@burdenoff/be-sdk 2026.725.1 → 2026.731.1

package/dist/auth/index.d.ts

@@ -1,6 +1,6 @@
 import { B as BurdenoffGraphQLClient } from '../graphql-Dxxpbzr3.js';
 import { S as SDKContext } from '../index-B8viwwDM.js';
-import { G as GraphQLContext } from '../types-BeDCdzH9.js';
+import { G as GraphQLContext } from '../types-BuP_sFzk.js';
 import 'graphql-request';
 import '../layer-GNAVXBMf.js';
 import 'graphql';
@@ -8,7 +8,7 @@ import 'graphql-yoga';
 import '../client-CCXpAZ2r.js';
 import '@prisma/adapter-pg';
 import 'pg';
-import '../workspace-extension-DxQw6N3b.js';
+import '../workspace-extension-DlxYz3P4.js';
 import '../types-C8TbSdEj.js';
 
 interface CookieOptions {

package/dist/{chunk-EJPRCENB.js → chunk-KESVEZB2.js}

@@ -21,7 +21,7 @@ function withWorkspaceContextSync(context, fn) {
   return workspaceContextStore.run(context, fn);
 }
 __name(withWorkspaceContextSync, "withWorkspaceContextSync");
-var defaultConfig = {
+var defaultWorkspaceExtensionConfig = {
   enabled: true,
   enableReadIsolation: true,
   enableDeleteIsolation: true,
@@ -30,6 +30,7 @@ var defaultConfig = {
   populateCreatedBy: true,
   populateUpdatedBy: true,
   populateTenantId: false,
+  populateOnBehalfOf: true,
   excludeModels: [],
   excludeModelsFromReadIsolation: [],
   strictMode: true,
@@ -58,9 +59,9 @@ function injectCreateFields(data, wsCtx, config) {
   if (config.populateUpdatedBy && wsCtx.actorId && !hasField(injected, "updatedBy")) {
     injected["updatedBy"] = wsCtx.actorId;
   }
-  if (wsCtx.onBehalfOf && !hasField(injected, "onBehalfOf")) {
+  if (config.populateOnBehalfOf && wsCtx.onBehalfOf && !hasField(injected, "onBehalfOf")) {
     injected["onBehalfOf"] = wsCtx.onBehalfOf;
-  } else if (wsCtx.actorId && !hasField(injected, "onBehalfOf")) {
+  } else if (config.populateOnBehalfOf && wsCtx.actorId && !hasField(injected, "onBehalfOf")) {
     injected["onBehalfOf"] = wsCtx.actorId;
   }
   if (config.populateContextJson && !hasField(injected, "context")) {
@@ -186,7 +187,7 @@ async function runOperationWithRlsGuc(rootClient, wsCtx, model, operation, args)
 __name(runOperationWithRlsGuc, "runOperationWithRlsGuc");
 function addWorkspaceExtension(baseClient, config) {
   const fullConfig = {
-    ...defaultConfig,
+    ...defaultWorkspaceExtensionConfig,
     ...config
   };
   if (!fullConfig.enabled) {
@@ -673,6 +674,6 @@ function addWorkspaceExtension(baseClient, config) {
 }
 __name(addWorkspaceExtension, "addWorkspaceExtension");
 
-export { addWorkspaceExtension, getWorkspaceContext, injectWhereWorkspaceId, maybeSetRlsGuc, maybeTagConnection, runOperationWithRlsGuc, setWorkspaceContext, withWorkspaceContext, withWorkspaceContextSync };
-//# sourceMappingURL=chunk-EJPRCENB.js.map
-//# sourceMappingURL=chunk-EJPRCENB.js.map
+export { addWorkspaceExtension, defaultWorkspaceExtensionConfig, getWorkspaceContext, injectCreateFields, injectWhereWorkspaceId, maybeSetRlsGuc, maybeTagConnection, runOperationWithRlsGuc, setWorkspaceContext, withWorkspaceContext, withWorkspaceContextSync };
+//# sourceMappingURL=chunk-KESVEZB2.js.map
+//# sourceMappingURL=chunk-KESVEZB2.js.map

