@endora-commerce/mod-carts 0.100.0

package/dist/backend/services/cart-approval-service.js

@@ -0,0 +1,242 @@
+import { ERROR_CODES } from '@endora-commerce/contracts';
+import { HttpError } from '@endora-commerce/platform/http';
+import { Cart } from '../entities/cart.entity.js';
+import { CartItem } from '../entities/cart-item.entity.js';
+export class CartApprovalService {
+    emFactory;
+    cartAuditService;
+    organizations;
+    organizationCartApproval;
+    customerAccounts;
+    emailDispatch;
+    constructor(emFactory, cartAuditService, 
+    /** `organizations`' read model — the approval policy and its owner row. */
+    organizations, 
+    /**
+     * `organizations`' write surface for the policy column (issue #175). The
+     * two `setPolicy*` methods below used to assign
+     * `organizations.requires_cart_approval` on that module's entity; the write
+     * belongs to its owner, which audits it through the Command Bus. What stays
+     * here is the cascade over this module's own carts.
+     */
+    organizationCartApproval, 
+    /** `customer_accounts`' read model — the submitting buyer's role. */
+    customerAccounts, emailDispatch) {
+        this.emFactory = emFactory;
+        this.cartAuditService = cartAuditService;
+        this.organizations = organizations;
+        this.organizationCartApproval = organizationCartApproval;
+        this.customerAccounts = customerAccounts;
+        this.emailDispatch = emailDispatch;
+    }
+    /**
+     * Fire-and-forget e-mail dispatch. Wraps each call so any throw is
+     * swallowed — approval transitions must complete even if mail
+     * delivery hiccups. Production composition is responsible for
+     * surfacing the failure through the platform's log + alerting paths.
+     */
+    async dispatch(fn) {
+        if (!this.emailDispatch)
+            return;
+        try {
+            await fn();
+        }
+        catch {
+            // Swallow — see contract on CartEmailDispatch.
+        }
+    }
+    /**
+     * Buyer submits the cart for Org-Admin approval. Refuses if:
+     *   - the cart is empty
+     *   - the policy is off (approval not required)
+     *   - the buyer is themself an Org Admin (self-approval exemption)
+     *   - approval_status is already non-`not_required`
+     */
+    async submitForApproval(cart, actor) {
+        const em = this.emFactory();
+        if (!cart.organizationId || cart.organizationId !== actor.organizationId) {
+            throw new HttpError(404, ERROR_CODES.NOT_FOUND, 'cart_not_found');
+        }
+        const items = await em.find(CartItem, { cartId: cart.id });
+        if (items.length === 0) {
+            throw new HttpError(422, ERROR_CODES.CART_EMPTY, 'cart_empty');
+        }
+        if (cart.approvalStatus !== 'not_required') {
+            throw new HttpError(422, ERROR_CODES.VALIDATION_FAILED, 'approval_already_initiated');
+        }
+        const org = await this.organizations.findById(actor.organizationId);
+        if (!org || !org.requiresCartApproval) {
+            throw new HttpError(422, ERROR_CODES.VALIDATION_FAILED, 'approval_not_required');
+        }
+        const buyer = await this.customerAccounts.findById(actor.customerAccountId);
+        if (buyer?.role === 'organization_admin') {
+            throw new HttpError(422, ERROR_CODES.VALIDATION_FAILED, 'org_admin_self_submit');
+        }
+        cart.approvalStatus = 'pending';
+        cart.submittedForApprovalAt = new Date();
+        cart.lastActivityAt = new Date();
+        await em.flush();
+        await this.cartAuditService.record({
+            cartId: cart.id,
+            actorType: 'customer',
+            actorId: actor.customerAccountId,
+            action: 'approval_submitted',
+            fromState: 'not_required',
+            toState: 'pending',
+        });
+        await this.dispatch(() => this.emailDispatch.onSubmittedForApproval({ cart, submitter: actor }));
+        return cart;
+    }
+    /** Org Admin approves a pending cart. */
+    async approve(cartId, actor) {
+        const em = this.emFactory();
+        const cart = await em.findOne(Cart, { id: cartId });
+        if (!cart || cart.organizationId !== actor.organizationId) {
+            throw new HttpError(404, ERROR_CODES.NOT_FOUND, 'cart_not_found');
+        }
+        if (cart.approvalStatus !== 'pending') {
+            throw new HttpError(422, ERROR_CODES.VALIDATION_FAILED, 'approval_not_pending');
+        }
+        cart.approvalStatus = 'approved';
+        cart.approvedAt = new Date();
+        cart.approvedByCustomerAccountId = actor.customerAccountId;
+        await em.flush();
+        await this.cartAuditService.record({
+            cartId: cart.id,
+            actorType: 'org_admin',
+            actorId: actor.customerAccountId,
+            action: 'approval_approved',
+            fromState: 'pending',
+            toState: 'approved',
+        });
+        await this.dispatch(() => this.emailDispatch.onApproved({ cart, approver: actor }));
+        return cart;
