@open-mercato/core 0.8.1-develop.7296.1.2111d779db → 0.9.0

package/dist/modules/forms/api/[id]/theme-logo/route.js

@@ -0,0 +1,117 @@
+import { NextResponse } from "next/server";
+import { randomUUID } from "node:crypto";
+import { z } from "zod";
+import { storePartitionFile } from "@open-mercato/core/modules/attachments/lib/storage";
+import {
+  detectImageMimeType,
+  validateImageMagicBytes,
+  validateImageDimensions
+} from "@open-mercato/core/modules/attachments/lib/imageSafety";
+import { buildAttachmentFileUrl } from "@open-mercato/core/modules/attachments/lib/imageUrls";
+import { Attachment, AttachmentPartition } from "@open-mercato/core/modules/attachments/data/entities";
+import { Form } from "../../../data/entities.js";
+import { buildFormsRouteContext, handleRouteError, jsonError } from "../../helpers.js";
+const metadata = {
+  POST: { requireAuth: true, requireFeatures: ["forms.design"] }
+};
+const LOGO_PARTITION_CODE = "formLogos";
+const MAX_LOGO_BYTES = 2 * 1024 * 1024;
+async function ensureLogoPartition(em) {
+  const existing = await em.findOne(AttachmentPartition, { code: LOGO_PARTITION_CODE });
+  if (existing) return;
+  const partition = em.create(AttachmentPartition, {
+    code: LOGO_PARTITION_CODE,
+    title: "Form logos",
+    description: "Public logos/headers uploaded for branded forms.",
+    storageDriver: "local",
+    isPublic: true,
+    requiresOcr: false
+  });
+  em.persist(partition);
+  await em.flush();
+}
+async function POST(req, context) {
+  try {
+    const { ctx, organizationId, tenantId } = await buildFormsRouteContext(req);
+    const em = ctx.container.resolve("em");
+    const params = await Promise.resolve(context.params);
+    const formId = String(params.id);
+    const form = await em.findOne(Form, {
+      id: formId,
+      ...organizationId ? { organizationId } : {},
+      ...tenantId ? { tenantId } : {}
+    });
+    if (!form) return jsonError(404, "forms.errors.not_found");
+    const contentType = req.headers.get("content-type") ?? "";
+    if (!contentType.includes("multipart/form-data")) {
+      return jsonError(400, "forms.errors.invalid_upload");
+    }
+    const formData = await req.formData();
+    const file = formData.get("file");
+    if (!(file instanceof File) || file.size === 0) {
+      return jsonError(422, "forms.errors.invalid_upload");
+    }
+    if (file.size > MAX_LOGO_BYTES) {
+      return jsonError(413, "forms.errors.file_too_large");
+    }
+    const buffer = Buffer.from(await file.arrayBuffer());
+    const detectedMime = detectImageMimeType(buffer);
+    const magic = validateImageMagicBytes(buffer, detectedMime);
+    if (!magic.ok) return jsonError(422, "forms.errors.invalid_image");
+    const dimensions = await validateImageDimensions(buffer);
+    if (!dimensions.ok) return jsonError(422, "forms.errors.invalid_image");
+    await ensureLogoPartition(em);
+    const stored = await storePartitionFile({
+      partitionCode: LOGO_PARTITION_CODE,
+      orgId: null,
+      tenantId: null,
+      fileName: file.name || "logo",
+      buffer
+    });
+    const assetId = randomUUID();
+    const attachment = em.create(Attachment, {
+      id: assetId,
+      entityId: "forms:theme-logo",
+      recordId: formId,
+      organizationId: null,
+      tenantId: null,
+      partitionCode: LOGO_PARTITION_CODE,
+      fileName: stored.fileName,
+      mimeType: detectedMime ?? "image/png",
+      fileSize: buffer.length,
+      storageDriver: "local",
+      storagePath: stored.storagePath,
+      url: buildAttachmentFileUrl(assetId),
+      storageMetadata: null
+    });
+    em.persist(attachment);
+    await em.flush();
+    return NextResponse.json({ assetId }, { status: 201 });
+  } catch (error) {
+    return handleRouteError("theme-logo", error);
+  }
+}
+const errorSchema = z.object({ error: z.string() });
+const responseSchema = z.object({ assetId: z.string().uuid() });
+const postMethodDoc = {
+  summary: "Upload a form logo/header image",
+  description: "Stores a brand logo as a public, unscoped attachment and returns its assetId for x-om-theme.logo. Requires forms.design.",
+  tags: ["Forms Authoring"],
+  responses: [{ status: 201, description: "Logo stored", schema: responseSchema }],
+  errors: [
+    { status: 400, description: "Not a multipart upload", schema: errorSchema },
+    { status: 404, description: "Form not found in scope", schema: errorSchema },
+    { status: 413, description: "File too large", schema: errorSchema },
+    { status: 422, description: "Missing file or not a valid image", schema: errorSchema }
+  ]
+};
+const openApi = {
+  summary: "Form logo upload",
+  methods: { POST: postMethodDoc }
+};
+export {
+  POST,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/forms/api/[id]/theme-logo/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../src/modules/forms/api/%5Bid%5D/theme-logo/route.ts"],
+  "sourcesContent": ["/**\n * Form logo upload \u2014 POST /api/forms/:id/theme-logo\n *\n * Authoring-only (`forms.design`). Stores a brand logo/header image so a themed\n * form can render it. The author NEVER supplies a URL \u2014 only the uploaded bytes;\n * the route returns an `assetId` that the studio writes into `x-om-theme.logo`.\n *\n * The image is validated (magic bytes + dimensions + size) and stored via the\n * core attachments storage into a PUBLIC, UNSCOPED partition row (`formLogos`,\n * no org/tenant) so the public image route can serve it to anonymous form\n * visitors on `/f/:slug` and `/embed/:slug` (see D4 in\n * `.ai/specs/2026-05-22-forms-styling-ux-and-branding.md`). The asset is\n * referenced only by opaque UUID.\n */\n\nimport { NextResponse, type NextRequest } from 'next/server'\nimport { randomUUID } from 'node:crypto'\nimport { z } from 'zod'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport type { OpenApiRouteDoc, OpenApiMethodDoc } from '@open-mercato/shared/lib/openapi'\nimport { storePartitionFile } from '@open-mercato/core/modules/attachments/lib/storage'\nimport {\n  detectImageMimeType,\n  validateImageMagicBytes,\n  validateImageDimensions,\n} from '@open-mercato/core/modules/attachments/lib/imageSafety'\nimport { buildAttachmentFileUrl } from '@open-mercato/core/modules/attachments/lib/imageUrls'\nimport { Attachment, AttachmentPartition } from '@open-mercato/core/modules/attachments/data/entities'\nimport { Form } from '../../../data/entities'\nimport { buildFormsRouteContext, handleRouteError, jsonError } from '../../helpers'\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: ['forms.design'] },\n}\n\nconst LOGO_PARTITION_CODE = 'formLogos'\nconst MAX_LOGO_BYTES = 2 * 1024 * 1024 // 2 MiB \u2014 logos/headers are small\n\nasync function ensureLogoPartition(em: EntityManager): Promise<void> {\n  const existing = await em.findOne(AttachmentPartition, { code: LOGO_PARTITION_CODE })\n  if (existing) return\n  const partition = em.create(AttachmentPartition, {\n    code: LOGO_PARTITION_CODE,\n    title: 'Form logos',\n    description: 'Public logos/headers uploaded for branded forms.',\n    storageDriver: 'local',\n    isPublic: true,\n    requiresOcr: false,\n  })\n  em.persist(partition)\n  await em.flush()\n}\n\nexport async function POST(\n  req: NextRequest,\n  context: { params: { id: string } | Promise<{ id: string }> },\n) {\n  try {\n    const { ctx, organizationId, tenantId } = await buildFormsRouteContext(req)\n    const em = ctx.container.resolve('em') as EntityManager\n    const params = await Promise.resolve(context.params)\n    const formId = String(params.id)\n\n    // Ownership: the form must exist within the caller's scope.