@open-mercato/core 0.7.1-develop.7178.1.ab93fbaf4e → 0.7.1-develop.7180.1.9717fbbb43

package/dist/modules/staff/api/timesheets/time-entries/overlaps/route.js

@@ -0,0 +1,340 @@
+import { NextResponse } from "next/server";
+import { z } from "zod";
+import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
+import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
+import { resolveOrganizationScopeForRequest } from "@open-mercato/core/modules/directory/utils/organizationScope";
+import { CrudHttpError, isCrudHttpError } from "@open-mercato/shared/lib/crud/errors";
+import { resolveTranslations } from "@open-mercato/shared/lib/i18n/server";
+import { findWithDecryption } from "@open-mercato/shared/lib/encryption/find";
+import { createLogger } from "@open-mercato/shared/lib/logger";
+import { StaffTimeEntry, StaffTimeProject, StaffTimeTask } from "../../../../data/entities.js";
+import { deriveInterval, formatClock, parseClock } from "../../../../lib/time-tracking/interval.js";
+import {
+  evaluateOverlapPolicies,
+  findOverlaps
+} from "../../../../lib/time-tracking/overlap.js";
+import { resolveFeatureAccess } from "../../../../lib/time-tracking/featureAccess.js";
+import {
+  MANAGE_PROJECTS_FEATURE,
+  assertProjectAccess,
+  resolveProjectAccess
+} from "../../../../lib/time-tracking/access.js";
+import { readTimeTrackingSettings } from "../../../../lib/time-tracking/settings.js";
+import {
+  readSearchParamsRecord,
+  runTimesheetInterceptors
+} from "../../_shared/withTimesheetInterceptors.js";
+const logger = createLogger("staff").child({ component: "api/timesheets/time-entries/overlaps" });
+const VIEW_FEATURE = "staff.timesheets.view";
+const MANAGE_ALL_FEATURE = "staff.timesheets.manage_all";
+const MAX_WINDOW_ROWS = 500;
+const metadata = {
+  GET: { requireAuth: true, requireFeatures: [VIEW_FEATURE] }
+};
+const DATE_PATTERN = /^\d{4}-\d{2}-\d{2}$/;
+const DATE_PREFIX_PATTERN = /^(\d{4}-\d{2}-\d{2})/;
+const querySchema = z.object({
+  date: z.string().regex(DATE_PATTERN),
+  startedAt: z.string().optional(),
+  endedAt: z.string().optional(),
+  durationMinutes: z.coerce.number().int().min(0).max(1440).optional(),
+  excludeId: z.string().uuid().optional(),
+  staffMemberId: z.string().uuid().optional()
+});
+const overlapItemSchema = z.object({
+  id: z.string().uuid(),
+  staff_member_id: z.string().uuid(),
+  date: z.string(),
+  started_at: z.string(),
+  ended_at: z.string(),
+  duration_minutes: z.number(),
+  overlap_minutes: z.number(),
+  crosses_midnight: z.boolean(),
+  task_id: z.string().uuid().nullable(),
+  task_title: z.string().nullable(),
+  time_project_id: z.string().uuid().nullable(),
+  project_name: z.string().nullable(),
+  notes: z.string().nullable()
+});
+const overlapsResponseSchema = z.object({
+  items: z.array(overlapItemSchema),
+  total: z.number(),
+  /**
+   * EP-38. `warn` is what this route has always meant; the field exists so a
+   * contributed policy that escalates to `block` reaches the form, and so a
+   * caller can tell "the tenant turned the warning off" from "nothing overlaps".
+   */
+  decision: z.enum(["allow", "warn", "block"])
+});
+const EMPTY_OVERLAP_RESULT = { items: [], total: 0, decision: "allow" };
+function pad(value) {
+  return String(value).padStart(2, "0");
+}
+function formatLocalDate(value) {
+  return `${value.getFullYear()}-${pad(value.getMonth() + 1)}-${pad(value.getDate())}`;
+}
+function shiftDate(date, days) {
+  const [year, month, day] = date.split("-").map(Number);
+  const shifted = new Date(Date.UTC(year, month - 1, day + days));
+  return `${shifted.getUTCFullYear()}-${pad(shifted.getUTCMonth() + 1)}-${pad(shifted.getUTCDate())}`;
+}
+function toDayString(value) {
+  if (typeof value === "string") {
+    const match = DATE_PREFIX_PATTERN.exec(value.trim());
+    return match ? match[1] : null;
+  }
+  if (value instanceof Date && !Number.isNaN(value.getTime())) return formatLocalDate(value);
+  return null;
+}
+function toClock(value) {
+  if (value instanceof Date) {
+    if (Number.isNaN(value.getTime())) return null;
+    return formatClock(value.getHours() * 60 + value.getMinutes());
+  }
+  if (typeof value !== "string") return null;
+  const trimmed = value.trim();
+  if (!trimmed) return null;
+  const clock = parseClock(trimmed);
+  if (clock !== null) return formatClock(clock);
+  const parsed = new Date(trimmed);
+  if (Number.isNaN(parsed.getTime())) return null;
+  return formatClock(parsed.getHours() * 60 + parsed.getMinutes());
+}
+function toRowSpan(row) {
+  const start = toClock(row.startedAt);
+  if (!start) return null;
+  const date = (row.startedAt instanceof Date && !Number.isNaN(row.startedAt.getTime()) ? formatLocalDate(row.startedAt) : null) ?? toDayString(row.date);
+  if (!date) return null;
+  return {
+    id: row.id,
+    date,
+    start,
+    end: toClock(row.endedAt),
+    durationMinutes: typeof row.durationMinutes === "number" ? row.durationMinutes : null
+  };
+}
+function readQuery(params) {
+  const raw = {};
+  for (const key of ["date", "startedAt", "endedAt", "durationMinutes", "excludeId", "staffMemberId"]) {
+    const value = params.get(key);
+    if (value !== null && value.trim().length > 0) raw[key] = value.trim();
+  }
+  return querySchema.parse(raw);
+}
+async function resolveGrantedFeatures(container, userId, scope) {
+  try {
+    const rbac = container.resolve("rbacService");
+    if (!rbac?.getGrantedFeatures) return [];
+    return await rbac.getGrantedFeatures(userId, scope) ?? [];
+  } catch {
+    return [];
+  }
+}
+async function resolveOverlapSettings(container, tenantId) {
+  try {
+    const configService = container.resolve("moduleConfigService");
+    const settings = await readTimeTrackingSettings(configService, { tenantId });
+    return {
+      assignmentGraceDays: settings.access.assignmentGraceDays,
+      warningsEnabled: settings.warnings.overlap
+    };
+  } catch {
+    return { assignmentGraceDays: null, warningsEnabled: true };
+  }
+}
+async function loadLabels(em, scope, taskIds, projectIds) {
+  const tasks = /* @__PURE__ */ new Map();
+  const projects = /* @__PURE__ */ new Map();
+  if (taskIds.length) {
+    const rows = await findWithDecryption(
+      em,
+      StaffTimeTask,
+      { id: { $in: taskIds }, ...scope, deletedAt: null },
+      {},
+      scope
+    );
+    for (const row of rows) tasks.set(row.id, row.title);
+  }
+  if (projectIds.length) {
+    const rows = await findWithDecryption(
+      em,
+      StaffTimeProject,
+      { id: { $in: projectIds }, ...scope, deletedAt: null },
+      {},
+      scope
+    );
+    for (const row of rows) projects.set(row.id, row.name);
+  }
+  return { tasks, projects };
+}
+async function GET(req) {
+  try {
+    const container = await createRequestContainer();
+    const auth = await getAuthFromRequest(req);
+    const { translate } = await resolveTranslations();
+    if (!auth) {
+      throw new CrudHttpError(401, { error: translate("staff.errors.unauthorized", "Unauthorized") });
+    }
+    const orgScope = await resolveOrganizationScopeForRequest({ container, auth, request: req });
+    const tenantId = orgScope?.tenantId ?? auth.tenantId ?? null;
+    const organizationId = orgScope?.selectedId ?? auth.orgId ?? null;
+    if (!tenantId || !organizationId) {
+      throw new CrudHttpError(400, {
+        error: translate("staff.errors.missingScope", "Missing tenant or organization scope.")
