@open-mercato/core 0.6.8-develop.6998.1.d2bc46c56c → 0.6.8-develop.7001.1.03608ab252

package/dist/modules/warranty_claims/api/portal/attachments/route.js

@@ -0,0 +1,490 @@
+import { NextResponse } from "next/server";
+import { z } from "zod";
+import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
+import { resolveTranslations } from "@open-mercato/shared/lib/i18n/server";
+import { runRouteMutationGuards } from "@open-mercato/shared/lib/crud/route-mutation-guard";
+import { emitCrudSideEffects } from "@open-mercato/shared/lib/commands/helpers";
+import { findOneWithDecryption, findWithDecryption } from "@open-mercato/shared/lib/encryption/find";
+import { createLogger } from "@open-mercato/shared/lib/logger";
+import { getCustomerAuthFromRequest } from "@open-mercato/core/modules/customer_accounts/lib/customerAuth";
+import { Attachment, AttachmentPartition } from "@open-mercato/core/modules/attachments/data/entities";
+import { buildAttachmentImageUrl, slugifyAttachmentFileName } from "@open-mercato/core/modules/attachments/lib/imageUrls";
+import { StorageDriverFactory } from "@open-mercato/core/modules/attachments/lib/drivers";
+import { checkAttachmentAccess } from "@open-mercato/core/modules/attachments/lib/access";
+import { attachmentCrudEvents, attachmentCrudIndexer } from "@open-mercato/core/modules/attachments/lib/crud";
+import { readAttachmentMetadata } from "@open-mercato/core/modules/attachments/lib/metadata";
+import { clearAttachmentThumbnailCache } from "@open-mercato/core/modules/attachments/lib/thumbnailCache";
+import { isMultipartRequestWithinUploadLimit } from "@open-mercato/core/modules/attachments/lib/upload-limits";
+import {
+  ScopedAttachmentUploadError
+} from "@open-mercato/core/modules/attachments/lib/scoped-upload-service";
+import { WARRANTY_CLAIM_RESOURCE_KIND } from "../../../commands/shared.js";
+import { CUSTOMER_VISIBLE_ATTACHMENT_TAG, isCustomerVisibleAttachment } from "../../../lib/attachmentVisibility.js";
+import { loadPortalOwnedClaim } from "../../../lib/portalClaimAccess.js";
+import { resolvePortalAttachmentUploadService } from "../../../lib/portalAttachmentUpload.js";
+const CLAIM_ATTACHMENT_ENTITY_ID = "warranty_claims:warranty_claim";
+const logger = createLogger("warranty_claims").child({ route: "portal-attachments" });
+const ATTACHMENT_ERROR_TRANSLATIONS = {
+  dangerous_executable: ["attachments.errors.dangerousExecutable", "Executable file types are not allowed as attachments."],
+  max_upload_size: ["attachments.errors.maxUploadSize", "Attachment exceeds the maximum upload size."],
+  active_content: ["attachments.errors.activeContentBlocked", "Active content uploads are not allowed."]
+};
+const metadata = {
+  GET: { requireAuth: false },
+  POST: { requireAuth: false },
+  PUT: { requireAuth: false },
+  DELETE: { requireAuth: false }
+};
+const attachmentQuerySchema = z.object({
+  claimId: z.string().uuid(),
+  page: z.coerce.number().int().min(1).optional(),
+  pageSize: z.coerce.number().int().min(1).max(100).optional()
+});
+const uploadBodySchema = z.object({
+  claimId: z.string().uuid(),
+  file: z.string().min(1).describe("Binary file payload; supplied as multipart form-data")
+});
+const replaceBodySchema = uploadBodySchema.extend({
+  attachmentId: z.string().uuid()
+});
+const deleteQuerySchema = z.object({
+  attachmentId: z.string().uuid()
+});
+function toIso(value) {
+  if (!value) return null;
+  if (value instanceof Date) return value.toISOString();
+  const date = new Date(value);
+  return Number.isNaN(date.getTime()) ? value : date.toISOString();
+}
+async function resolvePortalContext(req) {
+  const auth = await getCustomerAuthFromRequest(req);
+  if (!auth) {
+    return NextResponse.json({ ok: false, error: "warranty_claims.errors.unauthorized" }, { status: 401 });
+  }
+  if (!auth.customerEntityId) {
+    return NextResponse.json({ ok: false, error: "warranty_claims.errors.customerAccountNotLinked" }, { status: 403 });
+  }
+  const container = await createRequestContainer();
+  const em = container.resolve("em");
+  return {
+    auth,
+    customerId: auth.customerEntityId,
+    tenantId: auth.tenantId,
+    organizationId: auth.orgId,
+    em,
+    container
+  };
+}
+function attachmentAuth(context) {
+  return {
+    sub: context.auth.sub,
+    tenantId: context.tenantId,
+    orgId: context.organizationId,
+    email: context.auth.email
+  };
+}
+async function loadOwnedClaim(context, claimId) {
+  return loadPortalOwnedClaim(
+    context.em,
+    {
+      tenantId: context.tenantId,
+      organizationId: context.organizationId,
+      customerId: context.customerId
+    },
+    claimId
+  );
+}
+async function runPortalAttachmentGuard(req, context, claimId, operation, mutationPayload) {
+  return runRouteMutationGuards({
+    container: context.container,
+    req,
+    auth: {
+      userId: context.auth.sub,
+      tenantId: context.tenantId,
+      organizationId: context.organizationId,
+      userFeatures: []
+    },
+    input: {
+      resourceKind: WARRANTY_CLAIM_RESOURCE_KIND,
+      resourceId: claimId,
+      operation,
+      mutationPayload
+    }
+  });
+}
+function serializeAttachment(attachment) {
+  const metadata2 = readAttachmentMetadata(attachment.storageMetadata);
+  return {
+    id: attachment.id,
+    url: attachment.url,
+    downloadUrl: `/api/warranty_claims/portal/attachments?attachmentId=${encodeURIComponent(attachment.id)}`,
+    fileName: attachment.fileName,
+    fileSize: attachment.fileSize,
+    mimeType: attachment.mimeType ?? null,
+    partitionCode: attachment.partitionCode,
+    content: attachment.content ?? null,
+    thumbnailUrl: buildAttachmentImageUrl(attachment.id, {
+      width: 320,
+      height: 320,
+      slug: slugifyAttachmentFileName(attachment.fileName)
+    }),
+    tags: metadata2.tags ?? [],
+    assignments: metadata2.assignments ?? [],
+    createdAt: toIso(attachment.createdAt)
+  };
+}
+async function resolveStorageDriverFactory(context) {
+  try {
+    const resolved = context.container.resolve("storageDriverFactory");
+    return resolved ?? new StorageDriverFactory(context.em);
+  } catch {
+    return new StorageDriverFactory(context.em);
+  }
+}
+async function loadOwnedVisibleAttachment(context, attachmentId) {
+  const scope = { tenantId: context.tenantId, organizationId: context.organizationId };
+  const attachment = await findOneWithDecryption(
+    context.em,
+    Attachment,
+    {
+      id: attachmentId,
+      entityId: CLAIM_ATTACHMENT_ENTITY_ID,
+      tenantId: context.tenantId,
+      organizationId: context.organizationId
+    },
+    {},
+    scope
+  );
+  if (!attachment) return null;
+  const claim = await loadOwnedClaim(context, attachment.recordId);
+  if (!claim) return null;
