@open-mercato/core 0.5.1-develop.2663.2c29774b5b → 0.5.1-develop.2681.c559bb2bc3

package/dist/modules/customers/api/entity-roles-factory.js

@@ -0,0 +1,471 @@
+import { NextResponse } from "next/server";
+import { z } from "zod";
+import { serializeOperationMetadata } from "@open-mercato/shared/lib/commands/operationMetadata";
+import { readJsonSafe } from "@open-mercato/shared/lib/http/readJsonSafe";
+import { validateCrudMutationGuard, runCrudMutationGuardAfterSuccess } from "@open-mercato/shared/lib/crud/mutation-guard";
+import { CrudHttpError } from "@open-mercato/shared/lib/crud/errors";
+import { resolveTranslations } from "@open-mercato/shared/lib/i18n/server";
+import { findOneWithDecryption, findWithDecryption } from "@open-mercato/shared/lib/encryption/find";
+import { User } from "@open-mercato/core/modules/auth/data/entities";
+import { CustomerEntity, CustomerEntityRole } from "../data/entities.js";
+import { entityRoleCreateSchema, entityRoleUpdateSchema, entityRoleDeleteSchema } from "../data/validators.js";
+import { withScopedPayload } from "./utils.js";
+import { resolveCustomersRequestContext, resolveAuthActorId } from "../lib/interactionRequestContext.js";
+const paramsSchema = z.object({ id: z.string().uuid() });
+const roleIdQuerySchema = z.object({ roleId: z.string().uuid() });
+const createBodySchema = z.object({
+  roleType: z.string().trim().min(1).max(100),
+  userId: z.string().uuid()
+});
+const updateBodySchema = z.object({
+  userId: z.string().uuid()
+});
+const listItemSchema = z.object({
+  id: z.string().uuid(),
+  entityType: z.enum(["company", "person"]),
+  entityId: z.string().uuid(),
+  userId: z.string().uuid(),
+  userName: z.string().nullable().optional(),
+  userEmail: z.string().nullable().optional(),
+  userPhone: z.string().nullable().optional(),
+  roleType: z.string(),
+  createdAt: z.string(),
+  updatedAt: z.string()
+});
+const listResponseSchema = z.object({ items: z.array(listItemSchema) });
+const okResponseSchema = z.object({ ok: z.boolean() });
+const createResponseSchema = z.object({ id: z.string().uuid() });
+const errorSchema = z.object({ error: z.string() });
+function getRoleContext(entityType, entityId) {
+  const resourceKind = entityType === "company" ? "customers.company" : "customers.person";
+  return { entityType, entityId, resourceKind, resourceId: entityId };
+}
+function buildValidationErrorResponse(error, translate) {
+  return NextResponse.json(
+    { error: translate("customers.errors.validationFailed", "Validation failed"), fieldErrors: error.flatten().fieldErrors },
+    { status: 400 }
+  );
+}
+function withOperationMetadata(response, logEntry, fallback) {
+  if (!logEntry?.undoToken || !logEntry.id || !logEntry.commandId) return response;
+  response.headers.set(
+    "x-om-operation",
+    serializeOperationMetadata({
+      id: logEntry.id,
+      undoToken: logEntry.undoToken,
+      commandId: logEntry.commandId,
+      actionLabel: logEntry.actionLabel ?? null,
+      resourceKind: logEntry.resourceKind ?? fallback.resourceKind,
+      resourceId: logEntry.resourceId ?? fallback.resourceId,
+      executedAt: logEntry.createdAt instanceof Date ? logEntry.createdAt.toISOString() : (/* @__PURE__ */ new Date()).toISOString()
+    })
+  );
+  return response;
+}
+async function buildContext(request) {
+  const context = await resolveCustomersRequestContext(request);
+  return {
+    ...context,
+    ctx: context.commandContext
+  };
+}
+function collectAllowedOrganizationIds(scope, auth) {
+  const allowedOrgIds = /* @__PURE__ */ new Set();
+  if (scope?.filterIds?.length) scope.filterIds.forEach((id) => allowedOrgIds.add(id));
+  else if (auth.orgId) allowedOrgIds.add(auth.orgId);
+  return allowedOrgIds;
+}
+function ensureRouteOrganizationAccess(organizationId, scope, auth, translate) {
+  const allowedOrgIds = collectAllowedOrganizationIds(scope, auth);
+  if (allowedOrgIds.size > 0 && !allowedOrgIds.has(organizationId)) {
+    throw new CrudHttpError(403, { error: translate("customers.errors.access_denied", "Access denied") });
+  }
+}
+async function ensureFeatureOnOrganization(container, auth, feature, organizationId, translate) {
+  const actorId = resolveAuthActorId(auth);
+  if (!actorId) {
+    throw new CrudHttpError(401, { error: translate("customers.errors.unauthorized", "Unauthorized") });
+  }
+  let rbac;
+  try {
+    rbac = container.resolve("rbacService");
+  } catch (err) {
+    console.error("[customers.entity-roles-factory] rbacService resolve failed", err);
+    rbac = void 0;
+  }
+  if (!rbac) {
+    throw new CrudHttpError(500, { error: translate("customers.errors.internal", "Internal error") });
+  }
+  const hasFeature = await rbac.userHasAllFeatures(actorId, [feature], {
+    tenantId: auth.tenantId,
+    organizationId
+  });
+  if (!hasFeature) {
+    throw new CrudHttpError(403, { error: translate("customers.errors.access_denied", "Access denied") });
+  }
+}
+async function resolveEntityRouteScope(em, auth, scope, entityType, entityId, translate) {
+  const entity = await findOneWithDecryption(
+    em,
+    CustomerEntity,
+    { id: entityId, kind: entityType, tenantId: auth.tenantId, deletedAt: null },
+    void 0,
+    { tenantId: auth.tenantId, organizationId: scope?.selectedId ?? auth.orgId ?? null }
+  );
+  if (!entity || entity.tenantId !== auth.tenantId) {
+    throw new CrudHttpError(404, { error: translate("customers.errors.customer_not_found", "Customer not found") });
+  }
+  ensureRouteOrganizationAccess(entity.organizationId, scope, auth, translate);
+  return {
+    entity,
+    organizationId: entity.organizationId,
+    tenantId: entity.tenantId
+  };
+}
+async function resolveRoleRouteScope(em, auth, scope, entityType, entityId, roleId, translate) {
+  const role = await findOneWithDecryption(
+    em,
+    CustomerEntityRole,
+    { id: roleId, tenantId: auth.tenantId, entityType, entityId, deletedAt: null },
+    void 0,
+    { tenantId: auth.tenantId, organizationId: scope?.selectedId ?? auth.orgId ?? null }
+  );
+  if (!role || role.tenantId !== auth.tenantId || role.entityType !== entityType || role.entityId !== entityId) {
+    throw new CrudHttpError(404, { error: translate("customers.errors.role_not_found", "Role not found") });
+  }
+  ensureRouteOrganizationAccess(role.organizationId, scope, auth, translate);
+  return {
+    role,
+    organizationId: role.organizationId,
+    tenantId: role.tenantId
+  };
+}
+function createScopedCommandContext(ctx, organizationId) {
+  return {
+    ...ctx,
+    selectedOrganizationId: organizationId,
+    organizationIds: [organizationId]
+  };
+}
+const entityRolesMetadata = {
+  GET: { requireAuth: true, requireFeatures: ["customers.roles.view"] },
+  POST: { requireAuth: true, requireFeatures: ["customers.roles.manage"] },
+  PUT: { requireAuth: true, requireFeatures: ["customers.roles.manage"] },
+  DELETE: { requireAuth: true, requireFeatures: ["customers.roles.manage"] }
+};
+function buildEntityRolesOpenApi(entityType) {
+  const label = entityType === "company" ? "company" : "person";
+  return {
+    tag: "Customers",
