@endora-commerce/mod-customer-accounts 0.100.0

package/dist/backend/services/customer-account-lifecycle-ports.d.ts

@@ -0,0 +1,168 @@
+import type { EntityManager } from '@mikro-orm/postgresql';
+import { type CustomerAccountAdminSearchCriteria, type CustomerAccountAdminSearchPort, type CustomerAccountAdminSearchResult, type CustomerAccountLifecycleWritePort, type CustomerAccountRecord, type CustomerAccountStandaloneCreateInput, type CustomerAccountWriteRequestMeta } from '@endora-commerce/contracts';
+import type { CommandBus } from '@endora-commerce/platform/commands';
+import type { AuditPort } from '@endora-commerce/platform/kernel';
+import type { PersonalOrganizationProvisionApi } from '@endora-commerce/mod-organizations/ports';
+import type { TwoFactorEnrolmentReader } from './two-factor-enrolments.js';
+/**
+ * The account lifecycle `customers` runs over this module's table
+ * (feature 075, Phase C).
+ *
+ * It ran it by loading and mutating the `CustomerAccount` entity in five of its
+ * own services and two route files — block, unblock, soft-delete, restore,
+ * anonymise, organisation assignment, group assignment, the standalone
+ * registration and the admin custom-field patch. Each is one method here, each
+ * one unit of work on this table alone, because a write port that took the
+ * caller's `EntityManager` would publish the coupling instead of removing it
+ * (D-78).
+ *
+ * **The policy stayed with the caller.** Whether the acting staff member may
+ * touch this customer, and whether the write would strand an organisation
+ * without an administrator, are `customers`' questions and are still asked
+ * there; the counting half of the second is
+ * `CustomerAccountReadPort.countByOrganizationRole`, which already existed.
+ *
+ * **The audit row came here** — one row, with the action string the caller used
+ * to write, so nothing an operator can see moved. Unlike
+ * `CustomerAccountMemberWriteService` the caller keeps no second row: there,
+ * "an operator edited this member on the organisation panel" and "this
+ * account's e-mail changed" are two facts; here "an operator blocked this
+ * customer" *is* the write, and recording it twice would be a defect rather
+ * than a pair.
+ */
+/** The name a scrubbed account's first and last name are replaced with. */
+export declare const ANONYMIZED_CUSTOMER_NAME = "Deleted customer";
+/**
+ * The placeholder written over `password_hash`. It is deliberately not a hash
+ * of anything: the column is NOT NULL, and nothing may authenticate against a
+ * scrubbed account. `passwordSetAt` is cleared beside it (issue #222).
+ */
+export declare const ANONYMIZED_PASSWORD_HASH = "anonymized-no-login";
+export declare class CustomerAccountLifecycleWriteService implements CustomerAccountLifecycleWritePort {
+    #private;
+    private readonly emFactory;
+    private readonly auditLog;
+    /**
+     * `mfa`'s answer to which of these accounts hold a second factor. Every
+     * method here answers with a `CustomerAccountRecord`, and that record
+     * carries `twoFactorEnabled` — so the alternative to threading it is a
+     * record that says `false` about an enrolled buyer, which is the defect
+     * this parameter exists to remove.
+     */
+    private readonly twoFactorEnrolments;
+    /**
+     * D-178 — `organizations`' co-transactional provisioning seam, held here
+     * because {@link createStandalone} writes the account **and** the individual's
+     * personal organisation in one transaction. See
+     * `organizations/ports/personal-organization-provision.ts` for the foreign
+     * key that makes that a requirement rather than a preference.
+     */
+    private readonly personalOrganizations;
+    /**
+     * Only {@link setCustomFieldValues} needs it, because that one write is a
+     * read-modify-write and has to stay in one transaction. The method says so
+     * and refuses without it.
+     */
+    private readonly commandBus?;
+    constructor(emFactory: () => EntityManager, auditLog: AuditPort, 
+    /**
+     * `mfa`'s answer to which of these accounts hold a second factor. Every
+     * method here answers with a `CustomerAccountRecord`, and that record
+     * carries `twoFactorEnabled` — so the alternative to threading it is a
+     * record that says `false` about an enrolled buyer, which is the defect
+     * this parameter exists to remove.
+     */
+    twoFactorEnrolments: TwoFactorEnrolmentReader, 
+    /**
+     * D-178 — `organizations`' co-transactional provisioning seam, held here
+     * because {@link createStandalone} writes the account **and** the individual's
+     * personal organisation in one transaction. See
+     * `organizations/ports/personal-organization-provision.ts` for the foreign
+     * key that makes that a requirement rather than a preference.
+     */
+    personalOrganizations: PersonalOrganizationProvisionApi, 
+    /**
+     * Only {@link setCustomFieldValues} needs it, because that one write is a
+     * read-modify-write and has to stay in one transaction. The method says so
+     * and refuses without it.
+     */
+    commandBus?: CommandBus | undefined);
+    /**
+     * Self-registration: the account row **and** the tenant that scopes it, in one
+     * transaction (D-178).
+     *
+     * It used to be two committed units of work — this method wrote
+     * `organizationId: null` and flushed, and `customers`' registration service
+     * then called `personalOrganizationPort.ensureForCustomerAccount`. A failure
+     * between them (the port disabled, the database blipping, the process killed)
+     * left a durable account with no organisation, no session for the visitor to
+     * retry from, and nothing anywhere that re-ran the provisioning. That is one
+     * of the three producers D-178 closed, and the column is `NOT NULL` now, so
+     * the old order would fail at the insert rather than leave a bad row.
+     *
+     * The account id is generated here rather than by the entity default because
+     * the organisation has to exist first — its `taxId` is derived from that id,
+     * which is what makes the provisioning re-runnable — and the account's foreign
+     * key has to point at it.
+     */
+    createStandalone(input: CustomerAccountStandaloneCreateInput): Promise<CustomerAccountRecord>;
+    block(customerAccountId: string, input: {
+        actorAdminUserId: string;
+        reason?: string | null;
+        audit?: CustomerAccountWriteRequestMeta;
+    }): Promise<CustomerAccountRecord>;
+    unblock(customerAccountId: string, input: {
+        actorAdminUserId: string;
+        audit?: CustomerAccountWriteRequestMeta;
+    }): Promise<CustomerAccountRecord>;
+    softDelete(customerAccountId: string, input: {
+        actorAdminUserId: string;
+    }): Promise<CustomerAccountRecord>;
+    restore(customerAccountId: string, input: {
+        actorAdminUserId: string;
+    }): Promise<CustomerAccountRecord>;
+    setOrganization(customerAccountId: string, organizationId: string, input: {
+        actorAdminUserId: string;
+    }): Promise<CustomerAccountRecord>;
+    /**
+     * D-178 — an operator detaching a member from a company.
