@open-mercato/core 0.6.3-develop.3562.1.71049275ff → 0.6.3-develop.3574.1.f3c5dcf345

package/dist/modules/auth/lib/grantChecks.js

@@ -1,7 +1,7 @@
 import { CrudHttpError, forbidden } from "@open-mercato/shared/lib/crud/errors";
 import { hasFeature } from "@open-mercato/shared/security/features";
-import { findOneWithDecryption } from "@open-mercato/shared/lib/encryption/find";
-import { Role, RoleAcl } from "@open-mercato/core/modules/auth/data/entities";
+import { findOneWithDecryption, findWithDecryption } from "@open-mercato/shared/lib/encryption/find";
+import { Role, RoleAcl, UserAcl, UserRole } from "@open-mercato/core/modules/auth/data/entities";
 const UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
 async function assertActorCanGrantRoleTokens(input) {
   const tokens = normalizeStringList(input.roleTokens);
@@ -55,6 +55,96 @@ async function assertActorCanGrantAcl(input) {
 function normalizeGrantFeatureList(features) {
   return normalizeStringList(features);
 }
+async function assertActorCanModifySuperAdminUserTarget(input) {
+  const actorIsSuperAdmin = await resolveActorIsSuperAdmin(input);
+  if (actorIsSuperAdmin) return;
+  const targetIsSuperAdmin = await isUserEffectivelySuperAdmin(input.em, input.targetUserId);
+  if (targetIsSuperAdmin) {
+    throw forbidden("Only super administrators can modify super administrator accounts.");
+  }
+}
+async function assertActorCanModifySuperAdminRoleTarget(input) {
+  const actorIsSuperAdmin = await resolveActorIsSuperAdmin(input);
+  if (actorIsSuperAdmin) return;
+  const targetIsSuperAdmin = await isRoleEffectivelySuperAdmin(input.em, input.targetRoleId);
+  if (targetIsSuperAdmin) {
+    throw forbidden("Only super administrators can modify super administrator roles.");
+  }
+}
+async function resolveActorIsSuperAdmin(input) {
+  if (typeof input.actorIsSuperAdmin === "boolean") return input.actorIsSuperAdmin;
+  const acl = await loadActorAcl(input);
+  return acl.isSuperAdmin;
+}
+async function isUserEffectivelySuperAdmin(em, userId) {
+  const directGrant = await em.findOne(
+    UserAcl,
+    { user: userId, isSuperAdmin: true }
+  );
+  if (directGrant && directGrant.isSuperAdmin === true) return true;
+  const links = await findWithDecryption(
+    em,
+    UserRole,
+    { user: userId },
+    { populate: ["role"] },
+    { tenantId: null, organizationId: null }
+  );
+  const roleIds = (Array.isArray(links) ? links : []).map((link) => {
+    const role = link.role;
+    if (!role) return null;
+    if (typeof role === "string") return role;
+    return role.id ? String(role.id) : null;
+  }).filter((id) => typeof id === "string" && id.length > 0);
+  if (!roleIds.length) return false;
+  const roleGrant = await em.findOne(
+    RoleAcl,
+    { role: { $in: roleIds }, isSuperAdmin: true }
+  );
+  return !!roleGrant && roleGrant.isSuperAdmin === true;
+}
+async function isRoleEffectivelySuperAdmin(em, roleId) {
+  const grant = await em.findOne(
+    RoleAcl,
+    { role: roleId, isSuperAdmin: true }
+  );
+  return !!grant && grant.isSuperAdmin === true;
+}
+async function listSuperAdminUserIds(em, tenantId) {
+  const ids = /* @__PURE__ */ new Set();
+  const userAclFilter = { isSuperAdmin: true };
+  if (tenantId) userAclFilter.tenantId = tenantId;
+  const userAcls = await em.find(UserAcl, userAclFilter);
+  for (const acl of userAcls) {
+    const userRef = acl.user;
+    const userId = userRef && typeof userRef === "object" ? userRef.id : userRef;
+    if (userId) ids.add(String(userId));
+  }
+  const roleAcls = await em.find(
+    RoleAcl,
+    { isSuperAdmin: true }
+  );
+  const roleIds = roleAcls.map((acl) => {
+    const roleRef = acl.role;
+    if (!roleRef) return null;
+    if (typeof roleRef === "string") return roleRef;
+    return roleRef.id ? String(roleRef.id) : null;
+  }).filter((id) => typeof id === "string" && id.length > 0);
+  if (roleIds.length) {
+    const links = await findWithDecryption(
+      em,
+      UserRole,
+      { role: { $in: roleIds } },
+      {},
+      { tenantId: null, organizationId: null }
+    );
+    for (const link of Array.isArray(links) ? links : []) {
+      const userRef = link.user;
+      const userId = userRef && typeof userRef === "object" ? userRef.id : userRef;
+      if (userId) ids.add(String(userId));
+    }
+  }
+  return ids;
+}
 async function loadActorAcl(input) {
   const actorUserId = normalizeNullableString(input.actorUserId);
   if (!actorUserId) throw forbidden("Not authorized to grant ACL privileges.");
@@ -155,6 +245,11 @@ export {
   assertActorCanGrantAcl,
   assertActorCanGrantRoleTokens,
   assertActorCanGrantRoles,
+  assertActorCanModifySuperAdminRoleTarget,
+  assertActorCanModifySuperAdminUserTarget,
+  isRoleEffectivelySuperAdmin,
+  isUserEffectivelySuperAdmin,
+  listSuperAdminUserIds,
   normalizeGrantFeatureList
 };
 //# sourceMappingURL=grantChecks.js.map

package/dist/modules/auth/lib/grantChecks.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/auth/lib/grantChecks.ts"],
-  "sourcesContent": ["import type { EntityManager, FilterQuery } from '@mikro-orm/postgresql'\nimport { CrudHttpError, forbidden } from '@open-mercato/shared/lib/crud/errors'\nimport { hasFeature } from '@open-mercato/shared/security/features'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { Role, RoleAcl } from '@open-mercato/core/modules/auth/data/entities'\nimport type { RbacService } from '@open-mercato/core/modules/auth/services/rbacService'\n\ntype ActorAcl = {\n  isSuperAdmin: boolean\n  features: string[]\n  organizations: string[] | null\n}\n\ntype GrantCheckContext = {\n  em: EntityManager\n  rbacService: RbacService\n  actorUserId: string | null | undefined\n  tenantId: string | null | undefined\n  organizationId?: string | null | undefined\n}\n\ntype RoleGrantCheckInput = GrantCheckContext & {\n  roles: Role[]\n}\n\ntype RoleTokenGrantCheckInput = GrantCheckContext & {\n  roleTokens: unknown\n}\n\ntype FeatureGrantCheckInput = GrantCheckContext & {\n  features: unknown\n  isSuperAdmin?: boolean\n  organizations?: string[] | null\n}\n\nconst UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i\n\nexport async function assertActorCanGrantRoleTokens(input: RoleTokenGrantCheckInput): Promise<Role[]> {\n  const tokens = normalizeStringList(input.roleTokens)\n  if (!tokens.length) return []\n\n  const tenantId = normalizeNullableString(input.tenantId)\n  const roles = await resolveRolesForGrant(input.em, tokens, tenantId)\n  await assertActorCanGrantRoles({ ...input, tenantId, roles })\n  return roles\n}\n\nexport async function assertActorCanGrantRoles(input: RoleGrantCheckInput): Promise<void> {\n  if (!input.roles.length) return\n\n  const tenantId = normalizeNullableString(input.tenantId)\n  const actorAcl = await loadActorAcl({ ...input, tenantId })\n  if (actorAcl.isSuperAdmin) return\n\n  if (!tenantId) {\n    throw forbidden('Tenant context is required to grant roles.')\n  }\n\n  for (const role of input.roles) {\n    const roleTenantId = normalizeNullableString(role.tenantId)\n    if (roleTenantId !== tenantId) {\n      throw forbidden('Cannot grant a role outside the target tenant.')\n    }\n\n    const acl = await findOneWithDecryption(\n      input.em,\n      RoleAcl,\n      { role, tenantId } as FilterQuery<RoleAcl>,\n      {},\n      { tenantId, organizationId: null },\n    )\n    if (!acl) continue\n\n    assertActorCanGrantAclSnapshot(actorAcl, {\n      isSuperAdmin: !!acl.isSuperAdmin,\n      features: normalizeStringList(acl.featuresJson),\n      organizations: normalizeOrganizationList(acl.organizationsJson),\n    })\n  }\n}\n\nexport async function assertActorCanGrantAcl(input: FeatureGrantCheckInput): Promise<void> {\n  const actorAcl = await loadActorAcl(input)\n  if (actorAcl.isSuperAdmin) return\n\n  const tenantId = normalizeNullableString(input.tenantId)\n  if (!tenantId) {\n    throw forbidden('Tenant context is required to grant ACL features.')\n  }\n\n  assertActorCanGrantAclSnapshot(actorAcl, {\n    isSuperAdmin: !!input.isSuperAdmin,\n    features: normalizeStringList(input.features),\n    organizations: input.organizations === undefined ? undefined : normalizeOrganizationList(input.organizations),\n  })\n}\n\nexport function normalizeGrantFeatureList(features: unknown): string[] {\n  return normalizeStringList(features)\n}\n\nasync function loadActorAcl(input: GrantCheckContext): Promise<ActorAcl> {\n  const actorUserId = normalizeNullableString(input.actorUserId)\n  if (!actorUserId) throw forbidden('Not authorized to grant ACL privileges.')\n\n  const acl = await input.rbacService.loadAcl(actorUserId, {\n    tenantId: normalizeNullableString(input.tenantId),\n    organizationId: normalizeNullableString(input.organizationId),\n  })\n\n  return {\n    isSuperAdmin: !!acl?.isSuperAdmin,\n    features: normalizeStringList(acl?.features),\n    organizations: normalizeOrganizationList(acl?.organizations),\n  }\n}\n\nasync function resolveRolesForGrant(\n  em: EntityManager,\n  roleTokens: string[],\n  tenantId: string | null,\n): Promise<Role[]> {\n  const roles: Role[] = []\n  const missingRoles: string[] = []\n\n  for (const token of roleTokens) {\n    const role = await resolveRoleForGrant(em, token, tenantId)\n    if (!role) {\n      missingRoles.push(token)\n    } else {\n      roles.push(role)\n    }\n  }\n\n  if (missingRoles.length) {\n    const labels = missingRoles.map((role) => `\"${role}\"`).join(', ')\n    throw new CrudHttpError(400, { error: `Role(s) not found: ${labels}` })\n  }\n\n  return roles\n}\n\nasync function resolveRoleForGrant(\n  em: EntityManager,\n  token: string,\n  tenantId: string | null,\n): Promise<Role | null> {\n  const where: Record<string, unknown> = UUID_RE.test(token)\n    ? { id: token, deletedAt: null }\n    : { name: token, deletedAt: null }\n  if (tenantId) where.tenantId = tenantId\n  return findOneWithDecryption(\n    em,\n    Role,\n    where as FilterQuery<Role>,\n    {},\n    { tenantId, organizationId: null },\n  )\n}\n\nfunction assertActorCanGrantAclSnapshot(\n  actorAcl: ActorAcl,\n  requested: {\n    isSuperAdmin: boolean\n    features: string[]\n    organizations?: string[] | null\n  },\n): void {\n  if (requested.isSuperAdmin) {\n    throw forbidden('Only super administrators can grant super admin access.')\n  }\n\n  const actorGrantableFeatures = actorAcl.features.filter((grant) => grant !== '*')\n  for (const feature of requested.features) {\n    if (feature === '*') {\n      throw forbidden('Only super administrators can grant global wildcard access.')\n    }\n    if (isWildcardFeature(feature)) {\n      if (!hasFeature(actorGrantableFeatures, feature)) {\n        throw forbidden(`Cannot grant feature wildcard ${feature}.`)\n      }\n      continue\n    }\n    if (!hasFeature(actorGrantableFeatures, feature)) {\n      throw forbidden(`Cannot grant feature ${feature}.`)\n    }\n  }\n\n  if (requested.organizations !== undefined) {\n    assertActorCanGrantOrganizations(actorAcl.organizations, requested.organizations)\n  }\n}\n\nfunction assertActorCanGrantOrganizations(\n  actorOrganizations: string[] | null,\n  requestedOrganizations: string[] | null,\n): void {\n  if (actorOrganizations === null || actorOrganizations.includes('__all__')) return\n\n  if (requestedOrganizations === null || requestedOrganizations.includes('__all__')) {\n    throw forbidden('Cannot grant unrestricted organization access.')\n  }\n\n  for (const organizationId of requestedOrganizations) {\n    if (!actorOrganizations.includes(organizationId)) {\n      throw forbidden('Cannot grant organization access outside actor scope.')\n    }\n  }\n}\n\nfunction normalizeStringList(values: unknown): string[] {\n  if (!Array.isArray(values)) return []\n  const dedup = new Set<string>()\n  for (const value of values) {\n    if (typeof value !== 'string') continue\n    const trimmed = value.trim()\n    if (!trimmed) continue\n    dedup.add(trimmed)\n  }\n  return Array.from(dedup)\n}\n\nfunction normalizeOrganizationList(values: unknown): string[] | null {\n  if (values === null || values === undefined) return null\n  return normalizeStringList(values)\n}\n\nfunction normalizeNullableString(value: unknown): string | null {\n  return typeof value === 'string' && value.trim().length > 0 ? value.trim() : null\n}\n\nfunction isWildcardFeature(feature: string): boolean {\n  return feature.endsWith('.*')\n}\n"],
-  "mappings": "AACA,SAAS,eAAe,iBAAiB;AACzC,SAAS,kBAAkB;AAC3B,SAAS,6BAA6B;AACtC,SAAS,MAAM,eAAe;AA+B9B,MAAM,UAAU;AAEhB,eAAsB,8BAA8B,OAAkD;AACpG,QAAM,SAAS,oBAAoB,MAAM,UAAU;AACnD,MAAI,CAAC,OAAO,OAAQ,QAAO,CAAC;AAE5B,QAAM,WAAW,wBAAwB,MAAM,QAAQ;AACvD,QAAM,QAAQ,MAAM,qBAAqB,MAAM,IAAI,QAAQ,QAAQ;AACnE,QAAM,yBAAyB,EAAE,GAAG,OAAO,UAAU,MAAM,CAAC;AAC5D,SAAO;AACT;AAEA,eAAsB,yBAAyB,OAA2C;AACxF,MAAI,CAAC,MAAM,MAAM,OAAQ;AAEzB,QAAM,WAAW,wBAAwB,MAAM,QAAQ;AACvD,QAAM,WAAW,MAAM,aAAa,EAAE,GAAG,OAAO,SAAS,CAAC;AAC1D,MAAI,SAAS,aAAc;AAE3B,MAAI,CAAC,UAAU;AACb,UAAM,UAAU,4CAA4C;AAAA,EAC9D;AAEA,aAAW,QAAQ,MAAM,OAAO;AAC9B,UAAM,eAAe,wBAAwB,KAAK,QAAQ;AAC1D,QAAI,iBAAiB,UAAU;AAC7B,YAAM,UAAU,gDAAgD;AAAA,IAClE;AAEA,UAAM,MAAM,MAAM;AAAA,MAChB,MAAM;AAAA,MACN;AAAA,MACA,EAAE,MAAM,SAAS;AAAA,MACjB,CAAC;AAAA,MACD,EAAE,UAAU,gBAAgB,KAAK;AAAA,IACnC;AACA,QAAI,CAAC,IAAK;AAEV,mCAA+B,UAAU;AAAA,MACvC,cAAc,CAAC,CAAC,IAAI;AAAA,MACpB,UAAU,oBAAoB,IAAI,YAAY;AAAA,MAC9C,eAAe,0BAA0B,IAAI,iBAAiB;AAAA,IAChE,CAAC;AAAA,EACH;AACF;AAEA,eAAsB,uBAAuB,OAA8C;AACzF,QAAM,WAAW,MAAM,aAAa,KAAK;AACzC,MAAI,SAAS,aAAc;AAE3B,QAAM,WAAW,wBAAwB,MAAM,QAAQ;AACvD,MAAI,CAAC,UAAU;AACb,UAAM,UAAU,mDAAmD;AAAA,EACrE;AAEA,iCAA+B,UAAU;AAAA,IACvC,cAAc,CAAC,CAAC,MAAM;AAAA,IACtB,UAAU,oBAAoB,MAAM,QAAQ;AAAA,IAC5C,eAAe,MAAM,kBAAkB,SAAY,SAAY,0BAA0B,MAAM,aAAa;AAAA,EAC9G,CAAC;AACH;AAEO,SAAS,0BAA0B,UAA6B;AACrE,SAAO,oBAAoB,QAAQ;AACrC;AAEA,eAAe,aAAa,OAA6C;AACvE,QAAM,cAAc,wBAAwB,MAAM,WAAW;AAC7D,MAAI,CAAC,YAAa,OAAM,UAAU,yCAAyC;AAE3E,QAAM,MAAM,MAAM,MAAM,YAAY,QAAQ,aAAa;AAAA,IACvD,UAAU,wBAAwB,MAAM,QAAQ;AAAA,IAChD,gBAAgB,wBAAwB,MAAM,cAAc;AAAA,EAC9D,CAAC;AAED,SAAO;AAAA,IACL,cAAc,CAAC,CAAC,KAAK;AAAA,IACrB,UAAU,oBAAoB,KAAK,QAAQ;AAAA,IAC3C,eAAe,0BAA0B,KAAK,aAAa;AAAA,EAC7D;AACF;AAEA,eAAe,qBACb,IACA,YACA,UACiB;AACjB,QAAM,QAAgB,CAAC;AACvB,QAAM,eAAyB,CAAC;AAEhC,aAAW,SAAS,YAAY;AAC9B,UAAM,OAAO,MAAM,oBAAoB,IAAI,OAAO,QAAQ;AAC1D,QAAI,CAAC,MAAM;AACT,mBAAa,KAAK,KAAK;AAAA,IACzB,OAAO;AACL,YAAM,KAAK,IAAI;AAAA,IACjB;AAAA,EACF;AAEA,MAAI,aAAa,QAAQ;AACvB,UAAM,SAAS,aAAa,IAAI,CAAC,SAAS,IAAI,IAAI,GAAG,EAAE,KAAK,IAAI;AAChE,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,sBAAsB,MAAM,GAAG,CAAC;AAAA,EACxE;AAEA,SAAO;AACT;AAEA,eAAe,oBACb,IACA,OACA,UACsB;AACtB,QAAM,QAAiC,QAAQ,KAAK,KAAK,IACrD,EAAE,IAAI,OAAO,WAAW,KAAK,IAC7B,EAAE,MAAM,OAAO,WAAW,KAAK;AACnC,MAAI,SAAU,OAAM,WAAW;AAC/B,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA,CAAC;AAAA,IACD,EAAE,UAAU,gBAAgB,KAAK;AAAA,EACnC;AACF;AAEA,SAAS,+BACP,UACA,WAKM;AACN,MAAI,UAAU,cAAc;AAC1B,UAAM,UAAU,yDAAyD;AAAA,EAC3E;AAEA,QAAM,yBAAyB,SAAS,SAAS,OAAO,CAAC,UAAU,UAAU,GAAG;AAChF,aAAW,WAAW,UAAU,UAAU;AACxC,QAAI,YAAY,KAAK;AACnB,YAAM,UAAU,6DAA6D;AAAA,IAC/E;AACA,QAAI,kBAAkB,OAAO,GAAG;AAC9B,UAAI,CAAC,WAAW,wBAAwB,OAAO,GAAG;AAChD,cAAM,UAAU,iCAAiC,OAAO,GAAG;AAAA,MAC7D;AACA;AAAA,IACF;AACA,QAAI,CAAC,WAAW,wBAAwB,OAAO,GAAG;AAChD,YAAM,UAAU,wBAAwB,OAAO,GAAG;AAAA,IACpD;AAAA,EACF;AAEA,MAAI,UAAU,kBAAkB,QAAW;AACzC,qCAAiC,SAAS,eAAe,UAAU,aAAa;AAAA,EAClF;AACF;AAEA,SAAS,iCACP,oBACA,wBACM;AACN,MAAI,uBAAuB,QAAQ,mBAAmB,SAAS,SAAS,EAAG;AAE3E,MAAI,2BAA2B,QAAQ,uBAAuB,SAAS,SAAS,GAAG;AACjF,UAAM,UAAU,gDAAgD;AAAA,EAClE;AAEA,aAAW,kBAAkB,wBAAwB;AACnD,QAAI,CAAC,mBAAmB,SAAS,cAAc,GAAG;AAChD,YAAM,UAAU,uDAAuD;AAAA,IACzE;AAAA,EACF;AACF;AAEA,SAAS,oBAAoB,QAA2B;AACtD,MAAI,CAAC,MAAM,QAAQ,MAAM,EAAG,QAAO,CAAC;AACpC,QAAM,QAAQ,oBAAI,IAAY;AAC9B,aAAW,SAAS,QAAQ;AAC1B,QAAI,OAAO,UAAU,SAAU;AAC/B,UAAM,UAAU,MAAM,KAAK;AAC3B,QAAI,CAAC,QAAS;AACd,UAAM,IAAI,OAAO;AAAA,EACnB;AACA,SAAO,MAAM,KAAK,KAAK;AACzB;AAEA,SAAS,0BAA0B,QAAkC;AACnE,MAAI,WAAW,QAAQ,WAAW,OAAW,QAAO;AACpD,SAAO,oBAAoB,MAAM;AACnC;AAEA,SAAS,wBAAwB,OAA+B;AAC9D,SAAO,OAAO,UAAU,YAAY,MAAM,KAAK,EAAE,SAAS,IAAI,MAAM,KAAK,IAAI;AAC/E;AAEA,SAAS,kBAAkB,SAA0B;AACnD,SAAO,QAAQ,SAAS,IAAI;AAC9B;",