package/dist/chunk-KESVEZB2.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/prisma/workspace-extension.ts"],"names":["workspaceContextStore","AsyncLocalStorage","fallbackContext","setWorkspaceContext","context","enterWith","getWorkspaceContext","getStore","withWorkspaceContext","fn","run","withWorkspaceContextSync","defaultWorkspaceExtensionConfig","enabled","enableReadIsolation","enableDeleteIsolation","enableUpdateWhereIsolation","populateContextJson","populateCreatedBy","populateUpdatedBy","populateTenantId","populateOnBehalfOf","excludeModels","excludeModelsFromReadIsolation","strictMode","allowedUnguardedOperations","debug","enableApplicationNameTagging","enableRlsGucTagging","hasField","data","field","injectCreateFields","wsCtx","config","injected","workspaceId","tenantId","actorId","onBehalfOf","contextJson","buildContextJsonFromWorkspaceContext","injectUpdateFields","injectWhereClause","where","organizationId","projectId","appId","Object","keys","length","undefined","injectWhereWorkspaceId","ctx","stripSkipFlag","args","cleaned","isExcludedFromReadIsolation","model","includes","enforceStrictMode","operation","opKey","Error","taggedContexts","WeakSet","maybeTagConnection","rawPrisma","has","add","safeSvc","process","env","replace","safeWs","tag","$executeRawUnsafe","delete","rlsTaggedContexts","maybeSetRlsGuc","modelToClientProperty","charAt","toLowerCase","slice","runOperationWithRlsGuc","rootClient","clientProperty","$transaction","tx","delegate","method","addWorkspaceExtension","baseClient","fullConfig","logger","info","rawPrismaForTransactions","prismaClient","$extends","query","$allModels","create","_skipWorkspaceInjection","injectedData","injectedKeys","filter","k","join","finalArgs","createMany","dataArray","Array","isArray","map","item","createManyAndReturn","update","injectedWhere","injectedDataKeys","whereChanged","updateMany","upsert","injectedCreate","injectedUpdate","findMany","findFirst","findFirstOrThrow","findUnique","findUniqueOrThrow","count","aggregate","groupBy","deleteMany"],"mappings":";;;;AA6EA,IAAMA,qBAAAA,GAAwB,IAAIC,iBAAAA,EAAAA;AAUlC,IAAIC,eAAAA;AA6BG,SAASC,oBAAoBC,OAAAA,EAAyB;AAC3DJ,EAAAA,qBAAAA,CAAsBK,UAAUD,OAAAA,CAAAA;AAChCF,EAAAA,eAAAA,GAAkBE,OAAAA;AACpB;AAHgBD,MAAAA,CAAAA,mBAAAA,EAAAA,qBAAAA,CAAAA;AAaT,SAASG,mBAAAA,GAAAA;AACd,EAAA,OAAON,qBAAAA,CAAsBO,UAAQ,IAAML,eAAAA;AAC7C;AAFgBI,MAAAA,CAAAA,mBAAAA,EAAAA,qBAAAA,CAAAA;AAuBhB,eAAsBE,oBAAAA,CAAwBJ,SAA2BK,EAAAA,EAAoB;AAC3F,EAAA,OAAOT,qBAAAA,CAAsBU,GAAAA,CAAIN,OAAAA,EAASK,EAAAA,CAAAA;AAC5C;AAFsBD,MAAAA,CAAAA,oBAAAA,EAAAA,sBAAAA,CAAAA;AAOf,SAASG,wBAAAA,CAA4BP,SAA2BK,EAAAA,EAAW;AAChF,EAAA,OAAOT,qBAAAA,CAAsBU,GAAAA,CAAIN,OAAAA,EAASK,EAAAA,CAAAA;AAC5C;AAFgBE,MAAAA,CAAAA,wBAAAA,EAAAA,0BAAAA,CAAAA;AAsMT,IAAMC,+BAAAA,GAAsE;EACjFC,OAAAA,EAAS,IAAA;EACTC,mBAAAA,EAAqB,IAAA;EACrBC,qBAAAA,EAAuB,IAAA;EACvBC,0BAAAA,EAA4B,IAAA;EAC5BC,mBAAAA,EAAqB,IAAA;EACrBC,iBAAAA,EAAmB,IAAA;EACnBC,iBAAAA,EAAmB,IAAA;EACnBC,gBAAAA,EAAkB,KAAA;EAClBC,kBAAAA,EAAoB,IAAA;AACpBC,EAAAA,aAAAA,EAAe,EAAA;AACfC,EAAAA,8BAAAA,EAAgC,EAAA;EAChCC,UAAAA,EAAY,IAAA;AACZC,EAAAA,0BAAAA,EAA4B,EAAA;EAC5BC,KAAAA,EAAO,KAAA;EACPC,4BAAAA,EAA8B,KAAA;EAC9BC,mBAAAA,EAAqB;AACvB;AASA,SAASC,QAAAA,CAASC,MAA+BC,KAAAA,EAAa;AAC5D,EAAA,OAAOA,KAAAA,IAASD,IAAAA;AAClB;AAFSD,MAAAA,CAAAA,QAAAA,EAAAA,UAAAA,CAAAA;AAaF,SAASG,kBAAAA,CACdF,IAAAA,EACAG,KAAAA,EACAC,MAAAA,EAA0C;AAE1C,EAAA,MAAMC,QAAAA,GAAW;IAAE,GAAGL;AAAK,GAAA;AAG3B,EAAA,IAAIG,MAAMG,WAAAA,IAAe,CAACP,QAAAA,CAASM,QAAAA,EAAU,aAAA,CAAA,EAAgB;AAC3DA,IAAAA,QAAAA,CAAS,aAAA,IAAiBF,KAAAA,CAAMG,WAAAA;AAClC,EAAA;AAGA,EAAA,IAAIF,MAAAA,CAAOd,oBAAoBa,KAAAA,CAAMI,QAAAA,IAAY,CAACR,QAAAA,CAASM,QAAAA,EAAU,UAAA,CAAA,EAAa;AAChFA,IAAAA,QAAAA,CAAS,UAAA,IAAcF,KAAAA,CAAMI,QAAAA;AAC/B,EAAA;AAGA,EAAA,IAAIH,MAAAA,CAAOhB,qBAAqBe,KAAAA,CAAMK,OAAAA,IAAW,CAACT,QAAAA,CAASM,QAAAA,EAAU,WAAA,CAAA,EAAc;AACjFA,IAAAA,QAAAA,CAAS,WAAA,IAAeF,KAAAA,CAAMK,OAAAA;AAChC,EAAA;AAGA,EAAA,IAAIJ,MAAAA,CAAOf,qBAAqBc,KAAAA,CAAMK,OAAAA,IAAW,CAACT,QAAAA,CAASM,QAAAA,EAAU,WAAA,CAAA,EAAc;AACjFA,IAAAA,QAAAA,CAAS,WAAA,IAAeF,KAAAA,CAAMK,OAAAA;AAChC,EAAA;AAIA,EAAA,IAAIJ,MAAAA,CAAOb,sBAAsBY,KAAAA,CAAMM,UAAAA,IAAc,CAACV,QAAAA,CAASM,QAAAA,EAAU,YAAA,CAAA,EAAe;AACtFA,IAAAA,QAAAA,CAAS,YAAA,IAAgBF,KAAAA,CAAMM,UAAAA;EACjC,CAAA,MAAA,IAAWL,MAAAA,CAAOb,sBAAsBY,KAAAA,CAAMK,OAAAA,IAAW,CAACT,QAAAA,CAASM,QAAAA,EAAU,YAAA,CAAA,EAAe;AAE1FA,IAAAA,QAAAA,CAAS,YAAA,IAAgBF,KAAAA,CAAMK,OAAAA;AACjC,EAAA;AAGA,EAAA,IAAIJ,OAAOjB,mBAAAA,IAAuB,CAACY,QAAAA,CAASM,QAAAA,EAAU,SAAA,CAAA,EAAY;AAChE,IAAA,MAAMK,WAAAA,GAAcC,qCAAqCR,KAAAA,CAAAA;AACzD,IAAA,IAAIO,WAAAA,EAAa;AACfL,MAAAA,QAAAA,CAAS,SAAA,CAAA,GAAaK,WAAAA;AACxB,IAAA;AACF,EAAA;AAEA,EAAA,OAAOL,QAAAA;AACT;AA7CgBH,MAAAA,CAAAA,kBAAAA,EAAAA,oBAAAA,CAAAA;AAkDhB,SAASU,kBAAAA,CACPZ,IAAAA,EACAG,KAAAA,EACAC,MAAAA,EAA0C;AAE1C,EAAA,MAAMC,QAAAA,GAAW;IAAE,GAAGL;AAAK,GAAA;AAG3B,EAAA,IAAII,MAAAA,CAAOf,qBAAqBc,KAAAA,CAAMK,OAAAA,IAAW,CAACT,QAAAA,CAASM,QAAAA,EAAU,WAAA,CAAA,EAAc;AACjFA,IAAAA,QAAAA,CAAS,WAAA,IAAeF,KAAAA,CAAMK,OAAAA;AAChC,EAAA;AAMA,EAAA,OAAOH,QAAAA;AACT;AAjBSO,MAAAA,CAAAA,kBAAAA,EAAAA,oBAAAA,CAAAA;AA0BT,SAASC,iBAAAA,CACPC,OACAX,KAAAA,EAAuB;AAEvB,EAAA,IAAI,CAACA,KAAAA,CAAMG,WAAAA,EAAa,OAAOQ,KAAAA;AAE/B,EAAA,IAAI,CAACA,KAAAA,EAAO;AAEV,IAAA,OAAO;AAAER,MAAAA,WAAAA,EAAaH,KAAAA,CAAMG;AAAY,KAAA;AAC1C,EAAA;AAGA,EAAA,IAAI,CAACP,QAAAA,CAASe,KAAAA,EAAO,aAAA,CAAA,EAAgB;AACnC,IAAA,OAAO;MAAE,GAAGA,KAAAA;AAAOR,MAAAA,WAAAA,EAAaH,KAAAA,CAAMG;AAAY,KAAA;AACpD,EAAA;AAEA,EAAA,OAAOQ,KAAAA;AACT;AAjBSD,MAAAA,CAAAA,iBAAAA,EAAAA,mBAAAA,CAAAA;AAsBT,SAASF,qCAAqCR,KAAAA,EAAuB;AACnE,EAAA,MAAM7B,UAAkC,EAAC;AAEzC,EAAA,IAAI6B,KAAAA,CAAMG,WAAAA,EAAahC,OAAAA,CAAQ,aAAA,IAAiB6B,KAAAA,CAAMG,WAAAA;AACtD,EAAA,IAAIH,KAAAA,CAAMK,OAAAA,EAASlC,OAAAA,CAAQ,QAAA,IAAY6B,KAAAA,CAAMK,OAAAA;AAC7C,EAAA,IAAIL,KAAAA,CAAMY,cAAAA,EAAgBzC,OAAAA,CAAQ,gBAAA,IAAoB6B,KAAAA,CAAMY,cAAAA;AAC5D,EAAA,IAAIZ,KAAAA,CAAMa,SAAAA,EAAW1C,OAAAA,CAAQ,WAAA,IAAe6B,KAAAA,CAAMa,SAAAA;AAClD,EAAA,IAAIb,KAAAA,CAAMc,KAAAA,EAAO3C,OAAAA,CAAQ,OAAA,IAAW6B,KAAAA,CAAMc,KAAAA;AAE1C,EAAA,OAAOC,OAAOC,IAAAA,CAAK7C,OAAAA,CAAAA,CAAS8C,MAAAA,GAAS,IAAI9C,OAAAA,GAAU+C,MAAAA;AACrD;AAVSV,MAAAA,CAAAA,oCAAAA,EAAAA,sCAAAA,CAAAA;AA8BF,SAASW,sBAAAA,CACdR,OACAX,KAAAA,EAAwB;AAExB,EAAA,MAAMoB,GAAAA,GAAMpB,SAAS3B,mBAAAA,EAAAA;AACrB,EAAA,IAAI,CAACsC,KAAAA,IAAS,CAACS,GAAAA,EAAKjB,aAAa,OAAOQ,KAAAA;AAGxC,EAAA,IAAI,CAACf,QAAAA,CAASe,KAAAA,EAAO,aAAA,CAAA,EAAgB;AACnC,IAAA,OAAO;MAAE,GAAGA,KAAAA;AAAOR,MAAAA,WAAAA,EAAaiB,GAAAA,CAAIjB;AAAY,KAAA;AAClD,EAAA;AAEA,EAAA,OAAOQ,KAAAA;AACT;AAbgBQ,MAAAA,CAAAA,sBAAAA,EAAAA,wBAAAA,CAAAA;AAmBhB,SAASE,cAAiDC,IAAAA,EAAO;AAC/D,EAAA,MAAMC,OAAAA,GAAU;IAAE,GAAGD;AAAK,GAAA;AAC1B,EAAA,OAAQC,QAAoC,yBAAA,CAAA;AAC5C,EAAA,OAAOA,OAAAA;AACT;AAJSF,MAAAA,CAAAA,aAAAA,EAAAA,eAAAA,CAAAA;AAUT,SAASG,2BAAAA,CAA4BC,OAAexB,MAAAA,EAA0C;AAC5F,EAAA,OAAOA,MAAAA,CAAOZ,cAAcqC,QAAAA,CAASD,KAAAA,KAAUxB,MAAAA,CAAOX,8BAAAA,CAA+BoC,SAASD,KAAAA,CAAAA;AAChG;AAFSD,MAAAA,CAAAA,2BAAAA,EAAAA,6BAAAA,CAAAA;AAeT,SAASG,iBAAAA,CACPF,KAAAA,EACAG,SAAAA,EACA5B,KAAAA,EACAC,MAAAA,EAA0C;AAG1C,EAAA,IAAID,OAAOG,WAAAA,EAAa;AAGxB,EAAA,IAAI,CAACF,OAAOV,UAAAA,EAAY;AAGxB,EAAA,MAAMsC,KAAAA,GAAQ,CAAA,EAAGJ,KAAAA,CAAAA,CAAAA,EAASG,SAAAA,CAAAA,CAAAA;AAC1B,EAAA,IAAI3B,MAAAA,CAAOT,0BAAAA,CAA2BkC,QAAAA,CAASG,KAAAA,CAAAA,EAAQ;AAGvD,EAAA,MAAM,IAAIC,KAAAA,CACR,CAAA,oDAAA,EAAuDL,KAAAA,CAAAA,CAAAA,EAASG,SAAAA,CAAAA,uEAAAA,EAElDH,KAAAA,CAAAA,6BAAAA,EACAI,KAAAA,CAAAA,6FAAAA,CAC+C,CAAA;AAEjE;AAxBSF,MAAAA,CAAAA,iBAAAA,EAAAA,mBAAAA,CAAAA;AAgGT,IAAMI,cAAAA,uBAAqBC,OAAAA,EAAAA;AAS3B,eAAsBC,kBAAAA,CAAmBC,WAAgClC,KAAAA,EAAuB;AAC9F,EAAA,IAAI+B,cAAAA,CAAeI,GAAAA,CAAInC,KAAAA,CAAAA,EAAQ;AAC/B+B,EAAAA,cAAAA,CAAeK,IAAIpC,KAAAA,CAAAA;AAEnB,EAAA,MAAMqC,OAAAA,GAAAA,CAAWC,QAAQC,GAAAA,CAAI,cAAA,KAAmB,KAAA,EAAOC,OAAAA,CAAQ,oBAAoB,EAAA,CAAA;AACnF,EAAA,MAAMC,UAAUzC,KAAAA,CAAMG,WAAAA,IAAe,EAAA,EAAIqC,OAAAA,CAAQ,oBAAoB,EAAA,CAAA;AACrE,EAAA,MAAME,GAAAA,GAAM,CAAA,IAAA,EAAOL,OAAAA,CAAAA,IAAAA,EAAcI,MAAAA,CAAAA,CAAAA;AACjC,EAAA,IAAI;AACF,IAAA,MAAMP,SAAAA,CAAUS,iBAAAA,CAAkB,CAAA,wBAAA,EAA2BD,GAAAA,CAAAA,CAAAA,CAAM,CAAA;EACrE,CAAA,CAAA,MAAQ;AAENX,IAAAA,cAAAA,CAAea,OAAO5C,KAAAA,CAAAA;AACxB,EAAA;AACF;AAbsBiC,MAAAA,CAAAA,kBAAAA,EAAAA,oBAAAA,CAAAA;AAsBtB,IAAMY,iBAAAA,uBAAwBb,OAAAA,EAAAA;AAkB9B,eAAsBc,cAAAA,CAAeZ,WAAgClC,KAAAA,EAAuB;AAC1F,EAAA,IAAI6C,iBAAAA,CAAkBV,GAAAA,CAAInC,KAAAA,CAAAA,EAAQ;AAClC6C,EAAAA,iBAAAA,CAAkBT,IAAIpC,KAAAA,CAAAA;AAEtB,EAAA,MAAMyC,UAAUzC,KAAAA,CAAMG,WAAAA,IAAe,EAAA,EAAIqC,OAAAA,CAAQ,oBAAoB,EAAA,CAAA;AACrE,EAAA,IAAI;AACF,IAAA,MAAMN,SAAAA,CAAUS,iBAAAA,CAAkB,CAAA,wBAAA,EAA2BF,MAAAA,CAAAA,CAAAA,CAAS,CAAA;EACxE,CAAA,CAAA,MAAQ;AAENI,IAAAA,iBAAAA,CAAkBD,OAAO5C,KAAAA,CAAAA;AAC3B,EAAA;AACF;AAXsB8C,MAAAA,CAAAA,cAAAA,EAAAA,gBAAAA,CAAAA;AAoCtB,SAASC,sBAAsBtB,KAAAA,EAAa;AAC1C,EAAA,OAAOA,KAAAA,CAAMR,MAAAA,GAAS,CAAA,GAAIQ,KAAAA,CAAMuB,MAAAA,CAAO,CAAA,CAAA,CAAGC,WAAAA,EAAW,GAAKxB,KAAAA,CAAMyB,KAAAA,CAAM,CAAA,CAAA,GAAKzB,KAAAA;AAC7E;AAFSsB,MAAAA,CAAAA,qBAAAA,EAAAA,uBAAAA,CAAAA;AAuCT,eAAsBI,sBAAAA,CACpBC,UAAAA,EACApD,KAAAA,EACAyB,KAAAA,EACAG,WACAN,IAAAA,EAAa;AAEb,EAAA,MAAMmB,UAAUzC,KAAAA,CAAMG,WAAAA,IAAe,EAAA,EAAIqC,OAAAA,CAAQ,oBAAoB,EAAA,CAAA;AACrE,EAAA,MAAMa,cAAAA,GAAiBN,sBAAsBtB,KAAAA,CAAAA;AAC7C,EAAA,OAAO2B,UAAAA,CAAWE,YAAAA,CAAa,OAAOC,EAAAA,KAAAA;AACpC,IAAA,MAAMA,EAAAA,CAAGZ,iBAAAA,CAAkB,CAAA,8BAAA,EAAiCF,MAAAA,CAAAA,CAAAA,CAAS,CAAA;AAIrE,IAAA,MAAMe,QAAAA,GAAWD,GAAGF,cAAAA,CAAAA;AACpB,IAAA,MAAMI,MAAAA,GAASD,WAAW5B,SAAAA,CAAAA;AAC1B,IAAA,IAAI,OAAO6B,WAAW,UAAA,EAAY;AAChC,MAAA,MAAM,IAAI3B,MACR,CAAA,uCAAA,EAA0CL,KAAAA,IAASG,SAAAA,CAAAA,mBAAAA,EAA+ByB,cAAAA,CAAAA,6DAAAA,CAChF,CAAA;AAEN,IAAA;AACA,IAAA,OAAOI,OAAOnC,IAAAA,CAAAA;EAChB,CAAA,CAAA;AACF;AAxBsB6B,MAAAA,CAAAA,sBAAAA,EAAAA,wBAAAA,CAAAA;AA0Bf,SAASO,qBAAAA,CAAyBC,YAAe1D,MAAAA,EAAiC;AACvF,EAAA,MAAM2D,UAAAA,GAAiD;IACrD,GAAGjF,+BAAAA;IACH,GAAGsB;AACL,GAAA;AAEA,EAAA,IAAI,CAAC2D,WAAWhF,OAAAA,EAAS;AACvBiF,IAAAA,MAAAA,CAAOC,KAAK,0DAAA,CAAA;AACZ,IAAA,OAAOH,UAAAA;AACT,EAAA;AAGA,EAAA,MAAMzB,SAAAA,GAAYyB,UAAAA;AAIlB,EAAA,MAAMI,wBAAAA,GAA2BJ,UAAAA;AAGjC,EAAA,MAAMK,YAAAA,GAAeL,UAAAA;AAErBE,EAAAA,MAAAA,CAAOC,KAAK,kDAAA,EAAoD;AAC9D9E,IAAAA,mBAAAA,EAAqB4E,UAAAA,CAAW5E,mBAAAA;AAChCC,IAAAA,iBAAAA,EAAmB2E,UAAAA,CAAW3E,iBAAAA;AAC9BC,IAAAA,iBAAAA,EAAmB0E,UAAAA,CAAW1E,iBAAAA;AAC9BC,IAAAA,gBAAAA,EAAkByE,UAAAA,CAAWzE,gBAAAA;AAC7BN,IAAAA,mBAAAA,EAAqB+E,UAAAA,CAAW/E,mBAAAA;AAChCC,IAAAA,qBAAAA,EAAuB8E,UAAAA,CAAW9E,qBAAAA;AAClCC,IAAAA,0BAAAA,EAA4B6E,UAAAA,CAAW7E,0BAAAA;AACvCQ,IAAAA,UAAAA,EAAYqE,UAAAA,CAAWrE,UAAAA;AACvBF,IAAAA,aAAAA,EAAeuE,UAAAA,CAAWvE,aAAAA;AAC1BC,IAAAA,8BAAAA,EAAgCsE,UAAAA,CAAWtE,8BAAAA;AAC3CE,IAAAA,0BAAAA,EAA4BoE,UAAAA,CAAWpE,0BAAAA;AACvCE,IAAAA,4BAAAA,EAA8BkE,UAAAA,CAAWlE,4BAAAA;AACzCC,IAAAA,mBAAAA,EAAqBiE,UAAAA,CAAWjE;GAClC,CAAA;AAEA,EAAA,OAAOqE,aAAaC,QAAAA,CAAS;IAC3BC,KAAAA,EAAO;MACLC,UAAAA,EAAY;;;;AAKV,QAAA,MAAMC,MAAAA,CAAO,EACX3C,KAAAA,EACAH,IAAAA,EACA4C,OAAK,EAKL;AAEA,UAAA,IAAIN,WAAWvE,aAAAA,CAAcqC,QAAAA,CAASD,KAAAA,CAAAA,IAAUH,KAAK+C,uBAAAA,EAAyB;AAC5E,YAAA,OAAOH,KAAAA,CAAM7C,aAAAA,CAAcC,IAAAA,CAAAA,CAAAA;AAC7B,UAAA;AAEA,UAAA,MAAMtB,QAAQ3B,mBAAAA,EAAAA;AACdsD,UAAAA,iBAAAA,CAAkBF,KAAAA,EAAO,QAAA,EAAUzB,KAAAA,EAAO4D,UAAAA,CAAAA;AAC1C,UAAA,IAAI,CAAC5D,OAAOG,WAAAA,EAAa;AACvB,YAAA,OAAO+D,MAAM5C,IAAAA,CAAAA;AACf,UAAA;AAEA,UAAA,IAAIsC,WAAWlE,4BAAAA,EAA8B;AAC3C,YAAA,MAAMuC,kBAAAA,CAAmBC,WAAWlC,KAAAA,CAAAA;AACtC,UAAA;AAEA,UAAA,MAAMsE,YAAAA,GAAevE,kBAAAA,CAAmBuB,IAAAA,CAAKzB,IAAAA,EAAMG,OAAO4D,UAAAA,CAAAA;AAE1D,UAAA,IAAIA,WAAWnE,KAAAA,EAAO;AACpB,YAAA,MAAM8E,YAAAA,GAAexD,MAAAA,CAAOC,IAAAA,CAAKsD,YAAAA,CAAAA,CAAcE,MAAAA,CAAO,CAACC,CAAAA,KAAM,EAAEA,CAAAA,IAAKnD,IAAAA,CAAKzB,IAAAA,CAAG,CAAA;AAC5E,YAAA,IAAI0E,YAAAA,CAAatD,SAAS,CAAA,EAAG;AAC3B4C,cAAAA,MAAAA,CAAOpE,KAAAA,CAAM,wBAAwBgC,KAAAA,CAAAA,oBAAAA,EAA4B8C,aAAaG,IAAAA,CAAK,IAAA,CAAA,CAAA,CAAA,EAAS;AAC1FvE,gBAAAA,WAAAA,EAAaH,KAAAA,CAAMG,WAAAA;AACnBE,gBAAAA,OAAAA,EAASL,KAAAA,CAAMK;eACjB,CAAA;AACF,YAAA;AACF,UAAA;AAEA,UAAA,MAAMsE,SAAAA,GAAY;AAChB,YAAA,GAAGtD,cAAcC,IAAAA,CAAAA;YACjBzB,IAAAA,EAAMyE;AACR,WAAA;AACA,UAAA,IAAIV,WAAWjE,mBAAAA,EAAqB;AAClC,YAAA,OAAOwD,sBAAAA,CAAuBY,wBAAAA,EAA0B/D,KAAAA,EAAOyB,KAAAA,EAAO,UAAUkD,SAAAA,CAAAA;AAClF,UAAA;AACA,UAAA,OAAOT,MAAMS,SAAAA,CAAAA;AACf,QAAA,CAAA;AAEA,QAAA,MAAMC,UAAAA,CAAW,EACfnD,KAAAA,EACAH,IAAAA,EACA4C,OAAK,EAKL;AACA,UAAA,IAAIN,WAAWvE,aAAAA,CAAcqC,QAAAA,CAASD,KAAAA,CAAAA,IAAUH,KAAK+C,uBAAAA,EAAyB;AAC5E,YAAA,OAAOH,KAAAA,CAAM7C,aAAAA,CAAcC,IAAAA,CAAAA,CAAAA;AAC7B,UAAA;AAEA,UAAA,MAAMtB,QAAQ3B,mBAAAA,EAAAA;AACdsD,UAAAA,iBAAAA,CAAkBF,KAAAA,EAAO,YAAA,EAAczB,KAAAA,EAAO4D,UAAAA,CAAAA;AAC9C,UAAA,IAAI,CAAC5D,OAAOG,WAAAA,EAAa;AACvB,YAAA,OAAO+D,MAAM5C,IAAAA,CAAAA;AACf,UAAA;AAEA,UAAA,IAAIsC,WAAWlE,4BAAAA,EAA8B;AAC3C,YAAA,MAAMuC,kBAAAA,CAAmBC,WAAWlC,KAAAA,CAAAA;AACtC,UAAA;AAEA,UAAA,MAAM6E,YAAYC,KAAAA,CAAMC,OAAAA,CAAQzD,KAAKzB,IAAI,CAAA,GAAIyB,KAAKzB,IAAAA,GAAO;YAACyB,IAAAA,CAAKzB;;AAC/D,UAAA,MAAMyE,YAAAA,GAAeO,UAAUG,GAAAA,CAAI,CAACC,SAASlF,kBAAAA,CAAmBkF,IAAAA,EAAMjF,KAAAA,EAAO4D,UAAAA,CAAAA,CAAAA;AAE7E,UAAA,MAAMe,SAAAA,GAAY;AAChB,YAAA,GAAGtD,cAAcC,IAAAA,CAAAA;AACjBzB,YAAAA,IAAAA,EAAMiF,MAAMC,OAAAA,CAAQzD,IAAAA,CAAKzB,IAAI,CAAA,GAAIyE,YAAAA,GAAeA,aAAa,CAAA;AAC/D,WAAA;AACA,UAAA,IAAIV,WAAWjE,mBAAAA,EAAqB;AAClC,YAAA,OAAOwD,sBAAAA,CAAuBY,wBAAAA,EAA0B/D,KAAAA,EAAOyB,KAAAA,EAAO,cAAckD,SAAAA,CAAAA;AACtF,UAAA;AACA,UAAA,OAAOT,MAAMS,SAAAA,CAAAA;AACf,QAAA,CAAA;AAEA,QAAA,MAAMO,mBAAAA,CAAoB,EACxBzD,KAAAA,EACAH,IAAAA,EACA4C,OAAK,EAKL;AACA,UAAA,IAAIN,WAAWvE,aAAAA,CAAcqC,QAAAA,CAASD,KAAAA,CAAAA,IAAUH,KAAK+C,uBAAAA,EAAyB;AAC5E,YAAA,OAAOH,KAAAA,CAAM7C,aAAAA,CAAcC,IAAAA,CAAAA,CAAAA;AAC7B,UAAA;AAEA,UAAA,MAAMtB,QAAQ3B,mBAAAA,EAAAA;AACdsD,UAAAA,iBAAAA,CAAkBF,KAAAA,EAAO,qBAAA,EAAuBzB,KAAAA,EAAO4D,UAAAA,CAAAA;AACvD,UAAA,IAAI,CAAC5D,OAAOG,WAAAA,EAAa;AACvB,YAAA,OAAO+D,MAAM5C,IAAAA,CAAAA;AACf,UAAA;AAEA,UAAA,IAAIsC,WAAWlE,4BAAAA,EAA8B;AAC3C,YAAA,MAAMuC,kBAAAA,CAAmBC,WAAWlC,KAAAA,CAAAA;AACtC,UAAA;AACA,UAAA,MAAM6E,YAAYC,KAAAA,CAAMC,OAAAA,CAAQzD,KAAKzB,IAAI,CAAA,GAAIyB,KAAKzB,IAAAA,GAAO;YAACyB,IAAAA,CAAKzB;;AAC/D,UAAA,MAAMyE,YAAAA,GAAeO,UAAUG,GAAAA,CAAI,CAACC,SAASlF,kBAAAA,CAAmBkF,IAAAA,EAAMjF,KAAAA,EAAO4D,UAAAA,CAAAA,CAAAA;AAE7E,UAAA,MAAMe,SAAAA,GAAY;AAChB,YAAA,GAAGtD,cAAcC,IAAAA,CAAAA;AACjBzB,YAAAA,IAAAA,EAAMiF,MAAMC,OAAAA,CAAQzD,IAAAA,CAAKzB,IAAI,CAAA,GAAIyE,YAAAA,GAAeA,aAAa,CAAA;AAC/D,WAAA;AACA,UAAA,IAAIV,WAAWjE,mBAAAA,EAAqB;AAClC,YAAA,OAAOwD,sBAAAA,CAAuBY,wBAAAA,EAA0B/D,KAAAA,EAAOyB,KAAAA,EAAO,uBAAuBkD,SAAAA,CAAAA;AAC/F,UAAA;AACA,UAAA,OAAOT,MAAMS,SAAAA,CAAAA;AACf,QAAA,CAAA;;;;AAMA,QAAA,MAAMQ,MAAAA,CAAO,EACX1D,KAAAA,EACAH,IAAAA,EACA4C,OAAK,EAML;AACA,UAAA,IAAIN,WAAWvE,aAAAA,CAAcqC,QAAAA,CAASD,KAAAA,CAAAA,IAAUH,KAAK+C,uBAAAA,EAAyB;AAC5E,YAAA,OAAOH,KAAAA,CAAM7C,aAAAA,CAAcC,IAAAA,CAAAA,CAAAA;AAC7B,UAAA;AAEA,UAAA,MAAMtB,QAAQ3B,mBAAAA,EAAAA;AACdsD,UAAAA,iBAAAA,CAAkBF,KAAAA,EAAO,QAAA,EAAUzB,KAAAA,EAAO4D,UAAAA,CAAAA;AAC1C,UAAA,IAAI,CAAC5D,OAAOG,WAAAA,EAAa;AACvB,YAAA,OAAO+D,MAAM5C,IAAAA,CAAAA;AACf,UAAA;AAEA,UAAA,IAAIsC,WAAWlE,4BAAAA,EAA8B;AAC3C,YAAA,MAAMuC,kBAAAA,CAAmBC,WAAWlC,KAAAA,CAAAA;AACtC,UAAA;AACA,UAAA,MAAMsE,YAAAA,GAAe7D,kBAAAA,CAAmBa,IAAAA,CAAKzB,IAAAA,EAAMG,OAAO4D,UAAAA,CAAAA;AAG1D,UAAA,IAAIwB,gBAAgB9D,IAAAA,CAAKX,KAAAA;AACzB,UAAA,IAAIiD,WAAW7E,0BAAAA,IAA8B,CAACyC,2BAAAA,CAA4BC,KAAAA,EAAOmC,UAAAA,CAAAA,EAAa;AAC5FwB,YAAAA,aAAAA,GAAgB1E,iBAAAA,CAAkBY,IAAAA,CAAKX,KAAAA,EAAOX,KAAAA,CAAAA;AAChD,UAAA;AAEA,UAAA,IAAI4D,WAAWnE,KAAAA,EAAO;AACpB,YAAA,MAAM4F,gBAAAA,GAAmBtE,MAAAA,CAAOC,IAAAA,CAAKsD,YAAAA,CAAAA,CAAcE,MAAAA,CAAO,CAACC,CAAAA,KAAM,EAAEA,CAAAA,IAAKnD,IAAAA,CAAKzB,IAAAA,CAAG,CAAA;AAChF,YAAA,MAAMyF,YAAAA,GAAeF,kBAAkB9D,IAAAA,CAAKX,KAAAA;AAC5C,YAAA,IAAI0E,gBAAAA,CAAiBpE,MAAAA,GAAS,CAAA,IAAKqE,YAAAA,EAAc;AAC/CzB,cAAAA,MAAAA,CAAOpE,KAAAA,CACL,CAAA,qBAAA,EAAwBgC,KAAAA,CAAAA,yBAAAA,EAAiC4D,gBAAAA,CAAiBX,IAAAA,CAAK,IAAA,CAAA,CAAA,EAAQY,YAAAA,GAAe,sBAAA,GAAyB,EAAA,CAAA,CAAI,CAAA;AAEvI,YAAA;AACF,UAAA;AAEA,UAAA,MAAMX,SAAAA,GAAY;AAChB,YAAA,GAAGtD,cAAcC,IAAAA,CAAAA;YACjBzB,IAAAA,EAAMyE,YAAAA;YACN3D,KAAAA,EAAOyE;AACT,WAAA;AACA,UAAA,IAAIxB,WAAWjE,mBAAAA,EAAqB;AAClC,YAAA,OAAOwD,sBAAAA,CAAuBY,wBAAAA,EAA0B/D,KAAAA,EAAOyB,KAAAA,EAAO,UAAUkD,SAAAA,CAAAA;AAClF,UAAA;AACA,UAAA,OAAOT,MAAMS,SAAAA,CAAAA;AACf,QAAA,CAAA;AAEA,QAAA,MAAMY,UAAAA,CAAW,EACf9D,KAAAA,EACAH,IAAAA,EACA4C,OAAK,EAML;AACA,UAAA,IAAIN,WAAWvE,aAAAA,CAAcqC,QAAAA,CAASD,KAAAA,CAAAA,IAAUH,KAAK+C,uBAAAA,EAAyB;AAC5E,YAAA,OAAOH,KAAAA,CAAM7C,aAAAA,CAAcC,IAAAA,CAAAA,CAAAA;AAC7B,UAAA;AAEA,UAAA,MAAMtB,QAAQ3B,mBAAAA,EAAAA;AACdsD,UAAAA,iBAAAA,CAAkBF,KAAAA,EAAO,YAAA,EAAczB,KAAAA,EAAO4D,UAAAA,CAAAA;AAC9C,UAAA,IAAI,CAAC5D,OAAOG,WAAAA,EAAa;AACvB,YAAA,OAAO+D,MAAM5C,IAAAA,CAAAA;AACf,UAAA;AAEA,UAAA,IAAIsC,WAAWlE,4BAAAA,EAA8B;AAC3C,YAAA,MAAMuC,kBAAAA,CAAmBC,WAAWlC,KAAAA,CAAAA;AACtC,UAAA;AACA,UAAA,MAAMsE,YAAAA,GAAe7D,kBAAAA,CAAmBa,IAAAA,CAAKzB,IAAAA,EAAMG,OAAO4D,UAAAA,CAAAA;AAG1D,UAAA,IAAIwB,gBAAgB9D,IAAAA,CAAKX,KAAAA;AACzB,UAAA,IAAIiD,WAAW7E,0BAAAA,IAA8B,CAACyC,2BAAAA,CAA4BC,KAAAA,EAAOmC,UAAAA,CAAAA,EAAa;AAC5FwB,YAAAA,aAAAA,GAAgB1E,iBAAAA,CAAkBY,IAAAA,CAAKX,KAAAA,EAAOX,KAAAA,CAAAA;AAChD,UAAA;AAEA,UAAA,MAAM2E,SAAAA,GAAY;AAChB,YAAA,GAAGtD,cAAcC,IAAAA,CAAAA;YACjBzB,IAAAA,EAAMyE,YAAAA;YACN3D,KAAAA,EAAOyE;AACT,WAAA;AACA,UAAA,IAAIxB,WAAWjE,mBAAAA,EAAqB;AAClC,YAAA,OAAOwD,sBAAAA,CAAuBY,wBAAAA,EAA0B/D,KAAAA,EAAOyB,KAAAA,EAAO,cAAckD,SAAAA,CAAAA;AACtF,UAAA;AACA,UAAA,OAAOT,MAAMS,SAAAA,CAAAA;AACf,QAAA,CAAA;AAEA,QAAA,MAAMa,MAAAA,CAAO,EACX/D,KAAAA,EACAH,IAAAA,EACA4C,OAAK,EAOL;AACA,UAAA,IAAIN,WAAWvE,aAAAA,CAAcqC,QAAAA,CAASD,KAAAA,CAAAA,IAAUH,KAAK+C,uBAAAA,EAAyB;AAC5E,YAAA,OAAOH,KAAAA,CAAM7C,aAAAA,CAAcC,IAAAA,CAAAA,CAAAA;AAC7B,UAAA;AAEA,UAAA,MAAMtB,QAAQ3B,mBAAAA,EAAAA;AACdsD,UAAAA,iBAAAA,CAAkBF,KAAAA,EAAO,QAAA,EAAUzB,KAAAA,EAAO4D,UAAAA,CAAAA;AAC1C,UAAA,IAAI,CAAC5D,OAAOG,WAAAA,EAAa;AACvB,YAAA,OAAO+D,MAAM5C,IAAAA,CAAAA;AACf,UAAA;AAEA,UAAA,IAAIsC,WAAWlE,4BAAAA,EAA8B;AAC3C,YAAA,MAAMuC,kBAAAA,CAAmBC,WAAWlC,KAAAA,CAAAA;AACtC,UAAA;AACA,UAAA,MAAMyF,cAAAA,GAAiB1F,kBAAAA,CAAmBuB,IAAAA,CAAK8C,MAAAA,EAAQpE,OAAO4D,UAAAA,CAAAA;AAC9D,UAAA,MAAM8B,cAAAA,GAAiBjF,kBAAAA,CAAmBa,IAAAA,CAAK6D,MAAAA,EAAQnF,OAAO4D,UAAAA,CAAAA;AAG9D,UAAA,IAAIwB,gBAAgB9D,IAAAA,CAAKX,KAAAA;AACzB,UAAA,IAAIiD,WAAW7E,0BAAAA,IAA8B,CAACyC,2BAAAA,CAA4BC,KAAAA,EAAOmC,UAAAA,CAAAA,EAAa;AAC5FwB,YAAAA,aAAAA,GAAgB1E,iBAAAA,CAAkBY,IAAAA,CAAKX,KAAAA,EAAOX,KAAAA,CAAAA;AAChD,UAAA;AAEA,UAAA,MAAM2E,SAAAA,GAAY;AAChB,YAAA,GAAGtD,cAAcC,IAAAA,CAAAA;YACjB8C,MAAAA,EAAQqB,cAAAA;YACRN,MAAAA,EAAQO,cAAAA;YACR/E,KAAAA,EAAOyE;AACT,WAAA;AACA,UAAA,IAAIxB,WAAWjE,mBAAAA,EAAqB;AAClC,YAAA,OAAOwD,sBAAAA,CAAuBY,wBAAAA,EAA0B/D,KAAAA,EAAOyB,KAAAA,EAAO,UAAUkD,SAAAA,CAAAA;AAClF,UAAA;AACA,UAAA,OAAOT,MAAMS,SAAAA,CAAAA;AACf,QAAA,CAAA;;;;AAMA,QAAA,MAAMgB,QAAAA,CAAS,EAAElE,KAAAA,EAAOH,IAAAA,EAAM4C,OAAK,EAAqC;AACtE,UAAA,IACE,CAACN,WAAW/E,mBAAAA,IACZ2C,2BAAAA,CAA4BC,OAAOmC,UAAAA,CAAAA,IACnCtC,KAAK+C,uBAAAA,EACL;AACA,YAAA,OAAOH,KAAAA,CAAM7C,aAAAA,CAAcC,IAAAA,CAAAA,CAAAA;AAC7B,UAAA;AAEA,UAAA,MAAMtB,QAAQ3B,mBAAAA,EAAAA;AACdsD,UAAAA,iBAAAA,CAAkBF,KAAAA,EAAO,UAAA,EAAYzB,KAAAA,EAAO4D,UAAAA,CAAAA;AAC5C,UAAA,IAAI,CAAC5D,OAAOG,WAAAA,EAAa;AACvB,YAAA,OAAO+D,MAAM5C,IAAAA,CAAAA;AACf,UAAA;AAEA,UAAA,IAAIsC,WAAWlE,4BAAAA,EAA8B;AAC3C,YAAA,MAAMuC,kBAAAA,CAAmBC,WAAWlC,KAAAA,CAAAA;AACtC,UAAA;AACA,UAAA,MAAMoF,aAAAA,GAAgB1E,iBAAAA,CAAkBY,IAAAA,CAAKX,KAAAA,EAAOX,KAAAA,CAAAA;AAEpD,UAAA,IAAI4D,WAAWnE,KAAAA,EAAO;AACpBoE,YAAAA,MAAAA,CAAOpE,KAAAA,CAAM,CAAA,qBAAA,EAAwBgC,KAAAA,CAAAA,2CAAAA,CAAAA,EAAoD;AACvFtB,cAAAA,WAAAA,EAAaH,KAAAA,CAAMG;aACrB,CAAA;AACF,UAAA;AAEA,UAAA,MAAMwE,SAAAA,GAAY;AAChB,YAAA,GAAGtD,cAAcC,IAAAA,CAAAA;YACjBX,KAAAA,EAAOyE;AACT,WAAA;AACA,UAAA,IAAIxB,WAAWjE,mBAAAA,EAAqB;AAClC,YAAA,OAAOwD,sBAAAA,CAAuBY,wBAAAA,EAA0B/D,KAAAA,EAAOyB,KAAAA,EAAO,YAAYkD,SAAAA,CAAAA;AACpF,UAAA;AACA,UAAA,OAAOT,MAAMS,SAAAA,CAAAA;AACf,QAAA,CAAA;AAEA,QAAA,MAAMiB,SAAAA,CAAU,EAAEnE,KAAAA,EAAOH,IAAAA,EAAM4C,OAAK,EAAqC;AACvE,UAAA,IACE,CAACN,WAAW/E,mBAAAA,IACZ2C,2BAAAA,CAA4BC,OAAOmC,UAAAA,CAAAA,IACnCtC,KAAK+C,uBAAAA,EACL;AACA,YAAA,OAAOH,KAAAA,CAAM7C,aAAAA,CAAcC,IAAAA,CAAAA,CAAAA;AAC7B,UAAA;AAEA,UAAA,MAAMtB,QAAQ3B,mBAAAA,EAAAA;AACdsD,UAAAA,iBAAAA,CAAkBF,KAAAA,EAAO,WAAA,EAAazB,KAAAA,EAAO4D,UAAAA,CAAAA;AAC7C,UAAA,IAAI,CAAC5D,OAAOG,WAAAA,EAAa;AACvB,YAAA,OAAO+D,MAAM5C,IAAAA,CAAAA;AACf,UAAA;AAEA,UAAA,IAAIsC,WAAWlE,4BAAAA,EAA8B;AAC3C,YAAA,MAAMuC,kBAAAA,CAAmBC,WAAWlC,KAAAA,CAAAA;AACtC,UAAA;AACA,UAAA,MAAMoF,aAAAA,GAAgB1E,iBAAAA,CAAkBY,IAAAA,CAAKX,KAAAA,EAAOX,KAAAA,CAAAA;AAEpD,UAAA,IAAI4D,WAAWnE,KAAAA,EAAO;AACpBoE,YAAAA,MAAAA,CAAOpE,KAAAA,CAAM,CAAA,qBAAA,EAAwBgC,KAAAA,CAAAA,4CAAAA,CAAAA,EAAqD;AACxFtB,cAAAA,WAAAA,EAAaH,KAAAA,CAAMG;aACrB,CAAA;AACF,UAAA;AAEA,UAAA,MAAMwE,SAAAA,GAAY;AAChB,YAAA,GAAGtD,cAAcC,IAAAA,CAAAA;YACjBX,KAAAA,EAAOyE;AACT,WAAA;AACA,UAAA,IAAIxB,WAAWjE,mBAAAA,EAAqB;AAClC,YAAA,OAAOwD,sBAAAA,CAAuBY,wBAAAA,EAA0B/D,KAAAA,EAAOyB,KAAAA,EAAO,aAAakD,SAAAA,CAAAA;AACrF,UAAA;AACA,UAAA,OAAOT,MAAMS,SAAAA,CAAAA;AACf,QAAA,CAAA;AAEA,QAAA,MAAMkB,gBAAAA,CAAiB,EAAEpE,KAAAA,EAAOH,IAAAA,EAAM4C,OAAK,EAAqC;AAC9E,UAAA,IACE,CAACN,WAAW/E,mBAAAA,IACZ2C,2BAAAA,CAA4BC,OAAOmC,UAAAA,CAAAA,IACnCtC,KAAK+C,uBAAAA,EACL;AACA,YAAA,OAAOH,KAAAA,CAAM7C,aAAAA,CAAcC,IAAAA,CAAAA,CAAAA;AAC7B,UAAA;AAEA,UAAA,MAAMtB,QAAQ3B,mBAAAA,EAAAA;AACdsD,UAAAA,iBAAAA,CAAkBF,KAAAA,EAAO,kBAAA,EAAoBzB,KAAAA,EAAO4D,UAAAA,CAAAA;AACpD,UAAA,IAAI,CAAC5D,OAAOG,WAAAA,EAAa;AACvB,YAAA,OAAO+D,MAAM5C,IAAAA,CAAAA;AACf,UAAA;AAEA,UAAA,IAAIsC,WAAWlE,4BAAAA,EAA8B;AAC3C,YAAA,MAAMuC,kBAAAA,CAAmBC,WAAWlC,KAAAA,CAAAA;AACtC,UAAA;AACA,UAAA,MAAMoF,aAAAA,GAAgB1E,iBAAAA,CAAkBY,IAAAA,CAAKX,KAAAA,EAAOX,KAAAA,CAAAA;AAEpD,UAAA,IAAI4D,WAAWnE,KAAAA,EAAO;AACpBoE,YAAAA,MAAAA,CAAOpE,KAAAA,CAAM,CAAA,qBAAA,EAAwBgC,KAAAA,CAAAA,mDAAAA,CAAAA,EAA4D;AAC/FtB,cAAAA,WAAAA,EAAaH,KAAAA,CAAMG;aACrB,CAAA;AACF,UAAA;AAEA,UAAA,MAAMwE,SAAAA,GAAY;AAChB,YAAA,GAAGtD,cAAcC,IAAAA,CAAAA;YACjBX,KAAAA,EAAOyE;AACT,WAAA;AACA,UAAA,IAAIxB,WAAWjE,mBAAAA,EAAqB;AAClC,YAAA,OAAOwD,sBAAAA,CAAuBY,wBAAAA,EAA0B/D,KAAAA,EAAOyB,KAAAA,EAAO,oBAAoBkD,SAAAA,CAAAA;AAC5F,UAAA;AACA,UAAA,OAAOT,MAAMS,SAAAA,CAAAA;AACf,QAAA,CAAA;AAEA,QAAA,MAAMmB,UAAAA,CAAW,EAAErE,KAAAA,EAAOH,IAAAA,EAAM4C,OAAK,EAAqC;AACxE,UAAA,IACE,CAACN,WAAW/E,mBAAAA,IACZ2C,2BAAAA,CAA4BC,OAAOmC,UAAAA,CAAAA,IACnCtC,KAAK+C,uBAAAA,EACL;AACA,YAAA,OAAOH,KAAAA,CAAM7C,aAAAA,CAAcC,IAAAA,CAAAA,CAAAA;AAC7B,UAAA;AAEA,UAAA,MAAMtB,QAAQ3B,mBAAAA,EAAAA;AACdsD,UAAAA,iBAAAA,CAAkBF,KAAAA,EAAO,YAAA,EAAczB,KAAAA,EAAO4D,UAAAA,CAAAA;AAC9C,UAAA,IAAI,CAAC5D,OAAOG,WAAAA,EAAa;AACvB,YAAA,OAAO+D,MAAM5C,IAAAA,CAAAA;AACf,UAAA;AAEA,UAAA,IAAIsC,WAAWlE,4BAAAA,EAA8B;AAC3C,YAAA,MAAMuC,kBAAAA,CAAmBC,WAAWlC,KAAAA,CAAAA;AACtC,UAAA;AAIA,UAAA,MAAMoF,aAAAA,GAAgB1E,iBAAAA,CAAkBY,IAAAA,CAAKX,KAAAA,EAAOX,KAAAA,CAAAA;AAEpD,UAAA,IAAI4D,WAAWnE,KAAAA,EAAO;AACpBoE,YAAAA,MAAAA,CAAOpE,KAAAA,CAAM,CAAA,qBAAA,EAAwBgC,KAAAA,CAAAA,6CAAAA,CAAAA,EAAsD;AACzFtB,cAAAA,WAAAA,EAAaH,KAAAA,CAAMG;aACrB,CAAA;AACF,UAAA;AAEA,UAAA,MAAMwE,SAAAA,GAAY;AAChB,YAAA,GAAGtD,cAAcC,IAAAA,CAAAA;YACjBX,KAAAA,EAAOyE;AACT,WAAA;AACA,UAAA,IAAIxB,WAAWjE,mBAAAA,EAAqB;AAClC,YAAA,OAAOwD,sBAAAA,CAAuBY,wBAAAA,EAA0B/D,KAAAA,EAAOyB,KAAAA,EAAO,cAAckD,SAAAA,CAAAA;AACtF,UAAA;AACA,UAAA,OAAOT,MAAMS,SAAAA,CAAAA;AACf,QAAA,CAAA;AAEA,QAAA,MAAMoB,iBAAAA,CAAkB,EAAEtE,KAAAA,EAAOH,IAAAA,EAAM4C,OAAK,EAAqC;AAC/E,UAAA,IACE,CAACN,WAAW/E,mBAAAA,IACZ2C,2BAAAA,CAA4BC,OAAOmC,UAAAA,CAAAA,IACnCtC,KAAK+C,uBAAAA,EACL;AACA,YAAA,OAAOH,KAAAA,CAAM7C,aAAAA,CAAcC,IAAAA,CAAAA,CAAAA;AAC7B,UAAA;AAEA,UAAA,MAAMtB,QAAQ3B,mBAAAA,EAAAA;AACdsD,UAAAA,iBAAAA,CAAkBF,KAAAA,EAAO,mBAAA,EAAqBzB,KAAAA,EAAO4D,UAAAA,CAAAA;AACrD,UAAA,IAAI,CAAC5D,OAAOG,WAAAA,EAAa;AACvB,YAAA,OAAO+D,MAAM5C,IAAAA,CAAAA;AACf,UAAA;AAEA,UAAA,IAAIsC,WAAWlE,4BAAAA,EAA8B;AAC3C,YAAA,MAAMuC,kBAAAA,CAAmBC,WAAWlC,KAAAA,CAAAA;AACtC,UAAA;AACA,UAAA,MAAMoF,aAAAA,GAAgB1E,iBAAAA,CAAkBY,IAAAA,CAAKX,KAAAA,EAAOX,KAAAA,CAAAA;AAEpD,UAAA,IAAI4D,WAAWnE,KAAAA,EAAO;AACpBoE,YAAAA,MAAAA,CAAOpE,KAAAA,CAAM,CAAA,qBAAA,EAAwBgC,KAAAA,CAAAA,oDAAAA,CAAAA,EAA6D;AAChGtB,cAAAA,WAAAA,EAAaH,KAAAA,CAAMG;aACrB,CAAA;AACF,UAAA;AAEA,UAAA,MAAMwE,SAAAA,GAAY;AAChB,YAAA,GAAGtD,cAAcC,IAAAA,CAAAA;YACjBX,KAAAA,EAAOyE;AACT,WAAA;AACA,UAAA,IAAIxB,WAAWjE,mBAAAA,EAAqB;AAClC,YAAA,OAAOwD,sBAAAA,CAAuBY,wBAAAA,EAA0B/D,KAAAA,EAAOyB,KAAAA,EAAO,qBAAqBkD,SAAAA,CAAAA;AAC7F,UAAA;AACA,UAAA,OAAOT,MAAMS,SAAAA,CAAAA;AACf,QAAA,CAAA;AAEA,QAAA,MAAMqB,KAAAA,CAAM,EAAEvE,KAAAA,EAAOH,IAAAA,EAAM4C,OAAK,EAAqC;AACnE,UAAA,IACE,CAACN,WAAW/E,mBAAAA,IACZ2C,2BAAAA,CAA4BC,OAAOmC,UAAAA,CAAAA,IACnCtC,KAAK+C,uBAAAA,EACL;AACA,YAAA,OAAOH,KAAAA,CAAM7C,aAAAA,CAAcC,IAAAA,CAAAA,CAAAA;AAC7B,UAAA;AAEA,UAAA,MAAMtB,QAAQ3B,mBAAAA,EAAAA;AACdsD,UAAAA,iBAAAA,CAAkBF,KAAAA,EAAO,OAAA,EAASzB,KAAAA,EAAO4D,UAAAA,CAAAA;AACzC,UAAA,IAAI,CAAC5D,OAAOG,WAAAA,EAAa;AACvB,YAAA,OAAO+D,MAAM5C,IAAAA,CAAAA;AACf,UAAA;AAEA,UAAA,IAAIsC,WAAWlE,4BAAAA,EAA8B;AAC3C,YAAA,MAAMuC,kBAAAA,CAAmBC,WAAWlC,KAAAA,CAAAA;AACtC,UAAA;AACA,UAAA,MAAMoF,aAAAA,GAAgB1E,iBAAAA,CAAkBY,IAAAA,CAAKX,KAAAA,EAAOX,KAAAA,CAAAA;AAEpD,UAAA,IAAI4D,WAAWnE,KAAAA,EAAO;AACpBoE,YAAAA,MAAAA,CAAOpE,KAAAA,CAAM,CAAA,qBAAA,EAAwBgC,KAAAA,CAAAA,wCAAAA,CAAAA,EAAiD;AACpFtB,cAAAA,WAAAA,EAAaH,KAAAA,CAAMG;aACrB,CAAA;AACF,UAAA;AAEA,UAAA,MAAMwE,SAAAA,GAAY;AAChB,YAAA,GAAGtD,cAAcC,IAAAA,CAAAA;YACjBX,KAAAA,EAAOyE;AACT,WAAA;AACA,UAAA,IAAIxB,WAAWjE,mBAAAA,EAAqB;AAClC,YAAA,OAAOwD,sBAAAA,CAAuBY,wBAAAA,EAA0B/D,KAAAA,EAAOyB,KAAAA,EAAO,SAASkD,SAAAA,CAAAA;AACjF,UAAA;AACA,UAAA,OAAOT,MAAMS,SAAAA,CAAAA;AACf,QAAA,CAAA;AAEA,QAAA,MAAMsB,SAAAA,CAAU,EAAExE,KAAAA,EAAOH,IAAAA,EAAM4C,OAAK,EAAqC;AACvE,UAAA,IACE,CAACN,WAAW/E,mBAAAA,IACZ2C,2BAAAA,CAA4BC,OAAOmC,UAAAA,CAAAA,IACnCtC,KAAK+C,uBAAAA,EACL;AACA,YAAA,OAAOH,KAAAA,CAAM7C,aAAAA,CAAcC,IAAAA,CAAAA,CAAAA;AAC7B,UAAA;AAEA,UAAA,MAAMtB,QAAQ3B,mBAAAA,EAAAA;AACdsD,UAAAA,iBAAAA,CAAkBF,KAAAA,EAAO,WAAA,EAAazB,KAAAA,EAAO4D,UAAAA,CAAAA;AAC7C,UAAA,IAAI,CAAC5D,OAAOG,WAAAA,EAAa;AACvB,YAAA,OAAO+D,MAAM5C,IAAAA,CAAAA;AACf,UAAA;AAEA,UAAA,IAAIsC,WAAWlE,4BAAAA,EAA8B;AAC3C,YAAA,MAAMuC,kBAAAA,CAAmBC,WAAWlC,KAAAA,CAAAA;AACtC,UAAA;AACA,UAAA,MAAMoF,aAAAA,GAAgB1E,iBAAAA,CAAkBY,IAAAA,CAAKX,KAAAA,EAAOX,KAAAA,CAAAA;AAEpD,UAAA,IAAI4D,WAAWnE,KAAAA,EAAO;AACpBoE,YAAAA,MAAAA,CAAOpE,KAAAA,CAAM,CAAA,qBAAA,EAAwBgC,KAAAA,CAAAA,4CAAAA,CAAAA,EAAqD;AACxFtB,cAAAA,WAAAA,EAAaH,KAAAA,CAAMG;aACrB,CAAA;AACF,UAAA;AAEA,UAAA,MAAMwE,SAAAA,GAAY;AAChB,YAAA,GAAGtD,cAAcC,IAAAA,CAAAA;YACjBX,KAAAA,EAAOyE;AACT,WAAA;AACA,UAAA,IAAIxB,WAAWjE,mBAAAA,EAAqB;AAClC,YAAA,OAAOwD,sBAAAA,CAAuBY,wBAAAA,EAA0B/D,KAAAA,EAAOyB,KAAAA,EAAO,aAAakD,SAAAA,CAAAA;AACrF,UAAA;AACA,UAAA,OAAOT,MAAMS,SAAAA,CAAAA;AACf,QAAA,CAAA;AAEA,QAAA,MAAMuB,OAAAA,CAAQ,EAAEzE,KAAAA,EAAOH,IAAAA,EAAM4C,OAAK,EAAqC;AACrE,UAAA,IACE,CAACN,WAAW/E,mBAAAA,IACZ2C,2BAAAA,CAA4BC,OAAOmC,UAAAA,CAAAA,IACnCtC,KAAK+C,uBAAAA,EACL;AACA,YAAA,OAAOH,KAAAA,CAAM7C,aAAAA,CAAcC,IAAAA,CAAAA,CAAAA;AAC7B,UAAA;AAEA,UAAA,MAAMtB,QAAQ3B,mBAAAA,EAAAA;AACdsD,UAAAA,iBAAAA,CAAkBF,KAAAA,EAAO,SAAA,EAAWzB,KAAAA,EAAO4D,UAAAA,CAAAA;AAC3C,UAAA,IAAI,CAAC5D,OAAOG,WAAAA,EAAa;AACvB,YAAA,OAAO+D,MAAM5C,IAAAA,CAAAA;AACf,UAAA;AAEA,UAAA,IAAIsC,WAAWlE,4BAAAA,EAA8B;AAC3C,YAAA,MAAMuC,kBAAAA,CAAmBC,WAAWlC,KAAAA,CAAAA;AACtC,UAAA;AACA,UAAA,MAAMoF,aAAAA,GAAgB1E,iBAAAA,CAAkBY,IAAAA,CAAKX,KAAAA,EAAOX,KAAAA,CAAAA;AAEpD,UAAA,IAAI4D,WAAWnE,KAAAA,EAAO;AACpBoE,YAAAA,MAAAA,CAAOpE,KAAAA,CAAM,CAAA,qBAAA,EAAwBgC,KAAAA,CAAAA,0CAAAA,CAAAA,EAAmD;AACtFtB,cAAAA,WAAAA,EAAaH,KAAAA,CAAMG;aACrB,CAAA;AACF,UAAA;AAEA,UAAA,MAAMwE,SAAAA,GAAY;AAChB,YAAA,GAAGtD,cAAcC,IAAAA,CAAAA;YACjBX,KAAAA,EAAOyE;AACT,WAAA;AACA,UAAA,IAAIxB,WAAWjE,mBAAAA,EAAqB;AAClC,YAAA,OAAOwD,sBAAAA,CAAuBY,wBAAAA,EAA0B/D,KAAAA,EAAOyB,KAAAA,EAAO,WAAWkD,SAAAA,CAAAA;AACnF,UAAA;AACA,UAAA,OAAOT,MAAMS,SAAAA,CAAAA;AACf,QAAA,CAAA;;;;AAMA,QAAA,MAAM/B,MAAAA,CAAO,EAAEnB,KAAAA,EAAOH,IAAAA,EAAM4C,OAAK,EAAqC;AACpE,UAAA,IACE,CAACN,WAAW9E,qBAAAA,IACZ0C,2BAAAA,CAA4BC,OAAOmC,UAAAA,CAAAA,IACnCtC,KAAK+C,uBAAAA,EACL;AACA,YAAA,OAAOH,KAAAA,CAAM7C,aAAAA,CAAcC,IAAAA,CAAAA,CAAAA;AAC7B,UAAA;AAEA,UAAA,MAAMtB,QAAQ3B,mBAAAA,EAAAA;AACdsD,UAAAA,iBAAAA,CAAkBF,KAAAA,EAAO,QAAA,EAAUzB,KAAAA,EAAO4D,UAAAA,CAAAA;AAC1C,UAAA,IAAI,CAAC5D,OAAOG,WAAAA,EAAa;AACvB,YAAA,OAAO+D,MAAM5C,IAAAA,CAAAA;AACf,UAAA;AAEA,UAAA,IAAIsC,WAAWlE,4BAAAA,EAA8B;AAC3C,YAAA,MAAMuC,kBAAAA,CAAmBC,WAAWlC,KAAAA,CAAAA;AACtC,UAAA;AACA,UAAA,MAAMoF,aAAAA,GAAgB1E,iBAAAA,CAAkBY,IAAAA,CAAKX,KAAAA,EAAOX,KAAAA,CAAAA;AAEpD,UAAA,IAAI4D,WAAWnE,KAAAA,EAAO;AACpBoE,YAAAA,MAAAA,CAAOpE,KAAAA,CAAM,CAAA,qBAAA,EAAwBgC,KAAAA,CAAAA,yCAAAA,CAAAA,EAAkD;AACrFtB,cAAAA,WAAAA,EAAaH,KAAAA,CAAMG;aACrB,CAAA;AACF,UAAA;AAEA,UAAA,MAAMwE,SAAAA,GAAY;AAChB,YAAA,GAAGtD,cAAcC,IAAAA,CAAAA;YACjBX,KAAAA,EAAOyE;AACT,WAAA;AACA,UAAA,IAAIxB,WAAWjE,mBAAAA,EAAqB;AAClC,YAAA,OAAOwD,sBAAAA,CAAuBY,wBAAAA,EAA0B/D,KAAAA,EAAOyB,KAAAA,EAAO,UAAUkD,SAAAA,CAAAA;AAClF,UAAA;AACA,UAAA,OAAOT,MAAMS,SAAAA,CAAAA;AACf,QAAA,CAAA;AAEA,QAAA,MAAMwB,UAAAA,CAAW,EAAE1E,KAAAA,EAAOH,IAAAA,EAAM4C,OAAK,EAAqC;AACxE,UAAA,IACE,CAACN,WAAW9E,qBAAAA,IACZ0C,2BAAAA,CAA4BC,OAAOmC,UAAAA,CAAAA,IACnCtC,KAAK+C,uBAAAA,EACL;AACA,YAAA,OAAOH,KAAAA,CAAM7C,aAAAA,CAAcC,IAAAA,CAAAA,CAAAA;AAC7B,UAAA;AAEA,UAAA,MAAMtB,QAAQ3B,mBAAAA,EAAAA;AACdsD,UAAAA,iBAAAA,CAAkBF,KAAAA,EAAO,YAAA,EAAczB,KAAAA,EAAO4D,UAAAA,CAAAA;AAC9C,UAAA,IAAI,CAAC5D,OAAOG,WAAAA,EAAa;AACvB,YAAA,OAAO+D,MAAM5C,IAAAA,CAAAA;AACf,UAAA;AAEA,UAAA,IAAIsC,WAAWlE,4BAAAA,EAA8B;AAC3C,YAAA,MAAMuC,kBAAAA,CAAmBC,WAAWlC,KAAAA,CAAAA;AACtC,UAAA;AACA,UAAA,MAAMoF,aAAAA,GAAgB1E,iBAAAA,CAAkBY,IAAAA,CAAKX,KAAAA,EAAOX,KAAAA,CAAAA;AAEpD,UAAA,IAAI4D,WAAWnE,KAAAA,EAAO;AACpBoE,YAAAA,MAAAA,CAAOpE,KAAAA,CAAM,CAAA,qBAAA,EAAwBgC,KAAAA,CAAAA,6CAAAA,CAAAA,EAAsD;AACzFtB,cAAAA,WAAAA,EAAaH,KAAAA,CAAMG;aACrB,CAAA;AACF,UAAA;AAEA,UAAA,MAAMwE,SAAAA,GAAY;AAChB,YAAA,GAAGtD,cAAcC,IAAAA,CAAAA;YACjBX,KAAAA,EAAOyE;AACT,WAAA;AACA,UAAA,IAAIxB,WAAWjE,mBAAAA,EAAqB;AAClC,YAAA,OAAOwD,sBAAAA,CAAuBY,wBAAAA,EAA0B/D,KAAAA,EAAOyB,KAAAA,EAAO,cAAckD,SAAAA,CAAAA;AACtF,UAAA;AACA,UAAA,OAAOT,MAAMS,SAAAA,CAAAA;AACf,QAAA;AACF;AACF;GACF,CAAA;AACF;AArqBgBjB,MAAAA,CAAAA,qBAAAA,EAAAA,uBAAAA,CAAAA","file":"chunk-KESVEZB2.js","sourcesContent":["/**\n * Prisma Workspace Extension\n *\n * Automatically injects workspaceId into ALL Prisma operations using\n * request-scoped context from AsyncLocalStorage:\n *\n * **Write operations** (create, createMany, update, upsert):\n * - Auto-populates `workspaceId`, `tenantId`, `createdBy`, `updatedBy`, `context` JSON\n *\n * **Read operations** (findMany, findFirst, findUnique, count, aggregate, groupBy):\n * - Auto-injects `workspaceId` into the `where` clause for workspace isolation\n *\n * **Delete operations** (delete, deleteMany):\n * - Auto-injects `workspaceId` into the `where` clause to prevent cross-workspace deletion\n *\n * **Update where clause** (update, updateMany):\n * - Auto-injects `workspaceId` into the `where` clause to prevent cross-workspace updates\n *\n * **How it works:**\n * 1. The GraphQL server's buildContext extracts workspaceId from x-workspace-id header\n * 2. The workspace context store (AsyncLocalStorage) holds the current request's workspace info\n * 3. This Prisma extension intercepts ALL operations and auto-injects workspaceId\n *\n * **What gets auto-populated on writes:**\n * - `workspaceId` field (String or String?) - set from context if not explicitly provided\n * - `context` field (Json) - merged with workspace/actor info if not explicitly provided\n * - `tenantId` field (String or String?) - set from context if not explicitly provided\n * - `createdBy` / `updatedBy` fields - set from actor context if not explicitly provided\n *\n * **What gets auto-injected on reads/updates/deletes:**\n * - `workspaceId` in the `where` clause - ensures queries only access data within the workspace\n *\n * **Opt-out:**\n * - Explicitly providing `workspaceId` in the where/data will override auto-injection\n * - Pass `_skipWorkspaceInjection: true` in the query args to skip entirely\n * - Set `enableReadIsolation: false` in config to disable read-side injection only\n * - Add model names to `excludeModels` to skip specific models\n *\n * @module prisma/workspace-extension\n * @category Database\n */\n\nimport { AsyncLocalStorage } from 'node:async_hooks';\nimport { logger } from '../logger/index.js';\nimport type { InputJsonValue } from './context.js';\n\n// ============================================================================\n// Workspace Context Store (AsyncLocalStorage)\n// ============================================================================\n\n/**\n * Workspace context for the current request scope\n */\nexport interface WorkspaceContext {\n  /** Workspace ID (from x-workspace-id header) */\n  workspaceId?: string;\n  /** Tenant ID (from x-tenant-id header or derived from workspace) */\n  tenantId?: string;\n  /** Actor ID (user/service/app performing the operation) */\n  actorId?: string;\n  /** Actor type (user, app, service, super_admin) */\n  actorType?: string;\n  /** Organization ID */\n  organizationId?: string;\n  /** Project ID */\n  projectId?: string;\n  /** App ID */\n  appId?: string;\n  /** On behalf of actor ID (for consent-based delegation) */\n  onBehalfOf?: string;\n}\n\n/**\n * AsyncLocalStorage for workspace context\n * This is separate from the SDK's general ContextManager to allow\n * fine-grained control over workspace-specific context propagation.\n */\nconst workspaceContextStore = new AsyncLocalStorage<WorkspaceContext>();\n\n/**\n * Fallback context for environments where AsyncLocalStorage.enterWith()\n * doesn't propagate across async boundaries (e.g., Bun + GraphQL Yoga).\n *\n * IMPORTANT: This is NOT request-isolated — it's a module-level singleton.\n * It works for single-request-at-a-time scenarios but could race under\n * concurrent requests. The ALS is the primary mechanism; this is a fallback.\n */\nlet fallbackContext: WorkspaceContext | undefined;\n\n/**\n * Set workspace context for the current async scope.\n * Call this in your GraphQL context builder or middleware.\n *\n * Uses AsyncLocalStorage.enterWith() as the primary mechanism,\n * with a module-level fallback for runtimes where enterWith()\n * doesn't propagate through all async chains (e.g., Bun).\n *\n * @param context - The workspace context for this request\n *\n * @example\n * ```typescript\n * // In your server's buildContext:\n * import { setWorkspaceContext } from '@burdenoff/be-sdk/prisma';\n *\n * buildContext: async (defaultContext) => {\n *   setWorkspaceContext({\n *     workspaceId: defaultContext.workspace?.id,\n *     tenantId: defaultContext.tenant?.id,\n *     actorId: defaultContext.actor?.id,\n *     actorType: defaultContext.actor?.type,\n *     organizationId: defaultContext.organization?.id,\n *   });\n *   return defaultContext;\n * }\n * ```\n */\nexport function setWorkspaceContext(context: WorkspaceContext): void {\n  workspaceContextStore.enterWith(context);\n  fallbackContext = context;\n}\n\n/**\n * Get the current workspace context from AsyncLocalStorage.\n * Falls back to module-level context if ALS returns undefined\n * (can happen in Bun where enterWith() doesn't propagate through\n * some async chains like GraphQL Yoga's execution pipeline).\n *\n * @returns The current workspace context, or undefined if not set\n */\nexport function getWorkspaceContext(): WorkspaceContext | undefined {\n  return workspaceContextStore.getStore() ?? fallbackContext;\n}\n\n/**\n * Run a function with a specific workspace context.\n * The context is isolated to this execution and its children.\n *\n * @param context - The workspace context\n * @param fn - The function to run\n * @returns The result of the function\n *\n * @example\n * ```typescript\n * const result = await withWorkspaceContext(\n *   { workspaceId: 'ws-123', actorId: 'user-456' },\n *   async () => {\n *     // All Prisma operations in here will auto-inject workspaceId\n *     return await prisma.tag.create({ data: { name: 'test' } });\n *   }\n * );\n * ```\n */\nexport async function withWorkspaceContext<T>(context: WorkspaceContext, fn: () => Promise<T>): Promise<T> {\n  return workspaceContextStore.run(context, fn);\n}\n\n/**\n * Run a synchronous function with a specific workspace context.\n */\nexport function withWorkspaceContextSync<T>(context: WorkspaceContext, fn: () => T): T {\n  return workspaceContextStore.run(context, fn);\n}\n\n// ============================================================================\n// Extension Configuration\n// ============================================================================\n\n/**\n * Configuration for the workspace extension\n */\nexport interface WorkspaceExtensionConfig {\n  /**\n   * Enable automatic workspaceId injection on create/update\n   * @default true\n   */\n  enabled?: boolean;\n\n  /**\n   * Enable automatic workspaceId injection on read operations\n   * (findMany, findFirst, findUnique, findFirstOrThrow, findUniqueOrThrow,\n   *  count, aggregate, groupBy)\n   *\n   * When enabled, every read query automatically includes `workspaceId`\n   * in the `where` clause, preventing cross-workspace data leakage.\n   *\n   * @default true\n   */\n  enableReadIsolation?: boolean;\n\n  /**\n   * Enable automatic workspaceId injection on delete operations\n   * (delete, deleteMany)\n   *\n   * When enabled, every delete operation automatically includes `workspaceId`\n   * in the `where` clause, preventing cross-workspace deletion.\n   *\n   * @default true\n   */\n  enableDeleteIsolation?: boolean;\n\n  /**\n   * Enable automatic workspaceId injection into update/updateMany `where` clauses.\n   *\n   * When enabled, update operations automatically include `workspaceId`\n   * in the `where` clause in addition to the `data` injection,\n   * preventing cross-workspace updates.\n   *\n   * @default true\n   */\n  enableUpdateWhereIsolation?: boolean;\n\n  /**\n   * Automatically populate the `context` JSON field with workspace/actor info\n   * @default true\n   */\n  populateContextJson?: boolean;\n\n  /**\n   * Automatically populate `createdBy` field on create operations\n   * @default true\n   */\n  populateCreatedBy?: boolean;\n\n  /**\n   * Automatically populate `updatedBy` field on update operations\n   * @default true\n   */\n  populateUpdatedBy?: boolean;\n\n  /**\n   * Automatically populate `tenantId` field from context\n   * @default false (tenantId is typically derived from workspaceId at the DB level)\n   */\n  populateTenantId?: boolean;\n\n  /**\n   * Automatically populate the `onBehalfOf` field on create operations\n   * (consent-based delegation tracking — defaults to the acting actor when no\n   * delegation is present).\n   *\n   * Unlike `populateContextJson`/`populateCreatedBy`/`populateUpdatedBy`, this\n   * has no per-model opt-out other than `excludeModels` (which also disables\n   * RLS GUC tagging and isolation for that model). Set to `false` for services\n   * whose Prisma models don't carry an `onBehalfOf` column — otherwise every\n   * create on those models throws `Unknown argument onBehalfOf` from Prisma's\n   * client-side validation.\n   *\n   * @default true\n   */\n  populateOnBehalfOf?: boolean;\n\n  /**\n   * Models to exclude from auto-injection (both reads and writes).\n   * Use this for models that intentionally don't have workspaceId.\n   *\n   * Common exclusions: system tables, infra tables, global reference data.\n   *\n   * @default []\n   */\n  excludeModels?: string[];\n\n  /**\n   * Models to exclude from read isolation only.\n   * These models will still get write-side injection (workspaceId on create)\n   * but reads will NOT have workspaceId auto-injected into `where`.\n   *\n   * Use this for child/join tables where workspace scoping is inherited\n   * through parent relations, or for models queried by ID that don't\n   * have a workspaceId column.\n   *\n   * @default []\n   */\n  excludeModelsFromReadIsolation?: string[];\n\n  /**\n   * When true, throws an error if workspaceId is missing from context\n   * for any non-excluded model operation. This prevents silent\n   * workspace-unscoped queries that could leak data across workspaces.\n   *\n   * When false, operations without workspace context proceed without\n   * workspaceId injection (legacy behavior).\n   *\n   * @default true\n   */\n  strictMode?: boolean;\n\n  /**\n   * Operations that are allowed without workspace context even in strict mode.\n   * Use `Model.operation` format (e.g., `['Workspace.create', 'RevokedToken.findMany']`).\n   *\n   * Valid operation names: create, createMany, createManyAndReturn, update, updateMany,\n   * upsert, findMany, findFirst, findFirstOrThrow, findUnique, findUniqueOrThrow,\n   * count, aggregate, groupBy, delete, deleteMany.\n   *\n   * @default []\n   */\n  allowedUnguardedOperations?: string[];\n\n  /**\n   * Log injection events (useful for debugging)\n   * @default false\n   */\n  debug?: boolean;\n\n  /**\n   * Tag the PostgreSQL connection with workspace attribution for pg_stat_activity visibility.\n   *\n   * When enabled, the first DB operation per workspace context sets:\n   *   `application_name = 'svc=<SERVICE_NAME>;ws=<workspaceId>'`\n   *\n   * This makes workspace-level query attribution visible in pg_stat_activity,\n   * pg_locks, auto_explain, and monitoring tools without any schema changes.\n   * Subsequent operations in the same request are deduplicated via WeakSet,\n   * costing ~0 overhead after the first round-trip per request context.\n   *\n   * NOTE: This is a session-level SET so attribution may drift across ops\n   * that reuse the same pooled connection from different requests. Use for\n   * aggregate observability, not per-query forensics.\n   *\n   * @default false\n   */\n  enableApplicationNameTagging?: boolean;\n\n  /**\n   * Set the `app.workspace_id` GUC for Row Level Security enforcement.\n   *\n   * When enabled, the first DB operation per workspace context executes:\n   *   `SET app.workspace_id = '<workspaceId>'`\n   *\n   * RLS policies using `current_setting('app.workspace_id', true)` then filter\n   * rows by workspace, providing a defense-in-depth backstop to the application-\n   * layer workspaceId injection in the WHERE clause.\n   *\n   * Pair with migrations that run per table:\n   *   `ALTER TABLE t ENABLE ROW LEVEL SECURITY;`\n   *   `CREATE POLICY ws_isolation ON t\n   *      USING (workspace_id = current_setting('app.workspace_id', true))\n   *      WITH CHECK (workspace_id = current_setting('app.workspace_id', true));`\n   *\n   * Fail-closed semantics: if the GUC is unset (NULL from missing_ok=true),\n   * `workspace_id = NULL` is always false, so RLS returns no rows — leaking\n   * nothing rather than everything.\n   *\n   * NOTE: Uses session-level SET (safe without a pooler or with session-mode\n   * pooling). Upgrade to SET LOCAL inside `$transaction` when PgBouncer\n   * transaction-mode pooling is enabled (Phase 3b).\n   *\n   * @default false\n   */\n  enableRlsGucTagging?: boolean;\n}\n\n/**\n * Default configuration. Exported so consumers/tests can spread over the\n * real defaults (`{ ...defaultWorkspaceExtensionConfig, populateOnBehalfOf: false }`)\n * instead of re-declaring every field.\n */\nexport const defaultWorkspaceExtensionConfig: Required<WorkspaceExtensionConfig> = {\n  enabled: true,\n  enableReadIsolation: true,\n  enableDeleteIsolation: true,\n  enableUpdateWhereIsolation: true,\n  populateContextJson: true,\n  populateCreatedBy: true,\n  populateUpdatedBy: true,\n  populateTenantId: false,\n  populateOnBehalfOf: true,\n  excludeModels: [],\n  excludeModelsFromReadIsolation: [],\n  strictMode: true,\n  allowedUnguardedOperations: [],\n  debug: false,\n  enableApplicationNameTagging: false,\n  enableRlsGucTagging: false,\n};\n\n// ============================================================================\n// Data Injection Helpers\n// ============================================================================\n\n/**\n * Check if a field exists in the data object (including being set to null/undefined explicitly)\n */\nfunction hasField(data: Record<string, unknown>, field: string): boolean {\n  return field in data;\n}\n\n/**\n * Inject workspace-related fields into create data.