npm - @wildo-ai/saas-backend-lib - Versions diffs - 1.1.3 → 1.1.4 - Mend

@wildo-ai/saas-backend-lib 1.1.3 → 1.1.4

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (1056) hide show

package/dist/esm/files/services/file-operation-handler.backend.service.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"file-operation-handler.backend.service.js","sourceRoot":"","sources":["../../../../../src/files/services/file-operation-handler.backend.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;;;;;;;;;;;;;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAC/C,OAAO,EAAgB,SAAS,EAAE,2BAA2B,EAAE,UAAU,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AACjI,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,EAAE,kBAAkB,EAAE,MAAM,gDAAgD,CAAC;AAEpF,OAAO,EAAE,0BAA0B,EAAE,MAAM,kEAAkE,CAAC;AAC9G,OAAO,EAAE,2BAA2B,EAAE,MAAM,8EAA8E,CAAC;AAC3H,OAAO,EAAE,gCAAgC,EAAqB,MAAM,wCAAwC,CAAC;AAC7G,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAI9D,OAAO,EAAE,cAAc,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,sDAAsD,CAAC;AACnJ,OAAO,EACL,kCAAkC,EAClC,iCAAiC,EACjC,2BAA2B,GAE5B,MAAM,qEAAqE,CAAC;AAYtE,IAAM,kCAAkC,GAAxC,MAAM,kCAAkC;IAK1B;IAEA;IAEA;IAEA;IAVT,QAAQ,CAA+D;IAEjF,YAEmB,MAAqB,EAErB,YAAwC,EAExC,kBAAoD,EAEpD,YAAiC;QANjC,WAAM,GAAN,MAAM,CAAe;QAErB,iBAAY,GAAZ,YAAY,CAA4B;QAExC,uBAAkB,GAAlB,kBAAkB,CAAkC;QAEpD,iBAAY,GAAZ,YAAY,CAAqB;QAElD,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,oCAAoC,CAAC,CAAC;QAC9E,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,oCAAoC,EAAE,KAAK,CAAC,CAAC;IAC/E,CAAC;IAEO,uBAAuB,CAAC,SAA4B;QAC1D,OAAO,SAAS,CAAC,YAAY,CAAC,UAAU,EAAE,MAAM,KAAK,oBAAoB,CAAC,YAAY,CAAC;IACzF,CAAC;IAED;;;;;;;;;;;;;;;;OAgBG;IACK,kBAAkB,CACxB,IAA0B,EAC1B,gBAAuC,EACvC,WAAoC;QAEpC,IAAI,sBAAsB,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAC5C,OAAO;QACT,CAAC;QACD,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAChC,SAAS,CAAC,aAAa,EACvB,gBAAgB,EAChB;YACE,sBAAsB,EAAE,IAAI,CAAC,MAAM,KAAK,UAAU,CAAC,QAAQ;gBACzD,CAAC,CAAC,2BAA2B,CAAC,qBAAqB;gBACnD,CAAC,CAAC,2BAA2B,CAAC,iBAAiB;YACjD,OAAO,EAAE;gBACP,wBAAwB;gBACxB,GAAG,WAAW;gBACd,UAAU,EAAE,IAAI,CAAC,MAAM;gBACvB,gBAAgB,EAAE,CAAC,GAAG,sBAAsB,CAAC;aAC9C;SACF,CACF,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,kCAAkC,CAAC,MAMxC;QACC,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,iBAAiB,EAAE,CAAC;YACjE,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAChC,MAAM,CAAC,MAAM,EACb,MAAM,CAAC,gBAAgB,EACvB,MAAM,CAAC,OAAO,CACf,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,mDAAmD,EAAE;gBACpE,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;gBAC3C,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,GAAG,2BAA2B,CAAC,KAAK,CAAC;aACtC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAEO,uCAAuC,CAAC,MAO/C;QACC,IACE,CAAC,IAAI,CAAC,uBAAuB,CAAC,MAAM,CAAC,SAAS,CAAC;eAC5C,CACD,MAAM,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC;mBAC5B,CAAC,iCAAiC,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,CAC/E,EACD,CAAC;YACD,OAAO;QACT,CAAC;QAED,MAAM,cAAc,GAAG,MAAM,CAAC,iBAAiB,EAAE,mCAAmC,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QACnH,IAAI,cAAc,IAAI,MAAM,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,CAAC;YACxC,MAAM,gBAAgB,GAAG,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,UAAU,EAAE,EAAE,CACjE,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,gBAAgB,EAAE,IAAI,CAAC,CACrE,CAAC;YACF,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,IAAI,gBAAgB,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;gBAC3F,OAAO;YACT,CAAC;QACH,CAAC;QAED,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAChC,SAAS,CAAC,aAAa,EACvB,MAAM,CAAC,gBAAgB,EACvB;YACE,sBAAsB,EAAE,2BAA2B,CAAC,iCAAiC;YACrF,OAAO,EAAE;gBACP,wBAAwB;gBACxB,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,SAAS;gBACrC,YAAY,EAAE,MAAM,CAAC,YAAY;aAClC;SACF,CACF,CAAC;IACJ,CAAC;IAED;;;;;;;;;OASG;IACH,KAAK,CAAC,2BAA2B,CAC/B,IAAyB,EACzB,YAA0B,EAC1B,gBAAuC,EACvC,OAA2B,EAC3B,iBAAmD;QAEnD,gEAAgE;QAChE,oBAAoB,CAAC,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,gBAAgB,EAAE,cAAc,CAAC,CAAC;QAExF,oCAAoC;QACpC,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,aAAa,CAAC,YAAY,CAAC,EAAE,CAAC;YACzD,OAAO;QACT,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAAC;QAE1E,IAAI,CAAC,QAAQ,CAAC,mCAAmC,EAAE;YACjD,YAAY;YACZ,eAAe,EAAE,UAAU,CAAC,MAAM;SACnC,CAAC,CAAC;QAEH,kCAAkC;QAClC,MAAM,iBAAiB,GAAa,EAAE,CAAC;QAEvC,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACnC,MAAM,WAAW,GAAG,kCAAkC,CAAC,IAAI,EAAE,SAAS,CAAC,SAAS,CAAC,CAAC;YAClF,IAAI,CAAC,uCAAuC,CAAC;gBAC3C,IAAI;gBACJ,SAAS;gBACT,WAAW;gBACX,YAAY;gBACZ,gBAAgB;gBAChB,iBAAiB;aAClB,CAAC,CAAC;YAEH,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;gBACrC,MAAM,YAAY,GAAG,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,KAAK,EAAE,gBAAgB,EAAE,IAAI,CAAC,CAAC;gBAEnF,6DAA6D;gBAC7D,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,SAAS,CAAC,YAAY,CAAC;gBACtD,IAAI,QAAQ,IAAI,QAAQ,KAAK,SAAS,IAAI,YAAY,CAAC,MAAM,GAAG,QAAQ,EAAE,CAAC;oBACzE,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAChC,SAAS,CAAC,aAAa,EACvB,gBAAgB,EAChB;wBACE,sBAAsB,EAAE,2BAA2B,CAAC,mBAAmB;wBACvE,OAAO,EAAE;4BACP,wBAAwB;4BACxB,SAAS,EAAE,SAAS,CAAC,SAAS;4BAC9B,gBAAgB,EAAE,UAAU,CAAC,gBAAgB;4BAC7C,YAAY;4BACZ,QAAQ;4BACR,aAAa,EAAE,YAAY,CAAC,MAAM;yBACnC;qBACF,CACF,CAAC;gBACJ,CAAC;gBAED,iBAAiB,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,CAAC;YAC1C,CAAC;QACH,CAAC;QAED,qBAAqB;QACrB,KAAK,MAAM,MAAM,IAAI,iBAAiB,EAAE,CAAC;YACvC,kFAAkF;YAClF,cAAc,CAAC,MAAM,EAAE,IAAI,CAAC,YAAY,EAAE,gBAAgB,EAAE,QAAQ,CAAC,CAAC;YAEtE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,MAAM,EAAE,gBAAgB,EAAE,OAAO,CAAC,CAAC;YAEhF,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAChC,SAAS,CAAC,SAAS,EACnB,gBAAgB,EAChB;oBACE,sBAAsB,EAAE,2BAA2B,CAAC,cAAc;oBAClE,OAAO,EAAE;wBACP,wBAAwB;wBACxB,MAAM;wBACN,YAAY;qBACb;iBACF,CACF,CAAC;YACJ,CAAC;YAED,IAAI,CAAC,kBAAkB,CAAC,IAAI,EAAE,gBAAgB,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC;YAE1E,mEAAmE;YACnE,kDAAkD;QACpD,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,6CAA6C,EAAE;YAC3D,YAAY;YACZ,mBAAmB,EAAE,iBAAiB,CAAC,MAAM;SAC9C,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;OAQG;IACH;;;;;;;;;;;;OAYG;IACK,uBAAuB,CAAC,OAA2B;QACzD,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,cAAc,KAAK,SAAS;YAAE,OAAO,OAAO,CAAC;QACrE,MAAM,EAAE,cAAc,EAAE,mBAAmB,EAAE,GAAG,gBAAgB,EAAE,GAAG,OAAO,CAAC;QAC7E,OAAO,gBAAgB,CAAC;IAC1B,CAAC;IAED,KAAK,CAAC,0BAA0B,CAC9B,IAAyB,EACzB,YAA0B,EAC1B,UAAkB,EAClB,gBAAuC,EACvC,OAA2B,EAC3B,iBAAmD;QAEnD,gEAAgE;QAChE,oBAAoB,CAAC,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,gBAAgB,EAAE,cAAc,CAAC,CAAC;QACxF,kBAAkB,CAAC,UAAU,EAAE,IAAI,CAAC,YAAY,EAAE,gBAAgB,EAAE,YAAY,CAAC,CAAC;QAElF,kFAAkF;QAClF,OAAO,GAAG,IAAI,CAAC,uBAAuB,CAAC,OAAO,CAAC,CAAC;QAEhD,oCAAoC;QACpC,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,aAAa,CAAC,YAAY,CAAC,EAAE,CAAC;YACzD,OAAO;QACT,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAAC;QAE1E,IAAI,CAAC,QAAQ,CAAC,mCAAmC,EAAE;YACjD,YAAY;YACZ,UAAU;YACV,eAAe,EAAE,UAAU,CAAC,MAAM;SACnC,CAAC,CAAC;QAEH,0BAA0B;QAC1B,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACnC,MAAM,oBAAoB,GAAG,kCAAkC,CAAC,IAAI,EAAE,SAAS,CAAC,SAAS,CAAC,CAAC;YAC3F,IAAI,CAAC,uCAAuC,CAAC;gBAC3C,IAAI;gBACJ,SAAS;gBACT,WAAW,EAAE,oBAAoB;gBACjC,YAAY;gBACZ,gBAAgB;gBAChB,iBAAiB;aAClB,CAAC,CAAC;YACH,IACE,IAAI,CAAC,uBAAuB,CAAC,SAAS,CAAC;mBACpC,CAAC,iBAAiB,EAAE,mCAAmC,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,EACjF,CAAC;gBACD,SAAS;YACX,CAAC;YACD,MAAM,WAAW,GAAG,kCAAkC,CAAC,IAAI,EAAE,SAAS,CAAC,SAAS,CAAC,CAAC;YAElF,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;gBACrC,MAAM,YAAY,GAAG,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,KAAK,EAAE,gBAAgB,EAAE,IAAI,CAAC,CAAC;gBACnF,KAAK,MAAM,MAAM,IAAI,YAAY,EAAE,CAAC;oBAClC,MAAM,IAAI,CAAC,kBAAkB,CAC3B,MAAM,EACN,YAAY,EACZ,UAAU,EACV,SAAS,CAAC,SAAS,EACnB,gBAAgB,EAChB,OAAO,CACR,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,6CAA6C,EAAE;YAC3D,YAAY;YACZ,UAAU;SACX,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;;;;;;;OAcG;IACH,KAAK,CAAC,0BAA0B,CAC9B,IAAyB,EACzB,gBAAqC,EACrC,YAA0B,EAC1B,UAAkB,EAClB,gBAAuC,EACvC,OAA2B,EAC3B,iBAAmD;QAEnD,gEAAgE;QAChE,oBAAoB,CAAC,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,gBAAgB,EAAE,cAAc,CAAC,CAAC;QACxF,kBAAkB,CAAC,UAAU,EAAE,IAAI,CAAC,YAAY,EAAE,gBAAgB,EAAE,YAAY,CAAC,CAAC;QAElF,kFAAkF;QAClF,OAAO,GAAG,IAAI,CAAC,uBAAuB,CAAC,OAAO,CAAC,CAAC;QAEhD,oCAAoC;QACpC,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,aAAa,CAAC,YAAY,CAAC,EAAE,CAAC;YACzD,OAAO;QACT,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAAC;QAC1E,MAAM,oBAAoB,GAAG,2BAA2B,CAAC,gBAAgB,EAAE,IAAI,CAAwB,CAAC;QAExG,IAAI,CAAC,QAAQ,CAAC,mCAAmC,EAAE;YACjD,YAAY;YACZ,UAAU;YACV,eAAe,EAAE,UAAU,CAAC,MAAM;SACnC,CAAC,CAAC;QAEH,0BAA0B;QAC1B,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACnC,MAAM,oBAAoB,GAAG,kCAAkC,CAAC,IAAI,EAAE,SAAS,CAAC,SAAS,CAAC,CAAC;YAC3F,IAAI,CAAC,uCAAuC,CAAC;gBAC3C,IAAI;gBACJ,SAAS;gBACT,WAAW,EAAE,oBAAoB;gBACjC,YAAY;gBACZ,gBAAgB;gBAChB,iBAAiB;aAClB,CAAC,CAAC;YACH,IACE,IAAI,CAAC,uBAAuB,CAAC,SAAS,CAAC;mBACpC,CAAC,iBAAiB,EAAE,mCAAmC,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,EACjF,CAAC;gBACD,SAAS;YACX,CAAC;YACD,MAAM,cAAc,GAAG,IAAI,CAAC,kBAAkB,CAC5C,kCAAkC,CAAC,gBAAgB,EAAE,SAAS,CAAC,SAAS,CAAC,EACzE,gBAAgB,EAChB,KAAK,CACN,CAAC;YACF,MAAM,cAAc,GAAG,IAAI,CAAC,kBAAkB,CAC5C,kCAAkC,CAAC,oBAAoB,EAAE,SAAS,CAAC,SAAS,CAAC,EAC7E,gBAAgB,EAChB,IAAI,CACL,CAAC;YAEF,MAAM,eAAe,GAAG,IAAI,CAAC,gBAAgB,CAAC,cAAc,EAAE,cAAc,CAAC,CAAC;YAC9E,IAAI,eAAe,CAAC,yBAAyB,IAAI,SAAS,CAAC,YAAY,CAAC,WAAW,KAAK,KAAK,EAAE,CAAC;gBAC9F,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAChC,SAAS,CAAC,aAAa,EACvB,gBAAgB,EAChB;oBACE,sBAAsB,EAAE,2BAA2B,CAAC,4BAA4B;oBAChF,OAAO,EAAE;wBACP,wBAAwB;wBACxB,SAAS,EAAE,SAAS,CAAC,SAAS;wBAC9B,YAAY;wBACZ,UAAU;qBACX;iBACF,CACF,CAAC;YACJ,CAAC;YAED,KAAK,MAAM,IAAI,IAAI,eAAe,CAAC,KAAK,EAAE,CAAC;gBACzC,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,EAAE,OAAO,IAAI,EAAE,CAAC;gBACrD,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,EAAE,OAAO,IAAI,EAAE,CAAC;gBACrD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC;gBACnC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC;gBACnC,MAAM,UAAU,GACd,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI;oBAC3B,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;oBACvC,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;gBAE1C,IAAI,CAAC,UAAU,EAAE,CAAC;oBAChB,SAAS;gBACX,CAAC;gBAED,MAAM,gBAAgB,GAAG,IAAI,CAAC,aAAa,EAAE,UAAU,CAAC,gBAAgB;uBACnE,IAAI,CAAC,aAAa,EAAE,UAAU,CAAC,gBAAgB,CAAC;gBAErD,wCAAwC;gBACxC,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,SAAS,CAAC,YAAY,CAAC;gBACnE,IAAI,WAAW,KAAK,KAAK,EAAE,CAAC;oBAC1B,MAAM,cAAc,GAAG,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;oBAEhE,IAAI,CAAC,QAAQ,EAAE,CAAC;wBACd,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;4BAC9B,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAChC,SAAS,CAAC,aAAa,EACvB,gBAAgB,EAChB;gCACE,sBAAsB,EAAE,2BAA2B,CAAC,0BAA0B;gCAC9E,OAAO,EAAE;oCACP,wBAAwB;oCACxB,SAAS,EAAE,SAAS,CAAC,SAAS;oCAC9B,gBAAgB;oCAChB,YAAY;oCACZ,UAAU;iCACX;6BACF,CACF,CAAC;wBACJ,CAAC;oBACH,CAAC;yBAAM,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBACrC,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAChC,SAAS,CAAC,aAAa,EACvB,gBAAgB,EAChB;4BACE,sBAAsB,EAAE,2BAA2B,CAAC,0BAA0B;4BAC9E,OAAO,EAAE;gCACP,wBAAwB;gCACxB,SAAS,EAAE,SAAS,CAAC,SAAS;gCAC9B,gBAAgB;gCAChB,YAAY;gCACZ,UAAU;gCACV,cAAc;6BACf;yBACF,CACF,CAAC;oBACJ,CAAC;gBACH,CAAC;gBAED,IAAI,QAAQ,IAAI,QAAQ,KAAK,SAAS,IAAI,UAAU,CAAC,MAAM,GAAG,QAAQ,EAAE,CAAC;oBACvE,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAChC,SAAS,CAAC,aAAa,EACvB,gBAAgB,EAChB;wBACE,sBAAsB,EAAE,2BAA2B,CAAC,mBAAmB;wBACvE,OAAO,EAAE;4BACP,wBAAwB;4BACxB,SAAS,EAAE,SAAS,CAAC,SAAS;4BAC9B,gBAAgB;4BAChB,YAAY;4BACZ,UAAU;4BACV,QAAQ;4BACR,QAAQ,EAAE,UAAU,CAAC,MAAM;yBAC5B;qBACF,CACF,CAAC;gBACJ,CAAC;gBAED,KAAK,MAAM,MAAM,IAAI,UAAU,EAAE,CAAC;oBAChC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;wBAC1B,6FAA6F;wBAC3F,cAAc,CAAC,MAAM,EAAE,IAAI,CAAC,YAAY,EAAE,gBAAgB,EAAE,QAAQ,CAAC,CAAC;wBAEtE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,MAAM,EAAE,gBAAgB,EAAE,OAAO,CAAC,CAAC;wBAEhF,IAAI,CAAC,IAAI,EAAE,CAAC;4BACV,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAChC,SAAS,CAAC,SAAS,EACnB,gBAAgB,EAChB;gCACE,sBAAsB,EAAE,2BAA2B,CAAC,cAAc;gCAClE,OAAO,EAAE;oCACP,wBAAwB;oCACxB,MAAM;oCACN,YAAY;oCACZ,UAAU;oCACV,gBAAgB;iCACjB;6BACF,CACF,CAAC;wBACJ,CAAC;wBAED,IAAI,CAAC,kBAAkB,CAAC,IAAI,EAAE,gBAAgB,EAAE,EAAE,MAAM,EAAE,gBAAgB,EAAE,YAAY,EAAE,UAAU,EAAE,CAAC,CAAC;oBAC1G,CAAC;gBACH,CAAC;gBAED,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;oBACnC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;wBAC7B,2BAA2B;wBACzB,MAAM,IAAI,CAAC,sBAAsB,CAC/B,SAAS,EACT,SAAS,CAAC,SAAS,EACnB,gBAAgB,EAChB,OAAO,CACR,CAAC;oBACJ,CAAC;gBACH,CAAC;gBAED,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;oBACnC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;wBAC7B,qBAAqB;wBACnB,MAAM,IAAI,CAAC,kBAAkB,CAC3B,SAAS,EACT,YAAY,EACZ,UAAU,EACV,SAAS,CAAC,SAAS,EACnB,gBAAgB,EAChB,OAAO,CACR,CAAC;oBACJ,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,6CAA6C,EAAE;YAC3D,YAAY;YACZ,UAAU;SACX,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;OAOG;IACH;;;;;;OAMG;IACK,0BAA0B,CAAC,OAAsC,EAAE,IAAU;QACnF,OAAO;YACL,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC;YAClB,sBAAsB,EAAE;gBACtB,aAAa,EAAE,IAAI,CAAC,aAAa;gBACjC,cAAc,EAAE,IAAI,CAAC,cAAc;gBACnC,MAAM,EAAE,IAAI,CAAC,MAAM;aACpB;SACF,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,0BAA0B,CAC9B,YAA0B,EAC1B,UAAkB,EAClB,gBAAuC,EACvC,OAA2B;QAE3B,8EAA8E;QAC9E,OAAO,GAAG,IAAI,CAAC,uBAAuB,CAAC,OAAO,CAAC,CAAC;QAEhD,oCAAoC;QACpC,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,aAAa,CAAC,YAAY,CAAC,EAAE,CAAC;YACzD,OAAO;QACT,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAAC;QAE1E,IAAI,CAAC,QAAQ,CAAC,mCAAmC,EAAE;YACjD,YAAY;YACZ,UAAU;YACV,eAAe,EAAE,UAAU,CAAC,MAAM;SACnC,CAAC,CAAC;QAEH,wCAAwC;QACxC,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,oBAAoB,CAC9D,YAAY,EACZ,UAAU,EACV,SAAS,EAAE,yCAAyC;QACpD,gBAAgB,EAChB,OAAO,CACR,CAAC;QAEF,yEAAyE;QACzE,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;YAC/B,gGAAgG;YAChG,wFAAwF;YACxF,MAAM,eAAe,GAAG,IAAI,CAAC,0BAA0B,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YACvE,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;gBAC1B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,yFAAyF,EAAE;oBAC1G,MAAM,EAAE,IAAI,CAAC,MAAM;oBACnB,YAAY;oBACZ,UAAU;iBACX,CAAC,CAAC;gBACH,MAAM,IAAI,CAAC,2BAA2B,CACpC,IAAI,CAAC,MAAM,EACX,SAAS,EACT,gBAAgB,EAChB,eAAe,CAChB,CAAC;gBACF,SAAS;YACX,CAAC;YAED,MAAM,SAAS,GAAG,IAAI,CAAC,kBAAkB,CAAC,oBAAoB,CAC5D,YAAY,EACZ,IAAI,CAAC,eAAe,CACrB,CAAC;YAEF,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,iDAAiD;gBACjD,MAAM,IAAI,CAAC,2BAA2B,CACpC,IAAI,CAAC,MAAM,EACX,SAAS,EACT,gBAAgB,EAChB,eAAe,CAChB,CAAC;gBACF,SAAS;YACX,CAAC;YAED,MAAM,cAAc,GAAG,SAAS,CAAC,YAAY,CAAC,cAAc,IAAI,SAAS,CAAC;YAE1E,MAAM,IAAI,CAAC,2BAA2B,CACpC,IAAI,CAAC,MAAM,EACX,cAAc,EACd,gBAAgB,EAChB,eAAe,CAChB,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,6CAA6C,EAAE;YAC3D,YAAY;YACZ,UAAU;YACV,mBAAmB,EAAE,WAAW,CAAC,MAAM;SACxC,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA0DG;IACH,KAAK,CAAC,iCAAiC,CACrC,YAA0B,EAC1B,UAAkB,EAClB,kBAAqC,EACrC,gBAAuC,EACvC,OAA2B;QAE3B,OAAO,GAAG,IAAI,CAAC,uBAAuB,CAAC,OAAO,CAAC,CAAC;QAEhD,IAAI,kBAAkB,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,aAAa,CAAC,YAAY,CAAC,EAAE,CAAC;YAC5F,OAAO;QACT,CAAC;QAED,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,kBAAkB,CAAC,CAAC;QACnD,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,oBAAoB,CAC9D,YAAY,EACZ,UAAU,EACV,SAAS,EAAE,4CAA4C;QACvD,gBAAgB,EAChB,OAAO,CACR,CAAC;QAEF,IAAI,WAAW,GAAG,CAAC,CAAC;QACpB,IAAI,mBAAmB,GAAG,CAAC,CAAC;QAC5B,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;YAC/B,8FAA8F;YAC9F,yFAAyF;YACzF,oFAAoF;YACpF,MAAM,gBAAgB,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC;YAC/C,MAAM,eAAe,GAAG,gBAAgB,IAAI,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,eAAgB,CAAC,CAAC;YACtF,IAAI,CAAC,eAAe,EAAE,CAAC;gBACrB,SAAS;YACX,CAAC;YACD,IAAI,gBAAgB,EAAE,CAAC;gBACrB;;;;;;;;mBAQG;gBACH,mBAAmB,IAAI,CAAC,CAAC;gBACzB,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,+FAA+F;sBAC7F,6FAA6F;sBAC7F,+CAA+C,EACjD,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAClD,CAAC;YACJ,CAAC;YACD,gGAAgG;YAChG,mGAAmG;YACnG,MAAM,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,gBAAgB,EAAE,IAAI,CAAC,0BAA0B,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;YACjH,WAAW,EAAE,CAAC;QAChB,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,oDAAoD,EAAE;YAClE,YAAY;YACZ,UAAU;YACV,gBAAgB,EAAE,WAAW,CAAC,MAAM;YACpC,WAAW;YACX,aAAa,EAAE,WAAW,CAAC,MAAM,GAAG,WAAW;YAC/C,mBAAmB;SACpB,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;OAOG;IACK,cAAc,CAAC,UAAe,EAAE,gBAAwC,EAAE,SAAkB,KAAK;QACvG,IAAI,UAAU,KAAK,IAAI,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YACpD,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;YACjE,IAAI,QAAQ,IAAI,UAAU,EAAE,CAAC;gBAC3B,OAAO,IAAI,CAAC,cAAc,CAAE,UAAmC,CAAC,MAAM,EAAE,gBAAgB,EAAE,MAAM,CAAC,CAAC;YACpG,CAAC;YAED,IAAI,SAAS,IAAI,UAAU,EAAE,CAAC;gBAC5B,OAAO,IAAI,CAAC,cAAc,CAAE,UAAoC,CAAC,OAAO,EAAE,gBAAgB,EAAE,MAAM,CAAC,CAAC;YACtG,CAAC;QACH,CAAC;QAED,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;YAC9B,MAAM,YAAY,GAAa,EAAE,CAAC;YAClC,KAAK,MAAM,MAAM,IAAI,UAAU,EAAE,CAAC;gBAChC,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;oBACvD,IAAI,MAAM,EAAE,CAAC;wBACX,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAChC,SAAS,CAAC,UAAU,EACpB,gBAAgB,EAChB;4BACE,sBAAsB,EAAE,2BAA2B,CAAC,yBAAyB;4BAC7E,OAAO,EAAE;gCACP,wBAAwB;gCACxB,MAAM;gCACN,YAAY,EAAE,OAAO,MAAM;6BAC5B;yBACF,CACF,CAAC;oBACJ,CAAC;oBACD,SAAS;gBACX,CAAC;gBACD,IAAI,CAAC;oBACH,cAAc,CAAC,MAAM,EAAE,IAAI,CAAC,YAAY,EAAE,gBAAgB,EAAE,QAAQ,CAAC,CAAC;oBACtE,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBAC5B,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,IAAI,MAAM,EAAE,CAAC;wBACX,MAAM,KAAK,CAAC,CAAC,wDAAwD;oBACvE,CAAC;oBACD,0EAA0E;oBAC1E,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,+CAA+C,EAAE;wBAChE,MAAM;wBACN,GAAG,2BAA2B,CAAC,KAAK,CAAC;qBACtC,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YACD,OAAO,YAAY,CAAC;QACtB,CAAC;QAED,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YAC/D,IAAI,CAAC;gBACH,cAAc,CAAC,UAAU,EAAE,IAAI,CAAC,YAAY,EAAE,gBAAgB,EAAE,QAAQ,CAAC,CAAC;gBAC1E,OAAO,CAAC,UAAU,CAAC,CAAC;YACtB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,MAAM,EAAE,CAAC;oBACX,MAAM,KAAK,CAAC;gBACd,CAAC;gBACD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,+CAA+C,EAAE;oBAChE,MAAM,EAAE,UAAU;oBAClB,GAAG,2BAA2B,CAAC,KAAK,CAAC;iBACtC,CAAC,CAAC;gBACH,OAAO,EAAE,CAAC;YACZ,CAAC;QACH,CAAC;QAED,IAAI,MAAM,IAAI,UAAU,KAAK,IAAI,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC9D,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAChC,SAAS,CAAC,UAAU,EACpB,gBAAgB,EAChB;gBACE,sBAAsB,EAAE,2BAA2B,CAAC,wBAAwB;gBAC5E,OAAO,EAAE;oBACP,wBAAwB;oBACxB,YAAY,EAAE,OAAO,UAAU;iBAChC;aACF,CACF,CAAC;QACJ,CAAC;QAED,OAAO,EAAE,CAAC;IACZ,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,kBAAkB,CAC9B,MAAc,EACd,YAA0B,EAC1B,UAAkB,EAClB,SAAiB,EACjB,gBAAuC,EACvC,OAA2B;QAE3B,2EAA2E;QAC3E,cAAc,CAAC,MAAM,EAAE,IAAI,CAAC,YAAY,EAAE,gBAAgB,EAAE,QAAQ,CAAC,CAAC;QACtE,oBAAoB,CAAC,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,gBAAgB,EAAE,cAAc,CAAC,CAAC;QACxF,kBAAkB,CAAC,UAAU,EAAE,IAAI,CAAC,YAAY,EAAE,gBAAgB,EAAE,YAAY,CAAC,CAAC;QAClF,iBAAiB,CAAC,SAAS,EAAE,IAAI,CAAC,YAAY,EAAE,gBAAgB,EAAE,WAAW,CAAC,CAAC;QAE/E,mGAAmG;QACnG,6EAA6E;QAC7E,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,MAAM,EAAE,gBAAgB,EAAE,OAAO,CAAC,CAAC;QAChF,IAAI,IAAI;YACJ,IAAI,CAAC,MAAM,KAAK,UAAU,CAAC,MAAM;YACjC,IAAI,CAAC,kBAAkB,KAAK,YAAY;YACxC,IAAI,CAAC,gBAAgB,KAAK,UAAU;YACpC,IAAI,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;YACvC,sDAAsD;YACtD,IAAI,CAAC,QAAQ,CAAC,gDAAgD,EAAE;gBAC9D,MAAM;gBACN,YAAY;gBACZ,UAAU;gBACV,SAAS;aACV,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,gFAAgF;QAChF,uGAAuG;QACvG,kFAAkF;QAClF,MAAM,IAAI,CAAC,YAAY,CAAC,kBAAkB,CACxC,MAAM,EACN,YAAY,EACZ,UAAU,EACV,SAAS,EACT,gBAAgB,EAChB,OAAO,CACR,CAAC;IACJ,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,sBAAsB,CAClC,MAAc,EACd,SAAiB,EACjB,gBAAuC,EACvC,OAA2B;QAE3B,kFAAkF;QAClF,cAAc,CAAC,MAAM,EAAE,IAAI,CAAC,YAAY,EAAE,gBAAgB,EAAE,QAAQ,CAAC,CAAC;QAEtE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,MAAM,EAAE,gBAAgB,EAAE,OAAO,CAAC,CAAC;QAChF,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,UAAU,CAAC,MAAM,EAAE,CAAC;YAC/C,wDAAwD;YACxD,OAAO;QACT,CAAC;QAED,wCAAwC;QACxC,MAAM,IAAI,CAAC,YAAY,CAAC,sBAAsB,CAAC,MAAM,EAAE,gBAAgB,EAAE,OAAO,CAAC,CAAC;IACpF,CAAC;IAED;;;;;;OAMG;IACK,KAAK,CAAC,2BAA2B,CACvC,MAAc,EACd,QAA8C,EAC9C,gBAAuC,EACvC,OAA2B;QAE3B,IAAI,CAAC,QAAQ,CAAC,kCAAkC,EAAE;YAChD,MAAM;YACN,QAAQ;SACT,CAAC,CAAC;QAEH,QAAQ,QAAQ,EAAE,CAAC;YACjB,KAAK,SAAS;gBACZ,0EAA0E;gBAC1E,wEAAwE;gBACxE,kEAAkE;gBAClE,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,MAAM,EAAE,gBAAgB,EAAE,OAAO,CAAC,CAAC;gBACtE,MAAM;YAER,KAAK,aAAa;gBAChB,wCAAwC;gBACxC,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,MAAM,EAAE,gBAAgB,EAAE,OAAO,CAAC,CAAC;gBACtE,MAAM;YAER,KAAK,QAAQ;gBACX,sDAAsD;gBACtD,MAAM,IAAI,CAAC,YAAY,CAAC,sBAAsB,CAAC,MAAM,EAAE,gBAAgB,EAAE,OAAO,CAAC,CAAC;gBAClF,MAAM;YAER;gBACE,qBAAqB;gBACrB,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,MAAM,EAAE,gBAAgB,EAAE,OAAO,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC;IAEO,kBAAkB,CACxB,WAAuC,EACvC,gBAAuC,EACvC,MAAe;QAMf,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE;YACpC,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,KAAK,EAAE,gBAAgB,EAAE,MAAM,CAAC,CAAC;YAChF,OAAO;gBACL,UAAU;gBACV,OAAO;gBACP,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;aAC/C,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,gBAAgB,CACtB,cAIE,EACF,cAIE;QAgBF,MAAM,KAAK,GAWN,EAAE,CAAC;QAER,MAAM,YAAY,GAAG,CAAC,GAAG,cAAc,CAAC,CAAC;QACzC,MAAM,YAAY,GAAG,CAAC,GAAG,cAAc,CAAC,CAAC;QAEzC,MAAM,SAAS,GAAG,IAAI,GAAG,CACvB,CAAC,GAAG,YAAY,EAAE,GAAG,YAAY,CAAC;aAC/B,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,aAAa,CAAC;aAC9C,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CACxF,CAAC;QAEF,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;YACjC,MAAM,UAAU,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,aAAa,KAAK,QAAQ,CAAC,CAAC;YAC/F,MAAM,UAAU,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,aAAa,KAAK,QAAQ,CAAC,CAAC;YAE/F,OAAO,UAAU,CAAC,MAAM,GAAG,CAAC,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtD,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,EAAG,CAAC;gBACrC,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,EAAG,CAAC;gBACrC,YAAY,CAAC,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;gBACvD,YAAY,CAAC,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;gBACvD,KAAK,CAAC,IAAI,CAAC,EAAE,aAAa,EAAE,QAAQ,EAAE,aAAa,EAAE,QAAQ,EAAE,CAAC,CAAC;YACnE,CAAC;QACH,CAAC;QAED,MAAM,mBAAmB,GAAG,IAAI,GAAG,EAA+B,CAAC;QACnE,KAAK,MAAM,KAAK,IAAI,YAAY,EAAE,CAAC;YACjC,IAAI,KAAK,CAAC,UAAU,CAAC,aAAa,EAAE,CAAC;gBACnC,SAAS;YACX,CAAC;YACD,MAAM,MAAM,GAAG,mBAAmB,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;YAC9D,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACnB,mBAAmB,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QACnD,CAAC;QAED,KAAK,MAAM,QAAQ,IAAI,CAAC,GAAG,YAAY,CAAC,EAAE,CAAC;YACzC,IAAI,QAAQ,CAAC,UAAU,CAAC,aAAa,EAAE,CAAC;gBACtC,SAAS;YACX,CAAC;YAED,MAAM,MAAM,GAAG,mBAAmB,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;YAC3D,MAAM,QAAQ,GAAG,MAAM,EAAE,KAAK,EAAE,CAAC;YACjC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,SAAS;YACX,CAAC;YAED,YAAY,CAAC,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;YACvD,YAAY,CAAC,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;YACvD,KAAK,CAAC,IAAI,CAAC,EAAE,aAAa,EAAE,QAAQ,EAAE,aAAa,EAAE,QAAQ,EAAE,CAAC,CAAC;QACnE,CAAC;QAED,MAAM,yBAAyB,GAC7B,YAAY,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,aAAa,CAAC;YAC7D,YAAY,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;QAEhE,OAAO,YAAY,CAAC,MAAM,GAAG,CAAC,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1D,KAAK,CAAC,IAAI,CAAC;gBACT,aAAa,EAAE,YAAY,CAAC,KAAK,EAAE;gBACnC,aAAa,EAAE,YAAY,CAAC,KAAK,EAAE;aACpC,CAAC,CAAC;QACL,CAAC;QAED,OAAO;YACL,KAAK;YACL,yBAAyB;SAC1B,CAAC;IACJ,CAAC;CACF,CAAA;AAjnCY,kCAAkC;IAD9C,UAAU,EAAE;IAKR,WAAA,MAAM,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAA;IAEjC,WAAA,MAAM,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,CAAA;IAE9C,WAAA,MAAM,CAAC,kBAAkB,CAAC,yBAAyB,CAAC,CAAA;IAEpD,WAAA,MAAM,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,CAAA;+CAHhB,0BAA0B;QAEpB,gCAAgC;QAEtC,mBAAmB;GAXzC,kCAAkC,CAinC9C","sourcesContent":["/*\n File Operation Handler Backend Service\n \n Handles file field operations during resource CRUD operations.\n * Validates and processes file fields when resources are created, updated, or deleted.\n \n Features:\n * - File validation before resource creation/update\n * - File linking/unlinking during resource operations\n * - Cascade behavior on resource deletion\n * - Idempotent operations (safe to retry)\n /\n\nimport { injectable, inject } from 'inversify';\nimport { ResourceType, ErrorType, ErrorCustomMessageReference, FileStatus, FILE_LINKABLE_STATUSES } from '@wildo-ai/saas-models';\nimport { FileGenerationSource } from '@wildo-ai/zod-decorators';\nimport { SAAS_SERVICE_TYPES } from '~wildo-backend-lib/inject/models/service-types';\nimport type { LoggerService } from '~wildo-backend-lib/monitoring/logger/services/logger.service';\nimport { ErrorBuilderBackendService } from '~wildo-backend-lib/errors/services/error-builder.backend.service';\nimport { projectCaughtErrorLogFields } from '~wildo-backend-lib/errors/utils/error-log-level-classification.backend.utils';\nimport { FileFieldDetectionBackendService, FileFieldMetadata } from './file-field-detection.backend.service';\nimport { FilesBackendService } from './files.backend.service';\nimport { ExecutionContext } from '~wildo-backend-lib/runtime/models/execution-context.backend.schemas';\nimport { RepositoryOptions } from '~wildo-backend-lib/base-classes/models/repositories.backend.schemas';\nimport { File } from '@wildo-ai/saas-models';\nimport { validateFileId, validateResourceType, validateResourceId, validateFieldName } from '~wildo-backend-lib/files/utils/file-validation.utils';\nimport {\n enumerateFileFieldValueOccurrences,\n hasExplicitCanonicalFieldMutation,\n mergeEffectiveResourceState,\n type FileFieldValueOccurrence,\n} from '~wildo-backend-lib/files/utils/file-field-schema-path.backend.utils';\n\ninterface FileFieldWriteProcessingOptions {\n /\n Internal-only escape hatch for framework materializers. Public write DTOs\n * still fail closed for generated PDF fields; only the exact generated\n * field/file-id pairs created by the service registry are accepted here.\n /\n frameworkGeneratedPdfFileIdsByField?: Record<string, readonly string[]>;\n}\n\n@injectable()\nexport class FileOperationHandlerBackendService {\n protected logDebug: (message: string, context?: Record<string, unknown>) => void;\n\n constructor(\n @inject(SAAS_SERVICE_TYPES.Logger)\n private readonly logger: LoggerService,\n @inject(SAAS_SERVICE_TYPES.ErrorBuilderService)\n private readonly errorBuilder: ErrorBuilderBackendService,\n @inject(SAAS_SERVICE_TYPES.FileFieldDetectionService)\n private readonly fileFieldDetection: FileFieldDetectionBackendService,\n @inject(SAAS_SERVICE_TYPES.FilesBackendService)\n private readonly filesService: FilesBackendService,\n ) {\n this.logDebug = this.logger.debugByType('FileOperationHandlerBackendService');\n this.logger.setDebugTypeLogging('FileOperationHandlerBackendService', false);\n }\n\n private isGeneratedPdfFileField(fileField: FileFieldMetadata): boolean {\n return fileField.fileMetadata.generation?.source === FileGenerationSource.PDF_TEMPLATE;\n }\n\n /\n The ONE place that decides whether a file's status admits linking (issue #320).