+     *
+     * The write is byte-identical to {@link setOrganization}'s; only the audit
+     * verb differs, and it is the verb this operation has always recorded. What
+     * changed is what it writes: `organization_id = NULL` until D-178, which left
+     * an account that could not place an order, submit an RFQ or read an address —
+     * and which the column now refuses outright.
+     *
+     * The destination is the account's own personal organisation, resolved by the
+     * caller through `organizations`. This module does not resolve it, because
+     * that would make the account table's owner responsible for the tenancy
+     * policy of the module it points at.
+     */
+    detachToPersonalOrganization(customerAccountId: string, personalOrganizationId: string, input: {
+        actorAdminUserId: string;
+    }): Promise<CustomerAccountRecord>;
+    setCustomerGroup(customerAccountId: string, customerGroupId: string | null, input: {
+        actorAdminUserId: string;
+    }): Promise<CustomerAccountRecord>;
+    setCustomFieldValues(customerAccountId: string, merge: (current: Record<string, unknown>) => Promise<Record<string, unknown>>): Promise<CustomerAccountRecord>;
+    listDueForAnonymization(cutoff: Date): Promise<CustomerAccountRecord[]>;
+    anonymize(customerAccountId: string): Promise<CustomerAccountRecord>;
+}
+/**
+ * The admin customer list (feature 040, US5).
+ *
+ * `customers` built the whole query itself — the lifecycle filter, the
+ * sales-rep visibility scope, the free-text predicate and the page — against
+ * this module's entity. The **shape** of the answer is that module's screen and
+ * the **statement** is this module's table, so the criteria cross as plain data
+ * and the SQL stays here. It has to be one statement: narrowing a page after
+ * the fact returns fewer rows than the caller asked for, and paging after
+ * narrowing reads the whole table.
+ */
+export declare class CustomerAccountAdminSearchService implements CustomerAccountAdminSearchPort {
+    private readonly emFactory;
+    private readonly twoFactorEnrolments;
+    constructor(emFactory: () => EntityManager, twoFactorEnrolments: TwoFactorEnrolmentReader);
+    search(criteria: CustomerAccountAdminSearchCriteria): Promise<CustomerAccountAdminSearchResult>;
+}
+//# sourceMappingURL=customer-account-lifecycle-ports.d.ts.map

package/dist/backend/services/customer-account-lifecycle-ports.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"customer-account-lifecycle-ports.d.ts","sourceRoot":"","sources":["../../../src/backend/services/customer-account-lifecycle-ports.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAe,MAAM,uBAAuB,CAAC;AAExE,OAAO,EAGL,KAAK,kCAAkC,EACvC,KAAK,8BAA8B,EACnC,KAAK,gCAAgC,EACrC,KAAK,iCAAiC,EACtC,KAAK,qBAAqB,EAC1B,KAAK,oCAAoC,EACzC,KAAK,+BAA+B,EACrC,MAAM,4BAA4B,CAAC;AACpC,OAAO,KAAK,EAAW,UAAU,EAAE,MAAM,oCAAoC,CAAC;AAG9E,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kCAAkC,CAAC;AAQlE,OAAO,KAAK,EAAE,gCAAgC,EAAE,MAAM,0CAA0C,CAAC;AAOjG,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,4BAA4B,CAAC;AAE3E;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,2EAA2E;AAC3E,eAAO,MAAM,wBAAwB,qBAAqB,CAAC;AAE3D;;;;GAIG;AACH,eAAO,MAAM,wBAAwB,wBAAwB,CAAC;AAU9D,qBAAa,oCAAqC,YAAW,iCAAiC;;IAE1F,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB;;;;;;OAMG;IACH,OAAO,CAAC,QAAQ,CAAC,mBAAmB;IACpC;;;;;;OAMG;IACH,OAAO,CAAC,QAAQ,CAAC,qBAAqB;IACtC;;;;OAIG;IACH,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC;gBAvBX,SAAS,EAAE,MAAM,aAAa,EAC9B,QAAQ,EAAE,SAAS;IACpC;;;;;;OAMG;IACc,mBAAmB,EAAE,wBAAwB;IAC9D;;;;;;OAMG;IACc,qBAAqB,EAAE,gCAAgC;IACxE;;;;OAIG;IACc,UAAU,CAAC,EAAE,UAAU,YAAA;IAG1C;;;;;;;;;;;;;;;;;OAiBG;IACG,gBAAgB,CACpB,KAAK,EAAE,oCAAoC,GAC1C,OAAO,CAAC,qBAAqB,CAAC;IAsE3B,KAAK,CACT,iBAAiB,EAAE,MAAM,EACzB,KAAK,EAAE;QACL,gBAAgB,EAAE,MAAM,CAAC;QACzB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACvB,KAAK,CAAC,EAAE,+BAA+B,CAAC;KACzC,GACA,OAAO,CAAC,qBAAqB,CAAC;IAuB3B,OAAO,CACX,iBAAiB,EAAE,MAAM,EACzB,KAAK,EAAE;QAAE,gBAAgB,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,+BAA+B,CAAA;KAAE,GAC3E,OAAO,CAAC,qBAAqB,CAAC;IAyB3B,UAAU,CACd,iBAAiB,EAAE,MAAM,EACzB,KAAK,EAAE;QAAE,gBAAgB,EAAE,MAAM,CAAA;KAAE,GAClC,OAAO,CAAC,qBAAqB,CAAC;IAuB3B,OAAO,CACX,iBAAiB,EAAE,MAAM,EACzB,KAAK,EAAE;QAAE,gBAAgB,EAAE,MAAM,CAAA;KAAE,GAClC,OAAO,CAAC,qBAAqB,CAAC;IA0B3B,eAAe,CACnB,iBAAiB,EAAE,MAAM,EACzB,cAAc,EAAE,MAAM,EACtB,KAAK,EAAE;QAAE,gBAAgB,EAAE,MAAM,CAAA;KAAE,GAClC,OAAO,CAAC,qBAAqB,CAAC;IASjC;;;;;;;;;;;;;OAaG;IACG,4BAA4B,CAChC,iBAAiB,EAAE,MAAM,EACzB,sBAAsB,EAAE,MAAM,EAC9B,KAAK,EAAE;QAAE,gBAAgB,EAAE,MAAM,CAAA;KAAE,GAClC,OAAO,CAAC,qBAAqB,CAAC;IAwB3B,gBAAgB,CACpB,iBAAiB,EAAE,MAAM,EACzB,eAAe,EAAE,MAAM,GAAG,IAAI,EAC9B,KAAK,EAAE;QAAE,gBAAgB,EAAE,MAAM,CAAA;KAAE,GAClC,OAAO,CAAC,qBAAqB,CAAC;IAgB3B,oBAAoB,CACxB,iBAAiB,EAAE,MAAM,EACzB,KAAK,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAC5E,OAAO,CAAC,qBAAqB,CAAC;IAmC3B,uBAAuB,CAAC,MAAM,EAAE,IAAI,GAAG,OAAO,CAAC,qBAAqB,EAAE,CAAC;IAQvE,SAAS,CAAC,iBAAiB,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,CAAC;CA8D3E;AAED;;;;;;;;;;GAUG;AACH,qBAAa,iCAAkC,YAAW,8BAA8B;IAEpF,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,mBAAmB;gBADnB,SAAS,EAAE,MAAM,aAAa,EAC9B,mBAAmB,EAAE,wBAAwB;IAG1D,MAAM,CACV,QAAQ,EAAE,kCAAkC,GAC3C,OAAO,CAAC,gCAAgC,CAAC;CAkD7C"}

package/dist/backend/services/customer-account-lifecycle-ports.js

@@ -0,0 +1,420 @@
+import { randomUUID } from 'node:crypto';
+import { UniqueConstraintViolationException } from '@mikro-orm/core';
+import { ERROR_CODES, normalizeEmailAddress, } from '@endora-commerce/contracts';
+import { recordAuditFromContext } from '@endora-commerce/platform/commands';
+import { HttpError } from '@endora-commerce/platform/http';
+import { hashPassword } from '@endora-commerce/platform/kernel';
+import { CustomerAccount } from '../entities/customer-account.entity.js';
+import { toCustomerAccountRecord, toCustomerAccountRecords, toOneCustomerAccountRecord, } from './customer-account-ports.js';
+/**
+ * The account lifecycle `customers` runs over this module's table
+ * (feature 075, Phase C).