\n    const form = await em.findOne(Form, {\n      id: formId,\n      ...(organizationId ? { organizationId } : {}),\n      ...(tenantId ? { tenantId } : {}),\n    })\n    if (!form) return jsonError(404, 'forms.errors.not_found')\n\n    const contentType = req.headers.get('content-type') ?? ''\n    if (!contentType.includes('multipart/form-data')) {\n      return jsonError(400, 'forms.errors.invalid_upload')\n    }\n    const formData = await req.formData()\n    const file = formData.get('file')\n    if (!(file instanceof File) || file.size === 0) {\n      return jsonError(422, 'forms.errors.invalid_upload')\n    }\n    if (file.size > MAX_LOGO_BYTES) {\n      return jsonError(413, 'forms.errors.file_too_large')\n    }\n\n    const buffer = Buffer.from(await file.arrayBuffer())\n    const detectedMime = detectImageMimeType(buffer)\n    const magic = validateImageMagicBytes(buffer, detectedMime)\n    if (!magic.ok) return jsonError(422, 'forms.errors.invalid_image')\n    const dimensions = await validateImageDimensions(buffer)\n    if (!dimensions.ok) return jsonError(422, 'forms.errors.invalid_image')\n\n    await ensureLogoPartition(em)\n\n    const stored = await storePartitionFile({\n      partitionCode: LOGO_PARTITION_CODE,\n      orgId: null,\n      tenantId: null,\n      fileName: file.name || 'logo',\n      buffer,\n    })\n\n    const assetId = randomUUID()\n    const attachment = em.create(Attachment, {\n      id: assetId,\n      entityId: 'forms:theme-logo',\n      recordId: formId,\n      organizationId: null,\n      tenantId: null,\n      partitionCode: LOGO_PARTITION_CODE,\n      fileName: stored.fileName,\n      mimeType: detectedMime ?? 'image/png',\n      fileSize: buffer.length,\n      storageDriver: 'local',\n      storagePath: stored.storagePath,\n      url: buildAttachmentFileUrl(assetId),\n      storageMetadata: null,\n    })\n    em.persist(attachment)\n    await em.flush()\n\n    return NextResponse.json({ assetId }, { status: 201 })\n  } catch (error) {\n    return handleRouteError('theme-logo', error)\n  }\n}\n\nconst errorSchema = z.object({ error: z.string() })\nconst responseSchema = z.object({ assetId: z.string().uuid() })\n\nconst postMethodDoc: OpenApiMethodDoc = {\n  summary: 'Upload a form logo/header image',\n  description:\n    'Stores a brand logo as a public, unscoped attachment and returns its assetId for x-om-theme.logo. Requires forms.design.',\n  tags: ['Forms Authoring'],\n  responses: [{ status: 201, description: 'Logo stored', schema: responseSchema }],\n  errors: [\n    { status: 400, description: 'Not a multipart upload', schema: errorSchema },\n    { status: 404, description: 'Form not found in scope', schema: errorSchema },\n    { status: 413, description: 'File too large', schema: errorSchema },\n    { status: 422, description: 'Missing file or not a valid image', schema: errorSchema },\n  ],\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  summary: 'Form logo upload',\n  methods: { POST: postMethodDoc },\n}\n"],
+  "mappings": "AAeA,SAAS,oBAAsC;AAC/C,SAAS,kBAAkB;AAC3B,SAAS,SAAS;AAGlB,SAAS,0BAA0B;AACnC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,8BAA8B;AACvC,SAAS,YAAY,2BAA2B;AAChD,SAAS,YAAY;AACrB,SAAS,wBAAwB,kBAAkB,iBAAiB;AAE7D,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,cAAc,EAAE;AAC/D;AAEA,MAAM,sBAAsB;AAC5B,MAAM,iBAAiB,IAAI,OAAO;AAElC,eAAe,oBAAoB,IAAkC;AACnE,QAAM,WAAW,MAAM,GAAG,QAAQ,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AACpF,MAAI,SAAU;AACd,QAAM,YAAY,GAAG,OAAO,qBAAqB;AAAA,IAC/C,MAAM;AAAA,IACN,OAAO;AAAA,IACP,aAAa;AAAA,IACb,eAAe;AAAA,IACf,UAAU;AAAA,IACV,aAAa;AAAA,EACf,CAAC;AACD,KAAG,QAAQ,SAAS;AACpB,QAAM,GAAG,MAAM;AACjB;AAEA,eAAsB,KACpB,KACA,SACA;AACA,MAAI;AACF,UAAM,EAAE,KAAK,gBAAgB,SAAS,IAAI,MAAM,uBAAuB,GAAG;AAC1E,UAAM,KAAK,IAAI,UAAU,QAAQ,IAAI;AACrC,UAAM,SAAS,MAAM,QAAQ,QAAQ,QAAQ,MAAM;AACnD,UAAM,SAAS,OAAO,OAAO,EAAE;AAG/B,UAAM,OAAO,MAAM,GAAG,QAAQ,MAAM;AAAA,MAClC,IAAI;AAAA,MACJ,GAAI,iBAAiB,EAAE,eAAe,IAAI,CAAC;AAAA,MAC3C,GAAI,WAAW,EAAE,SAAS,IAAI,CAAC;AAAA,IACjC,CAAC;AACD,QAAI,CAAC,KAAM,QAAO,UAAU,KAAK,wBAAwB;AAEzD,UAAM,cAAc,IAAI,QAAQ,IAAI,cAAc,KAAK;AACvD,QAAI,CAAC,YAAY,SAAS,qBAAqB,GAAG;AAChD,aAAO,UAAU,KAAK,6BAA6B;AAAA,IACrD;AACA,UAAM,WAAW,MAAM,IAAI,SAAS;AACpC,UAAM,OAAO,SAAS,IAAI,MAAM;AAChC,QAAI,EAAE,gBAAgB,SAAS,KAAK,SAAS,GAAG;AAC9C,aAAO,UAAU,KAAK,6BAA6B;AAAA,IACrD;AACA,QAAI,KAAK,OAAO,gBAAgB;AAC9B,aAAO,UAAU,KAAK,6BAA6B;AAAA,IACrD;AAEA,UAAM,SAAS,OAAO,KAAK,MAAM,KAAK,YAAY,CAAC;AACnD,UAAM,eAAe,oBAAoB,MAAM;AAC/C,UAAM,QAAQ,wBAAwB,QAAQ,YAAY;AAC1D,QAAI,CAAC,MAAM,GAAI,QAAO,UAAU,KAAK,4BAA4B;AACjE,UAAM,aAAa,MAAM,wBAAwB,MAAM;AACvD,QAAI,CAAC,WAAW,GAAI,QAAO,UAAU,KAAK,4BAA4B;AAEtE,UAAM,oBAAoB,EAAE;AAE5B,UAAM,SAAS,MAAM,mBAAmB;AAAA,MACtC,eAAe;AAAA,MACf,OAAO;AAAA,MACP,UAAU;AAAA,MACV,UAAU,KAAK,QAAQ;AAAA,MACvB;AAAA,IACF,CAAC;AAED,UAAM,UAAU,WAAW;AAC3B,UAAM,aAAa,GAAG,OAAO,YAAY;AAAA,MACvC,IAAI;AAAA,MACJ,UAAU;AAAA,MACV,UAAU;AAAA,MACV,gBAAgB;AAAA,MAChB,UAAU;AAAA,MACV,eAAe;AAAA,MACf,UAAU,OAAO;AAAA,MACjB,UAAU,gBAAgB;AAAA,MAC1B,UAAU,OAAO;AAAA,MACjB,eAAe;AAAA,MACf,aAAa,OAAO;AAAA,MACpB,KAAK,uBAAuB,OAAO;AAAA,MACnC,iBAAiB;AAAA,IACnB,CAAC;AACD,OAAG,QAAQ,UAAU;AACrB,UAAM,GAAG,MAAM;AAEf,WAAO,aAAa,KAAK,EAAE,QAAQ,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACvD,SAAS,OAAO;AACd,WAAO,iBAAiB,cAAc,KAAK;AAAA,EAC7C;AACF;AAEA,MAAM,cAAc,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAClD,MAAM,iBAAiB,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAE9D,MAAM,gBAAkC;AAAA,EACtC,SAAS;AAAA,EACT,aACE;AAAA,EACF,MAAM,CAAC,iBAAiB;AAAA,EACxB,WAAW,CAAC,EAAE,QAAQ,KAAK,aAAa,eAAe,QAAQ,eAAe,CAAC;AAAA,EAC/E,QAAQ;AAAA,IACN,EAAE,QAAQ,KAAK,aAAa,0BAA0B,QAAQ,YAAY;AAAA,IAC1E,EAAE,QAAQ,KAAK,aAAa,2BAA2B,QAAQ,YAAY;AAAA,IAC3E,EAAE,QAAQ,KAAK,aAAa,kBAAkB,QAAQ,YAAY;AAAA,IAClE,EAAE,QAAQ,KAAK,aAAa,qCAAqC,QAAQ,YAAY;AAAA,EACvF;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,SAAS;AAAA,EACT,SAAS,EAAE,MAAM,cAAc;AACjC;",
+  "names": []
+}

package/dist/modules/forms/api/[id]/versions/[versionId]/diff/route.js

@@ -0,0 +1,125 @@
+import { NextResponse } from "next/server";
+import { z } from "zod";
+import { FormVersion } from "../../../../../data/entities.js";
+import { formVersionDiffQuerySchema } from "../../../../../data/validators.js";
+import { buildFormsRouteContext, handleRouteError, jsonError } from "../../../../helpers.js";
+const metadata = {
+  GET: { requireAuth: true, requireFeatures: ["forms.view"] }
+};
+const fieldDescriptorSchema = z.object({
+  key: z.string(),
+  type: z.string(),
+  sectionKey: z.string().nullable(),
+  sensitive: z.boolean(),
+  editableBy: z.array(z.string()),
+  visibleTo: z.array(z.string()),
+  required: z.boolean()
+});
+const fieldDiffSchema = z.discriminatedUnion("kind", [
+  z.object({ kind: z.literal("added"), key: z.string(), field: fieldDescriptorSchema }),
+  z.object({ kind: z.literal("removed"), key: z.string(), field: fieldDescriptorSchema }),
+  z.object({
+    kind: z.literal("modified"),
+    key: z.string(),
+    changes: z.array(