+  "sourcesContent": ["import type { EntityManager, FilterQuery } from '@mikro-orm/postgresql'\nimport { CrudHttpError, forbidden } from '@open-mercato/shared/lib/crud/errors'\nimport { hasFeature } from '@open-mercato/shared/security/features'\nimport { findOneWithDecryption, findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { Role, RoleAcl, UserAcl, UserRole } from '@open-mercato/core/modules/auth/data/entities'\nimport type { RbacService } from '@open-mercato/core/modules/auth/services/rbacService'\n\ntype ActorAcl = {\n  isSuperAdmin: boolean\n  features: string[]\n  organizations: string[] | null\n}\n\ntype GrantCheckContext = {\n  em: EntityManager\n  rbacService: RbacService\n  actorUserId: string | null | undefined\n  tenantId: string | null | undefined\n  organizationId?: string | null | undefined\n}\n\ntype RoleGrantCheckInput = GrantCheckContext & {\n  roles: Role[]\n}\n\ntype RoleTokenGrantCheckInput = GrantCheckContext & {\n  roleTokens: unknown\n}\n\ntype FeatureGrantCheckInput = GrantCheckContext & {\n  features: unknown\n  isSuperAdmin?: boolean\n  organizations?: string[] | null\n}\n\ntype SuperAdminUserTargetInput = GrantCheckContext & {\n  targetUserId: string\n  actorIsSuperAdmin?: boolean\n}\n\ntype SuperAdminRoleTargetInput = GrantCheckContext & {\n  targetRoleId: string\n  actorIsSuperAdmin?: boolean\n}\n\nconst UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i\n\nexport async function assertActorCanGrantRoleTokens(input: RoleTokenGrantCheckInput): Promise<Role[]> {\n  const tokens = normalizeStringList(input.roleTokens)\n  if (!tokens.length) return []\n\n  const tenantId = normalizeNullableString(input.tenantId)\n  const roles = await resolveRolesForGrant(input.em, tokens, tenantId)\n  await assertActorCanGrantRoles({ ...input, tenantId, roles })\n  return roles\n}\n\nexport async function assertActorCanGrantRoles(input: RoleGrantCheckInput): Promise<void> {\n  if (!input.roles.length) return\n\n  const tenantId = normalizeNullableString(input.tenantId)\n  const actorAcl = await loadActorAcl({ ...input, tenantId })\n  if (actorAcl.isSuperAdmin) return\n\n  if (!tenantId) {\n    throw forbidden('Tenant context is required to grant roles.')\n  }\n\n  for (const role of input.roles) {\n    const roleTenantId = normalizeNullableString(role.tenantId)\n    if (roleTenantId !== tenantId) {\n      throw forbidden('Cannot grant a role outside the target tenant.')\n    }\n\n    const acl = await findOneWithDecryption(\n      input.em,\n      RoleAcl,\n      { role, tenantId } as FilterQuery<RoleAcl>,\n      {},\n      { tenantId, organizationId: null },\n    )\n    if (!acl) continue\n\n    assertActorCanGrantAclSnapshot(actorAcl, {\n      isSuperAdmin: !!acl.isSuperAdmin,\n      features: normalizeStringList(acl.featuresJson),\n      organizations: normalizeOrganizationList(acl.organizationsJson),\n    })\n  }\n}\n\nexport async function assertActorCanGrantAcl(input: FeatureGrantCheckInput): Promise<void> {\n  const actorAcl = await loadActorAcl(input)\n  if (actorAcl.isSuperAdmin) return\n\n  const tenantId = normalizeNullableString(input.tenantId)\n  if (!tenantId) {\n    throw forbidden('Tenant context is required to grant ACL features.')\n  }\n\n  assertActorCanGrantAclSnapshot(actorAcl, {\n    isSuperAdmin: !!input.isSuperAdmin,\n    features: normalizeStringList(input.features),\n    organizations: input.organizations === undefined ? undefined : normalizeOrganizationList(input.organizations),\n  })\n}\n\nexport function normalizeGrantFeatureList(features: unknown): string[] {\n  return normalizeStringList(features)\n}\n\nexport async function assertActorCanModifySuperAdminUserTarget(input: SuperAdminUserTargetInput): Promise<void> {\n  const actorIsSuperAdmin = await resolveActorIsSuperAdmin(input)\n  if (actorIsSuperAdmin) return\n  const targetIsSuperAdmin = await isUserEffectivelySuperAdmin(input.em, input.targetUserId)\n  if (targetIsSuperAdmin) {\n    throw forbidden('Only super administrators can modify super administrator accounts.')\n  }\n}\n\nexport async function assertActorCanModifySuperAdminRoleTarget(input: SuperAdminRoleTargetInput): Promise<void> {\n  const actorIsSuperAdmin = await resolveActorIsSuperAdmin(input)\n  if (actorIsSuperAdmin) return\n  const targetIsSuperAdmin = await isRoleEffectivelySuperAdmin(input.em, input.targetRoleId)\n  if (targetIsSuperAdmin) {\n    throw forbidden('Only super administrators can modify super administrator roles.')\n  }\n}\n\nasync function resolveActorIsSuperAdmin(input: GrantCheckContext & { actorIsSuperAdmin?: boolean }): Promise<boolean> {\n  if (typeof input.actorIsSuperAdmin === 'boolean') return input.actorIsSuperAdmin\n  const acl = await loadActorAcl(input)\n  return acl.isSuperAdmin\n}\n\nexport async function isUserEffectivelySuperAdmin(em: EntityManager, userId: string): Promise<boolean> {\n  const directGrant = await em.findOne(\n    UserAcl,\n    { user: userId as unknown, isSuperAdmin: true } as FilterQuery<UserAcl>,\n  )\n  if (directGrant && (directGrant as { isSuperAdmin?: boolean }).isSuperAdmin === true) return true\n  const links = await findWithDecryption(\n    em,\n    UserRole,\n    { user: userId as unknown } as FilterQuery<UserRole>,\n    { populate: ['role'] },\n    { tenantId: null, organizationId: null },\n  )\n  const roleIds = (Array.isArray(links) ? links : [])\n    .map((link) => {\n      const role = (link as { role?: { id?: unknown } | string | null }).role\n      if (!role) return null\n      if (typeof role === 'string') return role\n      return role.id ? String(role.id) : null\n    })\n    .filter((id): id is string => typeof id === 'string' && id.length > 0)\n  if (!roleIds.length) return false\n  const roleGrant = await em.findOne(\n    RoleAcl,\n    { role: { $in: roleIds } as unknown, isSuperAdmin: true } as FilterQuery<RoleAcl>,\n  )\n  return !!roleGrant && (roleGrant as { isSuperAdmin?: boolean }).isSuperAdmin === true\n}\n\nexport async function isRoleEffectivelySuperAdmin(em: EntityManager, roleId: string): Promise<boolean> {\n  const grant = await em.findOne(\n    RoleAcl,\n    { role: roleId as unknown, isSuperAdmin: true } as FilterQuery<RoleAcl>,\n  )\n  return !!grant && (grant as { isSuperAdmin?: boolean }).isSuperAdmin === true\n}\n\nexport async function listSuperAdminUserIds(em: EntityManager, tenantId: string | null): Promise<Set<string>> {\n  const ids = new Set<string>()\n  const userAclFilter: Record<string, unknown> = { isSuperAdmin: true }\n  if (tenantId) userAclFilter.tenantId = tenantId\n  const userAcls = await em.find(UserAcl, userAclFilter as FilterQuery<UserAcl>)\n  for (const acl of userAcls) {\n    const userRef = (acl as { user?: { id?: unknown } | string | null }).user\n    const userId = userRef && typeof userRef === 'object'\n      ? userRef.id\n      : userRef\n    if (userId) ids.add(String(userId))\n  }\n  const roleAcls = await em.find(\n    RoleAcl,\n    { isSuperAdmin: true } as FilterQuery<RoleAcl>,\n  )\n  const roleIds = roleAcls\n    .map((acl) => {\n      const roleRef = (acl as { role?: { id?: unknown } | string | null }).role\n      if (!roleRef) return null\n      if (typeof roleRef === 'string') return roleRef\n      return roleRef.id ? String(roleRef.id) : null\n    })\n    .filter((id): id is string => typeof id === 'string' && id.length > 0)\n  if (roleIds.length) {\n    const links = await findWithDecryption(\n      em,\n      UserRole,\n      { role: { $in: roleIds } as unknown } as FilterQuery<UserRole>,\n      {},\n      { tenantId: null, organizationId: null },\n    )\n    for (const link of Array.isArray(links) ? links : []) {\n      const userRef = (link as { user?: { id?: unknown } | string | null }).user\n      const userId = userRef && typeof userRef === 'object'\n        ? userRef.id\n        : userRef\n      if (userId) ids.add(String(userId))\n    }\n  }\n  return ids\n}\n\nasync function loadActorAcl(input: GrantCheckContext): Promise<ActorAcl> {\n  const actorUserId = normalizeNullableString(input.actorUserId)\n  if (!actorUserId) throw forbidden('Not authorized to grant ACL privileges.')\n\n  const acl = await input.rbacService.loadAcl(actorUserId, {\n    tenantId: normalizeNullableString(input.tenantId),\n    organizationId: normalizeNullableString(input.organizationId),\n  })\n\n  return {\n    isSuperAdmin: !!acl?.isSuperAdmin,\n    features: normalizeStringList(acl?.features),\n    organizations: normalizeOrganizationList(acl?.organizations),\n  }\n}\n\nasync function resolveRolesForGrant(\n  em: EntityManager,\n  roleTokens: string[],\n  tenantId: string | null,\n): Promise<Role[]> {\n  const roles: Role[] = []\n  const missingRoles: string[] = []\n\n  for (const token of roleTokens) {\n    const role = await resolveRoleForGrant(em, token, tenantId)\n    if (!role) {\n      missingRoles.push(token)\n    } else {\n      roles.push(role)\n    }\n  }\n\n  if (missingRoles.length) {\n    const labels = missingRoles.map((role) => `\"${role}\"`).join(', ')\n    throw new CrudHttpError(400, { error: `Role(s) not found: ${labels}` })\n  }\n\n  return roles\n}\n\nasync function resolveRoleForGrant(\n  em: EntityManager,\n  token: string,\n  tenantId: string | null,\n): Promise<Role | null> {\n  const where: Record<string, unknown> = UUID_RE.test(token)\n    ? { id: token, deletedAt: null }\n    : { name: token, deletedAt: null }\n  if (tenantId) where.tenantId = tenantId\n  return findOneWithDecryption(\n    em,\n    Role,\n    where as FilterQuery<Role>,\n    {},\n    { tenantId, organizationId: null },\n  )\n}\n\nfunction assertActorCanGrantAclSnapshot(\n  actorAcl: ActorAcl,\n  requested: {\n    isSuperAdmin: boolean\n    features: string[]\n    organizations?: string[] | null\n  },\n): void {\n  if (requested.isSuperAdmin) {\n    throw forbidden('Only super administrators can grant super admin access.')\n  }\n\n  const actorGrantableFeatures = actorAcl.features.filter((grant) => grant !== '*')\n  for (const feature of requested.features) {\n    if (feature === '*') {\n      throw forbidden('Only super administrators can grant global wildcard access.')\n    }\n    if (isWildcardFeature(feature)) {\n      if (!hasFeature(actorGrantableFeatures, feature)) {\n        throw forbidden(`Cannot grant feature wildcard ${feature}.`)\n      }\n      continue\n    }\n    if (!hasFeature(actorGrantableFeatures, feature)) {\n      throw forbidden(`Cannot grant feature ${feature}.`)\n    }\n  }\n\n  if (requested.organizations !== undefined) {\n    assertActorCanGrantOrganizations(actorAcl.organizations, requested.organizations)\n  }\n}\n\nfunction assertActorCanGrantOrganizations(\n  actorOrganizations: string[] | null,\n  requestedOrganizations: string[] | null,\n): void {\n  if (actorOrganizations === null || actorOrganizations.includes('__all__')) return\n\n  if (requestedOrganizations === null || requestedOrganizations.includes('__all__')) {\n    throw forbidden('Cannot grant unrestricted organization access.')\n  }\n\n  for (const organizationId of requestedOrganizations) {\n    if (!actorOrganizations.includes(organizationId)) {\n      throw forbidden('Cannot grant organization access outside actor scope.')\n    }\n  }\n}\n\nfunction normalizeStringList(values: unknown): string[] {\n  if (!Array.isArray(values)) return []\n  const dedup = new Set<string>()\n  for (const value of values) {\n    if (typeof value !== 'string') continue\n    const trimmed = value.trim()\n    if (!trimmed) continue\n    dedup.add(trimmed)\n  }\n  return Array.from(dedup)\n}\n\nfunction normalizeOrganizationList(values: unknown): string[] | null {\n  if (values === null || values === undefined) return null\n  return normalizeStringList(values)\n}\n\nfunction normalizeNullableString(value: unknown): string | null {\n  return typeof value === 'string' && value.trim().length > 0 ? value.trim() : null\n}\n\nfunction isWildcardFeature(feature: string): boolean {\n  return feature.endsWith('.*')\n}\n"],
+  "mappings": "AACA,SAAS,eAAe,iBAAiB;AACzC,SAAS,kBAAkB;AAC3B,SAAS,uBAAuB,0BAA0B;AAC1D,SAAS,MAAM,SAAS,SAAS,gBAAgB;AAyCjD,MAAM,UAAU;AAEhB,eAAsB,8BAA8B,OAAkD;AACpG,QAAM,SAAS,oBAAoB,MAAM,UAAU;AACnD,MAAI,CAAC,OAAO,OAAQ,QAAO,CAAC;AAE5B,QAAM,WAAW,wBAAwB,MAAM,QAAQ;AACvD,QAAM,QAAQ,MAAM,qBAAqB,MAAM,IAAI,QAAQ,QAAQ;AACnE,QAAM,yBAAyB,EAAE,GAAG,OAAO,UAAU,MAAM,CAAC;AAC5D,SAAO;AACT;AAEA,eAAsB,yBAAyB,OAA2C;AACxF,MAAI,CAAC,MAAM,MAAM,OAAQ;AAEzB,QAAM,WAAW,wBAAwB,MAAM,QAAQ;AACvD,QAAM,WAAW,MAAM,aAAa,EAAE,GAAG,OAAO,SAAS,CAAC;AAC1D,MAAI,SAAS,aAAc;AAE3B,MAAI,CAAC,UAAU;AACb,UAAM,UAAU,4CAA4C;AAAA,EAC9D;AAEA,aAAW,QAAQ,MAAM,OAAO;AAC9B,UAAM,eAAe,wBAAwB,KAAK,QAAQ;AAC1D,QAAI,iBAAiB,UAAU;AAC7B,YAAM,UAAU,gDAAgD;AAAA,IAClE;AAEA,UAAM,MAAM,MAAM;AAAA,MAChB,MAAM;AAAA,MACN;AAAA,MACA,EAAE,MAAM,SAAS;AAAA,MACjB,CAAC;AAAA,MACD,EAAE,UAAU,gBAAgB,KAAK;AAAA,IACnC;AACA,QAAI,CAAC,IAAK;AAEV,mCAA+B,UAAU;AAAA,MACvC,cAAc,CAAC,CAAC,IAAI;AAAA,MACpB,UAAU,oBAAoB,IAAI,YAAY;AAAA,MAC9C,eAAe,0BAA0B,IAAI,iBAAiB;AAAA,IAChE,CAAC;AAAA,EACH;AACF;AAEA,eAAsB,uBAAuB,OAA8C;AACzF,QAAM,WAAW,MAAM,aAAa,KAAK;AACzC,MAAI,SAAS,aAAc;AAE3B,QAAM,WAAW,wBAAwB,MAAM,QAAQ;AACvD,MAAI,CAAC,UAAU;AACb,UAAM,UAAU,mDAAmD;AAAA,EACrE;AAEA,iCAA+B,UAAU;AAAA,IACvC,cAAc,CAAC,CAAC,MAAM;AAAA,IACtB,UAAU,oBAAoB,MAAM,QAAQ;AAAA,IAC5C,eAAe,MAAM,kBAAkB,SAAY,SAAY,0BAA0B,MAAM,aAAa;AAAA,EAC9G,CAAC;AACH;AAEO,SAAS,0BAA0B,UAA6B;AACrE,SAAO,oBAAoB,QAAQ;AACrC;AAEA,eAAsB,yCAAyC,OAAiD;AAC9G,QAAM,oBAAoB,MAAM,yBAAyB,KAAK;AAC9D,MAAI,kBAAmB;AACvB,QAAM,qBAAqB,MAAM,4BAA4B,MAAM,IAAI,MAAM,YAAY;AACzF,MAAI,oBAAoB;AACtB,UAAM,UAAU,oEAAoE;AAAA,EACtF;AACF;AAEA,eAAsB,yCAAyC,OAAiD;AAC9G,QAAM,oBAAoB,MAAM,yBAAyB,KAAK;AAC9D,MAAI,kBAAmB;AACvB,QAAM,qBAAqB,MAAM,4BAA4B,MAAM,IAAI,MAAM,YAAY;AACzF,MAAI,oBAAoB;AACtB,UAAM,UAAU,iEAAiE;AAAA,EACnF;AACF;AAEA,eAAe,yBAAyB,OAA8E;AACpH,MAAI,OAAO,MAAM,sBAAsB,UAAW,QAAO,MAAM;AAC/D,QAAM,MAAM,MAAM,aAAa,KAAK;AACpC,SAAO,IAAI;AACb;AAEA,eAAsB,4BAA4B,IAAmB,QAAkC;AACrG,QAAM,cAAc,MAAM,GAAG;AAAA,IAC3B;AAAA,IACA,EAAE,MAAM,QAAmB,cAAc,KAAK;AAAA,EAChD;AACA,MAAI,eAAgB,YAA2C,iBAAiB,KAAM,QAAO;AAC7F,QAAM,QAAQ,MAAM;AAAA,IAClB;AAAA,IACA;AAAA,IACA,EAAE,MAAM,OAAkB;AAAA,IAC1B,EAAE,UAAU,CAAC,MAAM,EAAE;AAAA,IACrB,EAAE,UAAU,MAAM,gBAAgB,KAAK;AAAA,EACzC;AACA,QAAM,WAAW,MAAM,QAAQ,KAAK,IAAI,QAAQ,CAAC,GAC9C,IAAI,CAAC,SAAS;AACb,UAAM,OAAQ,KAAqD;AACnE,QAAI,CAAC,KAAM,QAAO;AAClB,QAAI,OAAO,SAAS,SAAU,QAAO;AACrC,WAAO,KAAK,KAAK,OAAO,KAAK,EAAE,IAAI;AAAA,EACrC,CAAC,EACA,OAAO,CAAC,OAAqB,OAAO,OAAO,YAAY,GAAG,SAAS,CAAC;AACvE,MAAI,CAAC,QAAQ,OAAQ,QAAO;AAC5B,QAAM,YAAY,MAAM,GAAG;AAAA,IACzB;AAAA,IACA,EAAE,MAAM,EAAE,KAAK,QAAQ,GAAc,cAAc,KAAK;AAAA,EAC1D;AACA,SAAO,CAAC,CAAC,aAAc,UAAyC,iBAAiB;AACnF;AAEA,eAAsB,4BAA4B,IAAmB,QAAkC;AACrG,QAAM,QAAQ,MAAM,GAAG;AAAA,IACrB;AAAA,IACA,EAAE,MAAM,QAAmB,cAAc,KAAK;AAAA,EAChD;AACA,SAAO,CAAC,CAAC,SAAU,MAAqC,iBAAiB;AAC3E;AAEA,eAAsB,sBAAsB,IAAmB,UAA+C;AAC5G,QAAM,MAAM,oBAAI,IAAY;AAC5B,QAAM,gBAAyC,EAAE,cAAc,KAAK;AACpE,MAAI,SAAU,eAAc,WAAW;AACvC,QAAM,WAAW,MAAM,GAAG,KAAK,SAAS,aAAqC;AAC7E,aAAW,OAAO,UAAU;AAC1B,UAAM,UAAW,IAAoD;AACrE,UAAM,SAAS,WAAW,OAAO,YAAY,WACzC,QAAQ,KACR;AACJ,QAAI,OAAQ,KAAI,IAAI,OAAO,MAAM,CAAC;AAAA,EACpC;AACA,QAAM,WAAW,MAAM,GAAG;AAAA,IACxB;AAAA,IACA,EAAE,cAAc,KAAK;AAAA,EACvB;AACA,QAAM,UAAU,SACb,IAAI,CAAC,QAAQ;AACZ,UAAM,UAAW,IAAoD;AACrE,QAAI,CAAC,QAAS,QAAO;AACrB,QAAI,OAAO,YAAY,SAAU,QAAO;AACxC,WAAO,QAAQ,KAAK,OAAO,QAAQ,EAAE,IAAI;AAAA,EAC3C,CAAC,EACA,OAAO,CAAC,OAAqB,OAAO,OAAO,YAAY,GAAG,SAAS,CAAC;AACvE,MAAI,QAAQ,QAAQ;AAClB,UAAM,QAAQ,MAAM;AAAA,MAClB;AAAA,MACA;AAAA,MACA,EAAE,MAAM,EAAE,KAAK,QAAQ,EAAa;AAAA,MACpC,CAAC;AAAA,MACD,EAAE,UAAU,MAAM,gBAAgB,KAAK;AAAA,IACzC;AACA,eAAW,QAAQ,MAAM,QAAQ,KAAK,IAAI,QAAQ,CAAC,GAAG;AACpD,YAAM,UAAW,KAAqD;AACtE,YAAM,SAAS,WAAW,OAAO,YAAY,WACzC,QAAQ,KACR;AACJ,UAAI,OAAQ,KAAI,IAAI,OAAO,MAAM,CAAC;AAAA,IACpC;AAAA,EACF;AACA,SAAO;AACT;AAEA,eAAe,aAAa,OAA6C;AACvE,QAAM,cAAc,wBAAwB,MAAM,WAAW;AAC7D,MAAI,CAAC,YAAa,OAAM,UAAU,yCAAyC;AAE3E,QAAM,MAAM,MAAM,MAAM,YAAY,QAAQ,aAAa;AAAA,IACvD,UAAU,wBAAwB,MAAM,QAAQ;AAAA,IAChD,gBAAgB,wBAAwB,MAAM,cAAc;AAAA,EAC9D,CAAC;AAED,SAAO;AAAA,IACL,cAAc,CAAC,CAAC,KAAK;AAAA,IACrB,UAAU,oBAAoB,KAAK,QAAQ;AAAA,IAC3C,eAAe,0BAA0B,KAAK,aAAa;AAAA,EAC7D;AACF;AAEA,eAAe,qBACb,IACA,YACA,UACiB;AACjB,QAAM,QAAgB,CAAC;AACvB,QAAM,eAAyB,CAAC;AAEhC,aAAW,SAAS,YAAY;AAC9B,UAAM,OAAO,MAAM,oBAAoB,IAAI,OAAO,QAAQ;AAC1D,QAAI,CAAC,MAAM;AACT,mBAAa,KAAK,KAAK;AAAA,IACzB,OAAO;AACL,YAAM,KAAK,IAAI;AAAA,IACjB;AAAA,EACF;AAEA,MAAI,aAAa,QAAQ;AACvB,UAAM,SAAS,aAAa,IAAI,CAAC,SAAS,IAAI,IAAI,GAAG,EAAE,KAAK,IAAI;AAChE,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,sBAAsB,MAAM,GAAG,CAAC;AAAA,EACxE;AAEA,SAAO;AACT;AAEA,eAAe,oBACb,IACA,OACA,UACsB;AACtB,QAAM,QAAiC,QAAQ,KAAK,KAAK,IACrD,EAAE,IAAI,OAAO,WAAW,KAAK,IAC7B,EAAE,MAAM,OAAO,WAAW,KAAK;AACnC,MAAI,SAAU,OAAM,WAAW;AAC/B,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA,CAAC;AAAA,IACD,EAAE,UAAU,gBAAgB,KAAK;AAAA,EACnC;AACF;AAEA,SAAS,+BACP,UACA,WAKM;AACN,MAAI,UAAU,cAAc;AAC1B,UAAM,UAAU,yDAAyD;AAAA,EAC3E;AAEA,QAAM,yBAAyB,SAAS,SAAS,OAAO,CAAC,UAAU,UAAU,GAAG;AAChF,aAAW,WAAW,UAAU,UAAU;AACxC,QAAI,YAAY,KAAK;AACnB,YAAM,UAAU,6DAA6D;AAAA,IAC/E;AACA,QAAI,kBAAkB,OAAO,GAAG;AAC9B,UAAI,CAAC,WAAW,wBAAwB,OAAO,GAAG;AAChD,cAAM,UAAU,iCAAiC,OAAO,GAAG;AAAA,MAC7D;AACA;AAAA,IACF;AACA,QAAI,CAAC,WAAW,wBAAwB,OAAO,GAAG;AAChD,YAAM,UAAU,wBAAwB,OAAO,GAAG;AAAA,IACpD;AAAA,EACF;AAEA,MAAI,UAAU,kBAAkB,QAAW;AACzC,qCAAiC,SAAS,eAAe,UAAU,aAAa;AAAA,EAClF;AACF;AAEA,SAAS,iCACP,oBACA,wBACM;AACN,MAAI,uBAAuB,QAAQ,mBAAmB,SAAS,SAAS,EAAG;AAE3E,MAAI,2BAA2B,QAAQ,uBAAuB,SAAS,SAAS,GAAG;AACjF,UAAM,UAAU,gDAAgD;AAAA,EAClE;AAEA,aAAW,kBAAkB,wBAAwB;AACnD,QAAI,CAAC,mBAAmB,SAAS,cAAc,GAAG;AAChD,YAAM,UAAU,uDAAuD;AAAA,IACzE;AAAA,EACF;AACF;AAEA,SAAS,oBAAoB,QAA2B;AACtD,MAAI,CAAC,MAAM,QAAQ,MAAM,EAAG,QAAO,CAAC;AACpC,QAAM,QAAQ,oBAAI,IAAY;AAC9B,aAAW,SAAS,QAAQ;AAC1B,QAAI,OAAO,UAAU,SAAU;AAC/B,UAAM,UAAU,MAAM,KAAK;AAC3B,QAAI,CAAC,QAAS;AACd,UAAM,IAAI,OAAO;AAAA,EACnB;AACA,SAAO,MAAM,KAAK,KAAK;AACzB;AAEA,SAAS,0BAA0B,QAAkC;AACnE,MAAI,WAAW,QAAQ,WAAW,OAAW,QAAO;AACpD,SAAO,oBAAoB,MAAM;AACnC;AAEA,SAAS,wBAAwB,OAA+B;AAC9D,SAAO,OAAO,UAAU,YAAY,MAAM,KAAK,EAAE,SAAS,IAAI,MAAM,KAAK,IAAI;AAC/E;AAEA,SAAS,kBAAkB,SAA0B;AACnD,SAAO,QAAQ,SAAS,IAAI;AAC9B;",
   "names": []
 }

package/dist/modules/business_rules/lib/expression-evaluator.js

@@ -1,3 +1,4 @@
+import { testLinearRegex } from "@open-mercato/shared/lib/regex/linear";
 import { getNestedValue, resolveSpecialValue } from "./value-resolver.js";
 function evaluateExpression(expression, data, context) {
   if (isGroupCondition(expression)) {
@@ -154,8 +155,8 @@ function endsWith(str, suffix) {
   if (str == null || suffix == null) return false;
   return String(str).endsWith(String(suffix));
 }
-const REGEX_TIMEOUT_MS = 100;
 const MAX_REGEX_LENGTH = 200;
+const MAX_REGEX_INPUT_LENGTH = 1e4;
 function matches(str, pattern) {
   if (str == null || pattern == null) return false;
   try {
@@ -166,14 +167,15 @@ function matches(str, pattern) {
     if (/(\(.*[+*]\).*[+*])/.test(patternStr)) {
       return false;
     }
-    const regex = new RegExp(patternStr);
     const testStr = String(str);
-    const startTime = Date.now();
-    const result = regex.test(testStr);
-    if (Date.now() - startTime > REGEX_TIMEOUT_MS) {
-      throw new Error("Regex execution timeout - potential ReDoS pattern detected");
+    if (testStr.length > MAX_REGEX_INPUT_LENGTH) {
+      return false;
     }
-    return result;
+    const result = testLinearRegex(patternStr, testStr, {
+      maxPatternLength: MAX_REGEX_LENGTH,
+      maxInputLength: MAX_REGEX_INPUT_LENGTH
+    });
+    return result.ok ? result.matched : false;
   } catch (error) {
     const message = error instanceof Error ? error.message : "Unknown error";
     if (process.env.NODE_ENV !== "test") {

