@open-mercato/shared 0.6.7-develop.6862.1.c11a64ce0a → 0.6.7

package/dist/lib/bootstrap/dynamicLoader.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../src/lib/bootstrap/dynamicLoader.ts"],
-  "sourcesContent": ["import type { BootstrapData } from './types'\nimport type { AppDiRegistrar } from '../di/container'\nimport { findAppRoot, type AppRoot } from './appResolver'\nimport { registerEntityIds } from '../encryption/entityIds'\nimport { createLogger } from '../logger'\nimport {\n  ensureMikroOrmV7GeneratedCacheCompatibility,\n  recoverMikroOrmV7GeneratedCacheFromImportError,\n} from './generatedCacheRecovery'\nimport { CLIENT_ONLY_STUB_NAMESPACE, createClientOnlyStubPlugin } from './clientOnlyModules'\nimport path from 'node:path'\nimport fs from 'node:fs'\nimport crypto from 'node:crypto'\nimport { createRequire } from 'node:module'\nimport { pathToFileURL } from 'node:url'\n\nconst logger = createLogger('shared').child({ component: 'bootstrap' })\n\n/**\n * Thrown when an expected generated source file is absent.\n *\n * Optional registries treat this as the supported compatibility case (an app\n * that never generated the file), which is what makes it distinguishable from\n * a file that exists but fails to compile or import.\n */\nclass GeneratedFileNotFoundError extends Error {\n  readonly filePath: string\n\n  constructor(filePath: string) {\n    super(`Generated file not found: ${filePath}`)\n    this.name = 'GeneratedFileNotFoundError'\n    this.filePath = filePath\n  }\n}\n\n/**\n * esbuild plugins for the CLI bundle, in resolution order. The client-only stub must come\n * first so it wins over the alias and external plugins for `*.client` dynamic imports.\n *\n * Exported so the wiring itself is testable: a test that only exercises\n * `createClientOnlyStubPlugin` in isolation stays green if the plugin is dropped from this\n * list, which would silently reintroduce #4623.\n */\nexport function createCliBundlePlugins(appRoot: string): import('esbuild').Plugin[] {\n  // Plugin to resolve the @/ alias the way the app tsconfig maps it:\n  // `@/.mercato/*` to the app root, every other `@/*` to the app's src/ directory.\n  const aliasPlugin: import('esbuild').Plugin = {\n    name: 'alias-resolver',\n    setup(build) {\n      build.onResolve({ filter: /^@\\// }, (args) => {\n        const rest = args.path.slice('@/'.length)\n        const bases = rest.startsWith('.mercato/')\n          ? [path.join(appRoot, rest)]\n          : [path.join(appRoot, 'src', rest), path.join(appRoot, rest)]\n        for (const base of bases) {\n          if (fs.existsSync(base) && fs.statSync(base).isFile()) {\n            return { path: base }\n          }\n          for (const suffix of ['.ts', '.tsx', '/index.ts', '/index.tsx']) {\n            if (fs.existsSync(base + suffix)) {\n              return { path: base + suffix }\n            }\n          }\n        }\n        // Nothing matched \u2014 hand esbuild the literal mapping so it reports the\n        // missing file against the path the app author actually wrote.\n        return { path: path.join(appRoot, rest) }\n      })\n    },\n  }\n\n  // Plugin to mark non-JSON package imports as external\n  const externalNonJsonPlugin: import('esbuild').Plugin = {\n    name: 'external-non-json',\n    setup(build) {\n      // Mark all package imports as external EXCEPT JSON files\n      // Filter matches paths that don't start with . or / (package imports like @open-mercato/shared)\n      build.onResolve({ filter: /^[^./]/ }, (args) => {\n        // Skip Windows absolute paths (e.g., C:\\...) - they're local files, not packages\n        if (/^[a-zA-Z]:/.test(args.path)) {\n          return null // Let esbuild handle it\n        }\n        // If it's a JSON file, let esbuild bundle it\n        if (args.path.endsWith('.json')) {\n          return null // Let esbuild handle it\n        }\n        // Otherwise mark as external\n        return { path: args.path, external: true }\n      })\n    },\n  }\n\n  return [createClientOnlyStubPlugin(), aliasPlugin, externalNonJsonPlugin]\n}\n\nconst DYNAMIC_LOADER_CACHE_VERSION = 4\n\ntype DynamicLoaderCacheMetadata = {\n  version: number\n  inputHash: string\n  outputHash: string\n  dependencies: Record<string, string>\n}\n\nfunction cacheMetadataPath(jsPath: string): string {\n  return `${jsPath}.cache.json`\n}\n\nfunction contentHash(content: Buffer | string): string {\n  return crypto.createHash('sha256').update(content).digest('hex')\n}\n\nfunction parseJsonConfig(content: string): unknown {\n  let normalized = ''\n  let inString = false\n  let escaped = false\n\n  for (let index = 0; index < content.length; index += 1) {\n    const character = content[index]\n    const nextCharacter = content[index + 1]\n\n    if (inString) {\n      normalized += character\n      if (escaped) {\n        escaped = false\n      } else if (character === '\\\\') {\n        escaped = true\n      } else if (character === '\"') {\n        inString = false\n      }\n      continue\n    }\n\n    if (character === '\"') {\n      inString = true\n      normalized += character\n      continue\n    }\n\n    if (character === '/' && nextCharacter === '/') {\n      while (index < content.length && content[index] !== '\\n') index += 1\n      normalized += '\\n'\n      continue\n    }\n\n    if (character === '/' && nextCharacter === '*') {\n      index += 2\n      while (index < content.length && !(content[index] === '*' && content[index + 1] === '/')) {\n        index += 1\n      }\n      index += 1\n      continue\n    }\n\n    if (character === ',') {\n      let lookahead = index + 1\n      while (lookahead < content.length && /\\s/.test(content[lookahead])) lookahead += 1\n      if (content[lookahead] === '}' || content[lookahead] === ']') continue\n    }\n\n    normalized += character\n  }\n\n  return JSON.parse(normalized)\n}\n\nfunction resolveExistingConfigPath(candidate: string): string | null {\n  for (const configPath of [candidate, `${candidate}.json`, path.join(candidate, 'tsconfig.json')]) {\n    if (fs.existsSync(configPath) && fs.statSync(configPath).isFile()) return configPath\n  }\n  return null\n}\n\nfunction resolvePackageConfig(configPath: string, reference: string): string | null {\n  try {\n    const resolved = createRequire(pathToFileURL(configPath)).resolve(reference)\n    return path.extname(resolved) === '.json' ? resolved : null\n  } catch {\n    return null\n  }\n}\n\nfunction resolveExtendedConfig(configPath: string, reference: string): string {\n  if (path.isAbsolute(reference) || reference.startsWith('.')) {\n    const resolved = resolveExistingConfigPath(path.resolve(path.dirname(configPath), reference))\n    if (resolved) return resolved\n  } else {\n    for (const packageReference of [reference, `${reference}/tsconfig.json`]) {\n      const resolved = resolvePackageConfig(configPath, packageReference)\n      if (resolved) return resolved\n    }\n  }\n\n  throw new Error(`[internal] TypeScript config extends target not found: ${reference}`)\n}\n\nfunction collectTsconfigPaths(entryPath: string, visited: Set<string> = new Set()): string[] {\n  const configPath = path.resolve(entryPath)\n  if (visited.has(configPath)) return []\n  visited.add(configPath)\n\n  const parsed = parseJsonConfig(fs.readFileSync(configPath, 'utf8'))\n  if (typeof parsed !== 'object' || parsed === null || !('extends' in parsed)) return [configPath]\n\n  const extendsValue = parsed.extends\n  const references = typeof extendsValue === 'string'\n    ? [extendsValue]\n    : Array.isArray(extendsValue) && extendsValue.every((value) => typeof value === 'string')\n      ? extendsValue\n      : []\n\n  return [\n    ...references.flatMap((reference) => collectTsconfigPaths(\n      resolveExtendedConfig(configPath, reference),\n      visited,\n    )),\n    configPath,\n  ]\n}\n\nfunction hashFilesRelativeTo(appRoot: string, filePaths: string[]): Record<string, string> {\n  return Object.fromEntries(filePaths.map((filePath) => [\n    path.relative(appRoot, filePath).split(path.sep).join('/'),\n    contentHash(fs.readFileSync(filePath)),\n  ]))\n}\n\nfunction cacheInputHash(tsPath: string, appRoot: string, tsconfigPaths: string[]): string {\n  const hash = crypto.createHash('sha256')\n  hash.update(JSON.stringify({\n    version: DYNAMIC_LOADER_CACHE_VERSION,\n    sourceHash: contentHash(fs.readFileSync(tsPath)),\n    tsconfigHashes: hashFilesRelativeTo(appRoot, tsconfigPaths),\n  }))\n  return hash.digest('hex')\n}\n\nfunction dependenciesAreValid(appRoot: string, dependencies: Record<string, string>): boolean {\n  return Object.entries(dependencies).every(([relativePath, expectedHash]) => {\n    const dependencyPath = path.resolve(appRoot, relativePath)\n    return fs.existsSync(dependencyPath)\n      && contentHash(fs.readFileSync(dependencyPath)) === expectedHash\n  })\n}\n\nfunction collectDependencyHashes(\n  appRoot: string,\n  inputs: Record<string, unknown>,\n): Record<string, string> {\n  return Object.fromEntries(\n    Object.keys(inputs)\n      .filter((inputPath) => !inputPath.startsWith(`${CLIENT_ONLY_STUB_NAMESPACE}:`))\n      .map((inputPath) => {\n        const absolutePath = path.isAbsolute(inputPath)\n          ? inputPath\n          : path.resolve(appRoot, inputPath)\n        const relativePath = path.relative(appRoot, absolutePath).split(path.sep).join('/')\n        return [relativePath, contentHash(fs.readFileSync(absolutePath))]\n      })\n      .sort(([left], [right]) => left.localeCompare(right)),\n  )\n}\n\nfunction readCacheMetadata(metadataPath: string): DynamicLoaderCacheMetadata | null {\n  try {\n    const parsed: unknown = JSON.parse(fs.readFileSync(metadataPath, 'utf8'))\n    if (\n      typeof parsed === 'object'\n      && parsed !== null\n      && 'version' in parsed\n      && parsed.version === DYNAMIC_LOADER_CACHE_VERSION\n      && 'inputHash' in parsed\n      && typeof parsed.inputHash === 'string'\n      && 'outputHash' in parsed\n      && typeof parsed.outputHash === 'string'\n      && 'dependencies' in parsed\n      && typeof parsed.dependencies === 'object'\n      && parsed.dependencies !== null\n      && Object.values(parsed.dependencies).every((hash) => typeof hash === 'string')\n    ) {\n      return {\n        version: parsed.version,\n        inputHash: parsed.inputHash,\n        outputHash: parsed.outputHash,\n        dependencies: parsed.dependencies as Record<string, string>,\n      }\n    }\n  } catch {\n    return null\n  }\n  return null\n}\n\nfunction cacheIsValid(\n  appRoot: string,\n  jsPath: string,\n  metadataPath: string,\n  expectedInputHash: string,\n): boolean {\n  if (!fs.existsSync(jsPath)) return false\n  const metadata = readCacheMetadata(metadataPath)\n  if (!metadata || metadata.inputHash !== expectedInputHash) return false\n  return contentHash(fs.readFileSync(jsPath)) === metadata.outputHash\n    && dependenciesAreValid(appRoot, metadata.dependencies)\n}\n\n/**\n * Options for `compileAndImport`.\n *\n * Both paths default to the generated-registry layout (`<appRoot>/.mercato/generated/<file>.ts`\n * compiled to a `.mjs` sibling). Sources that live elsewhere in the app \u2014 `src/di.ts` \u2014 MUST pass\n * both explicitly: the default app root is derived by walking three directories up from the source,\n * which only holds inside `.mercato/generated`.\n */\ntype CompileAndImportOptions = {\n  appRoot?: string\n  outFile?: string\n  allowRecovery?: boolean\n}\n\n/**\n * Compile a TypeScript file to JavaScript using esbuild bundler.\n * This bundles the file and all its dependencies, handling JSON imports properly.\n * The compiled file is written next to the source file with a .mjs extension unless\n * `outFile` says otherwise.\n */\nasync function compileAndImport(\n  tsPath: string,\n  options: CompileAndImportOptions = {},\n): Promise<Record<string, unknown>> {\n  const allowRecovery = options.allowRecovery ?? true\n  const jsPath = options.outFile ?? tsPath.replace(/\\.ts$/, '.mjs')\n  const appRoot = options.appRoot ?? path.dirname(path.dirname(path.dirname(tsPath)))\n  const appTsconfig = path.join(appRoot, 'tsconfig.json')\n  const metadataPath = cacheMetadataPath(jsPath)\n\n  const tsExists = fs.existsSync(tsPath)\n  const tsconfigExists = fs.existsSync(appTsconfig)\n\n  if (!tsExists) {\n    throw new GeneratedFileNotFoundError(tsPath)\n  }\n  if (!tsconfigExists) {\n    throw new Error(`App TypeScript config not found: ${appTsconfig}`)\n  }\n\n  const tsconfigPaths = collectTsconfigPaths(appTsconfig)\n  const expectedInputHash = cacheInputHash(tsPath, appRoot, tsconfigPaths)\n  const needsCompile = !cacheIsValid(appRoot, jsPath, metadataPath, expectedInputHash)\n\n  if (needsCompile) {\n    fs.mkdirSync(path.dirname(jsPath), { recursive: true })\n    // Dynamically import esbuild only when needed\n    const esbuild = await import('esbuild')\n\n    // Use esbuild.build with bundling to handle JSON imports\n    const result = await esbuild.build({\n      entryPoints: [tsPath],\n      outfile: jsPath,\n      absWorkingDir: appRoot,\n      bundle: true,\n      metafile: true,\n      format: 'esm',\n      platform: 'node',\n      target: 'node18',\n      tsconfig: appTsconfig,\n      plugins: createCliBundlePlugins(appRoot),\n      // Allow JSON imports\n      loader: { '.json': 'json' },\n    })\n    const metadata: DynamicLoaderCacheMetadata = {\n      version: DYNAMIC_LOADER_CACHE_VERSION,\n      inputHash: expectedInputHash,\n      outputHash: contentHash(fs.readFileSync(jsPath)),\n      dependencies: {\n        ...collectDependencyHashes(appRoot, result.metafile.inputs),\n        ...hashFilesRelativeTo(appRoot, tsconfigPaths),\n      },\n    }\n    fs.writeFileSync(metadataPath, JSON.stringify(metadata))\n  }\n\n  // Import the compiled JavaScript\n  try {\n    const outputHash = contentHash(fs.readFileSync(jsPath))\n    const fileUrl = `${pathToFileURL(jsPath).href}?cache=${outputHash}`\n    return await import(fileUrl)\n  } catch (error) {\n    if (!allowRecovery) {\n      throw error\n    }\n\n    const recovered = recoverMikroOrmV7GeneratedCacheFromImportError(appRoot, error)\n    if (!recovered.applied) {\n      throw error\n    }\n\n    return compileAndImport(tsPath, { ...options, allowRecovery: false })\n  }\n}\n\n\n/**\n * Load a generated registry that older apps may not have generated yet.\n *\n * An absent source file is the supported compatibility case and resolves to\n * `fallback` quietly. Any other failure \u2014 a compile error, a broken import, a\n * runtime throw at module scope \u2014 still resolves to `fallback` so bootstrap\n * keeps working, but is reported at error level: a registry that silently\n * degrades to nothing is exactly how command interceptors stopped applying in\n * worker/CLI processes (#4327, #4491).\n */\nasync function loadOptionalGeneratedModule(\n  tsPath: string,\n  fallback: Record<string, unknown>,\n): Promise<Record<string, unknown>> {\n  try {\n    return await compileAndImport(tsPath)\n  } catch (error) {\n    if (error instanceof GeneratedFileNotFoundError) {\n      logger.debug('Optional generated registry not present, using empty fallback', {\n        file: path.basename(tsPath),\n      })\n      return fallback\n    }\n\n    logger.error('Failed to load generated registry, continuing without its entries', {\n      file: path.basename(tsPath),\n      filePath: tsPath,\n      err: error,\n    })\n    return fallback\n  }\n}\n\nfunction resolveAppRootOrThrow(appRoot?: string): AppRoot {\n  const resolved: AppRoot | null = appRoot\n    ? {\n        generatedDir: path.join(appRoot, '.mercato', 'generated'),\n        appDir: appRoot,\n        mercatoDir: path.join(appRoot, '.mercato'),\n      }\n    : findAppRoot()\n\n  if (!resolved) {\n    throw new Error(\n      'Could not find app root with .mercato/generated directory. ' +\n        'Make sure you run this command from within a Next.js app directory, ' +\n        'or run \"yarn mercato generate\" first to create the generated files.',\n    )\n  }\n\n  return resolved\n}\n\n/**\n * Load the app-level DI registrar (`src/di.ts`) for the dynamic bootstrap path.\n *\n * The Next.js runtime imports `@/di` statically from its own `src/bootstrap.ts` and hands the\n * registrar to `createBootstrap`. Worker, scheduler and CLI processes bootstrap through\n * `bootstrapFromAppRoot` instead, where the `@/` alias does not exist \u2014 so without this the app's\n * DI registrations silently never ran there, and every request container paid a failed\n * `import('@/di')` resolution (the compatibility fallback in `lib/di/container.ts`).\n *\n * An absent `src/di.ts` is the supported case and resolves to `null` quietly. A file that exists\n * but cannot be compiled, imported, or does not export `register` is reported at error level and\n * still resolves to `null`, so a broken app DI module degrades the same way a broken generated\n * registry does (#4327, #4491) instead of taking the whole process down.\n */\nasync function loadAppDiRegistrar(appDir: string): Promise<AppDiRegistrar | null> {\n  const tsPath = path.join(appDir, 'src', 'di.ts')\n  if (!fs.existsSync(tsPath)) {\n    logger.debug('App-level DI module not present, skipping its registrations', { filePath: tsPath })\n    return null\n  }\n\n  try {\n    const appDiModule = await compileAndImport(tsPath, {\n      appRoot: appDir,\n      outFile: path.join(appDir, '.mercato', 'generated', 'app-di.compiled.mjs'),\n    })\n    const register = appDiModule.register\n    if (typeof register !== 'function') {\n      logger.error('App-level DI module exports no register(); its registrations are skipped', {\n        filePath: tsPath,\n      })\n      return null\n    }\n    return register as AppDiRegistrar\n  } catch (error) {\n    logger.error('Failed to load the app-level DI module; its registrations are skipped', {\n      filePath: tsPath,\n      err: error,\n    })\n    return null\n  }\n}\n\n/**\n * Dynamically load bootstrap data from a resolved app directory.\n *\n * IMPORTANT: This only works in unbundled contexts (CLI, tsx).\n * Do NOT use this in Next.js bundled code - use static imports instead.\n *\n * For CLI context, we skip loading modules.generated.ts which has Next.js dependencies.\n * CLI commands are discovered separately via the CLI module system.\n *\n * @param appRoot - Optional explicit app root path. If not provided, will search from cwd.\n * @returns The loaded bootstrap data\n * @throws Error if app root cannot be found or generated files are missing\n */\nexport async function loadBootstrapData(appRoot?: string): Promise<BootstrapData> {\n  const resolved = resolveAppRootOrThrow(appRoot)\n\n  const { generatedDir } = resolved\n\n  ensureMikroOrmV7GeneratedCacheCompatibility(resolved.appDir)\n\n  // IMPORTANT: Load entity IDs FIRST and register them before loading modules.\n  // This is because modules (e.g., ce.ts files) use E.xxx.xxx at module scope,\n  // and they need entity IDs to be available when they're imported.\n  const entityIdsModule = await compileAndImport(path.join(generatedDir, 'entities.ids.generated.ts'))\n  registerEntityIds(entityIdsModule.E as BootstrapData['entityIds'])\n\n  // Now load the rest of the generated files.\n  // modules.cli.generated.ts excludes Next.js-dependent code (routes, APIs, widgets)\n  const [\n    modulesModule,\n    entitiesModule,\n    diModule,\n    searchModule,\n    commandLoadersModule,\n    commandInterceptorsModule,\n    workflowsModule,\n  ] = await Promise.all([\n    compileAndImport(path.join(generatedDir, 'modules.cli.generated.ts')),\n    compileAndImport(path.join(generatedDir, 'entities.generated.ts')),\n    compileAndImport(path.join(generatedDir, 'di.generated.ts')),\n    loadOptionalGeneratedModule(path.join(generatedDir, 'search.generated.ts'), { searchModuleConfigs: [] }),\n    loadOptionalGeneratedModule(path.join(generatedDir, 'command-loaders.generated.ts'), { commandLoaderEntries: [] }),\n    loadOptionalGeneratedModule(path.join(generatedDir, 'command-interceptors.generated.ts'), {\n      commandInterceptorEntries: [],\n    }),\n    loadOptionalGeneratedModule(path.join(generatedDir, 'workflows.generated.ts'), { allCodeWorkflows: [] }),\n  ])\n\n  return {\n    modules: modulesModule.modules as BootstrapData['modules'],\n    entities: entitiesModule.entities as BootstrapData['entities'],\n    diRegistrars: diModule.diRegistrars as BootstrapData['diRegistrars'],\n    entityIds: entityIdsModule.E as BootstrapData['entityIds'],\n    // Search configs are needed by workers for indexing\n    searchModuleConfigs: (searchModule.searchModuleConfigs ?? []) as BootstrapData['searchModuleConfigs'],\n    commandLoaderEntries: (commandLoadersModule.commandLoaderEntries ?? []) as BootstrapData['commandLoaderEntries'],\n    // Command interceptors must apply in worker/CLI processes too \u2014 the\n    // interceptor registry is per-process, so relying on the Next.js runtime's\n    // registration silently no-ops every interceptor for queued/CLI commands\n    // (#4327).\n    commandInterceptorEntries: (commandInterceptorsModule.commandInterceptorEntries ??\n      []) as BootstrapData['commandInterceptorEntries'],\n    // Code workflow definitions are needed by workers to resume code-defined instances\n    codeWorkflows: (workflowsModule.allCodeWorkflows ?? []) as BootstrapData['codeWorkflows'],\n    // Empty UI-related data - not needed for CLI\n    dashboardWidgetEntries: [],\n    injectionWidgetEntries: [],\n    injectionTables: [],\n    interceptorEntries: [],\n    componentOverrideEntries: [],\n  }\n}\n\n/**\n * Create and execute bootstrap in CLI context.\n *\n * This is a convenience function that finds the app root, loads the generated\n * data dynamically, and runs bootstrap. Use this in CLI entry points.\n *\n * Returns the loaded bootstrap data so the CLI can register modules directly\n * (avoids module resolution issues when importing @open-mercato/cli/mercato).\n *\n * @param appRoot - Optional explicit app root path\n * @returns The loaded bootstrap data (modules, entities, etc.)\n */\nexport async function bootstrapFromAppRoot(appRoot?: string): Promise<BootstrapData> {\n  const { createBootstrap, waitForAsyncRegistration } = await import('./factory.js')\n  const resolved = resolveAppRootOrThrow(appRoot)\n  const data = await loadBootstrapData(resolved.appDir)\n  const appDiRegistrar = await loadAppDiRegistrar(resolved.appDir)\n  const bootstrap = createBootstrap(data, appDiRegistrar ? { appDiRegistrar } : {})\n  bootstrap()\n  // In CLI context, wait for async registrations (UI widgets, search configs, etc.)\n  await waitForAsyncRegistration()\n\n  return data\n}\n"],