\n \n Both link-time validators (CREATE and UPDATE) used to compare against the literal\n * `FileStatus.UPLOADED`, so a file the scanner had certified `CLEAN` — a status\n * `FILE_STATUS_TRANSITIONS` explicitly allows to become `LINKED` — was refused with an error\n * naming `UPLOADED` as the expected state. Whether a scanned file could be attached depended on\n * beating the scanner. The admitted set now comes from `FILE_LINKABLE_STATUSES`, the single copy\n * shared with `FilesBackendService.linkFileToResource`.\n \n `SCANNING` is named separately: the file is not wrong, it is not yet KNOWN to be safe, so the\n * caller must learn to retry rather than re-upload. Every other non-linkable status (PENDING,\n * FAILED, DELETED, ORPHANED, INFECTED, QUARANTINED, and LINKED-to-something-else, which\n * `linkFileToResource` distinguishes further) is a terminal refusal for this write.\n \n @param diagnostics - log-only context; never rendered to the caller.\n /\n private assertFileLinkable(\n file: Pick<File, 'status'>,\n executionContext: ExecutionContext<any>,\n diagnostics: Record<string, unknown>,\n ): void {\n if (FILE_LINKABLE_STATUSES.has(file.status)) {\n return;\n }\n throw this.errorBuilder.buildError(\n ErrorType.BUSINESS_RULE,\n executionContext,\n {\n customMessageReference: file.status === FileStatus.SCANNING\n ? ErrorCustomMessageReference.FILE_SCAN_IN_PROGRESS\n : ErrorCustomMessageReference.FILE_NOT_LINKABLE,\n context: {\n // diagnostic (log-only)\n ...diagnostics,\n fileStatus: file.status,\n linkableStatuses: [...FILE_LINKABLE_STATUSES],\n },\n }\n );\n }\n\n /\n Best-effort cleanup for the previous generated PDF after REGENERATE.\n \n The parent field already points at the newly rendered file when this runs.\n * A cleanup failure must not roll back a successful regeneration; the normal\n * file cleanup path can still pick up the stale generated file later.\n /\n async softDeleteGeneratedFileReplacement(params: {\n fileId: string \| undefined;\n replacementFileId: string;\n fieldName: string;\n executionContext: ExecutionContext<any>;\n options?: RepositoryOptions;\n }): Promise<void> {\n if (!params.fileId \|\| params.fileId === params.replacementFileId) {\n return;\n }\n\n try {\n await this.filesService.deleteFile(\n params.fileId,\n params.executionContext,\n params.options,\n );\n } catch (error) {\n this.logger.warn('Failed to soft-delete replaced generated PDF file', {\n fileId: params.fileId,\n replacementFileId: params.replacementFileId,\n fieldName: params.fieldName,\n ...projectCaughtErrorLogFields(error),\n });\n }\n }\n\n private assertGeneratedFileFieldNotUserSupplied(params: {\n data: Record<string, any>;\n fileField: FileFieldMetadata;\n occurrences: FileFieldValueOccurrence[];\n resourceType: ResourceType;\n executionContext: ExecutionContext<any>;\n processingOptions?: FileFieldWriteProcessingOptions;\n }): void {\n if (\n !this.isGeneratedPdfFileField(params.fileField)\n \|\| (\n params.occurrences.length === 0\n && !hasExplicitCanonicalFieldMutation(params.data, params.fileField.fieldName)\n )\n ) {\n return;\n }\n\n const allowedFileIds = params.processingOptions?.frameworkGeneratedPdfFileIdsByField?.[params.fileField.fieldName];\n if (allowedFileIds && params.occurrences.length > 0) {\n const allowed = new Set(allowedFileIds);\n const submittedFileIds = params.occurrences.flatMap((occurrence) =>\n this.extractFileIds(occurrence.value, params.executionContext, true),\n );\n if (submittedFileIds.length > 0 && submittedFileIds.every((fileId) => allowed.has(fileId))) {\n return;\n }\n }\n\n throw this.errorBuilder.buildError(\n ErrorType.BUSINESS_RULE,\n params.executionContext,\n {\n customMessageReference: ErrorCustomMessageReference.FILE_GENERATED_FIELD_NOT_WRITABLE,\n context: {\n // diagnostic (log-only)\n fieldName: params.fileField.fieldName,\n resourceType: params.resourceType,\n },\n }\n );\n }\n\n /\n Validate file fields before resource creation.\n * Ensures files exist, are in UPLOADED status, and are ready to be linked.\n \n @param data - Resource data being created\n * @param resourceType - Resource type\n * @param executionContext - Execution context\n * @param options - Repository options (for transaction support)\n * @throws Error if validation fails (fail fast before resource creation)\n /\n async validateFileFieldsForCreate(\n data: Record<string, any>,\n resourceType: ResourceType,\n executionContext: ExecutionContext<any>,\n options?: RepositoryOptions,\n processingOptions?: FileFieldWriteProcessingOptions,\n ): Promise<void> {\n // Validate inputs (CRITICAL: Prevents invalid data propagation)\n validateResourceType(resourceType, this.errorBuilder, executionContext, 'resourceType');\n\n // Check if resource has file fields\n if (!this.fileFieldDetection.hasFileFields(resourceType)) {\n return;\n }\n\n const fileFields = this.fileFieldDetection.detectFileFields(resourceType);\n\n this.logDebug('Validating file fields for CREATE', {\n resourceType,\n fileFieldsCount: fileFields.length,\n });\n\n // Collect all fileIds to validate\n const fileIdsToValidate: string[] = [];\n\n for (const fileField of fileFields) {\n const occurrences = enumerateFileFieldValueOccurrences(data, fileField.fieldName);\n this.assertGeneratedFileFieldNotUserSupplied({\n data,\n fileField,\n occurrences,\n resourceType,\n executionContext,\n processingOptions,\n });\n\n for (const occurrence of occurrences) {\n const fieldFileIds = this.extractFileIds(occurrence.value, executionContext, true);\n\n // F4-01: Enforce maxFiles constraint per concrete occurrence\n const { maxFiles, multiple } = fileField.fileMetadata;\n if (multiple && maxFiles !== undefined && fieldFileIds.length > maxFiles) {\n throw this.errorBuilder.buildError(\n ErrorType.BUSINESS_RULE,\n executionContext,\n {\n customMessageReference: ErrorCustomMessageReference.FILE_TOO_MANY_FILES,\n context: {\n // diagnostic (log-only)\n fieldName: fileField.fieldName,\n runtimeFieldPath: occurrence.runtimeFieldPath,\n resourceType,\n maxFiles,\n receivedCount: fieldFileIds.length,\n },\n }\n );\n }\n\n fileIdsToValidate.push(...fieldFileIds);\n }\n }\n\n // Validate each file\n for (const fileId of fileIdsToValidate) {\n // Validate fileId format (CRITICAL: Prevents query injection and database errors)\n validateFileId(fileId, this.errorBuilder, executionContext, 'fileId');\n\n const file = await this.filesService.getFile(fileId, executionContext, options);\n\n if (!file) {\n throw this.errorBuilder.buildError(\n ErrorType.NOT_FOUND,\n executionContext,\n {\n customMessageReference: ErrorCustomMessageReference.FILE_NOT_FOUND,\n context: {\n // diagnostic (log-only)\n fileId,\n resourceType,\n },\n }\n );\n }\n\n this.assertFileLinkable(file, executionContext, { fileId, resourceType });\n\n // Note: uploadContext validation can be added in Phase 2 if needed\n // For now, we only validate that file is UPLOADED\n }\n\n this.logDebug('File fields validation for CREATE completed', {\n resourceType,\n validatedFilesCount: fileIdsToValidate.length,\n });\n }\n\n /\n Process file fields after resource creation.\n * Links files to the newly created resource.\n \n @param data - Resource data that was created\n * @param resourceType - Resource type\n * @param resourceId - ID of the created resource\n * @param executionContext - Execution context\n /\n /\n Strip the PARENT resource's optimistic-lock version from options before any\n * child-file write.\n \n When a resource CREATE/UPDATE links/unlinks a `z_file()` field, the file is a\n * SEPARATE document with its own `_version_db_doc` lifecycle. If the parent request\n * carried an `If-Match` header, its `ifMatchVersion` must NOT fence the file update:\n * the repository would add a `{ _version_db_doc: <parentVersion> }` filter to the\n * FILE query, which (mis)matches the file by the PARENT's version and yields a\n * spurious `version_conflict` (the avatar-save 409: parent `If-Match: 0` leaking onto\n * the internal `files \| update`). The transaction context is preserved so the file\n * write still participates in the parent's atomic boundary.\n /\n private stripParentVersionFence(options?: RepositoryOptions): RepositoryOptions \| undefined {\n if (!options \|\| options.ifMatchVersion === undefined) return options;\n const { ifMatchVersion: _parentVersionFence, ...fileWriteOptions } = options;\n return fileWriteOptions;\n }\n\n async processFileFieldsForCreate(\n data: Record<string, any>,\n resourceType: ResourceType,\n resourceId: string,\n executionContext: ExecutionContext<any>,\n options?: RepositoryOptions,\n processingOptions?: FileFieldWriteProcessingOptions,\n ): Promise<void> {\n // Validate inputs (CRITICAL: Prevents invalid data propagation)\n validateResourceType(resourceType, this.errorBuilder, executionContext, 'resourceType');\n validateResourceId(resourceId, this.errorBuilder, executionContext, 'resourceId');\n\n // A child-file link/unlink must not inherit the parent's optimistic-lock version.\n options = this.stripParentVersionFence(options);\n\n // Check if resource has file fields\n if (!this.fileFieldDetection.hasFileFields(resourceType)) {\n return;\n }\n\n const fileFields = this.fileFieldDetection.detectFileFields(resourceType);\n\n this.logDebug('Processing file fields for CREATE', {\n resourceType,\n resourceId,\n fileFieldsCount: fileFields.length,\n });\n\n // Process each file field\n for (const fileField of fileFields) {\n const submittedOccurrences = enumerateFileFieldValueOccurrences(data, fileField.fieldName);\n this.assertGeneratedFileFieldNotUserSupplied({\n data,\n fileField,\n occurrences: submittedOccurrences,\n resourceType,\n executionContext,\n processingOptions,\n });\n if (\n this.isGeneratedPdfFileField(fileField)\n && !processingOptions?.frameworkGeneratedPdfFileIdsByField?.[fileField.fieldName]\n ) {\n continue;\n }\n const occurrences = enumerateFileFieldValueOccurrences(data, fileField.fieldName);\n\n for (const occurrence of occurrences) {\n const fieldFileIds = this.extractFileIds(occurrence.value, executionContext, true);\n for (const fileId of fieldFileIds) {\n await this.linkFileToResource(\n fileId,\n resourceType,\n resourceId,\n fileField.fieldName,\n executionContext,\n options\n );\n }\n }\n }\n\n this.logDebug('File fields processing for CREATE completed', {\n resourceType,\n resourceId,\n });\n }\n\n /\n Process file fields after resource update.\n * Unlinks old files and links new files.\n * Validates new files BEFORE unlinking old ones (fail fast).\n \n Note: This method handles partial updates correctly. If a file field is not present\n * in `data`, it is treated as unchanged (not removed). Only explicit changes to file\n * field values trigger unlinking/linking operations.\n \n @param data - Updated resource data (may be partial update - only changed fields)\n * @param existingResource - Existing resource before update (complete state)\n * @param resourceType - Resource type\n * @param resourceId - Resource ID\n * @param executionContext - Execution context\n /\n async processFileFieldsForUpdate(\n data: Record<string, any>,\n existingResource: Record<string, any>,\n resourceType: ResourceType,\n resourceId: string,\n executionContext: ExecutionContext<any>,\n options?: RepositoryOptions,\n processingOptions?: FileFieldWriteProcessingOptions,\n ): Promise<void> {\n // Validate inputs (CRITICAL: Prevents invalid data propagation)\n validateResourceType(resourceType, this.errorBuilder, executionContext, 'resourceType');\n validateResourceId(resourceId, this.errorBuilder, executionContext, 'resourceId');\n\n // A child-file link/unlink must not inherit the parent's optimistic-lock version.\n options = this.stripParentVersionFence(options);\n\n // Check if resource has file fields\n if (!this.fileFieldDetection.hasFileFields(resourceType)) {\n return;\n }\n\n const fileFields = this.fileFieldDetection.detectFileFields(resourceType);\n const effectiveNewResource = mergeEffectiveResourceState(existingResource, data) as Record<string, any>;\n\n this.logDebug('Processing file fields for UPDATE', {\n resourceType,\n resourceId,\n fileFieldsCount: fileFields.length,\n });\n\n // Process each file field\n for (const fileField of fileFields) {\n const submittedOccurrences = enumerateFileFieldValueOccurrences(data, fileField.fieldName);\n this.assertGeneratedFileFieldNotUserSupplied({\n data,\n fileField,\n occurrences: submittedOccurrences,\n resourceType,\n executionContext,\n processingOptions,\n });\n if (\n this.isGeneratedPdfFileField(fileField)\n && !processingOptions?.frameworkGeneratedPdfFileIdsByField?.[fileField.fieldName]\n ) {\n continue;\n }\n const oldOccurrences = this.prepareOccurrences(\n enumerateFileFieldValueOccurrences(existingResource, fileField.fieldName),\n executionContext,\n false,\n );\n const newOccurrences = this.prepareOccurrences(\n enumerateFileFieldValueOccurrences(effectiveNewResource, fileField.fieldName),\n executionContext,\n true,\n );\n\n const occurrencePairs = this.matchOccurrences(oldOccurrences, newOccurrences);\n if (occurrencePairs.requiresAmbiguousFallback && fileField.fileMetadata.overridable === false) {\n throw this.errorBuilder.buildError(\n ErrorType.BUSINESS_RULE,\n executionContext,\n {\n customMessageReference: ErrorCustomMessageReference.FILE_NESTED_UPDATE_AMBIGUOUS,\n context: {\n // diagnostic (log-only)\n fieldName: fileField.fieldName,\n resourceType,\n resourceId,\n },\n }\n );\n }\n\n for (const pair of occurrencePairs.pairs) {\n const oldFileIds = pair.oldOccurrence?.fileIds ?? [];\n const newFileIds = pair.newOccurrence?.fileIds ?? [];\n const oldSet = new Set(oldFileIds);\n const newSet = new Set(newFileIds);\n const hasChanged =\n oldSet.size !== newSet.size \|\|\n !oldFileIds.every(id => newSet.has(id)) \|\|\n !newFileIds.every(id => oldSet.has(id));\n\n if (!hasChanged) {\n continue;\n }\n\n const runtimeFieldPath = pair.newOccurrence?.occurrence.runtimeFieldPath\n ?? pair.oldOccurrence?.occurrence.runtimeFieldPath;\n\n // F4-02: Enforce overridable constraint\n const { overridable, multiple, maxFiles } = fileField.fileMetadata;\n if (overridable === false) {\n const removedFileIds = oldFileIds.filter(id => !newSet.has(id));\n\n if (!multiple) {\n if (removedFileIds.length > 0) {\n throw this.errorBuilder.buildError(\n ErrorType.BUSINESS_RULE,\n executionContext,\n {\n customMessageReference: ErrorCustomMessageReference.FILE_FIELD_NOT_OVERRIDABLE,\n context: {\n // diagnostic (log-only)\n fieldName: fileField.fieldName,\n runtimeFieldPath,\n resourceType,\n resourceId,\n },\n }\n );\n }\n } else if (removedFileIds.length > 0) {\n throw this.errorBuilder.buildError(\n ErrorType.BUSINESS_RULE,\n executionContext,\n {\n customMessageReference: ErrorCustomMessageReference.FILE_FIELD_NOT_OVERRIDABLE,\n context: {\n // diagnostic (log-only)\n fieldName: fileField.fieldName,\n runtimeFieldPath,\n resourceType,\n resourceId,\n removedFileIds,\n },\n }\n );\n }\n }\n\n if (multiple && maxFiles !== undefined && newFileIds.length > maxFiles) {\n throw this.errorBuilder.buildError(\n ErrorType.BUSINESS_RULE,\n executionContext,\n {\n customMessageReference: ErrorCustomMessageReference.FILE_TOO_MANY_FILES,\n context: {\n // diagnostic (log-only)\n fieldName: fileField.fieldName,\n runtimeFieldPath,\n resourceType,\n resourceId,\n maxFiles,\n newTotal: newFileIds.length,\n },\n }\n );\n }\n\n for (const fileId of newFileIds) {\n if (!oldSet.has(fileId)) {\n // New file - validate fileId format (CRITICAL: Prevents query injection and database errors)\n validateFileId(fileId, this.errorBuilder, executionContext, 'fileId');\n\n const file = await this.filesService.getFile(fileId, executionContext, options);\n\n if (!file) {\n throw this.errorBuilder.buildError(\n ErrorType.NOT_FOUND,\n executionContext,\n {\n customMessageReference: ErrorCustomMessageReference.FILE_NOT_FOUND,\n context: {\n // diagnostic (log-only)\n fileId,\n resourceType,\n resourceId,\n runtimeFieldPath,\n },\n }\n );\n }\n\n this.assertFileLinkable(file, executionContext, { fileId, runtimeFieldPath, resourceType, resourceId });\n }\n }\n\n for (const oldFileId of oldFileIds) {\n if (!newSet.has(oldFileId)) {\n // File removed - unlink it\n await this.unlinkFileFromResource(\n oldFileId,\n fileField.fieldName,\n executionContext,\n options\n );\n }\n }\n\n for (const newFileId of newFileIds) {\n if (!oldSet.has(newFileId)) {\n // New file - link it\n await this.linkFileToResource(\n newFileId,\n resourceType,\n resourceId,\n fileField.fieldName,\n executionContext,\n options\n );\n }\n }\n }\n }\n\n this.logDebug('File fields processing for UPDATE completed', {\n resourceType,\n resourceId,\n });\n }\n\n /\n Process file fields before resource deletion.\n * Applies onParentDelete behavior to all linked files.\n \n @param resourceType - Resource type being deleted\n * @param resourceId - Resource ID being deleted\n * @param executionContext - Execution context\n /\n /\n Carry the owner ALREADY VERIFIED by `listFilesForResource` (which authorized each returned file\n * against the parent resource's derived scope) onto the options used for the subsequent delete/erase,\n * so the deletion gate (`getFile`'s per-file authorize) checks against that owner rather than the\n * identity-less system-cascade EC — which would otherwise DENY the subject's own file and abort the\n * erasure. Never widens access: `authorizeFileAccess` still matches this against the file's own scope.\n /\n private withAuthoritativeFileScope(options: RepositoryOptions \| undefined, file: File): RepositoryOptions {\n return {\n ...(options ?? {}),\n authoritativeFileScope: {\n applicationId: file.applicationId,\n organizationId: file.organizationId,\n userId: file.userId,\n },\n };\n }\n\n async processFileFieldsForDelete(\n resourceType: ResourceType,\n resourceId: string,\n executionContext: ExecutionContext<any>,\n options?: RepositoryOptions\n ): Promise<void> {\n // A child-file cleanup must not inherit the parent's optimistic-lock version.\n options = this.stripParentVersionFence(options);\n\n // Check if resource has file fields\n if (!this.fileFieldDetection.hasFileFields(resourceType)) {\n return;\n }\n\n const fileFields = this.fileFieldDetection.detectFileFields(resourceType);\n\n this.logDebug('Processing file fields for DELETE', {\n resourceType,\n resourceId,\n fileFieldsCount: fileFields.length,\n });\n\n // Get all files linked to this resource\n const linkedFiles = await this.filesService.listFilesForResource(\n resourceType,\n resourceId,\n undefined, // fieldName - undefined means all fields\n executionContext,\n options\n );\n\n // Process each file based on onParentDelete behavior from field metadata\n for (const file of linkedFiles) {\n // Forward the owner `listFilesForResource` already verified for THIS file to the deletion gate,\n // so a system-cascade teardown (identity-less EC) does not deny the subject's own file.\n const teardownOptions = this.withAuthoritativeFileScope(options, file);\n if (!file.linkedFieldName) {\n this.logger.warn('Linked file missing linkedFieldName during parent delete; defaulting to cascade cleanup', {\n fileId: file.fileId,\n resourceType,\n resourceId,\n });\n await this.applyOnParentDeleteBehavior(\n file.fileId,\n 'cascade',\n executionContext,\n teardownOptions\n );\n continue;\n }\n\n const fileField = this.fileFieldDetection.getFileFieldMetadata(\n resourceType,\n file.linkedFieldName\n );\n\n if (!fileField) {\n // Field not found - use default cascade behavior\n await this.applyOnParentDeleteBehavior(\n file.fileId,\n 'cascade',\n executionContext,\n teardownOptions\n );\n continue;\n }\n\n const onParentDelete = fileField.fileMetadata.onParentDelete \|\| 'cascade';\n\n await this.applyOnParentDeleteBehavior(\n file.fileId,\n onParentDelete,\n executionContext,\n teardownOptions\n );\n }\n\n this.logDebug('File fields processing for DELETE completed', {\n resourceType,\n resourceId,\n processedFilesCount: linkedFiles.length,\n });\n }\n\n /\n Process file fields when a resource row is IMPERSONALIZED-AND-RETAINED (gate G-FILE).\n \n The row survives for a legal/audit obligation, so this is NOT the delete cascade — but \"keep the\n * record\" must not become \"keep the personal data\". A field-level scrub cannot reach inside a stored\n * blob (a passport scan stays a passport scan however the row is rewritten), so for a file field the\n * only real erasure is deleting the file.\n \n Which files? Exactly the ones whose field the author marked personal with `.impersonalizeWith()` —\n * the SAME author-responsibility contract as ordinary fields, reusing the same vocabulary rather\n * than inventing a second axis. The caller passes the scrub patch's field names:\n * - field IS scrubbed (REMOVE) ⇒ delete the file. The scrub patch nulls the pointer in the same\n * write, so the retained row keeps no dangling reference.\n * - field NOT scrubbed (KEEP / untreated) ⇒ leave the file. This is how a legally-required artifact\n * (an invoice PDF that IS the retained record) survives the erasure.\n \n Why deletion is required rather than relying on the row being hidden: the resource-scoped serve\n * route inherits the parent's READ authorization, so a hidden retained row already blocks it — but\n * the GLOBAL `/files/:fileId` route (direct / consumable-token / public-share) is explicitly NOT\n * resource-scoped and re-checks only the file's OWN scope. A file left ACTIVE therefore stays\n * reachable there even though its parent row is invisible.\n \n Erasure here goes through `FilesBackendService.eraseFile`, NOT `deleteFile`: besides marking the\n * file DELETED it scrubs the file row's OWN personal data (`originalFilename`, `uploadedBy`) in the\n * same write. Without that, the row's metadata stayed readable on the global metadata route for the\n * weeks until physical cleanup — an \"erasure\" that leaked `passport-jane-doe.pdf` the whole time. A\n * lifecycle delete deliberately keeps that provenance; a privacy erasure must not.\n \n Physical storage cleanup stays with the existing cleanup batch, so an erasure never mixes a DB\n * rollback with non-transactional storage side effects.\n \n ## The MIDDLE state — keep-but-hide — is deliberately NOT built (decided 2026-08-09)\n \n There are only two outcomes above, and the consequence of the second is worth stating plainly: a KEEP\n * file stays ORDINARILY READABLE to the file's own scope (its organization) through the global route,\n * indefinitely, even though its parent row is now invisible. A third state — retained but reachable only\n * through the audited see-through door, mirroring the parent row's posture — was considered and refused\n * for three reasons, in order of weight:\n \n 1. It would contradict a decision already taken. The concrete case that motivates it is the\n * invoice PDF, and the billing retention decision was explicitly \"retained as audit material, and\n * invoices stay VISIBLE\" for ordinary accounting. Hiding retained invoice documents would reverse\n * that, and the sibling ruling on invoice URLs went the same way: keep the document, close the\n * ordinary door only where the document is not itself the record.\n * 2. *A hiding door is worthless without its reading door, and shipping one alone is worse than\n neither.** Withholding the file without also building an audited retrieval primitive would make\n * the legally-required artifact unreachable by ANYONE — destroying the very access the retention\n * obligation exists to preserve. (Same pairing rule as the cross-tenant repair doors: a marking\n * door without its release door is a one-way door calling itself a window.)\n * 3. No shipped resource needs it. The author already controls both ends per field: mark the field\n * and the file is erased, leave it and the file survives. The gap is only the middle, and nothing in\n * the tree declares a file field that is simultaneously personal, legally required, and must stop\n * being ordinarily visible.\n \n What would trigger building it: a resource declaring exactly that combination. The shape is then a\n * new `FileStatus` member excluded from `FILE_DOWNLOADABLE_STATUSES` and added to\n * `FILE_METADATA_WITHHELD_STATUSES`, a `FILE_STATUS_TRANSITIONS` entry, and — non-optional — an audited\n * see-through retrieval primitive alongside it. Do not add the status without the door.\n /\n async processFileFieldsForImpersonalize(\n resourceType: ResourceType,\n resourceId: string,\n scrubbedFieldNames: readonly string[],\n executionContext: ExecutionContext<any>,\n options?: RepositoryOptions\n ): Promise<void> {\n options = this.stripParentVersionFence(options);\n\n if (scrubbedFieldNames.length === 0 \|\| !this.fileFieldDetection.hasFileFields(resourceType)) {\n return;\n }\n\n const scrubbedFields = new Set(scrubbedFieldNames);\n const linkedFiles = await this.filesService.listFilesForResource(\n resourceType,\n resourceId,\n undefined, // all fields — we filter by treatment below\n executionContext,\n options\n );\n\n let erasedCount = 0;\n let unattributableCount = 0;\n for (const file of linkedFiles) {\n // Fail-closed on an unattributable file: without `linkedFieldName` we cannot tell whether its\n // field was marked personal, and silently keeping it risks retaining an erased subject's\n // document. The delete cascade defaults such a file to cleanup for the same reason.\n const isUnattributable = !file.linkedFieldName;\n const isScrubbedField = isUnattributable \|\| scrubbedFields.has(file.linkedFieldName!);\n if (!isScrubbedField) {\n continue;\n }\n if (isUnattributable) {\n /\n WARN, not debug: this is an irreversible deletion taken on a GUESS.\n \n The fail-closed default is right — a file we cannot attribute might be the erased subject's\n * passport scan — but it can equally destroy a file the retention obligation existed to KEEP\n * (an invoice PDF whose link lost its field name). Either way the cause is upstream metadata,\n * so it has to be visible: the sibling delete cascade has warned here since before this path\n * existed, and this one erased silently. Same decision, same audibility.\n /\n unattributableCount += 1;\n this.logger.warn(\n '[Retention] Erasing a linked file with no `linkedFieldName` during impersonalize — it cannot '\n + 'be attributed to a field, so the fail-closed default deletes it. If this file was meant to '\n + 'be RETAINED, its link metadata is the defect.',\n { resourceType, resourceId, fileId: file.fileId },\n );\n }\n // Forward the owner `listFilesForResource` already verified for THIS file to the deletion gate,\n // so a system-cascade (identity-less EC) impersonalize erase does not deny the subject's own file.