.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"signature-request-poll.batch.backend.service.js","sourceRoot":"","sources":["../../../../src/compliance/electronic-signatures/signature-request-poll.batch.backend.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,iCAAiC,EAAE,MAAM,4FAA4F,CAAC;AAC/I,OAAO,EAAE,4CAA4C,EAAE,MAAM,gFAAgF,CAAC;AAC9I,OAAO,EAAE,kBAAkB,EAAE,MAAM,gDAAgD,CAAC;AAIpF,MAAM,KAAK,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AAEtC,MAAM,gCAAgC,GAAG,CAAC,CAAC,YAAY,CAAC;IACtD,sCAAsC;IACtC,QAAQ,EAAE,KAAK;IACf,kCAAkC;IAClC,KAAK,EAAE,KAAK;IACZ,oHAAoH;IACpH,SAAS,EAAE,KAAK;IAChB,qFAAqF;IACrF,OAAO,EAAE,KAAK;IACd,4CAA4C;IAC5C,QAAQ,EAAE,KAAK;IACf,kFAAkF;IAClF,gBAAgB,EAAE,KAAK;IACvB,uFAAuF;IACvF,gBAAgB,EAAE,KAAK;IACvB,gDAAgD;IAChD,YAAY,EAAE,KAAK;IACnB,uEAAuE;IACvE,eAAe,EAAE,KAAK;IACtB,UAAU,EAAE,KAAK;CAClB,CAAC,CAAC;AAEH,MAAM,UAAU,+BAA+B;IAC7C,OAAO,iCAAiC,CAAC;QACvC,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;QACnB,MAAM,EAAE,gCAAgC;QACxC,oBAAoB,EAAE;YACpB,IAAI,EAAE,4CAA4C,CAAC,IAAI;YACvD,kBAAkB,EAAE,4CAA4C,CAAC,kBAAkB;YACnF,mBAAmB,EAAE,4CAA4C,CAAC,mBAAmB;YACrF,iBAAiB,EAAE,4CAA4C,CAAC,cAAc;SAC/E;QACD,mBAAmB,EAAE,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC;YACjC,iBAAiB,EAAE,GAAG,CAAkC,kBAAkB,CAAC,wBAAwB,CAAC;YACpG,OAAO,EAAE,GAAG,CAAwC,kBAAkB,CAAC,8BAA8B,CAAC;SACvG,CAAC;QACF,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE;YAC3C,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAC7B,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,sBAAsB,EAAE,CAAC;YACrE,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,iBAAiB,CAAC,gBAAgB,EAAE,CAAC;YACvE,OAAO,EAAE,GAAG,MAAM,EAAE,gBAAgB,EAAE,QAAQ,CAAC,QAAQ,EAAE,YAAY,EAAE,QAAQ,CAAC,IAAI,EAAE,eAAe,EAAE,QAAQ,CAAC,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,EAAE,CAAC;QAChK,CAAC;KACF,CAAC,CAAC;AACL,CAAC","sourcesContent":["/**\n * Signature Request Poll — the scheduled re-read of open signature requests (#2293).\n *\n * A vendor's notification only triggers a re-read (#2909), and a vendor that notifies nothing, or a notification lost on\n * the way, would leave a request open for ever. This batch re-reads the open requests every five minutes, oldest move\n * first, within a per-tenant and per-provider bound (`DEFAULT_SIGNATURE_REQUEST_POLL_BOUNDS`), so one tenant or one vendor\n * cannot use the run up.\n *\n * It also SENDS the deliverables approved since the last run whose tool declares an electronic signature\n * (`SignatureRequestTriggerBackendService`), before re-reading, so a request sent this run is read on the next.\n *\n * This output is the run's durable record: a steady `notRead` means a vendor is down or a provider answers unusably, and a\n * steady `deferredByBudget` means the bounds are too small for the open population.\n */\nimport { z } from 'zod';\nimport { createCustomBatchExecutionService } from '~wildo-backend-lib/base-classes/services/batches/batches-cronjobs-custom-execution.service';\nimport { ENGINE_SIGNATURE_REQUEST_POLL_BATCH_MANIFEST } from '~wildo-backend-lib/base-classes/services/batches/engine-custom-batch-manifests';\nimport { SAAS_SERVICE_TYPES } from '~wildo-backend-lib/inject/models/service-types';\nimport type { SignatureRequestsBackendService } from './signature-requests.backend.service';\nimport type { SignatureRequestTriggerBackendService } from './signature-request-trigger.backend.service';\n\nconst Count = z.number().int().min(0);\n\nconst SignatureRequestPollOutputSchema = z.strictObject({\n  /** Open requests re-read this run. */\n  examined: Count,\n  /** Requests whose state moved. */\n  moved: Count,\n  /** Requests the vendor's answer left where they were (including a complete one whose evidence did not validate). */\n  unchanged: Count,\n  /** Requests whose