@endora-commerce/mod-customer-accounts 0.100.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Endora sp. z o.o. and the Endora Commerce contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,59 @@
+<!-- Generated by `pnpm --filter backend run manifests:generate`. Delete this line to take the file over; a README without it is never regenerated. -->
+
+# @endora-commerce/mod-customer-accounts
+
+Customer (B2B) account records, including organization membership and role.
+
+## What this is
+
+An **Endora Commerce module package**. Its module id is `customer_accounts` — the identity of record in the platform's registries, in its migrations and in its setting, permission and translation codes.
+
+A module is not imported by application code. The platform discovers the extension packages an instance has installed, reads the manifest on the root subpath and composes the module from it, so installing this package and starting the instance is the whole integration.
+
+## Entry points
+
+| Import | Contents |
+| --- | --- |
+| `@endora-commerce/mod-customer-accounts` | the module manifest — its id, version, dependencies, settings and activation |
+| `@endora-commerce/mod-customer-accounts/admin` | the Admin UI contribution: the screens, navigation and palette actions it adds |
+| `@endora-commerce/mod-customer-accounts/backend` | the composition root the platform calls, with the entities, services, routes and workers it registers |
+| `@endora-commerce/mod-customer-accounts/migrations` | the module’s own schema migrations, in the order the platform runs them |
+| `@endora-commerce/mod-customer-accounts/tailwind.css` | the Tailwind source declaration for the admin code above |
+
+## Depends on
+
+Everything below is a **peer** dependency, so the application resolves exactly one copy of each — two copies of a host or of React are a runtime failure rather than a type error. An entry marked *optional* is needed only by the layers that use it.
+
+**Endora packages**
+
+- `@endora-commerce/admin-kit` — *optional*
+- `@endora-commerce/contracts`
+- `@endora-commerce/mod-organizations`
+- `@endora-commerce/platform`
+
+**Third-party**
+
+- `@mikro-orm/core` ^6
+- `@mikro-orm/migrations` ^6
+- `@mikro-orm/postgresql` ^6
+- `fastify` ^5
+- `lucide-react` ^1 — *optional*
+- `react` ^19 — *optional*
+- `zod` ^4
+
+## What the tarball carries
+
+- `dist/` — the compiled JavaScript and its type declarations
+- `i18n/` — the translation bundles this package ships (`en`, `pl`), loaded by the platform
+- `docs/` — the package’s own pages in the Endora Commerce documentation site
+- `tailwind.css` — the Tailwind source declaration
+
+## Install
+
+```bash
+pnpm add @endora-commerce/mod-customer-accounts
+```
+
+## Licence
+
+MIT — the text is in `LICENSE`, beside this file.

package/dist/admin/api/customer-groups-client.d.ts

@@ -0,0 +1,27 @@
+/**
+ * Typed admin client for customer groups (feature 076, D-79).
+ *
+ * The endpoints moved from `price_lists` to `customer_accounts` without
+ * changing path or payload, so this client is the same three calls the
+ * `CustomerGroupPicker` has always made — plus the two writes, which had no
+ * caller in the SPA at all until this screen.
+ */
+export interface AdminCustomerGroup {
+    id: string;
+    code: string;
+    name: string;
+    description: string | null;
+    createdAt: string;
+    updatedAt: string;
+}
+export interface CustomerGroupUpsertBody {
+    code: string;
+    name: string;
+    description?: string | null;
+}
+export declare const customerGroupsClient: {
+    list(): Promise<AdminCustomerGroup[]>;
+    upsert(code: string, body: CustomerGroupUpsertBody): Promise<AdminCustomerGroup>;
+    remove(id: string): Promise<void>;
+};
+//# sourceMappingURL=customer-groups-client.d.ts.map

package/dist/admin/api/customer-groups-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"customer-groups-client.d.ts","sourceRoot":"","sources":["../../../src/admin/api/customer-groups-client.ts"],"names":[],"mappings":"AAEA;;;;;;;GAOG;AACH,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B;AAED,eAAO,MAAM,oBAAoB;YACvB,OAAO,CAAC,kBAAkB,EAAE,CAAC;iBAKxB,MAAM,QAAQ,uBAAuB,GAAG,OAAO,CAAC,kBAAkB,CAAC;eAQrE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAGlC,CAAC"}

package/dist/admin/api/customer-groups-client.js

@@ -0,0 +1,17 @@
+import { apiClient } from '@endora-commerce/admin-kit/lib';
+export const customerGroupsClient = {
+    list() {
+        return apiClient
+            .get('/api/v1/admin/customer-groups')
+            .then((r) => r.data);
+    },
+    upsert(code, body) {
+        return apiClient
+            .put(`/api/v1/admin/customer-groups/${encodeURIComponent(code)}`, body)
+            .then((r) => r.data);
+    },
+    remove(id) {
+        return apiClient.delete(`/api/v1/admin/customer-groups/${id}`);
+    },
+};
+//# sourceMappingURL=customer-groups-client.js.map

