@open-mercato/core 0.4.2-canary-f075c3eb92 → 0.4.2-canary-8a04af8836

package/dist/modules/configs/lib/upgrade-actions.js

@@ -1,102 +1,98 @@
-import { runWithCacheTenant } from "@open-mercato/cache";
-import { Role, RoleAcl } from "@open-mercato/core/modules/auth/data/entities";
-import { reindexModules } from "@open-mercato/core/modules/configs/lib/reindex-helpers";
-import { collectCrudCacheStats, purgeCrudCacheSegment } from "@open-mercato/shared/lib/crud/cache-stats";
-import { isCrudCacheEnabled, resolveCrudCache } from "@open-mercato/shared/lib/crud/cache";
 import * as semver from "semver";
-import { EncryptionMap } from "@open-mercato/core/modules/entities/data/entities";
-import { DEFAULT_ENCRYPTION_MAPS } from "@open-mercato/core/modules/entities/lib/encryptionDefaults";
-function resolveVectorService(container) {
-  try {
-    return container.resolve("vectorIndexService");
-  } catch {
-    return null;
+import { getModules } from "@open-mercato/shared/lib/modules/registry";
+import { Role, RoleAcl } from "@open-mercato/core/modules/auth/data/entities";
+import { normalizeTenantId } from "@open-mercato/core/modules/auth/lib/tenantAccess";
+function compareVersions(a, b) {
+  const cleanA = semver.valid(semver.coerce(a));
+  const cleanB = semver.valid(semver.coerce(b));
+  if (!cleanA) {
+    throw new Error(`Invalid version string: "${a}". Expected a valid semver format (e.g., "1.2.3").`);
+  }
+  if (!cleanB) {
+    throw new Error(`Invalid version string: "${b}". Expected a valid semver format (e.g., "1.2.3").`);
   }
+  return semver.compare(cleanA, cleanB);
 }
-function resolveEncryptionService(container) {
-  try {
-    return container.resolve("tenantEncryptionService");
-  } catch {
-    return null;
+function collectRoleFeatures(modules, moduleIds) {
+  const result = {
+    superadmin: [],
+    admin: [],
+    employee: []
+  };
+  const targetIds = new Set(moduleIds);
+  for (const mod of modules) {
+    if (!targetIds.has(mod.id)) continue;
+    const roleFeatures = mod.setup?.defaultRoleFeatures;
+    if (roleFeatures?.superadmin) result.superadmin.push(...roleFeatures.superadmin);
+    if (roleFeatures?.admin) result.admin.push(...roleFeatures.admin);
+    if (roleFeatures?.employee) result.employee.push(...roleFeatures.employee);
   }
+  result.superadmin = Array.from(new Set(result.superadmin));
+  result.admin = Array.from(new Set(result.admin));
+  result.employee = Array.from(new Set(result.employee));
+  return result;
 }
-async function ensureVectorSearchEncryptionMap(em, tenantId, organizationId) {
-  const spec = DEFAULT_ENCRYPTION_MAPS.find((entry) => entry.entityId === "vector:vector_search");
-  const required = spec?.fields ?? [];
-  if (!required.length) return false;
-  const repo = em.getRepository(EncryptionMap);
-  const existing = await repo.findOne({
-    entityId: "vector:vector_search",
-    tenantId,
-    organizationId,
-    deletedAt: null
-  });
+async function findRoleByName(em, name, tenantId) {
+  const normalizedTenant = normalizeTenantId(tenantId ?? null) ?? null;
+  let role = await em.findOne(Role, { name, tenantId: normalizedTenant });
+  if (!role && normalizedTenant !== null) {
+    role = await em.findOne(Role, { name, tenantId: null });
+  }
+  return role;
+}
+async function ensureRoleAclFor(em, role, tenantId, features, options = {}) {
+  const existing = await em.findOne(RoleAcl, { role, tenantId });
   if (!existing) {
-    em.persist(
-      em.create(EncryptionMap, {
-        entityId: "vector:vector_search",
-        tenantId,
-        organizationId,
-        fieldsJson: required,
-        isActive: true,
-        createdAt: /* @__PURE__ */ new Date(),
-        updatedAt: /* @__PURE__ */ new Date()
-      })
-    );
-    await em.flush();
-    return true;
+    const acl = em.create(RoleAcl, {
+      role,
+      tenantId,
+      featuresJson: features,
+      isSuperAdmin: !!options.isSuperAdmin,
+      createdAt: /* @__PURE__ */ new Date()
+    });
+    await em.persistAndFlush(acl);
+    return;
   }
-  const existingFields = Array.isArray(existing.fieldsJson) ? existing.fieldsJson : [];
-  const byField = /* @__PURE__ */ new Map();
-  for (const item of existingFields) {
-    if (!item?.field) continue;
-    byField.set(item.field, item);
+  const currentFeatures = Array.isArray(existing.featuresJson) ? existing.featuresJson : [];
+  const merged = Array.from(/* @__PURE__ */ new Set([...currentFeatures, ...features]));
+  const changed = merged.length !== currentFeatures.length || merged.some((value, index) => value !== currentFeatures[index]);
+  if (changed) existing.featuresJson = merged;
+  if (options.isSuperAdmin && !existing.isSuperAdmin) {
+    existing.isSuperAdmin = true;
   }
-  for (const req of required) {
-    if (!req?.field) continue;
-    if (byField.has(req.field)) continue;
-    byField.set(req.field, req);
+  if (changed || options.isSuperAdmin) {
+    await em.persistAndFlush(existing);
   }
-  const merged = Array.from(byField.values());
-  const changed = merged.length !== existingFields.length;
-  if (!changed && existing.isActive) return false;
-  existing.fieldsJson = merged;
-  existing.isActive = true;
-  existing.updatedAt = /* @__PURE__ */ new Date();
-  await em.flush();
-  return true;
 }
-function compareVersions(a, b) {
-  const cleanA = semver.valid(semver.coerce(a));
-  const cleanB = semver.valid(semver.coerce(b));
-  if (!cleanA) {
-    throw new Error(`Invalid version string: "${a}". Expected a valid semver format (e.g., "1.2.3").`);
+async function ensureRoleAclsForModules(em, tenantId, moduleIds) {
+  const modules = getModules();
+  const roleFeatures = collectRoleFeatures(modules, moduleIds);
+  if (!roleFeatures.superadmin.length && !roleFeatures.admin.length && !roleFeatures.employee.length) {
+    return;
   }
-  if (!cleanB) {
-    throw new Error(`Invalid version string: "${b}". Expected a valid semver format (e.g., "1.2.3").`);
+  const normalizedTenant = normalizeTenantId(tenantId) ?? null;
+  const [superadminRole, adminRole, employeeRole] = await Promise.all([
+    findRoleByName(em, "superadmin", normalizedTenant),
+    findRoleByName(em, "admin", normalizedTenant),
+    findRoleByName(em, "employee", normalizedTenant)
+  ]);
+  if (superadminRole && roleFeatures.superadmin.length) {
+    await ensureRoleAclFor(em, superadminRole, tenantId, roleFeatures.superadmin, { isSuperAdmin: true });
+  }
+  if (adminRole && roleFeatures.admin.length) {
+    await ensureRoleAclFor(em, adminRole, tenantId, roleFeatures.admin);
+  }
+  if (employeeRole && roleFeatures.employee.length) {
+    await ensureRoleAclFor(em, employeeRole, tenantId, roleFeatures.employee);
   }
-  return semver.compare(cleanA, cleanB);
 }
-async function purgeCatalogCrudCache(container, tenantId) {
-  if (!isCrudCacheEnabled()) return;
-  const cache = resolveCrudCache(container);
-  if (!cache) return;
-  await runWithCacheTenant(tenantId ?? null, async () => {
-    const stats = await collectCrudCacheStats(cache);
-    const catalogSegments = stats.segments.filter((segment) => segment.resource?.startsWith("catalog."));
-    if (!catalogSegments.length) return;
-    for (const segment of catalogSegments) {
-      try {
-        await purgeCrudCacheSegment(cache, segment.segment);
-      } catch (error) {
-        console.warn("[upgrade-actions] failed to purge catalog cache segment", {
-          tenantId,
-          segment: segment.segment,
-          error
-        });
-      }
-    }
-  });
+async function safeImport(label, loader) {
+  try {
+    return await loader();
+  } catch (error) {
+    console.warn(`[upgrade-actions] Skipping ${label} because module import failed.`, error);
+    return null;
+  }
 }
 const upgradeActions = [
   {
@@ -106,60 +102,17 @@ const upgradeActions = [
     ctaKey: "upgrades.v034.cta",
     successKey: "upgrades.v034.success",
