@open-mercato/core 0.6.4-develop.3996.1.430e257cfc → 0.6.4-develop.4011.1.4f3ed9ae3e

package/dist/modules/auth/components/AclEditor.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/auth/components/AclEditor.tsx"],
-  "sourcesContent": ["\"use client\"\nimport * as React from 'react'\nimport { Button } from '@open-mercato/ui/primitives/button'\nimport { apiCall } from '@open-mercato/ui/backend/utils/apiCall'\nimport Link from 'next/link'\nimport { hasFeature, matchFeature } from '@open-mercato/shared/security/features'\nimport { useT } from '@open-mercato/shared/lib/i18n/context'\n\nfunction toTitleCase(value: string): string {\n  return value.replace(/[-_.]/g, ' ').replace(/\\b\\w/g, (char) => char.toUpperCase())\n}\n\nfunction normalizeFeatureArray(input: unknown): string[] {\n  if (!Array.isArray(input)) return []\n  const dedup = new Set<string>()\n  for (const value of input) {\n    if (typeof value !== 'string') continue\n    const trimmed = value.trim()\n    if (!trimmed) continue\n    dedup.add(trimmed)\n  }\n  return Array.from(dedup)\n}\n\nfunction isTenantRestrictedFeature(feature: string): boolean {\n  if (feature === '*' || feature === 'directory.*') return true\n  if (feature.startsWith('directory.tenants')) return true\n  return false\n}\n\nfunction formatWildcardLabel(moduleId: string, wildcard: string): string {\n  if (!wildcard.endsWith('.*')) return wildcard\n  const prefix = `${moduleId}.`\n  const suffix = wildcard.startsWith(prefix) ? wildcard.slice(prefix.length, -2) : wildcard.slice(0, -2)\n  if (!suffix) return 'All features'\n  return `All ${suffix.split('.').map(toTitleCase).join(' / ')}`\n}\n\ntype Feature = { id: string; title: string; module: string }\ntype ModuleInfo = { id: string; title: string }\ntype RoleListItem = { id?: string | null; name?: string | null }\ntype RoleListResponse = { items?: RoleListItem[] }\ntype RoleSummary = { id: string; name: string }\n\nfunction buildRoleSummaries(items: RoleListItem[], allowedNames: string[]): RoleSummary[] {\n  const summaries: RoleSummary[] = []\n  for (const role of items) {\n    const name = typeof role?.name === 'string' ? role.name : ''\n    if (!name || !allowedNames.includes(name)) continue\n    const hasValidId = typeof role?.id === 'string' && role.id.length > 0\n    const id = hasValidId ? (role!.id as string) : name\n    summaries.push({ id, name })\n  }\n  return summaries\n}\n\nexport type AclData = {\n  isSuperAdmin: boolean\n  features: string[]\n  organizations: string[] | null\n}\n\ntype FeatureListResponse = { items?: Feature[]; modules?: ModuleInfo[] }\ntype AclPayload = {\n  hasCustomAcl?: boolean\n  isSuperAdmin?: boolean\n  features?: unknown\n  organizations?: unknown\n}\ntype OrganizationListResponse = { items?: Array<{ id?: string; name?: string }> }\n\nfunction normalizeOrganizationOptions(items: OrganizationListResponse['items']): Array<{ id: string; name: string }> {\n  if (!Array.isArray(items)) return []\n  return items.reduce<Array<{ id: string; name: string }>>((acc, org) => {\n    if (!org) return acc\n    const id = typeof org.id === 'string' && org.id.trim().length > 0 ? org.id : null\n    if (!id) return acc\n    const name = typeof org.name === 'string' && org.name.trim().length > 0 ? org.name : id\n    acc.push({ id, name })\n    return acc\n  }, [])\n}\n\nasync function readJsonOr<T>(\n  url: string,\n  init: RequestInit | undefined,\n  fallback: T,\n): Promise<T> {\n  const call = await apiCall<T>(url, init, { fallback })\n  if (!call.ok) return fallback\n  return call.result ?? fallback\n}\n\nexport function AclEditor({\n  kind,\n  targetId,\n  canEditOrganizations,\n  value,\n  onChange,\n  userRoles,\n  currentUserIsSuperAdmin,\n  tenantId,\n  preserveOnTenantChange = false,\n}: {\n  kind: 'user' | 'role'\n  targetId: string\n  canEditOrganizations: boolean\n  value?: AclData\n  onChange?: (data: AclData) => void\n  userRoles?: string[]\n  currentUserIsSuperAdmin?: boolean\n  tenantId?: string | null\n  preserveOnTenantChange?: boolean\n}) {\n  const actorIsSuperAdmin = !!currentUserIsSuperAdmin\n  const [loading, setLoading] = React.useState(true)\n  const [features, setFeatures] = React.useState<Feature[]>([])\n  const t = useT()\n  const [modules, setModules] = React.useState<ModuleInfo[]>([])\n  const [granted, setGranted] = React.useState<string[]>(() => {\n    const normalized = normalizeFeatureArray(value?.features)\n    return actorIsSuperAdmin ? normalized : normalized.filter((feature) => !isTenantRestrictedFeature(feature))\n  })\n  const [isSuperAdmin, setIsSuperAdmin] = React.useState(value?.isSuperAdmin || false)\n  const [organizations, setOrganizations] = React.useState<string[] | null>(value?.organizations ?? null)\n  const [orgOptions, setOrgOptions] = React.useState<{ id: string; name: string }[]>([])\n  const [hasCustomAcl, setHasCustomAcl] = React.useState(true)\n  const [overrideEnabled, setOverrideEnabled] = React.useState(false)\n  const [roleDetails, setRoleDetails] = React.useState<RoleSummary[]>([])\n\n  const actorSanitizeFeatures = React.useCallback(\n    (list: unknown): string[] => {\n      const normalized = normalizeFeatureArray(list)\n      if (actorIsSuperAdmin) return normalized\n      return normalized.filter((feature) => !isTenantRestrictedFeature(feature))\n    },\n    [actorIsSuperAdmin],\n  )\n\n  const updateGranted = React.useCallback(\n    (updater: (prev: string[]) => string[]) => {\n      setGranted((prev) => actorSanitizeFeatures(updater(prev)))\n    },\n    [actorSanitizeFeatures],\n  )\n\n  const tenantIdRef = React.useRef(tenantId)\n  React.useEffect(() => { tenantIdRef.current = tenantId }, [tenantId])\n  const hasMountedRef = React.useRef(false)\n\n  const fetchAclState = React.useCallback(async (forTenantId: string | null | undefined, cancelledRef: { current: boolean }) => {\n    try {\n      const aclQuery = new URLSearchParams()\n      aclQuery.set(kind === 'user' ? 'userId' : 'roleId', targetId)\n      if (forTenantId) aclQuery.set('tenantId', forTenantId)\n      const aclQueryString = aclQuery.toString()\n      const aclJson = await readJsonOr<AclPayload>(\n        `/api/auth/${kind === 'user' ? 'users' : 'roles'}/acl${aclQueryString ? `?${aclQueryString}` : ''}`,\n        undefined,\n        { hasCustomAcl: true, isSuperAdmin: false, features: [], organizations: null },\n      )\n      if (cancelledRef.current) return\n      const customAclExists = aclJson.hasCustomAcl !== false\n      setHasCustomAcl(customAclExists)\n      setOverrideEnabled(customAclExists)\n      setIsSuperAdmin(!!aclJson.isSuperAdmin)\n      setGranted(actorSanitizeFeatures(aclJson.features))\n      setOrganizations(aclJson.organizations == null ? null : Array.isArray(aclJson.organizations) ? aclJson.organizations : [])\n    } catch {}\n  }, [kind, targetId, actorSanitizeFeatures])\n\n  React.useEffect(() => {\n    const cancelled = { current: false }\n    async function load() {\n      setLoading(true)\n      try {\n        const fJson = await readJsonOr<FeatureListResponse>(\n          '/api/auth/features',\n          undefined,\n          { items: [], modules: [] },\n        )\n        if (!cancelled.current) {\n          setFeatures(fJson.items || [])\n          setModules(fJson.modules || [])\n        }\n      } catch {}\n      await fetchAclState(tenantIdRef.current, cancelled)\n      hasMountedRef.current = true\n      if (!cancelled.current) setLoading(false)\n    }\n    load()\n    return () => { cancelled.current = true }\n  }, [kind, targetId, fetchAclState])\n\n  React.useEffect(() => {\n    if (!hasMountedRef.current) return\n    if (preserveOnTenantChange) return\n    const cancelled = { current: false }\n    fetchAclState(tenantId, cancelled)\n    return () => { cancelled.current = true }\n  }, [tenantId, preserveOnTenantChange, fetchAclState])\n\n  React.useEffect(() => {\n    let cancelled = false\n    async function loadTenantScoped() {\n      if (canEditOrganizations) {\n        try {\n          const orgQuery = new URLSearchParams()\n          if (tenantId) orgQuery.set('tenantId', tenantId)\n          const orgQueryString = orgQuery.toString()\n          const oJson = await readJsonOr<OrganizationListResponse>(\n            `/api/directory/organizations${orgQueryString ? `?${orgQueryString}` : ''}`,\n            undefined,\n            { items: [] },\n          )\n          if (!cancelled) setOrgOptions(normalizeOrganizationOptions(oJson.items))\n        } catch {}\n      }\n      if (kind === 'user' && userRoles && userRoles.length > 0) {\n        try {\n          const roleQuery = new URLSearchParams({ pageSize: '100' })\n          if (tenantId) roleQuery.set('tenantId', tenantId)\n          const roleQueryString = roleQuery.toString()\n          const rolesJson = await readJsonOr<RoleListResponse>(\n            `/api/auth/roles${roleQueryString ? `?${roleQueryString}` : ''}`,\n            undefined,\n            { items: [] },\n          )\n          if (!cancelled) {\n            const allRoles = Array.isArray(rolesJson.items) ? rolesJson.items : []\n            const userRoleDetails: RoleSummary[] = buildRoleSummaries(allRoles, userRoles)\n            setRoleDetails(userRoleDetails)\n          }\n        } catch {}\n      }\n    }\n    loadTenantScoped()\n    return () => { cancelled = true }\n  }, [kind, canEditOrganizations, userRoles, tenantId])\n\n  // Notify parent of changes\n  React.useEffect(() => {\n    onChange?.({ isSuperAdmin, features: granted, organizations })\n  }, [isSuperAdmin, granted, organizations, onChange])\n\n  const grouped = React.useMemo(() => {\n    const moduleMap = new Map<string, string>()\n    for (const m of modules) {\n      moduleMap.set(m.id, m.title)\n    }\n    const map = new Map<string, { moduleId: string; moduleTitle: string; features: Feature[] }>()\n    for (const f of features) {\n      const moduleId = f.module\n      const moduleTitle = moduleMap.get(moduleId) || moduleId\n      if (!map.has(moduleId)) {\n        map.set(moduleId, { moduleId, moduleTitle, features: [] })\n      }\n      map.get(moduleId)!.features.push(f)\n    }\n    return Array.from(map.values()).sort((a, b) => a.moduleTitle.localeCompare(b.moduleTitle))\n  }, [features, modules])\n\n  const hasGlobalWildcard = granted.includes('*')\n  const hasOrganizationRestriction = Array.isArray(organizations) && organizations.length > 0\n  const showOrganizationWarning =\n    (kind === 'role' || overrideEnabled) &&\n    canEditOrganizations &&\n    !isSuperAdmin &&\n    hasOrganizationRestriction &&\n    granted.length === 0\n\n  \n  const toggleWildcard = React.useCallback((wildcard: string, enable: boolean) => {\n    if (!actorIsSuperAdmin && enable && isTenantRestrictedFeature(wildcard)) return\n    updateGranted((prev) => {\n      if (enable) {\n        if (prev.includes(wildcard)) return prev\n        return [...prev, wildcard]\n      }\n      return prev.filter((feature) => feature !