+    summary: `${label.charAt(0).toUpperCase() + label.slice(1)} role assignments`,
+    pathParams: paramsSchema,
+    methods: {
+      GET: {
+        summary: `List roles for a ${label}`,
+        responses: [{ status: 200, description: "Role assignments", schema: listResponseSchema }],
+        errors: [
+          { status: 400, description: "Invalid request", schema: errorSchema },
+          { status: 401, description: "Unauthorized", schema: errorSchema }
+        ]
+      },
+      POST: {
+        summary: `Assign a role to a ${label}`,
+        requestBody: { contentType: "application/json", schema: createBodySchema },
+        responses: [{ status: 201, description: "Role created", schema: createResponseSchema }],
+        errors: [
+          { status: 400, description: "Invalid request", schema: errorSchema },
+          { status: 401, description: "Unauthorized", schema: errorSchema },
+          { status: 409, description: "Role already assigned", schema: errorSchema }
+        ]
+      },
+      PUT: {
+        summary: `Update a ${label} role assignment`,
+        query: roleIdQuerySchema,
+        requestBody: { contentType: "application/json", schema: updateBodySchema },
+        responses: [{ status: 200, description: "Role updated", schema: okResponseSchema }],
+        errors: [
+          { status: 400, description: "Invalid request", schema: errorSchema },
+          { status: 401, description: "Unauthorized", schema: errorSchema },
+          { status: 404, description: "Role not found", schema: errorSchema }
+        ]
+      },
+      DELETE: {
+        summary: `Remove a ${label} role assignment`,
+        query: roleIdQuerySchema,
+        responses: [{ status: 200, description: "Role deleted", schema: okResponseSchema }],
+        errors: [
+          { status: 400, description: "Invalid request", schema: errorSchema },
+          { status: 401, description: "Unauthorized", schema: errorSchema },
+          { status: 404, description: "Role not found", schema: errorSchema }
+        ]
+      }
+    }
+  };
+}
+function createEntityRolesHandlers(entityType) {
+  const resourceKind = entityType === "company" ? "customers.company" : "customers.person";
+  const logPrefix = entityType === "company" ? "customers.company.roles" : "customers.person.roles";
+  async function GET(request, { params }) {
+    const { translate } = await resolveTranslations();
+    try {
+      const { id: entityId } = paramsSchema.parse(params);
+      const { container, em, auth, scope } = await buildContext(request);
+      const targetScope = await resolveEntityRouteScope(em, auth, scope, entityType, entityId, translate);
+      await ensureFeatureOnOrganization(container, auth, "customers.roles.view", targetScope.organizationId, translate);
+      const roles = await findWithDecryption(
+        em,
+        CustomerEntityRole,
+        {
+          entityType,
+          entityId,
+          organizationId: targetScope.organizationId,
+          tenantId: targetScope.tenantId,
+          deletedAt: null
+        },
+        { orderBy: { roleType: "asc" } },
+        {
+          tenantId: targetScope.tenantId,
+          organizationId: targetScope.organizationId
+        }
+      );
+      const userIds = Array.from(new Set(roles.map((role) => role.userId).filter((value) => typeof value === "string" && value.length > 0)));
+      const users = userIds.length ? await findWithDecryption(
+        em,
+        User,
+        {
+          id: { $in: userIds },
+          deletedAt: null,
+          ...targetScope.tenantId ? { tenantId: targetScope.tenantId } : {}
+        },
+        void 0,
+        {
+          tenantId: targetScope.tenantId,
+          organizationId: targetScope.organizationId
+        }
+      ) : [];
+      const userMap = new Map(users.map((user) => [user.id, {
+        name: user.name ?? null,
+        email: user.email ?? null,
+        phone: null
+      }]));
+      return NextResponse.json({
+        items: roles.map((role) => ({
+          ...userMap.has(role.userId) ? {
+            userName: userMap.get(role.userId)?.name ?? null,
+            userEmail: userMap.get(role.userId)?.email ?? null,
+            userPhone: userMap.get(role.userId)?.phone ?? null
+          } : {},
+          id: role.id,
+          entityType: role.entityType,
+          entityId: role.entityId,
+          userId: role.userId,
+          roleType: role.roleType,
+          createdAt: role.createdAt.toISOString(),
+          updatedAt: role.updatedAt.toISOString()
+        }))
+      });
+    } catch (err) {
+      if (err instanceof CrudHttpError) return NextResponse.json(err.body, { status: err.status });
+      if (err instanceof z.ZodError) return buildValidationErrorResponse(err, translate);
+      console.error(`${logPrefix}.get failed`, err);
+      return NextResponse.json({ error: translate("customers.errors.failed_to_load_roles", "Failed to load roles") }, { status: 500 });
+    }
+  }
+  async function POST(request, { params }) {
+    const { translate } = await resolveTranslations();
+    try {
+      const { id: entityId } = paramsSchema.parse(params);
+      const { container, em, auth, scope, ctx } = await buildContext(request);
+      const targetScope = await resolveEntityRouteScope(em, auth, scope, entityType, entityId, translate);
+      await ensureFeatureOnOrganization(container, auth, "customers.roles.manage", targetScope.organizationId, translate);
+      const commandCtx = createScopedCommandContext(ctx, targetScope.organizationId);
+      const rawBody = await readJsonSafe(request, {});
+      const scoped = withScopedPayload(
+        {
+          ...rawBody,
+          organizationId: targetScope.organizationId,
+          tenantId: targetScope.tenantId,
+          ...getRoleContext(entityType, entityId)
+        },
+        commandCtx,
+        translate
+      );
+      const parsed = entityRoleCreateSchema.parse(scoped);
+      const guardUserId = resolveAuthActorId(auth);
+      const guardResult = await validateCrudMutationGuard(container, {
+        tenantId: targetScope.tenantId,
+        organizationId: targetScope.organizationId,
+        userId: guardUserId,
+        resourceKind,
+        resourceId: entityId,
+        operation: "custom",
+        requestMethod: request.method,
+        requestHeaders: request.headers,
+        mutationPayload: rawBody
+      });
+      if (guardResult && !guardResult.ok) return NextResponse.json(guardResult.body, { status: guardResult.status });
+      const commandBus = container.resolve("commandBus");
+      const { result, logEntry } = await commandBus.execute(
+        "customers.entityRoles.create",
+        { input: parsed, ctx: commandCtx }
+      );
+      if (guardResult?.ok && guardResult.shouldRunAfterSuccess) {
+        await runCrudMutationGuardAfterSuccess(container, {
+          tenantId: targetScope.tenantId,
+          organizationId: targetScope.organizationId,
+          userId: guardUserId,
+          resourceKind,
+          resourceId: entityId,
+          operation: "custom",
+          requestMethod: request.method,