+    }
+    /** Org Admin rejects a pending cart with a reason. */
+    async reject(cartId, actor, reason) {
+        const em = this.emFactory();
+        const cart = await em.findOne(Cart, { id: cartId });
+        if (!cart || cart.organizationId !== actor.organizationId) {
+            throw new HttpError(404, ERROR_CODES.NOT_FOUND, 'cart_not_found');
+        }
+        if (cart.approvalStatus !== 'pending') {
+            throw new HttpError(422, ERROR_CODES.VALIDATION_FAILED, 'approval_not_pending');
+        }
+        cart.approvalStatus = 'rejected_by_org_admin';
+        cart.status = 'rejected';
+        cart.rejectedAt = new Date();
+        cart.rejectedByActor = `org_admin:${actor.customerAccountId}`;
+        cart.rejectedReason = reason;
+        await em.flush();
+        await this.cartAuditService.record({
+            cartId: cart.id,
+            actorType: 'org_admin',
+            actorId: actor.customerAccountId,
+            action: 'approval_rejected',
+            fromState: 'pending',
+            toState: 'rejected_by_org_admin',
+            reason,
+        });
+        await this.dispatch(() => this.emailDispatch.onRejected({ cart, rejector: actor, reason }));
+        return cart;
+    }
+    /**
+     * The current policy, for a platform admin (feature 091, P7b;
+     * `contracts/admin-component-contribution.md` §10.5).
+     *
+     * The read half of {@link setPolicyByAdmin}, added because the admin
+     * contribution that renders the toggle has to know what to render it in.
+     * Until P7b that value crossed as a prop — `initialRequiresCartApproval`, out
+     * of `organizations`' detail payload — and a zone's props may not carry it:
+     * the other three contributors to `organization.detail.after` want neither
+     * the prop nor the request behind it.
+     *
+     * It reads through `organizations`' own port rather than this module's
+     * tables, which is the direction the write has taken since issue #175: the
+     * column belongs to that module.
+     */
+    async getPolicyByAdmin(organizationId) {
+        const organization = await this.organizations.findById(organizationId);
+        if (!organization) {
+            throw new HttpError(404, ERROR_CODES.NOT_FOUND, 'organization_not_found');
+        }
+        return organization;
+    }
+    /**
+     * Platform-admin variant of {@link setPolicyForOrganization}. Same
+     * semantics (policy-off cascades a reset of every pending/approved
+     * cart in the Org) but the actor is a platform admin rather than an
+     * Org Admin — recorded as `actorType: 'platform_admin'` in the
+     * audit row.
+     */
+    async setPolicyByAdmin(organizationId, adminUserId, requires) {
+        const { organization, changed } = await this.organizationCartApproval.setCartApprovalPolicy(organizationId, requires);
+        if (changed && !requires) {
+            await this.resetPendingApprovals(organizationId, 'platform_admin', adminUserId);
+        }
+        return organization;
+    }
+    /**
+     * Org Admin toggles the per-Organization `requires_cart_approval` policy.
+     * On `false`: every `pending` or `approved` cart in the Org returns to
+     * `not_required` and is audited as `approval_policy_reset`.
+     */
+    async setPolicyForOrganization(organizationId, actor, requires) {
+        if (organizationId !== actor.organizationId) {
+            throw new HttpError(404, ERROR_CODES.NOT_FOUND, 'organization_not_found');
+        }
+        const { organization, changed } = await this.organizationCartApproval.setCartApprovalPolicy(organizationId, requires);
+        if (changed && !requires) {
+            await this.resetPendingApprovals(organizationId, 'org_admin', actor.customerAccountId);
+        }
+        return organization;
+    }
+    /**
+     * The half of a policy switch-off that belongs to this module: every
+     * `pending` or `approved` cart in the Organization returns to
+     * `not_required`, audited as `approval_policy_reset` in this module's own
+     * per-cart trail with the actor that switched the policy off.
+     */
+    async resetPendingApprovals(organizationId, actorType, actorId) {
+        const em = this.emFactory();
+        const affected = await em.find(Cart, {
+            organizationId,
+            approvalStatus: { $in: ['pending', 'approved'] },
+        });
+        for (const cart of affected) {
+            const prev = cart.approvalStatus;
+            cart.approvalStatus = 'not_required';
+            await em.flush();
+            await this.cartAuditService.record({
+                cartId: cart.id,
+                actorType,
+                actorId,
+                action: 'approval_policy_reset',
+                fromState: prev,
+                toState: 'not_required',
+            });
+        }
+    }
+    /**
+     * Re-arm hook: any buyer-driven mutation on an `approved` cart drops
+     * it back to `pending`. Called by CartService.{addItem,updateItem,
+     * removeItem} and by CartCouponService.{apply,clear}.