package/dist/modules/business_rules/lib/expression-evaluator.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/business_rules/lib/expression-evaluator.ts"],
-  "sourcesContent": ["import type { ComparisonOperator, LogicalOperator } from '../data/validators'\nimport { getNestedValue, resolveSpecialValue } from './value-resolver'\n\n/**\n * Type definitions for condition expressions\n */\nexport type ConditionExpression = SimpleCondition | GroupCondition\n\nexport interface SimpleCondition {\n  field: string\n  operator: ComparisonOperator\n  value: any\n  valueField?: string // For field-to-field comparison\n}\n\nexport interface GroupCondition {\n  operator: LogicalOperator // 'AND' | 'OR' | 'NOT'\n  rules: ConditionExpression[]\n}\n\nexport interface EvaluationContext {\n  user?: {\n    id?: string\n    email?: string\n    role?: string\n    [key: string]: any\n  }\n  tenant?: {\n    id?: string\n    [key: string]: any\n  }\n  organization?: {\n    id?: string\n    [key: string]: any\n  }\n  now?: Date\n  today?: Date\n  [key: string]: any\n}\n\n/**\n * Evaluate a condition expression (simple or grouped)\n */\nexport function evaluateExpression(\n  expression: ConditionExpression,\n  data: any,\n  context: EvaluationContext\n): boolean {\n  if (isGroupCondition(expression)) {\n    return evaluateGroupCondition(expression, data, context)\n  }\n\n  return evaluateSimpleCondition(expression, data, context)\n}\n\n/**\n * Check if expression is a group condition\n */\nfunction isGroupCondition(expression: ConditionExpression): expression is GroupCondition {\n  return 'rules' in expression && Array.isArray(expression.rules)\n}\n\n/**\n * Evaluate a simple condition\n */\nfunction evaluateSimpleCondition(\n  condition: SimpleCondition,\n  data: any,\n  context: EvaluationContext\n): boolean {\n  // Left side: always resolve from data (field path)\n  const leftValue = resolveFieldPath(condition.field, data)\n\n  let rightValue: any\n  if (condition.valueField) {\n    // Field-to-field comparison: resolve from data\n    rightValue = resolveFieldPath(condition.valueField, data)\n  } else {\n    // Static value or special value\n    rightValue = resolveStaticOrSpecialValue(condition.value, context)\n  }\n\n  const result = applyOperator(leftValue, condition.operator, rightValue)\n\n  // Detailed logging for debugging\n  console.log('[RULE EVAL] Simple condition:', {\n    field: condition.field,\n    operator: condition.operator,\n    expectedValue: rightValue,\n    actualValue: leftValue,\n    actualValueType: typeof leftValue,\n    result: result ? '\u2713 PASS' : '\u2717 FAIL',\n  })\n\n  return result\n}\n\n/**\n * Evaluate a group condition (AND, OR, NOT)\n */\nfunction evaluateGroupCondition(\n  condition: GroupCondition,\n  data: any,\n  context: EvaluationContext\n): boolean {\n  const { operator, rules } = condition\n\n  if (!rules || rules.length === 0) {\n    return true\n  }\n\n  console.log(`[RULE EVAL] Group condition: ${operator} with ${rules.length} rules`)\n\n  let result: boolean\n\n  switch (operator) {\n    case 'AND':\n      result = rules.every((rule) => evaluateExpression(rule, data, context))\n      break\n\n    case 'OR':\n      result = rules.some((rule) => evaluateExpression(rule, data, context))\n      break\n\n    case 'NOT':\n      // NOT operator - negate the first rule (or all rules combined with AND)\n      if (rules.length === 1) {\n        result = !evaluateExpression(rules[0], data, context)\n      } else {\n        // Multiple rules - combine with AND then negate\n        result = !rules.every((rule) => evaluateExpression(rule, data, context))\n      }\n      break\n\n    default:\n      throw new Error(`Unknown logical operator: ${operator}`)\n  }\n\n  console.log(`[RULE EVAL] Group ${operator} result: ${result ? '\u2713 PASS' : '\u2717 FAIL'}`)\n\n  return result\n}\n\n/**\n * Resolve a field path from data\n */\nfunction resolveFieldPath(path: string, data: any): any {\n  return getNestedValue(data, path)\n}\n\n/**\n * Resolve a static value or special template value\n */\nfunction resolveStaticOrSpecialValue(value: any, context: EvaluationContext): any {\n  // If not a string, return as-is (already a value)\n  if (typeof value !== 'string') {\n    return value\n  }\n\n  // Check for special values (template variables)\n  if (value.startsWith('{{') && value.endsWith('}}')) {\n    return resolveSpecialValue(value, context)\n  }\n\n  // Return static string value as-is\n  return value\n}\n\n/**\n * Apply a comparison operator\n */\nfunction applyOperator(left: any, operator: ComparisonOperator, right: any): boolean {\n  switch (operator) {\n    case '=':\n    case '==':\n      return equals(left, right)\n\n    case '!=':\n      return !equals(left, right)\n\n    case '>':\n      return compare(left, right) > 0\n\n    case '>=':\n      return compare(left, right) >= 0\n\n    case '<':\n      return compare(left, right) < 0\n\n    case '<=':\n      return compare(left, right) <= 0\n\n    case 'IN':\n      return isIn(left, right)\n\n    case 'NOT_IN':\n      return !isIn(left, right)\n\n    case 'CONTAINS':\n      return contains(left, right)\n\n    case 'NOT_CONTAINS':\n      return !contains(left, right)\n\n    case 'STARTS_WITH':\n      return startsWith(left, right)\n\n    case 'ENDS_WITH':\n      return endsWith(left, right)\n\n    case 'MATCHES':\n      return matches(left, right)\n\n    case 'IS_EMPTY':\n      return isEmpty(left)\n\n    case 'IS_NOT_EMPTY':\n      return !isEmpty(left)\n\n    default:\n      throw new Error(`Unknown operator: ${operator}`)\n  }\n}\n\n/**\n * Equality comparison (handles different types)\n */\nfunction equals(left: any, right: any): boolean {\n  // Handle null/undefined\n  if (left == null && right == null) return true\n  if (left == null || right == null) return false\n\n  // Type coercion for numbers\n  if (typeof left === 'number' || typeof right === 'number') {\n    return Number(left) === Number(right)\n  }\n\n  // String comparison (case-sensitive)\n  return left === right\n}\n\n/**\n * Comparison for ordering (>, <, >=, <=)\n */\nfunction compare(left: any, right: any): number {\n  // Handle null/undefined\n  if (left == null && right == null) return 0\n  if (left == null) return -1\n  if (right == null) return 1\n\n  // Date comparison\n  if (left instanceof Date && right instanceof Date) {\n    return left.getTime() - right.getTime()\n  }\n\n  // String date comparison\n  if (isDateString(left) && isDateString(right)) {\n    return new Date(left).getTime() - new Date(right).getTime()\n  }\n\n  // Numeric comparison\n  const leftNum = Number(left)\n  const rightNum = Number(right)\n  if (!isNaN(leftNum) && !isNaN(rightNum)) {\n    return leftNum - rightNum\n  }\n\n  // String comparison\n  const leftStr = String(left)\n  const rightStr = String(right)\n  return leftStr.localeCompare(rightStr)\n}\n\n/**\n * Check if value is in array\n */\nfunction isIn(value: any, array: any): boolean {\n  if (!Array.isArray(array)) {\n    return false\n  }\n\n  return array.some((item) => equals(value, item))\n}\n\n/**\n * Check if array/string contains value\n */\nfunction contains(container: any, value: any): boolean {\n  if (container == null) return false\n\n  // Array contains\n  if (Array.isArray(container)) {\n    return container.some((item) => equals(item, value))\n  }\n\n  // String contains\n  if (typeof container === 'string') {\n    return container.includes(String(value))\n  }\n\n  return false\n}\n\n/**\n * Check if string starts with value\n */\nfunction startsWith(str: any, prefix: any): boolean {\n  if (str == null || prefix == null) return false\n\n  return String(str).startsWith(String(prefix))\n}\n\n/**\n * Check if string ends with value\n */\nfunction endsWith(str: any, suffix: any): boolean {\n  if (str == null || suffix == null) return false\n\n  return String(str).endsWith(String(suffix))\n}\n\n/**\n * Security limits for regex operations\n */\nconst REGEX_TIMEOUT_MS = 100\nconst MAX_REGEX_LENGTH = 200\n\n/**\n * Check if string matches regex pattern (with ReDoS protection)\n */\nfunction matches(str: any, pattern: any): boolean {\n  if (str == null || pattern == null) return false\n\n  try {\n    const patternStr = String(pattern)\n\n    // Prevent overly long patterns\n    if (patternStr.length > MAX_REGEX_LENGTH) {\n      return false\n    }\n\n    // Check for dangerous patterns that can cause exponential backtracking\n    // Patterns like (a+)+, (a*)*, (a+)*, etc.\n    if (/(\\(.*[+*]\\).*[+*])/.test(patternStr)) {\n      return false\n    }\n\n    const regex = new RegExp(patternStr)\n    const testStr = String(str)\n\n    // Use a simple timeout mechanism\n    const startTime = Date.now()\n    const result = regex.test(testStr)\n\n    if (Date.now() - startTime > REGEX_TIMEOUT_MS) {\n      throw new Error('Regex execution timeout - potential ReDoS pattern detected')\n    }\n\n    return result\n  } catch (error) {\n    // Log the error for debugging but don't expose to user\n    const message = error instanceof Error ? error.message : 'Unknown error'\n    if (process.env.NODE_ENV !== 'test') {\n      console.error('Regex matching failed:', message)\n    }\n    return false\n  }\n}\n\n/**\n * Check if value is empty (null, undefined, empty string, empty array, empty object)\n */\nfunction isEmpty(value: any): boolean {\n  if (value == null) return true\n\n  if (typeof value === 'string') return value.trim() === ''\n\n  if (Array.isArray(value)) return value.length === 0\n\n  if (typeof value === 'object') return Object.keys(value).length === 0\n\n  return false\n}\n\n/**\n * Check if string looks like a date (ISO format or common date formats)\n */\nfunction isDateString(value: any): boolean {\n  if (typeof value !== 'string') return false\n\n  // ISO date format: YYYY-MM-DD or YYYY-MM-DDTHH:mm:ss\n  const isoDateRegex = /^\\d{4}-\\d{2}-\\d{2}(T\\d{2}:\\d{2}:\\d{2})?/\n  if (isoDateRegex.test(value)) {\n    const date = new Date(value)\n    return !isNaN(date.getTime())\n  }\n\n  return false\n}\n"],
-  "mappings": "AACA,SAAS,gBAAgB,2BAA2B;AA0C7C,SAAS,mBACd,YACA,MACA,SACS;AACT,MAAI,iBAAiB,UAAU,GAAG;AAChC,WAAO,uBAAuB,YAAY,MAAM,OAAO;AAAA,EACzD;AAEA,SAAO,wBAAwB,YAAY,MAAM,OAAO;AAC1D;AAKA,SAAS,iBAAiB,YAA+D;AACvF,SAAO,WAAW,cAAc,MAAM,QAAQ,WAAW,KAAK;AAChE;AAKA,SAAS,wBACP,WACA,MACA,SACS;AAET,QAAM,YAAY,iBAAiB,UAAU,OAAO,IAAI;AAExD,MAAI;AACJ,MAAI,UAAU,YAAY;AAExB,iBAAa,iBAAiB,UAAU,YAAY,IAAI;AAAA,EAC1D,OAAO;AAEL,iBAAa,4BAA4B,UAAU,OAAO,OAAO;AAAA,EACnE;AAEA,QAAM,SAAS,cAAc,WAAW,UAAU,UAAU,UAAU;AAGtE,UAAQ,IAAI,iCAAiC;AAAA,IAC3C,OAAO,UAAU;AAAA,IACjB,UAAU,UAAU;AAAA,IACpB,eAAe;AAAA,IACf,aAAa;AAAA,IACb,iBAAiB,OAAO;AAAA,IACxB,QAAQ,SAAS,gBAAW;AAAA,EAC9B,CAAC;AAED,SAAO;AACT;AAKA,SAAS,uBACP,WACA,MACA,SACS;AACT,QAAM,EAAE,UAAU,MAAM,IAAI;AAE5B,MAAI,CAAC,SAAS,MAAM,WAAW,GAAG;AAChC,WAAO;AAAA,EACT;AAEA,UAAQ,IAAI,gCAAgC,QAAQ,SAAS,MAAM,MAAM,QAAQ;AAEjF,MAAI;AAEJ,UAAQ,UAAU;AAAA,IAChB,KAAK;AACH,eAAS,MAAM,MAAM,CAAC,SAAS,mBAAmB,MAAM,MAAM,OAAO,CAAC;AACtE;AAAA,IAEF,KAAK;AACH,eAAS,MAAM,KAAK,CAAC,SAAS,mBAAmB,MAAM,MAAM,OAAO,CAAC;AACrE;AAAA,IAEF,KAAK;AAEH,UAAI,MAAM,WAAW,GAAG;AACtB,iBAAS,CAAC,mBAAmB,MAAM,CAAC,GAAG,MAAM,OAAO;AAAA,MACtD,OAAO;AAEL,iBAAS,CAAC,MAAM,MAAM,CAAC,SAAS,mBAAmB,MAAM,MAAM,OAAO,CAAC;AAAA,MACzE;AACA;AAAA,IAEF;AACE,YAAM,IAAI,MAAM,6BAA6B,QAAQ,EAAE;AAAA,EAC3D;AAEA,UAAQ,IAAI,qBAAqB,QAAQ,YAAY,SAAS,gBAAW,aAAQ,EAAE;AAEnF,SAAO;AACT;AAKA,SAAS,iBAAiB,MAAc,MAAgB;AACtD,SAAO,eAAe,MAAM,IAAI;AAClC;AAKA,SAAS,4BAA4B,OAAY,SAAiC;AAEhF,MAAI,OAAO,UAAU,UAAU;AAC7B,WAAO;AAAA,EACT;AAGA,MAAI,MAAM,WAAW,IAAI,KAAK,MAAM,SAAS,IAAI,GAAG;AAClD,WAAO,oBAAoB,OAAO,OAAO;AAAA,EAC3C;AAGA,SAAO;AACT;AAKA,SAAS,cAAc,MAAW,UAA8B,OAAqB;AACnF,UAAQ,UAAU;AAAA,IAChB,KAAK;AAAA,IACL,KAAK;AACH,aAAO,OAAO,MAAM,KAAK;AAAA,IAE3B,KAAK;AACH,aAAO,CAAC,OAAO,MAAM,KAAK;AAAA,IAE5B,KAAK;AACH,aAAO,QAAQ,MAAM,KAAK,IAAI;AAAA,IAEhC,KAAK;AACH,aAAO,QAAQ,MAAM,KAAK,KAAK;AAAA,IAEjC,KAAK;AACH,aAAO,QAAQ,MAAM,KAAK,IAAI;AAAA,IAEhC,KAAK;AACH,aAAO,QAAQ,MAAM,KAAK,KAAK;AAAA,IAEjC,KAAK;AACH,aAAO,KAAK,MAAM,KAAK;AAAA,IAEzB,KAAK;AACH,aAAO,CAAC,KAAK,MAAM,KAAK;AAAA,IAE1B,KAAK;AACH,aAAO,SAAS,MAAM,KAAK;AAAA,IAE7B,KAAK;AACH,aAAO,CAAC,SAAS,MAAM,KAAK;AAAA,IAE9B,KAAK;AACH,aAAO,WAAW,MAAM,KAAK;AAAA,IAE/B,KAAK;AACH,aAAO,SAAS,MAAM,KAAK;AAAA,IAE7B,KAAK;AACH,aAAO,QAAQ,MAAM,KAAK;AAAA,IAE5B,KAAK;AACH,aAAO,QAAQ,IAAI;AAAA,IAErB,KAAK;AACH,aAAO,CAAC,QAAQ,IAAI;AAAA,IAEtB;AACE,YAAM,IAAI,MAAM,qBAAqB,QAAQ,EAAE;AAAA,EACnD;AACF;AAKA,SAAS,OAAO,MAAW,OAAqB;AAE9C,MAAI,QAAQ,QAAQ,SAAS,KAAM,QAAO;AAC1C,MAAI,QAAQ,QAAQ,SAAS,KAAM,QAAO;AAG1C,MAAI,OAAO,SAAS,YAAY,OAAO,UAAU,UAAU;AACzD,WAAO,OAAO,IAAI,MAAM,OAAO,KAAK;AAAA,EACtC;AAGA,SAAO,SAAS;AAClB;AAKA,SAAS,QAAQ,MAAW,OAAoB;AAE9C,MAAI,QAAQ,QAAQ,SAAS,KAAM,QAAO;AAC1C,MAAI,QAAQ,KAAM,QAAO;AACzB,MAAI,SAAS,KAAM,QAAO;AAG1B,MAAI,gBAAgB,QAAQ,iBAAiB,MAAM;AACjD,WAAO,KAAK,QAAQ,IAAI,MAAM,QAAQ;AAAA,EACxC;AAGA,MAAI,aAAa,IAAI,KAAK,aAAa,KAAK,GAAG;AAC7C,WAAO,IAAI,KAAK,IAAI,EAAE,QAAQ,IAAI,IAAI,KAAK,KAAK,EAAE,QAAQ;AAAA,EAC5D;AAGA,QAAM,UAAU,OAAO,IAAI;AAC3B,QAAM,WAAW,OAAO,KAAK;AAC7B,MAAI,CAAC,MAAM,OAAO,KAAK,CAAC,MAAM,QAAQ,GAAG;AACvC,WAAO,UAAU;AAAA,EACnB;AAGA,QAAM,UAAU,OAAO,IAAI;AAC3B,QAAM,WAAW,OAAO,KAAK;AAC7B,SAAO,QAAQ,cAAc,QAAQ;AACvC;AAKA,SAAS,KAAK,OAAY,OAAqB;AAC7C,MAAI,CAAC,MAAM,QAAQ,KAAK,GAAG;AACzB,WAAO;AAAA,EACT;AAEA,SAAO,MAAM,KAAK,CAAC,SAAS,OAAO,OAAO,IAAI,CAAC;AACjD;AAKA,SAAS,SAAS,WAAgB,OAAqB;AACrD,MAAI,aAAa,KAAM,QAAO;AAG9B,MAAI,MAAM,QAAQ,SAAS,GAAG;AAC5B,WAAO,UAAU,KAAK,CAAC,SAAS,OAAO,MAAM,KAAK,CAAC;AAAA,EACrD;AAGA,MAAI,OAAO,cAAc,UAAU;AACjC,WAAO,UAAU,SAAS,OAAO,KAAK,CAAC;AAAA,EACzC;AAEA,SAAO;AACT;AAKA,SAAS,WAAW,KAAU,QAAsB;AAClD,MAAI,OAAO,QAAQ,UAAU,KAAM,QAAO;AAE1C,SAAO,OAAO,GAAG,EAAE,WAAW,OAAO,MAAM,CAAC;AAC9C;AAKA,SAAS,SAAS,KAAU,QAAsB;AAChD,MAAI,OAAO,QAAQ,UAAU,KAAM,QAAO;AAE1C,SAAO,OAAO,GAAG,EAAE,SAAS,OAAO,MAAM,CAAC;AAC5C;AAKA,MAAM,mBAAmB;AACzB,MAAM,mBAAmB;AAKzB,SAAS,QAAQ,KAAU,SAAuB;AAChD,MAAI,OAAO,QAAQ,WAAW,KAAM,QAAO;AAE3C,MAAI;AACF,UAAM,aAAa,OAAO,OAAO;AAGjC,QAAI,WAAW,SAAS,kBAAkB;AACxC,aAAO;AAAA,IACT;AAIA,QAAI,qBAAqB,KAAK,UAAU,GAAG;AACzC,aAAO;AAAA,IACT;AAEA,UAAM,QAAQ,IAAI,OAAO,UAAU;AACnC,UAAM,UAAU,OAAO,GAAG;AAG1B,UAAM,YAAY,KAAK,IAAI;AAC3B,UAAM,SAAS,MAAM,KAAK,OAAO;AAEjC,QAAI,KAAK,IAAI,IAAI,YAAY,kBAAkB;AAC7C,YAAM,IAAI,MAAM,4DAA4D;AAAA,IAC9E;AAEA,WAAO;AAAA,EACT,SAAS,OAAO;AAEd,UAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU;AACzD,QAAI,QAAQ,IAAI,aAAa,QAAQ;AACnC,cAAQ,MAAM,0BAA0B,OAAO;AAAA,IACjD;AACA,WAAO;AAAA,EACT;AACF;AAKA,SAAS,QAAQ,OAAqB;AACpC,MAAI,SAAS,KAAM,QAAO;AAE1B,MAAI,OAAO,UAAU,SAAU,QAAO,MAAM,KAAK,MAAM;AAEvD,MAAI,MAAM,QAAQ,KAAK,EAAG,QAAO,MAAM,WAAW;AAElD,MAAI,OAAO,UAAU,SAAU,QAAO,OAAO,KAAK,KAAK,EAAE,WAAW;AAEpE,SAAO;AACT;AAKA,SAAS,aAAa,OAAqB;AACzC,MAAI,OAAO,UAAU,SAAU,QAAO;AAGtC,QAAM,eAAe;AACrB,MAAI,aAAa,KAAK,KAAK,GAAG;AAC5B,UAAM,OAAO,IAAI,KAAK,KAAK;AAC3B,WAAO,CAAC,MAAM,KAAK,QAAQ,CAAC;AAAA,EAC9B;AAEA,SAAO;AACT;",
+  "sourcesContent": ["import type { ComparisonOperator, LogicalOperator } from '../data/validators'\nimport { testLinearRegex } from '@open-mercato/shared/lib/regex/linear'\nimport { getNestedValue, resolveSpecialValue } from './value-resolver'\n\n/**\n * Type definitions for condition expressions\n */\nexport type ConditionExpression = SimpleCondition | GroupCondition\n\nexport interface SimpleCondition {\n  field: string\n  operator: ComparisonOperator\n  value: any\n  valueField?: string // For field-to-field comparison\n}\n\nexport interface GroupCondition {\n  operator: LogicalOperator // 'AND' | 'OR' | 'NOT'\n  rules: ConditionExpression[]\n}\n\nexport interface EvaluationContext {\n  user?: {\n    id?: string\n    email?: string\n    role?: string\n    [key: string]: any\n  }\n  tenant?: {\n    id?: string\n    [key: string]: any\n  }\n  organization?: {\n    id?: string\n    [key: string]: any\n  }\n  now?: Date\n  today?: Date\n  [key: string]: any\n}\n\n/**\n * Evaluate a condition expression (simple or grouped)\n */\nexport function evaluateExpression(\n  expression: ConditionExpression,\n  data: any,\n  context: EvaluationContext\n): boolean {\n  if (isGroupCondition(expression)) {\n    return evaluateGroupCondition(expression, data, context)\n  }\n\n  return evaluateSimpleCondition(expression, data, context)\n}\n\n/**\n * Check if expression is a group condition\n */\nfunction isGroupCondition(expression: ConditionExpression): expression is GroupCondition {\n  return 'rules' in expression && Array.isArray(expression.rules)\n}\n\n/**\n * Evaluate a simple condition\n */\nfunction evaluateSimpleCondition(\n  condition: SimpleCondition,\n  data: any,\n  context: EvaluationContext\n): boolean {\n  // Left side: always resolve from data (field path)\n  const leftValue = resolveFieldPath(condition.field, data)\n\n  let rightValue: any\n  if (condition.valueField) {\n    // Field-to-field comparison: resolve from data\n    rightValue = resolveFieldPath(condition.valueField, data)\n  } else {\n    // Static value or special value\n    rightValue = resolveStaticOrSpecialValue(condition.value, context)\n  }\n\n  const result = applyOperator(leftValue, condition.operator, rightValue)\n\n  // Detailed logging for debugging\n  console.log('[RULE EVAL] Simple condition:', {\n    field: condition.field,\n    operator: condition.operator,\n    expectedValue: rightValue,\n    actualValue: leftValue,\n    actualValueType: typeof leftValue,\n    result: result ? '\u2713 PASS' : '\u2717 FAIL',\n  })\n\n  return result\n}\n\n/**\n * Evaluate a group condition (AND, OR, NOT)\n */\nfunction evaluateGroupCondition(\n  condition: GroupCondition,\n  data: any,\n  context: EvaluationContext\n): boolean {\n  const { operator, rules } = condition\n\n  if (!rules || rules.length === 0) {\n    return true\n  }\n\n  console.log(`[RULE EVAL] Group condition: ${operator} with ${rules.length} rules`)\n\n  let result: boolean\n\n  switch (operator) {\n    case 'AND':\n      result = rules.every((rule) => evaluateExpression(rule, data, context))\n      break\n\n    case 'OR':\n      result = rules.some((rule) => evaluateExpression(rule, data, context))\n      break\n\n    case 'NOT':\n      // NOT operator - negate the first rule (or all rules combined with AND)\n      if (rules.length === 1) {\n        result = !evaluateExpression(rules[0], data, context)\n      } else {\n        // Multiple rules - combine with AND then negate\n        result = !rules.every((rule) => evaluateExpression(rule, data, context))\n      }\n      break\n\n    default:\n      throw new Error(`Unknown logical operator: ${operator}`)\n  }\n\n  console.log(`[RULE EVAL] Group ${operator} result: ${result ? '\u2713 PASS' : '\u2717 FAIL'}`)\n\n  return result\n}\n\n/**\n * Resolve a field path from data\n */\nfunction resolveFieldPath(path: string, data: any): any {\n  return getNestedValue(data, path)\n}\n\n/**\n * Resolve a static value or special template value\n */\nfunction resolveStaticOrSpecialValue(value: any, context: EvaluationContext): any {\n  // If not a string, return as-is (already a value)\n  if (typeof value !