@open-mercato/core 0.7.1-develop.7178.1.ab93fbaf4e → 0.7.1-develop.7180.1.9717fbbb43

package/dist/modules/staff/api/timesheets/reports/[id]/sheet/route.js

@@ -0,0 +1,183 @@
+import { NextResponse } from "next/server";
+import { z } from "zod";
+import { CrudHttpError, isCrudHttpError } from "@open-mercato/shared/lib/crud/errors";
+import { resolveTranslations } from "@open-mercato/shared/lib/i18n/server";
+import { createLogger } from "@open-mercato/shared/lib/logger";
+import { StaffTimeReport, StaffTimeReportEvent } from "../../../../../data/entities.js";
+import { loadReportProjectIds } from "../../../../../commands/timesheets-reports.js";
+import { buildReportSheet } from "../../../../../lib/timesheets-reports/buildReportSheet.js";
+import { buildReportRows } from "../../../../../lib/timesheets-reports/reportRows.js";
+import { hasReportGrouping } from "../../../../../lib/timesheets-reports/reportGroupings.js";
+import { resolveReportRequestContext, reportSheetLabels, MAX_SHEET_ROWS } from "../../shared.js";
+import {
+  readSearchParamsRecord,
+  runTimesheetInterceptors
+} from "../../../_shared/withTimesheetInterceptors.js";
+const logger = createLogger("staff").child({ component: "api/timesheets/reports/sheet" });
+const metadata = {
+  GET: { requireAuth: true, requireFeatures: ["staff.timesheets.reports.view"] }
+};
+function readGrouping(params) {
+  const value = params.get("grouping");
+  return hasReportGrouping(value) ? value : void 0;
+}
+async function GET(req) {
+  try {
+    const context = await resolveReportRequestContext(req, { segment: "sheet" });
+    const { container, auth, tenantId, organizationId, reportId, translate, canSeeMoney, grantedFeatures } = context;
+    const interceptors = await runTimesheetInterceptors({
+      request: req,
+      method: "GET",
+      scope: { container, userId: auth.sub, tenantId, organizationId, userFeatures: grantedFeatures },
+      query: readSearchParamsRecord(req.url)
+    });
+    if (!interceptors.ok) return interceptors.response;
+    const { session } = interceptors;
+    const em = container.resolve("em").fork();
+    const report = await em.findOne(StaffTimeReport, {
+      id: reportId,
+      tenantId,
+      organizationId,
+      deletedAt: null
+    });
+    if (!report) {
+      throw new CrudHttpError(404, {
+        error: translate("staff.time_tracking.reports.errors.notFound", "Report not found or not accessible.")
+      });
+    }
+    const timeProjectIds = await loadReportProjectIds(em, report.id, { tenantId, organizationId });
+    const labels = reportSheetLabels(translate);
+    const sheet = await buildReportSheet({
+      em,
+      scope: { tenantId, organizationId },
+      report,
+      timeProjectIds,
+      labels,
+      grouping: readGrouping(session.searchParams)
+    });
+    const rows = buildReportRows({
+      entries: sheet.entries,
+      projects: sheet.projects,
+      directory: sheet.directory,
+      labels
+    });
+    const events = await em.find(
+      StaffTimeReportEvent,
+      { reportId: report.id, tenantId, organizationId },
+      { orderBy: { createdAt: "desc" } }
+    );
+    return session.respond(200, {
+      report: {
+        id: report.id,
+        reference: report.reference,
+        title: report.title,
+        status: report.status,
+        customerId: report.customerId,
+        customerSnapshot: report.customerSnapshot ?? null,
+        periodKind: report.periodKind,
+        periodFrom: report.periodFrom instanceof Date ? report.periodFrom.toISOString().slice(0, 10) : null,
+        periodTo: report.periodTo instanceof Date ? report.periodTo.toISOString().slice(0, 10) : null,
+        currencyCode: sheet.currencyCode,
+        grouping: sheet.grouping,
+        nonbillableMode: sheet.nonbillableMode,
+        includeAlreadyReported: report.includeAlreadyReported ?? false,
+        showRates: (report.showRates ?? true) && canSeeMoney,
+        roundingUnitMinutes: report.roundingUnitMinutes ?? 0,
+        roundingDirection: report.roundingDirection ?? "up",
+        closedAt: report.closedAt ? report.closedAt.toISOString() : null,
+        closedByUserId: report.closedByUserId ?? null,
+        createdByUserId: report.createdByUserId ?? null,
+        createdAt: report.createdAt ? report.createdAt.toISOString() : null,
+        updatedAt: report.updatedAt ? report.updatedAt.toISOString() : null,
+        timeProjectIds
+      },
+      groups: canSeeMoney ? sheet.totals.groups : stripAmounts(sheet.totals.groups),
+      totals: {
+        entryCount: sheet.totals.entryCount,
+        billableMinutes: sheet.totals.billableMinutes,
+        nonbillableMinutes: sheet.totals.nonbillableMinutes,
+        totalAmount: canSeeMoney ? sheet.totals.totalAmount : null
+      },
+      alreadyReportedCount: sheet.totals.alreadyReportedCount,
+      alreadyReportedMinutes: sheet.totals.alreadyReportedMinutes,
+      alreadyReportedIn: sheet.totals.alreadyReportedIn,
+      rows: rows.slice(0, MAX_SHEET_ROWS).map((row) => ({
+        ...row,
+        rate: canSeeMoney ? row.rate : null,
+        amount: canSeeMoney ? row.amount : null
+      })),
+      rowCount: rows.length,
+      rowsTruncated: rows.length > MAX_SHEET_ROWS,