+  if (!isCustomerVisibleAttachment(readAttachmentMetadata(attachment.storageMetadata).tags)) return null;
+  return { attachment, claim };
+}
+async function deletePortalAttachment(context, attachment) {
+  await context.em.remove(attachment).flush();
+  await clearAttachmentThumbnailCache(attachment.partitionCode, attachment.id).catch((error) => {
+    logger.error("Failed to clean portal attachment thumbnails", { err: error, attachmentId: attachment.id });
+  });
+  if (attachment.storagePath) {
+    try {
+      const driver = await (await resolveStorageDriverFactory(context)).resolveForPartition(attachment.partitionCode, {
+        tenantId: attachment.tenantId ?? context.tenantId,
+        organizationId: attachment.organizationId ?? context.organizationId
+      });
+      await driver.delete(attachment.partitionCode, attachment.storagePath);
+    } catch (error) {
+      logger.error("Failed to remove portal attachment storage", { err: error, attachmentId: attachment.id });
+    }
+  }
+  let dataEngine = null;
+  try {
+    dataEngine = context.container.resolve("dataEngine") ?? null;
+  } catch {
+    dataEngine = null;
+  }
+  if (dataEngine) {
+    await emitCrudSideEffects({
+      dataEngine,
+      action: "deleted",
+      entity: attachment,
+      identifiers: {
+        id: attachment.id,
+        organizationId: attachment.organizationId ?? null,
+        tenantId: attachment.tenantId ?? null
+      },
+      events: attachmentCrudEvents,
+      indexer: attachmentCrudIndexer
+    });
+    await dataEngine.flushOrmEntityChanges();
+  }
+}
+async function streamOwnedAttachment(context, attachmentId) {
+  const owned = await loadOwnedVisibleAttachment(context, attachmentId);
+  if (!owned) {
+    return NextResponse.json({ ok: false, error: "warranty_claims.errors.notFound" }, { status: 404 });
+  }
+  const { attachment } = owned;
+  const partition = await context.em.findOne(AttachmentPartition, { code: attachment.partitionCode });
+  if (!partition) {
+    return NextResponse.json({ ok: false, error: "warranty_claims.errors.load_failed" }, { status: 500 });
+  }
+  const access = checkAttachmentAccess(attachmentAuth(context), attachment, partition, { requireAuthForPublic: true });
+  if (!access.ok) {
+    return NextResponse.json({ ok: false, error: "warranty_claims.errors.notFound" }, { status: 404 });
+  }
+  const driver = await (await resolveStorageDriverFactory(context)).resolveForPartition(attachment.partitionCode, {
+    tenantId: attachment.tenantId ?? "",
+    organizationId: attachment.organizationId ?? ""
+  });
+  let buffer;
+  try {
+    buffer = (await driver.read(attachment.partitionCode, attachment.storagePath)).buffer;
+  } catch {
+    return NextResponse.json({ ok: false, error: "warranty_claims.errors.notFound" }, { status: 404 });
+  }
+  const headers = {
+    "Cache-Control": "private, max-age=60",
+    "Content-Security-Policy": "default-src 'none'; sandbox",
+    "Content-Type": "application/octet-stream",
+    "Content-Disposition": `attachment; filename="${slugifyAttachmentFileName(attachment.fileName)}"`,
+    "X-Content-Type-Options": "nosniff"
+  };
+  if (attachment.fileSize > 0) headers["Content-Length"] = String(attachment.fileSize);
+  return new NextResponse(new Uint8Array(buffer), { status: 200, headers });
+}
+async function GET(req) {
+  const contextOrResponse = await resolvePortalContext(req);
+  if (contextOrResponse instanceof Response) return contextOrResponse;
+  const context = contextOrResponse;
+  const url = new URL(req.url);
+  const attachmentId = url.searchParams.get("attachmentId");
+  if (attachmentId) {
+    const attachmentIdParsed = z.string().uuid().safeParse(attachmentId);
+    if (!attachmentIdParsed.success) {
+      return NextResponse.json({ ok: false, error: "warranty_claims.errors.invalidInput" }, { status: 400 });
+    }
+    return streamOwnedAttachment(context, attachmentIdParsed.data);
+  }
+  const parsed = attachmentQuerySchema.safeParse({
+    claimId: url.searchParams.get("claimId") ?? void 0,
+    page: url.searchParams.get("page") ?? void 0,
+    pageSize: url.searchParams.get("pageSize") ?? void 0
+  });
+  if (!parsed.success) {
+    return NextResponse.json({ ok: false, error: "warranty_claims.errors.invalidInput" }, { status: 400 });
+  }
+  const claim = await loadOwnedClaim(context, parsed.data.claimId);
+  if (!claim) {
+    return NextResponse.json({ ok: false, error: "warranty_claims.errors.notFound" }, { status: 404 });
+  }
+  const filter = {
+    entityId: CLAIM_ATTACHMENT_ENTITY_ID,
+    recordId: claim.id,
+    tenantId: context.tenantId,
+    organizationId: context.organizationId
+  };
+  const page = parsed.data.page ?? 1;
+  const pageSize = parsed.data.pageSize ?? 100;
+  const attachments = await findWithDecryption(
+    context.em,
+    Attachment,
+    filter,
+    { orderBy: { createdAt: "DESC" } },
+    { tenantId: context.tenantId, organizationId: context.organizationId }
+  );
+  const partitionCodes = Array.from(new Set(attachments.map((attachment) => attachment.partitionCode)));
+  const partitions = partitionCodes.length ? await context.em.find(AttachmentPartition, { code: { $in: partitionCodes } }) : [];
+  const partitionsByCode = new Map(partitions.map((partition) => [partition.code, partition]));
+  const auth = attachmentAuth(context);
+  const visible = attachments.filter((attachment) => {
+    const partition = partitionsByCode.get(attachment.partitionCode);
+    if (!partition) return false;
+    if (!isCustomerVisibleAttachment(readAttachmentMetadata(attachment.storageMetadata).tags)) return false;
+    return checkAttachmentAccess(auth, attachment, partition, { requireAuthForPublic: true }).ok;
+  });
+  const pagedVisible = visible.slice((page - 1) * pageSize, page * pageSize);
+  return NextResponse.json({
+    items: pagedVisible.map(serializeAttachment),
+    total: visible.length,
+    page,
+    pageSize,
+    totalPages: Math.max(1, Math.ceil(visible.length / pageSize))
+  });
+}
+async function handleUpload(req, replacement) {
+  const contextOrResponse = await resolvePortalContext(req);
+  if (contextOrResponse instanceof Response) return contextOrResponse;
+  const context = contextOrResponse;
+  const contentType = req.headers.get("content-type") || "";
+  if (!contentType.toLowerCase().includes("multipart/form-data")) {
+    return NextResponse.json({ ok: false, error: "warranty_claims.errors.invalidInput" }, { status: 400 });
+  }
+  if (!isMultipartRequestWithinUploadLimit(req.headers.get("content-length"))) {
+    const { t } = await resolveTranslations();
+    return NextResponse.json({
+      ok: false,
+      error: t("attachments.errors.maxUploadSize", "Attachment exceeds the maximum upload size.")
+    }, { status: 413 });
+  }
+  const form = await req.formData();
