@open-mercato/core 0.6.8-develop.6998.1.d2bc46c56c → 0.6.8-develop.7001.1.03608ab252

package/dist/helpers/integration/api.js

@@ -64,14 +64,15 @@ async function apiRequest(request, method, path, options) {
   };
   const timeout = options.timeout ?? 3e4;
   let lastError = null;
-  for (let attempt = 0; attempt < 2; attempt += 1) {
+  const maxAttempts = options.retryTransport === false ? 1 : 2;
+  for (let attempt = 0; attempt < maxAttempts; attempt += 1) {
     try {
       return await request.fetch(resolveUrl(path), { method, headers, data: options.data, timeout });
     } catch (error) {
       lastError = error;
       const message = error instanceof Error ? error.message : "";
       const retryable = /timeout|idle-session|socket|ECONNRESET|Target page, context or browser has been closed/i.test(message);
-      if (!retryable || attempt === 1) throw error;
+      if (!retryable || attempt === maxAttempts - 1) throw error;
       await new Promise((resolve) => setTimeout(resolve, 250));
     }
   }

package/dist/helpers/integration/api.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../src/helpers/integration/api.ts"],
-  "sourcesContent": ["import { type APIRequestContext } from '@playwright/test';\nimport { DEFAULT_CREDENTIALS, type Role } from './auth';\n\nconst BASE_URL = process.env.BASE_URL?.trim() || null;\n\nfunction resolveUrl(path: string): string {\n  return BASE_URL ? `${BASE_URL}${path}` : path;\n}\n\n// Cached tokens per credential to dodge the login rate limit\n// (5 attempts/60s per email). Tokens are reused across tests in the same\n// Playwright worker; each worker still mints its own.\nconst tokenCache = new Map<string, { token: string; mintedAt: number }>();\nconst TOKEN_TTL_MS = 45 * 60 * 1000; // 45 min; well under the default 2h session TTL.\n\n/**\n * Drops cached tokens so the next getAuthToken() mints a fresh session.\n *\n * A cached token points at a `sessions` row. Anything that deletes those rows \u2014\n * deactivating the user, a password change, an explicit session purge \u2014 leaves the\n * cached token resolving to 401 for the rest of the TTL, and `apiRequest` neither\n * retries nor re-mints. A spec that revokes sessions for an account other specs also\n * use MUST call this afterwards.\n */\nexport function clearAuthTokenCache(): void {\n  tokenCache.clear();\n}\n\nexport async function getAuthToken(\n  request: APIRequestContext,\n  roleOrEmail: Role | string = 'admin',\n  password?: string,\n): Promise<string> {\n  const role = roleOrEmail in DEFAULT_CREDENTIALS ? (roleOrEmail as Role) : null;\n  const credentialAttempts: Array<{ email: string; password: string }> = [];\n\n  if (role) {\n    const configured = DEFAULT_CREDENTIALS[role];\n    credentialAttempts.push({ email: configured.email, password: password ?? configured.password });\n    if (!password) {\n      credentialAttempts.push({ email: `${role}@acme.com`, password: 'secret' });\n    }\n  } else {\n    credentialAttempts.push({ email: roleOrEmail, password: password ?? 'secret' });\n  }\n\n  const cacheKey = credentialAttempts\n    .map((entry) => `${entry.email}:${entry.password}`)\n    .join('|');\n  const cached = tokenCache.get(cacheKey);\n  if (cached && Date.now() - cached.mintedAt < TOKEN_TTL_MS) {\n    return cached.token;\n  }\n\n  let lastStatus = 0;\n\n  for (const attempt of credentialAttempts) {\n    const form = new URLSearchParams();\n    form.set('email', attempt.email);\n    form.set('password', attempt.password);\n\n    // Retry on 429 (auth rate limit kicks in after ~25-30 rapid attempts from\n    // the same test run). Capped exponential backoff: 1s, 2s, 4s; 3 retries.\n    for (let retry = 0; retry < 4; retry += 1) {\n      const response = await request.post(resolveUrl('/api/auth/login'), {\n        headers: {\n          'content-type': 'application/x-www-form-urlencoded',\n        },\n        data: form.toString(),\n      });\n\n      const raw = await response.text();\n      let body: Record<string, unknown> | null = null;\n      try {\n        body = raw ? (JSON.parse(raw) as Record<string, unknown>) : null;\n      } catch {\n        body = null;\n      }\n\n      lastStatus = response.status();\n      if (response.ok() && body && typeof body.token === 'string' && body.token) {\n        tokenCache.set(cacheKey, { token: body.token, mintedAt: Date.now() });\n        return body.token;\n      }\n      if (response.status() !== 429) break;\n      const backoffMs = 1000 * 2 ** retry;\n      await new Promise((resolve) => setTimeout(resolve, backoffMs));\n    }\n  }\n\n  throw new Error(`Failed to obtain auth token (status ${lastStatus})`);\n}\n\nexport async function apiRequest(\n  request: APIRequestContext,\n  method: string,\n  path: string,\n  options: { token: string; data?: unknown; timeout?: number; headers?: Record<string, string> },\n) {\n  const headers = {\n    Authorization: `Bearer ${options.token}`,\n    'Content-Type': 'application/json',\n    ...(options.headers ?? {}),\n  };\n  const timeout = options.timeout ?? 30_000;\n  let lastError: unknown = null;\n  for (let attempt = 0; attempt < 2; attempt += 1) {\n    try {\n      return await request.fetch(resolveUrl(path), { method, headers, data: options.data, timeout });\n    } catch (error) {\n      lastError = error;\n      const message = error instanceof Error ? error.message : '';\n      const retryable = /timeout|idle-session|socket|ECONNRESET|Target page, context or browser has been closed/i.test(message);\n      if (!retryable || attempt === 1) throw error;\n      await new Promise((resolve) => setTimeout(resolve, 250));\n    }\n  }\n  throw lastError;\n}\n\nexport async function postForm(\n  request: APIRequestContext,\n  path: string,\n  data: Record<string, string>,\n  options?: { headers?: Record<string, string> },\n) {\n  const form = new URLSearchParams();\n  for (const [key, value] of Object.entries(data)) form.set(key, value);\n  return request.post(resolveUrl(path), {\n    headers: {\n      'content-type': 'application/x-www-form-urlencoded',\n      ...(options?.headers ?? {}),\n    },\n    data: form.toString(),\n  });\n}\n"],
-  "mappings": "AACA,SAAS,2BAAsC;AAE/C,MAAM,WAAW,QAAQ,IAAI,UAAU,KAAK,KAAK;AAEjD,SAAS,WAAW,MAAsB;AACxC,SAAO,WAAW,GAAG,QAAQ,GAAG,IAAI,KAAK;AAC3C;AAKA,MAAM,aAAa,oBAAI,IAAiD;AACxE,MAAM,eAAe,KAAK,KAAK;AAWxB,SAAS,sBAA4B;AAC1C,aAAW,MAAM;AACnB;AAEA,eAAsB,aACpB,SACA,cAA6B,SAC7B,UACiB;AACjB,QAAM,OAAO,eAAe,sBAAuB,cAAuB;AAC1E,QAAM,qBAAiE,CAAC;AAExE,MAAI,MAAM;AACR,UAAM,aAAa,oBAAoB,IAAI;AAC3C,uBAAmB,KAAK,EAAE,OAAO,WAAW,OAAO,UAAU,YAAY,WAAW,SAAS,CAAC;AAC9F,QAAI,CAAC,UAAU;AACb,yBAAmB,KAAK,EAAE,OAAO,GAAG,IAAI,aAAa,UAAU,SAAS,CAAC;AAAA,IAC3E;AAAA,EACF,OAAO;AACL,uBAAmB,KAAK,EAAE,OAAO,aAAa,UAAU,YAAY,SAAS,CAAC;AAAA,EAChF;AAEA,QAAM,WAAW,mBACd,IAAI,CAAC,UAAU,GAAG,MAAM,KAAK,IAAI,MAAM,QAAQ,EAAE,EACjD,KAAK,GAAG;AACX,QAAM,SAAS,WAAW,IAAI,QAAQ;AACtC,MAAI,UAAU,KAAK,IAAI,IAAI,OAAO,WAAW,cAAc;AACzD,WAAO,OAAO;AAAA,EAChB;AAEA,MAAI,aAAa;AAEjB,aAAW,WAAW,oBAAoB;AACxC,UAAM,OAAO,IAAI,gBAAgB;AACjC,SAAK,IAAI,SAAS,QAAQ,KAAK;AAC/B,SAAK,IAAI,YAAY,QAAQ,QAAQ;AAIrC,aAAS,QAAQ,GAAG,QAAQ,GAAG,SAAS,GAAG;AACzC,YAAM,WAAW,MAAM,QAAQ,KAAK,WAAW,iBAAiB,GAAG;AAAA,QACjE,SAAS;AAAA,UACP,gBAAgB;AAAA,QAClB;AAAA,QACA,MAAM,KAAK,SAAS;AAAA,MACtB,CAAC;AAED,YAAM,MAAM,MAAM,SAAS,KAAK;AAChC,UAAI,OAAuC;AAC3C,UAAI;AACF,eAAO,MAAO,KAAK,MAAM,GAAG,IAAgC;AAAA,MAC9D,QAAQ;AACN,eAAO;AAAA,MACT;AAEA,mBAAa,SAAS,OAAO;AAC7B,UAAI,SAAS,GAAG,KAAK,QAAQ,OAAO,KAAK,UAAU,YAAY,KAAK,OAAO;AACzE,mBAAW,IAAI,UAAU,EAAE,OAAO,KAAK,OAAO,UAAU,KAAK,IAAI,EAAE,CAAC;AACpE,eAAO,KAAK;AAAA,MACd;AACA,UAAI,SAAS,OAAO,MAAM,IAAK;AAC/B,YAAM,YAAY,MAAO,KAAK;AAC9B,YAAM,IAAI,QAAQ,CAAC,YAAY,WAAW,SAAS,SAAS,CAAC;AAAA,IAC/D;AAAA,EACF;AAEA,QAAM,IAAI,MAAM,uCAAuC,UAAU,GAAG;AACtE;AAEA,eAAsB,WACpB,SACA,QACA,MACA,SACA;AACA,QAAM,UAAU;AAAA,IACd,eAAe,UAAU,QAAQ,KAAK;AAAA,IACtC,gBAAgB;AAAA,IAChB,GAAI,QAAQ,WAAW,CAAC;AAAA,EAC1B;AACA,QAAM,UAAU,QAAQ,WAAW;AACnC,MAAI,YAAqB;AACzB,WAAS,UAAU,GAAG,UAAU,GAAG,WAAW,GAAG;AAC/C,QAAI;AACF,aAAO,MAAM,QAAQ,MAAM,WAAW,IAAI,GAAG,EAAE,QAAQ,SAAS,MAAM,QAAQ,MAAM,QAAQ,CAAC;AAAA,IAC/F,SAAS,OAAO;AACd,kBAAY;AACZ,YAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU;AACzD,YAAM,YAAY,0FAA0F,KAAK,OAAO;AACxH,UAAI,CAAC,aAAa,YAAY,EAAG,OAAM;AACvC,YAAM,IAAI,QAAQ,CAAC,YAAY,WAAW,SAAS,GAAG,CAAC;AAAA,IACzD;AAAA,EACF;AACA,QAAM;AACR;AAEA,eAAsB,SACpB,SACA,MACA,MACA,SACA;AACA,QAAM,OAAO,IAAI,gBAAgB;AACjC,aAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,IAAI,EAAG,MAAK,IAAI,KAAK,KAAK;AACpE,SAAO,QAAQ,KAAK,WAAW,IAAI,GAAG;AAAA,IACpC,SAAS;AAAA,MACP,gBAAgB;AAAA,MAChB,GAAI,SAAS,WAAW,CAAC;AAAA,IAC3B;AAAA,IACA,MAAM,KAAK,SAAS;AAAA,EACtB,CAAC;AACH;",
+  "sourcesContent": ["import { type APIRequestContext } from '@playwright/test';\nimport { DEFAULT_CREDENTIALS, type Role } from './auth';\n\nconst BASE_URL = process.env.BASE_URL?.trim() || null;\n\nfunction resolveUrl(path: string): string {\n  return BASE_URL ? `${BASE_URL}${path}` : path;\n}\n\n// Cached tokens per credential to dodge the login rate limit\n// (5 attempts/60s per email). Tokens are reused across tests in the same\n// Playwright worker; each worker still mints its own.\nconst tokenCache = new Map<string, { token: string; mintedAt: number }>();\nconst TOKEN_TTL_MS = 45 * 60 * 1000; // 45 min; well under the default 2h session TTL.\n\n/**\n * Drops cached tokens so the next getAuthToken() mints a fresh session.\n *\n * A cached token points at a `sessions` row. Anything that deletes those rows \u2014\n * deactivating the user, a password change, an explicit session purge \u2014 leaves the\n * cached token resolving to 401 for the rest of the TTL, and `apiRequest` neither\n * retries nor re-mints. A spec that revokes sessions for an account other specs also\n * use MUST call this afterwards.\n */\nexport function clearAuthTokenCache(): void {\n  tokenCache.clear();\n}\n\nexport async function getAuthToken(\n  request: APIRequestContext,\n  roleOrEmail: Role | string = 'admin',\n  password?: string,\n): Promise<string> {\n  const role = roleOrEmail in DEFAULT_CREDENTIALS ? (roleOrEmail as Role) : null;\n  const credentialAttempts: Array<{ email: string; password: string }> = [];\n\n  if (role) {\n    const configured = DEFAULT_CREDENTIALS[role];\n    credentialAttempts.push({ email: configured.email, password: password ?? configured.password });\n    if (!password) {\n      credentialAttempts.push({ email: `${role}@acme.com`, password: 'secret' });\n    }\n  } else {\n    credentialAttempts.push({ email: roleOrEmail, password: password ?? 'secret' });\n  }\n\n  const cacheKey = credentialAttempts\n    .map((entry) => `${entry.email}:${entry.password}`)\n    .join('|');\n  const cached = tokenCache.get(cacheKey);\n  if (cached && Date.now() - cached.mintedAt < TOKEN_TTL_MS) {\n    return cached.token;\n  }\n\n  let lastStatus = 0;\n\n  for (const attempt of credentialAttempts) {\n    const form = new URLSearchParams();\n    form.set('email', attempt.email);\n    form.set('password', attempt.password);\n\n    // Retry on 429 (auth rate limit kicks in after ~25-30 rapid attempts from\n    // the same test run). Capped exponential backoff: 1s, 2s, 4s; 3 retries.\n    for (let retry = 0; retry < 4; retry += 1) {\n      const response = await request.post(resolveUrl('/api/auth/login'), {\n        headers: {\n          'content-type': 'application/x-www-form-urlencoded',\n        },\n        data: form.toString(),\n      });\n\n      const raw = await response.text();\n      let body: Record<string, unknown> | null = null;\n      try {\n        body = raw ? (JSON.parse(raw) as Record<string, unknown>) : null;\n      } catch {\n        body = null;\n      }\n\n      lastStatus = response.status();\n      if (response.ok() && body && typeof body.token === 'string' && body.token) {\n        tokenCache.set(cacheKey, { token: body.token, mintedAt: Date.now() });\n        return body.token;\n      }\n      if (response.status() !