+      events: events.map((event) => ({
+        id: event.id,
+        eventType: event.eventType,
+        reason: event.reason ?? null,
+        actorUserId: event.actorUserId ?? null,
+        metadata: event.metadata ?? null,
+        createdAt: event.createdAt ? event.createdAt.toISOString() : null
+      }))
+    });
+  } catch (err) {
+    if (isCrudHttpError(err)) {
+      return NextResponse.json(err.body, { status: err.status });
+    }
+    const { translate } = await resolveTranslations();
+    logger.error("staff.timesheets.reports.sheet failed", { err });
+    return NextResponse.json(
+      { error: translate("staff.errors.internal", "Internal server error") },
+      { status: 500 }
+    );
+  }
+}
+function stripAmounts(groups) {
+  return groups.map((group) => ({
+    ...group,
+    rate: null,
+    amount: 0,
+    lines: group.lines.map(function strip(line) {
+      return { ...line, rate: null, amount: 0, children: line.children.map(strip) };
+    })
+  }));
+}
+const sheetResponseSchema = z.object({
+  report: z.object({
+    id: z.string().uuid(),
+    reference: z.string(),
+    title: z.string(),
+    status: z.enum(["draft", "closed"]),
+    currencyCode: z.string().nullable(),
+    periodFrom: z.string().nullable(),
+    periodTo: z.string().nullable(),
+    showRates: z.boolean()
+  }),
+  totals: z.object({
+    entryCount: z.number().int(),
+    billableMinutes: z.number().int(),
+    nonbillableMinutes: z.number().int(),
+    totalAmount: z.number().nullable()
+  }),
+  rowCount: z.number().int(),
+  rowsTruncated: z.boolean()
+});
+const openApi = {
+  tag: "Staff",
+  summary: "Read a customer report sheet",
+  methods: {
+    GET: {
+      summary: "Read a customer report sheet",
+      description: "Returns the report header, the grouped sheet, the raw entry rows and the close/unlock/export history. A draft is computed live; a closed report is rebuilt from its own frozen snapshots so a later rounding or rate change cannot restate it. `?grouping=project_task|project_person|project_day` re-groups the same numbers without persisting the choice \u2014 the grand total is invariant under it (D-7). Amounts are omitted for a caller without staff.timesheets.rates.view.",
+      responses: [{ status: 200, description: "Report sheet", schema: sheetResponseSchema }],
+      errors: [
+        { status: 401, description: "Unauthorized" },
+        { status: 403, description: "Missing staff.timesheets.reports.view" },
+        { status: 404, description: "Report not found or not accessible" }
+      ]
+    }
+  }
+};
+export {
+  GET,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/staff/api/timesheets/reports/[id]/sheet/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../../../src/modules/staff/api/timesheets/reports/%5Bid%5D/sheet/route.ts"],
+  "sourcesContent": ["/**\n * `GET /api/staff/timesheets/reports/[id]/sheet` \u2014 everything screens 14 and 15\n * render: the report header, the grouped sheet, the raw entry rows and the\n * close/unlock/export history.\n *\n * It is a separate route from the CRUD detail because the sheet is COMPUTED. A\n * draft is computed live (and therefore moves when an entry is edited); a closed\n * report is rebuilt from its own freeze records, so a later rounding change\n * cannot restate an invoice the client already has (risk R1). One endpoint\n * answering both keeps the page from having to know which case it is in.\n *\n * `?grouping=` re-groups the same numbers without persisting the choice, which\n * is what lets screen 14 flip between task / person / day and still print the\n * same grand total (D-7).\n */\n\nimport { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { CrudHttpError, isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { StaffTimeReport, StaffTimeReportEvent } from '../../../../../data/entities'\nimport { loadReportProjectIds } from '../../../../../commands/timesheets-reports'\nimport { buildReportSheet } from '../../../../../lib/timesheets-reports/buildReportSheet'\nimport { buildReportRows } from '../../../../../lib/timesheets-reports/reportRows'\nimport { hasReportGrouping, type ReportGrouping } from '../../../../../lib/timesheets-reports/reportGroupings'\nimport { resolveReportRequestContext, reportSheetLabels, MAX_SHEET_ROWS } from '../../shared'\nimport {\n  readSearchParamsRecord,\n  runTimesheetInterceptors,\n} from '../../../_shared/withTimesheetInterceptors'\n\nconst logger = createLogger('staff').child({ component: 'api/timesheets/reports/sheet' })\n\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['staff.timesheets.reports.view'] },\n}\n\n/** EP-36: the accepted set is the grouping registry, not a literal union. */\nfunction readGrouping(params: URLSearchParams): ReportGrouping | undefined {\n  const value = params.get('grouping')\n  return hasReportGrouping(value) ? (value as ReportGrouping) : undefined\n}\n\nexport async function GET(req: Request) {\n  try {\n    const context = await resolveReportRequestContext(req, { segment: 'sheet' })\n    // See the note in the export route: this decision is made once, fail-closed,\n    // in `buildReportRequestContext`.