+  const parsed = uploadBodySchema.safeParse({
+    claimId: form.get("claimId") ?? void 0,
+    file: form.get("file") instanceof File ? form.get("file").name : ""
+  });
+  const parsedAttachmentId = replacement ? z.string().uuid().safeParse(form.get("attachmentId") ?? void 0) : null;
+  if (!parsed.success || replacement && !parsedAttachmentId?.success) {
+    return NextResponse.json({ ok: false, error: "warranty_claims.errors.invalidInput" }, { status: 400 });
+  }
+  const claim = await loadOwnedClaim(context, parsed.data.claimId);
+  if (!claim) {
+    return NextResponse.json({ ok: false, error: "warranty_claims.errors.notFound" }, { status: 404 });
+  }
+  const file = form.get("file");
+  if (!(file instanceof File)) {
+    return NextResponse.json({ ok: false, error: "warranty_claims.portal.detail.fileRequired" }, { status: 400 });
+  }
+  const buffer = Buffer.from(await file.arrayBuffer());
+  const attachmentId = replacement && parsedAttachmentId?.success ? parsedAttachmentId.data : null;
+  const replacementTarget = attachmentId ? await loadOwnedVisibleAttachment(context, attachmentId) : null;
+  if (replacement && (!replacementTarget || replacementTarget.claim.id !== claim.id)) {
+    return NextResponse.json({ ok: false, error: "warranty_claims.errors.notFound" }, { status: 404 });
+  }
+  const guarded = await runPortalAttachmentGuard(req, context, claim.id, replacement ? "update" : "create", {
+    claimId: claim.id,
+    attachmentId,
+    fileName: file.name,
+    fileSize: file.size,
+    mimeType: file.type
+  });
+  if (!guarded.ok) {
+    return guarded.response;
+  }
+  const uploadService = resolvePortalAttachmentUploadService(context.container);
+  if (!uploadService) {
+    return NextResponse.json({ ok: false, error: "warranty_claims.portal.detail.attachmentError" }, { status: 503 });
+  }
+  let attachment;
+  try {
+    attachment = await uploadService.upload({
+      tenantId: context.tenantId,
+      organizationId: context.organizationId,
+      entityId: CLAIM_ATTACHMENT_ENTITY_ID,
+      recordId: claim.id,
+      fileName: file.name,
+      buffer,
+      declaredMimeType: file.type,
+      tags: [CUSTOMER_VISIBLE_ATTACHMENT_TAG]
+    });
+  } catch (error) {
+    if (error instanceof ScopedAttachmentUploadError) {
+      const { t } = await resolveTranslations();
+      const [key, fallback] = ATTACHMENT_ERROR_TRANSLATIONS[error.code] ?? ["warranty_claims.portal.detail.attachmentError", "Attachment upload failed."];
+      return NextResponse.json(
+        { ok: false, error: t(key, fallback), code: error.code },
+        { status: error.status }
+      );
+    }
+    throw error;
+  }
+  if (replacementTarget) {
+    await deletePortalAttachment(context, replacementTarget.attachment);
+  }
+  await guarded.runAfterSuccess();
+  return NextResponse.json({
+    ok: true,
+    item: {
+      ...serializeAttachment(attachment),
+      entityType: "attachments:attachment"
+    }
+  });
+}
+async function POST(req) {
+  return handleUpload(req, false);
+}
+async function PUT(req) {
+  return handleUpload(req, true);
+}
+async function DELETE(req) {
+  const contextOrResponse = await resolvePortalContext(req);
+  if (contextOrResponse instanceof Response) return contextOrResponse;
+  const context = contextOrResponse;
+  const url = new URL(req.url);
+  const parsed = deleteQuerySchema.safeParse({
+    attachmentId: url.searchParams.get("attachmentId") ?? void 0
+  });
+  if (!parsed.success) {
+    return NextResponse.json({ ok: false, error: "warranty_claims.errors.invalidInput" }, { status: 400 });
+  }
+  const owned = await loadOwnedVisibleAttachment(context, parsed.data.attachmentId);
+  if (!owned) {
+    return NextResponse.json({ ok: false, error: "warranty_claims.errors.notFound" }, { status: 404 });
+  }
+  const guarded = await runPortalAttachmentGuard(req, context, owned.claim.id, "delete", {
+    claimId: owned.claim.id,
+    attachmentId: owned.attachment.id
+  });
+  if (!guarded.ok) return guarded.response;
+  await deletePortalAttachment(context, owned.attachment);
+  await guarded.runAfterSuccess();
+  return NextResponse.json({ ok: true });
+}
+const assignmentSchema = z.object({
+  type: z.string(),
+  id: z.string(),
+  href: z.string().nullable().optional(),
+  label: z.string().nullable().optional()
+});
+const attachmentItemSchema = z.object({
+  id: z.string(),
+  url: z.string(),
+  downloadUrl: z.string(),
+  fileName: z.string(),
+  fileSize: z.number().int().nonnegative(),
+  mimeType: z.string().nullable(),
+  partitionCode: z.string(),
+  content: z.string().nullable(),
+  thumbnailUrl: z.string(),
+  tags: z.array(z.string()),
+  assignments: z.array(assignmentSchema),
+  createdAt: z.string().nullable()
+});
+const openApi = {
+  tag: "Warranty Claims Portal",
+  summary: "Customer portal warranty claim attachments",
+  methods: {
+    GET: {
+      summary: "List attachments for an owned claim",
+      query: attachmentQuerySchema,
+      responses: [
+        {
+          status: 200,
+          description: "Claim attachments",
+          schema: z.object({ items: z.array(attachmentItemSchema) })
+        }
+      ]
+    },
+    POST: {
+      summary: "Upload an attachment for an owned claim",
+      requestBody: { contentType: "multipart/form-data", schema: uploadBodySchema },
+      responses: [
+        {
+          status: 200,
+          description: "Attachment uploaded",
+          schema: z.object({ ok: z.boolean(), item: attachmentItemSchema.extend({ entityType: z.string() }) })
+        }
+      ]
+    },
+    PUT: {
+      summary: "Replace an attachment on an owned claim",
+      requestBody: { contentType: "multipart/form-data", schema: replaceBodySchema },
+      responses: [
+        {
+          status: 200,
+          description: "Attachment replaced",
+          schema: z.object({ ok: z.boolean(), item: attachmentItemSchema.extend({ entityType: z.string() }) })
+        }
+      ]
+    },
+    DELETE: {
+      summary: "Delete an attachment from an owned claim",
+      query: deleteQuerySchema,
+      responses: [
+        {
+          status: 200,
+          description: "Attachment deleted",
+          schema: z.object({ ok: z.literal(true) })
+        }
+      ]
+    }
+  }
+};
+export {
+  DELETE,
+  GET,
+  POST,
+  PUT,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/warranty_claims/api/portal/attachments/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../src/modules/warranty_claims/api/portal/attachments/route.ts"],