+ *
+ * It ran it by loading and mutating the `CustomerAccount` entity in five of its
+ * own services and two route files — block, unblock, soft-delete, restore,
+ * anonymise, organisation assignment, group assignment, the standalone
+ * registration and the admin custom-field patch. Each is one method here, each
+ * one unit of work on this table alone, because a write port that took the
+ * caller's `EntityManager` would publish the coupling instead of removing it
+ * (D-78).
+ *
+ * **The policy stayed with the caller.** Whether the acting staff member may
+ * touch this customer, and whether the write would strand an organisation
+ * without an administrator, are `customers`' questions and are still asked
+ * there; the counting half of the second is
+ * `CustomerAccountReadPort.countByOrganizationRole`, which already existed.
+ *
+ * **The audit row came here** — one row, with the action string the caller used
+ * to write, so nothing an operator can see moved. Unlike
+ * `CustomerAccountMemberWriteService` the caller keeps no second row: there,
+ * "an operator edited this member on the organisation panel" and "this
+ * account's e-mail changed" are two facts; here "an operator blocked this
+ * customer" *is* the write, and recording it twice would be a defect rather
+ * than a pair.
+ */
+/** The name a scrubbed account's first and last name are replaced with. */
+export const ANONYMIZED_CUSTOMER_NAME = 'Deleted customer';
+/**
+ * The placeholder written over `password_hash`. It is deliberately not a hash
+ * of anything: the column is NOT NULL, and nothing may authenticate against a
+ * scrubbed account. `passwordSetAt` is cleared beside it (issue #222).
+ */
+export const ANONYMIZED_PASSWORD_HASH = 'anonymized-no-login';
+function blockSnapshot(account) {
+    return {
+        blockedAt: account.blockedAt ? account.blockedAt.toISOString() : null,
+        blockSource: account.blockSource ?? null,
+        blockReason: account.blockReason ?? null,
+    };
+}
+export class CustomerAccountLifecycleWriteService {
+    emFactory;
+    auditLog;
+    twoFactorEnrolments;
+    personalOrganizations;
+    commandBus;
+    constructor(emFactory, auditLog, 
+    /**
+     * `mfa`'s answer to which of these accounts hold a second factor. Every
+     * method here answers with a `CustomerAccountRecord`, and that record
+     * carries `twoFactorEnabled` — so the alternative to threading it is a
+     * record that says `false` about an enrolled buyer, which is the defect
+     * this parameter exists to remove.
+     */
+    twoFactorEnrolments, 
+    /**
+     * D-178 — `organizations`' co-transactional provisioning seam, held here
+     * because {@link createStandalone} writes the account **and** the individual's
+     * personal organisation in one transaction. See
+     * `organizations/ports/personal-organization-provision.ts` for the foreign
+     * key that makes that a requirement rather than a preference.
+     */
+    personalOrganizations, 
+    /**
+     * Only {@link setCustomFieldValues} needs it, because that one write is a
+     * read-modify-write and has to stay in one transaction. The method says so
+     * and refuses without it.
+     */
+    commandBus) {
+        this.emFactory = emFactory;
+        this.auditLog = auditLog;
+        this.twoFactorEnrolments = twoFactorEnrolments;
+        this.personalOrganizations = personalOrganizations;
+        this.commandBus = commandBus;
+    }
+    /**
+     * Self-registration: the account row **and** the tenant that scopes it, in one
+     * transaction (D-178).
+     *
+     * It used to be two committed units of work — this method wrote
+     * `organizationId: null` and flushed, and `customers`' registration service
+     * then called `personalOrganizationPort.ensureForCustomerAccount`. A failure
+     * between them (the port disabled, the database blipping, the process killed)
+     * left a durable account with no organisation, no session for the visitor to
+     * retry from, and nothing anywhere that re-ran the provisioning. That is one
+     * of the three producers D-178 closed, and the column is `NOT NULL` now, so
+     * the old order would fail at the insert rather than leave a bad row.
+     *
+     * The account id is generated here rather than by the entity default because
+     * the organisation has to exist first — its `taxId` is derived from that id,
+     * which is what makes the provisioning re-runnable — and the account's foreign
+     * key has to point at it.
+     */
+    async createStandalone(input) {
+        const em = this.emFactory();
+        // Folded, like the other write on this table and like every read of it.
+        // This entrance stored the address verbatim while
+        // `CustomerAccountMemberWriteService.create` folded it, so which spelling a
+        // row held depended on which door the buyer came through; the login read
+        // matched neither reliably. One normalisation now answers for all of them.