\n *\n * Exported (alongside `injectWhereWorkspaceId`) so consumers can unit-test\n * exactly what a given `WorkspaceExtensionConfig` injects for their own\n * Prisma schema — in particular, to verify `populateOnBehalfOf: false` /\n * `populateContextJson: false` actually suppress `onBehalfOf`/`context`\n * before wiring the extension against models that don't have those columns.\n */\nexport function injectCreateFields(\n  data: Record<string, unknown>,\n  wsCtx: WorkspaceContext,\n  config: Required<WorkspaceExtensionConfig>\n): Record<string, unknown> {\n  const injected = { ...data };\n\n  // Inject workspaceId if not already provided\n  if (wsCtx.workspaceId && !hasField(injected, 'workspaceId')) {\n    injected['workspaceId'] = wsCtx.workspaceId;\n  }\n\n  // Inject tenantId if configured and not already provided\n  if (config.populateTenantId && wsCtx.tenantId && !hasField(injected, 'tenantId')) {\n    injected['tenantId'] = wsCtx.tenantId;\n  }\n\n  // Inject createdBy if configured and not already provided\n  if (config.populateCreatedBy && wsCtx.actorId && !hasField(injected, 'createdBy')) {\n    injected['createdBy'] = wsCtx.actorId;\n  }\n\n  // Inject updatedBy on create as well (initial value)\n  if (config.populateUpdatedBy && wsCtx.actorId && !hasField(injected, 'updatedBy')) {\n    injected['updatedBy'] = wsCtx.actorId;\n  }\n\n  // Inject onBehalfOf (for consent-based delegation tracking)\n  // If onBehalfOf is in context (from consent), use it; otherwise defaults to actorId (self-action)\n  if (config.populateOnBehalfOf && wsCtx.onBehalfOf && !hasField(injected, 'onBehalfOf')) {\n    injected['onBehalfOf'] = wsCtx.onBehalfOf;\n  } else if (config.populateOnBehalfOf && wsCtx.actorId && !hasField(injected, 'onBehalfOf')) {\n    // Default to actorId if no delegation (self-action)\n    injected['onBehalfOf'] = wsCtx.actorId;\n  }\n\n  // Populate context JSON field\n  if (config.populateContextJson && !hasField(injected, 'context')) {\n    const contextJson = buildContextJsonFromWorkspaceContext(wsCtx);\n    if (contextJson) {\n      injected['context'] = contextJson;\n    }\n  }\n\n  return injected;\n}\n\n/**\n * Inject workspace-related fields into update data\n */\nfunction injectUpdateFields(\n  data: Record<string, unknown>,\n  wsCtx: WorkspaceContext,\n  config: Required<WorkspaceExtensionConfig>\n): Record<string, unknown> {\n  const injected = { ...data };\n\n  // Inject updatedBy if configured and not already provided\n  if (config.populateUpdatedBy && wsCtx.actorId && !hasField(injected, 'updatedBy')) {\n    injected['updatedBy'] = wsCtx.actorId;\n  }\n\n  // Note: We intentionally do NOT auto-inject workspaceId on updates\n  // because updates target existing records (workspaceId is immutable after creation)\n  // and changing it would be a data integrity issue.\n\n  return injected;\n}\n\n/**\n * Inject workspaceId into a where clause.\n * Only injects if workspaceId is available in context and not already present in where.\n *\n * For operations that may not have a where clause (e.g., findMany without filters),\n * creates a new where object with just workspaceId.\n */\nfunction injectWhereClause(\n  where: Record<string, unknown> | undefined,\n  wsCtx: WorkspaceContext\n): Record<string, unknown> | undefined {\n  if (!wsCtx.workspaceId) return where;\n\n  if (!where) {\n    // No where clause exists, create one with just workspaceId\n    return { workspaceId: wsCtx.workspaceId };\n  }\n\n  // Only inject if not already present\n  if (!hasField(where, 'workspaceId')) {\n    return { ...where, workspaceId: wsCtx.workspaceId };\n  }\n\n  return where;\n}\n\n/**\n * Build context JSON from workspace context\n */\nfunction buildContextJsonFromWorkspaceContext(wsCtx: WorkspaceContext): InputJsonValue | undefined {\n  const context: Record<string, string> = {};\n\n  if (wsCtx.workspaceId) context['workspaceId'] = wsCtx.workspaceId;\n  if (wsCtx.actorId) context['userId'] = wsCtx.actorId;\n  if (wsCtx.organizationId) context['organizationId'] = wsCtx.organizationId;\n  if (wsCtx.projectId) context['projectId'] = wsCtx.projectId;\n  if (wsCtx.appId) context['appId'] = wsCtx.appId;\n\n  return Object.keys(context).length > 0 ? context : undefined;\n}\n\n/**\n * Inject workspaceId into where clause for read/update/delete operations.\n * This is a utility function exported for services that want to manually\n * add workspace scoping to their queries.\n *\n * @param where - The existing where clause\n * @param wsCtx - The workspace context (or auto-detected from AsyncLocalStorage)\n * @returns The where clause with workspaceId injected if not already present\n *\n * @example\n * ```typescript\n * import { injectWhereWorkspaceId, getWorkspaceContext } from '@burdenoff/be-sdk/prisma';\n *\n * const wsCtx = getWorkspaceContext();\n * const where = injectWhereWorkspaceId({ status: 'ACTIVE' }, wsCtx);\n * // Result: { status: 'ACTIVE', workspaceId: 'ws-123' }\n * ```\n */\nexport function injectWhereWorkspaceId(\n  where: Record<string, unknown> | undefined,\n  wsCtx?: WorkspaceContext\n): Record<string, unknown> | undefined {\n  const ctx = wsCtx ?? getWorkspaceContext();\n  if (!where || !ctx?.workspaceId) return where;\n\n  // Only inject if not already present\n  if (!hasField(where, 'workspaceId')) {\n    return { ...where, workspaceId: ctx.workspaceId };\n  }\n\n  return where;\n}\n\n/**\n * Remove the _skipWorkspaceInjection flag from args before passing to Prisma.\n * Using a dedicated function avoids ESLint unused-variable warnings from destructuring.\n */\nfunction stripSkipFlag<T extends Record<string, unknown>>(args: T): Omit<T, '_skipWorkspaceInjection'> {\n  const cleaned = { ...args };\n  delete (cleaned as Record<string, unknown>)['_skipWorkspaceInjection'];\n  return cleaned;\n}\n\n/**\n * Check if a model should be excluded from read isolation.\n * A model is excluded if it's in excludeModels OR excludeModelsFromReadIsolation.\n */\nfunction isExcludedFromReadIsolation(model: string, config: Required<WorkspaceExtensionConfig>): boolean {\n  return config.excludeModels.includes(model) || config.excludeModelsFromReadIsolation.includes(model);\n}\n\n// ============================================================================\n// Strict Mode Enforcement\n// ============================================================================\n\n/**\n * Enforce strict mode: throw if workspace context is missing and the operation\n * is not explicitly allowed to run without it.\n *\n * @returns true if the operation should proceed without workspace injection (non-strict or allowed)\n * @throws Error if strict mode is enabled and the operation is not allowed\n */\nfunction enforceStrictMode(\n  model: string,\n  operation: string,\n  wsCtx: WorkspaceContext | undefined,\n  config: Required<WorkspaceExtensionConfig>\n): void {\n  // If workspace context has a workspaceId, nothing to enforce\n  if (wsCtx?.workspaceId) return;\n\n  // If strict mode is off, allow silently\n  if (!config.strictMode) return;\n\n  // Check if this specific operation is allowed without workspace context\n  const opKey = `${model}.${operation}`;\n  if (config.allowedUnguardedOperations.includes(opKey)) return;\n\n  // Strict mode violation — throw\n  throw new Error(\n    `[WorkspaceExtension] Workspace context required for ${model}.${operation}. ` +\n      `No workspaceId found in request context. To bypass, either: ` +\n      `(1) add \"${model}\" to excludeModels, ` +\n      `(2) add \"${opKey}\" to allowedUnguardedOperations, or ` +\n      `(3) pass _skipWorkspaceInjection: true in the query args.`\n  );\n}\n\n// ============================================================================\n// Prisma Extension\n// ============================================================================\n\n/**\n * Standard args shape for operations with a `where` clause\n */\ninterface WhereArgs {\n  where?: Record<string, unknown>;\n  _skipWorkspaceInjection?: boolean;\n  [key: string]: unknown;\n}\n\n/**\n * Standard handler params from Prisma $extends\n */\ninterface ExtensionHandlerParams<TArgs> {\n  model: string;\n  args: TArgs;\n  query: (args: unknown) => Promise<unknown>;\n}\n\n/**\n * Add workspace extension to a Prisma client.\n *\n * This extension provides comprehensive workspace isolation by automatically\n * injecting workspaceId into ALL Prisma operations:\n *\n * **Writes**: Auto-populates workspaceId, tenantId, createdBy, updatedBy, context JSON\n * **Reads**: Auto-injects workspaceId into where clause (findMany, findFirst, etc.)\n * **Updates**: Auto-injects workspaceId into where clause + updatedBy into data\n * **Deletes**: Auto-injects workspaceId into where clause\n *\n * **Chain order matters**: Apply this extension AFTER the graph extension\n * (handled automatically by createDatabaseClient).\n *\n * @param baseClient - The Prisma client to extend\n * @param config - Extension configuration\n * @returns Extended Prisma client with workspace auto-injection\n *\n * @example\n * ```typescript\n * import { PrismaClient } from './generated/prisma/client.js';\n * import { addWorkspaceExtension } from '@burdenoff/be-sdk/prisma';\n *\n * const baseClient = new PrismaClient({ adapter });\n * const client = addWorkspaceExtension(baseClient, {\n *   populateContextJson: true,\n *   populateCreatedBy: true,\n *   enableReadIsolation: true,\n *   debug: process.env.NODE_ENV === 'development',\n *   excludeModels: ['CircuitBreakerState', 'SchedulerState'],\n *   excludeModelsFromReadIsolation: ['Permission', 'RbacResourceType'],\n * });\n * ```\n */\n// ============================================================================\n// Connection Tagging (Phase 0.2)\n// ============================================================================\n\n/** Minimal Prisma raw-exec surface needed for SET application_name */\ntype RawPrismaForTagging = {\n  $executeRawUnsafe: (query: string, ...values: unknown[]) => Promise<number>;\n};\n\n/**\n * WeakSet of contexts that have already had the connection tagged this request.\n * WorkspaceContext objects live only for the duration of a request, so entries\n * are automatically GC'd when the context goes out of scope — no manual cleanup.\n */\nconst taggedContexts = new WeakSet<WorkspaceContext>();\n\n/**\n * Tag the current Postgres connection with workspace attribution (once per context).\n * Sets `application_name = 'svc=<name>;ws=<workspaceId>'` at the session level.\n * Non-fatal: tagging failures are swallowed so the main operation still proceeds.\n *\n * @internal Exported for unit testing only — do not call from product code.\n */\nexport async function maybeTagConnection(rawPrisma: RawPrismaForTagging, wsCtx: WorkspaceContext): Promise<void> {\n  if (taggedContexts.has(wsCtx)) return;\n  taggedContexts.add(wsCtx);\n  // Strip non-safe chars; workspace IDs are UUIDs/CUIDs, service names are kebab-case\n  const safeSvc = (process.env['SERVICE_NAME'] ?? 'svc').replace(/[^a-zA-Z0-9\\-_]/g, '');\n  const safeWs = (wsCtx.workspaceId ?? '').replace(/[^a-zA-Z0-9\\-_]/g, '');\n  const tag = `svc=${safeSvc};ws=${safeWs}`;\n  try {\n    await rawPrisma.$executeRawUnsafe(`SET application_name = '${tag}'`);\n  } catch {\n    // Retry on the next operation if this one failed\n    taggedContexts.delete(wsCtx);\n  }\n}\n\n// ============================================================================\n// RLS GUC Tagging (Phase 3)\n// ============================================================================\n\n/**\n * WeakSet of contexts that have already had the RLS GUC set this request.\n */\nconst rlsTaggedContexts = new WeakSet<WorkspaceContext>();\n\n/**\n * Set `app.workspace_id` GUC for RLS enforcement (once per context, session-level).\n *\n * When set, RLS policies using `current_setting('app.workspace_id', true)` filter\n * rows to the current workspace. Non-fatal: failures are swallowed and retried on\n * the next operation via WeakSet entry removal.\n *\n * NOT used by the extension's operation handlers below (see\n * `runOperationWithRlsGuc`) — session-level `SET` is unsafe once traffic is routed\n * through PgBouncer in transaction-pooling mode (see that function's doc comment\n * for the full incident writeup, BOFF-5488). Kept as a standalone export, still\n * unit tested, for any caller that genuinely runs on an unpooled/session-pooled\n * connection where session-level `SET` is sufficient.\n *\n * @internal Exported for unit testing only — do not call from product code.\n */\nexport async function maybeSetRlsGuc(rawPrisma: RawPrismaForTagging, wsCtx: WorkspaceContext): Promise<void> {\n  if (rlsTaggedContexts.has(wsCtx)) return;\n  rlsTaggedContexts.add(wsCtx);\n  // Allow alphanumeric, hyphens, underscores — CUID/UUID safe, prevents SQL injection\n  const safeWs = (wsCtx.workspaceId ?? '').replace(/[^a-zA-Z0-9\\-_]/g, '');\n  try {\n    await rawPrisma.$executeRawUnsafe(`SET app.workspace_id = '${safeWs}'`);\n  } catch {\n    // Retry on the next operation if this one failed\n    rlsTaggedContexts.delete(wsCtx);\n  }\n}\n\n/**\n * A Prisma interactive-transaction client (`tx` inside `$transaction(async (tx) =>\n * …)`), typed with just enough surface for `runOperationWithRlsGuc`: raw SQL\n * execution, plus one delegate per model keyed by its Prisma Client property name\n * (e.g. `customer`, `driver`). The index signature is `unknown` (not a concrete\n * delegate shape) because this helper is generic across every model in the schema\n * — callers narrow and verify the specific delegate/method they need at runtime.\n */\ntype PrismaTxForRlsGuc = {\n  $executeRawUnsafe: (query: string, ...values: unknown[]) => Promise<number>;\n  [modelClientProperty: string]: unknown;\n};\n\n/** Minimal Prisma client surface needed to open an interactive transaction. */\ntype RawPrismaForRlsTransaction = {\n  $transaction: <TResult>(fn: (tx: PrismaTxForRlsGuc) => Promise<TResult>) => Promise<TResult>;\n};\n\n/**\n * Prisma DMMF model name (e.g. `Customer`) -> Prisma Client delegate property\n * (e.g. `customer`). Matches Prisma's own client-generation rule: lower-case the\n * first character, leave the rest untouched.\n */\nfunction modelToClientProperty(model: string): string {\n  return model.length > 0 ? model.charAt(0).toLowerCase() + model.slice(1) : model;\n}\n\n/**\n * Run a single Prisma operation with `app.workspace_id` set as a\n * **transaction-scoped** (`SET LOCAL`) GUC immediately ahead of it, so Postgres\n * RLS policies using `current_setting('app.workspace_id', true)` see the right\n * value for both the `USING` (read) and `WITH CHECK` (write) clauses.\n *\n * Session-level `SET` (`maybeSetRlsGuc` above, the original Phase 3\n * implementation) is NOT safe once traffic goes through PgBouncer in\n * **transaction pooling mode** — the mode configured on all four\n * `boff-pg-{global,wspace}-{alpha,prod}-cin` servers' built-in PgBouncer (see\n * infra-specs/current-architecture/02-database-postgres-age.md). PgBouncer hands\n * the physical backend connection back to the pool after every standalone\n * statement/implicit transaction, so a `SET` executed by one statement is not\n * guaranteed visible to the very next one, even over what looks like the same\n * logical client connection.\n *\n * This was exactly BOFF-5488: `wspace-movethewheels-svc`'s RLS Phase 3b (FORCE\n * ROW LEVEL SECURITY + a non-owner runtime role, `wspace_movethewheels_app`,\n * pointed at the pooled `:6432` connection) made the `ws_isolation` policy bind\n * for real, but the session-level `SET` from `maybeSetRlsGuc` was landing on a\n * different pooled backend connection than the write that followed it — so every\n * write failed `WITH CHECK` (`new row violates row-level security policy`) and\n * every read matched zero rows.\n *\n * A Prisma **interactive transaction** (`$transaction(async (tx) => …)`) pins one\n * physical connection for the callback's full duration — PgBouncer sees a single\n * unbroken `BEGIN … COMMIT` and cannot reassign the backend mid-transaction — so\n * `SET LOCAL` inside it is guaranteed visible to the operation issued right after\n * it in the same callback. Safe under transaction-mode pooling, session-mode\n * pooling, and with no pooler in front of Postgres at all. The extra round trip\n * (one interactive transaction instead of one direct call) only applies to\n * services that opt into `enableRlsGucTagging` — off by default.\n *\n * @internal Exported for unit testing only — do not call from product code.\n */\nexport async function runOperationWithRlsGuc<TResult>(\n  rootClient: RawPrismaForRlsTransaction,\n  wsCtx: WorkspaceContext,\n  model: string,\n  operation: string,\n  args: unknown\n): Promise<TResult> {\n  const safeWs = (wsCtx.workspaceId ?? '').replace(/[^a-zA-Z0-9\\-_]/g, '');\n  const clientProperty = modelToClientProperty(model);\n  return rootClient.$transaction(async (tx) => {\n    await tx.$executeRawUnsafe(`SET LOCAL app.workspace_id = '${safeWs}'`);\n    // `tx[clientProperty]` is typed `unknown` (see PrismaTxForRlsGuc) because this\n    // helper is generic across every model; narrow to the minimal callable shape\n    // needed and verify at runtime before invoking rather than trusting a cast.\n    const delegate = tx[clientProperty] as Record<string, (opArgs: unknown) => Promise<TResult>> | undefined;\n    const method = delegate?.[operation];\n    if (typeof method !== 'function') {\n      throw new Error(\n        `[WorkspaceExtension] Unable to resolve ${model}.${operation} (client property \"${clientProperty}\") ` +\n          'on the interactive-transaction client for RLS GUC tagging.'\n      );\n    }\n    return method(args);\n  });\n}\n\nexport function addWorkspaceExtension<T>(baseClient: T, config?: WorkspaceExtensionConfig): T {\n  const fullConfig: Required<WorkspaceExtensionConfig> = {\n    ...defaultWorkspaceExtensionConfig,\n    ...config,\n  };\n\n  if (!fullConfig.enabled) {\n    logger.info('[WorkspaceExtension] Extension disabled by configuration');\n    return baseClient;\n  }\n\n  // Capture the unwrapped client for connection tagging (pre-extension, avoids recursion)\n  const rawPrisma = baseClient as unknown as RawPrismaForTagging;\n  // Same unwrapped client, typed for the interactive-transaction RLS GUC path\n  // (see runOperationWithRlsGuc) — separate cast so maybeTagConnection/\n  // maybeSetRlsGuc's narrower RawPrismaForTagging type is untouched.\n  const rawPrismaForTransactions = baseClient as unknown as RawPrismaForRlsTransaction;\n\n  // Type assertion for Prisma client $extends\n  const prismaClient = baseClient as { $extends: (args: unknown) => T };\n\n  logger.info('[WorkspaceExtension] Workspace extension enabled', {\n    populateContextJson: fullConfig.populateContextJson,\n    populateCreatedBy: fullConfig.populateCreatedBy,\n    populateUpdatedBy: fullConfig.populateUpdatedBy,\n    populateTenantId: fullConfig.populateTenantId,\n    enableReadIsolation: fullConfig.enableReadIsolation,\n    enableDeleteIsolation: fullConfig.enableDeleteIsolation,\n    enableUpdateWhereIsolation: fullConfig.enableUpdateWhereIsolation,\n    strictMode: fullConfig.strictMode,\n    excludeModels: fullConfig.excludeModels,\n    excludeModelsFromReadIsolation: fullConfig.excludeModelsFromReadIsolation,\n    allowedUnguardedOperations: fullConfig.allowedUnguardedOperations,\n    enableApplicationNameTagging: fullConfig.enableApplicationNameTagging,\n    enableRlsGucTagging: fullConfig.enableRlsGucTagging,\n  });\n\n  return prismaClient.$extends({\n    query: {\n      $allModels: {\n        // ================================================================\n        // WRITE OPERATIONS - inject workspaceId into data\n        // ================================================================\n\n        async create({\n          model,\n          args,\n          query,\n        }: ExtensionHandlerParams<{\n          data: Record<string, unknown>;\n          _skipWorkspaceInjection?: boolean;\n          [key: string]: unknown;\n        }>) {\n          // Skip if model is excluded or injection is explicitly skipped\n          if (fullConfig.excludeModels.includes(model) || args._skipWorkspaceInjection) {\n            return query(stripSkipFlag(args));\n          }\n\n          const wsCtx = getWorkspaceContext();\n          enforceStrictMode(model, 'create', wsCtx, fullConfig);\n          if (!wsCtx?.workspaceId) {\n            return query(args);\n          }\n\n          if (fullConfig.enableApplicationNameTagging) {\n            await maybeTagConnection(rawPrisma, wsCtx);\n          }\n          // Inject fields into data\n          const injectedData = injectCreateFields(args.data, wsCtx, fullConfig);\n\n          if (fullConfig.debug) {\n            const injectedKeys = Object.keys(injectedData).filter((k) => !(k in args.data));\n            if (injectedKeys.length > 0) {\n              logger.debug(`[WorkspaceExtension] ${model}.create - injected: ${injectedKeys.join(', ')}`, {\n                workspaceId: wsCtx.workspaceId,\n                actorId: wsCtx.actorId,\n              });\n            }\n          }\n\n          const finalArgs = {\n            ...stripSkipFlag(args),\n            data: injectedData,\n          };\n          if (fullConfig.enableRlsGucTagging) {\n            return runOperationWithRlsGuc(rawPrismaForTransactions, wsCtx, model, 'create', finalArgs);\n          }\n          return query(finalArgs);\n        },\n\n        async createMany({\n          model,\n          args,\n          query,\n        }: ExtensionHandlerParams<{\n          data: Record<string, unknown> | Record<string, unknown>[];\n          _skipWorkspaceInjection?: boolean;\n          [key: string]: unknown;\n        }>) {\n          if (fullConfig.excludeModels.includes(model) || args._skipWorkspaceInjection) {\n            return query(stripSkipFlag(args));\n          }\n\n          const wsCtx = getWorkspaceContext();\n          enforceStrictMode(model, 'createMany', wsCtx, fullConfig);\n          if (!wsCtx?.workspaceId) {\n            return query(args);\n          }\n\n          if (fullConfig.enableApplicationNameTagging) {\n            await maybeTagConnection(rawPrisma, wsCtx);\n          }\n          // Handle both single object and array\n          const dataArray = Array.isArray(args.data) ? args.data : [args.data];\n          const injectedData = dataArray.map((item) => injectCreateFields(item, wsCtx, fullConfig));\n\n          const finalArgs = {\n            ...stripSkipFlag(args),\n            data: Array.isArray(args.data) ? injectedData : injectedData[0],\n          };\n          if (fullConfig.enableRlsGucTagging) {\n            return runOperationWithRlsGuc(rawPrismaForTransactions, wsCtx, model, 'createMany', finalArgs);\n          }\n          return query(finalArgs);\n        },\n\n        async createManyAndReturn({\n          model,\n          args,\n          query,\n        }: ExtensionHandlerParams<{\n          data: Record<string, unknown> | Record<string, unknown>[];\n          _skipWorkspaceInjection?: boolean;\n          [key: string]: unknown;\n        }>) {\n          if (fullConfig.excludeModels.includes(model) || args._skipWorkspaceInjection) {\n            return query(stripSkipFlag(args));\n          }\n\n          const wsCtx = getWorkspaceContext();\n          enforceStrictMode(model, 'createManyAndReturn', wsCtx, fullConfig);\n          if (!wsCtx?.workspaceId) {\n            return query(args);\n          }\n\n          if (fullConfig.enableApplicationNameTagging) {\n            await maybeTagConnection(rawPrisma, wsCtx);\n          }\n          const dataArray = Array.isArray(args.data) ? args.data : [args.data];\n          const injectedData = dataArray.map((item) => injectCreateFields(item, wsCtx, fullConfig));\n\n          const finalArgs = {\n            ...stripSkipFlag(args),\n            data: Array.isArray(args.data) ? injectedData : injectedData[0],\n          };\n          if (fullConfig.enableRlsGucTagging) {\n            return runOperationWithRlsGuc(rawPrismaForTransactions, wsCtx, model, 'createManyAndReturn', finalArgs);\n          }\n          return query(finalArgs);\n        },\n\n        // ================================================================\n        // UPDATE OPERATIONS - inject updatedBy into data + workspaceId into where\n        // ================================================================\n\n        async update({\n          model,\n          args,\n          query,\n        }: ExtensionHandlerParams<{\n          data: Record<string, unknown>;\n          where?: Record<string, unknown>;\n          _skipWorkspaceInjection?: boolean;\n          [key: string]: unknown;\n        }>) {\n          if (fullConfig.excludeModels.includes(model) || args._skipWorkspaceInjection) {\n            return query(stripSkipFlag(args));\n          }\n\n          const wsCtx = getWorkspaceContext();\n          enforceStrictMode(model, 'update', wsCtx, fullConfig);\n          if (!wsCtx?.workspaceId) {\n            return query(args);\n          }\n\n          if (fullConfig.enableApplicationNameTagging) {\n            await maybeTagConnection(rawPrisma, wsCtx);\n          }\n          const injectedData = injectUpdateFields(args.data, wsCtx, fullConfig);\n\n          // Inject workspaceId into where clause for update isolation\n          let injectedWhere = args.where;\n          if (fullConfig.enableUpdateWhereIsolation && !isExcludedFromReadIsolation(model, fullConfig)) {\n            injectedWhere = injectWhereClause(args.where, wsCtx);\n          }\n\n          if (fullConfig.debug) {\n            const injectedDataKeys = Object.keys(injectedData).filter((k) => !(k in args.data));\n            const whereChanged = injectedWhere !== args.where;\n            if (injectedDataKeys.length > 0 || whereChanged) {\n              logger.debug(\n                `[WorkspaceExtension] ${model}.update - injected data: ${injectedDataKeys.join(', ')}${whereChanged ? ', where: workspaceId' : ''}`\n              );\n            }\n          }\n\n          const finalArgs = {\n            ...stripSkipFlag(args),\n            data: injectedData,\n            where: injectedWhere,\n          };\n          if (fullConfig.enableRlsGucTagging) {\n            return runOperationWithRlsGuc(rawPrismaForTransactions, wsCtx, model, 'update', finalArgs);\n          }\n          return query(finalArgs);\n        },\n\n        async updateMany({\n          model,\n          args,\n          query,\n        }: ExtensionHandlerParams<{\n          data: Record<string, unknown>;\n          where?: Record<string, unknown>;\n          _skipWorkspaceInjection?: boolean;\n          [key: string]: unknown;\n        }>) {\n          if (fullConfig.excludeModels.includes(model) || args._skipWorkspaceInjection) {\n            return query(stripSkipFlag(args));\n          }\n\n          const wsCtx = getWorkspaceContext();\n          enforceStrictMode(model, 'updateMany', wsCtx, fullConfig);\n          if (!wsCtx?.workspaceId) {\n            return query(args);\n          }\n\n          if (fullConfig.enableApplicationNameTagging) {\n            await maybeTagConnection(rawPrisma, wsCtx);\n          }\n          const injectedData = injectUpdateFields(args.data, wsCtx, fullConfig);\n\n          // Inject workspaceId into where clause for update isolation\n          let injectedWhere = args.where;\n          if (fullConfig.enableUpdateWhereIsolation && !isExcludedFromReadIsolation(model, fullConfig)) {\n            injectedWhere = injectWhereClause(args.where, wsCtx);\n          }\n\n          const finalArgs = {\n            ...stripSkipFlag(args),\n            data: injectedData,\n            where: injectedWhere,\n          };\n          if (fullConfig.enableRlsGucTagging) {\n            return runOperationWithRlsGuc(rawPrismaForTransactions, wsCtx, model, 'updateMany', finalArgs);\n          }\n          return query(finalArgs);\n        },\n\n        async upsert({\n          model,\n          args,\n          query,\n        }: ExtensionHandlerParams<{\n          create: Record<string, unknown>;\n          update: Record<string, unknown>;\n          where?: Record<string, unknown>;\n          _skipWorkspaceInjection?: boolean;\n          [key: string]: unknown;\n        }>) {\n          if (fullConfig.excludeModels.includes(model) || args._skipWorkspaceInjection) {\n            return query(stripSkipFlag(args));\n          }\n\n          const wsCtx = getWorkspaceContext();\n          enforceStrictMode(model, 'upsert', wsCtx, fullConfig);\n          if (!wsCtx?.workspaceId) {\n            return query(args);\n          }\n\n          if (fullConfig.enableApplicationNameTagging) {\n            await maybeTagConnection(rawPrisma, wsCtx);\n          }\n          const injectedCreate = injectCreateFields(args.create, wsCtx, fullConfig);\n          const injectedUpdate = injectUpdateFields(args.update, wsCtx, fullConfig);\n\n          // Inject workspaceId into where clause for upsert isolation\n          let injectedWhere = args.where;\n          if (fullConfig.enableUpdateWhereIsolation && !isExcludedFromReadIsolation(model, fullConfig)) {\n            injectedWhere = injectWhereClause(args.where, wsCtx);\n          }\n\n          const finalArgs = {\n            ...stripSkipFlag(args),\n            create: injectedCreate,\n            update: injectedUpdate,\n            where: injectedWhere,\n          };\n          if (fullConfig.enableRlsGucTagging) {\n            return runOperationWithRlsGuc(rawPrismaForTransactions, wsCtx, model, 'upsert', finalArgs);\n          }\n          return query(finalArgs);\n        },\n\n        // ================================================================\n        // READ OPERATIONS - inject workspaceId into where clause\n        // ================================================================\n\n        async findMany({ model, args, query }: ExtensionHandlerParams<WhereArgs>) {\n          if (\n            !fullConfig.enableReadIsolation ||\n            isExcludedFromReadIsolation(model, fullConfig) ||\n            args._skipWorkspaceInjection\n          ) {\n            return query(stripSkipFlag(args));\n          }\n\n          const wsCtx = getWorkspaceContext();\n          enforceStrictMode(model, 'findMany', wsCtx, fullConfig);\n          if (!wsCtx?.workspaceId) {\n            return query(args);\n          }\n\n          if (fullConfig.enableApplicationNameTagging) {\n            await maybeTagConnection(rawPrisma, wsCtx);\n          }\n          const injectedWhere = injectWhereClause(args.where, wsCtx);\n\n          if (fullConfig.debug) {\n            logger.debug(`[WorkspaceExtension] ${model}.findMany - injected workspaceId into where`, {\n              workspaceId: wsCtx.workspaceId,\n            });\n          }\n\n          const finalArgs = {\n            ...stripSkipFlag(args),\n            where: injectedWhere,\n          };\n          if (fullConfig.enableRlsGucTagging) {\n            return runOperationWithRlsGuc(rawPrismaForTransactions, wsCtx, model, 'findMany', finalArgs);\n          }\n          return query(finalArgs);\n        },\n\n        async findFirst({ model, args, query }: ExtensionHandlerParams<WhereArgs>) {\n          if (\n            !fullConfig.enableReadIsolation ||\n            isExcludedFromReadIsolation(model, fullConfig) ||\n            args._skipWorkspaceInjection\n          ) {\n            return query(stripSkipFlag(args));\n          }\n\n          const wsCtx = getWorkspaceContext();\n          enforceStrictMode(model, 'findFirst', wsCtx, fullConfig);\n          if (!wsCtx?.workspaceId) {\n            return query(args);\n          }\n\n          if (fullConfig.enableApplicationNameTagging) {\n            await maybeTagConnection(rawPrisma, wsCtx);\n          }\n          const injectedWhere = injectWhereClause(args.where, wsCtx);\n\n          if (fullConfig.debug) {\n            logger.debug(`[WorkspaceExtension] ${model}.findFirst - injected workspaceId into where`, {\n              workspaceId: wsCtx.workspaceId,\n            });\n          }\n\n          const finalArgs = {\n            ...stripSkipFlag(args),\n            where: injectedWhere,\n          };\n          if (fullConfig.enableRlsGucTagging) {\n            return runOperationWithRlsGuc(rawPrismaForTransactions, wsCtx, model, 'findFirst', finalArgs);\n          }\n          return query(finalArgs);\n        },\n\n        async findFirstOrThrow({ model, args, query }: ExtensionHandlerParams<WhereArgs>) {\n          if (\n            !fullConfig.enableReadIsolation ||\n            isExcludedFromReadIsolation(model, fullConfig) ||\n            args._skipWorkspaceInjection\n          ) {\n            return query(stripSkipFlag(args));\n          }\n\n          const wsCtx = getWorkspaceContext();\n          enforceStrictMode(model, 'findFirstOrThrow', wsCtx, fullConfig);\n          if (!wsCtx?.workspaceId) {\n            return query(args);\n          }\n\n          if (fullConfig.enableApplicationNameTagging) {\n            await maybeTagConnection(rawPrisma, wsCtx);\n          }\n          const injectedWhere = injectWhereClause(args.where, wsCtx);\n\n          if (fullConfig.debug) {\n            logger.debug(`[WorkspaceExtension] ${model}.findFirstOrThrow - injected workspaceId into where`, {\n              workspaceId: wsCtx.workspaceId,\n            });\n          }\n\n          const finalArgs = {\n            ...stripSkipFlag(args),\n            where: injectedWhere,\n          };\n          if (fullConfig.enableRlsGucTagging) {\n            return runOperationWithRlsGuc(rawPrismaForTransactions, wsCtx, model, 'findFirstOrThrow', finalArgs);\n          }\n          return query(finalArgs);\n        },\n\n        async findUnique({ model, args, query }: ExtensionHandlerParams<WhereArgs>) {\n          if (\n            !fullConfig.enableReadIsolation ||\n            isExcludedFromReadIsolation(model, fullConfig) ||\n            args._skipWorkspaceInjection\n          ) {\n            return query(stripSkipFlag(args));\n          }\n\n          const wsCtx = getWorkspaceContext();\n          enforceStrictMode(model, 'findUnique', wsCtx, fullConfig);\n          if (!wsCtx?.workspaceId) {\n            return query(args);\n          }\n\n          if (fullConfig.enableApplicationNameTagging) {\n            await maybeTagConnection(rawPrisma, wsCtx);\n          }\n          // For findUnique, the where clause uses unique fields.\n          // We inject workspaceId only if the where clause is a plain object\n          // (compound unique keys with workspaceId are common and already include it).\n          const injectedWhere = injectWhereClause(args.where, wsCtx);\n\n          if (fullConfig.debug) {\n            logger.debug(`[WorkspaceExtension] ${model}.findUnique - injected workspaceId into where`, {\n              workspaceId: wsCtx.workspaceId,\n            });\n          }\n\n          const finalArgs = {\n            ...stripSkipFlag(args),\n            where: injectedWhere,\n          };\n          if (fullConfig.enableRlsGucTagging) {\n            return runOperationWithRlsGuc(rawPrismaForTransactions, wsCtx, model, 'findUnique', finalArgs);\n          }\n          return query(finalArgs);\n        },\n\n        async findUniqueOrThrow({ model, args, query }: ExtensionHandlerParams<WhereArgs>) {\n          if (\n            !fullConfig.enableReadIsolation ||\n            isExcludedFromReadIsolation(model, fullConfig) ||\n            args._skipWorkspaceInjection\n          ) {\n            return query(stripSkipFlag(args));\n          }\n\n          const wsCtx = getWorkspaceContext();\n          enforceStrictMode(model, 'findUniqueOrThrow', wsCtx, fullConfig);\n          if (!wsCtx?.workspaceId) {\n            return query(args);\n          }\n\n          if (fullConfig.enableApplicationNameTagging) {\n            await maybeTagConnection(rawPrisma, wsCtx);\n          }\n          const injectedWhere = injectWhereClause(args.where, wsCtx);\n\n          if (fullConfig.debug) {\n            logger.debug(`[WorkspaceExtension] ${model}.findUniqueOrThrow - injected workspaceId into where`, {\n              workspaceId: wsCtx.workspaceId,\n            });\n          }\n\n          const finalArgs = {\n            ...stripSkipFlag(args),\n            where: injectedWhere,\n          };\n          if (fullConfig.enableRlsGucTagging) {\n            return runOperationWithRlsGuc(rawPrismaForTransactions, wsCtx, model, 'findUniqueOrThrow', finalArgs);\n          }\n          return query(finalArgs);\n        },\n\n        async count({ model, args, query }: ExtensionHandlerParams<WhereArgs>) {\n          if (\n            !fullConfig.enableReadIsolation ||\n            isExcludedFromReadIsolation(model, fullConfig) ||\n            args._skipWorkspaceInjection\n          ) {\n            return query(stripSkipFlag(args));\n          }\n\n          const wsCtx = getWorkspaceContext();\n          enforceStrictMode(model, 'count', wsCtx, fullConfig);\n          if (!wsCtx?.workspaceId) {\n            return query(args);\n          }\n\n          if (fullConfig.enableApplicationNameTagging) {\n            await maybeTagConnection(rawPrisma, wsCtx);\n          }\n          const injectedWhere = injectWhereClause(args.where, wsCtx);\n\n          if (fullConfig.debug) {\n            logger.debug(`[WorkspaceExtension] ${model}.count - injected workspaceId into where`, {\n              workspaceId: wsCtx.workspaceId,\n            });\n          }\n\n          const finalArgs = {\n            ...stripSkipFlag(args),\n            where: injectedWhere,\n          };\n          if (fullConfig.enableRlsGucTagging) {\n            return runOperationWithRlsGuc(rawPrismaForTransactions, wsCtx, model, 'count', finalArgs);\n          }\n          return query(finalArgs);\n        },\n\n        async aggregate({ model, args, query }: ExtensionHandlerParams<WhereArgs>) {\n          if (\n            !fullConfig.enableReadIsolation ||\n            isExcludedFromReadIsolation(model, fullConfig) ||\n            args._skipWorkspaceInjection\n          ) {\n            return query(stripSkipFlag(args));\n          }\n\n          const wsCtx = getWorkspaceContext();\n          enforceStrictMode(model, 'aggregate', wsCtx, fullConfig);\n          if (!wsCtx?.workspaceId) {\n            return query(args);\n          }\n\n          if (fullConfig.enableApplicationNameTagging) {\n            await maybeTagConnection(rawPrisma, wsCtx);\n          }\n          const injectedWhere = injectWhereClause(args.where, wsCtx);\n\n          if (fullConfig.debug) {\n            logger.debug(`[WorkspaceExtension] ${model}.aggregate - injected workspaceId into where`, {\n              workspaceId: wsCtx.workspaceId,\n            });\n          }\n\n          const finalArgs = {\n            ...stripSkipFlag(args),\n            where: injectedWhere,\n          };\n          if (fullConfig.enableRlsGucTagging) {\n            return runOperationWithRlsGuc(rawPrismaForTransactions, wsCtx, model, 'aggregate', finalArgs);\n          }\n          return query(finalArgs);\n        },\n\n        async groupBy({ model, args, query }: ExtensionHandlerParams<WhereArgs>) {\n          if (\n            !fullConfig.enableReadIsolation ||\n            isExcludedFromReadIsolation(model, fullConfig) ||\n            args._skipWorkspaceInjection\n          ) {\n            return query(stripSkipFlag(args));\n          }\n\n          const wsCtx = getWorkspaceContext();\n          enforceStrictMode(model, 'groupBy', wsCtx, fullConfig);\n          if (!wsCtx?.workspaceId) {\n            return query(args);\n          }\n\n          if (fullConfig.enableApplicationNameTagging) {\n            await maybeTagConnection(rawPrisma, wsCtx);\n          }\n          const injectedWhere = injectWhereClause(args.where, wsCtx);\n\n          if (fullConfig.debug) {\n            logger.debug(`[WorkspaceExtension] ${model}.groupBy - injected workspaceId into where`, {\n              workspaceId: wsCtx.workspaceId,\n            });\n          }\n\n          const finalArgs = {\n            ...stripSkipFlag(args),\n            where: injectedWhere,\n          };\n          if (fullConfig.enableRlsGucTagging) {\n            return runOperationWithRlsGuc(rawPrismaForTransactions, wsCtx, model, 'groupBy', finalArgs);\n          }\n          return query(finalArgs);\n        },\n\n        // ================================================================\n        // DELETE OPERATIONS - inject workspaceId into where clause\n        // ================================================================\n\n        async delete({ model, args, query }: ExtensionHandlerParams<WhereArgs>) {\n          if (\n            !fullConfig.enableDeleteIsolation ||\n            isExcludedFromReadIsolation(model, fullConfig) ||\n            args._skipWorkspaceInjection\n          ) {\n            return query(stripSkipFlag(args));\n          }\n\n          const wsCtx = getWorkspaceContext();\n          enforceStrictMode(model, 'delete', wsCtx, fullConfig);\n          if (!wsCtx?.workspaceId) {\n            return query(args);\n          }\n\n          if (fullConfig.enableApplicationNameTagging) {\n            await maybeTagConnection(rawPrisma, wsCtx);\n          }\n          const injectedWhere = injectWhereClause(args.where, wsCtx);\n\n          if (fullConfig.debug) {\n            logger.debug(`[WorkspaceExtension] ${model}.delete - injected workspaceId into where`, {\n              workspaceId: wsCtx.workspaceId,\n            });\n          }\n\n          const finalArgs = {\n            ...stripSkipFlag(args),\n            where: injectedWhere,\n          };\n          if (fullConfig.enableRlsGucTagging) {\n            return runOperationWithRlsGuc(rawPrismaForTransactions, wsCtx, model, 'delete', finalArgs);\n          }\n          return query(finalArgs);\n        },\n\n        async deleteMany({ model, args, query }: ExtensionHandlerParams<WhereArgs>) {\n          if (\n            !fullConfig.enableDeleteIsolation ||\n            isExcludedFromReadIsolation(model, fullConfig) ||\n            args._skipWorkspaceInjection\n          ) {\n            return query(stripSkipFlag(args));\n          }\n\n          const wsCtx = getWorkspaceContext();\n          enforceStrictMode(model, 'deleteMany', wsCtx, fullConfig);\n          if (!wsCtx?.workspaceId) {\n            return query(args);\n          }\n\n          if (fullConfig.enableApplicationNameTagging) {\n            await maybeTagConnection(rawPrisma, wsCtx);\n          }\n          const injectedWhere = injectWhereClause(args.where, wsCtx);\n\n          if (fullConfig.debug) {\n            logger.debug(`[WorkspaceExtension] ${model}.deleteMany - injected workspaceId into where`, {\n              workspaceId: wsCtx.workspaceId,\n            });\n          }\n\n          const finalArgs = {\n            ...stripSkipFlag(args),\n            where: injectedWhere,\n          };\n          if (fullConfig.enableRlsGucTagging) {\n            return runOperationWithRlsGuc(rawPrismaForTransactions, wsCtx, model, 'deleteMany', finalArgs);\n          }\n          return query(finalArgs);\n        },\n      },\n    },\n  });\n}\n"]}