\n    const { container, auth, tenantId, organizationId, reportId, translate, canSeeMoney, grantedFeatures } =\n      context\n\n    const interceptors = await runTimesheetInterceptors({\n      request: req,\n      method: 'GET',\n      scope: { container, userId: auth.sub, tenantId, organizationId, userFeatures: grantedFeatures },\n      query: readSearchParamsRecord(req.url),\n    })\n    if (!interceptors.ok) return interceptors.response\n    const { session } = interceptors\n\n    const em = (container.resolve('em') as EntityManager).fork()\n    const report = await em.findOne(StaffTimeReport, {\n      id: reportId,\n      tenantId,\n      organizationId,\n      deletedAt: null,\n    })\n    if (!report) {\n      throw new CrudHttpError(404, {\n        error: translate('staff.time_tracking.reports.errors.notFound', 'Report not found or not accessible.'),\n      })\n    }\n\n    const timeProjectIds = await loadReportProjectIds(em, report.id, { tenantId, organizationId })\n    const labels = reportSheetLabels(translate)\n    const sheet = await buildReportSheet({\n      em,\n      scope: { tenantId, organizationId },\n      report,\n      timeProjectIds,\n      labels,\n      grouping: readGrouping(session.searchParams),\n    })\n\n    const rows = buildReportRows({\n      entries: sheet.entries,\n      projects: sheet.projects,\n      directory: sheet.directory,\n      labels,\n    })\n\n    const events = await em.find(\n      StaffTimeReportEvent,\n      { reportId: report.id, tenantId, organizationId },\n      { orderBy: { createdAt: 'desc' } },\n    )\n\n    return session.respond(200, {\n      report: {\n        id: report.id,\n        reference: report.reference,\n        title: report.title,\n        status: report.status,\n        customerId: report.customerId,\n        customerSnapshot: report.customerSnapshot ?? null,\n        periodKind: report.periodKind,\n        periodFrom: report.periodFrom instanceof Date ? report.periodFrom.toISOString().slice(0, 10) : null,\n        periodTo: report.periodTo instanceof Date ? report.periodTo.toISOString().slice(0, 10) : null,\n        currencyCode: sheet.currencyCode,\n        grouping: sheet.grouping,\n        nonbillableMode: sheet.nonbillableMode,\n        includeAlreadyReported: report.includeAlreadyReported ?? false,\n        showRates: (report.showRates ?? true) && canSeeMoney,\n        roundingUnitMinutes: report.roundingUnitMinutes ?? 0,\n        roundingDirection: report.roundingDirection ?? 'up',\n        closedAt: report.closedAt ? report.closedAt.toISOString() : null,\n        closedByUserId: report.closedByUserId ?? null,\n        createdByUserId: report.createdByUserId ?? null,\n        createdAt: report.createdAt ? report.createdAt.toISOString() : null,\n        updatedAt: report.updatedAt ? report.updatedAt.toISOString() : null,\n        timeProjectIds,\n      },\n      groups: canSeeMoney ? sheet.totals.groups : stripAmounts(sheet.totals.groups),\n      totals: {\n        entryCount: sheet.totals.entryCount,\n        billableMinutes: sheet.totals.billableMinutes,\n        nonbillableMinutes: sheet.totals.nonbillableMinutes,\n        totalAmount: canSeeMoney ? sheet.totals.totalAmount : null,\n      },\n      alreadyReportedCount: sheet.totals.alreadyReportedCount,\n      alreadyReportedMinutes: sheet.totals.alreadyReportedMinutes,\n      alreadyReportedIn: sheet.totals.alreadyReportedIn,\n      rows: rows.slice(0, MAX_SHEET_ROWS).map((row) => ({\n        ...row,\n        rate: canSeeMoney ? row.rate : null,\n        amount: canSeeMoney ? row.amount : null,\n      })),\n      rowCount: rows.length,\n      rowsTruncated: rows.length > MAX_SHEET_ROWS,\n      events: events.map((event) => ({\n        id: event.id,\n        eventType: event.eventType,\n        reason: event.reason ?? null,\n        actorUserId: event.actorUserId ?? null,\n        metadata: event.metadata ?? null,\n        createdAt: event.createdAt ? event.createdAt.toISOString() : null,\n      })),\n    })\n  } catch (err) {\n    if (isCrudHttpError(err)) {\n      return NextResponse.json(err.body, { status: err.status })\n    }\n    const { translate } = await resolveTranslations()\n    logger.error('staff.timesheets.reports.sheet failed', { err })\n    return NextResponse.json(\n      { error: translate('staff.errors.internal', 'Internal server error') },\n      { status: 500 },\n    )\n  }\n}\n\ntype SheetGroups = Awaited<ReturnType<typeof buildReportSheet>>['totals']['groups']\n\n/** Money is absent, not zeroed, for a caller without `rates.view`. */\nfunction stripAmounts(groups: SheetGroups): SheetGroups {\n  return groups.map((group) => ({\n    ...group,\n    rate: null,\n    amount: 0,\n    lines: group.lines.map(function strip(line): SheetGroups[number]['lines'][number] {\n      return { ...line, rate: null, amount: 0, children: line.children.map(strip) }\n    }),\n  }))\n}\n\nconst sheetResponseSchema = z.object({\n  report: z.object({\n    id: z.string().uuid(),\n    reference: z.string(),\n    title: z.string(),\n    status: z.enum(['draft', 'closed']),\n    currencyCode: z.string().nullable(),\n    periodFrom: z.string().nullable(),\n    periodTo: z.string().nullable(),\n    showRates: z.boolean(),\n  }),\n  totals: z.object({\n    entryCount: z.number().int(),\n    billableMinutes: z.number().int(),\n    nonbillableMinutes: z.number().int(),\n    