@endora-commerce/mod-organizations 0.100.0

package/dist/backend/services/organization-moderation-service.js

@@ -0,0 +1,337 @@
+import { OptimisticLockError } from '@mikro-orm/core';
+import { Organization } from '../entities/organization.entity.js';
+import { withSystemScope } from '@endora-commerce/platform/tenancy';
+import { noopOrgTemplateEmail } from './org-template-email.js';
+export class OrganizationModerationService {
+    emFactory;
+    auditLogService;
+    events;
+    mailer;
+    customerAccounts;
+    resolveModerationMode;
+    templateEmail;
+    constructor(emFactory, auditLogService, events, mailer, 
+    /**
+     * `customer_accounts`' published read, for the one question this service
+     * asks it: who receives the approval or rejection message.
+     */
+    customerAccounts, 
+    /** Resolver for the moderation-mode setting. Returns 'auto' or 'manual'. */
+    resolveModerationMode, 
+    /**
+     * The transactional-template seam, which is where the language comes from.
+     *
+     * Defaulted to the no-op rather than made required so a composition that
+     * does not wire it keeps sending — silence would be worse than the
+     * fallback language, which is the whole argument for keeping the in-code
+     * builders below.
+     */
+    templateEmail = noopOrgTemplateEmail) {
+        this.emFactory = emFactory;
+        this.auditLogService = auditLogService;
+        this.events = events;
+        this.mailer = mailer;
+        this.customerAccounts = customerAccounts;
+        this.resolveModerationMode = resolveModerationMode;
+        this.templateEmail = templateEmail;
+    }
+    /**
+     * Invoked by the `organization.registered.v1` subscriber. When the
+     * setting is `auto`, the freshly created org is approved immediately
+     * (system actor = null adminUserId). When `manual`, this is a no-op
+     * — the org stays in `pending_verification` until an admin acts.
+     */
+    async handleNewlyRegistered(organizationId) {
+        let mode = 'manual';
+        try {
+            mode = await this.resolveModerationMode();
+        }
+        catch {
+            // Settings not yet seeded or unreachable — degrade safely to manual.
+        }
+        if (mode !== 'auto')
+            return;
+        const em = this.emFactory();
+        const org = await em.findOne(Organization, { id: organizationId, deletedAt: null });
+        if (!org)
+            return;
+        if (org.status !== 'pending_verification')
+            return;
+        await this.approve(organizationId, {
+            expectedVersion: org.version,
+            actorAdminUserId: null,
+        });
+    }
+    async approve(organizationId, options) {
+        return this.transition({
+            organizationId,
+            expectedVersion: options.expectedVersion,
+            requireStatus: 'pending_verification',
+            mutate: (org) => {
+                org.status = 'active';
+                org.approvedAt = new Date();
+                org.approvedByAdminUserId = options.actorAdminUserId ?? null;
+            },
+            action: 'organization.approved',
+            actorAdminUserId: options.actorAdminUserId ?? null,
+            requestId: options.requestId ?? null,
+            eventNewStatus: 'active',
+            afterCommit: async (org) => {
+                await this.notifyCustomer(org, {
+                    code: 'organization_approved',
+                    variables: { organizationName: org.name },
+                    fallbackSubject: 'Your organization has been verified',
+                    fallbackText: `Hi,\n\nOrganization "${org.name}" has been verified successfully and can now place Orders and Requests for Quotation.\n\nThank you.`,
+                    messageIdSuffix: 'approved',
+                });
+            },
+        });
+    }
+    async reject(organizationId, options) {
+        if (!options.reason || options.reason.trim().length === 0) {
+            throw new Error('OrganizationModerationService.reject: reason is required.');
+        }
+        return this.transition({
+            organizationId,
+            expectedVersion: options.expectedVersion,
+            requireStatus: 'pending_verification',
+            mutate: (org) => {
+                org.status = 'rejected';
+                org.rejectedAt = new Date();
+                org.rejectedReason = options.reason;
+            },
+            action: 'organization.rejected',
+            actorAdminUserId: options.actorAdminUserId ?? null,
+            requestId: options.requestId ?? null,
+            eventNewStatus: 'rejected',
+            reason: options.reason,
+            afterCommit: async (org) => {
+                if (options.notifyCustomerEmail === false)
+                    return;
+                await this.notifyCustomer(org, {
+                    code: 'organization_rejected',
+                    variables: { organizationName: org.name, reason: options.reason },
+                    fallbackSubject: 'Organization registration rejected',
+                    fallbackText: `Hi,\n\nUnfortunately, the registration of organization "${org.name}" was rejected for the following reason:\n\n${options.reason}\n\nIf you have any questions, please contact the platform administrators.`,
+                    messageIdSuffix: 'rejected',
+                });
+            },
+        });
+    }
+    async block(organizationId, options) {
+        return this.transition({
+            organizationId,
+            expectedVersion: options.expectedVersion,
+            requireStatus: 'active',
+            mutate: (org) => {
+                org.status = 'blocked';
+                org.blockedAt = new Date();
+                org.blockedReason = options.reason ?? null;
+            },
+            action: 'organization.blocked',
+            actorAdminUserId: options.actorAdminUserId ?? null,
+            requestId: options.requestId ?? null,
+            eventNewStatus: 'blocked',
+            reason: options.reason ?? null,
+        });
+    }
+    async unblock(organizationId, options) {
+        return this.transition({
+            organizationId,
+            expectedVersion: options.expectedVersion,
+            requireStatus: 'blocked',
+            mutate: (org) => {
+                org.status = 'active';
+                org.blockedAt = null;
+                org.blockedReason = null;
+            },
+            action: 'organization.unblocked',
+            actorAdminUserId: options.actorAdminUserId ?? null,
+            requestId: options.requestId ?? null,
+            eventNewStatus: 'active',
+        });
+    }
+    // ── internals ──────────────────────────────────────────────────────────
+    async transition(input) {
+        const em = this.emFactory();
+        const captured = { snapshotBefore: null, snapshotAfter: null, org: null };
+        try {
+            await em.transactional(async (tem) => {
+                const org = await tem.findOne(Organization, { id: input.organizationId, deletedAt: null });
+                if (!org) {
+                    throw new OrganizationNotFoundError(input.organizationId);
+                }
+                if (org.version !== input.expectedVersion) {
+                    throw new OrganizationVersionMismatchError(org.id, input.expectedVersion, org.version);
+                }
+                if (org.status !== input.requireStatus) {
+                    throw new OrganizationStatusGuardError(org.id, org.status, input.requireStatus);
+                }
+                captured.snapshotBefore = snapshot(org);
+                input.mutate(org);
+                await tem.flush();
+                captured.snapshotAfter = snapshot(org);
+                captured.org = org;
+            });
+        }
+        catch (err) {
+            if (err instanceof OptimisticLockError) {
+                throw new OrganizationVersionMismatchError(input.organizationId, input.expectedVersion, -1);
+            }
+            throw err;
+        }
+        const { snapshotBefore, snapshotAfter, org: approvedOrg } = captured;
+        // Audit + event + email run AFTER the DB commit so a downstream failure
+        // never poisons the status transition. We accept best-effort semantics
+        // for those (mailer is idempotent via messageId).
