@open-mercato/core 0.7.1-develop.7178.1.ab93fbaf4e → 0.7.1-develop.7180.1.9717fbbb43

package/dist/modules/staff/api/timesheets/time-entries/copy-day/route.js

@@ -0,0 +1,378 @@
+import { NextResponse } from "next/server";
+import { resolveFeatureAccess } from "../../../../lib/time-tracking/featureAccess.js";
+import { z } from "zod";
+import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
+import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
+import { resolveOrganizationScopeForRequest } from "@open-mercato/core/modules/directory/utils/organizationScope";
+import { CrudHttpError, forbidden, isCrudHttpError } from "@open-mercato/shared/lib/crud/errors";
+import { runRouteMutationGuards } from "@open-mercato/shared/lib/crud/route-mutation-guard";
+import { resolveTranslations } from "@open-mercato/shared/lib/i18n/server";
+import { readJsonSafe } from "@open-mercato/shared/lib/http/readJsonSafe";
+import { findWithDecryption } from "@open-mercato/shared/lib/encryption/find";
+import { createLogger } from "@open-mercato/shared/lib/logger";
+import { emitStaffEvent } from "../../../../events.js";
+import { getCommandInterceptorHttpRejection } from "@open-mercato/shared/lib/commands/errors";
+import { StaffTimeEntry, StaffTimeEntryTag } from "../../../../data/entities.js";
+import { staffTimeEntryCommandIds, TIME_ENTRY_LOCKED_CODE } from "../../../../commands/timesheets-entries.js";
+import { resolveProjectAccess } from "../../../../lib/time-tracking/access.js";
+import { readTimeTrackingSettings } from "../../../../lib/time-tracking/settings.js";
+import { STAFF_TIME_TRACKING_RESOURCE_KINDS } from "../../../guards.js";
+import { runTimesheetInterceptors } from "../../_shared/withTimesheetInterceptors.js";
+const logger = createLogger("staff").child({ component: "api/timesheets/time-entries/copy-day" });
+const MANAGE_OWN_FEATURE = "staff.timesheets.manage_own";
+const MANAGE_ALL_FEATURE = "staff.timesheets.manage_all";
+const RESOURCE_KIND = STAFF_TIME_TRACKING_RESOURCE_KINDS.timeEntry;
+const COPY_DAY_TARGET_NOT_EMPTY_CODE = "copy_day_target_not_empty";
+const COPY_FAILED_REASON = "copy_failed";
+const metadata = {
+  POST: { requireAuth: true, requireFeatures: [MANAGE_OWN_FEATURE] }
+};
+const copyDayRequestSchema = z.object({
+  fromDate: z.coerce.date(),
+  toDate: z.coerce.date(),
+  /** Only a `staff.timesheets.manage_all` holder may copy somebody else's day. */
+  staffMemberId: z.string().uuid().optional(),
+  allowDuplicates: z.boolean().optional().default(false)
+});
+const copiedEntrySchema = z.object({
+  id: z.string().uuid(),
+  sourceId: z.string().uuid(),
+  date: z.string(),
+  durationMinutes: z.number(),
+  roundedMinutes: z.number().nullable(),
+  timeProjectId: z.string().uuid().nullable(),
+  taskId: z.string().uuid().nullable(),
+  isBillable: z.boolean(),
+  description: z.string().nullable(),
+  tagIds: z.array(z.string().uuid())
+});
+const skippedEntrySchema = z.object({
+  id: z.string().uuid(),
+  reason: z.string(),
+  lockedReportId: z.string().uuid().nullable(),
+  error: z.string().nullable()
+});
+const copyDayResponseSchema = z.object({
+  ok: z.literal(true),
+  fromDate: z.string(),
+  toDate: z.string(),
+  staffMemberId: z.string().uuid(),
+  copied: z.number(),
+  created: z.array(copiedEntrySchema),
+  skipped: z.array(skippedEntrySchema)
+});
+const targetNotEmptySchema = z.object({
+  code: z.literal(COPY_DAY_TARGET_NOT_EMPTY_CODE),
+  error: z.string(),
+  toDate: z.string(),
+  existingEntryCount: z.number(),
+  existingEntryIds: z.array(z.string().uuid())
+});
+function dayKey(value) {
+  if (!value) return "";
+  const date = value instanceof Date ? value : new Date(value);
+  return Number.isNaN(date.getTime()) ? String(value) : date.toISOString().slice(0, 10);
+}
+async function resolveAssignmentGraceDays(container, tenantId) {
+  try {
+    const configService = container.resolve("moduleConfigService");
+    const settings = await readTimeTrackingSettings(configService, { tenantId });
+    return settings.access.assignmentGraceDays;
+  } catch {
+    return null;
+  }
+}
+async function loadProjectAccess(container, userId, tenantId, organizationId, grantedFeatures) {
+  const em = container.resolve("em");
+  return resolveProjectAccess({
+    em: em.fork(),
+    userId,
+    tenantId,
+    organizationId,
+    userFeatures: grantedFeatures,
+    assignmentGraceDays: await resolveAssignmentGraceDays(container, tenantId)
+  });
+}
+function isTimeEntryVisible(entry, access) {
+  if (access.canManageAll) return true;
+  const projectId = entry.timeProjectId ?? null;
+  if (projectId) return access.projectIds.includes(projectId);
+  return access.staffMemberId !== null && access.staffMemberId === entry.staffMemberId;
+}
+async function loadTagIdsByEntry(em, entryIds, tenantId, organizationId) {
+  const byEntryId = /* @__PURE__ */ new Map();
+  if (entryIds.length === 0) return byEntryId;
+  const assignments = await em.find(StaffTimeEntryTag, {
+    timeEntryId: { $in: entryIds },
+    tenantId,
+    organizationId
+  });
+  for (const assignment of assignments) {
+    const list = byEntryId.get(assignment.timeEntryId) ?? [];
+    list.push(assignment.tagId);
+    byEntryId.set(assignment.timeEntryId, list);
+  }
+  return byEntryId;
+}
+async function POST(req) {
+  try {
+    const container = await createRequestContainer();
+    const auth = await getAuthFromRequest(req);
+    const { translate } = await resolveTranslations();
+    if (!auth) {
+      throw new CrudHttpError(401, { error: translate("staff.errors.unauthorized", "Unauthorized") });
+    }
+    const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req });
+    const tenantId = scope?.tenantId ?? auth.tenantId ?? null;
+    const organizationId = scope?.selectedId ?? auth.orgId ?? null;
+    if (!tenantId || !organizationId) {
+      throw new CrudHttpError(400, {
+        error: translate("staff.errors.missingScope", "Missing tenant or organization scope.")