== 'string') {\n    return value\n  }\n\n  // Check for special values (template variables)\n  if (value.startsWith('{{') && value.endsWith('}}')) {\n    return resolveSpecialValue(value, context)\n  }\n\n  // Return static string value as-is\n  return value\n}\n\n/**\n * Apply a comparison operator\n */\nfunction applyOperator(left: any, operator: ComparisonOperator, right: any): boolean {\n  switch (operator) {\n    case '=':\n    case '==':\n      return equals(left, right)\n\n    case '!=':\n      return !equals(left, right)\n\n    case '>':\n      return compare(left, right) > 0\n\n    case '>=':\n      return compare(left, right) >= 0\n\n    case '<':\n      return compare(left, right) < 0\n\n    case '<=':\n      return compare(left, right) <= 0\n\n    case 'IN':\n      return isIn(left, right)\n\n    case 'NOT_IN':\n      return !isIn(left, right)\n\n    case 'CONTAINS':\n      return contains(left, right)\n\n    case 'NOT_CONTAINS':\n      return !contains(left, right)\n\n    case 'STARTS_WITH':\n      return startsWith(left, right)\n\n    case 'ENDS_WITH':\n      return endsWith(left, right)\n\n    case 'MATCHES':\n      return matches(left, right)\n\n    case 'IS_EMPTY':\n      return isEmpty(left)\n\n    case 'IS_NOT_EMPTY':\n      return !isEmpty(left)\n\n    default:\n      throw new Error(`Unknown operator: ${operator}`)\n  }\n}\n\n/**\n * Equality comparison (handles different types)\n */\nfunction equals(left: any, right: any): boolean {\n  // Handle null/undefined\n  if (left == null && right == null) return true\n  if (left == null || right == null) return false\n\n  // Type coercion for numbers\n  if (typeof left === 'number' || typeof right === 'number') {\n    return Number(left) === Number(right)\n  }\n\n  // String comparison (case-sensitive)\n  return left === right\n}\n\n/**\n * Comparison for ordering (>, <, >=, <=)\n */\nfunction compare(left: any, right: any): number {\n  // Handle null/undefined\n  if (left == null && right == null) return 0\n  if (left == null) return -1\n  if (right == null) return 1\n\n  // Date comparison\n  if (left instanceof Date && right instanceof Date) {\n    return left.getTime() - right.getTime()\n  }\n\n  // String date comparison\n  if (isDateString(left) && isDateString(right)) {\n    return new Date(left).getTime() - new Date(right).getTime()\n  }\n\n  // Numeric comparison\n  const leftNum = Number(left)\n  const rightNum = Number(right)\n  if (!isNaN(leftNum) && !isNaN(rightNum)) {\n    return leftNum - rightNum\n  }\n\n  // String comparison\n  const leftStr = String(left)\n  const rightStr = String(right)\n  return leftStr.localeCompare(rightStr)\n}\n\n/**\n * Check if value is in array\n */\nfunction isIn(value: any, array: any): boolean {\n  if (!Array.isArray(array)) {\n    return false\n  }\n\n  return array.some((item) => equals(value, item))\n}\n\n/**\n * Check if array/string contains value\n */\nfunction contains(container: any, value: any): boolean {\n  if (container == null) return false\n\n  // Array contains\n  if (Array.isArray(container)) {\n    return container.some((item) => equals(item, value))\n  }\n\n  // String contains\n  if (typeof container === 'string') {\n    return container.includes(String(value))\n  }\n\n  return false\n}\n\n/**\n * Check if string starts with value\n */\nfunction startsWith(str: any, prefix: any): boolean {\n  if (str == null || prefix == null) return false\n\n  return String(str).startsWith(String(prefix))\n}\n\n/**\n * Check if string ends with value\n */\nfunction endsWith(str: any, suffix: any): boolean {\n  if (str == null || suffix == null) return false\n\n  return String(str).endsWith(String(suffix))\n}\n\nconst MAX_REGEX_LENGTH = 200\nconst MAX_REGEX_INPUT_LENGTH = 10_000\n\n/**\n * Check if string matches regex pattern (with ReDoS protection)\n */\nfunction matches(str: any, pattern: any): boolean {\n  if (str == null || pattern == null) return false\n\n  try {\n    const patternStr = String(pattern)\n\n    // Prevent overly long patterns\n    if (patternStr.length > MAX_REGEX_LENGTH) {\n      return false\n    }\n\n    // Check for dangerous patterns that can cause exponential backtracking\n    // Patterns like (a+)+, (a*)*, (a+)*, etc.\n    if (/(\\(.*[+*]\\).*[+*])/.test(patternStr)) {\n      return false\n    }\n\n    const testStr = String(str)\n    if (testStr.length > MAX_REGEX_INPUT_LENGTH) {\n      return false\n    }\n\n    const result = testLinearRegex(patternStr, testStr, {\n      maxPatternLength: MAX_REGEX_LENGTH,\n      maxInputLength: MAX_REGEX_INPUT_LENGTH,\n    })\n    return result.ok ? result.matched : false\n  } catch (error) {\n    // Log the error for debugging but don't expose to user\n    const message = error instanceof Error ? error.message : 'Unknown error'\n    if (process.env.NODE_ENV !== 'test') {\n      console.error('Regex matching failed:', message)\n    }\n    return false\n  }\n}\n\n/**\n * Check if value is empty (null, undefined, empty string, empty array, empty object)\n */\nfunction isEmpty(value: any): boolean {\n  if (value == null) return true\n\n  if (typeof value === 'string') return value.trim() === ''\n\n  if (Array.isArray(value)) return value.length === 0\n\n  if (typeof value === 'object') return Object.keys(value).length === 0\n\n  return false\n}\n\n/**\n * Check if string looks like a date (ISO format or common date formats)\n */\nfunction isDateString(value: any): boolean {\n  if (typeof value !== 'string') return false\n\n  // ISO date format: YYYY-MM-DD or YYYY-MM-DDTHH:mm:ss\n  const isoDateRegex = /^\\d{4}-\\d{2}-\\d{2}(T\\d{2}:\\d{2}:\\d{2})?/\n  if (isoDateRegex.test(value)) {\n    const date = new Date(value)\n    return !isNaN(date.getTime())\n  }\n\n  return false\n}\n"],
+  "mappings": "AACA,SAAS,uBAAuB;AAChC,SAAS,gBAAgB,2BAA2B;AA0C7C,SAAS,mBACd,YACA,MACA,SACS;AACT,MAAI,iBAAiB,UAAU,GAAG;AAChC,WAAO,uBAAuB,YAAY,MAAM,OAAO;AAAA,EACzD;AAEA,SAAO,wBAAwB,YAAY,MAAM,OAAO;AAC1D;AAKA,SAAS,iBAAiB,YAA+D;AACvF,SAAO,WAAW,cAAc,MAAM,QAAQ,WAAW,KAAK;AAChE;AAKA,SAAS,wBACP,WACA,MACA,SACS;AAET,QAAM,YAAY,iBAAiB,UAAU,OAAO,IAAI;AAExD,MAAI;AACJ,MAAI,UAAU,YAAY;AAExB,iBAAa,iBAAiB,UAAU,YAAY,IAAI;AAAA,EAC1D,OAAO;AAEL,iBAAa,4BAA4B,UAAU,OAAO,OAAO;AAAA,EACnE;AAEA,QAAM,SAAS,cAAc,WAAW,UAAU,UAAU,UAAU;AAGtE,UAAQ,IAAI,iCAAiC;AAAA,IAC3C,OAAO,UAAU;AAAA,IACjB,UAAU,UAAU;AAAA,IACpB,eAAe;AAAA,IACf,aAAa;AAAA,IACb,iBAAiB,OAAO;AAAA,IACxB,QAAQ,SAAS,gBAAW;AAAA,EAC9B,CAAC;AAED,SAAO;AACT;AAKA,SAAS,uBACP,WACA,MACA,SACS;AACT,QAAM,EAAE,UAAU,MAAM,IAAI;AAE5B,MAAI,CAAC,SAAS,MAAM,WAAW,GAAG;AAChC,WAAO;AAAA,EACT;AAEA,UAAQ,IAAI,gCAAgC,QAAQ,SAAS,MAAM,MAAM,QAAQ;AAEjF,MAAI;AAEJ,UAAQ,UAAU;AAAA,IAChB,KAAK;AACH,eAAS,MAAM,MAAM,CAAC,SAAS,mBAAmB,MAAM,MAAM,OAAO,CAAC;AACtE;AAAA,IAEF,KAAK;AACH,eAAS,MAAM,KAAK,CAAC,SAAS,mBAAmB,MAAM,MAAM,OAAO,CAAC;AACrE;AAAA,IAEF,KAAK;AAEH,UAAI,MAAM,WAAW,GAAG;AACtB,iBAAS,CAAC,mBAAmB,MAAM,CAAC,GAAG,MAAM,OAAO;AAAA,MACtD,OAAO;AAEL,iBAAS,CAAC,MAAM,MAAM,CAAC,SAAS,mBAAmB,MAAM,MAAM,OAAO,CAAC;AAAA,MACzE;AACA;AAAA,IAEF;AACE,YAAM,IAAI,MAAM,6BAA6B,QAAQ,EAAE;AAAA,EAC3D;AAEA,UAAQ,IAAI,qBAAqB,QAAQ,YAAY,SAAS,gBAAW,aAAQ,EAAE;AAEnF,SAAO;AACT;AAKA,SAAS,iBAAiB,MAAc,MAAgB;AACtD,SAAO,eAAe,MAAM,IAAI;AAClC;AAKA,SAAS,4BAA4B,OAAY,SAAiC;AAEhF,MAAI,OAAO,UAAU,UAAU;AAC7B,WAAO;AAAA,EACT;AAGA,MAAI,MAAM,WAAW,IAAI,KAAK,MAAM,SAAS,IAAI,GAAG;AAClD,WAAO,oBAAoB,OAAO,OAAO;AAAA,EAC3C;AAGA,SAAO;AACT;AAKA,SAAS,cAAc,MAAW,UAA8B,OAAqB;AACnF,UAAQ,UAAU;AAAA,IAChB,KAAK;AAAA,IACL,KAAK;AACH,aAAO,OAAO,MAAM,KAAK;AAAA,IAE3B,KAAK;AACH,aAAO,CAAC,OAAO,MAAM,KAAK;AAAA,IAE5B,KAAK;AACH,aAAO,QAAQ,MAAM,KAAK,IAAI;AAAA,IAEhC,KAAK;AACH,aAAO,QAAQ,MAAM,KAAK,KAAK;AAAA,IAEjC,KAAK;AACH,aAAO,QAAQ,MAAM,KAAK,IAAI;AAAA,IAEhC,KAAK;AACH,aAAO,QAAQ,MAAM,KAAK,KAAK;AAAA,IAEjC,KAAK;AACH,aAAO,KAAK,MAAM,KAAK;AAAA,IAEzB,KAAK;AACH,aAAO,CAAC,KAAK,MAAM,KAAK;AAAA,IAE1B,KAAK;AACH,aAAO,SAAS,MAAM,KAAK;AAAA,IAE7B,KAAK;AACH,aAAO,CAAC,SAAS,MAAM,KAAK;AAAA,IAE9B,KAAK;AACH,aAAO,WAAW,MAAM,KAAK;AAAA,IAE/B,KAAK;AACH,aAAO,SAAS,MAAM,KAAK;AAAA,IAE7B,KAAK;AACH,aAAO,QAAQ,MAAM,KAAK;AAAA,IAE5B,KAAK;AACH,aAAO,QAAQ,IAAI;AAAA,IAErB,KAAK;AACH,aAAO,CAAC,QAAQ,IAAI;AAAA,IAEtB;AACE,YAAM,IAAI,MAAM,qBAAqB,QAAQ,EAAE;AAAA,EACnD;AACF;AAKA,SAAS,OAAO,MAAW,OAAqB;AAE9C,MAAI,QAAQ,QAAQ,SAAS,KAAM,QAAO;AAC1C,MAAI,QAAQ,QAAQ,SAAS,KAAM,QAAO;AAG1C,MAAI,OAAO,SAAS,YAAY,OAAO,UAAU,UAAU;AACzD,WAAO,OAAO,IAAI,MAAM,OAAO,KAAK;AAAA,EACtC;AAGA,SAAO,SAAS;AAClB;AAKA,SAAS,QAAQ,MAAW,OAAoB;AAE9C,MAAI,QAAQ,QAAQ,SAAS,KAAM,QAAO;AAC1C,MAAI,QAAQ,KAAM,QAAO;AACzB,MAAI,SAAS,KAAM,QAAO;AAG1B,MAAI,gBAAgB,QAAQ,iBAAiB,MAAM;AACjD,WAAO,KAAK,QAAQ,IAAI,MAAM,QAAQ;AAAA,EACxC;AAGA,MAAI,aAAa,IAAI,KAAK,aAAa,KAAK,GAAG;AAC7C,WAAO,IAAI,KAAK,IAAI,EAAE,QAAQ,IAAI,IAAI,KAAK,KAAK,EAAE,QAAQ;AAAA,EAC5D;AAGA,QAAM,UAAU,OAAO,IAAI;AAC3B,QAAM,WAAW,OAAO,KAAK;AAC7B,MAAI,CAAC,MAAM,OAAO,KAAK,CAAC,MAAM,QAAQ,GAAG;AACvC,WAAO,UAAU;AAAA,EACnB;AAGA,QAAM,UAAU,OAAO,IAAI;AAC3B,QAAM,WAAW,OAAO,KAAK;AAC7B,SAAO,QAAQ,cAAc,QAAQ;AACvC;AAKA,SAAS,KAAK,OAAY,OAAqB;AAC7C,MAAI,CAAC,MAAM,QAAQ,KAAK,GAAG;AACzB,WAAO;AAAA,EACT;AAEA,SAAO,MAAM,KAAK,CAAC,SAAS,OAAO,OAAO,IAAI,CAAC;AACjD;AAKA,SAAS,SAAS,WAAgB,OAAqB;AACrD,MAAI,aAAa,KAAM,QAAO;AAG9B,MAAI,MAAM,QAAQ,SAAS,GAAG;AAC5B,WAAO,UAAU,KAAK,CAAC,SAAS,OAAO,MAAM,KAAK,CAAC;AAAA,EACrD;AAGA,MAAI,OAAO,cAAc,UAAU;AACjC,WAAO,UAAU,SAAS,OAAO,KAAK,CAAC;AAAA,EACzC;AAEA,SAAO;AACT;AAKA,SAAS,WAAW,KAAU,QAAsB;AAClD,MAAI,OAAO,QAAQ,UAAU,KAAM,QAAO;AAE1C,SAAO,OAAO,GAAG,EAAE,WAAW,OAAO,MAAM,CAAC;AAC9C;AAKA,SAAS,SAAS,KAAU,QAAsB;AAChD,MAAI,OAAO,QAAQ,UAAU,KAAM,QAAO;AAE1C,SAAO,OAAO,GAAG,EAAE,SAAS,OAAO,MAAM,CAAC;AAC5C;AAEA,MAAM,mBAAmB;AACzB,MAAM,yBAAyB;AAK/B,SAAS,QAAQ,KAAU,SAAuB;AAChD,MAAI,OAAO,QAAQ,WAAW,KAAM,QAAO;AAE3C,MAAI;AACF,UAAM,aAAa,OAAO,OAAO;AAGjC,QAAI,WAAW,SAAS,kBAAkB;AACxC,aAAO;AAAA,IACT;AAIA,QAAI,qBAAqB,KAAK,UAAU,GAAG;AACzC,aAAO;AAAA,IACT;AAEA,UAAM,UAAU,OAAO,GAAG;AAC1B,QAAI,QAAQ,SAAS,wBAAwB;AAC3C,aAAO;AAAA,IACT;AAEA,UAAM,SAAS,gBAAgB,YAAY,SAAS;AAAA,MAClD,kBAAkB;AAAA,MAClB,gBAAgB;AAAA,IAClB,CAAC;AACD,WAAO,OAAO,KAAK,OAAO,UAAU;AAAA,EACtC,SAAS,OAAO;AAEd,UAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU;AACzD,QAAI,QAAQ,IAAI,aAAa,QAAQ;AACnC,cAAQ,MAAM,0BAA0B,OAAO;AAAA,IACjD;AACA,WAAO;AAAA,EACT;AACF;AAKA,SAAS,QAAQ,OAAqB;AACpC,MAAI,SAAS,KAAM,QAAO;AAE1B,MAAI,OAAO,UAAU,SAAU,QAAO,MAAM,KAAK,MAAM;AAEvD,MAAI,MAAM,QAAQ,KAAK,EAAG,QAAO,MAAM,WAAW;AAElD,MAAI,OAAO,UAAU,SAAU,QAAO,OAAO,KAAK,KAAK,EAAE,WAAW;AAEpE,SAAO;AACT;AAKA,SAAS,aAAa,OAAqB;AACzC,MAAI,OAAO,UAAU,SAAU,QAAO;AAGtC,QAAM,eAAe;AACrB,MAAI,aAAa,KAAK,KAAK,GAAG;AAC5B,UAAM,OAAO,IAAI,KAAK,KAAK;AAC3B,WAAO,CAAC,MAAM,KAAK,QAAQ,CAAC;AAAA,EAC9B;AAEA,SAAO;AACT;",
   "names": []
 }

package/dist/modules/translations/components/TranslationManager.js

@@ -44,6 +44,7 @@ function TranslationManager({
   const [editedTranslations, setEditedTranslations] = React.useState({});
   const editedTranslationsRef = React.useRef({});
   const [hasUserEdited, setHasUserEdited] = React.useState(false);
+  const hasUserEditedRef = React.useRef(false);
   const entityType = isEmbedded ? propEntityType ?? "" : selectedEntityType;
   const recordId = isEmbedded ? propRecordId ?? "" : selectedRecordId;
   const { data: locales = [...defaultLocales] } = useTranslationLocales();
@@ -146,10 +147,10 @@ function TranslationManager({
   const lastTranslationSignatureRef = React.useRef(null);
   React.useEffect(() => {
     const sig = translationSignature;
-    if (sig === lastTranslationSignatureRef.current && hasUserEdited) return;
+    if (sig === lastTranslationSignatureRef.current && hasUserEditedRef.current) return;
     lastTranslationSignatureRef.current = sig;
     if (!translationData?.translations) {
-      if (!hasUserEdited) {
+      if (!hasUserEditedRef.current) {
         editedTranslationsRef.current = {};
         setEditedTranslations({});
       }
@@ -163,11 +164,11 @@ function TranslationManager({
         parsed[locale][key] = typeof val === "string" ? val : "";
       }
     }
-    if (!hasUserEdited) {
+    if (!hasUserEditedRef.current) {
       editedTranslationsRef.current = parsed;
       setEditedTranslations(parsed);
     }
-  }, [translationSignature, translationData, hasUserEdited]);
+  }, [translationSignature, translationData]);
   const mutation = useMutation({
     mutationFn: async () => {
       if (!entityType || !recordId) {
@@ -204,6 +205,7 @@ function TranslationManager({
     },
     onSuccess: () => {
       flash(t("translations.manager.flash.saved", "Translations saved"), "success");
+      hasUserEditedRef.current = false;
       setHasUserEdited(false);
       void refetchTranslation();
     },
@@ -213,6 +215,7 @@ function TranslationManager({
     }
   });
   const updateFieldValue = (locale, fieldKey, value) => {
+    hasUserEditedRef.current = true;
     setHasUserEdited(true);
     const next = {
       ...editedTranslationsRef.current,
@@ -235,6 +238,7 @@ function TranslationManager({
           value: selectedRecordId,
           onChange: (next) => {
             setSelectedRecordId(next);
+            hasUserEditedRef.current = false;
             setHasUserEdited(false);
           },
           placeholder: t("translations.manager.searchRecords", "Search records..."),
@@ -370,6 +374,7 @@ function TranslationManager({
             onChange: (next) => {
               setSelectedEntityType(next);
               setSelectedRecordId("");
+              hasUserEditedRef.current = false;
               setHasUserEdited(false);
             },
             placeholder: t("translations.manager.placeholder", "Select an entity"),

package/dist/modules/translations/components/TranslationManager.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/translations/components/TranslationManager.tsx"],
-  "sourcesContent": ["\"use client\"\n\nimport * as React from 'react'\nimport { useQuery, useMutation, useQueryClient } from '@tanstack/react-query'\nimport { Button } from '@open-mercato/ui/primitives/button'\nimport { Input } from '@open-mercato/ui/primitives/input'\nimport { ComboboxInput } from '@open-mercato/ui/backend/inputs'\nimport { LoadingMessage, ErrorMessage } from '@open-mercato/ui/backend/detail'\nimport { flash } from '@open-mercato/ui/backend/FlashMessages'\nimport { apiCall, readApiResultOrThrow } from '@open-mercato/ui/backend/utils/apiCall'\nimport { useCustomFieldDefs } from '@open-mercato/ui/backend/utils/customFieldDefs'\nimport { Save, Plus, X } from 'lucide-react'\nimport { useOrganizationScopeVersion } from '@open-mercato/shared/lib/frontend/useOrganizationScope'\nimport { useT } from '@open-mercato/shared/lib/i18n/context'\nimport { locales as defaultLocales } from '@open-mercato/shared/lib/i18n/config'\nimport { ISO_639_1, isValidIso639, getIso639Label } from '@open-mercato/shared/lib/i18n/iso639'\nimport { formatEntityLabel, buildEntityListUrl, getRecordLabel, resolveBaseValue } from '../lib/helpers'\nimport { resolveFieldList } from '../lib/resolve-field-list'\nimport type { ResolvedField } from '../lib/resolve-field-list'\n\ntype TranslationManagerProps = {\n  entityType?: string\n  recordId?: string\n  baseValues?: Record<string, unknown>\n  translatableFields?: string[]\n  mode?: 'standalone' | 'embedded'\n  compact?: boolean\n}\n\ntype EntityOption = { entityId: string; label?: string; source?: string }\n\ntype TranslationsResponse = {\n  entityType: string\n  entityId: string\n  translations: Record<string, Record<string, unknown>>\n  createdAt?: string\n  updatedAt?: string\n}\n\nfunction useTranslationLocales() {\n  return useQuery<string[]>({\n    queryKey: ['translation-locales'],\n    queryFn: async () => {\n      const res = await apiCall<{ locales: string[] }>('/api/translations/locales')\n      if (!res.ok) return [...defaultLocales]\n      return Array.isArray(res.result?.locales) && res.result.locales.length > 0\n        ? res.result.locales\n        : [...defaultLocales]\n    },\n    staleTime: 60_000,\n  })\n}\n\nexport function TranslationManager({\n  entityType: propEntityType,\n  recordId: propRecordId,\n  baseValues: propBaseValues,\n  translatableFields: propTranslatableFields,\n  mode = 'standalone',\n  compact = false,\n}: TranslationManagerProps) {\n  const t = useT()\n  const scopeVersion = useOrganizationScopeVersion()\n  const isEmbedded = mode === 'embedded'\n\n  const [selectedEntityType, setSelectedEntityType] = React.useState(propEntityType ?? '')\n  const [selectedRecordId, setSelectedRecordId] = React.useState(propRecordId ?? '')\n  const [activeLocale, setActiveLocale] = React.useState('')\n  const [editedTranslations, setEditedTranslations] = React.useState<Record<string, Record<string, string>>>({})\n  const editedTranslationsRef = React.useRef<Record<string, Record<string, string>>>({})\n  const [hasUserEdited, setHasUserEdited] = React.useState(false)\n\n  const entityType = isEmbedded ? (propEntityType ?? '') : selectedEntityType\n  const recordId = isEmbedded ? (propRecordId ?? '') : selectedRecordId\n\n  const { data: locales = [...defaultLocales] } = useTranslationLocales()\n\n  React.useEffect(() => {\n    if (locales.length > 0 && (!activeLocale || !locales.includes(activeLocale))) {\n      setActiveLocale(locales[0])\n    }\n  }, [locales, activeLocale])\n\n  React.useEffect(() => {\n    if (isEmbedded && propEntityType) setSelectedEntityType(propEntityType)\n  }, [isEmbedded, propEntityType])\n\n  React.useEffect(() => {\n    if (isEmbedded && propRecordId) setSelectedRecordId(propRecordId)\n  }, [isEmbedded, propRecordId])\n\n  const { data: entities, isLoading: loadingEntities, error: entitiesError } = useQuery<{ items: EntityOption[] }>({\n    queryKey: ['entities-list', scopeVersion],\n    enabled: !isEmbedded,\n    queryFn: async () =>\n      readApiResultOrThrow('/api/entities/entities', undefined, {\n        errorMessage: t('translations.manager.errors.loadEntities', 'Failed to load entities'),\n      }),\n  })\n\n  const entitySuggestions = React.useMemo(\n    () =>\n      (entities?.items || []).map((item) => ({\n        value: item.entityId,\n        label: formatEntityLabel(item.entityId, item.label),\n        description: item.entityId,\n      })),\n    [entities],\n  )\n\n  const resolveEntityLabel = React.useCallback(\n    (value: string) => {\n      const match = entities?.items?.find((e) => e.entityId === value)\n      return match ? formatEntityLabel(match.entityId, match.label) : formatEntityLabel(value)\n    },\n    [entities],\n  )\n\n  const listUrl = React.useMemo(() => entityType ? buildEntityListUrl(entityType) : null, [entityType])\n\n  const loadRecordSuggestions = React.useCallback(\n    async (query?: string) => {\n      if (!entityType || !listUrl) return []\n      const url = `${listUrl}?pageSize=20${query ? `&search=${encodeURIComponent(query)}` : ''}`\n      const res = await apiCall<{ items: Array<Record<string, unknown>> }>(url)\n      if (!res.ok) return []\n      const items = res.result?.items ?? []\n      return items.map((item) => ({\n        value: String(item.id ?? ''),\n        label: getRecordLabel(item),\n      }))\n    },\n    [entityType, listUrl],\n  )\n\n  const { data: recordData } = useQuery<Record<string, unknown> | null>({\n    queryKey: ['translation-record-data', entityType, recordId, listUrl, scopeVersion],\n    enabled: !isEmbedded && !!entityType && !!recordId && !!listUrl,\n    queryFn: async () => {\n      const res = await apiCall<{ items: Array<Record<string, unknown>> }>(\n        // Some APIs filter by `id` (catalog), others by `ids` (resources) \u2014 send both so the one recognized by the target route's buildFilters is applied\n        `${listUrl}?id=${encodeURIComponent(recordId)}&ids=${encodeURIComponent(recordId)}&pageSize=1`,\n      )\n      if (!res.ok) return null\n      const items = res.result?.items\n      return Array.isArray(items) && items.length > 0 ? items[0] : null\n    },\n  })\n\n  const baseValues = isEmbedded ? (propBaseValues ?? {}) : (recordData ?? {})\n\n  const resolveRecordLabel = React.useCallback(\n    (value: string) => {\n      if (recordData) return getRecordLabel(recordData)\n      return value\n    },\n    [recordData],\n  )\n\n  const { data: fieldDefs = [], isLoading: loadingFieldDefs } = useCustomFieldDefs(entityType ? [entityType] : [], {\n    enabled: !!entityType,\n  })\n\n  const fieldList = React.useMemo(\n    () => resolveFieldList(entityType, propTranslatableFields, fieldDefs as Array<{ key: string; kind: string; label?: string }>),\n    [entityType, propTranslatableFields, fieldDefs],\n  )\n\n  const {\n    data: translationData,\n    isLoading: loadingTranslation,\n    isError: translationError,\n    refetch: refetchTranslation,\n  } = useQuery<TranslationsResponse | null>({\n    queryKey: ['entity-translation', entityType, recordId, scopeVersion],\n    enabled: !!entityType && !!recordId,\n    queryFn: async () => {\n      const res = await apiCall<TranslationsResponse>(\n        `/api/translations/${encodeURIComponent(entityType)}/${encodeURIComponent(recordId)}`,\n      )\n      if (!res.ok) {\n        if (res.response?.status === 404) return null\n        return null\n      }\n      return res.result ?? null\n    },\n  })\n\n  const translationSignature = React.useMemo(() => JSON.stringify(translationData ?? null), [translationData])\n  const lastTranslationSignatureRef = React.useRef<string | null>(null)\n\n  React.useEffect(() => {\n    const sig = translationSignature\n    if (sig === lastTranslationSignatureRef.current && hasUserEdited) return\n    lastTranslationSignatureRef.current = sig\n\n    if (!translationData?.translations) {\n      if (!hasUserEdited) {\n        editedTranslationsRef.current = {}\n        setEditedTranslations({})\n      }\n      return\n    }\n\n    const parsed: Record<string, Record<string, string>> = {}\n    for (const [locale, fields] of Object.entries(translationData.translations)) {\n      if (!fields || typeof fields !== 'object') continue\n      parsed[locale] = {}\n      for (const [key, val] of Object.entries(fields)) {\n        parsed[locale][key] = typeof val === 'string' ? val : ''\n      }\n    }\n    if (!hasUserEdited) {\n      editedTranslationsRef.current = parsed\n      setEditedTranslations(parsed)\n    }\n  }, [translationSignature, translationData, hasUserEdited])\n\n  const mutation = useMutation({\n    mutationFn: async () => {\n      if (!entityType || !recordId) {\n        throw new Error(t('translations.manager.errors.selectRecord', 'Select an entity and record before saving'))\n      }\n      const body: Record<string, Record<string, string | null>> = {}\n      for (const [locale, fields] of Object.entries(editedTranslationsRef.current)) {\n        const localeFields: Record<string, string | null> = {}\n        let hasValues = false\n        for (const [key, val] of Object.entries(fields)) {\n          if (val && val.trim().length > 0) {\n            localeFields[key] = val.trim()\n            hasValues = true\n          }\n        }\n        if (hasValues) body[locale] = localeFields\n      }\n      if (Object.keys(body).length === 0) {\n        console.warn('[translations] Save skipped: payload is empty \u2014 no locale contains any non-empty field')\n        throw new Error(t('translations.manager.errors.nothingToSave', 'Nothing to save \u2014 enter a translation first'))\n      }\n      const res = await apiCall(\n        `/api/translations/${encodeURIComponent(entityType)}/${encodeURIComponent(recordId)}`,\n        {\n          method: 'PUT',\n          headers: { 'content-type': 'application/json' },\n          body: JSON.stringify(body),\n        },\n      )\n      if (!res.ok) {\n        throw new Error(t('translations.manager.errors.save', 'Failed to save translations'))\n      }\n      return true\n    },\n    onSuccess: () => {\n      flash(t('translations.manager.flash.saved', 'Translations saved'), 'success')\n      setHasUserEdited(false)\n      void refetchTranslation()\n    },\n    onError: (err: unknown) => {\n      const message = err instanceof Error ? err.message : t('translations.manager.errors.save', 'Failed to save translations')\n      flash(message, 'error')\n    },\n  })\n\n  const updateFieldValue = (locale: string, fieldKey: string, value: string) => {\n    setHasUserEdited(true)\n    const next = {\n      ...editedTranslationsRef.current,\n      [locale]: {\n        ...editedTranslationsRef.current[locale],\n        [fieldKey]: value,\n      },\n    }\n    editedTranslationsRef.current = next\n    setEditedTranslations(next)\n  }\n\n  const getBaseValue = (fieldKey: string): string => resolveBaseValue(baseValues, fieldKey)\n\n  const renderRecordPicker = () => {\n    if (isEmbedded) return null\n\n    return (\n      <div className=\"space-y-2\">\n        <label className=\"text-xs text-muted-foreground\">\n          {t('translations.manager.selectRecord', 'Select record')}\n        </label>\n        <ComboboxInput\n          value={selectedRecordId}\n          onChange={(next) => {\n            setSelectedRecordId(next)\n            setHasUserEdited(false)\n          }}\n          placeholder={t('translations.manager.searchRecords', 'Search records...')}\n          loadSuggestions={loadRecordSuggestions}\n          resolveLabel={resolveRecordLabel}\n          allowCustomValues\n          disabled={!entityType}\n        />\n      </div>\n    )\n  }\n\n  const renderLocaleTabs = () => (\n    <div className=\"flex gap-1 border-b\">\n      {locales.map((locale) => {\n        const isActive = activeLocale === locale\n        return (\n          <button\n            key={locale}\n            type=\"button\"\n            data-state={isActive ? 'active' : 'inactive'}\n            data-locale={locale}\n            className={`px-3 py-1.5 text-sm font-medium transition-colors ${\n              isActive\n                ? 'border-b-2 border-primary text-primary'\n                : 'text-muted-foreground hover:text-foreground'\n            }`}\n            onClick={() => setActiveLocale(locale)}\n          >\n            {locale.toUpperCase()}\n          </button>\n        )\n      })}\n    </div>\n  )\n\n  const renderFieldTable = () => {\n    if (!entityType || !recordId) {\n      return (\n        <div className=\"rounded border bg-background/80 p-4 text-sm text-muted-foreground\">\n          {t('translations.manager.selectFirst', 'Select an entity and record to manage translations.')}\n        </div>\n      )\n    }\n    if (loadingTranslation || loadingFieldDefs) {\n      return (\n        <LoadingMessage\n          label={t('translations.manager.loadingTranslations', 'Loading translations...')}\n          className=\"border-0 bg-transparent p-4\"\n        />\n      )\n    }\n    if (translationError) {\n      return (\n        <ErrorMessage\n          label={t('translations.manager.errors.loadTranslation', 'Failed to load translations')}\n          action={(\n            <Button variant=\"outline\" size=\"sm\" onClick={() => void refetchTranslation()}>\n              {t('translations.manager.actions.retry', 'Retry')}\n            </Button>\n          )}\n        />\n      )\n    }\n    if (!fieldList.length) {\n      return (\n        <div className=\"rounded border bg-background/80 p-4 text-sm text-muted-foreground\">\n          {t('translations.manager.noFields', 'No translatable fields found for this entity type.')}\n        </div>\n      )\n    }\n\n    const localeTranslations = editedTranslations[activeLocale] ?? {}\n\n    return (\n      <div className=\"overflow-x-auto\">\n        <table className=\"w-full min-w-[480px] text-sm\">\n          <thead>\n            <tr className=\"text-xs uppercase tracking-wide text-muted-foreground\">\n              <th className=\"px-3 py-2 text-left w-[140px]\">\n                {t('translations.manager.fields.field', 'Field')}\n              </th>\n              {!compact && (\n                <th className=\"px-3 py-2 text-left\">\n                  {t('translations.manager.fields.baseValue', 'Base value')}\n                </th>\n              )}\n              <th className=\"px-3 py-2 text-left\">\n                {t('translations.manager.fields.translation', 'Translation')} ({activeLocale.toUpperCase()})\n              </th>\n            </tr>\n          </thead>\n          <tbody>\n            {fieldList.map((field) => {\n              const baseVal = getBaseValue(field.key)\n              const translatedVal = localeTranslations[field.key] ?? ''\n\n              return (\n                <tr key={field.key} className=\"border-t\">\n                  <td className=\"px-3 py-2 align-top text-xs font-medium text-muted-foreground\">\n                    {field.label}\n                  </td>\n                  {!compact && (\n                    <td className=\"px-3 py-2 align-top text-xs text-muted-foreground max-w-[200px]\">\n                      {baseVal ? (\n                        <span className=\"line-clamp-3\">{baseVal}</span>\n                      ) : (\n                        <span className=\"text-muted-foreground/50\">-</span>\n                      )}\n                    </td>\n                  )}\n                  <td className=\"px-3 py-2 align-top\">\n                    {field.multiline ? (\n                      <textarea\n                        className=\"flex w-full rounded-md border border-input bg-background px-3 py-2 text-sm shadow-sm transition-colors focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-ring focus-visible:ring-offset-2 disabled:cursor-not-allowed disabled:opacity-50\"\n                        rows={3}\n                        value={translatedVal}\n                        onChange={(e) => updateFieldValue(activeLocale, field.key, e.target.value)}\n                        placeholder={baseVal || field.label}\n                      />\n                    ) : (\n                      <Input\n                        value={translatedVal}\n                        onChange={(e) => updateFieldValue(activeLocale, field.key, e.target.value)}\n                        placeholder={baseVal || field.label}\n                      />\n                    )}\n                  </td>\n                </tr>\n              )\n            })}\n          </tbody>\n        </table>\n      </div>\n    )\n  }\n\n  React.useEffect(() => {\n    const handler = (e: KeyboardEvent) => {\n      if ((e.metaKey || e.ctrlKey) && e.key === 'Enter') {\n        e.preventDefault()\n        if (entityType && recordId && !mutation.isPending) mutation.mutate()\n      }\n    }\n    document.addEventListener('keydown', handler)\n    return () => document.removeEventListener('keydown', handler)\n  }, [entityType, recordId, mutation])\n\n  if (compact) {\n    return (\n      <div className=\"space-y-3\">\n        {renderLocaleTabs()}\n        {renderFieldTable()}\n        <div className=\"flex justify-end\">\n          <Button\n            type=\"button\"\n            size=\"sm\"\n            onClick={() => mutation.mutate()}\n            disabled={mutation.isPending || !entityType || !recordId}\n            data-testid=\"translations-save\"\n          >\n            <Save className=\"mr-2 h-3 w-3\" />\n            {mutation.isPending\n              ? t('translations.manager.actions.saving', 'Saving...')\n              : t('translations.manager.actions.save', 'Save translations')}\n          </Button>\n        </div>\n      </div>\n    )\n  }\n\n  return (\n    <div className=\"space-y-6\">\n      <div className=\"flex flex-col gap-3 rounded-lg border bg-card p-4 shadow-sm\">\n        <div className=\"space-y-2\">\n          <h2 className=\"text-xl font-semibold\">{t('translations.manager.title', 'Translations')}</h2>\n          <p className=\"text-sm text-muted-foreground\">\n            {t('translations.manager.description', 'Manage translations for entity records across supported locales.')}\n          </p>\n        </div>\n\n        {!isEmbedded && (\n          <div className=\"flex flex-col gap-4 sm:flex-row sm:items-start\">\n            <div className=\"flex-1 space-y-3\">\n              <div>\n                <label className=\"text-xs text-muted-foreground\">\n                  {t('translations.manager.selectEntity', 'Choose entity')}\n                </label>\n                <div className=\"mt-1\">\n                  <ComboboxInput\n                    value={selectedEntityType}\n                    onChange={(next) => {\n                      setSelectedEntityType(next)\n                      setSelectedRecordId('')\n                      setHasUserEdited(false)\n                    }}\n                    placeholder={t('translations.manager.placeholder', 'Select an entity')}\n                    suggestions={entitySuggestions}\n                    resolveLabel={resolveEntityLabel}\n                    disabled={loadingEntities || !!entitiesError}\n                  />\n                </div>\n                {entitiesError && (\n                  <p className=\"mt-1 text-xs text-red-600\">\n                    {t('translations.manager.errors.loadEntities', 'Failed to load entities')}\n                  </p>\n                )}\n              </div>\n              {renderRecordPicker()}\n            </div>\n          </div>\n        )}\n\n        <div className=\"rounded-lg border bg-background/80 p-4\">\n          {renderLocaleTabs()}\n          <div className=\"mt-3\">\n            {renderFieldTable()}\n          </div>\n        </div>\n\n        <div className=\"flex justify-end\">\n          <Button\n            type=\"button\"\n            onClick={() => mutation.mutate()}\n            disabled={mutation.isPending || loadingEntities || !!entitiesError || !entityType || !recordId}\n            data-testid=\"translations-save\"\n          >\n            <Save className=\"mr-2 h-4 w-4\" />\n            {mutation.isPending\n              ? t('translations.manager.actions.saving', 'Saving...')