== wildcard)\n    })\n  }, [actorIsSuperAdmin, updateGranted])\n\n  const toggleModuleWildcard = React.useCallback((moduleId: string, enable: boolean) => {\n    toggleWildcard(`${moduleId}.*`, enable)\n  }, [toggleWildcard])\n\n  const isModuleWildcardEnabled = (moduleId: string) => {\n    return granted.includes(`${moduleId}.*`)\n  }\n\n  const isFeatureCoveredByWildcard = (featureId: string) =>\n    granted.some((feature) => (feature === '*' || feature.endsWith('.*')) && matchFeature(featureId, feature))\n\n  const isFeatureChecked = (featureId: string) => hasFeature(granted, featureId)\n\n  if (loading) return <div className=\"text-sm text-muted-foreground\">Loading ACL\u2026</div>\n\n  const showRoleBanner = kind === 'user' && !hasCustomAcl && !overrideEnabled\n\n  return (\n    <div className=\"space-y-4\">\n      {showRoleBanner && (\n        <div className=\"rounded-lg border border-blue-200 bg-blue-50 p-4\">\n          <div className=\"text-sm font-medium text-blue-900 mb-2\">\n            Permissions inherited from roles\n          </div>\n          <div className=\"text-sm text-blue-700 mb-3\">\n            This user currently inherits permissions from their assigned roles.\n            {roleDetails.length > 0 && (\n              <span>\n                {' '}Assigned roles:{' '}\n                {roleDetails.map((role, idx) => {\n                  const roleId = typeof role?.id === 'string' && role.id.length > 0 ? role.id : `role-${idx}`\n                  const roleName = typeof role?.name === 'string' && role.name.length > 0 ? role.name : roleId\n                  return (\n                    <React.Fragment key={roleId}>\n                      {idx > 0 && ', '}\n                      <Link \n                        href={`/backend/roles/${roleId}/edit`}\n                        className=\"font-semibold text-blue-900 underline hover:text-blue-950 transition-colors\"\n                      >\n                        {roleName}\n                      </Link>\n                    </React.Fragment>\n                  )\n                })}\n              </span>\n            )}\n          </div>\n          <div className=\"flex items-center gap-2\">\n            <input \n              id=\"overrideAcl\" \n              type=\"checkbox\" \n              className=\"h-4 w-4\" \n              checked={overrideEnabled} \n              onChange={(e) => setOverrideEnabled(e.target.checked)} \n            />\n            <label htmlFor=\"overrideAcl\" className=\"text-sm text-blue-900 font-medium\">\n              Override permissions for this user only\n            </label>\n          </div>\n        </div>\n      )}\n      {(kind === 'role' || overrideEnabled) && (\n        <>\n          <div className=\"flex items-center gap-2\">\n            <input\n              id=\"isSuperAdmin\"\n              type=\"checkbox\"\n              className=\"h-4 w-4\"\n              checked={isSuperAdmin}\n              disabled={!actorIsSuperAdmin}\n              onChange={(e) => setIsSuperAdmin(!!e.target.checked)}\n            />\n            <label htmlFor=\"isSuperAdmin\" className=\"text-sm\">Super Admin (all features)</label>\n          </div>\n          {!actorIsSuperAdmin && (\n            <p className=\"text-xs text-muted-foreground\">Only super administrators can change this option.</p>\n          )}\n      {!isSuperAdmin && (\n        <>\n          {hasGlobalWildcard && (\n            <div className=\"rounded border border-blue-200 bg-blue-50 p-3\">\n              <div className=\"text-sm font-medium text-blue-900\">Global wildcard (*) enabled</div>\n              <div className=\"text-xs text-blue-700 mt-1\">This grants access to all features in the system.</div>\n              <Button \n                variant=\"outline\" \n                size=\"sm\" \n                className=\"mt-2\"\n                onClick={() => updateGranted((prev) => prev.filter((x) => x !== '*'))}\n              >\n                Remove global wildcard\n              </Button>\n            </div>\n          )}\n          <div className=\"grid grid-cols-1 md:grid-cols-2 gap-4\">\n            {grouped.map((group) => {\n              const moduleWildcard = isModuleWildcardEnabled(group.moduleId)\n              const nestedWildcards = Array.from(\n                new Set(\n                  granted.filter(\n                    (feature) =>\n                      feature !== '*' &&\n                      feature.endsWith('.*') &&\n                      feature.startsWith(`${group.moduleId}.`) &&\n                      feature !== `${group.moduleId}.*`,\n                  ),\n                ),\n              )\n                .map((wildcard) => {\n                  const prefix = wildcard.slice(0, -1)\n                  const relatedFeatures = group.features.filter((feature) => feature.id.startsWith(prefix))\n                  return { wildcard, features: relatedFeatures }\n                })\n                .sort((a, b) => a.wildcard.localeCompare(b.wildcard))\n              const nestedCoveredIds = new Set<string>()\n              for (const entry of nestedWildcards) {\n                for (const feature of entry.features) nestedCoveredIds.add(feature.id)\n              }\n              const moduleRestricted = !actorIsSuperAdmin && isTenantRestrictedFeature(`${group.moduleId}.*`)\n              const moduleCheckboxDisabled = hasGlobalWildcard || moduleRestricted\n              return (\n                <div key={group.moduleId} className=\"rounded border p-3\">\n                  <div className=\"flex items-center justify-between mb-3 pb-2 border-b\">\n                    <div className=\"text-sm font-medium\">{group.moduleTitle}</div>\n                    <div className=\"flex items-center gap-2\">\n                      <input \n                        id={`module-${group.moduleId}`} \n                        type=\"checkbox\" \n                        className=\"h-4 w-4\" \n                        checked={moduleWildcard || hasGlobalWildcard} \n                        disabled={moduleCheckboxDisabled}\n                        onChange={(e) => toggleModuleWildcard(group.moduleId, e.target.checked)} \n                      />\n                      <label htmlFor={`module-${group.moduleId}`} className=\"text-sm text-muted-foreground\">\n                        All {moduleWildcard && !hasGlobalWildcard ? <span className=\"font-medium text-blue-600\">({group.moduleId}.*)</span> : ''}\n                        {moduleRestricted ? <span className=\"ml-2 text-xs font-medium text-muted-foreground\">(manage via super admin)</span> : null}\n                      </label>\n                    </div>\n                  </div>\n                {nestedWildcards.length > 0 && (\n                  <div className=\"space-y-3 mb-3\">\n                    {nestedWildcards.map(({ wildcard, features: wildcardFeatures }) => {\n                        const checked = granted.includes(wildcard) || hasGlobalWildcard || moduleWildcard\n                        const wildcardRestricted = !actorIsSuperAdmin && isTenantRestrictedFeature(wildcard)\n                        const disabled = hasGlobalWildcard || moduleWildcard || wildcardRestricted\n                        return (\n                          <div key={wildcard} className=\"space-y-2\">\n                            <div className=\"flex items-center gap-2\">\n                              <input\n                                id={`wildcard-${wildcard}`}\n                                type=\"checkbox\"\n                                className=\"h-4 w-4\"\n                                checked={checked}\n                                disabled={disabled}\n                                onChange={(e) => toggleWildcard(wildcard, !!e.target.checked)}\n                              />\n                              <label\n                                htmlFor={`wildcard-${wildcard}`}\n                                className={`text-sm ${disabled ? 'text-muted-foreground' : ''}`}\n                              >\n                                {formatWildcardLabel(group.moduleId, wildcard)}{' '}\n                                <span className=\"text-muted-foreground text-xs font-mono\">({wildcard})</span>\n                                {wildcardRestricted ? (\n                                  <span className=\"ml-2 text-xs font-medium text-muted-foreground\">\n                                    {t('auth.acl.restricted', 'Restricted')}\n                                  </span>\n                                ) : null}\n                              </label>\n                            </div>\n                            {wildcardFeatures.length > 0 && (\n                              <div className=\"relative ml-6 pl-4 text-sm text-muted-foreground space-y-1\">\n                                <div className=\"absolute left-0 top-1 bottom-1 w-px bg-border\" aria-hidden />\n                                {wildcardFeatures.map((wf) => (\n                                  <div key={`${wildcard}-${wf.id}`} className=\"pl-2\">\n                                    <span>\n                                      {wf.title}{' '}\n                                      <span className=\"text-xs font-mono text-muted-foreground\">({wf.id})</span>\n                                    </span>\n                                  </div>\n                                ))}\n                              </div>\n                            )}\n                          </div>\n                        )\n                      })}\n                    </div>\n                  )}\n                  <div className=\"space-y-2\">\n                    {group.features.map((f) => {\n                      if (nestedCoveredIds.has(f.id)) return null\n                      const checked = isFeatureChecked(f.id)\n                      const isWildcardCovered = isFeatureCoveredByWildcard(f.id)\n                      const restricted = !actorIsSuperAdmin && isTenantRestrictedFeature(f.id)\n                      const disabled = isWildcardCovered || restricted\n                      return (\n                        <div key={f.id} className=\"flex items-center gap-2\">\n                          <input\n                            id={`f-${f.id}`}\n                            type=\"checkbox\"\n                            className=\"h-4 w-4\"\n                            checked={checked}\n                            disabled={disabled}\n                            onChange={(e) => {\n                              const on = !!e.target.checked\n                              updateGranted((prev) => {\n                                if (on) return [...prev, f.id]\n                                return prev.filter((x) => x !