happy2 0.0.5 → 0.0.9

package/packages/happy2-server/dist/modules/drizzle.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"drizzle.test.js","sourceRoot":"","sources":["../../sources/modules/drizzle.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC7D,OAAO,EACH,cAAc,EACd,eAAe,EACf,eAAe,GAGlB,MAAM,cAAc,CAAC;AAEtB,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE;IACrC,MAAM,OAAO,GAAsC,EAAE,CAAC;IAEtD,SAAS,CAAC,GAAG,EAAE;QACX,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;YAAE,MAAM,CAAC,KAAK,EAAE,CAAC;IAC3D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wEAAwE,EAAE,KAAK,IAAI,EAAE;QACpF,MAAM,MAAM,GAAG,YAAY,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC,CAAC;QACjD,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACrB,MAAM,QAAQ,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;QACxC,MAAM,QAAQ,GAAG,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;QACnD,IAAI,MAA+C,CAAC;QAEpD,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;YAC3D,MAAM,GAAG,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;YACxC,OAAO,eAAe,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;gBAC1C,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBAC1B,OAAO,WAAW,CAAC;YACvB,CAAC,CAAC,CAAC;QACP,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACjC,MAAM,CAAC,QAAQ,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QAC1C,MAAM,CAAC,MAAM,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0EAA0E,EAAE,KAAK,IAAI,EAAE;QACtF,MAAM,WAAW,GAAG,EAAwB,CAAC;QAC7C,MAAM,QAAQ,GAAG;YACb,WAAW,EAAE,EAAE;iBACV,EAAE,EAA+E;iBACjF,qBAAqB,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,CAAC;iBAClF,kBAAkB,CAAC,KAAK,EAAE,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;SACzC,CAAC;QAChC,MAAM,SAAS,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,WAAW,CAAC,CAAC;QAEjD,MAAM,MAAM,CAAC,eAAe,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC9E,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QACtD,MAAM,CAAC,SAAS,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kCAAkC,EAAE,KAAK,IAAI,EAAE;QAC9C,MAAM,OAAO,GAAG,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;QAChD,MAAM,SAAS,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE;YAC/B,MAAM,OAAO,CAAC;QAClB,CAAC,CAAC,CAAC;QAEH,MAAM,MAAM,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC/D,MAAM,CAAC,SAAS,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC"}

package/packages/happy2-server/dist/modules/emoji/customEmojiCreate.d.ts

@@ -0,0 +1,20 @@
+import { type FileSummary, type MutationHint } from "../chat/types.js";
+import { type DrizzleExecutor } from "../drizzle.js";
+/**
+ * Creates a uniquely named customEmojis entry and initial customEmojiRevisions record from an active user's accessible image file.
+ * Committing the definition, revision, and sync sequence together prevents clients from resolving an emoji before its source revision exists.
+ */
+export declare function customEmojiCreate(executor: DrizzleExecutor, input: {
+    actorUserId: string;
+    name: string;
+    fileId: string;
+}): Promise<{
+    emoji: {
+        id: string;
+        name: string;
+        file: FileSummary;
+        createdByUserId: string;
+    };
+    hint: MutationHint;
+}>;
+//# sourceMappingURL=customEmojiCreate.d.ts.map

package/packages/happy2-server/dist/modules/emoji/customEmojiCreate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"customEmojiCreate.d.ts","sourceRoot":"","sources":["../../../sources/modules/emoji/customEmojiCreate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAsB,KAAK,WAAW,EAAE,KAAK,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAC3F,OAAO,EAAE,KAAK,eAAe,EAAmB,MAAM,eAAe,CAAC;AAiBtE;;;GAGG;AACH,wBAAsB,iBAAiB,CACnC,QAAQ,EAAE,eAAe,EACzB,KAAK,EAAE;IACH,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;CAClB,GACF,OAAO,CAAC;IACP,KAAK,EAAE;QACH,EAAE,EAAE,MAAM,CAAC;QACX,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,WAAW,CAAC;QAClB,eAAe,EAAE,MAAM,CAAC;KAC3B,CAAC;IACF,IAAI,EAAE,YAAY,CAAC;CACtB,CAAC,CAyDD"}

package/packages/happy2-server/dist/modules/emoji/customEmojiCreate.js

@@ -0,0 +1,69 @@
+import { CollaborationError } from "../chat/types.js";
+import { withTransaction } from "../drizzle.js";
+import { and, eq, isNull, ne, or } from "drizzle-orm";
+import { areaHint } from "../chat/areaHint.js";
+import { asFile } from "../chat/asFile.js";
+import { createId } from "@paralleldrive/cuid2";
+import { customEmojiRevisions, customEmojis, files } from "../schema.js";
+import { fileSelection } from "../chat/fileSelection.js";
+import { isUniqueConstraint } from "../chat/isUniqueConstraint.js";
+import { text } from "../chat/text.js";
+import { syncEventInsert } from "../sync/syncEventInsert.js";
+import { syncSequenceNext } from "../sync/syncSequenceNext.js";
+import { userRequireActive } from "../chat/userRequireActive.js";
+/**
+ * Creates a uniquely named customEmojis entry and initial customEmojiRevisions record from an active user's accessible image file.
+ * Committing the definition, revision, and sync sequence together prevents clients from resolving an emoji before its source revision exists.
+ */
+export async function customEmojiCreate(executor, input) {
+    return withTransaction(executor, async (tx) => {
+        await userRequireActive(tx, input.actorUserId);
+        const [file] = await tx
+            .select(fileSelection)
+            .from(files)
+            .where(and(eq(files.id, input.fileId), isNull(files.deletedAt), eq(files.uploadStatus, "complete"), ne(files.scanStatus, "infected"), or(eq(files.uploadedByUserId, input.actorUserId), eq(files.isPublic, 1))))
+            .limit(1);
+        if (!file || !["photo", "gif"].includes(text(file.kind)))
+            throw new CollaborationError("not_found", "Emoji image file was not found");
+        const id = createId();
+        const sequence = await syncSequenceNext(tx);
+        try {
+            await tx.insert(customEmojis).values({
+                id,
+                name: input.name,
+                fileId: input.fileId,
+                createdByUserId: input.actorUserId,
+                syncSequence: sequence,
+            });
+            await tx.insert(customEmojiRevisions).values({
+                id: createId(),
+                customEmojiId: id,
+                name: input.name,
+                fileId: input.fileId,
+                changedByUserId: input.actorUserId,
+                changeKind: "created",
+            });
+        }
+        catch (error) {
+            if (isUniqueConstraint(error))
+                throw new CollaborationError("conflict", "Emoji name is already in use");
+            throw error;
+        }
+        await syncEventInsert(tx, {
+            sequence,
+            kind: "emoji.created",
+            entityId: id,
+            actorUserId: input.actorUserId,
+        });
+        return {
+            emoji: {
+                id,
+                name: input.name,
+                file: asFile(file),
+                createdByUserId: input.actorUserId,
+            },
+            hint: areaHint(sequence, "emoji"),
+        };
+    });
+}
+//# sourceMappingURL=customEmojiCreate.js.map