+      });
+    }
+    const actorId = auth.sub ?? "";
+    const manageOwn = await resolveFeatureAccess(container, actorId, [MANAGE_OWN_FEATURE], { tenantId, organizationId });
+    if (!manageOwn.allowed) {
+      throw forbidden(translate("staff.errors.forbidden", "Forbidden"));
+    }
+    const grantedFeatures = manageOwn.grantedFeatures;
+    const hasManageAll = (await resolveFeatureAccess(container, actorId, [MANAGE_ALL_FEATURE], { tenantId, organizationId })).allowed;
+    const interceptors = await runTimesheetInterceptors({
+      request: req,
+      method: "POST",
+      scope: { container, userId: actorId, tenantId, organizationId, userFeatures: grantedFeatures },
+      body: await readJsonSafe(req, {})
+    });
+    if (!interceptors.ok) return interceptors.response;
+    const { session } = interceptors;
+    const parsed = copyDayRequestSchema.parse(session.body);
+    const fromDay = dayKey(parsed.fromDate);
+    const toDay = dayKey(parsed.toDate);
+    if (fromDay === toDay) {
+      throw new CrudHttpError(400, {
+        error: translate(
+          "staff.timesheets.errors.copyDaySameDate",
+          "The source and target day must be different."
+        )
+      });
+    }
+    const access = await loadProjectAccess(container, actorId || null, tenantId, organizationId, grantedFeatures);
+    if (parsed.staffMemberId && parsed.staffMemberId !== access.staffMemberId && !hasManageAll) {
+      throw forbidden(
+        translate("staff.timesheets.errors.notOwner", "You can only manage your own time entries.")
+      );
+    }
+    const staffMemberId = parsed.staffMemberId ?? access.staffMemberId;
+    if (!staffMemberId) {
+      throw new CrudHttpError(403, {
+        error: translate("staff.timesheets.errors.noStaffMember", "No staff member linked to your account.")
+      });
+    }
+    const em = container.resolve("em").fork();
+    const scopeCtx = { tenantId, organizationId };
+    const sources = (await findWithDecryption(
+      em,
+      StaffTimeEntry,
+      { tenantId, organizationId, staffMemberId, date: parsed.fromDate, deletedAt: null },
+      {},
+      scopeCtx
+    )).filter((entry) => isTimeEntryVisible(entry, access));
+    if (sources.length === 0) {
+      return session.respond(200, {
+        ok: true,
+        fromDate: fromDay,
+        toDate: toDay,
+        staffMemberId,
+        copied: 0,
+        created: [],
+        skipped: []
+      });
+    }
+    if (!parsed.allowDuplicates) {
+      const existing = await em.find(
+        StaffTimeEntry,
+        { tenantId, organizationId, staffMemberId, date: parsed.toDate, deletedAt: null },
+        { fields: ["id"] }
+      );
+      if (existing.length > 0) {
+        throw new CrudHttpError(409, {
+          code: COPY_DAY_TARGET_NOT_EMPTY_CODE,
+          error: translate(
+            "staff.timesheets.errors.copyDayTargetNotEmpty",
+            "The target day already has time entries. Review them first, or confirm to add these copies anyway."
+          ),
+          toDate: toDay,
+          existingEntryCount: existing.length,
+          existingEntryIds: existing.map((entry) => entry.id)
+        });
+      }
+    }
+    const guardResult = await runRouteMutationGuards({
+      container,
+      req,
+      auth: {
+        userId: actorId,
+        tenantId,
+        organizationId,
+        userFeatures: grantedFeatures
+      },
+      input: {
+        resourceKind: RESOURCE_KIND,
+        resourceId: staffMemberId,
+        operation: "create",
+        mutationPayload: parsed
+      }
+    });
+    if (!guardResult.ok) return guardResult.response;
+    const skipped = [];
+    const copyable = [];
+    for (const entry of sources) {
+      if (entry.lockedReportId) {
+        skipped.push({
+          id: entry.id,
+          reason: TIME_ENTRY_LOCKED_CODE,
+          lockedReportId: entry.lockedReportId,
+          error: null
+        });
+        continue;
+      }
+      copyable.push(entry);
+    }
+    const tagIdsByEntry = await loadTagIdsByEntry(em, copyable.map((entry) => entry.id), tenantId, organizationId);
+    const ctx = {
+      container,
+      auth,
+      organizationScope: scope,
+      selectedOrganizationId: scope?.selectedId ?? auth.orgId ?? null,
+      organizationIds: scope?.filterIds ?? (auth.orgId ? [auth.orgId] : null),
+      request: req
+    };
+    const commandBus = container.resolve("commandBus");
+    const copiedIdBySource = /* @__PURE__ */ new Map();
+    for (const entry of copyable) {
+      try {
+        const { result } = await commandBus.execute(
+          staffTimeEntryCommandIds.duplicate,
+          {
+            input: {
+              id: entry.id,
+              date: parsed.toDate,
+              tagIds: tagIdsByEntry.get(entry.id) ?? []
+            },
+            ctx
+          }
+        );
+        if (result?.timeEntryId) copiedIdBySource.set(entry.id, result.timeEntryId);
+      } catch (err) {
+        const interceptorRejection = getCommandInterceptorHttpRejection(err);
+        const skippedError = interceptorRejection ? String(interceptorRejection.body.error ?? "") || null : isCrudHttpError(err) ? String(err.body?.error ?? "") || null : null;
+        logger.warn("staff.timesheets.time-entries.copy-day source copy failed", { err, sourceId: entry.id });
+        skipped.push({
+          id: entry.id,
+          reason: COPY_FAILED_REASON,
+          lockedReportId: null,
+          error: skippedError
+        });
+      }
+    }
+    await guardResult.runAfterSuccess();
+    for (const [sourceId, createdId] of copiedIdBySource) {
+      void emitStaffEvent("staff.timesheets.time_entry.copied", {
+        id: createdId,
+        sourceId,
+        tenantId,
+        organizationId,
+        staffMemberId,
+        date: toDay
+      }, { persistent: true }).catch((err) => {
+        logger.error("staff.timesheets emit time_entry.copied failed", { err, sourceId });
+      });
