@open-mercato/core 0.6.1-develop.3260.1.dc719cac84 → 0.6.1-develop.3278.1.a4d26475e4

package/dist/modules/customer_accounts/data/enrichers.js

@@ -1,4 +1,5 @@
-import { CustomerUser } from "./entities.js";
+import { findWithDecryption } from "@open-mercato/shared/lib/encryption/find";
+import { CustomerUser, DomainMapping } from "./entities.js";
 const PERSON_FALLBACK = { _customer_accounts: { hasAccount: false } };
 const COMPANY_FALLBACK = { _customer_accounts: { userCount: 0 } };
 const personAccountStatusEnricher = {
@@ -16,11 +17,17 @@ const personAccountStatusEnricher = {
     if (records.length === 0) return records;
     const em = context.em.fork();
     const recordIds = records.map((r) => r.id);
-    const users = await em.find(CustomerUser, {
-      personEntityId: { $in: recordIds },
-      tenantId: context.tenantId,
-      deletedAt: null
-    });
+    const users = await findWithDecryption(
+      em,
+      CustomerUser,
+      {
+        personEntityId: { $in: recordIds },
+        tenantId: context.tenantId,
+        deletedAt: null
+      },
+      void 0,
+      { tenantId: context.tenantId, organizationId: context.organizationId }
+    );
     const userByPersonId = /* @__PURE__ */ new Map();
     for (const user of users) {
       if (user.personEntityId) {
@@ -59,11 +66,17 @@ const companyUserCountEnricher = {
     if (records.length === 0) return records;
     const em = context.em.fork();
     const recordIds = records.map((r) => r.id);
-    const users = await em.find(CustomerUser, {
-      customerEntityId: { $in: recordIds },
-      tenantId: context.tenantId,
-      deletedAt: null
-    });
+    const users = await findWithDecryption(
+      em,
+      CustomerUser,
+      {
+        customerEntityId: { $in: recordIds },
+        tenantId: context.tenantId,
+        deletedAt: null
+      },
+      void 0,
+      { tenantId: context.tenantId, organizationId: context.organizationId }
+    );
     const countByCompanyId = /* @__PURE__ */ new Map();
     for (const user of users) {
       if (user.customerEntityId) {
@@ -78,7 +91,60 @@ const companyUserCountEnricher = {
     }));
   }
 };
-const enrichers = [personAccountStatusEnricher, companyUserCountEnricher];
+const ORG_DOMAIN_FALLBACK = { _customDomain: null };
+const ACTIVE_DOMAIN_PRIORITY = {
+  active: 0,
+  verified: 1,
+  pending: 2,
+  tls_failed: 3,
+  dns_failed: 4
+};
+function pickPrimaryDomain(records) {
+  if (records.length === 0) return null;
+  return records.slice().sort(
+    (a, b) => (ACTIVE_DOMAIN_PRIORITY[a.status] ?? 99) - (ACTIVE_DOMAIN_PRIORITY[b.status] ?? 99) || (b.createdAt?.getTime?.() ?? 0) - (a.createdAt?.getTime?.() ?? 0)
+  )[0];
+}
+const organizationCustomDomainEnricher = {
+  id: "customer_accounts.domain-status:directory:organization",
+  targetEntity: "directory:organization",
+  features: ["customer_accounts.domain.manage"],
+  priority: 10,
+  timeout: 1e3,
+  critical: false,
+  fallback: ORG_DOMAIN_FALLBACK,
+  async enrichOne(record, context) {
+    return (await this.enrichMany([record], context))[0];
+  },
+  async enrichMany(records, context) {
+    if (records.length === 0) return records;
+    const em = context.em.fork();
+    const recordIds = records.map((r) => r.id);
+    const domains = await em.find(DomainMapping, {
+      organizationId: { $in: recordIds },
+      tenantId: context.tenantId
+    });
+    const byOrg = /* @__PURE__ */ new Map();
+    for (const d of domains) {
+      const list = byOrg.get(d.organizationId) ?? [];
+      list.push(d);
+      byOrg.set(d.organizationId, list);
+    }
+    return records.map((record) => {
+      const matches = byOrg.get(record.id) ?? [];
+      const primary = pickPrimaryDomain(matches);
+      return {
+        ...record,
+        _customDomain: primary ? { hostname: primary.hostname, status: primary.status } : null
+      };
+    });
+  }
+};
+const enrichers = [
+  personAccountStatusEnricher,
+  companyUserCountEnricher,
+  organizationCustomDomainEnricher
+];
 export {
   enrichers
 };

package/dist/modules/customer_accounts/data/enrichers.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/customer_accounts/data/enrichers.ts"],
-  "sourcesContent": ["import type { ResponseEnricher, EnricherContext } from '@open-mercato/shared/lib/crud/response-enricher'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { CustomerUser } from './entities'\n\ntype EntityRecord = Record<string, unknown> & { id: string }\ntype EnricherScope = EnricherContext & { em: EntityManager }\n\ntype PersonAccountEnrichment = {\n  _customer_accounts: {\n    hasAccount: boolean\n    userId?: string\n    isActive?: boolean\n    lastLoginAt?: string | null\n  }\n}\n\ntype CompanyUserCountEnrichment = {\n  _customer_accounts: {\n    userCount: number\n  }\n}\n\nconst PERSON_FALLBACK = { _customer_accounts: { hasAccount: false } }\nconst COMPANY_FALLBACK = { _customer_accounts: { userCount: 0 } }\n\nconst personAccountStatusEnricher: ResponseEnricher<EntityRecord, PersonAccountEnrichment> = {\n  id: 'customer_accounts.person-account-status',\n  targetEntity: 'customers.person',\n  features: ['customer_accounts.view'],\n  priority: 10,\n  timeout: 2000,\n  critical: false,\n  fallback: PERSON_FALLBACK,\n\n  async enrichOne(record, context: EnricherScope) {\n    return (await this.enrichMany!([record], context))[0]\n  },\n\n  async enrichMany(records, context: EnricherScope) {\n    if (records.length === 0) return records as (EntityRecord & PersonAccountEnrichment)[]\n\n    const em = context.em.fork()\n    const recordIds = records.map((r) => r.id)\n\n    const users = await em.find(CustomerUser, {\n      personEntityId: { $in: recordIds },\n      tenantId: context.tenantId,\n      deletedAt: null,\n    })\n\n    const userByPersonId = new Map<string, CustomerUser>()\n    for (const user of users) {\n      if (user.personEntityId) {\n        userByPersonId.set(user.personEntityId, user)\n      }\n    }\n\n    return records.map((record) => {\n      const user = userByPersonId.get(record.id)\n      if (!user) {\n        return { ...record, _customer_accounts: { hasAccount: false } }\n      }\n      return {\n        ...record,\n        _customer_accounts: {\n          hasAccount: true,\n          userId: user.id,\n          isActive: user.isActive,\n          lastLoginAt: user.lastLoginAt?.toISOString() ?? null,\n        },\n      }\n    })\n  },\n}\n\nconst companyUserCountEnricher: ResponseEnricher<EntityRecord, CompanyUserCountEnrichment> = {\n  id: 'customer_accounts.company-user-count',\n  targetEntity: 'customers.company',\n  features: ['customer_accounts.view'],\n  priority: 10,\n  timeout: 2000,\n  critical: false,\n  fallback: COMPANY_FALLBACK,\n\n  async enrichOne(record, context: EnricherScope) {\n    return (await this.enrichMany!([record], context))[0]\n  },\n\n  async enrichMany(records, context: EnricherScope) {\n    if (records.length === 0) return records as (EntityRecord & CompanyUserCountEnrichment)[]\n\n    const em = context.em.fork()\n    const recordIds = records.map((r) => r.id)\n\n    const users = await em.find(CustomerUser, {\n      customerEntityId: { $in: recordIds },\n      tenantId: context.tenantId,\n      deletedAt: null,\n    })\n\n    const countByCompanyId = new Map<string, number>()\n    for (const user of users) {\n      if (user.customerEntityId) {\n        countByCompanyId.set(user.customerEntityId, (countByCompanyId.get(user.customerEntityId) ?? 0) + 1)\n      }\n    }\n\n    return records.map((record) => ({\n      ...record,\n      _customer_accounts: {\n        userCount: countByCompanyId.get(record.id) ?? 0,\n      },\n    }))\n  },\n}\n\nexport const enrichers: ResponseEnricher[] = [personAccountStatusEnricher, companyUserCountEnricher]\n"],
-  "mappings": "AAEA,SAAS,oBAAoB;AAoB7B,MAAM,kBAAkB,EAAE,oBAAoB,EAAE,YAAY,MAAM,EAAE;AACpE,MAAM,mBAAmB,EAAE,oBAAoB,EAAE,WAAW,EAAE,EAAE;AAEhE,MAAM,8BAAuF;AAAA,EAC3F,IAAI;AAAA,EACJ,cAAc;AAAA,EACd,UAAU,CAAC,wBAAwB;AAAA,EACnC,UAAU;AAAA,EACV,SAAS;AAAA,EACT,UAAU;AAAA,EACV,UAAU;AAAA,EAEV,MAAM,UAAU,QAAQ,SAAwB;AAC9C,YAAQ,MAAM,KAAK,WAAY,CAAC,MAAM,GAAG,OAAO,GAAG,CAAC;AAAA,EACtD;AAAA,EAEA,MAAM,WAAW,SAAS,SAAwB;AAChD,QAAI,QAAQ,WAAW,EAAG,QAAO;AAEjC,UAAM,KAAK,QAAQ,GAAG,KAAK;AAC3B,UAAM,YAAY,QAAQ,IAAI,CAAC,MAAM,EAAE,EAAE;AAEzC,UAAM,QAAQ,MAAM,GAAG,KAAK,cAAc;AAAA,MACxC,gBAAgB,EAAE,KAAK,UAAU;AAAA,MACjC,UAAU,QAAQ;AAAA,MAClB,WAAW;AAAA,IACb,CAAC;AAED,UAAM,iBAAiB,oBAAI,IAA0B;AACrD,eAAW,QAAQ,OAAO;AACxB,UAAI,KAAK,gBAAgB;AACvB,uBAAe,IAAI,KAAK,gBAAgB,IAAI;AAAA,MAC9C;AAAA,IACF;AAEA,WAAO,QAAQ,IAAI,CAAC,WAAW;AAC7B,YAAM,OAAO,eAAe,IAAI,OAAO,EAAE;AACzC,UAAI,CAAC,MAAM;AACT,eAAO,EAAE,GAAG,QAAQ,oBAAoB,EAAE,YAAY,MAAM,EAAE;AAAA,MAChE;AACA,aAAO;AAAA,QACL,GAAG;AAAA,QACH,oBAAoB;AAAA,UAClB,YAAY;AAAA,UACZ,QAAQ,KAAK;AAAA,UACb,UAAU,KAAK;AAAA,UACf,aAAa,KAAK,aAAa,YAAY,KAAK;AAAA,QAClD;AAAA,MACF;AAAA,IACF,CAAC;AAAA,EACH;AACF;AAEA,MAAM,2BAAuF;AAAA,EAC3F,IAAI;AAAA,EACJ,cAAc;AAAA,EACd,UAAU,CAAC,wBAAwB;AAAA,EACnC,UAAU;AAAA,EACV,SAAS;AAAA,EACT,UAAU;AAAA,EACV,UAAU;AAAA,EAEV,MAAM,UAAU,QAAQ,SAAwB;AAC9C,YAAQ,MAAM,KAAK,WAAY,CAAC,MAAM,GAAG,OAAO,GAAG,CAAC;AAAA,EACtD;AAAA,EAEA,MAAM,WAAW,SAAS,SAAwB;AAChD,QAAI,QAAQ,WAAW,EAAG,QAAO;AAEjC,UAAM,KAAK,QAAQ,GAAG,KAAK;AAC3B,UAAM,YAAY,QAAQ,IAAI,CAAC,MAAM,EAAE,EAAE;AAEzC,UAAM,QAAQ,MAAM,GAAG,KAAK,cAAc;AAAA,MACxC,kBAAkB,EAAE,KAAK,UAAU;AAAA,MACnC,UAAU,QAAQ;AAAA,MAClB,WAAW;AAAA,IACb,CAAC;AAED,UAAM,mBAAmB,oBAAI,IAAoB;AACjD,eAAW,QAAQ,OAAO;AACxB,UAAI,KAAK,kBAAkB;AACzB,yBAAiB,IAAI,KAAK,mBAAmB,iBAAiB,IAAI,KAAK,gBAAgB,KAAK,KAAK,CAAC;AAAA,MACpG;AAAA,IACF;AAEA,WAAO,QAAQ,IAAI,CAAC,YAAY;AAAA,MAC9B,GAAG;AAAA,MACH,oBAAoB;AAAA,QAClB,WAAW,iBAAiB,IAAI,OAAO,EAAE,KAAK;AAAA,MAChD;AAAA,IACF,EAAE;AAAA,EACJ;AACF;AAEO,MAAM,YAAgC,CAAC,6BAA6B,wBAAwB;",
+  "sourcesContent": ["import type { ResponseEnricher, EnricherContext } from '@open-mercato/shared/lib/crud/response-enricher'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { CustomerUser, DomainMapping, type DomainStatus } from './entities'\n\ntype EntityRecord = Record<string, unknown> & { id: string }\ntype EnricherScope = EnricherContext & { em: EntityManager }\n\ntype PersonAccountEnrichment = {\n  _customer_accounts: {\n    hasAccount: boolean\n    userId?: string\n    isActive?: boolean\n    lastLoginAt?: string | null\n  }\n}\n\ntype CompanyUserCountEnrichment = {\n  _customer_accounts: {\n    userCount: number\n  }\n}\n\nconst PERSON_FALLBACK = { _customer_accounts: { hasAccount: false } }\nconst COMPANY_FALLBACK = { _customer_accounts: { userCount: 0 } }\n\nconst personAccountStatusEnricher: ResponseEnricher<EntityRecord, PersonAccountEnrichment> = {\n  id: 'customer_accounts.person-account-status',\n  targetEntity: 'customers.person',\n  features: ['customer_accounts.view'],\n  priority: 10,\n  timeout: 2000,\n  critical: false,\n  fallback: PERSON_FALLBACK,\n\n  async enrichOne(record, context: EnricherScope) {\n    return (await this.enrichMany!([record], context))[0]\n  },\n\n  async enrichMany(records, context: EnricherScope) {\n    if (records.length === 0) return records as (EntityRecord & PersonAccountEnrichment)[]\n\n    const em = context.em.fork()\n    const recordIds = records.map((r) => r.id)\n\n    const users = await findWithDecryption(\n      em,\n      CustomerUser,\n      {\n        personEntityId: { $in: recordIds },\n        tenantId: context.tenantId,\n        deletedAt: null,\n      },\n      undefined,\n      { tenantId: context.tenantId, organizationId: context.organizationId },\n    )\n\n    const userByPersonId = new Map<string, CustomerUser>()\n    for (const user of users) {\n      if (user.personEntityId) {\n        userByPersonId.set(user.personEntityId, user)\n      }\n    }\n\n    return records.map((record) => {\n      const user = userByPersonId.get(record.id)\n      if (!user) {\n        return { ...record, _customer_accounts: { hasAccount: false } }\n      }\n      return {\n        ...record,\n        _customer_accounts: {\n          hasAccount: true,\n          userId: user.id,\n          isActive: user.isActive,\n          lastLoginAt: user.lastLoginAt?.toISOString() ?? null,\n        },\n      }\n    })\n  },\n}\n\nconst companyUserCountEnricher: ResponseEnricher<EntityRecord, CompanyUserCountEnrichment> = {\n  id: 'customer_accounts.company-user-count',\n  targetEntity: 'customers.company',\n  features: ['customer_accounts.view'],\n  priority: 10,\n  timeout: 2000,\n  critical: false,\n  fallback: COMPANY_FALLBACK,\n\n  async enrichOne(record, context: EnricherScope) {\n    return (await this.enrichMany!