     loadingKey: "upgrades.v034.loading",
-    async run({ container, em, tenantId, organizationId }) {
-      let installExampleCatalogData;
-      try {
-        const catalogSeeds = await import("@open-mercato/core/modules/catalog/lib/seeds");
-        installExampleCatalogData = catalogSeeds.installExampleCatalogData;
-      } catch {
-        console.warn("[upgrade-actions] catalog module not available, skipping catalog example data");
-        return;
-      }
-      await installExampleCatalogData(container, { tenantId, organizationId }, em);
-      const vectorService = resolveVectorService(container);
-      await reindexModules(em, ["catalog"], { tenantId, organizationId, vectorService });
-    }
-  },
-  {
-    id: "configs.upgrades.auth.admin_business_rules_acl",
-    version: "0.3.5",
-    messageKey: "upgrades.v035.message",
-    ctaKey: "upgrades.v035.cta",
-    successKey: "upgrades.v035.success",
-    loadingKey: "upgrades.v035.loading",
-    async run({ container, em, tenantId }) {
-      const normalizedTenantId = tenantId.trim();
-      await em.transactional(async (tem) => {
-        const adminRole = await tem.findOne(Role, { name: "admin", tenantId: normalizedTenantId, deletedAt: null });
-        if (!adminRole) return;
-        const roleAcls = await tem.find(RoleAcl, { role: adminRole, tenantId: normalizedTenantId, deletedAt: null });
-        let touched = false;
-        if (!roleAcls.length) {
-          tem.persist(
-            tem.create(RoleAcl, {
-              role: adminRole,
-              tenantId: normalizedTenantId,
-              featuresJson: ["business_rules.*"],
-              isSuperAdmin: false,
-              createdAt: /* @__PURE__ */ new Date(),
-              updatedAt: /* @__PURE__ */ new Date()
-            })
-          );
-          touched = true;
-        }
-        for (const acl of roleAcls) {
-          const features = Array.isArray(acl.featuresJson) ? [...acl.featuresJson] : [];
-          if (features.includes("business_rules.*")) continue;
-          acl.featuresJson = [...features, "business_rules.*"];
-          acl.updatedAt = /* @__PURE__ */ new Date();
-          touched = true;
-        }
-        if (touched) {
-          await tem.flush();
-        }
-      });
-      const rbac = container.resolve("rbacService");
-      await rbac.invalidateTenantCache(normalizedTenantId);
+    async run(ctx) {
+      const catalogSeeds = await safeImport(
+        "catalog examples",
+        () => import("@open-mercato/core/modules/catalog/lib/seeds")
+      );
+      if (!catalogSeeds?.installExampleCatalogData) return;
+      await catalogSeeds.installExampleCatalogData(
+        ctx.container,
+        { tenantId: ctx.tenantId, organizationId: ctx.organizationId },
+        ctx.em
+      );
     }
   },
   {
@@ -169,47 +122,16 @@ const upgradeActions = [
     ctaKey: "upgrades.v036.cta",
     successKey: "upgrades.v036.success",
     loadingKey: "upgrades.v036.loading",
-    async run({ container, em, tenantId, organizationId }) {
-      let seedSalesExamples;
-      try {
-        const salesSeeds = await import("@open-mercato/core/modules/sales/seed/examples");
-        seedSalesExamples = salesSeeds.seedSalesExamples;
-      } catch {
-        console.warn("[upgrade-actions] sales module not available, skipping sales example data");
-        return;
-      }
-      await em.transactional(async (tem) => {
-        await seedSalesExamples(tem, container, { tenantId, organizationId });
-      });
-      const vectorService = resolveVectorService(container);
-      await reindexModules(em, ["sales", "catalog"], { tenantId, organizationId, vectorService });
-      await purgeCatalogCrudCache(container, tenantId);
-    }
-  },
-  {
-    id: "configs.upgrades.vector.encryption_vector_search",
-    version: "0.3.6",
-    messageKey: "upgrades.v036_vector_encryption.message",
-    ctaKey: "upgrades.v036_vector_encryption.cta",
-    successKey: "upgrades.v036_vector_encryption.success",
-    loadingKey: "upgrades.v036_vector_encryption.loading",
-    async run({ container, em, tenantId, organizationId }) {
-      const normalizedTenantId = tenantId.trim();
-      const normalizedOrgId = organizationId ?? null;
-      const encryptionService = resolveEncryptionService(container);
-      if (!encryptionService?.isEnabled?.()) {
-        return;
-      }
-      const updated = await em.transactional(async (tem) => {
-        return ensureVectorSearchEncryptionMap(tem, normalizedTenantId, normalizedOrgId);
+    async run(ctx) {
+      const salesSeeds = await safeImport(
+        "sales examples",
+        () => import("@open-mercato/core/modules/sales/seed/examples")
+      );
+      if (!salesSeeds?.seedSalesExamples) return;
+      await salesSeeds.seedSalesExamples(ctx.em, ctx.container, {
+        tenantId: ctx.tenantId,
+        organizationId: ctx.organizationId
       });
-      if (updated) {
-        await encryptionService.invalidateMap("vector:vector_search", normalizedTenantId, normalizedOrgId);
-      }
-      const vectorService = resolveVectorService(container);
-      if (vectorService) {
-        await vectorService.reindexAll({ tenantId: normalizedTenantId, organizationId: normalizedOrgId, purgeFirst: false });
-      }
     }
   },
   {
@@ -219,60 +141,23 @@ const upgradeActions = [
     ctaKey: "upgrades.v0313.cta",
     successKey: "upgrades.v0313.success",
     loadingKey: "upgrades.v0313.loading",
-    async run({ container, em, tenantId, organizationId }) {
-      const normalizedTenantId = tenantId.trim();
-      const scope = { tenantId, organizationId };
-      let seedExampleCurrencies;
-      try {
-        const currenciesSeeds = await import("@open-mercato/core/modules/currencies/lib/seeds");
-        seedExampleCurrencies = currenciesSeeds.seedExampleCurrencies;
-      } catch {
-        console.warn("[upgrade-actions] currencies module not available, skipping currency seeding");
+    async run(ctx) {
+      const currenciesSeeds = await safeImport(
+        "currencies examples",
+        () => import("@open-mercato/core/modules/currencies/lib/seeds")
+      );
+      const workflowsSeeds = await safeImport(
+        "workflows examples",
+        () => import("@open-mercato/core/modules/workflows/lib/seeds")
+      );
+      const scope = { tenantId: ctx.tenantId, organizationId: ctx.organizationId };
+      if (currenciesSeeds?.seedExampleCurrencies) {
+        await currenciesSeeds.seedExampleCurrencies(ctx.em, scope);
       }
-      let seedExampleWorkflows;
-      try {
-        const workflowsSeeds = await import("@open-mercato/core/modules/workflows/lib/seeds");
-        seedExampleWorkflows = workflowsSeeds.seedExampleWorkflows;
-      } catch {
-        console.warn("[upgrade-actions] workflows module not available, skipping workflow seeding");
+      if (workflowsSeeds?.seedExampleWorkflows) {
+        await workflowsSeeds.seedExampleWorkflows(ctx.em, scope);
       }
-      await em.transactional(async (tem) => {
-        if (seedExampleCurrencies) await seedExampleCurrencies(tem, scope);
-        if (seedExampleWorkflows) await seedExampleWorkflows(tem, scope);
-        const adminRole = await tem.findOne(Role, { name: "admin", tenantId: normalizedTenantId, deletedAt: null });
-        if (!adminRole) return;
-        const roleAcls = await tem.find(RoleAcl, { role: adminRole, tenantId: normalizedTenantId, deletedAt: null });
-        let touched = false;
-        if (!roleAcls.length) {
-          tem.persist(
-            tem.create(RoleAcl, {
-              role: adminRole,
-              tenantId: normalizedTenantId,
-              featuresJson: ["search.*", "feature_toggles.*", "currencies.*"],
-              isSuperAdmin: false,
-              createdAt: /* @__PURE__ */ new Date(),
-              updatedAt: /* @__PURE__ */ new Date()
-            })
-          );
-          touched = true;