+        const email = normalizeEmailAddress(input.email);
+        const existing = await em.findOne(CustomerAccount, { email });
+        if (existing) {
+            throw new HttpError(409, ERROR_CODES.EMAIL_ALREADY_REGISTERED, 'An account with this email already exists.');
+        }
+        const customerAccountId = randomUUID();
+        const passwordHash = await hashPassword(input.password);
+        return em.transactional(async (tem) => {
+            const organization = await this.personalOrganizations.provisionFor(tem, {
+                customerAccountId,
+                email,
+                firstName: input.firstName,
+                lastName: input.lastName,
+            });
+            const account = tem.create(CustomerAccount, {
+                id: customerAccountId,
+                email,
+                passwordHash,
+                // Issue #222 — the visitor typed this password on the registration form.
+                passwordSetAt: new Date(),
+                firstName: input.firstName,
+                lastName: input.lastName,
+                organizationId: organization.id,
+            });
+            // Self-registration is pre-auth, so there is no ambient actor and the row
+            // is recorded with a null one — as it was before this write moved here.
+            recordAuditFromContext(this.auditLog, tem, {
+                action: 'customer_account.register_standalone',
+                objectType: 'customer_account',
+                objectId: account.id,
+                stateBefore: null,
+                stateAfter: { email: account.email },
+            });
+            try {
+                await tem.flush();
+            }
+            catch (err) {
+                // The unique index is the real arbiter; the pre-check above only buys a
+                // better message for the common case. The port call is deliberately
+                // outside this `catch`: a `ModuleDisabledError` from it must reach the
+                // caller as the 503 it is, not as a duplicate-address 409.
+                if (err instanceof UniqueConstraintViolationException) {
+                    throw new HttpError(409, ERROR_CODES.EMAIL_ALREADY_REGISTERED, 'An account with this email already exists.');
+                }
+                throw err;
+            }
+            // `false` is **derived** here rather than defaulted: the account was
+            // created microseconds ago inside this transaction, `mfa_enrolments` is
+            // keyed on its id and nobody has had a chance to enrol against it. Asking
+            // `mfa` would take a second pooled connection while this transaction
+            // holds one, on the pre-auth registration path, to be told the same
+            // thing.
+            return toCustomerAccountRecord(account, false);
+        });
+    }
+    async block(customerAccountId, input) {
+        const em = this.emFactory();
+        const account = await this.#loadLive(em, customerAccountId);
+        if (account.blockedAt)
+            return toOneCustomerAccountRecord(this.twoFactorEnrolments, account);
+        const before = blockSnapshot(account);
+        account.blockedAt = new Date();
+        account.blockSource = 'staff';
+        account.blockedByAdminUserId = input.actorAdminUserId;
+        account.blockedByCustomerAccountId = null;
+        account.blockReason = input.reason ?? null;
+        await em.flush();
+        await this.#record('customer_account.blocked', account.id, input.actorAdminUserId, before, blockSnapshot(account), input.audit);
+        return toOneCustomerAccountRecord(this.twoFactorEnrolments, account);
+    }
+    async unblock(customerAccountId, input) {
+        const em = this.emFactory();
+        const account = await this.#loadLive(em, customerAccountId);
+        if (!account.blockedAt) {
+            return toOneCustomerAccountRecord(this.twoFactorEnrolments, account);
+        }
+        const before = blockSnapshot(account);
+        account.blockedAt = null;
+        account.blockSource = null;
+        account.blockedByAdminUserId = null;
+        account.blockedByCustomerAccountId = null;
+        account.blockReason = null;
+        await em.flush();
+        await this.#record('customer_account.unblocked', account.id, input.actorAdminUserId, before, blockSnapshot(account), input.audit);
+        return toOneCustomerAccountRecord(this.twoFactorEnrolments, account);
+    }
+    async softDelete(customerAccountId, input) {
+        const em = this.emFactory();
+        const account = await this.#load(em, customerAccountId);
+        if (account.deletedAt) {
+            throw new HttpError(409, ERROR_CODES.CUSTOMER_ALREADY_DELETED, 'Customer is already deleted.');
+        }
+        account.deletedAt = new Date();
+        account.deletionRequestedByAdminUserId = input.actorAdminUserId;
+        await em.flush();
+        await this.#record('customer_account.deleted', account.id, input.actorAdminUserId, { deletedAt: null }, { deletedAt: account.deletedAt.toISOString() });
+        return toOneCustomerAccountRecord(this.twoFactorEnrolments, account);
+    }
+    async restore(customerAccountId, input) {
+        const em = this.emFactory();
+        const account = await this.#load(em, customerAccountId);
+        if (!account.deletedAt) {
+            throw new HttpError(409, ERROR_CODES.CUSTOMER_NOT_DELETED, 'Customer is not deleted.');
+        }
+        if (account.anonymizedAt) {
+            throw new HttpError(409, ERROR_CODES.CUSTOMER_RESTORE_WINDOW_ELAPSED, 'The restore window has elapsed; this account has been permanently anonymized.');
+        }
+        account.deletedAt = null;
+        account.deletionRequestedByAdminUserId = null;
+        await em.flush();
+        await this.#record('customer_account.restored', account.id, input.actorAdminUserId, { deletedAt: 'set' }, { deletedAt: null });
+        return toOneCustomerAccountRecord(this.twoFactorEnrolments, account);
+    }
+    async setOrganization(customerAccountId, organizationId, input) {
+        return this.#writeOrganization('customer_account.organization_assigned', customerAccountId, organizationId, input);
+    }
+    /**
+     * D-178 — an operator detaching a member from a company.
+     *
+     * The write is byte-identical to {@link setOrganization}'s; only the audit
+     * verb differs, and it is the verb this operation has always recorded. What
+     * changed is what it writes: `organization_id = NULL` until D-178, which left
+     * an account that could not place an order, submit an RFQ or read an address —
+     * and which the column now refuses outright.
+     *
+     * The destination is the account's own personal organisation, resolved by the
+     * caller through `organizations`. This module does not resolve it, because
+     * that would make the account table's owner responsible for the tenancy
+     * policy of the module it points at.
+     */
+    async detachToPersonalOrganization(customerAccountId, personalOrganizationId, input) {
+        return this.#writeOrganization('customer_account.organization_unassigned', customerAccountId, personalOrganizationId, input);
+    }
+    async #writeOrganization(action, customerAccountId, organizationId, input) {
+        const em = this.emFactory();
+        const account = await this.#loadLive(em, customerAccountId);
+        const before = { organizationId: account.organizationId };
+        account.organizationId = organizationId;
+        await em.flush();
+        await this.#record(action, account.id, input.actorAdminUserId, before, { organizationId });
+        return toOneCustomerAccountRecord(this.twoFactorEnrolments, account);
+    }
+    async setCustomerGroup(customerAccountId, customerGroupId, input) {
+        const em = this.emFactory();
+        const account = await this.#loadLive(em, customerAccountId);
+        const before = { customerGroupId: account.customerGroupId ?? null };
+        account.customerGroupId = customerGroupId;
+        await em.flush();
+        await this.#record('customer_account.group_assigned', account.id, input.actorAdminUserId, before, { customerGroupId });
+        return toOneCustomerAccountRecord(this.twoFactorEnrolments, account);
+    }
+    async setCustomFieldValues(customerAccountId, merge) {
+        const commandBus = this.commandBus;
+        if (!commandBus) {
+            throw new Error('CustomerAccountLifecycleWriteService: the custom-field write runs a Command; construct the service with a CommandBus.');
+        }
+        // Asked **before** the Command opens its transaction. The answer belongs to
+        // another module's table and is only needed to shape the response, so
+        // reading it inside `run` would put a foreign read on the caller's
+        // transaction for no benefit.