+      });
+    }
+    const interceptors = await runTimesheetInterceptors({
+      request: req,
+      method: "GET",
+      scope: { container, userId: auth.sub, tenantId, organizationId },
+      query: readSearchParamsRecord(req.url)
+    });
+    if (!interceptors.ok) return interceptors.response;
+    const { session } = interceptors;
+    const query = readQuery(session.searchParams);
+    const candidate = {
+      date: query.date,
+      start: toClock(query.startedAt),
+      end: toClock(query.endedAt),
+      durationMinutes: query.durationMinutes ?? null
+    };
+    const derived = deriveInterval({
+      start: candidate.start,
+      end: candidate.end,
+      durationMinutes: candidate.durationMinutes
+    });
+    if (!derived.start || derived.durationMinutes === null || derived.durationMinutes <= 0) {
+      return session.respond(200, EMPTY_OVERLAP_RESULT);
+    }
+    const scope = { tenantId, organizationId };
+    const em = container.resolve("em").fork();
+    const userId = typeof auth.sub === "string" ? auth.sub : null;
+    const manageAll = await resolveFeatureAccess(container, userId, [MANAGE_ALL_FEATURE], scope);
+    const manageProjects = await resolveFeatureAccess(container, userId, [MANAGE_PROJECTS_FEATURE], scope);
+    const canManageAll = manageAll.allowed;
+    const overlapSettings = await resolveOverlapSettings(container, tenantId);
+    const access = await resolveProjectAccess({
+      em,
+      userId,
+      tenantId,
+      organizationId,
+      canManageAll: manageProjects.allowed,
+      userFeatures: manageAll.grantedFeatures,
+      assignmentGraceDays: overlapSettings.assignmentGraceDays
+    });
+    const staffMemberId = canManageAll && query.staffMemberId ? query.staffMemberId : access.staffMemberId;
+    if (!staffMemberId) return session.respond(200, EMPTY_OVERLAP_RESULT);
+    const isSelfScope = staffMemberId === access.staffMemberId;
+    const where = {
+      tenantId,
+      organizationId,
+      staffMemberId,
+      deletedAt: null,
+      date: { $gte: shiftDate(query.date, -1), $lte: shiftDate(query.date, 1) }
+    };
+    const rows = await findWithDecryption(
+      em,
+      StaffTimeEntry,
+      where,
+      { orderBy: { startedAt: "asc" }, limit: MAX_WINDOW_ROWS },
+      scope
+    );
+    const visible = rows.filter(
+      (row) => assertProjectAccess(access, row.timeProjectId ?? null) || isSelfScope && !row.timeProjectId
+    );
+    const byId = new Map(visible.map((row) => [row.id, row]));
+    const spans = visible.map((row) => toRowSpan(row)).filter((span) => span !== null);
+    const candidateSpan = {
+      date: query.date,
+      start: derived.start,
+      end: derived.end,
+      durationMinutes: derived.durationMinutes
+    };
+    const overlaps = findOverlaps(
+      candidateSpan,
+      spans,
+      query.excludeId ? { excludeId: query.excludeId } : void 0
+    );
+    const decision = evaluateOverlapPolicies(overlaps, {
+      tenantId,
+      organizationId,
+      candidate: candidateSpan,
+      warningsEnabled: overlapSettings.warningsEnabled,
+      staffMemberId,
+      excludeId: query.excludeId ?? null
+    });
+    if (!overlaps.length) return session.respond(200, { ...EMPTY_OVERLAP_RESULT, decision });
+    const taskIds = /* @__PURE__ */ new Set();
+    const projectIds = /* @__PURE__ */ new Set();
+    for (const overlap of overlaps) {
+      const row = overlap.id ? byId.get(overlap.id) : void 0;
+      if (row?.taskId) taskIds.add(row.taskId);
+      if (row?.timeProjectId) projectIds.add(row.timeProjectId);
+    }
+    const labels = await loadLabels(em, scope, [...taskIds], [...projectIds]);
+    const items = [];
+    for (const overlap of overlaps) {
+      const row = overlap.id ? byId.get(overlap.id) : void 0;
+      if (!row) continue;
+      const interval = deriveInterval({
+        start: overlap.entry.start,
+        end: overlap.entry.end,
+        durationMinutes: overlap.entry.durationMinutes
+      });
+      items.push({
+        id: row.id,
+        staff_member_id: row.staffMemberId,
+        date: overlap.entry.date,
+        started_at: interval.start ?? "",
+        ended_at: interval.end ?? "",
+        duration_minutes: interval.durationMinutes ?? 0,
+        overlap_minutes: overlap.overlapMinutes,
+        crosses_midnight: interval.crossesMidnight,
+        task_id: row.taskId ?? null,
+        task_title: row.taskId ? labels.tasks.get(row.taskId) ?? null : null,
+        time_project_id: row.timeProjectId ?? null,
+        project_name: row.timeProjectId ? labels.projects.get(row.timeProjectId) ?? null : null,
+        notes: row.notes ?? null
+      });
+    }