+      z.object({ path: z.string(), before: z.unknown(), after: z.unknown() })
+    )
+  })
+]);
+const responseSchema = z.object({
+  base: z.object({
+    id: z.string().uuid(),
+    versionNumber: z.number().int(),
+    schemaHash: z.string()
+  }),
+  against: z.object({
+    id: z.string().uuid(),
+    versionNumber: z.number().int(),
+    schemaHash: z.string()
+  }),
+  diff: z.array(fieldDiffSchema)
+});
+const errorSchema = z.object({ error: z.string() });
+function extractIds(req) {
+  const url = new URL(req.url);
+  const segments = url.pathname.split("/").filter(Boolean);
+  const formsIdx = segments.findIndex((segment) => segment === "forms");
+  const versionsIdx = segments.findIndex((segment) => segment === "versions");
+  const formId = formsIdx >= 0 ? segments[formsIdx + 1] ?? "" : "";
+  const versionId = versionsIdx >= 0 ? segments[versionsIdx + 1] ?? "" : "";
+  return { formId, versionId };
+}
+async function GET(req) {
+  try {
+    const { ctx, organizationId, tenantId } = await buildFormsRouteContext(req);
+    if (!organizationId || !tenantId) {
+      return jsonError(400, "forms.errors.organization_required");
+    }
+    const { formId, versionId } = extractIds(req);
+    if (!formId || !versionId) return jsonError(400, "forms.errors.invalid_id");
+    const url = new URL(req.url);
+    const queryRaw = { against: url.searchParams.get("against") ?? "" };
+    const parsed = formVersionDiffQuerySchema.parse(queryRaw);
+    const em = ctx.container.resolve("em");
+    const [base, against] = await Promise.all([
+      em.findOne(FormVersion, { id: versionId, formId, tenantId, organizationId }),
+      em.findOne(FormVersion, {
+        id: parsed.against,
+        formId,
+        tenantId,
+        organizationId
+      })
+    ]);
+    if (!base) return jsonError(404, "forms.errors.version_not_found");
+    if (!against) return jsonError(404, "forms.errors.version_not_found");
+    const compiler = ctx.container.resolve("formVersionCompiler");
+    const differ = ctx.container.resolve("formVersionDiffer");
+    const baseCompiled = compiler.compile({
+      id: base.id,
+      updatedAt: base.updatedAt,
+      schema: base.schema,
+      uiSchema: base.uiSchema
+    });
+    const againstCompiled = compiler.compile({
+      id: against.id,
+      updatedAt: against.updatedAt,
+      schema: against.schema,
+      uiSchema: against.uiSchema
+    });
+    return NextResponse.json({
+      base: {
+        id: base.id,
+        versionNumber: base.versionNumber,
+        schemaHash: baseCompiled.schemaHash
+      },
+      against: {
+        id: against.id,
+        versionNumber: against.versionNumber,
+        schemaHash: againstCompiled.schemaHash
+      },
+      diff: differ.diff(againstCompiled, baseCompiled)
+    });
+  } catch (error) {
+    return handleRouteError("forms.versions.diff.GET", error);
+  }
+}
+const openApi = {
+  tag: "Forms",
+  summary: "Compute a structural diff between two form versions",
+  pathParams: z.object({ id: z.string().uuid(), versionId: z.string().uuid() }),
+  methods: {
+    GET: {
+      summary: "Diff form versions",
+      description: "Returns added/removed/modified fields between the URL `versionId` (newer) and the `against` query param (older).",
+      query: formVersionDiffQuerySchema,
+      responses: [{ status: 200, description: "Diff payload", schema: responseSchema }],
+      errors: [{ status: 404, description: "Version not found", schema: errorSchema }]
+    }
+  }
+};
+export {
+  GET,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/forms/api/[id]/versions/[versionId]/diff/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../../../src/modules/forms/api/%5Bid%5D/versions/%5BversionId%5D/diff/route.ts"],
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { FormVersion } from '../../../../../data/entities'\nimport { formVersionDiffQuerySchema } from '../../../../../data/validators'\nimport { buildFormsRouteContext, handleRouteError, jsonError } from '../../../../helpers'\nimport type { FormVersionCompiler } from '../../../../../services/form-version-compiler'\nimport type { FormVersionDiffer } from '../../../../../services/form-version-differ'\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['forms.view'] },\n}\n\nconst fieldDescriptorSchema = z.object({\n  key: z.string(),\n  type: z.string(),\n  sectionKey: z.string().nullable(),\n  sensitive: z.boolean(),\n  editableBy: z.array(z.string()),\n  visibleTo: z.array(z.string()),\n  required: z.boolean(),\n})\n\nconst fieldDiffSchema = z.discriminatedUnion('kind', [\n  z.object({ kind: z.literal('added'), key: z.string(), field: fieldDescriptorSchema }),\n  z.object({ kind: z.literal('removed'), key: z.string(), field: fieldDescriptorSchema }),\n  z.object({\n    kind: z.literal('modified'),\n    key: z.string(),\n    changes: z.array(\n      z.object({ path: z.string(), before: z.unknown(), after: z.unknown() }),\n    ),\n  }),\n])\n\nconst responseSchema = z.object({\n  base: z.object({\n    id: z.string().uuid(),\n    versionNumber: z.number().int(),\n    schemaHash: z.string(),\n  }),\n  against: z.object({\n    id: z.string().uuid(),\n    versionNumber: z.number().int(),\n    schemaHash: z.string(),\n  }),\n  diff: z.array(fieldDiffSchema),\n})\n\nconst errorSchema = z.object({ error: z.string() })\n\nfunction extractIds(req: Request): { formId: string; versionId: string } {\n  const url = new URL(req.url)\n  const segments = url.pathname.split('/').filter(Boolean)\n  const formsIdx = segments.findIndex((segment) => segment === 'forms')\n  const versionsIdx = segments.findIndex((segment) => segment === 'versions')\n  const formId = formsIdx >= 0 ? segments[formsIdx + 1] ?? '' : ''\n  const versionId = versionsIdx >= 0 ? segments[versionsIdx + 1] ?? '' : ''\n  return { formId, versionId }\n}\n\nexport async function GET(req: Request) {\n  try {\n    const { ctx, organizationId, tenantId } = await buildFormsRouteContext(req)\n    if (!organizationId || !tenantId) {\n      return jsonError(400, 'forms.errors.organization_required')\n    }\n    const { formId, versionId } = extractIds(req)\n    if (!formId || !versionId) return jsonError(400, 'forms.errors.invalid_id')\n\n    const url = new URL(req.url)\n    const queryRaw = { against: url.searchParams.get('against') ?? '' }\n    const parsed = formVersionDiffQuerySchema.parse(queryRaw)\n\n    const em = ctx.container.resolve('em') as EntityManager\n    const [base, against] = await Promise.all([\n      em.findOne(FormVersion, { id: versionId, formId, tenantId, organizationId }),\n      em.findOne(FormVersion, {\n        id: parsed.against,\n        formId,\n        tenantId,\n        organizationId,\n      }),\n    ])\n    if (!base) return jsonError(404, 'forms.errors.version_not_found')\n    if (!against) return jsonError(404, 'forms.errors.version_not_found')\n\n    const compiler = ctx.container.resolve('formVersionCompiler') as FormVersionCompiler\n    const differ = ctx.container.resolve('formVersionDiffer') as FormVersionDiffer\n\n    const baseCompiled = compiler.compile({\n      id: base.id,\n      updatedAt: base.updatedAt,\n      schema: base.schema,\n      uiSchema: base.uiSchema,\n    })\n    const againstCompiled = compiler.compile({\n      id: against.id,\n      updatedAt: against.updatedAt,\n      schema: against.schema,\n      uiSchema: against.uiSchema,\n    })\n\n    return NextResponse.json({\n      base: {\n        id: base.id,\n        versionNumber: base.versionNumber,\n        schemaHash: baseCompiled.schemaHash,\n      },\n      against: {\n        id: against.id,\n        versionNumber: against.versionNumber,\n        schemaHash: againstCompiled.schemaHash,\n      },\n      diff: differ.diff(againstCompiled, baseCompiled),\n    })\n  } catch (error) {\n    return handleRouteError('forms.versions.diff.GET', error)\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Forms',\n  summary: 'Compute a structural diff between two form versions',\n  pathParams: z.object({ id: z.string().uuid(), versionId: z.string().uuid() }),\n  methods: {\n    GET: {\n      summary: 'Diff form versions',\n      description:\n        'Returns added/removed/modified fields between the URL `versionId` (newer) and the `against` query param (older).',\n      query: formVersionDiffQuerySchema,\n      responses: [{ status: 200, description: 'Diff payload', schema: responseSchema }],\n      errors: [{ status: 404, description: 'Version not found', schema: errorSchema }],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAGlB,SAAS,mBAAmB;AAC5B,SAAS,kCAAkC;AAC3C,SAAS,wBAAwB,kBAAkB,iBAAiB;AAI7D,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,YAAY,EAAE;AAC5D;AAEA,MAAM,wBAAwB,EAAE,OAAO;AAAA,EACrC,KAAK,EAAE,OAAO;AAAA,EACd,MAAM,EAAE,OAAO;AAAA,EACf,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,EAChC,WAAW,EAAE,QAAQ;AAAA,EACrB,YAAY,EAAE,MAAM,EAAE,OAAO,CAAC;AAAA,EAC9B,WAAW,EAAE,MAAM,EAAE,OAAO,CAAC;AAAA,EAC7B,UAAU,EAAE,QAAQ;AACtB,CAAC;AAED,MAAM,kBAAkB,EAAE,mBAAmB,QAAQ;AAAA,EACnD,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,OAAO,GAAG,KAAK,EAAE,OAAO,GAAG,OAAO,sBAAsB,CAAC;AAAA,EACpF,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,SAAS,GAAG,KAAK,EAAE,OAAO,GAAG,OAAO,sBAAsB,CAAC;AAAA,EACtF,EAAE,OAAO;AAAA,IACP,MAAM,EAAE,QAAQ,UAAU;AAAA,IAC1B,KAAK,EAAE,OAAO;AAAA,IACd,SAAS,EAAE;AAAA,MACT,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,GAAG,QAAQ,EAAE,QAAQ,GAAG,OAAO,EAAE,QAAQ,EAAE,CAAC;AAAA,IACxE;AAAA,EACF,CAAC;AACH,CAAC;AAED,MAAM,iBAAiB,EAAE,OAAO;AAAA,EAC9B,MAAM,EAAE,OAAO;AAAA,IACb,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,IACpB,eAAe,EAAE,OAAO,EAAE,IAAI;AAAA,IAC9B,YAAY,EAAE,OAAO;AAAA,EACvB,CAAC;AAAA,EACD,SAAS,EAAE,OAAO;AAAA,IAChB,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,IACpB,eAAe,EAAE,OAAO,EAAE,IAAI;AAAA,IAC9B,YAAY,EAAE,OAAO;AAAA,EACvB,CAAC;AAAA,EACD,MAAM,EAAE,MAAM,eAAe;AAC/B,CAAC;AAED,MAAM,cAAc,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAElD,SAAS,WAAW,KAAqD;AACvE,QAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,QAAM,WAAW,IAAI,SAAS,MAAM,GAAG,EAAE,OAAO,OAAO;AACvD,QAAM,WAAW,SAAS,UAAU,CAAC,YAAY,YAAY,OAAO;AACpE,QAAM,cAAc,SAAS,UAAU,CAAC,YAAY,YAAY,UAAU;AAC1E,QAAM,SAAS,YAAY,IAAI,SAAS,WAAW,CAAC,KAAK,KAAK;AAC9D,QAAM,YAAY,eAAe,IAAI,SAAS,cAAc,CAAC,KAAK,KAAK;AACvE,SAAO,EAAE,QAAQ,UAAU;AAC7B;AAEA,eAAsB,IAAI,KAAc;AACtC,MAAI;AACF,UAAM,EAAE,KAAK,gBAAgB,SAAS,IAAI,MAAM,uBAAuB,GAAG;AAC1E,QAAI,CAAC,kBAAkB,CAAC,UAAU;AAChC,aAAO,UAAU,KAAK,oCAAoC;AAAA,IAC5D;AACA,UAAM,EAAE,QAAQ,UAAU,IAAI,WAAW,GAAG;AAC5C,QAAI,CAAC,UAAU,CAAC,UAAW,QAAO,UAAU,KAAK,yBAAyB;AAE1E,UAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,UAAM,WAAW,EAAE,SAAS,IAAI,aAAa,IAAI,SAAS,KAAK,GAAG;AAClE,UAAM,SAAS,2BAA2B,MAAM,QAAQ;AAExD,UAAM,KAAK,IAAI,UAAU,QAAQ,IAAI;AACrC,UAAM,CAAC,MAAM,OAAO,IAAI,MAAM,QAAQ,IAAI;AAAA,MACxC,GAAG,QAAQ,aAAa,EAAE,IAAI,WAAW,QAAQ,UAAU,eAAe,CAAC;AAAA,MAC3E,GAAG,QAAQ,aAAa;AAAA,QACtB,IAAI,OAAO;AAAA,QACX;AAAA,QACA;AAAA,QACA;AAAA,MACF,CAAC;AAAA,IACH,CAAC;AACD,QAAI,CAAC,KAAM,QAAO,UAAU,KAAK,gCAAgC;AACjE,QAAI,CAAC,QAAS,QAAO,UAAU,KAAK,gCAAgC;AAEpE,UAAM,WAAW,IAAI,UAAU,QAAQ,qBAAqB;AAC5D,UAAM,SAAS,IAAI,UAAU,QAAQ,mBAAmB;AAExD,UAAM,eAAe,SAAS,QAAQ;AAAA,MACpC,IAAI,KAAK;AAAA,MACT,WAAW,KAAK;AAAA,MAChB,QAAQ,KAAK;AAAA,MACb,UAAU,KAAK;AAAA,IACjB,CAAC;AACD,UAAM,kBAAkB,SAAS,QAAQ;AAAA,MACvC,IAAI,QAAQ;AAAA,MACZ,WAAW,QAAQ;AAAA,MACnB,QAAQ,QAAQ;AAAA,MAChB,UAAU,QAAQ;AAAA,IACpB,CAAC;AAED,WAAO,aAAa,KAAK;AAAA,MACvB,MAAM;AAAA,QACJ,IAAI,KAAK;AAAA,QACT,eAAe,KAAK;AAAA,QACpB,YAAY,aAAa;AAAA,MAC3B;AAAA,MACA,SAAS;AAAA,QACP,IAAI,QAAQ;AAAA,QACZ,eAAe,QAAQ;AAAA,QACvB,YAAY,gBAAgB;AAAA,MAC9B;AAAA,MACA,MAAM,OAAO,KAAK,iBAAiB,YAAY;AAAA,IACjD,CAAC;AAAA,EACH,SAAS,OAAO;AACd,WAAO,iBAAiB,2BAA2B,KAAK;AAAA,EAC1D;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,GAAG,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAAA,EAC5E,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aACE;AAAA,MACF,OAAO;AAAA,MACP,WAAW,CAAC,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,eAAe,CAAC;AAAA,MAChF,QAAQ,CAAC,EAAE,QAAQ,KAAK,aAAa,qBAAqB,QAAQ,YAAY,CAAC;AAAA,IACjF;AAAA,EACF;AACF;",
+  "names": []
+}

package/dist/modules/forms/api/[id]/versions/[versionId]/publish/route.js

@@ -0,0 +1,99 @@
+import { NextResponse } from "next/server";
+import { z } from "zod";
+import { getCommandInterceptorHttpRejection } from "@open-mercato/shared/lib/commands/errors";
+import { readJsonSafe } from "@open-mercato/shared/lib/http/readJsonSafe";
+import {
+  formVersionPublishCommandSchema,
+  formVersionPublishRequestSchema
+} from "../../../../../data/validators.js";
+import {
+  attachOperationMetadata,
+  buildFormsRouteContext,
+  handleRouteError,
+  jsonError,
+  withMutationGuard,
+  withScopedPayload
+} from "../../../../helpers.js";
+import { FORM_VERSION_RESOURCE_KIND } from "../../../../../commands/shared.js";
+const metadata = {
+  POST: { requireAuth: true, requireFeatures: ["forms.design"] }
+};
+const responseSchema = z.object({
+  versionId: z.string().uuid(),
+  versionNumber: z.number().int(),
+  updatedAt: z.string()
+});
+const errorSchema = z.object({ error: z.string() });
+function extractIds(req) {
+  const url = new URL(req.url);
+  const segments = url.pathname.split("/").filter(Boolean);
+  const formsIdx = segments.findIndex((segment) => segment === "forms");
+  const versionsIdx = segments.findIndex((segment) => segment === "versions");
+  const formId = formsIdx >= 0 ? segments[formsIdx + 1] ?? "" : "";
+  const versionId = versionsIdx >= 0 ? segments[versionsIdx + 1] ?? "" : "";
+  return { formId, versionId };
+}
+async function POST(req) {
+  try {
+    const { ctx, organizationId, tenantId, translate } = await buildFormsRouteContext(req);
+    if (!organizationId || !tenantId) {
+      return jsonError(400, "forms.errors.organization_required");
+    }
+    const { formId, versionId } = extractIds(req);
+    if (!formId || !versionId) return jsonError(400, "forms.errors.invalid_id");
+    const body = await readJsonSafe(req, {}) ?? {};
+    const parsed = formVersionPublishRequestSchema.parse(body);
+    const scoped = withScopedPayload({ ...parsed, formId, versionId }, ctx, translate);
+    const input = formVersionPublishCommandSchema.parse(scoped);
+    return await withMutationGuard({
+      ctx,
+      tenantId,
+      organizationId,
+      resourceKind: FORM_VERSION_RESOURCE_KIND,
+      resourceId: versionId,
+      operation: "custom",
+      request: req,
+      payload: scoped,
+      run: async () => {
+        const commandBus = ctx.container.resolve("commandBus");
+        const { result, logEntry } = await commandBus.execute("forms.form_version.publish", { input, ctx });