== 429) break;\n      const backoffMs = 1000 * 2 ** retry;\n      await new Promise((resolve) => setTimeout(resolve, backoffMs));\n    }\n  }\n\n  throw new Error(`Failed to obtain auth token (status ${lastStatus})`);\n}\n\nexport async function apiRequest(\n  request: APIRequestContext,\n  method: string,\n  path: string,\n  options: {\n    token: string;\n    data?: unknown;\n    timeout?: number;\n    retryTransport?: boolean;\n    headers?: Record<string, string>;\n  },\n) {\n  const headers = {\n    Authorization: `Bearer ${options.token}`,\n    'Content-Type': 'application/json',\n    ...(options.headers ?? {}),\n  };\n  const timeout = options.timeout ?? 30_000;\n  let lastError: unknown = null;\n  const maxAttempts = options.retryTransport === false ? 1 : 2;\n  for (let attempt = 0; attempt < maxAttempts; attempt += 1) {\n    try {\n      return await request.fetch(resolveUrl(path), { method, headers, data: options.data, timeout });\n    } catch (error) {\n      lastError = error;\n      const message = error instanceof Error ? error.message : '';\n      const retryable = /timeout|idle-session|socket|ECONNRESET|Target page, context or browser has been closed/i.test(message);\n      if (!retryable || attempt === maxAttempts - 1) throw error;\n      await new Promise((resolve) => setTimeout(resolve, 250));\n    }\n  }\n  throw lastError;\n}\n\nexport async function postForm(\n  request: APIRequestContext,\n  path: string,\n  data: Record<string, string>,\n  options?: { headers?: Record<string, string> },\n) {\n  const form = new URLSearchParams();\n  for (const [key, value] of Object.entries(data)) form.set(key, value);\n  return request.post(resolveUrl(path), {\n    headers: {\n      'content-type': 'application/x-www-form-urlencoded',\n      ...(options?.headers ?? {}),\n    },\n    data: form.toString(),\n  });\n}\n"],
+  "mappings": "AACA,SAAS,2BAAsC;AAE/C,MAAM,WAAW,QAAQ,IAAI,UAAU,KAAK,KAAK;AAEjD,SAAS,WAAW,MAAsB;AACxC,SAAO,WAAW,GAAG,QAAQ,GAAG,IAAI,KAAK;AAC3C;AAKA,MAAM,aAAa,oBAAI,IAAiD;AACxE,MAAM,eAAe,KAAK,KAAK;AAWxB,SAAS,sBAA4B;AAC1C,aAAW,MAAM;AACnB;AAEA,eAAsB,aACpB,SACA,cAA6B,SAC7B,UACiB;AACjB,QAAM,OAAO,eAAe,sBAAuB,cAAuB;AAC1E,QAAM,qBAAiE,CAAC;AAExE,MAAI,MAAM;AACR,UAAM,aAAa,oBAAoB,IAAI;AAC3C,uBAAmB,KAAK,EAAE,OAAO,WAAW,OAAO,UAAU,YAAY,WAAW,SAAS,CAAC;AAC9F,QAAI,CAAC,UAAU;AACb,yBAAmB,KAAK,EAAE,OAAO,GAAG,IAAI,aAAa,UAAU,SAAS,CAAC;AAAA,IAC3E;AAAA,EACF,OAAO;AACL,uBAAmB,KAAK,EAAE,OAAO,aAAa,UAAU,YAAY,SAAS,CAAC;AAAA,EAChF;AAEA,QAAM,WAAW,mBACd,IAAI,CAAC,UAAU,GAAG,MAAM,KAAK,IAAI,MAAM,QAAQ,EAAE,EACjD,KAAK,GAAG;AACX,QAAM,SAAS,WAAW,IAAI,QAAQ;AACtC,MAAI,UAAU,KAAK,IAAI,IAAI,OAAO,WAAW,cAAc;AACzD,WAAO,OAAO;AAAA,EAChB;AAEA,MAAI,aAAa;AAEjB,aAAW,WAAW,oBAAoB;AACxC,UAAM,OAAO,IAAI,gBAAgB;AACjC,SAAK,IAAI,SAAS,QAAQ,KAAK;AAC/B,SAAK,IAAI,YAAY,QAAQ,QAAQ;AAIrC,aAAS,QAAQ,GAAG,QAAQ,GAAG,SAAS,GAAG;AACzC,YAAM,WAAW,MAAM,QAAQ,KAAK,WAAW,iBAAiB,GAAG;AAAA,QACjE,SAAS;AAAA,UACP,gBAAgB;AAAA,QAClB;AAAA,QACA,MAAM,KAAK,SAAS;AAAA,MACtB,CAAC;AAED,YAAM,MAAM,MAAM,SAAS,KAAK;AAChC,UAAI,OAAuC;AAC3C,UAAI;AACF,eAAO,MAAO,KAAK,MAAM,GAAG,IAAgC;AAAA,MAC9D,QAAQ;AACN,eAAO;AAAA,MACT;AAEA,mBAAa,SAAS,OAAO;AAC7B,UAAI,SAAS,GAAG,KAAK,QAAQ,OAAO,KAAK,UAAU,YAAY,KAAK,OAAO;AACzE,mBAAW,IAAI,UAAU,EAAE,OAAO,KAAK,OAAO,UAAU,KAAK,IAAI,EAAE,CAAC;AACpE,eAAO,KAAK;AAAA,MACd;AACA,UAAI,SAAS,OAAO,MAAM,IAAK;AAC/B,YAAM,YAAY,MAAO,KAAK;AAC9B,YAAM,IAAI,QAAQ,CAAC,YAAY,WAAW,SAAS,SAAS,CAAC;AAAA,IAC/D;AAAA,EACF;AAEA,QAAM,IAAI,MAAM,uCAAuC,UAAU,GAAG;AACtE;AAEA,eAAsB,WACpB,SACA,QACA,MACA,SAOA;AACA,QAAM,UAAU;AAAA,IACd,eAAe,UAAU,QAAQ,KAAK;AAAA,IACtC,gBAAgB;AAAA,IAChB,GAAI,QAAQ,WAAW,CAAC;AAAA,EAC1B;AACA,QAAM,UAAU,QAAQ,WAAW;AACnC,MAAI,YAAqB;AACzB,QAAM,cAAc,QAAQ,mBAAmB,QAAQ,IAAI;AAC3D,WAAS,UAAU,GAAG,UAAU,aAAa,WAAW,GAAG;AACzD,QAAI;AACF,aAAO,MAAM,QAAQ,MAAM,WAAW,IAAI,GAAG,EAAE,QAAQ,SAAS,MAAM,QAAQ,MAAM,QAAQ,CAAC;AAAA,IAC/F,SAAS,OAAO;AACd,kBAAY;AACZ,YAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU;AACzD,YAAM,YAAY,0FAA0F,KAAK,OAAO;AACxH,UAAI,CAAC,aAAa,YAAY,cAAc,EAAG,OAAM;AACrD,YAAM,IAAI,QAAQ,CAAC,YAAY,WAAW,SAAS,GAAG,CAAC;AAAA,IACzD;AAAA,EACF;AACA,QAAM;AACR;AAEA,eAAsB,SACpB,SACA,MACA,MACA,SACA;AACA,QAAM,OAAO,IAAI,gBAAgB;AACjC,aAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,IAAI,EAAG,MAAK,IAAI,KAAK,KAAK;AACpE,SAAO,QAAQ,KAAK,WAAW,IAAI,GAAG;AAAA,IACpC,SAAS;AAAA,MACP,gBAAgB;AAAA,MAChB,GAAI,SAAS,WAAW,CAAC;AAAA,IAC3B;AAAA,IACA,MAAM,KAAK,SAAS;AAAA,EACtB,CAAC;AACH;",
   "names": []
 }

package/dist/helpers/integration/salesFixtures.js

@@ -16,10 +16,13 @@ function readId(payload, keys) {
   return null;
 }
 async function createEntity(request, token, path, data, idKeys) {
-  const response = await apiRequest(request, "POST", path, { token, data });
-  const body = await response.json();
-  expect(response.ok(), `Failed POST ${path}: ${response.status()}`).toBeTruthy();
-  const id = readId(body, idKeys);
+  const response = await apiRequest(request, "POST", path, { token, data, retryTransport: false });
+  const bodyText = await response.text();
+  expect(
+    response.ok(),
+    `Failed POST ${path}: ${response.status()} ${bodyText.slice(0, 500)}`
+  ).toBeTruthy();
+  const id = readId(JSON.parse(bodyText), idKeys);
   expect(id, `No id in POST ${path} response`).toBeTruthy();
   return id;
 }
@@ -90,8 +93,12 @@ async function canManageSalesOrders(request, token) {
     }
   });
   if (response.status() === 403) return false;
-  if (!response.ok()) return false;
-  const id = readId(await response.json(), ["id", "orderId"]);
+  const bodyText = await response.text();
+  expect(
+    response.ok(),
+    `canManageSalesOrders probe failed with ${response.status()}: ${bodyText.slice(0, 500)}`
+  ).toBeTruthy();
+  const id = readId(JSON.parse(bodyText), ["id", "orderId"]);
   if (id) {
     try {
       await apiRequest(request, "DELETE", "/api/sales/orders", { token, data: { id } });

package/dist/helpers/integration/salesFixtures.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../src/helpers/integration/salesFixtures.ts"],
-  "sourcesContent": ["import { expect, type APIRequestContext } from '@playwright/test';\nimport { apiRequest } from './api';\n\ntype JsonMap = Record<string, unknown>;\n\nfunction readId(payload: unknown, keys: string[]): string | null {\n  if (!payload || typeof payload !== 'object') return null;\n  const map = payload as JsonMap;\n  for (const key of keys) {\n    const value = map[key];\n    if (typeof value === 'string' && value.length > 0) return value;\n  }\n  for (const value of Object.values(map)) {\n    if (value && typeof value === 'object' && !Array.isArray(value)) {\n      const nested = readId(value, keys);\n      if (nested) return nested;\n    }\n  }\n  return null;\n}\n\nasync function createEntity(\n  request: APIRequestContext,\n  token: string,\n  path: string,\n  data: Record<string, unknown>,\n  idKeys: string[],\n): Promise<string> {\n  const response = await apiRequest(request, 'POST', path, { token, data });\n  const body = (await response.json()) as unknown;\n  expect(response.ok(), `Failed POST ${path}: ${response.status()}`).toBeTruthy();\n  const id = readId(body, idKeys);\n  expect(id, `No id in POST ${path} response`).toBeTruthy();\n  return id as string;\n}\n\nexport async function createSalesQuoteFixture(\n  request: APIRequestContext,\n  token: string,\n  currencyCode = 'USD',\n): Promise<string> {\n  return createEntity(request, token, '/api/sales/quotes', { currencyCode }, ['id', 'quoteId']);\n}\n\nexport async function createSalesOrderFixture(\n  request: APIRequestContext,\n  token: string,\n  currencyCode = 'USD',\n): Promise<string> {\n  // A sales order must contain at least one line (see issue #4021). Seed a\n  // zero-priced placeholder line so the order is valid on creation without\n  // perturbing totals in specs that add their own priced lines afterwards.\n  return createEntity(\n    request,\n    token,\n    '/api/sales/orders',\n    {\n      currencyCode,\n      lines: [\n        {\n          currencyCode,\n          quantity: 1,\n          name: `QA seed line ${Date.now()}`,\n          unitPriceNet: 0,\n          unitPriceGross: 0,\n        },\n      ],\n    },\n    ['id', 'orderId'],\n  );\n}\n\nexport async function createOrderLineFixture(\n  request: APIRequestContext,\n  token: string,\n  orderId: string,\n  data?: Record<string, unknown>,\n): Promise<string> {\n  return createEntity(\n    request,\n    token,\n    '/api/sales/order-lines',\n    {\n      orderId,\n      currencyCode: 'USD',\n      quantity: 1,\n      name: `QA line ${Date.now()}`,\n      unitPriceNet: 10,\n      unitPriceGross: 12,\n      ...(data ?? {}),\n    },\n    ['id', 'lineId'],\n  );\n}\n\n/**\n * Ship one or more order lines so a subsequent return passes the\n * shipped-quantity guard (issue #3034). A return can only be created for\n * quantities that were physically shipped, so any spec that creates a return\n * must ship the relevant line(s) first. Returns the created shipment id.\n */\nexport async function createShipmentFixture(\n  request: APIRequestContext,\n  token: string,\n  orderId: string,\n  items: Array<{ orderLineId: string; quantity: number }>,\n): Promise<string> {\n  return createEntity(\n    request,\n    token,\n    '/api/sales/shipments',\n    { orderId, items },\n    ['id', 'shipmentId'],\n  );\n}\n\n/**\n * Probe whether the authenticated principal can create a sales order on the\n * current tenant (i.e. holds `sales.orders.manage`). Sales-write integration\n * specs use this to self-skip on dev databases whose role ACLs were never\n * synced (`yarn mercato auth sync-role-acls`) rather than fail spuriously \u2014\n * CI bootstraps a fully-synced tenant so the probe passes there. The probed\n * order is deleted immediately so the check leaves no residue.\n */\nexport async function canManageSalesOrders(\n  request: APIRequestContext,\n  token: string,\n): Promise<boolean> {\n  const response = await apiRequest(request, 'POST', '/api/sales/orders', {\n    token,\n    // A sales order must contain at least one line (issue #4021).\n    data: {\n      currencyCode: 'USD',\n      lines: [\n        {\n          currencyCode: 'USD',\n          quantity: 1,\n          name: 'QA probe line',\n          unitPriceNet: 0,\n          unitPriceGross: 0,\n        },\n      ],\n    },\n  });\n  if (response.status() === 403) return false;\n  if (!response.ok()) return false;\n  const id = readId((await response.json()) as unknown, ['id', 'orderId']);\n  if (id) {\n    try {\n      await apiRequest(request, 'DELETE', '/api/sales/orders', { token, data: { id } });\n    } catch {\n      // best-effort cleanup\n    }\n  }\n  return true;\n}\n\nexport async function deleteSalesEntityIfExists(\n  request: APIRequestContext,\n  token: string | null,\n  path: string,\n  id: string | null,\n): Promise<void> {\n  if (!token || !id) return;\n  try {\n    await apiRequest(request, 'DELETE', `${path}?id=${encodeURIComponent(id)}`, { token });\n  } catch {\n    return;\n  }\n}\n\n"],