([record], context))[0]\n  },\n\n  async enrichMany(records, context: EnricherScope) {\n    if (records.length === 0) return records as (EntityRecord & CompanyUserCountEnrichment)[]\n\n    const em = context.em.fork()\n    const recordIds = records.map((r) => r.id)\n\n    const users = await findWithDecryption(\n      em,\n      CustomerUser,\n      {\n        customerEntityId: { $in: recordIds },\n        tenantId: context.tenantId,\n        deletedAt: null,\n      },\n      undefined,\n      { tenantId: context.tenantId, organizationId: context.organizationId },\n    )\n\n    const countByCompanyId = new Map<string, number>()\n    for (const user of users) {\n      if (user.customerEntityId) {\n        countByCompanyId.set(user.customerEntityId, (countByCompanyId.get(user.customerEntityId) ?? 0) + 1)\n      }\n    }\n\n    return records.map((record) => ({\n      ...record,\n      _customer_accounts: {\n        userCount: countByCompanyId.get(record.id) ?? 0,\n      },\n    }))\n  },\n}\n\ntype OrgCustomDomainEnrichment = {\n  _customDomain: { hostname: string; status: DomainStatus } | null\n}\n\nconst ORG_DOMAIN_FALLBACK: OrgCustomDomainEnrichment = { _customDomain: null }\n\nconst ACTIVE_DOMAIN_PRIORITY: Record<DomainStatus, number> = {\n  active: 0,\n  verified: 1,\n  pending: 2,\n  tls_failed: 3,\n  dns_failed: 4,\n}\n\nfunction pickPrimaryDomain(records: DomainMapping[]): DomainMapping | null {\n  if (records.length === 0) return null\n  return records\n    .slice()\n    .sort(\n      (a, b) =>\n        (ACTIVE_DOMAIN_PRIORITY[a.status] ?? 99) - (ACTIVE_DOMAIN_PRIORITY[b.status] ?? 99) ||\n        (b.createdAt?.getTime?.() ?? 0) - (a.createdAt?.getTime?.() ?? 0),\n    )[0]\n}\n\nconst organizationCustomDomainEnricher: ResponseEnricher<EntityRecord, OrgCustomDomainEnrichment> = {\n  id: 'customer_accounts.domain-status:directory:organization',\n  targetEntity: 'directory:organization',\n  features: ['customer_accounts.domain.manage'],\n  priority: 10,\n  timeout: 1_000,\n  critical: false,\n  fallback: ORG_DOMAIN_FALLBACK,\n\n  async enrichOne(record, context: EnricherScope) {\n    return (await this.enrichMany!([record], context))[0]\n  },\n\n  async enrichMany(records, context: EnricherScope) {\n    if (records.length === 0) return records as (EntityRecord & OrgCustomDomainEnrichment)[]\n\n    const em = context.em.fork()\n    const recordIds = records.map((r) => r.id)\n    const domains = await em.find(DomainMapping, {\n      organizationId: { $in: recordIds },\n      tenantId: context.tenantId,\n    } as never)\n\n    const byOrg = new Map<string, DomainMapping[]>()\n    for (const d of domains) {\n      const list = byOrg.get(d.organizationId) ?? []\n      list.push(d)\n      byOrg.set(d.organizationId, list)\n    }\n\n    return records.map((record) => {\n      const matches = byOrg.get(record.id) ?? []\n      const primary = pickPrimaryDomain(matches)\n      return {\n        ...record,\n        _customDomain: primary ? { hostname: primary.hostname, status: primary.status } : null,\n      }\n    })\n  },\n}\n\nexport const enrichers: ResponseEnricher[] = [\n  personAccountStatusEnricher,\n  companyUserCountEnricher,\n  organizationCustomDomainEnricher,\n]\n"],
+  "mappings": "AAEA,SAAS,0BAA0B;AACnC,SAAS,cAAc,qBAAwC;AAoB/D,MAAM,kBAAkB,EAAE,oBAAoB,EAAE,YAAY,MAAM,EAAE;AACpE,MAAM,mBAAmB,EAAE,oBAAoB,EAAE,WAAW,EAAE,EAAE;AAEhE,MAAM,8BAAuF;AAAA,EAC3F,IAAI;AAAA,EACJ,cAAc;AAAA,EACd,UAAU,CAAC,wBAAwB;AAAA,EACnC,UAAU;AAAA,EACV,SAAS;AAAA,EACT,UAAU;AAAA,EACV,UAAU;AAAA,EAEV,MAAM,UAAU,QAAQ,SAAwB;AAC9C,YAAQ,MAAM,KAAK,WAAY,CAAC,MAAM,GAAG,OAAO,GAAG,CAAC;AAAA,EACtD;AAAA,EAEA,MAAM,WAAW,SAAS,SAAwB;AAChD,QAAI,QAAQ,WAAW,EAAG,QAAO;AAEjC,UAAM,KAAK,QAAQ,GAAG,KAAK;AAC3B,UAAM,YAAY,QAAQ,IAAI,CAAC,MAAM,EAAE,EAAE;AAEzC,UAAM,QAAQ,MAAM;AAAA,MAClB;AAAA,MACA;AAAA,MACA;AAAA,QACE,gBAAgB,EAAE,KAAK,UAAU;AAAA,QACjC,UAAU,QAAQ;AAAA,QAClB,WAAW;AAAA,MACb;AAAA,MACA;AAAA,MACA,EAAE,UAAU,QAAQ,UAAU,gBAAgB,QAAQ,eAAe;AAAA,IACvE;AAEA,UAAM,iBAAiB,oBAAI,IAA0B;AACrD,eAAW,QAAQ,OAAO;AACxB,UAAI,KAAK,gBAAgB;AACvB,uBAAe,IAAI,KAAK,gBAAgB,IAAI;AAAA,MAC9C;AAAA,IACF;AAEA,WAAO,QAAQ,IAAI,CAAC,WAAW;AAC7B,YAAM,OAAO,eAAe,IAAI,OAAO,EAAE;AACzC,UAAI,CAAC,MAAM;AACT,eAAO,EAAE,GAAG,QAAQ,oBAAoB,EAAE,YAAY,MAAM,EAAE;AAAA,MAChE;AACA,aAAO;AAAA,QACL,GAAG;AAAA,QACH,oBAAoB;AAAA,UAClB,YAAY;AAAA,UACZ,QAAQ,KAAK;AAAA,UACb,UAAU,KAAK;AAAA,UACf,aAAa,KAAK,aAAa,YAAY,KAAK;AAAA,QAClD;AAAA,MACF;AAAA,IACF,CAAC;AAAA,EACH;AACF;AAEA,MAAM,2BAAuF;AAAA,EAC3F,IAAI;AAAA,EACJ,cAAc;AAAA,EACd,UAAU,CAAC,wBAAwB;AAAA,EACnC,UAAU;AAAA,EACV,SAAS;AAAA,EACT,UAAU;AAAA,EACV,UAAU;AAAA,EAEV,MAAM,UAAU,QAAQ,SAAwB;AAC9C,YAAQ,MAAM,KAAK,WAAY,CAAC,MAAM,GAAG,OAAO,GAAG,CAAC;AAAA,EACtD;AAAA,EAEA,MAAM,WAAW,SAAS,SAAwB;AAChD,QAAI,QAAQ,WAAW,EAAG,QAAO;AAEjC,UAAM,KAAK,QAAQ,GAAG,KAAK;AAC3B,UAAM,YAAY,QAAQ,IAAI,CAAC,MAAM,EAAE,EAAE;AAEzC,UAAM,QAAQ,MAAM;AAAA,MAClB;AAAA,MACA;AAAA,MACA;AAAA,QACE,kBAAkB,EAAE,KAAK,UAAU;AAAA,QACnC,UAAU,QAAQ;AAAA,QAClB,WAAW;AAAA,MACb;AAAA,MACA;AAAA,MACA,EAAE,UAAU,QAAQ,UAAU,gBAAgB,QAAQ,eAAe;AAAA,IACvE;AAEA,UAAM,mBAAmB,oBAAI,IAAoB;AACjD,eAAW,QAAQ,OAAO;AACxB,UAAI,KAAK,kBAAkB;AACzB,yBAAiB,IAAI,KAAK,mBAAmB,iBAAiB,IAAI,KAAK,gBAAgB,KAAK,KAAK,CAAC;AAAA,MACpG;AAAA,IACF;AAEA,WAAO,QAAQ,IAAI,CAAC,YAAY;AAAA,MAC9B,GAAG;AAAA,MACH,oBAAoB;AAAA,QAClB,WAAW,iBAAiB,IAAI,OAAO,EAAE,KAAK;AAAA,MAChD;AAAA,IACF,EAAE;AAAA,EACJ;AACF;AAMA,MAAM,sBAAiD,EAAE,eAAe,KAAK;AAE7E,MAAM,yBAAuD;AAAA,EAC3D,QAAQ;AAAA,EACR,UAAU;AAAA,EACV,SAAS;AAAA,EACT,YAAY;AAAA,EACZ,YAAY;AACd;AAEA,SAAS,kBAAkB,SAAgD;AACzE,MAAI,QAAQ,WAAW,EAAG,QAAO;AACjC,SAAO,QACJ,MAAM,EACN;AAAA,IACC,CAAC,GAAG,OACD,uBAAuB,EAAE,MAAM,KAAK,OAAO,uBAAuB,EAAE,MAAM,KAAK,QAC/E,EAAE,WAAW,UAAU,KAAK,MAAM,EAAE,WAAW,UAAU,KAAK;AAAA,EACnE,EAAE,CAAC;AACP;AAEA,MAAM,mCAA8F;AAAA,EAClG,IAAI;AAAA,EACJ,cAAc;AAAA,EACd,UAAU,CAAC,iCAAiC;AAAA,EAC5C,UAAU;AAAA,EACV,SAAS;AAAA,EACT,UAAU;AAAA,EACV,UAAU;AAAA,EAEV,MAAM,UAAU,QAAQ,SAAwB;AAC9C,YAAQ,MAAM,KAAK,WAAY,CAAC,MAAM,GAAG,OAAO,GAAG,CAAC;AAAA,EACtD;AAAA,EAEA,MAAM,WAAW,SAAS,SAAwB;AAChD,QAAI,QAAQ,WAAW,EAAG,QAAO;AAEjC,UAAM,KAAK,QAAQ,GAAG,KAAK;AAC3B,UAAM,YAAY,QAAQ,IAAI,CAAC,MAAM,EAAE,EAAE;AACzC,UAAM,UAAU,MAAM,GAAG,KAAK,eAAe;AAAA,MAC3C,gBAAgB,EAAE,KAAK,UAAU;AAAA,MACjC,UAAU,QAAQ;AAAA,IACpB,CAAU;AAEV,UAAM,QAAQ,oBAAI,IAA6B;AAC/C,eAAW,KAAK,SAAS;AACvB,YAAM,OAAO,MAAM,IAAI,EAAE,cAAc,KAAK,CAAC;AAC7C,WAAK,KAAK,CAAC;AACX,YAAM,IAAI,EAAE,gBAAgB,IAAI;AAAA,IAClC;AAEA,WAAO,QAAQ,IAAI,CAAC,WAAW;AAC7B,YAAM,UAAU,MAAM,IAAI,OAAO,EAAE,KAAK,CAAC;AACzC,YAAM,UAAU,kBAAkB,OAAO;AACzC,aAAO;AAAA,QACL,GAAG;AAAA,QACH,eAAe,UAAU,EAAE,UAAU,QAAQ,UAAU,QAAQ,QAAQ,OAAO,IAAI;AAAA,MACpF;AAAA,IACF,CAAC;AAAA,EACH;AACF;AAEO,MAAM,YAAgC;AAAA,EAC3C;AAAA,EACA;AAAA,EACA;AACF;",
   "names": []
 }

package/dist/modules/customer_accounts/data/entities.js

@@ -8,7 +8,15 @@ var __decorateClass = (decorators, target, key, kind) => {
   if (kind && result) __defProp(target, key, result);
   return result;
 };
-import { Entity, Index, ManyToOne, PrimaryKey, Property, Unique } from "@mikro-orm/decorators/legacy";
+import { Check, Entity, Enum, Index, ManyToOne, PrimaryKey, Property, Unique } from "@mikro-orm/decorators/legacy";
+const DOMAIN_PROVIDERS = ["traefik"];
+const DOMAIN_STATUSES = [
+  "pending",
+  "verified",
+  "active",
+  "dns_failed",
+  "tls_failed"
+];
 let CustomerUser = class {
   constructor() {
     this.failedLoginAttempts = 0;
@@ -366,6 +374,78 @@ CustomerUserInvitation = __decorateClass([
   Index({ properties: ["token"], name: "customer_user_invitations_token_idx" }),
   Index({ properties: ["tenantId", "emailHash"], name: "customer_user_invitations_tenant_email_hash_idx" })
 ], CustomerUserInvitation);
+let DomainMapping = class {
+  constructor() {
+    this.provider = "traefik";
+    this.status = "pending";
+    this.tlsRetryCount = 0;
+    this.createdAt = /* @__PURE__ */ new Date();
+  }
+};
+__decorateClass([
+  PrimaryKey({ type: "uuid", defaultRaw: "gen_random_uuid()" })
+], DomainMapping.prototype, "id", 2);
+__decorateClass([
+  Property({ type: "text" })
+], DomainMapping.prototype, "hostname", 2);
+__decorateClass([
+  Property({ name: "tenant_id", type: "uuid" })
+], DomainMapping.prototype, "tenantId", 2);
+__decorateClass([
+  Property({ name: "organization_id", type: "uuid" })
+], DomainMapping.prototype, "organizationId", 2);
+__decorateClass([
+  ManyToOne(() => DomainMapping, { fieldName: "replaces_domain_id", nullable: true })
+], DomainMapping.prototype, "replacesDomain", 2);
+__decorateClass([
+  Enum({ items: () => DOMAIN_PROVIDERS, type: "text", name: "provider" })
+], DomainMapping.prototype, "provider", 2);
+__decorateClass([
+  Enum({ items: () => DOMAIN_STATUSES, type: "text", name: "status" })
+], DomainMapping.prototype, "status", 2);
+__decorateClass([
+  Property({ name: "verified_at", type: Date, nullable: true })
+], DomainMapping.prototype, "verifiedAt", 2);
+__decorateClass([
+  Property({ name: "last_dns_check_at", type: Date, nullable: true })
+], DomainMapping.prototype, "lastDnsCheckAt", 2);
+__decorateClass([
+  Property({ name: "dns_failure_reason", type: "text", nullable: true, length: 500 })
+], DomainMapping.prototype, "dnsFailureReason", 2);
+__decorateClass([
+  Property({ name: "tls_failure_reason", type: "text", nullable: true, length: 500 })
+], DomainMapping.prototype, "tlsFailureReason", 2);
+__decorateClass([
+  Property({ name: "tls_retry_count", type: "int", default: 0 })
+], DomainMapping.prototype, "tlsRetryCount", 2);
+__decorateClass([
+  Property({ name: "created_at", type: Date, onCreate: () => /* @__PURE__ */ new Date() })
+], DomainMapping.prototype, "createdAt", 2);
+__decorateClass([
+  Property({ name: "updated_at", type: Date, onUpdate: () => /* @__PURE__ */ new Date(), nullable: true })
+], DomainMapping.prototype, "updatedAt", 2);
+DomainMapping = __decorateClass([
+  Entity({ tableName: "domain_mappings" }),
+  Unique({ properties: ["hostname"], name: "domain_mappings_hostname_unique" }),
+  Index({ properties: ["organizationId"], name: "domain_mappings_organization_id_idx" }),
+  Index({ properties: ["tenantId"], name: "domain_mappings_tenant_id_idx" }),
+  Unique({
+    name: "domain_mappings_replaces_domain_id_unique",
+    expression: `create unique index "domain_mappings_replaces_domain_id_unique" on "domain_mappings" ("replaces_domain_id") where "replaces_domain_id" is not null`
+  }),
+  Index({
+    name: "domain_mappings_pending_verification_idx",
+    expression: `create index "domain_mappings_pending_verification_idx" on "domain_mappings" ("status", "last_dns_check_at") where "status" in ('pending', 'dns_failed')`
+  }),
+  Index({
+    name: "domain_mappings_pending_tls_idx",
+    expression: `create index "domain_mappings_pending_tls_idx" on "domain_mappings" ("status", "updated_at") where "status" in ('verified', 'tls_failed')`
+  }),
+  Check({
+    name: "domain_mappings_hostname_normalized_chk",
+    expression: `"hostname" = lower("hostname") and "hostname" not like '%.'`
+  })
+], DomainMapping);
 export {
   CustomerRole,
   CustomerRoleAcl,
@@ -375,6 +455,9 @@ export {
   CustomerUserInvitation,
   CustomerUserPasswordReset,
   CustomerUserRole,
-  CustomerUserSession
+  CustomerUserSession,
+  DOMAIN_PROVIDERS,
+  DOMAIN_STATUSES,
+  DomainMapping
 };
 //# sourceMappingURL=entities.js.map