+     */
+    async maybeReArm(cart, actor) {
+        if (cart.approvalStatus !== 'approved')
+            return;
+        const em = this.emFactory();
+        cart.approvalStatus = 'pending';
+        cart.submittedForApprovalAt = new Date();
+        await em.flush();
+        await this.cartAuditService.record({
+            cartId: cart.id,
+            actorType: 'customer',
+            ...(actor.customerAccountId ? { actorId: actor.customerAccountId } : {}),
+            action: 'approval_resubmission_required',
+            fromState: 'approved',
+            toState: 'pending',
+        });
+    }
+}
+//# sourceMappingURL=cart-approval-service.js.map

package/dist/backend/services/cart-approval-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cart-approval-service.js","sourceRoot":"","sources":["../../../src/backend/services/cart-approval-service.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AACzD,OAAO,EAAE,SAAS,EAAE,MAAM,gCAAgC,CAAC;AAC3D,OAAO,EAAE,IAAI,EAAE,MAAM,4BAA4B,CAAC;AAElD,OAAO,EAAE,QAAQ,EAAE,MAAM,iCAAiC,CAAC;AA4D3D,MAAM,OAAO,mBAAmB;IAEX;IACA;IAEA;IAQA;IAEA;IACA;IAfnB,YACmB,SAA8B,EAC9B,gBAAkC;IACnD,2EAA2E;IAC1D,aAAsC;IACvD;;;;;;OAMG;IACc,wBAA2D;IAC5E,qEAAqE;IACpD,gBAAyC,EACzC,aAAiC;QAdjC,cAAS,GAAT,SAAS,CAAqB;QAC9B,qBAAgB,GAAhB,gBAAgB,CAAkB;QAElC,kBAAa,GAAb,aAAa,CAAyB;QAQtC,6BAAwB,GAAxB,wBAAwB,CAAmC;QAE3D,qBAAgB,GAAhB,gBAAgB,CAAyB;QACzC,kBAAa,GAAb,aAAa,CAAoB;IACjD,CAAC;IAEJ;;;;;OAKG;IACK,KAAK,CAAC,QAAQ,CAAI,EAAoB;QAC5C,IAAI,CAAC,IAAI,CAAC,aAAa;YAAE,OAAO;QAChC,IAAI,CAAC;YACH,MAAM,EAAE,EAAE,CAAC;QACb,CAAC;QAAC,MAAM,CAAC;YACP,+CAA+C;QACjD,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,iBAAiB,CAAC,IAAU,EAAE,KAAmB;QACrD,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC5B,IAAI,CAAC,IAAI,CAAC,cAAc,IAAI,IAAI,CAAC,cAAc,KAAK,KAAK,CAAC,cAAc,EAAE,CAAC;YACzE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,WAAW,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC;QACpE,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;QAC3D,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,WAAW,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;QACjE,CAAC;QACD,IAAI,IAAI,CAAC,cAAc,KAAK,cAAc,EAAE,CAAC;YAC3C,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,WAAW,CAAC,iBAAiB,EAAE,4BAA4B,CAAC,CAAC;QACxF,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;QACpE,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,oBAAoB,EAAE,CAAC;YACtC,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,WAAW,CAAC,iBAAiB,EAAE,uBAAuB,CAAC,CAAC;QACnF,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;QAC5E,IAAI,KAAK,EAAE,IAAI,KAAK,oBAAoB,EAAE,CAAC;YACzC,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,WAAW,CAAC,iBAAiB,EAAE,uBAAuB,CAAC,CAAC;QACnF,CAAC;QAED,IAAI,CAAC,cAAc,GAAG,SAAS,CAAC;QAChC,IAAI,CAAC,sBAAsB,GAAG,IAAI,IAAI,EAAE,CAAC;QACzC,IAAI,CAAC,cAAc,GAAG,IAAI,IAAI,EAAE,CAAC;QACjC,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC;QAEjB,MAAM,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC;YACjC,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,SAAS,EAAE,UAAU;YACrB,OAAO,EAAE,KAAK,CAAC,iBAAiB;YAChC,MAAM,EAAE,oBAAoB;YAC5B,SAAS,EAAE,cAAc;YACzB,OAAO,EAAE,SAAS;SACnB,CAAC,CAAC;QACH,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,CACvB,IAAI,CAAC,aAAc,CAAC,sBAAsB,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CACvE,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,yCAAyC;IACzC,KAAK,CAAC,OAAO,CAAC,MAAc,EAAE,KAAmB;QAC/C,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QACpD,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,cAAc,KAAK,KAAK,CAAC,cAAc,EAAE,CAAC;YAC1D,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,WAAW,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC;QACpE,CAAC;QACD,IAAI,IAAI,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;YACtC,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,WAAW,CAAC,iBAAiB,EAAE,sBAAsB,CAAC,CAAC;QAClF,CAAC;QACD,IAAI,CAAC,cAAc,GAAG,UAAU,CAAC;QACjC,IAAI,CAAC,UAAU,GAAG,IAAI,IAAI,EAAE,CAAC;QAC7B,IAAI,CAAC,2BAA2B,GAAG,KAAK,CAAC,iBAAiB,CAAC;QAC3D,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC;QAEjB,MAAM,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC;YACjC,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,SAAS,EAAE,WAAW;YACtB,OAAO,EAAE,KAAK,CAAC,iBAAiB;YAChC,MAAM,EAAE,mBAAmB;YAC3B,SAAS,EAAE,SAAS;YACpB,OAAO,EAAE,UAAU;SACpB,CAAC,CAAC;QACH,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,CACvB,IAAI,CAAC,aAAc,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAC1D,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,sDAAsD;IACtD,KAAK,CAAC,MAAM,CAAC,MAAc,EAAE,KAAmB,EAAE,MAAc;QAC9D,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QACpD,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,cAAc,KAAK,KAAK,CAAC,cAAc,EAAE,CAAC;YAC1D,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,WAAW,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC;QACpE,CAAC;QACD,IAAI,IAAI,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;YACtC,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,WAAW,CAAC,iBAAiB,EAAE,sBAAsB,CAAC,CAAC;QAClF,CAAC;QACD,IAAI,CAAC,cAAc,GAAG,uBAAuB,CAAC;QAC9C,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC;QACzB,IAAI,CAAC,UAAU,GAAG,IAAI,IAAI,EAAE,CAAC;QAC7B,IAAI,CAAC,eAAe,GAAG,aAAa,KAAK,CAAC,iBAAiB,EAAE,CAAC;QAC9D,IAAI,CAAC,cAAc,GAAG,MAAM,CAAC;QAC7B,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC;QAEjB,MAAM,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC;YACjC,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,SAAS,EAAE,WAAW;YACtB,OAAO,EAAE,KAAK,CAAC,iBAAiB;YAChC,MAAM,EAAE,mBAAmB;YAC3B,SAAS,EAAE,SAAS;YACpB,OAAO,EAAE,uBAAuB;YAChC,MAAM;SACP,CAAC,CAAC;QACH,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,CACvB,IAAI,CAAC,aAAc,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAClE,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;;;;;;;;;;OAcG;IACH,KAAK,CAAC,gBAAgB,CAAC,cAAsB;QAC3C,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;QACvE,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,WAAW,CAAC,SAAS,EAAE,wBAAwB,CAAC,CAAC;QAC5E,CAAC;QACD,OAAO,YAAY,CAAC;IACtB,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,gBAAgB,CACpB,cAAsB,EACtB,WAAmB,EACnB,QAAiB;QAEjB,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,GAC7B,MAAM,IAAI,CAAC,wBAAwB,CAAC,qBAAqB,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAC;QACtF,IAAI,OAAO,IAAI,CAAC,QAAQ,EAAE,CAAC;YACzB,MAAM,IAAI,CAAC,qBAAqB,CAAC,cAAc,EAAE,gBAAgB,EAAE,WAAW,CAAC,CAAC;QAClF,CAAC;QACD,OAAO,YAAY,CAAC;IACtB,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,wBAAwB,CAC5B,cAAsB,EACtB,KAAmB,EACnB,QAAiB;QAEjB,IAAI,cAAc,KAAK,KAAK,CAAC,cAAc,EAAE,CAAC;YAC5C,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,WAAW,CAAC,SAAS,EAAE,wBAAwB,CAAC,CAAC;QAC5E,CAAC;QACD,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,GAC7B,MAAM,IAAI,CAAC,wBAAwB,CAAC,qBAAqB,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAC;QACtF,IAAI,OAAO,IAAI,CAAC,QAAQ,EAAE,CAAC;YACzB,MAAM,IAAI,CAAC,qBAAqB,CAAC,cAAc,EAAE,WAAW,EAAE,KAAK,CAAC,iBAAiB,CAAC,CAAC;QACzF,CAAC;QACD,OAAO,YAAY,CAAC;IACtB,CAAC;IAED;;;;;OAKG;IACK,KAAK,CAAC,qBAAqB,CACjC,cAAsB,EACtB,SAAyC,EACzC,OAAe;QAEf,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE;YACnC,cAAc;YACd,cAAc,EAAE,EAAE,GAAG,EAAE,CAAC,SAAS,EAAE,UAAU,CAAgC,EAAE;SAChF,CAAC,CAAC;QACH,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;YAC5B,MAAM,IAAI,GAAG,IAAI,CAAC,cAAc,CAAC;YACjC,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;YACrC,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC;YACjB,MAAM,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC;gBACjC,MAAM,EAAE,IAAI,CAAC,EAAE;gBACf,SAAS;gBACT,OAAO;gBACP,MAAM,EAAE,uBAAuB;gBAC/B,SAAS,EAAE,IAAI;gBACf,OAAO,EAAE,cAAc;aACxB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,UAAU,CAAC,IAAU,EAAE,KAAqC;QAChE,IAAI,IAAI,CAAC,cAAc,KAAK,UAAU;YAAE,OAAO;QAC/C,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC5B,IAAI,CAAC,cAAc,GAAG,SAAS,CAAC;QAChC,IAAI,CAAC,sBAAsB,GAAG,IAAI,IAAI,EAAE,CAAC;QACzC,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC;QACjB,MAAM,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC;YACjC,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,SAAS,EAAE,UAAU;YACrB,GAAG,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxE,MAAM,EAAE,gCAAgC;YACxC,SAAS,EAAE,UAAU;YACrB,OAAO,EAAE,SAAS;SACnB,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/backend/services/cart-audit-service.d.ts

@@ -0,0 +1,75 @@
+import type { EntityManager } from '@mikro-orm/postgresql';
+import { CartAuditEntry } from '../entities/cart-audit-entry.entity.js';
+import type { CartAuditAction, CartAuditActorType } from '../entities/cart-audit-entry.entity.js';
+import type { AuditPort } from '@endora-commerce/platform/kernel';
+/**
+ * Single writer for cart audit landings (feature 027 §R10). Every call
+ * lands TWO rows in the same transaction:
+ *
+ *   1. `cart_audit_entries` — the typed cart-detail feed (powers the
+ *      cart-detail UI for both Org-Admin and platform-admin views).