package/dist/{chunk-RIH3XRBX.js → chunk-MX4AHK3E.js}

@@ -1,4 +1,4 @@
-import { withWorkspaceContextSync, withWorkspaceContext, setWorkspaceContext, runOperationWithRlsGuc, maybeTagConnection, maybeSetRlsGuc, injectWhereWorkspaceId, getWorkspaceContext, addWorkspaceExtension } from './chunk-EJPRCENB.js';
+import { withWorkspaceContextSync, withWorkspaceContext, setWorkspaceContext, runOperationWithRlsGuc, maybeTagConnection, maybeSetRlsGuc, injectWhereWorkspaceId, injectCreateFields, getWorkspaceContext, defaultWorkspaceExtensionConfig, addWorkspaceExtension } from './chunk-KESVEZB2.js';
 import { isTransientAcquireError, installAcquireRetry, ensureServiceApplicationName, createPrismaClient, createPrismaAdapter, createConnectionPool, configurePrismaLogging, PrismaClientWrapper, addGraphExtension } from './chunk-OCYZEBOL.js';
 import { getGraphEventEmitter } from './chunk-URDYOM2L.js';
 import { logger } from './chunk-CBZNP6RF.js';
@@ -21,6 +21,7 @@ __export(prisma_exports, {
   createDatabaseClientFromEnv: () => createDatabaseClientFromEnv,
   createPrismaAdapter: () => createPrismaAdapter,
   createPrismaClient: () => createPrismaClient,
+  defaultWorkspaceExtensionConfig: () => defaultWorkspaceExtensionConfig,
   ensureServiceApplicationName: () => ensureServiceApplicationName,
   extractFieldsFromModel: () => extractFieldsFromModel,
   getAllModelNames: () => getAllModelNames,
@@ -34,6 +35,7 @@ __export(prisma_exports, {
   hasModel: () => hasModel,
   initializeDatabase: () => initializeDatabase,
   initializeDatabaseWithConfig: () => initializeDatabaseWithConfig,
+  injectCreateFields: () => injectCreateFields,
   injectWhereWorkspaceId: () => injectWhereWorkspaceId,
   installAcquireRetry: () => installAcquireRetry,
   isDatabaseInitialized: () => isDatabaseInitialized,
@@ -664,5 +666,5 @@ function createContextFromSDK(sdkContext) {
 __name(createContextFromSDK, "createContextFromSDK");
 
 export { buildContextWhereClause, buildContextWhereConditions, checkDatabaseHealth, contextMatches, createContextFromSDK, createDatabaseClient, createDatabaseClientFromEnv, extractFieldsFromModel, getAllModelNames, getDatabaseManager, getDatabaseProductName, getDatabaseStats, getDatabaseVersion, getDb, getModelFields, hasModel, initializeDatabase, initializeDatabaseWithConfig, isDatabaseInitialized, loadGeneratedFields, mergeContext, parseContext, prisma_exports, resetDatabaseManager, resolvePoolTuningFromEnv, testConnection, toContextJson };
-//# sourceMappingURL=chunk-RIH3XRBX.js.map
-//# sourceMappingURL=chunk-RIH3XRBX.js.map
+//# sourceMappingURL=chunk-MX4AHK3E.js.map
+//# sourceMappingURL=chunk-MX4AHK3E.js.map