-  "mappings": "AAAA,SAAS,cAAsC;AAC/C,SAAS,kBAAkB;AAI3B,SAAS,OAAO,SAAkB,MAA+B;AAC/D,MAAI,CAAC,WAAW,OAAO,YAAY,SAAU,QAAO;AACpD,QAAM,MAAM;AACZ,aAAW,OAAO,MAAM;AACtB,UAAM,QAAQ,IAAI,GAAG;AACrB,QAAI,OAAO,UAAU,YAAY,MAAM,SAAS,EAAG,QAAO;AAAA,EAC5D;AACA,aAAW,SAAS,OAAO,OAAO,GAAG,GAAG;AACtC,QAAI,SAAS,OAAO,UAAU,YAAY,CAAC,MAAM,QAAQ,KAAK,GAAG;AAC/D,YAAM,SAAS,OAAO,OAAO,IAAI;AACjC,UAAI,OAAQ,QAAO;AAAA,IACrB;AAAA,EACF;AACA,SAAO;AACT;AAEA,eAAe,aACb,SACA,OACA,MACA,MACA,QACiB;AACjB,QAAM,WAAW,MAAM,WAAW,SAAS,QAAQ,MAAM,EAAE,OAAO,KAAK,CAAC;AACxE,QAAM,OAAQ,MAAM,SAAS,KAAK;AAClC,SAAO,SAAS,GAAG,GAAG,eAAe,IAAI,KAAK,SAAS,OAAO,CAAC,EAAE,EAAE,WAAW;AAC9E,QAAM,KAAK,OAAO,MAAM,MAAM;AAC9B,SAAO,IAAI,iBAAiB,IAAI,WAAW,EAAE,WAAW;AACxD,SAAO;AACT;AAEA,eAAsB,wBACpB,SACA,OACA,eAAe,OACE;AACjB,SAAO,aAAa,SAAS,OAAO,qBAAqB,EAAE,aAAa,GAAG,CAAC,MAAM,SAAS,CAAC;AAC9F;AAEA,eAAsB,wBACpB,SACA,OACA,eAAe,OACE;AAIjB,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,MACE;AAAA,MACA,OAAO;AAAA,QACL;AAAA,UACE;AAAA,UACA,UAAU;AAAA,UACV,MAAM,gBAAgB,KAAK,IAAI,CAAC;AAAA,UAChC,cAAc;AAAA,UACd,gBAAgB;AAAA,QAClB;AAAA,MACF;AAAA,IACF;AAAA,IACA,CAAC,MAAM,SAAS;AAAA,EAClB;AACF;AAEA,eAAsB,uBACpB,SACA,OACA,SACA,MACiB;AACjB,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,MACE;AAAA,MACA,cAAc;AAAA,MACd,UAAU;AAAA,MACV,MAAM,WAAW,KAAK,IAAI,CAAC;AAAA,MAC3B,cAAc;AAAA,MACd,gBAAgB;AAAA,MAChB,GAAI,QAAQ,CAAC;AAAA,IACf;AAAA,IACA,CAAC,MAAM,QAAQ;AAAA,EACjB;AACF;AAQA,eAAsB,sBACpB,SACA,OACA,SACA,OACiB;AACjB,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA,EAAE,SAAS,MAAM;AAAA,IACjB,CAAC,MAAM,YAAY;AAAA,EACrB;AACF;AAUA,eAAsB,qBACpB,SACA,OACkB;AAClB,QAAM,WAAW,MAAM,WAAW,SAAS,QAAQ,qBAAqB;AAAA,IACtE;AAAA;AAAA,IAEA,MAAM;AAAA,MACJ,cAAc;AAAA,MACd,OAAO;AAAA,QACL;AAAA,UACE,cAAc;AAAA,UACd,UAAU;AAAA,UACV,MAAM;AAAA,UACN,cAAc;AAAA,UACd,gBAAgB;AAAA,QAClB;AAAA,MACF;AAAA,IACF;AAAA,EACF,CAAC;AACD,MAAI,SAAS,OAAO,MAAM,IAAK,QAAO;AACtC,MAAI,CAAC,SAAS,GAAG,EAAG,QAAO;AAC3B,QAAM,KAAK,OAAQ,MAAM,SAAS,KAAK,GAAe,CAAC,MAAM,SAAS,CAAC;AACvE,MAAI,IAAI;AACN,QAAI;AACF,YAAM,WAAW,SAAS,UAAU,qBAAqB,EAAE,OAAO,MAAM,EAAE,GAAG,EAAE,CAAC;AAAA,IAClF,QAAQ;AAAA,IAER;AAAA,EACF;AACA,SAAO;AACT;AAEA,eAAsB,0BACpB,SACA,OACA,MACA,IACe;AACf,MAAI,CAAC,SAAS,CAAC,GAAI;AACnB,MAAI;AACF,UAAM,WAAW,SAAS,UAAU,GAAG,IAAI,OAAO,mBAAmB,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC;AAAA,EACvF,QAAQ;AACN;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { expect, type APIRequestContext } from '@playwright/test';\nimport { apiRequest } from './api';\n\ntype JsonMap = Record<string, unknown>;\n\nfunction readId(payload: unknown, keys: string[]): string | null {\n  if (!payload || typeof payload !== 'object') return null;\n  const map = payload as JsonMap;\n  for (const key of keys) {\n    const value = map[key];\n    if (typeof value === 'string' && value.length > 0) return value;\n  }\n  for (const value of Object.values(map)) {\n    if (value && typeof value === 'object' && !Array.isArray(value)) {\n      const nested = readId(value, keys);\n      if (nested) return nested;\n    }\n  }\n  return null;\n}\n\nasync function createEntity(\n  request: APIRequestContext,\n  token: string,\n  path: string,\n  data: Record<string, unknown>,\n  idKeys: string[],\n): Promise<string> {\n  const response = await apiRequest(request, 'POST', path, { token, data, retryTransport: false });\n  const bodyText = await response.text();\n  expect(\n    response.ok(),\n    `Failed POST ${path}: ${response.status()} ${bodyText.slice(0, 500)}`,\n  ).toBeTruthy();\n  const id = readId(JSON.parse(bodyText) as unknown, idKeys);\n  expect(id, `No id in POST ${path} response`).toBeTruthy();\n  return id as string;\n}\n\nexport async function createSalesQuoteFixture(\n  request: APIRequestContext,\n  token: string,\n  currencyCode = 'USD',\n): Promise<string> {\n  return createEntity(request, token, '/api/sales/quotes', { currencyCode }, ['id', 'quoteId']);\n}\n\nexport async function createSalesOrderFixture(\n  request: APIRequestContext,\n  token: string,\n  currencyCode = 'USD',\n): Promise<string> {\n  // A sales order must contain at least one line (see issue #4021). Seed a\n  // zero-priced placeholder line so the order is valid on creation without\n  // perturbing totals in specs that add their own priced lines afterwards.\n  return createEntity(\n    request,\n    token,\n    '/api/sales/orders',\n    {\n      currencyCode,\n      lines: [\n        {\n          currencyCode,\n          quantity: 1,\n          name: `QA seed line ${Date.now()}`,\n          unitPriceNet: 0,\n          unitPriceGross: 0,\n        },\n      ],\n    },\n    ['id', 'orderId'],\n  );\n}\n\nexport async function createOrderLineFixture(\n  request: APIRequestContext,\n  token: string,\n  orderId: string,\n  data?: Record<string, unknown>,\n): Promise<string> {\n  return createEntity(\n    request,\n    token,\n    '/api/sales/order-lines',\n    {\n      orderId,\n      currencyCode: 'USD',\n      quantity: 1,\n      name: `QA line ${Date.now()}`,\n      unitPriceNet: 10,\n      unitPriceGross: 12,\n      ...(data ?? {}),\n    },\n    ['id', 'lineId'],\n  );\n}\n\n/**\n * Ship one or more order lines so a subsequent return passes the\n * shipped-quantity guard (issue #3034). A return can only be created for\n * quantities that were physically shipped, so any spec that creates a return\n * must ship the relevant line(s) first. Returns the created shipment id.\n */\nexport async function createShipmentFixture(\n  request: APIRequestContext,\n  token: string,\n  orderId: string,\n  items: Array<{ orderLineId: string; quantity: number }>,\n): Promise<string> {\n  return createEntity(\n    request,\n    token,\n    '/api/sales/shipments',\n    { orderId, items },\n    ['id', 'shipmentId'],\n  );\n}\n\n/**\n * Probe whether the authenticated principal can create a sales order on the\n * current tenant (i.e. holds `sales.orders.manage`). Sales-write integration\n * specs use this to self-skip on dev databases whose role ACLs were never\n * synced (`yarn mercato auth sync-role-acls`) rather than fail spuriously \u2014\n * CI bootstraps a fully-synced tenant so the probe passes there. The probed\n * order is deleted immediately so the check leaves no residue.\n *\n * Only `403` counts as \"unsynced ACLs\". Any other failure fails the spec: a probe\n * that returned false for every non-OK response would convert a real sales-route\n * regression into a suite full of green skips, which reads as coverage that ran.\n */\nexport async function canManageSalesOrders(\n  request: APIRequestContext,\n  token: string,\n): Promise<boolean> {\n  const response = await apiRequest(request, 'POST', '/api/sales/orders', {\n    token,\n    // A sales order must contain at least one line (issue #4021).\n    data: {\n      currencyCode: 'USD',\n      lines: [\n        {\n          currencyCode: 'USD',\n          quantity: 1,\n          name: 'QA probe line',\n          unitPriceNet: 0,\n          unitPriceGross: 0,\n        },\n      ],\n    },\n  });\n  if (response.status() === 403) return false;\n  const bodyText = await response.text();\n  expect(\n    response.ok(),\n    `canManageSalesOrders probe failed with ${response.status()}: ${bodyText.slice(0, 500)}`,\n  ).toBeTruthy();\n  const id = readId(JSON.parse(bodyText) as unknown, ['id', 'orderId']);\n  if (id) {\n    try {\n      await apiRequest(request, 'DELETE', '/api/sales/orders', { token, data: { id } });\n    } catch {\n      // best-effort cleanup\n    }\n  }\n  return true;\n}\n\nexport async function deleteSalesEntityIfExists(\n  request: APIRequestContext,\n  token: string | null,\n  path: string,\n  id: string | null,\n): Promise<void> {\n  if (!token || !id) return;\n  try {\n    await apiRequest(request, 'DELETE', `${path}?id=${encodeURIComponent(id)}`, { token });\n  } catch {\n    return;\n  }\n}\n"],
+  "mappings": "AAAA,SAAS,cAAsC;AAC/C,SAAS,kBAAkB;AAI3B,SAAS,OAAO,SAAkB,MAA+B;AAC/D,MAAI,CAAC,WAAW,OAAO,YAAY,SAAU,QAAO;AACpD,QAAM,MAAM;AACZ,aAAW,OAAO,MAAM;AACtB,UAAM,QAAQ,IAAI,GAAG;AACrB,QAAI,OAAO,UAAU,YAAY,MAAM,SAAS,EAAG,QAAO;AAAA,EAC5D;AACA,aAAW,SAAS,OAAO,OAAO,GAAG,GAAG;AACtC,QAAI,SAAS,OAAO,UAAU,YAAY,CAAC,MAAM,QAAQ,KAAK,GAAG;AAC/D,YAAM,SAAS,OAAO,OAAO,IAAI;AACjC,UAAI,OAAQ,QAAO;AAAA,IACrB;AAAA,EACF;AACA,SAAO;AACT;AAEA,eAAe,aACb,SACA,OACA,MACA,MACA,QACiB;AACjB,QAAM,WAAW,MAAM,WAAW,SAAS,QAAQ,MAAM,EAAE,OAAO,MAAM,gBAAgB,MAAM,CAAC;AAC/F,QAAM,WAAW,MAAM,SAAS,KAAK;AACrC;AAAA,IACE,SAAS,GAAG;AAAA,IACZ,eAAe,IAAI,KAAK,SAAS,OAAO,CAAC,IAAI,SAAS,MAAM,GAAG,GAAG,CAAC;AAAA,EACrE,EAAE,WAAW;AACb,QAAM,KAAK,OAAO,KAAK,MAAM,QAAQ,GAAc,MAAM;AACzD,SAAO,IAAI,iBAAiB,IAAI,WAAW,EAAE,WAAW;AACxD,SAAO;AACT;AAEA,eAAsB,wBACpB,SACA,OACA,eAAe,OACE;AACjB,SAAO,aAAa,SAAS,OAAO,qBAAqB,EAAE,aAAa,GAAG,CAAC,MAAM,SAAS,CAAC;AAC9F;AAEA,eAAsB,wBACpB,SACA,OACA,eAAe,OACE;AAIjB,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,MACE;AAAA,MACA,OAAO;AAAA,QACL;AAAA,UACE;AAAA,UACA,UAAU;AAAA,UACV,MAAM,gBAAgB,KAAK,IAAI,CAAC;AAAA,UAChC,cAAc;AAAA,UACd,gBAAgB;AAAA,QAClB;AAAA,MACF;AAAA,IACF;AAAA,IACA,CAAC,MAAM,SAAS;AAAA,EAClB;AACF;AAEA,eAAsB,uBACpB,SACA,OACA,SACA,MACiB;AACjB,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,MACE;AAAA,MACA,cAAc;AAAA,MACd,UAAU;AAAA,MACV,MAAM,WAAW,KAAK,IAAI,CAAC;AAAA,MAC3B,cAAc;AAAA,MACd,gBAAgB;AAAA,MAChB,GAAI,QAAQ,CAAC;AAAA,IACf;AAAA,IACA,CAAC,MAAM,QAAQ;AAAA,EACjB;AACF;AAQA,eAAsB,sBACpB,SACA,OACA,SACA,OACiB;AACjB,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA,EAAE,SAAS,MAAM;AAAA,IACjB,CAAC,MAAM,YAAY;AAAA,EACrB;AACF;AAcA,eAAsB,qBACpB,SACA,OACkB;AAClB,QAAM,WAAW,MAAM,WAAW,SAAS,QAAQ,qBAAqB;AAAA,IACtE;AAAA;AAAA,IAEA,MAAM;AAAA,MACJ,cAAc;AAAA,MACd,OAAO;AAAA,QACL;AAAA,UACE,cAAc;AAAA,UACd,UAAU;AAAA,UACV,MAAM;AAAA,UACN,cAAc;AAAA,UACd,gBAAgB;AAAA,QAClB;AAAA,MACF;AAAA,IACF;AAAA,EACF,CAAC;AACD,MAAI,SAAS,OAAO,MAAM,IAAK,QAAO;AACtC,QAAM,WAAW,MAAM,SAAS,KAAK;AACrC;AAAA,IACE,SAAS,GAAG;AAAA,IACZ,0CAA0C,SAAS,OAAO,CAAC,KAAK,SAAS,MAAM,GAAG,GAAG,CAAC;AAAA,EACxF,EAAE,WAAW;AACb,QAAM,KAAK,OAAO,KAAK,MAAM,QAAQ,GAAc,CAAC,MAAM,SAAS,CAAC;AACpE,MAAI,IAAI;AACN,QAAI;AACF,YAAM,WAAW,SAAS,UAAU,qBAAqB,EAAE,OAAO,MAAM,EAAE,GAAG,EAAE,CAAC;AAAA,IAClF,QAAQ;AAAA,IAER;AAAA,EACF;AACA,SAAO;AACT;AAEA,eAAsB,0BACpB,SACA,OACA,MACA,IACe;AACf,MAAI,CAAC,SAAS,CAAC,GAAI;AACnB,MAAI;AACF,UAAM,WAAW,SAAS,UAAU,GAAG,IAAI,OAAO,mBAAmB,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC;AAAA,EACvF,QAAQ;AACN;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/attachments/di.js

@@ -2,12 +2,30 @@ import { asFunction, asValue } from "awilix";
 import { StorageDriverFactory } from "./lib/drivers/driverFactory.js";
 import { createAttachmentQuotaService } from "./lib/quota-service.js";
 import { scheduleAttachmentQuotaRecovery } from "./lib/quota-recovery-queue.js";
+import { AttachmentTargetAccessService } from "./lib/target-access-service.js";
+import { ScopedAttachmentUploadService } from "./lib/scoped-upload-service.js";
 function register(container) {
   container.register({
     attachmentQuotaRecoveryScheduler: asValue(scheduleAttachmentQuotaRecovery),
     attachmentQuotaService: asFunction(
       ({ em }) => createAttachmentQuotaService(em)
     ).scoped().proxy(),
+    attachmentTargetAccessService: asFunction(
+      ({ em }) => new AttachmentTargetAccessService(em)
+    ).scoped().proxy(),
+    attachmentScopedUploadService: asFunction(({
+      em,
+      dataEngine,
+      storageDriverFactory,
+      attachmentQuotaService,
+      attachmentQuotaRecoveryScheduler
+    }) => new ScopedAttachmentUploadService({
+      em,
+      dataEngine,
+      storageDriverFactory,
+      attachmentQuotaService,
+      attachmentQuotaRecoveryScheduler
+    })).scoped().proxy(),
     storageDriverFactory: asFunction(
       ({ em }) => new StorageDriverFactory(em)
     ).singleton().proxy()

package/dist/modules/attachments/di.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../src/modules/attachments/di.ts"],
-  "sourcesContent": ["import { asFunction, asValue } from 'awilix'\nimport type { AppContainer } from '@open-mercato/shared/lib/di/container'\nimport { StorageDriverFactory } from './lib/drivers/driverFactory'\nimport { createAttachmentQuotaService } from './lib/quota-service'\nimport { scheduleAttachmentQuotaRecovery } from './lib/quota-recovery-queue'\n\nexport function register(container: AppContainer) {\n  container.register({\n    attachmentQuotaRecoveryScheduler: asValue(scheduleAttachmentQuotaRecovery),\n    attachmentQuotaService: asFunction(({ em }: { em: ConstructorParameters<typeof StorageDriverFactory>[0] }) =>\n      createAttachmentQuotaService(em),\n    )\n      .scoped()\n      .proxy(),\n    storageDriverFactory: asFunction(({ em }: { em: ConstructorParameters<typeof StorageDriverFactory>[0] }) =>\n      new StorageDriverFactory(em),\n    )\n      .singleton()\n      .proxy(),\n  })\n}\n"],
