@burdenoff/be-sdk 2026.825.8 → 2026.828.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (119) hide show
  1. package/dist/EventQueueFactory-J2XXPYXH.js +7 -0
  2. package/dist/{EventQueueFactory-ELT7NDXK.js.map → EventQueueFactory-J2XXPYXH.js.map} +1 -1
  3. package/dist/auth/index.js +2 -2
  4. package/dist/cache/index.js +3 -3
  5. package/dist/{chunk-AW6JUXCU.js → chunk-3UQMAUX4.js} +4 -4
  6. package/dist/{chunk-AW6JUXCU.js.map → chunk-3UQMAUX4.js.map} +1 -1
  7. package/dist/{chunk-N3YN6ZII.js → chunk-5JNHVKHG.js} +3 -3
  8. package/dist/{chunk-N3YN6ZII.js.map → chunk-5JNHVKHG.js.map} +1 -1
  9. package/dist/{chunk-7UJXIX4I.js → chunk-5NT2OEDQ.js} +3 -3
  10. package/dist/{chunk-7UJXIX4I.js.map → chunk-5NT2OEDQ.js.map} +1 -1
  11. package/dist/{chunk-OQLDXOZ3.js → chunk-6GL4SLU7.js} +3 -3
  12. package/dist/{chunk-OQLDXOZ3.js.map → chunk-6GL4SLU7.js.map} +1 -1
  13. package/dist/{chunk-L3QCRJOA.js → chunk-74Y5YD3U.js} +7 -7
  14. package/dist/{chunk-L3QCRJOA.js.map → chunk-74Y5YD3U.js.map} +1 -1
  15. package/dist/{chunk-NVVWSOY7.js → chunk-AX3UF33H.js} +3 -3
  16. package/dist/{chunk-NVVWSOY7.js.map → chunk-AX3UF33H.js.map} +1 -1
  17. package/dist/{chunk-Z3O32BW6.js → chunk-CPLFP5JK.js} +3 -3
  18. package/dist/{chunk-Z3O32BW6.js.map → chunk-CPLFP5JK.js.map} +1 -1
  19. package/dist/{chunk-XD5ZK727.js → chunk-DS3YMJ4X.js} +3 -3
  20. package/dist/{chunk-XD5ZK727.js.map → chunk-DS3YMJ4X.js.map} +1 -1
  21. package/dist/{chunk-2HANKZZM.js → chunk-ELU7VL3E.js} +3 -3
  22. package/dist/{chunk-2HANKZZM.js.map → chunk-ELU7VL3E.js.map} +1 -1
  23. package/dist/{chunk-KESVEZB2.js → chunk-FA5ROGTS.js} +3 -3
  24. package/dist/{chunk-KESVEZB2.js.map → chunk-FA5ROGTS.js.map} +1 -1
  25. package/dist/{chunk-WFVLQELZ.js → chunk-FYH5IAPR.js} +6 -6
  26. package/dist/{chunk-WFVLQELZ.js.map → chunk-FYH5IAPR.js.map} +1 -1
  27. package/dist/{chunk-RXMOV3YE.js → chunk-GJWQK3IU.js} +3 -3
  28. package/dist/{chunk-RXMOV3YE.js.map → chunk-GJWQK3IU.js.map} +1 -1
  29. package/dist/{chunk-TORD32GS.js → chunk-INAZ3PKF.js} +3 -3
  30. package/dist/{chunk-TORD32GS.js.map → chunk-INAZ3PKF.js.map} +1 -1
  31. package/dist/{chunk-UJG32VIP.js → chunk-IUJSIXMM.js} +3 -3
  32. package/dist/{chunk-UJG32VIP.js.map → chunk-IUJSIXMM.js.map} +1 -1
  33. package/dist/{chunk-VI4VSNTI.js → chunk-KJOSPVB2.js} +3 -3
  34. package/dist/{chunk-VI4VSNTI.js.map → chunk-KJOSPVB2.js.map} +1 -1
  35. package/dist/{chunk-UM32ZA3G.js → chunk-KMNSVLDS.js} +5 -5
  36. package/dist/{chunk-UM32ZA3G.js.map → chunk-KMNSVLDS.js.map} +1 -1
  37. package/dist/{chunk-VBXPFYZ5.js → chunk-KO2ZXZ7W.js} +3 -3
  38. package/dist/{chunk-VBXPFYZ5.js.map → chunk-KO2ZXZ7W.js.map} +1 -1
  39. package/dist/{chunk-VDYBUTFI.js → chunk-KW55Q6TA.js} +5 -5
  40. package/dist/{chunk-VDYBUTFI.js.map → chunk-KW55Q6TA.js.map} +1 -1
  41. package/dist/{chunk-OCYZEBOL.js → chunk-L5TDUAFN.js} +3 -3
  42. package/dist/{chunk-OCYZEBOL.js.map → chunk-L5TDUAFN.js.map} +1 -1
  43. package/dist/{chunk-S7LWYERE.js → chunk-LKCBI6B2.js} +3 -3
  44. package/dist/{chunk-S7LWYERE.js.map → chunk-LKCBI6B2.js.map} +1 -1
  45. package/dist/{chunk-LGTQ26Z2.js → chunk-MEA4BQNA.js} +3 -3
  46. package/dist/{chunk-LGTQ26Z2.js.map → chunk-MEA4BQNA.js.map} +1 -1
  47. package/dist/{chunk-QLVKMWFA.js → chunk-MWPYA2HD.js} +3 -3
  48. package/dist/{chunk-QLVKMWFA.js.map → chunk-MWPYA2HD.js.map} +1 -1
  49. package/dist/{chunk-XWVP4MC6.js → chunk-MZCBEJ67.js} +3 -3
  50. package/dist/{chunk-XWVP4MC6.js.map → chunk-MZCBEJ67.js.map} +1 -1
  51. package/dist/{chunk-URDYOM2L.js → chunk-QJN4K7LD.js} +4 -4
  52. package/dist/{chunk-URDYOM2L.js.map → chunk-QJN4K7LD.js.map} +1 -1
  53. package/dist/{chunk-CBZNP6RF.js → chunk-RU266375.js} +48 -7
  54. package/dist/chunk-RU266375.js.map +1 -0
  55. package/dist/{chunk-A6DGEZJ4.js → chunk-UD5PPGVU.js} +3 -3
  56. package/dist/{chunk-A6DGEZJ4.js.map → chunk-UD5PPGVU.js.map} +1 -1
  57. package/dist/{chunk-JNJSSBKO.js → chunk-UFXHLQ2T.js} +5 -5
  58. package/dist/{chunk-JNJSSBKO.js.map → chunk-UFXHLQ2T.js.map} +1 -1
  59. package/dist/{chunk-F5SGJ6VS.js → chunk-UNASM5VJ.js} +3 -3
  60. package/dist/{chunk-F5SGJ6VS.js.map → chunk-UNASM5VJ.js.map} +1 -1
  61. package/dist/{chunk-5LXDPGDH.js → chunk-VAT66FJA.js} +3 -3
  62. package/dist/{chunk-5LXDPGDH.js.map → chunk-VAT66FJA.js.map} +1 -1
  63. package/dist/{chunk-WROR2NMB.js → chunk-XCQN6GH7.js} +5 -5
  64. package/dist/{chunk-WROR2NMB.js.map → chunk-XCQN6GH7.js.map} +1 -1
  65. package/dist/{chunk-4X5WL6I3.js → chunk-XYWLCNJH.js} +5 -5
  66. package/dist/{chunk-4X5WL6I3.js.map → chunk-XYWLCNJH.js.map} +1 -1
  67. package/dist/{chunk-MX4AHK3E.js → chunk-YAQ7GNAC.js} +6 -6
  68. package/dist/{chunk-MX4AHK3E.js.map → chunk-YAQ7GNAC.js.map} +1 -1
  69. package/dist/{chunk-RNR45JQH.js → chunk-YK7C5DU6.js} +3 -3
  70. package/dist/{chunk-RNR45JQH.js.map → chunk-YK7C5DU6.js.map} +1 -1
  71. package/dist/{chunk-IC7YDBGE.js → chunk-YNDJQRI3.js} +3 -3
  72. package/dist/{chunk-IC7YDBGE.js.map → chunk-YNDJQRI3.js.map} +1 -1
  73. package/dist/{chunk-WCJIZR5Q.js → chunk-Z5BURBFZ.js} +3 -3
  74. package/dist/{chunk-WCJIZR5Q.js.map → chunk-Z5BURBFZ.js.map} +1 -1
  75. package/dist/client/internal-client.js +2 -2
  76. package/dist/database/index.js +2 -2
  77. package/dist/event-queue/index.js +6 -6
  78. package/dist/export/index.js +5 -5
  79. package/dist/feature-flags/index.js +2 -2
  80. package/dist/gateway/index.js +4 -4
  81. package/dist/gateway/security/index.js +2 -2
  82. package/dist/graph/index.js +8 -8
  83. package/dist/graphql/index.js +4 -4
  84. package/dist/graphql/services/index.js +2 -2
  85. package/dist/i18n/index.js +2 -2
  86. package/dist/{index-BtpoFSLa.d.ts → index-BLWIKXin.d.ts} +1 -1
  87. package/dist/{index-C0qWSC_Q.d.ts → index-hWpL68Vx.d.ts} +4 -2
  88. package/dist/index.d.ts +3 -3
  89. package/dist/index.js +43 -43
  90. package/dist/init/index.js +6 -6
  91. package/dist/instrumentation/index.d.ts +2 -2
  92. package/dist/instrumentation/index.js +2 -2
  93. package/dist/layer/index.js +2 -2
  94. package/dist/lifecycle/index.js +2 -2
  95. package/dist/logger/index.d.ts +1 -1
  96. package/dist/logger/index.js +1 -1
  97. package/dist/middleware/index.js +2 -2
  98. package/dist/notifications/index.js +2 -2
  99. package/dist/observability/index.js +2 -2
  100. package/dist/pino-logger-GJ2CYLD5.js +5 -0
  101. package/dist/{pino-logger-XF275Y5C.js.map → pino-logger-GJ2CYLD5.js.map} +1 -1
  102. package/dist/platform/index.js +2 -2
  103. package/dist/prisma/index.js +8 -8
  104. package/dist/rbac/index.js +2 -2
  105. package/dist/resource-caps/index.js +2 -2
  106. package/dist/server/index.js +6 -6
  107. package/dist/sharding/index.js +1 -1
  108. package/dist/sharing/index.js +2 -2
  109. package/dist/telemetry/index.d.ts +3 -3
  110. package/dist/telemetry/index.js +5 -5
  111. package/dist/temporal/index.js +2 -2
  112. package/dist/tracker/index.js +4 -4
  113. package/dist/workspace-guard-7PEZT3ZJ.js +5 -0
  114. package/dist/{workspace-guard-4BUG4ZP2.js.map → workspace-guard-7PEZT3ZJ.js.map} +1 -1
  115. package/package.json +1 -1
  116. package/dist/EventQueueFactory-ELT7NDXK.js +0 -7
  117. package/dist/chunk-CBZNP6RF.js.map +0 -1
  118. package/dist/pino-logger-XF275Y5C.js +0 -5
  119. package/dist/workspace-guard-4BUG4ZP2.js +0 -5
@@ -1 +1 @@
1
- {"version":3,"sources":["../src/prisma/workspace-extension.ts"],"names":["workspaceContextStore","AsyncLocalStorage","fallbackContext","setWorkspaceContext","context","enterWith","getWorkspaceContext","getStore","withWorkspaceContext","fn","run","withWorkspaceContextSync","defaultWorkspaceExtensionConfig","enabled","enableReadIsolation","enableDeleteIsolation","enableUpdateWhereIsolation","populateContextJson","populateCreatedBy","populateUpdatedBy","populateTenantId","populateOnBehalfOf","excludeModels","excludeModelsFromReadIsolation","strictMode","allowedUnguardedOperations","debug","enableApplicationNameTagging","enableRlsGucTagging","hasField","data","field","injectCreateFields","wsCtx","config","injected","workspaceId","tenantId","actorId","onBehalfOf","contextJson","buildContextJsonFromWorkspaceContext","injectUpdateFields","injectWhereClause","where","organizationId","projectId","appId","Object","keys","length","undefined","injectWhereWorkspaceId","ctx","stripSkipFlag","args","cleaned","isExcludedFromReadIsolation","model","includes","enforceStrictMode","operation","opKey","Error","taggedContexts","WeakSet","maybeTagConnection","rawPrisma","has","add","safeSvc","process","env","replace","safeWs","tag","$executeRawUnsafe","delete","rlsTaggedContexts","maybeSetRlsGuc","modelToClientProperty","charAt","toLowerCase","slice","runOperationWithRlsGuc","rootClient","clientProperty","$transaction","tx","delegate","method","addWorkspaceExtension","baseClient","fullConfig","logger","info","rawPrismaForTransactions","prismaClient","$extends","query","$allModels","create","_skipWorkspaceInjection","injectedData","injectedKeys","filter","k","join","finalArgs","createMany","dataArray","Array","isArray","map","item","createManyAndReturn","update","injectedWhere","injectedDataKeys","whereChanged","updateMany","upsert","injectedCreate","injectedUpdate","findMany","findFirst","findFirstOrThrow","findUnique","findUniqueOrThrow","count","aggregate","groupBy","deleteMany"],"mappings":";;;;AA6EA,IAAMA,qBAAAA,GAAwB,IAAIC,iBAAAA,EAAAA;AAUlC,IAAIC,eAAAA;AA6BG,SAASC,oBAAoBC,OAAAA,EAAyB;AAC3DJ,EAAAA,qBAAAA,CAAsBK,UAAUD,OAAAA,CAAAA;AAChCF,EAAAA,eAAAA,GAAkBE,OAAAA;AACpB;AAHgBD,MAAAA,CAAAA,mBAAAA,EAAAA,qBAAAA,CAAAA;AAaT,SAASG,mBAAAA,GAAAA;AACd,EAAA,OAAON,qBAAAA,CAAsBO,UAAQ,IAAML,eAAAA;AAC7C;AAFgBI,MAAAA,CAAAA,mBAAAA,EAAAA,qBAAAA,CAAAA;AAuBhB,eAAsBE,oBAAAA,CAAwBJ,SAA2BK,EAAAA,EAAoB;AAC3F,EAAA,OAAOT,qBAAAA,CAAsBU,GAAAA,CAAIN,OAAAA,EAASK,EAAAA,CAAAA;AAC5C;AAFsBD,MAAAA,CAAAA,oBAAAA,EAAAA,sBAAAA,CAAAA;AAOf,SAASG,wBAAAA,CAA4BP,SAA2BK,EAAAA,EAAW;AAChF,EAAA,OAAOT,qBAAAA,CAAsBU,GAAAA,CAAIN,OAAAA,EAASK,EAAAA,CAAAA;AAC5C;AAFgBE,MAAAA,CAAAA,wBAAAA,EAAAA,0BAAAA,CAAAA;AAsMT,IAAMC,+BAAAA,GAAsE;EACjFC,OAAAA,EAAS,IAAA;EACTC,mBAAAA,EAAqB,IAAA;EACrBC,qBAAAA,EAAuB,IAAA;EACvBC,0BAAAA,EAA4B,IAAA;EAC5BC,mBAAAA,EAAqB,IAAA;EACrBC,iBAAAA,EAAmB,IAAA;EACnBC,iBAAAA,EAAmB,IAAA;EACnBC,gBAAAA,EAAkB,KAAA;EAClBC,kBAAAA,EAAoB,IAAA;AACpBC,EAAAA,aAAAA,EAAe,EAAA;AACfC,EAAAA,8BAAAA,EAAgC,EAAA;EAChCC,UAAAA,EAAY,IAAA;AACZC,EAAAA,0BAAAA,EAA4B,EAAA;EAC5BC,KAAAA,EAAO,KAAA;EACPC,4BAAAA,EAA8B,KAAA;EAC9BC,mBAAAA,EAAqB;AACvB;AASA,SAASC,QAAAA,CAASC,MAA+BC,KAAAA,EAAa;AAC5D,EAAA,OAAOA,KAAAA,IAASD,IAAAA;AAClB;AAFSD,MAAAA,CAAAA,QAAAA,EAAAA,UAAAA,CAAAA;AAaF,SAASG,kBAAAA,CACdF,IAAAA,EACAG,KAAAA,EACAC,MAAAA,EAA0C;AAE1C,EAAA,MAAMC,QAAAA,GAAW;IAAE,GAAGL;AAAK,GAAA;AAG3B,EAAA,IAAIG,MAAMG,WAAAA,IAAe,CAACP,QAAAA,CAASM,QAAAA,EAAU,aAAA,CAAA,EAAgB;AAC3DA,IAAAA,QAAAA,CAAS,aAAA,IAAiBF,KAAAA,CAAMG,WAAAA;AAClC,EAAA;AAGA,EAAA,IAAIF,MAAAA,CAAOd,oBAAoBa,KAAAA,CAAMI,QAAAA,IAAY,CAACR,QAAAA,CAASM,QAAAA,EAAU,UAAA,CAAA,EAAa;AAChFA,IAAAA,QAAAA,CAAS,UAAA,IAAcF,KAAAA,CAAMI,QAAAA;AAC/B,EAAA;AAGA,EAAA,IAAIH,MAAAA,CAAOhB,qBAAqBe,KAAAA,CAAMK,OAAAA,IAAW,CAACT,QAAAA,CAASM,QAAAA,EAAU,WAAA,CAAA,EAAc;AACjFA,IAAAA,QAAAA,CAAS,WAAA,IAAeF,KAAAA,CAAMK,OAAAA;AAChC,EAAA;AAGA,EAAA,IAAIJ,MAAAA,CAAOf,qBAAqBc,KAAAA,CAAMK,OAAAA,IAAW,CAACT,QAAAA,CAASM,QAAAA,EAAU,WAAA,CAAA,EAAc;AACjFA,IAAAA,QAAAA,CAAS,WAAA,IAAeF,KAAAA,CAAMK,OAAAA;AAChC,EAAA;AAIA,EAAA,IAAIJ,MAAAA,CAAOb,sBAAsBY,KAAAA,CAAMM,UAAAA,IAAc,CAACV,QAAAA,CAASM,QAAAA,EAAU,YAAA,CAAA,EAAe;AACtFA,IAAAA,QAAAA,CAAS,YAAA,IAAgBF,KAAAA,CAAMM,UAAAA;EACjC,CAAA,MAAA,IAAWL,MAAAA,CAAOb,sBAAsBY,KAAAA,CAAMK,OAAAA,IAAW,CAACT,QAAAA,CAASM,QAAAA,EAAU,YAAA,CAAA,EAAe;AAE1FA,IAAAA,QAAAA,CAAS,YAAA,IAAgBF,KAAAA,CAAMK,OAAAA;AACjC,EAAA;AAGA,EAAA,IAAIJ,OAAOjB,mBAAAA,IAAuB,CAACY,QAAAA,CAASM,QAAAA,EAAU,SAAA,CAAA,EAAY;AAChE,IAAA,MAAMK,WAAAA,GAAcC,qCAAqCR,KAAAA,CAAAA;AACzD,IAAA,IAAIO,WAAAA,EAAa;AACfL,MAAAA,QAAAA,CAAS,SAAA,CAAA,GAAaK,WAAAA;AACxB,IAAA;AACF,EAAA;AAEA,EAAA,OAAOL,QAAAA;AACT;AA7CgBH,MAAAA,CAAAA,kBAAAA,EAAAA,oBAAAA,CAAAA;AAkDhB,SAASU,kBAAAA,CACPZ,IAAAA,EACAG,KAAAA,EACAC,MAAAA,EAA0C;AAE1C,EAAA,MAAMC,QAAAA,GAAW;IAAE,GAAGL;AAAK,GAAA;AAG3B,EAAA,IAAII,MAAAA,CAAOf,qBAAqBc,KAAAA,CAAMK,OAAAA,IAAW,CAACT,QAAAA,CAASM,QAAAA,EAAU,WAAA,CAAA,EAAc;AACjFA,IAAAA,QAAAA,CAAS,WAAA,IAAeF,KAAAA,CAAMK,OAAAA;AAChC,EAAA;AAMA,EAAA,OAAOH,QAAAA;AACT;AAjBSO,MAAAA,CAAAA,kBAAAA,EAAAA,oBAAAA,CAAAA;AA0BT,SAASC,iBAAAA,CACPC,OACAX,KAAAA,EAAuB;AAEvB,EAAA,IAAI,CAACA,KAAAA,CAAMG,WAAAA,EAAa,OAAOQ,KAAAA;AAE/B,EAAA,IAAI,CAACA,KAAAA,EAAO;AAEV,IAAA,OAAO;AAAER,MAAAA,WAAAA,EAAaH,KAAAA,CAAMG;AAAY,KAAA;AAC1C,EAAA;AAGA,EAAA,IAAI,CAACP,QAAAA,CAASe,KAAAA,EAAO,aAAA,CAAA,EAAgB;AACnC,IAAA,OAAO;MAAE,GAAGA,KAAAA;AAAOR,MAAAA,WAAAA,EAAaH,KAAAA,CAAMG;AAAY,KAAA;AACpD,EAAA;AAEA,EAAA,OAAOQ,KAAAA;AACT;AAjBSD,MAAAA,CAAAA,iBAAAA,EAAAA,mBAAAA,CAAAA;AAsBT,SAASF,qCAAqCR,KAAAA,EAAuB;AACnE,EAAA,MAAM7B,UAAkC,EAAC;AAEzC,EAAA,IAAI6B,KAAAA,CAAMG,WAAAA,EAAahC,OAAAA,CAAQ,aAAA,IAAiB6B,KAAAA,CAAMG,WAAAA;AACtD,EAAA,IAAIH,KAAAA,CAAMK,OAAAA,EAASlC,OAAAA,CAAQ,QAAA,IAAY6B,KAAAA,CAAMK,OAAAA;AAC7C,EAAA,IAAIL,KAAAA,CAAMY,cAAAA,EAAgBzC,OAAAA,CAAQ,gBAAA,IAAoB6B,KAAAA,CAAMY,cAAAA;AAC5D,EAAA,IAAIZ,KAAAA,CAAMa,SAAAA,EAAW1C,OAAAA,CAAQ,WAAA,IAAe6B,KAAAA,CAAMa,SAAAA;AAClD,EAAA,IAAIb,KAAAA,CAAMc,KAAAA,EAAO3C,OAAAA,CAAQ,OAAA,IAAW6B,KAAAA,CAAMc,KAAAA;AAE1C,EAAA,OAAOC,OAAOC,IAAAA,CAAK7C,OAAAA,CAAAA,CAAS8C,MAAAA,GAAS,IAAI9C,OAAAA,GAAU+C,MAAAA;AACrD;AAVSV,MAAAA,CAAAA,oCAAAA,EAAAA,sCAAAA,CAAAA;AA8BF,SAASW,sBAAAA,CACdR,OACAX,KAAAA,EAAwB;AAExB,EAAA,MAAMoB,GAAAA,GAAMpB,SAAS3B,mBAAAA,EAAAA;AACrB,EAAA,IAAI,CAACsC,KAAAA,IAAS,CAACS,GAAAA,EAAKjB,aAAa,OAAOQ,KAAAA;AAGxC,EAAA,IAAI,CAACf,QAAAA,CAASe,KAAAA,EAAO,aAAA,CAAA,EAAgB;AACnC,IAAA,OAAO;MAAE,GAAGA,KAAAA;AAAOR,MAAAA,WAAAA,EAAaiB,GAAAA,CAAIjB;AAAY,KAAA;AAClD,EAAA;AAEA,EAAA,OAAOQ,KAAAA;AACT;AAbgBQ,MAAAA,CAAAA,sBAAAA,EAAAA,wBAAAA,CAAAA;AAmBhB,SAASE,cAAiDC,IAAAA,EAAO;AAC/D,EAAA,MAAMC,OAAAA,GAAU;IAAE,GAAGD;AAAK,GAAA;AAC1B,EAAA,OAAQC,QAAoC,yBAAA,CAAA;AAC5C,EAAA,OAAOA,OAAAA;AACT;AAJSF,MAAAA,CAAAA,aAAAA,EAAAA,eAAAA,CAAAA;AAUT,SAASG,2BAAAA,CAA4BC,OAAexB,MAAAA,EAA0C;AAC5F,EAAA,OAAOA,MAAAA,CAAOZ,cAAcqC,QAAAA,CAASD,KAAAA,KAAUxB,MAAAA,CAAOX,8BAAAA,CAA+BoC,SAASD,KAAAA,CAAAA;AAChG;AAFSD,MAAAA,CAAAA,2BAAAA,EAAAA,6BAAAA,CAAAA;AAeT,SAASG,iBAAAA,CACPF,KAAAA,EACAG,SAAAA,EACA5B,KAAAA,EACAC,MAAAA,EAA0C;AAG1C,EAAA,IAAID,OAAOG,WAAAA,EAAa;AAGxB,EAAA,IAAI,CAACF,OAAOV,UAAAA,EAAY;AAGxB,EAAA,MAAMsC,KAAAA,GAAQ,CAAA,EAAGJ,KAAAA,CAAAA,CAAAA,EAASG,SAAAA,CAAAA,CAAAA;AAC1B,EAAA,IAAI3B,MAAAA,CAAOT,0BAAAA,CAA2BkC,QAAAA,CAASG,KAAAA,CAAAA,EAAQ;AAGvD,EAAA,MAAM,IAAIC,KAAAA,CACR,CAAA,oDAAA,EAAuDL,KAAAA,CAAAA,CAAAA,EAASG,SAAAA,CAAAA,uEAAAA,EAElDH,KAAAA,CAAAA,6BAAAA,EACAI,KAAAA,CAAAA,6FAAAA,CAC+C,CAAA;AAEjE;AAxBSF,MAAAA,CAAAA,iBAAAA,EAAAA,mBAAAA,CAAAA;AAgGT,IAAMI,cAAAA,uBAAqBC,OAAAA,EAAAA;AAS3B,eAAsBC,kBAAAA,CAAmBC,WAAgClC,KAAAA,EAAuB;AAC9F,EAAA,IAAI+B,cAAAA,CAAeI,GAAAA,CAAInC,KAAAA,CAAAA,EAAQ;AAC/B+B,EAAAA,cAAAA,CAAeK,IAAIpC,KAAAA,CAAAA;AAEnB,EAAA,MAAMqC,OAAAA,GAAAA,CAAWC,QAAQC,GAAAA,CAAI,cAAA,KAAmB,KAAA,EAAOC,OAAAA,CAAQ,oBAAoB,EAAA,CAAA;AACnF,EAAA,MAAMC,UAAUzC,KAAAA,CAAMG,WAAAA,IAAe,EAAA,EAAIqC,OAAAA,CAAQ,oBAAoB,EAAA,CAAA;AACrE,EAAA,MAAME,GAAAA,GAAM,CAAA,IAAA,EAAOL,OAAAA,CAAAA,IAAAA,EAAcI,MAAAA,CAAAA,CAAAA;AACjC,EAAA,IAAI;AACF,IAAA,MAAMP,SAAAA,CAAUS,iBAAAA,CAAkB,CAAA,wBAAA,EAA2BD,GAAAA,CAAAA,CAAAA,CAAM,CAAA;EACrE,CAAA,CAAA,MAAQ;AAENX,IAAAA,cAAAA,CAAea,OAAO5C,KAAAA,CAAAA;AACxB,EAAA;AACF;AAbsBiC,MAAAA,CAAAA,kBAAAA,EAAAA,oBAAAA,CAAAA;AAsBtB,IAAMY,iBAAAA,uBAAwBb,OAAAA,EAAAA;AAkB9B,eAAsBc,cAAAA,CAAeZ,WAAgClC,KAAAA,EAAuB;AAC1F,EAAA,IAAI6C,iBAAAA,CAAkBV,GAAAA,CAAInC,KAAAA,CAAAA,EAAQ;AAClC6C,EAAAA,iBAAAA,CAAkBT,IAAIpC,KAAAA,CAAAA;AAEtB,EAAA,MAAMyC,UAAUzC,KAAAA,CAAMG,WAAAA,IAAe,EAAA,EAAIqC,OAAAA,CAAQ,oBAAoB,EAAA,CAAA;AACrE,EAAA,IAAI;AACF,IAAA,MAAMN,SAAAA,CAAUS,iBAAAA,CAAkB,CAAA,wBAAA,EAA2BF,MAAAA,CAAAA,CAAAA,CAAS,CAAA;EACxE,CAAA,CAAA,MAAQ;AAENI,IAAAA,iBAAAA,CAAkBD,OAAO5C,KAAAA,CAAAA;AAC3B,EAAA;AACF;AAXsB8C,MAAAA,CAAAA,cAAAA,EAAAA,gBAAAA,CAAAA;AAoCtB,SAASC,sBAAsBtB,KAAAA,EAAa;AAC1C,EAAA,OAAOA,KAAAA,CAAMR,MAAAA,GAAS,CAAA,GAAIQ,KAAAA,CAAMuB,MAAAA,CAAO,CAAA,CAAA,CAAGC,WAAAA,EAAW,GAAKxB,KAAAA,CAAMyB,KAAAA,CAAM,CAAA,CAAA,GAAKzB,KAAAA;AAC7E;AAFSsB,MAAAA,CAAAA,qBAAAA,EAAAA,uBAAAA,CAAAA;AAuCT,eAAsBI,sBAAAA,CACpBC,UAAAA,EACApD,KAAAA,EACAyB,KAAAA,EACAG,WACAN,IAAAA,EAAa;AAEb,EAAA,MAAMmB,UAAUzC,KAAAA,CAAMG,WAAAA,IAAe,EAAA,EAAIqC,OAAAA,CAAQ,oBAAoB,EAAA,CAAA;AACrE,EAAA,MAAMa,cAAAA,GAAiBN,sBAAsBtB,KAAAA,CAAAA;AAC7C,EAAA,OAAO2B,UAAAA,CAAWE,YAAAA,CAAa,OAAOC,EAAAA,KAAAA;AACpC,IAAA,MAAMA,EAAAA,CAAGZ,iBAAAA,CAAkB,CAAA,8BAAA,EAAiCF,MAAAA,CAAAA,CAAAA,CAAS,CAAA;AAIrE,IAAA,MAAMe,QAAAA,GAAWD,GAAGF,cAAAA,CAAAA;AACpB,IAAA,MAAMI,MAAAA,GAASD,WAAW5B,SAAAA,CAAAA;AAC1B,IAAA,IAAI,OAAO6B,WAAW,UAAA,EAAY;AAChC,MAAA,MAAM,IAAI3B,MACR,CAAA,uCAAA,EAA0CL,KAAAA,IAASG,SAAAA,CAAAA,mBAAAA,EAA+ByB,cAAAA,CAAAA,6DAAAA,CAChF,CAAA;AAEN,IAAA;AACA,IAAA,OAAOI,OAAOnC,IAAAA,CAAAA;EAChB,CAAA,CAAA;AACF;AAxBsB6B,MAAAA,CAAAA,sBAAAA,EAAAA,wBAAAA,CAAAA;AA0Bf,SAASO,qBAAAA,CAAyBC,YAAe1D,MAAAA,EAAiC;AACvF,EAAA,MAAM2D,UAAAA,GAAiD;IACrD,GAAGjF,+BAAAA;IACH,GAAGsB;AACL,GAAA;AAEA,EAAA,IAAI,CAAC2D,WAAWhF,OAAAA,EAAS;AACvBiF,IAAAA,MAAAA,CAAOC,KAAK,0DAAA,CAAA;AACZ,IAAA,OAAOH,UAAAA;AACT,EAAA;AAGA,EAAA,MAAMzB,SAAAA,GAAYyB,UAAAA;AAIlB,EAAA,MAAMI,wBAAAA,GAA2BJ,UAAAA;AAGjC,EAAA,MAAMK,YAAAA,GAAeL,UAAAA;AAErBE,EAAAA,MAAAA,CAAOC,KAAK,kDAAA,EAAoD;AAC9D9E,IAAAA,mBAAAA,EAAqB4E,UAAAA,CAAW5E,mBAAAA;AAChCC,IAAAA,iBAAAA,EAAmB2E,UAAAA,CAAW3E,iBAAAA;AAC9BC,IAAAA,iBAAAA,EAAmB0E,UAAAA,CAAW1E,iBAAAA;AAC9BC,IAAAA,gBAAAA,EAAkByE,UAAAA,CAAWzE,gBAAAA;AAC7BN,IAAAA,mBAAAA,EAAqB+E,UAAAA,CAAW/E,mBAAAA;AAChCC,IAAAA,qBAAAA,EAAuB8E,UAAAA,CAAW9E,qBAAAA;AAClCC,IAAAA,0BAAAA,EAA4B6E,UAAAA,CAAW7E,0BAAAA;AACvCQ,IAAAA,UAAAA,EAAYqE,UAAAA,CAAWrE,UAAAA;AACvBF,IAAAA,aAAAA,EAAeuE,UAAAA,CAAWvE,aAAAA;AAC1BC,IAAAA,8BAAAA,EAAgCsE,UAAAA,CAAWtE,8BAAAA;AAC3CE,IAAAA,0BAAAA,EAA4BoE,UAAAA,CAAWpE,0BAAAA;AACvCE,IAAAA,4BAAAA,EAA8BkE,UAAAA,CAAWlE,4BAAAA;AACzCC,IAAAA,mBAAAA,EAAqBiE,UAAAA,CAAWjE;GAClC,CAAA;AAEA,EAAA,OAAOqE,aAAaC,QAAAA,CAAS;IAC3BC,KAAAA,EAAO;MACLC,UAAAA,EAAY;;;;AAKV,QAAA,MAAMC,MAAAA,CAAO,EACX3C,KAAAA,EACAH,IAAAA,EACA4C,OAAK,EAKL;AAEA,UAAA,IAAIN,WAAWvE,aAAAA,CAAcqC,QAAAA,CAASD,KAAAA,CAAAA,IAAUH,KAAK+C,uBAAAA,EAAyB;AAC5E,YAAA,OAAOH,KAAAA,CAAM7C,aAAAA,CAAcC,IAAAA,CAAAA,CAAAA;AAC7B,UAAA;AAEA,UAAA,MAAMtB,QAAQ3B,mBAAAA,EAAAA;AACdsD,UAAAA,iBAAAA,CAAkBF,KAAAA,EAAO,QAAA,EAAUzB,KAAAA,EAAO4D,UAAAA,CAAAA;AAC1C,UAAA,IAAI,CAAC5D,OAAOG,WAAAA,EAAa;AACvB,YAAA,OAAO+D,MAAM5C,IAAAA,CAAAA;AACf,UAAA;AAEA,UAAA,IAAIsC,WAAWlE,4BAAAA,EAA8B;AAC3C,YAAA,MAAMuC,kBAAAA,CAAmBC,WAAWlC,KAAAA,CAAAA;AACtC,UAAA;AAEA,UAAA,MAAMsE,YAAAA,GAAevE,kBAAAA,CAAmBuB,IAAAA,CAAKzB,IAAAA,EAAMG,OAAO4D,UAAAA,CAAAA;AAE1D,UAAA,IAAIA,WAAWnE,KAAAA,EAAO;AACpB,YAAA,MAAM8E,YAAAA,GAAexD,MAAAA,CAAOC,IAAAA,CAAKsD,YAAAA,CAAAA,CAAcE,MAAAA,CAAO,CAACC,CAAAA,KAAM,EAAEA,CAAAA,IAAKnD,IAAAA,CAAKzB,IAAAA,CAAG,CAAA;AAC5E,YAAA,IAAI0E,YAAAA,CAAatD,SAAS,CAAA,EAAG;AAC3B4C,cAAAA,MAAAA,CAAOpE,KAAAA,CAAM,wBAAwBgC,KAAAA,CAAAA,oBAAAA,EAA4B8C,aAAaG,IAAAA,CAAK,IAAA,CAAA,CAAA,CAAA,EAAS;AAC1FvE,gBAAAA,WAAAA,EAAaH,KAAAA,CAAMG,WAAAA;AACnBE,gBAAAA,OAAAA,EAASL,KAAAA,CAAMK;eACjB,CAAA;AACF,YAAA;AACF,UAAA;AAEA,UAAA,MAAMsE,SAAAA,GAAY;AAChB,YAAA,GAAGtD,cAAcC,IAAAA,CAAAA;YACjBzB,IAAAA,EAAMyE;AACR,WAAA;AACA,UAAA,IAAIV,WAAWjE,mBAAAA,EAAqB;AAClC,YAAA,OAAOwD,sBAAAA,CAAuBY,wBAAAA,EAA0B/D,KAAAA,EAAOyB,KAAAA,EAAO,UAAUkD,SAAAA,CAAAA;AAClF,UAAA;AACA,UAAA,OAAOT,MAAMS,SAAAA,CAAAA;AACf,QAAA,CAAA;AAEA,QAAA,MAAMC,UAAAA,CAAW,EACfnD,KAAAA,EACAH,IAAAA,EACA4C,OAAK,EAKL;AACA,UAAA,IAAIN,WAAWvE,aAAAA,CAAcqC,QAAAA,CAASD,KAAAA,CAAAA,IAAUH,KAAK+C,uBAAAA,EAAyB;AAC5E,YAAA,OAAOH,KAAAA,CAAM7C,aAAAA,CAAcC,IAAAA,CAAAA,CAAAA;AAC7B,UAAA;AAEA,UAAA,MAAMtB,QAAQ3B,mBAAAA,EAAAA;AACdsD,UAAAA,iBAAAA,CAAkBF,KAAAA,EAAO,YAAA,EAAczB,KAAAA,EAAO4D,UAAAA,CAAAA;AAC9C,UAAA,IAAI,CAAC5D,OAAOG,WAAAA,EAAa;AACvB,YAAA,OAAO+D,MAAM5C,IAAAA,CAAAA;AACf,UAAA;AAEA,UAAA,IAAIsC,WAAWlE,4BAAAA,EAA8B;AAC3C,YAAA,MAAMuC,kBAAAA,CAAmBC,WAAWlC,KAAAA,CAAAA;AACtC,UAAA;AAEA,UAAA,MAAM6E,YAAYC,KAAAA,CAAMC,OAAAA,CAAQzD,KAAKzB,IAAI,CAAA,GAAIyB,KAAKzB,IAAAA,GAAO;YAACyB,IAAAA,CAAKzB;;AAC/D,UAAA,MAAMyE,YAAAA,GAAeO,UAAUG,GAAAA,CAAI,CAACC,SAASlF,kBAAAA,CAAmBkF,IAAAA,EAAMjF,KAAAA,EAAO4D,UAAAA,CAAAA,CAAAA;AAE7E,UAAA,MAAMe,SAAAA,GAAY;AAChB,YAAA,GAAGtD,cAAcC,IAAAA,CAAAA;AACjBzB,YAAAA,IAAAA,EAAMiF,MAAMC,OAAAA,CAAQzD,IAAAA,CAAKzB,IAAI,CAAA,GAAIyE,YAAAA,GAAeA,aAAa,CAAA;AAC/D,WAAA;AACA,UAAA,IAAIV,WAAWjE,mBAAAA,EAAqB;AAClC,YAAA,OAAOwD,sBAAAA,CAAuBY,wBAAAA,EAA0B/D,KAAAA,EAAOyB,KAAAA,EAAO,cAAckD,SAAAA,CAAAA;AACtF,UAAA;AACA,UAAA,OAAOT,MAAMS,SAAAA,CAAAA;AACf,QAAA,CAAA;AAEA,QAAA,MAAMO,mBAAAA,CAAoB,EACxBzD,KAAAA,EACAH,IAAAA,EACA4C,OAAK,EAKL;AACA,UAAA,IAAIN,WAAWvE,aAAAA,CAAcqC,QAAAA,CAASD,KAAAA,CAAAA,IAAUH,KAAK+C,uBAAAA,EAAyB;AAC5E,YAAA,OAAOH,KAAAA,CAAM7C,aAAAA,CAAcC,IAAAA,CAAAA,CAAAA;AAC7B,UAAA;AAEA,UAAA,MAAMtB,QAAQ3B,mBAAAA,EAAAA;AACdsD,UAAAA,iBAAAA,CAAkBF,KAAAA,EAAO,qBAAA,EAAuBzB,KAAAA,EAAO4D,UAAAA,CAAAA;AACvD,UAAA,IAAI,CAAC5D,OAAOG,WAAAA,EAAa;AACvB,YAAA,OAAO+D,MAAM5C,IAAAA,CAAAA;AACf,UAAA;AAEA,UAAA,IAAIsC,WAAWlE,4BAAAA,EAA8B;AAC3C,YAAA,MAAMuC,kBAAAA,CAAmBC,WAAWlC,KAAAA,CAAAA;AACtC,UAAA;AACA,UAAA,MAAM6E,YAAYC,KAAAA,CAAMC,OAAAA,CAAQzD,KAAKzB,IAAI,CAAA,GAAIyB,KAAKzB,IAAAA,GAAO;YAACyB,IAAAA,CAAKzB;;AAC/D,UAAA,MAAMyE,YAAAA,GAAeO,UAAUG,GAAAA,CAAI,CAACC,SAASlF,kBAAAA,CAAmBkF,IAAAA,EAAMjF,KAAAA,EAAO4D,UAAAA,CAAAA,CAAAA;AAE7E,UAAA,MAAMe,SAAAA,GAAY;AAChB,YAAA,GAAGtD,cAAcC,IAAAA,CAAAA;AACjBzB,YAAAA,IAAAA,EAAMiF,MAAMC,OAAAA,CAAQzD,IAAAA,CAAKzB,IAAI,CAAA,GAAIyE,YAAAA,GAAeA,aAAa,CAAA;AAC/D,WAAA;AACA,UAAA,IAAIV,WAAWjE,mBAAAA,EAAqB;AAClC,YAAA,OAAOwD,sBAAAA,CAAuBY,wBAAAA,EAA0B/D,KAAAA,EAAOyB,KAAAA,EAAO,uBAAuBkD,SAAAA,CAAAA;AAC/F,UAAA;AACA,UAAA,OAAOT,MAAMS,SAAAA,CAAAA;AACf,QAAA,CAAA;;;;AAMA,QAAA,MAAMQ,MAAAA,CAAO,EACX1D,KAAAA,EACAH,IAAAA,EACA4C,OAAK,EAML;AACA,UAAA,IAAIN,WAAWvE,aAAAA,CAAcqC,QAAAA,CAASD,KAAAA,CAAAA,IAAUH,KAAK+C,uBAAAA,EAAyB;AAC5E,YAAA,OAAOH,KAAAA,CAAM7C,aAAAA,CAAcC,IAAAA,CAAAA,CAAAA;AAC7B,UAAA;AAEA,UAAA,MAAMtB,QAAQ3B,mBAAAA,EAAAA;AACdsD,UAAAA,iBAAAA,CAAkBF,KAAAA,EAAO,QAAA,EAAUzB,KAAAA,EAAO4D,UAAAA,CAAAA;AAC1C,UAAA,IAAI,CAAC5D,OAAOG,WAAAA,EAAa;AACvB,YAAA,OAAO+D,MAAM5C,IAAAA,CAAAA;AACf,UAAA;AAEA,UAAA,IAAIsC,WAAWlE,4BAAAA,EAA8B;AAC3C,YAAA,MAAMuC,kBAAAA,CAAmBC,WAAWlC,KAAAA,CAAAA;AACtC,UAAA;AACA,UAAA,MAAMsE,YAAAA,GAAe7D,kBAAAA,CAAmBa,IAAAA,CAAKzB,IAAAA,EAAMG,OAAO4D,UAAAA,CAAAA;AAG1D,UAAA,IAAIwB,gBAAgB9D,IAAAA,CAAKX,KAAAA;AACzB,UAAA,IAAIiD,WAAW7E,0BAAAA,IAA8B,CAACyC,2BAAAA,CAA4BC,KAAAA,EAAOmC,UAAAA,CAAAA,EAAa;AAC5FwB,YAAAA,aAAAA,GAAgB1E,iBAAAA,CAAkBY,IAAAA,CAAKX,KAAAA,EAAOX,KAAAA,CAAAA;AAChD,UAAA;AAEA,UAAA,IAAI4D,WAAWnE,KAAAA,EAAO;AACpB,YAAA,MAAM4F,gBAAAA,GAAmBtE,MAAAA,CAAOC,IAAAA,CAAKsD,YAAAA,CAAAA,CAAcE,MAAAA,CAAO,CAACC,CAAAA,KAAM,EAAEA,CAAAA,IAAKnD,IAAAA,CAAKzB,IAAAA,CAAG,CAAA;AAChF,YAAA,MAAMyF,YAAAA,GAAeF,kBAAkB9D,IAAAA,CAAKX,KAAAA;AAC5C,YAAA,IAAI0E,gBAAAA,CAAiBpE,MAAAA,GAAS,CAAA,IAAKqE,YAAAA,EAAc;AAC/CzB,cAAAA,MAAAA,CAAOpE,KAAAA,CACL,CAAA,qBAAA,EAAwBgC,KAAAA,CAAAA,yBAAAA,EAAiC4D,gBAAAA,CAAiBX,IAAAA,CAAK,IAAA,CAAA,CAAA,EAAQY,YAAAA,GAAe,sBAAA,GAAyB,EAAA,CAAA,CAAI,CAAA;AAEvI,YAAA;AACF,UAAA;AAEA,UAAA,MAAMX,SAAAA,GAAY;AAChB,YAAA,GAAGtD,cAAcC,IAAAA,CAAAA;YACjBzB,IAAAA,EAAMyE,YAAAA;YACN3D,KAAAA,EAAOyE;AACT,WAAA;AACA,UAAA,IAAIxB,WAAWjE,mBAAAA,EAAqB;AAClC,YAAA,OAAOwD,sBAAAA,CAAuBY,wBAAAA,EAA0B/D,KAAAA,EAAOyB,KAAAA,EAAO,UAAUkD,SAAAA,CAAAA;AAClF,UAAA;AACA,UAAA,OAAOT,MAAMS,SAAAA,CAAAA;AACf,QAAA,CAAA;AAEA,QAAA,MAAMY,UAAAA,CAAW,EACf9D,KAAAA,EACAH,IAAAA,EACA4C,OAAK,EAML;AACA,UAAA,IAAIN,WAAWvE,aAAAA,CAAcqC,QAAAA,CAASD,KAAAA,CAAAA,IAAUH,KAAK+C,uBAAAA,EAAyB;AAC5E,YAAA,OAAOH,KAAAA,CAAM7C,aAAAA,CAAcC,IAAAA,CAAAA,CAAAA;AAC7B,UAAA;AAEA,UAAA,MAAMtB,QAAQ3B,mBAAAA,EAAAA;AACdsD,UAAAA,iBAAAA,CAAkBF,KAAAA,EAAO,YAAA,EAAczB,KAAAA,EAAO4D,UAAAA,CAAAA;AAC9C,UAAA,IAAI,CAAC5D,OAAOG,WAAAA,EAAa;AACvB,YAAA,OAAO+D,MAAM5C,IAAAA,CAAAA;AACf,UAAA;AAEA,UAAA,IAAIsC,WAAWlE,4BAAAA,EAA8B;AAC3C,YAAA,MAAMuC,kBAAAA,CAAmBC,WAAWlC,KAAAA,CAAAA;AACtC,UAAA;AACA,UAAA,MAAMsE,YAAAA,GAAe7D,kBAAAA,CAAmBa,IAAAA,CAAKzB,IAAAA,EAAMG,OAAO4D,UAAAA,CAAAA;AAG1D,UAAA,IAAIwB,gBAAgB9D,IAAAA,CAAKX,KAAAA;AACzB,UAAA,IAAIiD,WAAW7E,0BAAAA,IAA8B,CAACyC,2BAAAA,CAA4BC,KAAAA,EAAOmC,UAAAA,CAAAA,EAAa;AAC5FwB,YAAAA,aAAAA,GAAgB1E,iBAAAA,CAAkBY,IAAAA,CAAKX,KAAAA,EAAOX,KAAAA,CAAAA;AAChD,UAAA;AAEA,UAAA,MAAM2E,SAAAA,GAAY;AAChB,YAAA,GAAGtD,cAAcC,IAAAA,CAAAA;YACjBzB,IAAAA,EAAMyE,YAAAA;YACN3D,KAAAA,EAAOyE;AACT,WAAA;AACA,UAAA,IAAIxB,WAAWjE,mBAAAA,EAAqB;AAClC,YAAA,OAAOwD,sBAAAA,CAAuBY,wBAAAA,EAA0B/D,KAAAA,EAAOyB,KAAAA,EAAO,cAAckD,SAAAA,CAAAA;AACtF,UAAA;AACA,UAAA,OAAOT,MAAMS,SAAAA,CAAAA;AACf,QAAA,CAAA;AAEA,QAAA,MAAMa,MAAAA,CAAO,EACX/D,KAAAA,EACAH,IAAAA,EACA4C,OAAK,EAOL;AACA,UAAA,IAAIN,WAAWvE,aAAAA,CAAcqC,QAAAA,CAASD,KAAAA,CAAAA,IAAUH,KAAK+C,uBAAAA,EAAyB;AAC5E,YAAA,OAAOH,KAAAA,CAAM7C,aAAAA,CAAcC,IAAAA,CAAAA,CAAAA;AAC7B,UAAA;AAEA,UAAA,MAAMtB,QAAQ3B,mBAAAA,EAAAA;AACdsD,UAAAA,iBAAAA,CAAkBF,KAAAA,EAAO,QAAA,EAAUzB,KAAAA,EAAO4D,UAAAA,CAAAA;AAC1C,UAAA,IAAI,CAAC5D,OAAOG,WAAAA,EAAa;AACvB,YAAA,OAAO+D,MAAM5C,IAAAA,CAAAA;AACf,UAAA;AAEA,UAAA,IAAIsC,WAAWlE,4BAAAA,EAA8B;AAC3C,YAAA,MAAMuC,kBAAAA,CAAmBC,WAAWlC,KAAAA,CAAAA;AACtC,UAAA;AACA,UAAA,MAAMyF,cAAAA,GAAiB1F,kBAAAA,CAAmBuB,IAAAA,CAAK8C,MAAAA,EAAQpE,OAAO4D,UAAAA,CAAAA;AAC9D,UAAA,MAAM8B,cAAAA,GAAiBjF,kBAAAA,CAAmBa,IAAAA,CAAK6D,MAAAA,EAAQnF,OAAO4D,UAAAA,CAAAA;AAG9D,UAAA,IAAIwB,gBAAgB9D,IAAAA,CAAKX,KAAAA;AACzB,UAAA,IAAIiD,WAAW7E,0BAAAA,IAA8B,CAACyC,2BAAAA,CAA4BC,KAAAA,EAAOmC,UAAAA,CAAAA,EAAa;AAC5FwB,YAAAA,aAAAA,GAAgB1E,iBAAAA,CAAkBY,IAAAA,CAAKX,KAAAA,EAAOX,KAAAA,CAAAA;AAChD,UAAA;AAEA,UAAA,MAAM2E,SAAAA,GAAY;AAChB,YAAA,GAAGtD,cAAcC,IAAAA,CAAAA;YACjB8C,MAAAA,EAAQqB,cAAAA;YACRN,MAAAA,EAAQO,cAAAA;YACR/E,KAAAA,EAAOyE;AACT,WAAA;AACA,UAAA,IAAIxB,WAAWjE,mBAAAA,EAAqB;AAClC,YAAA,OAAOwD,sBAAAA,CAAuBY,wBAAAA,EAA0B/D,KAAAA,EAAOyB,KAAAA,EAAO,UAAUkD,SAAAA,CAAAA;AAClF,UAAA;AACA,UAAA,OAAOT,MAAMS,SAAAA,CAAAA;AACf,QAAA,CAAA;;;;AAMA,QAAA,MAAMgB,QAAAA,CAAS,EAAElE,KAAAA,EAAOH,IAAAA,EAAM4C,OAAK,EAAqC;AACtE,UAAA,IACE,CAACN,WAAW/E,mBAAAA,IACZ2C,2BAAAA,CAA4BC,OAAOmC,UAAAA,CAAAA,IACnCtC,KAAK+C,uBAAAA,EACL;AACA,YAAA,OAAOH,KAAAA,CAAM7C,aAAAA,CAAcC,IAAAA,CAAAA,CAAAA;AAC7B,UAAA;AAEA,UAAA,MAAMtB,QAAQ3B,mBAAAA,EAAAA;AACdsD,UAAAA,iBAAAA,CAAkBF,KAAAA,EAAO,UAAA,EAAYzB,KAAAA,EAAO4D,UAAAA,CAAAA;AAC5C,UAAA,IAAI,CAAC5D,OAAOG,WAAAA,EAAa;AACvB,YAAA,OAAO+D,MAAM5C,IAAAA,CAAAA;AACf,UAAA;AAEA,UAAA,IAAIsC,WAAWlE,4BAAAA,EAA8B;AAC3C,YAAA,MAAMuC,kBAAAA,CAAmBC,WAAWlC,KAAAA,CAAAA;AACtC,UAAA;AACA,UAAA,MAAMoF,aAAAA,GAAgB1E,iBAAAA,CAAkBY,IAAAA,CAAKX,KAAAA,EAAOX,KAAAA,CAAAA;AAEpD,UAAA,IAAI4D,WAAWnE,KAAAA,EAAO;AACpBoE,YAAAA,MAAAA,CAAOpE,KAAAA,CAAM,CAAA,qBAAA,EAAwBgC,KAAAA,CAAAA,2CAAAA,CAAAA,EAAoD;AACvFtB,cAAAA,WAAAA,EAAaH,KAAAA,CAAMG;aACrB,CAAA;AACF,UAAA;AAEA,UAAA,MAAMwE,SAAAA,GAAY;AAChB,YAAA,GAAGtD,cAAcC,IAAAA,CAAAA;YACjBX,KAAAA,EAAOyE;AACT,WAAA;AACA,UAAA,IAAIxB,WAAWjE,mBAAAA,EAAqB;AAClC,YAAA,OAAOwD,sBAAAA,CAAuBY,wBAAAA,EAA0B/D,KAAAA,EAAOyB,KAAAA,EAAO,YAAYkD,SAAAA,CAAAA;AACpF,UAAA;AACA,UAAA,OAAOT,MAAMS,SAAAA,CAAAA;AACf,QAAA,CAAA;AAEA,QAAA,MAAMiB,SAAAA,CAAU,EAAEnE,KAAAA,EAAOH,IAAAA,EAAM4C,OAAK,EAAqC;AACvE,UAAA,IACE,CAACN,WAAW/E,mBAAAA,IACZ2C,2BAAAA,CAA4BC,OAAOmC,UAAAA,CAAAA,IACnCtC,KAAK+C,uBAAAA,EACL;AACA,YAAA,OAAOH,KAAAA,CAAM7C,aAAAA,CAAcC,IAAAA,CAAAA,CAAAA;AAC7B,UAAA;AAEA,UAAA,MAAMtB,QAAQ3B,mBAAAA,EAAAA;AACdsD,UAAAA,iBAAAA,CAAkBF,KAAAA,EAAO,WAAA,EAAazB,KAAAA,EAAO4D,UAAAA,CAAAA;AAC7C,UAAA,IAAI,CAAC5D,OAAOG,WAAAA,EAAa;AACvB,YAAA,OAAO+D,MAAM5C,IAAAA,CAAAA;AACf,UAAA;AAEA,UAAA,IAAIsC,WAAWlE,4BAAAA,EAA8B;AAC3C,YAAA,MAAMuC,kBAAAA,CAAmBC,WAAWlC,KAAAA,CAAAA;AACtC,UAAA;AACA,UAAA,MAAMoF,aAAAA,GAAgB1E,iBAAAA,CAAkBY,IAAAA,CAAKX,KAAAA,EAAOX,KAAAA,CAAAA;AAEpD,UAAA,IAAI4D,WAAWnE,KAAAA,EAAO;AACpBoE,YAAAA,MAAAA,CAAOpE,KAAAA,CAAM,CAAA,qBAAA,EAAwBgC,KAAAA,CAAAA,4CAAAA,CAAAA,EAAqD;AACxFtB,cAAAA,WAAAA,EAAaH,KAAAA,CAAMG;aACrB,CAAA;AACF,UAAA;AAEA,UAAA,MAAMwE,SAAAA,GAAY;AAChB,YAAA,GAAGtD,cAAcC,IAAAA,CAAAA;YACjBX,KAAAA,EAAOyE;AACT,WAAA;AACA,UAAA,IAAIxB,WAAWjE,mBAAAA,EAAqB;AAClC,YAAA,OAAOwD,sBAAAA,CAAuBY,wBAAAA,EAA0B/D,KAAAA,EAAOyB,KAAAA,EAAO,aAAakD,SAAAA,CAAAA;AACrF,UAAA;AACA,UAAA,OAAOT,MAAMS,SAAAA,CAAAA;AACf,QAAA,CAAA;AAEA,QAAA,MAAMkB,gBAAAA,CAAiB,EAAEpE,KAAAA,EAAOH,IAAAA,EAAM4C,OAAK,EAAqC;AAC9E,UAAA,IACE,CAACN,WAAW/E,mBAAAA,IACZ2C,2BAAAA,CAA4BC,OAAOmC,UAAAA,CAAAA,IACnCtC,KAAK+C,uBAAAA,EACL;AACA,YAAA,OAAOH,KAAAA,CAAM7C,aAAAA,CAAcC,IAAAA,CAAAA,CAAAA;AAC7B,UAAA;AAEA,UAAA,MAAMtB,QAAQ3B,mBAAAA,EAAAA;AACdsD,UAAAA,iBAAAA,CAAkBF,KAAAA,EAAO,kBAAA,EAAoBzB,KAAAA,EAAO4D,UAAAA,CAAAA;AACpD,UAAA,IAAI,CAAC5D,OAAOG,WAAAA,EAAa;AACvB,YAAA,OAAO+D,MAAM5C,IAAAA,CAAAA;AACf,UAAA;AAEA,UAAA,IAAIsC,WAAWlE,4BAAAA,EAA8B;AAC3C,YAAA,MAAMuC,kBAAAA,CAAmBC,WAAWlC,KAAAA,CAAAA;AACtC,UAAA;AACA,UAAA,MAAMoF,aAAAA,GAAgB1E,iBAAAA,CAAkBY,IAAAA,CAAKX,KAAAA,EAAOX,KAAAA,CAAAA;AAEpD,UAAA,IAAI4D,WAAWnE,KAAAA,EAAO;AACpBoE,YAAAA,MAAAA,CAAOpE,KAAAA,CAAM,CAAA,qBAAA,EAAwBgC,KAAAA,CAAAA,mDAAAA,CAAAA,EAA4D;AAC/FtB,cAAAA,WAAAA,EAAaH,KAAAA,CAAMG;aACrB,CAAA;AACF,UAAA;AAEA,UAAA,MAAMwE,SAAAA,GAAY;AAChB,YAAA,GAAGtD,cAAcC,IAAAA,CAAAA;YACjBX,KAAAA,EAAOyE;AACT,WAAA;AACA,UAAA,IAAIxB,WAAWjE,mBAAAA,EAAqB;AAClC,YAAA,OAAOwD,sBAAAA,CAAuBY,wBAAAA,EAA0B/D,KAAAA,EAAOyB,KAAAA,EAAO,oBAAoBkD,SAAAA,CAAAA;AAC5F,UAAA;AACA,UAAA,OAAOT,MAAMS,SAAAA,CAAAA;AACf,QAAA,CAAA;AAEA,QAAA,MAAMmB,UAAAA,CAAW,EAAErE,KAAAA,EAAOH,IAAAA,EAAM4C,OAAK,EAAqC;AACxE,UAAA,IACE,CAACN,WAAW/E,mBAAAA,IACZ2C,2BAAAA,CAA4BC,OAAOmC,UAAAA,CAAAA,IACnCtC,KAAK+C,uBAAAA,EACL;AACA,YAAA,OAAOH,KAAAA,CAAM7C,aAAAA,CAAcC,IAAAA,CAAAA,CAAAA;AAC7B,UAAA;AAEA,UAAA,MAAMtB,QAAQ3B,mBAAAA,EAAAA;AACdsD,UAAAA,iBAAAA,CAAkBF,KAAAA,EAAO,YAAA,EAAczB,KAAAA,EAAO4D,UAAAA,CAAAA;AAC9C,UAAA,IAAI,CAAC5D,OAAOG,WAAAA,EAAa;AACvB,YAAA,OAAO+D,MAAM5C,IAAAA,CAAAA;AACf,UAAA;AAEA,UAAA,IAAIsC,WAAWlE,4BAAAA,EAA8B;AAC3C,YAAA,MAAMuC,kBAAAA,CAAmBC,WAAWlC,KAAAA,CAAAA;AACtC,UAAA;AAIA,UAAA,MAAMoF,aAAAA,GAAgB1E,iBAAAA,CAAkBY,IAAAA,CAAKX,KAAAA,EAAOX,KAAAA,CAAAA;AAEpD,UAAA,IAAI4D,WAAWnE,KAAAA,EAAO;AACpBoE,YAAAA,MAAAA,CAAOpE,KAAAA,CAAM,CAAA,qBAAA,EAAwBgC,KAAAA,CAAAA,6CAAAA,CAAAA,EAAsD;AACzFtB,cAAAA,WAAAA,EAAaH,KAAAA,CAAMG;aACrB,CAAA;AACF,UAAA;AAEA,UAAA,MAAMwE,SAAAA,GAAY;AAChB,YAAA,GAAGtD,cAAcC,IAAAA,CAAAA;YACjBX,KAAAA,EAAOyE;AACT,WAAA;AACA,UAAA,IAAIxB,WAAWjE,mBAAAA,EAAqB;AAClC,YAAA,OAAOwD,sBAAAA,CAAuBY,wBAAAA,EAA0B/D,KAAAA,EAAOyB,KAAAA,EAAO,cAAckD,SAAAA,CAAAA;AACtF,UAAA;AACA,UAAA,OAAOT,MAAMS,SAAAA,CAAAA;AACf,QAAA,CAAA;AAEA,QAAA,MAAMoB,iBAAAA,CAAkB,EAAEtE,KAAAA,EAAOH,IAAAA,EAAM4C,OAAK,EAAqC;AAC/E,UAAA,IACE,CAACN,WAAW/E,mBAAAA,IACZ2C,2BAAAA,CAA4BC,OAAOmC,UAAAA,CAAAA,IACnCtC,KAAK+C,uBAAAA,EACL;AACA,YAAA,OAAOH,KAAAA,CAAM7C,aAAAA,CAAcC,IAAAA,CAAAA,CAAAA;AAC7B,UAAA;AAEA,UAAA,MAAMtB,QAAQ3B,mBAAAA,EAAAA;AACdsD,UAAAA,iBAAAA,CAAkBF,KAAAA,EAAO,mBAAA,EAAqBzB,KAAAA,EAAO4D,UAAAA,CAAAA;AACrD,UAAA,IAAI,CAAC5D,OAAOG,WAAAA,EAAa;AACvB,YAAA,OAAO+D,MAAM5C,IAAAA,CAAAA;AACf,UAAA;AAEA,UAAA,IAAIsC,WAAWlE,4BAAAA,EAA8B;AAC3C,YAAA,MAAMuC,kBAAAA,CAAmBC,WAAWlC,KAAAA,CAAAA;AACtC,UAAA;AACA,UAAA,MAAMoF,aAAAA,GAAgB1E,iBAAAA,CAAkBY,IAAAA,CAAKX,KAAAA,EAAOX,KAAAA,CAAAA;AAEpD,UAAA,IAAI4D,WAAWnE,KAAAA,EAAO;AACpBoE,YAAAA,MAAAA,CAAOpE,KAAAA,CAAM,CAAA,qBAAA,EAAwBgC,KAAAA,CAAAA,oDAAAA,CAAAA,EAA6D;AAChGtB,cAAAA,WAAAA,EAAaH,KAAAA,CAAMG;aACrB,CAAA;AACF,UAAA;AAEA,UAAA,MAAMwE,SAAAA,GAAY;AAChB,YAAA,GAAGtD,cAAcC,IAAAA,CAAAA;YACjBX,KAAAA,EAAOyE;AACT,WAAA;AACA,UAAA,IAAIxB,WAAWjE,mBAAAA,EAAqB;AAClC,YAAA,OAAOwD,sBAAAA,CAAuBY,wBAAAA,EAA0B/D,KAAAA,EAAOyB,KAAAA,EAAO,qBAAqBkD,SAAAA,CAAAA;AAC7F,UAAA;AACA,UAAA,OAAOT,MAAMS,SAAAA,CAAAA;AACf,QAAA,CAAA;AAEA,QAAA,MAAMqB,KAAAA,CAAM,EAAEvE,KAAAA,EAAOH,IAAAA,EAAM4C,OAAK,EAAqC;AACnE,UAAA,IACE,CAACN,WAAW/E,mBAAAA,IACZ2C,2BAAAA,CAA4BC,OAAOmC,UAAAA,CAAAA,IACnCtC,KAAK+C,uBAAAA,EACL;AACA,YAAA,OAAOH,KAAAA,CAAM7C,aAAAA,CAAcC,IAAAA,CAAAA,CAAAA;AAC7B,UAAA;AAEA,UAAA,MAAMtB,QAAQ3B,mBAAAA,EAAAA;AACdsD,UAAAA,iBAAAA,CAAkBF,KAAAA,EAAO,OAAA,EAASzB,KAAAA,EAAO4D,UAAAA,CAAAA;AACzC,UAAA,IAAI,CAAC5D,OAAOG,WAAAA,EAAa;AACvB,YAAA,OAAO+D,MAAM5C,IAAAA,CAAAA;AACf,UAAA;AAEA,UAAA,IAAIsC,WAAWlE,4BAAAA,EAA8B;AAC3C,YAAA,MAAMuC,kBAAAA,CAAmBC,WAAWlC,KAAAA,CAAAA;AACtC,UAAA;AACA,UAAA,MAAMoF,aAAAA,GAAgB1E,iBAAAA,CAAkBY,IAAAA,CAAKX,KAAAA,EAAOX,KAAAA,CAAAA;AAEpD,UAAA,IAAI4D,WAAWnE,KAAAA,EAAO;AACpBoE,YAAAA,MAAAA,CAAOpE,KAAAA,CAAM,CAAA,qBAAA,EAAwBgC,KAAAA,CAAAA,wCAAAA,CAAAA,EAAiD;AACpFtB,cAAAA,WAAAA,EAAaH,KAAAA,CAAMG;aACrB,CAAA;AACF,UAAA;AAEA,UAAA,MAAMwE,SAAAA,GAAY;AAChB,YAAA,GAAGtD,cAAcC,IAAAA,CAAAA;YACjBX,KAAAA,EAAOyE;AACT,WAAA;AACA,UAAA,IAAIxB,WAAWjE,mBAAAA,EAAqB;AAClC,YAAA,OAAOwD,sBAAAA,CAAuBY,wBAAAA,EAA0B/D,KAAAA,EAAOyB,KAAAA,EAAO,SAASkD,SAAAA,CAAAA;AACjF,UAAA;AACA,UAAA,OAAOT,MAAMS,SAAAA,CAAAA;AACf,QAAA,CAAA;AAEA,QAAA,MAAMsB,SAAAA,CAAU,EAAExE,KAAAA,EAAOH,IAAAA,EAAM4C,OAAK,EAAqC;AACvE,UAAA,IACE,CAACN,WAAW/E,mBAAAA,IACZ2C,2BAAAA,CAA4BC,OAAOmC,UAAAA,CAAAA,IACnCtC,KAAK+C,uBAAAA,EACL;AACA,YAAA,OAAOH,KAAAA,CAAM7C,aAAAA,CAAcC,IAAAA,CAAAA,CAAAA;AAC7B,UAAA;AAEA,UAAA,MAAMtB,QAAQ3B,mBAAAA,EAAAA;AACdsD,UAAAA,iBAAAA,CAAkBF,KAAAA,EAAO,WAAA,EAAazB,KAAAA,EAAO4D,UAAAA,CAAAA;AAC7C,UAAA,IAAI,CAAC5D,OAAOG,WAAAA,EAAa;AACvB,YAAA,OAAO+D,MAAM5C,IAAAA,CAAAA;AACf,UAAA;AAEA,UAAA,IAAIsC,WAAWlE,4BAAAA,EAA8B;AAC3C,YAAA,MAAMuC,kBAAAA,CAAmBC,WAAWlC,KAAAA,CAAAA;AACtC,UAAA;AACA,UAAA,MAAMoF,aAAAA,GAAgB1E,iBAAAA,CAAkBY,IAAAA,CAAKX,KAAAA,EAAOX,KAAAA,CAAAA;AAEpD,UAAA,IAAI4D,WAAWnE,KAAAA,EAAO;AACpBoE,YAAAA,MAAAA,CAAOpE,KAAAA,CAAM,CAAA,qBAAA,EAAwBgC,KAAAA,CAAAA,4CAAAA,CAAAA,EAAqD;AACxFtB,cAAAA,WAAAA,EAAaH,KAAAA,CAAMG;aACrB,CAAA;AACF,UAAA;AAEA,UAAA,MAAMwE,SAAAA,GAAY;AAChB,YAAA,GAAGtD,cAAcC,IAAAA,CAAAA;YACjBX,KAAAA,EAAOyE;AACT,WAAA;AACA,UAAA,IAAIxB,WAAWjE,mBAAAA,EAAqB;AAClC,YAAA,OAAOwD,sBAAAA,CAAuBY,wBAAAA,EAA0B/D,KAAAA,EAAOyB,KAAAA,EAAO,aAAakD,SAAAA,CAAAA;AACrF,UAAA;AACA,UAAA,OAAOT,MAAMS,SAAAA,CAAAA;AACf,QAAA,CAAA;AAEA,QAAA,MAAMuB,OAAAA,CAAQ,EAAEzE,KAAAA,EAAOH,IAAAA,EAAM4C,OAAK,EAAqC;AACrE,UAAA,IACE,CAACN,WAAW/E,mBAAAA,IACZ2C,2BAAAA,CAA4BC,OAAOmC,UAAAA,CAAAA,IACnCtC,KAAK+C,uBAAAA,EACL;AACA,YAAA,OAAOH,KAAAA,CAAM7C,aAAAA,CAAcC,IAAAA,CAAAA,CAAAA;AAC7B,UAAA;AAEA,UAAA,MAAMtB,QAAQ3B,mBAAAA,EAAAA;AACdsD,UAAAA,iBAAAA,CAAkBF,KAAAA,EAAO,SAAA,EAAWzB,KAAAA,EAAO4D,UAAAA,CAAAA;AAC3C,UAAA,IAAI,CAAC5D,OAAOG,WAAAA,EAAa;AACvB,YAAA,OAAO+D,MAAM5C,IAAAA,CAAAA;AACf,UAAA;AAEA,UAAA,IAAIsC,WAAWlE,4BAAAA,EAA8B;AAC3C,YAAA,MAAMuC,kBAAAA,CAAmBC,WAAWlC,KAAAA,CAAAA;AACtC,UAAA;AACA,UAAA,MAAMoF,aAAAA,GAAgB1E,iBAAAA,CAAkBY,IAAAA,CAAKX,KAAAA,EAAOX,KAAAA,CAAAA;AAEpD,UAAA,IAAI4D,WAAWnE,KAAAA,EAAO;AACpBoE,YAAAA,MAAAA,CAAOpE,KAAAA,CAAM,CAAA,qBAAA,EAAwBgC,KAAAA,CAAAA,0CAAAA,CAAAA,EAAmD;AACtFtB,cAAAA,WAAAA,EAAaH,KAAAA,CAAMG;aACrB,CAAA;AACF,UAAA;AAEA,UAAA,MAAMwE,SAAAA,GAAY;AAChB,YAAA,GAAGtD,cAAcC,IAAAA,CAAAA;YACjBX,KAAAA,EAAOyE;AACT,WAAA;AACA,UAAA,IAAIxB,WAAWjE,mBAAAA,EAAqB;AAClC,YAAA,OAAOwD,sBAAAA,CAAuBY,wBAAAA,EAA0B/D,KAAAA,EAAOyB,KAAAA,EAAO,WAAWkD,SAAAA,CAAAA;AACnF,UAAA;AACA,UAAA,OAAOT,MAAMS,SAAAA,CAAAA;AACf,QAAA,CAAA;;;;AAMA,QAAA,MAAM/B,MAAAA,CAAO,EAAEnB,KAAAA,EAAOH,IAAAA,EAAM4C,OAAK,EAAqC;AACpE,UAAA,IACE,CAACN,WAAW9E,qBAAAA,IACZ0C,2BAAAA,CAA4BC,OAAOmC,UAAAA,CAAAA,IACnCtC,KAAK+C,uBAAAA,EACL;AACA,YAAA,OAAOH,KAAAA,CAAM7C,aAAAA,CAAcC,IAAAA,CAAAA,CAAAA;AAC7B,UAAA;AAEA,UAAA,MAAMtB,QAAQ3B,mBAAAA,EAAAA;AACdsD,UAAAA,iBAAAA,CAAkBF,KAAAA,EAAO,QAAA,EAAUzB,KAAAA,EAAO4D,UAAAA,CAAAA;AAC1C,UAAA,IAAI,CAAC5D,OAAOG,WAAAA,EAAa;AACvB,YAAA,OAAO+D,MAAM5C,IAAAA,CAAAA;AACf,UAAA;AAEA,UAAA,IAAIsC,WAAWlE,4BAAAA,EAA8B;AAC3C,YAAA,MAAMuC,kBAAAA,CAAmBC,WAAWlC,KAAAA,CAAAA;AACtC,UAAA;AACA,UAAA,MAAMoF,aAAAA,GAAgB1E,iBAAAA,CAAkBY,IAAAA,CAAKX,KAAAA,EAAOX,KAAAA,CAAAA;AAEpD,UAAA,IAAI4D,WAAWnE,KAAAA,EAAO;AACpBoE,YAAAA,MAAAA,CAAOpE,KAAAA,CAAM,CAAA,qBAAA,EAAwBgC,KAAAA,CAAAA,yCAAAA,CAAAA,EAAkD;AACrFtB,cAAAA,WAAAA,EAAaH,KAAAA,CAAMG;aACrB,CAAA;AACF,UAAA;AAEA,UAAA,MAAMwE,SAAAA,GAAY;AAChB,YAAA,GAAGtD,cAAcC,IAAAA,CAAAA;YACjBX,KAAAA,EAAOyE;AACT,WAAA;AACA,UAAA,IAAIxB,WAAWjE,mBAAAA,EAAqB;AAClC,YAAA,OAAOwD,sBAAAA,CAAuBY,wBAAAA,EAA0B/D,KAAAA,EAAOyB,KAAAA,EAAO,UAAUkD,SAAAA,CAAAA;AAClF,UAAA;AACA,UAAA,OAAOT,MAAMS,SAAAA,CAAAA;AACf,QAAA,CAAA;AAEA,QAAA,MAAMwB,UAAAA,CAAW,EAAE1E,KAAAA,EAAOH,IAAAA,EAAM4C,OAAK,EAAqC;AACxE,UAAA,IACE,CAACN,WAAW9E,qBAAAA,IACZ0C,2BAAAA,CAA4BC,OAAOmC,UAAAA,CAAAA,IACnCtC,KAAK+C,uBAAAA,EACL;AACA,YAAA,OAAOH,KAAAA,CAAM7C,aAAAA,CAAcC,IAAAA,CAAAA,CAAAA;AAC7B,UAAA;AAEA,UAAA,MAAMtB,QAAQ3B,mBAAAA,EAAAA;AACdsD,UAAAA,iBAAAA,CAAkBF,KAAAA,EAAO,YAAA,EAAczB,KAAAA,EAAO4D,UAAAA,CAAAA;AAC9C,UAAA,IAAI,CAAC5D,OAAOG,WAAAA,EAAa;AACvB,YAAA,OAAO+D,MAAM5C,IAAAA,CAAAA;AACf,UAAA;AAEA,UAAA,IAAIsC,WAAWlE,4BAAAA,EAA8B;AAC3C,YAAA,MAAMuC,kBAAAA,CAAmBC,WAAWlC,KAAAA,CAAAA;AACtC,UAAA;AACA,UAAA,MAAMoF,aAAAA,GAAgB1E,iBAAAA,CAAkBY,IAAAA,CAAKX,KAAAA,EAAOX,KAAAA,CAAAA;AAEpD,UAAA,IAAI4D,WAAWnE,KAAAA,EAAO;AACpBoE,YAAAA,MAAAA,CAAOpE,KAAAA,CAAM,CAAA,qBAAA,EAAwBgC,KAAAA,CAAAA,6CAAAA,CAAAA,EAAsD;AACzFtB,cAAAA,WAAAA,EAAaH,KAAAA,CAAMG;aACrB,CAAA;AACF,UAAA;AAEA,UAAA,MAAMwE,SAAAA,GAAY;AAChB,YAAA,GAAGtD,cAAcC,IAAAA,CAAAA;YACjBX,KAAAA,EAAOyE;AACT,WAAA;AACA,UAAA,IAAIxB,WAAWjE,mBAAAA,EAAqB;AAClC,YAAA,OAAOwD,sBAAAA,CAAuBY,wBAAAA,EAA0B/D,KAAAA,EAAOyB,KAAAA,EAAO,cAAckD,SAAAA,CAAAA;AACtF,UAAA;AACA,UAAA,OAAOT,MAAMS,SAAAA,CAAAA;AACf,QAAA;AACF;AACF;GACF,CAAA;AACF;AArqBgBjB,MAAAA,CAAAA,qBAAAA,EAAAA,uBAAAA,CAAAA","file":"chunk-KESVEZB2.js","sourcesContent":["/**\n * Prisma Workspace Extension\n *\n * Automatically injects workspaceId into ALL Prisma operations using\n * request-scoped context from AsyncLocalStorage:\n *\n * **Write operations** (create, createMany, update, upsert):\n * - Auto-populates `workspaceId`, `tenantId`, `createdBy`, `updatedBy`, `context` JSON\n *\n * **Read operations** (findMany, findFirst, findUnique, count, aggregate, groupBy):\n * - Auto-injects `workspaceId` into the `where` clause for workspace isolation\n *\n * **Delete operations** (delete, deleteMany):\n * - Auto-injects `workspaceId` into the `where` clause to prevent cross-workspace deletion\n *\n * **Update where clause** (update, updateMany):\n * - Auto-injects `workspaceId` into the `where` clause to prevent cross-workspace updates\n *\n * **How it works:**\n * 1. The GraphQL server's buildContext extracts workspaceId from x-workspace-id header\n * 2. The workspace context store (AsyncLocalStorage) holds the current request's workspace info\n * 3. This Prisma extension intercepts ALL operations and auto-injects workspaceId\n *\n * **What gets auto-populated on writes:**\n * - `workspaceId` field (String or String?) - set from context if not explicitly provided\n * - `context` field (Json) - merged with workspace/actor info if not explicitly provided\n * - `tenantId` field (String or String?) - set from context if not explicitly provided\n * - `createdBy` / `updatedBy` fields - set from actor context if not explicitly provided\n *\n * **What gets auto-injected on reads/updates/deletes:**\n * - `workspaceId` in the `where` clause - ensures queries only access data within the workspace\n *\n * **Opt-out:**\n * - Explicitly providing `workspaceId` in the where/data will override auto-injection\n * - Pass `_skipWorkspaceInjection: true` in the query args to skip entirely\n * - Set `enableReadIsolation: false` in config to disable read-side injection only\n * - Add model names to `excludeModels` to skip specific models\n *\n * @module prisma/workspace-extension\n * @category Database\n */\n\nimport { AsyncLocalStorage } from 'node:async_hooks';\nimport { logger } from '../logger/index.js';\nimport type { InputJsonValue } from './context.js';\n\n// ============================================================================\n// Workspace Context Store (AsyncLocalStorage)\n// ============================================================================\n\n/**\n * Workspace context for the current request scope\n */\nexport interface WorkspaceContext {\n /** Workspace ID (from x-workspace-id header) */\n workspaceId?: string;\n /** Tenant ID (from x-tenant-id header or derived from workspace) */\n tenantId?: string;\n /** Actor ID (user/service/app performing the operation) */\n actorId?: string;\n /** Actor type (user, app, service, super_admin) */\n actorType?: string;\n /** Organization ID */\n organizationId?: string;\n /** Project ID */\n projectId?: string;\n /** App ID */\n appId?: string;\n /** On behalf of actor ID (for consent-based delegation) */\n onBehalfOf?: string;\n}\n\n/**\n * AsyncLocalStorage for workspace context\n * This is separate from the SDK's general ContextManager to allow\n * fine-grained control over workspace-specific context propagation.\n */\nconst workspaceContextStore = new AsyncLocalStorage<WorkspaceContext>();\n\n/**\n * Fallback context for environments where AsyncLocalStorage.enterWith()\n * doesn't propagate across async boundaries (e.g., Bun + GraphQL Yoga).\n *\n * IMPORTANT: This is NOT request-isolated — it's a module-level singleton.\n * It works for single-request-at-a-time scenarios but could race under\n * concurrent requests. The ALS is the primary mechanism; this is a fallback.\n */\nlet fallbackContext: WorkspaceContext | undefined;\n\n/**\n * Set workspace context for the current async scope.\n * Call this in your GraphQL context builder or middleware.\n *\n * Uses AsyncLocalStorage.enterWith() as the primary mechanism,\n * with a module-level fallback for runtimes where enterWith()\n * doesn't propagate through all async chains (e.g., Bun).\n *\n * @param context - The workspace context for this request\n *\n * @example\n * ```typescript\n * // In your server's buildContext:\n * import { setWorkspaceContext } from '@burdenoff/be-sdk/prisma';\n *\n * buildContext: async (defaultContext) => {\n * setWorkspaceContext({\n * workspaceId: defaultContext.workspace?.id,\n * tenantId: defaultContext.tenant?.id,\n * actorId: defaultContext.actor?.id,\n * actorType: defaultContext.actor?.type,\n * organizationId: defaultContext.organization?.id,\n * });\n * return defaultContext;\n * }\n * ```\n */\nexport function setWorkspaceContext(context: WorkspaceContext): void {\n workspaceContextStore.enterWith(context);\n fallbackContext = context;\n}\n\n/**\n * Get the current workspace context from AsyncLocalStorage.\n * Falls back to module-level context if ALS returns undefined\n * (can happen in Bun where enterWith() doesn't propagate through\n * some async chains like GraphQL Yoga's execution pipeline).\n *\n * @returns The current workspace context, or undefined if not set\n */\nexport function getWorkspaceContext(): WorkspaceContext | undefined {\n return workspaceContextStore.getStore() ?? fallbackContext;\n}\n\n/**\n * Run a function with a specific workspace context.\n * The context is isolated to this execution and its children.\n *\n * @param context - The workspace context\n * @param fn - The function to run\n * @returns The result of the function\n *\n * @example\n * ```typescript\n * const result = await withWorkspaceContext(\n * { workspaceId: 'ws-123', actorId: 'user-456' },\n * async () => {\n * // All Prisma operations in here will auto-inject workspaceId\n * return await prisma.tag.create({ data: { name: 'test' } });\n * }\n * );\n * ```\n */\nexport async function withWorkspaceContext<T>(context: WorkspaceContext, fn: () => Promise<T>): Promise<T> {\n return workspaceContextStore.run(context, fn);\n}\n\n/**\n * Run a synchronous function with a specific workspace context.