== f.id)\n                              })\n                            }}\n                          />\n                          <label\n                            htmlFor={`f-${f.id}`}\n                            className={`text-sm ${disabled ? 'text-muted-foreground' : ''}`}\n                          >\n                            {f.title} <span className=\"text-muted-foreground text-xs\">({f.id})</span>\n                            {restricted ? (\n                              <span className=\"ml-2 text-xs font-medium text-muted-foreground\">\n                                {t('auth.acl.restricted', 'Restricted')}\n                              </span>\n                            ) : null}\n                          </label>\n                        </div>\n                      )\n                    })}\n                  </div>\n                </div>\n              )\n            })}\n          </div>\n        </>\n          )}\n          {canEditOrganizations && (\n            <div className=\"rounded border p-3\">\n              <div className=\"text-sm font-medium mb-2\">\n                {t('auth.acl.organizationsScope', 'Organizations scope')}\n              </div>\n              <div className=\"text-xs text-muted-foreground mb-2\">Empty = all organizations. Select one or more to restrict.</div>\n              <div className=\"grid grid-cols-1 md:grid-cols-2 gap-2\">\n                {orgOptions.map((o) => {\n                  const checked = organizations == null ? false : (organizations || []).includes(o.id)\n                  return (\n                    <div key={o.id} className=\"flex items-center gap-2\">\n                      <input id={`org-${o.id}`} type=\"checkbox\" className=\"h-4 w-4\" checked={checked} onChange={(e) => {\n                        const on = !!e.target.checked\n                        setOrganizations((prev) => {\n                          if (prev == null) return on ? [o.id] : []\n                          return on ? Array.from(new Set([...(prev || []), o.id])) : (prev || []).filter((x) => x !== o.id)\n                        })\n                      }} />\n                      <label htmlFor={`org-${o.id}`} className=\"text-sm\">{o.name}</label>\n                    </div>\n                  )\n                })}\n              </div>\n              <div className=\"mt-2\">\n                <Button variant=\"outline\" onClick={() => setOrganizations(null)}>{t('auth.acl.allowAllOrganizations', 'Allow all organizations')}</Button>\n              </div>\n              {showOrganizationWarning && (\n                <div className=\"mt-3 rounded border border-amber-200 bg-amber-50 px-3 py-2 text-sm text-amber-900\">\n                  {t('auth.acl.organizationWarning', 'Organization restrictions are saved only when at least one feature override is selected. Add a feature or enable a module wildcard before saving.')}\n                </div>\n              )}\n            </div>\n          )}\n        </>\n      )}\n    </div>\n  )\n}\n"],
-  "mappings": ";AAwSsB,SAiEd,UAjEc,KAoBF,YApBE;AAvStB,YAAY,WAAW;AACvB,SAAS,cAAc;AACvB,SAAS,eAAe;AACxB,OAAO,UAAU;AACjB,SAAS,YAAY,oBAAoB;AACzC,SAAS,YAAY;AAErB,SAAS,YAAY,OAAuB;AAC1C,SAAO,MAAM,QAAQ,UAAU,GAAG,EAAE,QAAQ,SAAS,CAAC,SAAS,KAAK,YAAY,CAAC;AACnF;AAEA,SAAS,sBAAsB,OAA0B;AACvD,MAAI,CAAC,MAAM,QAAQ,KAAK,EAAG,QAAO,CAAC;AACnC,QAAM,QAAQ,oBAAI,IAAY;AAC9B,aAAW,SAAS,OAAO;AACzB,QAAI,OAAO,UAAU,SAAU;AAC/B,UAAM,UAAU,MAAM,KAAK;AAC3B,QAAI,CAAC,QAAS;AACd,UAAM,IAAI,OAAO;AAAA,EACnB;AACA,SAAO,MAAM,KAAK,KAAK;AACzB;AAEA,SAAS,0BAA0B,SAA0B;AAC3D,MAAI,YAAY,OAAO,YAAY,cAAe,QAAO;AACzD,MAAI,QAAQ,WAAW,mBAAmB,EAAG,QAAO;AACpD,SAAO;AACT;AAEA,SAAS,oBAAoB,UAAkB,UAA0B;AACvE,MAAI,CAAC,SAAS,SAAS,IAAI,EAAG,QAAO;AACrC,QAAM,SAAS,GAAG,QAAQ;AAC1B,QAAM,SAAS,SAAS,WAAW,MAAM,IAAI,SAAS,MAAM,OAAO,QAAQ,EAAE,IAAI,SAAS,MAAM,GAAG,EAAE;AACrG,MAAI,CAAC,OAAQ,QAAO;AACpB,SAAO,OAAO,OAAO,MAAM,GAAG,EAAE,IAAI,WAAW,EAAE,KAAK,KAAK,CAAC;AAC9D;AAQA,SAAS,mBAAmB,OAAuB,cAAuC;AACxF,QAAM,YAA2B,CAAC;AAClC,aAAW,QAAQ,OAAO;AACxB,UAAM,OAAO,OAAO,MAAM,SAAS,WAAW,KAAK,OAAO;AAC1D,QAAI,CAAC,QAAQ,CAAC,aAAa,SAAS,IAAI,EAAG;AAC3C,UAAM,aAAa,OAAO,MAAM,OAAO,YAAY,KAAK,GAAG,SAAS;AACpE,UAAM,KAAK,aAAc,KAAM,KAAgB;AAC/C,cAAU,KAAK,EAAE,IAAI,KAAK,CAAC;AAAA,EAC7B;AACA,SAAO;AACT;AAiBA,SAAS,6BAA6B,OAA+E;AACnH,MAAI,CAAC,MAAM,QAAQ,KAAK,EAAG,QAAO,CAAC;AACnC,SAAO,MAAM,OAA4C,CAAC,KAAK,QAAQ;AACrE,QAAI,CAAC,IAAK,QAAO;AACjB,UAAM,KAAK,OAAO,IAAI,OAAO,YAAY,IAAI,GAAG,KAAK,EAAE,SAAS,IAAI,IAAI,KAAK;AAC7E,QAAI,CAAC,GAAI,QAAO;AAChB,UAAM,OAAO,OAAO,IAAI,SAAS,YAAY,IAAI,KAAK,KAAK,EAAE,SAAS,IAAI,IAAI,OAAO;AACrF,QAAI,KAAK,EAAE,IAAI,KAAK,CAAC;AACrB,WAAO;AAAA,EACT,GAAG,CAAC,CAAC;AACP;AAEA,eAAe,WACb,KACA,MACA,UACY;AACZ,QAAM,OAAO,MAAM,QAAW,KAAK,MAAM,EAAE,SAAS,CAAC;AACrD,MAAI,CAAC,KAAK,GAAI,QAAO;AACrB,SAAO,KAAK,UAAU;AACxB;AAEO,SAAS,UAAU;AAAA,EACxB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,yBAAyB;AAC3B,GAUG;AACD,QAAM,oBAAoB,CAAC,CAAC;AAC5B,QAAM,CAAC,SAAS,UAAU,IAAI,MAAM,SAAS,IAAI;AACjD,QAAM,CAAC,UAAU,WAAW,IAAI,MAAM,SAAoB,CAAC,CAAC;AAC5D,QAAM,IAAI,KAAK;AACf,QAAM,CAAC,SAAS,UAAU,IAAI,MAAM,SAAuB,CAAC,CAAC;AAC7D,QAAM,CAAC,SAAS,UAAU,IAAI,MAAM,SAAmB,MAAM;AAC3D,UAAM,aAAa,sBAAsB,OAAO,QAAQ;AACxD,WAAO,oBAAoB,aAAa,WAAW,OAAO,CAAC,YAAY,CAAC,0BAA0B,OAAO,CAAC;AAAA,EAC5G,CAAC;AACD,QAAM,CAAC,cAAc,eAAe,IAAI,MAAM,SAAS,OAAO,gBAAgB,KAAK;AACnF,QAAM,CAAC,eAAe,gBAAgB,IAAI,MAAM,SAA0B,OAAO,iBAAiB,IAAI;AACtG,QAAM,CAAC,YAAY,aAAa,IAAI,MAAM,SAAyC,CAAC,CAAC;AACrF,QAAM,CAAC,cAAc,eAAe,IAAI,MAAM,SAAS,IAAI;AAC3D,QAAM,CAAC,iBAAiB,kBAAkB,IAAI,MAAM,SAAS,KAAK;AAClE,QAAM,CAAC,aAAa,cAAc,IAAI,MAAM,SAAwB,CAAC,CAAC;AAEtE,QAAM,wBAAwB,MAAM;AAAA,IAClC,CAAC,SAA4B;AAC3B,YAAM,aAAa,sBAAsB,IAAI;AAC7C,UAAI,kBAAmB,QAAO;AAC9B,aAAO,WAAW,OAAO,CAAC,YAAY,CAAC,0BAA0B,OAAO,CAAC;AAAA,IAC3E;AAAA,IACA,CAAC,iBAAiB;AAAA,EACpB;AAEA,QAAM,gBAAgB,MAAM;AAAA,IAC1B,CAAC,YAA0C;AACzC,iBAAW,CAAC,SAAS,sBAAsB,QAAQ,IAAI,CAAC,CAAC;AAAA,IAC3D;AAAA,IACA,CAAC,qBAAqB;AAAA,EACxB;AAEA,QAAM,cAAc,MAAM,OAAO,QAAQ;AACzC,QAAM,UAAU,MAAM;AAAE,gBAAY,UAAU;AAAA,EAAS,GAAG,CAAC,QAAQ,CAAC;AACpE,QAAM,gBAAgB,MAAM,OAAO,KAAK;AAExC,QAAM,gBAAgB,MAAM,YAAY,OAAO,aAAwC,iBAAuC;AAC5H,QAAI;AACF,YAAM,WAAW,IAAI,gBAAgB;AACrC,eAAS,IAAI,SAAS,SAAS,WAAW,UAAU,QAAQ;AAC5D,UAAI,YAAa,UAAS,IAAI,YAAY,WAAW;AACrD,YAAM,iBAAiB,SAAS,SAAS;AACzC,YAAM,UAAU,MAAM;AAAA,QACpB,aAAa,SAAS,SAAS,UAAU,OAAO,OAAO,iBAAiB,IAAI,cAAc,KAAK,EAAE;AAAA,QACjG;AAAA,QACA,EAAE,cAAc,MAAM,cAAc,OAAO,UAAU,CAAC,GAAG,eAAe,KAAK;AAAA,MAC/E;AACA,UAAI,aAAa,QAAS;AAC1B,YAAM,kBAAkB,QAAQ,iBAAiB;AACjD,sBAAgB,eAAe;AAC/B,yBAAmB,eAAe;AAClC,sBAAgB,CAAC,CAAC,QAAQ,YAAY;AACtC,iBAAW,sBAAsB,QAAQ,QAAQ,CAAC;AAClD,uBAAiB,QAAQ,iBAAiB,OAAO,OAAO,MAAM,QAAQ,QAAQ,aAAa,IAAI,QAAQ,gBAAgB,CAAC,CAAC;AAAA,IAC3H,QAAQ;AAAA,IAAC;AAAA,EACX,GAAG,CAAC,MAAM,UAAU,qBAAqB,CAAC;AAE1C,QAAM,UAAU,MAAM;AACpB,UAAM,YAAY,EAAE,SAAS,MAAM;AACnC,mBAAe,OAAO;AACpB,iBAAW,IAAI;AACf,UAAI;AACF,cAAM,QAAQ,MAAM;AAAA,UAClB;AAAA,UACA;AAAA,UACA,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC,EAAE;AAAA,QAC3B;AACA,YAAI,CAAC,UAAU,SAAS;AACtB,sBAAY,MAAM,SAAS,CAAC,CAAC;AAC7B,qBAAW,MAAM,WAAW,CAAC,CAAC;AAAA,QAChC;AAAA,MACF,QAAQ;AAAA,MAAC;AACT,YAAM,cAAc,YAAY,SAAS,SAAS;AAClD,oBAAc,UAAU;AACxB,UAAI,CAAC,UAAU,QAAS,YAAW,KAAK;AAAA,IAC1C;AACA,SAAK;AACL,WAAO,MAAM;AAAE,gBAAU,UAAU;AAAA,IAAK;AAAA,EAC1C,GAAG,CAAC,MAAM,UAAU,aAAa,CAAC;AAElC,QAAM,UAAU,MAAM;AACpB,QAAI,CAAC,cAAc,QAAS;AAC5B,QAAI,uBAAwB;AAC5B,UAAM,YAAY,EAAE,SAAS,MAAM;AACnC,kBAAc,UAAU,SAAS;AACjC,WAAO,MAAM;AAAE,gBAAU,UAAU;AAAA,IAAK;AAAA,EAC1C,GAAG,CAAC,UAAU,wBAAwB,aAAa,CAAC;AAEpD,QAAM,UAAU,MAAM;AACpB,QAAI,YAAY;AAChB,mBAAe,mBAAmB;AAChC,UAAI,sBAAsB;AACxB,YAAI;AACF,gBAAM,WAAW,IAAI,gBAAgB;AACrC,cAAI,SAAU,UAAS,IAAI,YAAY,QAAQ;AAC/C,gBAAM,iBAAiB,SAAS,SAAS;AACzC,gBAAM,QAAQ,MAAM;AAAA,YAClB,+BAA+B,iBAAiB,IAAI,cAAc,KAAK,EAAE;AAAA,YACzE;AAAA,YACA,EAAE,OAAO,CAAC,EAAE;AAAA,UACd;AACA,cAAI,CAAC,UAAW,eAAc,6BAA6B,MAAM,KAAK,CAAC;AAAA,QACzE,QAAQ;AAAA,QAAC;AAAA,MACX;AACA,UAAI,SAAS,UAAU,aAAa,UAAU,SAAS,GAAG;AACxD,YAAI;AACF,gBAAM,YAAY,IAAI,gBAAgB,EAAE,UAAU,MAAM,CAAC;AACzD,cAAI,SAAU,WAAU,IAAI,YAAY,QAAQ;AAChD,gBAAM,kBAAkB,UAAU,SAAS;AAC3C,gBAAM,YAAY,MAAM;AAAA,YACtB,kBAAkB,kBAAkB,IAAI,eAAe,KAAK,EAAE;AAAA,YAC9D;AAAA,YACA,EAAE,OAAO,CAAC,EAAE;AAAA,UACd;AACA,cAAI,CAAC,WAAW;AACd,kBAAM,WAAW,MAAM,QAAQ,UAAU,KAAK,IAAI,UAAU,QAAQ,CAAC;AACrE,kBAAM,kBAAiC,mBAAmB,UAAU,SAAS;AAC7E,2BAAe,eAAe;AAAA,UAChC;AAAA,QACF,QAAQ;AAAA,QAAC;AAAA,MACX;AAAA,IACF;AACA,qBAAiB;AACjB,WAAO,MAAM;AAAE,kBAAY;AAAA,IAAK;AAAA,EAClC,GAAG,CAAC,MAAM,sBAAsB,WAAW,QAAQ,CAAC;AAGpD,QAAM,UAAU,MAAM;AACpB,eAAW,EAAE,cAAc,UAAU,SAAS,cAAc,CAAC;AAAA,EAC/D,GAAG,CAAC,cAAc,SAAS,eAAe,QAAQ,CAAC;AAEnD,QAAM,UAAU,MAAM,QAAQ,MAAM;AAClC,UAAM,YAAY,oBAAI,IAAoB;AAC1C,eAAW,KAAK,SAAS;AACvB,gBAAU,IAAI,EAAE,IAAI,EAAE,KAAK;AAAA,IAC7B;AACA,UAAM,MAAM,oBAAI,IAA4E;AAC5F,eAAW,KAAK,UAAU;AACxB,YAAM,WAAW,EAAE;AACnB,YAAM,cAAc,UAAU,IAAI,QAAQ,KAAK;AAC/C,UAAI,CAAC,IAAI,IAAI,QAAQ,GAAG;AACtB,YAAI,IAAI,UAAU,EAAE,UAAU,aAAa,UAAU,CAAC,EAAE,CAAC;AAAA,MAC3D;AACA,UAAI,IAAI,QAAQ,EAAG,SAAS,KAAK,CAAC;AAAA,IACpC;AACA,WAAO,MAAM,KAAK,IAAI,OAAO,CAAC,EAAE,KAAK,CAAC,GAAG,MAAM,EAAE,YAAY,cAAc,EAAE,WAAW,CAAC;AAAA,EAC3F,GAAG,CAAC,UAAU,OAAO,CAAC;AAEtB,QAAM,oBAAoB,QAAQ,SAAS,GAAG;AAC9C,QAAM,6BAA6B,MAAM,QAAQ,aAAa,KAAK,cAAc,SAAS;AAC1F,QAAM,2BACH,SAAS,UAAU,oBACpB,wBACA,CAAC,gBACD,8BACA,QAAQ,WAAW;AAGrB,QAAM,iBAAiB,MAAM,YAAY,CAAC,UAAkB,WAAoB;AAC9E,QAAI,CAAC,qBAAqB,UAAU,0BAA0B,QAAQ,EAAG;AACzE,kBAAc,CAAC,SAAS;AACtB,UAAI,QAAQ;AACV,YAAI,KAAK,SAAS,QAAQ,EAAG,QAAO;AACpC,eAAO,CAAC,GAAG,MAAM,QAAQ;AAAA,MAC3B;AACA,aAAO,KAAK,OAAO,CAAC,YAAY,YAAY,QAAQ;AAAA,IACtD,CAAC;AAAA,EACH,GAAG,CAAC,mBAAmB,aAAa,CAAC;AAErC,QAAM,uBAAuB,MAAM,YAAY,CAAC,UAAkB,WAAoB;AACpF,mBAAe,GAAG,QAAQ,MAAM,MAAM;AAAA,EACxC,GAAG,CAAC,cAAc,CAAC;AAEnB,QAAM,0BAA0B,CAAC,aAAqB;AACpD,WAAO,QAAQ,SAAS,GAAG,QAAQ,IAAI;AAAA,EACzC;AAEA,QAAM,6BAA6B,CAAC,cAClC,QAAQ,KAAK,CAAC,aAAa,YAAY,OAAO,QAAQ,SAAS,IAAI,MAAM,aAAa,WAAW,OAAO,CAAC;AAE3G,QAAM,mBAAmB,CAAC,cAAsB,WAAW,SAAS,SAAS;AAE7E,MAAI,QAAS,QAAO,oBAAC,SAAI,WAAU,iCAAgC,+BAAY;AAE/E,QAAM,iBAAiB,SAAS,UAAU,CAAC,gBAAgB,CAAC;AAE5D,SACE,qBAAC,SAAI,WAAU,aACZ;AAAA,sBACC,qBAAC,SAAI,WAAU,oDACb;AAAA,0BAAC,SAAI,WAAU,0CAAyC,8CAExD;AAAA,MACA,qBAAC,SAAI,WAAU,8BAA6B;AAAA;AAAA,QAEzC,YAAY,SAAS,KACpB,qBAAC,UACE;AAAA;AAAA,UAAI;AAAA,UAAgB;AAAA,UACpB,YAAY,IAAI,CAAC,MAAM,QAAQ;AAC9B,kBAAM,SAAS,OAAO,MAAM,OAAO,YAAY,KAAK,GAAG,SAAS,IAAI,KAAK,KAAK,QAAQ,GAAG;AACzF,kBAAM,WAAW,OAAO,MAAM,SAAS,YAAY,KAAK,KAAK,SAAS,IAAI,KAAK,OAAO;AACtF,mBACE,qBAAC,MAAM,UAAN,EACE;AAAA,oBAAM,KAAK;AAAA,cACZ;AAAA,gBAAC;AAAA;AAAA,kBACC,MAAM,kBAAkB,MAAM;AAAA,kBAC9B,WAAU;AAAA,kBAET;AAAA;AAAA,cACH;AAAA,iBAPmB,MAQrB;AAAA,UAEJ,CAAC;AAAA,WACH;AAAA,SAEJ;AAAA,MACA,qBAAC,SAAI,WAAU,2BACb;AAAA;AAAA,UAAC;AAAA;AAAA,YACC,IAAG;AAAA,YACH,MAAK;AAAA,YACL,WAAU;AAAA,YACV,SAAS;AAAA,YACT,UAAU,CAAC,MAAM,mBAAmB,EAAE,OAAO,OAAO;AAAA;AAAA,QACtD;AAAA,QACA,oBAAC,WAAM,SAAQ,eAAc,WAAU,qCAAoC,qDAE3E;AAAA,SACF;AAAA,OACF;AAAA,KAEA,SAAS,UAAU,oBACnB,iCACE;AAAA,2BAAC,SAAI,WAAU,2BACb;AAAA;AAAA,UAAC;AAAA;AAAA,YACC,IAAG;AAAA,YACH,MAAK;AAAA,YACL,WAAU;AAAA,YACV,SAAS;AAAA,YACT,UAAU,CAAC;AAAA,YACX,UAAU,CAAC,MAAM,gBAAgB,CAAC,CAAC,EAAE,OAAO,OAAO;AAAA;AAAA,QACrD;AAAA,QACA,oBAAC,WAAM,SAAQ,gBAAe,WAAU,WAAU,wCAA0B;AAAA,SAC9E;AAAA,MACC,CAAC,qBACA,oBAAC,OAAE,WAAU,iCAAgC,+DAAiD;AAAA,MAEnG,CAAC,gBACA,iCACG;AAAA,6BACC,qBAAC,SAAI,WAAU,iDACb;AAAA,8BAAC,SAAI,WAAU,qCAAoC,yCAA2B;AAAA,UAC9E,oBAAC,SAAI,WAAU,8BAA6B,+DAAiD;AAAA,UAC7F;AAAA,YAAC;AAAA;AAAA,cACC,SAAQ;AAAA,cACR,MAAK;AAAA,cACL,WAAU;AAAA,cACV,SAAS,MAAM,cAAc,CAAC,SAAS,KAAK,OAAO,CAAC,MAAM,MAAM,GAAG,CAAC;AAAA,cACrE;AAAA;AAAA,UAED;AAAA,WACF;AAAA,QAEF,oBAAC,SAAI,WAAU,yCACZ,kBAAQ,IAAI,CAAC,UAAU;AACtB,gBAAM,iBAAiB,wBAAwB,MAAM,QAAQ;AAC7D,gBAAM,kBAAkB,MAAM;AAAA,YAC5B,IAAI;AAAA,cACF,QAAQ;AAAA,gBACN,CAAC,YACC,YAAY,OACZ,QAAQ,SAAS,IAAI,KACrB,QAAQ,WAAW,GAAG,MAAM,QAAQ,GAAG,KACvC,YAAY,GAAG,MAAM,QAAQ;AAAA,cACjC;AAAA,YACF;AAAA,UACF,EACG,IAAI,CAAC,aAAa;AACjB,kBAAM,SAAS,SAAS,MAAM,GAAG,EAAE;AACnC,kBAAM,kBAAkB,MAAM,SAAS,OAAO,CAAC,YAAY,QAAQ,GAAG,WAAW,MAAM,CAAC;AACxF,mBAAO,EAAE,UAAU,UAAU,gBAAgB;AAAA,UAC/C,CAAC,EACA,KAAK,CAAC,GAAG,MAAM,EAAE,SAAS,cAAc,EAAE,QAAQ,CAAC;AACtD,gBAAM,mBAAmB,oBAAI,IAAY;AACzC,qBAAW,SAAS,iBAAiB;AACnC,uBAAW,WAAW,MAAM,SAAU,kBAAiB,IAAI,QAAQ,EAAE;AAAA,UACvE;AACA,gBAAM,mBAAmB,CAAC,qBAAqB,0BAA0B,GAAG,MAAM,QAAQ,IAAI;AAC9F,gBAAM,yBAAyB,qBAAqB;AACpD,iBACE,qBAAC,SAAyB,WAAU,sBAClC;AAAA,iCAAC,SAAI,WAAU,wDACb;AAAA,kCAAC,SAAI,WAAU,uBAAuB,gBAAM,aAAY;AAAA,cACxD,qBAAC,SAAI,WAAU,2BACb;AAAA;AAAA,kBAAC;AAAA;AAAA,oBACC,IAAI,UAAU,MAAM,QAAQ;AAAA,oBAC5B,MAAK;AAAA,oBACL,WAAU;AAAA,oBACV,SAAS,kBAAkB;AAAA,oBAC3B,UAAU;AAAA,oBACV,UAAU,CAAC,MAAM,qBAAqB,MAAM,UAAU,EAAE,OAAO,OAAO;AAAA;AAAA,gBACxE;AAAA,gBACA,qBAAC,WAAM,SAAS,UAAU,MAAM,QAAQ,IAAI,WAAU,iCAAgC;AAAA;AAAA,kBAC/E,kBAAkB,CAAC,oBAAoB,qBAAC,UAAK,WAAU,6BAA4B;AAAA;AAAA,oBAAE,MAAM;AAAA,oBAAS;AAAA,qBAAG,IAAU;AAAA,kBACrH,mBAAmB,oBAAC,UAAK,WAAU,kDAAiD,sCAAwB,IAAU;AAAA,mBACzH;AAAA,iBACF;AAAA,eACF;AAAA,YACD,gBAAgB,SAAS,KACxB,oBAAC,SAAI,WAAU,kBACZ,0BAAgB,IAAI,CAAC,EAAE,UAAU,UAAU,iBAAiB,MAAM;AAC/D,oBAAM,UAAU,QAAQ,SAAS,QAAQ,KAAK,qBAAqB;AACnE,oBAAM,qBAAqB,CAAC,qBAAqB,0BAA0B,QAAQ;AACnF,oBAAM,WAAW,qBAAqB,kBAAkB;AACxD,qBACE,qBAAC,SAAmB,WAAU,aAC5B;AAAA,qCAAC,SAAI,WAAU,2BACb;AAAA;AAAA,oBAAC;AAAA;AAAA,sBACC,IAAI,YAAY,QAAQ;AAAA,sBACxB,MAAK;AAAA,sBACL,WAAU;AAAA,sBACV;AAAA,sBACA;AAAA,sBACA,UAAU,CAAC,MAAM,eAAe,UAAU,CAAC,CAAC,EAAE,OAAO,OAAO;AAAA;AAAA,kBAC9D;AAAA,kBACA;AAAA,oBAAC;AAAA;AAAA,sBACC,SAAS,YAAY,QAAQ;AAAA,sBAC7B,WAAW,WAAW,WAAW,0BAA0B,EAAE;AAAA,sBAE5D;AAAA,4CAAoB,MAAM,UAAU,QAAQ;AAAA,wBAAG;AAAA,wBAChD,qBAAC,UAAK,WAAU,2CAA0C;AAAA;AAAA,0BAAE;AAAA,0BAAS;AAAA,2BAAC;AAAA,wBACrE,qBACC,oBAAC,UAAK,WAAU,kDACb,YAAE,uBAAuB,YAAY,GACxC,IACE;AAAA;AAAA;AAAA,kBACN;AAAA,mBACF;AAAA,gBACC,iBAAiB,SAAS,KACzB,qBAAC,SAAI,WAAU,8DACb;AAAA,sCAAC,SAAI,WAAU,iDAAgD,eAAW,MAAC;AAAA,kBAC1E,iBAAiB,IAAI,CAAC,OACrB,oBAAC,SAAiC,WAAU,QAC1C,+BAAC,UACE;AAAA,uBAAG;AAAA,oBAAO;AAAA,oBACX,qBAAC,UAAK,WAAU,2CAA0C;AAAA;AAAA,sBAAE,GAAG;AAAA,sBAAG;AAAA,uBAAC;AAAA,qBACrE,KAJQ,GAAG,QAAQ,IAAI,GAAG,EAAE,EAK9B,CACD;AAAA,mBACH;AAAA,mBAlCM,QAoCV;AAAA,YAEJ,CAAC,GACH;AAAA,YAEF,oBAAC,SAAI,WAAU,aACZ,gBAAM,SAAS,IAAI,CAAC,MAAM;AACzB,kBAAI,iBAAiB,IAAI,EAAE,EAAE,EAAG,QAAO;AACvC,oBAAM,UAAU,iBAAiB,EAAE,EAAE;AACrC,oBAAM,oBAAoB,2BAA2B,EAAE,EAAE;AACzD,oBAAM,aAAa,CAAC,qBAAqB,0BAA0B,EAAE,EAAE;AACvE,oBAAM,WAAW,qBAAqB;AACtC,qBACE,qBAAC,SAAe,WAAU,2BACxB;AAAA;AAAA,kBAAC;AAAA;AAAA,oBACC,IAAI,KAAK,EAAE,EAAE;AAAA,oBACb,MAAK;AAAA,oBACL,WAAU;AAAA,oBACV;AAAA,oBACA;AAAA,oBACA,UAAU,CAAC,MAAM;AACf,4BAAM,KAAK,CAAC,CAAC,EAAE,OAAO;AACtB,oCAAc,CAAC,SAAS;AACtB,4BAAI,GAAI,QAAO,CAAC,GAAG,MAAM,EAAE,EAAE;AAC7B,+BAAO,KAAK,OAAO,CAAC,MAAM,MAAM,EAAE,EAAE;AAAA,sBACtC,CAAC;AAAA,oBACH;AAAA;AAAA,gBACF;AAAA,gBACA;AAAA,kBAAC;AAAA;AAAA,oBACC,SAAS,KAAK,EAAE,EAAE;AAAA,oBAClB,WAAW,WAAW,WAAW,0BAA0B,EAAE;AAAA,oBAE5D;AAAA,wBAAE;AAAA,sBAAM;AAAA,sBAAC,qBAAC,UAAK,WAAU,iCAAgC;AAAA;AAAA,wBAAE,EAAE;AAAA,wBAAG;AAAA,yBAAC;AAAA,sBACjE,aACC,oBAAC,UAAK,WAAU,kDACb,YAAE,uBAAuB,YAAY,GACxC,IACE;AAAA;AAAA;AAAA,gBACN;AAAA,mBAzBQ,EAAE,EA0BZ;AAAA,YAEJ,CAAC,GACH;AAAA,eAvGQ,MAAM,QAwGhB;AAAA,QAEJ,CAAC,GACH;AAAA,SACF;AAAA,MAEG,wBACC,qBAAC,SAAI,WAAU,sBACb;AAAA,4BAAC,SAAI,WAAU,4BACZ,YAAE,+BAA+B,qBAAqB,GACzD;AAAA,QACA,oBAAC,SAAI,WAAU,sCAAqC,wEAA0D;AAAA,QAC9G,oBAAC,SAAI,WAAU,yCACZ,qBAAW,IAAI,CAAC,MAAM;AACrB,gBAAM,UAAU,iBAAiB,OAAO,SAAS,iBAAiB,CAAC,GAAG,SAAS,EAAE,EAAE;AACnF,iBACE,qBAAC,SAAe,WAAU,2BACxB;AAAA,gCAAC,WAAM,IAAI,OAAO,EAAE,EAAE,IAAI,MAAK,YAAW,WAAU,WAAU,SAAkB,UAAU,CAAC,MAAM;AAC/F,oBAAM,KAAK,CAAC,CAAC,EAAE,OAAO;AACtB,+BAAiB,CAAC,SAAS;AACzB,oBAAI,QAAQ,KAAM,QAAO,KAAK,CAAC,EAAE,EAAE,IAAI,CAAC;AACxC,uBAAO,KAAK,MAAM,KAAK,oBAAI,IAAI,CAAC,GAAI,QAAQ,CAAC,GAAI,EAAE,EAAE,CAAC,CAAC,KAAK,QAAQ,CAAC,GAAG,OAAO,CAAC,MAAM,MAAM,EAAE,EAAE;AAAA,cAClG,CAAC;AAAA,YACH,GAAG;AAAA,YACH,oBAAC,WAAM,SAAS,OAAO,EAAE,EAAE,IAAI,WAAU,WAAW,YAAE,MAAK;AAAA,eARnD,EAAE,EASZ;AAAA,QAEJ,CAAC,GACH;AAAA,QACA,oBAAC,SAAI,WAAU,QACb,8BAAC,UAAO,SAAQ,WAAU,SAAS,MAAM,iBAAiB,IAAI,GAAI,YAAE,kCAAkC,yBAAyB,GAAE,GACnI;AAAA,QACC,2BACC,oBAAC,SAAI,WAAU,qFACZ,YAAE,gCAAgC,mJAAmJ,GACxL;AAAA,SAEJ;AAAA,OAEJ;AAAA,KAEJ;AAEJ;",
+  "sourcesContent": ["\"use client\"\nimport * as React from 'react'\nimport { Button } from '@open-mercato/ui/primitives/button'\nimport { apiCall } from '@open-mercato/ui/backend/utils/apiCall'\nimport Link from 'next/link'\nimport { hasFeature, matchFeature } from '@open-mercato/shared/security/features'\nimport { useT } from '@open-mercato/shared/lib/i18n/context'\nimport type { FeatureDescriptor } from '@open-mercato/shared/security/aclDependencies'\nimport { AclDependencyDiagnosticsPanel } from './AclDependencyDiagnosticsPanel'\n\nfunction toTitleCase(value: string): string {\n  return value.replace(/[-_.]/g, ' ').replace(/\\b\\w/g, (char) => char.toUpperCase())\n}\n\nfunction normalizeFeatureArray(input: unknown): string[] {\n  if (!Array.isArray(input)) return []\n  const dedup = new Set<string>()\n  for (const value of input) {\n    if (typeof value !== 'string') continue\n    const trimmed = value.trim()\n    if (!trimmed) continue\n    dedup.add(trimmed)\n  }\n  return Array.from(dedup)\n}\n\nfunction isTenantRestrictedFeature(feature: string): boolean {\n  if (feature === '*' || feature === 'directory.*') return true\n  if (feature.startsWith('directory.tenants')) return true\n  return false\n}\n\nfunction formatWildcardLabel(moduleId: string, wildcard: string): string {\n  if (!wildcard.endsWith('.*')) return wildcard\n  const prefix = `${moduleId}.`\n  const suffix = wildcard.startsWith(prefix) ? wildcard.slice(prefix.length, -2) : wildcard.slice(0, -2)\n  if (!suffix) return 'All features'\n  return `All ${suffix.split('.').map(toTitleCase).join(' / ')}`\n}\n\ntype Feature = { id: string; title: string; module: string; dependsOn?: string[] }\ntype ModuleInfo = { id: string; title: string }\ntype RoleListItem = { id?: string | null; name?: string | null }\ntype RoleListResponse = { items?: RoleListItem[] }\ntype RoleSummary = { id: string; name: string }\n\nfunction buildRoleSummaries(items: RoleListItem[], allowedNames: string[]): RoleSummary[] {\n  const summaries: RoleSummary[] = []\n  for (const role of items) {\n    const name = typeof role?.name === 'string' ? role.name : ''\n    if (!name || !allowedNames.includes(name)) continue\n    const hasValidId = typeof role?.id === 'string' && role.id.length > 0\n    const id = hasValidId ? (role!.id as string) : name\n    summaries.push({ id, name })\n  }\n  return summaries\n}\n\nexport type AclData = {\n  isSuperAdmin: boolean\n  features: string[]\n  organizations: string[] | null\n}\n\ntype FeatureListResponse = { items?: Feature[]; modules?: ModuleInfo[] }\ntype AclPayload = {\n  hasCustomAcl?: boolean\n  isSuperAdmin?: boolean\n  features?: unknown\n  organizations?: unknown\n}\ntype OrganizationListResponse = { items?: Array<{ id?: string; name?: string }> }\n\nfunction normalizeOrganizationOptions(items: OrganizationListResponse['items']): Array<{ id: string; name: string }> {\n  if (!Array.isArray(items)) return []\n  return items.reduce<Array<{ id: string; name: string }>>((acc, org) => {\n    if (!org) return acc\n    const id = typeof org.id === 'string' && org.id.trim().length > 0 ? org.id : null\n    if (!id) return acc\n    const name = typeof org.name === 'string' && org.name.trim().length > 0 ? org.name : id\n    acc.push({ id, name })\n    return acc\n  }, [])\n}\n\nasync function readJsonOr<T>(\n  url: string,\n  init: RequestInit | undefined,\n  fallback: T,\n): Promise<T> {\n  const call = await apiCall<T>(url, init, { fallback })\n  if (!call.ok) return fallback\n  return call.result ?? fallback\n}\n\nexport function AclEditor({\n  kind,\n  targetId,\n  canEditOrganizations,\n  value,\n  onChange,\n  userRoles,\n  currentUserIsSuperAdmin,\n  tenantId,\n  preserveOnTenantChange = false,\n}: {\n  kind: 'user' | 'role'\n  targetId: string\n  canEditOrganizations: boolean\n  value?: AclData\n  onChange?: (data: AclData) => void\n  userRoles?: string[]\n  currentUserIsSuperAdmin?: boolean\n  tenantId?: string | null\n  preserveOnTenantChange?: boolean\n}) {\n  const actorIsSuperAdmin = !!currentUserIsSuperAdmin\n  const [loading, setLoading] = React.useState(true)\n  const [features, setFeatures] = React.useState<Feature[]>([])\n  const t = useT()\n  const [modules, setModules] = React.useState<ModuleInfo[]>([])\n  const [granted, setGranted] = React.useState<string[]>(() => {\n    const normalized = normalizeFeatureArray(value?.features)\n    return actorIsSuperAdmin ? normalized : normalized.filter((feature) => !isTenantRestrictedFeature(feature))\n  })\n  const [isSuperAdmin, setIsSuperAdmin] = React.useState(value?.isSuperAdmin || false)\n  const [organizations, setOrganizations] = React.useState<string[] | null>(value?.organizations ?? null)\n  const [orgOptions, setOrgOptions] = React.useState<{ id: string; name: string }[]>([])\n  const [hasCustomAcl, setHasCustomAcl] = React.useState(true)\n  const [overrideEnabled, setOverrideEnabled] = React.useState(false)\n  const [roleDetails, setRoleDetails] = React.useState<RoleSummary[]>([])\n\n  const actorSanitizeFeatures = React.useCallback(\n    (list: unknown): string[] => {\n      const normalized = normalizeFeatureArray(list)\n      if (actorIsSuperAdmin) return normalized\n      return normalized.filter((feature) => !isTenantRestrictedFeature(feature))\n    },\n    [actorIsSuperAdmin],\n  )\n\n  const updateGranted = React.useCallback(\n    (updater: (prev: string[]) => string[]) => {\n      setGranted((prev) => actorSanitizeFeatures(updater(prev)))\n    },\n    [actorSanitizeFeatures],\n  )\n\n  const tenantIdRef = React.useRef(tenantId)\n  React.useEffect(() => { tenantIdRef.current = tenantId }, [tenantId])\n  const hasMountedRef = React.useRef(false)\n\n  const fetchAclState = React.useCallback(async (forTenantId: string | null | undefined, cancelledRef: { current: boolean }) => {\n    try {\n      const aclQuery = new URLSearchParams()\n      aclQuery.set(kind === 'user' ? 'userId' : 'roleId', targetId)\n      if (forTenantId) aclQuery.set('tenantId', forTenantId)\n      const aclQueryString = aclQuery.toString()\n      const aclJson = await readJsonOr<AclPayload>(\n        `/api/auth/${kind === 'user' ? 'users' : 'roles'}/acl${aclQueryString ? `?${aclQueryString}` : ''}`,\n        undefined,\n        { hasCustomAcl: true, isSuperAdmin: false, features: [], organizations: null },\n      )\n      if (cancelledRef.current) return\n      const customAclExists = aclJson.hasCustomAcl !== false\n      setHasCustomAcl(customAclExists)\n      setOverrideEnabled(customAclExists)\n      setIsSuperAdmin(!!aclJson.isSuperAdmin)\n      setGranted(actorSanitizeFeatures(aclJson.features))\n      setOrganizations(aclJson.organizations == null ? null : Array.isArray(aclJson.organizations) ? aclJson.organizations : [])\n    } catch {}\n  }, [kind, targetId, actorSanitizeFeatures])\n\n  React.useEffect(() => {\n    const cancelled = { current: false }\n    async function load() {\n      setLoading(true)\n      try {\n        const fJson = await readJsonOr<FeatureListResponse>(\n          '/api/auth/features',\n          undefined,\n          { items: [], modules: [] },\n        )\n        if (!cancelled.current) {\n          setFeatures(fJson.items || [])\n          setModules(fJson.modules || [])\n        }\n      } catch {}\n      await fetchAclState(tenantIdRef.current, cancelled)\n      hasMountedRef.current = true\n      if (!cancelled.current) setLoading(false)\n    }\n    load()\n    return () => { cancelled.current = true }\n  }, [kind, targetId, fetchAclState])\n\n  React.useEffect(() => {\n    if (!hasMountedRef.current) return\n    if (preserveOnTenantChange) return\n    const cancelled = { current: false }\n    fetchAclState(tenantId, cancelled)\n    return () => { cancelled.current = true }\n  }, [tenantId, preserveOnTenantChange, fetchAclState])\n\n  React.useEffect(() => {\n    let cancelled = false\n    async function loadTenantScoped() {\n      if (canEditOrganizations) {\n        try {\n          const orgQuery = new URLSearchParams()\n          if (tenantId) orgQuery.set('tenantId', tenantId)\n          const orgQueryString = orgQuery.toString()\n          const oJson = await readJsonOr<OrganizationListResponse>(\n            `/api/directory/organizations${orgQueryString ? `?${orgQueryString}` : ''}`,\n            undefined,\n            { items: [] },\n          )\n          if (!cancelled) setOrgOptions(normalizeOrganizationOptions(oJson.items))\n        } catch {}\n      }\n      if (kind === 'user' && userRoles && userRoles.length > 0) {\n        try {\n          const roleQuery = new URLSearchParams({ pageSize: '100' })\n          if (tenantId) roleQuery.set('tenantId', tenantId)\n          const roleQueryString = roleQuery.toString()\n          const rolesJson = await readJsonOr<RoleListResponse>(\n            `/api/auth/roles${roleQueryString ? `?${roleQueryString}` : ''}`,\n            undefined,\n            { items: [] },\n          )\n          if (!cancelled) {\n            const allRoles = Array.isArray(rolesJson.items) ? rolesJson.items : []\n            const userRoleDetails: RoleSummary[] = buildRoleSummaries(allRoles, userRoles)\n            setRoleDetails(userRoleDetails)\n          }\n        } catch {}\n      }\n    }\n    loadTenantScoped()\n    return () => { cancelled = true }\n  }, [kind, canEditOrganizations, userRoles, tenantId])\n\n  // Notify parent of changes\n  React.useEffect(() => {\n    onChange?.({ isSuperAdmin, features: granted, organizations })\n  }, [isSuperAdmin, granted, organizations, onChange])\n\n  const grouped = React.useMemo(() => {\n    const moduleMap = new Map<string, string>()\n    for (const m of modules) {\n      moduleMap.set(m.id, m.title)\n    }\n    const map = new Map<string, { moduleId: string; moduleTitle: string; features: Feature[] }>()\n    for (const f of features) {\n      const moduleId = f.module\n      const moduleTitle = moduleMap.get(moduleId) || moduleId\n      if (!map.has(moduleId)) {\n        map.set(moduleId, { moduleId, moduleTitle, features: [] })\n      }\n      map.get(moduleId)!.features.push(f)\n    }\n    return Array.from(map.values()).sort((a, b) => a.moduleTitle.localeCompare(b.moduleTitle))\n  }, [features, modules])\n\n  const hasGlobalWildcard = granted.includes('*')\n  const hasOrganizationRestriction = Array.isArray(organizations) && organizations.length > 0\n  const showOrganizationWarning =\n    (kind === 'role' || overrideEnabled) &&\n    canEditOrganizations &&\n    !isSuperAdmin &&\n    hasOrganizationRestriction &&\n    granted.length === 0\n\n  \n  const toggleWildcard = React.useCallback((wildcard: string, enable: boolean) => {\n    if (!actorIsSuperAdmin && enable && isTenantRestrictedFeature(wildcard)) return\n    updateGranted((prev) => {\n      if (enable) {\n        if (prev.includes(wildcard)) return prev\n        return [...prev, wildcard]\n      }\n      return prev.filter((feature) => feature !== wildcard)\n    })\n  }, [actorIsSuperAdmin, updateGranted])\n\n  const toggleModuleWildcard = React.useCallback((moduleId: string, enable: boolean) => {\n    toggleWildcard(`${moduleId}.*`, enable)\n  }, [toggleWildcard])\n\n  const isModuleWildcardEnabled = (moduleId: string) => {\n    return granted.includes(`${moduleId}.*`)\n  }\n\n  const isFeatureCoveredByWildcard = (featureId: string) =>\n    granted.some((feature) => (feature === '*' || feature.endsWith('.*')) && matchFeature(featureId, feature))\n\n  const isFeatureChecked = (featureId: string) => hasFeature(granted, featureId)\n\n  if (loading) return <div className=\"text-sm text-muted-foreground\">Loading ACL\u2026</div>\n\n  const showRoleBanner = kind === 'user' && !hasCustomAcl && !overrideEnabled\n\n  return (\n    <div className=\"space-y-4\">\n      {showRoleBanner && (\n        <div className=\"rounded-lg border border-blue-200 bg-blue-50 p-4\">\n          <div className=\"text-sm font-medium text-blue-900 mb-2\">\n            Permissions inherited from roles\n          </div>\n          <div className=\"text-sm text-blue-700 mb-3\">\n            This user currently inherits permissions from their assigned roles.\n            {roleDetails.length > 0 && (\n              <span>\n                {' '}Assigned roles:{' '}\n                {roleDetails.map((role, idx) => {\n                  const roleId = typeof role?.id === 'string' && role.id.length > 0 ? role.id : `role-${idx}`\n                  const roleName = typeof role?.name === 'string' && role.name.length > 0 ? role.name : roleId\n                  return (\n                    <React.Fragment key={roleId}>\n                      {idx > 0 && ', '}\n                      <Link \n                        href={`/backend/roles/${roleId}/edit`}\n                        className=\"font-semibold text-blue-900 underline hover:text-blue-950 transition-colors\"\n                      >\n                        {roleName}\n                      </Link>\n                    </React.Fragment>\n                  )\n                })}\n              </span>\n            )}\n          </div>\n          <div className=\"flex items-center gap-2\">\n            <input \n              id=\"overrideAcl\" \n              type=\"checkbox\" \n              className=\"h-4 w-4\" \n              checked={overrideEnabled} \n              onChange={(e) => setOverrideEnabled(e.target.checked)} \n            />\n            <label htmlFor=\"overrideAcl\" className=\"text-sm text-blue-900 font-medium\">\n              Override permissions for this user only\n            </label>\n          </div>\n        </div>\n      )}\n      {(kind === 'role' || overrideEnabled) && (\n        <>\n          <div className=\"flex items-center gap-2\">\n            <input\n              id=\"isSuperAdmin\"\n              type=\"checkbox\"\n              className=\"h-4 w-4\"\n              checked={isSuperAdmin}\n              disabled={!actorIsSuperAdmin}\n              onChange={(e) => setIsSuperAdmin(!!e.target.checked)}\n            />\n            <label htmlFor=\"isSuperAdmin\" className=\"text-sm\">Super Admin (all features)</label>\n          </div>\n          {!actorIsSuperAdmin && (\n            <p className=\"text-xs text-muted-foreground\">Only super administrators can change this option.