+          requestHeaders: request.headers,
+          metadata: guardResult.metadata ?? null
+        });
+      }
+      return withOperationMetadata(
+        NextResponse.json({ id: result?.roleId ?? null }, { status: 201 }),
+        logEntry,
+        { resourceKind, resourceId: entityId }
+      );
+    } catch (err) {
+      if (err instanceof CrudHttpError) return NextResponse.json(err.body, { status: err.status });
+      if (err instanceof z.ZodError) return buildValidationErrorResponse(err, translate);
+      console.error(`${logPrefix}.post failed`, err);
+      return NextResponse.json({ error: translate("customers.errors.failed_to_assign_role", "Failed to assign role") }, { status: 500 });
+    }
+  }
+  async function PUT(request, { params }) {
+    const { translate } = await resolveTranslations();
+    try {
+      const { id: entityId } = paramsSchema.parse(params);
+      const { roleId } = roleIdQuerySchema.parse(Object.fromEntries(new URL(request.url).searchParams));
+      const { container, em, auth, scope, ctx } = await buildContext(request);
+      const targetScope = await resolveRoleRouteScope(em, auth, scope, entityType, entityId, roleId, translate);
+      await ensureFeatureOnOrganization(container, auth, "customers.roles.manage", targetScope.organizationId, translate);
+      const commandCtx = createScopedCommandContext(ctx, targetScope.organizationId);
+      const rawBody = await readJsonSafe(request, {});
+      const scoped = withScopedPayload(
+        {
+          ...rawBody,
+          id: roleId,
+          organizationId: targetScope.organizationId,
+          tenantId: targetScope.tenantId
+        },
+        commandCtx,
+        translate
+      );
+      const parsed = entityRoleUpdateSchema.parse(scoped);
+      const guardUserId = resolveAuthActorId(auth);
+      const guardResult = await validateCrudMutationGuard(container, {
+        tenantId: targetScope.tenantId,
+        organizationId: targetScope.organizationId,
+        userId: guardUserId,
+        resourceKind,
+        resourceId: entityId,
+        operation: "custom",
+        requestMethod: request.method,
+        requestHeaders: request.headers,
+        mutationPayload: { roleId, ...rawBody }
+      });
+      if (guardResult && !guardResult.ok) return NextResponse.json(guardResult.body, { status: guardResult.status });
+      const commandBus = container.resolve("commandBus");
+      const { logEntry } = await commandBus.execute(
+        "customers.entityRoles.update",
+        { input: parsed, ctx: commandCtx }
+      );
+      if (guardResult?.ok && guardResult.shouldRunAfterSuccess) {
+        await runCrudMutationGuardAfterSuccess(container, {
+          tenantId: targetScope.tenantId,
+          organizationId: targetScope.organizationId,
+          userId: guardUserId,
+          resourceKind,
+          resourceId: entityId,
+          operation: "custom",
+          requestMethod: request.method,
+          requestHeaders: request.headers,
+          metadata: guardResult.metadata ?? null
+        });
+      }
+      return withOperationMetadata(
+        NextResponse.json({ ok: true }),
+        logEntry,
+        { resourceKind, resourceId: entityId }
+      );
+    } catch (err) {
+      if (err instanceof CrudHttpError) return NextResponse.json(err.body, { status: err.status });
+      if (err instanceof z.ZodError) return buildValidationErrorResponse(err, translate);
+      console.error(`${logPrefix}.put failed`, err);
+      return NextResponse.json({ error: translate("customers.errors.failed_to_update_role", "Failed to update role") }, { status: 500 });
+    }
+  }
+  async function DELETE(request, { params }) {
+    const { translate } = await resolveTranslations();
+    try {
+      const { id: entityId } = paramsSchema.parse(params);
+      const { roleId } = roleIdQuerySchema.parse(Object.fromEntries(new URL(request.url).searchParams));
+      const { container, em, auth, scope, ctx } = await buildContext(request);
+      const targetScope = await resolveRoleRouteScope(em, auth, scope, entityType, entityId, roleId, translate);
+      await ensureFeatureOnOrganization(container, auth, "customers.roles.manage", targetScope.organizationId, translate);
+      const commandCtx = createScopedCommandContext(ctx, targetScope.organizationId);
+      const parsed = entityRoleDeleteSchema.parse(
+        withScopedPayload(
+          {
+            id: roleId,
+            organizationId: targetScope.organizationId,
+            tenantId: targetScope.tenantId
+          },
+          commandCtx,
+          translate
+        )
+      );
+      const guardUserId = resolveAuthActorId(auth);
+      const guardResult = await validateCrudMutationGuard(container, {
+        tenantId: targetScope.tenantId,
+        organizationId: targetScope.organizationId,
+        userId: guardUserId,
+        resourceKind,
+        resourceId: entityId,
+        operation: "custom",
+        requestMethod: request.method,
+        requestHeaders: request.headers,
+        mutationPayload: { roleId }
+      });
+      if (guardResult && !guardResult.ok) return NextResponse.json(guardResult.body, { status: guardResult.status });
+      const commandBus = container.resolve("commandBus");
+      const { logEntry } = await commandBus.execute(
+        "customers.entityRoles.delete",
+        { input: parsed, ctx: commandCtx }
+      );
+      if (guardResult?.ok && guardResult.shouldRunAfterSuccess) {
+        await runCrudMutationGuardAfterSuccess(container, {
+          tenantId: targetScope.tenantId,
+          organizationId: targetScope.organizationId,
+          userId: guardUserId,
+          resourceKind,
+          resourceId: entityId,
+          operation: "custom",
+          requestMethod: request.method,
+          requestHeaders: request.headers,
+          metadata: guardResult.metadata ?? null
+        });
+      }
+      return withOperationMetadata(
+        NextResponse.json({ ok: true }),
+        logEntry,
+        { resourceKind, resourceId: entityId }
+      );
+    } catch (err) {
+      if (err instanceof CrudHttpError) return NextResponse.json(err.body, { status: err.status });
+      if (err instanceof z.ZodError) return buildValidationErrorResponse(err, translate);
+      console.error(`${logPrefix}.delete failed`, err);
+      return NextResponse.json({ error: translate("customers.errors.failed_to_delete_role", "Failed to delete role") }, { status: 500 });
+    }
+  }
+  return { GET, POST, PUT, DELETE };
+}
+export {
+  buildEntityRolesOpenApi,
+  createEntityRolesHandlers,
+  entityRolesMetadata
+};
+//# sourceMappingURL=entity-roles-factory.js.map

package/dist/modules/customers/api/entity-roles-factory.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/customers/api/entity-roles-factory.ts"],
