@open-mercato/core 0.8.1-develop.7296.1.2111d779db → 0.9.0

package/dist/modules/customer_accounts/api/admin/users/[id]/sessions/[sessionId].js

@@ -0,0 +1,78 @@
+import { NextResponse } from "next/server";
+import { z } from "zod";
+import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
+import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
+import { findOneWithDecryption } from "@open-mercato/shared/lib/encryption/find";
+import { CustomerUser, CustomerUserSession } from "@open-mercato/core/modules/customer_accounts/data/entities";
+const metadata = {};
+const paramsSchema = z.object({
+  id: z.string().uuid(),
+  sessionId: z.string().uuid()
+});
+async function DELETE(req, { params }) {
+  const parsedParams = paramsSchema.safeParse(params);
+  if (!parsedParams.success) {
+    return NextResponse.json({ ok: false, error: "Invalid identifier" }, { status: 400 });
+  }
+  const { id: userId, sessionId } = parsedParams.data;
+  const auth = await getAuthFromRequest(req);
+  if (!auth) {
+    return NextResponse.json({ ok: false, error: "Authentication required" }, { status: 401 });
+  }
+  const container = await createRequestContainer();
+  const rbacService = container.resolve("rbacService");
+  const hasAccess = await rbacService.userHasAllFeatures(auth.sub, ["customer_accounts.manage"], { tenantId: auth.tenantId, organizationId: auth.orgId });
+  if (!hasAccess) {
+    return NextResponse.json({ ok: false, error: "Insufficient permissions" }, { status: 403 });
+  }
+  const em = container.resolve("em");
+  const scope = { tenantId: auth.tenantId, organizationId: auth.orgId };
+  const user = await findOneWithDecryption(
+    em,
+    CustomerUser,
+    { id: userId, tenantId: auth.tenantId, organizationId: auth.orgId, deletedAt: null },
+    void 0,
+    scope
+  );
+  if (!user) {
+    return NextResponse.json({ ok: false, error: "User not found" }, { status: 404 });
+  }
+  const session = await findOneWithDecryption(
+    em,
+    CustomerUserSession,
+    { id: sessionId, user: user.id, deletedAt: null },
+    void 0,
+    scope
+  );
+  if (!session) {
+    return NextResponse.json({ ok: false, error: "Session not found" }, { status: 404 });
+  }
+  const customerSessionService = container.resolve("customerSessionService");
+  await customerSessionService.revokeSession(session.id);
+  return NextResponse.json({ ok: true });
+}
+const successSchema = z.object({ ok: z.literal(true) });
+const errorSchema = z.object({ ok: z.literal(false), error: z.string() });
+const methodDoc = {
+  summary: "Revoke a customer user session (admin)",
+  description: "Allows staff to end one active portal session of a customer user. The customer is signed out of that session on the next request.",
+  tags: ["Customer Accounts Admin"],
+  responses: [{ status: 200, description: "Session revoked", schema: successSchema }],
+  errors: [
+    { status: 400, description: "Invalid identifier", schema: errorSchema },
+    { status: 401, description: "Not authenticated", schema: errorSchema },
+    { status: 403, description: "Insufficient permissions", schema: errorSchema },
+    { status: 404, description: "User or session not found", schema: errorSchema }
+  ]
+};
+const openApi = {
+  summary: "Revoke customer user session (admin)",
+  pathParams: paramsSchema,
+  methods: { DELETE: methodDoc }
+};
+export {
+  DELETE,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=%5BsessionId%5D.js.map

package/dist/modules/customer_accounts/api/admin/users/[id]/sessions/[sessionId].js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../../../src/modules/customer_accounts/api/admin/users/%5Bid%5D/sessions/%5BsessionId%5D.ts"],
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport type { OpenApiRouteDoc, OpenApiMethodDoc } from '@open-mercato/shared/lib/openapi'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { RbacService } from '@open-mercato/core/modules/auth/services/rbacService'\nimport { CustomerUser, CustomerUserSession } from '@open-mercato/core/modules/customer_accounts/data/entities'\nimport { CustomerSessionService } from '@open-mercato/core/modules/customer_accounts/services/customerSessionService'\n\nexport const metadata = {}\n\nconst paramsSchema = z.object({\n  id: z.string().uuid(),\n  sessionId: z.string().uuid(),\n})\n\nexport async function DELETE(req: Request, { params }: { params: { id: string; sessionId: string } }) {\n  const parsedParams = paramsSchema.safeParse(params)\n  if (!parsedParams.success) {\n    return NextResponse.json({ ok: false, error: 'Invalid identifier' }, { status: 400 })\n  }\n  const { id: userId, sessionId } = parsedParams.data\n\n  const auth = await getAuthFromRequest(req)\n  if (!auth) {\n    return NextResponse.json({ ok: false, error: 'Authentication required' }, { status: 401 })\n  }\n\n  const container = await createRequestContainer()\n  const rbacService = container.resolve('rbacService') as RbacService\n  const hasAccess = await rbacService.userHasAllFeatures(auth.sub, ['customer_accounts.manage'], { tenantId: auth.tenantId, organizationId: auth.orgId })\n  if (!hasAccess) {\n    return NextResponse.json({ ok: false, error: 'Insufficient permissions' }, { status: 403 })\n  }\n\n  const em = container.resolve('em') as EntityManager\n  const scope = { tenantId: auth.tenantId, organizationId: auth.orgId }\n\n  const user = await findOneWithDecryption(\n    em,\n    CustomerUser,\n    { id: userId, tenantId: auth.tenantId, organizationId: auth.orgId, deletedAt: null } as any,\n    undefined,\n    scope,\n  )\n  if (!user) {\n    return NextResponse.json({ ok: false, error: 'User not found' }, { status: 404 })\n  }\n\n  const session = await findOneWithDecryption(\n    em,\n    CustomerUserSession,\n    { id: sessionId, user: user.id as any, deletedAt: null } as any,\n    undefined,\n    scope,\n  )\n  if (!session) {\n    return NextResponse.json({ ok: false, error: 'Session not found' }, { status: 404 })\n  }\n\n  const customerSessionService = container.resolve('customerSessionService') as CustomerSessionService\n  await customerSessionService.revokeSession(session.id)\n\n  return NextResponse.json({ ok: true })\n}\n\nconst successSchema = z.object({ ok: z.literal(true) })\nconst errorSchema = z.object({ ok: z.literal(false), error: z.string() })\n\nconst methodDoc: OpenApiMethodDoc = {\n  summary: 'Revoke a customer user session (admin)',\n  description: 'Allows staff to end one active portal session of a customer user. The customer is signed out of that session on the next request.',\n  tags: ['Customer Accounts Admin'],\n  responses: [{ status: 200, description: 'Session revoked', schema: successSchema }],\n  errors: [\n    { status: 400, description: 'Invalid identifier', schema: errorSchema },\n    { status: 401, description: 'Not authenticated', schema: errorSchema },\n    { status: 403, description: 'Insufficient permissions', schema: errorSchema },\n    { status: 404, description: 'User or session not found', schema: errorSchema },\n  ],\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  summary: 'Revoke customer user session (admin)',\n  pathParams: paramsSchema,\n  methods: { DELETE: methodDoc },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAGlB,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AACvC,SAAS,6BAA6B;AAEtC,SAAS,cAAc,2BAA2B;AAG3C,MAAM,WAAW,CAAC;AAEzB,MAAM,eAAe,EAAE,OAAO;AAAA,EAC5B,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,WAAW,EAAE,OAAO,EAAE,KAAK;AAC7B,CAAC;AAED,eAAsB,OAAO,KAAc,EAAE,OAAO,GAAkD;AACpG,QAAM,eAAe,aAAa,UAAU,MAAM;AAClD,MAAI,CAAC,aAAa,SAAS;AACzB,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,qBAAqB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACtF;AACA,QAAM,EAAE,IAAI,QAAQ,UAAU,IAAI,aAAa;AAE/C,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM;AACT,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,0BAA0B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC3F;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,cAAc,UAAU,QAAQ,aAAa;AACnD,QAAM,YAAY,MAAM,YAAY,mBAAmB,KAAK,KAAK,CAAC,0BAA0B,GAAG,EAAE,UAAU,KAAK,UAAU,gBAAgB,KAAK,MAAM,CAAC;AACtJ,MAAI,CAAC,WAAW;AACd,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,2BAA2B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC5F;AAEA,QAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,QAAM,QAAQ,EAAE,UAAU,KAAK,UAAU,gBAAgB,KAAK,MAAM;AAEpE,QAAM,OAAO,MAAM;AAAA,IACjB;AAAA,IACA;AAAA,IACA,EAAE,IAAI,QAAQ,UAAU,KAAK,UAAU,gBAAgB,KAAK,OAAO,WAAW,KAAK;AAAA,IACnF;AAAA,IACA;AAAA,EACF;AACA,MAAI,CAAC,MAAM;AACT,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,iBAAiB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAClF;AAEA,QAAM,UAAU,MAAM;AAAA,IACpB;AAAA,IACA;AAAA,IACA,EAAE,IAAI,WAAW,MAAM,KAAK,IAAW,WAAW,KAAK;AAAA,IACvD;AAAA,IACA;AAAA,EACF;AACA,MAAI,CAAC,SAAS;AACZ,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrF;AAEA,QAAM,yBAAyB,UAAU,QAAQ,wBAAwB;AACzE,QAAM,uBAAuB,cAAc,QAAQ,EAAE;AAErD,SAAO,aAAa,KAAK,EAAE,IAAI,KAAK,CAAC;AACvC;AAEA,MAAM,gBAAgB,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,IAAI,EAAE,CAAC;AACtD,MAAM,cAAc,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,KAAK,GAAG,OAAO,EAAE,OAAO,EAAE,CAAC;AAExE,MAAM,YAA8B;AAAA,EAClC,SAAS;AAAA,EACT,aAAa;AAAA,EACb,MAAM,CAAC,yBAAyB;AAAA,EAChC,WAAW,CAAC,EAAE,QAAQ,KAAK,aAAa,mBAAmB,QAAQ,cAAc,CAAC;AAAA,EAClF,QAAQ;AAAA,IACN,EAAE,QAAQ,KAAK,aAAa,sBAAsB,QAAQ,YAAY;AAAA,IACtE,EAAE,QAAQ,KAAK,aAAa,qBAAqB,QAAQ,YAAY;AAAA,IACrE,EAAE,QAAQ,KAAK,aAAa,4BAA4B,QAAQ,YAAY;AAAA,IAC5E,EAAE,QAAQ,KAAK,aAAa,6BAA6B,QAAQ,YAAY;AAAA,EAC/E;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,SAAS;AAAA,EACT,YAAY;AAAA,EACZ,SAAS,EAAE,QAAQ,UAAU;AAC/B;",
+  "names": []
+}

package/dist/modules/customer_groups/acl.js

@@ -0,0 +1,14 @@
+const features = [
+  { id: "customer_groups.groups.view", title: "View customer groups", module: "customer_groups" },
+  { id: "customer_groups.groups.manage", title: "Manage customer groups", module: "customer_groups", dependsOn: ["customer_groups.groups.view"] },
+  { id: "customer_groups.memberships.view", title: "View group memberships", module: "customer_groups" },
+  { id: "customer_groups.memberships.manage", title: "Manage group memberships", module: "customer_groups", dependsOn: ["customer_groups.memberships.view"] },
+  { id: "customer_groups.terms.view", title: "View commercial terms", module: "customer_groups" },
+  { id: "customer_groups.terms.manage", title: "Manage commercial terms", module: "customer_groups", dependsOn: ["customer_groups.terms.view"] }
+];
+var acl_default = features;
+export {
+  acl_default as default,
+  features
+};
+//# sourceMappingURL=acl.js.map

package/dist/modules/customer_groups/acl.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/modules/customer_groups/acl.ts"],
+  "sourcesContent": ["export const features = [\n  { id: 'customer_groups.groups.view', title: 'View customer groups', module: 'customer_groups' },\n  { id: 'customer_groups.groups.manage', title: 'Manage customer groups', module: 'customer_groups', dependsOn: ['customer_groups.groups.view'] },\n  { id: 'customer_groups.memberships.view', title: 'View group memberships', module: 'customer_groups' },\n  { id: 'customer_groups.memberships.manage', title: 'Manage group memberships', module: 'customer_groups', dependsOn: ['customer_groups.memberships.view'] },\n  { id: 'customer_groups.terms.view', title: 'View commercial terms', module: 'customer_groups' },\n  { id: 'customer_groups.terms.manage', title: 'Manage commercial terms', module: 'customer_groups', dependsOn: ['customer_groups.terms.view'] },\n]\n\nexport default features\n"],
+  "mappings": "AAAO,MAAM,WAAW;AAAA,EACtB,EAAE,IAAI,+BAA+B,OAAO,wBAAwB,QAAQ,kBAAkB;AAAA,EAC9F,EAAE,IAAI,iCAAiC,OAAO,0BAA0B,QAAQ,mBAAmB,WAAW,CAAC,6BAA6B,EAAE;AAAA,EAC9I,EAAE,IAAI,oCAAoC,OAAO,0BAA0B,QAAQ,kBAAkB;AAAA,EACrG,EAAE,IAAI,sCAAsC,OAAO,4BAA4B,QAAQ,mBAAmB,WAAW,CAAC,kCAAkC,EAAE;AAAA,EAC1J,EAAE,IAAI,8BAA8B,OAAO,yBAAyB,QAAQ,kBAAkB;AAAA,EAC9F,EAAE,IAAI,gCAAgC,OAAO,2BAA2B,QAAQ,mBAAmB,WAAW,CAAC,4BAA4B,EAAE;AAC/I;AAEA,IAAO,cAAQ;",
+  "names": []
+}

package/dist/modules/customer_groups/api/customer-groups/[id]/terms/route.js

@@ -0,0 +1,266 @@
+import { NextResponse } from "next/server";
+import { z } from "zod";
+import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
+import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
+import { resolveTranslations } from "@open-mercato/shared/lib/i18n/server";
+import { readJsonSafe } from "@open-mercato/shared/lib/http/readJsonSafe";
+import { CrudHttpError, badRequest, conflict, isCrudHttpError, isUniqueViolation, notFound } from "@open-mercato/shared/lib/crud/errors";
+import { enforceCommandOptimisticLock } from "@open-mercato/shared/lib/crud/optimistic-lock-command";
+import { runRouteMutationGuards } from "@open-mercato/shared/lib/crud/route-mutation-guard";
+import { createLogger } from "@open-mercato/shared/lib/logger";
+import { getTelemetryRuntime } from "@open-mercato/shared/lib/telemetry/runtime";
+import { CustomerGroup, CustomerGroupTerms } from "../../../../data/entities.js";
+import { isPriceKindInTenant } from "../../../../lib/priceKindScope.js";
+import { announceCustomerGroupTermsUpdated } from "../../../../lib/groupEvents.js";
+import {
+  customerGroupTermsCreateSchema,
+  customerGroupTermsUpdateSchema
+} from "../../../../data/validators.js";
+const logger = createLogger("customer_groups");