+    }
+    const createdIds = Array.from(copiedIdBySource.values());
+    const createdRows = createdIds.length ? await findWithDecryption(
+      em.fork(),
+      StaffTimeEntry,
+      { id: { $in: createdIds }, tenantId, organizationId, deletedAt: null },
+      {},
+      scopeCtx
+    ) : [];
+    const createdRowById = new Map(createdRows.map((row) => [row.id, row]));
+    const created = Array.from(copiedIdBySource.entries()).flatMap(([sourceId, createdId]) => {
+      const row = createdRowById.get(createdId);
+      if (!row) return [];
+      return [
+        {
+          id: row.id,
+          sourceId,
+          date: dayKey(row.date),
+          durationMinutes: row.durationMinutes,
+          roundedMinutes: row.roundedMinutes ?? null,
+          timeProjectId: row.timeProjectId ?? null,
+          taskId: row.taskId ?? null,
+          isBillable: row.isBillable,
+          description: row.notes ?? null,
+          tagIds: tagIdsByEntry.get(sourceId) ?? []
+        }
+      ];
+    });
+    return session.respond(200, {
+      ok: true,
+      fromDate: fromDay,
+      toDate: toDay,
+      staffMemberId,
+      copied: created.length,
+      created,
+      skipped
+    });
+  } catch (err) {
+    if (isCrudHttpError(err)) {
+      return NextResponse.json(err.body, { status: err.status });
+    }
+    const { translate } = await resolveTranslations();
+    if (err instanceof z.ZodError) {
+      return NextResponse.json(
+        { error: translate("staff.errors.invalid_request", "Invalid request"), details: err.issues },
+        { status: 400 }
+      );
+    }
+    logger.error("staff.timesheets.time-entries.copy-day failed", { err });
+    return NextResponse.json(
+      { error: translate("staff.errors.internal", "Internal server error") },
+      { status: 500 }
+    );
+  }
+}
+const openApi = {
+  tag: "Staff",
+  summary: "Copy a day of time entries",
+  methods: {
+    POST: {
+      summary: "Copy a day of time entries",
+      description: 'US-D6, screen 1 note 5. Copies every unlocked time entry the caller owns on `fromDate` onto `toDate` as editable drafts, and returns the created rows so they can be reviewed and corrected. Which day is "the previous working day" is the caller decision \u2014 this endpoint takes explicit dates and applies no weekend or holiday rule. A source entry locked into a closed report is skipped and reported in `skipped[]` with the shared `time_entry_locked` code (nothing is written to it, so the batch is not failed). The request is refused with 409 `copy_day_target_not_empty` when the target day already holds entries, so a repeated call cannot silently double a day; pass `allowDuplicates: true` to add the copies anyway. `staffMemberId` targets another member and requires `staff.timesheets.manage_all`. Every copy is written through the duplicate command and therefore through the create command, so ownership, project access, the billable and currency defaults and the tenant rounding rule apply to it exactly as they do to a hand-made entry.',
+      requestBody: {
+        contentType: "application/json",
+        schema: copyDayRequestSchema
+      },
+      responses: [
+        { status: 200, description: "Copies created, with the skipped sources reported", schema: copyDayResponseSchema }
+      ],
+      errors: [
+        { status: 400, description: "Invalid body, missing scope, or fromDate equal to toDate" },
+        { status: 401, description: "Unauthorized" },
+        { status: 403, description: "Missing staff.timesheets.manage_own, no linked staff member, or another member day without staff.timesheets.manage_all" },
+        {
+          status: 409,
+          description: "The target day already has entries; nothing was copied",
+          schema: targetNotEmptySchema
+        }
+      ]
+    }
+  }
+};
+export {
+  COPY_DAY_TARGET_NOT_EMPTY_CODE,
+  POST,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/staff/api/timesheets/time-entries/copy-day/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../../src/modules/staff/api/timesheets/time-entries/copy-day/route.ts"],
+  "sourcesContent": ["/**\n * US-D6 \u2014 \"Kopiuj wczorajszy dzie\u0144\" (screen 1, note 5).\n *\n * The note is the design constraint: the button \"duplicates the previous working\n * day's entries **as versions to correct**\". So this endpoint is not a silent\n * commit \u2014 it answers with the entries it created, in full, so the caller can put\n * them straight in front of the user for review and adjustment rather than\n * reporting a count and leaving them to hunt for what landed.\n *\n * What \"the previous working day\" means is the CALLER's business. Weekends,\n * holidays and four-day weeks are calendar questions this module has no data for,\n * and a server-side weekend rule would be wrong for every tenant that does not\n * work Monday-to-Friday. The endpoint therefore takes two explicit days.\n *\n * Three decisions worth their reasoning:\n *\n *  1. **A locked SOURCE is skipped and reported, not fatal.** The lock protects\n *     the numbers a closed report has already billed (D-7), and a copy never\n *     writes to its source \u2014 the target day is a fresh, unlocked draft. This is\n *     what makes it different from the grid bulk save, where the rows being\n *     WRITTEN are the locked ones and the whole batch must fail. Here the caller\n *     did not hand-pick rows: they asked for a day. Failing the whole day because\n *     one of its entries sits in a closed report would break the button for\n *     exactly the people who report most regularly. Every skipped source comes\n *     back in `skipped[]` carrying the shared `time_entry_locked` code and the\n *     report that froze it, so the UI can say what was left behind.\n *  2. **Idempotency: a non-empty target day is refused.