-        }
-        for (const acl of roleAcls) {
-          const features = Array.isArray(acl.featuresJson) ? [...acl.featuresJson] : [];
-          const nextFeatures = new Set(features);
-          nextFeatures.add("search.*");
-          nextFeatures.add("feature_toggles.*");
-          nextFeatures.add("currencies.*");
-          if (nextFeatures.size === features.length) continue;
-          acl.featuresJson = Array.from(nextFeatures);
-          acl.updatedAt = /* @__PURE__ */ new Date();
-          touched = true;
-        }
-        if (touched) {
-          await tem.flush();
-        }
-      });
-      const rbac = container.resolve("rbacService");
-      await rbac.invalidateTenantCache(normalizedTenantId);
+      await ensureRoleAclsForModules(ctx.em, ctx.tenantId, ["currencies", "workflows"]);
     }
   },
   {
@@ -282,83 +167,30 @@ const upgradeActions = [
     ctaKey: "upgrades.v041.cta",
     successKey: "upgrades.v041.success",
     loadingKey: "upgrades.v041.loading",
-    async run({ container, em, tenantId, organizationId }) {
-      const normalizedTenantId = tenantId.trim();
-      const scope = { tenantId, organizationId };
-      let seedPlannerAvailabilityRuleSetDefaults;
-      let seedPlannerUnavailabilityReasons;
-      try {
-        const plannerSeeds = await import("@open-mercato/core/modules/planner/lib/seeds");
-        seedPlannerAvailabilityRuleSetDefaults = plannerSeeds.seedPlannerAvailabilityRuleSetDefaults;
-        seedPlannerUnavailabilityReasons = plannerSeeds.seedPlannerUnavailabilityReasons;
-      } catch {
-        console.warn("[upgrade-actions] planner module not available, skipping planner seeding");
+    async run(ctx) {
+      const plannerSeeds = await safeImport(
+        "planner examples",
+        () => import("@open-mercato/core/modules/planner/lib/seeds")
+      );
+      const staffSeeds = await safeImport(
+        "staff examples",
+        () => import("@open-mercato/core/modules/staff/lib/seeds")
+      );
+      const resourcesSeeds = await safeImport(
+        "resources examples",
+        () => import("@open-mercato/core/modules/resources/lib/seeds")
+      );
+      const scope = { tenantId: ctx.tenantId, organizationId: ctx.organizationId };
+      if (plannerSeeds?.seedPlannerAvailabilityRuleSetDefaults) {
+        await plannerSeeds.seedPlannerAvailabilityRuleSetDefaults(ctx.em, scope);
       }
-      let seedStaffTeamExamples;
-      try {
-        const staffSeeds = await import("@open-mercato/core/modules/staff/lib/seeds");
-        seedStaffTeamExamples = staffSeeds.seedStaffTeamExamples;
-      } catch {
-        console.warn("[upgrade-actions] staff module not available, skipping staff seeding");
+      if (staffSeeds?.seedStaffTeamExamples) {
+        await staffSeeds.seedStaffTeamExamples(ctx.em, scope);
       }
-      let seedResourcesAddressTypes;
-      let seedResourcesCapacityUnits;
-      let seedResourcesResourceExamples;
-      try {
-        const resourcesSeeds = await import("@open-mercato/core/modules/resources/lib/seeds");
-        seedResourcesAddressTypes = resourcesSeeds.seedResourcesAddressTypes;
-        seedResourcesCapacityUnits = resourcesSeeds.seedResourcesCapacityUnits;
-        seedResourcesResourceExamples = resourcesSeeds.seedResourcesResourceExamples;
-      } catch {
-        console.warn("[upgrade-actions] resources module not available, skipping resources seeding");
+      if (resourcesSeeds?.seedResourcesResourceExamples) {
+        await resourcesSeeds.seedResourcesResourceExamples(ctx.em, scope);
       }
-      await em.transactional(async (tem) => {
-        if (seedPlannerAvailabilityRuleSetDefaults) await seedPlannerAvailabilityRuleSetDefaults(tem, scope);
-        if (seedPlannerUnavailabilityReasons) await seedPlannerUnavailabilityReasons(tem, scope);
-        if (seedStaffTeamExamples) await seedStaffTeamExamples(tem, scope);
-        if (seedResourcesCapacityUnits) await seedResourcesCapacityUnits(tem, scope);
-        if (seedResourcesAddressTypes) await seedResourcesAddressTypes(tem, scope);
-        if (seedResourcesResourceExamples) await seedResourcesResourceExamples(tem, scope);
-        const adminRole = await tem.findOne(Role, { name: "admin", tenantId: normalizedTenantId, deletedAt: null });
-        if (!adminRole) return;
-        const roleAcls = await tem.find(RoleAcl, { role: adminRole, tenantId: normalizedTenantId, deletedAt: null });
-        const addedFeatures = [
-          "staff.*",
-          "staff.leave_requests.manage",
-          "resources.*",
-          "planner.*"
-        ];
-        let touched = false;
-        if (!roleAcls.length) {
-          tem.persist(
-            tem.create(RoleAcl, {
-              role: adminRole,
-              tenantId: normalizedTenantId,
-              featuresJson: addedFeatures,
-              isSuperAdmin: false,
-              createdAt: /* @__PURE__ */ new Date(),
-              updatedAt: /* @__PURE__ */ new Date()
-            })
-          );
-          touched = true;
-        }
-        for (const acl of roleAcls) {
-          const features = Array.isArray(acl.featuresJson) ? [...acl.featuresJson] : [];
-          const nextFeatures = new Set(features);
-          for (const feature of addedFeatures) nextFeatures.add(feature);
-          if (nextFeatures.size === features.length) continue;
-          acl.featuresJson = Array.from(nextFeatures);
-          acl.updatedAt = /* @__PURE__ */ new Date();
-          touched = true;
-        }
-        if (touched) {
-          await tem.flush();
-        }
-      });
-      const rbac = container.resolve("rbacService");
-      await rbac.invalidateTenantCache(normalizedTenantId);
-      const vectorService = resolveVectorService(container);
-      await reindexModules(em, ["planner", "staff", "resources"], { tenantId, organizationId, vectorService });
+      await ensureRoleAclsForModules(ctx.em, ctx.tenantId, ["planner", "staff", "resources"]);
     }
   }
 ];

package/dist/modules/configs/lib/upgrade-actions.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/configs/lib/upgrade-actions.ts"],
-  "sourcesContent": ["import { runWithCacheTenant } from '@open-mercato/cache'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport type { AwilixContainer } from 'awilix'\nimport { Role, RoleAcl } from '@open-mercato/core/modules/auth/data/entities'\nimport type { RbacService } from '@open-mercato/core/modules/auth/services/rbacService'\nimport { reindexModules } from '@open-mercato/core/modules/configs/lib/reindex-helpers'\n// Optional module imports are loaded dynamically inside each upgrade action\n// so the app does not crash when a module is disabled.\nimport { collectCrudCacheStats, purgeCrudCacheSegment } from '@open-mercato/shared/lib/crud/cache-stats'\nimport { isCrudCacheEnabled, resolveCrudCache } from '@open-mercato/shared/lib/crud/cache'\nimport * as semver from 'semver'\nimport type { VectorIndexService } from '@open-mercato/search/vector'\nimport { EncryptionMap } from '@open-mercato/core/modules/entities/data/entities'\nimport { DEFAULT_ENCRYPTION_MAPS } from '@open-mercato/core/modules/entities/lib/encryptionDefaults'\nimport type { TenantDataEncryptionService } from '@open-mercato/shared/lib/encryption/tenantDataEncryptionService'\n\nfunction resolveVectorService(container: AwilixContainer): VectorIndexService | null {\n  try {\n    return container.resolve<VectorIndexService>('vectorIndexService')\n  } catch {\n    return null\n  }\n}\n\nfunction resolveEncryptionService(container: AwilixContainer): TenantDataEncryptionService | null {\n  try {\n    return container.resolve<TenantDataEncryptionService>('tenantEncryptionService')\n  } catch {\n    return null\n  }\n}\n\nasync function ensureVectorSearchEncryptionMap(\n  em: EntityManager,\n  tenantId: string,\n  organizationId: string | null,\n): Promise<boolean> {\n  const