@burdenoff/be-sdk 2026.1015.1 → 2026.1017.1

package/dist/{chunk-HMVQOZHM.js → chunk-3Z2VRCT6.js}

@@ -2,6 +2,80 @@ import { logger } from './chunk-RU266375.js';
 import { __name } from './chunk-XE4OXN2W.js';
 import { AsyncLocalStorage } from 'async_hooks';
 
+var contextFields = [
+  "workspaceId",
+  "tenantId",
+  "actorId",
+  "actorType",
+  "organizationId",
+  "projectId",
+  "appId",
+  "onBehalfOf"
+];
+function sameContext(a, b) {
+  return contextFields.every((field) => a[field] === b[field]);
+}
+__name(sameContext, "sameContext");
+function bindTransactionContext(client, scope, getWorkspaceContext2) {
+  const delegates = /* @__PURE__ */ new WeakMap();
+  function bindOperation(value) {
+    if (!value || typeof value !== "object" || Reflect.get(value, Symbol.toStringTag) !== "PrismaPromise") return value;
+    const sourceContext = getWorkspaceContext2();
+    const captured = sourceContext ? {
+      ...sourceContext
+    } : void 0;
+    const restore = AsyncLocalStorage.snapshot();
+    return new Proxy(value, {
+      get(target, property, receiver) {
+        const original = Reflect.get(target, property, receiver);
+        if (typeof original !== "function" || property === "constructor") return original;
+        return (...args) => {
+          if (!scope.active) throw new Error("[WorkspaceExtension] Lazy operation belongs to a completed interactive transaction.");
+          if (sourceContext && captured && !sameContext(sourceContext, captured)) {
+            throw new Error("[WorkspaceExtension] Captured workspace/actor context changed before lazy execution.");
+          }
+          const current = getWorkspaceContext2();
+          if (captured && current && !sameContext(captured, current)) {
+            throw new Error("[WorkspaceExtension] Lazy operation cannot cross workspace/actor context.");
+          }
+          if (property === "requestTransaction") throw new Error("[WorkspaceExtension] Interactive operation cannot be rebound to another transaction.");
+          return restore(() => {
+            const result = Reflect.apply(original, target, args);
+            return [
+              "then",
+              "catch",
+              "finally"
+            ].includes(String(property)) ? result : bindOperation(result);
+          });
+        };
+      }
+    });
+  }
+  __name(bindOperation, "bindOperation");
+  function facade(target, model) {
+    const existing = delegates.get(target);
+    if (existing) return existing;
+    const proxy = new Proxy(target, {
+      get(object, property, receiver) {
+        const value = Reflect.get(object, property, receiver);
+        if (typeof value === "function" && (model || typeof property === "string" && !property.startsWith("_") && property !== "constructor")) {
+          return (...args) => bindOperation(Reflect.apply(value, object, args));
+        }
+        if (!model && typeof property === "string" && !property.startsWith("_") && !property.startsWith("$") && value && typeof value === "object" && typeof Reflect.get(value, "findMany") === "function") {
+          return facade(value, true);
+        }
+        return value;
+      }
+    });
+    delegates.set(target, proxy);
+    return proxy;
+  }
+  __name(facade, "facade");
+  return facade(client, false);
+}
+__name(bindTransactionContext, "bindTransactionContext");
+
+// src/prisma/workspace-extension.ts
 var workspaceContextStore = new AsyncLocalStorage();
 var fallbackContext;
 function setWorkspaceContext(context) {
@@ -787,7 +861,6 @@ function addWorkspaceExtension(baseClient, config) {
       }
     }
   });
-  if (!tagsTransactions) return withQueryHooks;
   const wrapped = withQueryHooks;
   return wrapped.$extends({
     client: {
@@ -798,7 +871,7 @@ function addWorkspaceExtension(baseClient, config) {
         }
         if (Array.isArray(input)) {
           const wsCtx = getWorkspaceContext();
-          const statement = wsCtx?.workspaceId ? buildTransactionContextStatement(wsCtx, fullConfig) : void 0;
+          const statement = tagsTransactions && wsCtx?.workspaceId ? buildTransactionContextStatement(wsCtx, fullConfig) : void 0;
           if (statement) {
             const setContext = rawPrismaForCallerTransactions.$executeRawUnsafe(statement.sql, ...statement.params);
             return parent.$transaction([
@@ -807,6 +880,19 @@ function addWorkspaceExtension(baseClient, config) {
             ], options).then((results) => Array.isArray(results) ? results.slice(1) : results);
           }
         }
+        if (typeof input === "function") {
+          const callback = input;
+          return transactionDelegate.call(this, async (tx) => {
+            const scope = {
+              active: true
+            };
+            try {
+              return await callback(bindTransactionContext(tx, scope, getWorkspaceContext));
+            } finally {
+              scope.active = false;
+            }
+          }, options);
+        }
         return transactionDelegate.call(this, input, options);
       }
     }
@@ -815,5 +901,5 @@ function addWorkspaceExtension(baseClient, config) {
 __name(addWorkspaceExtension, "addWorkspaceExtension");
 
 export { addWorkspaceExtension, buildTransactionContextStatement, defaultWorkspaceExtensionConfig, getCallerTransaction, getWorkspaceContext, injectCreateFields, injectWhereWorkspaceId, maybeSetRlsGuc, maybeTagConnection, resetCallerTransactionStateForTests, runOperationInCallerTransaction, runOperationWithRlsGuc, setWorkspaceContext, withWorkspaceContext, withWorkspaceContextSync };
-//# sourceMappingURL=chunk-HMVQOZHM.js.map
-//# sourceMappingURL=chunk-HMVQOZHM.js.map
+//# sourceMappingURL=chunk-3Z2VRCT6.js.map
+//# sourceMappingURL=chunk-3Z2VRCT6.js.map

package/dist/chunk-3Z2VRCT6.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/prisma/transaction-context.ts","../src/prisma/workspace-extension.ts"],"names":["contextFields","sameContext","a","b","every","field","bindTransactionContext","client","scope","getWorkspaceContext","delegates","WeakMap","bindOperation","value","Reflect","get","Symbol","toStringTag","sourceContext","captured","undefined","restore","AsyncLocalStorage","snapshot","Proxy","target","property","receiver","original","args","active","Error","current","result","apply","includes","String","facade","model","existing","proxy","object","startsWith","set","workspaceContextStore","fallbackContext","setWorkspaceContext","context","enterWith","getStore","withWorkspaceContext","fn","run","withWorkspaceContextSync","defaultWorkspaceExtensionConfig","enabled","enableReadIsolation","enableDeleteIsolation","enableUpdateWhereIsolation","populateContextJson","populateCreatedBy","populateUpdatedBy","populateTenantId","populateOnBehalfOf","excludeModels","excludeModelsFromReadIsolation","strictMode","allowedUnguardedOperations","debug","enableApplicationNameTagging","enableRlsGucTagging","hasField","data","injectCreateFields","wsCtx","config","injected","workspaceId","tenantId","actorId","onBehalfOf","contextJson","buildContextJsonFromWorkspaceContext","injectUpdateFields","injectWhereClause","where","organizationId","projectId","appId","Object","keys","length","injectWhereWorkspaceId","ctx","stripSkipFlag","cleaned","isExcludedFromReadIsolation","enforceStrictMode","operation","opKey","taggedContexts","WeakSet","maybeTagConnection","rawPrisma","has","add","safeSvc","process","env","replace","safeWs","tag","$executeRawUnsafe","delete","rlsTaggedContexts","maybeSetRlsGuc","modelToClientProperty","charAt","toLowerCase","slice","runOperationWithRlsGuc","rootClient","clientProperty","$transaction","tx","delegate","method","runQueryWithRlsGuc","query","pendingQuery","pendingContext","sanitizeWorkspaceId","requestTransaction","getCallerTransaction","internalParams","transaction","kind","id","descriptor","buildApplicationNameTag","buildTransactionContextStatement","settings","params","push","sql","join","key","MAX_TRACKED_CALLER_TRANSACTIONS","callerTransactionStates","Map","rememberCallerTransaction","state","size","oldest","next","applyCallerTransactionContext","statement","pending","runOperationInCallerTransaction","inflight","ready","catch","resetCallerTransactionStateForTests","clear","addWorkspaceExtension","baseClient","fullConfig","logger","info","rawPrismaForContinuations","transactionDelegate","rawPrismaForCallerTransactions","tagsTransactions","dispatch","_operation","finalArgs","callerTransaction","__internalParams","rawOperation","prismaClient","rawOperationHooks","$queryRaw","$executeRaw","$queryRawUnsafe","$queryRawTyped","withQueryHooks","$extends","$allModels","create","_skipWorkspaceInjection","injectedData","injectedKeys","filter","k","createMany","dataArray","Array","isArray","map","item","createManyAndReturn","update","injectedWhere","injectedDataKeys","whereChanged","updateMany","upsert","injectedCreate","injectedUpdate","findMany","findFirst","findFirstOrThrow","findUnique","findUniqueOrThrow","count","aggregate","groupBy","deleteMany","wrapped","input","options","parent","$parent","setContext","then","results","callback","call"],"mappings":";;;;AAMA,IAAMA,aAAAA,GAAgB;AACpB,EAAA,aAAA;AACA,EAAA,UAAA;AACA,EAAA,SAAA;AACA,EAAA,WAAA;AACA,EAAA,gBAAA;AACA,EAAA,WAAA;AACA,EAAA,OAAA;AACA,EAAA;;AAGF,SAASC,WAAAA,CAAYC,GAAqBC,CAAAA,EAAmB;AAC3D,EAAA,OAAOH,aAAAA,CAAcI,MAAM,CAACC,KAAAA,KAAUH,EAAEG,KAAAA,CAAAA,KAAWF,CAAAA,CAAEE,KAAAA,CAAM,CAAA;AAC7D;AAFSJ,MAAAA,CAAAA,WAAAA,EAAAA,aAAAA,CAAAA;AAUF,SAASK,sBAAAA,CACdC,MAAAA,EACAC,KAAAA,EACAC,oBAAAA,EAAuD;AAEvD,EAAA,MAAMC,SAAAA,uBAAgBC,OAAAA,EAAAA;AACtB,EAAA,SAASC,cAAcC,KAAAA,EAAc;AACnC,IAAA,IAAI,CAACA,KAAAA,IAAS,OAAOA,KAAAA,KAAU,QAAA,IAAYC,OAAAA,CAAQC,GAAAA,CAAIF,KAAAA,EAAOG,MAAAA,CAAOC,WAAW,CAAA,KAAM,eAAA,EAAiB,OAAOJ,KAAAA;AAC9G,IAAA,MAAMK,gBAAgBT,oBAAAA,EAAAA;AACtB,IAAA,MAAMU,WAAWD,aAAAA,GAAgB;MAAE,GAAGA;KAAc,GAAIE,MAAAA;AACxD,IAAA,MAAMC,OAAAA,GAAUC,kBAAkBC,QAAAA,EAAQ;AAC1C,IAAA,OAAO,IAAIC,MAAMX,KAAAA,EAAO;MACtBE,GAAAA,CAAIU,MAAAA,EAAQC,UAAUC,QAAAA,EAAQ;AAC5B,QAAA,MAAMC,QAAAA,GAAWd,OAAAA,CAAQC,GAAAA,CAAIU,MAAAA,EAAQC,UAAUC,QAAAA,CAAAA;AAC/C,QAAA,IAAI,OAAOC,QAAAA,KAAa,UAAA,IAAcF,QAAAA,KAAa,eAAe,OAAOE,QAAAA;AACzE,QAAA,OAAO,IAAIC,IAAAA,KAAAA;AACT,UAAA,IAAI,CAACrB,KAAAA,CAAMsB,MAAAA,EACT,MAAM,IAAIC,MAAM,qFAAA,CAAA;AAGlB,UAAA,IAAIb,iBAAiBC,QAAAA,IAAY,CAAClB,WAAAA,CAAYiB,aAAAA,EAAeC,QAAAA,CAAAA,EAAW;AACtE,YAAA,MAAM,IAAIY,MAAM,sFAAA,CAAA;AAClB,UAAA;AACA,UAAA,MAAMC,UAAUvB,oBAAAA,EAAAA;AAChB,UAAA,IAAIU,YAAYa,OAAAA,IAAW,CAAC/B,WAAAA,CAAYkB,QAAAA,EAAUa,OAAAA,CAAAA,EAAU;AAC1D,YAAA,MAAM,IAAID,MAAM,2EAAA,CAAA;AAClB,UAAA;AAIA,UAAA,IAAIL,QAAAA,KAAa,oBAAA,EACf,MAAM,IAAIK,MAAM,sFAAA,CAAA;AAClB,UAAA,OAAOV,QAAQ,MAAA;AACb,YAAA,MAAMY,MAAAA,GAAkBnB,OAAAA,CAAQoB,KAAAA,CAAMN,QAAAA,EAAUH,QAAQI,IAAAA,CAAAA;AAGxD,YAAA,OAAO;AAAC,cAAA,MAAA;AAAQ,cAAA,OAAA;AAAS,cAAA;AAAWM,aAAAA,CAAAA,QAAAA,CAASC,OAAOV,QAAAA,CAAAA,CAAAA,GAAaO,MAAAA,GAASrB,cAAcqB,MAAAA,CAAAA;UAC1F,CAAA,CAAA;AACF,QAAA,CAAA;AACF,MAAA;KACF,CAAA;AACF,EAAA;AAnCSrB,EAAAA,MAAAA,CAAAA,aAAAA,EAAAA,eAAAA,CAAAA;AAoCT,EAAA,SAASyB,MAAAA,CAAOZ,QAAgBa,KAAAA,EAAc;AAC5C,IAAA,MAAMC,QAAAA,GAAW7B,SAAAA,CAAUK,GAAAA,CAAIU,MAAAA,CAAAA;AAC/B,IAAA,IAAIc,UAAU,OAAOA,QAAAA;AACrB,IAAA,MAAMC,KAAAA,GAAQ,IAAIhB,KAAAA,CAAMC,MAAAA,EAAQ;MAC9BV,GAAAA,CAAI0B,MAAAA,EAAQf,UAAUC,QAAAA,EAAQ;AAC5B,QAAA,MAAMd,KAAAA,GAAiBC,OAAAA,CAAQC,GAAAA,CAAI0B,MAAAA,EAAQf,UAAUC,QAAAA,CAAAA;AACrD,QAAA,IACE,OAAOd,KAAAA,KAAU,UAAA,KAChByB,KAAAA,IAAU,OAAOZ,QAAAA,KAAa,QAAA,IAAY,CAACA,QAAAA,CAASgB,UAAAA,CAAW,GAAA,CAAA,IAAQhB,aAAa,aAAA,CAAA,EACrF;AACA,UAAA,OAAO,CAAA,GAAIG,SAAoBjB,aAAAA,CAAcE,OAAAA,CAAQoB,MAAMrB,KAAAA,EAAO4B,MAAAA,EAAQZ,IAAAA,CAAAA,CAAAA;AAC5E,QAAA;AAIA,QAAA,IACE,CAACS,KAAAA,IACD,OAAOZ,QAAAA,KAAa,QAAA,IACpB,CAACA,QAAAA,CAASgB,UAAAA,CAAW,GAAA,CAAA,IACrB,CAAChB,QAAAA,CAASgB,WAAW,GAAA,CAAA,IACrB7B,KAAAA,IACA,OAAOA,KAAAA,KAAU,QAAA,IACjB,OAAOC,OAAAA,CAAQC,GAAAA,CAAIF,KAAAA,EAAO,UAAA,CAAA,KAAgB,UAAA,EAC1C;AACA,UAAA,OAAOwB,MAAAA,CAAOxB,OAAO,IAAA,CAAA;AACvB,QAAA;AACA,QAAA,OAAOA,KAAAA;AACT,MAAA;KACF,CAAA;AACAH,IAAAA,SAAAA,CAAUiC,GAAAA,CAAIlB,QAAQe,KAAAA,CAAAA;AACtB,IAAA,OAAOA,KAAAA;AACT,EAAA;AA/BSH,EAAAA,MAAAA,CAAAA,MAAAA,EAAAA,QAAAA,CAAAA;AAgCT,EAAA,OAAOA,MAAAA,CAAO9B,QAAQ,KAAA,CAAA;AACxB;AA3EgBD,MAAAA,CAAAA,sBAAAA,EAAAA,wBAAAA,CAAAA;;;ACmDhB,IAAMsC,qBAAAA,GAAwB,IAAItB,iBAAAA,EAAAA;AAUlC,IAAIuB,eAAAA;AA6BG,SAASC,oBAAoBC,OAAAA,EAAyB;AAC3DH,EAAAA,qBAAAA,CAAsBI,UAAUD,OAAAA,CAAAA;AAChCF,EAAAA,eAAAA,GAAkBE,OAAAA;AACpB;AAHgBD,MAAAA,CAAAA,mBAAAA,EAAAA,qBAAAA,CAAAA;AAaT,SAASrC,mBAAAA,GAAAA;AACd,EAAA,OAAOmC,qBAAAA,CAAsBK,UAAQ,IAAMJ,eAAAA;AAC7C;AAFgBpC,MAAAA,CAAAA,mBAAAA,EAAAA,qBAAAA,CAAAA;AAuBhB,eAAsByC,oBAAAA,CAAwBH,SAA2BI,EAAAA,EAAoB;AAC3F,EAAA,OAAOP,qBAAAA,CAAsBQ,GAAAA,CAAIL,OAAAA,EAASI,EAAAA,CAAAA;AAC5C;AAFsBD,MAAAA,CAAAA,oBAAAA,EAAAA,sBAAAA,CAAAA;AAOf,SAASG,wBAAAA,CAA4BN,SAA2BI,EAAAA,EAAW;AAChF,EAAA,OAAOP,qBAAAA,CAAsBQ,GAAAA,CAAIL,OAAAA,EAASI,EAAAA,CAAAA;AAC5C;AAFgBE,MAAAA,CAAAA,wBAAAA,EAAAA,0BAAAA,CAAAA;AA2MT,IAAMC,+BAAAA,GAAsE;EACjFC,OAAAA,EAAS,IAAA;EACTC,mBAAAA,EAAqB,IAAA;EACrBC,qBAAAA,EAAuB,IAAA;EACvBC,0BAAAA,EAA4B,IAAA;EAC5BC,mBAAAA,EAAqB,IAAA;EACrBC,iBAAAA,EAAmB,IAAA;EACnBC,iBAAAA,EAAmB,IAAA;EACnBC,gBAAAA,EAAkB,KAAA;EAClBC,kBAAAA,EAAoB,IAAA;AACpBC,EAAAA,aAAAA,EAAe,EAAA;AACfC,EAAAA,8BAAAA,EAAgC,EAAA;EAChCC,UAAAA,EAAY,IAAA;AACZC,EAAAA,0BAAAA,EAA4B,EAAA;EAC5BC,KAAAA,EAAO,KAAA;EACPC,4BAAAA,EAA8B,KAAA;EAC9BC,mBAAAA,EAAqB;AACvB;AASA,SAASC,QAAAA,CAASC,MAA+BnE,KAAAA,EAAa;AAC5D,EAAA,OAAOA,KAAAA,IAASmE,IAAAA;AAClB;AAFSD,MAAAA,CAAAA,QAAAA,EAAAA,UAAAA,CAAAA;AAaF,SAASE,kBAAAA,CACdD,IAAAA,EACAE,KAAAA,EACAC,MAAAA,EAA0C;AAE1C,EAAA,MAAMC,QAAAA,GAAW;IAAE,GAAGJ;AAAK,GAAA;AAG3B,EAAA,IAAIE,MAAMG,WAAAA,IAAe,CAACN,QAAAA,CAASK,QAAAA,EAAU,aAAA,CAAA,EAAgB;AAC3DA,IAAAA,QAAAA,CAAS,aAAA,IAAiBF,KAAAA,CAAMG,WAAAA;AAClC,EAAA;AAGA,EAAA,IAAIF,MAAAA,CAAOb,oBAAoBY,KAAAA,CAAMI,QAAAA,IAAY,CAACP,QAAAA,CAASK,QAAAA,EAAU,UAAA,CAAA,EAAa;AAChFA,IAAAA,QAAAA,CAAS,UAAA,IAAcF,KAAAA,CAAMI,QAAAA;AAC/B,EAAA;AAGA,EAAA,IAAIH,MAAAA,CAAOf,qBAAqBc,KAAAA,CAAMK,OAAAA,IAAW,CAACR,QAAAA,CAASK,QAAAA,EAAU,WAAA,CAAA,EAAc;AACjFA,IAAAA,QAAAA,CAAS,WAAA,IAAeF,KAAAA,CAAMK,OAAAA;AAChC,EAAA;AAGA,EAAA,IAAIJ,MAAAA,CAAOd,qBAAqBa,KAAAA,CAAMK,OAAAA,IAAW,CAACR,QAAAA,CAASK,QAAAA,EAAU,WAAA,CAAA,EAAc;AACjFA,IAAAA,QAAAA,CAAS,WAAA,IAAeF,KAAAA,CAAMK,OAAAA;AAChC,EAAA;AAIA,EAAA,IAAIJ,MAAAA,CAAOZ,sBAAsBW,KAAAA,CAAMM,UAAAA,IAAc,CAACT,QAAAA,CAASK,QAAAA,EAAU,YAAA,CAAA,EAAe;AACtFA,IAAAA,QAAAA,CAAS,YAAA,IAAgBF,KAAAA,CAAMM,UAAAA;EACjC,CAAA,MAAA,IAAWL,MAAAA,CAAOZ,sBAAsBW,KAAAA,CAAMK,OAAAA,IAAW,CAACR,QAAAA,CAASK,QAAAA,EAAU,YAAA,CAAA,EAAe;AAE1FA,IAAAA,QAAAA,CAAS,YAAA,IAAgBF,KAAAA,CAAMK,OAAAA;AACjC,EAAA;AAGA,EAAA,IAAIJ,OAAOhB,mBAAAA,IAAuB,CAACY,QAAAA,CAASK,QAAAA,EAAU,SAAA,CAAA,EAAY;AAChE,IAAA,MAAMK,WAAAA,GAAcC,qCAAqCR,KAAAA,CAAAA;AACzD,IAAA,IAAIO,WAAAA,EAAa;AACfL,MAAAA,QAAAA,CAAS,SAAA,CAAA,GAAaK,WAAAA;AACxB,IAAA;AACF,EAAA;AAEA,EAAA,OAAOL,QAAAA;AACT;AA7CgBH,MAAAA,CAAAA,kBAAAA,EAAAA,oBAAAA,CAAAA;AAkDhB,SAASU,kBAAAA,CACPX,IAAAA,EACAE,KAAAA,EACAC,MAAAA,EAA0C;AAE1C,EAAA,MAAMC,QAAAA,GAAW;IAAE,GAAGJ;AAAK,GAAA;AAG3B,EAAA,IAAIG,MAAAA,CAAOd,qBAAqBa,KAAAA,CAAMK,OAAAA,IAAW,CAACR,QAAAA,CAASK,QAAAA,EAAU,WAAA,CAAA,EAAc;AACjFA,IAAAA,QAAAA,CAAS,WAAA,IAAeF,KAAAA,CAAMK,OAAAA;AAChC,EAAA;AAMA,EAAA,OAAOH,QAAAA;AACT;AAjBSO,MAAAA,CAAAA,kBAAAA,EAAAA,oBAAAA,CAAAA;AA0BT,SAASC,iBAAAA,CACPC,OACAX,KAAAA,EAAuB;AAEvB,EAAA,IAAI,CAACA,KAAAA,CAAMG,WAAAA,EAAa,OAAOQ,KAAAA;AAE/B,EAAA,IAAI,CAACA,KAAAA,EAAO;AAEV,IAAA,OAAO;AAAER,MAAAA,WAAAA,EAAaH,KAAAA,CAAMG;AAAY,KAAA;AAC1C,EAAA;AAGA,EAAA,IAAI,CAACN,QAAAA,CAASc,KAAAA,EAAO,aAAA,CAAA,EAAgB;AACnC,IAAA,OAAO;MAAE,GAAGA,KAAAA;AAAOR,MAAAA,WAAAA,EAAaH,KAAAA,CAAMG;AAAY,KAAA;AACpD,EAAA;AAEA,EAAA,OAAOQ,KAAAA;AACT;AAjBSD,MAAAA,CAAAA,iBAAAA,EAAAA,mBAAAA,CAAAA;AAsBT,SAASF,qCAAqCR,KAAAA,EAAuB;AACnE,EAAA,MAAM3B,UAAkC,EAAC;AAEzC,EAAA,IAAI2B,KAAAA,CAAMG,WAAAA,EAAa9B,OAAAA,CAAQ,aAAA,IAAiB2B,KAAAA,CAAMG,WAAAA;AACtD,EAAA,IAAIH,KAAAA,CAAMK,OAAAA,EAAShC,OAAAA,CAAQ,QAAA,IAAY2B,KAAAA,CAAMK,OAAAA;AAC7C,EAAA,IAAIL,KAAAA,CAAMY,cAAAA,EAAgBvC,OAAAA,CAAQ,gBAAA,IAAoB2B,KAAAA,CAAMY,cAAAA;AAC5D,EAAA,IAAIZ,KAAAA,CAAMa,SAAAA,EAAWxC,OAAAA,CAAQ,WAAA,IAAe2B,KAAAA,CAAMa,SAAAA;AAClD,EAAA,IAAIb,KAAAA,CAAMc,KAAAA,EAAOzC,OAAAA,CAAQ,OAAA,IAAW2B,KAAAA,CAAMc,KAAAA;AAE1C,EAAA,OAAOC,OAAOC,IAAAA,CAAK3C,OAAAA,CAAAA,CAAS4C,MAAAA,GAAS,IAAI5C,OAAAA,GAAU3B,MAAAA;AACrD;AAVS8D,MAAAA,CAAAA,oCAAAA,EAAAA,sCAAAA,CAAAA;AA8BF,SAASU,sBAAAA,CACdP,OACAX,KAAAA,EAAwB;AAExB,EAAA,MAAMmB,GAAAA,GAAMnB,SAASjE,mBAAAA,EAAAA;AACrB,EAAA,IAAI,CAAC4E,KAAAA,IAAS,CAACQ,GAAAA,EAAKhB,aAAa,OAAOQ,KAAAA;AAGxC,EAAA,IAAI,CAACd,QAAAA,CAASc,KAAAA,EAAO,aAAA,CAAA,EAAgB;AACnC,IAAA,OAAO;MAAE,GAAGA,KAAAA;AAAOR,MAAAA,WAAAA,EAAagB,GAAAA,CAAIhB;AAAY,KAAA;AAClD,EAAA;AAEA,EAAA,OAAOQ,KAAAA;AACT;AAbgBO,MAAAA,CAAAA,sBAAAA,EAAAA,wBAAAA,CAAAA;AAmBhB,SAASE,cAAiDjE,IAAAA,EAAO;AAC/D,EAAA,MAAMkE,OAAAA,GAAU;IAAE,GAAGlE;AAAK,GAAA;AAC1B,EAAA,OAAQkE,QAAoC,yBAAA,CAAA;AAC5C,EAAA,OAAOA,OAAAA;AACT;AAJSD,MAAAA,CAAAA,aAAAA,EAAAA,eAAAA,CAAAA;AAUT,SAASE,2BAAAA,CAA4B1D,OAAeqC,MAAAA,EAA0C;AAC5F,EAAA,OAAOA,MAAAA,CAAOX,cAAc7B,QAAAA,CAASG,KAAAA,KAAUqC,MAAAA,CAAOV,8BAAAA,CAA+B9B,SAASG,KAAAA,CAAAA;AAChG;AAFS0D,MAAAA,CAAAA,2BAAAA,EAAAA,6BAAAA,CAAAA;AAeT,SAASC,iBAAAA,CACP3D,KAAAA,EACA4D,SAAAA,EACAxB,KAAAA,EACAC,MAAAA,EAA0C;AAG1C,EAAA,IAAID,OAAOG,WAAAA,EAAa;AAGxB,EAAA,IAAI,CAACF,OAAOT,UAAAA,EAAY;AAGxB,EAAA,MAAMiC,KAAAA,GAAQ,CAAA,EAAG7D,KAAAA,CAAAA,CAAAA,EAAS4D,SAAAA,CAAAA,CAAAA;AAC1B,EAAA,IAAIvB,MAAAA,CAAOR,0BAAAA,CAA2BhC,QAAAA,CAASgE,KAAAA,CAAAA,EAAQ;AAGvD,EAAA,MAAM,IAAIpE,KAAAA,CACR,CAAA,oDAAA,EAAuDO,KAAAA,CAAAA,CAAAA,EAAS4D,SAAAA,CAAAA,uEAAAA,EAElD5D,KAAAA,CAAAA,6BAAAA,EACA6D,KAAAA,CAAAA,6FAAAA,CAC+C,CAAA;AAEjE;AAxBSF,MAAAA,CAAAA,iBAAAA,EAAAA,mBAAAA,CAAAA;AA8GT,IAAMG,cAAAA,uBAAqBC,OAAAA,EAAAA;AAS3B,eAAsBC,kBAAAA,CAAmBC,WAAgC7B,KAAAA,EAAuB;AAC9F,EAAA,IAAI0B,cAAAA,CAAeI,GAAAA,CAAI9B,KAAAA,CAAAA,EAAQ;AAC/B0B,EAAAA,cAAAA,CAAeK,IAAI/B,KAAAA,CAAAA;AAEnB,EAAA,MAAMgC,OAAAA,GAAAA,CAAWC,QAAQC,GAAAA,CAAI,cAAA,KAAmB,KAAA,EAAOC,OAAAA,CAAQ,oBAAoB,EAAA,CAAA;AACnF,EAAA,MAAMC,UAAUpC,KAAAA,CAAMG,WAAAA,IAAe,EAAA,EAAIgC,OAAAA,CAAQ,oBAAoB,EAAA,CAAA;AACrE,EAAA,MAAME,GAAAA,GAAM,CAAA,IAAA,EAAOL,OAAAA,CAAAA,IAAAA,EAAcI,MAAAA,CAAAA,CAAAA;AACjC,EAAA,IAAI;AACF,IAAA,MAAMP,SAAAA,CAAUS,iBAAAA,CAAkB,CAAA,wBAAA,EAA2BD,GAAAA,CAAAA,CAAAA,CAAM,CAAA;EACrE,CAAA,CAAA,MAAQ;AAENX,IAAAA,cAAAA,CAAea,OAAOvC,KAAAA,CAAAA;AACxB,EAAA;AACF;AAbsB4B,MAAAA,CAAAA,kBAAAA,EAAAA,oBAAAA,CAAAA;AAsBtB,IAAMY,iBAAAA,uBAAwBb,OAAAA,EAAAA;AAkB9B,eAAsBc,cAAAA,CAAeZ,WAAgC7B,KAAAA,EAAuB;AAC1F,EAAA,IAAIwC,iBAAAA,CAAkBV,GAAAA,CAAI9B,KAAAA,CAAAA,EAAQ;AAClCwC,EAAAA,iBAAAA,CAAkBT,IAAI/B,KAAAA,CAAAA;AAEtB,EAAA,MAAMoC,UAAUpC,KAAAA,CAAMG,WAAAA,IAAe,EAAA,EAAIgC,OAAAA,CAAQ,oBAAoB,EAAA,CAAA;AACrE,EAAA,IAAI;AACF,IAAA,MAAMN,SAAAA,CAAUS,iBAAAA,CAAkB,CAAA,wBAAA,EAA2BF,MAAAA,CAAAA,CAAAA,CAAS,CAAA;EACxE,CAAA,CAAA,MAAQ;AAENI,IAAAA,iBAAAA,CAAkBD,OAAOvC,KAAAA,CAAAA;AAC3B,EAAA;AACF;AAXsByC,MAAAA,CAAAA,cAAAA,EAAAA,gBAAAA,CAAAA;AAoCtB,SAASC,sBAAsB9E,KAAAA,EAAa;AAC1C,EAAA,OAAOA,KAAAA,CAAMqD,MAAAA,GAAS,CAAA,GAAIrD,KAAAA,CAAM+E,MAAAA,CAAO,CAAA,CAAA,CAAGC,WAAAA,EAAW,GAAKhF,KAAAA,CAAMiF,KAAAA,CAAM,CAAA,CAAA,GAAKjF,KAAAA;AAC7E;AAFS8E,MAAAA,CAAAA,qBAAAA,EAAAA,uBAAAA,CAAAA;AA0CT,eAAsBI,sBAAAA,CACpBC,UAAAA,EACA/C,KAAAA,EACApC,KAAAA,EACA4D,WACArE,IAAAA,EAAa;AAEb,EAAA,MAAMiF,UAAUpC,KAAAA,CAAMG,WAAAA,IAAe,EAAA,EAAIgC,OAAAA,CAAQ,oBAAoB,EAAA,CAAA;AACrE,EAAA,MAAMa,cAAAA,GAAiBN,sBAAsB9E,KAAAA,CAAAA;AAC7C,EAAA,OAAOmF,UAAAA,CAAWE,YAAAA,CAAa,OAAOC,EAAAA,KAAAA;AACpC,IAAA,MAAMA,EAAAA,CAAGZ,iBAAAA,CAAkB,CAAA,8BAAA,EAAiCF,MAAAA,CAAAA,CAAAA,CAAS,CAAA;AAIrE,IAAA,MAAMe,QAAAA,GAAWD,GAAGF,cAAAA,CAAAA;AACpB,IAAA,MAAMI,MAAAA,GAASD,WAAW3B,SAAAA,CAAAA;AAC1B,IAAA,IAAI,OAAO4B,WAAW,UAAA,EAAY;AAChC,MAAA,MAAM,IAAI/F,MACR,CAAA,uCAAA,EAA0CO,KAAAA,IAAS4D,SAAAA,CAAAA,mBAAAA,EAA+BwB,cAAAA,CAAAA,6DAAAA,CAChF,CAAA;AAEN,IAAA;AACA,IAAA,OAAOI,OAAOjG,IAAAA,CAAAA;EAChB,CAAA,CAAA;AACF;AAxBsB2F,MAAAA,CAAAA,sBAAAA,EAAAA,wBAAAA,CAAAA;AAqCtB,eAAeO,kBAAAA,CACbN,UAAAA,EACA/C,KAAAA,EACAsD,KAAAA,EAA6B;AAK7B,EAAA,MAAMC,eAAeD,KAAAA,EAAAA;AACrB,EAAA,MAAME,iBAAiBT,UAAAA,CAAWT,iBAAAA,CAChC,ySAKAmB,mBAAAA,CAAoBzD,KAAAA,CAAMG,WAAW,CAAA,CAAA;AAEvC,EAAA,IACE,OAAOoD,YAAAA,CAAaG,kBAAAA,KAAuB,cAC3C,OAAOF,cAAAA,CAAeE,uBAAuB,UAAA,EAC7C;AACA,IAAA,MAAM,IAAIrG,MACR,oJACE,CAAA;AAEN,EAAA;AACA,EAAA,MAAM,GAAGE,MAAAA,CAAAA,GAAU,MAAMwF,WAAWE,YAAAA,CAAa;AAACO,IAAAA,cAAAA;AAAgBD,IAAAA;AAAa,GAAA,CAAA;AAC/E,EAAA,OAAOhG,MAAAA;AACT;AA5Be8F,MAAAA,CAAAA,kBAAAA,EAAAA,oBAAAA,CAAAA;AAuER,SAASM,qBACdC,cAAAA,EAAqD;AAErD,EAAA,MAAMC,cAAcD,cAAAA,EAAgBC,WAAAA;AACpC,EAAA,IAAIA,WAAAA,KAAgBnH,MAAAA,IAAamH,WAAAA,KAAgB,IAAA,EAAM,OAAOnH,MAAAA;AAC9D,EAAA,IAAI,OAAOmH,gBAAgB,QAAA,EAAU;AACnC,IAAA,MAAM,EAAEC,IAAAA,EAAMC,EAAAA,EAAE,GAAKF,WAAAA;AACrB,IAAA,IAAIC,SAAS,KAAA,IAAS,OAAOC,OAAO,QAAA,IAAYA,EAAAA,CAAG9C,SAAS,CAAA,EAAG;AAC7D,MAAA,OAAO;QAAE6C,IAAAA,EAAM,KAAA;AAAOC,QAAAA,EAAAA;QAAIC,UAAAA,EAAYH;AAAY,OAAA;AACpD,IAAA;AACA,IAAA,IAAIC,IAAAA,KAAS,SAAS,OAAO;MAAEA,IAAAA,EAAM;AAAQ,KAAA;AAC/C,EAAA;AACA,EAAA,MAAM,IAAIzG,MACR,4PAEE,CAAA;AAEN;AAjBgBsG,MAAAA,CAAAA,oBAAAA,EAAAA,sBAAAA,CAAAA;AAoBhB,SAASF,oBAAoBtD,WAAAA,EAA+B;AAC1D,EAAA,OAAA,CAAQA,WAAAA,IAAe,EAAA,EAAIgC,OAAAA,CAAQ,kBAAA,EAAoB,EAAA,CAAA;AACzD;AAFSsB,MAAAA,CAAAA,mBAAAA,EAAAA,qBAAAA,CAAAA;AAKT,SAASQ,wBAAwBjE,KAAAA,EAAuB;AACtD,EAAA,MAAMgC,OAAAA,GAAAA,CAAWC,QAAQC,GAAAA,CAAI,cAAA,KAAmB,KAAA,EAAOC,OAAAA,CAAQ,oBAAoB,EAAA,CAAA;AACnF,EAAA,OAAO,OAAOH,OAAAA,CAAAA,IAAAA,EAAcyB,mBAAAA,CAAoBzD,KAAAA,CAAMG,WAAW,CAAA,CAAA,CAAA;AACnE;AAHS8D,MAAAA,CAAAA,uBAAAA,EAAAA,yBAAAA,CAAAA;AAoBF,SAASC,gCAAAA,CACdlE,OACAC,MAAAA,EAAwG;AAExG,EAAA,MAAMkE,WAAqB,EAAA;AAC3B,EAAA,MAAMC,SAAmB,EAAA;AACzB,EAAA,IAAInE,OAAOL,mBAAAA,EAAqB;AAC9BwE,IAAAA,MAAAA,CAAOC,IAAAA,CAAKZ,mBAAAA,CAAoBzD,KAAAA,CAAMG,WAAW,CAAA,CAAA;AACjDgE,IAAAA,QAAAA,CAASE,IAAAA,CAAK,CAAA,gCAAA,EAAmCD,MAAAA,CAAOnD,MAAM,CAAA,OAAA,CAAS,CAAA;AACzE,EAAA;AACA,EAAA,IAAIhB,OAAON,4BAAAA,EAA8B;AACvCyE,IAAAA,MAAAA,CAAOC,IAAAA,CAAKJ,uBAAAA,CAAwBjE,KAAAA,CAAAA,CAAAA;AACpCmE,IAAAA,QAAAA,CAASE,IAAAA,CAAK,CAAA,gCAAA,EAAmCD,MAAAA,CAAOnD,MAAM,CAAA,OAAA,CAAS,CAAA;AACzE,EAAA;AACA,EAAA,IAAIkD,QAAAA,CAASlD,MAAAA,KAAW,CAAA,EAAG,OAAOvE,MAAAA;AAClC,EAAA,OAAO;AAAE4H,IAAAA,GAAAA,EAAK,CAAA,OAAA,EAAUH,QAAAA,CAASI,IAAAA,CAAK,IAAA,CAAA,CAAA,CAAA;AAASH,IAAAA,MAAAA;IAAQI,GAAAA,EAAKJ,MAAAA,CAAOG,KAAK,IAAA;AAAU,GAAA;AACpF;AAhBgBL,MAAAA,CAAAA,gCAAAA,EAAAA,kCAAAA,CAAAA;AA6ChB,IAAMO,+BAAAA,GAAkC,IAAA;AACxC,IAAMC,uBAAAA,uBAA8BC,GAAAA,EAAAA;AAEpC,SAASC,yBAAAA,CAA0Bb,IAAYc,KAAAA,EAA6B;AAC1EH,EAAAA,uBAAAA,CAAwBnC,OAAOwB,EAAAA,CAAAA;AAC/BW,EAAAA,uBAAAA,CAAwBzG,GAAAA,CAAI8F,IAAIc,KAAAA,CAAAA;AAChC,EAAA,IAAIH,uBAAAA,CAAwBI,OAAOL,+BAAAA,EAAiC;AAClE,IAAA,MAAMM,MAAAA,GAASL,uBAAAA,CAAwB1D,IAAAA,EAAI,CAAGgE,MAAI,CAAG7I,KAAAA;AACrD,IAAA,IAAI4I,MAAAA,KAAWrI,MAAAA,EAAWgI,uBAAAA,CAAwBnC,MAAAA,CAAOwC,MAAAA,CAAAA;AAC3D,EAAA;AACF;AAPSH,MAAAA,CAAAA,yBAAAA,EAAAA,2BAAAA,CAAAA;AAST,eAAeK,6BAAAA,CACbpD,SAAAA,EACAmC,UAAAA,EACAkB,SAAAA,EAAsC;AAEtC,EAAA,MAAMC,UAAUtD,SAAAA,CAAUS,iBAAAA,CAAkB4C,UAAUZ,GAAAA,EAAG,GAAKY,UAAUd,MAAM,CAAA;AAC9E,EAAA,IAAI,OAAOe,OAAAA,CAAQzB,kBAAAA,KAAuB,UAAA,EAAY;AACpD,IAAA,MAAM,IAAIrG,MACR,+LACE,CAAA;AAEN,EAAA;AACA,EAAA,MAAM8H,OAAAA,CAAQzB,mBAAmBM,UAAAA,CAAAA;AACnC;AAbeiB,MAAAA,CAAAA,6BAAAA,EAAAA,+BAAAA,CAAAA;AA8Bf,eAAsBG,+BAAAA,CACpBvD,SAAAA,EACAgC,WAAAA,EACA7D,KAAAA,EACAC,QACAvB,GAAAA,EAA2B;AAE3B,EAAA,MAAMwG,SAAAA,GAAYhB,gCAAAA,CAAiClE,KAAAA,EAAOC,MAAAA,CAAAA;AAC1D,EAAA,IAAI,CAACiF,SAAAA,EAAW,OAAOxG,GAAAA,EAAAA;AAEvB,EAAA,IAAImG,KAAAA,GAAQH,uBAAAA,CAAwBrI,GAAAA,CAAIwH,WAAAA,CAAYE,EAAE,CAAA;AACtD,EAAA,IAAI,CAACc,SAASA,KAAAA,CAAMb,UAAAA,KAAeH,YAAYG,UAAAA,IAAca,KAAAA,CAAML,GAAAA,KAAQU,SAAAA,CAAUV,GAAAA,EAAK;AACxF,IAAA,IAAIK,SAASA,KAAAA,CAAMQ,QAAAA,GAAW,KAAKR,KAAAA,CAAML,GAAAA,KAAQU,UAAUV,GAAAA,EAAK;AAC9D,MAAA,MAAM,IAAInH,MACR,sMACE,CAAA;AAEN,IAAA;AACA,IAAA,MAAM2H,IAAAA,GAA+B;AACnChB,MAAAA,UAAAA,EAAYH,WAAAA,CAAYG,UAAAA;AACxBQ,MAAAA,GAAAA,EAAKU,SAAAA,CAAUV,GAAAA;AACfc,MAAAA,KAAAA,EAAOL,6BAAAA,CAA8BpD,SAAAA,EAAWgC,WAAAA,CAAYG,UAAAA,EAAYkB,SAAAA,CAAAA;MACxEG,QAAAA,EAAU;AACZ,KAAA;AACAL,IAAAA,IAAAA,CAAKM,KAAAA,CAAMC,MAAM,MAAA;AACf,MAAA,IAAIb,uBAAAA,CAAwBrI,IAAIwH,WAAAA,CAAYE,EAAE,MAAMiB,IAAAA,EAAMN,uBAAAA,CAAwBnC,MAAAA,CAAOsB,WAAAA,CAAYE,EAAE,CAAA;IACzG,CAAA,CAAA;AACAa,IAAAA,yBAAAA,CAA0Bf,WAAAA,CAAYE,IAAIiB,IAAAA,CAAAA;AAC1CH,IAAAA,KAAAA,GAAQG,IAAAA;AACV,EAAA;AAEAH,EAAAA,KAAAA,CAAMQ,QAAAA,IAAY,CAAA;AAClB,EAAA,IAAI;AACF,IAAA,MAAMR,KAAAA,CAAMS,KAAAA;AACZ,IAAA,OAAO,MAAM5G,GAAAA,EAAAA;EACf,CAAA,SAAA;AACEmG,IAAAA,KAAAA,CAAMQ,QAAAA,IAAY,CAAA;AACpB,EAAA;AACF;AAtCsBD,MAAAA,CAAAA,+BAAAA,EAAAA,iCAAAA,CAAAA;AAyCf,SAASI,mCAAAA,GAAAA;AACdd,EAAAA,uBAAAA,CAAwBe,KAAAA,EAAK;AAC/B;AAFgBD,MAAAA,CAAAA,mCAAAA,EAAAA,qCAAAA,CAAAA;AAIT,SAASE,qBAAAA,CAAyBC,YAAe1F,MAAAA,EAAiC;AACvF,EAAA,MAAM2F,UAAAA,GAAiD;IACrD,GAAGhH,+BAAAA;IACH,GAAGqB;AACL,GAAA;AAEA,EAAA,IAAI,CAAC2F,WAAW/G,OAAAA,EAAS;AACvBgH,IAAAA,MAAAA,CAAOC,KAAK,0DAAA,CAAA;AACZ,IAAA,OAAOH,UAAAA;AACT,EAAA;AAGA,EAAA,MAAM9D,SAAAA,GAAY8D,UAAAA;AAElB,EAAA,MAAMI,yBAAAA,GAA4BJ,UAAAA;AAGlC,EAAA,MAAMK,sBAAuBL,UAAAA,CAA8C1C,YAAAA;AAG3E,EAAA,MAAMgD,8BAAAA,GAAiCN,UAAAA;AACvC,EAAA,MAAMO,gBAAAA,GAAmBN,UAAAA,CAAWhG,mBAAAA,IAAuBgG,UAAAA,CAAWjG,4BAAAA;AAatE,EAAA,MAAMwG,QAAAA,mBAAW,MAAA,CAAA,OACf/B,MAAAA,EACApE,KAAAA,EACAoG,YACAC,SAAAA,KAAAA;AAIA,IAAA,IAAI,CAACH,gBAAAA,EAAkB,OAAO9B,MAAAA,CAAOd,MAAM+C,SAAAA,CAAAA;AAC3C,IAAA,MAAMC,iBAAAA,GAAoB3C,oBAAAA,CAAqBS,MAAAA,CAAOmC,gBAAgB,CAAA;AACtE,IAAA,IAAID,iBAAAA,EAAmBxC,SAAS,KAAA,EAAO;AACrC,MAAA,OAAOsB,+BAAAA,CAAgCa,gCAAgCK,iBAAAA,EAAmBtG,KAAAA,EAAO4F,YAAY,MAC3GxB,MAAAA,CAAOd,KAAAA,CAAM+C,SAAAA,CAAAA,CAAAA;AAEjB,IAAA;AACA,IAAA,IAAIC,iBAAAA,EAAmBxC,SAAS,OAAA,EAAS;AACvC,MAAA,OAAOM,MAAAA,CAAOd,MAAM+C,SAAAA,CAAAA;AACtB,IAAA;AACA,IAAA,IAAIT,WAAWjG,4BAAAA,EAA8B;AAC3C,MAAA,MAAMiC,kBAAAA,CAAmBC,WAAW7B,KAAAA,CAAAA;AACtC,IAAA;AACA,IAAA,IAAI4F,WAAWhG,mBAAAA,EAAqB;AAClC,MAAA,OAAOyD,mBAAmB0C,yBAAAA,EAA2B/F,KAAAA,EAAO,MAAMoE,MAAAA,CAAOd,KAAAA,CAAM+C,SAAAA,CAAAA,CAAAA;AACjF,IAAA;AACA,IAAA,OAAOjC,MAAAA,CAAOd,MAAM+C,SAAAA,CAAAA;EACtB,CAAA,EAzBiB,UAAA,CAAA;AAgCjB,EAAA,MAAMG,+BAAe,MAAA,CAAA,OAAO,EAAErJ,IAAAA,EAAMmG,KAAAA,EAAOiD,kBAAgB,KAA6B;AACtF,IAAA,IAAI,CAACL,gBAAAA,EAAkB,OAAO5C,KAAAA,CAAMnG,IAAAA,CAAAA;AACpC,IAAA,MAAMmJ,iBAAAA,GAAoB3C,qBAAqB4C,gBAAAA,CAAAA;AAC/C,IAAA,IAAID,iBAAAA,EAAmBxC,IAAAA,KAAS,KAAA,EAAO,OAAOR,MAAMnG,IAAAA,CAAAA;AACpD,IAAA,MAAM6C,QAAQjE,mBAAAA,EAAAA;AACd,IAAA,IAAI,CAACiE,KAAAA,EAAOG,WAAAA,EAAa,OAAOmD,MAAMnG,IAAAA,CAAAA;AACtC,IAAA,OAAOiI,+BAAAA,CAAgCa,gCAAgCK,iBAAAA,EAAmBtG,KAAAA,EAAO4F,YAAY,MAC3GtC,KAAAA,CAAMnG,IAAAA,CAAAA,CAAAA;EAEV,CAAA,EATqB,cAAA,CAAA;AAYrB,EAAA,MAAMsJ,YAAAA,GAAed,UAAAA;AAErBE,EAAAA,MAAAA,CAAOC,KAAK,kDAAA,EAAoD;AAC9D7G,IAAAA,mBAAAA,EAAqB2G,UAAAA,CAAW3G,mBAAAA;AAChCC,IAAAA,iBAAAA,EAAmB0G,UAAAA,CAAW1G,iBAAAA;AAC9BC,IAAAA,iBAAAA,EAAmByG,UAAAA,CAAWzG,iBAAAA;AAC9BC,IAAAA,gBAAAA,EAAkBwG,UAAAA,CAAWxG,gBAAAA;AAC7BN,IAAAA,mBAAAA,EAAqB8G,UAAAA,CAAW9G,mBAAAA;AAChCC,IAAAA,qBAAAA,EAAuB6G,UAAAA,CAAW7G,qBAAAA;AAClCC,IAAAA,0BAAAA,EAA4B4G,UAAAA,CAAW5G,0BAAAA;AACvCQ,IAAAA,UAAAA,EAAYoG,UAAAA,CAAWpG,UAAAA;AACvBF,IAAAA,aAAAA,EAAesG,UAAAA,CAAWtG,aAAAA;AAC1BC,IAAAA,8BAAAA,EAAgCqG,UAAAA,CAAWrG,8BAAAA;AAC3CE,IAAAA,0BAAAA,EAA4BmG,UAAAA,CAAWnG,0BAAAA;AACvCE,IAAAA,4BAAAA,EAA8BiG,UAAAA,CAAWjG,4BAAAA;AACzCC,IAAAA,mBAAAA,EAAqBgG,UAAAA,CAAWhG;GAClC,CAAA;AAGA,EAAA,MAAM8G,oBAAoBR,gBAAAA,GACtB;IACES,SAAAA,EAAWH,YAAAA;IACXI,WAAAA,EAAaJ,YAAAA;IACbK,eAAAA,EAAiBL,YAAAA;IACjBlE,iBAAAA,EAAmBkE,YAAAA;IACnBM,cAAAA,EAAgBN;AAClB,GAAA,GACA,EAAC;AAEL,EAAA,MAAMO,cAAAA,GAAiBN,aAAaO,QAAAA,CAAS;IAC3C1D,KAAAA,EAAO;MACL,GAAGoD,iBAAAA;MACHO,UAAAA,EAAY;;;;AAKV,QAAA,MAAMC,OAAO,EACXtJ,KAAAA,EACAT,IAAAA,EACAmG,KAAAA,EACAiD,kBAAgB,EAKhB;AAEA,UAAA,IAAIX,WAAWtG,aAAAA,CAAc7B,QAAAA,CAASG,KAAAA,CAAAA,IAAUT,KAAKgK,uBAAAA,EAAyB;AAC5E,YAAA,OAAO7D,KAAAA,CAAMlC,aAAAA,CAAcjE,IAAAA,CAAAA,CAAAA;AAC7B,UAAA;AAEA,UAAA,MAAM6C,QAAQjE,mBAAAA,EAAAA;AACdwF,UAAAA,iBAAAA,CAAkB3D,KAAAA,EAAO,QAAA,EAAUoC,KAAAA,EAAO4F,UAAAA,CAAAA;AAC1C,UAAA,IAAI,CAAC5F,OAAOG,WAAAA,EAAa;AACvB,YAAA,OAAOmD,MAAMnG,IAAAA,CAAAA;AACf,UAAA;AAGA,UAAA,MAAMiK,YAAAA,GAAerH,kBAAAA,CAAmB5C,IAAAA,CAAK2C,IAAAA,EAAME,OAAO4F,UAAAA,CAAAA;AAE1D,UAAA,IAAIA,WAAWlG,KAAAA,EAAO;AACpB,YAAA,MAAM2H,YAAAA,GAAetG,MAAAA,CAAOC,IAAAA,CAAKoG,YAAAA,CAAAA,CAAcE,MAAAA,CAAO,CAACC,CAAAA,KAAM,EAAEA,CAAAA,IAAKpK,IAAAA,CAAK2C,IAAAA,CAAG,CAAA;AAC5E,YAAA,IAAIuH,YAAAA,CAAapG,SAAS,CAAA,EAAG;AAC3B4E,cAAAA,MAAAA,CAAOnG,KAAAA,CAAM,wBAAwB9B,KAAAA,CAAAA,oBAAAA,EAA4ByJ,aAAa9C,IAAAA,CAAK,IAAA,CAAA,CAAA,CAAA,EAAS;AAC1FpE,gBAAAA,WAAAA,EAAaH,KAAAA,CAAMG,WAAAA;AACnBE,gBAAAA,OAAAA,EAASL,KAAAA,CAAMK;eACjB,CAAA;AACF,YAAA;AACF,UAAA;AAEA,UAAA,MAAMgG,SAAAA,GAAY;AAChB,YAAA,GAAGjF,cAAcjE,IAAAA,CAAAA;YACjB2C,IAAAA,EAAMsH;AACR,WAAA;AACA,UAAA,OAAOjB,QAAAA,CAAS;AAAEvI,YAAAA,KAAAA;AAAO0F,YAAAA,KAAAA;AAAOiD,YAAAA;WAAiB,EAAGvG,KAAAA,EAAO,UAAUqG,SAAAA,CAAAA;AACvE,QAAA,CAAA;AAEA,QAAA,MAAMmB,WAAW,EACf5J,KAAAA,EACAT,IAAAA,EACAmG,KAAAA,EACAiD,kBAAgB,EAKhB;AACA,UAAA,IAAIX,WAAWtG,aAAAA,CAAc7B,QAAAA,CAASG,KAAAA,CAAAA,IAAUT,KAAKgK,uBAAAA,EAAyB;AAC5E,YAAA,OAAO7D,KAAAA,CAAMlC,aAAAA,CAAcjE,IAAAA,CAAAA,CAAAA;AAC7B,UAAA;AAEA,UAAA,MAAM6C,QAAQjE,mBAAAA,EAAAA;AACdwF,UAAAA,iBAAAA,CAAkB3D,KAAAA,EAAO,YAAA,EAAcoC,KAAAA,EAAO4F,UAAAA,CAAAA;AAC9C,UAAA,IAAI,CAAC5F,OAAOG,WAAAA,EAAa;AACvB,YAAA,OAAOmD,MAAMnG,IAAAA,CAAAA;AACf,UAAA;AAGA,UAAA,MAAMsK,YAAYC,KAAAA,CAAMC,OAAAA,CAAQxK,KAAK2C,IAAI,CAAA,GAAI3C,KAAK2C,IAAAA,GAAO;YAAC3C,IAAAA,CAAK2C;;AAC/D,UAAA,MAAMsH,YAAAA,GAAeK,UAAUG,GAAAA,CAAI,CAACC,SAAS9H,kBAAAA,CAAmB8H,IAAAA,EAAM7H,KAAAA,EAAO4F,UAAAA,CAAAA,CAAAA;AAE7E,UAAA,MAAMS,SAAAA,GAAY;AAChB,YAAA,GAAGjF,cAAcjE,IAAAA,CAAAA;AACjB2C,YAAAA,IAAAA,EAAM4H,MAAMC,OAAAA,CAAQxK,IAAAA,CAAK2C,IAAI,CAAA,GAAIsH,YAAAA,GAAeA,aAAa,CAAA;AAC/D,WAAA;AACA,UAAA,OAAOjB,QAAAA,CAAS;AAAEvI,YAAAA,KAAAA;AAAO0F,YAAAA,KAAAA;AAAOiD,YAAAA;WAAiB,EAAGvG,KAAAA,EAAO,cAAcqG,SAAAA,CAAAA;AAC3E,QAAA,CAAA;AAEA,QAAA,MAAMyB,oBAAoB,EACxBlK,KAAAA,EACAT,IAAAA,EACAmG,KAAAA,EACAiD,kBAAgB,EAKhB;AACA,UAAA,IAAIX,WAAWtG,aAAAA,CAAc7B,QAAAA,CAASG,KAAAA,CAAAA,IAAUT,KAAKgK,uBAAAA,EAAyB;AAC5E,YAAA,OAAO7D,KAAAA,CAAMlC,aAAAA,CAAcjE,IAAAA,CAAAA,CAAAA;AAC7B,UAAA;AAEA,UAAA,MAAM6C,QAAQjE,mBAAAA,EAAAA;AACdwF,UAAAA,iBAAAA,CAAkB3D,KAAAA,EAAO,qBAAA,EAAuBoC,KAAAA,EAAO4F,UAAAA,CAAAA;AACvD,UAAA,IAAI,CAAC5F,OAAOG,WAAAA,EAAa;AACvB,YAAA,OAAOmD,MAAMnG,IAAAA,CAAAA;AACf,UAAA;AAEA,UAAA,MAAMsK,YAAYC,KAAAA,CAAMC,OAAAA,CAAQxK,KAAK2C,IAAI,CAAA,GAAI3C,KAAK2C,IAAAA,GAAO;YAAC3C,IAAAA,CAAK2C;;AAC/D,UAAA,MAAMsH,YAAAA,GAAeK,UAAUG,GAAAA,CAAI,CAACC,SAAS9H,kBAAAA,CAAmB8H,IAAAA,EAAM7H,KAAAA,EAAO4F,UAAAA,CAAAA,CAAAA;AAE7E,UAAA,MAAMS,SAAAA,GAAY;AAChB,YAAA,GAAGjF,cAAcjE,IAAAA,CAAAA;AACjB2C,YAAAA,IAAAA,EAAM4H,MAAMC,OAAAA,CAAQxK,IAAAA,CAAK2C,IAAI,CAAA,GAAIsH,YAAAA,GAAeA,aAAa,CAAA;AAC/D,WAAA;AACA,UAAA,OAAOjB,QAAAA,CAAS;AAAEvI,YAAAA,KAAAA;AAAO0F,YAAAA,KAAAA;AAAOiD,YAAAA;WAAiB,EAAGvG,KAAAA,EAAO,uBAAuBqG,SAAAA,CAAAA;AACpF,QAAA,CAAA;;;;AAMA,QAAA,MAAM0B,OAAO,EACXnK,KAAAA,EACAT,IAAAA,EACAmG,KAAAA,EACAiD,kBAAgB,EAMhB;AACA,UAAA,IAAIX,WAAWtG,aAAAA,CAAc7B,QAAAA,CAASG,KAAAA,CAAAA,IAAUT,KAAKgK,uBAAAA,EAAyB;AAC5E,YAAA,OAAO7D,KAAAA,CAAMlC,aAAAA,CAAcjE,IAAAA,CAAAA,CAAAA;AAC7B,UAAA;AAEA,UAAA,MAAM6C,QAAQjE,mBAAAA,EAAAA;AACdwF,UAAAA,iBAAAA,CAAkB3D,KAAAA,EAAO,QAAA,EAAUoC,KAAAA,EAAO4F,UAAAA,CAAAA;AAC1C,UAAA,IAAI,CAAC5F,OAAOG,WAAAA,EAAa;AACvB,YAAA,OAAOmD,MAAMnG,IAAAA,CAAAA;AACf,UAAA;AAEA,UAAA,MAAMiK,YAAAA,GAAe3G,kBAAAA,CAAmBtD,IAAAA,CAAK2C,IAAAA,EAAME,OAAO4F,UAAAA,CAAAA;AAG1D,UAAA,IAAIoC,gBAAgB7K,IAAAA,CAAKwD,KAAAA;AACzB,UAAA,IAAIiF,WAAW5G,0BAAAA,IAA8B,CAACsC,2BAAAA,CAA4B1D,KAAAA,EAAOgI,UAAAA,CAAAA,EAAa;AAC5FoC,YAAAA,aAAAA,GAAgBtH,iBAAAA,CAAkBvD,IAAAA,CAAKwD,KAAAA,EAAOX,KAAAA,CAAAA;AAChD,UAAA;AAEA,UAAA,IAAI4F,WAAWlG,KAAAA,EAAO;AACpB,YAAA,MAAMuI,gBAAAA,GAAmBlH,MAAAA,CAAOC,IAAAA,CAAKoG,YAAAA,CAAAA,CAAcE,MAAAA,CAAO,CAACC,CAAAA,KAAM,EAAEA,CAAAA,IAAKpK,IAAAA,CAAK2C,IAAAA,CAAG,CAAA;AAChF,YAAA,MAAMoI,YAAAA,GAAeF,kBAAkB7K,IAAAA,CAAKwD,KAAAA;AAC5C,YAAA,IAAIsH,gBAAAA,CAAiBhH,MAAAA,GAAS,CAAA,IAAKiH,YAAAA,EAAc;AAC/CrC,cAAAA,MAAAA,CAAOnG,KAAAA,CACL,CAAA,qBAAA,EAAwB9B,KAAAA,CAAAA,yBAAAA,EAAiCqK,gBAAAA,CAAiB1D,IAAAA,CAAK,IAAA,CAAA,CAAA,EAAQ2D,YAAAA,GAAe,sBAAA,GAAyB,EAAA,CAAA,CAAI,CAAA;AAEvI,YAAA;AACF,UAAA;AAEA,UAAA,MAAM7B,SAAAA,GAAY;AAChB,YAAA,GAAGjF,cAAcjE,IAAAA,CAAAA;YACjB2C,IAAAA,EAAMsH,YAAAA;YACNzG,KAAAA,EAAOqH;AACT,WAAA;AACA,UAAA,OAAO7B,QAAAA,CAAS;AAAEvI,YAAAA,KAAAA;AAAO0F,YAAAA,KAAAA;AAAOiD,YAAAA;WAAiB,EAAGvG,KAAAA,EAAO,UAAUqG,SAAAA,CAAAA;AACvE,QAAA,CAAA;AAEA,QAAA,MAAM8B,WAAW,EACfvK,KAAAA,EACAT,IAAAA,EACAmG,KAAAA,EACAiD,kBAAgB,EAMhB;AACA,UAAA,IAAIX,WAAWtG,aAAAA,CAAc7B,QAAAA,CAASG,KAAAA,CAAAA,IAAUT,KAAKgK,uBAAAA,EAAyB;AAC5E,YAAA,OAAO7D,KAAAA,CAAMlC,aAAAA,CAAcjE,IAAAA,CAAAA,CAAAA;AAC7B,UAAA;AAEA,UAAA,MAAM6C,QAAQjE,mBAAAA,EAAAA;AACdwF,UAAAA,iBAAAA,CAAkB3D,KAAAA,EAAO,YAAA,EAAcoC,KAAAA,EAAO4F,UAAAA,CAAAA;AAC9C,UAAA,IAAI,CAAC5F,OAAOG,WAAAA,EAAa;AACvB,YAAA,OAAOmD,MAAMnG,IAAAA,CAAAA;AACf,UAAA;AAEA,UAAA,MAAMiK,YAAAA,GAAe3G,kBAAAA,CAAmBtD,IAAAA,CAAK2C,IAAAA,EAAME,OAAO4F,UAAAA,CAAAA;AAG1D,UAAA,IAAIoC,gBAAgB7K,IAAAA,CAAKwD,KAAAA;AACzB,UAAA,IAAIiF,WAAW5G,0BAAAA,IAA8B,CAACsC,2BAAAA,CAA4B1D,KAAAA,EAAOgI,UAAAA,CAAAA,EAAa;AAC5FoC,YAAAA,aAAAA,GAAgBtH,iBAAAA,CAAkBvD,IAAAA,CAAKwD,KAAAA,EAAOX,KAAAA,CAAAA;AAChD,UAAA;AAEA,UAAA,MAAMqG,SAAAA,GAAY;AAChB,YAAA,GAAGjF,cAAcjE,IAAAA,CAAAA;YACjB2C,IAAAA,EAAMsH,YAAAA;YACNzG,KAAAA,EAAOqH;AACT,WAAA;AACA,UAAA,OAAO7B,QAAAA,CAAS;AAAEvI,YAAAA,KAAAA;AAAO0F,YAAAA,KAAAA;AAAOiD,YAAAA;WAAiB,EAAGvG,KAAAA,EAAO,cAAcqG,SAAAA,CAAAA;AAC3E,QAAA,CAAA;AAEA,QAAA,MAAM+B,OAAO,EACXxK,KAAAA,EACAT,IAAAA,EACAmG,KAAAA,EACAiD,kBAAgB,EAOhB;AACA,UAAA,IAAIX,WAAWtG,aAAAA,CAAc7B,QAAAA,CAASG,KAAAA,CAAAA,IAAUT,KAAKgK,uBAAAA,EAAyB;AAC5E,YAAA,OAAO7D,KAAAA,CAAMlC,aAAAA,CAAcjE,IAAAA,CAAAA,CAAAA;AAC7B,UAAA;AAEA,UAAA,MAAM6C,QAAQjE,mBAAAA,EAAAA;AACdwF,UAAAA,iBAAAA,CAAkB3D,KAAAA,EAAO,QAAA,EAAUoC,KAAAA,EAAO4F,UAAAA,CAAAA;AAC1C,UAAA,IAAI,CAAC5F,OAAOG,WAAAA,EAAa;AACvB,YAAA,OAAOmD,MAAMnG,IAAAA,CAAAA;AACf,UAAA;AAEA,UAAA,MAAMkL,cAAAA,GAAiBtI,kBAAAA,CAAmB5C,IAAAA,CAAK+J,MAAAA,EAAQlH,OAAO4F,UAAAA,CAAAA;AAC9D,UAAA,MAAM0C,cAAAA,GAAiB7H,kBAAAA,CAAmBtD,IAAAA,CAAK4K,MAAAA,EAAQ/H,OAAO4F,UAAAA,CAAAA;AAG9D,UAAA,IAAIoC,gBAAgB7K,IAAAA,CAAKwD,KAAAA;AACzB,UAAA,IAAIiF,WAAW5G,0BAAAA,IAA8B,CAACsC,2BAAAA,CAA4B1D,KAAAA,EAAOgI,UAAAA,CAAAA,EAAa;AAC5FoC,YAAAA,aAAAA,GAAgBtH,iBAAAA,CAAkBvD,IAAAA,CAAKwD,KAAAA,EAAOX,KAAAA,CAAAA;AAChD,UAAA;AAEA,UAAA,MAAMqG,SAAAA,GAAY;AAChB,YAAA,GAAGjF,cAAcjE,IAAAA,CAAAA;YACjB+J,MAAAA,EAAQmB,cAAAA;YACRN,MAAAA,EAAQO,cAAAA;YACR3H,KAAAA,EAAOqH;AACT,WAAA;AACA,UAAA,OAAO7B,QAAAA,CAAS;AAAEvI,YAAAA,KAAAA;AAAO0F,YAAAA,KAAAA;AAAOiD,YAAAA;WAAiB,EAAGvG,KAAAA,EAAO,UAAUqG,SAAAA,CAAAA;AACvE,QAAA,CAAA;;;;AAMA,QAAA,MAAMkC,SAAS,EAAE3K,KAAAA,EAAOT,IAAAA,EAAMmG,KAAAA,EAAOiD,kBAAgB,EAAqC;AACxF,UAAA,IACE,CAACX,WAAW9G,mBAAAA,IACZwC,2BAAAA,CAA4B1D,OAAOgI,UAAAA,CAAAA,IACnCzI,KAAKgK,uBAAAA,EACL;AACA,YAAA,OAAO7D,KAAAA,CAAMlC,aAAAA,CAAcjE,IAAAA,CAAAA,CAAAA;AAC7B,UAAA;AAEA,UAAA,MAAM6C,QAAQjE,mBAAAA,EAAAA;AACdwF,UAAAA,iBAAAA,CAAkB3D,KAAAA,EAAO,UAAA,EAAYoC,KAAAA,EAAO4F,UAAAA,CAAAA;AAC5C,UAAA,IAAI,CAAC5F,OAAOG,WAAAA,EAAa;AACvB,YAAA,OAAOmD,MAAMnG,IAAAA,CAAAA;AACf,UAAA;AAEA,UAAA,MAAM6K,aAAAA,GAAgBtH,iBAAAA,CAAkBvD,IAAAA,CAAKwD,KAAAA,EAAOX,KAAAA,CAAAA;AAEpD,UAAA,IAAI4F,WAAWlG,KAAAA,EAAO;AACpBmG,YAAAA,MAAAA,CAAOnG,KAAAA,CAAM,CAAA,qBAAA,EAAwB9B,KAAAA,CAAAA,2CAAAA,CAAAA,EAAoD;AACvFuC,cAAAA,WAAAA,EAAaH,KAAAA,CAAMG;aACrB,CAAA;AACF,UAAA;AAEA,UAAA,MAAMkG,SAAAA,GAAY;AAChB,YAAA,GAAGjF,cAAcjE,IAAAA,CAAAA;YACjBwD,KAAAA,EAAOqH;AACT,WAAA;AACA,UAAA,OAAO7B,QAAAA,CAAS;AAAEvI,YAAAA,KAAAA;AAAO0F,YAAAA,KAAAA;AAAOiD,YAAAA;WAAiB,EAAGvG,KAAAA,EAAO,YAAYqG,SAAAA,CAAAA;AACzE,QAAA,CAAA;AAEA,QAAA,MAAMmC,UAAU,EAAE5K,KAAAA,EAAOT,IAAAA,EAAMmG,KAAAA,EAAOiD,kBAAgB,EAAqC;AACzF,UAAA,IACE,CAACX,WAAW9G,mBAAAA,IACZwC,2BAAAA,CAA4B1D,OAAOgI,UAAAA,CAAAA,IACnCzI,KAAKgK,uBAAAA,EACL;AACA,YAAA,OAAO7D,KAAAA,CAAMlC,aAAAA,CAAcjE,IAAAA,CAAAA,CAAAA;AAC7B,UAAA;AAEA,UAAA,MAAM6C,QAAQjE,mBAAAA,EAAAA;AACdwF,UAAAA,iBAAAA,CAAkB3D,KAAAA,EAAO,WAAA,EAAaoC,KAAAA,EAAO4F,UAAAA,CAAAA;AAC7C,UAAA,IAAI,CAAC5F,OAAOG,WAAAA,EAAa;AACvB,YAAA,OAAOmD,MAAMnG,IAAAA,CAAAA;AACf,UAAA;AAEA,UAAA,MAAM6K,aAAAA,GAAgBtH,iBAAAA,CAAkBvD,IAAAA,CAAKwD,KAAAA,EAAOX,KAAAA,CAAAA;AAEpD,UAAA,IAAI4F,WAAWlG,KAAAA,EAAO;AACpBmG,YAAAA,MAAAA,CAAOnG,KAAAA,CAAM,CAAA,qBAAA,EAAwB9B,KAAAA,CAAAA,4CAAAA,CAAAA,EAAqD;AACxFuC,cAAAA,WAAAA,EAAaH,KAAAA,CAAMG;aACrB,CAAA;AACF,UAAA;AAEA,UAAA,MAAMkG,SAAAA,GAAY;AAChB,YAAA,GAAGjF,cAAcjE,IAAAA,CAAAA;YACjBwD,KAAAA,EAAOqH;AACT,WAAA;AACA,UAAA,OAAO7B,QAAAA,CAAS;AAAEvI,YAAAA,KAAAA;AAAO0F,YAAAA,KAAAA;AAAOiD,YAAAA;WAAiB,EAAGvG,KAAAA,EAAO,aAAaqG,SAAAA,CAAAA;AAC1E,QAAA,CAAA;AAEA,QAAA,MAAMoC,iBAAiB,EAAE7K,KAAAA,EAAOT,IAAAA,EAAMmG,KAAAA,EAAOiD,kBAAgB,EAAqC;AAChG,UAAA,IACE,CAACX,WAAW9G,mBAAAA,IACZwC,2BAAAA,CAA4B1D,OAAOgI,UAAAA,CAAAA,IACnCzI,KAAKgK,uBAAAA,EACL;AACA,YAAA,OAAO7D,KAAAA,CAAMlC,aAAAA,CAAcjE,IAAAA,CAAAA,CAAAA;AAC7B,UAAA;AAEA,UAAA,MAAM6C,QAAQjE,mBAAAA,EAAAA;AACdwF,UAAAA,iBAAAA,CAAkB3D,KAAAA,EAAO,kBAAA,EAAoBoC,KAAAA,EAAO4F,UAAAA,CAAAA;AACpD,UAAA,IAAI,CAAC5F,OAAOG,WAAAA,EAAa;AACvB,YAAA,OAAOmD,MAAMnG,IAAAA,CAAAA;AACf,UAAA;AAEA,UAAA,MAAM6K,aAAAA,GAAgBtH,iBAAAA,CAAkBvD,IAAAA,CAAKwD,KAAAA,EAAOX,KAAAA,CAAAA;AAEpD,UAAA,IAAI4F,WAAWlG,KAAAA,EAAO;AACpBmG,YAAAA,MAAAA,CAAOnG,KAAAA,CAAM,CAAA,qBAAA,EAAwB9B,KAAAA,CAAAA,mDAAAA,CAAAA,EAA4D;AAC/FuC,cAAAA,WAAAA,EAAaH,KAAAA,CAAMG;aACrB,CAAA;AACF,UAAA;AAEA,UAAA,MAAMkG,SAAAA,GAAY;AAChB,YAAA,GAAGjF,cAAcjE,IAAAA,CAAAA;YACjBwD,KAAAA,EAAOqH;AACT,WAAA;AACA,UAAA,OAAO7B,QAAAA,CAAS;AAAEvI,YAAAA,KAAAA;AAAO0F,YAAAA,KAAAA;AAAOiD,YAAAA;WAAiB,EAAGvG,KAAAA,EAAO,oBAAoBqG,SAAAA,CAAAA;AACjF,QAAA,CAAA;AAEA,QAAA,MAAMqC,WAAW,EAAE9K,KAAAA,EAAOT,IAAAA,EAAMmG,KAAAA,EAAOiD,kBAAgB,EAAqC;AAC1F,UAAA,IACE,CAACX,WAAW9G,mBAAAA,IACZwC,2BAAAA,CAA4B1D,OAAOgI,UAAAA,CAAAA,IACnCzI,KAAKgK,uBAAAA,EACL;AACA,YAAA,OAAO7D,KAAAA,CAAMlC,aAAAA,CAAcjE,IAAAA,CAAAA,CAAAA;AAC7B,UAAA;AAEA,UAAA,MAAM6C,QAAQjE,mBAAAA,EAAAA;AACdwF,UAAAA,iBAAAA,CAAkB3D,KAAAA,EAAO,YAAA,EAAcoC,KAAAA,EAAO4F,UAAAA,CAAAA;AAC9C,UAAA,IAAI,CAAC5F,OAAOG,WAAAA,EAAa;AACvB,YAAA,OAAOmD,MAAMnG,IAAAA,CAAAA;AACf,UAAA;AAKA,UAAA,MAAM6K,aAAAA,GAAgBtH,iBAAAA,CAAkBvD,IAAAA,CAAKwD,KAAAA,EAAOX,KAAAA,CAAAA;AAEpD,UAAA,IAAI4F,WAAWlG,KAAAA,EAAO;AACpBmG,YAAAA,MAAAA,CAAOnG,KAAAA,CAAM,CAAA,qBAAA,EAAwB9B,KAAAA,CAAAA,6CAAAA,CAAAA,EAAsD;AACzFuC,cAAAA,WAAAA,EAAaH,KAAAA,CAAMG;aACrB,CAAA;AACF,UAAA;AAEA,UAAA,MAAMkG,SAAAA,GAAY;AAChB,YAAA,GAAGjF,cAAcjE,IAAAA,CAAAA;YACjBwD,KAAAA,EAAOqH;AACT,WAAA;AACA,UAAA,OAAO7B,QAAAA,CAAS;AAAEvI,YAAAA,KAAAA;AAAO0F,YAAAA,KAAAA;AAAOiD,YAAAA;WAAiB,EAAGvG,KAAAA,EAAO,cAAcqG,SAAAA,CAAAA;AAC3E,QAAA,CAAA;AAEA,QAAA,MAAMsC,kBAAkB,EAAE/K,KAAAA,EAAOT,IAAAA,EAAMmG,KAAAA,EAAOiD,kBAAgB,EAAqC;AACjG,UAAA,IACE,CAACX,WAAW9G,mBAAAA,IACZwC,2BAAAA,CAA4B1D,OAAOgI,UAAAA,CAAAA,IACnCzI,KAAKgK,uBAAAA,EACL;AACA,YAAA,OAAO7D,KAAAA,CAAMlC,aAAAA,CAAcjE,IAAAA,CAAAA,CAAAA;AAC7B,UAAA;AAEA,UAAA,MAAM6C,QAAQjE,mBAAAA,EAAAA;AACdwF,UAAAA,iBAAAA,CAAkB3D,KAAAA,EAAO,mBAAA,EAAqBoC,KAAAA,EAAO4F,UAAAA,CAAAA;AACrD,UAAA,IAAI,CAAC5F,OAAOG,WAAAA,EAAa;AACvB,YAAA,OAAOmD,MAAMnG,IAAAA,CAAAA;AACf,UAAA;AAEA,UAAA,MAAM6K,aAAAA,GAAgBtH,iBAAAA,CAAkBvD,IAAAA,CAAKwD,KAAAA,EAAOX,KAAAA,CAAAA;AAEpD,UAAA,IAAI4F,WAAWlG,KAAAA,EAAO;AACpBmG,YAAAA,MAAAA,CAAOnG,KAAAA,CAAM,CAAA,qBAAA,EAAwB9B,KAAAA,CAAAA,oDAAAA,CAAAA,EAA6D;AAChGuC,cAAAA,WAAAA,EAAaH,KAAAA,CAAMG;aACrB,CAAA;AACF,UAAA;AAEA,UAAA,MAAMkG,SAAAA,GAAY;AAChB,YAAA,GAAGjF,cAAcjE,IAAAA,CAAAA;YACjBwD,KAAAA,EAAOqH;AACT,WAAA;AACA,UAAA,OAAO7B,QAAAA,CAAS;AAAEvI,YAAAA,KAAAA;AAAO0F,YAAAA,KAAAA;AAAOiD,YAAAA;WAAiB,EAAGvG,KAAAA,EAAO,qBAAqBqG,SAAAA,CAAAA;AAClF,QAAA,CAAA;AAEA,QAAA,MAAMuC,MAAM,EAAEhL,KAAAA,EAAOT,IAAAA,EAAMmG,KAAAA,EAAOiD,kBAAgB,EAAqC;AACrF,UAAA,IACE,CAACX,WAAW9G,mBAAAA,IACZwC,2BAAAA,CAA4B1D,OAAOgI,UAAAA,CAAAA,IACnCzI,KAAKgK,uBAAAA,EACL;AACA,YAAA,OAAO7D,KAAAA,CAAMlC,aAAAA,CAAcjE,IAAAA,CAAAA,CAAAA;AAC7B,UAAA;AAEA,UAAA,MAAM6C,QAAQjE,mBAAAA,EAAAA;AACdwF,UAAAA,iBAAAA,CAAkB3D,KAAAA,EAAO,OAAA,EAASoC,KAAAA,EAAO4F,UAAAA,CAAAA;AACzC,UAAA,IAAI,CAAC5F,OAAOG,WAAAA,EAAa;AACvB,YAAA,OAAOmD,MAAMnG,IAAAA,CAAAA;AACf,UAAA;AAEA,UAAA,MAAM6K,aAAAA,GAAgBtH,iBAAAA,CAAkBvD,IAAAA,CAAKwD,KAAAA,EAAOX,KAAAA,CAAAA;AAEpD,UAAA,IAAI4F,WAAWlG,KAAAA,EAAO;AACpBmG,YAAAA,MAAAA,CAAOnG,KAAAA,CAAM,CAAA,qBAAA,EAAwB9B,KAAAA,CAAAA,wCAAAA,CAAAA,EAAiD;AACpFuC,cAAAA,WAAAA,EAAaH,KAAAA,CAAMG;aACrB,CAAA;AACF,UAAA;AAEA,UAAA,MAAMkG,SAAAA,GAAY;AAChB,YAAA,GAAGjF,cAAcjE,IAAAA,CAAAA;YACjBwD,KAAAA,EAAOqH;AACT,WAAA;AACA,UAAA,OAAO7B,QAAAA,CAAS;AAAEvI,YAAAA,KAAAA;AAAO0F,YAAAA,KAAAA;AAAOiD,YAAAA;WAAiB,EAAGvG,KAAAA,EAAO,SAASqG,SAAAA,CAAAA;AACtE,QAAA,CAAA;AAEA,QAAA,MAAMwC,UAAU,EAAEjL,KAAAA,EAAOT,IAAAA,EAAMmG,KAAAA,EAAOiD,kBAAgB,EAAqC;AACzF,UAAA,IACE,CAACX,WAAW9G,mBAAAA,IACZwC,2BAAAA,CAA4B1D,OAAOgI,UAAAA,CAAAA,IACnCzI,KAAKgK,uBAAAA,EACL;AACA,YAAA,OAAO7D,KAAAA,CAAMlC,aAAAA,CAAcjE,IAAAA,CAAAA,CAAAA;AAC7B,UAAA;AAEA,UAAA,MAAM6C,QAAQjE,mBAAAA,EAAAA;AACdwF,UAAAA,iBAAAA,CAAkB3D,KAAAA,EAAO,WAAA,EAAaoC,KAAAA,EAAO4F,UAAAA,CAAAA;AAC7C,UAAA,IAAI,CAAC5F,OAAOG,WAAAA,EAAa;AACvB,YAAA,OAAOmD,MAAMnG,IAAAA,CAAAA;AACf,UAAA;AAEA,UAAA,MAAM6K,aAAAA,GAAgBtH,iBAAAA,CAAkBvD,IAAAA,CAAKwD,KAAAA,EAAOX,KAAAA,CAAAA;AAEpD,UAAA,IAAI4F,WAAWlG,KAAAA,EAAO;AACpBmG,YAAAA,MAAAA,CAAOnG,KAAAA,CAAM,CAAA,qBAAA,EAAwB9B,KAAAA,CAAAA,4CAAAA,CAAAA,EAAqD;AACxFuC,cAAAA,WAAAA,EAAaH,KAAAA,CAAMG;aACrB,CAAA;AACF,UAAA;AAEA,UAAA,MAAMkG,SAAAA,GAAY;AAChB,YAAA,GAAGjF,cAAcjE,IAAAA,CAAAA;YACjBwD,KAAAA,EAAOqH;AACT,WAAA;AACA,UAAA,OAAO7B,QAAAA,CAAS;AAAEvI,YAAAA,KAAAA;AAAO0F,YAAAA,KAAAA;AAAOiD,YAAAA;WAAiB,EAAGvG,KAAAA,EAAO,aAAaqG,SAAAA,CAAAA;AAC1E,QAAA,CAAA;AAEA,QAAA,MAAMyC,QAAQ,EAAElL,KAAAA,EAAOT,IAAAA,EAAMmG,KAAAA,EAAOiD,kBAAgB,EAAqC;AACvF,UAAA,IACE,CAACX,WAAW9G,mBAAAA,IACZwC,2BAAAA,CAA4B1D,OAAOgI,UAAAA,CAAAA,IACnCzI,KAAKgK,uBAAAA,EACL;AACA,YAAA,OAAO7D,KAAAA,CAAMlC,aAAAA,CAAcjE,IAAAA,CAAAA,CAAAA;AAC7B,UAAA;AAEA,UAAA,MAAM6C,QAAQjE,mBAAAA,EAAAA;AACdwF,UAAAA,iBAAAA,CAAkB3D,KAAAA,EAAO,SAAA,EAAWoC,KAAAA,EAAO4F,UAAAA,CAAAA;AAC3C,UAAA,IAAI,CAAC5F,OAAOG,WAAAA,EAAa;AACvB,YAAA,OAAOmD,MAAMnG,IAAAA,CAAAA;AACf,UAAA;AAEA,UAAA,MAAM6K,aAAAA,GAAgBtH,iBAAAA,CAAkBvD,IAAAA,CAAKwD,KAAAA,EAAOX,KAAAA,CAAAA;AAEpD,UAAA,IAAI4F,WAAWlG,KAAAA,EAAO;AACpBmG,YAAAA,MAAAA,CAAOnG,KAAAA,CAAM,CAAA,qBAAA,EAAwB9B,KAAAA,CAAAA,0CAAAA,CAAAA,EAAmD;AACtFuC,cAAAA,WAAAA,EAAaH,KAAAA,CAAMG;aACrB,CAAA;AACF,UAAA;AAEA,UAAA,MAAMkG,SAAAA,GAAY;AAChB,YAAA,GAAGjF,cAAcjE,IAAAA,CAAAA;YACjBwD,KAAAA,EAAOqH;AACT,WAAA;AACA,UAAA,OAAO7B,QAAAA,CAAS;AAAEvI,YAAAA,KAAAA;AAAO0F,YAAAA,KAAAA;AAAOiD,YAAAA;WAAiB,EAAGvG,KAAAA,EAAO,WAAWqG,SAAAA,CAAAA;AACxE,QAAA,CAAA;;;;AAMA,QAAA,MAAM9D,OAAO,EAAE3E,KAAAA,EAAOT,IAAAA,EAAMmG,KAAAA,EAAOiD,kBAAgB,EAAqC;AACtF,UAAA,IACE,CAACX,WAAW7G,qBAAAA,IACZuC,2BAAAA,CAA4B1D,OAAOgI,UAAAA,CAAAA,IACnCzI,KAAKgK,uBAAAA,EACL;AACA,YAAA,OAAO7D,KAAAA,CAAMlC,aAAAA,CAAcjE,IAAAA,CAAAA,CAAAA;AAC7B,UAAA;AAEA,UAAA,MAAM6C,QAAQjE,mBAAAA,EAAAA;AACdwF,UAAAA,iBAAAA,CAAkB3D,KAAAA,EAAO,QAAA,EAAUoC,KAAAA,EAAO4F,UAAAA,CAAAA;AAC1C,UAAA,IAAI,CAAC5F,OAAOG,WAAAA,EAAa;AACvB,YAAA,OAAOmD,MAAMnG,IAAAA,CAAAA;AACf,UAAA;AAEA,UAAA,MAAM6K,aAAAA,GAAgBtH,iBAAAA,CAAkBvD,IAAAA,CAAKwD,KAAAA,EAAOX,KAAAA,CAAAA;AAEpD,UAAA,IAAI4F,WAAWlG,KAAAA,EAAO;AACpBmG,YAAAA,MAAAA,CAAOnG,KAAAA,CAAM,CAAA,qBAAA,EAAwB9B,KAAAA,CAAAA,yCAAAA,CAAAA,EAAkD;AACrFuC,cAAAA,WAAAA,EAAaH,KAAAA,CAAMG;aACrB,CAAA;AACF,UAAA;AAEA,UAAA,MAAMkG,SAAAA,GAAY;AAChB,YAAA,GAAGjF,cAAcjE,IAAAA,CAAAA;YACjBwD,KAAAA,EAAOqH;AACT,WAAA;AACA,UAAA,OAAO7B,QAAAA,CAAS;AAAEvI,YAAAA,KAAAA;AAAO0F,YAAAA,KAAAA;AAAOiD,YAAAA;WAAiB,EAAGvG,KAAAA,EAAO,UAAUqG,SAAAA,CAAAA;AACvE,QAAA,CAAA;AAEA,QAAA,MAAM0C,WAAW,EAAEnL,KAAAA,EAAOT,IAAAA,EAAMmG,KAAAA,EAAOiD,kBAAgB,EAAqC;AAC1F,UAAA,IACE,CAACX,WAAW7G,qBAAAA,IACZuC,2BAAAA,CAA4B1D,OAAOgI,UAAAA,CAAAA,IACnCzI,KAAKgK,uBAAAA,EACL;AACA,YAAA,OAAO7D,KAAAA,CAAMlC,aAAAA,CAAcjE,IAAAA,CAAAA,CAAAA;AAC7B,UAAA;AAEA,UAAA,MAAM6C,QAAQjE,mBAAAA,EAAAA;AACdwF,UAAAA,iBAAAA,CAAkB3D,KAAAA,EAAO,YAAA,EAAcoC,KAAAA,EAAO4F,UAAAA,CAAAA;AAC9C,UAAA,IAAI,CAAC5F,OAAOG,WAAAA,EAAa;AACvB,YAAA,OAAOmD,MAAMnG,IAAAA,CAAAA;AACf,UAAA;AAEA,UAAA,MAAM6K,aAAAA,GAAgBtH,iBAAAA,CAAkBvD,IAAAA,CAAKwD,KAAAA,EAAOX,KAAAA,CAAAA;AAEpD,UAAA,IAAI4F,WAAWlG,KAAAA,EAAO;AACpBmG,YAAAA,MAAAA,CAAOnG,KAAAA,CAAM,CAAA,qBAAA,EAAwB9B,KAAAA,CAAAA,6CAAAA,CAAAA,EAAsD;AACzFuC,cAAAA,WAAAA,EAAaH,KAAAA,CAAMG;aACrB,CAAA;AACF,UAAA;AAEA,UAAA,MAAMkG,SAAAA,GAAY;AAChB,YAAA,GAAGjF,cAAcjE,IAAAA,CAAAA;YACjBwD,KAAAA,EAAOqH;AACT,WAAA;AACA,UAAA,OAAO7B,QAAAA,CAAS;AAAEvI,YAAAA,KAAAA;AAAO0F,YAAAA,KAAAA;AAAOiD,YAAAA;WAAiB,EAAGvG,KAAAA,EAAO,cAAcqG,SAAAA,CAAAA;AAC3E,QAAA;AACF;AACF;GACF,CAAA;AASA,EAAA,MAAM2C,OAAAA,GAAUjC,cAAAA;AAChB,EAAA,OAAOiC,QAAQhC,QAAAA,CAAS;IACtBnL,MAAAA,EAAQ;AACNoH,MAAAA,YAAAA,CAAsDgG,OAAgBC,OAAAA,EAAiB;AACrF,QAAA,MAAMC,SAAS,IAAA,CAAKC,OAAAA;AACpB,QAAA,IAAI,CAACD,MAAAA,EAAQ;AACX,UAAA,MAAM,IAAI9L,MAAM,gFAAA,CAAA;AAClB,QAAA;AACA,QAAA,IAAIqK,KAAAA,CAAMC,OAAAA,CAAQsB,KAAAA,CAAAA,EAAQ;AACxB,UAAA,MAAMjJ,QAAQjE,mBAAAA,EAAAA;AACd,UAAA,MAAMmJ,YACJgB,gBAAAA,IAAoBlG,KAAAA,EAAOG,cAAc+D,gCAAAA,CAAiClE,KAAAA,EAAO4F,UAAAA,CAAAA,GAAclJ,MAAAA;AACjG,UAAA,IAAIwI,SAAAA,EAAW;AACb,YAAA,MAAMmE,aAAapD,8BAAAA,CAA+B3D,iBAAAA,CAAkB4C,UAAUZ,GAAAA,EAAG,GAAKY,UAAUd,MAAM,CAAA;AACtG,YAAA,OAAO+E,OACJlG,YAAAA,CAAa;AAACoG,cAAAA,UAAAA;AAAeJ,cAAAA,GAAAA;AAAQC,aAAAA,EAAAA,OAAAA,CAAAA,CACrCI,IAAAA,CAAK,CAACC,OAAAA,KAAa7B,KAAAA,CAAMC,OAAAA,CAAQ4B,OAAAA,CAAAA,GAAWA,OAAAA,CAAQ1G,KAAAA,CAAM,CAAA,CAAA,GAAK0G,OAAAA,CAAAA;AACpE,UAAA;AACF,QAAA;AAGA,QAAA,IAAI,OAAON,UAAU,UAAA,EAAY;AAG/B,UAAA,MAAMO,QAAAA,GAAWP,KAAAA;AACjB,UAAA,OAAOjD,mBAAAA,CAAoByD,IAAAA,CACzB,IAAA,EACA,OAAOvG,EAAAA,KAAAA;AACL,YAAA,MAAMpH,KAAAA,GAAQ;cAAEsB,MAAAA,EAAQ;AAAK,aAAA;AAC7B,YAAA,IAAI;AACF,cAAA,OAAO,MAAMoM,QAAAA,CAAS5N,sBAAAA,CAAuBsH,EAAAA,EAAIpH,KAAAA,EAAOC,mBAAAA,CAAAA,CAAAA;YAC1D,CAAA,SAAA;AACED,cAAAA,KAAAA,CAAMsB,MAAAA,GAAS,KAAA;AACjB,YAAA;AACF,UAAA,CAAA,EACA8L,OAAAA,CAAAA;AAEJ,QAAA;AACA,QAAA,OAAOlD,mBAAAA,CAAoByD,IAAAA,CAAK,IAAA,EAAMR,KAAAA,EAAOC,OAAAA,CAAAA;AAC/C,MAAA;AACF;GACF,CAAA;AACF;AApsBgBxD,MAAAA,CAAAA,qBAAAA,EAAAA,uBAAAA,CAAAA","file":"chunk-3Z2VRCT6.js","sourcesContent":["import { AsyncLocalStorage } from 'node:async_hooks';\nimport type { WorkspaceContext } from './workspace-extension.js';\n\ninterface TransactionScope {\n  active: boolean;\n}\nconst contextFields = [\n  'workspaceId',\n  'tenantId',\n  'actorId',\n  'actorType',\n  'organizationId',\n  'projectId',\n  'appId',\n  'onBehalfOf',\n] as const;\n\nfunction sameContext(a: WorkspaceContext, b: WorkspaceContext): boolean {\n  return contextFields.every((field) => a[field] === b[field]);\n}\n\n/**\n * Bun can assimilate a returned lazy thenable outside its async callback's ALS\n * scope. Bind only consumption of native PrismaPromises, never their creation:\n * the query stays cold and retains Prisma's brand/spec/continuation machinery.\n * This facade belongs to exactly one interactive callback, not the root client.\n */\nexport function bindTransactionContext<T extends object>(\n  client: T,\n  scope: TransactionScope,\n  getWorkspaceContext: () => WorkspaceContext | undefined\n): T {\n  const delegates = new WeakMap<object, object>();\n  function bindOperation(value: unknown): unknown {\n    if (!value || typeof value !== 'object' || Reflect.get(value, Symbol.toStringTag) !== 'PrismaPromise') return value;\n    const sourceContext = getWorkspaceContext();\n    const captured = sourceContext ? { ...sourceContext } : undefined;\n    const restore = AsyncLocalStorage.snapshot();\n    return new Proxy(value, {\n      get(target, property, receiver) {\n        const original = Reflect.get(target, property, receiver);\n        if (typeof original !