\n              : t('translations.manager.actions.save', 'Save translations')}\n          </Button>\n        </div>\n      </div>\n    </div>\n  )\n}\n\nexport function LocaleManager() {\n  const t = useT()\n  const queryClient = useQueryClient()\n  const { data: locales = [], isLoading } = useTranslationLocales()\n  const [newLocale, setNewLocale] = React.useState('')\n\n  const mutation = useMutation({\n    mutationFn: async (updatedLocales: string[]) => {\n      const res = await apiCall<{ locales: string[] }>('/api/translations/locales', {\n        method: 'PUT',\n        headers: { 'content-type': 'application/json' },\n        body: JSON.stringify({ locales: updatedLocales }),\n      })\n      if (!res.ok) throw new Error('Failed to save locales')\n      return res.result?.locales ?? updatedLocales\n    },\n    onSuccess: (result) => {\n      queryClient.setQueryData(['translation-locales'], result)\n      flash(t('translations.locales.flash.saved', 'Locales updated'), 'success')\n    },\n    onError: () => {\n      flash(t('translations.locales.flash.error', 'Failed to update locales'), 'error')\n    },\n  })\n\n  const availableLocales = React.useMemo(\n    () => ISO_639_1.filter((entry) => !locales.includes(entry.code)).map((entry) => ({\n      value: entry.code,\n      label: `${entry.code.toUpperCase()} \u2014 ${entry.label}`,\n    })),\n    [locales],\n  )\n\n  const addLocale = () => {\n    const code = newLocale.toLowerCase().trim()\n    if (!code || !isValidIso639(code) || locales.includes(code)) return\n    mutation.mutate([...locales, code])\n    setNewLocale('')\n  }\n\n  const removeLocale = (locale: string) => {\n    if (locales.length <= 1) return\n    mutation.mutate(locales.filter((l) => l !== locale))\n  }\n\n  if (isLoading) {\n    return <LoadingMessage label={t('translations.locales.loading', 'Loading locales...')} className=\"border-0 bg-transparent p-4\" />\n  }\n\n  return (\n    <div className=\"flex flex-col gap-3 rounded-lg border bg-card p-4 shadow-sm\">\n      <div className=\"space-y-1\">\n        <h3 className=\"text-lg font-semibold\">{t('translations.locales.title', 'Supported locales')}</h3>\n        <p className=\"text-sm text-muted-foreground\">\n          {t('translations.locales.description', 'Configure which locales are available for translations. Add ISO language codes (e.g. fr, it, ja, zh).')}\n        </p>\n      </div>\n\n      <div className=\"flex flex-wrap gap-2\">\n        {locales.map((locale) => (\n          <span\n            key={locale}\n            className=\"inline-flex items-center gap-1.5 rounded-full border bg-muted/50 px-3 py-1 text-sm font-medium\"\n            title={getIso639Label(locale) ?? locale}\n          >\n            {locale.toUpperCase()}{getIso639Label(locale) ? ` \u2014 ${getIso639Label(locale)}` : ''}\n            {locales.length > 1 && (\n              <button\n                type=\"button\"\n                className=\"rounded-full p-0.5 text-muted-foreground hover:text-foreground transition-colors\"\n                onClick={() => removeLocale(locale)}\n                disabled={mutation.isPending}\n              >\n                <X className=\"h-3 w-3\" />\n              </button>\n            )}\n          </span>\n        ))}\n      </div>\n\n      <div className=\"flex gap-2 items-center\">\n        <div className=\"max-w-[240px] flex-1\">\n          <ComboboxInput\n            value={newLocale}\n            onChange={setNewLocale}\n            placeholder={t('translations.locales.addPlaceholder', 'Search language...')}\n            suggestions={availableLocales}\n            resolveLabel={(value) => {\n              const label = getIso639Label(value)\n              return label ? `${value.toUpperCase()} \u2014 ${label}` : value.toUpperCase()\n            }}\n          />\n        </div>\n        <Button\n          variant=\"outline\"\n          size=\"sm\"\n          onClick={addLocale}\n          disabled={mutation.isPending || !newLocale.trim() || !isValidIso639(newLocale) || locales.includes(newLocale.toLowerCase().trim())}\n        >\n          <Plus className=\"mr-1 h-3 w-3\" />\n          {t('translations.locales.add', 'Add')}\n        </Button>\n      </div>\n    </div>\n  )\n}\n"],
-  "mappings": ";AA0RM,SACE,KADF;AAxRN,YAAY,WAAW;AACvB,SAAS,UAAU,aAAa,sBAAsB;AACtD,SAAS,cAAc;AACvB,SAAS,aAAa;AACtB,SAAS,qBAAqB;AAC9B,SAAS,gBAAgB,oBAAoB;AAC7C,SAAS,aAAa;AACtB,SAAS,SAAS,4BAA4B;AAC9C,SAAS,0BAA0B;AACnC,SAAS,MAAM,MAAM,SAAS;AAC9B,SAAS,mCAAmC;AAC5C,SAAS,YAAY;AACrB,SAAS,WAAW,sBAAsB;AAC1C,SAAS,WAAW,eAAe,sBAAsB;AACzD,SAAS,mBAAmB,oBAAoB,gBAAgB,wBAAwB;AACxF,SAAS,wBAAwB;AAsBjC,SAAS,wBAAwB;AAC/B,SAAO,SAAmB;AAAA,IACxB,UAAU,CAAC,qBAAqB;AAAA,IAChC,SAAS,YAAY;AACnB,YAAM,MAAM,MAAM,QAA+B,2BAA2B;AAC5E,UAAI,CAAC,IAAI,GAAI,QAAO,CAAC,GAAG,cAAc;AACtC,aAAO,MAAM,QAAQ,IAAI,QAAQ,OAAO,KAAK,IAAI,OAAO,QAAQ,SAAS,IACrE,IAAI,OAAO,UACX,CAAC,GAAG,cAAc;AAAA,IACxB;AAAA,IACA,WAAW;AAAA,EACb,CAAC;AACH;AAEO,SAAS,mBAAmB;AAAA,EACjC,YAAY;AAAA,EACZ,UAAU;AAAA,EACV,YAAY;AAAA,EACZ,oBAAoB;AAAA,EACpB,OAAO;AAAA,EACP,UAAU;AACZ,GAA4B;AAC1B,QAAM,IAAI,KAAK;AACf,QAAM,eAAe,4BAA4B;AACjD,QAAM,aAAa,SAAS;AAE5B,QAAM,CAAC,oBAAoB,qBAAqB,IAAI,MAAM,SAAS,kBAAkB,EAAE;AACvF,QAAM,CAAC,kBAAkB,mBAAmB,IAAI,MAAM,SAAS,gBAAgB,EAAE;AACjF,QAAM,CAAC,cAAc,eAAe,IAAI,MAAM,SAAS,EAAE;AACzD,QAAM,CAAC,oBAAoB,qBAAqB,IAAI,MAAM,SAAiD,CAAC,CAAC;AAC7G,QAAM,wBAAwB,MAAM,OAA+C,CAAC,CAAC;AACrF,QAAM,CAAC,eAAe,gBAAgB,IAAI,MAAM,SAAS,KAAK;AAE9D,QAAM,aAAa,aAAc,kBAAkB,KAAM;AACzD,QAAM,WAAW,aAAc,gBAAgB,KAAM;AAErD,QAAM,EAAE,MAAM,UAAU,CAAC,GAAG,cAAc,EAAE,IAAI,sBAAsB;AAEtE,QAAM,UAAU,MAAM;AACpB,QAAI,QAAQ,SAAS,MAAM,CAAC,gBAAgB,CAAC,QAAQ,SAAS,YAAY,IAAI;AAC5E,sBAAgB,QAAQ,CAAC,CAAC;AAAA,IAC5B;AAAA,EACF,GAAG,CAAC,SAAS,YAAY,CAAC;AAE1B,QAAM,UAAU,MAAM;AACpB,QAAI,cAAc,eAAgB,uBAAsB,cAAc;AAAA,EACxE,GAAG,CAAC,YAAY,cAAc,CAAC;AAE/B,QAAM,UAAU,MAAM;AACpB,QAAI,cAAc,aAAc,qBAAoB,YAAY;AAAA,EAClE,GAAG,CAAC,YAAY,YAAY,CAAC;AAE7B,QAAM,EAAE,MAAM,UAAU,WAAW,iBAAiB,OAAO,cAAc,IAAI,SAAoC;AAAA,IAC/G,UAAU,CAAC,iBAAiB,YAAY;AAAA,IACxC,SAAS,CAAC;AAAA,IACV,SAAS,YACP,qBAAqB,0BAA0B,QAAW;AAAA,MACxD,cAAc,EAAE,4CAA4C,yBAAyB;AAAA,IACvF,CAAC;AAAA,EACL,CAAC;AAED,QAAM,oBAAoB,MAAM;AAAA,IAC9B,OACG,UAAU,SAAS,CAAC,GAAG,IAAI,CAAC,UAAU;AAAA,MACrC,OAAO,KAAK;AAAA,MACZ,OAAO,kBAAkB,KAAK,UAAU,KAAK,KAAK;AAAA,MAClD,aAAa,KAAK;AAAA,IACpB,EAAE;AAAA,IACJ,CAAC,QAAQ;AAAA,EACX;AAEA,QAAM,qBAAqB,MAAM;AAAA,IAC/B,CAAC,UAAkB;AACjB,YAAM,QAAQ,UAAU,OAAO,KAAK,CAAC,MAAM,EAAE,aAAa,KAAK;AAC/D,aAAO,QAAQ,kBAAkB,MAAM,UAAU,MAAM,KAAK,IAAI,kBAAkB,KAAK;AAAA,IACzF;AAAA,IACA,CAAC,QAAQ;AAAA,EACX;AAEA,QAAM,UAAU,MAAM,QAAQ,MAAM,aAAa,mBAAmB,UAAU,IAAI,MAAM,CAAC,UAAU,CAAC;AAEpG,QAAM,wBAAwB,MAAM;AAAA,IAClC,OAAO,UAAmB;AACxB,UAAI,CAAC,cAAc,CAAC,QAAS,QAAO,CAAC;AACrC,YAAM,MAAM,GAAG,OAAO,eAAe,QAAQ,WAAW,mBAAmB,KAAK,CAAC,KAAK,EAAE;AACxF,YAAM,MAAM,MAAM,QAAmD,GAAG;AACxE,UAAI,CAAC,IAAI,GAAI,QAAO,CAAC;AACrB,YAAM,QAAQ,IAAI,QAAQ,SAAS,CAAC;AACpC,aAAO,MAAM,IAAI,CAAC,UAAU;AAAA,QAC1B,OAAO,OAAO,KAAK,MAAM,EAAE;AAAA,QAC3B,OAAO,eAAe,IAAI;AAAA,MAC5B,EAAE;AAAA,IACJ;AAAA,IACA,CAAC,YAAY,OAAO;AAAA,EACtB;AAEA,QAAM,EAAE,MAAM,WAAW,IAAI,SAAyC;AAAA,IACpE,UAAU,CAAC,2BAA2B,YAAY,UAAU,SAAS,YAAY;AAAA,IACjF,SAAS,CAAC,cAAc,CAAC,CAAC,cAAc,CAAC,CAAC,YAAY,CAAC,CAAC;AAAA,IACxD,SAAS,YAAY;AACnB,YAAM,MAAM,MAAM;AAAA;AAAA,QAEhB,GAAG,OAAO,OAAO,mBAAmB,QAAQ,CAAC,QAAQ,mBAAmB,QAAQ,CAAC;AAAA,MACnF;AACA,UAAI,CAAC,IAAI,GAAI,QAAO;AACpB,YAAM,QAAQ,IAAI,QAAQ;AAC1B,aAAO,MAAM,QAAQ,KAAK,KAAK,MAAM,SAAS,IAAI,MAAM,CAAC,IAAI;AAAA,IAC/D;AAAA,EACF,CAAC;AAED,QAAM,aAAa,aAAc,kBAAkB,CAAC,IAAM,cAAc,CAAC;AAEzE,QAAM,qBAAqB,MAAM;AAAA,IAC/B,CAAC,UAAkB;AACjB,UAAI,WAAY,QAAO,eAAe,UAAU;AAChD,aAAO;AAAA,IACT;AAAA,IACA,CAAC,UAAU;AAAA,EACb;AAEA,QAAM,EAAE,MAAM,YAAY,CAAC,GAAG,WAAW,iBAAiB,IAAI,mBAAmB,aAAa,CAAC,UAAU,IAAI,CAAC,GAAG;AAAA,IAC/G,SAAS,CAAC,CAAC;AAAA,EACb,CAAC;AAED,QAAM,YAAY,MAAM;AAAA,IACtB,MAAM,iBAAiB,YAAY,wBAAwB,SAAiE;AAAA,IAC5H,CAAC,YAAY,wBAAwB,SAAS;AAAA,EAChD;AAEA,QAAM;AAAA,IACJ,MAAM;AAAA,IACN,WAAW;AAAA,IACX,SAAS;AAAA,IACT,SAAS;AAAA,EACX,IAAI,SAAsC;AAAA,IACxC,UAAU,CAAC,sBAAsB,YAAY,UAAU,YAAY;AAAA,IACnE,SAAS,CAAC,CAAC,cAAc,CAAC,CAAC;AAAA,IAC3B,SAAS,YAAY;AACnB,YAAM,MAAM,MAAM;AAAA,QAChB,qBAAqB,mBAAmB,UAAU,CAAC,IAAI,mBAAmB,QAAQ,CAAC;AAAA,MACrF;AACA,UAAI,CAAC,IAAI,IAAI;AACX,YAAI,IAAI,UAAU,WAAW,IAAK,QAAO;AACzC,eAAO;AAAA,MACT;AACA,aAAO,IAAI,UAAU;AAAA,IACvB;AAAA,EACF,CAAC;AAED,QAAM,uBAAuB,MAAM,QAAQ,MAAM,KAAK,UAAU,mBAAmB,IAAI,GAAG,CAAC,eAAe,CAAC;AAC3G,QAAM,8BAA8B,MAAM,OAAsB,IAAI;AAEpE,QAAM,UAAU,MAAM;AACpB,UAAM,MAAM;AACZ,QAAI,QAAQ,4BAA4B,WAAW,cAAe;AAClE,gCAA4B,UAAU;AAEtC,QAAI,CAAC,iBAAiB,cAAc;AAClC,UAAI,CAAC,eAAe;AAClB,8BAAsB,UAAU,CAAC;AACjC,8BAAsB,CAAC,CAAC;AAAA,MAC1B;AACA;AAAA,IACF;AAEA,UAAM,SAAiD,CAAC;AACxD,eAAW,CAAC,QAAQ,MAAM,KAAK,OAAO,QAAQ,gBAAgB,YAAY,GAAG;AAC3E,UAAI,CAAC,UAAU,OAAO,WAAW,SAAU;AAC3C,aAAO,MAAM,IAAI,CAAC;AAClB,iBAAW,CAAC,KAAK,GAAG,KAAK,OAAO,QAAQ,MAAM,GAAG;AAC/C,eAAO,MAAM,EAAE,GAAG,IAAI,OAAO,QAAQ,WAAW,MAAM;AAAA,MACxD;AAAA,IACF;AACA,QAAI,CAAC,eAAe;AAClB,4BAAsB,UAAU;AAChC,4BAAsB,MAAM;AAAA,IAC9B;AAAA,EACF,GAAG,CAAC,sBAAsB,iBAAiB,aAAa,CAAC;AAEzD,QAAM,WAAW,YAAY;AAAA,IAC3B,YAAY,YAAY;AACtB,UAAI,CAAC,cAAc,CAAC,UAAU;AAC5B,cAAM,IAAI,MAAM,EAAE,4CAA4C,2CAA2C,CAAC;AAAA,MAC5G;AACA,YAAM,OAAsD,CAAC;AAC7D,iBAAW,CAAC,QAAQ,MAAM,KAAK,OAAO,QAAQ,sBAAsB,OAAO,GAAG;AAC5E,cAAM,eAA8C,CAAC;AACrD,YAAI,YAAY;AAChB,mBAAW,CAAC,KAAK,GAAG,KAAK,OAAO,QAAQ,MAAM,GAAG;AAC/C,cAAI,OAAO,IAAI,KAAK,EAAE,SAAS,GAAG;AAChC,yBAAa,GAAG,IAAI,IAAI,KAAK;AAC7B,wBAAY;AAAA,UACd;AAAA,QACF;AACA,YAAI,UAAW,MAAK,MAAM,IAAI;AAAA,MAChC;AACA,UAAI,OAAO,KAAK,IAAI,EAAE,WAAW,GAAG;AAClC,gBAAQ,KAAK,6FAAwF;AACrG,cAAM,IAAI,MAAM,EAAE,6CAA6C,kDAA6C,CAAC;AAAA,MAC/G;AACA,YAAM,MAAM,MAAM;AAAA,QAChB,qBAAqB,mBAAmB,UAAU,CAAC,IAAI,mBAAmB,QAAQ,CAAC;AAAA,QACnF;AAAA,UACE,QAAQ;AAAA,UACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,UAC9C,MAAM,KAAK,UAAU,IAAI;AAAA,QAC3B;AAAA,MACF;AACA,UAAI,CAAC,IAAI,IAAI;AACX,cAAM,IAAI,MAAM,EAAE,oCAAoC,6BAA6B,CAAC;AAAA,MACtF;AACA,aAAO;AAAA,IACT;AAAA,IACA,WAAW,MAAM;AACf,YAAM,EAAE,oCAAoC,oBAAoB,GAAG,SAAS;AAC5E,uBAAiB,KAAK;AACtB,WAAK,mBAAmB;AAAA,IAC1B;AAAA,IACA,SAAS,CAAC,QAAiB;AACzB,YAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,EAAE,oCAAoC,6BAA6B;AACxH,YAAM,SAAS,OAAO;AAAA,IACxB;AAAA,EACF,CAAC;AAED,QAAM,mBAAmB,CAAC,QAAgB,UAAkB,UAAkB;AAC5E,qBAAiB,IAAI;AACrB,UAAM,OAAO;AAAA,MACX,GAAG,sBAAsB;AAAA,MACzB,CAAC,MAAM,GAAG;AAAA,QACR,GAAG,sBAAsB,QAAQ,MAAM;AAAA,QACvC,CAAC,QAAQ,GAAG;AAAA,MACd;AAAA,IACF;AACA,0BAAsB,UAAU;AAChC,0BAAsB,IAAI;AAAA,EAC5B;AAEA,QAAM,eAAe,CAAC,aAA6B,iBAAiB,YAAY,QAAQ;AAExF,QAAM,qBAAqB,MAAM;AAC/B,QAAI,WAAY,QAAO;AAEvB,WACE,qBAAC,SAAI,WAAU,aACb;AAAA,0BAAC,WAAM,WAAU,iCACd,YAAE,qCAAqC,eAAe,GACzD;AAAA,MACA;AAAA,QAAC;AAAA;AAAA,UACC,OAAO;AAAA,UACP,UAAU,CAAC,SAAS;AAClB,gCAAoB,IAAI;AACxB,6BAAiB,KAAK;AAAA,UACxB;AAAA,UACA,aAAa,EAAE,sCAAsC,mBAAmB;AAAA,UACxE,iBAAiB;AAAA,UACjB,cAAc;AAAA,UACd,mBAAiB;AAAA,UACjB,UAAU,CAAC;AAAA;AAAA,MACb;AAAA,OACF;AAAA,EAEJ;AAEA,QAAM,mBAAmB,MACvB,oBAAC,SAAI,WAAU,uBACZ,kBAAQ,IAAI,CAAC,WAAW;AACvB,UAAM,WAAW,iBAAiB;AAClC,WACE;AAAA,MAAC;AAAA;AAAA,QAEC,MAAK;AAAA,QACL,cAAY,WAAW,WAAW;AAAA,QAClC,eAAa;AAAA,QACb,WAAW,qDACT,WACI,2CACA,6CACN;AAAA,QACA,SAAS,MAAM,gBAAgB,MAAM;AAAA,QAEpC,iBAAO,YAAY;AAAA;AAAA,MAXf;AAAA,IAYP;AAAA,EAEJ,CAAC,GACH;AAGF,QAAM,mBAAmB,MAAM;AAC7B,QAAI,CAAC,cAAc,CAAC,UAAU;AAC5B,aACE,oBAAC,SAAI,WAAU,qEACZ,YAAE,oCAAoC,qDAAqD,GAC9F;AAAA,IAEJ;AACA,QAAI,sBAAsB,kBAAkB;AAC1C,aACE;AAAA,QAAC;AAAA;AAAA,UACC,OAAO,EAAE,4CAA4C,yBAAyB;AAAA,UAC9E,WAAU;AAAA;AAAA,MACZ;AAAA,IAEJ;AACA,QAAI,kBAAkB;AACpB,aACE;AAAA,QAAC;AAAA;AAAA,UACC,OAAO,EAAE,+CAA+C,6BAA6B;AAAA,UACrF,QACE,oBAAC,UAAO,SAAQ,WAAU,MAAK,MAAK,SAAS,MAAM,KAAK,mBAAmB,GACxE,YAAE,sCAAsC,OAAO,GAClD;AAAA;AAAA,MAEJ;AAAA,IAEJ;AACA,QAAI,CAAC,UAAU,QAAQ;AACrB,aACE,oBAAC,SAAI,WAAU,qEACZ,YAAE,iCAAiC,oDAAoD,GAC1F;AAAA,IAEJ;AAEA,UAAM,qBAAqB,mBAAmB,YAAY,KAAK,CAAC;AAEhE,WACE,oBAAC,SAAI,WAAU,mBACb,+BAAC,WAAM,WAAU,gCACf;AAAA,0BAAC,WACC,+BAAC,QAAG,WAAU,yDACZ;AAAA,4BAAC,QAAG,WAAU,iCACX,YAAE,qCAAqC,OAAO,GACjD;AAAA,QACC,CAAC,WACA,oBAAC,QAAG,WAAU,uBACX,YAAE,yCAAyC,YAAY,GAC1D;AAAA,QAEF,qBAAC,QAAG,WAAU,uBACX;AAAA,YAAE,2CAA2C,aAAa;AAAA,UAAE;AAAA,UAAG,aAAa,YAAY;AAAA,UAAE;AAAA,WAC7F;AAAA,SACF,GACF;AAAA,MACA,oBAAC,WACE,oBAAU,IAAI,CAAC,UAAU;AACxB,cAAM,UAAU,aAAa,MAAM,GAAG;AACtC,cAAM,gBAAgB,mBAAmB,MAAM,GAAG,KAAK;AAEvD,eACE,qBAAC,QAAmB,WAAU,YAC5B;AAAA,8BAAC,QAAG,WAAU,iEACX,gBAAM,OACT;AAAA,UACC,CAAC,WACA,oBAAC,QAAG,WAAU,mEACX,oBACC,oBAAC,UAAK,WAAU,gBAAgB,mBAAQ,IAExC,oBAAC,UAAK,WAAU,4BAA2B,eAAC,GAEhD;AAAA,UAEF,oBAAC,QAAG,WAAU,uBACX,gBAAM,YACL;AAAA,YAAC;AAAA;AAAA,cACC,WAAU;AAAA,cACV,MAAM;AAAA,cACN,OAAO;AAAA,cACP,UAAU,CAAC,MAAM,iBAAiB,cAAc,MAAM,KAAK,EAAE,OAAO,KAAK;AAAA,cACzE,aAAa,WAAW,MAAM;AAAA;AAAA,UAChC,IAEA;AAAA,YAAC;AAAA;AAAA,cACC,OAAO;AAAA,cACP,UAAU,CAAC,MAAM,iBAAiB,cAAc,MAAM,KAAK,EAAE,OAAO,KAAK;AAAA,cACzE,aAAa,WAAW,MAAM;AAAA;AAAA,UAChC,GAEJ;AAAA,aA7BO,MAAM,GA8Bf;AAAA,MAEJ,CAAC,GACH;AAAA,OACF,GACF;AAAA,EAEJ;AAEA,QAAM,UAAU,MAAM;AACpB,UAAM,UAAU,CAAC,MAAqB;AACpC,WAAK,EAAE,WAAW,EAAE,YAAY,EAAE,QAAQ,SAAS;AACjD,UAAE,eAAe;AACjB,YAAI,cAAc,YAAY,CAAC,SAAS,UAAW,UAAS,OAAO;AAAA,MACrE;AAAA,IACF;AACA,aAAS,iBAAiB,WAAW,OAAO;AAC5C,WAAO,MAAM,SAAS,oBAAoB,WAAW,OAAO;AAAA,EAC9D,GAAG,CAAC,YAAY,UAAU,QAAQ,CAAC;AAEnC,MAAI,SAAS;AACX,WACE,qBAAC,SAAI,WAAU,aACZ;AAAA,uBAAiB;AAAA,MACjB,iBAAiB;AAAA,MAClB,oBAAC,SAAI,WAAU,oBACb;AAAA,QAAC;AAAA;AAAA,UACC,MAAK;AAAA,UACL,MAAK;AAAA,UACL,SAAS,MAAM,SAAS,OAAO;AAAA,UAC/B,UAAU,SAAS,aAAa,CAAC,cAAc,CAAC;AAAA,UAChD,eAAY;AAAA,UAEZ;AAAA,gCAAC,QAAK,WAAU,gBAAe;AAAA,YAC9B,SAAS,YACN,EAAE,uCAAuC,WAAW,IACpD,EAAE,qCAAqC,mBAAmB;AAAA;AAAA;AAAA,MAChE,GACF;AAAA,OACF;AAAA,EAEJ;AAEA,SACE,oBAAC,SAAI,WAAU,aACb,+BAAC,SAAI,WAAU,+DACb;AAAA,yBAAC,SAAI,WAAU,aACb;AAAA,0BAAC,QAAG,WAAU,yBAAyB,YAAE,8BAA8B,cAAc,GAAE;AAAA,MACvF,oBAAC,OAAE,WAAU,iCACV,YAAE,oCAAoC,kEAAkE,GAC3G;AAAA,OACF;AAAA,IAEC,CAAC,cACA,oBAAC,SAAI,WAAU,kDACb,+BAAC,SAAI,WAAU,oBACb;AAAA,2BAAC,SACC;AAAA,4BAAC,WAAM,WAAU,iCACd,YAAE,qCAAqC,eAAe,GACzD;AAAA,QACA,oBAAC,SAAI,WAAU,QACb;AAAA,UAAC;AAAA;AAAA,YACC,OAAO;AAAA,YACP,UAAU,CAAC,SAAS;AAClB,oCAAsB,IAAI;AAC1B,kCAAoB,EAAE;AACtB,+BAAiB,KAAK;AAAA,YACxB;AAAA,YACA,aAAa,EAAE,oCAAoC,kBAAkB;AAAA,YACrE,aAAa;AAAA,YACb,cAAc;AAAA,YACd,UAAU,mBAAmB,CAAC,CAAC;AAAA;AAAA,QACjC,GACF;AAAA,QACC,iBACC,oBAAC,OAAE,WAAU,6BACV,YAAE,4CAA4C,yBAAyB,GAC1E;AAAA,SAEJ;AAAA,MACC,mBAAmB;AAAA,OACtB,GACF;AAAA,IAGF,qBAAC,SAAI,WAAU,0CACZ;AAAA,uBAAiB;AAAA,MAClB,oBAAC,SAAI,WAAU,QACZ,2BAAiB,GACpB;AAAA,OACF;AAAA,IAEA,oBAAC,SAAI,WAAU,oBACb;AAAA,MAAC;AAAA;AAAA,QACC,MAAK;AAAA,QACL,SAAS,MAAM,SAAS,OAAO;AAAA,QAC/B,UAAU,SAAS,aAAa,mBAAmB,CAAC,CAAC,iBAAiB,CAAC,cAAc,CAAC;AAAA,QACtF,eAAY;AAAA,QAEZ;AAAA,8BAAC,QAAK,WAAU,gBAAe;AAAA,UAC9B,SAAS,YACN,EAAE,uCAAuC,WAAW,IACpD,EAAE,qCAAqC,mBAAmB;AAAA;AAAA;AAAA,IAChE,GACF;AAAA,KACF,GACF;AAEJ;AAEO,SAAS,gBAAgB;AAC9B,QAAM,IAAI,KAAK;AACf,QAAM,cAAc,eAAe;AACnC,QAAM,EAAE,MAAM,UAAU,CAAC,GAAG,UAAU,IAAI,sBAAsB;AAChE,QAAM,CAAC,WAAW,YAAY,IAAI,MAAM,SAAS,EAAE;AAEnD,QAAM,WAAW,YAAY;AAAA,IAC3B,YAAY,OAAO,mBAA6B;AAC9C,YAAM,MAAM,MAAM,QAA+B,6BAA6B;AAAA,QAC5E,QAAQ;AAAA,QACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,QAC9C,MAAM,KAAK,UAAU,EAAE,SAAS,eAAe,CAAC;AAAA,MAClD,CAAC;AACD,UAAI,CAAC,IAAI,GAAI,OAAM,IAAI,MAAM,wBAAwB;AACrD,aAAO,IAAI,QAAQ,WAAW;AAAA,IAChC;AAAA,IACA,WAAW,CAAC,WAAW;AACrB,kBAAY,aAAa,CAAC,qBAAqB,GAAG,MAAM;AACxD,YAAM,EAAE,oCAAoC,iBAAiB,GAAG,SAAS;AAAA,IAC3E;AAAA,IACA,SAAS,MAAM;AACb,YAAM,EAAE,oCAAoC,0BAA0B,GAAG,OAAO;AAAA,IAClF;AAAA,EACF,CAAC;AAED,QAAM,mBAAmB,MAAM;AAAA,IAC7B,MAAM,UAAU,OAAO,CAAC,UAAU,CAAC,QAAQ,SAAS,MAAM,IAAI,CAAC,EAAE,IAAI,CAAC,WAAW;AAAA,MAC/E,OAAO,MAAM;AAAA,MACb,OAAO,GAAG,MAAM,KAAK,YAAY,CAAC,WAAM,MAAM,KAAK;AAAA,IACrD,EAAE;AAAA,IACF,CAAC,OAAO;AAAA,EACV;AAEA,QAAM,YAAY,MAAM;AACtB,UAAM,OAAO,UAAU,YAAY,EAAE,KAAK;AAC1C,QAAI,CAAC,QAAQ,CAAC,cAAc,IAAI,KAAK,QAAQ,SAAS,IAAI,EAAG;AAC7D,aAAS,OAAO,CAAC,GAAG,SAAS,IAAI,CAAC;AAClC,iBAAa,EAAE;AAAA,EACjB;AAEA,QAAM,eAAe,CAAC,WAAmB;AACvC,QAAI,QAAQ,UAAU,EAAG;AACzB,aAAS,OAAO,QAAQ,OAAO,CAAC,MAAM,MAAM,MAAM,CAAC;AAAA,EACrD;AAEA,MAAI,WAAW;AACb,WAAO,oBAAC,kBAAe,OAAO,EAAE,gCAAgC,oBAAoB,GAAG,WAAU,+BAA8B;AAAA,EACjI;AAEA,SACE,qBAAC,SAAI,WAAU,+DACb;AAAA,yBAAC,SAAI,WAAU,aACb;AAAA,0BAAC,QAAG,WAAU,yBAAyB,YAAE,8BAA8B,mBAAmB,GAAE;AAAA,MAC5F,oBAAC,OAAE,WAAU,iCACV,YAAE,oCAAoC,uGAAuG,GAChJ;AAAA,OACF;AAAA,IAEA,oBAAC,SAAI,WAAU,wBACZ,kBAAQ,IAAI,CAAC,WACZ;AAAA,MAAC;AAAA;AAAA,QAEC,WAAU;AAAA,QACV,OAAO,eAAe,MAAM,KAAK;AAAA,QAEhC;AAAA,iBAAO,YAAY;AAAA,UAAG,eAAe,MAAM,IAAI,WAAM,eAAe,MAAM,CAAC,KAAK;AAAA,UAChF,QAAQ,SAAS,KAChB;AAAA,YAAC;AAAA;AAAA,cACC,MAAK;AAAA,cACL,WAAU;AAAA,cACV,SAAS,MAAM,aAAa,MAAM;AAAA,cAClC,UAAU,SAAS;AAAA,cAEnB,8BAAC,KAAE,WAAU,WAAU;AAAA;AAAA,UACzB;AAAA;AAAA;AAAA,MAbG;AAAA,IAeP,CACD,GACH;AAAA,IAEA,qBAAC,SAAI,WAAU,2BACb;AAAA,0BAAC,SAAI,WAAU,wBACb;AAAA,QAAC;AAAA;AAAA,UACC,OAAO;AAAA,UACP,UAAU;AAAA,UACV,aAAa,EAAE,uCAAuC,oBAAoB;AAAA,UAC1E,aAAa;AAAA,UACb,cAAc,CAAC,UAAU;AACvB,kBAAM,QAAQ,eAAe,KAAK;AAClC,mBAAO,QAAQ,GAAG,MAAM,YAAY,CAAC,WAAM,KAAK,KAAK,MAAM,YAAY;AAAA,UACzE;AAAA;AAAA,MACF,GACF;AAAA,MACA;AAAA,QAAC;AAAA;AAAA,UACC,SAAQ;AAAA,UACR,MAAK;AAAA,UACL,SAAS;AAAA,UACT,UAAU,SAAS,aAAa,CAAC,UAAU,KAAK,KAAK,CAAC,cAAc,SAAS,KAAK,QAAQ,SAAS,UAAU,YAAY,EAAE,KAAK,CAAC;AAAA,UAEjI;AAAA,gCAAC,QAAK,WAAU,gBAAe;AAAA,YAC9B,EAAE,4BAA4B,KAAK;AAAA;AAAA;AAAA,MACtC;AAAA,OACF;AAAA,KACF;AAEJ;",