totalAmount: z.number().nullable(),\n  }),\n  rowCount: z.number().int(),\n  rowsTruncated: z.boolean(),\n})\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Staff',\n  summary: 'Read a customer report sheet',\n  methods: {\n    GET: {\n      summary: 'Read a customer report sheet',\n      description:\n        'Returns the report header, the grouped sheet, the raw entry rows and the close/unlock/export history. A draft is computed live; a closed report is rebuilt from its own frozen snapshots so a later rounding or rate change cannot restate it. `?grouping=project_task|project_person|project_day` re-groups the same numbers without persisting the choice \u2014 the grand total is invariant under it (D-7). Amounts are omitted for a caller without staff.timesheets.rates.view.',\n      responses: [{ status: 200, description: 'Report sheet', schema: sheetResponseSchema }],\n      errors: [\n        { status: 401, description: 'Unauthorized' },\n        { status: 403, description: 'Missing staff.timesheets.reports.view' },\n        { status: 404, description: 'Report not found or not accessible' },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAgBA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAKlB,SAAS,eAAe,uBAAuB;AAC/C,SAAS,2BAA2B;AACpC,SAAS,oBAAoB;AAE7B,SAAS,iBAAiB,4BAA4B;AACtD,SAAS,4BAA4B;AACrC,SAAS,wBAAwB;AACjC,SAAS,uBAAuB;AAChC,SAAS,yBAA8C;AACvD,SAAS,6BAA6B,mBAAmB,sBAAsB;AAC/E;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAEP,MAAM,SAAS,aAAa,OAAO,EAAE,MAAM,EAAE,WAAW,+BAA+B,CAAC;AAGjF,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,+BAA+B,EAAE;AAC/E;AAGA,SAAS,aAAa,QAAqD;AACzE,QAAM,QAAQ,OAAO,IAAI,UAAU;AACnC,SAAO,kBAAkB,KAAK,IAAK,QAA2B;AAChE;AAEA,eAAsB,IAAI,KAAc;AACtC,MAAI;AACF,UAAM,UAAU,MAAM,4BAA4B,KAAK,EAAE,SAAS,QAAQ,CAAC;AAG3E,UAAM,EAAE,WAAW,MAAM,UAAU,gBAAgB,UAAU,WAAW,aAAa,gBAAgB,IACnG;AAEF,UAAM,eAAe,MAAM,yBAAyB;AAAA,MAClD,SAAS;AAAA,MACT,QAAQ;AAAA,MACR,OAAO,EAAE,WAAW,QAAQ,KAAK,KAAK,UAAU,gBAAgB,cAAc,gBAAgB;AAAA,MAC9F,OAAO,uBAAuB,IAAI,GAAG;AAAA,IACvC,CAAC;AACD,QAAI,CAAC,aAAa,GAAI,QAAO,aAAa;AAC1C,UAAM,EAAE,QAAQ,IAAI;AAEpB,UAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC3D,UAAM,SAAS,MAAM,GAAG,QAAQ,iBAAiB;AAAA,MAC/C,IAAI;AAAA,MACJ;AAAA,MACA;AAAA,MACA,WAAW;AAAA,IACb,CAAC;AACD,QAAI,CAAC,QAAQ;AACX,YAAM,IAAI,cAAc,KAAK;AAAA,QAC3B,OAAO,UAAU,+CAA+C,qCAAqC;AAAA,MACvG,CAAC;AAAA,IACH;AAEA,UAAM,iBAAiB,MAAM,qBAAqB,IAAI,OAAO,IAAI,EAAE,UAAU,eAAe,CAAC;AAC7F,UAAM,SAAS,kBAAkB,SAAS;AAC1C,UAAM,QAAQ,MAAM,iBAAiB;AAAA,MACnC;AAAA,MACA,OAAO,EAAE,UAAU,eAAe;AAAA,MAClC;AAAA,MACA;AAAA,MACA;AAAA,MACA,UAAU,aAAa,QAAQ,YAAY;AAAA,IAC7C,CAAC;AAED,UAAM,OAAO,gBAAgB;AAAA,MAC3B,SAAS,MAAM;AAAA,MACf,UAAU,MAAM;AAAA,MAChB,WAAW,MAAM;AAAA,MACjB;AAAA,IACF,CAAC;AAED,UAAM,SAAS,MAAM,GAAG;AAAA,MACtB;AAAA,MACA,EAAE,UAAU,OAAO,IAAI,UAAU,eAAe;AAAA,MAChD,EAAE,SAAS,EAAE,WAAW,OAAO,EAAE;AAAA,IACnC;AAEA,WAAO,QAAQ,QAAQ,KAAK;AAAA,MAC1B,QAAQ;AAAA,QACN,IAAI,OAAO;AAAA,QACX,WAAW,OAAO;AAAA,QAClB,OAAO,OAAO;AAAA,QACd,QAAQ,OAAO;AAAA,QACf,YAAY,OAAO;AAAA,QACnB,kBAAkB,OAAO,oBAAoB;AAAA,QAC7C,YAAY,OAAO;AAAA,QACnB,YAAY,OAAO,sBAAsB,OAAO,OAAO,WAAW,YAAY,EAAE,MAAM,GAAG,EAAE,IAAI;AAAA,QAC/F,UAAU,OAAO,oBAAoB,OAAO,OAAO,SAAS,YAAY,EAAE,MAAM,GAAG,EAAE,IAAI;AAAA,QACzF,cAAc,MAAM;AAAA,QACpB,UAAU,MAAM;AAAA,QAChB,iBAAiB,MAAM;AAAA,QACvB,wBAAwB,OAAO,0BAA0B;AAAA,QACzD,YAAY,OAAO,aAAa,SAAS;AAAA,QACzC,qBAAqB,OAAO,uBAAuB;AAAA,QACnD,mBAAmB,OAAO,qBAAqB;AAAA,QAC/C,UAAU,OAAO,WAAW,OAAO,SAAS,YAAY,IAAI;AAAA,QAC5D,gBAAgB,OAAO,kBAAkB;AAAA,QACzC,iBAAiB,OAAO,mBAAmB;AAAA,QAC3C,WAAW,OAAO,YAAY,OAAO,UAAU,YAAY,IAAI;AAAA,QAC/D,WAAW,OAAO,YAAY,OAAO,UAAU,YAAY,IAAI;AAAA,QAC/D;AAAA,MACF;AAAA,MACA,QAAQ,cAAc,MAAM,OAAO,SAAS,aAAa,MAAM,OAAO,MAAM;AAAA,MAC5E,QAAQ;AAAA,QACN,YAAY,MAAM,OAAO;AAAA,QACzB,iBAAiB,MAAM,OAAO;AAAA,QAC9B,oBAAoB,MAAM,OAAO;AAAA,QACjC,aAAa,cAAc,MAAM,OAAO,cAAc;AAAA,MACxD;AAAA,MACA,sBAAsB,MAAM,OAAO;AAAA,MACnC,wBAAwB,MAAM,OAAO;AAAA,MACrC,mBAAmB,MAAM,OAAO;AAAA,MAChC,MAAM,KAAK,MAAM,GAAG,cAAc,EAAE,IAAI,CAAC,SAAS;AAAA,QAChD,GAAG;AAAA,QACH,MAAM,cAAc,IAAI,OAAO;AAAA,QAC/B,QAAQ,cAAc,IAAI,SAAS;AAAA,MACrC,EAAE;AAAA,MACF,UAAU,KAAK;AAAA,MACf,eAAe,KAAK,SAAS;AAAA,MAC7B,QAAQ,OAAO,IAAI,CAAC,WAAW;AAAA,QAC7B,IAAI,MAAM;AAAA,QACV,WAAW,MAAM;AAAA,QACjB,QAAQ,MAAM,UAAU;AAAA,QACxB,aAAa,MAAM,eAAe;AAAA,QAClC,UAAU,MAAM,YAAY;AAAA,QAC5B,WAAW,MAAM,YAAY,MAAM,UAAU,YAAY,IAAI;AAAA,MAC/D,EAAE;AAAA,IACJ,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,GAAG;AACxB,aAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,IAC3D;AACA,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,WAAO,MAAM,yCAAyC,EAAE,IAAI,CAAC;AAC7D,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,UAAU,yBAAyB,uBAAuB,EAAE;AAAA,MACrE,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAKA,SAAS,aAAa,QAAkC;AACtD,SAAO,OAAO,IAAI,CAAC,WAAW;AAAA,IAC5B,GAAG;AAAA,IACH,MAAM;AAAA,IACN,QAAQ;AAAA,IACR,OAAO,MAAM,MAAM,IAAI,SAAS,MAAM,MAA4C;AAChF,aAAO,EAAE,GAAG,MAAM,MAAM,MAAM,QAAQ,GAAG,UAAU,KAAK,SAAS,IAAI,KAAK,EAAE;AAAA,IAC9E,CAAC;AAAA,EACH,EAAE;AACJ;AAEA,MAAM,sBAAsB,EAAE,OAAO;AAAA,EACnC,QAAQ,EAAE,OAAO;AAAA,IACf,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,IACpB,WAAW,EAAE,OAAO;AAAA,IACpB,OAAO,EAAE,OAAO;AAAA,IAChB,QAAQ,EAAE,KAAK,CAAC,SAAS,QAAQ,CAAC;AAAA,IAClC,cAAc,EAAE,OAAO,EAAE,SAAS;AAAA,IAClC,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,IAChC,UAAU,EAAE,OAAO,EAAE,SAAS;AAAA,IAC9B,WAAW,EAAE,QAAQ;AAAA,EACvB,CAAC;AAAA,EACD,QAAQ,EAAE,OAAO;AAAA,IACf,YAAY,EAAE,OAAO,EAAE,IAAI;AAAA,IAC3B,iBAAiB,EAAE,OAAO,EAAE,IAAI;AAAA,IAChC,oBAAoB,EAAE,OAAO,EAAE,IAAI;AAAA,IACnC,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,EACnC,CAAC;AAAA,EACD,UAAU,EAAE,OAAO,EAAE,IAAI;AAAA,EACzB,eAAe,EAAE,QAAQ;AAC3B,CAAC;AAEM,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aACE;AAAA,MACF,WAAW,CAAC,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,oBAAoB,CAAC;AAAA,MACrF,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,eAAe;AAAA,QAC3C,EAAE,QAAQ,KAAK,aAAa,wCAAwC;AAAA,QACpE,EAAE,QAAQ,KAAK,aAAa,qCAAqC;AAAA,MACnE;AAAA,IACF;AAAA,EACF;AACF;",