+const metadata = {
+  GET: { requireAuth: true, requireFeatures: ["customer_groups.terms.view"] },
+  PUT: { requireAuth: true, requireFeatures: ["customer_groups.terms.manage"] }
+};
+const TERMS_RESOURCE_KIND = "customer_groups:customer_group_terms";
+const paramsSchema = z.object({ id: z.string().uuid() });
+async function resolveGroupId(context, translate) {
+  const raw = await context.params;
+  const parsed = paramsSchema.safeParse(raw);
+  if (!parsed.success) {
+    throw notFound(translate("customer_groups.errors.group_not_found", "Customer group not found"));
+  }
+  return parsed.data.id;
+}
+async function resolveAuthScope(req, translate) {
+  const auth = await getAuthFromRequest(req);
+  if (!auth) throw new CrudHttpError(401, { error: translate("customer_groups.errors.unauthorized", "Unauthorized") });
+  const tenantId = auth.tenantId ?? null;
+  if (!tenantId) {
+    throw new CrudHttpError(400, { error: translate("customer_groups.errors.tenant_required", "Tenant context is required") });
+  }
+  return { userId: auth.sub, scope: { tenantId, organizationId: auth.orgId ?? null } };
+}
+async function loadGroupOrThrow(em, id, scope, translate) {
+  const group = await em.findOne(CustomerGroup, { id, tenantId: scope.tenantId, deletedAt: null });
+  if (!group) throw notFound(translate("customer_groups.errors.group_not_found", "Customer group not found"));
+  return group;
+}
+function toNumericString(value) {
+  if (value === void 0 || value === null) return null;
+  return value.toString();
+}
+function toNumberOrNull(value) {
+  if (value == null) return null;
+  const parsed = Number(value);
+  return Number.isNaN(parsed) ? null : parsed;
+}
+function serializeTerms(terms) {
+  return {
+    id: terms.id,
+    groupId: terms.groupId,
+    organizationId: terms.organizationId ?? null,
+    tenantId: terms.tenantId,
+    priceKindId: terms.priceKindId ?? null,
+    paymentTermsDays: terms.paymentTermsDays ?? null,
+    allowPurchaseOnAccount: terms.allowPurchaseOnAccount ?? null,
+    defaultCreditLimit: toNumberOrNull(terms.defaultCreditLimit),
+    creditCurrencyCode: terms.creditCurrencyCode ?? null,
+    approvalRequiredAbove: toNumberOrNull(terms.approvalRequiredAbove),
+    minOrderValue: toNumberOrNull(terms.minOrderValue),
+    metadata: terms.metadata ?? null,
+    createdAt: terms.createdAt.toISOString(),
+    updatedAt: terms.updatedAt.toISOString()
+  };
+}
+async function GET(req, context) {
+  const { translate } = await resolveTranslations();
+  try {
+    const groupId = await resolveGroupId(context, translate);
+    const { scope } = await resolveAuthScope(req, translate);
+    const container = await createRequestContainer();
+    const em = container.resolve("em").fork();
+    await loadGroupOrThrow(em, groupId, scope, translate);
+    const terms = await em.findOne(CustomerGroupTerms, { groupId, tenantId: scope.tenantId, deletedAt: null });
+    return NextResponse.json({ terms: terms ? serializeTerms(terms) : null });
+  } catch (err) {
+    if (isCrudHttpError(err)) return NextResponse.json(err.body, { status: err.status });
+    logger.error("customer_groups.terms.get failed", { err });
+    getTelemetryRuntime()?.reportError(err, { module: "customer_groups", code: "customer_groups.terms_get_failed" });
+    return NextResponse.json(
+      { error: translate("customer_groups.errors.load_failed", "Failed to load commercial terms") },
+      { status: 500 }
+    );
+  }
+}
+const termsBodySchema = z.object({}).passthrough();
+function toEntityData(input) {
+  return {
+    organizationId: input.organizationId ?? null,
+    tenantId: input.tenantId,
+    groupId: input.groupId,
+    priceKindId: input.priceKindId ?? null,
+    paymentTermsDays: input.paymentTermsDays ?? null,
+    allowPurchaseOnAccount: input.allowPurchaseOnAccount ?? null,
+    defaultCreditLimit: toNumericString(input.defaultCreditLimit),
+    creditCurrencyCode: input.creditCurrencyCode ?? null,
+    approvalRequiredAbove: toNumericString(input.approvalRequiredAbove),
+    minOrderValue: toNumericString(input.minOrderValue),
+    metadata: input.metadata ?? null
+  };
+}
+function hasOwn(input, key) {
+  return Object.prototype.hasOwnProperty.call(input, key);
+}
+function applyTermsUpdate(entity, input) {
+  if (hasOwn(input, "priceKindId")) entity.priceKindId = input.priceKindId ?? null;
+  if (hasOwn(input, "paymentTermsDays")) entity.paymentTermsDays = input.paymentTermsDays ?? null;
+  if (hasOwn(input, "allowPurchaseOnAccount")) entity.allowPurchaseOnAccount = input.allowPurchaseOnAccount ?? null;
+  if (hasOwn(input, "defaultCreditLimit")) entity.defaultCreditLimit = toNumericString(input.defaultCreditLimit);
+  if (hasOwn(input, "creditCurrencyCode")) entity.creditCurrencyCode = input.creditCurrencyCode ?? null;
+  if (hasOwn(input, "approvalRequiredAbove")) entity.approvalRequiredAbove = toNumericString(input.approvalRequiredAbove);
+  if (hasOwn(input, "minOrderValue")) entity.minOrderValue = toNumericString(input.minOrderValue);
+  if (hasOwn(input, "metadata")) entity.metadata = input.metadata ?? null;
+}
+async function PUT(req, context) {
+  const { translate } = await resolveTranslations();
+  try {
+    const groupId = await resolveGroupId(context, translate);
+    const { userId, scope } = await resolveAuthScope(req, translate);
+    const container = await createRequestContainer();
+    const em = container.resolve("em").fork();
+    await loadGroupOrThrow(em, groupId, scope, translate);
+    const rawBody = await readJsonSafe(req, {}) ?? {};
+    const rawInput = termsBodySchema.parse(rawBody);
+    const existing = await em.findOne(CustomerGroupTerms, { groupId, tenantId: scope.tenantId, deletedAt: null });
+    const guarded = await runRouteMutationGuards({
+      container,
+      req,
+      auth: { userId, tenantId: scope.tenantId, organizationId: scope.organizationId },
+      input: {
+        resourceKind: TERMS_RESOURCE_KIND,
+        resourceId: existing?.id ?? groupId,
+        operation: existing ? "update" : "create",
+        mutationPayload: rawInput
+      }
+    });
+    if (!guarded.ok) return guarded.response;
+    const payload = guarded.modifiedPayload ?? rawInput;
+    const scopedPayload = { ...payload, groupId, tenantId: scope.tenantId, organizationId: scope.organizationId };
+    const assertPriceKindAllowed = async (priceKindId) => {
+      if (!priceKindId || priceKindId === existing?.priceKindId) return;
+      if (await isPriceKindInTenant(em, priceKindId, scope.tenantId)) return;
+      throw badRequest(
+        translate("customer_groups.errors.priceKindNotFound", "The selected price kind does not exist.")