+        await this.auditLogService.record({
+            actorAdminUserId: input.actorAdminUserId,
+            action: input.action,
+            objectType: 'organization',
+            objectId: input.organizationId,
+            stateBefore: snapshotBefore ? { ...snapshotBefore } : null,
+            stateAfter: snapshotAfter ? { ...snapshotAfter } : null,
+            requestId: input.requestId,
+        });
+        this.events.emit('organization.status_changed.v1', {
+            eventId: crypto.randomUUID(),
+            occurredAt: new Date().toISOString(),
+            organizationId: input.organizationId,
+            newStatus: input.eventNewStatus,
+        });
+        if (input.afterCommit && approvedOrg) {
+            try {
+                await input.afterCommit(approvedOrg);
+            }
+            catch {
+                // Customer email is best-effort. The transition has already happened.
+            }
+        }
+        return approvedOrg;
+    }
+    async notifyCustomer(org, input) {
+        /**
+         * Feature 075 (D-87) — `customer_accounts`' port, where this was a
+         * `getConnection().getKnex().raw('select "email" from "customer_accounts" …')`.
+         * Raw SQL names no import specifier, so the reach compiled and returned
+         * rows while every boundary check read clean.
+         *
+         * **The system scope is load-bearing and is not incidental to the port.**
+         * `CustomerAccount` is `@OrgScoped`, so the read carries the acting
+         * admin's tenant filter, and a moderator with an `allowed-set` context has
+         * by definition not been assigned the organisation they are approving —
+         * it is still `pending_verification`. Filtered, the lookup would find no
+         * recipient and the approval mail would silently not go out. The raw
+         * statement crossed organisations by bypassing the filter entirely and
+         * telling nobody; `withSystemScope` crosses them the sanctioned way
+         * (Constitution XI, FR-005), with a reason and one audit record.
+         *
+         * `listByOrganization` orders by role then creation date, so the first
+         * `organization_admin` in the result is the row the `order by
+         * "created_at" asc limit 1` picked.
+         */
+        const members = await withSystemScope('organizations: notify the moderated organisation of its status change', () => this.customerAccounts.listByOrganization(org.id, { activeOnly: true }));
+        const recipient = members.find((m) => m.role === 'organization_admin')?.email;
+        if (!recipient)
+            return;
+        const messageId = `organization.${input.messageIdSuffix}.${org.id}.${org.version}`;
+        const meta = { organizationId: org.id, kind: input.messageIdSuffix };
+        /**
+         * The language this message is written in, and where it comes from
+         * (`specs/093-backend-delivered-prose/` § Out of scope — the seam-B
+         * carve-out).
+         *
+         * Both of these messages were finished Polish sentences composed right
+         * here and handed straight to the transport, so a buyer on an English
+         * sales channel was sent Polish unconditionally. They carry a code now,
+         * and `templateEmailPort` resolves the language from the **system-default
+         * sales channel's `defaultLanguage`**, falling back to `en-US`.
+         *
+         * That is the honest derivation available at this call site and not a
+         * convenience. There is no per-buyer language to read: neither
+         * `CustomerAccountRecord` nor `Organization` carries one, and
+         * `specs/083-buyer-language-resolution/` records the reserved rung for it
+         * as deliberately absent. Nor is the request's language usable — this runs
+         * `afterCommit`, and on the two paths that reach it the request either
+         * belongs to the moderating **administrator**, whose language is not the
+         * recipient's, or does not exist at all, `handleNewlyRegistered` being
+         * driven by an event subscriber.
+         *
+         * `trySend` answers `false` only for a code with no definition, and then
+         * the English builders below send. A message that silently fails to go out
+         * is worse than one in a language the recipient did not choose.
+         */
+        const sentViaTemplate = await this.templateEmail.trySend({
+            code: input.code,
+            to: recipient,
+            messageId,
+            variables: input.variables,
+            meta,
+        });
+        if (sentViaTemplate)
+            return;
+        const outcome = await this.mailer.send({
+            messageId,
+            to: recipient,
+            subject: input.fallbackSubject,
+            text: input.fallbackText,
+            meta,
+        });
+        if (outcome.status !== 'sent') {
+            // The moderation transition has committed and this notification runs
+            // after it, so the non-send is named rather than raised — D-59's record
+            // is what survives to answer "was the customer told".
