@open-mercato/core 0.10.1-develop.7706.1.9cb1f164c4 → 0.10.1-develop.7708.1.5a5c248637

package/.turbo/turbo-build.log

@@ -1,4 +1,4 @@
-[build:core] found 6008 entry points
+[build:core] found 6009 entry points
 [build:core] built successfully
 [build:core:generated] found 266 entry points
 [build:core:generated] built successfully

package/dist/modules/customers/api/interactions/conflicts/route.js

@@ -10,6 +10,8 @@ import { resolveTranslations } from "@open-mercato/shared/lib/i18n/server";
 import { findWithDecryption } from "@open-mercato/shared/lib/encryption/find";
 import { CustomerInteraction } from "../../../data/entities.js";
 import { TERMINAL_INTERACTION_STATUS_LIST } from "../../../lib/interactionStatus.js";
+import { applyEmailVisibilityFilter } from "../../../lib/visibilityFilter.js";
+import { listGrantsForViewer, listSharedChannelIds } from "../../../lib/conversationShares.js";
 import { createLogger } from "@open-mercato/shared/lib/logger";
 const logger = createLogger("customers");
 const querySchema = z.object({
@@ -82,15 +84,27 @@ async function GET(req) {
     if (organizationIds?.length === 0) {
       return NextResponse.json({ ok: true, result: { hasConflicts: false, conflicts: [] } });
     }
-    const checkUserId = query.userId ?? auth.userId;
+    const viewerUserId = auth.isApiKey ? null : auth.sub ?? null;
+    const checkUserId = query.userId ?? (auth.isApiKey ? auth.userId : viewerUserId);
     const em = container.resolve("em").fork();
     const kysely = em.getKysely();
+    const emailShareScope = { tenantId: auth.tenantId, organizationId: rbacOrganizationId };
+    const [sharedConversations, sharedChannelIds] = await Promise.all([
+      listGrantsForViewer(em, emailShareScope, viewerUserId),
+      listSharedChannelIds(em, emailShareScope, viewerUserId)
+    ]);
     let baseQuery = kysely.selectFrom("customer_interactions").select(["id", "scheduled_at", "duration_minutes", "interaction_type"]).where("tenant_id", "=", auth.tenantId).where("status", "not in", [...TERMINAL_INTERACTION_STATUS_LIST]).where("scheduled_at", "is not", null).where("deleted_at", "is", null);
     if (organizationIds?.length === 1) {
       baseQuery = baseQuery.where("organization_id", "=", organizationIds[0]);
     } else if (organizationIds && organizationIds.length > 1) {
       baseQuery = baseQuery.where("organization_id", "in", organizationIds);
     }
+    baseQuery = applyEmailVisibilityFilter(baseQuery, {
+      currentUserId: viewerUserId,
+      userFeatures: void 0,
+      sharedConversations,
+      sharedChannelIds
+    });
     if (checkUserId) {
       baseQuery = baseQuery.where(
         (eb) => eb.or([

package/dist/modules/customers/api/interactions/conflicts/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../src/modules/customers/api/interactions/conflicts/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { sql } from 'kysely'\nimport { CrudHttpError, isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { resolveOrganizationScopeFilter } from '@open-mercato/core/modules/directory/utils/organizationScopeFilter'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { CustomerInteraction } from '../../../data/entities'\nimport { TERMINAL_INTERACTION_STATUS_LIST } from '../../../lib/interactionStatus'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('customers')\n\nconst querySchema = z.object({\n  date: z.string().regex(/^\\d{4}-\\d{2}-\\d{2}$/),\n  startTime: z.string().regex(/^\\d{2}:\\d{2}$/),\n  duration: z.coerce.number().int().min(1).max(1440),\n  excludeId: z.string().uuid().optional(),\n  userId: z.string().uuid().optional(),\n  timezoneOffsetMinutes: z.coerce.number().int().min(-900).max(900).optional(),\n})\n\nconst conflictItemSchema = z.object({\n  id: z.string(),\n  title: z.string().nullable(),\n  startTime: z.string(),\n  endTime: z.string(),\n  type: z.string(),\n})\n\nconst responseSchema = z.object({\n  ok: z.literal(true),\n  result: z.object({\n    hasConflicts: z.boolean(),\n    conflicts: z.array(conflictItemSchema),\n  }),\n})\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['customers.interactions.view'] },\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Customers',\n  methods: {\n    GET: {\n      summary: 'Detect scheduling conflicts',\n      description: 'Checks for overlapping planned interactions within the requested time window.',\n      query: querySchema,\n      responses: [\n        {\n          status: 200,\n          description: 'Conflict detection result',\n          schema: responseSchema,\n        },\n      ],\n    },\n  },\n}\n\nexport async function GET(req: Request) {\n  const { translate } = await resolveTranslations()\n  try {\n    const queryUrl = new URL(req.url)\n    const query = querySchema.parse(Object.fromEntries(queryUrl.searchParams))\n    const container = await createRequestContainer()\n    const auth = await getAuthFromRequest(req)\n\n    if (!auth || !auth.tenantId) {\n      throw new CrudHttpError(401, {\n        error: translate('customers.errors.unauthorized', 'Unauthorized'),\n      })\n    }\n\n    const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n    const { organizationIds, rbacOrganizationId } = resolveOrganizationScopeFilter(scope, auth)\n\n    const offsetMinutes = query.timezoneOffsetMinutes ?? 0\n    const offsetSign = offsetMinutes >= 0 ? '+' : '-'\n    const absMinutes = Math.abs(offsetMinutes)\n    const offsetHours = String(Math.floor(absMinutes / 60)).padStart(2, '0')\n    const offsetMins = String(absMinutes % 60).padStart(2, '0')\n    const offsetSuffix = `${offsetSign}${offsetHours}:${offsetMins}`\n    const windowStart = new Date(`${query.date}T${query.startTime}:00${offsetSuffix}`)\n    const windowEnd = new Date(windowStart.getTime() + query.duration * 60_000)\n\n    if (Number.isNaN(windowStart.getTime()) || Number.isNaN(windowEnd.getTime())) {\n      throw new CrudHttpError(400, { error: translate('customers.errors.invalid_date_time', 'Invalid date/time') })\n    }\n    if (organizationIds?.length === 0) {\n      return NextResponse.json({ ok: true, result: { hasConflicts: false, conflicts: [] } })\n    }\n\n    const checkUserId = query.userId ?? auth.userId\n    const em = (container.resolve('em') as EntityManager).fork()\n    const kysely = em.getKysely<any>()\n\n    let baseQuery = (kysely as any)\n      .selectFrom('customer_interactions')\n      .select(['id', 'scheduled_at', 'duration_minutes', 'interaction_type'])\n      .where('tenant_id', '=', auth.tenantId)\n      .where('status', 'not in', [...TERMINAL_INTERACTION_STATUS_LIST])\n      .where('scheduled_at', 'is not', null)\n      .where('deleted_at', 'is', null)\n\n    if (organizationIds?.length === 1) {\n      baseQuery = baseQuery.where('organization_id', '=', organizationIds[0])\n    } else if (organizationIds && organizationIds.length > 1) {\n      baseQuery = baseQuery.where('organization_id', 'in', organizationIds)\n    }\n\n    if (checkUserId) {\n      baseQuery = baseQuery.where((eb: any) =>\n        eb.or([\n          eb('author_user_id', '=', checkUserId),\n          eb('owner_user_id', '=', checkUserId),\n        ])\n      )\n    }\n\n    if (query.excludeId) {\n      baseQuery = baseQuery.where('id', '!=', query.excludeId)\n    }\n\n    // Overlap condition: existing.start < windowEnd AND existing.end > windowStart\n    // end = scheduled_at + duration_minutes (default 30 if null)\n    baseQuery = baseQuery.where((eb: any) =>\n      eb.and([\n        eb('scheduled_at', '<', windowEnd.toISOString()),\n        eb(sql`(scheduled_at + make_interval(mins => COALESCE(duration_minutes, 30)))`, '>', windowStart.toISOString()),\n      ])\n    )\n\n    // Raw SELECT: reads only unencrypted columns (id, scheduled_at, duration_minutes, interaction_type); title is excluded to avoid ciphertext leakage and is resolved below via findWithDecryption.\n    const rows = await baseQuery\n      .orderBy('scheduled_at', 'asc')\n      .limit(10)\n      .execute() as Array<{\n        id: string\n        scheduled_at: string | Date\n        duration_minutes: number | null\n        interaction_type: string\n      }>\n\n    const decryptionScope = {\n      tenantId: auth.tenantId ?? null,\n      organizationId: rbacOrganizationId,\n    }\n    const conflictIds = rows.map((row) => row.id)\n    const interactionFilter: Record<string, unknown> = {\n      id: { $in: conflictIds },\n      tenantId: auth.tenantId,\n      deletedAt: null,\n    }\n    if (organizationIds?.length === 1) {\n      interactionFilter.organizationId = organizationIds[0]\n    } else if (organizationIds && organizationIds.length > 1) {\n      interactionFilter.organizationId = { $in: organizationIds }\n    }\n    const decryptedInteractions = conflictIds.length > 0\n      ? await findWithDecryption(\n          em,\n          CustomerInteraction,\n          interactionFilter as any,\n          undefined,\n          decryptionScope,\n        )\n      : []\n    const titleById = new Map<string, string | null>()\n    for (const record of decryptedInteractions) {\n      titleById.set((record as any).id, ((record as any).title ?? null) as string | null)\n    }\n\n    const conflicts = rows.map((row) => {\n      const start = new Date(row.scheduled_at)\n      const durationMin = row.duration_minutes ?? 30\n      const end = new Date(start.getTime() + durationMin * 60_000)\n      return {\n        id: row.id,\n        title: titleById.has(row.id) ? titleById.get(row.id) ?? null : null,\n        startTime: start.toLocaleTimeString('en-US', { hour: '2-digit', minute: '2-digit', hour12: false }),\n        endTime: end.toLocaleTimeString('en-US', { hour: '2-digit', minute: '2-digit', hour12: false }),\n        type: row.interaction_type,\n      }\n    })\n\n    return NextResponse.json({\n      ok: true,\n      result: { hasConflicts: conflicts.length > 0, conflicts },\n    })\n  } catch (err) {\n    if (isCrudHttpError(err)) {\n      return NextResponse.json(err.body, { status: err.status })\n    }\n    logger.error('GET failed', { component: 'interactions/conflicts', err })\n    return NextResponse.json({ error: translate('customers.errors.internal', 'Internal server error') }, { status: 500 })\n  }\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAElB,SAAS,WAAW;AACpB,SAAS,eAAe,uBAAuB;AAC/C,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AACnD,SAAS,sCAAsC;AAC/C,SAAS,2BAA2B;AACpC,SAAS,0BAA0B;AAEnC,SAAS,2BAA2B;AACpC,SAAS,wCAAwC;AACjD,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,WAAW;AAEvC,MAAM,cAAc,EAAE,OAAO;AAAA,EAC3B,MAAM,EAAE,OAAO,EAAE,MAAM,qBAAqB;AAAA,EAC5C,WAAW,EAAE,OAAO,EAAE,MAAM,eAAe;AAAA,EAC3C,UAAU,EAAE,OAAO,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,IAAI;AAAA,EACjD,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACtC,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACnC,uBAAuB,EAAE,OAAO,OAAO,EAAE,IAAI,EAAE,IAAI,IAAI,EAAE,IAAI,GAAG,EAAE,SAAS;AAC7E,CAAC;AAED,MAAM,qBAAqB,EAAE,OAAO;AAAA,EAClC,IAAI,EAAE,OAAO;AAAA,EACb,OAAO,EAAE,OAAO,EAAE,SAAS;AAAA,EAC3B,WAAW,EAAE,OAAO;AAAA,EACpB,SAAS,EAAE,OAAO;AAAA,EAClB,MAAM,EAAE,OAAO;AACjB,CAAC;AAED,MAAM,iBAAiB,EAAE,OAAO;AAAA,EAC9B,IAAI,EAAE,QAAQ,IAAI;AAAA,EAClB,QAAQ,EAAE,OAAO;AAAA,IACf,cAAc,EAAE,QAAQ;AAAA,IACxB,WAAW,EAAE,MAAM,kBAAkB;AAAA,EACvC,CAAC;AACH,CAAC;AAEM,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,6BAA6B,EAAE;AAC7E;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aAAa;AAAA,MACb,OAAO;AAAA,MACP,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;AAEA,eAAsB,IAAI,KAAc;AACtC,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,MAAI;AACF,UAAM,WAAW,IAAI,IAAI,IAAI,GAAG;AAChC,UAAM,QAAQ,YAAY,MAAM,OAAO,YAAY,SAAS,YAAY,CAAC;AACzE,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,OAAO,MAAM,mBAAmB,GAAG;AAEzC,QAAI,CAAC,QAAQ,CAAC,KAAK,UAAU;AAC3B,YAAM,IAAI,cAAc,KAAK;AAAA,QAC3B,OAAO,UAAU,iCAAiC,cAAc;AAAA,MAClE,CAAC;AAAA,IACH;AAEA,UAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AACxF,UAAM,EAAE,iBAAiB,mBAAmB,IAAI,+BAA+B,OAAO,IAAI;AAE1F,UAAM,gBAAgB,MAAM,yBAAyB;AACrD,UAAM,aAAa,iBAAiB,IAAI,MAAM;AAC9C,UAAM,aAAa,KAAK,IAAI,aAAa;AACzC,UAAM,cAAc,OAAO,KAAK,MAAM,aAAa,EAAE,CAAC,EAAE,SAAS,GAAG,GAAG;AACvE,UAAM,aAAa,OAAO,aAAa,EAAE,EAAE,SAAS,GAAG,GAAG;AAC1D,UAAM,eAAe,GAAG,UAAU,GAAG,WAAW,IAAI,UAAU;AAC9D,UAAM,cAAc,oBAAI,KAAK,GAAG,MAAM,IAAI,IAAI,MAAM,SAAS,MAAM,YAAY,EAAE;AACjF,UAAM,YAAY,IAAI,KAAK,YAAY,QAAQ,IAAI,MAAM,WAAW,GAAM;AAE1E,QAAI,OAAO,MAAM,YAAY,QAAQ,CAAC,KAAK,OAAO,MAAM,UAAU,QAAQ,CAAC,GAAG;AAC5E,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,sCAAsC,mBAAmB,EAAE,CAAC;AAAA,IAC9G;AACA,QAAI,iBAAiB,WAAW,GAAG;AACjC,aAAO,aAAa,KAAK,EAAE,IAAI,MAAM,QAAQ,EAAE,cAAc,OAAO,WAAW,CAAC,EAAE,EAAE,CAAC;AAAA,IACvF;AAEA,UAAM,cAAc,MAAM,UAAU,KAAK;AACzC,UAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC3D,UAAM,SAAS,GAAG,UAAe;AAEjC,QAAI,YAAa,OACd,WAAW,uBAAuB,EAClC,OAAO,CAAC,MAAM,gBAAgB,oBAAoB,kBAAkB,CAAC,EACrE,MAAM,aAAa,KAAK,KAAK,QAAQ,EACrC,MAAM,UAAU,UAAU,CAAC,GAAG,gCAAgC,CAAC,EAC/D,MAAM,gBAAgB,UAAU,IAAI,EACpC,MAAM,cAAc,MAAM,IAAI;AAEjC,QAAI,iBAAiB,WAAW,GAAG;AACjC,kBAAY,UAAU,MAAM,mBAAmB,KAAK,gBAAgB,CAAC,CAAC;AAAA,IACxE,WAAW,mBAAmB,gBAAgB,SAAS,GAAG;AACxD,kBAAY,UAAU,MAAM,mBAAmB,MAAM,eAAe;AAAA,IACtE;AAEA,QAAI,aAAa;AACf,kBAAY,UAAU;AAAA,QAAM,CAAC,OAC3B,GAAG,GAAG;AAAA,UACJ,GAAG,kBAAkB,KAAK,WAAW;AAAA,UACrC,GAAG,iBAAiB,KAAK,WAAW;AAAA,QACtC,CAAC;AAAA,MACH;AAAA,IACF;AAEA,QAAI,MAAM,WAAW;AACnB,kBAAY,UAAU,MAAM,MAAM,MAAM,MAAM,SAAS;AAAA,IACzD;AAIA,gBAAY,UAAU;AAAA,MAAM,CAAC,OAC3B,GAAG,IAAI;AAAA,QACL,GAAG,gBAAgB,KAAK,UAAU,YAAY,CAAC;AAAA,QAC/C,GAAG,6EAA6E,KAAK,YAAY,YAAY,CAAC;AAAA,MAChH,CAAC;AAAA,IACH;AAGA,UAAM,OAAO,MAAM,UAChB,QAAQ,gBAAgB,KAAK,EAC7B,MAAM,EAAE,EACR,QAAQ;AAOX,UAAM,kBAAkB;AAAA,MACtB,UAAU,KAAK,YAAY;AAAA,MAC3B,gBAAgB;AAAA,IAClB;AACA,UAAM,cAAc,KAAK,IAAI,CAAC,QAAQ,IAAI,EAAE;AAC5C,UAAM,oBAA6C;AAAA,MACjD,IAAI,EAAE,KAAK,YAAY;AAAA,MACvB,UAAU,KAAK;AAAA,MACf,WAAW;AAAA,IACb;AACA,QAAI,iBAAiB,WAAW,GAAG;AACjC,wBAAkB,iBAAiB,gBAAgB,CAAC;AAAA,IACtD,WAAW,mBAAmB,gBAAgB,SAAS,GAAG;AACxD,wBAAkB,iBAAiB,EAAE,KAAK,gBAAgB;AAAA,IAC5D;AACA,UAAM,wBAAwB,YAAY,SAAS,IAC/C,MAAM;AAAA,MACJ;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,IACA,CAAC;AACL,UAAM,YAAY,oBAAI,IAA2B;AACjD,eAAW,UAAU,uBAAuB;AAC1C,gBAAU,IAAK,OAAe,IAAM,OAAe,SAAS,IAAsB;AAAA,IACpF;AAEA,UAAM,YAAY,KAAK,IAAI,CAAC,QAAQ;AAClC,YAAM,QAAQ,IAAI,KAAK,IAAI,YAAY;AACvC,YAAM,cAAc,IAAI,oBAAoB;AAC5C,YAAM,MAAM,IAAI,KAAK,MAAM,QAAQ,IAAI,cAAc,GAAM;AAC3D,aAAO;AAAA,QACL,IAAI,IAAI;AAAA,QACR,OAAO,UAAU,IAAI,IAAI,EAAE,IAAI,UAAU,IAAI,IAAI,EAAE,KAAK,OAAO;AAAA,QAC/D,WAAW,MAAM,mBAAmB,SAAS,EAAE,MAAM,WAAW,QAAQ,WAAW,QAAQ,MAAM,CAAC;AAAA,QAClG,SAAS,IAAI,mBAAmB,SAAS,EAAE,MAAM,WAAW,QAAQ,WAAW,QAAQ,MAAM,CAAC;AAAA,QAC9F,MAAM,IAAI;AAAA,MACZ;AAAA,IACF,CAAC;AAED,WAAO,aAAa,KAAK;AAAA,MACvB,IAAI;AAAA,MACJ,QAAQ,EAAE,cAAc,UAAU,SAAS,GAAG,UAAU;AAAA,IAC1D,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,GAAG;AACxB,aAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,IAC3D;AACA,WAAO,MAAM,cAAc,EAAE,WAAW,0BAA0B,IAAI,CAAC;AACvE,WAAO,aAAa,KAAK,EAAE,OAAO,UAAU,6BAA6B,uBAAuB,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACtH;AACF;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { sql } from 'kysely'\nimport { CrudHttpError, isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { resolveOrganizationScopeFilter } from '@open-mercato/core/modules/directory/utils/organizationScopeFilter'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { CustomerInteraction } from '../../../data/entities'\nimport { TERMINAL_INTERACTION_STATUS_LIST } from '../../../lib/interactionStatus'\nimport { applyEmailVisibilityFilter } from '../../../lib/visibilityFilter'\nimport { listGrantsForViewer, listSharedChannelIds } from '../../../lib/conversationShares'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('customers')\n\nconst querySchema = z.object({\n  date: z.string().regex(/^\\d{4}-\\d{2}-\\d{2}$/),\n  startTime: z.string().regex(/^\\d{2}:\\d{2}$/),\n  duration: z.coerce.number().int().min(1).max(1440),\n  excludeId: z.string().uuid().optional(),\n  userId: z.string().uuid().optional(),\n  timezoneOffsetMinutes: z.coerce.number().int().min(-900).max(900).optional(),\n})\n\nconst conflictItemSchema = z.object({\n  id: z.string(),\n  title: z.string().nullable(),\n  startTime: z.string(),\n  endTime: z.string(),\n  type: z.string(),\n})\n\nconst responseSchema = z.object({\n  ok: z.literal(true),\n  result: z.object({\n    hasConflicts: z.boolean(),\n    conflicts: z.array(conflictItemSchema),\n  }),\n})\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['customers.interactions.view'] },\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Customers',\n  methods: {\n    GET: {\n      summary: 'Detect scheduling conflicts',\n      description: 'Checks for overlapping planned interactions within the requested time window.',\n      query: querySchema,\n      responses: [\n        {\n          status: 200,\n          description: 'Conflict detection result',\n          schema: responseSchema,\n        },\n      ],\n    },\n  },\n}\n\nexport async function GET(req: Request) {\n  const { translate } = await resolveTranslations()\n  try {\n    const queryUrl = new URL(req.url)\n    const query = querySchema.parse(Object.fromEntries(queryUrl.searchParams))\n    const container = await createRequestContainer()\n    const auth = await getAuthFromRequest(req)\n\n    if (!auth || !auth.tenantId) {\n      throw new CrudHttpError(401, {\n        error: translate('customers.errors.unauthorized', 'Unauthorized'),\n      })\n    }\n\n    const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n    const { organizationIds, rbacOrganizationId } = resolveOrganizationScopeFilter(scope, auth)\n\n    const offsetMinutes = query.timezoneOffsetMinutes ?? 0\n    const offsetSign = offsetMinutes >= 0 ? '+' : '-'\n    const absMinutes = Math.abs(offsetMinutes)\n    const offsetHours = String(Math.floor(absMinutes / 60)).padStart(2, '0')\n    const offsetMins = String(absMinutes % 60).padStart(2, '0')\n    const offsetSuffix = `${offsetSign}${offsetHours}:${offsetMins}`\n    const windowStart = new Date(`${query.date}T${query.startTime}:00${offsetSuffix}`)\n    const windowEnd = new Date(windowStart.getTime() + query.duration * 60_000)\n\n    if (Number.isNaN(windowStart.getTime()) || Number.isNaN(windowEnd.getTime())) {\n      throw new CrudHttpError(400, { error: translate('customers.errors.invalid_date_time', 'Invalid date/time') })\n    }\n    if (organizationIds?.length === 0) {\n      return NextResponse.json({ ok: true, result: { hasConflicts: false, conflicts: [] } })\n    }\n\n    const viewerUserId = auth.isApiKey ? null : (auth.sub ?? null)\n    const checkUserId = query.userId ?? (auth.isApiKey ? auth.userId : viewerUserId)\n    const em = (container.resolve('em') as EntityManager).fork()\n    const kysely = em.getKysely<any>()\n    const emailShareScope = { tenantId: auth.tenantId, organizationId: rbacOrganizationId }\n    const [sharedConversations, sharedChannelIds] = await Promise.all([\n      listGrantsForViewer(em, emailShareScope, viewerUserId),\n      listSharedChannelIds(em, emailShareScope, viewerUserId),\n    ])\n\n    let baseQuery = (kysely as any)\n      .selectFrom('customer_interactions')\n      .select(['id', 'scheduled_at', 'duration_minutes', 'interaction_type'])\n      .where('tenant_id', '=', auth.tenantId)\n      .where('status', 'not in', [...TERMINAL_INTERACTION_STATUS_LIST])\n      .where('scheduled_at', 'is not', null)\n      .where('deleted_at', 'is', null)\n\n    if (organizationIds?.length === 1) {\n      baseQuery = baseQuery.where('organization_id', '=', organizationIds[0])\n    } else if (organizationIds && organizationIds.length > 1) {\n      baseQuery = baseQuery.where('organization_id', 'in', organizationIds)\n    }\n\n    baseQuery = applyEmailVisibilityFilter(baseQuery, {\n      currentUserId: viewerUserId,\n      userFeatures: undefined,\n      sharedConversations,\n      sharedChannelIds,\n    })\n\n    if (checkUserId) {\n      baseQuery = baseQuery.where((eb: any) =>\n        eb.or([\n          eb('author_user_id', '=', checkUserId),\n          eb('owner_user_id', '=', checkUserId),\n        ])\n      )\n    }\n\n    if (query.excludeId) {\n      baseQuery = baseQuery.where('id', '!=', query.excludeId)\n    }\n\n    // Overlap condition: existing.start < windowEnd AND existing.end > windowStart\n    // end = scheduled_at + duration_minutes (default 30 if null)\n    baseQuery = baseQuery.where((eb: any) =>\n      eb.and([\n        eb('scheduled_at', '<', windowEnd.toISOString()),\n        eb(sql`(scheduled_at + make_interval(mins => COALESCE(duration_minutes, 30)))`, '>', windowStart.toISOString()),\n      ])\n    )\n\n    // Raw SELECT: reads only unencrypted columns (id, scheduled_at, duration_minutes, interaction_type); title is excluded to avoid ciphertext leakage and is resolved below via findWithDecryption.\n    const rows = await baseQuery\n      .orderBy('scheduled_at', 'asc')\n      .limit(10)\n      .execute() as Array<{\n        id: string\n        scheduled_at: string | Date\n        duration_minutes: number | null\n        interaction_type: string\n      }>\n\n    const decryptionScope = {\n      tenantId: auth.tenantId ?? null,\n      organizationId: rbacOrganizationId,\n    }\n    const conflictIds = rows.map((row) => row.id)\n    const interactionFilter: Record<string, unknown> = {\n      id: { $in: conflictIds },\n      tenantId: auth.tenantId,\n      deletedAt: null,\n    }\n    if (organizationIds?.length === 1) {\n      interactionFilter.organizationId = organizationIds[0]\n    } else if (organizationIds && organizationIds.length > 1) {\n      interactionFilter.organizationId = { $in: organizationIds }\n    }\n    const decryptedInteractions = conflictIds.length > 0\n      ? await findWithDecryption(\n          em,\n          CustomerInteraction,\n          interactionFilter as any,\n          undefined,\n          decryptionScope,\n        )\n      : []\n    const titleById = new Map<string, string | null>()\n    for (const record of decryptedInteractions) {\n      titleById.set((record as any).id, ((record as any).title ?? null) as string | null)\n    }\n\n    const conflicts = rows.map((row) => {\n      const start = new Date(row.scheduled_at)\n      const durationMin = row.duration_minutes ?? 30\n      const end = new Date(start.getTime() + durationMin * 60_000)\n      return {\n        id: row.id,\n        title: titleById.has(row.id) ? titleById.get(row.id) ?? null : null,\n        startTime: start.toLocaleTimeString('en-US', { hour: '2-digit', minute: '2-digit', hour12: false }),\n        endTime: end.toLocaleTimeString('en-US', { hour: '2-digit', minute: '2-digit', hour12: false }),\n        type: row.interaction_type,\n      }\n    })\n\n    return NextResponse.json({\n      ok: true,\n      result: { hasConflicts: conflicts.length > 0, conflicts },\n    })\n  } catch (err) {\n    if (isCrudHttpError(err)) {\n      return NextResponse.json(err.body, { status: err.status })\n    }\n    logger.error('GET failed', { component: 'interactions/conflicts', err })\n    return NextResponse.json({ error: translate('customers.errors.internal', 'Internal server error') }, { status: 500 })\n  }\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAElB,SAAS,WAAW;AACpB,SAAS,eAAe,uBAAuB;AAC/C,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AACnD,SAAS,sCAAsC;AAC/C,SAAS,2BAA2B;AACpC,SAAS,0BAA0B;AAEnC,SAAS,2BAA2B;AACpC,SAAS,wCAAwC;AACjD,SAAS,kCAAkC;AAC3C,SAAS,qBAAqB,4BAA4B;AAC1D,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,WAAW;AAEvC,MAAM,cAAc,EAAE,OAAO;AAAA,EAC3B,MAAM,EAAE,OAAO,EAAE,MAAM,qBAAqB;AAAA,EAC5C,WAAW,EAAE,OAAO,EAAE,MAAM,eAAe;AAAA,EAC3C,UAAU,EAAE,OAAO,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,IAAI;AAAA,EACjD,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACtC,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACnC,uBAAuB,EAAE,OAAO,OAAO,EAAE,IAAI,EAAE,IAAI,IAAI,EAAE,IAAI,GAAG,EAAE,SAAS;AAC7E,CAAC;AAED,MAAM,qBAAqB,EAAE,OAAO;AAAA,EAClC,IAAI,EAAE,OAAO;AAAA,EACb,OAAO,EAAE,OAAO,EAAE,SAAS;AAAA,EAC3B,WAAW,EAAE,OAAO;AAAA,EACpB,SAAS,EAAE,OAAO;AAAA,EAClB,MAAM,EAAE,OAAO;AACjB,CAAC;AAED,MAAM,iBAAiB,EAAE,OAAO;AAAA,EAC9B,IAAI,EAAE,QAAQ,IAAI;AAAA,EAClB,QAAQ,EAAE,OAAO;AAAA,IACf,cAAc,EAAE,QAAQ;AAAA,IACxB,WAAW,EAAE,MAAM,kBAAkB;AAAA,EACvC,CAAC;AACH,CAAC;AAEM,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,6BAA6B,EAAE;AAC7E;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aAAa;AAAA,MACb,OAAO;AAAA,MACP,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;AAEA,eAAsB,IAAI,KAAc;AACtC,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,MAAI;AACF,UAAM,WAAW,IAAI,IAAI,IAAI,GAAG;AAChC,UAAM,QAAQ,YAAY,MAAM,OAAO,YAAY,SAAS,YAAY,CAAC;AACzE,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,OAAO,MAAM,mBAAmB,GAAG;AAEzC,QAAI,CAAC,QAAQ,CAAC,KAAK,UAAU;AAC3B,YAAM,IAAI,cAAc,KAAK;AAAA,QAC3B,OAAO,UAAU,iCAAiC,cAAc;AAAA,MAClE,CAAC;AAAA,IACH;AAEA,UAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AACxF,UAAM,EAAE,iBAAiB,mBAAmB,IAAI,+BAA+B,OAAO,IAAI;AAE1F,UAAM,gBAAgB,MAAM,yBAAyB;AACrD,UAAM,aAAa,iBAAiB,IAAI,MAAM;AAC9C,UAAM,aAAa,KAAK,IAAI,aAAa;AACzC,UAAM,cAAc,OAAO,KAAK,MAAM,aAAa,EAAE,CAAC,EAAE,SAAS,GAAG,GAAG;AACvE,UAAM,aAAa,OAAO,aAAa,EAAE,EAAE,SAAS,GAAG,GAAG;AAC1D,UAAM,eAAe,GAAG,UAAU,GAAG,WAAW,IAAI,UAAU;AAC9D,UAAM,cAAc,oBAAI,KAAK,GAAG,MAAM,IAAI,IAAI,MAAM,SAAS,MAAM,YAAY,EAAE;AACjF,UAAM,YAAY,IAAI,KAAK,YAAY,QAAQ,IAAI,MAAM,WAAW,GAAM;AAE1E,QAAI,OAAO,MAAM,YAAY,QAAQ,CAAC,KAAK,OAAO,MAAM,UAAU,QAAQ,CAAC,GAAG;AAC5E,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,sCAAsC,mBAAmB,EAAE,CAAC;AAAA,IAC9G;AACA,QAAI,iBAAiB,WAAW,GAAG;AACjC,aAAO,aAAa,KAAK,EAAE,IAAI,MAAM,QAAQ,EAAE,cAAc,OAAO,WAAW,CAAC,EAAE,EAAE,CAAC;AAAA,IACvF;AAEA,UAAM,eAAe,KAAK,WAAW,OAAQ,KAAK,OAAO;AACzD,UAAM,cAAc,MAAM,WAAW,KAAK,WAAW,KAAK,SAAS;AACnE,UAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC3D,UAAM,SAAS,GAAG,UAAe;AACjC,UAAM,kBAAkB,EAAE,UAAU,KAAK,UAAU,gBAAgB,mBAAmB;AACtF,UAAM,CAAC,qBAAqB,gBAAgB,IAAI,MAAM,QAAQ,IAAI;AAAA,MAChE,oBAAoB,IAAI,iBAAiB,YAAY;AAAA,MACrD,qBAAqB,IAAI,iBAAiB,YAAY;AAAA,IACxD,CAAC;AAED,QAAI,YAAa,OACd,WAAW,uBAAuB,EAClC,OAAO,CAAC,MAAM,gBAAgB,oBAAoB,kBAAkB,CAAC,EACrE,MAAM,aAAa,KAAK,KAAK,QAAQ,EACrC,MAAM,UAAU,UAAU,CAAC,GAAG,gCAAgC,CAAC,EAC/D,MAAM,gBAAgB,UAAU,IAAI,EACpC,MAAM,cAAc,MAAM,IAAI;AAEjC,QAAI,iBAAiB,WAAW,GAAG;AACjC,kBAAY,UAAU,MAAM,mBAAmB,KAAK,gBAAgB,CAAC,CAAC;AAAA,IACxE,WAAW,mBAAmB,gBAAgB,SAAS,GAAG;AACxD,kBAAY,UAAU,MAAM,mBAAmB,MAAM,eAAe;AAAA,IACtE;AAEA,gBAAY,2BAA2B,WAAW;AAAA,MAChD,eAAe;AAAA,MACf,cAAc;AAAA,MACd;AAAA,MACA;AAAA,IACF,CAAC;AAED,QAAI,aAAa;AACf,kBAAY,UAAU;AAAA,QAAM,CAAC,OAC3B,GAAG,GAAG;AAAA,UACJ,GAAG,kBAAkB,KAAK,WAAW;AAAA,UACrC,GAAG,iBAAiB,KAAK,WAAW;AAAA,QACtC,CAAC;AAAA,MACH;AAAA,IACF;AAEA,QAAI,MAAM,WAAW;AACnB,kBAAY,UAAU,MAAM,MAAM,MAAM,MAAM,SAAS;AAAA,IACzD;AAIA,gBAAY,UAAU;AAAA,MAAM,CAAC,OAC3B,GAAG,IAAI;AAAA,QACL,GAAG,gBAAgB,KAAK,UAAU,YAAY,CAAC;AAAA,QAC/C,GAAG,6EAA6E,KAAK,YAAY,YAAY,CAAC;AAAA,MAChH,CAAC;AAAA,IACH;AAGA,UAAM,OAAO,MAAM,UAChB,QAAQ,gBAAgB,KAAK,EAC7B,MAAM,EAAE,EACR,QAAQ;AAOX,UAAM,kBAAkB;AAAA,MACtB,UAAU,KAAK,YAAY;AAAA,MAC3B,gBAAgB;AAAA,IAClB;AACA,UAAM,cAAc,KAAK,IAAI,CAAC,QAAQ,IAAI,EAAE;AAC5C,UAAM,oBAA6C;AAAA,MACjD,IAAI,EAAE,KAAK,YAAY;AAAA,MACvB,UAAU,KAAK;AAAA,MACf,WAAW;AAAA,IACb;AACA,QAAI,iBAAiB,WAAW,GAAG;AACjC,wBAAkB,iBAAiB,gBAAgB,CAAC;AAAA,IACtD,WAAW,mBAAmB,gBAAgB,SAAS,GAAG;AACxD,wBAAkB,iBAAiB,EAAE,KAAK,gBAAgB;AAAA,IAC5D;AACA,UAAM,wBAAwB,YAAY,SAAS,IAC/C,MAAM;AAAA,MACJ;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,IACA,CAAC;AACL,UAAM,YAAY,oBAAI,IAA2B;AACjD,eAAW,UAAU,uBAAuB;AAC1C,gBAAU,IAAK,OAAe,IAAM,OAAe,SAAS,IAAsB;AAAA,IACpF;AAEA,UAAM,YAAY,KAAK,IAAI,CAAC,QAAQ;AAClC,YAAM,QAAQ,IAAI,KAAK,IAAI,YAAY;AACvC,YAAM,cAAc,IAAI,oBAAoB;AAC5C,YAAM,MAAM,IAAI,KAAK,MAAM,QAAQ,IAAI,cAAc,GAAM;AAC3D,aAAO;AAAA,QACL,IAAI,IAAI;AAAA,QACR,OAAO,UAAU,IAAI,IAAI,EAAE,IAAI,UAAU,IAAI,IAAI,EAAE,KAAK,OAAO;AAAA,QAC/D,WAAW,MAAM,mBAAmB,SAAS,EAAE,MAAM,WAAW,QAAQ,WAAW,QAAQ,MAAM,CAAC;AAAA,QAClG,SAAS,IAAI,mBAAmB,SAAS,EAAE,MAAM,WAAW,QAAQ,WAAW,QAAQ,MAAM,CAAC;AAAA,QAC9F,MAAM,IAAI;AAAA,MACZ;AAAA,IACF,CAAC;AAED,WAAO,aAAa,KAAK;AAAA,MACvB,IAAI;AAAA,MACJ,QAAQ,EAAE,cAAc,UAAU,SAAS,GAAG,UAAU;AAAA,IAC1D,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,GAAG;AACxB,aAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,IAC3D;AACA,WAAO,MAAM,cAAc,EAAE,WAAW,0BAA0B,IAAI,CAAC;AACvE,WAAO,aAAa,KAAK,EAAE,OAAO,UAAU,6BAA6B,uBAAuB,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACtH;AACF;",
   "names": []
 }