-  "mappings": "AAEA,SAAS,mBAAiC;AAC1C,SAAS,yBAAyB;AAClC,SAAS,oBAAoB;AAC7B;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,4BAA4B,kCAAkC;AACvE,OAAO,UAAU;AACjB,OAAO,QAAQ;AACf,OAAO,YAAY;AACnB,SAAS,qBAAqB;AAC9B,SAAS,qBAAqB;AAE9B,MAAM,SAAS,aAAa,QAAQ,EAAE,MAAM,EAAE,WAAW,YAAY,CAAC;AAStE,MAAM,mCAAmC,MAAM;AAAA,EAG7C,YAAY,UAAkB;AAC5B,UAAM,6BAA6B,QAAQ,EAAE;AAC7C,SAAK,OAAO;AACZ,SAAK,WAAW;AAAA,EAClB;AACF;AAUO,SAAS,uBAAuB,SAA6C;AAGlF,QAAM,cAAwC;AAAA,IAC5C,MAAM;AAAA,IACN,MAAM,OAAO;AACX,YAAM,UAAU,EAAE,QAAQ,OAAO,GAAG,CAAC,SAAS;AAC5C,cAAM,OAAO,KAAK,KAAK,MAAM,KAAK,MAAM;AACxC,cAAM,QAAQ,KAAK,WAAW,WAAW,IACrC,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,IACzB,CAAC,KAAK,KAAK,SAAS,OAAO,IAAI,GAAG,KAAK,KAAK,SAAS,IAAI,CAAC;AAC9D,mBAAW,QAAQ,OAAO;AACxB,cAAI,GAAG,WAAW,IAAI,KAAK,GAAG,SAAS,IAAI,EAAE,OAAO,GAAG;AACrD,mBAAO,EAAE,MAAM,KAAK;AAAA,UACtB;AACA,qBAAW,UAAU,CAAC,OAAO,QAAQ,aAAa,YAAY,GAAG;AAC/D,gBAAI,GAAG,WAAW,OAAO,MAAM,GAAG;AAChC,qBAAO,EAAE,MAAM,OAAO,OAAO;AAAA,YAC/B;AAAA,UACF;AAAA,QACF;AAGA,eAAO,EAAE,MAAM,KAAK,KAAK,SAAS,IAAI,EAAE;AAAA,MAC1C,CAAC;AAAA,IACH;AAAA,EACF;AAGA,QAAM,wBAAkD;AAAA,IACtD,MAAM;AAAA,IACN,MAAM,OAAO;AAGX,YAAM,UAAU,EAAE,QAAQ,SAAS,GAAG,CAAC,SAAS;AAE9C,YAAI,aAAa,KAAK,KAAK,IAAI,GAAG;AAChC,iBAAO;AAAA,QACT;AAEA,YAAI,KAAK,KAAK,SAAS,OAAO,GAAG;AAC/B,iBAAO;AAAA,QACT;AAEA,eAAO,EAAE,MAAM,KAAK,MAAM,UAAU,KAAK;AAAA,MAC3C,CAAC;AAAA,IACH;AAAA,EACF;AAEA,SAAO,CAAC,2BAA2B,GAAG,aAAa,qBAAqB;AAC1E;AAEA,MAAM,+BAA+B;AASrC,SAAS,kBAAkB,QAAwB;AACjD,SAAO,GAAG,MAAM;AAClB;AAEA,SAAS,YAAY,SAAkC;AACrD,SAAO,OAAO,WAAW,QAAQ,EAAE,OAAO,OAAO,EAAE,OAAO,KAAK;AACjE;AAEA,SAAS,gBAAgB,SAA0B;AACjD,MAAI,aAAa;AACjB,MAAI,WAAW;AACf,MAAI,UAAU;AAEd,WAAS,QAAQ,GAAG,QAAQ,QAAQ,QAAQ,SAAS,GAAG;AACtD,UAAM,YAAY,QAAQ,KAAK;AAC/B,UAAM,gBAAgB,QAAQ,QAAQ,CAAC;AAEvC,QAAI,UAAU;AACZ,oBAAc;AACd,UAAI,SAAS;AACX,kBAAU;AAAA,MACZ,WAAW,cAAc,MAAM;AAC7B,kBAAU;AAAA,MACZ,WAAW,cAAc,KAAK;AAC5B,mBAAW;AAAA,MACb;AACA;AAAA,IACF;AAEA,QAAI,cAAc,KAAK;AACrB,iBAAW;AACX,oBAAc;AACd;AAAA,IACF;AAEA,QAAI,cAAc,OAAO,kBAAkB,KAAK;AAC9C,aAAO,QAAQ,QAAQ,UAAU,QAAQ,KAAK,MAAM,KAAM,UAAS;AACnE,oBAAc;AACd;AAAA,IACF;AAEA,QAAI,cAAc,OAAO,kBAAkB,KAAK;AAC9C,eAAS;AACT,aAAO,QAAQ,QAAQ,UAAU,EAAE,QAAQ,KAAK,MAAM,OAAO,QAAQ,QAAQ,CAAC,MAAM,MAAM;AACxF,iBAAS;AAAA,MACX;AACA,eAAS;AACT;AAAA,IACF;AAEA,QAAI,cAAc,KAAK;AACrB,UAAI,YAAY,QAAQ;AACxB,aAAO,YAAY,QAAQ,UAAU,KAAK,KAAK,QAAQ,SAAS,CAAC,EAAG,cAAa;AACjF,UAAI,QAAQ,SAAS,MAAM,OAAO,QAAQ,SAAS,MAAM,IAAK;AAAA,IAChE;AAEA,kBAAc;AAAA,EAChB;AAEA,SAAO,KAAK,MAAM,UAAU;AAC9B;AAEA,SAAS,0BAA0B,WAAkC;AACnE,aAAW,cAAc,CAAC,WAAW,GAAG,SAAS,SAAS,KAAK,KAAK,WAAW,eAAe,CAAC,GAAG;AAChG,QAAI,GAAG,WAAW,UAAU,KAAK,GAAG,SAAS,UAAU,EAAE,OAAO,EAAG,QAAO;AAAA,EAC5E;AACA,SAAO;AACT;AAEA,SAAS,qBAAqB,YAAoB,WAAkC;AAClF,MAAI;AACF,UAAM,WAAW,cAAc,cAAc,UAAU,CAAC,EAAE,QAAQ,SAAS;AAC3E,WAAO,KAAK,QAAQ,QAAQ,MAAM,UAAU,WAAW;AAAA,EACzD,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,sBAAsB,YAAoB,WAA2B;AAC5E,MAAI,KAAK,WAAW,SAAS,KAAK,UAAU,WAAW,GAAG,GAAG;AAC3D,UAAM,WAAW,0BAA0B,KAAK,QAAQ,KAAK,QAAQ,UAAU,GAAG,SAAS,CAAC;AAC5F,QAAI,SAAU,QAAO;AAAA,EACvB,OAAO;AACL,eAAW,oBAAoB,CAAC,WAAW,GAAG,SAAS,gBAAgB,GAAG;AACxE,YAAM,WAAW,qBAAqB,YAAY,gBAAgB;AAClE,UAAI,SAAU,QAAO;AAAA,IACvB;AAAA,EACF;AAEA,QAAM,IAAI,MAAM,0DAA0D,SAAS,EAAE;AACvF;AAEA,SAAS,qBAAqB,WAAmB,UAAuB,oBAAI,IAAI,GAAa;AAC3F,QAAM,aAAa,KAAK,QAAQ,SAAS;AACzC,MAAI,QAAQ,IAAI,UAAU,EAAG,QAAO,CAAC;AACrC,UAAQ,IAAI,UAAU;AAEtB,QAAM,SAAS,gBAAgB,GAAG,aAAa,YAAY,MAAM,CAAC;AAClE,MAAI,OAAO,WAAW,YAAY,WAAW,QAAQ,EAAE,aAAa,QAAS,QAAO,CAAC,UAAU;AAE/F,QAAM,eAAe,OAAO;AAC5B,QAAM,aAAa,OAAO,iBAAiB,WACvC,CAAC,YAAY,IACb,MAAM,QAAQ,YAAY,KAAK,aAAa,MAAM,CAAC,UAAU,OAAO,UAAU,QAAQ,IACpF,eACA,CAAC;AAEP,SAAO;AAAA,IACL,GAAG,WAAW,QAAQ,CAAC,cAAc;AAAA,MACnC,sBAAsB,YAAY,SAAS;AAAA,MAC3C;AAAA,IACF,CAAC;AAAA,IACD;AAAA,EACF;AACF;AAEA,SAAS,oBAAoB,SAAiB,WAA6C;AACzF,SAAO,OAAO,YAAY,UAAU,IAAI,CAAC,aAAa;AAAA,IACpD,KAAK,SAAS,SAAS,QAAQ,EAAE,MAAM,KAAK,GAAG,EAAE,KAAK,GAAG;AAAA,IACzD,YAAY,GAAG,aAAa,QAAQ,CAAC;AAAA,EACvC,CAAC,CAAC;AACJ;AAEA,SAAS,eAAe,QAAgB,SAAiB,eAAiC;AACxF,QAAM,OAAO,OAAO,WAAW,QAAQ;AACvC,OAAK,OAAO,KAAK,UAAU;AAAA,IACzB,SAAS;AAAA,IACT,YAAY,YAAY,GAAG,aAAa,MAAM,CAAC;AAAA,IAC/C,gBAAgB,oBAAoB,SAAS,aAAa;AAAA,EAC5D,CAAC,CAAC;AACF,SAAO,KAAK,OAAO,KAAK;AAC1B;AAEA,SAAS,qBAAqB,SAAiB,cAA+C;AAC5F,SAAO,OAAO,QAAQ,YAAY,EAAE,MAAM,CAAC,CAAC,cAAc,YAAY,MAAM;AAC1E,UAAM,iBAAiB,KAAK,QAAQ,SAAS,YAAY;AACzD,WAAO,GAAG,WAAW,cAAc,KAC9B,YAAY,GAAG,aAAa,cAAc,CAAC,MAAM;AAAA,EACxD,CAAC;AACH;AAEA,SAAS,wBACP,SACA,QACwB;AACxB,SAAO,OAAO;AAAA,IACZ,OAAO,KAAK,MAAM,EACf,OAAO,CAAC,cAAc,CAAC,UAAU,WAAW,GAAG,0BAA0B,GAAG,CAAC,EAC7E,IAAI,CAAC,cAAc;AAClB,YAAM,eAAe,KAAK,WAAW,SAAS,IAC1C,YACA,KAAK,QAAQ,SAAS,SAAS;AACnC,YAAM,eAAe,KAAK,SAAS,SAAS,YAAY,EAAE,MAAM,KAAK,GAAG,EAAE,KAAK,GAAG;AAClF,aAAO,CAAC,cAAc,YAAY,GAAG,aAAa,YAAY,CAAC,CAAC;AAAA,IAClE,CAAC,EACA,KAAK,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,MAAM,KAAK,cAAc,KAAK,CAAC;AAAA,EACxD;AACF;AAEA,SAAS,kBAAkB,cAAyD;AAClF,MAAI;AACF,UAAM,SAAkB,KAAK,MAAM,GAAG,aAAa,cAAc,MAAM,CAAC;AACxE,QACE,OAAO,WAAW,YACf,WAAW,QACX,aAAa,UACb,OAAO,YAAY,gCACnB,eAAe,UACf,OAAO,OAAO,cAAc,YAC5B,gBAAgB,UAChB,OAAO,OAAO,eAAe,YAC7B,kBAAkB,UAClB,OAAO,OAAO,iBAAiB,YAC/B,OAAO,iBAAiB,QACxB,OAAO,OAAO,OAAO,YAAY,EAAE,MAAM,CAAC,SAAS,OAAO,SAAS,QAAQ,GAC9E;AACA,aAAO;AAAA,QACL,SAAS,OAAO;AAAA,QAChB,WAAW,OAAO;AAAA,QAClB,YAAY,OAAO;AAAA,QACnB,cAAc,OAAO;AAAA,MACvB;AAAA,IACF;AAAA,EACF,QAAQ;AACN,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAEA,SAAS,aACP,SACA,QACA,cACA,mBACS;AACT,MAAI,CAAC,GAAG,WAAW,MAAM,EAAG,QAAO;AACnC,QAAM,WAAW,kBAAkB,YAAY;AAC/C,MAAI,CAAC,YAAY,SAAS,cAAc,kBAAmB,QAAO;AAClE,SAAO,YAAY,GAAG,aAAa,MAAM,CAAC,MAAM,SAAS,cACpD,qBAAqB,SAAS,SAAS,YAAY;AAC1D;AAsBA,eAAe,iBACb,QACA,UAAmC,CAAC,GACF;AAClC,QAAM,gBAAgB,QAAQ,iBAAiB;AAC/C,QAAM,SAAS,QAAQ,WAAW,OAAO,QAAQ,SAAS,MAAM;AAChE,QAAM,UAAU,QAAQ,WAAW,KAAK,QAAQ,KAAK,QAAQ,KAAK,QAAQ,MAAM,CAAC,CAAC;AAClF,QAAM,cAAc,KAAK,KAAK,SAAS,eAAe;AACtD,QAAM,eAAe,kBAAkB,MAAM;AAE7C,QAAM,WAAW,GAAG,WAAW,MAAM;AACrC,QAAM,iBAAiB,GAAG,WAAW,WAAW;AAEhD,MAAI,CAAC,UAAU;AACb,UAAM,IAAI,2BAA2B,MAAM;AAAA,EAC7C;AACA,MAAI,CAAC,gBAAgB;AACnB,UAAM,IAAI,MAAM,oCAAoC,WAAW,EAAE;AAAA,EACnE;AAEA,QAAM,gBAAgB,qBAAqB,WAAW;AACtD,QAAM,oBAAoB,eAAe,QAAQ,SAAS,aAAa;AACvE,QAAM,eAAe,CAAC,aAAa,SAAS,QAAQ,cAAc,iBAAiB;AAEnF,MAAI,cAAc;AAChB,OAAG,UAAU,KAAK,QAAQ,MAAM,GAAG,EAAE,WAAW,KAAK,CAAC;AAEtD,UAAM,UAAU,MAAM,OAAO,SAAS;AAGtC,UAAM,SAAS,MAAM,QAAQ,MAAM;AAAA,MACjC,aAAa,CAAC,MAAM;AAAA,MACpB,SAAS;AAAA,MACT,eAAe;AAAA,MACf,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,SAAS,uBAAuB,OAAO;AAAA;AAAA,MAEvC,QAAQ,EAAE,SAAS,OAAO;AAAA,IAC5B,CAAC;AACD,UAAM,WAAuC;AAAA,MAC3C,SAAS;AAAA,MACT,WAAW;AAAA,MACX,YAAY,YAAY,GAAG,aAAa,MAAM,CAAC;AAAA,MAC/C,cAAc;AAAA,QACZ,GAAG,wBAAwB,SAAS,OAAO,SAAS,MAAM;AAAA,QAC1D,GAAG,oBAAoB,SAAS,aAAa;AAAA,MAC/C;AAAA,IACF;AACA,OAAG,cAAc,cAAc,KAAK,UAAU,QAAQ,CAAC;AAAA,EACzD;AAGA,MAAI;AACF,UAAM,aAAa,YAAY,GAAG,aAAa,MAAM,CAAC;AACtD,UAAM,UAAU,GAAG,cAAc,MAAM,EAAE,IAAI,UAAU,UAAU;AACjE,WAAO,MAAM,OAAO;AAAA,EACtB,SAAS,OAAO;AACd,QAAI,CAAC,eAAe;AAClB,YAAM;AAAA,IACR;AAEA,UAAM,YAAY,+CAA+C,SAAS,KAAK;AAC/E,QAAI,CAAC,UAAU,SAAS;AACtB,YAAM;AAAA,IACR;AAEA,WAAO,iBAAiB,QAAQ,EAAE,GAAG,SAAS,eAAe,MAAM,CAAC;AAAA,EACtE;AACF;AAaA,eAAe,4BACb,QACA,UACkC;AAClC,MAAI;AACF,WAAO,MAAM,iBAAiB,MAAM;AAAA,EACtC,SAAS,OAAO;AACd,QAAI,iBAAiB,4BAA4B;AAC/C,aAAO,MAAM,iEAAiE;AAAA,QAC5E,MAAM,KAAK,SAAS,MAAM;AAAA,MAC5B,CAAC;AACD,aAAO;AAAA,IACT;AAEA,WAAO,MAAM,qEAAqE;AAAA,MAChF,MAAM,KAAK,SAAS,MAAM;AAAA,MAC1B,UAAU;AAAA,MACV,KAAK;AAAA,IACP,CAAC;AACD,WAAO;AAAA,EACT;AACF;AAEA,SAAS,sBAAsB,SAA2B;AACxD,QAAM,WAA2B,UAC7B;AAAA,IACE,cAAc,KAAK,KAAK,SAAS,YAAY,WAAW;AAAA,IACxD,QAAQ;AAAA,IACR,YAAY,KAAK,KAAK,SAAS,UAAU;AAAA,EAC3C,IACA,YAAY;AAEhB,MAAI,CAAC,UAAU;AACb,UAAM,IAAI;AAAA,MACR;AAAA,IAGF;AAAA,EACF;AAEA,SAAO;AACT;AAgBA,eAAe,mBAAmB,QAAgD;AAChF,QAAM,SAAS,KAAK,KAAK,QAAQ,OAAO,OAAO;AAC/C,MAAI,CAAC,GAAG,WAAW,MAAM,GAAG;AAC1B,WAAO,MAAM,+DAA+D,EAAE,UAAU,OAAO,CAAC;AAChG,WAAO;AAAA,EACT;AAEA,MAAI;AACF,UAAM,cAAc,MAAM,iBAAiB,QAAQ;AAAA,MACjD,SAAS;AAAA,MACT,SAAS,KAAK,KAAK,QAAQ,YAAY,aAAa,qBAAqB;AAAA,IAC3E,CAAC;AACD,UAAM,WAAW,YAAY;AAC7B,QAAI,OAAO,aAAa,YAAY;AAClC,aAAO,MAAM,4EAA4E;AAAA,QACvF,UAAU;AAAA,MACZ,CAAC;AACD,aAAO;AAAA,IACT;AACA,WAAO;AAAA,EACT,SAAS,OAAO;AACd,WAAO,MAAM,yEAAyE;AAAA,MACpF,UAAU;AAAA,MACV,KAAK;AAAA,IACP,CAAC;AACD,WAAO;AAAA,EACT;AACF;AAeA,eAAsB,kBAAkB,SAA0C;AAChF,QAAM,WAAW,sBAAsB,OAAO;AAE9C,QAAM,EAAE,aAAa,IAAI;AAEzB,8CAA4C,SAAS,MAAM;AAK3D,QAAM,kBAAkB,MAAM,iBAAiB,KAAK,KAAK,cAAc,2BAA2B,CAAC;AACnG,oBAAkB,gBAAgB,CAA+B;AAIjE,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,IAAI,MAAM,QAAQ,IAAI;AAAA,IACpB,iBAAiB,KAAK,KAAK,cAAc,0BAA0B,CAAC;AAAA,IACpE,iBAAiB,KAAK,KAAK,cAAc,uBAAuB,CAAC;AAAA,IACjE,iBAAiB,KAAK,KAAK,cAAc,iBAAiB,CAAC;AAAA,IAC3D,4BAA4B,KAAK,KAAK,cAAc,qBAAqB,GAAG,EAAE,qBAAqB,CAAC,EAAE,CAAC;AAAA,IACvG,4BAA4B,KAAK,KAAK,cAAc,8BAA8B,GAAG,EAAE,sBAAsB,CAAC,EAAE,CAAC;AAAA,IACjH,4BAA4B,KAAK,KAAK,cAAc,mCAAmC,GAAG;AAAA,MACxF,2BAA2B,CAAC;AAAA,IAC9B,CAAC;AAAA,IACD,4BAA4B,KAAK,KAAK,cAAc,wBAAwB,GAAG,EAAE,kBAAkB,CAAC,EAAE,CAAC;AAAA,EACzG,CAAC;AAED,SAAO;AAAA,IACL,SAAS,cAAc;AAAA,IACvB,UAAU,eAAe;AAAA,IACzB,cAAc,SAAS;AAAA,IACvB,WAAW,gBAAgB;AAAA;AAAA,IAE3B,qBAAsB,aAAa,uBAAuB,CAAC;AAAA,IAC3D,sBAAuB,qBAAqB,wBAAwB,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA,IAKrE,2BAA4B,0BAA0B,6BACpD,CAAC;AAAA;AAAA,IAEH,eAAgB,gBAAgB,oBAAoB,CAAC;AAAA;AAAA,IAErD,wBAAwB,CAAC;AAAA,IACzB,wBAAwB,CAAC;AAAA,IACzB,iBAAiB,CAAC;AAAA,IAClB,oBAAoB,CAAC;AAAA,IACrB,0BAA0B,CAAC;AAAA,EAC7B;AACF;AAcA,eAAsB,qBAAqB,SAA0C;AACnF,QAAM,EAAE,iBAAiB,yBAAyB,IAAI,MAAM,OAAO,cAAc;AACjF,QAAM,WAAW,sBAAsB,OAAO;AAC9C,QAAM,OAAO,MAAM,kBAAkB,SAAS,MAAM;AACpD,QAAM,iBAAiB,MAAM,mBAAmB,SAAS,MAAM;AAC/D,QAAM,YAAY,gBAAgB,MAAM,iBAAiB,EAAE,eAAe,IAAI,CAAC,CAAC;AAChF,YAAU;AAEV,QAAM,yBAAyB;AAE/B,SAAO;AACT;",
+  "sourcesContent": ["import type { BootstrapData } from './types'\nimport { findAppRoot, type AppRoot } from './appResolver'\nimport { registerEntityIds } from '../encryption/entityIds'\nimport {\n  ensureMikroOrmV7GeneratedCacheCompatibility,\n  recoverMikroOrmV7GeneratedCacheFromImportError,\n} from './generatedCacheRecovery'\nimport path from 'node:path'\nimport fs from 'node:fs'\nimport crypto from 'node:crypto'\nimport { createRequire } from 'node:module'\nimport { pathToFileURL } from 'node:url'\n\nconst DYNAMIC_LOADER_CACHE_VERSION = 4\n\ntype DynamicLoaderCacheMetadata = {\n  version: number\n  inputHash: string\n  outputHash: string\n  dependencies: Record<string, string>\n}\n\nfunction cacheMetadataPath(jsPath: string): string {\n  return `${jsPath}.cache.json`\n}\n\nfunction contentHash(content: Buffer | string): string {\n  return crypto.createHash('sha256').update(content).digest('hex')\n}\n\nfunction parseJsonConfig(content: string): unknown {\n  let normalized = ''\n  let inString = false\n  let escaped = false\n\n  for (let index = 0; index < content.length; index += 1) {\n    const character = content[index]\n    const nextCharacter = content[index + 1]\n\n    if (inString) {\n      normalized += character\n      if (escaped) {\n        escaped = false\n      } else if (character === '\\\\') {\n        escaped = true\n      } else if (character === '\"') {\n        inString = false\n      }\n      continue\n    }\n\n    if (character === '\"') {\n      inString = true\n      normalized += character\n      continue\n    }\n\n    if (character === '/' && nextCharacter === '/') {\n      while (index < content.length && content[index] !== '\\n') index += 1\n      normalized += '\\n'\n      continue\n    }\n\n    if (character === '/' && nextCharacter === '*') {\n      index += 2\n      while (index < content.length && !(content[index] === '*' && content[index + 1] === '/')) {\n        index += 1\n      }\n      index += 1\n      continue\n    }\n\n    if (character === ',') {\n      let lookahead = index + 1\n      while (lookahead < content.length && /\\s/.test(content[lookahead])) lookahead += 1\n      if (content[lookahead] === '}' || content[lookahead] === ']') continue\n    }\n\n    normalized += character\n  }\n\n  return JSON.parse(normalized)\n}\n\nfunction resolveExistingConfigPath(candidate: string): string | null {\n  for (const configPath of [candidate, `${candidate}.json`, path.join(candidate, 'tsconfig.json')]) {\n    if (fs.existsSync(configPath) && fs.statSync(configPath).isFile()) return configPath\n  }\n  return null\n}\n\nfunction resolvePackageConfig(configPath: string, reference: string): string | null {\n  try {\n    const resolved = createRequire(pathToFileURL(configPath)).resolve(reference)\n    return path.extname(resolved) === '.json' ? resolved : null\n  } catch {\n    return null\n  }\n}\n\nfunction resolveExtendedConfig(configPath: string, reference: string): string {\n  if (path.isAbsolute(reference) || reference.startsWith('.')) {\n    const resolved = resolveExistingConfigPath(path.resolve(path.dirname(configPath), reference))\n    if (resolved) return resolved\n  } else {\n    for (const packageReference of [reference, `${reference}/tsconfig.json`]) {\n      const resolved = resolvePackageConfig(configPath, packageReference)\n      if (resolved) return resolved\n    }\n  }\n\n  throw new Error(`[internal] TypeScript config extends target not found: ${reference}`)\n}\n\nfunction collectTsconfigPaths(entryPath: string, visited: Set<string> = new Set()): string[] {\n  const configPath = path.resolve(entryPath)\n  if (visited.has(configPath)) return []\n  visited.add(configPath)\n\n  const parsed = parseJsonConfig(fs.readFileSync(configPath, 'utf8'))\n  if (typeof parsed !== 'object' || parsed === null || !('extends' in parsed)) return [configPath]\n\n  const extendsValue = parsed.extends\n  const references = typeof extendsValue === 'string'\n    ? [extendsValue]\n    : Array.isArray(extendsValue) && extendsValue.every((value) => typeof value === 'string')\n      ? extendsValue\n      : []\n\n  return [\n    ...references.flatMap((reference) => collectTsconfigPaths(\n      resolveExtendedConfig(configPath, reference),\n      visited,\n    )),\n    configPath,\n  ]\n}\n\nfunction hashFilesRelativeTo(appRoot: string, filePaths: string[]): Record<string, string> {\n  return Object.fromEntries(filePaths.map((filePath) => [\n    path.relative(appRoot, filePath).split(path.sep).join('/'),\n    contentHash(fs.readFileSync(filePath)),\n  ]))\n}\n\nfunction cacheInputHash(tsPath: string, appRoot: string, tsconfigPaths: string[]): string {\n  const hash = crypto.createHash('sha256')\n  hash.update(JSON.stringify({\n    version: DYNAMIC_LOADER_CACHE_VERSION,\n    sourceHash: contentHash(fs.readFileSync(tsPath)),\n    tsconfigHashes: hashFilesRelativeTo(appRoot, tsconfigPaths),\n  }))\n  return hash.digest('hex')\n}\n\nfunction dependenciesAreValid(appRoot: string, dependencies: Record<string, string>): boolean {\n  return Object.entries(dependencies).every(([relativePath, expectedHash]) => {\n    const dependencyPath = path.resolve(appRoot, relativePath)\n    return fs.existsSync(dependencyPath)\n      && contentHash(fs.readFileSync(dependencyPath)) === expectedHash\n  })\n}\n\nfunction collectDependencyHashes(\n  appRoot: string,\n  inputs: Record<string, unknown>,\n): Record<string, string> {\n  return Object.fromEntries(\n    Object.keys(inputs)\n      .map((inputPath) => {\n        const absolutePath = path.isAbsolute(inputPath)\n          ? inputPath\n          : path.resolve(appRoot, inputPath)\n        const relativePath = path.relative(appRoot, absolutePath).split(path.sep).join('/')\n        return [relativePath, contentHash(fs.readFileSync(absolutePath))]\n      })\n      .sort(([left], [right]) => left.localeCompare(right)),\n  )\n}\n\nfunction readCacheMetadata(metadataPath: string): DynamicLoaderCacheMetadata | null {\n  try {\n    const parsed: unknown = JSON.parse(fs.readFileSync(metadataPath, 'utf8'))\n    if (\n      typeof parsed === 'object'\n      && parsed !== null\n      && 'version' in parsed\n      && parsed.version === DYNAMIC_LOADER_CACHE_VERSION\n      && 'inputHash' in parsed\n      && typeof parsed.inputHash === 'string'\n      && 'outputHash' in parsed\n      && typeof parsed.outputHash === 'string'\n      && 'dependencies' in parsed\n      && typeof parsed.dependencies === 'object'\n      && parsed.dependencies !== null\n      && Object.values(parsed.dependencies).every((hash) => typeof hash === 'string')\n    ) {\n      return {\n        version: parsed.version,\n        inputHash: parsed.inputHash,\n        outputHash: parsed.outputHash,\n        dependencies: parsed.dependencies as Record<string, string>,\n      }\n    }\n  } catch {\n    return null\n  }\n  return null\n}\n\nfunction cacheIsValid(\n  appRoot: string,\n  jsPath: string,\n  metadataPath: string,\n  expectedInputHash: string,\n): boolean {\n  if (!fs.existsSync(jsPath)) return false\n  const metadata = readCacheMetadata(metadataPath)\n  if (!metadata || metadata.inputHash !== expectedInputHash) return false\n  return contentHash(fs.readFileSync(jsPath)) === metadata.outputHash\n    && dependenciesAreValid(appRoot, metadata.dependencies)\n}\n\n/**\n * Compile a TypeScript file to JavaScript using esbuild bundler.\n * This bundles the file and all its dependencies, handling JSON imports properly.\n * The compiled file is written next to the source file with a .mjs extension.\n */\nasync function compileAndImport(tsPath: string, allowRecovery: boolean = true): Promise<Record<string, unknown>> {\n  const jsPath = tsPath.replace(/\\.ts$/, '.mjs')\n  const appRoot = path.dirname(path.dirname(path.dirname(tsPath)))\n  const appTsconfig = path.join(appRoot, 'tsconfig.json')\n  const metadataPath = cacheMetadataPath(jsPath)\n\n  const tsExists = fs.existsSync(tsPath)\n  const tsconfigExists = fs.existsSync(appTsconfig)\n\n  if (!tsExists) {\n    throw new Error(`Generated file not found: ${tsPath}`)\n  }\n  if (!tsconfigExists) {\n    throw new Error(`App TypeScript config not found: ${appTsconfig}`)\n  }\n\n  const tsconfigPaths = collectTsconfigPaths(appTsconfig)\n  const expectedInputHash = cacheInputHash(tsPath, appRoot, tsconfigPaths)\n  const needsCompile = !cacheIsValid(appRoot, jsPath, metadataPath, expectedInputHash)\n\n  if (needsCompile) {\n    // Dynamically import esbuild only when needed\n    const esbuild = await import('esbuild')\n\n    // Plugin to resolve @/ alias to app root (works for @app modules)\n    const aliasPlugin: import('esbuild').Plugin = {\n      name: 'alias-resolver',\n      setup(build) {\n        // Resolve @/ alias to app root\n        build.onResolve({ filter: /^@\\// }, (args) => {\n          const resolved = path.join(appRoot, args.path.slice(2))\n          // Try with .ts extension if base path doesn't exist\n          if (!fs.existsSync(resolved) && fs.existsSync(resolved + '.ts')) {\n            return { path: resolved + '.ts' }\n          }\n          // Also check for /index.ts if it's a directory\n          if (fs.existsSync(resolved) && fs.statSync(resolved).isDirectory() && fs.existsSync(path.join(resolved, 'index.ts'))) {\n            return { path: path.join(resolved, 'index.ts') }\n          }\n          return { path: resolved }\n        })\n      },\n    }\n\n    // Plugin to mark non-JSON package imports as external\n    const externalNonJsonPlugin: import('esbuild').Plugin = {\n      name: 'external-non-json',\n      setup(build) {\n        // Mark all package imports as external EXCEPT JSON files\n        // Filter matches paths that don't start with . or / (package imports like @open-mercato/shared)\n        build.onResolve({ filter: /^[^./]/ }, (args) => {\n          // Skip Windows absolute paths (e.g., C:\\...) - they're local files, not packages\n          if (/^[a-zA-Z]:/.test(args.path)) {\n            return null // Let esbuild handle it\n          }\n          // If it's a JSON file, let esbuild bundle it\n          if (args.path.endsWith('.json')) {\n            return null // Let esbuild handle it\n          }\n          // Otherwise mark as external\n          return { path: args.path, external: true }\n        })\n      },\n    }\n\n    // Use esbuild.build with bundling to handle JSON imports\n    const result = await esbuild.build({\n      entryPoints: [tsPath],\n      outfile: jsPath,\n      absWorkingDir: appRoot,\n      bundle: true,\n      metafile: true,\n      format: 'esm',\n      platform: 'node',\n      target: 'node18',\n      tsconfig: appTsconfig,\n      plugins: [aliasPlugin, externalNonJsonPlugin],\n      // Allow JSON imports\n      loader: { '.json': 'json' },\n    })\n    const metadata: DynamicLoaderCacheMetadata = {\n      version: DYNAMIC_LOADER_CACHE_VERSION,\n      inputHash: expectedInputHash,\n      outputHash: contentHash(fs.readFileSync(jsPath)),\n      dependencies: {\n        ...collectDependencyHashes(appRoot, result.metafile.inputs),\n        ...hashFilesRelativeTo(appRoot, tsconfigPaths),\n      },\n    }\n    fs.writeFileSync(metadataPath, JSON.stringify(metadata))\n  }\n\n  // Import the compiled JavaScript\n  try {\n    const outputHash = contentHash(fs.readFileSync(jsPath))\n    const fileUrl = `${pathToFileURL(jsPath).href}?cache=${outputHash}`\n    return await import(fileUrl)\n  } catch (error) {\n    if (!allowRecovery) {\n      throw error\n    }\n\n    const recovered = recoverMikroOrmV7GeneratedCacheFromImportError(appRoot, error)\n    if (!recovered.applied) {\n      throw error\n    }\n\n    return compileAndImport(tsPath, false)\n  }\n}\n\n\n/**\n * Dynamically load bootstrap data from a resolved app directory.\n *\n * IMPORTANT: This only works in unbundled contexts (CLI, tsx).\n * Do NOT use this in Next.js bundled code - use static imports instead.\n *\n * For CLI context, we skip loading modules.generated.ts which has Next.js dependencies.\n * CLI commands are discovered separately via the CLI module system.\n *\n * @param appRoot - Optional explicit app root path. If not provided, will search from cwd.\n * @returns The loaded bootstrap data\n * @throws Error if app root cannot be found or generated files are missing\n */\nexport async function loadBootstrapData(appRoot?: string): Promise<BootstrapData> {\n  const resolved: AppRoot | null = appRoot\n    ? {\n        generatedDir: path.join(appRoot, '.mercato', 'generated'),\n        appDir: appRoot,\n        mercatoDir: path.join(appRoot, '.mercato'),\n      }\n    : findAppRoot()\n\n  if (!resolved) {\n    throw new Error(\n      'Could not find app root with .mercato/generated directory. ' +\n        'Make sure you run this command from within a Next.js app directory, ' +\n        'or run \"yarn mercato generate\" first to create the generated files.',\n    )\n  }\n\n  const { generatedDir } = resolved\n\n  ensureMikroOrmV7GeneratedCacheCompatibility(resolved.appDir)\n\n  // IMPORTANT: Load entity IDs FIRST and register them before loading modules.\n  // This is because modules (e.g., ce.ts files) use E.xxx.xxx at module scope,\n  // and they need entity IDs to be available when they're imported.\n  const entityIdsModule = await compileAndImport(path.join(generatedDir, 'entities.ids.generated.ts'))\n  registerEntityIds(entityIdsModule.E as BootstrapData['entityIds'])\n\n  // Now load the rest of the generated files.\n  // modules.cli.generated.ts excludes Next.js-dependent code (routes, APIs, widgets)\n  const [\n    modulesModule,\n    entitiesModule,\n    diModule,\n    searchModule,\n    commandLoadersModule,\n    commandInterceptorsModule,\n    workflowsModule,\n  ] = await Promise.all([\n    compileAndImport(path.join(generatedDir, 'modules.cli.generated.ts')),\n    compileAndImport(path.join(generatedDir, 'entities.generated.ts')),\n    compileAndImport(path.join(generatedDir, 'di.generated.ts')),\n    compileAndImport(path.join(generatedDir, 'search.generated.ts')).catch(() => ({ searchModuleConfigs: [] })),\n    compileAndImport(path.join(generatedDir, 'command-loaders.generated.ts')).catch(() => ({ commandLoaderEntries: [] })),\n    compileAndImport(path.join(generatedDir, 'command-interceptors.generated.ts')).catch(() => ({ commandInterceptorEntries: [] })),\n    compileAndImport(path.join(generatedDir, 'workflows.generated.ts')).catch(() => ({ allCodeWorkflows: [] })),\n  ])\n\n  return {\n    modules: modulesModule.modules as BootstrapData['modules'],\n    entities: entitiesModule.entities as BootstrapData['entities'],\n    diRegistrars: diModule.diRegistrars as BootstrapData['diRegistrars'],\n    entityIds: entityIdsModule.E as BootstrapData['entityIds'],\n    // Search configs are needed by workers for indexing\n    searchModuleConfigs: (searchModule.searchModuleConfigs ?? []) as BootstrapData['searchModuleConfigs'],\n    commandLoaderEntries: (commandLoadersModule.commandLoaderEntries ?? []) as BootstrapData['commandLoaderEntries'],\n    // Command interceptors must apply in worker/CLI processes too \u2014 the\n    // interceptor registry is per-process, so relying on the Next.js runtime's\n    // registration silently no-ops every interceptor for queued/CLI commands\n    // (#4327).\n    commandInterceptorEntries: (commandInterceptorsModule.commandInterceptorEntries ??\n      []) as BootstrapData['commandInterceptorEntries'],\n    // Code workflow definitions are needed by workers to resume code-defined instances\n    codeWorkflows: (workflowsModule.allCodeWorkflows ?? []) as BootstrapData['codeWorkflows'],\n    // Empty UI-related data - not needed for CLI\n    dashboardWidgetEntries: [],\n    injectionWidgetEntries: [],\n    injectionTables: [],\n    interceptorEntries: [],\n    componentOverrideEntries: [],\n  }\n}\n\n/**\n * Create and execute bootstrap in CLI context.\n *\n * This is a convenience function that finds the app root, loads the generated\n * data dynamically, and runs bootstrap. Use this in CLI entry points.\n *\n * Returns the loaded bootstrap data so the CLI can register modules directly\n * (avoids module resolution issues when importing @open-mercato/cli/mercato).\n *\n * @param appRoot - Optional explicit app root path\n * @returns The loaded bootstrap data (modules, entities, etc.)\n */\nexport async function bootstrapFromAppRoot(appRoot?: string): Promise<BootstrapData> {\n  const { createBootstrap, waitForAsyncRegistration } = await import('./factory.js')\n  const data = await loadBootstrapData(appRoot)\n  const bootstrap = createBootstrap(data)\n  bootstrap()\n  // In CLI context, wait for async registrations (UI widgets, search configs, etc.)\n  await waitForAsyncRegistration()\n\n  return data\n}\n"],