package/dist/modules/customer_accounts/data/entities.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/customer_accounts/data/entities.ts"],
-  "sourcesContent": ["import { Entity, Index, ManyToOne, PrimaryKey, Property, Unique } from '@mikro-orm/decorators/legacy'\n\n@Entity({ tableName: 'customer_users' })\n@Unique({ properties: ['tenantId', 'emailHash'], name: 'customer_users_tenant_email_hash_uniq' })\nexport class CustomerUser {\n  @PrimaryKey({ type: 'uuid', defaultRaw: 'gen_random_uuid()' })\n  id!: string\n\n  @Property({ name: 'tenant_id', type: 'uuid' })\n  tenantId!: string\n\n  @Property({ name: 'organization_id', type: 'uuid' })\n  organizationId!: string\n\n  @Property({ type: 'text' })\n  email!: string\n\n  @Property({ name: 'email_hash', type: 'text' })\n  @Index({ name: 'customer_users_email_hash_idx' })\n  emailHash!: string\n\n  @Property({ name: 'password_hash', type: 'text', nullable: true })\n  passwordHash?: string | null\n\n  @Property({ name: 'display_name', type: 'text' })\n  displayName!: string\n\n  @Property({ name: 'email_verified_at', type: Date, nullable: true })\n  emailVerifiedAt?: Date | null\n\n  @Property({ name: 'failed_login_attempts', type: 'int', default: 0 })\n  failedLoginAttempts: number = 0\n\n  @Property({ name: 'locked_until', type: Date, nullable: true })\n  lockedUntil?: Date | null\n\n  @Property({ name: 'last_login_at', type: Date, nullable: true })\n  lastLoginAt?: Date | null\n\n  @Property({ name: 'sessions_revoked_at', type: Date, nullable: true })\n  sessionsRevokedAt?: Date | null\n\n  @Property({ name: 'person_entity_id', type: 'uuid', nullable: true })\n  @Index({ name: 'customer_users_person_entity_idx' })\n  personEntityId?: string | null\n\n  @Property({ name: 'customer_entity_id', type: 'uuid', nullable: true })\n  @Index({ name: 'customer_users_customer_entity_idx' })\n  customerEntityId?: string | null\n\n  @Property({ name: 'is_active', type: 'boolean', default: true })\n  isActive: boolean = true\n\n  @Property({ name: 'created_at', type: Date, onCreate: () => new Date() })\n  createdAt: Date = new Date()\n\n  @Property({ name: 'updated_at', type: Date, onUpdate: () => new Date(), nullable: true })\n  updatedAt?: Date\n\n  @Property({ name: 'deleted_at', type: Date, nullable: true })\n  deletedAt?: Date | null\n}\n\n@Entity({ tableName: 'customer_roles' })\n@Unique({ properties: ['tenantId', 'slug'], name: 'customer_roles_tenant_slug_uniq' })\nexport class CustomerRole {\n  @PrimaryKey({ type: 'uuid', defaultRaw: 'gen_random_uuid()' })\n  id!: string\n\n  @Property({ name: 'tenant_id', type: 'uuid' })\n  tenantId!: string\n\n  @Property({ name: 'organization_id', type: 'uuid' })\n  organizationId!: string\n\n  @Property({ type: 'text' })\n  name!: string\n\n  @Property({ type: 'text' })\n  slug!: string\n\n  @Property({ type: 'text', nullable: true })\n  description?: string | null\n\n  @Property({ name: 'is_default', type: 'boolean', default: false })\n  isDefault: boolean = false\n\n  @Property({ name: 'is_system', type: 'boolean', default: false })\n  isSystem: boolean = false\n\n  @Property({ name: 'customer_assignable', type: 'boolean', default: false })\n  customerAssignable: boolean = false\n\n  @Property({ name: 'created_at', type: Date, onCreate: () => new Date() })\n  createdAt: Date = new Date()\n\n  @Property({ name: 'updated_at', type: Date, onUpdate: () => new Date(), nullable: true })\n  updatedAt?: Date\n\n  @Property({ name: 'deleted_at', type: Date, nullable: true })\n  deletedAt?: Date | null\n}\n\n@Entity({ tableName: 'customer_role_acls' })\n@Unique({ properties: ['role', 'tenantId'], name: 'customer_role_acls_role_tenant_uniq' })\nexport class CustomerRoleAcl {\n  @PrimaryKey({ type: 'uuid', defaultRaw: 'gen_random_uuid()' })\n  id!: string\n\n  @ManyToOne(() => CustomerRole)\n  role!: CustomerRole\n\n  @Property({ name: 'tenant_id', type: 'uuid' })\n  tenantId!: string\n\n  @Property({ name: 'features_json', type: 'json', nullable: true })\n  featuresJson?: string[] | null\n\n  @Property({ name: 'is_portal_admin', type: 'boolean', default: false })\n  isPortalAdmin: boolean = false\n\n  @Property({ name: 'created_at', type: Date, onCreate: () => new Date() })\n  createdAt: Date = new Date()\n\n  @Property({ name: 'updated_at', type: Date, onUpdate: () => new Date(), nullable: true })\n  updatedAt?: Date\n\n  @Property({ name: 'deleted_at', type: Date, nullable: true })\n  deletedAt?: Date | null\n}\n\n@Entity({ tableName: 'customer_user_roles' })\n@Unique({ properties: ['user', 'role'], name: 'customer_user_roles_user_role_uniq' })\nexport class CustomerUserRole {\n  @PrimaryKey({ type: 'uuid', defaultRaw: 'gen_random_uuid()' })\n  id!: string\n\n  @ManyToOne(() => CustomerUser)\n  user!: CustomerUser\n\n  @ManyToOne(() => CustomerRole)\n  role!: CustomerRole\n\n  @Property({ name: 'created_at', type: Date, onCreate: () => new Date() })\n  createdAt: Date = new Date()\n\n  @Property({ name: 'deleted_at', type: Date, nullable: true })\n  deletedAt?: Date | null\n}\n\n@Entity({ tableName: 'customer_user_acls' })\n@Unique({ properties: ['user', 'tenantId'], name: 'customer_user_acls_user_tenant_uniq' })\nexport class CustomerUserAcl {\n  @PrimaryKey({ type: 'uuid', defaultRaw: 'gen_random_uuid()' })\n  id!: string\n\n  @ManyToOne(() => CustomerUser)\n  user!: CustomerUser\n\n  @Property({ name: 'tenant_id', type: 'uuid' })\n  tenantId!: string\n\n  @Property({ name: 'features_json', type: 'json', nullable: true })\n  featuresJson?: string[] | null\n\n  @Property({ name: 'is_portal_admin', type: 'boolean', default: false })\n  isPortalAdmin: boolean = false\n\n  @Property({ name: 'created_at', type: Date, onCreate: () => new Date() })\n  createdAt: Date = new Date()\n\n  @Property({ name: 'updated_at', type: Date, onUpdate: () => new Date(), nullable: true })\n  updatedAt?: Date\n\n  @Property({ name: 'deleted_at', type: Date, nullable: true })\n  deletedAt?: Date | null\n}\n\n@Entity({ tableName: 'customer_user_sessions' })\n@Index({ properties: ['tokenHash'], name: 'customer_user_sessions_token_hash_idx' })\nexport class CustomerUserSession {\n  @PrimaryKey({ type: 'uuid', defaultRaw: 'gen_random_uuid()' })\n  id!: string\n\n  @ManyToOne(() => CustomerUser)\n  user!: CustomerUser\n\n  @Property({ name: 'token_hash', type: 'text' })\n  tokenHash!: string\n\n  @Property({ name: 'ip_address', type: 'text', nullable: true })\n  ipAddress?: string | null\n\n  @Property({ name: 'user_agent', type: 'text', nullable: true })\n  userAgent?: string | null\n\n  @Property({ name: 'expires_at', type: Date })\n  expiresAt!: Date\n\n  @Property({ name: 'last_used_at', type: Date, nullable: true })\n  lastUsedAt?: Date | null\n\n  @Property({ name: 'created_at', type: Date, onCreate: () => new Date() })\n  createdAt: Date = new Date()\n\n  @Property({ name: 'deleted_at', type: Date, nullable: true })\n  deletedAt?: Date | null\n}\n\n@Entity({ tableName: 'customer_user_email_verifications' })\n@Index({ properties: ['token'], name: 'customer_user_email_verifications_token_idx' })\nexport class CustomerUserEmailVerification {\n  @PrimaryKey({ type: 'uuid', defaultRaw: 'gen_random_uuid()' })\n  id!: string\n\n  @ManyToOne(() => CustomerUser)\n  user!: CustomerUser\n\n  @Property({ type: 'text' })\n  token!: string\n\n  @Property({ type: 'text', default: 'email_verification' })\n  purpose: string = 'email_verification'\n\n  @Property({ name: 'expires_at', type: Date })\n  expiresAt!: Date\n\n  @Property({ name: 'used_at', type: Date, nullable: true })\n  usedAt?: Date | null\n\n  @Property({ name: 'created_at', type: Date, onCreate: () => new Date() })\n  createdAt: Date = new Date()\n}\n\n@Entity({ tableName: 'customer_user_password_resets' })\n@Index({ properties: ['token'], name: 'customer_user_password_resets_token_idx' })\nexport class CustomerUserPasswordReset {\n  @PrimaryKey({ type: 'uuid', defaultRaw: 'gen_random_uuid()' })\n  id!: string\n\n  @ManyToOne(() => CustomerUser)\n  user!: CustomerUser\n\n  @Property({ type: 'text' })\n  token!: string\n\n  @Property({ name: 'expires_at', type: Date })\n  expiresAt!: Date\n\n  @Property({ name: 'used_at', type: Date, nullable: true })\n  usedAt?: Date | null\n\n  @Property({ name: 'created_at', type: Date, onCreate: () => new Date() })\n  createdAt: Date = new Date()\n}\n\n@Entity({ tableName: 'customer_user_invitations' })\n@Index({ properties: ['token'], name: 'customer_user_invitations_token_idx' })\n@Index({ properties: ['tenantId', 'emailHash'], name: 'customer_user_invitations_tenant_email_hash_idx' })\nexport class CustomerUserInvitation {\n  @PrimaryKey({ type: 'uuid', defaultRaw: 'gen_random_uuid()' })\n  id!: string\n\n  @Property({ name: 'tenant_id', type: 'uuid' })\n  tenantId!: string\n\n  @Property({ name: 'organization_id', type: 'uuid' })\n  organizationId!: string\n\n  @Property({ type: 'text' })\n  email!: string\n\n  @Property({ name: 'email_hash', type: 'text' })\n  emailHash!: string\n\n  @Property({ type: 'text' })\n  token!: string\n\n  @Property({ name: 'customer_entity_id', type: 'uuid', nullable: true })\n  customerEntityId?: string | null\n\n  @Property({ name: 'role_ids_json', type: 'json', nullable: true })\n  roleIdsJson?: string[] | null\n\n  @Property({ name: 'invited_by_user_id', type: 'uuid', nullable: true })\n  invitedByUserId?: string | null\n\n  @Property({ name: 'invited_by_customer_user_id', type: 'uuid', nullable: true })\n  invitedByCustomerUserId?: string | null\n\n  @Property({ name: 'display_name', type: 'text', nullable: true })\n  displayName?: string | null\n\n  @Property({ name: 'expires_at', type: Date })\n  expiresAt!: Date\n\n  @Property({ name: 'accepted_at', type: Date, nullable: true })\n  acceptedAt?: Date | null\n\n  @Property({ name: 'cancelled_at', type: Date, nullable: true })\n  cancelledAt?: Date | null\n\n  @Property({ name: 'created_at', type: Date, onCreate: () => new Date() })\n  createdAt: Date = new Date()\n}\n"],
-  "mappings": ";;;;;;;;;;AAAA,SAAS,QAAQ,OAAO,WAAW,YAAY,UAAU,cAAc;AAIhE,IAAM,eAAN,MAAmB;AAAA,EAAnB;AA2BL,+BAA8B;AAoB9B,oBAAoB;AAGpB,qBAAkB,oBAAI,KAAK;AAAA;AAO7B;AAvDE;AAAA,EADC,WAAW,EAAE,MAAM,QAAQ,YAAY,oBAAoB,CAAC;AAAA,GADlD,aAEX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,aAAa,MAAM,OAAO,CAAC;AAAA,GAJlC,aAKX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,mBAAmB,MAAM,OAAO,CAAC;AAAA,GAPxC,aAQX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,OAAO,CAAC;AAAA,GAVf,aAWX;AAIA;AAAA,EAFC,SAAS,EAAE,MAAM,cAAc,MAAM,OAAO,CAAC;AAAA,EAC7C,MAAM,EAAE,MAAM,gCAAgC,CAAC;AAAA,GAdrC,aAeX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,iBAAiB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GAjBtD,aAkBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,gBAAgB,MAAM,OAAO,CAAC;AAAA,GApBrC,aAqBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,qBAAqB,MAAM,MAAM,UAAU,KAAK,CAAC;AAAA,GAvBxD,aAwBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,yBAAyB,MAAM,OAAO,SAAS,EAAE,CAAC;AAAA,GA1BzD,aA2BX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,gBAAgB,MAAM,MAAM,UAAU,KAAK,CAAC;AAAA,GA7BnD,aA8BX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,iBAAiB,MAAM,MAAM,UAAU,KAAK,CAAC;AAAA,GAhCpD,aAiCX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,uBAAuB,MAAM,MAAM,UAAU,KAAK,CAAC;AAAA,GAnC1D,aAoCX;AAIA;AAAA,EAFC,SAAS,EAAE,MAAM,oBAAoB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,EACnE,MAAM,EAAE,MAAM,mCAAmC,CAAC;AAAA,GAvCxC,aAwCX;AAIA;AAAA,EAFC,SAAS,EAAE,MAAM,sBAAsB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,EACrE,MAAM,EAAE,MAAM,qCAAqC,CAAC;AAAA,GA3C1C,aA4CX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,aAAa,MAAM,WAAW,SAAS,KAAK,CAAC;AAAA,GA9CpD,aA+CX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,MAAM,UAAU,MAAM,oBAAI,KAAK,EAAE,CAAC;AAAA,GAjD7D,aAkDX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