package/dist/chunk-MX4AHK3E.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/prisma/index.ts","../src/prisma/factory.ts","../src/prisma/manager.ts","../src/prisma/health.ts","../src/prisma/fields.ts","../src/prisma/context.ts"],"names":["resolveWorkspaceExtensionDefault","productName","explicit","process","env","layer","toLowerCase","name","startsWith","createDatabaseClient","PrismaClientConstructor","config","enableGraphExtension","graphEventEmitter","enableWorkspaceExtension","workspaceExtensionConfig","registerShutdownHandlers","prismaConfig","prismaConfigWithDefaults","applicationName","ensureServiceApplicationName","wrapper","createPrismaClient","baseClient","getClient","extendedClient","eventEmitter","getGraphEventEmitter","graphConfig","enabled","addGraphExtension","logger","info","addWorkspaceExtension","db","debug","connect","retries","delay","disconnect","parsePositiveIntEnv","raw","trim","undefined","parsed","Number","parseInt","isFinite","resolvePoolTuningFromEnv","tuning","queryTimeout","queryTimeoutMillis","statementTimeout","statementTimeoutMillis","idleInTransactionTimeout","idleInTransactionTimeoutMillis","lockTimeout","lockTimeoutMillis","createDatabaseClientFromEnv","overrides","databaseUrl","Error","isDevelopment","maxConnections","idleTimeoutMillis","connectionTimeoutMillis","enableQueryLogging","slowQueryThreshold","acquireRetriesRaw","acquireRetries","acquireRetryDelay","acquireRetryDelayMillis","state","initialized","client","initializeDatabase","initializeDatabaseWithConfig","getDb","getDatabaseManager","isDatabaseInitialized","getDatabaseProductName","resetDatabaseManager","error","warn","checkDatabaseHealth","start","Date","now","$queryRaw","latency","healthy","errorMessage","message","String","testConnection","getDatabaseVersion","result","version","getDatabaseStats","health","Promise","all","timestamp","requireFn","createRequire","url","loadGeneratedFields","generatedFieldsPath","generated","default","path","extractFieldsFromModel","modelName","modelFieldsMap","options","modelFields","Object","keys","join","excludeFields","includeRelations","customFilter","fields","relations","excluded","length","filter","field","includes","push","fieldName","isRelation","shouldInclude","type","metadata","totalFields","excludedCount","excludedFields","relationFields","getModelFields","hasModel","getAllModelNames","buildContextWhereClause","contextFilter","conditions","workspaceId","equals","userId","projectId","appId","productId","organizationId","buildContextWhereConditions","context","toContextJson","contextInput","custom","filterNullValues","obj","filtered","key","value","entries","mergeContextField","merged","fieldValue","mergeContext","existingContext","newContext","Array","isArray","parseContext","contextJson","ctx","contextMatches","createContextFromSDK","sdkContext"],"mappings":";;;;;;;;AAAA,IAAA,cAAA,GAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AC8GA,SAASA,iCAAiCC,WAAAA,EAAmB;AAC3D,EAAA,MAAMC,QAAAA,GAAWC,OAAAA,CAAQC,GAAAA,CAAI,6BAAA,CAAA;AAC7B,EAAA,IAAIF,QAAAA,KAAa,QAAQ,OAAO,IAAA;AAChC,EAAA,IAAIA,QAAAA,KAAa,SAAS,OAAO,KAAA;AAEjC,EAAA,MAAMG,KAAAA,GAAQF,OAAAA,CAAQC,GAAAA,CAAI,iBAAA,GAAoBE,WAAAA,EAAAA;AAC9C,EAAA,IAAID,KAAAA,KAAU,UAAU,OAAO,KAAA;AAC/B,EAAA,IAAIA,KAAAA,KAAU,UAAU,OAAO,IAAA;AAE/B,EAAA,MAAME,IAAAA,GAAON,YAAYK,WAAAA,EAAW;AACpC,EAAA,IAAIC,IAAAA,CAAKC,WAAW,SAAA,CAAA,IAAcD,KAAKC,UAAAA,CAAW,SAAA,GAAY,OAAO,KAAA;AACrE,EAAA,OAAO,IAAA;AACT;AAZSR,MAAAA,CAAAA,gCAAAA,EAAAA,kCAAAA,CAAAA;AAsDF,SAASS,oBAAAA,CACdC,yBACAC,MAAAA,EAA4B;AAE5B,EAAA,MAAM,EACJV,WAAAA,EACAW,oBAAAA,GAAuBT,QAAQC,GAAAA,CAAI,0BAAA,MAAgC,OAAA,EACnES,iBAAAA,EACAC,wBAAAA,GAA2Bd,gCAAAA,CAAiCC,WAAAA,CAAAA,EAC5Dc,wBAAAA,EACAC,2BAA2B,IAAA,EAC3B,GAAGC,cAAAA,GACDN,MAAAA;AAOJ,EAAA,MAAMO,wBAAAA,GAA+C;IACnD,GAAGD,YAAAA;IACHE,eAAAA,EAAiBF,YAAAA,CAAaE,eAAAA,IAAmB,CAAA,IAAA,EAAOlB,WAAAA,CAAAA;AAC1D,GAAA;AAIAmB,EAAAA,4BAAAA,CAA6BnB,WAAAA,CAAAA;AAG7B,EAAA,MAAMoB,OAAAA,GAAUC,kBAAAA,CAAmBZ,uBAAAA,EAAyBQ,wBAAAA,CAAAA;AAG5D,EAAA,MAAMK,UAAAA,GAAaF,QAAQG,SAAAA,EAAS;AAWpC,EAAA,IAAIC,cAAAA;AAGJ,EAAA,IAAIb,oBAAAA,EAAsB;AACxB,IAAA,MAAMc,YAAAA,GAAeb,qBAAqBc,oBAAAA,EAAAA;AAE1C,IAAA,MAAMC,WAAAA,GAAqC;MACzCC,OAAAA,EAAS,IAAA;AACT5B,MAAAA,WAAAA;AACAyB,MAAAA;AACF,KAAA;AAEAD,IAAAA,cAAAA,GAAiBK,iBAAAA,CAAkBP,YAAYK,WAAAA,CAAAA;AAE/CG,IAAAA,MAAAA,CAAOC,KAAK,oCAAA,EAAsC;AAAE/B,MAAAA;KAAY,CAAA;EAClE,CAAA,MAAO;AACLwB,IAAAA,cAAAA,GAAiBF,UAAAA;AACjBQ,IAAAA,MAAAA,CAAOC,KAAK,qCAAA,CAAA;AACd,EAAA;AAGA,EAAA,IAAIlB,wBAAAA,EAA0B;AAC5BW,IAAAA,cAAAA,GAAiBQ,qBAAAA,CAAsBR,gBAAgBV,wBAAAA,CAAAA;AAEvDgB,IAAAA,MAAAA,CAAOC,KAAK,wCAAA,EAA0C;AAAE/B,MAAAA;KAAY,CAAA;EACtE,CAAA,MAAO;AACL8B,IAAAA,MAAAA,CAAOC,KAAK,yCAAA,CAAA;AACd,EAAA;AAGA,EAAA,MAAME,EAAAA,GAAKT,cAAAA;AACVS,EAAAA,EAAAA,CAA0C,QAAA,CAAA,GAAYA,EAAAA;AAGvD,EAAA,IAAIlB,wBAAAA,EAA0B;AAC5BK,IAAAA,OAAAA,CAAQL,wBAAAA,EAAwB;AAChCe,IAAAA,MAAAA,CAAOI,MAAM,yCAAA,CAAA;AACf,EAAA;AAEA,EAAA,OAAO;AACLD,IAAAA,EAAAA;AACAb,IAAAA,OAAAA;AACAe,IAAAA,OAAAA,0BAAUC,OAAAA,EAAkBC,KAAAA,KAAmBjB,QAAQe,OAAAA,CAAQC,OAAAA,EAASC,KAAAA,CAAAA,EAA/D,SAAA,CAAA;IACTC,UAAAA,kBAAY,MAAA,CAAA,MAAMlB,OAAAA,CAAQkB,UAAAA,EAAU,EAAxB,YAAA;AACd,GAAA;AACF;AAxFgB9B,MAAAA,CAAAA,oBAAAA,EAAAA,sBAAAA,CAAAA;AAkHhB,SAAS+B,oBAAoBjC,IAAAA,EAAY;AACvC,EAAA,MAAMkC,GAAAA,GAAMtC,OAAAA,CAAQC,GAAAA,CAAIG,IAAAA,CAAAA;AACxB,EAAA,IAAIkC,GAAAA,IAAO,IAAA,IAAQA,GAAAA,CAAIC,IAAAA,OAAW,EAAA,EAAI;AACpC,IAAA,OAAOC,MAAAA;AACT,EAAA;AACA,EAAA,MAAMC,SAASC,MAAAA,CAAOC,QAAAA,CAASL,GAAAA,CAAIC,IAAAA,IAAQ,EAAA,CAAA;AAC3C,EAAA,OAAOG,OAAOE,QAAAA,CAASH,MAAAA,CAAAA,IAAWA,MAAAA,GAAS,IAAIA,MAAAA,GAASD,MAAAA;AAC1D;AAPSH,MAAAA,CAAAA,mBAAAA,EAAAA,qBAAAA,CAAAA;AAyBF,SAASQ,yBAAyB/C,WAAAA,EAAmB;AAC1D,EAAA,MAAMgD,MAAAA,GAAwB;AAC5B9B,IAAAA,eAAAA,EAAiBhB,QAAQC,GAAAA,CAAI,2BAAA,GAA8BsC,IAAAA,EAAAA,IAAU,OAAOzC,WAAAA,CAAAA;AAC9E,GAAA;AAEA,EAAA,MAAMiD,YAAAA,GAAeV,oBAAoB,wBAAA,CAAA;AACzC,EAAA,IAAIU,iBAAiBP,MAAAA,EAAW;AAC9BM,IAAAA,MAAAA,CAAOE,kBAAAA,GAAqBD,YAAAA;AAC9B,EAAA;AAEA,EAAA,MAAME,gBAAAA,GAAmBZ,oBAAoB,4BAAA,CAAA;AAC7C,EAAA,IAAIY,qBAAqBT,MAAAA,EAAW;AAClCM,IAAAA,MAAAA,CAAOI,sBAAAA,GAAyBD,gBAAAA;AAClC,EAAA;AAEA,EAAA,MAAME,wBAAAA,GAA2Bd,oBAAoB,sCAAA,CAAA;AACrD,EAAA,IAAIc,6BAA6BX,MAAAA,EAAW;AAC1CM,IAAAA,MAAAA,CAAOM,8BAAAA,GAAiCD,wBAAAA;AAC1C,EAAA;AAEA,EAAA,MAAME,WAAAA,GAAchB,oBAAoB,uBAAA,CAAA;AACxC,EAAA,IAAIgB,gBAAgBb,MAAAA,EAAW;AAC7BM,IAAAA,MAAAA,CAAOQ,iBAAAA,GAAoBD,WAAAA;AAC7B,EAAA;AAEA,EAAA,OAAOP,MAAAA;AACT;AA1BgBD,MAAAA,CAAAA,wBAAAA,EAAAA,0BAAAA,CAAAA;AAoDT,SAASU,2BAAAA,CACdhD,uBAAAA,EACAT,WAAAA,EACA0D,SAAAA,EAAyC;AAEzC,EAAA,MAAMC,WAAAA,GAAczD,OAAAA,CAAQC,GAAAA,CAAI,cAAA,CAAA;AAChC,EAAA,IAAI,CAACwD,WAAAA,EAAa;AAChB,IAAA,MAAM,IAAIC,MAAM,+CAAA,CAAA;AAClB,EAAA;AAEA,EAAA,MAAMC,aAAAA,GAAgB3D,OAAAA,CAAQC,GAAAA,CAAI,UAAA,CAAA,KAAgB,aAAA;AAElD,EAAA,MAAMO,MAAAA,GAA+B;AACnCV,IAAAA,WAAAA;AACA2D,IAAAA,WAAAA;AACAG,IAAAA,cAAAA,EAAgBjB,SAAS3C,OAAAA,CAAQC,GAAAA,CAAI,0BAAA,CAAA,IAA+B,MAAM,EAAA,CAAA;AAC1E4D,IAAAA,iBAAAA,EAAmBlB,SAAS3C,OAAAA,CAAQC,GAAAA,CAAI,uBAAA,CAAA,IAA4B,SAAS,EAAA,CAAA;AAC7E6D,IAAAA,uBAAAA,EAAyBnB,SAAS3C,OAAAA,CAAQC,GAAAA,CAAI,6BAAA,CAAA,IAAkC,SAAS,EAAA,CAAA;AACzF,IAAA,GAAG4C,yBAAyB/C,WAAAA,CAAAA;IAC5BiE,kBAAAA,EAAoBJ,aAAAA;AACpBK,IAAAA,kBAAAA,EAAoBL,gBAAgB,GAAA,GAAM,GAAA;IAC1C,GAAGH;AACL,GAAA;AAIA,EAAA,MAAMS,iBAAAA,GAAoBjE,OAAAA,CAAQC,GAAAA,CAAI,0BAAA,GAA6BsC,IAAAA,EAAAA;AACnE,EAAA,IAAI0B,sBAAsBzB,MAAAA,IAAayB,iBAAAA,KAAsB,EAAA,IAAMzD,MAAAA,CAAO0D,mBAAmB1B,MAAAA,EAAW;AACtG,IAAA,MAAMC,MAAAA,GAASC,MAAAA,CAAOC,QAAAA,CAASsB,iBAAAA,EAAmB,EAAA,CAAA;AAClD,IAAA,IAAIvB,MAAAA,CAAOE,QAAAA,CAASH,MAAAA,CAAAA,IAAWA,UAAU,CAAA,EAAG;AAC1CjC,MAAAA,MAAAA,CAAO0D,cAAAA,GAAiBzB,MAAAA;AAC1B,IAAA;AACF,EAAA;AACA,EAAA,MAAM0B,iBAAAA,GAAoB9B,oBAAoB,8BAAA,CAAA;AAC9C,EAAA,IAAI8B,iBAAAA,KAAsB3B,MAAAA,IAAahC,MAAAA,CAAO4D,uBAAAA,KAA4B5B,MAAAA,EAAW;AACnFhC,IAAAA,MAAAA,CAAO4D,uBAAAA,GAA0BD,iBAAAA;AACnC,EAAA;AAEA,EAAA,OAAO7D,oBAAAA,CAAqBC,yBAAyBC,MAAAA,CAAAA;AACvD;AAvCgB+C,MAAAA,CAAAA,2BAAAA,EAAAA,6BAAAA,CAAAA;;;AClThB,IAAMc,KAAAA,GAA8B;EAClCC,WAAAA,EAAa,KAAA;EACbxE,WAAAA,EAAa,IAAA;EACbyE,MAAAA,EAAQ;AACV,CAAA;AAwBO,SAASC,kBAAAA,CACdjE,uBAAAA,EACAT,WAAAA,EACAU,MAAAA,EAAsC;AAGtC,EAAA,IAAI6D,MAAMC,WAAAA,EAAa;AACrB,IAAA,IAAID,KAAAA,CAAMvE,gBAAgBA,WAAAA,EAAa;AACrC,MAAA,MAAM,IAAI4D,KAAAA,CACR,CAAA,0CAAA,EAA6CW,MAAMvE,WAAW,CAAA,4BAAA,EAChCA,WAAAA,CAAAA,EAAAA,CAAe,CAAA;AAEjD,IAAA;AACA8B,IAAAA,MAAAA,CAAOI,MAAM,kEAAA,EAAoE;AAAElC,MAAAA;KAAY,CAAA;AAC/F,IAAA,OAAOuE,KAAAA,CAAME,MAAAA;AACf,EAAA;AAGA,EAAA,MAAMA,MAAAA,GAAShB,2BAAAA,CAA4BhD,uBAAAA,EAAyBT,WAAAA,EAAaU,MAAAA,CAAAA;AAGjF6D,EAAAA,KAAAA,CAAMC,WAAAA,GAAc,IAAA;AACpBD,EAAAA,KAAAA,CAAMvE,WAAAA,GAAcA,WAAAA;AACpBuE,EAAAA,KAAAA,CAAME,MAAAA,GAASA,MAAAA;AAEf3C,EAAAA,MAAAA,CAAOC,KAAK,wCAAA,EAA0C;AAAE/B,IAAAA;GAAY,CAAA;AAEpE,EAAA,OAAOyE,MAAAA;AACT;AA5BgBC,MAAAA,CAAAA,kBAAAA,EAAAA,oBAAAA,CAAAA;AAkDT,SAASC,4BAAAA,CACdlE,yBACAC,MAAAA,EAA4B;AAE5B,EAAA,MAAM,EAAEV,aAAW,GAAKU,MAAAA;AAGxB,EAAA,IAAI6D,MAAMC,WAAAA,EAAa;AACrB,IAAA,IAAID,KAAAA,CAAMvE,gBAAgBA,WAAAA,EAAa;AACrC,MAAA,MAAM,IAAI4D,KAAAA,CACR,CAAA,0CAAA,EAA6CW,MAAMvE,WAAW,CAAA,4BAAA,EAChCA,WAAAA,CAAAA,EAAAA,CAAe,CAAA;AAEjD,IAAA;AACA8B,IAAAA,MAAAA,CAAOI,MAAM,kEAAA,EAAoE;AAAElC,MAAAA;KAAY,CAAA;AAC/F,IAAA,OAAOuE,KAAAA,CAAME,MAAAA;AACf,EAAA;AAGA,EAAA,MAAMA,MAAAA,GAASjE,oBAAAA,CAAqBC,uBAAAA,EAAyBC,MAAAA,CAAAA;AAG7D6D,EAAAA,KAAAA,CAAMC,WAAAA,GAAc,IAAA;AACpBD,EAAAA,KAAAA,CAAMvE,WAAAA,GAAcA,WAAAA;AACpBuE,EAAAA,KAAAA,CAAME,MAAAA,GAASA,MAAAA;AAEf3C,EAAAA,MAAAA,CAAOC,KAAK,2DAAA,EAA6D;AAAE/B,IAAAA;GAAY,CAAA;AAEvF,EAAA,OAAOyE,MAAAA;AACT;AA7BgBE,MAAAA,CAAAA,4BAAAA,EAAAA,8BAAAA,CAAAA;AAsDT,SAASC,KAAAA,GAAAA;AACd,EAAA,IAAI,CAACL,KAAAA,CAAMC,WAAAA,IAAe,CAACD,MAAME,MAAAA,EAAQ;AACvC,IAAA,MAAM,IAAIb,MAAM,kGAAA,CAAA;AAClB,EAAA;AACA,EAAA,OAAOW,MAAME,MAAAA,CAAOxC,EAAAA;AACtB;AALgB2C,MAAAA,CAAAA,KAAAA,EAAAA,OAAAA,CAAAA;AAwBT,SAASC,kBAAAA,GAAAA;AACd,EAAA,IAAI,CAACN,KAAAA,CAAMC,WAAAA,IAAe,CAACD,MAAME,MAAAA,EAAQ;AACvC,IAAA,MAAM,IAAIb,MACR,+GAAA,CAAA;AAEJ,EAAA;AACA,EAAA,OAAOW,KAAAA,CAAME,MAAAA;AACf;AAPgBI,MAAAA,CAAAA,kBAAAA,EAAAA,oBAAAA,CAAAA;AAqBT,SAASC,qBAAAA,GAAAA;AACd,EAAA,OAAOP,KAAAA,CAAMC,WAAAA;AACf;AAFgBM,MAAAA,CAAAA,qBAAAA,EAAAA,uBAAAA,CAAAA;AAST,SAASC,sBAAAA,GAAAA;AACd,EAAA,OAAOR,KAAAA,CAAMvE,WAAAA;AACf;AAFgB+E,MAAAA,CAAAA,sBAAAA,EAAAA,wBAAAA,CAAAA;AAYhB,eAAsBC,oBAAAA,GAAAA;AACpB,EAAA,IAAIT,MAAME,MAAAA,EAAQ;AAChB,IAAA,IAAI;AACF,MAAA,MAAMF,KAAAA,CAAME,OAAOnC,UAAAA,EAAU;AAC/B,IAAA,CAAA,CAAA,OAAS2C,KAAAA,EAAO;AACdnD,MAAAA,MAAAA,CAAOoD,KAAK,oDAAA,EAAsD;AAAED,QAAAA;OAAM,CAAA;AAC5E,IAAA;AACF,EAAA;AAEAV,EAAAA,KAAAA,CAAMC,WAAAA,GAAc,KAAA;AACpBD,EAAAA,KAAAA,CAAMvE,WAAAA,GAAc,IAAA;AACpBuE,EAAAA,KAAAA,CAAME,MAAAA,GAAS,IAAA;AAEf3C,EAAAA,MAAAA,CAAOI,MAAM,0CAAA,CAAA;AACf;AAdsB8C,MAAAA,CAAAA,oBAAAA,EAAAA,sBAAAA,CAAAA;;;AC5OtB,eAAsBG,oBAAgDV,MAAAA,EAAS;AAC7E,EAAA,IAAI;AACF,IAAA,MAAMW,KAAAA,GAAQC,KAAKC,GAAAA,EAAG;AACtB,IAAA,MAAMb,MAAAA,CAAOc,SAAAA,CAAAA,QAAAA,CAAAA;AACb,IAAA,MAAMC,OAAAA,GAAUH,IAAAA,CAAKC,GAAAA,EAAG,GAAKF,KAAAA;AAE7B,IAAA,OAAO;MAAEK,OAAAA,EAAS,IAAA;AAAMD,MAAAA;AAAQ,KAAA;AAClC,EAAA,CAAA,CAAA,OAASP,KAAAA,EAAO;AACd,IAAA,MAAMS,eAAeT,KAAAA,YAAiBrB,KAAAA,GAAQqB,KAAAA,CAAMU,OAAAA,GAAUC,OAAOX,KAAAA,CAAAA;AACrEnD,IAAAA,MAAAA,CAAOmD,MAAM,8BAAA,EAAgC;MAAEA,KAAAA,EAAOS;KAAa,CAAA;AAEnE,IAAA,OAAO;MACLD,OAAAA,EAAS,KAAA;MACTR,KAAAA,EAAOS;AACT,KAAA;AACF,EAAA;AACF;AAhBsBP,MAAAA,CAAAA,mBAAAA,EAAAA,qBAAAA,CAAAA;AAqBtB,eAAsBU,eAA2CpB,MAAAA,EAAS;AACxE,EAAA,IAAI;AACF,IAAA,MAAMA,MAAAA,CAAOc,SAAAA,CAAAA,QAAAA,CAAAA;AACb,IAAA,OAAO,IAAA;AACT,EAAA,CAAA,CAAA,OAASN,KAAAA,EAAO;AACdnD,IAAAA,MAAAA,CAAOmD,MAAM,iCAAA,EAAmC;AAC9CA,MAAAA,KAAAA,EAAOA,KAAAA,YAAiBrB,KAAAA,GAAQqB,KAAAA,CAAMU,OAAAA,GAAUC,OAAOX,KAAAA;KACzD,CAAA;AACA,IAAA,OAAO,KAAA;AACT,EAAA;AACF;AAVsBY,MAAAA,CAAAA,cAAAA,EAAAA,gBAAAA,CAAAA;AAetB,eAAsBC,mBAA+CrB,MAAAA,EAAS;AAC5E,EAAA,IAAI;AACF,IAAA,MAAMsB,MAAAA,GAAS,MAAMtB,MAAAA,CAAOc,SAAAA,CAAAA,gBAAAA,CAAAA;AAC5B,IAAA,OAAOQ,MAAAA,CAAO,CAAA,CAAA,EAAIC,OAAAA,IAAW,IAAA;AAC/B,EAAA,CAAA,CAAA,OAASf,KAAAA,EAAO;AACdnD,IAAAA,MAAAA,CAAOmD,MAAM,yCAAA,EAA2C;AACtDA,MAAAA,KAAAA,EAAOA,KAAAA,YAAiBrB,KAAAA,GAAQqB,KAAAA,CAAMU,OAAAA,GAAUC,OAAOX,KAAAA;KACzD,CAAA;AACA,IAAA,OAAO,IAAA;AACT,EAAA;AACF;AAVsBa,MAAAA,CAAAA,kBAAAA,EAAAA,oBAAAA,CAAAA;AAetB,eAAsBG,iBACpBxB,MAAAA,EAAS;AAMT,EAAA,MAAM,CAACyB,MAAAA,EAAQF,OAAAA,CAAAA,GAAW,MAAMG,QAAQC,GAAAA,CAAI;AAACjB,IAAAA,mBAAAA,CAAoBV,MAAAA,CAAAA;AAASqB,IAAAA,kBAAAA,CAAmBrB,MAAAA;AAAQ,GAAA,CAAA;AAErG,EAAA,OAAO;AACLyB,IAAAA,MAAAA;AACAF,IAAAA,OAAAA;AACAK,IAAAA,SAAAA,sBAAehB,IAAAA;AACjB,GAAA;AACF;AAdsBY,MAAAA,CAAAA,gBAAAA,EAAAA,kBAAAA,CAAAA;ACjDtB,IAAMK,SAAAA,GAAYC,aAAAA,CAAc,MAAA,CAAA,IAAA,CAAYC,GAAG,CAAA;AAiDxC,SAASC,oBAAoBC,mBAAAA,EAA2B;AAC7D,EAAA,IAAI;AAEF,IAAA,MAAMC,SAAAA,GAAYL,UAAUI,mBAAAA,CAAAA;AAC5B,IAAA,OAAOC,UAAUC,OAAAA,IAAWD,SAAAA;AAC9B,EAAA,CAAA,CAAA,OAAS1B,KAAAA,EAAO;AACdnD,IAAAA,MAAAA,CAAOmD,MAAM,0CAAA,EAA4C;AACvDA,MAAAA,KAAAA,EAAOA,KAAAA,YAAiBrB,KAAAA,GAAQqB,KAAAA,CAAMU,OAAAA,GAAUC,OAAOX,KAAAA,CAAAA;MACvD4B,IAAAA,EAAMH;KACR,CAAA;AACA,IAAA,MAAM,IAAI9C,KAAAA,CAAM,CAAA,qCAAA,EAAwC8C,mBAAAA,CAAAA,CAAqB,CAAA;AAC/E,EAAA;AACF;AAZgBD,MAAAA,CAAAA,mBAAAA,EAAAA,qBAAAA,CAAAA;AAiBT,SAASK,sBAAAA,CACdC,SAAAA,EACAC,cAAAA,EACAC,OAAAA,GAAkC,EAAC,EAAC;AAEpC,EAAA,MAAMC,WAAAA,GAAcF,eAAeD,SAAAA,CAAAA;AAEnC,EAAA,IAAI,CAACG,WAAAA,EAAa;AAChB,IAAA,MAAM,IAAItD,KAAAA,CACR,CAAA,OAAA,EAAUmD,SAAAA,CAAAA,mDAAAA,EACaI,MAAAA,CAAOC,IAAAA,CAAKJ,cAAAA,CAAAA,CAAgBK,IAAAA,CAAK,IAAA,CAAA,CAAA,CAAO,CAAA;AAEnE,EAAA;AAEA,EAAA,MAAM,EAAEC,aAAAA,GAAgB,IAAIC,gBAAAA,GAAmB,KAAA,EAAOC,cAAY,GAAKP,OAAAA;AAGvE,EAAA,IAAIQ,MAAAA,GAAS;OAAIP,WAAAA,CAAYO;;AAG7B,EAAA,IAAIF,gBAAAA,EAAkB;AACpBE,IAAAA,MAAAA,GAAS;AAAIA,MAAAA,GAAAA,MAAAA;SAAWP,WAAAA,CAAYQ;;AACtC,EAAA;AAGA,EAAA,MAAMC,WAAqB,EAAA;AAG3B,EAAA,IAAIL,aAAAA,CAAcM,SAAS,CAAA,EAAG;AAC5BH,IAAAA,MAAAA,GAASA,MAAAA,CAAOI,MAAAA,CAAO,CAACC,KAAAA,KAAAA;AACtB,MAAA,IAAIR,aAAAA,CAAcS,QAAAA,CAASD,KAAAA,CAAAA,EAAQ;AACjCH,QAAAA,QAAAA,CAASK,KAAKF,KAAAA,CAAAA;AACd,QAAA,OAAO,KAAA;AACT,MAAA;AACA,MAAA,OAAO,IAAA;IACT,CAAA,CAAA;AACF,EAAA;AAGA,EAAA,IAAIN,YAAAA,EAAc;AAChBC,IAAAA,MAAAA,GAASA,MAAAA,CAAOI,MAAAA,CAAO,CAACI,SAAAA,KAAAA;AACtB,MAAA,MAAMC,UAAAA,GAAahB,WAAAA,CAAYQ,SAAAA,CAAUK,QAAAA,CAASE,SAAAA,CAAAA;AAClD,MAAA,MAAME,gBAAgBX,YAAAA,CAAa;QACjClH,IAAAA,EAAM2H,SAAAA;QACNG,IAAAA,EAAM,SAAA;AACNF,QAAAA;OACF,CAAA;AAEA,MAAA,IAAI,CAACC,aAAAA,EAAe;AAClBR,QAAAA,QAAAA,CAASK,KAAKC,SAAAA,CAAAA;AAChB,MAAA;AAEA,MAAA,OAAOE,aAAAA;IACT,CAAA,CAAA;AACF,EAAA;AAEA,EAAA,OAAO;AACLV,IAAAA,MAAAA;IACAY,QAAAA,EAAU;AACRC,MAAAA,WAAAA,EAAapB,WAAAA,CAAYO,MAAAA,CAAOG,MAAAA,GAASV,WAAAA,CAAYQ,SAAAA,CAAUE,MAAAA;AAC/DW,MAAAA,aAAAA,EAAeZ,QAAAA,CAASC,MAAAA;MACxBY,cAAAA,EAAgBb,QAAAA;AAChBc,MAAAA,cAAAA,EAAgBvB,YAAYQ,SAAAA,CAAUE;AACxC;AACF,GAAA;AACF;AAjEgBd,MAAAA,CAAAA,sBAAAA,EAAAA,wBAAAA,CAAAA;AAsET,SAAS4B,cAAAA,CAAe3B,SAAAA,EAAmBC,cAAAA,EAAgCO,gBAAAA,GAAmB,KAAA,EAAK;AACxG,EAAA,MAAMxB,MAAAA,GAASe,sBAAAA,CAAuBC,SAAAA,EAAWC,cAAAA,EAAgB;AAAEO,IAAAA;GAAiB,CAAA;AACpF,EAAA,OAAOxB,MAAAA,CAAO0B,MAAAA;AAChB;AAHgBiB,MAAAA,CAAAA,cAAAA,EAAAA,gBAAAA,CAAAA;AAQT,SAASC,QAAAA,CAAS5B,WAAmBC,cAAAA,EAA8B;AACxE,EAAA,OAAOD,SAAAA,IAAaC,cAAAA;AACtB;AAFgB2B,MAAAA,CAAAA,QAAAA,EAAAA,UAAAA,CAAAA;AAOT,SAASC,iBAAiB5B,cAAAA,EAA8B;AAC7D,EAAA,OAAOG,MAAAA,CAAOC,KAAKJ,cAAAA,CAAAA;AACrB;AAFgB4B,MAAAA,CAAAA,gBAAAA,EAAAA,kBAAAA,CAAAA;;;AClGT,SAASC,wBACdC,aAAAA,EAAoD;AAEpD,EAAA,IAAI,CAACA,aAAAA,EAAe;AAClB,IAAA,OAAOpG,MAAAA;AACT,EAAA;AAGA,EAAA,MAAMqG,aAAiC,EAAA;AAEvC,EAAA,IAAID,aAAAA,CAAcE,eAAe,IAAA,EAAM;AACrCD,IAAAA,UAAAA,CAAWf,IAAAA,CAAK;MACdnB,IAAAA,EAAM;AAAC,QAAA;;AACPoC,MAAAA,MAAAA,EAAQH,aAAAA,CAAcE;KACxB,CAAA;AACF,EAAA;AAEA,EAAA,IAAIF,aAAAA,CAAcI,UAAU,IAAA,EAAM;AAChCH,IAAAA,UAAAA,CAAWf,IAAAA,CAAK;MACdnB,IAAAA,EAAM;AAAC,QAAA;;AACPoC,MAAAA,MAAAA,EAAQH,aAAAA,CAAcI;KACxB,CAAA;AACF,EAAA;AAEA,EAAA,IAAIJ,aAAAA,CAAcK,aAAa,IAAA,EAAM;AACnCJ,IAAAA,UAAAA,CAAWf,IAAAA,CAAK;MACdnB,IAAAA,EAAM;AAAC,QAAA;;AACPoC,MAAAA,MAAAA,EAAQH,aAAAA,CAAcK;KACxB,CAAA;AACF,EAAA;AAEA,EAAA,IAAIL,aAAAA,CAAcM,SAAS,IAAA,EAAM;AAC/BL,IAAAA,UAAAA,CAAWf,IAAAA,CAAK;MACdnB,IAAAA,EAAM;AAAC,QAAA;;AACPoC,MAAAA,MAAAA,EAAQH,aAAAA,CAAcM;KACxB,CAAA;AACF,EAAA;AAEA,EAAA,IAAIN,aAAAA,CAAcO,aAAa,IAAA,EAAM;AACnCN,IAAAA,UAAAA,CAAWf,IAAAA,CAAK;MACdnB,IAAAA,EAAM;AAAC,QAAA;;AACPoC,MAAAA,MAAAA,EAAQH,aAAAA,CAAcO;KACxB,CAAA;AACF,EAAA;AAEA,EAAA,IAAIP,aAAAA,CAAcQ,kBAAkB,IAAA,EAAM;AACxCP,IAAAA,UAAAA,CAAWf,IAAAA,CAAK;MACdnB,IAAAA,EAAM;AAAC,QAAA;;AACPoC,MAAAA,MAAAA,EAAQH,aAAAA,CAAcQ;KACxB,CAAA;AACF,EAAA;AAGA,EAAA,IAAIP,UAAAA,CAAWnB,WAAW,CAAA,EAAG;AAC3B,IAAA,OAAOlF,MAAAA;AACT,EAAA;AAGA,EAAA,IAAIqG,UAAAA,CAAWnB,WAAW,CAAA,EAAG;AAC3B,IAAA,OAAOmB,WAAW,CAAA,CAAA;AACpB,EAAA;AAIA,EAAA,OAAOA,WAAW,CAAA,CAAA;AACpB;AAjEgBF,MAAAA,CAAAA,uBAAAA,EAAAA,yBAAAA,CAAAA;AAsFT,SAASU,4BACdT,aAAAA,EAAoD;AAEpD,EAAA,IAAI,CAACA,aAAAA,EAAe;AAClB,IAAA,OAAO,EAAA;AACT,EAAA;AAEA,EAAA,MAAMC,aAAmD,EAAA;AAEzD,EAAA,IAAID,aAAAA,CAAcE,eAAe,IAAA,EAAM;AACrCD,IAAAA,UAAAA,CAAWf,IAAAA,CAAK;MACdwB,OAAAA,EAAS;QACP3C,IAAAA,EAAM;AAAC,UAAA;;AACPoC,QAAAA,MAAAA,EAAQH,aAAAA,CAAcE;AACxB;KACF,CAAA;AACF,EAAA;AAEA,EAAA,IAAIF,aAAAA,CAAcI,UAAU,IAAA,EAAM;AAChCH,IAAAA,UAAAA,CAAWf,IAAAA,CAAK;MACdwB,OAAAA,EAAS;QACP3C,IAAAA,EAAM;AAAC,UAAA;;AACPoC,QAAAA,MAAAA,EAAQH,aAAAA,CAAcI;AACxB;KACF,CAAA;AACF,EAAA;AAEA,EAAA,IAAIJ,aAAAA,CAAcK,aAAa,IAAA,EAAM;AACnCJ,IAAAA,UAAAA,CAAWf,IAAAA,CAAK;MACdwB,OAAAA,EAAS;QACP3C,IAAAA,EAAM;AAAC,UAAA;;AACPoC,QAAAA,MAAAA,EAAQH,aAAAA,CAAcK;AACxB;KACF,CAAA;AACF,EAAA;AAEA,EAAA,IAAIL,aAAAA,CAAcM,SAAS,IAAA,EAAM;AAC/BL,IAAAA,UAAAA,CAAWf,IAAAA,CAAK;MACdwB,OAAAA,EAAS;QACP3C,IAAAA,EAAM;AAAC,UAAA;;AACPoC,QAAAA,MAAAA,EAAQH,aAAAA,CAAcM;AACxB;KACF,CAAA;AACF,EAAA;AAEA,EAAA,IAAIN,aAAAA,CAAcO,aAAa,IAAA,EAAM;AACnCN,IAAAA,UAAAA,CAAWf,IAAAA,CAAK;MACdwB,OAAAA,EAAS;QACP3C,IAAAA,EAAM;AAAC,UAAA;;AACPoC,QAAAA,MAAAA,EAAQH,aAAAA,CAAcO;AACxB;KACF,CAAA;AACF,EAAA;AAEA,EAAA,IAAIP,aAAAA,CAAcQ,kBAAkB,IAAA,EAAM;AACxCP,IAAAA,UAAAA,CAAWf,IAAAA,CAAK;MACdwB,OAAAA,EAAS;QACP3C,IAAAA,EAAM;AAAC,UAAA;;AACPoC,QAAAA,MAAAA,EAAQH,aAAAA,CAAcQ;AACxB;KACF,CAAA;AACF,EAAA;AAEA,EAAA,OAAOP,UAAAA;AACT;AAhEgBQ,MAAAA,CAAAA,2BAAAA,EAAAA,6BAAAA,CAAAA;AAoFT,SAASE,cAAcC,YAAAA,EAAiD;AAC7E,EAAA,IAAI,CAACA,YAAAA,EAAc;AACjB,IAAA,OAAOhH,MAAAA;AACT,EAAA;AAGA,EAAA,MAAM8G,UAA0C,EAAC;AAEjD,EAAA,IAAIE,YAAAA,CAAaV,eAAe,IAAA,EAAM;AACpCQ,IAAAA,OAAAA,CAAQ,aAAA,IAAiBE,YAAAA,CAAaV,WAAAA;AACxC,EAAA;AACA,EAAA,IAAIU,YAAAA,CAAaR,UAAU,IAAA,EAAM;AAC/BM,IAAAA,OAAAA,CAAQ,QAAA,IAAYE,YAAAA,CAAaR,MAAAA;AACnC,EAAA;AACA,EAAA,IAAIQ,YAAAA,CAAaP,aAAa,IAAA,EAAM;AAClCK,IAAAA,OAAAA,CAAQ,WAAA,IAAeE,YAAAA,CAAaP,SAAAA;AACtC,EAAA;AACA,EAAA,IAAIO,YAAAA,CAAaN,SAAS,IAAA,EAAM;AAC9BI,IAAAA,OAAAA,CAAQ,OAAA,IAAWE,YAAAA,CAAaN,KAAAA;AAClC,EAAA;AACA,EAAA,IAAIM,YAAAA,CAAaL,aAAa,IAAA,EAAM;AAClCG,IAAAA,OAAAA,CAAQ,WAAA,IAAeE,YAAAA,CAAaL,SAAAA;AACtC,EAAA;AACA,EAAA,IAAIK,YAAAA,CAAaJ,kBAAkB,IAAA,EAAM;AACvCE,IAAAA,OAAAA,CAAQ,gBAAA,IAAoBE,YAAAA,CAAaJ,cAAAA;AAC3C,EAAA;AACA,EAAA,IAAII,YAAAA,CAAaC,UAAU,IAAA,EAAM;AAC/BH,IAAAA,OAAAA,CAAQ,QAAA,IAAYE,YAAAA,CAAaC,MAAAA;AACnC,EAAA;AAGA,EAAA,IAAIxC,MAAAA,CAAOC,IAAAA,CAAKoC,OAAAA,CAAAA,CAAS5B,WAAW,CAAA,EAAG;AACrC,IAAA,OAAOlF,MAAAA;AACT,EAAA;AAEA,EAAA,OAAO8G,OAAAA;AACT;AApCgBC,MAAAA,CAAAA,aAAAA,EAAAA,eAAAA,CAAAA;AAyChB,SAASG,iBAAiBC,GAAAA,EAA4B;AACpD,EAAA,MAAMC,WAA2C,EAAC;AAClD,EAAA,KAAA,MAAW,CAACC,GAAAA,EAAKC,KAAAA,KAAU7C,MAAAA,CAAO8C,OAAAA,CAAQJ,GAAAA,CAAAA,EAAM;AAC9C,IAAA,IAAIG,UAAU,IAAA,EAAM;AAClBF,MAAAA,QAAAA,CAASC,GAAAA,CAAAA,GAAOC,KAAAA;AAClB,IAAA;AACF,EAAA;AACA,EAAA,OAAOF,QAAAA;AACT;AARSF,MAAAA,CAAAA,gBAAAA,EAAAA,kBAAAA,CAAAA;AAaT,SAASM,iBAAAA,CACPC,MAAAA,EACAlC,SAAAA,EACAmC,UAAAA,EAA+D;AAE/D,EAAA,IAAIA,eAAe1H,MAAAA,EAAW;AAC5B,IAAA;AACF,EAAA;AAEA,EAAA,IAAI0H,eAAe,IAAA,EAAM;AACvB,IAAA,OAAOD,OAAOlC,SAAAA,CAAAA;EAChB,CAAA,MAAO;AACLkC,IAAAA,MAAAA,CAAOlC,SAAAA,CAAAA,GAAamC,UAAAA;AACtB,EAAA;AACF;AAdSF,MAAAA,CAAAA,iBAAAA,EAAAA,mBAAAA,CAAAA;AAiCF,SAASG,YAAAA,CACdC,iBACAC,UAAAA,EAA+C;AAG/C,EAAA,IAAI,CAACA,UAAAA,EAAY;AACf,IAAA,IAAI,CAACD,eAAAA,EAAiB;AACpB,MAAA,OAAO5H,MAAAA;AACT,IAAA;AAEA,IAAA,IAAI,OAAO4H,eAAAA,KAAoB,QAAA,IAAY,CAACE,KAAAA,CAAMC,OAAAA,CAAQH,eAAAA,CAAAA,EAAkB;AAC1E,MAAA,MAAMR,QAAAA,GAAWF,iBAAiBU,eAAAA,CAAAA;AAClC,MAAA,OAAOnD,OAAOC,IAAAA,CAAK0C,QAAAA,CAAAA,CAAUlC,MAAAA,GAAS,IAAIkC,QAAAA,GAAWpH,MAAAA;AACvD,IAAA;AACA,IAAA,OAAO4H,eAAAA;AACT,EAAA;AAGA,EAAA,IAAI,CAACA,mBAAmB,OAAOA,eAAAA,KAAoB,YAAYE,KAAAA,CAAMC,OAAAA,CAAQH,eAAAA,CAAAA,EAAkB;AAC7F,IAAA,OAAOb,cAAcc,UAAAA,CAAAA;AACvB,EAAA;AAGA,EAAA,MAAMJ,MAAAA,GAASP,iBAAiBU,eAAAA,CAAAA;AAGhCJ,EAAAA,iBAAAA,CAAkBC,MAAAA,EAAQ,aAAA,EAAeI,UAAAA,CAAWvB,WAAW,CAAA;AAC/DkB,EAAAA,iBAAAA,CAAkBC,MAAAA,EAAQ,QAAA,EAAUI,UAAAA,CAAWrB,MAAM,CAAA;AACrDgB,EAAAA,iBAAAA,CAAkBC,MAAAA,EAAQ,WAAA,EAAaI,UAAAA,CAAWpB,SAAS,CAAA;AAC3De,EAAAA,iBAAAA,CAAkBC,MAAAA,EAAQ,OAAA,EAASI,UAAAA,CAAWnB,KAAK,CAAA;AACnDc,EAAAA,iBAAAA,CAAkBC,MAAAA,EAAQ,WAAA,EAAaI,UAAAA,CAAWlB,SAAS,CAAA;AAC3Da,EAAAA,iBAAAA,CAAkBC,MAAAA,EAAQ,gBAAA,EAAkBI,UAAAA,CAAWjB,cAAc,CAAA;AACrEY,EAAAA,iBAAAA,CAAkBC,MAAAA,EAAQ,QAAA,EAAUI,UAAAA,CAAWZ,MAAM,CAAA;AAErD,EAAA,OAAOxC,OAAOC,IAAAA,CAAK+C,MAAAA,CAAAA,CAAQvC,MAAAA,GAAS,IAAIuC,MAAAA,GAASzH,MAAAA;AACnD;AAnCgB2H,MAAAA,CAAAA,YAAAA,EAAAA,cAAAA,CAAAA;AAmDT,SAASK,aAAaC,WAAAA,EAAyC;AACpE,EAAA,IAAI,CAACA,eAAe,OAAOA,WAAAA,KAAgB,YAAYH,KAAAA,CAAMC,OAAAA,CAAQE,WAAAA,CAAAA,EAAc;AACjF,IAAA,OAAO,IAAA;AACT,EAAA;AAEA,EAAA,MAAMC,GAAAA,GAAMD,WAAAA;AAEZ,EAAA,OAAO;AACL3B,IAAAA,WAAAA,EAAa,OAAO4B,GAAAA,CAAI,aAAA,MAAmB,QAAA,GAAWA,GAAAA,CAAI,aAAA,CAAA,GAAiB,IAAA;AAC3E1B,IAAAA,MAAAA,EAAQ,OAAO0B,GAAAA,CAAI,QAAA,MAAc,QAAA,GAAWA,GAAAA,CAAI,QAAA,CAAA,GAAY,IAAA;AAC5DzB,IAAAA,SAAAA,EAAW,OAAOyB,GAAAA,CAAI,WAAA,MAAiB,QAAA,GAAWA,GAAAA,CAAI,WAAA,CAAA,GAAe,IAAA;AACrExB,IAAAA,KAAAA,EAAO,OAAOwB,GAAAA,CAAI,OAAA,MAAa,QAAA,GAAWA,GAAAA,CAAI,OAAA,CAAA,GAAW,IAAA;AACzDvB,IAAAA,SAAAA,EAAW,OAAOuB,GAAAA,CAAI,WAAA,MAAiB,QAAA,GAAWA,GAAAA,CAAI,WAAA,CAAA,GAAe,IAAA;AACrEtB,IAAAA,cAAAA,EAAgB,OAAOsB,GAAAA,CAAI,gBAAA,MAAsB,QAAA,GAAWA,GAAAA,CAAI,gBAAA,CAAA,GAAoB,IAAA;AACpFjB,IAAAA,MAAAA,EAAQ,OAAOiB,GAAAA,CAAI,QAAA,MAAc,QAAA,GAAYA,GAAAA,CAAI,QAAA,CAAA,GAAwC;AAC3F,GAAA;AACF;AAhBgBF,MAAAA,CAAAA,YAAAA,EAAAA,cAAAA,CAAAA;AAyBT,SAASG,cAAAA,CAAerB,SAA8C3B,MAAAA,EAA0B;AACrG,EAAA,IAAI,CAAC2B,OAAAA,EAAS;AACZ,IAAA,OAAO,KAAA;AACT,EAAA;AAEA,EAAA,IAAI3B,OAAOmB,WAAAA,IAAe,IAAA,IAAQQ,OAAAA,CAAQR,WAAAA,KAAgBnB,OAAOmB,WAAAA,EAAa;AAC5E,IAAA,OAAO,KAAA;AACT,EAAA;AACA,EAAA,IAAInB,OAAOqB,MAAAA,IAAU,IAAA,IAAQM,OAAAA,CAAQN,MAAAA,KAAWrB,OAAOqB,MAAAA,EAAQ;AAC7D,IAAA,OAAO,KAAA;AACT,EAAA;AACA,EAAA,IAAIrB,OAAOsB,SAAAA,IAAa,IAAA,IAAQK,OAAAA,CAAQL,SAAAA,KAActB,OAAOsB,SAAAA,EAAW;AACtE,IAAA,OAAO,KAAA;AACT,EAAA;AACA,EAAA,IAAItB,OAAOuB,KAAAA,IAAS,IAAA,IAAQI,OAAAA,CAAQJ,KAAAA,KAAUvB,OAAOuB,KAAAA,EAAO;AAC1D,IAAA,OAAO,KAAA;AACT,EAAA;AACA,EAAA,IAAIvB,OAAOwB,SAAAA,IAAa,IAAA,IAAQG,OAAAA,CAAQH,SAAAA,KAAcxB,OAAOwB,SAAAA,EAAW;AACtE,IAAA,OAAO,KAAA;AACT,EAAA;AACA,EAAA,IAAIxB,OAAOyB,cAAAA,IAAkB,IAAA,IAAQE,OAAAA,CAAQF,cAAAA,KAAmBzB,OAAOyB,cAAAA,EAAgB;AACrF,IAAA,OAAO,KAAA;AACT,EAAA;AAEA,EAAA,OAAO,IAAA;AACT;AAzBgBuB,MAAAA,CAAAA,cAAAA,EAAAA,gBAAAA,CAAAA;AAiCT,SAASC,qBAAqBC,UAAAA,EAOpC;AACC,EAAA,OAAO;AACL/B,IAAAA,WAAAA,EAAa+B,WAAW/B,WAAAA,IAAe,IAAA;AACvCE,IAAAA,MAAAA,EAAQ6B,WAAW7B,MAAAA,IAAU,IAAA;AAC7BC,IAAAA,SAAAA,EAAW4B,WAAW5B,SAAAA,IAAa,IAAA;AACnCC,IAAAA,KAAAA,EAAO2B,WAAW3B,KAAAA,IAAS,IAAA;AAC3BC,IAAAA,SAAAA,EAAW0B,WAAW1B,SAAAA,IAAa,IAAA;AACnCC,IAAAA,cAAAA,EAAgByB,WAAWzB,cAAAA,IAAkB;AAC/C,GAAA;AACF;AAhBgBwB,MAAAA,CAAAA,oBAAAA,EAAAA,sBAAAA,CAAAA","file":"chunk-MX4AHK3E.js","sourcesContent":["/**\n * Prisma Module for Burdenoff Backend SDK\n *\n * Provides Prisma 7 utilities including:\n * - Singleton database manager for microservices\n * - Unified database client factory with graph extension\n * - Prisma client configuration with PostgreSQL adapter\n * - Connection pooling and management\n * - Health checks and monitoring\n * - Graceful shutdown handling\n * - Field extraction utilities for graph sync\n * - Context filtering utilities for multi-tenant queries\n * - Workspace extension for automatic workspaceId injection\n *\n * @module prisma\n * @category Database\n */\n\nexport * from './manager.js';\nexport * from './factory.js';\nexport * from './client.js';\nexport type * from './types.js';\nexport * from './health.js';\nexport * from './fields.js';\nexport * from './context.js';\nexport * from './workspace-extension.js';\n","/**\n * Database Client Factory\n *\n * Provides a unified factory for creating fully-configured database clients\n * with Prisma 7, PostgreSQL adapter, graph extension, and graceful shutdown.\n *\n * This module consolidates all database setup into a single call, reducing\n * boilerplate across all backend services.\n *\n * @module prisma/factory\n * @category Database\n */\n\nimport { logger } from '../logger/index.js';\nimport {\n  createPrismaClient,\n  ensureServiceApplicationName,\n  type PrismaClientBase,\n  type PrismaClientWrapper,\n  type PrismaClientConstructorOptions,\n} from './client.js';\nimport type { PrismaClientConfig } from './types.js';\nimport { addGraphExtension, type GraphMiddlewareConfig, type GraphEventEmitter } from '../graph/middleware/index.js';\nimport { getGraphEventEmitter } from '../event-queue/graph-emitter.js';\nimport { addWorkspaceExtension, type WorkspaceExtensionConfig } from './workspace-extension.js';\n\n/**\n * Configuration for creating a database client\n */\nexport interface DatabaseClientConfig extends PrismaClientConfig {\n  /**\n   * Product name for graph events (e.g., 'module-tags', 'workspaces')\n   */\n  productName: string;\n\n  /**\n   * Enable graph extension for entity sync\n   * @default true (reads from GRAPH_MIDDLEWARE_ENABLED env var)\n   */\n  enableGraphExtension?: boolean;\n\n  /**\n   * Custom graph event emitter (defaults to NATS-based emitter)\n   */\n  graphEventEmitter?: GraphEventEmitter;\n\n  /**\n   * Enable workspace extension for automatic workspaceId injection.\n   *\n   * Default is layer-aware:\n   * - Global-layer services (`productName` starting with `global-` or `global_`,\n   *   or `WORKSPACE_LAYER=global`) default to `false`. Global-layer tables\n   *   (Tenant, Organization, Workspace, PlatformProduct, etc.) are intentionally\n   *   not workspace-scoped — enforcing workspaceId on them would block legitimate\n   *   queries like `myOrganizations`, `myWorkspaces`, `myAccessibleProducts`.\n   * - All other services (wspace layer, product backends) default to `true`.\n   *\n   * `WORKSPACE_EXTENSION_ENABLED` env var always wins when explicitly set\n   * (`true` or `false`). Pass the field on `config` for code-level override.\n   */\n  enableWorkspaceExtension?: boolean;\n\n  /**\n   * Configuration for the workspace extension\n   */\n  workspaceExtensionConfig?: WorkspaceExtensionConfig;\n\n  /**\n   * Register process shutdown handlers for graceful shutdown\n   * @default true\n   */\n  registerShutdownHandlers?: boolean;\n}\n\n/**\n * Result of creating a database client\n */\nexport interface DatabaseClient<T extends PrismaClientBase> {\n  /**\n   * The extended Prisma client for database operations\n   * Use this for all queries: db.model.operation()\n   */\n  db: T & { client: T };\n\n  /**\n   * The Prisma client wrapper with connection management utilities\n   */\n  wrapper: PrismaClientWrapper<T>;\n\n  /**\n   * Connect to the database with retry logic\n   */\n  connect: (retries?: number, delay?: number) => Promise<void>;\n\n  /**\n   * Disconnect from the database\n   */\n  disconnect: () => Promise<void>;\n}\n\n/**\n * Layer-aware default for the workspace extension.\n *\n * Global-layer services (productName starting with `global-`/`global_`, or\n * `WORKSPACE_LAYER=global`) opt out by default because their tables don't carry\n * a workspaceId column — enforcement would break queries like `myOrganizations`,\n * `myAccessibleProducts`, `contentPages`.\n *\n * `WORKSPACE_EXTENSION_ENABLED` is respected as an explicit override.\n */\nfunction resolveWorkspaceExtensionDefault(productName: string): boolean {\n  const explicit = process.env['WORKSPACE_EXTENSION_ENABLED'];\n  if (explicit === 'true') return true;\n  if (explicit === 'false') return false;\n\n  const layer = process.env['WORKSPACE_LAYER']?.toLowerCase();\n  if (layer === 'global') return false;\n  if (layer === 'wspace') return true;\n\n  const name = productName.toLowerCase();\n  if (name.startsWith('global-') || name.startsWith('global_')) return false;\n  return true;\n}\n\n/**\n * Create a fully-configured database client with graph extension\n *\n * This is the recommended way to create a database connection in all backend services.\n * It handles:\n * - Prisma client creation with PostgreSQL adapter\n * - Connection pooling configuration\n * - Query logging (in development)\n * - Graph extension for entity sync (via NATS or in-memory)\n * - Graceful shutdown handlers\n *\n * @example\n * ```typescript\n * // In your service's db.ts\n * import { PrismaClient } from './generated/prisma/client.js';\n * import { createDatabaseClient } from '@burdenoff/be-sdk/prisma';\n *\n * const { db, wrapper, connect, disconnect } = createDatabaseClient(PrismaClient, {\n *   productName: 'my-service',\n *   databaseUrl: process.env.DATABASE_URL!,\n * });\n *\n * export { db, wrapper, connect, disconnect };\n * export type ExtendedPrismaClient = typeof db;\n * ```\n *\n * @example\n * ```typescript\n * // With custom configuration\n * const { db } = createDatabaseClient(PrismaClient, {\n *   productName: 'workspaces',\n *   databaseUrl: process.env.DATABASE_URL!,\n *   maxConnections: 50,\n *   enableQueryLogging: true,\n *   slowQueryThreshold: 200,\n *   enableGraphExtension: true,\n *   registerShutdownHandlers: true,\n * });\n * ```\n */\nexport function createDatabaseClient<T extends PrismaClientBase>(\n  PrismaClientConstructor: new (options: PrismaClientConstructorOptions) => T,\n  config: DatabaseClientConfig\n): DatabaseClient<T> {\n  const {\n    productName,\n    enableGraphExtension = process.env['GRAPH_MIDDLEWARE_ENABLED'] !== 'false',\n    graphEventEmitter,\n    enableWorkspaceExtension = resolveWorkspaceExtensionDefault(productName),\n    workspaceExtensionConfig,\n    registerShutdownHandlers = true,\n    ...prismaConfig\n  } = config;\n\n  // Tag every service's pool with `svc=<productName>` by default so its\n  // connections are attributable in pg_stat_activity / pg_stat_statements\n  // (the on-ramp to per-workspace observability and shard routing). This is\n  // pure diagnostic metadata with no effect on behavior; explicit\n  // `applicationName` on the config always wins.\n  const prismaConfigWithDefaults: PrismaClientConfig = {\n    ...prismaConfig,\n    applicationName: prismaConfig.applicationName ?? `svc=${productName}`,\n  };\n\n  // Belt-and-suspenders: also set the PGAPPNAME env fallback so any additional\n  // pools this service opens outside be-sdk still carry the per-service tag.\n  ensureServiceApplicationName(productName);\n\n  // Create Prisma client wrapper\n  const wrapper = createPrismaClient(PrismaClientConstructor, prismaConfigWithDefaults);\n\n  // Get the base client\n  const baseClient = wrapper.getClient();\n\n  // Extension chaining order:\n  // 1. Graph extension (event emission on CRUD) - runs first\n  // 2. Workspace extension (auto-inject workspaceId) - runs second\n  //\n  // The workspace extension should run BEFORE graph extension in the\n  // interception chain so that graph events include the injected workspaceId.\n  // In Prisma $extends, the LAST extension added runs FIRST (outermost wrapper).\n  // So we add graph first, then workspace on top.\n\n  let extendedClient: T;\n\n  // Step 1: Add graph extension\n  if (enableGraphExtension) {\n    const eventEmitter = graphEventEmitter ?? getGraphEventEmitter();\n\n    const graphConfig: GraphMiddlewareConfig = {\n      enabled: true,\n      productName,\n      eventEmitter,\n    };\n\n    extendedClient = addGraphExtension(baseClient, graphConfig);\n\n    logger.info('[Database] Graph extension enabled', { productName });\n  } else {\n    extendedClient = baseClient;\n    logger.info('[Database] Graph extension disabled');\n  }\n\n  // Step 2: Add workspace extension (wraps on top of graph)\n  if (enableWorkspaceExtension) {\n    extendedClient = addWorkspaceExtension(extendedClient, workspaceExtensionConfig);\n\n    logger.info('[Database] Workspace extension enabled', { productName });\n  } else {\n    logger.info('[Database] Workspace extension disabled');\n  }\n\n  // Add backwards compatibility alias\n  const db = extendedClient as T & { client: T };\n  (db as unknown as Record<string, unknown>)['client'] = db;\n\n  // Register shutdown handlers if requested\n  if (registerShutdownHandlers) {\n    wrapper.registerShutdownHandlers();\n    logger.debug('[Database] Shutdown handlers registered');\n  }\n\n  return {\n    db,\n    wrapper,\n    connect: (retries?: number, delay?: number) => wrapper.connect(retries, delay),\n    disconnect: () => wrapper.disconnect(),\n  };\n}\n\n/**\n * Pool-tuning options resolved from environment variables.\n */\nexport interface PoolTuningEnv {\n  /** Postgres application_name (defaults to `svc=<productName>`). */\n  applicationName: string;\n  /** Client-side node-postgres query_timeout in ms, if opted in (pooler-safe). */\n  queryTimeoutMillis?: number;\n  /** Server-side statement_timeout in ms, if opted in. */\n  statementTimeoutMillis?: number;\n  /** Server-side idle_in_transaction_session_timeout in ms, if opted in. */\n  idleInTransactionTimeoutMillis?: number;\n  /** Server-side lock_timeout in ms, if opted in. */\n  lockTimeoutMillis?: number;\n}\n\n/**\n * Parse a strictly-positive integer environment variable.\n *\n * Returns `undefined` for unset, empty, non-numeric, zero, or negative values —\n * so a misconfigured or absent env var can never silently enable an aggressive\n * (or nonsensical) timeout. This is what keeps the DB-enforced timeouts OFF by\n * default and therefore behavior-preserving.\n */\nfunction parsePositiveIntEnv(name: string): number | undefined {\n  const raw = process.env[name];\n  if (raw == null || raw.trim() === '') {\n    return undefined;\n  }\n  const parsed = Number.parseInt(raw.trim(), 10);\n  return Number.isFinite(parsed) && parsed > 0 ? parsed : undefined;\n}\n\n/**\n * Resolve pool tuning (application_name + opt-in DB timeouts) from env vars:\n * - DATABASE_APPLICATION_NAME: overrides the default `svc=<productName>` tag\n * - DATABASE_QUERY_TIMEOUT: client-side node-postgres query_timeout in ms (opt-in, pooler-safe)\n * - DATABASE_STATEMENT_TIMEOUT: server-side statement_timeout in ms (opt-in; DIRECT :5432 only — see note)\n * - DATABASE_IDLE_IN_TRANSACTION_TIMEOUT: idle_in_transaction_session_timeout in ms (opt-in)\n * - DATABASE_LOCK_TIMEOUT: lock_timeout in ms (opt-in)\n *\n * Timeouts are omitted entirely unless explicitly set to a positive integer, so\n * the default is exactly today's behavior (no timeouts).\n *\n * NOTE: prefer `DATABASE_QUERY_TIMEOUT` for services whose `DATABASE_URL` points\n * at the built-in PgBouncer (`:6432`). `DATABASE_STATEMENT_TIMEOUT` and friends\n * are Postgres startup parameters that Azure PgBouncer does not pass through, so\n * they silently have no effect (or fail the connection) on the pooled path.\n */\nexport function resolvePoolTuningFromEnv(productName: string): PoolTuningEnv {\n  const tuning: PoolTuningEnv = {\n    applicationName: process.env['DATABASE_APPLICATION_NAME']?.trim() || `svc=${productName}`,\n  };\n\n  const queryTimeout = parsePositiveIntEnv('DATABASE_QUERY_TIMEOUT');\n  if (queryTimeout !== undefined) {\n    tuning.queryTimeoutMillis = queryTimeout;\n  }\n\n  const statementTimeout = parsePositiveIntEnv('DATABASE_STATEMENT_TIMEOUT');\n  if (statementTimeout !== undefined) {\n    tuning.statementTimeoutMillis = statementTimeout;\n  }\n\n  const idleInTransactionTimeout = parsePositiveIntEnv('DATABASE_IDLE_IN_TRANSACTION_TIMEOUT');\n  if (idleInTransactionTimeout !== undefined) {\n    tuning.idleInTransactionTimeoutMillis = idleInTransactionTimeout;\n  }\n\n  const lockTimeout = parsePositiveIntEnv('DATABASE_LOCK_TIMEOUT');\n  if (lockTimeout !== undefined) {\n    tuning.lockTimeoutMillis = lockTimeout;\n  }\n\n  return tuning;\n}\n\n/**\n * Create a database client from environment variables\n *\n * Convenience function that reads configuration from standard environment variables:\n * - DATABASE_URL: Connection string (required)\n * - DATABASE_MAX_CONNECTIONS: Max pool connections (default: 20)\n * - DATABASE_APPLICATION_NAME: Postgres application_name (default: `svc=<productName>`)\n * - DATABASE_QUERY_TIMEOUT: opt-in client-side query timeout in ms — the\n *   PgBouncer-safe query bound (default: OFF, preserving current behavior)\n * - DATABASE_STATEMENT_TIMEOUT / DATABASE_IDLE_IN_TRANSACTION_TIMEOUT / DATABASE_LOCK_TIMEOUT:\n *   opt-in server-side timeouts in ms (default: OFF; DIRECT :5432 only — not\n *   honored through the built-in PgBouncer :6432 runtime path)\n * - NODE_ENV: Environment for logging settings\n * - GRAPH_MIDDLEWARE_ENABLED: Enable graph sync (default: true)\n *\n * @example\n * ```typescript\n * import { PrismaClient } from './generated/prisma/client.js';\n * import { createDatabaseClientFromEnv } from '@burdenoff/be-sdk/prisma';\n *\n * const { db } = createDatabaseClientFromEnv(PrismaClient, 'module-tags');\n * export { db };\n * ```\n */\nexport function createDatabaseClientFromEnv<T extends PrismaClientBase>(\n  PrismaClientConstructor: new (options: PrismaClientConstructorOptions) => T,\n  productName: string,\n  overrides?: Partial<DatabaseClientConfig>\n): DatabaseClient<T> {\n  const databaseUrl = process.env['DATABASE_URL'];\n  if (!databaseUrl) {\n    throw new Error('DATABASE_URL environment variable is required');\n  }\n\n  const isDevelopment = process.env['NODE_ENV'] === 'development';\n\n  const config: DatabaseClientConfig = {\n    productName,\n    databaseUrl,\n    maxConnections: parseInt(process.env['DATABASE_MAX_CONNECTIONS'] || '20', 10),\n    idleTimeoutMillis: parseInt(process.env['DATABASE_IDLE_TIMEOUT'] || '30000', 10),\n    connectionTimeoutMillis: parseInt(process.env['DATABASE_CONNECTION_TIMEOUT'] || '10000', 10),\n    ...resolvePoolTuningFromEnv(productName),\n    enableQueryLogging: isDevelopment,\n    slowQueryThreshold: isDevelopment ? 100 : 500,\n    ...overrides,\n  };\n\n  // Transient acquire retry — env-tunable, and unlike the fields above zero is\n  // meaningful (DATABASE_ACQUIRE_RETRIES=0 disables the retry entirely).\n  const acquireRetriesRaw = process.env['DATABASE_ACQUIRE_RETRIES']?.trim();\n  if (acquireRetriesRaw !== undefined && acquireRetriesRaw !== '' && config.acquireRetries === undefined) {\n    const parsed = Number.parseInt(acquireRetriesRaw, 10);\n    if (Number.isFinite(parsed) && parsed >= 0) {\n      config.acquireRetries = parsed;\n    }\n  }\n  const acquireRetryDelay = parsePositiveIntEnv('DATABASE_ACQUIRE_RETRY_DELAY');\n  if (acquireRetryDelay !== undefined && config.acquireRetryDelayMillis === undefined) {\n    config.acquireRetryDelayMillis = acquireRetryDelay;\n  }\n\n  return createDatabaseClient(PrismaClientConstructor, config);\n}\n","/**\n * Database Singleton Manager\n *\n * Provides a singleton pattern for database connections across microservices.\n * Services initialize once at startup and access the db instance globally.\n *\n * This eliminates the need for individual db.ts files in each microservice.\n *\n * @module prisma/manager\n * @category Database\n *\n * @example\n * ```typescript\n * // In your service's index.ts (startup)\n * import { PrismaClient } from './generated/prisma/client.js';\n * import { initializeDatabase } from '@burdenoff/be-sdk/prisma';\n *\n * // Initialize once at startup\n * const { db, connect } = initializeDatabase(PrismaClient, 'module-tags');\n * await connect();\n *\n * // In any other file\n * import { getDb } from '@burdenoff/be-sdk/prisma';\n * const db = getDb();\n * await db.client.user.findMany();\n * ```\n */\n\nimport { logger } from '../logger/index.js';\nimport {\n  createDatabaseClient,\n  createDatabaseClientFromEnv,\n  type DatabaseClient,\n  type DatabaseClientConfig,\n} from './factory.js';\nimport type { PrismaClientBase, PrismaClientConstructorOptions, DatabaseReturnType } from './client.js';\n\n/**\n * Global database manager state\n */\ninterface DatabaseManagerState {\n  initialized: boolean;\n  productName: string | null;\n  client: DatabaseClient<PrismaClientBase> | null;\n}\n\n/**\n * Singleton state for the database manager\n */\nconst state: DatabaseManagerState = {\n  initialized: false,\n  productName: null,\n  client: null,\n};\n\n/**\n * Initialize the database singleton\n *\n * Call this once at application startup with your service's PrismaClient.\n * After initialization, use `getDb()` to access the database anywhere.\n *\n * @param PrismaClientConstructor - The generated PrismaClient class from your service\n * @param productName - Product name for graph events (e.g., 'module-tags', 'workspaces')\n * @param config - Optional configuration overrides\n * @returns The database client with db, wrapper, connect, disconnect\n *\n * @throws Error if already initialized with a different product\n *\n * @example\n * ```typescript\n * import { PrismaClient } from './generated/prisma/client.js';\n * import { initializeDatabase } from '@burdenoff/be-sdk/prisma';\n *\n * const { db, connect, disconnect } = initializeDatabase(PrismaClient, 'module-tags');\n * await connect();\n * ```\n */\nexport function initializeDatabase<T extends PrismaClientBase>(\n  PrismaClientConstructor: new (options: PrismaClientConstructorOptions) => T,\n  productName: string,\n  config?: Partial<DatabaseClientConfig>\n): DatabaseClient<T> {\n  // Check if already initialized\n  if (state.initialized) {\n    if (state.productName !== productName) {\n      throw new Error(\n        `Database already initialized for product \"${state.productName}\". ` +\n          `Cannot reinitialize for \"${productName}\".`\n      );\n    }\n    logger.debug('[DatabaseManager] Already initialized, returning existing client', { productName });\n    return state.client as DatabaseClient<T>;\n  }\n\n  // Create the database client using env-based factory\n  const client = createDatabaseClientFromEnv(PrismaClientConstructor, productName, config);\n\n  // Store in singleton state\n  state.initialized = true;\n  state.productName = productName;\n  state.client = client;\n\n  logger.info('[DatabaseManager] Database initialized', { productName });\n\n  return client;\n}\n\n/**\n * Initialize the database with explicit configuration\n *\n * Use this when you need full control over database configuration\n * rather than reading from environment variables.\n *\n * @param PrismaClientConstructor - The generated PrismaClient class\n * @param config - Full database configuration\n * @returns The database client\n *\n * @example\n * ```typescript\n * const { db } = initializeDatabaseWithConfig(PrismaClient, {\n *   productName: 'module-tags',\n *   databaseUrl: 'postgresql://...',\n *   maxConnections: 50,\n *   enableGraphExtension: false,\n * });\n * ```\n */\nexport function initializeDatabaseWithConfig<T extends PrismaClientBase>(\n  PrismaClientConstructor: new (options: PrismaClientConstructorOptions) => T,\n  config: DatabaseClientConfig\n): DatabaseClient<T> {\n  const { productName } = config;\n\n  // Check if already initialized\n  if (state.initialized) {\n    if (state.productName !== productName) {\n      throw new Error(\n        `Database already initialized for product \"${state.productName}\". ` +\n          `Cannot reinitialize for \"${productName}\".`\n      );\n    }\n    logger.debug('[DatabaseManager] Already initialized, returning existing client', { productName });\n    return state.client as DatabaseClient<T>;\n  }\n\n  // Create the database client\n  const client = createDatabaseClient(PrismaClientConstructor, config);\n\n  // Store in singleton state\n  state.initialized = true;\n  state.productName = productName;\n  state.client = client;\n\n  logger.info('[DatabaseManager] Database initialized with custom config', { productName });\n\n  return client;\n}\n\n/**\n * Get the initialized database client\n *\n * Use this anywhere in your application to access the database.\n * Must call `initializeDatabase()` first at application startup.\n *\n * The returned client provides dynamic model access - you can access any\n * model property (e.g., `db.client.user`, `db.client.universalTag`) and\n * TypeScript will allow common Prisma operations (findMany, create, etc.).\n *\n * @returns The extended Prisma client (db) with dynamic model access\n * @throws Error if database not initialized\n *\n * @example\n * ```typescript\n * import { getDb } from '@burdenoff/be-sdk/prisma';\n *\n * const db = getDb();\n * // Dynamic model access works without importing service-specific types\n * const tags = await db.client.universalTag.findMany();\n * const users = await db.client.user.findMany({ where: { active: true } });\n * ```\n */\nexport function getDb<T extends PrismaClientBase = PrismaClientBase>(): DatabaseReturnType<T> {\n  if (!state.initialized || !state.client) {\n    throw new Error('Database not initialized. Call initializeDatabase() at application startup before using getDb().');\n  }\n  return state.client.db as unknown as DatabaseReturnType<T>;\n}\n\n/**\n * Get the full database manager\n *\n * Returns the complete database client including wrapper, connect, and disconnect functions.\n * Useful when you need access to connection management utilities.\n *\n * @returns The full database client\n * @throws Error if database not initialized\n *\n * @example\n * ```typescript\n * import { getDatabaseManager } from '@burdenoff/be-sdk/prisma';\n *\n * const { db, wrapper, connect, disconnect } = getDatabaseManager();\n * await connect();\n * ```\n */\nexport function getDatabaseManager<T extends PrismaClientBase = PrismaClientBase>(): DatabaseClient<T> {\n  if (!state.initialized || !state.client) {\n    throw new Error(\n      'Database not initialized. Call initializeDatabase() at application startup before using getDatabaseManager().'\n    );\n  }\n  return state.client as DatabaseClient<T>;\n}\n\n/**\n * Check if database is initialized\n *\n * @returns True if database has been initialized\n *\n * @example\n * ```typescript\n * if (!isDatabaseInitialized()) {\n *   await initializeDatabase(PrismaClient, 'my-service');\n * }\n * ```\n */\nexport function isDatabaseInitialized(): boolean {\n  return state.initialized;\n}\n\n/**\n * Get the product name of the initialized database\n *\n * @returns The product name or null if not initialized\n */\nexport function getDatabaseProductName(): string | null {\n  return state.productName;\n}\n\n/**\n * Reset the database manager (for testing purposes only)\n *\n * WARNING: This disconnects and resets the database manager.\n * Only use this in test environments for cleanup between tests.\n *\n * @internal\n */\nexport async function resetDatabaseManager(): Promise<void> {\n  if (state.client) {\n    try {\n      await state.client.disconnect();\n    } catch (error) {\n      logger.warn('[DatabaseManager] Error during disconnect on reset', { error });\n    }\n  }\n\n  state.initialized = false;\n  state.productName = null;\n  state.client = null;\n\n  logger.debug('[DatabaseManager] Database manager reset');\n}\n","/**\n * Prisma Health Check Utilities\n */\n\nimport { logger } from '../logger/index.js';\nimport type { DatabaseHealth } from './types.js';\nimport type { PrismaClientBase } from './client.js';\n\n/**\n * Check database health\n */\nexport async function checkDatabaseHealth<T extends PrismaClientBase>(client: T): Promise<DatabaseHealth> {\n  try {\n    const start = Date.now();\n    await client.$queryRaw`SELECT 1`;\n    const latency = Date.now() - start;\n\n    return { healthy: true, latency };\n  } catch (error) {\n    const errorMessage = error instanceof Error ? error.message : String(error);\n    logger.error('[Prisma] Health check failed', { error: errorMessage });\n\n    return {\n      healthy: false,\n      error: errorMessage,\n    };\n  }\n}\n\n/**\n * Test database connection\n */\nexport async function testConnection<T extends PrismaClientBase>(client: T): Promise<boolean> {\n  try {\n    await client.$queryRaw`SELECT 1`;\n    return true;\n  } catch (error) {\n    logger.error('[Prisma] Connection test failed', {\n      error: error instanceof Error ? error.message : String(error),\n    });\n    return false;\n  }\n}\n\n/**\n * Get database version\n */\nexport async function getDatabaseVersion<T extends PrismaClientBase>(client: T): Promise<string | null> {\n  try {\n    const result = await client.$queryRaw<Array<{ version?: string }>>`SELECT version()`;\n    return result[0]?.version ?? null;\n  } catch (error) {\n    logger.error('[Prisma] Failed to get database version', {\n      error: error instanceof Error ? error.message : String(error),\n    });\n    return null;\n  }\n}\n\n/**\n * Get database stats\n */\nexport async function getDatabaseStats<T extends PrismaClientBase>(\n  client: T\n): Promise<{\n  health: DatabaseHealth;\n  version: string | null;\n  timestamp: Date;\n}> {\n  const [health, version] = await Promise.all([checkDatabaseHealth(client), getDatabaseVersion(client)]);\n\n  return {\n    health,\n    version,\n    timestamp: new Date(),\n  };\n}\n","/**\n * Prisma Field Extraction Utilities\n *\n * Provides utilities for extracting model fields from Prisma schema.\n * In Prisma 7, DMMF is not available at runtime, so this module provides\n * build-time field extraction through a generator.\n *\n * @module prisma/fields\n */\n\nimport { createRequire } from 'node:module';\nimport { logger } from '../logger/index.js';\n\nconst requireFn = createRequire(import.meta.url);\n\n/**\n * Field extraction options\n */\nexport interface FieldExtractionOptions {\n  /** Fields to exclude from extraction */\n  excludeFields?: string[];\n  /** Whether to include relation fields */\n  includeRelations?: boolean;\n  /** Custom filter function */\n  customFilter?: (field: { name: string; type: string; isRelation: boolean }) => boolean;\n}\n\n/**\n * Field extraction result\n */\nexport interface FieldExtractionResult {\n  /** Extracted field names */\n  fields: string[];\n  /** Metadata about the extraction */\n  metadata: {\n    /** Total number of fields found */\n    totalFields: number;\n    /** Number of fields excluded */\n    excludedCount: number;\n    /** Names of excluded fields */\n    excludedFields: string[];\n    /** Number of relation fields */\n    relationFields: number;\n  };\n}\n\n/**\n * Model fields mapping\n * This will be generated at build time by the Prisma generator\n */\nexport type ModelFieldsMap = Record<\n  string,\n  {\n    fields: string[];\n    relations: string[];\n  }\n>;\n\n/**\n * Import generated fields from the consuming package\n * This function should be used by backends to load their generated fields\n */\nexport function loadGeneratedFields(generatedFieldsPath: string): ModelFieldsMap {\n  try {\n    // Dynamic import of generated fields using createRequire\n    const generated = requireFn(generatedFieldsPath) as { default: ModelFieldsMap };\n    return generated.default || generated;\n  } catch (error) {\n    logger.error('[Prisma] Failed to load generated fields', {\n      error: error instanceof Error ? error.message : String(error),\n      path: generatedFieldsPath,\n    });\n    throw new Error(`Failed to load generated fields from ${generatedFieldsPath}`);\n  }\n}\n\n/**\n * Extract fields from generated model fields with options\n */\nexport function extractFieldsFromModel(\n  modelName: string,\n  modelFieldsMap: ModelFieldsMap,\n  options: FieldExtractionOptions = {}\n): FieldExtractionResult {\n  const modelFields = modelFieldsMap[modelName];\n\n  if (!modelFields) {\n    throw new Error(\n      `Model \"${modelName}\" not found in generated fields. ` +\n        `Available models: ${Object.keys(modelFieldsMap).join(', ')}`\n    );\n  }\n\n  const { excludeFields = [], includeRelations = false, customFilter } = options;\n\n  // Start with scalar fields\n  let fields = [...modelFields.fields];\n\n  // Add relations if requested\n  if (includeRelations) {\n    fields = [...fields, ...modelFields.relations];\n  }\n\n  // Track excluded fields\n  const excluded: string[] = [];\n\n  // Apply exclusions\n  if (excludeFields.length > 0) {\n    fields = fields.filter((field) => {\n      if (excludeFields.includes(field)) {\n        excluded.push(field);\n        return false;\n      }\n      return true;\n    });\n  }\n\n  // Apply custom filter\n  if (customFilter) {\n    fields = fields.filter((fieldName) => {\n      const isRelation = modelFields.relations.includes(fieldName);\n      const shouldInclude = customFilter({\n        name: fieldName,\n        type: 'unknown', // Type information not available without full DMMF\n        isRelation,\n      });\n\n      if (!shouldInclude) {\n        excluded.push(fieldName);\n      }\n\n      return shouldInclude;\n    });\n  }\n\n  return {\n    fields,\n    metadata: {\n      totalFields: modelFields.fields.length + modelFields.relations.length,\n      excludedCount: excluded.length,\n      excludedFields: excluded,\n      relationFields: modelFields.relations.length,\n    },\n  };\n}\n\n/**\n * Get all field names for a model (without options)\n */\nexport function getModelFields(modelName: string, modelFieldsMap: ModelFieldsMap, includeRelations = false): string[] {\n  const result = extractFieldsFromModel(modelName, modelFieldsMap, { includeRelations });\n  return result.fields;\n}\n\n/**\n * Check if a model exists in the generated fields\n */\nexport function hasModel(modelName: string, modelFieldsMap: ModelFieldsMap): boolean {\n  return modelName in modelFieldsMap;\n}\n\n/**\n * Get all available model names\n */\nexport function getAllModelNames(modelFieldsMap: ModelFieldsMap): string[] {\n  return Object.keys(modelFieldsMap);\n}\n","/**\n * Prisma Context Filtering Utilities\n *\n * Utilities for handling operation context in queries, mutations, and filtering.\n * Context JSON enables multi-dimensional data isolation across workspaces, users, projects, etc.\n *\n * @module prisma/context\n * @category Database\n */\n\n/**\n * Context filter input for querying entities by context\n */\nexport interface ContextFilterInput {\n  workspaceId?: string | null;\n  userId?: string | null;\n  projectId?: string | null;\n  appId?: string | null;\n  /** Product identifier (e.g. \"vibecontrols\", \"workspaces\"). Stamped on cross-product\n   *  records so admin filters can scope by originating product. */\n  productId?: string | null;\n  /** Organization identifier within the tenant. */\n  organizationId?: string | null;\n}\n\n/**\n * Operation context for create/update operations\n */\nexport interface OperationContext extends ContextFilterInput {\n  custom?: Record<string, unknown> | null;\n}\n\n/**\n * Prisma JSON filter type (simplified for context filtering)\n * This type is designed to be compatible with Prisma's JsonNullableFilter\n * Uses Record<string, unknown> for maximum compatibility with various Prisma versions\n */\nexport type PrismaJsonFilter = Record<string, unknown>;\n\n/**\n * JSON value type for Prisma (includes null for reading from DB)\n */\nexport type JsonValue = string | number | boolean | null | { [key: string]: JsonValue } | JsonValue[];\n\n/**\n * Input JSON value type for Prisma (excludes null for writing to DB)\n * Compatible with Prisma's InputJsonValue type\n */\nexport type InputJsonValue = string | number | boolean | { [key: string]: InputJsonValue } | InputJsonValue[];\n\n/**\n * Build Prisma where condition for context filtering.\n * Uses PostgreSQL JSONB containment operators for efficient queries.\n *\n * @param contextFilter - The context filter input\n * @returns Prisma where clause for context field, or undefined if no filter provided\n *\n * @example\n * ```typescript\n * const contextWhere = buildContextWhereClause({\n *   workspaceId: '123',\n *   projectId: '456'\n * });\n * // Returns: { path: ['workspaceId'], equals: '123' }\n * ```\n */\nexport function buildContextWhereClause(\n  contextFilter: ContextFilterInput | null | undefined\n): PrismaJsonFilter | undefined {\n  if (!contextFilter) {\n    return undefined;\n  }\n\n  // Build array of path conditions for each non-null field\n  const conditions: PrismaJsonFilter[] = [];\n\n  if (contextFilter.workspaceId != null) {\n    conditions.push({\n      path: ['workspaceId'],\n      equals: contextFilter.workspaceId,\n    });\n  }\n\n  if (contextFilter.userId != null) {\n    conditions.push({\n      path: ['userId'],\n      equals: contextFilter.userId,\n    });\n  }\n\n  if (contextFilter.projectId != null) {\n    conditions.push({\n      path: ['projectId'],\n      equals: contextFilter.projectId,\n    });\n  }\n\n  if (contextFilter.appId != null) {\n    conditions.push({\n      path: ['appId'],\n      equals: contextFilter.appId,\n    });\n  }\n\n  if (contextFilter.productId != null) {\n    conditions.push({\n      path: ['productId'],\n      equals: contextFilter.productId,\n    });\n  }\n\n  if (contextFilter.organizationId != null) {\n    conditions.push({\n      path: ['organizationId'],\n      equals: contextFilter.organizationId,\n    });\n  }\n\n  // If no conditions, return undefined\n  if (conditions.length === 0) {\n    return undefined;\n  }\n\n  // If single condition, return it directly\n  if (conditions.length === 1) {\n    return conditions[0];\n  }\n\n  // For multiple conditions, return the first one\n  // Caller should use buildContextWhereConditions for multiple AND conditions\n  return conditions[0];\n}\n\n/**\n * Build context where conditions as an array for use in AND clause.\n * This is useful when you need to filter by multiple context fields.\n *\n * @param contextFilter - The context filter input\n * @returns Array of Prisma where conditions, each targeting the context field\n *\n * @example\n * ```typescript\n * const conditions = buildContextWhereConditions({\n *   workspaceId: '123',\n *   projectId: '456'\n * });\n * // Use in Prisma query:\n * prisma.entity.findMany({\n *   where: { AND: conditions }\n * });\n * ```\n */\nexport function buildContextWhereConditions(\n  contextFilter: ContextFilterInput | null | undefined\n): Array<{ context: PrismaJsonFilter }> {\n  if (!contextFilter) {\n    return [];\n  }\n\n  const conditions: Array<{ context: PrismaJsonFilter }> = [];\n\n  if (contextFilter.workspaceId != null) {\n    conditions.push({\n      context: {\n        path: ['workspaceId'],\n        equals: contextFilter.workspaceId,\n      },\n    });\n  }\n\n  if (contextFilter.userId != null) {\n    conditions.push({\n      context: {\n        path: ['userId'],\n        equals: contextFilter.userId,\n      },\n    });\n  }\n\n  if (contextFilter.projectId != null) {\n    conditions.push({\n      context: {\n        path: ['projectId'],\n        equals: contextFilter.projectId,\n      },\n    });\n  }\n\n  if (contextFilter.appId != null) {\n    conditions.push({\n      context: {\n        path: ['appId'],\n        equals: contextFilter.appId,\n      },\n    });\n  }\n\n  if (contextFilter.productId != null) {\n    conditions.push({\n      context: {\n        path: ['productId'],\n        equals: contextFilter.productId,\n      },\n    });\n  }\n\n  if (contextFilter.organizationId != null) {\n    conditions.push({\n      context: {\n        path: ['organizationId'],\n        equals: contextFilter.organizationId,\n      },\n    });\n  }\n\n  return conditions;\n}\n\n/**\n * Convert context input to Prisma JSON format for create/update operations.\n *\n * @param contextInput - The context input\n * @returns JSON value for the context field, or undefined if empty\n *\n * @example\n * ```typescript\n * const contextJson = toContextJson({\n *   workspaceId: '123',\n *   userId: '456'\n * });\n * // Use in Prisma create:\n * prisma.entity.create({\n *   data: { context: contextJson }\n * });\n * ```\n */\nexport function toContextJson(contextInput: OperationContext | null | undefined): InputJsonValue | undefined {\n  if (!contextInput) {\n    return undefined;\n  }\n\n  // Remove null values and build clean context object\n  const context: Record<string, InputJsonValue> = {};\n\n  if (contextInput.workspaceId != null) {\n    context['workspaceId'] = contextInput.workspaceId;\n  }\n  if (contextInput.userId != null) {\n    context['userId'] = contextInput.userId;\n  }\n  if (contextInput.projectId != null) {\n    context['projectId'] = contextInput.projectId;\n  }\n  if (contextInput.appId != null) {\n    context['appId'] = contextInput.appId;\n  }\n  if (contextInput.productId != null) {\n    context['productId'] = contextInput.productId;\n  }\n  if (contextInput.organizationId != null) {\n    context['organizationId'] = contextInput.organizationId;\n  }\n  if (contextInput.custom != null) {\n    context['custom'] = contextInput.custom as InputJsonValue;\n  }\n\n  // Return undefined if no fields set\n  if (Object.keys(context).length === 0) {\n    return undefined;\n  }\n\n  return context;\n}\n\n/**\n * Filter out null values from an object for Prisma compatibility\n */\nfunction filterNullValues(obj: Record<string, unknown>): Record<string, InputJsonValue> {\n  const filtered: Record<string, InputJsonValue> = {};\n  for (const [key, value] of Object.entries(obj)) {\n    if (value !== null) {\n      filtered[key] = value as InputJsonValue;\n    }\n  }\n  return filtered;\n}\n\n/**\n * Merge a single field into the merged context object\n */\nfunction mergeContextField(\n  merged: Record<string, InputJsonValue>,\n  fieldName: string,\n  fieldValue: string | Record<string, unknown> | null | undefined\n): void {\n  if (fieldValue === undefined) {\n    return; // Don't touch this field\n  }\n\n  if (fieldValue === null) {\n    delete merged[fieldName]; // Explicitly remove\n  } else {\n    merged[fieldName] = fieldValue as InputJsonValue; // Set new value\n  }\n}\n\n/**\n * Merge existing context with new context input.\n * New values override existing ones, but undefined values are preserved from existing.\n *\n * @param existingContext - The existing context JSON from database\n * @param newContext - The new context input\n * @returns Merged context as InputJsonValue (suitable for Prisma writes)\n *\n * @example\n * ```typescript\n * const merged = mergeContext(\n *   { workspaceId: '123', userId: 'old' },\n *   { userId: 'new', projectId: '456' }\n * );\n * // Result: { workspaceId: '123', userId: 'new', projectId: '456' }\n * ```\n */\nexport function mergeContext(\n  existingContext: JsonValue | null | undefined,\n  newContext: OperationContext | null | undefined\n): InputJsonValue | undefined {\n  // If no new context, return existing (excluding null values)\n  if (!newContext) {\n    if (!existingContext) {\n      return undefined;\n    }\n    // Filter out null values from existing context for Prisma compatibility\n    if (typeof existingContext === 'object' && !Array.isArray(existingContext)) {\n      const filtered = filterNullValues(existingContext);\n      return Object.keys(filtered).length > 0 ? filtered : undefined;\n    }\n    return existingContext as InputJsonValue;\n  }\n\n  // If no existing context, convert new to JSON\n  if (!existingContext || typeof existingContext !== 'object' || Array.isArray(existingContext)) {\n    return toContextJson(newContext);\n  }\n\n  // Merge existing with new\n  const merged = filterNullValues(existingContext);\n\n  // Merge each field from new context\n  mergeContextField(merged, 'workspaceId', newContext.workspaceId);\n  mergeContextField(merged, 'userId', newContext.userId);\n  mergeContextField(merged, 'projectId', newContext.projectId);\n  mergeContextField(merged, 'appId', newContext.appId);\n  mergeContextField(merged, 'productId', newContext.productId);\n  mergeContextField(merged, 'organizationId', newContext.organizationId);\n  mergeContextField(merged, 'custom', newContext.custom);\n\n  return Object.keys(merged).length > 0 ? merged : undefined;\n}\n\n/**\n * Parse context JSON from database to OperationContext interface.\n *\n * @param contextJson - The context JSON from database\n * @returns Parsed OperationContext or null\n *\n * @example\n * ```typescript\n * const context = parseContext(entity.context);\n * if (context?.workspaceId) {\n *   // Use workspace-specific logic\n * }\n * ```\n */\nexport function parseContext(contextJson: JsonValue | null | undefined): OperationContext | null {\n  if (!contextJson || typeof contextJson !== 'object' || Array.isArray(contextJson)) {\n    return null;\n  }\n\n  const ctx = contextJson as Record<string, unknown>;\n\n  return {\n    workspaceId: typeof ctx['workspaceId'] === 'string' ? ctx['workspaceId'] : null,\n    userId: typeof ctx['userId'] === 'string' ? ctx['userId'] : null,\n    projectId: typeof ctx['projectId'] === 'string' ? ctx['projectId'] : null,\n    appId: typeof ctx['appId'] === 'string' ? ctx['appId'] : null,\n    productId: typeof ctx['productId'] === 'string' ? ctx['productId'] : null,\n    organizationId: typeof ctx['organizationId'] === 'string' ? ctx['organizationId'] : null,\n    custom: typeof ctx['custom'] === 'object' ? (ctx['custom'] as Record<string, unknown>) : null,\n  };\n}\n\n/**\n * Check if context matches filter criteria\n *\n * @param context - The context to check\n * @param filter - The filter criteria\n * @returns True if context matches all filter criteria\n */\nexport function contextMatches(context: OperationContext | null | undefined, filter: ContextFilterInput): boolean {\n  if (!context) {\n    return false;\n  }\n\n  if (filter.workspaceId != null && context.workspaceId !== filter.workspaceId) {\n    return false;\n  }\n  if (filter.userId != null && context.userId !== filter.userId) {\n    return false;\n  }\n  if (filter.projectId != null && context.projectId !== filter.projectId) {\n    return false;\n  }\n  if (filter.appId != null && context.appId !== filter.appId) {\n    return false;\n  }\n  if (filter.productId != null && context.productId !== filter.productId) {\n    return false;\n  }\n  if (filter.organizationId != null && context.organizationId !== filter.organizationId) {\n    return false;\n  }\n\n  return true;\n}\n\n/**\n * Create a default context from SDK context\n *\n * @param sdkContext - The SDK context (from AsyncLocalStorage)\n * @returns Operation context with workspace and user info\n */\nexport function createContextFromSDK(sdkContext: {\n  workspaceId?: string;\n  userId?: string;\n  projectId?: string;\n  appId?: string;\n  productId?: string;\n  organizationId?: string;\n}): OperationContext {\n  return {\n    workspaceId: sdkContext.workspaceId ?? null,\n    userId: sdkContext.userId ?? null,\n    projectId: sdkContext.projectId ?? null,\n    appId: sdkContext.appId ?? null,\n    productId: sdkContext.productId ?? null,\n    organizationId: sdkContext.organizationId ?? null,\n  };\n}\n"]}

package/dist/feature-flags/index.d.ts

@@ -1,9 +1,9 @@
-export { E as EvaluationContext, F as FeatureFlagProvider, a as FeatureFlagProviderConfig, b as FlagEvaluation, c as FlagType, G as GatedOperationType, O as OperationsFlagGatePluginOptions, R as ResolutionDetails, d as createOperationsFlagGatePlugin } from '../index-ELt2ADCe.js';
-import '../types-BeDCdzH9.js';
+export { E as EvaluationContext, F as FeatureFlagProvider, a as FeatureFlagProviderConfig, b as FlagEvaluation, c as FlagType, G as GatedOperationType, O as OperationsFlagGatePluginOptions, R as ResolutionDetails, d as createOperationsFlagGatePlugin } from '../index-BTgCpWAg.js';
+import '../types-BuP_sFzk.js';
 import 'graphql';
 import 'graphql-yoga';
 import '../client-CCXpAZ2r.js';
 import '@prisma/adapter-pg';
 import 'pg';
-import '../workspace-extension-DxQw6N3b.js';
+import '../workspace-extension-DlxYz3P4.js';
 import '../types-C8TbSdEj.js';

package/dist/{index-ELt2ADCe.d.ts → index-BTgCpWAg.d.ts}

@@ -1,4 +1,4 @@
-import { Y as YogaPlugin } from './types-BeDCdzH9.js';
+import { Y as YogaPlugin } from './types-BuP_sFzk.js';
 
 type FlagType = 'BOOLEAN' | 'STRING' | 'NUMBER' | 'JSON';
 interface EvaluationContext {

package/dist/{index-m4sVVdZ6.d.ts → index-BeSFnglB.d.ts}

@@ -1,6 +1,6 @@
 import { P as PrismaClientBase, b as PrismaClientWrapper, c as PrismaClientConfig, a as PrismaClientConstructorOptions, D as DatabaseReturnType, d as DatabaseHealth, C as ConnectionState, e as PrismaEvent, f as PrismaLogDefinition, g as PrismaLogEvent, h as PrismaLogLevel, i as PrismaQueryEvent, j as PrismaTransactionOptions, k as configurePrismaLogging, l as createConnectionPool, m as createPrismaAdapter, n as createPrismaClient, o as ensureServiceApplicationName, p as installAcquireRetry, q as isTransientAcquireError } from './client-CCXpAZ2r.js';
 import { G as GraphEventEmitter } from './prisma-extension-krXnYnrN.js';
-import { W as WorkspaceExtensionConfig, a as WorkspaceContext, b as addWorkspaceExtension, g as getWorkspaceContext, i as injectWhereWorkspaceId, m as maybeSetRlsGuc, c as maybeTagConnection, r as runOperationWithRlsGuc, s as setWorkspaceContext, w as withWorkspaceContext, d as withWorkspaceContextSync } from './workspace-extension-DxQw6N3b.js';
+import { W as WorkspaceExtensionConfig, a as WorkspaceContext, b as addWorkspaceExtension, d as defaultWorkspaceExtensionConfig, g as getWorkspaceContext, i as injectCreateFields, c as injectWhereWorkspaceId, m as maybeSetRlsGuc, e as maybeTagConnection, r as runOperationWithRlsGuc, s as setWorkspaceContext, w as withWorkspaceContext, f as withWorkspaceContextSync } from './workspace-extension-DlxYz3P4.js';
 
 interface DatabaseClientConfig extends PrismaClientConfig {
     productName: string;
@@ -147,6 +147,7 @@ declare const index_createDatabaseClient: typeof createDatabaseClient;
 declare const index_createDatabaseClientFromEnv: typeof createDatabaseClientFromEnv;
 declare const index_createPrismaAdapter: typeof createPrismaAdapter;
 declare const index_createPrismaClient: typeof createPrismaClient;
+declare const index_defaultWorkspaceExtensionConfig: typeof defaultWorkspaceExtensionConfig;
 declare const index_ensureServiceApplicationName: typeof ensureServiceApplicationName;
 declare const index_extractFieldsFromModel: typeof extractFieldsFromModel;
 declare const index_getAllModelNames: typeof getAllModelNames;
@@ -160,6 +161,7 @@ declare const index_getWorkspaceContext: typeof getWorkspaceContext;
 declare const index_hasModel: typeof hasModel;
 declare const index_initializeDatabase: typeof initializeDatabase;
 declare const index_initializeDatabaseWithConfig: typeof initializeDatabaseWithConfig;
+declare const index_injectCreateFields: typeof injectCreateFields;
 declare const index_injectWhereWorkspaceId: typeof injectWhereWorkspaceId;
 declare const index_installAcquireRetry: typeof installAcquireRetry;
 declare const index_isDatabaseInitialized: typeof isDatabaseInitialized;
@@ -178,7 +180,7 @@ declare const index_toContextJson: typeof toContextJson;
 declare const index_withWorkspaceContext: typeof withWorkspaceContext;
 declare const index_withWorkspaceContextSync: typeof withWorkspaceContextSync;
 declare namespace index {
-  export { index_ConnectionState as ConnectionState, type index_ContextFilterInput as ContextFilterInput, type index_DatabaseClient as DatabaseClient, type index_DatabaseClientConfig as DatabaseClientConfig, index_DatabaseHealth as DatabaseHealth, index_DatabaseReturnType as DatabaseReturnType, type index_FieldExtractionOptions as FieldExtractionOptions, type index_FieldExtractionResult as FieldExtractionResult, type index_InputJsonValue as InputJsonValue, type index_JsonValue as JsonValue, type index_ModelFieldsMap as ModelFieldsMap, type index_OperationContext as OperationContext, type index_PoolTuningEnv as PoolTuningEnv, index_PrismaClientBase as PrismaClientBase, index_PrismaClientConfig as PrismaClientConfig, index_PrismaClientConstructorOptions as PrismaClientConstructorOptions, index_PrismaClientWrapper as PrismaClientWrapper, index_PrismaEvent as PrismaEvent, type index_PrismaJsonFilter as PrismaJsonFilter, index_PrismaLogDefinition as PrismaLogDefinition, index_PrismaLogEvent as PrismaLogEvent, index_PrismaLogLevel as PrismaLogLevel, index_PrismaQueryEvent as PrismaQueryEvent, index_PrismaTransactionOptions as PrismaTransactionOptions, index_WorkspaceContext as WorkspaceContext, index_WorkspaceExtensionConfig as WorkspaceExtensionConfig, index_addWorkspaceExtension as addWorkspaceExtension, index_buildContextWhereClause as buildContextWhereClause, index_buildContextWhereConditions as buildContextWhereConditions, index_checkDatabaseHealth as checkDatabaseHealth, index_configurePrismaLogging as configurePrismaLogging, index_contextMatches as contextMatches, index_createConnectionPool as createConnectionPool, index_createContextFromSDK as createContextFromSDK, index_createDatabaseClient as createDatabaseClient, index_createDatabaseClientFromEnv as createDatabaseClientFromEnv, index_createPrismaAdapter as createPrismaAdapter, index_createPrismaClient as createPrismaClient, index_ensureServiceApplicationName as ensureServiceApplicationName, index_extractFieldsFromModel as extractFieldsFromModel, index_getAllModelNames as getAllModelNames, index_getDatabaseManager as getDatabaseManager, index_getDatabaseProductName as getDatabaseProductName, index_getDatabaseStats as getDatabaseStats, index_getDatabaseVersion as getDatabaseVersion, index_getDb as getDb, index_getModelFields as getModelFields, index_getWorkspaceContext as getWorkspaceContext, index_hasModel as hasModel, index_initializeDatabase as initializeDatabase, index_initializeDatabaseWithConfig as initializeDatabaseWithConfig, index_injectWhereWorkspaceId as injectWhereWorkspaceId, index_installAcquireRetry as installAcquireRetry, index_isDatabaseInitialized as isDatabaseInitialized, index_isTransientAcquireError as isTransientAcquireError, index_loadGeneratedFields as loadGeneratedFields, index_maybeSetRlsGuc as maybeSetRlsGuc, index_maybeTagConnection as maybeTagConnection, index_mergeContext as mergeContext, index_parseContext as parseContext, index_resetDatabaseManager as resetDatabaseManager, index_resolvePoolTuningFromEnv as resolvePoolTuningFromEnv, index_runOperationWithRlsGuc as runOperationWithRlsGuc, index_setWorkspaceContext as setWorkspaceContext, index_testConnection as testConnection, index_toContextJson as toContextJson, index_withWorkspaceContext as withWorkspaceContext, index_withWorkspaceContextSync as withWorkspaceContextSync };
+  export { index_ConnectionState as ConnectionState, type index_ContextFilterInput as ContextFilterInput, type index_DatabaseClient as DatabaseClient, type index_DatabaseClientConfig as DatabaseClientConfig, index_DatabaseHealth as DatabaseHealth, index_DatabaseReturnType as DatabaseReturnType, type index_FieldExtractionOptions as FieldExtractionOptions, type index_FieldExtractionResult as FieldExtractionResult, type index_InputJsonValue as InputJsonValue, type index_JsonValue as JsonValue, type index_ModelFieldsMap as ModelFieldsMap, type index_OperationContext as OperationContext, type index_PoolTuningEnv as PoolTuningEnv, index_PrismaClientBase as PrismaClientBase, index_PrismaClientConfig as PrismaClientConfig, index_PrismaClientConstructorOptions as PrismaClientConstructorOptions, index_PrismaClientWrapper as PrismaClientWrapper, index_PrismaEvent as PrismaEvent, type index_PrismaJsonFilter as PrismaJsonFilter, index_PrismaLogDefinition as PrismaLogDefinition, index_PrismaLogEvent as PrismaLogEvent, index_PrismaLogLevel as PrismaLogLevel, index_PrismaQueryEvent as PrismaQueryEvent, index_PrismaTransactionOptions as PrismaTransactionOptions, index_WorkspaceContext as WorkspaceContext, index_WorkspaceExtensionConfig as WorkspaceExtensionConfig, index_addWorkspaceExtension as addWorkspaceExtension, index_buildContextWhereClause as buildContextWhereClause, index_buildContextWhereConditions as buildContextWhereConditions, index_checkDatabaseHealth as checkDatabaseHealth, index_configurePrismaLogging as configurePrismaLogging, index_contextMatches as contextMatches, index_createConnectionPool as createConnectionPool, index_createContextFromSDK as createContextFromSDK, index_createDatabaseClient as createDatabaseClient, index_createDatabaseClientFromEnv as createDatabaseClientFromEnv, index_createPrismaAdapter as createPrismaAdapter, index_createPrismaClient as createPrismaClient, index_defaultWorkspaceExtensionConfig as defaultWorkspaceExtensionConfig, index_ensureServiceApplicationName as ensureServiceApplicationName, index_extractFieldsFromModel as extractFieldsFromModel, index_getAllModelNames as getAllModelNames, index_getDatabaseManager as getDatabaseManager, index_getDatabaseProductName as getDatabaseProductName, index_getDatabaseStats as getDatabaseStats, index_getDatabaseVersion as getDatabaseVersion, index_getDb as getDb, index_getModelFields as getModelFields, index_getWorkspaceContext as getWorkspaceContext, index_hasModel as hasModel, index_initializeDatabase as initializeDatabase, index_initializeDatabaseWithConfig as initializeDatabaseWithConfig, index_injectCreateFields as injectCreateFields, index_injectWhereWorkspaceId as injectWhereWorkspaceId, index_installAcquireRetry as installAcquireRetry, index_isDatabaseInitialized as isDatabaseInitialized, index_isTransientAcquireError as isTransientAcquireError, index_loadGeneratedFields as loadGeneratedFields, index_maybeSetRlsGuc as maybeSetRlsGuc, index_maybeTagConnection as maybeTagConnection, index_mergeContext as mergeContext, index_parseContext as parseContext, index_resetDatabaseManager as resetDatabaseManager, index_resolvePoolTuningFromEnv as resolvePoolTuningFromEnv, index_runOperationWithRlsGuc as runOperationWithRlsGuc, index_setWorkspaceContext as setWorkspaceContext, index_testConnection as testConnection, index_toContextJson as toContextJson, index_withWorkspaceContext as withWorkspaceContext, index_withWorkspaceContextSync as withWorkspaceContextSync };
 }
 