+  "sourcesContent": ["\"use client\"\n\nimport * as React from 'react'\nimport { useQuery, useMutation, useQueryClient } from '@tanstack/react-query'\nimport { Button } from '@open-mercato/ui/primitives/button'\nimport { Input } from '@open-mercato/ui/primitives/input'\nimport { ComboboxInput } from '@open-mercato/ui/backend/inputs'\nimport { LoadingMessage, ErrorMessage } from '@open-mercato/ui/backend/detail'\nimport { flash } from '@open-mercato/ui/backend/FlashMessages'\nimport { apiCall, readApiResultOrThrow } from '@open-mercato/ui/backend/utils/apiCall'\nimport { useCustomFieldDefs } from '@open-mercato/ui/backend/utils/customFieldDefs'\nimport { Save, Plus, X } from 'lucide-react'\nimport { useOrganizationScopeVersion } from '@open-mercato/shared/lib/frontend/useOrganizationScope'\nimport { useT } from '@open-mercato/shared/lib/i18n/context'\nimport { locales as defaultLocales } from '@open-mercato/shared/lib/i18n/config'\nimport { ISO_639_1, isValidIso639, getIso639Label } from '@open-mercato/shared/lib/i18n/iso639'\nimport { formatEntityLabel, buildEntityListUrl, getRecordLabel, resolveBaseValue } from '../lib/helpers'\nimport { resolveFieldList } from '../lib/resolve-field-list'\nimport type { ResolvedField } from '../lib/resolve-field-list'\n\ntype TranslationManagerProps = {\n  entityType?: string\n  recordId?: string\n  baseValues?: Record<string, unknown>\n  translatableFields?: string[]\n  mode?: 'standalone' | 'embedded'\n  compact?: boolean\n}\n\ntype EntityOption = { entityId: string; label?: string; source?: string }\n\ntype TranslationsResponse = {\n  entityType: string\n  entityId: string\n  translations: Record<string, Record<string, unknown>>\n  createdAt?: string\n  updatedAt?: string\n}\n\nfunction useTranslationLocales() {\n  return useQuery<string[]>({\n    queryKey: ['translation-locales'],\n    queryFn: async () => {\n      const res = await apiCall<{ locales: string[] }>('/api/translations/locales')\n      if (!res.ok) return [...defaultLocales]\n      return Array.isArray(res.result?.locales) && res.result.locales.length > 0\n        ? res.result.locales\n        : [...defaultLocales]\n    },\n    staleTime: 60_000,\n  })\n}\n\nexport function TranslationManager({\n  entityType: propEntityType,\n  recordId: propRecordId,\n  baseValues: propBaseValues,\n  translatableFields: propTranslatableFields,\n  mode = 'standalone',\n  compact = false,\n}: TranslationManagerProps) {\n  const t = useT()\n  const scopeVersion = useOrganizationScopeVersion()\n  const isEmbedded = mode === 'embedded'\n\n  const [selectedEntityType, setSelectedEntityType] = React.useState(propEntityType ?? '')\n  const [selectedRecordId, setSelectedRecordId] = React.useState(propRecordId ?? '')\n  const [activeLocale, setActiveLocale] = React.useState('')\n  const [editedTranslations, setEditedTranslations] = React.useState<Record<string, Record<string, string>>>({})\n  const editedTranslationsRef = React.useRef<Record<string, Record<string, string>>>({})\n  const [hasUserEdited, setHasUserEdited] = React.useState(false)\n  const hasUserEditedRef = React.useRef(false)\n\n  const entityType = isEmbedded ? (propEntityType ?? '') : selectedEntityType\n  const recordId = isEmbedded ? (propRecordId ?? '') : selectedRecordId\n\n  const { data: locales = [...defaultLocales] } = useTranslationLocales()\n\n  React.useEffect(() => {\n    if (locales.length > 0 && (!activeLocale || !locales.includes(activeLocale))) {\n      setActiveLocale(locales[0])\n    }\n  }, [locales, activeLocale])\n\n  React.useEffect(() => {\n    if (isEmbedded && propEntityType) setSelectedEntityType(propEntityType)\n  }, [isEmbedded, propEntityType])\n\n  React.useEffect(() => {\n    if (isEmbedded && propRecordId) setSelectedRecordId(propRecordId)\n  }, [isEmbedded, propRecordId])\n\n  const { data: entities, isLoading: loadingEntities, error: entitiesError } = useQuery<{ items: EntityOption[] }>({\n    queryKey: ['entities-list', scopeVersion],\n    enabled: !isEmbedded,\n    queryFn: async () =>\n      readApiResultOrThrow('/api/entities/entities', undefined, {\n        errorMessage: t('translations.manager.errors.loadEntities', 'Failed to load entities'),\n      }),\n  })\n\n  const entitySuggestions = React.useMemo(\n    () =>\n      (entities?.items || []).map((item) => ({\n        value: item.entityId,\n        label: formatEntityLabel(item.entityId, item.label),\n        description: item.entityId,\n      })),\n    [entities],\n  )\n\n  const resolveEntityLabel = React.useCallback(\n    (value: string) => {\n      const match = entities?.items?.find((e) => e.entityId === value)\n      return match ? formatEntityLabel(match.entityId, match.label) : formatEntityLabel(value)\n    },\n    [entities],\n  )\n\n  const listUrl = React.useMemo(() => entityType ? buildEntityListUrl(entityType) : null, [entityType])\n\n  const loadRecordSuggestions = React.useCallback(\n    async (query?: string) => {\n      if (!entityType || !listUrl) return []\n      const url = `${listUrl}?pageSize=20${query ? `&search=${encodeURIComponent(query)}` : ''}`\n      const res = await apiCall<{ items: Array<Record<string, unknown>> }>(url)\n      if (!res.ok) return []\n      const items = res.result?.items ?? []\n      return items.map((item) => ({\n        value: String(item.id ?? ''),\n        label: getRecordLabel(item),\n      }))\n    },\n    [entityType, listUrl],\n  )\n\n  const { data: recordData } = useQuery<Record<string, unknown> | null>({\n    queryKey: ['translation-record-data', entityType, recordId, listUrl, scopeVersion],\n    enabled: !isEmbedded && !!entityType && !!recordId && !!listUrl,\n    queryFn: async () => {\n      const res = await apiCall<{ items: Array<Record<string, unknown>> }>(\n        // Some APIs filter by `id` (catalog), others by `ids` (resources) \u2014 send both so the one recognized by the target route's buildFilters is applied\n        `${listUrl}?id=${encodeURIComponent(recordId)}&ids=${encodeURIComponent(recordId)}&pageSize=1`,\n      )\n      if (!res.ok) return null\n      const items = res.result?.items\n      return Array.isArray(items) && items.length > 0 ? items[0] : null\n    },\n  })\n\n  const baseValues = isEmbedded ? (propBaseValues ?? {}) : (recordData ?? {})\n\n  const resolveRecordLabel = React.useCallback(\n    (value: string) => {\n      if (recordData) return getRecordLabel(recordData)\n      return value\n    },\n    [recordData],\n  )\n\n  const { data: fieldDefs = [], isLoading: loadingFieldDefs } = useCustomFieldDefs(entityType ? [entityType] : [], {\n    enabled: !!entityType,\n  })\n\n  const fieldList = React.useMemo(\n    () => resolveFieldList(entityType, propTranslatableFields, fieldDefs as Array<{ key: string; kind: string; label?: string }>),\n    [entityType, propTranslatableFields, fieldDefs],\n  )\n\n  const {\n    data: translationData,\n    isLoading: loadingTranslation,\n    isError: translationError,\n    refetch: refetchTranslation,\n  } = useQuery<TranslationsResponse | null>({\n    queryKey: ['entity-translation', entityType, recordId, scopeVersion],\n    enabled: !!entityType && !!recordId,\n    queryFn: async () => {\n      const res = await apiCall<TranslationsResponse>(\n        `/api/translations/${encodeURIComponent(entityType)}/${encodeURIComponent(recordId)}`,\n      )\n      if (!res.ok) {\n        if (res.response?.status === 404) return null\n        return null\n      }\n      return res.result ?? null\n    },\n  })\n\n  const translationSignature = React.useMemo(() => JSON.stringify(translationData ?? null), [translationData])\n  const lastTranslationSignatureRef = React.useRef<string | null>(null)\n\n  React.useEffect(() => {\n    const sig = translationSignature\n    if (sig === lastTranslationSignatureRef.current && hasUserEditedRef.current) return\n    lastTranslationSignatureRef.current = sig\n\n    if (!translationData?.translations) {\n      if (!hasUserEditedRef.current) {\n        editedTranslationsRef.current = {}\n        setEditedTranslations({})\n      }\n      return\n    }\n\n    const parsed: Record<string, Record<string, string>> = {}\n    for (const [locale, fields] of Object.entries(translationData.translations)) {\n      if (!fields || typeof fields !== 'object') continue\n      parsed[locale] = {}\n      for (const [key, val] of Object.entries(fields)) {\n        parsed[locale][key] = typeof val === 'string' ? val : ''\n      }\n    }\n    if (!hasUserEditedRef.current) {\n      editedTranslationsRef.current = parsed\n      setEditedTranslations(parsed)\n    }\n  }, [translationSignature, translationData])\n\n  const mutation = useMutation({\n    mutationFn: async () => {\n      if (!entityType || !recordId) {\n        throw new Error(t('translations.manager.errors.selectRecord', 'Select an entity and record before saving'))\n      }\n      const body: Record<string, Record<string, string | null>> = {}\n      for (const [locale, fields] of Object.entries(editedTranslationsRef.current)) {\n        const localeFields: Record<string, string | null> = {}\n        let hasValues = false\n        for (const [key, val] of Object.entries(fields)) {\n          if (val && val.trim().length > 0) {\n            localeFields[key] = val.trim()\n            hasValues = true\n          }\n        }\n        if (hasValues) body[locale] = localeFields\n      }\n      if (Object.keys(body).length === 0) {\n        console.warn('[translations] Save skipped: payload is empty \u2014 no locale contains any non-empty field')\n        throw new Error(t('translations.manager.errors.nothingToSave', 'Nothing to save \u2014 enter a translation first'))\n      }\n      const res = await apiCall(\n        `/api/translations/${encodeURIComponent(entityType)}/${encodeURIComponent(recordId)}`,\n        {\n          method: 'PUT',\n          headers: { 'content-type': 'application/json' },\n          body: JSON.stringify(body),\n        },\n      )\n      if (!res.ok) {\n        throw new Error(t('translations.manager.errors.save', 'Failed to save translations'))\n      }\n      return true\n    },\n    onSuccess: () => {\n      flash(t('translations.manager.flash.saved', 'Translations saved'), 'success')\n      hasUserEditedRef.current = false\n      setHasUserEdited(false)\n      void refetchTranslation()\n    },\n    onError: (err: unknown) => {\n      const message = err instanceof Error ? err.message : t('translations.manager.errors.save', 'Failed to save translations')\n      flash(message, 'error')\n    },\n  })\n\n  const updateFieldValue = (locale: string, fieldKey: string, value: string) => {\n    hasUserEditedRef.current = true\n    setHasUserEdited(true)\n    const next = {\n      ...editedTranslationsRef.current,\n      [locale]: {\n        ...editedTranslationsRef.current[locale],\n        [fieldKey]: value,\n      },\n    }\n    editedTranslationsRef.current = next\n    setEditedTranslations(next)\n  }\n\n  const getBaseValue = (fieldKey: string): string => resolveBaseValue(baseValues, fieldKey)\n\n  const renderRecordPicker = () => {\n    if (isEmbedded) return null\n\n    return (\n      <div className=\"space-y-2\">\n        <label className=\"text-xs text-muted-foreground\">\n          {t('translations.manager.selectRecord', 'Select record')}\n        </label>\n        <ComboboxInput\n          value={selectedRecordId}\n          onChange={(next) => {\n            setSelectedRecordId(next)\n            hasUserEditedRef.current = false\n            setHasUserEdited(false)\n          }}\n          placeholder={t('translations.manager.searchRecords', 'Search records...')}\n          loadSuggestions={loadRecordSuggestions}\n          resolveLabel={resolveRecordLabel}\n          allowCustomValues\n          disabled={!entityType}\n        />\n      </div>\n    )\n  }\n\n  const renderLocaleTabs = () => (\n    <div className=\"flex gap-1 border-b\">\n      {locales.map((locale) => {\n        const isActive = activeLocale === locale\n        return (\n          <button\n            key={locale}\n            type=\"button\"\n            data-state={isActive ? 'active' : 'inactive'}\n            data-locale={locale}\n            className={`px-3 py-1.5 text-sm font-medium transition-colors ${\n              isActive\n                ? 'border-b-2 border-primary text-primary'\n                : 'text-muted-foreground hover:text-foreground'\n            }`}\n            onClick={() => setActiveLocale(locale)}\n          >\n            {locale.toUpperCase()}\n          </button>\n        )\n      })}\n    </div>\n  )\n\n  const renderFieldTable = () => {\n    if (!entityType || !recordId) {\n      return (\n        <div className=\"rounded border bg-background/80 p-4 text-sm text-muted-foreground\">\n          {t('translations.manager.selectFirst', 'Select an entity and record to manage translations.')}\n        </div>\n      )\n    }\n    if (loadingTranslation || loadingFieldDefs) {\n      return (\n        <LoadingMessage\n          label={t('translations.manager.loadingTranslations', 'Loading translations...')}\n          className=\"border-0 bg-transparent p-4\"\n        />\n      )\n    }\n    if (translationError) {\n      return (\n        <ErrorMessage\n          label={t('translations.manager.errors.loadTranslation', 'Failed to load translations')}\n          action={(\n            <Button variant=\"outline\" size=\"sm\" onClick={() => void refetchTranslation()}>\n              {t('translations.manager.actions.retry', 'Retry')}\n            </Button>\n          )}\n        />\n      )\n    }\n    if (!fieldList.length) {\n      return (\n        <div className=\"rounded border bg-background/80 p-4 text-sm text-muted-foreground\">\n          {t('translations.manager.noFields', 'No translatable fields found for this entity type.')}\n        </div>\n      )\n    }\n\n    const localeTranslations = editedTranslations[activeLocale] ?? {}\n\n    return (\n      <div className=\"overflow-x-auto\">\n        <table className=\"w-full min-w-[480px] text-sm\">\n          <thead>\n            <tr className=\"text-xs uppercase tracking-wide text-muted-foreground\">\n              <th className=\"px-3 py-2 text-left w-[140px]\">\n                {t('translations.manager.fields.field', 'Field')}\n              </th>\n              {!compact && (\n                <th className=\"px-3 py-2 text-left\">\n                  {t('translations.manager.fields.baseValue', 'Base value')}\n                </th>\n              )}\n              <th className=\"px-3 py-2 text-left\">\n                {t('translations.manager.fields.translation', 'Translation')} ({activeLocale.toUpperCase()})\n              </th>\n            </tr>\n          </thead>\n          <tbody>\n            {fieldList.map((field) => {\n              const baseVal = getBaseValue(field.key)\n              const translatedVal = localeTranslations[field.key] ?? ''\n\n              return (\n                <tr key={field.key} className=\"border-t\">\n                  <td className=\"px-3 py-2 align-top text-xs font-medium text-muted-foreground\">\n                    {field.label}\n                  </td>\n                  {!compact && (\n                    <td className=\"px-3 py-2 align-top text-xs text-muted-foreground max-w-[200px]\">\n                      {baseVal ? (\n                        <span className=\"line-clamp-3\">{baseVal}</span>\n                      ) : (\n                        <span className=\"text-muted-foreground/50\">-</span>\n                      )}\n                    </td>\n                  )}\n                  <td className=\"px-3 py-2 align-top\">\n                    {field.multiline ? (\n                      <textarea\n                        className=\"flex w-full rounded-md border border-input bg-background px-3 py-2 text-sm shadow-sm transition-colors focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-ring focus-visible:ring-offset-2 disabled:cursor-not-allowed disabled:opacity-50\"\n                        rows={3}\n                        value={translatedVal}\n                        onChange={(e) => updateFieldValue(activeLocale, field.key, e.target.value)}\n                        placeholder={baseVal || field.label}\n                      />\n                    ) : (\n                      <Input\n                        value={translatedVal}\n                        onChange={(e) => updateFieldValue(activeLocale, field.key, e.target.value)}\n                        placeholder={baseVal || field.label}\n                      />\n                    )}\n                  </td>\n                </tr>\n              )\n            })}\n          </tbody>\n        </table>\n      </div>\n    )\n  }\n\n  React.useEffect(() => {\n    const handler = (e: KeyboardEvent) => {\n      if ((e.metaKey || e.ctrlKey) && e.key === 'Enter') {\n        e.preventDefault()\n        if (entityType && recordId && !mutation.isPending) mutation.mutate()\n      }\n    }\n    document.addEventListener('keydown', handler)\n    return () => document.removeEventListener('keydown', handler)\n  }, [entityType, recordId, mutation])\n\n  if (compact) {\n    return (\n      <div className=\"space-y-3\">\n        {renderLocaleTabs()}\n        {renderFieldTable()}\n        <div className=\"flex justify-end\">\n          <Button\n            type=\"button\"\n            size=\"sm\"\n            onClick={() => mutation.mutate()}\n            disabled={mutation.isPending || !entityType || !recordId}\n            data-testid=\"translations-save\"\n          >\n            <Save className=\"mr-2 h-3 w-3\" />\n            {mutation.isPending\n              ? t('translations.manager.actions.saving', 'Saving...')\n              : t('translations.manager.actions.save', 'Save translations')}\n          </Button>\n        </div>\n      </div>\n    )\n  }\n\n  return (\n    <div className=\"space-y-6\">\n      <div className=\"flex flex-col gap-3 rounded-lg border bg-card p-4 shadow-sm\">\n        <div className=\"space-y-2\">\n          <h2 className=\"text-xl font-semibold\">{t('translations.manager.title', 'Translations')}</h2>\n          <p className=\"text-sm text-muted-foreground\">\n            {t('translations.manager.description', 'Manage translations for entity records across supported locales.')}\n          </p>\n        </div>\n\n        {!isEmbedded && (\n          <div className=\"flex flex-col gap-4 sm:flex-row sm:items-start\">\n            <div className=\"flex-1 space-y-3\">\n              <div>\n                <label className=\"text-xs text-muted-foreground\">\n                  {t('translations.manager.selectEntity', 'Choose entity')}\n                </label>\n                <div className=\"mt-1\">\n                  <ComboboxInput\n                    value={selectedEntityType}\n                    onChange={(next) => {\n                      setSelectedEntityType(next)\n                      setSelectedRecordId('')\n                      hasUserEditedRef.current = false\n                      setHasUserEdited(false)\n                    }}\n                    placeholder={t('translations.manager.placeholder', 'Select an entity')}\n                    suggestions={entitySuggestions}\n                    resolveLabel={resolveEntityLabel}\n                    disabled={loadingEntities || !!entitiesError}\n                  />\n                </div>\n                {entitiesError && (\n                  <p className=\"mt-1 text-xs text-red-600\">\n                    {t('translations.manager.errors.loadEntities', 'Failed to load entities')}\n                  </p>\n                )}\n              </div>\n              {renderRecordPicker()}\n            </div>\n          </div>\n        )}\n\n        <div className=\"rounded-lg border bg-background/80 p-4\">\n          {renderLocaleTabs()}\n          <div className=\"mt-3\">\n            {renderFieldTable()}\n          </div>\n        </div>\n\n        <div className=\"flex justify-end\">\n          <Button\n            type=\"button\"\n            onClick={() => mutation.mutate()}\n            disabled={mutation.isPending || loadingEntities || !!entitiesError || !entityType || !recordId}\n            data-testid=\"translations-save\"\n          >\n            <Save className=\"mr-2 h-4 w-4\" />\n            {mutation.isPending\n              ? t('translations.manager.actions.saving', 'Saving...')