** A day of entries has no\n *     natural key to deduplicate on \u2014 two identical 30-minute stand-ups on one day\n *     are legitimate data \u2014 so a second call cannot tell a re-run from a genuine\n *     repeat, and would silently double the day into something the user cannot\n *     untangle from the grid. So the default is to refuse with `409\n *     copy_day_target_not_empty`, naming what is already there. `allowDuplicates:\n *     true` is the deliberate opt-in for the real case the refusal would\n *     otherwise block: the user already logged something today and still wants\n *     yesterday's set on top. Refusing is also what makes a partially completed\n *     run visible instead of compounding it.\n *  3. **The copy itself is the existing duplicate command, once per source.** It\n *     already resolves the source, runs the lock gate and delegates the write to\n *     the create command, so every copy inherits ownership, project access, the\n *     billable and currency defaults, rounding (D-7), tags and audit unchanged.\n *     The loop is NOT wrapped in a route-level transaction: the command bus forks\n *     its own EntityManager per command, so an outer `em.transactional` would\n *     enclose nothing and the atomicity would be a fiction. Each copy is atomic in\n *     itself; a copy that fails is reported in `skipped[]` and the rest still\n *     land, which is the behaviour a day of drafts wants.\n */\n\nimport { NextResponse } from 'next/server'\nimport { resolveFeatureAccess } from '../../../../lib/time-tracking/featureAccess'\nimport { z } from 'zod'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { CrudHttpError, forbidden, isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { runRouteMutationGuards } from '@open-mercato/shared/lib/crud/route-mutation-guard'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { readJsonSafe } from '@open-mercato/shared/lib/http/readJsonSafe'\nimport { findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport { emitStaffEvent } from '../../../../events'\nimport type { CommandBus, CommandRuntimeContext } from '@open-mercato/shared/lib/commands'\nimport { getCommandInterceptorHttpRejection } from '@open-mercato/shared/lib/commands/errors'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport type { ModuleConfigService } from '@open-mercato/core/modules/configs/lib/module-config-service'\nimport { StaffTimeEntry, StaffTimeEntryTag } from '../../../../data/entities'\nimport { staffTimeEntryCommandIds, TIME_ENTRY_LOCKED_CODE } from '../../../../commands/timesheets-entries'\nimport { resolveProjectAccess, type ProjectAccess } from '../../../../lib/time-tracking/access'\nimport { readTimeTrackingSettings } from '../../../../lib/time-tracking/settings'\nimport { STAFF_TIME_TRACKING_RESOURCE_KINDS } from '../../../guards'\nimport { runTimesheetInterceptors } from '../../_shared/withTimesheetInterceptors'\n\nconst logger = createLogger('staff').child({ component: 'api/timesheets/time-entries/copy-day' })\n\nconst MANAGE_OWN_FEATURE = 'staff.timesheets.manage_own'\nconst MANAGE_ALL_FEATURE = 'staff.timesheets.manage_all'\nconst RESOURCE_KIND = STAFF_TIME_TRACKING_RESOURCE_KINDS.timeEntry\n\n/** The 409 a second \"copy yesterday\" click gets, rather than a doubled day. */\nexport const COPY_DAY_TARGET_NOT_EMPTY_CODE = 'copy_day_target_not_empty'\n\n/** Reason codes on `skipped[]`. The locked one is the shared code, not a second spelling of it. */\nconst COPY_FAILED_REASON = 'copy_failed'\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: [MANAGE_OWN_FEATURE] },\n}\n\nconst copyDayRequestSchema = z.object({\n  fromDate: z.coerce.date(),\n  toDate: z.coerce.date(),\n  /** Only a `staff.timesheets.manage_all` holder may copy somebody else's day. */\n  staffMemberId: z.string().uuid().optional(),\n  allowDuplicates: z.boolean().optional().default(false),\n})\n\nconst copiedEntrySchema = z.object({\n  id: z.string().uuid(),\n  sourceId: z.string().uuid(),\n  date: z.string(),\n  durationMinutes: z.number(),\n  roundedMinutes: z.number().nullable(),\n  timeProjectId: z.string().uuid().nullable(),\n  taskId: z.string().uuid().nullable(),\n  isBillable: z.boolean(),\n  description: z.string().nullable(),\n  tagIds: z.array(z.string().uuid()),\n})\n\nconst skippedEntrySchema = z.object({\n  id: z.string().uuid(),\n  reason: z.string(),\n  lockedReportId: z.string().uuid().nullable(),\n  error: z.string().nullable(),\n})\n\nconst copyDayResponseSchema = z.object({\n  ok: z.literal(true),\n  fromDate: z.string(),\n  toDate: z.string(),\n  staffMemberId: z.string().uuid(),\n  copied: z.number(),\n  created: z.array(copiedEntrySchema),\n  skipped: z.array(skippedEntrySchema),\n})\n\nconst targetNotEmptySchema = z.object({\n  code: z.literal(COPY_DAY_TARGET_NOT_EMPTY_CODE),\n  error: z.string(),\n  toDate: z.string(),\n  existingEntryCount: z.number(),\n  existingEntryIds: z.array(z.string().uuid()),\n})\n\ntype ContainerLike = { resolve: (name: string) => unknown }\n\ntype SkippedSource = {\n  id: string\n  reason: string\n  lockedReportId: string | null\n  error: string | null\n}\n\n/**\n * A day is addressed by its calendar day, never by a timestamp (D-8), so both the\n * request echo and the copied rows collapse to `YYYY-MM-DD`.\n */\nfunction dayKey(value: Date | string | null | undefined): string {\n  if (!value) return ''\n  const date = value instanceof Date ? value : new Date(value)\n  return Number.isNaN(date.getTime()) ? String(value) : date.toISOString().slice(0, 10)\n}\n\nasync function resolveAssignmentGraceDays(container: ContainerLike, tenantId: string): Promise<number | null> {\n  try {\n    const configService = container.resolve('moduleConfigService') as ModuleConfigService\n    const settings = await readTimeTrackingSettings(configService, { tenantId })\n    return settings.access.assignmentGraceDays\n  } catch {\n    // Fail safe to the documented default rather than widening the window.