\n await this.filesService.eraseFile(file.fileId, executionContext, this.withAuthoritativeFileScope(options, file));\n erasedCount++;\n }\n\n this.logDebug('File fields processing for IMPERSONALIZE completed', {\n resourceType,\n resourceId,\n linkedFilesCount: linkedFiles.length,\n erasedCount,\n retainedCount: linkedFiles.length - erasedCount,\n unattributableCount,\n });\n }\n\n /\n Extract file IDs from field value (handles single file or array).\n \n @param fieldValue - The raw field value from the resource object\n * @param executionContext - Current execution context\n * @param strict - When true (user input / new values), throws on invalid fileIds.\n * When false (existing DB data), silently filters and logs warnings.\n /\n private extractFileIds(fieldValue: any, executionContext?: ExecutionContext<any>, strict: boolean = false): string[] {\n if (fieldValue === null \|\| fieldValue === undefined) {\n return [];\n }\n\n if (typeof fieldValue === 'object' && !Array.isArray(fieldValue)) {\n if ('fileId' in fieldValue) {\n return this.extractFileIds((fieldValue as { fileId?: unknown }).fileId, executionContext, strict);\n }\n\n if ('fileIds' in fieldValue) {\n return this.extractFileIds((fieldValue as { fileIds?: unknown }).fileIds, executionContext, strict);\n }\n }\n\n if (Array.isArray(fieldValue)) {\n const validFileIds: string[] = [];\n for (const fileId of fieldValue) {\n if (typeof fileId !== 'string' \|\| fileId.trim() === '') {\n if (strict) {\n throw this.errorBuilder.buildError(\n ErrorType.VALIDATION,\n executionContext,\n {\n customMessageReference: ErrorCustomMessageReference.FILE_ID_VALIDATION_FAILED,\n context: {\n // diagnostic (log-only)\n fileId,\n receivedType: typeof fileId,\n },\n }\n );\n }\n continue;\n }\n try {\n validateFileId(fileId, this.errorBuilder, executionContext, 'fileId');\n validFileIds.push(fileId);\n } catch (error) {\n if (strict) {\n throw error; // Re-throw in strict mode — user provided invalid input\n }\n // Tolerant mode: filter out and warn (handles corrupt DB data gracefully)\n this.logger.warn('Invalid fileId filtered out during extraction', {\n fileId,\n ...projectCaughtErrorLogFields(error),\n });\n }\n }\n return validFileIds;\n }\n\n if (typeof fieldValue === 'string' && fieldValue.trim() !== '') {\n try {\n validateFileId(fieldValue, this.errorBuilder, executionContext, 'fileId');\n return [fieldValue];\n } catch (error) {\n if (strict) {\n throw error;\n }\n this.logger.warn('Invalid fileId filtered out during extraction', {\n fileId: fieldValue,\n ...projectCaughtErrorLogFields(error),\n });\n return [];\n }\n }\n\n if (strict && fieldValue !== null && fieldValue !== undefined) {\n throw this.errorBuilder.buildError(\n ErrorType.VALIDATION,\n executionContext,\n {\n customMessageReference: ErrorCustomMessageReference.FILE_FIELD_VALUE_INVALID,\n context: {\n // diagnostic (log-only)\n receivedType: typeof fieldValue,\n },\n }\n );\n }\n\n return [];\n }\n\n /\n Link a file to a resource.\n * Handles race conditions (idempotent - safe to call multiple times).\n /\n private async linkFileToResource(\n fileId: string,\n resourceType: ResourceType,\n resourceId: string,\n fieldName: string,\n executionContext: ExecutionContext<any>,\n options?: RepositoryOptions\n ): Promise<void> {\n // Validate inputs (CRITICAL: Prevents query injection and database errors)\n validateFileId(fileId, this.errorBuilder, executionContext, 'fileId');\n validateResourceType(resourceType, this.errorBuilder, executionContext, 'resourceType');\n validateResourceId(resourceId, this.errorBuilder, executionContext, 'resourceId');\n validateFieldName(fieldName, this.errorBuilder, executionContext, 'fieldName');\n\n // Check if file is already linked to the same resource (idempotent check - before calling service)\n // This prevents unnecessary service calls and handles idempotent cases early\n const file = await this.filesService.getFile(fileId, executionContext, options);\n if (file &&\n file.status === FileStatus.LINKED &&\n file.linkedResourceType === resourceType &&\n file.linkedResourceId === resourceId &&\n file.linkedFieldName === fieldName) {\n // Already linked to same resource - skip (idempotent)\n this.logDebug('File already linked to same resource, skipping', {\n fileId,\n resourceType,\n resourceId,\n fieldName,\n });\n return;\n }\n\n // Link file - errors propagate to fail the transaction (Decision 2.2: Option A)\n // FilesBackendService.linkFileToResource() handles idempotent cases internally (returns existing file)\n // All other errors (NOT_FOUND, BUSINESS_RULE, INTERNAL) should fail the operation\n await this.filesService.linkFileToResource(\n fileId,\n resourceType,\n resourceId,\n fieldName,\n executionContext,\n options\n );\n }\n\n /\n Unlink a file from a resource.\n * Applies onParentDelete behavior.\n /\n private async unlinkFileFromResource(\n fileId: string,\n fieldName: string,\n executionContext: ExecutionContext<any>,\n options?: RepositoryOptions\n ): Promise<void> {\n // Validate fileId format (CRITICAL: Prevents query injection and database errors)\n validateFileId(fileId, this.errorBuilder, executionContext, 'fileId');\n\n const file = await this.filesService.getFile(fileId, executionContext, options);\n if (!file \|\| file.status !== FileStatus.LINKED) {\n // Already unlinked or doesn't exist - skip (idempotent)\n return;\n }\n\n // Unlink file (sets status to ORPHANED)\n await this.filesService.unlinkFileFromResource(fileId, executionContext, options);\n }\n\n /\n Apply onParentDelete behavior to a file.\n \n @param fileId - File ID\n * @param behavior - Behavior: 'cascade', 'soft-delete', or 'orphan'\n * @param executionContext - Execution context\n */\n private async applyOnParentDeleteBehavior(\n fileId: string,\n behavior: 'cascade' \| 'soft-delete' \| 'orphan',\n executionContext: ExecutionContext<any>,\n options?: RepositoryOptions\n ): Promise<void> {\n this.logDebug('Applying onParentDelete behavior', {\n fileId,\n behavior,\n });\n\n switch (behavior) {\n case 'cascade':\n // Cascade now marks the file as DELETED only. Physical storage cleanup is\n // intentionally deferred to the cleanup batch so resource deletes never\n // mix Mongo rollback with non-transactional storage side effects.\n await this.filesService.deleteFile(fileId, executionContext, options);\n break;\n\n case 'soft-delete':\n // Soft delete: update status to DELETED\n await this.filesService.deleteFile(fileId, executionContext, options);\n break;\n\n case 'orphan':\n // Unlink: clear parent fields, set status to ORPHANED\n await this.filesService.unlinkFileFromResource(fileId, executionContext, options);\n break;\n\n default:\n // Default to cascade\n await this.filesService.deleteFile(fileId, executionContext, options);\n }\n }\n\n private prepareOccurrences(\n occurrences: FileFieldValueOccurrence[],\n executionContext: ExecutionContext<any>,\n strict: boolean,\n ): Array<{\n occurrence: FileFieldValueOccurrence;\n fileIds: string[];\n signature: string;\n }> {\n return occurrences.map((occurrence) => {\n const fileIds = this.extractFileIds(occurrence.value, executionContext, strict);\n return {\n occurrence,\n fileIds,\n signature: JSON.stringify([...fileIds].sort()),\n };\n });\n }\n\n private matchOccurrences(\n oldOccurrences: Array<{\n occurrence: FileFieldValueOccurrence;\n fileIds: string[];\n signature: string;\n }>,\n newOccurrences: Array<{\n occurrence: FileFieldValueOccurrence;\n fileIds: string[];\n signature: string;\n }>,\n ): {\n pairs: Array<{\n oldOccurrence?: {\n occurrence: FileFieldValueOccurrence;\n fileIds: string[];\n signature: string;\n };\n newOccurrence?: {\n occurrence: FileFieldValueOccurrence;\n fileIds: string[];\n signature: string;\n };\n }>;\n requiresAmbiguousFallback: boolean;\n } {\n const pairs: Array<{\n oldOccurrence?: {\n occurrence: FileFieldValueOccurrence;\n fileIds: string[];\n signature: string;\n };\n newOccurrence?: {\n occurrence: FileFieldValueOccurrence;\n fileIds: string[];\n signature: string;\n };\n }> = [];\n\n const remainingOld = [...oldOccurrences];\n const remainingNew = [...newOccurrences];\n\n const stableIds = new Set(\n [...remainingOld, ...remainingNew]\n .map((entry) => entry.occurrence.ownerStableId)\n .filter((value): value is string => typeof value === 'string' && value.trim() !== ''),\n );\n\n for (const stableId of stableIds) {\n const oldMatches = remainingOld.filter((entry) => entry.occurrence.ownerStableId === stableId);\n const newMatches = remainingNew.filter((entry) => entry.occurrence.ownerStableId === stableId);\n\n while (oldMatches.length > 0 && newMatches.length > 0) {\n const oldEntry = oldMatches.shift()!;\n const newEntry = newMatches.shift()!;\n remainingOld.splice(remainingOld.indexOf(oldEntry), 1);\n remainingNew.splice(remainingNew.indexOf(newEntry), 1);\n pairs.push({ oldOccurrence: oldEntry, newOccurrence: newEntry });\n }\n }\n\n const oldSignatureBuckets = new Map<string, typeof remainingOld>();\n for (const entry of remainingOld) {\n if (entry.occurrence.ownerStableId) {\n continue;\n }\n const bucket = oldSignatureBuckets.get(entry.signature) ?? [];\n bucket.push(entry);\n oldSignatureBuckets.set(entry.signature, bucket);\n }\n\n for (const newEntry of [...remainingNew]) {\n if (newEntry.occurrence.ownerStableId) {\n continue;\n }\n\n const bucket = oldSignatureBuckets.get(newEntry.signature);\n const oldEntry = bucket?.shift();\n if (!oldEntry) {\n continue;\n }\n\n remainingOld.splice(remainingOld.indexOf(oldEntry), 1);\n remainingNew.splice(remainingNew.indexOf(newEntry), 1);\n pairs.push({ oldOccurrence: oldEntry, newOccurrence: newEntry });\n }\n\n const requiresAmbiguousFallback =\n remainingOld.some((entry) => !entry.occurrence.ownerStableId) &&\n remainingNew.some((entry) => !entry.occurrence.ownerStableId);\n\n while (remainingOld.length > 0 \|\| remainingNew.length > 0) {\n pairs.push({\n oldOccurrence: remainingOld.shift(),\n newOccurrence: remainingNew.shift(),\n });\n }\n\n return {\n pairs,\n requiresAmbiguousFallback,\n };\n }\n}\n"]}
1	+ {"version":3,"file":"file-operation-handler.backend.service.js","sourceRoot":"","sources":["../../../../src/files/services/file-operation-handler.backend.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;;;;;;;;;;;;;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAC/C,OAAO,EAAgB,SAAS,EAAE,2BAA2B,EAAE,UAAU,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AACjI,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,EAAE,kBAAkB,EAAE,MAAM,gDAAgD,CAAC;AAEpF,OAAO,EAAE,0BAA0B,EAAE,MAAM,kEAAkE,CAAC;AAC9G,OAAO,EAAE,2BAA2B,EAAE,MAAM,8EAA8E,CAAC;AAC3H,OAAO,EAAE,gCAAgC,EAAqB,MAAM,wCAAwC,CAAC;AAC7G,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAI9D,OAAO,EAAE,cAAc,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,sDAAsD,CAAC;AACnJ,OAAO,EACL,kCAAkC,EAClC,iCAAiC,EACjC,2BAA2B,GAE5B,MAAM,qEAAqE,CAAC;AAYtE,IAAM,kCAAkC,GAAxC,MAAM,kCAAkC;IAK1B;IAEA;IAEA;IAEA;IAVT,QAAQ,CAA+D;IAEjF,YAEmB,MAAqB,EAErB,YAAwC,EAExC,kBAAoD,EAEpD,YAAiC;QANjC,WAAM,GAAN,MAAM,CAAe;QAErB,iBAAY,GAAZ,YAAY,CAA4B;QAExC,uBAAkB,GAAlB,kBAAkB,CAAkC;QAEpD,iBAAY,GAAZ,YAAY,CAAqB;QAElD,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,oCAAoC,CAAC,CAAC;QAC9E,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,oCAAoC,EAAE,KAAK,CAAC,CAAC;IAC/E,CAAC;IAEO,uBAAuB,CAAC,SAA4B;QAC1D,OAAO,SAAS,CAAC,YAAY,CAAC,UAAU,EAAE,MAAM,KAAK,oBAAoB,CAAC,YAAY,CAAC;IACzF,CAAC;IAED;;;;;;;;;;;;;;;;OAgBG;IACK,kBAAkB,CACxB,IAA0B,EAC1B,gBAAuC,EACvC,WAAoC;QAEpC,IAAI,sBAAsB,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAC5C,OAAO;QACT,CAAC;QACD,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAChC,SAAS,CAAC,aAAa,EACvB,gBAAgB,EAChB;YACE,sBAAsB,EAAE,IAAI,CAAC,MAAM,KAAK,UAAU,CAAC,QAAQ;gBACzD,CAAC,CAAC,2BAA2B,CAAC,qBAAqB;gBACnD,CAAC,CAAC,2BAA2B,CAAC,iBAAiB;YACjD,OAAO,EAAE;gBACP,wBAAwB;gBACxB,GAAG,WAAW;gBACd,UAAU,EAAE,IAAI,CAAC,MAAM;gBACvB,gBAAgB,EAAE,CAAC,GAAG,sBAAsB,CAAC;aAC9C;SACF,CACF,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,kCAAkC,CAAC,MAMxC;QACC,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,iBAAiB,EAAE,CAAC;YACjE,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAChC,MAAM,CAAC,MAAM,EACb,MAAM,CAAC,gBAAgB,EACvB,MAAM,CAAC,OAAO,CACf,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,mDAAmD,EAAE;gBACpE,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;gBAC3C,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,GAAG,2BAA2B,CAAC,KAAK,CAAC;aACtC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAEO,uCAAuC,CAAC,MAO/C;QACC,IACE,CAAC,IAAI,CAAC,uBAAuB,CAAC,MAAM,CAAC,SAAS,CAAC;eAC5C,CACD,MAAM,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC;mBAC5B,CAAC,iCAAiC,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,CAC/E,EACD,CAAC;YACD,OAAO;QACT,CAAC;QAED,MAAM,cAAc,GAAG,MAAM,CAAC,iBAAiB,EAAE,mCAAmC,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QACnH,IAAI,cAAc,IAAI,MAAM,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,CAAC;YACxC,MAAM,gBAAgB,GAAG,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,UAAU,EAAE,EAAE,CACjE,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,gBAAgB,EAAE,IAAI,CAAC,CACrE,CAAC;YACF,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,IAAI,gBAAgB,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;gBAC3F,OAAO;YACT,CAAC;QACH,CAAC;QAED,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAChC,SAAS,CAAC,aAAa,EACvB,MAAM,CAAC,gBAAgB,EACvB;YACE,sBAAsB,EAAE,2BAA2B,CAAC,iCAAiC;YACrF,OAAO,EAAE;gBACP,wBAAwB;gBACxB,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,SAAS;gBACrC,YAAY,EAAE,MAAM,CAAC,YAAY;aAClC;SACF,CACF,CAAC;IACJ,CAAC;IAED;;;;;;;;;OASG;IACH,KAAK,CAAC,2BAA2B,CAC/B,IAAyB,EACzB,YAA0B,EAC1B,gBAAuC,EACvC,OAA2B,EAC3B,iBAAmD;QAEnD,gEAAgE;QAChE,oBAAoB,CAAC,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,gBAAgB,EAAE,cAAc,CAAC,CAAC;QAExF,oCAAoC;QACpC,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,aAAa,CAAC,YAAY,CAAC,EAAE,CAAC;YACzD,OAAO;QACT,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAAC;QAE1E,IAAI,CAAC,QAAQ,CAAC,mCAAmC,EAAE;YACjD,YAAY;YACZ,eAAe,EAAE,UAAU,CAAC,MAAM;SACnC,CAAC,CAAC;QAEH,kCAAkC;QAClC,MAAM,iBAAiB,GAAa,EAAE,CAAC;QAEvC,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACnC,MAAM,WAAW,GAAG,kCAAkC,CAAC,IAAI,EAAE,SAAS,CAAC,SAAS,CAAC,CAAC;YAClF,IAAI,CAAC,uCAAuC,CAAC;gBAC3C,IAAI;gBACJ,SAAS;gBACT,WAAW;gBACX,YAAY;gBACZ,gBAAgB;gBAChB,iBAAiB;aAClB,CAAC,CAAC;YAEH,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;gBACrC,MAAM,YAAY,GAAG,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,KAAK,EAAE,gBAAgB,EAAE,IAAI,CAAC,CAAC;gBAEnF,6DAA6D;gBAC7D,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,SAAS,CAAC,YAAY,CAAC;gBACtD,IAAI,QAAQ,IAAI,QAAQ,KAAK,SAAS,IAAI,YAAY,CAAC,MAAM,GAAG,QAAQ,EAAE,CAAC;oBACzE,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAChC,SAAS,CAAC,aAAa,EACvB,gBAAgB,EAChB;wBACE,sBAAsB,EAAE,2BAA2B,CAAC,mBAAmB;wBACvE,OAAO,EAAE;4BACP,wBAAwB;4BACxB,SAAS,EAAE,SAAS,CAAC,SAAS;4BAC9B,gBAAgB,EAAE,UAAU,CAAC,gBAAgB;4BAC7C,YAAY;4BACZ,QAAQ;4BACR,aAAa,EAAE,YAAY,CAAC,MAAM;yBACnC;qBACF,CACF,CAAC;gBACJ,CAAC;gBAED,iBAAiB,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,CAAC;YAC1C,CAAC;QACH,CAAC;QAED,qBAAqB;QACrB,KAAK,MAAM,MAAM,IAAI,iBAAiB,EAAE,CAAC;YACvC,kFAAkF;YAClF,cAAc,CAAC,MAAM,EAAE,IAAI,CAAC,YAAY,EAAE,gBAAgB,EAAE,QAAQ,CAAC,CAAC;YAEtE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,MAAM,EAAE,gBAAgB,EAAE,OAAO,CAAC,CAAC;YAEhF,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAChC,SAAS,CAAC,SAAS,EACnB,gBAAgB,EAChB;oBACE,sBAAsB,EAAE,2BAA2B,CAAC,cAAc;oBAClE,OAAO,EAAE;wBACP,wBAAwB;wBACxB,MAAM;wBACN,YAAY;qBACb;iBACF,CACF,CAAC;YACJ,CAAC;YAED,IAAI,CAAC,kBAAkB,CAAC,IAAI,EAAE,gBAAgB,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC;YAE1E,mEAAmE;YACnE,kDAAkD;QACpD,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,6CAA6C,EAAE;YAC3D,YAAY;YACZ,mBAAmB,EAAE,iBAAiB,CAAC,MAAM;SAC9C,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;OAQG;IACH;;;;;;;;;;;;OAYG;IACK,uBAAuB,CAAC,OAA2B;QACzD,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,cAAc,KAAK,SAAS;YAAE,OAAO,OAAO,CAAC;QACrE,MAAM,EAAE,cAAc,EAAE,mBAAmB,EAAE,GAAG,gBAAgB,EAAE,GAAG,OAAO,CAAC;QAC7E,OAAO,gBAAgB,CAAC;IAC1B,CAAC;IAED,KAAK,CAAC,0BAA0B,CAC9B,IAAyB,EACzB,YAA0B,EAC1B,UAAkB,EAClB,gBAAuC,EACvC,OAA2B,EAC3B,iBAAmD;QAEnD,gEAAgE;QAChE,oBAAoB,CAAC,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,gBAAgB,EAAE,cAAc,CAAC,CAAC;QACxF,kBAAkB,CAAC,UAAU,EAAE,IAAI,CAAC,YAAY,EAAE,gBAAgB,EAAE,YAAY,CAAC,CAAC;QAElF,kFAAkF;QAClF,OAAO,GAAG,IAAI,CAAC,uBAAuB,CAAC,OAAO,CAAC,CAAC;QAEhD,oCAAoC;QACpC,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,aAAa,CAAC,YAAY,CAAC,EAAE,CAAC;YACzD,OAAO;QACT,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAAC;QAE1E,IAAI,CAAC,QAAQ,CAAC,mCAAmC,EAAE;YACjD,YAAY;YACZ,UAAU;YACV,eAAe,EAAE,UAAU,CAAC,MAAM;SACnC,CAAC,CAAC;QAEH,0BAA0B;QAC1B,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACnC,MAAM,oBAAoB,GAAG,kCAAkC,CAAC,IAAI,EAAE,SAAS,CAAC,SAAS,CAAC,CAAC;YAC3F,IAAI,CAAC,uCAAuC,CAAC;gBAC3C,IAAI;gBACJ,SAAS;gBACT,WAAW,EAAE,oBAAoB;gBACjC,YAAY;gBACZ,gBAAgB;gBAChB,iBAAiB;aAClB,CAAC,CAAC;YACH,IACE,IAAI,CAAC,uBAAuB,CAAC,SAAS,CAAC;mBACpC,CAAC,iBAAiB,EAAE,mCAAmC,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,EACjF,CAAC;gBACD,SAAS;YACX,CAAC;YACD,MAAM,WAAW,GAAG,kCAAkC,CAAC,IAAI,EAAE,SAAS,CAAC,SAAS,CAAC,CAAC;YAElF,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;gBACrC,MAAM,YAAY,GAAG,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,KAAK,EAAE,gBAAgB,EAAE,IAAI,CAAC,CAAC;gBACnF,KAAK,MAAM,MAAM,IAAI,YAAY,EAAE,CAAC;oBAClC,MAAM,IAAI,CAAC,kBAAkB,CAC3B,MAAM,EACN,YAAY,EACZ,UAAU,EACV,SAAS,CAAC,SAAS,EACnB,gBAAgB,EAChB,OAAO,CACR,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,6CAA6C,EAAE;YAC3D,YAAY;YACZ,UAAU;SACX,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;;;;;;;OAcG;IACH,KAAK,CAAC,0BAA0B,CAC9B,IAAyB,EACzB,gBAAqC,EACrC,YAA0B,EAC1B,UAAkB,EAClB,gBAAuC,EACvC,OAA2B,EAC3B,iBAAmD;QAEnD,gEAAgE;QAChE,oBAAoB,CAAC,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,gBAAgB,EAAE,cAAc,CAAC,CAAC;QACxF,kBAAkB,CAAC,UAAU,EAAE,IAAI,CAAC,YAAY,EAAE,gBAAgB,EAAE,YAAY,CAAC,CAAC;QAElF,kFAAkF;QAClF,OAAO,GAAG,IAAI,CAAC,uBAAuB,CAAC,OAAO,CAAC,CAAC;QAEhD,oCAAoC;QACpC,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,aAAa,CAAC,YAAY,CAAC,EAAE,CAAC;YACzD,OAAO;QACT,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAAC;QAC1E,MAAM,oBAAoB,GAAG,2BAA2B,CAAC,gBAAgB,EAAE,IAAI,CAAwB,CAAC;QAExG,IAAI,CAAC,QAAQ,CAAC,mCAAmC,EAAE;YACjD,YAAY;YACZ,UAAU;YACV,eAAe,EAAE,UAAU,CAAC,MAAM;SACnC,CAAC,CAAC;QAEH,0BAA0B;QAC1B,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACnC,MAAM,oBAAoB,GAAG,kCAAkC,CAAC,IAAI,EAAE,SAAS,CAAC,SAAS,CAAC,CAAC;YAC3F,IAAI,CAAC,uCAAuC,CAAC;gBAC3C,IAAI;gBACJ,SAAS;gBACT,WAAW,EAAE,oBAAoB;gBACjC,YAAY;gBACZ,gBAAgB;gBAChB,iBAAiB;aAClB,CAAC,CAAC;YACH,IACE,IAAI,CAAC,uBAAuB,CAAC,SAAS,CAAC;mBACpC,CAAC,iBAAiB,EAAE,mCAAmC,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,EACjF,CAAC;gBACD,SAAS;YACX,CAAC;YACD,MAAM,cAAc,GAAG,IAAI,CAAC,kBAAkB,CAC5C,kCAAkC,CAAC,gBAAgB,EAAE,SAAS,CAAC,SAAS,CAAC,EACzE,gBAAgB,EAChB,KAAK,CACN,CAAC;YACF,MAAM,cAAc,GAAG,IAAI,CAAC,kBAAkB,CAC5C,kCAAkC,CAAC,oBAAoB,EAAE,SAAS,CAAC,SAAS,CAAC,EAC7E,gBAAgB,EAChB,IAAI,CACL,CAAC;YAEF,MAAM,eAAe,GAAG,IAAI,CAAC,gBAAgB,CAAC,cAAc,EAAE,cAAc,CAAC,CAAC;YAC9E,IAAI,eAAe,CAAC,yBAAyB,IAAI,SAAS,CAAC,YAAY,CAAC,WAAW,KAAK,KAAK,EAAE,CAAC;gBAC9F,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAChC,SAAS,CAAC,aAAa,EACvB,gBAAgB,EAChB;oBACE,sBAAsB,EAAE,2BAA2B,CAAC,4BAA4B;oBAChF,OAAO,EAAE;wBACP,wBAAwB;wBACxB,SAAS,EAAE,SAAS,CAAC,SAAS;wBAC9B,YAAY;wBACZ,UAAU;qBACX;iBACF,CACF,CAAC;YACJ,CAAC;YAED,KAAK,MAAM,IAAI,IAAI,eAAe,CAAC,KAAK,EAAE,CAAC;gBACzC,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,EAAE,OAAO,IAAI,EAAE,CAAC;gBACrD,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,EAAE,OAAO,IAAI,EAAE,CAAC;gBACrD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC;gBACnC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC;gBACnC,MAAM,UAAU,GACd,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI;oBAC3B,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;oBACvC,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;gBAE1C,IAAI,CAAC,UAAU,EAAE,CAAC;oBAChB,SAAS;gBACX,CAAC;gBAED,MAAM,gBAAgB,GAAG,IAAI,CAAC,aAAa,EAAE,UAAU,CAAC,gBAAgB;uBACnE,IAAI,CAAC,aAAa,EAAE,UAAU,CAAC,gBAAgB,CAAC;gBAErD,wCAAwC;gBACxC,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,SAAS,CAAC,YAAY,CAAC;gBACnE,IAAI,WAAW,KAAK,KAAK,EAAE,CAAC;oBAC1B,MAAM,cAAc,GAAG,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;oBAEhE,IAAI,CAAC,QAAQ,EAAE,CAAC;wBACd,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;4BAC9B,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAChC,SAAS,CAAC,aAAa,EACvB,gBAAgB,EAChB;gCACE,sBAAsB,EAAE,2BAA2B,CAAC,0BAA0B;gCAC9E,OAAO,EAAE;oCACP,wBAAwB;oCACxB,SAAS,EAAE,SAAS,CAAC,SAAS;oCAC9B,gBAAgB;oCAChB,YAAY;oCACZ,UAAU;iCACX;6BACF,CACF,CAAC;wBACJ,CAAC;oBACH,CAAC;yBAAM,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBACrC,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAChC,SAAS,CAAC,aAAa,EACvB,gBAAgB,EAChB;4BACE,sBAAsB,EAAE,2BAA2B,CAAC,0BAA0B;4BAC9E,OAAO,EAAE;gCACP,wBAAwB;gCACxB,SAAS,EAAE,SAAS,CAAC,SAAS;gCAC9B,gBAAgB;gCAChB,YAAY;gCACZ,UAAU;gCACV,cAAc;6BACf;yBACF,CACF,CAAC;oBACJ,CAAC;gBACH,CAAC;gBAED,IAAI,QAAQ,IAAI,QAAQ,KAAK,SAAS,IAAI,UAAU,CAAC,MAAM,GAAG,QAAQ,EAAE,CAAC;oBACvE,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAChC,SAAS,CAAC,aAAa,EACvB,gBAAgB,EAChB;wBACE,sBAAsB,EAAE,2BAA2B,CAAC,mBAAmB;wBACvE,OAAO,EAAE;4BACP,wBAAwB;4BACxB,SAAS,EAAE,SAAS,CAAC,SAAS;4BAC9B,gBAAgB;4BAChB,YAAY;4BACZ,UAAU;4BACV,QAAQ;4BACR,QAAQ,EAAE,UAAU,CAAC,MAAM;yBAC5B;qBACF,CACF,CAAC;gBACJ,CAAC;gBAED,KAAK,MAAM,MAAM,IAAI,UAAU,EAAE,CAAC;oBAChC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;wBAC1B,6FAA6F;wBAC3F,cAAc,CAAC,MAAM,EAAE,IAAI,CAAC,YAAY,EAAE,gBAAgB,EAAE,QAAQ,CAAC,CAAC;wBAEtE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,MAAM,EAAE,gBAAgB,EAAE,OAAO,CAAC,CAAC;wBAEhF,IAAI,CAAC,IAAI,EAAE,CAAC;4BACV,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAChC,SAAS,CAAC,SAAS,EACnB,gBAAgB,EAChB;gCACE,sBAAsB,EAAE,2BAA2B,CAAC,cAAc;gCAClE,OAAO,EAAE;oCACP,wBAAwB;oCACxB,MAAM;oCACN,YAAY;oCACZ,UAAU;oCACV,gBAAgB;iCACjB;6BACF,CACF,CAAC;wBACJ,CAAC;wBAED,IAAI,CAAC,kBAAkB,CAAC,IAAI,EAAE,gBAAgB,EAAE,EAAE,MAAM,EAAE,gBAAgB,EAAE,YAAY,EAAE,UAAU,EAAE,CAAC,CAAC;oBAC1G,CAAC;gBACH,CAAC;gBAED,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;oBACnC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;wBAC7B,2BAA2B;wBACzB,MAAM,IAAI,CAAC,sBAAsB,CAC/B,SAAS,EACT,SAAS,CAAC,SAAS,EACnB,gBAAgB,EAChB,OAAO,CACR,CAAC;oBACJ,CAAC;gBACH,CAAC;gBAED,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;oBACnC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;wBAC7B,qBAAqB;wBACnB,MAAM,IAAI,CAAC,kBAAkB,CAC3B,SAAS,EACT,YAAY,EACZ,UAAU,EACV,SAAS,CAAC,SAAS,EACnB,gBAAgB,EAChB,OAAO,CACR,CAAC;oBACJ,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,6CAA6C,EAAE;YAC3D,YAAY;YACZ,UAAU;SACX,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;OAOG;IACH;;;;;;OAMG;IACK,0BAA0B,CAAC,OAAsC,EAAE,IAAU;QACnF,OAAO;YACL,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC;YAClB,sBAAsB,EAAE;gBACtB,aAAa,EAAE,IAAI,CAAC,aAAa;gBACjC,cAAc,EAAE,IAAI,CAAC,cAAc;gBACnC,MAAM,EAAE,IAAI,CAAC,MAAM;aACpB;SACF,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,0BAA0B,CAC9B,YAA0B,EAC1B,UAAkB,EAClB,gBAAuC,EACvC,OAA2B;QAE3B,8EAA8E;QAC9E,OAAO,GAAG,IAAI,CAAC,uBAAuB,CAAC,OAAO,CAAC,CAAC;QAEhD,oCAAoC;QACpC,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,aAAa,CAAC,YAAY,CAAC,EAAE,CAAC;YACzD,OAAO;QACT,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAAC;QAE1E,IAAI,CAAC,QAAQ,CAAC,mCAAmC,EAAE;YACjD,YAAY;YACZ,UAAU;YACV,eAAe,EAAE,UAAU,CAAC,MAAM;SACnC,CAAC,CAAC;QAEH,wCAAwC;QACxC,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,oBAAoB,CAC9D,YAAY,EACZ,UAAU,EACV,SAAS,EAAE,yCAAyC;QACpD,gBAAgB,EAChB,OAAO,CACR,CAAC;QAEF,yEAAyE;QACzE,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;YAC/B,gGAAgG;YAChG,wFAAwF;YACxF,MAAM,eAAe,GAAG,IAAI,CAAC,0BAA0B,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YACvE,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;gBAC1B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,yFAAyF,EAAE;oBAC1G,MAAM,EAAE,IAAI,CAAC,MAAM;oBACnB,YAAY;oBACZ,UAAU;iBACX,CAAC,CAAC;gBACH,MAAM,IAAI,CAAC,2BAA2B,CACpC,IAAI,CAAC,MAAM,EACX,SAAS,EACT,gBAAgB,EAChB,eAAe,CAChB,CAAC;gBACF,SAAS;YACX,CAAC;YAED,MAAM,SAAS,GAAG,IAAI,CAAC,kBAAkB,CAAC,oBAAoB,CAC5D,YAAY,EACZ,IAAI,CAAC,eAAe,CACrB,CAAC;YAEF,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,iDAAiD;gBACjD,MAAM,IAAI,CAAC,2BAA2B,CACpC,IAAI,CAAC,MAAM,EACX,SAAS,EACT,gBAAgB,EAChB,eAAe,CAChB,CAAC;gBACF,SAAS;YACX,CAAC;YAED,MAAM,cAAc,GAAG,SAAS,CAAC,YAAY,CAAC,cAAc,IAAI,SAAS,CAAC;YAE1E,MAAM,IAAI,CAAC,2BAA2B,CACpC,IAAI,CAAC,MAAM,EACX,cAAc,EACd,gBAAgB,EAChB,eAAe,CAChB,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,6CAA6C,EAAE;YAC3D,YAAY;YACZ,UAAU;YACV,mBAAmB,EAAE,WAAW,CAAC,MAAM;SACxC,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA0DG;IACH,KAAK,CAAC,iCAAiC,CACrC,YAA0B,EAC1B,UAAkB,EAClB,kBAAqC,EACrC,gBAAuC,EACvC,OAA2B;QAE3B,OAAO,GAAG,IAAI,CAAC,uBAAuB,CAAC,OAAO,CAAC,CAAC;QAEhD,IAAI,kBAAkB,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,aAAa,CAAC,YAAY,CAAC,EAAE,CAAC;YAC5F,OAAO;QACT,CAAC;QAED,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,kBAAkB,CAAC,CAAC;QACnD,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,oBAAoB,CAC9D,YAAY,EACZ,UAAU,EACV,SAAS,EAAE,4CAA4C;QACvD,gBAAgB,EAChB,OAAO,CACR,CAAC;QAEF,IAAI,WAAW,GAAG,CAAC,CAAC;QACpB,IAAI,mBAAmB,GAAG,CAAC,CAAC;QAC5B,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;YAC/B,8FAA8F;YAC9F,yFAAyF;YACzF,oFAAoF;YACpF,MAAM,gBAAgB,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC;YAC/C,MAAM,eAAe,GAAG,gBAAgB,IAAI,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,eAAgB,CAAC,CAAC;YACtF,IAAI,CAAC,eAAe,EAAE,CAAC;gBACrB,SAAS;YACX,CAAC;YACD,IAAI,gBAAgB,EAAE,CAAC;gBACrB;;;;;;;;mBAQG;gBACH,mBAAmB,IAAI,CAAC,CAAC;gBACzB,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,+FAA+F;sBAC7F,6FAA6F;sBAC7F,+CAA+C,EACjD,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAClD,CAAC;YACJ,CAAC;YACD,gGAAgG;YAChG,mGAAmG;YACnG,MAAM,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,gBAAgB,EAAE,IAAI,CAAC,0BAA0B,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;YACjH,WAAW,EAAE,CAAC;QAChB,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,oDAAoD,EAAE;YAClE,YAAY;YACZ,UAAU;YACV,gBAAgB,EAAE,WAAW,CAAC,MAAM;YACpC,WAAW;YACX,aAAa,EAAE,WAAW,CAAC,MAAM,GAAG,WAAW;YAC/C,mBAAmB;SACpB,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;OAOG;IACK,cAAc,CAAC,UAAe,EAAE,gBAAwC,EAAE,SAAkB,KAAK;QACvG,IAAI,UAAU,KAAK,IAAI,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YACpD,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;YACjE,IAAI,QAAQ,IAAI,UAAU,EAAE,CAAC;gBAC3B,OAAO,IAAI,CAAC,cAAc,CAAE,UAAmC,CAAC,MAAM,EAAE,gBAAgB,EAAE,MAAM,CAAC,CAAC;YACpG,CAAC;YAED,IAAI,SAAS,IAAI,UAAU,EAAE,CAAC;gBAC5B,OAAO,IAAI,CAAC,cAAc,CAAE,UAAoC,CAAC,OAAO,EAAE,gBAAgB,EAAE,MAAM,CAAC,CAAC;YACtG,CAAC;QACH,CAAC;QAED,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;YAC9B,MAAM,YAAY,GAAa,EAAE,CAAC;YAClC,KAAK,MAAM,MAAM,IAAI,UAAU,EAAE,CAAC;gBAChC,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;oBACvD,IAAI,MAAM,EAAE,CAAC;wBACX,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAChC,SAAS,CAAC,UAAU,EACpB,gBAAgB,EAChB;4BACE,sBAAsB,EAAE,2BAA2B,CAAC,yBAAyB;4BAC7E,OAAO,EAAE;gCACP,wBAAwB;gCACxB,MAAM;gCACN,YAAY,EAAE,OAAO,MAAM;6BAC5B;yBACF,CACF,CAAC;oBACJ,CAAC;oBACD,SAAS;gBACX,CAAC;gBACD,IAAI,CAAC;oBACH,cAAc,CAAC,MAAM,EAAE,IAAI,CAAC,YAAY,EAAE,gBAAgB,EAAE,QAAQ,CAAC,CAAC;oBACtE,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBAC5B,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,IAAI,MAAM,EAAE,CAAC;wBACX,MAAM,KAAK,CAAC,CAAC,wDAAwD;oBACvE,CAAC;oBACD,0EAA0E;oBAC1E,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,+CAA+C,EAAE;wBAChE,MAAM;wBACN,GAAG,2BAA2B,CAAC,KAAK,CAAC;qBACtC,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YACD,OAAO,YAAY,CAAC;QACtB,CAAC;QAED,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YAC/D,IAAI,CAAC;gBACH,cAAc,CAAC,UAAU,EAAE,IAAI,CAAC,YAAY,EAAE,gBAAgB,EAAE,QAAQ,CAAC,CAAC;gBAC1E,OAAO,CAAC,UAAU,CAAC,CAAC;YACtB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,MAAM,EAAE,CAAC;oBACX,MAAM,KAAK,CAAC;gBACd,CAAC;gBACD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,+CAA+C,EAAE;oBAChE,MAAM,EAAE,UAAU;oBAClB,GAAG,2BAA2B,CAAC,KAAK,CAAC;iBACtC,CAAC,CAAC;gBACH,OAAO,EAAE,CAAC;YACZ,CAAC;QACH,CAAC;QAED,IAAI,MAAM,IAAI,UAAU,KAAK,IAAI,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC9D,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAChC,SAAS,CAAC,UAAU,EACpB,gBAAgB,EAChB;gBACE,sBAAsB,EAAE,2BAA2B,CAAC,wBAAwB;gBAC5E,OAAO,EAAE;oBACP,wBAAwB;oBACxB,YAAY,EAAE,OAAO,UAAU;iBAChC;aACF,CACF,CAAC;QACJ,CAAC;QAED,OAAO,EAAE,CAAC;IACZ,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,kBAAkB,CAC9B,MAAc,EACd,YAA0B,EAC1B,UAAkB,EAClB,SAAiB,EACjB,gBAAuC,EACvC,OAA2B;QAE3B,2EAA2E;QAC3E,cAAc,CAAC,MAAM,EAAE,IAAI,CAAC,YAAY,EAAE,gBAAgB,EAAE,QAAQ,CAAC,CAAC;QACtE,oBAAoB,CAAC,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,gBAAgB,EAAE,cAAc,CAAC,CAAC;QACxF,kBAAkB,CAAC,UAAU,EAAE,IAAI,CAAC,YAAY,EAAE,gBAAgB,EAAE,YAAY,CAAC,CAAC;QAClF,iBAAiB,CAAC,SAAS,EAAE,IAAI,CAAC,YAAY,EAAE,gBAAgB,EAAE,WAAW,CAAC,CAAC;QAE/E,mGAAmG;QACnG,6EAA6E;QAC7E,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,MAAM,EAAE,gBAAgB,EAAE,OAAO,CAAC,CAAC;QAChF,IAAI,IAAI;YACJ,IAAI,CAAC,MAAM,KAAK,UAAU,CAAC,MAAM;YACjC,IAAI,CAAC,kBAAkB,KAAK,YAAY;YACxC,IAAI,CAAC,gBAAgB,KAAK,UAAU;YACpC,IAAI,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;YACvC,sDAAsD;YACtD,IAAI,CAAC,QAAQ,CAAC,gDAAgD,EAAE;gBAC9D,MAAM;gBACN,YAAY;gBACZ,UAAU;gBACV,SAAS;aACV,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,gFAAgF;QAChF,uGAAuG;QACvG,kFAAkF;QAClF,MAAM,IAAI,CAAC,YAAY,CAAC,kBAAkB,CACxC,MAAM,EACN,YAAY,EACZ,UAAU,EACV,SAAS,EACT,gBAAgB,EAChB,OAAO,CACR,CAAC;IACJ,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,sBAAsB,CAClC,MAAc,EACd,SAAiB,EACjB,gBAAuC,EACvC,OAA2B;QAE3B,kFAAkF;QAClF,cAAc,CAAC,MAAM,EAAE,IAAI,CAAC,YAAY,EAAE,gBAAgB,EAAE,QAAQ,CAAC,CAAC;QAEtE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,MAAM,EAAE,gBAAgB,EAAE,OAAO,CAAC,CAAC;QAChF,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,UAAU,CAAC,MAAM,EAAE,CAAC;YAC/C,wDAAwD;YACxD,OAAO;QACT,CAAC;QAED,wCAAwC;QACxC,MAAM,IAAI,CAAC,YAAY,CAAC,sBAAsB,CAAC,MAAM,EAAE,gBAAgB,EAAE,OAAO,CAAC,CAAC;IACpF,CAAC;IAED;;;;;;OAMG;IACK,KAAK,CAAC,2BAA2B,CACvC,MAAc,EACd,QAA8C,EAC9C,gBAAuC,EACvC,OAA2B;QAE3B,IAAI,CAAC,QAAQ,CAAC,kCAAkC,EAAE;YAChD,MAAM;YACN,QAAQ;SACT,CAAC,CAAC;QAEH,QAAQ,QAAQ,EAAE,CAAC;YACjB,KAAK,SAAS;gBACZ,0EAA0E;gBAC1E,wEAAwE;gBACxE,kEAAkE;gBAClE,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,MAAM,EAAE,gBAAgB,EAAE,OAAO,CAAC,CAAC;gBACtE,MAAM;YAER,KAAK,aAAa;gBAChB,wCAAwC;gBACxC,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,MAAM,EAAE,gBAAgB,EAAE,OAAO,CAAC,CAAC;gBACtE,MAAM;YAER,KAAK,QAAQ;gBACX,sDAAsD;gBACtD,MAAM,IAAI,CAAC,YAAY,CAAC,sBAAsB,CAAC,MAAM,EAAE,gBAAgB,EAAE,OAAO,CAAC,CAAC;gBAClF,MAAM;YAER;gBACE,qBAAqB;gBACrB,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,MAAM,EAAE,gBAAgB,EAAE,OAAO,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC;IAEO,kBAAkB,CACxB,WAAuC,EACvC,gBAAuC,EACvC,MAAe;QAMf,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE;YACpC,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,KAAK,EAAE,gBAAgB,EAAE,MAAM,CAAC,CAAC;YAChF,OAAO;gBACL,UAAU;gBACV,OAAO;gBACP,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;aAC/C,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,gBAAgB,CACtB,cAIE,EACF,cAIE;QAgBF,MAAM,KAAK,GAWN,EAAE,CAAC;QAER,MAAM,YAAY,GAAG,CAAC,GAAG,cAAc,CAAC,CAAC;QACzC,MAAM,YAAY,GAAG,CAAC,GAAG,cAAc,CAAC,CAAC;QAEzC,MAAM,SAAS,GAAG,IAAI,GAAG,CACvB,CAAC,GAAG,YAAY,EAAE,GAAG,YAAY,CAAC;aAC/B,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,aAAa,CAAC;aAC9C,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CACxF,CAAC;QAEF,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;YACjC,MAAM,UAAU,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,aAAa,KAAK,QAAQ,CAAC,CAAC;YAC/F,MAAM,UAAU,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,aAAa,KAAK,QAAQ,CAAC,CAAC;YAE/F,OAAO,UAAU,CAAC,MAAM,GAAG,CAAC,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtD,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,EAAG,CAAC;gBACrC,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,EAAG,CAAC;gBACrC,YAAY,CAAC,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;gBACvD,YAAY,CAAC,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;gBACvD,KAAK,CAAC,IAAI,CAAC,EAAE,aAAa,EAAE,QAAQ,EAAE,aAAa,EAAE,QAAQ,EAAE,CAAC,CAAC;YACnE,CAAC;QACH,CAAC;QAED,MAAM,mBAAmB,GAAG,IAAI,GAAG,EAA+B,CAAC;QACnE,KAAK,MAAM,KAAK,IAAI,YAAY,EAAE,CAAC;YACjC,IAAI,KAAK,CAAC,UAAU,CAAC,aAAa,EAAE,CAAC;gBACnC,SAAS;YACX,CAAC;YACD,MAAM,MAAM,GAAG,mBAAmB,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;YAC9D,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACnB,mBAAmB,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QACnD,CAAC;QAED,KAAK,MAAM,QAAQ,IAAI,CAAC,GAAG,YAAY,CAAC,EAAE,CAAC;YACzC,IAAI,QAAQ,CAAC,UAAU,CAAC,aAAa,EAAE,CAAC;gBACtC,SAAS;YACX,CAAC;YAED,MAAM,MAAM,GAAG,mBAAmB,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;YAC3D,MAAM,QAAQ,GAAG,MAAM,EAAE,KAAK,EAAE,CAAC;YACjC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,SAAS;YACX,CAAC;YAED,YAAY,CAAC,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;YACvD,YAAY,CAAC,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;YACvD,KAAK,CAAC,IAAI,CAAC,EAAE,aAAa,EAAE,QAAQ,EAAE,aAAa,EAAE,QAAQ,EAAE,CAAC,CAAC;QACnE,CAAC;QAED,MAAM,yBAAyB,GAC7B,YAAY,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,aAAa,CAAC;YAC7D,YAAY,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;QAEhE,OAAO,YAAY,CAAC,MAAM,GAAG,CAAC,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1D,KAAK,CAAC,IAAI,CAAC;gBACT,aAAa,EAAE,YAAY,CAAC,KAAK,EAAE;gBACnC,aAAa,EAAE,YAAY,CAAC,KAAK,EAAE;aACpC,CAAC,CAAC;QACL,CAAC;QAED,OAAO;YACL,KAAK;YACL,yBAAyB;SAC1B,CAAC;IACJ,CAAC;CACF,CAAA;AAjnCY,kCAAkC;IAD9C,UAAU,EAAE;IAKR,WAAA,MAAM,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAA;IAEjC,WAAA,MAAM,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,CAAA;IAE9C,WAAA,MAAM,CAAC,kBAAkB,CAAC,yBAAyB,CAAC,CAAA;IAEpD,WAAA,MAAM,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,CAAA;+CAHhB,0BAA0B;QAEpB,gCAAgC;QAEtC,mBAAmB;GAXzC,kCAAkC,CAinC9C","sourcesContent":["/*\n File Operation Handler Backend Service\n \n Handles file field operations during resource CRUD operations.\n * Validates and processes file fields when resources are created, updated, or deleted.\n \n Features:\n * - File validation before resource creation/update\n * - File linking/unlinking during resource operations\n * - Cascade behavior on resource deletion\n * - Idempotent operations (safe to retry)\n /\n\nimport { injectable, inject } from 'inversify';\nimport { ResourceType, ErrorType, ErrorCustomMessageReference, FileStatus, FILE_LINKABLE_STATUSES } from '@wildo-ai/saas-models';\nimport { FileGenerationSource } from '@wildo-ai/zod-decorators';\nimport { SAAS_SERVICE_TYPES } from '~wildo-backend-lib/inject/models/service-types';\nimport type { LoggerService } from '~wildo-backend-lib/monitoring/logger/services/logger.service';\nimport { ErrorBuilderBackendService } from '~wildo-backend-lib/errors/services/error-builder.backend.service';\nimport { projectCaughtErrorLogFields } from '~wildo-backend-lib/errors/utils/error-log-level-classification.backend.utils';\nimport { FileFieldDetectionBackendService, FileFieldMetadata } from './file-field-detection.backend.service';\nimport { FilesBackendService } from './files.backend.service';\nimport { ExecutionContext } from '~wildo-backend-lib/runtime/models/execution-context.backend.schemas';\nimport { RepositoryOptions } from '~wildo-backend-lib/base-classes/models/repositories.backend.schemas';\nimport { File } from '@wildo-ai/saas-models';\nimport { validateFileId, validateResourceType, validateResourceId, validateFieldName } from '~wildo-backend-lib/files/utils/file-validation.utils';\nimport {\n enumerateFileFieldValueOccurrences,\n hasExplicitCanonicalFieldMutation,\n mergeEffectiveResourceState,\n type FileFieldValueOccurrence,\n} from '~wildo-backend-lib/files/utils/file-field-schema-path.backend.utils';\n\ninterface FileFieldWriteProcessingOptions {\n /\n Internal-only escape hatch for framework materializers. Public write DTOs\n * still fail closed for generated PDF fields; only the exact generated\n * field/file-id pairs created by the service registry are accepted here.\n /\n frameworkGeneratedPdfFileIdsByField?: Record<string, readonly string[]>;\n}\n\n@injectable()\nexport class FileOperationHandlerBackendService {\n protected logDebug: (message: string, context?: Record<string, unknown>) => void;\n\n constructor(\n @inject(SAAS_SERVICE_TYPES.Logger)\n private readonly logger: LoggerService,\n @inject(SAAS_SERVICE_TYPES.ErrorBuilderService)\n private readonly errorBuilder: ErrorBuilderBackendService,\n @inject(SAAS_SERVICE_TYPES.FileFieldDetectionService)\n private readonly fileFieldDetection: FileFieldDetectionBackendService,\n @inject(SAAS_SERVICE_TYPES.FilesBackendService)\n private readonly filesService: FilesBackendService,\n ) {\n this.logDebug = this.logger.debugByType('FileOperationHandlerBackendService');\n this.logger.setDebugTypeLogging('FileOperationHandlerBackendService', false);\n }\n\n private isGeneratedPdfFileField(fileField: FileFieldMetadata): boolean {\n return fileField.fileMetadata.generation?.source === FileGenerationSource.PDF_TEMPLATE;\n }\n\n /\n The ONE place that decides whether a file's status admits linking (issue #320).\n \n Both link-time validators (CREATE and UPDATE) used to compare against the literal\n * `FileStatus.UPLOADED`, so a file the scanner had certified `CLEAN` — a status\n * `FILE_STATUS_TRANSITIONS` explicitly allows to become `LINKED` — was refused with an error\n * naming `UPLOADED` as the expected state. Whether a scanned file could be attached depended on\n * beating the scanner. The admitted set now comes from `FILE_LINKABLE_STATUSES`, the single copy\n * shared with `FilesBackendService.linkFileToResource`.\n \n `SCANNING` is named separately: the file is not wrong, it is not yet KNOWN to be safe, so the\n * caller must learn to retry rather than re-upload. Every other non-linkable status (PENDING,\n * FAILED, DELETED, ORPHANED, INFECTED, QUARANTINED, and LINKED-to-something-else, which\n * `linkFileToResource` distinguishes further) is a terminal refusal for this write.\n \n @param diagnostics - log-only context; never rendered to the caller.\n /\n private assertFileLinkable(\n file: Pick<File, 'status'>,\n executionContext: ExecutionContext<any>,\n diagnostics: Record<string, unknown>,\n ): void {\n if (FILE_LINKABLE_STATUSES.has(file.status)) {\n return;\n }\n throw this.errorBuilder.buildError(\n ErrorType.BUSINESS_RULE,\n executionContext,\n {\n customMessageReference: file.status === FileStatus.SCANNING\n ? ErrorCustomMessageReference.FILE_SCAN_IN_PROGRESS\n : ErrorCustomMessageReference.FILE_NOT_LINKABLE,\n context: {\n // diagnostic (log-only)\n ...diagnostics,\n fileStatus: file.status,\n linkableStatuses: [...FILE_LINKABLE_STATUSES],\n },\n }\n );\n }\n\n /\n Best-effort cleanup for the previous generated PDF after REGENERATE.\n \n The parent field already points at the newly rendered file when this runs.\n * A cleanup failure must not roll back a successful regeneration; the normal\n * file cleanup path can still pick up the stale generated file later.\n /\n async softDeleteGeneratedFileReplacement(params: {\n fileId: string \| undefined;\n replacementFileId: string;\n fieldName: string;\n executionContext: ExecutionContext<any>;\n options?: RepositoryOptions;\n }): Promise<void> {\n if (!params.fileId \|\| params.fileId === params.replacementFileId) {\n return;\n }\n\n try {\n await this.filesService.deleteFile(\n params.fileId,\n params.executionContext,\n params.options,\n );\n } catch (error) {\n this.logger.warn('Failed to soft-delete replaced generated PDF file', {\n fileId: params.fileId,\n replacementFileId: params.replacementFileId,\n fieldName: params.fieldName,\n ...projectCaughtErrorLogFields(error),\n });\n }\n }\n\n private assertGeneratedFileFieldNotUserSupplied(params: {\n data: Record<string, any>;\n fileField: FileFieldMetadata;\n occurrences: FileFieldValueOccurrence[];\n resourceType: ResourceType;\n executionContext: ExecutionContext<any>;\n processingOptions?: FileFieldWriteProcessingOptions;\n }): void {\n if (\n !this.isGeneratedPdfFileField(params.fileField)\n \|\| (\n params.occurrences.length === 0\n && !hasExplicitCanonicalFieldMutation(params.data, params.fileField.fieldName)\n )\n ) {\n return;\n }\n\n const allowedFileIds = params.processingOptions?.frameworkGeneratedPdfFileIdsByField?.[params.fileField.fieldName];\n if (allowedFileIds && params.occurrences.length > 0) {\n const allowed = new Set(allowedFileIds);\n const submittedFileIds = params.occurrences.flatMap((occurrence) =>\n this.extractFileIds(occurrence.value, params.executionContext, true),\n );\n if (submittedFileIds.length > 0 && submittedFileIds.every((fileId) => allowed.has(fileId))) {\n return;\n }\n }\n\n throw this.errorBuilder.buildError(\n ErrorType.BUSINESS_RULE,\n params.executionContext,\n {\n customMessageReference: ErrorCustomMessageReference.FILE_GENERATED_FIELD_NOT_WRITABLE,\n context: {\n // diagnostic (log-only)\n fieldName: params.fileField.fieldName,\n resourceType: params.resourceType,\n },\n }\n );\n }\n\n /\n Validate file fields before resource creation.\n * Ensures files exist, are in UPLOADED status, and are ready to be linked.\n \n @param data - Resource data being created\n * @param resourceType - Resource type\n * @param executionContext - Execution context\n * @param options - Repository options (for transaction support)\n * @throws Error if validation fails (fail fast before resource creation)\n /\n async validateFileFieldsForCreate(\n data: Record<string, any>,\n resourceType: ResourceType,\n executionContext: ExecutionContext<any>,\n options?: RepositoryOptions,\n processingOptions?: FileFieldWriteProcessingOptions,\n ): Promise<void> {\n // Validate inputs (CRITICAL: Prevents invalid data propagation)\n validateResourceType(resourceType, this.errorBuilder, executionContext, 'resourceType');\n\n // Check if resource has file fields\n if (!this.fileFieldDetection.hasFileFields(resourceType)) {\n return;\n }\n\n const fileFields = this.fileFieldDetection.detectFileFields(resourceType);\n\n this.logDebug('Validating file fields for CREATE', {\n resourceType,\n fileFieldsCount: fileFields.length,\n });\n\n // Collect all fileIds to validate\n const fileIdsToValidate: string[] = [];\n\n for (const fileField of fileFields) {\n const occurrences = enumerateFileFieldValueOccurrences(data, fileField.fieldName);\n this.assertGeneratedFileFieldNotUserSupplied({\n data,\n fileField,\n occurrences,\n resourceType,\n executionContext,\n processingOptions,\n });\n\n for (const occurrence of occurrences) {\n const fieldFileIds = this.extractFileIds(occurrence.value, executionContext, true);\n\n // F4-01: Enforce maxFiles constraint per concrete occurrence\n const { maxFiles, multiple } = fileField.fileMetadata;\n if (multiple && maxFiles !== undefined && fieldFileIds.length > maxFiles) {\n throw this.errorBuilder.buildError(\n ErrorType.BUSINESS_RULE,\n executionContext,\n {\n customMessageReference: ErrorCustomMessageReference.FILE_TOO_MANY_FILES,\n context: {\n // diagnostic (log-only)\n fieldName: fileField.fieldName,\n runtimeFieldPath: occurrence.runtimeFieldPath,\n resourceType,\n maxFiles,\n receivedCount: fieldFileIds.length,\n },\n }\n );\n }\n\n fileIdsToValidate.push(...fieldFileIds);\n }\n }\n\n // Validate each file\n for (const fileId of fileIdsToValidate) {\n // Validate fileId format (CRITICAL: Prevents query injection and database errors)\n validateFileId(fileId, this.errorBuilder, executionContext, 'fileId');\n\n const file = await this.filesService.getFile(fileId, executionContext, options);\n\n if (!file) {\n throw this.errorBuilder.buildError(\n ErrorType.NOT_FOUND,\n executionContext,\n {\n customMessageReference: ErrorCustomMessageReference.FILE_NOT_FOUND,\n context: {\n // diagnostic (log-only)\n fileId,\n resourceType,\n },\n }\n );\n }\n\n this.assertFileLinkable(file, executionContext, { fileId, resourceType });\n\n // Note: uploadContext validation can be added in Phase 2 if needed\n // For now, we only validate that file is UPLOADED\n }\n\n this.logDebug('File fields validation for CREATE completed', {\n resourceType,\n validatedFilesCount: fileIdsToValidate.length,\n });\n }\n\n /\n Process file fields after resource creation.\n * Links files to the newly created resource.\n \n @param data - Resource data that was created\n * @param resourceType - Resource type\n * @param resourceId - ID of the created resource\n * @param executionContext - Execution context\n /\n /\n Strip the PARENT resource's optimistic-lock version from options before any\n * child-file write.\n \n When a resource CREATE/UPDATE links/unlinks a `z_file()` field, the file is a\n * SEPARATE document with its own `_version_db_doc` lifecycle. If the parent request\n * carried an `If-Match` header, its `ifMatchVersion` must NOT fence the file update:\n * the repository would add a `{ _version_db_doc: <parentVersion> }` filter to the\n * FILE query, which (mis)matches the file by the PARENT's version and yields a\n * spurious `version_conflict` (the avatar-save 409: parent `If-Match: 0` leaking onto\n * the internal `files \| update`). The transaction context is preserved so the file\n * write still participates in the parent's atomic boundary.\n /\n private stripParentVersionFence(options?: RepositoryOptions): RepositoryOptions \| undefined {\n if (!options \|\| options.ifMatchVersion === undefined) return options;\n const { ifMatchVersion: _parentVersionFence, ...fileWriteOptions } = options;\n return fileWriteOptions;\n }\n\n async processFileFieldsForCreate(\n data: Record<string, any>,\n resourceType: ResourceType,\n resourceId: string,\n executionContext: ExecutionContext<any>,\n options?: RepositoryOptions,\n processingOptions?: FileFieldWriteProcessingOptions,\n ): Promise<void> {\n // Validate inputs (CRITICAL: Prevents invalid data propagation)\n validateResourceType(resourceType, this.errorBuilder, executionContext, 'resourceType');\n validateResourceId(resourceId, this.errorBuilder, executionContext, 'resourceId');\n\n // A child-file link/unlink must not inherit the parent's optimistic-lock version.\n options = this.stripParentVersionFence(options);\n\n // Check if resource has file fields\n if (!this.fileFieldDetection.hasFileFields(resourceType)) {\n return;\n }\n\n const fileFields = this.fileFieldDetection.detectFileFields(resourceType);\n\n this.logDebug('Processing file fields for CREATE', {\n resourceType,\n resourceId,\n fileFieldsCount: fileFields.length,\n });\n\n // Process each file field\n for (const fileField of fileFields) {\n const submittedOccurrences = enumerateFileFieldValueOccurrences(data, fileField.fieldName);\n this.assertGeneratedFileFieldNotUserSupplied({\n data,\n fileField,\n occurrences: submittedOccurrences,\n resourceType,\n executionContext,\n processingOptions,\n });\n if (\n this.isGeneratedPdfFileField(fileField)\n && !processingOptions?.frameworkGeneratedPdfFileIdsByField?.[fileField.fieldName]\n ) {\n continue;\n }\n const occurrences = enumerateFileFieldValueOccurrences(data, fileField.fieldName);\n\n for (const occurrence of occurrences) {\n const fieldFileIds = this.extractFileIds(occurrence.value, executionContext, true);\n for (const fileId of fieldFileIds) {\n await this.linkFileToResource(\n fileId,\n resourceType,\n resourceId,\n fileField.fieldName,\n executionContext,\n options\n );\n }\n }\n }\n\n this.logDebug('File fields processing for CREATE completed', {\n resourceType,\n resourceId,\n });\n }\n\n /\n Process file fields after resource update.\n * Unlinks old files and links new files.\n * Validates new files BEFORE unlinking old ones (fail fast).\n \n Note: This method handles partial updates correctly. If a file field is not present\n * in `data`, it is treated as unchanged (not removed). Only explicit changes to file\n * field values trigger unlinking/linking operations.\n \n @param data - Updated resource data (may be partial update - only changed fields)\n * @param existingResource - Existing resource before update (complete state)\n * @param resourceType - Resource type\n * @param resourceId - Resource ID\n * @param executionContext - Execution context\n /\n async processFileFieldsForUpdate(\n data: Record<string, any>,\n existingResource: Record<string, any>,\n resourceType: ResourceType,\n resourceId: string,\n executionContext: ExecutionContext<any>,\n options?: RepositoryOptions,\n processingOptions?: FileFieldWriteProcessingOptions,\n ): Promise<void> {\n // Validate inputs (CRITICAL: Prevents invalid data propagation)\n validateResourceType(resourceType, this.errorBuilder, executionContext, 'resourceType');\n validateResourceId(resourceId, this.errorBuilder, executionContext, 'resourceId');\n\n // A child-file link/unlink must not inherit the parent's optimistic-lock version.\n options = this.stripParentVersionFence(options);\n\n // Check if resource has file fields\n if (!this.fileFieldDetection.hasFileFields(resourceType)) {\n return;\n }\n\n const fileFields = this.fileFieldDetection.detectFileFields(resourceType);\n const effectiveNewResource = mergeEffectiveResourceState(existingResource, data) as Record<string, any>;\n\n this.logDebug('Processing file fields for UPDATE', {\n resourceType,\n resourceId,\n fileFieldsCount: fileFields.length,\n });\n\n // Process each file field\n for (const fileField of fileFields) {\n const submittedOccurrences = enumerateFileFieldValueOccurrences(data, fileField.fieldName);\n this.assertGeneratedFileFieldNotUserSupplied({\n data,\n fileField,\n occurrences: submittedOccurrences,\n resourceType,\n executionContext,\n processingOptions,\n });\n if (\n this.isGeneratedPdfFileField(fileField)\n && !processingOptions?.frameworkGeneratedPdfFileIdsByField?.[fileField.fieldName]\n ) {\n continue;\n }\n const oldOccurrences = this.prepareOccurrences(\n enumerateFileFieldValueOccurrences(existingResource, fileField.fieldName),\n executionContext,\n false,\n );\n const newOccurrences = this.prepareOccurrences(\n enumerateFileFieldValueOccurrences(effectiveNewResource, fileField.fieldName),\n executionContext,\n true,\n );\n\n const occurrencePairs = this.matchOccurrences(oldOccurrences, newOccurrences);\n if (occurrencePairs.requiresAmbiguousFallback && fileField.fileMetadata.overridable === false) {\n throw this.errorBuilder.buildError(\n ErrorType.BUSINESS_RULE,\n executionContext,\n {\n customMessageReference: ErrorCustomMessageReference.FILE_NESTED_UPDATE_AMBIGUOUS,\n context: {\n // diagnostic (log-only)\n fieldName: fileField.fieldName,\n resourceType,\n resourceId,\n },\n }\n );\n }\n\n for (const pair of occurrencePairs.pairs) {\n const oldFileIds = pair.oldOccurrence?.fileIds ?? [];\n const newFileIds = pair.newOccurrence?.fileIds ?? [];\n const oldSet = new Set(oldFileIds);\n const newSet = new Set(newFileIds);\n const hasChanged =\n oldSet.size !== newSet.size \|\|\n !oldFileIds.every(id => newSet.has(id)) \|\|\n !newFileIds.every(id => oldSet.has(id));\n\n if (!hasChanged) {\n continue;\n }\n\n const runtimeFieldPath = pair.newOccurrence?.occurrence.runtimeFieldPath\n ?? pair.oldOccurrence?.occurrence.runtimeFieldPath;\n\n // F4-02: Enforce overridable constraint\n const { overridable, multiple, maxFiles } = fileField.fileMetadata;\n if (overridable === false) {\n const removedFileIds = oldFileIds.filter(id => !newSet.has(id));\n\n if (!multiple) {\n if (removedFileIds.length > 0) {\n throw this.errorBuilder.buildError(\n ErrorType.BUSINESS_RULE,\n executionContext,\n {\n customMessageReference: ErrorCustomMessageReference.FILE_FIELD_NOT_OVERRIDABLE,\n context: {\n // diagnostic (log-only)\n fieldName: fileField.fieldName,\n runtimeFieldPath,\n resourceType,\n resourceId,\n },\n }\n );\n }\n } else if (removedFileIds.length > 0) {\n throw this.errorBuilder.buildError(\n ErrorType.BUSINESS_RULE,\n executionContext,\n {\n customMessageReference: ErrorCustomMessageReference.FILE_FIELD_NOT_OVERRIDABLE,\n context: {\n // diagnostic (log-only)\n fieldName: fileField.fieldName,\n runtimeFieldPath,\n resourceType,\n resourceId,\n removedFileIds,\n },\n }\n );\n }\n }\n\n if (multiple && maxFiles !== undefined && newFileIds.length > maxFiles) {\n throw this.errorBuilder.buildError(\n ErrorType.BUSINESS_RULE,\n executionContext,\n {\n customMessageReference: ErrorCustomMessageReference.FILE_TOO_MANY_FILES,\n context: {\n // diagnostic (log-only)\n fieldName: fileField.fieldName,\n runtimeFieldPath,\n resourceType,\n resourceId,\n maxFiles,\n newTotal: newFileIds.length,\n },\n }\n );\n }\n\n for (const fileId of newFileIds) {\n if (!oldSet.has(fileId)) {\n // New file - validate fileId format (CRITICAL: Prevents query injection and database errors)\n validateFileId(fileId, this.errorBuilder, executionContext, 'fileId');\n\n const file = await this.filesService.getFile(fileId, executionContext, options);\n\n if (!file) {\n throw this.errorBuilder.buildError(\n ErrorType.NOT_FOUND,\n executionContext,\n {\n customMessageReference: ErrorCustomMessageReference.FILE_NOT_FOUND,\n context: {\n // diagnostic (log-only)\n fileId,\n resourceType,\n resourceId,\n runtimeFieldPath,\n },\n }\n );\n }\n\n this.assertFileLinkable(file, executionContext, { fileId, runtimeFieldPath, resourceType, resourceId });\n }\n }\n\n for (const oldFileId of oldFileIds) {\n if (!newSet.has(oldFileId)) {\n // File removed - unlink it\n await this.unlinkFileFromResource(\n oldFileId,\n fileField.fieldName,\n executionContext,\n options\n );\n }\n }\n\n for (const newFileId of newFileIds) {\n if (!oldSet.has(newFileId)) {\n // New file - link it\n await this.linkFileToResource(\n newFileId,\n resourceType,\n resourceId,\n fileField.fieldName,\n executionContext,\n options\n );\n }\n }\n }\n }\n\n this.logDebug('File fields processing for UPDATE completed', {\n resourceType,\n resourceId,\n });\n }\n\n /\n Process file fields before resource deletion.\n * Applies onParentDelete behavior to all linked files.\n \n @param resourceType - Resource type being deleted\n * @param resourceId - Resource ID being deleted\n * @param executionContext - Execution context\n /\n /\n Carry the owner ALREADY VERIFIED by `listFilesForResource` (which authorized each returned file\n * against the parent resource's derived scope) onto the options used for the subsequent delete/erase,\n * so the deletion gate (`getFile`'s per-file authorize) checks against that owner rather than the\n * identity-less system-cascade EC — which would otherwise DENY the subject's own file and abort the\n * erasure. Never widens access: `authorizeFileAccess` still matches this against the file's own scope.