package/dist/admin/api/customer-groups-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"customer-groups-client.js","sourceRoot":"","sources":["../../../src/admin/api/customer-groups-client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,gCAAgC,CAAC;AAyB3D,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC,IAAI;QACF,OAAO,SAAS;aACb,GAAG,CAAiC,+BAA+B,CAAC;aACpE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACzB,CAAC;IACD,MAAM,CAAC,IAAY,EAAE,IAA6B;QAChD,OAAO,SAAS;aACb,GAAG,CACF,iCAAiC,kBAAkB,CAAC,IAAI,CAAC,EAAE,EAC3D,IAAI,CACL;aACA,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACzB,CAAC;IACD,MAAM,CAAC,EAAU;QACf,OAAO,SAAS,CAAC,MAAM,CAAO,iCAAiC,EAAE,EAAE,CAAC,CAAC;IACvE,CAAC;CACF,CAAC"}

package/dist/admin/index.d.ts

@@ -0,0 +1,33 @@
+/**
+ * `customer_accounts`' admin surface — one route and one sidebar entry,
+ * declared by the module that owns them (feature 091, Phase 4, the plan's
+ * batch 7;
+ * `specs/091-module-owned-admin-surfaces/contracts/admin-contribution.md`).
+ *
+ * **The screen is customer *groups*, and the module that owns it is the one
+ * that owns the account** — feature 076's D-79, unchanged by the move. The
+ * route is `/customer-groups`, its API is `routes.admin.ts`' three handlers,
+ * and the codes are this module's own `customer_groups:*` pair.
+ *
+ * **This module declares `activation.nonDeactivatable`**, which changes what
+ * its off-state proof can drive and not whether it has one. A lock removes the
+ * **operator's** ability to make `isPresent` answer `false`; it removes nothing
+ * from the frontend's question, because the admin asks presence of every module
+ * whatever its manifest says and the platform axis — a deployment that never
+ * installs it — reaches the same gate. That is batch four's ruling
+ * (`plan.md` Ruling 2) and `audit_logs` is the worked example.
+ *
+ * **Its sidebar position does not change.** Every other row in *Customers* is
+ * still host-declared, so `composeNav` appends this one after all of them —
+ * which is where the hand-written table already had it, fifth of six, above
+ * `/credit-limits`. The declared weight (400, the hand-written position times a
+ * hundred, batch four's convention) is what will restore the order once that
+ * section's other rows convert; there is nothing to order it against today.
+ *
+ * **This entry exports data and nothing else** (R2), like every `./admin`
+ * layer, and each component is a dynamic-import factory (R6) so Vite has a
+ * split point whether or not anybody remembers to ask for one.
+ */
+import type { AdminContributions } from '@endora-commerce/admin-kit/contributions';
+export declare const contributions: AdminContributions;
+//# sourceMappingURL=index.d.ts.map

package/dist/admin/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/admin/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,0CAA0C,CAAC;AAenF,eAAO,MAAM,aAAa,EAAE,kBAyB3B,CAAC"}

package/dist/admin/index.js

@@ -0,0 +1,38 @@
+/** The module's only admin route: the customer-group list and editor. */
+const ROUTE_PATH = '/customer-groups';
+/**
+ * The code the screen's entry route enforces —
+ * `requireAdmin('customer_groups:read')` on
+ * `GET /api/v1/admin/customer-groups` (`routes.admin.ts:37`). The two write
+ * handlers beside it take `customer_groups:write`, which is what the screen's
+ * own controls are gated on; the read code is what opens it, and it is the code
+ * the module's `open-customer-groups` palette action already declares.
+ */
+const PERMISSION = 'customer_groups:read';
+export const contributions = {
+    routes: [
+        {
+            path: ROUTE_PATH,
+            component: () => import('./pages/CustomerGroupsPage.js'),
+            requiredPermission: PERMISSION,
+            index: true,
+        },
+    ],
+    nav: [
+        {
+            to: ROUTE_PATH,
+            // Module-relative (R8), resolved in this module's own namespace out of
+            // `packages/modules/customer_accounts/i18n/`. It was
+            // `appShell.nav.customerGroups` in the shared `_i18n` bundle, one of the
+            // four shared files a module author had to edit.
+            labelKey: 'nav.customerGroups.label',
+            // The glyph `AppShell.tsx` rendered by hand, and already on
+            // `KnownIconNameSchema` — this module's own palette action names it.
+            icon: 'Users',
+            section: 'customers',
+            weight: 400,
+            requiredPermission: PERMISSION,
+        },
+    ],
+};
+//# sourceMappingURL=index.js.map

package/dist/admin/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/admin/index.ts"],"names":[],"mappings":"AAgCA,yEAAyE;AACzE,MAAM,UAAU,GAAG,kBAAkB,CAAC;AAEtC;;;;;;;GAOG;AACH,MAAM,UAAU,GAAG,sBAAsB,CAAC;AAE1C,MAAM,CAAC,MAAM,aAAa,GAAuB;IAC/C,MAAM,EAAE;QACN;YACE,IAAI,EAAE,UAAU;YAChB,SAAS,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,+BAA+B,CAAC;YACxD,kBAAkB,EAAE,UAAU;YAC9B,KAAK,EAAE,IAAI;SACZ;KACF;IACD,GAAG,EAAE;QACH;YACE,EAAE,EAAE,UAAU;YACd,uEAAuE;YACvE,qDAAqD;YACrD,yEAAyE;YACzE,iDAAiD;YACjD,QAAQ,EAAE,0BAA0B;YACpC,4DAA4D;YAC5D,qEAAqE;YACrE,IAAI,EAAE,OAAO;YACb,OAAO,EAAE,WAAW;YACpB,MAAM,EAAE,GAAG;YACX,kBAAkB,EAAE,UAAU;SAC/B;KACF;CACF,CAAC"}