\n              : t('translations.manager.actions.save', 'Save translations')}\n          </Button>\n        </div>\n      </div>\n    </div>\n  )\n}\n\nexport function LocaleManager() {\n  const t = useT()\n  const queryClient = useQueryClient()\n  const { data: locales = [], isLoading } = useTranslationLocales()\n  const [newLocale, setNewLocale] = React.useState('')\n\n  const mutation = useMutation({\n    mutationFn: async (updatedLocales: string[]) => {\n      const res = await apiCall<{ locales: string[] }>('/api/translations/locales', {\n        method: 'PUT',\n        headers: { 'content-type': 'application/json' },\n        body: JSON.stringify({ locales: updatedLocales }),\n      })\n      if (!res.ok) throw new Error('Failed to save locales')\n      return res.result?.locales ?? updatedLocales\n    },\n    onSuccess: (result) => {\n      queryClient.setQueryData(['translation-locales'], result)\n      flash(t('translations.locales.flash.saved', 'Locales updated'), 'success')\n    },\n    onError: () => {\n      flash(t('translations.locales.flash.error', 'Failed to update locales'), 'error')\n    },\n  })\n\n  const availableLocales = React.useMemo(\n    () => ISO_639_1.filter((entry) => !locales.includes(entry.code)).map((entry) => ({\n      value: entry.code,\n      label: `${entry.code.toUpperCase()} \u2014 ${entry.label}`,\n    })),\n    [locales],\n  )\n\n  const addLocale = () => {\n    const code = newLocale.toLowerCase().trim()\n    if (!code || !isValidIso639(code) || locales.includes(code)) return\n    mutation.mutate([...locales, code])\n    setNewLocale('')\n  }\n\n  const removeLocale = (locale: string) => {\n    if (locales.length <= 1) return\n    mutation.mutate(locales.filter((l) => l !== locale))\n  }\n\n  if (isLoading) {\n    return <LoadingMessage label={t('translations.locales.loading', 'Loading locales...')} className=\"border-0 bg-transparent p-4\" />\n  }\n\n  return (\n    <div className=\"flex flex-col gap-3 rounded-lg border bg-card p-4 shadow-sm\">\n      <div className=\"space-y-1\">\n        <h3 className=\"text-lg font-semibold\">{t('translations.locales.title', 'Supported locales')}</h3>\n        <p className=\"text-sm text-muted-foreground\">\n          {t('translations.locales.description', 'Configure which locales are available for translations. Add ISO language codes (e.g. fr, it, ja, zh).')}\n        </p>\n      </div>\n\n      <div className=\"flex flex-wrap gap-2\">\n        {locales.map((locale) => (\n          <span\n            key={locale}\n            className=\"inline-flex items-center gap-1.5 rounded-full border bg-muted/50 px-3 py-1 text-sm font-medium\"\n            title={getIso639Label(locale) ?? locale}\n          >\n            {locale.toUpperCase()}{getIso639Label(locale) ? ` \u2014 ${getIso639Label(locale)}` : ''}\n            {locales.length > 1 && (\n              <button\n                type=\"button\"\n                className=\"rounded-full p-0.5 text-muted-foreground hover:text-foreground transition-colors\"\n                onClick={() => removeLocale(locale)}\n                disabled={mutation.isPending}\n              >\n                <X className=\"h-3 w-3\" />\n              </button>\n            )}\n          </span>\n        ))}\n      </div>\n\n      <div className=\"flex gap-2 items-center\">\n        <div className=\"max-w-[240px] flex-1\">\n          <ComboboxInput\n            value={newLocale}\n            onChange={setNewLocale}\n            placeholder={t('translations.locales.addPlaceholder', 'Search language...')}\n            suggestions={availableLocales}\n            resolveLabel={(value) => {\n              const label = getIso639Label(value)\n              return label ? `${value.toUpperCase()} \u2014 ${label}` : value.toUpperCase()\n            }}\n          />\n        </div>\n        <Button\n          variant=\"outline\"\n          size=\"sm\"\n          onClick={addLocale}\n          disabled={mutation.isPending || !newLocale.trim() || !isValidIso639(newLocale) || locales.includes(newLocale.toLowerCase().trim())}\n        >\n          <Plus className=\"mr-1 h-3 w-3\" />\n          {t('translations.locales.add', 'Add')}\n        </Button>\n      </div>\n    </div>\n  )\n}\n"],
+  "mappings": ";AA6RM,SACE,KADF;AA3RN,YAAY,WAAW;AACvB,SAAS,UAAU,aAAa,sBAAsB;AACtD,SAAS,cAAc;AACvB,SAAS,aAAa;AACtB,SAAS,qBAAqB;AAC9B,SAAS,gBAAgB,oBAAoB;AAC7C,SAAS,aAAa;AACtB,SAAS,SAAS,4BAA4B;AAC9C,SAAS,0BAA0B;AACnC,SAAS,MAAM,MAAM,SAAS;AAC9B,SAAS,mCAAmC;AAC5C,SAAS,YAAY;AACrB,SAAS,WAAW,sBAAsB;AAC1C,SAAS,WAAW,eAAe,sBAAsB;AACzD,SAAS,mBAAmB,oBAAoB,gBAAgB,wBAAwB;AACxF,SAAS,wBAAwB;AAsBjC,SAAS,wBAAwB;AAC/B,SAAO,SAAmB;AAAA,IACxB,UAAU,CAAC,qBAAqB;AAAA,IAChC,SAAS,YAAY;AACnB,YAAM,MAAM,MAAM,QAA+B,2BAA2B;AAC5E,UAAI,CAAC,IAAI,GAAI,QAAO,CAAC,GAAG,cAAc;AACtC,aAAO,MAAM,QAAQ,IAAI,QAAQ,OAAO,KAAK,IAAI,OAAO,QAAQ,SAAS,IACrE,IAAI,OAAO,UACX,CAAC,GAAG,cAAc;AAAA,IACxB;AAAA,IACA,WAAW;AAAA,EACb,CAAC;AACH;AAEO,SAAS,mBAAmB;AAAA,EACjC,YAAY;AAAA,EACZ,UAAU;AAAA,EACV,YAAY;AAAA,EACZ,oBAAoB;AAAA,EACpB,OAAO;AAAA,EACP,UAAU;AACZ,GAA4B;AAC1B,QAAM,IAAI,KAAK;AACf,QAAM,eAAe,4BAA4B;AACjD,QAAM,aAAa,SAAS;AAE5B,QAAM,CAAC,oBAAoB,qBAAqB,IAAI,MAAM,SAAS,kBAAkB,EAAE;AACvF,QAAM,CAAC,kBAAkB,mBAAmB,IAAI,MAAM,SAAS,gBAAgB,EAAE;AACjF,QAAM,CAAC,cAAc,eAAe,IAAI,MAAM,SAAS,EAAE;AACzD,QAAM,CAAC,oBAAoB,qBAAqB,IAAI,MAAM,SAAiD,CAAC,CAAC;AAC7G,QAAM,wBAAwB,MAAM,OAA+C,CAAC,CAAC;AACrF,QAAM,CAAC,eAAe,gBAAgB,IAAI,MAAM,SAAS,KAAK;AAC9D,QAAM,mBAAmB,MAAM,OAAO,KAAK;AAE3C,QAAM,aAAa,aAAc,kBAAkB,KAAM;AACzD,QAAM,WAAW,aAAc,gBAAgB,KAAM;AAErD,QAAM,EAAE,MAAM,UAAU,CAAC,GAAG,cAAc,EAAE,IAAI,sBAAsB;AAEtE,QAAM,UAAU,MAAM;AACpB,QAAI,QAAQ,SAAS,MAAM,CAAC,gBAAgB,CAAC,QAAQ,SAAS,YAAY,IAAI;AAC5E,sBAAgB,QAAQ,CAAC,CAAC;AAAA,IAC5B;AAAA,EACF,GAAG,CAAC,SAAS,YAAY,CAAC;AAE1B,QAAM,UAAU,MAAM;AACpB,QAAI,cAAc,eAAgB,uBAAsB,cAAc;AAAA,EACxE,GAAG,CAAC,YAAY,cAAc,CAAC;AAE/B,QAAM,UAAU,MAAM;AACpB,QAAI,cAAc,aAAc,qBAAoB,YAAY;AAAA,EAClE,GAAG,CAAC,YAAY,YAAY,CAAC;AAE7B,QAAM,EAAE,MAAM,UAAU,WAAW,iBAAiB,OAAO,cAAc,IAAI,SAAoC;AAAA,IAC/G,UAAU,CAAC,iBAAiB,YAAY;AAAA,IACxC,SAAS,CAAC;AAAA,IACV,SAAS,YACP,qBAAqB,0BAA0B,QAAW;AAAA,MACxD,cAAc,EAAE,4CAA4C,yBAAyB;AAAA,IACvF,CAAC;AAAA,EACL,CAAC;AAED,QAAM,oBAAoB,MAAM;AAAA,IAC9B,OACG,UAAU,SAAS,CAAC,GAAG,IAAI,CAAC,UAAU;AAAA,MACrC,OAAO,KAAK;AAAA,MACZ,OAAO,kBAAkB,KAAK,UAAU,KAAK,KAAK;AAAA,MAClD,aAAa,KAAK;AAAA,IACpB,EAAE;AAAA,IACJ,CAAC,QAAQ;AAAA,EACX;AAEA,QAAM,qBAAqB,MAAM;AAAA,IAC/B,CAAC,UAAkB;AACjB,YAAM,QAAQ,UAAU,OAAO,KAAK,CAAC,MAAM,EAAE,aAAa,KAAK;AAC/D,aAAO,QAAQ,kBAAkB,MAAM,UAAU,MAAM,KAAK,IAAI,kBAAkB,KAAK;AAAA,IACzF;AAAA,IACA,CAAC,QAAQ;AAAA,EACX;AAEA,QAAM,UAAU,MAAM,QAAQ,MAAM,aAAa,mBAAmB,UAAU,IAAI,MAAM,CAAC,UAAU,CAAC;AAEpG,QAAM,wBAAwB,MAAM;AAAA,IAClC,OAAO,UAAmB;AACxB,UAAI,CAAC,cAAc,CAAC,QAAS,QAAO,CAAC;AACrC,YAAM,MAAM,GAAG,OAAO,eAAe,QAAQ,WAAW,mBAAmB,KAAK,CAAC,KAAK,EAAE;AACxF,YAAM,MAAM,MAAM,QAAmD,GAAG;AACxE,UAAI,CAAC,IAAI,GAAI,QAAO,CAAC;AACrB,YAAM,QAAQ,IAAI,QAAQ,SAAS,CAAC;AACpC,aAAO,MAAM,IAAI,CAAC,UAAU;AAAA,QAC1B,OAAO,OAAO,KAAK,MAAM,EAAE;AAAA,QAC3B,OAAO,eAAe,IAAI;AAAA,MAC5B,EAAE;AAAA,IACJ;AAAA,IACA,CAAC,YAAY,OAAO;AAAA,EACtB;AAEA,QAAM,EAAE,MAAM,WAAW,IAAI,SAAyC;AAAA,IACpE,UAAU,CAAC,2BAA2B,YAAY,UAAU,SAAS,YAAY;AAAA,IACjF,SAAS,CAAC,cAAc,CAAC,CAAC,cAAc,CAAC,CAAC,YAAY,CAAC,CAAC;AAAA,IACxD,SAAS,YAAY;AACnB,YAAM,MAAM,MAAM;AAAA;AAAA,QAEhB,GAAG,OAAO,OAAO,mBAAmB,QAAQ,CAAC,QAAQ,mBAAmB,QAAQ,CAAC;AAAA,MACnF;AACA,UAAI,CAAC,IAAI,GAAI,QAAO;AACpB,YAAM,QAAQ,IAAI,QAAQ;AAC1B,aAAO,MAAM,QAAQ,KAAK,KAAK,MAAM,SAAS,IAAI,MAAM,CAAC,IAAI;AAAA,IAC/D;AAAA,EACF,CAAC;AAED,QAAM,aAAa,aAAc,kBAAkB,CAAC,IAAM,cAAc,CAAC;AAEzE,QAAM,qBAAqB,MAAM;AAAA,IAC/B,CAAC,UAAkB;AACjB,UAAI,WAAY,QAAO,eAAe,UAAU;AAChD,aAAO;AAAA,IACT;AAAA,IACA,CAAC,UAAU;AAAA,EACb;AAEA,QAAM,EAAE,MAAM,YAAY,CAAC,GAAG,WAAW,iBAAiB,IAAI,mBAAmB,aAAa,CAAC,UAAU,IAAI,CAAC,GAAG;AAAA,IAC/G,SAAS,CAAC,CAAC;AAAA,EACb,CAAC;AAED,QAAM,YAAY,MAAM;AAAA,IACtB,MAAM,iBAAiB,YAAY,wBAAwB,SAAiE;AAAA,IAC5H,CAAC,YAAY,wBAAwB,SAAS;AAAA,EAChD;AAEA,QAAM;AAAA,IACJ,MAAM;AAAA,IACN,WAAW;AAAA,IACX,SAAS;AAAA,IACT,SAAS;AAAA,EACX,IAAI,SAAsC;AAAA,IACxC,UAAU,CAAC,sBAAsB,YAAY,UAAU,YAAY;AAAA,IACnE,SAAS,CAAC,CAAC,cAAc,CAAC,CAAC;AAAA,IAC3B,SAAS,YAAY;AACnB,YAAM,MAAM,MAAM;AAAA,QAChB,qBAAqB,mBAAmB,UAAU,CAAC,IAAI,mBAAmB,QAAQ,CAAC;AAAA,MACrF;AACA,UAAI,CAAC,IAAI,IAAI;AACX,YAAI,IAAI,UAAU,WAAW,IAAK,QAAO;AACzC,eAAO;AAAA,MACT;AACA,aAAO,IAAI,UAAU;AAAA,IACvB;AAAA,EACF,CAAC;AAED,QAAM,uBAAuB,MAAM,QAAQ,MAAM,KAAK,UAAU,mBAAmB,IAAI,GAAG,CAAC,eAAe,CAAC;AAC3G,QAAM,8BAA8B,MAAM,OAAsB,IAAI;AAEpE,QAAM,UAAU,MAAM;AACpB,UAAM,MAAM;AACZ,QAAI,QAAQ,4BAA4B,WAAW,iBAAiB,QAAS;AAC7E,gCAA4B,UAAU;AAEtC,QAAI,CAAC,iBAAiB,cAAc;AAClC,UAAI,CAAC,iBAAiB,SAAS;AAC7B,8BAAsB,UAAU,CAAC;AACjC,8BAAsB,CAAC,CAAC;AAAA,MAC1B;AACA;AAAA,IACF;AAEA,UAAM,SAAiD,CAAC;AACxD,eAAW,CAAC,QAAQ,MAAM,KAAK,OAAO,QAAQ,gBAAgB,YAAY,GAAG;AAC3E,UAAI,CAAC,UAAU,OAAO,WAAW,SAAU;AAC3C,aAAO,MAAM,IAAI,CAAC;AAClB,iBAAW,CAAC,KAAK,GAAG,KAAK,OAAO,QAAQ,MAAM,GAAG;AAC/C,eAAO,MAAM,EAAE,GAAG,IAAI,OAAO,QAAQ,WAAW,MAAM;AAAA,MACxD;AAAA,IACF;AACA,QAAI,CAAC,iBAAiB,SAAS;AAC7B,4BAAsB,UAAU;AAChC,4BAAsB,MAAM;AAAA,IAC9B;AAAA,EACF,GAAG,CAAC,sBAAsB,eAAe,CAAC;AAE1C,QAAM,WAAW,YAAY;AAAA,IAC3B,YAAY,YAAY;AACtB,UAAI,CAAC,cAAc,CAAC,UAAU;AAC5B,cAAM,IAAI,MAAM,EAAE,4CAA4C,2CAA2C,CAAC;AAAA,MAC5G;AACA,YAAM,OAAsD,CAAC;AAC7D,iBAAW,CAAC,QAAQ,MAAM,KAAK,OAAO,QAAQ,sBAAsB,OAAO,GAAG;AAC5E,cAAM,eAA8C,CAAC;AACrD,YAAI,YAAY;AAChB,mBAAW,CAAC,KAAK,GAAG,KAAK,OAAO,QAAQ,MAAM,GAAG;AAC/C,cAAI,OAAO,IAAI,KAAK,EAAE,SAAS,GAAG;AAChC,yBAAa,GAAG,IAAI,IAAI,KAAK;AAC7B,wBAAY;AAAA,UACd;AAAA,QACF;AACA,YAAI,UAAW,MAAK,MAAM,IAAI;AAAA,MAChC;AACA,UAAI,OAAO,KAAK,IAAI,EAAE,WAAW,GAAG;AAClC,gBAAQ,KAAK,6FAAwF;AACrG,cAAM,IAAI,MAAM,EAAE,6CAA6C,kDAA6C,CAAC;AAAA,MAC/G;AACA,YAAM,MAAM,MAAM;AAAA,QAChB,qBAAqB,mBAAmB,UAAU,CAAC,IAAI,mBAAmB,QAAQ,CAAC;AAAA,QACnF;AAAA,UACE,QAAQ;AAAA,UACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,UAC9C,MAAM,KAAK,UAAU,IAAI;AAAA,QAC3B;AAAA,MACF;AACA,UAAI,CAAC,IAAI,IAAI;AACX,cAAM,IAAI,MAAM,EAAE,oCAAoC,6BAA6B,CAAC;AAAA,MACtF;AACA,aAAO;AAAA,IACT;AAAA,IACA,WAAW,MAAM;AACf,YAAM,EAAE,oCAAoC,oBAAoB,GAAG,SAAS;AAC5E,uBAAiB,UAAU;AAC3B,uBAAiB,KAAK;AACtB,WAAK,mBAAmB;AAAA,IAC1B;AAAA,IACA,SAAS,CAAC,QAAiB;AACzB,YAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,EAAE,oCAAoC,6BAA6B;AACxH,YAAM,SAAS,OAAO;AAAA,IACxB;AAAA,EACF,CAAC;AAED,QAAM,mBAAmB,CAAC,QAAgB,UAAkB,UAAkB;AAC5E,qBAAiB,UAAU;AAC3B,qBAAiB,IAAI;AACrB,UAAM,OAAO;AAAA,MACX,GAAG,sBAAsB;AAAA,MACzB,CAAC,MAAM,GAAG;AAAA,QACR,GAAG,sBAAsB,QAAQ,MAAM;AAAA,QACvC,CAAC,QAAQ,GAAG;AAAA,MACd;AAAA,IACF;AACA,0BAAsB,UAAU;AAChC,0BAAsB,IAAI;AAAA,EAC5B;AAEA,QAAM,eAAe,CAAC,aAA6B,iBAAiB,YAAY,QAAQ;AAExF,QAAM,qBAAqB,MAAM;AAC/B,QAAI,WAAY,QAAO;AAEvB,WACE,qBAAC,SAAI,WAAU,aACb;AAAA,0BAAC,WAAM,WAAU,iCACd,YAAE,qCAAqC,eAAe,GACzD;AAAA,MACA;AAAA,QAAC;AAAA;AAAA,UACC,OAAO;AAAA,UACP,UAAU,CAAC,SAAS;AAClB,gCAAoB,IAAI;AACxB,6BAAiB,UAAU;AAC3B,6BAAiB,KAAK;AAAA,UACxB;AAAA,UACA,aAAa,EAAE,sCAAsC,mBAAmB;AAAA,UACxE,iBAAiB;AAAA,UACjB,cAAc;AAAA,UACd,mBAAiB;AAAA,UACjB,UAAU,CAAC;AAAA;AAAA,MACb;AAAA,OACF;AAAA,EAEJ;AAEA,QAAM,mBAAmB,MACvB,oBAAC,SAAI,WAAU,uBACZ,kBAAQ,IAAI,CAAC,WAAW;AACvB,UAAM,WAAW,iBAAiB;AAClC,WACE;AAAA,MAAC;AAAA;AAAA,QAEC,MAAK;AAAA,QACL,cAAY,WAAW,WAAW;AAAA,QAClC,eAAa;AAAA,QACb,WAAW,qDACT,WACI,2CACA,6CACN;AAAA,QACA,SAAS,MAAM,gBAAgB,MAAM;AAAA,QAEpC,iBAAO,YAAY;AAAA;AAAA,MAXf;AAAA,IAYP;AAAA,EAEJ,CAAC,GACH;AAGF,QAAM,mBAAmB,MAAM;AAC7B,QAAI,CAAC,cAAc,CAAC,UAAU;AAC5B,aACE,oBAAC,SAAI,WAAU,qEACZ,YAAE,oCAAoC,qDAAqD,GAC9F;AAAA,IAEJ;AACA,QAAI,sBAAsB,kBAAkB;AAC1C,aACE;AAAA,QAAC;AAAA;AAAA,UACC,OAAO,EAAE,4CAA4C,yBAAyB;AAAA,UAC9E,WAAU;AAAA;AAAA,MACZ;AAAA,IAEJ;AACA,QAAI,kBAAkB;AACpB,aACE;AAAA,QAAC;AAAA;AAAA,UACC,OAAO,EAAE,+CAA+C,6BAA6B;AAAA,UACrF,QACE,oBAAC,UAAO,SAAQ,WAAU,MAAK,MAAK,SAAS,MAAM,KAAK,mBAAmB,GACxE,YAAE,sCAAsC,OAAO,GAClD;AAAA;AAAA,MAEJ;AAAA,IAEJ;AACA,QAAI,CAAC,UAAU,QAAQ;AACrB,aACE,oBAAC,SAAI,WAAU,qEACZ,YAAE,iCAAiC,oDAAoD,GAC1F;AAAA,IAEJ;AAEA,UAAM,qBAAqB,mBAAmB,YAAY,KAAK,CAAC;AAEhE,WACE,oBAAC,SAAI,WAAU,mBACb,+BAAC,WAAM,WAAU,gCACf;AAAA,0BAAC,WACC,+BAAC,QAAG,WAAU,yDACZ;AAAA,4BAAC,QAAG,WAAU,iCACX,YAAE,qCAAqC,OAAO,GACjD;AAAA,QACC,CAAC,WACA,oBAAC,QAAG,WAAU,uBACX,YAAE,yCAAyC,YAAY,GAC1D;AAAA,QAEF,qBAAC,QAAG,WAAU,uBACX;AAAA,YAAE,2CAA2C,aAAa;AAAA,UAAE;AAAA,UAAG,aAAa,YAAY;AAAA,UAAE;AAAA,WAC7F;AAAA,SACF,GACF;AAAA,MACA,oBAAC,WACE,oBAAU,IAAI,CAAC,UAAU;AACxB,cAAM,UAAU,aAAa,MAAM,GAAG;AACtC,cAAM,gBAAgB,mBAAmB,MAAM,GAAG,KAAK;AAEvD,eACE,qBAAC,QAAmB,WAAU,YAC5B;AAAA,8BAAC,QAAG,WAAU,iEACX,gBAAM,OACT;AAAA,UACC,CAAC,WACA,oBAAC,QAAG,WAAU,mEACX,oBACC,oBAAC,UAAK,WAAU,gBAAgB,mBAAQ,IAExC,oBAAC,UAAK,WAAU,4BAA2B,eAAC,GAEhD;AAAA,UAEF,oBAAC,QAAG,WAAU,uBACX,gBAAM,YACL;AAAA,YAAC;AAAA;AAAA,cACC,WAAU;AAAA,cACV,MAAM;AAAA,cACN,OAAO;AAAA,cACP,UAAU,CAAC,MAAM,iBAAiB,cAAc,MAAM,KAAK,EAAE,OAAO,KAAK;AAAA,cACzE,aAAa,WAAW,MAAM;AAAA;AAAA,UAChC,IAEA;AAAA,YAAC;AAAA;AAAA,cACC,OAAO;AAAA,cACP,UAAU,CAAC,MAAM,iBAAiB,cAAc,MAAM,KAAK,EAAE,OAAO,KAAK;AAAA,cACzE,aAAa,WAAW,MAAM;AAAA;AAAA,UAChC,GAEJ;AAAA,aA7BO,MAAM,GA8Bf;AAAA,MAEJ,CAAC,GACH;AAAA,OACF,GACF;AAAA,EAEJ;AAEA,QAAM,UAAU,MAAM;AACpB,UAAM,UAAU,CAAC,MAAqB;AACpC,WAAK,EAAE,WAAW,EAAE,YAAY,EAAE,QAAQ,SAAS;AACjD,UAAE,eAAe;AACjB,YAAI,cAAc,YAAY,CAAC,SAAS,UAAW,UAAS,OAAO;AAAA,MACrE;AAAA,IACF;AACA,aAAS,iBAAiB,WAAW,OAAO;AAC5C,WAAO,MAAM,SAAS,oBAAoB,WAAW,OAAO;AAAA,EAC9D,GAAG,CAAC,YAAY,UAAU,QAAQ,CAAC;AAEnC,MAAI,SAAS;AACX,WACE,qBAAC,SAAI,WAAU,aACZ;AAAA,uBAAiB;AAAA,MACjB,iBAAiB;AAAA,MAClB,oBAAC,SAAI,WAAU,oBACb;AAAA,QAAC;AAAA;AAAA,UACC,MAAK;AAAA,UACL,MAAK;AAAA,UACL,SAAS,MAAM,SAAS,OAAO;AAAA,UAC/B,UAAU,SAAS,aAAa,CAAC,cAAc,CAAC;AAAA,UAChD,eAAY;AAAA,UAEZ;AAAA,gCAAC,QAAK,WAAU,gBAAe;AAAA,YAC9B,SAAS,YACN,EAAE,uCAAuC,WAAW,IACpD,EAAE,qCAAqC,mBAAmB;AAAA;AAAA;AAAA,MAChE,GACF;AAAA,OACF;AAAA,EAEJ;AAEA,SACE,oBAAC,SAAI,WAAU,aACb,+BAAC,SAAI,WAAU,+DACb;AAAA,yBAAC,SAAI,WAAU,aACb;AAAA,0BAAC,QAAG,WAAU,yBAAyB,YAAE,8BAA8B,cAAc,GAAE;AAAA,MACvF,oBAAC,OAAE,WAAU,iCACV,YAAE,oCAAoC,kEAAkE,GAC3G;AAAA,OACF;AAAA,IAEC,CAAC,cACA,oBAAC,SAAI,WAAU,kDACb,+BAAC,SAAI,WAAU,oBACb;AAAA,2BAAC,SACC;AAAA,4BAAC,WAAM,WAAU,iCACd,YAAE,qCAAqC,eAAe,GACzD;AAAA,QACA,oBAAC,SAAI,WAAU,QACb;AAAA,UAAC;AAAA;AAAA,YACC,OAAO;AAAA,YACP,UAAU,CAAC,SAAS;AAClB,oCAAsB,IAAI;AAC1B,kCAAoB,EAAE;AACtB,+BAAiB,UAAU;AAC3B,+BAAiB,KAAK;AAAA,YACxB;AAAA,YACA,aAAa,EAAE,oCAAoC,kBAAkB;AAAA,YACrE,aAAa;AAAA,YACb,cAAc;AAAA,YACd,UAAU,mBAAmB,CAAC,CAAC;AAAA;AAAA,QACjC,GACF;AAAA,QACC,iBACC,oBAAC,OAAE,WAAU,6BACV,YAAE,4CAA4C,yBAAyB,GAC1E;AAAA,SAEJ;AAAA,MACC,mBAAmB;AAAA,OACtB,GACF;AAAA,IAGF,qBAAC,SAAI,WAAU,0CACZ;AAAA,uBAAiB;AAAA,MAClB,oBAAC,SAAI,WAAU,QACZ,2BAAiB,GACpB;AAAA,OACF;AAAA,IAEA,oBAAC,SAAI,WAAU,oBACb;AAAA,MAAC;AAAA;AAAA,QACC,MAAK;AAAA,QACL,SAAS,MAAM,SAAS,OAAO;AAAA,QAC/B,UAAU,SAAS,aAAa,mBAAmB,CAAC,CAAC,iBAAiB,CAAC,cAAc,CAAC;AAAA,QACtF,eAAY;AAAA,QAEZ;AAAA,8BAAC,QAAK,WAAU,gBAAe;AAAA,UAC9B,SAAS,YACN,EAAE,uCAAuC,WAAW,IACpD,EAAE,qCAAqC,mBAAmB;AAAA;AAAA;AAAA,IAChE,GACF;AAAA,KACF,GACF;AAEJ;AAEO,SAAS,gBAAgB;AAC9B,QAAM,IAAI,KAAK;AACf,QAAM,cAAc,eAAe;AACnC,QAAM,EAAE,MAAM,UAAU,CAAC,GAAG,UAAU,IAAI,sBAAsB;AAChE,QAAM,CAAC,WAAW,YAAY,IAAI,MAAM,SAAS,EAAE;AAEnD,QAAM,WAAW,YAAY;AAAA,IAC3B,YAAY,OAAO,mBAA6B;AAC9C,YAAM,MAAM,MAAM,QAA+B,6BAA6B;AAAA,QAC5E,QAAQ;AAAA,QACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,QAC9C,MAAM,KAAK,UAAU,EAAE,SAAS,eAAe,CAAC;AAAA,MAClD,CAAC;AACD,UAAI,CAAC,IAAI,GAAI,OAAM,IAAI,MAAM,wBAAwB;AACrD,aAAO,IAAI,QAAQ,WAAW;AAAA,IAChC;AAAA,IACA,WAAW,CAAC,WAAW;AACrB,kBAAY,aAAa,CAAC,qBAAqB,GAAG,MAAM;AACxD,YAAM,EAAE,oCAAoC,iBAAiB,GAAG,SAAS;AAAA,IAC3E;AAAA,IACA,SAAS,MAAM;AACb,YAAM,EAAE,oCAAoC,0BAA0B,GAAG,OAAO;AAAA,IAClF;AAAA,EACF,CAAC;AAED,QAAM,mBAAmB,MAAM;AAAA,IAC7B,MAAM,UAAU,OAAO,CAAC,UAAU,CAAC,QAAQ,SAAS,MAAM,IAAI,CAAC,EAAE,IAAI,CAAC,WAAW;AAAA,MAC/E,OAAO,MAAM;AAAA,MACb,OAAO,GAAG,MAAM,KAAK,YAAY,CAAC,WAAM,MAAM,KAAK;AAAA,IACrD,EAAE;AAAA,IACF,CAAC,OAAO;AAAA,EACV;AAEA,QAAM,YAAY,MAAM;AACtB,UAAM,OAAO,UAAU,YAAY,EAAE,KAAK;AAC1C,QAAI,CAAC,QAAQ,CAAC,cAAc,IAAI,KAAK,QAAQ,SAAS,IAAI,EAAG;AAC7D,aAAS,OAAO,CAAC,GAAG,SAAS,IAAI,CAAC;AAClC,iBAAa,EAAE;AAAA,EACjB;AAEA,QAAM,eAAe,CAAC,WAAmB;AACvC,QAAI,QAAQ,UAAU,EAAG;AACzB,aAAS,OAAO,QAAQ,OAAO,CAAC,MAAM,MAAM,MAAM,CAAC;AAAA,EACrD;AAEA,MAAI,WAAW;AACb,WAAO,oBAAC,kBAAe,OAAO,EAAE,gCAAgC,oBAAoB,GAAG,WAAU,+BAA8B;AAAA,EACjI;AAEA,SACE,qBAAC,SAAI,WAAU,+DACb;AAAA,yBAAC,SAAI,WAAU,aACb;AAAA,0BAAC,QAAG,WAAU,yBAAyB,YAAE,8BAA8B,mBAAmB,GAAE;AAAA,MAC5F,oBAAC,OAAE,WAAU,iCACV,YAAE,oCAAoC,uGAAuG,GAChJ;AAAA,OACF;AAAA,IAEA,oBAAC,SAAI,WAAU,wBACZ,kBAAQ,IAAI,CAAC,WACZ;AAAA,MAAC;AAAA;AAAA,QAEC,WAAU;AAAA,QACV,OAAO,eAAe,MAAM,KAAK;AAAA,QAEhC;AAAA,iBAAO,YAAY;AAAA,UAAG,eAAe,MAAM,IAAI,WAAM,eAAe,MAAM,CAAC,KAAK;AAAA,UAChF,QAAQ,SAAS,KAChB;AAAA,YAAC;AAAA;AAAA,cACC,MAAK;AAAA,cACL,WAAU;AAAA,cACV,SAAS,MAAM,aAAa,MAAM;AAAA,cAClC,UAAU,SAAS;AAAA,cAEnB,8BAAC,KAAE,WAAU,WAAU;AAAA;AAAA,UACzB;AAAA;AAAA;AAAA,MAbG;AAAA,IAeP,CACD,GACH;AAAA,IAEA,qBAAC,SAAI,WAAU,2BACb;AAAA,0BAAC,SAAI,WAAU,wBACb;AAAA,QAAC;AAAA;AAAA,UACC,OAAO;AAAA,UACP,UAAU;AAAA,UACV,aAAa,EAAE,uCAAuC,oBAAoB;AAAA,UAC1E,aAAa;AAAA,UACb,cAAc,CAAC,UAAU;AACvB,kBAAM,QAAQ,eAAe,KAAK;AAClC,mBAAO,QAAQ,GAAG,MAAM,YAAY,CAAC,WAAM,KAAK,KAAK,MAAM,YAAY;AAAA,UACzE;AAAA;AAAA,MACF,GACF;AAAA,MACA;AAAA,QAAC;AAAA;AAAA,UACC,SAAQ;AAAA,UACR,MAAK;AAAA,UACL,SAAS;AAAA,UACT,UAAU,SAAS,aAAa,CAAC,UAAU,KAAK,KAAK,CAAC,cAAc,SAAS,KAAK,QAAQ,SAAS,UAAU,YAAY,EAAE,KAAK,CAAC;AAAA,UAEjI;AAAA,gCAAC,QAAK,WAAU,gBAAe;AAAA,YAC9B,EAAE,4BAA4B,KAAK;AAAA;AAAA;AAAA,MACtC;AAAA,OACF;AAAA,KACF;AAEJ;",
   "names": []
 }