\n    return null\n  }\n}\n\nasync function loadProjectAccess(\n  container: ContainerLike,\n  userId: string | null,\n  tenantId: string,\n  organizationId: string,\n  grantedFeatures: readonly string[],\n): Promise<ProjectAccess> {\n  const em = container.resolve('em') as EntityManager\n  return resolveProjectAccess({\n    em: em.fork(),\n    userId,\n    tenantId,\n    organizationId,\n    userFeatures: grantedFeatures,\n    assignmentGraceDays: await resolveAssignmentGraceDays(container, tenantId),\n  })\n}\n\n/**\n * The per-row form of the list route's `$or` intersection: an entry on a project\n * is visible to the members of that project, and a project-less entry is visible\n * only to the member who logged it. A manager copying somebody else's day still\n * only copies the part of it their own project access covers.\n */\nfunction isTimeEntryVisible(\n  entry: { staffMemberId: string; timeProjectId?: string | null },\n  access: ProjectAccess,\n): boolean {\n  if (access.canManageAll) return true\n  const projectId = entry.timeProjectId ?? null\n  if (projectId) return access.projectIds.includes(projectId)\n  return access.staffMemberId !== null && access.staffMemberId === entry.staffMemberId\n}\n\nasync function loadTagIdsByEntry(\n  em: EntityManager,\n  entryIds: string[],\n  tenantId: string,\n  organizationId: string,\n): Promise<Map<string, string[]>> {\n  const byEntryId = new Map<string, string[]>()\n  if (entryIds.length === 0) return byEntryId\n  const assignments = await em.find(StaffTimeEntryTag, {\n    timeEntryId: { $in: entryIds },\n    tenantId,\n    organizationId,\n  })\n  for (const assignment of assignments) {\n    const list = byEntryId.get(assignment.timeEntryId) ?? []\n    list.push(assignment.tagId)\n    byEntryId.set(assignment.timeEntryId, list)\n  }\n  return byEntryId\n}\n\nexport async function POST(req: Request) {\n  try {\n    const container = await createRequestContainer()\n    const auth = await getAuthFromRequest(req)\n    const { translate } = await resolveTranslations()\n    if (!auth) {\n      throw new CrudHttpError(401, { error: translate('staff.errors.unauthorized', 'Unauthorized') })\n    }\n\n    const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n    const tenantId = scope?.tenantId ?? auth.tenantId ?? null\n    const organizationId = scope?.selectedId ?? auth.orgId ?? null\n    if (!tenantId || !organizationId) {\n      throw new CrudHttpError(400, {\n        error: translate('staff.errors.missingScope', 'Missing tenant or organization scope.'),\n      })\n    }\n\n    const actorId = auth.sub ?? ''\n    // Both decisions come from the module's single RBAC authority, which asks the\n    // service and fails closed on every path. The nullable grant array they were\n    // matched against could not say whether an empty answer meant \"no grants\" or\n    // \"could not ask\", and `grantedFeatures ? \u2026 : false` silently answered the\n    // second as the first.\n    const manageOwn = await resolveFeatureAccess(container, actorId, [MANAGE_OWN_FEATURE], { tenantId, organizationId })\n    if (!manageOwn.allowed) {\n      throw forbidden(translate('staff.errors.forbidden', 'Forbidden'))\n    }\n    const grantedFeatures = manageOwn.grantedFeatures\n    const hasManageAll = (\n      await resolveFeatureAccess(container, actorId, [MANAGE_ALL_FEATURE], { tenantId, organizationId })\n    ).allowed\n\n    const interceptors = await runTimesheetInterceptors({\n      request: req,\n      method: 'POST',\n      scope: { container, userId: actorId, tenantId, organizationId, userFeatures: grantedFeatures },\n      body: await readJsonSafe<Record<string, unknown>>(req, {}),\n    })\n    if (!interceptors.ok) return interceptors.response\n    const { session } = interceptors\n\n    const parsed = copyDayRequestSchema.parse(session.body)\n    const fromDay = dayKey(parsed.fromDate)\n    const toDay = dayKey(parsed.toDate)\n    if (fromDay === toDay) {\n      // Copying a day onto itself is always a mistake, never intent, and\n      // `allowDuplicates` would turn it into a silent doubling.\n      throw new CrudHttpError(400, {\n        error: translate(\n          'staff.timesheets.errors.copyDaySameDate',\n          'The source and target day must be different.',\n        ),\n      })\n    }\n\n    const access = await loadProjectAccess(container, actorId || null, tenantId, organizationId, grantedFeatures)\n    // Ownership: the copies are attributed by the create command, which silently\n    // files them under the caller unless they hold `staff.timesheets.manage_all`.\n    // Refusing here rather than letting that happen keeps a projects-manager from\n    // asking for a colleague's day and quietly receiving it under their own name.\n    if (parsed.staffMemberId && parsed.staffMemberId !== access.staffMemberId && !hasManageAll) {\n      throw forbidden(\n        translate('staff.timesheets.errors.notOwner', 'You can only manage your own time entries.'),\n      )\n    }\n    const staffMemberId = parsed.staffMemberId ?? access.staffMemberId\n    if (!staffMemberId) {\n      throw new CrudHttpError(403, {\n        error: translate('staff.timesheets.errors.noStaffMember', 'No staff member linked to your account.'),\n      })\n    }\n\n    const em = (container.resolve('em') as EntityManager).fork()\n    const scopeCtx = { tenantId, organizationId }\n\n    const sources = (\n      await findWithDecryption(\n        em,\n        StaffTimeEntry,\n        { tenantId, organizationId, staffMemberId, date: parsed.fromDate, deletedAt: null },\n        {},\n        scopeCtx,\n      )\n    ).filter((entry) => isTimeEntryVisible(entry, access))\n\n    if (sources.length === 0) {\n      return session.respond(200, {\n        ok: true,\n        fromDate: fromDay,\n        toDate: toDay,\n        staffMemberId,\n        copied: 0,\n        created: [],\n        skipped: [],\n      })\n    }\n\n    if (!parsed.allowDuplicates) {\n      const existing = await em.find(\n        StaffTimeEntry,\n        { tenantId, organizationId, staffMemberId, date: parsed.toDate, deletedAt: null },\n        { fields: ['id'] },\n      )\n      if (existing.length > 0) {\n        throw new CrudHttpError(409, {\n          code: COPY_DAY_TARGET_NOT_EMPTY_CODE,\n          error: translate(\n            'staff.timesheets.errors.copyDayTargetNotEmpty',\n            'The target day already has time entries. Review them first, or confirm to add these copies anyway.',\n          ),\n          toDate: toDay,\n          existingEntryCount: existing.length,\n          existingEntryIds: existing.map((entry) => entry.id),\n        })\n      }\n    }\n\n    const guardResult = await runRouteMutationGuards({\n      container,\n      req,\n      auth: {\n        userId: actorId,\n        tenantId,\n        organizationId,\n        userFeatures: grantedFeatures,\n      },\n      input: {\n        resourceKind: RESOURCE_KIND,\n        resourceId: staffMemberId,\n        operation: 'create',\n        mutationPayload: parsed,\n      },\n    })\n    if (!guardResult.ok) return guardResult.response\n\n    const skipped: SkippedSource[] = []\n    const copyable: StaffTimeEntry[] = []\n    for (const entry of sources) {\n      if (entry.lockedReportId) {\n        skipped.push({\n          id: entry.id,\n          reason: TIME_ENTRY_LOCKED_CODE,\n          lockedReportId: entry.lockedReportId,\n          error: null,\n        })\n        continue\n      }\n      copyable.push(entry)\n    }\n\n    // Tags are read here rather than inside the command: the command writes tags\n    // only through the tag commands and never touches `staff_time_entry_tags`, so\n    // \u2014 exactly as with the single-entry duplicate, where the client supplies the\n    // `tags[]` it already holds \u2014 the caller of the command supplies them.\n    const tagIdsByEntry = await loadTagIdsByEntry(em, copyable.map((entry) => entry.id), tenantId, organizationId)\n\n    const ctx: CommandRuntimeContext = {\n      container,\n      auth,\n      organizationScope: scope,\n      selectedOrganizationId: scope?.selectedId ?? auth.orgId ?? null,\n      organizationIds: scope?.filterIds ?? (auth.orgId ? [auth.orgId] : null),\n      request: req,\n    }\n    const commandBus = container.resolve('commandBus') as CommandBus\n\n    const copiedIdBySource = new Map<string, string>()\n    for (const entry of copyable) {\n      try {\n        const { result } = await commandBus.execute<unknown, { timeEntryId: string }>(\n          staffTimeEntryCommandIds.duplicate,\n          {\n            input: {\n              id: entry.id,\n              date: parsed.toDate,\n              tagIds: tagIdsByEntry.get(entry.id) ?? [],\n            },\n            ctx,\n          },\n        )\n        if (result?.timeEntryId) copiedIdBySource.set(entry.id, result.timeEntryId)\n      } catch (err) {\n        // A source can stop being copyable between the read and the write \u2014 its\n        // project soft-deleted, say. The day is a set of drafts, so one source\n        // that cannot be copied is reported beside the locked ones instead of\n        // discarding the copies that already landed.\n        //\n        // A command interceptor that refuses one source with an explicit status is\n        // that same per-source refusal, so it is reported here rather than in the\n        // route-level catch: this is the clause the rejection actually reaches, and\n        // aborting the day from it would strand the copies already committed. The\n        // batch contract carries no per-item status, so the interceptor's message\n        // travels on the skipped row instead of degrading to `null`.\n        const interceptorRejection = getCommandInterceptorHttpRejection(err)\n        const skippedError = interceptorRejection\n          ? String(interceptorRejection.body.error ?? '') || null\n          : isCrudHttpError(err)\n            ? String((err.body as { error?: unknown })?.error ?? '') || null\n            : null\n        logger.warn('staff.timesheets.time-entries.copy-day source copy failed', { err, sourceId: entry.id })\n        skipped.push({\n          id: entry.id,\n          reason: COPY_FAILED_REASON,\n          lockedReportId: null,\n          error: skippedError,\n        })\n      }\n    }\n\n    await guardResult.runAfterSuccess()\n\n    for (const [sourceId, createdId] of copiedIdBySource) {\n      void emitStaffEvent('staff.timesheets.time_entry.copied', {\n        id: createdId,\n        sourceId,\n        tenantId,\n        organizationId,\n        staffMemberId,\n        date: toDay,\n      }, { persistent: true }).catch((err) => {\n        logger.error('staff.timesheets emit time_entry.copied failed', { err, sourceId })\n      })\n    }\n\n    // Screen 1 note 5: these are drafts to correct, so the response carries the\n    // rows themselves rather than a count the UI would have to go and re-fetch.\n    const createdIds = Array.from(copiedIdBySource.values())\n    const createdRows = createdIds.length\n      ? await findWithDecryption(\n          em.fork(),\n          StaffTimeEntry,\n          { id: { $in: createdIds }, tenantId, organizationId, deletedAt: null },\n          {},\n          scopeCtx,\n        )\n      : []\n    const createdRowById = new Map(createdRows.map((row) => [row.id, row]))\n\n    const created = Array.from(copiedIdBySource.entries()).flatMap(([sourceId, createdId]) => {\n      const row = createdRowById.get(createdId)\n      if (!row) return []\n      return [\n        {\n          id: row.id,\n          sourceId,\n          date: dayKey(row.date),\n          durationMinutes: row.durationMinutes,\n          roundedMinutes: row.roundedMinutes ?? null,\n          timeProjectId: row.timeProjectId ?? null,\n          taskId: row.taskId ?? null,\n          isBillable: row.isBillable,\n          description: row.notes ?? null,\n          tagIds: tagIdsByEntry.get(sourceId) ?? [],\n        },\n      ]\n    })\n\n    return session.respond(200, {\n      