vendor could not be read, or answered unusably; each is logged. */\n  notRead: Count,\n  /** Requests another re-read moved first. */\n  lostRace: Count,\n  /** Open requests left for a later run by the per-tenant or per-provider bound. */\n  deferredByBudget: Count,\n  /** Sealed approvals whose tool declares a signature, examined for sending this run. */\n  dispatchExamined: Count,\n  /** Deliverables sent for signature this run. */\n  dispatchSent: Count,\n  /** Deliverables whose sending was refused this run; each is logged. */\n  dispatchRefused: Count,\n  durationMs: Count,\n});\n\nexport function createSignatureRequestPollBatch(): ReturnType<typeof createCustomBatchExecutionService> {\n  return createCustomBatchExecutionService({\n    input: z.object({}),\n    output: SignatureRequestPollOutputSchema,\n    batchCronjob_Context: {\n      kind: ENGINE_SIGNATURE_REQUEST_POLL_BATCH_MANIFEST.kind,\n      resourceIdentifier: ENGINE_SIGNATURE_REQUEST_POLL_BATCH_MANIFEST.resourceIdentifier,\n      operationIdentifier: ENGINE_SIGNATURE_REQUEST_POLL_BATCH_MANIFEST.operationIdentifier,\n      cronJobExpression: ENGINE_SIGNATURE_REQUEST_POLL_BATCH_MANIFEST.cronExpression,\n    },\n    resolveDependencies: ({ get }) => ({\n      signatureRequests: get<SignatureRequestsBackendService>(SAAS_SERVICE_TYPES.SignatureRequestsService),\n      trigger: get<SignatureRequestTriggerBackendService>(SAAS_SERVICE_TYPES.SignatureRequestTriggerService),\n    }),\n    doHandle: async (_input, { dependencies }) => {\n      const startTime = Date.now();\n      const dispatch = await dependencies.trigger.sendSealedDeliverables();\n      const report = await dependencies.signatureRequests.pollOpenRequests();\n      return { ...report, dispatchExamined: dispatch.examined, dispatchSent: dispatch.sent, dispatchRefused: dispatch.refused, durationMs: Date.now() - startTime };\n    },\n  });\n}\n"]}
+{"version":3,"file":"signature-request-poll.batch.backend.service.js","sourceRoot":"","sources":["../../../../src/compliance/electronic-signatures/signature-request-poll.batch.backend.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,iCAAiC,EAAE,MAAM,4FAA4F,CAAC;AAC/I,OAAO,EAAE,4CAA4C,EAAE,MAAM,gFAAgF,CAAC;AAC9I,OAAO,EAAE,kBAAkB,EAAE,MAAM,gDAAgD,CAAC;AAIpF,MAAM,KAAK,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AAEtC,MAAM,gCAAgC,GAAG,CAAC,CAAC,YAAY,CAAC;IACtD,sCAAsC;IACtC,QAAQ,EAAE,KAAK;IACf,kCAAkC;IAClC,KAAK,EAAE,KAAK;IACZ,oHAAoH;IACpH,SAAS,EAAE,KAAK;IAChB,qFAAqF;IACrF,OAAO,EAAE,KAAK;IACd,4CAA4C;IAC5C,QAAQ,EAAE,KAAK;IACf,kFAAkF;IAClF,gBAAgB,EAAE,KAAK;IACvB,uFAAuF;IACvF,gBAAgB,EAAE,KAAK;IACvB,gDAAgD;IAChD,YAAY,EAAE,KAAK;IACnB,uEAAuE;IACvE,eAAe,EAAE,KAAK;IACtB,gFAAgF;IAChF,gBAAgB,EAAE,KAAK;IACvB,sCAAsC;IACtC,cAAc,EAAE,KAAK;IACrB,+GAA+G;IAC/G,mBAAmB,EAAE,KAAK;IAC1B,mHAAmH;IACnH,YAAY,EAAE,KAAK;IACnB,UAAU,EAAE,KAAK;CAClB,CAAC,CAAC;AAEH,MAAM,UAAU,+BAA+B;IAC7C,OAAO,iCAAiC,CAAC;QACvC,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;QACnB,MAAM,EAAE,gCAAgC;QACxC,oBAAoB,EAAE;YACpB,IAAI,EAAE,4CAA4C,CAAC,IAAI;YACvD,kBAAkB,EAAE,4CAA4C,CAAC,kBAAkB;YACnF,mBAAmB,EAAE,4CAA4C,CAAC,mBAAmB;YACrF,iBAAiB,EAAE,4CAA4C,CAAC,cAAc;SAC/E;QACD,mBAAmB,EAAE,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC;YACjC,iBAAiB,EAAE,GAAG,CAAkC,kBAAkB,CAAC,wBAAwB,CAAC;YACpG,OAAO,EAAE,GAAG,CAAwC,kBAAkB,CAAC,8BAA8B,CAAC;SACvG,CAAC;QACF,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE;YAC3C,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAC7B,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,sBAAsB,EAAE,CAAC;YACrE,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,iBAAiB,CAAC,gBAAgB,EAAE,CAAC;YACvE,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,iBAAiB,CAAC,mBAAmB,EAAE,CAAC;YAC5E,OAAO;gBACL,GAAG,MAAM,EAAE,gBAAgB,EAAE,QAAQ,CAAC,QAAQ,EAAE,YAAY,EAAE,QAAQ,CAAC,IAAI,EAAE,eAAe,EAAE,QAAQ,CAAC,OAAO;gBAC9G,gBAAgB,EAAE,QAAQ,CAAC,QAAQ,EAAE,cAAc,EAAE,QAAQ,CAAC,MAAM,EAAE,mBAAmB,EAAE,QAAQ,CAAC,OAAO,EAAE,YAAY,EAAE,QAAQ,CAAC,IAAI;gBACxI,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;aACnC,CAAC;QACJ,CAAC;KACF,CAAC,CAAC;AACL,CAAC","sourcesContent":["/**\n * Signature Request Poll — the scheduled re-read of open signature requests (#2293).