\n */\nexport function withWorkspaceContextSync<T>(context: WorkspaceContext, fn: () => T): T {\n return workspaceContextStore.run(context, fn);\n}\n\n// ============================================================================\n// Extension Configuration\n// ============================================================================\n\n/**\n * Configuration for the workspace extension\n */\nexport interface WorkspaceExtensionConfig {\n /**\n * Enable automatic workspaceId injection on create/update\n * @default true\n */\n enabled?: boolean;\n\n /**\n * Enable automatic workspaceId injection on read operations\n * (findMany, findFirst, findUnique, findFirstOrThrow, findUniqueOrThrow,\n * count, aggregate, groupBy)\n *\n * When enabled, every read query automatically includes `workspaceId`\n * in the `where` clause, preventing cross-workspace data leakage.\n *\n * @default true\n */\n enableReadIsolation?: boolean;\n\n /**\n * Enable automatic workspaceId injection on delete operations\n * (delete, deleteMany)\n *\n * When enabled, every delete operation automatically includes `workspaceId`\n * in the `where` clause, preventing cross-workspace deletion.\n *\n * @default true\n */\n enableDeleteIsolation?: boolean;\n\n /**\n * Enable automatic workspaceId injection into update/updateMany `where` clauses.\n *\n * When enabled, update operations automatically include `workspaceId`\n * in the `where` clause in addition to the `data` injection,\n * preventing cross-workspace updates.\n *\n * @default true\n */\n enableUpdateWhereIsolation?: boolean;\n\n /**\n * Automatically populate the `context` JSON field with workspace/actor info\n * @default true\n */\n populateContextJson?: boolean;\n\n /**\n * Automatically populate `createdBy` field on create operations\n * @default true\n */\n populateCreatedBy?: boolean;\n\n /**\n * Automatically populate `updatedBy` field on update operations\n * @default true\n */\n populateUpdatedBy?: boolean;\n\n /**\n * Automatically populate `tenantId` field from context\n * @default false (tenantId is typically derived from workspaceId at the DB level)\n */\n populateTenantId?: boolean;\n\n /**\n * Automatically populate the `onBehalfOf` field on create operations\n * (consent-based delegation tracking — defaults to the acting actor when no\n * delegation is present).\n *\n * Unlike `populateContextJson`/`populateCreatedBy`/`populateUpdatedBy`, this\n * has no per-model opt-out other than `excludeModels` (which also disables\n * RLS GUC tagging and isolation for that model). Set to `false` for services\n * whose Prisma models don't carry an `onBehalfOf` column — otherwise every\n * create on those models throws `Unknown argument onBehalfOf` from Prisma's\n * client-side validation.\n *\n * @default true\n */\n populateOnBehalfOf?: boolean;\n\n /**\n * Models to exclude from auto-injection (both reads and writes).\n * Use this for models that intentionally don't have workspaceId.\n *\n * Common exclusions: system tables, infra tables, global reference data.\n *\n * @default []\n */\n excludeModels?: string[];\n\n /**\n * Models to exclude from read isolation only.\n * These models will still get write-side injection (workspaceId on create)\n * but reads will NOT have workspaceId auto-injected into `where`.\n *\n * Use this for child/join tables where workspace scoping is inherited\n * through parent relations, or for models queried by ID that don't\n * have a workspaceId column.\n *\n * @default []\n */\n excludeModelsFromReadIsolation?: string[];\n\n /**\n * When true, throws an error if workspaceId is missing from context\n * for any non-excluded model operation. This prevents silent\n * workspace-unscoped queries that could leak data across workspaces.\n *\n * When false, operations without workspace context proceed without\n * workspaceId injection (legacy behavior).\n *\n * @default true\n */\n strictMode?: boolean;\n\n /**\n * Operations that are allowed without workspace context even in strict mode.\n * Use `Model.operation` format (e.g., `['Workspace.create', 'RevokedToken.findMany']`).\n *\n * Valid operation names: create, createMany, createManyAndReturn, update, updateMany,\n * upsert, findMany, findFirst, findFirstOrThrow, findUnique, findUniqueOrThrow,\n * count, aggregate, groupBy, delete, deleteMany.\n *\n * @default []\n */\n allowedUnguardedOperations?: string[];\n\n /**\n * Log injection events (useful for debugging)\n * @default false\n */\n debug?: boolean;\n\n /**\n * Tag the PostgreSQL connection with workspace attribution for pg_stat_activity visibility.\n *\n * When enabled, the first DB operation per workspace context sets:\n * `application_name = 'svc=<SERVICE_NAME>;ws=<workspaceId>'`\n *\n * This makes workspace-level query attribution visible in pg_stat_activity,\n * pg_locks, auto_explain, and monitoring tools without any schema changes.\n * Subsequent operations in the same request are deduplicated via WeakSet,\n * costing ~0 overhead after the first round-trip per request context.\n *\n * NOTE: This is a session-level SET so attribution may drift across ops\n * that reuse the same pooled connection from different requests. Use for\n * aggregate observability, not per-query forensics.\n *\n * @default false\n */\n enableApplicationNameTagging?: boolean;\n\n /**\n * Set the `app.workspace_id` GUC for Row Level Security enforcement.\n *\n * When enabled, the first DB operation per workspace context executes:\n * `SET app.workspace_id = '<workspaceId>'`\n *\n * RLS policies using `current_setting('app.workspace_id', true)` then filter\n * rows by workspace, providing a defense-in-depth backstop to the application-\n * layer workspaceId injection in the WHERE clause.\n *\n * Pair with migrations that run per table:\n * `ALTER TABLE t ENABLE ROW LEVEL SECURITY;`\n * `CREATE POLICY ws_isolation ON t\n * USING (workspace_id = current_setting('app.workspace_id', true))\n * WITH CHECK (workspace_id = current_setting('app.workspace_id', true));`\n *\n * Fail-closed semantics: if the GUC is unset (NULL from missing_ok=true),\n * `workspace_id = NULL` is always false, so RLS returns no rows — leaking\n * nothing rather than everything.\n *\n * NOTE: Uses session-level SET (safe without a pooler or with session-mode\n * pooling). Upgrade to SET LOCAL inside `$transaction` when PgBouncer\n * transaction-mode pooling is enabled (Phase 3b).\n *\n * @default false\n */\n enableRlsGucTagging?: boolean;\n}\n\n/**\n * Default configuration. Exported so consumers/tests can spread over the\n * real defaults (`{ ...defaultWorkspaceExtensionConfig, populateOnBehalfOf: false }`)\n * instead of re-declaring every field.\n */\nexport const defaultWorkspaceExtensionConfig: Required<WorkspaceExtensionConfig> = {\n enabled: true,\n enableReadIsolation: true,\n enableDeleteIsolation: true,\n enableUpdateWhereIsolation: true,\n populateContextJson: true,\n populateCreatedBy: true,\n populateUpdatedBy: true,\n populateTenantId: false,\n populateOnBehalfOf: true,\n excludeModels: [],\n excludeModelsFromReadIsolation: [],\n strictMode: true,\n allowedUnguardedOperations: [],\n debug: false,\n enableApplicationNameTagging: false,\n enableRlsGucTagging: false,\n};\n\n// ============================================================================\n// Data Injection Helpers\n// ============================================================================\n\n/**\n * Check if a field exists in the data object (including being set to null/undefined explicitly)\n */\nfunction hasField(data: Record<string, unknown>, field: string): boolean {\n return field in data;\n}\n\n/**\n * Inject workspace-related fields into create data.\n *\n * Exported (alongside `injectWhereWorkspaceId`) so consumers can unit-test\n * exactly what a given `WorkspaceExtensionConfig` injects for their own\n * Prisma schema — in particular, to verify `populateOnBehalfOf: false` /\n * `populateContextJson: false` actually suppress `onBehalfOf`/`context`\n * before wiring the extension against models that don't have those columns.\n */\nexport function injectCreateFields(\n data: Record<string, unknown>,\n wsCtx: WorkspaceContext,\n config: Required<WorkspaceExtensionConfig>\n): Record<string, unknown> {\n const injected = { ...data };\n\n // Inject workspaceId if not already provided\n if (wsCtx.workspaceId && !hasField(injected, 'workspaceId')) {\n injected['workspaceId'] = wsCtx.workspaceId;\n }\n\n // Inject tenantId if configured and not already provided\n if (config.populateTenantId && wsCtx.tenantId && !hasField(injected, 'tenantId')) {\n injected['tenantId'] = wsCtx.tenantId;\n }\n\n // Inject createdBy if configured and not already provided\n if (config.populateCreatedBy && wsCtx.actorId && !hasField(injected, 'createdBy')) {\n injected['createdBy'] = wsCtx.actorId;\n }\n\n // Inject updatedBy on create as well (initial value)\n if (config.populateUpdatedBy && wsCtx.actorId && !hasField(injected, 'updatedBy')) {\n injected['updatedBy'] = wsCtx.actorId;\n }\n\n // Inject onBehalfOf (for consent-based delegation tracking)\n // If onBehalfOf is in context (from consent), use it; otherwise defaults to actorId (self-action)\n if (config.populateOnBehalfOf && wsCtx.onBehalfOf && !hasField(injected, 'onBehalfOf')) {\n injected['onBehalfOf'] = wsCtx.onBehalfOf;\n } else if (config.populateOnBehalfOf && wsCtx.actorId && !hasField(injected, 'onBehalfOf')) {\n // Default to actorId if no delegation (self-action)\n injected['onBehalfOf'] = wsCtx.actorId;\n }\n\n // Populate context JSON field\n if (config.populateContextJson && !hasField(injected, 'context')) {\n const contextJson = buildContextJsonFromWorkspaceContext(wsCtx);\n if (contextJson) {\n injected['context'] = contextJson;\n }\n }\n\n return injected;\n}\n\n/**\n * Inject workspace-related fields into update data\n */\nfunction injectUpdateFields(\n data: Record<string, unknown>,\n wsCtx: WorkspaceContext,\n config: Required<WorkspaceExtensionConfig>\n): Record<string, unknown> {\n const injected = { ...data };\n\n // Inject updatedBy if configured and not already provided\n if (config.populateUpdatedBy && wsCtx.actorId && !hasField(injected, 'updatedBy')) {\n injected['updatedBy'] = wsCtx.actorId;\n }\n\n // Note: We intentionally do NOT auto-inject workspaceId on updates\n // because updates target existing records (workspaceId is immutable after creation)\n // and changing it would be a data integrity issue.\n\n return injected;\n}\n\n/**\n * Inject workspaceId into a where clause.\n * Only injects if workspaceId is available in context and not already present in where.\n *\n * For operations that may not have a where clause (e.g., findMany without filters),\n * creates a new where object with just workspaceId.\n */\nfunction injectWhereClause(\n where: Record<string, unknown> | undefined,\n wsCtx: WorkspaceContext\n): Record<string, unknown> | undefined {\n if (!wsCtx.workspaceId) return where;\n\n if (!where) {\n // No where clause exists, create one with just workspaceId\n return { workspaceId: wsCtx.workspaceId };\n }\n\n // Only inject if not already present\n if (!hasField(where, 'workspaceId')) {\n return { ...where, workspaceId: wsCtx.workspaceId };\n }\n\n return where;\n}\n\n/**\n * Build context JSON from workspace context\n */\nfunction buildContextJsonFromWorkspaceContext(wsCtx: WorkspaceContext): InputJsonValue | undefined {\n const context: Record<string, string> = {};\n\n if (wsCtx.workspaceId) context['workspaceId'] = wsCtx.workspaceId;\n if (wsCtx.actorId) context['userId'] = wsCtx.actorId;\n if (wsCtx.organizationId) context['organizationId'] = wsCtx.organizationId;\n if (wsCtx.projectId) context['projectId'] = wsCtx.projectId;\n if (wsCtx.appId) context['appId'] = wsCtx.appId;\n\n return Object.keys(context).length > 0 ? context : undefined;\n}\n\n/**\n * Inject workspaceId into where clause for read/update/delete operations.\n * This is a utility function exported for services that want to manually\n * add workspace scoping to their queries.\n *\n * @param where - The existing where clause\n * @param wsCtx - The workspace context (or auto-detected from AsyncLocalStorage)\n * @returns The where clause with workspaceId injected if not already present\n *\n * @example\n * ```typescript\n * import { injectWhereWorkspaceId, getWorkspaceContext } from '@burdenoff/be-sdk/prisma';\n *\n * const wsCtx = getWorkspaceContext();\n * const where = injectWhereWorkspaceId({ status: 'ACTIVE' }, wsCtx);\n * // Result: { status: 'ACTIVE', workspaceId: 'ws-123' }\n * ```\n */\nexport function injectWhereWorkspaceId(\n where: Record<string, unknown> | undefined,\n wsCtx?: WorkspaceContext\n): Record<string, unknown> | undefined {\n const ctx = wsCtx ?? getWorkspaceContext();\n if (!where || !ctx?.workspaceId) return where;\n\n // Only inject if not already present\n if (!hasField(where, 'workspaceId')) {\n return { ...where, workspaceId: ctx.workspaceId };\n }\n\n return where;\n}\n\n/**\n * Remove the _skipWorkspaceInjection flag from args before passing to Prisma.\n * Using a dedicated function avoids ESLint unused-variable warnings from destructuring.\n */\nfunction stripSkipFlag<T extends Record<string, unknown>>(args: T): Omit<T, '_skipWorkspaceInjection'> {\n const cleaned = { ...args };\n delete (cleaned as Record<string, unknown>)['_skipWorkspaceInjection'];\n return cleaned;\n}\n\n/**\n * Check if a model should be excluded from read isolation.\n * A model is excluded if it's in excludeModels OR excludeModelsFromReadIsolation.\n */\nfunction isExcludedFromReadIsolation(model: string, config: Required<WorkspaceExtensionConfig>): boolean {\n return config.excludeModels.includes(model) || config.excludeModelsFromReadIsolation.includes(model);\n}\n\n// ============================================================================\n// Strict Mode Enforcement\n// ============================================================================\n\n/**\n * Enforce strict mode: throw if workspace context is missing and the operation\n * is not explicitly allowed to run without it.\n *\n * @returns true if the operation should proceed without workspace injection (non-strict or allowed)\n * @throws Error if strict mode is enabled and the operation is not allowed\n */\nfunction enforceStrictMode(\n model: string,\n operation: string,\n wsCtx: WorkspaceContext | undefined,\n config: Required<WorkspaceExtensionConfig>\n): void {\n // If workspace context has a workspaceId, nothing to enforce\n if (wsCtx?.workspaceId) return;\n\n // If strict mode is off, allow silently\n if (!config.strictMode) return;\n\n // Check if this specific operation is allowed without workspace context\n const opKey = `${model}.${operation}`;\n if (config.allowedUnguardedOperations.includes(opKey)) return;\n\n // Strict mode violation — throw\n throw new Error(\n `[WorkspaceExtension] Workspace context required for ${model}.${operation}. ` +\n `No workspaceId found in request context. To bypass, either: ` +\n `(1) add \"${model}\" to excludeModels, ` +\n `(2) add \"${opKey}\" to allowedUnguardedOperations, or ` +\n `(3) pass _skipWorkspaceInjection: true in the query args.`\n );\n}\n\n// ============================================================================\n// Prisma Extension\n// ============================================================================\n\n/**\n * Standard args shape for operations with a `where` clause\n */\ninterface WhereArgs {\n where?: Record<string, unknown>;\n _skipWorkspaceInjection?: boolean;\n [key: string]: unknown;\n}\n\n/**\n * Standard handler params from Prisma $extends\n */\ninterface ExtensionHandlerParams<TArgs> {\n model: string;\n args: TArgs;\n query: (args: unknown) => Promise<unknown>;\n}\n\n/**\n * Add workspace extension to a Prisma client.\n *\n * This extension provides comprehensive workspace isolation by automatically\n * injecting workspaceId into ALL Prisma operations:\n *\n * **Writes**: Auto-populates workspaceId, tenantId, createdBy, updatedBy, context JSON\n * **Reads**: Auto-injects workspaceId into where clause (findMany, findFirst, etc.)\n * **Updates**: Auto-injects workspaceId into where clause + updatedBy into data\n * **Deletes**: Auto-injects workspaceId into where clause\n *\n * **Chain order matters**: Apply this extension AFTER the graph extension\n * (handled automatically by createDatabaseClient).\n *\n * @param baseClient - The Prisma client to extend\n * @param config - Extension configuration\n * @returns Extended Prisma client with workspace auto-injection\n *\n * @example\n * ```typescript\n * import { PrismaClient } from './generated/prisma/client.js';\n * import { addWorkspaceExtension } from '@burdenoff/be-sdk/prisma';\n *\n * const baseClient = new PrismaClient({ adapter });\n * const client = addWorkspaceExtension(baseClient, {\n * populateContextJson: true,\n * populateCreatedBy: true,\n * enableReadIsolation: true,\n * debug: process.env.NODE_ENV === 'development',\n * excludeModels: ['CircuitBreakerState', 'SchedulerState'],\n * excludeModelsFromReadIsolation: ['Permission', 'RbacResourceType'],\n * });\n * ```\n */\n// ============================================================================\n// Connection Tagging (Phase 0.2)\n// ============================================================================\n\n/** Minimal Prisma raw-exec surface needed for SET application_name */\ntype RawPrismaForTagging = {\n $executeRawUnsafe: (query: string, ...values: unknown[]) => Promise<number>;\n};\n\n/**\n * WeakSet of contexts that have already had the connection tagged this request.\n * WorkspaceContext objects live only for the duration of a request, so entries\n * are automatically GC'd when the context goes out of scope — no manual cleanup.\n */\nconst taggedContexts = new WeakSet<WorkspaceContext>();\n\n/**\n * Tag the current Postgres connection with workspace attribution (once per context).\n * Sets `application_name = 'svc=<name>;ws=<workspaceId>'` at the session level.\n * Non-fatal: tagging failures are swallowed so the main operation still proceeds.\n *\n * @internal Exported for unit testing only — do not call from product code.\n */\nexport async function maybeTagConnection(rawPrisma: RawPrismaForTagging, wsCtx: WorkspaceContext): Promise<void> {\n if (taggedContexts.has(wsCtx)) return;\n taggedContexts.add(wsCtx);\n // Strip non-safe chars; workspace IDs are UUIDs/CUIDs, service names are kebab-case\n const safeSvc = (process.env['SERVICE_NAME'] ?? 'svc').replace(/[^a-zA-Z0-9\\-_]/g, '');\n const safeWs = (wsCtx.workspaceId ?? '').replace(/[^a-zA-Z0-9\\-_]/g, '');\n const tag = `svc=${safeSvc};ws=${safeWs}`;\n try {\n await rawPrisma.$executeRawUnsafe(`SET application_name = '${tag}'`);\n } catch {\n // Retry on the next operation if this one failed\n taggedContexts.delete(wsCtx);\n }\n}\n\n// ============================================================================\n// RLS GUC Tagging (Phase 3)\n// ============================================================================\n\n/**\n * WeakSet of contexts that have already had the RLS GUC set this request.\n */\nconst rlsTaggedContexts = new WeakSet<WorkspaceContext>();\n\n/**\n * Set `app.workspace_id` GUC for RLS enforcement (once per context, session-level).\n *\n * When set, RLS policies using `current_setting('app.workspace_id', true)` filter\n * rows to the current workspace. Non-fatal: failures are swallowed and retried on\n * the next operation via WeakSet entry removal.\n *\n * NOT used by the extension's operation handlers below (see\n * `runOperationWithRlsGuc`) — session-level `SET` is unsafe once traffic is routed\n * through PgBouncer in transaction-pooling mode (see that function's doc comment\n * for the full incident writeup, BOFF-5488). Kept as a standalone export, still\n * unit tested, for any caller that genuinely runs on an unpooled/session-pooled\n * connection where session-level `SET` is sufficient.\n *\n * @internal Exported for unit testing only — do not call from product code.\n */\nexport async function maybeSetRlsGuc(rawPrisma: RawPrismaForTagging, wsCtx: WorkspaceContext): Promise<void> {\n if (rlsTaggedContexts.has(wsCtx)) return;\n rlsTaggedContexts.add(wsCtx);\n // Allow alphanumeric, hyphens, underscores — CUID/UUID safe, prevents SQL injection\n const safeWs = (wsCtx.workspaceId ?? '').replace(/[^a-zA-Z0-9\\-_]/g, '');\n try {\n await rawPrisma.$executeRawUnsafe(`SET app.workspace_id = '${safeWs}'`);\n } catch {\n // Retry on the next operation if this one failed\n rlsTaggedContexts.delete(wsCtx);\n }\n}\n\n/**\n * A Prisma interactive-transaction client (`tx` inside `$transaction(async (tx) =>\n * …)`), typed with just enough surface for `runOperationWithRlsGuc`: raw SQL\n * execution, plus one delegate per model keyed by its Prisma Client property name\n * (e.g. `customer`, `driver`). The index signature is `unknown` (not a concrete\n * delegate shape) because this helper is generic across every model in the schema\n * — callers narrow and verify the specific delegate/method they need at runtime.\n */\ntype PrismaTxForRlsGuc = {\n $executeRawUnsafe: (query: string, ...values: unknown[]) => Promise<number>;\n [modelClientProperty: string]: unknown;\n};\n\n/** Minimal Prisma client surface needed to open an interactive transaction. */\ntype RawPrismaForRlsTransaction = {\n $transaction: <TResult>(fn: (tx: PrismaTxForRlsGuc) => Promise<TResult>) => Promise<TResult>;\n};\n\n/**\n * Prisma DMMF model name (e.g. `Customer`) -> Prisma Client delegate property\n * (e.g. `customer`). Matches Prisma's own client-generation rule: lower-case the\n * first character, leave the rest untouched.