 export { resetDatabaseManager as A, resolvePoolTuningFromEnv as B, type ContextFilterInput as C, type DatabaseClient as D, testConnection as E, type FieldExtractionOptions as F, toContextJson as G, type InputJsonValue as I, type JsonValue as J, type ModelFieldsMap as M, type OperationContext as O, type PoolTuningEnv as P, type DatabaseClientConfig as a, type FieldExtractionResult as b, type PrismaJsonFilter as c, buildContextWhereClause as d, buildContextWhereConditions as e, checkDatabaseHealth as f, contextMatches as g, createContextFromSDK as h, index as i, createDatabaseClient as j, createDatabaseClientFromEnv as k, extractFieldsFromModel as l, getAllModelNames as m, getDatabaseManager as n, getDatabaseProductName as o, getDatabaseStats as p, getDatabaseVersion as q, getDb as r, getModelFields as s, hasModel as t, initializeDatabase as u, initializeDatabaseWithConfig as v, isDatabaseInitialized as w, loadGeneratedFields as x, mergeContext as y, parseContext as z };

package/dist/index.d.ts

@@ -24,7 +24,7 @@ export { i as Cache } from './index-N8DMWKzw.js';
 export { i as Middleware } from './index-DSOpj8DI.js';
 export { i as Observability } from './index-4gKQKZ2B.js';
 export { i as GraphQL } from './index-joONjwLt.js';
-export { i as Prisma } from './index-m4sVVdZ6.js';
+export { i as Prisma } from './index-BeSFnglB.js';
 export { i as Utils } from './index-PaojfSdd.js';
 export { i as I18n, I as I18nCapableContext, T as Translator, c as createTranslator, g as getLanguage, a as getLocale, h as hasI18n, t } from './index-D4l1u8VR.js';
 export { i as Export } from './index-B4ciT3OZ.js';
@@ -34,18 +34,18 @@ export { a as Instrumentation } from './index-CXPvdXhS.js';
 export { i as Layer } from './index-BCUkR8sC.js';
 export { i as Crypto } from './index-e_18DzAg.js';
 export { i as Gateway } from './index-Dy6neH2G.js';
-export { i as FeatureFlags } from './index-ELt2ADCe.js';
+export { i as FeatureFlags } from './index-BTgCpWAg.js';
 export { i as Captcha, R as RecaptchaVerifyOptions, a as RecaptchaVerifyResult, b as isCaptchaEnabled, v as verifyCaptcha, c as verifyCaptchaIfEnabled } from './index-B70b5mYS.js';
 export { i as Platform } from './index-PJZzGd8r.js';
 export { C as CircuitBreakerConfig, h as DEFAULT_CIRCUIT_BREAKER_CONFIG, i as DEFAULT_GATEWAY_RETRY_CONFIG, D as DEFAULT_GATEWAY_ROUTING, b as DEFAULT_LAYER_RESOURCES, c as DEFAULT_LAYER_STREAMS, f as GatewayRequestHeaders, g as GatewayRetryConfig, G as GatewayRoutingConfig, L as LayerConfig, a as LayerFullConfig, d as LayerGatewayConfig, e as LayerResourceUrls, S as ServiceLayer } from './layer-GNAVXBMf.js';
 export { S as ShutdownDisposable, d as disposeAll, g as getRegisteredDisposableCount, r as registerDisposable, u as unregisterDisposable } from './shutdown-registry-CW9LryO8.js';
-import './types-BeDCdzH9.js';
+import './types-BuP_sFzk.js';
 import 'graphql';
 import 'graphql-yoga';
 import './client-CCXpAZ2r.js';
 import '@prisma/adapter-pg';
 import 'pg';
-import './workspace-extension-DxQw6N3b.js';
+import './workspace-extension-DlxYz3P4.js';
 import './types-C8TbSdEj.js';
 import 'graphql-request';
 import '@envelop/core';

package/dist/index.js

@@ -2,10 +2,10 @@ export { TemporalClient, TemporalClientFactory, TemporalModule, TemporalWorker,
 import { ActivityModule, UsageModule, TrackerModule } from './chunk-VOJROV6C.js';
 export { ActivityModule, TrackerModule, UsageModule } from './chunk-VOJROV6C.js';
 export { platform_exports as Platform } from './chunk-WCJIZR5Q.js';
-export { prisma_exports as Prisma } from './chunk-RIH3XRBX.js';
+export { prisma_exports as Prisma } from './chunk-MX4AHK3E.js';
 import { RBACModule } from './chunk-S32JOMMW.js';
 export { RBACModule, createRBACDirective, createRBACDirectiveForLayer, createRBACDirectiveFromEnv } from './chunk-S32JOMMW.js';
-import './chunk-EJPRCENB.js';
+import './chunk-KESVEZB2.js';
 export { sharing_exports as Sharing } from './chunk-XD5ZK727.js';
 export { instrumentation_exports as Instrumentation } from './chunk-ACYGOENW.js';
 import './chunk-REF7PANB.js';

package/dist/prisma/index.d.ts

@@ -1,6 +1,6 @@
-export { C as ContextFilterInput, D as DatabaseClient, a as DatabaseClientConfig, F as FieldExtractionOptions, b as FieldExtractionResult, I as InputJsonValue, J as JsonValue, M as ModelFieldsMap, O as OperationContext, P as PoolTuningEnv, c as PrismaJsonFilter, d as buildContextWhereClause, e as buildContextWhereConditions, f as checkDatabaseHealth, g as contextMatches, h as createContextFromSDK, j as createDatabaseClient, k as createDatabaseClientFromEnv, l as extractFieldsFromModel, m as getAllModelNames, n as getDatabaseManager, o as getDatabaseProductName, p as getDatabaseStats, q as getDatabaseVersion, r as getDb, s as getModelFields, t as hasModel, u as initializeDatabase, v as initializeDatabaseWithConfig, w as isDatabaseInitialized, x as loadGeneratedFields, y as mergeContext, z as parseContext, A as resetDatabaseManager, B as resolvePoolTuningFromEnv, E as testConnection, G as toContextJson } from '../index-m4sVVdZ6.js';
+export { C as ContextFilterInput, D as DatabaseClient, a as DatabaseClientConfig, F as FieldExtractionOptions, b as FieldExtractionResult, I as InputJsonValue, J as JsonValue, M as ModelFieldsMap, O as OperationContext, P as PoolTuningEnv, c as PrismaJsonFilter, d as buildContextWhereClause, e as buildContextWhereConditions, f as checkDatabaseHealth, g as contextMatches, h as createContextFromSDK, j as createDatabaseClient, k as createDatabaseClientFromEnv, l as extractFieldsFromModel, m as getAllModelNames, n as getDatabaseManager, o as getDatabaseProductName, p as getDatabaseStats, q as getDatabaseVersion, r as getDb, s as getModelFields, t as hasModel, u as initializeDatabase, v as initializeDatabaseWithConfig, w as isDatabaseInitialized, x as loadGeneratedFields, y as mergeContext, z as parseContext, A as resetDatabaseManager, B as resolvePoolTuningFromEnv, E as testConnection, G as toContextJson } from '../index-BeSFnglB.js';
 export { C as ConnectionState, d as DatabaseHealth, D as DatabaseReturnType, P as PrismaClientBase, c as PrismaClientConfig, a as PrismaClientConstructorOptions, b as PrismaClientWrapper, e as PrismaEvent, f as PrismaLogDefinition, g as PrismaLogEvent, h as PrismaLogLevel, i as PrismaQueryEvent, j as PrismaTransactionOptions, k as configurePrismaLogging, l as createConnectionPool, m as createPrismaAdapter, n as createPrismaClient, o as ensureServiceApplicationName, p as installAcquireRetry, q as isTransientAcquireError } from '../client-CCXpAZ2r.js';
-export { a as WorkspaceContext, W as WorkspaceExtensionConfig, b as addWorkspaceExtension, g as getWorkspaceContext, i as injectWhereWorkspaceId, m as maybeSetRlsGuc, c as maybeTagConnection, r as runOperationWithRlsGuc, s as setWorkspaceContext, w as withWorkspaceContext, d as withWorkspaceContextSync } from '../workspace-extension-DxQw6N3b.js';
+export { a as WorkspaceContext, W as WorkspaceExtensionConfig, b as addWorkspaceExtension, d as defaultWorkspaceExtensionConfig, g as getWorkspaceContext, i as injectCreateFields, c as injectWhereWorkspaceId, m as maybeSetRlsGuc, e as maybeTagConnection, r as runOperationWithRlsGuc, s as setWorkspaceContext, w as withWorkspaceContext, f as withWorkspaceContextSync } from '../workspace-extension-DlxYz3P4.js';
 import '../prisma-extension-krXnYnrN.js';
 import '@prisma/adapter-pg';
 import 'pg';

package/dist/prisma/index.js

@@ -1,5 +1,5 @@
-export { buildContextWhereClause, buildContextWhereConditions, checkDatabaseHealth, contextMatches, createContextFromSDK, createDatabaseClient, createDatabaseClientFromEnv, extractFieldsFromModel, getAllModelNames, getDatabaseManager, getDatabaseProductName, getDatabaseStats, getDatabaseVersion, getDb, getModelFields, hasModel, initializeDatabase, initializeDatabaseWithConfig, isDatabaseInitialized, loadGeneratedFields, mergeContext, parseContext, resetDatabaseManager, resolvePoolTuningFromEnv, testConnection, toContextJson } from '../chunk-RIH3XRBX.js';
-export { addWorkspaceExtension, getWorkspaceContext, injectWhereWorkspaceId, maybeSetRlsGuc, maybeTagConnection, runOperationWithRlsGuc, setWorkspaceContext, withWorkspaceContext, withWorkspaceContextSync } from '../chunk-EJPRCENB.js';
+export { buildContextWhereClause, buildContextWhereConditions, checkDatabaseHealth, contextMatches, createContextFromSDK, createDatabaseClient, createDatabaseClientFromEnv, extractFieldsFromModel, getAllModelNames, getDatabaseManager, getDatabaseProductName, getDatabaseStats, getDatabaseVersion, getDb, getModelFields, hasModel, initializeDatabase, initializeDatabaseWithConfig, isDatabaseInitialized, loadGeneratedFields, mergeContext, parseContext, resetDatabaseManager, resolvePoolTuningFromEnv, testConnection, toContextJson } from '../chunk-MX4AHK3E.js';
+export { addWorkspaceExtension, defaultWorkspaceExtensionConfig, getWorkspaceContext, injectCreateFields, injectWhereWorkspaceId, maybeSetRlsGuc, maybeTagConnection, runOperationWithRlsGuc, setWorkspaceContext, withWorkspaceContext, withWorkspaceContextSync } from '../chunk-KESVEZB2.js';
 export { PrismaClientWrapper, configurePrismaLogging, createConnectionPool, createPrismaAdapter, createPrismaClient, ensureServiceApplicationName, installAcquireRetry, isTransientAcquireError } from '../chunk-OCYZEBOL.js';
 import '../chunk-URDYOM2L.js';
 import '../chunk-JNJSSBKO.js';

package/dist/server/index.d.ts

@@ -1,5 +1,5 @@
-import { W as WorkspaceSecret, I as IActor, J as JWTPayload, S as ServerDefinition, a as ServerInstance, b as ITenant, G as GraphQLContext, Y as YogaPlugin } from '../types-BeDCdzH9.js';
-export { C as ConsentContext, E as ElysiaApp, c as IContextFilterInput, d as IOperationContext, e as IOrganization, f as IProduct, g as IProject, h as ITracking, i as IWorkspace, M as ModuleGraphConfig, P as PrismaClientConstructor, R as RESTEndpoint, j as ServerConfig, k as ServerI18nConfig, l as ServerInfo, m as WspaceGraphQLContext } from '../types-BeDCdzH9.js';
+import { W as WorkspaceSecret, I as IActor, J as JWTPayload, S as ServerDefinition, a as ServerInstance, b as ITenant, G as GraphQLContext, Y as YogaPlugin } from '../types-BuP_sFzk.js';
+export { C as ConsentContext, E as ElysiaApp, c as IContextFilterInput, d as IOperationContext, e as IOrganization, f as IProduct, g as IProject, h as ITracking, i as IWorkspace, M as ModuleGraphConfig, P as PrismaClientConstructor, R as RESTEndpoint, j as ServerConfig, k as ServerI18nConfig, l as ServerInfo, m as WspaceGraphQLContext } from '../types-BuP_sFzk.js';
 import * as jose from 'jose';
 import { VerifyOptions } from 'jsonwebtoken';
 import { I as I18n } from '../i18n-DrdPTann.js';
@@ -7,7 +7,7 @@ import { GraphQLError } from 'graphql';
 export { I as I18nContext, L as LocaleCode } from '../types-C8TbSdEj.js';
 export { P as PrismaClientBase } from '../client-CCXpAZ2r.js';
 import 'graphql-yoga';
-import '../workspace-extension-DxQw6N3b.js';
+import '../workspace-extension-DlxYz3P4.js';
 import '@prisma/adapter-pg';
 import 'pg';
 

package/dist/server/index.js

@@ -1,7 +1,7 @@
 import { createHumanReadableErrorPlugin, formatHttpError, normalizeGraphQLResponse, createHttpErrorResponse } from '../chunk-OQLDXOZ3.js';
 export { UserFacingGraphQLError, createHttpErrorResponse, createHumanReadableErrorPlugin, createWorkspaceGuardPlugin, formatHttpError, normalizeError, normalizeExecutionResultErrors, normalizeGraphQLResponse, normalizeGraphQLResponsePayload, toUserFacingGraphQLError } from '../chunk-OQLDXOZ3.js';
 import { getWorkspaceQuotaRegistry } from '../chunk-32KT5RF2.js';
-import { setWorkspaceContext } from '../chunk-EJPRCENB.js';
+import { setWorkspaceContext } from '../chunk-KESVEZB2.js';
 import { getMetricsRegistry } from '../chunk-REF7PANB.js';
 import { I18n } from '../chunk-ULFFX3YE.js';
 import { ContextManager } from '../chunk-RZOFS2BQ.js';

package/dist/{types-BeDCdzH9.d.ts → types-BuP_sFzk.d.ts}

@@ -1,7 +1,7 @@
 import { GraphQLSchema } from 'graphql';
 import { PubSub } from 'graphql-yoga';
 import { P as PrismaClientBase, a as PrismaClientConstructorOptions } from './client-CCXpAZ2r.js';
-import { W as WorkspaceExtensionConfig } from './workspace-extension-DxQw6N3b.js';
+import { W as WorkspaceExtensionConfig } from './workspace-extension-DlxYz3P4.js';
 import { I as I18nContext, L as LocaleCode } from './types-C8TbSdEj.js';
 
 interface IActor {

package/dist/{workspace-extension-DxQw6N3b.d.ts → workspace-extension-DlxYz3P4.d.ts}

@@ -21,6 +21,7 @@ interface WorkspaceExtensionConfig {
     populateCreatedBy?: boolean;
     populateUpdatedBy?: boolean;
     populateTenantId?: boolean;
+    populateOnBehalfOf?: boolean;
     excludeModels?: string[];
     excludeModelsFromReadIsolation?: string[];
     strictMode?: boolean;
@@ -29,6 +30,8 @@ interface WorkspaceExtensionConfig {
     enableApplicationNameTagging?: boolean;
     enableRlsGucTagging?: boolean;
 }
+declare const defaultWorkspaceExtensionConfig: Required<WorkspaceExtensionConfig>;
+declare function injectCreateFields(data: Record<string, unknown>, wsCtx: WorkspaceContext, config: Required<WorkspaceExtensionConfig>): Record<string, unknown>;
 declare function injectWhereWorkspaceId(where: Record<string, unknown> | undefined, wsCtx?: WorkspaceContext): Record<string, unknown> | undefined;
 type RawPrismaForTagging = {
     $executeRawUnsafe: (query: string, ...values: unknown[]) => Promise<number>;
@@ -45,4 +48,4 @@ type RawPrismaForRlsTransaction = {
 declare function runOperationWithRlsGuc<TResult>(rootClient: RawPrismaForRlsTransaction, wsCtx: WorkspaceContext, model: string, operation: string, args: unknown): Promise<TResult>;
 declare function addWorkspaceExtension<T>(baseClient: T, config?: WorkspaceExtensionConfig): T;
 
-export { type WorkspaceExtensionConfig as W, type WorkspaceContext as a, addWorkspaceExtension as b, maybeTagConnection as c, withWorkspaceContextSync as d, getWorkspaceContext as g, injectWhereWorkspaceId as i, maybeSetRlsGuc as m, runOperationWithRlsGuc as r, setWorkspaceContext as s, withWorkspaceContext as w };
+export { type WorkspaceExtensionConfig as W, type WorkspaceContext as a, addWorkspaceExtension as b, injectWhereWorkspaceId as c, defaultWorkspaceExtensionConfig as d, maybeTagConnection as e, withWorkspaceContextSync as f, getWorkspaceContext as g, injectCreateFields as i, maybeSetRlsGuc as m, runOperationWithRlsGuc as r, setWorkspaceContext as s, withWorkspaceContext as w };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@burdenoff/be-sdk",
-  "version": "2026.725.1",
+  "version": "2026.731.1",
   "description": "Backend SDK for Burdenoff products providing unified access to notifications, RBAC, activity tracking, usage monitoring, and more",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
@@ -74,7 +74,7 @@
     "dev": "tsx watch ./src/index.ts",
     "build": "NODE_OPTIONS=--max-old-space-size=4096 tsup src/index.ts src/init/index.ts src/logger/index.ts src/cache/index.ts src/database/index.ts src/event-queue/index.ts src/lifecycle/index.ts src/graph/index.ts src/middleware/index.ts src/observability/index.ts src/graphql/index.ts src/graphql/services/index.ts src/prisma/index.ts src/utils/index.ts src/notifications/index.ts src/tracker/index.ts src/export/index.ts src/dataloader/index.ts src/prisma/generator/index.ts src/server/index.ts src/i18n/index.ts src/instrumentation/index.ts src/rbac/index.ts src/temporal/index.ts src/client/internal-client.ts src/layer/index.ts src/gateway/index.ts src/gateway/security/index.ts src/crypto/index.ts src/feature-flags/index.ts src/telemetry/index.ts src/auth/index.ts src/captcha/index.ts src/metrics/index.ts src/platform/index.ts src/resource-caps/index.ts src/sharding/index.ts src/sharing/index.ts --format esm --dts --clean --shims && bun run pack:tgz",
     "build:watch": "tsup src/index.ts src/init/index.ts src/logger/index.ts src/cache/index.ts src/database/index.ts src/event-queue/index.ts src/lifecycle/index.ts src/graph/index.ts src/middleware/index.ts src/observability/index.ts src/graphql/index.ts src/graphql/services/index.ts src/prisma/index.ts src/utils/index.ts src/notifications/index.ts src/tracker/index.ts src/export/index.ts src/dataloader/index.ts src/prisma/generator/index.ts src/server/index.ts src/i18n/index.ts src/instrumentation/index.ts src/rbac/index.ts src/temporal/index.ts src/client/internal-client.ts src/layer/index.ts src/gateway/index.ts src/gateway/security/index.ts src/crypto/index.ts src/feature-flags/index.ts src/telemetry/index.ts src/auth/index.ts src/captcha/index.ts src/metrics/index.ts src/platform/index.ts src/resource-caps/index.ts src/sharding/index.ts src/sharing/index.ts --format esm --dts --watch --shims",
-    "typecheck": "tsc --noEmit",
+    "typecheck": "bash scripts/build-limits.sh tsc --noEmit",
     "lint": "eslint ./src",
     "lint:sanity": "if [ \"${CI:-}\" = \"true\" ]; then bun run lint; else bun run lint -- --cache --cache-location .eslintcache; fi",
     "lint:fix": "eslint ./src --fix",
@@ -85,7 +85,7 @@
     "test:coverage": "bun test --coverage",
     "test:ci": "if ls src/**/*.test.ts 1>/dev/null 2>&1; then bun test; else echo 'No test files found, skipping'; fi",
     "audit": "bunx better-npm-audit audit --level moderate 2>/dev/null || echo 'Audit completed (install better-npm-audit for detailed report)'",
-    "sanity": "bun run format:check && bun run lint:sanity && bun run typecheck && bun run build && bun run test:ci && bun run audit",
+    "sanity": "bash scripts/build-limits.sh --gate bash -c 'bun run format:check && bun run lint:sanity && bun run typecheck && bun run build && bun run test:ci && bun run audit'",
     "prepublishOnly": "bun run build",
     "pack:tgz": "mkdir -p dist && rm -rf dist/burdenoff-be-sdk.tgz && bun pm pack --filename dist/burdenoff-be-sdk.tgz"
   },