ok: true,\n      fromDate: fromDay,\n      toDate: toDay,\n      staffMemberId,\n      copied: created.length,\n      created,\n      skipped,\n    })\n  } catch (err) {\n    if (isCrudHttpError(err)) {\n      return NextResponse.json(err.body, { status: err.status })\n    }\n    const { translate } = await resolveTranslations()\n    if (err instanceof z.ZodError) {\n      return NextResponse.json(\n        { error: translate('staff.errors.invalid_request', 'Invalid request'), details: err.issues },\n        { status: 400 },\n      )\n    }\n    logger.error('staff.timesheets.time-entries.copy-day failed', { err })\n    return NextResponse.json(\n      { error: translate('staff.errors.internal', 'Internal server error') },\n      { status: 500 },\n    )\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Staff',\n  summary: 'Copy a day of time entries',\n  methods: {\n    POST: {\n      summary: 'Copy a day of time entries',\n      description:\n        'US-D6, screen 1 note 5. Copies every unlocked time entry the caller owns on `fromDate` onto `toDate` as editable drafts, and returns the created rows so they can be reviewed and corrected. Which day is \"the previous working day\" is the caller decision \u2014 this endpoint takes explicit dates and applies no weekend or holiday rule. A source entry locked into a closed report is skipped and reported in `skipped[]` with the shared `time_entry_locked` code (nothing is written to it, so the batch is not failed). The request is refused with 409 `copy_day_target_not_empty` when the target day already holds entries, so a repeated call cannot silently double a day; pass `allowDuplicates: true` to add the copies anyway. `staffMemberId` targets another member and requires `staff.timesheets.manage_all`. Every copy is written through the duplicate command and therefore through the create command, so ownership, project access, the billable and currency defaults and the tenant rounding rule apply to it exactly as they do to a hand-made entry.',\n      requestBody: {\n        contentType: 'application/json',\n        schema: copyDayRequestSchema,\n      },\n      responses: [\n        { status: 200, description: 'Copies created, with the skipped sources reported', schema: copyDayResponseSchema },\n      ],\n      errors: [\n        { status: 400, description: 'Invalid body, missing scope, or fromDate equal to toDate' },\n        { status: 401, description: 'Unauthorized' },\n        { status: 403, description: 'Missing staff.timesheets.manage_own, no linked staff member, or another member day without staff.timesheets.manage_all' },\n        {\n          status: 409,\n          description: 'The target day already has entries; nothing was copied',\n          schema: targetNotEmptySchema,\n        },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AA+CA,SAAS,oBAAoB;AAC7B,SAAS,4BAA4B;AACrC,SAAS,SAAS;AAElB,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AACnD,SAAS,eAAe,WAAW,uBAAuB;AAC1D,SAAS,8BAA8B;AACvC,SAAS,2BAA2B;AACpC,SAAS,oBAAoB;AAC7B,SAAS,0BAA0B;AACnC,SAAS,oBAAoB;AAC7B,SAAS,sBAAsB;AAE/B,SAAS,0CAA0C;AAGnD,SAAS,gBAAgB,yBAAyB;AAClD,SAAS,0BAA0B,8BAA8B;AACjE,SAAS,4BAAgD;AACzD,SAAS,gCAAgC;AACzC,SAAS,0CAA0C;AACnD,SAAS,gCAAgC;AAEzC,MAAM,SAAS,aAAa,OAAO,EAAE,MAAM,EAAE,WAAW,uCAAuC,CAAC;AAEhG,MAAM,qBAAqB;AAC3B,MAAM,qBAAqB;AAC3B,MAAM,gBAAgB,mCAAmC;AAGlD,MAAM,iCAAiC;AAG9C,MAAM,qBAAqB;AAEpB,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,kBAAkB,EAAE;AACnE;AAEA,MAAM,uBAAuB,EAAE,OAAO;AAAA,EACpC,UAAU,EAAE,OAAO,KAAK;AAAA,EACxB,QAAQ,EAAE,OAAO,KAAK;AAAA;AAAA,EAEtB,eAAe,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC1C,iBAAiB,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,KAAK;AACvD,CAAC;AAED,MAAM,oBAAoB,EAAE,OAAO;AAAA,EACjC,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,UAAU,EAAE,OAAO,EAAE,KAAK;AAAA,EAC1B,MAAM,EAAE,OAAO;AAAA,EACf,iBAAiB,EAAE,OAAO;AAAA,EAC1B,gBAAgB,EAAE,OAAO,EAAE,SAAS;AAAA,EACpC,eAAe,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC1C,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACnC,YAAY,EAAE,QAAQ;AAAA,EACtB,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,EACjC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC;AACnC,CAAC;AAED,MAAM,qBAAqB,EAAE,OAAO;AAAA,EAClC,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,QAAQ,EAAE,OAAO;AAAA,EACjB,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC3C,OAAO,EAAE,OAAO,EAAE,SAAS;AAC7B,CAAC;AAED,MAAM,wBAAwB,EAAE,OAAO;AAAA,EACrC,IAAI,EAAE,QAAQ,IAAI;AAAA,EAClB,UAAU,EAAE,OAAO;AAAA,EACnB,QAAQ,EAAE,OAAO;AAAA,EACjB,eAAe,EAAE,OAAO,EAAE,KAAK;AAAA,EAC/B,QAAQ,EAAE,OAAO;AAAA,EACjB,SAAS,EAAE,MAAM,iBAAiB;AAAA,EAClC,SAAS,EAAE,MAAM,kBAAkB;AACrC,CAAC;AAED,MAAM,uBAAuB,EAAE,OAAO;AAAA,EACpC,MAAM,EAAE,QAAQ,8BAA8B;AAAA,EAC9C,OAAO,EAAE,OAAO;AAAA,EAChB,QAAQ,EAAE,OAAO;AAAA,EACjB,oBAAoB,EAAE,OAAO;AAAA,EAC7B,kBAAkB,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC;AAC7C,CAAC;AAeD,SAAS,OAAO,OAAiD;AAC/D,MAAI,CAAC,MAAO,QAAO;AACnB,QAAM,OAAO,iBAAiB,OAAO,QAAQ,IAAI,KAAK,KAAK;AAC3D,SAAO,OAAO,MAAM,KAAK,QAAQ,CAAC,IAAI,OAAO,KAAK,IAAI,KAAK,YAAY,EAAE,MAAM,GAAG,EAAE;AACtF;AAEA,eAAe,2BAA2B,WAA0B,UAA0C;AAC5G,MAAI;AACF,UAAM,gBAAgB,UAAU,QAAQ,qBAAqB;AAC7D,UAAM,WAAW,MAAM,yBAAyB,eAAe,EAAE,SAAS,CAAC;AAC3E,WAAO,SAAS,OAAO;AAAA,EACzB,QAAQ;AAEN,WAAO;AAAA,EACT;AACF;AAEA,eAAe,kBACb,WACA,QACA,UACA,gBACA,iBACwB;AACxB,QAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,SAAO,qBAAqB;AAAA,IAC1B,IAAI,GAAG,KAAK;AAAA,IACZ;AAAA,IACA;AAAA,IACA;AAAA,IACA,cAAc;AAAA,IACd,qBAAqB,MAAM,2BAA2B,WAAW,QAAQ;AAAA,EAC3E,CAAC;AACH;AAQA,SAAS,mBACP,OACA,QACS;AACT,MAAI,OAAO,aAAc,QAAO;AAChC,QAAM,YAAY,MAAM,iBAAiB;AACzC,MAAI,UAAW,QAAO,OAAO,WAAW,SAAS,SAAS;AAC1D,SAAO,OAAO,kBAAkB,QAAQ,OAAO,kBAAkB,MAAM;AACzE;AAEA,eAAe,kBACb,IACA,UACA,UACA,gBACgC;AAChC,QAAM,YAAY,oBAAI,IAAsB;AAC5C,MAAI,SAAS,WAAW,EAAG,QAAO;AAClC,QAAM,cAAc,MAAM,GAAG,KAAK,mBAAmB;AAAA,IACnD,aAAa,EAAE,KAAK,SAAS;AAAA,IAC7B;AAAA,IACA;AAAA,EACF,CAAC;AACD,aAAW,cAAc,aAAa;AACpC,UAAM,OAAO,UAAU,IAAI,WAAW,WAAW,KAAK,CAAC;AACvD,SAAK,KAAK,WAAW,KAAK;AAC1