package/dist/admin/pages/CustomerGroupsPage.d.ts

@@ -0,0 +1,18 @@
+import { type ReactNode } from 'react';
+/**
+ * Customer groups — the management screen (feature 076, D-79).
+ *
+ * The `PUT` and `DELETE` endpoints existed with no caller in this repository:
+ * the SPA only ever listed groups, from three pickers. This screen is the
+ * missing half. It writes through the same two endpoints, which is why creating
+ * and editing are one form — the endpoint is an upsert keyed by `code`, so the
+ * code is fixed once the group exists.
+ */
+export declare function CustomerGroupsPage(): ReactNode;
+/**
+ * The default export the route declaration's dynamic-import factory takes
+ * (`contracts/admin-contribution.md` R6). The named export is kept because the
+ * screen is also the subject of this module's own admin tests.
+ */
+export default CustomerGroupsPage;
+//# sourceMappingURL=CustomerGroupsPage.d.ts.map

package/dist/admin/pages/CustomerGroupsPage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CustomerGroupsPage.d.ts","sourceRoot":"","sources":["../../../src/admin/pages/CustomerGroupsPage.tsx"],"names":[],"mappings":"AAAA,OAAO,EAAoD,KAAK,SAAS,EAAE,MAAM,OAAO,CAAC;AAUzF;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,IAAI,SAAS,CA0K9C;AA4ED;;;;GAIG;AACH,eAAe,kBAAkB,CAAC"}