-  "mappings": "AAAA,SAAS,YAAY,eAAe;AAEpC,SAAS,4BAA4B;AACrC,SAAS,oCAAoC;AAC7C,SAAS,uCAAuC;AAEzC,SAAS,SAAS,WAAyB;AAChD,YAAU,SAAS;AAAA,IACjB,kCAAkC,QAAQ,+BAA+B;AAAA,IACzE,wBAAwB;AAAA,MAAW,CAAC,EAAE,GAAG,MACvC,6BAA6B,EAAE;AAAA,IACjC,EACG,OAAO,EACP,MAAM;AAAA,IACT,sBAAsB;AAAA,MAAW,CAAC,EAAE,GAAG,MACrC,IAAI,qBAAqB,EAAE;AAAA,IAC7B,EACG,UAAU,EACV,MAAM;AAAA,EACX,CAAC;AACH;",
+  "sourcesContent": ["import { asFunction, asValue } from 'awilix'\nimport type { AppContainer } from '@open-mercato/shared/lib/di/container'\nimport type { DataEngine } from '@open-mercato/shared/lib/data/engine'\nimport { StorageDriverFactory } from './lib/drivers/driverFactory'\nimport { createAttachmentQuotaService, type AttachmentQuotaService } from './lib/quota-service'\nimport { scheduleAttachmentQuotaRecovery } from './lib/quota-recovery-queue'\nimport { AttachmentTargetAccessService } from './lib/target-access-service'\nimport { ScopedAttachmentUploadService } from './lib/scoped-upload-service'\n\nexport function register(container: AppContainer) {\n  container.register({\n    attachmentQuotaRecoveryScheduler: asValue(scheduleAttachmentQuotaRecovery),\n    attachmentQuotaService: asFunction(({ em }: { em: ConstructorParameters<typeof StorageDriverFactory>[0] }) =>\n      createAttachmentQuotaService(em),\n    )\n      .scoped()\n      .proxy(),\n    attachmentTargetAccessService: asFunction(({ em }: { em: ConstructorParameters<typeof StorageDriverFactory>[0] }) =>\n      new AttachmentTargetAccessService(em),\n    )\n      .scoped()\n      .proxy(),\n    attachmentScopedUploadService: asFunction(({\n      em,\n      dataEngine,\n      storageDriverFactory,\n      attachmentQuotaService,\n      attachmentQuotaRecoveryScheduler,\n    }: {\n      em: ConstructorParameters<typeof StorageDriverFactory>[0]\n      dataEngine: DataEngine\n      storageDriverFactory: StorageDriverFactory\n      attachmentQuotaService: AttachmentQuotaService\n      attachmentQuotaRecoveryScheduler: typeof scheduleAttachmentQuotaRecovery\n    }) => new ScopedAttachmentUploadService({\n      em,\n      dataEngine,\n      storageDriverFactory,\n      attachmentQuotaService,\n      attachmentQuotaRecoveryScheduler,\n    }))\n      .scoped()\n      .proxy(),\n    storageDriverFactory: asFunction(({ em }: { em: ConstructorParameters<typeof StorageDriverFactory>[0] }) =>\n      new StorageDriverFactory(em),\n    )\n      .singleton()\n      .proxy(),\n  })\n}\n"],
+  "mappings": "AAAA,SAAS,YAAY,eAAe;AAGpC,SAAS,4BAA4B;AACrC,SAAS,oCAAiE;AAC1E,SAAS,uCAAuC;AAChD,SAAS,qCAAqC;AAC9C,SAAS,qCAAqC;AAEvC,SAAS,SAAS,WAAyB;AAChD,YAAU,SAAS;AAAA,IACjB,kCAAkC,QAAQ,+BAA+B;AAAA,IACzE,wBAAwB;AAAA,MAAW,CAAC,EAAE,GAAG,MACvC,6BAA6B,EAAE;AAAA,IACjC,EACG,OAAO,EACP,MAAM;AAAA,IACT,+BAA+B;AAAA,MAAW,CAAC,EAAE,GAAG,MAC9C,IAAI,8BAA8B,EAAE;AAAA,IACtC,EACG,OAAO,EACP,MAAM;AAAA,IACT,+BAA+B,WAAW,CAAC;AAAA,MACzC;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,MAMM,IAAI,8BAA8B;AAAA,MACtC;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,CAAC,CAAC,EACC,OAAO,EACP,MAAM;AAAA,IACT,sBAAsB;AAAA,MAAW,CAAC,EAAE,GAAG,MACrC,IAAI,qBAAqB,EAAE;AAAA,IAC7B,EACG,UAAU,EACV,MAAM;AAAA,EACX,CAAC;AACH;",
   "names": []
 }

package/dist/modules/attachments/fields/attachment.js

@@ -3,10 +3,14 @@ import { jsx, jsxs } from "react/jsx-runtime";
 import * as React from "react";
 import { FieldRegistry } from "@open-mercato/ui/backend/fields/registry";
 import { apiCall } from "@open-mercato/ui/backend/utils/apiCall";
+import { flash } from "@open-mercato/ui/backend/FlashMessages";
+import { useConfirmDialog } from "@open-mercato/ui/backend/confirm-dialog";
+import { useGuardedMutation } from "@open-mercato/ui/backend/injection/useGuardedMutation";
 import { Button } from "@open-mercato/ui/primitives/button";
+import { IconButton } from "@open-mercato/ui/primitives/icon-button";
 import { Input } from "@open-mercato/ui/primitives/input";
 import { useT } from "@open-mercato/shared/lib/i18n/context";
-import { Upload } from "lucide-react";
+import { RefreshCw, Trash2, Upload } from "lucide-react";
 function humanSize(n) {
   if (!Number.isFinite(n)) return String(n);
   const units = ["B", "KB", "MB", "GB"];
@@ -29,15 +33,31 @@ const AttachmentInput = ({
   recordId,
   def,
   disabled,
-  onUploaded
+  allowDelete = false,
+  allowReplace = false,
+  onCountChange,
+  onUploaded,
+  renderItemMeta
 }) => {
   const t = useT();
+  const { confirm, ConfirmDialogElement } = useConfirmDialog();
+  const { runMutation, retryLastMutation } = useGuardedMutation({
+    contextId: `attachment-input:${entityId ?? "unknown"}:${recordId ?? "pending"}`,
+    blockedMessage: t("attachments.library.errors.saveBlocked", "Attachment change blocked by validation.")
+  });
   const [items, setItems] = React.useState([]);
   const [loading, setLoading] = React.useState(false);
   const [error, setError] = React.useState(null);
   const [uploading, setUploading] = React.useState(false);
+  const [mutatingId, setMutatingId] = React.useState(null);
   const fileInputRef = React.useRef(null);
+  const replacementInputRef = React.useRef(null);
+  const replacementTargetRef = React.useRef(null);
+  const onCountChangeRef = React.useRef(onCountChange);
   const accept = React.useMemo(() => buildAcceptAttribute(def), [def]);
+  React.useEffect(() => {
+    onCountChangeRef.current = onCountChange;
+  }, [onCountChange]);
   const load = React.useCallback(async () => {
     if (!entityId || !recordId) return;
     try {
@@ -52,7 +72,9 @@ const AttachmentInput = ({
         throw new Error(message);
       }
       const j = call.result ?? { items: [] };
-      setItems(Array.isArray(j.items) ? j.items : []);
+      const nextItems = Array.isArray(j.items) ? j.items : [];
+      setItems(nextItems);
+      onCountChangeRef.current?.(nextItems.length);
     } catch (error2) {
       setError(error2 instanceof Error ? error2.message : t("attachments.library.errors.load", "Failed to load attachments."));
     } finally {
@@ -62,13 +84,55 @@ const AttachmentInput = ({
   React.useEffect(() => {
     load();
   }, [load]);
-  const onUpload = async (files) => {
+  const mutationContext = React.useCallback((operation, resourceId) => ({
+    moduleId: "attachments",
+    entityId: "attachments.attachment",
+    operation,
+    formId: `attachment-input:${entityId ?? "unknown"}:${recordId ?? "pending"}`,
+    resourceKind: "attachments.attachment",
+    resourceId,
+    retryLastMutation
+  }), [entityId, recordId, retryLastMutation]);
+  const uploadFile = React.useCallback(async (file, replacementTarget) => {
+    if (!entityId || !recordId) return;
+    const fd = new FormData();
+    fd.set("entityId", entityId);
+    fd.set("recordId", recordId);
+    if (def?.key) fd.set("fieldKey", String(def.key));
+    fd.set("file", file);
+    if (replacementTarget) {
+      const inheritedTags = Array.isArray(replacementTarget.tags) ? replacementTarget.tags : [];
+      const inheritedAssignments = Array.isArray(replacementTarget.assignments) ? replacementTarget.assignments : [];
+      if (inheritedTags.length > 0) fd.set("tags", JSON.stringify(inheritedTags));
+      if (inheritedAssignments.length > 0) fd.set("assignments", JSON.stringify(inheritedAssignments));
+    }
+    const call = await apiCall(
+      "/api/attachments",
+      { method: "POST", body: fd },
+      { fallback: null }
+    );
+    if (!call.ok) {
+      throw new Error(call.result?.error || t("attachments.library.upload.failed", "Upload failed."));
+    }
+  }, [def?.key, entityId, recordId, t]);
+  const deleteFile = React.useCallback(async (attachment) => {
+    const call = await apiCall(
+      `/api/attachments?id=${encodeURIComponent(attachment.id)}`,
+      { method: "DELETE" },
+      { fallback: null }
+    );
+    if (!call.ok) {
+      throw new Error(call.result?.error || t("attachments.library.errors.delete", "Failed to delete attachment."));
+    }
+  }, [t]);
+  const onUpload = async (files, replacementTarget) => {
     if (!files || !entityId || !recordId) return;
     setError(null);
     setUploading(true);
+    if (replacementTarget) setMutatingId(replacementTarget.id);
     let uploadedCount = 0;
     try {
-      for (const file of Array.from(files)) {
+      for (const file of Array.from(files).slice(0, replacementTarget ? 1 : void 0)) {
         const ext = (file.name || "").split(".").pop()?.toLowerCase() || "";
         const acceptExtensions = Array.isArray(def?.acceptExtensions) ? def.acceptExtensions : [];
         if (acceptExtensions.length > 0) {
@@ -86,31 +150,81 @@ const AttachmentInput = ({
             continue;
           }
         }
-        const fd = new FormData();
-        fd.set("entityId", entityId);
-        fd.set("recordId", recordId);
-        if (def?.key) fd.set("fieldKey", String(def.key));
-        fd.set("file", file);
-        const call = await apiCall(
-          "/api/attachments",
-          { method: "POST", body: fd },
-          { fallback: null }
-        );
-        if (!call.ok) {
-          setError(call.result?.error || t("attachments.library.upload.failed", "Upload failed."));
+        try {
+          await runMutation({
+            operation: async () => {
+              await uploadFile(file, replacementTarget);
+              if (replacementTarget) await deleteFile(replacementTarget);
+            },
+            context: mutationContext(
+              replacementTarget ? "replace_attachment" : "upload_attachment",
+              replacementTarget?.id ?? recordId
+            ),
+            mutationPayload: {
+              entityId,
+              recordId,
+              attachmentId: replacementTarget?.id,
+              fileName: file.name,
+              fileSize: file.size
+            }
+          });
+        } catch (uploadError) {
+          setError(uploadError instanceof Error ? uploadError.message : t("attachments.library.upload.failed", "Upload failed."));
           break;
         }
         uploadedCount += 1;
       }
       await load();
-      if (uploadedCount > 0) onUploaded?.();
+      if (uploadedCount > 0) {
+        onUploaded?.();
+        if (replacementTarget) {
+          flash(t("attachments.library.messages.replaced", "Attachment replaced."), "success");
+        }
+      }
     } finally {
       setUploading(false);
+      setMutatingId(null);
       if (fileInputRef.current) {
         fileInputRef.current.value = "";
       }
+      if (replacementInputRef.current) {
+        replacementInputRef.current.value = "";
+      }
     }
   };
+  const requestDelete = React.useCallback(async (attachment) => {
+    if (disabled || mutatingId) return;
+    const confirmed = await confirm({
+      title: t("attachments.library.delete", "Delete attachment"),
+      text: t("attachments.library.confirm.delete", 'Delete attachment "{name}"? This action cannot be undone.', {
+        name: attachment.fileName
+      }),
+      confirmText: t("attachments.library.actions.delete", "Delete"),
+      cancelText: t("attachments.library.upload.cancel", "Cancel"),
+      variant: "destructive"
+    });
+    if (!confirmed) return;
+    setError(null);
+    setMutatingId(attachment.id);
+    try {
+      await runMutation({
+        operation: () => deleteFile(attachment),
+        context: mutationContext("delete_attachment", attachment.id),
+        mutationPayload: { entityId, recordId, attachmentId: attachment.id }
+      });
+      flash(t("attachments.library.messages.deleted", "Attachment removed."), "success");
+      await load();
+    } catch (deleteError) {
+      setError(deleteError instanceof Error ? deleteError.message : t("attachments.library.errors.delete", "Failed to delete attachment."));
+    } finally {
+      setMutatingId(null);
+    }
+  }, [confirm, deleteFile, disabled, entityId, load, mutatingId, mutationContext, recordId, runMutation, t]);