\n /\n private withAuthoritativeFileScope(options: RepositoryOptions \| undefined, file: File): RepositoryOptions {\n return {\n ...(options ?? {}),\n authoritativeFileScope: {\n applicationId: file.applicationId,\n organizationId: file.organizationId,\n userId: file.userId,\n },\n };\n }\n\n async processFileFieldsForDelete(\n resourceType: ResourceType,\n resourceId: string,\n executionContext: ExecutionContext<any>,\n options?: RepositoryOptions\n ): Promise<void> {\n // A child-file cleanup must not inherit the parent's optimistic-lock version.\n options = this.stripParentVersionFence(options);\n\n // Check if resource has file fields\n if (!this.fileFieldDetection.hasFileFields(resourceType)) {\n return;\n }\n\n const fileFields = this.fileFieldDetection.detectFileFields(resourceType);\n\n this.logDebug('Processing file fields for DELETE', {\n resourceType,\n resourceId,\n fileFieldsCount: fileFields.length,\n });\n\n // Get all files linked to this resource\n const linkedFiles = await this.filesService.listFilesForResource(\n resourceType,\n resourceId,\n undefined, // fieldName - undefined means all fields\n executionContext,\n options\n );\n\n // Process each file based on onParentDelete behavior from field metadata\n for (const file of linkedFiles) {\n // Forward the owner `listFilesForResource` already verified for THIS file to the deletion gate,\n // so a system-cascade teardown (identity-less EC) does not deny the subject's own file.\n const teardownOptions = this.withAuthoritativeFileScope(options, file);\n if (!file.linkedFieldName) {\n this.logger.warn('Linked file missing linkedFieldName during parent delete; defaulting to cascade cleanup', {\n fileId: file.fileId,\n resourceType,\n resourceId,\n });\n await this.applyOnParentDeleteBehavior(\n file.fileId,\n 'cascade',\n executionContext,\n teardownOptions\n );\n continue;\n }\n\n const fileField = this.fileFieldDetection.getFileFieldMetadata(\n resourceType,\n file.linkedFieldName\n );\n\n if (!fileField) {\n // Field not found - use default cascade behavior\n await this.applyOnParentDeleteBehavior(\n file.fileId,\n 'cascade',\n executionContext,\n teardownOptions\n );\n continue;\n }\n\n const onParentDelete = fileField.fileMetadata.onParentDelete \|\| 'cascade';\n\n await this.applyOnParentDeleteBehavior(\n file.fileId,\n onParentDelete,\n executionContext,\n teardownOptions\n );\n }\n\n this.logDebug('File fields processing for DELETE completed', {\n resourceType,\n resourceId,\n processedFilesCount: linkedFiles.length,\n });\n }\n\n /\n Process file fields when a resource row is IMPERSONALIZED-AND-RETAINED (gate G-FILE).\n \n The row survives for a legal/audit obligation, so this is NOT the delete cascade — but \"keep the\n * record\" must not become \"keep the personal data\". A field-level scrub cannot reach inside a stored\n * blob (a passport scan stays a passport scan however the row is rewritten), so for a file field the\n * only real erasure is deleting the file.\n \n Which files? Exactly the ones whose field the author marked personal with `.impersonalizeWith()` —\n * the SAME author-responsibility contract as ordinary fields, reusing the same vocabulary rather\n * than inventing a second axis. The caller passes the scrub patch's field names:\n * - field IS scrubbed (REMOVE) ⇒ delete the file. The scrub patch nulls the pointer in the same\n * write, so the retained row keeps no dangling reference.\n * - field NOT scrubbed (KEEP / untreated) ⇒ leave the file. This is how a legally-required artifact\n * (an invoice PDF that IS the retained record) survives the erasure.\n \n Why deletion is required rather than relying on the row being hidden: the resource-scoped serve\n * route inherits the parent's READ authorization, so a hidden retained row already blocks it — but\n * the GLOBAL `/files/:fileId` route (direct / consumable-token / public-share) is explicitly NOT\n * resource-scoped and re-checks only the file's OWN scope. A file left ACTIVE therefore stays\n * reachable there even though its parent row is invisible.\n \n Erasure here goes through `FilesBackendService.eraseFile`, NOT `deleteFile`: besides marking the\n * file DELETED it scrubs the file row's OWN personal data (`originalFilename`, `uploadedBy`) in the\n * same write. Without that, the row's metadata stayed readable on the global metadata route for the\n * weeks until physical cleanup — an \"erasure\" that leaked `passport-jane-doe.pdf` the whole time. A\n * lifecycle delete deliberately keeps that provenance; a privacy erasure must not.\n \n Physical storage cleanup stays with the existing cleanup batch, so an erasure never mixes a DB\n * rollback with non-transactional storage side effects.\n \n ## The MIDDLE state — keep-but-hide — is deliberately NOT built (decided 2026-08-09)\n \n There are only two outcomes above, and the consequence of the second is worth stating plainly: a KEEP\n * file stays ORDINARILY READABLE to the file's own scope (its organization) through the global route,\n * indefinitely, even though its parent row is now invisible. A third state — retained but reachable only\n * through the audited see-through door, mirroring the parent row's posture — was considered and refused\n * for three reasons, in order of weight:\n \n 1. It would contradict a decision already taken. The concrete case that motivates it is the\n * invoice PDF, and the billing retention decision was explicitly \"retained as audit material, and\n * invoices stay VISIBLE\" for ordinary accounting. Hiding retained invoice documents would reverse\n * that, and the sibling ruling on invoice URLs went the same way: keep the document, close the\n * ordinary door only where the document is not itself the record.\n * 2. *A hiding door is worthless without its reading door, and shipping one alone is worse than\n neither.** Withholding the file without also building an audited retrieval primitive would make\n * the legally-required artifact unreachable by ANYONE — destroying the very access the retention\n * obligation exists to preserve. (Same pairing rule as the cross-tenant repair doors: a marking\n * door without its release door is a one-way door calling itself a window.)\n * 3. No shipped resource needs it. The author already controls both ends per field: mark the field\n * and the file is erased, leave it and the file survives. The gap is only the middle, and nothing in\n * the tree declares a file field that is simultaneously personal, legally required, and must stop\n * being ordinarily visible.\n \n What would trigger building it: a resource declaring exactly that combination. The shape is then a\n * new `FileStatus` member excluded from `FILE_DOWNLOADABLE_STATUSES` and added to\n * `FILE_METADATA_WITHHELD_STATUSES`, a `FILE_STATUS_TRANSITIONS` entry, and — non-optional — an audited\n * see-through retrieval primitive alongside it. Do not add the status without the door.\n /\n async processFileFieldsForImpersonalize(\n resourceType: ResourceType,\n resourceId: string,\n scrubbedFieldNames: readonly string[],\n executionContext: ExecutionContext<any>,\n options?: RepositoryOptions\n ): Promise<void> {\n options = this.stripParentVersionFence(options);\n\n if (scrubbedFieldNames.length === 0 \|\| !this.fileFieldDetection.hasFileFields(resourceType)) {\n return;\n }\n\n const scrubbedFields = new Set(scrubbedFieldNames);\n const linkedFiles = await this.filesService.listFilesForResource(\n resourceType,\n resourceId,\n undefined, // all fields — we filter by treatment below\n executionContext,\n options\n );\n\n let erasedCount = 0;\n let unattributableCount = 0;\n for (const file of linkedFiles) {\n // Fail-closed on an unattributable file: without `linkedFieldName` we cannot tell whether its\n // field was marked personal, and silently keeping it risks retaining an erased subject's\n // document. The delete cascade defaults such a file to cleanup for the same reason.\n const isUnattributable = !file.linkedFieldName;\n const isScrubbedField = isUnattributable \|\| scrubbedFields.has(file.linkedFieldName!);\n if (!isScrubbedField) {\n continue;\n }\n if (isUnattributable) {\n /\n WARN, not debug: this is an irreversible deletion taken on a GUESS.\n \n The fail-closed default is right — a file we cannot attribute might be the erased subject's\n * passport scan — but it can equally destroy a file the retention obligation existed to KEEP\n * (an invoice PDF whose link lost its field name). Either way the cause is upstream metadata,\n * so it has to be visible: the sibling delete cascade has warned here since before this path\n * existed, and this one erased silently. Same decision, same audibility.\n /\n unattributableCount += 1;\n this.logger.warn(\n '[Retention] Erasing a linked file with no `linkedFieldName` during impersonalize — it cannot '\n + 'be attributed to a field, so the fail-closed default deletes it. If this file was meant to '\n + 'be RETAINED, its link metadata is the defect.',\n { resourceType, resourceId, fileId: file.fileId },\n );\n }\n // Forward the owner `listFilesForResource` already verified for THIS file to the deletion gate,\n // so a system-cascade (identity-less EC) impersonalize erase does not deny the subject's own file.\n await this.filesService.eraseFile(file.fileId, executionContext, this.withAuthoritativeFileScope(options, file));\n erasedCount++;\n }\n\n this.logDebug('File fields processing for IMPERSONALIZE completed', {\n resourceType,\n resourceId,\n linkedFilesCount: linkedFiles.length,\n erasedCount,\n retainedCount: linkedFiles.length - erasedCount,\n unattributableCount,\n });\n }\n\n /\n Extract file IDs from field value (handles single file or array).\n \n @param fieldValue - The raw field value from the resource object\n * @param executionContext - Current execution context\n * @param strict - When true (user input / new values), throws on invalid fileIds.\n * When false (existing DB data), silently filters and logs warnings.\n /\n private extractFileIds(fieldValue: any, executionContext?: ExecutionContext<any>, strict: boolean = false): string[] {\n if (fieldValue === null \|\| fieldValue === undefined) {\n return [];\n }\n\n if (typeof fieldValue === 'object' && !Array.isArray(fieldValue)) {\n if ('fileId' in fieldValue) {\n return this.extractFileIds((fieldValue as { fileId?: unknown }).fileId, executionContext, strict);\n }\n\n if ('fileIds' in fieldValue) {\n return this.extractFileIds((fieldValue as { fileIds?: unknown }).fileIds, executionContext, strict);\n }\n }\n\n if (Array.isArray(fieldValue)) {\n const validFileIds: string[] = [];\n for (const fileId of fieldValue) {\n if (typeof fileId !== 'string' \|\| fileId.trim() === '') {\n if (strict) {\n throw this.errorBuilder.buildError(\n ErrorType.VALIDATION,\n executionContext,\n {\n customMessageReference: ErrorCustomMessageReference.FILE_ID_VALIDATION_FAILED,\n context: {\n // diagnostic (log-only)\n fileId,\n receivedType: typeof fileId,\n },\n }\n );\n }\n continue;\n }\n try {\n validateFileId(fileId, this.errorBuilder, executionContext, 'fileId');\n validFileIds.push(fileId);\n } catch (error) {\n if (strict) {\n throw error; // Re-throw in strict mode — user provided invalid input\n }\n // Tolerant mode: filter out and warn (handles corrupt DB data gracefully)\n this.logger.warn('Invalid fileId filtered out during extraction', {\n fileId,\n ...projectCaughtErrorLogFields(error),\n });\n }\n }\n return validFileIds;\n }\n\n if (typeof fieldValue === 'string' && fieldValue.trim() !== '') {\n try {\n validateFileId(fieldValue, this.errorBuilder, executionContext, 'fileId');\n return [fieldValue];\n } catch (error) {\n if (strict) {\n throw error;\n }\n this.logger.warn('Invalid fileId filtered out during extraction', {\n fileId: fieldValue,\n ...projectCaughtErrorLogFields(error),\n });\n return [];\n }\n }\n\n if (strict && fieldValue !== null && fieldValue !== undefined) {\n throw this.errorBuilder.buildError(\n ErrorType.VALIDATION,\n executionContext,\n {\n customMessageReference: ErrorCustomMessageReference.FILE_FIELD_VALUE_INVALID,\n context: {\n // diagnostic (log-only)\n receivedType: typeof fieldValue,\n },\n }\n );\n }\n\n return [];\n }\n\n /\n Link a file to a resource.\n * Handles race conditions (idempotent - safe to call multiple times).\n /\n private async linkFileToResource(\n fileId: string,\n resourceType: ResourceType,\n resourceId: string,\n fieldName: string,\n executionContext: ExecutionContext<any>,\n options?: RepositoryOptions\n ): Promise<void> {\n // Validate inputs (CRITICAL: Prevents query injection and database errors)\n validateFileId(fileId, this.errorBuilder, executionContext, 'fileId');\n validateResourceType(resourceType, this.errorBuilder, executionContext, 'resourceType');\n validateResourceId(resourceId, this.errorBuilder, executionContext, 'resourceId');\n validateFieldName(fieldName, this.errorBuilder, executionContext, 'fieldName');\n\n // Check if file is already linked to the same resource (idempotent check - before calling service)\n // This prevents unnecessary service calls and handles idempotent cases early\n const file = await this.filesService.getFile(fileId, executionContext, options);\n if (file &&\n file.status === FileStatus.LINKED &&\n file.linkedResourceType === resourceType &&\n file.linkedResourceId === resourceId &&\n file.linkedFieldName === fieldName) {\n // Already linked to same resource - skip (idempotent)\n this.logDebug('File already linked to same resource, skipping', {\n fileId,\n resourceType,\n resourceId,\n fieldName,\n });\n return;\n }\n\n // Link file - errors propagate to fail the transaction (Decision 2.2: Option A)\n // FilesBackendService.linkFileToResource() handles idempotent cases internally (returns existing file)\n // All other errors (NOT_FOUND, BUSINESS_RULE, INTERNAL) should fail the operation\n await this.filesService.linkFileToResource(\n fileId,\n resourceType,\n resourceId,\n fieldName,\n executionContext,\n options\n );\n }\n\n /\n Unlink a file from a resource.\n * Applies onParentDelete behavior.\n /\n private async unlinkFileFromResource(\n fileId: string,\n fieldName: string,\n executionContext: ExecutionContext<any>,\n options?: RepositoryOptions\n ): Promise<void> {\n // Validate fileId format (CRITICAL: Prevents query injection and database errors)\n validateFileId(fileId, this.errorBuilder, executionContext, 'fileId');\n\n const file = await this.filesService.getFile(fileId, executionContext, options);\n if (!file \|\| file.status !== FileStatus.LINKED) {\n // Already unlinked or doesn't exist - skip (idempotent)\n return;\n }\n\n // Unlink file (sets status to ORPHANED)\n await this.filesService.unlinkFileFromResource(fileId, executionContext, options);\n }\n\n /\n Apply onParentDelete behavior to a file.\n \n @param fileId - File ID\n * @param behavior - Behavior: 'cascade', 'soft-delete', or 'orphan'\n * @param executionContext - Execution context\n */\n private async applyOnParentDeleteBehavior(\n fileId: string,\n behavior: 'cascade' \| 'soft-delete' \| 'orphan',\n executionContext: ExecutionContext<any>,\n options?: RepositoryOptions\n ): Promise<void> {\n this.logDebug('Applying onParentDelete behavior', {\n fileId,\n behavior,\n });\n\n switch (behavior) {\n case 'cascade':\n // Cascade now marks the file as DELETED only. Physical storage cleanup is\n // intentionally deferred to the cleanup batch so resource deletes never\n // mix Mongo rollback with non-transactional storage side effects.\n await this.filesService.deleteFile(fileId, executionContext, options);\n break;\n\n case 'soft-delete':\n // Soft delete: update status to DELETED\n await this.filesService.deleteFile(fileId, executionContext, options);\n break;\n\n case 'orphan':\n // Unlink: clear parent fields, set status to ORPHANED\n await this.filesService.unlinkFileFromResource(fileId, executionContext, options);\n break;\n\n default:\n // Default to cascade\n await this.filesService.deleteFile(fileId, executionContext, options);\n }\n }\n\n private prepareOccurrences(\n occurrences: FileFieldValueOccurrence[],\n executionContext: ExecutionContext<any>,\n strict: boolean,\n ): Array<{\n occurrence: FileFieldValueOccurrence;\n fileIds: string[];\n signature: string;\n }> {\n return occurrences.map((occurrence) => {\n const fileIds = this.extractFileIds(occurrence.value, executionContext, strict);\n return {\n occurrence,\n fileIds,\n signature: JSON.stringify([...fileIds].sort()),\n };\n });\n }\n\n private matchOccurrences(\n oldOccurrences: Array<{\n occurrence: FileFieldValueOccurrence;\n fileIds: string[];\n signature: string;\n }>,\n newOccurrences: Array<{\n occurrence: FileFieldValueOccurrence;\n fileIds: string[];\n signature: string;\n }>,\n ): {\n pairs: Array<{\n oldOccurrence?: {\n occurrence: FileFieldValueOccurrence;\n fileIds: string[];\n signature: string;\n };\n newOccurrence?: {\n occurrence: FileFieldValueOccurrence;\n fileIds: string[];\n signature: string;\n };\n }>;\n requiresAmbiguousFallback: boolean;\n } {\n const pairs: Array<{\n oldOccurrence?: {\n occurrence: FileFieldValueOccurrence;\n fileIds: string[];\n signature: string;\n };\n newOccurrence?: {\n occurrence: FileFieldValueOccurrence;\n fileIds: string[];\n signature: string;\n };\n }> = [];\n\n const remainingOld = [...oldOccurrences];\n const remainingNew = [...newOccurrences];\n\n const stableIds = new Set(\n [...remainingOld, ...remainingNew]\n .map((entry) => entry.occurrence.ownerStableId)\n .filter((value): value is string => typeof value === 'string' && value.trim() !== ''),\n );\n\n for (const stableId of stableIds) {\n const oldMatches = remainingOld.filter((entry) => entry.occurrence.ownerStableId === stableId);\n const newMatches = remainingNew.filter((entry) => entry.occurrence.ownerStableId === stableId);\n\n while (oldMatches.length > 0 && newMatches.length > 0) {\n const oldEntry = oldMatches.shift()!;\n const newEntry = newMatches.shift()!;\n remainingOld.splice(remainingOld.indexOf(oldEntry), 1);\n remainingNew.splice(remainingNew.indexOf(newEntry), 1);\n pairs.push({ oldOccurrence: oldEntry, newOccurrence: newEntry });\n }\n }\n\n const oldSignatureBuckets = new Map<string, typeof remainingOld>();\n for (const entry of remainingOld) {\n if (entry.occurrence.ownerStableId) {\n continue;\n }\n const bucket = oldSignatureBuckets.get(entry.signature) ?? [];\n bucket.push(entry);\n oldSignatureBuckets.set(entry.signature, bucket);\n }\n\n for (const newEntry of [...remainingNew]) {\n if (newEntry.occurrence.ownerStableId) {\n continue;\n }\n\n const bucket = oldSignatureBuckets.get(newEntry.signature);\n const oldEntry = bucket?.shift();\n if (!oldEntry) {\n continue;\n }\n\n remainingOld.splice(remainingOld.indexOf(oldEntry), 1);\n remainingNew.splice(remainingNew.indexOf(newEntry), 1);\n pairs.push({ oldOccurrence: oldEntry, newOccurrence: newEntry });\n }\n\n const requiresAmbiguousFallback =\n remainingOld.some((entry) => !entry.occurrence.ownerStableId) &&\n remainingNew.some((entry) => !entry.occurrence.ownerStableId);\n\n while (remainingOld.length > 0 \|\| remainingNew.length > 0) {\n pairs.push({\n oldOccurrence: remainingOld.shift(),\n newOccurrence: remainingNew.shift(),\n });\n }\n\n return {\n pairs,\n requiresAmbiguousFallback,\n };\n }\n}\n"]}

package/dist/esm/files/services/file-population.backend.service.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"file-population.backend.service.d.ts","sourceRoot":"","sources":["~~../../../../../~~src/files/services/file-population.backend.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAGH,OAAO,EAAE,YAAY,EAA0C,MAAM,uBAAuB,CAAC;AAE7F,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8DAA8D,CAAC;AAClG,OAAO,EAAE,gCAAgC,EAAqB,MAAM,wCAAwC,CAAC;AAC7G,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,EAAE,gBAAgB,EAAE,MAAM,qEAAqE,CAAC;AAEvG,OAAO,EAAE,0BAA0B,EAAE,MAAM,kEAAkE,CAAC;AAG9G,OAAO,EAAE,iBAAiB,EAAE,MAAM,qEAAqE,CAAC;AAMxG;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,sDAAsD;IACtD,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED,qBACa,4BAA4B;IAKrC,OAAO,CAAC,QAAQ,CAAC,MAAM;IAEvB,OAAO,CAAC,QAAQ,CAAC,kBAAkB;IAEnC,OAAO,CAAC,QAAQ,CAAC,YAAY;IAE7B,OAAO,CAAC,QAAQ,CAAC,YAAY;IAV/B,SAAS,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;gBAI9D,MAAM,EAAE,aAAa,EAErB,kBAAkB,EAAE,gCAAgC,EAEpD,YAAY,EAAE,mBAAmB,EAEjC,YAAY,EAAE,0BAA0B;IAM3D;;;;;;;;;;OAUG;IACG,kBAAkB,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,EAC5E,IAAI,EAAE,CAAC,EACP,YAAY,EAAE,YAAY,EAC1B,gBAAgB,EAAE,gBAAgB,CAAC,GAAG,CAAC,EACvC,iBAAiB,GAAE,qBAA0B,EAC7C,iBAAiB,CAAC,EAAE,iBAAiB,GACpC,OAAO,CAAC,CAAC,CAAC;IAqBb;;;;;;;;;OASG;YACW,yBAAyB;IAuGvC;;;;;;;;OAQG;YACW,2BAA2B;IAqEzC,OAAO,CAAC,cAAc;IA0BtB,OAAO,CAAC,mBAAmB;IA0B3B,OAAO,CAAC,wBAAwB;IAOhC,OAAO,CAAC,wBAAwB;YAyElB,wBAAwB;CAoEvC"}
1	+ {"version":3,"file":"file-population.backend.service.d.ts","sourceRoot":"","sources":["../../../../src/files/services/file-population.backend.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAGH,OAAO,EAAE,YAAY,EAA0C,MAAM,uBAAuB,CAAC;AAE7F,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8DAA8D,CAAC;AAClG,OAAO,EAAE,gCAAgC,EAAqB,MAAM,wCAAwC,CAAC;AAC7G,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,EAAE,gBAAgB,EAAE,MAAM,qEAAqE,CAAC;AAEvG,OAAO,EAAE,0BAA0B,EAAE,MAAM,kEAAkE,CAAC;AAG9G,OAAO,EAAE,iBAAiB,EAAE,MAAM,qEAAqE,CAAC;AAMxG;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,sDAAsD;IACtD,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED,qBACa,4BAA4B;IAKrC,OAAO,CAAC,QAAQ,CAAC,MAAM;IAEvB,OAAO,CAAC,QAAQ,CAAC,kBAAkB;IAEnC,OAAO,CAAC,QAAQ,CAAC,YAAY;IAE7B,OAAO,CAAC,QAAQ,CAAC,YAAY;IAV/B,SAAS,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;gBAI9D,MAAM,EAAE,aAAa,EAErB,kBAAkB,EAAE,gCAAgC,EAEpD,YAAY,EAAE,mBAAmB,EAEjC,YAAY,EAAE,0BAA0B;IAM3D;;;;;;;;;;OAUG;IACG,kBAAkB,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,EAC5E,IAAI,EAAE,CAAC,EACP,YAAY,EAAE,YAAY,EAC1B,gBAAgB,EAAE,gBAAgB,CAAC,GAAG,CAAC,EACvC,iBAAiB,GAAE,qBAA0B,EAC7C,iBAAiB,CAAC,EAAE,iBAAiB,GACpC,OAAO,CAAC,CAAC,CAAC;IAqBb;;;;;;;;;OASG;YACW,yBAAyB;IAuGvC;;;;;;;;OAQG;YACW,2BAA2B;IAqEzC,OAAO,CAAC,cAAc;IA0BtB,OAAO,CAAC,mBAAmB;IA0B3B,OAAO,CAAC,wBAAwB;IAOhC,OAAO,CAAC,wBAAwB;YAyElB,wBAAwB;CAoEvC"}

package/dist/esm/files/services/file-scanning.backend.service.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"file-scanning.backend.service.d.ts","sourceRoot":"","sources":["~~../../../../../~~src/files/services/file-scanning.backend.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AASH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAEnE,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,gFAAgF,CAAC;AAC9H,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8DAA8D,CAAC;AAClG,OAAO,EAAE,0BAA0B,EAAE,MAAM,kEAAkE,CAAC;AAE9G,OAAO,EAAE,gBAAgB,EAAE,MAAM,qEAAqE,CAAC;AACvG,OAAO,EAAE,mBAAmB,EAAE,MAAM,yDAAyD,CAAC;AAC9F,OAAO,EAAE,uBAAuB,EAAE,MAAM,sEAAsE,CAAC;AAC/G,OAAO,EAAE,2BAA2B,EAAE,MAAM,kEAAkE,CAAC;AAC/G,OAAO,EAEL,KAAK,cAAc,EACpB,MAAM,mDAAmD,CAAC;AAC3D,OAAO,EAAE,yBAAyB,EAAE,MAAM,gEAAgE,CAAC;AAC3G,OAAO,EAAE,+BAA+B,EAAE,MAAM,sEAAsE,CAAC;AACvH,OAAO,EACL,eAAe,EACf,KAAK,cAAc,GACpB,MAAM,mDAAmD,CAAC;AAM3D,qBACa,0BAA0B;IAOnC,OAAO,CAAC,QAAQ,CAAC,MAAM;IAEvB,OAAO,CAAC,QAAQ,CAAC,YAAY;IAE7B,OAAO,CAAC,QAAQ,CAAC,YAAY;IAE7B,OAAO,CAAC,QAAQ,CAAC,gBAAgB;IAEjC,OAAO,CAAC,QAAQ,CAAC,aAAa;IAE9B,OAAO,CAAC,QAAQ,CAAC,WAAW;IAE5B,OAAO,CAAC,QAAQ,CAAC,iBAAiB;IAUlC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC;IA5BpC,SAAS,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;IAEjF,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAA0C;gBAIxD,MAAM,EAAE,aAAa,EAErB,YAAY,EAAE,0BAA0B,EAExC,YAAY,EAAE,mBAAmB,EAEjC,gBAAgB,EAAE,uBAAuB,EAEzC,aAAa,EAAE,2BAA2B,EAE1C,WAAW,EAAE,yBAAyB,EAEtC,iBAAiB,EAAE,+BAA+B,EAUlD,gBAAgB,CAAC,EAAE,uBAAuB;IAK7D;;;;;;;;;;;;;;;;OAgBG;IACH,UAAU,CAAC,YAAY,CAAC,EAAE,kBAAkB,GAAG,OAAO;IAStD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA4CG;IACH,uBAAuB,IAAI,OAAO;IAKlC;;;;;;;;;;;;;OAaG;IACG,YAAY,CAChB,MAAM,EAAE,MAAM,EACd,gBAAgB,EAAE,gBAAgB,CAAC,GAAG,CAAC,EACvC,OAAO,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,GAC5B,OAAO,CAAC,IAAI,CAAC;IAsChB;;;;;;;;;OASG;YACW,WAAW;~~IA2JzB~~;;;;;;OAMG;IACG,gBAAgB,CACpB,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,cAAc,EACtB,gBAAgB,EAAE,gBAAgB,CAAC,GAAG,CAAC,GACtC,OAAO,CAAC,IAAI,CAAC;IAoFhB;;;;;;;;;;;OAWG;YACW,sBAAsB;IA2CpC,yGAAyG;YAC3F,yBAAyB;IAYvC;;;;;;OAMG;YACW,sBAAsB;CAsBrC"}
1	+ {"version":3,"file":"file-scanning.backend.service.d.ts","sourceRoot":"","sources":["../../../../src/files/services/file-scanning.backend.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AASH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAEnE,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,gFAAgF,CAAC;AAC9H,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8DAA8D,CAAC;AAClG,OAAO,EAAE,0BAA0B,EAAE,MAAM,kEAAkE,CAAC;AAE9G,OAAO,EAAE,gBAAgB,EAAE,MAAM,qEAAqE,CAAC;AACvG,OAAO,EAAE,mBAAmB,EAAE,MAAM,yDAAyD,CAAC;AAC9F,OAAO,EAAE,uBAAuB,EAAE,MAAM,sEAAsE,CAAC;AAC/G,OAAO,EAAE,2BAA2B,EAAE,MAAM,kEAAkE,CAAC;AAC/G,OAAO,EAEL,KAAK,cAAc,EACpB,MAAM,mDAAmD,CAAC;AAC3D,OAAO,EAAE,yBAAyB,EAAE,MAAM,gEAAgE,CAAC;AAC3G,OAAO,EAAE,+BAA+B,EAAE,MAAM,sEAAsE,CAAC;AACvH,OAAO,EACL,eAAe,EACf,KAAK,cAAc,GACpB,MAAM,mDAAmD,CAAC;AAM3D,qBACa,0BAA0B;IAOnC,OAAO,CAAC,QAAQ,CAAC,MAAM;IAEvB,OAAO,CAAC,QAAQ,CAAC,YAAY;IAE7B,OAAO,CAAC,QAAQ,CAAC,YAAY;IAE7B,OAAO,CAAC,QAAQ,CAAC,gBAAgB;IAEjC,OAAO,CAAC,QAAQ,CAAC,aAAa;IAE9B,OAAO,CAAC,QAAQ,CAAC,WAAW;IAE5B,OAAO,CAAC,QAAQ,CAAC,iBAAiB;IAUlC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC;IA5BpC,SAAS,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;IAEjF,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAA0C;gBAIxD,MAAM,EAAE,aAAa,EAErB,YAAY,EAAE,0BAA0B,EAExC,YAAY,EAAE,mBAAmB,EAEjC,gBAAgB,EAAE,uBAAuB,EAEzC,aAAa,EAAE,2BAA2B,EAE1C,WAAW,EAAE,yBAAyB,EAEtC,iBAAiB,EAAE,+BAA+B,EAUlD,gBAAgB,CAAC,EAAE,uBAAuB;IAK7D;;;;;;;;;;;;;;;;OAgBG;IACH,UAAU,CAAC,YAAY,CAAC,EAAE,kBAAkB,GAAG,OAAO;IAStD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA4CG;IACH,uBAAuB,IAAI,OAAO;IAKlC;;;;;;;;;;;;;OAaG;IACG,YAAY,CAChB,MAAM,EAAE,MAAM,EACd,gBAAgB,EAAE,gBAAgB,CAAC,GAAG,CAAC,EACvC,OAAO,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,GAC5B,OAAO,CAAC,IAAI,CAAC;IAsChB;;;;;;;;;OASG;YACW,WAAW;IAgKzB;;;;;;OAMG;IACG,gBAAgB,CACpB,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,cAAc,EACtB,gBAAgB,EAAE,gBAAgB,CAAC,GAAG,CAAC,GACtC,OAAO,CAAC,IAAI,CAAC;IAoFhB;;;;;;;;;;;OAWG;YACW,sBAAsB;IA2CpC,yGAAyG;YAC3F,yBAAyB;IAYvC;;;;;;OAMG;YACW,sBAAsB;CAsBrC"}

package/dist/esm/files/services/file-scanning.backend.service.js CHANGED Viewed

@@ -245,10 +245,15 @@ let FileScanningBackendService = class FileScanningBackendService {
             });
             return;
         }
+        // Carries `uploadedBy` / `uploadedByEntityType` beside the three routing fields: a vendor-backed
+        // storage resolves the LINKER's grant from them, and a scanner that dropped them could never
+        // download a Drive file — every layer would answer ERROR on a healthy row (#394 P5).