+        const response = NextResponse.json({
+          versionId: result?.versionId ?? versionId,
+          versionNumber: result?.versionNumber ?? null,
+          updatedAt: result?.updatedAt
+        });
+        return attachOperationMetadata(response, logEntry, FORM_VERSION_RESOURCE_KIND, result?.versionId ?? versionId);
+      }
+    });
+  } catch (error) {
+    const interceptorRejection = getCommandInterceptorHttpRejection(error);
+    if (interceptorRejection) {
+      return NextResponse.json(interceptorRejection.body, { status: interceptorRejection.status });
+    }
+    return handleRouteError("forms.versions.publish.POST", error);
+  }
+}
+const openApi = {
+  tag: "Forms",
+  summary: "Publish a form version",
+  pathParams: z.object({ id: z.string().uuid(), versionId: z.string().uuid() }),
+  methods: {
+    POST: {
+      summary: "Publish version",
+      description: "Publishes a draft version. Emits forms.form_version.published, advances form.current_published_version_id, and pins registry_version. Rejects with 422 no_op_publish if schema is unchanged.",
+      requestBody: { contentType: "application/json", schema: formVersionPublishRequestSchema },
+      responses: [{ status: 200, description: "Version published", schema: responseSchema }],
+      errors: [
+        { status: 404, description: "Version not found", schema: errorSchema },
+        { status: 409, description: "Version is frozen", schema: errorSchema },
+        { status: 422, description: "No-op or schema invalid", schema: errorSchema }
+      ]
+    }
+  }
+};
+export {
+  POST,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/forms/api/[id]/versions/[versionId]/publish/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../../../src/modules/forms/api/%5Bid%5D/versions/%5BversionId%5D/publish/route.ts"],
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { CommandBus } from '@open-mercato/shared/lib/commands'\nimport { getCommandInterceptorHttpRejection } from '@open-mercato/shared/lib/commands/errors'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { readJsonSafe } from '@open-mercato/shared/lib/http/readJsonSafe'\nimport {\n  formVersionPublishCommandSchema,\n  formVersionPublishRequestSchema,\n  type FormVersionPublishCommandInput,\n} from '../../../../../data/validators'\nimport {\n  attachOperationMetadata,\n  buildFormsRouteContext,\n  handleRouteError,\n  jsonError,\n  withMutationGuard,\n  withScopedPayload,\n} from '../../../../helpers'\nimport { FORM_VERSION_RESOURCE_KIND } from '../../../../../commands/shared'\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: ['forms.design'] },\n}\n\nconst responseSchema = z.object({\n  versionId: z.string().uuid(),\n  versionNumber: z.number().int(),\n  updatedAt: z.string(),\n})\n\nconst errorSchema = z.object({ error: z.string() })\n\nfunction extractIds(req: Request): { formId: string; versionId: string } {\n  const url = new URL(req.url)\n  const segments = url.pathname.split('/').filter(Boolean)\n  const formsIdx = segments.findIndex((segment) => segment === 'forms')\n  const versionsIdx = segments.findIndex((segment) => segment === 'versions')\n  const formId = formsIdx >= 0 ? segments[formsIdx + 1] ?? '' : ''\n  const versionId = versionsIdx >= 0 ? segments[versionsIdx + 1] ?? '' : ''\n  return { formId, versionId }\n}\n\nexport async function POST(req: Request) {\n  try {\n    const { ctx, organizationId, tenantId, translate } = await buildFormsRouteContext(req)\n    if (!organizationId || !tenantId) {\n      return jsonError(400, 'forms.errors.organization_required')\n    }\n    const { formId, versionId } = extractIds(req)\n    if (!formId || !versionId) return jsonError(400, 'forms.errors.invalid_id')\n\n    const body = (await readJsonSafe<Record<string, unknown>>(req, {})) ?? {}\n    const parsed = formVersionPublishRequestSchema.parse(body)\n    const scoped = withScopedPayload({ ...parsed, formId, versionId }, ctx, translate)\n    const input = formVersionPublishCommandSchema.parse(scoped) satisfies FormVersionPublishCommandInput\n\n    return await withMutationGuard({\n      ctx,\n      tenantId,\n      organizationId,\n      resourceKind: FORM_VERSION_RESOURCE_KIND,\n      resourceId: versionId,\n      operation: 'custom',\n      request: req,\n      payload: scoped as Record<string, unknown>,\n      run: async () => {\n        const commandBus = ctx.container.resolve('commandBus') as CommandBus\n        const { result, logEntry } = await commandBus.execute<\n          FormVersionPublishCommandInput,\n          { versionId: string; versionNumber: number; updatedAt: string }\n        >('forms.form_version.publish', { input, ctx })\n        const response = NextResponse.json({\n          versionId: result?.versionId ?? versionId,\n          versionNumber: result?.versionNumber ?? null,\n          updatedAt: result?.updatedAt,\n        })\n        return attachOperationMetadata(response, logEntry, FORM_VERSION_RESOURCE_KIND, result?.versionId ?? versionId)\n      },\n    })\n  } catch (error) {\n    const interceptorRejection = getCommandInterceptorHttpRejection(error)\n    if (interceptorRejection) {\n      return NextResponse.json(interceptorRejection.body, { status: interceptorRejection.status })\n    }\n    return handleRouteError('forms.versions.publish.POST', error)\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Forms',\n  summary: 'Publish a form version',\n  pathParams: z.object({ id: z.string().uuid(), versionId: z.string().uuid() }),\n  methods: {\n    POST: {\n      summary: 'Publish version',\n      description:\n        'Publishes a draft version. Emits forms.form_version.published, advances form.current_published_version_id, and pins registry_version. Rejects with 422 no_op_publish if schema is unchanged.',\n      requestBody: { contentType: 'application/json', schema: formVersionPublishRequestSchema },\n      responses: [{ status: 200, description: 'Version published', schema: responseSchema }],\n      errors: [\n        { status: 404, description: 'Version not found', schema: errorSchema },\n        { status: 409, description: 'Version is frozen', schema: errorSchema },\n        { status: 422, description: 'No-op or schema invalid', schema: errorSchema },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAElB,SAAS,0CAA0C;AAEnD,SAAS,oBAAoB;AAC7B;AAAA,EACE;AAAA,EACA;AAAA,OAEK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,kCAAkC;AAEpC,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,cAAc,EAAE;AAC/D;AAEA,MAAM,iBAAiB,EAAE,OAAO;AAAA,EAC9B,WAAW,EAAE,OAAO,EAAE,KAAK;AAAA,EAC3B,eAAe,EAAE,OAAO,EAAE,IAAI;AAAA,EAC9B,WAAW,EAAE,OAAO;AACtB,CAAC;AAED,MAAM,cAAc,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAElD,SAAS,WAAW,KAAqD;AACvE,QAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,QAAM,WAAW,IAAI,SAAS,MAAM,GAAG,EAAE,OAAO,OAAO;AACvD,QAAM,WAAW,SAAS,UAAU,CAAC,YAAY,YAAY,OAAO;AACpE,QAAM,cAAc,SAAS,UAAU,CAAC,YAAY,YAAY,UAAU;AAC1E,QAAM,SAAS,YAAY,IAAI,SAAS,WAAW,CAAC,KAAK,KAAK;AAC9D,QAAM,YAAY,eAAe,IAAI,SAAS,cAAc,CAAC,KAAK,KAAK;AACvE,SAAO,EAAE,QAAQ,UAAU;AAC7B;AAEA,eAAsB,KAAK,KAAc;AACvC,MAAI;AACF,UAAM,EAAE,KAAK,gBAAgB,UAAU,UAAU,IAAI,MAAM,uBAAuB,GAAG;AACrF,QAAI,CAAC,kBAAkB,CAAC,UAAU;AAChC,aAAO,UAAU,KAAK,oCAAoC;AAAA,IAC5D;AACA,UAAM,EAAE,QAAQ,UAAU,IAAI,WAAW,GAAG;AAC5C,QAAI,CAAC,UAAU,CAAC,UAAW,QAAO,UAAU,KAAK,yBAAyB;AAE1E,UAAM,OAAQ,MAAM,aAAsC,KAAK,CAAC,CAAC,KAAM,CAAC;AACxE,UAAM,SAAS,gCAAgC,MAAM,IAAI;AACzD,UAAM,SAAS,kBAAkB,EAAE,GAAG,QAAQ,QAAQ,UAAU,GAAG,KAAK,SAAS;AACjF,UAAM,QAAQ,gCAAgC,MAAM,MAAM;AAE1D,WAAO,MAAM,kBAAkB;AAAA,MAC7B;AAAA,MACA;AAAA,MACA;AAAA,MACA,cAAc;AAAA,MACd,YAAY;AAAA,MACZ,WAAW;AAAA,MACX,SAAS;AAAA,MACT,SAAS;AAAA,MACT,KAAK,YAAY;AACf,cAAM,aAAa,IAAI,UAAU,QAAQ,YAAY;AACrD,cAAM,EAAE,QAAQ,SAAS,IAAI,MAAM,WAAW,QAG5C,8BAA8B,EAAE,OAAO,IAAI,CAAC;AAC9C,cAAM,WAAW,aAAa,KAAK;AAAA,UACjC,WAAW,QAAQ,aAAa;AAAA,UAChC,eAAe,QAAQ,iBAAiB;AAAA,UACxC,WAAW,QAAQ;AAAA,QACrB,CAAC;AACD,eAAO,wBAAwB,UAAU,UAAU,4BAA4B,QAAQ,aAAa,SAAS;AAAA,MAC/G;AAAA,IACF,CAAC;AAAA,EACH,SAAS,OAAO;AACd,UAAM,uBAAuB,mCAAmC,KAAK;AACrE,QAAI,sBAAsB;AACxB,aAAO,aAAa,KAAK,qBAAqB,MAAM,EAAE,QAAQ,qBAAqB,OAAO,CAAC;AAAA,IAC7F;AACA,WAAO,iBAAiB,+BAA+B,KAAK;AAAA,EAC9D;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,GAAG,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAAA,EAC5E,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aACE;AAAA,MACF,aAAa,EAAE,aAAa,oBAAoB,QAAQ,gCAAgC;AAAA,MACxF,WAAW,CAAC,EAAE,QAAQ,KAAK,aAAa,qBAAqB,QAAQ,eAAe,CAAC;AAAA,MACrF,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,qBAAqB,QAAQ,YAAY;AAAA,QACrE,EAAE,QAAQ,KAAK,aAAa,qBAAqB,QAAQ,YAAY;AAAA,QACrE,EAAE,QAAQ,KAAK,aAAa,2BAA2B,QAAQ,YAAY;AAAA,MAC7E;AAAA,IACF;AAAA,EACF;AACF;",
+  "names": []
+}

package/dist/modules/forms/api/[id]/versions/[versionId]/route.js

@@ -0,0 +1,176 @@
+import { NextResponse } from "next/server";
+import { z } from "zod";
+import { getCommandInterceptorHttpRejection } from "@open-mercato/shared/lib/commands/errors";
+import { readJsonSafe } from "@open-mercato/shared/lib/http/readJsonSafe";
+import { FormVersion } from "../../../../data/entities.js";
+import {
+  OM_ROOT_KEYWORDS
+} from "../../../../schema/jsonschema-extensions.js";
+import {
+  formVersionPatchRequestSchema,
+  formVersionUpdateDraftCommandSchema
+} from "../../../../data/validators.js";
+import {
+  attachOperationMetadata,
+  buildFormsRouteContext,
+  handleRouteError,
+  jsonError,
+  withMutationGuard,
+  withScopedPayload
+} from "../../../helpers.js";
+import { FORM_VERSION_RESOURCE_KIND } from "../../../../commands/shared.js";
+const metadata = {
+  GET: { requireAuth: true, requireFeatures: ["forms.view"] },
+  PATCH: { requireAuth: true, requireFeatures: ["forms.design"] }
+};
+const versionResponseSchema = z.object({
+  id: z.string().uuid(),
+  formId: z.string().uuid(),
+  versionNumber: z.number().int(),
+  status: z.enum(["draft", "published", "archived"]),
+  schema: z.record(z.string(), z.unknown()),
+  uiSchema: z.record(z.string(), z.unknown()),
+  roles: z.array(z.string()),
+  schemaHash: z.string(),
+  registryVersion: z.string(),
+  publishedAt: z.string().nullable(),
+  publishedBy: z.string().uuid().nullable(),
+  changelog: z.string().nullable(),
+  archivedAt: z.string().nullable(),
+  createdAt: z.string(),
+  updatedAt: z.string(),
+  /**
+   * Answer→target mapping (W8 / INT-5). Surfaced as config so consumers can
+   * drive entity binding without PII ever touching an event payload.
+   */
+  answerMappings: z.record(z.string(), z.string())
+});
+function readAnswerMappings(schema) {
+  if (!schema || typeof schema !== "object" || Array.isArray(schema)) return {};
+  const raw = schema[OM_ROOT_KEYWORDS.answerMappings];
+  if (!raw || typeof raw !== "object" || Array.isArray(raw)) return {};
+  const out = {};
+  for (const [fieldKey, targetPath] of Object.entries(raw)) {
+    if (typeof targetPath === "string" && targetPath.length > 0) out[fieldKey] = targetPath;
+  }
+  return out;
+}
+const okSchema = z.object({ ok: z.literal(true), updatedAt: z.string() });
+const errorSchema = z.object({ error: z.string() });
+function extractIds(req) {
+  const url = new URL(req.url);
+  const segments = url.pathname.split("/").filter(Boolean);
+  const formsIdx = segments.findIndex((segment) => segment === "forms");
+  const versionsIdx = segments.findIndex((segment) => segment === "versions");
+  const formId = formsIdx >= 0 ? segments[formsIdx + 1] ?? "" : "";
+  const versionId = versionsIdx >= 0 ? segments[versionsIdx + 1] ?? "" : "";
+  return { formId, versionId };
+}
+async function GET(req) {
+  try {
+    const { ctx, organizationId, tenantId } = await buildFormsRouteContext(req);
+    if (!organizationId || !tenantId) {
+      return jsonError(400, "forms.errors.organization_required");
+    }
+    const { formId, versionId } = extractIds(req);
+    if (!formId || !versionId) return jsonError(400, "forms.errors.invalid_id");
+    const em = ctx.container.resolve("em");
+    const version = await em.findOne(FormVersion, {
+      id: versionId,
+      formId,
+      tenantId,
+      organizationId
+    });
+    if (!version) return jsonError(404, "forms.errors.version_not_found");
+    return NextResponse.json({
+      id: version.id,
+      formId: version.formId,
+      versionNumber: version.versionNumber,
+      status: version.status,
+      schema: version.schema,
+      uiSchema: version.uiSchema,
+      roles: [...version.roles],
+      schemaHash: version.schemaHash,
+      registryVersion: version.registryVersion,
+      publishedAt: version.publishedAt ? version.publishedAt.toISOString() : null,
+      publishedBy: version.publishedBy ?? null,
+      changelog: version.changelog ?? null,
+      archivedAt: version.archivedAt ? version.archivedAt.toISOString() : null,
+      createdAt: version.createdAt.toISOString(),
+      updatedAt: version.updatedAt.toISOString(),
+      answerMappings: readAnswerMappings(version.schema)
+    });
+  } catch (error) {
+    return handleRouteError("forms.versions[versionId].GET", error);
+  }
+}
+async function PATCH(req) {
+  try {
+    const { ctx, organizationId, tenantId, translate } = await buildFormsRouteContext(req);
+    if (!organizationId || !tenantId) {
+      return jsonError(400, "forms.errors.organization_required");
+    }
+    const { formId, versionId } = extractIds(req);
+    if (!formId || !versionId) return jsonError(400, "forms.errors.invalid_id");
+    const body = await readJsonSafe(req, {}) ?? {};
+    const parsed = formVersionPatchRequestSchema.parse(body);
+    const scoped = withScopedPayload({ ...parsed, formId, versionId }, ctx, translate);
+    const input = formVersionUpdateDraftCommandSchema.parse(scoped);
+    return await withMutationGuard({
+      ctx,
+      tenantId,
+      organizationId,
+      resourceKind: FORM_VERSION_RESOURCE_KIND,
+      resourceId: versionId,
+      operation: "update",
+      request: req,
+      payload: scoped,
+      run: async () => {
+        const commandBus = ctx.container.resolve("commandBus");
+        const { result, logEntry } = await commandBus.execute(
+          "forms.form_version.update_draft",
+          { input, ctx }
+        );
+        const response = NextResponse.json({ ok: true, updatedAt: result?.updatedAt });
+        return attachOperationMetadata(response, logEntry, FORM_VERSION_RESOURCE_KIND, result?.versionId ?? versionId);
+      }
+    });
+  } catch (error) {
+    const interceptorRejection = getCommandInterceptorHttpRejection(error);
+    if (interceptorRejection) {
+      return NextResponse.json(interceptorRejection.body, { status: interceptorRejection.status });