package/dist/modules/directory/api/organizations/route.js

@@ -26,20 +26,24 @@ import {
 import { resolveIsSuperAdmin, enforceTenantSelection } from "@open-mercato/core/modules/auth/lib/tenantAccess";
 import { isCrudHttpError } from "@open-mercato/shared/lib/crud/errors";
 import { findWithDecryption, findOneWithDecryption } from "@open-mercato/shared/lib/encryption/find";
+import { resolveTranslations } from "@open-mercato/shared/lib/i18n/server";
+import { parseCommaSeparatedList } from "@open-mercato/shared/lib/string";
 const rawBodySchema = z.object({}).passthrough();
+const organizationIdSchema = z.guid();
 const viewSchema = z.object({
   page: z.coerce.number().min(1).default(1),
   pageSize: z.coerce.number().min(1).max(100).default(50),
   search: z.string().optional(),
   view: z.enum(["options", "manage", "tree"]).default("options"),
-  ids: z.string().optional(),
+  ids: z.string().refine((raw) => parseCommaSeparatedList(raw).every((id) => organizationIdSchema.safeParse(id).success), {
+    message: "ids must be a comma-separated list of UUIDs"
+  }).optional(),
   tenantId: z.string().uuid().optional(),
   includeInactive: z.enum(["true", "false"]).optional(),
   status: z.enum(["all", "active", "inactive"]).optional()
 });
 function parseIds(raw) {
-  if (!raw) return null;
-  const ids = raw.split(",").map((s) => s.trim()).filter(Boolean);
+  const ids = parseCommaSeparatedList(raw);
   return ids.length ? Array.from(new Set(ids)) : null;
 }
 function stringId(value) {
@@ -105,7 +109,13 @@ async function GET(req) {
     includeInactive: url.searchParams.get("includeInactive") ?? void 0,
     status: url.searchParams.get("status") ?? void 0
   });
-  if (!parsed.success) return NextResponse.json({ items: [] }, { status: 400 });
+  if (!parsed.success) {
+    const { translate } = await resolveTranslations();
+    return NextResponse.json(
+      { items: [], error: translate("directory.organizations.errors.invalidQuery", "Invalid query") },
+      { status: 400 }
+    );
+  }
   const query = parsed.data;
   const ids = parseIds(query.ids ?? null);
   const requestedTenantRaw = query.tenantId ?? null;