package/dist/admin/pages/CustomerGroupsPage.js

@@ -0,0 +1,108 @@
+import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
+import { useCallback, useEffect, useState } from 'react';
+import { Pencil, Trash2 } from 'lucide-react';
+import { ApiError, useAuth } from '@endora-commerce/admin-kit/lib';
+import { Alert, AlertDescription, Button, Card, CardContent, CardHeader, CardTitle, Input, Label, PageHeader, Table, TableBody, TableCell, TableHead, TableHeader, TableRow } from '@endora-commerce/admin-kit/ui';
+import { useTranslation } from '@endora-commerce/admin-kit/i18n';
+import { customerGroupsClient, } from '../api/customer-groups-client.js';
+/**
+ * Customer groups — the management screen (feature 076, D-79).
+ *
+ * The `PUT` and `DELETE` endpoints existed with no caller in this repository:
+ * the SPA only ever listed groups, from three pickers. This screen is the
+ * missing half. It writes through the same two endpoints, which is why creating
+ * and editing are one form — the endpoint is an upsert keyed by `code`, so the
+ * code is fixed once the group exists.
+ */
+export function CustomerGroupsPage() {
+    const t = useTranslation('customer_accounts');
+    const { hasPermission } = useAuth();
+    const canWrite = hasPermission('customer_groups:write');
+    const [rows, setRows] = useState([]);
+    const [loading, setLoading] = useState(true);
+    const [error, setError] = useState(null);
+    const [info, setInfo] = useState(null);
+    // `null` = the blank "new group" form; a row = an edit seeded from it. The
+    // nonce remounts the blank form after a save so it does not keep stale input.
+    const [editing, setEditing] = useState(null);
+    const [formNonce, setFormNonce] = useState(0);
+    const refresh = useCallback(async () => {
+        setLoading(true);
+        setError(null);
+        try {
+            setRows(await customerGroupsClient.list());
+        }
+        catch (err) {
+            setError(err instanceof ApiError ? err.envelope.error.message : t('groups.error.load'));
+        }
+        finally {
+            setLoading(false);
+        }
+    }, [t]);
+    useEffect(() => {
+        void refresh();
+    }, [refresh]);
+    const resetForm = useCallback(() => {
+        setEditing(null);
+        setFormNonce((n) => n + 1);
+    }, []);
+    const handleSubmit = useCallback(async (value) => {
+        setError(null);
+        try {
+            await customerGroupsClient.upsert(value.code, {
+                code: value.code,
+                name: value.name,
+                description: value.description.trim() === '' ? null : value.description,
+            });
+            setInfo(t('groups.message.saved', { code: value.code }));
+            resetForm();
+            await refresh();
+        }
+        catch (err) {
+            setError(err instanceof ApiError ? err.envelope.error.message : t('groups.error.save'));
+        }
+    }, [refresh, resetForm, t]);
+    const handleDelete = useCallback(async (row) => {
+        if (!confirm(t('groups.action.delete.confirm', { code: row.code })))
+            return;
+        setError(null);
+        try {
+            await customerGroupsClient.remove(row.id);
+            if (editing?.id === row.id)
+                resetForm();
+            setInfo(t('groups.message.deleted'));
+            await refresh();
+        }
+        catch (err) {
+            setError(err instanceof ApiError ? err.envelope.error.message : t('groups.error.delete'));
+        }
+    }, [editing, refresh, resetForm, t]);
+    const startEdit = useCallback((row) => {
+        setError(null);
+        setInfo(null);
+        setEditing(row);
+        if (typeof window !== 'undefined')
+            window.scrollTo({ top: 0, behavior: 'smooth' });
+    }, []);
+    return (_jsxs(_Fragment, { children: [_jsx(PageHeader, { title: t('groups.page.title'), description: t('groups.page.description') }), error ? (_jsx(Alert, { variant: "destructive", className: "mb-4", children: _jsx(AlertDescription, { children: error }) })) : null, info ? (_jsx(Alert, { variant: "success", className: "mb-4", children: _jsx(AlertDescription, { children: info }) })) : null, canWrite ? (_jsxs(Card, { className: "mb-4", children: [_jsx(CardHeader, { children: _jsx(CardTitle, { children: editing
+                                ? t('groups.form.editTitle', { code: editing.code })
+                                : t('groups.form.newTitle') }) }), _jsx(CardContent, { children: _jsx(GroupForm, { initial: editing, onSubmit: handleSubmit, ...(editing ? { onCancel: resetForm } : {}) }, editing ? `edit-${editing.id}` : `new-${formNonce}`) })] })) : null, _jsx(Card, { children: _jsx(CardContent, { className: "pt-6", children: loading ? (_jsx("p", { className: "text-sm text-muted-foreground", children: t('groups.loading') })) : rows.length === 0 ? (_jsx("p", { className: "text-sm text-muted-foreground", children: t('groups.empty') })) : (_jsxs(Table, { children: [_jsx(TableHeader, { children: _jsxs(TableRow, { children: [_jsx(TableHead, { children: t('groups.column.code') }), _jsx(TableHead, { children: t('groups.column.name') }), _jsx(TableHead, { children: t('groups.column.description') }), _jsx(TableHead, {})] }) }), _jsx(TableBody, { children: rows.map((row) => (_jsxs(TableRow, { children: [_jsx(TableCell, { children: _jsx("code", { className: "font-mono text-xs", children: row.code }) }), _jsx(TableCell, { children: row.name }), _jsx(TableCell, { className: "text-muted-foreground", children: row.description ?? '—' }), _jsx(TableCell, { children: canWrite ? (_jsxs("div", { className: "flex justify-end gap-2", children: [_jsxs(Button, { variant: "outline", size: "sm", type: "button", onClick: () => startEdit(row), children: [_jsx(Pencil, {}), t('groups.action.edit')] }), _jsxs(Button, { variant: "destructive", size: "sm", type: "button", onClick: () => void handleDelete(row), children: [_jsx(Trash2, {}), t('groups.action.delete')] })] })) : null })] }, row.id))) })] })) }) })] }));
+}
+function GroupForm({ initial, onSubmit, onCancel, }) {
+    const t = useTranslation('customer_accounts');
+    const isEdit = Boolean(initial);
+    const [code, setCode] = useState(initial?.code ?? '');
+    const [name, setName] = useState(initial?.name ?? '');
+    const [description, setDescription] = useState(initial?.description ?? '');
+    return (_jsxs("form", { className: "space-y-4", onSubmit: (e) => {
+            e.preventDefault();
+            void onSubmit({ code, name, description });
+        }, children: [_jsxs("div", { className: "grid gap-4 md:grid-cols-2", children: [_jsxs("div", { className: "space-y-2", children: [_jsx(Label, { htmlFor: "cgcode", children: t('groups.field.code') }), _jsx(Input, { id: "cgcode", value: code, onChange: (e) => setCode(e.target.value), required: true, disabled: isEdit, "aria-describedby": "cgcode-help" }), _jsx("p", { id: "cgcode-help", className: "text-xs text-muted-foreground", children: t('groups.field.code.help') })] }), _jsxs("div", { className: "space-y-2", children: [_jsx(Label, { htmlFor: "cgname", children: t('groups.field.name') }), _jsx(Input, { id: "cgname", value: name, onChange: (e) => setName(e.target.value), required: true })] }), _jsxs("div", { className: "space-y-2 md:col-span-2", children: [_jsx(Label, { htmlFor: "cgdesc", children: t('groups.field.description') }), _jsx(Input, { id: "cgdesc", value: description, onChange: (e) => setDescription(e.target.value) })] })] }), _jsxs("div", { className: "flex gap-2", children: [_jsx(Button, { type: "submit", children: t('groups.action.save') }), onCancel ? (_jsx(Button, { type: "button", variant: "outline", onClick: onCancel, children: t('groups.action.cancel') })) : null] })] }));
+}
+/**
+ * The default export the route declaration's dynamic-import factory takes
+ * (`contracts/admin-contribution.md` R6). The named export is kept because the
+ * screen is also the subject of this module's own admin tests.
+ */
+export default CustomerGroupsPage;
+//# sourceMappingURL=CustomerGroupsPage.js.map