\n *\n * A vendor's notification only triggers a re-read (#2909), and a vendor that notifies nothing, or a notification lost on\n * the way, would leave a request open for ever. This batch re-reads the open requests every five minutes, oldest move\n * first, within a per-tenant and per-provider bound (`DEFAULT_SIGNATURE_REQUEST_POLL_BOUNDS`), so one tenant or one vendor\n * cannot use the run up.\n *\n * It also SENDS the deliverables approved since the last run whose tool declares an electronic signature\n * (`SignatureRequestTriggerBackendService`), before re-reading, so a request sent this run is read on the next.\n *\n * Then it LINKS the evidence files of the requests SIGNED in the last two days that are not linked yet\n * (`linkPendingEvidence`): a signed document is scanned on write where a scanner runs, and a file is not linkable until\n * its scan ends, so its link is usually this run's work rather than the re-read's.\n *\n * This output is the run's durable record: a steady `notRead` means a vendor is down or a provider answers unusably, and a\n * steady `deferredByBudget` means the bounds are too small for the open population.\n */\nimport { z } from 'zod';\nimport { createCustomBatchExecutionService } from '~wildo-backend-lib/base-classes/services/batches/batches-cronjobs-custom-execution.service';\nimport { ENGINE_SIGNATURE_REQUEST_POLL_BATCH_MANIFEST } from '~wildo-backend-lib/base-classes/services/batches/engine-custom-batch-manifests';\nimport { SAAS_SERVICE_TYPES } from '~wildo-backend-lib/inject/models/service-types';\nimport type { SignatureRequestsBackendService } from './signature-requests.backend.service';\nimport type { SignatureRequestTriggerBackendService } from './signature-request-trigger.backend.service';\n\nconst Count = z.number().int().min(0);\n\nconst SignatureRequestPollOutputSchema = z.strictObject({\n  /** Open requests re-read this run. */\n  examined: Count,\n  /** Requests whose state moved. */\n  moved: Count,\n  /** Requests the vendor's answer left where they were (including a complete one whose evidence did not validate). */\n  unchanged: Count,\n  /** Requests whose vendor could not be read, or answered unusably; each is logged. */\n  notRead: Count,\n  /** Requests another re-read moved first. */\n  lostRace: Count,\n  /** Open requests left for a later run by the per-tenant or per-provider bound. */\n  deferredByBudget: Count,\n  /** Sealed approvals whose tool declares a signature, examined for sending this run. */\n  dispatchExamined: Count,\n  /** Deliverables sent for signature this run. */\n  dispatchSent: Count,\n  /** Deliverables whose sending was refused this run; each is logged. */\n  dispatchRefused: Count,\n  /** SIGNED requests of the last two days whose evidence files were looked at. */\n  evidenceExamined: Count,\n  /** Evidence files linked this run. */\n  evidenceLinked: Count,\n  /** Evidence files not linkable yet (scan in flight) or whose link failed for now: the next run tries again. */\n  evidenceLinkPending: Count,\n  /** Evidence files that can never be linked: a SIGNED request names evidence nothing keeps. Each is logged once. */\n  evidenceLost: Count,\n  durationMs: Count,\n});\n\nexport function createSignatureRequestPollBatch(): ReturnType<typeof createCustomBatchExecutionService> {\n  return createCustomBatchExecutionService({\n    