,MAAM,UAAU,MAAM,oBAAI,KAAK,GAAG,UAAU,KAAK,CAAC;AAAA,GApD7E,aAqDX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,MAAM,UAAU,KAAK,CAAC;AAAA,GAvDjD,aAwDX;AAxDW,eAAN;AAAA,EAFN,OAAO,EAAE,WAAW,iBAAiB,CAAC;AAAA,EACtC,OAAO,EAAE,YAAY,CAAC,YAAY,WAAW,GAAG,MAAM,wCAAwC,CAAC;AAAA,GACnF;AA6DN,IAAM,eAAN,MAAmB;AAAA,EAAnB;AAoBL,qBAAqB;AAGrB,oBAAoB;AAGpB,8BAA8B;AAG9B,qBAAkB,oBAAI,KAAK;AAAA;AAO7B;AAlCE;AAAA,EADC,WAAW,EAAE,MAAM,QAAQ,YAAY,oBAAoB,CAAC;AAAA,GADlD,aAEX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,aAAa,MAAM,OAAO,CAAC;AAAA,GAJlC,aAKX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,mBAAmB,MAAM,OAAO,CAAC;AAAA,GAPxC,aAQX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,OAAO,CAAC;AAAA,GAVf,aAWX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,OAAO,CAAC;AAAA,GAbf,aAcX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GAhB/B,aAiBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,WAAW,SAAS,MAAM,CAAC;AAAA,GAnBtD,aAoBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,aAAa,MAAM,WAAW,SAAS,MAAM,CAAC;AAAA,GAtBrD,aAuBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,uBAAuB,MAAM,WAAW,SAAS,MAAM,CAAC;AAAA,GAzB/D,aA0BX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,MAAM,UAAU,MAAM,oBAAI,KAAK,EAAE,CAAC;AAAA,GA5B7D,aA6BX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,MAAM,UAAU,MAAM,oBAAI,KAAK,GAAG,UAAU,KAAK,CAAC;AAAA,GA/B7E,aAgCX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,MAAM,UAAU,KAAK,CAAC;AAAA,GAlCjD,aAmCX;AAnCW,eAAN;AAAA,EAFN,OAAO,EAAE,WAAW,iBAAiB,CAAC;AAAA,EACtC,OAAO,EAAE,YAAY,CAAC,YAAY,MAAM,GAAG,MAAM,kCAAkC,CAAC;AAAA,GACxE;AAwCN,IAAM,kBAAN,MAAsB;AAAA,EAAtB;AAcL,yBAAyB;AAGzB,qBAAkB,oBAAI,KAAK;AAAA;AAO7B;AAtBE;AAAA,EADC,WAAW,EAAE,MAAM,QAAQ,YAAY,oBAAoB,CAAC;AAAA,GADlD,gBAEX;AAGA;AAAA,EADC,UAAU,MAAM,YAAY;AAAA,GAJlB,gBAKX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,aAAa,MAAM,OAAO,CAAC;AAAA,GAPlC,gBAQX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,iBAAiB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GAVtD,gBAWX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,mBAAmB,MAAM,WAAW,SAAS,MAAM,CAAC;AAAA,GAb3D,gBAcX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,MAAM,UAAU,MAAM,oBAAI,KAAK,EAAE,CAAC;AAAA,GAhB7D,gBAiBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,MAAM,UAAU,MAAM,oBAAI,KAAK,GAAG,UAAU,KAAK,CAAC;AAAA,GAnB7E,gBAoBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,MAAM,UAAU,KAAK,CAAC;AAAA,GAtBjD,gBAuBX;AAvBW,kBAAN;AAAA,EAFN,OAAO,EAAE,WAAW,qBAAqB,CAAC;AAAA,EAC1C,OAAO,EAAE,YAAY,CAAC,QAAQ,UAAU,GAAG,MAAM,sCAAsC,CAAC;AAAA,GAC5E;AA4BN,IAAM,mBAAN,MAAuB;AAAA,EAAvB;AAWL,qBAAkB,oBAAI,KAAK;AAAA;AAI7B;AAbE;AAAA,EADC,WAAW,EAAE,MAAM,QAAQ,YAAY,oBAAoB,CAAC;AAAA,GADlD,iBAEX;AAGA;AAAA,EADC,UAAU,MAAM,YAAY;AAAA,GAJlB,iBAKX;AAGA;AAAA,EADC,UAAU,MAAM,YAAY;AAAA,GAPlB,iBAQX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,MAAM,UAAU,MAAM,oBAAI,KAAK,EAAE,CAAC;AAAA,GAV7D,iBAWX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,MAAM,UAAU,KAAK,CAAC;AAAA,GAbjD,iBAcX;AAdW,mBAAN;AAAA,EAFN,OAAO,EAAE,WAAW,sBAAsB,CAAC;AAAA,EAC3C,OAAO,EAAE,YAAY,CAAC,QAAQ,MAAM,GAAG,MAAM,qCAAqC,CAAC;AAAA,GACvE;AAmBN,IAAM,kBAAN,MAAsB;AAAA,EAAtB;AAcL,yBAAyB;AAGzB,qBAAkB,oBAAI,KAAK;AAAA;AAO7B;AAtBE;AAAA,EADC,WAAW,EAAE,MAAM,QAAQ,YAAY,oBAAoB,CAAC;AAAA,GADlD,gBAEX;AAGA;AAAA,EADC,UAAU,MAAM,YAAY;AAAA,GAJlB,gBAKX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,aAAa,MAAM,OAAO,CAAC;AAAA,GAPlC,gBAQX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,iBAAiB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GAVtD,gBAWX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,mBAAmB,MAAM,WAAW,SAAS,MAAM,CAAC;AAAA,GAb3D,gBAcX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,MAAM,UAAU,MAAM,oBAAI,KAAK,EAAE,CAAC;AAAA,GAhB7D,gBAiBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,MAAM,UAAU,MAAM,oBAAI,KAAK,GAAG,UAAU,KAAK,CAAC;AAAA,GAnB7E,gBAoBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,MAAM,UAAU,KAAK,CAAC;AAAA,GAtBjD,gBAuBX;AAvBW,kBAAN;AAAA,EAFN,OAAO,EAAE,WAAW,qBAAqB,CAAC;AAAA,EAC1C,OAAO,EAAE,YAAY,CAAC,QAAQ,UAAU,GAAG,MAAM,sCAAsC,CAAC;AAAA,GAC5E;AA4BN,IAAM,sBAAN,MAA0B;AAAA,EAA1B;AAuBL,qBAAkB,oBAAI,KAAK;AAAA;AAI7B;AAzBE;AAAA,EADC,WAAW,EAAE,MAAM,QAAQ,YAAY,oBAAoB,CAAC;AAAA,GADlD,oBAEX;AAGA;AAAA,EADC,UAAU,MAAM,YAAY;AAAA,GAJlB,oBAKX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,OAAO,CAAC;AAAA,GAPnC,oBAQX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GAVnD,oBAWX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GAbnD,oBAcX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,KAAK,CAAC;AAAA,GAhBjC,oBAiBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,gBAAgB,MAAM,MAAM,UAAU,KAAK,CAAC;AAAA,GAnBnD,oBAoBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,MAAM,UAAU,MAAM,oBAAI,KAAK,EAAE,CAAC;AAAA,GAtB7D,oBAuBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,MAAM,UAAU,KAAK,CAAC;AAAA,GAzBjD,oBA0BX;AA1BW,sBAAN;AAAA,EAFN,OAAO,EAAE,WAAW,yBAAyB,CAAC;AAAA,EAC9C,MAAM,EAAE,YAAY,CAAC,WAAW,GAAG,MAAM,wCAAwC,CAAC;AAAA,GACtE;AA+BN,IAAM,gCAAN,MAAoC;AAAA,EAApC;AAWL,mBAAkB;AASlB,qBAAkB,oBAAI,KAAK;AAAA;AAC7B;AAnBE;AAAA,EADC,WAAW,EAAE,MAAM,QAAQ,YAAY,oBAAoB,CAAC;AAAA,GADlD,8BAEX;AAGA;AAAA,EADC,UAAU,MAAM,YAAY;AAAA,GAJlB,8BAKX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,OAAO,CAAC;AAAA,GAPf,8BAQX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,QAAQ,SAAS,qBAAqB,CAAC;AAAA,GAV9C,8BAWX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,KAAK,CAAC;AAAA,GAbjC,8BAcX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,WAAW,MAAM,MAAM,UAAU,KAAK,CAAC;AAAA,GAhB9C,8BAiBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,MAAM,UAAU,MAAM,oBAAI,KAAK,EAAE,CAAC;AAAA,GAnB7D,8BAoBX;AApBW,gCAAN;AAAA,EAFN,OAAO,EAAE,WAAW,oCAAoC,CAAC;AAAA,EACzD,MAAM,EAAE,YAAY,CAAC,OAAO,GAAG,MAAM,8CAA8C,CAAC;AAAA,GACxE;AAyBN,IAAM,4BAAN,MAAgC;AAAA,EAAhC;AAiBL,qBAAkB,oBAAI,KAAK;AAAA;AAC7B;AAhBE;AAAA,EADC,WAAW,EAAE,MAAM,QAAQ,YAAY,oBAAoB,CAAC;AAAA,GADlD,0BAEX;AAGA;AAAA,EADC,UAAU,MAAM,YAAY;AAAA,GAJlB,0BAKX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,OAAO,CAAC;AAAA,GAPf,0BAQX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,KAAK,CAAC;AAAA,GAVjC,0BAWX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,WAAW,MAAM,MAAM,UAAU,KAAK,CAAC;AAAA,GAb9C,0BAcX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,MAAM,UAAU,MAAM,oBAAI,KAAK,EAAE,CAAC;AAAA,GAhB7D,0BAiBX;AAjBW,4BAAN;AAAA,EAFN,OAAO,EAAE,WAAW,gCAAgC,CAAC;AAAA,EACrD,MAAM,EAAE,YAAY,CAAC,OAAO,GAAG,MAAM,0CAA0C,CAAC;AAAA,GACpE;AAuBN,IAAM,yBAAN,MAA6B;AAAA,EAA7B;AA4CL,qBAAkB,oBAAI,KAAK;AAAA;AAC7B;AA3CE;AAAA,EADC,WAAW,EAAE,MAAM,QAAQ,YAAY,oBAAoB,CAAC;AAAA,GADlD,uBAEX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,aAAa,MAAM,OAAO,CAAC;AAAA,GAJlC,uBAKX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,mBAAmB,MAAM,OAAO,CAAC;AAAA,GAPxC,uBAQX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,OAAO,CAAC;AAAA,GAVf,uBAWX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,OAAO,CAAC;AAAA,GAbnC,uBAcX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,OAAO,CAAC;AAAA,GAhBf,uBAiBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,sBAAsB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GAnB3D,uBAoBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,iBAAiB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GAtBtD,uBAuBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,sBAAsB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GAzB3D,uBA0BX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,+BAA+B,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GA5BpE,uBA6BX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,gBAAgB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GA/BrD,uBAgCX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,KAAK,CAAC;AAAA,GAlCjC,uBAmCX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,eAAe,MAAM,MAAM,UAAU,KAAK,CAAC;AAAA,GArClD,uBAsCX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,gBAAgB,MAAM,MAAM,UAAU,KAAK,CAAC;AAAA,GAxCnD,uBAyCX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,MAAM,UAAU,MAAM,oBAAI,KAAK,EAAE,CAAC;AAAA,GA3C7D,uBA4CX;AA5CW,yBAAN;AAAA,EAHN,OAAO,EAAE,WAAW,4BAA4B,CAAC;AAAA,EACjD,MAAM,EAAE,YAAY,CAAC,OAAO,GAAG,MAAM,sCAAsC,CAAC;AAAA,EAC5E,MAAM,EAAE,YAAY,CAAC,YAAY,WAAW,GAAG,MAAM,kDAAkD,CAAC;AAAA,GAC5F;",
+  "sourcesContent": ["import { Check, Entity, Enum, Index, ManyToOne, PrimaryKey, Property, Unique } from '@mikro-orm/decorators/legacy'\n\nexport type DomainProvider = 'traefik'\nexport type DomainStatus = 'pending' | 'verified' | 'active' | 'dns_failed' | 'tls_failed'\n\nexport const DOMAIN_PROVIDERS: readonly DomainProvider[] = ['traefik'] as const\nexport const DOMAIN_STATUSES: readonly DomainStatus[] = [\n  'pending',\n  'verified',\n  'active',\n  'dns_failed',\n  'tls_failed',\n] as const\n\n@Entity({ tableName: 'customer_users' })\n@Unique({ properties: ['tenantId', 'emailHash'], name: 'customer_users_tenant_email_hash_uniq' })\nexport class CustomerUser {\n  @PrimaryKey({ type: 'uuid', defaultRaw: 'gen_random_uuid()' })\n  id!: string\n\n  @Property({ name: 'tenant_id', type: 'uuid' })\n  tenantId!: string\n\n  @Property({ name: 'organization_id', type: 'uuid' })\n  organizationId!: string\n\n  @Property({ type: 'text' })\n  email!: string\n\n  @Property({ name: 'email_hash', type: 'text' })\n  @Index({ name: 'customer_users_email_hash_idx' })\n  emailHash!: string\n\n  @Property({ name: 'password_hash', type: 'text', nullable: true })\n  passwordHash?: string | null\n\n  @Property({ name: 'display_name', type: 'text' })\n  displayName!: string\n\n  @Property({ name: 'email_verified_at', type: Date, nullable: true })\n  emailVerifiedAt?: Date | null\n\n  @Property({ name: 'failed_login_attempts', type: 'int', default: 0 })\n  failedLoginAttempts: number = 0\n\n  @Property({ name: 'locked_until', type: Date, nullable: true })\n  lockedUntil?: Date | null\n\n  @Property({ name: 'last_login_at', type: Date, nullable: true })\n  lastLoginAt?: Date | null\n\n  @Property({ name: 'sessions_revoked_at', type: Date, nullable: true })\n  sessionsRevokedAt?: Date | null\n\n  @Property({ name: 'person_entity_id', type: 'uuid', nullable: true })\n  @Index({ name: 'customer_users_person_entity_idx' })\n  personEntityId?: string | null\n\n  @Property({ name: 'customer_entity_id', type: 'uuid', nullable: true })\n  @Index({ name: 'customer_users_customer_entity_idx' })\n  customerEntityId?: string | null\n\n  @Property({ name: 'is_active', type: 'boolean', default: true })\n  isActive: boolean = true\n\n  @Property({ name: 'created_at', type: Date, onCreate: () => new Date() })\n  createdAt: Date = new Date()\n\n  @Property({ name: 'updated_at', type: Date, onUpdate: () => new Date(), nullable: true })\n  updatedAt?: Date\n\n  @Property({ name: 'deleted_at', type: Date, nullable: true })\n  deletedAt?: Date | null\n}\n\n@Entity({ tableName: 'customer_roles' })\n@Unique({ properties: ['tenantId', 'slug'], name: 'customer_roles_tenant_slug_uniq' })\nexport class CustomerRole {\n  @PrimaryKey({ type: 'uuid', defaultRaw: 'gen_random_uuid()' })\n  id!: string\n\n  @Property({ name: 'tenant_id', type: 'uuid' })\n  tenantId!: string\n\n  @Property({ name: 'organization_id', type: 'uuid' })\n  organizationId!: string\n\n  @Property({ type: 'text' })\n  name!: string\n\n  @Property({ type: 'text' })\n  slug!: string\n\n  @Property({ type: 'text', nullable: true })\n  description?: string | null\n\n  @Property({ name: 'is_default', type: 'boolean', default: false })\n  isDefault: boolean = false\n\n  @Property({ name: 'is_system', type: 'boolean', default: false })\n  isSystem: boolean = false\n\n  @Property({ name: 'customer_assignable', type: 'boolean', default: false })\n  customerAssignable: boolean = false\n\n  @Property({ name: 'created_at', type: Date, onCreate: () => new Date() })\n  createdAt: Date = new Date()\n\n  @Property({ name: 'updated_at', type: Date, onUpdate: () => new Date(), nullable: true })\n  updatedAt?: Date\n\n  @Property({ name: 'deleted_at', type: Date, nullable: true })\n  deletedAt?: Date | null\n}\n\n@Entity({ tableName: 'customer_role_acls' })\n@Unique({ properties: ['role', 'tenantId'], name: 'customer_role_acls_role_tenant_uniq' })\nexport class CustomerRoleAcl {\n  @PrimaryKey({ type: 'uuid', defaultRaw: 'gen_random_uuid()' })\n  id!: string\n\n  @ManyToOne(() => CustomerRole)\n  role!: CustomerRole\n\n  @Property({ name: 'tenant_id', type: 'uuid' })\n  tenantId!: string\n\n  @Property({ name: 'features_json', type: 'json', nullable: true })\n  featuresJson?: string[] | null\n\n  @Property({ name: 'is_portal_admin', type: 'boolean', default: false })\n  isPortalAdmin: boolean = false\n\n  @Property({ name: 'created_at', type: Date, onCreate: () => new Date() })\n  createdAt: Date = new Date()\n\n  @Property({ name: 'updated_at', type: Date, onUpdate: () => new Date(), nullable: true })\n  updatedAt?: Date\n\n  @Property({ name: 'deleted_at', type: Date, nullable: true })\n  deletedAt?: Date | null\n}\n\n@Entity({ tableName: 'customer_user_roles' })\n@Unique({ properties: ['user', 'role'], name: 'customer_user_roles_user_role_uniq' })\nexport class CustomerUserRole {\n  @PrimaryKey({ type: 'uuid', defaultRaw: 'gen_random_uuid()' })\n  id!: string\n\n  @ManyToOne(() => CustomerUser)\n  user!: CustomerUser\n\n  @ManyToOne(() => CustomerRole)\n  role!: CustomerRole\n\n  @Property({ name: 'created_at', type: Date, onCreate: () => new Date() })\n  createdAt: Date = new Date()\n\n  @Property({ name: 'deleted_at', type: Date, nullable: true })\n  deletedAt?: Date | null\n}\n\n@Entity({ tableName: 'customer_user_acls' })\n@Unique({ properties: ['user', 'tenantId'], name: 'customer_user_acls_user_tenant_uniq' })\nexport class CustomerUserAcl {\n  @PrimaryKey({ type: 'uuid', defaultRaw: 'gen_random_uuid()' })\n  id!: string\n\n  @ManyToOne(() => CustomerUser)\n  user!: CustomerUser\n\n  @Property({ name: 'tenant_id', type: 'uuid' })\n  tenantId!: string\n\n  @Property({ name: 'features_json', type: 'json', nullable: true })\n  featuresJson?: string[] | null\n\n  @Property({ name: 'is_portal_admin', type: 'boolean', default: false })\n  isPortalAdmin: boolean = false\n\n  @Property({ name: 'created_at', type: Date, onCreate: () => new Date() })\n  createdAt: Date = new Date()\n\n  @Property({ name: 'updated_at', type: Date, onUpdate: () => new Date(), nullable: true })\n  updatedAt?: Date\n\n  @Property({ name: 'deleted_at', type: Date, nullable: true })\n  deletedAt?: Date | null\n}\n\n@Entity({ tableName: 'customer_user_sessions' })\n@Index({ properties: ['tokenHash'], name: 'customer_user_sessions_token_hash_idx' })\nexport class CustomerUserSession {\n  @PrimaryKey({ type: 'uuid', defaultRaw: 'gen_random_uuid()' })\n  id!: string\n\n  @ManyToOne(() => CustomerUser)\n  user!: CustomerUser\n\n  @Property({ name: 'token_hash', type: 'text' })\n  tokenHash!: string\n\n  @Property({ name: 'ip_address', type: 'text', nullable: true })\n  ipAddress?: string | null\n\n  @Property({ name: 'user_agent', type: 'text', nullable: true })\n  userAgent?: string | null\n\n  @Property({ name: 'expires_at', type: Date })\n  expiresAt!: Date\n\n  @Property({ name: 'last_used_at', type: Date, nullable: true })\n  lastUsedAt?: Date | null\n\n  @Property({ name: 'created_at', type: Date, onCreate: () => new Date() })\n  createdAt: Date = new Date()\n\n  @Property({ name: 'deleted_at', type: Date, nullable: true })\n  deletedAt?: Date | null\n}\n\n@Entity({ tableName: 'customer_user_email_verifications' })\n@Index({ properties: ['token'], name: 'customer_user_email_verifications_token_idx' })\nexport class CustomerUserEmailVerification {\n  @PrimaryKey({ type: 'uuid', defaultRaw: 'gen_random_uuid()' })\n  id!: string\n\n  @ManyToOne(() => CustomerUser)\n  user!: CustomerUser\n\n  @Property({ type: 'text' })\n  token!: string\n\n  @Property({ type: 'text', default: 'email_verification' })\n  purpose: string = 'email_verification'\n\n  @Property({ name: 'expires_at', type: Date })\n  expiresAt!: Date\n\n  @Property({ name: 'used_at', type: Date, nullable: true })\n  usedAt?: Date | null\n\n  @Property({ name: 'created_at', type: Date, onCreate: () => new Date() })\n  createdAt: Date = new Date()\n}\n\n@Entity({ tableName: 'customer_user_password_resets' })\n@Index({ properties: ['token'], name: 'customer_user_password_resets_token_idx' })\nexport class CustomerUserPasswordReset {\n  @PrimaryKey({ type: 'uuid', defaultRaw: 'gen_random_uuid()' })\n  id!: string\n\n  @ManyToOne(() => CustomerUser)\n  user!: CustomerUser\n\n  @Property({ type: 'text' })\n  token!: string\n\n  @Property({ name: 'expires_at', type: Date })\n  expiresAt!: Date\n\n  @Property({ name: 'used_at', type: Date, nullable: true })\n  usedAt?: Date | null\n\n  @Property({ name: 'created_at', type: Date, onCreate: () => new Date() })\n  createdAt: Date = new Date()\n}\n\n@Entity({ tableName: 'customer_user_invitations' })\n@Index({ properties: ['token'], name: 'customer_user_invitations_token_idx' })\n@Index({ properties: ['tenantId', 'emailHash'], name: 'customer_user_invitations_tenant_email_hash_idx' })\nexport class CustomerUserInvitation {\n  @PrimaryKey({ type: 'uuid', defaultRaw: 'gen_random_uuid()' })\n  id!: string\n\n  @Property({ name: 'tenant_id', type: 'uuid' })\n  tenantId!: string\n\n  @Property({ name: 'organization_id', type: 'uuid' })\n  organizationId!: string\n\n  @Property({ type: 'text' })\n  email!: string\n\n  @Property({ name: 'email_hash', type: 'text' })\n  emailHash!: string\n\n  @Property({ type: 'text' })\n  token!: string\n\n  @Property({ name: 'customer_entity_id', type: 'uuid', nullable: true })\n  customerEntityId?: string | null\n\n  @Property({ name: 'role_ids_json', type: 'json', nullable: true })\n  roleIdsJson?: string[] | null\n\n  @Property({ name: 'invited_by_user_id', type: 'uuid', nullable: true })\n  invitedByUserId?: string | null\n\n  @Property({ name: 'invited_by_customer_user_id', type: 'uuid', nullable: true })\n  invitedByCustomerUserId?: string | null\n\n  @Property({ name: 'display_name', type: 'text', nullable: true })\n  displayName?: string | null\n\n  @Property({ name: 'expires_at', type: Date })\n  expiresAt!: Date\n\n  @Property({ name: 'accepted_at', type: Date, nullable: true })\n  acceptedAt?: Date | null\n\n  @Property({ name: 'cancelled_at', type: Date, nullable: true })\n  cancelledAt?: Date | null\n\n  @Property({ name: 'created_at', type: Date, onCreate: () => new Date() })\n  createdAt: Date = new Date()\n}\n\n@Entity({ tableName: 'domain_mappings' })\n@Unique({ properties: ['hostname'], name: 'domain_mappings_hostname_unique' })\n@Index({ properties: ['organizationId'], name: 'domain_mappings_organization_id_idx' })\n@Index({ properties: ['tenantId'], name: 'domain_mappings_tenant_id_idx' })\n@Unique({\n  name: 'domain_mappings_replaces_domain_id_unique',\n  expression:\n    `create unique index \"domain_mappings_replaces_domain_id_unique\" on \"domain_mappings\" (\"replaces_domain_id\") where \"replaces_domain_id\" is not null`,\n})\n@Index({\n  name: 'domain_mappings_pending_verification_idx',\n  expression:\n    `create index \"domain_mappings_pending_verification_idx\" on \"domain_mappings\" (\"status\", \"last_dns_check_at\") where \"status\" in ('pending', 'dns_failed')`,\n})\n@Index({\n  name: 'domain_mappings_pending_tls_idx',\n  expression:\n    `create index \"domain_mappings_pending_tls_idx\" on \"domain_mappings\" (\"status\", \"updated_at\") where \"status\" in ('verified', 'tls_failed')`,\n})\n@Check({\n  name: 'domain_mappings_hostname_normalized_chk',\n  expression: `\"hostname\" = lower(\"hostname\") and \"hostname\" not like '%.'`,\n})\nexport class DomainMapping {\n  @PrimaryKey({ type: 'uuid', defaultRaw: 'gen_random_uuid()' })\n  id!: string\n\n  @Property({ type: 'text' })\n  hostname!: string\n\n  @Property({ name: 'tenant_id', type: 'uuid' })\n  tenantId!: string\n\n  @Property({ name: 'organization_id', type: 'uuid' })\n  organizationId!: string\n\n  @ManyToOne(() => DomainMapping, { fieldName: 'replaces_domain_id', nullable: true })\n  replacesDomain?: DomainMapping | null\n\n  @Enum({ items: () => DOMAIN_PROVIDERS as unknown as string[], type: 'text', name: 'provider' })\n  provider: DomainProvider = 'traefik'\n\n  @Enum({ items: () => DOMAIN_STATUSES as unknown as string[], type: 'text', name: 'status' })\n  status: DomainStatus = 'pending'\n\n  @Property({ name: 'verified_at', type: Date, nullable: true })\n  verifiedAt?: Date | null\n\n  @Property({ name: 'last_dns_check_at', type: Date, nullable: true })\n  lastDnsCheckAt?: Date | null\n\n  @Property({ name: 'dns_failure_reason', type: 'text', nullable: true, length: 500 })\n  dnsFailureReason?: string | null\n\n  @Property({ name: 'tls_failure_reason', type: 'text', nullable: true, length: 500 })\n  tlsFailureReason?: string | null\n\n  @Property({ name: 'tls_retry_count', type: 'int', default: 0 })\n  tlsRetryCount: number = 0\n\n  @Property({ name: 'created_at', type: Date, onCreate: () => new Date() })\n  createdAt: Date = new Date()\n\n  @Property({ name: 'updated_at', type: Date, onUpdate: () => new Date(), nullable: true })\n  updatedAt?: Date | null\n}\n"],
+  "mappings": ";;;;;;;;;;AAAA,SAAS,OAAO,QAAQ,MAAM,OAAO,WAAW,YAAY,UAAU,cAAc;AAK7E,MAAM,mBAA8C,CAAC,SAAS;AAC9D,MAAM,kBAA2C;AAAA,EACtD;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAIO,IAAM,eAAN,MAAmB;AAAA,EAAnB;AA2BL,+BAA8B;AAoB9B,oBAAoB;AAGpB,qBAAkB,oBAAI,KAAK;AAAA;AAO7B;AAvDE;AAAA,EADC,WAAW,EAAE,MAAM,QAAQ,YAAY,oBAAoB,CAAC;AAAA,GADlD,aAEX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,aAAa,MAAM,OAAO,CAAC;AAAA,GAJlC,aAKX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,mBAAmB,MAAM,OAAO,CAAC;AAAA,GAPxC,aAQX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,OAAO,CAAC;AAAA,GAVf,aAWX;AAIA;AAAA,EAFC,SAAS,EAAE,MAAM,cAAc,MAAM,OAAO,CAAC;AAAA,EAC7C,MAAM,EAAE,MAAM,gCAAgC,CAAC;AAAA,GAdrC,aAeX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,iBAAiB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GAjBtD,aAkBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,gBAAgB,MAAM,OAAO,CAAC;AAAA,GApBrC,aAqBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,qBAAqB,MAAM,MAAM,UAAU,KAAK,CAAC;AAAA,GAvBxD,aAwBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,yBAAyB,MAAM,OAAO,SAAS,EAAE,CAAC;AAAA,GA1BzD,aA2BX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,gBAAgB,MAAM,MAAM,UAAU,KAAK,CAAC;AAAA,GA7BnD,aA8BX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,iBAAiB,MAAM,MAAM,UAAU,KAAK,CAAC;AAAA,GAhCpD,aAiCX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,uBAAuB,MAAM,MAAM,UAAU,KAAK,CAAC;AAAA,GAnC1D,aAoCX;AAIA;AAAA,EAFC,SAAS,EAAE,MAAM,oBAAoB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,EACnE,MAAM,EAAE,MAAM,mCAAmC,CAAC;AAAA,GAvCxC,aAwCX;AAIA;AAAA,EAFC,SAAS,EAAE,MAAM,sBAAsB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,EACrE,MAAM,EAAE,MAAM,qCAAqC,CAAC;AAAA,GA3C1C,aA4CX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,aAAa,MAAM,WAAW,SAAS,KAAK,CAAC;AAAA,GA9CpD,aA+CX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,MAAM,UAAU,MAAM,oBAAI,KAAK,EAAE,CAAC;AAAA,GAjD7D,aAkDX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,MAAM,UAAU,MAAM,oBAAI,KAAK,GAAG,UAAU,KAAK,CAAC;AAAA,GApD7E,aAqDX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,MAAM,UAAU,KAAK,CAAC;AAAA,GAvDjD,aAwDX;AAxDW,eAAN;AAAA,EAFN,OAAO,EAAE,WAAW,iBAAiB,CAAC;AAAA,EACtC,OAAO,EAAE,YAAY,CAAC,YAAY,WAAW,GAAG,MAAM,wCAAwC,CAAC;AAAA,GACnF;AA6DN,IAAM,eAAN,MAAmB;AAAA,EAAnB;AAoBL,qBAAqB;AAGrB,oBAAoB;AAGpB,8BAA8B;AAG9B,qBAAkB,oBAAI,KAAK;AAAA;AAO7B;AAlCE;AAAA,EADC,WAAW,EAAE,MAAM,QAAQ,YAAY,oBAAoB,CAAC;AAAA,GADlD,aAEX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,aAAa,MAAM,OAAO,CAAC;AAAA,GAJlC,aAKX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,mBAAmB,MAAM,OAAO,CAAC;AAAA,GAPxC,aAQX