== 'function' || property === 'constructor') return original;\n        return (...args: unknown[]) => {\n          if (!scope.active)\n            throw new Error('[WorkspaceExtension] Lazy operation belongs to a completed interactive transaction.');\n          // snapshot() keeps ALS store references. Retain identity values too,\n          // so mutating the original request object cannot retarget cold work.\n          if (sourceContext && captured && !sameContext(sourceContext, captured)) {\n            throw new Error('[WorkspaceExtension] Captured workspace/actor context changed before lazy execution.');\n          }\n          const current = getWorkspaceContext();\n          if (captured && current && !sameContext(captured, current)) {\n            throw new Error('[WorkspaceExtension] Lazy operation cannot cross workspace/actor context.');\n          }\n          // Interactive operations already belong to their native transaction.\n          // Root batch promises are untouched; moving an itx promise into a new\n          // batch must not replace that transaction or restore an old identity.\n          if (property === 'requestTransaction')\n            throw new Error('[WorkspaceExtension] Interactive operation cannot be rebound to another transaction.');\n          return restore(() => {\n            const result: unknown = Reflect.apply(original, target, args);\n            // Fluent relation accessors return another cold PrismaPromise.\n            // Capture that continuation too, without starting either query.\n            return ['then', 'catch', 'finally'].includes(String(property)) ? result : bindOperation(result);\n          });\n        };\n      },\n    });\n  }\n  function facade(target: object, model: boolean): object {\n    const existing = delegates.get(target);\n    if (existing) return existing;\n    const proxy = new Proxy(target, {\n      get(object, property, receiver) {\n        const value: unknown = Reflect.get(object, property, receiver);\n        if (\n          typeof value === 'function' &&\n          (model || (typeof property === 'string' && !property.startsWith('_') && property !== 'constructor'))\n        ) {\n          return (...args: unknown[]) => bindOperation(Reflect.apply(value, object, args));\n        }\n        // Public custom client/model methods keep their native receiver; only\n        // returned PrismaPromises are bound. Prisma model delegates are objects. Internal\n        // metadata, symbols, fields, and the non-thenable client stay untouched.\n        if (\n          !model &&\n          typeof property === 'string' &&\n          !property.startsWith('_') &&\n          !property.startsWith('$') &&\n          value &&\n          typeof value === 'object' &&\n          typeof Reflect.get(value, 'findMany') === 'function'\n        ) {\n          return facade(value, true);\n        }\n        return value;\n      },\n    });\n    delegates.set(target, proxy);\n    return proxy;\n  }\n  return facade(client, false) as T;\n}\n","/**\n * Prisma Workspace Extension\n *\n * Automatically injects workspaceId into ALL Prisma operations using\n * request-scoped context from AsyncLocalStorage:\n *\n * **Write operations** (create, createMany, update, upsert):\n * - Auto-populates `workspaceId`, `tenantId`, `createdBy`, `updatedBy`, `context` JSON\n *\n * **Read operations** (findMany, findFirst, findUnique, count, aggregate, groupBy):\n * - Auto-injects `workspaceId` into the `where` clause for workspace isolation\n *\n * **Delete operations** (delete, deleteMany):\n * - Auto-injects `workspaceId` into the `where` clause to prevent cross-workspace deletion\n *\n * **Update where clause** (update, updateMany):\n * - Auto-injects `workspaceId` into the `where` clause to prevent cross-workspace updates\n *\n * **How it works:**\n * 1. The GraphQL server's buildContext extracts workspaceId from x-workspace-id header\n * 2. The workspace context store (AsyncLocalStorage) holds the current request's workspace info\n * 3. This Prisma extension intercepts ALL operations and auto-injects workspaceId\n *\n * **What gets auto-populated on writes:**\n * - `workspaceId` field (String or String?) - set from context if not explicitly provided\n * - `context` field (Json) - merged with workspace/actor info if not explicitly provided\n * - `tenantId` field (String or String?) - set from context if not explicitly provided\n * - `createdBy` / `updatedBy` fields - set from actor context if not explicitly provided\n *\n * **What gets auto-injected on reads/updates/deletes:**\n * - `workspaceId` in the `where` clause - ensures queries only access data within the workspace\n *\n * **Opt-out:**\n * - Explicitly providing `workspaceId` in the where/data will override auto-injection\n * - Pass `_skipWorkspaceInjection: true` in the query args to skip entirely\n * - Set `enableReadIsolation: false` in config to disable read-side injection only\n * - Add model names to `excludeModels` to skip specific models\n *\n * @module prisma/workspace-extension\n * @category Database\n */\n\nimport { AsyncLocalStorage } from 'node:async_hooks';\nimport { logger } from '../logger/index.js';\nimport type { InputJsonValue } from './context.js';\nimport { bindTransactionContext } from './transaction-context.js';\n\n// ============================================================================\n// Workspace Context Store (AsyncLocalStorage)\n// ============================================================================\n\n/**\n * Workspace context for the current request scope\n */\nexport interface WorkspaceContext {\n  /** Workspace ID (from x-workspace-id header) */\n  workspaceId?: string;\n  /** Tenant ID (from x-tenant-id header or derived from workspace) */\n  tenantId?: string;\n  /** Actor ID (user/service/app performing the operation) */\n  actorId?: string;\n  /** Actor type (user, app, service, super_admin) */\n  actorType?: string;\n  /** Organization ID */\n  organizationId?: string;\n  /** Project ID */\n  projectId?: string;\n  /** App ID */\n  appId?: string;\n  /** On behalf of actor ID (for consent-based delegation) */\n  onBehalfOf?: string;\n}\n\n/**\n * AsyncLocalStorage for workspace context\n * This is separate from the SDK's general ContextManager to allow\n * fine-grained control over workspace-specific context propagation.\n */\nconst workspaceContextStore = new AsyncLocalStorage<WorkspaceContext>();\n\n/**\n * Fallback context for environments where AsyncLocalStorage.enterWith()\n * doesn't propagate across async boundaries (e.g., Bun + GraphQL Yoga).\n *\n * IMPORTANT: This is NOT request-isolated — it's a module-level singleton.\n * It works for single-request-at-a-time scenarios but could race under\n * concurrent requests. The ALS is the primary mechanism; this is a fallback.\n */\nlet fallbackContext: WorkspaceContext | undefined;\n\n/**\n * Set workspace context for the current async scope.\n * Call this in your GraphQL context builder or middleware.\n *\n * Uses AsyncLocalStorage.enterWith() as the primary mechanism,\n * with a module-level fallback for runtimes where enterWith()\n * doesn't propagate through all async chains (e.g., Bun).\n *\n * @param context - The workspace context for this request\n *\n * @example\n * ```typescript\n * // In your server's buildContext:\n * import { setWorkspaceContext } from '@burdenoff/be-sdk/prisma';\n *\n * buildContext: async (defaultContext) => {\n *   setWorkspaceContext({\n *     workspaceId: defaultContext.workspace?.id,\n *     tenantId: defaultContext.tenant?.id,\n *     actorId: defaultContext.actor?.id,\n *     actorType: defaultContext.actor?.type,\n *     organizationId: defaultContext.organization?.id,\n *   });\n *   return defaultContext;\n * }\n * ```\n */\nexport function setWorkspaceContext(context: WorkspaceContext): void {\n  workspaceContextStore.enterWith(context);\n  fallbackContext = context;\n}\n\n/**\n * Get the current workspace context from AsyncLocalStorage.\n * Falls back to module-level context if ALS returns undefined\n * (can happen in Bun where enterWith() doesn't propagate through\n * some async chains like GraphQL Yoga's execution pipeline).\n *\n * @returns The current workspace context, or undefined if not set\n */\nexport function getWorkspaceContext(): WorkspaceContext | undefined {\n  return workspaceContextStore.getStore() ?? fallbackContext;\n}\n\n/**\n * Run a function with a specific workspace context.\n * The context is isolated to this execution and its children.\n *\n * @param context - The workspace context\n * @param fn - The function to run\n * @returns The result of the function\n *\n * @example\n * ```typescript\n * const result = await withWorkspaceContext(\n *   { workspaceId: 'ws-123', actorId: 'user-456' },\n *   async () => {\n *     // All Prisma operations in here will auto-inject workspaceId\n *     return await prisma.tag.create({ data: { name: 'test' } });\n *   }\n * );\n * ```\n */\nexport async function withWorkspaceContext<T>(context: WorkspaceContext, fn: () => Promise<T>): Promise<T> {\n  return workspaceContextStore.run(context, fn);\n}\n\n/**\n * Run a synchronous function with a specific workspace context.\n */\nexport function withWorkspaceContextSync<T>(context: WorkspaceContext, fn: () => T): T {\n  return workspaceContextStore.run(context, fn);\n}\n\n// ============================================================================\n// Extension Configuration\n// ============================================================================\n\n/**\n * Configuration for the workspace extension\n */\nexport interface WorkspaceExtensionConfig {\n  /**\n   * Enable automatic workspaceId injection on create/update\n   * @default true\n   */\n  enabled?: boolean;\n\n  /**\n   * Enable automatic workspaceId injection on read operations\n   * (findMany, findFirst, findUnique, findFirstOrThrow, findUniqueOrThrow,\n   *  count, aggregate, groupBy)\n   *\n   * When enabled, every read query automatically includes `workspaceId`\n   * in the `where` clause, preventing cross-workspace data leakage.\n   *\n   * @default true\n   */\n  enableReadIsolation?: boolean;\n\n  /**\n   * Enable automatic workspaceId injection on delete operations\n   * (delete, deleteMany)\n   *\n   * When enabled, every delete operation automatically includes `workspaceId`\n   * in the `where` clause, preventing cross-workspace deletion.\n   *\n   * @default true\n   */\n  enableDeleteIsolation?: boolean;\n\n  /**\n   * Enable automatic workspaceId injection into update/updateMany `where` clauses.\n   *\n   * When enabled, update operations automatically include `workspaceId`\n   * in the `where` clause in addition to the `data` injection,\n   * preventing cross-workspace updates.\n   *\n   * @default true\n   */\n  enableUpdateWhereIsolation?: boolean;\n\n  /**\n   * Automatically populate the `context` JSON field with workspace/actor info\n   * @default true\n   */\n  populateContextJson?: boolean;\n\n  /**\n   * Automatically populate `createdBy` field on create operations\n   * @default true\n   */\n  populateCreatedBy?: boolean;\n\n  /**\n   * Automatically populate `updatedBy` field on update operations\n   * @default true\n   */\n  populateUpdatedBy?: boolean;\n\n  /**\n   * Automatically populate `tenantId` field from context\n   * @default false (tenantId is typically derived from workspaceId at the DB level)\n   */\n  populateTenantId?: boolean;\n\n  /**\n   * Automatically populate the `onBehalfOf` field on create operations\n   * (consent-based delegation tracking — defaults to the acting actor when no\n   * delegation is present).\n   *\n   * Unlike `populateContextJson`/`populateCreatedBy`/`populateUpdatedBy`, this\n   * has no per-model opt-out other than `excludeModels` (which also disables\n   * RLS GUC tagging and isolation for that model). Set to `false` for services\n   * whose Prisma models don't carry an `onBehalfOf` column — otherwise every\n   * create on those models throws `Unknown argument onBehalfOf` from Prisma's\n   * client-side validation.\n   *\n   * @default true\n   */\n  populateOnBehalfOf?: boolean;\n\n  /**\n   * Models to exclude from auto-injection (both reads and writes).\n   * Use this for models that intentionally don't have workspaceId.\n   *\n   * Common exclusions: system tables, infra tables, global reference data.\n   *\n   * @default []\n   */\n  excludeModels?: string[];\n\n  /**\n   * Models to exclude from read isolation only.\n   * These models will still get write-side injection (workspaceId on create)\n   * but reads will NOT have workspaceId auto-injected into `where`.\n   *\n   * Use this for child/join tables where workspace scoping is inherited\n   * through parent relations, or for models queried by ID that don't\n   * have a workspaceId column.\n   *\n   * @default []\n   */\n  excludeModelsFromReadIsolation?: string[];\n\n  /**\n   * When true, throws an error if workspaceId is missing from context\n   * for any non-excluded model operation. This prevents silent\n   * workspace-unscoped queries that could leak data across workspaces.\n   *\n   * When false, operations without workspace context proceed without\n   * workspaceId injection (legacy behavior).\n   *\n   * @default true\n   */\n  strictMode?: boolean;\n\n  /**\n   * Operations that are allowed without workspace context even in strict mode.\n   * Use `Model.operation` format (e.g., `['Workspace.create', 'RevokedToken.findMany']`).\n   *\n   * Valid operation names: create, createMany, createManyAndReturn, update, updateMany,\n   * upsert, findMany, findFirst, findFirstOrThrow, findUnique, findUniqueOrThrow,\n   * count, aggregate, groupBy, delete, deleteMany.\n   *\n   * @default []\n   */\n  allowedUnguardedOperations?: string[];\n\n  /**\n   * Log injection events (useful for debugging)\n   * @default false\n   */\n  debug?: boolean;\n\n  /**\n   * Tag the PostgreSQL connection with workspace attribution for pg_stat_activity visibility.\n   *\n   * When enabled, the first DB operation per workspace context sets:\n   *   `application_name = 'svc=<SERVICE_NAME>;ws=<workspaceId>'`\n   *\n   * This makes workspace-level query attribution visible in pg_stat_activity,\n   * pg_locks, auto_explain, and monitoring tools without any schema changes.\n   * Subsequent operations in the same request are deduplicated via WeakSet,\n   * costing ~0 overhead after the first round-trip per request context.\n   *\n   * NOTE: This is a session-level SET so attribution may drift across ops\n   * that reuse the same pooled connection from different requests. Use for\n   * aggregate observability, not per-query forensics.\n   *\n   * @default false\n   */\n  enableApplicationNameTagging?: boolean;\n\n  /**\n   * Set the `app.workspace_id` GUC for Row Level Security enforcement.\n   *\n   * When enabled, every workspace-scoped operation runs with\n   *   `SET LOCAL app.workspace_id = '<workspaceId>'`\n   * in effect (see \"Transactions\" below for how that is scoped).\n   *\n   * RLS policies using `current_setting('app.workspace_id', true)` then filter\n   * rows by workspace, providing a defense-in-depth backstop to the application-\n   * layer workspaceId injection in the WHERE clause.\n   *\n   * Pair with migrations that run per table:\n   *   `ALTER TABLE t ENABLE ROW LEVEL SECURITY;`\n   *   `CREATE POLICY ws_isolation ON t\n   *      USING (workspace_id = current_setting('app.workspace_id', true))\n   *      WITH CHECK (workspace_id = current_setting('app.workspace_id', true));`\n   *\n   * Fail-closed semantics: if the GUC is unset (NULL from missing_ok=true),\n   * `workspace_id = NULL` is always false, so RLS returns no rows — leaking\n   * nothing rather than everything.