package/packages/happy2-server/dist/modules/emoji/customEmojiCreate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"customEmojiCreate.js","sourceRoot":"","sources":["../../../sources/modules/emoji/customEmojiCreate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAuC,MAAM,kBAAkB,CAAC;AAC3F,OAAO,EAAwB,eAAe,EAAE,MAAM,eAAe,CAAC;AAEtE,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAC/C,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAC3C,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EAAE,oBAAoB,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,cAAc,CAAC;AAEzE,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAEzD,OAAO,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AAEnE,OAAO,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAC;AACvC,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAC/D,OAAO,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AAEjE;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACnC,QAAyB,EACzB,KAIC;IAUD,OAAO,eAAe,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;QAC1C,MAAM,iBAAiB,CAAC,EAAE,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;QAC/C,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,EAAE;aAClB,MAAM,CAAC,aAAa,CAAC;aACrB,IAAI,CAAC,KAAK,CAAC;aACX,KAAK,CACF,GAAG,CACC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,MAAM,CAAC,EAC1B,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,EACvB,EAAE,CAAC,KAAK,CAAC,YAAY,EAAE,UAAU,CAAC,EAClC,EAAE,CAAC,KAAK,CAAC,UAAU,EAAE,UAAU,CAAC,EAChC,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,gBAAgB,EAAE,KAAK,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAC3E,CACJ;aACA,KAAK,CAAC,CAAC,CAAC,CAAC;QACd,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACpD,MAAM,IAAI,kBAAkB,CAAC,WAAW,EAAE,gCAAgC,CAAC,CAAC;QAChF,MAAM,EAAE,GAAG,QAAQ,EAAE,CAAC;QACtB,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,EAAE,CAAC,CAAC;QAC5C,IAAI,CAAC;YACD,MAAM,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC;gBACjC,EAAE;gBACF,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,eAAe,EAAE,KAAK,CAAC,WAAW;gBAClC,YAAY,EAAE,QAAQ;aACzB,CAAC,CAAC;YACH,MAAM,EAAE,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC,MAAM,CAAC;gBACzC,EAAE,EAAE,QAAQ,EAAE;gBACd,aAAa,EAAE,EAAE;gBACjB,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,eAAe,EAAE,KAAK,CAAC,WAAW;gBAClC,UAAU,EAAE,SAAS;aACxB,CAAC,CAAC;QACP,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,IAAI,kBAAkB,CAAC,KAAK,CAAC;gBACzB,MAAM,IAAI,kBAAkB,CAAC,UAAU,EAAE,8BAA8B,CAAC,CAAC;YAC7E,MAAM,KAAK,CAAC;QAChB,CAAC;QACD,MAAM,eAAe,CAAC,EAAE,EAAE;YACtB,QAAQ;YACR,IAAI,EAAE,eAAe;YACrB,QAAQ,EAAE,EAAE;YACZ,WAAW,EAAE,KAAK,CAAC,WAAW;SACjC,CAAC,CAAC;QACH,OAAO;YACH,KAAK,EAAE;gBACH,EAAE;gBACF,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC;gBAClB,eAAe,EAAE,KAAK,CAAC,WAAW;aACrC;YACD,IAAI,EAAE,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;SACpC,CAAC;IACN,CAAC,CAAC,CAAC;AACP,CAAC"}

package/packages/happy2-server/dist/modules/emoji/customEmojiDelete.d.ts

@@ -0,0 +1,10 @@
+import { type MutationHint } from "../chat/types.js";
+import { type DrizzleExecutor } from "../drizzle.js";
+/**
+ * Soft-deletes customEmojis, removes dependent reactions, and appends the deletion to customEmojiRevisions.
+ * One synchronized transition ensures message projections cannot retain a reaction whose custom definition has disappeared.
+ */
+export declare function customEmojiDelete(executor: DrizzleExecutor, actorUserId: string, emojiId: string): Promise<{
+    hint: MutationHint;
+}>;
+//# sourceMappingURL=customEmojiDelete.d.ts.map

package/packages/happy2-server/dist/modules/emoji/customEmojiDelete.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"customEmojiDelete.d.ts","sourceRoot":"","sources":["../../../sources/modules/emoji/customEmojiDelete.ts"],"names":[],"mappings":"AAAA,OAAO,EAAsB,KAAK,YAAY,EAAE,MAAM,kBAAkB,CAAC;AACzE,OAAO,EAAE,KAAK,eAAe,EAAmB,MAAM,eAAe,CAAC;AAUtE;;;GAGG;AACH,wBAAsB,iBAAiB,CACnC,QAAQ,EAAE,eAAe,EACzB,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,MAAM,GAChB,OAAO,CAAC;IACP,IAAI,EAAE,YAAY,CAAC;CACtB,CAAC,CAyED"}