+    }
+    return handleRouteError("forms.versions[versionId].PATCH", error);
+  }
+}
+const openApi = {
+  tag: "Forms",
+  summary: "Form version detail and draft updates",
+  pathParams: z.object({ id: z.string().uuid(), versionId: z.string().uuid() }),
+  methods: {
+    GET: {
+      summary: "Get version detail",
+      description: "Returns the full schema/uiSchema/roles for a form version.",
+      responses: [{ status: 200, description: "Form version detail", schema: versionResponseSchema }],
+      errors: [{ status: 404, description: "Version not found", schema: errorSchema }]
+    },
+    PATCH: {
+      summary: "Update draft version",
+      description: "Updates schema/uiSchema/roles/changelog on a draft version. Rejects with 409 (version_is_frozen) for non-draft versions.",
+      requestBody: { contentType: "application/json", schema: formVersionPatchRequestSchema },
+      responses: [{ status: 200, description: "Draft updated", schema: okSchema }],
+      errors: [
+        { status: 404, description: "Version not found", schema: errorSchema },
+        { status: 409, description: "Version is frozen", schema: errorSchema },
+        { status: 422, description: "Schema validation failed", schema: errorSchema }
+      ]
+    }
+  }
+};
+export {
+  GET,
+  PATCH,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/forms/api/[id]/versions/[versionId]/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../../src/modules/forms/api/%5Bid%5D/versions/%5BversionId%5D/route.ts"],
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport type { CommandBus } from '@open-mercato/shared/lib/commands'\nimport { getCommandInterceptorHttpRejection } from '@open-mercato/shared/lib/commands/errors'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { readJsonSafe } from '@open-mercato/shared/lib/http/readJsonSafe'\nimport { FormVersion } from '../../../../data/entities'\nimport {\n  OM_ROOT_KEYWORDS,\n  type OmAnswerMappings,\n} from '../../../../schema/jsonschema-extensions'\nimport {\n  formVersionPatchRequestSchema,\n  formVersionUpdateDraftCommandSchema,\n  type FormVersionUpdateDraftCommandInput,\n} from '../../../../data/validators'\nimport {\n  attachOperationMetadata,\n  buildFormsRouteContext,\n  handleRouteError,\n  jsonError,\n  withMutationGuard,\n  withScopedPayload,\n} from '../../../helpers'\nimport { FORM_VERSION_RESOURCE_KIND } from '../../../../commands/shared'\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['forms.view'] },\n  PATCH: { requireAuth: true, requireFeatures: ['forms.design'] },\n}\n\nconst versionResponseSchema = z.object({\n  id: z.string().uuid(),\n  formId: z.string().uuid(),\n  versionNumber: z.number().int(),\n  status: z.enum(['draft', 'published', 'archived']),\n  schema: z.record(z.string(), z.unknown()),\n  uiSchema: z.record(z.string(), z.unknown()),\n  roles: z.array(z.string()),\n  schemaHash: z.string(),\n  registryVersion: z.string(),\n  publishedAt: z.string().nullable(),\n  publishedBy: z.string().uuid().nullable(),\n  changelog: z.string().nullable(),\n  archivedAt: z.string().nullable(),\n  createdAt: z.string(),\n  updatedAt: z.string(),\n  /**\n   * Answer\u2192target mapping (W8 / INT-5). Surfaced as config so consumers can\n   * drive entity binding without PII ever touching an event payload.\n   */\n  answerMappings: z.record(z.string(), z.string()),\n})\n\n/**\n * Reads the `x-om-answer-mappings` config off a version schema (W8 / INT-5).\n * The mapping is config \u2014 it carries no answers \u2014 so it is safe to expose on\n * the authed read API. Consumer flow (e.g. dental-os): on the id-only\n * `forms.submission.submitted` event, the subscriber loads the version via\n * this API (or the runtime context) to read `answerMappings`, fetches the\n * submission answers from the authed by-subject / GDPR export API, then applies\n * the mapping to its own entities. The forms module never writes to any\n * external entity and never emits answers in events (DP-8).\n */\nfunction readAnswerMappings(schema: unknown): OmAnswerMappings {\n  if (!schema || typeof schema !== 'object' || Array.isArray(schema)) return {}\n  const raw = (schema as Record<string, unknown>)[OM_ROOT_KEYWORDS.answerMappings]\n  if (!raw || typeof raw !== 'object' || Array.isArray(raw)) return {}\n  const out: OmAnswerMappings = {}\n  for (const [fieldKey, targetPath] of Object.entries(raw as Record<string, unknown>)) {\n    if (typeof targetPath === 'string' && targetPath.length > 0) out[fieldKey] = targetPath\n  }\n  return out\n}\n\nconst okSchema = z.object({ ok: z.literal(true), updatedAt: z.string() })\nconst errorSchema = z.object({ error: z.string() })\n\nfunction extractIds(req: Request): { formId: string; versionId: string } {\n  const url = new URL(req.url)\n  const segments = url.pathname.split('/').filter(Boolean)\n  const formsIdx = segments.findIndex((segment) => segment === 'forms')\n  const versionsIdx = segments.findIndex((segment) => segment === 'versions')\n  const formId = formsIdx >= 0 ? segments[formsIdx + 1] ?? '' : ''\n  const versionId = versionsIdx >= 0 ? segments[versionsIdx + 1] ?? '' : ''\n  return { formId, versionId }\n}\n\nexport async function GET(req: Request) {\n  try {\n    const { ctx, organizationId, tenantId } = await buildFormsRouteContext(req)\n    if (!organizationId || !tenantId) {\n      return jsonError(400, 'forms.errors.organization_required')\n    }\n    const { formId, versionId } = extractIds(req)\n    if (!formId || !versionId) return jsonError(400, 'forms.errors.invalid_id')\n\n    const em = ctx.container.resolve('em') as EntityManager\n    const version = await em.findOne(FormVersion, {\n      id: versionId,\n      formId,\n      tenantId,\n      organizationId,\n    })\n    if (!version) return jsonError(404, 'forms.errors.version_not_found')\n\n    return NextResponse.json({\n      id: version.id,\n      formId: version.formId,\n      versionNumber: version.versionNumber,\n      status: version.status,\n      schema: version.schema,\n      uiSchema: version.uiSchema,\n      roles: [...version.roles],\n      schemaHash: version.schemaHash,\n      registryVersion: version.registryVersion,\n      publishedAt: version.publishedAt ? version.publishedAt.toISOString() : null,\n      publishedBy: version.publishedBy ?? null,\n      changelog: version.changelog ?? null,\n      archivedAt: version.archivedAt ? version.archivedAt.toISOString() : null,\n      createdAt: version.createdAt.toISOString(),\n      updatedAt: version.updatedAt.toISOString(),\n      answerMappings: readAnswerMappings(version.schema),\n    })\n  } catch (error) {\n    return handleRouteError('forms.versions[versionId].GET', error)\n  }\n}\n\nexport async function PATCH(req: Request) {\n  try {\n    const { ctx, organizationId, tenantId, translate } = await buildFormsRouteContext(req)\n    if (!organizationId || !tenantId) {\n      return jsonError(400, 'forms.errors.organization_required')\n    }\n    const { formId, versionId } = extractIds(req)\n    if (!formId || !versionId) return jsonError(400, 'forms.errors.invalid_id')\n\n    const body = (await readJsonSafe<Record<string, unknown>>(req, {})) ?? {}\n    const parsed = formVersionPatchRequestSchema.parse(body)\n    