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { CommandBus } from '@open-mercato/shared/lib/commands'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { serializeOperationMetadata } from '@open-mercato/shared/lib/commands/operationMetadata'\nimport { readJsonSafe } from '@open-mercato/shared/lib/http/readJsonSafe'\nimport { validateCrudMutationGuard, runCrudMutationGuardAfterSuccess } from '@open-mercato/shared/lib/crud/mutation-guard'\nimport { CrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { findOneWithDecryption, findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { User } from '@open-mercato/core/modules/auth/data/entities'\nimport type { RbacService } from '@open-mercato/core/modules/auth/services/rbacService'\nimport { CustomerEntity, CustomerEntityRole } from '../data/entities'\nimport { entityRoleCreateSchema, entityRoleUpdateSchema, entityRoleDeleteSchema, type EntityRoleCreateInput, type EntityRoleUpdateInput, type EntityRoleDeleteInput } from '../data/validators'\nimport { withScopedPayload } from './utils'\nimport { resolveCustomersRequestContext, resolveAuthActorId } from '../lib/interactionRequestContext'\n\nconst paramsSchema = z.object({ id: z.string().uuid() })\nconst roleIdQuerySchema = z.object({ roleId: z.string().uuid() })\n\nconst createBodySchema = z.object({\n  roleType: z.string().trim().min(1).max(100),\n  userId: z.string().uuid(),\n})\nconst updateBodySchema = z.object({\n  userId: z.string().uuid(),\n})\n\nconst listItemSchema = z.object({\n  id: z.string().uuid(),\n  entityType: z.enum(['company', 'person']),\n  entityId: z.string().uuid(),\n  userId: z.string().uuid(),\n  userName: z.string().nullable().optional(),\n  userEmail: z.string().nullable().optional(),\n  userPhone: z.string().nullable().optional(),\n  roleType: z.string(),\n  createdAt: z.string(),\n  updatedAt: z.string(),\n})\n\nconst listResponseSchema = z.object({ items: z.array(listItemSchema) })\nconst okResponseSchema = z.object({ ok: z.boolean() })\nconst createResponseSchema = z.object({ id: z.string().uuid() })\nconst errorSchema = z.object({ error: z.string() })\n\ntype EntityType = 'company' | 'person'\n\ntype Translator = Awaited<ReturnType<typeof resolveTranslations>>['translate']\n\nfunction getRoleContext(entityType: EntityType, entityId: string) {\n  const resourceKind = entityType === 'company' ? 'customers.company' : 'customers.person'\n  return { entityType, entityId, resourceKind, resourceId: entityId }\n}\n\nfunction buildValidationErrorResponse(error: z.ZodError, translate: Translator) {\n  return NextResponse.json(\n    { error: translate('customers.errors.validationFailed', 'Validation failed'), fieldErrors: error.flatten().fieldErrors },\n    { status: 400 },\n  )\n}\n\nfunction withOperationMetadata(\n  response: NextResponse,\n  logEntry: { undoToken?: string | null; id?: string | null; commandId?: string | null; actionLabel?: string | null; resourceKind?: string | null; resourceId?: string | null; createdAt?: Date | null } | null | undefined,\n  fallback: { resourceKind: string; resourceId: string | null },\n) {\n  if (!logEntry?.undoToken || !logEntry.id || !logEntry.commandId) return response\n  response.headers.set(\n    'x-om-operation',\n    serializeOperationMetadata({\n      id: logEntry.id,\n      undoToken: logEntry.undoToken,\n      commandId: logEntry.commandId,\n      actionLabel: logEntry.actionLabel ?? null,\n      resourceKind: logEntry.resourceKind ?? fallback.resourceKind,\n      resourceId: logEntry.resourceId ?? fallback.resourceId,\n      executedAt: logEntry.createdAt instanceof Date ? logEntry.createdAt.toISOString() : new Date().toISOString(),\n    }),\n  )\n  return response\n}\n\nasync function buildContext(request: Request) {\n  const context = await resolveCustomersRequestContext(request)\n  return {\n    ...context,\n    ctx: context.commandContext,\n  }\n}\n\nfunction collectAllowedOrganizationIds(\n  scope: Awaited<ReturnType<typeof resolveCustomersRequestContext>>['scope'],\n  auth: Awaited<ReturnType<typeof resolveCustomersRequestContext>>['auth'],\n) {\n  const allowedOrgIds = new Set<string>()\n  if (scope?.filterIds?.length) scope.filterIds.forEach((id) => allowedOrgIds.add(id))\n  else if (auth.orgId) allowedOrgIds.add(auth.orgId)\n  return allowedOrgIds\n}\n\nfunction ensureRouteOrganizationAccess(\n  organizationId: string,\n  scope: Awaited<ReturnType<typeof resolveCustomersRequestContext>>['scope'],\n  auth: Awaited<ReturnType<typeof resolveCustomersRequestContext>>['auth'],\n  translate: Translator,\n) {\n  const allowedOrgIds = collectAllowedOrganizationIds(scope, auth)\n  if (allowedOrgIds.size > 0 && !allowedOrgIds.has(organizationId)) {\n    throw new CrudHttpError(403, { error: translate('customers.errors.access_denied', 'Access denied') })\n  }\n}\n\nasync function ensureFeatureOnOrganization(\n  container: Awaited<ReturnType<typeof resolveCustomersRequestContext>>['container'],\n  auth: Awaited<ReturnType<typeof resolveCustomersRequestContext>>['auth'],\n  feature: string,\n  organizationId: string,\n  translate: Translator,\n) {\n  const actorId = resolveAuthActorId(auth)\n  if (!actorId) {\n    throw new CrudHttpError(401, { error: translate('customers.errors.unauthorized', 'Unauthorized') })\n  }\n  let rbac: RbacService | undefined\n  try {\n    rbac = container.resolve('rbacService') as RbacService | undefined\n  } catch (err) {\n    console.error('[customers.entity-roles-factory] rbacService resolve failed', err)\n    rbac = undefined\n  }\n  if (!rbac) {\n    throw new CrudHttpError(500, { error: translate('customers.errors.internal', 'Internal error') })\n  }\n  const hasFeature = await rbac.userHasAllFeatures(actorId, [feature], {\n    tenantId: auth.tenantId,\n    organizationId,\n  })\n  if (!hasFeature) {\n    throw new CrudHttpError(403, { error: translate('customers.errors.access_denied', 'Access denied') })\n  }\n}\n\nasync function resolveEntityRouteScope(\n  em: Awaited<ReturnType<typeof resolveCustomersRequestContext>>['em'],\n  auth: Awaited<ReturnType<typeof resolveCustomersRequestContext>>['auth'],\n  scope: Awaited<ReturnType<typeof resolveCustomersRequestContext>>['scope'],\n  entityType: EntityType,\n  entityId: string,\n  translate: Translator,\n) {\n  const entity = await findOneWithDecryption(\n    em,\n    CustomerEntity,\n    { id: entityId, kind: entityType, tenantId: auth.tenantId, deletedAt: null },\n    undefined,\n    { tenantId: auth.tenantId, organizationId: scope?.selectedId ?? auth.orgId ?? null },\n  )\n  if (!entity || entity.tenantId !== auth.tenantId) {\n    throw new CrudHttpError(404, { error: translate('customers.errors.customer_not_found', 'Customer not found') })\n  }\n  ensureRouteOrganizationAccess(entity.organizationId, scope, auth, translate)\n  return {\n    entity,\n    organizationId: entity.organizationId,\n    tenantId: entity.tenantId,\n  }\n}\n\nasync function resolveRoleRouteScope(\n  em: Awaited<ReturnType<typeof resolveCustomersRequestContext>>['em'],\n  auth: Awaited<ReturnType<typeof resolveCustomersRequestContext>>['auth'],\n  scope: Awaited<ReturnType<typeof resolveCustomersRequestContext>>['scope'],\n  entityType: EntityType,\n  entityId: string,\n  roleId: string,\n  translate: Translator,\n) {\n  const role = await findOneWithDecryption(\n    em,\n    CustomerEntityRole,\n    { id: roleId, tenantId: auth.tenantId, entityType, entityId, deletedAt: null },\n    undefined,\n    { tenantId: auth.tenantId, organizationId: scope?.selectedId ?? auth.orgId ?? null },\n  )\n  if (\n    !role ||\n    role.tenantId !