+            console.warn('[organizations] the moderation e-mail was not sent', {
+                organizationId: org.id,
+                kind: input.messageIdSuffix,
+                reason: outcome.reason,
+            });
+        }
+    }
+}
+function snapshot(org) {
+    return {
+        id: org.id,
+        status: org.status,
+        approvedAt: org.approvedAt ? org.approvedAt.toISOString() : null,
+        approvedByAdminUserId: org.approvedByAdminUserId ?? null,
+        blockedAt: org.blockedAt ? org.blockedAt.toISOString() : null,
+        blockedReason: org.blockedReason ?? null,
+        rejectedAt: org.rejectedAt ? org.rejectedAt.toISOString() : null,
+        rejectedReason: org.rejectedReason ?? null,
+        version: org.version,
+    };
+}
+export class OrganizationNotFoundError extends Error {
+    organizationId;
+    constructor(organizationId) {
+        super(`Organization ${organizationId} not found.`);
+        this.organizationId = organizationId;
+        this.name = 'OrganizationNotFoundError';
+    }
+}
+export class OrganizationVersionMismatchError extends Error {
+    organizationId;
+    expectedVersion;
+    currentVersion;
+    constructor(organizationId, expectedVersion, currentVersion) {
+        super(`Organization ${organizationId} version mismatch (expected ${expectedVersion}, currently ${currentVersion}).`);
+        this.organizationId = organizationId;
+        this.expectedVersion = expectedVersion;
+        this.currentVersion = currentVersion;
+        this.name = 'OrganizationVersionMismatchError';
+    }
+}
+export class OrganizationStatusGuardError extends Error {
+    organizationId;
+    currentStatus;
+    requiredStatus;
+    constructor(organizationId, currentStatus, requiredStatus) {
+        super(`Organization ${organizationId} is in status '${currentStatus}', cannot perform an action that requires '${requiredStatus}'.`);
+        this.organizationId = organizationId;
+        this.currentStatus = currentStatus;
+        this.requiredStatus = requiredStatus;
+        this.name = 'OrganizationStatusGuardError';
+    }
+}
+//# sourceMappingURL=organization-moderation-service.js.map

package/dist/backend/services/organization-moderation-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"organization-moderation-service.js","sourceRoot":"","sources":["../../../src/backend/services/organization-moderation-service.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AACtD,OAAO,EAAE,YAAY,EAA2B,MAAM,oCAAoC,CAAC;AAG3F,OAAO,EAAE,eAAe,EAAE,MAAM,mCAAmC,CAAC;AAEpE,OAAO,EAAE,oBAAoB,EAAyB,MAAM,yBAAyB,CAAC;AAwDtF,MAAM,OAAO,6BAA6B;IAErB;IACA;IACA;IACA;IAKA;IAEA;IASA;IApBnB,YACmB,SAA8B,EAC9B,eAA0B,EAC1B,MAA4B,EAC5B,MAAuB;IACxC;;;OAGG;IACc,gBAAyC;IAC1D,4EAA4E;IAC3D,qBAAuD;IACxE;;;;;;;OAOG;IACc,gBAAkC,oBAAoB;QAnBtD,cAAS,GAAT,SAAS,CAAqB;QAC9B,oBAAe,GAAf,eAAe,CAAW;QAC1B,WAAM,GAAN,MAAM,CAAsB;QAC5B,WAAM,GAAN,MAAM,CAAiB;QAKvB,qBAAgB,GAAhB,gBAAgB,CAAyB;QAEzC,0BAAqB,GAArB,qBAAqB,CAAkC;QASvD,kBAAa,GAAb,aAAa,CAAyC;IACtE,CAAC;IAEJ;;;;;OAKG;IACH,KAAK,CAAC,qBAAqB,CAAC,cAAsB;QAChD,IAAI,IAAI,GAAsB,QAAQ,CAAC;QACvC,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,IAAI,CAAC,qBAAqB,EAAE,CAAC;QAC5C,CAAC;QAAC,MAAM,CAAC;YACP,qEAAqE;QACvE,CAAC;QACD,IAAI,IAAI,KAAK,MAAM;YAAE,OAAO;QAE5B,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC5B,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,EAAE,EAAE,cAAc,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACpF,IAAI,CAAC,GAAG;YAAE,OAAO;QACjB,IAAI,GAAG,CAAC,MAAM,KAAK,sBAAsB;YAAE,OAAO;QAClD,MAAM,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE;YACjC,eAAe,EAAE,GAAG,CAAC,OAAO;YAC5B,gBAAgB,EAAE,IAAI;SACvB,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,cAAsB,EAAE,OAAuB;QAC3D,OAAO,IAAI,CAAC,UAAU,CAAC;YACrB,cAAc;YACd,eAAe,EAAE,OAAO,CAAC,eAAe;YACxC,aAAa,EAAE,sBAAsB;YACrC,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE;gBACd,GAAG,CAAC,MAAM,GAAG,QAAQ,CAAC;gBACtB,GAAG,CAAC,UAAU,GAAG,IAAI,IAAI,EAAE,CAAC;gBAC5B,GAAG,CAAC,qBAAqB,GAAG,OAAO,CAAC,gBAAgB,IAAI,IAAI,CAAC;YAC/D,CAAC;YACD,MAAM,EAAE,uBAAuB;YAC/B,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,IAAI,IAAI;YAClD,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,IAAI;YACpC,cAAc,EAAE,QAAQ;YACxB,WAAW,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;gBACzB,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE;oBAC7B,IAAI,EAAE,uBAAuB;oBAC7B,SAAS,EAAE,EAAE,gBAAgB,EAAE,GAAG,CAAC,IAAI,EAAE;oBACzC,eAAe,EAAE,qCAAqC;oBACtD,YAAY,EAAE,wBAAwB,GAAG,CAAC,IAAI,qGAAqG;oBACnJ,eAAe,EAAE,UAAU;iBAC5B,CAAC,CAAC;YACL,CAAC;SACF,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,cAAsB,EAAE,OAAsB;QACzD,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1D,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;QAC/E,CAAC;QACD,OAAO,IAAI,CAAC,UAAU,CAAC;YACrB,cAAc;YACd,eAAe,EAAE,OAAO,CAAC,eAAe;YACxC,aAAa,EAAE,sBAAsB;YACrC,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE;gBACd,GAAG,CAAC,MAAM,GAAG,UAAU,CAAC;gBACxB,GAAG,CAAC,UAAU,GAAG,IAAI,IAAI,EAAE,CAAC;gBAC5B,GAAG,CAAC,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC;YACtC,CAAC;YACD,MAAM,EAAE,uBAAuB;YAC/B,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,IAAI,IAAI;YAClD,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,IAAI;YACpC,cAAc,EAAE,UAAU;YAC1B,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,WAAW,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;gBACzB,IAAI,OAAO,CAAC,mBAAmB,KAAK,KAAK;oBAAE,OAAO;gBAClD,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE;oBAC7B,IAAI,EAAE,uBAAuB;oBAC7B,SAAS,EAAE,EAAE,gBAAgB,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE;oBACjE,eAAe,EAAE,oCAAoC;oBACrD,YAAY,EAAE,2DAA2D,GAAG,CAAC,IAAI,+CAA+C,OAAO,CAAC,MAAM,4EAA4E;oBAC1N,eAAe,EAAE,UAAU;iBAC5B,CAAC,CAAC;YACL,CAAC;SACF,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,cAAsB,EAAE,OAAqB;QACvD,OAAO,IAAI,CAAC,UAAU,CAAC;YACrB,cAAc;YACd,eAAe,EAAE,OAAO,CAAC,eAAe;YACxC,aAAa,EAAE,QAAQ;YACvB,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE;gBACd,GAAG,CAAC,MAAM,GAAG,SAAS,CAAC;gBACvB,GAAG,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;gBAC3B,GAAG,CAAC,aAAa,GAAG,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC;YAC7C,CAAC;YACD,MAAM,EAAE,sBAAsB;YAC9B,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,IAAI,IAAI;YAClD,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,IAAI;YACpC,cAAc,EAAE,SAAS;YACzB,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,IAAI;SAC/B,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,cAAsB,EAAE,OAAuB;QAC3D,OAAO,IAAI,CAAC,UAAU,CAAC;YACrB,cAAc;YACd,eAAe,EAAE,OAAO,CAAC,eAAe;YACxC,aAAa,EAAE,SAAS;YACxB,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE;gBACd,GAAG,CAAC,MAAM,GAAG,QAAQ,CAAC;gBACtB,GAAG,CAAC,SAAS,GAAG,IAAI,CAAC;gBACrB,GAAG,CAAC,aAAa,GAAG,IAAI,CAAC;YAC3B,CAAC;YACD,MAAM,EAAE,wBAAwB;YAChC,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,IAAI,IAAI;YAClD,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,IAAI;YACpC,cAAc,EAAE,QAAQ;SACzB,CAAC,CAAC;IACL,CAAC;IAED,0EAA0E;IAElE,KAAK,CAAC,UAAU,CAAC,KAAsB;QAC7C,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAIV,EAAE,cAAc,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;QAE7D,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,aAAa,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;gBACnC,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,EAAE,EAAE,KAAK,CAAC,cAAc,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC3F,IAAI,CAAC,GAAG,EAAE,CAAC;oBACT,MAAM,IAAI,yBAAyB,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;gBAC5D,CAAC;gBACD,IAAI,GAAG,CAAC,OAAO,KAAK,KAAK,CAAC,eAAe,EAAE,CAAC;oBAC1C,MAAM,IAAI,gCAAgC,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,CAAC,eAAe,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;gBACzF,CAAC;gBACD,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,CAAC,aAAa,EAAE,CAAC;oBACvC,MAAM,IAAI,4BAA4B,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC;gBAClF,CAAC;gBACD,QAAQ,CAAC,cAAc,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;gBACxC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAClB,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC;gBAClB,QAAQ,CAAC,aAAa,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;gBACvC,QAAQ,CAAC,GAAG,GAAG,GAAG,CAAC;YACrB,CAAC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,mBAAmB,EAAE,CAAC;gBACvC,MAAM,IAAI,gCAAgC,CAAC,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,CAAC;YAC9F,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;QAED,MAAM,EAAE,cAAc,EAAE,aAAa,EAAE,GAAG,EAAE,WAAW,EAAE,GAAG,QAAQ,CAAC;QAErE,wEAAwE;QACxE,uEAAuE;QACvE,kDAAkD;QAClD,MAAM,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC;YAChC,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;YACxC,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,UAAU,EAAE,cAAc;YAC1B,QAAQ,EAAE,KAAK,CAAC,cAAc;YAC9B,WAAW,EAAE,cAAc,CAAC,CAAC,CAAC,EAAE,GAAG,cAAc,EAAE,CAAC,CAAC,CAAC,IAAI;YAC1D,UAAU,EAAE,aAAa,CAAC,CAAC,CAAC,EAAE,GAAG,aAAa,EAAE,CAAC,CAAC,CAAC,IAAI;YACvD,SAAS,EAAE,KAAK,CAAC,SAAS;SAC3B,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,gCAAgC,EAAE;YACjD,OAAO,EAAE,MAAM,CAAC,UAAU,EAAE;YAC5B,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACpC,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,SAAS,EAAE,KAAK,CAAC,cAAc;SAChC,CAAC,CAAC;QAEH,IAAI,KAAK,CAAC,WAAW,IAAI,WAAW,EAAE,CAAC;YACrC,IAAI,CAAC;gBACH,MAAM,KAAK,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;YACvC,CAAC;YAAC,MAAM,CAAC;gBACP,sEAAsE;YACxE,CAAC;QACH,CAAC;QAED,OAAO,WAAY,CAAC;IACtB,CAAC;IAEO,KAAK,CAAC,cAAc,CAC1B,GAAiB,EACjB,KASC;QAED;;;;;;;;;;;;;;;;;;;WAmBG;QACH,MAAM,OAAO,GAAG,MAAM,eAAe,CACnC,uEAAuE,EACvE,GAAG,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,kBAAkB,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAC7E,CAAC;QACF,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,oBAAoB,CAAC,EAAE,KAAK,CAAC;QAC9E,IAAI,CAAC,SAAS;YAAE,OAAO;QACvB,MAAM,SAAS,GAAG,gBAAgB,KAAK,CAAC,eAAe,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;QACnF,MAAM,IAAI,GAAG,EAAE,cAAc,EAAE,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,eAAe,EAAE,CAAC;QAErE;;;;;;;;;;;;;;;;;;;;;;;;WAwBG;QACH,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC;YACvD,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,EAAE,EAAE,SAAS;YACb,SAAS;YACT,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,IAAI;SACL,CAAC,CAAC;QACH,IAAI,eAAe;YAAE,OAAO;QAE5B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;YACrC,SAAS;YACT,EAAE,EAAE,SAAS;YACb,OAAO,EAAE,KAAK,CAAC,eAAe;YAC9B,IAAI,EAAE,KAAK,CAAC,YAAY;YACxB,IAAI;SACL,CAAC,CAAC;QACH,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC9B,qEAAqE;YACrE,wEAAwE;YACxE,sDAAsD;YACtD,OAAO,CAAC,IAAI,CAAC,oDAAoD,EAAE;gBACjE,cAAc,EAAE,GAAG,CAAC,EAAE;gBACtB,IAAI,EAAE,KAAK,CAAC,eAAe;gBAC3B,MAAM,EAAE,OAAO,CAAC,MAAM;aACvB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;CACF;AA2BD,SAAS,QAAQ,CAAC,GAAiB;IACjC,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,UAAU,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI;QAChE,qBAAqB,EAAE,GAAG,CAAC,qBAAqB,IAAI,IAAI;QACxD,SAAS,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI;QAC7D,aAAa,EAAE,GAAG,CAAC,aAAa,IAAI,IAAI;QACxC,UAAU,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI;QAChE,cAAc,EAAE,GAAG,CAAC,cAAc,IAAI,IAAI;QAC1C,OAAO,EAAE,GAAG,CAAC,OAAO;KACrB,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,yBAA0B,SAAQ,KAAK;IACtB;IAA5B,YAA4B,cAAsB;QAChD,KAAK,CAAC,gBAAgB,cAAc,aAAa,CAAC,CAAC;QADzB,mBAAc,GAAd,cAAc,CAAQ;QAEhD,IAAI,CAAC,IAAI,GAAG,2BAA2B,CAAC;IAC1C,CAAC;CACF;AAED,MAAM,OAAO,gCAAiC,SAAQ,KAAK;IAEvC;IACA;IACA;IAHlB,YACkB,cAAsB,EACtB,eAAuB,EACvB,cAAsB;QAEtC,KAAK,CACH,gBAAgB,cAAc,+BAA+B,eAAe,eAAe,cAAc,IAAI,CAC9G,CAAC;QANc,mBAAc,GAAd,cAAc,CAAQ;QACtB,oBAAe,GAAf,eAAe,CAAQ;QACvB,mBAAc,GAAd,cAAc,CAAQ;QAKtC,IAAI,CAAC,IAAI,GAAG,kCAAkC,CAAC;IACjD,CAAC;CACF;AAED,MAAM,OAAO,4BAA6B,SAAQ,KAAK;IAEnC;IACA;IACA;IAHlB,YACkB,cAAsB,EACtB,aAAiC,EACjC,cAAkC;QAElD,KAAK,CACH,gBAAgB,cAAc,kBAAkB,aAAa,8CAA8C,cAAc,IAAI,CAC9H,CAAC;QANc,mBAAc,GAAd,cAAc,CAAQ;QACtB,kBAAa,GAAb,aAAa,CAAoB;QACjC,mBAAc,GAAd,cAAc,CAAoB;QAKlD,IAAI,CAAC,IAAI,GAAG,8BAA8B,CAAC;IAC7C,CAAC;CACF"}

package/dist/backend/services/organization-restriction-service.d.ts

@@ -0,0 +1,70 @@
+import type { EntityManager } from '@mikro-orm/postgresql';
+import type { AuditPort } from '@endora-commerce/platform/kernel';
+export interface AllowLists {
+    paymentMethodIds: string[];
+    deliveryMethodIds: string[];
+    warehouseIds: string[];
+}
+export interface AllowListsRead extends AllowLists {
+    organizationId: string;
+    /** Organization's optimistic-lock version after the read. Pass this on the next write. */
+    version: number;
+}
+export interface ReplaceAllowListsInput extends AllowLists {
+    expectedVersion: number;
+}
+export type RestrictionKind = 'payment_method' | 'delivery_method' | 'warehouse';
+export interface PatchAllowListInput {
+    expectedVersion: number;
+    add?: string[] | undefined;
+    remove?: string[] | undefined;
+}
+/**
+ * Owns the three per-Organization allow-list bridges:
+ *  - `organization_payment_methods`
+ *  - `organization_delivery_methods`
+ *  - `organization_warehouses`
+ *
+ * Empty allow-list ⇒ "platform defaults apply" (FR-014 / FR-015 / FR-016).
+ *
+ * Every write is gated by the Organization's `version` column (optimistic
+ * lock per research R7). Mismatch raises `OrganizationVersionMismatchError`
+ * which the route handler maps to HTTP 409.
+ *
+ * Storefront-side cache invalidation is layered on top by US4 — this
+ * foundational service only owns the persisted state.
+ */
+export declare class OrganizationRestrictionService {
+    private readonly emFactory;
+    private readonly auditLog?;
+    constructor(emFactory: () => EntityManager, auditLog?: AuditPort | undefined);
+    readAllowLists(organizationId: string): Promise<AllowListsRead>;
+    /**
+     * The allow-list for one restriction kind, or `null` for "no restriction".
+     *
+     * Feature 072 (T138). Three composition roots' worth of callers —
+     * `payment_methods`, `delivery_methods` and `inventory` — used to reach this
+     * service through a root closure that wrapped {@link readAllowLists} in a
+     * bare `catch` and read "organization not found" as "unrestricted". That is
+     * the right policy and the wrong place for it: a `catch` around a *port* call
+     * also swallows `ModuleDisabledError`, turning a fail-closed gate into a
+     * fail-open restriction check — on the one code path whose entire job is to
+     * restrict.
+     *
+     * So the degrade is expressed here, in the return type, by the module that
+     * owns the policy. A caller needs no `catch`, and a genuine module-disabled
+     * error propagates as the 503 it is.
+     */
+    allowedIdsFor(organizationId: string, kind: 'paymentMethodIds' | 'deliveryMethodIds' | 'warehouseIds'): Promise<string[] | null>;
+    replaceAllowLists(organizationId: string, input: ReplaceAllowListsInput): Promise<AllowListsRead>;
+    patchAllowList(organizationId: string, kind: RestrictionKind, input: PatchAllowListInput): Promise<AllowListsRead>;
+    private guardVersion;
+    private translateOptimisticLockError;
+}
+export declare class OrganizationVersionMismatchError extends Error {
+    readonly organizationId: string;
+    readonly expectedVersion: number;
+    readonly currentVersion: number;
+    constructor(organizationId: string, expectedVersion: number, currentVersion: number);
+}
+//# sourceMappingURL=organization-restriction-service.d.ts.map

package/dist/backend/services/organization-restriction-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"organization-restriction-service.d.ts","sourceRoot":"","sources":["../../../src/backend/services/organization-restriction-service.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAO3D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kCAAkC,CAAC;AAElE,MAAM,WAAW,UAAU;IACzB,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,YAAY,EAAE,MAAM,EAAE,CAAC;CACxB;AAED,MAAM,WAAW,cAAe,SAAQ,UAAU;IAChD,cAAc,EAAE,MAAM,CAAC;IACvB,0FAA0F;IAC1F,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,sBAAuB,SAAQ,UAAU;IACxD,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,MAAM,eAAe,GAAG,gBAAgB,GAAG,iBAAiB,GAAG,WAAW,CAAC;AAEjF,MAAM,WAAW,mBAAmB;IAClC,eAAe,EAAE,MAAM,CAAC;IACxB,GAAG,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;IAC3B,MAAM,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;CAC/B;AAED;;;;;;;;;;;;;;GAcG;AACH,qBAAa,8BAA8B;IAEvC,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBADT,SAAS,EAAE,MAAM,aAAa,EAC9B,QAAQ,CAAC,EAAE,SAAS,YAAA;IAGjC,cAAc,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC;IAmBrE;;;;;;;;;;;;;;;OAeG;IACG,aAAa,CACjB,cAAc,EAAE,MAAM,EACtB,IAAI,EAAE,kBAAkB,GAAG,mBAAmB,GAAG,cAAc,GAC9D,OAAO,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC;IAcrB,iBAAiB,CACrB,cAAc,EAAE,MAAM,EACtB,KAAK,EAAE,sBAAsB,GAC5B,OAAO,CAAC,cAAc,CAAC;IAiDpB,cAAc,CAClB,cAAc,EAAE,MAAM,EACtB,IAAI,EAAE,eAAe,EACrB,KAAK,EAAE,mBAAmB,GACzB,OAAO,CAAC,cAAc,CAAC;IAgE1B,OAAO,CAAC,YAAY;IAMpB,OAAO,CAAC,4BAA4B;CAMrC;AAED,qBAAa,gCAAiC,SAAQ,KAAK;aAEvC,cAAc,EAAE,MAAM;aACtB,eAAe,EAAE,MAAM;aACvB,cAAc,EAAE,MAAM;gBAFtB,cAAc,EAAE,MAAM,EACtB,eAAe,EAAE,MAAM,EACvB,cAAc,EAAE,MAAM;CAOzC"}