+  "names": []
+}

package/dist/modules/staff/api/timesheets/reports/[id]/unlock/route.js

@@ -0,0 +1,164 @@
+import { NextResponse } from "next/server";
+import { resolveFeatureAccess } from "../../../../../lib/time-tracking/featureAccess.js";
+import { z } from "zod";
+import { forbidden, isCrudHttpError } from "@open-mercato/shared/lib/crud/errors";
+import { runRouteMutationGuards } from "@open-mercato/shared/lib/crud/route-mutation-guard";
+import { resolveTranslations } from "@open-mercato/shared/lib/i18n/server";
+import { serializeOperationMetadata } from "@open-mercato/shared/lib/commands/operationMetadata";
+import { getCommandInterceptorHttpRejection } from "@open-mercato/shared/lib/commands/errors";
+import { createLogger } from "@open-mercato/shared/lib/logger";
+import { staffTimeReportUnlockSchema } from "../../../../../data/validators.js";
+import { readJsonSafe } from "@open-mercato/shared/lib/http/readJsonSafe";
+import { STAFF_TIME_TRACKING_RESOURCE_KINDS } from "../../../../guards.js";
+import { runTimesheetInterceptors } from "../../../_shared/withTimesheetInterceptors.js";
+import {
+  staffTimeReportCommandIds
+} from "../../../../../commands/timesheets-reports.js";
+import { resolveReportRequestContext } from "../../shared.js";
+import { evaluateReportUnlockPolicies } from "../../../../../lib/timesheets-reports/reportApprovalPolicies.js";
+const logger = createLogger("staff").child({ component: "api/timesheets/reports/unlock" });
+const UNLOCK_FEATURE = "staff.timesheets.reports.unlock";
+const metadata = {
+  POST: { requireAuth: true, requireFeatures: [UNLOCK_FEATURE] }
+};
+const bodySchema = z.object({ reason: z.string().trim().min(1).max(2e3) });
+async function POST(req) {
+  try {
+    const context = await resolveReportRequestContext(req, { segment: "unlock" });
+    const { container, auth, organizationScope, tenantId, organizationId, reportId, translate, grantedFeatures } = context;
+    if (!(await resolveFeatureAccess(container, auth.sub ?? null, [UNLOCK_FEATURE], { tenantId, organizationId })).allowed) {
+      throw forbidden(translate("staff.errors.forbidden", "Forbidden"));
+    }
+    const interceptors = await runTimesheetInterceptors({
+      request: req,
+      method: "POST",
+      scope: { container, userId: auth.sub, tenantId, organizationId, userFeatures: grantedFeatures },
+      body: await readJsonSafe(req, {})
+    });
+    if (!interceptors.ok) return interceptors.response;
+    const { session } = interceptors;
+    const parsed = bodySchema.parse(session.body);
+    const refusal = evaluateReportUnlockPolicies({
+      tenantId,
+      organizationId,
+      reportId,
+      actorUserId: typeof auth.sub === "string" ? auth.sub : null,
+      actorFeatures: grantedFeatures,
+      status: "closed",
+      reason: parsed.reason
+    });
+    if (refusal) {
+      throw forbidden(translate(refusal.messageKey, translate("staff.errors.forbidden", "Forbidden")));
+    }
+    const guardResult = await runRouteMutationGuards({
+      container,
+      req,
+      auth: {
+        userId: auth.sub ?? "",
+        tenantId,
+        organizationId,
+        userFeatures: grantedFeatures
+      },
+      input: {
+        resourceKind: STAFF_TIME_TRACKING_RESOURCE_KINDS.timeReport,
+        resourceId: reportId,
+        operation: "update",
+        mutationPayload: parsed
+      }
+    });
+    if (!guardResult.ok) return guardResult.response;
+    const effective = guardResult.modifiedPayload ? bodySchema.parse({ ...parsed, ...guardResult.modifiedPayload }) : parsed;
+    const ctx = {
+      container,
+      auth,
+      organizationScope,
+      selectedOrganizationId: organizationScope?.selectedId ?? auth.orgId ?? null,
+      organizationIds: organizationScope?.filterIds ?? (auth.orgId ? [auth.orgId] : null),
+      request: req
+    };
+    const commandBus = container.resolve("commandBus");
+    const { result, logEntry } = await commandBus.execute(staffTimeReportCommandIds.unlock, {
+      input: { id: reportId, reason: effective.reason },
+      ctx
+    });
+    await guardResult.runAfterSuccess();
+    const response = await session.respond(200, {
+      id: result?.reportId ?? reportId,
+      status: "draft",
+      unlockedEntryCount: result?.unlockedEntryCount ?? 0
+    });
+    if (logEntry?.id && logEntry?.commandId) {
+      response.headers.set(
+        "x-om-operation",
+        serializeOperationMetadata({
+          id: logEntry.id,
+          // Explicitly no undo token: unwinding a billing freeze is the unlock
+          // endpoint, which demands a reason and its own feature.