+    return session.respond(200, { items, total: items.length, decision });
+  } catch (err) {
+    if (isCrudHttpError(err)) {
+      return NextResponse.json(err.body, { status: err.status });
+    }
+    const { translate } = await resolveTranslations();
+    if (err instanceof z.ZodError) {
+      return NextResponse.json(
+        { error: translate("staff.errors.invalid_request", "Invalid request"), details: err.issues },
+        { status: 400 }
+      );
+    }
+    logger.error("staff.timesheets.time-entries.overlaps GET failed", { err });
+    return NextResponse.json(
+      { error: translate("staff.errors.internal", "Internal server error") },
+      { status: 500 }
+    );
+  }
+}
+const openApi = {
+  tag: "Staff",
+  summary: "Advisory time entry overlap check",
+  methods: {
+    GET: {
+      summary: "List time entries overlapping a candidate span",
+      description: "Advisory, read-only lookup used by the time entry form to warn about conflicting entries. Overlapping time is allowed, so the result never blocks a save. Returns an empty list when the supplied time information is insufficient. Checking another staff member requires staff.timesheets.manage_all; without it the request is silently scoped to the caller.",
+      query: querySchema,
+      responses: [
+        { status: 200, description: "Overlapping entries", schema: overlapsResponseSchema },
+        { status: 400, description: "Invalid query or missing scope", schema: z.object({ error: z.string() }) },
+        { status: 401, description: "Unauthorized", schema: z.object({ error: z.string() }) }
+      ]
+    }
+  }
+};
+export {
+  GET,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/staff/api/timesheets/time-entries/overlaps/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../../src/modules/staff/api/timesheets/time-entries/overlaps/route.ts"],
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { EntityManager, FilterQuery } from '@mikro-orm/postgresql'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { CrudHttpError, isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { authorizeFeatures } from '@open-mercato/shared/security/featurePolicy'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport type { ModuleConfigService } from '@open-mercato/core/modules/configs/lib/module-config-service'\nimport { StaffTimeEntry, StaffTimeProject, StaffTimeTask } from '../../../../data/entities'\nimport { deriveInterval, formatClock, parseClock } from '../../../../lib/time-tracking/interval'\nimport {\n  evaluateOverlapPolicies,\n  findOverlaps,\n  type OverlapSpan,\n} from '../../../../lib/time-tracking/overlap'\nimport { resolveFeatureAccess } from '../../../../lib/time-tracking/featureAccess'\nimport {\n  MANAGE_PROJECTS_FEATURE,\n  assertProjectAccess,\n  resolveProjectAccess,\n} from '../../../../lib/time-tracking/access'\nimport { readTimeTrackingSettings } from '../../../../lib/time-tracking/settings'\nimport {\n  readSearchParamsRecord,\n  runTimesheetInterceptors,\n} from '../../_shared/withTimesheetInterceptors'\n\nconst logger = createLogger('staff').child({ component: 'api/timesheets/time-entries/overlaps' })\n\nconst VIEW_FEATURE = 'staff.timesheets.view'\nconst MANAGE_ALL_FEATURE = 'staff.timesheets.manage_all'\n\n/**\n * Upper bound for the day-window scan. One staff member can only hold a handful\n * of entries across three days, so this is a guard against pathological data\n * rather than a paging contract.\n */\nconst MAX_WINDOW_ROWS = 500\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: [VIEW_FEATURE] },\n}\n\nconst DATE_PATTERN = /^\\d{4}-\\d{2}-\\d{2}$/\nconst DATE_PREFIX_PATTERN = /^(\\d{4}-\\d{2}-\\d{2})/\n\nconst querySchema = z.object({\n  date: z.string().regex(DATE_PATTERN),\n  startedAt: z.string().optional(),\n  endedAt: z.string().optional(),\n  durationMinutes: z.coerce.number().int().min(0).max(1440).optional(),\n  excludeId: z.string().uuid().optional(),\n  staffMemberId: z.string().uuid().optional(),\n})\n\nconst overlapItemSchema = z.object({\n  id: z.string().uuid(),\n  staff_member_id: z.string().uuid(),\n  date: z.string(),\n  started_at: z.string(),\n  ended_at: z.string(),\n  duration_minutes: z.number(),\n  overlap_minutes: z.number(),\n  crosses_midnight: z.boolean(),\n  task_id: z.string().uuid().nullable(),\n  task_title: z.string().nullable(),\n  time_project_id: z.string().uuid().nullable(),\n  project_name: z.string().nullable(),\n  notes: z.string().nullable(),\n})\n\nconst overlapsResponseSchema = z.object({\n  items: z.array(overlapItemSchema),\n  total: z.number(),\n  /**\n   * EP-38. `warn` is what this route has always meant; the field exists so a\n   * contributed policy that escalates to `block` reaches the form, and so a\n   * caller can tell \"the tenant turned the warning off\" from \"nothing overlaps\".