spec = DEFAULT_ENCRYPTION_MAPS.find((entry) => entry.entityId === 'vector:vector_search')\n  const required = spec?.fields ?? []\n  if (!required.length) return false\n\n  const repo = em.getRepository(EncryptionMap)\n  const existing = await repo.findOne({\n    entityId: 'vector:vector_search',\n    tenantId,\n    organizationId,\n    deletedAt: null,\n  })\n\n  if (!existing) {\n    em.persist(\n      em.create(EncryptionMap, {\n        entityId: 'vector:vector_search',\n        tenantId,\n        organizationId,\n        fieldsJson: required,\n        isActive: true,\n        createdAt: new Date(),\n        updatedAt: new Date(),\n      }),\n    )\n    await em.flush()\n    return true\n  }\n\n  const existingFields = Array.isArray(existing.fieldsJson) ? existing.fieldsJson : []\n  const byField = new Map<string, { field: string; hashField?: string | null }>()\n  for (const item of existingFields) {\n    if (!item?.field) continue\n    byField.set(item.field, item)\n  }\n  for (const req of required) {\n    if (!req?.field) continue\n    if (byField.has(req.field)) continue\n    byField.set(req.field, req)\n  }\n\n  const merged = Array.from(byField.values())\n  const changed = merged.length !== existingFields.length\n  if (!changed && existing.isActive) return false\n\n  existing.fieldsJson = merged\n  existing.isActive = true\n  existing.updatedAt = new Date()\n  await em.flush()\n  return true\n}\n\nexport type UpgradeActionContext = {\n  tenantId: string\n  organizationId: string\n  container: AwilixContainer\n  em: EntityManager\n}\n\nexport type UpgradeActionDefinition = {\n  id: string\n  version: string\n  messageKey: string\n  ctaKey: string\n  successKey: string\n  loadingKey?: string\n  run: (ctx: UpgradeActionContext) => Promise<void>\n}\n\n/**\n * Compare two semantic version strings.\n * Uses the semver library for robust version comparison.\n * Returns negative if a < b, positive if a > b, 0 if equal.\n * Throws an error if either version string is invalid.\n */\nexport function compareVersions(a: string, b: string): number {\n  const cleanA = semver.valid(semver.coerce(a))\n  const cleanB = semver.valid(semver.coerce(b))\n  if (!cleanA) {\n    throw new Error(`Invalid version string: \"${a}\". Expected a valid semver format (e.g., \"1.2.3\").`)\n  }\n  if (!cleanB) {\n    throw new Error(`Invalid version string: \"${b}\". Expected a valid semver format (e.g., \"1.2.3\").`)\n  }\n  return semver.compare(cleanA, cleanB)\n}\n\nasync function purgeCatalogCrudCache(container: AwilixContainer, tenantId: string | null) {\n  if (!isCrudCacheEnabled()) return\n  const cache = resolveCrudCache(container)\n  if (!cache) return\n  await runWithCacheTenant(tenantId ?? null, async () => {\n    const stats = await collectCrudCacheStats(cache)\n    const catalogSegments = stats.segments.filter((segment) => segment.resource?.startsWith('catalog.'))\n    if (!catalogSegments.length) return\n    for (const segment of catalogSegments) {\n      try {\n        await purgeCrudCacheSegment(cache, segment.segment)\n      } catch (error) {\n        console.warn('[upgrade-actions] failed to purge catalog cache segment', {\n          tenantId,\n          segment: segment.segment,\n          error,\n        })\n      }\n    }\n  })\n}\n\nexport const upgradeActions: UpgradeActionDefinition[] = [\n  {\n    id: 'configs.upgrades.catalog.examples',\n    version: '0.3.4',\n    messageKey: 'upgrades.v034.message',\n    ctaKey: 'upgrades.v034.cta',\n    successKey: 'upgrades.v034.success',\n    loadingKey: 'upgrades.v034.loading',\n    async run({ container, em, tenantId, organizationId }) {\n      let installExampleCatalogData: typeof import('@open-mercato/core/modules/catalog/lib/seeds')['installExampleCatalogData'] | undefined\n      try {\n        const catalogSeeds = await import('@open-mercato/core/modules/catalog/lib/seeds')\n        installExampleCatalogData = catalogSeeds.installExampleCatalogData\n      } catch {\n        console.warn('[upgrade-actions] catalog module not available, skipping catalog example data')\n        return\n      }\n      await installExampleCatalogData(container, { tenantId, organizationId }, em)\n      const vectorService = resolveVectorService(container)\n      await reindexModules(em, ['catalog'], { tenantId, organizationId, vectorService })\n    },\n  },\n  {\n    id: 'configs.upgrades.auth.admin_business_rules_acl',\n    version: '0.3.5',\n    messageKey: 'upgrades.v035.message',\n    ctaKey: 'upgrades.v035.cta',\n    successKey: 'upgrades.v035.success',\n    loadingKey: 'upgrades.v035.loading',\n    async run({ container, em, tenantId }) {\n      const normalizedTenantId = tenantId.trim()\n      await em.transactional(async (tem) => {\n        const adminRole = await tem.findOne(Role, { name: 'admin', tenantId: normalizedTenantId, deletedAt: null })\n        if (!adminRole) return\n\n        const roleAcls = await tem.find(RoleAcl, { role: adminRole, tenantId: normalizedTenantId, deletedAt: null })\n        let touched = false\n        if (!roleAcls.length) {\n          tem.persist(\n            tem.create(RoleAcl, {\n              role: adminRole,\n              tenantId: normalizedTenantId,\n              featuresJson: ['business_rules.*'],\n              isSuperAdmin: false,\n              createdAt: new Date(),\n              updatedAt: new Date(),\n            }),\n          )\n          touched = true\n        }\n\n        for (const acl of roleAcls) {\n          const features = Array.isArray(acl.featuresJson) ? [...acl.featuresJson] : []\n          if (features.includes('business_rules.*')) continue\n          acl.featuresJson = [...features, 'business_rules.*']\n          acl.updatedAt = new Date()\n          touched = true\n        }\n\n        if (touched) {\n          await tem.flush()\n        }\n      })\n\n      const rbac = container.resolve<RbacService>('rbacService')\n      await rbac.invalidateTenantCache(normalizedTenantId)\n    },\n  },\n  {\n    id: 'configs.upgrades.sales.examples',\n    version: '0.3.6',\n    messageKey: 'upgrades.v036.message',\n    ctaKey: 'upgrades.v036.cta',\n    successKey: 'upgrades.v036.success',\n    loadingKey: 'upgrades.v036.loading',\n    async run({ container, em, tenantId, organizationId }) {\n      let seedSalesExamples: typeof import('@open-mercato/core/modules/sales/seed/examples')['seedSalesExamples'] | undefined\n      try {\n        const salesSeeds = await import('@open-mercato/core/modules/sales/seed/examples')\n        seedSalesExamples = salesSeeds.seedSalesExamples\n      } catch {\n        console.warn('[upgrade-actions] sales module not available, skipping sales example data')\n        return\n      }\n      await em.transactional(async (tem) => {\n        await seedSalesExamples!(tem, container, { tenantId, organizationId })\n      })\n      const vectorService = resolveVectorService(container)\n      await reindexModules(em, ['sales', 'catalog'], { tenantId, organizationId, vectorService })\n      await purgeCatalogCrudCache(container, tenantId)\n    },\n  },\n  {\n    id: 'configs.upgrades.vector.encryption_vector_search',\n    version: '0.3.6',\n    messageKey: 'upgrades.v036_vector_encryption.message',\n    ctaKey: 'upgrades.v036_vector_encryption.cta',\n    successKey: 'upgrades.v036_vector_encryption.success',\n    loadingKey: 'upgrades.v036_vector_encryption.loading',\n    async run({ container, em, tenantId, organizationId }) {\n      const normalizedTenantId = tenantId.trim()\n      const normalizedOrgId = organizationId ?? null\n\n      const encryptionService = resolveEncryptionService(container)\n      if (!encryptionService?.isEnabled?.