package/dist/admin/pages/CustomerGroupsPage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CustomerGroupsPage.js","sourceRoot":"","sources":["../../../src/admin/pages/CustomerGroupsPage.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,QAAQ,EAAkC,MAAM,OAAO,CAAC;AACzF,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,gCAAgC,CAAC;AACnE,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,+BAA+B,CAAC;AACnN,OAAO,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AACjE,OAAO,EACL,oBAAoB,GAErB,MAAM,kCAAkC,CAAC;AAE1C;;;;;;;;GAQG;AACH,MAAM,UAAU,kBAAkB;IAChC,MAAM,CAAC,GAAG,cAAc,CAAC,mBAAmB,CAAC,CAAC;IAC9C,MAAM,EAAE,aAAa,EAAE,GAAG,OAAO,EAAE,CAAC;IACpC,MAAM,QAAQ,GAAG,aAAa,CAAC,uBAAuB,CAAC,CAAC;IACxD,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,QAAQ,CAAuB,EAAE,CAAC,CAAC;IAC3D,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC7C,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAC;IACxD,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAC;IACtD,2EAA2E;IAC3E,8EAA8E;IAC9E,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,GAAG,QAAQ,CAA4B,IAAI,CAAC,CAAC;IACxE,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;IAE9C,MAAM,OAAO,GAAG,WAAW,CAAC,KAAK,IAAmB,EAAE;QACpD,UAAU,CAAC,IAAI,CAAC,CAAC;QACjB,QAAQ,CAAC,IAAI,CAAC,CAAC;QACf,IAAI,CAAC;YACH,OAAO,CAAC,MAAM,oBAAoB,CAAC,IAAI,EAAE,CAAC,CAAC;QAC7C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,QAAQ,CAAC,GAAG,YAAY,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC;QAC1F,CAAC;gBAAS,CAAC;YACT,UAAU,CAAC,KAAK,CAAC,CAAC;QACpB,CAAC;IACH,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAER,SAAS,CAAC,GAAG,EAAE;QACb,KAAK,OAAO,EAAE,CAAC;IACjB,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IAEd,MAAM,SAAS,GAAG,WAAW,CAAC,GAAS,EAAE;QACvC,UAAU,CAAC,IAAI,CAAC,CAAC;QACjB,YAAY,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,MAAM,YAAY,GAAG,WAAW,CAC9B,KAAK,EAAE,KAAqB,EAAiB,EAAE;QAC7C,QAAQ,CAAC,IAAI,CAAC,CAAC;QACf,IAAI,CAAC;YACH,MAAM,oBAAoB,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE;gBAC5C,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,WAAW,EAAE,KAAK,CAAC,WAAW,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW;aACxE,CAAC,CAAC;YACH,OAAO,CAAC,CAAC,CAAC,sBAAsB,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;YACzD,SAAS,EAAE,CAAC;YACZ,MAAM,OAAO,EAAE,CAAC;QAClB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,QAAQ,CAAC,GAAG,YAAY,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC;QAC1F,CAAC;IACH,CAAC,EACD,CAAC,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC,CACxB,CAAC;IAEF,MAAM,YAAY,GAAG,WAAW,CAC9B,KAAK,EAAE,GAAuB,EAAiB,EAAE;QAC/C,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,8BAA8B,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;YAAE,OAAO;QAC5E,QAAQ,CAAC,IAAI,CAAC,CAAC;QACf,IAAI,CAAC;YACH,MAAM,oBAAoB,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC1C,IAAI,OAAO,EAAE,EAAE,KAAK,GAAG,CAAC,EAAE;gBAAE,SAAS,EAAE,CAAC;YACxC,OAAO,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC;YACrC,MAAM,OAAO,EAAE,CAAC;QAClB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,QAAQ,CAAC,GAAG,YAAY,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC;QAC5F,CAAC;IACH,CAAC,EACD,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC,CACjC,CAAC;IAEF,MAAM,SAAS,GAAG,WAAW,CAAC,CAAC,GAAuB,EAAQ,EAAE;QAC9D,QAAQ,CAAC,IAAI,CAAC,CAAC;QACf,OAAO,CAAC,IAAI,CAAC,CAAC;QACd,UAAU,CAAC,GAAG,CAAC,CAAC;QAChB,IAAI,OAAO,MAAM,KAAK,WAAW;YAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;IACrF,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,OAAO,CACL,8BACE,KAAC,UAAU,IAAC,KAAK,EAAE,CAAC,CAAC,mBAAmB,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,yBAAyB,CAAC,GAAI,EAEvF,KAAK,CAAC,CAAC,CAAC,CACP,KAAC,KAAK,IAAC,OAAO,EAAC,aAAa,EAAC,SAAS,EAAC,MAAM,YAC3C,KAAC,gBAAgB,cAAE,KAAK,GAAoB,GACtC,CACT,CAAC,CAAC,CAAC,IAAI,EACP,IAAI,CAAC,CAAC,CAAC,CACN,KAAC,KAAK,IAAC,OAAO,EAAC,SAAS,EAAC,SAAS,EAAC,MAAM,YACvC,KAAC,gBAAgB,cAAE,IAAI,GAAoB,GACrC,CACT,CAAC,CAAC,CAAC,IAAI,EAEP,QAAQ,CAAC,CAAC,CAAC,CACV,MAAC,IAAI,IAAC,SAAS,EAAC,MAAM,aACpB,KAAC,UAAU,cACT,KAAC,SAAS,cACP,OAAO;gCACN,CAAC,CAAC,CAAC,CAAC,uBAAuB,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC;gCACpD,CAAC,CAAC,CAAC,CAAC,sBAAsB,CAAC,GACnB,GACD,EACb,KAAC,WAAW,cACV,KAAC,SAAS,IAER,OAAO,EAAE,OAAO,EAChB,QAAQ,EAAE,YAAY,KAClB,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,IAHvC,OAAO,CAAC,CAAC,CAAC,QAAQ,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,SAAS,EAAE,CAIxD,GACU,IACT,CACR,CAAC,CAAC,CAAC,IAAI,EAER,KAAC,IAAI,cACH,KAAC,WAAW,IAAC,SAAS,EAAC,MAAM,YAC1B,OAAO,CAAC,CAAC,CAAC,CACT,YAAG,SAAS,EAAC,+BAA+B,YAAE,CAAC,CAAC,gBAAgB,CAAC,GAAK,CACvE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CACtB,YAAG,SAAS,EAAC,+BAA+B,YAAE,CAAC,CAAC,cAAc,CAAC,GAAK,CACrE,CAAC,CAAC,CAAC,CACF,MAAC,KAAK,eACJ,KAAC,WAAW,cACV,MAAC,QAAQ,eACP,KAAC,SAAS,cAAE,CAAC,CAAC,oBAAoB,CAAC,GAAa,EAChD,KAAC,SAAS,cAAE,CAAC,CAAC,oBAAoB,CAAC,GAAa,EAChD,KAAC,SAAS,cAAE,CAAC,CAAC,2BAA2B,CAAC,GAAa,EACvD,KAAC,SAAS,KAAG,IACJ,GACC,EACd,KAAC,SAAS,cACP,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CACjB,MAAC,QAAQ,eACP,KAAC,SAAS,cACR,eAAM,SAAS,EAAC,mBAAmB,YAAE,GAAG,CAAC,IAAI,GAAQ,GAC3C,EACZ,KAAC,SAAS,cAAE,GAAG,CAAC,IAAI,GAAa,EACjC,KAAC,SAAS,IAAC,SAAS,EAAC,uBAAuB,YACzC,GAAG,CAAC,WAAW,IAAI,GAAG,GACb,EACZ,KAAC,SAAS,cACP,QAAQ,CAAC,CAAC,CAAC,CACV,eAAK,SAAS,EAAC,wBAAwB,aACrC,MAAC,MAAM,IACL,OAAO,EAAC,SAAS,EACjB,IAAI,EAAC,IAAI,EACT,IAAI,EAAC,QAAQ,EACb,OAAO,EAAE,GAAS,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,aAEnC,KAAC,MAAM,KAAG,EACT,CAAC,CAAC,oBAAoB,CAAC,IACjB,EACT,MAAC,MAAM,IACL,OAAO,EAAC,aAAa,EACrB,IAAI,EAAC,IAAI,EACT,IAAI,EAAC,QAAQ,EACb,OAAO,EAAE,GAAS,EAAE,CAAC,KAAK,YAAY,CAAC,GAAG,CAAC,aAE3C,KAAC,MAAM,KAAG,EACT,CAAC,CAAC,sBAAsB,CAAC,IACnB,IACL,CACP,CAAC,CAAC,CAAC,IAAI,GACE,KA/BC,GAAG,CAAC,EAAE,CAgCV,CACZ,CAAC,GACQ,IACN,CACT,GACW,GACT,IACN,CACJ,CAAC;AACJ,CAAC;AAQD,SAAS,SAAS,CAAC,EACjB,OAAO,EACP,QAAQ,EACR,QAAQ,GAKT;IACC,MAAM,CAAC,GAAG,cAAc,CAAC,mBAAmB,CAAC,CAAC;IAC9C,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAChC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,QAAQ,CAAC,OAAO,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IACtD,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,QAAQ,CAAC,OAAO,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IACtD,MAAM,CAAC,WAAW,EAAE,cAAc,CAAC,GAAG,QAAQ,CAAC,OAAO,EAAE,WAAW,IAAI,EAAE,CAAC,CAAC;IAE3E,OAAO,CACL,gBACE,SAAS,EAAC,WAAW,EACrB,QAAQ,EAAE,CAAC,CAAY,EAAQ,EAAE;YAC/B,CAAC,CAAC,cAAc,EAAE,CAAC;YACnB,KAAK,QAAQ,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;QAC7C,CAAC,aAED,eAAK,SAAS,EAAC,2BAA2B,aACxC,eAAK,SAAS,EAAC,WAAW,aACxB,KAAC,KAAK,IAAC,OAAO,EAAC,QAAQ,YAAE,CAAC,CAAC,mBAAmB,CAAC,GAAS,EACxD,KAAC,KAAK,IACJ,EAAE,EAAC,QAAQ,EACX,KAAK,EAAE,IAAI,EACX,QAAQ,EAAE,CAAC,CAAC,EAAQ,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAC9C,QAAQ,QACR,QAAQ,EAAE,MAAM,sBACC,aAAa,GAC9B,EACF,YAAG,EAAE,EAAC,aAAa,EAAC,SAAS,EAAC,+BAA+B,YAC1D,CAAC,CAAC,wBAAwB,CAAC,GAC1B,IACA,EACN,eAAK,SAAS,EAAC,WAAW,aACxB,KAAC,KAAK,IAAC,OAAO,EAAC,QAAQ,YAAE,CAAC,CAAC,mBAAmB,CAAC,GAAS,EACxD,KAAC,KAAK,IACJ,EAAE,EAAC,QAAQ,EACX,KAAK,EAAE,IAAI,EACX,QAAQ,EAAE,CAAC,CAAC,EAAQ,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAC9C,QAAQ,SACR,IACE,EACN,eAAK,SAAS,EAAC,yBAAyB,aACtC,KAAC,KAAK,IAAC,OAAO,EAAC,QAAQ,YAAE,CAAC,CAAC,0BAA0B,CAAC,GAAS,EAC/D,KAAC,KAAK,IACJ,EAAE,EAAC,QAAQ,EACX,KAAK,EAAE,WAAW,EAClB,QAAQ,EAAE,CAAC,CAAC,EAAQ,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,GACrD,IACE,IACF,EACN,eAAK,SAAS,EAAC,YAAY,aACzB,KAAC,MAAM,IAAC,IAAI,EAAC,QAAQ,YAAE,CAAC,CAAC,oBAAoB,CAAC,GAAU,EACvD,QAAQ,CAAC,CAAC,CAAC,CACV,KAAC,MAAM,IAAC,IAAI,EAAC,QAAQ,EAAC,OAAO,EAAC,SAAS,EAAC,OAAO,EAAE,QAAQ,YACtD,CAAC,CAAC,sBAAsB,CAAC,GACnB,CACV,CAAC,CAAC,CAAC,IAAI,IACJ,IACD,CACR,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,eAAe,kBAAkB,CAAC"}