+  const requestReplace = React.useCallback((attachment) => {
+    if (disabled || uploading || mutatingId) return;
+    replacementTargetRef.current = attachment;
+    replacementInputRef.current?.click();
+  }, [disabled, mutatingId, uploading]);
   return /* @__PURE__ */ jsxs("div", { className: "space-y-3", children: [
     !entityId || !recordId ? /* @__PURE__ */ jsx("div", { className: "rounded-md border border-dashed border-border/70 px-3 py-4 text-sm text-muted-foreground", children: t("attachments.library.upload.saveFirst", "Save the record before uploading files.") }) : /* @__PURE__ */ jsxs("div", { className: "rounded-md border border-dashed border-border/70 bg-muted/30 px-4 py-4", children: [
       /* @__PURE__ */ jsx("div", { className: "flex flex-wrap items-center gap-3", children: /* @__PURE__ */ jsxs(
@@ -140,20 +254,66 @@ const AttachmentInput = ({
             void onUpload(event.target.files);
           }
         }
+      ),
+      /* @__PURE__ */ jsx(
+        "input",
+        {
+          ref: replacementInputRef,
+          type: "file",
+          className: "hidden",
+          accept,
+          disabled: disabled || uploading,
+          "aria-label": t("attachments.library.actions.chooseReplacement", "Choose replacement file"),
+          onChange: (event) => {
+            const target = replacementTargetRef.current;
+            replacementTargetRef.current = null;
+            if (target) void onUpload(event.target.files, target);
+          }
+        }
       )
     ] }),
     error ? /* @__PURE__ */ jsx("div", { className: "text-xs text-status-error-text", children: error }) : null,
     /* @__PURE__ */ jsxs("div", { className: "space-y-1", children: [
       loading ? /* @__PURE__ */ jsx("div", { className: "text-xs text-muted-foreground", children: t("attachments.library.loading", "Loading attachments\u2026") }) : null,
-      items.map((it) => /* @__PURE__ */ jsxs("div", { className: "text-sm", children: [
-        /* @__PURE__ */ jsx("a", { className: "underline", href: it.url, target: "_blank", rel: "noreferrer", children: it.fileName }),
-        /* @__PURE__ */ jsxs("span", { className: "text-xs text-muted-foreground", children: [
-          " \u2022 ",
-          humanSize(it.fileSize)
-        ] })
-      ] }, it.id)),
+      items.map((item) => /* @__PURE__ */ jsxs("div", { className: "flex items-center gap-2 rounded-md border border-border px-3 py-2 text-sm", children: [
+        /* @__PURE__ */ jsxs("div", { className: "min-w-0 flex-1", children: [
+          /* @__PURE__ */ jsx("a", { className: "block truncate underline", href: item.url, target: "_blank", rel: "noreferrer", children: item.fileName }),
+          /* @__PURE__ */ jsxs("span", { className: "flex flex-wrap items-center gap-2 text-xs text-muted-foreground", children: [
+            /* @__PURE__ */ jsx("span", { children: humanSize(item.fileSize) }),
+            renderItemMeta?.(item)
+          ] })
+        ] }),
+        allowReplace ? /* @__PURE__ */ jsxs(
+          Button,
+          {
+            type: "button",
+            variant: "ghost",
+            size: "sm",
+            onClick: () => requestReplace(item),
+            disabled: disabled || uploading || mutatingId !== null,
+            children: [
+              /* @__PURE__ */ jsx(RefreshCw, { className: "size-4", "aria-hidden": "true" }),
+              t("attachments.library.actions.replace", "Replace")
+            ]
+          }
+        ) : null,
+        allowDelete ? /* @__PURE__ */ jsx(
+          IconButton,
+          {
+            type: "button",
+            variant: "ghost",
+            "aria-label": t("attachments.library.actions.deleteNamed", "Delete {name}", { name: item.fileName }),
+            onClick: () => {
+              void requestDelete(item);
+            },
+            disabled: disabled || uploading || mutatingId !== null,
+            children: /* @__PURE__ */ jsx(Trash2, { className: "size-4", "aria-hidden": "true" })
+          }
+        ) : null
+      ] }, item.id)),
       !loading && items.length === 0 ? /* @__PURE__ */ jsx("div", { className: "text-xs text-muted-foreground", children: t("attachments.library.table.empty", "No attachments found.") }) : null
-    ] })
+    ] }),
+    ConfirmDialogElement
   ] });
 };
 function AttachmentDefEditor({ def, onChange }) {

package/dist/modules/attachments/fields/attachment.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/attachments/fields/attachment.tsx"],
-  "sourcesContent": ["\"use client\"\nimport * as React from 'react'\nimport { FieldRegistry } from '@open-mercato/ui/backend/fields/registry'\nimport { apiCall } from '@open-mercato/ui/backend/utils/apiCall'\nimport type { CustomFieldDefDto } from '@open-mercato/ui/backend/utils/customFieldDefs'\nimport { Button } from '@open-mercato/ui/primitives/button'\nimport { Input } from '@open-mercato/ui/primitives/input'\nimport { useT } from '@open-mercato/shared/lib/i18n/context'\nimport { Upload } from 'lucide-react'\n\nfunction humanSize(n: number): string {\n  if (!Number.isFinite(n)) return String(n)\n  const units = ['B','KB','MB','GB']\n  let i = 0\n  let x = n\n  while (x >= 1024 && i < units.length - 1) { x /= 1024; i++ }\n  return `${x.toFixed(i === 0 ? 0 : 1)} ${units[i]}`\n}\n\ntype AttachmentsResponse = {\n  items?: Array<{ id: string; url: string; fileName: string; fileSize: number }>\n  error?: string\n}\n\ntype AttachmentFieldDef = CustomFieldDefDto & {\n  configJson?: {\n    maxAttachmentSizeMb?: number\n    acceptExtensions?: string[]\n    partitionCode?: string\n  }\n}\n\ntype AttachmentDefEditorPatch = {\n  maxAttachmentSizeMb?: number\n  acceptExtensions?: string[]\n  partitionCode?: string\n}\n\nfunction buildAcceptAttribute(def?: AttachmentFieldDef): string | undefined {\n  if (!Array.isArray(def?.acceptExtensions) || def.acceptExtensions.length === 0) return undefined\n  const values = def.acceptExtensions\n    .map((entry) => String(entry ?? '').trim().replace(/^\\./, ''))\n    .filter((entry) => entry.length > 0)\n  if (values.length === 0) return undefined\n  return values.map((entry) => `.${entry}`).join(',')\n}\n\nexport const AttachmentInput = ({\n  entityId,\n  recordId,\n  def,\n  disabled,\n  onUploaded,\n}: {\n  entityId?: string\n  recordId?: string\n  def?: AttachmentFieldDef\n  disabled?: boolean\n  onUploaded?: () => void\n}) => {\n  const t = useT()\n  const [items, setItems] = React.useState<Array<{ id: string; url: string; fileName: string; fileSize: number }>>([])\n  const [loading, setLoading] = React.useState(false)\n  const [error, setError] = React.useState<string | null>(null)\n  const [uploading, setUploading] = React.useState(false)\n  const fileInputRef = React.useRef<HTMLInputElement | null>(null)\n  const accept = React.useMemo(() => buildAcceptAttribute(def), [def])\n\n  const load = React.useCallback(async () => {\n    if (!entityId || !recordId) return\n    try {\n      setLoading(true)\n      const call = await apiCall<AttachmentsResponse>(\n        `/api/attachments?entityId=${encodeURIComponent(entityId)}&recordId=${encodeURIComponent(recordId)}`,\n        undefined,\n        { fallback: { items: [] } },\n      )\n      if (!call.ok) {\n        const message = call.result?.error || t('attachments.library.errors.load', 'Failed to load attachments.')\n        throw new Error(message)\n      }\n      const j = call.result ?? { items: [] }\n      setItems(Array.isArray(j.items) ? j.items : [])\n    } catch (error: unknown) {\n      setError(error instanceof Error ? error.message : t('attachments.library.errors.load', 'Failed to load attachments.'))\n    } finally {\n      setLoading(false)\n    }\n  }, [entityId, recordId, t])\n\n  React.useEffect(() => { load() }, [load])\n\n  const onUpload = async (files: FileList | null) => {\n    if (!files || !entityId || !recordId) return\n    setError(null)\n    setUploading(true)\n    let uploadedCount = 0\n    try {\n      for (const file of Array.from(files)) {\n        const ext = (file.name || '').split('.').pop()?.toLowerCase() || ''\n        const acceptExtensions = Array.isArray(def?.acceptExtensions) ? def.acceptExtensions : []\n        if (acceptExtensions.length > 0) {\n          const allowed = new Set(acceptExtensions.map((entry) => String(entry).toLowerCase().replace(/^\\./, '')))\n          if (!allowed.has(ext)) { setError('File type not allowed'); continue }\n        }\n        const maxAttachmentSizeMb = typeof def?.maxAttachmentSizeMb === 'number' ? def.maxAttachmentSizeMb : undefined\n        if (typeof maxAttachmentSizeMb === 'number' && maxAttachmentSizeMb > 0) {\n          const maxBytes = Math.floor(maxAttachmentSizeMb * 1024 * 1024)\n          if (file.size > maxBytes) { setError(`File exceeds ${maxAttachmentSizeMb} MB limit`); continue }\n        }\n        const fd = new FormData()\n        fd.set('entityId', entityId)\n        fd.set('recordId', recordId)\n        if (def?.key) fd.set('fieldKey', String(def.key))\n        fd.set('file', file)\n        const call = await apiCall<{ error?: string }>(\n          '/api/attachments',\n          { method: 'POST', body: fd },\n          { fallback: null },\n        )\n        if (!call.ok) {\n          setError(call.result?.error || t('attachments.library.upload.failed', 'Upload failed.'))\n          break\n        }\n        uploadedCount += 1\n      }\n      await load()\n      if (uploadedCount > 0) onUploaded?.()\n    } finally {\n      setUploading(false)\n      if (fileInputRef.current) {\n        fileInputRef.current.value = ''\n      }\n    }\n  }\n\n  return (\n    <div className=\"space-y-3\">\n      {!entityId || !recordId ? (\n        <div className=\"rounded-md border border-dashed border-border/70 px-3 py-4 text-sm text-muted-foreground\">\n          {t('attachments.library.upload.saveFirst', 'Save the record before uploading files.')}\n        </div>\n      ) : (\n        <div className=\"rounded-md border border-dashed border-border/70 bg-muted/30 px-4 py-4\">\n          <div className=\"flex flex-wrap items-center gap-3\">\n            <Button\n              type=\"button\"\n              variant=\"outline\"\n              size=\"sm\"\n              onClick={() => fileInputRef.current?.click()}\n              disabled={disabled || uploading}\n            >\n              <Upload className=\"h-4 w-4\" />\n              {uploading\n                ? t('attachments.library.upload.submitting', 'Uploading\u2026')\n                : t('attachments.library.upload.choose', 'Choose files')}\n            </Button>\n          </div>\n          <input\n            ref={fileInputRef}\n            type=\"file\"\n            multiple\n            className=\"hidden\"\n            accept={accept}\n            disabled={disabled || uploading}\n            onChange={(event) => { void onUpload(event.target.files) }}\n          />\n        </div>\n      )}\n      {error ? <div className=\"text-xs text-status-error-text\">{error}</div> : null}\n      <div className=\"space-y-1\">\n        {loading ? <div className=\"text-xs text-muted-foreground\">{t('attachments.library.loading', 'Loading attachments\u2026')}</div> : null}\n        {items.map(it => (\n          <div key={it.id} className=\"text-sm\">\n            <a className=\"underline\" href={it.url} target=\"_blank\" rel=\"noreferrer\">{it.fileName}</a>\n            <span className=\"text-xs text-muted-foreground\"> \u2022 {humanSize(it.fileSize)}</span>\n          </div>\n        ))}\n        {!loading && items.length === 0 ? <div className=\"text-xs text-muted-foreground\">{t('attachments.library.table.empty', 'No attachments found.')