()) {\n        return\n      }\n\n      const updated = await em.transactional(async (tem) => {\n        return ensureVectorSearchEncryptionMap(tem, normalizedTenantId, normalizedOrgId)\n      })\n\n      if (updated) {\n        await encryptionService.invalidateMap('vector:vector_search', normalizedTenantId, normalizedOrgId)\n      }\n\n      const vectorService = resolveVectorService(container)\n      if (vectorService) {\n        await vectorService.reindexAll({ tenantId: normalizedTenantId, organizationId: normalizedOrgId, purgeFirst: false })\n      }\n    },\n  },\n  {\n    id: 'configs.upgrades.examples.currencies_workflows',\n    version: '0.3.13',\n    messageKey: 'upgrades.v0313.message',\n    ctaKey: 'upgrades.v0313.cta',\n    successKey: 'upgrades.v0313.success',\n    loadingKey: 'upgrades.v0313.loading',\n    async run({ container, em, tenantId, organizationId }) {\n      const normalizedTenantId = tenantId.trim()\n      const scope = { tenantId, organizationId }\n\n      let seedExampleCurrencies: typeof import('@open-mercato/core/modules/currencies/lib/seeds')['seedExampleCurrencies'] | undefined\n      try {\n        const currenciesSeeds = await import('@open-mercato/core/modules/currencies/lib/seeds')\n        seedExampleCurrencies = currenciesSeeds.seedExampleCurrencies\n      } catch {\n        console.warn('[upgrade-actions] currencies module not available, skipping currency seeding')\n      }\n\n      let seedExampleWorkflows: typeof import('@open-mercato/core/modules/workflows/lib/seeds')['seedExampleWorkflows'] | undefined\n      try {\n        const workflowsSeeds = await import('@open-mercato/core/modules/workflows/lib/seeds')\n        seedExampleWorkflows = workflowsSeeds.seedExampleWorkflows\n      } catch {\n        console.warn('[upgrade-actions] workflows module not available, skipping workflow seeding')\n      }\n\n      await em.transactional(async (tem) => {\n        if (seedExampleCurrencies) await seedExampleCurrencies(tem, scope)\n        if (seedExampleWorkflows) await seedExampleWorkflows(tem, scope)\n\n        const adminRole = await tem.findOne(Role, { name: 'admin', tenantId: normalizedTenantId, deletedAt: null })\n        if (!adminRole) return\n\n        const roleAcls = await tem.find(RoleAcl, { role: adminRole, tenantId: normalizedTenantId, deletedAt: null })\n        let touched = false\n        if (!roleAcls.length) {\n          tem.persist(\n            tem.create(RoleAcl, {\n              role: adminRole,\n              tenantId: normalizedTenantId,\n              featuresJson: ['search.*', 'feature_toggles.*', 'currencies.*'],\n              isSuperAdmin: false,\n              createdAt: new Date(),\n              updatedAt: new Date(),\n            }),\n          )\n          touched = true\n        }\n\n        for (const acl of roleAcls) {\n          const features = Array.isArray(acl.featuresJson) ? [...acl.featuresJson] : []\n          const nextFeatures = new Set(features)\n          nextFeatures.add('search.*')\n          nextFeatures.add('feature_toggles.*')\n          nextFeatures.add('currencies.*')\n          if (nextFeatures.size === features.length) continue\n          acl.featuresJson = Array.from(nextFeatures)\n          acl.updatedAt = new Date()\n          touched = true\n        }\n\n        if (touched) {\n          await tem.flush()\n        }\n      })\n      const rbac = container.resolve<RbacService>('rbacService')\n      await rbac.invalidateTenantCache(normalizedTenantId)\n    },\n  },\n  {\n    id: 'configs.upgrades.examples.planner_staff_resources',\n    version: '0.4.1',\n    messageKey: 'upgrades.v041.message',\n    ctaKey: 'upgrades.v041.cta',\n    successKey: 'upgrades.v041.success',\n    loadingKey: 'upgrades.v041.loading',\n    async run({ container, em, tenantId, organizationId }) {\n      const normalizedTenantId = tenantId.trim()\n      const scope = { tenantId, organizationId }\n\n      let seedPlannerAvailabilityRuleSetDefaults: typeof import('@open-mercato/core/modules/planner/lib/seeds')['seedPlannerAvailabilityRuleSetDefaults'] | undefined\n      let seedPlannerUnavailabilityReasons: typeof import('@open-mercato/core/modules/planner/lib/seeds')['seedPlannerUnavailabilityReasons'] | undefined\n      try {\n        const plannerSeeds = await import('@open-mercato/core/modules/planner/lib/seeds')\n        seedPlannerAvailabilityRuleSetDefaults = plannerSeeds.seedPlannerAvailabilityRuleSetDefaults\n        seedPlannerUnavailabilityReasons = plannerSeeds.seedPlannerUnavailabilityReasons\n      } catch {\n        console.warn('[upgrade-actions] planner module not available, skipping planner seeding')\n      }\n\n      let seedStaffTeamExamples: typeof import('@open-mercato/core/modules/staff/lib/seeds')['seedStaffTeamExamples'] | undefined\n      try {\n        const staffSeeds = await import('@open-mercato/core/modules/staff/lib/seeds')\n        seedStaffTeamExamples = staffSeeds.seedStaffTeamExamples\n      } catch {\n        console.warn('[upgrade-actions] staff module not available, skipping staff seeding')\n      }\n\n      let seedResourcesAddressTypes: typeof import('@open-mercato/core/modules/resources/lib/seeds')['seedResourcesAddressTypes'] | undefined\n      let seedResourcesCapacityUnits: typeof import('@open-mercato/core/modules/resources/lib/seeds')['seedResourcesCapacityUnits'] | undefined\n      let seedResourcesResourceExamples: typeof import('@open-mercato/core/modules/resources/lib/seeds')['seedResourcesResourceExamples'] | undefined\n      try {\n        const resourcesSeeds = await import('@open-mercato/core/modules/resources/lib/seeds')\n        seedResourcesAddressTypes = resourcesSeeds.seedResourcesAddressTypes\n        seedResourcesCapacityUnits = resourcesSeeds.seedResourcesCapacityUnits\n        seedResourcesResourceExamples = resourcesSeeds.seedResourcesResourceExamples\n      } catch {\n        console.warn('[upgrade-actions] resources module not available, skipping resources seeding')\n      }\n\n      await em.transactional(async (tem) => {\n        if (seedPlannerAvailabilityRuleSetDefaults) await seedPlannerAvailabilityRuleSetDefaults(tem, scope)\n        if (seedPlannerUnavailabilityReasons) await seedPlannerUnavailabilityReasons(tem, scope)\n        if (seedStaffTeamExamples) await seedStaffTeamExamples(tem, scope)\n        if (seedResourcesCapacityUnits) await seedResourcesCapacityUnits(tem, scope)\n        if (seedResourcesAddressTypes) await seedResourcesAddressTypes(tem, scope)\n        if (seedResourcesResourceExamples) await seedResourcesResourceExamples(tem, scope)\n\n        const adminRole = await tem.findOne(Role, { name: 'admin', tenantId: normalizedTenantId, deletedAt: null })\n        if (!adminRole) return\n\n        const roleAcls = await tem.find(RoleAcl, { role: adminRole, tenantId: normalizedTenantId, deletedAt: null })\n        const addedFeatures = [\n          'staff.*',\n          'staff.leave_requests.manage',\n          'resources.*',\n          'planner.*',\n        ]\n        let touched = false\n        if (!roleAcls.length) {\n          tem.persist(\n            tem.create(RoleAcl, {\n              role: adminRole,\n              tenantId: normalizedTenantId,\n              featuresJson: addedFeatures,\n              isSuperAdmin: false,\n              createdAt: new Date(),\n              updatedAt: new Date(),\n            }),\n          )\n          touched = true\n        }\n\n        for (const acl of roleAcls) {\n          const features = Array.isArray(acl.featuresJson) ? [...acl.featuresJson] : []\n          const nextFeatures = new Set(features)\n          for (const feature of addedFeatures) nextFeatures.add(feature)\n          if (nextFeatures.size === features.length) continue\n          acl.featuresJson = Array.from(nextFeatures)\n          acl.updatedAt = new Date()\n          touched = true\n        }\n\n        if (touched) {\n          await tem.flush()\n        }\n      })\n\n      const rbac = container.resolve<RbacService>('rbacService')\n      await rbac.invalidateTenantCache(normalizedTenantId)\n\n      const vectorService = resolveVectorService(container)\n      await reindexModules(em, ['planner', 'staff', 'resources'], { tenantId, organizationId, vectorService })\n    },\n  },\n]\n\nexport function actionsUpToVersion(version: string): UpgradeActionDefinition[] {\n  return upgradeActions\n    .filter((action) => compareVersions(action.version, version) <= 0)\n    .sort((a, b) => compareVersions(a.version, b.version) || a.id.localeCompare(b.id))\n}\n\nexport function findUpgradeAction(actionId: string, maxVersion: string): UpgradeActionDefinition | undefined {\n  const matches = actionsUpToVersion(maxVersion).filter((action) => action.id === actionId)\n  if (!matches.length) return undefined\n  return matches[matches.length - 1]\n}\n"],