== auth.tenantId ||\n    role.entityType !== entityType ||\n    role.entityId !== entityId\n  ) {\n    throw new CrudHttpError(404, { error: translate('customers.errors.role_not_found', 'Role not found') })\n  }\n  ensureRouteOrganizationAccess(role.organizationId, scope, auth, translate)\n  return {\n    role,\n    organizationId: role.organizationId,\n    tenantId: role.tenantId,\n  }\n}\n\nfunction createScopedCommandContext(\n  ctx: Awaited<ReturnType<typeof buildContext>>['ctx'],\n  organizationId: string,\n) {\n  return {\n    ...ctx,\n    selectedOrganizationId: organizationId,\n    organizationIds: [organizationId],\n  }\n}\n\nexport const entityRolesMetadata = {\n  GET: { requireAuth: true, requireFeatures: ['customers.roles.view'] },\n  POST: { requireAuth: true, requireFeatures: ['customers.roles.manage'] },\n  PUT: { requireAuth: true, requireFeatures: ['customers.roles.manage'] },\n  DELETE: { requireAuth: true, requireFeatures: ['customers.roles.manage'] },\n}\n\nexport function buildEntityRolesOpenApi(entityType: EntityType): OpenApiRouteDoc {\n  const label = entityType === 'company' ? 'company' : 'person'\n  return {\n    tag: 'Customers',\n    summary: `${label.charAt(0).toUpperCase() + label.slice(1)} role assignments`,\n    pathParams: paramsSchema,\n    methods: {\n      GET: {\n        summary: `List roles for a ${label}`,\n        responses: [{ status: 200, description: 'Role assignments', schema: listResponseSchema }],\n        errors: [\n          { status: 400, description: 'Invalid request', schema: errorSchema },\n          { status: 401, description: 'Unauthorized', schema: errorSchema },\n        ],\n      },\n      POST: {\n        summary: `Assign a role to a ${label}`,\n        requestBody: { contentType: 'application/json', schema: createBodySchema },\n        responses: [{ status: 201, description: 'Role created', schema: createResponseSchema }],\n        errors: [\n          { status: 400, description: 'Invalid request', schema: errorSchema },\n          { status: 401, description: 'Unauthorized', schema: errorSchema },\n          { status: 409, description: 'Role already assigned', schema: errorSchema },\n        ],\n      },\n      PUT: {\n        summary: `Update a ${label} role assignment`,\n        query: roleIdQuerySchema,\n        requestBody: { contentType: 'application/json', schema: updateBodySchema },\n        responses: [{ status: 200, description: 'Role updated', schema: okResponseSchema }],\n        errors: [\n          { status: 400, description: 'Invalid request', schema: errorSchema },\n          { status: 401, description: 'Unauthorized', schema: errorSchema },\n          { status: 404, description: 'Role not found', schema: errorSchema },\n        ],\n      },\n      DELETE: {\n        summary: `Remove a ${label} role assignment`,\n        query: roleIdQuerySchema,\n        responses: [{ status: 200, description: 'Role deleted', schema: okResponseSchema }],\n        errors: [\n          { status: 400, description: 'Invalid request', schema: errorSchema },\n          { status: 401, description: 'Unauthorized', schema: errorSchema },\n          { status: 404, description: 'Role not found', schema: errorSchema },\n        ],\n      },\n    },\n  }\n}\n\nexport function createEntityRolesHandlers(entityType: EntityType) {\n  const resourceKind = entityType === 'company' ? 'customers.company' : 'customers.person'\n  const logPrefix = entityType === 'company' ? 'customers.company.roles' : 'customers.person.roles'\n\n  async function GET(request: Request, { params }: { params: { id: string } }) {\n    const { translate } = await resolveTranslations()\n    try {\n      const { id: entityId } = paramsSchema.parse(params)\n      const { container, em, auth, scope } = await buildContext(request)\n      const targetScope = await resolveEntityRouteScope(em, auth, scope, entityType, entityId, translate)\n      await ensureFeatureOnOrganization(container, auth, 'customers.roles.view', targetScope.organizationId, translate)\n\n      const roles = await findWithDecryption(\n        em,\n        CustomerEntityRole,\n        {\n          entityType,\n          entityId,\n          organizationId: targetScope.organizationId,\n          tenantId: targetScope.tenantId,\n          deletedAt: null,\n        },\n        { orderBy: { roleType: 'asc' } },\n        {\n          tenantId: targetScope.tenantId,\n          organizationId: targetScope.organizationId,\n        },\n      )\n\n      const userIds = Array.from(new Set(roles.map((role) => role.userId).filter((value): value is string => typeof value === 'string' && value.length > 0)))\n      const users = userIds.length\n        ? await findWithDecryption(\n            em,\n            User,\n            {\n              id: { $in: userIds },\n              deletedAt: null,\n              ...(targetScope.tenantId ? { tenantId: targetScope.tenantId } : {}),\n            },\n            undefined,\n            {\n              tenantId: targetScope.tenantId,\n              organizationId: targetScope.organizationId,\n            },\n          )\n        : []\n      const userMap = new Map(users.map((user) => [user.id, {\n        name: user.name ?? null,\n        email: user.email ?? null,\n        phone: null,\n      }]))\n\n      return NextResponse.json({\n        items: roles.map((role) => ({\n          ...(userMap.has(role.userId)\n            ? {\n                userName: userMap.get(role.userId)?.name ?? null,\n                userEmail: userMap.get(role.userId)?.email ?? null,\n                userPhone: userMap.get(role.userId)?.phone ?? null,\n              }\n            : {}),\n          id: role.id,\n          entityType: role.entityType,\n          entityId: role.entityId,\n          userId: role.userId,\n          roleType: role.roleType,\n          createdAt: role.createdAt.toISOString(),\n          updatedAt: role.updatedAt.toISOString(),\n        })),\n      })\n    } catch (err) {\n      if (err instanceof CrudHttpError) return NextResponse.json(err.body, { status: err.status })\n      if (err instanceof z.ZodError) return buildValidationErrorResponse(err, translate)\n      console.error(`${logPrefix}.get failed`, err)\n      return NextResponse.json({ error: translate('customers.errors.failed_to_load_roles', 'Failed to load roles') }, { status: 500 })\n    }\n  }\n\n  async function POST(request: Request, { params }: { params: { id: string } }) {\n    const { translate } = await resolveTranslations()\n    try {\n      const { id: entityId } = paramsSchema.parse(params)\n      const { container, em, auth, scope, ctx } = await buildContext(request)\n      const targetScope = await resolveEntityRouteScope(em, auth, scope, entityType, entityId, translate)\n      await ensureFeatureOnOrganization(container, auth, 'customers.roles.manage', targetScope.organizationId, translate)\n      const commandCtx = createScopedCommandContext(ctx, targetScope.organizationId)\n\n      const rawBody = await