+        const enrolled = await this.twoFactorEnrolments([customerAccountId]);
+        const command = {
+            action: 'customer.custom_fields.update',
+            objectType: 'customer_account',
+            objectId: customerAccountId,
+            capture: async ({ em }) => {
+                const account = await em.findOne(CustomerAccount, { id: customerAccountId });
+                return account ? { customFieldValues: account.customFieldValues ?? {} } : null;
+            },
+            run: async ({ em }) => {
+                const account = await em.findOne(CustomerAccount, { id: customerAccountId });
+                if (!account) {
+                    throw new HttpError(404, ERROR_CODES.NOT_FOUND, 'Customer not found.');
+                }
+                account.customFieldValues = await merge(account.customFieldValues ?? {});
+                return {
+                    result: toCustomerAccountRecord(account, enrolled.has(account.id)),
+                    after: { customFieldValues: account.customFieldValues },
+                };
+            },
+        };
+        return commandBus.run(command);
+    }
+    async listDueForAnonymization(cutoff) {
+        const accounts = await this.emFactory().find(CustomerAccount, {
+            deletedAt: { $ne: null, $lt: cutoff },
+            anonymizedAt: null,
+        });
+        return toCustomerAccountRecords(this.twoFactorEnrolments, accounts);
+    }
+    async anonymize(customerAccountId) {
+        const em = this.emFactory();
+        const account = await this.#load(em, customerAccountId);
+        if (account.anonymizedAt) {
+            return toOneCustomerAccountRecord(this.twoFactorEnrolments, account);
+        }
+        const before = { email: account.email };
+        account.email = `deleted+${account.id}@anonymized.invalid`;
+        account.firstName = ANONYMIZED_CUSTOMER_NAME;
+        account.lastName = ANONYMIZED_CUSTOMER_NAME;
+        account.passwordHash = ANONYMIZED_PASSWORD_HASH;
+        // Issue #222 — the scrubbed hash is a placeholder, not a credential, so the
+        // account has no password on record any more. Leaving the stamp would say
+        // the opposite of what the scrub just did.
+        account.passwordSetAt = null;
+        account.twoFactorConfirmedAt = null;
+        account.anonymizedAt = new Date();
+        await em.flush();
+        // The sweep runs on a timer, so there is no operator to attribute it to.
+        await this.#record('customer_account.anonymized', account.id, null, before, {
+            anonymizedAt: account.anonymizedAt.toISOString(),
+        });
+        return toOneCustomerAccountRecord(this.twoFactorEnrolments, account);
+    }
+    async #record(action, objectId, actorAdminUserId, stateBefore, stateAfter, meta) {
+        await this.auditLog.record({
+            actorAdminUserId,
+            action,
+            objectType: 'customer_account',
+            objectId,
+            stateBefore,
+            stateAfter,
+            ipAddress: meta?.ipAddress ?? null,
+            userAgent: meta?.userAgent ?? null,
+            requestId: meta?.requestId ?? null,
+        });
+    }
+    async #load(em, id) {
+        const account = await em.findOne(CustomerAccount, { id });
+        if (!account) {
+            throw new HttpError(404, ERROR_CODES.CUSTOMER_NOT_FOUND, 'Customer not found.');
+        }
+        return account;
+    }
+    async #loadLive(em, id) {
+        const account = await em.findOne(CustomerAccount, { id, deletedAt: null });
+        if (!account) {
+            throw new HttpError(404, ERROR_CODES.CUSTOMER_NOT_FOUND, 'Customer not found.');
+        }
+        return account;
+    }
+}
+/**
+ * The admin customer list (feature 040, US5).
+ *
+ * `customers` built the whole query itself — the lifecycle filter, the
+ * sales-rep visibility scope, the free-text predicate and the page — against
+ * this module's entity. The **shape** of the answer is that module's screen and
+ * the **statement** is this module's table, so the criteria cross as plain data
+ * and the SQL stays here. It has to be one statement: narrowing a page after
+ * the fact returns fewer rows than the caller asked for, and paging after
+ * narrowing reads the whole table.
+ */
+export class CustomerAccountAdminSearchService {
+    emFactory;
+    twoFactorEnrolments;
+    constructor(emFactory, twoFactorEnrolments) {
+        this.emFactory = emFactory;
+        this.twoFactorEnrolments = twoFactorEnrolments;
+    }
+    async search(criteria) {
+        const and = [];
+        if (criteria.status === 'blocked') {
+            and.push({ blockedAt: { $ne: null }, deletedAt: null });
+        }
+        else if (criteria.status === 'deleted') {
+            and.push({ deletedAt: { $ne: null } });
+        }
+        else {
+            // The default "active" view excludes deleted accounts.
+            and.push({ deletedAt: null });
+        }
+        if (criteria.organizationId)
+            and.push({ organizationId: criteria.organizationId });
+        if (criteria.customerGroupId)
+            and.push({ customerGroupId: criteria.customerGroupId });
+        // `null` is the platform administrator's unscoped read. Anything else is a
+        // sales rep's territory.
+        //
+        // D-178 removed an `$or` arm here that also matched `organizationId: null`.
+        // Its comment said a standalone account belonged to nobody's territory and
+        // the predicate put it in **everybody's**: every sales representative's
+        // customer list contained every null-organisation account on the platform,
+        // and the population grew on every federated sign-in. That was a live
+        // cross-territory disclosure, not an optimisation, and it is gone rather
+        // than left unreachable — a predicate with no population still reads as
+        // policy to whoever finds it next.