\n   *\n   * Transactions: a standalone operation runs in its own short transaction\n   * (`SET LOCAL` + the operation). An operation on the `tx` client inside a\n   * caller's `$transaction(async (tx) => …)`, including raw SQL, runs in the\n   * caller's transaction, after one `set_config(..., true)` per transaction and\n   * workspace, so it is atomic with the rest of that transaction and its row\n   * locks are held until commit. `$transaction([...])` batches get the same\n   * statement prepended (BOFF-8874).\n   *\n   * @default false\n   */\n  enableRlsGucTagging?: boolean;\n}\n\n/**\n * Default configuration. Exported so consumers/tests can spread over the\n * real defaults (`{ ...defaultWorkspaceExtensionConfig, populateOnBehalfOf: false }`)\n * instead of re-declaring every field.\n */\nexport const defaultWorkspaceExtensionConfig: Required<WorkspaceExtensionConfig> = {\n  enabled: true,\n  enableReadIsolation: true,\n  enableDeleteIsolation: true,\n  enableUpdateWhereIsolation: true,\n  populateContextJson: true,\n  populateCreatedBy: true,\n  populateUpdatedBy: true,\n  populateTenantId: false,\n  populateOnBehalfOf: true,\n  excludeModels: [],\n  excludeModelsFromReadIsolation: [],\n  strictMode: true,\n  allowedUnguardedOperations: [],\n  debug: false,\n  enableApplicationNameTagging: false,\n  enableRlsGucTagging: false,\n};\n\n// ============================================================================\n// Data Injection Helpers\n// ============================================================================\n\n/**\n * Check if a field exists in the data object (including being set to null/undefined explicitly)\n */\nfunction hasField(data: Record<string, unknown>, field: string): boolean {\n  return field in data;\n}\n\n/**\n * Inject workspace-related fields into create data.\n *\n * Exported (alongside `injectWhereWorkspaceId`) so consumers can unit-test\n * exactly what a given `WorkspaceExtensionConfig` injects for their own\n * Prisma schema — in particular, to verify `populateOnBehalfOf: false` /\n * `populateContextJson: false` actually suppress `onBehalfOf`/`context`\n * before wiring the extension against models that don't have those columns.\n */\nexport function injectCreateFields(\n  data: Record<string, unknown>,\n  wsCtx: WorkspaceContext,\n  config: Required<WorkspaceExtensionConfig>\n): Record<string, unknown> {\n  const injected = { ...data };\n\n  // Inject workspaceId if not already provided\n  if (wsCtx.workspaceId && !hasField(injected, 'workspaceId')) {\n    injected['workspaceId'] = wsCtx.workspaceId;\n  }\n\n  // Inject tenantId if configured and not already provided\n  if (config.populateTenantId && wsCtx.tenantId && !hasField(injected, 'tenantId')) {\n    injected['tenantId'] = wsCtx.tenantId;\n  }\n\n  // Inject createdBy if configured and not already provided\n  if (config.populateCreatedBy && wsCtx.actorId && !hasField(injected, 'createdBy')) {\n    injected['createdBy'] = wsCtx.actorId;\n  }\n\n  // Inject updatedBy on create as well (initial value)\n  if (config.populateUpdatedBy && wsCtx.actorId && !hasField(injected, 'updatedBy')) {\n    injected['updatedBy'] = wsCtx.actorId;\n  }\n\n  // Inject onBehalfOf (for consent-based delegation tracking)\n  // If onBehalfOf is in context (from consent), use it; otherwise defaults to actorId (self-action)\n  if (config.populateOnBehalfOf && wsCtx.onBehalfOf && !hasField(injected, 'onBehalfOf')) {\n    injected['onBehalfOf'] = wsCtx.onBehalfOf;\n  } else if (config.populateOnBehalfOf && wsCtx.actorId && !hasField(injected, 'onBehalfOf')) {\n    // Default to actorId if no delegation (self-action)\n    injected['onBehalfOf'] = wsCtx.actorId;\n  }\n\n  // Populate context JSON field\n  if (config.populateContextJson && !hasField(injected, 'context')) {\n    const contextJson = buildContextJsonFromWorkspaceContext(wsCtx);\n    if (contextJson) {\n      injected['context'] = contextJson;\n    }\n  }\n\n  return injected;\n}\n\n/**\n * Inject workspace-related fields into update data\n */\nfunction injectUpdateFields(\n  data: Record<string, unknown>,\n  wsCtx: WorkspaceContext,\n  config: Required<WorkspaceExtensionConfig>\n): Record<string, unknown> {\n  const injected = { ...data };\n\n  // Inject updatedBy if configured and not already provided\n  if (config.populateUpdatedBy && wsCtx.actorId && !hasField(injected, 'updatedBy')) {\n    injected['updatedBy'] = wsCtx.actorId;\n  }\n\n  // Note: We intentionally do NOT auto-inject workspaceId on updates\n  // because updates target existing records (workspaceId is immutable after creation)\n  // and changing it would be a data integrity issue.\n\n  return injected;\n}\n\n/**\n * Inject workspaceId into a where clause.\n * Only injects if workspaceId is available in context and not already present in where.\n *\n * For operations that may not have a where clause (e.g., findMany without filters),\n * creates a new where object with just workspaceId.\n */\nfunction injectWhereClause(\n  where: Record<string, unknown> | undefined,\n  wsCtx: WorkspaceContext\n): Record<string, unknown> | undefined {\n  if (!wsCtx.workspaceId) return where;\n\n  if (!where) {\n    // No where clause exists, create one with just workspaceId\n    return { workspaceId: wsCtx.workspaceId };\n  }\n\n  // Only inject if not already present\n  if (!hasField(where, 'workspaceId')) {\n    return { ...where, workspaceId: wsCtx.workspaceId };\n  }\n\n  return where;\n}\n\n/**\n * Build context JSON from workspace context\n */\nfunction buildContextJsonFromWorkspaceContext(wsCtx: WorkspaceContext): InputJsonValue | undefined {\n  const context: Record<string, string> = {};\n\n  if (wsCtx.workspaceId) context['workspaceId'] = wsCtx.workspaceId;\n  if (wsCtx.actorId) context['userId'] = wsCtx.actorId;\n  if (wsCtx.organizationId) context['organizationId'] = wsCtx.organizationId;\n  if (wsCtx.projectId) context['projectId'] = wsCtx.projectId;\n  if (wsCtx.appId) context['appId'] = wsCtx.appId;\n\n  return Object.keys(context).length > 0 ? context : undefined;\n}\n\n/**\n * Inject workspaceId into where clause for read/update/delete operations.\n * This is a utility function exported for services that want to manually\n * add workspace scoping to their queries.\n *\n * @param where - The existing where clause\n * @param wsCtx - The workspace context (or auto-detected from AsyncLocalStorage)\n * @returns The where clause with workspaceId injected if not already present\n *\n * @example\n * ```typescript\n * import { injectWhereWorkspaceId, getWorkspaceContext } from '@burdenoff/be-sdk/prisma';\n *\n * const wsCtx = getWorkspaceContext();\n * const where = injectWhereWorkspaceId({ status: 'ACTIVE' }, wsCtx);\n * // Result: { status: 'ACTIVE', workspaceId: 'ws-123' }\n * ```\n */\nexport function injectWhereWorkspaceId(\n  where: Record<string, unknown> | undefined,\n  wsCtx?: WorkspaceContext\n): Record<string, unknown> | undefined {\n  const ctx = wsCtx ?? getWorkspaceContext();\n  if (!where || !ctx?.workspaceId) return where;\n\n  // Only inject if not already present\n  if (!hasField(where, 'workspaceId')) {\n    return { ...where, workspaceId: ctx.workspaceId };\n  }\n\n  return where;\n}\n\n/**\n * Remove the _skipWorkspaceInjection flag from args before passing to Prisma.\n * Using a dedicated function avoids ESLint unused-variable warnings from destructuring.\n */\nfunction stripSkipFlag<T extends Record<string, unknown>>(args: T): Omit<T, '_skipWorkspaceInjection'> {\n  const cleaned = { ...args };\n  delete (cleaned as Record<string, unknown>)['_skipWorkspaceInjection'];\n  return cleaned;\n}\n\n/**\n * Check if a model should be excluded from read isolation.\n * A model is excluded if it's in excludeModels OR excludeModelsFromReadIsolation.\n */\nfunction isExcludedFromReadIsolation(model: string, config: Required<WorkspaceExtensionConfig>): boolean {\n  return config.excludeModels.includes(model) || config.excludeModelsFromReadIsolation.includes(model);\n}\n\n// ============================================================================\n// Strict Mode Enforcement\n// ============================================================================\n\n/**\n * Enforce strict mode: throw if workspace context is missing and the operation\n * is not explicitly allowed to run without it.\n *\n * @returns true if the operation should proceed without workspace injection (non-strict or allowed)\n * @throws Error if strict mode is enabled and the operation is not allowed\n */\nfunction enforceStrictMode(\n  model: string,\n  operation: string,\n  wsCtx: WorkspaceContext | undefined,\n  config: Required<WorkspaceExtensionConfig>\n): void {\n  // If workspace context has a workspaceId, nothing to enforce\n  if (wsCtx?.workspaceId) return;\n\n  // If strict mode is off, allow silently\n  if (!config.strictMode) return;\n\n  // Check if this specific operation is allowed without workspace context\n  const opKey = `${model}.${operation}`;\n  if (config.allowedUnguardedOperations.includes(opKey)) return;\n\n  // Strict mode violation — throw\n  throw new Error(\n    `[WorkspaceExtension] Workspace context required for ${model}.${operation}. ` +\n      `No workspaceId found in request context. To bypass, either: ` +\n      `(1) add \"${model}\" to excludeModels, ` +\n      `(2) add \"${opKey}\" to allowedUnguardedOperations, or ` +\n      `(3) pass _skipWorkspaceInjection: true in the query args.`\n  );\n}\n\n// ============================================================================\n// Prisma Extension\n// ============================================================================\n\n/**\n * Standard args shape for operations with a `where` clause\n */\ninterface WhereArgs {\n  where?: Record<string, unknown>;\n  _skipWorkspaceInjection?: boolean;\n  [key: string]: unknown;\n}\n\n/**\n * Standard handler params from Prisma $extends\n */\ninterface ExtensionHandlerParams<TArgs> {\n  model: string;\n  args: TArgs;\n  query: (args: unknown) => Promise<unknown>;\n  /** Prisma-internal request params; `transaction` identifies a caller transaction. */\n  __internalParams?: PrismaQueryInternalParams;\n}\n\n/** Handler params for top-level raw operations (`$queryRaw`, `$executeRaw`, …). */\ninterface RawOperationHandlerParams {\n  args: unknown;\n  query: (args: unknown) => Promise<unknown>;\n  __internalParams?: PrismaQueryInternalParams;\n}\n\n/** Client surface the `$transaction` wrapper delegates to (the client one layer down). */\ntype TransactionDelegate = {\n  $transaction: (input: unknown, options?: unknown) => Promise<unknown>;\n};\n\n/**\n * Add workspace extension to a Prisma client.\n *\n * This extension provides comprehensive workspace isolation by automatically\n * injecting workspaceId into ALL Prisma operations:\n *\n * **Writes**: Auto-populates workspaceId, tenantId, createdBy, updatedBy, context JSON\n * **Reads**: Auto-injects workspaceId into where clause (findMany, findFirst, etc.)\n * **Updates**: Auto-injects workspaceId into where clause + updatedBy into data\n * **Deletes**: Auto-injects workspaceId into where clause\n *\n * **Chain order matters**: Apply this extension AFTER the graph extension\n * (handled automatically by createDatabaseClient).\n *\n * @param baseClient - The Prisma client to extend\n * @param config - Extension configuration\n * @returns Extended Prisma client with workspace auto-injection\n *\n * @example\n * ```typescript\n * import { PrismaClient } from './generated/prisma/client.js';\n * import { addWorkspaceExtension } from '@burdenoff/be-sdk/prisma';\n *\n * const baseClient = new PrismaClient({ adapter });\n * const client = addWorkspaceExtension(baseClient, {\n *   populateContextJson: true,\n *   populateCreatedBy: true,\n *   enableReadIsolation: true,\n *   debug: process.env.NODE_ENV === 'development',\n *   excludeModels: ['CircuitBreakerState', 'SchedulerState'],\n *   excludeModelsFromReadIsolation: ['Permission', 'RbacResourceType'],\n * });\n * ```\n */\n// ============================================================================\n// Connection Tagging (Phase 0.2)\n// ============================================================================\n\n/** Minimal Prisma raw-exec surface needed for SET application_name */\ntype RawPrismaForTagging = {\n  $executeRawUnsafe: (query: string, ...values: unknown[]) => Promise<number>;\n};\n\n/**\n * WeakSet of contexts that have already had the connection tagged this request.\n * WorkspaceContext objects live only for the duration of a request, so entries\n * are automatically GC'd when the context goes out of scope — no manual cleanup.\n */\nconst taggedContexts = new WeakSet<WorkspaceContext>();\n\n/**\n * Tag the current Postgres connection with workspace attribution (once per context).\n * Sets `application_name = 'svc=<name>;ws=<workspaceId>'` at the session level.\n * Non-fatal: tagging failures are swallowed so the main operation still proceeds.\n *\n * @internal Exported for unit testing only — do not call from product code.\n */\nexport async function maybeTagConnection(rawPrisma: RawPrismaForTagging, wsCtx: WorkspaceContext): Promise<void> {\n  if (taggedContexts.has(wsCtx)) return;\n  taggedContexts.add(wsCtx);\n  // Strip non-safe chars; workspace IDs are UUIDs/CUIDs, service names are kebab-case\n  const safeSvc = (process.env['SERVICE_NAME'] ?? 'svc').replace(/[^a-zA-Z0-9\\-_]/g, '');\n  const safeWs = (wsCtx.workspaceId ?? '').replace(/[^a-zA-Z0-9\\-_]/g, '');\n  const tag = `svc=${safeSvc};ws=${safeWs}`;\n  try {\n    await rawPrisma.$executeRawUnsafe(`SET application_name = '${tag}'`);\n  } catch {\n    // Retry on the next operation if this one failed\n    taggedContexts.delete(wsCtx);\n  }\n}\n\n// ============================================================================\n// RLS GUC Tagging (Phase 3)\n// ============================================================================\n\n/**\n * WeakSet of contexts that have already had the RLS GUC set this request.\n */\nconst rlsTaggedContexts = new WeakSet<WorkspaceContext>();\n\n/**\n * Set `app.workspace_id` GUC for RLS enforcement (once per context, session-level).\n *\n * When set, RLS policies using `current_setting('app.workspace_id', true)` filter\n * rows to the current workspace. Non-fatal: failures are swallowed and retried on\n * the next operation via WeakSet entry removal.\n *\n * NOT used by the extension's operation handlers below (see\n * `runOperationWithRlsGuc`) — session-level `SET` is unsafe once traffic is routed\n * through PgBouncer in transaction-pooling mode (see that function's doc comment\n * for the full incident writeup, BOFF-5488). Kept as a standalone export, still\n * unit tested, for any caller that genuinely runs on an unpooled/session-pooled\n * connection where session-level `SET` is sufficient.\n *\n * @internal Exported for unit testing only — do not call from product code.\n */\nexport async function maybeSetRlsGuc(rawPrisma: RawPrismaForTagging, wsCtx: WorkspaceContext): Promise<void> {\n  if (rlsTaggedContexts.has(wsCtx)) return;\n  rlsTaggedContexts.add(wsCtx);\n  // Allow alphanumeric, hyphens, underscores — CUID/UUID safe, prevents SQL injection\n  const safeWs = (wsCtx.workspaceId ?? '').replace(/[^a-zA-Z0-9\\-_]/g, '');\n  try {\n    await rawPrisma.