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport type { AuthContext } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport type { DataEngine } from '@open-mercato/shared/lib/data/engine'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { runRouteMutationGuards, type RouteMutationGuardResult } from '@open-mercato/shared/lib/crud/route-mutation-guard'\nimport { emitCrudSideEffects } from '@open-mercato/shared/lib/commands/helpers'\nimport { findOneWithDecryption, findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport { getCustomerAuthFromRequest, type CustomerAuthContext } from '@open-mercato/core/modules/customer_accounts/lib/customerAuth'\nimport { Attachment, AttachmentPartition } from '@open-mercato/core/modules/attachments/data/entities'\nimport { buildAttachmentImageUrl, slugifyAttachmentFileName } from '@open-mercato/core/modules/attachments/lib/imageUrls'\nimport { StorageDriverFactory } from '@open-mercato/core/modules/attachments/lib/drivers'\nimport { checkAttachmentAccess } from '@open-mercato/core/modules/attachments/lib/access'\nimport { attachmentCrudEvents, attachmentCrudIndexer } from '@open-mercato/core/modules/attachments/lib/crud'\nimport { readAttachmentMetadata } from '@open-mercato/core/modules/attachments/lib/metadata'\nimport { clearAttachmentThumbnailCache } from '@open-mercato/core/modules/attachments/lib/thumbnailCache'\nimport { isMultipartRequestWithinUploadLimit } from '@open-mercato/core/modules/attachments/lib/upload-limits'\nimport {\n  ScopedAttachmentUploadError,\n  type ScopedAttachmentUploadErrorCode,\n} from '@open-mercato/core/modules/attachments/lib/scoped-upload-service'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { WarrantyClaim } from '../../../data/entities'\nimport { WARRANTY_CLAIM_RESOURCE_KIND } from '../../../commands/shared'\nimport { CUSTOMER_VISIBLE_ATTACHMENT_TAG, isCustomerVisibleAttachment } from '../../../lib/attachmentVisibility'\nimport { loadPortalOwnedClaim } from '../../../lib/portalClaimAccess'\nimport { resolvePortalAttachmentUploadService } from '../../../lib/portalAttachmentUpload'\n\nconst CLAIM_ATTACHMENT_ENTITY_ID = 'warranty_claims:warranty_claim'\nconst logger = createLogger('warranty_claims').child({ route: 'portal-attachments' })\nconst ATTACHMENT_ERROR_TRANSLATIONS: Partial<Record<ScopedAttachmentUploadErrorCode, readonly [string, string]>> = {\n  dangerous_executable: ['attachments.errors.dangerousExecutable', 'Executable file types are not allowed as attachments.'],\n  max_upload_size: ['attachments.errors.maxUploadSize', 'Attachment exceeds the maximum upload size.'],\n  active_content: ['attachments.errors.activeContentBlocked', 'Active content uploads are not allowed.'],\n}\n\nexport const metadata = {\n  GET: { requireAuth: false },\n  POST: { requireAuth: false },\n  PUT: { requireAuth: false },\n  DELETE: { requireAuth: false },\n}\n\nconst attachmentQuerySchema = z.object({\n  claimId: z.string().uuid(),\n  page: z.coerce.number().int().min(1).optional(),\n  pageSize: z.coerce.number().int().min(1).max(100).optional(),\n})\n\nconst uploadBodySchema = z.object({\n  claimId: z.string().uuid(),\n  file: z.string().min(1).describe('Binary file payload; supplied as multipart form-data'),\n})\n\nconst replaceBodySchema = uploadBodySchema.extend({\n  attachmentId: z.string().uuid(),\n})\n\nconst deleteQuerySchema = z.object({\n  attachmentId: z.string().uuid(),\n})\n\ntype PortalContext = {\n  auth: CustomerAuthContext\n  customerId: string\n  tenantId: string\n  organizationId: string\n  em: EntityManager\n  container: Awaited<ReturnType<typeof createRequestContainer>>\n}\n\nfunction toIso(value: Date | string | null | undefined): string | null {\n  if (!value) return null\n  if (value instanceof Date) return value.toISOString()\n  const date = new Date(value)\n  return Number.isNaN(date.getTime()) ? value : date.toISOString()\n}\n\nasync function resolvePortalContext(req: Request): Promise<PortalContext | Response> {\n  const auth = await getCustomerAuthFromRequest(req)\n  if (!auth) {\n    return NextResponse.json({ ok: false, error: 'warranty_claims.errors.unauthorized' }, { status: 401 })\n  }\n  if (!auth.customerEntityId) {\n    return NextResponse.json({ ok: false, error: 'warranty_claims.errors.customerAccountNotLinked' }, { status: 403 })\n  }\n  const container = await createRequestContainer()\n  const em = container.resolve('em') as EntityManager\n  return {\n    auth,\n    customerId: auth.customerEntityId,\n    tenantId: auth.tenantId,\n    organizationId: auth.orgId,\n    em,\n    container,\n  }\n}\n\nfunction attachmentAuth(context: PortalContext): NonNullable<AuthContext> {\n  return {\n    sub: context.auth.sub,\n    tenantId: context.tenantId,\n    orgId: context.organizationId,\n    email: context.auth.email,\n  }\n}\n\nasync function loadOwnedClaim(context: PortalContext, claimId: string): Promise<WarrantyClaim | null> {\n  return loadPortalOwnedClaim(\n    context.em,\n    {\n      tenantId: context.tenantId,\n      organizationId: context.organizationId,\n      customerId: context.customerId,\n    },\n    claimId,\n  )\n}\n\nasync function runPortalAttachmentGuard(\n  req: Request,\n  context: PortalContext,\n  claimId: string,\n  operation: 'create' | 'update' | 'delete',\n  mutationPayload: Record<string, unknown>,\n): Promise<RouteMutationGuardResult> {\n  return runRouteMutationGuards({\n    container: context.container,\n    req,\n    auth: {\n      userId: context.auth.sub,\n      tenantId: context.tenantId,\n      organizationId: context.organizationId,\n      userFeatures: [],\n    },\n    input: {\n      resourceKind: WARRANTY_CLAIM_RESOURCE_KIND,\n      resourceId: claimId,\n      operation,\n      mutationPayload,\n    },\n  })\n}\n\nfunction serializeAttachment(attachment: Attachment) {\n  const metadata = readAttachmentMetadata(attachment.storageMetadata)\n  return {\n    id: attachment.id,\n    url: attachment.url,\n    downloadUrl: `/api/warranty_claims/portal/attachments?attachmentId=${encodeURIComponent(attachment.id)}`,\n    fileName: attachment.fileName,\n    fileSize: attachment.fileSize,\n    mimeType: attachment.mimeType ?? null,\n    partitionCode: attachment.partitionCode,\n    content: attachment.content ?? null,\n    thumbnailUrl: buildAttachmentImageUrl(attachment.id, {\n      width: 320,\n      height: 320,\n      slug: slugifyAttachmentFileName(attachment.fileName),\n    }),\n    tags: metadata.tags ?? [],\n    assignments: metadata.assignments ?? [],\n    createdAt: toIso(attachment.createdAt),\n  }\n}\n\nasync function resolveStorageDriverFactory(context: PortalContext): Promise<StorageDriverFactory> {\n  try {\n    const resolved = context.container.resolve('storageDriverFactory') as StorageDriverFactory | null\n    return resolved ?? new StorageDriverFactory(context.em)\n  } catch {\n    return new StorageDriverFactory(context.em)\n  }\n}\n\nasync function loadOwnedVisibleAttachment(\n  context: PortalContext,\n  attachmentId: string,\n): Promise<{ attachment: Attachment; claim: WarrantyClaim } | null> {\n  const scope = { tenantId: context.tenantId, organizationId: context.organizationId }\n  const attachment = await findOneWithDecryption(\n    context.em,\n    Attachment,\n    {\n      id: attachmentId,\n      entityId: CLAIM_ATTACHMENT_ENTITY_ID,\n      tenantId: context.tenantId,\n      organizationId: context.organizationId,\n    },\n    {},\n    scope,\n  )\n  if (!attachment) return null\n  const claim = await loadOwnedClaim(context, attachment.recordId)\n  if (!claim) return null\n  if (!isCustomerVisibleAttachment(readAttachmentMetadata(attachment.storageMetadata).tags)) return null\n  return { attachment, claim }\n}\n\nasync function deletePortalAttachment(context: PortalContext, attachment: Attachment): Promise<void> {\n  await context.em.remove(attachment).flush()\n  await clearAttachmentThumbnailCache(attachment.partitionCode, attachment.id).catch((error) => {\n    logger.error('Failed to clean portal attachment thumbnails', { err: error, attachmentId: attachment.id })\n  })\n  if (attachment.storagePath) {\n    try {\n      const driver = await (await resolveStorageDriverFactory(context)).resolveForPartition(attachment.partitionCode, {\n        tenantId: attachment.tenantId ?? context.tenantId,\n        organizationId: attachment.organizationId ?? context.organizationId,\n      })\n      await driver.delete(attachment.partitionCode, attachment.storagePath)\n    } catch (error) {\n      logger.error('Failed to remove portal attachment storage', { err: error, attachmentId: attachment.id })\n    }\n  }\n\n  let dataEngine: DataEngine | null = null\n  try {\n    dataEngine = context.container.resolve<DataEngine>('dataEngine') ?? null\n  } catch {\n    dataEngine = null\n  }\n  if (dataEngine) {\n    await emitCrudSideEffects({\n      dataEngine,\n      action: 'deleted',\n      entity: attachment,\n      identifiers: {\n        id: attachment.id,\n        organizationId: attachment.organizationId ?? null,\n        tenantId: attachment.tenantId ?? null,\n      },\n      events: attachmentCrudEvents,\n      indexer: attachmentCrudIndexer,\n    })\n    await dataEngine.flushOrmEntityChanges()\n  }\n}\n\nasync function streamOwnedAttachment(context: PortalContext, attachmentId: string): Promise<Response> {\n  const owned = await loadOwnedVisibleAttachment(context, attachmentId)\n  if (!owned) {\n    return NextResponse.json({ ok: false, error: 'warranty_claims.errors.notFound' }, { status: 404 })\n  }\n  const { attachment } = owned\n  const partition = await context.em.findOne(AttachmentPartition, { code: attachment.partitionCode })\n  if (!partition) {\n    return NextResponse.json({ ok: false, error: 'warranty_claims.errors.load_failed' }, { status: 500 })\n  }\n  const access = checkAttachmentAccess(attachmentAuth(context), attachment, partition, { requireAuthForPublic: true })\n  if (!access.ok) {\n    return NextResponse.json({ ok: false, error: 'warranty_claims.errors.notFound' }, { status: 404 })\n  }\n  const driver = await (await resolveStorageDriverFactory(context)).resolveForPartition(attachment.partitionCode, {\n    tenantId: attachment.tenantId ?? '',\n    organizationId: attachment.organizationId ?? '',\n  })\n  let buffer: Buffer\n  try {\n    buffer = (await driver.read(attachment.partitionCode, attachment.storagePath)).buffer\n  } catch {\n    return NextResponse.json({ ok: false, error: 'warranty_claims.errors.notFound' }, { status: 404 })\n  }\n  const headers: Record<string, string> = {\n    'Cache-Control': 'private, max-age=60',\n    'Content-Security-Policy': \"default-src 'none'; sandbox\",\n    'Content-Type': 'application/octet-stream',\n    'Content-Disposition': `attachment; filename=\"${slugifyAttachmentFileName(attachment.fileName)}\"`,\n    'X-Content-Type-Options': 'nosniff',\n  }\n  if (attachment.fileSize > 0) headers['Content-Length'] = String(attachment.fileSize)\n  return new NextResponse(new Uint8Array(buffer), { status: 200, headers })\n}\n\nexport async function GET(req: Request) {\n  const contextOrResponse = await resolvePortalContext(req)\n  if (contextOrResponse instanceof Response) return contextOrResponse\n  const context = contextOrResponse\n  const url = new URL(req.url)\n  const attachmentId = url.searchParams.get('attachmentId')\n  if (attachmentId) {\n    const attachmentIdParsed = z.string().uuid().safeParse(attachmentId)\n    if (!attachmentIdParsed.success) {\n      return NextResponse.json({ ok: false, error: 'warranty_claims.errors.invalidInput' }, { status: 400 })\n    }\n    return streamOwnedAttachment(context, attachmentIdParsed.data)\n  }\n  const parsed = attachmentQuerySchema.safeParse({\n    claimId: url.searchParams.get('claimId') ?? undefined,\n    page: url.searchParams.get('page') ?? undefined,\n    pageSize: url.searchParams.get('pageSize') ?? undefined,\n  })\n  if (!parsed.success) {\n    return NextResponse.json({ ok: false, error: 'warranty_claims.errors.invalidInput' }, { status: 400 })\n  }\n  const claim = await loadOwnedClaim(context, parsed.data.claimId)\n  if (!claim) {\n    return NextResponse.json({ ok: false, error: 'warranty_claims.errors.notFound' }, { status: 404 })\n  }\n  const filter = {\n    entityId: CLAIM_ATTACHMENT_ENTITY_ID,\n    recordId: claim.id,\n    tenantId: context.tenantId,\n    organizationId: context.organizationId,\n  }\n  const page = parsed.data.page ?? 1\n  const pageSize = parsed.data.pageSize ?? 100\n  const attachments = await findWithDecryption(\n    context.em,\n    Attachment,\n    filter,\n    { orderBy: { createdAt: 'DESC' } },\n    { tenantId: context.tenantId, organizationId: context.organizationId },\n  )\n  const partitionCodes = Array.from(new Set(attachments.map((attachment) => attachment.partitionCode)))\n  const partitions = partitionCodes.length\n    ? await context.em.find(AttachmentPartition, { code: { $in: partitionCodes } })\n    : []\n  const partitionsByCode = new Map(partitions.map((partition) => [partition.code, partition]))\n  const auth = attachmentAuth(context)\n  const visible = attachments.filter((attachment) => {\n    const partition = partitionsByCode.get(attachment.partitionCode)\n    if (!partition) return false\n    if (!isCustomerVisibleAttachment(readAttachmentMetadata(attachment.storageMetadata).tags)) return false\n    return checkAttachmentAccess(auth, attachment, partition, { requireAuthForPublic: true }).ok\n  })\n\n  const pagedVisible = visible.slice((page - 1) * pageSize, page * pageSize)\n\n  return NextResponse.json({\n    items: pagedVisible.map(serializeAttachment),\n    total: visible.length,\n    page,\n    pageSize,\n    totalPages: Math.max(1, Math.ceil(visible.length / pageSize)),\n  })\n}\n\nasync function handleUpload(req: Request, replacement: boolean): Promise<Response> {\n  const contextOrResponse = await resolvePortalContext(req)\n  if (contextOrResponse instanceof Response) return contextOrResponse\n  const context = contextOrResponse\n  const contentType = req.headers.get('content-type') || ''\n  if (!contentType.toLowerCase().includes('multipart/form-data')) {\n    return NextResponse.json({ ok: false, error: 'warranty_claims.errors.invalidInput' }, { status: 400 })\n  }\n  if (!isMultipartRequestWithinUploadLimit(req.headers.get('content-length'))) {\n    const { t } = await resolveTranslations()\n    return NextResponse.json({\n      ok: false,\n      error: t('attachments.errors.maxUploadSize', 'Attachment exceeds the maximum upload size.'),\n    }, { status: 413 })\n  }\n\n  const form = await req.formData()\n  const parsed = uploadBodySchema.safeParse({\n    claimId: form.get('claimId') ?? undefined,\n    file: form.get('file') instanceof File ? (form.get('file') as File).name : '',\n  })\n  const parsedAttachmentId = replacement\n    ? z.string().uuid().safeParse(form.get('attachmentId') ?? undefined)\n    : null\n  if (!parsed.success || (replacement && !parsedAttachmentId?.success)) {\n    return NextResponse.json({ ok: false, error: 'warranty_claims.errors.invalidInput' }, { status: 400 })\n  }\n  const claim = await loadOwnedClaim(context, parsed.data.claimId)\n  if (!claim) {\n    return NextResponse.json({ ok: false, error: 'warranty_claims.errors.notFound' }, { status: 404 })\n  }\n  const file = form.get('file')\n  if (!(file instanceof File)) {\n    return NextResponse.json({ ok: false, error: 'warranty_claims.portal.detail.fileRequired' }, { status: 400 })\n  }\n  const buffer = Buffer.from(await file.arrayBuffer())\n\n  const attachmentId = replacement && parsedAttachmentId?.success ? parsedAttachmentId.data : null\n  const replacementTarget = attachmentId\n    ? await loadOwnedVisibleAttachment(context, attachmentId)\n    : null\n  if (replacement && (!replacementTarget || replacementTarget.claim.id !== claim.id)) {\n    return NextResponse.json({ ok: false, error: 'warranty_claims.errors.notFound' }, { status: 404 })\n  }\n\n  const guarded = await runPortalAttachmentGuard(req, context, claim.id, replacement ? 'update' : 'create', {\n    claimId: claim.id,\n    attachmentId,\n    fileName: file.name,\n    fileSize: file.size,\n    mimeType: file.type,\n  })\n  if (!guarded.ok) {\n    return guarded.response\n  }\n\n  const uploadService = resolvePortalAttachmentUploadService(context.container)\n  if (!uploadService) {\n    return NextResponse.json({ ok: false, error: 'warranty_claims.portal.detail.attachmentError' }, { status: 503 })\n  }\n\n  let attachment: Attachment\n  try {\n    attachment = await uploadService.upload({\n      tenantId: context.tenantId,\n      organizationId: context.organizationId,\n      entityId: CLAIM_ATTACHMENT_ENTITY_ID,\n      recordId: claim.id,\n      fileName: file.name,\n      buffer,\n      declaredMimeType: file.type,\n      tags: [CUSTOMER_VISIBLE_ATTACHMENT_TAG],\n    })\n  } catch (error) {\n    if (error instanceof ScopedAttachmentUploadError) {\n      const { t } = await resolveTranslations()\n      const [key, fallback] = ATTACHMENT_ERROR_TRANSLATIONS[error.code]\n        ?? ['warranty_claims.portal.detail.attachmentError', 'Attachment upload failed.']\n      return NextResponse.json(\n        { ok: false, error: t(key, fallback), code: error.code },\n        { status: error.status },\n      )\n    }\n    throw error\n  }\n\n  if (replacementTarget) {\n    await deletePortalAttachment(context, replacementTarget.attachment)\n  }\n  await guarded.runAfterSuccess()\n\n  return NextResponse.json({\n    ok: true,\n    item: {\n      ...serializeAttachment(attachment),\n      entityType: 'attachments:attachment',\n    },\n  })\n}\n\nexport async function POST(req: Request) {\n  return handleUpload(req, false)\n}\n\nexport async function PUT(req: Request) {\n  return handleUpload(req, true)\n}\n\nexport async function DELETE(req: Request) {\n  const contextOrResponse = await resolvePortalContext(req)\n  if (contextOrResponse instanceof Response) return contextOrResponse\n  const context = contextOrResponse\n  const url = new URL(req.url)\n  const parsed = deleteQuerySchema.safeParse({\n    attachmentId: url.searchParams.get('attachmentId') ?? undefined,\n  })\n  if (!parsed.success) {\n    return NextResponse.json({ ok: false, error: 'warranty_claims.errors.invalidInput' }, { status: 400 })\n  }\n  const owned = await loadOwnedVisibleAttachment(context, parsed.data.attachmentId)\n  if (!owned) {\n    return NextResponse.json({ ok: false, error: 'warranty_claims.errors.notFound' }, { status: 404 })\n  }\n  const guarded = await runPortalAttachmentGuard(req, context, owned.claim.id, 'delete', {\n    claimId: owned.claim.id,\n    attachmentId: owned.attachment.id,\n  })\n  if (!guarded.ok) return guarded.response\n\n  await deletePortalAttachment(context, owned.attachment)\n  await guarded.runAfterSuccess()\n  return NextResponse.json({ ok: true })\n}\n\nconst assignmentSchema = z.object({\n  type: z.string(),\n  id: z.string(),\n  href: z.string().nullable().optional(),\n  label: z.string().nullable().optional(),\n})\n\nconst attachmentItemSchema = z.object({\n  id: z.string(),\n  url: z.string(),\n  downloadUrl: z.string(),\n  fileName: z.string(),\n  fileSize: z.number().int().nonnegative(),\n  mimeType: z.string().nullable(),\n  partitionCode: z.string(),\n  content: z.string().nullable(),\n  thumbnailUrl: z.string(),\n  tags: z.array(z.string()),\n  assignments: z.array(assignmentSchema),\n  createdAt: z.string().nullable(),\n})\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Warranty Claims Portal',\n  summary: 'Customer portal warranty claim attachments',\n  methods: {\n    GET: {\n      summary: 'List attachments for an owned claim',\n      query: attachmentQuerySchema,\n      responses: [\n        {\n          status: 200,\n          description: 'Claim attachments',\n          schema: z.object({ items: z.array(attachmentItemSchema) }),\n        },\n      ],\n    },\n    POST: {\n      summary: 'Upload an attachment for an owned claim',\n      requestBody: { contentType: 'multipart/form-data', schema: uploadBodySchema },\n      responses: [\n        {\n          status: 200,\n          description: 'Attachment uploaded',\n          schema: z.object({ ok: z.boolean(), item: attachmentItemSchema.extend({ entityType: z.string() }) }),\n        },\n      ],\n    },\n    PUT: {\n      summary: 'Replace an attachment on an owned claim',\n      requestBody: { contentType: 'multipart/form-data', schema: replaceBodySchema },\n      responses: [\n        {\n          status: 200,\n          description: 'Attachment replaced',\n          schema: z.object({ ok: z.boolean(), item: attachmentItemSchema.extend({ entityType: z.string() }) }),\n        },\n      ],\n    },\n    DELETE: {\n      summary: 'Delete an attachment from an owned claim',\n      query: deleteQuerySchema,\n      responses: [\n        {\n          status: 200,\n          description: 'Attachment deleted',\n          schema: z.object({ ok: z.literal(true) }),\n        },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAGlB,SAAS,8BAA8B;AAEvC,SAAS,2BAA2B;AACpC,SAAS,8BAA6D;AACtE,SAAS,2BAA2B;AACpC,SAAS,uBAAuB,0BAA0B;AAC1D,SAAS,oBAAoB;AAC7B,SAAS,kCAA4D;AACrE,SAAS,YAAY,2BAA2B;AAChD,SAAS,yBAAyB,iCAAiC;AACnE,SAAS,4BAA4B;AACrC,SAAS,6BAA6B;AACtC,SAAS,sBAAsB,6BAA6B;AAC5D,SAAS,8BAA8B;AACvC,SAAS,qCAAqC;AAC9C,SAAS,2CAA2C;AACpD;AAAA,EACE;AAAA,OAEK;AAGP,SAAS,oCAAoC;AAC7C,SAAS,iCAAiC,mCAAmC;AAC7E,SAAS,4BAA4B;AACrC,SAAS,4CAA4C;AAErD,MAAM,6BAA6B;AACnC,MAAM,SAAS,aAAa,iBAAiB,EAAE,MAAM,EAAE,OAAO,qBAAqB,CAAC;AACpF,MAAM,gCAA6G;AAAA,EACjH,sBAAsB,CAAC,0CAA0C,uDAAuD;AAAA,EACxH,iBAAiB,CAAC,oCAAoC,6CAA6C;AAAA,EACnG,gBAAgB,CAAC,2CAA2C,yCAAyC;AACvG;AAEO,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM;AAAA,EAC1B,MAAM,EAAE,aAAa,MAAM;AAAA,EAC3B,KAAK,EAAE,aAAa,MAAM;AAAA,EAC1B,QAAQ,EAAE,aAAa,MAAM;AAC/B;AAEA,MAAM,wBAAwB,EAAE,OAAO;AAAA,EACrC,SAAS,EAAE,OAAO,EAAE,KAAK;AAAA,EACzB,MAAM,EAAE,OAAO,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,EAC9C,UAAU,EAAE,OAAO,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,SAAS;AAC7D,CAAC;AAED,MAAM,mBAAmB,EAAE,OAAO;AAAA,EAChC,SAAS,EAAE,OAAO,EAAE,KAAK;AAAA,EACzB,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS,sDAAsD;AACzF,CAAC;AAED,MAAM,oBAAoB,iBAAiB,OAAO;AAAA,EAChD,cAAc,EAAE,OAAO,EAAE,KAAK;AAChC,CAAC;AAED,MAAM,oBAAoB,EAAE,OAAO;AAAA,EACjC,cAAc,EAAE,OAAO,EAAE,KAAK;AAChC,CAAC;AAWD,SAAS,MAAM,OAAwD;AACrE,MAAI,CAAC,MAAO,QAAO;AACnB,MAAI,iBAAiB,KAAM,QAAO,MAAM,YAAY;AACpD,QAAM,OAAO,IAAI,KAAK,KAAK;AAC3B,SAAO,OAAO,MAAM,KAAK,QAAQ,CAAC,IAAI,QAAQ,KAAK,YAAY;AACjE;AAEA,eAAe,qBAAqB,KAAiD;AACnF,QAAM,OAAO,MAAM,2BAA2B,GAAG;AACjD,MAAI,CAAC,MAAM;AACT,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,sCAAsC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACvG;AACA,MAAI,CAAC,KAAK,kBAAkB;AAC1B,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,kDAAkD,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACnH;AACA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,SAAO;AAAA,IACL;AAAA,IACA,YAAY,KAAK;AAAA,IACjB,UAAU,KAAK;AAAA,IACf,gBAAgB,KAAK;AAAA,IACrB;AAAA,IACA;AAAA,EACF;AACF;AAEA,SAAS,eAAe,SAAkD;AACxE,SAAO;AAAA,IACL,KAAK,QAAQ,KAAK;AAAA,IAClB,UAAU,QAAQ;AAAA,IAClB,OAAO,QAAQ;AAAA,IACf,OAAO,QAAQ,KAAK;AAAA,EACtB;AACF;AAEA,eAAe,eAAe,SAAwB,SAAgD;AACpG,SAAO;AAAA,IACL,QAAQ;AAAA,IACR;AAAA,MACE,UAAU,QAAQ;AAAA,MAClB,gBAAgB,QAAQ;AAAA,MACxB,YAAY,QAAQ;AAAA,IACtB;AAAA,IACA;AAAA,EACF;AACF;AAEA,eAAe,yBACb,KACA,SACA,SACA,WACA,iBACmC;AACnC,SAAO,uBAAuB;AAAA,IAC5B,WAAW,QAAQ;AAAA,IACnB;AAAA,IACA,MAAM;AAAA,MACJ,QAAQ,QAAQ,KAAK;AAAA,MACrB,UAAU,QAAQ;AAAA,MAClB,gBAAgB,QAAQ;AAAA,MACxB,cAAc,CAAC;AAAA,IACjB;AAAA,IACA,OAAO;AAAA,MACL,cAAc;AAAA,MACd,YAAY;AAAA,MACZ;AAAA,MACA;AAAA,IACF;AAAA,EACF,CAAC;AACH;AAEA,SAAS,oBAAoB,YAAwB;AACnD,QAAMA,YAAW,uBAAuB,WAAW,eAAe;AAClE,SAAO;AAAA,IACL,IAAI,WAAW;AAAA,IACf,KAAK,WAAW;AAAA,IAChB,aAAa,wDAAwD,mBAAmB,WAAW,EAAE,CAAC;AAAA,IACtG,UAAU,WAAW;AAAA,IACrB,UAAU,WAAW;AAAA,IACrB,UAAU,WAAW,YAAY;AAAA,IACjC,eAAe,WAAW;AAAA,IAC1B,SAAS,WAAW,WAAW;AAAA,IAC/B,cAAc,wBAAwB,WAAW,IAAI;AAAA,MACnD,OAAO;AAAA,MACP,QAAQ;AAAA,MACR,MAAM,0BAA0B,WAAW,QAAQ;AAAA,IACrD,CAAC;AAAA,IACD,MAAMA,UAAS,QAAQ,CAAC;AAAA,IACxB,aAAaA,UAAS,eAAe,CAAC;AAAA,IACtC,WAAW,MAAM,WAAW,SAAS;AAAA,EACvC;AACF;AAEA,eAAe,4BAA4B,SAAuD;AAChG,MAAI;AACF,UAAM,WAAW,QAAQ,UAAU,QAAQ,sBAAsB;AACjE,WAAO,YAAY,IAAI,qBAAqB,QAAQ,EAAE;AAAA,EACxD,QAAQ;AACN,WAAO,IAAI,qBAAqB,QAAQ,EAAE;AAAA,EAC5C;AACF;AAEA,eAAe,2BACb,SACA,cACkE;AAClE,QAAM,QAAQ,EAAE,UAAU,QAAQ,UAAU,gBAAgB,QAAQ,eAAe;AACnF,QAAM,aAAa,MAAM;AAAA,IACvB,QAAQ;AAAA,IACR;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ,UAAU;AAAA,MACV,UAAU,QAAQ;AAAA,MAClB,gBAAgB,QAAQ;AAAA,IAC1B;AAAA,IACA,CAAC;AAAA,IACD;AAAA,EACF;AACA,MAAI,CAAC,WAAY,QAAO;AACxB,QAAM,QAAQ,MAAM,eAAe,SAAS,WAAW,QAAQ;AAC/D,MAAI,CAAC,MAAO,QAAO;AACnB,MAAI,CAAC,4BAA4B,uBAAuB,WAAW,eAAe,EAAE,IAAI,EAAG,QAAO;AAClG,SAAO,EAAE,YAAY,MAAM;AAC7B;AAEA,eAAe,uBAAuB,SAAwB,YAAuC;AACnG,QAAM,QAAQ,GAAG,OAAO,UAAU,EAAE,MAAM;AAC1C,QAAM,8BAA8B,WAAW,eAAe,WAAW,EAAE,EAAE,MAAM,CAAC,UAAU;AAC5F,WAAO,MAAM,gDAAgD,EAAE,KAAK,OAAO,cAAc,WAAW,GAAG,CAAC;AAAA,EAC1G,CAAC;AACD,MAAI,WAAW,aAAa;AAC1B,QAAI;AACF,YAAM,SAAS,OAAO,MAAM,4BAA4B,OAAO,GAAG,oBAAoB,WAAW,eAAe;AAAA,QAC9G,UAAU,WAAW,YAAY,QAAQ;AAAA,QACzC,gBAAgB,WAAW,kBAAkB,QAAQ;AAAA,MACvD,CAAC;AACD,YAAM,OAAO,OAAO,WAAW,eAAe,WAAW,WAAW;AAAA,IACtE,SAAS,OAAO;AACd,aAAO,MAAM,8CAA8C,EAAE,KAAK,OAAO,cAAc,WAAW,GAAG,CAAC;AAAA,IACxG;AAAA,EACF;AAEA,MAAI,aAAgC;AACpC,MAAI;AACF,iBAAa,QAAQ,UAAU,QAAoB,YAAY,KAAK;AAAA,EACtE,QAAQ;AACN,iBAAa;AAAA,EACf;AACA,MAAI,YAAY;AACd,UAAM,oBAAoB;AAAA,MACxB;AAAA,MACA,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,aAAa;AAAA,QACX,IAAI,WAAW;AAAA,QACf,gBAAgB,WAAW,kBAAkB;AAAA,QAC7C,UAAU,WAAW,YAAY;AAAA,MACnC;AAAA,MACA,QAAQ;AAAA,MACR,SAAS;AAAA,IACX,CAAC;AACD,UAAM,WAAW,sBAAsB;AAAA,EACzC;AACF;AAEA,eAAe,sBAAsB,SAAwB,cAAyC;AACpG,QAAM,QAAQ,MAAM,2BAA2B,SAAS,YAAY;AACpE,MAAI,CAAC,OAAO;AACV,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,kCAAkC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACnG;AACA,QAAM,EAAE,WAAW,IAAI;AACvB,QAAM,YAAY,MAAM,QAAQ,GAAG,QAAQ,qBAAqB,EAAE,MAAM,WAAW,cAAc,CAAC;AAClG,MAAI,CAAC,WAAW;AACd,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,qCAAqC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACtG;AACA,QAAM,SAAS,sBAAsB,eAAe,OAAO,GAAG,YAAY,WAAW,EAAE,sBAAsB,KAAK,CAAC;AACnH,MAAI,CAAC,OAAO,IAAI;AACd,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,kCAAkC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACnG;AACA,QAAM,SAAS,OAAO,MAAM,4BAA4B,OAAO,GAAG,oBAAoB,WAAW,eAAe;AAAA,IAC9G,UAAU,WAAW,YAAY;AAAA,IACjC,gBAAgB,WAAW,kBAAkB;AAAA,EAC/C,CAAC;AACD,MAAI;AACJ,MAAI;AACF,cAAU,MAAM,OAAO,KAAK,WAAW,eAAe,WAAW,WAAW,GAAG;AAAA,EACjF,QAAQ;AACN,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,kCAAkC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACnG;AACA,QAAM,UAAkC;AAAA,IACtC,iBAAiB;AAAA,IACjB,2BAA2B;AAAA,IAC3B,gBAAgB;AAAA,IAChB,uBAAuB,yBAAyB,0BAA0B,WAAW,QAAQ,CAAC;AAAA,IAC9F,0BAA0B;AAAA,EAC5B;AACA,MAAI,WAAW,WAAW,EAAG,SAAQ,gBAAgB,IAAI,OAAO,WAAW,QAAQ;AACnF,SAAO,IAAI,aAAa,IAAI,WAAW,MAAM,GAAG,EAAE,QAAQ,KAAK,QAAQ,CAAC;AAC1E;AAEA,eAAsB,IAAI,KAAc;AACtC,QAAM,oBAAoB,MAAM,qBAAqB,GAAG;AACxD,MAAI,6BAA6B,SAAU,QAAO;AAClD,QAAM,UAAU;AAChB,QAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,QAAM,eAAe,IAAI,aAAa,IAAI,cAAc;AACxD,MAAI,cAAc;AAChB,UAAM,qBAAqB,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,YAAY;AACnE,QAAI,CAAC,mBAAmB,SAAS;AAC/B,aAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,sCAAsC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACvG;AACA,WAAO,sBAAsB,SAAS,mBAAmB,IAAI;AAAA,EAC/D;AACA,QAAM,SAAS,sBAAsB,UAAU;AAAA,IAC7C,SAAS,IAAI,aAAa,IAAI,SAAS,KAAK;AAAA,IAC5C,MAAM,IAAI,aAAa,IAAI,MAAM,KAAK;AAAA,IACtC,