// SQS payloads must never turn a tenant or document filter into a broad query. const requireId = (id, name) => { if (typeof id !== 'string' || !/^[0-9a-f]{24}$/i.test(id)) { throw new Error(`A valid ${name} is required`) } return id } const requireUserId = (userId) => requireId(userId, 'userId') const requireDocumentId = (id) => requireId(id, 'document ID') module.exports = { requireUserId, requireDocumentId }