\n */\nfunction modelToClientProperty(model: string): string {\n return model.length > 0 ? model.charAt(0).toLowerCase() + model.slice(1) : model;\n}\n\n/**\n * Run a single Prisma operation with `app.workspace_id` set as a\n * **transaction-scoped** (`SET LOCAL`) GUC immediately ahead of it, so Postgres\n * RLS policies using `current_setting('app.workspace_id', true)` see the right\n * value for both the `USING` (read) and `WITH CHECK` (write) clauses.\n *\n * Session-level `SET` (`maybeSetRlsGuc` above, the original Phase 3\n * implementation) is NOT safe once traffic goes through PgBouncer in\n * **transaction pooling mode** — the mode configured on all four\n * `boff-pg-{global,wspace}-{alpha,prod}-cin` servers' built-in PgBouncer (see\n * infra-specs/current-architecture/02-database-postgres-age.md). PgBouncer hands\n * the physical backend connection back to the pool after every standalone\n * statement/implicit transaction, so a `SET` executed by one statement is not\n * guaranteed visible to the very next one, even over what looks like the same\n * logical client connection.\n *\n * This was exactly BOFF-5488: `wspace-movethewheels-svc`'s RLS Phase 3b (FORCE\n * ROW LEVEL SECURITY + a non-owner runtime role, `wspace_movethewheels_app`,\n * pointed at the pooled `:6432` connection) made the `ws_isolation` policy bind\n * for real, but the session-level `SET` from `maybeSetRlsGuc` was landing on a\n * different pooled backend connection than the write that followed it — so every\n * write failed `WITH CHECK` (`new row violates row-level security policy`) and\n * every read matched zero rows.\n *\n * A Prisma **interactive transaction** (`$transaction(async (tx) => …)`) pins one\n * physical connection for the callback's full duration — PgBouncer sees a single\n * unbroken `BEGIN … COMMIT` and cannot reassign the backend mid-transaction — so\n * `SET LOCAL` inside it is guaranteed visible to the operation issued right after\n * it in the same callback. Safe under transaction-mode pooling, session-mode\n * pooling, and with no pooler in front of Postgres at all. The extra round trip\n * (one interactive transaction instead of one direct call) only applies to\n * services that opt into `enableRlsGucTagging` — off by default.\n *\n * @internal Exported for unit testing only — do not call from product code.\n */\nexport async function runOperationWithRlsGuc<TResult>(\n rootClient: RawPrismaForRlsTransaction,\n wsCtx: WorkspaceContext,\n model: string,\n operation: string,\n args: unknown\n): Promise<TResult> {\n const safeWs = (wsCtx.workspaceId ?? '').replace(/[^a-zA-Z0-9\\-_]/g, '');\n const clientProperty = modelToClientProperty(model);\n return rootClient.$transaction(async (tx) => {\n await tx.$executeRawUnsafe(`SET LOCAL app.workspace_id = '${safeWs}'`);\n // `tx[clientProperty]` is typed `unknown` (see PrismaTxForRlsGuc) because this\n // helper is generic across every model; narrow to the minimal callable shape\n // needed and verify at runtime before invoking rather than trusting a cast.\n const delegate = tx[clientProperty] as Record<string, (opArgs: unknown) => Promise<TResult>> | undefined;\n const method = delegate?.[operation];\n if (typeof method !== 'function') {\n throw new Error(\n `[WorkspaceExtension] Unable to resolve ${model}.${operation} (client property \"${clientProperty}\") ` +\n 'on the interactive-transaction client for RLS GUC tagging.'\n );\n }\n return method(args);\n });\n}\n\nexport function addWorkspaceExtension<T>(baseClient: T, config?: WorkspaceExtensionConfig): T {\n const fullConfig: Required<WorkspaceExtensionConfig> = {\n ...defaultWorkspaceExtensionConfig,\n ...config,\n };\n\n if (!fullConfig.enabled) {\n logger.info('[WorkspaceExtension] Extension disabled by configuration');\n return baseClient;\n }\n\n // Capture the unwrapped client for connection tagging (pre-extension, avoids recursion)\n const rawPrisma = baseClient as unknown as RawPrismaForTagging;\n // Same unwrapped client, typed for the interactive-transaction RLS GUC path\n // (see runOperationWithRlsGuc) — separate cast so maybeTagConnection/\n // maybeSetRlsGuc's narrower RawPrismaForTagging type is untouched.\n const rawPrismaForTransactions = baseClient as unknown as RawPrismaForRlsTransaction;\n\n // Type assertion for Prisma client $extends\n const prismaClient = baseClient as { $extends: (args: unknown) => T };\n\n logger.info('[WorkspaceExtension] Workspace extension enabled', {\n populateContextJson: fullConfig.populateContextJson,\n populateCreatedBy: fullConfig.populateCreatedBy,\n populateUpdatedBy: fullConfig.populateUpdatedBy,\n populateTenantId: fullConfig.populateTenantId,\n enableReadIsolation: fullConfig.enableReadIsolation,\n enableDeleteIsolation: fullConfig.enableDeleteIsolation,\n enableUpdateWhereIsolation: fullConfig.enableUpdateWhereIsolation,\n strictMode: fullConfig.strictMode,\n excludeModels: fullConfig.excludeModels,\n excludeModelsFromReadIsolation: fullConfig.excludeModelsFromReadIsolation,\n allowedUnguardedOperations: fullConfig.allowedUnguardedOperations,\n enableApplicationNameTagging: fullConfig.enableApplicationNameTagging,\n enableRlsGucTagging: fullConfig.enableRlsGucTagging,\n });\n\n return prismaClient.$extends({\n query: {\n $allModels: {\n // ================================================================\n // WRITE OPERATIONS - inject workspaceId into data\n // ================================================================\n\n async create({\n model,\n args,\n query,\n }: ExtensionHandlerParams<{\n data: Record<string, unknown>;\n _skipWorkspaceInjection?: boolean;\n [key: string]: unknown;\n }>) {\n // Skip if model is excluded or injection is explicitly skipped\n if (fullConfig.excludeModels.includes(model) || args._skipWorkspaceInjection) {\n return query(stripSkipFlag(args));\n }\n\n const wsCtx = getWorkspaceContext();\n enforceStrictMode(model, 'create', wsCtx, fullConfig);\n if (!wsCtx?.workspaceId) {\n return query(args);\n }\n\n if (fullConfig.enableApplicationNameTagging) {\n await maybeTagConnection(rawPrisma, wsCtx);\n }\n // Inject fields into data\n const injectedData = injectCreateFields(args.data, wsCtx, fullConfig);\n\n if (fullConfig.debug) {\n const injectedKeys = Object.keys(injectedData).filter((k) => !(k in args.data));\n if (injectedKeys.length > 0) {\n logger.debug(`[WorkspaceExtension] ${model}.create - injected: ${injectedKeys.join(', ')}`, {\n workspaceId: wsCtx.workspaceId,\n actorId: wsCtx.actorId,\n });\n }\n }\n\n const finalArgs = {\n ...stripSkipFlag(args),\n data: injectedData,\n };\n if (fullConfig.enableRlsGucTagging) {\n return runOperationWithRlsGuc(rawPrismaForTransactions, wsCtx, model, 'create', finalArgs);\n }\n return query(finalArgs);\n },\n\n async createMany({\n model,\n args,\n query,\n }: ExtensionHandlerParams<{\n data: Record<string, unknown> | Record<string, unknown>[];\n _skipWorkspaceInjection?: boolean;\n [key: string]: unknown;\n }>) {\n if (fullConfig.excludeModels.includes(model) || args._skipWorkspaceInjection) {\n return query(stripSkipFlag(args));\n }\n\n const wsCtx = getWorkspaceContext();\n enforceStrictMode(model, 'createMany', wsCtx, fullConfig);\n if (!wsCtx?.workspaceId) {\n return query(args);\n }\n\n if (fullConfig.enableApplicationNameTagging) {\n await maybeTagConnection(rawPrisma, wsCtx);\n }\n // Handle both single object and array\n const dataArray = Array.isArray(args.data) ? args.data : [args.data];\n const injectedData = dataArray.map((item) => injectCreateFields(item, wsCtx, fullConfig));\n\n const finalArgs = {\n ...stripSkipFlag(args),\n data: Array.isArray(args.data) ? injectedData : injectedData[0],\n };\n if (fullConfig.enableRlsGucTagging) {\n return runOperationWithRlsGuc(rawPrismaForTransactions, wsCtx, model, 'createMany', finalArgs);\n }\n return query(finalArgs);\n },\n\n async createManyAndReturn({\n model,\n args,\n query,\n }: ExtensionHandlerParams<{\n data: Record<string, unknown> | Record<string, unknown>[];\n _skipWorkspaceInjection?: boolean;\n [key: string]: unknown;\n }>) {\n if (fullConfig.excludeModels.includes(model) || args._skipWorkspaceInjection) {\n return query(stripSkipFlag(args));\n }\n\n const wsCtx = getWorkspaceContext();\n enforceStrictMode(model, 'createManyAndReturn', wsCtx, fullConfig);\n if (!wsCtx?.workspaceId) {\n return query(args);\n }\n\n if (fullConfig.enableApplicationNameTagging) {\n await maybeTagConnection(rawPrisma, wsCtx);\n }\n const dataArray = Array.isArray(args.data) ? args.data : [args.data];\n const injectedData = dataArray.map((item) => injectCreateFields(item, wsCtx, fullConfig));\n\n const finalArgs = {\n ...stripSkipFlag(args),\n data: Array.isArray(args.data) ? injectedData : injectedData[0],\n };\n if (fullConfig.enableRlsGucTagging) {\n return runOperationWithRlsGuc(rawPrismaForTransactions, wsCtx, model, 'createManyAndReturn', finalArgs);\n }\n return query(finalArgs);\n },\n\n // ================================================================\n // UPDATE OPERATIONS - inject updatedBy into data + workspaceId into where\n // ================================================================\n\n async update({\n model,\n args,\n query,\n }: ExtensionHandlerParams<{\n data: Record<string, unknown>;\n where?: Record<string, unknown>;\n _skipWorkspaceInjection?: boolean;\n [key: string]: unknown;\n }>) {\n if (fullConfig.excludeModels.includes(model) || args._skipWorkspaceInjection) {\n return query(stripSkipFlag(args));\n }\n\n const wsCtx = getWorkspaceContext();\n enforceStrictMode(model, 'update', wsCtx, fullConfig);\n if (!wsCtx?.workspaceId) {\n return query(args);\n }\n\n if (fullConfig.enableApplicationNameTagging) {\n await maybeTagConnection(rawPrisma, wsCtx);\n }\n const injectedData = injectUpdateFields(args.data, wsCtx, fullConfig);\n\n // Inject workspaceId into where clause for update isolation\n let injectedWhere = args.where;\n if (fullConfig.enableUpdateWhereIsolation && !isExcludedFromReadIsolation(model, fullConfig)) {\n injectedWhere = injectWhereClause(args.where, wsCtx);\n }\n\n if (fullConfig.debug) {\n const injectedDataKeys = Object.keys(injectedData).filter((k) => !(k in args.data));\n const whereChanged = injectedWhere !== args.where;\n if (injectedDataKeys.length > 0 || whereChanged) {\n logger.debug(\n `[WorkspaceExtension] ${model}.update - injected data: ${injectedDataKeys.join(', ')}${whereChanged ? ', where: workspaceId' : ''}`\n );\n }\n }\n\n const finalArgs = {\n ...stripSkipFlag(args),\n data: injectedData,\n where: injectedWhere,\n };\n if (fullConfig.enableRlsGucTagging) {\n return runOperationWithRlsGuc(rawPrismaForTransactions, wsCtx, model, 'update', finalArgs);\n }\n return query(finalArgs);\n },\n\n async updateMany({\n model,\n args,\n query,\n }: ExtensionHandlerParams<{\n data: Record<string, unknown>;\n where?: Record<string, unknown>;\n _skipWorkspaceInjection?: boolean;\n [key: string]: unknown;\n }>) {\n if (fullConfig.excludeModels.includes(model) || args._skipWorkspaceInjection) {\n return query(stripSkipFlag(args));\n }\n\n const wsCtx = getWorkspaceContext();\n enforceStrictMode(model, 'updateMany', wsCtx, fullConfig);\n if (!wsCtx?.workspaceId) {\n return query(args);\n }\n\n if (fullConfig.enableApplicationNameTagging) {\n await maybeTagConnection(rawPrisma, wsCtx);\n }\n const injectedData = injectUpdateFields(args.data, wsCtx, fullConfig);\n\n // Inject workspaceId into where clause for update isolation\n let injectedWhere = args.where;\n if (fullConfig.enableUpdateWhereIsolation && !isExcludedFromReadIsolation(model, fullConfig)) {\n injectedWhere = injectWhereClause(args.where, wsCtx);\n }\n\n const finalArgs = {\n ...stripSkipFlag(args),\n data: injectedData,\n where: injectedWhere,\n };\n if (fullConfig.enableRlsGucTagging) {\n return runOperationWithRlsGuc(rawPrismaForTransactions, wsCtx, model, 'updateMany', finalArgs);\n }\n return query(finalArgs);\n },\n\n async upsert({\n model,\n args,\n query,\n }: ExtensionHandlerParams<{\n create: Record<string, unknown>;\n update: Record<string, unknown>;\n where?: Record<string, unknown>;\n _skipWorkspaceInjection?: boolean;\n [key: string]: unknown;\n }>) {\n if (fullConfig.excludeModels.includes(model) || args._skipWorkspaceInjection) {\n return query(stripSkipFlag(args));\n }\n\n const wsCtx = getWorkspaceContext();\n enforceStrictMode(model, 'upsert', wsCtx, fullConfig);\n if (!wsCtx?.workspaceId) {\n return query(args);\n }\n\n if (fullConfig.enableApplicationNameTagging) {\n await maybeTagConnection(rawPrisma, wsCtx);\n }\n const injectedCreate = injectCreateFields(args.create, wsCtx, fullConfig);\n const injectedUpdate = injectUpdateFields(args.update, wsCtx, fullConfig);\n\n // Inject workspaceId into where clause for upsert isolation\n let injectedWhere = args.where;\n if (fullConfig.enableUpdateWhereIsolation && !isExcludedFromReadIsolation(model, fullConfig)) {\n injectedWhere = injectWhereClause(args.where, wsCtx);\n }\n\n const finalArgs = {\n ...stripSkipFlag(args),\n create: injectedCreate,\n update: injectedUpdate,\n where: injectedWhere,\n };\n if (fullConfig.enableRlsGucTagging) {\n return runOperationWithRlsGuc(rawPrismaForTransactions, wsCtx, model, 'upsert', finalArgs);\n }\n return query(finalArgs);\n },\n\n // ================================================================\n // READ OPERATIONS - inject workspaceId into where clause\n // ================================================================\n\n async findMany({ model, args, query }: ExtensionHandlerParams<WhereArgs>) {\n if (\n !fullConfig.enableReadIsolation ||\n isExcludedFromReadIsolation(model, fullConfig) ||\n args._skipWorkspaceInjection\n ) {\n return query(stripSkipFlag(args));\n }\n\n const wsCtx = getWorkspaceContext();\n enforceStrictMode(model, 'findMany', wsCtx, fullConfig);\n if (!wsCtx?.workspaceId) {\n return query(args);\n }\n\n if (fullConfig.enableApplicationNameTagging) {\n await maybeTagConnection(rawPrisma, wsCtx);\n }\n const injectedWhere = injectWhereClause(args.where, wsCtx);\n\n if (fullConfig.debug) {\n logger.debug(`[WorkspaceExtension] ${model}.findMany - injected workspaceId into where`, {\n workspaceId: wsCtx.workspaceId,\n });\n }\n\n const finalArgs = {\n ...stripSkipFlag(args),\n where: injectedWhere,\n };\n if (fullConfig.enableRlsGucTagging) {\n return runOperationWithRlsGuc(rawPrismaForTransactions, wsCtx, model, 'findMany', finalArgs);\n }\n return query(finalArgs);\n },\n\n async findFirst({ model, args, query }: ExtensionHandlerParams<WhereArgs>) {\n if (\n !fullConfig.enableReadIsolation ||\n isExcludedFromReadIsolation(model, fullConfig) ||\n args._skipWorkspaceInjection\n ) {\n return query(stripSkipFlag(args));\n }\n\n const wsCtx = getWorkspaceContext();\n enforceStrictMode(model, 'findFirst', wsCtx, fullConfig);\n if (!wsCtx?.workspaceId) {\n return query(args);\n }\n\n if (fullConfig.enableApplicationNameTagging) {\n await maybeTagConnection(rawPrisma, wsCtx);\n }\n const injectedWhere = injectWhereClause(args.where, wsCtx);\n\n if (fullConfig.debug) {\n logger.debug(`[WorkspaceExtension] ${model}.findFirst - injected workspaceId into where`, {\n workspaceId: wsCtx.workspaceId,\n });\n }\n\n const finalArgs = {\n ...stripSkipFlag(args),\n where: injectedWhere,\n };\n if (fullConfig.enableRlsGucTagging) {\n return runOperationWithRlsGuc(rawPrismaForTransactions, wsCtx, model, 'findFirst', finalArgs);\n }\n return query(finalArgs);\n },\n\n async findFirstOrThrow({ model, args, query }: ExtensionHandlerParams<WhereArgs>) {\n if (\n !fullConfig.enableReadIsolation ||\n isExcludedFromReadIsolation(model, fullConfig) ||\n args._skipWorkspaceInjection\n ) {\n return query(stripSkipFlag(args));\n }\n\n const wsCtx = getWorkspaceContext();\n enforceStrictMode(model, 'findFirstOrThrow', wsCtx, fullConfig);\n if (!wsCtx?.workspaceId) {\n return query(args);\n }\n\n if (fullConfig.enableApplicationNameTagging) {\n await maybeTagConnection(rawPrisma, wsCtx);\n }\n const injectedWhere = injectWhereClause(args.where, wsCtx);\n\n if (fullConfig.debug) {\n logger.debug(`[WorkspaceExtension] ${model}.findFirstOrThrow - injected workspaceId into where`, {\n workspaceId: wsCtx.workspaceId,\n });\n }\n\n const finalArgs = {\n ...stripSkipFlag(args),\n where: injectedWhere,\n };\n if (fullConfig.enableRlsGucTagging) {\n return runOperationWithRlsGuc(rawPrismaForTransactions, wsCtx, model, 'findFirstOrThrow', finalArgs);\n }\n return query(finalArgs);\n },\n\n async findUnique({ model, args, query }: ExtensionHandlerParams<WhereArgs>) {\n if (\n !fullConfig.enableReadIsolation ||\n isExcludedFromReadIsolation(model, fullConfig) ||\n args._skipWorkspaceInjection\n ) {\n return query(stripSkipFlag(args));\n }\n\n const wsCtx = getWorkspaceContext();\n enforceStrictMode(model, 'findUnique', wsCtx, fullConfig);\n if (!wsCtx?.workspaceId) {\n return query(args);\n }\n\n if (fullConfig.enableApplicationNameTagging) {\n await maybeTagConnection(rawPrisma, wsCtx);\n }\n // For findUnique, the where clause uses unique fields.\n // We inject workspaceId only if the where clause is a plain object\n // (compound unique keys with workspaceId are common and already include it).\n const injectedWhere = injectWhereClause(args.where, wsCtx);\n\n if (fullConfig.debug) {\n logger.debug(`[WorkspaceExtension] ${model}.findUnique - injected workspaceId into where`, {\n workspaceId: wsCtx.workspaceId,\n });\n }\n\n const finalArgs = {\n ...stripSkipFlag(args),\n where: injectedWhere,\n };\n if (fullConfig.enableRlsGucTagging) {\n return runOperationWithRlsGuc(rawPrismaForTransactions, wsCtx, model, 'findUnique', finalArgs);\n }\n return query(finalArgs);\n },\n\n async findUniqueOrThrow({ model, args, query }: ExtensionHandlerParams<WhereArgs>) {\n if (\n !fullConfig.enableReadIsolation ||\n isExcludedFromReadIsolation(model, fullConfig) ||\n args._skipWorkspaceInjection\n ) {\n return query(stripSkipFlag(args));\n }\n\n const wsCtx = getWorkspaceContext();\n enforceStrictMode(model, 'findUniqueOrThrow', wsCtx, fullConfig);\n if (!wsCtx?.workspaceId) {\n return query(args);\n }\n\n if (fullConfig.enableApplicationNameTagging) {\n await maybeTagConnection(rawPrisma, wsCtx);\n }\n const injectedWhere = injectWhereClause(args.where, wsCtx);\n\n if (fullConfig.debug) {\n logger.debug(`[WorkspaceExtension] ${model}.findUniqueOrThrow - injected workspaceId into where`, {\n workspaceId: wsCtx.workspaceId,\n });\n }\n\n const finalArgs = {\n ...stripSkipFlag(args),\n where: injectedWhere,\n };\n if (fullConfig.enableRlsGucTagging) {\n return runOperationWithRlsGuc(rawPrismaForTransactions, wsCtx, model, 'findUniqueOrThrow', finalArgs);\n }\n return query(finalArgs);\n },\n\n async count({ model, args, query }: ExtensionHandlerParams<WhereArgs>) {\n if (\n !fullConfig.enableReadIsolation ||\n isExcludedFromReadIsolation(model, fullConfig) ||\n args._skipWorkspaceInjection\n ) {\n return query(stripSkipFlag(args));\n }\n\n const wsCtx = getWorkspaceContext();\n enforceStrictMode(model, 'count', wsCtx, fullConfig);\n if (!wsCtx?.workspaceId) {\n return query(args);\n }\n\n if (fullConfig.enableApplicationNameTagging) {\n await maybeTagConnection(rawPrisma, wsCtx);\n }\n const injectedWhere = injectWhereClause(args.where, wsCtx);\n\n if (fullConfig.debug) {\n logger.debug(`[WorkspaceExtension] ${model}.count - injected workspaceId into where`, {\n workspaceId: wsCtx.workspaceId,\n });\n }\n\n const finalArgs = {\n ...stripSkipFlag(args),\n where: injectedWhere,\n };\n if (fullConfig.enableRlsGucTagging) {\n return runOperationWithRlsGuc(rawPrismaForTransactions, wsCtx, model, 'count', finalArgs);\n }\n return query(finalArgs);\n },\n\n async aggregate({ model, args, query }: ExtensionHandlerParams<WhereArgs>) {\n if (\n !fullConfig.enableReadIsolation ||\n isExcludedFromReadIsolation(model, fullConfig) ||\n args._skipWorkspaceInjection\n ) {\n return query(stripSkipFlag(args));\n }\n\n const wsCtx = getWorkspaceContext();\n enforceStrictMode(model, 'aggregate', wsCtx, fullConfig);\n if (!wsCtx?.workspaceId) {\n return query(args);\n }\n\n if (fullConfig.enableApplicationNameTagging) {\n await maybeTagConnection(rawPrisma, wsCtx);\n }\n const injectedWhere = injectWhereClause(args.where, wsCtx);\n\n if (fullConfig.debug) {\n logger.debug(`[WorkspaceExtension] ${model}.aggregate - injected workspaceId into where`, {\n workspaceId: wsCtx.workspaceId,\n });\n }\n\n const finalArgs = {\n ...stripSkipFlag(args),\n where: injectedWhere,\n };\n if (fullConfig.enableRlsGucTagging) {\n return runOperationWithRlsGuc(rawPrismaForTransactions, wsCtx, model, 'aggregate', finalArgs);\n }\n return query(finalArgs);\n },\n\n async groupBy({ model, args, query }: ExtensionHandlerParams<WhereArgs>) {\n if (\n !fullConfig.enableReadIsolation ||\n isExcludedFromReadIsolation(model, fullConfig) ||\n args._skipWorkspaceInjection\n ) {\n return query(stripSkipFlag(args));\n }\n\n const wsCtx = getWorkspaceContext();\n enforceStrictMode(model, 'groupBy', wsCtx, fullConfig);\n if (!wsCtx?.workspaceId) {\n return query(args);\n }\n\n if (fullConfig.enableApplicationNameTagging) {\n await maybeTagConnection(rawPrisma, wsCtx);\n }\n const injectedWhere = injectWhereClause(args.where, wsCtx);\n\n if (fullConfig.debug) {\n logger.debug(`[WorkspaceExtension] ${model}.groupBy - injected workspaceId into where`, {\n workspaceId: wsCtx.workspaceId,\n });\n }\n\n const finalArgs = {\n ...stripSkipFlag(args),\n where: injectedWhere,\n };\n if (fullConfig.enableRlsGucTagging) {\n return runOperationWithRlsGuc(rawPrismaForTransactions, wsCtx, model, 'groupBy', finalArgs);\n }\n return query(finalArgs);\n },\n\n // ================================================================\n // DELETE OPERATIONS - inject workspaceId into where clause\n // ================================================================\n\n async delete({ model, args, query }: ExtensionHandlerParams<WhereArgs>) {\n if (\n !fullConfig.enableDeleteIsolation ||\n isExcludedFromReadIsolation(model, fullConfig) ||\n args._skipWorkspaceInjection\n ) {\n return query(stripSkipFlag(args));\n }\n\n const wsCtx = getWorkspaceContext();\n enforceStrictMode(model, 'delete', wsCtx, fullConfig);\n if (!wsCtx?.workspaceId) {\n return query(args);\n }\n\n if (fullConfig.enableApplicationNameTagging) {\n await maybeTagConnection(rawPrisma, wsCtx);\n }\n const injectedWhere = injectWhereClause(args.where, wsCtx);\n\n if (fullConfig.debug) {\n logger.debug(`[WorkspaceExtension] ${model}.delete - injected workspaceId into where`, {\n workspaceId: wsCtx.workspaceId,\n });\n }\n\n const finalArgs = {\n ...stripSkipFlag(args),\n where: injectedWhere,\n };\n if (fullConfig.enableRlsGucTagging) {\n return runOperationWithRlsGuc(rawPrismaForTransactions, wsCtx, model, 'delete', finalArgs);\n }\n return query(finalArgs);\n },\n\n async deleteMany({ model, args, query }: ExtensionHandlerParams<WhereArgs>) {\n if (\n !fullConfig.enableDeleteIsolation ||\n isExcludedFromReadIsolation(model, fullConfig) ||\n args._skipWorkspaceInjection\n ) {\n return query(stripSkipFlag(args));\n }\n\n const wsCtx = getWorkspaceContext();\n enforceStrictMode(model, 'deleteMany', wsCtx, fullConfig);\n if (!wsCtx?.workspaceId) {\n return query(args);\n }\n\n if (fullConfig.enableApplicationNameTagging) {\n await maybeTagConnection(rawPrisma, wsCtx);\n }\n const injectedWhere = injectWhereClause(args.where, wsCtx);\n\n if (fullConfig.debug) {\n logger.debug(`[WorkspaceExtension] ${model}.deleteMany - injected workspaceId into where`, {\n workspaceId: wsCtx.workspaceId,\n });\n }\n\n const finalArgs = {\n ...stripSkipFlag(args),\n where: injectedWhere,\n };\n if (fullConfig.enableRlsGucTagging) {\n return runOperationWithRlsGuc(rawPrismaForTransactions, wsCtx, model, 'deleteMany', finalArgs);\n }\n return query(finalArgs);\n },\n },\n },\n });\n}\n"]}