+ *   2. `audit_log_entries` — the platform-wide audit timeline
+ *      (queryable across modules from the dashboard recent-activity
+ *      surface of feature 024).
+ *
+ * The two writes share a single MikroORM unit-of-work so a partial
+ * commit is structurally impossible — either both rows land or
+ * neither does. No call site outside the carts module may write to
+ * `cart_audit_entries` directly.
+ *
+ * That claim used to hold only where `emFactory` returned the same manager
+ * twice (issue #152). `record()` took one fork for the cart row and
+ * `AuditPort.record()` took another for the platform row and flushed it
+ * itself, so in production — where the factory forks per call — the two rows
+ * were two transactions, and a failure between them landed the platform row
+ * without its cart-detail counterpart. Both rows are built on ONE manager now
+ * and land in one flush, which is what the paragraph above always said.
+ *
+ * `actorAdminUserId` on the `audit_log_entries` row is set ONLY when
+ * `actor_type === 'platform_admin'`. For customer / org-admin / system /
+ * sweep actors the column is null (the cart audit feed still records
+ * the actor in `cart_audit_entries.actor_id` / `.actor_type`).
+ */
+export interface CartAuditRecordInput {
+    cartId: string;
+    actorType: CartAuditActorType;
+    actorId?: string | null;
+    action: CartAuditAction;
+    fromState?: string | null;
+    toState?: string | null;
+    reason?: string | null;
+    metadata?: Record<string, unknown>;
+    /** Correlation id from the inbound request (X-Request-Id). */
+    requestId?: string | null;
+}
+export declare class CartAuditService {
+    private readonly emFactory;
+    private readonly auditLog;
+    constructor(emFactory: () => EntityManager, auditLog: AuditPort);
+    /** One landing, on this service's own manager, flushed. The default form. */
+    record(input: CartAuditRecordInput): Promise<CartAuditEntry>;
+    /**
+     * Batch form, landing on the CALLER's EntityManager and flushing nothing
+     * (issue #152).
+     *
+     * The caller's next `flush()` is the unit of work, so a batch of cart writes
+     * and the audit rows for that batch commit together or not at all — the
+     * guarantee `record()` gives one write, given to a run of them. The
+     * abandonment sweep is the caller it exists for: it used to flush once per
+     * cart, which is a transaction per cart plus an identity map that never
+     * shrank, and at 2000 carts that cost 66 ms each.
+     *
+     * It flushes nothing on purpose. A method that both joined the caller's unit
+     * of work and committed it would decide, on the caller's behalf, that the
+     * audit rows are the end of the batch — and for the sweep they are not: the
+     * status flip is dirty on the same manager and belongs in the same commit.
+     *
+     * The name is {@link AuditPort.recordWithin}'s, deliberately: `Within`
+     * is the repository's word for "on the caller's manager, no flush", and it is
+     * the word `check-command-coverage` reads as an audit landing. A name of its
+     * own would have made this method invisible to that check while it was doing
+     * exactly what the check exists to find.