}</div> : null}\n      </div>\n    </div>\n  )\n}\n\n// Register with field registry under kind 'attachment'\nfunction AttachmentDefEditor({ def, onChange }: { def: AttachmentFieldDef; onChange: (patch: AttachmentDefEditorPatch) => void }) {\n  const cfg = def?.configJson || {}\n  const [maxMb, setMaxMb] = React.useState<number | ''>(typeof cfg.maxAttachmentSizeMb === 'number' ? cfg.maxAttachmentSizeMb : '')\n  const [exts, setExts] = React.useState<string>((Array.isArray(cfg.acceptExtensions) ? cfg.acceptExtensions : []).join(', '))\n  const [partition, setPartition] = React.useState<string>(typeof cfg.partitionCode === 'string' ? cfg.partitionCode : '')\n  return (\n    <div className=\"grid grid-cols-1 gap-3 md:grid-cols-2\">\n      <div className=\"space-y-2\">\n        <label className=\"text-xs font-medium\">Max file size (MB)</label>\n        <Input\n          type=\"number\"\n          min={0}\n          placeholder=\"e.g., 10\"\n          value={maxMb}\n          onChange={(e) => setMaxMb(e.target.value === '' ? '' : Number(e.target.value))}\n          onBlur={() => onChange({ maxAttachmentSizeMb: maxMb === '' ? undefined : Number(maxMb) })}\n        />\n      </div>\n      <div className=\"space-y-2\">\n        <label className=\"text-xs font-medium\">Accepted extensions</label>\n        <Input\n          placeholder=\"e.g., pdf, jpg, png\"\n          value={exts}\n          onChange={(e) => setExts(e.target.value)}\n          onBlur={() => onChange({ acceptExtensions: exts.split(',').map((s) => s.trim()).filter(Boolean) })}\n        />\n        <div className=\"text-xs text-muted-foreground\">Leave blank to allow any.</div>\n      </div>\n      <div className=\"space-y-2\">\n        <label className=\"text-xs font-medium\">Partition code</label>\n        <Input\n          placeholder=\"e.g., productsMedia\"\n          value={partition}\n          onChange={(e) => setPartition(e.target.value)}\n          onBlur={() => onChange({ partitionCode: partition.trim() || undefined })}\n        />\n        <div className=\"text-xs text-muted-foreground\">\n          Configure partitions under Settings \u2192 Attachments. Leave blank for default.\n        </div>\n      </div>\n    </div>\n  )\n}\n\nFieldRegistry.register('attachment', {\n  input: (props) => <AttachmentInput entityId={props.entityId} recordId={props.recordId} def={props.def} disabled={props.disabled} />,\n  defEditor: (p) => <AttachmentDefEditor {...p} />,\n})\n\nexport {}\n"],
-  "mappings": ";AA2IQ,cAMI,YANJ;AA1IR,YAAY,WAAW;AACvB,SAAS,qBAAqB;AAC9B,SAAS,eAAe;AAExB,SAAS,cAAc;AACvB,SAAS,aAAa;AACtB,SAAS,YAAY;AACrB,SAAS,cAAc;AAEvB,SAAS,UAAU,GAAmB;AACpC,MAAI,CAAC,OAAO,SAAS,CAAC,EAAG,QAAO,OAAO,CAAC;AACxC,QAAM,QAAQ,CAAC,KAAI,MAAK,MAAK,IAAI;AACjC,MAAI,IAAI;AACR,MAAI,IAAI;AACR,SAAO,KAAK,QAAQ,IAAI,MAAM,SAAS,GAAG;AAAE,SAAK;AAAM;AAAA,EAAI;AAC3D,SAAO,GAAG,EAAE,QAAQ,MAAM,IAAI,IAAI,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC;AAClD;AAqBA,SAAS,qBAAqB,KAA8C;AAC1E,MAAI,CAAC,MAAM,QAAQ,KAAK,gBAAgB,KAAK,IAAI,iBAAiB,WAAW,EAAG,QAAO;AACvF,QAAM,SAAS,IAAI,iBAChB,IAAI,CAAC,UAAU,OAAO,SAAS,EAAE,EAAE,KAAK,EAAE,QAAQ,OAAO,EAAE,CAAC,EAC5D,OAAO,CAAC,UAAU,MAAM,SAAS,CAAC;AACrC,MAAI,OAAO,WAAW,EAAG,QAAO;AAChC,SAAO,OAAO,IAAI,CAAC,UAAU,IAAI,KAAK,EAAE,EAAE,KAAK,GAAG;AACpD;AAEO,MAAM,kBAAkB,CAAC;AAAA,EAC9B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,MAMM;AACJ,QAAM,IAAI,KAAK;AACf,QAAM,CAAC,OAAO,QAAQ,IAAI,MAAM,SAAiF,CAAC,CAAC;AACnH,QAAM,CAAC,SAAS,UAAU,IAAI,MAAM,SAAS,KAAK;AAClD,QAAM,CAAC,OAAO,QAAQ,IAAI,MAAM,SAAwB,IAAI;AAC5D,QAAM,CAAC,WAAW,YAAY,IAAI,MAAM,SAAS,KAAK;AACtD,QAAM,eAAe,MAAM,OAAgC,IAAI;AAC/D,QAAM,SAAS,MAAM,QAAQ,MAAM,qBAAqB,GAAG,GAAG,CAAC,GAAG,CAAC;AAEnE,QAAM,OAAO,MAAM,YAAY,YAAY;AACzC,QAAI,CAAC,YAAY,CAAC,SAAU;AAC5B,QAAI;AACF,iBAAW,IAAI;AACf,YAAM,OAAO,MAAM;AAAA,QACjB,6BAA6B,mBAAmB,QAAQ,CAAC,aAAa,mBAAmB,QAAQ,CAAC;AAAA,QAClG;AAAA,QACA,EAAE,UAAU,EAAE,OAAO,CAAC,EAAE,EAAE;AAAA,MAC5B;AACA,UAAI,CAAC,KAAK,IAAI;AACZ,cAAM,UAAU,KAAK,QAAQ,SAAS,EAAE,mCAAmC,6BAA6B;AACxG,cAAM,IAAI,MAAM,OAAO;AAAA,MACzB;AACA,YAAM,IAAI,KAAK,UAAU,EAAE,OAAO,CAAC,EAAE;AACrC,eAAS,MAAM,QAAQ,EAAE,KAAK,IAAI,EAAE,QAAQ,CAAC,CAAC;AAAA,IAChD,SAASA,QAAgB;AACvB,eAASA,kBAAiB,QAAQA,OAAM,UAAU,EAAE,mCAAmC,6BAA6B,CAAC;AAAA,IACvH,UAAE;AACA,iBAAW,KAAK;AAAA,IAClB;AAAA,EACF,GAAG,CAAC,UAAU,UAAU,CAAC,CAAC;AAE1B,QAAM,UAAU,MAAM;AAAE,SAAK;AAAA,EAAE,GAAG,CAAC,IAAI,CAAC;AAExC,QAAM,WAAW,OAAO,UAA2B;AACjD,QAAI,CAAC,SAAS,CAAC,YAAY,CAAC,SAAU;AACtC,aAAS,IAAI;AACb,iBAAa,IAAI;AACjB,QAAI,gBAAgB;AACpB,QAAI;AACF,iBAAW,QAAQ,MAAM,KAAK,KAAK,GAAG;AACpC,cAAM,OAAO,KAAK,QAAQ,IAAI,MAAM,GAAG,EAAE,IAAI,GAAG,YAAY,KAAK;AACjE,cAAM,mBAAmB,MAAM,QAAQ,KAAK,gBAAgB,IAAI,IAAI,mBAAmB,CAAC;AACxF,YAAI,iBAAiB,SAAS,GAAG;AAC/B,gBAAM,UAAU,IAAI,IAAI,iBAAiB,IAAI,CAAC,UAAU,OAAO,KAAK,EAAE,YAAY,EAAE,QAAQ,OAAO,EAAE,CAAC,CAAC;AACvG,cAAI,CAAC,QAAQ,IAAI,GAAG,GAAG;AAAE,qBAAS,uBAAuB;AAAG;AAAA,UAAS;AAAA,QACvE;AACA,cAAM,sBAAsB,OAAO,KAAK,wBAAwB,WAAW,IAAI,sBAAsB;AACrG,YAAI,OAAO,wBAAwB,YAAY,sBAAsB,GAAG;AACtE,gBAAM,WAAW,KAAK,MAAM,sBAAsB,OAAO,IAAI;AAC7D,cAAI,KAAK,OAAO,UAAU;AAAE,qBAAS,gBAAgB,mBAAmB,WAAW;AAAG;AAAA,UAAS;AAAA,QACjG;AACA,cAAM,KAAK,IAAI,SAAS;AACxB,WAAG,IAAI,YAAY,QAAQ;AAC3B,WAAG,IAAI,YAAY,QAAQ;AAC3B,YAAI,KAAK,IAAK,IAAG,IAAI,YAAY,OAAO,IAAI,GAAG,CAAC;AAChD,WAAG,IAAI,QAAQ,IAAI;AACnB,cAAM,OAAO,MAAM;AAAA,UACjB;AAAA,UACA,EAAE,QAAQ,QAAQ,MAAM,GAAG;AAAA,UAC3B,EAAE,UAAU,KAAK;AAAA,QACnB;AACA,YAAI,CAAC,KAAK,IAAI;AACZ,mBAAS,KAAK,QAAQ,SAAS,EAAE,qCAAqC,gBAAgB,CAAC;AACvF;AAAA,QACF;AACA,yBAAiB;AAAA,MACnB;AACA,YAAM,KAAK;AACX,UAAI,gBAAgB,EAAG,cAAa;AAAA,IACtC,UAAE;AACA,mBAAa,KAAK;AAClB,UAAI,aAAa,SAAS;AACxB,qBAAa,QAAQ,QAAQ;AAAA,MAC/B;AAAA,IACF;AAAA,EACF;AAEA,SACE,qBAAC,SAAI,WAAU,aACZ;AAAA,KAAC,YAAY,CAAC,WACb,oBAAC,SAAI,WAAU,4FACZ,YAAE,wCAAwC,yCAAyC,GACtF,IAEA,qBAAC,SAAI,WAAU,0EACb;AAAA,0BAAC,SAAI,WAAU,qCACb;AAAA,QAAC;AAAA;AAAA,UACC,MAAK;AAAA,UACL,SAAQ;AAAA,UACR,MAAK;AAAA,UACL,SAAS,MAAM,aAAa,SAAS,MAAM;AAAA,UAC3C,UAAU,YAAY;AAAA,UAEtB;AAAA,gCAAC,UAAO,WAAU,WAAU;AAAA,YAC3B,YACG,EAAE,yCAAyC,iBAAY,IACvD,EAAE,qCAAqC,cAAc;AAAA;AAAA;AAAA,MAC3D,GACF;AAAA,MACA;AAAA,QAAC;AAAA;AAAA,UACC,KAAK;AAAA,UACL,MAAK;AAAA,UACL,UAAQ;AAAA,UACR,WAAU;AAAA,UACV;AAAA,UACA,UAAU,YAAY;AAAA,UACtB,UAAU,CAAC,UAAU;AAAE,iBAAK,SAAS,MAAM,OAAO,KAAK;AAAA,UAAE;AAAA;AAAA,MAC3D;AAAA,OACF;AAAA,IAED,QAAQ,oBAAC,SAAI,WAAU,kCAAkC,iBAAM,IAAS;AAAA,IACzE,qBAAC,SAAI,WAAU,aACZ;AAAA,gBAAU,oBAAC,SAAI,WAAU,iCAAiC,YAAE,+BAA+B,2BAAsB,GAAE,IAAS;AAAA,MAC5H,MAAM,IAAI,QACT,qBAAC,SAAgB,WAAU,WACzB;AAAA,4BAAC,OAAE,WAAU,aAAY,MAAM,GAAG,KAAK,QAAO,UAAS,KAAI,cAAc,aAAG,UAAS;AAAA,QACrF,qBAAC,UAAK,WAAU,iCAAgC;AAAA;AAAA,UAAI,UAAU,GAAG,QAAQ;AAAA,WAAE;AAAA,WAFnE,GAAG,EAGb,CACD;AAAA,MACA,CAAC,WAAW,MAAM,WAAW,IAAI,oBAAC,SAAI,WAAU,iCAAiC,YAAE,mCAAmC,uBAAuB,GAAE,IAAS;AAAA,OAC3J;AAAA,KACF;AAEJ;AAGA,SAAS,oBAAoB,EAAE,KAAK,SAAS,GAAqF;AAChI,QAAM,MAAM,KAAK,cAAc,CAAC;AAChC,QAAM,CAAC,OAAO,QAAQ,IAAI,MAAM,SAAsB,OAAO,IAAI,wBAAwB,WAAW,IAAI,sBAAsB,EAAE;AAChI,QAAM,CAAC,MAAM,OAAO,IAAI,MAAM,UAAkB,MAAM,QAAQ,IAAI,gBAAgB,IAAI,IAAI,mBAAmB,CAAC,GAAG,KAAK,IAAI,CAAC;AAC3H,QAAM,CAAC,WAAW,YAAY,IAAI,MAAM,SAAiB,OAAO,IAAI,kBAAkB,WAAW,IAAI,gBAAgB,EAAE;AACvH,SACE,qBAAC,SAAI,WAAU,yCACb;AAAA,yBAAC,SAAI,WAAU,aACb;AAAA,0BAAC,WAAM,WAAU,uBAAsB,gCAAkB;AAAA,MACzD;AAAA,QAAC;AAAA;AAAA,UACC,MAAK;AAAA,UACL,KAAK;AAAA,UACL,aAAY;AAAA,UACZ,OAAO;AAAA,UACP,UAAU,CAAC,MAAM,SAAS,EAAE,OAAO,UAAU,KAAK,KAAK,OAAO,EAAE,OAAO,KAAK,CAAC;AAAA,UAC7E,QAAQ,MAAM,SAAS,EAAE,qBAAqB,UAAU,KAAK,SAAY,OAAO,KAAK,EAAE,CAAC;AAAA;AAAA,MAC1F;AAAA,OACF;AAAA,IACA,qBAAC,SAAI,WAAU,aACb;AAAA,0BAAC,WAAM,WAAU,uBAAsB,iCAAmB;AAAA,MAC1D;AAAA,QAAC;AAAA;AAAA,UACC,aAAY;AAAA,UACZ,OAAO;AAAA,UACP,UAAU,CAAC,MAAM,QAAQ,EAAE,OAAO,KAAK;AAAA,UACvC,QAAQ,MAAM,SAAS,EAAE,kBAAkB,KAAK,MAAM,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,OAAO,EAAE,CAAC;AAAA;AAAA,MACnG;AAAA,MACA,oBAAC,SAAI,WAAU,iCAAgC,uCAAyB;AAAA,OAC1E;AAAA,IACA,qBAAC,SAAI,WAAU,aACb;AAAA,0BAAC,WAAM,WAAU,uBAAsB,4BAAc;AAAA,MACrD;AAAA,QAAC;AAAA;AAAA,UACC,aAAY;AAAA,UACZ,OAAO;AAAA,UACP,UAAU,CAAC,MAAM,aAAa,EAAE,OAAO,KAAK;AAAA,UAC5C,QAAQ,MAAM,SAAS,EAAE,eAAe,UAAU,KAAK,KAAK,OAAU,CAAC;AAAA;AAAA,MACzE;AAAA,MACA,oBAAC,SAAI,WAAU,iCAAgC,8FAE/C;AAAA,OACF;AAAA,KACF;AAEJ;AAEA,cAAc,SAAS,cAAc;AAAA,EACnC,OAAO,CAAC,UAAU,oBAAC,mBAAgB,UAAU,MAAM,UAAU,UAAU,MAAM,UAAU,KAAK,MAAM,KAAK,UAAU,MAAM,UAAU;AAAA,EACjI,WAAW,CAAC,MAAM,oBAAC,uBAAqB,GAAG,GAAG;AAChD,CAAC;",
+  "sourcesContent": ["\"use client\"\nimport * as React from 'react'\nimport { FieldRegistry } from '@open-mercato/ui/backend/fields/registry'\nimport { apiCall } from '@open-mercato/ui/backend/utils/apiCall'\nimport { flash } from '@open-mercato/ui/backend/FlashMessages'\nimport { useConfirmDialog } from '@open-mercato/ui/backend/confirm-dialog'\nimport { useGuardedMutation } from '@open-mercato/ui/backend/injection/useGuardedMutation'\nimport type { CustomFieldDefDto } from '@open-mercato/ui/backend/utils/customFieldDefs'\nimport { Button } from '@open-mercato/ui/primitives/button'\nimport { IconButton } from '@open-mercato/ui/primitives/icon-button'\nimport { Input } from '@open-mercato/ui/primitives/input'\nimport { useT } from '@open-mercato/shared/lib/i18n/context'\nimport { RefreshCw, Trash2, Upload } from 'lucide-react'\n\nfunction humanSize(n: number): string {\n  if (!Number.isFinite(n)) return String(n)\n  const units = ['B','KB','MB','GB']\n  let i = 0\n  let x = n\n  while (x >= 1024 && i < units.length - 1) { x /= 1024; i++ }\n  return `${x.toFixed(i === 0 ? 0 : 1)} ${units[i]}`\n}\n\ntype AttachmentAssignmentItem = {\n  type: string\n  id: string\n  href?: string | null\n  label?: string | null\n}\n\ntype AttachmentsResponse = {\n  items?: Array<{\n    id: string\n    url: string\n    fileName: string\n    fileSize: number\n    tags?: string[]\n    assignments?: AttachmentAssignmentItem[]\n  }>\n  error?: string\n}\n\nexport type AttachmentInputItem = NonNullable<AttachmentsResponse['items']>[number]\n\ntype AttachmentItem = AttachmentInputItem\n\ntype AttachmentFieldDef = CustomFieldDefDto & {\n  configJson?: {\n    maxAttachmentSizeMb?: number\n    acceptExtensions?: string[]\n    partitionCode?: string\n  }\n}\n\ntype AttachmentDefEditorPatch = {\n  maxAttachmentSizeMb?: number\n  acceptExtensions?: string[]\n  partitionCode?: string\n}\n\nfunction buildAcceptAttribute(def?: AttachmentFieldDef): string | undefined {\n  if (!Array.isArray(def?.acceptExtensions) || def.acceptExtensions.length === 0) return undefined\n  const values = def.acceptExtensions\n    .map((entry) => String(entry ?? '').trim().replace(/^\\./, ''))\n    .filter((entry) => entry.length > 0)\n  if (values.length === 0) return undefined\n  return values.map((entry) => `.${entry}`).join(',')\n}\n\nexport const AttachmentInput = ({\n  entityId,\n  recordId,\n  def,\n  disabled,\n  allowDelete = false,\n  allowReplace = false,\n  onCountChange,\n  onUploaded,\n  renderItemMeta,\n}: {\n  entityId?: string\n  recordId?: string\n  def?: AttachmentFieldDef\n  disabled?: boolean\n  allowDelete?: boolean\n  allowReplace?: boolean\n  // Optional: notified with the current attachment count after each load so a host page can keep\n  // a derived badge (e.g. a tab count) in sync without a full reload. Additive/backward-compatible.\n  onCountChange?: (count: number) => void\n  onUploaded?: () => void\n  // Optional: host-rendered metadata (e.g. a visibility badge derived from tags) shown next to\n  // each attachment's name. Additive/backward-compatible.\n  renderItemMeta?: (item: AttachmentInputItem) => React.ReactNode\n}) => {\n  const t = useT()\n  const { confirm, ConfirmDialogElement } = useConfirmDialog()\n  const { runMutation, retryLastMutation } = useGuardedMutation<Record<string, unknown>>({\n    contextId: `attachment-input:${entityId ?? 'unknown'}:${recordId ?? 