package/dist/modules/directory/api/organizations/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../src/modules/directory/api/organizations/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { logCrudAccess, makeCrudRoute } from '@open-mercato/shared/lib/crud/factory'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { Organization, Tenant } from '@open-mercato/core/modules/directory/data/entities'\nimport { organizationCreateSchema, organizationUpdateSchema } from '@open-mercato/core/modules/directory/data/validators'\nimport {\n  computeHierarchyForOrganizations,\n  type ComputedHierarchy,\n  type ComputedOrganizationNode,\n} from '@open-mercato/core/modules/directory/lib/hierarchy'\nimport { isAllOrganizationsSelection } from '@open-mercato/core/modules/directory/constants'\nimport {\n  getSelectedOrganizationFromRequest,\n  resolveOrganizationScopeForRequest,\n} from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { loadCustomFieldValues } from '@open-mercato/shared/lib/crud/custom-fields'\nimport { E } from '#generated/entities.ids.generated'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport type { FilterQuery } from '@mikro-orm/core'\nimport { organizationCrudEvents, organizationCrudIndexer } from '@open-mercato/core/modules/directory/commands/organizations'\nimport type { OpenApiMethodDoc, OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { parseBooleanToken } from '@open-mercato/shared/lib/boolean'\nimport {\n  directoryTag,\n  directoryErrorSchema,\n  directoryOkSchema,\n  organizationListResponseSchema,\n} from '../openapi'\nimport { resolveIsSuperAdmin, enforceTenantSelection } from '@open-mercato/core/modules/auth/lib/tenantAccess'\nimport { isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { findWithDecryption, findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\n\ntype CrudInput = Record<string, unknown>\nconst rawBodySchema = z.object({}).passthrough()\n\ntype TreeNode = {\n  id: string\n  name: string\n  parentId: string | null\n  tenantId: string | null\n  depth: number\n  ancestorIds: string[]\n  childIds: string[]\n  descendantIds: string[]\n  isActive: boolean\n  treePath: string | null\n  pathLabel: string\n  children: TreeNode[]\n}\n\nconst viewSchema = z.object({\n  page: z.coerce.number().min(1).default(1),\n  pageSize: z.coerce.number().min(1).max(100).default(50),\n  search: z.string().optional(),\n  view: z.enum(['options', 'manage', 'tree']).default('options'),\n  ids: z.string().optional(),\n  tenantId: z.string().uuid().optional(),\n  includeInactive: z.enum(['true', 'false']).optional(),\n  status: z.enum(['all', 'active', 'inactive']).optional(),\n})\n\nfunction parseIds(raw: string | null): string[] | null {\n  if (!raw) return null\n  const ids = raw.split(',').map((s) => s.trim()).filter(Boolean)\n  return ids.length ? Array.from(new Set(ids)) : null\n}\n\nfunction stringId(value: unknown): string {\n  return String(value)\n}\n\nfunction enforceTenantScope(\n  authTenantId: string | null,\n  requestedTenantId: string | null,\n  isSuperAdmin: boolean,\n): string | null {\n  if (isSuperAdmin) {\n    return requestedTenantId || authTenantId || null\n  }\n  if (authTenantId && requestedTenantId && requestedTenantId !== authTenantId) {\n    return null\n  }\n  return requestedTenantId || authTenantId\n}\n\nconst crud = makeCrudRoute<CrudInput, CrudInput, Record<string, unknown>>({\n  metadata: {\n    GET: { requireAuth: true, requireFeatures: ['directory.organizations.view'] },\n    POST: { requireAuth: true, requireFeatures: ['directory.organizations.manage'] },\n    PUT: { requireAuth: true, requireFeatures: ['directory.organizations.manage'] },\n    DELETE: { requireAuth: true, requireFeatures: ['directory.organizations.manage'] },\n  },\n  orm: {\n    entity: Organization,\n    idField: 'id',\n    orgField: null,\n    tenantField: null,\n    softDeleteField: 'deletedAt',\n  },\n  events: organizationCrudEvents,\n  indexer: organizationCrudIndexer,\n  actions: {\n    create: {\n      commandId: 'directory.organizations.create',\n      schema: rawBodySchema,\n      mapInput: ({ parsed }) => parsed,\n      response: ({ result }) => ({ id: String(result.id) }),\n      status: 201,\n    },\n    update: {\n      commandId: 'directory.organizations.update',\n      schema: rawBodySchema,\n      mapInput: ({ parsed }) => parsed,\n      response: () => ({ ok: true }),\n    },\n    delete: {\n      commandId: 'directory.organizations.delete',\n      response: () => ({ ok: true }),\n    },\n  },\n})\n\nexport const metadata = crud.metadata\n\nexport async function GET(req: Request) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth) return NextResponse.json({ items: [] }, { status: 401 })\n\n  const url = new URL(req.url)\n  const parsed = viewSchema.safeParse({\n    page: url.searchParams.get('page') ?? undefined,\n    pageSize: url.searchParams.get('pageSize') ?? undefined,\n    search: url.searchParams.get('search') ?? undefined,\n    view: url.searchParams.get('view') ?? undefined,\n    ids: url.searchParams.get('ids') ?? undefined,\n    tenantId: url.searchParams.get('tenantId') ?? undefined,\n    includeInactive: url.searchParams.get('includeInactive') ?? undefined,\n    status: url.searchParams.get('status') ?? undefined,\n  })\n  if (!parsed.success) return NextResponse.json({ items: [] }, { status: 400 })\n\n  const query = parsed.data\n  const ids = parseIds(query.ids ?? null)\n  const requestedTenantRaw = query.tenantId ?? null\n  const normalizedRequestedTenantId = requestedTenantRaw && requestedTenantRaw.toLowerCase() === 'all' ? null : requestedTenantRaw\n  const authTenantId = auth.tenantId ?? null\n  const container = await createRequestContainer()\n  const isSuperAdmin = await resolveIsSuperAdmin({ auth, container })\n  const em = (container.resolve('em') as EntityManager)\n  const allowAllTenants = isSuperAdmin && !normalizedRequestedTenantId && query.view === 'manage'\n  let tenantId = allowAllTenants ? null : enforceTenantScope(authTenantId, normalizedRequestedTenantId, isSuperAdmin)\n  const status = query.status ?? 'all'\n  const includeInactive = parseBooleanToken(query.includeInactive) === true || status !== 'active'\n\n  if (!allowAllTenants && !tenantId && !authTenantId && ids?.length) {\n    let scopedIds = ids\n    if (!isSuperAdmin) {\n      let allowedIds: string[] | null = null\n      try {\n        const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n        allowedIds = Array.isArray(scope.allowedIds) ? scope.allowedIds : null\n      } catch {}\n      const allowedSet = allowedIds ? new Set(allowedIds) : new Set<string>()\n      scopedIds = ids.filter((id) => allowedSet.has(id))\n    }\n    if (scopedIds.length) {\n      const scopedOrgs: Organization[] = await findWithDecryption(\n        em,\n        Organization,\n        { id: { $in: scopedIds }, deletedAt: null },\n        { populate: ['tenant'] },\n        { tenantId: authTenantId, organizationId: null },\n      )\n      const tenantCandidates = new Set<string>()\n      for (const org of scopedOrgs) {\n        const orgTenantId = org.tenant?.id ? stringId(org.tenant.id) : ''\n        if (orgTenantId) tenantCandidates.add(orgTenantId)\n      }\n      if (tenantCandidates.size === 1) {\n        const candidateTenantId = Array.from(tenantCandidates)[0] ?? null\n        try {\n          tenantId = await enforceTenantSelection({ auth, container }, candidateTenantId)\n        } catch (error) {\n          if (isCrudHttpError(error)) {\n            return NextResponse.json(error.body, { status: error.status })\n          }\n          throw error\n        }\n      } else if (tenantCandidates.size > 1) {\n        return NextResponse.json({ items: [], error: 'Tenant scope required' }, { status: 400 })\n      }\n    }\n  }\n\n  if (!allowAllTenants && !tenantId) {\n    const candidateOrgIds = new Set<string>()\n    const cookieOrgId = getSelectedOrganizationFromRequest(req)\n    const effectiveCookieOrgId = cookieOrgId && !isAllOrganizationsSelection(cookieOrgId) ? cookieOrgId : null\n    if (effectiveCookieOrgId) candidateOrgIds.add(effectiveCookieOrgId)\n    if (auth.orgId) candidateOrgIds.add(auth.orgId)\n\n    try {\n      const scope = await resolveOrganizationScopeForRequest({\n        container,\n        auth,\n        request: req,\n        selectedId: effectiveCookieOrgId ?? undefined,\n      })\n      if (scope.selectedId) candidateOrgIds.add(scope.selectedId)\n      if (Array.isArray(scope.filterIds) && scope.filterIds.length) {\n        candidateOrgIds.add(scope.filterIds[0]!)\n      }\n      if (Array.isArray(scope.allowedIds) && scope.allowedIds.length) {\n        candidateOrgIds.add(scope.allowedIds[0]!)\n      }\n    } catch {}\n\n    for (const orgId of candidateOrgIds) {\n      if (!orgId) continue\n      const org = await findOneWithDecryption(\n        em,\n        Organization,\n        { id: orgId, deletedAt: null },\n        { populate: ['tenant'] },\n        { tenantId: authTenantId, organizationId: orgId },\n      )\n      if (org?.tenant && org.tenant.id) {\n        tenantId = stringId(org.tenant.id)\n        break\n      }\n    }\n  }\n\n  if (!allowAllTenants && !tenantId) {\n    return NextResponse.json({ items: [], error: 'Tenant scope required' }, { status: 400 })\n  }\n\n  if (query.view === 'options') {\n    if (!tenantId) {\n      return NextResponse.json({ items: [], error: 'Tenant scope required' }, { status: 400 })\n    }\n    const where: FilterQuery<Organization> = { tenant: tenantId, deletedAt: null }\n    if (status === 'active') where.isActive = true\n    if (status === 'inactive') where.isActive = false\n    if (status === 'all' && !includeInactive) where.isActive = true\n    if (ids) where.id = { $in: ids }\n    const orgs = await em.find(Organization, where, { orderBy: { name: 'ASC' } })\n    const items = orgs.map((org) => ({\n      id: stringId(org.id),\n      name: org.name,\n      logoUrl: org.logoUrl ?? null,\n      logoPreserveAspectRatio: !!org.logoPreserveAspectRatio,\n      parentId: org.parentId ?? null,\n      tenantId: tenantId,\n      isActive: !!org.isActive,\n      depth: org.depth ?? 0,\n      treePath: org.treePath ?? stringId(org.id),\n    }))\n    await logCrudAccess({\n      container,\n      auth,\n      request: req,\n      items,\n      idField: 'id',\n      resourceKind: 'directory.organization',\n      organizationId: null,\n      tenantId,\n      query,\n      accessType: ids && ids.length === 1 ? 'read:item' : undefined,\n    })\n    return NextResponse.json({ items })\n  }\n\n  if (query.view === 'tree') {\n    if (!tenantId) {\n      return NextResponse.json({ items: [], error: 'Tenant scope required' }, { status: 400 })\n    }\n    const orgListFilter: FilterQuery<Organization> = { tenant: tenantId, deletedAt: null }\n    const orgs = await em.find(Organization, orgListFilter, { orderBy: { name: 'ASC' } })\n    const hierarchy = computeHierarchyForOrganizations(orgs, tenantId)\n    const nodeMap = new Map<string, { node: ComputedOrganizationNode; children: TreeNode[] }>()\n    const roots: TreeNode[] = []\n    for (const node of hierarchy.ordered) {\n      const treeNode: TreeNode = {\n        id: node.id,\n        name: node.name,\n        parentId: node.parentId,\n        tenantId: node.tenantId,\n        depth: node.depth,\n        ancestorIds: node.ancestorIds,\n        childIds: node.childIds,\n        descendantIds: node.descendantIds,\n        isActive: node.isActive,\n        treePath: node.treePath,\n        pathLabel: node.pathLabel,\n        children: [],\n      }\n      nodeMap.set(node.id, { node, children: treeNode.children })\n      if (node.parentId && nodeMap.has(node.parentId)) {\n        const parentEntry = nodeMap.get(node.parentId)!\n        parentEntry.children.push(treeNode)\n      } else {\n        roots.push(treeNode)\n      }\n    }\n    await logCrudAccess({\n      container,\n      auth,\n      request: req,\n      items: roots,\n      idField: 'id',\n      resourceKind: 'directory.organization',\n      organizationId: null,\n      tenantId,\n      query,\n    })\n    return NextResponse.json({ items: roots })\n  }\n\n  if (query.view !== 'manage') {\n    return NextResponse.json({ items: [] }, { status: 400 })\n  }\n\n  if (allowAllTenants) {\n    // Multi-tenant aggregate view for super administrators\n    const search = (query.search || '').trim().toLowerCase()\n    const allOrgs = await findWithDecryption(\n      em,\n      Organization,\n      { deletedAt: null },\n      { orderBy: { name: 'ASC' }, populate: ['tenant'] },\n      { tenantId: null, organizationId: null },\n    )\n    const byTenant = new Map<string, Organization[]>()\n    for (const org of allOrgs) {\n      const tenantEntity = org.tenant\n      const tid = tenantEntity ? stringId(tenantEntity.id) : null\n      if (!tid) continue\n      if (!byTenant.has(tid)) byTenant.set(tid, [])\n      byTenant.get(tid)!.push(org)\n    }\n\n    const slugByOrgId = new Map<string, string | null>()\n    const updatedAtByOrgId = new Map<string, string | null>()\n    const logoUrlByOrgId = new Map<string, string | null>()\n    const logoPreserveAspectRatioByOrgId = new Map<string, boolean>()\n    for (const org of allOrgs) {\n      slugByOrgId.set(String(org.id), org.slug ?? null)\n      updatedAtByOrgId.set(String(org.id), org.updatedAt instanceof Date ? org.updatedAt.toISOString() : null)\n      logoUrlByOrgId.set(String(org.id), org.logoUrl ?? null)\n      logoPreserveAspectRatioByOrgId.set(String(org.id), !!org.logoPreserveAspectRatio)\n    }\n\n    const tenantIds = Array.from(byTenant.keys())\n    const tenants = tenantIds.length\n      ? await em.find(Tenant, { id: { $in: tenantIds as unknown as string[] } })\n      : []\n    const tenantNameMap = tenants.reduce<Record<string, string>>((acc, tenant) => {\n      const tid = stringId(tenant.id)\n      const name = typeof tenant.name === 'string' && tenant.name.length > 0 ? tenant.name : tid\n      acc[tid] = name\n      return acc\n    }, {})\n\n    const hierarchies = new Map<string, ComputedHierarchy>()\n    const orderedNodes: Array<{ tenantId: string; node: ComputedOrganizationNode }> = []\n    for (const [tid, orgs] of byTenant.entries()) {\n      const hierarchy = computeHierarchyForOrganizations(orgs, tid)\n      hierarchies.set(tid, hierarchy)\n      for (const node of hierarchy.ordered) {\n        orderedNodes.push({ tenantId: tid, node })\n      }\n    }\n\n    let rows = orderedNodes\n    if (query.status === 'active') {\n      rows = rows.filter((entry) => entry.node.isActive)\n    } else if (query.status === 'inactive') {\n      rows = rows.filter((entry) => !entry.node.isActive)\n    }\n\n    if (search) {\n      rows = rows.filter(({ node }) => {\n        const pathLabel = (node.pathLabel || '').toLowerCase()\n        return node.name.toLowerCase().includes(search) || pathLabel.includes(search)\n      })\n    }\n    if (ids) {\n      const idSet = new Set(ids)\n      rows = rows.filter(({ node }) => idSet.has(node.id))\n    }\n\n    rows.sort((a, b) => {\n      const nameA = tenantNameMap[a.tenantId] ?? a.tenantId\n      const nameB = tenantNameMap[b.tenantId] ?? b.tenantId\n      const tenantCompare = nameA.localeCompare(nameB)\n      if (tenantCompare !== 0) return tenantCompare\n      return a.node.pathLabel.localeCompare(b.node.pathLabel)\n    })\n\n    const total = rows.length\n    const pageSize = query.pageSize\n    const page = query.page\n    const start = (page - 1) * pageSize\n    const paged = rows.slice(start, start + pageSize)\n    const recordIds: string[] = []\n    const tenantIdByRecord: Record<string, string | null> = {}\n    const organizationIdByRecord: Record<string, string | null> = {}\n    for (const entry of paged) {\n      const recordId = String(entry.node.id)\n      recordIds.push(recordId)\n      tenantIdByRecord[recordId] = entry.tenantId\n      organizationIdByRecord[recordId] = recordId\n    }\n    const tenantFallbacks = Array.from(new Set(recordIds.map((id) => tenantIdByRecord[id]).filter((value): value is string => typeof value === 'string' && value.length > 0)))\n    const cfByOrg = recordIds.length\n      ? await loadCustomFieldValues({\n          em,\n          entityId: E.directory.organization,\n          recordIds,\n          tenantIdByRecord,\n          organizationIdByRecord,\n          tenantFallbacks,\n        })\n      : {}\n    const items = paged.map(({ tenantId: tid, node }) => {\n      const hierarchy = hierarchies.get(tid)\n      const parentName = node.parentId && hierarchy ? hierarchy.map.get(node.parentId)?.name ?? null : null\n      const pathLabel = node.pathLabel || node.name\n      const recordId = String(node.id)\n      return {\n        id: node.id,\n        name: node.name,\n        slug: slugByOrgId.get(recordId) ?? null,\n        updatedAt: updatedAtByOrgId.get(recordId) ?? null,\n        logoUrl: logoUrlByOrgId.get(recordId) ?? null,\n        logoPreserveAspectRatio: logoPreserveAspectRatioByOrgId.get(recordId) ?? false,\n        tenantId: tid,\n        tenantName: tenantNameMap[tid] ?? tid,\n        parentId: node.parentId,\n        parentName,\n        depth: node.depth,\n        rootId: node.rootId,\n        treePath: node.treePath,\n        pathLabel,\n        ancestorIds: node.ancestorIds,\n        childIds: node.childIds,\n        descendantIds: node.descendantIds,\n        childrenCount: node.childIds.length,\n        descendantsCount: node.descendantIds.length,\n        isActive: node.isActive,\n        ...