+  "mappings": "AACA,SAAS,mBAAiC;AAC1C,SAAS,yBAAyB;AAClC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,OAAO,UAAU;AACjB,OAAO,QAAQ;AACf,OAAO,YAAY;AACnB,SAAS,qBAAqB;AAC9B,SAAS,qBAAqB;AAE9B,MAAM,+BAA+B;AASrC,SAAS,kBAAkB,QAAwB;AACjD,SAAO,GAAG,MAAM;AAClB;AAEA,SAAS,YAAY,SAAkC;AACrD,SAAO,OAAO,WAAW,QAAQ,EAAE,OAAO,OAAO,EAAE,OAAO,KAAK;AACjE;AAEA,SAAS,gBAAgB,SAA0B;AACjD,MAAI,aAAa;AACjB,MAAI,WAAW;AACf,MAAI,UAAU;AAEd,WAAS,QAAQ,GAAG,QAAQ,QAAQ,QAAQ,SAAS,GAAG;AACtD,UAAM,YAAY,QAAQ,KAAK;AAC/B,UAAM,gBAAgB,QAAQ,QAAQ,CAAC;AAEvC,QAAI,UAAU;AACZ,oBAAc;AACd,UAAI,SAAS;AACX,kBAAU;AAAA,MACZ,WAAW,cAAc,MAAM;AAC7B,kBAAU;AAAA,MACZ,WAAW,cAAc,KAAK;AAC5B,mBAAW;AAAA,MACb;AACA;AAAA,IACF;AAEA,QAAI,cAAc,KAAK;AACrB,iBAAW;AACX,oBAAc;AACd;AAAA,IACF;AAEA,QAAI,cAAc,OAAO,kBAAkB,KAAK;AAC9C,aAAO,QAAQ,QAAQ,UAAU,QAAQ,KAAK,MAAM,KAAM,UAAS;AACnE,oBAAc;AACd;AAAA,IACF;AAEA,QAAI,cAAc,OAAO,kBAAkB,KAAK;AAC9C,eAAS;AACT,aAAO,QAAQ,QAAQ,UAAU,EAAE,QAAQ,KAAK,MAAM,OAAO,QAAQ,QAAQ,CAAC,MAAM,MAAM;AACxF,iBAAS;AAAA,MACX;AACA,eAAS;AACT;AAAA,IACF;AAEA,QAAI,cAAc,KAAK;AACrB,UAAI,YAAY,QAAQ;AACxB,aAAO,YAAY,QAAQ,UAAU,KAAK,KAAK,QAAQ,SAAS,CAAC,EAAG,cAAa;AACjF,UAAI,QAAQ,SAAS,MAAM,OAAO,QAAQ,SAAS,MAAM,IAAK;AAAA,IAChE;AAEA,kBAAc;AAAA,EAChB;AAEA,SAAO,KAAK,MAAM,UAAU;AAC9B;AAEA,SAAS,0BAA0B,WAAkC;AACnE,aAAW,cAAc,CAAC,WAAW,GAAG,SAAS,SAAS,KAAK,KAAK,WAAW,eAAe,CAAC,GAAG;AAChG,QAAI,GAAG,WAAW,UAAU,KAAK,GAAG,SAAS,UAAU,EAAE,OAAO,EAAG,QAAO;AAAA,EAC5E;AACA,SAAO;AACT;AAEA,SAAS,qBAAqB,YAAoB,WAAkC;AAClF,MAAI;AACF,UAAM,WAAW,cAAc,cAAc,UAAU,CAAC,EAAE,QAAQ,SAAS;AAC3E,WAAO,KAAK,QAAQ,QAAQ,MAAM,UAAU,WAAW;AAAA,EACzD,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,sBAAsB,YAAoB,WAA2B;AAC5E,MAAI,KAAK,WAAW,SAAS,KAAK,UAAU,WAAW,GAAG,GAAG;AAC3D,UAAM,WAAW,0BAA0B,KAAK,QAAQ,KAAK,QAAQ,UAAU,GAAG,SAAS,CAAC;AAC5F,QAAI,SAAU,QAAO;AAAA,EACvB,OAAO;AACL,eAAW,oBAAoB,CAAC,WAAW,GAAG,SAAS,gBAAgB,GAAG;AACxE,YAAM,WAAW,qBAAqB,YAAY,gBAAgB;AAClE,UAAI,SAAU,QAAO;AAAA,IACvB;AAAA,EACF;AAEA,QAAM,IAAI,MAAM,0DAA0D,SAAS,EAAE;AACvF;AAEA,SAAS,qBAAqB,WAAmB,UAAuB,oBAAI,IAAI,GAAa;AAC3F,QAAM,aAAa,KAAK,QAAQ,SAAS;AACzC,MAAI,QAAQ,IAAI,UAAU,EAAG,QAAO,CAAC;AACrC,UAAQ,IAAI,UAAU;AAEtB,QAAM,SAAS,gBAAgB,GAAG,aAAa,YAAY,MAAM,CAAC;AAClE,MAAI,OAAO,WAAW,YAAY,WAAW,QAAQ,EAAE,aAAa,QAAS,QAAO,CAAC,UAAU;AAE/F,QAAM,eAAe,OAAO;AAC5B,QAAM,aAAa,OAAO,iBAAiB,WACvC,CAAC,YAAY,IACb,MAAM,QAAQ,YAAY,KAAK,aAAa,MAAM,CAAC,UAAU,OAAO,UAAU,QAAQ,IACpF,eACA,CAAC;AAEP,SAAO;AAAA,IACL,GAAG,WAAW,QAAQ,CAAC,cAAc;AAAA,MACnC,sBAAsB,YAAY,SAAS;AAAA,MAC3C;AAAA,IACF,CAAC;AAAA,IACD;AAAA,EACF;AACF;AAEA,SAAS,oBAAoB,SAAiB,WAA6C;AACzF,SAAO,OAAO,YAAY,UAAU,IAAI,CAAC,aAAa;AAAA,IACpD,KAAK,SAAS,SAAS,QAAQ,EAAE,MAAM,KAAK,GAAG,EAAE,KAAK,GAAG;AAAA,IACzD,YAAY,GAAG,aAAa,QAAQ,CAAC;AAAA,EACvC,CAAC,CAAC;AACJ;AAEA,SAAS,eAAe,QAAgB,SAAiB,eAAiC;AACxF,QAAM,OAAO,OAAO,WAAW,QAAQ;AACvC,OAAK,OAAO,KAAK,UAAU;AAAA,IACzB,SAAS;AAAA,IACT,YAAY,YAAY,GAAG,aAAa,MAAM,CAAC;AAAA,IAC/C,gBAAgB,oBAAoB,SAAS,aAAa;AAAA,EAC5D,CAAC,CAAC;AACF,SAAO,KAAK,OAAO,KAAK;AAC1B;AAEA,SAAS,qBAAqB,SAAiB,cAA+C;AAC5F,SAAO,OAAO,QAAQ,YAAY,EAAE,MAAM,CAAC,CAAC,cAAc,YAAY,MAAM;AAC1E,UAAM,iBAAiB,KAAK,QAAQ,SAAS,YAAY;AACzD,WAAO,GAAG,WAAW,cAAc,KAC9B,YAAY,GAAG,aAAa,cAAc,CAAC,MAAM;AAAA,EACxD,CAAC;AACH;AAEA,SAAS,wBACP,SACA,QACwB;AACxB,SAAO,OAAO;AAAA,IACZ,OAAO,KAAK,MAAM,EACf,IAAI,CAAC,cAAc;AAClB,YAAM,eAAe,KAAK,WAAW,SAAS,IAC1C,YACA,KAAK,QAAQ,SAAS,SAAS;AACnC,YAAM,eAAe,KAAK,SAAS,SAAS,YAAY,EAAE,MAAM,KAAK,GAAG,EAAE,KAAK,GAAG;AAClF,aAAO,CAAC,cAAc,YAAY,GAAG,aAAa,YAAY,CAAC,CAAC;AAAA,IAClE,CAAC,EACA,KAAK,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,MAAM,KAAK,cAAc,KAAK,CAAC;AAAA,EACxD;AACF;AAEA,SAAS,kBAAkB,cAAyD;AAClF,MAAI;AACF,UAAM,SAAkB,KAAK,MAAM,GAAG,aAAa,cAAc,MAAM,CAAC;AACxE,QACE,OAAO,WAAW,YACf,WAAW,QACX,aAAa,UACb,OAAO,YAAY,gCACnB,eAAe,UACf,OAAO,OAAO,cAAc,YAC5B,gBAAgB,UAChB,OAAO,OAAO,eAAe,YAC7B,kBAAkB,UAClB,OAAO,OAAO,iBAAiB,YAC/B,OAAO,iBAAiB,QACxB,OAAO,OAAO,OAAO,YAAY,EAAE,MAAM,CAAC,SAAS,OAAO,SAAS,QAAQ,GAC9E;AACA,aAAO;AAAA,QACL,SAAS,OAAO;AAAA,QAChB,WAAW,OAAO;AAAA,QAClB,YAAY,OAAO;AAAA,QACnB,cAAc,OAAO;AAAA,MACvB;AAAA,IACF;AAAA,EACF,QAAQ;AACN,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAEA,SAAS,aACP,SACA,QACA,cACA,mBACS;AACT,MAAI,CAAC,GAAG,WAAW,MAAM,EAAG,QAAO;AACnC,QAAM,WAAW,kBAAkB,YAAY;AAC/C,MAAI,CAAC,YAAY,SAAS,cAAc,kBAAmB,QAAO;AAClE,SAAO,YAAY,GAAG,aAAa,MAAM,CAAC,MAAM,SAAS,cACpD,qBAAqB,SAAS,SAAS,YAAY;AAC1D;AAOA,eAAe,iBAAiB,QAAgB,gBAAyB,MAAwC;AAC/G,QAAM,SAAS,OAAO,QAAQ,SAAS,MAAM;AAC7C,QAAM,UAAU,KAAK,QAAQ,KAAK,QAAQ,KAAK,QAAQ,MAAM,CAAC,CAAC;AAC/D,QAAM,cAAc,KAAK,KAAK,SAAS,eAAe;AACtD,QAAM,eAAe,kBAAkB,MAAM;AAE7C,QAAM,WAAW,GAAG,WAAW,MAAM;AACrC,QAAM,iBAAiB,GAAG,WAAW,WAAW;AAEhD,MAAI,CAAC,UAAU;AACb,UAAM,IAAI,MAAM,6BAA6B,MAAM,EAAE;AAAA,EACvD;AACA,MAAI,CAAC,gBAAgB;AACnB,UAAM,IAAI,MAAM,oCAAoC,WAAW,EAAE;AAAA,EACnE;AAEA,QAAM,gBAAgB,qBAAqB,WAAW;AACtD,QAAM,oBAAoB,eAAe,QAAQ,SAAS,aAAa;AACvE,QAAM,eAAe,CAAC,aAAa,SAAS,QAAQ,cAAc,iBAAiB;AAEnF,MAAI,cAAc;AAEhB,UAAM,UAAU,MAAM,OAAO,SAAS;AAGtC,UAAM,cAAwC;AAAA,MAC5C,MAAM;AAAA,MACN,MAAM,OAAO;AAEX,cAAM,UAAU,EAAE,QAAQ,OAAO,GAAG,CAAC,SAAS;AAC5C,gBAAM,WAAW,KAAK,KAAK,SAAS,KAAK,KAAK,MAAM,CAAC,CAAC;AAEtD,cAAI,CAAC,GAAG,WAAW,QAAQ,KAAK,GAAG,WAAW,WAAW,KAAK,GAAG;AAC/D,mBAAO,EAAE,MAAM,WAAW,MAAM;AAAA,UAClC;AAEA,cAAI,GAAG,WAAW,QAAQ,KAAK,GAAG,SAAS,QAAQ,EAAE,YAAY,KAAK,GAAG,WAAW,KAAK,KAAK,UAAU,UAAU,CAAC,GAAG;AACpH,mBAAO,EAAE,MAAM,KAAK,KAAK,UAAU,UAAU,EAAE;AAAA,UACjD;AACA,iBAAO,EAAE,MAAM,SAAS;AAAA,QAC1B,CAAC;AAAA,MACH;AAAA,IACF;AAGA,UAAM,wBAAkD;AAAA,MACtD,MAAM;AAAA,MACN,MAAM,OAAO;AAGX,cAAM,UAAU,EAAE,QAAQ,SAAS,GAAG,CAAC,SAAS;AAE9C,cAAI,aAAa,KAAK,KAAK,IAAI,GAAG;AAChC,mBAAO;AAAA,UACT;AAEA,cAAI,KAAK,KAAK,SAAS,OAAO,GAAG;AAC/B,mBAAO;AAAA,UACT;AAEA,iBAAO,EAAE,MAAM,KAAK,MAAM,UAAU,KAAK;AAAA,QAC3C,CAAC;AAAA,MACH;AAAA,IACF;AAGA,UAAM,SAAS,MAAM,QAAQ,MAAM;AAAA,MACjC,aAAa,CAAC,MAAM;AAAA,MACpB,SAAS;AAAA,MACT,eAAe;AAAA,MACf,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,SAAS,CAAC,aAAa,qBAAqB;AAAA;AAAA,MAE5C,QAAQ,EAAE,SAAS,OAAO;AAAA,IAC5B,CAAC;AACD,UAAM,WAAuC;AAAA,MAC3C,SAAS;AAAA,MACT,WAAW;AAAA,MACX,YAAY,YAAY,GAAG,aAAa,MAAM,CAAC;AAAA,MAC/C,cAAc;AAAA,QACZ,GAAG,wBAAwB,SAAS,OAAO,SAAS,MAAM;AAAA,QAC1D,GAAG,oBAAoB,SAAS,aAAa;AAAA,MAC/C;AAAA,IACF;AACA,OAAG,cAAc,cAAc,KAAK,UAAU,QAAQ,CAAC;AAAA,EACzD;AAGA,MAAI;AACF,UAAM,aAAa,YAAY,GAAG,aAAa,MAAM,CAAC;AACtD,UAAM,UAAU,GAAG,cAAc,MAAM,EAAE,IAAI,UAAU,UAAU;AACjE,WAAO,MAAM,OAAO;AAAA,EACtB,SAAS,OAAO;AACd,QAAI,CAAC,eAAe;AAClB,YAAM;AAAA,IACR;AAEA,UAAM,YAAY,+CAA+C,SAAS,KAAK;AAC/E,QAAI,CAAC,UAAU,SAAS;AACtB,YAAM;AAAA,IACR;AAEA,WAAO,iBAAiB,QAAQ,KAAK;AAAA,EACvC;AACF;AAgBA,eAAsB,kBAAkB,SAA0C;AAChF,QAAM,WAA2B,UAC7B;AAAA,IACE,cAAc,KAAK,KAAK,SAAS,YAAY,WAAW;AAAA,IACxD,QAAQ;AAAA,IACR,YAAY,KAAK,KAAK,SAAS,UAAU;AAAA,EAC3C,IACA,YAAY;AAEhB,MAAI,CAAC,UAAU;AACb,UAAM,IAAI;AAAA,MACR;AAAA,IAGF;AAAA,EACF;AAEA,QAAM,EAAE,aAAa,IAAI;AAEzB,8CAA4C,SAAS,MAAM;AAK3D,QAAM,kBAAkB,MAAM,iBAAiB,KAAK,KAAK,cAAc,2BAA2B,CAAC;AACnG,oBAAkB,gBAAgB,CAA+B;AAIjE,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,IAAI,MAAM,QAAQ,IAAI;AAAA,IACpB,iBAAiB,KAAK,KAAK,cAAc,0BAA0B,CAAC;AAAA,IACpE,iBAAiB,KAAK,KAAK,cAAc,uBAAuB,CAAC;AAAA,IACjE,iBAAiB,KAAK,KAAK,cAAc,iBAAiB,CAAC;AAAA,IAC3D,iBAAiB,KAAK,KAAK,cAAc,qBAAqB,CAAC,EAAE,MAAM,OAAO,EAAE,qBAAqB,CAAC,EAAE,EAAE;AAAA,IAC1G,iBAAiB,KAAK,KAAK,cAAc,8BAA8B,CAAC,EAAE,MAAM,OAAO,EAAE,sBAAsB,CAAC,EAAE,EAAE;AAAA,IACpH,iBAAiB,KAAK,KAAK,cAAc,mCAAmC,CAAC,EAAE,MAAM,OAAO,EAAE,2BAA2B,CAAC,EAAE,EAAE;AAAA,IAC9H,iBAAiB,KAAK,KAAK,cAAc,wBAAwB,CAAC,EAAE,MAAM,OAAO,EAAE,kBAAkB,CAAC,EAAE,EAAE;AAAA,EAC5G,CAAC;AAED,SAAO;AAAA,IACL,SAAS,cAAc;AAAA,IACvB,UAAU,eAAe;AAAA,IACzB,cAAc,SAAS;AAAA,IACvB,WAAW,gBAAgB;AAAA;AAAA,IAE3B,qBAAsB,aAAa,uBAAuB,CAAC;AAAA,IAC3D,sBAAuB,qBAAqB,wBAAwB,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA,IAKrE,2BAA4B,0BAA0B,6BACpD,CAAC;AAAA;AAAA,IAEH,eAAgB,gBAAgB,oBAAoB,CAAC;AAAA;AAAA,IAErD,wBAAwB,CAAC;AAAA,IACzB,wBAAwB,CAAC;AAAA,IACzB,iBAAiB,CAAC;AAAA,IAClB,oBAAoB,CAAC;AAAA,IACrB,0BAA0B,CAAC;AAAA,EAC7B;AACF;AAcA,eAAsB,qBAAqB,SAA0C;AACnF,QAAM,EAAE,iBAAiB,yBAAyB,IAAI,MAAM,OAAO,cAAc;AACjF,QAAM,OAAO,MAAM,kBAAkB,OAAO;AAC5C,QAAM,YAAY,gBAAgB,IAAI;AACtC,YAAU;AAEV,QAAM,yBAAyB;AAE/B,SAAO;AACT;",
   "names": []
 }

package/dist/lib/commands/command-bus.js

@@ -16,7 +16,6 @@ import {
   runCommandInterceptorsAfterUndo
 } from "./command-interceptor-runner.js";
 import { CommandInterceptorError } from "./errors.js";
-import { isReadProjectionAlwaysConsistent } from "@open-mercato/shared/lib/data/consistency";
 import { createLogger } from "../logger/index.js";
 const logger = createLogger("shared").child({ component: "commands" });
 const SKIPPED_ACTION_LOG_RESOURCE_KINDS = /* @__PURE__ */ new Set([
@@ -576,10 +575,7 @@ class CommandBus {
     try {
       const dataEngine = container.resolve("dataEngine");
       await dataEngine.flushOrmEntityChanges(suppress);
-    } catch (error) {
-      if (isReadProjectionAlwaysConsistent()) {
-        throw error;
-      }
+    } catch {
     }
   }
 }

package/dist/lib/commands/command-bus.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../src/lib/commands/command-bus.ts"],
-  "sourcesContent": ["import type { ActionLog } from '@open-mercato/core/modules/audit_logs/data/entities'\nimport type { ActionLogCreateInput } from '@open-mercato/core/modules/audit_logs/data/validators'\nimport { commandRegistry } from './registry'\nimport type {\n  BulkImportSuppression,\n  CommandExecutionOptions,\n  CommandExecuteResult,\n  CommandHandler,\n  CommandLogBuilderArgs,\n  CommandLogMetadata,\n  CommandRuntimeContext,\n} from './types'\nimport { defaultUndoToken } from './types'\nimport type { ActionLogService } from '@open-mercato/core/modules/audit_logs/services/actionLogService'\nimport type { AwilixContainer } from 'awilix'\nimport type { DataEngine } from '@open-mercato/shared/lib/data/engine'\nimport {\n  canonicalizeResourceTag,\n  deriveResourceFromCommandId,\n  invalidateCrudCache,\n  pickFirstIdentifier,\n  isCrudCacheDebugEnabled,\n} from '@open-mercato/shared/lib/crud/cache'\nimport { normalizeCustomFieldKey } from '@open-mercato/shared/lib/custom-fields/keys'\nimport { getAllCommandInterceptorInstances } from './command-interceptor-store'\nimport {\n  runCommandInterceptorsBefore,\n  runCommandInterceptorsAfter,\n  runCommandInterceptorsBeforeUndo,\n  runCommandInterceptorsAfterUndo,\n} from './command-interceptor-runner'\nimport type { CommandInterceptorContext } from './command-interceptor'\nimport { CommandInterceptorError } from './errors'\nimport { isReadProjectionAlwaysConsistent } from '@open-mercato/shared/lib/data/consistency'\nimport { createLogger } from '../logger'\n\nconst logger = createLogger('shared').child({ component: 'commands' })\n\nconst SKIPPED_ACTION_LOG_RESOURCE_KINDS = new Set<string>([\n  'audit_logs.access',\n  'audit_logs.action',\n  'dashboards.layout',\n  'dashboards.user_widgets',\n  'dashboards.role_widgets',\n])\n\nfunction asRecord(input: unknown): Record<string, unknown> | null {\n  if (!input || typeof input !== 'object' || Array.isArray(input)) return null\n  return input as Record<string, unknown>\n}\n\n/** Command handlers often return domain keys (e.g. warehouseId) without `id`; cache invalidation must still resolve the record. */\nfunction extractPrimaryIdFromCommandResult(result: unknown): string | null {\n  const r = asRecord(result)\n  if (!r) return null\n  const direct = pickFirstIdentifier(r.id, r.entityId, r.recordId)\n  if (direct) return direct\n  for (const key of [\n    'warehouseId',\n    'zoneId',\n    'locationId',\n    'lotId',\n    'reservationId',\n    'profileId',\n    'movementId',\n    'balanceId',\n  ]) {\n    const v = r[key]\n    if (typeof v === 'string' && v.trim().length > 0) return v.trim()\n  }\n  return null\n}\n\nfunction toISOString(value: unknown): string | null {\n  if (value instanceof Date) {\n    const iso = value.toISOString()\n    return Number.isNaN(value.getTime()) ? null : iso\n  }\n  if (typeof value === 'string') {\n    const parsed = new Date(value)\n    return Number.isNaN(parsed.getTime()) ? null : parsed.toISOString()\n  }\n  return null\n}\n\nfunction deepEqual(a: unknown, b: unknown, seen?: Set<unknown>): boolean {\n  if (Object.is(a, b)) return true\n  if (a instanceof Date || b instanceof Date) {\n    const aIso = toISOString(a)\n    const bIso = toISOString(b)\n    if (aIso != null && bIso != null) return aIso === bIso\n    return false\n  }\n  if (Array.isArray(a) && Array.isArray(b)) {\n    if (a.length !== b.length) return false\n    return a.every((value, index) => deepEqual(value, b[index], seen))\n  }\n  if (a && b && typeof a === 'object' && typeof b === 'object') {\n    if (!seen) seen = new Set()\n    if (seen.has(a) || seen.has(b)) return false\n    seen.add(a)\n    seen.add(b)\n    const aRec = a as Record<string, unknown>\n    const bRec = b as Record<string, unknown>\n    const keysA = Object.keys(aRec)\n    const keysB = Object.keys(bRec)\n    if (keysA.length !== keysB.length) return false\n    return keysA.every((key) => deepEqual(aRec[key], bRec[key], seen))\n  }\n  return false\n}\n\nconst CUSTOM_FIELD_CONTAINER_KEYS = new Set(['custom', 'customFields', 'customValues', 'cf'])\nconst SKIPPED_CHANGE_KEYS = new Set(['updatedAt', 'updated_at'])\n\nfunction appendCustomFieldChanges(\n  changes: Record<string, { from: unknown; to: unknown }>,\n  before: unknown,\n  after: unknown\n): boolean {\n  const beforeRec = asRecord(before)\n  const afterRec = asRecord(after)\n  if (!beforeRec && !afterRec) return false\n  const left = beforeRec ?? {}\n  const right = afterRec ?? {}\n  const keys = new Set([...Object.keys(left), ...Object.keys(right)])\n  for (const key of keys) {\n    const from = left[key]\n    const to = right[key]\n    if (!deepEqual(from, to)) {\n      changes[normalizeCustomFieldKey(key)] = { from, to }\n    }\n  }\n  return true\n}\n\nfunction buildRecordChanges(\n  before: Record<string, unknown>,\n  after: Record<string, unknown>,\n): Record<string, { from: unknown; to: unknown }> {\n  return buildRecordChangesDeep(before, after)\n}\n\nfunction buildRecordChangesDeep(\n  before: Record<string, unknown>,\n  after: Record<string, unknown>,\n  prefix?: string,\n  seen?: Set<unknown>,\n): Record<string, { from: unknown; to: unknown }> {\n  const changes: Record<string, { from: unknown; to: unknown }> = {}\n  if (!seen) seen = new Set()\n  if (seen.has(before) || seen.has(after)) return changes\n  seen.add(before)\n  seen.add(after)\n  const keys = new Set([...Object.keys(before), ...Object.keys(after)])\n  for (const key of keys) {\n    if (SKIPPED_CHANGE_KEYS.has(key)) continue\n    if (CUSTOM_FIELD_CONTAINER_KEYS.has(key)) {\n      const handled = appendCustomFieldChanges(changes, before[key], after[key])\n      if (handled) continue\n    }\n    const from = before[key]\n    const to = after[key]\n    const path = prefix ? `${prefix}.${key}` : key\n    const fromRec = asRecord(from)\n    const toRec = asRecord(to)\n    if (fromRec && toRec) {\n      const nested = buildRecordChangesDeep(fromRec, toRec, path, seen)\n      if (Object.keys(nested).length) {\n        Object.assign(changes, nested)\n        continue\n      }\n    }\n    if (!deepEqual(from, to)) {\n      changes[path] = { from, to }\n    }\n  }\n  return changes\n}\n\nfunction deriveChangesFromSnapshots(\n  before: unknown,\n  after: unknown,\n): Record<string, { from: unknown; to: unknown }> | null {\n  const beforeRec = asRecord(before)\n  const afterRec = asRecord(after)\n  if (!beforeRec || !afterRec) return null\n  const changes = buildRecordChanges(beforeRec, afterRec)\n  return Object.keys(changes).length ? changes : null\n}\n\nfunction invertRecordedChanges(\n  changes: unknown,\n): Record<string, { from: unknown; to: unknown }> | null {\n  const source = asRecord(changes)\n  if (!source) return null\n  const inverted: Record<string, { from: unknown; to: unknown }> = {}\n  for (const [key, value] of Object.entries(source)) {\n    const entry = asRecord(value)\n    if (!entry || (!('from' in entry) && !('to' in entry))) continue\n    inverted[key] = {\n      from: entry.to,\n      to: entry.from,\n    }\n  }\n  return Object.keys(inverted).length ? inverted : null\n}\n\nfunction extractAliasList(source: unknown): string[] {\n  if (!source || typeof source !== 'object' || Array.isArray(source)) return []\n  const record = source as Record<string, unknown>\n  const raw = record.cacheAliases\n  if (!Array.isArray(raw)) return []\n  const aliases = new Set<string>()\n  for (const value of raw) {\n    if (typeof value !== 'string') continue\n    const normalized = canonicalizeResourceTag(value)\n    if (normalized) aliases.add(normalized)\n  }\n  return Array.from(aliases)\n}\n\nexport class CommandBus {\n  async execute<TInput = unknown, TResult = unknown>(\n    commandId: string,\n    options: CommandExecutionOptions<TInput>\n  ): Promise<CommandExecuteResult<TResult>> {\n    const handler = await this.resolveHandler<TInput, TResult>(commandId)\n\n    // Run beforeExecute command interceptors\n    const allInterceptors = getAllCommandInterceptorInstances()\n    let interceptorMetadata = new Map<string, Record<string, unknown>>()\n    let effectiveOptions = options\n    const userFeatures = allInterceptors.length\n      ? await this.resolveUserFeaturesForInterceptors(options.ctx)\n      : []\n    if (allInterceptors.length) {\n      const interceptorCtx: CommandInterceptorContext = {\n        commandId,\n        auth: options.ctx.auth ?? null,\n        selectedOrganizationId: options.ctx.selectedOrganizationId ?? options.ctx.auth?.orgId ?? null,\n        container: options.ctx.container,\n      }\n      const beforeResult = await runCommandInterceptorsBefore(\n        allInterceptors, commandId, options.input, interceptorCtx, userFeatures,\n      )\n      if (!beforeResult.ok) {\n        throw new CommandInterceptorError(beforeResult.error!.message)\n      }\n      interceptorMetadata = beforeResult.metadataByInterceptor\n      if (beforeResult.modifiedInput) {\n        effectiveOptions = {\n          ...options,\n          input: { ...(options.input as object), ...beforeResult.modifiedInput } as TInput,\n        }\n      }\n    }\n\n    const snapshots = await this.prepareSnapshots(handler, effectiveOptions)\n    const redoLogEntry = effectiveOptions.redoLogEntry ?? null\n    const result =\n      redoLogEntry && typeof handler.redo === 'function'\n        ? await handler.redo({ input: effectiveOptions.input, ctx: effectiveOptions.ctx, logEntry: redoLogEntry })\n        : await handler.execute(effectiveOptions.input, effectiveOptions.ctx)\n    const afterSnapshot = await this.captureAfter(handler, effectiveOptions, result)\n    const snapshotsWithAfter = { ...snapshots, after: afterSnapshot }\n    const logMeta = await this.buildLog(handler, effectiveOptions, result, snapshotsWithAfter)\n    let mergedMeta = this.mergeMetadata(effectiveOptions.metadata, logMeta)\n    const undoable = this.isUndoable(handler)\n    if (undoable) {\n      mergedMeta = mergedMeta ?? {}\n      if (!mergedMeta.undoToken) mergedMeta.undoToken = defaultUndoToken()\n      if (mergedMeta.actorUserId === undefined) mergedMeta.actorUserId = effectiveOptions.ctx.auth?.sub ?? null\n    }\n    if (afterSnapshot !== undefined && afterSnapshot !== null) {\n      if (!mergedMeta) {\n        mergedMeta = { snapshotAfter: afterSnapshot }\n      } else if (!mergedMeta.snapshotAfter) {\n        mergedMeta.snapshotAfter = afterSnapshot\n      }\n    }\n    if (snapshots.before) {\n      if (!mergedMeta) {\n        mergedMeta = { snapshotBefore: snapshots.before }\n      } else if (!mergedMeta.snapshotBefore) {\n        mergedMeta.snapshotBefore = snapshots.before\n      }\n    }\n    if (mergedMeta?.snapshotBefore !== undefined && mergedMeta?.snapshotAfter !== undefined) {\n      const currentChanges = mergedMeta.changes\n      const shouldInfer =\n        currentChanges === undefined ||\n        currentChanges === null ||\n        (typeof currentChanges === 'object' && !Array.isArray(currentChanges) && Object.keys(currentChanges).length === 0)\n      if (shouldInfer) {\n        const inferred = deriveChangesFromSnapshots(mergedMeta.snapshotBefore, mergedMeta.snapshotAfter)\n        if (inferred) mergedMeta.changes = inferred\n      }\n    }\n    const logEntry = await this.persistLog(commandId, effectiveOptions, mergedMeta)\n\n    // Run afterExecute command interceptors\n    let finalResult = result\n    if (allInterceptors.length) {\n      const interceptorCtx: CommandInterceptorContext = {\n        commandId,\n        auth: effectiveOptions.ctx.auth ?? null,\n        selectedOrganizationId: effectiveOptions.ctx.selectedOrganizationId ?? effectiveOptions.ctx.auth?.orgId ?? null,\n        container: effectiveOptions.ctx.container,\n      }\n      const afterResult = await runCommandInterceptorsAfter(\n        allInterceptors, commandId, effectiveOptions.input, result, interceptorCtx,\n        userFeatures, interceptorMetadata,\n      )\n      if (afterResult.modifiedResult && typeof result === 'object' && result) {\n        finalResult = { ...(result as object), ...afterResult.modifiedResult } as Awaited<TResult>\n      }\n    }\n\n    if (!effectiveOptions.skipCacheInvalidation) {\n      await this.invalidateCacheAfterExecute(commandId, effectiveOptions, finalResult, mergedMeta)\n    }\n    // Bulk-import backfills defer heavy per-record side effects: the ctx flags are read here and\n    // threaded as a local into the flush (never stored on the shared dataEngine), so a concurrent\n    // command with different flags can't observe them. Reindex is restored by the caller's\n    // end-of-run `query_index rebuild`. Mirrors `skipCacheInvalidation` above.\n    await this.flushCrudSideEffects(effectiveOptions.ctx.container, effectiveOptions.ctx?.bulkImport)\n    return { result: finalResult, logEntry }\n  }\n\n  async undo(undoToken: string, ctx: CommandRuntimeContext): Promise<void> {\n    const service = (ctx.container.resolve('actionLogService') as ActionLogService)\n    const log = await service.findByUndoToken(undoToken)\n    if (!log) throw new Error('Undo token expired or not found')\n    const handler = await this.resolveHandler(log.commandId)\n    if (!handler.undo || this.isUndoable(handler) === false) {\n      throw new Error(`Command ${log.commandId} is not undoable`)\n    }\n\n    // Atomically claim the action-log row before running any undo side effects.\n    // Two concurrent requests holding the same undo token can both pass\n    // findByUndoToken/executionState checks; the compare-and-set below ensures\n    // only one transitions `done` -> `undoing` and proceeds, the other bails out.\n    const claimed = await service.claimForUndo(log.id)\n    if (!claimed) throw new Error('Undo token already consumed')\n\n    try {\n      // Run beforeUndo command interceptors\n      const allInterceptors = getAllCommandInterceptorInstances()\n      let undoInterceptorMetadata = new Map<string, Record<string, unknown>>()\n      const userFeatures = allInterceptors.length\n        ? await this.resolveUserFeaturesForInterceptors(ctx)\n        : []\n      if (allInterceptors.length) {\n        const undoCtx = { input: log.commandPayload, logEntry: log, undoToken }\n        const interceptorCtx: CommandInterceptorContext = {\n          commandId: log.commandId,\n          auth: ctx.auth ?? null,\n          selectedOrganizationId: ctx.selectedOrganizationId ?? ctx.auth?.orgId ?? null,\n          container: ctx.container,\n        }\n        const beforeResult = await runCommandInterceptorsBeforeUndo(\n          allInterceptors, log.commandId, undoCtx, interceptorCtx, userFeatures,\n        )\n        if (!beforeResult.ok) {\n          throw new CommandInterceptorError(beforeResult.error!.message)\n        }\n        undoInterceptorMetadata = beforeResult.metadataByInterceptor\n      }\n\n      await handler.undo({\n        input: log.commandPayload as Parameters<NonNullable<typeof handler.undo>>[0]['input'],\n        ctx,\n        logEntry: log,\n      })\n      await service.markUndone(log.id, this.buildUndoTraceLog(log, ctx))\n\n      // Run afterUndo command interceptors\n      if (allInterceptors.length) {\n        const undoCtx = { input: log.commandPayload, logEntry: log, undoToken }\n        const interceptorCtx: CommandInterceptorContext = {\n          commandId: log.commandId,\n          auth: ctx.auth ?? null,\n          selectedOrganizationId: ctx.selectedOrganizationId ?? ctx.auth?.orgId ?? null,\n          container: ctx.container,\n        }\n        await runCommandInterceptorsAfterUndo(\n          allInterceptors, log.commandId, undoCtx, interceptorCtx,\n          userFeatures, undoInterceptorMetadata,\n        )\n      }\n\n      await this.invalidateCacheAfterUndo(log, ctx)\n      await this.flushCrudSideEffects(ctx.container)\n    } catch (err) {\n      // Undo failed after claiming the row \u2014 release the claim so the action\n      // remains retryable instead of being stranded in the `undoing` state.