input: z.object({}),\n    output: SignatureRequestPollOutputSchema,\n    batchCronjob_Context: {\n      kind: ENGINE_SIGNATURE_REQUEST_POLL_BATCH_MANIFEST.kind,\n      resourceIdentifier: ENGINE_SIGNATURE_REQUEST_POLL_BATCH_MANIFEST.resourceIdentifier,\n      operationIdentifier: ENGINE_SIGNATURE_REQUEST_POLL_BATCH_MANIFEST.operationIdentifier,\n      cronJobExpression: ENGINE_SIGNATURE_REQUEST_POLL_BATCH_MANIFEST.cronExpression,\n    },\n    resolveDependencies: ({ get }) => ({\n      signatureRequests: get<SignatureRequestsBackendService>(SAAS_SERVICE_TYPES.SignatureRequestsService),\n      trigger: get<SignatureRequestTriggerBackendService>(SAAS_SERVICE_TYPES.SignatureRequestTriggerService),\n    }),\n    doHandle: async (_input, { dependencies }) => {\n      const startTime = Date.now();\n      const dispatch = await dependencies.trigger.sendSealedDeliverables();\n      const report = await dependencies.signatureRequests.pollOpenRequests();\n      const evidence = await dependencies.signatureRequests.linkPendingEvidence();\n      return {\n        ...report, dispatchExamined: dispatch.examined, dispatchSent: dispatch.sent, dispatchRefused: dispatch.refused,\n        evidenceExamined: evidence.examined, evidenceLinked: evidence.linked, evidenceLinkPending: evidence.pending, evidenceLost: evidence.lost,\n        durationMs: Date.now() - startTime,\n      };\n    },\n  });\n}\n"]}

package/dist/esm/compliance/electronic-signatures/signature-requests.backend.service.d.ts

@@ -9,6 +9,7 @@ import type { ElectronicSignatureBackendService } from '../../external-providers
 import type { AuditLogsBackendService } from '../../compliance/audit-trails/services/audit-logs.backend.service';
 import { type SignedDocumentValidator } from './signed-document-validation.backend';
 import { type SignatureRequestEvidenceFiles } from './signature-request-evidence-files.backend';
+import type { MetricsService } from '../../monitoring/observability/services/metrics.service';
 /** Why a deliverable was not sent. */
 export declare enum SignatureRequestSendRefusal {
     SEAL_NOT_FOUND = "seal_not_found",
@@ -55,6 +56,43 @@ export type SendForSignatureResult = {
     readonly retryable: boolean;
     readonly signatureRequestId?: string;
 };
+/**
+ * Why a request the vendor reported complete was not made SIGNED by its evidence: the label of
+ * `signature_request_evidence_refused_total`, and what the re-read's reason explains in words.
+ */
+export declare enum SignatureRequestEvidenceFailure {
+    /** No signed-document validator is bound in this runtime. */
+    NO_VALIDATOR = "no_validator",
+    /** The vendor split the request into several documents; one signed document per request is kept. */
+    SPLIT_REQUEST = "split_request",
+    /** The provider declares no evidence policy (trust anchors). */
+    NO_EVIDENCE_POLICY = "no_evidence_policy",
+    /** The signed document could not be downloaded. */
+    DOWNLOAD_FAILED = "download_failed",
+    /** The document did not validate (tampered, updated after signing, untrusted chain, refused algorithm, revocation). */
+    REJECTED = "rejected",
+    /** The document validated and proves another signer or a lower level than required: the request FAILS. */
+    MISMATCHED = "mismatched",
+    /** The document validated and its evidence could not be written: the request stays open and is read again. */
+    NOT_KEPT = "not_kept"
+}
+/**
+ * How long after a request became SIGNED the poll keeps linking its evidence files (#2293). Longer than the files
+ * cleanup waits before it removes an unlinked file (a day after its scan ended, its default `unlinkedThresholdMs`), so a
+ * scan that ends late is still linked; a file the cleanup removed first is reported lost.