+        if (criteria.allowedOrganizationIds !== null) {
+            and.push({ organizationId: { $in: [...criteria.allowedOrganizationIds] } });
+        }
+        const q = criteria.q?.trim();
+        if (q) {
+            const like = `%${q}%`;
+            and.push({
+                $or: [
+                    { email: { $ilike: like } },
+                    { firstName: { $ilike: like } },
+                    { lastName: { $ilike: like } },
+                ],
+            });
+        }
+        const where = and.length ? { $and: and } : {};
+        const [rows, total] = await this.emFactory().findAndCount(CustomerAccount, where, {
+            orderBy: { createdAt: 'desc' },
+            limit: criteria.pageSize,
+            offset: (criteria.page - 1) * criteria.pageSize,
+        });
+        return { rows: await toCustomerAccountRecords(this.twoFactorEnrolments, rows), total };
+    }
+}
+//# sourceMappingURL=customer-account-lifecycle-ports.js.map

package/dist/backend/services/customer-account-lifecycle-ports.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"customer-account-lifecycle-ports.js","sourceRoot":"","sources":["../../../src/backend/services/customer-account-lifecycle-ports.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,kCAAkC,EAAE,MAAM,iBAAiB,CAAC;AACrE,OAAO,EACL,WAAW,EACX,qBAAqB,GAQtB,MAAM,4BAA4B,CAAC;AAEpC,OAAO,EAAE,sBAAsB,EAAE,MAAM,oCAAoC,CAAC;AAC5E,OAAO,EAAE,SAAS,EAAE,MAAM,gCAAgC,CAAC;AAE3D,OAAO,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAC;AAQhE,OAAO,EAAE,eAAe,EAAE,MAAM,wCAAwC,CAAC;AACzE,OAAO,EACL,uBAAuB,EACvB,wBAAwB,EACxB,0BAA0B,GAC3B,MAAM,6BAA6B,CAAC;AAGrC;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,2EAA2E;AAC3E,MAAM,CAAC,MAAM,wBAAwB,GAAG,kBAAkB,CAAC;AAE3D;;;;GAIG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,qBAAqB,CAAC;AAE9D,SAAS,aAAa,CAAC,OAAwB;IAC7C,OAAO;QACL,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI;QACrE,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,IAAI;QACxC,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,IAAI;KACzC,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,oCAAoC;IAE5B;IACA;IAQA;IAQA;IAMA;IAxBnB,YACmB,SAA8B,EAC9B,QAAmB;IACpC;;;;;;OAMG;IACc,mBAA6C;IAC9D;;;;;;OAMG;IACc,qBAAuD;IACxE;;;;OAIG;IACc,UAAuB;QAvBvB,cAAS,GAAT,SAAS,CAAqB;QAC9B,aAAQ,GAAR,QAAQ,CAAW;QAQnB,wBAAmB,GAAnB,mBAAmB,CAA0B;QAQ7C,0BAAqB,GAArB,qBAAqB,CAAkC;QAMvD,eAAU,GAAV,UAAU,CAAa;IACvC,CAAC;IAEJ;;;;;;;;;;;;;;;;;OAiBG;IACH,KAAK,CAAC,gBAAgB,CACpB,KAA2C;QAE3C,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC5B,wEAAwE;QACxE,kDAAkD;QAClD,4EAA4E;QAC5E,yEAAyE;QACzE,2EAA2E;QAC3E,MAAM,KAAK,GAAG,qBAAqB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACjD,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QAC9D,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,IAAI,SAAS,CACjB,GAAG,EACH,WAAW,CAAC,wBAAwB,EACpC,4CAA4C,CAC7C,CAAC;QACJ,CAAC;QACD,MAAM,iBAAiB,GAAG,UAAU,EAAE,CAAC;QACvC,MAAM,YAAY,GAAG,MAAM,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACxD,OAAO,EAAE,CAAC,aAAa,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YACpC,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,YAAY,CAAC,GAAG,EAAE;gBACtE,iBAAiB;gBACjB,KAAK;gBACL,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,QAAQ,EAAE,KAAK,CAAC,QAAQ;aACzB,CAAC,CAAC;YACH,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,eAAe,EAAE;gBAC1C,EAAE,EAAE,iBAAiB;gBACrB,KAAK;gBACL,YAAY;gBACZ,yEAAyE;gBACzE,aAAa,EAAE,IAAI,IAAI,EAAE;gBACzB,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,cAAc,EAAE,YAAY,CAAC,EAAE;aAChC,CAAC,CAAC;YACH,0EAA0E;YAC1E,wEAAwE;YACxE,sBAAsB,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE;gBACzC,MAAM,EAAE,sCAAsC;gBAC9C,UAAU,EAAE,kBAAkB;gBAC9B,QAAQ,EAAE,OAAO,CAAC,EAAE;gBACpB,WAAW,EAAE,IAAI;gBACjB,UAAU,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE;aACrC,CAAC,CAAC;YACH,IAAI,CAAC;gBACH,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC;YACpB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,wEAAwE;gBACxE,oEAAoE;gBACpE,uEAAuE;gBACvE,2DAA2D;gBAC3D,IAAI,GAAG,YAAY,kCAAkC,EAAE,CAAC;oBACtD,MAAM,IAAI,SAAS,CACjB,GAAG,EACH,WAAW,CAAC,wBAAwB,EACpC,4CAA4C,CAC7C,CAAC;gBACJ,CAAC;gBACD,MAAM,GAAG,CAAC;YACZ,CAAC;YACD,qEAAqE;YACrE,wEAAwE;YACxE,0EAA0E;YAC1E,qEAAqE;YACrE,oEAAoE;YACpE,SAAS;YACT,OAAO,uBAAuB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACjD,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,KAAK,CACT,iBAAyB,EACzB,KAIC;QAED,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC5B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,iBAAiB,CAAC,CAAC;QAC5D,IAAI,OAAO,CAAC,SAAS;YAAE,OAAO,0BAA0B,CAAC,IAAI,CAAC,mBAAmB,EAAE,OAAO,CAAC,CAAC;QAE5F,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;QACtC,OAAO,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;QAC/B,OAAO,CAAC,WAAW,GAAG,OAAO,CAAC;QAC9B,OAAO,CAAC,oBAAoB,GAAG,KAAK,CAAC,gBAAgB,CAAC;QACtD,OAAO,CAAC,0BAA0B,GAAG,IAAI,CAAC;QAC1C,OAAO,CAAC,WAAW,GAAG,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC;QAC3C,