\n      await service.releaseUndoClaim(log.id).catch(() => {})\n      throw err\n    }\n  }\n\n  private buildUndoTraceLog(log: ActionLog, ctx: CommandRuntimeContext): ActionLogCreateInput | undefined {\n    const snapshotBefore = log.snapshotAfter ?? null\n    const snapshotAfter = log.snapshotBefore ?? null\n    const changes =\n      deriveChangesFromSnapshots(snapshotBefore, snapshotAfter)\n      ?? invertRecordedChanges(log.changesJson)\n      ?? undefined\n\n    const baseContext = asRecord(log.contextJson) ?? {}\n    const context = {\n      ...baseContext,\n      historyAction: 'undo',\n      sourceLogId: log.id,\n      sourceCommandId: log.commandId,\n    }\n\n    return {\n      tenantId: log.tenantId ?? ctx.auth?.tenantId ?? null,\n      organizationId: log.organizationId ?? ctx.selectedOrganizationId ?? ctx.auth?.orgId ?? null,\n      actorUserId: ctx.auth?.sub ?? log.actorUserId ?? null,\n      commandId: log.commandId,\n      actionLabel: log.actionLabel ?? undefined,\n      resourceKind: log.resourceKind ?? undefined,\n      resourceId: log.resourceId ?? undefined,\n      parentResourceKind: log.parentResourceKind ?? null,\n      parentResourceId: log.parentResourceId ?? null,\n      relatedResourceKind: log.relatedResourceKind ?? null,\n      relatedResourceId: log.relatedResourceId ?? null,\n      snapshotBefore,\n      snapshotAfter,\n      changes,\n      context,\n    }\n  }\n\n  private async resolveUserFeaturesForInterceptors(ctx: CommandRuntimeContext): Promise<string[]> {\n    if (!ctx.auth) return []\n    try {\n      type RbacLike = { getGrantedFeatures: (userId: string, opts: { tenantId: string | null; organizationId: string | null }) => Promise<string[]> }\n      const rbac = ctx.container.resolve('rbacService') as RbacLike | undefined\n      if (rbac?.getGrantedFeatures) {\n        return await rbac.getGrantedFeatures(ctx.auth.sub, {\n          tenantId: ctx.auth.tenantId,\n          organizationId: ctx.selectedOrganizationId ?? ctx.auth.orgId,\n        })\n      }\n    } catch {\n      // Intentional: rbacService is not registered in all runtime contexts (CLI, tests, bootstrap).\n      // Falling through to return [] is safe \u2014 interceptors without feature gating still run.\n    }\n    return []\n  }\n\n  private async resolveHandler<TInput, TResult>(commandId: string): Promise<CommandHandler<TInput, TResult>> {\n    const handler =\n      commandRegistry.get<TInput, TResult>(commandId) ??\n      ((await commandRegistry.load(commandId)) as CommandHandler<TInput, TResult> | null)\n    if (!handler) {\n      const moduleName = commandId.split('.')[0]\n      const registered = commandRegistry.list()\n      const sameModule = registered.filter((id) => id.split('.')[0] === moduleName)\n      const registeredLoaders = commandRegistry.listLoaders()\n      const sameModuleLoaders = registeredLoaders.filter((id) => id === commandId || id.startsWith(`${moduleName}:`))\n      const hint = sameModule.length > 0\n        ? ` Registered commands for module \"${moduleName}\": [${sameModule.join(', ')}].`\n        : sameModuleLoaders.length > 0\n          ? ` Command loaders for module \"${moduleName}\" were registered but none loaded \"${commandId}\".`\n          : ` No commands or command loaders registered for module \"${moduleName}\". Ensure the command file is imported or generated lazy command loaders are registered.`\n      throw new Error(`Command handler not registered for id ${commandId}.${hint}`)\n    }\n    return handler\n  }\n\n  private async prepareSnapshots<TInput, TResult>(\n    handler: CommandHandler<TInput, TResult>,\n    options: CommandExecutionOptions<TInput>\n  ): Promise<{ before?: unknown }> {\n    if (!handler.prepare) return {}\n    try {\n      return (await handler.prepare(options.input, options.ctx)) || {}\n    } catch (err) {\n      throw err\n    }\n  }\n\n  private async captureAfter<TInput, TResult>(\n    handler: CommandHandler<TInput, TResult>,\n    options: CommandExecutionOptions<TInput>,\n    result: TResult\n  ): Promise<unknown> {\n    if (!handler.captureAfter) return undefined\n    return handler.captureAfter(options.input, result, options.ctx)\n  }\n\n  private async buildLog<TInput, TResult>(\n    handler: CommandHandler<TInput, TResult>,\n    options: CommandExecutionOptions<TInput>,\n    result: TResult,\n    snapshots: { before?: unknown; after?: unknown }\n  ): Promise<CommandLogMetadata | null> {\n    if (!handler.buildLog) return null\n    const args: CommandLogBuilderArgs<TInput, TResult> = {\n      input: options.input,\n      result,\n      ctx: options.ctx,\n      snapshots,\n    }\n    return (await handler.buildLog(args)) || null\n  }\n\n  private mergeMetadata(primary?: CommandLogMetadata | null, secondary?: CommandLogMetadata | null): CommandLogMetadata | null {\n    if (!primary && !secondary) return null\n    return {\n      skipLog: secondary?.skipLog ?? primary?.skipLog ?? false,\n      tenantId: secondary?.tenantId ?? primary?.tenantId ?? null,\n      organizationId: secondary?.organizationId ?? primary?.organizationId ?? null,\n      actorUserId: secondary?.actorUserId ?? primary?.actorUserId ?? null,\n      actionLabel: secondary?.actionLabel ?? primary?.actionLabel ?? null,\n      resourceKind: secondary?.resourceKind ?? primary?.resourceKind ?? null,\n      resourceId: secondary?.resourceId ?? primary?.resourceId ?? null,\n      parentResourceKind: secondary?.parentResourceKind ?? primary?.parentResourceKind ?? null,\n      parentResourceId: secondary?.parentResourceId ?? primary?.parentResourceId ?? null,\n      relatedResourceKind: secondary?.relatedResourceKind ?? primary?.relatedResourceKind ?? null,\n      relatedResourceId: secondary?.relatedResourceId ?? primary?.relatedResourceId ?? null,\n      undoToken: secondary?.undoToken ?? primary?.undoToken ?? null,\n      payload: secondary?.payload ?? primary?.payload ?? null,\n      snapshotBefore: secondary?.snapshotBefore ?? primary?.snapshotBefore ?? null,\n      snapshotAfter: secondary?.snapshotAfter ?? primary?.snapshotAfter ?? null,\n      changes: secondary?.changes ?? primary?.changes ?? null,\n      context: secondary?.context ?? primary?.context ?? null,\n    }\n  }\n\n  private async persistLog<TInput>(\n    commandId: string,\n    options: CommandExecutionOptions<TInput>,\n    metadata: CommandLogMetadata | null\n  ): Promise<ActionLog | null> {\n    if (!metadata) return null\n    if (metadata.skipLog) return null\n    const resourceKind =\n      typeof metadata.resourceKind === 'string' ? metadata.resourceKind : null\n    if (resourceKind && SKIPPED_ACTION_LOG_RESOURCE_KINDS.has(resourceKind)) {\n      return null\n    }\n    let service: ActionLogService | null = null\n    try {\n      service = (options.ctx.container.resolve('actionLogService') as ActionLogService)\n    } catch {\n      service = null\n    }\n    if (!service) return null\n\n    const tenantId = metadata.tenantId ?? options.ctx.auth?.tenantId ?? null\n    const organizationId =\n      metadata.organizationId ?? options.ctx.selectedOrganizationId ?? options.ctx.auth?.orgId ?? null\n    const actorUserId = metadata.actorUserId ?? options.ctx.auth?.sub ?? null\n    const payload: Record<string, unknown> = {\n      tenantId: tenantId ?? undefined,\n      organizationId: organizationId ?? undefined,\n      actorUserId: actorUserId ?? undefined,\n      commandId,\n    }\n\n    if (metadata) {\n      if ('actionLabel' in metadata && metadata.actionLabel != null) payload.actionLabel = metadata.actionLabel\n      if ('resourceKind' in metadata && metadata.resourceKind != null) payload.resourceKind = metadata.resourceKind\n      if ('resourceId' in metadata && metadata.resourceId != null) payload.resourceId = metadata.resourceId\n      if ('parentResourceKind' in metadata && metadata.parentResourceKind != null) payload.parentResourceKind = metadata.parentResourceKind\n      if ('parentResourceId' in metadata && metadata.parentResourceId != null) payload.parentResourceId = metadata.parentResourceId\n      if ('relatedResourceKind' in metadata && metadata.relatedResourceKind != null) payload.relatedResourceKind = metadata.relatedResourceKind\n      if ('relatedResourceId' in metadata && metadata.relatedResourceId != null) payload.relatedResourceId = metadata.relatedResourceId\n      if ('undoToken' in metadata && metadata.undoToken != null) payload.undoToken = metadata.undoToken\n      if ('payload' in metadata && metadata.payload !== undefined) payload.commandPayload = metadata.payload\n      if ('snapshotBefore' in metadata && metadata.snapshotBefore !== undefined) payload.snapshotBefore = metadata.snapshotBefore\n      if ('snapshotAfter' in metadata && metadata.snapshotAfter !== undefined) payload.snapshotAfter = metadata.snapshotAfter\n      if ('changes' in metadata && metadata.changes !== undefined && metadata.changes !== null) payload.changes = metadata.changes\n      if ('context' in metadata && metadata.context !== undefined && metadata.context !== null) payload.context = metadata.context\n    }\n\n    const redoEnvelope = wrapRedoPayload('commandPayload' in payload ? (payload.commandPayload as unknown) : undefined, options.input)\n    payload.commandPayload = redoEnvelope\n\n    return await service.log(payload as ActionLogCreateInput)\n  }\n\n  private isUndoable(handler: CommandHandler<unknown, unknown>): boolean {\n    return handler.isUndoable !== false && typeof handler.undo === 'function'\n  }\n\n  private async invalidateCacheAfterExecute<TResult>(\n    commandId: string,\n    options: CommandExecutionOptions<unknown>,\n    result: TResult,\n    metadata: CommandLogMetadata | null\n  ): Promise<void> {\n    const resource = typeof metadata?.resourceKind === 'string' ? metadata.resourceKind : null\n    if (!resource) return\n    try {\n      const ctx = options.ctx\n      const resultRecord = asRecord(result)\n      const resultEntity = asRecord(resultRecord?.entity)\n      const inputRecord = asRecord(options.input)\n      const inputEntity = asRecord(inputRecord?.entity)\n\n      const recordId = pickFirstIdentifier(\n        metadata?.resourceId,\n        extractPrimaryIdFromCommandResult(result),\n        resultRecord?.entityId,\n        resultRecord?.id,\n        resultRecord?.recordId,\n        resultEntity?.id,\n        inputRecord?.id,\n        inputRecord?.entityId,\n        inputRecord?.recordId,\n        inputEntity?.id\n      )\n\n      const organizationId = pickFirstIdentifier(\n        metadata?.organizationId,\n        resultRecord?.organizationId,\n        resultEntity?.organizationId,\n        inputRecord?.organizationId,\n        inputEntity?.organizationId,\n        ctx.selectedOrganizationId ?? ctx.auth?.orgId ?? null\n      )\n\n      const tenantId = pickFirstIdentifier(\n        metadata?.tenantId,\n        resultRecord?.tenantId,\n        resultEntity?.tenantId,\n        inputRecord?.tenantId,\n        inputEntity?.tenantId,\n        ctx.auth?.tenantId ?? null\n      )\n\n      const fallbackTenant = pickFirstIdentifier(metadata?.tenantId, ctx.auth?.tenantId ?? null)\n\n      const aliasSet = new Set<string>()\n      for (const alias of extractAliasList(metadata?.context ?? null)) {\n        aliasSet.add(alias)\n      }\n      const derived = deriveResourceFromCommandId(commandId)\n      if (derived) aliasSet.add(derived)\n      const aliasExtras = Array.from(aliasSet)\n      await invalidateCrudCache(\n        ctx.container,\n        resource,\n        { id: recordId, organizationId, tenantId },\n        fallbackTenant,\n        `command:${commandId}:execute`,\n        aliasExtras\n      )\n    } catch (err) {\n      if (isCrudCacheDebugEnabled()) {\n        try {\n          logger.debug('Cache execute-invalidation failed', { commandId, err })\n        } catch {}\n      }\n    }\n  }\n\n  private async invalidateCacheAfterUndo(log: ActionLog, ctx: CommandRuntimeContext): Promise<void> {\n    const resource = typeof log.resourceKind === 'string' ? log.resourceKind : null\n    if (!resource) return\n    try {\n      const recordId = pickFirstIdentifier(log.resourceId)\n      const organizationId = pickFirstIdentifier(log.organizationId, ctx.selectedOrganizationId ?? ctx.auth?.orgId ?? null)\n      const tenantId = pickFirstIdentifier(log.tenantId, ctx.auth?.tenantId ?? null)\n      const fallbackTenant = pickFirstIdentifier(log.tenantId, ctx.auth?.tenantId ?? null)\n      const aliasSet = new Set<string>()\n      for (const alias of extractAliasList(log.contextJson ?? null)) {\n        aliasSet.add(alias)\n      }\n      const derived = deriveResourceFromCommandId(log.commandId)\n      if (derived) aliasSet.add(derived)\n      const aliasExtras = Array.from(aliasSet)\n      await invalidateCrudCache(\n        ctx.container,\n        resource,\n        { id: recordId, organizationId, tenantId },\n        fallbackTenant,\n        `command:${log.commandId}:undo`,\n        aliasExtras\n      )\n    } catch (err) {\n      if (isCrudCacheDebugEnabled()) {\n        try {\n          logger.debug('Cache undo-invalidation failed', { commandId: log.commandId, err })\n        } catch {}\n      }\n    }\n  }\n\n  private async flushCrudSideEffects(container: AwilixContainer, suppress?: BulkImportSuppression): Promise<void> {\n    try {\n      const dataEngine = (container.resolve('dataEngine') as DataEngine)\n      await dataEngine.flushOrmEntityChanges(suppress)\n    } catch (error) {\n      if (isReadProjectionAlwaysConsistent()) {\n        throw error\n      }\n      // best-effort: failures should not block command execution\n    }\n  }\n}\n\ntype RedoEnvelope = {\n  __redoInput: unknown\n  [key: string]: unknown\n}\n\nfunction wrapRedoPayload(existing: unknown, input: unknown): RedoEnvelope {\n  if (!existing || typeof existing !== 'object' || Array.isArray(existing)) {\n    const envelope: RedoEnvelope = { __redoInput: input }\n    if (existing !== undefined) envelope.value = existing\n    return envelope\n  }\n  const current = existing as Record<string, unknown>\n  if ('__redoInput' in current && current.__redoInput !== undefined) {\n    return current as RedoEnvelope\n  }\n  return { __redoInput: input, ...current }\n}\n"],
-  "mappings": "AAEA,SAAS,uBAAuB;AAUhC,SAAS,wBAAwB;AAIjC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,+BAA+B;AACxC,SAAS,yCAAyC;AAClD;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP,SAAS,+BAA+B;AACxC,SAAS,wCAAwC;AACjD,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,QAAQ,EAAE,MAAM,EAAE,WAAW,WAAW,CAAC;AAErE,MAAM,oCAAoC,oBAAI,IAAY;AAAA,EACxD;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAED,SAAS,SAAS,OAAgD;AAChE,MAAI,CAAC,SAAS,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK,EAAG,QAAO;AACxE,SAAO;AACT;AAGA,SAAS,kCAAkC,QAAgC;AACzE,QAAM,IAAI,SAAS,MAAM;AACzB,MAAI,CAAC,EAAG,QAAO;AACf,QAAM,SAAS,oBAAoB,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ;AAC/D,MAAI,OAAQ,QAAO;AACnB,aAAW,OAAO;AAAA,IAChB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,GAAG;AACD,UAAM,IAAI,EAAE,GAAG;AACf,QAAI,OAAO,MAAM,YAAY,EAAE,KAAK,EAAE,SAAS,EAAG,QAAO,EAAE,KAAK;AAAA,EAClE;AACA,SAAO;AACT;AAEA,SAAS,YAAY,OAA+B;AAClD,MAAI,iBAAiB,MAAM;AACzB,UAAM,MAAM,MAAM,YAAY;AAC9B,WAAO,OAAO,MAAM,MAAM,QAAQ,CAAC,IAAI,OAAO;AAAA,EAChD;AACA,MAAI,OAAO,UAAU,UAAU;AAC7B,UAAM,SAAS,IAAI,KAAK,KAAK;AAC7B,WAAO,OAAO,MAAM,OAAO,QAAQ,CAAC,IAAI,OAAO,OAAO,YAAY;AAAA,EACpE;AACA,SAAO;AACT;AAEA,SAAS,UAAU,GAAY,GAAY,MAA8B;AACvE,MAAI,OAAO,GAAG,GAAG,CAAC,EAAG,QAAO;AAC5B,MAAI,aAAa,QAAQ,aAAa,MAAM;AAC1C,UAAM,OAAO,YAAY,CAAC;AAC1B,UAAM,OAAO,YAAY,CAAC;AAC1B,QAAI,QAAQ,QAAQ,QAAQ,KAAM,QAAO,SAAS;AAClD,WAAO;AAAA,EACT;AACA,MAAI,MAAM,QAAQ,CAAC,KAAK,MAAM,QAAQ,CAAC,GAAG;AACxC,QAAI,EAAE,WAAW,EAAE,OAAQ,QAAO;AAClC,WAAO,EAAE,MAAM,CAAC,OAAO,UAAU,UAAU,OAAO,EAAE,KAAK,GAAG,IAAI,CAAC;AAAA,EACnE;AACA,MAAI,KAAK,KAAK,OAAO,MAAM,YAAY,OAAO,MAAM,UAAU;AAC5D,QAAI,CAAC,KAAM,QAAO,oBAAI,IAAI;AAC1B,QAAI,KAAK,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,EAAG,QAAO;AACvC,SAAK,IAAI,CAAC;AACV,SAAK,IAAI,CAAC;AACV,UAAM,OAAO;AACb,UAAM,OAAO;AACb,UAAM,QAAQ,OAAO,KAAK,IAAI;AAC9B,UAAM,QAAQ,OAAO,KAAK,IAAI;AAC9B,QAAI,MAAM,WAAW,MAAM,OAAQ,QAAO;AAC1C,WAAO,MAAM,MAAM,CAAC,QAAQ,UAAU,KAAK,GAAG,GAAG,KAAK,GAAG,GAAG,IAAI,CAAC;AAAA,EACnE;AACA,SAAO;AACT;AAEA,MAAM,8BAA8B,oBAAI,IAAI,CAAC,UAAU,gBAAgB,gBAAgB,IAAI,CAAC;AAC5F,MAAM,sBAAsB,oBAAI,IAAI,CAAC,aAAa,YAAY,CAAC;AAE/D,SAAS,yBACP,SACA,QACA,OACS;AACT,QAAM,YAAY,SAAS,MAAM;AACjC,QAAM,WAAW,SAAS,KAAK;AAC/B,MAAI,CAAC,aAAa,CAAC,SAAU,QAAO;AACpC,QAAM,OAAO,aAAa,CAAC;AAC3B,QAAM,QAAQ,YAAY,CAAC;AAC3B,QAAM,OAAO,oBAAI,IAAI,CAAC,GAAG,OAAO,KAAK,IAAI,GAAG,GAAG,OAAO,KAAK,KAAK,CAAC,CAAC;AAClE,aAAW,OAAO,MAAM;AACtB,UAAM,OAAO,KAAK,GAAG;AACrB,UAAM,KAAK,MAAM,GAAG;AACpB,QAAI,CAAC,UAAU,MAAM,EAAE,GAAG;AACxB,cAAQ,wBAAwB,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG;AAAA,IACrD;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,mBACP,QACA,OACgD;AAChD,SAAO,uBAAuB,QAAQ,KAAK;AAC7C;AAEA,SAAS,uBACP,QACA,OACA,QACA,MACgD;AAChD,QAAM,UAA0D,CAAC;AACjE,MAAI,CAAC,KAAM,QAAO,oBAAI,IAAI;AAC1B,MAAI,KAAK,IAAI,MAAM,KAAK,KAAK,IAAI,KAAK,EAAG,QAAO;AAChD,OAAK,IAAI,MAAM;AACf,OAAK,IAAI,KAAK;AACd,QAAM,OAAO,oBAAI,IAAI,CAAC,GAAG,OAAO,KAAK,MAAM,GAAG,GAAG,OAAO,KAAK,KAAK,CAAC,CAAC;AACpE,aAAW,OAAO,MAAM;AACtB,QAAI,oBAAoB,IAAI,GAAG,EAAG;AAClC,QAAI,4BAA4B,IAAI,GAAG,GAAG;AACxC,YAAM,UAAU,yBAAyB,SAAS,OAAO,GAAG,GAAG,MAAM,GAAG,CAAC;AACzE,UAAI,QAAS;AAAA,IACf;AACA,UAAM,OAAO,OAAO,GAAG;AACvB,UAAM,KAAK,MAAM,GAAG;AACpB,UAAM,OAAO,SAAS,GAAG,MAAM,IAAI,GAAG,KAAK;AAC3C,UAAM,UAAU,SAAS,IAAI;AAC7B,UAAM,QAAQ,SAAS,EAAE;AACzB,QAAI,WAAW,OAAO;AACpB,YAAM,SAAS,uBAAuB,SAAS,OAAO,MAAM,IAAI;AAChE,UAAI,OAAO,KAAK,MAAM,EAAE,QAAQ;AAC9B,eAAO,OAAO,SAAS,MAAM;AAC7B;AAAA,MACF;AAAA,IACF;AACA,QAAI,CAAC,UAAU,MAAM,EAAE,GAAG;AACxB,cAAQ,IAAI,IAAI,EAAE,MAAM,GAAG;AAAA,IAC7B;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,2BACP,QACA,OACuD;AACvD,QAAM,YAAY,SAAS,MAAM;AACjC,QAAM,WAAW,SAAS,KAAK;AAC/B,MAAI,CAAC,aAAa,CAAC,SAAU,QAAO;AACpC,QAAM,UAAU,mBAAmB,WAAW,QAAQ;AACtD,SAAO,OAAO,KAAK,OAAO,EAAE,SAAS,UAAU;AACjD;AAEA,SAAS,sBACP,SACuD;AACvD,QAAM,SAAS,SAAS,OAAO;AAC/B,MAAI,CAAC,OAAQ,QAAO;AACpB,QAAM,WAA2D,CAAC;AAClE,aAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,MAAM,GAAG;AACjD,UAAM,QAAQ,SAAS,KAAK;AAC5B,QAAI,CAAC,SAAU,EAAE,UAAU,UAAU,EAAE,QAAQ,OAAS;AACxD,aAAS,GAAG,IAAI;AAAA,MACd,MAAM,MAAM;AAAA,MACZ,IAAI,MAAM;AAAA,IACZ;AAAA,EACF;AACA,SAAO,OAAO,KAAK,QAAQ,EAAE,SAAS,WAAW;AACnD;AAEA,SAAS,iBAAiB,QAA2B;AACnD,MAAI,CAAC,UAAU,OAAO,WAAW,YAAY,MAAM,QAAQ,MAAM,EAAG,QAAO,CAAC;AAC5E,QAAM,SAAS;AACf,QAAM,MAAM,OAAO;AACnB,MAAI,CAAC,MAAM,QAAQ,GAAG,EAAG,QAAO,CAAC;AACjC,QAAM,UAAU,oBAAI,IAAY;AAChC,aAAW,SAAS,KAAK;AACvB,QAAI,OAAO,UAAU,SAAU;AAC/B,UAAM,aAAa,wBAAwB,KAAK;AAChD,QAAI,WAAY,SAAQ,IAAI,UAAU;AAAA,EACxC;AACA,SAAO,MAAM,KAAK,OAAO;AAC3B;AAEO,MAAM,WAAW;AAAA,EACtB,MAAM,QACJ,WACA,SACwC;AACxC,UAAM,UAAU,MAAM,KAAK,eAAgC,SAAS;AAGpE,UAAM,kBAAkB,kCAAkC;AAC1D,QAAI,sBAAsB,oBAAI,IAAqC;AACnE,QAAI,mBAAmB;AACvB,UAAM,eAAe,gBAAgB,SACjC,MAAM,KAAK,mCAAmC,QAAQ,GAAG,IACzD,CAAC;AACL,QAAI,gBAAgB,QAAQ;AAC1B,YAAM,iBAA4C;AAAA,QAChD;AAAA,QACA,MAAM,QAAQ,IAAI,QAAQ;AAAA,QAC1B,wBAAwB,QAAQ,IAAI,0BAA0B,QAAQ,IAAI,MAAM,SAAS;AAAA,QACzF,WAAW,QAAQ,IAAI;AAAA,MACzB;AACA,YAAM,eAAe,MAAM;AAAA,QACzB;AAAA,QAAiB;AAAA,QAAW,QAAQ;AAAA,QAAO;AAAA,QAAgB;AAAA,MAC7D;AACA,UAAI,CAAC,aAAa,IAAI;AACpB,cAAM,IAAI,wBAAwB,aAAa,MAAO,OAAO;AAAA,MAC/D;AACA,4BAAsB,aAAa;AACnC,UAAI,aAAa,eAAe;AAC9B,2BAAmB;AAAA,UACjB,GAAG;AAAA,UACH,OAAO,EAAE,GAAI,QAAQ,OAAkB,GAAG,aAAa,cAAc;AAAA,QACvE;AAAA,MACF;AAAA,IACF;AAEA,UAAM,YAAY,MAAM,KAAK,iBAAiB,SAAS,gBAAgB;AACvE,UAAM,eAAe,iBAAiB,gBAAgB;AACtD,UAAM,SACJ,gBAAgB,OAAO,QAAQ,SAAS,aACpC,MAAM,QAAQ,KAAK,EAAE,OAAO,iBAAiB,OAAO,KAAK,iBAAiB,KAAK,UAAU,aAAa,CAAC,IACvG,MAAM,QAAQ,QAAQ,iBAAiB,OAAO,iBAAiB,GAAG;AACxE,UAAM,gBAAgB,MAAM,KAAK,aAAa,SAAS,kBAAkB,MAAM;AAC/E,UAAM,qBAAqB,EAAE,GAAG,WAAW,OAAO,cAAc;AAChE,UAAM,UAAU,MAAM,KAAK,SAAS,SAAS,kBAAkB,QAAQ,kBAAkB;AACzF,QAAI,aAAa,KAAK,cAAc,iBAAiB,UAAU,OAAO;AACtE,UAAM,WAAW,KAAK,WAAW,OAAO;AACxC,QAAI,UAAU;AACZ,mBAAa,cAAc,CAAC;AAC5B,UAAI,CAAC,WAAW,UAAW,YAAW,YAAY,iBAAiB;AACnE,UAAI,WAAW,gBAAgB,OAAW,YAAW,cAAc,iBAAiB,IAAI,MAAM,OAAO;AAAA,IACvG;AACA,QAAI,kBAAkB,UAAa,kBAAkB,MAAM;AACzD,UAAI,CAAC,YAAY;AACf,qBAAa,EAAE,eAAe,cAAc;AAAA,MAC9C,WAAW,CAAC,WAAW,eAAe;AACpC,mBAAW,gBAAgB;AAAA,MAC7B;AAAA,IACF;AACA,QAAI,UAAU,QAAQ;AACpB,UAAI,CAAC,YAAY;AACf,qBAAa,EAAE,gBAAgB,UAAU,OAAO;AAAA,MAClD,WAAW,CAAC,WAAW,gBAAgB;AACrC,mBAAW,iBAAiB,UAAU;AAAA,MACxC;AAAA,IACF;AACA,QAAI,YAAY,mBAAmB,UAAa,YAAY,kBAAkB,QAAW;AACvF,YAAM,iBAAiB,WAAW;AAClC,YAAM,cACJ,mBAAmB,UACnB,mBAAmB,QAClB,OAAO,mBAAmB,YAAY,CAAC,MAAM,QAAQ,cAAc,KAAK,OAAO,KAAK,cAAc,EAAE,WAAW;AAClH,UAAI,aAAa;AACf,cAAM,WAAW,2BAA2B,WAAW,gBAAgB,WAAW,aAAa;AAC/F,YAAI,SAAU,YAAW,UAAU;AAAA,MACrC;AAAA,IACF;AACA,UAAM,WAAW,MAAM,KAAK,WAAW,WAAW,kBAAkB,UAAU;AAG9E,QAAI,cAAc;AAClB,QAAI,gBAAgB,QAAQ;AAC1B,YAAM,iBAA4C;AAAA,QAChD;AAAA,QACA,MAAM,iBAAiB,IAAI,QAAQ;AAAA,QACnC,wBAAwB,iBAAiB,IAAI,0BAA0B,iBAAiB,IAAI,MAAM,SAAS;AAAA,QAC3G,WAAW,iBAAiB,IAAI;AAAA,MAClC;AACA,YAAM,cAAc,MAAM;AAAA,QACxB;AAAA,QAAiB;AAAA,QAAW,iBAAiB;AAAA,QAAO;AAAA,QAAQ;AAAA,QAC5D;AAAA,QAAc;AAAA,MAChB;AACA,UAAI,YAAY,kBAAkB,OAAO,WAAW,YAAY,QAAQ;AACtE,sBAAc,EAAE,GAAI,QAAmB,GAAG,YAAY,eAAe;AAAA,MACvE;AAAA,IACF;AAEA,QAAI,CAAC,iBAAiB,uBAAuB;AAC3C,YAAM,KAAK,4BAA4B,WAAW,kBAAkB,aAAa,UAAU;AAAA,IAC7F;AAKA,UAAM,KAAK,qBAAqB,iBAAiB,IAAI,WAAW,iBAAiB,KAAK,UAAU;AAChG,WAAO,EAAE,QAAQ,aAAa,SAAS;AAAA,EACzC;AAAA,EAEA,MAAM,KAAK,WAAmB,KAA2C;AACvE,UAAM,UAAW,IAAI,UAAU,QAAQ,kBAAkB;AACzD,UAAM,MAAM,MAAM,QAAQ,gBAAgB,SAAS;AACnD,QAAI,CAAC,IAAK,OAAM,IAAI,MAAM,iCAAiC;AAC3D,UAAM,UAAU,MAAM,KAAK,eAAe,IAAI,SAAS;AACvD,QAAI,CAAC,QAAQ,QAAQ,KAAK,WAAW,OAAO,MAAM,OAAO;AACvD,YAAM,IAAI,MAAM,WAAW,IAAI,SAAS,kBAAkB;AAAA,IAC5D;AAMA,UAAM,UAAU,MAAM,QAAQ,aAAa,IAAI,EAAE;AACjD,QAAI,CAAC,QAAS,OAAM,IAAI,MAAM,6BAA6B;AAE3D,QAAI;AAEF,YAAM,kBAAkB,kCAAkC;AAC1D,UAAI,0BAA0B,oBAAI,IAAqC;AACvE,YAAM,eAAe,gBAAgB,SACjC,MAAM,KAAK,mCAAmC,GAAG,IACjD,CAAC;AACL,UAAI,gBAAgB,QAAQ;AAC1B,cAAM,UAAU,EAAE,OAAO,IAAI,gBAAgB,UAAU,KAAK,UAAU;AACtE,cAAM,iBAA4C;AAAA,UAChD,WAAW,IAAI;AAAA,UACf,MAAM,IAAI,QAAQ;AAAA,UAClB,wBAAwB,IAAI,0BAA0B,IAAI,MAAM,SAAS;AAAA,UACzE,WAAW,IAAI;AAAA,QACjB;AACA,cAAM,eAAe,MAAM;AAAA,UACzB;AAAA,UAAiB,IAAI;AAAA,UAAW;AAAA,UAAS;AAAA,UAAgB;AAAA,QAC3D;AACA,YAAI,CAAC,aAAa,IAAI;AACpB,gBAAM,IAAI,wBAAwB,aAAa,MAAO,OAAO;AAAA,QAC/D;AACA,kCAA0B,aAAa;AAAA,MACzC;AAEA,YAAM,QAAQ,KAAK;AAAA,QACjB,OAAO,IAAI;AAAA,QACX;AAAA,QACA,UAAU;AAAA,MACZ,CAAC;AACD,YAAM,QAAQ,WAAW,IAAI,IAAI,KAAK,kBAAkB,KAAK,GAAG,CAAC;AAGjE,UAAI,gBAAgB,QAAQ;AAC1B,cAAM,UAAU,EAAE,OAAO,IAAI,gBAAgB,UAAU,KAAK,UAAU;AACtE,cAAM,iBAA4C;AAAA,UAChD,WAAW,IAAI;AAAA,UACf,MAAM,IAAI,QAAQ;AAAA,UAClB,wBAAwB,IAAI,0BAA0B,IAAI,MAAM,SAAS;AAAA,UACzE,WAAW,IAAI;AAAA,QACjB;AACA,cAAM;AAAA,UACJ;AAAA,UAAiB,IAAI;AAAA,UAAW;AAAA,UAAS;AAAA,UACzC;AAAA,UAAc;AAAA,QAChB;AAAA,MACF;AAEA,YAAM,KAAK,yBAAyB,KAAK,GAAG;AAC5C,YAAM,KAAK,qBAAqB,IAAI,SAAS;AAAA,IAC/C,SAAS,KAAK;AAGZ,YAAM,QAAQ,iBAAiB,IAAI,EAAE,EAAE,MAAM,MAAM;AAAA,MAAC,CAAC;AACrD,YAAM;AAAA,IACR;AAAA,EACF;AAAA,EAEQ,kBAAkB,KAAgB,KAA8D;AACtG,UAAM,iBAAiB,IAAI,iBAAiB;AAC5C,UAAM,gBAAgB,IAAI,kBAAkB;AAC5C,UAAM,UACJ,2BAA2B,gBAAgB,aAAa,KACrD,sBAAsB,IAAI,WAAW,KACrC;AAEL,UAAM,cAAc,SAAS,IAAI,WAAW,KAAK,CAAC;AAClD,UAAM,UAAU;AAAA,MACd,GAAG;AAAA,MACH,eAAe;AAAA,MACf,aAAa,IAAI;AAAA,MACjB,iBAAiB,IAAI;AAAA,IACvB;AAEA,WAAO;AAAA,MACL,UAAU,IAAI,YAAY,IAAI,MAAM,YAAY;AAAA,MAChD,gBAAgB,IAAI,kBAAkB,IAAI,0BAA0B,IAAI,MAAM,SAAS;AAAA,MACvF,aAAa,IAAI,MAAM,OAAO,IAAI,eAAe;AAAA,MACjD,WAAW,IAAI;AAAA,MACf,aAAa,IAAI,eAAe;AAAA,MAChC,cAAc,IAAI,gBAAgB;AAAA,MAClC,YAAY,IAAI,cAAc;AAAA,MAC9B,oBAAoB,IAAI,sBAAsB;AAAA,MAC9C,kBAAkB,IAAI,oBAAoB;AAAA,MAC1C,qBAAqB,IAAI,uBAAuB;AAAA,MAChD,mBAAmB,IAAI,qBAAqB;AAAA,MAC5C;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAc,mCAAmC,KAA+C;AAC9F,QAAI,CAAC,IAAI,KAAM,QAAO,CAAC;AACvB,QAAI;AAEF,YAAM,OAAO,IAAI,UAAU,QAAQ,aAAa;AAChD,UAAI,MAAM,oBAAoB;AAC5B,eAAO,MAAM,KAAK,mBAAmB,IAAI,KAAK,KAAK;AAAA,UACjD,UAAU,IAAI,KAAK;AAAA,UACnB,gBAAgB,IAAI,0BAA0B,IAAI,KAAK;AAAA,QACzD,CAAC;AAAA,MACH;AAAA,IACF,QAAQ;AAAA,IAGR;AACA,WAAO,CAAC;AAAA,EACV;AAAA,EAEA,MAAc,eAAgC,WAA6D;AACzG,UAAM,UACJ,gBAAgB,IAAqB,SAAS,KAC5C,MAAM,gBAAgB,KAAK,SAAS;AACxC,QAAI,CAAC,SAAS;AACZ,YAAM,aAAa,UAAU,MAAM,GAAG,EAAE,CAAC;AACzC,YAAM,aAAa,gBAAgB,KAAK;AACxC,YAAM,aAAa,WAAW,OAAO,CAAC,OAAO,GAAG,MAAM,GAAG,EAAE,CAAC,MAAM,UAAU;AAC5E,YAAM,oBAAoB,gBAAgB,YAAY;AACtD,YAAM,oBAAoB,kBAAkB,OAAO,CAAC,OAAO,OAAO,aAAa,GAAG,WAAW,GAAG,UAAU,GAAG,CAAC;AAC9G,YAAM,OAAO,WAAW,SAAS,IAC7B,oCAAoC,UAAU,OAAO,WAAW,KAAK,IAAI,CAAC,OAC1E,kBAAkB,SAAS,IACzB,gCAAgC,UAAU,sCAAsC,SAAS,OACzF,0DAA0D,UAAU;AAC1E,YAAM,IAAI,MAAM,yCAAyC,SAAS,IAAI,IAAI,EAAE;AAAA,IAC9E;AACA,WAAO;AAAA,EACT;AAAA,EAEA,MAAc,iBACZ,SACA,SAC+B;AAC/B,QAAI,CAAC,QAAQ,QAAS,QAAO,CAAC;AAC9B,QAAI;AACF,aAAQ,MAAM,QAAQ,QAAQ,QAAQ,OAAO,QAAQ,GAAG,KAAM,CAAC;AAAA,IACjE,SAAS,KAAK;AACZ,YAAM;AAAA,IACR;AAAA,EACF;AAAA,EAEA,MAAc,aACZ,SACA,SACA,QACkB;AAClB,QAAI,CAAC,QAAQ,aAAc,QAAO;AAClC,WAAO,QAAQ,aAAa,QAAQ,OAAO,QAAQ,QAAQ,GAAG;AAAA,EAChE;AAAA,EAEA,MAAc,SACZ,SACA,SACA,QACA,WACoC;AACpC,QAAI,CAAC,QAAQ,SAAU,QAAO;AAC9B,UAAM,OAA+C;AAAA,MACnD,OAAO,QAAQ;AAAA,MACf;AAAA,MACA,KAAK,QAAQ;AAAA,MACb;AAAA,IACF;AACA,WAAQ,MAAM,QAAQ,SAAS,IAAI,KAAM;AAAA,EAC3C;AAAA,EAEQ,cAAc,SAAqC,WAAkE;AAC3H,QAAI,CAAC,WAAW,CAAC,UAAW,QAAO;AACnC,WAAO;AAAA,MACL,SAAS,WAAW,WAAW,SAAS,WAAW;AAAA,MACnD,UAAU,WAAW,YAAY,SAAS,YAAY;AAAA,MACtD,gBAAgB,WAAW,kBAAkB,SAAS,kBAAkB;AAAA,MACxE,aAAa,WAAW,eAAe,SAAS,eAAe;AAAA,MAC/D,aAAa,WAAW,eAAe,SAAS,eAAe;AAAA,MAC/D,cAAc,WAAW,gBAAgB,SAAS,gBAAgB;AAAA,MAClE,YAAY,WAAW,cAAc,SAAS,cAAc;AAAA,MAC5D,oBAAoB,WAAW,sBAAsB,SAAS,sBAAsB;AAAA,MACpF,kBAAkB,WAAW,oBAAoB,SAAS,oBAAoB;AAAA,MAC9E,qBAAqB,WAAW,uBAAuB,SAAS,uBAAuB;AAAA,MACvF,mBAAmB,WAAW,qBAAqB,SAAS,qBAAqB;AAAA,MACjF,WAAW,WAAW,aAAa,SAAS,aAAa;AAAA,MACzD,SAAS,WAAW,WAAW,SAAS,WAAW;AAAA,MACnD,gBAAgB,WAAW,kBAAkB,SAAS,kBAAkB;AAAA,MACxE,eAAe,WAAW,iBAAiB,SAAS,iBAAiB;AAAA,MACrE,SAAS,WAAW,WAAW,SAAS,WAAW;AAAA,MACnD,SAAS,WAAW,WAAW,SAAS,WAAW;AAAA,IACrD;AAAA,EACF;AAAA,EAEA,MAAc,WACZ,WACA,SACA,UAC2B;AAC3B,QAAI,CAAC,SAAU,QAAO;AACtB,QAAI,SAAS,QAAS,QAAO;AAC7B,UAAM,eACJ,OAAO,SAAS,iBAAiB,WAAW,SAAS,eAAe;AACtE,QAAI,gBAAgB,kCAAkC,IAAI,YAAY,GAAG;AACvE,aAAO;AAAA,IACT;AACA,QAAI,UAAmC;AACvC,QAAI;AACF,gBAAW,QAAQ,IAAI,UAAU,QAAQ,kBAAkB;AAAA,IAC7D,QAAQ;AACN,gBAAU;AAAA,IACZ;AACA,QAAI,CAAC,QAAS,QAAO;AAErB,UAAM,WAAW,SAAS,YAAY,QAAQ,IAAI,MAAM,YAAY;AACpE,UAAM,iBACJ,SAAS,kBAAkB,QAAQ,IAAI,0BAA0B,QAAQ,IAAI,MAAM,SAAS;AAC9F,UAAM,cAAc,SAAS,eAAe,QAAQ,IAAI,MAAM,OAAO;AACrE,UAAM,UAAmC;AAAA,MACvC,UAAU,YAAY;AAAA,MACtB,gBAAgB,kBAAkB;AAAA,MAClC,aAAa,eAAe;AAAA,MAC5B;AAAA,IACF;AAEA,QAAI,UAAU;AACZ,UAAI,iBAAiB,YAAY,SAAS,eAAe,KAAM,SAAQ,cAAc,SAAS;AAC9F,UAAI,kBAAkB,YAAY,SAAS,gBAAgB,KAAM,SAAQ,eAAe,SAAS;AACjG,UAAI,gBAAgB,YAAY,SAAS,cAAc,KAAM,SAAQ,aAAa,SAAS;AAC3F,UAAI,wBAAwB,YAAY,SAAS,sBAAsB,KAAM,SAAQ,qBAAqB,SAAS;AACnH,UAAI,sBAAsB,YAAY,SAAS,oBAAoB,KAAM,SAAQ,mBAAmB,SAAS;AAC7G,UAAI,yBAAyB,YAAY,SAAS,uBAAuB,KAAM,SAAQ,sBAAsB,SAAS;AACtH,UAAI,uBAAuB,YAAY,SAAS,qBAAqB,KAAM,SAAQ,oBAAoB,SAAS;AAChH,UAAI,eAAe,YAAY,SAAS,aAAa,KAAM,SAAQ,YAAY,SAAS;AACxF,UAAI,aAAa,YAAY,SAAS,YAAY,OAAW,SAAQ,iBAAiB,SAAS;AAC/F,UAAI,oBAAoB,YAAY,SAAS,mBAAmB,OAAW,SAAQ,iBAAiB,SAAS;AAC7G,UAAI,mBAAmB,YAAY,SAAS,kBAAkB,OAAW,SAAQ,gBAAgB,SAAS;AAC1G,UAAI,aAAa,YAAY,SAAS,YAAY,UAAa,SAAS,YAAY,KAAM,SAAQ,UAAU,SAAS;AACrH,UAAI,aAAa,YAAY,SAAS,YAAY,UAAa,SAAS,YAAY,KAAM,SAAQ,UAAU,SAAS;AAAA,IACvH;AAEA,UAAM,eAAe,gBAAgB,oBAAoB,UAAW,QAAQ,iBAA6B,QAAW,QAAQ,KAAK;AACjI,YAAQ,iBAAiB;AAEzB,WAAO,MAAM,QAAQ,IAAI,OAA+B;AAAA,EAC1D;AAAA,EAEQ,WAAW,SAAoD;AACrE,WAAO,QAAQ,eAAe,SAAS,OAAO,QAAQ,SAAS;AAAA,EACjE;AAAA,EAEA,MAAc,4BACZ,WACA,SACA,QACA,UACe;AACf,UAAM,WAAW,OAAO,UAAU,iBAAiB,WAAW,SAAS,eAAe;AACtF,QAAI,CAAC,SAAU;AACf,QAAI;AACF,YAAM,MAAM,QAAQ;AACpB,YAAM,eAAe,SAAS,MAAM;AACpC,YAAM,eAAe,SAAS,cAAc,MAAM;AAClD,YAAM,cAAc,SAAS,QAAQ,KAAK;AAC1C,YAAM,cAAc,SAAS,aAAa,MAAM;AAEhD,YAAM,WAAW;AAAA,QACf,UAAU;AAAA,QACV,kCAAkC,MAAM;AAAA,QACxC,cAAc;AAAA,QACd,cAAc;AAAA,QACd,cAAc;AAAA,QACd,cAAc;AAAA,QACd,aAAa;AAAA,QACb,aAAa;AAAA,QACb,aAAa;AAAA,QACb,aAAa;AAAA,MACf;AAEA,YAAM,iBAAiB;AAAA,QACrB,UAAU;AAAA,QACV,cAAc;AAAA,QACd,cAAc;AAAA,QACd,aAAa;AAAA,QACb,aAAa;AAAA,QACb,IAAI,0BAA0B,IAAI,MAAM,SAAS;AAAA,MACnD;AAEA,YAAM,WAAW;AAAA,QACf,UAAU;AAAA,QACV,cAAc;AAAA,QACd,cAAc;AAAA,QACd,aAAa;AAAA,QACb,aAAa;AAAA,QACb,IAAI,MAAM,YAAY;AAAA,MACxB;AAEA,YAAM,iBAAiB,oBAAoB,UAAU,UAAU,IAAI,MAAM,YAAY,IAAI;AAEzF,YAAM,WAAW,oBAAI,IAAY;AACjC,iBAAW,SAAS,iBAAiB,UAAU,WAAW,IAAI,GAAG;AAC/D,iBAAS,IAAI,KAAK;AAAA,MACpB;AACA,YAAM,UAAU,4BAA4B,SAAS;AACrD,UAAI,QAAS,UAAS,IAAI,OAAO;AACjC,YAAM,cAAc,MAAM,KAAK,QAAQ;AACvC,YAAM;AAAA,QACJ,IAAI;AAAA,QACJ;AAAA,QACA,EAAE,IAAI,UAAU,gBAAgB,SAAS;AAAA,QACzC;AAAA,QACA,WAAW,SAAS;AAAA,QACpB;AAAA,MACF;AAAA,IACF,SAAS,KAAK;AACZ,UAAI,wBAAwB,GAAG;AAC7B,YAAI;AACF,iBAAO,MAAM,qCAAqC,EAAE,WAAW,IAAI,CAAC;AAAA,QACtE,QAAQ;AAAA,QAAC;AAAA,MACX;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAc,yBAAyB,KAAgB,KAA2C;AAChG,UAAM,WAAW,OAAO,IAAI,iBAAiB,WAAW,IAAI,eAAe;AAC3E,QAAI,CAAC,SAAU;AACf,QAAI;AACF,YAAM,WAAW,oBAAoB,IAAI,UAAU;AACnD,YAAM,iBAAiB,oBAAoB,IAAI,gBAAgB,IAAI,0BAA0B,IAAI,MAAM,SAAS,IAAI;AACpH,YAAM,WAAW,oBAAoB,IAAI,UAAU,IAAI,MAAM,YAAY,IAAI;AAC7E,YAAM,iBAAiB,oBAAoB,IAAI,UAAU,IAAI,MAAM,YAAY,IAAI;AACnF,YAAM,WAAW,oBAAI,IAAY;AACjC,iBAAW,SAAS,iBAAiB,IAAI,eAAe,IAAI,GAAG;AAC7D,iBAAS,IAAI,KAAK;AAAA,MACpB;AACA,YAAM,UAAU,4BAA4B,IAAI,SAAS;AACzD,UAAI,QAAS,UAAS,IAAI,OAAO;AACjC,YAAM,cAAc,MAAM,KAAK,QAAQ;AACvC,YAAM;AAAA,QACJ,IAAI;AAAA,QACJ;AAAA,QACA,EAAE,IAAI,UAAU,gBAAgB,SAAS;AAAA,QACzC;AAAA,QACA,WAAW,IAAI,SAAS;AAAA,QACxB;AAAA,MACF;AAAA,IACF,SAAS,KAAK;AACZ,UAAI,wBAAwB,GAAG;AAC7B,YAAI;AACF,iBAAO,MAAM,kCAAkC,EAAE,WAAW,IAAI,WAAW,IAAI,CAAC;AAAA,QAClF,QAAQ;AAAA,QAAC;AAAA,MACX;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAc,qBAAqB,WAA4B,UAAiD;AAC9G,QAAI;AACF,YAAM,aAAc,UAAU,QAAQ,YAAY;AAClD,YAAM,WAAW,sBAAsB,QAAQ;AAAA,IACjD,SAAS,OAAO;AACd,UAAI,iCAAiC,GAAG;AACtC,cAAM;AAAA,MACR;AAAA,IAEF;AAAA,EACF;AACF;AAOA,SAAS,gBAAgB,UAAmB,OAA8B;AACxE,MAAI,CAAC,YAAY,OAAO,aAAa,YAAY,MAAM,QAAQ,QAAQ,GAAG;AACxE,UAAM,WAAyB,EAAE,aAAa,MAAM;AACpD,QAAI,aAAa,OAAW,UAAS,QAAQ;AAC7C,WAAO;AAAA,EACT;AACA,QAAM,UAAU;AAChB,MAAI,iBAAiB,WAAW,QAAQ,gBAAgB,QAAW;AACjE,WAAO;AAAA,EACT;AACA,SAAO,EAAE,aAAa,OAAO,GAAG,QAAQ;AAC1C;",
+  "sourcesContent": ["import type { ActionLog } from '@open-mercato/core/modules/audit_logs/data/entities'\nimport type { ActionLogCreateInput } from '@open-mercato/core/modules/audit_logs/data/validators'\nimport { commandRegistry } from './registry'\nimport type {\n  BulkImportSuppression,\n  CommandExecutionOptions,\n  CommandExecuteResult,\n  CommandHandler,\n  CommandLogBuilderArgs,\n  CommandLogMetadata,\n  CommandRuntimeContext,\n} from './types'\nimport { defaultUndoToken } from './types'\nimport type { ActionLogService } from '@open-mercato/core/modules/audit_logs/services/actionLogService'\nimport type { AwilixContainer } from 'awilix'\nimport type { DataEngine } from '@open-mercato/shared/lib/data/engine'\nimport {\n  canonicalizeResourceTag,\n  deriveResourceFromCommandId,\n  invalidateCrudCache,\n  pickFirstIdentifier,\n  isCrudCacheDebugEnabled,\n} from '@open-mercato/shared/lib/crud/cache'\nimport { normalizeCustomFieldKey } from '@open-mercato/shared/lib/custom-fields/keys'\nimport { getAllCommandInterceptorInstances } from './command-interceptor-store'\nimport {\n  runCommandInterceptorsBefore,\n  runCommandInterceptorsAfter,\n  runCommandInterceptorsBeforeUndo,\n  runCommandInterceptorsAfterUndo,\n} from './command-interceptor-runner'\nimport type { CommandInterceptorContext } from './command-interceptor'\nimport { CommandInterceptorError } from './errors'\nimport { createLogger } from '../logger'\n\nconst logger = createLogger('shared').child({ component: 'commands' })\n\nconst SKIPPED_ACTION_LOG_RESOURCE_KINDS = new Set<string>([\n  'audit_logs.access',\n  'audit_logs.action',\n  'dashboards.layout',\n  'dashboards.user_widgets',\n  'dashboards.role_widgets',\n])\n\nfunction asRecord(input: unknown): Record<string, unknown> | null {\n  if (!input || typeof input !== 'object' || Array.isArray(input)) return null\n  return input as Record<string, unknown>\n}\n\n/** Command handlers often return domain keys (e.g. warehouseId) without `id`; cache invalidation must still resolve the record. */\nfunction extractPrimaryIdFromCommandResult(result: unknown): string | null {\n  const r = asRecord(result)\n  if (!r) return null\n  const direct = pickFirstIdentifier(r.id, r.entityId, r.recordId)\n  if (direct) return direct\n  for (const key of [\n    'warehouseId',\n    'zoneId',\n    'locationId',\n    'lotId',\n    'reservationId',\n    'profileId',\n    'movementId',\n    'balanceId',\n  ]) {\n    const v = r[key]\n    if (typeof v === 'string' && v.trim().length > 0) return v.trim()\n  }\n  return null\n}\n\nfunction toISOString(value: unknown): string | null {\n  if (value instanceof Date) {\n    const iso = value.toISOString()\n    return Number.isNaN(value.getTime()) ? null : iso\n  }\n  if (typeof value === 'string') {\n    const parsed = new Date(value)\n    return Number.isNaN(parsed.getTime()) ? null : parsed.toISOString()\n  }\n  return null\n}\n\nfunction deepEqual(a: unknown, b: unknown, seen?: Set<unknown>): boolean {\n  if (Object.is(a, b)) return true\n  if (a instanceof Date || b instanceof Date) {\n    const aIso = toISOString(a)\n    const bIso = toISOString(b)\n    if (aIso != null && bIso != null) return aIso === bIso\n    return false\n  }\n  if (Array.isArray(a) && Array.isArray(b)) {\n    if (a.length !== b.length) return false\n    return a.every((value, index) => deepEqual(value, b[index], seen))\n  }\n  if (a && b && typeof a === 'object' && typeof b === 'object') {\n    if (!seen) seen = new Set()\n    if (seen.has(a) || seen.has(b)) return false\n    seen.add(a)\n    seen.add(b)\n    const aRec = a as Record<string, unknown>\n    const bRec = b as Record<string, unknown>\n    const keysA = Object.keys(aRec)\n    const keysB = Object.keys(bRec)\n    if (keysA.length !== keysB.length) return false\n    return keysA.every((key) => deepEqual(aRec[key], bRec[key], seen))\n  }\n  return false\n}\n\nconst CUSTOM_FIELD_CONTAINER_KEYS = new Set(['custom', 'customFields', 'customValues', 'cf'])\nconst SKIPPED_CHANGE_KEYS = new Set(['updatedAt', 'updated_at'])\n\nfunction appendCustomFieldChanges(\n  changes: Record<string, { from: unknown; to: unknown }>,\n  before: unknown,\n  after: unknown\n): boolean {\n  const beforeRec = asRecord(before)\n  const afterRec = asRecord(after)\n  if (!beforeRec && !afterRec) return false\n  const left = beforeRec ?? {}\n  const right = afterRec ?? {}\n  const keys = new Set([...Object.keys(left), ...Object.keys(right)])\n  for (const key of keys) {\n    const from = left[key]\n    const to = right[key]\n    if (!deepEqual(from, to)) {\n      changes[normalizeCustomFieldKey(key)] = { from, to }\n    }\n  }\n  return true\n}\n\nfunction buildRecordChanges(\n  before: Record<string, unknown>,\n  after: Record<string, unknown>,\n): Record<string, { from: unknown; to: unknown }> {\n  return buildRecordChangesDeep(before, after)\n}\n\nfunction buildRecordChangesDeep(\n  before: Record<string, unknown>,\n  after: Record<string, unknown>,\n  prefix?: string,\n  seen?: Set<unknown>,\n): Record<string, { from: unknown; to: unknown }> {\n  const changes: Record<string, { from: unknown; to: unknown }> = {}\n  if (!seen) seen = new Set()\n  if (seen.has(before) || seen.has(after)) return changes\n  seen.add(before)\n  seen.add(after)\n  const keys = new Set([...Object.keys(before), ...Object.keys(after)])\n  for (const key of keys) {\n    if (SKIPPED_CHANGE_KEYS.has(key)) continue\n    if (CUSTOM_FIELD_CONTAINER_KEYS.has(key)) {\n      const handled = appendCustomFieldChanges(changes, before[key], after[key])\n      if (handled) continue\n    }\n    const from = before[key]\n    const to = after[key]\n    const path = prefix ? `${prefix}.${key}` : key\n    const fromRec = asRecord(from)\n    const toRec = asRecord(to)\n    if (fromRec && toRec) {\n      const nested = buildRecordChangesDeep(fromRec, toRec, path, seen)\n      if (Object.keys(nested).length) {\n        Object.assign(changes, nested)\n        continue\n      }\n    }\n    if (!deepEqual(from, to)) {\n      changes[path] = { from, to }\n    }\n  }\n  return changes\n}\n\nfunction deriveChangesFromSnapshots(\n  before: unknown,\n  after: unknown,\n): Record<string, { from: unknown; to: unknown }> | null {\n  const beforeRec = asRecord(before)\n  const afterRec = asRecord(after)\n  if (!beforeRec || !afterRec) return null\n  const changes = buildRecordChanges(beforeRec, afterRec)\n  return Object.keys(changes).length ? changes : null\n}\n\nfunction invertRecordedChanges(\n  changes: unknown,\n): Record<string, { from: unknown; to: unknown }> | null {\n  const source = asRecord(changes)\n  if (!source) return null\n  const inverted: Record<string, { from: unknown; to: unknown }> = {}\n  for (const [key, value] of Object.entries(source)) {\n    const entry = asRecord(value)\n    if (!entry || (!('from' in entry) && !('to' in entry))) continue\n    inverted[key] = {\n      from: entry.to,\n      to: entry.from,\n    }\n  }\n  return Object.keys(inverted).length ? inverted : null\n}\n\nfunction extractAliasList(source: unknown): string[] {\n  if (!source || typeof source !== 'object' || Array.isArray(source)) return []\n  const record = source as Record<string, unknown>\n  const raw = record.cacheAliases\n  if (!Array.isArray(raw)) return []\n  const aliases = new Set<string>()\n  for (const value of raw) {\n    if (typeof value !== 'string') continue\n    const normalized = canonicalizeResourceTag(value)\n    if (normalized) aliases.add(normalized)\n  }\n  return Array.from(aliases)\n}\n\nexport class CommandBus {\n  async execute<TInput = unknown, TResult = unknown>(\n    commandId: string,\n    options: CommandExecutionOptions<TInput>\n  ): Promise<CommandExecuteResult<TResult>> {\n    const handler = await this.resolveHandler<TInput, TResult>(commandId)\n\n    // Run beforeExecute command interceptors\n    const allInterceptors = getAllCommandInterceptorInstances()\n    let interceptorMetadata = new Map<string, Record<string, unknown>>()\n    let effectiveOptions = options\n    const userFeatures = allInterceptors.length\n      ? await this.resolveUserFeaturesForInterceptors(options.ctx)\n      : []\n    if (allInterceptors.length) {\n      const interceptorCtx: CommandInterceptorContext = {\n        commandId,\n        auth: options.ctx.auth ?? null,\n        selectedOrganizationId: options.ctx.selectedOrganizationId ?? options.ctx.auth?.orgId ?? null,\n        container: options.ctx.container,\n      }\n      const beforeResult = await runCommandInterceptorsBefore(\n        allInterceptors, commandId, options.input, interceptorCtx, userFeatures,\n      )\n      if (!beforeResult.ok) {\n        throw new CommandInterceptorError(beforeResult.error!.message)\n      }\n      interceptorMetadata = beforeResult.metadataByInterceptor\n      if (beforeResult.modifiedInput) {\n        effectiveOptions = {\n          ...options,\n          input: { ...(options.input as object), ...beforeResult.modifiedInput } as TInput,\n        }\n      }\n    }\n\n    const snapshots = await this.prepareSnapshots(handler, effectiveOptions)\n    const redoLogEntry = effectiveOptions.redoLogEntry ?? null\n    const result =\n      redoLogEntry && typeof handler.redo === 'function'\n        ? await handler.redo({ input: effectiveOptions.input, ctx: effectiveOptions.ctx, logEntry: redoLogEntry })\n        : await handler.execute(effectiveOptions.input, effectiveOptions.ctx)\n    const afterSnapshot = await this.captureAfter(handler, effectiveOptions, result)\n    const snapshotsWithAfter = { ...snapshots, after: afterSnapshot }\n    const logMeta = await this.buildLog(handler, effectiveOptions, result, snapshotsWithAfter)\n    let mergedMeta = this.mergeMetadata(effectiveOptions.metadata, logMeta)\n    const undoable = this.isUndoable(handler)\n    if (undoable) {\n      mergedMeta = mergedMeta ?? {}\n      if (!mergedMeta.undoToken) mergedMeta.undoToken = defaultUndoToken()\n      if (mergedMeta.actorUserId === undefined) mergedMeta.actorUserId = effectiveOptions.ctx.auth?.sub ?? null\n    }\n    if (afterSnapshot !== undefined && afterSnapshot !== null) {\n      if (!mergedMeta) {\n        mergedMeta = { snapshotAfter: afterSnapshot }\n      } else if (!mergedMeta.snapshotAfter) {\n        mergedMeta.snapshotAfter = afterSnapshot\n      }\n    }\n    if (snapshots.before) {\n      if (!mergedMeta) {\n        mergedMeta = { snapshotBefore: snapshots.before }\n      } else if (!mergedMeta.snapshotBefore) {\n        mergedMeta.snapshotBefore = snapshots.before\n      }\n    }\n    if (mergedMeta?.snapshotBefore !== undefined && mergedMeta?.snapshotAfter !== undefined) {\n      const currentChanges = mergedMeta.changes\n      const shouldInfer =\n        currentChanges === undefined ||\n        currentChanges === null ||\n        (typeof currentChanges === 'object' && !Array.isArray(currentChanges) && Object.keys(currentChanges).length === 0)\n      if (shouldInfer) {\n        const inferred = deriveChangesFromSnapshots(mergedMeta.snapshotBefore, mergedMeta.snapshotAfter)\n        if (inferred) mergedMeta.changes = inferred\n      }\n    }\n    const logEntry = await this.persistLog(commandId, effectiveOptions, mergedMeta)\n\n    // Run afterExecute command interceptors\n    let finalResult = result\n    if (allInterceptors.length) {\n      const interceptorCtx: CommandInterceptorContext = {\n        commandId,\n        auth: effectiveOptions.ctx.auth ?? null,\n        selectedOrganizationId: effectiveOptions.ctx.selectedOrganizationId ?? effectiveOptions.ctx.auth?.orgId ?? null,\n        container: effectiveOptions.ctx.container,\n      }\n      const afterResult = await runCommandInterceptorsAfter(\n        allInterceptors, commandId, effectiveOptions.input, result, interceptorCtx,\n        userFeatures, interceptorMetadata,\n      )\n      if (afterResult.modifiedResult && typeof result === 'object' && result) {\n        finalResult = { ...(result as object), ...afterResult.modifiedResult } as Awaited<TResult>\n      }\n    }\n\n    if (!effectiveOptions.skipCacheInvalidation) {\n      await this.invalidateCacheAfterExecute(commandId, effectiveOptions, finalResult, mergedMeta)\n    }\n    // Bulk-import backfills defer heavy per-record side effects: the ctx flags are read here and\n    // threaded as a local into the flush (never stored on the shared dataEngine), so a concurrent\n    // command with different flags can't observe them. Reindex is restored by the caller's\n    // end-of-run `query_index rebuild`. Mirrors `skipCacheInvalidation` above.\n    await this.flushCrudSideEffects(effectiveOptions.ctx.container, effectiveOptions.ctx?.bulkImport)\n    return { result: finalResult, logEntry }\n  }\n\n  async undo(undoToken: string, ctx: CommandRuntimeContext): Promise<void> {\n    const service = (ctx.container.resolve('actionLogService') as ActionLogService)\n    const log = await service.findByUndoToken(undoToken)\n    if (!log) throw new Error('Undo token expired or not found')\n    const handler = await this.resolveHandler(log.commandId)\n    if (!handler.undo || this.isUndoable(handler) === false) {\n      throw new Error(`Command ${log.commandId} is not undoable`)\n    }\n\n    // Atomically claim the action-log row before running any undo side effects.\n    // Two concurrent requests holding the same undo token can both pass\n    // findByUndoToken/executionState checks; the compare-and-set below ensures\n    // only one transitions `done` -> `undoing` and proceeds, the other bails out.\n    const claimed = await service.claimForUndo(log.id)\n    if (!claimed) throw new Error('Undo token already consumed')\n\n    try {\n      // Run beforeUndo command interceptors\n      const allInterceptors = getAllCommandInterceptorInstances()\n      let undoInterceptorMetadata = new Map<string, Record<string, unknown>>()\n      const userFeatures = allInterceptors.length\n        ? await this.resolveUserFeaturesForInterceptors(ctx)\n        : []\n      if (allInterceptors.length) {\n        const undoCtx = { input: log.commandPayload, logEntry: log, undoToken }\n        const interceptorCtx: CommandInterceptorContext = {\n          commandId: log.commandId,\n          auth: ctx.auth ?? null,\n          selectedOrganizationId: ctx.selectedOrganizationId ?? ctx.auth?.orgId ?? null,\n          container: ctx.container,\n        }\n        const beforeResult = await runCommandInterceptorsBeforeUndo(\n          allInterceptors, log.commandId, undoCtx, interceptorCtx, userFeatures,\n        )\n        if (!beforeResult.ok) {\n          throw new CommandInterceptorError(beforeResult.error!.message)\n        }\n        undoInterceptorMetadata = beforeResult.metadataByInterceptor\n      }\n\n      await handler.undo({\n        input: log.commandPayload as Parameters<NonNullable<typeof handler.undo>>[0]['input'],\n        ctx,\n        logEntry: log,\n      })\n      await service.markUndone(log.id, this.buildUndoTraceLog(log, ctx))\n\n      // Run afterUndo command interceptors\n      if (allInterceptors.length) {\n        const undoCtx = { input: log.commandPayload, logEntry: log, undoToken }\n        const interceptorCtx: CommandInterceptorContext = {\n          commandId: log.commandId,\n          auth: ctx.auth ?? null,\n          selectedOrganizationId: ctx.selectedOrganizationId ?? ctx.auth?.orgId ?? null,\n          container: ctx.container,\n        }\n        await runCommandInterceptorsAfterUndo(\n          allInterceptors, log.commandId, undoCtx, interceptorCtx,\n          userFeatures, undoInterceptorMetadata,\n        )\n      }\n\n      await this.invalidateCacheAfterUndo(log, ctx)\n      await this.flushCrudSideEffects(ctx.container)\n    } catch (err) {\n      // Undo failed after claiming the row \u2014 release the claim so the action\n      // remains retryable instead of being stranded in the `undoing` state.\n      await service.releaseUndoClaim(log.id).catch(() => {})\n      throw err\n    }\n  }\n\n  private buildUndoTraceLog(log: ActionLog, ctx: CommandRuntimeContext): ActionLogCreateInput | undefined {\n    const snapshotBefore = log.snapshotAfter ?? null\n    const snapshotAfter = log.snapshotBefore ?? null\n    const changes =\n      deriveChangesFromSnapshots(snapshotBefore, snapshotAfter)\n      ?? invertRecordedChanges(log.changesJson)\n      ?? undefined\n\n    const baseContext = asRecord(log.contextJson) ?? {}\n    const context = {\n      ...baseContext,\n      historyAction: 'undo',\n      sourceLogId: log.id,\n      sourceCommandId: log.commandId,\n    }\n\n    return {\n      tenantId: log.tenantId ?? ctx.auth?.tenantId ?? null,\n      organizationId: log.organizationId ?? ctx.selectedOrganizationId ?? ctx.auth?.orgId ?? null,\n      actorUserId: ctx.auth?.sub ?? log.actorUserId ?? null,\n      commandId: log.commandId,\n      actionLabel: log.actionLabel ?? undefined,\n      resourceKind: log.resourceKind ?? undefined,\n      resourceId: log.resourceId ?? undefined,\n      parentResourceKind: log.parentResourceKind ?? null,\n      parentResourceId: log.parentResourceId ?? null,\n      relatedResourceKind: log.relatedResourceKind ?? null,\n      relatedResourceId: log.relatedResourceId ?? null,\n      snapshotBefore,\n      snapshotAfter,\n      changes,\n      context,\n    }\n  }\n\n  private async resolveUserFeaturesForInterceptors(ctx: CommandRuntimeContext): Promise<string[]> {\n    if (!ctx.auth) return []\n    try {\n      type RbacLike = { getGrantedFeatures: (userId: string, opts: { tenantId: string | null; organizationId: string | null }) => Promise<string[]> }\n      const rbac = ctx.container.resolve('rbacService') as RbacLike | undefined\n      if (rbac?.getGrantedFeatures) {\n        return await rbac.getGrantedFeatures(ctx.auth.sub, {\n          tenantId: ctx.auth.tenantId,\n          organizationId: ctx.selectedOrganizationId ?? ctx.auth.orgId,\n        })\n      }\n    } catch {\n      // Intentional: rbacService is not registered in all runtime contexts (CLI, tests, bootstrap).\n      // Falling through to return [] is safe \u2014 interceptors without feature gating still run.\n    }\n    return []\n  }\n\n  private async resolveHandler<TInput, TResult>(commandId: string): Promise<CommandHandler<TInput, TResult>> {\n    const handler =\n      commandRegistry.get<TInput, TResult>(commandId) ??