package/dist/backend/entities/customer-account.entity.d.ts

@@ -0,0 +1,111 @@
+import { OptionalProps } from '@mikro-orm/core';
+/**
+ * CustomerAccount — a user inside an Organization. One email ⇒ at most one
+ * CustomerAccount installation-wide (FR-041).
+ *
+ * `passwordHash` is an argon2id-derived key (see services/password-hasher.ts
+ * in the auth module).
+ */
+export declare class CustomerAccount {
+    [OptionalProps]?: 'customFieldValues' | 'id' | 'createdAt' | 'updatedAt' | 'role' | 'emailVerifiedAt' | 'passwordSetAt' | 'twoFactorConfirmedAt' | 'lastLoginAt' | 'deletedAt' | 'customerGroupId' | 'subtreeRollupEnabled' | 'blockedAt' | 'blockReason' | 'blockSource' | 'blockedByAdminUserId' | 'blockedByCustomerAccountId' | 'deletionRequestedByAdminUserId' | 'anonymizedAt';
+    id: string;
+    /**
+     * The tenant that scopes this account, and the platform's single unit of
+     * tenancy (Principle XI).
+     *
+     * **Not nullable, since D-178.** Feature 026 US2 relaxed it so the platform
+     * could serve "no-org / guest-style" accounts falling back to platform
+     * defaults for prices, credit limit, allowed payment and delivery methods and
+     * warehouse visibility. Feature 051 replaced that design: an individual (B2C)
+     * customer is backed by a single-member **personal** organisation, so the
+     * guard always has a concrete tenant and there is no "no-organization"
+     * scoping path. The column stayed nullable for another year and three write
+     * paths went on producing NULLs — self-registration's two-flush window,
+     * federated sign-in (which provisioned no organisation at all), and an admin
+     * "un-assign" button. All three are closed, and the column is `NOT NULL`,
+     * which is the only refusal available: MikroORM applies its tenant filter to
+     * `SELECT` / `UPDATE` / `DELETE` and not to `INSERT`, so nothing in the guard
+     * can stop a tenant-less row being written.
+     *
+     * The account and its organisation are created in **one transaction** — see
+     * `CustomerAccountLifecycleWriteService.createStandalone` and the
+     * federated-sign-in `autoCreate` in this module's `backend.ts`.
+     */
+    organizationId: string;
+    email: string;
+    passwordHash: string;
+    /**
+     * Issue #222 — when a password somebody supplied was last set on this
+     * account. `null` means "no such password is on record", which covers both
+     * the account federated sign-in auto-created (its hash is a random pair of
+     * UUIDs nobody was told) and every row written before this column existed.
+     *
+     * It exists because `passwordHash` is NOT NULL for *every* account and
+     * therefore answers a different question from the one that matters on a
+     * security surface: whether the holder has a credential they can actually
+     * use. `SocialLinkService` is the first reader — it refuses to sever an
+     * account's last federated identity while this is null.
+     *
+     * Stamped by every write of a caller-supplied password (registration, the
+     * member write port, a redeemed reset token, a self-service change) and
+     * deliberately **not** by the generated hash. The anonymization sweep clears
+     * it back to null with the hash it scrubs.
+     */
+    passwordSetAt?: Date | null;
+    firstName: string;
+    lastName: string;
+    role: 'organization_admin' | 'regular_user';
+    emailVerifiedAt?: Date | null;
+    /**
+     * Never written, and since 2026-08-28 never **read** either.
+     *
+     * Its only non-null writer was the superseded customer 2FA path, deleted with
+     * `two_factor_secret`, so the published `twoFactorEnabled` derived from it
+     * was a provably constant `false` — including on `GET /api/v1/me/customer`,
+     * which told a buyer their own account was unprotected while it was not.
+     * `CustomerAccountRecord.twoFactorEnabled` is now the live `mfa` enrolment,
+     * read through `mfaEnrolmentStatePort`, and nothing in the tree reads this
+     * column.
+     *
+     * It is dead schema kept for one more step: dropping it is a migration on
+     * this module's table and is deliberately not folded into the repair of the
+     * five derivation sites. Do not read it — the honest answer is `mfa`'s.
+     */
+    twoFactorConfirmedAt?: Date | null;
+    lastLoginAt?: Date | null;
+    createdAt: Date;
+    updatedAt: Date;
+    customFieldValues: Record<string, unknown>;
+    deletedAt?: Date | null;
+    /**
+     * Direct customer→customer-group membership (FR-022). Independent of the
+     * Organization's group: the effective pricing group is
+     * `customerGroupId ?? organization.customerGroupId`. FK to `customer_groups`
+     * (owned by price_lists), ON DELETE SET NULL.
+     */
+    customerGroupId?: string | null;
+    /**
+     * Feature 056 (T032) — customer-side roll-up capability. When `true`, this
+     * login sees/acts across its organization's **subtree** (the tenant scope is
+     * widened from single-org to `allowed-set(subtreeIds(theirOrg))` server-side,
+     * Principle XI). Default `false` ⇒ node-only (flat behavior). Set only by a
+     * platform admin on the org member surface; mirrors the admin/sales-rep
+     * `organizations:rollup` capability for a buyer account.
+     */
+    subtreeRollupEnabled: boolean;
+    /** Non-null ⇒ the account is blocked and login is denied (FR-012/FR-016). */
+    blockedAt?: Date | null;
+    blockReason?: string | null;
+    /** Who applied the block — drives unblock authority (FR-013/FR-015). */
+    blockSource?: 'staff' | 'org_owner' | null;
+    blockedByAdminUserId?: string | null;
+    blockedByCustomerAccountId?: string | null;
+    /** Admin who soft-deleted the account (paired with `deletedAt`, FR-039). */
+    deletionRequestedByAdminUserId?: string | null;
+    /**
+     * Non-null ⇒ PII has been irreversibly scrubbed by the anonymization sweep
+     * after the retention window; restore is no longer possible (FR-040).
+     */
+    anonymizedAt?: Date | null;
+}
+//# sourceMappingURL=customer-account.entity.d.ts.map