+      );
+    };
+    let terms;
+    if (existing) {
+      enforceCommandOptimisticLock({
+        resourceKind: TERMS_RESOURCE_KIND,
+        resourceId: existing.id,
+        current: existing.updatedAt,
+        request: req
+      });
+      const parsed = customerGroupTermsUpdateSchema.parse({ ...scopedPayload, id: existing.id });
+      await assertPriceKindAllowed(parsed.priceKindId);
+      applyTermsUpdate(existing, parsed);
+      terms = existing;
+    } else {
+      const parsed = customerGroupTermsCreateSchema.parse(scopedPayload);
+      await assertPriceKindAllowed(parsed.priceKindId);
+      terms = em.create(CustomerGroupTerms, toEntityData(parsed));
+      em.persist(terms);
+    }
+    await em.flush();
+    await guarded.runAfterSuccess();
+    try {
+      await announceCustomerGroupTermsUpdated(container, terms);
+    } catch (announceErr) {
+      logger.error("customer_groups.terms.put announce failed", { err: announceErr });
+      getTelemetryRuntime()?.reportError(announceErr, {
+        module: "customer_groups",
+        code: "customer_groups.terms_announce_failed"
+      });
+    }
+    return NextResponse.json({ terms: serializeTerms(terms) });
+  } catch (err) {
+    if (isCrudHttpError(err)) return NextResponse.json(err.body, { status: err.status });
+    if (err instanceof z.ZodError) {
+      return NextResponse.json(
+        { error: translate("customer_groups.errors.invalid_input", "Invalid input") },
+        { status: 400 }
+      );
+    }
+    if (isUniqueViolation(err)) {
+      const conflictError = conflict(
+        translate(
+          "customer_groups.errors.terms_conflict",
+          "These commercial terms were changed at the same time by someone else. Reload and try again."
+        )
+      );
+      return NextResponse.json(conflictError.body, { status: conflictError.status });
+    }
+    logger.error("customer_groups.terms.put failed", { err });
+    getTelemetryRuntime()?.reportError(err, { module: "customer_groups", code: "customer_groups.terms_put_failed" });
+    return NextResponse.json(
+      { error: translate("customer_groups.errors.save_failed", "Failed to save commercial terms") },
+      { status: 500 }
+    );
+  }
+}
+const termsItemSchema = z.object({
+  id: z.string().uuid(),
+  groupId: z.string().uuid(),
+  organizationId: z.string().uuid().nullable(),
+  tenantId: z.string().uuid(),
+  priceKindId: z.string().uuid().nullable(),
+  paymentTermsDays: z.number().int().nullable(),
+  allowPurchaseOnAccount: z.boolean().nullable(),
+  defaultCreditLimit: z.number().nullable(),
+  creditCurrencyCode: z.string().nullable(),
+  approvalRequiredAbove: z.number().nullable(),
+  minOrderValue: z.number().nullable(),
+  metadata: z.record(z.string(), z.unknown()).nullable(),
+  createdAt: z.string(),
+  updatedAt: z.string()
+});
+const termsGetResponseSchema = z.object({ terms: termsItemSchema.nullable() });
+const termsPutResponseSchema = z.object({ terms: termsItemSchema });
+const termsErrorSchema = z.object({ error: z.string() });
+const openApi = {
+  tag: "CustomerGroups",
+  summary: "Commercial terms for a customer group",
+  methods: {
+    GET: {
+      summary: "Get a customer group\u2019s commercial terms",
+      description: "Returns the group\u2019s own terms row, or `{ terms: null }` when the group has none and inherits from its parent/tenant defaults.",
+      responses: [{ status: 200, description: "Terms (or null)", schema: termsGetResponseSchema }],
+      errors: [
+        { status: 400, description: "Tenant context is required", schema: termsErrorSchema },
+        { status: 401, description: "Unauthorized", schema: termsErrorSchema },
+        { status: 404, description: "Customer group not found", schema: termsErrorSchema },
+        { status: 500, description: "Unexpected failure", schema: termsErrorSchema }
+      ]
+    },
+    PUT: {
+      summary: "Create or update a customer group\u2019s commercial terms",
+      description: "Upserts the group\u2019s terms row (creates it on first save). Supports optimistic locking via the extension header once a row exists.",
+      requestBody: { contentType: "application/json", schema: customerGroupTermsCreateSchema.partial() },
+      responses: [{ status: 200, description: "Terms created or updated", schema: termsPutResponseSchema }],
+      errors: [
+        { status: 400, description: "Validation failed", schema: termsErrorSchema },
+        { status: 401, description: "Unauthorized", schema: termsErrorSchema },
+        { status: 404, description: "Customer group not found", schema: termsErrorSchema },
+        { status: 409, description: "Optimistic lock or concurrent-create conflict", schema: termsErrorSchema },
+        { status: 500, description: "Unexpected failure", schema: termsErrorSchema }
+      ]
+    }
+  }
+};
+export {
+  GET,
+  PUT,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/customer_groups/api/customer-groups/[id]/terms/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../../src/modules/customer_groups/api/customer-groups/%5Bid%5D/terms/route.ts"],