package/packages/happy2-server/dist/modules/emoji/customEmojiDelete.js

@@ -0,0 +1,78 @@
+import { CollaborationError } from "../chat/types.js";
+import { withTransaction } from "../drizzle.js";
+import { and, eq, isNull, sql } from "drizzle-orm";
+import { createId } from "@paralleldrive/cuid2";
+import { customEmojiRevisions, customEmojis, messages, reactions, users } from "../schema.js";
+import { chatAdvanceWithSequence } from "../chat/chatAdvanceWithSequence.js";
+import { syncEventInsert } from "../sync/syncEventInsert.js";
+import { syncSequenceNext } from "../sync/syncSequenceNext.js";
+/**
+ * Soft-deletes customEmojis, removes dependent reactions, and appends the deletion to customEmojiRevisions.
+ * One synchronized transition ensures message projections cannot retain a reaction whose custom definition has disappeared.
+ */
+export async function customEmojiDelete(executor, actorUserId, emojiId) {
+    return withTransaction(executor, async (tx) => {
+        const [emoji] = await tx
+            .select({
+            createdByUserId: customEmojis.createdByUserId,
+            name: customEmojis.name,
+            fileId: customEmojis.fileId,
+            actorRole: users.role,
+        })
+            .from(customEmojis)
+            .innerJoin(users, eq(users.id, actorUserId))
+            .where(and(eq(customEmojis.id, emojiId), isNull(customEmojis.deletedAt)))
+            .limit(1);
+        if (!emoji)
+            throw new CollaborationError("not_found", "Emoji was not found");
+        if (emoji.createdByUserId !== actorUserId && emoji.actorRole !== "admin")
+            throw new CollaborationError("forbidden", "Cannot delete this emoji");
+        const sequence = await syncSequenceNext(tx);
+        const affected = await tx
+            .selectDistinct({
+            chatId: messages.chatId,
+        })
+            .from(reactions)
+            .innerJoin(messages, eq(messages.id, reactions.messageId))
+            .where(and(eq(reactions.customEmojiId, emojiId), isNull(messages.deletedAt)));
+        const chatHints = [];
+        for (const row of affected) {
+            const chatId = row.chatId;
+            const mutation = await chatAdvanceWithSequence(tx, sequence, actorUserId, chatId, "reaction.emojiDeleted", emojiId);
+            chatHints.push({
+                chatId,
+                pts: String(mutation.pts),
+            });
+        }
+        await tx.delete(reactions).where(eq(reactions.customEmojiId, emojiId));
+        await tx
+            .update(customEmojis)
+            .set({
+            deletedAt: sql `CURRENT_TIMESTAMP`,
+            syncSequence: sequence,
+        })
+            .where(eq(customEmojis.id, emojiId));
+        await tx.insert(customEmojiRevisions).values({
+            id: createId(),
+            customEmojiId: emojiId,
+            name: emoji.name,
+            fileId: emoji.fileId,
+            changedByUserId: actorUserId,
+            changeKind: "deleted",
+        });
+        await syncEventInsert(tx, {
+            sequence,
+            kind: "emoji.deleted",
+            entityId: emojiId,
+            actorUserId,
+        });
+        return {
+            hint: {
+                sequence: String(sequence),
+                chats: chatHints,
+                areas: ["emoji"],
+            },
+        };
+    });
+}
+//# sourceMappingURL=customEmojiDelete.js.map

package/packages/happy2-server/dist/modules/emoji/customEmojiDelete.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"customEmojiDelete.js","sourceRoot":"","sources":["../../../sources/modules/emoji/customEmojiDelete.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAqB,MAAM,kBAAkB,CAAC;AACzE,OAAO,EAAwB,eAAe,EAAE,MAAM,eAAe,CAAC;AAEtE,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EAAE,oBAAoB,EAAE,YAAY,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,cAAc,CAAC;AAE9F,OAAO,EAAE,uBAAuB,EAAE,MAAM,oCAAoC,CAAC;AAC7E,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAE/D;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACnC,QAAyB,EACzB,WAAmB,EACnB,OAAe;IAIf,OAAO,eAAe,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;QAC1C,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,EAAE;aACnB,MAAM,CAAC;YACJ,eAAe,EAAE,YAAY,CAAC,eAAe;YAC7C,IAAI,EAAE,YAAY,CAAC,IAAI;YACvB,MAAM,EAAE,YAAY,CAAC,MAAM;YAC3B,SAAS,EAAE,KAAK,CAAC,IAAI;SACxB,CAAC;aACD,IAAI,CAAC,YAAY,CAAC;aAClB,SAAS,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC;aAC3C,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,YAAY,CAAC,EAAE,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC;aACxE,KAAK,CAAC,CAAC,CAAC,CAAC;QACd,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,kBAAkB,CAAC,WAAW,EAAE,qBAAqB,CAAC,CAAC;QAC7E,IAAI,KAAK,CAAC,eAAe,KAAK,WAAW,IAAI,KAAK,CAAC,SAAS,KAAK,OAAO;YACpE,MAAM,IAAI,kBAAkB,CAAC,WAAW,EAAE,0BAA0B,CAAC,CAAC;QAC1E,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,EAAE,CAAC,CAAC;QAC5C,MAAM,QAAQ,GAAG,MAAM,EAAE;aACpB,cAAc,CAAC;YACZ,MAAM,EAAE,QAAQ,CAAC,MAAM;SAC1B,CAAC;aACD,IAAI,CAAC,SAAS,CAAC;aACf,SAAS,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,CAAC,SAAS,CAAC,CAAC;aACzD,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,SAAS,CAAC,aAAa,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QAClF,MAAM,SAAS,GAGV,EAAE,CAAC;QACR,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;YACzB,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;YAC1B,MAAM,QAAQ,GAAG,MAAM,uBAAuB,CAC1C,EAAE,EACF,QAAQ,EACR,WAAW,EACX,MAAM,EACN,uBAAuB,EACvB,OAAO,CACV,CAAC;YACF,SAAS,CAAC,IAAI,CAAC;gBACX,MAAM;gBACN,GAAG,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;aAC5B,CAAC,CAAC;QACP,CAAC;QACD,MAAM,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,SAAS,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC,CAAC;QACvE,MAAM,EAAE;aACH,MAAM,CAAC,YAAY,CAAC;aACpB,GAAG,CAAC;YACD,SAAS,EAAE,GAAG,CAAA,mBAAmB;YACjC,YAAY,EAAE,QAAQ;SACzB,CAAC;aACD,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC;QACzC,MAAM,EAAE,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC,MAAM,CAAC;YACzC,EAAE,EAAE,QAAQ,EAAE;YACd,aAAa,EAAE,OAAO;YACtB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,eAAe,EAAE,WAAW;YAC5B,UAAU,EAAE,SAAS;SACxB,CAAC,CAAC;QACH,MAAM,eAAe,CAAC,EAAE,EAAE;YACtB,QAAQ;YACR,IAAI,EAAE,eAAe;YACrB,QAAQ,EAAE,OAAO;YACjB,WAAW;SACd,CAAC,CAAC;QACH,OAAO;YACH,IAAI,EAAE;gBACF,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC;gBAC1B,KAAK,EAAE,SAAS;gBAChB,KAAK,EAAE,CAAC,OAAO,CAAC;aACnB;SACJ,CAAC;IACN,CAAC,CAAC,CAAC;AACP,CAAC"}