const scoped = withScopedPayload({ ...parsed, formId, versionId }, ctx, translate)\n    const input = formVersionUpdateDraftCommandSchema.parse(scoped) satisfies FormVersionUpdateDraftCommandInput\n\n    return await withMutationGuard({\n      ctx,\n      tenantId,\n      organizationId,\n      resourceKind: FORM_VERSION_RESOURCE_KIND,\n      resourceId: versionId,\n      operation: 'update',\n      request: req,\n      payload: scoped as Record<string, unknown>,\n      run: async () => {\n        const commandBus = ctx.container.resolve('commandBus') as CommandBus\n        const { result, logEntry } = await commandBus.execute<\n          FormVersionUpdateDraftCommandInput,\n          { versionId: string; updatedAt: string }\n        >(\n          'forms.form_version.update_draft',\n          { input, ctx },\n        )\n        const response = NextResponse.json({ ok: true, updatedAt: result?.updatedAt })\n        return attachOperationMetadata(response, logEntry, FORM_VERSION_RESOURCE_KIND, result?.versionId ?? versionId)\n      },\n    })\n  } catch (error) {\n    const interceptorRejection = getCommandInterceptorHttpRejection(error)\n    if (interceptorRejection) {\n      return NextResponse.json(interceptorRejection.body, { status: interceptorRejection.status })\n    }\n    return handleRouteError('forms.versions[versionId].PATCH', error)\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Forms',\n  summary: 'Form version detail and draft updates',\n  pathParams: z.object({ id: z.string().uuid(), versionId: z.string().uuid() }),\n  methods: {\n    GET: {\n      summary: 'Get version detail',\n      description: 'Returns the full schema/uiSchema/roles for a form version.',\n      responses: [{ status: 200, description: 'Form version detail', schema: versionResponseSchema }],\n      errors: [{ status: 404, description: 'Version not found', schema: errorSchema }],\n    },\n    PATCH: {\n      summary: 'Update draft version',\n      description:\n        'Updates schema/uiSchema/roles/changelog on a draft version. Rejects with 409 (version_is_frozen) for non-draft versions.',\n      requestBody: { contentType: 'application/json', schema: formVersionPatchRequestSchema },\n      responses: [{ status: 200, description: 'Draft updated', schema: okSchema }],\n      errors: [\n        { status: 404, description: 'Version not found', schema: errorSchema },\n        { status: 409, description: 'Version is frozen', schema: errorSchema },\n        { status: 422, description: 'Schema validation failed', schema: errorSchema },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAGlB,SAAS,0CAA0C;AAEnD,SAAS,oBAAoB;AAC7B,SAAS,mBAAmB;AAC5B;AAAA,EACE;AAAA,OAEK;AACP;AAAA,EACE;AAAA,EACA;AAAA,OAEK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,kCAAkC;AAEpC,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,YAAY,EAAE;AAAA,EAC1D,OAAO,EAAE,aAAa,MAAM,iBAAiB,CAAC,cAAc,EAAE;AAChE;AAEA,MAAM,wBAAwB,EAAE,OAAO;AAAA,EACrC,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,QAAQ,EAAE,OAAO,EAAE,KAAK;AAAA,EACxB,eAAe,EAAE,OAAO,EAAE,IAAI;AAAA,EAC9B,QAAQ,EAAE,KAAK,CAAC,SAAS,aAAa,UAAU,CAAC;AAAA,EACjD,QAAQ,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC;AAAA,EACxC,UAAU,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC;AAAA,EAC1C,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC;AAAA,EACzB,YAAY,EAAE,OAAO;AAAA,EACrB,iBAAiB,EAAE,OAAO;AAAA,EAC1B,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,EACjC,aAAa,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACxC,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,EAChC,WAAW,EAAE,OAAO;AAAA,EACpB,WAAW,EAAE,OAAO;AAAA;AAAA;AAAA;AAAA;AAAA,EAKpB,gBAAgB,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,OAAO,CAAC;AACjD,CAAC;AAYD,SAAS,mBAAmB,QAAmC;AAC7D,MAAI,CAAC,UAAU,OAAO,WAAW,YAAY,MAAM,QAAQ,MAAM,EAAG,QAAO,CAAC;AAC5E,QAAM,MAAO,OAAmC,iBAAiB,cAAc;AAC/E,MAAI,CAAC,OAAO,OAAO,QAAQ,YAAY,MAAM,QAAQ,GAAG,EAAG,QAAO,CAAC;AACnE,QAAM,MAAwB,CAAC;AAC/B,aAAW,CAAC,UAAU,UAAU,KAAK,OAAO,QAAQ,GAA8B,GAAG;AACnF,QAAI,OAAO,eAAe,YAAY,WAAW,SAAS,EAAG,KAAI,QAAQ,IAAI;AAAA,EAC/E;AACA,SAAO;AACT;AAEA,MAAM,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,IAAI,GAAG,WAAW,EAAE,OAAO,EAAE,CAAC;AACxE,MAAM,cAAc,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAElD,SAAS,WAAW,KAAqD;AACvE,QAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,QAAM,WAAW,IAAI,SAAS,MAAM,GAAG,EAAE,OAAO,OAAO;AACvD,QAAM,WAAW,SAAS,UAAU,CAAC,YAAY,YAAY,OAAO;AACpE,QAAM,cAAc,SAAS,UAAU,CAAC,YAAY,YAAY,UAAU;AAC1E,QAAM,SAAS,YAAY,IAAI,SAAS,WAAW,CAAC,KAAK,KAAK;AAC9D,QAAM,YAAY,eAAe,IAAI,SAAS,cAAc,CAAC,KAAK,KAAK;AACvE,SAAO,EAAE,QAAQ,UAAU;AAC7B;AAEA,eAAsB,IAAI,KAAc;AACtC,MAAI;AACF,UAAM,EAAE,KAAK,gBAAgB,SAAS,IAAI,MAAM,uBAAuB,GAAG;AAC1E,QAAI,CAAC,kBAAkB,CAAC,UAAU;AAChC,aAAO,UAAU,KAAK,oCAAoC;AAAA,IAC5D;AACA,UAAM,EAAE,QAAQ,UAAU,IAAI,WAAW,GAAG;AAC5C,QAAI,CAAC,UAAU,CAAC,UAAW,QAAO,UAAU,KAAK,yBAAyB;AAE1E,UAAM,KAAK,IAAI,UAAU,QAAQ,IAAI;AACrC,UAAM,UAAU,MAAM,GAAG,QAAQ,aAAa;AAAA,MAC5C,IAAI;AAAA,MACJ;AAAA,MACA;AAAA,MACA;AAAA,IACF,CAAC;AACD,QAAI,CAAC,QAAS,QAAO,UAAU,KAAK,gCAAgC;AAEpE,WAAO,aAAa,KAAK;AAAA,MACvB,IAAI,QAAQ;AAAA,MACZ,QAAQ,QAAQ;AAAA,MAChB,eAAe,QAAQ;AAAA,MACvB,QAAQ,QAAQ;AAAA,MAChB,QAAQ,QAAQ;AAAA,MAChB,UAAU,QAAQ;AAAA,MAClB,OAAO,CAAC,GAAG,QAAQ,KAAK;AAAA,MACxB,YAAY,QAAQ;AAAA,MACpB,iBAAiB,QAAQ;AAAA,MACzB,aAAa,QAAQ,cAAc,QAAQ,YAAY,YAAY,IAAI;AAAA,MACvE,aAAa,QAAQ,eAAe;AAAA,MACpC,WAAW,QAAQ,aAAa;AAAA,MAChC,YAAY,QAAQ,aAAa,QAAQ,WAAW,YAAY,IAAI;AAAA,MACpE,WAAW,QAAQ,UAAU,YAAY;AAAA,MACzC,WAAW,QAAQ,UAAU,YAAY;AAAA,MACzC,gBAAgB,mBAAmB,QAAQ,MAAM;AAAA,IACnD,CAAC;AAAA,EACH,SAAS,OAAO;AACd,WAAO,iBAAiB,iCAAiC,KAAK;AAAA,EAChE;AACF;AAEA,eAAsB,MAAM,KAAc;AACxC,MAAI;AACF,UAAM,EAAE,KAAK,gBAAgB,UAAU,UAAU,IAAI,MAAM,uBAAuB,GAAG;AACrF,QAAI,CAAC,kBAAkB,CAAC,UAAU;AAChC,aAAO,UAAU,KAAK,oCAAoC;AAAA,IAC5D;AACA,UAAM,EAAE,QAAQ,UAAU,IAAI,WAAW,GAAG;AAC5C,QAAI,CAAC,UAAU,CAAC,UAAW,QAAO,UAAU,KAAK,yBAAyB;AAE1E,UAAM,OAAQ,MAAM,aAAsC,KAAK,CAAC,CAAC,KAAM,CAAC;AACxE,UAAM,SAAS,8BAA8B,MAAM,IAAI;AACvD,UAAM,SAAS,kBAAkB,EAAE,GAAG,QAAQ,QAAQ,UAAU,GAAG,KAAK,SAAS;AACjF,UAAM,QAAQ,oCAAoC,MAAM,MAAM;AAE9D,WAAO,MAAM,kBAAkB;AAAA,MAC7B;AAAA,MACA;AAAA,MACA;AAAA,MACA,cAAc;AAAA,MACd,YAAY;AAAA,MACZ,WAAW;AAAA,MACX,SAAS;AAAA,MACT,SAAS;AAAA,MACT,KAAK,YAAY;AACf,cAAM,aAAa,IAAI,UAAU,QAAQ,YAAY;AACrD,cAAM,EAAE,QAAQ,SAAS,IAAI,MAAM,WAAW;AAAA,UAI5C;AAAA,UACA,EAAE,OAAO,IAAI;AAAA,QACf;AACA,cAAM,WAAW,aAAa,KAAK,EAAE,IAAI,MAAM,WAAW,QAAQ,UAAU,CAAC;AAC7E,eAAO,wBAAwB,UAAU,UAAU,4BAA4B,QAAQ,aAAa,SAAS;AAAA,MAC/G;AAAA,IACF,CAAC;AAAA,EACH,SAAS,OAAO;AACd,UAAM,uBAAuB,mCAAmC,KAAK;AACrE,QAAI,sBAAsB;AACxB,aAAO,aAAa,KAAK,qBAAqB,MAAM,EAAE,QAAQ,qBAAqB,OAAO,CAAC;AAAA,IAC7F;AACA,WAAO,iBAAiB,mCAAmC,KAAK;AAAA,EAClE;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,GAAG,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAAA,EAC5E,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aAAa;AAAA,MACb,WAAW,CAAC,EAAE,QAAQ,KAAK,aAAa,uBAAuB,QAAQ,sBAAsB,CAAC;AAAA,MAC9F,QAAQ,CAAC,EAAE,QAAQ,KAAK,aAAa,qBAAqB,QAAQ,YAAY,CAAC;AAAA,IACjF;AAAA,IACA,OAAO;AAAA,MACL,SAAS;AAAA,MACT,aACE;AAAA,MACF,aAAa,EAAE,aAAa,oBAAoB,QAAQ,8BAA8B;AAAA,MACtF,WAAW,CAAC,EAAE,QAAQ,KAAK,aAAa,iBAAiB,QAAQ,SAAS,CAAC;AAAA,MAC3E,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,qBAAqB,QAAQ,YAAY;AAAA,QACrE,EAAE,QAAQ,KAAK,aAAa,qBAAqB,QAAQ,YAAY;AAAA,QACrE,EAAE,QAAQ,KAAK,aAAa,4BAA4B,QAAQ,YAAY;AAAA,MAC9E;AAAA,IACF;AAAA,EACF;AACF;",
+  "names": []
+}