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { readJsonSafe } from '@open-mercato/shared/lib/http/readJsonSafe'\nimport { CrudHttpError, badRequest, conflict, isCrudHttpError, isUniqueViolation, notFound } from '@open-mercato/shared/lib/crud/errors'\nimport { enforceCommandOptimisticLock } from '@open-mercato/shared/lib/crud/optimistic-lock-command'\nimport { runRouteMutationGuards } from '@open-mercato/shared/lib/crud/route-mutation-guard'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport { getTelemetryRuntime } from '@open-mercato/shared/lib/telemetry/runtime'\nimport { CustomerGroup, CustomerGroupTerms } from '../../../../data/entities'\nimport { isPriceKindInTenant } from '../../../../lib/priceKindScope'\nimport { announceCustomerGroupTermsUpdated } from '../../../../lib/groupEvents'\nimport {\n  customerGroupTermsCreateSchema,\n  customerGroupTermsUpdateSchema,\n  type CustomerGroupTermsCreateInput,\n  type CustomerGroupTermsUpdateInput,\n} from '../../../../data/validators'\n\nconst logger = createLogger('customer_groups')\n\n// Terms are a strict 1:1 sub-resource of a group (`customer_group_terms_group_unique`\n// is a partial unique index on `group_id`, see `data/entities.ts`) with no independent\n// list/pagination/search use case \u2014 there is no \"list all terms rows\" screen, only\n// \"this group's terms\". The spec's own literal path (`GET/PUT\n// /api/customer-groups/:id/terms`) nests terms under a specific group, unlike\n// `../crud.ts` / `memberships/crud.ts`, which are genuine tenant-wide collections with\n// their own list/filter semantics. A `[id]` dynamic segment (id = the GROUP's id) doing\n// a plain `findOne`/upsert against `CustomerGroupTerms` is therefore the better fit here\n// than a `makeCrudRoute` keyed by `groupId` (Option A from the Step 2.4 task) \u2014 the\n// latter would need to invent list/create/delete semantics this resource never uses,\n// and `makeCrudRoute`'s auto-registered optimistic-lock reader is keyed by the route's\n// own resourceKind, not a caller-chosen `groupId` lookup, so it would not save any\n// wiring over the explicit `enforceCommandOptimisticLock` call used below anyway.\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['customer_groups.terms.view'] },\n  PUT: { requireAuth: true, requireFeatures: ['customer_groups.terms.manage'] },\n}\n\n// Matches the indexer entityType naming convention already used for the other two\n// entities in this module (`customer_groups:customer_group`,\n// `customer_groups:customer_group_membership` in `../crud.ts` /\n// `memberships/crud.ts`), so `OM_OPTIMISTIC_LOCK`'s allow-list mode can target this\n// resource by the same family of names.\nconst TERMS_RESOURCE_KIND = 'customer_groups:customer_group_terms'\n\nconst paramsSchema = z.object({ id: z.string().uuid() })\n\ntype RouteContext = { params: Promise<{ id: string }> | { id: string } }\n\ntype Scope = { tenantId: string; organizationId: string | null }\n\ntype Translate = (key: string, fallback?: string) => string\n\nasync function resolveGroupId(context: RouteContext, translate: Translate): Promise<string> {\n  const raw = await context.params\n  const parsed = paramsSchema.safeParse(raw)\n  if (!parsed.success) {\n    throw notFound(translate('customer_groups.errors.group_not_found', 'Customer group not found'))\n  }\n  return parsed.data.id\n}\n\nasync function resolveAuthScope(req: Request, translate: Translate): Promise<{ userId: string; scope: Scope }> {\n  const auth = await getAuthFromRequest(req)\n  if (!auth) throw new CrudHttpError(401, { error: translate('customer_groups.errors.unauthorized', 'Unauthorized') })\n  const tenantId = auth.tenantId ?? null\n  if (!tenantId) {\n    throw new CrudHttpError(400, { error: translate('customer_groups.errors.tenant_required', 'Tenant context is required') })\n  }\n  return { userId: auth.sub, scope: { tenantId, organizationId: auth.orgId ?? null } }\n}\n\nasync function loadGroupOrThrow(\n  em: EntityManager,\n  id: string,\n  scope: Scope,\n  translate: Translate,\n): Promise<CustomerGroup> {\n  const group = await em.findOne(CustomerGroup, { id, tenantId: scope.tenantId, deletedAt: null })\n  if (!group) throw notFound(translate('customer_groups.errors.group_not_found', 'Customer group not found'))\n  return group\n}\n\n// Mirrors `toNumericString` in `catalog/commands/shared.ts` \u2014 this module has no\n// shared equivalent yet, so a small module-local copy follows the same established\n// pattern rather than introducing a new cross-module dependency for one line.\nfunction toNumericString(value: number | null | undefined): string | null {\n  if (value === undefined || value === null) return null\n  return value.toString()\n}\n\nfunction toNumberOrNull(value: string | null | undefined): number | null {\n  if (value == null) return null\n  const parsed = Number(value)\n  return Number.isNaN(parsed) ? null : parsed\n}\n\nfunction serializeTerms(terms: CustomerGroupTerms) {\n  return {\n    id: terms.id,\n    groupId: terms.groupId,\n    organizationId: terms.organizationId ?? null,\n    tenantId: terms.tenantId,\n    priceKindId: terms.priceKindId ?? null,\n    paymentTermsDays: terms.paymentTermsDays ?? null,\n    allowPurchaseOnAccount: terms.allowPurchaseOnAccount ?? null,\n    defaultCreditLimit: toNumberOrNull(terms.defaultCreditLimit),\n    creditCurrencyCode: terms.creditCurrencyCode ?? null,\n    approvalRequiredAbove: toNumberOrNull(terms.approvalRequiredAbove),\n    minOrderValue: toNumberOrNull(terms.minOrderValue),\n    metadata: terms.metadata ?? null,\n    createdAt: terms.createdAt.toISOString(),\n    updatedAt: terms.updatedAt.toISOString(),\n  }\n}\n\nexport async function GET(req: Request, context: RouteContext) {\n  const { translate } = await resolveTranslations()\n  try {\n    const groupId = await resolveGroupId(context, translate)\n    const { scope } = await resolveAuthScope(req, translate)\n    const container = await createRequestContainer()\n    const em = (container.resolve('em') as EntityManager).fork()\n\n    await loadGroupOrThrow(em, groupId, scope, translate)\n\n    // No terms row yet is a normal, expected state (spec: \"No terms set \u2014 inheriting\n    // from parent / tenant defaults\") \u2014 answered as 200 with `terms: null` rather than\n    // 404, since the sub-resource's *absence* is itself meaningful data for the caller\n    // to render, not an error.