$executeRawUnsafe(`SET app.workspace_id = '${safeWs}'`);\n  } catch {\n    // Retry on the next operation if this one failed\n    rlsTaggedContexts.delete(wsCtx);\n  }\n}\n\n/**\n * A Prisma interactive-transaction client (`tx` inside `$transaction(async (tx) =>\n * …)`), typed with just enough surface for `runOperationWithRlsGuc`: raw SQL\n * execution, plus one delegate per model keyed by its Prisma Client property name\n * (e.g. `customer`, `driver`). The index signature is `unknown` (not a concrete\n * delegate shape) because this helper is generic across every model in the schema\n * — callers narrow and verify the specific delegate/method they need at runtime.\n */\ntype PrismaTxForRlsGuc = {\n  $executeRawUnsafe: (query: string, ...values: unknown[]) => Promise<number>;\n  [modelClientProperty: string]: unknown;\n};\n\n/** Minimal Prisma client surface needed to open an interactive transaction. */\ntype RawPrismaForRlsTransaction = {\n  $transaction: <TResult>(fn: (tx: PrismaTxForRlsGuc) => Promise<TResult>) => Promise<TResult>;\n};\n\n/**\n * Prisma DMMF model name (e.g. `Customer`) -> Prisma Client delegate property\n * (e.g. `customer`). Matches Prisma's own client-generation rule: lower-case the\n * first character, leave the rest untouched.\n */\nfunction modelToClientProperty(model: string): string {\n  return model.length > 0 ? model.charAt(0).toLowerCase() + model.slice(1) : model;\n}\n\n/**\n * Run a single Prisma operation with `app.workspace_id` set as a\n * **transaction-scoped** (`SET LOCAL`) GUC immediately ahead of it, so Postgres\n * RLS policies using `current_setting('app.workspace_id', true)` see the right\n * value for both the `USING` (read) and `WITH CHECK` (write) clauses.\n *\n * Session-level `SET` (`maybeSetRlsGuc` above, the original Phase 3\n * implementation) is NOT safe once traffic goes through PgBouncer in\n * **transaction pooling mode** — the mode configured on all four\n * `boff-pg-{global,wspace}-{alpha,prod}-cin` servers' built-in PgBouncer (see\n * infra-specs/current-architecture/02-database-postgres-age.md). PgBouncer hands\n * the physical backend connection back to the pool after every standalone\n * statement/implicit transaction, so a `SET` executed by one statement is not\n * guaranteed visible to the very next one, even over what looks like the same\n * logical client connection.\n *\n * This was exactly BOFF-5488: `wspace-movethewheels-svc`'s RLS Phase 3b (FORCE\n * ROW LEVEL SECURITY + a non-owner runtime role, `wspace_movethewheels_app`,\n * pointed at the pooled `:6432` connection) made the `ws_isolation` policy bind\n * for real, but the session-level `SET` from `maybeSetRlsGuc` was landing on a\n * different pooled backend connection than the write that followed it — so every\n * write failed `WITH CHECK` (`new row violates row-level security policy`) and\n * every read matched zero rows.\n *\n * A Prisma **interactive transaction** (`$transaction(async (tx) => …)`) pins one\n * physical connection for the callback's full duration — PgBouncer sees a single\n * unbroken `BEGIN … COMMIT` and cannot reassign the backend mid-transaction — so\n * `SET LOCAL` inside it is guaranteed visible to the operation issued right after\n * it in the same callback. Safe under transaction-mode pooling, session-mode\n * pooling, and with no pooler in front of Postgres at all. The extra round trip\n * (one interactive transaction instead of one direct call) only applies to\n * services that opt into `enableRlsGucTagging` — off by default.\n *\n * @internal Legacy exported helper retained for compatibility and its historical\n * tests. It reissues a model call and cannot preserve surrounding query hooks;\n * addWorkspaceExtension uses the continuation-based route below instead. Do not\n * call this helper from product code.\n */\nexport async function runOperationWithRlsGuc<TResult>(\n  rootClient: RawPrismaForRlsTransaction,\n  wsCtx: WorkspaceContext,\n  model: string,\n  operation: string,\n  args: unknown\n): Promise<TResult> {\n  const safeWs = (wsCtx.workspaceId ?? '').replace(/[^a-zA-Z0-9\\-_]/g, '');\n  const clientProperty = modelToClientProperty(model);\n  return rootClient.$transaction(async (tx) => {\n    await tx.$executeRawUnsafe(`SET LOCAL app.workspace_id = '${safeWs}'`);\n    // `tx[clientProperty]` is typed `unknown` (see PrismaTxForRlsGuc) because this\n    // helper is generic across every model; narrow to the minimal callable shape\n    // needed and verify at runtime before invoking rather than trusting a cast.\n    const delegate = tx[clientProperty] as Record<string, (opArgs: unknown) => Promise<TResult>> | undefined;\n    const method = delegate?.[operation];\n    if (typeof method !== 'function') {\n      throw new Error(\n        `[WorkspaceExtension] Unable to resolve ${model}.${operation} (client property \"${clientProperty}\") ` +\n          'on the interactive-transaction client for RLS GUC tagging.'\n      );\n    }\n    return method(args);\n  });\n}\n\n/** Minimal batch surface; both operations must stay lazy until Prisma binds them. */\ntype RawPrismaForRlsContinuation = {\n  $executeRawUnsafe: (sql: string, ...values: unknown[]) => PendingRawStatement;\n  $transaction: <TResult>(input: [PendingRawStatement, Promise<TResult>]) => Promise<[unknown, TResult]>;\n};\n\n/**\n * Keep the original query continuation, including later query extensions, inside\n * the GUC-tagged transaction. Reissuing a model call on the root client would\n * skip later hooks, or execute an earlier hook twice (BOFF-8874).\n */\nasync function runQueryWithRlsGuc<TResult>(\n  rootClient: RawPrismaForRlsContinuation,\n  wsCtx: WorkspaceContext,\n  query: () => Promise<TResult>\n): Promise<TResult> {\n  // Prisma types this as Promise, but its extension callback returns a lazy\n  // PrismaPromise. Require the binding capability instead of falling back to an\n  // independent model call or executing the query outside the transaction.\n  const pendingQuery = query() as Promise<TResult> & { requestTransaction?: unknown };\n  const pendingContext = rootClient.$executeRawUnsafe(\n    \"SELECT set_config('app.workspace_id', $1, true), \" +\n      \"set_config('statement_timeout', CASE \" +\n      \"WHEN current_setting('statement_timeout')::interval > interval '0' \" +\n      \"AND current_setting('statement_timeout')::interval < interval '5 seconds' \" +\n      \"THEN current_setting('statement_timeout') ELSE '5000ms' END, true)\",\n    sanitizeWorkspaceId(wsCtx.workspaceId)\n  );\n  if (\n    typeof pendingQuery.requestTransaction !== 'function' ||\n    typeof pendingContext.requestTransaction !== 'function'\n  ) {\n    throw new Error(\n      '[WorkspaceExtension] RLS query continuation requires transaction-bindable PrismaPromises; ' +\n        'refusing the unsupported Prisma integration (BOFF-8874).'\n    );\n  }\n  const [, result] = await rootClient.$transaction([pendingContext, pendingQuery]);\n  return result;\n}\n\n// ============================================================================\n// Caller transactions (BOFF-8874)\n// ============================================================================\n//\n// `runOperationWithRlsGuc` above opens its OWN interactive transaction per\n// operation. That is right for a standalone call, but wrong when the operation is\n// issued on the `tx` client inside a caller's `prisma.$transaction(...)`: the\n// operation would commit on another connection, so the caller's transaction\n// would not be atomic and its `SELECT … FOR UPDATE` fences would run without the\n// GUC (matching no rows under FORCE RLS, so locking nothing).\n//\n// Inside a caller transaction the extension now runs the context statement\n// (`set_config(..., is_local => true)`, identical to `SET LOCAL`) on the caller's\n// transaction itself, once per transaction and workspace, and then executes the\n// operation in place. Batch transactions (`$transaction([...])`) get the same\n// statement prepended to the batch by the client-level `$transaction` wrapper in\n// `addWorkspaceExtension`. Outside any transaction nothing changes.\n\n/**\n * Prisma passes the transaction an operation belongs to on the query-extension\n * callback's `__internalParams.transaction`: `{ kind: 'itx', id, payload }` for an\n * interactive transaction, `{ kind: 'batch', … }` for `$transaction([...])`, and\n * nothing for a standalone call. The `live-pg` contract test pins this down\n * against the installed Prisma version.\n */\nexport interface PrismaQueryInternalParams {\n  transaction?: unknown;\n}\n\n/** The caller transaction an operation runs in, if any. */\nexport type CallerTransaction = { kind: 'itx'; id: string; descriptor: object } | { kind: 'batch' };\n\n/**\n * Classify the transaction an extension callback is running in.\n *\n * Throws on a transaction descriptor this version does not understand rather\n * than guessing: running such an operation down the standalone path would\n * silently break the caller's atomicity again.\n *\n * @internal Exported for unit testing only — do not call from product code.\n */\nexport function getCallerTransaction(\n  internalParams: PrismaQueryInternalParams | undefined\n): CallerTransaction | undefined {\n  const transaction = internalParams?.transaction;\n  if (transaction === undefined || transaction === null) return undefined;\n  if (typeof transaction === 'object') {\n    const { kind, id } = transaction as { kind?: unknown; id?: unknown };\n    if (kind === 'itx' && typeof id === 'string' && id.length > 0) {\n      return { kind: 'itx', id, descriptor: transaction };\n    }\n    if (kind === 'batch') return { kind: 'batch' };\n  }\n  throw new Error(\n    '[WorkspaceExtension] Unrecognised Prisma transaction descriptor on __internalParams.transaction; ' +\n      'refusing to run the operation outside the caller transaction. This Prisma version is not supported ' +\n      'by the be-sdk RLS transaction integration (BOFF-8874).'\n  );\n}\n\n/** Same sanitisation as the standalone path: CUID/UUID-safe, prevents SQL injection. */\nfunction sanitizeWorkspaceId(workspaceId: string | undefined): string {\n  return (workspaceId ?? '').replace(/[^a-zA-Z0-9\\-_]/g, '');\n}\n\n/** Same tag `maybeTagConnection` sets: `svc=<SERVICE_NAME>;ws=<workspaceId>`. */\nfunction buildApplicationNameTag(wsCtx: WorkspaceContext): string {\n  const safeSvc = (process.env['SERVICE_NAME'] ?? 'svc').replace(/[^a-zA-Z0-9\\-_]/g, '');\n  return `svc=${safeSvc};ws=${sanitizeWorkspaceId(wsCtx.workspaceId)}`;\n}\n\n/** A single parameterised statement that sets the transaction-local context. */\nexport interface TransactionContextStatement {\n  sql: string;\n  params: string[];\n  /** Identifies the values set, so a transaction only re-runs it when they change. */\n  key: string;\n}\n\n/**\n * Build the transaction-local context statement for the enabled tagging modes,\n * or `undefined` when neither RLS GUC nor application_name tagging is on.\n * `set_config(name, value, true)` is exactly `SET LOCAL name = value`.\n *\n * @internal Exported for unit testing only — do not call from product code.\n */\nexport function buildTransactionContextStatement(\n  wsCtx: WorkspaceContext,\n  config: Pick<Required<WorkspaceExtensionConfig>, 'enableRlsGucTagging' | 'enableApplicationNameTagging'>\n): TransactionContextStatement | undefined {\n  const settings: string[] = [];\n  const params: string[] = [];\n  if (config.enableRlsGucTagging) {\n    params.push(sanitizeWorkspaceId(wsCtx.workspaceId));\n    settings.push(`set_config('app.workspace_id', $${params.length}, true)`);\n  }\n  if (config.enableApplicationNameTagging) {\n    params.push(buildApplicationNameTag(wsCtx));\n    settings.push(`set_config('application_name', $${params.length}, true)`);\n  }\n  if (settings.length === 0) return undefined;\n  return { sql: `SELECT ${settings.join(', ')}`, params, key: params.join('\\u0000') };\n}\n\n/**\n * A raw Prisma statement before it runs. Prisma's lazy `PrismaPromise` exposes\n * `requestTransaction(descriptor)`, which is how `$transaction` binds statements to\n * a transaction; the extension uses it to run the context statement on the\n * caller's transaction instead of a pooled connection of its own.\n */\ntype PendingRawStatement = PromiseLike<number> & {\n  requestTransaction?: (transaction: object) => PromiseLike<unknown>;\n};\n\n/** Unextended client surface for issuing the context statement. */\nexport type RawPrismaForCallerTransaction = {\n  $executeRawUnsafe: (query: string, ...values: unknown[]) => PendingRawStatement;\n};\n\ninterface CallerTransactionState {\n  /** Descriptor of the (possibly nested) transaction level the context was set on. */\n  descriptor: object;\n  key: string;\n  ready: Promise<void>;\n  inflight: number;\n}\n\n/**\n * Context already applied per caller transaction id. Bounded: an evicted entry\n * only costs one repeated context statement, never correctness.\n */\nconst MAX_TRACKED_CALLER_TRANSACTIONS = 4096;\nconst callerTransactionStates = new Map<string, CallerTransactionState>();\n\nfunction rememberCallerTransaction(id: string, state: CallerTransactionState): void {\n  callerTransactionStates.delete(id);\n  callerTransactionStates.set(id, state);\n  if (callerTransactionStates.size > MAX_TRACKED_CALLER_TRANSACTIONS) {\n    const oldest = callerTransactionStates.keys().next().value;\n    if (oldest !== undefined) callerTransactionStates.delete(oldest);\n  }\n}\n\nasync function applyCallerTransactionContext(\n  rawPrisma: RawPrismaForCallerTransaction,\n  descriptor: object,\n  statement: TransactionContextStatement\n): Promise<void> {\n  const pending = rawPrisma.$executeRawUnsafe(statement.sql, ...statement.params);\n  if (typeof pending.requestTransaction !== 'function') {\n    throw new Error(\n      '[WorkspaceExtension] Cannot bind the RLS context statement to the caller transaction ' +\n        '(PrismaPromise.requestTransaction is unavailable); refusing to run it on another connection (BOFF-8874).'\n    );\n  }\n  await pending.requestTransaction(descriptor);\n}\n\n/**\n * Run `run` (the operation, already bound to the caller's interactive\n * transaction by Prisma) after making sure that transaction carries the\n * workspace context. The context statement runs on the caller's transaction,\n * once per transaction level and workspace: a later operation for the same\n * workspace costs no extra round trip, a workspace switch re-runs it, and so does\n * the first operation after entering or leaving a nested transaction (a\n * savepoint rollback reverts `SET LOCAL`, a release keeps it).\n *\n * Concurrent operations for *different* workspaces on one transaction cannot be\n * isolated from each other, so that case throws instead of risking one running\n * under the other's GUC.\n *\n * @internal Exported for unit testing only — do not call from product code.\n */\nexport async function runOperationInCallerTransaction<TResult>(\n  rawPrisma: RawPrismaForCallerTransaction,\n  transaction: { id: string; descriptor: object },\n  wsCtx: WorkspaceContext,\n  config: Pick<Required<WorkspaceExtensionConfig>, 'enableRlsGucTagging' | 'enableApplicationNameTagging'>,\n  run: () => Promise<TResult>\n): Promise<TResult> {\n  const statement = buildTransactionContextStatement(wsCtx, config);\n  if (!statement) return run();\n\n  let state = callerTransactionStates.get(transaction.id);\n  if (!state || state.descriptor !== transaction.descriptor || state.key !== statement.key) {\n    if (state && state.inflight > 0 && state.key !== statement.key) {\n      throw new Error(\n        '[WorkspaceExtension] Concurrent operations for different workspaces inside one transaction are not ' +\n          'supported: the RLS context is per transaction. Await the other workspace’s operations first.'