         const downloadParams = {
             fileId: file.fileId,
             storageProvider: file.storageProvider,
             storageRef: file.storageRef,
+            uploadedBy: file.uploadedBy,
+            uploadedByEntityType: file.uploadedByEntityType,
         };
         const executedScannerLayers = [];
         // ── Layer 1: ClamAV ────────────────────────────────────────────────

package/dist/esm/files/services/file-scanning.backend.service.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"file-scanning.backend.service.js","sourceRoot":"","sources":["../../../../../src/files/services/file-scanning.backend.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;;;;;;;;;;;;;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACzD,OAAO,EACL,SAAS,EACT,2BAA2B,EAC3B,UAAU,EACV,uBAAuB,GACxB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAAE,kBAAkB,EAAE,MAAM,gDAAgD,CAAC;AAGpF,OAAO,EAAE,0BAA0B,EAAE,MAAM,kEAAkE,CAAC;AAC9G,OAAO,EAAE,mBAAmB,EAAE,2BAA2B,EAAE,MAAM,8EAA8E,CAAC;AAEhJ,OAAO,EAAE,mBAAmB,EAAE,MAAM,yDAAyD,CAAC;AAC9F,OAAO,EAAE,uBAAuB,EAAE,MAAM,sEAAsE,CAAC;AAC/G,OAAO,EAAE,2BAA2B,EAAE,MAAM,kEAAkE,CAAC;AAC/G,OAAO,EACL,eAAe,GAEhB,MAAM,mDAAmD,CAAC;AAC3D,OAAO,EAAE,yBAAyB,EAAE,MAAM,gEAAgE,CAAC;AAC3G,OAAO,EAAE,+BAA+B,EAAE,MAAM,sEAAsE,CAAC;AACvH,OAAO,EACL,eAAe,GAEhB,MAAM,mDAAmD,CAAC;AAE3D,gFAAgF;AAChF,UAAU;AACV,gFAAgF;AAGzE,IAAM,0BAA0B,GAAhC,MAAM,0BAA0B;IAOlB;IAEA;IAEA;IAEA;IAEA;IAEA;IAEA;IAUA;IA5BT,QAAQ,CAA+D;IAEhE,gBAAgB,GAAG,IAAI,GAAG,EAA+B,CAAC;IAE3E,YAEmB,MAAqB,EAErB,YAAwC,EAExC,YAAiC,EAEjC,gBAAyC,EAEzC,aAA0C,EAE1C,WAAsC,EAEtC,iBAAkD,EAUlD,gBAA0C;QAtB1C,WAAM,GAAN,MAAM,CAAe;QAErB,iBAAY,GAAZ,YAAY,CAA4B;QAExC,iBAAY,GAAZ,YAAY,CAAqB;QAEjC,qBAAgB,GAAhB,gBAAgB,CAAyB;QAEzC,kBAAa,GAAb,aAAa,CAA6B;QAE1C,gBAAW,GAAX,WAAW,CAA2B;QAEtC,sBAAiB,GAAjB,iBAAiB,CAAiC;QAUlD,qBAAgB,GAAhB,gBAAgB,CAA0B;QAE3D,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,4BAA4B,CAAC,CAAC;IACxE,CAAC;IAED;;;;;;;;;;;;;;;;OAgBG;IACH,UAAU,CAAC,YAAiC;QAC1C,MAAM,UAAU,GAAG,YAAY,EAAE,UAAU,CAAC;QAE5C,IAAI,UAAU,KAAK,UAAU;YAAE,OAAO,IAAI,CAAC;QAC3C,IAAI,UAAU,KAAK,MAAM;YAAE,OAAO,KAAK,CAAC;QAExC,OAAO,IAAI,CAAC,uBAAuB,EAAE,CAAC;IACxC,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA4CG;IACH,uBAAuB;QACrB,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,aAAa,EAAE;YAAE,OAAO,KAAK,CAAC;QACzD,OAAO,IAAI,CAAC,aAAa,CAAC,YAAY,EAAE,IAAI,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,CAAC;IAC3E,CAAC;IAED;;;;;;;;;;;;;OAaG;IACH,KAAK,CAAC,YAAY,CAChB,MAAc,EACd,gBAAuC,EACvC,OAA6B;QAE7B,MAAM,kBAAkB,GAAG,uBAAuB,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QACxE,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YACtD,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAChC,SAAS,CAAC,UAAU,EACpB,gBAAgB,EAChB;gBACE,sBAAsB,EAAE,2BAA2B,CAAC,8BAA8B;gBAClF,OAAO,EAAE;oBACP,MAAM,EAAE,wBAAwB;iBACjC;aACF,CACF,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,CAAC,YAAY,CAAC,gBAAgB,CACtC,MAAM,EACN,UAAU,CAAC,QAAQ,EACnB,gBAAgB,CACjB,CAAC;QAEF,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC7C,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,iDAAiD,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QAE7E,wEAAwE;QACxE,oEAAoE;QACpE,+CAA+C;QAC/C,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YACvD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,oCAAoC,EAAE;gBACtD,MAAM;gBACN,GAAG,2BAA2B,CAAC,GAAG,CAAC;aACpC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;;OASG;IACK,KAAK,CAAC,WAAW,CACvB,MAAc,EACd,gBAAuC;QAEvC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;QACvE,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,6BAA6B,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;YAC7D,OAAO;QACT,CAAC;QAED,4EAA4E;QAC5E,2EAA2E;QAC3E,+EAA+E;QAC/E,sEAAsE;QACtE,EAAE;QACF,+EAA+E;QAC/E,gFAAgF;QAChF,6EAA6E;QAC7E,4EAA4E;QAC5E,gFAAgF;QAChF,0EAA0E;QAC1E,+EAA+E;QAC/E,uBAAuB;QACvB,IAAI,QAAQ,CAAC;QACb,IAAI,CAAC;YACH,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC,yBAAyB,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;QACjF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE;gBAClC,OAAO,EAAE,eAAe,CAAC,KAAK;gBAC9B,YAAY,EAAE,qBAAqB,IAAI,CAAC,eAAe,mCAAmC;gBAC1F,UAAU,EAAE,eAAe;aAC5B,EAAE,gBAAgB,CAAC,CAAC;YACrB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,4DAA4D,EAAE;gBAC9E,MAAM;gBACN,eAAe,EAAE,IAAI,CAAC,eAAe;gBACrC,GAAG,2BAA2B,CAAC,GAAG,CAAC;aACpC,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,MAAM,cAAc,GAAG;YACrB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,eAAe,EAAE,IAAI,CAAC,eAAe;YACrC,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,CAAC;QACF,MAAM,qBAAqB,GAAa,EAAE,CAAC;QAE3C,sEAAsE;QACtE,IAAI,IAAI,CAAC,aAAa,CAAC,YAAY,EAAE,EAAE,CAAC;YACtC,qBAAqB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACrC,IAAI,cAAc,CAAC;YACnB,IAAI,CAAC;gBACH,cAAc,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAC;YAC7E,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE;oBAClC,OAAO,EAAE,eAAe,CAAC,KAAK;oBAC9B,YAAY,EAAE,uCAAuC,mBAAmB,CAAC,GAAG,CAAC,EAAE;oBAC/E,UAAU,EAAE,QAAQ;iBACrB,EAAE,gBAAgB,CAAC,CAAC;gBACrB,OAAO;YACT,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;gBAEtF,IAAI,UAAU,CAAC,OAAO,KAAK,eAAe,CAAC,KAAK,EAAE,CAAC;oBACjD,MAAM,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,UAAU,EAAE,gBAAgB,CAAC,CAAC;oBAClE,OAAO;gBACT,CAAC;gBAED,IAAI,CAAC,QAAQ,CAAC,qBAAqB,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,CAAC,UAAU,EAAE,CAAC,CAAC;YACtF,CAAC;oBAAS,CAAC;gBACT,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;oBACrC,cAAc,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBAClC,CAAC;YACH,CAAC;QACH,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,QAAQ,CAAC,iDAAiD,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QAC/E,CAAC;QAED,sEAAsE;QACtE,IAAI,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,EAAE,CAAC;YACjC,qBAAqB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACnC,IAAI,cAAc,CAAC;YACnB,IAAI,CAAC;gBACH,cAAc,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAC;YAC7E,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE;oBAClC,OAAO,EAAE,eAAe,CAAC,KAAK;oBAC9B,YAAY,EAAE,qCAAqC,mBAAmB,CAAC,GAAG,CAAC,EAAE;oBAC7E,UAAU,EAAE,MAAM;iBACnB,EAAE,gBAAgB,CAAC,CAAC;gBACrB,OAAO;YACT,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;gBAEpF,IAAI,UAAU,CAAC,OAAO,KAAK,eAAe,CAAC,KAAK,EAAE,CAAC;oBACjD,MAAM,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,UAAU,EAAE,gBAAgB,CAAC,CAAC;oBAClE,OAAO;gBACT,CAAC;gBAED,IAAI,CAAC,QAAQ,CAAC,mBAAmB,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,CAAC,UAAU,EAAE,CAAC,CAAC;YACpF,CAAC;oBAAS,CAAC;gBACT,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;oBACrC,cAAc,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBAClC,CAAC;YACH,CAAC;QACH,CAAC;QAED,sEAAsE;QACtE,EAAE;QACF,0FAA0F;QAC1F,uFAAuF;QACvF,iGAAiG;QACjG,mGAAmG;QACnG,+FAA+F;QAC/F,oGAAoG;QACpG,sDAAsD;QACtD,EAAE;QACF,qGAAqG;QACrG,mGAAmG;QACnG,oFAAoF;QACpF,kGAAkG;QAClG,2FAA2F;QAC3F,EAAE;QACF,qGAAqG;QACrG,kGAAkG;QAClG,mGAAmG;QACnG,EAAE;QACF,oGAAoG;QACpG,qGAAqG;QACrG,oGAAoG;QACpG,sGAAsG;QACtG,sGAAsG;QACtG,kGAAkG;QAClG,IAAI,qBAAqB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvC,MAAM,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE;gBAClC,OAAO,EAAE,eAAe,CAAC,KAAK;gBAC9B,YAAY,EAAE,0IAA0I;gBACxJ,UAAU,EAAE,MAAM;aACnB,EAAE,gBAAgB,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QAED,sEAAsE;QACtE,gGAAgG;QAChG,8EAA8E;QAC9E,MAAM,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE;YAClC,OAAO,EAAE,eAAe,CAAC,KAAK;YAC9B,UAAU,EAAE,qBAAqB,CAAC,IAAI,CAAC,GAAG,CAAC;SAC5C,EAAE,gBAAgB,CAAC,CAAC;IACvB,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,gBAAgB,CACpB,MAAc,EACd,MAAsB,EACtB,gBAAuC;QAEvC,IAAI,CAAC,QAAQ,CAAC,wBAAwB,EAAE;YACtC,MAAM;YACN,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,UAAU,EAAE,MAAM,CAAC,UAAU;SAC9B,CAAC,CAAC;QAEH;;;;;;;;;;;;WAYG;QACH,QAAQ,MAAM,CAAC,OAAO,EAAE,CAAC;YACvB,KAAK,eAAe,CAAC,KAAK;gBACxB,MAAM,IAAI,CAAC,YAAY,CAAC,gBAAgB,CACtC,MAAM,EACN,UAAU,CAAC,KAAK,EAChB,gBAAgB,CACjB,CAAC;gBACF,IAAI,CAAC,QAAQ,CAAC,iCAAiC,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;gBAE7D,sFAAsF;gBACtF,2FAA2F;gBAC3F,2FAA2F;gBAC3F,wFAAwF;gBACxF,mDAAmD;gBACnD,MAAM,OAAO,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;gBAClD,IAAI,OAAO,EAAE,CAAC;oBACZ,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;oBACrC,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;wBACtB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,4BAA4B,EAAE;4BAC9C,MAAM;4BACN,GAAG,2BAA2B,CAAC,GAAG,CAAC;yBACpC,CAAC,CAAC;oBACL,CAAC,CAAC,CAAC;gBACL,CAAC;gBACD,MAAM;YAER,KAAK,eAAe,CAAC,QAAQ;gBAC3B,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBACrC,MAAM,IAAI,CAAC,YAAY,CAAC,gBAAgB,CACtC,MAAM,EACN,UAAU,CAAC,QAAQ,EACnB,gBAAgB,CACjB,CAAC;gBACF,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,0BAA0B,EAAE;oBAC3C,MAAM;oBACN,UAAU,EAAE,MAAM,CAAC,UAAU;oBAC7B,UAAU,EAAE,MAAM,CAAC,UAAU;iBAC9B,CAAC,CAAC;gBAEH,MAAM,IAAI,CAAC,sBAAsB,CAAC,MAAM,EAAE,MAAM,EAAE,gBAAgB,CAAC,CAAC;gBACpE,6FAA6F;gBAC7F,wFAAwF;gBACxF,MAAM,IAAI,CAAC,sBAAsB,CAAC,MAAM,EAAE,MAAM,EAAE,gBAAgB,CAAC,CAAC;gBACpE,MAAM;YAER,KAAK,eAAe,CAAC,KAAK;gBACxB,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBACrC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,wBAAwB,EAAE;oBAC1C,MAAM;oBACN,YAAY,EAAE,MAAM,CAAC,YAAY;oBACjC,UAAU,EAAE,MAAM,CAAC,UAAU;iBAC9B,CAAC,CAAC;gBACH,MAAM,IAAI,CAAC,YAAY,CAAC,gBAAgB,CACtC,MAAM,EACN,UAAU,CAAC,MAAM,EACjB,gBAAgB,CACjB,CAAC;gBACF,MAAM,IAAI,CAAC,sBAAsB,CAAC,MAAM,EAAE,MAAM,EAAE,gBAAgB,CAAC,CAAC;gBACpE,MAAM;QACV,CAAC;IACH,CAAC;IAED;;;;;;;;;;;OAWG;IACK,KAAK,CAAC,sBAAsB,CAClC,MAAc,EACd,MAAsB,EACtB,gBAAuC;QAEvC,IAAI,CAAC,IAAI,CAAC,gBAAgB;YAAE,OAAO;QAEnC,IAAI,CAAC;YACH,8FAA8F;YAC9F,8BAA8B;YAC9B,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,yBAAyB,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;YAClF,MAAM,cAAc,GAAG,gBAAgB,CAAC,YAAY,EAAE,cAAc,CAAC;YACrE,MAAM,MAAM,GAAG,gBAAgB,CAAC,YAAY,EAAE,MAAM,CAAC;YAErD,IAAI,MAAM,CAAC,OAAO,KAAK,eAAe,CAAC,QAAQ,EAAE,CAAC;gBAChD,MAAM,IAAI,CAAC,gBAAgB,CAAC,sBAAsB,CAAC;oBACjD,MAAM;oBACN,UAAU,EAAE,MAAM,CAAC,UAAU;oBAC7B,UAAU,EAAE,MAAM,CAAC,UAAU;oBAC7B,cAAc;oBACd,MAAM;oBACN,UAAU;iBACX,EAAE,gBAAgB,CAAC,CAAC;gBACrB,OAAO;YACT,CAAC;YAED,MAAM,IAAI,CAAC,gBAAgB,CAAC,wBAAwB,CAAC;gBACnD,MAAM;gBACN,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,aAAa,EAAE,MAAM,CAAC,YAAY;gBAClC,cAAc;gBACd,MAAM;gBACN,UAAU;aACX,EAAE,gBAAgB,CAAC,CAAC;QACvB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,2DAA2D,EAAE;gBAC5E,MAAM;gBACN,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,GAAG,2BAA2B,CAAC,KAAK,CAAC;aACtC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,yGAAyG;IACjG,KAAK,CAAC,yBAAyB,CACrC,MAAc,EACd,gBAAuC;QAEvC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,MAAM,EAAE,gBAAgB,CAA+B,CAAC;YACrG,OAAO,IAAI,EAAE,MAAM,IAAI,SAAS,CAAC;QACnC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACK,KAAK,CAAC,sBAAsB,CAClC,MAAc,EACd,MAAsB,EACtB,gBAAuC;QAEvC,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,YAAY,CAAC,gBAAgB,CACtC,MAAM,EACN,UAAU,CAAC,WAAW,EACtB,gBAAgB,CACjB,CAAC;YACF,IAAI,CAAC,QAAQ,CAAC,2BAA2B,EAAE;gBACzC,MAAM;gBACN,UAAU,EAAE,MAAM,CAAC,UAAU;aAC9B,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,oCAAoC,EAAE;gBACtD,MAAM;gBACN,GAAG,2BAA2B,CAAC,KAAK,CAAC;aACtC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;CACF,CAAA;AA3gBY,0BAA0B;IADtC,UAAU,EAAE;IAOR,WAAA,MAAM,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAA;IAEjC,WAAA,MAAM,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,CAAA;IAE9C,WAAA,MAAM,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,CAAA;IAE9C,WAAA,MAAM,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,CAAA;IAE3C,WAAA,MAAM,CAAC,kBAAkB,CAAC,oBAAoB,CAAC,CAAA;IAE/C,WAAA,MAAM,CAAC,kBAAkB,CAAC,kBAAkB,CAAC,CAAA;IAE7C,WAAA,MAAM,CAAC,kBAAkB,CAAC,iBAAiB,CAAC,CAAA;IAU5C,WAAA,MAAM,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,CAAA;IAAE,WAAA,QAAQ,EAAE,CAAA;+CAnBzB,0BAA0B;QAE1B,mBAAmB;QAEf,uBAAuB;QAE1B,2BAA2B;QAE7B,yBAAyB;QAEnB,+BAA+B;GAnB1D,0BAA0B,CA2gBtC","sourcesContent":["/*\n File Scanning Backend Service\n \n Orchestrates antivirus scanning for uploaded files. After a file\n * reaches UPLOADED status, this service:\n \n 1. Transitions the file to SCANNING\n * 2. Downloads the file from storage\n * 3. Submits to ClamAV via TCP (signature-based)\n * 4. If ClamAV passes, submits to YARA via REST (pattern-based, optional)\n * 5. Processes combined results (CLEAN / INFECTED)\n * 6. Quarantines infected files\n \n Scanning is fail-closed at the gate, asynchronous in the pipeline (#433). The upload handler\n * AWAITS `initiateScan`, which awaits the UPLOADED -> SCANNING transition and only then fires the\n * pipeline — so the upload response costs one status write, not a scan, and the file is already\n * non-downloadable when the caller is told the upload succeeded. It becomes downloadable when the\n * result handler transitions it to CLEAN.\n \n This paragraph used to say the response \"returns immediately with status UPLOADED\", and that was\n * the defect: UPLOADED is a downloadable status, so a field declaring `scanPolicy: 'required'` had\n * a window in which unscanned bytes were servable. If scanning is not required for the field, the\n * file stays at UPLOADED and remains downloadable — that half is unchanged and deliberate.\n \n Configuration:\n * - Application-wide: DERIVED, not declared. Scanning is on for a field that states no policy of its\n * own exactly when a scanner is reachable — `fileScanning.antivirus` (seeded from `CLAMAV_HOST`) or\n * `fileScanning.yara` both enabled and reachable (`YARA_ENABLED` + `YARA_HOST`). Provisioning the\n * sidecar IS the application-level opt-in; there is no separate on/off flag. See\n * {@link FileScanningBackendService.isGlobalScanningEnabled} for why it is derived rather than declared.\n * - Per-field: `z_file({ scanPolicy: 'required' \| 'skip' })` overrides that, in both directions.\n \n These two lines used to name `appConfig.files.scanning.enabled`, a configuration path no schema has\n * ever declared — so the application-wide half was documented, cast through `any`, and dead.\n \n A scan that was REQUESTED and finds no scanner now FAILS the file rather than passing it; the tail of\n * `executeScan` carries the reasoning.\n /\n\nimport { injectable, inject, optional } from 'inversify';\nimport {\n ErrorType,\n ErrorCustomMessageReference,\n FileStatus,\n FILE_STATUS_TRANSITIONS,\n} from '@wildo-ai/saas-models';\nimport type { FileSchemaMetadata } from '@wildo-ai/zod-decorators';\nimport { SAAS_SERVICE_TYPES } from '~wildo-backend-lib/inject/models/service-types';\nimport type { AuditLogsBackendService } from '~wildo-backend-lib/compliance/audit-trails/services/audit-logs.backend.service';\nimport type { LoggerService } from '~wildo-backend-lib/monitoring/logger/services/logger.service';\nimport { ErrorBuilderBackendService } from '~wildo-backend-lib/errors/services/error-builder.backend.service';\nimport { describeCaughtError, projectCaughtErrorLogFields } from '~wildo-backend-lib/errors/utils/error-log-level-classification.backend.utils';\nimport { ExecutionContext } from '~wildo-backend-lib/runtime/models/execution-context.backend.schemas';\nimport { FilesBackendService } from '~wildo-backend-lib/files/services/files.backend.service';\nimport { AppConfigurationService } from '~wildo-backend-lib/config/services/app-configuration.backend.service';\nimport { ClamAVScannerBackendService } from '~wildo-backend-lib/files/scanning/clamav-scanner.backend.service';\nimport {\n FileScanVerdict,\n type FileScanResult,\n} from '~wildo-backend-lib/files/scanning/file-scan.types';\nimport { YaraScannerBackendService } from '~wildo-backend-lib/files/scanning/yara-scanner.backend.service';\nimport { FileStorageRouterBackendService } from '~wildo-backend-lib/files/storage/file-storage-router.backend.service';\nexport {\n FileScanVerdict,\n type FileScanResult,\n} from '~wildo-backend-lib/files/scanning/file-scan.types';\n\n// ─────────────────────────────────────────────────────────────────────────────\n// Service\n// ─────────────────────────────────────────────────────────────────────────────\n\n@injectable()\nexport class FileScanningBackendService {\n protected logDebug: (message: string, context?: Record<string, unknown>) => void;\n\n private readonly onCleanCallbacks = new Map<string, () => Promise<void>>();\n\n constructor(\n @inject(SAAS_SERVICE_TYPES.Logger)\n private readonly logger: LoggerService,\n @inject(SAAS_SERVICE_TYPES.ErrorBuilderService)\n private readonly errorBuilder: ErrorBuilderBackendService,\n @inject(SAAS_SERVICE_TYPES.FilesBackendService)\n private readonly filesService: FilesBackendService,\n @inject(SAAS_SERVICE_TYPES.AppConfigService)\n private readonly appConfigService: AppConfigurationService,\n @inject(SAAS_SERVICE_TYPES.ClamAVScannerService)\n private readonly clamavScanner: ClamAVScannerBackendService,\n @inject(SAAS_SERVICE_TYPES.YaraScannerService)\n private readonly yaraScanner: YaraScannerBackendService,\n @inject(SAAS_SERVICE_TYPES.FileStorageRouter)\n private readonly fileStorageRouter: FileStorageRouterBackendService,\n /\n * `@optional()` because a container without the audit service must still SCAN (#506). The record\n * is what this issue adds; refusing to inspect content when the recorder is absent would trade a\n * missing audit row for missing malware detection, which is the worse of the two.\n \n The emission below is likewise best-effort: an audit failure must not turn a successful\n * quarantine into an exception that leaves the file mid-transition.\n /\n @inject(SAAS_SERVICE_TYPES.AuditLogsService) @optional()\n private readonly auditLogsService?: AuditLogsBackendService,\n ) {\n this.logDebug = this.logger.debugByType('FileScanningBackendService');\n }\n\n /\n Determine whether a file should be scanned after upload.\n \n Resolution order:\n * 1. Per-field `z_file({ scanPolicy })` wins if set\n * 2. Falls back to the application-wide answer, {@link isGlobalScanningEnabled}\n \n assurance-control: WILDO.SECURITY.INGESTED_CONTENT_INSPECTION — whether ingested content is\n * inspected is a declared decision, per field and then per application, rather than an implicit one.\n \n The per-APPLICATION half of that claim was false until 2026-09-09: step 2 read a configuration path\n * no schema declares, so it answered `false` in every application ever built and `scanPolicy` was the\n * only reachable declaration. It is true now because the application-wide answer is DERIVED from the\n * scanner topology the operator provisions — a declaration made by supplying `CLAMAV_HOST`, and\n * refused a default. Nothing here is implicit in either direction: a field can still override, and a\n * requested scan with no scanner refuses rather than passing (see the tail of `executeScan`).\n /\n shouldScan(fileMetadata?: FileSchemaMetadata): boolean {\n const scanPolicy = fileMetadata?.scanPolicy;\n\n if (scanPolicy === 'required') return true;\n if (scanPolicy === 'skip') return false;\n\n return this.isGlobalScanningEnabled();\n }\n\n /\n Whether scanning is on APPLICATION-WIDE, for a file field that states no `scanPolicy` of its own.\n \n DERIVED from the platform-injected `fileScanning` topology: a scanner being reachable IS the\n * application-level opt-in.\n \n ## What this replaced\n \n `(this.appConfigService.config as Record<string, any>)?.files?.scanning?.enabled === true`. The\n * `any` cast is the tell — `AppConfigurationSchema` declares no `files` section, `z.object` strips\n * unknown keys, so the parsed configuration could never carry that path and the expression was\n * `undefined === true` for every application, for the whole life of the flag. The service's own\n * docstring documented it as the global switch.\n \n ## Why DERIVED rather than declared\n \n Adding an `enabled` boolean to `AppConfiguration_FileScanningSchema` was the other candidate and is\n * rejected on three counts:\n \n - the answer already exists. `fileScanning` is a mutation-boundary-PROTECTED section\n * (`APP_CONFIG_MUTATION_BOUNDARY_RULES` in `app-config.backend-authored.definitions.ts`: \"file-scanning\n * sidecar topology and its platform-level opt-in are env/bootstrap-owned\"), so an application cannot\n * author it. A boolean would have to be seeded from a NEW environment key sitting beside the host key\n * that already says the same thing — a second source of truth that can disagree with the first;\n * - it matches the convention of the thing it gates. ClamAV has no enable flag anywhere in this\n * subsystem: `ClamAVScannerBackendService.isConfigured()` states \"presence of a host IS the opt-in\",\n * and `buildFileServicesTopologyFromEnvironment` refuses to emit a plausible default host for exactly\n * that reason;\n * - it closes the hole the repair would otherwise open. A separate boolean makes \"globally on, no\n * scanner reachable\" a REPRESENTABLE state, and that state is precisely the one the pipeline used to\n * answer with a CLEAN verdict. Derived, the state cannot exist: the switch is on only when something\n * can actually run. The runtime refusal in `executeScan` stays regardless, because `scanPolicy:\n * 'required'` reaches the same tail without consulting this switch at all.\n \n The two predicates are the pipeline's OWN — `executeScan` gates its two layers on exactly\n * `clamavScanner.isConfigured()` and `yaraScanner.isEnabled()` — so the switch and the pipeline cannot\n * come to different conclusions about whether a scan is possible. Note `isEnabled()` is already the\n * conjunction of YARA's two independent axes (opted in AND reachable), which is why the \"enabled but\n * unreachable\" misconfiguration does not read as an application-wide opt-in here; the startup validator\n * reports it as its own issue instead.\n \n The `isInitialized()` guard stays: both scanner reads deliberately throw\n * `app_configuration_not_initialized` rather than softening to `false`, and a scan decision taken before\n * configuration has landed is not a decision.\n /\n isGlobalScanningEnabled(): boolean {\n if (!this.appConfigService.isInitialized()) return false;\n return this.clamavScanner.isConfigured() \|\| this.yaraScanner.isEnabled();\n }\n\n /\n Initiate scanning for a file that just reached UPLOADED status.\n \n Transitions to SCANNING, then dispatches the scan job.\n * The response is fire-and-forget: the caller does not wait for scan\n * completion — scan results are processed asynchronously via\n * `handleScanResult()`.\n \n @param onClean - Optional callback invoked when scan verdict is CLEAN.\n * Used to chain post-scan work that must only run on safe bytes. Note the file\n * STATUS lifecycle ends at CLEAN for processing purposes — RAG chunking of a\n * `ragSource` file field is per-field derived data (chunk rows), never a file\n * status transition.\n /\n async initiateScan(\n fileId: string,\n executionContext: ExecutionContext<any>,\n onClean?: () => Promise<void>,\n ): Promise<void> {\n const allowedTransitions = FILE_STATUS_TRANSITIONS[FileStatus.UPLOADED];\n if (!allowedTransitions.includes(FileStatus.SCANNING)) {\n throw this.errorBuilder.buildError(\n ErrorType.VALIDATION,\n executionContext,\n {\n customMessageReference: ErrorCustomMessageReference.FILE_INVALID_STATUS_TRANSITION,\n context: {\n fileId, // diagnostic (log-only)\n },\n },\n );\n }\n\n await this.filesService.updateFileStatus(\n fileId,\n FileStatus.SCANNING,\n executionContext,\n );\n\n if (onClean) {\n this.onCleanCallbacks.set(fileId, onClean);\n }\n\n this.logDebug('File transitioned to SCANNING, dispatching scan', { fileId });\n\n // Run the full scanning pipeline asynchronously. The file is already in\n // SCANNING status so downloads are blocked until the result handler\n // transitions it to CLEAN / INFECTED / FAILED.\n this.executeScan(fileId, executionContext).catch((err) => {\n this.logger.error('Scan execution failed unexpectedly', {\n fileId,\n ...projectCaughtErrorLogFields(err),\n });\n });\n }\n\n /\n Download the file from storage and run the scanning pipeline.\n \n Pipeline order:\n * 1. ClamAV (signature-based) — if configured\n * 2. YARA (pattern-based) — if enabled and ClamAV passed\n \n Short-circuits on first INFECTED verdict. YARA only runs if the\n * file survived ClamAV — no point in pattern-matching a known virus.\n /\n private async executeScan(\n fileId: string,\n executionContext: ExecutionContext<any>,\n ): Promise<void> {\n const file = await this.filesService.getFile(fileId, executionContext);\n if (!file) {\n this.logger.error('File not found for scanning', { fileId });\n return;\n }\n\n // Resolve through FilesBackendService rather than the router directly, so a\n // LEGACY row that persisted no `storageProvider` falls back to the default\n // provider instead of failing the scan. Reimplementing the lookup here is what\n // made this one of five different behaviours for a provider-less row.\n //\n // The throw is deliberately converted back into a terminal verdict rather than\n // propagated. `getStorageProviderForFile` throws INTERNAL when the persisted id\n // is not registered, and this pipeline is fire-and-forget — its dispatcher's\n // `.catch()` only LOGS. An escaping throw would therefore leave the file in\n // SCANNING permanently, and downloads stay blocked until a result handler moves\n // it out. That is strictly worse than the ERROR verdict this site already\n // recorded, so the drift is closed WITHOUT adopting the reference behaviour on\n // the throwing branch.\n let provider;\n try {\n provider = this.filesService.getStorageProviderForFile(file, executionContext);\n } catch (err) {\n await this.handleScanResult(fileId, {\n verdict: FileScanVerdict.ERROR,\n errorMessage: `Storage provider '${file.storageProvider}' not available for scan download`,\n scannerRef: 'scan-pipeline',\n }, executionContext);\n this.logger.error('Scan aborted: persisted storage provider is not registered', {\n fileId,\n storageProvider: file.storageProvider,\n ...projectCaughtErrorLogFields(err),\n });\n return;\n }\n\n const downloadParams = {\n fileId: file.fileId,\n storageProvider: file.storageProvider,\n storageRef: file.storageRef,\n };\n const executedScannerLayers: string[] = [];\n\n // ── Layer 1: ClamAV ────────────────────────────────────────────────\n if (this.clamavScanner.isConfigured()) {\n executedScannerLayers.push('clamav');\n let downloadResult;\n try {\n downloadResult = await provider.download(downloadParams, executionContext);\n } catch (err) {\n await this.handleScanResult(fileId, {\n verdict: FileScanVerdict.ERROR,\n errorMessage: `Failed to download file for ClamAV: ${describeCaughtError(err)}`,\n scannerRef: 'clamav',\n }, executionContext);\n return;\n }\n\n try {\n const clamResult = await this.clamavScanner.scanStream(downloadResult.stream, fileId);\n\n if (clamResult.verdict !