(cfByOrg[recordId] ?? {}),\n      }\n    })\n    const totalPages = Math.max(1, Math.ceil(total / pageSize))\n    await logCrudAccess({\n      container,\n      auth,\n      request: req,\n      items,\n      idField: 'id',\n      resourceKind: 'directory.organization',\n      organizationId: null,\n      tenantId: null,\n      query,\n      accessType: ids && ids.length === 1 ? 'read:item' : undefined,\n    })\n    return NextResponse.json({ items, total, page, pageSize, totalPages, isSuperAdmin })\n  }\n\n  if (!tenantId) {\n    return NextResponse.json({ items: [], error: 'Tenant scope required' }, { status: 400 })\n  }\n\n  const orgListFilter: FilterQuery<Organization> = { tenant: tenantId, deletedAt: null }\n  const orgs = await em.find(Organization, orgListFilter, { orderBy: { name: 'ASC' } })\n  const hierarchy = computeHierarchyForOrganizations(orgs, tenantId)\n  const slugByOrgId = new Map<string, string | null>()\n  const logoUrlByOrgId = new Map<string, string | null>()\n  const logoPreserveAspectRatioByOrgId = new Map<string, boolean>()\n  const updatedAtByOrgId = new Map<string, string | null>()\n  for (const org of orgs) {\n    slugByOrgId.set(String(org.id), org.slug ?? null)\n    logoUrlByOrgId.set(String(org.id), org.logoUrl ?? null)\n    logoPreserveAspectRatioByOrgId.set(String(org.id), !!org.logoPreserveAspectRatio)\n    updatedAtByOrgId.set(String(org.id), org.updatedAt instanceof Date ? org.updatedAt.toISOString() : null)\n  }\n\n  // Manage view: paginated flat list for a single tenant\n  const search = (query.search || '').trim().toLowerCase()\n  let rows = hierarchy.ordered\n  if (status === 'active') {\n    rows = rows.filter((node) => node.isActive)\n  } else if (status === 'inactive') {\n    rows = rows.filter((node) => !node.isActive)\n  }\n\n  if (search) {\n    rows = rows.filter((node) => {\n      const pathLabel = (node.pathLabel || '').toLowerCase()\n      return node.name.toLowerCase().includes(search) || pathLabel.includes(search)\n    })\n  }\n  if (ids) {\n    const idSet = new Set(ids)\n    rows = rows.filter((node) => idSet.has(node.id))\n  }\n\n  const total = rows.length\n  const pageSize = query.pageSize\n  const page = query.page\n  const start = (page - 1) * pageSize\n  const paged = rows.slice(start, start + pageSize)\n  const recordIds: string[] = []\n  const tenantIdByRecord: Record<string, string | null> = {}\n  const organizationIdByRecord: Record<string, string | null> = {}\n  for (const node of paged) {\n    const recordId = String(node.id)\n    recordIds.push(recordId)\n    tenantIdByRecord[recordId] = node.tenantId ? String(node.tenantId) : null\n    organizationIdByRecord[recordId] = recordId\n  }\n  const cfByOrg = recordIds.length\n    ? await loadCustomFieldValues({\n        em,\n        entityId: E.directory.organization,\n        recordIds,\n        tenantIdByRecord,\n        organizationIdByRecord,\n        tenantFallbacks: tenantId ? [tenantId] : [],\n      })\n    : {}\n  let tenantName: string | null = null\n  if (isSuperAdmin && tenantId) {\n    const tenant = await em.findOne(Tenant, { id: tenantId })\n    if (tenant) {\n      const display = typeof tenant.name === 'string' && tenant.name.length > 0 ? tenant.name : stringId(tenant.id)\n      tenantName = display\n    }\n  }\n  const items = paged.map((node) => {\n    const parentName = node.parentId ? hierarchy.map.get(node.parentId)?.name ?? null : null\n    const pathLabel = node.pathLabel || node.name\n    const recordId = String(node.id)\n    return {\n      id: node.id,\n      name: node.name,\n      slug: slugByOrgId.get(recordId) ?? null,\n      logoUrl: logoUrlByOrgId.get(recordId) ?? null,\n      logoPreserveAspectRatio: logoPreserveAspectRatioByOrgId.get(recordId) ?? false,\n      updatedAt: updatedAtByOrgId.get(recordId) ?? null,\n      tenantId: node.tenantId,\n      tenantName,\n      parentId: node.parentId,\n      parentName,\n      depth: node.depth,\n      rootId: node.rootId,\n      treePath: node.treePath,\n      pathLabel,\n      ancestorIds: node.ancestorIds,\n      childIds: node.childIds,\n      descendantIds: node.descendantIds,\n      childrenCount: node.childIds.length,\n      descendantsCount: node.descendantIds.length,\n      isActive: node.isActive,\n      ...(cfByOrg[recordId] ?? {}),\n    }\n  })\n  const totalPages = Math.max(1, Math.ceil(total / pageSize))\n  await logCrudAccess({\n    container,\n    auth,\n    request: req,\n    items,\n    idField: 'id',\n    resourceKind: 'directory.organization',\n    organizationId: null,\n    tenantId,\n    query,\n    accessType: ids && ids.length === 1 ? 'read:item' : undefined,\n  })\n  return NextResponse.json({ items, total, page, pageSize, totalPages, isSuperAdmin })\n}\n\nexport const POST = crud.POST\nexport const PUT = crud.PUT\nexport const DELETE = crud.DELETE\n\nconst organizationCreateResponseSchema = z.object({\n  id: z.string().uuid(),\n})\n\nconst organizationDeleteRequestSchema = z.object({\n  id: z.string().uuid(),\n})\n\nconst organizationsGetDoc: OpenApiMethodDoc = {\n  summary: 'List organizations',\n  description: 'Returns organizations using options, tree, or paginated manage view depending on the `view` parameter.',\n  tags: [directoryTag],\n  query: viewSchema,\n  responses: [\n    { status: 200, description: 'Organization data for the requested view.', schema: organizationListResponseSchema },\n  ],\n  errors: [\n    { status: 400, description: 'Invalid query or tenant scope', schema: directoryErrorSchema },\n    { status: 401, description: 'Authentication required', schema: directoryErrorSchema },\n  ],\n}\n\nconst organizationsPostDoc: OpenApiMethodDoc = {\n  summary: 'Create organization',\n  description: 'Creates a new organization within a tenant and optionally assigns hierarchy relationships.',\n  tags: [directoryTag],\n  requestBody: {\n    contentType: 'application/json',\n    schema: organizationCreateSchema,\n    description: 'Organization attributes and optional hierarchy configuration.',\n  },\n  responses: [\n    { status: 201, description: 'Organization created.', schema: organizationCreateResponseSchema },\n  ],\n  errors: [\n    { status: 400, description: 'Validation failed', schema: directoryErrorSchema },\n    { status: 401, description: 'Authentication required', schema: directoryErrorSchema },\n    { status: 403, description: 'Missing directory.organizations.manage feature', schema: directoryErrorSchema },\n  ],\n}\n\nconst organizationsPutDoc: OpenApiMethodDoc = {\n  summary: 'Update organization',\n  description: 'Updates organization details and hierarchy assignments. Fields that are omitted keep their current value; send `parentId: null` or `childIds: []` to clear the parent or the children.',\n  tags: [directoryTag],\n  requestBody: {\n    contentType: 'application/json',\n    schema: organizationUpdateSchema,\n    description: 'Organization identifier followed by fields to update.',\n  },\n  responses: [\n    { status: 200, description: 'Organization updated.', schema: directoryOkSchema },\n  ],\n  errors: [\n    { status: 400, description: 'Validation failed', schema: directoryErrorSchema },\n    { status: 401, description: 'Authentication required', schema: directoryErrorSchema },\n    { status: 403, description: 'Missing directory.organizations.manage feature', schema: directoryErrorSchema },\n  ],\n}\n\nconst organizationsDeleteDoc: OpenApiMethodDoc = {\n  summary: 'Delete organization',\n  description: 'Soft deletes an organization identified by id.',\n  tags: [directoryTag],\n  requestBody: {\n    contentType: 'application/json',\n    schema: organizationDeleteRequestSchema,\n    description: 'Identifier of the organization to delete.',\n  },\n  responses: [\n    { status: 200, description: 'Organization deleted.', schema: directoryOkSchema },\n  ],\n  errors: [\n    { status: 400, description: 'Validation failed', schema: directoryErrorSchema },\n    { status: 401, description: 'Authentication required', schema: directoryErrorSchema },\n    { status: 403, description: 'Missing directory.organizations.manage feature', schema: directoryErrorSchema },\n  ],\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: directoryTag,\n  summary: 'Manage organizations',\n  methods: {\n    GET: organizationsGetDoc,\n    POST: organizationsPostDoc,\n    PUT: organizationsPutDoc,\n    DELETE: organizationsDeleteDoc,\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,eAAe,qBAAqB;AAC7C,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AACvC,SAAS,cAAc,cAAc;AACrC,SAAS,0BAA0B,gCAAgC;AACnE;AAAA,EACE;AAAA,OAGK;AACP,SAAS,mCAAmC;AAC5C;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,6BAA6B;AACtC,SAAS,SAAS;AAGlB,SAAS,wBAAwB,+BAA+B;AAEhE,SAAS,yBAAyB;AAClC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,qBAAqB,8BAA8B;AAC5D,SAAS,uBAAuB;AAChC,SAAS,oBAAoB,6BAA6B;AAG1D,MAAM,gBAAgB,EAAE,OAAO,CAAC,CAAC,EAAE,YAAY;AAiB/C,MAAM,aAAa,EAAE,OAAO;AAAA,EAC1B,MAAM,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,QAAQ,CAAC;AAAA,EACxC,UAAU,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,QAAQ,EAAE;AAAA,EACtD,QAAQ,EAAE,OAAO,EAAE,SAAS;AAAA,EAC5B,MAAM,EAAE,KAAK,CAAC,WAAW,UAAU,MAAM,CAAC,EAAE,QAAQ,SAAS;AAAA,EAC7D,KAAK,EAAE,OAAO,EAAE,SAAS;AAAA,EACzB,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACrC,iBAAiB,EAAE,KAAK,CAAC,QAAQ,OAAO,CAAC,EAAE,SAAS;AAAA,EACpD,QAAQ,EAAE,KAAK,CAAC,OAAO,UAAU,UAAU,CAAC,EAAE,SAAS;AACzD,CAAC;AAED,SAAS,SAAS,KAAqC;AACrD,MAAI,CAAC,IAAK,QAAO;AACjB,QAAM,MAAM,IAAI,MAAM,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,OAAO;AAC9D,SAAO,IAAI,SAAS,MAAM,KAAK,IAAI,IAAI,GAAG,CAAC,IAAI;AACjD;AAEA,SAAS,SAAS,OAAwB;AACxC,SAAO,OAAO,KAAK;AACrB;AAEA,SAAS,mBACP,cACA,mBACA,cACe;AACf,MAAI,cAAc;AAChB,WAAO,qBAAqB,gBAAgB;AAAA,EAC9C;AACA,MAAI,gBAAgB,qBAAqB,sBAAsB,cAAc;AAC3E,WAAO;AAAA,EACT;AACA,SAAO,qBAAqB;AAC9B;AAEA,MAAM,OAAO,cAA6D;AAAA,EACxE,UAAU;AAAA,IACR,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,8BAA8B,EAAE;AAAA,IAC5E,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,gCAAgC,EAAE;AAAA,IAC/E,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,gCAAgC,EAAE;AAAA,IAC9E,QAAQ,EAAE,aAAa,MAAM,iBAAiB,CAAC,gCAAgC,EAAE;AAAA,EACnF;AAAA,EACA,KAAK;AAAA,IACH,QAAQ;AAAA,IACR,SAAS;AAAA,IACT,UAAU;AAAA,IACV,aAAa;AAAA,IACb,iBAAiB;AAAA,EACnB;AAAA,EACA,QAAQ;AAAA,EACR,SAAS;AAAA,EACT,SAAS;AAAA,IACP,QAAQ;AAAA,MACN,WAAW;AAAA,MACX,QAAQ;AAAA,MACR,UAAU,CAAC,EAAE,OAAO,MAAM;AAAA,MAC1B,UAAU,CAAC,EAAE,OAAO,OAAO,EAAE,IAAI,OAAO,OAAO,EAAE,EAAE;AAAA,MACnD,QAAQ;AAAA,IACV;AAAA,IACA,QAAQ;AAAA,MACN,WAAW;AAAA,MACX,QAAQ;AAAA,MACR,UAAU,CAAC,EAAE,OAAO,MAAM;AAAA,MAC1B,UAAU,OAAO,EAAE,IAAI,KAAK;AAAA,IAC9B;AAAA,IACA,QAAQ;AAAA,MACN,WAAW;AAAA,MACX,UAAU,OAAO,EAAE,IAAI,KAAK;AAAA,IAC9B;AAAA,EACF;AACF,CAAC;AAEM,MAAM,WAAW,KAAK;AAE7B,eAAsB,IAAI,KAAc;AACtC,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,KAAM,QAAO,aAAa,KAAK,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAElE,QAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,QAAM,SAAS,WAAW,UAAU;AAAA,IAClC,MAAM,IAAI,aAAa,IAAI,MAAM,KAAK;AAAA,IACtC,UAAU,IAAI,aAAa,IAAI,UAAU,KAAK;AAAA,IAC9C,QAAQ,IAAI,aAAa,IAAI,QAAQ,KAAK;AAAA,IAC1C,MAAM,IAAI,aAAa,IAAI,MAAM,KAAK;AAAA,IACtC,KAAK,IAAI,aAAa,IAAI,KAAK,KAAK;AAAA,IACpC,UAAU,IAAI,aAAa,IAAI,UAAU,KAAK;AAAA,IAC9C,iBAAiB,IAAI,aAAa,IAAI,iBAAiB,KAAK;AAAA,IAC5D,QAAQ,IAAI,aAAa,IAAI,QAAQ,KAAK;AAAA,EAC5C,CAAC;AACD,MAAI,CAAC,OAAO,QAAS,QAAO,aAAa,KAAK,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAE5E,QAAM,QAAQ,OAAO;AACrB,QAAM,MAAM,SAAS,MAAM,OAAO,IAAI;AACtC,QAAM,qBAAqB,MAAM,YAAY;AAC7C,QAAM,8BAA8B,sBAAsB,mBAAmB,YAAY,MAAM,QAAQ,OAAO;AAC9G,QAAM,eAAe,KAAK,YAAY;AACtC,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,eAAe,MAAM,oBAAoB,EAAE,MAAM,UAAU,CAAC;AAClE,QAAM,KAAM,UAAU,QAAQ,IAAI;AAClC,QAAM,kBAAkB,gBAAgB,CAAC,+BAA+B,MAAM,SAAS;AACvF,MAAI,WAAW,kBAAkB,OAAO,mBAAmB,cAAc,6BAA6B,YAAY;AAClH,QAAM,SAAS,MAAM,UAAU;AAC/B,QAAM,kBAAkB,kBAAkB,MAAM,eAAe,MAAM,QAAQ,WAAW;AAExF,MAAI,CAAC,mBAAmB,CAAC,YAAY,CAAC,gBAAgB,KAAK,QAAQ;AACjE,QAAI,YAAY;AAChB,QAAI,CAAC,cAAc;AACjB,UAAI,aAA8B;AAClC,UAAI;AACF,cAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AACxF,qBAAa,MAAM,QAAQ,MAAM,UAAU,IAAI,MAAM,aAAa;AAAA,MACpE,QAAQ;AAAA,MAAC;AACT,YAAM,aAAa,aAAa,IAAI,IAAI,UAAU,IAAI,oBAAI,IAAY;AACtE,kBAAY,IAAI,OAAO,CAAC,OAAO,WAAW,IAAI,EAAE,CAAC;AAAA,IACnD;AACA,QAAI,UAAU,QAAQ;AACpB,YAAM,aAA6B,MAAM;AAAA,QACvC;AAAA,QACA;AAAA,QACA,EAAE,IAAI,EAAE,KAAK,UAAU,GAAG,WAAW,KAAK;AAAA,QAC1C,EAAE,UAAU,CAAC,QAAQ,EAAE;AAAA,QACvB,EAAE,UAAU,cAAc,gBAAgB,KAAK;AAAA,MACjD;AACA,YAAM,mBAAmB,oBAAI,IAAY;AACzC,iBAAW,OAAO,YAAY;AAC5B,cAAM,cAAc,IAAI,QAAQ,KAAK,SAAS,IAAI,OAAO,EAAE,IAAI;AAC/D,YAAI,YAAa,kBAAiB,IAAI,WAAW;AAAA,MACnD;AACA,UAAI,iBAAiB,SAAS,GAAG;AAC/B,cAAM,oBAAoB,MAAM,KAAK,gBAAgB,EAAE,CAAC,KAAK;AAC7D,YAAI;AACF,qBAAW,MAAM,uBAAuB,EAAE,MAAM,UAAU,GAAG,iBAAiB;AAAA,QAChF,SAAS,OAAO;AACd,cAAI,gBAAgB,KAAK,GAAG;AAC1B,mBAAO,aAAa,KAAK,MAAM,MAAM,EAAE,QAAQ,MAAM,OAAO,CAAC;AAAA,UAC/D;AACA,gBAAM;AAAA,QACR;AAAA,MACF,WAAW,iBAAiB,OAAO,GAAG;AACpC,eAAO,aAAa,KAAK,EAAE,OAAO,CAAC,GAAG,OAAO,wBAAwB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,MACzF;AAAA,IACF;AAAA,EACF;AAEA,MAAI,CAAC,mBAAmB,CAAC,UAAU;AACjC,UAAM,kBAAkB,oBAAI,IAAY;AACxC,UAAM,cAAc,mCAAmC,GAAG;AAC1D,UAAM,uBAAuB,eAAe,CAAC,4BAA4B,WAAW,IAAI,cAAc;AACtG,QAAI,qBAAsB,iBAAgB,IAAI,oBAAoB;AAClE,QAAI,KAAK,MAAO,iBAAgB,IAAI,KAAK,KAAK;AAE9C,QAAI;AACF,YAAM,QAAQ,MAAM,mCAAmC;AAAA,QACrD;AAAA,QACA;AAAA,QACA,SAAS;AAAA,QACT,YAAY,wBAAwB;AAAA,MACtC,CAAC;AACD,UAAI,MAAM,WAAY,iBAAgB,IAAI,MAAM,UAAU;AAC1D,UAAI,MAAM,QAAQ,MAAM,SAAS,KAAK,MAAM,UAAU,QAAQ;AAC5D,wBAAgB,IAAI,MAAM,UAAU,CAAC,CAAE;AAAA,MACzC;AACA,UAAI,MAAM,QAAQ,MAAM,UAAU,KAAK,MAAM,WAAW,QAAQ;AAC9D,wBAAgB,IAAI,MAAM,WAAW,CAAC,CAAE;AAAA,MAC1C;AAAA,IACF,QAAQ;AAAA,IAAC;AAET,eAAW,SAAS,iBAAiB;AACnC,UAAI,CAAC,MAAO;AACZ,YAAM,MAAM,MAAM;AAAA,QAChB;AAAA,QACA;AAAA,QACA,EAAE,IAAI,OAAO,WAAW,KAAK;AAAA,QAC7B,EAAE,UAAU,CAAC,QAAQ,EAAE;AAAA,QACvB,EAAE,UAAU,cAAc,gBAAgB,MAAM;AAAA,MAClD;AACA,UAAI,KAAK,UAAU,IAAI,OAAO,IAAI;AAChC,mBAAW,SAAS,IAAI,OAAO,EAAE;AACjC;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,MAAI,CAAC,mBAAmB,CAAC,UAAU;AACjC,WAAO,aAAa,KAAK,EAAE,OAAO,CAAC,GAAG,OAAO,wBAAwB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACzF;AAEA,MAAI,MAAM,SAAS,WAAW;AAC5B,QAAI,CAAC,UAAU;AACb,aAAO,aAAa,KAAK,EAAE,OAAO,CAAC,GAAG,OAAO,wBAAwB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACzF;AACA,UAAM,QAAmC,EAAE,QAAQ,UAAU,WAAW,KAAK;AAC7E,QAAI,WAAW,SAAU,OAAM,WAAW;AAC1C,QAAI,WAAW,WAAY,OAAM,WAAW;AAC5C,QAAI,WAAW,SAAS,CAAC,gBAAiB,OAAM,WAAW;AAC3D,QAAI,IAAK,OAAM,KAAK,EAAE,KAAK,IAAI;AAC/B,UAAMA,QAAO,MAAM,GAAG,KAAK,cAAc,OAAO,EAAE,SAAS,EAAE,MAAM,MAAM,EAAE,CAAC;AAC5E,UAAMC,SAAQD,MAAK,IAAI,CAAC,SAAS;AAAA,MAC/B,IAAI,SAAS,IAAI,EAAE;AAAA,MACnB,MAAM,IAAI;AAAA,MACV,SAAS,IAAI,WAAW;AAAA,MACxB,yBAAyB,CAAC,CAAC,IAAI;AAAA,MAC/B,UAAU,IAAI,YAAY;AAAA,MAC1B;AAAA,MACA,UAAU,CAAC,CAAC,IAAI;AAAA,MAChB,OAAO,IAAI,SAAS;AAAA,MACpB,UAAU,IAAI,YAAY,SAAS,IAAI,EAAE;AAAA,IAC3C,EAAE;AACF,UAAM,cAAc;AAAA,MAClB;AAAA,MACA;AAAA,MACA,SAAS;AAAA,MACT,OAAAC;AAAA,MACA,SAAS;AAAA,MACT,cAAc;AAAA,MACd,gBAAgB;AAAA,MAChB;AAAA,MACA;AAAA,MACA,YAAY,OAAO,IAAI,WAAW,IAAI,cAAc;AAAA,IACtD,CAAC;AACD,WAAO,aAAa,KAAK,EAAE,OAAAA,OAAM,CAAC;AAAA,EACpC;AAEA,MAAI,MAAM,SAAS,QAAQ;AACzB,QAAI,CAAC,UAAU;AACb,aAAO,aAAa,KAAK,EAAE,OAAO,CAAC,GAAG,OAAO,wBAAwB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACzF;AACA,UAAMC,iBAA2C,EAAE,QAAQ,UAAU,WAAW,KAAK;AACrF,UAAMF,QAAO,MAAM,GAAG,KAAK,cAAcE,gBAAe,EAAE,SAAS,EAAE,MAAM,MAAM,EAAE,CAAC;AACpF,UAAMC,aAAY,iCAAiCH,OAAM,QAAQ;AACjE,UAAM,UAAU,oBAAI,IAAsE;AAC1F,UAAM,QAAoB,CAAC;AAC3B,eAAW,QAAQG,WAAU,SAAS;AACpC,YAAM,WAAqB;AAAA,QACzB,IAAI,KAAK;AAAA,QACT,MAAM,KAAK;AAAA,QACX,UAAU,KAAK;AAAA,QACf,UAAU,KAAK;AAAA,QACf,OAAO,KAAK;AAAA,QACZ,aAAa,KAAK;AAAA,QAClB,UAAU,KAAK;AAAA,QACf,eAAe,KAAK;AAAA,QACpB,UAAU,KAAK;AAAA,QACf,UAAU,KAAK;AAAA,QACf,WAAW,KAAK;AAAA,QAChB,UAAU,CAAC;AAAA,MACb;AACA,cAAQ,IAAI,KAAK,IAAI,EAAE,MAAM,UAAU,SAAS,SAAS,CAAC;AAC1D,UAAI,KAAK,YAAY,QAAQ,IAAI,KAAK,QAAQ,GAAG;AAC/C,cAAM,cAAc,QAAQ,IAAI,KAAK,QAAQ;AAC7C,oBAAY,SAAS,KAAK,QAAQ;AAAA,MACpC,OAAO;AACL,cAAM,KAAK,QAAQ;AAAA,MACrB;AAAA,IACF;AACA,UAAM,cAAc;AAAA,MAClB;AAAA,MACA;AAAA,MACA,SAAS;AAAA,MACT,OAAO;AAAA,MACP,SAAS;AAAA,MACT,cAAc;AAAA,MACd,gBAAgB;AAAA,MAChB;AAAA,MACA;AAAA,IACF,CAAC;AACD,WAAO,aAAa,KAAK,EAAE,OAAO,MAAM,CAAC;AAAA,EAC3C;AAEA,MAAI,MAAM,SAAS,UAAU;AAC3B,WAAO,aAAa,KAAK,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACzD;AAEA,MAAI,iBAAiB;AAEnB,UAAMC,WAAU,MAAM,UAAU,IAAI,KAAK,EAAE,YAAY;AACvD,UAAM,UAAU,MAAM;AAAA,MACpB;AAAA,MACA;AAAA,MACA,EAAE,WAAW,KAAK;AAAA,MAClB,EAAE,SAAS,EAAE,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,EAAE;AAAA,MACjD,EAAE,UAAU,MAAM,gBAAgB,KAAK;AAAA,IACzC;AACA,UAAM,WAAW,oBAAI,IAA4B;AACjD,eAAW,OAAO,SAAS;AACzB,YAAM,eAAe,IAAI;AACzB,YAAM,MAAM,eAAe,SAAS,aAAa,EAAE,IAAI;AACvD,UAAI,CAAC,IAAK;AACV,UAAI,CAAC,SAAS,IAAI,GAAG,EAAG,UAAS,IAAI,KAAK,CAAC,CAAC;AAC5C,eAAS,IAAI,GAAG,EAAG,KAAK,GAAG;AAAA,IAC7B;AAEA,UAAMC,eAAc,oBAAI,IAA2B;AACnD,UAAMC,oBAAmB,oBAAI,IAA2B;AACxD,UAAMC,kBAAiB,oBAAI,IAA2B;AACtD,UAAMC,kCAAiC,oBAAI,IAAqB;AAChE,eAAW,OAAO,SAAS;AACzB,MAAAH,aAAY,IAAI,OAAO,IAAI,EAAE,GAAG,IAAI,QAAQ,IAAI;AAChD,MAAAC,kBAAiB,IAAI,OAAO,IAAI,EAAE,GAAG,IAAI,qBAAqB,OAAO,IAAI,UAAU,YAAY,IAAI,IAAI;AACvG,MAAAC,gBAAe,IAAI,OAAO,IAAI,EAAE,GAAG,IAAI,WAAW,IAAI;AACtD,MAAAC,gCAA+B,IAAI,OAAO,IAAI,EAAE,GAAG,CAAC,CAAC,IAAI,uBAAuB;AAAA,IAClF;AAEA,UAAM,YAAY,MAAM,KAAK,SAAS,KAAK,CAAC;AAC5C,UAAM,UAAU,UAAU,SACtB,MAAM,GAAG,KAAK,QAAQ,EAAE,IAAI,EAAE,KAAK,UAAiC,EAAE,CAAC,IACvE,CAAC;AACL,UAAM,gBAAgB,QAAQ,OAA+B,CAAC,KAAK,WAAW;AAC5E,YAAM,MAAM,SAAS,OAAO,EAAE;AAC9B,YAAM,OAAO,OAAO,