1
+ {"version":3,"sources":["../src/prisma/workspace-extension.ts"],"names":["workspaceContextStore","AsyncLocalStorage","fallbackContext","setWorkspaceContext","context","enterWith","getWorkspaceContext","getStore","withWorkspaceContext","fn","run","withWorkspaceContextSync","defaultWorkspaceExtensionConfig","enabled","enableReadIsolation","enableDeleteIsolation","enableUpdateWhereIsolation","populateContextJson","populateCreatedBy","populateUpdatedBy","populateTenantId","populateOnBehalfOf","excludeModels","excludeModelsFromReadIsolation","strictMode","allowedUnguardedOperations","debug","enableApplicationNameTagging","enableRlsGucTagging","hasField","data","field","injectCreateFields","wsCtx","config","injected","workspaceId","tenantId","actorId","onBehalfOf","contextJson","buildContextJsonFromWorkspaceContext","injectUpdateFields","injectWhereClause","where","organizationId","projectId","appId","Object","keys","length","undefined","injectWhereWorkspaceId","ctx","stripSkipFlag","args","cleaned","isExcludedFromReadIsolation","model","includes","enforceStrictMode","operation","opKey","Error","taggedContexts","WeakSet","maybeTagConnection","rawPrisma","has","add","safeSvc","process","env","replace","safeWs","tag","$executeRawUnsafe","delete","rlsTaggedContexts","maybeSetRlsGuc","modelToClientProperty","charAt","toLowerCase","slice","runOperationWithRlsGuc","rootClient","clientProperty","$transaction","tx","delegate","method","addWorkspaceExtension","baseClient","fullConfig","logger","info","rawPrismaForTransactions","prismaClient","$extends","query","$allModels","create","_skipWorkspaceInjection","injectedData","injectedKeys","filter","k","join","finalArgs","createMany","dataArray","Array","isArray","map","item","createManyAndReturn","update","injectedWhere","injectedDataKeys","whereChanged","updateMany","upsert","injectedCreate","injectedUpdate","findMany","findFirst","findFirstOrThrow","findUnique","findUniqueOrThrow","count","aggregate","groupBy","deleteMany"],"mappings":";;;;AA6EA,IAAMA,qBAAAA,GAAwB,IAAIC,iBAAAA,EAAAA;AAUlC,IAAIC,eAAAA;AA6BG,SAASC,oBAAoBC,OAAAA,EAAyB;AAC3DJ,EAAAA,qBAAAA,CAAsBK,UAAUD,OAAAA,CAAAA;AAChCF,EAAAA,eAAAA,GAAkBE,OAAAA;AACpB;AAHgBD,MAAAA,CAAAA,mBAAAA,EAAAA,qBAAAA,CAAAA;AAaT,SAASG,mBAAAA,GAAAA;AACd,EAAA,OAAON,qBAAAA,CAAsBO,UAAQ,IAAML,eAAAA;AAC7C;AAFgBI,MAAAA,CAAAA,mBAAAA,EAAAA,qBAAAA,CAAAA;AAuBhB,eAAsBE,oBAAAA,CAAwBJ,SAA2BK,EAAAA,EAAoB;AAC3F,EAAA,OAAOT,qBAAAA,CAAsBU,GAAAA,CAAIN,OAAAA,EAASK,EAAAA,CAAAA;AAC5C;AAFsBD,MAAAA,CAAAA,oBAAAA,EAAAA,sBAAAA,CAAAA;AAOf,SAASG,wBAAAA,CAA4BP,SAA2BK,EAAAA,EAAW;AAChF,EAAA,OAAOT,qBAAAA,CAAsBU,GAAAA,CAAIN,OAAAA,EAASK,EAAAA,CAAAA;AAC5C;AAFgBE,MAAAA,CAAAA,wBAAAA,EAAAA,0BAAAA,CAAAA;AAsMT,IAAMC,+BAAAA,GAAsE;EACjFC,OAAAA,EAAS,IAAA;EACTC,mBAAAA,EAAqB,IAAA;EACrBC,qBAAAA,EAAuB,IAAA;EACvBC,0BAAAA,EAA4B,IAAA;EAC5BC,mBAAAA,EAAqB,IAAA;EACrBC,iBAAAA,EAAmB,IAAA;EACnBC,iBAAAA,EAAmB,IAAA;EACnBC,gBAAAA,EAAkB,KAAA;EAClBC,kBAAAA,EAAoB,IAAA;AACpBC,EAAAA,aAAAA,EAAe,EAAA;AACfC,EAAAA,8BAAAA,EAAgC,EAAA;EAChCC,UAAAA,EAAY,IAAA;AACZC,EAAAA,0BAAAA,EAA4B,EAAA;EAC5BC,KAAAA,EAAO,KAAA;EACPC,4BAAAA,EAA8B,KAAA;EAC9BC,mBAAAA,EAAqB;AACvB;AASA,SAASC,QAAAA,CAASC,MAA+BC,KAAAA,EAAa;AAC5D,EAAA,OAAOA,KAAAA,IAASD,IAAAA;AAClB;AAFSD,MAAAA,CAAAA,QAAAA,EAAAA,UAAAA,CAAAA;AAaF,SAASG,kBAAAA,CACdF,IAAAA,EACAG,KAAAA,EACAC,MAAAA,EAA0C;AAE1C,EAAA,MAAMC,QAAAA,GAAW;IAAE,GAAGL;AAAK,GAAA;AAG3B,EAAA,IAAIG,MAAMG,WAAAA,IAAe,CAACP,QAAAA,CAASM,QAAAA,EAAU,aAAA,CAAA,EAAgB;AAC3DA,IAAAA,QAAAA,CAAS,aAAA,IAAiBF,KAAAA,CAAMG,WAAAA;AAClC,EAAA;AAGA,EAAA,IAAIF,MAAAA,CAAOd,oBAAoBa,KAAAA,CAAMI,QAAAA,IAAY,CAACR,QAAAA,CAASM,QAAAA,EAAU,UAAA,CAAA,EAAa;AAChFA,IAAAA,QAAAA,CAAS,UAAA,IAAcF,KAAAA,CAAMI,QAAAA;AAC/B,EAAA;AAGA,EAAA,IAAIH,MAAAA,CAAOhB,qBAAqBe,KAAAA,CAAMK,OAAAA,IAAW,CAACT,QAAAA,CAASM,QAAAA,EAAU,WAAA,CAAA,EAAc;AACjFA,IAAAA,QAAAA,CAAS,WAAA,IAAeF,KAAAA,CAAMK,OAAAA;AAChC,EAAA;AAGA,EAAA,IAAIJ,MAAAA,CAAOf,qBAAqBc,KAAAA,CAAMK,OAAAA,IAAW,CAACT,QAAAA,CAASM,QAAAA,EAAU,WAAA,CAAA,EAAc;AACjFA,IAAAA,QAAAA,CAAS,WAAA,IAAeF,KAAAA,CAAMK,OAAAA;AAChC,EAAA;AAIA,EAAA,IAAIJ,MAAAA,CAAOb,sBAAsBY,KAAAA,CAAMM,UAAAA,IAAc,CAACV,QAAAA,CAASM,QAAAA,EAAU,YAAA,CAAA,EAAe;AACtFA,IAAAA,QAAAA,CAAS,YAAA,IAAgBF,KAAAA,CAAMM,UAAAA;EACjC,CAAA,MAAA,IAAWL,MAAAA,CAAOb,sBAAsBY,KAAAA,CAAMK,OAAAA,IAAW,CAACT,QAAAA,CAASM,QAAAA,EAAU,YAAA,CAAA,EAAe;AAE1FA,IAAAA,QAAAA,CAAS,YAAA,IAAgBF,KAAAA,CAAMK,OAAAA;AACjC,EAAA;AAGA,EAAA,IAAIJ,OAAOjB,mBAAAA,IAAuB,CAACY,QAAAA,CAASM,QAAAA,EAAU,SAAA,CAAA,EAAY;AAChE,IAAA,MAAMK,WAAAA,GAAcC,qCAAqCR,KAAAA,CAAAA;AACzD,IAAA,IAAIO,WAAAA,EAAa;AACfL,MAAAA,QAAAA,CAAS,SAAA,CAAA,GAAaK,WAAAA;AACxB,IAAA;AACF,EAAA;AAEA,EAAA,OAAOL,QAAAA;AACT;AA7CgBH,MAAAA,CAAAA,kBAAAA,EAAAA,oBAAAA,CAAAA;AAkDhB,SAASU,kBAAAA,CACPZ,IAAAA,EACAG,KAAAA,EACAC,MAAAA,EAA0C;AAE1C,EAAA,MAAMC,QAAAA,GAAW;IAAE,GAAGL;AAAK,GAAA;AAG3B,EAAA,IAAII,MAAAA,CAAOf,qBAAqBc,KAAAA,CAAMK,OAAAA,IAAW,CAACT,QAAAA,CAASM,QAAAA,EAAU,WAAA,CAAA,EAAc;AACjFA,IAAAA,QAAAA,CAAS,WAAA,IAAeF,KAAAA,CAAMK,OAAAA;AAChC,EAAA;AAMA,EAAA,OAAOH,QAAAA;AACT;AAjBSO,MAAAA,CAAAA,kBAAAA,EAAAA,oBAAAA,CAAAA;AA0BT,SAASC,iBAAAA,CACPC,OACAX,KAAAA,EAAuB;AAEvB,EAAA,IAAI,CAACA,KAAAA,CAAMG,WAAAA,EAAa,OAAOQ,KAAAA;AAE/B,EAAA,IAAI,CAACA,KAAAA,EAAO;AAEV,IAAA,OAAO;AAAER,MAAAA,WAAAA,EAAaH,KAAAA,CAAMG;AAAY,KAAA;AAC1C,EAAA;AAGA,EAAA,IAAI,CAACP,QAAAA,CAASe,KAAAA,EAAO,aAAA,CAAA,EAAgB;AACnC,IAAA,OAAO;MAAE,GAAGA,KAAAA;AAAOR,MAAAA,WAAAA,EAAaH,KAAAA,CAAMG;AAAY,KAAA;AACpD,EAAA;AAEA,EAAA,OAAOQ,KAAAA;AACT;AAjBSD,MAAAA,CAAAA,iBAAAA,EAAAA,mBAAAA,CAAAA;AAsBT,SAASF,qCAAqCR,KAAAA,EAAuB;AACnE,EAAA,MAAM7B,UAAkC,EAAC;AAEzC,EAAA,IAAI6B,KAAAA,CAAMG,WAAAA,EAAahC,OAAAA,CAAQ,aAAA,IAAiB6B,KAAAA,CAAMG,WAAAA;AACtD,EAAA,IAAIH,KAAAA,CAAMK,OAAAA,EAASlC,OAAAA,CAAQ,QAAA,IAAY6B,KAAAA,CAAMK,OAAAA;AAC7C,EAAA,IAAIL,KAAAA,CAAMY,cAAAA,EAAgBzC,OAAAA,CAAQ,gBAAA,IAAoB6B,KAAAA,CAAMY,cAAAA;AAC5D,EAAA,IAAIZ,KAAAA,CAAMa,SAAAA,EAAW1C,OAAAA,CAAQ,WAAA,IAAe6B,KAAAA,CAAMa,SAAAA;AAClD,EAAA,IAAIb,KAAAA,CAAMc,KAAAA,EAAO3C,OAAAA,CAAQ,OAAA,IAAW6B,KAAAA,CAAMc,KAAAA;AAE1C,EAAA,OAAOC,OAAOC,IAAAA,CAAK7C,OAAAA,CAAAA,CAAS8C,MAAAA,GAAS,IAAI9C,OAAAA,GAAU+C,MAAAA;AACrD;AAVSV,MAAAA,CAAAA,oCAAAA,EAAAA,sCAAAA,CAAAA;AA8BF,SAASW,sBAAAA,CACdR,OACAX,KAAAA,EAAwB;AAExB,EAAA,MAAMoB,GAAAA,GAAMpB,SAAS3B,mBAAAA,EAAAA;AACrB,EAAA,IAAI,CAACsC,KAAAA,IAAS,CAACS,GAAAA,EAAKjB,aAAa,OAAOQ,KAAAA;AAGxC,EAAA,IAAI,CAACf,QAAAA,CAASe,KAAAA,EAAO,aAAA,CAAA,EAAgB;AACnC,IAAA,OAAO;MAAE,GAAGA,KAAAA;AAAOR,MAAAA,WAAAA,EAAaiB,GAAAA,CAAIjB;AAAY,KAAA;AAClD,EAAA;AAEA,EAAA,OAAOQ,KAAAA;AACT;AAbgBQ,MAAAA,CAAAA,sBAAAA,EAAAA,wBAAAA,CAAAA;AAmBhB,SAASE,cAAiDC,IAAAA,EAAO;AAC/D,EAAA,MAAMC,OAAAA,GAAU;IAAE,GAAGD;AAAK,GAAA;AAC1B,EAAA,OAAQC,QAAoC,yBAAA,CAAA;AAC5C,EAAA,OAAOA,OAAAA;AACT;AAJSF,MAAAA,CAAAA,aAAAA,EAAAA,eAAAA,CAAAA;AAUT,SAASG,2BAAAA,CAA4BC,OAAexB,MAAAA,EAA0C;AAC5F,EAAA,OAAOA,MAAAA,CAAOZ,cAAcqC,QAAAA,CAASD,KAAAA,KAAUxB,MAAAA,CAAOX,8BAAAA,CAA+BoC,SAASD,KAAAA,CAAAA;AAChG;AAFSD,MAAAA,CAAAA,2BAAAA,EAAAA,6BAAAA,CAAAA;AAeT,SAASG,iBAAAA,CACPF,KAAAA,EACAG,SAAAA,EACA5B,KAAAA,EACAC,MAAAA,EAA0C;AAG1C,EAAA,IAAID,OAAOG,WAAAA,EAAa;AAGxB,EAAA,IAAI,CAACF,OAAOV,UAAAA,EAAY;AAGxB,EAAA,MAAMsC,KAAAA,GAAQ,CAAA,EAAGJ,KAAAA,CAAAA,CAAAA,EAASG,SAAAA,CAAAA,CAAAA;AAC1B,EAAA,IAAI3B,MAAAA,CAAOT,0BAAAA,CAA2BkC,QAAAA,CAASG,KAAAA,CAAAA,EAAQ;AAGvD,EAAA,MAAM,IAAIC,KAAAA,CACR,CAAA,oDAAA,EAAuDL,KAAAA,CAAAA,CAAAA,EAASG,SAAAA,CAAAA,uEAAAA,EAElDH,KAAAA,CAAAA,6BAAAA,EACAI,KAAAA,CAAAA,6FAAAA,CAC+C,CAAA;AAEjE;AAxBSF,MAAAA,CAAAA,iBAAAA,EAAAA,mBAAAA,CAAAA;AAgGT,IAAMI,cAAAA,uBAAqBC,OAAAA,EAAAA;AAS3B,eAAsBC,kBAAAA,CAAmBC,WAAgClC,KAAAA,EAAuB;AAC9F,EAAA,IAAI+B,cAAAA,CAAeI,GAAAA,CAAInC,KAAAA,CAAAA,EAAQ;AAC/B+B,EAAAA,cAAAA,CAAeK,IAAIpC,KAAAA,CAAAA;AAEnB,EAAA,MAAMqC,OAAAA,GAAAA,CAAWC,QAAQC,GAAAA,CAAI,cAAA,KAAmB,KAAA,EAAOC,OAAAA,CAAQ,oBAAoB,EAAA,CAAA;AACnF,EAAA,MAAMC,UAAUzC,KAAAA,CAAMG,WAAAA,IAAe,EAAA,EAAIqC,OAAAA,CAAQ,oBAAoB,EAAA,CAAA;AACrE,EAAA,MAAME,GAAAA,GAAM,CAAA,IAAA,EAAOL,OAAAA,CAAAA,IAAAA,EAAcI,MAAAA,CAAAA,CAAAA;AACjC,EAAA,IAAI;AACF,IAAA,MAAMP,SAAAA,CAAUS,iBAAAA,CAAkB,CAAA,wBAAA,EAA2BD,GAAAA,CAAAA,CAAAA,CAAM,CAAA;EACrE,CAAA,CAAA,MAAQ;AAENX,IAAAA,cAAAA,CAAea,OAAO5C,KAAAA,CAAAA;AACxB,EAAA;AACF;AAbsBiC,MAAAA,CAAAA,kBAAAA,EAAAA,oBAAAA,CAAAA;AAsBtB,IAAMY,iBAAAA,uBAAwBb,OAAAA,EAAAA;AAkB9B,eAAsBc,cAAAA,CAAeZ,WAAgClC,KAAAA,EAAuB;AAC1F,EAAA,IAAI6C,iBAAAA,CAAkBV,GAAAA,CAAInC,KAAAA,CAAAA,EAAQ;AAClC6C,EAAAA,iBAAAA,CAAkBT,IAAIpC,KAAAA,CAAAA;AAEtB,EAAA,MAAMyC,UAAUzC,KAAAA,CAAMG,WAAAA,IAAe,EAAA,EAAIqC,OAAAA,CAAQ,oBAAoB,EAAA,CAAA;AACrE,EAAA,IAAI;AACF,IAAA,MAAMN,SAAAA,CAAUS,iBAAAA,CAAkB,CAAA,wBAAA,EAA2BF,MAAAA,CAAAA,CAAAA,CAAS,CAAA;EACxE,CAAA,CAAA,MAAQ;AAENI,IAAAA,iBAAAA,CAAkBD,OAAO5C,KAAAA,CAAAA;AAC3B,EAAA;AACF;AAXsB8C,MAAAA,CAAAA,cAAAA,EAAAA,gBAAAA,CAAAA;AAoCtB,SAASC,sBAAsBtB,KAAAA,EAAa;AAC1C,EAAA,OAAOA,KAAAA,CAAMR,MAAAA,GAAS,CAAA,GAAIQ,KAAAA,CAAMuB,MAAAA,CAAO,CAAA,CAAA,CAAGC,WAAAA,EAAW,GAAKxB,KAAAA,CAAMyB,KAAAA,CAAM,CAAA,CAAA,GAAKzB,KAAAA;AAC7E;AAFSsB,MAAAA,CAAAA,qBAAAA,EAAAA,uBAAAA,CAAAA;AAuCT,eAAsBI,sBAAAA,CACpBC,UAAAA,EACApD,KAAAA,EACAyB,KAAAA,EACAG,WACAN,IAAAA,EAAa;AAEb,EAAA,MAAMmB,UAAUzC,KAAAA,CAAMG,WAAAA,IAAe,EAAA,EAAIqC,OAAAA,CAAQ,oBAAoB,EAAA,CAAA;AACrE,EAAA,MAAMa,cAAAA,GAAiBN,sBAAsBtB,KAAAA,CAAAA;AAC7C,EAAA,OAAO2B,UAAAA,CAAWE,YAAAA,CAAa,OAAOC,EAAAA,KAAAA;AACpC,IAAA,MAAMA,EAAAA,CAAGZ,iBAAAA,CAAkB,CAAA,8BAAA,EAAiCF,MAAAA,CAAAA,CAAAA,CAAS,CAAA;AAIrE,IAAA,MAAMe,QAAAA,GAAWD,GAAGF,cAAAA,CAAAA;AACpB,IAAA,MAAMI,MAAAA,GAASD,WAAW5B,SAAAA,CAAAA;AAC1B,IAAA,IAAI,OAAO6B,WAAW,UAAA,EAAY;AAChC,MAAA,MAAM,IAAI3B,MACR,CAAA,uCAAA,EAA0CL,KAAAA,IAASG,SAAAA,CAAAA,mBAAAA,EAA+ByB,cAAAA,CAAAA,6DAAAA,CAChF,CAAA;AAEN,IAAA;AACA,IAAA,OAAOI,OAAOnC,IAAAA,CAAAA;EAChB,CAAA,CAAA;AACF;AAxBsB6B,MAAAA,CAAAA,sBAAAA,EAAAA,wBAAAA,CAAAA;AA0Bf,SAASO,qBAAAA,CAAyBC,YAAe1D,MAAAA,EAAiC;AACvF,EAAA,MAAM2D,UAAAA,GAAiD;IACrD,GAAGjF,+BAAAA;IACH,GAAGsB;AACL,GAAA;AAEA,EAAA,IAAI,CAAC2D,WAAWhF,OAAAA,EAAS;AACvBiF,IAAAA,MAAAA,CAAOC,KAAK,0DAAA,CAAA;AACZ,IAAA,OAAOH,UAAAA;AACT,EAAA;AAGA,EAAA,MAAMzB,SAAAA,GAAYyB,UAAAA;AAIlB,EAAA,MAAMI,wBAAAA,GAA2BJ,UAAAA;AAGjC,EAAA,MAAMK,YAAAA,GAAeL,UAAAA;AAErBE,EAAAA,MAAAA,CAAOC,KAAK,kDAAA,EAAoD;AAC9D9E,IAAAA,mBAAAA,EAAqB4E,UAAAA,CAAW5E,mBAAAA;AAChCC,IAAAA,iBAAAA,EAAmB2E,UAAAA,CAAW3E,iBAAAA;AAC9BC,IAAAA,iBAAAA,EAAmB0E,UAAAA,CAAW1E,iBAAAA;AAC9BC,IAAAA,gBAAAA,EAAkByE,UAAAA,CAAWzE,gBAAAA;AAC7BN,IAAAA,mBAAAA,EAAqB+E,UAAAA,CAAW/E,mBAAAA;AAChCC,IAAAA,qBAAAA,EAAuB8E,UAAAA,CAAW9E,qBAAAA;AAClCC,IAAAA,0BAAAA,EAA4B6E,UAAAA,CAAW7E,0BAAAA;AACvCQ,IAAAA,UAAAA,EAAYqE,UAAAA,CAAWrE,UAAAA;AACvBF,IAAAA,aAAAA,EAAeuE,UAAAA,CAAWvE,aAAAA;AAC1BC,IAAAA,8BAAAA,EAAgCsE,UAAAA,CAAWtE,8BAAAA;AAC3CE,IAAAA,0BAAAA,EAA4BoE,UAAAA,CAAWpE,0BAAAA;AACvCE,IAAAA,4BAAAA,EAA8BkE,UAAAA,CAAWlE,4BAAAA;AACzCC,IAAAA,mBAAAA,EAAqBiE,UAAAA,CAAWjE;GAClC,CAAA;AAEA,EAAA,OAAOqE,aAAaC,QAAAA,CAAS;IAC3BC,KAAAA,EAAO;MACLC,UAAAA,EAAY;;;;AAKV,QAAA,MAAMC,MAAAA,CAAO,EACX3C,KAAAA,EACAH,IAAAA,EACA4C,OAAK,EAKL;AAEA,UAAA,IAAIN,WAAWvE,aAAAA,CAAcqC,QAAAA,CAASD,KAAAA,CAAAA,IAAUH,KAAK+C,uBAAAA,EAAyB;AAC5E,YAAA,OAAOH,KAAAA,CAAM7C,aAAAA,CAAcC,IAAAA,CAAAA,CAAAA;AAC7B,UAAA;AAEA,UAAA,MAAMtB,QAAQ3B,mBAAAA,EAAAA;AACdsD,UAAAA,iBAAAA,CAAkBF,KAAAA,EAAO,QAAA,EAAUzB,KAAAA,EAAO4D,UAAAA,CAAAA;AAC1C,UAAA,IAAI,CAAC5D,OAAOG,WAAAA,EAAa;AACvB,YAAA,OAAO+D,MAAM5C,IAAAA,CAAAA;AACf,UAAA;AAEA,UAAA,IAAIsC,WAAWlE,4BAAAA,EAA8B;AAC3C,YAAA,MAAMuC,kBAAAA,CAAmBC,WAAWlC,KAAAA,CAAAA;AACtC,UAAA;AAEA,UAAA,MAAMsE,YAAAA,GAAevE,kBAAAA,CAAmBuB,IAAAA,CAAKzB,IAAAA,EAAMG,OAAO4D,UAAAA,CAAAA;AAE1D,UAAA,IAAIA,WAAWnE,KAAAA,EAAO;AACpB,YAAA,MAAM8E,YAAAA,GAAexD,MAAAA,CAAOC,IAAAA,CAAKsD,YAAAA,CAAAA,CAAcE,MAAAA,CAAO,CAACC,CAAAA,KAAM,EAAEA,CAAAA,IAAKnD,IAAAA,CAAKzB,IAAAA,CAAG,CAAA;AAC5E,YAAA,IAAI0E,YAAAA,CAAatD,SAAS,CAAA,EAAG;AAC3B4C,cAAAA,MAAAA,CAAOpE,KAAAA,CAAM,wBAAwBgC,KAAAA,CAAAA,oBAAAA,EAA4B8C,aAAaG,IAAAA,CAAK,IAAA,CAAA,CAAA,CAAA,EAAS;AAC1FvE,gBAAAA,WAAAA,EAAaH,KAAAA,CAAMG,WAAAA;AACnBE,gBAAAA,OAAAA,EAASL,KAAAA,CAAMK;eACjB,CAAA;AACF,YAAA;AACF,UAAA;AAEA,UAAA,MAAMsE,SAAAA,GAAY;AAChB,YAAA,GAAGtD,cAAcC,IAAAA,CAAAA;YACjBzB,IAAAA,EAAMyE;AACR,WAAA;AACA,UAAA,IAAIV,WAAWjE,mBAAAA,EAAqB;AAClC,YAAA,OAAOwD,sBAAAA,CAAuBY,wBAAAA,EAA0B/D,KAAAA,EAAOyB,KAAAA,EAAO,UAAUkD,SAAAA,CAAAA;AAClF,UAAA;AACA,UAAA,OAAOT,MAAMS,SAAAA,CAAAA;AACf,QAAA,CAAA;AAEA,QAAA,MAAMC,UAAAA,CAAW,EACfnD,KAAAA,EACAH,IAAAA,EACA4C,OAAK,EAKL;AACA,UAAA,IAAIN,WAAWvE,aAAAA,CAAcqC,QAAAA,CAASD,KAAAA,CAAAA,IAAUH,KAAK+C,uBAAAA,EAAyB;AAC5E,YAAA,OAAOH,KAAAA,CAAM7C,aAAAA,CAAcC,IAAAA,CAAAA,CAAAA;AAC7B,UAAA;AAEA,UAAA,MAAMtB,QAAQ3B,mBAAAA,EAAAA;AACdsD,UAAAA,iBAAAA,CAAkBF,KAAAA,EAAO,YAAA,EAAczB,KAAAA,EAAO4D,UAAAA,CAAAA;AAC9C,UAAA,IAAI,CAAC5D,OAAOG,WAAAA,EAAa;AACvB,YAAA,OAAO+D,MAAM5C,IAAAA,CAAAA;AACf,UAAA;AAEA,UAAA,IAAIsC,WAAWlE,4BAAAA,EAA8B;AAC3C,YAAA,MAAMuC,kBAAAA,CAAmBC,WAAWlC,KAAAA,CAAAA;AACtC,UAAA;AAEA,UAAA,MAAM6E,YAAYC,KAAAA,CAAMC,OAAAA,CAAQzD,KAAKzB,IAAI,CAAA,GAAIyB,KAAKzB,IAAAA,GAAO;YAACyB,IAAAA,CAAKzB;;AAC/D,UAAA,MAAMyE,YAAAA,GAAeO,UAAUG,GAAAA,CAAI,CAACC,SAASlF,kBAAAA,CAAmBkF,IAAAA,EAAMjF,KAAAA,EAAO4D,UAAAA,CAAAA,CAAAA;AAE7E,UAAA,MAAMe,SAAAA,GAAY;AAChB,YAAA,GAAGtD,cAAcC,IAAAA,CAAAA;AACjBzB,YAAAA,IAAAA,EAAMiF,MAAMC,OAAAA,CAAQzD,IAAAA,CAAKzB,IAAI,CAAA,GAAIyE,YAAAA,GAAeA,aAAa,CAAA;AAC/D,WAAA;AACA,UAAA,IAAIV,WAAWjE,mBAAAA,EAAqB;AAClC,YAAA,OAAOwD,sBAAAA,CAAuBY,wBAAAA,EAA0B/D,KAAAA,EAAOyB,KAAAA,EAAO,cAAckD,SAAAA,CAAAA;AACtF,UAAA;AACA,UAAA,OAAOT,MAAMS,SAAAA,CAAAA;AACf,QAAA,CAAA;AAEA,QAAA,MAAMO,mBAAAA,CAAoB,EACxBzD,KAAAA,EACAH,IAAAA,EACA4C,OAAK,EAKL;AACA,UAAA,IAAIN,WAAWvE,aAAAA,CAAcqC,QAAAA,CAASD,KAAAA,CAAAA,IAAUH,KAAK+C,uBAAAA,EAAyB;AAC5E,YAAA,OAAOH,KAAAA,CAAM7C,aAAAA,CAAcC,IAAAA,CAAAA,CAAAA;AAC7B,UAAA;AAEA,UAAA,MAAMtB,QAAQ3B,mBAAAA,EAAAA;AACdsD,UAAAA,iBAAAA,CAAkBF,KAAAA,EAAO,qBAAA,EAAuBzB,KAAAA,EAAO4D,UAAAA,CAAAA;AACvD,UAAA,IAAI,CAAC5D,OAAOG,WAAAA,EAAa;AACvB,YAAA,OAAO+D,MAAM5C,IAAAA,CAAAA;AACf,UAAA;AAEA,UAAA,IAAIsC,WAAWlE,4BAAAA,EAA8B;AAC3C,YAAA,MAAMuC,kBAAAA,CAAmBC,WAAWlC,KAAAA,CAAAA;AACtC,UAAA;AACA,UAAA,MAAM6E,YAAYC,KAAAA,CAAMC,OAAAA,CAAQzD,KAAKzB,IAAI,CAAA,GAAIyB,KAAKzB,IAAAA,GAAO;YAACyB,IAAAA,CAAKzB;;AAC/D,UAAA,MAAMyE,YAAAA,GAAeO,UAAUG,GAAAA,CAAI,CAACC,SAASlF,kBAAAA,CAAmBkF,IAAAA,EAAMjF,KAAAA,EAAO4D,UAAAA,CAAAA,CAAAA;AAE7E,UAAA,MAAMe,SAAAA,GAAY;AAChB,YAAA,GAAGtD,cAAcC,IAAAA,CAAAA;AACjBzB,YAAAA,IAAAA,EAAMiF,MAAMC,OAAAA,CAAQzD,IAAAA,CAAKzB,IAAI,CAAA,GAAIyE,YAAAA,GAAeA,aAAa,CAAA;AAC/D,WAAA;AACA,UAAA,IAAIV,WAAWjE,mBAAAA,EAAqB;AAClC,YAAA,OAAOwD,sBAAAA,CAAuBY,wBAAAA,EAA0B/D,KAAAA,EAAOyB,KAAAA,EAAO,uBAAuBkD,SAAAA,CAAAA;AAC/F,UAAA;AACA,UAAA,OAAOT,MAAMS,SAAAA,CAAAA;AACf,QAAA,CAAA;;;;AAMA,QAAA,MAAMQ,MAAAA,CAAO,EACX1D,KAAAA,EACAH,IAAAA,EACA4C,OAAK,EAML;AACA,UAAA,IAAIN,WAAWvE,aAAAA,CAAcqC,QAAAA,CAASD,KAAAA,CAAAA,IAAUH,KAAK+C,uBAAAA,EAAyB;AAC5E,YAAA,OAAOH,KAAAA,CAAM7C,aAAAA,CAAcC,IAAAA,CAAAA,CAAAA;AAC7B,UAAA;AAEA,UAAA,MAAMtB,QAAQ3B,mBAAAA,EAAAA;AACdsD,UAAAA,iBAAAA,CAAkBF,KAAAA,EAAO,QAAA,EAAUzB,KAAAA,EAAO4D,UAAAA,CAAAA;AAC1C,UAAA,IAAI,CAAC5D,OAAOG,WAAAA,EAAa;AACvB,YAAA,OAAO+D,MAAM5C,IAAAA,CAAAA;AACf,UAAA;AAEA,UAAA,IAAIsC,WAAWlE,4BAAAA,EAA8B;AAC3C,YAAA,MAAMuC,kBAAAA,CAAmBC,WAAWlC,KAAAA,CAAAA;AACtC,UAAA;AACA,UAAA,MAAMsE,YAAAA,GAAe7D,kBAAAA,CAAmBa,IAAAA,CAAKzB,IAAAA,EAAMG,OAAO4D,UAAAA,CAAAA;AAG1D,UAAA,IAAIwB,gBAAgB9D,IAAAA,CAAKX,KAAAA;AACzB,UAAA,IAAIiD,WAAW7E,0BAAAA,IAA8B,CAACyC,2BAAAA,CAA4BC,KAAAA,EAAOmC,UAAAA,CAAAA,EAAa;AAC5FwB,YAAAA,aAAAA,GAAgB1E,iBAAAA,CAAkBY,IAAAA,CAAKX,KAAAA,EAAOX,KAAAA,CAAAA;AAChD,UAAA;AAEA,UAAA,IAAI4D,WAAWnE,KAAAA,EAAO;AACpB,YAAA,MAAM4F,gBAAAA,GAAmBtE,MAAAA,CAAOC,IAAAA,CAAKsD,YAAAA,CAAAA,CAAcE,MAAAA,CAAO,CAACC,CAAAA,KAAM,EAAEA,CAAAA,IAAKnD,IAAAA,CAAKzB,IAAAA,CAAG,CAAA;AAChF,YAAA,MAAMyF,YAAAA,GAAeF,kBAAkB9D,IAAAA,CAAKX,KAAAA;AAC5C,YAAA,IAAI0E,gBAAAA,CAAiBpE,MAAAA,GAAS,CAAA,IAAKqE,YAAAA,EAAc;AAC/CzB,cAAAA,MAAAA,CAAOpE,KAAAA,CACL,CAAA,qBAAA,EAAwBgC,KAAAA,CAAAA,yBAAAA,EAAiC4D,gBAAAA,CAAiBX,IAAAA,CAAK,IAAA,CAAA,CAAA,EAAQY,YAAAA,GAAe,sBAAA,GAAyB,EAAA,CAAA,CAAI,CAAA;AAEvI,YAAA;AACF,UAAA;AAEA,UAAA,MAAMX,SAAAA,GAAY;AAChB,YAAA,GAAGtD,cAAcC,IAAAA,CAAAA;YACjBzB,IAAAA,EAAMyE,YAAAA;YACN3D,KAAAA,EAAOyE;AACT,WAAA;AACA,UAAA,IAAIxB,WAAWjE,mBAAAA,EAAqB;AAClC,YAAA,OAAOwD,sBAAAA,CAAuBY,wBAAAA,EAA0B/D,KAAAA,EAAOyB,KAAAA,EAAO,UAAUkD,SAAAA,CAAAA;AAClF,UAAA;AACA,UAAA,OAAOT,MAAMS,SAAAA,CAAAA;AACf,QAAA,CAAA;AAEA,QAAA,MAAMY,UAAAA,CAAW,EACf9D,KAAAA,EACAH,IAAAA,EACA4C,OAAK,EAML;AACA,UAAA,IAAIN,WAAWvE,aAAAA,CAAcqC,QAAAA,CAASD,KAAAA,CAAAA,IAAUH,KAAK+C,uBAAAA,EAAyB;AAC5E,YAAA,OAAOH,KAAAA,CAAM7C,aAAAA,CAAcC,IAAAA,CAAAA,CAAAA;AAC7B,UAAA;AAEA,UAAA,MAAMtB,QAAQ3B,mBAAAA,EAAAA;AACdsD,UAAAA,iBAAAA,CAAkBF,KAAAA,EAAO,YAAA,EAAczB,KAAAA,EAAO4D,UAAAA,CAAAA;AAC9C,UAAA,IAAI,CAAC5D,OAAOG,WAAAA,EAAa;AACvB,YAAA,OAAO+D,MAAM5C,IAAAA,CAAAA;AACf,UAAA;AAEA,UAAA,IAAIsC,WAAWlE,4BAAAA,EAA8B;AAC3C,YAAA,MAAMuC,kBAAAA,CAAmBC,WAAWlC,KAAAA,CAAAA;AACtC,UAAA;AACA,UAAA,MAAMsE,YAAAA,GAAe7D,kBAAAA,CAAmBa,IAAAA,CAAKzB,IAAAA,EAAMG,OAAO4D,UAAAA,CAAAA;AAG1D,UAAA,IAAIwB,gBAAgB9D,IAAAA,CAAKX,KAAAA;AACzB,UAAA,IAAIiD,WAAW7E,0BAAAA,IAA8B,CAACyC,2BAAAA,CAA4BC,KAAAA,EAAOmC,UAAAA,CAAAA,EAAa;AAC5FwB,YAAAA,aAAAA,GAAgB1E,iBAAAA,CAAkBY,IAAAA,CAAKX,KAAAA,EAAOX,KAAAA,CAAAA;AAChD,UAAA;AAEA,UAAA,MAAM2E,SAAAA,GAAY;AAChB,YAAA,GAAGtD,cAAcC,IAAAA,CAAAA;YACjBzB,IAAAA,EAAMyE,YAAAA;YACN3D,KAAAA,EAAOyE;AACT,WAAA;AACA,UAAA,IAAIxB,WAAWjE,mBAAAA,EAAqB;AAClC,YAAA,OAAOwD,sBAAAA,CAAuBY,wBAAAA,EAA0B/D,KAAAA,EAAOyB,KAAAA,EAAO,cAAckD,SAAAA,CAAAA;AACtF,UAAA;AACA,UAAA,OAAOT,MAAMS,SAAAA,CAAAA;AACf,QAAA,CAAA;AAEA,QAAA,MAAMa,MAAAA,CAAO,EACX/D,KAAAA,EACAH,IAAAA,EACA4C,OAAK,EAOL;AACA,UAAA,IAAIN,WAAWvE,aAAAA,CAAcqC,QAAAA,CAASD,KAAAA,CAAAA,IAAUH,KAAK+C,uBAAAA,EAAyB;AAC5E,YAAA,OAAOH,KAAAA,CAAM7C,aAAAA,CAAcC,IAAAA,CAAAA,CAAAA;AAC7B,UAAA;AAEA,UAAA,MAAMtB,QAAQ3B,mBAAAA,EAAAA;AACdsD,UAAAA,iBAAAA,CAAkBF,KAAAA,EAAO,QAAA,EAAUzB,KAAAA,EAAO4D,UAAAA,CAAAA;AAC1C,UAAA,IAAI,CAAC5D,OAAOG,WAAAA,EAAa;AACvB,YAAA,OAAO+D,MAAM5C,IAAAA,CAAAA;AACf,UAAA;AAEA,UAAA,IAAIsC,WAAWlE,4BAAAA,EAA8B;AAC3C,YAAA,MAAMuC,kBAAAA,CAAmBC,WAAWlC,KAAAA,CAAAA;AACtC,UAAA;AACA,UAAA,MAAMyF,cAAAA,GAAiB1F,kBAAAA,CAAmBuB,IAAAA,CAAK8C,MAAAA,EAAQpE,OAAO4D,UAAAA,CAAAA;AAC9D,UAAA,MAAM8B,cAAAA,GAAiBjF,kBAAAA,CAAmBa,IAAAA,CAAK6D,MAAAA,EAAQnF,OAAO4D,UAAAA,CAAAA;AAG9D,UAAA,IAAIwB,gBAAgB9D,IAAAA,CAAKX,KAAAA;AACzB,UAAA,IAAIiD,WAAW7E,0BAAAA,IAA8B,CAACyC,2BAAAA,CAA4BC,KAAAA,EAAOmC,UAAAA,CAAAA,EAAa;AAC5FwB,YAAAA,aAAAA,GAAgB1E,iBAAAA,CAAkBY,IAAAA,CAAKX,KAAAA,EAAOX,KAAAA,CAAAA;AAChD,UAAA;AAEA,UAAA,MAAM2E,SAAAA,GAAY;AAChB,YAAA,GAAGtD,cAAcC,IAAAA,CAAAA;YACjB8C,MAAAA,EAAQqB,cAAAA;YACRN,MAAAA,EAAQO,cAAAA;YACR/E,KAAAA,EAAOyE;AACT,WAAA;AACA,UAAA,IAAIxB,WAAWjE,mBAAAA,EAAqB;AAClC,YAAA,OAAOwD,sBAAAA,CAAuBY,wBAAAA,EAA0B/D,KAAAA,EAAOyB,KAAAA,EAAO,UAAUkD,SAAAA,CAAAA;AAClF,UAAA;AACA,UAAA,OAAOT,MAAMS,SAAAA,CAAAA;AACf,QAAA,CAAA;;;;AAMA,QAAA,MAAMgB,QAAAA,CAAS,EAAElE,KAAAA,EAAOH,IAAAA,EAAM4C,OAAK,EAAqC;AACtE,UAAA,IACE,CAACN,WAAW/E,mBAAAA,IACZ2C,2BAAAA,CAA4BC,OAAOmC,UAAAA,CAAAA,IACnCtC,KAAK+C,uBAAAA,EACL;AACA,YAAA,OAAOH,KAAAA,CAAM7C,aAAAA,CAAcC,IAAAA,CAAAA,CAAAA;AAC7B,UAAA;AAEA,UAAA,MAAMtB,QAAQ3B,mBAAAA,EAAAA;AACdsD,UAAAA,iBAAAA,CAAkBF,KAAAA,EAAO