package/packages/happy2-server/dist/modules/emoji/customEmojiList.d.ts

@@ -0,0 +1,13 @@
+import { type DrizzleExecutor } from "../drizzle.js";
+import { type FileSummary } from "../chat/types.js";
+/**
+ * Lists custom emoji definitions by name only when both the definition and its complete, non-infected file remain available.
+ * Filtering unusable assets at the projection boundary prevents clients from rendering reactions whose underlying image cannot be served.
+ */
+export declare function customEmojiList(executor: DrizzleExecutor): Promise<Array<{
+    id: string;
+    name: string;
+    file: FileSummary;
+    createdByUserId: string;
+}>>;
+//# sourceMappingURL=customEmojiList.d.ts.map

package/packages/happy2-server/dist/modules/emoji/customEmojiList.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"customEmojiList.d.ts","sourceRoot":"","sources":["../../../sources/modules/emoji/customEmojiList.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,eAAe,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,EAAE,KAAK,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAQpD;;;GAGG;AACH,wBAAsB,eAAe,CAAC,QAAQ,EAAE,eAAe,GAAG,OAAO,CACrE,KAAK,CAAC;IACF,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,WAAW,CAAC;IAClB,eAAe,EAAE,MAAM,CAAC;CAC3B,CAAC,CACL,CAyBA"}

package/packages/happy2-server/dist/modules/emoji/customEmojiList.js

@@ -0,0 +1,31 @@
+import {} from "../drizzle.js";
+import {} from "../chat/types.js";
+import { and, eq, isNull, ne } from "drizzle-orm";
+import { asFile } from "../chat/asFile.js";
+import { customEmojis, files } from "../schema.js";
+import { fileSelection } from "../chat/fileSelection.js";
+import { text } from "../chat/text.js";
+/**
+ * Lists custom emoji definitions by name only when both the definition and its complete, non-infected file remain available.
+ * Filtering unusable assets at the projection boundary prevents clients from rendering reactions whose underlying image cannot be served.
+ */
+export async function customEmojiList(executor) {
+    const result = await executor
+        .select({
+        emoji_id: customEmojis.id,
+        name: customEmojis.name,
+        created_by_user_id: customEmojis.createdByUserId,
+        ...fileSelection,
+    })
+        .from(customEmojis)
+        .innerJoin(files, eq(files.id, customEmojis.fileId))
+        .where(and(isNull(customEmojis.deletedAt), isNull(files.deletedAt), eq(files.uploadStatus, "complete"), ne(files.scanStatus, "infected")))
+        .orderBy(customEmojis.name);
+    return result.map((row) => ({
+        id: text(row.emoji_id),
+        name: text(row.name),
+        file: asFile(row),
+        createdByUserId: text(row.created_by_user_id),
+    }));
+}
+//# sourceMappingURL=customEmojiList.js.map

package/packages/happy2-server/dist/modules/emoji/customEmojiList.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"customEmojiList.js","sourceRoot":"","sources":["../../../sources/modules/emoji/customEmojiList.ts"],"names":[],"mappings":"AAAA,OAAO,EAAwB,MAAM,eAAe,CAAC;AACrD,OAAO,EAAoB,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAC3C,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,cAAc,CAAC;AAEnD,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAEzD,OAAO,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAC;AACvC;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,QAAyB;IAQ3D,MAAM,MAAM,GAAG,MAAM,QAAQ;SACxB,MAAM,CAAC;QACJ,QAAQ,EAAE,YAAY,CAAC,EAAE;QACzB,IAAI,EAAE,YAAY,CAAC,IAAI;QACvB,kBAAkB,EAAE,YAAY,CAAC,eAAe;QAChD,GAAG,aAAa;KACnB,CAAC;SACD,IAAI,CAAC,YAAY,CAAC;SAClB,SAAS,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC;SACnD,KAAK,CACF,GAAG,CACC,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,EAC9B,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,EACvB,EAAE,CAAC,KAAK,CAAC,YAAY,EAAE,UAAU,CAAC,EAClC,EAAE,CAAC,KAAK,CAAC,UAAU,EAAE,UAAU,CAAC,CACnC,CACJ;SACA,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IAChC,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACxB,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC;QACtB,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;QACpB,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC;QACjB,eAAe,EAAE,IAAI,CAAC,GAAG,CAAC,kBAAkB,CAAC;KAChD,CAAC,CAAC,CAAC;AACR,CAAC"}

package/packages/happy2-server/dist/modules/file/fileCanAccess.d.ts

@@ -0,0 +1,7 @@
+import { type DrizzleExecutor } from "../drizzle.js";
+/**
+ * Reports access only for complete, non-infected files that are public, user-owned, visibly referenced, or covered by an unexpired grant.
+ * Centralizing that predicate prevents download and attachment callers from diverging on indirect chat, profile, emoji, or server-file visibility.
+ */
+export declare function fileCanAccess(executor: DrizzleExecutor, userId: string, fileId: string): Promise<boolean>;
+//# sourceMappingURL=fileCanAccess.d.ts.map

package/packages/happy2-server/dist/modules/file/fileCanAccess.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fileCanAccess.d.ts","sourceRoot":"","sources":["../../../sources/modules/file/fileCanAccess.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,eAAe,EAAE,MAAM,eAAe,CAAC;AAErD;;;GAGG;AACH,wBAAsB,aAAa,CAC/B,QAAQ,EAAE,eAAe,EACzB,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,GACf,OAAO,CAAC,OAAO,CAAC,CAElB"}

package/packages/happy2-server/dist/modules/file/fileCanAccess.js

@@ -0,0 +1,10 @@
+import {} from "../drizzle.js";
+import { fileCanAccessWith } from "../chat/fileCanAccessWith.js";
+/**
+ * Reports access only for complete, non-infected files that are public, user-owned, visibly referenced, or covered by an unexpired grant.
+ * Centralizing that predicate prevents download and attachment callers from diverging on indirect chat, profile, emoji, or server-file visibility.
+ */
+export async function fileCanAccess(executor, userId, fileId) {
+    return fileCanAccessWith(executor, userId, fileId);
+}
+//# sourceMappingURL=fileCanAccess.js.map

package/packages/happy2-server/dist/modules/file/fileCanAccess.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fileCanAccess.js","sourceRoot":"","sources":["../../../sources/modules/file/fileCanAccess.ts"],"names":[],"mappings":"AAAA,OAAO,EAAwB,MAAM,eAAe,CAAC;AACrD,OAAO,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AACjE;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAC/B,QAAyB,EACzB,MAAc,EACd,MAAc;IAEd,OAAO,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;AACvD,CAAC"}