\n      ((await commandRegistry.load(commandId)) as CommandHandler<TInput, TResult> | null)\n    if (!handler) {\n      const moduleName = commandId.split('.')[0]\n      const registered = commandRegistry.list()\n      const sameModule = registered.filter((id) => id.split('.')[0] === moduleName)\n      const registeredLoaders = commandRegistry.listLoaders()\n      const sameModuleLoaders = registeredLoaders.filter((id) => id === commandId || id.startsWith(`${moduleName}:`))\n      const hint = sameModule.length > 0\n        ? ` Registered commands for module \"${moduleName}\": [${sameModule.join(', ')}].`\n        : sameModuleLoaders.length > 0\n          ? ` Command loaders for module \"${moduleName}\" were registered but none loaded \"${commandId}\".`\n          : ` No commands or command loaders registered for module \"${moduleName}\". Ensure the command file is imported or generated lazy command loaders are registered.`\n      throw new Error(`Command handler not registered for id ${commandId}.${hint}`)\n    }\n    return handler\n  }\n\n  private async prepareSnapshots<TInput, TResult>(\n    handler: CommandHandler<TInput, TResult>,\n    options: CommandExecutionOptions<TInput>\n  ): Promise<{ before?: unknown }> {\n    if (!handler.prepare) return {}\n    try {\n      return (await handler.prepare(options.input, options.ctx)) || {}\n    } catch (err) {\n      throw err\n    }\n  }\n\n  private async captureAfter<TInput, TResult>(\n    handler: CommandHandler<TInput, TResult>,\n    options: CommandExecutionOptions<TInput>,\n    result: TResult\n  ): Promise<unknown> {\n    if (!handler.captureAfter) return undefined\n    return handler.captureAfter(options.input, result, options.ctx)\n  }\n\n  private async buildLog<TInput, TResult>(\n    handler: CommandHandler<TInput, TResult>,\n    options: CommandExecutionOptions<TInput>,\n    result: TResult,\n    snapshots: { before?: unknown; after?: unknown }\n  ): Promise<CommandLogMetadata | null> {\n    if (!handler.buildLog) return null\n    const args: CommandLogBuilderArgs<TInput, TResult> = {\n      input: options.input,\n      result,\n      ctx: options.ctx,\n      snapshots,\n    }\n    return (await handler.buildLog(args)) || null\n  }\n\n  private mergeMetadata(primary?: CommandLogMetadata | null, secondary?: CommandLogMetadata | null): CommandLogMetadata | null {\n    if (!primary && !secondary) return null\n    return {\n      skipLog: secondary?.skipLog ?? primary?.skipLog ?? false,\n      tenantId: secondary?.tenantId ?? primary?.tenantId ?? null,\n      organizationId: secondary?.organizationId ?? primary?.organizationId ?? null,\n      actorUserId: secondary?.actorUserId ?? primary?.actorUserId ?? null,\n      actionLabel: secondary?.actionLabel ?? primary?.actionLabel ?? null,\n      resourceKind: secondary?.resourceKind ?? primary?.resourceKind ?? null,\n      resourceId: secondary?.resourceId ?? primary?.resourceId ?? null,\n      parentResourceKind: secondary?.parentResourceKind ?? primary?.parentResourceKind ?? null,\n      parentResourceId: secondary?.parentResourceId ?? primary?.parentResourceId ?? null,\n      relatedResourceKind: secondary?.relatedResourceKind ?? primary?.relatedResourceKind ?? null,\n      relatedResourceId: secondary?.relatedResourceId ?? primary?.relatedResourceId ?? null,\n      undoToken: secondary?.undoToken ?? primary?.undoToken ?? null,\n      payload: secondary?.payload ?? primary?.payload ?? null,\n      snapshotBefore: secondary?.snapshotBefore ?? primary?.snapshotBefore ?? null,\n      snapshotAfter: secondary?.snapshotAfter ?? primary?.snapshotAfter ?? null,\n      changes: secondary?.changes ?? primary?.changes ?? null,\n      context: secondary?.context ?? primary?.context ?? null,\n    }\n  }\n\n  private async persistLog<TInput>(\n    commandId: string,\n    options: CommandExecutionOptions<TInput>,\n    metadata: CommandLogMetadata | null\n  ): Promise<ActionLog | null> {\n    if (!metadata) return null\n    if (metadata.skipLog) return null\n    const resourceKind =\n      typeof metadata.resourceKind === 'string' ? metadata.resourceKind : null\n    if (resourceKind && SKIPPED_ACTION_LOG_RESOURCE_KINDS.has(resourceKind)) {\n      return null\n    }\n    let service: ActionLogService | null = null\n    try {\n      service = (options.ctx.container.resolve('actionLogService') as ActionLogService)\n    } catch {\n      service = null\n    }\n    if (!service) return null\n\n    const tenantId = metadata.tenantId ?? options.ctx.auth?.tenantId ?? null\n    const organizationId =\n      metadata.organizationId ?? options.ctx.selectedOrganizationId ?? options.ctx.auth?.orgId ?? null\n    const actorUserId = metadata.actorUserId ?? options.ctx.auth?.sub ?? null\n    const payload: Record<string, unknown> = {\n      tenantId: tenantId ?? undefined,\n      organizationId: organizationId ?? undefined,\n      actorUserId: actorUserId ?? undefined,\n      commandId,\n    }\n\n    if (metadata) {\n      if ('actionLabel' in metadata && metadata.actionLabel != null) payload.actionLabel = metadata.actionLabel\n      if ('resourceKind' in metadata && metadata.resourceKind != null) payload.resourceKind = metadata.resourceKind\n      if ('resourceId' in metadata && metadata.resourceId != null) payload.resourceId = metadata.resourceId\n      if ('parentResourceKind' in metadata && metadata.parentResourceKind != null) payload.parentResourceKind = metadata.parentResourceKind\n      if ('parentResourceId' in metadata && metadata.parentResourceId != null) payload.parentResourceId = metadata.parentResourceId\n      if ('relatedResourceKind' in metadata && metadata.relatedResourceKind != null) payload.relatedResourceKind = metadata.relatedResourceKind\n      if ('relatedResourceId' in metadata && metadata.relatedResourceId != null) payload.relatedResourceId = metadata.relatedResourceId\n      if ('undoToken' in metadata && metadata.undoToken != null) payload.undoToken = metadata.undoToken\n      if ('payload' in metadata && metadata.payload !== undefined) payload.commandPayload = metadata.payload\n      if ('snapshotBefore' in metadata && metadata.snapshotBefore !== undefined) payload.snapshotBefore = metadata.snapshotBefore\n      if ('snapshotAfter' in metadata && metadata.snapshotAfter !== undefined) payload.snapshotAfter = metadata.snapshotAfter\n      if ('changes' in metadata && metadata.changes !== undefined && metadata.changes !== null) payload.changes = metadata.changes\n      if ('context' in metadata && metadata.context !== undefined && metadata.context !== null) payload.context = metadata.context\n    }\n\n    const redoEnvelope = wrapRedoPayload('commandPayload' in payload ? (payload.commandPayload as unknown) : undefined, options.input)\n    payload.commandPayload = redoEnvelope\n\n    return await service.log(payload as ActionLogCreateInput)\n  }\n\n  private isUndoable(handler: CommandHandler<unknown, unknown>): boolean {\n    return handler.isUndoable !== false && typeof handler.undo === 'function'\n  }\n\n  private async invalidateCacheAfterExecute<TResult>(\n    commandId: string,\n    options: CommandExecutionOptions<unknown>,\n    result: TResult,\n    metadata: CommandLogMetadata | null\n  ): Promise<void> {\n    const resource = typeof metadata?.resourceKind === 'string' ? metadata.resourceKind : null\n    if (!resource) return\n    try {\n      const ctx = options.ctx\n      const resultRecord = asRecord(result)\n      const resultEntity = asRecord(resultRecord?.entity)\n      const inputRecord = asRecord(options.input)\n      const inputEntity = asRecord(inputRecord?.entity)\n\n      const recordId = pickFirstIdentifier(\n        metadata?.resourceId,\n        extractPrimaryIdFromCommandResult(result),\n        resultRecord?.entityId,\n        resultRecord?.id,\n        resultRecord?.recordId,\n        resultEntity?.id,\n        inputRecord?.id,\n        inputRecord?.entityId,\n        inputRecord?.recordId,\n        inputEntity?.id\n      )\n\n      const organizationId = pickFirstIdentifier(\n        metadata?.organizationId,\n        resultRecord?.organizationId,\n        resultEntity?.organizationId,\n        inputRecord?.organizationId,\n        inputEntity?.organizationId,\n        ctx.selectedOrganizationId ?? ctx.auth?.orgId ?? null\n      )\n\n      const tenantId = pickFirstIdentifier(\n        metadata?.tenantId,\n        resultRecord?.tenantId,\n        resultEntity?.tenantId,\n        inputRecord?.tenantId,\n        inputEntity?.tenantId,\n        ctx.auth?.tenantId ?? null\n      )\n\n      const fallbackTenant = pickFirstIdentifier(metadata?.tenantId, ctx.auth?.tenantId ?? null)\n\n      const aliasSet = new Set<string>()\n      for (const alias of extractAliasList(metadata?.context ?? null)) {\n        aliasSet.add(alias)\n      }\n      const derived = deriveResourceFromCommandId(commandId)\n      if (derived) aliasSet.add(derived)\n      const aliasExtras = Array.from(aliasSet)\n      await invalidateCrudCache(\n        ctx.container,\n        resource,\n        { id: recordId, organizationId, tenantId },\n        fallbackTenant,\n        `command:${commandId}:execute`,\n        aliasExtras\n      )\n    } catch (err) {\n      if (isCrudCacheDebugEnabled()) {\n        try {\n          logger.debug('Cache execute-invalidation failed', { commandId, err })\n        } catch {}\n      }\n    }\n  }\n\n  private async invalidateCacheAfterUndo(log: ActionLog, ctx: CommandRuntimeContext): Promise<void> {\n    const resource = typeof log.resourceKind === 'string' ? log.resourceKind : null\n    if (!resource) return\n    try {\n      const recordId = pickFirstIdentifier(log.resourceId)\n      const organizationId = pickFirstIdentifier(log.organizationId, ctx.selectedOrganizationId ?? ctx.auth?.orgId ?? null)\n      const tenantId = pickFirstIdentifier(log.tenantId, ctx.auth?.tenantId ?? null)\n      const fallbackTenant = pickFirstIdentifier(log.tenantId, ctx.auth?.tenantId ?? null)\n      const aliasSet = new Set<string>()\n      for (const alias of extractAliasList(log.contextJson ?? null)) {\n        aliasSet.add(alias)\n      }\n      const derived = deriveResourceFromCommandId(log.commandId)\n      if (derived) aliasSet.add(derived)\n      const aliasExtras = Array.from(aliasSet)\n      await invalidateCrudCache(\n        ctx.container,\n        resource,\n        { id: recordId, organizationId, tenantId },\n        fallbackTenant,\n        `command:${log.commandId}:undo`,\n        aliasExtras\n      )\n    } catch (err) {\n      if (isCrudCacheDebugEnabled()) {\n        try {\n          logger.debug('Cache undo-invalidation failed', { commandId: log.commandId, err })\n        } catch {}\n      }\n    }\n  }\n\n  private async flushCrudSideEffects(container: AwilixContainer, suppress?: BulkImportSuppression): Promise<void> {\n    try {\n      const dataEngine = (container.resolve('dataEngine') as DataEngine)\n      await dataEngine.flushOrmEntityChanges(suppress)\n    } catch {\n      // best-effort: failures should not block command execution\n    }\n  }\n}\n\ntype RedoEnvelope = {\n  __redoInput: unknown\n  [key: string]: unknown\n}\n\nfunction wrapRedoPayload(existing: unknown, input: unknown): RedoEnvelope {\n  if (!existing || typeof existing !== 'object' || Array.isArray(existing)) {\n    const envelope: RedoEnvelope = { __redoInput: input }\n    if (existing !== undefined) envelope.value = existing\n    return envelope\n  }\n  const current = existing as Record<string, unknown>\n  if ('__redoInput' in current && current.__redoInput !== undefined) {\n    return current as RedoEnvelope\n  }\n  return { __redoInput: input, ...current }\n}\n"],
+  "mappings": "AAEA,SAAS,uBAAuB;AAUhC,SAAS,wBAAwB;AAIjC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,+BAA+B;AACxC,SAAS,yCAAyC;AAClD;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP,SAAS,+BAA+B;AACxC,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,QAAQ,EAAE,MAAM,EAAE,WAAW,WAAW,CAAC;AAErE,MAAM,oCAAoC,oBAAI,IAAY;AAAA,EACxD;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAED,SAAS,SAAS,OAAgD;AAChE,MAAI,CAAC,SAAS,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK,EAAG,QAAO;AACxE,SAAO;AACT;AAGA,SAAS,kCAAkC,QAAgC;AACzE,QAAM,IAAI,SAAS,MAAM;AACzB,MAAI,CAAC,EAAG,QAAO;AACf,QAAM,SAAS,oBAAoB,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ;AAC/D,MAAI,OAAQ,QAAO;AACnB,aAAW,OAAO;AAAA,IAChB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,GAAG;AACD,UAAM,IAAI,EAAE,GAAG;AACf,QAAI,OAAO,MAAM,YAAY,EAAE,KAAK,EAAE,SAAS,EAAG,QAAO,EAAE,KAAK;AAAA,EAClE;AACA,SAAO;AACT;AAEA,SAAS,YAAY,OAA+B;AAClD,MAAI,iBAAiB,MAAM;AACzB,UAAM,MAAM,MAAM,YAAY;AAC9B,WAAO,OAAO,MAAM,MAAM,QAAQ,CAAC,IAAI,OAAO;AAAA,EAChD;AACA,MAAI,OAAO,UAAU,UAAU;AAC7B,UAAM,SAAS,IAAI,KAAK,KAAK;AAC7B,WAAO,OAAO,MAAM,OAAO,QAAQ,CAAC,IAAI,OAAO,OAAO,YAAY;AAAA,EACpE;AACA,SAAO;AACT;AAEA,SAAS,UAAU,GAAY,GAAY,MAA8B;AACvE,MAAI,OAAO,GAAG,GAAG,CAAC,EAAG,QAAO;AAC5B,MAAI,aAAa,QAAQ,aAAa,MAAM;AAC1C,UAAM,OAAO,YAAY,CAAC;AAC1B,UAAM,OAAO,YAAY,CAAC;AAC1B,QAAI,QAAQ,QAAQ,QAAQ,KAAM,QAAO,SAAS;AAClD,WAAO;AAAA,EACT;AACA,MAAI,MAAM,QAAQ,CAAC,KAAK,MAAM,QAAQ,CAAC,GAAG;AACxC,QAAI,EAAE,WAAW,EAAE,OAAQ,QAAO;AAClC,WAAO,EAAE,MAAM,CAAC,OAAO,UAAU,UAAU,OAAO,EAAE,KAAK,GAAG,IAAI,CAAC;AAAA,EACnE;AACA,MAAI,KAAK,KAAK,OAAO,MAAM,YAAY,OAAO,MAAM,UAAU;AAC5D,QAAI,CAAC,KAAM,QAAO,oBAAI,IAAI;AAC1B,QAAI,KAAK,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,EAAG,QAAO;AACvC,SAAK,IAAI,CAAC;AACV,SAAK,IAAI,CAAC;AACV,UAAM,OAAO;AACb,UAAM,OAAO;AACb,UAAM,QAAQ,OAAO,KAAK,IAAI;AAC9B,UAAM,QAAQ,OAAO,KAAK,IAAI;AAC9B,QAAI,MAAM,WAAW,MAAM,OAAQ,QAAO;AAC1C,WAAO,MAAM,MAAM,CAAC,QAAQ,UAAU,KAAK,GAAG,GAAG,KAAK,GAAG,GAAG,IAAI,CAAC;AAAA,EACnE;AACA,SAAO;AACT;AAEA,MAAM,8BAA8B,oBAAI,IAAI,CAAC,UAAU,gBAAgB,gBAAgB,IAAI,CAAC;AAC5F,MAAM,sBAAsB,oBAAI,IAAI,CAAC,aAAa,YAAY,CAAC;AAE/D,SAAS,yBACP,SACA,QACA,OACS;AACT,QAAM,YAAY,SAAS,MAAM;AACjC,QAAM,WAAW,SAAS,KAAK;AAC/B,MAAI,CAAC,aAAa,CAAC,SAAU,QAAO;AACpC,QAAM,OAAO,aAAa,CAAC;AAC3B,QAAM,QAAQ,YAAY,CAAC;AAC3B,QAAM,OAAO,oBAAI,IAAI,CAAC,GAAG,OAAO,KAAK,IAAI,GAAG,GAAG,OAAO,KAAK,KAAK,CAAC,CAAC;AAClE,aAAW,OAAO,MAAM;AACtB,UAAM,OAAO,KAAK,GAAG;AACrB,UAAM,KAAK,MAAM,GAAG;AACpB,QAAI,CAAC,UAAU,MAAM,EAAE,GAAG;AACxB,cAAQ,wBAAwB,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG;AAAA,IACrD;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,mBACP,QACA,OACgD;AAChD,SAAO,uBAAuB,QAAQ,KAAK;AAC7C;AAEA,SAAS,uBACP,QACA,OACA,QACA,MACgD;AAChD,QAAM,UAA0D,CAAC;AACjE,MAAI,CAAC,KAAM,QAAO,oBAAI,IAAI;AAC1B,MAAI,KAAK,IAAI,MAAM,KAAK,KAAK,IAAI,KAAK,EAAG,QAAO;AAChD,OAAK,IAAI,MAAM;AACf,OAAK,IAAI,KAAK;AACd,QAAM,OAAO,oBAAI,IAAI,CAAC,GAAG,OAAO,KAAK,MAAM,GAAG,GAAG,OAAO,KAAK,KAAK,CAAC,CAAC;AACpE,aAAW,OAAO,MAAM;AACtB,QAAI,oBAAoB,IAAI,GAAG,EAAG;AAClC,QAAI,4BAA4B,IAAI,GAAG,GAAG;AACxC,YAAM,UAAU,yBAAyB,SAAS,OAAO,GAAG,GAAG,MAAM,GAAG,CAAC;AACzE,UAAI,QAAS;AAAA,IACf;AACA,UAAM,OAAO,OAAO,GAAG;AACvB,UAAM,KAAK,MAAM,GAAG;AACpB,UAAM,OAAO,SAAS,GAAG,MAAM,IAAI,GAAG,KAAK;AAC3C,UAAM,UAAU,SAAS,IAAI;AAC7B,UAAM,QAAQ,SAAS,EAAE;AACzB,QAAI,WAAW,OAAO;AACpB,YAAM,SAAS,uBAAuB,SAAS,OAAO,MAAM,IAAI;AAChE,UAAI,OAAO,KAAK,MAAM,EAAE,QAAQ;AAC9B,eAAO,OAAO,SAAS,MAAM;AAC7B;AAAA,MACF;AAAA,IACF;AACA,QAAI,CAAC,UAAU,MAAM,EAAE,GAAG;AACxB,cAAQ,IAAI,IAAI,EAAE,MAAM,GAAG;AAAA,IAC7B;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,2BACP,QACA,OACuD;AACvD,QAAM,YAAY,SAAS,MAAM;AACjC,QAAM,WAAW,SAAS,KAAK;AAC/B,MAAI,CAAC,aAAa,CAAC,SAAU,QAAO;AACpC,QAAM,UAAU,mBAAmB,WAAW,QAAQ;AACtD,SAAO,OAAO,KAAK,OAAO,EAAE,SAAS,UAAU;AACjD;AAEA,SAAS,sBACP,SACuD;AACvD,QAAM,SAAS,SAAS,OAAO;AAC/B,MAAI,CAAC,OAAQ,QAAO;AACpB,QAAM,WAA2D,CAAC;AAClE,aAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,MAAM,GAAG;AACjD,UAAM,QAAQ,SAAS,KAAK;AAC5B,QAAI,CAAC,SAAU,EAAE,UAAU,UAAU,EAAE,QAAQ,OAAS;AACxD,aAAS,GAAG,IAAI;AAAA,MACd,MAAM,MAAM;AAAA,MACZ,IAAI,MAAM;AAAA,IACZ;AAAA,EACF;AACA,SAAO,OAAO,KAAK,QAAQ,EAAE,SAAS,WAAW;AACnD;AAEA,SAAS,iBAAiB,QAA2B;AACnD,MAAI,CAAC,UAAU,OAAO,WAAW,YAAY,MAAM,QAAQ,MAAM,EAAG,QAAO,CAAC;AAC5E,QAAM,SAAS;AACf,QAAM,MAAM,OAAO;AACnB,MAAI,CAAC,MAAM,QAAQ,GAAG,EAAG,QAAO,CAAC;AACjC,QAAM,UAAU,oBAAI,IAAY;AAChC,aAAW,SAAS,KAAK;AACvB,QAAI,OAAO,UAAU,SAAU;AAC/B,UAAM,aAAa,wBAAwB,KAAK;AAChD,QAAI,WAAY,SAAQ,IAAI,UAAU;AAAA,EACxC;AACA,SAAO,MAAM,KAAK,OAAO;AAC3B;AAEO,MAAM,WAAW;AAAA,EACtB,MAAM,QACJ,WACA,SACwC;AACxC,UAAM,UAAU,MAAM,KAAK,eAAgC,SAAS;AAGpE,UAAM,kBAAkB,kCAAkC;AAC1D,QAAI,sBAAsB,oBAAI,IAAqC;AACnE,QAAI,mBAAmB;AACvB,UAAM,eAAe,gBAAgB,SACjC,MAAM,KAAK,mCAAmC,QAAQ,GAAG,IACzD,CAAC;AACL,QAAI,gBAAgB,QAAQ;AAC1B,YAAM,iBAA4C;AAAA,QAChD;AAAA,QACA,MAAM,QAAQ,IAAI,QAAQ;AAAA,QAC1B,wBAAwB,QAAQ,IAAI,0BAA0B,QAAQ,IAAI,MAAM,SAAS;AAAA,QACzF,WAAW,QAAQ,IAAI;AAAA,MACzB;AACA,YAAM,eAAe,MAAM;AAAA,QACzB;AAAA,QAAiB;AAAA,QAAW,QAAQ;AAAA,QAAO;AAAA,QAAgB;AAAA,MAC7D;AACA,UAAI,CAAC,aAAa,IAAI;AACpB,cAAM,IAAI,wBAAwB,aAAa,MAAO,OAAO;AAAA,MAC/D;AACA,4BAAsB,aAAa;AACnC,UAAI,aAAa,eAAe;AAC9B,2BAAmB;AAAA,UACjB,GAAG;AAAA,UACH,OAAO,EAAE,GAAI,QAAQ,OAAkB,GAAG,aAAa,cAAc;AAAA,QACvE;AAAA,MACF;AAAA,IACF;AAEA,UAAM,YAAY,MAAM,KAAK,iBAAiB,SAAS,gBAAgB;AACvE,UAAM,eAAe,iBAAiB,gBAAgB;AACtD,UAAM,SACJ,gBAAgB,OAAO,QAAQ,SAAS,aACpC,MAAM,QAAQ,KAAK,EAAE,OAAO,iBAAiB,OAAO,KAAK,iBAAiB,KAAK,UAAU,aAAa,CAAC,IACvG,MAAM,QAAQ,QAAQ,iBAAiB,OAAO,iBAAiB,GAAG;AACxE,UAAM,gBAAgB,MAAM,KAAK,aAAa,SAAS,kBAAkB,MAAM;AAC/E,UAAM,qBAAqB,EAAE,GAAG,WAAW,OAAO,cAAc;AAChE,UAAM,UAAU,MAAM,KAAK,SAAS,SAAS,kBAAkB,QAAQ,kBAAkB;AACzF,QAAI,aAAa,KAAK,cAAc,iBAAiB,UAAU,OAAO;AACtE,UAAM,WAAW,KAAK,WAAW,OAAO;AACxC,QAAI,UAAU;AACZ,mBAAa,cAAc,CAAC;AAC5B,UAAI,CAAC,WAAW,UAAW,YAAW,YAAY,iBAAiB;AACnE,UAAI,WAAW,gBAAgB,OAAW,YAAW,cAAc,iBAAiB,IAAI,MAAM,OAAO;AAAA,IACvG;AACA,QAAI,kBAAkB,UAAa,kBAAkB,MAAM;AACzD,UAAI,CAAC,YAAY;AACf,qBAAa,EAAE,eAAe,cAAc;AAAA,MAC9C,WAAW,CAAC,WAAW,eAAe;AACpC,mBAAW,gBAAgB;AAAA,MAC7B;AAAA,IACF;AACA,QAAI,UAAU,QAAQ;AACpB,UAAI,CAAC,YAAY;AACf,qBAAa,EAAE,gBAAgB,UAAU,OAAO;AAAA,MAClD,WAAW,CAAC,WAAW,gBAAgB;AACrC,mBAAW,iBAAiB,UAAU;AAAA,MACxC;AAAA,IACF;AACA,QAAI,YAAY,mBAAmB,UAAa,YAAY,kBAAkB,QAAW;AACvF,YAAM,iBAAiB,WAAW;AAClC,YAAM,cACJ,mBAAmB,UACnB,mBAAmB,QAClB,OAAO,mBAAmB,YAAY,CAAC,MAAM,QAAQ,cAAc,KAAK,OAAO,KAAK,cAAc,EAAE,WAAW;AAClH,UAAI,aAAa;AACf,cAAM,WAAW,2BAA2B,WAAW,gBAAgB,WAAW,aAAa;AAC/F,YAAI,SAAU,YAAW,UAAU;AAAA,MACrC;AAAA,IACF;AACA,UAAM,WAAW,MAAM,KAAK,WAAW,WAAW,kBAAkB,UAAU;AAG9E,QAAI,cAAc;AAClB,QAAI,gBAAgB,QAAQ;AAC1B,YAAM,iBAA4C;AAAA,QAChD;AAAA,QACA,MAAM,iBAAiB,IAAI,QAAQ;AAAA,QACnC,wBAAwB,iBAAiB,IAAI,0BAA0B,iBAAiB,IAAI,MAAM,SAAS;AAAA,QAC3G,WAAW,iBAAiB,IAAI;AAAA,MAClC;AACA,YAAM,cAAc,MAAM;AAAA,QACxB;AAAA,QAAiB;AAAA,QAAW,iBAAiB;AAAA,QAAO;AAAA,QAAQ;AAAA,QAC5D;AAAA,QAAc;AAAA,MAChB;AACA,UAAI,YAAY,kBAAkB,OAAO,WAAW,YAAY,QAAQ;AACtE,sBAAc,EAAE,GAAI,QAAmB,GAAG,YAAY,eAAe;AAAA,MACvE;AAAA,IACF;AAEA,QAAI,CAAC,iBAAiB,uBAAuB;AAC3C,YAAM,KAAK,4BAA4B,WAAW,kBAAkB,aAAa,UAAU;AAAA,IAC7F;AAKA,UAAM,KAAK,qBAAqB,iBAAiB,IAAI,WAAW,iBAAiB,KAAK,UAAU;AAChG,WAAO,EAAE,QAAQ,aAAa,SAAS;AAAA,EACzC;AAAA,EAEA,MAAM,KAAK,WAAmB,KAA2C;AACvE,UAAM,UAAW,IAAI,UAAU,QAAQ,kBAAkB;AACzD,UAAM,MAAM,MAAM,QAAQ,gBAAgB,SAAS;AACnD,QAAI,CAAC,IAAK,OAAM,IAAI,MAAM,iCAAiC;AAC3D,UAAM,UAAU,MAAM,KAAK,eAAe,IAAI,SAAS;AACvD,QAAI,CAAC,QAAQ,QAAQ,KAAK,WAAW,OAAO,MAAM,OAAO;AACvD,YAAM,IAAI,MAAM,WAAW,IAAI,SAAS,kBAAkB;AAAA,IAC5D;AAMA,UAAM,UAAU,MAAM,QAAQ,aAAa,IAAI,EAAE;AACjD,QAAI,CAAC,QAAS,OAAM,IAAI,MAAM,6BAA6B;AAE3D,QAAI;AAEF,YAAM,kBAAkB,kCAAkC;AAC1D,UAAI,0BAA0B,oBAAI,IAAqC;AACvE,YAAM,eAAe,gBAAgB,SACjC,MAAM,KAAK,mCAAmC,GAAG,IACjD,CAAC;AACL,UAAI,gBAAgB,QAAQ;AAC1B,cAAM,UAAU,EAAE,OAAO,IAAI,gBAAgB,UAAU,KAAK,UAAU;AACtE,cAAM,iBAA4C;AAAA,UAChD,WAAW,IAAI;AAAA,UACf,MAAM,IAAI,QAAQ;AAAA,UAClB,wBAAwB,IAAI,0BAA0B,IAAI,MAAM,SAAS;AAAA,UACzE,WAAW,IAAI;AAAA,QACjB;AACA,cAAM,eAAe,MAAM;AAAA,UACzB;AAAA,UAAiB,IAAI;AAAA,UAAW;AAAA,UAAS;AAAA,UAAgB;AAAA,QAC3D;AACA,YAAI,CAAC,aAAa,IAAI;AACpB,gBAAM,IAAI,wBAAwB,aAAa,MAAO,OAAO;AAAA,QAC/D;AACA,kCAA0B,aAAa;AAAA,MACzC;AAEA,YAAM,QAAQ,KAAK;AAAA,QACjB,OAAO,IAAI;AAAA,QACX;AAAA,QACA,UAAU;AAAA,MACZ,CAAC;AACD,YAAM,QAAQ,WAAW,IAAI,IAAI,KAAK,kBAAkB,KAAK,GAAG,CAAC;AAGjE,UAAI,gBAAgB,QAAQ;AAC1B,cAAM,UAAU,EAAE,OAAO,IAAI,gBAAgB,UAAU,KAAK,UAAU;AACtE,cAAM,iBAA4C;AAAA,UAChD,WAAW,IAAI;AAAA,UACf,MAAM,IAAI,QAAQ;AAAA,UAClB,wBAAwB,IAAI,0BAA0B,IAAI,MAAM,SAAS;AAAA,UACzE,WAAW,IAAI;AAAA,QACjB;AACA,cAAM;AAAA,UACJ;AAAA,UAAiB,IAAI;AAAA,UAAW;AAAA,UAAS;AAAA,UACzC;AAAA,UAAc;AAAA,QAChB;AAAA,MACF;AAEA,YAAM,KAAK,yBAAyB,KAAK,GAAG;AAC5C,YAAM,KAAK,qBAAqB,IAAI,SAAS;AAAA,IAC/C,SAAS,KAAK;AAGZ,YAAM,QAAQ,iBAAiB,IAAI,EAAE,EAAE,MAAM,MAAM;AAAA,MAAC,CAAC;AACrD,YAAM;AAAA,IACR;AAAA,EACF;AAAA,EAEQ,kBAAkB,KAAgB,KAA8D;AACtG,UAAM,iBAAiB,IAAI,iBAAiB;AAC5C,UAAM,gBAAgB,IAAI,kBAAkB;AAC5C,UAAM,UACJ,2BAA2B,gBAAgB,aAAa,KACrD,sBAAsB,IAAI,WAAW,KACrC;AAEL,UAAM,cAAc,SAAS,IAAI,WAAW,KAAK,CAAC;AAClD,UAAM,UAAU;AAAA,MACd,GAAG;AAAA,MACH,eAAe;AAAA,MACf,aAAa,IAAI;AAAA,MACjB,iBAAiB,IAAI;AAAA,IACvB;AAEA,WAAO;AAAA,MACL,UAAU,IAAI,YAAY,IAAI,MAAM,YAAY;AAAA,MAChD,gBAAgB,IAAI,kBAAkB,IAAI,0BAA0B,IAAI,MAAM,SAAS;AAAA,MACvF,aAAa,IAAI,MAAM,OAAO,IAAI,eAAe;AAAA,MACjD,WAAW,IAAI;AAAA,MACf,aAAa,IAAI,eAAe;AAAA,MAChC,cAAc,IAAI,gBAAgB;AAAA,MAClC,YAAY,IAAI,cAAc;AAAA,MAC9B,oBAAoB,IAAI,sBAAsB;AAAA,MAC9C,kBAAkB,IAAI,oBAAoB;AAAA,MAC1C,qBAAqB,IAAI,uBAAuB;AAAA,MAChD,mBAAmB,IAAI,qBAAqB;AAAA,MAC5C;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAc,mCAAmC,KAA+C;AAC9F,QAAI,CAAC,IAAI,KAAM,QAAO,CAAC;AACvB,QAAI;AAEF,YAAM,OAAO,IAAI,UAAU,QAAQ,aAAa;AAChD,UAAI,MAAM,oBAAoB;AAC5B,eAAO,MAAM,KAAK,mBAAmB,IAAI,KAAK,KAAK;AAAA,UACjD,UAAU,IAAI,KAAK;AAAA,UACnB,gBAAgB,IAAI,0BAA0B,IAAI,KAAK;AAAA,QACzD,CAAC;AAAA,MACH;AAAA,IACF,QAAQ;AAAA,IAGR;AACA,WAAO,CAAC;AAAA,EACV;AAAA,EAEA,MAAc,eAAgC,WAA6D;AACzG,UAAM,UACJ,gBAAgB,IAAqB,SAAS,KAC5C,MAAM,gBAAgB,KAAK,SAAS;AACxC,QAAI,CAAC,SAAS;AACZ,YAAM,aAAa,UAAU,MAAM,GAAG,EAAE,CAAC;AACzC,YAAM,aAAa,gBAAgB,KAAK;AACxC,YAAM,aAAa,WAAW,OAAO,CAAC,OAAO,GAAG,MAAM,GAAG,EAAE,CAAC,MAAM,UAAU;AAC5E,YAAM,oBAAoB,gBAAgB,YAAY;AACtD,YAAM,oBAAoB,kBAAkB,OAAO,CAAC,OAAO,OAAO,aAAa,GAAG,WAAW,GAAG,UAAU,GAAG,CAAC;AAC9G,YAAM,OAAO,WAAW,SAAS,IAC7B,oCAAoC,UAAU,OAAO,WAAW,KAAK,IAAI,CAAC,OAC1E,kBAAkB,SAAS,IACzB,gCAAgC,UAAU,sCAAsC,SAAS,OACzF,0DAA0D,UAAU;AAC1E,YAAM,IAAI,MAAM,yCAAyC,SAAS,IAAI,IAAI,EAAE;AAAA,IAC9E;AACA,WAAO;AAAA,EACT;AAAA,EAEA,MAAc,iBACZ,SACA,SAC+B;AAC/B,QAAI,CAAC,QAAQ,QAAS,QAAO,CAAC;AAC9B,QAAI;AACF,aAAQ,MAAM,QAAQ,QAAQ,QAAQ,OAAO,QAAQ,GAAG,KAAM,CAAC;AAAA,IACjE,SAAS,KAAK;AACZ,YAAM;AAAA,IACR;AAAA,EACF;AAAA,EAEA,MAAc,aACZ,SACA,SACA,QACkB;AAClB,QAAI,CAAC,QAAQ,aAAc,QAAO;AAClC,WAAO,QAAQ,aAAa,QAAQ,OAAO,QAAQ,QAAQ,GAAG;AAAA,EAChE;AAAA,EAEA,MAAc,SACZ,SACA,SACA,QACA,WACoC;AACpC,QAAI,CAAC,QAAQ,SAAU,QAAO;AAC9B,UAAM,OAA+C;AAAA,MACnD,OAAO,QAAQ;AAAA,MACf;AAAA,MACA,KAAK,QAAQ;AAAA,MACb;AAAA,IACF;AACA,WAAQ,MAAM,QAAQ,SAAS,IAAI,KAAM;AAAA,EAC3C;AAAA,EAEQ,cAAc,SAAqC,WAAkE;AAC3H,QAAI,CAAC,WAAW,CAAC,UAAW,QAAO;AACnC,WAAO;AAAA,MACL,SAAS,WAAW,WAAW,SAAS,WAAW;AAAA,MACnD,UAAU,WAAW,YAAY,SAAS,YAAY;AAAA,MACtD,gBAAgB,WAAW,kBAAkB,SAAS,kBAAkB;AAAA,MACxE,aAAa,WAAW,eAAe,SAAS,eAAe;AAAA,MAC/D,aAAa,WAAW,eAAe,SAAS,eAAe;AAAA,MAC/D,cAAc,WAAW,gBAAgB,SAAS,gBAAgB;AAAA,MAClE,YAAY,WAAW,cAAc,SAAS,cAAc;AAAA,MAC5D,oBAAoB,WAAW,sBAAsB,SAAS,sBAAsB;AAAA,MACpF,kBAAkB,WAAW,oBAAoB,SAAS,oBAAoB;AAAA,MAC9E,qBAAqB,WAAW,uBAAuB,SAAS,uBAAuB;AAAA,MACvF,mBAAmB,WAAW,qBAAqB,SAAS,qBAAqB;AAAA,MACjF,WAAW,WAAW,aAAa,SAAS,aAAa;AAAA,MACzD,SAAS,WAAW,WAAW,SAAS,WAAW;AAAA,MACnD,gBAAgB,WAAW,kBAAkB,SAAS,kBAAkB;AAAA,MACxE,eAAe,WAAW,iBAAiB,SAAS,iBAAiB;AAAA,MACrE,SAAS,WAAW,WAAW,SAAS,WAAW;AAAA,MACnD,SAAS,WAAW,WAAW,SAAS,WAAW;AAAA,IACrD;AAAA,EACF;AAAA,EAEA,MAAc,WACZ,WACA,SACA,UAC2B;AAC3B,QAAI,CAAC,SAAU,QAAO;AACtB,QAAI,SAAS,QAAS,QAAO;AAC7B,UAAM,eACJ,OAAO,SAAS,iBAAiB,WAAW,SAAS,eAAe;AACtE,QAAI,gBAAgB,kCAAkC,IAAI,YAAY,GAAG;AACvE,aAAO;AAAA,IACT;AACA,QAAI,UAAmC;AACvC,QAAI;AACF,gBAAW,QAAQ,IAAI,UAAU,QAAQ,kBAAkB;AAAA,IAC7D,QAAQ;AACN,gBAAU;AAAA,IACZ;AACA,QAAI,CAAC,QAAS,QAAO;AAErB,UAAM,WAAW,SAAS,YAAY,QAAQ,IAAI,MAAM,YAAY;AACpE,UAAM,iBACJ,SAAS,kBAAkB,QAAQ,IAAI,0BAA0B,QAAQ,IAAI,MAAM,SAAS;AAC9F,UAAM,cAAc,SAAS,eAAe,QAAQ,IAAI,MAAM,OAAO;AACrE,UAAM,UAAmC;AAAA,MACvC,UAAU,YAAY;AAAA,MACtB,gBAAgB,kBAAkB;AAAA,MAClC,aAAa,eAAe;AAAA,MAC5B;AAAA,IACF;AAEA,QAAI,UAAU;AACZ,UAAI,iBAAiB,YAAY,SAAS,eAAe,KAAM,SAAQ,cAAc,SAAS;AAC9F,UAAI,kBAAkB,YAAY,SAAS,gBAAgB,KAAM,SAAQ,eAAe,SAAS;AACjG,UAAI,gBAAgB,YAAY,SAAS,cAAc,KAAM,SAAQ,aAAa,SAAS;AAC3F,UAAI,wBAAwB,YAAY,SAAS,sBAAsB,KAAM,SAAQ,qBAAqB,SAAS;AACnH,UAAI,sBAAsB,YAAY,SAAS,oBAAoB,KAAM,SAAQ,mBAAmB,SAAS;AAC7G,UAAI,yBAAyB,YAAY,SAAS,uBAAuB,KAAM,SAAQ,sBAAsB,SAAS;AACtH,UAAI,uBAAuB,YAAY,SAAS,qBAAqB,KAAM,SAAQ,oBAAoB,SAAS;AAChH,UAAI,eAAe,YAAY,SAAS,aAAa,KAAM,SAAQ,YAAY,SAAS;AACxF,UAAI,aAAa,YAAY,SAAS,YAAY,OAAW,SAAQ,iBAAiB,SAAS;AAC/F,UAAI,oBAAoB,YAAY,SAAS,mBAAmB,OAAW,SAAQ,iBAAiB,SAAS;AAC7G,UAAI,mBAAmB,YAAY,SAAS,kBAAkB,OAAW,SAAQ,gBAAgB,SAAS;AAC1G,UAAI,aAAa,YAAY,SAAS,YAAY,UAAa,SAAS,YAAY,KAAM,SAAQ,UAAU,SAAS;AACrH,UAAI,aAAa,YAAY,SAAS,YAAY,UAAa,SAAS,YAAY,KAAM,SAAQ,UAAU,SAAS;AAAA,IACvH;AAEA,UAAM,eAAe,gBAAgB,oBAAoB,UAAW,QAAQ,iBAA6B,QAAW,QAAQ,KAAK;AACjI,YAAQ,iBAAiB;AAEzB,WAAO,MAAM,QAAQ,IAAI,OAA+B;AAAA,EAC1D;AAAA,EAEQ,WAAW,SAAoD;AACrE,WAAO,QAAQ,eAAe,SAAS,OAAO,QAAQ,SAAS;AAAA,EACjE;AAAA,EAEA,MAAc,4BACZ,WACA,SACA,QACA,UACe;AACf,UAAM,WAAW,OAAO,UAAU,iBAAiB,WAAW,SAAS,eAAe;AACtF,QAAI,CAAC,SAAU;AACf,QAAI;AACF,YAAM,MAAM,QAAQ;AACpB,YAAM,eAAe,SAAS,MAAM;AACpC,YAAM,eAAe,SAAS,cAAc,MAAM;AAClD,YAAM,cAAc,SAAS,QAAQ,KAAK;AAC1C,YAAM,cAAc,SAAS,aAAa,MAAM;AAEhD,YAAM,WAAW;AAAA,QACf,UAAU;AAAA,QACV,kCAAkC,MAAM;AAAA,QACxC,cAAc;AAAA,QACd,cAAc;AAAA,QACd,cAAc;AAAA,QACd,cAAc;AAAA,QACd,aAAa;AAAA,QACb,aAAa;AAAA,QACb,aAAa;AAAA,QACb,aAAa;AAAA,MACf;AAEA,YAAM,iBAAiB;AAAA,QACrB,UAAU;AAAA,QACV,cAAc;AAAA,QACd,cAAc;AAAA,QACd,aAAa;AAAA,QACb,aAAa;AAAA,QACb,IAAI,0BAA0B,IAAI,MAAM,SAAS;AAAA,MACnD;AAEA,YAAM,WAAW;AAAA,QACf,UAAU;AAAA,QACV,cAAc;AAAA,QACd,cAAc;AAAA,QACd,aAAa;AAAA,QACb,aAAa;AAAA,QACb,IAAI,MAAM,YAAY;AAAA,MACxB;AAEA,YAAM,iBAAiB,oBAAoB,UAAU,UAAU,IAAI,MAAM,YAAY,IAAI;AAEzF,YAAM,WAAW,oBAAI,IAAY;AACjC,iBAAW,SAAS,iBAAiB,UAAU,WAAW,IAAI,GAAG;AAC/D,iBAAS,IAAI,KAAK;AAAA,MACpB;AACA,YAAM,UAAU,4BAA4B,SAAS;AACrD,UAAI,QAAS,UAAS,IAAI,OAAO;AACjC,YAAM,cAAc,MAAM,KAAK,QAAQ;AACvC,YAAM;AAAA,QACJ,IAAI;AAAA,QACJ;AAAA,QACA,EAAE,IAAI,UAAU,gBAAgB,SAAS;AAAA,QACzC;AAAA,QACA,WAAW,SAAS;AAAA,QACpB;AAAA,MACF;AAAA,IACF,SAAS,KAAK;AACZ,UAAI,wBAAwB,GAAG;AAC7B,YAAI;AACF,iBAAO,MAAM,qCAAqC,EAAE,WAAW,IAAI,CAAC;AAAA,QACtE,QAAQ;AAAA,QAAC;AAAA,MACX;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAc,yBAAyB,KAAgB,KAA2C;AAChG,UAAM,WAAW,OAAO,IAAI,iBAAiB,WAAW,IAAI,eAAe;AAC3E,QAAI,CAAC,SAAU;AACf,QAAI;AACF,YAAM,WAAW,oBAAoB,IAAI,UAAU;AACnD,YAAM,iBAAiB,oBAAoB,IAAI,gBAAgB,IAAI,0BAA0B,IAAI,MAAM,SAAS,IAAI;AACpH,YAAM,WAAW,oBAAoB,IAAI,UAAU,IAAI,MAAM,YAAY,IAAI;AAC7E,YAAM,iBAAiB,oBAAoB,IAAI,UAAU,IAAI,MAAM,YAAY,IAAI;AACnF,YAAM,WAAW,oBAAI,IAAY;AACjC,iBAAW,SAAS,iBAAiB,IAAI,eAAe,IAAI,GAAG;AAC7D,iBAAS,IAAI,KAAK;AAAA,MACpB;AACA,YAAM,UAAU,4BAA4B,IAAI,SAAS;AACzD,UAAI,QAAS,UAAS,IAAI,OAAO;AACjC,YAAM,cAAc,MAAM,KAAK,QAAQ;AACvC,YAAM;AAAA,QACJ,IAAI;AAAA,QACJ;AAAA,QACA,EAAE,IAAI,UAAU,gBAAgB,SAAS;AAAA,QACzC;AAAA,QACA,WAAW,IAAI,SAAS;AAAA,QACxB;AAAA,MACF;AAAA,IACF,SAAS,KAAK;AACZ,UAAI,wBAAwB,GAAG;AAC7B,YAAI;AACF,iBAAO,MAAM,kCAAkC,EAAE,WAAW,IAAI,WAAW,IAAI,CAAC;AAAA,QAClF,QAAQ;AAAA,QAAC;AAAA,MACX;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAc,qBAAqB,WAA4B,UAAiD;AAC9G,QAAI;AACF,YAAM,aAAc,UAAU,QAAQ,YAAY;AAClD,YAAM,WAAW,sBAAsB,QAAQ;AAAA,IACjD,QAAQ;AAAA,IAER;AAAA,EACF;AACF;AAOA,SAAS,gBAAgB,UAAmB,OAA8B;AACxE,MAAI,CAAC,YAAY,OAAO,aAAa,YAAY,MAAM,QAAQ,QAAQ,GAAG;AACxE,UAAM,WAAyB,EAAE,aAAa,MAAM;AACpD,QAAI,aAAa,OAAW,UAAS,QAAQ;AAC7C,WAAO;AAAA,EACT;AACA,QAAM,UAAU;AAChB,MAAI,iBAAiB,WAAW,QAAQ,gBAAgB,QAAW;AACjE,WAAO;AAAA,EACT;AACA,SAAO,EAAE,aAAa,OAAO,GAAG,QAAQ;AAC1C;",