OAAO,SAAS,YAAY,OAAO,KAAK,SAAS,IAAI,OAAO,OAAO;AACvF,UAAI,GAAG,IAAI;AACX,aAAO;AAAA,IACT,GAAG,CAAC,CAAC;AAEL,UAAM,cAAc,oBAAI,IAA+B;AACvD,UAAM,eAA4E,CAAC;AACnF,eAAW,CAAC,KAAKR,KAAI,KAAK,SAAS,QAAQ,GAAG;AAC5C,YAAMG,aAAY,iCAAiCH,OAAM,GAAG;AAC5D,kBAAY,IAAI,KAAKG,UAAS;AAC9B,iBAAW,QAAQA,WAAU,SAAS;AACpC,qBAAa,KAAK,EAAE,UAAU,KAAK,KAAK,CAAC;AAAA,MAC3C;AAAA,IACF;AAEA,QAAIM,QAAO;AACX,QAAI,MAAM,WAAW,UAAU;AAC7B,MAAAA,QAAOA,MAAK,OAAO,CAAC,UAAU,MAAM,KAAK,QAAQ;AAAA,IACnD,WAAW,MAAM,WAAW,YAAY;AACtC,MAAAA,QAAOA,MAAK,OAAO,CAAC,UAAU,CAAC,MAAM,KAAK,QAAQ;AAAA,IACpD;AAEA,QAAIL,SAAQ;AACV,MAAAK,QAAOA,MAAK,OAAO,CAAC,EAAE,KAAK,MAAM;AAC/B,cAAM,aAAa,KAAK,aAAa,IAAI,YAAY;AACrD,eAAO,KAAK,KAAK,YAAY,EAAE,SAASL,OAAM,KAAK,UAAU,SAASA,OAAM;AAAA,MAC9E,CAAC;AAAA,IACH;AACA,QAAI,KAAK;AACP,YAAM,QAAQ,IAAI,IAAI,GAAG;AACzB,MAAAK,QAAOA,MAAK,OAAO,CAAC,EAAE,KAAK,MAAM,MAAM,IAAI,KAAK,EAAE,CAAC;AAAA,IACrD;AAEA,IAAAA,MAAK,KAAK,CAAC,GAAG,MAAM;AAClB,YAAM,QAAQ,cAAc,EAAE,QAAQ,KAAK,EAAE;AAC7C,YAAM,QAAQ,cAAc,EAAE,QAAQ,KAAK,EAAE;AAC7C,YAAM,gBAAgB,MAAM,cAAc,KAAK;AAC/C,UAAI,kBAAkB,EAAG,QAAO;AAChC,aAAO,EAAE,KAAK,UAAU,cAAc,EAAE,KAAK,SAAS;AAAA,IACxD,CAAC;AAED,UAAMC,SAAQD,MAAK;AACnB,UAAME,YAAW,MAAM;AACvB,UAAMC,QAAO,MAAM;AACnB,UAAMC,UAASD,QAAO,KAAKD;AAC3B,UAAMG,SAAQL,MAAK,MAAMI,QAAOA,SAAQF,SAAQ;AAChD,UAAMI,aAAsB,CAAC;AAC7B,UAAMC,oBAAkD,CAAC;AACzD,UAAMC,0BAAwD,CAAC;AAC/D,eAAW,SAASH,QAAO;AACzB,YAAM,WAAW,OAAO,MAAM,KAAK,EAAE;AACrC,MAAAC,WAAU,KAAK,QAAQ;AACvB,MAAAC,kBAAiB,QAAQ,IAAI,MAAM;AACnC,MAAAC,wBAAuB,QAAQ,IAAI;AAAA,IACrC;AACA,UAAM,kBAAkB,MAAM,KAAK,IAAI,IAAIF,WAAU,IAAI,CAAC,OAAOC,kBAAiB,EAAE,CAAC,EAAE,OAAO,CAAC,UAA2B,OAAO,UAAU,YAAY,MAAM,SAAS,CAAC,CAAC,CAAC;AACzK,UAAME,WAAUH,WAAU,SACtB,MAAM,sBAAsB;AAAA,MAC1B;AAAA,MACA,UAAU,EAAE,UAAU;AAAA,MACtB,WAAAA;AAAA,MACA,kBAAAC;AAAA,MACA,wBAAAC;AAAA,MACA;AAAA,IACF,CAAC,IACD,CAAC;AACL,UAAMhB,SAAQa,OAAM,IAAI,CAAC,EAAE,UAAU,KAAK,KAAK,MAAM;AACnD,YAAMX,aAAY,YAAY,IAAI,GAAG;AACrC,YAAM,aAAa,KAAK,YAAYA,aAAYA,WAAU,IAAI,IAAI,KAAK,QAAQ,GAAG,QAAQ,OAAO;AACjG,YAAM,YAAY,KAAK,aAAa,KAAK;AACzC,YAAM,WAAW,OAAO,KAAK,EAAE;AAC/B,aAAO;AAAA,QACL,IAAI,KAAK;AAAA,QACT,MAAM,KAAK;AAAA,QACX,MAAME,aAAY,IAAI,QAAQ,KAAK;AAAA,QACnC,WAAWC,kBAAiB,IAAI,QAAQ,KAAK;AAAA,QAC7C,SAASC,gBAAe,IAAI,QAAQ,KAAK;AAAA,QACzC,yBAAyBC,gCAA+B,IAAI,QAAQ,KAAK;AAAA,QACzE,UAAU;AAAA,QACV,YAAY,cAAc,GAAG,KAAK;AAAA,QAClC,UAAU,KAAK;AAAA,QACf;AAAA,QACA,OAAO,KAAK;AAAA,QACZ,QAAQ,KAAK;AAAA,QACb,UAAU,KAAK;AAAA,QACf;AAAA,QACA,aAAa,KAAK;AAAA,QAClB,UAAU,KAAK;AAAA,QACf,eAAe,KAAK;AAAA,QACpB,eAAe,KAAK,SAAS;AAAA,QAC7B,kBAAkB,KAAK,cAAc;AAAA,QACrC,UAAU,KAAK;AAAA,QACf,GAAIU,SAAQ,QAAQ,KAAK,CAAC;AAAA,MAC5B;AAAA,IACF,CAAC;AACD,UAAMC,cAAa,KAAK,IAAI,GAAG,KAAK,KAAKT,SAAQC,SAAQ,CAAC;AAC1D,UAAM,cAAc;AAAA,MAClB;AAAA,MACA;AAAA,MACA,SAAS;AAAA,MACT,OAAAV;AAAA,MACA,SAAS;AAAA,MACT,cAAc;AAAA,MACd,gBAAgB;AAAA,MAChB,UAAU;AAAA,MACV;AAAA,MACA,YAAY,OAAO,IAAI,WAAW,IAAI,cAAc;AAAA,IACtD,CAAC;AACD,WAAO,aAAa,KAAK,EAAE,OAAAA,QAAO,OAAAS,QAAO,MAAAE,OAAM,UAAAD,WAAU,YAAAQ,aAAY,aAAa,CAAC;AAAA,EACrF;AAEA,MAAI,CAAC,UAAU;AACb,WAAO,aAAa,KAAK,EAAE,OAAO,CAAC,GAAG,OAAO,wBAAwB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACzF;AAEA,QAAM,gBAA2C,EAAE,QAAQ,UAAU,WAAW,KAAK;AACrF,QAAM,OAAO,MAAM,GAAG,KAAK,cAAc,eAAe,EAAE,SAAS,EAAE,MAAM,MAAM,EAAE,CAAC;AACpF,QAAM,YAAY,iCAAiC,MAAM,QAAQ;AACjE,QAAM,cAAc,oBAAI,IAA2B;AACnD,QAAM,iBAAiB,oBAAI,IAA2B;AACtD,QAAM,iCAAiC,oBAAI,IAAqB;AAChE,QAAM,mBAAmB,oBAAI,IAA2B;AACxD,aAAW,OAAO,MAAM;AACtB,gBAAY,IAAI,OAAO,IAAI,EAAE,GAAG,IAAI,QAAQ,IAAI;AAChD,mBAAe,IAAI,OAAO,IAAI,EAAE,GAAG,IAAI,WAAW,IAAI;AACtD,mCAA+B,IAAI,OAAO,IAAI,EAAE,GAAG,CAAC,CAAC,IAAI,uBAAuB;AAChF,qBAAiB,IAAI,OAAO,IAAI,EAAE,GAAG,IAAI,qBAAqB,OAAO,IAAI,UAAU,YAAY,IAAI,IAAI;AAAA,EACzG;AAGA,QAAM,UAAU,MAAM,UAAU,IAAI,KAAK,EAAE,YAAY;AACvD,MAAI,OAAO,UAAU;AACrB,MAAI,WAAW,UAAU;AACvB,WAAO,KAAK,OAAO,CAAC,SAAS,KAAK,QAAQ;AAAA,EAC5C,WAAW,WAAW,YAAY;AAChC,WAAO,KAAK,OAAO,CAAC,SAAS,CAAC,KAAK,QAAQ;AAAA,EAC7C;AAEA,MAAI,QAAQ;AACV,WAAO,KAAK,OAAO,CAAC,SAAS;AAC3B,YAAM,aAAa,KAAK,aAAa,IAAI,YAAY;AACrD,aAAO,KAAK,KAAK,YAAY,EAAE,SAAS,MAAM,KAAK,UAAU,SAAS,MAAM;AAAA,IAC9E,CAAC;AAAA,EACH;AACA,MAAI,KAAK;AACP,UAAM,QAAQ,IAAI,IAAI,GAAG;AACzB,WAAO,KAAK,OAAO,CAAC,SAAS,MAAM,IAAI,KAAK,EAAE,CAAC;AAAA,EACjD;AAEA,QAAM,QAAQ,KAAK;AACnB,QAAM,WAAW,MAAM;AACvB,QAAM,OAAO,MAAM;AACnB,QAAM,SAAS,OAAO,KAAK;AAC3B,QAAM,QAAQ,KAAK,MAAM,OAAO,QAAQ,QAAQ;AAChD,QAAM,YAAsB,CAAC;AAC7B,QAAM,mBAAkD,CAAC;AACzD,QAAM,yBAAwD,CAAC;AAC/D,aAAW,QAAQ,OAAO;AACxB,UAAM,WAAW,OAAO,KAAK,EAAE;AAC/B,cAAU,KAAK,QAAQ;AACvB,qBAAiB,QAAQ,IAAI,KAAK,WAAW,OAAO,KAAK,QAAQ,IAAI;AACrE,2BAAuB,QAAQ,IAAI;AAAA,EACrC;AACA,QAAM,UAAU,UAAU,SACtB,MAAM,sBAAsB;AAAA,IAC1B;AAAA,IACA,UAAU,EAAE,UAAU;AAAA,IACtB;AAAA,IACA;AAAA,IACA;AAAA,IACA,iBAAiB,WAAW,CAAC,QAAQ,IAAI,CAAC;AAAA,EAC5C,CAAC,IACD,CAAC;AACL,MAAI,aAA4B;AAChC,MAAI,gBAAgB,UAAU;AAC5B,UAAM,SAAS,MAAM,GAAG,QAAQ,QAAQ,EAAE,IAAI,SAAS,CAAC;AACxD,QAAI,QAAQ;AACV,YAAM,UAAU,OAAO,OAAO,SAAS,YAAY,OAAO,KAAK,SAAS,IAAI,OAAO,OAAO,SAAS,OAAO,EAAE;AAC5G,mBAAa;AAAA,IACf;AAAA,EACF;AACA,QAAM,QAAQ,MAAM,IAAI,CAAC,SAAS;AAChC,UAAM,aAAa,KAAK,WAAW,UAAU,IAAI,IAAI,KAAK,QAAQ,GAAG,QAAQ,OAAO;AACpF,UAAM,YAAY,KAAK,aAAa,KAAK;AACzC,UAAM,WAAW,OAAO,KAAK,EAAE;AAC/B,WAAO;AAAA,MACL,IAAI,KAAK;AAAA,MACT,MAAM,KAAK;AAAA,MACX,MAAM,YAAY,IAAI,QAAQ,KAAK;AAAA,MACnC,SAAS,eAAe,IAAI,QAAQ,KAAK;AAAA,MACzC,yBAAyB,+BAA+B,IAAI,QAAQ,KAAK;AAAA,MACzE,WAAW,iBAAiB,IAAI,QAAQ,KAAK;AAAA,MAC7C,UAAU,KAAK;AAAA,MACf;AAAA,MACA,UAAU,KAAK;AAAA,MACf;AAAA,MACA,OAAO,KAAK;AAAA,MACZ,QAAQ,KAAK;AAAA,MACb,UAAU,KAAK;AAAA,MACf;AAAA,MACA,aAAa,KAAK;AAAA,MAClB,UAAU,KAAK;AAAA,MACf,eAAe,KAAK;AAAA,MACpB,eAAe,KAAK,SAAS;AAAA,MAC7B,kBAAkB,KAAK,cAAc;AAAA,MACrC,UAAU,KAAK;AAAA,MACf,GAAI,QAAQ,QAAQ,KAAK,CAAC;AAAA,IAC5B;AAAA,EACF,CAAC;AACD,QAAM,aAAa,KAAK,IAAI,GAAG,KAAK,KAAK,QAAQ,QAAQ,CAAC;AAC1D,QAAM,cAAc;AAAA,IAClB;AAAA,IACA;AAAA,IACA,SAAS;AAAA,IACT;AAAA,IACA,SAAS;AAAA,IACT,cAAc;AAAA,IACd,gBAAgB;AAAA,IAChB;AAAA,IACA;AAAA,IACA,YAAY,OAAO,IAAI,WAAW,IAAI,cAAc;AAAA,EACtD,CAAC;AACD,SAAO,aAAa,KAAK,EAAE,OAAO,OAAO,MAAM,UAAU,YAAY,aAAa,CAAC;AACrF;AAEO,MAAM,OAAO,KAAK;AAClB,MAAM,MAAM,KAAK;AACjB,MAAM,SAAS,KAAK;AAE3B,MAAM,mCAAmC,EAAE,OAAO;AAAA,EAChD,IAAI,EAAE,OAAO,EAAE,KAAK;AACtB,CAAC;AAED,MAAM,kCAAkC,EAAE,OAAO;AAAA,EAC/C,IAAI,EAAE,OAAO,EAAE,KAAK;AACtB,CAAC;AAED,MAAM,sBAAwC;AAAA,EAC5C,SAAS;AAAA,EACT,aAAa;AAAA,EACb,MAAM,CAAC,YAAY;AAAA,EACnB,OAAO;AAAA,EACP,WAAW;AAAA,IACT,EAAE,QAAQ,KAAK,aAAa,6CAA6C,QAAQ,+BAA+B;AAAA,EAClH;AAAA,EACA,QAAQ;AAAA,IACN,EAAE,QAAQ,KAAK,aAAa,iCAAiC,QAAQ,qBAAqB;AAAA,IAC1F,EAAE,QAAQ,KAAK,aAAa,2BAA2B,QAAQ,qBAAqB;AAAA,EACtF;AACF;AAEA,MAAM,uBAAyC;AAAA,EAC7C,SAAS;AAAA,EACT,aAAa;AAAA,EACb,MAAM,CAAC,YAAY;AAAA,EACnB,aAAa;AAAA,IACX,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,aAAa;AAAA,EACf;AAAA,EACA,WAAW;AAAA,IACT,EAAE,QAAQ,KAAK,aAAa,yBAAyB,QAAQ,iCAAiC;AAAA,EAChG;AAAA,EACA,QAAQ;AAAA,IACN,EAAE,QAAQ,KAAK,aAAa,qBAAqB,QAAQ,qBAAqB;AAAA,IAC9E,EAAE,QAAQ,KAAK,aAAa,2BAA2B,QAAQ,qBAAqB;AAAA,IACpF,EAAE,QAAQ,KAAK,aAAa,kDAAkD,QAAQ,qBAAqB;AAAA,EAC7G;AACF;AAEA,MAAM,sBAAwC;AAAA,EAC5C,SAAS;AAAA,EACT,aAAa;AAAA,EACb,MAAM,CAAC,YAAY;AAAA,EACnB,aAAa;AAAA,IACX,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,aAAa;AAAA,EACf;AAAA,EACA,WAAW;AAAA,IACT,EAAE,QAAQ,KAAK,aAAa,yBAAyB,QAAQ,kBAAkB;AAAA,EACjF;AAAA,EACA,QAAQ;AAAA,IACN,EAAE,QAAQ,KAAK,aAAa,qBAAqB,QAAQ,qBAAqB;AAAA,IAC9E,EAAE,QAAQ,KAAK,aAAa,2BAA2B,QAAQ,qBAAqB;AAAA,IACpF,EAAE,QAAQ,KAAK,aAAa,kDAAkD,QAAQ,qBAAqB;AAAA,EAC7G;AACF;AAEA,MAAM,yBAA2C;AAAA,EAC/C,SAAS;AAAA,EACT,aAAa;AAAA,EACb,MAAM,CAAC,YAAY;AAAA,EACnB,aAAa;AAAA,IACX,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,aAAa;AAAA,EACf;AAAA,EACA,WAAW;AAAA,IACT,EAAE,QAAQ,KAAK,aAAa,yBAAyB,QAAQ,kBAAkB;AAAA,EACjF;AAAA,EACA,QAAQ;AAAA,IACN,EAAE,QAAQ,KAAK,aAAa,qBAAqB,QAAQ,qBAAqB;AAAA,IAC9E,EAAE,QAAQ,KAAK,aAAa,2BAA2B,QAAQ,qBAAqB;AAAA,IACpF,EAAE,QAAQ,KAAK,aAAa,kDAAkD,QAAQ,qBAAqB;AAAA,EAC7G;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,IACL,MAAM;AAAA,IACN,KAAK;AAAA,IACL,QAAQ;AAAA,EACV;AACF;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { logCrudAccess, makeCrudRoute } from '@open-mercato/shared/lib/crud/factory'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { Organization, Tenant } from '@open-mercato/core/modules/directory/data/entities'\nimport { organizationCreateSchema, organizationUpdateSchema } from '@open-mercato/core/modules/directory/data/validators'\nimport {\n  computeHierarchyForOrganizations,\n  type ComputedHierarchy,\n  type ComputedOrganizationNode,\n} from '@open-mercato/core/modules/directory/lib/hierarchy'\nimport { isAllOrganizationsSelection } from '@open-mercato/core/modules/directory/constants'\nimport {\n  getSelectedOrganizationFromRequest,\n  resolveOrganizationScopeForRequest,\n} from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { loadCustomFieldValues } from '@open-mercato/shared/lib/crud/custom-fields'\nimport { E } from '#generated/entities.ids.generated'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport type { FilterQuery } from '@mikro-orm/core'\nimport { organizationCrudEvents, organizationCrudIndexer } from '@open-mercato/core/modules/directory/commands/organizations'\nimport type { OpenApiMethodDoc, OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { parseBooleanToken } from '@open-mercato/shared/lib/boolean'\nimport {\n  directoryTag,\n  directoryErrorSchema,\n  directoryOkSchema,\n  organizationListResponseSchema,\n} from '../openapi'\nimport { resolveIsSuperAdmin, enforceTenantSelection } from '@open-mercato/core/modules/auth/lib/tenantAccess'\nimport { isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { findWithDecryption, findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { parseCommaSeparatedList } from '@open-mercato/shared/lib/string'\n\ntype CrudInput = Record<string, unknown>\nconst rawBodySchema = z.object({}).passthrough()\n\ntype TreeNode = {\n  id: string\n  name: string\n  parentId: string | null\n  tenantId: string | null\n  depth: number\n  ancestorIds: string[]\n  childIds: string[]\n  descendantIds: string[]\n  isActive: boolean\n  treePath: string | null\n  pathLabel: string\n  children: TreeNode[]\n}\n\nconst organizationIdSchema = z.guid()\n\nconst viewSchema = z.object({\n  page: z.coerce.number().min(1).default(1),\n  pageSize: z.coerce.number().min(1).max(100).default(50),\n  search: z.string().optional(),\n  view: z.enum(['options', 'manage', 'tree']).default('options'),\n  ids: z\n    .string()\n    .refine((raw) => parseCommaSeparatedList(raw).every((id) => organizationIdSchema.safeParse(id).success), {\n      message: 'ids must be a comma-separated list of UUIDs',\n    })\n    .optional(),\n  tenantId: z.string().uuid().optional(),\n  includeInactive: z.enum(['true', 'false']).optional(),\n  status: z.enum(['all', 'active', 'inactive']).optional(),\n})\n\nfunction parseIds(raw: string | null): string[] | null {\n  const ids = parseCommaSeparatedList(raw)\n  return ids.length ? Array.from(new Set(ids)) : null\n}\n\nfunction stringId(value: unknown): string {\n  return String(value)\n}\n\nfunction enforceTenantScope(\n  authTenantId: string | null,\n  requestedTenantId: string | null,\n  isSuperAdmin: boolean,\n): string | null {\n  if (isSuperAdmin) {\n    return requestedTenantId || authTenantId || null\n  }\n  if (authTenantId && requestedTenantId && requestedTenantId !== authTenantId) {\n    return null\n  }\n  return requestedTenantId || authTenantId\n}\n\nconst crud = makeCrudRoute<CrudInput, CrudInput, Record<string, unknown>>({\n  metadata: {\n    GET: { requireAuth: true, requireFeatures: ['directory.organizations.view'] },\n    POST: { requireAuth: true, requireFeatures: ['directory.organizations.manage'] },\n    PUT: { requireAuth: true, requireFeatures: ['directory.organizations.manage'] },\n    DELETE: { requireAuth: true, requireFeatures: ['directory.organizations.manage'] },\n  },\n  orm: {\n    entity: Organization,\n    idField: 'id',\n    orgField: null,\n    tenantField: null,\n    softDeleteField: 'deletedAt',\n  },\n  events: organizationCrudEvents,\n  indexer: organizationCrudIndexer,\n  actions: {\n    create: {\n      commandId: 'directory.organizations.create',\n      schema: rawBodySchema,\n      mapInput: ({ parsed }) => parsed,\n      response: ({ result }) => ({ id: String(result.id) }),\n      status: 201,\n    },\n    update: {\n      commandId: 'directory.organizations.update',\n      schema: rawBodySchema,\n      mapInput: ({ parsed }) => parsed,\n      response: () => ({ ok: true }),\n    },\n    delete: {\n      commandId: 'directory.organizations.delete',\n      response: () => ({ ok: true }),\n    },\n  },\n})\n\nexport const metadata = crud.metadata\n\nexport async function GET(req: Request) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth) return NextResponse.json({ items: [] }, { status: 401 })\n\n  const url = new URL(req.url)\n  const parsed = viewSchema.safeParse({\n    page: url.searchParams.get('page') ?? undefined,\n    pageSize: url.searchParams.get('pageSize') ?? undefined,\n    search: url.searchParams.get('search') ?? undefined,\n    view: url.searchParams.get('view') ?? undefined,\n    ids: url.searchParams.get('ids') ?? undefined,\n    tenantId: url.searchParams.get('tenantId') ?? undefined,\n    includeInactive: url.searchParams.get('includeInactive') ?? undefined,\n    status: url.searchParams.get('status') ?? undefined,\n  })\n  if (!parsed.success) {\n    const { translate } = await resolveTranslations()\n    return NextResponse.json(\n      { items: [], error: translate('directory.organizations.errors.invalidQuery', 'Invalid query') },\n      { status: 400 },\n    )\n  }\n\n  const query = parsed.data\n  const ids = parseIds(query.ids ?? null)\n  const requestedTenantRaw = query.tenantId ?? null\n  const normalizedRequestedTenantId = requestedTenantRaw && requestedTenantRaw.toLowerCase() === 'all' ? null : requestedTenantRaw\n  const authTenantId = auth.tenantId ?? null\n  const container = await createRequestContainer()\n  const isSuperAdmin = await resolveIsSuperAdmin({ auth, container })\n  const em = (container.resolve('em') as EntityManager)\n  const allowAllTenants = isSuperAdmin && !normalizedRequestedTenantId && query.view === 'manage'\n  let tenantId = allowAllTenants ? null : enforceTenantScope(authTenantId, normalizedRequestedTenantId, isSuperAdmin)\n  const status = query.status ?? 'all'\n  const includeInactive = parseBooleanToken(query.includeInactive) === true || status !== 'active'\n\n  if (!allowAllTenants && !tenantId && !authTenantId && ids?.length) {\n    let scopedIds = ids\n    if (!isSuperAdmin) {\n      let allowedIds: string[] | null = null\n      try {\n        const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n        allowedIds = Array.isArray(scope.allowedIds) ? scope.allowedIds : null\n      } catch {}\n      const allowedSet = allowedIds ? new Set(allowedIds) : new Set<string>()\n      scopedIds = ids.filter((id) => allowedSet.has(id))\n    }\n    if (scopedIds.length) {\n      const scopedOrgs: Organization[] = await findWithDecryption(\n        em,\n        Organization,\n        { id: { $in: scopedIds }, deletedAt: null },\n        { populate: ['tenant'] },\n        { tenantId: authTenantId, organizationId: null },\n      )\n      const tenantCandidates = new Set<string>()\n      for (const org of scopedOrgs) {\n        const orgTenantId = org.tenant?.id ? stringId(org.tenant.id) : ''\n        if (orgTenantId) tenantCandidates.add(orgTenantId)\n      }\n      if (tenantCandidates.size === 1) {\n        const candidateTenantId = Array.from(tenantCandidates)[0] ?? null\n        try {\n          tenantId = await enforceTenantSelection({ auth, container }, candidateTenantId)\n        } catch (error) {\n          if (isCrudHttpError(error)) {\n            return NextResponse.json(error.body, { status: error.status })\n          }\n          throw error\n        }\n      } else if (tenantCandidates.size > 1) {\n        return NextResponse.json({ items: [], error: 'Tenant scope required' }, { status: 400 })\n      }\n    }\n  }\n\n  if (!allowAllTenants && !tenantId) {\n    const candidateOrgIds = new Set<string>()\n    const cookieOrgId = getSelectedOrganizationFromRequest(req)\n    const effectiveCookieOrgId = cookieOrgId && !isAllOrganizationsSelection(cookieOrgId) ? cookieOrgId : null\n    if (effectiveCookieOrgId) candidateOrgIds.add(effectiveCookieOrgId)\n    if (auth.orgId) candidateOrgIds.add(auth.orgId)\n\n    try {\n      const scope = await resolveOrganizationScopeForRequest({\n        container,\n        auth,\n        request: req,\n        selectedId: effectiveCookieOrgId ?? undefined,\n      })\n      if (scope.selectedId) candidateOrgIds.add(scope.selectedId)\n      if (Array.isArray(scope.filterIds) && scope.filterIds.length) {\n        candidateOrgIds.add(scope.filterIds[0]!)\n      }\n      if (Array.isArray(scope.allowedIds) && scope.allowedIds.length) {\n        candidateOrgIds.add(scope.allowedIds[0]!)\n      }\n    } catch {}\n\n    for (const orgId of candidateOrgIds) {\n      if (!orgId) continue\n      const org = await findOneWithDecryption(\n        em,\n        Organization,\n        { id: orgId, deletedAt: null },\n        { populate: ['tenant'] },\n        { tenantId: authTenantId, organizationId: orgId },\n      )\n      if (org?.tenant && org.tenant.id) {\n        tenantId = stringId(org.tenant.id)\n        break\n      }\n    }\n  }\n\n  if (!allowAllTenants && !tenantId) {\n    return NextResponse.json({ items: [], error: 'Tenant scope required' }, { status: 400 })\n  }\n\n  if (query.view === 'options') {\n    if (!tenantId) {\n      return NextResponse.json({ items: [], error: 'Tenant scope required' }, { status: 400 })\n    }\n    const where: FilterQuery<Organization> = { tenant: tenantId, deletedAt: null }\n    if (status === 'active') where.isActive = true\n    if (status === 'inactive') where.isActive = false\n    if (status === 'all' && !includeInactive) where.isActive = true\n    if (ids) where.id = { $in: ids }\n    const orgs = await em.find(Organization, where, { orderBy: { name: 'ASC' } })\n    const items = orgs.map((org) => ({\n      id: stringId(org.id),\n      name: org.name,\n      logoUrl: org.logoUrl ?? null,\n      logoPreserveAspectRatio: !!org.logoPreserveAspectRatio,\n      parentId: org.parentId ?? null,\n      tenantId: tenantId,\n      isActive: !!org.isActive,\n      depth: org.depth ?? 