== FileScanVerdict.CLEAN) {\n await this.handleScanResult(fileId, clamResult, executionContext);\n return;\n }\n\n this.logDebug('ClamAV layer passed', { fileId, durationMs: clamResult.durationMs });\n } finally {\n if (!downloadResult.stream.destroyed) {\n downloadResult.stream.destroy();\n }\n }\n } else {\n this.logDebug('ClamAV not configured — skipping signature scan', { fileId });\n }\n\n // ── Layer 2: YARA (optional, platform-level) ───────────────────────\n if (this.yaraScanner.isEnabled()) {\n executedScannerLayers.push('yara');\n let downloadResult;\n try {\n downloadResult = await provider.download(downloadParams, executionContext);\n } catch (err) {\n await this.handleScanResult(fileId, {\n verdict: FileScanVerdict.ERROR,\n errorMessage: `Failed to download file for YARA: ${describeCaughtError(err)}`,\n scannerRef: 'yara',\n }, executionContext);\n return;\n }\n\n try {\n const yaraResult = await this.yaraScanner.scanStream(downloadResult.stream, fileId);\n\n if (yaraResult.verdict !== FileScanVerdict.CLEAN) {\n await this.handleScanResult(fileId, yaraResult, executionContext);\n return;\n }\n\n this.logDebug('YARA layer passed', { fileId, durationMs: yaraResult.durationMs });\n } finally {\n if (!downloadResult.stream.destroyed) {\n downloadResult.stream.destroy();\n }\n }\n }\n\n // ── Nothing ran: refuse, do not certify ────────────────────────────\n //\n // This branch used to log a warning and then hand `handleScanResult` a CLEAN verdict with\n // `scannerRef: 'none'` — which transitions the file to `FileStatus.CLEAN`, a member of\n // `FILE_DOWNLOADABLE_STATUSES`. A scan had been REQUESTED (`shouldScan` said yes, `initiateScan`\n // moved the file to SCANNING, the uploader was told the upload succeeded), and the answer returned\n // was the answer a PASSING scan gives, produced by no scanner. That is strictly worse than not\n // scanning at all: a field declaring `scanPolicy: 'required'` ended with bytes certified clean, and\n // the only trace was a warning in a log nobody reads.\n //\n // ERROR -> `FileStatus.FAILED` is the fail-closed terminal, and the right one rather than merely the\n // safe one: FAILED is outside `FILE_DOWNLOADABLE_STATUSES` so the bytes are blocked, it is outside\n // `FILE_METADATA_WITHHELD_STATUSES` so the uploader can still poll and see WHY, and\n // `FILE_STATUS_TRANSITIONS` keeps SCANNING -> FAILED, so nothing about the lifecycle has to move.\n // A file that failed this way becomes scannable again the moment a scanner is provisioned.\n //\n // Keyed on `executedScannerLayers` — direct evidence that nothing ran — rather than on re-asking the\n // two `isConfigured()` predicates. Re-asking would be a second copy of the decision the two layer\n // gates above already took, and the copies can disagree if a layer ever grows another skip reason.\n //\n // Not redundant with the boot gate, which is the obvious objection. `collectScanningIssues` refuses\n // to start an application whose fields declare `scanPolicy: 'required'` when ClamAV is unconfigured,\n // so in a well-formed deployment this branch is unreachable. But that gate builds its population by\n // walking every resource's file fields inside `try { … } catch { continue; }`: a resource whose field\n // detection throws contributes no fields and is silently absent from the count. A boot check that can\n // under-report the population it protects is not a substitute for the refusal at the site itself.\n if (executedScannerLayers.length === 0) {\n await this.handleScanResult(fileId, {\n verdict: FileScanVerdict.ERROR,\n errorMessage: 'Scan was requested but no scanner is configured (no ClamAV host, and YARA not enabled/reachable) — refusing to certify the file as clean',\n scannerRef: 'none',\n }, executionContext);\n return;\n }\n\n // ── All layers that ran, passed ────────────────────────────────────\n // `join('+')` needs no `\|\| 'none'` fallback any more: the empty case returned above, so a CLEAN\n // verdict from here always names at least one scanner that actually executed.\n await this.handleScanResult(fileId, {\n verdict: FileScanVerdict.CLEAN,\n scannerRef: executedScannerLayers.join('+'),\n }, executionContext);\n }\n\n /\n Process the result of a scan job.\n \n - CLEAN: transition to CLEAN (file becomes downloadable)\n * - INFECTED: transition to INFECTED, then quarantine\n * - ERROR: transition to FAILED (retryable via re-scan)\n /\n async handleScanResult(\n fileId: string,\n result: FileScanResult,\n executionContext: ExecutionContext<any>,\n ): Promise<void> {\n this.logDebug('Processing scan result', {\n fileId,\n verdict: result.verdict,\n threatName: result.threatName,\n scannerRef: result.scannerRef,\n durationMs: result.durationMs,\n });\n\n /\n * assurance-control: WILDO.SECURITY.INGESTED_CONTENT_INSPECTION — the scanner's verdict becomes a\n * member of `FileStatus`, which is also what `FILE_DOWNLOADABLE_STATUSES` reads, so \"inspected\" and\n * \"servable\" are one decision rather than two that could disagree. `FileScanVerdict` names the\n * scanner's answer; `FileStatus` is the one with consequence, which is why the assurance capability\n * derives from it.\n \n The outcome now ALSO reaches the audit trail (#506): `FILE_MALWARE_DETECTED` when a scanner\n * concludes an infection, `FILE_MALWARE_SCAN_FAILED` when the scan could not run. Both are\n * emitted AFTER the terminal transition, so the row can never describe a state the record does\n * not hold. Until they existed, an infection produced a status change and nothing else — the only\n * way to learn malware had arrived was to notice a row sitting at `QUARANTINED`.\n /\n switch (result.verdict) {\n case FileScanVerdict.CLEAN:\n await this.filesService.updateFileStatus(\n fileId,\n FileStatus.CLEAN,\n executionContext,\n );\n this.logDebug('File marked as CLEAN after scan', { fileId });\n\n // Invoke the post-clean callback (generic post-scan work registered by initiateScan's\n // caller). RAG ingestion is deliberately NOT chained here: the service-tier write hook and\n // the hourly reconciliation sweep own corpus derivation, and the ingestion pipeline itself\n // refuses non-downloadable files — so a file that finishes scanning is picked up by the\n // next sweep run with no per-file callback wiring.\n const onClean = this.onCleanCallbacks.get(fileId);\n if (onClean) {\n this.onCleanCallbacks.delete(fileId);\n onClean().catch((err) => {\n this.logger.error('Post-clean callback failed', {\n fileId,\n ...projectCaughtErrorLogFields(err),\n });\n });\n }\n break;\n\n case FileScanVerdict.INFECTED:\n this.onCleanCallbacks.delete(fileId);\n await this.filesService.updateFileStatus(\n fileId,\n FileStatus.INFECTED,\n executionContext,\n );\n this.logger.warn('File flagged as INFECTED', {\n fileId,\n threatName: result.threatName,\n scannerRef: result.scannerRef,\n });\n\n await this.quarantineInfectedFile(fileId, result, executionContext);\n // AFTER the quarantine transition, so `fileStatus` is what the record holds rather than what\n // this method intended. If the quarantine failed, the row says INFECTED, which is true.\n await this.recordScanOutcomeAudit(fileId, result, executionContext);\n break;\n\n case FileScanVerdict.ERROR:\n this.onCleanCallbacks.delete(fileId);\n this.logger.error('Scan failed with error', {\n fileId,\n errorMessage: result.errorMessage,\n scannerRef: result.scannerRef,\n });\n await this.filesService.updateFileStatus(\n fileId,\n FileStatus.FAILED,\n executionContext,\n );\n await this.recordScanOutcomeAudit(fileId, result, executionContext);\n break;\n }\n }\n\n /\n Write the scan outcome to the audit trail (#506).\n \n Best-effort and never throwing: the file's status transition is the enforcement, and an audit\n * store being unavailable must not convert a successful quarantine into an exception that leaves\n * the caller believing the scan failed.\n \n A CLEAN verdict is deliberately NOT audited. Every upload is scanned, so a clean row per upload\n * would be the highest-volume event in the trail and would bury the two that matter — and the\n * upload itself is already recorded by `FILE_UPLOAD_GRANT_REDEEMED`. What is added here is the\n * conclusion an operator would want to be alerted on.\n /\n private async recordScanOutcomeAudit(\n fileId: string,\n result: FileScanResult,\n executionContext: ExecutionContext<any>,\n ): Promise<void> {\n if (!this.auditLogsService) return;\n\n try {\n // Re-read rather than assume: the transition may have failed, and the audit row must describe\n // the record, not the intent.\n const fileStatus = await this.resolveRecordedFileStatus(fileId, executionContext);\n const organizationId = executionContext.initiatorIds?.organizationId;\n const userId = executionContext.initiatorIds?.userId;\n\n if (result.verdict === FileScanVerdict.INFECTED) {\n await this.auditLogsService.logFileMalwareDetected({\n fileId,\n scannerRef: result.scannerRef,\n threatName: result.threatName,\n organizationId,\n userId,\n fileStatus,\n }, executionContext);\n return;\n }\n\n await this.auditLogsService.logFileMalwareScanFailed({\n fileId,\n scannerRef: result.scannerRef,\n failureReason: result.errorMessage,\n organizationId,\n userId,\n fileStatus,\n }, executionContext);\n } catch (error) {\n this.logger.warn('Failed to record the file scan outcome in the audit trail', {\n fileId,\n verdict: result.verdict,\n ...projectCaughtErrorLogFields(error),\n });\n }\n }\n\n /* The status the FILES row actually carries after the transition, or `unknown` if it cannot be read. /\n private async resolveRecordedFileStatus(\n fileId: string,\n executionContext: ExecutionContext<any>,\n ): Promise<string> {\n try {\n const file = await this.filesService.getFile(fileId, executionContext) as { status?: string } \| null;\n return file?.status ?? 'unknown';\n } catch {\n return 'unknown';\n }\n }\n\n /\n Quarantine an infected file.\n \n Transitions INFECTED → QUARANTINED. The blob remains in storage\n * but the file is permanently blocked from download. Operators can\n * delete quarantined files via admin tooling.\n */\n private async quarantineInfectedFile(\n fileId: string,\n result: FileScanResult,\n executionContext: ExecutionContext<any>,\n ): Promise<void> {\n try {\n await this.filesService.updateFileStatus(\n fileId,\n FileStatus.QUARANTINED,\n executionContext,\n );\n this.logDebug('Infected file quarantined', {\n fileId,\n threatName: result.threatName,\n });\n } catch (error) {\n this.logger.error('Failed to quarantine infected file', {\n fileId,\n ...projectCaughtErrorLogFields(error),\n });\n }\n }\n}\n"]}
1	+ {"version":3,"file":"file-scanning.backend.service.js","sourceRoot":"","sources":["../../../../src/files/services/file-scanning.backend.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;;;;;;;;;;;;;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACzD,OAAO,EACL,SAAS,EACT,2BAA2B,EAC3B,UAAU,EACV,uBAAuB,GACxB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAAE,kBAAkB,EAAE,MAAM,gDAAgD,CAAC;AAGpF,OAAO,EAAE,0BAA0B,EAAE,MAAM,kEAAkE,CAAC;AAC9G,OAAO,EAAE,mBAAmB,EAAE,2BAA2B,EAAE,MAAM,8EAA8E,CAAC;AAEhJ,OAAO,EAAE,mBAAmB,EAAE,MAAM,yDAAyD,CAAC;AAC9F,OAAO,EAAE,uBAAuB,EAAE,MAAM,sEAAsE,CAAC;AAC/G,OAAO,EAAE,2BAA2B,EAAE,MAAM,kEAAkE,CAAC;AAC/G,OAAO,EACL,eAAe,GAEhB,MAAM,mDAAmD,CAAC;AAC3D,OAAO,EAAE,yBAAyB,EAAE,MAAM,gEAAgE,CAAC;AAC3G,OAAO,EAAE,+BAA+B,EAAE,MAAM,sEAAsE,CAAC;AACvH,OAAO,EACL,eAAe,GAEhB,MAAM,mDAAmD,CAAC;AAE3D,gFAAgF;AAChF,UAAU;AACV,gFAAgF;AAGzE,IAAM,0BAA0B,GAAhC,MAAM,0BAA0B;IAOlB;IAEA;IAEA;IAEA;IAEA;IAEA;IAEA;IAUA;IA5BT,QAAQ,CAA+D;IAEhE,gBAAgB,GAAG,IAAI,GAAG,EAA+B,CAAC;IAE3E,YAEmB,MAAqB,EAErB,YAAwC,EAExC,YAAiC,EAEjC,gBAAyC,EAEzC,aAA0C,EAE1C,WAAsC,EAEtC,iBAAkD,EAUlD,gBAA0C;QAtB1C,WAAM,GAAN,MAAM,CAAe;QAErB,iBAAY,GAAZ,YAAY,CAA4B;QAExC,iBAAY,GAAZ,YAAY,CAAqB;QAEjC,qBAAgB,GAAhB,gBAAgB,CAAyB;QAEzC,kBAAa,GAAb,aAAa,CAA6B;QAE1C,gBAAW,GAAX,WAAW,CAA2B;QAEtC,sBAAiB,GAAjB,iBAAiB,CAAiC;QAUlD,qBAAgB,GAAhB,gBAAgB,CAA0B;QAE3D,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,4BAA4B,CAAC,CAAC;IACxE,CAAC;IAED;;;;;;;;;;;;;;;;OAgBG;IACH,UAAU,CAAC,YAAiC;QAC1C,MAAM,UAAU,GAAG,YAAY,EAAE,UAAU,CAAC;QAE5C,IAAI,UAAU,KAAK,UAAU;YAAE,OAAO,IAAI,CAAC;QAC3C,IAAI,UAAU,KAAK,MAAM;YAAE,OAAO,KAAK,CAAC;QAExC,OAAO,IAAI,CAAC,uBAAuB,EAAE,CAAC;IACxC,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA4CG;IACH,uBAAuB;QACrB,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,aAAa,EAAE;YAAE,OAAO,KAAK,CAAC;QACzD,OAAO,IAAI,CAAC,aAAa,CAAC,YAAY,EAAE,IAAI,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,CAAC;IAC3E,CAAC;IAED;;;;;;;;;;;;;OAaG;IACH,KAAK,CAAC,YAAY,CAChB,MAAc,EACd,gBAAuC,EACvC,OAA6B;QAE7B,MAAM,kBAAkB,GAAG,uBAAuB,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QACxE,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YACtD,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAChC,SAAS,CAAC,UAAU,EACpB,gBAAgB,EAChB;gBACE,sBAAsB,EAAE,2BAA2B,CAAC,8BAA8B;gBAClF,OAAO,EAAE;oBACP,MAAM,EAAE,wBAAwB;iBACjC;aACF,CACF,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,CAAC,YAAY,CAAC,gBAAgB,CACtC,MAAM,EACN,UAAU,CAAC,QAAQ,EACnB,gBAAgB,CACjB,CAAC;QAEF,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC7C,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,iDAAiD,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QAE7E,wEAAwE;QACxE,oEAAoE;QACpE,+CAA+C;QAC/C,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YACvD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,oCAAoC,EAAE;gBACtD,MAAM;gBACN,GAAG,2BAA2B,CAAC,GAAG,CAAC;aACpC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;;OASG;IACK,KAAK,CAAC,WAAW,CACvB,MAAc,EACd,gBAAuC;QAEvC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;QACvE,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,6BAA6B,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;YAC7D,OAAO;QACT,CAAC;QAED,4EAA4E;QAC5E,2EAA2E;QAC3E,+EAA+E;QAC/E,sEAAsE;QACtE,EAAE;QACF,+EAA+E;QAC/E,gFAAgF;QAChF,6EAA6E;QAC7E,4EAA4E;QAC5E,gFAAgF;QAChF,0EAA0E;QAC1E,+EAA+E;QAC/E,uBAAuB;QACvB,IAAI,QAAQ,CAAC;QACb,IAAI,CAAC;YACH,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC,yBAAyB,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;QACjF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE;gBAClC,OAAO,EAAE,eAAe,CAAC,KAAK;gBAC9B,YAAY,EAAE,qBAAqB,IAAI,CAAC,eAAe,mCAAmC;gBAC1F,UAAU,EAAE,eAAe;aAC5B,EAAE,gBAAgB,CAAC,CAAC;YACrB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,4DAA4D,EAAE;gBAC9E,MAAM;gBACN,eAAe,EAAE,IAAI,CAAC,eAAe;gBACrC,GAAG,2BAA2B,CAAC,GAAG,CAAC;aACpC,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,iGAAiG;QACjG,6FAA6F;QAC7F,qFAAqF;QACrF,MAAM,cAAc,GAAG;YACrB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,eAAe,EAAE,IAAI,CAAC,eAAe;YACrC,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,oBAAoB,EAAE,IAAI,CAAC,oBAAoB;SAChD,CAAC;QACF,MAAM,qBAAqB,GAAa,EAAE,CAAC;QAE3C,sEAAsE;QACtE,IAAI,IAAI,CAAC,aAAa,CAAC,YAAY,EAAE,EAAE,CAAC;YACtC,qBAAqB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACrC,IAAI,cAAc,CAAC;YACnB,IAAI,CAAC;gBACH,cAAc,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAC;YAC7E,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE;oBAClC,OAAO,EAAE,eAAe,CAAC,KAAK;oBAC9B,YAAY,EAAE,uCAAuC,mBAAmB,CAAC,GAAG,CAAC,EAAE;oBAC/E,UAAU,EAAE,QAAQ;iBACrB,EAAE,gBAAgB,CAAC,CAAC;gBACrB,OAAO;YACT,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;gBAEtF,IAAI,UAAU,CAAC,OAAO,KAAK,eAAe,CAAC,KAAK,EAAE,CAAC;oBACjD,MAAM,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,UAAU,EAAE,gBAAgB,CAAC,CAAC;oBAClE,OAAO;gBACT,CAAC;gBAED,IAAI,CAAC,QAAQ,CAAC,qBAAqB,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,CAAC,UAAU,EAAE,CAAC,CAAC;YACtF,CAAC;oBAAS,CAAC;gBACT,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;oBACrC,cAAc,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBAClC,CAAC;YACH,CAAC;QACH,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,QAAQ,CAAC,iDAAiD,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QAC/E,CAAC;QAED,sEAAsE;QACtE,IAAI,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,EAAE,CAAC;YACjC,qBAAqB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACnC,IAAI,cAAc,CAAC;YACnB,IAAI,CAAC;gBACH,cAAc,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAC;YAC7E,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE;oBAClC,OAAO,EAAE,eAAe,CAAC,KAAK;oBAC9B,YAAY,EAAE,qCAAqC,mBAAmB,CAAC,GAAG,CAAC,EAAE;oBAC7E,UAAU,EAAE,MAAM;iBACnB,EAAE,gBAAgB,CAAC,CAAC;gBACrB,OAAO;YACT,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;gBAEpF,IAAI,UAAU,CAAC,OAAO,KAAK,eAAe,CAAC,KAAK,EAAE,CAAC;oBACjD,MAAM,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,UAAU,EAAE,gBAAgB,CAAC,CAAC;oBAClE,OAAO;gBACT,CAAC;gBAED,IAAI,CAAC,QAAQ,CAAC,mBAAmB,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,CAAC,UAAU,EAAE,CAAC,CAAC;YACpF,CAAC;oBAAS,CAAC;gBACT,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;oBACrC,cAAc,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBAClC,CAAC;YACH,CAAC;QACH,CAAC;QAED,sEAAsE;QACtE,EAAE;QACF,0FAA0F;QAC1F,uFAAuF;QACvF,iGAAiG;QACjG,mGAAmG;QACnG,+FAA+F;QAC/F,oGAAoG;QACpG,sDAAsD;QACtD,EAAE;QACF,qGAAqG;QACrG,mGAAmG;QACnG,oFAAoF;QACpF,kGAAkG;QAClG,2FAA2F;QAC3F,EAAE;QACF,qGAAqG;QACrG,kGAAkG;QAClG,mGAAmG;QACnG,EAAE;QACF,oGAAoG;QACpG,qGAAqG;QACrG,oGAAoG;QACpG,sGAAsG;QACtG,sGAAsG;QACtG,kGAAkG;QAClG,IAAI,qBAAqB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvC,MAAM,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE;gBAClC,OAAO,EAAE,eAAe,CAAC,KAAK;gBAC9B,YAAY,EAAE,0IAA0I;gBACxJ,UAAU,EAAE,MAAM;aACnB,EAAE,gBAAgB,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QAED,sEAAsE;QACtE,gGAAgG;QAChG,8EAA8E;QAC9E,MAAM,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE;YAClC,OAAO,EAAE,eAAe,CAAC,KAAK;YAC9B,UAAU,EAAE,qBAAqB,CAAC,IAAI,CAAC,GAAG,CAAC;SAC5C,EAAE,gBAAgB,CAAC,CAAC;IACvB,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,gBAAgB,CACpB,MAAc,EACd,MAAsB,EACtB,gBAAuC;QAEvC,IAAI,CAAC,QAAQ,CAAC,wBAAwB,EAAE;YACtC,MAAM;YACN,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,UAAU,EAAE,MAAM,CAAC,UAAU;SAC9B,CAAC,CAAC;QAEH;;;;;;;;;;;;WAYG;QACH,QAAQ,MAAM,CAAC,OAAO,EAAE,CAAC;YACvB,KAAK,eAAe,CAAC,KAAK;gBACxB,MAAM,IAAI,CAAC,YAAY,CAAC,gBAAgB,CACtC,MAAM,EACN,UAAU,CAAC,KAAK,EAChB,gBAAgB,CACjB,CAAC;gBACF,IAAI,CAAC,QAAQ,CAAC,iCAAiC,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;gBAE7D,sFAAsF;gBACtF,2FAA2F;gBAC3F,2FAA2F;gBAC3F,wFAAwF;gBACxF,mDAAmD;gBACnD,MAAM,OAAO,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;gBAClD,IAAI,OAAO,EAAE,CAAC;oBACZ,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;oBACrC,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;wBACtB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,4BAA4B,EAAE;4BAC9C,MAAM;4BACN,GAAG,2BAA2B,CAAC,GAAG,CAAC;yBACpC,CAAC,CAAC;oBACL,CAAC,CAAC,CAAC;gBACL,CAAC;gBACD,MAAM;YAER,KAAK,eAAe,CAAC,QAAQ;gBAC3B,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBACrC,MAAM,IAAI,CAAC,YAAY,CAAC,gBAAgB,CACtC,MAAM,EACN,UAAU,CAAC,QAAQ,EACnB,gBAAgB,CACjB,CAAC;gBACF,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,0BAA0B,EAAE;oBAC3C,MAAM;oBACN,UAAU,EAAE,MAAM,CAAC,UAAU;oBAC7B,UAAU,EAAE,MAAM,CAAC,UAAU;iBAC9B,CAAC,CAAC;gBAEH,MAAM,IAAI,CAAC,sBAAsB,CAAC,MAAM,EAAE,MAAM,EAAE,gBAAgB,CAAC,CAAC;gBACpE,6FAA6F;gBAC7F,wFAAwF;gBACxF,MAAM,IAAI,CAAC,sBAAsB,CAAC,MAAM,EAAE,MAAM,EAAE,gBAAgB,CAAC,CAAC;gBACpE,MAAM;YAER,KAAK,eAAe,CAAC,KAAK;gBACxB,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBACrC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,wBAAwB,EAAE;oBAC1C,MAAM;oBACN,YAAY,EAAE,MAAM,CAAC,YAAY;oBACjC,UAAU,EAAE,MAAM,CAAC,UAAU;iBAC9B,CAAC,CAAC;gBACH,MAAM,IAAI,CAAC,YAAY,CAAC,gBAAgB,CACtC,MAAM,EACN,UAAU,CAAC,MAAM,EACjB,gBAAgB,CACjB,CAAC;gBACF,MAAM,IAAI,CAAC,sBAAsB,CAAC,MAAM,EAAE,MAAM,EAAE,gBAAgB,CAAC,CAAC;gBACpE,MAAM;QACV,CAAC;IACH,CAAC;IAED;;;;;;;;;;;OAWG;IACK,KAAK,CAAC,sBAAsB,CAClC,MAAc,EACd,MAAsB,EACtB,gBAAuC;QAEvC,IAAI,CAAC,IAAI,CAAC,gBAAgB;YAAE,OAAO;QAEnC,IAAI,CAAC;YACH,8FAA8F;YAC9F,8BAA8B;YAC9B,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,yBAAyB,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;YAClF,MAAM,cAAc,GAAG,gBAAgB,CAAC,YAAY,EAAE,cAAc,CAAC;YACrE,MAAM,MAAM,GAAG,gBAAgB,CAAC,YAAY,EAAE,MAAM,CAAC;YAErD,IAAI,MAAM,CAAC,OAAO,KAAK,eAAe,CAAC,QAAQ,EAAE,CAAC;gBAChD,MAAM,IAAI,CAAC,gBAAgB,CAAC,sBAAsB,CAAC;oBACjD,MAAM;oBACN,UAAU,EAAE,MAAM,CAAC,UAAU;oBAC7B,UAAU,EAAE,MAAM,CAAC,UAAU;oBAC7B,cAAc;oBACd,MAAM;oBACN,UAAU;iBACX,EAAE,gBAAgB,CAAC,CAAC;gBACrB,OAAO;YACT,CAAC;YAED,MAAM,IAAI,CAAC,gBAAgB,CAAC,wBAAwB,CAAC;gBACnD,MAAM;gBACN,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,aAAa,EAAE,MAAM,CAAC,YAAY;gBAClC,cAAc;gBACd,MAAM;gBACN,UAAU;aACX,EAAE,gBAAgB,CAAC,CAAC;QACvB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,2DAA2D,EAAE;gBAC5E,MAAM;gBACN,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,GAAG,2BAA2B,CAAC,KAAK,CAAC;aACtC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,yGAAyG;IACjG,KAAK,CAAC,yBAAyB,CACrC,MAAc,EACd,gBAAuC;QAEvC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,MAAM,EAAE,gBAAgB,CAA+B,CAAC;YACrG,OAAO,IAAI,EAAE,MAAM,IAAI,SAAS,CAAC;QACnC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACK,KAAK,CAAC,sBAAsB,CAClC,MAAc,EACd,MAAsB,EACtB,gBAAuC;QAEvC,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,YAAY,CAAC,gBAAgB,CACtC,MAAM,EACN,UAAU,CAAC,WAAW,EACtB,gBAAgB,CACjB,CAAC;YACF,IAAI,CAAC,QAAQ,CAAC,2BAA2B,EAAE;gBACzC,MAAM;gBACN,UAAU,EAAE,MAAM,CAAC,UAAU;aAC9B,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,oCAAoC,EAAE;gBACtD,MAAM;gBACN,GAAG,2BAA2B,CAAC,KAAK,CAAC;aACtC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;CACF,CAAA;AAhhBY,0BAA0B;IADtC,UAAU,EAAE;IAOR,WAAA,MAAM,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAA;IAEjC,WAAA,MAAM,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,CAAA;IAE9C,WAAA,MAAM,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,CAAA;IAE9C,WAAA,MAAM,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,CAAA;IAE3C,WAAA,MAAM,CAAC,kBAAkB,CAAC,oBAAoB,CAAC,CAAA;IAE/C,WAAA,MAAM,CAAC,kBAAkB,CAAC,kBAAkB,CAAC,CAAA;IAE7C,WAAA,MAAM,CAAC,kBAAkB,CAAC,iBAAiB,CAAC,CAAA;IAU5C,WAAA,MAAM,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,CAAA;IAAE,WAAA,QAAQ,EAAE,CAAA;+CAnBzB,0BAA0B;QAE1B,mBAAmB;QAEf,uBAAuB;QAE1B,2BAA2B;QAE7B,yBAAyB;QAEnB,+BAA+B;GAnB1D,0BAA0B,CAghBtC","sourcesContent":["/*\n File Scanning Backend Service\n \n Orchestrates antivirus scanning for uploaded files. After a file\n * reaches UPLOADED status, this service:\n \n 1. Transitions the file to SCANNING\n * 2. Downloads the file from storage\n * 3. Submits to ClamAV via TCP (signature-based)\n * 4. If ClamAV passes, submits to YARA via REST (pattern-based, optional)\n * 5. Processes combined results (CLEAN / INFECTED)\n * 6. Quarantines infected files\n \n Scanning is fail-closed at the gate, asynchronous in the pipeline (#433). The upload handler\n * AWAITS `initiateScan`, which awaits the UPLOADED -> SCANNING transition and only then fires the\n * pipeline — so the upload response costs one status write, not a scan, and the file is already\n * non-downloadable when the caller is told the upload succeeded. It becomes downloadable when the\n * result handler transitions it to CLEAN.\n \n This paragraph used to say the response \"returns immediately with status UPLOADED\", and that was\n * the defect: UPLOADED is a downloadable status, so a field declaring `scanPolicy: 'required'` had\n * a window in which unscanned bytes were servable. If scanning is not required for the field, the\n * file stays at UPLOADED and remains downloadable — that half is unchanged and deliberate.\n \n Configuration:\n * - Application-wide: DERIVED, not declared. Scanning is on for a field that states no policy of its\n * own exactly when a scanner is reachable — `fileScanning.antivirus` (seeded from `CLAMAV_HOST`) or\n * `fileScanning.yara` both enabled and reachable (`YARA_ENABLED` + `YARA_HOST`). Provisioning the\n * sidecar IS the application-level opt-in; there is no separate on/off flag. See\n * {@link FileScanningBackendService.isGlobalScanningEnabled} for why it is derived rather than declared.\n * - Per-field: `z_file({ scanPolicy: 'required' \| 'skip' })` overrides that, in both directions.\n \n These two lines used to name `appConfig.files.scanning.enabled`, a configuration path no schema has\n * ever declared — so the application-wide half was documented, cast through `any`, and dead.\n \n A scan that was REQUESTED and finds no scanner now FAILS the file rather than passing it; the tail of\n * `executeScan` carries the reasoning.