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC;QACjB,MAAM,IAAI,CAAC,OAAO,CAChB,0BAA0B,EAC1B,OAAO,CAAC,EAAE,EACV,KAAK,CAAC,gBAAgB,EACtB,MAAM,EACN,aAAa,CAAC,OAAO,CAAC,EACtB,KAAK,CAAC,KAAK,CACZ,CAAC;QACF,OAAO,0BAA0B,CAAC,IAAI,CAAC,mBAAmB,EAAE,OAAO,CAAC,CAAC;IACvE,CAAC;IAED,KAAK,CAAC,OAAO,CACX,iBAAyB,EACzB,KAA4E;QAE5E,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC5B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,iBAAiB,CAAC,CAAC;QAC5D,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;YACvB,OAAO,0BAA0B,CAAC,IAAI,CAAC,mBAAmB,EAAE,OAAO,CAAC,CAAC;QACvE,CAAC;QAED,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;QACtC,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC;QACzB,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;QAC3B,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC;QACpC,OAAO,CAAC,0BAA0B,GAAG,IAAI,CAAC;QAC1C,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;QAC3B,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC;QACjB,MAAM,IAAI,CAAC,OAAO,CAChB,4BAA4B,EAC5B,OAAO,CAAC,EAAE,EACV,KAAK,CAAC,gBAAgB,EACtB,MAAM,EACN,aAAa,CAAC,OAAO,CAAC,EACtB,KAAK,CAAC,KAAK,CACZ,CAAC;QACF,OAAO,0BAA0B,CAAC,IAAI,CAAC,mBAAmB,EAAE,OAAO,CAAC,CAAC;IACvE,CAAC;IAED,KAAK,CAAC,UAAU,CACd,iBAAyB,EACzB,KAAmC;QAEnC,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC5B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,iBAAiB,CAAC,CAAC;QACxD,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;YACtB,MAAM,IAAI,SAAS,CACjB,GAAG,EACH,WAAW,CAAC,wBAAwB,EACpC,8BAA8B,CAC/B,CAAC;QACJ,CAAC;QACD,OAAO,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;QAC/B,OAAO,CAAC,8BAA8B,GAAG,KAAK,CAAC,gBAAgB,CAAC;QAChE,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC;QACjB,MAAM,IAAI,CAAC,OAAO,CAChB,0BAA0B,EAC1B,OAAO,CAAC,EAAE,EACV,KAAK,CAAC,gBAAgB,EACtB,EAAE,SAAS,EAAE,IAAI,EAAE,EACnB,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC,WAAW,EAAE,EAAE,CAC/C,CAAC;QACF,OAAO,0BAA0B,CAAC,IAAI,CAAC,mBAAmB,EAAE,OAAO,CAAC,CAAC;IACvE,CAAC;IAED,KAAK,CAAC,OAAO,CACX,iBAAyB,EACzB,KAAmC;QAEnC,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC5B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,iBAAiB,CAAC,CAAC;QACxD,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;YACvB,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,WAAW,CAAC,oBAAoB,EAAE,0BAA0B,CAAC,CAAC;QACzF,CAAC;QACD,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;YACzB,MAAM,IAAI,SAAS,CACjB,GAAG,EACH,WAAW,CAAC,+BAA+B,EAC3C,+EAA+E,CAChF,CAAC;QACJ,CAAC;QACD,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC;QACzB,OAAO,CAAC,8BAA8B,GAAG,IAAI,CAAC;QAC9C,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC;QACjB,MAAM,IAAI,CAAC,OAAO,CAChB,2BAA2B,EAC3B,OAAO,CAAC,EAAE,EACV,KAAK,CAAC,gBAAgB,EACtB,EAAE,SAAS,EAAE,KAAK,EAAE,EACpB,EAAE,SAAS,EAAE,IAAI,EAAE,CACpB,CAAC;QACF,OAAO,0BAA0B,CAAC,IAAI,CAAC,mBAAmB,EAAE,OAAO,CAAC,CAAC;IACvE,CAAC;IAED,KAAK,CAAC,eAAe,CACnB,iBAAyB,EACzB,cAAsB,EACtB,KAAmC;QAEnC,OAAO,IAAI,CAAC,kBAAkB,CAC5B,wCAAwC,EACxC,iBAAiB,EACjB,cAAc,EACd,KAAK,CACN,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;OAaG;IACH,KAAK,CAAC,4BAA4B,CAChC,iBAAyB,EACzB,sBAA8B,EAC9B,KAAmC;QAEnC,OAAO,IAAI,CAAC,kBAAkB,CAC5B,0CAA0C,EAC1C,iBAAiB,EACjB,sBAAsB,EACtB,KAAK,CACN,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,kBAAkB,CACtB,MAAc,EACd,iBAAyB,EACzB,cAAsB,EACtB,KAAmC;QAEnC,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC5B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,iBAAiB,CAAC,CAAC;QAC5D,MAAM,MAAM,GAAG,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE,CAAC;QAC1D,OAAO,CAAC,cAAc,GAAG,cAAc,CAAC;QACxC,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC;QACjB,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,EAAE,KAAK,CAAC,gBAAgB,EAAE,MAAM,EAAE,EAAE,cAAc,EAAE,CAAC,CAAC;QAC3F,OAAO,0BAA0B,CAAC,IAAI,CAAC,mBAAmB,EAAE,OAAO,CAAC,CAAC;IACvE,CAAC;IAED,KAAK,CAAC,gBAAgB,CACpB,iBAAyB,EACzB,eAA8B,EAC9B,KAAmC;QAEnC,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC5B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,iBAAiB,CAAC,CAAC;QAC5D,MAAM,MAAM,GAAG,EAAE,eAAe,EAAE,OAAO,CAAC,eAAe,IAAI,IAAI,EAAE,CAAC;QACpE,OAAO,CAAC,eAAe,GAAG,eAAe,CAAC;QAC1C,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC;QACjB,MAAM,IAAI,CAAC,OAAO,CAChB,iCAAiC,EACjC,OAAO,CAAC,EAAE,EACV,KAAK,CAAC,gBAAgB,EACtB,MAAM,EACN,EAAE,eAAe,EAAE,CACpB,CAAC;QACF,OAAO,0BAA0B,CAAC,IAAI,CAAC,mBAAmB,EAAE,OAAO,CAAC,CAAC;IACvE,CAAC;IAED,KAAK,CAAC,oBAAoB,CACxB,iBAAyB,EACzB,KAA6E;QAE7E,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;QACnC,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CACb,uHAAuH,CACxH,CAAC;QACJ,CAAC;QACD,4EAA4E;QAC5E,sEAAsE;QACtE,mEAAmE;QACnE,8BAA8B;QAC9B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC;QACrE,MAAM,OAAO,GAAmC;YAC9C,MAAM,EAAE,+BAA+B;YACvC,UAAU,EAAE,kBAAkB;YAC9B,QAAQ,EAAE,iBAAiB;YAC3B,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE;gBACxB,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,EAAE,EAAE,iBAAiB,EAAE,CAAC,CAAC;gBAC7E,OAAO,OAAO,