+ */
+export declare const SIGNATURE_EVIDENCE_LINK_WINDOW_MS: number;
+/** What one evidence-link pass of the poll did. */
+export interface SignatureEvidenceLinkReport {
+    /** SIGNED requests of the window whose evidence was looked at. */
+    readonly examined: number;
+    /** Evidence files linked by this pass. */
+    readonly linked: number;
+    /** Evidence files still not linkable (their scan has not ended) or whose link failed for now: the next pass tries again. */
+    readonly pending: number;
+    /** Evidence files that can never be linked: the request names evidence nothing keeps. Each is logged once. */
+    readonly lost: number;
+}
 /** What the send path reads and writes through. Structural, so a test hands in what it holds. */
 export type SignatureRequestsRepositories = Pick<RepositoriesRegistryHandlerBackendService, 'findManyForInfrastructure' | 'insertDocumentForInfrastructure' | 'deleteManyForInfrastructure' | 'atomicGuardedMutation'>;
 export type SignatureRequestsFiles = Pick<FilesBackendService, 'getFile' | 'ensureContentHash' | 'readFileBytes'>;
@@ -105,9 +143,15 @@ export declare class SignatureRequestsBackendService {
     /** Where a SIGNED request keeps its signed document and its validation's evidence. Absent, nothing becomes SIGNED. */
     private readonly evidenceFiles?;
     private readonly auditLogs?;
+    private readonly metrics?;
     constructor(logger: LoggerService, repositories: SignatureRequestsRepositories, executionContextCreator: Pick<ExecutionContextCreatorBackendService, 'createForInternalSystemOperation'>, transport: SignatureRequestsTransport, files?: SignatureRequestsFiles, validator?: SignedDocumentValidator, errorBuilder?: Pick<ErrorBuilderBackendService, 'buildError'>, 
     /** Where a SIGNED request keeps its signed document and its validation's evidence. Absent, nothing becomes SIGNED. */
-    evidenceFiles?: SignatureRequestEvidenceFiles, auditLogs?: Pick<AuditLogsBackendService, 'logSignatureRequestEvent'>);
+    evidenceFiles?: SignatureRequestEvidenceFiles, auditLogs?: Pick<AuditLogsBackendService, 'logSignatureRequestEvent'>, metrics?: Pick<MetricsService, 'recordSignatureRequestSent' | 'recordSignatureRequestMoved' | 'recordSignatureRequestEvidenceRefused' | 'recordSignatureRequestVendorNotRead' | 'recordSignatureRequestEvidenceLink'>, 
+    /** A test seam, `@unmanaged()`: the container's instance reads the system clock (Inversify counts every parameter). */
+    clock?: () => Date);
+    private readonly clock;
+    /** Evidence files already reported lost by this process, so a lost file is logged once rather than every poll. */
+    private readonly reportedLostEvidence;
     /**
      * The removal effect of `signatureRequests` (#2293), registered at startup with the evidence teardown: before the rows of
      * requests whose record goes are destroyed, every OPEN one is cancelled at its vendor, and deleted there where its
@@ -126,6 +170,7 @@ export declare class SignatureRequestsBackendService {
      * for the seal's bind check, so the sealed-deliverable gate is marked as that check is.)
      */
     sendForSignature(input: SendForSignatureInput): Promise<SendForSignatureResult>;
+    private sendOnce;
     /**
      * Re-read one request at its vendor, through the provider it was sent through, and move it as its one transition
      * function says. Used by the poll and by a vendor notification's re-read trigger (#2909): a notification is never
@@ -160,6 +205,26 @@ export declare class SignatureRequestsBackendService {
      * several references cannot keep its evidence in the request's own fields and is left open (stated, never guessed).
      */
     private validateEvidence;
+    /**
+     * Link the evidence files of the requests that became SIGNED in the last {@link SIGNATURE_EVIDENCE_LINK_WINDOW_MS} and
+     * are not linked yet (#2293). Run by the poll. A file whose scan has not ended is linked by a later run; one that can
+     * never be linked is reported lost, once. Without this, a signed document scanned on write was never linked (its link
+     * is refused while it is SCANNING) and the files cleanup removed it a day later. Never throws for one request.
+     *
+     * Read cost, stated: each run reads every SIGNED request of the window and each of its two files once, a primary-key read
+     * per file, up to {@link SIGNATURE_EVIDENCE_LINK_SCAN_LIMIT} requests.
+     */
+    linkPendingEvidence(): Promise<SignatureEvidenceLinkReport>;
+    /**
+     * Link one evidence file and say what happened: a lost file at error (once per process, with its metric), a link left
+     * for a later poll at info. Never throws; the port never does.
+     */
+    private linkEvidenceFile;
+    /**
+     * The SIGNED requests validated in the link window, oldest first, a page at a time. Pages advance on `validatedAt`, ids
+     * already seen skipped, so requests validated in the same instant are not lost between pages (the trigger's paging).