package/dist/chunk-EJPRCENB.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/prisma/workspace-extension.ts"],"names":["workspaceContextStore","AsyncLocalStorage","fallbackContext","setWorkspaceContext","context","enterWith","getWorkspaceContext","getStore","withWorkspaceContext","fn","run","withWorkspaceContextSync","defaultConfig","enabled","enableReadIsolation","enableDeleteIsolation","enableUpdateWhereIsolation","populateContextJson","populateCreatedBy","populateUpdatedBy","populateTenantId","excludeModels","excludeModelsFromReadIsolation","strictMode","allowedUnguardedOperations","debug","enableApplicationNameTagging","enableRlsGucTagging","hasField","data","field","injectCreateFields","wsCtx","config","injected","workspaceId","tenantId","actorId","onBehalfOf","contextJson","buildContextJsonFromWorkspaceContext","injectUpdateFields","injectWhereClause","where","organizationId","projectId","appId","Object","keys","length","undefined","injectWhereWorkspaceId","ctx","stripSkipFlag","args","cleaned","isExcludedFromReadIsolation","model","includes","enforceStrictMode","operation","opKey","Error","taggedContexts","WeakSet","maybeTagConnection","rawPrisma","has","add","safeSvc","process","env","replace","safeWs","tag","$executeRawUnsafe","delete","rlsTaggedContexts","maybeSetRlsGuc","modelToClientProperty","charAt","toLowerCase","slice","runOperationWithRlsGuc","rootClient","clientProperty","$transaction","tx","delegate","method","addWorkspaceExtension","baseClient","fullConfig","logger","info","rawPrismaForTransactions","prismaClient","$extends","query","$allModels","create","_skipWorkspaceInjection","injectedData","injectedKeys","filter","k","join","finalArgs","createMany","dataArray","Array","isArray","map","item","createManyAndReturn","update","injectedWhere","injectedDataKeys","whereChanged","updateMany","upsert","injectedCreate","injectedUpdate","findMany","findFirst","findFirstOrThrow","findUnique","findUniqueOrThrow","count","aggregate","groupBy","deleteMany"],"mappings":";;;;AA6EA,IAAMA,qBAAAA,GAAwB,IAAIC,iBAAAA,EAAAA;AAUlC,IAAIC,eAAAA;AA6BG,SAASC,oBAAoBC,OAAAA,EAAyB;AAC3DJ,EAAAA,qBAAAA,CAAsBK,UAAUD,OAAAA,CAAAA;AAChCF,EAAAA,eAAAA,GAAkBE,OAAAA;AACpB;AAHgBD,MAAAA,CAAAA,mBAAAA,EAAAA,qBAAAA,CAAAA;AAaT,SAASG,mBAAAA,GAAAA;AACd,EAAA,OAAON,qBAAAA,CAAsBO,UAAQ,IAAML,eAAAA;AAC7C;AAFgBI,MAAAA,CAAAA,mBAAAA,EAAAA,qBAAAA,CAAAA;AAuBhB,eAAsBE,oBAAAA,CAAwBJ,SAA2BK,EAAAA,EAAoB;AAC3F,EAAA,OAAOT,qBAAAA,CAAsBU,GAAAA,CAAIN,OAAAA,EAASK,EAAAA,CAAAA;AAC5C;AAFsBD,MAAAA,CAAAA,oBAAAA,EAAAA,sBAAAA,CAAAA;AAOf,SAASG,wBAAAA,CAA4BP,SAA2BK,EAAAA,EAAW;AAChF,EAAA,OAAOT,qBAAAA,CAAsBU,GAAAA,CAAIN,OAAAA,EAASK,EAAAA,CAAAA;AAC5C;AAFgBE,MAAAA,CAAAA,wBAAAA,EAAAA,0BAAAA,CAAAA;AAoLhB,IAAMC,aAAAA,GAAoD;EACxDC,OAAAA,EAAS,IAAA;EACTC,mBAAAA,EAAqB,IAAA;EACrBC,qBAAAA,EAAuB,IAAA;EACvBC,0BAAAA,EAA4B,IAAA;EAC5BC,mBAAAA,EAAqB,IAAA;EACrBC,iBAAAA,EAAmB,IAAA;EACnBC,iBAAAA,EAAmB,IAAA;EACnBC,gBAAAA,EAAkB,KAAA;AAClBC,EAAAA,aAAAA,EAAe,EAAA;AACfC,EAAAA,8BAAAA,EAAgC,EAAA;EAChCC,UAAAA,EAAY,IAAA;AACZC,EAAAA,0BAAAA,EAA4B,EAAA;EAC5BC,KAAAA,EAAO,KAAA;EACPC,4BAAAA,EAA8B,KAAA;EAC9BC,mBAAAA,EAAqB;AACvB,CAAA;AASA,SAASC,QAAAA,CAASC,MAA+BC,KAAAA,EAAa;AAC5D,EAAA,OAAOA,KAAAA,IAASD,IAAAA;AAClB;AAFSD,MAAAA,CAAAA,QAAAA,EAAAA,UAAAA,CAAAA;AAOT,SAASG,kBAAAA,CACPF,IAAAA,EACAG,KAAAA,EACAC,MAAAA,EAA0C;AAE1C,EAAA,MAAMC,QAAAA,GAAW;IAAE,GAAGL;AAAK,GAAA;AAG3B,EAAA,IAAIG,MAAMG,WAAAA,IAAe,CAACP,QAAAA,CAASM,QAAAA,EAAU,aAAA,CAAA,EAAgB;AAC3DA,IAAAA,QAAAA,CAAS,aAAA,IAAiBF,KAAAA,CAAMG,WAAAA;AAClC,EAAA;AAGA,EAAA,IAAIF,MAAAA,CAAOb,oBAAoBY,KAAAA,CAAMI,QAAAA,IAAY,CAACR,QAAAA,CAASM,QAAAA,EAAU,UAAA,CAAA,EAAa;AAChFA,IAAAA,QAAAA,CAAS,UAAA,IAAcF,KAAAA,CAAMI,QAAAA;AAC/B,EAAA;AAGA,EAAA,IAAIH,MAAAA,CAAOf,qBAAqBc,KAAAA,CAAMK,OAAAA,IAAW,CAACT,QAAAA,CAASM,QAAAA,EAAU,WAAA,CAAA,EAAc;AACjFA,IAAAA,QAAAA,CAAS,WAAA,IAAeF,KAAAA,CAAMK,OAAAA;AAChC,EAAA;AAGA,EAAA,IAAIJ,MAAAA,CAAOd,qBAAqBa,KAAAA,CAAMK,OAAAA,IAAW,CAACT,QAAAA,CAASM,QAAAA,EAAU,WAAA,CAAA,EAAc;AACjFA,IAAAA,QAAAA,CAAS,WAAA,IAAeF,KAAAA,CAAMK,OAAAA;AAChC,EAAA;AAIA,EAAA,IAAIL,MAAMM,UAAAA,IAAc,CAACV,QAAAA,CAASM,QAAAA,EAAU,YAAA,CAAA,EAAe;AACzDA,IAAAA,QAAAA,CAAS,YAAA,IAAgBF,KAAAA,CAAMM,UAAAA;AACjC,EAAA,CAAA,MAAA,IAAWN,MAAMK,OAAAA,IAAW,CAACT,QAAAA,CAASM,QAAAA,EAAU,YAAA,CAAA,EAAe;AAE7DA,IAAAA,QAAAA,CAAS,YAAA,IAAgBF,KAAAA,CAAMK,OAAAA;AACjC,EAAA;AAGA,EAAA,IAAIJ,OAAOhB,mBAAAA,IAAuB,CAACW,QAAAA,CAASM,QAAAA,EAAU,SAAA,CAAA,EAAY;AAChE,IAAA,MAAMK,WAAAA,GAAcC,qCAAqCR,KAAAA,CAAAA;AACzD,IAAA,IAAIO,WAAAA,EAAa;AACfL,MAAAA,QAAAA,CAAS,SAAA,CAAA,GAAaK,WAAAA;AACxB,IAAA;AACF,EAAA;AAEA,EAAA,OAAOL,QAAAA;AACT;AA7CSH,MAAAA,CAAAA,kBAAAA,EAAAA,oBAAAA,CAAAA;AAkDT,SAASU,kBAAAA,CACPZ,IAAAA,EACAG,KAAAA,EACAC,MAAAA,EAA0C;AAE1C,EAAA,MAAMC,QAAAA,GAAW;IAAE,GAAGL;AAAK,GAAA;AAG3B,EAAA,IAAII,MAAAA,CAAOd,qBAAqBa,KAAAA,CAAMK,OAAAA,IAAW,CAACT,QAAAA,CAASM,QAAAA,EAAU,WAAA,CAAA,EAAc;AACjFA,IAAAA,QAAAA,CAAS,WAAA,IAAeF,KAAAA,CAAMK,OAAAA;AAChC,EAAA;AAMA,EAAA,OAAOH,QAAAA;AACT;AAjBSO,MAAAA,CAAAA,kBAAAA,EAAAA,oBAAAA,CAAAA;AA0BT,SAASC,iBAAAA,CACPC,OACAX,KAAAA,EAAuB;AAEvB,EAAA,IAAI,CAACA,KAAAA,CAAMG,WAAAA,EAAa,OAAOQ,KAAAA;AAE/B,EAAA,IAAI,CAACA,KAAAA,EAAO;AAEV,IAAA,OAAO;AAAER,MAAAA,WAAAA,EAAaH,KAAAA,CAAMG;AAAY,KAAA;AAC1C,EAAA;AAGA,EAAA,IAAI,CAACP,QAAAA,CAASe,KAAAA,EAAO,aAAA,CAAA,EAAgB;AACnC,IAAA,OAAO;MAAE,GAAGA,KAAAA;AAAOR,MAAAA,WAAAA,EAAaH,KAAAA,CAAMG;AAAY,KAAA;AACpD,EAAA;AAEA,EAAA,OAAOQ,KAAAA;AACT;AAjBSD,MAAAA,CAAAA,iBAAAA,EAAAA,mBAAAA,CAAAA;AAsBT,SAASF,qCAAqCR,KAAAA,EAAuB;AACnE,EAAA,MAAM5B,UAAkC,EAAC;AAEzC,EAAA,IAAI4B,KAAAA,CAAMG,WAAAA,EAAa/B,OAAAA,CAAQ,aAAA,IAAiB4B,KAAAA,CAAMG,WAAAA;AACtD,EAAA,IAAIH,KAAAA,CAAMK,OAAAA,EAASjC,OAAAA,CAAQ,QAAA,IAAY4B,KAAAA,CAAMK,OAAAA;AAC7C,EAAA,IAAIL,KAAAA,CAAMY,cAAAA,EAAgBxC,OAAAA,CAAQ,gBAAA,IAAoB4B,KAAAA,CAAMY,cAAAA;AAC5D,EAAA,IAAIZ,KAAAA,CAAMa,SAAAA,EAAWzC,OAAAA,CAAQ,WAAA,IAAe4B,KAAAA,CAAMa,SAAAA;AAClD,EAAA,IAAIb,KAAAA,CAAMc,KAAAA,EAAO1C,OAAAA,CAAQ,OAAA,IAAW4B,KAAAA,CAAMc,KAAAA;AAE1C,EAAA,OAAOC,OAAOC,IAAAA,CAAK5C,OAAAA,CAAAA,CAAS6C,MAAAA,GAAS,IAAI7C,OAAAA,GAAU8C,MAAAA;AACrD;AAVSV,MAAAA,CAAAA,oCAAAA,EAAAA,sCAAAA,CAAAA;AA8BF,SAASW,sBAAAA,CACdR,OACAX,KAAAA,EAAwB;AAExB,EAAA,MAAMoB,GAAAA,GAAMpB,SAAS1B,mBAAAA,EAAAA;AACrB,EAAA,IAAI,CAACqC,KAAAA,IAAS,CAACS,GAAAA,EAAKjB,aAAa,OAAOQ,KAAAA;AAGxC,EAAA,IAAI,CAACf,QAAAA,CAASe,KAAAA,EAAO,aAAA,CAAA,EAAgB;AACnC,IAAA,OAAO;MAAE,GAAGA,KAAAA;AAAOR,MAAAA,WAAAA,EAAaiB,GAAAA,CAAIjB;AAAY,KAAA;AAClD,EAAA;AAEA,EAAA,OAAOQ,KAAAA;AACT;AAbgBQ,MAAAA,CAAAA,sBAAAA,EAAAA,wBAAAA,CAAAA;AAmBhB,SAASE,cAAiDC,IAAAA,EAAO;AAC/D,EAAA,MAAMC,OAAAA,GAAU;IAAE,GAAGD;AAAK,GAAA;AAC1B,EAAA,OAAQC,QAAoC,yBAAA,CAAA;AAC5C,EAAA,OAAOA,OAAAA;AACT;AAJSF,MAAAA,CAAAA,aAAAA,EAAAA,eAAAA,CAAAA;AAUT,SAASG,2BAAAA,CAA4BC,OAAexB,MAAAA,EAA0C;AAC5F,EAAA,OAAOA,MAAAA,CAAOZ,cAAcqC,QAAAA,CAASD,KAAAA,KAAUxB,MAAAA,CAAOX,8BAAAA,CAA+BoC,SAASD,KAAAA,CAAAA;AAChG;AAFSD,MAAAA,CAAAA,2BAAAA,EAAAA,6BAAAA,CAAAA;AAeT,SAASG,iBAAAA,CACPF,KAAAA,EACAG,SAAAA,EACA5B,KAAAA,EACAC,MAAAA,EAA0C;AAG1C,EAAA,IAAID,OAAOG,WAAAA,EAAa;AAGxB,EAAA,IAAI,CAACF,OAAOV,UAAAA,EAAY;AAGxB,EAAA,MAAMsC,KAAAA,GAAQ,CAAA,EAAGJ,KAAAA,CAAAA,CAAAA,EAASG,SAAAA,CAAAA,CAAAA;AAC1B,EAAA,IAAI3B,MAAAA,CAAOT,0BAAAA,CAA2BkC,QAAAA,CAASG,KAAAA,CAAAA,EAAQ;AAGvD,EAAA,MAAM,IAAIC,KAAAA,CACR,CAAA,oDAAA,EAAuDL,KAAAA,CAAAA,CAAAA,EAASG,SAAAA,CAAAA,uEAAAA,EAElDH,KAAAA,CAAAA,6BAAAA,EACAI,KAAAA,CAAAA,6FAAAA,CAC+C,CAAA;AAEjE;AAxBSF,MAAAA,CAAAA,iBAAAA,EAAAA,mBAAAA,CAAAA;AAgGT,IAAMI,cAAAA,uBAAqBC,OAAAA,EAAAA;AAS3B,eAAsBC,kBAAAA,CAAmBC,WAAgClC,KAAAA,EAAuB;AAC9F,EAAA,IAAI+B,cAAAA,CAAeI,GAAAA,CAAInC,KAAAA,CAAAA,EAAQ;AAC/B+B,EAAAA,cAAAA,CAAeK,IAAIpC,KAAAA,CAAAA;AAEnB,EAAA,MAAMqC,OAAAA,GAAAA,CAAWC,QAAQC,GAAAA,CAAI,cAAA,KAAmB,KAAA,EAAOC,OAAAA,CAAQ,oBAAoB,EAAA,CAAA;AACnF,EAAA,MAAMC,UAAUzC,KAAAA,CAAMG,WAAAA,IAAe,EAAA,EAAIqC,OAAAA,CAAQ,oBAAoB,EAAA,CAAA;AACrE,EAAA,MAAME,GAAAA,GAAM,CAAA,IAAA,EAAOL,OAAAA,CAAAA,IAAAA,EAAcI,MAAAA,CAAAA,CAAAA;AACjC,EAAA,IAAI;AACF,IAAA,MAAMP,SAAAA,CAAUS,iBAAAA,CAAkB,CAAA,wBAAA,EAA2BD,GAAAA,CAAAA,CAAAA,CAAM,CAAA;EACrE,CAAA,CAAA,MAAQ;AAENX,IAAAA,cAAAA,CAAea,OAAO5C,KAAAA,CAAAA;AACxB,EAAA;AACF;AAbsBiC,MAAAA,CAAAA,kBAAAA,EAAAA,oBAAAA,CAAAA;AAsBtB,IAAMY,iBAAAA,uBAAwBb,OAAAA,EAAAA;AAkB9B,eAAsBc,cAAAA,CAAeZ,WAAgClC,KAAAA,EAAuB;AAC1F,EAAA,IAAI6C,iBAAAA,CAAkBV,GAAAA,CAAInC,KAAAA,CAAAA,EAAQ;AAClC6C,EAAAA,iBAAAA,CAAkBT,IAAIpC,KAAAA,CAAAA;AAEtB,EAAA,MAAMyC,UAAUzC,KAAAA,CAAMG,WAAAA,IAAe,EAAA,EAAIqC,OAAAA,CAAQ,oBAAoB,EAAA,CAAA;AACrE,EAAA,IAAI;AACF,IAAA,MAAMN,SAAAA,CAAUS,iBAAAA,CAAkB,CAAA,wBAAA,EAA2BF,MAAAA,CAAAA,CAAAA,CAAS,CAAA;EACxE,CAAA,CAAA,MAAQ;AAENI,IAAAA,iBAAAA,CAAkBD,OAAO5C,KAAAA,CAAAA;AAC3B,EAAA;AACF;AAXsB8C,MAAAA,CAAAA,cAAAA,EAAAA,gBAAAA,CAAAA;AAoCtB,SAASC,sBAAsBtB,KAAAA,EAAa;AAC1C,EAAA,OAAOA,KAAAA,CAAMR,MAAAA,GAAS,CAAA,GAAIQ,KAAAA,CAAMuB,MAAAA,CAAO,CAAA,CAAA,CAAGC,WAAAA,EAAW,GAAKxB,KAAAA,CAAMyB,KAAAA,CAAM,CAAA,CAAA,GAAKzB,KAAAA;AAC7E;AAFSsB,MAAAA,CAAAA,qBAAAA,EAAAA,uBAAAA,CAAAA;AAuCT,eAAsBI,sBAAAA,CACpBC,UAAAA,EACApD,KAAAA,EACAyB,KAAAA,EACAG,WACAN,IAAAA,EAAa;AAEb,EAAA,MAAMmB,UAAUzC,KAAAA,CAAMG,WAAAA,IAAe,EAAA,EAAIqC,OAAAA,CAAQ,oBAAoB,EAAA,CAAA;AACrE,EAAA,MAAMa,cAAAA,GAAiBN,sBAAsBtB,KAAAA,CAAAA;AAC7C,EAAA,OAAO2B,UAAAA,CAAWE,YAAAA,CAAa,OAAOC,EAAAA,KAAAA;AACpC,IAAA,MAAMA,EAAAA,CAAGZ,iBAAAA,CAAkB,CAAA,8BAAA,EAAiCF,MAAAA,CAAAA,CAAAA,CAAS,CAAA;AAIrE,IAAA,MAAMe,QAAAA,GAAWD,GAAGF,cAAAA,CAAAA;AACpB,IAAA,MAAMI,MAAAA,GAASD,WAAW5B,SAAAA,CAAAA;AAC1B,IAAA,IAAI,OAAO6B,WAAW,UAAA,EAAY;AAChC,MAAA,MAAM,IAAI3B,MACR,CAAA,uCAAA,EAA0CL,KAAAA,IAASG,SAAAA,CAAAA,mBAAAA,EAA+ByB,cAAAA,CAAAA,6DAAAA,CAChF,CAAA;AAEN,IAAA;AACA,IAAA,OAAOI,OAAOnC,IAAAA,CAAAA;EAChB,CAAA,CAAA;AACF;AAxBsB6B,MAAAA,CAAAA,sBAAAA,EAAAA,wBAAAA,CAAAA;AA0Bf,SAASO,qBAAAA,CAAyBC,YAAe1D,MAAAA,EAAiC;AACvF,EAAA,MAAM2D,UAAAA,GAAiD;IACrD,GAAGhF,aAAAA;IACH,GAAGqB;AACL,GAAA;AAEA,EAAA,IAAI,CAAC2D,WAAW/E,OAAAA,EAAS;AACvBgF,IAAAA,MAAAA,CAAOC,KAAK,0DAAA,CAAA;AACZ,IAAA,OAAOH,UAAAA;AACT,EAAA;AAGA,EAAA,MAAMzB,SAAAA,GAAYyB,UAAAA;AAIlB,EAAA,MAAMI,wBAAAA,GAA2BJ,UAAAA;AAGjC,EAAA,MAAMK,YAAAA,GAAeL,UAAAA;AAErBE,EAAAA,MAAAA,CAAOC,KAAK,kDAAA,EAAoD;AAC9D7E,IAAAA,mBAAAA,EAAqB2E,UAAAA,CAAW3E,mBAAAA;AAChCC,IAAAA,iBAAAA,EAAmB0E,UAAAA,CAAW1E,iBAAAA;AAC9BC,IAAAA,iBAAAA,EAAmByE,UAAAA,CAAWzE,iBAAAA;AAC9BC,IAAAA,gBAAAA,EAAkBwE,UAAAA,CAAWxE,gBAAAA;AAC7BN,IAAAA,mBAAAA,EAAqB8E,UAAAA,CAAW9E,mBAAAA;AAChCC,IAAAA,qBAAAA,EAAuB6E,UAAAA,CAAW7E,qBAAAA;AAClCC,IAAAA,0BAAAA,EAA4B4E,UAAAA,CAAW5E,0BAAAA;AACvCO,IAAAA,UAAAA,EAAYqE,UAAAA,CAAWrE,UAAAA;AACvBF,IAAAA,aAAAA,EAAeuE,UAAAA,CAAWvE,aAAAA;AAC1BC,IAAAA,8BAAAA,EAAgCsE,UAAAA,CAAWtE,8BAAAA;AAC3CE,IAAAA,0BAAAA,EAA4BoE,UAAAA,CAAWpE,0BAAAA;AACvCE,IAAAA,4BAAAA,EAA8BkE,UAAAA,CAAWlE,4BAAAA;AACzCC,IAAAA,mBAAAA,EAAqBiE,UAAAA,CAAWjE;GAClC,CAAA;AAEA,EAAA,OAAOqE,aAAaC,QAAAA,CAAS;IAC3BC,KAAAA,EAAO;MACLC,UAAAA,EAAY;;;;AAKV,QAAA,MAAMC,MAAAA,CAAO,EACX3C,KAAAA,EACAH,IAAAA,EACA4C,OAAK,EAKL;AAEA,UAAA,IAAIN,WAAWvE,aAAAA,CAAcqC,QAAAA,CAASD,KAAAA,CAAAA,IAAUH,KAAK+C,uBAAAA,EAAyB;AAC5E,YAAA,OAAOH,KAAAA,CAAM7C,aAAAA,CAAcC,IAAAA,CAAAA,CAAAA;AAC7B,UAAA;AAEA,UAAA,MAAMtB,QAAQ1B,mBAAAA,EAAAA;AACdqD,UAAAA,iBAAAA,CAAkBF,KAAAA,EAAO,QAAA,EAAUzB,KAAAA,EAAO4D,UAAAA,CAAAA;AAC1C,UAAA,IAAI,CAAC5D,OAAOG,WAAAA,EAAa;AACvB,YAAA,OAAO+D,MAAM5C,IAAAA,CAAAA;AACf,UAAA;AAEA,UAAA,IAAIsC,WAAWlE,4BAAAA,EAA8B;AAC3C,YAAA,MAAMuC,kBAAAA,CAAmBC,WAAWlC,KAAAA,CAAAA;AACtC,UAAA;AAEA,UAAA,MAAMsE,YAAAA,GAAevE,kBAAAA,CAAmBuB,IAAAA,CAAKzB,IAAAA,EAAMG,OAAO4D,UAAAA,CAAAA;AAE1D,UAAA,IAAIA,WAAWnE,KAAAA,EAAO;AACpB,YAAA,MAAM8E,YAAAA,GAAexD,MAAAA,CAAOC,IAAAA,CAAKsD,YAAAA,CAAAA,CAAcE,MAAAA,CAAO,CAACC,CAAAA,KAAM,EAAEA,CAAAA,IAAKnD,IAAAA,CAAKzB,IAAAA,CAAG,CAAA;AAC5E,YAAA,IAAI0E,YAAAA,CAAatD,SAAS,CAAA,EAAG;AAC3B4C,cAAAA,MAAAA,CAAOpE,KAAAA,CAAM,wBAAwBgC,KAAAA,CAAAA,oBAAAA,EAA4B8C,aAAaG,IAAAA,CAAK,IAAA,CAAA,CAAA,CAAA,EAAS;AAC1FvE,gBAAAA,WAAAA,EAAaH,KAAAA,CAAMG,WAAAA;AACnBE,gBAAAA,OAAAA,EAASL,KAAAA,CAAMK;eACjB,CAAA;AACF,YAAA;AACF,UAAA;AAEA,UAAA,MAAMsE,SAAAA,GAAY;AAChB,YAAA,GAAGtD,cAAcC,IAAAA,CAAAA;YACjBzB,IAAAA,EAAMyE;AACR,WAAA;AACA,UAAA,IAAIV,WAAWjE,mBAAAA,EAAqB;AAClC,YAAA,OAAOwD,sBAAAA,CAAuBY,wBAAAA,EAA0B/D,KAAAA,EAAOyB,KAAAA,EAAO,UAAUkD,SAAAA,CAAAA;AAClF,UAAA;AACA,UAAA,OAAOT,MAAMS,SAAAA,CAAAA;AACf,QAAA,CAAA;AAEA,QAAA,MAAMC,UAAAA,CAAW,EACfnD,KAAAA,EACAH,IAAAA,EACA4C,OAAK,EAKL;AACA,UAAA,IAAIN,WAAWvE,aAAAA,CAAcqC,QAAAA,CAASD,KAAAA,CAAAA,IAAUH,KAAK+C,uBAAAA,EAAyB;AAC5E,YAAA,OAAOH,KAAAA,CAAM7C,aAAAA,CAAcC,IAAAA,CAAAA,CAAAA;AAC7B,UAAA;AAEA,UAAA,MAAMtB,QAAQ1B,mBAAAA,EAAAA;AACdqD,UAAAA,iBAAAA,CAAkBF,KAAAA,EAAO,YAAA,EAAczB,KAAAA,EAAO4D,UAAAA,CAAAA;AAC9C,UAAA,IAAI,CAAC5D,OAAOG,WAAAA,EAAa;AACvB,YAAA,OAAO+D,MAAM5C,IAAAA,CAAAA;AACf,UAAA;AAEA,UAAA,IAAIsC,WAAWlE,4BAAAA,EAA8B;AAC3C,YAAA,MAAMuC,kBAAAA,CAAmBC,WAAWlC,KAAAA,CAAAA;AACtC,UAAA;AAEA,UAAA,MAAM6E,YAAYC,KAAAA,CAAMC,OAAAA,CAAQzD,KAAKzB,IAAI,CAAA,GAAIyB,KAAKzB,IAAAA,GAAO;YAACyB,IAAAA,CAAKzB;;AAC/D,UAAA,MAAMyE,YAAAA,GAAeO,UAAUG,GAAAA,CAAI,CAACC,SAASlF,kBAAAA,CAAmBkF,IAAAA,EAAMjF,KAAAA,EAAO4D,UAAAA,CAAAA,CAAAA;AAE7E,UAAA,MAAMe,SAAAA,GAAY;AAChB,YAAA,GAAGtD,cAAcC,IAAAA,CAAAA;AACjBzB,YAAAA,IAAAA,EAAMiF,MAAMC,OAAAA,CAAQzD,IAAAA,CAAKzB,IAAI,CAAA,GAAIyE,YAAAA,GAAeA,aAAa,CAAA;AAC/D,WAAA;AACA,UAAA,IAAIV,WAAWjE,mBAAAA,EAAqB;AAClC,YAAA,OAAOwD,sBAAAA,CAAuBY,wBAAAA,EAA0B/D,KAAAA,EAAOyB,KAAAA,EAAO,cAAckD,SAAAA,CAAAA;AACtF,UAAA;AACA,UAAA,OAAOT,MAAMS,SAAAA,CAAAA;AACf,QAAA,CAAA;AAEA,QAAA,MAAMO,mBAAAA,CAAoB,EACxBzD,KAAAA,EACAH,IAAAA,EACA4C,OAAK,EAKL;AACA,UAAA,IAAIN,WAAWvE,aAAAA,CAAcqC,QAAAA,CAASD,KAAAA,CAAAA,IAAUH,KAAK+C,uBAAAA,EAAyB;AAC5E,YAAA,OAAOH,KAAAA,CAAM7C,aAAAA,CAAcC,IAAAA,CAAAA,CAAAA;AAC7B,UAAA;AAEA,UAAA,MAAMtB,QAAQ1B,mBAAAA,EAAAA;AACdqD,UAAAA,iBAAAA,CAAkBF,KAAAA,EAAO,qBAAA,EAAuBzB,KAAAA,EAAO4D,UAAAA,CAAAA;AACvD,UAAA,IAAI,CAAC5D,OAAOG,WAAAA,EAAa;AACvB,YAAA,OAAO+D,MAAM5C,IAAAA,CAAAA;AACf,UAAA;AAEA,UAAA,IAAIsC,WAAWlE,4BAAAA,EAA8B;AAC3C,YAAA,MAAMuC,kBAAAA,CAAmBC,WAAWlC,KAAAA,CAAAA;AACtC,UAAA;AACA,UAAA,MAAM6E,YAAYC,KAAAA,CAAMC,OAAAA,CAAQzD,KAAKzB,IAAI,CAAA,GAAIyB,KAAKzB,IAAAA,GAAO;YAACyB,IAAAA,CAAKzB;;AAC/D,UAAA,MAAMyE,YAAAA,GAAeO,UAAUG,GAAAA,CAAI,CAACC,SAASlF,kBAAAA,CAAmBkF,IAAAA,EAAMjF,KAAAA,EAAO4D,UAAAA,CAAAA,CAAAA;AAE7E,UAAA,MAAMe,SAAAA,GAAY;AAChB,YAAA,GAAGtD,cAAcC,IAAAA,CAAAA;AACjBzB,YAAAA,IAAAA,EAAMiF,MAAMC,OAAAA,CAAQzD,IAAAA,CAAKzB,IAAI,CAAA,GAAIyE,YAAAA,GAAeA,aAAa,CAAA;AAC/D,WAAA;AACA,UAAA,IAAIV,WAAWjE,mBAAAA,EAAqB;AAClC,YAAA,OAAOwD,sBAAAA,CAAuBY,wBAAAA,EAA0B/D,KAAAA,EAAOyB,KAAAA,EAAO,uBAAuBkD,SAAAA,CAAAA;AAC/F,UAAA;AACA,UAAA,OAAOT,MAAMS,SAAAA,CAAAA;AACf,QAAA,CAAA;;;;AAMA,QAAA,MAAMQ,MAAAA,CAAO,EACX1D,KAAAA,EACAH,IAAAA,EACA4C,OAAK,EAML;AACA,UAAA,IAAIN,WAAWvE,aAAAA,CAAcqC,QAAAA,CAASD,KAAAA,CAAAA,IAAUH,KAAK+C,uBAAAA,EAAyB;AAC5E,YAAA,OAAOH,KAAAA,CAAM7C,aAAAA,CAAcC,IAAAA,CAAAA,CAAAA;AAC7B,UAAA;AAEA,UAAA,MAAMtB,QAAQ1B,mBAAAA,EAAAA;AACdqD,UAAAA,iBAAAA,CAAkBF,KAAAA,EAAO,QAAA,EAAUzB,KAAAA,EAAO4D,UAAAA,CAAAA;AAC1C,UAAA,IAAI,CAAC5D,OAAOG,WAAAA,EAAa;AACvB,YAAA,OAAO+D,MAAM5C,IAAAA,CAAAA;AACf,UAAA;AAEA,UAAA,IAAIsC,WAAWlE,4BAAAA,EAA8B;AAC3C,YAAA,MAAMuC,kBAAAA,CAAmBC,WAAWlC,KAAAA,CAAAA;AACtC,UAAA;AACA,UAAA,MAAMsE,YAAAA,GAAe7D,kBAAAA,CAAmBa,IAAAA,CAAKzB,IAAAA,EAAMG,OAAO4D,UAAAA,CAAAA;AAG1D,UAAA,IAAIwB,gBAAgB9D,IAAAA,CAAKX,KAAAA;AACzB,UAAA,IAAIiD,WAAW5E,0BAAAA,IAA8B,CAACwC,2BAAAA,CAA4BC,KAAAA,EAAOmC,UAAAA,CAAAA,EAAa;AAC5FwB,YAAAA,aAAAA,GAAgB1E,iBAAAA,CAAkBY,IAAAA,CAAKX,KAAAA,EAAOX,KAAAA,CAAAA;AAChD,UAAA;AAEA,UAAA,IAAI4D,WAAWnE,KAAAA,EAAO;AACpB,YAAA,MAAM4F,gBAAAA,GAAmBtE,MAAAA,CAAOC,IAAAA,CAAKsD,YAAAA,CAAAA,CAAcE,MAAAA,CAAO,CAACC,CAAAA,KAAM,EAAEA,CAAAA,IAAKnD,IAAAA,CAAKzB,IAAAA,CAAG,CAAA;AAChF,YAAA,MAAMyF,YAAAA,GAAeF,kBAAkB9D,IAAAA,CAAKX,KAAAA;AAC5C,YAAA,IAAI0E,gBAAAA,CAAiBpE,MAAAA,GAAS,CAAA,IAAKqE,YAAAA,EAAc;AAC/CzB,cAAAA,MAAAA,CAAOpE,KAAAA,CACL,CAAA,qBAAA,EAAwBgC,KAAAA,CAAAA,yBAAAA,EAAiC4D,gBAAAA,CAAiBX,IAAAA,CAAK,IAAA,CAAA,CAAA,EAAQY,YAAAA,GAAe,sBAAA,GAAyB,EAAA,CAAA,CAAI,CAAA;AAEvI,YAAA;AACF,UAAA;AAEA,UAAA,MAAMX,SAAAA,GAAY;AAChB,YAAA,GAAGtD,cAAcC,IAAAA,CAAAA;YACjBzB,IAAAA,EAAMyE,YAAAA;YACN3D,KAAAA,EAAOyE;AACT,WAAA;AACA,UAAA,IAAIxB,WAAWjE,mBAAAA,EAAqB;AAClC,YAAA,OAAOwD,sBAAAA,CAAuBY,wBAAAA,EAA0B/D,KAAAA,EAAOyB,KAAAA,EAAO,UAAUkD,SAAAA,CAAAA;AAClF,UAAA;AACA,UAAA,OAAOT,MAAMS,SAAAA,CAAAA;AACf,QAAA,CAAA;AAEA,QAAA,MAAMY,UAAAA,CAAW,EACf9D,KAAAA,EACAH,IAAAA,EACA4C,OAAK,EAML;AACA,UAAA,IAAIN,WAAWvE,aAAAA,CAAcqC,QAAAA,CAASD,KAAAA,CAAAA,IAAUH,KAAK+C,uBAAAA,EAAyB;AAC5E,YAAA,OAAOH,KAAAA,CAAM7C,aAAAA,CAAcC,IAAAA,CAAAA,CAAAA;AAC7B,UAAA;AAEA,UAAA,MAAMtB,QAAQ1B,mBAAAA,EAAAA;AACdqD,UAAAA,iBAAAA,CAAkBF,KAAAA,EAAO,YAAA,EAAczB,KAAAA,EAAO4D,UAAAA,CAAAA;AAC9C,UAAA,IAAI,CAAC5D,OAAOG,WAAAA,EAAa;AACvB,YAAA,OAAO+D,MAAM5C,IAAAA,CAAAA;AACf,UAAA;AAEA,UAAA,IAAIsC,WAAWlE,4BAAAA,EAA8B;AAC3C,YAAA,MAAMuC,kBAAAA,CAAmBC,WAAWlC,KAAAA,CAAAA;AACtC,UAAA;AACA,UAAA,MAAMsE,YAAAA,GAAe7D,kBAAAA,CAAmBa,IAAAA,CAAKzB,IAAAA,EAAMG,OAAO4D,UAAAA,CAAAA;AAG1D,UAAA,IAAIwB,gBAAgB9D,IAAAA,CAAKX,KAAAA;AACzB,UAAA,IAAIiD,WAAW5E,0BAAAA,IAA8B,CAACwC,2BAAAA,CAA4BC,KAAAA,EAAOmC,UAAAA,CAAAA,EAAa;AAC5FwB,YAAAA,aAAAA,GAAgB1E,iBAAAA,CAAkBY,IAAAA,CAAKX,KAAAA,EAAOX,KAAAA,CAAAA;AAChD,UAAA;AAEA,UAAA,MAAM2E,SAAAA,GAAY;AAChB,YAAA,GAAGtD,cAAcC,IAAAA,CAAAA;YACjBzB,IAAAA,EAAMyE,YAAAA;YACN3D,KAAAA,EAAOyE;AACT,WAAA;AACA,UAAA,IAAIxB,WAAWjE,mBAAAA,EAAqB;AAClC,YAAA,OAAOwD,sBAAAA,CAAuBY,wBAAAA,EAA0B/D,KAAAA,EAAOyB,KAAAA,EAAO,cAAckD,SAAAA,CAAAA;AACtF,UAAA;AACA,UAAA,OAAOT,MAAMS,SAAAA,CAAAA;AACf,QAAA,CAAA;AAEA,QAAA,MAAMa,MAAAA,CAAO,EACX/D,KAAAA,EACAH,IAAAA,EACA4C,OAAK,EAOL;AACA,UAAA,IAAIN,WAAWvE,aAAAA,CAAcqC,QAAAA,CAASD,KAAAA,CAAAA,IAAUH,KAAK+C,uBAAAA,EAAyB;AAC5E,YAAA,OAAOH,KAAAA,CAAM7C,aAAAA,CAAcC,IAAAA,CAAAA,CAAAA;AAC7B,UAAA;AAEA,UAAA,MAAMtB,QAAQ1B,mBAAAA,EAAAA;AACdqD,UAAAA,iBAAAA,CAAkBF,KAAAA,EAAO,QAAA,EAAUzB,KAAAA,EAAO4D,UAAAA,CAAAA;AAC1C,UAAA,IAAI,CAAC5D,OAAOG,WAAAA,EAAa;AACvB,YAAA,OAAO+D,MAAM5C,IAAAA,CAAAA;AACf,UAAA;AAEA,UAAA,IAAIsC,WAAWlE,4BAAAA,EAA8B;AAC3C,YAAA,MAAMuC,kBAAAA,CAAmBC,WAAWlC,KAAAA,CAAAA;AACtC,UAAA;AACA,UAAA,MAAMyF,cAAAA,GAAiB1F,kBAAAA,CAAmBuB,IAAAA,CAAK8C,MAAAA,EAAQpE,OAAO4D,UAAAA,CAAAA;AAC9D,UAAA,MAAM8B,cAAAA,GAAiBjF,kBAAAA,CAAmBa,IAAAA,CAAK6D,MAAAA,EAAQnF,OAAO4D,UAAAA,CAAAA;AAG9D,UAAA,IAAIwB,gBAAgB9D,IAAAA,CAAKX,KAAAA;AACzB,UAAA,IAAIiD,WAAW5E,0BAAAA,IAA8B,CAACwC,2BAAAA,CAA4BC,KAAAA,EAAOmC,UAAAA,CAAAA,EAAa;AAC5FwB,YAAAA,aAAAA,GAAgB1E,iBAAAA,CAAkBY,IAAAA,CAAKX,KAAAA,EAAOX,KAAAA,CAAAA;AAChD,UAAA;AAEA,UAAA,MAAM2E,SAAAA,GAAY;AAChB,YAAA,GAAGtD,cAAcC,IAAAA,CAAAA;YACjB8C,MAAAA,EAAQqB,cAAAA;YACRN,MAAAA,EAAQO,cAAAA;YACR/E,KAAAA,EAAOyE;AACT,WAAA;AACA,UAAA,IAAIxB,WAAWjE,mBAAAA,EAAqB;AAClC,YAAA,OAAOwD,sBAAAA,CAAuBY,wBAAAA,EAA0B/D,KAAAA,EAAOyB,KAAAA,EAAO,UAAUkD,SAAAA,CAAAA;AAClF,UAAA;AACA,UAAA,OAAOT,MAAMS,SAAAA,CAAAA;AACf,QAAA,CAAA;;;;AAMA,QAAA,MAAMgB,QAAAA,CAAS,EAAElE,KAAAA,EAAOH,IAAAA,EAAM4C,OAAK,EAAqC;AACtE,UAAA,IACE,CAACN,WAAW9E,mBAAAA,IACZ0C,2BAAAA,CAA4BC,OAAOmC,UAAAA,CAAAA,IACnCtC,KAAK+C,uBAAAA,EACL;AACA,YAAA,OAAOH,KAAAA,CAAM7C,aAAAA,CAAcC,IAAAA,CAAAA,CAAAA;AAC7B,UAAA;AAEA,UAAA,MAAMtB,QAAQ1B,mBAAAA,EAAAA;AACdqD,UAAAA,iBAAAA,CAAkBF,KAAAA,EAAO,UAAA,EAAYzB,KAAAA,EAAO4D,UAAAA,CAAAA;AAC5C,UAAA,IAAI,CAAC5D,OAAOG,WAAAA,EAAa;AACvB,YAAA,OAAO+D,MAAM5C,IAAAA,CAAAA;AACf,UAAA;AAEA,UAAA,IAAIsC,WAAWlE,4BAAAA,EAA8B;AAC3C,YAAA,MAAMuC,kBAAAA,CAAmBC,WAAWlC,KAAAA,CAAAA;AACtC,UAAA;AACA,UAAA,MAAMoF,aAAAA,GAAgB1E,iBAAAA,CAAkBY,IAAAA,CAAKX,KAAAA,EAAOX,KAAAA,CAAAA;AAEpD,UAAA,IAAI4D,WAAWnE,KAAAA,EAAO;AACpBoE,YAAAA,MAAAA,CAAOpE,KAAAA,CAAM,CAAA,qBAAA,EAAwBgC,KAAAA,CAAAA,2CAAAA,CAAAA,EAAoD;AACvFtB,cAAAA,WAAAA,EAAaH,KAAAA,CAAMG;aACrB,CAAA;AACF,UAAA;AAEA,UAAA,MAAMwE,SAAAA,GAAY;AAChB,YAAA,GAAGtD,cAAcC,IAAAA,CAAAA;YACjBX,KAAAA,EAAOyE;AACT,WAAA;AACA,UAAA,IAAIxB,WAAWjE,mBAAAA,EAAqB;AAClC,YAAA,OAAOwD,sBAAAA,CAAuBY,wBAAAA,EAA0B/D,KAAAA,EAAOyB,KAAAA,EAAO,YAAYkD,SAAAA,CAAAA;AACpF,UAAA;AACA,UAAA,OAAOT,MAAMS,SAAAA,CAAAA;AACf,QAAA,CAAA;AAEA,QAAA,MAAMiB,SAAAA,CAAU,EAAEnE,KAAAA,EAAOH,IAAAA,EAAM4C,OAAK,EAAqC;AACvE,UAAA,IACE,CAACN,WAAW9E,mBAAAA,IACZ0C,2BAAAA,CAA4BC,OAAOmC,UAAAA,CAAAA,IACnCtC,KAAK+C,uBAAAA,EACL;AACA,YAAA,OAAOH,KAAAA,CAAM7C,aAAAA,CAAcC,IAAAA,CAAAA,CAAAA;AAC7B,UAAA;AAEA,UAAA,MAAMtB,QAAQ1B,mBAAAA,EAAAA;AACdqD,UAAAA,iBAAAA,CAAkBF,KAAAA,EAAO,WAAA,EAAazB,KAAAA,EAAO4D,UAAAA,CAAAA;AAC7C,UAAA,IAAI,CAAC5D,OAAOG,WAAAA,EAAa;AACvB,YAAA,OAAO+D,MAAM5C,IAAAA,CAAAA;AACf,UAAA;AAEA,UAAA,IAAIsC,WAAWlE,4BAAAA,EAA8B;AAC3C,YAAA,MAAMuC,kBAAAA,CAAmBC,WAAWlC,KAAAA,CAAAA;AACtC,UAAA;AACA,UAAA,MAAMoF,aAAAA,GAAgB1E,iBAAAA,CAAkBY,IAAAA,CAAKX,KAAAA,EAAOX,KAAAA,CAAAA;AAEpD,UAAA,IAAI4D,WAAWnE,KAAAA,EAAO;AACpBoE,YAAAA,MAAAA,CAAOpE,KAAAA,CAAM,CAAA,qBAAA,EAAwBgC,KAAAA,CAAAA,4CAAAA,CAAAA,EAAqD;AACxFtB,cAAAA,WAAAA,EAAaH,KAAAA,CAAMG;aACrB,CAAA;AACF,UAAA;AAEA,UAAA,MAAMwE,SAAAA,GAAY;AAChB,YAAA,GAAGtD,cAAcC,IAAAA,CAAAA;YACjBX,KAAAA,EAAOyE;AACT,WAAA;AACA,UAAA,IAAIxB,WAAWjE,mBAAAA,EAAqB;AAClC,YAAA,OAAOwD,sBAAAA,CAAuBY,wBAAAA,EAA0B/D,KAAAA,EAAOyB,KAAAA,EAAO,aAAakD,SAAAA,CAAAA;AACrF,UAAA;AACA,UAAA,OAAOT,MAAMS,SAAAA,CAAAA;AACf,QAAA,CAAA;AAEA,QAAA,MAAMkB,gBAAAA,CAAiB,EAAEpE,KAAAA,EAAOH,IAAAA,EAAM4C,OAAK,EAAqC;AAC9E,UAAA,IACE,CAACN,WAAW9E,mBAAAA,IACZ0C,2BAAAA,CAA4BC,OAAOmC,UAAAA,CAAAA,IACnCtC,KAAK+C,uBAAAA,EACL;AACA,YAAA,OAAOH,KAAAA,CAAM7C,aAAAA,CAAcC,IAAAA,CAAAA,CAAAA;AAC7B,UAAA;AAEA,UAAA,MAAMtB,QAAQ1B,mBAAAA,EAAAA;AACdqD,UAAAA,iBAAAA,CAAkBF,KAAAA,EAAO,kBAAA,EAAoBzB,KAAAA,EAAO4D,UAAAA,CAAAA;AACpD,UAAA,IAAI,CAAC5D,OAAOG,WAAAA,EAAa;AACvB,YAAA,OAAO+D,MAAM5C,IAAAA,CAAAA;AACf,UAAA;AAEA,UAAA,IAAIsC,WAAWlE,4BAAAA,EAA8B;AAC3C,YAAA,MAAMuC,kBAAAA,CAAmBC,WAAWlC,KAAAA,CAAAA;AACtC,UAAA;AACA,UAAA,MAAMoF,aAAAA,GAAgB1E,iBAAAA,CAAkBY,IAAAA,CAAKX,KAAAA,EAAOX,KAAAA,CAAAA;AAEpD,UAAA,IAAI4D,WAAWnE,KAAAA,EAAO;AACpBoE,YAAAA,MAAAA,CAAOpE,KAAAA,CAAM,CAAA,qBAAA,EAAwBgC,KAAAA,CAAAA,mDAAAA,CAAAA,EAA4D;AAC/FtB,cAAAA,WAAAA,EAAaH,KAAAA,CAAMG;aACrB,CAAA;AACF,UAAA;AAEA,UAAA,MAAMwE,SAAAA,GAAY;AAChB,YAAA,GAAGtD,cAAcC,IAAAA,CAAAA;YACjBX,KAAAA,EAAOyE;AACT,WAAA;AACA,UAAA,IAAIxB,WAAWjE,mBAAAA,EAAqB;AAClC,YAAA,OAAOwD,sBAAAA,CAAuBY,wBAAAA,EAA0B/D,KAAAA,EAAOyB,KAAAA,EAAO,oBAAoBkD,SAAAA,CAAAA;AAC5F,UAAA;AACA,UAAA,OAAOT,MAAMS,SAAAA,CAAAA;AACf,QAAA,CAAA;AAEA,QAAA,MAAMmB,UAAAA,CAAW,EAAErE,KAAAA,EAAOH,IAAAA,EAAM4C,OAAK,EAAqC;AACxE,UAAA,IACE,CAACN,WAAW9E,mBAAAA,IACZ0C,2BAAAA,CAA4BC,OAAOmC,UAAAA,CAAAA,IACnCtC,KAAK+C,uBAAAA,EACL;AACA,YAAA,OAAOH,KAAAA,CAAM7C,aAAAA,CAAcC,IAAAA,CAAAA,CAAAA;AAC7B,UAAA;AAEA,UAAA,MAAMtB,QAAQ1B,mBAAAA,EAAAA;AACdqD,UAAAA,iBAAAA,CAAkBF,KAAAA,EAAO,YAAA,EAAczB,KAAAA,EAAO4D,UAAAA,CAAAA;AAC9C,UAAA,IAAI,CAAC5D,OAAOG,WAAAA,EAAa;AACvB,YAAA,OAAO+D,MAAM5C,IAAAA,CAAAA;AACf,UAAA;AAEA,UAAA,IAAIsC,WAAWlE,4BAAAA,EAA8B;AAC3C,YAAA,MAAMuC,kBAAAA,CAAmBC,WAAWlC,KAAAA,CAAAA;AACtC,UAAA;AAIA,UAAA,MAAMoF,aAAAA,GAAgB1E,iBAAAA,CAAkBY,IAAAA,CAAKX,KAAAA,EAAOX,KAAAA,CAAAA;AAEpD,UAAA,IAAI4D,WAAWnE,KAAAA,EAAO;AACpBoE,YAAAA,MAAAA,CAAOpE,KAAAA,CAAM,CAAA,qBAAA,EAAwBgC,KAAAA,CAAAA,6CAAAA,CAAAA,EAAsD;AACzFtB,cAAAA,WAAAA,EAAaH,KAAAA,CAAMG;aACrB,CAAA;AACF,UAAA;AAEA,UAAA,MAAMwE,SAAAA,GAAY;AAChB,YAAA,GAAGtD,cAAcC,IAAAA,CAAAA;YACjBX,KAAAA,EAAOyE;AACT,WAAA;AACA,UAAA,IAAIxB,WAAWjE,mBAAAA,EAAqB;AAClC,YAAA,OAAOwD,sBAAAA,CAAuBY,wBAAAA,EAA0B/D,KAAAA,EAAOyB,KAAAA,EAAO,cAAckD,SAAAA,CAAAA;AACtF,UAAA;AACA,UAAA,OAAOT,MAAMS,SAAAA,CAAAA;AACf,QAAA,CAAA;AAEA,QAAA,MAAMoB,iBAAAA,CAAkB,EAAEtE,KAAAA,EAAOH,IAAAA,EAAM4C,OAAK,EAAqC;AAC/E,UAAA,IACE,CAACN,WAAW9E,mBAAAA,IACZ0C,2BAAAA,CAA4BC,OAAOmC,UAAAA,CAAAA,IACnCtC,KAAK+C,uBAAAA,EACL;AACA,YAAA,OAAOH,KAAAA,CAAM7C,aAAAA,CAAcC,IAAAA,CAAAA,CAAAA;AAC7B,UAAA;AAEA,UAAA,MAAMtB,QAAQ1B,mBAAAA,EAAAA;AACdqD,UAAAA,iBAAAA,CAAkBF,KAAAA,EAAO,mBAAA,EAAqBzB,KAAAA,EAAO4D,UAAAA,CAAAA;AACrD,UAAA,IAAI,CAAC5D,OAAOG,WAAAA,EAAa;AACvB,YAAA,OAAO+D,MAAM5C,IAAAA,CAAAA;AACf,UAAA;AAEA,UAAA,IAAIsC,WAAWlE,4BAAAA,EAA8B;AAC3C,YAAA,MAAMuC,kBAAAA,CAAmBC,WAAWlC,KAAAA,CAAAA;AACtC,UAAA;AACA,UAAA,MAAMoF,aAAAA,GAAgB1E,iBAAAA,CAAkBY,IAAAA,CAAKX,KAAAA,EAAOX,KAAAA,CAAAA;AAEpD,UAAA,IAAI4D,WAAWnE,KAAAA,EAAO;AACpBoE,YAAAA,MAAAA,CAAOpE,KAAAA,CAAM,CAAA,qBAAA,EAAwBgC,KAAAA,CAAAA,oDAAAA,CAAAA,EAA6D;AAChGtB,cAAAA,WAAAA,EAAaH,KAAAA,CAAMG;aACrB,CAAA;AACF,UAAA;AAEA,UAAA,MAAMwE,SAAAA,GAAY;AAChB,YAAA,GAAGtD,cAAcC,IAAAA,CAAAA;YACjBX,KAAAA,EAAOyE;AACT,WAAA;AACA,UAAA,IAAIxB,WAAWjE,mBAAAA,EAAqB;AAClC,YAAA,OAAOwD,sBAAAA,CAAuBY,wBAAAA,EAA0B/D,KAAAA,EAAOyB,KAAAA,EAAO,qBAAqBkD,SAAAA,CAAAA;AAC7F,UAAA;AACA,UAAA,OAAOT,MAAMS,SAAAA,CAAAA;AACf,QAAA,CAAA;AAEA,QAAA,MAAMqB,KAAAA,CAAM,EAAEvE,KAAAA,EAAOH,IAAAA,EAAM4C,OAAK,EAAqC;AACnE,UAAA,IACE,CAACN,WAAW9E,mBAAAA,IACZ0C,2BAAAA,CAA4BC,OAAOmC,UAAAA,CAAAA,IACnCtC,KAAK+C,uBAAAA,EACL;AACA,YAAA,OAAOH,KAAAA,CAAM7C,aAAAA,CAAcC,IAAAA,CAAAA,CAAAA;AAC7B,UAAA;AAEA,UAAA,MAAMtB,QAAQ1B,mBAAAA,EAAAA;AACdqD,UAAAA,iBAAAA,CAAkBF,KAAAA,EAAO,OAAA,EAASzB,KAAAA,EAAO4D,UAAAA,CAAAA;AACzC,UAAA,IAAI,CAAC5D,OAAOG,WAAAA,EAAa;AACvB,YAAA,OAAO+D,MAAM5C,IAAAA,CAAAA;AACf,UAAA;AAEA,UAAA,IAAIsC,WAAWlE,4BAAAA,EAA8B;AAC3C,YAAA,MAAMuC,kBAAAA,CAAmBC,WAAWlC,KAAAA,CAAAA;AACtC,UAAA;AACA,UAAA,MAAMoF,aAAAA,GAAgB1E,iBAAAA,CAAkBY,IAAAA,CAAKX,KAAAA,EAAOX,KAAAA,CAAAA;AAEpD,UAAA,IAAI4D,WAAWnE,KAAAA,EAAO;AACpBoE,YAAAA,MAAAA,CAAOpE,KAAAA,CAAM,CAAA,qBAAA,EAAwBgC,KAAAA,CAAAA,wCAAAA,CAAAA,EAAiD;AACpFtB,cAAAA,WAAAA,EAAaH,KAAAA,CAAMG;aACrB,CAAA;AACF,UAAA;AAEA,UAAA,MAAMwE,SAAAA,GAAY;AAChB,YAAA,GAAGtD,cAAcC,IAAAA,CAAAA;YACjBX,KAAAA,EAAOyE;AACT,WAAA;AACA,UAAA,IAAIxB,WAAWjE,mBAAAA,EAAqB;AAClC,YAAA,OAAOwD,sBAAAA,CAAuBY,wBAAAA,EAA0B/D,KAAAA,EAAOyB,KAAAA,EAAO,SAASkD,SAAAA,CAAAA;AACjF,UAAA;AACA,UAAA,OAAOT,MAAMS,SAAAA,CAAAA;AACf,QAAA,CAAA;AAEA,QAAA,MAAMsB,SAAAA,CAAU,EAAExE,KAAAA,EAAOH,IAAAA,EAAM4C,OAAK,EAAqC;AACvE,UAAA,IACE,CAACN,WAAW9E,mBAAAA,IACZ0C,2BAAAA,CAA4BC,OAAOmC,UAAAA,CAAAA,IACnCtC,KAAK+C,uBAAAA,EACL;AACA,YAAA,OAAOH,KAAAA,CAAM7C,aAAAA,CAAcC,IAAAA,CAAAA,CAAAA;AAC7B,UAAA;AAEA,UAAA,MAAMtB,QAAQ1B,mBAAAA,EAAAA;AACdqD,UAAAA,iBAAAA,CAAkBF,KAAAA,EAAO,WAAA,EAAazB,KAAAA,EAAO4D,UAAAA,CAAAA;AAC7C,UAAA,IAAI,CAAC5D,OAAOG,WAAAA,EAAa;AACvB,YAAA,OAAO+D,MAAM5C,IAAAA,CAAAA;AACf,UAAA;AAEA,UAAA,IAAIsC,WAAWlE,4BAAAA,EAA8B;AAC3C,YAAA,MAAMuC,kBAAAA,CAAmBC,WAAWlC,KAAAA,CAAAA;AACtC,UAAA;AACA,UAAA,MAAMoF,aAAAA,GAAgB1E,iBAAAA,CAAkBY,IAAAA,CAAKX,KAAAA,EAAOX,KAAAA,CAAAA;AAEpD,UAAA,IAAI4D,WAAWnE,KAAAA,EAAO;AACpBoE,YAAAA,MAAAA,CAAOpE,KAAAA,CAAM,CAAA,qBAAA,EAAwBgC,KAAAA,CAAAA,4CAAAA,CAAAA,EAAqD;AACxFtB,cAAAA,WAAAA,EAAaH,KAAAA,CAAMG;aACrB,CAAA;AACF,UAAA;AAEA,UAAA,MAAMwE,SAAAA,GAAY;AAChB,YAAA,GAAGtD,cAAcC,IAAAA,CAAAA;YACjBX,KAAAA,EAAOyE;AACT,WAAA;AACA,UAAA,IAAIxB,WAAWjE,mBAAAA,EAAqB;AAClC,YAAA,OAAOwD,sBAAAA,CAAuBY,wBAAAA,EAA0B/D,KAAAA,EAAOyB,KAAAA,EAAO,aAAakD,SAAAA,CAAAA;AACrF,UAAA;AACA,UAAA,OAAOT,MAAMS,SAAAA,CAAAA;AACf,QAAA,CAAA;AAEA,QAAA,MAAMuB,OAAAA,CAAQ,EAAEzE,KAAAA,EAAOH,IAAAA,EAAM4C,OAAK,EAAqC;AACrE,UAAA,IACE,CAACN,WAAW9E,mBAAAA,IACZ0C,2BAAAA,CAA4BC,OAAOmC,UAAAA,CAAAA,IACnCtC,KAAK+C,uBAAAA,EACL;AACA,YAAA,OAAOH,KAAAA,CAAM7C,aAAAA,CAAcC,IAAAA,CAAAA,CAAAA;AAC7B,UAAA;AAEA,UAAA,MAAMtB,QAAQ1B,mBAAAA,EAAAA;AACdqD,UAAAA,iBAAAA,CAAkBF,KAAAA,EAAO,SAAA,EAAWzB,KAAAA,EAAO4D,UAAAA,CAAAA;AAC3C,UAAA,IAAI,CAAC5D,OAAOG,WAAAA,EAAa;AACvB,YAAA,OAAO+D,MAAM5C,IAAAA,CAAAA;AACf,UAAA;AAEA,UAAA,IAAIsC,WAAWlE,4BAAAA,EAA8B;AAC3C,YAAA,MAAMuC,kBAAAA,CAAmBC,WAAWlC,KAAAA,CAAAA;AACtC,UAAA;AACA,UAAA,MAAMoF,aAAAA,GAAgB1E,iBAAAA,CAAkBY,IAAAA,CAAKX,KAAAA,EAAOX,KAAAA,CAAAA;AAEpD,UAAA,IAAI4D,WAAWnE,KAAAA,EAAO;AACpBoE,YAAAA,MAAAA,CAAOpE,KAAAA,CAAM,CAAA,qBAAA,EAAwBgC,KAAAA,CAAAA,0CAAAA,CAAAA,EAAmD;AACtFtB,cAAAA,WAAAA,EAAaH,KAAAA,CAAMG;aACrB,CAAA;AACF,UAAA;AAEA,UAAA,MAAMwE,SAAAA,GAAY;AAChB,YAAA,GAAGtD,cAAcC,IAAAA,CAAAA;YACjBX,KAAAA,EAAOyE;AACT,WAAA;AACA,UAAA,IAAIxB,WAAWjE,mBAAAA,EAAqB;AAClC,YAAA,OAAOwD,sBAAAA,CAAuBY,wBAAAA,EAA0B/D,KAAAA,EAAOyB,KAAAA,EAAO,WAAWkD,SAAAA,CAAAA;AACnF,UAAA;AACA,UAAA,OAAOT,MAAMS,SAAAA,CAAAA;AACf,QAAA,CAAA;;;;AAMA,QAAA,MAAM/B,MAAAA,CAAO,EAAEnB,KAAAA,EAAOH,IAAAA,EAAM4C,OAAK,EAAqC;AACpE,UAAA,IACE,CAACN,WAAW7E,qBAAAA,IACZyC,2BAAAA,CAA4BC,OAAOmC,UAAAA,CAAAA,IACnCtC,KAAK+C,uBAAAA,EACL;AACA,YAAA,OAAOH,KAAAA,CAAM7C,aAAAA,CAAcC,IAAAA,CAAAA,CAAAA;AAC7B,UAAA;AAEA,UAAA,MAAMtB,QAAQ1B,mBAAAA,EAAAA;AACdqD,UAAAA,iBAAAA,CAAkBF,KAAAA,EAAO,QAAA,EAAUzB,KAAAA,EAAO4D,UAAAA,CAAAA;AAC1C,UAAA,IAAI,CAAC5D,OAAOG,WAAAA,EAAa;AACvB,YAAA,OAAO+D,MAAM5C,IAAAA,CAAAA;AACf,UAAA;AAEA,UAAA,IAAIsC,WAAWlE,4BAAAA,EAA8B;AAC3C,YAAA,MAAMuC,kBAAAA,CAAmBC,WAAWlC,KAAAA,CAAAA;AACtC,UAAA;AACA,UAAA,MAAMoF,aAAAA,GAAgB1E,iBAAAA,CAAkBY,IAAAA,CAAKX,KAAAA,EAAOX,KAAAA,CAAAA;AAEpD,UAAA,IAAI4D,WAAWnE,KAAAA,EAAO;AACpBoE,YAAAA,MAAAA,CAAOpE,KAAAA,CAAM,CAAA,qBAAA,EAAwBgC,KAAAA,CAAAA,yCAAAA,CAAAA,EAAkD;AACrFtB,cAAAA,WAAAA,EAAaH,KAAAA,CAAMG;aACrB,CAAA;AACF,UAAA;AAEA,UAAA,MAAMwE,SAAAA,GAAY;AAChB,YAAA,GAAGtD,cAAcC,IAAAA,CAAAA;YACjBX,KAAAA,EAAOyE;AACT,WAAA;AACA,UAAA,IAAIxB,WAAWjE,mBAAAA,EAAqB;AAClC,YAAA,OAAOwD,sBAAAA,CAAuBY,wBAAAA,EAA0B/D,KAAAA,EAAOyB,KAAAA,EAAO,UAAUkD,SAAAA,CAAAA;AAClF,UAAA;AACA,UAAA,OAAOT,MAAMS,SAAAA,CAAAA;AACf,QAAA,CAAA;AAEA,QAAA,MAAMwB,UAAAA,CAAW,EAAE1E,KAAAA,EAAOH,IAAAA,EAAM4C,OAAK,EAAqC;AACxE,UAAA,IACE,CAACN,WAAW7E,qBAAAA,IACZyC,2BAAAA,CAA4BC,OAAOmC,UAAAA,CAAAA,IACnCtC,KAAK+C,uBAAAA,EACL;AACA,YAAA,OAAOH,KAAAA,CAAM7C,aAAAA,CAAcC,IAAAA,CAAAA,CAAAA;AAC7B,UAAA;AAEA,UAAA,MAAMtB,QAAQ1B,mBAAAA,EAAAA;AACdqD,UAAAA,iBAAAA,CAAkBF,KAAAA,EAAO,YAAA,EAAczB,KAAAA,EAAO4D,UAAAA,CAAAA;AAC9C,UAAA,IAAI,CAAC5D,OAAOG,WAAAA,EAAa;AACvB,YAAA,OAAO+D,MAAM5C,IAAAA,CAAAA;AACf,UAAA;AAEA,UAAA,IAAIsC,WAAWlE,4BAAAA,EAA8B;AAC3C,YAAA,MAAMuC,kBAAAA,CAAmBC,WAAWlC,KAAAA,CAAAA;AACtC,UAAA;AACA,UAAA,MAAMoF,aAAAA,GAAgB1E,iBAAAA,CAAkBY,IAAAA,CAAKX,KAAAA,EAAOX,KAAAA,CAAAA;AAEpD,UAAA,IAAI4D,WAAWnE,KAAAA,EAAO;AACpBoE,YAAAA,MAAAA,CAAOpE,KAAAA,CAAM,CAAA,qBAAA,EAAwBgC,KAAAA,CAAAA,6CAAAA,CAAAA,EAAsD;AACzFtB,cAAAA,WAAAA,EAAaH,KAAAA,CAAMG;aACrB,CAAA;AACF,UAAA;AAEA,UAAA,MAAMwE,SAAAA,GAAY;AAChB,YAAA,GAAGtD,cAAcC,IAAAA,CAAAA;YACjBX,KAAAA,EAAOyE;AACT,WAAA;AACA,UAAA,IAAIxB,WAAWjE,mBAAAA,EAAqB;AAClC,YAAA,OAAOwD,sBAAAA,CAAuBY,wBAAAA,EAA0B/D,KAAAA,EAAOyB,KAAAA,EAAO,cAAckD,SAAAA,CAAAA;AACtF,UAAA;AACA,UAAA,OAAOT,MAAMS,SAAAA,CAAAA;AACf,QAAA;AACF;AACF;GACF,CAAA;AACF;AArqBgBjB,MAAAA,CAAAA,qBAAAA,EAAAA,uBAAAA,CAAAA","file":"chunk-EJPRCENB.js","sourcesContent":["/**\n * Prisma Workspace Extension\n *\n * Automatically injects workspaceId into ALL Prisma operations using\n * request-scoped context from AsyncLocalStorage:\n *\n * **Write operations** (create, createMany, update, upsert):\n * - Auto-populates `workspaceId`, `tenantId`, `createdBy`, `updatedBy`, `context` JSON\n *\n * **Read operations** (findMany, findFirst, findUnique, count, aggregate, groupBy):\n * - Auto-injects `workspaceId` into the `where` clause for workspace isolation\n *\n * **Delete operations** (delete, deleteMany):\n * - Auto-injects `workspaceId` into the `where` clause to prevent cross-workspace deletion\n *\n * **Update where clause** (update, updateMany):\n * - Auto-injects `workspaceId` into the `where` clause to prevent cross-workspace updates\n *\n * **How it works:**\n * 1. The GraphQL server's buildContext extracts workspaceId from x-workspace-id header\n * 2. The workspace context store (AsyncLocalStorage) holds the current request's workspace info\n * 3. This Prisma extension intercepts ALL operations and auto-injects workspaceId\n *\n * **What gets auto-populated on writes:**\n * - `workspaceId` field (String or String?) - set from context if not explicitly provided\n * - `context` field (Json) - merged with workspace/actor info if not explicitly provided\n * - `tenantId` field (String or String?) - set from context if not explicitly provided\n * - `createdBy` / `updatedBy` fields - set from actor context if not explicitly provided\n *\n * **What gets auto-injected on reads/updates/deletes:**\n * - `workspaceId` in the `where` clause - ensures queries only access data within the workspace\n *\n * **Opt-out:**\n * - Explicitly providing `workspaceId` in the where/data will override auto-injection\n * - Pass `_skipWorkspaceInjection: true` in the query args to skip entirely\n * - Set `enableReadIsolation: false` in config to disable read-side injection only\n * - Add model names to `excludeModels` to skip specific models\n *\n * @module prisma/workspace-extension\n * @category Database\n */\n\nimport { AsyncLocalStorage } from 'node:async_hooks';\nimport { logger } from '../logger/index.js';\nimport type { InputJsonValue } from './context.js';\n\n// ============================================================================\n// Workspace Context Store (AsyncLocalStorage)\n// ============================================================================\n\n/**\n * Workspace context for the current request scope\n */\nexport interface WorkspaceContext {\n  /** Workspace ID (from x-workspace-id header) */\n  workspaceId?: string;\n  /** Tenant ID (from x-tenant-id header or derived from workspace) */\n  tenantId?: string;\n  /** Actor ID (user/service/app performing the operation) */\n  actorId?: string;\n  /** Actor type (user, app, service, super_admin) */\n  actorType?: string;\n  /** Organization ID */\n  organizationId?: string;\n  /** Project ID */\n  projectId?: string;\n  /** App ID */\n  appId?: string;\n  /** On behalf of actor ID (for consent-based delegation) */\n  onBehalfOf?: string;\n}\n\n/**\n * AsyncLocalStorage for workspace context\n * This is separate from the SDK's general ContextManager to allow\n * fine-grained control over workspace-specific context propagation.\n */\nconst workspaceContextStore = new AsyncLocalStorage<WorkspaceContext>();\n\n/**\n * Fallback context for environments where AsyncLocalStorage.enterWith()\n * doesn't propagate across async boundaries (e.g., Bun + GraphQL Yoga).\n *\n * IMPORTANT: This is NOT request-isolated — it's a module-level singleton.\n * It works for single-request-at-a-time scenarios but could race under\n * concurrent requests. The ALS is the primary mechanism; this is a fallback.\n */\nlet fallbackContext: WorkspaceContext | undefined;\n\n/**\n * Set workspace context for the current async scope.\n * Call this in your GraphQL context builder or middleware.\n *\n * Uses AsyncLocalStorage.enterWith() as the primary mechanism,\n * with a module-level fallback for runtimes where enterWith()\n * doesn't propagate through all async chains (e.g., Bun).\n *\n * @param context - The workspace context for this request\n *\n * @example\n * ```typescript\n * // In your server's buildContext:\n * import { setWorkspaceContext } from '@burdenoff/be-sdk/prisma';\n *\n * buildContext: async (defaultContext) => {\n *   setWorkspaceContext({\n *     workspaceId: defaultContext.workspace?.id,\n *     tenantId: defaultContext.tenant?.id,\n *     actorId: defaultContext.actor?.id,\n *     actorType: defaultContext.actor?.type,\n *     organizationId: defaultContext.organization?.id,\n *   });\n *   return defaultContext;\n * }\n * ```\n */\nexport function setWorkspaceContext(context: WorkspaceContext): void {\n  workspaceContextStore.enterWith(context);\n  fallbackContext = context;\n}\n\n/**\n * Get the current workspace context from AsyncLocalStorage.\n * Falls back to module-level context if ALS returns undefined\n * (can happen in Bun where enterWith() doesn't propagate through\n * some async chains like GraphQL Yoga's execution pipeline).\n *\n * @returns The current workspace context, or undefined if not set\n */\nexport function getWorkspaceContext(): WorkspaceContext | undefined {\n  return workspaceContextStore.getStore() ?? fallbackContext;\n}\n\n/**\n * Run a function with a specific workspace context.\n * The context is isolated to this execution and its children.\n *\n * @param context - The workspace context\n * @param fn - The function to run\n * @returns The result of the function\n *\n * @example\n * ```typescript\n * const result = await withWorkspaceContext(\n *   { workspaceId: 'ws-123', actorId: 'user-456' },\n *   async () => {\n *     // All Prisma operations in here will auto-inject workspaceId\n *     return await prisma.tag.create({ data: { name: 'test' } });\n *   }\n * );\n * ```\n */\nexport async function withWorkspaceContext<T>(context: WorkspaceContext, fn: () => Promise<T>): Promise<T> {\n  return workspaceContextStore.run(context, fn);\n}\n\n/**\n * Run a synchronous function with a specific workspace context.\n */\nexport function withWorkspaceContextSync<T>(context: WorkspaceContext, fn: () => T): T {\n  return workspaceContextStore.run(context, fn);\n}\n\n// ============================================================================\n// Extension Configuration\n// ============================================================================\n\n/**\n * Configuration for the workspace extension\n */\nexport interface WorkspaceExtensionConfig {\n  /**\n   * Enable automatic workspaceId injection on create/update\n   * @default true\n   */\n  enabled?: boolean;\n\n  /**\n   * Enable automatic workspaceId injection on read operations\n   * (findMany, findFirst, findUnique, findFirstOrThrow, findUniqueOrThrow,\n   *  count, aggregate, groupBy)\n   *\n   * When enabled, every read query automatically includes `workspaceId`\n   * in the `where` clause, preventing cross-workspace data leakage.\n   *\n   * @default true\n   */\n  enableReadIsolation?: boolean;\n\n  /**\n   * Enable automatic workspaceId injection on delete operations\n   * (delete, deleteMany)\n   *\n   * When enabled, every delete operation automatically includes `workspaceId`\n   * in the `where` clause, preventing cross-workspace deletion.\n   *\n   * @default true\n   */\n  enableDeleteIsolation?: boolean;\n\n  /**\n   * Enable automatic workspaceId injection into update/updateMany `where` clauses.\n   *\n   * When enabled, update operations automatically include `workspaceId`\n   * in the `where` clause in addition to the `data` injection,\n   * preventing cross-workspace updates.\n   *\n   * @default true\n   */\n  enableUpdateWhereIsolation?: boolean;\n\n  /**\n   * Automatically populate the `context` JSON field with workspace/actor info\n   * @default true\n   */\n  populateContextJson?: boolean;\n\n  /**\n   * Automatically populate `createdBy` field on create operations\n   * @default true\n   */\n  populateCreatedBy?: boolean;\n\n  /**\n   * Automatically populate `updatedBy` field on update operations\n   * @default true\n   */\n  populateUpdatedBy?: boolean;\n\n  /**\n   * Automatically populate `tenantId` field from context\n   * @default false (tenantId is typically derived from workspaceId at the DB level)\n   */\n  populateTenantId?: boolean;\n\n  /**\n   * Models to exclude from auto-injection (both reads and writes).\n   * Use this for models that intentionally don't have workspaceId.\n   *\n   * Common exclusions: system tables, infra tables, global reference data.\n   *\n   * @default []\n   */\n  excludeModels?: string[];\n\n  /**\n   * Models to exclude from read isolation only.\n   * These models will still get write-side injection (workspaceId on create)\n   * but reads will NOT have workspaceId auto-injected into `where`.\n   *\n   * Use this for child/join tables where workspace scoping is inherited\n   * through parent relations, or for models queried by ID that don't\n   * have a workspaceId column.\n   *\n   * @default []\n   */\n  excludeModelsFromReadIsolation?: string[];\n\n  /**\n   * When true, throws an error if workspaceId is missing from context\n   * for any non-excluded model operation. This prevents silent\n   * workspace-unscoped queries that could leak data across workspaces.\n   *\n   * When false, operations without workspace context proceed without\n   * workspaceId injection (legacy behavior).\n   *\n   * @default true\n   */\n  strictMode?: boolean;\n\n  /**\n   * Operations that are allowed without workspace context even in strict mode.\n   * Use `Model.operation` format (e.g., `['Workspace.create', 'RevokedToken.findMany']`).\n   *\n   * Valid operation names: create, createMany, createManyAndReturn, update, updateMany,\n   * upsert, findMany, findFirst, findFirstOrThrow, findUnique, findUniqueOrThrow,\n   * count, aggregate, groupBy, delete, deleteMany.\n   *\n   * @default []\n   */\n  allowedUnguardedOperations?: string[];\n\n  /**\n   * Log injection events (useful for debugging)\n   * @default false\n   */\n  debug?: boolean;\n\n  /**\n   * Tag the PostgreSQL connection with workspace attribution for pg_stat_activity visibility.\n   *\n   * When enabled, the first DB operation per workspace context sets:\n   *   `application_name = 'svc=<SERVICE_NAME>;ws=<workspaceId>'`\n   *\n   * This makes workspace-level query attribution visible in pg_stat_activity,\n   * pg_locks, auto_explain, and monitoring tools without any schema changes.\n   * Subsequent operations in the same request are deduplicated via WeakSet,\n   * costing ~0 overhead after the first round-trip per request context.\n   *\n   * NOTE: This is a session-level SET so attribution may drift across ops\n   * that reuse the same pooled connection from different requests. Use for\n   * aggregate observability, not per-query forensics.\n   *\n   * @default false\n   */\n  enableApplicationNameTagging?: boolean;\n\n  /**\n   * Set the `app.workspace_id` GUC for Row Level Security enforcement.\n   *\n   * When enabled, the first DB operation per workspace context executes:\n   *   `SET app.workspace_id = '<workspaceId>'`\n   *\n   * RLS policies using `current_setting('app.workspace_id', true)` then filter\n   * rows by workspace, providing a defense-in-depth backstop to the application-\n   * layer workspaceId injection in the WHERE clause.\n   *\n   * Pair with migrations that run per table:\n   *   `ALTER TABLE t ENABLE ROW LEVEL SECURITY;`\n   *   `CREATE POLICY ws_isolation ON t\n   *      USING (workspace_id = current_setting('app.workspace_id', true))\n   *      WITH CHECK (workspace_id = current_setting('app.workspace_id', true));`\n   *\n   * Fail-closed semantics: if the GUC is unset (NULL from missing_ok=true),\n   * `workspace_id = NULL` is always false, so RLS returns no rows — leaking\n   * nothing rather than everything.\n   *\n   * NOTE: Uses session-level SET (safe without a pooler or with session-mode\n   * pooling). Upgrade to SET LOCAL inside `$transaction` when PgBouncer\n   * transaction-mode pooling is enabled (Phase 3b).\n   *\n   * @default false\n   */\n  enableRlsGucTagging?: boolean;\n}\n\n/**\n * Default configuration\n */\nconst defaultConfig: Required<WorkspaceExtensionConfig> = {\n  enabled: true,\n  enableReadIsolation: true,\n  enableDeleteIsolation: true,\n  enableUpdateWhereIsolation: true,\n  populateContextJson: true,\n  populateCreatedBy: true,\n  populateUpdatedBy: true,\n  populateTenantId: false,\n  excludeModels: [],\n  excludeModelsFromReadIsolation: [],\n  strictMode: true,\n  allowedUnguardedOperations: [],\n  debug: false,\n  enableApplicationNameTagging: false,\n  enableRlsGucTagging: false,\n};\n\n// ============================================================================\n// Data Injection Helpers\n// ============================================================================\n\n/**\n * Check if a field exists in the data object (including being set to null/undefined explicitly)\n */\nfunction hasField(data: Record<string, unknown>, field: string): boolean {\n  return field in data;\n}\n\n/**\n * Inject workspace-related fields into create data\n */\nfunction injectCreateFields(\n  data: Record<string, unknown>,\n  wsCtx: WorkspaceContext,\n  config: Required<WorkspaceExtensionConfig>\n): Record<string, unknown> {\n  const injected = { ...data };\n\n  // Inject workspaceId if not already provided\n  if (wsCtx.workspaceId && !hasField(injected, 'workspaceId')) {\n    injected['workspaceId'] = wsCtx.workspaceId;\n  }\n\n  // Inject tenantId if configured and not already provided\n  if (config.populateTenantId && wsCtx.tenantId && !hasField(injected, 'tenantId')) {\n    injected['tenantId'] = wsCtx.tenantId;\n  }\n\n  // Inject createdBy if configured and not already provided\n  if (config.populateCreatedBy && wsCtx.actorId && !hasField(injected, 'createdBy')) {\n    injected['createdBy'] = wsCtx.actorId;\n  }\n\n  // Inject updatedBy on create as well (initial value)\n  if (config.populateUpdatedBy && wsCtx.actorId && !hasField(injected, 'updatedBy')) {\n    injected['updatedBy'] = wsCtx.actorId;\n  }\n\n  // Inject onBehalfOf (for consent-based delegation tracking)\n  // If onBehalfOf is in context (from consent), use it; otherwise defaults to actorId (self-action)\n  if (wsCtx.onBehalfOf && !hasField(injected, 'onBehalfOf')) {\n    injected['onBehalfOf'] = wsCtx.onBehalfOf;\n  } else if (wsCtx.actorId && !hasField(injected, 'onBehalfOf')) {\n    // Default to actorId if no delegation (self-action)\n    injected['onBehalfOf'] = wsCtx.actorId;\n  }\n\n  // Populate context JSON field\n  if (config.populateContextJson && !hasField(injected, 'context')) {\n    const contextJson = buildContextJsonFromWorkspaceContext(wsCtx);\n    if (contextJson) {\n      injected['context'] = contextJson;\n    }\n  }\n\n  return injected;\n}\n\n/**\n * Inject workspace-related fields into update data\n */\nfunction injectUpdateFields(\n  data: Record<string, unknown>,\n  wsCtx: WorkspaceContext,\n  config: Required<WorkspaceExtensionConfig>\n): Record<string, unknown> {\n  const injected = { ...data };\n\n  // Inject updatedBy if configured and not already provided\n  if (config.populateUpdatedBy && wsCtx.actorId && !hasField(injected, 'updatedBy')) {\n    injected['updatedBy'] = wsCtx.actorId;\n  }\n\n  // Note: We intentionally do NOT auto-inject workspaceId on updates\n  // because updates target existing records (workspaceId is immutable after creation)\n  // and changing it would be a data integrity issue.\n\n  return injected;\n}\n\n/**\n * Inject workspaceId into a where clause.\n * Only injects if workspaceId is available in context and not already present in where.\n *\n * For operations that may not have a where clause (e.g., findMany without filters),\n * creates a new where object with just workspaceId.\n */\nfunction injectWhereClause(\n  where: Record<string, unknown> | undefined,\n  wsCtx: WorkspaceContext\n): Record<string, unknown> | undefined {\n  if (!wsCtx.workspaceId) return where;\n\n  if (!where) {\n    // No where clause exists, create one with just workspaceId\n    return { workspaceId: wsCtx.workspaceId };\n  }\n\n  // Only inject if not already present\n  if (!hasField(where, 'workspaceId')) {\n    return { ...where, workspaceId: wsCtx.workspaceId };\n  }\n\n  return where;\n}\n\n/**\n * Build context JSON from workspace context\n */\nfunction buildContextJsonFromWorkspaceContext(wsCtx: WorkspaceContext): InputJsonValue | undefined {\n  const context: Record<string, string> = {};\n\n  if (wsCtx.workspaceId) context['workspaceId'] = wsCtx.workspaceId;\n  if (wsCtx.actorId) context['userId'] = wsCtx.actorId;\n  if (wsCtx.organizationId) context['organizationId'] = wsCtx.organizationId;\n  if (wsCtx.projectId) context['projectId'] = wsCtx.projectId;\n  if (wsCtx.appId) context['appId'] = wsCtx.appId;\n\n  return Object.keys(context).length > 0 ? context : undefined;\n}\n\n/**\n * Inject workspaceId into where clause for read/update/delete operations.\n * This is a utility function exported for services that want to manually\n * add workspace scoping to their queries.\n *\n * @param where - The existing where clause\n * @param wsCtx - The workspace context (or auto-detected from AsyncLocalStorage)\n * @returns The where clause with workspaceId injected if not already present\n *\n * @example\n * ```typescript\n * import { injectWhereWorkspaceId, getWorkspaceContext } from '@burdenoff/be-sdk/prisma';\n *\n * const wsCtx = getWorkspaceContext();\n * const where = injectWhereWorkspaceId({ status: 'ACTIVE' }, wsCtx);\n * // Result: { status: 'ACTIVE', workspaceId: 'ws-123' }\n * ```\n */\nexport function injectWhereWorkspaceId(\n  where: Record<string, unknown> | undefined,\n  wsCtx?: WorkspaceContext\n): Record<string, unknown> | undefined {\n  const ctx = wsCtx ?? getWorkspaceContext();\n  if (!where || !ctx?.workspaceId) return where;\n\n  // Only inject if not already present\n  if (!hasField(where, 'workspaceId')) {\n    return { ...where, workspaceId: ctx.workspaceId };\n  }\n\n  return where;\n}\n\n/**\n * Remove the _skipWorkspaceInjection flag from args before passing to Prisma.\n * Using a dedicated function avoids ESLint unused-variable warnings from destructuring.\n */\nfunction stripSkipFlag<T extends Record<string, unknown>>(args: T): Omit<T, '_skipWorkspaceInjection'> {\n  const cleaned = { ...args };\n  delete (cleaned as Record<string, unknown>)['_skipWorkspaceInjection'];\n  return cleaned;\n}\n\n/**\n * Check if a model should be excluded from read isolation.\n * A model is excluded if it's in excludeModels OR excludeModelsFromReadIsolation.\n */\nfunction isExcludedFromReadIsolation(model: string, config: Required<WorkspaceExtensionConfig>): boolean {\n  return config.excludeModels.includes(model) || config.excludeModelsFromReadIsolation.includes(model);\n}\n\n// ============================================================================\n// Strict Mode Enforcement\n// ============================================================================\n\n/**\n * Enforce strict mode: throw if workspace context is missing and the operation\n * is not explicitly allowed to run without it.\n *\n * @returns true if the operation should proceed without workspace injection (non-strict or allowed)\n * @throws Error if strict mode is enabled and the operation is not allowed\n */\nfunction enforceStrictMode(\n  model: string,\n  operation: string,\n  wsCtx: WorkspaceContext | undefined,\n  config: Required<WorkspaceExtensionConfig>\n): void {\n  // If workspace context has a workspaceId, nothing to enforce\n  if (wsCtx?.workspaceId) return;\n\n  // If strict mode is off, allow silently\n  if (!config.strictMode) return;\n\n  // Check if this specific operation is allowed without workspace context\n  const opKey = `${model}.${operation}`;\n  if (config.allowedUnguardedOperations.includes(opKey)) return;\n\n  // Strict mode violation — throw\n  throw new Error(\n    `[WorkspaceExtension] Workspace context required for ${model}.${operation}. ` +\n      `No workspaceId found in request context. To bypass, either: ` +\n      `(1) add \"${model}\" to excludeModels, ` +\n      `(2) add \"${opKey}\" to allowedUnguardedOperations, or ` +\n      `(3) pass _skipWorkspaceInjection: true in the query args.`\n  );\n}\n\n// ============================================================================\n// Prisma Extension\n// ============================================================================\n\n/**\n * Standard args shape for operations with a `where` clause\n */\ninterface WhereArgs {\n  where?: Record<string, unknown>;\n  _skipWorkspaceInjection?: boolean;\n  [key: string]: unknown;\n}\n\n/**\n * Standard handler params from Prisma $extends\n */\ninterface ExtensionHandlerParams<TArgs> {\n  model: string;\n  args: TArgs;\n  query: (args: unknown) => Promise<unknown>;\n}\n\n/**\n * Add workspace extension to a Prisma client.\n *\n * This extension provides comprehensive workspace isolation by automatically\n * injecting workspaceId into ALL Prisma operations:\n *\n * **Writes**: Auto-populates workspaceId, tenantId, createdBy, updatedBy, context JSON\n * **Reads**: Auto-injects workspaceId into where clause (findMany, findFirst, etc.)\n * **Updates**: Auto-injects workspaceId into where clause + updatedBy into data\n * **Deletes**: Auto-injects workspaceId into where clause\n *\n * **Chain order matters**: Apply this extension AFTER the graph extension\n * (handled automatically by createDatabaseClient).\n *\n * @param baseClient - The Prisma client to extend\n * @param config - Extension configuration\n * @returns Extended Prisma client with workspace auto-injection\n *\n * @example\n * ```typescript\n * import { PrismaClient } from './generated/prisma/client.js';\n * import { addWorkspaceExtension } from '@burdenoff/be-sdk/prisma';\n *\n * const baseClient = new PrismaClient({ adapter });\n * const client = addWorkspaceExtension(baseClient, {\n *   populateContextJson: true,\n *   populateCreatedBy: true,\n *   enableReadIsolation: true,\n *   debug: process.env.NODE_ENV === 'development',\n *   excludeModels: ['CircuitBreakerState', 'SchedulerState'],\n *   excludeModelsFromReadIsolation: ['Permission', 'RbacResourceType'],\n * });\n * ```\n */\n// ============================================================================\n// Connection Tagging (Phase 0.2)\n// ============================================================================\n\n/** Minimal Prisma raw-exec surface needed for SET application_name */\ntype RawPrismaForTagging = {\n  $executeRawUnsafe: (query: string, ...values: unknown[]) => Promise<number>;\n};\n\n/**\n * WeakSet of contexts that have already had the connection tagged this request.\n * WorkspaceContext objects live only for the duration of a request, so entries\n * are automatically GC'd when the context goes out of scope — no manual cleanup.\n */\nconst taggedContexts = new WeakSet<WorkspaceContext>();\n\n/**\n * Tag the current Postgres connection with workspace attribution (once per context).\n * Sets `application_name = 'svc=<name>;ws=<workspaceId>'` at the session level.\n * Non-fatal: tagging failures are swallowed so the main operation still proceeds.\n *\n * @internal Exported for unit testing only — do not call from product code.\n */\nexport async function maybeTagConnection(rawPrisma: RawPrismaForTagging, wsCtx: WorkspaceContext): Promise<void> {\n  if (taggedContexts.has(wsCtx)) return;\n  taggedContexts.add(wsCtx);\n  // Strip non-safe chars; workspace IDs are UUIDs/CUIDs, service names are kebab-case\n  const safeSvc = (process.env['SERVICE_NAME'] ?? 'svc').replace(/[^a-zA-Z0-9\\-_]/g, '');\n  const safeWs = (wsCtx.workspaceId ?? '').replace(/[^a-zA-Z0-9\\-_]/g, '');\n  const tag = `svc=${safeSvc};ws=${safeWs}`;\n  try {\n    await rawPrisma.$executeRawUnsafe(`SET application_name = '${tag}'`);\n  } catch {\n    // Retry on the next operation if this one failed\n    taggedContexts.delete(wsCtx);\n  }\n}\n\n// ============================================================================\n// RLS GUC Tagging (Phase 3)\n// ============================================================================\n\n/**\n * WeakSet of contexts that have already had the RLS GUC set this request.\n */\nconst rlsTaggedContexts = new WeakSet<WorkspaceContext>();\n\n/**\n * Set `app.workspace_id` GUC for RLS enforcement (once per context, session-level).\n *\n * When set, RLS policies using `current_setting('app.workspace_id', true)` filter\n * rows to the current workspace. Non-fatal: failures are swallowed and retried on\n * the next operation via WeakSet entry removal.\n *\n * NOT used by the extension's operation handlers below (see\n * `runOperationWithRlsGuc`) — session-level `SET` is unsafe once traffic is routed\n * through PgBouncer in transaction-pooling mode (see that function's doc comment\n * for the full incident writeup, BOFF-5488). Kept as a standalone export, still\n * unit tested, for any caller that genuinely runs on an unpooled/session-pooled\n * connection where session-level `SET` is sufficient.\n *\n * @internal Exported for unit testing only — do not call from product code.\n */\nexport async function maybeSetRlsGuc(rawPrisma: RawPrismaForTagging, wsCtx: WorkspaceContext): Promise<void> {\n  if (rlsTaggedContexts.has(wsCtx)) return;\n  rlsTaggedContexts.add(wsCtx);\n  // Allow alphanumeric, hyphens, underscores — CUID/UUID safe, prevents SQL injection\n  const safeWs = (wsCtx.workspaceId ?? '').replace(/[^a-zA-Z0-9\\-_]/g, '');\n  try {\n    await rawPrisma.$executeRawUnsafe(`SET app.workspace_id = '${safeWs}'`);\n  } catch {\n    // Retry on the next operation if this one failed\n    rlsTaggedContexts.delete(wsCtx);\n  }\n}\n\n/**\n * A Prisma interactive-transaction client (`tx` inside `$transaction(async (tx) =>\n * …)`), typed with just enough surface for `runOperationWithRlsGuc`: raw SQL\n * execution, plus one delegate per model keyed by its Prisma Client property name\n * (e.g. `customer`, `driver`). The index signature is `unknown` (not a concrete\n * delegate shape) because this helper is generic across every model in the schema\n * — callers narrow and verify the specific delegate/method they need at runtime.\n */\ntype PrismaTxForRlsGuc = {\n  $executeRawUnsafe: (query: string, ...values: unknown[]) => Promise<number>;\n  [modelClientProperty: string]: unknown;\n};\n\n/** Minimal Prisma client surface needed to open an interactive transaction. */\ntype RawPrismaForRlsTransaction = {\n  $transaction: <TResult>(fn: (tx: PrismaTxForRlsGuc) => Promise<TResult>) => Promise<TResult>;\n};\n\n/**\n * Prisma DMMF model name (e.g. `Customer`) -> Prisma Client delegate property\n * (e.g. `customer`). Matches Prisma's own client-generation rule: lower-case the\n * first character, leave the rest untouched.\n */\nfunction modelToClientProperty(model: string): string {\n  return model.length > 0 ? model.charAt(0).toLowerCase() + model.slice(1) : model;\n}\n\n/**\n * Run a single Prisma operation with `app.workspace_id` set as a\n * **transaction-scoped** (`SET LOCAL`) GUC immediately ahead of it, so Postgres\n * RLS policies using `current_setting('app.workspace_id', true)` see the right\n * value for both the `USING` (read) and `WITH CHECK` (write) clauses.\n *\n * Session-level `SET` (`maybeSetRlsGuc` above, the original Phase 3\n * implementation) is NOT safe once traffic goes through PgBouncer in\n * **transaction pooling mode** — the mode configured on all four\n * `boff-pg-{global,wspace}-{alpha,prod}-cin` servers' built-in PgBouncer (see\n * infra-specs/current-architecture/02-database-postgres-age.md). PgBouncer hands\n * the physical backend connection back to the pool after every standalone\n * statement/implicit transaction, so a `SET` executed by one statement is not\n * guaranteed visible to the very next one, even over what looks like the same\n * logical client connection.\n *\n * This was exactly BOFF-5488: `wspace-movethewheels-svc`'s RLS Phase 3b (FORCE\n * ROW LEVEL SECURITY + a non-owner runtime role, `wspace_movethewheels_app`,\n * pointed at the pooled `:6432` connection) made the `ws_isolation` policy bind\n * for real, but the session-level `SET` from `maybeSetRlsGuc` was landing on a\n * different pooled backend connection than the write that followed it — so every\n * write failed `WITH CHECK` (`new row violates row-level security policy`) and\n * every read matched zero rows.\n *\n * A Prisma **interactive transaction** (`$transaction(async (tx) => …)`) pins one\n * physical connection for the callback's full duration — PgBouncer sees a single\n * unbroken `BEGIN … COMMIT` and cannot reassign the backend mid-transaction — so\n * `SET LOCAL` inside it is guaranteed visible to the operation issued right after\n * it in the same callback. Safe under transaction-mode pooling, session-mode\n * pooling, and with no pooler in front of Postgres at all. The extra round trip\n * (one interactive transaction instead of one direct call) only applies to\n * services that opt into `enableRlsGucTagging` — off by default.\n *\n * @internal Exported for unit testing only — do not call from product code.\n */\nexport async function runOperationWithRlsGuc<TResult>(\n  rootClient: RawPrismaForRlsTransaction,\n  wsCtx: WorkspaceContext,\n  model: string,\n  operation: string,\n  args: unknown\n): Promise<TResult> {\n  const safeWs = (wsCtx.workspaceId ?? '').replace(/[^a-zA-Z0-9\\-_]/g, '');\n  const clientProperty = modelToClientProperty(model);\n  return rootClient.$transaction(async (tx) => {\n    await tx.$executeRawUnsafe(`SET LOCAL app.workspace_id = '${safeWs}'`);\n    // `tx[clientProperty]` is typed `unknown` (see PrismaTxForRlsGuc) because this\n    // helper is generic across every model; narrow to the minimal callable shape\n    // needed and verify at runtime before invoking rather than trusting a cast.\n    const delegate = tx[clientProperty] as Record<string, (opArgs: unknown) => Promise<TResult>> | undefined;\n    const method = delegate?.[operation];\n    if (typeof method !== 'function') {\n      throw new Error(\n        `[WorkspaceExtension] Unable to resolve ${model}.${operation} (client property \"${clientProperty}\") ` +\n          'on the interactive-transaction client for RLS GUC tagging.'\n      );\n    }\n    return method(args);\n  });\n}\n\nexport function addWorkspaceExtension<T>(baseClient: T, config?: WorkspaceExtensionConfig): T {\n  const fullConfig: Required<WorkspaceExtensionConfig> = {\n    ...defaultConfig,\n    ...config,\n  };\n\n  if (!fullConfig.enabled) {\n    logger.info('[WorkspaceExtension] Extension disabled by configuration');\n    return baseClient;\n  }\n\n  // Capture the unwrapped client for connection tagging (pre-extension, avoids recursion)\n  const rawPrisma = baseClient as unknown as RawPrismaForTagging;\n  // Same unwrapped client, typed for the interactive-transaction RLS GUC path\n  // (see runOperationWithRlsGuc) — separate cast so maybeTagConnection/\n  // maybeSetRlsGuc's narrower RawPrismaForTagging type is untouched.\n  const rawPrismaForTransactions = baseClient as unknown as RawPrismaForRlsTransaction;\n\n  // Type assertion for Prisma client $extends\n  const prismaClient = baseClient as { $extends: (args: unknown) => T };\n\n  logger.info('[WorkspaceExtension] Workspace extension enabled', {\n    populateContextJson: fullConfig.populateContextJson,\n    populateCreatedBy: fullConfig.populateCreatedBy,\n    populateUpdatedBy: fullConfig.populateUpdatedBy,\n    populateTenantId: fullConfig.populateTenantId,\n    enableReadIsolation: fullConfig.enableReadIsolation,\n    enableDeleteIsolation: fullConfig.enableDeleteIsolation,\n    enableUpdateWhereIsolation: fullConfig.enableUpdateWhereIsolation,\n    strictMode: fullConfig.strictMode,\n    excludeModels: fullConfig.excludeModels,\n    excludeModelsFromReadIsolation: fullConfig.excludeModelsFromReadIsolation,\n    allowedUnguardedOperations: fullConfig.allowedUnguardedOperations,\n    enableApplicationNameTagging: fullConfig.enableApplicationNameTagging,\n    enableRlsGucTagging: fullConfig.enableRlsGucTagging,\n  });\n\n  return prismaClient.$extends({\n    query: {\n      $allModels: {\n        // ================================================================\n        // WRITE OPERATIONS - inject workspaceId into data\n        // ================================================================\n\n        async create({\n          model,\n          args,\n          query,\n        }: ExtensionHandlerParams<{\n          data: Record<string, unknown>;\n          _skipWorkspaceInjection?: boolean;\n          [key: string]: unknown;\n        }>) {\n          // Skip if model is excluded or injection is explicitly skipped\n          if (fullConfig.excludeModels.includes(model) || args._skipWorkspaceInjection) {\n            return query(stripSkipFlag(args));\n          }\n\n          const wsCtx = getWorkspaceContext();\n          enforceStrictMode(model, 'create', wsCtx, fullConfig);\n          if (!wsCtx?.workspaceId) {\n            return query(args);\n          }\n\n          if (fullConfig.enableApplicationNameTagging) {\n            await maybeTagConnection(rawPrisma, wsCtx);\n          }\n          // Inject fields into data\n          const injectedData = injectCreateFields(args.data, wsCtx, fullConfig);\n\n          if (fullConfig.debug) {\n            const injectedKeys = Object.keys(injectedData).filter((k) => !(k in args.data));\n            if (injectedKeys.length > 0) {\n              logger.debug(`[WorkspaceExtension] ${model}.create - injected: ${injectedKeys.join(', ')}`, {\n                workspaceId: wsCtx.workspaceId,\n                actorId: wsCtx.actorId,\n              });\n            }\n          }\n\n          const finalArgs = {\n            ...stripSkipFlag(args),\n            data: injectedData,\n          };\n          if (fullConfig.enableRlsGucTagging) {\n            return runOperationWithRlsGuc(rawPrismaForTransactions, wsCtx, model, 'create', finalArgs);\n          }\n          return query(finalArgs);\n        },\n\n        async createMany({\n          model,\n          args,\n          query,\n        }: ExtensionHandlerParams<{\n          data: Record<string, unknown> | Record<string, unknown>[];\n          _skipWorkspaceInjection?: boolean;\n          [key: string]: unknown;\n        }>) {\n          if (fullConfig.excludeModels.includes(model) || args._skipWorkspaceInjection) {\n            return query(stripSkipFlag(args));\n          }\n\n          const wsCtx = getWorkspaceContext();\n          enforceStrictMode(model, 'createMany', wsCtx, fullConfig);\n          if (!wsCtx?.workspaceId) {\n            return query(args);\n          }\n\n          if (fullConfig.enableApplicationNameTagging) {\n            await maybeTagConnection(rawPrisma, wsCtx);\n          }\n          // Handle both single object and array\n          const dataArray = Array.isArray(args.data) ? args.data : [args.data];\n          const injectedData = dataArray.map((item) => injectCreateFields(item, wsCtx, fullConfig));\n\n          const finalArgs = {\n            ...stripSkipFlag(args),\n            data: Array.isArray(args.data) ? injectedData : injectedData[0],\n          };\n          if (fullConfig.enableRlsGucTagging) {\n            return runOperationWithRlsGuc(rawPrismaForTransactions, wsCtx, model, 'createMany', finalArgs);\n          }\n          return query(finalArgs);\n        },\n\n        async createManyAndReturn({\n          model,\n          args,\n          query,\n        }: ExtensionHandlerParams<{\n          data: Record<string, unknown> | Record<string, unknown>[];\n          _skipWorkspaceInjection?: boolean;\n          [key: string]: unknown;\n        }>) {\n          if (fullConfig.excludeModels.includes(model) || args._skipWorkspaceInjection) {\n            return query(stripSkipFlag(args));\n          }\n\n          const wsCtx = getWorkspaceContext();\n          enforceStrictMode(model, 'createManyAndReturn', wsCtx, fullConfig);\n          if (!wsCtx?.workspaceId) {\n            return query(args);\n          }\n\n          if (fullConfig.enableApplicationNameTagging) {\n            await maybeTagConnection(rawPrisma, wsCtx);\n          }\n          const dataArray = Array.isArray(args.data) ? args.data : [args.data];\n          const injectedData = dataArray.map((item) => injectCreateFields(item, wsCtx, fullConfig));\n\n          const finalArgs = {\n            ...stripSkipFlag(args),\n            data: Array.isArray(args.data) ? injectedData : injectedData[0],\n          };\n          if (fullConfig.enableRlsGucTagging) {\n            return runOperationWithRlsGuc(rawPrismaForTransactions, wsCtx, model, 'createManyAndReturn', finalArgs);\n          }\n          return query(finalArgs);\n        },\n\n        // ================================================================\n        // UPDATE OPERATIONS - inject updatedBy into data + workspaceId into where\n        // ================================================================\n\n        async update({\n          model,\n          args,\n          query,\n        }: ExtensionHandlerParams<{\n          data: Record<string, unknown>;\n          where?: Record<string, unknown>;\n          _skipWorkspaceInjection?: boolean;\n          [key: string]: unknown;\n        }>) {\n          if (fullConfig.excludeModels.includes(model) || args._skipWorkspaceInjection) {\n            return query(stripSkipFlag(args));\n          }\n\n          const wsCtx = getWorkspaceContext();\n          enforceStrictMode(model, 'update', wsCtx, fullConfig);\n          if (!wsCtx?.workspaceId) {\n            return query(args);\n          }\n\n          if (fullConfig.enableApplicationNameTagging) {\n            await maybeTagConnection(rawPrisma, wsCtx);\n          }\n          const injectedData = injectUpdateFields(args.data, wsCtx, fullConfig);\n\n          // Inject workspaceId into where clause for update isolation\n          let injectedWhere = args.where;\n          if (fullConfig.enableUpdateWhereIsolation && !isExcludedFromReadIsolation(model, fullConfig)) {\n            injectedWhere = injectWhereClause(args.where, wsCtx);\n          }\n\n          if (fullConfig.debug) {\n            const injectedDataKeys = Object.keys(injectedData).filter((k) => !(k in args.data));\n            const whereChanged = injectedWhere !== args.where;\n            if (injectedDataKeys.length > 0 || whereChanged) {\n              logger.debug(\n                `[WorkspaceExtension] ${model}.update - injected data: ${injectedDataKeys.join(', ')}${whereChanged ? ', where: workspaceId' : ''}`\n              );\n            }\n          }\n\n          const finalArgs = {\n            ...stripSkipFlag(args),\n            data: injectedData,\n            where: injectedWhere,\n          };\n          if (fullConfig.enableRlsGucTagging) {\n            return runOperationWithRlsGuc(rawPrismaForTransactions, wsCtx, model, 'update', finalArgs);\n          }\n          return query(finalArgs);\n        },\n\n        async updateMany({\n          model,\n          args,\n          query,\n        }: ExtensionHandlerParams<{\n          data: Record<string, unknown>;\n          where?: Record<string, unknown>;\n          _skipWorkspaceInjection?: boolean;\n          [key: string]: unknown;\n        }>) {\n          if (fullConfig.excludeModels.includes(model) || args._skipWorkspaceInjection) {\n            return query(stripSkipFlag(args));\n          }\n\n          const wsCtx = getWorkspaceContext();\n          enforceStrictMode(model, 'updateMany', wsCtx, fullConfig);\n          if (!wsCtx?.workspaceId) {\n            return query(args);\n          }\n\n          if (fullConfig.enableApplicationNameTagging) {\n            await maybeTagConnection(rawPrisma, wsCtx);\n          }\n          const injectedData = injectUpdateFields(args.data, wsCtx, fullConfig);\n\n          // Inject workspaceId into where clause for update isolation\n          let injectedWhere = args.where;\n          if (fullConfig.enableUpdateWhereIsolation && !isExcludedFromReadIsolation(model, fullConfig)) {\n            injectedWhere = injectWhereClause(args.where, wsCtx);\n          }\n\n          const finalArgs = {\n            ...stripSkipFlag(args),\n            data: injectedData,\n            where: injectedWhere,\n          };\n          if (fullConfig.enableRlsGucTagging) {\n            return runOperationWithRlsGuc(rawPrismaForTransactions, wsCtx, model, 'updateMany', finalArgs);\n          }\n          return query(finalArgs);\n        },\n\n        async upsert({\n          model,\n          args,\n          query,\n        }: ExtensionHandlerParams<{\n          create: Record<string, unknown>;\n          update: Record<string, unknown>;\n          where?: Record<string, unknown>;\n          _skipWorkspaceInjection?: boolean;\n          [key: string]: unknown;\n        }>) {\n          if (fullConfig.excludeModels.includes(model) || args._skipWorkspaceInjection) {\n            return query(stripSkipFlag(args));\n          }\n\n          const wsCtx = getWorkspaceContext();\n          enforceStrictMode(model, 'upsert', wsCtx, fullConfig);\n          if (!wsCtx?.workspaceId) {\n            return query(args);\n          }\n\n          if (fullConfig.enableApplicationNameTagging) {\n            await maybeTagConnection(rawPrisma, wsCtx);\n          }\n          const injectedCreate = injectCreateFields(args.create, wsCtx, fullConfig);\n          const injectedUpdate = injectUpdateFields(args.update, wsCtx, fullConfig);\n\n          // Inject workspaceId into where clause for upsert isolation\n          let injectedWhere = args.where;\n          if (fullConfig.enableUpdateWhereIsolation && !isExcludedFromReadIsolation(model, fullConfig)) {\n            injectedWhere = injectWhereClause(args.where, wsCtx);\n          }\n\n          const finalArgs = {\n            ...stripSkipFlag(args),\n            create: injectedCreate,\n            update: injectedUpdate,\n            where: injectedWhere,\n          };\n          if (fullConfig.enableRlsGucTagging) {\n            return runOperationWithRlsGuc(rawPrismaForTransactions, wsCtx, model, 'upsert', finalArgs);\n          }\n          return query(finalArgs);\n        },\n\n        // ================================================================\n        // READ OPERATIONS - inject workspaceId into where clause\n        // ================================================================\n\n        async findMany({ model, args, query }: ExtensionHandlerParams<WhereArgs>) {\n          if (\n            !fullConfig.enableReadIsolation ||\n            isExcludedFromReadIsolation(model, fullConfig) ||\n            args._skipWorkspaceInjection\n          ) {\n            return query(stripSkipFlag(args));\n          }\n\n          const wsCtx = getWorkspaceContext();\n          enforceStrictMode(model, 'findMany', wsCtx, fullConfig);\n          if (!wsCtx?.workspaceId) {\n            return query(args);\n          }\n\n          if (fullConfig.enableApplicationNameTagging) {\n            await maybeTagConnection(rawPrisma, wsCtx);\n          }\n          const injectedWhere = injectWhereClause(args.where, wsCtx);\n\n          if (fullConfig.debug) {\n            logger.debug(`[WorkspaceExtension] ${model}.findMany - injected workspaceId into where`, {\n              workspaceId: wsCtx.workspaceId,\n            });\n          }\n\n          const finalArgs = {\n            ...stripSkipFlag(args),\n            where: injectedWhere,\n          };\n          if (fullConfig.enableRlsGucTagging) {\n            return runOperationWithRlsGuc(rawPrismaForTransactions, wsCtx, model, 'findMany', finalArgs);\n          }\n          return query(finalArgs);\n        },\n\n        async findFirst({ model, args, query }: ExtensionHandlerParams<WhereArgs>) {\n          if (\n            !fullConfig.enableReadIsolation ||\n            isExcludedFromReadIsolation(model, fullConfig) ||\n            args._skipWorkspaceInjection\n          ) {\n            return query(stripSkipFlag(args));\n          }\n\n          const wsCtx = getWorkspaceContext();\n          enforceStrictMode(model, 'findFirst', wsCtx, fullConfig);\n          if (!wsCtx?.workspaceId) {\n            return query(args);\n          }\n\n          if (fullConfig.enableApplicationNameTagging) {\n            await maybeTagConnection(rawPrisma, wsCtx);\n          }\n          const injectedWhere = injectWhereClause(args.where, wsCtx);\n\n          if (fullConfig.debug) {\n            logger.debug(`[WorkspaceExtension] ${model}.findFirst - injected workspaceId into where`, {\n              workspaceId: wsCtx.workspaceId,\n            });\n          }\n\n          const finalArgs = {\n            ...stripSkipFlag(args),\n            where: injectedWhere,\n          };\n          if (fullConfig.enableRlsGucTagging) {\n            return runOperationWithRlsGuc(rawPrismaForTransactions, wsCtx, model, 'findFirst', finalArgs);\n          }\n          return query(finalArgs);\n        },\n\n        async findFirstOrThrow({ model, args, query }: ExtensionHandlerParams<WhereArgs>) {\n          if (\n            !fullConfig.enableReadIsolation ||\n            isExcludedFromReadIsolation(model, fullConfig) ||\n            args._skipWorkspaceInjection\n          ) {\n            return query(stripSkipFlag(args));\n          }\n\n          const wsCtx = getWorkspaceContext();\n          enforceStrictMode(model, 'findFirstOrThrow', wsCtx, fullConfig);\n          if (!wsCtx?.workspaceId) {\n            return query(args);\n          }\n\n          if (fullConfig.enableApplicationNameTagging) {\n            await maybeTagConnection(rawPrisma, wsCtx);\n          }\n          const injectedWhere = injectWhereClause(args.where, wsCtx);\n\n          if (fullConfig.debug) {\n            logger.debug(`[WorkspaceExtension] ${model}.findFirstOrThrow - injected workspaceId into where`, {\n              workspaceId: wsCtx.workspaceId,\n            });\n          }\n\n          const finalArgs = {\n            ...stripSkipFlag(args),\n            where: injectedWhere,\n          };\n          if (fullConfig.enableRlsGucTagging) {\n            return runOperationWithRlsGuc(rawPrismaForTransactions, wsCtx, model, 'findFirstOrThrow', finalArgs);\n          }\n          return query(finalArgs);\n        },\n\n        async findUnique({ model, args, query }: ExtensionHandlerParams<WhereArgs>) {\n          if (\n            !fullConfig.enableReadIsolation ||\n            isExcludedFromReadIsolation(model, fullConfig) ||\n            args._skipWorkspaceInjection\n          ) {\n            return query(stripSkipFlag(args));\n          }\n\n          const wsCtx = getWorkspaceContext();\n          enforceStrictMode(model, 'findUnique', wsCtx, fullConfig);\n          if (!wsCtx?.workspaceId) {\n            return query(args);\n          }\n\n          if (fullConfig.enableApplicationNameTagging) {\n            await maybeTagConnection(rawPrisma, wsCtx);\n          }\n          // For findUnique, the where clause uses unique fields.\n          // We inject workspaceId only if the where clause is a plain object\n          // (compound unique keys with workspaceId are common and already include it).\n          const injectedWhere = injectWhereClause(args.where, wsCtx);\n\n          if (fullConfig.debug) {\n            logger.debug(`[WorkspaceExtension] ${model}.findUnique - injected workspaceId into where`, {\n              workspaceId: wsCtx.workspaceId,\n            });\n          }\n\n          const finalArgs = {\n            ...stripSkipFlag(args),\n            where: injectedWhere,\n          };\n          if (fullConfig.enableRlsGucTagging) {\n            return runOperationWithRlsGuc(rawPrismaForTransactions, wsCtx, model, 'findUnique', finalArgs);\n          }\n          return query(finalArgs);\n        },\n\n        async findUniqueOrThrow({ model, args, query }: ExtensionHandlerParams<WhereArgs>) {\n          if (\n            !fullConfig.enableReadIsolation ||\n            isExcludedFromReadIsolation(model, fullConfig) ||\n            args._skipWorkspaceInjection\n          ) {\n            return query(stripSkipFlag(args));\n          }\n\n          const wsCtx = getWorkspaceContext();\n          enforceStrictMode(model, 'findUniqueOrThrow', wsCtx, fullConfig);\n          if (!wsCtx?.workspaceId) {\n            return query(args);\n          }\n\n          if (fullConfig.enableApplicationNameTagging) {\n            await maybeTagConnection(rawPrisma, wsCtx);\n          }\n          const injectedWhere = injectWhereClause(args.where, wsCtx);\n\n          if (fullConfig.debug) {\n            logger.debug(`[WorkspaceExtension] ${model}.findUniqueOrThrow - injected workspaceId into where`, {\n              workspaceId: wsCtx.workspaceId,\n            });\n          }\n\n          const finalArgs = {\n            ...stripSkipFlag(args),\n            where: injectedWhere,\n          };\n          if (fullConfig.enableRlsGucTagging) {\n            return runOperationWithRlsGuc(rawPrismaForTransactions, wsCtx, model, 'findUniqueOrThrow', finalArgs);\n          }\n          return query(finalArgs);\n        },\n\n        async count({ model, args, query }: ExtensionHandlerParams<WhereArgs>) {\n          if (\n            !fullConfig.enableReadIsolation ||\n            isExcludedFromReadIsolation(model, fullConfig) ||\n            args._skipWorkspaceInjection\n          ) {\n            return query(stripSkipFlag(args));\n          }\n\n          const wsCtx = getWorkspaceContext();\n          enforceStrictMode(model, 'count', wsCtx, fullConfig);\n          if (!wsCtx?.workspaceId) {\n            return query(args);\n          }\n\n          if (fullConfig.enableApplicationNameTagging) {\n            await maybeTagConnection(rawPrisma, wsCtx);\n          }\n          const injectedWhere = injectWhereClause(args.where, wsCtx);\n\n          if (fullConfig.debug) {\n            logger.debug(`[WorkspaceExtension] ${model}.count - injected workspaceId into where`, {\n              workspaceId: wsCtx.workspaceId,\n            });\n          }\n\n          const finalArgs = {\n            ...stripSkipFlag(args),\n            where: injectedWhere,\n          };\n          if (fullConfig.enableRlsGucTagging) {\n            return runOperationWithRlsGuc(rawPrismaForTransactions, wsCtx, model, 'count', finalArgs);\n          }\n          return query(finalArgs);\n        },\n\n        async aggregate({ model, args, query }: ExtensionHandlerParams<WhereArgs>) {\n          if (\n            !fullConfig.enableReadIsolation ||\n            isExcludedFromReadIsolation(model, fullConfig) ||\n            args._skipWorkspaceInjection\n          ) {\n            return query(stripSkipFlag(args));\n          }\n\n          const wsCtx = getWorkspaceContext();\n          enforceStrictMode(model, 'aggregate', wsCtx, fullConfig);\n          if (!wsCtx?.workspaceId) {\n            return query(args);\n          }\n\n          if (fullConfig.enableApplicationNameTagging) {\n            await maybeTagConnection(rawPrisma, wsCtx);\n          }\n          const injectedWhere = injectWhereClause(args.where, wsCtx);\n\n          if (fullConfig.debug) {\n            logger.debug(`[WorkspaceExtension] ${model}.aggregate - injected workspaceId into where`, {\n              workspaceId: wsCtx.workspaceId,\n            });\n          }\n\n          const finalArgs = {\n            ...stripSkipFlag(args),\n            where: injectedWhere,\n          };\n          if (fullConfig.enableRlsGucTagging) {\n            return runOperationWithRlsGuc(rawPrismaForTransactions, wsCtx, model, 'aggregate', finalArgs);\n          }\n          return query(finalArgs);\n        },\n\n        async groupBy({ model, args, query }: ExtensionHandlerParams<WhereArgs>) {\n          if (\n            !fullConfig.enableReadIsolation ||\n            isExcludedFromReadIsolation(model, fullConfig) ||\n            args._skipWorkspaceInjection\n          ) {\n            return query(stripSkipFlag(args));\n          }\n\n          const wsCtx = getWorkspaceContext();\n          enforceStrictMode(model, 'groupBy', wsCtx, fullConfig);\n          if (!wsCtx?.workspaceId) {\n            return query(args);\n          }\n\n          if (fullConfig.enableApplicationNameTagging) {\n            await maybeTagConnection(rawPrisma, wsCtx);\n          }\n          const injectedWhere = injectWhereClause(args.where, wsCtx);\n\n          if (fullConfig.debug) {\n            logger.debug(`[WorkspaceExtension] ${model}.groupBy - injected workspaceId into where`, {\n              workspaceId: wsCtx.workspaceId,\n            });\n          }\n\n          const finalArgs = {\n            ...stripSkipFlag(args),\n            where: injectedWhere,\n          };\n          if (fullConfig.enableRlsGucTagging) {\n            return runOperationWithRlsGuc(rawPrismaForTransactions, wsCtx, model, 'groupBy', finalArgs);\n          }\n          return query(finalArgs);\n        },\n\n        // ================================================================\n        // DELETE OPERATIONS - inject workspaceId into where clause\n        // ================================================================\n\n        async delete({ model, args, query }: ExtensionHandlerParams<WhereArgs>) {\n          if (\n            !fullConfig.enableDeleteIsolation ||\n            isExcludedFromReadIsolation(model, fullConfig) ||\n            args._skipWorkspaceInjection\n          ) {\n            return query(stripSkipFlag(args));\n          }\n\n          const wsCtx = getWorkspaceContext();\n          enforceStrictMode(model, 'delete', wsCtx, fullConfig);\n          if (!wsCtx?.workspaceId) {\n            return query(args);\n          }\n\n          if (fullConfig.enableApplicationNameTagging) {\n            await maybeTagConnection(rawPrisma, wsCtx);\n          }\n          const injectedWhere = injectWhereClause(args.where, wsCtx);\n\n          if (fullConfig.debug) {\n            logger.debug(`[WorkspaceExtension] ${model}.delete - injected workspaceId into where`, {\n              workspaceId: wsCtx.workspaceId,\n            });\n          }\n\n          const finalArgs = {\n            ...stripSkipFlag(args),\n            where: injectedWhere,\n          };\n          if (fullConfig.enableRlsGucTagging) {\n            return runOperationWithRlsGuc(rawPrismaForTransactions, wsCtx, model, 'delete', finalArgs);\n          }\n          return query(finalArgs);\n        },\n\n        async deleteMany({ model, args, query }: ExtensionHandlerParams<WhereArgs>) {\n          if (\n            !fullConfig.enableDeleteIsolation ||\n            isExcludedFromReadIsolation(model, fullConfig) ||\n            args._skipWorkspaceInjection\n          ) {\n            return query(stripSkipFlag(args));\n          }\n\n          const wsCtx = getWorkspaceContext();\n          enforceStrictMode(model, 'deleteMany', wsCtx, fullConfig);\n          if (!wsCtx?.workspaceId) {\n            return query(args);\n          }\n\n          if (fullConfig.enableApplicationNameTagging) {\n            await maybeTagConnection(rawPrisma, wsCtx);\n          }\n          const injectedWhere = injectWhereClause(args.where, wsCtx);\n\n          if (fullConfig.debug) {\n            logger.debug(`[WorkspaceExtension] ${model}.deleteMany - injected workspaceId into where`, {\n              workspaceId: wsCtx.workspaceId,\n            });\n          }\n\n          const finalArgs = {\n            ...stripSkipFlag(args),\n            where: injectedWhere,\n          };\n          if (fullConfig.enableRlsGucTagging) {\n            return runOperationWithRlsGuc(rawPrismaForTransactions, wsCtx, model, 'deleteMany', finalArgs);\n          }\n          return query(finalArgs);\n        },\n      },\n    },\n  });\n}\n"]}