UAAU,IAAI,aAAa,IAAI,UAAU,KAAK;AAAA,EAChD,CAAC;AACD,MAAI,CAAC,OAAO,SAAS;AACnB,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,sCAAsC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACvG;AACA,QAAM,QAAQ,MAAM,eAAe,SAAS,OAAO,KAAK,OAAO;AAC/D,MAAI,CAAC,OAAO;AACV,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,kCAAkC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACnG;AACA,QAAM,SAAS;AAAA,IACb,UAAU;AAAA,IACV,UAAU,MAAM;AAAA,IAChB,UAAU,QAAQ;AAAA,IAClB,gBAAgB,QAAQ;AAAA,EAC1B;AACA,QAAM,OAAO,OAAO,KAAK,QAAQ;AACjC,QAAM,WAAW,OAAO,KAAK,YAAY;AACzC,QAAM,cAAc,MAAM;AAAA,IACxB,QAAQ;AAAA,IACR;AAAA,IACA;AAAA,IACA,EAAE,SAAS,EAAE,WAAW,OAAO,EAAE;AAAA,IACjC,EAAE,UAAU,QAAQ,UAAU,gBAAgB,QAAQ,eAAe;AAAA,EACvE;AACA,QAAM,iBAAiB,MAAM,KAAK,IAAI,IAAI,YAAY,IAAI,CAAC,eAAe,WAAW,aAAa,CAAC,CAAC;AACpG,QAAM,aAAa,eAAe,SAC9B,MAAM,QAAQ,GAAG,KAAK,qBAAqB,EAAE,MAAM,EAAE,KAAK,eAAe,EAAE,CAAC,IAC5E,CAAC;AACL,QAAM,mBAAmB,IAAI,IAAI,WAAW,IAAI,CAAC,cAAc,CAAC,UAAU,MAAM,SAAS,CAAC,CAAC;AAC3F,QAAM,OAAO,eAAe,OAAO;AACnC,QAAM,UAAU,YAAY,OAAO,CAAC,eAAe;AACjD,UAAM,YAAY,iBAAiB,IAAI,WAAW,aAAa;AAC/D,QAAI,CAAC,UAAW,QAAO;AACvB,QAAI,CAAC,4BAA4B,uBAAuB,WAAW,eAAe,EAAE,IAAI,EAAG,QAAO;AAClG,WAAO,sBAAsB,MAAM,YAAY,WAAW,EAAE,sBAAsB,KAAK,CAAC,EAAE;AAAA,EAC5F,CAAC;AAED,QAAM,eAAe,QAAQ,OAAO,OAAO,KAAK,UAAU,OAAO,QAAQ;AAEzE,SAAO,aAAa,KAAK;AAAA,IACvB,OAAO,aAAa,IAAI,mBAAmB;AAAA,IAC3C,OAAO,QAAQ;AAAA,IACf;AAAA,IACA;AAAA,IACA,YAAY,KAAK,IAAI,GAAG,KAAK,KAAK,QAAQ,SAAS,QAAQ,CAAC;AAAA,EAC9D,CAAC;AACH;AAEA,eAAe,aAAa,KAAc,aAAyC;AACjF,QAAM,oBAAoB,MAAM,qBAAqB,GAAG;AACxD,MAAI,6BAA6B,SAAU,QAAO;AAClD,QAAM,UAAU;AAChB,QAAM,cAAc,IAAI,QAAQ,IAAI,cAAc,KAAK;AACvD,MAAI,CAAC,YAAY,YAAY,EAAE,SAAS,qBAAqB,GAAG;AAC9D,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,sCAAsC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACvG;AACA,MAAI,CAAC,oCAAoC,IAAI,QAAQ,IAAI,gBAAgB,CAAC,GAAG;AAC3E,UAAM,EAAE,EAAE,IAAI,MAAM,oBAAoB;AACxC,WAAO,aAAa,KAAK;AAAA,MACvB,IAAI;AAAA,MACJ,OAAO,EAAE,oCAAoC,6CAA6C;AAAA,IAC5F,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACpB;AAEA,QAAM,OAAO,MAAM,IAAI,SAAS;AAChC,QAAM,SAAS,iBAAiB,UAAU;AAAA,IACxC,SAAS,KAAK,IAAI,SAAS,KAAK;AAAA,IAChC,MAAM,KAAK,IAAI,MAAM,aAAa,OAAQ,KAAK,IAAI,MAAM,EAAW,OAAO;AAAA,EAC7E,CAAC;AACD,QAAM,qBAAqB,cACvB,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,KAAK,IAAI,cAAc,KAAK,MAAS,IACjE;AACJ,MAAI,CAAC,OAAO,WAAY,eAAe,CAAC,oBAAoB,SAAU;AACpE,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,sCAAsC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACvG;AACA,QAAM,QAAQ,MAAM,eAAe,SAAS,OAAO,KAAK,OAAO;AAC/D,MAAI,CAAC,OAAO;AACV,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,kCAAkC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACnG;AACA,QAAM,OAAO,KAAK,IAAI,MAAM;AAC5B,MAAI,EAAE,gBAAgB,OAAO;AAC3B,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,6CAA6C,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC9G;AACA,QAAM,SAAS,OAAO,KAAK,MAAM,KAAK,YAAY,CAAC;AAEnD,QAAM,eAAe,eAAe,oBAAoB,UAAU,mBAAmB,OAAO;AAC5F,QAAM,oBAAoB,eACtB,MAAM,2BAA2B,SAAS,YAAY,IACtD;AACJ,MAAI,gBAAgB,CAAC,qBAAqB,kBAAkB,MAAM,OAAO,MAAM,KAAK;AAClF,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,kCAAkC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACnG;AAEA,QAAM,UAAU,MAAM,yBAAyB,KAAK,SAAS,MAAM,IAAI,cAAc,WAAW,UAAU;AAAA,IACxG,SAAS,MAAM;AAAA,IACf;AAAA,IACA,UAAU,KAAK;AAAA,IACf,UAAU,KAAK;AAAA,IACf,UAAU,KAAK;AAAA,EACjB,CAAC;AACD,MAAI,CAAC,QAAQ,IAAI;AACf,WAAO,QAAQ;AAAA,EACjB;AAEA,QAAM,gBAAgB,qCAAqC,QAAQ,SAAS;AAC5E,MAAI,CAAC,eAAe;AAClB,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,gDAAgD,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACjH;AAEA,MAAI;AACJ,MAAI;AACF,iBAAa,MAAM,cAAc,OAAO;AAAA,MACtC,UAAU,QAAQ;AAAA,MAClB,gBAAgB,QAAQ;AAAA,MACxB,UAAU;AAAA,MACV,UAAU,MAAM;AAAA,MAChB,UAAU,KAAK;AAAA,MACf;AAAA,MACA,kBAAkB,KAAK;AAAA,MACvB,MAAM,CAAC,+BAA+B;AAAA,IACxC,CAAC;AAAA,EACH,SAAS,OAAO;AACd,QAAI,iBAAiB,6BAA6B;AAChD,YAAM,EAAE,EAAE,IAAI,MAAM,oBAAoB;AACxC,YAAM,CAAC,KAAK,QAAQ,IAAI,8BAA8B,MAAM,IAAI,KAC3D,CAAC,iDAAiD,2BAA2B;AAClF,aAAO,aAAa;AAAA,QAClB,EAAE,IAAI,OAAO,OAAO,EAAE,KAAK,QAAQ,GAAG,MAAM,MAAM,KAAK;AAAA,QACvD,EAAE,QAAQ,MAAM,OAAO;AAAA,MACzB;AAAA,IACF;AACA,UAAM;AAAA,EACR;AAEA,MAAI,mBAAmB;AACrB,UAAM,uBAAuB,SAAS,kBAAkB,UAAU;AAAA,EACpE;AACA,QAAM,QAAQ,gBAAgB;AAE9B,SAAO,aAAa,KAAK;AAAA,IACvB,IAAI;AAAA,IACJ,MAAM;AAAA,MACJ,GAAG,oBAAoB,UAAU;AAAA,MACjC,YAAY;AAAA,IACd;AAAA,EACF,CAAC;AACH;AAEA,eAAsB,KAAK,KAAc;AACvC,SAAO,aAAa,KAAK,KAAK;AAChC;AAEA,eAAsB,IAAI,KAAc;AACtC,SAAO,aAAa,KAAK,IAAI;AAC/B;AAEA,eAAsB,OAAO,KAAc;AACzC,QAAM,oBAAoB,MAAM,qBAAqB,GAAG;AACxD,MAAI,6BAA6B,SAAU,QAAO;AAClD,QAAM,UAAU;AAChB,QAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,QAAM,SAAS,kBAAkB,UAAU;AAAA,IACzC,cAAc,IAAI,aAAa,IAAI,cAAc,KAAK;AAAA,EACxD,CAAC;AACD,MAAI,CAAC,OAAO,SAAS;AACnB,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,sCAAsC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACvG;AACA,QAAM,QAAQ,MAAM,2BAA2B,SAAS,OAAO,KAAK,YAAY;AAChF,MAAI,CAAC,OAAO;AACV,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,kCAAkC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACnG;AACA,QAAM,UAAU,MAAM,yBAAyB,KAAK,SAAS,MAAM,MAAM,IAAI,UAAU;AAAA,IACrF,SAAS,MAAM,MAAM;AAAA,IACrB,cAAc,MAAM,WAAW;AAAA,EACjC,CAAC;AACD,MAAI,CAAC,QAAQ,GAAI,QAAO,QAAQ;AAEhC,QAAM,uBAAuB,SAAS,MAAM,UAAU;AACtD,QAAM,QAAQ,gBAAgB;AAC9B,SAAO,aAAa,KAAK,EAAE,IAAI,KAAK,CAAC;AACvC;AAEA,MAAM,mBAAmB,EAAE,OAAO;AAAA,EAChC,MAAM,EAAE,OAAO;AAAA,EACf,IAAI,EAAE,OAAO;AAAA,EACb,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACrC,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AACxC,CAAC;AAED,MAAM,uBAAuB,EAAE,OAAO;AAAA,EACpC,IAAI,EAAE,OAAO;AAAA,EACb,KAAK,EAAE,OAAO;AAAA,EACd,aAAa,EAAE,OAAO;AAAA,EACtB,UAAU,EAAE,OAAO;AAAA,EACnB,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY;AAAA,EACvC,UAAU,EAAE,OAAO,EAAE,SAAS;AAAA,EAC9B,eAAe,EAAE,OAAO;AAAA,EACxB,SAAS,EAAE,OAAO,EAAE,SAAS;AAAA,EAC7B,cAAc,EAAE,OAAO;AAAA,EACvB,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC;AAAA,EACxB,aAAa,EAAE,MAAM,gBAAgB;AAAA,EACrC,WAAW,EAAE,OAAO,EAAE,SAAS;AACjC,CAAC;AAEM,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,OAAO;AAAA,MACP,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,EAAE,CAAC;AAAA,QAC3D;AAAA,MACF;AAAA,IACF;AAAA,IACA,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa,EAAE,aAAa,uBAAuB,QAAQ,iBAAiB;AAAA,MAC5E,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,GAAG,MAAM,qBAAqB,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;AAAA,QACrG;AAAA,MACF;AAAA,IACF;AAAA,IACA,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aAAa,EAAE,aAAa,uBAAuB,QAAQ,kBAAkB;AAAA,MAC7E,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,GAAG,MAAM,qBAAqB,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;AAAA,QACrG;AAAA,MACF;AAAA,IACF;AAAA,IACA,QAAQ;AAAA,MACN,SAAS;AAAA,MACT,OAAO;AAAA,MACP,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,IAAI,EAAE,CAAC;AAAA,QAC1C;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;",
+  "names": ["metadata"]
+}