</p>\n          )}\n      {!isSuperAdmin && (\n        <>\n          {hasGlobalWildcard && (\n            <div className=\"rounded border border-blue-200 bg-blue-50 p-3\">\n              <div className=\"text-sm font-medium text-blue-900\">Global wildcard (*) enabled</div>\n              <div className=\"text-xs text-blue-700 mt-1\">This grants access to all features in the system.</div>\n              <Button\n                variant=\"outline\"\n                size=\"sm\"\n                className=\"mt-2\"\n                onClick={() => updateGranted((prev) => prev.filter((x) => x !== '*'))}\n              >\n                Remove global wildcard\n              </Button>\n            </div>\n          )}\n          {!hasGlobalWildcard && (\n            <AclDependencyDiagnosticsPanel\n              granted={granted}\n              catalog={features as readonly FeatureDescriptor[]}\n              onGrantedChange={updateGranted}\n              hideUnknownReferences={process.env.NODE_ENV === 'production'}\n            />\n          )}\n          <div className=\"grid grid-cols-1 md:grid-cols-2 gap-4\">\n            {grouped.map((group) => {\n              const moduleWildcard = isModuleWildcardEnabled(group.moduleId)\n              const nestedWildcards = Array.from(\n                new Set(\n                  granted.filter(\n                    (feature) =>\n                      feature !== '*' &&\n                      feature.endsWith('.*') &&\n                      feature.startsWith(`${group.moduleId}.`) &&\n                      feature !== `${group.moduleId}.*`,\n                  ),\n                ),\n              )\n                .map((wildcard) => {\n                  const prefix = wildcard.slice(0, -1)\n                  const relatedFeatures = group.features.filter((feature) => feature.id.startsWith(prefix))\n                  return { wildcard, features: relatedFeatures }\n                })\n                .sort((a, b) => a.wildcard.localeCompare(b.wildcard))\n              const nestedCoveredIds = new Set<string>()\n              for (const entry of nestedWildcards) {\n                for (const feature of entry.features) nestedCoveredIds.add(feature.id)\n              }\n              const moduleRestricted = !actorIsSuperAdmin && isTenantRestrictedFeature(`${group.moduleId}.*`)\n              const moduleCheckboxDisabled = hasGlobalWildcard || moduleRestricted\n              return (\n                <div key={group.moduleId} className=\"rounded border p-3\">\n                  <div className=\"flex items-center justify-between mb-3 pb-2 border-b\">\n                    <div className=\"text-sm font-medium\">{group.moduleTitle}</div>\n                    <div className=\"flex items-center gap-2\">\n                      <input \n                        id={`module-${group.moduleId}`} \n                        type=\"checkbox\" \n                        className=\"h-4 w-4\" \n                        checked={moduleWildcard || hasGlobalWildcard} \n                        disabled={moduleCheckboxDisabled}\n                        onChange={(e) => toggleModuleWildcard(group.moduleId, e.target.checked)} \n                      />\n                      <label htmlFor={`module-${group.moduleId}`} className=\"text-sm text-muted-foreground\">\n                        All {moduleWildcard && !hasGlobalWildcard ? <span className=\"font-medium text-blue-600\">({group.moduleId}.*)</span> : ''}\n                        {moduleRestricted ? <span className=\"ml-2 text-xs font-medium text-muted-foreground\">(manage via super admin)</span> : null}\n                      </label>\n                    </div>\n                  </div>\n                {nestedWildcards.length > 0 && (\n                  <div className=\"space-y-3 mb-3\">\n                    {nestedWildcards.map(({ wildcard, features: wildcardFeatures }) => {\n                        const checked = granted.includes(wildcard) || hasGlobalWildcard || moduleWildcard\n                        const wildcardRestricted = !actorIsSuperAdmin && isTenantRestrictedFeature(wildcard)\n                        const disabled = hasGlobalWildcard || moduleWildcard || wildcardRestricted\n                        return (\n                          <div key={wildcard} className=\"space-y-2\">\n                            <div className=\"flex items-center gap-2\">\n                              <input\n                                id={`wildcard-${wildcard}`}\n                                type=\"checkbox\"\n                                className=\"h-4 w-4\"\n                                checked={checked}\n                                disabled={disabled}\n                                onChange={(e) => toggleWildcard(wildcard, !!e.target.checked)}\n                              />\n                              <label\n                                htmlFor={`wildcard-${wildcard}`}\n                                className={`text-sm ${disabled ? 'text-muted-foreground' : ''}`}\n                              >\n                                {formatWildcardLabel(group.moduleId, wildcard)}{' '}\n                                <span className=\"text-muted-foreground text-xs font-mono\">({wildcard})</span>\n                                {wildcardRestricted ? (\n                                  <span className=\"ml-2 text-xs font-medium text-muted-foreground\">\n                                    {t('auth.acl.restricted', 'Restricted')}\n                                  </span>\n                                ) : null}\n                              </label>\n                            </div>\n                            {wildcardFeatures.length > 0 && (\n                              <div className=\"relative ml-6 pl-4 text-sm text-muted-foreground space-y-1\">\n                                <div className=\"absolute left-0 top-1 bottom-1 w-px bg-border\" aria-hidden />\n                                {wildcardFeatures.map((wf) => (\n                                  <div key={`${wildcard}-${wf.id}`} className=\"pl-2\">\n                                    <span>\n                                      {wf.title}{' '}\n                                      <span className=\"text-xs font-mono text-muted-foreground\">({wf.id})</span>\n                                    </span>\n                                  </div>\n                                ))}\n                              </div>\n                            )}\n                          </div>\n                        )\n                      })}\n                    </div>\n                  )}\n                  <div className=\"space-y-2\">\n                    {group.features.map((f) => {\n                      if (nestedCoveredIds.has(f.id)) return null\n                      const checked = isFeatureChecked(f.id)\n                      const isWildcardCovered = isFeatureCoveredByWildcard(f.id)\n                      const restricted = !actorIsSuperAdmin && isTenantRestrictedFeature(f.id)\n                      const disabled = isWildcardCovered || restricted\n                      return (\n                        <div key={f.id} className=\"flex items-center gap-2\">\n                          <input\n                            id={`f-${f.id}`}\n                            type=\"checkbox\"\n                            className=\"h-4 w-4\"\n                            checked={checked}\n                            disabled={disabled}\n                            onChange={(e) => {\n                              const on = !!e.target.checked\n                              updateGranted((prev) => {\n                                if (on) return [...prev, f.id]\n                                return prev.filter((x) => x !== f.id)\n                              })\n                            }}\n                          />\n                          <label\n                            htmlFor={`f-${f.id}`}\n                            className={`text-sm ${disabled ? 'text-muted-foreground' : ''}`}\n                          >\n                            {f.title} <span className=\"text-muted-foreground text-xs\">({f.id})</span>\n                            {restricted ? (\n                              <span className=\"ml-2 text-xs font-medium text-muted-foreground\">\n                                {t('auth.acl.restricted', 'Restricted')}\n                              </span>\n                            ) : null}\n                          </label>\n                        </div>\n                      )\n                    })}\n                  </div>\n                </div>\n              )\n            })}\n          </div>\n        </>\n          )}\n          {canEditOrganizations && (\n            <div className=\"rounded border p-3\">\n              <div className=\"text-sm font-medium mb-2\">\n                {t('auth.acl.organizationsScope', 'Organizations scope')}\n              </div>\n              <div className=\"text-xs text-muted-foreground mb-2\">Empty = all organizations. Select one or more to restrict.</div>\n              <div className=\"grid grid-cols-1 md:grid-cols-2 gap-2\">\n                {orgOptions.map((o) => {\n                  const checked = organizations == null ? false : (organizations || []).includes(o.id)\n                  return (\n                    <div key={o.id} className=\"flex items-center gap-2\">\n                      <input id={`org-${o.id}`} type=\"checkbox\" className=\"h-4 w-4\" checked={checked} onChange={(e) => {\n                        const on = !!e.target.checked\n                        setOrganizations((prev) => {\n                          if (prev == null) return on ? [o.id] : []\n                          return on ? Array.from(new Set([...(prev || []), o.id])) : (prev || []).filter((x) => x !== o.id)\n                        })\n                      }} />\n                      <label htmlFor={`org-${o.id}`} className=\"text-sm\">{o.name}</label>\n                    </div>\n                  )\n                })}\n              </div>\n              <div className=\"mt-2\">\n                <Button variant=\"outline\" onClick={() => setOrganizations(null)}>{t('auth.acl.allowAllOrganizations', 'Allow all organizations')}</Button>\n              </div>\n              {showOrganizationWarning && (\n                <div className=\"mt-3 rounded border border-amber-200 bg-amber-50 px-3 py-2 text-sm text-amber-900\">\n                  {t('auth.acl.organizationWarning', 'Organization restrictions are saved only when at least one feature override is selected. Add a feature or enable a module wildcard before saving.')}\n                </div>\n              )}\n            </div>\n          )}\n        </>\n      )}\n    </div>\n  )\n}\n"],