\n   */\n  decision: z.enum(['allow', 'warn', 'block']),\n})\n\ntype OverlapItem = z.infer<typeof overlapItemSchema>\n\ntype RbacServiceLike = {\n  getGrantedFeatures?: (\n    userId: string,\n    options: { tenantId: string | null; organizationId: string | null },\n  ) => Promise<string[]>\n}\n\ntype EntryRow = Pick<\n  StaffTimeEntry,\n  | 'id'\n  | 'staffMemberId'\n  | 'durationMinutes'\n  | 'startedAt'\n  | 'endedAt'\n  | 'notes'\n  | 'taskId'\n  | 'timeProjectId'\n> & { date: unknown }\n\nconst EMPTY_OVERLAP_RESULT = { items: [], total: 0, decision: 'allow' as const }\n\nfunction pad(value: number): string {\n  return String(value).padStart(2, '0')\n}\n\nfunction formatLocalDate(value: Date): string {\n  return `${value.getFullYear()}-${pad(value.getMonth() + 1)}-${pad(value.getDate())}`\n}\n\nfunction shiftDate(date: string, days: number): string {\n  const [year, month, day] = date.split('-').map(Number)\n  const shifted = new Date(Date.UTC(year, month - 1, day + days))\n  return `${shifted.getUTCFullYear()}-${pad(shifted.getUTCMonth() + 1)}-${pad(shifted.getUTCDate())}`\n}\n\nfunction toDayString(value: unknown): string | null {\n  if (typeof value === 'string') {\n    const match = DATE_PREFIX_PATTERN.exec(value.trim())\n    return match ? match[1] : null\n  }\n  if (value instanceof Date && !Number.isNaN(value.getTime())) return formatLocalDate(value)\n  return null\n}\n\n/**\n * Accepts either a wall clock (`11:45`, what the entry form sends) or a full\n * timestamp (what the timer endpoints persist), and always answers in the\n * calendar the rest of the module reads dates in.\n */\nfunction toClock(value: unknown): string | null {\n  if (value instanceof Date) {\n    if (Number.isNaN(value.getTime())) return null\n    return formatClock(value.getHours() * 60 + value.getMinutes())\n  }\n  if (typeof value !== 'string') return null\n  const trimmed = value.trim()\n  if (!trimmed) return null\n  const clock = parseClock(trimmed)\n  if (clock !== null) return formatClock(clock)\n  const parsed = new Date(trimmed)\n  if (Number.isNaN(parsed.getTime())) return null\n  return formatClock(parsed.getHours() * 60 + parsed.getMinutes())\n}\n\nfunction toRowSpan(row: EntryRow): OverlapSpan | null {\n  const start = toClock(row.startedAt)\n  if (!start) return null\n  const date =\n    (row.startedAt instanceof Date && !Number.isNaN(row.startedAt.getTime())\n      ? formatLocalDate(row.startedAt)\n      : null) ?? toDayString(row.date)\n  if (!date) return null\n  return {\n    id: row.id,\n    date,\n    start,\n    end: toClock(row.endedAt),\n    durationMinutes: typeof row.durationMinutes === 'number' ? row.durationMinutes : null,\n  }\n}\n\nfunction readQuery(params: URLSearchParams): z.infer<typeof querySchema> {\n  const raw: Record<string, string> = {}\n  for (const key of ['date', 'startedAt', 'endedAt', 'durationMinutes', 'excludeId', 'staffMemberId']) {\n    const value = params.get(key)\n    if (value !== null && value.trim().length > 0) raw[key] = value.trim()\n  }\n  return querySchema.parse(raw)\n}\n\nasync function resolveGrantedFeatures(\n  container: Awaited<ReturnType<typeof createRequestContainer>>,\n  userId: string,\n  scope: { tenantId: string; organizationId: string },\n): Promise<string[]> {\n  try {\n    const rbac = container.resolve('rbacService') as RbacServiceLike | undefined\n    if (!rbac?.getGrantedFeatures) return []\n    return (await rbac.getGrantedFeatures(userId, scope)) ?? []\n  } catch {\n    return []\n  }\n}\n\nasync function resolveOverlapSettings(\n  container: Awaited<ReturnType<typeof createRequestContainer>>,\n  tenantId: string,\n): Promise<{ assignmentGraceDays: number | null; warningsEnabled: boolean }> {\n  try {\n    const configService = container.resolve('moduleConfigService') as ModuleConfigService\n    const settings = await readTimeTrackingSettings(configService, { tenantId })\n    return {\n      assignmentGraceDays: settings.access.assignmentGraceDays,\n      warningsEnabled: settings.warnings.overlap,\n    }\n  } catch {\n    // The same fail-safe the grace window uses: an unreadable settings row keeps\n    // the advisory warning on, which is what the module default says.