package/packages/happy2-server/dist/modules/file/fileCreate.d.ts

@@ -0,0 +1,11 @@
+import { type DrizzleExecutor } from "../drizzle.js";
+import { type StoredFile } from "./types.js";
+/**
+ * Registers uploaded object metadata in files and records the initial fileScanEvents state that governs whether it may be served.
+ * Creating metadata and scan history together prevents an unscanned object from appearing as a normal accessible file.
+ */
+export declare function fileCreate(executor: DrizzleExecutor, file: StoredFile, scan?: {
+    status: "clean" | "failed" | "skipped";
+    result?: unknown;
+}): Promise<void>;
+//# sourceMappingURL=fileCreate.d.ts.map

package/packages/happy2-server/dist/modules/file/fileCreate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fileCreate.d.ts","sourceRoot":"","sources":["../../../sources/modules/file/fileCreate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,eAAe,EAAmB,MAAM,eAAe,CAAC;AACtE,OAAO,EAAE,KAAK,UAAU,EAAE,MAAM,YAAY,CAAC;AAM7C;;;GAGG;AACH,wBAAsB,UAAU,CAC5B,QAAQ,EAAE,eAAe,EACzB,IAAI,EAAE,UAAU,EAChB,IAAI,GAAE;IACF,MAAM,EAAE,OAAO,GAAG,QAAQ,GAAG,SAAS,CAAC;IACvC,MAAM,CAAC,EAAE,OAAO,CAAC;CAGpB,GACF,OAAO,CAAC,IAAI,CAAC,CA4Bf"}

package/packages/happy2-server/dist/modules/file/fileCreate.js

@@ -0,0 +1,41 @@
+import { withTransaction } from "../drizzle.js";
+import {} from "./types.js";
+import { createId } from "@paralleldrive/cuid2";
+import { files, fileScanEvents } from "../schema.js";
+import { sql } from "drizzle-orm";
+/**
+ * Registers uploaded object metadata in files and records the initial fileScanEvents state that governs whether it may be served.
+ * Creating metadata and scan history together prevents an unscanned object from appearing as a normal accessible file.
+ */
+export async function fileCreate(executor, file, scan = {
+    status: "skipped",
+}) {
+    await withTransaction(executor, async (tx) => {
+        await tx.insert(files).values({
+            id: file.id,
+            userId: file.userId,
+            uploadedByUserId: file.uploadedByUserId,
+            isPublic: file.isPublic ? 1 : 0,
+            storageName: file.storageName,
+            contentType: file.contentType,
+            size: file.size,
+            width: file.width,
+            height: file.height,
+            thumbhash: file.thumbhash,
+            kind: file.kind,
+            originalName: file.originalName ?? null,
+            durationMs: file.durationMs ?? null,
+            scanStatus: scan.status,
+            scannedAt: sql `CURRENT_TIMESTAMP`,
+            scanResultJson: scan.result === undefined ? null : JSON.stringify(scan.result),
+        });
+        await tx.insert(fileScanEvents).values({
+            id: createId(),
+            fileId: file.id,
+            scanner: "upload_policy",
+            status: scan.status,
+            resultJson: scan.result === undefined ? null : JSON.stringify(scan.result),
+        });
+    });
+}
+//# sourceMappingURL=fileCreate.js.map

package/packages/happy2-server/dist/modules/file/fileCreate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fileCreate.js","sourceRoot":"","sources":["../../../sources/modules/file/fileCreate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAwB,eAAe,EAAE,MAAM,eAAe,CAAC;AACtE,OAAO,EAAmB,MAAM,YAAY,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAErD,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAElC;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC5B,QAAyB,EACzB,IAAgB,EAChB,IAAI,GAGA;IACA,MAAM,EAAE,SAAS;CACpB;IAED,MAAM,eAAe,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;QACzC,MAAM,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC;YAC1B,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;YACvC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC/B,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,YAAY,EAAE,IAAI,CAAC,YAAY,IAAI,IAAI;YACvC,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,IAAI;YACnC,UAAU,EAAE,IAAI,CAAC,MAAM;YACvB,SAAS,EAAE,GAAG,CAAA,mBAAmB;YACjC,cAAc,EAAE,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC;SACjF,CAAC,CAAC;QACH,MAAM,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,MAAM,CAAC;YACnC,EAAE,EAAE,QAAQ,EAAE;YACd,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,OAAO,EAAE,eAAe;YACxB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,UAAU,EAAE,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC;SAC7E,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;AACP,CAAC"}

package/packages/happy2-server/dist/modules/file/fileDeleteOwnedUnreferenced.d.ts

@@ -0,0 +1,7 @@
+import { type DrizzleExecutor } from "../drizzle.js";
+/**
+ * Soft-deletes a files row only when the actor owns it and no message, profile, emoji, export, or other durable reference still uses it.
+ * Performing the reference checks beside the guarded update prevents cleanup from invalidating content that became linked concurrently.
+ */
+export declare function fileDeleteOwnedUnreferenced(executor: DrizzleExecutor, id: string, userId: string, reason?: string): Promise<"deleted" | "not_found" | "in_use">;
+//# sourceMappingURL=fileDeleteOwnedUnreferenced.d.ts.map

package/packages/happy2-server/dist/modules/file/fileDeleteOwnedUnreferenced.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fileDeleteOwnedUnreferenced.d.ts","sourceRoot":"","sources":["../../../sources/modules/file/fileDeleteOwnedUnreferenced.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,eAAe,EAAmB,MAAM,eAAe,CAAC;AAMtE;;;GAGG;AACH,wBAAsB,2BAA2B,CAC7C,QAAQ,EAAE,eAAe,EACzB,EAAE,EAAE,MAAM,EACV,MAAM,EAAE,MAAM,EACd,MAAM,CAAC,EAAE,MAAM,GAChB,OAAO,CAAC,SAAS,GAAG,WAAW,GAAG,QAAQ,CAAC,CAsB7C"}