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,OAAO,CAAC;AAAA,GAVf,aAWX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,OAAO,CAAC;AAAA,GAbf,aAcX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GAhB/B,aAiBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,WAAW,SAAS,MAAM,CAAC;AAAA,GAnBtD,aAoBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,aAAa,MAAM,WAAW,SAAS,MAAM,CAAC;AAAA,GAtBrD,aAuBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,uBAAuB,MAAM,WAAW,SAAS,MAAM,CAAC;AAAA,GAzB/D,aA0BX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,MAAM,UAAU,MAAM,oBAAI,KAAK,EAAE,CAAC;AAAA,GA5B7D,aA6BX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,MAAM,UAAU,MAAM,oBAAI,KAAK,GAAG,UAAU,KAAK,CAAC;AAAA,GA/B7E,aAgCX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,MAAM,UAAU,KAAK,CAAC;AAAA,GAlCjD,aAmCX;AAnCW,eAAN;AAAA,EAFN,OAAO,EAAE,WAAW,iBAAiB,CAAC;AAAA,EACtC,OAAO,EAAE,YAAY,CAAC,YAAY,MAAM,GAAG,MAAM,kCAAkC,CAAC;AAAA,GACxE;AAwCN,IAAM,kBAAN,MAAsB;AAAA,EAAtB;AAcL,yBAAyB;AAGzB,qBAAkB,oBAAI,KAAK;AAAA;AAO7B;AAtBE;AAAA,EADC,WAAW,EAAE,MAAM,QAAQ,YAAY,oBAAoB,CAAC;AAAA,GADlD,gBAEX;AAGA;AAAA,EADC,UAAU,MAAM,YAAY;AAAA,GAJlB,gBAKX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,aAAa,MAAM,OAAO,CAAC;AAAA,GAPlC,gBAQX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,iBAAiB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GAVtD,gBAWX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,mBAAmB,MAAM,WAAW,SAAS,MAAM,CAAC;AAAA,GAb3D,gBAcX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,MAAM,UAAU,MAAM,oBAAI,KAAK,EAAE,CAAC;AAAA,GAhB7D,gBAiBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,MAAM,UAAU,MAAM,oBAAI,KAAK,GAAG,UAAU,KAAK,CAAC;AAAA,GAnB7E,gBAoBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,MAAM,UAAU,KAAK,CAAC;AAAA,GAtBjD,gBAuBX;AAvBW,kBAAN;AAAA,EAFN,OAAO,EAAE,WAAW,qBAAqB,CAAC;AAAA,EAC1C,OAAO,EAAE,YAAY,CAAC,QAAQ,UAAU,GAAG,MAAM,sCAAsC,CAAC;AAAA,GAC5E;AA4BN,IAAM,mBAAN,MAAuB;AAAA,EAAvB;AAWL,qBAAkB,oBAAI,KAAK;AAAA;AAI7B;AAbE;AAAA,EADC,WAAW,EAAE,MAAM,QAAQ,YAAY,oBAAoB,CAAC;AAAA,GADlD,iBAEX;AAGA;AAAA,EADC,UAAU,MAAM,YAAY;AAAA,GAJlB,iBAKX;AAGA;AAAA,EADC,UAAU,MAAM,YAAY;AAAA,GAPlB,iBAQX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,MAAM,UAAU,MAAM,oBAAI,KAAK,EAAE,CAAC;AAAA,GAV7D,iBAWX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,MAAM,UAAU,KAAK,CAAC;AAAA,GAbjD,iBAcX;AAdW,mBAAN;AAAA,EAFN,OAAO,EAAE,WAAW,sBAAsB,CAAC;AAAA,EAC3C,OAAO,EAAE,YAAY,CAAC,QAAQ,MAAM,GAAG,MAAM,qCAAqC,CAAC;AAAA,GACvE;AAmBN,IAAM,kBAAN,MAAsB;AAAA,EAAtB;AAcL,yBAAyB;AAGzB,qBAAkB,oBAAI,KAAK;AAAA;AAO7B;AAtBE;AAAA,EADC,WAAW,EAAE,MAAM,QAAQ,YAAY,oBAAoB,CAAC;AAAA,GADlD,gBAEX;AAGA;AAAA,EADC,UAAU,MAAM,YAAY;AAAA,GAJlB,gBAKX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,aAAa,MAAM,OAAO,CAAC;AAAA,GAPlC,gBAQX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,iBAAiB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GAVtD,gBAWX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,mBAAmB,MAAM,WAAW,SAAS,MAAM,CAAC;AAAA,GAb3D,gBAcX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,MAAM,UAAU,MAAM,oBAAI,KAAK,EAAE,CAAC;AAAA,GAhB7D,gBAiBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,MAAM,UAAU,MAAM,oBAAI,KAAK,GAAG,UAAU,KAAK,CAAC;AAAA,GAnB7E,gBAoBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,MAAM,UAAU,KAAK,CAAC;AAAA,GAtBjD,gBAuBX;AAvBW,kBAAN;AAAA,EAFN,OAAO,EAAE,WAAW,qBAAqB,CAAC;AAAA,EAC1C,OAAO,EAAE,YAAY,CAAC,QAAQ,UAAU,GAAG,MAAM,sCAAsC,CAAC;AAAA,GAC5E;AA4BN,IAAM,sBAAN,MAA0B;AAAA,EAA1B;AAuBL,qBAAkB,oBAAI,KAAK;AAAA;AAI7B;AAzBE;AAAA,EADC,WAAW,EAAE,MAAM,QAAQ,YAAY,oBAAoB,CAAC;AAAA,GADlD,oBAEX;AAGA;AAAA,EADC,UAAU,MAAM,YAAY;AAAA,GAJlB,oBAKX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,OAAO,CAAC;AAAA,GAPnC,oBAQX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GAVnD,oBAWX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GAbnD,oBAcX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,KAAK,CAAC;AAAA,GAhBjC,oBAiBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,gBAAgB,MAAM,MAAM,UAAU,KAAK,CAAC;AAAA,GAnBnD,oBAoBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,MAAM,UAAU,MAAM,oBAAI,KAAK,EAAE,CAAC;AAAA,GAtB7D,oBAuBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,MAAM,UAAU,KAAK,CAAC;AAAA,GAzBjD,oBA0BX;AA1BW,sBAAN;AAAA,EAFN,OAAO,EAAE,WAAW,yBAAyB,CAAC;AAAA,EAC9C,MAAM,EAAE,YAAY,CAAC,WAAW,GAAG,MAAM,wCAAwC,CAAC;AAAA,GACtE;AA+BN,IAAM,gCAAN,MAAoC;AAAA,EAApC;AAWL,mBAAkB;AASlB,qBAAkB,oBAAI,KAAK;AAAA;AAC7B;AAnBE;AAAA,EADC,WAAW,EAAE,MAAM,QAAQ,YAAY,oBAAoB,CAAC;AAAA,GADlD,8BAEX;AAGA;AAAA,EADC,UAAU,MAAM,YAAY;AAAA,GAJlB,8BAKX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,OAAO,CAAC;AAAA,GAPf,8BAQX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,QAAQ,SAAS,qBAAqB,CAAC;AAAA,GAV9C,8BAWX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,KAAK,CAAC;AAAA,GAbjC,8BAcX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,WAAW,MAAM,MAAM,UAAU,KAAK,CAAC;AAAA,GAhB9C,8BAiBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,MAAM,UAAU,MAAM,oBAAI,KAAK,EAAE,CAAC;AAAA,GAnB7D,8BAoBX;AApBW,gCAAN;AAAA,EAFN,OAAO,EAAE,WAAW,oCAAoC,CAAC;AAAA,EACzD,MAAM,EAAE,YAAY,CAAC,OAAO,GAAG,MAAM,8CAA8C,CAAC;AAAA,GACxE;AAyBN,IAAM,4BAAN,MAAgC;AAAA,EAAhC;AAiBL,qBAAkB,oBAAI,KAAK;AAAA;AAC7B;AAhBE;AAAA,EADC,WAAW,EAAE,MAAM,QAAQ,YAAY,oBAAoB,CAAC;AAAA,GADlD,0BAEX;AAGA;AAAA,EADC,UAAU,MAAM,YAAY;AAAA,GAJlB,0BAKX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,OAAO,CAAC;AAAA,GAPf,0BAQX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,KAAK,CAAC;AAAA,GAVjC,0BAWX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,WAAW,MAAM,MAAM,UAAU,KAAK,CAAC;AAAA,GAb9C,0BAcX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,MAAM,UAAU,MAAM,oBAAI,KAAK,EAAE,CAAC;AAAA,GAhB7D,0BAiBX;AAjBW,4BAAN;AAAA,EAFN,OAAO,EAAE,WAAW,gCAAgC,CAAC;AAAA,EACrD,MAAM,EAAE,YAAY,CAAC,OAAO,GAAG,MAAM,0CAA0C,CAAC;AAAA,GACpE;AAuBN,IAAM,yBAAN,MAA6B;AAAA,EAA7B;AA4CL,qBAAkB,oBAAI,KAAK;AAAA;AAC7B;AA3CE;AAAA,EADC,WAAW,EAAE,MAAM,QAAQ,YAAY,oBAAoB,CAAC;AAAA,GADlD,uBAEX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,aAAa,MAAM,OAAO,CAAC;AAAA,GAJlC,uBAKX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,mBAAmB,MAAM,OAAO,CAAC;AAAA,GAPxC,uBAQX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,OAAO,CAAC;AAAA,GAVf,uBAWX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,OAAO,CAAC;AAAA,GAbnC,uBAcX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,OAAO,CAAC;AAAA,GAhBf,uBAiBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,sBAAsB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GAnB3D,uBAoBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,iBAAiB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GAtBtD,uBAuBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,sBAAsB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GAzB3D,uBA0BX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,+BAA+B,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GA5BpE,uBA6BX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,gBAAgB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GA/BrD,uBAgCX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,KAAK,CAAC;AAAA,GAlCjC,uBAmCX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,eAAe,MAAM,MAAM,UAAU,KAAK,CAAC;AAAA,GArClD,uBAsCX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,gBAAgB,MAAM,MAAM,UAAU,KAAK,CAAC;AAAA,GAxCnD,uBAyCX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,MAAM,UAAU,MAAM,oBAAI,KAAK,EAAE,CAAC;AAAA,GA3C7D,uBA4CX;AA5CW,yBAAN;AAAA,EAHN,OAAO,EAAE,WAAW,4BAA4B,CAAC;AAAA,EACjD,MAAM,EAAE,YAAY,CAAC,OAAO,GAAG,MAAM,sCAAsC,CAAC;AAAA,EAC5E,MAAM,EAAE,YAAY,CAAC,YAAY,WAAW,GAAG,MAAM,kDAAkD,CAAC;AAAA,GAC5F;AAsEN,IAAM,gBAAN,MAAoB;AAAA,EAApB;AAiBL,oBAA2B;AAG3B,kBAAuB;AAevB,yBAAwB;AAGxB,qBAAkB,oBAAI,KAAK;AAAA;AAI7B;AAxCE;AAAA,EADC,WAAW,EAAE,MAAM,QAAQ,YAAY,oBAAoB,CAAC;AAAA,GADlD,cAEX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,OAAO,CAAC;AAAA,GAJf,cAKX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,aAAa,MAAM,OAAO,CAAC;AAAA,GAPlC,cAQX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,mBAAmB,MAAM,OAAO,CAAC;AAAA,GAVxC,cAWX;AAGA;AAAA,EADC,UAAU,MAAM,eAAe,EAAE,WAAW,sBAAsB,UAAU,KAAK,CAAC;AAAA,GAbxE,cAcX;AAGA;AAAA,EADC,KAAK,EAAE,OAAO,MAAM,kBAAyC,MAAM,QAAQ,MAAM,WAAW,CAAC;AAAA,GAhBnF,cAiBX;AAGA;AAAA,EADC,KAAK,EAAE,OAAO,MAAM,iBAAwC,MAAM,QAAQ,MAAM,SAAS,CAAC;AAAA,GAnBhF,cAoBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,eAAe,MAAM,MAAM,UAAU,KAAK,CAAC;AAAA,GAtBlD,cAuBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,qBAAqB,MAAM,MAAM,UAAU,KAAK,CAAC;AAAA,GAzBxD,cA0BX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,sBAAsB,MAAM,QAAQ,UAAU,MAAM,QAAQ,IAAI,CAAC;AAAA,GA5BxE,cA6BX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,sBAAsB,MAAM,QAAQ,UAAU,MAAM,QAAQ,IAAI,CAAC;AAAA,GA/BxE,cAgCX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,mBAAmB,MAAM,OAAO,SAAS,EAAE,CAAC;AAAA,GAlCnD,cAmCX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,MAAM,UAAU,MAAM,oBAAI,KAAK,EAAE,CAAC;AAAA,GArC7D,cAsCX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,MAAM,UAAU,MAAM,oBAAI,KAAK,GAAG,UAAU,KAAK,CAAC;AAAA,GAxC7E,cAyCX;AAzCW,gBAAN;AAAA,EAvBN,OAAO,EAAE,WAAW,kBAAkB,CAAC;AAAA,EACvC,OAAO,EAAE,YAAY,CAAC,UAAU,GAAG,MAAM,kCAAkC,CAAC;AAAA,EAC5E,MAAM,EAAE,YAAY,CAAC,gBAAgB,GAAG,MAAM,sCAAsC,CAAC;AAAA,EACrF,MAAM,EAAE,YAAY,CAAC,UAAU,GAAG,MAAM,gCAAgC,CAAC;AAAA,EACzE,OAAO;AAAA,IACN,MAAM;AAAA,IACN,YACE;AAAA,EACJ,CAAC;AAAA,EACA,MAAM;AAAA,IACL,MAAM;AAAA,IACN,YACE;AAAA,EACJ,CAAC;AAAA,EACA,MAAM;AAAA,IACL,MAAM;AAAA,IACN,YACE;AAAA,EACJ,CAAC;AAAA,EACA,MAAM;AAAA,IACL,MAAM;AAAA,IACN,YAAY;AAAA,EACd,CAAC;AAAA,GACY;",
   "names": []
 }

package/dist/modules/customer_accounts/data/guards.js

@@ -0,0 +1,130 @@
+import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
+import { tryNormalizeHostname } from "@open-mercato/core/modules/customer_accounts/lib/hostname";
+const DOMAIN_MAPPING_ENTITY = "customer_accounts.domain_mapping";
+const MAX_DOMAINS_PER_ORG = 2;
+function readHostnameField(payload) {
+  if (!payload || typeof payload !== "object") return null;
+  const raw = payload.hostname;
+  return typeof raw === "string" ? raw : null;
+}
+function readOrgIdField(payload) {
+  if (!payload || typeof payload !== "object") return null;
+  const raw = payload.organizationId ?? payload.organization_id;
+  return typeof raw === "string" ? raw : null;
+}
+const hostnameFormatGuard = {
+  id: "customer_accounts.domain_mapping.hostname-format",
+  targetEntity: DOMAIN_MAPPING_ENTITY,
+  operations: ["create"],
+  priority: 10,
+  async validate(input) {
+    const raw = readHostnameField(input.mutationPayload);
+    if (!raw) {
+      return { ok: false, status: 422, message: "Hostname is required" };
+    }
+    const normalized = tryNormalizeHostname(raw);
+    if (!normalized) {
+      return {
+        ok: false,
+        status: 422,
+        message: "Hostname is not a valid DNS name (must be at least two labels, ASCII or IDN)"
+      };
+    }
+    return {
+      ok: true,
+      modifiedPayload: { hostname: normalized }
+    };
+  }
+};
+const hostnameUniqueGuard = {
+  id: "customer_accounts.domain_mapping.hostname-unique",
+  targetEntity: DOMAIN_MAPPING_ENTITY,
+  operations: ["create"],
+  priority: 20,
+  async validate(input) {
+    const raw = readHostnameField(input.mutationPayload);
+    if (!raw) return { ok: true };
+    const hostname = tryNormalizeHostname(raw);
+    if (!hostname) return { ok: true };
+    const container = await createRequestContainer();
+    let service = null;
+    try {
+      service = container.resolve("domainMappingService");
+    } catch {
+      return { ok: true };
+    }
+    const existing = await service.resolveByHostname(hostname);
+    if (!existing) return { ok: true };
+    const sameOrg = existing.organizationId === readOrgIdField(input.mutationPayload);
+    if (existing.tenantId !== input.tenantId || !sameOrg) {
+      return {
+        ok: false,
+        status: 409,
+        message: "This domain is not available. Please choose a different hostname."