+     */
+    recordWithin(em: EntityManager, inputs: readonly CartAuditRecordInput[]): CartAuditEntry[];
+}
+//# sourceMappingURL=cart-audit-service.d.ts.map

package/dist/backend/services/cart-audit-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cart-audit-service.d.ts","sourceRoot":"","sources":["../../../src/backend/services/cart-audit-service.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,EAAE,cAAc,EAAE,MAAM,wCAAwC,CAAC;AACxE,OAAO,KAAK,EACV,eAAe,EACf,kBAAkB,EACnB,MAAM,wCAAwC,CAAC;AAChD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kCAAkC,CAAC;AAElE;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,kBAAkB,CAAC;IAC9B,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,MAAM,EAAE,eAAe,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,8DAA8D;IAC9D,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,qBAAa,gBAAgB;IAEzB,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,QAAQ;gBADR,SAAS,EAAE,MAAM,aAAa,EAC9B,QAAQ,EAAE,SAAS;IAGtC,6EAA6E;IACvE,MAAM,CAAC,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAC,cAAc,CAAC;IAQlE;;;;;;;;;;;;;;;;;;;;;OAqBG;IACH,YAAY,CACV,EAAE,EAAE,aAAa,EACjB,MAAM,EAAE,SAAS,oBAAoB,EAAE,GACtC,cAAc,EAAE;CAiCpB"}

package/dist/backend/services/cart-audit-service.js

@@ -0,0 +1,70 @@
+import { CartAuditEntry } from '../entities/cart-audit-entry.entity.js';
+export class CartAuditService {
+    emFactory;
+    auditLog;
+    constructor(emFactory, auditLog) {
+        this.emFactory = emFactory;
+        this.auditLog = auditLog;
+    }
+    /** One landing, on this service's own manager, flushed. The default form. */
+    async record(input) {
+        const em = this.emFactory();
+        const entries = this.recordWithin(em, [input]);
+        await em.flush();
+        // One input in, one entry out — the map below preserves the arity.
+        return entries[0];
+    }
+    /**
+     * Batch form, landing on the CALLER's EntityManager and flushing nothing
+     * (issue #152).
+     *
+     * The caller's next `flush()` is the unit of work, so a batch of cart writes
+     * and the audit rows for that batch commit together or not at all — the
+     * guarantee `record()` gives one write, given to a run of them. The
+     * abandonment sweep is the caller it exists for: it used to flush once per
+     * cart, which is a transaction per cart plus an identity map that never
+     * shrank, and at 2000 carts that cost 66 ms each.
+     *
+     * It flushes nothing on purpose. A method that both joined the caller's unit
+     * of work and committed it would decide, on the caller's behalf, that the
+     * audit rows are the end of the batch — and for the sweep they are not: the
+     * status flip is dirty on the same manager and belongs in the same commit.
+     *
+     * The name is {@link AuditPort.recordWithin}'s, deliberately: `Within`
+     * is the repository's word for "on the caller's manager, no flush", and it is
+     * the word `check-command-coverage` reads as an audit landing. A name of its
+     * own would have made this method invisible to that check while it was doing
+     * exactly what the check exists to find.
+     */
+    recordWithin(em, inputs) {
+        return inputs.map((input) => {
+            const entry = em.create(CartAuditEntry, {
+                cartId: input.cartId,
+                actorType: input.actorType,
+                ...(input.actorId !== undefined ? { actorId: input.actorId } : {}),
+                action: input.action,
+                ...(input.fromState !== undefined ? { fromState: input.fromState } : {}),
+                ...(input.toState !== undefined ? { toState: input.toState } : {}),
+                ...(input.reason !== undefined ? { reason: input.reason } : {}),
+                metadata: input.metadata ?? {},
+            });
+            em.persist(entry);
+            this.auditLog.recordWithin(em, {
+                action: `cart.${input.action}`,
+                objectType: 'cart',
+                objectId: input.cartId,
+                ...(input.actorType === 'platform_admin' && input.actorId
+                    ? { actorAdminUserId: input.actorId }
+                    : {}),
+                ...(input.actorType === 'customer' || input.actorType === 'org_admin'
+                    ? { impersonatedCustomerAccountId: input.actorId ?? null }
+                    : {}),
+                stateBefore: input.fromState ? { state: input.fromState } : null,
+                stateAfter: input.toState ? { state: input.toState } : null,
+                ...(input.requestId !== undefined ? { requestId: input.requestId } : {}),
+            });
+            return entry;
+        });
+    }
+}
+//# sourceMappingURL=cart-audit-service.js.map