0,\n      treePath: org.treePath ?? stringId(org.id),\n    }))\n    await logCrudAccess({\n      container,\n      auth,\n      request: req,\n      items,\n      idField: 'id',\n      resourceKind: 'directory.organization',\n      organizationId: null,\n      tenantId,\n      query,\n      accessType: ids && ids.length === 1 ? 'read:item' : undefined,\n    })\n    return NextResponse.json({ items })\n  }\n\n  if (query.view === 'tree') {\n    if (!tenantId) {\n      return NextResponse.json({ items: [], error: 'Tenant scope required' }, { status: 400 })\n    }\n    const orgListFilter: FilterQuery<Organization> = { tenant: tenantId, deletedAt: null }\n    const orgs = await em.find(Organization, orgListFilter, { orderBy: { name: 'ASC' } })\n    const hierarchy = computeHierarchyForOrganizations(orgs, tenantId)\n    const nodeMap = new Map<string, { node: ComputedOrganizationNode; children: TreeNode[] }>()\n    const roots: TreeNode[] = []\n    for (const node of hierarchy.ordered) {\n      const treeNode: TreeNode = {\n        id: node.id,\n        name: node.name,\n        parentId: node.parentId,\n        tenantId: node.tenantId,\n        depth: node.depth,\n        ancestorIds: node.ancestorIds,\n        childIds: node.childIds,\n        descendantIds: node.descendantIds,\n        isActive: node.isActive,\n        treePath: node.treePath,\n        pathLabel: node.pathLabel,\n        children: [],\n      }\n      nodeMap.set(node.id, { node, children: treeNode.children })\n      if (node.parentId && nodeMap.has(node.parentId)) {\n        const parentEntry = nodeMap.get(node.parentId)!\n        parentEntry.children.push(treeNode)\n      } else {\n        roots.push(treeNode)\n      }\n    }\n    await logCrudAccess({\n      container,\n      auth,\n      request: req,\n      items: roots,\n      idField: 'id',\n      resourceKind: 'directory.organization',\n      organizationId: null,\n      tenantId,\n      query,\n    })\n    return NextResponse.json({ items: roots })\n  }\n\n  if (query.view !== 'manage') {\n    return NextResponse.json({ items: [] }, { status: 400 })\n  }\n\n  if (allowAllTenants) {\n    // Multi-tenant aggregate view for super administrators\n    const search = (query.search || '').trim().toLowerCase()\n    const allOrgs = await findWithDecryption(\n      em,\n      Organization,\n      { deletedAt: null },\n      { orderBy: { name: 'ASC' }, populate: ['tenant'] },\n      { tenantId: null, organizationId: null },\n    )\n    const byTenant = new Map<string, Organization[]>()\n    for (const org of allOrgs) {\n      const tenantEntity = org.tenant\n      const tid = tenantEntity ? stringId(tenantEntity.id) : null\n      if (!tid) continue\n      if (!byTenant.has(tid)) byTenant.set(tid, [])\n      byTenant.get(tid)!.push(org)\n    }\n\n    const slugByOrgId = new Map<string, string | null>()\n    const updatedAtByOrgId = new Map<string, string | null>()\n    const logoUrlByOrgId = new Map<string, string | null>()\n    const logoPreserveAspectRatioByOrgId = new Map<string, boolean>()\n    for (const org of allOrgs) {\n      slugByOrgId.set(String(org.id), org.slug ?? null)\n      updatedAtByOrgId.set(String(org.id), org.updatedAt instanceof Date ? org.updatedAt.toISOString() : null)\n      logoUrlByOrgId.set(String(org.id), org.logoUrl ?? null)\n      logoPreserveAspectRatioByOrgId.set(String(org.id), !!org.logoPreserveAspectRatio)\n    }\n\n    const tenantIds = Array.from(byTenant.keys())\n    const tenants = tenantIds.length\n      ? await em.find(Tenant, { id: { $in: tenantIds as unknown as string[] } })\n      : []\n    const tenantNameMap = tenants.reduce<Record<string, string>>((acc, tenant) => {\n      const tid = stringId(tenant.id)\n      const name = typeof tenant.name === 'string' && tenant.name.length > 0 ? tenant.name : tid\n      acc[tid] = name\n      return acc\n    }, {})\n\n    const hierarchies = new Map<string, ComputedHierarchy>()\n    const orderedNodes: Array<{ tenantId: string; node: ComputedOrganizationNode }> = []\n    for (const [tid, orgs] of byTenant.entries()) {\n      const hierarchy = computeHierarchyForOrganizations(orgs, tid)\n      hierarchies.set(tid, hierarchy)\n      for (const node of hierarchy.ordered) {\n        orderedNodes.push({ tenantId: tid, node })\n      }\n    }\n\n    let rows = orderedNodes\n    if (query.status === 'active') {\n      rows = rows.filter((entry) => entry.node.isActive)\n    } else if (query.status === 'inactive') {\n      rows = rows.filter((entry) => !entry.node.isActive)\n    }\n\n    if (search) {\n      rows = rows.filter(({ node }) => {\n        const pathLabel = (node.pathLabel || '').toLowerCase()\n        return node.name.toLowerCase().includes(search) || pathLabel.includes(search)\n      })\n    }\n    if (ids) {\n      const idSet = new Set(ids)\n      rows = rows.filter(({ node }) => idSet.has(node.id))\n    }\n\n    rows.sort((a, b) => {\n      const nameA = tenantNameMap[a.tenantId] ?? a.tenantId\n      const nameB = tenantNameMap[b.tenantId] ?? b.tenantId\n      const tenantCompare = nameA.localeCompare(nameB)\n      if (tenantCompare !== 0) return tenantCompare\n      return a.node.pathLabel.localeCompare(b.node.pathLabel)\n    })\n\n    const total = rows.length\n    const pageSize = query.pageSize\n    const page = query.page\n    const start = (page - 1) * pageSize\n    const paged = rows.slice(start, start + pageSize)\n    const recordIds: string[] = []\n    const tenantIdByRecord: Record<string, string | null> = {}\n    const organizationIdByRecord: Record<string, string | null> = {}\n    for (const entry of paged) {\n      const recordId = String(entry.node.id)\n      recordIds.push(recordId)\n      tenantIdByRecord[recordId] = entry.tenantId\n      organizationIdByRecord[recordId] = recordId\n    }\n    const tenantFallbacks = Array.from(new Set(recordIds.map((id) => tenantIdByRecord[id]).filter((value): value is string => typeof value === 'string' && value.length > 0)))\n    const cfByOrg = recordIds.length\n      ? await loadCustomFieldValues({\n          em,\n          entityId: E.directory.organization,\n          recordIds,\n          tenantIdByRecord,\n          organizationIdByRecord,\n          tenantFallbacks,\n        })\n      : {}\n    const items = paged.map(({ tenantId: tid, node }) => {\n      const hierarchy = hierarchies.get(tid)\n      const parentName = node.parentId && hierarchy ? hierarchy.map.get(node.parentId)?.name ?? null : null\n      const pathLabel = node.pathLabel || node.name\n      const recordId = String(node.id)\n      return {\n        id: node.id,\n        name: node.name,\n        slug: slugByOrgId.get(recordId) ?? null,\n        updatedAt: updatedAtByOrgId.get(recordId) ?? null,\n        logoUrl: logoUrlByOrgId.get(recordId) ?? null,\n        logoPreserveAspectRatio: logoPreserveAspectRatioByOrgId.get(recordId) ?? false,\n        tenantId: tid,\n        tenantName: tenantNameMap[tid] ?? tid,\n        parentId: node.parentId,\n        parentName,\n        depth: node.depth,\n        rootId: node.rootId,\n        treePath: node.treePath,\n        pathLabel,\n        ancestorIds: node.ancestorIds,\n        childIds: node.childIds,\n        descendantIds: node.descendantIds,\n        childrenCount: node.childIds.length,\n        descendantsCount: node.descendantIds.length,\n        isActive: node.isActive,\n        ...(cfByOrg[recordId] ?? {}),\n      }\n    })\n    const totalPages = Math.max(1, Math.ceil(total / pageSize))\n    await logCrudAccess({\n      container,\n      auth,\n      request: req,\n      items,\n      idField: 'id',\n      resourceKind: 'directory.organization',\n      organizationId: null,\n      tenantId: null,\n      query,\n      accessType: ids && ids.length === 1 ? 'read:item' : undefined,\n    })\n    return NextResponse.json({ items, total, page, pageSize, totalPages, isSuperAdmin })\n  }\n\n  if (!tenantId) {\n    return NextResponse.json({ items: [], error: 'Tenant scope required' }, { status: 400 })\n  }\n\n  const orgListFilter: FilterQuery<Organization> = { tenant: tenantId, deletedAt: null }\n  const orgs = await em.find(Organization, orgListFilter, { orderBy: { name: 'ASC' } })\n  const hierarchy = computeHierarchyForOrganizations(orgs, tenantId)\n  const slugByOrgId = new Map<string, string | null>()\n  const logoUrlByOrgId = new Map<string, string | null>()\n  const logoPreserveAspectRatioByOrgId = new Map<string, boolean>()\n  const updatedAtByOrgId = new Map<string, string | null>()\n  for (const org of orgs) {\n    slugByOrgId.set(String(org.id), org.slug ?? null)\n    logoUrlByOrgId.set(String(org.id), org.logoUrl ?? null)\n    logoPreserveAspectRatioByOrgId.set(String(org.id), !!org.logoPreserveAspectRatio)\n    updatedAtByOrgId.set(String(org.id), org.updatedAt instanceof Date ? org.updatedAt.toISOString() : null)\n  }\n\n  // Manage view: paginated flat list for a single tenant\n  const search = (query.search || '').trim().toLowerCase()\n  let rows = hierarchy.ordered\n  if (status === 'active') {\n    rows = rows.filter((node) => node.isActive)\n  } else if (status === 'inactive') {\n    rows = rows.filter((node) => !node.isActive)\n  }\n\n  if (search) {\n    rows = rows.filter((node) => {\n      const pathLabel = (node.pathLabel || '').toLowerCase()\n      return node.name.toLowerCase().includes(search) || pathLabel.includes(search)\n    })\n  }\n  if (ids) {\n    const idSet = new Set(ids)\n    rows = rows.filter((node) => idSet.has(node.id))\n  }\n\n  const total = rows.length\n  const pageSize = query.pageSize\n  const page = query.page\n  const start = (page - 1) * pageSize\n  const paged = rows.slice(start, start + pageSize)\n  const recordIds: string[] = []\n  const tenantIdByRecord: Record<string, string | null> = {}\n  const organizationIdByRecord: Record<string, string | null> = {}\n  for (const node of paged) {\n    const recordId = String(node.id)\n    recordIds.push(recordId)\n    tenantIdByRecord[recordId] = node.tenantId ? String(node.tenantId) : null\n    organizationIdByRecord[recordId] = recordId\n  }\n  const cfByOrg = recordIds.length\n    ? await loadCustomFieldValues({\n        em,\n        entityId: E.directory.organization,\n        recordIds,\n        tenantIdByRecord,\n        organizationIdByRecord,\n        tenantFallbacks: tenantId ? [tenantId] : [],\n      })\n    : {}\n  let tenantName: string | null = null\n  if (isSuperAdmin && tenantId) {\n    const tenant = await em.findOne(Tenant, { id: tenantId })\n    if (tenant) {\n      const display = typeof tenant.name === 'string' && tenant.name.length > 0 ? tenant.name : stringId(tenant.id)\n      tenantName = display\n    }\n  }\n  const items = paged.map((node) => {\n    const parentName = node.parentId ? hierarchy.map.get(node.parentId)?.name ?? null : null\n    const pathLabel = node.pathLabel || node.name\n    const recordId = String(node.id)\n    return {\n      id: node.id,\n      name: node.name,\n      slug: slugByOrgId.get(recordId) ?? null,\n      logoUrl: logoUrlByOrgId.get(recordId) ?? null,\n      logoPreserveAspectRatio: logoPreserveAspectRatioByOrgId.get(recordId) ?? false,\n      updatedAt: updatedAtByOrgId.get(recordId) ?? null,\n      tenantId: node.tenantId,\n      tenantName,\n      parentId: node.parentId,\n      parentName,\n      depth: node.depth,\n      rootId: node.rootId,\n      treePath: node.treePath,\n      pathLabel,\n      ancestorIds: node.ancestorIds,\n      childIds: node.childIds,\n      descendantIds: node.descendantIds,\n      childrenCount: node.childIds.length,\n      descendantsCount: node.descendantIds.length,\n      isActive: node.isActive,\n      ...(cfByOrg[recordId] ?? {}),\n    }\n  })\n  const totalPages = Math.max(1, Math.ceil(total / pageSize))\n  await logCrudAccess({\n    container,\n    auth,\n    request: req,\n    items,\n    idField: 'id',\n    resourceKind: 'directory.organization',\n    organizationId: null,\n    tenantId,\n    query,\n    accessType: ids && ids.length === 1 ? 'read:item' : undefined,\n  })\n  return NextResponse.json({ items, total, page, pageSize, totalPages, isSuperAdmin })\n}\n\nexport const POST = crud.POST\nexport const PUT = crud.PUT\nexport const DELETE = crud.DELETE\n\nconst organizationCreateResponseSchema = z.object({\n  id: z.string().uuid(),\n})\n\nconst organizationDeleteRequestSchema = z.object({\n  id: z.string().uuid(),\n})\n\nconst organizationsGetDoc: OpenApiMethodDoc = {\n  summary: 'List organizations',\n  description: 'Returns organizations using options, tree, or paginated manage view depending on the `view` parameter.',\n  tags: [directoryTag],\n  query: viewSchema,\n  responses: [\n    { status: 200, description: 'Organization data for the requested view.', schema: organizationListResponseSchema },\n  ],\n  errors: [\n    { status: 400, description: 'Invalid query or tenant scope', schema: directoryErrorSchema },\n    { status: 401, description: 'Authentication required', schema: directoryErrorSchema },\n  ],\n}\n\nconst organizationsPostDoc: OpenApiMethodDoc = {\n  summary: 'Create organization',\n  description: 'Creates a new organization within a tenant and optionally assigns hierarchy relationships.',\n  tags: [directoryTag],\n  requestBody: {\n    contentType: 'application/json',\n    schema: organizationCreateSchema,\n    description: 'Organization attributes and optional hierarchy configuration.',\n  },\n  responses: [\n    { status: 201, description: 'Organization created.', schema: organizationCreateResponseSchema },\n  ],\n  errors: [\n    { status: 400, description: 'Validation failed', schema: directoryErrorSchema },\n    { status: 401, description: 'Authentication required', schema: directoryErrorSchema },\n    { status: 403, description: 'Missing directory.organizations.manage feature', schema: directoryErrorSchema },\n  ],\n}\n\nconst organizationsPutDoc: OpenApiMethodDoc = {\n  summary: 'Update organization',\n  description: 'Updates organization details and hierarchy assignments. Fields that are omitted keep their current value; send `parentId: null` or `childIds: []` to clear the parent or the children.',\n  tags: [directoryTag],\n  requestBody: {\n    contentType: 'application/json',\n    schema: organizationUpdateSchema,\n    description: 'Organization identifier followed by fields to update.',\n  },\n  responses: [\n    { status: 200, description: 'Organization updated.', schema: directoryOkSchema },\n  ],\n  errors: [\n    { status: 400, description: 'Validation failed', schema: directoryErrorSchema },\n    { status: 401, description: 'Authentication required', schema: directoryErrorSchema },\n    { status: 403, description: 'Missing directory.organizations.manage feature', schema: directoryErrorSchema },\n  ],\n}\n\nconst organizationsDeleteDoc: OpenApiMethodDoc = {\n  summary: 'Delete organization',\n  description: 'Soft deletes an organization identified by id.',\n  tags: [directoryTag],\n  requestBody: {\n    contentType: 'application/json',\n    schema: organizationDeleteRequestSchema,\n    description: 'Identifier of the organization to delete.',\n  },\n  responses: [\n    { status: 200, description: 'Organization deleted.', schema: directoryOkSchema },\n  ],\n  errors: [\n    { status: 400, description: 'Validation failed', schema: directoryErrorSchema },\n    { status: 401, description: 'Authentication required', schema: directoryErrorSchema },\n    { status: 403, description: 'Missing directory.organizations.manage feature', schema: directoryErrorSchema },\n  ],\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: directoryTag,\n  summary: 'Manage organizations',\n  methods: {\n    GET: organizationsGetDoc,\n    POST: organizationsPostDoc,\n    PUT: organizationsPutDoc,\n    DELETE: organizationsDeleteDoc,\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,eAAe,qBAAqB;AAC7C,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AACvC,SAAS,cAAc,cAAc;AACrC,SAAS,0BAA0B,gCAAgC;AACnE;AAAA,EACE;AAAA,OAGK;AACP,SAAS,mCAAmC;AAC5C;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,6BAA6B;AACtC,SAAS,SAAS;AAGlB,SAAS,wBAAwB,+BAA+B;AAEhE,SAAS,yBAAyB;AAClC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,qBAAqB,8BAA8B;AAC5D,SAAS,uBAAuB;AAChC,SAAS,oBAAoB,6BAA6B;AAC1D,SAAS,2BAA2B;AACpC,SAAS,+BAA+B;AAGxC,MAAM,gBAAgB,EAAE,OAAO,CAAC,CAAC,EAAE,YAAY;AAiB/C,MAAM,uBAAuB,EAAE,KAAK;AAEpC,MAAM,aAAa,EAAE,OAAO;AAAA,EAC1B,MAAM,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,QAAQ,CAAC;AAAA,EACxC,UAAU,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,QAAQ,EAAE;AAAA,EACtD,QAAQ,EAAE,OAAO,EAAE,SAAS;AAAA,EAC5B,MAAM,EAAE,KAAK,CAAC,WAAW,UAAU,MAAM,CAAC,EAAE,QAAQ,SAAS;AAAA,EAC7D,KAAK,EACF,OAAO,EACP,OAAO,CAAC,QAAQ,wBAAwB,GAAG,EAAE,MAAM,CAAC,OAAO,qBAAqB,UAAU,EAAE,EAAE,OAAO,GAAG;AAAA,IACvG,SAAS;AAAA,EACX,CAAC,EACA,SAAS;AAAA,EACZ,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACrC,iBAAiB,EAAE,KAAK,CAAC,QAAQ,OAAO,CAAC,EAAE,SAAS;AAAA,EACpD,QAAQ,EAAE,KAAK,CAAC,OAAO,UAAU,UAAU,CAAC,EAAE,SAAS;AACzD,CAAC;AAED,SAAS,SAAS,KAAqC;AACrD,QAAM,MAAM,wBAAwB,GAAG;AACvC,SAAO,IAAI,SAAS,MAAM,KAAK,IAAI,IAAI,GAAG,CAAC,IAAI;AACjD;AAEA,SAAS,SAAS,OAAwB;AACxC,SAAO,OAAO,KAAK;AACrB;AAEA,SAAS,mBACP,cACA,mBACA,cACe;AACf,MAAI,cAAc;AAChB,WAAO,qBAAqB,gBAAgB;AAAA,EAC9C;AACA,MAAI,gBAAgB,qBAAqB,sBAAsB,cAAc;AAC3E,WAAO;AAAA,EACT;AACA,SAAO,qBAAqB;AAC9B;AAEA,MAAM,OAAO,cAA6D;AAAA,EACxE,UAAU;AAAA,IACR,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,8BAA8B,EAAE;AAAA,IAC5E,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,gCAAgC,EAAE;AAAA,IAC/E,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,gCAAgC,EAAE;AAAA,IAC9E,QAAQ,EAAE,aAAa,MAAM,iBAAiB,CAAC,gCAAgC,EAAE;AAAA,EACnF;AAAA,EACA,KAAK;AAAA,IACH,QAAQ;AAAA,IACR,SAAS;AAAA,IACT,UAAU;AAAA,IACV,aAAa;AAAA,IACb,iBAAiB;AAAA,EACnB;AAAA,EACA,QAAQ;AAAA,EACR,SAAS;AAAA,EACT,SAAS;AAAA,IACP,QAAQ;AAAA,MACN,WAAW;AAAA,MACX,QAAQ;AAAA,MACR,UAAU,CAAC,EAAE,OAAO,MAAM;AAAA,MAC1B,UAAU,CAAC,EAAE,OAAO,OAAO,EAAE,IAAI,OAAO,OAAO,EAAE,EAAE;AAAA,MACnD,QAAQ;AAAA,IACV;AAAA,IACA,QAAQ;AAAA,MACN,WAAW;AAAA,MACX,QAAQ;AAAA,MACR,UAAU,CAAC,EAAE,OAAO,MAAM;AAAA,MAC1B,UAAU,OAAO,EAAE,IAAI,KAAK;AAAA,IAC9B;AAAA,IACA,QAAQ;AAAA,MACN,WAAW;AAAA,MACX,UAAU,OAAO,EAAE,IAAI,KAAK;AAAA,IAC9B;AAAA,EACF;AACF,CAAC;AAEM,MAAM,WAAW,KAAK;AAE7B,eAAsB,IAAI,KAAc;AACtC,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,KAAM,QAAO,aAAa,KAAK,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAElE,QAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,QAAM,SAAS,WAAW,UAAU;AAAA,IAClC,MAAM,IAAI,aAAa,IAAI,MAAM,KAAK;AAAA,IACtC,UAAU,IAAI,aAAa,IAAI,UAAU,KAAK;AAAA,IAC9C,QAAQ,IAAI,aAAa,IAAI,QAAQ,KAAK;AAAA,IAC1C,MAAM,IAAI,aAAa,IAAI,MAAM,KAAK;AAAA,IACtC,KAAK,IAAI,aAAa,IAAI,KAAK,KAAK;AAAA,IACpC,UAAU,IAAI,aAAa,IAAI,UAAU,KAAK;AAAA,IAC9C,iBAAiB,IAAI,aAAa,IAAI,iBAAiB,KAAK;AAAA,IAC5D,QAAQ,IAAI,aAAa,IAAI,QAAQ,KAAK;AAAA,EAC5C,CAAC;AACD,MAAI,CAAC,OAAO,SAAS;AACnB,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,CAAC,GAAG,OAAO,UAAU,+CAA+C,eAAe,EAAE;AAAA,MAC9F,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AAEA,QAAM,QAAQ,OAAO;AACrB,QAAM,MAAM,SAAS,MAAM,OAAO,IAAI;AACtC,QAAM,qBAAqB,MAAM,YAAY;AAC7C,QAAM,8BAA8B,sBAAsB,mBAAmB,YAAY,MAAM,QAAQ,OAAO;AAC9G,QAAM,eAAe,KAAK,YAAY;AACtC,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,eAAe,MAAM,oBAAoB,EAAE,MAAM,UAAU,CAAC;AAClE,QAAM,KAAM,UAAU,QAAQ,IAAI;AAClC,QAAM,kBAAkB,gBAAgB,CAAC,+BAA+B,MAAM,SAAS;AACvF,MAAI,WAAW,kBAAkB,OAAO,mBAAmB,cAAc,6BAA6B,YAAY;AAClH,QAAM,SAAS,MAAM,UAAU;AAC/B,QAAM,kBAAkB,kBAAkB,MAAM,eAAe,MAAM,QAAQ,WAAW;AAExF,MAAI,CAAC,mBAAmB,CAAC,YAAY,CAAC,gBAAgB,KAAK,QAAQ;AACjE,QAAI,YAAY;AAChB,QAAI,CAAC,cAAc;AACjB,UAAI,aAA8B;AAClC,UAAI;AACF,cAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AACxF,qBAAa,MAAM,QAAQ,MAAM,UAAU,IAAI,MAAM,aAAa;AAAA,MACpE,QAAQ;AAAA,MAAC;AACT,YAAM,aAAa,aAAa,IAAI,IAAI,UAAU,IAAI,oBAAI,IAAY;AACtE,kBAAY,IAAI,OAAO,CAAC,OAAO,WAAW,IAAI,EAAE,CAAC;AAAA,IACnD;AACA,QAAI,UAAU,QAAQ;AACpB,YAAM,aAA6B,MAAM;AAAA,QACvC;AAAA,QACA;AAAA,QACA,EAAE,IAAI,EAAE,KAAK,UAAU,GAAG,WAAW,KAAK;AAAA,QAC1C,EAAE,UAAU,CAAC,QAAQ,EAAE;AAAA,QACvB,EAAE,UAAU,cAAc,gBAAgB,KAAK;AAAA,MACjD;AACA,YAAM,mBAAmB,oBAAI,IAAY;AACzC,iBAAW,OAAO,YAAY;AAC5B,cAAM,cAAc,IAAI,QAAQ,KAAK,SAAS,IAAI,OAAO,EAAE,IAAI;AAC/D,YAAI,YAAa,kBAAiB,IAAI,WAAW;AAAA,MACnD;AACA,UAAI,iBAAiB,SAAS,GAAG;AAC/B,cAAM,oBAAoB,MAAM,KAAK,gBAAgB,EAAE,CAAC,KAAK;AAC7D,YAAI;AACF,qBAAW,MAAM,uBAAuB,EAAE,MAAM,UAAU,GAAG,iBAAiB;AAAA,QAChF,SAAS,OAAO;AACd,cAAI,gBAAgB,KAAK,GAAG;AAC1B,mBAAO,aAAa,KAAK,MAAM,MAAM,EAAE,QAAQ,MAAM,OAAO,CAAC;AAAA,UAC/D;AACA,gBAAM;AAAA,QACR;AAAA,MACF,WAAW,iBAAiB,OAAO,GAAG;AACpC,eAAO,aAAa,KAAK,EAAE,OAAO,CAAC,GAAG,OAAO,wBAAwB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,MACzF;AAAA,IACF;AAAA,EACF;AAEA,MAAI,CAAC,mBAAmB,CAAC,UAAU;AACjC,UAAM,kBAAkB,oBAAI,IAAY;AACxC,UAAM,cAAc,mCAAmC,GAAG;AAC1D,UAAM,uBAAuB,eAAe,CAAC,4BAA4B,WAAW,IAAI,cAAc;AACtG,QAAI,qBAAsB,iBAAgB,IAAI,oBAAoB;AAClE,QAAI,KAAK,MAAO,iBAAgB,IAAI,KAAK,KAAK;AAE9C,QAAI;AACF,YAAM,QAAQ,MAAM,mCAAmC;AAAA,QACrD;AAAA,QACA;AAAA,QACA,SAAS;AAAA,QACT,YAAY,wBAAwB;AAAA,MACtC,CAAC;AACD,UAAI,MAAM,WAAY,iBAAgB,IAAI,MAAM,UAAU;AAC1D,UAAI,MAAM,QAAQ,MAAM,SAAS,KAAK,MAAM,UAAU,QAAQ;AAC5D,wBAAgB,IAAI,MAAM,UAAU,CAAC,CAAE;AAAA,MACzC;AACA,UAAI,MAAM,QAAQ,MAAM,UAAU,KAAK,MAAM,WAAW,QAAQ;AAC9D,wBAAgB,IAAI,MAAM,WAAW,CAAC,CAAE;AAAA,MAC1C;AAAA,IACF,QAAQ;AAAA,IAAC;AAET,eAAW,SAAS,iBAAiB;AACnC,UAAI,CAAC,MAAO;AACZ,YAAM,MAAM,MAAM;AAAA,QAChB;AAAA,QACA;AAAA,QACA,EAAE,IAAI,OAAO,WAAW,KAAK;AAAA,QAC7B,EAAE,UAAU,CAAC,QAAQ,EAAE;AAAA,QACvB,EAAE,UAAU,cAAc,gBAAgB,MAAM;AAAA,MAClD;AACA,UAAI,KAAK,UAAU,IAAI,OAAO,IAAI;AAChC,mBAAW,SAAS,IAAI,OAAO,EAAE;AACjC;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,MAAI,CAAC,mBAAmB,CAAC,UAAU;AACjC,WAAO,aAAa,KAAK,EAAE,OAAO,CAAC,GAAG,OAAO,wBAAwB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACzF;AAEA,MAAI,MAAM,SAAS,WAAW;AAC5B,QAAI,CAAC,UAAU;AACb,aAAO,aAAa,KAAK,EAAE,OAAO,CAAC,GAAG,OAAO,wBAAwB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACzF;AACA,UAAM,QAAmC,EAAE,QAAQ,UAAU,WAAW,KAAK;AAC7E,QAAI,WAAW,SAAU,OAAM,WAAW;AAC1C,QAAI,WAAW,WAAY,OAAM,WAAW;AAC5C,QAAI,WAAW,SAAS,CAAC,gBAAiB,OAAM,WAAW;AAC3D,QAAI,IAAK,OAAM,KAAK,EAAE,KAAK,IAAI;AAC/B,UAAMA,QAAO,MAAM,GAAG,KAAK,cAAc,OAAO,EAAE,SAAS,EAAE,MAAM,MAAM,EAAE,CAAC;AAC5E,UAAMC,SAAQD,MAAK,IAAI,CAAC,SAAS;AAAA,MAC/B,IAAI,SAAS,IAAI,EAAE;AAAA,MACnB,MAAM,IAAI;AAAA,MACV,SAAS,IAAI,WAAW;AAAA,MACxB,yBAAyB,CAAC,CAAC,IAAI;AAAA,MAC/B,UAAU,IAAI,YAAY;AAAA,MAC1B;AAAA,MACA,UAAU,CAAC,CAAC,IAAI;AAAA,MAChB,OAAO,IAAI,SAAS;AAAA,MACpB,UAAU,IAAI,YAAY,SAAS,IAAI,EAAE;AAAA,IAC3C,EAAE;AACF,UAAM,cAAc;AAAA,MAClB;AAAA,MACA;AAAA,MACA,SAAS;AAAA,MACT,OAAAC;AAAA,MACA,SAAS;AAAA,MACT,cAAc;AAAA,MACd,gBAAgB;AAAA,MAChB;AAAA,MACA;AAAA,MACA,YAAY,OAAO,IAAI,WAAW,IAAI,cAAc;AAAA,IACtD,CAAC;AACD,WAAO,aAAa,KAAK,EAAE,OAAAA,OAAM,CAAC;AAAA,EACpC;AAEA,MAAI,MAAM,SAAS,QAAQ;AACzB,QAAI,CAAC,UAAU;AACb,aAAO,aAAa,KAAK,EAAE,OAAO,CAAC,GAAG,OAAO,wBAAwB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACzF;AACA,UAAMC,iBAA2C,EAAE,QAAQ,UAAU,WAAW,KAAK;AACrF,UAAMF,QAAO,MAAM,GAAG,KAAK,cAAcE,gBAAe,EAAE,SAAS,EAAE,MAAM,MAAM,EAAE,CAAC;AACpF,UAAMC,aAAY,iCAAiCH,OAAM,QAAQ;AACjE,UAAM,UAAU,oBAAI,IAAsE;AAC1F,UAAM,QAAoB,CAAC;AAC3B,eAAW,QAAQG,WAAU,SAAS;AACpC,YAAM,WAAqB;AAAA,QACzB,IAAI,KAAK;AAAA,QACT,MAAM,KAAK;AAAA,QACX,UAAU,KAAK;AAAA,QACf,UAAU,KAAK;AAAA,QACf,OAAO,KAAK;AAAA,QACZ,aAAa,KAAK;AAAA,QAClB,UAAU,KAAK;AAAA,QACf,eAAe,KAAK;AAAA,QACpB,UAAU,KAAK;AAAA,QACf,UAAU,KAAK;AAAA,QACf,WAAW,KAAK;AAAA,QAChB,UAAU,CAAC;AAAA,MACb;AACA,cAAQ,IAAI,KAAK,IAAI,EAAE,MAAM,UAAU,SAAS,SAAS,CAAC;AAC1D,UAAI,KAAK,YAAY,QAAQ,IAAI,KAAK,QAAQ,GAAG;AAC/C,cAAM,cAAc,QAAQ,IAAI,KAAK,QAAQ;AAC7C,oBAAY,SAAS,KAAK,QAAQ;AAAA,MACpC,OAAO;AACL,cAAM,KAAK,QAAQ;AAAA,MACrB;AAAA,IACF;AACA,UAAM,cAAc;AAAA,MAClB;AAAA,MACA;AAAA,MACA,SAAS;AAAA,MACT,OAAO;AAAA,MACP,SAAS;AAAA,MACT,cAAc;AAAA,MACd,gBAAgB;AAAA,MAChB;AAAA,MACA;AAAA,IACF,CAAC;AACD,WAAO,aAAa,KAAK,EAAE,OAAO,MAAM,CAAC;AAAA,EAC3C;AAEA,MAAI,MAAM,SAAS,UAAU;AAC3B,WAAO,aAAa,KAAK,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACzD;AAEA,MAAI,iBAAiB;AAEnB,UAAMC,WAAU,MAAM,UAAU,IAAI,KAAK,EAAE,YAAY;AACvD,UAAM,UAAU,MAAM;AAAA,MACpB;AAAA,MACA;AAAA,MACA,EAAE,WAAW,KAAK;AAAA,MAClB,EAAE,SAAS,EAAE,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,EAAE;AAAA,MACjD,EAAE,UAAU,MAAM,gBAAgB,KAAK;AAAA,IACzC;AACA,UAAM,WAAW,oBAAI,IAA4B;AACjD,eAAW,OAAO,SAAS;AACzB,YAAM,eAAe,IAAI;AACzB,YAAM,MAAM,eAAe,SAAS,aAAa,EAAE,IAAI;AACvD,UAAI,CAAC,IAAK;AACV,UAAI,CAAC,SAAS,IAAI,GAAG,EAAG,UAAS,IAAI,KAAK,CAAC,CAAC;AAC5C,eAAS,IAAI,GAAG,EAAG,KAAK,GAAG;AAAA,IAC7B;AAEA,UAAMC,eAAc,oBAAI,IAA2B;AACnD,UAAMC,oBAAmB,oBAAI,IAA2B;AACxD,UAAMC,kBAAiB,oBAAI,IAA2B;AACtD,UAAMC,kCAAiC,oBAAI,IAAqB;AAChE,eAAW,OAAO,SAAS;AACzB,MAAAH,aAAY,IAAI,OAAO,IAAI,EAAE,GAAG,IAAI,QAAQ,IAAI;AAChD,MAAAC,kBAAiB,IAAI,OAAO,IAAI,EAAE,GAAG,IAAI,qBAAqB,OAAO,IAAI,UAAU,YAAY,IAAI,IAAI;AACvG,MAAAC,gBAAe,IAAI,OAAO,IAAI,EAAE,GAAG,IAAI,WAAW,IAAI;AACtD,MAAAC,gCAA+B,IAAI,OAAO,IAAI,EAAE,GAAG,CAAC,CAAC,IAAI,uBAAuB;AAAA,IAClF;AAEA,UAAM,YAAY,MAAM,KAAK,SAAS,KAAK,CAAC;AAC5C,UAAM,UAAU,UAAU,SACtB,MAAM,GAAG,KAAK,QAAQ,EAAE,IAAI,EAAE,KAAK,UAAiC,EAAE,CAAC,IACvE,CAAC;AACL,UAAM,gBAAgB,QAAQ,OAA+B,CAAC,KAAK,WAAW;AAC5E,YAAM,MAAM,SAAS,OAAO,EAAE;AAC9B,YAAM,OAAO,OAAO,OAAO,SAAS,YAAY,OAAO,KAAK,SAAS,IAAI,OAAO,OAAO;AACvF,UAAI,GAAG,IAAI;AACX,aAAO;AAAA,IACT,GAAG,CAAC,CAAC;AAEL,UAAM,cAAc,oBAAI,IAA+B;AACvD,UAAM,eAA4E,CAAC;AACnF,eAAW,CAAC,KAAKR,KAAI,KAAK,SAAS,QAAQ,GAAG;AAC5C,YAAMG,aAAY,iCAAiCH,OAAM,GAAG;AAC5D,kBAAY,IAAI,KAAKG,UAAS;AAC9B,iBAAW,QAAQA,WAAU,SAAS;AACpC,qBAAa,KAAK,EAAE,UAAU,KAAK,KAAK,CAAC;AAAA,MAC3C;AAAA,IACF;AAEA,QAAIM,QAAO;AACX,QAAI,MAAM,WAAW,UAAU;AAC7B,MAAAA,QAAOA,MAAK,OAAO,CAAC,UAAU,MAAM,KAAK,QAAQ;AAAA,IACnD,WAAW,MAAM,WAAW,YAAY;AACtC,MAAAA,QAAOA,MAAK,OAAO,CAAC,UAAU,CAAC,MAAM,KAAK,QAAQ;AAAA,IACpD;AAEA,QAAIL,SAAQ;AACV,MAAAK,QAAOA,MAAK,OAAO,CAAC,EAAE,KAAK,MAAM;AAC/B,cAAM,aAAa,KAAK,aAAa,IAAI,YAAY;AACrD,eAAO,KAAK,KAAK,YAAY,EAAE,SAASL,OAAM,KAAK,UAAU,SAASA,OAAM;AAAA,MAC9E,CAAC;AAAA,IACH;AACA,QAAI,KAAK;AACP,YAAM,QAAQ,IAAI,IAAI,GAAG;AACzB,MAAAK,QAAOA,MAAK,OAAO,CAAC,EAAE,KAAK,MAAM,MAAM,IAAI,KAAK,EAAE,CAAC;AAAA,IACrD;AAEA,IAAAA,MAAK,KAAK,CAAC,GAAG,MAAM;AAClB,YAAM,QAAQ,cAAc,EAAE,QAAQ,KAAK,EAAE;AAC7C,YAAM,QAAQ,cAAc,EAAE,QAAQ,KAAK,EAAE;AAC7C,YAAM,gBAAgB,MAAM,cAAc,KAAK;AAC/C,UAAI,kBAAkB,EAAG,QAAO;AAChC,aAAO,EAAE,KAAK,UAAU,cAAc,EAAE,KAAK,SAAS;AAAA,IACxD,CAAC;AAED,UAAMC,SAAQD,MAAK;AACnB,UAAME,YAAW,MAAM;AACvB,UAAMC,QAAO,MAAM;AACnB,UAAMC,UAASD,QAAO,KAAKD;AAC3B,UAAMG,SAAQL,MAAK,MAAMI,QAAOA,SAAQF,SAAQ;AAChD,UAAMI,aAAsB,CAAC;AAC7B,UAAMC,oBAAkD,CAAC;AACzD,UAAMC,0BAAwD,CAAC;AAC/D,eAAW,SAASH,QAAO;AACzB,YAAM,WAAW,OAAO,MAAM,KAAK,EAAE;AACrC,MAAAC,WAAU,KAAK,QAAQ;AACvB,MAAAC,kBAAiB,QAAQ,IAAI,MAAM;AACnC,MAAAC,wBAAuB,QAAQ,IAAI;AAAA,IACrC;AACA,UAAM,kBAAkB,MAAM,KAAK,IAAI,IAAIF,WAAU,IAAI,CAAC,OAAOC,kBAAiB,EAAE,CAAC,EAAE,OAAO,CAAC,UAA2B,OAAO,UAAU,YAAY,MAAM,SAAS,CAAC,CAAC,CAAC;AACzK,UAAME,WAAUH,WAAU,SACtB,MAAM,sBAAsB;AAAA,MAC1B;AAAA,MACA,UAAU,EAAE,UAAU;AAAA,MACtB,WAAAA;AAAA,MACA,kBAAAC;AAAA,MACA,wBAAAC;AAAA,MACA;AAAA,IACF,CAAC,IACD,CAAC;AACL,UAAMhB,SAAQa,OAAM,IAAI,CAAC,EAAE,UAAU,KAAK,KAAK,MAAM;AACnD,YAAMX,aAAY,YAAY,IAAI,GAAG;AACrC,YAAM,aAAa,KAAK,YAAYA,aAAYA,WAAU,IAAI,IAAI,KAAK,QAAQ,GAAG,QAAQ,OAAO;AACjG,YAAM,YAAY,KAAK,aAAa,KAAK;AACzC,YAAM,WAAW,OAAO,KAAK,EAAE;AAC/B,aAAO;AAAA,QACL,IAAI,KAAK;AAAA,QACT,MAAM,KAAK;AAAA,QACX,MAAME,aAAY,IAAI,QAAQ,KAAK;AAAA,QACnC,WAAWC,kBAAiB,IAAI,QAAQ,KAAK;AAAA,QAC7C,SAASC,gBAAe,IAAI,QAAQ,KAAK;AAAA,QACzC,yBAAyBC,gCAA+B,IAAI,QAAQ,KAAK;AAAA,QACzE,UAAU;AAAA,QACV,YAAY,cAAc,GAAG,KAAK;AAAA,QAClC,UAAU,KAAK;AAAA,QACf;AAAA,QACA,OAAO,KAAK;AAAA,QACZ,QAAQ,KAAK;AAAA,QACb,UAAU,KAAK;AAAA,QACf;AAAA,QACA,aAAa,KAAK;AAAA,QAClB,UAAU,KAAK;AAAA,QACf,eAAe,KAAK;AAAA,QACpB,eAAe,KAAK,SAAS;AAAA,QAC7B,kBAAkB,KAAK,cAAc;AAAA,QACrC,UAAU,KAAK;AAAA,QACf,GAAIU,SAAQ,QAAQ,KAAK,CAAC;AAAA,MAC5B;AAAA,IACF,CAAC;AACD,UAAMC,cAAa,KAAK,IAAI,GAAG,KAAK,KAAKT,SAAQC,SAAQ,CAAC;AAC1D,UAAM,cAAc;AAAA,MAClB;AAAA,MACA;AAAA,MACA,SAAS;AAAA,MACT,OAAAV;AAAA,MACA,SAAS;AAAA,MACT,cAAc;AAAA,MACd,gBAAgB;AAAA,MAChB,UAAU;AAAA,MACV;AAAA,MACA,YAAY,OAAO,IAAI,WAAW,IAAI,cAAc;AAAA,IACtD,CAAC;AACD,WAAO,aAAa,KAAK,EAAE,OAAAA,QAAO,OAAAS,QAAO,MAAAE,OAAM,UAAAD,WAAU,YAAAQ,aAAY,aAAa,CAAC;AAAA,EACrF;AAEA,MAAI,CAAC,UAAU;AACb,WAAO,aAAa,KAAK,EAAE,OAAO,CAAC,GAAG,OAAO,wBAAwB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACzF;AAEA,QAAM,gBAA2C,EAAE,QAAQ,UAAU,WAAW,KAAK;AACrF,QAAM,OAAO,MAAM,GAAG,KAAK,cAAc,eAAe,EAAE,SAAS,EAAE,MAAM,MAAM,EAAE,CAAC;AACpF,QAAM,YAAY,iCAAiC,MAAM,QAAQ;AACjE,QAAM,cAAc,oBAAI,IAA2B;AACnD,QAAM,iBAAiB,oBAAI,IAA2B;AACtD,QAAM,iCAAiC,oBAAI,IAAqB;AAChE,QAAM,mBAAmB,oBAAI,IAA2B;AACxD,aAAW,OAAO,MAAM;AACtB,gBAAY,IAAI,OAAO,IAAI,EAAE,GAAG,IAAI,QAAQ,IAAI;AAChD,mBAAe,IAAI,OAAO,IAAI,EAAE,GAAG,IAAI,WAAW,IAAI;AACtD,mCAA+B,IAAI,OAAO,IAAI,EAAE,GAAG,CAAC,CAAC,IAAI,uBAAuB;AAChF,qBAAiB,IAAI,OAAO,IAAI,EAAE,GAAG,IAAI,qBAAqB,OAAO,IAAI,UAAU,YAAY,IAAI,IAAI;AAAA,EACzG;AAGA,QAAM,UAAU,MAAM,UAAU,IAAI,KAAK,EAAE,YAAY;AACvD,MAAI,OAAO,UAAU;AACrB,MAAI,WAAW,UAAU;AACvB,WAAO,KAAK,OAAO,CAAC,SAAS,KAAK,QAAQ;AAAA,EAC5C,WAAW,WAAW,YAAY;AAChC,WAAO,KAAK,OAAO,CAAC,SAAS,CAAC,KAAK,QAAQ;AAAA,EAC7C;AAEA,MAAI,QAAQ;AACV,WAAO,KAAK,OAAO,CAAC,SAAS;AAC3B,YAAM,aAAa,KAAK,aAAa,IAAI,YAAY;AACrD,aAAO,KAAK,KAAK,YAAY,EAAE,SAAS,MAAM,KAAK,UAAU,SAAS,MAAM;AAAA,IAC9E,CAAC;AAAA,EACH;AACA,MAAI,KAAK;AACP,UAAM,QAAQ,IAAI,IAAI,GAAG;AACzB,WAAO,KAAK,OAAO,CAAC,SAAS,MAAM,IAAI,KAAK,EAAE,CAAC;AAAA,EACjD;AAEA,QAAM,QAAQ,KAAK;AACnB,QAAM,WAAW,MAAM;AACvB,QAAM,OAAO,MAAM;AACnB,QAAM,SAAS,OAAO,KAAK;AAC3B,QAAM,QAAQ,KAAK,MAAM,OAAO,QAAQ,QAAQ;AAChD,QAAM,YAAsB,CAAC;AAC7B,QAAM,mBAAkD,CAAC;AACzD,QAAM,yBAAwD,CAAC;AAC/D,aAAW,QAAQ,OAAO;AACxB,UAAM,WAAW,OAAO,KAAK,EAAE;AAC/B,cAAU,KAAK,QAAQ;AACvB,qBAAiB,QAAQ,IAAI,KAAK,WAAW,OAAO,KAAK,QAAQ,IAAI;AACrE,2BAAuB,QAAQ,IAAI;AAAA,EACrC;AACA,QAAM,UAAU,UAAU,SACtB,MAAM,sBAAsB;AAAA,IAC1B;AAAA,IACA,UAAU,EAAE,UAAU;AAAA,IACtB;AAAA,IACA;AAAA,IACA;AAAA,IACA,iBAAiB,WAAW,CAAC,QAAQ,IAAI,CAAC;AAAA,EAC5C,CAAC,IACD,CAAC;AACL,MAAI,aAA4B;AAChC,MAAI,gBAAgB,UAAU;AAC5B,UAAM,SAAS,MAAM,GAAG,QAAQ,QAAQ,EAAE,IAAI,SAAS,CAAC;AACxD,QAAI,QAAQ;AACV,YAAM,UAAU,OAAO,OAAO,SAAS,YAAY,OAAO,KAAK,SAAS,IAAI,OAAO,OAAO,SAAS,OAAO,EAAE;AAC5G,mBAAa;AAAA,IACf;AAAA,EACF;AACA,QAAM,QAAQ,MAAM,IAAI,CAAC,SAAS;AAChC,UAAM,aAAa,KAAK,WAAW,UAAU,IAAI,IAAI,KAAK,QAAQ,GAAG,QAAQ,OAAO;AACpF,UAAM,YAAY,KAAK,aAAa,KAAK;AACzC,UAAM,WAAW,OAAO,KAAK,EAAE;AAC/B,WAAO;AAAA,MACL,IAAI,KAAK;AAAA,MACT,MAAM,KAAK;AAAA,MACX,MAAM,YAAY,IAAI,QAAQ,KAAK;AAAA,MACnC,SAAS,eAAe,IAAI,QAAQ,KAAK;AAAA,MACzC,yBAAyB,+BAA+B,IAAI,QAAQ,KAAK;AAAA,MACzE,WAAW,iBAAiB,IAAI,QAAQ,KAAK;AAAA,MAC7C,UAAU,KAAK;AAAA,MACf;AAAA,MACA,UAAU,KAAK;AAAA,MACf;AAAA,MACA,OAAO,KAAK;AAAA,MACZ,QAAQ,KAAK;AAAA,MACb,UAAU,KAAK;AAAA,MACf;AAAA,MACA,aAAa,KAAK;AAAA,MAClB,UAAU,KAAK;AAAA,MACf,eAAe,KAAK;AAAA,MACpB,eAAe,KAAK,SAAS;AAAA,MAC7B,kBAAkB,KAAK,cAAc;AAAA,MACrC,UAAU,KAAK;AAAA,MACf,GAAI,QAAQ,QAAQ,KAAK,CAAC;AAAA,IAC5B;AAAA,EACF,CAAC;AACD,QAAM,aAAa,KAAK,IAAI,GAAG,KAAK,KAAK,QAAQ,QAAQ,CAAC;AAC1D,QAAM,cAAc;AAAA,IAClB;AAAA,IACA;AAAA,IACA,SAAS;AAAA,IACT;AAAA,IACA,SAAS;AAAA,IACT,cAAc;AAAA,IACd,gBAAgB;AAAA,IAChB;AAAA,IACA;AAAA,IACA,YAAY,OAAO,IAAI,WAAW,IAAI,cAAc;AAAA,EACtD,CAAC;AACD,SAAO,aAAa,KAAK,EAAE,OAAO,OAAO,MAAM,UAAU,YAAY,aAAa,CAAC;AACrF;AAEO,MAAM,OAAO,KAAK;AAClB,MAAM,MAAM,KAAK;AACjB,MAAM,SAAS,KAAK;AAE3B,MAAM,mCAAmC,EAAE,OAAO;AAAA,EAChD,IAAI,EAAE,OAAO,EAAE,KAAK;AACtB,CAAC;AAED,MAAM,kCAAkC,EAAE,OAAO;AAAA,EAC/C,IAAI,EAAE,OAAO,EAAE,KAAK;AACtB,CAAC;AAED,MAAM,sBAAwC;AAAA,EAC5C,SAAS;AAAA,EACT,aAAa;AAAA,EACb,MAAM,CAAC,YAAY;AAAA,EACnB,OAAO;AAAA,EACP,WAAW;AAAA,IACT,EAAE,QAAQ,KAAK,aAAa,6CAA6C,QAAQ,+BAA+B;AAAA,EAClH;AAAA,EACA,QAAQ;AAAA,IACN,EAAE,QAAQ,KAAK,aAAa,iCAAiC,QAAQ,qBAAqB;AAAA,IAC1F,EAAE,QAAQ,KAAK,aAAa,2BAA2B,QAAQ,qBAAqB;AAAA,EACtF;AACF;AAEA,MAAM,uBAAyC;AAAA,EAC7C,SAAS;AAAA,EACT,aAAa;AAAA,EACb,MAAM,CAAC,YAAY;AAAA,EACnB,aAAa;AAAA,IACX,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,aAAa;AAAA,EACf;AAAA,EACA,WAAW;AAAA,IACT,EAAE,QAAQ,KAAK,aAAa,yBAAyB,QAAQ,iCAAiC;AAAA,EAChG;AAAA,EACA,QAAQ;AAAA,IACN,EAAE,QAAQ,KAAK,aAAa,qBAAqB,QAAQ,qBAAqB;AAAA,IAC9E,EAAE,QAAQ,KAAK,aAAa,2BAA2B,QAAQ,qBAAqB;AAAA,IACpF,EAAE,QAAQ,KAAK,aAAa,kDAAkD,QAAQ,qBAAqB;AAAA,EAC7G;AACF;AAEA,MAAM,sBAAwC;AAAA,EAC5C,SAAS;AAAA,EACT,aAAa;AAAA,EACb,MAAM,CAAC,YAAY;AAAA,EACnB,aAAa;AAAA,IACX,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,aAAa;AAAA,EACf;AAAA,EACA,WAAW;AAAA,IACT,EAAE,QAAQ,KAAK,aAAa,yBAAyB,QAAQ,kBAAkB;AAAA,EACjF;AAAA,EACA,QAAQ;AAAA,IACN,EAAE,QAAQ,KAAK,aAAa,qBAAqB,QAAQ,qBAAqB;AAAA,IAC9E,EAAE,QAAQ,KAAK,aAAa,2BAA2B,QAAQ,qBAAqB;AAAA,IACpF,EAAE,QAAQ,KAAK,aAAa,kDAAkD,QAAQ,qBAAqB;AAAA,EAC7G;AACF;AAEA,MAAM,yBAA2C;AAAA,EAC/C,SAAS;AAAA,EACT,aAAa;AAAA,EACb,MAAM,CAAC,YAAY;AAAA,EACnB,aAAa;AAAA,IACX,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,aAAa;AAAA,EACf;AAAA,EACA,WAAW;AAAA,IACT,EAAE,QAAQ,KAAK,aAAa,yBAAyB,QAAQ,kBAAkB;AAAA,EACjF;AAAA,EACA,QAAQ;AAAA,IACN,EAAE,QAAQ,KAAK,aAAa,qBAAqB,QAAQ,qBAAqB;AAAA,IAC9E,EAAE,QAAQ,KAAK,aAAa,2BAA2B,QAAQ,qBAAqB;AAAA,IACpF,EAAE,QAAQ,KAAK,aAAa,kDAAkD,QAAQ,qBAAqB;AAAA,EAC7G;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,IACL,MAAM;AAAA,IACN,KAAK;AAAA,IACL,QAAQ;AAAA,EACV;AACF;",
   "names": ["orgs", "items", "orgListFilter", "hierarchy", "search", "slugByOrgId", "updatedAtByOrgId", "logoUrlByOrgId", "logoPreserveAspectRatioByOrgId", "rows", "total", "pageSize", "page", "start", "paged", "recordIds", "tenantIdByRecord", "organizationIdByRecord", "cfByOrg", "totalPages"]
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@open-mercato/core",
-  "version": "0.10.1-develop.7706.1.9cb1f164c4",
+  "version": "0.10.1-develop.7708.1.5a5c248637",
   "license": "MIT",
   "type": "module",
   "main": "./dist/index.js",
@@ -265,16 +265,16 @@
     "zod": "^4.4.3"
   },
   "peerDependencies": {
-    "@open-mercato/ai-assistant": "0.10.1-develop.7706.1.9cb1f164c4",
-    "@open-mercato/shared": "0.10.1-develop.7706.1.9cb1f164c4",
-    "@open-mercato/ui": "0.10.1-develop.7706.1.9cb1f164c4",
+    "@open-mercato/ai-assistant": "0.10.1-develop.7708.1.5a5c248637",
+    "@open-mercato/shared": "0.10.1-develop.7708.1.5a5c248637",
+    "@open-mercato/ui": "0.10.1-develop.7708.1.5a5c248637",
     "react": "^19.0.0",
     "react-dom": "^19.0.0"
   },
   "devDependencies": {
-    "@open-mercato/ai-assistant": "0.10.1-develop.7706.1.9cb1f164c4",
-    "@open-mercato/shared": "0.10.1-develop.7706.1.9cb1f164c4",
-    "@open-mercato/ui": "0.10.1-develop.7706.1.9cb1f164c4",
+    "@open-mercato/ai-assistant": "0.10.1-develop.7708.1.5a5c248637",
+    "@open-mercato/shared": "0.10.1-develop.7708.1.5a5c248637",
+    "@open-mercato/ui": "0.10.1-develop.7708.1.5a5c248637",
     "@testing-library/dom": "^10.4.1",
     "@testing-library/jest-dom": "^7.0.1",
     "@testing-library/react": "^16.3.3",