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,OAAO,CAAC,iBAAiB,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;YACjF,CAAC;YACD,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE;gBACpB,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,EAAE,EAAE,iBAAiB,EAAE,CAAC,CAAC;gBAC7E,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,WAAW,CAAC,SAAS,EAAE,qBAAqB,CAAC,CAAC;gBACzE,CAAC;gBACD,OAAO,CAAC,iBAAiB,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC;gBACzE,OAAO;oBACL,MAAM,EAAE,uBAAuB,CAAC,OAAO,EAAE,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;oBAClE,KAAK,EAAE,EAAE,iBAAiB,EAAE,OAAO,CAAC,iBAAiB,EAAE;iBACxD,CAAC;YACJ,CAAC;SACF,CAAC;QACF,OAAO,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACjC,CAAC;IAED,KAAK,CAAC,uBAAuB,CAAC,MAAY;QACxC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC,IAAI,CAAC,eAAe,EAAE;YAC5D,SAAS,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE;YACrC,YAAY,EAAE,IAAI;SACnB,CAAC,CAAC;QACH,OAAO,wBAAwB,CAAC,IAAI,CAAC,mBAAmB,EAAE,QAAQ,CAAC,CAAC;IACtE,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,iBAAyB;QACvC,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC5B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,iBAAiB,CAAC,CAAC;QACxD,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;YACzB,OAAO,0BAA0B,CAAC,IAAI,CAAC,mBAAmB,EAAE,OAAO,CAAC,CAAC;QACvE,CAAC;QAED,MAAM,MAAM,GAAG,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;QACxC,OAAO,CAAC,KAAK,GAAG,WAAW,OAAO,CAAC,EAAE,qBAAqB,CAAC;QAC3D,OAAO,CAAC,SAAS,GAAG,wBAAwB,CAAC;QAC7C,OAAO,CAAC,QAAQ,GAAG,wBAAwB,CAAC;QAC5C,OAAO,CAAC,YAAY,GAAG,wBAAwB,CAAC;QAChD,4EAA4E;QAC5E,0EAA0E;QAC1E,2CAA2C;QAC3C,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC;QAC7B,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC;QACpC,OAAO,CAAC,YAAY,GAAG,IAAI,IAAI,EAAE,CAAC;QAClC,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC;QACjB,yEAAyE;QACzE,MAAM,IAAI,CAAC,OAAO,CAAC,6BAA6B,EAAE,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;YAC1E,YAAY,EAAE,OAAO,CAAC,YAAY,CAAC,WAAW,EAAE;SACjD,CAAC,CAAC;QACH,OAAO,0BAA0B,CAAC,IAAI,CAAC,mBAAmB,EAAE,OAAO,CAAC,CAAC;IACvE,CAAC;IAED,KAAK,CAAC,OAAO,CACX,MAAc,EACd,QAAgB,EAChB,gBAA+B,EAC/B,WAAoC,EACpC,UAAmC,EACnC,IAAsC;QAEtC,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;YACzB,gBAAgB;YAChB,MAAM;YACN,UAAU,EAAE,kBAAkB;YAC9B,QAAQ;YACR,WAAW;YACX,UAAU;YACV,SAAS,EAAE,IAAI,EAAE,SAAS,IAAI,IAAI;YAClC,SAAS,EAAE,IAAI,EAAE,SAAS,IAAI,IAAI;YAClC,SAAS,EAAE,IAAI,EAAE,SAAS,IAAI,IAAI;SACnC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,EAAiB,EAAE,EAAU;QACvC,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QAC1D,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,WAAW,CAAC,kBAAkB,EAAE,qBAAqB,CAAC,CAAC;QAClF,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,EAAiB,EAAE,EAAU;QAC3C,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3E,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,WAAW,CAAC,kBAAkB,EAAE,qBAAqB,CAAC,CAAC;QAClF,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;CACF;AAED;;;;;;;;;;GAUG;AACH,MAAM,OAAO,iCAAiC;IAEzB;IACA;IAFnB,YACmB,SAA8B,EAC9B,mBAA6C;QAD7C,cAAS,GAAT,SAAS,CAAqB;QAC9B,wBAAmB,GAAnB,mBAAmB,CAA0B;IAC7D,CAAC;IAEJ,KAAK,CAAC,MAAM,CACV,QAA4C;QAE5C,MAAM,GAAG,GAAmC,EAAE,CAAC;QAE/C,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAClC,GAAG,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,CAAC;aAAM,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACzC,GAAG,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QACzC,CAAC;aAAM,CAAC;YACN,uDAAuD;YACvD,GAAG,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAChC,CAAC;QAED,IAAI,QAAQ,CAAC,cAAc;YAAE,GAAG,CAAC,IAAI,CAAC,EAAE,cAAc,EAAE,QAAQ,CAAC,cAAc,EAAE,CAAC,CAAC;QACnF,IAAI,QAAQ,CAAC,eAAe;YAAE,GAAG,CAAC,IAAI,CAAC,EAAE,eAAe,EAAE,QAAQ,CAAC,eAAe,EAAE,CAAC,CAAC;QAEtF,2EAA2E;QAC3E,yBAAyB;QACzB,EAAE;QACF,4EAA4E;QAC5E,2EAA2E;QAC3E,wEAAwE;QACxE,2EAA2E;QAC3E,sEAAsE;QACtE,yEAAyE;QACzE,wEAAwE;QACxE,mCAAmC;QACnC,IAAI,QAAQ,CAAC,sBAAsB,KAAK,IAAI,EAAE,CAAC;YAC7C,GAAG,CAAC,IAAI,CAAC,EAAE,cAAc,EAAE,EAAE,GAAG,EAAE,CAAC,GAAG,QAAQ,CAAC,sBAAsB,CAAC,EAAE,EAAE,CAAC,CAAC;QAC9E,CAAC;QAED,MAAM,CAAC,GAAG,QAAQ,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;QAC7B,IAAI,CAAC,EAAE,CAAC;YACN,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC;YACtB,GAAG,CAAC,IAAI,CAAC;gBACP,GAAG,EAAE;oBACH,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE;oBAC3B,EAAE,SAAS,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE;oBAC/B,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE;iBAC/B;aACF,CAAC,CAAC;QACL,CAAC;QAED,MAAM,KAAK,GAAiC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5E,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC,YAAY,CAAC,eAAe,EAAE,KAAK,EAAE;YAChF,OAAO,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE;YAC9B,KAAK,EAAE,QAAQ,CAAC,QAAQ;YACxB,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,QAAQ,CAAC,QAAQ;SAChD,CAAC,CAAC;QACH,OAAO,EAAE,IAAI,EAAE,MAAM,wBAAwB,CAAC,IAAI,CAAC,mBAAmB,EAAE,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC;IACzF,CAAC;CACF"}