-  "mappings": "AAAA,SAAS,0BAA0B;AAGnC,SAAS,MAAM,eAAe;AAE9B,SAAS,sBAAsB;AAG/B,SAAS,uBAAuB,6BAA6B;AAC7D,SAAS,oBAAoB,wBAAwB;AACrD,YAAY,YAAY;AAExB,SAAS,qBAAqB;AAC9B,SAAS,+BAA+B;AAGxC,SAAS,qBAAqB,WAAuD;AACnF,MAAI;AACF,WAAO,UAAU,QAA4B,oBAAoB;AAAA,EACnE,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,yBAAyB,WAAgE;AAChG,MAAI;AACF,WAAO,UAAU,QAAqC,yBAAyB;AAAA,EACjF,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,eAAe,gCACb,IACA,UACA,gBACkB;AAClB,QAAM,OAAO,wBAAwB,KAAK,CAAC,UAAU,MAAM,aAAa,sBAAsB;AAC9F,QAAM,WAAW,MAAM,UAAU,CAAC;AAClC,MAAI,CAAC,SAAS,OAAQ,QAAO;AAE7B,QAAM,OAAO,GAAG,cAAc,aAAa;AAC3C,QAAM,WAAW,MAAM,KAAK,QAAQ;AAAA,IAClC,UAAU;AAAA,IACV;AAAA,IACA;AAAA,IACA,WAAW;AAAA,EACb,CAAC;AAED,MAAI,CAAC,UAAU;AACb,OAAG;AAAA,MACD,GAAG,OAAO,eAAe;AAAA,QACvB,UAAU;AAAA,QACV;AAAA,QACA;AAAA,QACA,YAAY;AAAA,QACZ,UAAU;AAAA,QACV,WAAW,oBAAI,KAAK;AAAA,QACpB,WAAW,oBAAI,KAAK;AAAA,MACtB,CAAC;AAAA,IACH;AACA,UAAM,GAAG,MAAM;AACf,WAAO;AAAA,EACT;AAEA,QAAM,iBAAiB,MAAM,QAAQ,SAAS,UAAU,IAAI,SAAS,aAAa,CAAC;AACnF,QAAM,UAAU,oBAAI,IAA0D;AAC9E,aAAW,QAAQ,gBAAgB;AACjC,QAAI,CAAC,MAAM,MAAO;AAClB,YAAQ,IAAI,KAAK,OAAO,IAAI;AAAA,EAC9B;AACA,aAAW,OAAO,UAAU;AAC1B,QAAI,CAAC,KAAK,MAAO;AACjB,QAAI,QAAQ,IAAI,IAAI,KAAK,EAAG;AAC5B,YAAQ,IAAI,IAAI,OAAO,GAAG;AAAA,EAC5B;AAEA,QAAM,SAAS,MAAM,KAAK,QAAQ,OAAO,CAAC;AAC1C,QAAM,UAAU,OAAO,WAAW,eAAe;AACjD,MAAI,CAAC,WAAW,SAAS,SAAU,QAAO;AAE1C,WAAS,aAAa;AACtB,WAAS,WAAW;AACpB,WAAS,YAAY,oBAAI,KAAK;AAC9B,QAAM,GAAG,MAAM;AACf,SAAO;AACT;AAyBO,SAAS,gBAAgB,GAAW,GAAmB;AAC5D,QAAM,SAAS,OAAO,MAAM,OAAO,OAAO,CAAC,CAAC;AAC5C,QAAM,SAAS,OAAO,MAAM,OAAO,OAAO,CAAC,CAAC;AAC5C,MAAI,CAAC,QAAQ;AACX,UAAM,IAAI,MAAM,4BAA4B,CAAC,oDAAoD;AAAA,EACnG;AACA,MAAI,CAAC,QAAQ;AACX,UAAM,IAAI,MAAM,4BAA4B,CAAC,oDAAoD;AAAA,EACnG;AACA,SAAO,OAAO,QAAQ,QAAQ,MAAM;AACtC;AAEA,eAAe,sBAAsB,WAA4B,UAAyB;AACxF,MAAI,CAAC,mBAAmB,EAAG;AAC3B,QAAM,QAAQ,iBAAiB,SAAS;AACxC,MAAI,CAAC,MAAO;AACZ,QAAM,mBAAmB,YAAY,MAAM,YAAY;AACrD,UAAM,QAAQ,MAAM,sBAAsB,KAAK;AAC/C,UAAM,kBAAkB,MAAM,SAAS,OAAO,CAAC,YAAY,QAAQ,UAAU,WAAW,UAAU,CAAC;AACnG,QAAI,CAAC,gBAAgB,OAAQ;AAC7B,eAAW,WAAW,iBAAiB;AACrC,UAAI;AACF,cAAM,sBAAsB,OAAO,QAAQ,OAAO;AAAA,MACpD,SAAS,OAAO;AACd,gBAAQ,KAAK,2DAA2D;AAAA,UACtE;AAAA,UACA,SAAS,QAAQ;AAAA,UACjB;AAAA,QACF,CAAC;AAAA,MACH;AAAA,IACF;AAAA,EACF,CAAC;AACH;AAEO,MAAM,iBAA4C;AAAA,EACvD;AAAA,IACE,IAAI;AAAA,IACJ,SAAS;AAAA,IACT,YAAY;AAAA,IACZ,QAAQ;AAAA,IACR,YAAY;AAAA,IACZ,YAAY;AAAA,IACZ,MAAM,IAAI,EAAE,WAAW,IAAI,UAAU,eAAe,GAAG;AACrD,UAAI;AACJ,UAAI;AACF,cAAM,eAAe,MAAM,OAAO,8CAA8C;AAChF,oCAA4B,aAAa;AAAA,MAC3C,QAAQ;AACN,gBAAQ,KAAK,+EAA+E;AAC5F;AAAA,MACF;AACA,YAAM,0BAA0B,WAAW,EAAE,UAAU,eAAe,GAAG,EAAE;AAC3E,YAAM,gBAAgB,qBAAqB,SAAS;AACpD,YAAM,eAAe,IAAI,CAAC,SAAS,GAAG,EAAE,UAAU,gBAAgB,cAAc,CAAC;AAAA,IACnF;AAAA,EACF;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,SAAS;AAAA,IACT,YAAY;AAAA,IACZ,QAAQ;AAAA,IACR,YAAY;AAAA,IACZ,YAAY;AAAA,IACZ,MAAM,IAAI,EAAE,WAAW,IAAI,SAAS,GAAG;AACrC,YAAM,qBAAqB,SAAS,KAAK;AACzC,YAAM,GAAG,cAAc,OAAO,QAAQ;AACpC,cAAM,YAAY,MAAM,IAAI,QAAQ,MAAM,EAAE,MAAM,SAAS,UAAU,oBAAoB,WAAW,KAAK,CAAC;AAC1G,YAAI,CAAC,UAAW;AAEhB,cAAM,WAAW,MAAM,IAAI,KAAK,SAAS,EAAE,MAAM,WAAW,UAAU,oBAAoB,WAAW,KAAK,CAAC;AAC3G,YAAI,UAAU;AACd,YAAI,CAAC,SAAS,QAAQ;AACpB,cAAI;AAAA,YACF,IAAI,OAAO,SAAS;AAAA,cAClB,MAAM;AAAA,cACN,UAAU;AAAA,cACV,cAAc,CAAC,kBAAkB;AAAA,cACjC,cAAc;AAAA,cACd,WAAW,oBAAI,KAAK;AAAA,cACpB,WAAW,oBAAI,KAAK;AAAA,YACtB,CAAC;AAAA,UACH;AACA,oBAAU;AAAA,QACZ;AAEA,mBAAW,OAAO,UAAU;AAC1B,gBAAM,WAAW,MAAM,QAAQ,IAAI,YAAY,IAAI,CAAC,GAAG,IAAI,YAAY,IAAI,CAAC;AAC5E,cAAI,SAAS,SAAS,kBAAkB,EAAG;AAC3C,cAAI,eAAe,CAAC,GAAG,UAAU,kBAAkB;AACnD,cAAI,YAAY,oBAAI,KAAK;AACzB,oBAAU;AAAA,QACZ;AAEA,YAAI,SAAS;AACX,gBAAM,IAAI,MAAM;AAAA,QAClB;AAAA,MACF,CAAC;AAED,YAAM,OAAO,UAAU,QAAqB,aAAa;AACzD,YAAM,KAAK,sBAAsB,kBAAkB;AAAA,IACrD;AAAA,EACF;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,SAAS;AAAA,IACT,YAAY;AAAA,IACZ,QAAQ;AAAA,IACR,YAAY;AAAA,IACZ,YAAY;AAAA,IACZ,MAAM,IAAI,EAAE,WAAW,IAAI,UAAU,eAAe,GAAG;AACrD,UAAI;AACJ,UAAI;AACF,cAAM,aAAa,MAAM,OAAO,gDAAgD;AAChF,4BAAoB,WAAW;AAAA,MACjC,QAAQ;AACN,gBAAQ,KAAK,2EAA2E;AACxF;AAAA,MACF;AACA,YAAM,GAAG,cAAc,OAAO,QAAQ;AACpC,cAAM,kBAAmB,KAAK,WAAW,EAAE,UAAU,eAAe,CAAC;AAAA,MACvE,CAAC;AACD,YAAM,gBAAgB,qBAAqB,SAAS;AACpD,YAAM,eAAe,IAAI,CAAC,SAAS,SAAS,GAAG,EAAE,UAAU,gBAAgB,cAAc,CAAC;AAC1F,YAAM,sBAAsB,WAAW,QAAQ;AAAA,IACjD;AAAA,EACF;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,SAAS;AAAA,IACT,YAAY;AAAA,IACZ,QAAQ;AAAA,IACR,YAAY;AAAA,IACZ,YAAY;AAAA,IACZ,MAAM,IAAI,EAAE,WAAW,IAAI,UAAU,eAAe,GAAG;AACrD,YAAM,qBAAqB,SAAS,KAAK;AACzC,YAAM,kBAAkB,kBAAkB;AAE1C,YAAM,oBAAoB,yBAAyB,SAAS;AAC5D,UAAI,CAAC,mBAAmB,YAAY,GAAG;AACrC;AAAA,MACF;AAEA,YAAM,UAAU,MAAM,GAAG,cAAc,OAAO,QAAQ;AACpD,eAAO,gCAAgC,KAAK,oBAAoB,eAAe;AAAA,MACjF,CAAC;AAED,UAAI,SAAS;AACX,cAAM,kBAAkB,cAAc,wBAAwB,oBAAoB,eAAe;AAAA,MACnG;AAEA,YAAM,gBAAgB,qBAAqB,SAAS;AACpD,UAAI,eAAe;AACjB,cAAM,cAAc,WAAW,EAAE,UAAU,oBAAoB,gBAAgB,iBAAiB,YAAY,MAAM,CAAC;AAAA,MACrH;AAAA,IACF;AAAA,EACF;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,SAAS;AAAA,IACT,YAAY;AAAA,IACZ,QAAQ;AAAA,IACR,YAAY;AAAA,IACZ,YAAY;AAAA,IACZ,MAAM,IAAI,EAAE,WAAW,IAAI,UAAU,eAAe,GAAG;AACrD,YAAM,qBAAqB,SAAS,KAAK;AACzC,YAAM,QAAQ,EAAE,UAAU,eAAe;AAEzC,UAAI;AACJ,UAAI;AACF,cAAM,kBAAkB,MAAM,OAAO,iDAAiD;AACtF,gCAAwB,gBAAgB;AAAA,MAC1C,QAAQ;AACN,gBAAQ,KAAK,8EAA8E;AAAA,MAC7F;AAEA,UAAI;AACJ,UAAI;AACF,cAAM,iBAAiB,MAAM,OAAO,gDAAgD;AACpF,+BAAuB,eAAe;AAAA,MACxC,QAAQ;AACN,gBAAQ,KAAK,6EAA6E;AAAA,MAC5F;AAEA,YAAM,GAAG,cAAc,OAAO,QAAQ;AACpC,YAAI,sBAAuB,OAAM,sBAAsB,KAAK,KAAK;AACjE,YAAI,qBAAsB,OAAM,qBAAqB,KAAK,KAAK;AAE/D,cAAM,YAAY,MAAM,IAAI,QAAQ,MAAM,EAAE,MAAM,SAAS,UAAU,oBAAoB,WAAW,KAAK,CAAC;AAC1G,YAAI,CAAC,UAAW;AAEhB,cAAM,WAAW,MAAM,IAAI,KAAK,SAAS,EAAE,MAAM,WAAW,UAAU,oBAAoB,WAAW,KAAK,CAAC;AAC3G,YAAI,UAAU;AACd,YAAI,CAAC,SAAS,QAAQ;AACpB,cAAI;AAAA,YACF,IAAI,OAAO,SAAS;AAAA,cAClB,MAAM;AAAA,cACN,UAAU;AAAA,cACV,cAAc,CAAC,YAAY,qBAAqB,cAAc;AAAA,cAC9D,cAAc;AAAA,cACd,WAAW,oBAAI,KAAK;AAAA,cACpB,WAAW,oBAAI,KAAK;AAAA,YACtB,CAAC;AAAA,UACH;AACA,oBAAU;AAAA,QACZ;AAEA,mBAAW,OAAO,UAAU;AAC1B,gBAAM,WAAW,MAAM,QAAQ,IAAI,YAAY,IAAI,CAAC,GAAG,IAAI,YAAY,IAAI,CAAC;AAC5E,gBAAM,eAAe,IAAI,IAAI,QAAQ;AACrC,uBAAa,IAAI,UAAU;AAC3B,uBAAa,IAAI,mBAAmB;AACpC,uBAAa,IAAI,cAAc;AAC/B,cAAI,aAAa,SAAS,SAAS,OAAQ;AAC3C,cAAI,eAAe,MAAM,KAAK,YAAY;AAC1C,cAAI,YAAY,oBAAI,KAAK;AACzB,oBAAU;AAAA,QACZ;AAEA,YAAI,SAAS;AACX,gBAAM,IAAI,MAAM;AAAA,QAClB;AAAA,MACF,CAAC;AACD,YAAM,OAAO,UAAU,QAAqB,aAAa;AACzD,YAAM,KAAK,sBAAsB,kBAAkB;AAAA,IACrD;AAAA,EACF;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,SAAS;AAAA,IACT,YAAY;AAAA,IACZ,QAAQ;AAAA,IACR,YAAY;AAAA,IACZ,YAAY;AAAA,IACZ,MAAM,IAAI,EAAE,WAAW,IAAI,UAAU,eAAe,GAAG;AACrD,YAAM,qBAAqB,SAAS,KAAK;AACzC,YAAM,QAAQ,EAAE,UAAU,eAAe;AAEzC,UAAI;AACJ,UAAI;AACJ,UAAI;AACF,cAAM,eAAe,MAAM,OAAO,8CAA8C;AAChF,iDAAyC,aAAa;AACtD,2CAAmC,aAAa;AAAA,MAClD,QAAQ;AACN,gBAAQ,KAAK,0EAA0E;AAAA,MACzF;AAEA,UAAI;AACJ,UAAI;AACF,cAAM,aAAa,MAAM,OAAO,4CAA4C;AAC5E,gCAAwB,WAAW;AAAA,MACrC,QAAQ;AACN,gBAAQ,KAAK,sEAAsE;AAAA,MACrF;AAEA,UAAI;AACJ,UAAI;AACJ,UAAI;AACJ,UAAI;AACF,cAAM,iBAAiB,MAAM,OAAO,gDAAgD;AACpF,oCAA4B,eAAe;AAC3C,qCAA6B,eAAe;AAC5C,wCAAgC,eAAe;AAAA,MACjD,QAAQ;AACN,gBAAQ,KAAK,8EAA8E;AAAA,MAC7F;AAEA,YAAM,GAAG,cAAc,OAAO,QAAQ;AACpC,YAAI,uCAAwC,OAAM,uCAAuC,KAAK,KAAK;AACnG,YAAI,iCAAkC,OAAM,iCAAiC,KAAK,KAAK;AACvF,YAAI,sBAAuB,OAAM,sBAAsB,KAAK,KAAK;AACjE,YAAI,2BAA4B,OAAM,2BAA2B,KAAK,KAAK;AAC3E,YAAI,0BAA2B,OAAM,0BAA0B,KAAK,KAAK;AACzE,YAAI,8BAA+B,OAAM,8BAA8B,KAAK,KAAK;AAEjF,cAAM,YAAY,MAAM,IAAI,QAAQ,MAAM,EAAE,MAAM,SAAS,UAAU,oBAAoB,WAAW,KAAK,CAAC;AAC1G,YAAI,CAAC,UAAW;AAEhB,cAAM,WAAW,MAAM,IAAI,KAAK,SAAS,EAAE,MAAM,WAAW,UAAU,oBAAoB,WAAW,KAAK,CAAC;AAC3G,cAAM,gBAAgB;AAAA,UACpB;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,QACF;AACA,YAAI,UAAU;AACd,YAAI,CAAC,SAAS,QAAQ;AACpB,cAAI;AAAA,YACF,IAAI,OAAO,SAAS;AAAA,cAClB,MAAM;AAAA,cACN,UAAU;AAAA,cACV,cAAc;AAAA,cACd,cAAc;AAAA,cACd,WAAW,oBAAI,KAAK;AAAA,cACpB,WAAW,oBAAI,KAAK;AAAA,YACtB,CAAC;AAAA,UACH;AACA,oBAAU;AAAA,QACZ;AAEA,mBAAW,OAAO,UAAU;AAC1B,gBAAM,WAAW,MAAM,QAAQ,IAAI,YAAY,IAAI,CAAC,GAAG,IAAI,YAAY,IAAI,CAAC;AAC5E,gBAAM,eAAe,IAAI,IAAI,QAAQ;AACrC,qBAAW,WAAW,cAAe,cAAa,IAAI,OAAO;AAC7D,cAAI,aAAa,SAAS,SAAS,OAAQ;AAC3C,cAAI,eAAe,MAAM,KAAK,YAAY;AAC1C,cAAI,YAAY,oBAAI,KAAK;AACzB,oBAAU;AAAA,QACZ;AAEA,YAAI,SAAS;AACX,gBAAM,IAAI,MAAM;AAAA,QAClB;AAAA,MACF,CAAC;AAED,YAAM,OAAO,UAAU,QAAqB,aAAa;AACzD,YAAM,KAAK,sBAAsB,kBAAkB;AAEnD,YAAM,gBAAgB,qBAAqB,SAAS;AACpD,YAAM,eAAe,IAAI,CAAC,WAAW,SAAS,WAAW,GAAG,EAAE,UAAU,gBAAgB,cAAc,CAAC;AAAA,IACzG;AAAA,EACF;AACF;AAEO,SAAS,mBAAmB,SAA4C;AAC7E,SAAO,eACJ,OAAO,CAAC,WAAW,gBAAgB,OAAO,SAAS,OAAO,KAAK,CAAC,EAChE,KAAK,CAAC,GAAG,MAAM,gBAAgB,EAAE,SAAS,EAAE,OAAO,KAAK,EAAE,GAAG,cAAc,EAAE,EAAE,CAAC;AACrF;AAEO,SAAS,kBAAkB,UAAkB,YAAyD;AAC3G,QAAM,UAAU,mBAAmB,UAAU,EAAE,OAAO,CAAC,WAAW,OAAO,OAAO,QAAQ;AACxF,MAAI,CAAC,QAAQ,OAAQ,QAAO;AAC5B,SAAO,QAAQ,QAAQ,SAAS,CAAC;AACnC;",
+  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport * as semver from 'semver'\nimport { getModules } from '@open-mercato/shared/lib/modules/registry'\nimport type { Module } from '@open-mercato/shared/modules/registry'\nimport type { AppContainer } from '@open-mercato/shared/lib/di/container'\nimport { Role, RoleAcl } from '@open-mercato/core/modules/auth/data/entities'\nimport { normalizeTenantId } from '@open-mercato/core/modules/auth/lib/tenantAccess'\n\nexport type UpgradeActionContext = {\n  tenantId: string\n  organizationId: string\n  container: AppContainer\n  em: EntityManager\n}\n\nexport type UpgradeActionDefinition = {\n  id: string\n  version: string\n  messageKey: string\n  ctaKey: string\n  successKey: string\n  loadingKey?: string\n  run: (ctx: UpgradeActionContext) => Promise<void>\n}\n\n/**\n * Compare two semantic version strings.\n * Uses the semver library for robust version comparison.\n * Returns negative if a < b, positive if a > b, 0 if equal.\n * Throws an error if either version string is invalid.\n */\nexport function compareVersions(a: string, b: string): number {\n  const cleanA = semver.valid(semver.coerce(a))\n  const cleanB = semver.valid(semver.coerce(b))\n  if (!cleanA) {\n    throw new Error(`Invalid version string: \"${a}\". Expected a valid semver format (e.g., \"1.2.3\").`)\n  }\n  if (!cleanB) {\n    throw new Error(`Invalid version string: \"${b}\". Expected a valid semver format (e.g., \"1.2.3\").`)\n  }\n  return semver.compare(cleanA, cleanB)\n}\n\ntype RoleName = 'superadmin' | 'admin' | 'employee'\n\nfunction collectRoleFeatures(modules: Module[], moduleIds: string[]): Record<RoleName, string[]> {\n  const result: Record<RoleName, string[]> = {\n    superadmin: [],\n    admin: [],\n    employee: [],\n  }\n  const targetIds = new Set(moduleIds)\n  for (const mod of modules) {\n    if (!targetIds.has(mod.id)) continue\n    const roleFeatures = mod.setup?.defaultRoleFeatures\n    if (roleFeatures?.superadmin) result.superadmin.push(...roleFeatures.superadmin)\n    if (roleFeatures?.admin) result.admin.push(...roleFeatures.admin)\n    if (roleFeatures?.employee) result.employee.push(...roleFeatures.employee)\n  }\n  result.superadmin = Array.from(new Set(result.superadmin))\n  result.admin = Array.from(new Set(result.admin))\n  result.employee = Array.from(new Set(result.employee))\n  return result\n}\n\nasync function findRoleByName(\n  em: EntityManager,\n  name: string,\n  tenantId: string | null,\n): Promise<Role | null> {\n  const normalizedTenant = normalizeTenantId(tenantId ?? null) ?? null\n  let role = await em.findOne(Role, { name, tenantId: normalizedTenant })\n  if (!role && normalizedTenant !== null) {\n    role = await em.findOne(Role, { name, tenantId: null })\n  }\n  return role\n}\n\nasync function ensureRoleAclFor(\n  em: EntityManager,\n  role: Role,\n  tenantId: string,\n  features: string[],\n  options: { isSuperAdmin?: boolean } = {},\n) {\n  const existing = await em.findOne(RoleAcl, { role, tenantId })\n  if (!existing) {\n    const acl = em.create(RoleAcl, {\n      role,\n      tenantId,\n      featuresJson: features,\n      isSuperAdmin: !!options.isSuperAdmin,\n      createdAt: new Date(),\n    })\n    await em.persistAndFlush(acl)\n    return\n  }\n  const currentFeatures = Array.isArray(existing.featuresJson) ? existing.featuresJson : []\n  const merged = Array.from(new Set([...currentFeatures, ...features]))\n  const changed =\n    merged.length !== currentFeatures.length ||\n    merged.some((value, index) => value !== currentFeatures[index])\n  if (changed) existing.featuresJson = merged\n  if (options.isSuperAdmin && !existing.isSuperAdmin) {\n    existing.isSuperAdmin = true\n  }\n  if (changed || options.isSuperAdmin) {\n    await em.persistAndFlush(existing)\n  }\n}\n\nasync function ensureRoleAclsForModules(\n  em: EntityManager,\n  tenantId: string,\n  moduleIds: string[],\n) {\n  const modules = getModules()\n  const roleFeatures = collectRoleFeatures(modules, moduleIds)\n  if (!roleFeatures.superadmin.length && !roleFeatures.admin.length && !roleFeatures.employee.length) {\n    return\n  }\n  const normalizedTenant = normalizeTenantId(tenantId) ?? null\n  const [superadminRole, adminRole, employeeRole] = await Promise.all([\n    findRoleByName(em, 'superadmin', normalizedTenant),\n    findRoleByName(em, 'admin', normalizedTenant),\n    findRoleByName(em, 'employee', normalizedTenant),\n  ])\n  if (superadminRole && roleFeatures.superadmin.length) {\n    await ensureRoleAclFor(em, superadminRole, tenantId, roleFeatures.superadmin, { isSuperAdmin: true })\n  }\n  if (adminRole && roleFeatures.admin.length) {\n    await ensureRoleAclFor(em, adminRole, tenantId, roleFeatures.admin)\n  }\n  if (employeeRole && roleFeatures.employee.length) {\n    await ensureRoleAclFor(em, employeeRole, tenantId, roleFeatures.employee)\n  }\n}\n\nasync function safeImport<T>(label: string, loader: () => Promise<T>): Promise<T | null> {\n  try {\n    return await loader()\n  } catch (error) {\n    console.warn(`[upgrade-actions] Skipping ${label} because module import failed.`, error)\n    return null\n  }\n}\n\nexport const upgradeActions: UpgradeActionDefinition[] = [\n  {\n    id: 'configs.upgrades.catalog.examples',\n    version: '0.3.4',\n    messageKey: 'upgrades.v034.message',\n    ctaKey: 'upgrades.v034.cta',\n    successKey: 'upgrades.v034.success',\n    loadingKey: 'upgrades.v034.loading',\n    async run(ctx) {\n      const catalogSeeds = await safeImport('catalog examples', () =>\n        import('@open-mercato/core/modules/catalog/lib/seeds')\n      )\n      if (!catalogSeeds?.installExampleCatalogData) return\n      await catalogSeeds.installExampleCatalogData(\n        ctx.container,\n        { tenantId: ctx.tenantId, organizationId: ctx.organizationId },\n        ctx.em,\n      )\n    },\n  },\n  {\n    id: 'configs.upgrades.sales.examples',\n    version: '0.3.6',\n    messageKey: 'upgrades.v036.message',\n    ctaKey: 'upgrades.v036.cta',\n    successKey: 'upgrades.v036.success',\n    loadingKey: 'upgrades.v036.loading',\n    async run(ctx) {\n      const salesSeeds = await safeImport('sales examples', () =>\n        import('@open-mercato/core/modules/sales/seed/examples')\n      )\n      if (!salesSeeds?.seedSalesExamples) return\n      await salesSeeds.seedSalesExamples(ctx.em, ctx.container, {\n        tenantId: ctx.tenantId,\n        organizationId: ctx.organizationId,\n      })\n    },\n  },\n  {\n    id: 