   "names": []
 }

package/dist/lib/commands/command-interceptor-runner.js

@@ -1,4 +1,4 @@
-import { authorizeFeatures } from "../../security/featurePolicy.js";
+import { hasAllFeatures } from "../../security/features.js";
 import { createLogger } from "../logger/index.js";
 const logger = createLogger("shared").child({ component: "commands" });
 function matchesCommandPattern(pattern, commandId) {
@@ -11,7 +11,7 @@ function matchesCommandPattern(pattern, commandId) {
   return false;
 }
 function collectMatching(interceptors, commandId, userFeatures) {
-  return interceptors.filter((i) => matchesCommandPattern(i.targetCommand, commandId)).filter((i) => authorizeFeatures(i.features ?? [], { grantedFeatures: userFeatures })).sort((a, b) => (a.priority ?? 50) - (b.priority ?? 50));
+  return interceptors.filter((i) => matchesCommandPattern(i.targetCommand, commandId)).filter((i) => hasAllFeatures(userFeatures, i.features)).sort((a, b) => (a.priority ?? 50) - (b.priority ?? 50));
 }
 async function runCommandInterceptorsBefore(interceptors, commandId, input, context, userFeatures) {
   const matching = collectMatching(interceptors, commandId, userFeatures);

package/dist/lib/commands/command-interceptor-runner.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../src/lib/commands/command-interceptor-runner.ts"],
-  "sourcesContent": ["import type {\n  CommandInterceptor,\n  CommandInterceptorContext,\n  CommandInterceptorUndoContext,\n} from './command-interceptor'\nimport { authorizeFeatures } from '../../security/featurePolicy'\nimport { createLogger } from '../logger'\n\nconst logger = createLogger('shared').child({ component: 'commands' })\n\n// ---------------------------------------------------------------------------\n// Command pattern matching\n// ---------------------------------------------------------------------------\n\nexport function matchesCommandPattern(pattern: string, commandId: string): boolean {\n  if (pattern === '*') return true\n  if (pattern === commandId) return true\n  if (pattern.endsWith('.*')) {\n    const prefix = pattern.slice(0, -2)\n    return commandId.startsWith(prefix + '.')\n  }\n  return false\n}\n\n// ---------------------------------------------------------------------------\n// Collect matching interceptors\n// ---------------------------------------------------------------------------\n\nfunction collectMatching(\n  interceptors: CommandInterceptor[],\n  commandId: string,\n  userFeatures: string[],\n): CommandInterceptor[] {\n  return interceptors\n    .filter((i) => matchesCommandPattern(i.targetCommand, commandId))\n    .filter((i) => authorizeFeatures(i.features ?? [], { grantedFeatures: userFeatures }))\n    .sort((a, b) => (a.priority ?? 50) - (b.priority ?? 50))\n}\n\n// ---------------------------------------------------------------------------\n// Run beforeExecute interceptors\n// ---------------------------------------------------------------------------\n\nexport async function runCommandInterceptorsBefore(\n  interceptors: CommandInterceptor[],\n  commandId: string,\n  input: unknown,\n  context: CommandInterceptorContext,\n  userFeatures: string[],\n): Promise<{\n  ok: boolean\n  error?: { message: string }\n  modifiedInput?: Record<string, unknown>\n  metadataByInterceptor: Map<string, Record<string, unknown>>\n}> {\n  const matching = collectMatching(interceptors, commandId, userFeatures)\n\n  let currentInput = input\n  const metadataByInterceptor = new Map<string, Record<string, unknown>>()\n\n  for (const interceptor of matching) {\n    if (!interceptor.beforeExecute) continue\n    const result = await interceptor.beforeExecute(currentInput, { ...context, commandId })\n\n    if (result?.ok === false) {\n      return {\n        ok: false,\n        error: { message: result.message ?? `Blocked by command interceptor: ${interceptor.id}` },\n        metadataByInterceptor,\n      }\n    }\n\n    if (result?.modifiedInput) {\n      currentInput =\n        typeof currentInput === 'object' && currentInput\n          ? { ...(currentInput as Record<string, unknown>), ...result.modifiedInput }\n          : result.modifiedInput\n    }\n\n    if (result?.metadata) {\n      metadataByInterceptor.set(interceptor.id, result.metadata)\n    }\n  }\n\n  const inputChanged = currentInput !== input\n  return {\n    ok: true,\n    modifiedInput: inputChanged ? (currentInput as Record<string, unknown>) : undefined,\n    metadataByInterceptor,\n  }\n}\n\n// ---------------------------------------------------------------------------\n// Run afterExecute interceptors\n// ---------------------------------------------------------------------------\n\nexport async function runCommandInterceptorsAfter(\n  interceptors: CommandInterceptor[],\n  commandId: string,\n  input: unknown,\n  result: unknown,\n  context: CommandInterceptorContext,\n  userFeatures: string[],\n  metadataByInterceptor: Map<string, Record<string, unknown>>,\n): Promise<{ modifiedResult?: Record<string, unknown> }> {\n  const matching = collectMatching(interceptors, commandId, userFeatures)\n\n  let currentResult = result\n\n  for (const interceptor of matching) {\n    if (!interceptor.afterExecute) continue\n    try {\n      const afterResult = await interceptor.afterExecute(\n        input,\n        currentResult,\n        { ...context, commandId, metadata: metadataByInterceptor.get(interceptor.id) },\n      )\n      if (afterResult?.modifiedResult && typeof currentResult === 'object' && currentResult) {\n        currentResult = { ...(currentResult as Record<string, unknown>), ...afterResult.modifiedResult }\n      }\n    } catch (error) {\n      logger.error('Command interceptor afterExecute failed', { interceptorId: interceptor.id, err: error })\n    }\n  }\n\n  const resultChanged = currentResult !== result\n  return { modifiedResult: resultChanged ? (currentResult as Record<string, unknown>) : undefined }\n}\n\n// ---------------------------------------------------------------------------\n// Run beforeUndo interceptors\n// ---------------------------------------------------------------------------\n\nexport async function runCommandInterceptorsBeforeUndo(\n  interceptors: CommandInterceptor[],\n  commandId: string,\n  undoContext: CommandInterceptorUndoContext,\n  context: CommandInterceptorContext,\n  userFeatures: string[],\n): Promise<{\n  ok: boolean\n  error?: { message: string }\n  metadataByInterceptor: Map<string, Record<string, unknown>>\n}> {\n  const matching = collectMatching(interceptors, commandId, userFeatures)\n\n  const metadataByInterceptor = new Map<string, Record<string, unknown>>()\n\n  for (const interceptor of matching) {\n    if (!interceptor.beforeUndo) continue\n    const result = await interceptor.beforeUndo(undoContext, { ...context, commandId })\n\n    if (result?.ok === false) {\n      return {\n        ok: false,\n        error: { message: result.message ?? `Undo blocked by command interceptor: ${interceptor.id}` },\n        metadataByInterceptor,\n      }\n    }\n\n    if (result?.metadata) {\n      metadataByInterceptor.set(interceptor.id, result.metadata)\n    }\n  }\n\n  return { ok: true, metadataByInterceptor }\n}\n\n// ---------------------------------------------------------------------------\n// Run afterUndo interceptors\n// ---------------------------------------------------------------------------\n\nexport async function runCommandInterceptorsAfterUndo(\n  interceptors: CommandInterceptor[],\n  commandId: string,\n  undoContext: CommandInterceptorUndoContext,\n  context: CommandInterceptorContext,\n  userFeatures: string[],\n  metadataByInterceptor: Map<string, Record<string, unknown>>,\n): Promise<void> {\n  const matching = collectMatching(interceptors, commandId, userFeatures)\n\n  for (const interceptor of matching) {\n    if (!interceptor.afterUndo) continue\n    try {\n      await interceptor.afterUndo(\n        undoContext,\n        { ...context, commandId, metadata: metadataByInterceptor.get(interceptor.id) },\n      )\n    } catch (error) {\n      logger.error('Command interceptor afterUndo failed', { interceptorId: interceptor.id, err: error })\n    }\n  }\n}\n"],
-  "mappings": "AAKA,SAAS,yBAAyB;AAClC,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,QAAQ,EAAE,MAAM,EAAE,WAAW,WAAW,CAAC;AAM9D,SAAS,sBAAsB,SAAiB,WAA4B;AACjF,MAAI,YAAY,IAAK,QAAO;AAC5B,MAAI,YAAY,UAAW,QAAO;AAClC,MAAI,QAAQ,SAAS,IAAI,GAAG;AAC1B,UAAM,SAAS,QAAQ,MAAM,GAAG,EAAE;AAClC,WAAO,UAAU,WAAW,SAAS,GAAG;AAAA,EAC1C;AACA,SAAO;AACT;AAMA,SAAS,gBACP,cACA,WACA,cACsB;AACtB,SAAO,aACJ,OAAO,CAAC,MAAM,sBAAsB,EAAE,eAAe,SAAS,CAAC,EAC/D,OAAO,CAAC,MAAM,kBAAkB,EAAE,YAAY,CAAC,GAAG,EAAE,iBAAiB,aAAa,CAAC,CAAC,EACpF,KAAK,CAAC,GAAG,OAAO,EAAE,YAAY,OAAO,EAAE,YAAY,GAAG;AAC3D;AAMA,eAAsB,6BACpB,cACA,WACA,OACA,SACA,cAMC;AACD,QAAM,WAAW,gBAAgB,cAAc,WAAW,YAAY;AAEtE,MAAI,eAAe;AACnB,QAAM,wBAAwB,oBAAI,IAAqC;AAEvE,aAAW,eAAe,UAAU;AAClC,QAAI,CAAC,YAAY,cAAe;AAChC,UAAM,SAAS,MAAM,YAAY,cAAc,cAAc,EAAE,GAAG,SAAS,UAAU,CAAC;AAEtF,QAAI,QAAQ,OAAO,OAAO;AACxB,aAAO;AAAA,QACL,IAAI;AAAA,QACJ,OAAO,EAAE,SAAS,OAAO,WAAW,mCAAmC,YAAY,EAAE,GAAG;AAAA,QACxF;AAAA,MACF;AAAA,IACF;AAEA,QAAI,QAAQ,eAAe;AACzB,qBACE,OAAO,iBAAiB,YAAY,eAChC,EAAE,GAAI,cAA0C,GAAG,OAAO,cAAc,IACxE,OAAO;AAAA,IACf;AAEA,QAAI,QAAQ,UAAU;AACpB,4BAAsB,IAAI,YAAY,IAAI,OAAO,QAAQ;AAAA,IAC3D;AAAA,EACF;AAEA,QAAM,eAAe,iBAAiB;AACtC,SAAO;AAAA,IACL,IAAI;AAAA,IACJ,eAAe,eAAgB,eAA2C;AAAA,IAC1E;AAAA,EACF;AACF;AAMA,eAAsB,4BACpB,cACA,WACA,OACA,QACA,SACA,cACA,uBACuD;AACvD,QAAM,WAAW,gBAAgB,cAAc,WAAW,YAAY;AAEtE,MAAI,gBAAgB;AAEpB,aAAW,eAAe,UAAU;AAClC,QAAI,CAAC,YAAY,aAAc;AAC/B,QAAI;AACF,YAAM,cAAc,MAAM,YAAY;AAAA,QACpC;AAAA,QACA;AAAA,QACA,EAAE,GAAG,SAAS,WAAW,UAAU,sBAAsB,IAAI,YAAY,EAAE,EAAE;AAAA,MAC/E;AACA,UAAI,aAAa,kBAAkB,OAAO,kBAAkB,YAAY,eAAe;AACrF,wBAAgB,EAAE,GAAI,eAA2C,GAAG,YAAY,eAAe;AAAA,MACjG;AAAA,IACF,SAAS,OAAO;AACd,aAAO,MAAM,2CAA2C,EAAE,eAAe,YAAY,IAAI,KAAK,MAAM,CAAC;AAAA,IACvG;AAAA,EACF;AAEA,QAAM,gBAAgB,kBAAkB;AACxC,SAAO,EAAE,gBAAgB,gBAAiB,gBAA4C,OAAU;AAClG;AAMA,eAAsB,iCACpB,cACA,WACA,aACA,SACA,cAKC;AACD,QAAM,WAAW,gBAAgB,cAAc,WAAW,YAAY;AAEtE,QAAM,wBAAwB,oBAAI,IAAqC;AAEvE,aAAW,eAAe,UAAU;AAClC,QAAI,CAAC,YAAY,WAAY;AAC7B,UAAM,SAAS,MAAM,YAAY,WAAW,aAAa,EAAE,GAAG,SAAS,UAAU,CAAC;AAElF,QAAI,QAAQ,OAAO,OAAO;AACxB,aAAO;AAAA,QACL,IAAI;AAAA,QACJ,OAAO,EAAE,SAAS,OAAO,WAAW,wCAAwC,YAAY,EAAE,GAAG;AAAA,QAC7F;AAAA,MACF;AAAA,IACF;AAEA,QAAI,QAAQ,UAAU;AACpB,4BAAsB,IAAI,YAAY,IAAI,OAAO,QAAQ;AAAA,IAC3D;AAAA,EACF;AAEA,SAAO,EAAE,IAAI,MAAM,sBAAsB;AAC3C;AAMA,eAAsB,gCACpB,cACA,WACA,aACA,SACA,cACA,uBACe;AACf,QAAM,WAAW,gBAAgB,cAAc,WAAW,YAAY;AAEtE,aAAW,eAAe,UAAU;AAClC,QAAI,CAAC,YAAY,UAAW;AAC5B,QAAI;AACF,YAAM,YAAY;AAAA,QAChB;AAAA,QACA,EAAE,GAAG,SAAS,WAAW,UAAU,sBAAsB,IAAI,YAAY,EAAE,EAAE;AAAA,MAC/E;AAAA,IACF,SAAS,OAAO;AACd,aAAO,MAAM,wCAAwC,EAAE,eAAe,YAAY,IAAI,KAAK,MAAM,CAAC;AAAA,IACpG;AAAA,EACF;AACF;",
+  "sourcesContent": ["import type {\n  CommandInterceptor,\n  CommandInterceptorContext,\n  CommandInterceptorUndoContext,\n} from './command-interceptor'\nimport { hasAllFeatures } from '../../security/features'\nimport { createLogger } from '../logger'\n\nconst logger = createLogger('shared').child({ component: 'commands' })\n\n// ---------------------------------------------------------------------------\n// Command pattern matching\n// ---------------------------------------------------------------------------\n\nexport function matchesCommandPattern(pattern: string, commandId: string): boolean {\n  if (pattern === '*') return true\n  if (pattern === commandId) return true\n  if (pattern.endsWith('.*')) {\n    const prefix = pattern.slice(0, -2)\n    return commandId.startsWith(prefix + '.')\n  }\n  return false\n}\n\n// ---------------------------------------------------------------------------\n// Collect matching interceptors\n// ---------------------------------------------------------------------------\n\nfunction collectMatching(\n  interceptors: CommandInterceptor[],\n  commandId: string,\n  userFeatures: string[],\n): CommandInterceptor[] {\n  return interceptors\n    .filter((i) => matchesCommandPattern(i.targetCommand, commandId))\n    .filter((i) => hasAllFeatures(userFeatures, i.features))\n    .sort((a, b) => (a.priority ?? 50) - (b.priority ?? 50))\n}\n\n// ---------------------------------------------------------------------------\n// Run beforeExecute interceptors\n// ---------------------------------------------------------------------------\n\nexport async function runCommandInterceptorsBefore(\n  interceptors: CommandInterceptor[],\n  commandId: string,\n  input: unknown,\n  context: CommandInterceptorContext,\n  userFeatures: string[],\n): Promise<{\n  ok: boolean\n  error?: { message: string }\n  modifiedInput?: Record<string, unknown>\n  metadataByInterceptor: Map<string, Record<string, unknown>>\n}> {\n  const matching = collectMatching(interceptors, commandId, userFeatures)\n\n  let currentInput = input\n  const metadataByInterceptor = new Map<string, Record<string, unknown>>()\n\n  for (const interceptor of matching) {\n    if (!interceptor.beforeExecute) continue\n    const result = await interceptor.beforeExecute(currentInput, { ...context, commandId })\n\n    if (result?.ok === false) {\n      return {\n        ok: false,\n        error: { message: result.message ?? `Blocked by command interceptor: ${interceptor.id}` },\n        metadataByInterceptor,\n      }\n    }\n\n    if (result?.modifiedInput) {\n      currentInput =\n        typeof currentInput === 'object' && currentInput\n          ? { ...(currentInput as Record<string, unknown>), ...result.modifiedInput }\n          : result.modifiedInput\n    }\n\n    if (result?.metadata) {\n      metadataByInterceptor.set(interceptor.id, result.metadata)\n    }\n  }\n\n  const inputChanged = currentInput !== input\n  return {\n    ok: true,\n    modifiedInput: inputChanged ? (currentInput as Record<string, unknown>) : undefined,\n    metadataByInterceptor,\n  }\n}\n\n// ---------------------------------------------------------------------------\n// Run afterExecute interceptors\n// ---------------------------------------------------------------------------\n\nexport async function runCommandInterceptorsAfter(\n  interceptors: CommandInterceptor[],\n  commandId: string,\n  input: unknown,\n  result: unknown,\n  context: CommandInterceptorContext,\n  userFeatures: string[],\n  metadataByInterceptor: Map<string, Record<string, unknown>>,\n): Promise<{ modifiedResult?: Record<string, unknown> }> {\n  const matching = collectMatching(interceptors, commandId, userFeatures)\n\n  let currentResult = result\n\n  for (const interceptor of matching) {\n    if (!interceptor.afterExecute) continue\n    try {\n      const afterResult = await interceptor.afterExecute(\n        input,\n        currentResult,\n        { ...context, commandId, metadata: metadataByInterceptor.get(interceptor.id) },\n      )\n      if (afterResult?.modifiedResult && typeof currentResult === 'object' && currentResult) {\n        currentResult = { ...(currentResult as Record<string, unknown>), ...afterResult.modifiedResult }\n      }\n    } catch (error) {\n      logger.error('Command interceptor afterExecute failed', { interceptorId: interceptor.id, err: error })\n    }\n  }\n\n  const resultChanged = currentResult !== result\n  return { modifiedResult: resultChanged ? (currentResult as Record<string, unknown>) : undefined }\n}\n\n// ---------------------------------------------------------------------------\n// Run beforeUndo interceptors\n// ---------------------------------------------------------------------------\n\nexport async function runCommandInterceptorsBeforeUndo(\n  interceptors: CommandInterceptor[],\n  commandId: string,\n  undoContext: CommandInterceptorUndoContext,\n  context: CommandInterceptorContext,\n  userFeatures: string[],\n): Promise<{\n  ok: boolean\n  error?: { message: string }\n  metadataByInterceptor: Map<string, Record<string, unknown>>\n}> {\n  const matching = collectMatching(interceptors, commandId, userFeatures)\n\n  const metadataByInterceptor = new Map<string, Record<string, unknown>>()\n\n  for (const interceptor of matching) {\n    if (!interceptor.beforeUndo) continue\n    const result = await interceptor.beforeUndo(undoContext, { ...context, commandId })\n\n    if (result?.ok === false) {\n      return {\n        ok: false,\n        error: { message: result.message ?? `Undo blocked by command interceptor: ${interceptor.id}` },\n        metadataByInterceptor,\n      }\n    }\n\n    if (result?.metadata) {\n      metadataByInterceptor.set(interceptor.id, result.metadata)\n    }\n  }\n\n  return { ok: true, metadataByInterceptor }\n}\n\n// ---------------------------------------------------------------------------\n// Run afterUndo interceptors\n// ---------------------------------------------------------------------------\n\nexport async function runCommandInterceptorsAfterUndo(\n  interceptors: CommandInterceptor[],\n  commandId: string,\n  undoContext: CommandInterceptorUndoContext,\n  context: CommandInterceptorContext,\n  userFeatures: string[],\n  metadataByInterceptor: Map<string, Record<string, unknown>>,\n): Promise<void> {\n  const matching = collectMatching(interceptors, commandId, userFeatures)\n\n  for (const interceptor of matching) {\n    if (!interceptor.afterUndo) continue\n    try {\n      await interceptor.afterUndo(\n        undoContext,\n        { ...context, commandId, metadata: metadataByInterceptor.get(interceptor.id) },\n      )\n    } catch (error) {\n      logger.error('Command interceptor afterUndo failed', { interceptorId: interceptor.id, err: error })\n    }\n  }\n}\n"],
+  "mappings": "AAKA,SAAS,sBAAsB;AAC/B,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,QAAQ,EAAE,MAAM,EAAE,WAAW,WAAW,CAAC;AAM9D,SAAS,sBAAsB,SAAiB,WAA4B;AACjF,MAAI,YAAY,IAAK,QAAO;AAC5B,MAAI,YAAY,UAAW,QAAO;AAClC,MAAI,QAAQ,SAAS,IAAI,GAAG;AAC1B,UAAM,SAAS,QAAQ,MAAM,GAAG,EAAE;AAClC,WAAO,UAAU,WAAW,SAAS,GAAG;AAAA,EAC1C;AACA,SAAO;AACT;AAMA,SAAS,gBACP,cACA,WACA,cACsB;AACtB,SAAO,aACJ,OAAO,CAAC,MAAM,sBAAsB,EAAE,eAAe,SAAS,CAAC,EAC/D,OAAO,CAAC,MAAM,eAAe,cAAc,EAAE,QAAQ,CAAC,EACtD,KAAK,CAAC,GAAG,OAAO,EAAE,YAAY,OAAO,EAAE,YAAY,GAAG;AAC3D;AAMA,eAAsB,6BACpB,cACA,WACA,OACA,SACA,cAMC;AACD,QAAM,WAAW,gBAAgB,cAAc,WAAW,YAAY;AAEtE,MAAI,eAAe;AACnB,QAAM,wBAAwB,oBAAI,IAAqC;AAEvE,aAAW,eAAe,UAAU;AAClC,QAAI,CAAC,YAAY,cAAe;AAChC,UAAM,SAAS,MAAM,YAAY,cAAc,cAAc,EAAE,GAAG,SAAS,UAAU,CAAC;AAEtF,QAAI,QAAQ,OAAO,OAAO;AACxB,aAAO;AAAA,QACL,IAAI;AAAA,QACJ,OAAO,EAAE,SAAS,OAAO,WAAW,mCAAmC,YAAY,EAAE,GAAG;AAAA,QACxF;AAAA,MACF;AAAA,IACF;AAEA,QAAI,QAAQ,eAAe;AACzB,qBACE,OAAO,iBAAiB,YAAY,eAChC,EAAE,GAAI,cAA0C,GAAG,OAAO,cAAc,IACxE,OAAO;AAAA,IACf;AAEA,QAAI,QAAQ,UAAU;AACpB,4BAAsB,IAAI,YAAY,IAAI,OAAO,QAAQ;AAAA,IAC3D;AAAA,EACF;AAEA,QAAM,eAAe,iBAAiB;AACtC,SAAO;AAAA,IACL,IAAI;AAAA,IACJ,eAAe,eAAgB,eAA2C;AAAA,IAC1E;AAAA,EACF;AACF;AAMA,eAAsB,4BACpB,cACA,WACA,OACA,QACA,SACA,cACA,uBACuD;AACvD,QAAM,WAAW,gBAAgB,cAAc,WAAW,YAAY;AAEtE,MAAI,gBAAgB;AAEpB,aAAW,eAAe,UAAU;AAClC,QAAI,CAAC,YAAY,aAAc;AAC/B,QAAI;AACF,YAAM,cAAc,MAAM,YAAY;AAAA,QACpC;AAAA,QACA;AAAA,QACA,EAAE,GAAG,SAAS,WAAW,UAAU,sBAAsB,IAAI,YAAY,EAAE,EAAE;AAAA,MAC/E;AACA,UAAI,aAAa,kBAAkB,OAAO,kBAAkB,YAAY,eAAe;AACrF,wBAAgB,EAAE,GAAI,eAA2C,GAAG,YAAY,eAAe;AAAA,MACjG;AAAA,IACF,SAAS,OAAO;AACd,aAAO,MAAM,2CAA2C,EAAE,eAAe,YAAY,IAAI,KAAK,MAAM,CAAC;AAAA,IACvG;AAAA,EACF;AAEA,QAAM,gBAAgB,kBAAkB;AACxC,SAAO,EAAE,gBAAgB,gBAAiB,gBAA4C,OAAU;AAClG;AAMA,eAAsB,iCACpB,cACA,WACA,aACA,SACA,cAKC;AACD,QAAM,WAAW,gBAAgB,cAAc,WAAW,YAAY;AAEtE,QAAM,wBAAwB,oBAAI,IAAqC;AAEvE,aAAW,eAAe,UAAU;AAClC,QAAI,CAAC,YAAY,WAAY;AAC7B,UAAM,SAAS,MAAM,YAAY,WAAW,aAAa,EAAE,GAAG,SAAS,UAAU,CAAC;AAElF,QAAI,QAAQ,OAAO,OAAO;AACxB,aAAO;AAAA,QACL,IAAI;AAAA,QACJ,OAAO,EAAE,SAAS,OAAO,WAAW,wCAAwC,YAAY,EAAE,GAAG;AAAA,QAC7F;AAAA,MACF;AAAA,IACF;AAEA,QAAI,QAAQ,UAAU;AACpB,4BAAsB,IAAI,YAAY,IAAI,OAAO,QAAQ;AAAA,IAC3D;AAAA,EACF;AAEA,SAAO,EAAE,IAAI,MAAM,sBAAsB;AAC3C;AAMA,eAAsB,gCACpB,cACA,WACA,aACA,SACA,cACA,uBACe;AACf,QAAM,WAAW,gBAAgB,cAAc,WAAW,YAAY;AAEtE,aAAW,eAAe,UAAU;AAClC,QAAI,CAAC,YAAY,UAAW;AAC5B,QAAI;AACF,YAAM,YAAY;AAAA,QAChB;AAAA,QACA,EAAE,GAAG,SAAS,WAAW,UAAU,sBAAsB,IAAI,YAAY,EAAE,EAAE;AAAA,MAC/E;AAAA,IACF,SAAS,OAAO;AACd,aAAO,MAAM,wCAAwC,EAAE,eAAe,YAAY,IAAI,KAAK,MAAM,CAAC;AAAA,IACpG;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/lib/crud/enricher-runner.js

@@ -1,7 +1,6 @@
 import { getEnrichersForEntity } from "./enricher-registry.js";
 import { logEnricherTiming } from "../umes/enricher-timing.js";
 import { createLogger } from "../logger/index.js";
-import { authorizeFeatures } from "../../security/featurePolicy.js";
 const logger = createLogger("shared").child({ component: "umes" });
 const DEFAULT_TIMEOUT = 2e3;
 const SLOW_WARN_MS = 100;
@@ -15,7 +14,17 @@ function timeoutPromise(ms) {
 function hasRequiredFeatures(enricher, userFeatures) {
   if (!enricher.features || enricher.features.length === 0) return true;
   if (!userFeatures) return false;
-  return authorizeFeatures(enricher.features, { grantedFeatures: userFeatures });
+  const hasFeature = (required) => {
+    for (const granted of userFeatures) {
+      if (granted === "*" || granted === required) return true;
+      if (granted.endsWith(".*")) {
+        const prefix = granted.slice(0, -1);
+        if (required.startsWith(prefix)) return true;
+      }
+    }
+    return false;
+  };
+  return enricher.features.every((feature) => hasFeature(feature));
 }
 function filterByACLAndTenant(entries, context) {
   return entries.filter((entry) => {

package/dist/lib/crud/enricher-runner.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../src/lib/crud/enricher-runner.ts"],