package/dist/backend/services/organization-restriction-service.js

@@ -0,0 +1,210 @@
+import { NotFoundError, OptimisticLockError } from '@mikro-orm/core';
+import { Organization } from '../entities/organization.entity.js';
+import { OrganizationPaymentMethodLink } from '../entities/organization-payment-method-link.entity.js';
+import { OrganizationDeliveryMethodLink } from '../entities/organization-delivery-method-link.entity.js';
+import { OrganizationWarehouseLink } from '../entities/organization-warehouse-link.entity.js';
+import { recordAuditFromContext } from '@endora-commerce/platform/commands';
+/**
+ * Owns the three per-Organization allow-list bridges:
+ *  - `organization_payment_methods`
+ *  - `organization_delivery_methods`
+ *  - `organization_warehouses`
+ *
+ * Empty allow-list ⇒ "platform defaults apply" (FR-014 / FR-015 / FR-016).
+ *
+ * Every write is gated by the Organization's `version` column (optimistic
+ * lock per research R7). Mismatch raises `OrganizationVersionMismatchError`
+ * which the route handler maps to HTTP 409.
+ *
+ * Storefront-side cache invalidation is layered on top by US4 — this
+ * foundational service only owns the persisted state.
+ */
+export class OrganizationRestrictionService {
+    emFactory;
+    auditLog;
+    constructor(emFactory, auditLog) {
+        this.emFactory = emFactory;
+        this.auditLog = auditLog;
+    }
+    async readAllowLists(organizationId) {
+        const em = this.emFactory();
+        const org = await em.findOneOrFail(Organization, { id: organizationId, deletedAt: null });
+        const [payment, delivery, warehouses] = await Promise.all([
+            em.find(OrganizationPaymentMethodLink, { organizationId }),
+            em.find(OrganizationDeliveryMethodLink, { organizationId }),
+            em.find(OrganizationWarehouseLink, { organizationId }),
+        ]);
+        return {
+            organizationId,
+            paymentMethodIds: payment.map((r) => r.paymentMethodId).sort(),
+            deliveryMethodIds: delivery.map((r) => r.deliveryMethodId).sort(),
+            warehouseIds: warehouses.map((r) => r.warehouseId).sort(),
+            version: org.version,
+        };
+    }
+    /**
+     * The allow-list for one restriction kind, or `null` for "no restriction".
+     *
+     * Feature 072 (T138). Three composition roots' worth of callers —
+     * `payment_methods`, `delivery_methods` and `inventory` — used to reach this
+     * service through a root closure that wrapped {@link readAllowLists} in a
+     * bare `catch` and read "organization not found" as "unrestricted". That is
+     * the right policy and the wrong place for it: a `catch` around a *port* call
+     * also swallows `ModuleDisabledError`, turning a fail-closed gate into a
+     * fail-open restriction check — on the one code path whose entire job is to
+     * restrict.
+     *
+     * So the degrade is expressed here, in the return type, by the module that
+     * owns the policy. A caller needs no `catch`, and a genuine module-disabled
+     * error propagates as the 503 it is.
+     */
+    async allowedIdsFor(organizationId, kind) {
+        let lists;
+        try {
+            lists = await this.readAllowLists(organizationId);
+        }
+        catch (err) {
+            // The one condition this may absorb: the Organization is unknown or
+            // soft-deleted, which `readAllowLists` reports as a `findOneOrFail`
+            // rejection. Anything else is a real failure and must surface.
+            if (err instanceof NotFoundError)
+                return null;
+            throw err;
+        }
+        return lists[kind];
+    }
+    async replaceAllowLists(organizationId, input) {
+        const em = this.emFactory();
+        try {
+            await em.transactional(async (tem) => {
+                const org = await tem.findOneOrFail(Organization, {
+                    id: organizationId,
+                    deletedAt: null,
+                });
+                this.guardVersion(org, input.expectedVersion);
+                await tem.nativeDelete(OrganizationPaymentMethodLink, { organizationId });
+                await tem.nativeDelete(OrganizationDeliveryMethodLink, { organizationId });
+                await tem.nativeDelete(OrganizationWarehouseLink, { organizationId });
+                for (const paymentMethodId of dedupe(input.paymentMethodIds)) {
+                    tem.persist(tem.create(OrganizationPaymentMethodLink, { organizationId, paymentMethodId }));
+                }
+                for (const deliveryMethodId of dedupe(input.deliveryMethodIds)) {
+                    tem.persist(tem.create(OrganizationDeliveryMethodLink, { organizationId, deliveryMethodId }));
+                }
+                for (const warehouseId of dedupe(input.warehouseIds)) {
+                    tem.persist(tem.create(OrganizationWarehouseLink, { organizationId, warehouseId }));
+                }
+                // Touch the Organization so the version column advances. MikroORM's
+                // optimistic-lock semantics bump `version` automatically on flush.