\n      );\n    }\n    const next: CallerTransactionState = {\n      descriptor: transaction.descriptor,\n      key: statement.key,\n      ready: applyCallerTransactionContext(rawPrisma, transaction.descriptor, statement),\n      inflight: 0,\n    };\n    next.ready.catch(() => {\n      if (callerTransactionStates.get(transaction.id) === next) callerTransactionStates.delete(transaction.id);\n    });\n    rememberCallerTransaction(transaction.id, next);\n    state = next;\n  }\n\n  state.inflight += 1;\n  try {\n    await state.ready;\n    return await run();\n  } finally {\n    state.inflight -= 1;\n  }\n}\n\n/** @internal Test hook: forget all tracked caller transactions. */\nexport function resetCallerTransactionStateForTests(): void {\n  callerTransactionStates.clear();\n}\n\nexport function addWorkspaceExtension<T>(baseClient: T, config?: WorkspaceExtensionConfig): T {\n  const fullConfig: Required<WorkspaceExtensionConfig> = {\n    ...defaultWorkspaceExtensionConfig,\n    ...config,\n  };\n\n  if (!fullConfig.enabled) {\n    logger.info('[WorkspaceExtension] Extension disabled by configuration');\n    return baseClient;\n  }\n\n  // Capture the unwrapped client for connection tagging (pre-extension, avoids recursion)\n  const rawPrisma = baseClient as unknown as RawPrismaForTagging;\n  // Same unwrapped client, typed for a lazy query-continuation batch; no new pool.\n  const rawPrismaForContinuations = baseClient as unknown as RawPrismaForRlsContinuation;\n  // Capture the pre-wrapper transaction method, but preserve its final receiver\n  // when invoked. Selecting $parent would discard query extensions added later.\n  const transactionDelegate = (baseClient as unknown as TransactionDelegate).$transaction;\n  // Same unwrapped client again, typed for binding the context statement to a\n  // caller's transaction (see runOperationInCallerTransaction).\n  const rawPrismaForCallerTransactions = baseClient as unknown as RawPrismaForCallerTransaction;\n  const tagsTransactions = fullConfig.enableRlsGucTagging || fullConfig.enableApplicationNameTagging;\n\n  /**\n   * Execute an operation whose args have already been workspace-injected.\n   *\n   * - Inside a caller's interactive transaction: set the context on that\n   *   transaction (once) and run the operation in place, so it is atomic with\n   *   the rest of the caller's transaction and its locks last until commit.\n   * - Inside a batch `$transaction([...])`: run in place; the `$transaction`\n   *   wrapper below prepended the context statement to the batch.\n   * - Standalone: unchanged — session application_name tag, then the\n   *   operation in its own `SET LOCAL` transaction when RLS tagging is on.\n   */\n  const dispatch = async (\n    params: { model: string; query: (args: unknown) => Promise<unknown>; __internalParams?: PrismaQueryInternalParams },\n    wsCtx: WorkspaceContext,\n    _operation: string,\n    finalArgs: unknown\n  ): Promise<unknown> => {\n    // No tagging: nothing is set per operation, so every call runs in place\n    // exactly as before (inside a caller transaction or not).\n    if (!tagsTransactions) return params.query(finalArgs);\n    const callerTransaction = getCallerTransaction(params.__internalParams);\n    if (callerTransaction?.kind === 'itx') {\n      return runOperationInCallerTransaction(rawPrismaForCallerTransactions, callerTransaction, wsCtx, fullConfig, () =>\n        params.query(finalArgs)\n      );\n    }\n    if (callerTransaction?.kind === 'batch') {\n      return params.query(finalArgs);\n    }\n    if (fullConfig.enableApplicationNameTagging) {\n      await maybeTagConnection(rawPrisma, wsCtx);\n    }\n    if (fullConfig.enableRlsGucTagging) {\n      return runQueryWithRlsGuc(rawPrismaForContinuations, wsCtx, () => params.query(finalArgs));\n    }\n    return params.query(finalArgs);\n  };\n\n  /**\n   * Raw SQL inside a caller's interactive transaction gets the same context, so\n   * `SELECT … FOR UPDATE` fences and raw reads/writes see the caller's workspace\n   * under FORCE RLS. Standalone raw SQL is unchanged (no context statement).\n   */\n  const rawOperation = async ({ args, query, __internalParams }: RawOperationHandlerParams): Promise<unknown> => {\n    if (!tagsTransactions) return query(args);\n    const callerTransaction = getCallerTransaction(__internalParams);\n    if (callerTransaction?.kind !== 'itx') return query(args);\n    const wsCtx = getWorkspaceContext();\n    if (!wsCtx?.workspaceId) return query(args);\n    return runOperationInCallerTransaction(rawPrismaForCallerTransactions, callerTransaction, wsCtx, fullConfig, () =>\n      query(args)\n    );\n  };\n\n  // Type assertion for Prisma client $extends\n  const prismaClient = baseClient as { $extends: (args: unknown) => T };\n\n  logger.info('[WorkspaceExtension] Workspace extension enabled', {\n    populateContextJson: fullConfig.populateContextJson,\n    populateCreatedBy: fullConfig.populateCreatedBy,\n    populateUpdatedBy: fullConfig.populateUpdatedBy,\n    populateTenantId: fullConfig.populateTenantId,\n    enableReadIsolation: fullConfig.enableReadIsolation,\n    enableDeleteIsolation: fullConfig.enableDeleteIsolation,\n    enableUpdateWhereIsolation: fullConfig.enableUpdateWhereIsolation,\n    strictMode: fullConfig.strictMode,\n    excludeModels: fullConfig.excludeModels,\n    excludeModelsFromReadIsolation: fullConfig.excludeModelsFromReadIsolation,\n    allowedUnguardedOperations: fullConfig.allowedUnguardedOperations,\n    enableApplicationNameTagging: fullConfig.enableApplicationNameTagging,\n    enableRlsGucTagging: fullConfig.enableRlsGucTagging,\n  });\n\n  // Raw SQL hooks only matter when a context statement exists to apply.\n  const rawOperationHooks = tagsTransactions\n    ? {\n        $queryRaw: rawOperation,\n        $executeRaw: rawOperation,\n        $queryRawUnsafe: rawOperation,\n        $executeRawUnsafe: rawOperation,\n        $queryRawTyped: rawOperation,\n      }\n    : {};\n\n  const withQueryHooks = prismaClient.$extends({\n    query: {\n      ...rawOperationHooks,\n      $allModels: {\n        // ================================================================\n        // WRITE OPERATIONS - inject workspaceId into data\n        // ================================================================\n\n        async create({\n          model,\n          args,\n          query,\n          __internalParams,\n        }: ExtensionHandlerParams<{\n          data: Record<string, unknown>;\n          _skipWorkspaceInjection?: boolean;\n          [key: string]: unknown;\n        }>) {\n          // Skip if model is excluded or injection is explicitly skipped\n          if (fullConfig.excludeModels.includes(model) || args._skipWorkspaceInjection) {\n            return query(stripSkipFlag(args));\n          }\n\n          const wsCtx = getWorkspaceContext();\n          enforceStrictMode(model, 'create', wsCtx, fullConfig);\n          if (!wsCtx?.workspaceId) {\n            return query(args);\n          }\n\n          // Inject fields into data\n          const injectedData = injectCreateFields(args.data, wsCtx, fullConfig);\n\n          if (fullConfig.debug) {\n            const injectedKeys = Object.keys(injectedData).filter((k) => !(k in args.data));\n            if (injectedKeys.length > 0) {\n              logger.debug(`[WorkspaceExtension] ${model}.create - injected: ${injectedKeys.join(', ')}`, {\n                workspaceId: wsCtx.workspaceId,\n                actorId: wsCtx.actorId,\n              });\n            }\n          }\n\n          const finalArgs = {\n            ...stripSkipFlag(args),\n            data: injectedData,\n          };\n          return dispatch({ model, query, __internalParams }, wsCtx, 'create', finalArgs);\n        },\n\n        async createMany({\n          model,\n          args,\n          query,\n          __internalParams,\n        }: ExtensionHandlerParams<{\n          data: Record<string, unknown> | Record<string, unknown>[];\n          _skipWorkspaceInjection?: boolean;\n          [key: string]: unknown;\n        }>) {\n          if (fullConfig.excludeModels.includes(model) || args._skipWorkspaceInjection) {\n            return query(stripSkipFlag(args));\n          }\n\n          const wsCtx = getWorkspaceContext();\n          enforceStrictMode(model, 'createMany', wsCtx, fullConfig);\n          if (!wsCtx?.workspaceId) {\n            return query(args);\n          }\n\n          // Handle both single object and array\n          const dataArray = Array.isArray(args.data) ? args.data : [args.data];\n          const injectedData = dataArray.map((item) => injectCreateFields(item, wsCtx, fullConfig));\n\n          const finalArgs = {\n            ...stripSkipFlag(args),\n            data: Array.isArray(args.data) ? injectedData : injectedData[0],\n          };\n          return dispatch({ model, query, __internalParams }, wsCtx, 'createMany', finalArgs);\n        },\n\n        async createManyAndReturn({\n          model,\n          args,\n          query,\n          __internalParams,\n        }: ExtensionHandlerParams<{\n          data: Record<string, unknown> | Record<string, unknown>[];\n          _skipWorkspaceInjection?: boolean;\n          [key: string]: unknown;\n        }>) {\n          if (fullConfig.excludeModels.includes(model) || args._skipWorkspaceInjection) {\n            return query(stripSkipFlag(args));\n          }\n\n          const wsCtx = getWorkspaceContext();\n          enforceStrictMode(model, 'createManyAndReturn', wsCtx, fullConfig);\n          if (!wsCtx?.workspaceId) {\n            return query(args);\n          }\n\n          const dataArray = Array.isArray(args.data) ? args.data : [args.data];\n          const injectedData = dataArray.map((item) => injectCreateFields(item, wsCtx, fullConfig));\n\n          const finalArgs = {\n            ...stripSkipFlag(args),\n            data: Array.isArray(args.data) ? injectedData : injectedData[0],\n          };\n          return dispatch({ model, query, __internalParams }, wsCtx, 'createManyAndReturn', finalArgs);\n        },\n\n        // ================================================================\n        // UPDATE OPERATIONS - inject updatedBy into data + workspaceId into where\n        // ================================================================\n\n        async update({\n          model,\n          args,\n          query,\n          __internalParams,\n        }: ExtensionHandlerParams<{\n          data: Record<string, unknown>;\n          where?: Record<string, unknown>;\n          _skipWorkspaceInjection?: boolean;\n          [key: string]: unknown;\n        }>) {\n          if (fullConfig.excludeModels.includes(model) || args._skipWorkspaceInjection) {\n            return query(stripSkipFlag(args));\n          }\n\n          const wsCtx = getWorkspaceContext();\n          enforceStrictMode(model, 'update', wsCtx, fullConfig);\n          if (!wsCtx?.workspaceId) {\n            return query(args);\n          }\n\n          const injectedData = injectUpdateFields(args.data, wsCtx, fullConfig);\n\n          // Inject workspaceId into where clause for update isolation\n          let injectedWhere = args.where;\n          if (fullConfig.enableUpdateWhereIsolation && !isExcludedFromReadIsolation(model, fullConfig)) {\n            injectedWhere = injectWhereClause(args.where, wsCtx);\n          }\n\n          if (fullConfig.debug) {\n            const injectedDataKeys = Object.keys(injectedData).filter((k) => !(k in args.data));\n            const whereChanged = injectedWhere !== args.where;\n            if (injectedDataKeys.length > 0 || whereChanged) {\n              logger.debug(\n                `[WorkspaceExtension] ${model}.update - injected data: ${injectedDataKeys.join(', ')}${whereChanged ? ', where: workspaceId' : ''}`\n              );\n            }\n          }\n\n          const finalArgs = {\n            ...stripSkipFlag(args),\n            data: injectedData,\n            where: injectedWhere,\n          };\n          return dispatch({ model, query, __internalParams }, wsCtx, 'update', finalArgs);\n        },\n\n        async updateMany({\n          model,\n          args,\n          query,\n          __internalParams,\n        }: ExtensionHandlerParams<{\n          data: Record<string, unknown>;\n          where?: Record<string, unknown>;\n          _skipWorkspaceInjection?: boolean;\n          [key: string]: unknown;\n        }>) {\n          if (fullConfig.excludeModels.includes(model) || args._skipWorkspaceInjection) {\n            return query(stripSkipFlag(args));\n          }\n\n          const wsCtx = getWorkspaceContext();\n          enforceStrictMode(model, 'updateMany', wsCtx, fullConfig);\n          if (!wsCtx?.workspaceId) {\n            return query(args);\n          }\n\n          const injectedData = injectUpdateFields(args.data, wsCtx, fullConfig);\n\n          // Inject workspaceId into where clause for update isolation\n          let injectedWhere = args.where;\n          if (fullConfig.enableUpdateWhereIsolation && !isExcludedFromReadIsolation(model, fullConfig)) {\n            injectedWhere = injectWhereClause(args.where, wsCtx);\n          }\n\n          const finalArgs = {\n            ...stripSkipFlag(args),\n            data: injectedData,\n            where: injectedWhere,\n          };\n          return dispatch({ model, query, __internalParams }, wsCtx, 'updateMany', finalArgs);\n        },\n\n        async upsert({\n          model,\n          args,\n          query,\n          __internalParams,\n        }: ExtensionHandlerParams<{\n          create: Record<string, unknown>;\n          update: Record<string, unknown>;\n          where?: Record<string, unknown>;\n          _skipWorkspaceInjection?: boolean;\n          [key: string]: unknown;\n        }>) {\n          if (fullConfig.excludeModels.includes(model) || args._skipWorkspaceInjection) {\n            return query(stripSkipFlag(args));\n          }\n\n          const wsCtx = getWorkspaceContext();\n          enforceStrictMode(model, 'upsert', wsCtx, fullConfig);\n          if (!wsCtx?.workspaceId) {\n            return query(args);\n          }\n\n          const injectedCreate = injectCreateFields(args.create, wsCtx, fullConfig);\n          const injectedUpdate = injectUpdateFields(args.update, wsCtx, fullConfig);\n\n          // Inject workspaceId into where clause for upsert isolation\n          let injectedWhere = args.where;\n          if (fullConfig.enableUpdateWhereIsolation && !isExcludedFromReadIsolation(model, fullConfig)) {\n            injectedWhere = injectWhereClause(args.where, wsCtx);\n          }\n\n          const finalArgs = {\n            ...stripSkipFlag(args),\n            create: injectedCreate,\n            update: injectedUpdate,\n            where: injectedWhere,\n          };\n          return dispatch({ model, query, __internalParams }, wsCtx, 'upsert', finalArgs);\n        },\n\n        // ================================================================\n        // READ OPERATIONS - inject workspaceId into where clause\n        // ================================================================\n\n        async findMany({ model, args, query, __internalParams }: ExtensionHandlerParams<WhereArgs>) {\n          if (\n            !fullConfig.enableReadIsolation ||\n            isExcludedFromReadIsolation(model, fullConfig) ||\n            args._skipWorkspaceInjection\n          ) {\n            return