package/dist/backend/services/cart-audit-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cart-audit-service.js","sourceRoot":"","sources":["../../../src/backend/services/cart-audit-service.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,wCAAwC,CAAC;AAiDxE,MAAM,OAAO,gBAAgB;IAER;IACA;IAFnB,YACmB,SAA8B,EAC9B,QAAmB;QADnB,cAAS,GAAT,SAAS,CAAqB;QAC9B,aAAQ,GAAR,QAAQ,CAAW;IACnC,CAAC;IAEJ,6EAA6E;IAC7E,KAAK,CAAC,MAAM,CAAC,KAA2B;QACtC,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC5B,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;QAC/C,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC;QACjB,mEAAmE;QACnE,OAAO,OAAO,CAAC,CAAC,CAAmB,CAAC;IACtC,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;OAqBG;IACH,YAAY,CACV,EAAiB,EACjB,MAAuC;QAEvC,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;YAC1B,MAAM,KAAK,GAAG,EAAE,CAAC,MAAM,CAAC,cAAc,EAAE;gBACtC,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,GAAG,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAClE,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,GAAG,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACxE,GAAG,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAClE,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC/D,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,EAAE;aAC/B,CAAC,CAAC;YAEH,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAElB,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,EAAE;gBAC7B,MAAM,EAAE,QAAQ,KAAK,CAAC,MAAM,EAAE;gBAC9B,UAAU,EAAE,MAAM;gBAClB,QAAQ,EAAE,KAAK,CAAC,MAAM;gBACtB,GAAG,CAAC,KAAK,CAAC,SAAS,KAAK,gBAAgB,IAAI,KAAK,CAAC,OAAO;oBACvD,CAAC,CAAC,EAAE,gBAAgB,EAAE,KAAK,CAAC,OAAO,EAAE;oBACrC,CAAC,CAAC,EAAE,CAAC;gBACP,GAAG,CAAC,KAAK,CAAC,SAAS,KAAK,UAAU,IAAI,KAAK,CAAC,SAAS,KAAK,WAAW;oBACnE,CAAC,CAAC,EAAE,6BAA6B,EAAE,KAAK,CAAC,OAAO,IAAI,IAAI,EAAE;oBAC1D,CAAC,CAAC,EAAE,CAAC;gBACP,WAAW,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,IAAI;gBAChE,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI;gBAC3D,GAAG,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACzE,CAAC,CAAC;YAEH,OAAO,KAAK,CAAC;QACf,CAAC,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/backend/services/cart-conversion-service.d.ts

@@ -0,0 +1,104 @@
+import type { EntityManager } from '@mikro-orm/postgresql';
+import { Cart } from '../entities/cart.entity.js';
+import type { CatalogProductReadPort, QuoteRequestReadPort, RfqCustomerContext, RfqCustomerPort } from '@endora-commerce/contracts';
+import type { SalesChannelMembershipPort } from '@endora-commerce/platform/kernel';
+import type { CartService, CustomerContext as CartCustomerContext } from './cart-service.js';
+/**
+ * Three conversions around the Cart (feature 027 US3):
+ *
+ *   - convertToQuoteRequest(cart, ctx, note?)
+ *       Reads the cart's lines, hands them to `RfqCustomerPort.createForCustomer`,
+ *       flips the source cart's status to `completed` with
+ *       `converted_to_quote_request_id` set. The next storefront visit
+ *       lazy-creates a fresh `active` cart for the buyer.
+ *
+ *   - createCartFromQuoteRequest(qrId, ctx)
+ *       Reads a Quote Request's lines, creates (or appends to) the buyer's
+ *       active cart with re-resolved prices (the QR's proposed prices are
+ *       NOT carried over — per FR-017). Skips lines whose product is no
+ *       longer purchasable; returns the dropped-line list to the caller.
+ *
+ *   - appendShoppingListToCart(listId, ctx)
+ *       Delegated to `ShoppingListService.convertToCart`, which already
+ *       implements the append + skip-archived-products contract from
+ *       feature 010 / FR-018. This service just exposes a uniform return
+ *       shape across all three conversions.
+ *
+ * The service does not know about `cart_audit_entries` directly — every
+ * write path bumps `cart.lastActivityAt` so the abandonment sweep treats
+ * the cart as fresh. Audit-trail wiring is left to a follow-up.
+ */
+export interface CartDroppedLine {
+    productId: string;
+    productName: string;
+    reason: 'not_purchasable' | 'out_of_stock' | 'no_price_in_customer_list' | 'removed_by_conversion';
+}
+export interface ConvertToQrResult {
+    quoteRequestId: string;
+    cartId: string;
+}
+export interface CreateCartFromQrResult {
+    cartId: string;
+    appendedLineCount: number;
+    droppedLines: CartDroppedLine[];
+}
+export interface AppendShoppingListResult {
+    cartId: string;
+    appendedLineCount: number;
+    droppedLines: CartDroppedLine[];
+}
+export declare class CartConversionService {
+    private readonly emFactory;
+    private readonly cartService;
+    /** `quote_requests`' customer-facing write surface. */
+    private readonly rfqService;
+    /** `quote_requests`' row read model — the quote and its lines. */
+    private readonly quoteRequests;
+    /** `catalog`'s product read model — is the quoted product still there? */
+    private readonly catalogProducts;
+    /**
+     * The sanctioned bridge accessor (Constitution XII) — and on this seam it
+     * is what keeps the *reason* honest (issue #259). `CartService.addItem`
+     * refuses an out-of-channel line by itself, but this method catches every
+     * `HttpError` from it and reports one dropped-line reason,
+     * `no_price_in_customer_list`. A line the channel does not sell has nothing
+     * to do with the buyer's price list, so it is narrowed here instead and
+     * falls into the `not_purchasable` branch — where a line whose product has
+     * gone already lands.