package/packages/happy2-server/dist/modules/file/fileDeleteOwnedUnreferenced.js

@@ -0,0 +1,32 @@
+import { withTransaction } from "../drizzle.js";
+import { and, eq, isNull, sql } from "drizzle-orm";
+import { files } from "../schema.js";
+import { hasFileReference } from "./impl/hasFileReference.js";
+/**
+ * Soft-deletes a files row only when the actor owns it and no message, profile, emoji, export, or other durable reference still uses it.
+ * Performing the reference checks beside the guarded update prevents cleanup from invalidating content that became linked concurrently.
+ */
+export async function fileDeleteOwnedUnreferenced(executor, id, userId, reason) {
+    return withTransaction(executor, async (tx) => {
+        const [file] = await tx
+            .select({
+            id: files.id,
+        })
+            .from(files)
+            .where(and(eq(files.id, id), eq(files.uploadedByUserId, userId), isNull(files.deletedAt)));
+        if (!file)
+            return "not_found";
+        if (await hasFileReference(tx, id))
+            return "in_use";
+        await tx
+            .update(files)
+            .set({
+            deletedAt: sql `CURRENT_TIMESTAMP`,
+            deletedByUserId: userId,
+            deleteReason: reason ?? null,
+        })
+            .where(and(eq(files.id, id), isNull(files.deletedAt)));
+        return "deleted";
+    });
+}
+//# sourceMappingURL=fileDeleteOwnedUnreferenced.js.map

package/packages/happy2-server/dist/modules/file/fileDeleteOwnedUnreferenced.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fileDeleteOwnedUnreferenced.js","sourceRoot":"","sources":["../../../sources/modules/file/fileDeleteOwnedUnreferenced.ts"],"names":[],"mappings":"AAAA,OAAO,EAAwB,eAAe,EAAE,MAAM,eAAe,CAAC;AACtE,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAEnD,OAAO,EAAE,KAAK,EAAE,MAAM,cAAc,CAAC;AACrC,OAAO,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAE9D;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC7C,QAAyB,EACzB,EAAU,EACV,MAAc,EACd,MAAe;IAEf,OAAO,eAAe,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;QAC1C,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,EAAE;aAClB,MAAM,CAAC;YACJ,EAAE,EAAE,KAAK,CAAC,EAAE;SACf,CAAC;aACD,IAAI,CAAC,KAAK,CAAC;aACX,KAAK,CACF,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,gBAAgB,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CACrF,CAAC;QACN,IAAI,CAAC,IAAI;YAAE,OAAO,WAAW,CAAC;QAC9B,IAAI,MAAM,gBAAgB,CAAC,EAAE,EAAE,EAAE,CAAC;YAAE,OAAO,QAAQ,CAAC;QACpD,MAAM,EAAE;aACH,MAAM,CAAC,KAAK,CAAC;aACb,GAAG,CAAC;YACD,SAAS,EAAE,GAAG,CAAA,mBAAmB;YACjC,eAAe,EAAE,MAAM;YACvB,YAAY,EAAE,MAAM,IAAI,IAAI;SAC/B,CAAC;aACD,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QAC3D,OAAO,SAAS,CAAC;IACrB,CAAC,CAAC,CAAC;AACP,CAAC"}

package/packages/happy2-server/dist/modules/file/fileFind.d.ts

@@ -0,0 +1,8 @@
+import { type DrizzleExecutor } from "../drizzle.js";
+import { type StoredFile } from "./types.js";
+/**
+ * Resolves stored-file metadata by identifier only for complete, non-deleted, non-infected uploads.
+ * Treating quarantined and incomplete rows as absent keeps storage consumers from opening files that are not safe to serve.
+ */
+export declare function fileFind(executor: DrizzleExecutor, id: string): Promise<StoredFile | undefined>;
+//# sourceMappingURL=fileFind.d.ts.map

package/packages/happy2-server/dist/modules/file/fileFind.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fileFind.d.ts","sourceRoot":"","sources":["../../../sources/modules/file/fileFind.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,eAAe,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,EAAE,KAAK,UAAU,EAAE,MAAM,YAAY,CAAC;AAM7C;;;GAGG;AACH,wBAAsB,QAAQ,CAC1B,QAAQ,EAAE,eAAe,EACzB,EAAE,EAAE,MAAM,GACX,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC,CAajC"}

package/packages/happy2-server/dist/modules/file/fileFind.js

@@ -0,0 +1,17 @@
+import {} from "../drizzle.js";
+import {} from "./types.js";
+import { and, eq, isNull, ne } from "drizzle-orm";
+import { asFile } from "./impl/asFile.js";
+import { files } from "../schema.js";
+/**
+ * Resolves stored-file metadata by identifier only for complete, non-deleted, non-infected uploads.
+ * Treating quarantined and incomplete rows as absent keeps storage consumers from opening files that are not safe to serve.
+ */
+export async function fileFind(executor, id) {
+    const [file] = await executor
+        .select()
+        .from(files)
+        .where(and(eq(files.id, id), isNull(files.deletedAt), eq(files.uploadStatus, "complete"), ne(files.scanStatus, "infected")));
+    return file ? asFile(file) : undefined;
+}
+//# sourceMappingURL=fileFind.js.map

package/packages/happy2-server/dist/modules/file/fileFind.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fileFind.js","sourceRoot":"","sources":["../../../sources/modules/file/fileFind.ts"],"names":[],"mappings":"AAAA,OAAO,EAAwB,MAAM,eAAe,CAAC;AACrD,OAAO,EAAmB,MAAM,YAAY,CAAC;AAC7C,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAE1C,OAAO,EAAE,KAAK,EAAE,MAAM,cAAc,CAAC;AAErC;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC1B,QAAyB,EACzB,EAAU;IAEV,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,QAAQ;SACxB,MAAM,EAAE;SACR,IAAI,CAAC,KAAK,CAAC;SACX,KAAK,CACF,GAAG,CACC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,EAChB,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,EACvB,EAAE,CAAC,KAAK,CAAC,YAAY,EAAE,UAAU,CAAC,EAClC,EAAE,CAAC,KAAK,CAAC,UAAU,EAAE,UAAU,CAAC,CACnC,CACJ,CAAC;IACN,OAAO,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC3C,CAAC"}

package/packages/happy2-server/dist/modules/file/fileFindUploadedBy.d.ts

@@ -0,0 +1,8 @@
+import { type DrizzleExecutor } from "../drizzle.js";
+import { type StoredFile } from "./types.js";
+/**
+ * Resolves a complete, non-deleted, non-infected file only when the specified user originally uploaded it.
+ * Keeping ownership in the query gives avatar, attachment, and cleanup callers a non-leaking absent result for other users' files.
+ */
+export declare function fileFindUploadedBy(executor: DrizzleExecutor, id: string, userId: string): Promise<StoredFile | undefined>;
+//# sourceMappingURL=fileFindUploadedBy.d.ts.map