package/dist/backend/entities/customer-account.entity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"customer-account.entity.d.ts","sourceRoot":"","sources":["../../../src/backend/entities/customer-account.entity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAiB,aAAa,EAAgC,MAAM,iBAAiB,CAAC;AAI7F;;;;;;GAMG;AACH,qBAEa,eAAe;IAC1B,CAAC,aAAa,CAAC,CAAC,EACZ,mBAAmB,GACnB,IAAI,GACJ,WAAW,GACX,WAAW,GACX,MAAM,GACN,iBAAiB,GACjB,eAAe,GACf,sBAAsB,GACtB,aAAa,GACb,WAAW,GACX,iBAAiB,GACjB,sBAAsB,GACtB,WAAW,GACX,aAAa,GACb,aAAa,GACb,sBAAsB,GACtB,4BAA4B,GAC5B,gCAAgC,GAChC,cAAc,CAAC;IAGnB,EAAE,EAAE,MAAM,CAAgB;IAE1B;;;;;;;;;;;;;;;;;;;;;OAqBG;IAGH,cAAc,EAAG,MAAM,CAAC;IAIxB,KAAK,EAAG,MAAM,CAAC;IAGf,YAAY,EAAG,MAAM,CAAC;IAEtB;;;;;;;;;;;;;;;;OAgBG;IAEH,aAAa,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC;IAG5B,SAAS,EAAG,MAAM,CAAC;IAGnB,QAAQ,EAAG,MAAM,CAAC;IAIlB,IAAI,EAAE,oBAAoB,GAAG,cAAc,CAAkB;IAG7D,eAAe,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC;IAE9B;;;;;;;;;;;;;;OAcG;IAEH,oBAAoB,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC;IAGnC,WAAW,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC;IAG1B,SAAS,EAAE,IAAI,CAAc;IAG7B,SAAS,EAAE,IAAI,CAAc;IAI7B,iBAAiB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAM;IAGhD,SAAS,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC;IAIxB;;;;;OAKG;IAGH,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAEhC;;;;;;;OAOG;IAEH,oBAAoB,EAAE,OAAO,CAAS;IAEtC,6EAA6E;IAG7E,SAAS,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC;IAGxB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAE5B,wEAAwE;IAExE,WAAW,CAAC,EAAE,OAAO,GAAG,WAAW,GAAG,IAAI,CAAC;IAG3C,oBAAoB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAGrC,0BAA0B,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAE3C,4EAA4E;IAE5E,8BAA8B,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAE/C;;;OAGG;IAEH,YAAY,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC;CAC5B"}