+          undoToken: "",
+          commandId: logEntry.commandId,
+          actionLabel: logEntry.actionLabel ?? null,
+          resourceKind: logEntry.resourceKind ?? STAFF_TIME_TRACKING_RESOURCE_KINDS.timeReport,
+          resourceId: logEntry.resourceId ?? reportId,
+          executedAt: logEntry.createdAt instanceof Date ? logEntry.createdAt.toISOString() : void 0
+        })
+      );
+    }
+    return response;
+  } catch (err) {
+    if (isCrudHttpError(err)) {
+      return NextResponse.json(err.body, { status: err.status });
+    }
+    const interceptorRejection = getCommandInterceptorHttpRejection(err);
+    if (interceptorRejection) {
+      return NextResponse.json(interceptorRejection.body, { status: interceptorRejection.status });
+    }
+    const { translate } = await resolveTranslations();
+    if (err instanceof z.ZodError) {
+      return NextResponse.json(
+        {
+          error: translate(
+            "staff.time_tracking.reports.errors.reasonRequired",
+            "An unlock reason is required."
+          ),
+          details: err.issues
+        },
+        { status: 400 }
+      );
+    }
+    logger.error("staff.timesheets.reports.unlock failed", { err });
+    return NextResponse.json(
+      { error: translate("staff.errors.internal", "Internal server error") },
+      { status: 500 }
+    );
+  }
+}
+const unlockResponseSchema = z.object({
+  id: z.string().uuid(),
+  status: z.literal("draft"),
+  unlockedEntryCount: z.number().int()
+});
+const openApi = {
+  tag: "Staff",
+  summary: "Unlock a closed customer report",
+  methods: {
+    POST: {
+      summary: "Unlock a closed customer report",
+      description: "Clears locked_report_id / locked_at on every entry this report froze, removes its freeze records so a previously billed hour stops being counted as already reported, returns the report to draft and appends an `unlocked` event carrying the reason, the actor and the totals that were frozen. The reason is mandatory. Requires staff.timesheets.reports.unlock, which is deliberately separate from staff.timesheets.lock.",
+      requestBody: { contentType: "application/json", schema: staffTimeReportUnlockSchema.pick({ reason: true }) },
+      responses: [{ status: 200, description: "Report unlocked", schema: unlockResponseSchema }],
+      errors: [
+        { status: 400, description: "Missing or empty reason" },
+        { status: 401, description: "Unauthorized" },
+        { status: 403, description: "Missing staff.timesheets.reports.unlock, or refused by a registered report approval policy" },
+        { status: 404, description: "Report not found or not accessible" },
+        { status: 409, description: "Report is not closed (report_not_closed)" }
+      ]
+    }
+  }
+};
+export {
+  POST,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/staff/api/timesheets/reports/[id]/unlock/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../../../src/modules/staff/api/timesheets/reports/%5Bid%5D/unlock/route.ts"],
+  "sourcesContent": ["/**\n * `POST /api/staff/timesheets/reports/[id]/unlock` \u2014 screen 15.\n *\n * Gated on `staff.timesheets.reports.unlock`, deliberately a DIFFERENT feature\n * from `staff.timesheets.lock`. Screen 15 note 4 asked who may unlock and\n * observed that \u00A710 leaves nobody \"above\" a Team Leader; the answer is a\n * separate grant that can be withheld from a Team Leader who should not restate\n * billed time, rather than an admin role the requirements reject.\n *\n * The reason is mandatory at the schema level and is written verbatim into the\n * `unlocked` report event beside the actor and the timestamp, which is what\n * makes this the \"explicit, audited action\" US-G3 asks for rather than a confirm\n * dialog.\n */\n\nimport { NextResponse } from 'next/server'\nimport { resolveFeatureAccess } from '../../../../../lib/time-tracking/featureAccess'\nimport { z } from 'zod'\nimport { forbidden, isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { runRouteMutationGuards } from '@open-mercato/shared/lib/crud/route-mutation-guard'\nimport { authorizeFeatures } from '@open-mercato/shared/security/featurePolicy'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { serializeOperationMetadata } from '@open-mercato/shared/lib/commands/operationMetadata'\nimport type { CommandBus, CommandRuntimeContext } from '@open-mercato/shared/lib/commands'\nimport { getCommandInterceptorHttpRejection } from '@open-mercato/shared/lib/commands/errors'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { staffTimeReportUnlockSchema } from '../../../../../data/validators'\nimport { readJsonSafe } from '@open-mercato/shared/lib/http/readJsonSafe'\nimport { STAFF_TIME_TRACKING_RESOURCE_KINDS } from '../../../../guards'\nimport { runTimesheetInterceptors } from '../../../_shared/withTimesheetInterceptors'\nimport {\n  staffTimeReportCommandIds,\n  type StaffTimeReportUnlockResult,\n} from '../../../../../commands/timesheets-reports'\nimport { resolveReportRequestContext } from '../../shared'\nimport { evaluateReportUnlockPolicies } from '../../../../../lib/timesheets-reports/reportApprovalPolicies'\n\nconst logger = createLogger('staff').child({ component: 'api/timesheets/reports/unlock' })\n\nconst UNLOCK_FEATURE = 'staff.timesheets.reports.unlock'\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: [UNLOCK_FEATURE] },\n}\n\nconst bodySchema = z.object({ reason: z.string().trim().min(1).max(2000) })\n\nexport async function POST(req: Request) {\n  try {\n    const context = await resolveReportRequestContext(req, { segment: 'unlock' })\n    const { container, auth, organizationScope, tenantId, organizationId, reportId, translate, grantedFeatures } =\n      context\n\n    // Checked unconditionally. The `grantedFeatures &&` this replaces turned the\n    // check off whenever the grant read failed \u2014 harmless here only because the\n    // route metadata happens to require the same feature, which is exactly the\n    // shape that leaked rates on the report routes where no such backstop existed.\n    if (!(await resolveFeatureAccess(container, auth.sub ?? null, [UNLOCK_FEATURE], { tenantId, organizationId })).allowed) {\n      throw forbidden(translate('staff.errors.forbidden', 'Forbidden'))\n    }\n\n    const interceptors = await runTimesheetInterceptors({\n      request: req,\n      method: 'POST',\n      scope: { container, userId: auth.sub, tenantId, organizationId, userFeatures: grantedFeatures },\n      body: await readJsonSafe<Record<string, unknown>>(req, {}),\n    })\n    if (!interceptors.ok) return interceptors.response\n    const { session } = interceptors\n\n    const parsed = bodySchema.parse(session.body)\n\n    // EP-41 runs strictly AFTER the ACL gate above and can only refuse. A\n    // four-eyes or accounting-period policy narrows who may unlock; nothing here\n    // widens it past staff.timesheets.reports.unlock.\n    const refusal = evaluateReportUnlockPolicies({\n      tenantId,\n      organizationId,\n      reportId,\n      actorUserId: typeof auth.sub === 'string' ? auth.sub : null,\n      actorFeatures: grantedFeatures,\n      status: 'closed',\n      reason: parsed.reason,\n    })\n    if (refusal) {\n      throw forbidden(translate(refusal.messageKey, translate('staff.errors.forbidden', 'Forbidden')))\n    }\n\n    const guardResult = await runRouteMutationGuards({\n      container,\n      req,\n      auth: {\n        userId: auth.sub ?? '',\n        tenantId,\n        organizationId,\n        userFeatures: grantedFeatures,\n      },\n      input: {\n        resourceKind: STAFF_TIME_TRACKING_RESOURCE_KINDS.timeReport,\n        resourceId: reportId,\n        operation: 'update',\n        mutationPayload: parsed,\n      },\n    })\n    if (!guardResult.ok) return guardResult.response\n\n    const effective = guardResult.modifiedPayload\n      ? bodySchema.parse({ ...parsed, ...guardResult.modifiedPayload })\n      : parsed\n\n    const ctx: CommandRuntimeContext = {\n      container,\n      auth,\n      organizationScope,\n      selectedOrganizationId: organizationScope?.selectedId ?? auth.orgId ?? null,\n      organizationIds: organizationScope?.filterIds ?? (auth.orgId ? [auth.orgId] : null),\n      request: req,\n    }\n\n    const commandBus = container.resolve('commandBus') as CommandBus\n    const { result, logEntry } = await commandBus.execute<\n      { id: string; reason: string },\n      StaffTimeReportUnlockResult\n    >(staffTimeReportCommandIds.unlock, {\n      input: { id: reportId, reason: effective.reason },\n      ctx,\n    })\n\n    await guardResult.runAfterSuccess()\n\n    const response = await session.respond(200, {\n      id: result?.reportId ?? reportId,\n      status: 'draft',\n      unlockedEntryCount: result?.unlockedEntryCount ?? 0,\n    })\n    if (logEntry?.id && logEntry?.commandId) {\n      response.headers.set(\n        'x-om-operation',\n        serializeOperationMetadata({\n          id: logEntry.id,\n          // Explicitly no undo token: unwinding a billing freeze is the unlock\n          // endpoint, which demands a reason and its own feature.\n          undoToken: '',\n          commandId: logEntry.commandId,\n          actionLabel: logEntry.actionLabel ?? null,\n          resourceKind: logEntry.resourceKind ?? STAFF_TIME_TRACKING_RESOURCE_KINDS.timeReport,\n          resourceId: logEntry.resourceId ?? reportId,\n          executedAt: logEntry.createdAt instanceof Date ? logEntry.createdAt.toISOString() : undefined,\n        }),\n      )\n    }\n    return response\n  } catch (err) {\n    if (isCrudHttpError(err)) {\n      return NextResponse.json(err.body, { status: err.status })\n    }\n    const interceptorRejection = getCommandInterceptorHttpRejection(err)\n    if (interceptorRejection) {\n      return NextResponse.json(interceptorRejection.body, { status: interceptorRejection.status })\n    }\n    const { translate } = await resolveTranslations()\n    if (err instanceof z.ZodError) {\n      return NextResponse.json(\n        {\n          error: translate(\n            'staff.time_tracking.reports.errors.reasonRequired',\n            'An unlock reason is required.',\n          ),\n          details: err.issues,\n        },\n        { status: 400 },\n      )\n    }\n    logger.error('staff.timesheets.reports.unlock failed', { err })\n    return NextResponse.json(\n      { error: translate('staff.errors.internal', 'Internal server error') },\n      { status: 500 },\n    )\n  }\n}\n\nconst unlockResponseSchema = z.object({\n  