package/packages/happy2-server/dist/modules/file/fileFindUploadedBy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fileFindUploadedBy.d.ts","sourceRoot":"","sources":["../../../sources/modules/file/fileFindUploadedBy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,eAAe,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,EAAE,KAAK,UAAU,EAAE,MAAM,YAAY,CAAC;AAM7C;;;GAGG;AACH,wBAAsB,kBAAkB,CACpC,QAAQ,EAAE,eAAe,EACzB,EAAE,EAAE,MAAM,EACV,MAAM,EAAE,MAAM,GACf,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC,CAcjC"}

package/packages/happy2-server/dist/modules/file/fileFindUploadedBy.js

@@ -0,0 +1,17 @@
+import {} from "../drizzle.js";
+import {} from "./types.js";
+import { and, eq, isNull, ne } from "drizzle-orm";
+import { asFile } from "./impl/asFile.js";
+import { files } from "../schema.js";
+/**
+ * Resolves a complete, non-deleted, non-infected file only when the specified user originally uploaded it.
+ * Keeping ownership in the query gives avatar, attachment, and cleanup callers a non-leaking absent result for other users' files.
+ */
+export async function fileFindUploadedBy(executor, id, userId) {
+    const [file] = await executor
+        .select()
+        .from(files)
+        .where(and(eq(files.id, id), eq(files.uploadedByUserId, userId), isNull(files.deletedAt), eq(files.uploadStatus, "complete"), ne(files.scanStatus, "infected")));
+    return file ? asFile(file) : undefined;
+}
+//# sourceMappingURL=fileFindUploadedBy.js.map

package/packages/happy2-server/dist/modules/file/fileFindUploadedBy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fileFindUploadedBy.js","sourceRoot":"","sources":["../../../sources/modules/file/fileFindUploadedBy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAwB,MAAM,eAAe,CAAC;AACrD,OAAO,EAAmB,MAAM,YAAY,CAAC;AAC7C,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAE1C,OAAO,EAAE,KAAK,EAAE,MAAM,cAAc,CAAC;AAErC;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACpC,QAAyB,EACzB,EAAU,EACV,MAAc;IAEd,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,QAAQ;SACxB,MAAM,EAAE;SACR,IAAI,CAAC,KAAK,CAAC;SACX,KAAK,CACF,GAAG,CACC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,EAChB,EAAE,CAAC,KAAK,CAAC,gBAAgB,EAAE,MAAM,CAAC,EAClC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,EACvB,EAAE,CAAC,KAAK,CAAC,YAAY,EAAE,UAAU,CAAC,EAClC,EAAE,CAAC,KAAK,CAAC,UAAU,EAAE,UAAU,CAAC,CACnC,CACJ,CAAC;IACN,OAAO,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC3C,CAAC"}

package/packages/happy2-server/dist/modules/file/fileList.d.ts

@@ -0,0 +1,17 @@
+import { type DrizzleExecutor } from "../drizzle.js";
+import { type FileKind } from "./types.js";
+import { type FileSummary } from "../chat/types.js";
+/**
+ * Pages complete, non-infected files attached to live messages in public or joined chats, optionally filtering kind and continuing before a file cursor.
+ * Ordering by creation time and identifier makes the media browser stable while message expiry and chat membership remain part of every page query.
+ */
+export declare function fileList(executor: DrizzleExecutor, input: {
+    userId: string;
+    kind?: FileKind;
+    before?: string;
+    limit: number;
+}): Promise<{
+    files: FileSummary[];
+    nextCursor?: string;
+}>;
+//# sourceMappingURL=fileList.d.ts.map

package/packages/happy2-server/dist/modules/file/fileList.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fileList.d.ts","sourceRoot":"","sources":["../../../sources/modules/file/fileList.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,eAAe,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,EAAE,KAAK,QAAQ,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,EAAE,KAAK,WAAW,EAAE,MAAM,kBAAkB,CAAC;AASpD;;;GAGG;AACH,wBAAsB,QAAQ,CAC1B,QAAQ,EAAE,eAAe,EACzB,KAAK,EAAE;IACH,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,QAAQ,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;CACjB,GACF,OAAO,CAAC;IACP,KAAK,EAAE,WAAW,EAAE,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;CACvB,CAAC,CAmDD"}

package/packages/happy2-server/dist/modules/file/fileList.js

@@ -0,0 +1,53 @@
+import {} from "../drizzle.js";
+import {} from "./types.js";
+import {} from "../chat/types.js";
+import { and, desc, eq, isNull, lt, ne, or, sql } from "drizzle-orm";
+import { asFile } from "../chat/asFile.js";
+import { chatMembers, chats, files, messageAttachments, messages } from "../schema.js";
+import { fileSelection } from "../chat/fileSelection.js";
+import { text } from "../chat/text.js";
+/**
+ * Pages complete, non-infected files attached to live messages in public or joined chats, optionally filtering kind and continuing before a file cursor.
+ * Ordering by creation time and identifier makes the media browser stable while message expiry and chat membership remain part of every page query.
+ */
+export async function fileList(executor, input) {
+    const conditions = [
+        isNull(files.deletedAt),
+        eq(files.uploadStatus, "complete"),
+        ne(files.scanStatus, "infected"),
+        isNull(messages.deletedAt),
+        or(isNull(messages.expiresAt), sql `datetime(${messages.expiresAt}) > CURRENT_TIMESTAMP`),
+        isNull(chats.deletedAt),
+        or(eq(chats.kind, "public_channel"), sql `${chatMembers.userId} IS NOT NULL`),
+    ];
+    if (input.kind) {
+        conditions.push(eq(files.kind, input.kind));
+    }
+    if (input.before) {
+        const [cursor] = await executor
+            .select({
+            createdAt: files.createdAt,
+        })
+            .from(files)
+            .where(eq(files.id, input.before));
+        if (cursor)
+            conditions.push(or(lt(files.createdAt, cursor.createdAt), and(eq(files.createdAt, cursor.createdAt), lt(files.id, input.before))));
+    }
+    const result = await executor
+        .selectDistinct(fileSelection)
+        .from(files)
+        .innerJoin(messageAttachments, eq(messageAttachments.fileId, files.id))
+        .innerJoin(messages, eq(messages.id, messageAttachments.messageId))
+        .innerJoin(chats, eq(chats.id, messages.chatId))
+        .leftJoin(chatMembers, and(eq(chatMembers.chatId, chats.id), eq(chatMembers.userId, input.userId), isNull(chatMembers.leftAt)))
+        .where(and(...conditions))
+        .orderBy(desc(files.createdAt), desc(files.id))
+        .limit(input.limit + 1);
+    const hasMore = result.length > input.limit;
+    const rows = result.slice(0, input.limit);
+    return {
+        files: rows.map(asFile),
+        nextCursor: hasMore ? text(rows.at(-1)?.id) : undefined,
+    };
+}
+//# sourceMappingURL=fileList.js.map