+      };
+    }
+    return { ok: true };
+  }
+};
+const orgLimitGuard = {
+  id: "customer_accounts.domain_mapping.org-limit",
+  targetEntity: DOMAIN_MAPPING_ENTITY,
+  operations: ["create"],
+  priority: 30,
+  async validate(input) {
+    const orgId = readOrgIdField(input.mutationPayload) ?? input.organizationId;
+    if (!orgId) {
+      return { ok: false, status: 422, message: "Organization is required" };
+    }
+    const container = await createRequestContainer();
+    let service = null;
+    try {
+      service = container.resolve("domainMappingService");
+    } catch {
+      return { ok: true };
+    }
+    const existing = await service.findByOrganization(orgId, { tenantId: input.tenantId });
+    if (existing.length >= MAX_DOMAINS_PER_ORG) {
+      return {
+        ok: false,
+        status: 409,
+        message: `Each organization can have at most ${MAX_DOMAINS_PER_ORG} custom domains (one active and one pending replacement). Remove an existing domain or finish the swap first.`
+      };
+    }
+    return { ok: true };
+  }
+};
+const recordScopeGuard = {
+  id: "customer_accounts.domain_mapping.record-scope",
+  targetEntity: DOMAIN_MAPPING_ENTITY,
+  operations: ["update", "delete"],
+  priority: 10,
+  async validate(input) {
+    const resourceId = input.resourceId;
+    if (!resourceId) {
+      return { ok: false, status: 422, message: "Domain mapping id is required" };
+    }
+    const container = await createRequestContainer();
+    let service = null;
+    try {
+      service = container.resolve("domainMappingService");
+    } catch {
+      return { ok: true };
+    }
+    const record = await service.findById(resourceId, { tenantId: input.tenantId });
+    if (!record) {
+      return { ok: false, status: 404, message: "Domain mapping not found" };
+    }
+    return { ok: true };
+  }
+};
+const guards = [
+  hostnameFormatGuard,
+  hostnameUniqueGuard,
+  orgLimitGuard,
+  recordScopeGuard
+];
+export {
+  guards
+};
+//# sourceMappingURL=guards.js.map

package/dist/modules/customer_accounts/data/guards.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/customer_accounts/data/guards.ts"],
+  "sourcesContent": ["import type { MutationGuard } from '@open-mercato/shared/lib/crud/mutation-guard-registry'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { tryNormalizeHostname } from '@open-mercato/core/modules/customer_accounts/lib/hostname'\nimport type { DomainMappingService } from '@open-mercato/core/modules/customer_accounts/services/domainMappingService'\n\nconst DOMAIN_MAPPING_ENTITY = 'customer_accounts.domain_mapping'\nconst MAX_DOMAINS_PER_ORG = 2\n\nfunction readHostnameField(payload: Record<string, unknown> | null | undefined): string | null {\n  if (!payload || typeof payload !== 'object') return null\n  const raw = (payload as Record<string, unknown>).hostname\n  return typeof raw === 'string' ? raw : null\n}\n\nfunction readOrgIdField(payload: Record<string, unknown> | null | undefined): string | null {\n  if (!payload || typeof payload !== 'object') return null\n  const raw = (payload as Record<string, unknown>).organizationId ?? (payload as Record<string, unknown>).organization_id\n  return typeof raw === 'string' ? raw : null\n}\n\nconst hostnameFormatGuard: MutationGuard = {\n  id: 'customer_accounts.domain_mapping.hostname-format',\n  targetEntity: DOMAIN_MAPPING_ENTITY,\n  operations: ['create'],\n  priority: 10,\n\n  async validate(input) {\n    const raw = readHostnameField(input.mutationPayload)\n    if (!raw) {\n      return { ok: false, status: 422, message: 'Hostname is required' }\n    }\n    const normalized = tryNormalizeHostname(raw)\n    if (!normalized) {\n      return {\n        ok: false,\n        status: 422,\n        message: 'Hostname is not a valid DNS name (must be at least two labels, ASCII or IDN)',\n      }\n    }\n    return {\n      ok: true,\n      modifiedPayload: { hostname: normalized },\n    }\n  },\n}\n\nconst hostnameUniqueGuard: MutationGuard = {\n  id: 'customer_accounts.domain_mapping.hostname-unique',\n  targetEntity: DOMAIN_MAPPING_ENTITY,\n  operations: ['create'],\n  priority: 20,\n\n  async validate(input) {\n    const raw = readHostnameField(input.mutationPayload)\n    if (!raw) return { ok: true }\n    const hostname = tryNormalizeHostname(raw)\n    if (!hostname) return { ok: true }\n\n    const container = await createRequestContainer()\n    let service: DomainMappingService | null = null\n    try {\n      service = container.resolve('domainMappingService') as DomainMappingService\n    } catch {\n      return { ok: true }\n    }\n\n    const existing = await service.resolveByHostname(hostname)\n    if (!existing) return { ok: true }\n\n    // Intentionally tenant-agnostic message: do not disclose whether the\n    // collision is intra-tenant or cross-tenant. Distinguishing them would\n    // let any caller probe deployment-wide hostname registration.\n    const sameOrg = existing.organizationId === readOrgIdField(input.mutationPayload)\n    if (existing.tenantId !== input.tenantId || !sameOrg) {\n      return {\n        ok: false,\n        status: 409,\n        message: 'This domain is not available. Please choose a different hostname.',\n      }\n    }\n    return { ok: true }\n  },\n}\n\nconst orgLimitGuard: MutationGuard = {\n  id: 'customer_accounts.domain_mapping.org-limit',\n  targetEntity: DOMAIN_MAPPING_ENTITY,\n  operations: ['create'],\n  priority: 30,\n\n  async validate(input) {\n    const orgId = readOrgIdField(input.mutationPayload) ?? input.organizationId\n    if (!orgId) {\n      return { ok: false, status: 422, message: 'Organization is required' }\n    }\n\n    const container = await createRequestContainer()\n    let service: DomainMappingService | null = null\n    try {\n      service = container.resolve('domainMappingService') as DomainMappingService\n    } catch {\n      return { ok: true }\n    }\n\n    const existing = await service.findByOrganization(orgId, { tenantId: input.tenantId })\n    if (existing.length >= MAX_DOMAINS_PER_ORG) {\n      return {\n        ok: false,\n        status: 409,\n        message: `Each organization can have at most ${MAX_DOMAINS_PER_ORG} custom domains (one active and one pending replacement). Remove an existing domain or finish the swap first.`,\n      }\n    }\n    return { ok: true }\n  },\n}\n\n// Mirrors the in-progress-lock pattern used by other modules' update/delete\n// guards: ensure the target record exists and belongs to the caller's tenant\n// before any destructive or lifecycle-changing mutation runs. Verification\n// and health-check endpoints invoke this via operation: 'update' since they\n// transition the record's lifecycle status.\nconst recordScopeGuard: MutationGuard = {\n  id: 'customer_accounts.domain_mapping.record-scope',\n  targetEntity: DOMAIN_MAPPING_ENTITY,\n  operations: ['update', 'delete'],\n  priority: 10,\n\n  async validate(input) {\n    const resourceId = input.resourceId\n    if (!resourceId) {\n      return { ok: false, status: 422, message: 'Domain mapping id is required' }\n    }\n\n    const container = await createRequestContainer()\n    let service: DomainMappingService | null = null\n    try {\n      service = container.resolve('domainMappingService') as DomainMappingService\n    } catch {\n      return { ok: true }\n    }\n\n    const record = await service.findById(resourceId, { tenantId: input.tenantId })\n    if (!record) {\n      return { ok: false, status: 404, message: 'Domain mapping not found' }\n    }\n    return { ok: true }\n  },\n}\n\nexport const guards: MutationGuard[] = [\n  hostnameFormatGuard,\n  hostnameUniqueGuard,\n  orgLimitGuard,\n  recordScopeGuard,\n]\n"],
+  "mappings": "AACA,SAAS,8BAA8B;AACvC,SAAS,4BAA4B;AAGrC,MAAM,wBAAwB;AAC9B,MAAM,sBAAsB;AAE5B,SAAS,kBAAkB,SAAoE;AAC7F,MAAI,CAAC,WAAW,OAAO,YAAY,SAAU,QAAO;AACpD,QAAM,MAAO,QAAoC;AACjD,SAAO,OAAO,QAAQ,WAAW,MAAM;AACzC;AAEA,SAAS,eAAe,SAAoE;AAC1F,MAAI,CAAC,WAAW,OAAO,YAAY,SAAU,QAAO;AACpD,QAAM,MAAO,QAAoC,kBAAmB,QAAoC;AACxG,SAAO,OAAO,QAAQ,WAAW,MAAM;AACzC;AAEA,MAAM,sBAAqC;AAAA,EACzC,IAAI;AAAA,EACJ,cAAc;AAAA,EACd,YAAY,CAAC,QAAQ;AAAA,EACrB,UAAU;AAAA,EAEV,MAAM,SAAS,OAAO;AACpB,UAAM,MAAM,kBAAkB,MAAM,eAAe;AACnD,QAAI,CAAC,KAAK;AACR,aAAO,EAAE,IAAI,OAAO,QAAQ,KAAK,SAAS,uBAAuB;AAAA,IACnE;AACA,UAAM,aAAa,qBAAqB,GAAG;AAC3C,QAAI,CAAC,YAAY;AACf,aAAO;AAAA,QACL,IAAI;AAAA,QACJ,QAAQ;AAAA,QACR,SAAS;AAAA,MACX;AAAA,IACF;AACA,WAAO;AAAA,MACL,IAAI;AAAA,MACJ,iBAAiB,EAAE,UAAU,WAAW;AAAA,IAC1C;AAAA,EACF;AACF;AAEA,MAAM,sBAAqC;AAAA,EACzC,IAAI;AAAA,EACJ,cAAc;AAAA,EACd,YAAY,CAAC,QAAQ;AAAA,EACrB,UAAU;AAAA,EAEV,MAAM,SAAS,OAAO;AACpB,UAAM,MAAM,kBAAkB,MAAM,eAAe;AACnD,QAAI,CAAC,IAAK,QAAO,EAAE,IAAI,KAAK;AAC5B,UAAM,WAAW,qBAAqB,GAAG;AACzC,QAAI,CAAC,SAAU,QAAO,EAAE,IAAI,KAAK;AAEjC,UAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAI,UAAuC;AAC3C,QAAI;AACF,gBAAU,UAAU,QAAQ,sBAAsB;AAAA,IACpD,QAAQ;AACN,aAAO,EAAE,IAAI,KAAK;AAAA,IACpB;AAEA,UAAM,WAAW,MAAM,QAAQ,kBAAkB,QAAQ;AACzD,QAAI,CAAC,SAAU,QAAO,EAAE,IAAI,KAAK;AAKjC,UAAM,UAAU,SAAS,mBAAmB,eAAe,MAAM,eAAe;AAChF,QAAI,SAAS,aAAa,MAAM,YAAY,CAAC,SAAS;AACpD,aAAO;AAAA,QACL,IAAI;AAAA,QACJ,QAAQ;AAAA,QACR,SAAS;AAAA,MACX;AAAA,IACF;AACA,WAAO,EAAE,IAAI,KAAK;AAAA,EACpB;AACF;AAEA,MAAM,gBAA+B;AAAA,EACnC,IAAI;AAAA,EACJ,cAAc;AAAA,EACd,YAAY,CAAC,QAAQ;AAAA,EACrB,UAAU;AAAA,EAEV,MAAM,SAAS,OAAO;AACpB,UAAM,QAAQ,eAAe,MAAM,eAAe,KAAK,MAAM;AAC7D,QAAI,CAAC,OAAO;AACV,aAAO,EAAE,IAAI,OAAO,QAAQ,KAAK,SAAS,2BAA2B;AAAA,IACvE;AAEA,UAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAI,UAAuC;AAC3C,QAAI;AACF,gBAAU,UAAU,QAAQ,sBAAsB;AAAA,IACpD,QAAQ;AACN,aAAO,EAAE,IAAI,KAAK;AAAA,IACpB;AAEA,UAAM,WAAW,MAAM,QAAQ,mBAAmB,OAAO,EAAE,UAAU,MAAM,SAAS,CAAC;AACrF,QAAI,SAAS,UAAU,qBAAqB;AAC1C,aAAO;AAAA,QACL,IAAI;AAAA,QACJ,QAAQ;AAAA,QACR,SAAS,sCAAsC,mBAAmB;AAAA,MACpE;AAAA,IACF;AACA,WAAO,EAAE,IAAI,KAAK;AAAA,EACpB;AACF;AAOA,MAAM,mBAAkC;AAAA,EACtC,IAAI;AAAA,EACJ,cAAc;AAAA,EACd,YAAY,CAAC,UAAU,QAAQ;AAAA,EAC/B,UAAU;AAAA,EAEV,MAAM,SAAS,OAAO;AACpB,UAAM,aAAa,MAAM;AACzB,QAAI,CAAC,YAAY;AACf,aAAO,EAAE,IAAI,OAAO,QAAQ,KAAK,SAAS,gCAAgC;AAAA,IAC5E;AAEA,UAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAI,UAAuC;AAC3C,QAAI;AACF,gBAAU,UAAU,QAAQ,sBAAsB;AAAA,IACpD,QAAQ;AACN,aAAO,EAAE,IAAI,KAAK;AAAA,IACpB;AAEA,UAAM,SAAS,MAAM,QAAQ,SAAS,YAAY,EAAE,UAAU,MAAM,SAAS,CAAC;AAC9E,QAAI,CAAC,QAAQ;AACX,aAAO,EAAE,IAAI,OAAO,QAAQ,KAAK,SAAS,2BAA2B;AAAA,IACvE;AACA,WAAO,EAAE,IAAI,KAAK;AAAA,EACpB;AACF;AAEO,MAAM,SAA0B;AAAA,EACrC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;",
+  "names": []
+}

package/dist/modules/customer_accounts/data/validators.js

@@ -1,4 +1,5 @@
 import { z } from "zod";
+import { normalizeHostname } from "@open-mercato/core/modules/customer_accounts/lib/hostname";
 const emailField = z.string().email().max(255);
 const passwordField = z.string().min(8).max(128);
 const displayNameField = z.string().min(1).max(255);
@@ -88,6 +89,22 @@ const adminUpdateUserSchema = z.object({
 const adminResetPasswordSchema = z.object({
   newPassword: passwordField
 });
+const hostnameSchema = z.string().min(1, "Hostname is required").max(512, "Hostname is too long").transform((value, ctx) => {
+  try {
+    return normalizeHostname(value);
+  } catch (err) {
+    ctx.addIssue({
+      code: z.ZodIssueCode.custom,
+      message: err instanceof Error ? err.message : "Invalid hostname"
+    });
+    return z.NEVER;
+  }
+});
+const registerDomainSchema = z.object({
+  hostname: hostnameSchema,
+  organizationId: z.string().uuid(),
+  replacesDomainId: z.string().uuid().optional()
+});
 export {
   adminCreateUserSchema,
   adminResetPasswordSchema,
@@ -95,6 +112,7 @@ export {
   assignRolesSchema,
   createRoleSchema,
   emailVerifySchema,
+  hostnameSchema,
   invitationAcceptSchema,
   inviteUserSchema,
   loginSchema,
@@ -104,6 +122,7 @@ export {
   passwordResetConfirmSchema,
   passwordResetRequestSchema,
   profileUpdateSchema,
+  registerDomainSchema,
   signupSchema,
   updateRoleAclSchema,
   updateRoleSchema

package/dist/modules/customer_accounts/data/validators.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/customer_accounts/data/validators.ts"],
-  "sourcesContent": ["import { z } from 'zod'\n\nconst emailField = z.string().email().max(255)\nconst passwordField = z.string().min(8).max(128)\nconst displayNameField = z.string().min(1).max(255)\n\nexport const signupSchema = z.object({\n  email: emailField,\n  password: passwordField,\n  displayName: displayNameField,\n  tenantId: z.string().uuid().optional(),\n  organizationId: z.string().uuid().optional(),\n})\n\nexport const loginSchema = z.object({\n  email: emailField,\n  password: z.string().min(1).max(128),\n  tenantId: z.string().uuid().optional(),\n})\n\nexport const emailVerifySchema = z.object({\n  token: z.string().min(1).max(512),\n})\n\nexport const passwordResetRequestSchema = z.object({\n  email: emailField,\n  tenantId: z.string().uuid().optional(),\n})\n\nexport const passwordResetConfirmSchema = z.object({\n  token: z.string().min(1).max(512),\n  password: passwordField,\n})\n\nexport const magicLinkRequestSchema = z.object({\n  email: emailField,\n  tenantId: z.string().uuid().optional(),\n})\n\nexport const magicLinkVerifySchema = z.object({\n  token: z.string().min(1).max(512),\n})\n\nexport const invitationAcceptSchema = z.object({\n  token: z.string().min(1).max(512),\n  password: passwordField,\n  displayName: displayNameField,\n})\n\nexport const profileUpdateSchema = z.object({\n  displayName: displayNameField.optional(),\n})\n\nexport const passwordChangeSchema = z.object({\n  currentPassword: z.string().min(1).max(128),\n  newPassword: passwordField,\n})\n\nexport const createRoleSchema = z.object({\n  name: z.string().min(1).max(255),\n  slug: z.string().min(1).max(255).regex(/^[a-z0-9_-]+$/),\n  description: z.string().max(1000).optional(),\n  isDefault: z.boolean().optional(),\n  customerAssignable: z.boolean().optional(),\n})\n\nexport const updateRoleSchema = z.object({\n  name: z.string().min(1).max(255).optional(),\n  description: z.string().max(1000).optional(),\n  isDefault: z.boolean().optional(),\n  customerAssignable: z.boolean().optional(),\n})\n\nexport const updateRoleAclSchema = z.object({\n  features: z.array(z.string().min(1).max(255)),\n  isPortalAdmin: z.boolean().optional(),\n})\n\nexport