+                org.updatedAt = new Date();
+                if (this.auditLog) {
+                    recordAuditFromContext(this.auditLog, tem, {
+                        action: 'organization.allow_lists_replace',
+                        objectType: 'organization',
+                        objectId: organizationId,
+                        stateBefore: null,
+                        stateAfter: {
+                            paymentMethodIds: dedupe(input.paymentMethodIds),
+                            deliveryMethodIds: dedupe(input.deliveryMethodIds),
+                            warehouseIds: dedupe(input.warehouseIds),
+                        },
+                    });
+                }
+                await tem.flush();
+            });
+        }
+        catch (err) {
+            throw this.translateOptimisticLockError(err, organizationId);
+        }
+        return this.readAllowLists(organizationId);
+    }
+    async patchAllowList(organizationId, kind, input) {
+        const em = this.emFactory();
+        try {
+            await em.transactional(async (tem) => {
+                const org = await tem.findOneOrFail(Organization, {
+                    id: organizationId,
+                    deletedAt: null,
+                });
+                this.guardVersion(org, input.expectedVersion);
+                const add = dedupe(input.add ?? []);
+                const remove = dedupe(input.remove ?? []);
+                if (kind === 'payment_method') {
+                    if (remove.length) {
+                        await tem.nativeDelete(OrganizationPaymentMethodLink, {
+                            organizationId,
+                            paymentMethodId: { $in: remove },
+                        });
+                    }
+                    for (const id of add) {
+                        tem.persist(tem.create(OrganizationPaymentMethodLink, { organizationId, paymentMethodId: id }));
+                    }
+                }
+                else if (kind === 'delivery_method') {
+                    if (remove.length) {
+                        await tem.nativeDelete(OrganizationDeliveryMethodLink, {
+                            organizationId,
+                            deliveryMethodId: { $in: remove },
+                        });
+                    }
+                    for (const id of add) {
+                        tem.persist(tem.create(OrganizationDeliveryMethodLink, { organizationId, deliveryMethodId: id }));
+                    }
+                }
+                else {
+                    if (remove.length) {
+                        await tem.nativeDelete(OrganizationWarehouseLink, {
+                            organizationId,
+                            warehouseId: { $in: remove },
+                        });
+                    }
+                    for (const id of add) {
+                        tem.persist(tem.create(OrganizationWarehouseLink, { organizationId, warehouseId: id }));
+                    }
+                }
+                org.updatedAt = new Date();
+                if (this.auditLog) {
+                    recordAuditFromContext(this.auditLog, tem, {
+                        action: 'organization.allow_list_patch',
+                        objectType: 'organization',
+                        objectId: organizationId,
+                        stateBefore: null,
+                        stateAfter: { kind, add: dedupe(input.add ?? []), remove: dedupe(input.remove ?? []) },
+                    });
+                }
+                await tem.flush();
+            });
+        }
+        catch (err) {
+            throw this.translateOptimisticLockError(err, organizationId);
+        }
+        return this.readAllowLists(organizationId);
+    }
+    guardVersion(org, expected) {
+        if (org.version !== expected) {
+            throw new OrganizationVersionMismatchError(org.id, expected, org.version);
+        }
+    }
+    translateOptimisticLockError(err, organizationId) {
+        if (err instanceof OptimisticLockError) {
+            return new OrganizationVersionMismatchError(organizationId, -1, -1);
+        }
+        return err;
+    }
+}
+export class OrganizationVersionMismatchError extends Error {
+    organizationId;
+    expectedVersion;
+    currentVersion;
+    constructor(organizationId, expectedVersion, currentVersion) {
+        super(`Organization ${organizationId} version mismatch (expected ${expectedVersion}, currently ${currentVersion}).`);
+        this.organizationId = organizationId;
+        this.expectedVersion = expectedVersion;
+        this.currentVersion = currentVersion;
+        this.name = 'OrganizationVersionMismatchError';
+    }
+}
+function dedupe(arr) {
+    return Array.from(new Set(arr));
+}
+//# sourceMappingURL=organization-restriction-service.js.map

package/dist/backend/services/organization-restriction-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"organization-restriction-service.js","sourceRoot":"","sources":["../../../src/backend/services/organization-restriction-service.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AACrE,OAAO,EAAE,YAAY,EAAE,MAAM,oCAAoC,CAAC;AAClE,OAAO,EAAE,6BAA6B,EAAE,MAAM,wDAAwD,CAAC;AACvG,OAAO,EAAE,8BAA8B,EAAE,MAAM,yDAAyD,CAAC;AACzG,OAAO,EAAE,yBAAyB,EAAE,MAAM,mDAAmD,CAAC;AAC9F,OAAO,EAAE,sBAAsB,EAAE,MAAM,oCAAoC,CAAC;AA2B5E;;;;;;;;;;;;;;GAcG;AACH,MAAM,OAAO,8BAA8B;IAEtB;IACA;IAFnB,YACmB,SAA8B,EAC9B,QAAoB;QADpB,cAAS,GAAT,SAAS,CAAqB;QAC9B,aAAQ,GAAR,QAAQ,CAAY;IACpC,CAAC;IAEJ,KAAK,CAAC,cAAc,CAAC,cAAsB;QACzC,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC5B,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,aAAa,CAAC,YAAY,EAAE,EAAE,EAAE,EAAE,cAAc,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAE1F,MAAM,CAAC,OAAO,EAAE,QAAQ,EAAE,UAAU,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACxD,EAAE,CAAC,IAAI,CAAC,6BAA6B,EAAE,EAAE,cAAc,EAAE,CAAC;YAC1D,EAAE,CAAC,IAAI,CAAC,8BAA8B,EAAE,EAAE,cAAc,EAAE,CAAC;YAC3D,EAAE,CAAC,IAAI,CAAC,yBAAyB,EAAE,EAAE,cAAc,EAAE,CAAC;SACvD,CAAC,CAAC;QAEH,OAAO;YACL,cAAc;YACd,gBAAgB,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,IAAI,EAAE;YAC9D,iBAAiB,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,IAAI,EAAE;YACjE,YAAY,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,IAAI,EAAE;YACzD,OAAO,EAAE,GAAG,CAAC,OAAO;SACrB,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;;;OAeG;IACH,KAAK,CAAC,aAAa,CACjB,cAAsB,EACtB,IAA+D;QAE/D,IAAI,KAAqB,CAAC;QAC1B,IAAI,CAAC;YACH,KAAK,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,cAAc,CAAC,CAAC;QACpD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,oEAAoE;YACpE,oEAAoE;YACpE,+DAA+D;YAC/D,IAAI,GAAG,YAAY,aAAa;gBAAE,OAAO,IAAI,CAAC;YAC9C,MAAM,GAAG,CAAC;QACZ,CAAC;QACD,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC;IACrB,CAAC;IAED,KAAK,CAAC,iBAAiB,CACrB,cAAsB,EACtB,KAA6B;QAE7B,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC5B,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,aAAa,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;gBACnC,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,aAAa,CAAC,YAAY,EAAE;oBAChD,EAAE,EAAE,cAAc;oBAClB,SAAS,EAAE,IAAI;iBAChB,CAAC,CAAC;gBACH,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,KAAK,CAAC,eAAe,CAAC,CAAC;gBAE9C,MAAM,GAAG,CAAC,YAAY,CAAC,6BAA6B,EAAE,EAAE,cAAc,EAAE,CAAC,CAAC;gBAC1E,MAAM,GAAG,CAAC,YAAY,CAAC,8BAA8B,EAAE,EAAE,cAAc,EAAE,CAAC,CAAC;gBAC3E,MAAM,GAAG,CAAC,YAAY,CAAC,yBAAyB,EAAE,EAAE,cAAc,EAAE,CAAC,CAAC;gBAEtE,KAAK,MAAM,eAAe,IAAI,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,EAAE,CAAC;oBAC7D,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,6BAA6B,EAAE,EAAE,cAAc,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC;gBAC9F,CAAC;gBACD,KAAK,MAAM,gBAAgB,IAAI,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,EAAE,CAAC;oBAC/D,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,8BAA8B,EAAE,EAAE,cAAc,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC;gBAChG,CAAC;gBACD,KAAK,MAAM,WAAW,IAAI,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC;oBACrD,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,yBAAyB,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC;gBACtF,CAAC;gBAED,oEAAoE;gBACpE,mEAAmE;gBACnE,GAAG,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;gBAC3B,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;oBAClB,sBAAsB,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE;wBACzC,MAAM,EAAE,kCAAkC;wBAC1C,UAAU,EAAE,cAAc;wBAC1B,QAAQ,EAAE,cAAc;wBACxB,WAAW,EAAE,IAAI;wBACjB,UAAU,EAAE;4BACV,gBAAgB,EAAE,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC;4BAChD,iBAAiB,EAAE,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC;4BAClD,YAAY,EAAE,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC;yBACzC;qBACF,CAAC,CAAC;gBACL,CAAC;gBACD,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC;YACpB,CAAC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,CAAC,4BAA4B,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;QAC/D,CAAC;QAED,OAAO,IAAI,CAAC,cAAc,CAAC,cAAc,CAAC,CAAC;IAC7C,CAAC;IAED,KAAK,CAAC,cAAc,CAClB,cAAsB,EACtB,IAAqB,EACrB,KAA0B;QAE1B,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC5B,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,aAAa,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;gBACnC,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,aAAa,CAAC,YAAY,EAAE;oBAChD,EAAE,EAAE,cAAc;oBAClB,SAAS,EAAE,IAAI;iBAChB,CAAC,CAAC;gBACH,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,KAAK,CAAC,eAAe,CAAC,CAAC;gBAE9C,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC;gBACpC,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;gBAE1C,IAAI,IAAI,KAAK,gBAAgB,EAAE,CAAC;oBAC9B,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;wBAClB,MAAM,GAAG,CAAC,YAAY,CAAC,6BAA6B,EAAE;4BACpD,cAAc;4BACd,eAAe,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE;yBACjC,CAAC,CAAC;oBACL,CAAC;oBACD,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;wBACrB,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,6BAA6B,EAAE,EAAE,cAAc,EAAE,eAAe,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;oBAClG,CAAC;gBACH,CAAC;qBAAM,IAAI,IAAI,KAAK,iBAAiB,EAAE,CAAC;oBACtC,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;wBAClB,MAAM,GAAG,CAAC,YAAY,CAAC,8BAA8B,EAAE;4BACrD,cAAc;4BACd,gBAAgB,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE;yBAClC,CAAC,CAAC;oBACL,CAAC;oBACD,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;wBACrB,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,8BAA8B,EAAE,EAAE,cAAc,EAAE,gBAAgB,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;oBACpG,CAAC;gBACH,CAAC;qBAAM,CAAC;oBACN,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;wBAClB,MAAM,GAAG,CAAC,YAAY,CAAC,yBAAyB,EAAE;4BAChD,cAAc;4BACd,WAAW,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE;yBAC7B,CAAC,CAAC;oBACL,CAAC;oBACD,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;wBACrB,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,yBAAyB,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;oBAC1F,CAAC;gBACH,CAAC;gBAED,GAAG,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;gBAC3B,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;oBAClB,sBAAsB,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE;wBACzC,MAAM,EAAE,+BAA+B;wBACvC,UAAU,EAAE,cAAc;wBAC1B,QAAQ,EAAE,cAAc;wBACxB,WAAW,EAAE,IAAI;wBACjB,UAAU,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE;qBACvF,CAAC,CAAC;gBACL,CAAC;gBACD,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC;YACpB,CAAC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,CAAC,4BAA4B,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;QAC/D,CAAC;QAED,OAAO,IAAI,CAAC,cAAc,CAAC,cAAc,CAAC,CAAC;IAC7C,CAAC;IAEO,YAAY,CAAC,GAAiB,EAAE,QAAgB;QACtD,IAAI,GAAG,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YAC7B,MAAM,IAAI,gCAAgC,CAAC,GAAG,CAAC,EAAE,EAAE,QAAQ,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;QAC5E,CAAC;IACH,CAAC;IAEO,4BAA4B,CAAC,GAAY,EAAE,cAAsB;QACvE,IAAI,GAAG,YAAY,mBAAmB,EAAE,CAAC;YACvC,OAAO,IAAI,gCAAgC,CAAC,cAAc,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACtE,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;CACF;AAED,MAAM,OAAO,gCAAiC,SAAQ,KAAK;IAEvC;IACA;IACA;IAHlB,YACkB,cAAsB,EACtB,eAAuB,EACvB,cAAsB;QAEtC,KAAK,CACH,gBAAgB,cAAc,+BAA+B,eAAe,eAAe,cAAc,IAAI,CAC9G,CAAC;QANc,mBAAc,GAAd,cAAc,CAAQ;QACtB,oBAAe,GAAf,eAAe,CAAQ;QACvB,mBAAc,GAAd,cAAc,CAAQ;QAKtC,IAAI,CAAC,IAAI,GAAG,kCAAkC,CAAC;IACjD,CAAC;CACF;AAED,SAAS,MAAM,CAAI,GAAQ;IACzB,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;AAClC,CAAC"}