\n    const terms = await em.findOne(CustomerGroupTerms, { groupId, tenantId: scope.tenantId, deletedAt: null })\n    return NextResponse.json({ terms: terms ? serializeTerms(terms) : null })\n  } catch (err) {\n    if (isCrudHttpError(err)) return NextResponse.json(err.body, { status: err.status })\n    logger.error('customer_groups.terms.get failed', { err })\n    getTelemetryRuntime()?.reportError(err, { module: 'customer_groups', code: 'customer_groups.terms_get_failed' })\n    return NextResponse.json(\n      { error: translate('customer_groups.errors.load_failed', 'Failed to load commercial terms') },\n      { status: 500 },\n    )\n  }\n}\n\nconst termsBodySchema = z.object({}).passthrough()\n\ntype CustomerGroupTermsEntityData = {\n  organizationId: string | null\n  tenantId: string\n  groupId: string\n  priceKindId: string | null\n  paymentTermsDays: number | null\n  allowPurchaseOnAccount: boolean | null\n  defaultCreditLimit: string | null\n  creditCurrencyCode: string | null\n  approvalRequiredAbove: string | null\n  minOrderValue: string | null\n  metadata: Record<string, unknown> | null\n}\n\nfunction toEntityData(input: CustomerGroupTermsCreateInput): CustomerGroupTermsEntityData {\n  return {\n    organizationId: input.organizationId ?? null,\n    tenantId: input.tenantId,\n    groupId: input.groupId,\n    priceKindId: input.priceKindId ?? null,\n    paymentTermsDays: input.paymentTermsDays ?? null,\n    allowPurchaseOnAccount: input.allowPurchaseOnAccount ?? null,\n    defaultCreditLimit: toNumericString(input.defaultCreditLimit),\n    creditCurrencyCode: input.creditCurrencyCode ?? null,\n    approvalRequiredAbove: toNumericString(input.approvalRequiredAbove),\n    minOrderValue: toNumericString(input.minOrderValue),\n    metadata: input.metadata ?? null,\n  }\n}\n\nfunction hasOwn(input: object, key: string): boolean {\n  return Object.prototype.hasOwnProperty.call(input, key)\n}\n\n// Scope fields (tenantId/organizationId/groupId) are deliberately excluded \u2014 same rule\n// as `applyCustomerGroupUpdate` in `../../crud.ts`: a terms row's group/tenant is fixed\n// at creation and MUST NOT change on update.\nfunction applyTermsUpdate(entity: CustomerGroupTerms, input: CustomerGroupTermsUpdateInput): void {\n  if (hasOwn(input, 'priceKindId')) entity.priceKindId = input.priceKindId ?? null\n  if (hasOwn(input, 'paymentTermsDays')) entity.paymentTermsDays = input.paymentTermsDays ?? null\n  if (hasOwn(input, 'allowPurchaseOnAccount')) entity.allowPurchaseOnAccount = input.allowPurchaseOnAccount ?? null\n  if (hasOwn(input, 'defaultCreditLimit')) entity.defaultCreditLimit = toNumericString(input.defaultCreditLimit)\n  if (hasOwn(input, 'creditCurrencyCode')) entity.creditCurrencyCode = input.creditCurrencyCode ?? null\n  if (hasOwn(input, 'approvalRequiredAbove')) entity.approvalRequiredAbove = toNumericString(input.approvalRequiredAbove)\n  if (hasOwn(input, 'minOrderValue')) entity.minOrderValue = toNumericString(input.minOrderValue)\n  if (hasOwn(input, 'metadata')) entity.metadata = input.metadata ?? null\n}\n\nexport async function PUT(req: Request, context: RouteContext) {\n  const { translate } = await resolveTranslations()\n  try {\n    const groupId = await resolveGroupId(context, translate)\n    const { userId, scope } = await resolveAuthScope(req, translate)\n    const container = await createRequestContainer()\n    const em = (container.resolve('em') as EntityManager).fork()\n\n    await loadGroupOrThrow(em, groupId, scope, translate)\n\n    const rawBody = (await readJsonSafe<Record<string, unknown>>(req, {})) ?? {}\n    const rawInput = termsBodySchema.parse(rawBody)\n\n    const existing = await em.findOne(CustomerGroupTerms, { groupId, tenantId: scope.tenantId, deletedAt: null })\n\n    const guarded = await runRouteMutationGuards({\n      container,\n      req,\n      auth: { userId, tenantId: scope.tenantId, organizationId: scope.organizationId },\n      input: {\n        resourceKind: TERMS_RESOURCE_KIND,\n        resourceId: existing?.id ?? groupId,\n        operation: existing ? 'update' : 'create',\n        mutationPayload: rawInput,\n      },\n    })\n    if (!guarded.ok) return guarded.response\n\n    const payload = guarded.modifiedPayload ?? rawInput\n\n    const scopedPayload = { ...payload, groupId, tenantId: scope.tenantId, organizationId: scope.organizationId }\n\n    // Runs on the validated payload only, so a malformed `priceKindId` is a 400 from\n    // the schema instead of reaching the uuid column as a raw query.\n    const assertPriceKindAllowed = async (priceKindId: string | null | undefined): Promise<void> => {\n      if (!priceKindId || priceKindId === existing?.priceKindId) return\n      if (await isPriceKindInTenant(em, priceKindId, scope.tenantId)) return\n      throw badRequest(\n        translate('customer_groups.errors.priceKindNotFound', 'The selected price kind does not exist.'),\n      )\n    }\n\n    let terms: CustomerGroupTerms\n    if (existing) {\n      // The terms row has its own `updated_at`, independent of the parent group's \u2014\n      // guard THIS row against a concurrent edit of the same terms, not the group.\n      // No lock check on creation below: there is nothing to conflict with yet.\n      enforceCommandOptimisticLock({\n        resourceKind: TERMS_RESOURCE_KIND,\n        resourceId: existing.id,\n        current: existing.updatedAt,\n        request: req,\n      })\n      const parsed = customerGroupTermsUpdateSchema.parse({ ...scopedPayload, id: existing.id })\n      await assertPriceKindAllowed(parsed.priceKindId)\n      applyTermsUpdate(existing, parsed)\n      terms = existing\n    } else {\n      const parsed = customerGroupTermsCreateSchema.parse(scopedPayload)\n      await assertPriceKindAllowed(parsed.priceKindId)\n      terms = em.create(CustomerGroupTerms, toEntityData(parsed))\n      em.persist(terms)\n    }\n\n    await em.flush()\n    await guarded.runAfterSuccess()\n    try {\n      await announceCustomerGroupTermsUpdated(container, terms)\n    } catch (announceErr) {\n      logger.error('customer_groups.terms.put announce failed', { err: announceErr })\n      getTelemetryRuntime()?.reportError(announceErr, {\n        module: 'customer_groups',\n        code: 'customer_groups.terms_announce_failed',\n      })\n    }\n\n    return NextResponse.json({ terms: serializeTerms(terms) })\n  } catch (err) {\n    if (isCrudHttpError(err)) return NextResponse.json(err.body, { status: err.status })\n    if (err instanceof z.ZodError) {\n      return NextResponse.json(\n        { error: translate('customer_groups.errors.invalid_input', 'Invalid input') },\n        { status: 400 },\n      )\n    }\n    // `customer_group_terms_group_unique` (one live terms row per group): two\n    // concurrent first saves for the same group both see \"no row yet\" and both insert.