,UAAA,EAAYzB,KAAAA,EAAO4D,UAAAA,CAAAA;AAC5C,UAAA,IAAI,CAAC5D,OAAOG,WAAAA,EAAa;AACvB,YAAA,OAAO+D,MAAM5C,IAAAA,CAAAA;AACf,UAAA;AAEA,UAAA,IAAIsC,WAAWlE,4BAAAA,EAA8B;AAC3C,YAAA,MAAMuC,kBAAAA,CAAmBC,WAAWlC,KAAAA,CAAAA;AACtC,UAAA;AACA,UAAA,MAAMoF,aAAAA,GAAgB1E,iBAAAA,CAAkBY,IAAAA,CAAKX,KAAAA,EAAOX,KAAAA,CAAAA;AAEpD,UAAA,IAAI4D,WAAWnE,KAAAA,EAAO;AACpBoE,YAAAA,MAAAA,CAAOpE,KAAAA,CAAM,CAAA,qBAAA,EAAwBgC,KAAAA,CAAAA,2CAAAA,CAAAA,EAAoD;AACvFtB,cAAAA,WAAAA,EAAaH,KAAAA,CAAMG;aACrB,CAAA;AACF,UAAA;AAEA,UAAA,MAAMwE,SAAAA,GAAY;AAChB,YAAA,GAAGtD,cAAcC,IAAAA,CAAAA;YACjBX,KAAAA,EAAOyE;AACT,WAAA;AACA,UAAA,IAAIxB,WAAWjE,mBAAAA,EAAqB;AAClC,YAAA,OAAOwD,sBAAAA,CAAuBY,wBAAAA,EAA0B/D,KAAAA,EAAOyB,KAAAA,EAAO,YAAYkD,SAAAA,CAAAA;AACpF,UAAA;AACA,UAAA,OAAOT,MAAMS,SAAAA,CAAAA;AACf,QAAA,CAAA;AAEA,QAAA,MAAMiB,SAAAA,CAAU,EAAEnE,KAAAA,EAAOH,IAAAA,EAAM4C,OAAK,EAAqC;AACvE,UAAA,IACE,CAACN,WAAW/E,mBAAAA,IACZ2C,2BAAAA,CAA4BC,OAAOmC,UAAAA,CAAAA,IACnCtC,KAAK+C,uBAAAA,EACL;AACA,YAAA,OAAOH,KAAAA,CAAM7C,aAAAA,CAAcC,IAAAA,CAAAA,CAAAA;AAC7B,UAAA;AAEA,UAAA,MAAMtB,QAAQ3B,mBAAAA,EAAAA;AACdsD,UAAAA,iBAAAA,CAAkBF,KAAAA,EAAO,WAAA,EAAazB,KAAAA,EAAO4D,UAAAA,CAAAA;AAC7C,UAAA,IAAI,CAAC5D,OAAOG,WAAAA,EAAa;AACvB,YAAA,OAAO+D,MAAM5C,IAAAA,CAAAA;AACf,UAAA;AAEA,UAAA,IAAIsC,WAAWlE,4BAAAA,EAA8B;AAC3C,YAAA,MAAMuC,kBAAAA,CAAmBC,WAAWlC,KAAAA,CAAAA;AACtC,UAAA;AACA,UAAA,MAAMoF,aAAAA,GAAgB1E,iBAAAA,CAAkBY,IAAAA,CAAKX,KAAAA,EAAOX,KAAAA,CAAAA;AAEpD,UAAA,IAAI4D,WAAWnE,KAAAA,EAAO;AACpBoE,YAAAA,MAAAA,CAAOpE,KAAAA,CAAM,CAAA,qBAAA,EAAwBgC,KAAAA,CAAAA,4CAAAA,CAAAA,EAAqD;AACxFtB,cAAAA,WAAAA,EAAaH,KAAAA,CAAMG;aACrB,CAAA;AACF,UAAA;AAEA,UAAA,MAAMwE,SAAAA,GAAY;AAChB,YAAA,GAAGtD,cAAcC,IAAAA,CAAAA;YACjBX,KAAAA,EAAOyE;AACT,WAAA;AACA,UAAA,IAAIxB,WAAWjE,mBAAAA,EAAqB;AAClC,YAAA,OAAOwD,sBAAAA,CAAuBY,wBAAAA,EAA0B/D,KAAAA,EAAOyB,KAAAA,EAAO,aAAakD,SAAAA,CAAAA;AACrF,UAAA;AACA,UAAA,OAAOT,MAAMS,SAAAA,CAAAA;AACf,QAAA,CAAA;AAEA,QAAA,MAAMkB,gBAAAA,CAAiB,EAAEpE,KAAAA,EAAOH,IAAAA,EAAM4C,OAAK,EAAqC;AAC9E,UAAA,IACE,CAACN,WAAW/E,mBAAAA,IACZ2C,2BAAAA,CAA4BC,OAAOmC,UAAAA,CAAAA,IACnCtC,KAAK+C,uBAAAA,EACL;AACA,YAAA,OAAOH,KAAAA,CAAM7C,aAAAA,CAAcC,IAAAA,CAAAA,CAAAA;AAC7B,UAAA;AAEA,UAAA,MAAMtB,QAAQ3B,mBAAAA,EAAAA;AACdsD,UAAAA,iBAAAA,CAAkBF,KAAAA,EAAO,kBAAA,EAAoBzB,KAAAA,EAAO4D,UAAAA,CAAAA;AACpD,UAAA,IAAI,CAAC5D,OAAOG,WAAAA,EAAa;AACvB,YAAA,OAAO+D,MAAM5C,IAAAA,CAAAA;AACf,UAAA;AAEA,UAAA,IAAIsC,WAAWlE,4BAAAA,EAA8B;AAC3C,YAAA,MAAMuC,kBAAAA,CAAmBC,WAAWlC,KAAAA,CAAAA;AACtC,UAAA;AACA,UAAA,MAAMoF,aAAAA,GAAgB1E,iBAAAA,CAAkBY,IAAAA,CAAKX,KAAAA,EAAOX,KAAAA,CAAAA;AAEpD,UAAA,IAAI4D,WAAWnE,KAAAA,EAAO;AACpBoE,YAAAA,MAAAA,CAAOpE,KAAAA,CAAM,CAAA,qBAAA,EAAwBgC,KAAAA,CAAAA,mDAAAA,CAAAA,EAA4D;AAC/FtB,cAAAA,WAAAA,EAAaH,KAAAA,CAAMG;aACrB,CAAA;AACF,UAAA;AAEA,UAAA,MAAMwE,SAAAA,GAAY;AAChB,YAAA,GAAGtD,cAAcC,IAAAA,CAAAA;YACjBX,KAAAA,EAAOyE;AACT,WAAA;AACA,UAAA,IAAIxB,WAAWjE,mBAAAA,EAAqB;AAClC,YAAA,OAAOwD,sBAAAA,CAAuBY,wBAAAA,EAA0B/D,KAAAA,EAAOyB,KAAAA,EAAO,oBAAoBkD,SAAAA,CAAAA;AAC5F,UAAA;AACA,UAAA,OAAOT,MAAMS,SAAAA,CAAAA;AACf,QAAA,CAAA;AAEA,QAAA,MAAMmB,UAAAA,CAAW,EAAErE,KAAAA,EAAOH,IAAAA,EAAM4C,OAAK,EAAqC;AACxE,UAAA,IACE,CAACN,WAAW/E,mBAAAA,IACZ2C,2BAAAA,CAA4BC,OAAOmC,UAAAA,CAAAA,IACnCtC,KAAK+C,uBAAAA,EACL;AACA,YAAA,OAAOH,KAAAA,CAAM7C,aAAAA,CAAcC,IAAAA,CAAAA,CAAAA;AAC7B,UAAA;AAEA,UAAA,MAAMtB,QAAQ3B,mBAAAA,EAAAA;AACdsD,UAAAA,iBAAAA,CAAkBF,KAAAA,EAAO,YAAA,EAAczB,KAAAA,EAAO4D,UAAAA,CAAAA;AAC9C,UAAA,IAAI,CAAC5D,OAAOG,WAAAA,EAAa;AACvB,YAAA,OAAO+D,MAAM5C,IAAAA,CAAAA;AACf,UAAA;AAEA,UAAA,IAAIsC,WAAWlE,4BAAAA,EAA8B;AAC3C,YAAA,MAAMuC,kBAAAA,CAAmBC,WAAWlC,KAAAA,CAAAA;AACtC,UAAA;AAIA,UAAA,MAAMoF,aAAAA,GAAgB1E,iBAAAA,CAAkBY,IAAAA,CAAKX,KAAAA,EAAOX,KAAAA,CAAAA;AAEpD,UAAA,IAAI4D,WAAWnE,KAAAA,EAAO;AACpBoE,YAAAA,MAAAA,CAAOpE,KAAAA,CAAM,CAAA,qBAAA,EAAwBgC,KAAAA,CAAAA,6CAAAA,CAAAA,EAAsD;AACzFtB,cAAAA,WAAAA,EAAaH,KAAAA,CAAMG;aACrB,CAAA;AACF,UAAA;AAEA,UAAA,MAAMwE,SAAAA,GAAY;AAChB,YAAA,GAAGtD,cAAcC,IAAAA,CAAAA;YACjBX,KAAAA,EAAOyE;AACT,WAAA;AACA,UAAA,IAAIxB,WAAWjE,mBAAAA,EAAqB;AAClC,YAAA,OAAOwD,sBAAAA,CAAuBY,wBAAAA,EAA0B/D,KAAAA,EAAOyB,KAAAA,EAAO,cAAckD,SAAAA,CAAAA;AACtF,UAAA;AACA,UAAA,OAAOT,MAAMS,SAAAA,CAAAA;AACf,QAAA,CAAA;AAEA,QAAA,MAAMoB,iBAAAA,CAAkB,EAAEtE,KAAAA,EAAOH,IAAAA,EAAM4C,OAAK,EAAqC;AAC/E,UAAA,IACE,CAACN,WAAW/E,mBAAAA,IACZ2C,2BAAAA,CAA4BC,OAAOmC,UAAAA,CAAAA,IACnCtC,KAAK+C,uBAAAA,EACL;AACA,YAAA,OAAOH,KAAAA,CAAM7C,aAAAA,CAAcC,IAAAA,CAAAA,CAAAA;AAC7B,UAAA;AAEA,UAAA,MAAMtB,QAAQ3B,mBAAAA,EAAAA;AACdsD,UAAAA,iBAAAA,CAAkBF,KAAAA,EAAO,mBAAA,EAAqBzB,KAAAA,EAAO4D,UAAAA,CAAAA;AACrD,UAAA,IAAI,CAAC5D,OAAOG,WAAAA,EAAa;AACvB,YAAA,OAAO+D,MAAM5C,IAAAA,CAAAA;AACf,UAAA;AAEA,UAAA,IAAIsC,WAAWlE,4BAAAA,EAA8B;AAC3C,YAAA,MAAMuC,kBAAAA,CAAmBC,WAAWlC,KAAAA,CAAAA;AACtC,UAAA;AACA,UAAA,MAAMoF,aAAAA,GAAgB1E,iBAAAA,CAAkBY,IAAAA,CAAKX,KAAAA,EAAOX,KAAAA,CAAAA;AAEpD,UAAA,IAAI4D,WAAWnE,KAAAA,EAAO;AACpBoE,YAAAA,MAAAA,CAAOpE,KAAAA,CAAM,CAAA,qBAAA,EAAwBgC,KAAAA,CAAAA,oDAAAA,CAAAA,EAA6D;AAChGtB,cAAAA,WAAAA,EAAaH,KAAAA,CAAMG;aACrB,CAAA;AACF,UAAA;AAEA,UAAA,MAAMwE,SAAAA,GAAY;AAChB,YAAA,GAAGtD,cAAcC,IAAAA,CAAAA;YACjBX,KAAAA,EAAOyE;AACT,WAAA;AACA,UAAA,IAAIxB,WAAWjE,mBAAAA,EAAqB;AAClC,YAAA,OAAOwD,sBAAAA,CAAuBY,wBAAAA,EAA0B/D,KAAAA,EAAOyB,KAAAA,EAAO,qBAAqBkD,SAAAA,CAAAA;AAC7F,UAAA;AACA,UAAA,OAAOT,MAAMS,SAAAA,CAAAA;AACf,QAAA,CAAA;AAEA,QAAA,MAAMqB,KAAAA,CAAM,EAAEvE,KAAAA,EAAOH,IAAAA,EAAM4C,OAAK,EAAqC;AACnE,UAAA,IACE,CAACN,WAAW/E,mBAAAA,IACZ2C,2BAAAA,CAA4BC,OAAOmC,UAAAA,CAAAA,IACnCtC,KAAK+C,uBAAAA,EACL;AACA,YAAA,OAAOH,KAAAA,CAAM7C,aAAAA,CAAcC,IAAAA,CAAAA,CAAAA;AAC7B,UAAA;AAEA,UAAA,MAAMtB,QAAQ3B,mBAAAA,EAAAA;AACdsD,UAAAA,iBAAAA,CAAkBF,KAAAA,EAAO,OAAA,EAASzB,KAAAA,EAAO4D,UAAAA,CAAAA;AACzC,UAAA,IAAI,CAAC5D,OAAOG,WAAAA,EAAa;AACvB,YAAA,OAAO+D,MAAM5C,IAAAA,CAAAA;AACf,UAAA;AAEA,UAAA,IAAIsC,WAAWlE,4BAAAA,EAA8B;AAC3C,YAAA,MAAMuC,kBAAAA,CAAmBC,WAAWlC,KAAAA,CAAAA;AACtC,UAAA;AACA,UAAA,MAAMoF,aAAAA,GAAgB1E,iBAAAA,CAAkBY,IAAAA,CAAKX,KAAAA,EAAOX,KAAAA,CAAAA;AAEpD,UAAA,IAAI4D,WAAWnE,KAAAA,EAAO;AACpBoE,YAAAA,MAAAA,CAAOpE,KAAAA,CAAM,CAAA,qBAAA,EAAwBgC,KAAAA,CAAAA,wCAAAA,CAAAA,EAAiD;AACpFtB,cAAAA,WAAAA,EAAaH,KAAAA,CAAMG;aACrB,CAAA;AACF,UAAA;AAEA,UAAA,MAAMwE,SAAAA,GAAY;AAChB,YAAA,GAAGtD,cAAcC,IAAAA,CAAAA;YACjBX,KAAAA,EAAOyE;AACT,WAAA;AACA,UAAA,IAAIxB,WAAWjE,mBAAAA,EAAqB;AAClC,YAAA,OAAOwD,sBAAAA,CAAuBY,wBAAAA,EAA0B/D,KAAAA,EAAOyB,KAAAA,EAAO,SAASkD,SAAAA,CAAAA;AACjF,UAAA;AACA,UAAA,OAAOT,MAAMS,SAAAA,CAAAA;AACf,QAAA,CAAA;AAEA,QAAA,MAAMsB,SAAAA,CAAU,EAAExE,KAAAA,EAAOH,IAAAA,EAAM4C,OAAK,EAAqC;AACvE,UAAA,IACE,CAACN,WAAW/E,mBAAAA,IACZ2C,2BAAAA,CAA4BC,OAAOmC,UAAAA,CAAAA,IACnCtC,KAAK+C,uBAAAA,EACL;AACA,YAAA,OAAOH,KAAAA,CAAM7C,aAAAA,CAAcC,IAAAA,CAAAA,CAAAA;AAC7B,UAAA;AAEA,UAAA,MAAMtB,QAAQ3B,mBAAAA,EAAAA;AACdsD,UAAAA,iBAAAA,CAAkBF,KAAAA,EAAO,WAAA,EAAazB,KAAAA,EAAO4D,UAAAA,CAAAA;AAC7C,UAAA,IAAI,CAAC5D,OAAOG,WAAAA,EAAa;AACvB,YAAA,OAAO+D,MAAM5C,IAAAA,CAAAA;AACf,UAAA;AAEA,UAAA,IAAIsC,WAAWlE,4BAAAA,EAA8B;AAC3C,YAAA,MAAMuC,kBAAAA,CAAmBC,WAAWlC,KAAAA,CAAAA;AACtC,UAAA;AACA,UAAA,MAAMoF,aAAAA,GAAgB1E,iBAAAA,CAAkBY,IAAAA,CAAKX,KAAAA,EAAOX,KAAAA,CAAAA;AAEpD,UAAA,IAAI4D,WAAWnE,KAAAA,EAAO;AACpBoE,YAAAA,MAAAA,CAAOpE,KAAAA,CAAM,CAAA,qBAAA,EAAwBgC,KAAAA,CAAAA,4CAAAA,CAAAA,EAAqD;AACxFtB,cAAAA,WAAAA,EAAaH,KAAAA,CAAMG;aACrB,CAAA;AACF,UAAA;AAEA,UAAA,MAAMwE,SAAAA,GAAY;AAChB,YAAA,GAAGtD,cAAcC,IAAAA,CAAAA;YACjBX,KAAAA,EAAOyE;AACT,WAAA;AACA,UAAA,IAAIxB,WAAWjE,mBAAAA,EAAqB;AAClC,YAAA,OAAOwD,sBAAAA,CAAuBY,wBAAAA,EAA0B/D,KAAAA,EAAOyB,KAAAA,EAAO,aAAakD,SAAAA,CAAAA;AACrF,UAAA;AACA,UAAA,OAAOT,MAAMS,SAAAA,CAAAA;AACf,QAAA,CAAA;AAEA,QAAA,MAAMuB,OAAAA,CAAQ,EAAEzE,KAAAA,EAAOH,IAAAA,EAAM4C,OAAK,EAAqC;AACrE,UAAA,IACE,CAACN,WAAW/E,mBAAAA,IACZ2C,2BAAAA,CAA4BC,OAAOmC,UAAAA,CAAAA,IACnCtC,KAAK+C,uBAAAA,EACL;AACA,YAAA,OAAOH,KAAAA,CAAM7C,aAAAA,CAAcC,IAAAA,CAAAA,CAAAA;AAC7B,UAAA;AAEA,UAAA,MAAMtB,QAAQ3B,mBAAAA,EAAAA;AACdsD,UAAAA,iBAAAA,CAAkBF,KAAAA,EAAO,SAAA,EAAWzB,KAAAA,EAAO4D,UAAAA,CAAAA;AAC3C,UAAA,IAAI,CAAC5D,OAAOG,WAAAA,EAAa;AACvB,YAAA,OAAO+D,MAAM5C,IAAAA,CAAAA;AACf,UAAA;AAEA,UAAA,IAAIsC,WAAWlE,4BAAAA,EAA8B;AAC3C,YAAA,MAAMuC,kBAAAA,CAAmBC,WAAWlC,KAAAA,CAAAA;AACtC,UAAA;AACA,UAAA,MAAMoF,aAAAA,GAAgB1E,iBAAAA,CAAkBY,IAAAA,CAAKX,KAAAA,EAAOX,KAAAA,CAAAA;AAEpD,UAAA,IAAI4D,WAAWnE,KAAAA,EAAO;AACpBoE,YAAAA,MAAAA,CAAOpE,KAAAA,CAAM,CAAA,qBAAA,EAAwBgC,KAAAA,CAAAA,0CAAAA,CAAAA,EAAmD;AACtFtB,cAAAA,WAAAA,EAAaH,KAAAA,CAAMG;aACrB,CAAA;AACF,UAAA;AAEA,UAAA,MAAMwE,SAAAA,GAAY;AAChB,YAAA,GAAGtD,cAAcC,IAAAA,CAAAA;YACjBX,KAAAA,EAAOyE;AACT,WAAA;AACA,UAAA,IAAIxB,WAAWjE,mBAAAA,EAAqB;AAClC,YAAA,OAAOwD,sBAAAA,CAAuBY,wBAAAA,EAA0B/D,KAAAA,EAAOyB,KAAAA,EAAO,WAAWkD,SAAAA,CAAAA;AACnF,UAAA;AACA,UAAA,OAAOT,MAAMS,SAAAA,CAAAA;AACf,QAAA,CAAA;;;;AAMA,QAAA,MAAM/B,MAAAA,CAAO,EAAEnB,KAAAA,EAAOH,IAAAA,EAAM4C,OAAK,EAAqC;AACpE,UAAA,IACE,CAACN,WAAW9E,qBAAAA,IACZ0C,2BAAAA,CAA4BC,OAAOmC,UAAAA,CAAAA,IACnCtC,KAAK+C,uBAAAA,EACL;AACA,YAAA,OAAOH,KAAAA,CAAM7C,aAAAA,CAAcC,IAAAA,CAAAA,CAAAA;AAC7B,UAAA;AAEA,UAAA,MAAMtB,QAAQ3B,mBAAAA,EAAAA;AACdsD,UAAAA,iBAAAA,CAAkBF,KAAAA,EAAO,QAAA,EAAUzB,KAAAA,EAAO4D,UAAAA,CAAAA;AAC1C,UAAA,IAAI,CAAC5D,OAAOG,WAAAA,EAAa;AACvB,YAAA,OAAO+D,MAAM5C,IAAAA,CAAAA;AACf,UAAA;AAEA,UAAA,IAAIsC,WAAWlE,4BAAAA,EAA8B;AAC3C,YAAA,MAAMuC,kBAAAA,CAAmBC,WAAWlC,KAAAA,CAAAA;AACtC,UAAA;AACA,UAAA,MAAMoF,aAAAA,GAAgB1E,iBAAAA,CAAkBY,IAAAA,CAAKX,KAAAA,EAAOX,KAAAA,CAAAA;AAEpD,UAAA,IAAI4D,WAAWnE,KAAAA,EAAO;AACpBoE,YAAAA,MAAAA,CAAOpE,KAAAA,CAAM,CAAA,qBAAA,EAAwBgC,KAAAA,CAAAA,yCAAAA,CAAAA,EAAkD;AACrFtB,cAAAA,WAAAA,EAAaH,KAAAA,CAAMG;aACrB,CAAA;AACF,UAAA;AAEA,UAAA,MAAMwE,SAAAA,GAAY;AAChB,YAAA,GAAGtD,cAAcC,IAAAA,CAAAA;YACjBX,KAAAA,EAAOyE;AACT,WAAA;AACA,UAAA,IAAIxB,WAAWjE,mBAAAA,EAAqB;AAClC,YAAA,OAAOwD,sBAAAA,CAAuBY,wBAAAA,EAA0B/D,KAAAA,EAAOyB,KAAAA,EAAO,UAAUkD,SAAAA,CAAAA;AAClF,UAAA;AACA,UAAA,OAAOT,MAAMS,SAAAA,CAAAA;AACf,QAAA,CAAA;AAEA,QAAA,MAAMwB,UAAAA,CAAW,EAAE1E,KAAAA,EAAOH,IAAAA,EAAM4C,OAAK,EAAqC;AACxE,UAAA,IACE,CAACN,WAAW9E,qBAAAA,IACZ0C,2BAAAA,CAA4BC,OAAOmC,UAAAA,CAAAA,IACnCtC,KAAK+C,uBAAAA,EACL;AACA,YAAA,OAAOH,KAAAA,CAAM7C,aAAAA,CAAcC,IAAAA,CAAAA,CAAAA;AAC7B,UAAA;AAEA,UAAA,MAAMtB,QAAQ3B,mBAAAA,EAAAA;AACdsD,UAAAA,iBAAAA,CAAkBF,KAAAA,EAAO,YAAA,EAAczB,KAAAA,EAAO4D,UAAAA,CAAAA;AAC9C,UAAA,IAAI,CAAC5D,OAAOG,WAAAA,EAAa;AACvB,YAAA,OAAO+D,MAAM5C,IAAAA,CAAAA;AACf,UAAA;AAEA,UAAA,IAAIsC,WAAWlE,4BAAAA,EAA8B;AAC3C,YAAA,MAAMuC,kBAAAA,CAAmBC,WAAWlC,KAAAA,CAAAA;AACtC,UAAA;AACA,UAAA,MAAMoF,aAAAA,GAAgB1E,iBAAAA,CAAkBY,IAAAA,CAAKX,KAAAA,EAAOX,KAAAA,CAAAA;AAEpD,UAAA,IAAI4D,WAAWnE,KAAAA,EAAO;AACpBoE,YAAAA,MAAAA,CAAOpE,KAAAA,CAAM,CAAA,qBAAA,EAAwBgC,KAAAA,CAAAA,6CAAAA,CAAAA,EAAsD;AACzFtB,cAAAA,WAAAA,EAAaH,KAAAA,CAAMG;aACrB,CAAA;AACF,UAAA;AAEA,UAAA,MAAMwE,SAAAA,GAAY;AAChB,YAAA,GAAGtD,cAAcC,IAAAA,CAAAA;YACjBX,KAAAA,EAAOyE;AACT,WAAA;AACA,UAAA,IAAIxB,WAAWjE,mBAAAA,EAAqB;AAClC,YAAA,OAAOwD,sBAAAA,CAAuBY,wBAAAA,EAA0B/D,KAAAA,EAAOyB,KAAAA,EAAO,cAAckD,SAAAA,CAAAA;AACtF,UAAA;AACA,UAAA,OAAOT,MAAMS,SAAAA,CAAAA;AACf,QAAA;AACF;AACF;GACF,CAAA;AACF;AArqBgBjB,MAAAA,CAAAA,qBAAAA,EAAAA,uBAAAA,CAAAA","file":"chunk-FA5ROGTS.js","sourcesContent":["/**\n * Prisma Workspace Extension\n *\n * Automatically injects workspaceId into ALL Prisma operations using\n * request-scoped context from AsyncLocalStorage:\n *\n * **Write operations** (create, createMany, update, upsert):\n * - Auto-populates `workspaceId`, `tenantId`, `createdBy`, `updatedBy`, `context` JSON\n *\n * **Read operations** (findMany, findFirst, findUnique, count, aggregate, groupBy):\n * - Auto-injects `workspaceId` into the `where` clause for workspace isolation\n *\n * **Delete operations** (delete, deleteMany):\n * - Auto-injects `workspaceId` into the `where` clause to prevent cross-workspace deletion\n *\n * **Update where clause** (update, updateMany):\n * - Auto-injects `workspaceId` into the `where` clause to prevent cross-workspace updates\n *\n * **How it works:**\n * 1. The GraphQL server's buildContext extracts workspaceId from x-workspace-id header\n * 2. The workspace context store (AsyncLocalStorage) holds the current request's workspace info\n * 3. This Prisma extension intercepts ALL operations and auto-injects workspaceId\n *\n * **What gets auto-populated on writes:**\n * - `workspaceId` field (String or String?) - set from context if not explicitly provided\n * - `context` field (Json) - merged with workspace/actor info if not explicitly provided\n * - `tenantId` field (String or String?) - set from context if not explicitly provided\n * - `createdBy` / `updatedBy` fields - set from actor context if not explicitly provided\n *\n * **What gets auto-injected on reads/updates/deletes:**\n * - `workspaceId` in the `where` clause - ensures queries only access data within the workspace\n *\n * **Opt-out:**\n * - Explicitly providing `workspaceId` in the where/data will override auto-injection\n * - Pass `_skipWorkspaceInjection: true` in the query args to skip entirely\n * - Set `enableReadIsolation: false` in config to disable read-side injection only\n * - Add model names to `excludeModels` to skip specific models\n *\n * @module prisma/workspace-extension\n * @category Database\n */\n\nimport { AsyncLocalStorage } from 'node:async_hooks';\nimport { logger } from '../logger/index.js';\nimport type { InputJsonValue } from './context.js';\n\n// ============================================================================\n// Workspace Context Store (AsyncLocalStorage)\n// ============================================================================\n\n/**\n * Workspace context for the current request scope\n */\nexport interface WorkspaceContext {\n /** Workspace ID (from x-workspace-id header) */\n workspaceId?: string;\n /** Tenant ID (from x-tenant-id header or derived from workspace) */\n tenantId?: string;\n /** Actor ID (user/service/app performing the operation) */\n actorId?: string;\n /** Actor type (user, app, service, super_admin) */\n actorType?: string;\n /** Organization ID */\n organizationId?: string;\n /** Project ID */\n projectId?: string;\n /** App ID */\n appId?: string;\n /** On behalf of actor ID (for consent-based delegation) */\n onBehalfOf?: string;\n}\n\n/**\n * AsyncLocalStorage for workspace context\n * This is separate from the SDK's general ContextManager to allow\n * fine-grained control over workspace-specific context propagation.\n */\nconst workspaceContextStore = new AsyncLocalStorage<WorkspaceContext>();\n\n/**\n * Fallback context for environments where AsyncLocalStorage.enterWith()\n * doesn't propagate across async boundaries (e.g., Bun + GraphQL Yoga).\n *\n * IMPORTANT: This is NOT request-isolated — it's a module-level singleton.\n * It works for single-request-at-a-time scenarios but could race under\n * concurrent requests. The ALS is the primary mechanism; this is a fallback.\n */\nlet fallbackContext: WorkspaceContext | undefined;\n\n/**\n * Set workspace context for the current async scope.\n * Call this in your GraphQL context builder or middleware.\n *\n * Uses AsyncLocalStorage.enterWith() as the primary mechanism,\n * with a module-level fallback for runtimes where enterWith()\n * doesn't propagate through all async chains (e.g., Bun).\n *\n * @param context - The workspace context for this request\n *\n * @example\n * ```typescript\n * // In your server's buildContext:\n * import { setWorkspaceContext } from '@burdenoff/be-sdk/prisma';\n *\n * buildContext: async (defaultContext) => {\n * setWorkspaceContext({\n * workspaceId: defaultContext.workspace?.id,\n * tenantId: defaultContext.tenant?.id,\n * actorId: defaultContext.actor?.id,\n * actorType: defaultContext.actor?.type,\n * organizationId: defaultContext.organization?.id,\n * });\n * return defaultContext;\n * }\n * ```\n */\nexport function setWorkspaceContext(context: WorkspaceContext): void {\n workspaceContextStore.enterWith(context);\n fallbackContext = context;\n}\n\n/**\n * Get the current workspace context from AsyncLocalStorage.\n * Falls back to module-level context if ALS returns undefined\n * (can happen in Bun where enterWith() doesn't propagate through\n * some async chains like GraphQL Yoga's execution pipeline).\n *\n * @returns The current workspace context, or undefined if not set\n */\nexport function getWorkspaceContext(): WorkspaceContext | undefined {\n return workspaceContextStore.getStore() ?? fallbackContext;\n}\n\n/**\n * Run a function with a specific workspace context.\n * The context is isolated to this execution and its children.\n *\n * @param context - The workspace context\n * @param fn - The function to run\n * @returns The result of the function\n *\n * @example\n * ```typescript\n * const result = await withWorkspaceContext(\n * { workspaceId: 'ws-123', actorId: 'user-456' },\n * async () => {\n * // All Prisma operations in here will auto-inject workspaceId\n * return await prisma.tag.create({ data: { name: 'test' } });\n * }\n * );\n * ```\n */\nexport async function withWorkspaceContext<T>(context: WorkspaceContext, fn: () => Promise<T>): Promise<T> {\n return workspaceContextStore.run(context, fn);\n}\n\n/**\n * Run a synchronous function with a specific workspace context.\n */\nexport function withWorkspaceContextSync<T>(context: WorkspaceContext, fn: () => T): T {\n return workspaceContextStore.run(context, fn);\n}\n\n// ============================================================================\n// Extension Configuration\n// ============================================================================\n\n/**\n * Configuration for the workspace extension\n */\nexport interface WorkspaceExtensionConfig {\n /**\n * Enable automatic workspaceId injection on create/update\n * @default true\n */\n enabled?: boolean;\n\n /**\n * Enable automatic workspaceId injection on read operations\n * (findMany, findFirst, findUnique, findFirstOrThrow, findUniqueOrThrow,\n * count, aggregate, groupBy)\n *\n * When enabled, every read query automatically includes `workspaceId`\n * in the `where` clause, preventing cross-workspace data leakage.\n *\n * @default true\n */\n enableReadIsolation?: boolean;\n\n /**\n * Enable automatic workspaceId injection on delete operations\n * (delete, deleteMany)\n *\n * When enabled, every delete operation automatically includes `workspaceId`\n * in the `where` clause, preventing cross-workspace deletion.\n *\n * @default true\n */\n enableDeleteIsolation?: boolean;\n\n /**\n * Enable automatic workspaceId injection into update/updateMany `where` clauses.\n *\n * When enabled, update operations automatically include `workspaceId`\n * in the `where` clause in addition to the `data` injection,\n * preventing cross-workspace updates.\n *\n * @default true\n */\n enableUpdateWhereIsolation?: boolean;\n\n /**\n * Automatically populate the `context` JSON field with workspace/actor info\n * @default true\n */\n populateContextJson?: boolean;\n\n /**\n * Automatically populate `createdBy` field on create operations\n * @default true\n */\n populateCreatedBy?: boolean;\n\n /**\n * Automatically populate `updatedBy` field on update operations\n * @default true\n */\n populateUpdatedBy?: boolean;\n\n /**\n * Automatically populate `tenantId` field from context\n * @default false (tenantId is typically derived from workspaceId at the DB level)\n */\n populateTenantId?: boolean;\n\n /**\n * Automatically populate the `onBehalfOf` field on create operations\n * (consent-based delegation tracking — defaults to the acting actor when no\n * delegation is present).\n *\n * Unlike `populateContextJson`/`populateCreatedBy`/`populateUpdatedBy`, this\n * has no per-model opt-out other than `excludeModels` (which also disables\n * RLS GUC tagging and isolation for that model). Set to `false` for services\n * whose Prisma models don't carry an `onBehalfOf` column — otherwise every\n * create on those models throws `Unknown argument onBehalfOf` from Prisma's\n * client-side validation.\n *\n * @default true\n */\n populateOnBehalfOf?: boolean;\n\n /**\n * Models to exclude from auto-injection (both reads and writes).\n * Use this for models that intentionally don't have workspaceId.\n *\n * Common exclusions: system tables, infra tables, global reference data.\n *\n * @default []\n */\n excludeModels?: string[];\n\n /**\n * Models to exclude from read isolation only.\n * These models will still get write-side injection (workspaceId on create)\n * but reads will NOT have workspaceId auto-injected into `where`.\n *\n * Use this for child/join tables where workspace scoping is inherited\n * through parent relations, or for models queried by ID that don't\n * have a workspaceId column.\n *\n * @default []\n */\n excludeModelsFromReadIsolation?: string[];\n\n /**\n * When true, throws an error if workspaceId is missing from context\n * for any non-excluded model operation. This prevents silent\n * workspace-unscoped queries that could leak data across workspaces.\n *\n * When false, operations without workspace context proceed without\n * workspaceId injection (legacy behavior).\n *\n * @default true\n */\n strictMode?: boolean;\n\n /**\n * Operations that are allowed without workspace context even in strict mode.\n * Use `Model.operation` format (e.g., `['Workspace.create', 'RevokedToken.findMany']`).\n *\n * Valid operation names: create, createMany, createManyAndReturn, update, updateMany,\n * upsert, findMany, findFirst, findFirstOrThrow, findUnique, findUniqueOrThrow,\n * count, aggregate, groupBy, delete, deleteMany.\n *\n * @default []\n */\n allowedUnguardedOperations?: string[];\n\n /**\n * Log injection events (useful for debugging)\n * @default false\n */\n debug?: boolean;\n\n /**\n * Tag the PostgreSQL connection with workspace attribution for pg_stat_activity visibility.