+     */
+    private signedInLinkWindow;
     /** Write the request's two evidence files, unlinked. A reason when they cannot be kept: the request then stays open. */
     private keepEvidence;
     /** One request event on the trail. Never throws: the request's state is the record, the trail observes it. */

package/dist/esm/compliance/electronic-signatures/signature-requests.backend.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"signature-requests.backend.service.d.ts","sourceRoot":"","sources":["../../../../src/compliance/electronic-signatures/signature-requests.backend.service.ts"],"names":[],"mappings":"AAgCA,OAAO,EAQL,sBAAsB,EACtB,4BAA4B,EAC5B,sBAAsB,EACtB,kCAAkC,EAKnC,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAEL,uCAAuC,EACvC,KAAK,yBAAyB,EAC/B,MAAM,sCAAsC,CAAC;AAG9C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8DAA8D,CAAC;AAClG,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,kEAAkE,CAAC;AACnH,OAAO,KAAK,EAAE,yCAAyC,EAAE,MAAM,qGAAqG,CAAC;AACrK,OAAO,KAAK,EAAE,qCAAqC,EAAE,MAAM,+EAA+E,CAAC;AAC3I,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,yDAAyD,CAAC;AACnG,OAAO,KAAK,EAAE,iCAAiC,EAAE,MAAM,qFAAqF,CAAC;AAI7I,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,gFAAgF,CAAC;AAC9H,OAAO,EAAsD,KAAK,uBAAuB,EAAE,MAAM,sCAAsC,CAAC;AACxI,OAAO,EAAiC,KAAK,6BAA6B,EAAE,MAAM,4CAA4C,CAAC;AAE/H,sCAAsC;AACtC,oBAAY,2BAA2B;IACrC,cAAc,mBAAmB;IACjC,wFAAwF;IACxF,eAAe,oBAAoB;IACnC,mFAAmF;IACnF,qBAAqB,0BAA0B;IAC/C,sDAAsD;IACtD,oBAAoB,yBAAyB;IAC7C,sBAAsB,2BAA2B;IACjD,6DAA6D;IAC7D,mBAAmB,wBAAwB;IAC3C,iFAAiF;IACjF,oBAAoB,yBAAyB;IAC7C,wDAAwD;IACxD,YAAY,iBAAiB;IAC7B,+EAA+E;IAC/E,cAAc,mBAAmB;IACjC,oHAAoH;IACpH,kBAAkB,uBAAuB;CAC1C;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,mHAAmH;IACnH,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;QAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC7F,QAAQ,CAAC,aAAa,EAAE,yBAAyB,CAAC;IAClD;;;OAGG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,MAAM,sBAAsB,GAC9B;IAAE,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,GACtG;IAAE,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,2BAA2B,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAExK,iGAAiG;AACjG,MAAM,MAAM,6BAA6B,GAAG,IAAI,CAAC,yCAAyC,EAAE,2BAA2B,GAAG,iCAAiC,GAAG,6BAA6B,GAAG,uBAAuB,CAAC,CAAC;AACvN,MAAM,MAAM,sBAAsB,GAAG,IAAI,CAAC,mBAAmB,EAAE,SAAS,GAAG,mBAAmB,GAAG,eAAe,CAAC,CAAC;AAClH,MAAM,MAAM,0BAA0B,GAAG,IAAI,CAAC,iCAAiC,EAAE,MAAM,GAAG,QAAQ,GAAG,MAAM,GAAG,wBAAwB,CAAC,GACnI,OAAO,CAAC,IAAI,CAAC,iCAAiC,EAAE,qBAAqB,GAAG,kBAAkB,CAAC,CAAC,CAAC;AAEjG,uFAAuF;AACvF,oBAAY,2BAA2B;IACrC,uBAAuB;IACvB,SAAS,cAAc;IACvB,yFAAyF;IACzF,QAAQ,aAAa;IACrB,8FAA8F;IAC9F,SAAS,cAAc;CACxB;AAED,yCAAyC;AACzC,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,OAAO,EAAE,kCAAkC,GAAG,2BAA2B,CAAC;IACnF,QAAQ,CAAC,KAAK,CAAC,EAAE,sBAAsB,CAAC;IACxC,QAAQ,CAAC,KAAK,CAAC,EAAE,sBAAsB,CAAC;IACxC,+EAA+E;IAC/E,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,+HAA+H;AAC/H,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;CACjC;AAED,eAAO,MAAM,qCAAqC,EAAE,0BAA4G,CAAC;AAEjK,iDAAiD;AACjD,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,kFAAkF;IAClF,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;CACnC;AAOD,qBACa,+BAA+B;IAEL,OAAO,CAAC,QAAQ,CAAC,MAAM;IACK,OAAO,CAAC,QAAQ,CAAC,YAAY;IAC1B,OAAO,CAAC,QAAQ,CAAC,uBAAuB;IACnD,OAAO,CAAC,QAAQ,CAAC,SAAS;IACrB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC;IACnB,