'pending'}`,\n    blockedMessage: t('attachments.library.errors.saveBlocked', 'Attachment change blocked by validation.'),\n  })\n  const [items, setItems] = React.useState<AttachmentItem[]>([])\n  const [loading, setLoading] = React.useState(false)\n  const [error, setError] = React.useState<string | null>(null)\n  const [uploading, setUploading] = React.useState(false)\n  const [mutatingId, setMutatingId] = React.useState<string | null>(null)\n  const fileInputRef = React.useRef<HTMLInputElement | null>(null)\n  const replacementInputRef = React.useRef<HTMLInputElement | null>(null)\n  const replacementTargetRef = React.useRef<AttachmentItem | null>(null)\n  const onCountChangeRef = React.useRef(onCountChange)\n  const accept = React.useMemo(() => buildAcceptAttribute(def), [def])\n\n  React.useEffect(() => {\n    onCountChangeRef.current = onCountChange\n  }, [onCountChange])\n\n  const load = React.useCallback(async () => {\n    if (!entityId || !recordId) return\n    try {\n      setLoading(true)\n      const call = await apiCall<AttachmentsResponse>(\n        `/api/attachments?entityId=${encodeURIComponent(entityId)}&recordId=${encodeURIComponent(recordId)}`,\n        undefined,\n        { fallback: { items: [] } },\n      )\n      if (!call.ok) {\n        const message = call.result?.error || t('attachments.library.errors.load', 'Failed to load attachments.')\n        throw new Error(message)\n      }\n      const j = call.result ?? { items: [] }\n      const nextItems = Array.isArray(j.items) ? j.items : []\n      setItems(nextItems)\n      onCountChangeRef.current?.(nextItems.length)\n    } catch (error: unknown) {\n      setError(error instanceof Error ? error.message : t('attachments.library.errors.load', 'Failed to load attachments.'))\n    } finally {\n      setLoading(false)\n    }\n  }, [entityId, recordId, t])\n\n  React.useEffect(() => { load() }, [load])\n\n  const mutationContext = React.useCallback((operation: string, resourceId: string) => ({\n    moduleId: 'attachments',\n    entityId: 'attachments.attachment',\n    operation,\n    formId: `attachment-input:${entityId ?? 'unknown'}:${recordId ?? 'pending'}`,\n    resourceKind: 'attachments.attachment',\n    resourceId,\n    retryLastMutation,\n  }), [entityId, recordId, retryLastMutation])\n\n  const uploadFile = React.useCallback(async (file: File, replacementTarget?: AttachmentItem): Promise<void> => {\n    if (!entityId || !recordId) return\n    const fd = new FormData()\n    fd.set('entityId', entityId)\n    fd.set('recordId', recordId)\n    if (def?.key) fd.set('fieldKey', String(def.key))\n    fd.set('file', file)\n    if (replacementTarget) {\n      const inheritedTags = Array.isArray(replacementTarget.tags) ? replacementTarget.tags : []\n      const inheritedAssignments = Array.isArray(replacementTarget.assignments) ? replacementTarget.assignments : []\n      if (inheritedTags.length > 0) fd.set('tags', JSON.stringify(inheritedTags))\n      if (inheritedAssignments.length > 0) fd.set('assignments', JSON.stringify(inheritedAssignments))\n    }\n    const call = await apiCall<{ error?: string }>(\n      '/api/attachments',\n      { method: 'POST', body: fd },\n      { fallback: null },\n    )\n    if (!call.ok) {\n      throw new Error(call.result?.error || t('attachments.library.upload.failed', 'Upload failed.'))\n    }\n  }, [def?.key, entityId, recordId, t])\n\n  const deleteFile = React.useCallback(async (attachment: AttachmentItem): Promise<void> => {\n    const call = await apiCall<{ error?: string }>(\n      `/api/attachments?id=${encodeURIComponent(attachment.id)}`,\n      { method: 'DELETE' },\n      { fallback: null },\n    )\n    if (!call.ok) {\n      throw new Error(call.result?.error || t('attachments.library.errors.delete', 'Failed to delete attachment.'))\n    }\n  }, [t])\n\n  const onUpload = async (files: FileList | null, replacementTarget?: AttachmentItem) => {\n    if (!files || !entityId || !recordId) return\n    setError(null)\n    setUploading(true)\n    if (replacementTarget) setMutatingId(replacementTarget.id)\n    let uploadedCount = 0\n    try {\n      for (const file of Array.from(files).slice(0, replacementTarget ? 1 : undefined)) {\n        const ext = (file.name || '').split('.').pop()?.toLowerCase() || ''\n        const acceptExtensions = Array.isArray(def?.acceptExtensions) ? def.acceptExtensions : []\n        if (acceptExtensions.length > 0) {\n          const allowed = new Set(acceptExtensions.map((entry) => String(entry).toLowerCase().replace(/^\\./, '')))\n          if (!allowed.has(ext)) { setError('File type not allowed'); continue }\n        }\n        const maxAttachmentSizeMb = typeof def?.maxAttachmentSizeMb === 'number' ? def.maxAttachmentSizeMb : undefined\n        if (typeof maxAttachmentSizeMb === 'number' && maxAttachmentSizeMb > 0) {\n          const maxBytes = Math.floor(maxAttachmentSizeMb * 1024 * 1024)\n          if (file.size > maxBytes) { setError(`File exceeds ${maxAttachmentSizeMb} MB limit`); continue }\n        }\n        try {\n          await runMutation({\n            operation: async () => {\n              await uploadFile(file, replacementTarget)\n              if (replacementTarget) await deleteFile(replacementTarget)\n            },\n            context: mutationContext(\n              replacementTarget ? 'replace_attachment' : 'upload_attachment',\n              replacementTarget?.id ?? recordId,\n            ),\n            mutationPayload: {\n              entityId,\n              recordId,\n              attachmentId: replacementTarget?.id,\n              fileName: file.name,\n              fileSize: file.size,\n            },\n          })\n        } catch (uploadError) {\n          setError(uploadError instanceof Error\n            ? uploadError.message\n            : t('attachments.library.upload.failed', 'Upload failed.'))\n          break\n        }\n        uploadedCount += 1\n      }\n      await load()\n      if (uploadedCount > 0) {\n        onUploaded?.()\n        if (replacementTarget) {\n          flash(t('attachments.library.messages.replaced', 'Attachment replaced.'), 'success')\n        }\n      }\n    } finally {\n      setUploading(false)\n      setMutatingId(null)\n      if (fileInputRef.current) {\n        fileInputRef.current.value = ''\n      }\n      if (replacementInputRef.current) {\n        replacementInputRef.current.value = ''\n      }\n    }\n  }\n\n  const requestDelete = React.useCallback(async (attachment: AttachmentItem) => {\n    if (disabled || mutatingId) return\n    const confirmed = await confirm({\n      title: t('attachments.library.delete', 'Delete attachment'),\n      text: t('attachments.library.confirm.delete', 'Delete attachment \"{name}\"? This action cannot be undone.', {\n        name: attachment.fileName,\n      }),\n      confirmText: t('attachments.library.actions.delete', 'Delete'),\n      cancelText: t('attachments.library.upload.cancel', 'Cancel'),\n      variant: 'destructive',\n    })\n    if (!confirmed) return\n    setError(null)\n    setMutatingId(attachment.id)\n    try {\n      await runMutation({\n        operation: () => deleteFile(attachment),\n        context: mutationContext('delete_attachment', attachment.id),\n        mutationPayload: { entityId, recordId, attachmentId: attachment.id },\n      })\n      flash(t('attachments.library.messages.deleted', 'Attachment removed.'), 'success')\n      await load()\n    } catch (deleteError) {\n      setError(deleteError instanceof Error\n        ? deleteError.message\n        : t('attachments.library.errors.delete', 'Failed to delete attachment.'))\n    } finally {\n      setMutatingId(null)\n    }\n  }, [confirm, deleteFile, disabled, entityId, load, mutatingId, mutationContext, recordId, runMutation, t])\n\n  const requestReplace = React.useCallback((attachment: AttachmentItem) => {\n    if (disabled || uploading || mutatingId) return\n    replacementTargetRef.current = attachment\n    replacementInputRef.current?.click()\n  }, [disabled, mutatingId, uploading])\n\n  return (\n    <div className=\"space-y-3\">\n      {!entityId || !recordId ? (\n        <div className=\"rounded-md border border-dashed border-border/70 px-3 py-4 text-sm text-muted-foreground\">\n          {t('attachments.library.upload.saveFirst', 'Save the record before uploading files.')}\n        </div>\n      ) : (\n        <div className=\"rounded-md border border-dashed border-border/70 bg-muted/30 px-4 py-4\">\n          <div className=\"flex flex-wrap items-center gap-3\">\n            <Button\n              type=\"button\"\n              variant=\"outline\"\n              size=\"sm\"\n              onClick={() => fileInputRef.current?.click()}\n              disabled={disabled || uploading}\n            >\n              <Upload className=\"h-4 w-4\" />\n              {uploading\n                ? t('attachments.library.upload.submitting', 'Uploading\u2026')\n                : t('attachments.library.upload.choose', 'Choose files')}\n            </Button>\n          </div>\n          <input\n            ref={fileInputRef}\n            type=\"file\"\n            multiple\n            className=\"hidden\"\n            accept={accept}\n            disabled={disabled || uploading}\n            onChange={(event) => { void onUpload(event.target.files) }}\n          />\n          <input\n            ref={replacementInputRef}\n            type=\"file\"\n            className=\"hidden\"\n            accept={accept}\n            disabled={disabled || uploading}\n            aria-label={t('attachments.library.actions.chooseReplacement', 'Choose replacement file')}\n            onChange={(event) => {\n              const target = replacementTargetRef.current\n              replacementTargetRef.current = null\n              if (target) void onUpload(event.target.files, target)\n            }}\n          />\n        </div>\n      )}\n      {error ? <div className=\"text-xs text-status-error-text\">{error}</div> : null}\n      <div className=\"space-y-1\">\n        {loading ? <div className=\"text-xs text-muted-foreground\">{t('attachments.library.loading', 'Loading attachments\u2026')}</div> : null}\n        {items.map((item) => (\n          <div key={item.id} className=\"flex items-center gap-2 rounded-md border border-border px-3 py-2 text-sm\">\n            <div className=\"min-w-0 flex-1\">\n              <a className=\"block truncate underline\" href={item.url} target=\"_blank\" rel=\"noreferrer\">{item.fileName}</a>\n              <span className=\"flex flex-wrap items-center gap-2 text-xs text-muted-foreground\">\n                <span>{humanSize(item.fileSize)}</span>\n                {renderItemMeta?.(item)}\n              </span>\n            </div>\n            {allowReplace ? (\n              <Button\n                type=\"button\"\n                variant=\"ghost\"\n                size=\"sm\"\n                onClick={() => requestReplace(item)}\n                disabled={disabled || uploading || mutatingId !== null}\n              >\n                <RefreshCw className=\"size-4\" aria-hidden=\"true\" />\n                {t('attachments.library.actions.replace', 'Replace')}\n              </Button>\n            ) : null}\n            {allowDelete ? (\n              <IconButton\n                type=\"button\"\n                variant=\"ghost\"\n                aria-label={t('attachments.library.actions.deleteNamed', 'Delete {name}', { name: item.fileName })}\n                onClick={() => { void requestDelete(item) }}\n                disabled={disabled || uploading || mutatingId !== null}\n              >\n                <Trash2 className=\"size-4\" aria-hidden=\"true\" />\n              </IconButton>\n            ) : null}\n          </div>\n        ))}\n        {!loading && items.length === 0 ? <div className=\"text-xs text-muted-foreground\">{t('attachments.library.table.empty', 'No attachments found.')