const inviteUserSchema = z.object({\n  email: emailField,\n  customerEntityId: z.string().uuid().optional(),\n  roleIds: z.array(z.string().uuid()).min(1),\n  displayName: displayNameField.optional(),\n})\n\nexport const assignRolesSchema = z.object({\n  roleIds: z.array(z.string().uuid()).min(1),\n})\n\nexport const adminCreateUserSchema = z.object({\n  email: emailField,\n  password: passwordField,\n  displayName: displayNameField,\n  roleIds: z.array(z.string().uuid()).optional(),\n  customerEntityId: z.string().uuid().optional(),\n})\n\nexport const adminUpdateUserSchema = z.object({\n  displayName: displayNameField.optional(),\n  isActive: z.boolean().optional(),\n  lockedUntil: z.string().datetime().nullable().optional(),\n  personEntityId: z.string().uuid().nullable().optional(),\n  customerEntityId: z.string().uuid().nullable().optional(),\n  roleIds: z.array(z.string().uuid()).optional(),\n})\n\nexport const adminResetPasswordSchema = z.object({\n  newPassword: passwordField,\n})\n\nexport type AdminCreateUserInput = z.infer<typeof adminCreateUserSchema>\nexport type AdminResetPasswordInput = z.infer<typeof adminResetPasswordSchema>\nexport type SignupInput = z.infer<typeof signupSchema>\nexport type LoginInput = z.infer<typeof loginSchema>\nexport type EmailVerifyInput = z.infer<typeof emailVerifySchema>\nexport type PasswordResetRequestInput = z.infer<typeof passwordResetRequestSchema>\nexport type PasswordResetConfirmInput = z.infer<typeof passwordResetConfirmSchema>\nexport type MagicLinkRequestInput = z.infer<typeof magicLinkRequestSchema>\nexport type MagicLinkVerifyInput = z.infer<typeof magicLinkVerifySchema>\nexport type InvitationAcceptInput = z.infer<typeof invitationAcceptSchema>\nexport type ProfileUpdateInput = z.infer<typeof profileUpdateSchema>\nexport type PasswordChangeInput = z.infer<typeof passwordChangeSchema>\nexport type CreateRoleInput = z.infer<typeof createRoleSchema>\nexport type UpdateRoleInput = z.infer<typeof updateRoleSchema>\nexport type UpdateRoleAclInput = z.infer<typeof updateRoleAclSchema>\nexport type InviteUserInput = z.infer<typeof inviteUserSchema>\nexport type AssignRolesInput = z.infer<typeof assignRolesSchema>\nexport type AdminUpdateUserInput = z.infer<typeof adminUpdateUserSchema>\n"],
-  "mappings": "AAAA,SAAS,SAAS;AAElB,MAAM,aAAa,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,GAAG;AAC7C,MAAM,gBAAgB,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAC/C,MAAM,mBAAmB,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAE3C,MAAM,eAAe,EAAE,OAAO;AAAA,EACnC,OAAO;AAAA,EACP,UAAU;AAAA,EACV,aAAa;AAAA,EACb,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACrC,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAC7C,CAAC;AAEM,MAAM,cAAc,EAAE,OAAO;AAAA,EAClC,OAAO;AAAA,EACP,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EACnC,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AACvC,CAAC;AAEM,MAAM,oBAAoB,EAAE,OAAO;AAAA,EACxC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAClC,CAAC;AAEM,MAAM,6BAA6B,EAAE,OAAO;AAAA,EACjD,OAAO;AAAA,EACP,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AACvC,CAAC;AAEM,MAAM,6BAA6B,EAAE,OAAO;AAAA,EACjD,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EAChC,UAAU;AACZ,CAAC;AAEM,MAAM,yBAAyB,EAAE,OAAO;AAAA,EAC7C,OAAO;AAAA,EACP,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AACvC,CAAC;AAEM,MAAM,wBAAwB,EAAE,OAAO;AAAA,EAC5C,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAClC,CAAC;AAEM,MAAM,yBAAyB,EAAE,OAAO;AAAA,EAC7C,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EAChC,UAAU;AAAA,EACV,aAAa;AACf,CAAC;AAEM,MAAM,sBAAsB,EAAE,OAAO;AAAA,EAC1C,aAAa,iBAAiB,SAAS;AACzC,CAAC;AAEM,MAAM,uBAAuB,EAAE,OAAO;AAAA,EAC3C,iBAAiB,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EAC1C,aAAa;AACf,CAAC;AAEM,MAAM,mBAAmB,EAAE,OAAO;AAAA,EACvC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EAC/B,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,MAAM,eAAe;AAAA,EACtD,aAAa,EAAE,OAAO,EAAE,IAAI,GAAI,EAAE,SAAS;AAAA,EAC3C,WAAW,EAAE,QAAQ,EAAE,SAAS;AAAA,EAChC,oBAAoB,EAAE,QAAQ,EAAE,SAAS;AAC3C,CAAC;AAEM,MAAM,mBAAmB,EAAE,OAAO;AAAA,EACvC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EAC1C,aAAa,EAAE,OAAO,EAAE,IAAI,GAAI,EAAE,SAAS;AAAA,EAC3C,WAAW,EAAE,QAAQ,EAAE,SAAS;AAAA,EAChC,oBAAoB,EAAE,QAAQ,EAAE,SAAS;AAC3C,CAAC;AAEM,MAAM,sBAAsB,EAAE,OAAO;AAAA,EAC1C,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,CAAC;AAAA,EAC5C,eAAe,EAAE,QAAQ,EAAE,SAAS;AACtC,CAAC;AAEM,MAAM,mBAAmB,EAAE,OAAO;AAAA,EACvC,OAAO;AAAA,EACP,kBAAkB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC7C,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,IAAI,CAAC;AAAA,EACzC,aAAa,iBAAiB,SAAS;AACzC,CAAC;AAEM,MAAM,oBAAoB,EAAE,OAAO;AAAA,EACxC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,IAAI,CAAC;AAC3C,CAAC;AAEM,MAAM,wBAAwB,EAAE,OAAO;AAAA,EAC5C,OAAO;AAAA,EACP,UAAU;AAAA,EACV,aAAa;AAAA,EACb,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,SAAS;AAAA,EAC7C,kBAAkB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAC/C,CAAC;AAEM,MAAM,wBAAwB,EAAE,OAAO;AAAA,EAC5C,aAAa,iBAAiB,SAAS;AAAA,EACvC,UAAU,EAAE,QAAQ,EAAE,SAAS;AAAA,EAC/B,aAAa,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS;AAAA,EACvD,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS;AAAA,EACtD,kBAAkB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS;AAAA,EACxD,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,SAAS;AAC/C,CAAC;AAEM,MAAM,2BAA2B,EAAE,OAAO;AAAA,EAC/C,aAAa;AACf,CAAC;",
+  "sourcesContent": ["import { z } from 'zod'\nimport { normalizeHostname } from '@open-mercato/core/modules/customer_accounts/lib/hostname'\n\nconst emailField = z.string().email().max(255)\nconst passwordField = z.string().min(8).max(128)\nconst displayNameField = z.string().min(1).max(255)\n\nexport const signupSchema = z.object({\n  email: emailField,\n  password: passwordField,\n  displayName: displayNameField,\n  tenantId: z.string().uuid().optional(),\n  organizationId: z.string().uuid().optional(),\n})\n\nexport const loginSchema = z.object({\n  email: emailField,\n  password: z.string().min(1).max(128),\n  tenantId: z.string().uuid().optional(),\n})\n\nexport const emailVerifySchema = z.object({\n  token: z.string().min(1).max(512),\n})\n\nexport const passwordResetRequestSchema = z.object({\n  email: emailField,\n  tenantId: z.string().uuid().optional(),\n})\n\nexport const passwordResetConfirmSchema = z.object({\n  token: z.string().min(1).max(512),\n  password: passwordField,\n})\n\nexport const magicLinkRequestSchema = z.object({\n  email: emailField,\n  tenantId: z.string().uuid().optional(),\n})\n\nexport const magicLinkVerifySchema = z.object({\n  token: z.string().min(1).max(512),\n})\n\nexport const invitationAcceptSchema = z.object({\n  token: z.string().min(1).max(512),\n  password: passwordField,\n  displayName: displayNameField,\n})\n\nexport const profileUpdateSchema = z.object({\n  displayName: displayNameField.optional(),\n})\n\nexport const passwordChangeSchema = z.object({\n  currentPassword: z.string().min(1).max(128),\n  newPassword: passwordField,\n})\n\nexport const createRoleSchema = z.object({\n  name: z.string().min(1).max(255),\n  slug: z.string().min(1).max(255).regex(/^[a-z0-9_-]+$/),\n  description: z.string().max(1000).optional(),\n  isDefault: z.boolean().optional(),\n  customerAssignable: z.boolean().optional(),\n})\n\nexport const updateRoleSchema = z.object({\n  name: z.string().min(1).max(255).optional(),\n  description: z.string().max(1000).optional(),\n  isDefault: z.boolean().optional(),\n  customerAssignable: z.boolean().optional(),\n})\n\nexport const updateRoleAclSchema = z.object({\n  features: z.array(z.string().min(1).max(255)),\n  isPortalAdmin: z.boolean().optional(),\n})\n\nexport const inviteUserSchema = z.object({\n  email: emailField,\n  customerEntityId: z.string().uuid().optional(),\n  roleIds: z.array(z.string().uuid()).min(1),\n  displayName: displayNameField.optional(),\n})\n\nexport const assignRolesSchema = z.object({\n  roleIds: z.array(z.string().uuid()).min(1),\n})\n\nexport const adminCreateUserSchema = z.object({\n  email: emailField,\n  password: passwordField,\n  displayName: displayNameField,\n  roleIds: z.array(z.string().uuid()).optional(),\n  customerEntityId: z.string().uuid().optional(),\n})\n\nexport const adminUpdateUserSchema = z.object({\n  displayName: displayNameField.optional(),\n  isActive: z.boolean().optional(),\n  lockedUntil: z.string().datetime().nullable().optional(),\n  personEntityId: z.string().uuid().nullable().optional(),\n  customerEntityId: z.string().uuid().nullable().optional(),\n  roleIds: z.array(z.string().uuid()).optional(),\n})\n\nexport const adminResetPasswordSchema = z.object({\n  newPassword: passwordField,\n})\n\nexport type AdminCreateUserInput = z.infer<typeof adminCreateUserSchema>\nexport type AdminResetPasswordInput = z.infer<typeof adminResetPasswordSchema>\nexport type SignupInput = z.infer<typeof signupSchema>\nexport type LoginInput = z.infer<typeof loginSchema>\nexport type EmailVerifyInput = z.infer<typeof emailVerifySchema>\nexport type PasswordResetRequestInput = z.infer<typeof passwordResetRequestSchema>\nexport type PasswordResetConfirmInput = z.infer<typeof passwordResetConfirmSchema>\nexport type MagicLinkRequestInput = z.infer<typeof magicLinkRequestSchema>\nexport type MagicLinkVerifyInput = z.infer<typeof magicLinkVerifySchema>\nexport type InvitationAcceptInput = z.infer<typeof invitationAcceptSchema>\nexport type ProfileUpdateInput = z.infer<typeof profileUpdateSchema>\nexport type PasswordChangeInput = z.infer<typeof passwordChangeSchema>\nexport type CreateRoleInput = z.infer<typeof createRoleSchema>\nexport type UpdateRoleInput = z.infer<typeof updateRoleSchema>\nexport type UpdateRoleAclInput = z.infer<typeof updateRoleAclSchema>\nexport type InviteUserInput = z.infer<typeof inviteUserSchema>\nexport type AssignRolesInput = z.infer<typeof assignRolesSchema>\nexport type AdminUpdateUserInput = z.infer<typeof adminUpdateUserSchema>\n\n// Custom domain mapping\nexport const hostnameSchema = z\n  .string()\n  .min(1, 'Hostname is required')\n  .max(512, 'Hostname is too long')\n  .transform((value, ctx) => {\n    try {\n      return normalizeHostname(value)\n    } catch (err) {\n      ctx.addIssue({\n        code: z.ZodIssueCode.custom,\n        message: err instanceof Error ? err.message : 'Invalid hostname',\n      })\n      return z.NEVER\n    }\n  })\n\nexport const registerDomainSchema = z.object({\n  hostname: hostnameSchema,\n  organizationId: z.string().uuid(),\n  replacesDomainId: z.string().uuid().optional(),\n})\n\nexport type RegisterDomainInput = z.infer<typeof registerDomainSchema>\n"],
+  "mappings": "AAAA,SAAS,SAAS;AAClB,SAAS,yBAAyB;AAElC,MAAM,aAAa,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,GAAG;AAC7C,MAAM,gBAAgB,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAC/C,MAAM,mBAAmB,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAE3C,MAAM,eAAe,EAAE,OAAO;AAAA,EACnC,OAAO;AAAA,EACP,UAAU;AAAA,EACV,aAAa;AAAA,EACb,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACrC,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAC7C,CAAC;AAEM,MAAM,cAAc,EAAE,OAAO;AAAA,EAClC,OAAO;AAAA,EACP,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EACnC,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AACvC,CAAC;AAEM,MAAM,oBAAoB,EAAE,OAAO;AAAA,EACxC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAClC,CAAC;AAEM,MAAM,6BAA6B,EAAE,OAAO;AAAA,EACjD,OAAO;AAAA,EACP,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AACvC,CAAC;AAEM,MAAM,6BAA6B,EAAE,OAAO;AAAA,EACjD,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EAChC,UAAU;AACZ,CAAC;AAEM,MAAM,yBAAyB,EAAE,OAAO;AAAA,EAC7C,OAAO;AAAA,EACP,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AACvC,CAAC;AAEM,MAAM,wBAAwB,EAAE,OAAO;AAAA,EAC5C,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAClC,CAAC;AAEM,MAAM,yBAAyB,EAAE,OAAO;AAAA,EAC7C,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EAChC,UAAU;AAAA,EACV,aAAa;AACf,CAAC;AAEM,MAAM,sBAAsB,EAAE,OAAO;AAAA,EAC1C,aAAa,iBAAiB,SAAS;AACzC,CAAC;AAEM,MAAM,uBAAuB,EAAE,OAAO;AAAA,EAC3C,iBAAiB,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EAC1C,aAAa;AACf,CAAC;AAEM,MAAM,mBAAmB,EAAE,OAAO;AAAA,EACvC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EAC/B,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,MAAM,eAAe;AAAA,EACtD,aAAa,EAAE,OAAO,EAAE,IAAI,GAAI,EAAE,SAAS;AAAA,EAC3C,WAAW,EAAE,QAAQ,EAAE,SAAS;AAAA,EAChC,oBAAoB,EAAE,QAAQ,EAAE,SAAS;AAC3C,CAAC;AAEM,MAAM,mBAAmB,EAAE,OAAO;AAAA,EACvC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EAC1C,aAAa,EAAE,OAAO,EAAE,IAAI,GAAI,EAAE,SAAS;AAAA,EAC3C,WAAW,EAAE,QAAQ,EAAE,SAAS;AAAA,EAChC,oBAAoB,EAAE,QAAQ,EAAE,SAAS;AAC3C,CAAC;AAEM,MAAM,sBAAsB,EAAE,OAAO;AAAA,EAC1C,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,CAAC;AAAA,EAC5C,eAAe,EAAE,QAAQ,EAAE,SAAS;AACtC,CAAC;AAEM,MAAM,mBAAmB,EAAE,OAAO;AAAA,EACvC,OAAO;AAAA,EACP,kBAAkB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC7C,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,IAAI,CAAC;AAAA,EACzC,aAAa,iBAAiB,SAAS;AACzC,CAAC;AAEM,MAAM,oBAAoB,EAAE,OAAO;AAAA,EACxC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,IAAI,CAAC;AAC3C,CAAC;AAEM,MAAM,wBAAwB,EAAE,OAAO;AAAA,EAC5C,OAAO;AAAA,EACP,UAAU;AAAA,EACV,aAAa;AAAA,EACb,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,SAAS;AAAA,EAC7C,kBAAkB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAC/C,CAAC;AAEM,MAAM,wBAAwB,EAAE,OAAO;AAAA,EAC5C,aAAa,iBAAiB,SAAS;AAAA,EACvC,UAAU,EAAE,QAAQ,EAAE,SAAS;AAAA,EAC/B,aAAa,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS;AAAA,EACvD,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS;AAAA,EACtD,kBAAkB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS;AAAA,EACxD,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,SAAS;AAC/C,CAAC;AAEM,MAAM,2BAA2B,EAAE,OAAO;AAAA,EAC/C,aAAa;AACf,CAAC;AAsBM,MAAM,iBAAiB,EAC3B,OAAO,EACP,IAAI,GAAG,sBAAsB,EAC7B,IAAI,KAAK,sBAAsB,EAC/B,UAAU,CAAC,OAAO,QAAQ;AACzB,MAAI;AACF,WAAO,kBAAkB,KAAK;AAAA,EAChC,SAAS,KAAK;AACZ,QAAI,SAAS;AAAA,MACX,MAAM,EAAE,aAAa;AAAA,MACrB,SAAS,eAAe,QAAQ,IAAI,UAAU;AAAA,IAChD,CAAC;AACD,WAAO,EAAE;AAAA,EACX;AACF,CAAC;AAEI,MAAM,uBAAuB,EAAE,OAAO;AAAA,EAC3C,UAAU;AAAA,EACV,gBAAgB,EAAE,OAAO,EAAE,KAAK;AAAA,EAChC,kBAAkB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAC/C,CAAC;",
   "names": []
 }