+     */
+    private readonly channelMembership;
+    constructor(emFactory: () => EntityManager, cartService: CartService, 
+    /** `quote_requests`' customer-facing write surface. */
+    rfqService: RfqCustomerPort, 
+    /** `quote_requests`' row read model — the quote and its lines. */
+    quoteRequests: QuoteRequestReadPort, 
+    /** `catalog`'s product read model — is the quoted product still there? */
+    catalogProducts: CatalogProductReadPort, 
+    /**
+     * The sanctioned bridge accessor (Constitution XII) — and on this seam it
+     * is what keeps the *reason* honest (issue #259). `CartService.addItem`
+     * refuses an out-of-channel line by itself, but this method catches every
+     * `HttpError` from it and reports one dropped-line reason,
+     * `no_price_in_customer_list`. A line the channel does not sell has nothing
+     * to do with the buyer's price list, so it is narrowed here instead and
+     * falls into the `not_purchasable` branch — where a line whose product has
+     * gone already lands.
+     */
+    channelMembership: SalesChannelMembershipPort);
+    /**
+     * Cart → Quote Request. Refuses on an empty cart. Source cart flips to
+     * `completed` with `converted_to_quote_request_id` set.
+     */
+    convertToQuoteRequest(cart: Cart, ctx: RfqCustomerContext, note?: string): Promise<ConvertToQrResult>;
+    /**
+     * Quote Request → Cart. Creates a fresh `active` cart (or returns the
+     * existing one) for the buyer, appends the QR's lines with re-resolved
+     * prices (via `CartService.addItem`, which already routes through the
+     * pricing resolver when wired), and surfaces a list of dropped lines.
+     *
+     * The QR's `desiredUnitPrice` is intentionally dropped — the cart's
+     * unit prices come from the customer's current price list.
+     */
+    createCartFromQuoteRequest(qrId: string, ctx: CartCustomerContext): Promise<CreateCartFromQrResult>;
+}
+//# sourceMappingURL=cart-conversion-service.d.ts.map

package/dist/backend/services/cart-conversion-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cart-conversion-service.d.ts","sourceRoot":"","sources":["../../../src/backend/services/cart-conversion-service.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAG3D,OAAO,EAAE,IAAI,EAAE,MAAM,4BAA4B,CAAC;AAElD,OAAO,KAAK,EACV,sBAAsB,EACtB,oBAAoB,EACpB,kBAAkB,EAClB,eAAe,EAChB,MAAM,4BAA4B,CAAC;AAEpC,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,kCAAkC,CAAC;AAEnF,OAAO,KAAK,EAAE,WAAW,EAAE,eAAe,IAAI,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAE7F;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,iBAAiB,GAAG,cAAc,GAAG,2BAA2B,GAAG,uBAAuB,CAAC;CACpG;AAED,MAAM,WAAW,iBAAiB;IAChC,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,MAAM,CAAC;IACf,iBAAiB,EAAE,MAAM,CAAC;IAC1B,YAAY,EAAE,eAAe,EAAE,CAAC;CACjC;AAED,MAAM,WAAW,wBAAwB;IACvC,MAAM,EAAE,MAAM,CAAC;IACf,iBAAiB,EAAE,MAAM,CAAC;IAC1B,YAAY,EAAE,eAAe,EAAE,CAAC;CACjC;AAED,qBAAa,qBAAqB;IAE9B,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,WAAW;IAC5B,uDAAuD;IACvD,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,kEAAkE;IAClE,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC9B,0EAA0E;IAC1E,OAAO,CAAC,QAAQ,CAAC,eAAe;IAChC;;;;;;;;;OASG;IACH,OAAO,CAAC,QAAQ,CAAC,iBAAiB;gBAlBjB,SAAS,EAAE,MAAM,aAAa,EAC9B,WAAW,EAAE,WAAW;IACzC,uDAAuD;IACtC,UAAU,EAAE,eAAe;IAC5C,kEAAkE;IACjD,aAAa,EAAE,oBAAoB;IACpD,0EAA0E;IACzD,eAAe,EAAE,sBAAsB;IACxD;;;;;;;;;OASG;IACc,iBAAiB,EAAE,0BAA0B;IAGhE;;;OAGG;IACG,qBAAqB,CACzB,IAAI,EAAE,IAAI,EACV,GAAG,EAAE,kBAAkB,EACvB,IAAI,CAAC,EAAE,MAAM,GACZ,OAAO,CAAC,iBAAiB,CAAC;IAmD7B;;;;;;;;OAQG;IACG,0BAA0B,CAC9B,IAAI,EAAE,MAAM,EACZ,GAAG,EAAE,mBAAmB,GACvB,OAAO,CAAC,sBAAsB,CAAC;CAqFnC"}