}</div> : null}\n      </div>\n      {ConfirmDialogElement}\n    </div>\n  )\n}\n\n// Register with field registry under kind 'attachment'\nfunction AttachmentDefEditor({ def, onChange }: { def: AttachmentFieldDef; onChange: (patch: AttachmentDefEditorPatch) => void }) {\n  const cfg = def?.configJson || {}\n  const [maxMb, setMaxMb] = React.useState<number | ''>(typeof cfg.maxAttachmentSizeMb === 'number' ? cfg.maxAttachmentSizeMb : '')\n  const [exts, setExts] = React.useState<string>((Array.isArray(cfg.acceptExtensions) ? cfg.acceptExtensions : []).join(', '))\n  const [partition, setPartition] = React.useState<string>(typeof cfg.partitionCode === 'string' ? cfg.partitionCode : '')\n  return (\n    <div className=\"grid grid-cols-1 gap-3 md:grid-cols-2\">\n      <div className=\"space-y-2\">\n        <label className=\"text-xs font-medium\">Max file size (MB)</label>\n        <Input\n          type=\"number\"\n          min={0}\n          placeholder=\"e.g., 10\"\n          value={maxMb}\n          onChange={(e) => setMaxMb(e.target.value === '' ? '' : Number(e.target.value))}\n          onBlur={() => onChange({ maxAttachmentSizeMb: maxMb === '' ? undefined : Number(maxMb) })}\n        />\n      </div>\n      <div className=\"space-y-2\">\n        <label className=\"text-xs font-medium\">Accepted extensions</label>\n        <Input\n          placeholder=\"e.g., pdf, jpg, png\"\n          value={exts}\n          onChange={(e) => setExts(e.target.value)}\n          onBlur={() => onChange({ acceptExtensions: exts.split(',').map((s) => s.trim()).filter(Boolean) })}\n        />\n        <div className=\"text-xs text-muted-foreground\">Leave blank to allow any.</div>\n      </div>\n      <div className=\"space-y-2\">\n        <label className=\"text-xs font-medium\">Partition code</label>\n        <Input\n          placeholder=\"e.g., productsMedia\"\n          value={partition}\n          onChange={(e) => setPartition(e.target.value)}\n          onBlur={() => onChange({ partitionCode: partition.trim() || undefined })}\n        />\n        <div className=\"text-xs text-muted-foreground\">\n          Configure partitions under Settings \u2192 Attachments. Leave blank for default.\n        </div>\n      </div>\n    </div>\n  )\n}\n\nFieldRegistry.register('attachment', {\n  input: (props) => <AttachmentInput entityId={props.entityId} recordId={props.recordId} def={props.def} disabled={props.disabled} />,\n  defEditor: (p) => <AttachmentDefEditor {...p} />,\n})\n\nexport {}\n"],
+  "mappings": ";AAiSQ,cAMI,YANJ;AAhSR,YAAY,WAAW;AACvB,SAAS,qBAAqB;AAC9B,SAAS,eAAe;AACxB,SAAS,aAAa;AACtB,SAAS,wBAAwB;AACjC,SAAS,0BAA0B;AAEnC,SAAS,cAAc;AACvB,SAAS,kBAAkB;AAC3B,SAAS,aAAa;AACtB,SAAS,YAAY;AACrB,SAAS,WAAW,QAAQ,cAAc;AAE1C,SAAS,UAAU,GAAmB;AACpC,MAAI,CAAC,OAAO,SAAS,CAAC,EAAG,QAAO,OAAO,CAAC;AACxC,QAAM,QAAQ,CAAC,KAAI,MAAK,MAAK,IAAI;AACjC,MAAI,IAAI;AACR,MAAI,IAAI;AACR,SAAO,KAAK,QAAQ,IAAI,MAAM,SAAS,GAAG;AAAE,SAAK;AAAM;AAAA,EAAI;AAC3D,SAAO,GAAG,EAAE,QAAQ,MAAM,IAAI,IAAI,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC;AAClD;AAuCA,SAAS,qBAAqB,KAA8C;AAC1E,MAAI,CAAC,MAAM,QAAQ,KAAK,gBAAgB,KAAK,IAAI,iBAAiB,WAAW,EAAG,QAAO;AACvF,QAAM,SAAS,IAAI,iBAChB,IAAI,CAAC,UAAU,OAAO,SAAS,EAAE,EAAE,KAAK,EAAE,QAAQ,OAAO,EAAE,CAAC,EAC5D,OAAO,CAAC,UAAU,MAAM,SAAS,CAAC;AACrC,MAAI,OAAO,WAAW,EAAG,QAAO;AAChC,SAAO,OAAO,IAAI,CAAC,UAAU,IAAI,KAAK,EAAE,EAAE,KAAK,GAAG;AACpD;AAEO,MAAM,kBAAkB,CAAC;AAAA,EAC9B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,cAAc;AAAA,EACd,eAAe;AAAA,EACf;AAAA,EACA;AAAA,EACA;AACF,MAcM;AACJ,QAAM,IAAI,KAAK;AACf,QAAM,EAAE,SAAS,qBAAqB,IAAI,iBAAiB;AAC3D,QAAM,EAAE,aAAa,kBAAkB,IAAI,mBAA4C;AAAA,IACrF,WAAW,oBAAoB,YAAY,SAAS,IAAI,YAAY,SAAS;AAAA,IAC7E,gBAAgB,EAAE,0CAA0C,0CAA0C;AAAA,EACxG,CAAC;AACD,QAAM,CAAC,OAAO,QAAQ,IAAI,MAAM,SAA2B,CAAC,CAAC;AAC7D,QAAM,CAAC,SAAS,UAAU,IAAI,MAAM,SAAS,KAAK;AAClD,QAAM,CAAC,OAAO,QAAQ,IAAI,MAAM,SAAwB,IAAI;AAC5D,QAAM,CAAC,WAAW,YAAY,IAAI,MAAM,SAAS,KAAK;AACtD,QAAM,CAAC,YAAY,aAAa,IAAI,MAAM,SAAwB,IAAI;AACtE,QAAM,eAAe,MAAM,OAAgC,IAAI;AAC/D,QAAM,sBAAsB,MAAM,OAAgC,IAAI;AACtE,QAAM,uBAAuB,MAAM,OAA8B,IAAI;AACrE,QAAM,mBAAmB,MAAM,OAAO,aAAa;AACnD,QAAM,SAAS,MAAM,QAAQ,MAAM,qBAAqB,GAAG,GAAG,CAAC,GAAG,CAAC;AAEnE,QAAM,UAAU,MAAM;AACpB,qBAAiB,UAAU;AAAA,EAC7B,GAAG,CAAC,aAAa,CAAC;AAElB,QAAM,OAAO,MAAM,YAAY,YAAY;AACzC,QAAI,CAAC,YAAY,CAAC,SAAU;AAC5B,QAAI;AACF,iBAAW,IAAI;AACf,YAAM,OAAO,MAAM;AAAA,QACjB,6BAA6B,mBAAmB,QAAQ,CAAC,aAAa,mBAAmB,QAAQ,CAAC;AAAA,QAClG;AAAA,QACA,EAAE,UAAU,EAAE,OAAO,CAAC,EAAE,EAAE;AAAA,MAC5B;AACA,UAAI,CAAC,KAAK,IAAI;AACZ,cAAM,UAAU,KAAK,QAAQ,SAAS,EAAE,mCAAmC,6BAA6B;AACxG,cAAM,IAAI,MAAM,OAAO;AAAA,MACzB;AACA,YAAM,IAAI,KAAK,UAAU,EAAE,OAAO,CAAC,EAAE;AACrC,YAAM,YAAY,MAAM,QAAQ,EAAE,KAAK,IAAI,EAAE,QAAQ,CAAC;AACtD,eAAS,SAAS;AAClB,uBAAiB,UAAU,UAAU,MAAM;AAAA,IAC7C,SAASA,QAAgB;AACvB,eAASA,kBAAiB,QAAQA,OAAM,UAAU,EAAE,mCAAmC,6BAA6B,CAAC;AAAA,IACvH,UAAE;AACA,iBAAW,KAAK;AAAA,IAClB;AAAA,EACF,GAAG,CAAC,UAAU,UAAU,CAAC,CAAC;AAE1B,QAAM,UAAU,MAAM;AAAE,SAAK;AAAA,EAAE,GAAG,CAAC,IAAI,CAAC;AAExC,QAAM,kBAAkB,MAAM,YAAY,CAAC,WAAmB,gBAAwB;AAAA,IACpF,UAAU;AAAA,IACV,UAAU;AAAA,IACV;AAAA,IACA,QAAQ,oBAAoB,YAAY,SAAS,IAAI,YAAY,SAAS;AAAA,IAC1E,cAAc;AAAA,IACd;AAAA,IACA;AAAA,EACF,IAAI,CAAC,UAAU,UAAU,iBAAiB,CAAC;AAE3C,QAAM,aAAa,MAAM,YAAY,OAAO,MAAY,sBAAsD;AAC5G,QAAI,CAAC,YAAY,CAAC,SAAU;AAC5B,UAAM,KAAK,IAAI,SAAS;AACxB,OAAG,IAAI,YAAY,QAAQ;AAC3B,OAAG,IAAI,YAAY,QAAQ;AAC3B,QAAI,KAAK,IAAK,IAAG,IAAI,YAAY,OAAO,IAAI,GAAG,CAAC;AAChD,OAAG,IAAI,QAAQ,IAAI;AACnB,QAAI,mBAAmB;AACrB,YAAM,gBAAgB,MAAM,QAAQ,kBAAkB,IAAI,IAAI,kBAAkB,OAAO,CAAC;AACxF,YAAM,uBAAuB,MAAM,QAAQ,kBAAkB,WAAW,IAAI,kBAAkB,cAAc,CAAC;AAC7G,UAAI,cAAc,SAAS,EAAG,IAAG,IAAI,QAAQ,KAAK,UAAU,aAAa,CAAC;AAC1E,UAAI,qBAAqB,SAAS,EAAG,IAAG,IAAI,eAAe,KAAK,UAAU,oBAAoB,CAAC;AAAA,IACjG;AACA,UAAM,OAAO,MAAM;AAAA,MACjB;AAAA,MACA,EAAE,QAAQ,QAAQ,MAAM,GAAG;AAAA,MAC3B,EAAE,UAAU,KAAK;AAAA,IACnB;AACA,QAAI,CAAC,KAAK,IAAI;AACZ,YAAM,IAAI,MAAM,KAAK,QAAQ,SAAS,EAAE,qCAAqC,gBAAgB,CAAC;AAAA,IAChG;AAAA,EACF,GAAG,CAAC,KAAK,KAAK,UAAU,UAAU,CAAC,CAAC;AAEpC,QAAM,aAAa,MAAM,YAAY,OAAO,eAA8C;AACxF,UAAM,OAAO,MAAM;AAAA,MACjB,uBAAuB,mBAAmB,WAAW,EAAE,CAAC;AAAA,MACxD,EAAE,QAAQ,SAAS;AAAA,MACnB,EAAE,UAAU,KAAK;AAAA,IACnB;AACA,QAAI,CAAC,KAAK,IAAI;AACZ,YAAM,IAAI,MAAM,KAAK,QAAQ,SAAS,EAAE,qCAAqC,8BAA8B,CAAC;AAAA,IAC9G;AAAA,EACF,GAAG,CAAC,CAAC,CAAC;AAEN,QAAM,WAAW,OAAO,OAAwB,sBAAuC;AACrF,QAAI,CAAC,SAAS,CAAC,YAAY,CAAC,SAAU;AACtC,aAAS,IAAI;AACb,iBAAa,IAAI;AACjB,QAAI,kBAAmB,eAAc,kBAAkB,EAAE;AACzD,QAAI,gBAAgB;AACpB,QAAI;AACF,iBAAW,QAAQ,MAAM,KAAK,KAAK,EAAE,MAAM,GAAG,oBAAoB,IAAI,MAAS,GAAG;AAChF,cAAM,OAAO,KAAK,QAAQ,IAAI,MAAM,GAAG,EAAE,IAAI,GAAG,YAAY,KAAK;AACjE,cAAM,mBAAmB,MAAM,QAAQ,KAAK,gBAAgB,IAAI,IAAI,mBAAmB,CAAC;AACxF,YAAI,iBAAiB,SAAS,GAAG;AAC/B,gBAAM,UAAU,IAAI,IAAI,iBAAiB,IAAI,CAAC,UAAU,OAAO,KAAK,EAAE,YAAY,EAAE,QAAQ,OAAO,EAAE,CAAC,CAAC;AACvG,cAAI,CAAC,QAAQ,IAAI,GAAG,GAAG;AAAE,qBAAS,uBAAuB;AAAG;AAAA,UAAS;AAAA,QACvE;AACA,cAAM,sBAAsB,OAAO,KAAK,wBAAwB,WAAW,IAAI,sBAAsB;AACrG,YAAI,OAAO,wBAAwB,YAAY,sBAAsB,GAAG;AACtE,gBAAM,WAAW,KAAK,MAAM,sBAAsB,OAAO,IAAI;AAC7D,cAAI,KAAK,OAAO,UAAU;AAAE,qBAAS,gBAAgB,mBAAmB,WAAW;AAAG;AAAA,UAAS;AAAA,QACjG;AACA,YAAI;AACF,gBAAM,YAAY;AAAA,YAChB,WAAW,YAAY;AACrB,oBAAM,WAAW,MAAM,iBAAiB;AACxC,kBAAI,kBAAmB,OAAM,WAAW,iBAAiB;AAAA,YAC3D;AAAA,YACA,SAAS;AAAA,cACP,oBAAoB,uBAAuB;AAAA,cAC3C,mBAAmB,MAAM;AAAA,YAC3B;AAAA,YACA,iBAAiB;AAAA,cACf;AAAA,cACA;AAAA,cACA,cAAc,mBAAmB;AAAA,cACjC,UAAU,KAAK;AAAA,cACf,UAAU,KAAK;AAAA,YACjB;AAAA,UACF,CAAC;AAAA,QACH,SAAS,aAAa;AACpB,mBAAS,uBAAuB,QAC5B,YAAY,UACZ,EAAE,qCAAqC,gBAAgB,CAAC;AAC5D;AAAA,QACF;AACA,yBAAiB;AAAA,MACnB;AACA,YAAM,KAAK;AACX,UAAI,gBAAgB,GAAG;AACrB,qBAAa;AACb,YAAI,mBAAmB;AACrB,gBAAM,EAAE,yCAAyC,sBAAsB,GAAG,SAAS;AAAA,QACrF;AAAA,MACF;AAAA,IACF,UAAE;AACA,mBAAa,KAAK;AAClB,oBAAc,IAAI;AAClB,UAAI,aAAa,SAAS;AACxB,qBAAa,QAAQ,QAAQ;AAAA,MAC/B;AACA,UAAI,oBAAoB,SAAS;AAC/B,4BAAoB,QAAQ,QAAQ;AAAA,MACtC;AAAA,IACF;AAAA,EACF;AAEA,QAAM,gBAAgB,MAAM,YAAY,OAAO,eAA+B;AAC5E,QAAI,YAAY,WAAY;AAC5B,UAAM,YAAY,MAAM,QAAQ;AAAA,MAC9B,OAAO,EAAE,8BAA8B,mBAAmB;AAAA,MAC1D,MAAM,EAAE,sCAAsC,6DAA6D;AAAA,QACzG,MAAM,WAAW;AAAA,MACnB,CAAC;AAAA,MACD,aAAa,EAAE,sCAAsC,QAAQ;AAAA,MAC7D,YAAY,EAAE,qCAAqC,QAAQ;AAAA,MAC3D,SAAS;AAAA,IACX,CAAC;AACD,QAAI,CAAC,UAAW;AAChB,aAAS,IAAI;AACb,kBAAc,WAAW,EAAE;AAC3B,QAAI;AACF,YAAM,YAAY;AAAA,QAChB,WAAW,MAAM,WAAW,UAAU;AAAA,QACtC,SAAS,gBAAgB,qBAAqB,WAAW,EAAE;AAAA,QAC3D,iBAAiB,EAAE,UAAU,UAAU,cAAc,WAAW,GAAG;AAAA,MACrE,CAAC;AACD,YAAM,EAAE,wCAAwC,qBAAqB,GAAG,SAAS;AACjF,YAAM,KAAK;AAAA,IACb,SAAS,aAAa;AACpB,eAAS,uBAAuB,QAC5B,YAAY,UACZ,EAAE,qCAAqC,8BAA8B,CAAC;AAAA,IAC5E,UAAE;AACA,oBAAc,IAAI;AAAA,IACpB;AAAA,EACF,GAAG,CAAC,SAAS,YAAY,UAAU,UAAU,MAAM,YAAY,iBAAiB,UAAU,aAAa,CAAC,CAAC;AAEzG,QAAM,iBAAiB,MAAM,YAAY,CAAC,eAA+B;AACvE,QAAI,YAAY,aAAa,WAAY;AACzC,yBAAqB,UAAU;AAC/B,wBAAoB,SAAS,MAAM;AAAA,EACrC,GAAG,CAAC,UAAU,YAAY,SAAS,CAAC;AAEpC,SACE,qBAAC,SAAI,WAAU,aACZ;AAAA,KAAC,YAAY,CAAC,WACb,oBAAC,SAAI,WAAU,4FACZ,YAAE,wCAAwC,yCAAyC,GACtF,IAEA,qBAAC,SAAI,WAAU,0EACb;AAAA,0BAAC,SAAI,WAAU,qCACb;AAAA,QAAC;AAAA;AAAA,UACC,MAAK;AAAA,UACL,SAAQ;AAAA,UACR,MAAK;AAAA,UACL,SAAS,MAAM,aAAa,SAAS,MAAM;AAAA,UAC3C,UAAU,YAAY;AAAA,UAEtB;AAAA,gCAAC,UAAO,WAAU,WAAU;AAAA,YAC3B,YACG,EAAE,yCAAyC,iBAAY,IACvD,EAAE,qCAAqC,cAAc;AAAA;AAAA;AAAA,MAC3D,GACF;AAAA,MACA;AAAA,QAAC;AAAA;AAAA,UACC,KAAK;AAAA,UACL,MAAK;AAAA,UACL,UAAQ;AAAA,UACR,WAAU;AAAA,UACV;AAAA,UACA,UAAU,YAAY;AAAA,UACtB,UAAU,CAAC,UAAU;AAAE,iBAAK,SAAS,MAAM,OAAO,KAAK;AAAA,UAAE;AAAA;AAAA,MAC3D;AAAA,MACA;AAAA,QAAC;AAAA;AAAA,UACC,KAAK;AAAA,UACL,MAAK;AAAA,UACL,WAAU;AAAA,UACV;AAAA,UACA,UAAU,YAAY;AAAA,UACtB,cAAY,EAAE,iDAAiD,yBAAyB;AAAA,UACxF,UAAU,CAAC,UAAU;AACnB,kBAAM,SAAS,qBAAqB;AACpC,iCAAqB,UAAU;AAC/B,gBAAI,OAAQ,MAAK,SAAS,MAAM,OAAO,OAAO,MAAM;AAAA,UACtD;AAAA;AAAA,MACF;AAAA,OACF;AAAA,IAED,QAAQ,oBAAC,SAAI,WAAU,kCAAkC,iBAAM,IAAS;AAAA,IACzE,qBAAC,SAAI,WAAU,aACZ;AAAA,gBAAU,oBAAC,SAAI,WAAU,iCAAiC,YAAE,+BAA+B,2BAAsB,GAAE,IAAS;AAAA,MAC5H,MAAM,IAAI,CAAC,SACV,qBAAC,SAAkB,WAAU,6EAC3B;AAAA,6BAAC,SAAI,WAAU,kBACb;AAAA,8BAAC,OAAE,WAAU,4BAA2B,MAAM,KAAK,KAAK,QAAO,UAAS,KAAI,cAAc,eAAK,UAAS;AAAA,UACxG,qBAAC,UAAK,WAAU,mEACd;AAAA,gCAAC,UAAM,oBAAU,KAAK,QAAQ,GAAE;AAAA,YAC/B,iBAAiB,IAAI;AAAA,aACxB;AAAA,WACF;AAAA,QACC,eACC;AAAA,UAAC;AAAA;AAAA,YACC,MAAK;AAAA,YACL,SAAQ;AAAA,YACR,MAAK;AAAA,YACL,SAAS,MAAM,eAAe,IAAI;AAAA,YAClC,UAAU,YAAY,aAAa,eAAe;AAAA,YAElD;AAAA,kCAAC,aAAU,WAAU,UAAS,eAAY,QAAO;AAAA,cAChD,EAAE,uCAAuC,SAAS;AAAA;AAAA;AAAA,QACrD,IACE;AAAA,QACH,cACC;AAAA,UAAC;AAAA;AAAA,YACC,MAAK;AAAA,YACL,SAAQ;AAAA,YACR,cAAY,EAAE,2CAA2C,iBAAiB,EAAE,MAAM,KAAK,SAAS,CAAC;AAAA,YACjG,SAAS,MAAM;AAAE,mBAAK,cAAc,IAAI;AAAA,YAAE;AAAA,YAC1C,UAAU,YAAY,aAAa,eAAe;AAAA,YAElD,8BAAC,UAAO,WAAU,UAAS,eAAY,QAAO;AAAA;AAAA,QAChD,IACE;AAAA,WA9BI,KAAK,EA+Bf,CACD;AAAA,MACA,CAAC,WAAW,MAAM,WAAW,IAAI,oBAAC,SAAI,WAAU,iCAAiC,YAAE,mCAAmC,uBAAuB,GAAE,IAAS;AAAA,OAC3J;AAAA,IACC;AAAA,KACH;AAEJ;AAGA,SAAS,oBAAoB,EAAE,KAAK,SAAS,GAAqF;AAChI,QAAM,MAAM,KAAK,cAAc,CAAC;AAChC,QAAM,CAAC,OAAO,QAAQ,IAAI,MAAM,SAAsB,OAAO,IAAI,wBAAwB,WAAW,IAAI,sBAAsB,EAAE;AAChI,QAAM,CAAC,MAAM,OAAO,IAAI,MAAM,UAAkB,MAAM,QAAQ,IAAI,gBAAgB,IAAI,IAAI,mBAAmB,CAAC,GAAG,KAAK,IAAI,CAAC;AAC3H,QAAM,CAAC,WAAW,YAAY,IAAI,MAAM,SAAiB,OAAO,IAAI,kBAAkB,WAAW,IAAI,gBAAgB,EAAE;AACvH,SACE,qBAAC,SAAI,WAAU,yCACb;AAAA,yBAAC,SAAI,WAAU,aACb;AAAA,0BAAC,WAAM,WAAU,uBAAsB,gCAAkB;AAAA,MACzD;AAAA,QAAC;AAAA;AAAA,UACC,MAAK;AAAA,UACL,KAAK;AAAA,UACL,aAAY;AAAA,UACZ,OAAO;AAAA,UACP,UAAU,CAAC,MAAM,SAAS,EAAE,OAAO,UAAU,KAAK,KAAK,OAAO,EAAE,OAAO,KAAK,CAAC;AAAA,UAC7E,QAAQ,MAAM,SAAS,EAAE,qBAAqB,UAAU,KAAK,SAAY,OAAO,KAAK,EAAE,CAAC;AAAA;AAAA,MAC1F;AAAA,OACF;AAAA,IACA,qBAAC,SAAI,WAAU,aACb;AAAA,0BAAC,WAAM,WAAU,uBAAsB,iCAAmB;AAAA,MAC1D;AAAA,QAAC;AAAA;AAAA,UACC,aAAY;AAAA,UACZ,OAAO;AAAA,UACP,UAAU,CAAC,MAAM,QAAQ,EAAE,OAAO,KAAK;AAAA,UACvC,QAAQ,MAAM,SAAS,EAAE,kBAAkB,KAAK,MAAM,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,OAAO,EAAE,CAAC;AAAA;AAAA,MACnG;AAAA,MACA,oBAAC,SAAI,WAAU,iCAAgC,uCAAyB;AAAA,OAC1E;AAAA,IACA,qBAAC,SAAI,WAAU,aACb;AAAA,0BAAC,WAAM,WAAU,uBAAsB,4BAAc;AAAA,MACrD;AAAA,QAAC;AAAA;AAAA,UACC,aAAY;AAAA,UACZ,OAAO;AAAA,UACP,UAAU,CAAC,MAAM,aAAa,EAAE,OAAO,KAAK;AAAA,UAC5C,QAAQ,MAAM,SAAS,EAAE,eAAe,UAAU,KAAK,KAAK,OAAU,CAAC;AAAA;AAAA,MACzE;AAAA,MACA,oBAAC,SAAI,WAAU,iCAAgC,8FAE/C;AAAA,OACF;AAAA,KACF;AAEJ;AAEA,cAAc,SAAS,cAAc;AAAA,EACnC,OAAO,CAAC,UAAU,oBAAC,mBAAgB,UAAU,MAAM,UAAU,UAAU,MAAM,UAAU,KAAK,MAAM,KAAK,UAAU,MAAM,UAAU;AAAA,EACjI,WAAW,CAAC,MAAM,oBAAC,uBAAqB,GAAG,GAAG;AAChD,CAAC;",
   "names": ["error"]
 }