\n /\n\nimport { injectable, inject, optional } from 'inversify';\nimport {\n ErrorType,\n ErrorCustomMessageReference,\n FileStatus,\n FILE_STATUS_TRANSITIONS,\n} from '@wildo-ai/saas-models';\nimport type { FileSchemaMetadata } from '@wildo-ai/zod-decorators';\nimport { SAAS_SERVICE_TYPES } from '~wildo-backend-lib/inject/models/service-types';\nimport type { AuditLogsBackendService } from '~wildo-backend-lib/compliance/audit-trails/services/audit-logs.backend.service';\nimport type { LoggerService } from '~wildo-backend-lib/monitoring/logger/services/logger.service';\nimport { ErrorBuilderBackendService } from '~wildo-backend-lib/errors/services/error-builder.backend.service';\nimport { describeCaughtError, projectCaughtErrorLogFields } from '~wildo-backend-lib/errors/utils/error-log-level-classification.backend.utils';\nimport { ExecutionContext } from '~wildo-backend-lib/runtime/models/execution-context.backend.schemas';\nimport { FilesBackendService } from '~wildo-backend-lib/files/services/files.backend.service';\nimport { AppConfigurationService } from '~wildo-backend-lib/config/services/app-configuration.backend.service';\nimport { ClamAVScannerBackendService } from '~wildo-backend-lib/files/scanning/clamav-scanner.backend.service';\nimport {\n FileScanVerdict,\n type FileScanResult,\n} from '~wildo-backend-lib/files/scanning/file-scan.types';\nimport { YaraScannerBackendService } from '~wildo-backend-lib/files/scanning/yara-scanner.backend.service';\nimport { FileStorageRouterBackendService } from '~wildo-backend-lib/files/storage/file-storage-router.backend.service';\nexport {\n FileScanVerdict,\n type FileScanResult,\n} from '~wildo-backend-lib/files/scanning/file-scan.types';\n\n// ─────────────────────────────────────────────────────────────────────────────\n// Service\n// ─────────────────────────────────────────────────────────────────────────────\n\n@injectable()\nexport class FileScanningBackendService {\n protected logDebug: (message: string, context?: Record<string, unknown>) => void;\n\n private readonly onCleanCallbacks = new Map<string, () => Promise<void>>();\n\n constructor(\n @inject(SAAS_SERVICE_TYPES.Logger)\n private readonly logger: LoggerService,\n @inject(SAAS_SERVICE_TYPES.ErrorBuilderService)\n private readonly errorBuilder: ErrorBuilderBackendService,\n @inject(SAAS_SERVICE_TYPES.FilesBackendService)\n private readonly filesService: FilesBackendService,\n @inject(SAAS_SERVICE_TYPES.AppConfigService)\n private readonly appConfigService: AppConfigurationService,\n @inject(SAAS_SERVICE_TYPES.ClamAVScannerService)\n private readonly clamavScanner: ClamAVScannerBackendService,\n @inject(SAAS_SERVICE_TYPES.YaraScannerService)\n private readonly yaraScanner: YaraScannerBackendService,\n @inject(SAAS_SERVICE_TYPES.FileStorageRouter)\n private readonly fileStorageRouter: FileStorageRouterBackendService,\n /\n * `@optional()` because a container without the audit service must still SCAN (#506). The record\n * is what this issue adds; refusing to inspect content when the recorder is absent would trade a\n * missing audit row for missing malware detection, which is the worse of the two.\n \n The emission below is likewise best-effort: an audit failure must not turn a successful\n * quarantine into an exception that leaves the file mid-transition.\n /\n @inject(SAAS_SERVICE_TYPES.AuditLogsService) @optional()\n private readonly auditLogsService?: AuditLogsBackendService,\n ) {\n this.logDebug = this.logger.debugByType('FileScanningBackendService');\n }\n\n /\n Determine whether a file should be scanned after upload.\n \n Resolution order:\n * 1. Per-field `z_file({ scanPolicy })` wins if set\n * 2. Falls back to the application-wide answer, {@link isGlobalScanningEnabled}\n \n assurance-control: WILDO.SECURITY.INGESTED_CONTENT_INSPECTION — whether ingested content is\n * inspected is a declared decision, per field and then per application, rather than an implicit one.\n \n The per-APPLICATION half of that claim was false until 2026-09-09: step 2 read a configuration path\n * no schema declares, so it answered `false` in every application ever built and `scanPolicy` was the\n * only reachable declaration. It is true now because the application-wide answer is DERIVED from the\n * scanner topology the operator provisions — a declaration made by supplying `CLAMAV_HOST`, and\n * refused a default. Nothing here is implicit in either direction: a field can still override, and a\n * requested scan with no scanner refuses rather than passing (see the tail of `executeScan`).\n /\n shouldScan(fileMetadata?: FileSchemaMetadata): boolean {\n const scanPolicy = fileMetadata?.scanPolicy;\n\n if (scanPolicy === 'required') return true;\n if (scanPolicy === 'skip') return false;\n\n return this.isGlobalScanningEnabled();\n }\n\n /\n Whether scanning is on APPLICATION-WIDE, for a file field that states no `scanPolicy` of its own.\n \n DERIVED from the platform-injected `fileScanning` topology: a scanner being reachable IS the\n * application-level opt-in.\n \n ## What this replaced\n \n `(this.appConfigService.config as Record<string, any>)?.files?.scanning?.enabled === true`. The\n * `any` cast is the tell — `AppConfigurationSchema` declares no `files` section, `z.object` strips\n * unknown keys, so the parsed configuration could never carry that path and the expression was\n * `undefined === true` for every application, for the whole life of the flag. The service's own\n * docstring documented it as the global switch.\n \n ## Why DERIVED rather than declared\n \n Adding an `enabled` boolean to `AppConfiguration_FileScanningSchema` was the other candidate and is\n * rejected on three counts:\n \n - the answer already exists. `fileScanning` is a mutation-boundary-PROTECTED section\n * (`APP_CONFIG_MUTATION_BOUNDARY_RULES` in `app-config.backend-authored.definitions.ts`: \"file-scanning\n * sidecar topology and its platform-level opt-in are env/bootstrap-owned\"), so an application cannot\n * author it. A boolean would have to be seeded from a NEW environment key sitting beside the host key\n * that already says the same thing — a second source of truth that can disagree with the first;\n * - it matches the convention of the thing it gates. ClamAV has no enable flag anywhere in this\n * subsystem: `ClamAVScannerBackendService.isConfigured()` states \"presence of a host IS the opt-in\",\n * and `buildFileServicesTopologyFromEnvironment` refuses to emit a plausible default host for exactly\n * that reason;\n * - it closes the hole the repair would otherwise open. A separate boolean makes \"globally on, no\n * scanner reachable\" a REPRESENTABLE state, and that state is precisely the one the pipeline used to\n * answer with a CLEAN verdict. Derived, the state cannot exist: the switch is on only when something\n * can actually run. The runtime refusal in `executeScan` stays regardless, because `scanPolicy:\n * 'required'` reaches the same tail without consulting this switch at all.\n \n The two predicates are the pipeline's OWN — `executeScan` gates its two layers on exactly\n * `clamavScanner.isConfigured()` and `yaraScanner.isEnabled()` — so the switch and the pipeline cannot\n * come to different conclusions about whether a scan is possible. Note `isEnabled()` is already the\n * conjunction of YARA's two independent axes (opted in AND reachable), which is why the \"enabled but\n * unreachable\" misconfiguration does not read as an application-wide opt-in here; the startup validator\n * reports it as its own issue instead.\n \n The `isInitialized()` guard stays: both scanner reads deliberately throw\n * `app_configuration_not_initialized` rather than softening to `false`, and a scan decision taken before\n * configuration has landed is not a decision.\n /\n isGlobalScanningEnabled(): boolean {\n if (!this.appConfigService.isInitialized()) return false;\n return this.clamavScanner.isConfigured() \|\| this.yaraScanner.isEnabled();\n }\n\n /\n Initiate scanning for a file that just reached UPLOADED status.\n \n Transitions to SCANNING, then dispatches the scan job.\n * The response is fire-and-forget: the caller does not wait for scan\n * completion — scan results are processed asynchronously via\n * `handleScanResult()`.\n \n @param onClean - Optional callback invoked when scan verdict is CLEAN.\n * Used to chain post-scan work that must only run on safe bytes. Note the file\n * STATUS lifecycle ends at CLEAN for processing purposes — RAG chunking of a\n * `ragSource` file field is per-field derived data (chunk rows), never a file\n * status transition.\n /\n async initiateScan(\n fileId: string,\n executionContext: ExecutionContext<any>,\n onClean?: () => Promise<void>,\n ): Promise<void> {\n const allowedTransitions = FILE_STATUS_TRANSITIONS[FileStatus.UPLOADED];\n if (!allowedTransitions.includes(FileStatus.SCANNING)) {\n throw this.errorBuilder.buildError(\n ErrorType.VALIDATION,\n executionContext,\n {\n customMessageReference: ErrorCustomMessageReference.FILE_INVALID_STATUS_TRANSITION,\n context: {\n fileId, // diagnostic (log-only)\n },\n },\n );\n }\n\n await this.filesService.updateFileStatus(\n fileId,\n FileStatus.SCANNING,\n executionContext,\n );\n\n if (onClean) {\n this.onCleanCallbacks.set(fileId, onClean);\n }\n\n this.logDebug('File transitioned to SCANNING, dispatching scan', { fileId });\n\n // Run the full scanning pipeline asynchronously. The file is already in\n // SCANNING status so downloads are blocked until the result handler\n // transitions it to CLEAN / INFECTED / FAILED.\n this.executeScan(fileId, executionContext).catch((err) => {\n this.logger.error('Scan execution failed unexpectedly', {\n fileId,\n ...projectCaughtErrorLogFields(err),\n });\n });\n }\n\n /\n Download the file from storage and run the scanning pipeline.\n \n Pipeline order:\n * 1. ClamAV (signature-based) — if configured\n * 2. YARA (pattern-based) — if enabled and ClamAV passed\n \n Short-circuits on first INFECTED verdict. YARA only runs if the\n * file survived ClamAV — no point in pattern-matching a known virus.\n /\n private async executeScan(\n fileId: string,\n executionContext: ExecutionContext<any>,\n ): Promise<void> {\n const file = await this.filesService.getFile(fileId, executionContext);\n if (!file) {\n this.logger.error('File not found for scanning', { fileId });\n return;\n }\n\n // Resolve through FilesBackendService rather than the router directly, so a\n // LEGACY row that persisted no `storageProvider` falls back to the default\n // provider instead of failing the scan. Reimplementing the lookup here is what\n // made this one of five different behaviours for a provider-less row.\n //\n // The throw is deliberately converted back into a terminal verdict rather than\n // propagated. `getStorageProviderForFile` throws INTERNAL when the persisted id\n // is not registered, and this pipeline is fire-and-forget — its dispatcher's\n // `.catch()` only LOGS. An escaping throw would therefore leave the file in\n // SCANNING permanently, and downloads stay blocked until a result handler moves\n // it out. That is strictly worse than the ERROR verdict this site already\n // recorded, so the drift is closed WITHOUT adopting the reference behaviour on\n // the throwing branch.\n let provider;\n try {\n provider = this.filesService.getStorageProviderForFile(file, executionContext);\n } catch (err) {\n await this.handleScanResult(fileId, {\n verdict: FileScanVerdict.ERROR,\n errorMessage: `Storage provider '${file.storageProvider}' not available for scan download`,\n scannerRef: 'scan-pipeline',\n }, executionContext);\n this.logger.error('Scan aborted: persisted storage provider is not registered', {\n fileId,\n storageProvider: file.storageProvider,\n ...projectCaughtErrorLogFields(err),\n });\n return;\n }\n\n // Carries `uploadedBy` / `uploadedByEntityType` beside the three routing fields: a vendor-backed\n // storage resolves the LINKER's grant from them, and a scanner that dropped them could never\n // download a Drive file — every layer would answer ERROR on a healthy row (#394 P5).\n const downloadParams = {\n fileId: file.fileId,\n storageProvider: file.storageProvider,\n storageRef: file.storageRef,\n uploadedBy: file.uploadedBy,\n uploadedByEntityType: file.uploadedByEntityType,\n };\n const executedScannerLayers: string[] = [];\n\n // ── Layer 1: ClamAV ────────────────────────────────────────────────\n if (this.clamavScanner.isConfigured()) {\n executedScannerLayers.push('clamav');\n let downloadResult;\n try {\n downloadResult = await provider.download(downloadParams, executionContext);\n } catch (err) {\n await this.handleScanResult(fileId, {\n verdict: FileScanVerdict.ERROR,\n errorMessage: `Failed to download file for ClamAV: ${describeCaughtError(err)}`,\n scannerRef: 'clamav',\n }, executionContext);\n return;\n }\n\n try {\n const clamResult = await this.clamavScanner.scanStream(downloadResult.stream, fileId);\n\n if (clamResult.verdict !== FileScanVerdict.CLEAN) {\n await this.handleScanResult(fileId, clamResult, executionContext);\n return;\n }\n\n this.logDebug('ClamAV layer passed', { fileId, durationMs: clamResult.durationMs });\n } finally {\n if (!downloadResult.stream.destroyed) {\n downloadResult.stream.destroy();\n }\n }\n } else {\n this.logDebug('ClamAV not configured — skipping signature scan', { fileId });\n }\n\n // ── Layer 2: YARA (optional, platform-level) ───────────────────────\n if (this.yaraScanner.isEnabled()) {\n executedScannerLayers.push('yara');\n let downloadResult;\n try {\n downloadResult = await provider.download(downloadParams, executionContext);\n } catch (err) {\n await this.handleScanResult(fileId, {\n verdict: FileScanVerdict.ERROR,\n errorMessage: `Failed to download file for YARA: ${describeCaughtError(err)}`,\n scannerRef: 'yara',\n }, executionContext);\n return;\n }\n\n try {\n const yaraResult = await this.yaraScanner.scanStream(downloadResult.stream, fileId);\n\n if (yaraResult.verdict !== FileScanVerdict.CLEAN) {\n await this.handleScanResult(fileId, yaraResult, executionContext);\n return;\n }\n\n this.logDebug('YARA layer passed', { fileId, durationMs: yaraResult.durationMs });\n } finally {\n if (!downloadResult.stream.destroyed) {\n downloadResult.stream.destroy();\n }\n }\n }\n\n // ── Nothing ran: refuse, do not certify ────────────────────────────\n //\n // This branch used to log a warning and then hand `handleScanResult` a CLEAN verdict with\n // `scannerRef: 'none'` — which transitions the file to `FileStatus.CLEAN`, a member of\n // `FILE_DOWNLOADABLE_STATUSES`. A scan had been REQUESTED (`shouldScan` said yes, `initiateScan`\n // moved the file to SCANNING, the uploader was told the upload succeeded), and the answer returned\n // was the answer a PASSING scan gives, produced by no scanner. That is strictly worse than not\n // scanning at all: a field declaring `scanPolicy: 'required'` ended with bytes certified clean, and\n // the only trace was a warning in a log nobody reads.\n //\n // ERROR -> `FileStatus.FAILED` is the fail-closed terminal, and the right one rather than merely the\n // safe one: FAILED is outside `FILE_DOWNLOADABLE_STATUSES` so the bytes are blocked, it is outside\n // `FILE_METADATA_WITHHELD_STATUSES` so the uploader can still poll and see WHY, and\n // `FILE_STATUS_TRANSITIONS` keeps SCANNING -> FAILED, so nothing about the lifecycle has to move.\n // A file that failed this way becomes scannable again the moment a scanner is provisioned.\n //\n // Keyed on `executedScannerLayers` — direct evidence that nothing ran — rather than on re-asking the\n // two `isConfigured()` predicates. Re-asking would be a second copy of the decision the two layer\n // gates above already took, and the copies can disagree if a layer ever grows another skip reason.\n //\n // Not redundant with the boot gate, which is the obvious objection. `collectScanningIssues` refuses\n // to start an application whose fields declare `scanPolicy: 'required'` when ClamAV is unconfigured,\n // so in a well-formed deployment this branch is unreachable. But that gate builds its population by\n // walking every resource's file fields inside `try { … } catch { continue; }`: a resource whose field\n // detection throws contributes no fields and is silently absent from the count. A boot check that can\n // under-report the population it protects is not a substitute for the refusal at the site itself.\n if (executedScannerLayers.length === 0) {\n await this.handleScanResult(fileId, {\n verdict: FileScanVerdict.ERROR,\n errorMessage: 'Scan was requested but no scanner is configured (no ClamAV host, and YARA not enabled/reachable) — refusing to certify the file as clean',\n scannerRef: 'none',\n }, executionContext);\n return;\n }\n\n // ── All layers that ran, passed ────────────────────────────────────\n // `join('+')` needs no `\|\| 'none'` fallback any more: the empty case returned above, so a CLEAN\n // verdict from here always names at least one scanner that actually executed.\n await this.handleScanResult(fileId, {\n verdict: FileScanVerdict.CLEAN,\n scannerRef: executedScannerLayers.join('+'),\n }, executionContext);\n }\n\n /\n Process the result of a scan job.\n \n - CLEAN: transition to CLEAN (file becomes downloadable)\n * - INFECTED: transition to INFECTED, then quarantine\n * - ERROR: transition to FAILED (retryable via re-scan)\n /\n async handleScanResult(\n fileId: string,\n result: FileScanResult,\n executionContext: ExecutionContext<any>,\n ): Promise<void> {\n this.logDebug('Processing scan result', {\n fileId,\n verdict: result.verdict,\n threatName: result.threatName,\n scannerRef: result.scannerRef,\n durationMs: result.durationMs,\n });\n\n /\n * assurance-control: WILDO.SECURITY.INGESTED_CONTENT_INSPECTION — the scanner's verdict becomes a\n * member of `FileStatus`, which is also what `FILE_DOWNLOADABLE_STATUSES` reads, so \"inspected\" and\n * \"servable\" are one decision rather than two that could disagree. `FileScanVerdict` names the\n * scanner's answer; `FileStatus` is the one with consequence, which is why the assurance capability\n * derives from it.\n \n The outcome now ALSO reaches the audit trail (#506): `FILE_MALWARE_DETECTED` when a scanner\n * concludes an infection, `FILE_MALWARE_SCAN_FAILED` when the scan could not run. Both are\n * emitted AFTER the terminal transition, so the row can never describe a state the record does\n * not hold. Until they existed, an infection produced a status change and nothing else — the only\n * way to learn malware had arrived was to notice a row sitting at `QUARANTINED`.\n /\n switch (result.verdict) {\n case FileScanVerdict.CLEAN:\n await this.filesService.updateFileStatus(\n fileId,\n FileStatus.CLEAN,\n executionContext,\n );\n this.logDebug('File marked as CLEAN after scan', { fileId });\n\n // Invoke the post-clean callback (generic post-scan work registered by initiateScan's\n // caller). RAG ingestion is deliberately NOT chained here: the service-tier write hook and\n // the hourly reconciliation sweep own corpus derivation, and the ingestion pipeline itself\n // refuses non-downloadable files — so a file that finishes scanning is picked up by the\n // next sweep run with no per-file callback wiring.\n const onClean = this.onCleanCallbacks.get(fileId);\n if (onClean) {\n this.onCleanCallbacks.delete(fileId);\n onClean().catch((err) => {\n this.logger.error('Post-clean callback failed', {\n fileId,\n ...projectCaughtErrorLogFields(err),\n });\n });\n }\n break;\n\n case FileScanVerdict.INFECTED:\n this.onCleanCallbacks.delete(fileId);\n await this.filesService.updateFileStatus(\n fileId,\n FileStatus.INFECTED,\n executionContext,\n );\n this.logger.warn('File flagged as INFECTED', {\n fileId,\n threatName: result.threatName,\n scannerRef: result.scannerRef,\n });\n\n await this.quarantineInfectedFile(fileId, result, executionContext);\n // AFTER the quarantine transition, so `fileStatus` is what the record holds rather than what\n // this method intended. If the quarantine failed, the row says INFECTED, which is true.\n await this.recordScanOutcomeAudit(fileId, result, executionContext);\n break;\n\n case FileScanVerdict.ERROR:\n this.onCleanCallbacks.delete(fileId);\n this.logger.error('Scan failed with error', {\n fileId,\n errorMessage: result.errorMessage,\n scannerRef: result.scannerRef,\n });\n await this.filesService.updateFileStatus(\n fileId,\n FileStatus.FAILED,\n executionContext,\n );\n await this.recordScanOutcomeAudit(fileId, result, executionContext);\n break;\n }\n }\n\n /\n Write the scan outcome to the audit trail (#506).\n \n Best-effort and never throwing: the file's status transition is the enforcement, and an audit\n * store being unavailable must not convert a successful quarantine into an exception that leaves\n * the caller believing the scan failed.\n \n A CLEAN verdict is deliberately NOT audited. Every upload is scanned, so a clean row per upload\n * would be the highest-volume event in the trail and would bury the two that matter — and the\n * upload itself is already recorded by `FILE_UPLOAD_GRANT_REDEEMED`. What is added here is the\n * conclusion an operator would want to be alerted on.\n /\n private async recordScanOutcomeAudit(\n fileId: string,\n result: FileScanResult,\n executionContext: ExecutionContext<any>,\n ): Promise<void> {\n if (!this.auditLogsService) return;\n\n try {\n // Re-read rather than assume: the transition may have failed, and the audit row must describe\n // the record, not the intent.\n const fileStatus = await this.resolveRecordedFileStatus(fileId, executionContext);\n const organizationId = executionContext.initiatorIds?.organizationId;\n const userId = executionContext.initiatorIds?.userId;\n\n if (result.verdict === FileScanVerdict.INFECTED) {\n await this.auditLogsService.logFileMalwareDetected({\n fileId,\n scannerRef: result.scannerRef,\n threatName: result.threatName,\n organizationId,\n userId,\n fileStatus,\n }, executionContext);\n return;\n }\n\n await this.auditLogsService.logFileMalwareScanFailed({\n fileId,\n scannerRef: result.scannerRef,\n failureReason: result.errorMessage,\n organizationId,\n userId,\n fileStatus,\n }, executionContext);\n } catch (error) {\n this.logger.warn('Failed to record the file scan outcome in the audit trail', {\n fileId,\n verdict: result.verdict,\n ...projectCaughtErrorLogFields(error),\n });\n }\n }\n\n /* The status the FILES row actually carries after the transition, or `unknown` if it cannot be read. /\n private async resolveRecordedFileStatus(\n fileId: string,\n executionContext: ExecutionContext<any>,\n ): Promise<string> {\n try {\n const file = await this.filesService.getFile(fileId, executionContext) as { status?: string } \| null;\n return file?.status ?? 'unknown';\n } catch {\n return 'unknown';\n }\n }\n\n /\n Quarantine an infected file.\n \n Transitions INFECTED → QUARANTINED. The blob remains in storage\n * but the file is permanently blocked from download. Operators can\n * delete quarantined files via admin tooling.\n */\n private async quarantineInfectedFile(\n fileId: string,\n result: FileScanResult,\n executionContext: ExecutionContext<any>,\n ): Promise<void> {\n try {\n await this.filesService.updateFileStatus(\n fileId,\n FileStatus.QUARANTINED,\n executionContext,\n );\n this.logDebug('Infected file quarantined', {\n fileId,\n threatName: result.threatName,\n });\n } catch (error) {\n this.logger.error('Failed to quarantine infected file', {\n fileId,\n ...projectCaughtErrorLogFields(error),\n });\n }\n }\n}\n"]}

package/dist/esm/files/services/file-text-extraction.backend.service.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"file-text-extraction.backend.service.d.ts","sourceRoot":"","sources":["~~../../../../../~~src/files/services/file-text-extraction.backend.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiFG;AAMH,OAAO,EAA0C,KAAK,IAAI,EAAE,MAAM,uBAAuB,CAAC;AAQ1F,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8DAA8D,CAAC;AAClG,OAAO,EAAE,0BAA0B,EAAE,MAAM,kEAAkE,CAAC;AAC9G,OAAO,EAAE,gBAAgB,EAAE,MAAM,qEAAqE,CAAC;AACvG,OAAO,EAAE,+BAA+B,EAAE,MAAM,sEAAsE,CAAC;AACvH,OAAO,EAAE,mBAAmB,EAAE,MAAM,yDAAyD,CAAC;AAC9F,OAAO,EACL,gCAAgC,~~EAIjC~~,MAAM,oFAAoF,CAAC;AAG5F;;;;;;;;GAQG;AACH,MAAM,WAAW,yBAAyB;IACxC;;;;;;;;;;;OAWG;IACH,uBAAuB,CAAC,EAAE,OAAO,CAAC;CACnC;AAED,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE;QACT,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;KACxB,CAAC;CACH;AAkED,qBACa,gCAAgC;IAKzC,OAAO,CAAC,QAAQ,CAAC,MAAM;IAEvB,OAAO,CAAC,QAAQ,CAAC,YAAY;IAE7B,OAAO,CAAC,QAAQ,CAAC,iBAAiB;IAGlC,OAAO,CAAC,QAAQ,CAAC,YAAY;IAS7B,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC;IApBtC,SAAS,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;gBAI9D,MAAM,EAAE,aAAa,EAErB,YAAY,EAAE,0BAA0B,EAExC,iBAAiB,EAAE,+BAA+B,EAGlD,YAAY,EAAE,mBAAmB,EASjC,kBAAkB,CAAC,EAAE,gCAAgC;IAMxE;;OAEG;IACG,WAAW,CACf,IAAI,EAAE,IAAI,EACV,gBAAgB,EAAE,gBAAgB,CAAC,GAAG,CAAC,EACvC,OAAO,CAAC,EAAE,yBAAyB,GAClC,OAAO,CAAC,wBAAwB,CAAC;IA0FpC;;OAEG;IACH,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;IAsBhD;;;;;;OAMG;IACH,OAAO,CAAC,wBAAwB;YAalB,eAAe;IAmB7B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAoDG;YACW,mBAAmB;IA4IjC;;;;;;;;;OASG;IACH,OAAO,CAAC,4BAA4B;IAqCpC;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA4BG;IACH;;;;;;;;;;;;OAYG;YACW,cAAc;IAY5B;;;;;;;;;;;;;OAaG;YACW,yBAAyB;YA2BzB,cAAc;IA8F5B,qFAAqF;YACvE,aAAa;CAO5B"}
1	+ {"version":3,"file":"file-text-extraction.backend.service.d.ts","sourceRoot":"","sources":["../../../../src/files/services/file-text-extraction.backend.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiFG;AAMH,OAAO,EAA0C,KAAK,IAAI,EAAE,MAAM,uBAAuB,CAAC;AAQ1F,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8DAA8D,CAAC;AAClG,OAAO,EAAE,0BAA0B,EAAE,MAAM,kEAAkE,CAAC;AAC9G,OAAO,EAAE,gBAAgB,EAAE,MAAM,qEAAqE,CAAC;AACvG,OAAO,EAAE,+BAA+B,EAAE,MAAM,sEAAsE,CAAC;AACvH,OAAO,EAAE,mBAAmB,EAAE,MAAM,yDAAyD,CAAC;AAC9F,OAAO,EACL,gCAAgC,EAGjC,MAAM,oFAAoF,CAAC;AAG5F;;;;;;;;GAQG;AACH,MAAM,WAAW,yBAAyB;IACxC;;;;;;;;;;;OAWG;IACH,uBAAuB,CAAC,EAAE,OAAO,CAAC;CACnC;AAED,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE;QACT,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;KACxB,CAAC;CACH;AAkED,qBACa,gCAAgC;IAKzC,OAAO,CAAC,QAAQ,CAAC,MAAM;IAEvB,OAAO,CAAC,QAAQ,CAAC,YAAY;IAE7B,OAAO,CAAC,QAAQ,CAAC,iBAAiB;IAGlC,OAAO,CAAC,QAAQ,CAAC,YAAY;IAS7B,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC;IApBtC,SAAS,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;gBAI9D,MAAM,EAAE,aAAa,EAErB,YAAY,EAAE,0BAA0B,EAExC,iBAAiB,EAAE,+BAA+B,EAGlD,YAAY,EAAE,mBAAmB,EASjC,kBAAkB,CAAC,EAAE,gCAAgC;IAMxE;;OAEG;IACG,WAAW,CACf,IAAI,EAAE,IAAI,EACV,gBAAgB,EAAE,gBAAgB,CAAC,GAAG,CAAC,EACvC,OAAO,CAAC,EAAE,yBAAyB,GAClC,OAAO,CAAC,wBAAwB,CAAC;IA0FpC;;OAEG;IACH,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;IAsBhD;;;;;;OAMG;IACH,OAAO,CAAC,wBAAwB;YAalB,eAAe;IAmB7B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAoDG;YACW,mBAAmB;IA4IjC;;;;;;;;;OASG;IACH,OAAO,CAAC,4BAA4B;IAqCpC;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA4BG;IACH;;;;;;;;;;;;OAYG;YACW,cAAc;IAY5B;;;;;;;;;;;;;OAaG;YACW,yBAAyB;YA2BzB,cAAc;IA8F5B,qFAAqF;YACvE,aAAa;CAO5B"}