package/packages/happy2-server/dist/modules/file/fileList.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fileList.js","sourceRoot":"","sources":["../../../sources/modules/file/fileList.ts"],"names":[],"mappings":"AAAA,OAAO,EAAwB,MAAM,eAAe,CAAC;AACrD,OAAO,EAAiB,MAAM,YAAY,CAAC;AAC3C,OAAO,EAAoB,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,EAAY,MAAM,aAAa,CAAC;AAE/E,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAC3C,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,KAAK,EAAE,kBAAkB,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAEvF,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAEzD,OAAO,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAC;AACvC;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC1B,QAAyB,EACzB,KAKC;IAKD,MAAM,UAAU,GAAU;QACtB,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC;QACvB,EAAE,CAAC,KAAK,CAAC,YAAY,EAAE,UAAU,CAAC;QAClC,EAAE,CAAC,KAAK,CAAC,UAAU,EAAE,UAAU,CAAC;QAChC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC;QAC1B,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,GAAG,CAAA,YAAY,QAAQ,CAAC,SAAS,uBAAuB,CAAE;QACzF,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC;QACvB,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,gBAAgB,CAAC,EAAE,GAAG,CAAA,GAAG,WAAW,CAAC,MAAM,cAAc,CAAE;KAChF,CAAC;IACF,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;QACb,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IAChD,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QACf,MAAM,CAAC,MAAM,CAAC,GAAG,MAAM,QAAQ;aAC1B,MAAM,CAAC;YACJ,SAAS,EAAE,KAAK,CAAC,SAAS;SAC7B,CAAC;aACD,IAAI,CAAC,KAAK,CAAC;aACX,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;QACvC,IAAI,MAAM;YACN,UAAU,CAAC,IAAI,CACX,EAAE,CACE,EAAE,CAAC,KAAK,CAAC,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,EACrC,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CACxE,CACL,CAAC;IACV,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,QAAQ;SACxB,cAAc,CAAC,aAAa,CAAC;SAC7B,IAAI,CAAC,KAAK,CAAC;SACX,SAAS,CAAC,kBAAkB,EAAE,EAAE,CAAC,kBAAkB,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;SACtE,SAAS,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,kBAAkB,CAAC,SAAS,CAAC,CAAC;SAClE,SAAS,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;SAC/C,QAAQ,CACL,WAAW,EACX,GAAG,CACC,EAAE,CAAC,WAAW,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC,EAChC,EAAE,CAAC,WAAW,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,EACpC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAC7B,CACJ;SACA,KAAK,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,CAAC;SACzB,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;SAC9C,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;IAC5B,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC;IAC5C,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IAC1C,OAAO;QACH,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC;QACvB,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;KAC1D,CAAC;AACN,CAAC"}

package/packages/happy2-server/dist/modules/file/fileListStored.d.ts

@@ -0,0 +1,8 @@
+import { type DrizzleExecutor } from "../drizzle.js";
+import { type StoredFile } from "./types.js";
+/**
+ * Lists all complete, non-deleted, non-infected stored-file records in identifier order for internal storage reconciliation.
+ * This unscoped inventory deliberately omits product authorization and therefore remains an infrastructure boundary rather than a user-facing file list.
+ */
+export declare function fileListStored(executor: DrizzleExecutor): Promise<StoredFile[]>;
+//# sourceMappingURL=fileListStored.d.ts.map

package/packages/happy2-server/dist/modules/file/fileListStored.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fileListStored.d.ts","sourceRoot":"","sources":["../../../sources/modules/file/fileListStored.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,eAAe,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,EAAE,KAAK,UAAU,EAAE,MAAM,YAAY,CAAC;AAM7C;;;GAGG;AACH,wBAAsB,cAAc,CAAC,QAAQ,EAAE,eAAe,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,CAarF"}

package/packages/happy2-server/dist/modules/file/fileListStored.js

@@ -0,0 +1,18 @@
+import {} from "../drizzle.js";
+import {} from "./types.js";
+import { and, eq, isNull, ne } from "drizzle-orm";
+import { asFile } from "./impl/asFile.js";
+import { files } from "../schema.js";
+/**
+ * Lists all complete, non-deleted, non-infected stored-file records in identifier order for internal storage reconciliation.
+ * This unscoped inventory deliberately omits product authorization and therefore remains an infrastructure boundary rather than a user-facing file list.
+ */
+export async function fileListStored(executor) {
+    const rows = await executor
+        .select()
+        .from(files)
+        .where(and(isNull(files.deletedAt), eq(files.uploadStatus, "complete"), ne(files.scanStatus, "infected")))
+        .orderBy(files.id);
+    return rows.map(asFile);
+}
+//# sourceMappingURL=fileListStored.js.map

package/packages/happy2-server/dist/modules/file/fileListStored.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fileListStored.js","sourceRoot":"","sources":["../../../sources/modules/file/fileListStored.ts"],"names":[],"mappings":"AAAA,OAAO,EAAwB,MAAM,eAAe,CAAC;AACrD,OAAO,EAAmB,MAAM,YAAY,CAAC;AAC7C,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAE1C,OAAO,EAAE,KAAK,EAAE,MAAM,cAAc,CAAC;AAErC;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,QAAyB;IAC1D,MAAM,IAAI,GAAG,MAAM,QAAQ;SACtB,MAAM,EAAE;SACR,IAAI,CAAC,KAAK,CAAC;SACX,KAAK,CACF,GAAG,CACC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,EACvB,EAAE,CAAC,KAAK,CAAC,YAAY,EAAE,UAAU,CAAC,EAClC,EAAE,CAAC,KAAK,CAAC,UAAU,EAAE,UAAU,CAAC,CACnC,CACJ;SACA,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACvB,OAAO,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;AAC5B,CAAC"}

package/packages/happy2-server/dist/modules/file/impl/asFile.d.ts

@@ -0,0 +1,4 @@
+import { type StoredFile } from "../types.js";
+import { type FileRow } from "./fileRow.js";
+export declare function asFile(row: FileRow): StoredFile;
+//# sourceMappingURL=asFile.d.ts.map