id: z.string().uuid(),\n  status: z.literal('draft'),\n  unlockedEntryCount: z.number().int(),\n})\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Staff',\n  summary: 'Unlock a closed customer report',\n  methods: {\n    POST: {\n      summary: 'Unlock a closed customer report',\n      description:\n        'Clears locked_report_id / locked_at on every entry this report froze, removes its freeze records so a previously billed hour stops being counted as already reported, returns the report to draft and appends an `unlocked` event carrying the reason, the actor and the totals that were frozen. The reason is mandatory. Requires staff.timesheets.reports.unlock, which is deliberately separate from staff.timesheets.lock.',\n      requestBody: { contentType: 'application/json', schema: staffTimeReportUnlockSchema.pick({ reason: true }) },\n      responses: [{ status: 200, description: 'Report unlocked', schema: unlockResponseSchema }],\n      errors: [\n        { status: 400, description: 'Missing or empty reason' },\n        { status: 401, description: 'Unauthorized' },\n        { status: 403, description: 'Missing staff.timesheets.reports.unlock, or refused by a registered report approval policy' },\n        { status: 404, description: 'Report not found or not accessible' },\n        { status: 409, description: 'Report is not closed (report_not_closed)' },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAeA,SAAS,oBAAoB;AAC7B,SAAS,4BAA4B;AACrC,SAAS,SAAS;AAClB,SAAS,WAAW,uBAAuB;AAC3C,SAAS,8BAA8B;AAEvC,SAAS,2BAA2B;AACpC,SAAS,kCAAkC;AAE3C,SAAS,0CAA0C;AACnD,SAAS,oBAAoB;AAE7B,SAAS,mCAAmC;AAC5C,SAAS,oBAAoB;AAC7B,SAAS,0CAA0C;AACnD,SAAS,gCAAgC;AACzC;AAAA,EACE;AAAA,OAEK;AACP,SAAS,mCAAmC;AAC5C,SAAS,oCAAoC;AAE7C,MAAM,SAAS,aAAa,OAAO,EAAE,MAAM,EAAE,WAAW,gCAAgC,CAAC;AAEzF,MAAM,iBAAiB;AAEhB,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,cAAc,EAAE;AAC/D;AAEA,MAAM,aAAa,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,GAAI,EAAE,CAAC;AAE1E,eAAsB,KAAK,KAAc;AACvC,MAAI;AACF,UAAM,UAAU,MAAM,4BAA4B,KAAK,EAAE,SAAS,SAAS,CAAC;AAC5E,UAAM,EAAE,WAAW,MAAM,mBAAmB,UAAU,gBAAgB,UAAU,WAAW,gBAAgB,IACzG;AAMF,QAAI,EAAE,MAAM,qBAAqB,WAAW,KAAK,OAAO,MAAM,CAAC,cAAc,GAAG,EAAE,UAAU,eAAe,CAAC,GAAG,SAAS;AACtH,YAAM,UAAU,UAAU,0BAA0B,WAAW,CAAC;AAAA,IAClE;AAEA,UAAM,eAAe,MAAM,yBAAyB;AAAA,MAClD,SAAS;AAAA,MACT,QAAQ;AAAA,MACR,OAAO,EAAE,WAAW,QAAQ,KAAK,KAAK,UAAU,gBAAgB,cAAc,gBAAgB;AAAA,MAC9F,MAAM,MAAM,aAAsC,KAAK,CAAC,CAAC;AAAA,IAC3D,CAAC;AACD,QAAI,CAAC,aAAa,GAAI,QAAO,aAAa;AAC1C,UAAM,EAAE,QAAQ,IAAI;AAEpB,UAAM,SAAS,WAAW,MAAM,QAAQ,IAAI;AAK5C,UAAM,UAAU,6BAA6B;AAAA,MAC3C;AAAA,MACA;AAAA,MACA;AAAA,MACA,aAAa,OAAO,KAAK,QAAQ,WAAW,KAAK,MAAM;AAAA,MACvD,eAAe;AAAA,MACf,QAAQ;AAAA,MACR,QAAQ,OAAO;AAAA,IACjB,CAAC;AACD,QAAI,SAAS;AACX,YAAM,UAAU,UAAU,QAAQ,YAAY,UAAU,0BAA0B,WAAW,CAAC,CAAC;AAAA,IACjG;AAEA,UAAM,cAAc,MAAM,uBAAuB;AAAA,MAC/C;AAAA,MACA;AAAA,MACA,MAAM;AAAA,QACJ,QAAQ,KAAK,OAAO;AAAA,QACpB;AAAA,QACA;AAAA,QACA,cAAc;AAAA,MAChB;AAAA,MACA,OAAO;AAAA,QACL,cAAc,mCAAmC;AAAA,QACjD,YAAY;AAAA,QACZ,WAAW;AAAA,QACX,iBAAiB;AAAA,MACnB;AAAA,IACF,CAAC;AACD,QAAI,CAAC,YAAY,GAAI,QAAO,YAAY;AAExC,UAAM,YAAY,YAAY,kBAC1B,WAAW,MAAM,EAAE,GAAG,QAAQ,GAAG,YAAY,gBAAgB,CAAC,IAC9D;AAEJ,UAAM,MAA6B;AAAA,MACjC;AAAA,MACA;AAAA,MACA;AAAA,MACA,wBAAwB,mBAAmB,cAAc,KAAK,SAAS;AAAA,MACvE,iBAAiB,mBAAmB,cAAc,KAAK,QAAQ,CAAC,KAAK,KAAK,IAAI;AAAA,MAC9E,SAAS;AAAA,IACX;AAEA,UAAM,aAAa,UAAU,QAAQ,YAAY;AACjD,UAAM,EAAE,QAAQ,SAAS,IAAI,MAAM,WAAW,QAG5C,0BAA0B,QAAQ;AAAA,MAClC,OAAO,EAAE,IAAI,UAAU,QAAQ,UAAU,OAAO;AAAA,MAChD;AAAA,IACF,CAAC;AAED,UAAM,YAAY,gBAAgB;AAElC,UAAM,WAAW,MAAM,QAAQ,QAAQ,KAAK;AAAA,MAC1C,IAAI,QAAQ,YAAY;AAAA,MACxB,QAAQ;AAAA,MACR,oBAAoB,QAAQ,sBAAsB;AAAA,IACpD,CAAC;AACD,QAAI,UAAU,MAAM,UAAU,WAAW;AACvC,eAAS,QAAQ;AAAA,QACf;AAAA,QACA,2BAA2B;AAAA,UACzB,IAAI,SAAS;AAAA;AAAA;AAAA,UAGb,WAAW;AAAA,UACX,WAAW,SAAS;AAAA,UACpB,aAAa,SAAS,eAAe;AAAA,UACrC,cAAc,SAAS,gBAAgB,mCAAmC;AAAA,UAC1E,YAAY,SAAS,cAAc;AAAA,UACnC,YAAY,SAAS,qBAAqB,OAAO,SAAS,UAAU,YAAY,IAAI;AAAA,QACtF,CAAC;AAAA,MACH;AAAA,IACF;AACA,WAAO;AAAA,EACT,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,GAAG;AACxB,aAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,IAC3D;AACA,UAAM,uBAAuB,mCAAmC,GAAG;AACnE,QAAI,sBAAsB;AACxB,aAAO,aAAa,KAAK,qBAAqB,MAAM,EAAE,QAAQ,qBAAqB,OAAO,CAAC;AAAA,IAC7F;AACA,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,QAAI,eAAe,EAAE,UAAU;AAC7B,aAAO,aAAa;AAAA,QAClB;AAAA,UACE,OAAO;AAAA,YACL;AAAA,YACA;AAAA,UACF;AAAA,UACA,SAAS,IAAI;AAAA,QACf;AAAA,QACA,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AACA,WAAO,MAAM,0CAA0C,EAAE,IAAI,CAAC;AAC9D,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,UAAU,yBAAyB,uBAAuB,EAAE;AAAA,MACrE,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAEA,MAAM,uBAAuB,EAAE,OAAO;AAAA,EACpC,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,QAAQ,EAAE,QAAQ,OAAO;AAAA,EACzB,oBAAoB,EAAE,OAAO,EAAE,IAAI;AACrC,CAAC;AAEM,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aACE;AAAA,MACF,aAAa,EAAE,aAAa,oBAAoB,QAAQ,4BAA4B,KAAK,EAAE,QAAQ,KAAK,CAAC,EAAE;AAAA,MAC3G,WAAW,CAAC,EAAE,QAAQ,KAAK,aAAa,mBAAmB,QAAQ,qBAAqB,CAAC;AAAA,MACzF,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,0BAA0B;AAAA,QACtD,EAAE,QAAQ,KAAK,aAAa,eAAe;AAAA,QAC3C,EAAE,QAAQ,KAAK,aAAa,6FAA6F;AAAA,QACzH,EAAE,QAAQ,KAAK,aAAa,qCAAqC;AAAA,QACjE,EAAE,QAAQ,KAAK,aAAa,2CAA2C;AAAA,MACzE;AAAA,IACF;AAAA,EACF;AACF;",
+  "names": []
+}