'configs.upgrades.examples.currencies_workflows',\n    version: '0.3.13',\n    messageKey: 'upgrades.v0313.message',\n    ctaKey: 'upgrades.v0313.cta',\n    successKey: 'upgrades.v0313.success',\n    loadingKey: 'upgrades.v0313.loading',\n    async run(ctx) {\n      const currenciesSeeds = await safeImport('currencies examples', () =>\n        import('@open-mercato/core/modules/currencies/lib/seeds')\n      )\n      const workflowsSeeds = await safeImport('workflows examples', () =>\n        import('@open-mercato/core/modules/workflows/lib/seeds')\n      )\n      const scope = { tenantId: ctx.tenantId, organizationId: ctx.organizationId }\n      if (currenciesSeeds?.seedExampleCurrencies) {\n        await currenciesSeeds.seedExampleCurrencies(ctx.em, scope)\n      }\n      if (workflowsSeeds?.seedExampleWorkflows) {\n        await workflowsSeeds.seedExampleWorkflows(ctx.em, scope)\n      }\n      await ensureRoleAclsForModules(ctx.em, ctx.tenantId, ['currencies', 'workflows'])\n    },\n  },\n  {\n    id: 'configs.upgrades.examples.planner_staff_resources',\n    version: '0.4.1',\n    messageKey: 'upgrades.v041.message',\n    ctaKey: 'upgrades.v041.cta',\n    successKey: 'upgrades.v041.success',\n    loadingKey: 'upgrades.v041.loading',\n    async run(ctx) {\n      const plannerSeeds = await safeImport('planner examples', () =>\n        import('@open-mercato/core/modules/planner/lib/seeds')\n      )\n      const staffSeeds = await safeImport('staff examples', () =>\n        import('@open-mercato/core/modules/staff/lib/seeds')\n      )\n      const resourcesSeeds = await safeImport('resources examples', () =>\n        import('@open-mercato/core/modules/resources/lib/seeds')\n      )\n      const scope = { tenantId: ctx.tenantId, organizationId: ctx.organizationId }\n      if (plannerSeeds?.seedPlannerAvailabilityRuleSetDefaults) {\n        await plannerSeeds.seedPlannerAvailabilityRuleSetDefaults(ctx.em, scope)\n      }\n      if (staffSeeds?.seedStaffTeamExamples) {\n        await staffSeeds.seedStaffTeamExamples(ctx.em, scope)\n      }\n      if (resourcesSeeds?.seedResourcesResourceExamples) {\n        await resourcesSeeds.seedResourcesResourceExamples(ctx.em, scope)\n      }\n      await ensureRoleAclsForModules(ctx.em, ctx.tenantId, ['planner', 'staff', 'resources'])\n    },\n  },\n]\n\nexport function actionsUpToVersion(version: string): UpgradeActionDefinition[] {\n  return upgradeActions\n    .filter((action) => compareVersions(action.version, version) <= 0)\n    .sort((a, b) => compareVersions(a.version, b.version) || a.id.localeCompare(b.id))\n}\n\nexport function findUpgradeAction(actionId: string, maxVersion: string): UpgradeActionDefinition | undefined {\n  const matches = actionsUpToVersion(maxVersion).filter((action) => action.id === actionId)\n  if (!matches.length) return undefined\n  return matches[matches.length - 1]\n}\n"],
+  "mappings": "AACA,YAAY,YAAY;AACxB,SAAS,kBAAkB;AAG3B,SAAS,MAAM,eAAe;AAC9B,SAAS,yBAAyB;AAyB3B,SAAS,gBAAgB,GAAW,GAAmB;AAC5D,QAAM,SAAS,OAAO,MAAM,OAAO,OAAO,CAAC,CAAC;AAC5C,QAAM,SAAS,OAAO,MAAM,OAAO,OAAO,CAAC,CAAC;AAC5C,MAAI,CAAC,QAAQ;AACX,UAAM,IAAI,MAAM,4BAA4B,CAAC,oDAAoD;AAAA,EACnG;AACA,MAAI,CAAC,QAAQ;AACX,UAAM,IAAI,MAAM,4BAA4B,CAAC,oDAAoD;AAAA,EACnG;AACA,SAAO,OAAO,QAAQ,QAAQ,MAAM;AACtC;AAIA,SAAS,oBAAoB,SAAmB,WAAiD;AAC/F,QAAM,SAAqC;AAAA,IACzC,YAAY,CAAC;AAAA,IACb,OAAO,CAAC;AAAA,IACR,UAAU,CAAC;AAAA,EACb;AACA,QAAM,YAAY,IAAI,IAAI,SAAS;AACnC,aAAW,OAAO,SAAS;AACzB,QAAI,CAAC,UAAU,IAAI,IAAI,EAAE,EAAG;AAC5B,UAAM,eAAe,IAAI,OAAO;AAChC,QAAI,cAAc,WAAY,QAAO,WAAW,KAAK,GAAG,aAAa,UAAU;AAC/E,QAAI,cAAc,MAAO,QAAO,MAAM,KAAK,GAAG,aAAa,KAAK;AAChE,QAAI,cAAc,SAAU,QAAO,SAAS,KAAK,GAAG,aAAa,QAAQ;AAAA,EAC3E;AACA,SAAO,aAAa,MAAM,KAAK,IAAI,IAAI,OAAO,UAAU,CAAC;AACzD,SAAO,QAAQ,MAAM,KAAK,IAAI,IAAI,OAAO,KAAK,CAAC;AAC/C,SAAO,WAAW,MAAM,KAAK,IAAI,IAAI,OAAO,QAAQ,CAAC;AACrD,SAAO;AACT;AAEA,eAAe,eACb,IACA,MACA,UACsB;AACtB,QAAM,mBAAmB,kBAAkB,YAAY,IAAI,KAAK;AAChE,MAAI,OAAO,MAAM,GAAG,QAAQ,MAAM,EAAE,MAAM,UAAU,iBAAiB,CAAC;AACtE,MAAI,CAAC,QAAQ,qBAAqB,MAAM;AACtC,WAAO,MAAM,GAAG,QAAQ,MAAM,EAAE,MAAM,UAAU,KAAK,CAAC;AAAA,EACxD;AACA,SAAO;AACT;AAEA,eAAe,iBACb,IACA,MACA,UACA,UACA,UAAsC,CAAC,GACvC;AACA,QAAM,WAAW,MAAM,GAAG,QAAQ,SAAS,EAAE,MAAM,SAAS,CAAC;AAC7D,MAAI,CAAC,UAAU;AACb,UAAM,MAAM,GAAG,OAAO,SAAS;AAAA,MAC7B;AAAA,MACA;AAAA,MACA,cAAc;AAAA,MACd,cAAc,CAAC,CAAC,QAAQ;AAAA,MACxB,WAAW,oBAAI,KAAK;AAAA,IACtB,CAAC;AACD,UAAM,GAAG,gBAAgB,GAAG;AAC5B;AAAA,EACF;AACA,QAAM,kBAAkB,MAAM,QAAQ,SAAS,YAAY,IAAI,SAAS,eAAe,CAAC;AACxF,QAAM,SAAS,MAAM,KAAK,oBAAI,IAAI,CAAC,GAAG,iBAAiB,GAAG,QAAQ,CAAC,CAAC;AACpE,QAAM,UACJ,OAAO,WAAW,gBAAgB,UAClC,OAAO,KAAK,CAAC,OAAO,UAAU,UAAU,gBAAgB,KAAK,CAAC;AAChE,MAAI,QAAS,UAAS,eAAe;AACrC,MAAI,QAAQ,gBAAgB,CAAC,SAAS,cAAc;AAClD,aAAS,eAAe;AAAA,EAC1B;AACA,MAAI,WAAW,QAAQ,cAAc;AACnC,UAAM,GAAG,gBAAgB,QAAQ;AAAA,EACnC;AACF;AAEA,eAAe,yBACb,IACA,UACA,WACA;AACA,QAAM,UAAU,WAAW;AAC3B,QAAM,eAAe,oBAAoB,SAAS,SAAS;AAC3D,MAAI,CAAC,aAAa,WAAW,UAAU,CAAC,aAAa,MAAM,UAAU,CAAC,aAAa,SAAS,QAAQ;AAClG;AAAA,EACF;AACA,QAAM,mBAAmB,kBAAkB,QAAQ,KAAK;AACxD,QAAM,CAAC,gBAAgB,WAAW,YAAY,IAAI,MAAM,QAAQ,IAAI;AAAA,IAClE,eAAe,IAAI,cAAc,gBAAgB;AAAA,IACjD,eAAe,IAAI,SAAS,gBAAgB;AAAA,IAC5C,eAAe,IAAI,YAAY,gBAAgB;AAAA,EACjD,CAAC;AACD,MAAI,kBAAkB,aAAa,WAAW,QAAQ;AACpD,UAAM,iBAAiB,IAAI,gBAAgB,UAAU,aAAa,YAAY,EAAE,cAAc,KAAK,CAAC;AAAA,EACtG;AACA,MAAI,aAAa,aAAa,MAAM,QAAQ;AAC1C,UAAM,iBAAiB,IAAI,WAAW,UAAU,aAAa,KAAK;AAAA,EACpE;AACA,MAAI,gBAAgB,aAAa,SAAS,QAAQ;AAChD,UAAM,iBAAiB,IAAI,cAAc,UAAU,aAAa,QAAQ;AAAA,EAC1E;AACF;AAEA,eAAe,WAAc,OAAe,QAA6C;AACvF,MAAI;AACF,WAAO,MAAM,OAAO;AAAA,EACtB,SAAS,OAAO;AACd,YAAQ,KAAK,8BAA8B,KAAK,kCAAkC,KAAK;AACvF,WAAO;AAAA,EACT;AACF;AAEO,MAAM,iBAA4C;AAAA,EACvD;AAAA,IACE,IAAI;AAAA,IACJ,SAAS;AAAA,IACT,YAAY;AAAA,IACZ,QAAQ;AAAA,IACR,YAAY;AAAA,IACZ,YAAY;AAAA,IACZ,MAAM,IAAI,KAAK;AACb,YAAM,eAAe,MAAM;AAAA,QAAW;AAAA,QAAoB,MACxD,OAAO,8CAA8C;AAAA,MACvD;AACA,UAAI,CAAC,cAAc,0BAA2B;AAC9C,YAAM,aAAa;AAAA,QACjB,IAAI;AAAA,QACJ,EAAE,UAAU,IAAI,UAAU,gBAAgB,IAAI,eAAe;AAAA,QAC7D,IAAI;AAAA,MACN;AAAA,IACF;AAAA,EACF;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,SAAS;AAAA,IACT,YAAY;AAAA,IACZ,QAAQ;AAAA,IACR,YAAY;AAAA,IACZ,YAAY;AAAA,IACZ,MAAM,IAAI,KAAK;AACb,YAAM,aAAa,MAAM;AAAA,QAAW;AAAA,QAAkB,MACpD,OAAO,gDAAgD;AAAA,MACzD;AACA,UAAI,CAAC,YAAY,kBAAmB;AACpC,YAAM,WAAW,kBAAkB,IAAI,IAAI,IAAI,WAAW;AAAA,QACxD,UAAU,IAAI;AAAA,QACd,gBAAgB,IAAI;AAAA,MACtB,CAAC;AAAA,IACH;AAAA,EACF;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,SAAS;AAAA,IACT,YAAY;AAAA,IACZ,QAAQ;AAAA,IACR,YAAY;AAAA,IACZ,YAAY;AAAA,IACZ,MAAM,IAAI,KAAK;AACb,YAAM,kBAAkB,MAAM;AAAA,QAAW;AAAA,QAAuB,MAC9D,OAAO,iDAAiD;AAAA,MAC1D;AACA,YAAM,iBAAiB,MAAM;AAAA,QAAW;AAAA,QAAsB,MAC5D,OAAO,gDAAgD;AAAA,MACzD;AACA,YAAM,QAAQ,EAAE,UAAU,IAAI,UAAU,gBAAgB,IAAI,eAAe;AAC3E,UAAI,iBAAiB,uBAAuB;AAC1C,cAAM,gBAAgB,sBAAsB,IAAI,IAAI,KAAK;AAAA,MAC3D;AACA,UAAI,gBAAgB,sBAAsB;AACxC,cAAM,eAAe,qBAAqB,IAAI,IAAI,KAAK;AAAA,MACzD;AACA,YAAM,yBAAyB,IAAI,IAAI,IAAI,UAAU,CAAC,cAAc,WAAW,CAAC;AAAA,IAClF;AAAA,EACF;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,SAAS;AAAA,IACT,YAAY;AAAA,IACZ,QAAQ;AAAA,IACR,YAAY;AAAA,IACZ,YAAY;AAAA,IACZ,MAAM,IAAI,KAAK;AACb,YAAM,eAAe,MAAM;AAAA,QAAW;AAAA,QAAoB,MACxD,OAAO,8CAA8C;AAAA,MACvD;AACA,YAAM,aAAa,MAAM;AAAA,QAAW;AAAA,QAAkB,MACpD,OAAO,4CAA4C;AAAA,MACrD;AACA,YAAM,iBAAiB,MAAM;AAAA,QAAW;AAAA,QAAsB,MAC5D,OAAO,gDAAgD;AAAA,MACzD;AACA,YAAM,QAAQ,EAAE,UAAU,IAAI,UAAU,gBAAgB,IAAI,eAAe;AAC3E,UAAI,cAAc,wCAAwC;AACxD,cAAM,aAAa,uCAAuC,IAAI,IAAI,KAAK;AAAA,MACzE;AACA,UAAI,YAAY,uBAAuB;AACrC,cAAM,WAAW,sBAAsB,IAAI,IAAI,KAAK;AAAA,MACtD;AACA,UAAI,gBAAgB,+BAA+B;AACjD,cAAM,eAAe,8BAA8B,IAAI,IAAI,KAAK;AAAA,MAClE;AACA,YAAM,yBAAyB,IAAI,IAAI,IAAI,UAAU,CAAC,WAAW,SAAS,WAAW,CAAC;AAAA,IACxF;AAAA,EACF;AACF;AAEO,SAAS,mBAAmB,SAA4C;AAC7E,SAAO,eACJ,OAAO,CAAC,WAAW,gBAAgB,OAAO,SAAS,OAAO,KAAK,CAAC,EAChE,KAAK,CAAC,GAAG,MAAM,gBAAgB,EAAE,SAAS,EAAE,OAAO,KAAK,EAAE,GAAG,cAAc,EAAE,EAAE,CAAC;AACrF;AAEO,SAAS,kBAAkB,UAAkB,YAAyD;AAC3G,QAAM,UAAU,mBAAmB,UAAU,EAAE,OAAO,CAAC,WAAW,OAAO,OAAO,QAAQ;AACxF,MAAI,CAAC,QAAQ,OAAQ,QAAO;AAC5B,SAAO,QAAQ,QAAQ,SAAS,CAAC;AACnC;",
   "names": []
 }