+  "mappings": ";AA0SsB,SAiEd,UAjEc,KAoBF,YApBE;AAzStB,YAAY,WAAW;AACvB,SAAS,cAAc;AACvB,SAAS,eAAe;AACxB,OAAO,UAAU;AACjB,SAAS,YAAY,oBAAoB;AACzC,SAAS,YAAY;AAErB,SAAS,qCAAqC;AAE9C,SAAS,YAAY,OAAuB;AAC1C,SAAO,MAAM,QAAQ,UAAU,GAAG,EAAE,QAAQ,SAAS,CAAC,SAAS,KAAK,YAAY,CAAC;AACnF;AAEA,SAAS,sBAAsB,OAA0B;AACvD,MAAI,CAAC,MAAM,QAAQ,KAAK,EAAG,QAAO,CAAC;AACnC,QAAM,QAAQ,oBAAI,IAAY;AAC9B,aAAW,SAAS,OAAO;AACzB,QAAI,OAAO,UAAU,SAAU;AAC/B,UAAM,UAAU,MAAM,KAAK;AAC3B,QAAI,CAAC,QAAS;AACd,UAAM,IAAI,OAAO;AAAA,EACnB;AACA,SAAO,MAAM,KAAK,KAAK;AACzB;AAEA,SAAS,0BAA0B,SAA0B;AAC3D,MAAI,YAAY,OAAO,YAAY,cAAe,QAAO;AACzD,MAAI,QAAQ,WAAW,mBAAmB,EAAG,QAAO;AACpD,SAAO;AACT;AAEA,SAAS,oBAAoB,UAAkB,UAA0B;AACvE,MAAI,CAAC,SAAS,SAAS,IAAI,EAAG,QAAO;AACrC,QAAM,SAAS,GAAG,QAAQ;AAC1B,QAAM,SAAS,SAAS,WAAW,MAAM,IAAI,SAAS,MAAM,OAAO,QAAQ,EAAE,IAAI,SAAS,MAAM,GAAG,EAAE;AACrG,MAAI,CAAC,OAAQ,QAAO;AACpB,SAAO,OAAO,OAAO,MAAM,GAAG,EAAE,IAAI,WAAW,EAAE,KAAK,KAAK,CAAC;AAC9D;AAQA,SAAS,mBAAmB,OAAuB,cAAuC;AACxF,QAAM,YAA2B,CAAC;AAClC,aAAW,QAAQ,OAAO;AACxB,UAAM,OAAO,OAAO,MAAM,SAAS,WAAW,KAAK,OAAO;AAC1D,QAAI,CAAC,QAAQ,CAAC,aAAa,SAAS,IAAI,EAAG;AAC3C,UAAM,aAAa,OAAO,MAAM,OAAO,YAAY,KAAK,GAAG,SAAS;AACpE,UAAM,KAAK,aAAc,KAAM,KAAgB;AAC/C,cAAU,KAAK,EAAE,IAAI,KAAK,CAAC;AAAA,EAC7B;AACA,SAAO;AACT;AAiBA,SAAS,6BAA6B,OAA+E;AACnH,MAAI,CAAC,MAAM,QAAQ,KAAK,EAAG,QAAO,CAAC;AACnC,SAAO,MAAM,OAA4C,CAAC,KAAK,QAAQ;AACrE,QAAI,CAAC,IAAK,QAAO;AACjB,UAAM,KAAK,OAAO,IAAI,OAAO,YAAY,IAAI,GAAG,KAAK,EAAE,SAAS,IAAI,IAAI,KAAK;AAC7E,QAAI,CAAC,GAAI,QAAO;AAChB,UAAM,OAAO,OAAO,IAAI,SAAS,YAAY,IAAI,KAAK,KAAK,EAAE,SAAS,IAAI,IAAI,OAAO;AACrF,QAAI,KAAK,EAAE,IAAI,KAAK,CAAC;AACrB,WAAO;AAAA,EACT,GAAG,CAAC,CAAC;AACP;AAEA,eAAe,WACb,KACA,MACA,UACY;AACZ,QAAM,OAAO,MAAM,QAAW,KAAK,MAAM,EAAE,SAAS,CAAC;AACrD,MAAI,CAAC,KAAK,GAAI,QAAO;AACrB,SAAO,KAAK,UAAU;AACxB;AAEO,SAAS,UAAU;AAAA,EACxB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,yBAAyB;AAC3B,GAUG;AACD,QAAM,oBAAoB,CAAC,CAAC;AAC5B,QAAM,CAAC,SAAS,UAAU,IAAI,MAAM,SAAS,IAAI;AACjD,QAAM,CAAC,UAAU,WAAW,IAAI,MAAM,SAAoB,CAAC,CAAC;AAC5D,QAAM,IAAI,KAAK;AACf,QAAM,CAAC,SAAS,UAAU,IAAI,MAAM,SAAuB,CAAC,CAAC;AAC7D,QAAM,CAAC,SAAS,UAAU,IAAI,MAAM,SAAmB,MAAM;AAC3D,UAAM,aAAa,sBAAsB,OAAO,QAAQ;AACxD,WAAO,oBAAoB,aAAa,WAAW,OAAO,CAAC,YAAY,CAAC,0BAA0B,OAAO,CAAC;AAAA,EAC5G,CAAC;AACD,QAAM,CAAC,cAAc,eAAe,IAAI,MAAM,SAAS,OAAO,gBAAgB,KAAK;AACnF,QAAM,CAAC,eAAe,gBAAgB,IAAI,MAAM,SAA0B,OAAO,iBAAiB,IAAI;AACtG,QAAM,CAAC,YAAY,aAAa,IAAI,MAAM,SAAyC,CAAC,CAAC;AACrF,QAAM,CAAC,cAAc,eAAe,IAAI,MAAM,SAAS,IAAI;AAC3D,QAAM,CAAC,iBAAiB,kBAAkB,IAAI,MAAM,SAAS,KAAK;AAClE,QAAM,CAAC,aAAa,cAAc,IAAI,MAAM,SAAwB,CAAC,CAAC;AAEtE,QAAM,wBAAwB,MAAM;AAAA,IAClC,CAAC,SAA4B;AAC3B,YAAM,aAAa,sBAAsB,IAAI;AAC7C,UAAI,kBAAmB,QAAO;AAC9B,aAAO,WAAW,OAAO,CAAC,YAAY,CAAC,0BAA0B,OAAO,CAAC;AAAA,IAC3E;AAAA,IACA,CAAC,iBAAiB;AAAA,EACpB;AAEA,QAAM,gBAAgB,MAAM;AAAA,IAC1B,CAAC,YAA0C;AACzC,iBAAW,CAAC,SAAS,sBAAsB,QAAQ,IAAI,CAAC,CAAC;AAAA,IAC3D;AAAA,IACA,CAAC,qBAAqB;AAAA,EACxB;AAEA,QAAM,cAAc,MAAM,OAAO,QAAQ;AACzC,QAAM,UAAU,MAAM;AAAE,gBAAY,UAAU;AAAA,EAAS,GAAG,CAAC,QAAQ,CAAC;AACpE,QAAM,gBAAgB,MAAM,OAAO,KAAK;AAExC,QAAM,gBAAgB,MAAM,YAAY,OAAO,aAAwC,iBAAuC;AAC5H,QAAI;AACF,YAAM,WAAW,IAAI,gBAAgB;AACrC,eAAS,IAAI,SAAS,SAAS,WAAW,UAAU,QAAQ;AAC5D,UAAI,YAAa,UAAS,IAAI,YAAY,WAAW;AACrD,YAAM,iBAAiB,SAAS,SAAS;AACzC,YAAM,UAAU,MAAM;AAAA,QACpB,aAAa,SAAS,SAAS,UAAU,OAAO,OAAO,iBAAiB,IAAI,cAAc,KAAK,EAAE;AAAA,QACjG;AAAA,QACA,EAAE,cAAc,MAAM,cAAc,OAAO,UAAU,CAAC,GAAG,eAAe,KAAK;AAAA,MAC/E;AACA,UAAI,aAAa,QAAS;AAC1B,YAAM,kBAAkB,QAAQ,iBAAiB;AACjD,sBAAgB,eAAe;AAC/B,yBAAmB,eAAe;AAClC,sBAAgB,CAAC,CAAC,QAAQ,YAAY;AACtC,iBAAW,sBAAsB,QAAQ,QAAQ,CAAC;AAClD,uBAAiB,QAAQ,iBAAiB,OAAO,OAAO,MAAM,QAAQ,QAAQ,aAAa,IAAI,QAAQ,gBAAgB,CAAC,CAAC;AAAA,IAC3H,QAAQ;AAAA,IAAC;AAAA,EACX,GAAG,CAAC,MAAM,UAAU,qBAAqB,CAAC;AAE1C,QAAM,UAAU,MAAM;AACpB,UAAM,YAAY,EAAE,SAAS,MAAM;AACnC,mBAAe,OAAO;AACpB,iBAAW,IAAI;AACf,UAAI;AACF,cAAM,QAAQ,MAAM;AAAA,UAClB;AAAA,UACA;AAAA,UACA,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC,EAAE;AAAA,QAC3B;AACA,YAAI,CAAC,UAAU,SAAS;AACtB,sBAAY,MAAM,SAAS,CAAC,CAAC;AAC7B,qBAAW,MAAM,WAAW,CAAC,CAAC;AAAA,QAChC;AAAA,MACF,QAAQ;AAAA,MAAC;AACT,YAAM,cAAc,YAAY,SAAS,SAAS;AAClD,oBAAc,UAAU;AACxB,UAAI,CAAC,UAAU,QAAS,YAAW,KAAK;AAAA,IAC1C;AACA,SAAK;AACL,WAAO,MAAM;AAAE,gBAAU,UAAU;AAAA,IAAK;AAAA,EAC1C,GAAG,CAAC,MAAM,UAAU,aAAa,CAAC;AAElC,QAAM,UAAU,MAAM;AACpB,QAAI,CAAC,cAAc,QAAS;AAC5B,QAAI,uBAAwB;AAC5B,UAAM,YAAY,EAAE,SAAS,MAAM;AACnC,kBAAc,UAAU,SAAS;AACjC,WAAO,MAAM;AAAE,gBAAU,UAAU;AAAA,IAAK;AAAA,EAC1C,GAAG,CAAC,UAAU,wBAAwB,aAAa,CAAC;AAEpD,QAAM,UAAU,MAAM;AACpB,QAAI,YAAY;AAChB,mBAAe,mBAAmB;AAChC,UAAI,sBAAsB;AACxB,YAAI;AACF,gBAAM,WAAW,IAAI,gBAAgB;AACrC,cAAI,SAAU,UAAS,IAAI,YAAY,QAAQ;AAC/C,gBAAM,iBAAiB,SAAS,SAAS;AACzC,gBAAM,QAAQ,MAAM;AAAA,YAClB,+BAA+B,iBAAiB,IAAI,cAAc,KAAK,EAAE;AAAA,YACzE;AAAA,YACA,EAAE,OAAO,CAAC,EAAE;AAAA,UACd;AACA,cAAI,CAAC,UAAW,eAAc,6BAA6B,MAAM,KAAK,CAAC;AAAA,QACzE,QAAQ;AAAA,QAAC;AAAA,MACX;AACA,UAAI,SAAS,UAAU,aAAa,UAAU,SAAS,GAAG;AACxD,YAAI;AACF,gBAAM,YAAY,IAAI,gBAAgB,EAAE,UAAU,MAAM,CAAC;AACzD,cAAI,SAAU,WAAU,IAAI,YAAY,QAAQ;AAChD,gBAAM,kBAAkB,UAAU,SAAS;AAC3C,gBAAM,YAAY,MAAM;AAAA,YACtB,kBAAkB,kBAAkB,IAAI,eAAe,KAAK,EAAE;AAAA,YAC9D;AAAA,YACA,EAAE,OAAO,CAAC,EAAE;AAAA,UACd;AACA,cAAI,CAAC,WAAW;AACd,kBAAM,WAAW,MAAM,QAAQ,UAAU,KAAK,IAAI,UAAU,QAAQ,CAAC;AACrE,kBAAM,kBAAiC,mBAAmB,UAAU,SAAS;AAC7E,2BAAe,eAAe;AAAA,UAChC;AAAA,QACF,QAAQ;AAAA,QAAC;AAAA,MACX;AAAA,IACF;AACA,qBAAiB;AACjB,WAAO,MAAM;AAAE,kBAAY;AAAA,IAAK;AAAA,EAClC,GAAG,CAAC,MAAM,sBAAsB,WAAW,QAAQ,CAAC;AAGpD,QAAM,UAAU,MAAM;AACpB,eAAW,EAAE,cAAc,UAAU,SAAS,cAAc,CAAC;AAAA,EAC/D,GAAG,CAAC,cAAc,SAAS,eAAe,QAAQ,CAAC;AAEnD,QAAM,UAAU,MAAM,QAAQ,MAAM;AAClC,UAAM,YAAY,oBAAI,IAAoB;AAC1C,eAAW,KAAK,SAAS;AACvB,gBAAU,IAAI,EAAE,IAAI,EAAE,KAAK;AAAA,IAC7B;AACA,UAAM,MAAM,oBAAI,IAA4E;AAC5F,eAAW,KAAK,UAAU;AACxB,YAAM,WAAW,EAAE;AACnB,YAAM,cAAc,UAAU,IAAI,QAAQ,KAAK;AAC/C,UAAI,CAAC,IAAI,IAAI,QAAQ,GAAG;AACtB,YAAI,IAAI,UAAU,EAAE,UAAU,aAAa,UAAU,CAAC,EAAE,CAAC;AAAA,MAC3D;AACA,UAAI,IAAI,QAAQ,EAAG,SAAS,KAAK,CAAC;AAAA,IACpC;AACA,WAAO,MAAM,KAAK,IAAI,OAAO,CAAC,EAAE,KAAK,CAAC,GAAG,MAAM,EAAE,YAAY,cAAc,EAAE,WAAW,CAAC;AAAA,EAC3F,GAAG,CAAC,UAAU,OAAO,CAAC;AAEtB,QAAM,oBAAoB,QAAQ,SAAS,GAAG;AAC9C,QAAM,6BAA6B,MAAM,QAAQ,aAAa,KAAK,cAAc,SAAS;AAC1F,QAAM,2BACH,SAAS,UAAU,oBACpB,wBACA,CAAC,gBACD,8BACA,QAAQ,WAAW;AAGrB,QAAM,iBAAiB,MAAM,YAAY,CAAC,UAAkB,WAAoB;AAC9E,QAAI,CAAC,qBAAqB,UAAU,0BAA0B,QAAQ,EAAG;AACzE,kBAAc,CAAC,SAAS;AACtB,UAAI,QAAQ;AACV,YAAI,KAAK,SAAS,QAAQ,EAAG,QAAO;AACpC,eAAO,CAAC,GAAG,MAAM,QAAQ;AAAA,MAC3B;AACA,aAAO,KAAK,OAAO,CAAC,YAAY,YAAY,QAAQ;AAAA,IACtD,CAAC;AAAA,EACH,GAAG,CAAC,mBAAmB,aAAa,CAAC;AAErC,QAAM,uBAAuB,MAAM,YAAY,CAAC,UAAkB,WAAoB;AACpF,mBAAe,GAAG,QAAQ,MAAM,MAAM;AAAA,EACxC,GAAG,CAAC,cAAc,CAAC;AAEnB,QAAM,0BAA0B,CAAC,aAAqB;AACpD,WAAO,QAAQ,SAAS,GAAG,QAAQ,IAAI;AAAA,EACzC;AAEA,QAAM,6BAA6B,CAAC,cAClC,QAAQ,KAAK,CAAC,aAAa,YAAY,OAAO,QAAQ,SAAS,IAAI,MAAM,aAAa,WAAW,OAAO,CAAC;AAE3G,QAAM,mBAAmB,CAAC,cAAsB,WAAW,SAAS,SAAS;AAE7E,MAAI,QAAS,QAAO,oBAAC,SAAI,WAAU,iCAAgC,+BAAY;AAE/E,QAAM,iBAAiB,SAAS,UAAU,CAAC,gBAAgB,CAAC;AAE5D,SACE,qBAAC,SAAI,WAAU,aACZ;AAAA,sBACC,qBAAC,SAAI,WAAU,oDACb;AAAA,0BAAC,SAAI,WAAU,0CAAyC,8CAExD;AAAA,MACA,qBAAC,SAAI,WAAU,8BAA6B;AAAA;AAAA,QAEzC,YAAY,SAAS,KACpB,qBAAC,UACE;AAAA;AAAA,UAAI;AAAA,UAAgB;AAAA,UACpB,YAAY,IAAI,CAAC,MAAM,QAAQ;AAC9B,kBAAM,SAAS,OAAO,MAAM,OAAO,YAAY,KAAK,GAAG,SAAS,IAAI,KAAK,KAAK,QAAQ,GAAG;AACzF,kBAAM,WAAW,OAAO,MAAM,SAAS,YAAY,KAAK,KAAK,SAAS,IAAI,KAAK,OAAO;AACtF,mBACE,qBAAC,MAAM,UAAN,EACE;AAAA,oBAAM,KAAK;AAAA,cACZ;AAAA,gBAAC;AAAA;AAAA,kBACC,MAAM,kBAAkB,MAAM;AAAA,kBAC9B,WAAU;AAAA,kBAET;AAAA;AAAA,cACH;AAAA,iBAPmB,MAQrB;AAAA,UAEJ,CAAC;AAAA,WACH;AAAA,SAEJ;AAAA,MACA,qBAAC,SAAI,WAAU,2BACb;AAAA;AAAA,UAAC;AAAA;AAAA,YACC,IAAG;AAAA,YACH,MAAK;AAAA,YACL,WAAU;AAAA,YACV,SAAS;AAAA,YACT,UAAU,CAAC,MAAM,mBAAmB,EAAE,OAAO,OAAO;AAAA;AAAA,QACtD;AAAA,QACA,oBAAC,WAAM,SAAQ,eAAc,WAAU,qCAAoC,qDAE3E;AAAA,SACF;AAAA,OACF;AAAA,KAEA,SAAS,UAAU,oBACnB,iCACE;AAAA,2BAAC,SAAI,WAAU,2BACb;AAAA;AAAA,UAAC;AAAA;AAAA,YACC,IAAG;AAAA,YACH,MAAK;AAAA,YACL,WAAU;AAAA,YACV,SAAS;AAAA,YACT,UAAU,CAAC;AAAA,YACX,UAAU,CAAC,MAAM,gBAAgB,CAAC,CAAC,EAAE,OAAO,OAAO;AAAA;AAAA,QACrD;AAAA,QACA,oBAAC,WAAM,SAAQ,gBAAe,WAAU,WAAU,wCAA0B;AAAA,SAC9E;AAAA,MACC,CAAC,qBACA,oBAAC,OAAE,WAAU,iCAAgC,+DAAiD;AAAA,MAEnG,CAAC,gBACA,iCACG;AAAA,6BACC,qBAAC,SAAI,WAAU,iDACb;AAAA,8BAAC,SAAI,WAAU,qCAAoC,yCAA2B;AAAA,UAC9E,oBAAC,SAAI,WAAU,8BAA6B,+DAAiD;AAAA,UAC7F;AAAA,YAAC;AAAA;AAAA,cACC,SAAQ;AAAA,cACR,MAAK;AAAA,cACL,WAAU;AAAA,cACV,SAAS,MAAM,cAAc,CAAC,SAAS,KAAK,OAAO,CAAC,MAAM,MAAM,GAAG,CAAC;AAAA,cACrE;AAAA;AAAA,UAED;AAAA,WACF;AAAA,QAED,CAAC,qBACA;AAAA,UAAC;AAAA;AAAA,YACC;AAAA,YACA,SAAS;AAAA,YACT,iBAAiB;AAAA,YACjB,uBAAuB,QAAQ,IAAI,aAAa;AAAA;AAAA,QAClD;AAAA,QAEF,oBAAC,SAAI,WAAU,yCACZ,kBAAQ,IAAI,CAAC,UAAU;AACtB,gBAAM,iBAAiB,wBAAwB,MAAM,QAAQ;AAC7D,gBAAM,kBAAkB,MAAM;AAAA,YAC5B,IAAI;AAAA,cACF,QAAQ;AAAA,gBACN,CAAC,YACC,YAAY,OACZ,QAAQ,SAAS,IAAI,KACrB,QAAQ,WAAW,GAAG,MAAM,QAAQ,GAAG,KACvC,YAAY,GAAG,MAAM,QAAQ;AAAA,cACjC;AAAA,YACF;AAAA,UACF,EACG,IAAI,CAAC,aAAa;AACjB,kBAAM,SAAS,SAAS,MAAM,GAAG,EAAE;AACnC,kBAAM,kBAAkB,MAAM,SAAS,OAAO,CAAC,YAAY,QAAQ,GAAG,WAAW,MAAM,CAAC;AACxF,mBAAO,EAAE,UAAU,UAAU,gBAAgB;AAAA,UAC/C,CAAC,EACA,KAAK,CAAC,GAAG,MAAM,EAAE,SAAS,cAAc,EAAE,QAAQ,CAAC;AACtD,gBAAM,mBAAmB,oBAAI,IAAY;AACzC,qBAAW,SAAS,iBAAiB;AACnC,uBAAW,WAAW,MAAM,SAAU,kBAAiB,IAAI,QAAQ,EAAE;AAAA,UACvE;AACA,gBAAM,mBAAmB,CAAC,qBAAqB,0BAA0B,GAAG,MAAM,QAAQ,IAAI;AAC9F,gBAAM,yBAAyB,qBAAqB;AACpD,iBACE,qBAAC,SAAyB,WAAU,sBAClC;AAAA,iCAAC,SAAI,WAAU,wDACb;AAAA,kCAAC,SAAI,WAAU,uBAAuB,gBAAM,aAAY;AAAA,cACxD,qBAAC,SAAI,WAAU,2BACb;AAAA;AAAA,kBAAC;AAAA;AAAA,oBACC,IAAI,UAAU,MAAM,QAAQ;AAAA,oBAC5B,MAAK;AAAA,oBACL,WAAU;AAAA,oBACV,SAAS,kBAAkB;AAAA,oBAC3B,UAAU;AAAA,oBACV,UAAU,CAAC,MAAM,qBAAqB,MAAM,UAAU,EAAE,OAAO,OAAO;AAAA;AAAA,gBACxE;AAAA,gBACA,qBAAC,WAAM,SAAS,UAAU,MAAM,QAAQ,IAAI,WAAU,iCAAgC;AAAA;AAAA,kBAC/E,kBAAkB,CAAC,oBAAoB,qBAAC,UAAK,WAAU,6BAA4B;AAAA;AAAA,oBAAE,MAAM;AAAA,oBAAS;AAAA,qBAAG,IAAU;AAAA,kBACrH,mBAAmB,oBAAC,UAAK,WAAU,kDAAiD,sCAAwB,IAAU;AAAA,mBACzH;AAAA,iBACF;AAAA,eACF;AAAA,YACD,gBAAgB,SAAS,KACxB,oBAAC,SAAI,WAAU,kBACZ,0BAAgB,IAAI,CAAC,EAAE,UAAU,UAAU,iBAAiB,MAAM;AAC/D,oBAAM,UAAU,QAAQ,SAAS,QAAQ,KAAK,qBAAqB;AACnE,oBAAM,qBAAqB,CAAC,qBAAqB,0BAA0B,QAAQ;AACnF,oBAAM,WAAW,qBAAqB,kBAAkB;AACxD,qBACE,qBAAC,SAAmB,WAAU,aAC5B;AAAA,qCAAC,SAAI,WAAU,2BACb;AAAA;AAAA,oBAAC;AAAA;AAAA,sBACC,IAAI,YAAY,QAAQ;AAAA,sBACxB,MAAK;AAAA,sBACL,WAAU;AAAA,sBACV;AAAA,sBACA;AAAA,sBACA,UAAU,CAAC,MAAM,eAAe,UAAU,CAAC,CAAC,EAAE,OAAO,OAAO;AAAA;AAAA,kBAC9D;AAAA,kBACA;AAAA,oBAAC;AAAA;AAAA,sBACC,SAAS,YAAY,QAAQ;AAAA,sBAC7B,WAAW,WAAW,WAAW,0BAA0B,EAAE;AAAA,sBAE5D;AAAA,4CAAoB,MAAM,UAAU,QAAQ;AAAA,wBAAG;AAAA,wBAChD,qBAAC,UAAK,WAAU,2CAA0C;AAAA;AAAA,0BAAE;AAAA,0BAAS;AAAA,2BAAC;AAAA,wBACrE,qBACC,oBAAC,UAAK,WAAU,kDACb,YAAE,uBAAuB,YAAY,GACxC,IACE;AAAA;AAAA;AAAA,kBACN;AAAA,mBACF;AAAA,gBACC,iBAAiB,SAAS,KACzB,qBAAC,SAAI,WAAU,8DACb;AAAA,sCAAC,SAAI,WAAU,iDAAgD,eAAW,MAAC;AAAA,kBAC1E,iBAAiB,IAAI,CAAC,OACrB,oBAAC,SAAiC,WAAU,QAC1C,+BAAC,UACE;AAAA,uBAAG;AAAA,oBAAO;AAAA,oBACX,qBAAC,UAAK,WAAU,2CAA0C;AAAA;AAAA,sBAAE,GAAG;AAAA,sBAAG;AAAA,uBAAC;AAAA,qBACrE,KAJQ,GAAG,QAAQ,IAAI,GAAG,EAAE,EAK9B,CACD;AAAA,mBACH;AAAA,mBAlCM,QAoCV;AAAA,YAEJ,CAAC,GACH;AAAA,YAEF,oBAAC,SAAI,WAAU,aACZ,gBAAM,SAAS,IAAI,CAAC,MAAM;AACzB,kBAAI,iBAAiB,IAAI,EAAE,EAAE,EAAG,QAAO;AACvC,oBAAM,UAAU,iBAAiB,EAAE,EAAE;AACrC,oBAAM,oBAAoB,2BAA2B,EAAE,EAAE;AACzD,oBAAM,aAAa,CAAC,qBAAqB,0BAA0B,EAAE,EAAE;AACvE,oBAAM,WAAW,qBAAqB;AACtC,qBACE,qBAAC,SAAe,WAAU,2BACxB;AAAA;AAAA,kBAAC;AAAA;AAAA,oBACC,IAAI,KAAK,EAAE,EAAE;AAAA,oBACb,MAAK;AAAA,oBACL,WAAU;AAAA,oBACV;AAAA,oBACA;AAAA,oBACA,UAAU,CAAC,MAAM;AACf,4BAAM,KAAK,CAAC,CAAC,EAAE,OAAO;AACtB,oCAAc,CAAC,SAAS;AACtB,4BAAI,GAAI,QAAO,CAAC,GAAG,MAAM,EAAE,EAAE;AAC7B,+BAAO,KAAK,OAAO,CAAC,MAAM,MAAM,EAAE,EAAE;AAAA,sBACtC,CAAC;AAAA,oBACH;AAAA;AAAA,gBACF;AAAA,gBACA;AAAA,kBAAC;AAAA;AAAA,oBACC,SAAS,KAAK,EAAE,EAAE;AAAA,oBAClB,WAAW,WAAW,WAAW,0BAA0B,EAAE;AAAA,oBAE5D;AAAA,wBAAE;AAAA,sBAAM;AAAA,sBAAC,qBAAC,UAAK,WAAU,iCAAgC;AAAA;AAAA,wBAAE,EAAE;AAAA,wBAAG;AAAA,yBAAC;AAAA,sBACjE,aACC,oBAAC,UAAK,WAAU,kDACb,YAAE,uBAAuB,YAAY,GACxC,IACE;AAAA;AAAA;AAAA,gBACN;AAAA,mBAzBQ,EAAE,EA0BZ;AAAA,YAEJ,CAAC,GACH;AAAA,eAvGQ,MAAM,QAwGhB;AAAA,QAEJ,CAAC,GACH;AAAA,SACF;AAAA,MAEG,wBACC,qBAAC,SAAI,WAAU,sBACb;AAAA,4BAAC,SAAI,WAAU,4BACZ,YAAE,+BAA+B,qBAAqB,GACzD;AAAA,QACA,oBAAC,SAAI,WAAU,sCAAqC,wEAA0D;AAAA,QAC9G,oBAAC,SAAI,WAAU,yCACZ,qBAAW,IAAI,CAAC,MAAM;AACrB,gBAAM,UAAU,iBAAiB,OAAO,SAAS,iBAAiB,CAAC,GAAG,SAAS,EAAE,EAAE;AACnF,iBACE,qBAAC,SAAe,WAAU,2BACxB;AAAA,gCAAC,WAAM,IAAI,OAAO,EAAE,EAAE,IAAI,MAAK,YAAW,WAAU,WAAU,SAAkB,UAAU,CAAC,MAAM;AAC/F,oBAAM,KAAK,CAAC,CAAC,EAAE,OAAO;AACtB,+BAAiB,CAAC,SAAS;AACzB,oBAAI,QAAQ,KAAM,QAAO,KAAK,CAAC,EAAE,EAAE,IAAI,CAAC;AACxC,uBAAO,KAAK,MAAM,KAAK,oBAAI,IAAI,CAAC,GAAI,QAAQ,CAAC,GAAI,EAAE,EAAE,CAAC,CAAC,KAAK,QAAQ,CAAC,GAAG,OAAO,CAAC,MAAM,MAAM,EAAE,EAAE;AAAA,cAClG,CAAC;AAAA,YACH,GAAG;AAAA,YACH,oBAAC,WAAM,SAAS,OAAO,EAAE,EAAE,IAAI,WAAU,WAAW,YAAE,MAAK;AAAA,eARnD,EAAE,EASZ;AAAA,QAEJ,CAAC,GACH;AAAA,QACA,oBAAC,SAAI,WAAU,QACb,8BAAC,UAAO,SAAQ,WAAU,SAAS,MAAM,iBAAiB,IAAI,GAAI,YAAE,kCAAkC,yBAAyB,GAAE,GACnI;AAAA,QACC,2BACC,oBAAC,SAAI,WAAU,qFACZ,YAAE,gCAAgC,mJAAmJ,GACxL;AAAA,SAEJ;AAAA,OAEJ;AAAA,KAEJ;AAEJ;",
   "names": []
 }

package/dist/modules/catalog/acl.js

@@ -1,10 +1,35 @@
 const features = [
-  { id: "catalog.products.view", title: "View catalog products", module: "catalog" },
-  { id: "catalog.products.manage", title: "Manage catalog products", module: "catalog" },
+  {
+    id: "catalog.products.view",
+    title: "View catalog products",
+    module: "catalog",
+    dependsOn: ["currencies.view", "dictionaries.view"]
+  },
+  {
+    id: "catalog.products.manage",
+    title: "Manage catalog products",
+    module: "catalog",
+    dependsOn: ["catalog.products.view"]
+  },
   { id: "catalog.categories.view", title: "View catalog categories", module: "catalog" },
-  { id: "catalog.categories.manage", title: "Manage catalog categories", module: "catalog" },
-  { id: "catalog.variants.manage", title: "Manage catalog variants", module: "catalog" },
-  { id: "catalog.pricing.manage", title: "Manage catalog pricing", module: "catalog" },
+  {
+    id: "catalog.categories.manage",
+    title: "Manage catalog categories",
+    module: "catalog",
+    dependsOn: ["catalog.categories.view"]
+  },
+  {
+    id: "catalog.variants.manage",
+    title: "Manage catalog variants",
+    module: "catalog",
+    dependsOn: ["catalog.products.view"]
+  },
+  {
+    id: "catalog.pricing.manage",
+    title: "Manage catalog pricing",
+    module: "catalog",
+    dependsOn: ["catalog.products.view", "currencies.view"]
+  },
   { id: "catalog.settings.manage", title: "Manage catalog settings", module: "catalog" }
 ];
 var acl_default = features;

package/dist/modules/catalog/acl.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../src/modules/catalog/acl.ts"],
-  "sourcesContent": ["export const features = [\n  { id: 'catalog.products.view', title: 'View catalog products', module: 'catalog' },\n  { id: 'catalog.products.manage', title: 'Manage catalog products', module: 'catalog' },\n  { id: 'catalog.categories.view', title: 'View catalog categories', module: 'catalog' },\n  { id: 'catalog.categories.manage', title: 'Manage catalog categories', module: 'catalog' },\n  { id: 'catalog.variants.manage', title: 'Manage catalog variants', module: 'catalog' },\n  { id: 'catalog.pricing.manage', title: 'Manage catalog pricing', module: 'catalog' },\n  { id: 'catalog.settings.manage', title: 'Manage catalog settings', module: 'catalog' },\n]\n\nexport default features\n"],
-  "mappings": "AAAO,MAAM,WAAW;AAAA,EACtB,EAAE,IAAI,yBAAyB,OAAO,yBAAyB,QAAQ,UAAU;AAAA,EACjF,EAAE,IAAI,2BAA2B,OAAO,2BAA2B,QAAQ,UAAU;AAAA,EACrF,EAAE,IAAI,2BAA2B,OAAO,2BAA2B,QAAQ,UAAU;AAAA,EACrF,EAAE,IAAI,6BAA6B,OAAO,6BAA6B,QAAQ,UAAU;AAAA,EACzF,EAAE,IAAI,2BAA2B,OAAO,2BAA2B,QAAQ,UAAU;AAAA,EACrF,EAAE,IAAI,0BAA0B,OAAO,0BAA0B,QAAQ,UAAU;AAAA,EACnF,EAAE,IAAI,2BAA2B,OAAO,2BAA2B,QAAQ,UAAU;AACvF;AAEA,IAAO,cAAQ;",
+  "sourcesContent": ["export const features = [\n  {\n    id: 'catalog.products.view',\n    title: 'View catalog products',\n    module: 'catalog',\n    dependsOn: ['currencies.view', 'dictionaries.view'],\n  },\n  {\n    id: 'catalog.products.manage',\n    title: 'Manage catalog products',\n    module: 'catalog',\n    dependsOn: ['catalog.products.view'],\n  },\n  { id: 'catalog.categories.view', title: 'View catalog categories', module: 'catalog' },\n  {\n    id: 'catalog.categories.manage',\n    title: 'Manage catalog categories',\n    module: 'catalog',\n    dependsOn: ['catalog.categories.view'],\n  },\n  {\n    id: 'catalog.variants.manage',\n    title: 'Manage catalog variants',\n    module: 'catalog',\n    dependsOn: ['catalog.products.view'],\n  },\n  {\n    id: 'catalog.pricing.manage',\n    title: 'Manage catalog pricing',\n    module: 'catalog',\n    dependsOn: ['catalog.products.view', 'currencies.view'],\n  },\n  { id: 'catalog.settings.manage', title: 'Manage catalog settings', module: 'catalog' },\n]\n\nexport default features\n"],
+  "mappings": "AAAO,MAAM,WAAW;AAAA,EACtB;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,QAAQ;AAAA,IACR,WAAW,CAAC,mBAAmB,mBAAmB;AAAA,EACpD;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,QAAQ;AAAA,IACR,WAAW,CAAC,uBAAuB;AAAA,EACrC;AAAA,EACA,EAAE,IAAI,2BAA2B,OAAO,2BAA2B,QAAQ,UAAU;AAAA,EACrF;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,QAAQ;AAAA,IACR,WAAW,CAAC,yBAAyB;AAAA,EACvC;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,QAAQ;AAAA,IACR,WAAW,CAAC,uBAAuB;AAAA,EACrC;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,QAAQ;AAAA,IACR,WAAW,CAAC,yBAAyB,iBAAiB;AAAA,EACxD;AAAA,EACA,EAAE,IAAI,2BAA2B,OAAO,2BAA2B,QAAQ,UAAU;AACvF;AAEA,IAAO,cAAQ;",
   "names": []
 }

package/dist/modules/catalog/backend/catalog/products/[id]/page.js

@@ -4,7 +4,7 @@ import * as React from "react";
 import Link from "next/link";
 import dynamic from "next/dynamic";
 import { Page, PageBody } from "@open-mercato/ui/backend/Page";
-import { ErrorMessage } from "@open-mercato/ui/backend/detail";
+import { ErrorMessage, RecordNotFoundState } from "@open-mercato/ui/backend/detail";
 import {
   CrudForm
 } from "@open-mercato/ui/backend/CrudForm";
@@ -187,6 +187,7 @@ function EditCatalogProductPage({
   const [initialValues, setInitialValues] = React.useState(null);
   const [loading, setLoading] = React.useState(true);
   const [error, setError] = React.useState(null);
+  const [isNotFound, setIsNotFound] = React.useState(false);
   const offerSnapshotsRef = React.useRef([]);
   const initialConversionsRef = React.useRef([]);
   const [categorizeOptions, setCategorizeOptions] = React.useState({ categories: [], channels: [], tags: [] });
@@ -366,6 +367,7 @@ function EditCatalogProductPage({
     async function loadProduct() {
       setLoading(true);
       setError(null);
+      setIsNotFound(false);
       try {
         const productRes = await apiCall(
           `/api/catalog/products?id=${encodeURIComponent(productId)}&page=1&pageSize=1&withDeleted=false`
@@ -379,10 +381,10 @@ function EditCatalogProductPage({
           );
         }
         const record = Array.isArray(productRes.result?.items) ? productRes.result?.items?.[0] : void 0;
-        if (!record)
-          throw new Error(
-            t("catalog.products.edit.errors.notFound", "Product not found.")
-          );
+        if (!record) {
+          if (!cancelled) setIsNotFound(true);
+          return;
+        }
         const rawMetadata = isRecord(record.metadata) ? record.metadata : null;
         const dimensions = normalizeProductDimensions(
           record.dimensions ?? rawMetadata?.dimensions ?? null
@@ -1028,6 +1030,16 @@ function EditCatalogProductPage({
       }
     ) }) });
   }
+  if (isNotFound && !loading) {
+    return /* @__PURE__ */ jsx(Page, { children: /* @__PURE__ */ jsx(PageBody, { children: /* @__PURE__ */ jsx(
+      RecordNotFoundState,
+      {
+        label: t("catalog.products.edit.errors.notFound", "Product not found."),
+        backHref: "/backend/catalog/products",
+        backLabel: t("catalog.products.edit.actions.backToList", "Back to products")
+      }
+    ) }) });
+  }
   if (error && !loading) {
     return /* @__PURE__ */ jsx(Page, { children: /* @__PURE__ */ jsx(PageBody, { children: /* @__PURE__ */ jsx(ErrorMessage, { label: error }) }) });
   }