package/dist/chunk-RIH3XRBX.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/prisma/index.ts","../src/prisma/factory.ts","../src/prisma/manager.ts","../src/prisma/health.ts","../src/prisma/fields.ts","../src/prisma/context.ts"],"names":["resolveWorkspaceExtensionDefault","productName","explicit","process","env","layer","toLowerCase","name","startsWith","createDatabaseClient","PrismaClientConstructor","config","enableGraphExtension","graphEventEmitter","enableWorkspaceExtension","workspaceExtensionConfig","registerShutdownHandlers","prismaConfig","prismaConfigWithDefaults","applicationName","ensureServiceApplicationName","wrapper","createPrismaClient","baseClient","getClient","extendedClient","eventEmitter","getGraphEventEmitter","graphConfig","enabled","addGraphExtension","logger","info","addWorkspaceExtension","db","debug","connect","retries","delay","disconnect","parsePositiveIntEnv","raw","trim","undefined","parsed","Number","parseInt","isFinite","resolvePoolTuningFromEnv","tuning","queryTimeout","queryTimeoutMillis","statementTimeout","statementTimeoutMillis","idleInTransactionTimeout","idleInTransactionTimeoutMillis","lockTimeout","lockTimeoutMillis","createDatabaseClientFromEnv","overrides","databaseUrl","Error","isDevelopment","maxConnections","idleTimeoutMillis","connectionTimeoutMillis","enableQueryLogging","slowQueryThreshold","acquireRetriesRaw","acquireRetries","acquireRetryDelay","acquireRetryDelayMillis","state","initialized","client","initializeDatabase","initializeDatabaseWithConfig","getDb","getDatabaseManager","isDatabaseInitialized","getDatabaseProductName","resetDatabaseManager","error","warn","checkDatabaseHealth","start","Date","now","$queryRaw","latency","healthy","errorMessage","message","String","testConnection","getDatabaseVersion","result","version","getDatabaseStats","health","Promise","all","timestamp","requireFn","createRequire","url","loadGeneratedFields","generatedFieldsPath","generated","default","path","extractFieldsFromModel","modelName","modelFieldsMap","options","modelFields","Object","keys","join","excludeFields","includeRelations","customFilter","fields","relations","excluded","length","filter","field","includes","push","fieldName","isRelation","shouldInclude","type","metadata","totalFields","excludedCount","excludedFields","relationFields","getModelFields","hasModel","getAllModelNames","buildContextWhereClause","contextFilter","conditions","workspaceId","equals","userId","projectId","appId","productId","organizationId","buildContextWhereConditions","context","toContextJson","contextInput","custom","filterNullValues","obj","filtered","key","value","entries","mergeContextField","merged","fieldValue","mergeContext","existingContext","newContext","Array","isArray","parseContext","contextJson","ctx","contextMatches","createContextFromSDK","sdkContext"],"mappings":";;;;;;;;AAAA,IAAA,cAAA,GAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AC8GA,SAASA,iCAAiCC,WAAAA,EAAmB;AAC3D,EAAA,MAAMC,QAAAA,GAAWC,OAAAA,CAAQC,GAAAA,CAAI,6BAAA,CAAA;AAC7B,EAAA,IAAIF,QAAAA,KAAa,QAAQ,OAAO,IAAA;AAChC,EAAA,IAAIA,QAAAA,KAAa,SAAS,OAAO,KAAA;AAEjC,EAAA,MAAMG,KAAAA,GAAQF,OAAAA,CAAQC,GAAAA,CAAI,iBAAA,GAAoBE,WAAAA,EAAAA;AAC9C,EAAA,IAAID,KAAAA,KAAU,UAAU,OAAO,KAAA;AAC/B,EAAA,IAAIA,KAAAA,KAAU,UAAU,OAAO,IAAA;AAE/B,EAAA,MAAME,IAAAA,GAAON,YAAYK,WAAAA,EAAW;AACpC,EAAA,IAAIC,IAAAA,CAAKC,WAAW,SAAA,CAAA,IAAcD,KAAKC,UAAAA,CAAW,SAAA,GAAY,OAAO,KAAA;AACrE,EAAA,OAAO,IAAA;AACT;AAZSR,MAAAA,CAAAA,gCAAAA,EAAAA,kCAAAA,CAAAA;AAsDF,SAASS,oBAAAA,CACdC,yBACAC,MAAAA,EAA4B;AAE5B,EAAA,MAAM,EACJV,WAAAA,EACAW,oBAAAA,GAAuBT,QAAQC,GAAAA,CAAI,0BAAA,MAAgC,OAAA,EACnES,iBAAAA,EACAC,wBAAAA,GAA2Bd,gCAAAA,CAAiCC,WAAAA,CAAAA,EAC5Dc,wBAAAA,EACAC,2BAA2B,IAAA,EAC3B,GAAGC,cAAAA,GACDN,MAAAA;AAOJ,EAAA,MAAMO,wBAAAA,GAA+C;IACnD,GAAGD,YAAAA;IACHE,eAAAA,EAAiBF,YAAAA,CAAaE,eAAAA,IAAmB,CAAA,IAAA,EAAOlB,WAAAA,CAAAA;AAC1D,GAAA;AAIAmB,EAAAA,4BAAAA,CAA6BnB,WAAAA,CAAAA;AAG7B,EAAA,MAAMoB,OAAAA,GAAUC,kBAAAA,CAAmBZ,uBAAAA,EAAyBQ,wBAAAA,CAAAA;AAG5D,EAAA,MAAMK,UAAAA,GAAaF,QAAQG,SAAAA,EAAS;AAWpC,EAAA,IAAIC,cAAAA;AAGJ,EAAA,IAAIb,oBAAAA,EAAsB;AACxB,IAAA,MAAMc,YAAAA,GAAeb,qBAAqBc,oBAAAA,EAAAA;AAE1C,IAAA,MAAMC,WAAAA,GAAqC;MACzCC,OAAAA,EAAS,IAAA;AACT5B,MAAAA,WAAAA;AACAyB,MAAAA;AACF,KAAA;AAEAD,IAAAA,cAAAA,GAAiBK,iBAAAA,CAAkBP,YAAYK,WAAAA,CAAAA;AAE/CG,IAAAA,MAAAA,CAAOC,KAAK,oCAAA,EAAsC;AAAE/B,MAAAA;KAAY,CAAA;EAClE,CAAA,MAAO;AACLwB,IAAAA,cAAAA,GAAiBF,UAAAA;AACjBQ,IAAAA,MAAAA,CAAOC,KAAK,qCAAA,CAAA;AACd,EAAA;AAGA,EAAA,IAAIlB,wBAAAA,EAA0B;AAC5BW,IAAAA,cAAAA,GAAiBQ,qBAAAA,CAAsBR,gBAAgBV,wBAAAA,CAAAA;AAEvDgB,IAAAA,MAAAA,CAAOC,KAAK,wCAAA,EAA0C;AAAE/B,MAAAA;KAAY,CAAA;EACtE,CAAA,MAAO;AACL8B,IAAAA,MAAAA,CAAOC,KAAK,yCAAA,CAAA;AACd,EAAA;AAGA,EAAA,MAAME,EAAAA,GAAKT,cAAAA;AACVS,EAAAA,EAAAA,CAA0C,QAAA,CAAA,GAAYA,EAAAA;AAGvD,EAAA,IAAIlB,wBAAAA,EAA0B;AAC5BK,IAAAA,OAAAA,CAAQL,wBAAAA,EAAwB;AAChCe,IAAAA,MAAAA,CAAOI,MAAM,yCAAA,CAAA;AACf,EAAA;AAEA,EAAA,OAAO;AACLD,IAAAA,EAAAA;AACAb,IAAAA,OAAAA;AACAe,IAAAA,OAAAA,0BAAUC,OAAAA,EAAkBC,KAAAA,KAAmBjB,QAAQe,OAAAA,CAAQC,OAAAA,EAASC,KAAAA,CAAAA,EAA/D,SAAA,CAAA;IACTC,UAAAA,kBAAY,MAAA,CAAA,MAAMlB,OAAAA,CAAQkB,UAAAA,EAAU,EAAxB,YAAA;AACd,GAAA;AACF;AAxFgB9B,MAAAA,CAAAA,oBAAAA,EAAAA,sBAAAA,CAAAA;AAkHhB,SAAS+B,oBAAoBjC,IAAAA,EAAY;AACvC,EAAA,MAAMkC,GAAAA,GAAMtC,OAAAA,CAAQC,GAAAA,CAAIG,IAAAA,CAAAA;AACxB,EAAA,IAAIkC,GAAAA,IAAO,IAAA,IAAQA,GAAAA,CAAIC,IAAAA,OAAW,EAAA,EAAI;AACpC,IAAA,OAAOC,MAAAA;AACT,EAAA;AACA,EAAA,MAAMC,SAASC,MAAAA,CAAOC,QAAAA,CAASL,GAAAA,CAAIC,IAAAA,IAAQ,EAAA,CAAA;AAC3C,EAAA,OAAOG,OAAOE,QAAAA,CAASH,MAAAA,CAAAA,IAAWA,MAAAA,GAAS,IAAIA,MAAAA,GAASD,MAAAA;AAC1D;AAPSH,MAAAA,CAAAA,mBAAAA,EAAAA,qBAAAA,CAAAA;AAyBF,SAASQ,yBAAyB/C,WAAAA,EAAmB;AAC1D,EAAA,MAAMgD,MAAAA,GAAwB;AAC5B9B,IAAAA,eAAAA,EAAiBhB,QAAQC,GAAAA,CAAI,2BAAA,GAA8BsC,IAAAA,EAAAA,IAAU,OAAOzC,WAAAA,CAAAA;AAC9E,GAAA;AAEA,EAAA,MAAMiD,YAAAA,GAAeV,oBAAoB,wBAAA,CAAA;AACzC,EAAA,IAAIU,iBAAiBP,MAAAA,EAAW;AAC9BM,IAAAA,MAAAA,CAAOE,kBAAAA,GAAqBD,YAAAA;AAC9B,EAAA;AAEA,EAAA,MAAME,gBAAAA,GAAmBZ,oBAAoB,4BAAA,CAAA;AAC7C,EAAA,IAAIY,qBAAqBT,MAAAA,EAAW;AAClCM,IAAAA,MAAAA,CAAOI,sBAAAA,GAAyBD,gBAAAA;AAClC,EAAA;AAEA,EAAA,MAAME,wBAAAA,GAA2Bd,oBAAoB,sCAAA,CAAA;AACrD,EAAA,IAAIc,6BAA6BX,MAAAA,EAAW;AAC1CM,IAAAA,MAAAA,CAAOM,8BAAAA,GAAiCD,wBAAAA;AAC1C,EAAA;AAEA,EAAA,MAAME,WAAAA,GAAchB,oBAAoB,uBAAA,CAAA;AACxC,EAAA,IAAIgB,gBAAgBb,MAAAA,EAAW;AAC7BM,IAAAA,MAAAA,CAAOQ,iBAAAA,GAAoBD,WAAAA;AAC7B,EAAA;AAEA,EAAA,OAAOP,MAAAA;AACT;AA1BgBD,MAAAA,CAAAA,wBAAAA,EAAAA,0BAAAA,CAAAA;AAoDT,SAASU,2BAAAA,CACdhD,uBAAAA,EACAT,WAAAA,EACA0D,SAAAA,EAAyC;AAEzC,EAAA,MAAMC,WAAAA,GAAczD,OAAAA,CAAQC,GAAAA,CAAI,cAAA,CAAA;AAChC,EAAA,IAAI,CAACwD,WAAAA,EAAa;AAChB,IAAA,MAAM,IAAIC,MAAM,+CAAA,CAAA;AAClB,EAAA;AAEA,EAAA,MAAMC,aAAAA,GAAgB3D,OAAAA,CAAQC,GAAAA,CAAI,UAAA,CAAA,KAAgB,aAAA;AAElD,EAAA,MAAMO,MAAAA,GAA+B;AACnCV,IAAAA,WAAAA;AACA2D,IAAAA,WAAAA;AACAG,IAAAA,cAAAA,EAAgBjB,SAAS3C,OAAAA,CAAQC,GAAAA,CAAI,0BAAA,CAAA,IAA+B,MAAM,EAAA,CAAA;AAC1E4D,IAAAA,iBAAAA,EAAmBlB,SAAS3C,OAAAA,CAAQC,GAAAA,CAAI,uBAAA,CAAA,IAA4B,SAAS,EAAA,CAAA;AAC7E6D,IAAAA,uBAAAA,EAAyBnB,SAAS3C,OAAAA,CAAQC,GAAAA,CAAI,6BAAA,CAAA,IAAkC,SAAS,EAAA,CAAA;AACzF,IAAA,GAAG4C,yBAAyB/C,WAAAA,CAAAA;IAC5BiE,kBAAAA,EAAoBJ,aAAAA;AACpBK,IAAAA,kBAAAA,EAAoBL,gBAAgB,GAAA,GAAM,GAAA;IAC1C,GAAGH;AACL,GAAA;AAIA,EAAA,MAAMS,iBAAAA,GAAoBjE,OAAAA,CAAQC,GAAAA,CAAI,0BAAA,GAA6BsC,IAAAA,EAAAA;AACnE,EAAA,IAAI0B,sBAAsBzB,MAAAA,IAAayB,iBAAAA,KAAsB,EAAA,IAAMzD,MAAAA,CAAO0D,mBAAmB1B,MAAAA,EAAW;AACtG,IAAA,MAAMC,MAAAA,GAASC,MAAAA,CAAOC,QAAAA,CAASsB,iBAAAA,EAAmB,EAAA,CAAA;AAClD,IAAA,IAAIvB,MAAAA,CAAOE,QAAAA,CAASH,MAAAA,CAAAA,IAAWA,UAAU,CAAA,EAAG;AAC1CjC,MAAAA,MAAAA,CAAO0D,cAAAA,GAAiBzB,MAAAA;AAC1B,IAAA;AACF,EAAA;AACA,EAAA,MAAM0B,iBAAAA,GAAoB9B,oBAAoB,8BAAA,CAAA;AAC9C,EAAA,IAAI8B,iBAAAA,KAAsB3B,MAAAA,IAAahC,MAAAA,CAAO4D,uBAAAA,KAA4B5B,MAAAA,EAAW;AACnFhC,IAAAA,MAAAA,CAAO4D,uBAAAA,GAA0BD,iBAAAA;AACnC,EAAA;AAEA,EAAA,OAAO7D,oBAAAA,CAAqBC,yBAAyBC,MAAAA,CAAAA;AACvD;AAvCgB+C,MAAAA,CAAAA,2BAAAA,EAAAA,6BAAAA,CAAAA;;;AClThB,IAAMc,KAAAA,GAA8B;EAClCC,WAAAA,EAAa,KAAA;EACbxE,WAAAA,EAAa,IAAA;EACbyE,MAAAA,EAAQ;AACV,CAAA;AAwBO,SAASC,kBAAAA,CACdjE,uBAAAA,EACAT,WAAAA,EACAU,MAAAA,EAAsC;AAGtC,EAAA,IAAI6D,MAAMC,WAAAA,EAAa;AACrB,IAAA,IAAID,KAAAA,CAAMvE,gBAAgBA,WAAAA,EAAa;AACrC,MAAA,MAAM,IAAI4D,KAAAA,CACR,CAAA,0CAAA,EAA6CW,MAAMvE,WAAW,CAAA,4BAAA,EAChCA,WAAAA,CAAAA,EAAAA,CAAe,CAAA;AAEjD,IAAA;AACA8B,IAAAA,MAAAA,CAAOI,MAAM,kEAAA,EAAoE;AAAElC,MAAAA;KAAY,CAAA;AAC/F,IAAA,OAAOuE,KAAAA,CAAME,MAAAA;AACf,EAAA;AAGA,EAAA,MAAMA,MAAAA,GAAShB,2BAAAA,CAA4BhD,uBAAAA,EAAyBT,WAAAA,EAAaU,MAAAA,CAAAA;AAGjF6D,EAAAA,KAAAA,CAAMC,WAAAA,GAAc,IAAA;AACpBD,EAAAA,KAAAA,CAAMvE,WAAAA,GAAcA,WAAAA;AACpBuE,EAAAA,KAAAA,CAAME,MAAAA,GAASA,MAAAA;AAEf3C,EAAAA,MAAAA,CAAOC,KAAK,wCAAA,EAA0C;AAAE/B,IAAAA;GAAY,CAAA;AAEpE,EAAA,OAAOyE,MAAAA;AACT;AA5BgBC,MAAAA,CAAAA,kBAAAA,EAAAA,oBAAAA,CAAAA;AAkDT,SAASC,4BAAAA,CACdlE,yBACAC,MAAAA,EAA4B;AAE5B,EAAA,MAAM,EAAEV,aAAW,GAAKU,MAAAA;AAGxB,EAAA,IAAI6D,MAAMC,WAAAA,EAAa;AACrB,IAAA,IAAID,KAAAA,CAAMvE,gBAAgBA,WAAAA,EAAa;AACrC,MAAA,MAAM,IAAI4D,KAAAA,CACR,CAAA,0CAAA,EAA6CW,MAAMvE,WAAW,CAAA,4BAAA,EAChCA,WAAAA,CAAAA,EAAAA,CAAe,CAAA;AAEjD,IAAA;AACA8B,IAAAA,MAAAA,CAAOI,MAAM,kEAAA,EAAoE;AAAElC,MAAAA;KAAY,CAAA;AAC/F,IAAA,OAAOuE,KAAAA,CAAME,MAAAA;AACf,EAAA;AAGA,EAAA,MAAMA,MAAAA,GAASjE,oBAAAA,CAAqBC,uBAAAA,EAAyBC,MAAAA,CAAAA;AAG7D6D,EAAAA,KAAAA,CAAMC,WAAAA,GAAc,IAAA;AACpBD,EAAAA,KAAAA,CAAMvE,WAAAA,GAAcA,WAAAA;AACpBuE,EAAAA,KAAAA,CAAME,MAAAA,GAASA,MAAAA;AAEf3C,EAAAA,MAAAA,CAAOC,KAAK,2DAAA,EAA6D;AAAE/B,IAAAA;GAAY,CAAA;AAEvF,EAAA,OAAOyE,MAAAA;AACT;AA7BgBE,MAAAA,CAAAA,4BAAAA,EAAAA,8BAAAA,CAAAA;AAsDT,SAASC,KAAAA,GAAAA;AACd,EAAA,IAAI,CAACL,KAAAA,CAAMC,WAAAA,IAAe,CAACD,MAAME,MAAAA,EAAQ;AACvC,IAAA,MAAM,IAAIb,MAAM,kGAAA,CAAA;AAClB,EAAA;AACA,EAAA,OAAOW,MAAME,MAAAA,CAAOxC,EAAAA;AACtB;AALgB2C,MAAAA,CAAAA,KAAAA,EAAAA,OAAAA,CAAAA;AAwBT,SAASC,kBAAAA,GAAAA;AACd,EAAA,IAAI,CAACN,KAAAA,CAAMC,WAAAA,IAAe,CAACD,MAAME,MAAAA,EAAQ;AACvC,IAAA,MAAM,IAAIb,MACR,+GAAA,CAAA;AAEJ,EAAA;AACA,EAAA,OAAOW,KAAAA,CAAME,MAAAA;AACf;AAPgBI,MAAAA,CAAAA,kBAAAA,EAAAA,oBAAAA,CAAAA;AAqBT,SAASC,qBAAAA,GAAAA;AACd,EAAA,OAAOP,KAAAA,CAAMC,WAAAA;AACf;AAFgBM,MAAAA,CAAAA,qBAAAA,EAAAA,uBAAAA,CAAAA;AAST,SAASC,sBAAAA,GAAAA;AACd,EAAA,OAAOR,KAAAA,CAAMvE,WAAAA;AACf;AAFgB+E,MAAAA,CAAAA,sBAAAA,EAAAA,wBAAAA,CAAAA;AAYhB,eAAsBC,oBAAAA,GAAAA;AACpB,EAAA,IAAIT,MAAME,MAAAA,EAAQ;AAChB,IAAA,IAAI;AACF,MAAA,MAAMF,KAAAA,CAAME,OAAOnC,UAAAA,EAAU;AAC/B,IAAA,CAAA,CAAA,OAAS2C,KAAAA,EAAO;AACdnD,MAAAA,MAAAA,CAAOoD,KAAK,oDAAA,EAAsD;AAAED,QAAAA;OAAM,CAAA;AAC5E,IAAA;AACF,EAAA;AAEAV,EAAAA,KAAAA,CAAMC,WAAAA,GAAc,KAAA;AACpBD,EAAAA,KAAAA,CAAMvE,WAAAA,GAAc,IAAA;AACpBuE,EAAAA,KAAAA,CAAME,MAAAA,GAAS,IAAA;AAEf3C,EAAAA,MAAAA,CAAOI,MAAM,0CAAA,CAAA;AACf;AAdsB8C,MAAAA,CAAAA,oBAAAA,EAAAA,sBAAAA,CAAAA;;;AC5OtB,eAAsBG,oBAAgDV,MAAAA,EAAS;AAC7E,EAAA,IAAI;AACF,IAAA,MAAMW,KAAAA,GAAQC,KAAKC,GAAAA,EAAG;AACtB,IAAA,MAAMb,MAAAA,CAAOc,SAAAA,CAAAA,QAAAA,CAAAA;AACb,IAAA,MAAMC,OAAAA,GAAUH,IAAAA,CAAKC,GAAAA,EAAG,GAAKF,KAAAA;AAE7B,IAAA,OAAO;MAAEK,OAAAA,EAAS,IAAA;AAAMD,MAAAA;AAAQ,KAAA;AAClC,EAAA,CAAA,CAAA,OAASP,KAAAA,EAAO;AACd,IAAA,MAAMS,eAAeT,KAAAA,YAAiBrB,KAAAA,GAAQqB,KAAAA,CAAMU,OAAAA,GAAUC,OAAOX,KAAAA,CAAAA;AACrEnD,IAAAA,MAAAA,CAAOmD,MAAM,8BAAA,EAAgC;MAAEA,KAAAA,EAAOS;KAAa,CAAA;AAEnE,IAAA,OAAO;MACLD,OAAAA,EAAS,KAAA;MACTR,KAAAA,EAAOS;AACT,KAAA;AACF,EAAA;AACF;AAhBsBP,MAAAA,CAAAA,mBAAAA,EAAAA,qBAAAA,CAAAA;AAqBtB,eAAsBU,eAA2CpB,MAAAA,EAAS;AACxE,EAAA,IAAI;AACF,IAAA,MAAMA,MAAAA,CAAOc,SAAAA,CAAAA,QAAAA,CAAAA;AACb,IAAA,OAAO,IAAA;AACT,EAAA,CAAA,CAAA,OAASN,KAAAA,EAAO;AACdnD,IAAAA,MAAAA,CAAOmD,MAAM,iCAAA,EAAmC;AAC9CA,MAAAA,KAAAA,EAAOA,KAAAA,YAAiBrB,KAAAA,GAAQqB,KAAAA,CAAMU,OAAAA,GAAUC,OAAOX,KAAAA;KACzD,CAAA;AACA,IAAA,OAAO,KAAA;AACT,EAAA;AACF;AAVsBY,MAAAA,CAAAA,cAAAA,EAAAA,gBAAAA,CAAAA;AAetB,eAAsBC,mBAA+CrB,MAAAA,EAAS;AAC5E,EAAA,IAAI;AACF,IAAA,MAAMsB,MAAAA,GAAS,MAAMtB,MAAAA,CAAOc,SAAAA,CAAAA,gBAAAA,CAAAA;AAC5B,IAAA,OAAOQ,MAAAA,CAAO,CAAA,CAAA,EAAIC,OAAAA,IAAW,IAAA;AAC/B,EAAA,CAAA,CAAA,OAASf,KAAAA,EAAO;AACdnD,IAAAA,MAAAA,CAAOmD,MAAM,yCAAA,EAA2C;AACtDA,MAAAA,KAAAA,EAAOA,KAAAA,YAAiBrB,KAAAA,GAAQqB,KAAAA,CAAMU,OAAAA,GAAUC,OAAOX,KAAAA;KACzD,CAAA;AACA,IAAA,OAAO,IAAA;AACT,EAAA;AACF;AAVsBa,MAAAA,CAAAA,kBAAAA,EAAAA,oBAAAA,CAAAA;AAetB,eAAsBG,iBACpBxB,MAAAA,EAAS;AAMT,EAAA,MAAM,CAACyB,MAAAA,EAAQF,OAAAA,CAAAA,GAAW,MAAMG,QAAQC,GAAAA,CAAI;AAACjB,IAAAA,mBAAAA,CAAoBV,MAAAA,CAAAA;AAASqB,IAAAA,kBAAAA,CAAmBrB,MAAAA;AAAQ,GAAA,CAAA;AAErG,EAAA,OAAO;AACLyB,IAAAA,MAAAA;AACAF,IAAAA,OAAAA;AACAK,IAAAA,SAAAA,sBAAehB,IAAAA;AACjB,GAAA;AACF;AAdsBY,MAAAA,CAAAA,gBAAAA,EAAAA,kBAAAA,CAAAA;ACjDtB,IAAMK,SAAAA,GAAYC,aAAAA,CAAc,MAAA,CAAA,IAAA,CAAYC,GAAG,CAAA;AAiDxC,SAASC,oBAAoBC,mBAAAA,EAA2B;AAC7D,EAAA,IAAI;AAEF,IAAA,MAAMC,SAAAA,GAAYL,UAAUI,mBAAAA,CAAAA;AAC5B,IAAA,OAAOC,UAAUC,OAAAA,IAAWD,SAAAA;AAC9B,EAAA,CAAA,CAAA,OAAS1B,KAAAA,EAAO;AACdnD,IAAAA,MAAAA,CAAOmD,MAAM,0CAAA,EAA4C;AACvDA,MAAAA,KAAAA,EAAOA,KAAAA,YAAiBrB,KAAAA,GAAQqB,KAAAA,CAAMU,OAAAA,GAAUC,OAAOX,KAAAA,CAAAA;MACvD4B,IAAAA,EAAMH;KACR,CAAA;AACA,IAAA,MAAM,IAAI9C,KAAAA,CAAM,CAAA,qCAAA,EAAwC8C,mBAAAA,CAAAA,CAAqB,CAAA;AAC/E,EAAA;AACF;AAZgBD,MAAAA,CAAAA,mBAAAA,EAAAA,qBAAAA,CAAAA;AAiBT,SAASK,sBAAAA,CACdC,SAAAA,EACAC,cAAAA,EACAC,OAAAA,GAAkC,EAAC,EAAC;AAEpC,EAAA,MAAMC,WAAAA,GAAcF,eAAeD,SAAAA,CAAAA;AAEnC,EAAA,IAAI,CAACG,WAAAA,EAAa;AAChB,IAAA,MAAM,IAAItD,KAAAA,CACR,CAAA,OAAA,EAAUmD,SAAAA,CAAAA,mDAAAA,EACaI,MAAAA,CAAOC,IAAAA,CAAKJ,cAAAA,CAAAA,CAAgBK,IAAAA,CAAK,IAAA,CAAA,CAAA,CAAO,CAAA;AAEnE,EAAA;AAEA,EAAA,MAAM,EAAEC,aAAAA,GAAgB,IAAIC,gBAAAA,GAAmB,KAAA,EAAOC,cAAY,GAAKP,OAAAA;AAGvE,EAAA,IAAIQ,MAAAA,GAAS;OAAIP,WAAAA,CAAYO;;AAG7B,EAAA,IAAIF,gBAAAA,EAAkB;AACpBE,IAAAA,MAAAA,GAAS;AAAIA,MAAAA,GAAAA,MAAAA;SAAWP,WAAAA,CAAYQ;;AACtC,EAAA;AAGA,EAAA,MAAMC,WAAqB,EAAA;AAG3B,EAAA,IAAIL,aAAAA,CAAcM,SAAS,CAAA,EAAG;AAC5BH,IAAAA,MAAAA,GAASA,MAAAA,CAAOI,MAAAA,CAAO,CAACC,KAAAA,KAAAA;AACtB,MAAA,IAAIR,aAAAA,CAAcS,QAAAA,CAASD,KAAAA,CAAAA,EAAQ;AACjCH,QAAAA,QAAAA,CAASK,KAAKF,KAAAA,CAAAA;AACd,QAAA,OAAO,KAAA;AACT,MAAA;AACA,MAAA,OAAO,IAAA;IACT,CAAA,CAAA;AACF,EAAA;AAGA,EAAA,IAAIN,YAAAA,EAAc;AAChBC,IAAAA,MAAAA,GAASA,MAAAA,CAAOI,MAAAA,CAAO,CAACI,SAAAA,KAAAA;AACtB,MAAA,MAAMC,UAAAA,GAAahB,WAAAA,CAAYQ,SAAAA,CAAUK,QAAAA,CAASE,SAAAA,CAAAA;AAClD,MAAA,MAAME,gBAAgBX,YAAAA,CAAa;QACjClH,IAAAA,EAAM2H,SAAAA;QACNG,IAAAA,EAAM,SAAA;AACNF,QAAAA;OACF,CAAA;AAEA,MAAA,IAAI,CAACC,aAAAA,EAAe;AAClBR,QAAAA,QAAAA,CAASK,KAAKC,SAAAA,CAAAA;AAChB,MAAA;AAEA,MAAA,OAAOE,aAAAA;IACT,CAAA,CAAA;AACF,EAAA;AAEA,EAAA,OAAO;AACLV,IAAAA,MAAAA;IACAY,QAAAA,EAAU;AACRC,MAAAA,WAAAA,EAAapB,WAAAA,CAAYO,MAAAA,CAAOG,MAAAA,GAASV,WAAAA,CAAYQ,SAAAA,CAAUE,MAAAA;AAC/DW,MAAAA,aAAAA,EAAeZ,QAAAA,CAASC,MAAAA;MACxBY,cAAAA,EAAgBb,QAAAA;AAChBc,MAAAA,cAAAA,EAAgBvB,YAAYQ,SAAAA,CAAUE;AACxC;AACF,GAAA;AACF;AAjEgBd,MAAAA,CAAAA,sBAAAA,EAAAA,wBAAAA,CAAAA;AAsET,SAAS4B,cAAAA,CAAe3B,SAAAA,EAAmBC,cAAAA,EAAgCO,gBAAAA,GAAmB,KAAA,EAAK;AACxG,EAAA,MAAMxB,MAAAA,GAASe,sBAAAA,CAAuBC,SAAAA,EAAWC,cAAAA,EAAgB;AAAEO,IAAAA;GAAiB,CAAA;AACpF,EAAA,OAAOxB,MAAAA,CAAO0B,MAAAA;AAChB;AAHgBiB,MAAAA,CAAAA,cAAAA,EAAAA,gBAAAA,CAAAA;AAQT,SAASC,QAAAA,CAAS5B,WAAmBC,cAAAA,EAA8B;AACxE,EAAA,OAAOD,SAAAA,IAAaC,cAAAA;AACtB;AAFgB2B,MAAAA,CAAAA,QAAAA,EAAAA,UAAAA,CAAAA;AAOT,SAASC,iBAAiB5B,cAAAA,EAA8B;AAC7D,EAAA,OAAOG,MAAAA,CAAOC,KAAKJ,cAAAA,CAAAA;AACrB;AAFgB4B,MAAAA,CAAAA,gBAAAA,EAAAA,kBAAAA,CAAAA;;;AClGT,SAASC,wBACdC,aAAAA,EAAoD;AAEpD,EAAA,IAAI,CAACA,aAAAA,EAAe;AAClB,IAAA,OAAOpG,MAAAA;AACT,EAAA;AAGA,EAAA,MAAMqG,aAAiC,EAAA;AAEvC,EAAA,IAAID,aAAAA,CAAcE,eAAe,IAAA,EAAM;AACrCD,IAAAA,UAAAA,CAAWf,IAAAA,CAAK;MACdnB,IAAAA,EAAM;AAAC,QAAA;;AACPoC,MAAAA,MAAAA,EAAQH,aAAAA,CAAcE;KACxB,CAAA;AACF,EAAA;AAEA,EAAA,IAAIF,aAAAA,CAAcI,UAAU,IAAA,EAAM;AAChCH,IAAAA,UAAAA,CAAWf,IAAAA,CAAK;MACdnB,IAAAA,EAAM;AAAC,QAAA;;AACPoC,MAAAA,MAAAA,EAAQH,aAAAA,CAAcI;KACxB,CAAA;AACF,EAAA;AAEA,EAAA,IAAIJ,aAAAA,CAAcK,aAAa,IAAA,EAAM;AACnCJ,IAAAA,UAAAA,CAAWf,IAAAA,CAAK;MACdnB,IAAAA,EAAM;AAAC,QAAA;;AACPoC,MAAAA,MAAAA,EAAQH,aAAAA,CAAcK;KACxB,CAAA;AACF,EAAA;AAEA,EAAA,IAAIL,aAAAA,CAAcM,SAAS,IAAA,EAAM;AAC/BL,IAAAA,UAAAA,CAAWf,IAAAA,CAAK;MACdnB,IAAAA,EAAM;AAAC,QAAA;;AACPoC,MAAAA,MAAAA,EAAQH,aAAAA,CAAcM;KACxB,CAAA;AACF,EAAA;AAEA,EAAA,IAAIN,aAAAA,CAAcO,aAAa,IAAA,EAAM;AACnCN,IAAAA,UAAAA,CAAWf,IAAAA,CAAK;MACdnB,IAAAA,EAAM;AAAC,QAAA;;AACPoC,MAAAA,MAAAA,EAAQH,aAAAA,CAAcO;KACxB,CAAA;AACF,EAAA;AAEA,EAAA,IAAIP,aAAAA,CAAcQ,kBAAkB,IAAA,EAAM;AACxCP,IAAAA,UAAAA,CAAWf,IAAAA,CAAK;MACdnB,IAAAA,EAAM;AAAC,QAAA;;AACPoC,MAAAA,MAAAA,EAAQH,aAAAA,CAAcQ;KACxB,CAAA;AACF,EAAA;AAGA,EAAA,IAAIP,UAAAA,CAAWnB,WAAW,CAAA,EAAG;AAC3B,IAAA,OAAOlF,MAAAA;AACT,EAAA;AAGA,EAAA,IAAIqG,UAAAA,CAAWnB,WAAW,CAAA,EAAG;AAC3B,IAAA,OAAOmB,WAAW,CAAA,CAAA;AACpB,EAAA;AAIA,EAAA,OAAOA,WAAW,CAAA,CAAA;AACpB;AAjEgBF,MAAAA,CAAAA,uBAAAA,EAAAA,yBAAAA,CAAAA;AAsFT,SAASU,4BACdT,aAAAA,EAAoD;AAEpD,EAAA,IAAI,CAACA,aAAAA,EAAe;AAClB,IAAA,OAAO,EAAA;AACT,EAAA;AAEA,EAAA,MAAMC,aAAmD,EAAA;AAEzD,EAAA,IAAID,aAAAA,CAAcE,eAAe,IAAA,EAAM;AACrCD,IAAAA,UAAAA,CAAWf,IAAAA,CAAK;MACdwB,OAAAA,EAAS;QACP3C,IAAAA,EAAM;AAAC,UAAA;;AACPoC,QAAAA,MAAAA,EAAQH,aAAAA,CAAcE;AACxB;KACF,CAAA;AACF,EAAA;AAEA,EAAA,IAAIF,aAAAA,CAAcI,UAAU,IAAA,EAAM;AAChCH,IAAAA,UAAAA,CAAWf,IAAAA,CAAK;MACdwB,OAAAA,EAAS;QACP3C,IAAAA,EAAM;AAAC,UAAA;;AACPoC,QAAAA,MAAAA,EAAQH,aAAAA,CAAcI;AACxB;KACF,CAAA;AACF,EAAA;AAEA,EAAA,IAAIJ,aAAAA,CAAcK,aAAa,IAAA,EAAM;AACnCJ,IAAAA,UAAAA,CAAWf,IAAAA,CAAK;MACdwB,OAAAA,EAAS;QACP3C,IAAAA,EAAM;AAAC,UAAA;;AACPoC,QAAAA,MAAAA,EAAQH,aAAAA,CAAcK;AACxB;KACF,CAAA;AACF,EAAA;AAEA,EAAA,IAAIL,aAAAA,CAAcM,SAAS,IAAA,EAAM;AAC/BL,IAAAA,UAAAA,CAAWf,IAAAA,CAAK;MACdwB,OAAAA,EAAS;QACP3C,IAAAA,EAAM;AAAC,UAAA;;AACPoC,QAAAA,MAAAA,EAAQH,aAAAA,CAAcM;AACxB;KACF,CAAA;AACF,EAAA;AAEA,EAAA,IAAIN,aAAAA,CAAcO,aAAa,IAAA,EAAM;AACnCN,IAAAA,UAAAA,CAAWf,IAAAA,CAAK;MACdwB,OAAAA,EAAS;QACP3C,IAAAA,EAAM;AAAC,UAAA;;AACPoC,QAAAA,MAAAA,EAAQH,aAAAA,CAAcO;AACxB;KACF,CAAA;AACF,EAAA;AAEA,EAAA,IAAIP,aAAAA,CAAcQ,kBAAkB,IAAA,EAAM;AACxCP,IAAAA,UAAAA,CAAWf,IAAAA,CAAK;MACdwB,OAAAA,EAAS;QACP3C,IAAAA,EAAM;AAAC,UAAA;;AACPoC,QAAAA,MAAAA,EAAQH,aAAAA,CAAcQ;AACxB;KACF,CAAA;AACF,EAAA;AAEA,EAAA,OAAOP,UAAAA;AACT;AAhEgBQ,MAAAA,CAAAA,2BAAAA,EAAAA,6BAAAA,CAAAA;AAoFT,SAASE,cAAcC,YAAAA,EAAiD;AAC7E,EAAA,IAAI,CAACA,YAAAA,EAAc;AACjB,IAAA,OAAOhH,MAAAA;AACT,EAAA;AAGA,EAAA,MAAM8G,UAA0C,EAAC;AAEjD,EAAA,IAAIE,YAAAA,CAAaV,eAAe,IAAA,EAAM;AACpCQ,IAAAA,OAAAA,CAAQ,aAAA,IAAiBE,YAAAA,CAAaV,WAAAA;AACxC,EAAA;AACA,EAAA,IAAIU,YAAAA,CAAaR,UAAU,IAAA,EAAM;AAC/BM,IAAAA,OAAAA,CAAQ,QAAA,IAAYE,YAAAA,CAAaR,MAAAA;AACnC,EAAA;AACA,EAAA,IAAIQ,YAAAA,CAAaP,aAAa,IAAA,EAAM;AAClCK,IAAAA,OAAAA,CAAQ,WAAA,IAAeE,YAAAA,CAAaP,SAAAA;AACtC,EAAA;AACA,EAAA,IAAIO,YAAAA,CAAaN,SAAS,IAAA,EAAM;AAC9BI,IAAAA,OAAAA,CAAQ,OAAA,IAAWE,YAAAA,CAAaN,KAAAA;AAClC,EAAA;AACA,EAAA,IAAIM,YAAAA,CAAaL,aAAa,IAAA,EAAM;AAClCG,IAAAA,OAAAA,CAAQ,WAAA,IAAeE,YAAAA,CAAaL,SAAAA;AACtC,EAAA;AACA,EAAA,IAAIK,YAAAA,CAAaJ,kBAAkB,IAAA,EAAM;AACvCE,IAAAA,OAAAA,CAAQ,gBAAA,IAAoBE,YAAAA,CAAaJ,cAAAA;AAC3C,EAAA;AACA,EAAA,IAAII,YAAAA,CAAaC,UAAU,IAAA,EAAM;AAC/BH,IAAAA,OAAAA,CAAQ,QAAA,IAAYE,YAAAA,CAAaC,MAAAA;AACnC,EAAA;AAGA,EAAA,IAAIxC,MAAAA,CAAOC,IAAAA,CAAKoC,OAAAA,CAAAA,CAAS5B,WAAW,CAAA,EAAG;AACrC,IAAA,OAAOlF,MAAAA;AACT,EAAA;AAEA,EAAA,OAAO8G,OAAAA;AACT;AApCgBC,MAAAA,CAAAA,aAAAA,EAAAA,eAAAA,CAAAA;AAyChB,SAASG,iBAAiBC,GAAAA,EAA4B;AACpD,EAAA,MAAMC,WAA2C,EAAC;AAClD,EAAA,KAAA,MAAW,CAACC,GAAAA,EAAKC,KAAAA,KAAU7C,MAAAA,CAAO8C,OAAAA,CAAQJ,GAAAA,CAAAA,EAAM;AAC9C,IAAA,IAAIG,UAAU,IAAA,EAAM;AAClBF,MAAAA,QAAAA,CAASC,GAAAA,CAAAA,GAAOC,KAAAA;AAClB,IAAA;AACF,EAAA;AACA,EAAA,OAAOF,QAAAA;AACT;AARSF,MAAAA,CAAAA,gBAAAA,EAAAA,kBAAAA,CAAAA;AAaT,SAASM,iBAAAA,CACPC,MAAAA,EACAlC,SAAAA,EACAmC,UAAAA,EAA+D;AAE/D,EAAA,IAAIA,eAAe1H,MAAAA,EAAW;AAC5B,IAAA;AACF,EAAA;AAEA,EAAA,IAAI0H,eAAe,IAAA,EAAM;AACvB,IAAA,OAAOD,OAAOlC,SAAAA,CAAAA;EAChB,CAAA,MAAO;AACLkC,IAAAA,MAAAA,CAAOlC,SAAAA,CAAAA,GAAamC,UAAAA;AACtB,EAAA;AACF;AAdSF,MAAAA,CAAAA,iBAAAA,EAAAA,mBAAAA,CAAAA;AAiCF,SAASG,YAAAA,CACdC,iBACAC,UAAAA,EAA+C;AAG/C,EAAA,IAAI,CAACA,UAAAA,EAAY;AACf,IAAA,IAAI,CAACD,eAAAA,EAAiB;AACpB,MAAA,OAAO5H,MAAAA;AACT,IAAA;AAEA,IAAA,IAAI,OAAO4H,eAAAA,KAAoB,QAAA,IAAY,CAACE,KAAAA,CAAMC,OAAAA,CAAQH,eAAAA,CAAAA,EAAkB;AAC1E,MAAA,MAAMR,QAAAA,GAAWF,iBAAiBU,eAAAA,CAAAA;AAClC,MAAA,OAAOnD,OAAOC,IAAAA,CAAK0C,QAAAA,CAAAA,CAAUlC,MAAAA,GAAS,IAAIkC,QAAAA,GAAWpH,MAAAA;AACvD,IAAA;AACA,IAAA,OAAO4H,eAAAA;AACT,EAAA;AAGA,EAAA,IAAI,CAACA,mBAAmB,OAAOA,eAAAA,KAAoB,YAAYE,KAAAA,CAAMC,OAAAA,CAAQH,eAAAA,CAAAA,EAAkB;AAC7F,IAAA,OAAOb,cAAcc,UAAAA,CAAAA;AACvB,EAAA;AAGA,EAAA,MAAMJ,MAAAA,GAASP,iBAAiBU,eAAAA,CAAAA;AAGhCJ,EAAAA,iBAAAA,CAAkBC,MAAAA,EAAQ,aAAA,EAAeI,UAAAA,CAAWvB,WAAW,CAAA;AAC/DkB,EAAAA,iBAAAA,CAAkBC,MAAAA,EAAQ,QAAA,EAAUI,UAAAA,CAAWrB,MAAM,CAAA;AACrDgB,EAAAA,iBAAAA,CAAkBC,MAAAA,EAAQ,WAAA,EAAaI,UAAAA,CAAWpB,SAAS,CAAA;AAC3De,EAAAA,iBAAAA,CAAkBC,MAAAA,EAAQ,OAAA,EAASI,UAAAA,CAAWnB,KAAK,CAAA;AACnDc,EAAAA,iBAAAA,CAAkBC,MAAAA,EAAQ,WAAA,EAAaI,UAAAA,CAAWlB,SAAS,CAAA;AAC3Da,EAAAA,iBAAAA,CAAkBC,MAAAA,EAAQ,gBAAA,EAAkBI,UAAAA,CAAWjB,cAAc,CAAA;AACrEY,EAAAA,iBAAAA,CAAkBC,MAAAA,EAAQ,QAAA,EAAUI,UAAAA,CAAWZ,MAAM,CAAA;AAErD,EAAA,OAAOxC,OAAOC,IAAAA,CAAK+C,MAAAA,CAAAA,CAAQvC,MAAAA,GAAS,IAAIuC,MAAAA,GAASzH,MAAAA;AACnD;AAnCgB2H,MAAAA,CAAAA,YAAAA,EAAAA,cAAAA,CAAAA;AAmDT,SAASK,aAAaC,WAAAA,EAAyC;AACpE,EAAA,IAAI,CAACA,eAAe,OAAOA,WAAAA,KAAgB,YAAYH,KAAAA,CAAMC,OAAAA,CAAQE,WAAAA,CAAAA,EAAc;AACjF,IAAA,OAAO,IAAA;AACT,EAAA;AAEA,EAAA,MAAMC,GAAAA,GAAMD,WAAAA;AAEZ,EAAA,OAAO;AACL3B,IAAAA,WAAAA,EAAa,OAAO4B,GAAAA,CAAI,aAAA,MAAmB,QAAA,GAAWA,GAAAA,CAAI,aAAA,CAAA,GAAiB,IAAA;AAC3E1B,IAAAA,MAAAA,EAAQ,OAAO0B,GAAAA,CAAI,QAAA,MAAc,QAAA,GAAWA,GAAAA,CAAI,QAAA,CAAA,GAAY,IAAA;AAC5DzB,IAAAA,SAAAA,EAAW,OAAOyB,GAAAA,CAAI,WAAA,MAAiB,QAAA,GAAWA,GAAAA,CAAI,WAAA,CAAA,GAAe,IAAA;AACrExB,IAAAA,KAAAA,EAAO,OAAOwB,GAAAA,CAAI,OAAA,MAAa,QAAA,GAAWA,GAAAA,CAAI,OAAA,CAAA,GAAW,IAAA;AACzDvB,IAAAA,SAAAA,EAAW,OAAOuB,GAAAA,CAAI,WAAA,MAAiB,QAAA,GAAWA,GAAAA,CAAI,WAAA,CAAA,GAAe,IAAA;AACrEtB,IAAAA,cAAAA,EAAgB,OAAOsB,GAAAA,CAAI,gBAAA,MAAsB,QAAA,GAAWA,GAAAA,CAAI,gBAAA,CAAA,GAAoB,IAAA;AACpFjB,IAAAA,MAAAA,EAAQ,OAAOiB,GAAAA,CAAI,QAAA,MAAc,QAAA,GAAYA,GAAAA,CAAI,QAAA,CAAA,GAAwC;AAC3F,GAAA;AACF;AAhBgBF,MAAAA,CAAAA,YAAAA,EAAAA,cAAAA,CAAAA;AAyBT,SAASG,cAAAA,CAAerB,SAA8C3B,MAAAA,EAA0B;AACrG,EAAA,IAAI,CAAC2B,OAAAA,EAAS;AACZ,IAAA,OAAO,KAAA;AACT,EAAA;AAEA,EAAA,IAAI3B,OAAOmB,WAAAA,IAAe,IAAA,IAAQQ,OAAAA,CAAQR,WAAAA,KAAgBnB,OAAOmB,WAAAA,EAAa;AAC5E,IAAA,OAAO,KAAA;AACT,EAAA;AACA,EAAA,IAAInB,OAAOqB,MAAAA,IAAU,IAAA,IAAQM,OAAAA,CAAQN,MAAAA,KAAWrB,OAAOqB,MAAAA,EAAQ;AAC7D,IAAA,OAAO,KAAA;AACT,EAAA;AACA,EAAA,IAAIrB,OAAOsB,SAAAA,IAAa,IAAA,IAAQK,OAAAA,CAAQL,SAAAA,KAActB,OAAOsB,SAAAA,EAAW;AACtE,IAAA,OAAO,KAAA;AACT,EAAA;AACA,EAAA,IAAItB,OAAOuB,KAAAA,IAAS,IAAA,IAAQI,OAAAA,CAAQJ,KAAAA,KAAUvB,OAAOuB,KAAAA,EAAO;AAC1D,IAAA,OAAO,KAAA;AACT,EAAA;AACA,EAAA,IAAIvB,OAAOwB,SAAAA,IAAa,IAAA,IAAQG,OAAAA,CAAQH,SAAAA,KAAcxB,OAAOwB,SAAAA,EAAW;AACtE,IAAA,OAAO,KAAA;AACT,EAAA;AACA,EAAA,IAAIxB,OAAOyB,cAAAA,IAAkB,IAAA,IAAQE,OAAAA,CAAQF,cAAAA,KAAmBzB,OAAOyB,cAAAA,EAAgB;AACrF,IAAA,OAAO,KAAA;AACT,EAAA;AAEA,EAAA,OAAO,IAAA;AACT;AAzBgBuB,MAAAA,CAAAA,cAAAA,EAAAA,gBAAAA,CAAAA;AAiCT,SAASC,qBAAqBC,UAAAA,EAOpC;AACC,EAAA,OAAO;AACL/B,IAAAA,WAAAA,EAAa+B,WAAW/B,WAAAA,IAAe,IAAA;AACvCE,IAAAA,MAAAA,EAAQ6B,WAAW7B,MAAAA,IAAU,IAAA;AAC7BC,IAAAA,SAAAA,EAAW4B,WAAW5B,SAAAA,IAAa,IAAA;AACnCC,IAAAA,KAAAA,EAAO2B,WAAW3B,KAAAA,IAAS,IAAA;AAC3BC,IAAAA,SAAAA,EAAW0B,WAAW1B,SAAAA,IAAa,IAAA;AACnCC,IAAAA,cAAAA,EAAgByB,WAAWzB,cAAAA,IAAkB;AAC/C,GAAA;AACF;AAhBgBwB,MAAAA,CAAAA,oBAAAA,EAAAA,sBAAAA,CAAAA","file":"chunk-RIH3XRBX.js","sourcesContent":["/**\n * Prisma Module for Burdenoff Backend SDK\n *\n * Provides Prisma 7 utilities including:\n * - Singleton database manager for microservices\n * - Unified database client factory with graph extension\n * - Prisma client configuration with PostgreSQL adapter\n * - Connection pooling and management\n * - Health checks and monitoring\n * - Graceful shutdown handling\n * - Field extraction utilities for graph sync\n * - Context filtering utilities for multi-tenant queries\n * - Workspace extension for automatic workspaceId injection\n *\n * @module prisma\n * @category Database\n */\n\nexport * from './manager.js';\nexport * from './factory.js';\nexport * from './client.js';\nexport type * from './types.js';\nexport * from './health.js';\nexport * from './fields.js';\nexport * from './context.js';\nexport * from './workspace-extension.js';\n","/**\n * Database Client Factory\n *\n * Provides a unified factory for creating fully-configured database clients\n * with Prisma 7, PostgreSQL adapter, graph extension, and graceful shutdown.\n *\n * This module consolidates all database setup into a single call, reducing\n * boilerplate across all backend services.\n *\n * @module prisma/factory\n * @category Database\n */\n\nimport { logger } from '../logger/index.js';\nimport {\n  createPrismaClient,\n  ensureServiceApplicationName,\n  type PrismaClientBase,\n  type PrismaClientWrapper,\n  type PrismaClientConstructorOptions,\n} from './client.js';\nimport type { PrismaClientConfig } from './types.js';\nimport { addGraphExtension, type GraphMiddlewareConfig, type GraphEventEmitter } from '../graph/middleware/index.js';\nimport { getGraphEventEmitter } from '../event-queue/graph-emitter.js';\nimport { addWorkspaceExtension, type WorkspaceExtensionConfig } from './workspace-extension.js';\n\n/**\n * Configuration for creating a database client\n */\nexport interface DatabaseClientConfig extends PrismaClientConfig {\n  /**\n   * Product name for graph events (e.g., 'module-tags', 'workspaces')\n   */\n  productName: string;\n\n  /**\n   * Enable graph extension for entity sync\n   * @default true (reads from GRAPH_MIDDLEWARE_ENABLED env var)\n   */\n  enableGraphExtension?: boolean;\n\n  /**\n   * Custom graph event emitter (defaults to NATS-based emitter)\n   */\n  graphEventEmitter?: GraphEventEmitter;\n\n  /**\n   * Enable workspace extension for automatic workspaceId injection.\n   *\n   * Default is layer-aware:\n   * - Global-layer services (`productName` starting with `global-` or `global_`,\n   *   or `WORKSPACE_LAYER=global`) default to `false`. Global-layer tables\n   *   (Tenant, Organization, Workspace, PlatformProduct, etc.) are intentionally\n   *   not workspace-scoped — enforcing workspaceId on them would block legitimate\n   *   queries like `myOrganizations`, `myWorkspaces`, `myAccessibleProducts`.\n   * - All other services (wspace layer, product backends) default to `true`.\n   *\n   * `WORKSPACE_EXTENSION_ENABLED` env var always wins when explicitly set\n   * (`true` or `false`). Pass the field on `config` for code-level override.\n   */\n  enableWorkspaceExtension?: boolean;\n\n  /**\n   * Configuration for the workspace extension\n   */\n  workspaceExtensionConfig?: WorkspaceExtensionConfig;\n\n  /**\n   * Register process shutdown handlers for graceful shutdown\n   * @default true\n   */\n  registerShutdownHandlers?: boolean;\n}\n\n/**\n * Result of creating a database client\n */\nexport interface DatabaseClient<T extends PrismaClientBase> {\n  /**\n   * The extended Prisma client for database operations\n   * Use this for all queries: db.model.operation()\n   */\n  db: T & { client: T };\n\n  /**\n   * The Prisma client wrapper with connection management utilities\n   */\n  wrapper: PrismaClientWrapper<T>;\n\n  /**\n   * Connect to the database with retry logic\n   */\n  connect: (retries?: number, delay?: number) => Promise<void>;\n\n  /**\n   * Disconnect from the database\n   */\n  disconnect: () => Promise<void>;\n}\n\n/**\n * Layer-aware default for the workspace extension.\n *\n * Global-layer services (productName starting with `global-`/`global_`, or\n * `WORKSPACE_LAYER=global`) opt out by default because their tables don't carry\n * a workspaceId column — enforcement would break queries like `myOrganizations`,\n * `myAccessibleProducts`, `contentPages`.\n *\n * `WORKSPACE_EXTENSION_ENABLED` is respected as an explicit override.\n */\nfunction resolveWorkspaceExtensionDefault(productName: string): boolean {\n  const explicit = process.env['WORKSPACE_EXTENSION_ENABLED'];\n  if (explicit === 'true') return true;\n  if (explicit === 'false') return false;\n\n  const layer = process.env['WORKSPACE_LAYER']?.toLowerCase();\n  if (layer === 'global') return false;\n  if (layer === 'wspace') return true;\n\n  const name = productName.toLowerCase();\n  if (name.startsWith('global-') || name.startsWith('global_')) return false;\n  return true;\n}\n\n/**\n * Create a fully-configured database client with graph extension\n *\n * This is the recommended way to create a database connection in all backend services.\n * It handles:\n * - Prisma client creation with PostgreSQL adapter\n * - Connection pooling configuration\n * - Query logging (in development)\n * - Graph extension for entity sync (via NATS or in-memory)\n * - Graceful shutdown handlers\n *\n * @example\n * ```typescript\n * // In your service's db.ts\n * import { PrismaClient } from './generated/prisma/client.js';\n * import { createDatabaseClient } from '@burdenoff/be-sdk/prisma';\n *\n * const { db, wrapper, connect, disconnect } = createDatabaseClient(PrismaClient, {\n *   productName: 'my-service',\n *   databaseUrl: process.env.DATABASE_URL!,\n * });\n *\n * export { db, wrapper, connect, disconnect };\n * export type ExtendedPrismaClient = typeof db;\n * ```\n *\n * @example\n * ```typescript\n * // With custom configuration\n * const { db } = createDatabaseClient(PrismaClient, {\n *   productName: 'workspaces',\n *   databaseUrl: process.env.DATABASE_URL!,\n *   maxConnections: 50,\n *   enableQueryLogging: true,\n *   slowQueryThreshold: 200,\n *   enableGraphExtension: true,\n *   registerShutdownHandlers: true,\n * });\n * ```\n */\nexport function createDatabaseClient<T extends PrismaClientBase>(\n  PrismaClientConstructor: new (options: PrismaClientConstructorOptions) => T,\n  config: DatabaseClientConfig\n): DatabaseClient<T> {\n  const {\n    productName,\n    enableGraphExtension = process.env['GRAPH_MIDDLEWARE_ENABLED'] !== 'false',\n    graphEventEmitter,\n    enableWorkspaceExtension = resolveWorkspaceExtensionDefault(productName),\n    workspaceExtensionConfig,\n    registerShutdownHandlers = true,\n    ...prismaConfig\n  } = config;\n\n  // Tag every service's pool with `svc=<productName>` by default so its\n  // connections are attributable in pg_stat_activity / pg_stat_statements\n  // (the on-ramp to per-workspace observability and shard routing). This is\n  // pure diagnostic metadata with no effect on behavior; explicit\n  // `applicationName` on the config always wins.\n  const prismaConfigWithDefaults: PrismaClientConfig = {\n    ...prismaConfig,\n    applicationName: prismaConfig.applicationName ?? `svc=${productName}`,\n  };\n\n  // Belt-and-suspenders: also set the PGAPPNAME env fallback so any additional\n  // pools this service opens outside be-sdk still carry the per-service tag.\n  ensureServiceApplicationName(productName);\n\n  // Create Prisma client wrapper\n  const wrapper = createPrismaClient(PrismaClientConstructor, prismaConfigWithDefaults);\n\n  // Get the base client\n  const baseClient = wrapper.getClient();\n\n  // Extension chaining order:\n  // 1. Graph extension (event emission on CRUD) - runs first\n  // 2. Workspace extension (auto-inject workspaceId) - runs second\n  //\n  // The workspace extension should run BEFORE graph extension in the\n  // interception chain so that graph events include the injected workspaceId.\n  // In Prisma $extends, the LAST extension added runs FIRST (outermost wrapper).\n  // So we add graph first, then workspace on top.\n\n  let extendedClient: T;\n\n  // Step 1: Add graph extension\n  if (enableGraphExtension) {\n    const eventEmitter = graphEventEmitter ?? getGraphEventEmitter();\n\n    const graphConfig: GraphMiddlewareConfig = {\n      enabled: true,\n      productName,\n      eventEmitter,\n    };\n\n    extendedClient = addGraphExtension(baseClient, graphConfig);\n\n    logger.info('[Database] Graph extension enabled', { productName });\n  } else {\n    extendedClient = baseClient;\n    logger.info('[Database] Graph extension disabled');\n  }\n\n  // Step 2: Add workspace extension (wraps on top of graph)\n  if (enableWorkspaceExtension) {\n    extendedClient = addWorkspaceExtension(extendedClient, workspaceExtensionConfig);\n\n    logger.info('[Database] Workspace extension enabled', { productName });\n  } else {\n    logger.info('[Database] Workspace extension disabled');\n  }\n\n  // Add backwards compatibility alias\n  const db = extendedClient as T & { client: T };\n  (db as unknown as Record<string, unknown>)['client'] = db;\n\n  // Register shutdown handlers if requested\n  if (registerShutdownHandlers) {\n    wrapper.registerShutdownHandlers();\n    logger.debug('[Database] Shutdown handlers registered');\n  }\n\n  return {\n    db,\n    wrapper,\n    connect: (retries?: number, delay?: number) => wrapper.connect(retries, delay),\n    disconnect: () => wrapper.disconnect(),\n  };\n}\n\n/**\n * Pool-tuning options resolved from environment variables.\n */\nexport interface PoolTuningEnv {\n  /** Postgres application_name (defaults to `svc=<productName>`). */\n  applicationName: string;\n  /** Client-side node-postgres query_timeout in ms, if opted in (pooler-safe). */\n  queryTimeoutMillis?: number;\n  /** Server-side statement_timeout in ms, if opted in. */\n  statementTimeoutMillis?: number;\n  /** Server-side idle_in_transaction_session_timeout in ms, if opted in. */\n  idleInTransactionTimeoutMillis?: number;\n  /** Server-side lock_timeout in ms, if opted in. */\n  lockTimeoutMillis?: number;\n}\n\n/**\n * Parse a strictly-positive integer environment variable.\n *\n * Returns `undefined` for unset, empty, non-numeric, zero, or negative values —\n * so a misconfigured or absent env var can never silently enable an aggressive\n * (or nonsensical) timeout. This is what keeps the DB-enforced timeouts OFF by\n * default and therefore behavior-preserving.\n */\nfunction parsePositiveIntEnv(name: string): number | undefined {\n  const raw = process.env[name];\n  if (raw == null || raw.trim() === '') {\n    return undefined;\n  }\n  const parsed = Number.parseInt(raw.trim(), 10);\n  return Number.isFinite(parsed) && parsed > 0 ? parsed : undefined;\n}\n\n/**\n * Resolve pool tuning (application_name + opt-in DB timeouts) from env vars:\n * - DATABASE_APPLICATION_NAME: overrides the default `svc=<productName>` tag\n * - DATABASE_QUERY_TIMEOUT: client-side node-postgres query_timeout in ms (opt-in, pooler-safe)\n * - DATABASE_STATEMENT_TIMEOUT: server-side statement_timeout in ms (opt-in; DIRECT :5432 only — see note)\n * - DATABASE_IDLE_IN_TRANSACTION_TIMEOUT: idle_in_transaction_session_timeout in ms (opt-in)\n * - DATABASE_LOCK_TIMEOUT: lock_timeout in ms (opt-in)\n *\n * Timeouts are omitted entirely unless explicitly set to a positive integer, so\n * the default is exactly today's behavior (no timeouts).\n *\n * NOTE: prefer `DATABASE_QUERY_TIMEOUT` for services whose `DATABASE_URL` points\n * at the built-in PgBouncer (`:6432`). `DATABASE_STATEMENT_TIMEOUT` and friends\n * are Postgres startup parameters that Azure PgBouncer does not pass through, so\n * they silently have no effect (or fail the connection) on the pooled path.\n */\nexport function resolvePoolTuningFromEnv(productName: string): PoolTuningEnv {\n  const tuning: PoolTuningEnv = {\n    applicationName: process.env['DATABASE_APPLICATION_NAME']?.trim() || `svc=${productName}`,\n  };\n\n  const queryTimeout = parsePositiveIntEnv('DATABASE_QUERY_TIMEOUT');\n  if (queryTimeout !== undefined) {\n    tuning.queryTimeoutMillis = queryTimeout;\n  }\n\n  const statementTimeout = parsePositiveIntEnv('DATABASE_STATEMENT_TIMEOUT');\n  if (statementTimeout !== undefined) {\n    tuning.statementTimeoutMillis = statementTimeout;\n  }\n\n  const idleInTransactionTimeout = parsePositiveIntEnv('DATABASE_IDLE_IN_TRANSACTION_TIMEOUT');\n  if (idleInTransactionTimeout !== undefined) {\n    tuning.idleInTransactionTimeoutMillis = idleInTransactionTimeout;\n  }\n\n  const lockTimeout = parsePositiveIntEnv('DATABASE_LOCK_TIMEOUT');\n  if (lockTimeout !== undefined) {\n    tuning.lockTimeoutMillis = lockTimeout;\n  }\n\n  return tuning;\n}\n\n/**\n * Create a database client from environment variables\n *\n * Convenience function that reads configuration from standard environment variables:\n * - DATABASE_URL: Connection string (required)\n * - DATABASE_MAX_CONNECTIONS: Max pool connections (default: 20)\n * - DATABASE_APPLICATION_NAME: Postgres application_name (default: `svc=<productName>`)\n * - DATABASE_QUERY_TIMEOUT: opt-in client-side query timeout in ms — the\n *   PgBouncer-safe query bound (default: OFF, preserving current behavior)\n * - DATABASE_STATEMENT_TIMEOUT / DATABASE_IDLE_IN_TRANSACTION_TIMEOUT / DATABASE_LOCK_TIMEOUT:\n *   opt-in server-side timeouts in ms (default: OFF; DIRECT :5432 only — not\n *   honored through the built-in PgBouncer :6432 runtime path)\n * - NODE_ENV: Environment for logging settings\n * - GRAPH_MIDDLEWARE_ENABLED: Enable graph sync (default: true)\n *\n * @example\n * ```typescript\n * import { PrismaClient } from './generated/prisma/client.js';\n * import { createDatabaseClientFromEnv } from '@burdenoff/be-sdk/prisma';\n *\n * const { db } = createDatabaseClientFromEnv(PrismaClient, 'module-tags');\n * export { db };\n * ```\n */\nexport function createDatabaseClientFromEnv<T extends PrismaClientBase>(\n  PrismaClientConstructor: new (options: PrismaClientConstructorOptions) => T,\n  productName: string,\n  overrides?: Partial<DatabaseClientConfig>\n): DatabaseClient<T> {\n  const databaseUrl = process.env['DATABASE_URL'];\n  if (!databaseUrl) {\n    throw new Error('DATABASE_URL environment variable is required');\n  }\n\n  const isDevelopment = process.env['NODE_ENV'] === 'development';\n\n  const config: DatabaseClientConfig = {\n    productName,\n    databaseUrl,\n    maxConnections: parseInt(process.env['DATABASE_MAX_CONNECTIONS'] || '20', 10),\n    idleTimeoutMillis: parseInt(process.env['DATABASE_IDLE_TIMEOUT'] || '30000', 10),\n    connectionTimeoutMillis: parseInt(process.env['DATABASE_CONNECTION_TIMEOUT'] || '10000', 10),\n    ...resolvePoolTuningFromEnv(productName),\n    enableQueryLogging: isDevelopment,\n    slowQueryThreshold: isDevelopment ? 100 : 500,\n    ...overrides,\n  };\n\n  // Transient acquire retry — env-tunable, and unlike the fields above zero is\n  // meaningful (DATABASE_ACQUIRE_RETRIES=0 disables the retry entirely).\n  const acquireRetriesRaw = process.env['DATABASE_ACQUIRE_RETRIES']?.trim();\n  if (acquireRetriesRaw !== undefined && acquireRetriesRaw !== '' && config.acquireRetries === undefined) {\n    const parsed = Number.parseInt(acquireRetriesRaw, 10);\n    if (Number.isFinite(parsed) && parsed >= 0) {\n      config.acquireRetries = parsed;\n    }\n  }\n  const acquireRetryDelay = parsePositiveIntEnv('DATABASE_ACQUIRE_RETRY_DELAY');\n  if (acquireRetryDelay !== undefined && config.acquireRetryDelayMillis === undefined) {\n    config.acquireRetryDelayMillis = acquireRetryDelay;\n  }\n\n  return createDatabaseClient(PrismaClientConstructor, config);\n}\n","/**\n * Database Singleton Manager\n *\n * Provides a singleton pattern for database connections across microservices.\n * Services initialize once at startup and access the db instance globally.\n *\n * This eliminates the need for individual db.ts files in each microservice.\n *\n * @module prisma/manager\n * @category Database\n *\n * @example\n * ```typescript\n * // In your service's index.ts (startup)\n * import { PrismaClient } from './generated/prisma/client.js';\n * import { initializeDatabase } from '@burdenoff/be-sdk/prisma';\n *\n * // Initialize once at startup\n * const { db, connect } = initializeDatabase(PrismaClient, 'module-tags');\n * await connect();\n *\n * // In any other file\n * import { getDb } from '@burdenoff/be-sdk/prisma';\n * const db = getDb();\n * await db.client.user.findMany();\n * ```\n */\n\nimport { logger } from '../logger/index.js';\nimport {\n  createDatabaseClient,\n  createDatabaseClientFromEnv,\n  type DatabaseClient,\n  type DatabaseClientConfig,\n} from './factory.js';\nimport type { PrismaClientBase, PrismaClientConstructorOptions, DatabaseReturnType } from './client.js';\n\n/**\n * Global database manager state\n */\ninterface DatabaseManagerState {\n  initialized: boolean;\n  productName: string | null;\n  client: DatabaseClient<PrismaClientBase> | null;\n}\n\n/**\n * Singleton state for the database manager\n */\nconst state: DatabaseManagerState = {\n  initialized: false,\n  productName: null,\n  client: null,\n};\n\n/**\n * Initialize the database singleton\n *\n * Call this once at application startup with your service's PrismaClient.\n * After initialization, use `getDb()` to access the database anywhere.\n *\n * @param PrismaClientConstructor - The generated PrismaClient class from your service\n * @param productName - Product name for graph events (e.g., 'module-tags', 'workspaces')\n * @param config - Optional configuration overrides\n * @returns The database client with db, wrapper, connect, disconnect\n *\n * @throws Error if already initialized with a different product\n *\n * @example\n * ```typescript\n * import { PrismaClient } from './generated/prisma/client.js';\n * import { initializeDatabase } from '@burdenoff/be-sdk/prisma';\n *\n * const { db, connect, disconnect } = initializeDatabase(PrismaClient, 'module-tags');\n * await connect();\n * ```\n */\nexport function initializeDatabase<T extends PrismaClientBase>(\n  PrismaClientConstructor: new (options: PrismaClientConstructorOptions) => T,\n  productName: string,\n  config?: Partial<DatabaseClientConfig>\n): DatabaseClient<T> {\n  // Check if already initialized\n  if (state.initialized) {\n    if (state.productName !== productName) {\n      throw new Error(\n        `Database already initialized for product \"${state.productName}\". ` +\n          `Cannot reinitialize for \"${productName}\".`\n      );\n    }\n    logger.debug('[DatabaseManager] Already initialized, returning existing client', { productName });\n    return state.client as DatabaseClient<T>;\n  }\n\n  // Create the database client using env-based factory\n  const client = createDatabaseClientFromEnv(PrismaClientConstructor, productName, config);\n\n  // Store in singleton state\n  state.initialized = true;\n  state.productName = productName;\n  state.client = client;\n\n  logger.info('[DatabaseManager] Database initialized', { productName });\n\n  return client;\n}\n\n/**\n * Initialize the database with explicit configuration\n *\n * Use this when you need full control over database configuration\n * rather than reading from environment variables.\n *\n * @param PrismaClientConstructor - The generated PrismaClient class\n * @param config - Full database configuration\n * @returns The database client\n *\n * @example\n * ```typescript\n * const { db } = initializeDatabaseWithConfig(PrismaClient, {\n *   productName: 'module-tags',\n *   databaseUrl: 'postgresql://...',\n *   maxConnections: 50,\n *   enableGraphExtension: false,\n * });\n * ```\n */\nexport function initializeDatabaseWithConfig<T extends PrismaClientBase>(\n  PrismaClientConstructor: new (options: PrismaClientConstructorOptions) => T,\n  config: DatabaseClientConfig\n): DatabaseClient<T> {\n  const { productName } = config;\n\n  // Check if already initialized\n  if (state.initialized) {\n    if (state.productName !== productName) {\n      throw new Error(\n        `Database already initialized for product \"${state.productName}\". ` +\n          `Cannot reinitialize for \"${productName}\".`\n      );\n    }\n    logger.debug('[DatabaseManager] Already initialized, returning existing client', { productName });\n    return state.client as DatabaseClient<T>;\n  }\n\n  // Create the database client\n  const client = createDatabaseClient(PrismaClientConstructor, config);\n\n  // Store in singleton state\n  state.initialized = true;\n  state.productName = productName;\n  state.client = client;\n\n  logger.info('[DatabaseManager] Database initialized with custom config', { productName });\n\n  return client;\n}\n\n/**\n * Get the initialized database client\n *\n * Use this anywhere in your application to access the database.\n * Must call `initializeDatabase()` first at application startup.\n *\n * The returned client provides dynamic model access - you can access any\n * model property (e.g., `db.client.user`, `db.client.universalTag`) and\n * TypeScript will allow common Prisma operations (findMany, create, etc.).\n *\n * @returns The extended Prisma client (db) with dynamic model access\n * @throws Error if database not initialized\n *\n * @example\n * ```typescript\n * import { getDb } from '@burdenoff/be-sdk/prisma';\n *\n * const db = getDb();\n * // Dynamic model access works without importing service-specific types\n * const tags = await db.client.universalTag.findMany();\n * const users = await db.client.user.findMany({ where: { active: true } });\n * ```\n */\nexport function getDb<T extends PrismaClientBase = PrismaClientBase>(): DatabaseReturnType<T> {\n  if (!state.initialized || !state.client) {\n    throw new Error('Database not initialized. Call initializeDatabase() at application startup before using getDb().');\n  }\n  return state.client.db as unknown as DatabaseReturnType<T>;\n}\n\n/**\n * Get the full database manager\n *\n * Returns the complete database client including wrapper, connect, and disconnect functions.\n * Useful when you need access to connection management utilities.\n *\n * @returns The full database client\n * @throws Error if database not initialized\n *\n * @example\n * ```typescript\n * import { getDatabaseManager } from '@burdenoff/be-sdk/prisma';\n *\n * const { db, wrapper, connect, disconnect } = getDatabaseManager();\n * await connect();\n * ```\n */\nexport function getDatabaseManager<T extends PrismaClientBase = PrismaClientBase>(): DatabaseClient<T> {\n  if (!state.initialized || !state.client) {\n    throw new Error(\n      'Database not initialized. Call initializeDatabase() at application startup before using getDatabaseManager().'\n    );\n  }\n  return state.client as DatabaseClient<T>;\n}\n\n/**\n * Check if database is initialized\n *\n * @returns True if database has been initialized\n *\n * @example\n * ```typescript\n * if (!isDatabaseInitialized()) {\n *   await initializeDatabase(PrismaClient, 'my-service');\n * }\n * ```\n */\nexport function isDatabaseInitialized(): boolean {\n  return state.initialized;\n}\n\n/**\n * Get the product name of the initialized database\n *\n * @returns The product name or null if not initialized\n */\nexport function getDatabaseProductName(): string | null {\n  return state.productName;\n}\n\n/**\n * Reset the database manager (for testing purposes only)\n *\n * WARNING: This disconnects and resets the database manager.\n * Only use this in test environments for cleanup between tests.\n *\n * @internal\n */\nexport async function resetDatabaseManager(): Promise<void> {\n  if (state.client) {\n    try {\n      await state.client.disconnect();\n    } catch (error) {\n      logger.warn('[DatabaseManager] Error during disconnect on reset', { error });\n    }\n  }\n\n  state.initialized = false;\n  state.productName = null;\n  state.client = null;\n\n  logger.debug('[DatabaseManager] Database manager reset');\n}\n","/**\n * Prisma Health Check Utilities\n */\n\nimport { logger } from '../logger/index.js';\nimport type { DatabaseHealth } from './types.js';\nimport type { PrismaClientBase } from './client.js';\n\n/**\n * Check database health\n */\nexport async function checkDatabaseHealth<T extends PrismaClientBase>(client: T): Promise<DatabaseHealth> {\n  try {\n    const start = Date.now();\n    await client.$queryRaw`SELECT 1`;\n    const latency = Date.now() - start;\n\n    return { healthy: true, latency };\n  } catch (error) {\n    const errorMessage = error instanceof Error ? error.message : String(error);\n    logger.error('[Prisma] Health check failed', { error: errorMessage });\n\n    return {\n      healthy: false,\n      error: errorMessage,\n    };\n  }\n}\n\n/**\n * Test database connection\n */\nexport async function testConnection<T extends PrismaClientBase>(client: T): Promise<boolean> {\n  try {\n    await client.$queryRaw`SELECT 1`;\n    return true;\n  } catch (error) {\n    logger.error('[Prisma] Connection test failed', {\n      error: error instanceof Error ? error.message : String(error),\n    });\n    return false;\n  }\n}\n\n/**\n * Get database version\n */\nexport async function getDatabaseVersion<T extends PrismaClientBase>(client: T): Promise<string | null> {\n  try {\n    const result = await client.$queryRaw<Array<{ version?: string }>>`SELECT version()`;\n    return result[0]?.version ?? null;\n  } catch (error) {\n    logger.error('[Prisma] Failed to get database version', {\n      error: error instanceof Error ? error.message : String(error),\n    });\n    return null;\n  }\n}\n\n/**\n * Get database stats\n */\nexport async function getDatabaseStats<T extends PrismaClientBase>(\n  client: T\n): Promise<{\n  health: DatabaseHealth;\n  version: string | null;\n  timestamp: Date;\n}> {\n  const [health, version] = await Promise.all([checkDatabaseHealth(client), getDatabaseVersion(client)]);\n\n  return {\n    health,\n    version,\n    timestamp: new Date(),\n  };\n}\n","/**\n * Prisma Field Extraction Utilities\n *\n * Provides utilities for extracting model fields from Prisma schema.\n * In Prisma 7, DMMF is not available at runtime, so this module provides\n * build-time field extraction through a generator.\n *\n * @module prisma/fields\n */\n\nimport { createRequire } from 'node:module';\nimport { logger } from '../logger/index.js';\n\nconst requireFn = createRequire(import.meta.url);\n\n/**\n * Field extraction options\n */\nexport interface FieldExtractionOptions {\n  /** Fields to exclude from extraction */\n  excludeFields?: string[];\n  /** Whether to include relation fields */\n  includeRelations?: boolean;\n  /** Custom filter function */\n  customFilter?: (field: { name: string; type: string; isRelation: boolean }) => boolean;\n}\n\n/**\n * Field extraction result\n */\nexport interface FieldExtractionResult {\n  /** Extracted field names */\n  fields: string[];\n  /** Metadata about the extraction */\n  metadata: {\n    /** Total number of fields found */\n    totalFields: number;\n    /** Number of fields excluded */\n    excludedCount: number;\n    /** Names of excluded fields */\n    excludedFields: string[];\n    /** Number of relation fields */\n    relationFields: number;\n  };\n}\n\n/**\n * Model fields mapping\n * This will be generated at build time by the Prisma generator\n */\nexport type ModelFieldsMap = Record<\n  string,\n  {\n    fields: string[];\n    relations: string[];\n  }\n>;\n\n/**\n * Import generated fields from the consuming package\n * This function should be used by backends to load their generated fields\n */\nexport function loadGeneratedFields(generatedFieldsPath: string): ModelFieldsMap {\n  try {\n    // Dynamic import of generated fields using createRequire\n    const generated = requireFn(generatedFieldsPath) as { default: ModelFieldsMap };\n    return generated.default || generated;\n  } catch (error) {\n    logger.error('[Prisma] Failed to load generated fields', {\n      error: error instanceof Error ? error.message : String(error),\n      path: generatedFieldsPath,\n    });\n    throw new Error(`Failed to load generated fields from ${generatedFieldsPath}`);\n  }\n}\n\n/**\n * Extract fields from generated model fields with options\n */\nexport function extractFieldsFromModel(\n  modelName: string,\n  modelFieldsMap: ModelFieldsMap,\n  options: FieldExtractionOptions = {}\n): FieldExtractionResult {\n  const modelFields = modelFieldsMap[modelName];\n\n  if (!modelFields) {\n    throw new Error(\n      `Model \"${modelName}\" not found in generated fields. ` +\n        `Available models: ${Object.keys(modelFieldsMap).join(', ')}`\n    );\n  }\n\n  const { excludeFields = [], includeRelations = false, customFilter } = options;\n\n  // Start with scalar fields\n  let fields = [...modelFields.fields];\n\n  // Add relations if requested\n  if (includeRelations) {\n    fields = [...fields, ...modelFields.relations];\n  }\n\n  // Track excluded fields\n  const excluded: string[] = [];\n\n  // Apply exclusions\n  if (excludeFields.length > 0) {\n    fields = fields.filter((field) => {\n      if (excludeFields.includes(field)) {\n        excluded.push(field);\n        return false;\n      }\n      return true;\n    });\n  }\n\n  // Apply custom filter\n  if (customFilter) {\n    fields = fields.filter((fieldName) => {\n      const isRelation = modelFields.relations.includes(fieldName);\n      const shouldInclude = customFilter({\n        name: fieldName,\n        type: 'unknown', // Type information not available without full DMMF\n        isRelation,\n      });\n\n      if (!shouldInclude) {\n        excluded.push(fieldName);\n      }\n\n      return shouldInclude;\n    });\n  }\n\n  return {\n    fields,\n    metadata: {\n      totalFields: modelFields.fields.length + modelFields.relations.length,\n      excludedCount: excluded.length,\n      excludedFields: excluded,\n      relationFields: modelFields.relations.length,\n    },\n  };\n}\n\n/**\n * Get all field names for a model (without options)\n */\nexport function getModelFields(modelName: string, modelFieldsMap: ModelFieldsMap, includeRelations = false): string[] {\n  const result = extractFieldsFromModel(modelName, modelFieldsMap, { includeRelations });\n  return result.fields;\n}\n\n/**\n * Check if a model exists in the generated fields\n */\nexport function hasModel(modelName: string, modelFieldsMap: ModelFieldsMap): boolean {\n  return modelName in modelFieldsMap;\n}\n\n/**\n * Get all available model names\n */\nexport function getAllModelNames(modelFieldsMap: ModelFieldsMap): string[] {\n  return Object.keys(modelFieldsMap);\n}\n","/**\n * Prisma Context Filtering Utilities\n *\n * Utilities for handling operation context in queries, mutations, and filtering.\n * Context JSON enables multi-dimensional data isolation across workspaces, users, projects, etc.\n *\n * @module prisma/context\n * @category Database\n */\n\n/**\n * Context filter input for querying entities by context\n */\nexport interface ContextFilterInput {\n  workspaceId?: string | null;\n  userId?: string | null;\n  projectId?: string | null;\n  appId?: string | null;\n  /** Product identifier (e.g. \"vibecontrols\", \"workspaces\"). Stamped on cross-product\n   *  records so admin filters can scope by originating product. */\n  productId?: string | null;\n  /** Organization identifier within the tenant. */\n  organizationId?: string | null;\n}\n\n/**\n * Operation context for create/update operations\n */\nexport interface OperationContext extends ContextFilterInput {\n  custom?: Record<string, unknown> | null;\n}\n\n/**\n * Prisma JSON filter type (simplified for context filtering)\n * This type is designed to be compatible with Prisma's JsonNullableFilter\n * Uses Record<string, unknown> for maximum compatibility with various Prisma versions\n */\nexport type PrismaJsonFilter = Record<string, unknown>;\n\n/**\n * JSON value type for Prisma (includes null for reading from DB)\n */\nexport type JsonValue = string | number | boolean | null | { [key: string]: JsonValue } | JsonValue[];\n\n/**\n * Input JSON value type for Prisma (excludes null for writing to DB)\n * Compatible with Prisma's InputJsonValue type\n */\nexport type InputJsonValue = string | number | boolean | { [key: string]: InputJsonValue } | InputJsonValue[];\n\n/**\n * Build Prisma where condition for context filtering.\n * Uses PostgreSQL JSONB containment operators for efficient queries.\n *\n * @param contextFilter - The context filter input\n * @returns Prisma where clause for context field, or undefined if no filter provided\n *\n * @example\n * ```typescript\n * const contextWhere = buildContextWhereClause({\n *   workspaceId: '123',\n *   projectId: '456'\n * });\n * // Returns: { path: ['workspaceId'], equals: '123' }\n * ```\n */\nexport function buildContextWhereClause(\n  contextFilter: ContextFilterInput | null | undefined\n): PrismaJsonFilter | undefined {\n  if (!contextFilter) {\n    return undefined;\n  }\n\n  // Build array of path conditions for each non-null field\n  const conditions: PrismaJsonFilter[] = [];\n\n  if (contextFilter.workspaceId != null) {\n    conditions.push({\n      path: ['workspaceId'],\n      equals: contextFilter.workspaceId,\n    });\n  }\n\n  if (contextFilter.userId != null) {\n    conditions.push({\n      path: ['userId'],\n      equals: contextFilter.userId,\n    });\n  }\n\n  if (contextFilter.projectId != null) {\n    conditions.push({\n      path: ['projectId'],\n      equals: contextFilter.projectId,\n    });\n  }\n\n  if (contextFilter.appId != null) {\n    conditions.push({\n      path: ['appId'],\n      equals: contextFilter.appId,\n    });\n  }\n\n  if (contextFilter.productId != null) {\n    conditions.push({\n      path: ['productId'],\n      equals: contextFilter.productId,\n    });\n  }\n\n  if (contextFilter.organizationId != null) {\n    conditions.push({\n      path: ['organizationId'],\n      equals: contextFilter.organizationId,\n    });\n  }\n\n  // If no conditions, return undefined\n  if (conditions.length === 0) {\n    return undefined;\n  }\n\n  // If single condition, return it directly\n  if (conditions.length === 1) {\n    return conditions[0];\n  }\n\n  // For multiple conditions, return the first one\n  // Caller should use buildContextWhereConditions for multiple AND conditions\n  return conditions[0];\n}\n\n/**\n * Build context where conditions as an array for use in AND clause.\n * This is useful when you need to filter by multiple context fields.\n *\n * @param contextFilter - The context filter input\n * @returns Array of Prisma where conditions, each targeting the context field\n *\n * @example\n * ```typescript\n * const conditions = buildContextWhereConditions({\n *   workspaceId: '123',\n *   projectId: '456'\n * });\n * // Use in Prisma query:\n * prisma.entity.findMany({\n *   where: { AND: conditions }\n * });\n * ```\n */\nexport function buildContextWhereConditions(\n  contextFilter: ContextFilterInput | null | undefined\n): Array<{ context: PrismaJsonFilter }> {\n  if (!contextFilter) {\n    return [];\n  }\n\n  const conditions: Array<{ context: PrismaJsonFilter }> = [];\n\n  if (contextFilter.workspaceId != null) {\n    conditions.push({\n      context: {\n        path: ['workspaceId'],\n        equals: contextFilter.workspaceId,\n      },\n    });\n  }\n\n  if (contextFilter.userId != null) {\n    conditions.push({\n      context: {\n        path: ['userId'],\n        equals: contextFilter.userId,\n      },\n    });\n  }\n\n  if (contextFilter.projectId != null) {\n    conditions.push({\n      context: {\n        path: ['projectId'],\n        equals: contextFilter.projectId,\n      },\n    });\n  }\n\n  if (contextFilter.appId != null) {\n    conditions.push({\n      context: {\n        path: ['appId'],\n        equals: contextFilter.appId,\n      },\n    });\n  }\n\n  if (contextFilter.productId != null) {\n    conditions.push({\n      context: {\n        path: ['productId'],\n        equals: contextFilter.productId,\n      },\n    });\n  }\n\n  if (contextFilter.organizationId != null) {\n    conditions.push({\n      context: {\n        path: ['organizationId'],\n        equals: contextFilter.organizationId,\n      },\n    });\n  }\n\n  return conditions;\n}\n\n/**\n * Convert context input to Prisma JSON format for create/update operations.\n *\n * @param contextInput - The context input\n * @returns JSON value for the context field, or undefined if empty\n *\n * @example\n * ```typescript\n * const contextJson = toContextJson({\n *   workspaceId: '123',\n *   userId: '456'\n * });\n * // Use in Prisma create:\n * prisma.entity.create({\n *   data: { context: contextJson }\n * });\n * ```\n */\nexport function toContextJson(contextInput: OperationContext | null | undefined): InputJsonValue | undefined {\n  if (!contextInput) {\n    return undefined;\n  }\n\n  // Remove null values and build clean context object\n  const context: Record<string, InputJsonValue> = {};\n\n  if (contextInput.workspaceId != null) {\n    context['workspaceId'] = contextInput.workspaceId;\n  }\n  if (contextInput.userId != null) {\n    context['userId'] = contextInput.userId;\n  }\n  if (contextInput.projectId != null) {\n    context['projectId'] = contextInput.projectId;\n  }\n  if (contextInput.appId != null) {\n    context['appId'] = contextInput.appId;\n  }\n  if (contextInput.productId != null) {\n    context['productId'] = contextInput.productId;\n  }\n  if (contextInput.organizationId != null) {\n    context['organizationId'] = contextInput.organizationId;\n  }\n  if (contextInput.custom != null) {\n    context['custom'] = contextInput.custom as InputJsonValue;\n  }\n\n  // Return undefined if no fields set\n  if (Object.keys(context).length === 0) {\n    return undefined;\n  }\n\n  return context;\n}\n\n/**\n * Filter out null values from an object for Prisma compatibility\n */\nfunction filterNullValues(obj: Record<string, unknown>): Record<string, InputJsonValue> {\n  const filtered: Record<string, InputJsonValue> = {};\n  for (const [key, value] of Object.entries(obj)) {\n    if (value !== null) {\n      filtered[key] = value as InputJsonValue;\n    }\n  }\n  return filtered;\n}\n\n/**\n * Merge a single field into the merged context object\n */\nfunction mergeContextField(\n  merged: Record<string, InputJsonValue>,\n  fieldName: string,\n  fieldValue: string | Record<string, unknown> | null | undefined\n): void {\n  if (fieldValue === undefined) {\n    return; // Don't touch this field\n  }\n\n  if (fieldValue === null) {\n    delete merged[fieldName]; // Explicitly remove\n  } else {\n    merged[fieldName] = fieldValue as InputJsonValue; // Set new value\n  }\n}\n\n/**\n * Merge existing context with new context input.\n * New values override existing ones, but undefined values are preserved from existing.\n *\n * @param existingContext - The existing context JSON from database\n * @param newContext - The new context input\n * @returns Merged context as InputJsonValue (suitable for Prisma writes)\n *\n * @example\n * ```typescript\n * const merged = mergeContext(\n *   { workspaceId: '123', userId: 'old' },\n *   { userId: 'new', projectId: '456' }\n * );\n * // Result: { workspaceId: '123', userId: 'new', projectId: '456' }\n * ```\n */\nexport function mergeContext(\n  existingContext: JsonValue | null | undefined,\n  newContext: OperationContext | null | undefined\n): InputJsonValue | undefined {\n  // If no new context, return existing (excluding null values)\n  if (!newContext) {\n    if (!existingContext) {\n      return undefined;\n    }\n    // Filter out null values from existing context for Prisma compatibility\n    if (typeof existingContext === 'object' && !Array.isArray(existingContext)) {\n      const filtered = filterNullValues(existingContext);\n      return Object.keys(filtered).length > 0 ? filtered : undefined;\n    }\n    return existingContext as InputJsonValue;\n  }\n\n  // If no existing context, convert new to JSON\n  if (!existingContext || typeof existingContext !== 'object' || Array.isArray(existingContext)) {\n    return toContextJson(newContext);\n  }\n\n  // Merge existing with new\n  const merged = filterNullValues(existingContext);\n\n  // Merge each field from new context\n  mergeContextField(merged, 'workspaceId', newContext.workspaceId);\n  mergeContextField(merged, 'userId', newContext.userId);\n  mergeContextField(merged, 'projectId', newContext.projectId);\n  mergeContextField(merged, 'appId', newContext.appId);\n  mergeContextField(merged, 'productId', newContext.productId);\n  mergeContextField(merged, 'organizationId', newContext.organizationId);\n  mergeContextField(merged, 'custom', newContext.custom);\n\n  return Object.keys(merged).length > 0 ? merged : undefined;\n}\n\n/**\n * Parse context JSON from database to OperationContext interface.\n *\n * @param contextJson - The context JSON from database\n * @returns Parsed OperationContext or null\n *\n * @example\n * ```typescript\n * const context = parseContext(entity.context);\n * if (context?.workspaceId) {\n *   // Use workspace-specific logic\n * }\n * ```\n */\nexport function parseContext(contextJson: JsonValue | null | undefined): OperationContext | null {\n  if (!contextJson || typeof contextJson !== 'object' || Array.isArray(contextJson)) {\n    return null;\n  }\n\n  const ctx = contextJson as Record<string, unknown>;\n\n  return {\n    workspaceId: typeof ctx['workspaceId'] === 'string' ? ctx['workspaceId'] : null,\n    userId: typeof ctx['userId'] === 'string' ? ctx['userId'] : null,\n    projectId: typeof ctx['projectId'] === 'string' ? ctx['projectId'] : null,\n    appId: typeof ctx['appId'] === 'string' ? ctx['appId'] : null,\n    productId: typeof ctx['productId'] === 'string' ? ctx['productId'] : null,\n    organizationId: typeof ctx['organizationId'] === 'string' ? ctx['organizationId'] : null,\n    custom: typeof ctx['custom'] === 'object' ? (ctx['custom'] as Record<string, unknown>) : null,\n  };\n}\n\n/**\n * Check if context matches filter criteria\n *\n * @param context - The context to check\n * @param filter - The filter criteria\n * @returns True if context matches all filter criteria\n */\nexport function contextMatches(context: OperationContext | null | undefined, filter: ContextFilterInput): boolean {\n  if (!context) {\n    return false;\n  }\n\n  if (filter.workspaceId != null && context.workspaceId !== filter.workspaceId) {\n    return false;\n  }\n  if (filter.userId != null && context.userId !== filter.userId) {\n    return false;\n  }\n  if (filter.projectId != null && context.projectId !== filter.projectId) {\n    return false;\n  }\n  if (filter.appId != null && context.appId !== filter.appId) {\n    return false;\n  }\n  if (filter.productId != null && context.productId !== filter.productId) {\n    return false;\n  }\n  if (filter.organizationId != null && context.organizationId !== filter.organizationId) {\n    return false;\n  }\n\n  return true;\n}\n\n/**\n * Create a default context from SDK context\n *\n * @param sdkContext - The SDK context (from AsyncLocalStorage)\n * @returns Operation context with workspace and user info\n */\nexport function createContextFromSDK(sdkContext: {\n  workspaceId?: string;\n  userId?: string;\n  projectId?: string;\n  appId?: string;\n  productId?: string;\n  organizationId?: string;\n}): OperationContext {\n  return {\n    workspaceId: sdkContext.workspaceId ?? null,\n    userId: sdkContext.userId ?? null,\n    projectId: sdkContext.projectId ?? null,\n    appId: sdkContext.appId ?? null,\n    productId: sdkContext.productId ?? null,\n    organizationId: sdkContext.organizationId ?? null,\n  };\n}\n"]}