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC;IAC/B,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC;IAC1F,sHAAsH;IAChD,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC;IAC5C,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC;gBAThC,MAAM,EAAE,aAAa,EACO,YAAY,EAAE,6BAA6B,EACxC,uBAAuB,EAAE,IAAI,CAAC,qCAAqC,EAAE,kCAAkC,CAAC,EACnH,SAAS,EAAE,0BAA0B,EAChC,KAAK,CAAC,EAAE,sBAAsB,EAC1B,SAAS,CAAC,EAAE,uBAAuB,EACvC,YAAY,CAAC,EAAE,IAAI,CAAC,0BAA0B,EAAE,YAAY,CAAC;IAC1I,sHAAsH;IAC/B,aAAa,CAAC,EAAE,6BAA6B,EAC1D,SAAS,CAAC,EAAE,IAAI,CAAC,uBAAuB,EAAE,0BAA0B,CAAC;IAGjJ;;;;;;OAMG;IACU,0BAA0B,CAAC,IAAI,EAAE,aAAa,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IA+BpG;;;;;;;;OAQG;IACU,gBAAgB,CAAC,KAAK,EAAE,qBAAqB,GAAG,OAAO,CAAC,sBAAsB,CAAC;IAoH5F;;;;;;;;;OASG;IACU,cAAc,CAAC,kBAAkB,EAAE,MAAM,EAAE,KAAK,GAAE,4BAAgE,GAAG,OAAO,CAAC,6BAA6B,CAAC;IAOxK;;;;OAIG;IACU,qBAAqB,CAAC,WAAW,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC;IAQ9H;;;;OAIG;IACU,gBAAgB,CAAC,MAAM,GAAE,0BAAkE,GAAG,OAAO,CAAC,0BAA0B,CAAC;YA2ChI,UAAU;IAwFxB;;;;;;;;OAQG;YACW,gBAAgB;IA+C9B,wHAAwH;YAC1G,YAAY;IAuB1B,8GAA8G;YAChG,MAAM;CAMrB;AAiBD,iFAAiF;AACjF,wBAAgB,6BAA6B,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;;;;mBAQlC,yBAAyB;;;;;EAGhE;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,SAAS,uCAAuC,EAAE,GAAG,sBAAsB,GAAG,SAAS,CAStI"}
+{"version":3,"file":"signature-requests.backend.service.d.ts","sourceRoot":"","sources":["../../../../src/compliance/electronic-signatures/signature-requests.backend.service.ts"],"names":[],"mappings":"AAgCA,OAAO,EAQL,sBAAsB,EACtB,4BAA4B,EAC5B,sBAAsB,EACtB,kCAAkC,EAKnC,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAEL,uCAAuC,EACvC,KAAK,yBAAyB,EAC/B,MAAM,sCAAsC,CAAC;AAG9C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8DAA8D,CAAC;AAClG,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,kEAAkE,CAAC;AACnH,OAAO,KAAK,EAAE,yCAAyC,EAAE,MAAM,qGAAqG,CAAC;AACrK,OAAO,KAAK,EAAE,qCAAqC,EAAE,MAAM,+EAA+E,CAAC;AAC3I,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,yDAAyD,CAAC;AACnG,OAAO,KAAK,EAAE,iCAAiC,EAAE,MAAM,qFAAqF,CAAC;AAI7I,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,gFAAgF,CAAC;AAC9H,OAAO,EAAsD,KAAK,uBAAuB,EAAE,MAAM,sCAAsC,CAAC;AACxI,OAAO,EAIL,KAAK,6BAA6B,EACnC,MAAM,4CAA4C,CAAC;AACpD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sEAAsE,CAAC;AAE3G,sCAAsC;AACtC,oBAAY,2BAA2B;IACrC,cAAc,mBAAmB;IACjC,wFAAwF;IACxF,eAAe,oBAAoB;IACnC,mFAAmF;IACnF,qBAAqB,0BAA0B;IAC/C,sDAAsD;IACtD,oBAAoB,yBAAyB;IAC7C,sBAAsB,2BAA2B;IACjD,6DAA6D;IAC7D,mBAAmB,wBAAwB;IAC3C,iFAAiF;IACjF,oBAAoB,yBAAyB;IAC7C,wDAAwD;IACxD,YAAY,iBAAiB;IAC7B,+EAA+E;IAC/E,cAAc,mBAAmB;IACjC,oHAAoH;IACpH,kBAAkB,uBAAuB;CAC1C;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,mHAAmH;IACnH,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;QAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC7F,QAAQ,CAAC,aAAa,EAAE,yBAAyB,CAAC;IAClD;;;OAGG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,MAAM,sBAAsB,GAC9B;IAAE,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,GACtG;IAAE,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,2BAA2B,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAExK;;;GAGG;AACH,oBAAY,+BAA+B;IACzC,6DAA6D;IAC7D,YAAY,iBAAiB;IAC7B,oGAAoG;IACpG,aAAa,kBAAkB;IAC/B,gEAAgE;IAChE,kBAAkB,uBAAuB;IACzC,mDAAmD;IACnD,eAAe,oBAAoB;IACnC,uHAAuH;IACvH,QAAQ,aAAa;IACrB,0GAA0G;IAC1G,UAAU,eAAe;IACzB,8GAA8G;IAC9G,QAAQ,aAAa;CACtB;AAED;;;;GAIG;AACH,eAAO,MAAM,iCAAiC,QAAiB,CAAC;AAKhE,mDAAmD;AACnD,MAAM,WAAW,2BAA2B;IAC1C,kEAAkE;IAClE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,0CAA0C;IAC1C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,4HAA4H;IAC5H,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,8GAA8G;IAC9G,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED,iGAAiG;AACjG,MAAM,MAAM,6BAA6B,GAAG,IAAI,CAAC,yCAAyC,EAAE,2BAA2B,GAAG,iCAAiC,GAAG,6BAA6B,GAAG,uBAAuB,CAAC,CAAC;AACvN,MAAM,MAAM,sBAAsB,GAAG,IAAI,CAAC,mBAAmB,EAAE,SAAS,GAAG,mBAAmB,GAAG,eAAe,CAAC,CAAC;AAClH,MAAM,MAAM,0BAA0B,GAAG,IAAI,CAAC,iCAAiC,EAAE,MAAM,GAAG,QAAQ,GAAG,MAAM,GAAG,wBAAwB,CAAC,GACnI,OAAO,CAAC,IAAI,CAAC,iCAAiC,EAAE,qBAAqB,GAAG,kBAAkB,CAAC,CAAC,CAAC;AAEjG,uFAAuF;AACvF,oBAAY,2BAA2B;IACrC,uBAAuB;IACvB,SAAS,cAAc;IACvB,yFAAyF;IACzF,QAAQ,aAAa;IACrB,8FAA8F;IAC9F,SAAS,cAAc;CACxB;AAED,yCAAyC;AACzC,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,OAAO,EAAE,kCAAkC,GAAG,2BAA2B,CAAC;IACnF,QAAQ,CAAC,KAAK,CAAC,EAAE,sBAAsB,CAAC;IACxC,QAAQ,CAAC,KAAK,CAAC,EAAE,sBAAsB,CAAC;IACxC,+EAA+E;IAC/E,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,+HAA+H;AAC/H,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;CACjC;AAED,eAAO,MAAM,qCAAqC,EAAE,0BAA4G,CAAC;AAEjK,iDAAiD;AACjD,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,kFAAkF;IAClF,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;CACnC;AAOD,qBACa,+BAA+B;IAEL,OAAO,CAAC,QAAQ,CAAC,MAAM;IACK,OAAO,CAAC,QAAQ,CAAC,YAAY;IAC1B,OAAO,CAAC,QAAQ,CAAC,uBAAuB;IACnD,OAAO,CAAC,QAAQ,CAAC,SAAS;IACrB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC;IACnB,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC;IAC/B,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC;IAC1F,sHAAsH;IAChD,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC;IAC5C,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC;IAC7B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC;gBAV5B,MAAM,EAAE,aAAa,EACO,YAAY,EAAE,6BAA6B,EACxC,uBAAuB,EAAE,IAAI,CAAC,qCAAqC,EAAE,kCAAkC,CAAC,EACnH,SAAS,EAAE,0BAA0B,EAChC,KAAK,CAAC,EAAE,sBAAsB,EAC1B,SAAS,CAAC,EAAE,uBAAuB,EACvC,YAAY,CAAC,EAAE,IAAI,CAAC,0BAA0B,EAAE,YAAY,CAAC;IAC1I,sHAAsH;IAC/B,aAAa,CAAC,EAAE,6BAA6B,EAC1D,SAAS,CAAC,EAAE,IAAI,CAAC,uBAAuB,EAAE,0BAA0B,CAAC,EACvE,OAAO,CAAC,EAAE,IAAI,CAAC,cAAc,EACnG,4BAA4B,GAAG,6BAA6B,GAAG,uCAAuC,GAAG,qCAAqC,GAAG,oCAAoC,CAAC;IACxL,uHAAuH;IAC1G,KAAK,CAAC,EAAE,MAAM,IAAI;IAKjC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAa;IACnC,kHAAkH;IAClH,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAqB;IAE1D;;;;;;OAMG;IACU,0BAA0B,CAAC,IAAI,EAAE,aAAa,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IA+BpG;;;;;;;;OAQG;IACU,gBAAgB,CAAC,KAAK,EAAE,qBAAqB,GAAG,OAAO,CAAC,sBAAsB,CAAC;YAM9E,QAAQ;IAoHtB;;;;;;;;;OASG;IACU,cAAc,CAAC,kBAAkB,EAAE,MAAM,EAAE,KAAK,GAAE,4BAAgE,GAAG,OAAO,CAAC,6BAA6B,CAAC;IAOxK;;;;OAIG;IACU,qBAAqB,CAAC,WAAW,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC;IAQ9H;;;;OAIG;IACU,gBAAgB,CAAC,MAAM,GAAE,0BAAkE,GAAG,OAAO,CAAC,0BAA0B,CAAC;YA2ChI,UAAU;IAiGxB;;;;;;;;OAQG;YACW,gBAAgB;IAgD9B;;;;;;;;OAQG;IACU,mBAAmB,IAAI,OAAO,CAAC,2BAA2B,CAAC;IAyBxE;;;OAGG;YACW,gBAAgB;IAmB9B;;;OAGG;YACY,kBAAkB;IA6BjC,wHAAwH;YAC1G,YAAY;IAuB1B,8GAA8G;YAChG,MAAM;CAMrB;AAiBD,iFAAiF;AACjF,wBAAgB,6BAA6B,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;;;;mBAQlC,yBAAyB;;;;;EAGhE;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,SAAS,uCAAuC,EAAE,GAAG,sBAAsB,GAAG,SAAS,CAStI"}