query(stripSkipFlag(args));\n          }\n\n          const wsCtx = getWorkspaceContext();\n          enforceStrictMode(model, 'findMany', wsCtx, fullConfig);\n          if (!wsCtx?.workspaceId) {\n            return query(args);\n          }\n\n          const injectedWhere = injectWhereClause(args.where, wsCtx);\n\n          if (fullConfig.debug) {\n            logger.debug(`[WorkspaceExtension] ${model}.findMany - injected workspaceId into where`, {\n              workspaceId: wsCtx.workspaceId,\n            });\n          }\n\n          const finalArgs = {\n            ...stripSkipFlag(args),\n            where: injectedWhere,\n          };\n          return dispatch({ model, query, __internalParams }, wsCtx, 'findMany', finalArgs);\n        },\n\n        async findFirst({ model, args, query, __internalParams }: ExtensionHandlerParams<WhereArgs>) {\n          if (\n            !fullConfig.enableReadIsolation ||\n            isExcludedFromReadIsolation(model, fullConfig) ||\n            args._skipWorkspaceInjection\n          ) {\n            return query(stripSkipFlag(args));\n          }\n\n          const wsCtx = getWorkspaceContext();\n          enforceStrictMode(model, 'findFirst', wsCtx, fullConfig);\n          if (!wsCtx?.workspaceId) {\n            return query(args);\n          }\n\n          const injectedWhere = injectWhereClause(args.where, wsCtx);\n\n          if (fullConfig.debug) {\n            logger.debug(`[WorkspaceExtension] ${model}.findFirst - injected workspaceId into where`, {\n              workspaceId: wsCtx.workspaceId,\n            });\n          }\n\n          const finalArgs = {\n            ...stripSkipFlag(args),\n            where: injectedWhere,\n          };\n          return dispatch({ model, query, __internalParams }, wsCtx, 'findFirst', finalArgs);\n        },\n\n        async findFirstOrThrow({ model, args, query, __internalParams }: ExtensionHandlerParams<WhereArgs>) {\n          if (\n            !fullConfig.enableReadIsolation ||\n            isExcludedFromReadIsolation(model, fullConfig) ||\n            args._skipWorkspaceInjection\n          ) {\n            return query(stripSkipFlag(args));\n          }\n\n          const wsCtx = getWorkspaceContext();\n          enforceStrictMode(model, 'findFirstOrThrow', wsCtx, fullConfig);\n          if (!wsCtx?.workspaceId) {\n            return query(args);\n          }\n\n          const injectedWhere = injectWhereClause(args.where, wsCtx);\n\n          if (fullConfig.debug) {\n            logger.debug(`[WorkspaceExtension] ${model}.findFirstOrThrow - injected workspaceId into where`, {\n              workspaceId: wsCtx.workspaceId,\n            });\n          }\n\n          const finalArgs = {\n            ...stripSkipFlag(args),\n            where: injectedWhere,\n          };\n          return dispatch({ model, query, __internalParams }, wsCtx, 'findFirstOrThrow', finalArgs);\n        },\n\n        async findUnique({ model, args, query, __internalParams }: ExtensionHandlerParams<WhereArgs>) {\n          if (\n            !fullConfig.enableReadIsolation ||\n            isExcludedFromReadIsolation(model, fullConfig) ||\n            args._skipWorkspaceInjection\n          ) {\n            return query(stripSkipFlag(args));\n          }\n\n          const wsCtx = getWorkspaceContext();\n          enforceStrictMode(model, 'findUnique', wsCtx, fullConfig);\n          if (!wsCtx?.workspaceId) {\n            return query(args);\n          }\n\n          // For findUnique, the where clause uses unique fields.\n          // We inject workspaceId only if the where clause is a plain object\n          // (compound unique keys with workspaceId are common and already include it).\n          const injectedWhere = injectWhereClause(args.where, wsCtx);\n\n          if (fullConfig.debug) {\n            logger.debug(`[WorkspaceExtension] ${model}.findUnique - injected workspaceId into where`, {\n              workspaceId: wsCtx.workspaceId,\n            });\n          }\n\n          const finalArgs = {\n            ...stripSkipFlag(args),\n            where: injectedWhere,\n          };\n          return dispatch({ model, query, __internalParams }, wsCtx, 'findUnique', finalArgs);\n        },\n\n        async findUniqueOrThrow({ model, args, query, __internalParams }: ExtensionHandlerParams<WhereArgs>) {\n          if (\n            !fullConfig.enableReadIsolation ||\n            isExcludedFromReadIsolation(model, fullConfig) ||\n            args._skipWorkspaceInjection\n          ) {\n            return query(stripSkipFlag(args));\n          }\n\n          const wsCtx = getWorkspaceContext();\n          enforceStrictMode(model, 'findUniqueOrThrow', wsCtx, fullConfig);\n          if (!wsCtx?.workspaceId) {\n            return query(args);\n          }\n\n          const injectedWhere = injectWhereClause(args.where, wsCtx);\n\n          if (fullConfig.debug) {\n            logger.debug(`[WorkspaceExtension] ${model}.findUniqueOrThrow - injected workspaceId into where`, {\n              workspaceId: wsCtx.workspaceId,\n            });\n          }\n\n          const finalArgs = {\n            ...stripSkipFlag(args),\n            where: injectedWhere,\n          };\n          return dispatch({ model, query, __internalParams }, wsCtx, 'findUniqueOrThrow', finalArgs);\n        },\n\n        async count({ model, args, query, __internalParams }: ExtensionHandlerParams<WhereArgs>) {\n          if (\n            !fullConfig.enableReadIsolation ||\n            isExcludedFromReadIsolation(model, fullConfig) ||\n            args._skipWorkspaceInjection\n          ) {\n            return query(stripSkipFlag(args));\n          }\n\n          const wsCtx = getWorkspaceContext();\n          enforceStrictMode(model, 'count', wsCtx, fullConfig);\n          if (!wsCtx?.workspaceId) {\n            return query(args);\n          }\n\n          const injectedWhere = injectWhereClause(args.where, wsCtx);\n\n          if (fullConfig.debug) {\n            logger.debug(`[WorkspaceExtension] ${model}.count - injected workspaceId into where`, {\n              workspaceId: wsCtx.workspaceId,\n            });\n          }\n\n          const finalArgs = {\n            ...stripSkipFlag(args),\n            where: injectedWhere,\n          };\n          return dispatch({ model, query, __internalParams }, wsCtx, 'count', finalArgs);\n        },\n\n        async aggregate({ model, args, query, __internalParams }: ExtensionHandlerParams<WhereArgs>) {\n          if (\n            !fullConfig.enableReadIsolation ||\n            isExcludedFromReadIsolation(model, fullConfig) ||\n            args._skipWorkspaceInjection\n          ) {\n            return query(stripSkipFlag(args));\n          }\n\n          const wsCtx = getWorkspaceContext();\n          enforceStrictMode(model, 'aggregate', wsCtx, fullConfig);\n          if (!wsCtx?.workspaceId) {\n            return query(args);\n          }\n\n          const injectedWhere = injectWhereClause(args.where, wsCtx);\n\n          if (fullConfig.debug) {\n            logger.debug(`[WorkspaceExtension] ${model}.aggregate - injected workspaceId into where`, {\n              workspaceId: wsCtx.workspaceId,\n            });\n          }\n\n          const finalArgs = {\n            ...stripSkipFlag(args),\n            where: injectedWhere,\n          };\n          return dispatch({ model, query, __internalParams }, wsCtx, 'aggregate', finalArgs);\n        },\n\n        async groupBy({ model, args, query, __internalParams }: ExtensionHandlerParams<WhereArgs>) {\n          if (\n            !fullConfig.enableReadIsolation ||\n            isExcludedFromReadIsolation(model, fullConfig) ||\n            args._skipWorkspaceInjection\n          ) {\n            return query(stripSkipFlag(args));\n          }\n\n          const wsCtx = getWorkspaceContext();\n          enforceStrictMode(model, 'groupBy', wsCtx, fullConfig);\n          if (!wsCtx?.workspaceId) {\n            return query(args);\n          }\n\n          const injectedWhere = injectWhereClause(args.where, wsCtx);\n\n          if (fullConfig.debug) {\n            logger.debug(`[WorkspaceExtension] ${model}.groupBy - injected workspaceId into where`, {\n              workspaceId: wsCtx.workspaceId,\n            });\n          }\n\n          const finalArgs = {\n            ...stripSkipFlag(args),\n            where: injectedWhere,\n          };\n          return dispatch({ model, query, __internalParams }, wsCtx, 'groupBy', finalArgs);\n        },\n\n        // ================================================================\n        // DELETE OPERATIONS - inject workspaceId into where clause\n        // ================================================================\n\n        async delete({ model, args, query, __internalParams }: ExtensionHandlerParams<WhereArgs>) {\n          if (\n            !fullConfig.enableDeleteIsolation ||\n            isExcludedFromReadIsolation(model, fullConfig) ||\n            args._skipWorkspaceInjection\n          ) {\n            return query(stripSkipFlag(args));\n          }\n\n          const wsCtx = getWorkspaceContext();\n          enforceStrictMode(model, 'delete', wsCtx, fullConfig);\n          if (!wsCtx?.workspaceId) {\n            return query(args);\n          }\n\n          const injectedWhere = injectWhereClause(args.where, wsCtx);\n\n          if (fullConfig.debug) {\n            logger.debug(`[WorkspaceExtension] ${model}.delete - injected workspaceId into where`, {\n              workspaceId: wsCtx.workspaceId,\n            });\n          }\n\n          const finalArgs = {\n            ...stripSkipFlag(args),\n            where: injectedWhere,\n          };\n          return dispatch({ model, query, __internalParams }, wsCtx, 'delete', finalArgs);\n        },\n\n        async deleteMany({ model, args, query, __internalParams }: ExtensionHandlerParams<WhereArgs>) {\n          if (\n            !fullConfig.enableDeleteIsolation ||\n            isExcludedFromReadIsolation(model, fullConfig) ||\n            args._skipWorkspaceInjection\n          ) {\n            return query(stripSkipFlag(args));\n          }\n\n          const wsCtx = getWorkspaceContext();\n          enforceStrictMode(model, 'deleteMany', wsCtx, fullConfig);\n          if (!wsCtx?.workspaceId) {\n            return query(args);\n          }\n\n          const injectedWhere = injectWhereClause(args.where, wsCtx);\n\n          if (fullConfig.debug) {\n            logger.debug(`[WorkspaceExtension] ${model}.deleteMany - injected workspaceId into where`, {\n              workspaceId: wsCtx.workspaceId,\n            });\n          }\n\n          const finalArgs = {\n            ...stripSkipFlag(args),\n            where: injectedWhere,\n          };\n          return dispatch({ model, query, __internalParams }, wsCtx, 'deleteMany', finalArgs);\n        },\n      },\n    },\n  });\n\n  // Batch transactions: Prisma runs `$transaction([...])` members in one database\n  // transaction, but an operation hook cannot add a statement to the batch. So\n  // wrap `$transaction` itself and prepend the context statement; its result is\n  // dropped so callers get exactly their own members' results. The function form\n  // binds lazy consumption inside its callback; query hooks still apply RLS GUCs.\n  // `$parent` is the client one extension layer down (the query-hooked client\n  // above), so members and nested transactions keep every hook.\n  const wrapped = withQueryHooks as unknown as { $extends: (args: unknown) => T };\n  return wrapped.$extends({\n    client: {\n      $transaction(this: { $parent?: TransactionDelegate }, input: unknown, options?: unknown): Promise<unknown> {\n        const parent = this.$parent;\n        if (!parent) {\n          throw new Error('[WorkspaceExtension] $transaction wrapper could not resolve its parent client.');\n        }\n        if (Array.isArray(input)) {\n          const wsCtx = getWorkspaceContext();\n          const statement =\n            tagsTransactions && wsCtx?.workspaceId ? buildTransactionContextStatement(wsCtx, fullConfig) : undefined;\n          if (statement) {\n            const setContext = rawPrismaForCallerTransactions.$executeRawUnsafe(statement.sql, ...statement.params);\n            return parent\n              .$transaction([setContext, ...input], options)\n              .then((results) => (Array.isArray(results) ? results.slice(1) : results));\n          }\n        }\n        // The native delegate reads the final client's extension chain. Calling\n        // it on $parent would silently omit later graph/audit query hooks.\n        if (typeof input === 'function') {\n          // Keep lazy returned operations in their originating callback context,\n          // including Bun thenable assimilation after an awaited earlier query.\n          const callback = input as (tx: object) => Promise<unknown>;\n          return transactionDelegate.call(\n            this,\n            async (tx: object) => {\n              const scope = { active: true };\n              try {\n                return await callback(bindTransactionContext(tx, scope, getWorkspaceContext));\n              } finally {\n                scope.active = false;\n              }\n            },\n            options\n          );\n        }\n        return transactionDelegate.call(this, input, options);\n      },\n    },\n  });\n}\n"]}

package/dist/{chunk-PKKVCYJH.js → chunk-E5HKS7KD.js}

@@ -1,5 +1,5 @@
 import { productSlugVariants, isSameProductSlug } from './chunk-OBBCR6WY.js';
-import { withWorkspaceContextSync, withWorkspaceContext, setWorkspaceContext, runOperationWithRlsGuc, runOperationInCallerTransaction, resetCallerTransactionStateForTests, maybeTagConnection, maybeSetRlsGuc, injectWhereWorkspaceId, injectCreateFields, getWorkspaceContext, getCallerTransaction, defaultWorkspaceExtensionConfig, buildTransactionContextStatement, addWorkspaceExtension } from './chunk-HMVQOZHM.js';
+import { withWorkspaceContextSync, withWorkspaceContext, setWorkspaceContext, runOperationWithRlsGuc, runOperationInCallerTransaction, resetCallerTransactionStateForTests, maybeTagConnection, maybeSetRlsGuc, injectWhereWorkspaceId, injectCreateFields, getWorkspaceContext, getCallerTransaction, defaultWorkspaceExtensionConfig, buildTransactionContextStatement, addWorkspaceExtension } from './chunk-3Z2VRCT6.js';
 import { isTransientAcquireError, installAcquireRetry, ensureServiceApplicationName, createPrismaClient, createPrismaAdapter, createConnectionPool, configurePrismaLogging, PrismaClientWrapper, addGraphExtension } from './chunk-6VK53YR3.js';
 import { getGraphEventEmitter } from './chunk-XTIOBNT7.js';
 import { logger } from './chunk-RU266375.js';
@@ -685,5 +685,5 @@ function createContextFromSDK(sdkContext) {
 __name(createContextFromSDK, "createContextFromSDK");
 
 export { buildContextWhereClause, buildContextWhereConditions, checkDatabaseHealth, contextMatches, createContextFromSDK, createDatabaseClient, createDatabaseClientFromEnv, extractFieldsFromModel, getAllModelNames, getDatabaseManager, getDatabaseProductName, getDatabaseStats, getDatabaseVersion, getDb, getModelFields, hasModel, initializeDatabase, initializeDatabaseWithConfig, isDatabaseInitialized, loadGeneratedFields, mergeContext, parseContext, prisma_exports, resetDatabaseManager, resolvePoolTuningFromEnv, testConnection, toContextJson };
-//# sourceMappingURL=chunk-PKKVCYJH.js.map
-//# sourceMappingURL=chunk-PKKVCYJH.js.map
+//# sourceMappingURL=chunk-E5HKS7KD.js.map
+//# sourceMappingURL=chunk-E5HKS7KD.js.map