\n *\n * When enabled, the first DB operation per workspace context sets:\n * `application_name = 'svc=<SERVICE_NAME>;ws=<workspaceId>'`\n *\n * This makes workspace-level query attribution visible in pg_stat_activity,\n * pg_locks, auto_explain, and monitoring tools without any schema changes.\n * Subsequent operations in the same request are deduplicated via WeakSet,\n * costing ~0 overhead after the first round-trip per request context.\n *\n * NOTE: This is a session-level SET so attribution may drift across ops\n * that reuse the same pooled connection from different requests. Use for\n * aggregate observability, not per-query forensics.\n *\n * @default false\n */\n enableApplicationNameTagging?: boolean;\n\n /**\n * Set the `app.workspace_id` GUC for Row Level Security enforcement.\n *\n * When enabled, the first DB operation per workspace context executes:\n * `SET app.workspace_id = '<workspaceId>'`\n *\n * RLS policies using `current_setting('app.workspace_id', true)` then filter\n * rows by workspace, providing a defense-in-depth backstop to the application-\n * layer workspaceId injection in the WHERE clause.\n *\n * Pair with migrations that run per table:\n * `ALTER TABLE t ENABLE ROW LEVEL SECURITY;`\n * `CREATE POLICY ws_isolation ON t\n * USING (workspace_id = current_setting('app.workspace_id', true))\n * WITH CHECK (workspace_id = current_setting('app.workspace_id', true));`\n *\n * Fail-closed semantics: if the GUC is unset (NULL from missing_ok=true),\n * `workspace_id = NULL` is always false, so RLS returns no rows — leaking\n * nothing rather than everything.\n *\n * NOTE: Uses session-level SET (safe without a pooler or with session-mode\n * pooling). Upgrade to SET LOCAL inside `$transaction` when PgBouncer\n * transaction-mode pooling is enabled (Phase 3b).\n *\n * @default false\n */\n enableRlsGucTagging?: boolean;\n}\n\n/**\n * Default configuration. Exported so consumers/tests can spread over the\n * real defaults (`{ ...defaultWorkspaceExtensionConfig, populateOnBehalfOf: false }`)\n * instead of re-declaring every field.\n */\nexport const defaultWorkspaceExtensionConfig: Required<WorkspaceExtensionConfig> = {\n enabled: true,\n enableReadIsolation: true,\n enableDeleteIsolation: true,\n enableUpdateWhereIsolation: true,\n populateContextJson: true,\n populateCreatedBy: true,\n populateUpdatedBy: true,\n populateTenantId: false,\n populateOnBehalfOf: true,\n excludeModels: [],\n excludeModelsFromReadIsolation: [],\n strictMode: true,\n allowedUnguardedOperations: [],\n debug: false,\n enableApplicationNameTagging: false,\n enableRlsGucTagging: false,\n};\n\n// ============================================================================\n// Data Injection Helpers\n// ============================================================================\n\n/**\n * Check if a field exists in the data object (including being set to null/undefined explicitly)\n */\nfunction hasField(data: Record<string, unknown>, field: string): boolean {\n return field in data;\n}\n\n/**\n * Inject workspace-related fields into create data.\n *\n * Exported (alongside `injectWhereWorkspaceId`) so consumers can unit-test\n * exactly what a given `WorkspaceExtensionConfig` injects for their own\n * Prisma schema — in particular, to verify `populateOnBehalfOf: false` /\n * `populateContextJson: false` actually suppress `onBehalfOf`/`context`\n * before wiring the extension against models that don't have those columns.\n */\nexport function injectCreateFields(\n data: Record<string, unknown>,\n wsCtx: WorkspaceContext,\n config: Required<WorkspaceExtensionConfig>\n): Record<string, unknown> {\n const injected = { ...data };\n\n // Inject workspaceId if not already provided\n if (wsCtx.workspaceId && !hasField(injected, 'workspaceId')) {\n injected['workspaceId'] = wsCtx.workspaceId;\n }\n\n // Inject tenantId if configured and not already provided\n if (config.populateTenantId && wsCtx.tenantId && !hasField(injected, 'tenantId')) {\n injected['tenantId'] = wsCtx.tenantId;\n }\n\n // Inject createdBy if configured and not already provided\n if (config.populateCreatedBy && wsCtx.actorId && !hasField(injected, 'createdBy')) {\n injected['createdBy'] = wsCtx.actorId;\n }\n\n // Inject updatedBy on create as well (initial value)\n if (config.populateUpdatedBy && wsCtx.actorId && !hasField(injected, 'updatedBy')) {\n injected['updatedBy'] = wsCtx.actorId;\n }\n\n // Inject onBehalfOf (for consent-based delegation tracking)\n // If onBehalfOf is in context (from consent), use it; otherwise defaults to actorId (self-action)\n if (config.populateOnBehalfOf && wsCtx.onBehalfOf && !hasField(injected, 'onBehalfOf')) {\n injected['onBehalfOf'] = wsCtx.onBehalfOf;\n } else if (config.populateOnBehalfOf && wsCtx.actorId && !hasField(injected, 'onBehalfOf')) {\n // Default to actorId if no delegation (self-action)\n injected['onBehalfOf'] = wsCtx.actorId;\n }\n\n // Populate context JSON field\n if (config.populateContextJson && !hasField(injected, 'context')) {\n const contextJson = buildContextJsonFromWorkspaceContext(wsCtx);\n if (contextJson) {\n injected['context'] = contextJson;\n }\n }\n\n return injected;\n}\n\n/**\n * Inject workspace-related fields into update data\n */\nfunction injectUpdateFields(\n data: Record<string, unknown>,\n wsCtx: WorkspaceContext,\n config: Required<WorkspaceExtensionConfig>\n): Record<string, unknown> {\n const injected = { ...data };\n\n // Inject updatedBy if configured and not already provided\n if (config.populateUpdatedBy && wsCtx.actorId && !hasField(injected, 'updatedBy')) {\n injected['updatedBy'] = wsCtx.actorId;\n }\n\n // Note: We intentionally do NOT auto-inject workspaceId on updates\n // because updates target existing records (workspaceId is immutable after creation)\n // and changing it would be a data integrity issue.\n\n return injected;\n}\n\n/**\n * Inject workspaceId into a where clause.\n * Only injects if workspaceId is available in context and not already present in where.\n *\n * For operations that may not have a where clause (e.g., findMany without filters),\n * creates a new where object with just workspaceId.\n */\nfunction injectWhereClause(\n where: Record<string, unknown> | undefined,\n wsCtx: WorkspaceContext\n): Record<string, unknown> | undefined {\n if (!wsCtx.workspaceId) return where;\n\n if (!where) {\n // No where clause exists, create one with just workspaceId\n return { workspaceId: wsCtx.workspaceId };\n }\n\n // Only inject if not already present\n if (!hasField(where, 'workspaceId')) {\n return { ...where, workspaceId: wsCtx.workspaceId };\n }\n\n return where;\n}\n\n/**\n * Build context JSON from workspace context\n */\nfunction buildContextJsonFromWorkspaceContext(wsCtx: WorkspaceContext): InputJsonValue | undefined {\n const context: Record<string, string> = {};\n\n if (wsCtx.workspaceId) context['workspaceId'] = wsCtx.workspaceId;\n if (wsCtx.actorId) context['userId'] = wsCtx.actorId;\n if (wsCtx.organizationId) context['organizationId'] = wsCtx.organizationId;\n if (wsCtx.projectId) context['projectId'] = wsCtx.projectId;\n if (wsCtx.appId) context['appId'] = wsCtx.appId;\n\n return Object.keys(context).length > 0 ? context : undefined;\n}\n\n/**\n * Inject workspaceId into where clause for read/update/delete operations.\n * This is a utility function exported for services that want to manually\n * add workspace scoping to their queries.\n *\n * @param where - The existing where clause\n * @param wsCtx - The workspace context (or auto-detected from AsyncLocalStorage)\n * @returns The where clause with workspaceId injected if not already present\n *\n * @example\n * ```typescript\n * import { injectWhereWorkspaceId, getWorkspaceContext } from '@burdenoff/be-sdk/prisma';\n *\n * const wsCtx = getWorkspaceContext();\n * const where = injectWhereWorkspaceId({ status: 'ACTIVE' }, wsCtx);\n * // Result: { status: 'ACTIVE', workspaceId: 'ws-123' }\n * ```\n */\nexport function injectWhereWorkspaceId(\n where: Record<string, unknown> | undefined,\n wsCtx?: WorkspaceContext\n): Record<string, unknown> | undefined {\n const ctx = wsCtx ?? getWorkspaceContext();\n if (!where || !ctx?.workspaceId) return where;\n\n // Only inject if not already present\n if (!hasField(where, 'workspaceId')) {\n return { ...where, workspaceId: ctx.workspaceId };\n }\n\n return where;\n}\n\n/**\n * Remove the _skipWorkspaceInjection flag from args before passing to Prisma.\n * Using a dedicated function avoids ESLint unused-variable warnings from destructuring.\n */\nfunction stripSkipFlag<T extends Record<string, unknown>>(args: T): Omit<T, '_skipWorkspaceInjection'> {\n const cleaned = { ...args };\n delete (cleaned as Record<string, unknown>)['_skipWorkspaceInjection'];\n return cleaned;\n}\n\n/**\n * Check if a model should be excluded from read isolation.\n * A model is excluded if it's in excludeModels OR excludeModelsFromReadIsolation.\n */\nfunction isExcludedFromReadIsolation(model: string, config: Required<WorkspaceExtensionConfig>): boolean {\n return config.excludeModels.includes(model) || config.excludeModelsFromReadIsolation.includes(model);\n}\n\n// ============================================================================\n// Strict Mode Enforcement\n// ============================================================================\n\n/**\n * Enforce strict mode: throw if workspace context is missing and the operation\n * is not explicitly allowed to run without it.\n *\n * @returns true if the operation should proceed without workspace injection (non-strict or allowed)\n * @throws Error if strict mode is enabled and the operation is not allowed\n */\nfunction enforceStrictMode(\n model: string,\n operation: string,\n wsCtx: WorkspaceContext | undefined,\n config: Required<WorkspaceExtensionConfig>\n): void {\n // If workspace context has a workspaceId, nothing to enforce\n if (wsCtx?.workspaceId) return;\n\n // If strict mode is off, allow silently\n if (!config.strictMode) return;\n\n // Check if this specific operation is allowed without workspace context\n const opKey = `${model}.${operation}`;\n if (config.allowedUnguardedOperations.includes(opKey)) return;\n\n // Strict mode violation — throw\n throw new Error(\n `[WorkspaceExtension] Workspace context required for ${model}.${operation}. ` +\n `No workspaceId found in request context. To bypass, either: ` +\n `(1) add \"${model}\" to excludeModels, ` +\n `(2) add \"${opKey}\" to allowedUnguardedOperations, or ` +\n `(3) pass _skipWorkspaceInjection: true in the query args.`\n );\n}\n\n// ============================================================================\n// Prisma Extension\n// ============================================================================\n\n/**\n * Standard args shape for operations with a `where` clause\n */\ninterface WhereArgs {\n where?: Record<string, unknown>;\n _skipWorkspaceInjection?: boolean;\n [key: string]: unknown;\n}\n\n/**\n * Standard handler params from Prisma $extends\n */\ninterface ExtensionHandlerParams<TArgs> {\n model: string;\n args: TArgs;\n query: (args: unknown) => Promise<unknown>;\n}\n\n/**\n * Add workspace extension to a Prisma client.\n *\n * This extension provides comprehensive workspace isolation by automatically\n * injecting workspaceId into ALL Prisma operations:\n *\n * **Writes**: Auto-populates workspaceId, tenantId, createdBy, updatedBy, context JSON\n * **Reads**: Auto-injects workspaceId into where clause (findMany, findFirst, etc.)\n * **Updates**: Auto-injects workspaceId into where clause + updatedBy into data\n * **Deletes**: Auto-injects workspaceId into where clause\n *\n * **Chain order matters**: Apply this extension AFTER the graph extension\n * (handled automatically by createDatabaseClient).\n *\n * @param baseClient - The Prisma client to extend\n * @param config - Extension configuration\n * @returns Extended Prisma client with workspace auto-injection\n *\n * @example\n * ```typescript\n * import { PrismaClient } from './generated/prisma/client.js';\n * import { addWorkspaceExtension } from '@burdenoff/be-sdk/prisma';\n *\n * const baseClient = new PrismaClient({ adapter });\n * const client = addWorkspaceExtension(baseClient, {\n * populateContextJson: true,\n * populateCreatedBy: true,\n * enableReadIsolation: true,\n * debug: process.env.NODE_ENV === 'development',\n * excludeModels: ['CircuitBreakerState', 'SchedulerState'],\n * excludeModelsFromReadIsolation: ['Permission', 'RbacResourceType'],\n * });\n * ```\n */\n// ============================================================================\n// Connection Tagging (Phase 0.2)\n// ============================================================================\n\n/** Minimal Prisma raw-exec surface needed for SET application_name */\ntype RawPrismaForTagging = {\n $executeRawUnsafe: (query: string, ...values: unknown[]) => Promise<number>;\n};\n\n/**\n * WeakSet of contexts that have already had the connection tagged this request.\n * WorkspaceContext objects live only for the duration of a request, so entries\n * are automatically GC'd when the context goes out of scope — no manual cleanup.\n */\nconst taggedContexts = new WeakSet<WorkspaceContext>();\n\n/**\n * Tag the current Postgres connection with workspace attribution (once per context).\n * Sets `application_name = 'svc=<name>;ws=<workspaceId>'` at the session level.\n * Non-fatal: tagging failures are swallowed so the main operation still proceeds.\n *\n * @internal Exported for unit testing only — do not call from product code.\n */\nexport async function maybeTagConnection(rawPrisma: RawPrismaForTagging, wsCtx: WorkspaceContext): Promise<void> {\n if (taggedContexts.has(wsCtx)) return;\n taggedContexts.add(wsCtx);\n // Strip non-safe chars; workspace IDs are UUIDs/CUIDs, service names are kebab-case\n const safeSvc = (process.env['SERVICE_NAME'] ?? 'svc').replace(/[^a-zA-Z0-9\\-_]/g, '');\n const safeWs = (wsCtx.workspaceId ?? '').replace(/[^a-zA-Z0-9\\-_]/g, '');\n const tag = `svc=${safeSvc};ws=${safeWs}`;\n try {\n await rawPrisma.$executeRawUnsafe(`SET application_name = '${tag}'`);\n } catch {\n // Retry on the next operation if this one failed\n taggedContexts.delete(wsCtx);\n }\n}\n\n// ============================================================================\n// RLS GUC Tagging (Phase 3)\n// ============================================================================\n\n/**\n * WeakSet of contexts that have already had the RLS GUC set this request.\n */\nconst rlsTaggedContexts = new WeakSet<WorkspaceContext>();\n\n/**\n * Set `app.workspace_id` GUC for RLS enforcement (once per context, session-level).\n *\n * When set, RLS policies using `current_setting('app.workspace_id', true)` filter\n * rows to the current workspace. Non-fatal: failures are swallowed and retried on\n * the next operation via WeakSet entry removal.\n *\n * NOT used by the extension's operation handlers below (see\n * `runOperationWithRlsGuc`) — session-level `SET` is unsafe once traffic is routed\n * through PgBouncer in transaction-pooling mode (see that function's doc comment\n * for the full incident writeup, BOFF-5488). Kept as a standalone export, still\n * unit tested, for any caller that genuinely runs on an unpooled/session-pooled\n * connection where session-level `SET` is sufficient.\n *\n * @internal Exported for unit testing only — do not call from product code.\n */\nexport async function maybeSetRlsGuc(rawPrisma: RawPrismaForTagging, wsCtx: WorkspaceContext): Promise<void> {\n if (rlsTaggedContexts.has(wsCtx)) return;\n rlsTaggedContexts.add(wsCtx);\n // Allow alphanumeric, hyphens, underscores — CUID/UUID safe, prevents SQL injection\n const safeWs = (wsCtx.workspaceId ?? '').replace(/[^a-zA-Z0-9\\-_]/g, '');\n try {\n await rawPrisma.$executeRawUnsafe(`SET app.workspace_id = '${safeWs}'`);\n } catch {\n // Retry on the next operation if this one failed\n rlsTaggedContexts.delete(wsCtx);\n }\n}\n\n/**\n * A Prisma interactive-transaction client (`tx` inside `$transaction(async (tx) =>\n * …)`), typed with just enough surface for `runOperationWithRlsGuc`: raw SQL\n * execution, plus one delegate per model keyed by its Prisma Client property name\n * (e.g. `customer`, `driver`). The index signature is `unknown` (not a concrete\n * delegate shape) because this helper is generic across every model in the schema\n * — callers narrow and verify the specific delegate/method they need at runtime.\n */\ntype PrismaTxForRlsGuc = {\n $executeRawUnsafe: (query: string, ...values: unknown[]) => Promise<number>;\n [modelClientProperty: string]: unknown;\n};\n\n/** Minimal Prisma client surface needed to open an interactive transaction. */\ntype RawPrismaForRlsTransaction = {\n $transaction: <TResult>(fn: (tx: PrismaTxForRlsGuc) => Promise<TResult>) => Promise<TResult>;\n};\n\n/**\n * Prisma DMMF model name (e.g. `Customer`) -> Prisma Client delegate property\n * (e.g. `customer`). Matches Prisma's own client-generation rule: lower-case the\n * first character, leave the rest untouched.\n */\nfunction modelToClientProperty(model: string): string {\n return model.length > 0 ? model.charAt(0).toLowerCase() + model.slice(1) : model;\n}\n\n/**\n * Run a single Prisma operation with `app.workspace_id` set as a\n * **transaction-scoped** (`SET LOCAL`) GUC immediately ahead of it, so Postgres\n * RLS policies using `current_setting('app.workspace_id', true)` see the right\n * value for both the `USING` (read) and `WITH CHECK` (write) clauses.\n *\n * Session-level `SET` (`maybeSetRlsGuc` above, the original Phase 3\n * implementation) is NOT safe once traffic goes through PgBouncer in\n * **transaction pooling mode** — the mode configured on all four\n * `boff-pg-{global,wspace}-{alpha,prod}-cin` servers' built-in PgBouncer (see\n * infra-specs/current-architecture/02-database-postgres-age.md). PgBouncer hands\n * the physical backend connection back to the pool after every standalone\n * statement/implicit transaction, so a `SET` executed by one statement is not\n * guaranteed visible to the very next one, even over what looks like the same\n * logical client connection.\n *\n * This was exactly BOFF-5488: `wspace-movethewheels-svc`'s RLS Phase 3b (FORCE\n * ROW LEVEL SECURITY + a non-owner runtime role, `wspace_movethewheels_app`,\n * pointed at the pooled `:6432` connection) made the `ws_isolation` policy bind\n * for real, but the session-level `SET` from `maybeSetRlsGuc` was landing on a\n * different pooled backend connection than the write that followed it — so every\n * write failed `WITH CHECK` (`new row violates row-level security policy`) and\n * every read matched zero rows.\n *\n * A Prisma **interactive transaction** (`$transaction(async (tx) => …)`) pins one\n * physical connection for the callback's full duration — PgBouncer sees a single\n * unbroken `BEGIN … COMMIT` and cannot reassign the backend mid-transaction — so\n * `SET LOCAL` inside it is guaranteed visible to the operation issued right after\n * it in the same callback. Safe under transaction-mode pooling, session-mode\n * pooling, and with no pooler in front of Postgres at all. The extra round trip\n * (one interactive transaction instead of one direct call) only applies to\n * services that opt into `enableRlsGucTagging` — off by default.\n *\n * @internal Exported for unit testing only — do not call from product code.\n */\nexport async function runOperationWithRlsGuc<TResult>(\n rootClient: RawPrismaForRlsTransaction,\n wsCtx: WorkspaceContext,\n model: string,\n operation: string,\n args: unknown\n): Promise<TResult> {\n const safeWs = (wsCtx.workspaceId ?? '').replace(/[^a-zA-Z0-9\\-_]/g, '');\n const clientProperty = modelToClientProperty(model);\n return rootClient.$transaction(async (tx) => {\n await tx.$executeRawUnsafe(`SET LOCAL app.workspace_id = '${safeWs}'`);\n // `tx[clientProperty]` is typed `unknown` (see PrismaTxForRlsGuc) because this\n // helper is generic across every model; narrow to the minimal callable shape\n // needed and verify at runtime before invoking rather than trusting a cast.\n const delegate = tx[clientProperty] as Record<string, (opArgs: unknown) => Promise<TResult>> | undefined;\n const method = delegate?.[operation];\n if (typeof method !== 'function') {\n throw new Error(\n `[WorkspaceExtension] Unable to resolve ${model}.${operation} (client property \"${clientProperty}\") ` +\n 'on the interactive-transaction client for RLS GUC tagging.'\n );\n }\n return method(args);\n });\n}\n\nexport function addWorkspaceExtension<T>(baseClient: T, config?: WorkspaceExtensionConfig): T {\n const fullConfig: Required<WorkspaceExtensionConfig> = {\n ...defaultWorkspaceExtensionConfig,\n ...config,\n };\n\n if (!fullConfig.enabled) {\n logger.info('[WorkspaceExtension] Extension disabled by configuration');\n return baseClient;\n }\n\n // Capture the unwrapped client for connection tagging (pre-extension, avoids recursion)\n const rawPrisma = baseClient as unknown as RawPrismaForTagging;\n // Same unwrapped client, typed for the interactive-transaction RLS GUC path\n // (see runOperationWithRlsGuc) — separate cast so maybeTagConnection/\n // maybeSetRlsGuc's narrower RawPrismaForTagging type is untouched.