B,cAAU,IAAI,WAAW,aAAa,IAAI;AAAA,EAC5C;AACA,SAAO;AACT;AAEA,eAAsB,KAAK,KAAc;AACvC,MAAI;AACF,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,QAAI,CAAC,MAAM;AACT,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,6BAA6B,cAAc,EAAE,CAAC;AAAA,IAChG;AAEA,UAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AACxF,UAAM,WAAW,OAAO,YAAY,KAAK,YAAY;AACrD,UAAM,iBAAiB,OAAO,cAAc,KAAK,SAAS;AAC1D,QAAI,CAAC,YAAY,CAAC,gBAAgB;AAChC,YAAM,IAAI,cAAc,KAAK;AAAA,QAC3B,OAAO,UAAU,6BAA6B,uCAAuC;AAAA,MACvF,CAAC;AAAA,IACH;AAEA,UAAM,UAAU,KAAK,OAAO;AAM5B,UAAM,YAAY,MAAM,qBAAqB,WAAW,SAAS,CAAC,kBAAkB,GAAG,EAAE,UAAU,eAAe,CAAC;AACnH,QAAI,CAAC,UAAU,SAAS;AACtB,YAAM,UAAU,UAAU,0BAA0B,WAAW,CAAC;AAAA,IAClE;AACA,UAAM,kBAAkB,UAAU;AAClC,UAAM,gBACJ,MAAM,qBAAqB,WAAW,SAAS,CAAC,kBAAkB,GAAG,EAAE,UAAU,eAAe,CAAC,GACjG;AAEF,UAAM,eAAe,MAAM,yBAAyB;AAAA,MAClD,SAAS;AAAA,MACT,QAAQ;AAAA,MACR,OAAO,EAAE,WAAW,QAAQ,SAAS,UAAU,gBAAgB,cAAc,gBAAgB;AAAA,MAC7F,MAAM,MAAM,aAAsC,KAAK,CAAC,CAAC;AAAA,IAC3D,CAAC;AACD,QAAI,CAAC,aAAa,GAAI,QAAO,aAAa;AAC1C,UAAM,EAAE,QAAQ,IAAI;AAEpB,UAAM,SAAS,qBAAqB,MAAM,QAAQ,IAAI;AACtD,UAAM,UAAU,OAAO,OAAO,QAAQ;AACtC,UAAM,QAAQ,OAAO,OAAO,MAAM;AAClC,QAAI,YAAY,OAAO;AAGrB,YAAM,IAAI,cAAc,KAAK;AAAA,QAC3B,OAAO;AAAA,UACL;AAAA,UACA;AAAA,QACF;AAAA,MACF,CAAC;AAAA,IACH;AAEA,UAAM,SAAS,MAAM,kBAAkB,WAAW,WAAW,MAAM,UAAU,gBAAgB,eAAe;AAK5G,QAAI,OAAO,iBAAiB,OAAO,kBAAkB,OAAO,iBAAiB,CAAC,cAAc;AAC1F,YAAM;AAAA,QACJ,UAAU,oCAAoC,4CAA4C;AAAA,MAC5F;AAAA,IACF;AACA,UAAM,gBAAgB,OAAO,iBAAiB,OAAO;AACrD,QAAI,CAAC,eAAe;AAClB,YAAM,IAAI,cAAc,KAAK;AAAA,QAC3B,OAAO,UAAU,yCAAyC,yCAAyC;AAAA,MACrG,CAAC;AAAA,IACH;AAEA,UAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC3D,UAAM,WAAW,EAAE,UAAU,eAAe;AAE5C,UAAM,WACJ,MAAM;AAAA,MACJ;AAAA,MACA;AAAA,MACA,EAAE,UAAU,gBAAgB,eAAe,MAAM,OAAO,UAAU,WAAW,KAAK;AAAA,MAClF,CAAC;AAAA,MACD;AAAA,IACF,GACA,OAAO,CAAC,UAAU,mBAAmB,OAAO,MAAM,CAAC;AAErD,QAAI,QAAQ,WAAW,GAAG;AACxB,aAAO,QAAQ,QAAQ,KAAK;AAAA,QAC1B,IAAI;AAAA,QACJ,UAAU;AAAA,QACV,QAAQ;AAAA,QACR;AAAA,QACA,QAAQ;AAAA,QACR,SAAS,CAAC;AAAA,QACV,SAAS,CAAC;AAAA,MACZ,CAAC;AAAA,IACH;AAEA,QAAI,CAAC,OAAO,iBAAiB;AAC3B,YAAM,WAAW,MAAM,GAAG;AAAA,QACxB;AAAA,QACA,EAAE,UAAU,gBAAgB,eAAe,MAAM,OAAO,QAAQ,WAAW,KAAK;AAAA,QAChF,EAAE,QAAQ,CAAC,IAAI,EAAE;AAAA,MACnB;AACA,UAAI,SAAS,SAAS,GAAG;AACvB,cAAM,IAAI,cAAc,KAAK;AAAA,UAC3B,MAAM;AAAA,UACN,OAAO;AAAA,YACL;AAAA,YACA;AAAA,UACF;AAAA,UACA,QAAQ;AAAA,UACR,oBAAoB,SAAS;AAAA,UAC7B,kBAAkB,SAAS,IAAI,CAAC,UAAU,MAAM,EAAE;AAAA,QACpD,CAAC;AAAA,MACH;AAAA,IACF;AAEA,UAAM,cAAc,MAAM,uBAAuB;AAAA,MAC/C;AAAA,MACA;AAAA,MACA,MAAM;AAAA,QACJ,QAAQ;AAAA,QACR;AAAA,QACA;AAAA,QACA,cAAc;AAAA,MAChB;AAAA,MACA,OAAO;AAAA,QACL,cAAc;AAAA,QACd,YAAY;AAAA,QACZ,WAAW;AAAA,QACX,iBAAiB;AAAA,MACnB;AAAA,IACF,CAAC;AACD,QAAI,CAAC,YAAY,GAAI,QAAO,YAAY;AAExC,UAAM,UAA2B,CAAC;AAClC,UAAM,WAA6B,CAAC;AACpC,eAAW,SAAS,SAAS;AAC3B,UAAI,MAAM,gBAAgB;AACxB,gBAAQ,KAAK;AAAA,UACX,IAAI,MAAM;AAAA,UACV,QAAQ;AAAA,UACR,gBAAgB,MAAM;AAAA,UACtB,OAAO;AAAA,QACT,CAAC;AACD;AAAA,MACF;AACA,eAAS,KAAK,KAAK;AAAA,IACrB;AAMA,UAAM,gBAAgB,MAAM,kBAAkB,IAAI,SAAS,IAAI,CAAC,UAAU,MAAM,EAAE,GAAG,UAAU,cAAc;AAE7G,UAAM,MAA6B;AAAA,MACjC;AAAA,MACA;AAAA,MACA,mBAAmB;AAAA,MACnB,wBAAwB,OAAO,cAAc,KAAK,SAAS;AAAA,MAC3D,iBAAiB,OAAO,cAAc,KAAK,QAAQ,CAAC,KAAK,KAAK,IAAI;AAAA,MAClE,SAAS;AAAA,IACX;AACA,UAAM,aAAa,UAAU,QAAQ,YAAY;AAEjD,UAAM,mBAAmB,oBAAI,IAAoB;AACjD,eAAW,SAAS,UAAU;AAC5B,UAAI;AACF,cAAM,EAAE,OAAO,IAAI,MAAM,WAAW;AAAA,UAClC,yBAAyB;AAAA,UACzB;AAAA,YACE,OAAO;AAAA,cACL,IAAI,MAAM;AAAA,cACV,MAAM,OAAO;AAAA,cACb,QAAQ,cAAc,IAAI,MAAM,EAAE,KAAK,CAAC;AAAA,YAC1C;AAAA,YACA;AAAA,UACF;AAAA,QACF;AACA,YAAI,QAAQ,YAAa,kBAAiB,IAAI,MAAM,IAAI,OAAO,WAAW;AAAA,MAC5E,SAAS,KAAK;AAYZ,cAAM,uBAAuB,mCAAmC,GAAG;AACnE,cAAM,eAAe,uBACjB,OAAO,qBAAqB,KAAK,SAAS,EAAE,KAAK,OACjD,gBAAgB,GAAG,IACjB,OAAQ,IAAI,MAA8B,SAAS,EAAE,KAAK,OAC1D;AACN,eAAO,KAAK,6DAA6D,EAAE,KAAK,UAAU,MAAM,GAAG,CAAC;AACpG,gBAAQ,KAAK;AAAA,UACX,IAAI,MAAM;AAAA,UACV,QAAQ;AAAA,UACR,gBAAgB;AAAA,UAChB,OAAO;AAAA,QACT,CAAC;AAAA,MACH;AAAA,IACF;AAEA,UAAM,YAAY,gBAAgB;AAElC,eAAW,CAAC,UAAU,SAAS,KAAK,kBAAkB;AACpD,WAAK,eAAe,sCAAsC;AAAA,QACxD,IAAI;AAAA,QACJ;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA,MAAM;AAAA,MACR,GAAG,EAAE,YAAY,KAAK,CAAC,EAAE,MAAM,CAAC,QAAQ;AACtC,eAAO,MAAM,kDAAkD,EAAE,KAAK,SAAS,CAAC;AAAA,MAClF,CAAC;AAAA,IACH;AAIA,UAAM,aAAa,MAAM,KAAK,iBAAiB,OAAO,CAAC;AACvD,UAAM,cAAc,WAAW,SAC3B,MAAM;AAAA,MACJ,GAAG,KAAK;AAAA,MACR;AAAA,MACA,EAAE,IAAI,EAAE,KAAK,WAAW,GAAG,UAAU,gBAAgB,WAAW,KAAK;AAAA,MACrE,CAAC;AAAA,MACD;AAAA,IACF,IACA,CAAC;AACL,UAAM,iBAAiB,IAAI,IAAI,YAAY,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC;AAEtE,UAAM,UAAU,MAAM,KAAK,iBAAiB,QAAQ,CAAC,EAAE,QAAQ,CAAC,CAAC,UAAU,SAAS,MAAM;AACxF,YAAM,MAAM,eAAe,IAAI,SAAS;AACxC,UAAI,CAAC,IAAK,QAAO,CAAC;AAClB,aAAO;AAAA,QACL;AAAA,UACE,IAAI,IAAI;AAAA,UACR;AAAA,UACA,MAAM,OAAO,IAAI,IAAI;AAAA,UACrB,iBAAiB,IAAI;AAAA,UACrB,gBAAgB,IAAI,kBAAkB;AAAA,UACtC,eAAe,IAAI,iBAAiB;AAAA,UACpC,QAAQ,IAAI,UAAU;AAAA,UACtB,YAAY,IAAI;AAAA,UAChB,aAAa,IAAI,SAAS;AAAA,UAC1B,QAAQ,cAAc,IAAI,QAAQ,KAAK,CAAC;AAAA,QAC1C;AAAA,MACF;AAAA,IACF,CAAC;AAED,WAAO,QAAQ,QAAQ,KAAK;AAAA,MAC1B,IAAI;AAAA,MACJ,UAAU;AAAA,MACV,QAAQ;AAAA,MACR;AAAA,MACA,QAAQ,QAAQ;AAAA,MAChB;AAAA,MACA;AAAA,IACF,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,GAAG;AACxB,aAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,IAC3D;AACA,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,QAAI,eAAe,EAAE,UAAU;AAC7B,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,UAAU,gCAAgC,iBAAiB,GAAG,SAAS,IAAI,OAAO;AAAA,QAC3F,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AACA,WAAO,MAAM,iDAAiD,EAAE,IAAI,CAAC;AACrE,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,UAAU,yBAAyB,uBAAuB,EAAE;AAAA,MACrE,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aACE;AAAA,MACF,aAAa;AAAA,QACX,aAAa;AAAA,QACb,QAAQ;AAAA,MACV;AAAA,MACA,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,qDAAqD,QAAQ,sBAAsB;AAAA,MACjH;AAAA,MACA,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,2DAA2D;AAAA,QACvF,EAAE,QAAQ,KAAK,aAAa,eAAe;AAAA,QAC3C,EAAE,QAAQ,KAAK,aAAa,yHAAyH;AAAA,QACrJ;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;",
+  "names": []
+}