\n    return { assignmentGraceDays: null, warningsEnabled: true }\n  }\n}\n\nasync function loadLabels(\n  em: EntityManager,\n  scope: { tenantId: string; organizationId: string },\n  taskIds: string[],\n  projectIds: string[],\n): Promise<{ tasks: Map<string, string>; projects: Map<string, string> }> {\n  const tasks = new Map<string, string>()\n  const projects = new Map<string, string>()\n  if (taskIds.length) {\n    const rows = await findWithDecryption(\n      em,\n      StaffTimeTask,\n      { id: { $in: taskIds }, ...scope, deletedAt: null },\n      {},\n      scope,\n    )\n    for (const row of rows) tasks.set(row.id, row.title)\n  }\n  if (projectIds.length) {\n    const rows = await findWithDecryption(\n      em,\n      StaffTimeProject,\n      { id: { $in: projectIds }, ...scope, deletedAt: null },\n      {},\n      scope,\n    )\n    for (const row of rows) projects.set(row.id, row.name)\n  }\n  return { tasks, projects }\n}\n\n/**\n * GET /api/staff/timesheets/time-entries/overlaps\n *\n * Advisory-only overlap probe for the time entry form (mockup screen 9). It is\n * read-only and never blocks a save: overlapping time is legitimate in\n * consulting work (a client call while taking notes), so the UI renders the\n * result as a warning with a suggested fix, never as a validation error. Any\n * failure here MUST degrade to \"no warning\" rather than break the form \u2014 the\n * route therefore answers `{ items: [], total: 0 }` for unusable input, a\n * caller without a linked staff member, or a lookup that yields nothing, and\n * the client is expected to ignore non-200 responses.\n *\n * Scoping: rows are always filtered by `tenant_id` + `organization_id` and\n * intersected with `resolveProjectAccess`, so the endpoint cannot be used to\n * probe entries on projects the caller cannot see. Asking about another staff\n * member requires `staff.timesheets.manage_all`; without it the request is\n * silently scoped back to the caller's own member instead of erroring.\n *\n * Query shape: the form calls this on blur, so the lookup reads a three-day\n * window (`date - 1 .. date + 1`) against the\n * `(organization_id, staff_member_id, date, started_at)` index. The adjacent\n * days cover midnight-crossing spans in both directions \u2014 a candidate that ends\n * after midnight, and a stored entry that started the previous evening \u2014 without\n * ever scanning history.\n */\nexport async function GET(req: Request) {\n  try {\n    const container = await createRequestContainer()\n    const auth = await getAuthFromRequest(req)\n    const { translate } = await resolveTranslations()\n    if (!auth) {\n      throw new CrudHttpError(401, { error: translate('staff.errors.unauthorized', 'Unauthorized') })\n    }\n\n    const orgScope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n    const tenantId = orgScope?.tenantId ?? auth.tenantId ?? null\n    const organizationId = orgScope?.selectedId ?? auth.orgId ?? null\n    if (!tenantId || !organizationId) {\n      throw new CrudHttpError(400, {\n        error: translate('staff.errors.missingScope', 'Missing tenant or organization scope.'),\n      })\n    }\n\n    const interceptors = await runTimesheetInterceptors({\n      request: req,\n      method: 'GET',\n      scope: { container, userId: auth.sub, tenantId, organizationId },\n      query: readSearchParamsRecord(req.url),\n    })\n    if (!interceptors.ok) return interceptors.response\n    const { session } = interceptors\n\n    const query = readQuery(session.searchParams)\n    const candidate: OverlapSpan = {\n      date: query.date,\n      start: toClock(query.startedAt),\n      end: toClock(query.endedAt),\n      durationMinutes: query.durationMinutes ?? null,\n    }\n    const derived = deriveInterval({\n      start: candidate.start,\n      end: candidate.end,\n      durationMinutes: candidate.durationMinutes,\n    })\n    if (!derived.start || derived.durationMinutes === null || derived.durationMinutes <= 0) {\n      return session.respond(200, EMPTY_OVERLAP_RESULT)\n    }\n\n    const scope = { tenantId, organizationId }\n    const em = (container.resolve('em') as EntityManager).fork()\n    const userId = typeof auth.sub === 'string' ? auth.sub : null\n    // Both questions go to the service. Asking one and inferring the other from a\n    // grant array is how the two could disagree when the read failed.\n    const manageAll = await resolveFeatureAccess(container, userId, [MANAGE_ALL_FEATURE], scope)\n    const manageProjects = await resolveFeatureAccess(container, userId, [MANAGE_PROJECTS_FEATURE], scope)\n    const canManageAll = manageAll.allowed\n\n    const overlapSettings = await resolveOverlapSettings(container, tenantId)\n    const access = await resolveProjectAccess({\n      em,\n      userId,\n      tenantId,\n      organizationId,\n      canManageAll: manageProjects.allowed,\n      userFeatures: manageAll.grantedFeatures,\n      assignmentGraceDays: overlapSettings.assignmentGraceDays,\n    })\n\n    const staffMemberId =\n      canManageAll && query.staffMemberId ? query.staffMemberId : access.staffMemberId\n    if (!staffMemberId) return session.respond(200, EMPTY_OVERLAP_RESULT)\n    const isSelfScope = staffMemberId === access.staffMemberId\n\n    const where = {\n      tenantId,\n      organizationId,\n      staffMemberId,\n      deletedAt: null,\n      date: { $gte: shiftDate(query.date, -1), $lte: shiftDate(query.date, 1) },\n    } as unknown as FilterQuery<StaffTimeEntry>\n    const rows = (await findWithDecryption(\n      em,\n      StaffTimeEntry,\n      where,\n      { orderBy: { startedAt: 'asc' }, limit: MAX_WINDOW_ROWS },\n      scope,\n    )) as unknown as EntryRow[]\n\n    const visible = rows.filter(\n      (row) =>\n        assertProjectAccess(access, row.timeProjectId ?? null) ||\n        (isSelfScope && !row.timeProjectId),\n    )\n    const byId = new Map(visible.map((row) => [row.id, row]))\n    const spans = visible\n      .map((row) => toRowSpan(row))\n      .filter((span): span is OverlapSpan => span !== null)\n\n    const candidateSpan: OverlapSpan = {\n      date: query.date,\n      start: derived.start,\n      end: derived.end,\n      durationMinutes: derived.durationMinutes,\n    }\n    const overlaps = findOverlaps(\n      candidateSpan,\n      spans,\n      query.excludeId ? { excludeId: query.excludeId } : undefined,\n    )\n    const decision = evaluateOverlapPolicies(overlaps, {\n      tenantId,\n      organizationId,\n      candidate: candidateSpan,\n      warningsEnabled: overlapSettings.warningsEnabled,\n      staffMemberId,\n      excludeId: query.excludeId ?? null,\n    })\n    // The item list is unchanged by the policy: this endpoint answers \"what\n    // intersects\", and `decision` answers \"and what should happen\". Collapsing\n    // the list when a tenant turns the warning off would make the two\n    // indistinguishable from \"nothing intersects\" for every other caller.\n    if (!overlaps.length) return session.respond(200, { ...EMPTY_OVERLAP_RESULT, decision })\n\n    const taskIds = new Set<string>()\n    const projectIds = new Set<string>()\n    for (const overlap of overlaps) {\n      const row = overlap.id ? byId.get(overlap.id) : undefined\n      if (row?.taskId) taskIds.add(row.taskId)\n      if (row?.timeProjectId) projectIds.add(row.timeProjectId)\n    }\n    const labels = await loadLabels(em, scope, [...taskIds], [...projectIds])\n\n    const items: OverlapItem[] = []\n    for (const overlap of overlaps) {\n      const row = overlap.id ? byId.get(overlap.id) : undefined\n      if (!row) continue\n      const interval = deriveInterval({\n        start: overlap.entry.start,\n        end: overlap.entry.end,\n        durationMinutes: overlap.entry.durationMinutes,\n      })\n      items.push({\n        id: row.id,\n        staff_member_id: row.staffMemberId,\n        date: overlap.entry.date,\n        started_at: interval.start ?? '',\n        ended_at: interval.end ?? '',\n        duration_minutes: interval.durationMinutes ?? 0,\n        overlap_minutes: overlap.overlapMinutes,\n        crosses_midnight: interval.crossesMidnight,\n        task_id: row.taskId ?? null,\n        task_title: row.taskId ? labels.tasks.get(row.taskId) ?? null : null,\n        time_project_id: row.timeProjectId ?? null,\n        project_name: row.timeProjectId ? labels.projects.get(row.timeProjectId) ?? null : null,\n        notes: row.notes ?? null,\n      })\n    }\n\n    return session.respond(200, { items, total: items.length, decision })\n  } catch (err) {\n    if (isCrudHttpError(err)) {\n      return NextResponse.json(err.body, { status: err.status })\n    }\n    const { translate } = await resolveTranslations()\n    if (err instanceof z.ZodError) {\n      return NextResponse.json(\n        { error: translate('staff.errors.invalid_request', 'Invalid request'), details: err.issues },\n        { status: 400 },\n      )\n    }\n    logger.error('staff.timesheets.time-entries.overlaps GET failed', { err })\n    return NextResponse.json(\n      { error: translate('staff.errors.internal', 'Internal server error') },\n      { status: 500 },\n    )\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Staff',\n  summary: 'Advisory time entry overlap check',\n  methods: {\n    GET: {\n      summary: 'List time entries overlapping a candidate span',\n      description:\n        'Advisory, read-only lookup used by the time entry form to warn about conflicting entries. Overlapping time is allowed, so the result never blocks a save. Returns an empty list when the supplied time information is insufficient. Checking another staff member requires staff.timesheets.manage_all; without it the request is silently scoped to the caller.',\n      query: querySchema,\n      responses: [\n        { status: 200, description: 'Overlapping entries', schema: overlapsResponseSchema },\n        { status: 400, description: 'Invalid query or missing scope', schema: z.object({ error: z.string() }) },\n        { status: 401, description: 'Unauthorized', schema: z.object({ error: z.string() }) },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAElB,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AACnD,SAAS,eAAe,uBAAuB;AAE/C,SAAS,2BAA2B;AACpC,SAAS,0BAA0B;AACnC,SAAS,oBAAoB;AAG7B,SAAS,gBAAgB,kBAAkB,qBAAqB;AAChE,SAAS,gBAAgB,aAAa,kBAAkB;AACxD;AAAA,EACE;AAAA,EACA;AAAA,OAEK;AACP,SAAS,4BAA4B;AACrC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,gCAAgC;AACzC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAEP,MAAM,SAAS,aAAa,OAAO,EAAE,MAAM,EAAE,WAAW,uCAAuC,CAAC;AAEhG,MAAM,eAAe;AACrB,MAAM,qBAAqB;AAO3B,MAAM,kBAAkB;AAEjB,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,YAAY,EAAE;AAC5D;AAEA,MAAM,eAAe;AACrB,MAAM,sBAAsB;AAE5B,MAAM,cAAc,EAAE,OAAO;AAAA,EAC3B,MAAM,EAAE,OAAO,EAAE,MAAM,YAAY;AAAA,EACnC,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,SAAS,EAAE,OAAO,EAAE,SAAS;AAAA,EAC7B,iBAAiB,EAAE,OAAO,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,IAAI,EAAE,SAAS;AAAA,EACnE,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACtC,eAAe,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAC5C,CAAC;AAED,MAAM,oBAAoB,EAAE,OAAO;AAAA,EACjC,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,iBAAiB,EAAE,OAAO,EAAE,KAAK;AAAA,EACjC,MAAM,EAAE,OAAO;AAAA,EACf,YAAY,EAAE,OAAO;AAAA,EACrB,UAAU,EAAE,OAAO;AAAA,EACnB,kBAAkB,EAAE,OAAO;AAAA,EAC3B,iBAAiB,EAAE,OAAO;AAAA,EAC1B,kBAAkB,EAAE,QAAQ;AAAA,EAC5B,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACpC,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,EAChC,iBAAiB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC5C,cAAc,EAAE,OAAO,EAAE,SAAS;AAAA,EAClC,OAAO,EAAE,OAAO,EAAE,SAAS;AAC7B,CAAC;AAED,MAAM,yBAAyB,EAAE,OAAO;AAAA,EACtC,OAAO,EAAE,MAAM,iBAAiB;AAAA,EAChC,OAAO,EAAE,OAAO;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMhB,UAAU,EAAE,KAAK,CAAC,SAAS,QAAQ,OAAO,CAAC;AAC7C,CAAC;AAuBD,MAAM,uBAAuB,EAAE,OAAO,CAAC,GAAG,OAAO,GAAG,UAAU,QAAiB;AAE/E,SAAS,IAAI,OAAuB;AAClC,SAAO,OAAO,KAAK,EAAE,SAAS,GAAG,GAAG;AACtC;AAEA,SAAS,gBAAgB,OAAqB;AAC5C,SAAO,GAAG,MAAM,YAAY,CAAC,IAAI,IAAI,MAAM,SAAS,IAAI,CAAC,CAAC,IAAI,IAAI,MAAM,QAAQ,CAAC,CAAC;AACpF;AAEA,SAAS,UAAU,MAAc,MAAsB;AACrD,QAAM,CAAC,MAAM,OAAO,GAAG,IAAI,KAAK,MAAM,GAAG,EAAE,IAAI,MAAM;AACrD,QAAM,UAAU,IAAI,KAAK,KAAK,IAAI,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC;AAC9D,SAAO,GAAG,QAAQ,eAAe,CAAC,IAAI,IAAI,QAAQ,YAAY,IAAI,CAAC,CAAC,IAAI,IAAI,QAAQ,WAAW,CAAC,CAAC;AACnG;AAEA,SAAS,YAAY,OAA+B;AAClD,MAAI,OAAO,UAAU,UAAU;AAC7B,UAAM,QAAQ,oBAAoB,KAAK,MAAM,KAAK,CAAC;AACnD,WAAO,QAAQ,MAAM,CAAC,IAAI;AAAA,EAC5B;AACA,MAAI,iBAAiB,QAAQ,CAAC,OAAO,MAAM,MAAM,QAAQ,CAAC,EAAG,QAAO,gBAAgB,KAAK;AACzF,SAAO;AACT;AAOA,SAAS,QAAQ,OAA+B;AAC9C,MAAI,iBAAiB,MAAM;AACzB,QAAI,OAAO,MAAM,MAAM,QAAQ,CAAC,EAAG,QAAO;AAC1C,WAAO,YAAY,MAAM,SAAS,IAAI,KAAK,MAAM,WAAW,CAAC;AAAA,EAC/D;AACA,MAAI,OAAO,UAAU,SAAU,QAAO;AACtC,QAAM,UAAU,MAAM,KAAK;AAC3B,MAAI,CAAC,QAAS,QAAO;AACrB,QAAM,QAAQ,WAAW,OAAO;AAChC,MAAI,UAAU,KAAM,QAAO,YAAY,KAAK;AAC5C,QAAM,SAAS,IAAI,KAAK,OAAO;AAC/B,MAAI,OAAO,MAAM,OAAO,QAAQ,CAAC,EAAG,QAAO;AAC3C,SAAO,YAAY,OAAO,SAAS,IAAI,KAAK,OAAO,WAAW,CAAC;AACjE;AAEA,SAAS,UAAU,KAAmC;AACpD,QAAM,QAAQ,QAAQ,IAAI,SAAS;AACnC,MAAI,CAAC,MAAO,QAAO;AACnB,QAAM,QACH,IAAI,qBAAqB,QAAQ,CAAC,OAAO,MAAM,IAAI,UAAU,QAAQ,CAAC,IACnE,gBAAgB,IAAI,SAAS,IAC7B,SAAS,YAAY,IAAI,IAAI;AACnC,MAAI,CAAC,KAAM,QAAO;AAClB,SAAO;AAAA,IACL,IAAI,IAAI;AAAA,IACR;AAAA,IACA;AAAA,IACA,KAAK,QAAQ,IAAI,OAAO;AAAA,IACxB,iBAAiB,OAAO,IAAI,oBAAoB,WAAW,IAAI,kBAAkB;AAAA,EACnF;AACF;AAEA,SAAS,UAAU,QAAsD;AACvE,QAAM,MAA8B,CAAC;AACrC,aAAW,OAAO,CAAC,QAAQ,aAAa,WAAW,mBAAmB,aAAa,eAAe,GAAG;AACnG,UAAM,QAAQ,OAAO,IAAI,GAAG;AAC5B,QAAI,UAAU,QAAQ,MAAM,KAAK,EAAE,SAAS,EAAG,KAAI,GAAG,IAAI,MAAM,KAAK;AAAA,EACvE;AACA,SAAO,YAAY,MAAM,GAAG;AAC9B;AAEA,eAAe,uBACb,WACA,QACA,OACmB;AACnB,MAAI;AACF,UAAM,OAAO,UAAU,QAAQ,aAAa;AAC5C,QAAI,CAAC,MAAM,mBAAoB,QAAO,CAAC;AACvC,WAAQ,MAAM,KAAK,mBAAmB,QAAQ,KAAK,KAAM,CAAC;AAAA,EAC5D,QAAQ;AACN,WAAO,CAAC;AAAA,EACV;AACF;AAEA,eAAe,uBACb,WACA,UAC2E;AAC3E,MAAI;AACF,UAAM,gBAAgB,UAAU,QAAQ,qBAAqB;AAC7D,UAAM,WAAW,MAAM,yBAAyB,eAAe,EAAE,SAAS,CAAC;AAC3E,WAAO;AAAA,MACL,qBAAqB,SAAS,OAAO;AAAA,MACrC,iBAAiB,SAAS,SAAS;AAAA,IACrC;AAAA,EACF,QAAQ;AAGN,WAAO,EAAE,qBAAqB,MAAM,iBAAiB,KAAK;AAAA,EAC5D;AACF;AAEA,eAAe,WACb,IACA,OACA,SACA,YACwE;AACxE,QAAM,QAAQ,oBAAI,IAAoB;AACtC,QAAM,WAAW,oBAAI,IAAoB;AACzC,MAAI,QAAQ,QAAQ;AAClB,UAAM,OAAO,MAAM;AAAA,MACjB;AAAA,MACA;AAAA,MACA,EAAE,IAAI,EAAE,KAAK,QAAQ,GAAG,GAAG,OAAO,WAAW,KAAK;AAAA,MAClD,CAAC;AAAA,MACD;AAAA,IACF;AACA,eAAW,OAAO,KAAM,OAAM,IAAI,IAAI,IAAI,IAAI,KAAK;AAAA,EACrD;AACA,MAAI,WAAW,QAAQ;AACrB,UAAM,OAAO,MAAM;AAAA,MACjB;AAAA,MACA;AAAA,MACA,EAAE,IAAI,EAAE,KAAK,WAAW,GAAG,GAAG,OAAO,WAAW,KAAK;AAAA,MACrD,CAAC;AAAA,MACD;AAAA,IACF;AACA,eAAW,OAAO,KAAM,UAAS,IAAI,IAAI,IAAI,IAAI,IAAI;AAAA,EACvD;AACA,SAAO,EAAE,OAAO,SAAS;AAC3B;AA2BA,eAAsB,IAAI,KAAc;AACtC,MAAI;AACF,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,QAAI,CAAC,MAAM;AACT,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,6BAA6B,cAAc,EAAE,CAAC;AAAA,IAChG;AAEA,UAAM,WAAW,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AAC3F,UAAM,WAAW,UAAU,YAAY,KAAK,YAAY;AACxD,UAAM,iBAAiB,UAAU,cAAc,KAAK,SAAS;AAC7D,QAAI,CAAC,YAAY,CAAC,gBAAgB;AAChC,YAAM,IAAI,cAAc,KAAK;AAAA,QAC3B,OAAO,UAAU,6BAA6B,uCAAuC;AAAA,MACvF,CAAC;AAAA,IACH;AAEA,UAAM,eAAe,MAAM,yBAAyB;AAAA,MAClD,SAAS;AAAA,MACT,QAAQ;AAAA,MACR,OAAO,EAAE,WAAW,QAAQ,KAAK,KAAK,UAAU,eAAe;AAAA,MAC/D,OAAO,uBAAuB,IAAI,GAAG;AAAA,IACvC,CAAC;AACD,QAAI,CAAC,aAAa,GAAI,QAAO,aAAa;AAC1C,UAAM,EAAE,QAAQ,IAAI;AAEpB,UAAM,QAAQ,UAAU,QAAQ,YAAY;AAC5C,UAAM,YAAyB;AAAA,MAC7B,MAAM,MAAM;AAAA,MACZ,OAAO,QAAQ,MAAM,SAAS;AAAA,MAC9B,KAAK,QAAQ,MAAM,OAAO;AAAA,MAC1B,iBAAiB,MAAM,mBAAmB;AAAA,IAC5C;AACA,UAAM,UAAU,eAAe;AAAA,MAC7B,OAAO,UAAU;AAAA,MACjB,KAAK,UAAU;AAAA,MACf,iBAAiB,UAAU;AAAA,IAC7B,CAAC;AACD,QAAI,CAAC,QAAQ,SAAS,QAAQ,oBAAoB,QAAQ,QAAQ,mBAAmB,GAAG;AACtF,aAAO,QAAQ,QAAQ,KAAK,oBAAoB;AAAA,IAClD;AAEA,UAAM,QAAQ,EAAE,UAAU,eAAe;AACzC,UAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC3D,UAAM,SAAS,OAAO,KAAK,QAAQ,WAAW,KAAK,MAAM;AAGzD,UAAM,YAAY,MAAM,qBAAqB,WAAW,QAAQ,CAAC,kBAAkB,GAAG,KAAK;AAC3F,UAAM,iBAAiB,MAAM,qBAAqB,WAAW,QAAQ,CAAC,uBAAuB,GAAG,KAAK;AACrG,UAAM,eAAe,UAAU;AAE/B,UAAM,kBAAkB,MAAM,uBAAuB,WAAW,QAAQ;AACxE,UAAM,SAAS,MAAM,qBAAqB;AAAA,MACxC;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,cAAc,eAAe;AAAA,MAC7B,cAAc,UAAU;AAAA,MACxB,qBAAqB,gBAAgB;AAAA,IACvC,CAAC;AAED,UAAM,gBACJ,gBAAgB,MAAM,gBAAgB,MAAM,gBAAgB,OAAO;AACrE,QAAI,CAAC,cAAe,QAAO,QAAQ,QAAQ,KAAK,oBAAoB;AACpE,UAAM,cAAc,kBAAkB,OAAO;AAE7C,UAAM,QAAQ;AAAA,MACZ;AAAA,MACA;AAAA,MACA;AAAA,MACA,WAAW;AAAA,MACX,MAAM,EAAE,MAAM,UAAU,MAAM,MAAM,EAAE,GAAG,MAAM,UAAU,MAAM,MAAM,CAAC,EAAE;AAAA,IAC1E;AACA,UAAM,OAAQ,MAAM;AAAA,MAClB;AAAA,MACA;AAAA,MACA;AAAA,MACA,EAAE,SAAS,EAAE,WAAW,MAAM,GAAG,OAAO,gBAAgB;AAAA,MACxD;AAAA,IACF;AAEA,UAAM,UAAU,KAAK;AAAA,MACnB,CAAC,QACC,oBAAoB,QAAQ,IAAI,iBAAiB,IAAI,KACpD,eAAe,CAAC,IAAI;AAAA,IACzB;AACA,UAAM,OAAO,IAAI,IAAI,QAAQ,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC;AACxD,UAAM,QAAQ,QACX,IAAI,CAAC,QAAQ,UAAU,GAAG,CAAC,EAC3B,OAAO,CAAC,SAA8B,SAAS,IAAI;AAEtD,UAAM,gBAA6B;AAAA,MACjC,MAAM,MAAM;AAAA,MACZ,OAAO,QAAQ;AAAA,MACf,KAAK,QAAQ;AAAA,MACb,iBAAiB,QAAQ;AAAA,IAC3B;AACA,UAAM,WAAW;AAAA,MACf;AAAA,MACA;AAAA,MACA,MAAM,YAAY,EAAE,WAAW,MAAM,UAAU,IAAI;AAAA,IACrD;AACA,UAAM,WAAW,wBAAwB,UAAU;AAAA,MACjD;AAAA,MACA;AAAA,MACA,WAAW;AAAA,MACX,iBAAiB,gBAAgB;AAAA,MACjC;AAAA,MACA,WAAW,MAAM,aAAa;AAAA,IAChC,CAAC;AAKD,QAAI,CAAC,SAAS,OAAQ,QAAO,QAAQ,QAAQ,KAAK,EAAE,GAAG,sBAAsB,SAAS,CAAC;AAEvF,UAAM,UAAU,oBAAI,IAAY;AAChC,UAAM,aAAa,oBAAI,IAAY;AACnC,eAAW,WAAW,UAAU;AAC9B,YAAM,MAAM,QAAQ,KAAK,KAAK,IAAI,QAAQ,EAAE,IAAI;AAChD,UAAI,KAAK,OAAQ,SAAQ,IAAI,IAAI,MAAM;AACvC,UAAI,KAAK,cAAe,YAAW,IAAI,IAAI,aAAa;AAAA,IAC1D;AACA,UAAM,SAAS,MAAM,WAAW,IAAI,OAAO,CAAC,GAAG,OAAO,GAAG,CAAC,GAAG,UAAU,CAAC;AAExE,UAAM,QAAuB,CAAC;AAC9B,eAAW,WAAW,UAAU;AAC9B,YAAM,MAAM,QAAQ,KAAK,KAAK,IAAI,QAAQ,EAAE,IAAI;AAChD,UAAI,CAAC,IAAK;AACV,YAAM,WAAW,eAAe;AAAA,QAC9B,OAAO,QAAQ,MAAM;AAAA,QACrB,KAAK,QAAQ,MAAM;AAAA,QACnB,iBAAiB,QAAQ,MAAM;AAAA,MACjC,CAAC;AACD,YAAM,KAAK;AAAA,QACT,IAAI,IAAI;AAAA,QACR,iBAAiB,IAAI;AAAA,QACrB,MAAM,QAAQ,MAAM;AAAA,QACpB,YAAY,SAAS,SAAS;AAAA,QAC9B,UAAU,SAAS,OAAO;AAAA,QAC1B,kBAAkB,SAAS,mBAAmB;AAAA,QAC9C,iBAAiB,QAAQ;AAAA,QACzB,kBAAkB,SAAS;AAAA,QAC3B,SAAS,IAAI,UAAU;AAAA,QACvB,YAAY,IAAI,SAAS,OAAO,MAAM,IAAI,IAAI,MAAM,KAAK,OAAO;AAAA,QAChE,iBAAiB,IAAI,iBAAiB;AAAA,QACtC,cAAc,IAAI,gBAAgB,OAAO,SAAS,IAAI,IAAI,aAAa,KAAK,OAAO;AAAA,QACnF,OAAO,IAAI,SAAS;AAAA,MACtB,CAAC;AAAA,IACH;AAEA,WAAO,QAAQ,QAAQ,KAAK,EAAE,OAAO,OAAO,MAAM,QAAQ,SAAS,CAAC;AAAA,EACtE,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,GAAG;AACxB,aAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,IAC3D;AACA,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,QAAI,eAAe,EAAE,UAAU;AAC7B,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,UAAU,gCAAgC,iBAAiB,GAAG,SAAS,IAAI,OAAO;AAAA,QAC3F,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AACA,WAAO,MAAM,qDAAqD,EAAE,IAAI,CAAC;AACzE,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,UAAU,yBAAyB,uBAAuB,EAAE;AAAA,MACrE,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aACE;AAAA,MACF,OAAO;AAAA,MACP,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,uBAAuB,QAAQ,uBAAuB;AAAA,QAClF,EAAE,QAAQ,KAAK,aAAa,kCAAkC,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,QACtG,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,MACtF;AAAA,IACF;AAAA,EACF;AACF;",
+  "names": []
+}