readJsonSafe<Record<string, unknown>>(request, {})\n      const scoped = withScopedPayload(\n        {\n          ...rawBody,\n          organizationId: targetScope.organizationId,\n          tenantId: targetScope.tenantId,\n          ...getRoleContext(entityType, entityId),\n        },\n        commandCtx,\n        translate,\n      )\n      const parsed = entityRoleCreateSchema.parse(scoped)\n\n      const guardUserId = resolveAuthActorId(auth)\n      const guardResult = await validateCrudMutationGuard(container, {\n        tenantId: targetScope.tenantId, organizationId: targetScope.organizationId, userId: guardUserId,\n        resourceKind, resourceId: entityId, operation: 'custom',\n        requestMethod: request.method, requestHeaders: request.headers, mutationPayload: rawBody,\n      })\n      if (guardResult && !guardResult.ok) return NextResponse.json(guardResult.body, { status: guardResult.status })\n\n      const commandBus = container.resolve('commandBus') as CommandBus\n      const { result, logEntry } = await commandBus.execute<EntityRoleCreateInput, { roleId: string }>(\n        'customers.entityRoles.create',\n        { input: parsed, ctx: commandCtx },\n      )\n\n      if (guardResult?.ok && guardResult.shouldRunAfterSuccess) {\n        await runCrudMutationGuardAfterSuccess(container, {\n          tenantId: targetScope.tenantId, organizationId: targetScope.organizationId, userId: guardUserId,\n          resourceKind, resourceId: entityId, operation: 'custom',\n          requestMethod: request.method, requestHeaders: request.headers, metadata: guardResult.metadata ?? null,\n        })\n      }\n\n      return withOperationMetadata(\n        NextResponse.json({ id: result?.roleId ?? null }, { status: 201 }),\n        logEntry,\n        { resourceKind, resourceId: entityId },\n      )\n    } catch (err) {\n      if (err instanceof CrudHttpError) return NextResponse.json(err.body, { status: err.status })\n      if (err instanceof z.ZodError) return buildValidationErrorResponse(err, translate)\n      console.error(`${logPrefix}.post failed`, err)\n      return NextResponse.json({ error: translate('customers.errors.failed_to_assign_role', 'Failed to assign role') }, { status: 500 })\n    }\n  }\n\n  async function PUT(request: Request, { params }: { params: { id: string } }) {\n    const { translate } = await resolveTranslations()\n    try {\n      const { id: entityId } = paramsSchema.parse(params)\n      const { roleId } = roleIdQuerySchema.parse(Object.fromEntries(new URL(request.url).searchParams))\n      const { container, em, auth, scope, ctx } = await buildContext(request)\n      const targetScope = await resolveRoleRouteScope(em, auth, scope, entityType, entityId, roleId, translate)\n      await ensureFeatureOnOrganization(container, auth, 'customers.roles.manage', targetScope.organizationId, translate)\n      const commandCtx = createScopedCommandContext(ctx, targetScope.organizationId)\n\n      const rawBody = await readJsonSafe<Record<string, unknown>>(request, {})\n      const scoped = withScopedPayload(\n        {\n          ...rawBody,\n          id: roleId,\n          organizationId: targetScope.organizationId,\n          tenantId: targetScope.tenantId,\n        },\n        commandCtx,\n        translate,\n      )\n      const parsed = entityRoleUpdateSchema.parse(scoped)\n\n      const guardUserId = resolveAuthActorId(auth)\n      const guardResult = await validateCrudMutationGuard(container, {\n        tenantId: targetScope.tenantId, organizationId: targetScope.organizationId, userId: guardUserId,\n        resourceKind, resourceId: entityId, operation: 'custom',\n        requestMethod: request.method, requestHeaders: request.headers, mutationPayload: { roleId, ...rawBody },\n      })\n      if (guardResult && !guardResult.ok) return NextResponse.json(guardResult.body, { status: guardResult.status })\n\n      const commandBus = container.resolve('commandBus') as CommandBus\n      const { logEntry } = await commandBus.execute<EntityRoleUpdateInput, { roleId: string }>(\n        'customers.entityRoles.update',\n        { input: parsed, ctx: commandCtx },\n      )\n\n      if (guardResult?.ok && guardResult.shouldRunAfterSuccess) {\n        await runCrudMutationGuardAfterSuccess(container, {\n          tenantId: targetScope.tenantId, organizationId: targetScope.organizationId, userId: guardUserId,\n          resourceKind, resourceId: entityId, operation: 'custom',\n          requestMethod: request.method, requestHeaders: request.headers, metadata: guardResult.metadata ?? null,\n        })\n      }\n\n      return withOperationMetadata(\n        NextResponse.json({ ok: true }),\n        logEntry,\n        { resourceKind, resourceId: entityId },\n      )\n    } catch (err) {\n      if (err instanceof CrudHttpError) return NextResponse.json(err.body, { status: err.status })\n      if (err instanceof z.ZodError) return buildValidationErrorResponse(err, translate)\n      console.error(`${logPrefix}.put failed`, err)\n      return NextResponse.json({ error: translate('customers.errors.failed_to_update_role', 'Failed to update role') }, { status: 500 })\n    }\n  }\n\n  async function DELETE(request: Request, { params }: { params: { id: string } }) {\n    const { translate } = await resolveTranslations()\n    try {\n      const { id: entityId } = paramsSchema.parse(params)\n      const { roleId } = roleIdQuerySchema.parse(Object.fromEntries(new URL(request.url).searchParams))\n      const { container, em, auth, scope, ctx } = await buildContext(request)\n      const targetScope = await resolveRoleRouteScope(em, auth, scope, entityType, entityId, roleId, translate)\n      await ensureFeatureOnOrganization(container, auth, 'customers.roles.manage', targetScope.organizationId, translate)\n      const commandCtx = createScopedCommandContext(ctx, targetScope.organizationId)\n\n      const parsed = entityRoleDeleteSchema.parse(\n        withScopedPayload(\n          {\n            id: roleId,\n            organizationId: targetScope.organizationId,\n            tenantId: targetScope.tenantId,\n          },\n          commandCtx,\n          translate,\n        ),\n      )\n      const guardUserId = resolveAuthActorId(auth)\n      const guardResult = await validateCrudMutationGuard(container, {\n        tenantId: targetScope.tenantId, organizationId: targetScope.organizationId, userId: guardUserId,\n        resourceKind, resourceId: entityId, operation: 'custom',\n        requestMethod: request.method, requestHeaders: request.headers, mutationPayload: { roleId },\n      })\n      if (guardResult && !guardResult.ok) return NextResponse.json(guardResult.body, { status: guardResult.status })\n\n      const commandBus = container.resolve('commandBus') as CommandBus\n      const { logEntry } = await commandBus.execute<EntityRoleDeleteInput, { roleId: string }>(\n        'customers.entityRoles.delete',\n        { input: parsed, ctx: commandCtx },\n      )\n\n      if (guardResult?.ok && guardResult.shouldRunAfterSuccess) {\n        await runCrudMutationGuardAfterSuccess(container, {\n          tenantId: targetScope.tenantId, organizationId: targetScope.organizationId, userId: guardUserId,\n          resourceKind, resourceId: entityId, operation: 'custom',\n          requestMethod: request.method, requestHeaders: request.headers, metadata: guardResult.metadata ?? null,\n        })\n      }\n\n      return withOperationMetadata(\n        NextResponse.json({ ok: true }),\n        logEntry,\n        { resourceKind, resourceId: entityId },\n      )\n    } catch (err) {\n      if (err instanceof CrudHttpError) return NextResponse.json(err.body, { status: err.status })\n      if (err instanceof z.ZodError) return buildValidationErrorResponse(err, translate)\n      console.error(`${logPrefix}.delete failed`, err)\n      return NextResponse.json({ error: translate('customers.errors.failed_to_delete_role', 'Failed to delete role') }, { status: 500 })\n    }\n  }\n\n  return { GET, POST, PUT, DELETE }\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAGlB,SAAS,kCAAkC;AAC3C,SAAS,oBAAoB;AAC7B,SAAS,2BAA2B,wCAAwC;AAC5E,SAAS,qBAAqB;AAC9B,SAAS,2BAA2B;AACpC,SAAS,uBAAuB,0BAA0B;AAC1D,SAAS,YAAY;AAErB,SAAS,gBAAgB,0BAA0B;AACnD,SAAS,wBAAwB,wBAAwB,8BAAkH;AAC3K,SAAS,yBAAyB;AAClC,SAAS,gCAAgC,0BAA0B;AAEnE,MAAM,eAAe,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AACvD,MAAM,oBAAoB,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAEhE,MAAM,mBAAmB,EAAE,OAAO;AAAA,EAChC,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EAC1C,QAAQ,EAAE,OAAO,EAAE,KAAK;AAC1B,CAAC;AACD,MAAM,mBAAmB,EAAE,OAAO;AAAA,EAChC,QAAQ,EAAE,OAAO,EAAE,KAAK;AAC1B,CAAC;AAED,MAAM,iBAAiB,EAAE,OAAO;AAAA,EAC9B,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,YAAY,EAAE,KAAK,CAAC,WAAW,QAAQ,CAAC;AAAA,EACxC,UAAU,EAAE,OAAO,EAAE,KAAK;AAAA,EAC1B,QAAQ,EAAE,OAAO,EAAE,KAAK;AAAA,EACxB,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACzC,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC1C,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC1C,UAAU,EAAE,OAAO;AAAA,EACnB,WAAW,EAAE,OAAO;AAAA,EACpB,WAAW,EAAE,OAAO;AACtB,CAAC;AAED,MAAM,qBAAqB,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,EAAE,CAAC;AACtE,MAAM,mBAAmB,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;AACrD,MAAM,uBAAuB,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAC/D,MAAM,cAAc,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAMlD,SAAS,eAAe,YAAwB,UAAkB;AAChE,QAAM,eAAe,eAAe,YAAY,sBAAsB;AACtE,SAAO,EAAE,YAAY,UAAU,cAAc,YAAY,SAAS;AACpE;AAEA,SAAS,6BAA6B,OAAmB,WAAuB;AAC9E,SAAO,aAAa;AAAA,IAClB,EAAE,OAAO,UAAU,qCAAqC,mBAAmB,GAAG,aAAa,MAAM,QAAQ,EAAE,YAAY;AAAA,IACvH,EAAE,QAAQ,IAAI;AAAA,EAChB;AACF;AAEA,SAAS,sBACP,UACA,UACA,UACA;AACA,MAAI,CAAC,UAAU,aAAa,CAAC,SAAS,MAAM,CAAC,SAAS,UAAW,QAAO;AACxE,WAAS,QAAQ;AAAA,IACf;AAAA,IACA,2BAA2B;AAAA,MACzB,IAAI,SAAS;AAAA,MACb,WAAW,SAAS;AAAA,MACpB,WAAW,SAAS;AAAA,MACpB,aAAa,SAAS,eAAe;AAAA,MACrC,cAAc,SAAS,gBAAgB,SAAS;AAAA,MAChD,YAAY,SAAS,cAAc,SAAS;AAAA,MAC5C,YAAY,SAAS,qBAAqB,OAAO,SAAS,UAAU,YAAY,KAAI,oBAAI,KAAK,GAAE,YAAY;AAAA,IAC7G,CAAC;AAAA,EACH;AACA,SAAO;AACT;AAEA,eAAe,aAAa,SAAkB;AAC5C,QAAM,UAAU,MAAM,+BAA+B,OAAO;AAC5D,SAAO;AAAA,IACL,GAAG;AAAA,IACH,KAAK,QAAQ;AAAA,EACf;AACF;AAEA,SAAS,8BACP,OACA,MACA;AACA,QAAM,gBAAgB,oBAAI,IAAY;AACtC,MAAI,OAAO,WAAW,OAAQ,OAAM,UAAU,QAAQ,CAAC,OAAO,cAAc,IAAI,EAAE,CAAC;AAAA,WAC1E,KAAK,MAAO,eAAc,IAAI,KAAK,KAAK;AACjD,SAAO;AACT;AAEA,SAAS,8BACP,gBACA,OACA,MACA,WACA;AACA,QAAM,gBAAgB,8BAA8B,OAAO,IAAI;AAC/D,MAAI,cAAc,OAAO,KAAK,CAAC,cAAc,IAAI,cAAc,GAAG;AAChE,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,kCAAkC,eAAe,EAAE,CAAC;AAAA,EACtG;AACF;AAEA,eAAe,4BACb,WACA,MACA,SACA,gBACA,WACA;AACA,QAAM,UAAU,mBAAmB,IAAI;AACvC,MAAI,CAAC,SAAS;AACZ,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,iCAAiC,cAAc,EAAE,CAAC;AAAA,EACpG;AACA,MAAI;AACJ,MAAI;AACF,WAAO,UAAU,QAAQ,aAAa;AAAA,EACxC,SAAS,KAAK;AACZ,YAAQ,MAAM,+DAA+D,GAAG;AAChF,WAAO;AAAA,EACT;AACA,MAAI,CAAC,MAAM;AACT,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,6BAA6B,gBAAgB,EAAE,CAAC;AAAA,EAClG;AACA,QAAM,aAAa,MAAM,KAAK,mBAAmB,SAAS,CAAC,OAAO,GAAG;AAAA,IACnE,UAAU,KAAK;AAAA,IACf;AAAA,EACF,CAAC;AACD,MAAI,CAAC,YAAY;AACf,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,kCAAkC,eAAe,EAAE,CAAC;AAAA,EACtG;AACF;AAEA,eAAe,wBACb,IACA,MACA,OACA,YACA,UACA,WACA;AACA,QAAM,SAAS,MAAM;AAAA,IACnB;AAAA,IACA;AAAA,IACA,EAAE,IAAI,UAAU,MAAM,YAAY,UAAU,KAAK,UAAU,WAAW,KAAK;AAAA,IAC3E;AAAA,IACA,EAAE,UAAU,KAAK,UAAU,gBAAgB,OAAO,cAAc,KAAK,SAAS,KAAK;AAAA,EACrF;AACA,MAAI,CAAC,UAAU,OAAO,aAAa,KAAK,UAAU;AAChD,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,uCAAuC,oBAAoB,EAAE,CAAC;AAAA,EAChH;AACA,gCAA8B,OAAO,gBAAgB,OAAO,MAAM,SAAS;AAC3E,SAAO;AAAA,IACL;AAAA,IACA,gBAAgB,OAAO;AAAA,IACvB,UAAU,OAAO;AAAA,EACnB;AACF;AAEA,eAAe,sBACb,IACA,MACA,OACA,YACA,UACA,QACA,WACA;AACA,QAAM,OAAO,MAAM;AAAA,IACjB;AAAA,IACA;AAAA,IACA,EAAE,IAAI,QAAQ,UAAU,KAAK,UAAU,YAAY,UAAU,WAAW,KAAK;AAAA,IAC7E;AAAA,IACA,EAAE,UAAU,KAAK,UAAU,gBAAgB,OAAO,cAAc,KAAK,SAAS,KAAK;AAAA,EACrF;AACA,MACE,CAAC,QACD,KAAK,aAAa,KAAK,YACvB,KAAK,eAAe,cACpB,KAAK,aAAa,UAClB;AACA,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,mCAAmC,gBAAgB,EAAE,CAAC;AAAA,EACxG;AACA,gCAA8B,KAAK,gBAAgB,OAAO,MAAM,SAAS;AACzE,SAAO;AAAA,IACL;AAAA,IACA,gBAAgB,KAAK;AAAA,IACrB,UAAU,KAAK;AAAA,EACjB;AACF;AAEA,SAAS,2BACP,KACA,gBACA;AACA,SAAO;AAAA,IACL,GAAG;AAAA,IACH,wBAAwB;AAAA,IACxB,iBAAiB,CAAC,cAAc;AAAA,EAClC;AACF;AAEO,MAAM,sBAAsB;AAAA,EACjC,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,sBAAsB,EAAE;AAAA,EACpE,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,wBAAwB,EAAE;AAAA,EACvE,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,wBAAwB,EAAE;AAAA,EACtE,QAAQ,EAAE,aAAa,MAAM,iBAAiB,CAAC,wBAAwB,EAAE;AAC3E;AAEO,SAAS,wBAAwB,YAAyC;AAC/E,QAAM,QAAQ,eAAe,YAAY,YAAY;AACrD,SAAO;AAAA,IACL,KAAK;AAAA,IACL,SAAS,GAAG,MAAM,OAAO,CAAC,EAAE,YAAY,IAAI,MAAM,MAAM,CAAC,CAAC;AAAA,IAC1D,YAAY;AAAA,IACZ,SAAS;AAAA,MACP,KAAK;AAAA,QACH,SAAS,oBAAoB,KAAK;AAAA,QAClC,WAAW,CAAC,EAAE,QAAQ,KAAK,aAAa,oBAAoB,QAAQ,mBAAmB,CAAC;AAAA,QACxF,QAAQ;AAAA,UACN,EAAE,QAAQ,KAAK,aAAa,mBAAmB,QAAQ,YAAY;AAAA,UACnE,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,YAAY;AAAA,QAClE;AAAA,MACF;AAAA,MACA,MAAM;AAAA,QACJ,SAAS,sBAAsB,KAAK;AAAA,QACpC,aAAa,EAAE,aAAa,oBAAoB,QAAQ,iBAAiB;AAAA,QACzE,WAAW,CAAC,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,qBAAqB,CAAC;AAAA,QACtF,QAAQ;AAAA,UACN,EAAE,QAAQ,KAAK,aAAa,mBAAmB,QAAQ,YAAY;AAAA,UACnE,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,YAAY;AAAA,UAChE,EAAE,QAAQ,KAAK,aAAa,yBAAyB,QAAQ,YAAY;AAAA,QAC3E;AAAA,MACF;AAAA,MACA,KAAK;AAAA,QACH,SAAS,YAAY,KAAK;AAAA,QAC1B,OAAO;AAAA,QACP,aAAa,EAAE,aAAa,oBAAoB,QAAQ,iBAAiB;AAAA,QACzE,WAAW,CAAC,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,iBAAiB,CAAC;AAAA,QAClF,QAAQ;AAAA,UACN,EAAE,QAAQ,KAAK,aAAa,mBAAmB,QAAQ,YAAY;AAAA,UACnE,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,YAAY;AAAA,UAChE,EAAE,QAAQ,KAAK,aAAa,kBAAkB,QAAQ,YAAY;AAAA,QACpE;AAAA,MACF;AAAA,MACA,QAAQ;AAAA,QACN,SAAS,YAAY,KAAK;AAAA,QAC1B,OAAO;AAAA,QACP,WAAW,CAAC,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,iBAAiB,CAAC;AAAA,QAClF,QAAQ;AAAA,UACN,EAAE,QAAQ,KAAK,aAAa,mBAAmB,QAAQ,YAAY;AAAA,UACnE,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,YAAY;AAAA,UAChE,EAAE,QAAQ,KAAK,aAAa,kBAAkB,QAAQ,YAAY;AAAA,QACpE;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;AAEO,SAAS,0BAA0B,YAAwB;AAChE,QAAM,eAAe,eAAe,YAAY,sBAAsB;AACtE,QAAM,YAAY,eAAe,YAAY,4BAA4B;AAEzE,iBAAe,IAAI,SAAkB,EAAE,OAAO,GAA+B;AAC3E,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,QAAI;AACF,YAAM,EAAE,IAAI,SAAS,IAAI,aAAa,MAAM,MAAM;AAClD,YAAM,EAAE,WAAW,IAAI,MAAM,MAAM,IAAI,MAAM,aAAa,OAAO;AACjE,YAAM,cAAc,MAAM,wBAAwB,IAAI,MAAM,OAAO,YAAY,UAAU,SAAS;AAClG,YAAM,4BAA4B,WAAW,MAAM,wBAAwB,YAAY,gBAAgB,SAAS;AAEhH,YAAM,QAAQ,MAAM;AAAA,QAClB;AAAA,QACA;AAAA,QACA;AAAA,UACE;AAAA,UACA;AAAA,UACA,gBAAgB,YAAY;AAAA,UAC5B,UAAU,YAAY;AAAA,UACtB,WAAW;AAAA,QACb;AAAA,QACA,EAAE,SAAS,EAAE,UAAU,MAAM,EAAE;AAAA,QAC/B;AAAA,UACE,UAAU,YAAY;AAAA,UACtB,gBAAgB,YAAY;AAAA,QAC9B;AAAA,MACF;AAEA,YAAM,UAAU,MAAM,KAAK,IAAI,IAAI,MAAM,IAAI,CAAC,SAAS,KAAK,MAAM,EAAE,OAAO,CAAC,UAA2B,OAAO,UAAU,YAAY,MAAM,SAAS,CAAC,CAAC,CAAC;AACtJ,YAAM,QAAQ,QAAQ,SAClB,MAAM;AAAA,QACJ;AAAA,QACA;AAAA,QACA;AAAA,UACE,IAAI,EAAE,KAAK,QAAQ;AAAA,UACnB,WAAW;AAAA,UACX,GAAI,YAAY,WAAW,EAAE,UAAU,YAAY,SAAS,IAAI,CAAC;AAAA,QACnE;AAAA,QACA;AAAA,QACA;AAAA,UACE,UAAU,YAAY;AAAA,UACtB,gBAAgB,YAAY;AAAA,QAC9B;AAAA,MACF,IACA,CAAC;AACL,YAAM,UAAU,IAAI,IAAI,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,IAAI;AAAA,QACpD,MAAM,KAAK,QAAQ;AAAA,QACnB,OAAO,KAAK,SAAS;AAAA,QACrB,OAAO;AAAA,MACT,CAAC,CAAC,CAAC;AAEH,aAAO,aAAa,KAAK;AAAA,QACvB,OAAO,MAAM,IAAI,CAAC,UAAU;AAAA,UAC1B,GAAI,QAAQ,IAAI,KAAK,MAAM,IACvB;AAAA,YACE,UAAU,QAAQ,IAAI,KAAK,MAAM,GAAG,QAAQ;AAAA,YAC5C,WAAW,QAAQ,IAAI,KAAK,MAAM,GAAG,SAAS;AAAA,YAC9C,WAAW,QAAQ,IAAI,KAAK,MAAM,GAAG,SAAS;AAAA,UAChD,IACA,CAAC;AAAA,UACL,IAAI,KAAK;AAAA,UACT,YAAY,KAAK;AAAA,UACjB,UAAU,KAAK;AAAA,UACf,QAAQ,KAAK;AAAA,UACb,UAAU,KAAK;AAAA,UACf,WAAW,KAAK,UAAU,YAAY;AAAA,UACtC,WAAW,KAAK,UAAU,YAAY;AAAA,QACxC,EAAE;AAAA,MACJ,CAAC;AAAA,IACH,SAAS,KAAK;AACZ,UAAI,eAAe,cAAe,QAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AAC3F,UAAI,eAAe,EAAE,SAAU,QAAO,6BAA6B,KAAK,SAAS;AACjF,cAAQ,MAAM,GAAG,SAAS,eAAe,GAAG;AAC5C,aAAO,aAAa,KAAK,EAAE,OAAO,UAAU,yCAAyC,sBAAsB,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACjI;AAAA,EACF;AAEA,iBAAe,KAAK,SAAkB,EAAE,OAAO,GAA+B;AAC5E,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,QAAI;AACF,YAAM,EAAE,IAAI,SAAS,IAAI,aAAa,MAAM,MAAM;AAClD,YAAM,EAAE,WAAW,IAAI,MAAM,OAAO,IAAI,IAAI,MAAM,aAAa,OAAO;AACtE,YAAM,cAAc,MAAM,wBAAwB,IAAI,MAAM,OAAO,YAAY,UAAU,SAAS;AAClG,YAAM,4BAA4B,WAAW,MAAM,0BAA0B,YAAY,gBAAgB,SAAS;AAClH,YAAM,aAAa,2BAA2B,KAAK,YAAY,cAAc;AAE7E,YAAM,UAAU,MAAM,aAAsC,SAAS,CAAC,CAAC;AACvE,YAAM,SAAS;AAAA,QACb;AAAA,UACE,GAAG;AAAA,UACH,gBAAgB,YAAY;AAAA,UAC5B,UAAU,YAAY;AAAA,UACtB,GAAG,eAAe,YAAY,QAAQ;AAAA,QACxC;AAAA,QACA;AAAA,QACA;AAAA,MACF;AACA,YAAM,SAAS,uBAAuB,MAAM,MAAM;AAElD,YAAM,cAAc,mBAAmB,IAAI;AAC3C,YAAM,cAAc,MAAM,0BAA0B,WAAW;AAAA,QAC7D,UAAU,YAAY;AAAA,QAAU,gBAAgB,YAAY;AAAA,QAAgB,QAAQ;AAAA,QACpF;AAAA,QAAc,YAAY;AAAA,QAAU,WAAW;AAAA,QAC/C,eAAe,QAAQ;AAAA,QAAQ,gBAAgB,QAAQ;AAAA,QAAS,iBAAiB;AAAA,MACnF,CAAC;AACD,UAAI,eAAe,CAAC,YAAY,GAAI,QAAO,aAAa,KAAK,YAAY,MAAM,EAAE,QAAQ,YAAY,OAAO,CAAC;AAE7G,YAAM,aAAa,UAAU,QAAQ,YAAY;AACjD,YAAM,EAAE,QAAQ,SAAS,IAAI,MAAM,WAAW;AAAA,QAC5C;AAAA,QACA,EAAE,OAAO,QAAQ,KAAK,WAAW;AAAA,MACnC;AAEA,UAAI,aAAa,MAAM,YAAY,uBAAuB;AACxD,cAAM,iCAAiC,WAAW;AAAA,UAChD,UAAU,YAAY;AAAA,UAAU,gBAAgB,YAAY;AAAA,UAAgB,QAAQ;AAAA,UACpF;AAAA,UAAc,YAAY;AAAA,UAAU,WAAW;AAAA,UAC/C,eAAe,QAAQ;AAAA,UAAQ,gBAAgB,QAAQ;AAAA,UAAS,UAAU,YAAY,YAAY;AAAA,QACpG,CAAC;AAAA,MACH;AAEA,aAAO;AAAA,QACL,aAAa,KAAK,EAAE,IAAI,QAAQ,UAAU,KAAK,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,QACjE;AAAA,QACA,EAAE,cAAc,YAAY,SAAS;AAAA,MACvC;AAAA,IACF,SAAS,KAAK;AACZ,UAAI,eAAe,cAAe,QAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AAC3F,UAAI,eAAe,EAAE,SAAU,QAAO,6BAA6B,KAAK,SAAS;AACjF,cAAQ,MAAM,GAAG,SAAS,gBAAgB,GAAG;AAC7C,aAAO,aAAa,KAAK,EAAE,OAAO,UAAU,0CAA0C,uBAAuB,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACnI;AAAA,EACF;AAEA,iBAAe,IAAI,SAAkB,EAAE,OAAO,GAA+B;AAC3E,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,QAAI;AACF,YAAM,EAAE,IAAI,SAAS,IAAI,aAAa,MAAM,MAAM;AAClD,YAAM,EAAE,OAAO,IAAI,kBAAkB,MAAM,OAAO,YAAY,IAAI,IAAI,QAAQ,GAAG,EAAE,YAAY,CAAC;AAChG,YAAM,EAAE,WAAW,IAAI,MAAM,OAAO,IAAI,IAAI,MAAM,aAAa,OAAO;AACtE,YAAM,cAAc,MAAM,sBAAsB,IAAI,MAAM,OAAO,YAAY,UAAU,QAAQ,SAAS;AACxG,YAAM,4BAA4B,WAAW,MAAM,0BAA0B,YAAY,gBAAgB,SAAS;AAClH,YAAM,aAAa,2BAA2B,KAAK,YAAY,cAAc;AAE7E,YAAM,UAAU,MAAM,aAAsC,SAAS,CAAC,CAAC;AACvE,YAAM,SAAS;AAAA,QACb;AAAA,UACE,GAAG;AAAA,UACH,IAAI;AAAA,UACJ,gBAAgB,YAAY;AAAA,UAC5B,UAAU,YAAY;AAAA,QACxB;AAAA,QACA;AAAA,QACA;AAAA,MACF;AACA,YAAM,SAAS,uBAAuB,MAAM,MAAM;AAElD,YAAM,cAAc,mBAAmB,IAAI;AAC3C,YAAM,cAAc,MAAM,0BAA0B,WAAW;AAAA,QAC7D,UAAU,YAAY;AAAA,QAAU,gBAAgB,YAAY;AAAA,QAAgB,QAAQ;AAAA,QACpF;AAAA,QAAc,YAAY;AAAA,QAAU,WAAW;AAAA,QAC/C,eAAe,QAAQ;AAAA,QAAQ,gBAAgB,QAAQ;AAAA,QAAS,iBAAiB,EAAE,QAAQ,GAAG,QAAQ;AAAA,MACxG,CAAC;AACD,UAAI,eAAe,CAAC,YAAY,GAAI,QAAO,aAAa,KAAK,YAAY,MAAM,EAAE,QAAQ,YAAY,OAAO,CAAC;AAE7G,YAAM,aAAa,UAAU,QAAQ,YAAY;AACjD,YAAM,EAAE,SAAS,IAAI,MAAM,WAAW;AAAA,QACpC;AAAA,QACA,EAAE,OAAO,QAAQ,KAAK,WAAW;AAAA,MACnC;AAEA,UAAI,aAAa,MAAM,YAAY,uBAAuB;AACxD,cAAM,iCAAiC,WAAW;AAAA,UAChD,UAAU,YAAY;AAAA,UAAU,gBAAgB,YAAY;AAAA,UAAgB,QAAQ;AAAA,UACpF;AAAA,UAAc,YAAY;AAAA,UAAU,WAAW;AAAA,UAC/C,eAAe,QAAQ;AAAA,UAAQ,gBAAgB,QAAQ;AAAA,UAAS,UAAU,YAAY,YAAY;AAAA,QACpG,CAAC;AAAA,MACH;AAEA,aAAO;AAAA,QACL,aAAa,KAAK,EAAE,IAAI,KAAK,CAAC;AAAA,QAC9B;AAAA,QACA,EAAE,cAAc,YAAY,SAAS;AAAA,MACvC;AAAA,IACF,SAAS,KAAK;AACZ,UAAI,eAAe,cAAe,QAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AAC3F,UAAI,eAAe,EAAE,SAAU,QAAO,6BAA6B,KAAK,SAAS;AACjF,cAAQ,MAAM,GAAG,SAAS,eAAe,GAAG;AAC5C,aAAO,aAAa,KAAK,EAAE,OAAO,UAAU,0CAA0C,uBAAuB,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACnI;AAAA,EACF;AAEA,iBAAe,OAAO,SAAkB,EAAE,OAAO,GAA+B;AAC9E,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,QAAI;AACF,YAAM,EAAE,IAAI,SAAS,IAAI,aAAa,MAAM,MAAM;AAClD,YAAM,EAAE,OAAO,IAAI,kBAAkB,MAAM,OAAO,YAAY,IAAI,IAAI,QAAQ,GAAG,EAAE,YAAY,CAAC;AAChG,YAAM,EAAE,WAAW,IAAI,MAAM,OAAO,IAAI,IAAI,MAAM,aAAa,OAAO;AACtE,YAAM,cAAc,MAAM,sBAAsB,IAAI,MAAM,OAAO,YAAY,UAAU,QAAQ,SAAS;AACxG,YAAM,4BAA4B,WAAW,MAAM,0BAA0B,YAAY,gBAAgB,SAAS;AAClH,YAAM,aAAa,2BAA2B,KAAK,YAAY,cAAc;AAE7E,YAAM,SAAS,uBAAuB;AAAA,QACpC;AAAA,UACE;AAAA,YACE,IAAI;AAAA,YACJ,gBAAgB,YAAY;AAAA,YAC5B,UAAU,YAAY;AAAA,UACxB;AAAA,UACA;AAAA,UACA;AAAA,QACF;AAAA,MACF;AACA,YAAM,cAAc,mBAAmB,IAAI;AAC3C,YAAM,cAAc,MAAM,0BAA0B,WAAW;AAAA,QAC7D,UAAU,YAAY;AAAA,QAAU,gBAAgB,YAAY;AAAA,QAAgB,QAAQ;AAAA,QACpF;AAAA,QAAc,YAAY;AAAA,QAAU,WAAW;AAAA,QAC/C,eAAe,QAAQ;AAAA,QAAQ,gBAAgB,QAAQ;AAAA,QAAS,iBAAiB,EAAE,OAAO;AAAA,MAC5F,CAAC;AACD,UAAI,eAAe,CAAC,YAAY,GAAI,QAAO,aAAa,KAAK,YAAY,MAAM,EAAE,QAAQ,YAAY,OAAO,CAAC;AAE7G,YAAM,aAAa,UAAU,QAAQ,YAAY;AACjD,YAAM,EAAE,SAAS,IAAI,MAAM,WAAW;AAAA,QACpC;AAAA,QACA,EAAE,OAAO,QAAQ,KAAK,WAAW;AAAA,MACnC;AAEA,UAAI,aAAa,MAAM,YAAY,uBAAuB;AACxD,cAAM,iCAAiC,WAAW;AAAA,UAChD,UAAU,YAAY;AAAA,UAAU,gBAAgB,YAAY;AAAA,UAAgB,QAAQ;AAAA,UACpF;AAAA,UAAc,YAAY;AAAA,UAAU,WAAW;AAAA,UAC/C,eAAe,QAAQ;AAAA,UAAQ,gBAAgB,QAAQ;AAAA,UAAS,UAAU,YAAY,YAAY;AAAA,QACpG,CAAC;AAAA,MACH;AAEA,aAAO;AAAA,QACL,aAAa,KAAK,EAAE,IAAI,KAAK,CAAC;AAAA,QAC9B;AAAA,QACA,EAAE,cAAc,YAAY,SAAS;AAAA,MACvC;AAAA,IACF,SAAS,KAAK;AACZ,UAAI,eAAe,cAAe,QAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AAC3F,UAAI,eAAe,EAAE,SAAU,QAAO,6BAA6B,KAAK,SAAS;AACjF,cAAQ,MAAM,GAAG,SAAS,kBAAkB,GAAG;AAC/C,aAAO,aAAa,KAAK,EAAE,OAAO,UAAU,0CAA0C,uBAAuB,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACnI;AAAA,EACF;AAEA,SAAO,EAAE,KAAK,MAAM,KAAK,OAAO;AAClC;",
+  "names": []
+}