\n const rawPrismaForTransactions = baseClient as unknown as RawPrismaForRlsTransaction;\n\n // Type assertion for Prisma client $extends\n const prismaClient = baseClient as { $extends: (args: unknown) => T };\n\n logger.info('[WorkspaceExtension] Workspace extension enabled', {\n populateContextJson: fullConfig.populateContextJson,\n populateCreatedBy: fullConfig.populateCreatedBy,\n populateUpdatedBy: fullConfig.populateUpdatedBy,\n populateTenantId: fullConfig.populateTenantId,\n enableReadIsolation: fullConfig.enableReadIsolation,\n enableDeleteIsolation: fullConfig.enableDeleteIsolation,\n enableUpdateWhereIsolation: fullConfig.enableUpdateWhereIsolation,\n strictMode: fullConfig.strictMode,\n excludeModels: fullConfig.excludeModels,\n excludeModelsFromReadIsolation: fullConfig.excludeModelsFromReadIsolation,\n allowedUnguardedOperations: fullConfig.allowedUnguardedOperations,\n enableApplicationNameTagging: fullConfig.enableApplicationNameTagging,\n enableRlsGucTagging: fullConfig.enableRlsGucTagging,\n });\n\n return prismaClient.$extends({\n query: {\n $allModels: {\n // ================================================================\n // WRITE OPERATIONS - inject workspaceId into data\n // ================================================================\n\n async create({\n model,\n args,\n query,\n }: ExtensionHandlerParams<{\n data: Record<string, unknown>;\n _skipWorkspaceInjection?: boolean;\n [key: string]: unknown;\n }>) {\n // Skip if model is excluded or injection is explicitly skipped\n if (fullConfig.excludeModels.includes(model) || args._skipWorkspaceInjection) {\n return query(stripSkipFlag(args));\n }\n\n const wsCtx = getWorkspaceContext();\n enforceStrictMode(model, 'create', wsCtx, fullConfig);\n if (!wsCtx?.workspaceId) {\n return query(args);\n }\n\n if (fullConfig.enableApplicationNameTagging) {\n await maybeTagConnection(rawPrisma, wsCtx);\n }\n // Inject fields into data\n const injectedData = injectCreateFields(args.data, wsCtx, fullConfig);\n\n if (fullConfig.debug) {\n const injectedKeys = Object.keys(injectedData).filter((k) => !(k in args.data));\n if (injectedKeys.length > 0) {\n logger.debug(`[WorkspaceExtension] ${model}.create - injected: ${injectedKeys.join(', ')}`, {\n workspaceId: wsCtx.workspaceId,\n actorId: wsCtx.actorId,\n });\n }\n }\n\n const finalArgs = {\n ...stripSkipFlag(args),\n data: injectedData,\n };\n if (fullConfig.enableRlsGucTagging) {\n return runOperationWithRlsGuc(rawPrismaForTransactions, wsCtx, model, 'create', finalArgs);\n }\n return query(finalArgs);\n },\n\n async createMany({\n model,\n args,\n query,\n }: ExtensionHandlerParams<{\n data: Record<string, unknown> | Record<string, unknown>[];\n _skipWorkspaceInjection?: boolean;\n [key: string]: unknown;\n }>) {\n if (fullConfig.excludeModels.includes(model) || args._skipWorkspaceInjection) {\n return query(stripSkipFlag(args));\n }\n\n const wsCtx = getWorkspaceContext();\n enforceStrictMode(model, 'createMany', wsCtx, fullConfig);\n if (!wsCtx?.workspaceId) {\n return query(args);\n }\n\n if (fullConfig.enableApplicationNameTagging) {\n await maybeTagConnection(rawPrisma, wsCtx);\n }\n // Handle both single object and array\n const dataArray = Array.isArray(args.data) ? args.data : [args.data];\n const injectedData = dataArray.map((item) => injectCreateFields(item, wsCtx, fullConfig));\n\n const finalArgs = {\n ...stripSkipFlag(args),\n data: Array.isArray(args.data) ? injectedData : injectedData[0],\n };\n if (fullConfig.enableRlsGucTagging) {\n return runOperationWithRlsGuc(rawPrismaForTransactions, wsCtx, model, 'createMany', finalArgs);\n }\n return query(finalArgs);\n },\n\n async createManyAndReturn({\n model,\n args,\n query,\n }: ExtensionHandlerParams<{\n data: Record<string, unknown> | Record<string, unknown>[];\n _skipWorkspaceInjection?: boolean;\n [key: string]: unknown;\n }>) {\n if (fullConfig.excludeModels.includes(model) || args._skipWorkspaceInjection) {\n return query(stripSkipFlag(args));\n }\n\n const wsCtx = getWorkspaceContext();\n enforceStrictMode(model, 'createManyAndReturn', wsCtx, fullConfig);\n if (!wsCtx?.workspaceId) {\n return query(args);\n }\n\n if (fullConfig.enableApplicationNameTagging) {\n await maybeTagConnection(rawPrisma, wsCtx);\n }\n const dataArray = Array.isArray(args.data) ? args.data : [args.data];\n const injectedData = dataArray.map((item) => injectCreateFields(item, wsCtx, fullConfig));\n\n const finalArgs = {\n ...stripSkipFlag(args),\n data: Array.isArray(args.data) ? injectedData : injectedData[0],\n };\n if (fullConfig.enableRlsGucTagging) {\n return runOperationWithRlsGuc(rawPrismaForTransactions, wsCtx, model, 'createManyAndReturn', finalArgs);\n }\n return query(finalArgs);\n },\n\n // ================================================================\n // UPDATE OPERATIONS - inject updatedBy into data + workspaceId into where\n // ================================================================\n\n async update({\n model,\n args,\n query,\n }: ExtensionHandlerParams<{\n data: Record<string, unknown>;\n where?: Record<string, unknown>;\n _skipWorkspaceInjection?: boolean;\n [key: string]: unknown;\n }>) {\n if (fullConfig.excludeModels.includes(model) || args._skipWorkspaceInjection) {\n return query(stripSkipFlag(args));\n }\n\n const wsCtx = getWorkspaceContext();\n enforceStrictMode(model, 'update', wsCtx, fullConfig);\n if (!wsCtx?.workspaceId) {\n return query(args);\n }\n\n if (fullConfig.enableApplicationNameTagging) {\n await maybeTagConnection(rawPrisma, wsCtx);\n }\n const injectedData = injectUpdateFields(args.data, wsCtx, fullConfig);\n\n // Inject workspaceId into where clause for update isolation\n let injectedWhere = args.where;\n if (fullConfig.enableUpdateWhereIsolation && !isExcludedFromReadIsolation(model, fullConfig)) {\n injectedWhere = injectWhereClause(args.where, wsCtx);\n }\n\n if (fullConfig.debug) {\n const injectedDataKeys = Object.keys(injectedData).filter((k) => !(k in args.data));\n const whereChanged = injectedWhere !== args.where;\n if (injectedDataKeys.length > 0 || whereChanged) {\n logger.debug(\n `[WorkspaceExtension] ${model}.update - injected data: ${injectedDataKeys.join(', ')}${whereChanged ? ', where: workspaceId' : ''}`\n );\n }\n }\n\n const finalArgs = {\n ...stripSkipFlag(args),\n data: injectedData,\n where: injectedWhere,\n };\n if (fullConfig.enableRlsGucTagging) {\n return runOperationWithRlsGuc(rawPrismaForTransactions, wsCtx, model, 'update', finalArgs);\n }\n return query(finalArgs);\n },\n\n async updateMany({\n model,\n args,\n query,\n }: ExtensionHandlerParams<{\n data: Record<string, unknown>;\n where?: Record<string, unknown>;\n _skipWorkspaceInjection?: boolean;\n [key: string]: unknown;\n }>) {\n if (fullConfig.excludeModels.includes(model) || args._skipWorkspaceInjection) {\n return query(stripSkipFlag(args));\n }\n\n const wsCtx = getWorkspaceContext();\n enforceStrictMode(model, 'updateMany', wsCtx, fullConfig);\n if (!wsCtx?.workspaceId) {\n return query(args);\n }\n\n if (fullConfig.enableApplicationNameTagging) {\n await maybeTagConnection(rawPrisma, wsCtx);\n }\n const injectedData = injectUpdateFields(args.data, wsCtx, fullConfig);\n\n // Inject workspaceId into where clause for update isolation\n let injectedWhere = args.where;\n if (fullConfig.enableUpdateWhereIsolation && !isExcludedFromReadIsolation(model, fullConfig)) {\n injectedWhere = injectWhereClause(args.where, wsCtx);\n }\n\n const finalArgs = {\n ...stripSkipFlag(args),\n data: injectedData,\n where: injectedWhere,\n };\n if (fullConfig.enableRlsGucTagging) {\n return runOperationWithRlsGuc(rawPrismaForTransactions, wsCtx, model, 'updateMany', finalArgs);\n }\n return query(finalArgs);\n },\n\n async upsert({\n model,\n args,\n query,\n }: ExtensionHandlerParams<{\n create: Record<string, unknown>;\n update: Record<string, unknown>;\n where?: Record<string, unknown>;\n _skipWorkspaceInjection?: boolean;\n [key: string]: unknown;\n }>) {\n if (fullConfig.excludeModels.includes(model) || args._skipWorkspaceInjection) {\n return query(stripSkipFlag(args));\n }\n\n const wsCtx = getWorkspaceContext();\n enforceStrictMode(model, 'upsert', wsCtx, fullConfig);\n if (!wsCtx?.workspaceId) {\n return query(args);\n }\n\n if (fullConfig.enableApplicationNameTagging) {\n await maybeTagConnection(rawPrisma, wsCtx);\n }\n const injectedCreate = injectCreateFields(args.create, wsCtx, fullConfig);\n const injectedUpdate = injectUpdateFields(args.update, wsCtx, fullConfig);\n\n // Inject workspaceId into where clause for upsert isolation\n let injectedWhere = args.where;\n if (fullConfig.enableUpdateWhereIsolation && !isExcludedFromReadIsolation(model, fullConfig)) {\n injectedWhere = injectWhereClause(args.where, wsCtx);\n }\n\n const finalArgs = {\n ...stripSkipFlag(args),\n create: injectedCreate,\n update: injectedUpdate,\n where: injectedWhere,\n };\n if (fullConfig.enableRlsGucTagging) {\n return runOperationWithRlsGuc(rawPrismaForTransactions, wsCtx, model, 'upsert', finalArgs);\n }\n return query(finalArgs);\n },\n\n // ================================================================\n // READ OPERATIONS - inject workspaceId into where clause\n // ================================================================\n\n async findMany({ model, args, query }: ExtensionHandlerParams<WhereArgs>) {\n if (\n !fullConfig.enableReadIsolation ||\n isExcludedFromReadIsolation(model, fullConfig) ||\n args._skipWorkspaceInjection\n ) {\n return query(stripSkipFlag(args));\n }\n\n const wsCtx = getWorkspaceContext();\n enforceStrictMode(model, 'findMany', wsCtx, fullConfig);\n if (!wsCtx?.workspaceId) {\n return query(args);\n }\n\n if (fullConfig.enableApplicationNameTagging) {\n await maybeTagConnection(rawPrisma, wsCtx);\n }\n const injectedWhere = injectWhereClause(args.where, wsCtx);\n\n if (fullConfig.debug) {\n logger.debug(`[WorkspaceExtension] ${model}.findMany - injected workspaceId into where`, {\n workspaceId: wsCtx.workspaceId,\n });\n }\n\n const finalArgs = {\n ...stripSkipFlag(args),\n where: injectedWhere,\n };\n if (fullConfig.enableRlsGucTagging) {\n return runOperationWithRlsGuc(rawPrismaForTransactions, wsCtx, model, 'findMany', finalArgs);\n }\n return query(finalArgs);\n },\n\n async findFirst({ model, args, query }: ExtensionHandlerParams<WhereArgs>) {\n if (\n !fullConfig.enableReadIsolation ||\n isExcludedFromReadIsolation(model, fullConfig) ||\n args._skipWorkspaceInjection\n ) {\n return query(stripSkipFlag(args));\n }\n\n const wsCtx = getWorkspaceContext();\n enforceStrictMode(model, 'findFirst', wsCtx, fullConfig);\n if (!wsCtx?.workspaceId) {\n return query(args);\n }\n\n if (fullConfig.enableApplicationNameTagging) {\n await maybeTagConnection(rawPrisma, wsCtx);\n }\n const injectedWhere = injectWhereClause(args.where, wsCtx);\n\n if (fullConfig.debug) {\n logger.debug(`[WorkspaceExtension] ${model}.findFirst - injected workspaceId into where`, {\n workspaceId: wsCtx.workspaceId,\n });\n }\n\n const finalArgs = {\n ...stripSkipFlag(args),\n where: injectedWhere,\n };\n if (fullConfig.enableRlsGucTagging) {\n return runOperationWithRlsGuc(rawPrismaForTransactions, wsCtx, model, 'findFirst', finalArgs);\n }\n return query(finalArgs);\n },\n\n async findFirstOrThrow({ model, args, query }: ExtensionHandlerParams<WhereArgs>) {\n if (\n !fullConfig.enableReadIsolation ||\n isExcludedFromReadIsolation(model, fullConfig) ||\n args._skipWorkspaceInjection\n ) {\n return query(stripSkipFlag(args));\n }\n\n const wsCtx = getWorkspaceContext();\n enforceStrictMode(model, 'findFirstOrThrow', wsCtx, fullConfig);\n if (!wsCtx?.workspaceId) {\n return query(args);\n }\n\n if (fullConfig.enableApplicationNameTagging) {\n await maybeTagConnection(rawPrisma, wsCtx);\n }\n const injectedWhere = injectWhereClause(args.where, wsCtx);\n\n if (fullConfig.debug) {\n logger.debug(`[WorkspaceExtension] ${model}.findFirstOrThrow - injected workspaceId into where`, {\n workspaceId: wsCtx.workspaceId,\n });\n }\n\n const finalArgs = {\n ...stripSkipFlag(args),\n where: injectedWhere,\n };\n if (fullConfig.enableRlsGucTagging) {\n return runOperationWithRlsGuc(rawPrismaForTransactions, wsCtx, model, 'findFirstOrThrow', finalArgs);\n }\n return query(finalArgs);\n },\n\n async findUnique({ model, args, query }: ExtensionHandlerParams<WhereArgs>) {\n if (\n !fullConfig.enableReadIsolation ||\n isExcludedFromReadIsolation(model, fullConfig) ||\n args._skipWorkspaceInjection\n ) {\n return query(stripSkipFlag(args));\n }\n\n const wsCtx = getWorkspaceContext();\n enforceStrictMode(model, 'findUnique', wsCtx, fullConfig);\n if (!wsCtx?.workspaceId) {\n return query(args);\n }\n\n if (fullConfig.enableApplicationNameTagging) {\n await maybeTagConnection(rawPrisma, wsCtx);\n }\n // For findUnique, the where clause uses unique fields.\n // We inject workspaceId only if the where clause is a plain object\n // (compound unique keys with workspaceId are common and already include it).\n const injectedWhere = injectWhereClause(args.where, wsCtx);\n\n if (fullConfig.debug) {\n logger.debug(`[WorkspaceExtension] ${model}.findUnique - injected workspaceId into where`, {\n workspaceId: wsCtx.workspaceId,\n });\n }\n\n const finalArgs = {\n ...stripSkipFlag(args),\n where: injectedWhere,\n };\n if (fullConfig.enableRlsGucTagging) {\n return runOperationWithRlsGuc(rawPrismaForTransactions, wsCtx, model, 'findUnique', finalArgs);\n }\n return query(finalArgs);\n },\n\n async findUniqueOrThrow({ model, args, query }: ExtensionHandlerParams<WhereArgs>) {\n if (\n !fullConfig.enableReadIsolation ||\n isExcludedFromReadIsolation(model, fullConfig) ||\n args._skipWorkspaceInjection\n ) {\n return query(stripSkipFlag(args));\n }\n\n const wsCtx = getWorkspaceContext();\n enforceStrictMode(model, 'findUniqueOrThrow', wsCtx, fullConfig);\n if (!wsCtx?.workspaceId) {\n return query(args);\n }\n\n if (fullConfig.enableApplicationNameTagging) {\n await maybeTagConnection(rawPrisma, wsCtx);\n }\n const injectedWhere = injectWhereClause(args.where, wsCtx);\n\n if (fullConfig.debug) {\n logger.debug(`[WorkspaceExtension] ${model}.findUniqueOrThrow - injected workspaceId into where`, {\n workspaceId: wsCtx.workspaceId,\n });\n }\n\n const finalArgs = {\n ...stripSkipFlag(args),\n where: injectedWhere,\n };\n if (fullConfig.enableRlsGucTagging) {\n return runOperationWithRlsGuc(rawPrismaForTransactions, wsCtx, model, 'findUniqueOrThrow', finalArgs);\n }\n return query(finalArgs);\n },\n\n async count({ model, args, query }: ExtensionHandlerParams<WhereArgs>) {\n if (\n !fullConfig.enableReadIsolation ||\n isExcludedFromReadIsolation(model, fullConfig) ||\n args._skipWorkspaceInjection\n ) {\n return query(stripSkipFlag(args));\n }\n\n const wsCtx = getWorkspaceContext();\n enforceStrictMode(model, 'count', wsCtx, fullConfig);\n if (!wsCtx?.workspaceId) {\n return query(args);\n }\n\n if (fullConfig.enableApplicationNameTagging) {\n await maybeTagConnection(rawPrisma, wsCtx);\n }\n const injectedWhere = injectWhereClause(args.where, wsCtx);\n\n if (fullConfig.debug) {\n logger.debug(`[WorkspaceExtension] ${model}.count - injected workspaceId into where`, {\n workspaceId: wsCtx.workspaceId,\n });\n }\n\n const finalArgs = {\n ...stripSkipFlag(args),\n where: injectedWhere,\n };\n if (fullConfig.enableRlsGucTagging) {\n return runOperationWithRlsGuc(rawPrismaForTransactions, wsCtx, model, 'count', finalArgs);\n }\n return query(finalArgs);\n },\n\n async aggregate({ model, args, query }: ExtensionHandlerParams<WhereArgs>) {\n if (\n !fullConfig.enableReadIsolation ||\n isExcludedFromReadIsolation(model, fullConfig) ||\n args._skipWorkspaceInjection\n ) {\n return query(stripSkipFlag(args));\n }\n\n const wsCtx = getWorkspaceContext();\n enforceStrictMode(model, 'aggregate', wsCtx, fullConfig);\n if (!wsCtx?.workspaceId) {\n return query(args);\n }\n\n if (fullConfig.enableApplicationNameTagging) {\n await maybeTagConnection(rawPrisma, wsCtx);\n }\n const injectedWhere = injectWhereClause(args.where, wsCtx);\n\n if (fullConfig.debug) {\n logger.debug(`[WorkspaceExtension] ${model}.aggregate - injected workspaceId into where`, {\n workspaceId: wsCtx.workspaceId,\n });\n }\n\n const finalArgs = {\n ...stripSkipFlag(args),\n where: injectedWhere,\n };\n if (fullConfig.enableRlsGucTagging) {\n return runOperationWithRlsGuc(rawPrismaForTransactions, wsCtx, model, 'aggregate', finalArgs);\n }\n return query(finalArgs);\n },\n\n async groupBy({ model, args, query }: ExtensionHandlerParams<WhereArgs>) {\n if (\n !fullConfig.enableReadIsolation ||\n isExcludedFromReadIsolation(model, fullConfig) ||\n args._skipWorkspaceInjection\n ) {\n return query(stripSkipFlag(args));\n }\n\n const wsCtx = getWorkspaceContext();\n enforceStrictMode(model, 'groupBy', wsCtx, fullConfig);\n if (!wsCtx?.workspaceId) {\n return query(args);\n }\n\n if (fullConfig.enableApplicationNameTagging) {\n await maybeTagConnection(rawPrisma, wsCtx);\n }\n const injectedWhere = injectWhereClause(args.where, wsCtx);\n\n if (fullConfig.debug) {\n logger.debug(`[WorkspaceExtension] ${model}.groupBy - injected workspaceId into where`, {\n workspaceId: wsCtx.workspaceId,\n });\n }\n\n const finalArgs = {\n ...stripSkipFlag(args),\n where: injectedWhere,\n };\n if (fullConfig.enableRlsGucTagging) {\n return runOperationWithRlsGuc(rawPrismaForTransactions, wsCtx, model, 'groupBy', finalArgs);\n }\n return query(finalArgs);\n },\n\n // ================================================================\n // DELETE OPERATIONS - inject workspaceId into where clause\n // ================================================================\n\n async delete({ model, args, query }: ExtensionHandlerParams<WhereArgs>) {\n if (\n !fullConfig.enableDeleteIsolation ||\n isExcludedFromReadIsolation(model, fullConfig) ||\n args._skipWorkspaceInjection\n ) {\n return query(stripSkipFlag(args));\n }\n\n const wsCtx = getWorkspaceContext();\n enforceStrictMode(model, 'delete', wsCtx, fullConfig);\n if (!wsCtx?.workspaceId) {\n return query(args);\n }\n\n if (fullConfig.enableApplicationNameTagging) {\n await maybeTagConnection(rawPrisma, wsCtx);\n }\n const injectedWhere = injectWhereClause(args.where, wsCtx);\n\n if (fullConfig.debug) {\n logger.debug(`[WorkspaceExtension] ${model}.delete - injected workspaceId into where`, {\n workspaceId: wsCtx.workspaceId,\n });\n }\n\n const finalArgs = {\n ...stripSkipFlag(args),\n where: injectedWhere,\n };\n if (fullConfig.enableRlsGucTagging) {\n return runOperationWithRlsGuc(rawPrismaForTransactions, wsCtx, model, 'delete', finalArgs);\n }\n return query(finalArgs);\n },\n\n async deleteMany({ model, args, query }: ExtensionHandlerParams<WhereArgs>) {\n if (\n !fullConfig.enableDeleteIsolation ||\n isExcludedFromReadIsolation(model, fullConfig) ||\n args._skipWorkspaceInjection\n ) {\n return query(stripSkipFlag(args));\n }\n\n const wsCtx = getWorkspaceContext();\n enforceStrictMode(model, 'deleteMany', wsCtx, fullConfig);\n if (!wsCtx?.workspaceId) {\n return query(args);\n }\n\n if (fullConfig.enableApplicationNameTagging) {\n await maybeTagConnection(rawPrisma, wsCtx);\n }\n const injectedWhere = injectWhereClause(args.where, wsCtx);\n\n if (fullConfig.debug) {\n logger.debug(`[WorkspaceExtension] ${model}.deleteMany - injected workspaceId into where`, {\n workspaceId: wsCtx.workspaceId,\n });\n }\n\n const finalArgs = {\n ...stripSkipFlag(args),\n where: injectedWhere,\n };\n if (fullConfig.enableRlsGucTagging) {\n return runOperationWithRlsGuc(rawPrismaForTransactions, wsCtx, model, 'deleteMany', finalArgs);\n }\n return query(finalArgs);\n },\n },\n },\n });\n}\n"]}
@@ -1,7 +1,7 @@
1
- import { resetGraphEventEmitter, getGraphEventEmitter, createMemoryPublisher, createGraphEventEmitter, createMemoryConsumer, createGraphEventEmitter2, MemoryEventQueue, MemoryEventPublisher, MemoryEventConsumer, MemoryEventBus, GraphEventEmitterImpl } from './chunk-URDYOM2L.js';
2
- import { RedisStreamsEventPublisher, RedisStreamsEventConsumer, QueueType, EventQueueFactory } from './chunk-JNJSSBKO.js';
3
- import { streamKey, dlqKey, RedisStreamsConnection } from './chunk-S7LWYERE.js';
4
- import { logger } from './chunk-CBZNP6RF.js';
1
+ import { resetGraphEventEmitter, getGraphEventEmitter, createMemoryPublisher, createGraphEventEmitter, createMemoryConsumer, createGraphEventEmitter2, MemoryEventQueue, MemoryEventPublisher, MemoryEventConsumer, MemoryEventBus, GraphEventEmitterImpl } from './chunk-QJN4K7LD.js';
2
+ import { RedisStreamsEventPublisher, RedisStreamsEventConsumer, QueueType, EventQueueFactory } from './chunk-UFXHLQ2T.js';
3
+ import { streamKey, dlqKey, RedisStreamsConnection } from './chunk-LKCBI6B2.js';
4
+ import { logger } from './chunk-RU266375.js';
5
5
  import { __export, __name } from './chunk-XE4OXN2W.js';
6
6
 
7
7
  // src/event-queue/index.ts
@@ -460,5 +460,5 @@ function createConsumer(stream, consumer) {
460
460
  __name(createConsumer, "createConsumer");
461
461
 
462
462
  export { EventPriority, EventsModule, ModuleEventsService, createConsumer, createModuleEventsService, createPublisher, event_queue_exports };
463
- //# sourceMappingURL=chunk-WFVLQELZ.js.map
464
- //# sourceMappingURL=chunk-WFVLQELZ.js.map
463
+ //# sourceMappingURL=chunk-FYH5IAPR.js.map
464
+ //# sourceMappingURL=chunk-FYH5IAPR.js.map