package/src/modules/customers/api/interactions/conflicts/route.ts

@@ -12,6 +12,8 @@ import { findWithDecryption } from '@open-mercato/shared/lib/encryption/find'
 import type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'
 import { CustomerInteraction } from '../../../data/entities'
 import { TERMINAL_INTERACTION_STATUS_LIST } from '../../../lib/interactionStatus'
+import { applyEmailVisibilityFilter } from '../../../lib/visibilityFilter'
+import { listGrantsForViewer, listSharedChannelIds } from '../../../lib/conversationShares'
 import { createLogger } from '@open-mercato/shared/lib/logger'
 
 const logger = createLogger('customers')
@@ -96,9 +98,15 @@ export async function GET(req: Request) {
       return NextResponse.json({ ok: true, result: { hasConflicts: false, conflicts: [] } })
     }
 
-    const checkUserId = query.userId ?? auth.userId
+    const viewerUserId = auth.isApiKey ? null : (auth.sub ?? null)
+    const checkUserId = query.userId ?? (auth.isApiKey ? auth.userId : viewerUserId)
     const em = (container.resolve('em') as EntityManager).fork()
     const kysely = em.getKysely<any>()
+    const emailShareScope = { tenantId: auth.tenantId, organizationId: rbacOrganizationId }
+    const [sharedConversations, sharedChannelIds] = await Promise.all([
+      listGrantsForViewer(em, emailShareScope, viewerUserId),
+      listSharedChannelIds(em, emailShareScope, viewerUserId),
+    ])
 
     let baseQuery = (kysely as any)
       .selectFrom('customer_interactions')
@@ -114,6 +122,13 @@ export async function GET(req: Request) {
       baseQuery = baseQuery.where('organization_id', 'in', organizationIds)
     }
 
+    baseQuery = applyEmailVisibilityFilter(baseQuery, {
+      currentUserId: viewerUserId,
+      userFeatures: undefined,
+      sharedConversations,
+      sharedChannelIds,
+    })
+
     if (checkUserId) {
       baseQuery = baseQuery.where((eb: any) =>
         eb.or([

package/src/modules/directory/api/organizations/route.ts

@@ -31,6 +31,8 @@ import {
 import { resolveIsSuperAdmin, enforceTenantSelection } from '@open-mercato/core/modules/auth/lib/tenantAccess'
 import { isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'
 import { findWithDecryption, findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'
+import { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'
+import { parseCommaSeparatedList } from '@open-mercato/shared/lib/string'
 
 type CrudInput = Record<string, unknown>
 const rawBodySchema = z.object({}).passthrough()
@@ -50,20 +52,26 @@ type TreeNode = {
   children: TreeNode[]
 }
 
+const organizationIdSchema = z.guid()
+
 const viewSchema = z.object({
   page: z.coerce.number().min(1).default(1),
   pageSize: z.coerce.number().min(1).max(100).default(50),
   search: z.string().optional(),
   view: z.enum(['options', 'manage', 'tree']).default('options'),
-  ids: z.string().optional(),
+  ids: z
+    .string()
+    .refine((raw) => parseCommaSeparatedList(raw).every((id) => organizationIdSchema.safeParse(id).success), {
+      message: 'ids must be a comma-separated list of UUIDs',
+    })
+    .optional(),
   tenantId: z.string().uuid().optional(),
   includeInactive: z.enum(['true', 'false']).optional(),
   status: z.enum(['all', 'active', 'inactive']).optional(),
 })
 
 function parseIds(raw: string | null): string[] | null {
-  if (!raw) return null
-  const ids = raw.split(',').map((s) => s.trim()).filter(Boolean)
+  const ids = parseCommaSeparatedList(raw)
   return ids.length ? Array.from(new Set(ids)) : null
 }
 
@@ -139,7 +147,13 @@ export async function GET(req: Request) {
     includeInactive: url.searchParams.get('includeInactive') ?? undefined,
     status: url.searchParams.get('status') ?? undefined,
   })
-  if (!parsed.success) return NextResponse.json({ items: [] }, { status: 400 })
+  if (!parsed.success) {
+    const { translate } = await resolveTranslations()
+    return NextResponse.json(
+      { items: [], error: translate('directory.organizations.errors.invalidQuery', 'Invalid query') },
+      { status: 400 },
+    )
+  }
 
   const query = parsed.data
   const ids = parseIds(query.ids ?? null)

package/src/modules/directory/i18n/de.json

@@ -36,6 +36,7 @@
   "directory.nav.tenants.create": "Mandanten erstellen",
   "directory.organizations.common.none": "—",
   "directory.organizations.errors.deleteFailed": "Organisation konnte nicht gelöscht werden",
+  "directory.organizations.errors.invalidQuery": "Ungültige Abfrage",
   "directory.organizations.errors.orgIdRequired": "Organisationskennung ist erforderlich",
   "directory.organizations.errors.tenantRequired": "Die Mandantenauswahl ist für Superadministratoren erforderlich",
   "directory.organizations.flash.created": "Organisation erstellt",

package/src/modules/directory/i18n/en.json

@@ -36,6 +36,7 @@
   "directory.nav.tenants.create": "Create Tenant",
   "directory.organizations.common.none": "—",
   "directory.organizations.errors.deleteFailed": "Failed to delete organization",
+  "directory.organizations.errors.invalidQuery": "Invalid query",
   "directory.organizations.errors.orgIdRequired": "Organization identifier is required",
   "directory.organizations.errors.tenantRequired": "Tenant selection is required for super administrators",
   "directory.organizations.flash.created": "Organization created",

package/src/modules/directory/i18n/es.json

@@ -36,6 +36,7 @@
   "directory.nav.tenants.create": "Crear inquilino",
   "directory.organizations.common.none": "—",
   "directory.organizations.errors.deleteFailed": "No se pudo eliminar la organización",
+  "directory.organizations.errors.invalidQuery": "Consulta no válida",
   "directory.organizations.errors.orgIdRequired": "Se requiere el identificador de la organización",
   "directory.organizations.errors.tenantRequired": "La selección de inquilino es obligatoria para los superadministradores",
   "directory.organizations.flash.created": "Organización creada",

package/src/modules/directory/i18n/ko.json

@@ -36,6 +36,7 @@
   "directory.nav.tenants.create": "테넌트 생성",
   "directory.organizations.common.none": "—",
   "directory.organizations.errors.deleteFailed": "조직 삭제에 실패했습니다",
+  "directory.organizations.errors.invalidQuery": "잘못된 쿼리입니다",
   "directory.organizations.errors.orgIdRequired": "조직 식별자는 필수입니다",
   "directory.organizations.errors.tenantRequired": "슈퍼 관리자는 테넌트 선택이 필요합니다",
   "directory.organizations.flash.created": "조직이 생성되었습니다",

package/src/modules/directory/i18n/pl.json

@@ -36,6 +36,7 @@
   "directory.nav.tenants.create": "Utwórz najemcę",
   "directory.organizations.common.none": "—",
   "directory.organizations.errors.deleteFailed": "Nie udało się usunąć organizacji",
+  "directory.organizations.errors.invalidQuery": "Nieprawidłowe zapytanie",
   "directory.organizations.errors.orgIdRequired": "Identyfikator organizacji jest wymagany",
   "directory.organizations.errors.tenantRequired": "Wybór najemcy jest wymagany dla superadministratorów",
   "directory.organizations.flash.created": "Organizacja utworzona",