\n    // The loser gets a clean 409 so the client reloads and retries as an update.\n    if (isUniqueViolation(err)) {\n      const conflictError = conflict(\n        translate(\n          'customer_groups.errors.terms_conflict',\n          'These commercial terms were changed at the same time by someone else. Reload and try again.',\n        ),\n      )\n      return NextResponse.json(conflictError.body, { status: conflictError.status })\n    }\n    logger.error('customer_groups.terms.put failed', { err })\n    getTelemetryRuntime()?.reportError(err, { module: 'customer_groups', code: 'customer_groups.terms_put_failed' })\n    return NextResponse.json(\n      { error: translate('customer_groups.errors.save_failed', 'Failed to save commercial terms') },\n      { status: 500 },\n    )\n  }\n}\n\nconst termsItemSchema = z.object({\n  id: z.string().uuid(),\n  groupId: z.string().uuid(),\n  organizationId: z.string().uuid().nullable(),\n  tenantId: z.string().uuid(),\n  priceKindId: z.string().uuid().nullable(),\n  paymentTermsDays: z.number().int().nullable(),\n  allowPurchaseOnAccount: z.boolean().nullable(),\n  defaultCreditLimit: z.number().nullable(),\n  creditCurrencyCode: z.string().nullable(),\n  approvalRequiredAbove: z.number().nullable(),\n  minOrderValue: z.number().nullable(),\n  metadata: z.record(z.string(), z.unknown()).nullable(),\n  createdAt: z.string(),\n  updatedAt: z.string(),\n})\n\nconst termsGetResponseSchema = z.object({ terms: termsItemSchema.nullable() })\nconst termsPutResponseSchema = z.object({ terms: termsItemSchema })\nconst termsErrorSchema = z.object({ error: z.string() })\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'CustomerGroups',\n  summary: 'Commercial terms for a customer group',\n  methods: {\n    GET: {\n      summary: 'Get a customer group\u2019s commercial terms',\n      description: 'Returns the group\u2019s own terms row, or `{ terms: null }` when the group has none and inherits from its parent/tenant defaults.',\n      responses: [{ status: 200, description: 'Terms (or null)', schema: termsGetResponseSchema }],\n      errors: [\n        { status: 400, description: 'Tenant context is required', schema: termsErrorSchema },\n        { status: 401, description: 'Unauthorized', schema: termsErrorSchema },\n        { status: 404, description: 'Customer group not found', schema: termsErrorSchema },\n        { status: 500, description: 'Unexpected failure', schema: termsErrorSchema },\n      ],\n    },\n    PUT: {\n      summary: 'Create or update a customer group\u2019s commercial terms',\n      description: 'Upserts the group\u2019s terms row (creates it on first save). Supports optimistic locking via the extension header once a row exists.',\n      requestBody: { contentType: 'application/json', schema: customerGroupTermsCreateSchema.partial() },\n      responses: [{ status: 200, description: 'Terms created or updated', schema: termsPutResponseSchema }],\n      errors: [\n        { status: 400, description: 'Validation failed', schema: termsErrorSchema },\n        { status: 401, description: 'Unauthorized', schema: termsErrorSchema },\n        { status: 404, description: 'Customer group not found', schema: termsErrorSchema },\n        { status: 409, description: 'Optimistic lock or concurrent-create conflict', schema: termsErrorSchema },\n        { status: 500, description: 'Unexpected failure', schema: termsErrorSchema },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAElB,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,2BAA2B;AACpC,SAAS,oBAAoB;AAC7B,SAAS,eAAe,YAAY,UAAU,iBAAiB,mBAAmB,gBAAgB;AAClG,SAAS,oCAAoC;AAC7C,SAAS,8BAA8B;AAEvC,SAAS,oBAAoB;AAC7B,SAAS,2BAA2B;AACpC,SAAS,eAAe,0BAA0B;AAClD,SAAS,2BAA2B;AACpC,SAAS,yCAAyC;AAClD;AAAA,EACE;AAAA,EACA;AAAA,OAGK;AAEP,MAAM,SAAS,aAAa,iBAAiB;AAetC,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,4BAA4B,EAAE;AAAA,EAC1E,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,8BAA8B,EAAE;AAC9E;AAOA,MAAM,sBAAsB;AAE5B,MAAM,eAAe,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAQvD,eAAe,eAAe,SAAuB,WAAuC;AAC1F,QAAM,MAAM,MAAM,QAAQ;AAC1B,QAAM,SAAS,aAAa,UAAU,GAAG;AACzC,MAAI,CAAC,OAAO,SAAS;AACnB,UAAM,SAAS,UAAU,0CAA0C,0BAA0B,CAAC;AAAA,EAChG;AACA,SAAO,OAAO,KAAK;AACrB;AAEA,eAAe,iBAAiB,KAAc,WAAiE;AAC7G,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,KAAM,OAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,uCAAuC,cAAc,EAAE,CAAC;AACnH,QAAM,WAAW,KAAK,YAAY;AAClC,MAAI,CAAC,UAAU;AACb,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,0CAA0C,4BAA4B,EAAE,CAAC;AAAA,EAC3H;AACA,SAAO,EAAE,QAAQ,KAAK,KAAK,OAAO,EAAE,UAAU,gBAAgB,KAAK,SAAS,KAAK,EAAE;AACrF;AAEA,eAAe,iBACb,IACA,IACA,OACA,WACwB;AACxB,QAAM,QAAQ,MAAM,GAAG,QAAQ,eAAe,EAAE,IAAI,UAAU,MAAM,UAAU,WAAW,KAAK,CAAC;AAC/F,MAAI,CAAC,MAAO,OAAM,SAAS,UAAU,0CAA0C,0BAA0B,CAAC;AAC1G,SAAO;AACT;AAKA,SAAS,gBAAgB,OAAiD;AACxE,MAAI,UAAU,UAAa,UAAU,KAAM,QAAO;AAClD,SAAO,MAAM,SAAS;AACxB;AAEA,SAAS,eAAe,OAAiD;AACvE,MAAI,SAAS,KAAM,QAAO;AAC1B,QAAM,SAAS,OAAO,KAAK;AAC3B,SAAO,OAAO,MAAM,MAAM,IAAI,OAAO;AACvC;AAEA,SAAS,eAAe,OAA2B;AACjD,SAAO;AAAA,IACL,IAAI,MAAM;AAAA,IACV,SAAS,MAAM;AAAA,IACf,gBAAgB,MAAM,kBAAkB;AAAA,IACxC,UAAU,MAAM;AAAA,IAChB,aAAa,MAAM,eAAe;AAAA,IAClC,kBAAkB,MAAM,oBAAoB;AAAA,IAC5C,wBAAwB,MAAM,0BAA0B;AAAA,IACxD,oBAAoB,eAAe,MAAM,kBAAkB;AAAA,IAC3D,oBAAoB,MAAM,sBAAsB;AAAA,IAChD,uBAAuB,eAAe,MAAM,qBAAqB;AAAA,IACjE,eAAe,eAAe,MAAM,aAAa;AAAA,IACjD,UAAU,MAAM,YAAY;AAAA,IAC5B,WAAW,MAAM,UAAU,YAAY;AAAA,IACvC,WAAW,MAAM,UAAU,YAAY;AAAA,EACzC;AACF;AAEA,eAAsB,IAAI,KAAc,SAAuB;AAC7D,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,MAAI;AACF,UAAM,UAAU,MAAM,eAAe,SAAS,SAAS;AACvD,UAAM,EAAE,MAAM,IAAI,MAAM,iBAAiB,KAAK,SAAS;AACvD,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAE3D,UAAM,iBAAiB,IAAI,SAAS,OAAO,SAAS;AAMpD,UAAM,QAAQ,MAAM,GAAG,QAAQ,oBAAoB,EAAE,SAAS,UAAU,MAAM,UAAU,WAAW,KAAK,CAAC;AACzG,WAAO,aAAa,KAAK,EAAE,OAAO,QAAQ,eAAe,KAAK,IAAI,KAAK,CAAC;AAAA,EAC1E,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,EAAG,QAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AACnF,WAAO,MAAM,oCAAoC,EAAE,IAAI,CAAC;AACxD,wBAAoB,GAAG,YAAY,KAAK,EAAE,QAAQ,mBAAmB,MAAM,mCAAmC,CAAC;AAC/G,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,UAAU,sCAAsC,iCAAiC,EAAE;AAAA,MAC5F,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAEA,MAAM,kBAAkB,EAAE,OAAO,CAAC,CAAC,EAAE,YAAY;AAgBjD,SAAS,aAAa,OAAoE;AACxF,SAAO;AAAA,IACL,gBAAgB,MAAM,kBAAkB;AAAA,IACxC,UAAU,MAAM;AAAA,IAChB,SAAS,MAAM;AAAA,IACf,aAAa,MAAM,eAAe;AAAA,IAClC,kBAAkB,MAAM,oBAAoB;AAAA,IAC5C,wBAAwB,MAAM,0BAA0B;AAAA,IACxD,oBAAoB,gBAAgB,MAAM,kBAAkB;AAAA,IAC5D,oBAAoB,MAAM,sBAAsB;AAAA,IAChD,uBAAuB,gBAAgB,MAAM,qBAAqB;AAAA,IAClE,eAAe,gBAAgB,MAAM,aAAa;AAAA,IAClD,UAAU,MAAM,YAAY;AAAA,EAC9B;AACF;AAEA,SAAS,OAAO,OAAe,KAAsB;AACnD,SAAO,OAAO,UAAU,eAAe,KAAK,OAAO,GAAG;AACxD;AAKA,SAAS,iBAAiB,QAA4B,OAA4C;AAChG,MAAI,OAAO,OAAO,aAAa,EAAG,QAAO,cAAc,MAAM,eAAe;AAC5E,MAAI,OAAO,OAAO,kBAAkB,EAAG,QAAO,mBAAmB,MAAM,oBAAoB;AAC3F,MAAI,OAAO,OAAO,wBAAwB,EAAG,QAAO,yBAAyB,MAAM,0BAA0B;AAC7G,MAAI,OAAO,OAAO,oBAAoB,EAAG,QAAO,qBAAqB,gBAAgB,MAAM,kBAAkB;AAC7G,MAAI,OAAO,OAAO,oBAAoB,EAAG,QAAO,qBAAqB,MAAM,sBAAsB;AACjG,MAAI,OAAO,OAAO,uBAAuB,EAAG,QAAO,wBAAwB,gBAAgB,MAAM,qBAAqB;AACtH,MAAI,OAAO,OAAO,eAAe,EAAG,QAAO,gBAAgB,gBAAgB,MAAM,aAAa;AAC9F,MAAI,OAAO,OAAO,UAAU,EAAG,QAAO,WAAW,MAAM,YAAY;AACrE;AAEA,eAAsB,IAAI,KAAc,SAAuB;AAC7D,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,MAAI;AACF,UAAM,UAAU,MAAM,eAAe,SAAS,SAAS;AACvD,UAAM,EAAE,QAAQ,MAAM,IAAI,MAAM,iBAAiB,KAAK,SAAS;AAC/D,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAE3D,UAAM,iBAAiB,IAAI,SAAS,OAAO,SAAS;AAEpD,UAAM,UAAW,MAAM,aAAsC,KAAK,CAAC,CAAC,KAAM,CAAC;AAC3E,UAAM,WAAW,gBAAgB,MAAM,OAAO;AAE9C,UAAM,WAAW,MAAM,GAAG,QAAQ,oBAAoB,EAAE,SAAS,UAAU,MAAM,UAAU,WAAW,KAAK,CAAC;AAE5G,UAAM,UAAU,MAAM,uBAAuB;AAAA,MAC3C;AAAA,MACA;AAAA,MACA,MAAM,EAAE,QAAQ,UAAU,MAAM,UAAU,gBAAgB,MAAM,eAAe;AAAA,MAC/E,OAAO;AAAA,QACL,cAAc;AAAA,QACd,YAAY,UAAU,MAAM;AAAA,QAC5B,WAAW,WAAW,WAAW;AAAA,QACjC,iBAAiB;AAAA,MACnB;AAAA,IACF,CAAC;AACD,QAAI,CAAC,QAAQ,GAAI,QAAO,QAAQ;AAEhC,UAAM,UAAU,QAAQ,mBAAmB;AAE3C,UAAM,gBAAgB,EAAE,GAAG,SAAS,SAAS,UAAU,MAAM,UAAU,gBAAgB,MAAM,eAAe;AAI5G,UAAM,yBAAyB,OAAO,gBAA0D;AAC9F,UAAI,CAAC,eAAe,gBAAgB,UAAU,YAAa;AAC3D,UAAI,MAAM,oBAAoB,IAAI,aAAa,MAAM,QAAQ,EAAG;AAChE,YAAM;AAAA,QACJ,UAAU,4CAA4C,yCAAyC;AAAA,MACjG;AAAA,IACF;AAEA,QAAI;AACJ,QAAI,UAAU;AAIZ,mCAA6B;AAAA,QAC3B,cAAc;AAAA,QACd,YAAY,SAAS;AAAA,QACrB,SAAS,SAAS;AAAA,QAClB,SAAS;AAAA,MACX,CAAC;AACD,YAAM,SAAS,+BAA+B,MAAM,EAAE,GAAG,eAAe,IAAI,SAAS,GAAG,CAAC;AACzF,YAAM,uBAAuB,OAAO,WAAW;AAC/C,uBAAiB,UAAU,MAAM;AACjC,cAAQ;AAAA,IACV,OAAO;AACL,YAAM,SAAS,+BAA+B,MAAM,aAAa;AACjE,YAAM,uBAAuB,OAAO,WAAW;AAC/C,cAAQ,GAAG,OAAO,oBAAoB,aAAa,MAAM,CAAC;AAC1D,SAAG,QAAQ,KAAK;AAAA,IAClB;AAEA,UAAM,GAAG,MAAM;AACf,UAAM,QAAQ,gBAAgB;AAC9B,QAAI;AACF,YAAM,kCAAkC,WAAW,KAAK;AAAA,IAC1D,SAAS,aAAa;AACpB,aAAO,MAAM,6CAA6C,EAAE,KAAK,YAAY,CAAC;AAC9E,0BAAoB,GAAG,YAAY,aAAa;AAAA,QAC9C,QAAQ;AAAA,QACR,MAAM;AAAA,MACR,CAAC;AAAA,IACH;AAEA,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,KAAK,EAAE,CAAC;AAAA,EAC3D,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,EAAG,QAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AACnF,QAAI,eAAe,EAAE,UAAU;AAC7B,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,UAAU,wCAAwC,eAAe,EAAE;AAAA,QAC5E,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAIA,QAAI,kBAAkB,GAAG,GAAG;AAC1B,YAAM,gBAAgB;AAAA,QACpB;AAAA,UACE;AAAA,UACA;AAAA,QACF;AAAA,MACF;AACA,aAAO,aAAa,KAAK,cAAc,MAAM,EAAE,QAAQ,cAAc,OAAO,CAAC;AAAA,IAC/E;AACA,WAAO,MAAM,oCAAoC,EAAE,IAAI,CAAC;AACxD,wBAAoB,GAAG,YAAY,KAAK,EAAE,QAAQ,mBAAmB,MAAM,mCAAmC,CAAC;AAC/G,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,UAAU,sCAAsC,iCAAiC,EAAE;AAAA,MAC5F,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAEA,MAAM,kBAAkB,EAAE,OAAO;AAAA,EAC/B,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,SAAS,EAAE,OAAO,EAAE,KAAK;AAAA,EACzB,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC3C,UAAU,EAAE,OAAO,EAAE,KAAK;AAAA,EAC1B,aAAa,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACxC,kBAAkB,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS;AAAA,EAC5C,wBAAwB,EAAE,QAAQ,EAAE,SAAS;AAAA,EAC7C,oBAAoB,EAAE,OAAO,EAAE,SAAS;AAAA,EACxC,oBAAoB,EAAE,OAAO,EAAE,SAAS;AAAA,EACxC,uBAAuB,EAAE,OAAO,EAAE,SAAS;AAAA,EAC3C,eAAe,EAAE,OAAO,EAAE,SAAS;AAAA,EACnC,UAAU,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS;AAAA,EACrD,WAAW,EAAE,OAAO;AAAA,EACpB,WAAW,EAAE,OAAO;AACtB,CAAC;AAED,MAAM,yBAAyB,EAAE,OAAO,EAAE,OAAO,gBAAgB,SAAS,EAAE,CAAC;AAC7E,MAAM,yBAAyB,EAAE,OAAO,EAAE,OAAO,gBAAgB,CAAC;AAClE,MAAM,mBAAmB,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAEhD,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aAAa;AAAA,MACb,WAAW,CAAC,EAAE,QAAQ,KAAK,aAAa,mBAAmB,QAAQ,uBAAuB,CAAC;AAAA,MAC3F,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,8BAA8B,QAAQ,iBAAiB;AAAA,QACnF,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,iBAAiB;AAAA,QACrE,EAAE,QAAQ,KAAK,aAAa,4BAA4B,QAAQ,iBAAiB;AAAA,QACjF,EAAE,QAAQ,KAAK,aAAa,sBAAsB,QAAQ,iBAAiB;AAAA,MAC7E;AAAA,IACF;AAAA,IACA,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aAAa;AAAA,MACb,aAAa,EAAE,aAAa,oBAAoB,QAAQ,+BAA+B,QAAQ,EAAE;AAAA,MACjG,WAAW,CAAC,EAAE,QAAQ,KAAK,aAAa,4BAA4B,QAAQ,uBAAuB,CAAC;AAAA,MACpG,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,qBAAqB,QAAQ,iBAAiB;AAAA,QAC1E,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,iBAAiB;AAAA,QACrE,EAAE,QAAQ,KAAK,aAAa,4BAA4B,QAAQ,iBAAiB;AAAA,QACjF,EAAE,QAAQ,KAAK,aAAa,iDAAiD,QAAQ,iBAAiB;AAAA,QACtG,EAAE,QAAQ,KAAK,aAAa,sBAAsB,QAAQ,iBAAiB;AAAA,MAC7E;AAAA,IACF;AAAA,EACF;AACF;",
+  "names": []
+}