-  "sourcesContent": ["/**\n * Response Enricher Runner\n *\n * Executes response enrichers against API response payloads.\n * Handles timeout, fallback, ACL feature gating, and error isolation.\n */\n\nimport type {\n  EnricherContext,\n  EnricherRegistryEntry,\n  EnrichmentResult,\n  ResponseEnricher,\n  SingleEnrichmentResult,\n} from './response-enricher'\nimport { getEnrichersForEntity } from './enricher-registry'\nimport { logEnricherTiming } from '../umes/enricher-timing'\nimport { createLogger } from '../logger'\nimport { authorizeFeatures } from '../../security/featurePolicy'\n\nconst logger = createLogger('shared').child({ component: 'umes' })\n\nconst DEFAULT_TIMEOUT = 2000\nconst SLOW_WARN_MS = 100\nconst SLOW_ERROR_MS = 500\nconst DEFAULT_CACHE_TTL_MS = 60_000\n\nfunction timeoutPromise(ms: number): Promise<never> {\n  return new Promise((_, reject) =>\n    setTimeout(() => reject(new Error(`Enricher timed out after ${ms}ms`)), ms),\n  )\n}\n\nfunction hasRequiredFeatures(\n  enricher: ResponseEnricher,\n  userFeatures: string[] | undefined,\n): boolean {\n  if (!enricher.features || enricher.features.length === 0) return true\n  if (!userFeatures) return false\n  return authorizeFeatures(enricher.features, { grantedFeatures: userFeatures })\n}\n\nfunction filterByACLAndTenant(\n  entries: EnricherRegistryEntry[],\n  context: EnricherContext,\n): EnricherRegistryEntry[] {\n  return entries.filter((entry) => {\n    const enricher = entry.enricher\n    if (!hasRequiredFeatures(enricher, context.userFeatures)) return false\n    if (enricher.disabledTenantIds?.includes(context.tenantId)) return false\n    return true\n  })\n}\n\nfunction getActiveEnrichers(\n  targetEntity: string,\n  context: EnricherContext,\n): EnricherRegistryEntry[] {\n  const entries = getEnrichersForEntity(targetEntity)\n  return filterByACLAndTenant(entries, context)\n}\n\n/**\n * Plan describing whether (and how) a CRUD list cache may embed enricher output.\n */\nexport type ListCacheEnricherPlan = {\n  /**\n   * Stable signature of the active, cache-embeddable enrichers in registry\n   * (priority) order. Included in the CRUD list cache key so a cached enriched\n   * payload is only ever served back to a request whose entitlements select the\n   * exact same enricher set. Empty string when nothing is embeddable \u2014 keeping\n   * the cache key identical to the pre-enricher shape for unaffected routes.\n   */\n  signature: string\n  /**\n   * True only when there is at least one active enricher for the context AND\n   * every active enricher opted into `cacheableOnListHit`. When true, the\n   * enriched list payload may be stored in the cache and served on a hit without\n   * re-running enrichers. When false, enrichers MUST re-run on every request so\n   * the response reflects live data (cross-module reads, wall-clock values, etc.)\n   * and no live enrichment is embedded in the shared cache entry.\n   */\n  skipEnrichersOnCacheHit: boolean\n}\n\n/**\n * Resolve, for the given context, whether the CRUD list cache may embed enricher\n * output and the cache-key signature to partition by when it can.\n *\n * The enriched payload is only embeddable (and the cache hit allowed to skip\n * enrichment) when every active enricher is `cacheableOnListHit` \u2014 i.e. its\n * output is a pure function of the cached record and invalidated together with\n * it. If any active enricher reads data the list cache does not invalidate on,\n * the route falls back to caching the pre-enrichment payload and re-running\n * enrichers on every request.\n */\nexport function resolveListCacheEnricherPlan(\n  targetEntity: string,\n  context: EnricherContext,\n): ListCacheEnricherPlan {\n  const active = getActiveEnrichers(targetEntity, context)\n  if (active.length === 0) return { signature: '', skipEnrichersOnCacheHit: false }\n  const allCacheable = active.every((entry) => entry.enricher.cacheableOnListHit === true)\n  if (!allCacheable) return { signature: '', skipEnrichersOnCacheHit: false }\n  return {\n    signature: active.map((entry) => entry.enricher.id).join(','),\n    skipEnrichersOnCacheHit: true,\n  }\n}\n\ntype CacheLike = {\n  get: (key: string) => Promise<unknown>\n  set: (key: string, value: unknown, options?: { ttl?: number; tags?: string[] }) => Promise<unknown>\n}\n\nfunction resolveCache(context: EnricherContext): CacheLike | null {\n  const container = context.container as { resolve?: (name: string) => unknown } | undefined\n  if (!container?.resolve) return null\n  try {\n    const cache = container.resolve('cache') as CacheLike\n    if (cache && typeof cache.get === 'function' && typeof cache.set === 'function') {\n      return cache\n    }\n  } catch {\n    // ignore cache resolution failures\n  }\n  try {\n    const cacheService = container.resolve('cacheService') as CacheLike\n    if (cacheService && typeof cacheService.get === 'function' && typeof cacheService.set === 'function') {\n      return cacheService\n    }\n  } catch {\n    // ignore cache service resolution failures\n  }\n  return null\n}\n\nfunction buildCacheKey(\n  enricher: ResponseEnricher,\n  context: EnricherContext,\n  mode: 'one' | 'many',\n  recordIds: string[],\n): string {\n  const sortedIds = [...recordIds].sort((a, b) => a.localeCompare(b))\n  return `umes:enricher:${enricher.id}:tenant:${context.tenantId}:org:${context.organizationId}:mode:${mode}:ids:${JSON.stringify(sortedIds)}`\n}\n\nfunction extractRecordId(record: Record<string, unknown>): string {\n  const idValue = record.id\n  if (typeof idValue === 'string' && idValue.trim().length > 0) return idValue.trim()\n  if (typeof idValue === 'number') return String(idValue)\n  return 'unknown'\n}\n\nfunction getEnricherCacheTtl(enricher: ResponseEnricher): number {\n  const ttl = enricher.cache?.ttl\n  if (typeof ttl === 'number' && Number.isFinite(ttl) && ttl > 0) {\n    return ttl\n  }\n  return DEFAULT_CACHE_TTL_MS\n}\n\nfunction getEnricherCacheTags(enricher: ResponseEnricher, context: EnricherContext): string[] {\n  const tags = new Set<string>([\n    `tenant:${context.tenantId}`,\n    `organization:${context.organizationId}`,\n    `enricher:${enricher.id}`,\n  ])\n  for (const tag of enricher.cache?.tags ?? []) {\n    if (!tag || tag.trim().length === 0) continue\n    tags.add(tag)\n  }\n  return Array.from(tags)\n}\n\nasync function readEnricherCache<T>(\n  cache: CacheLike | null,\n  key: string,\n): Promise<T | null> {\n  if (!cache) return null\n  try {\n    const value = await cache.get(key)\n    return value == null ? null : (value as T)\n  } catch {\n    return null\n  }\n}\n\nasync function writeEnricherCache(\n  cache: CacheLike | null,\n  key: string,\n  value: unknown,\n  ttl: number,\n  tags: string[],\n): Promise<void> {\n  if (!cache) return\n  try {\n    await cache.set(key, value, { ttl, tags })\n  } catch {\n    // ignore cache write failures\n  }\n}\n\n/**\n * Apply response enrichers to a list of records.\n *\n * Runs AFTER CrudHooks.afterList, BEFORE HTTP response serialization.\n * Each enricher runs independently \u2014 a failed non-critical enricher is skipped.\n */\nexport async function applyResponseEnrichers<T extends Record<string, unknown>>(\n  items: T[],\n  targetEntity: string,\n  context: EnricherContext,\n  preFilteredEntries?: EnricherRegistryEntry[],\n): Promise<EnrichmentResult<T>> {\n  const activeEntries = preFilteredEntries\n    ? filterByACLAndTenant(preFilteredEntries, context)\n    : getActiveEnrichers(targetEntity, context)\n\n  if (activeEntries.length === 0) {\n    return { items, _meta: { enrichedBy: [] } }\n  }\n\n  const enrichedBy: string[] = []\n  const enricherErrors: string[] = []\n  let currentItems = items\n  const cache = resolveCache(context)\n\n  for (const entry of activeEntries) {\n    const enricher = entry.enricher\n    const timeout = enricher.timeout ?? DEFAULT_TIMEOUT\n    const startTime = Date.now()\n\n    try {\n      let result: T[]\n      const recordIds = currentItems.map((item) => extractRecordId(item))\n      const shouldUseCache = enricher.cache?.strategy === 'read-through'\n      const cacheKey = shouldUseCache ? buildCacheKey(enricher, context, 'many', recordIds) : null\n      if (shouldUseCache && cacheKey) {\n        const cached = await readEnricherCache<T[]>(cache, cacheKey)\n        if (cached) {\n          currentItems = cached\n          enrichedBy.push(enricher.id)\n          continue\n        }\n      }\n\n      if (enricher.enrichMany) {\n        result = await Promise.race([\n          enricher.enrichMany(currentItems, context) as Promise<T[]>,\n          timeoutPromise(timeout),\n        ])\n      } else {\n        throw new Error(\n          `Enricher ${enricher.id} must implement enrichMany() for list endpoints`,\n        )\n      }\n\n      const elapsedMs = Date.now() - startTime\n      if (elapsedMs > SLOW_ERROR_MS) {\n        logger.error('Enricher exceeded slow threshold', { enricherId: enricher.id, elapsedMs, thresholdMs: SLOW_ERROR_MS })\n      } else if (elapsedMs > SLOW_WARN_MS) {\n        logger.warn('Enricher exceeded slow threshold', { enricherId: enricher.id, elapsedMs, thresholdMs: SLOW_WARN_MS })\n      }\n      logEnricherTiming(enricher.id, entry.moduleId, targetEntity, elapsedMs)\n\n      currentItems = result\n      if (shouldUseCache && cacheKey) {\n        await writeEnricherCache(\n          cache,\n          cacheKey,\n          result,\n          getEnricherCacheTtl(enricher),\n          getEnricherCacheTags(enricher, context),\n        )\n      }\n      enrichedBy.push(enricher.id)\n    } catch (err) {\n      if (enricher.critical) {\n        throw err\n      }\n\n      logger.warn('Enricher failed', { enricherId: enricher.id, err })\n      enricherErrors.push(enricher.id)\n\n      if (enricher.fallback) {\n        currentItems = currentItems.map((item) => ({\n          ...item,\n          ...enricher.fallback,\n        })) as T[]\n      }\n    }\n  }\n\n  return {\n    items: currentItems,\n    _meta: {\n      enrichedBy,\n      ...(enricherErrors.length > 0 ? { enricherErrors } : {}),\n    },\n  }\n}\n\n/**\n * Apply response enrichers to a single record.\n *\n * Used for detail endpoints (GET /:id), POST, and PUT responses.\n */\nexport async function applyResponseEnricherToRecord<T extends Record<string, unknown>>(\n  record: T,\n  targetEntity: string,\n  context: EnricherContext,\n  preFilteredEntries?: EnricherRegistryEntry[],\n): Promise<SingleEnrichmentResult<T>> {\n  const activeEntries = preFilteredEntries\n    ? filterByACLAndTenant(preFilteredEntries, context)\n    : getActiveEnrichers(targetEntity, context)\n\n  if (activeEntries.length === 0) {\n    return { record, _meta: { enrichedBy: [] } }\n  }\n\n  const enrichedBy: string[] = []\n  const enricherErrors: string[] = []\n  let currentRecord = record\n  const cache = resolveCache(context)\n\n  for (const entry of activeEntries) {\n    const enricher = entry.enricher\n    const timeout = enricher.timeout ?? DEFAULT_TIMEOUT\n    const startTime = Date.now()\n\n    try {\n      const recordId = extractRecordId(currentRecord)\n      const shouldUseCache = enricher.cache?.strategy === 'read-through'\n      const cacheKey = shouldUseCache ? buildCacheKey(enricher, context, 'one', [recordId]) : null\n      if (shouldUseCache && cacheKey) {\n        const cached = await readEnricherCache<T>(cache, cacheKey)\n        if (cached) {\n          currentRecord = cached\n          enrichedBy.push(enricher.id)\n          continue\n        }\n      }\n      const result = await Promise.race([\n        enricher.enrichOne(currentRecord, context) as Promise<T>,\n        timeoutPromise(timeout),\n      ])\n\n      const elapsedMs = Date.now() - startTime\n      logEnricherTiming(enricher.id, entry.moduleId, targetEntity, elapsedMs)\n\n      currentRecord = result\n      if (shouldUseCache && cacheKey) {\n        await writeEnricherCache(\n          cache,\n          cacheKey,\n          result,\n          getEnricherCacheTtl(enricher),\n          getEnricherCacheTags(enricher, context),\n        )\n      }\n      enrichedBy.push(enricher.id)\n    } catch (err) {\n      if (enricher.critical) {\n        throw err\n      }\n\n      logger.warn('Enricher failed', { enricherId: enricher.id, err })\n      enricherErrors.push(enricher.id)\n\n      if (enricher.fallback) {\n        currentRecord = { ...currentRecord, ...enricher.fallback } as T\n      }\n    }\n  }\n\n  return {\n    record: currentRecord,\n    _meta: {\n      enrichedBy,\n      ...(enricherErrors.length > 0 ? { enricherErrors } : {}),\n    },\n  }\n}\n"],
-  "mappings": "AAcA,SAAS,6BAA6B;AACtC,SAAS,yBAAyB;AAClC,SAAS,oBAAoB;AAC7B,SAAS,yBAAyB;AAElC,MAAM,SAAS,aAAa,QAAQ,EAAE,MAAM,EAAE,WAAW,OAAO,CAAC;AAEjE,MAAM,kBAAkB;AACxB,MAAM,eAAe;AACrB,MAAM,gBAAgB;AACtB,MAAM,uBAAuB;AAE7B,SAAS,eAAe,IAA4B;AAClD,SAAO,IAAI;AAAA,IAAQ,CAAC,GAAG,WACrB,WAAW,MAAM,OAAO,IAAI,MAAM,4BAA4B,EAAE,IAAI,CAAC,GAAG,EAAE;AAAA,EAC5E;AACF;AAEA,SAAS,oBACP,UACA,cACS;AACT,MAAI,CAAC,SAAS,YAAY,SAAS,SAAS,WAAW,EAAG,QAAO;AACjE,MAAI,CAAC,aAAc,QAAO;AAC1B,SAAO,kBAAkB,SAAS,UAAU,EAAE,iBAAiB,aAAa,CAAC;AAC/E;AAEA,SAAS,qBACP,SACA,SACyB;AACzB,SAAO,QAAQ,OAAO,CAAC,UAAU;AAC/B,UAAM,WAAW,MAAM;AACvB,QAAI,CAAC,oBAAoB,UAAU,QAAQ,YAAY,EAAG,QAAO;AACjE,QAAI,SAAS,mBAAmB,SAAS,QAAQ,QAAQ,EAAG,QAAO;AACnE,WAAO;AAAA,EACT,CAAC;AACH;AAEA,SAAS,mBACP,cACA,SACyB;AACzB,QAAM,UAAU,sBAAsB,YAAY;AAClD,SAAO,qBAAqB,SAAS,OAAO;AAC9C;AAoCO,SAAS,6BACd,cACA,SACuB;AACvB,QAAM,SAAS,mBAAmB,cAAc,OAAO;AACvD,MAAI,OAAO,WAAW,EAAG,QAAO,EAAE,WAAW,IAAI,yBAAyB,MAAM;AAChF,QAAM,eAAe,OAAO,MAAM,CAAC,UAAU,MAAM,SAAS,uBAAuB,IAAI;AACvF,MAAI,CAAC,aAAc,QAAO,EAAE,WAAW,IAAI,yBAAyB,MAAM;AAC1E,SAAO;AAAA,IACL,WAAW,OAAO,IAAI,CAAC,UAAU,MAAM,SAAS,EAAE,EAAE,KAAK,GAAG;AAAA,IAC5D,yBAAyB;AAAA,EAC3B;AACF;AAOA,SAAS,aAAa,SAA4C;AAChE,QAAM,YAAY,QAAQ;AAC1B,MAAI,CAAC,WAAW,QAAS,QAAO;AAChC,MAAI;AACF,UAAM,QAAQ,UAAU,QAAQ,OAAO;AACvC,QAAI,SAAS,OAAO,MAAM,QAAQ,cAAc,OAAO,MAAM,QAAQ,YAAY;AAC/E,aAAO;AAAA,IACT;AAAA,EACF,QAAQ;AAAA,EAER;AACA,MAAI;AACF,UAAM,eAAe,UAAU,QAAQ,cAAc;AACrD,QAAI,gBAAgB,OAAO,aAAa,QAAQ,cAAc,OAAO,aAAa,QAAQ,YAAY;AACpG,aAAO;AAAA,IACT;AAAA,EACF,QAAQ;AAAA,EAER;AACA,SAAO;AACT;AAEA,SAAS,cACP,UACA,SACA,MACA,WACQ;AACR,QAAM,YAAY,CAAC,GAAG,SAAS,EAAE,KAAK,CAAC,GAAG,MAAM,EAAE,cAAc,CAAC,CAAC;AAClE,SAAO,iBAAiB,SAAS,EAAE,WAAW,QAAQ,QAAQ,QAAQ,QAAQ,cAAc,SAAS,IAAI,QAAQ,KAAK,UAAU,SAAS,CAAC;AAC5I;AAEA,SAAS,gBAAgB,QAAyC;AAChE,QAAM,UAAU,OAAO;AACvB,MAAI,OAAO,YAAY,YAAY,QAAQ,KAAK,EAAE,SAAS,EAAG,QAAO,QAAQ,KAAK;AAClF,MAAI,OAAO,YAAY,SAAU,QAAO,OAAO,OAAO;AACtD,SAAO;AACT;AAEA,SAAS,oBAAoB,UAAoC;AAC/D,QAAM,MAAM,SAAS,OAAO;AAC5B,MAAI,OAAO,QAAQ,YAAY,OAAO,SAAS,GAAG,KAAK,MAAM,GAAG;AAC9D,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAEA,SAAS,qBAAqB,UAA4B,SAAoC;AAC5F,QAAM,OAAO,oBAAI,IAAY;AAAA,IAC3B,UAAU,QAAQ,QAAQ;AAAA,IAC1B,gBAAgB,QAAQ,cAAc;AAAA,IACtC,YAAY,SAAS,EAAE;AAAA,EACzB,CAAC;AACD,aAAW,OAAO,SAAS,OAAO,QAAQ,CAAC,GAAG;AAC5C,QAAI,CAAC,OAAO,IAAI,KAAK,EAAE,WAAW,EAAG;AACrC,SAAK,IAAI,GAAG;AAAA,EACd;AACA,SAAO,MAAM,KAAK,IAAI;AACxB;AAEA,eAAe,kBACb,OACA,KACmB;AACnB,MAAI,CAAC,MAAO,QAAO;AACnB,MAAI;AACF,UAAM,QAAQ,MAAM,MAAM,IAAI,GAAG;AACjC,WAAO,SAAS,OAAO,OAAQ;AAAA,EACjC,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,eAAe,mBACb,OACA,KACA,OACA,KACA,MACe;AACf,MAAI,CAAC,MAAO;AACZ,MAAI;AACF,UAAM,MAAM,IAAI,KAAK,OAAO,EAAE,KAAK,KAAK,CAAC;AAAA,EAC3C,QAAQ;AAAA,EAER;AACF;AAQA,eAAsB,uBACpB,OACA,cACA,SACA,oBAC8B;AAC9B,QAAM,gBAAgB,qBAClB,qBAAqB,oBAAoB,OAAO,IAChD,mBAAmB,cAAc,OAAO;AAE5C,MAAI,cAAc,WAAW,GAAG;AAC9B,WAAO,EAAE,OAAO,OAAO,EAAE,YAAY,CAAC,EAAE,EAAE;AAAA,EAC5C;AAEA,QAAM,aAAuB,CAAC;AAC9B,QAAM,iBAA2B,CAAC;AAClC,MAAI,eAAe;AACnB,QAAM,QAAQ,aAAa,OAAO;AAElC,aAAW,SAAS,eAAe;AACjC,UAAM,WAAW,MAAM;AACvB,UAAM,UAAU,SAAS,WAAW;AACpC,UAAM,YAAY,KAAK,IAAI;AAE3B,QAAI;AACF,UAAI;AACJ,YAAM,YAAY,aAAa,IAAI,CAAC,SAAS,gBAAgB,IAAI,CAAC;AAClE,YAAM,iBAAiB,SAAS,OAAO,aAAa;AACpD,YAAM,WAAW,iBAAiB,cAAc,UAAU,SAAS,QAAQ,SAAS,IAAI;AACxF,UAAI,kBAAkB,UAAU;AAC9B,cAAM,SAAS,MAAM,kBAAuB,OAAO,QAAQ;AAC3D,YAAI,QAAQ;AACV,yBAAe;AACf,qBAAW,KAAK,SAAS,EAAE;AAC3B;AAAA,QACF;AAAA,MACF;AAEA,UAAI,SAAS,YAAY;AACvB,iBAAS,MAAM,QAAQ,KAAK;AAAA,UAC1B,SAAS,WAAW,cAAc,OAAO;AAAA,UACzC,eAAe,OAAO;AAAA,QACxB,CAAC;AAAA,MACH,OAAO;AACL,cAAM,IAAI;AAAA,UACR,YAAY,SAAS,EAAE;AAAA,QACzB;AAAA,MACF;AAEA,YAAM,YAAY,KAAK,IAAI,IAAI;AAC/B,UAAI,YAAY,eAAe;AAC7B,eAAO,MAAM,oCAAoC,EAAE,YAAY,SAAS,IAAI,WAAW,aAAa,cAAc,CAAC;AAAA,MACrH,WAAW,YAAY,cAAc;AACnC,eAAO,KAAK,oCAAoC,EAAE,YAAY,SAAS,IAAI,WAAW,aAAa,aAAa,CAAC;AAAA,MACnH;AACA,wBAAkB,SAAS,IAAI,MAAM,UAAU,cAAc,SAAS;AAEtE,qBAAe;AACf,UAAI,kBAAkB,UAAU;AAC9B,cAAM;AAAA,UACJ;AAAA,UACA;AAAA,UACA;AAAA,UACA,oBAAoB,QAAQ;AAAA,UAC5B,qBAAqB,UAAU,OAAO;AAAA,QACxC;AAAA,MACF;AACA,iBAAW,KAAK,SAAS,EAAE;AAAA,IAC7B,SAAS,KAAK;AACZ,UAAI,SAAS,UAAU;AACrB,cAAM;AAAA,MACR;AAEA,aAAO,KAAK,mBAAmB,EAAE,YAAY,SAAS,IAAI,IAAI,CAAC;AAC/D,qBAAe,KAAK,SAAS,EAAE;AAE/B,UAAI,SAAS,UAAU;AACrB,uBAAe,aAAa,IAAI,CAAC,UAAU;AAAA,UACzC,GAAG;AAAA,UACH,GAAG,SAAS;AAAA,QACd,EAAE;AAAA,MACJ;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AAAA,IACL,OAAO;AAAA,IACP,OAAO;AAAA,MACL;AAAA,MACA,GAAI,eAAe,SAAS,IAAI,EAAE,eAAe,IAAI,CAAC;AAAA,IACxD;AAAA,EACF;AACF;AAOA,eAAsB,8BACpB,QACA,cACA,SACA,oBACoC;AACpC,QAAM,gBAAgB,qBAClB,qBAAqB,oBAAoB,OAAO,IAChD,mBAAmB,cAAc,OAAO;AAE5C,MAAI,cAAc,WAAW,GAAG;AAC9B,WAAO,EAAE,QAAQ,OAAO,EAAE,YAAY,CAAC,EAAE,EAAE;AAAA,EAC7C;AAEA,QAAM,aAAuB,CAAC;AAC9B,QAAM,iBAA2B,CAAC;AAClC,MAAI,gBAAgB;AACpB,QAAM,QAAQ,aAAa,OAAO;AAElC,aAAW,SAAS,eAAe;AACjC,UAAM,WAAW,MAAM;AACvB,UAAM,UAAU,SAAS,WAAW;AACpC,UAAM,YAAY,KAAK,IAAI;AAE3B,QAAI;AACF,YAAM,WAAW,gBAAgB,aAAa;AAC9C,YAAM,iBAAiB,SAAS,OAAO,aAAa;AACpD,YAAM,WAAW,iBAAiB,cAAc,UAAU,SAAS,OAAO,CAAC,QAAQ,CAAC,IAAI;AACxF,UAAI,kBAAkB,UAAU;AAC9B,cAAM,SAAS,MAAM,kBAAqB,OAAO,QAAQ;AACzD,YAAI,QAAQ;AACV,0BAAgB;AAChB,qBAAW,KAAK,SAAS,EAAE;AAC3B;AAAA,QACF;AAAA,MACF;AACA,YAAM,SAAS,MAAM,QAAQ,KAAK;AAAA,QAChC,SAAS,UAAU,eAAe,OAAO;AAAA,QACzC,eAAe,OAAO;AAAA,MACxB,CAAC;AAED,YAAM,YAAY,KAAK,IAAI,IAAI;AAC/B,wBAAkB,SAAS,IAAI,MAAM,UAAU,cAAc,SAAS;AAEtE,sBAAgB;AAChB,UAAI,kBAAkB,UAAU;AAC9B,cAAM;AAAA,UACJ;AAAA,UACA;AAAA,UACA;AAAA,UACA,oBAAoB,QAAQ;AAAA,UAC5B,qBAAqB,UAAU,OAAO;AAAA,QACxC;AAAA,MACF;AACA,iBAAW,KAAK,SAAS,EAAE;AAAA,IAC7B,SAAS,KAAK;AACZ,UAAI,SAAS,UAAU;AACrB,cAAM;AAAA,MACR;AAEA,aAAO,KAAK,mBAAmB,EAAE,YAAY,SAAS,IAAI,IAAI,CAAC;AAC/D,qBAAe,KAAK,SAAS,EAAE;AAE/B,UAAI,SAAS,UAAU;AACrB,wBAAgB,EAAE,GAAG,eAAe,GAAG,SAAS,SAAS;AAAA,MAC3D;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AAAA,IACL,QAAQ;AAAA,IACR,OAAO;AAAA,MACL;AAAA,MACA,GAAI,eAAe,SAAS,IAAI,EAAE,eAAe,IAAI,CAAC;AAAA,IACxD;AAAA,EACF;AACF;",
+  "sourcesContent": ["/**\n * Response Enricher Runner\n *\n * Executes response enrichers against API response payloads.\n * Handles timeout, fallback, ACL feature gating, and error isolation.\n */\n\nimport type {\n  EnricherContext,\n  EnricherRegistryEntry,\n  EnrichmentResult,\n  ResponseEnricher,\n  SingleEnrichmentResult,\n} from './response-enricher'\nimport { getEnrichersForEntity } from './enricher-registry'\nimport { logEnricherTiming } from '../umes/enricher-timing'\nimport { createLogger } from '../logger'\n\nconst logger = createLogger('shared').child({ component: 'umes' })\n\nconst DEFAULT_TIMEOUT = 2000\nconst SLOW_WARN_MS = 100\nconst SLOW_ERROR_MS = 500\nconst DEFAULT_CACHE_TTL_MS = 60_000\n\nfunction timeoutPromise(ms: number): Promise<never> {\n  return new Promise((_, reject) =>\n    setTimeout(() => reject(new Error(`Enricher timed out after ${ms}ms`)), ms),\n  )\n}\n\nfunction hasRequiredFeatures(\n  enricher: ResponseEnricher,\n  userFeatures: string[] | undefined,\n): boolean {\n  if (!enricher.features || enricher.features.length === 0) return true\n  if (!userFeatures) return false\n  const hasFeature = (required: string): boolean => {\n    for (const granted of userFeatures) {\n      if (granted === '*' || granted === required) return true\n      if (granted.endsWith('.*')) {\n        const prefix = granted.slice(0, -1)\n        if (required.startsWith(prefix)) return true\n      }\n    }\n    return false\n  }\n  return enricher.features.every((feature) => hasFeature(feature))\n}\n\nfunction filterByACLAndTenant(\n  entries: EnricherRegistryEntry[],\n  context: EnricherContext,\n): EnricherRegistryEntry[] {\n  return entries.filter((entry) => {\n    const enricher = entry.enricher\n    if (!hasRequiredFeatures(enricher, context.userFeatures)) return false\n    if (enricher.disabledTenantIds?.includes(context.tenantId)) return false\n    return true\n  })\n}\n\nfunction getActiveEnrichers(\n  targetEntity: string,\n  context: EnricherContext,\n): EnricherRegistryEntry[] {\n  const entries = getEnrichersForEntity(targetEntity)\n  return filterByACLAndTenant(entries, context)\n}\n\n/**\n * Plan describing whether (and how) a CRUD list cache may embed enricher output.\n */\nexport type ListCacheEnricherPlan = {\n  /**\n   * Stable signature of the active, cache-embeddable enrichers in registry\n   * (priority) order. Included in the CRUD list cache key so a cached enriched\n   * payload is only ever served back to a request whose entitlements select the\n   * exact same enricher set. Empty string when nothing is embeddable \u2014 keeping\n   * the cache key identical to the pre-enricher shape for unaffected routes.\n   */\n  signature: string\n  /**\n   * True only when there is at least one active enricher for the context AND\n   * every active enricher opted into `cacheableOnListHit`. When true, the\n   * enriched list payload may be stored in the cache and served on a hit without\n   * re-running enrichers. When false, enrichers MUST re-run on every request so\n   * the response reflects live data (cross-module reads, wall-clock values, etc.)\n   * and no live enrichment is embedded in the shared cache entry.\n   */\n  skipEnrichersOnCacheHit: boolean\n}\n\n/**\n * Resolve, for the given context, whether the CRUD list cache may embed enricher\n * output and the cache-key signature to partition by when it can.\n *\n * The enriched payload is only embeddable (and the cache hit allowed to skip\n * enrichment) when every active enricher is `cacheableOnListHit` \u2014 i.e. its\n * output is a pure function of the cached record and invalidated together with\n * it. If any active enricher reads data the list cache does not invalidate on,\n * the route falls back to caching the pre-enrichment payload and re-running\n * enrichers on every request.\n */\nexport function resolveListCacheEnricherPlan(\n  targetEntity: string,\n  context: EnricherContext,\n): ListCacheEnricherPlan {\n  const active = getActiveEnrichers(targetEntity, context)\n  if (active.length === 0) return { signature: '', skipEnrichersOnCacheHit: false }\n  const allCacheable = active.every((entry) => entry.enricher.cacheableOnListHit === true)\n  if (!allCacheable) return { signature: '', skipEnrichersOnCacheHit: false }\n  return {\n    signature: active.map((entry) => entry.enricher.id).join(','),\n    skipEnrichersOnCacheHit: true,\n  }\n}\n\ntype CacheLike = {\n  get: (key: string) => Promise<unknown>\n  set: (key: string, value: unknown, options?: { ttl?: number; tags?: string[] }) => Promise<unknown>\n}\n\nfunction resolveCache(context: EnricherContext): CacheLike | null {\n  const container = context.container as { resolve?: (name: string) => unknown } | undefined\n  if (!container?.resolve) return null\n  try {\n    const cache = container.resolve('cache') as CacheLike\n    if (cache && typeof cache.get === 'function' && typeof cache.set === 'function') {\n      return cache\n    }\n  } catch {\n    // ignore cache resolution failures\n  }\n  try {\n    const cacheService = container.resolve('cacheService') as CacheLike\n    if (cacheService && typeof cacheService.get === 'function' && typeof cacheService.set === 'function') {\n      return cacheService\n    }\n  } catch {\n    // ignore cache service resolution failures\n  }\n  return null\n}\n\nfunction buildCacheKey(\n  enricher: ResponseEnricher,\n  context: EnricherContext,\n  mode: 'one' | 'many',\n  recordIds: string[],\n): string {\n  const sortedIds = [...recordIds].sort((a, b) => a.localeCompare(b))\n  return `umes:enricher:${enricher.id}:tenant:${context.tenantId}:org:${context.organizationId}:mode:${mode}:ids:${JSON.stringify(sortedIds)}`\n}\n\nfunction extractRecordId(record: Record<string, unknown>): string {\n  const idValue = record.id\n  if (typeof idValue === 'string' && idValue.trim().length > 0) return idValue.trim()\n  if (typeof idValue === 'number') return String(idValue)\n  return 'unknown'\n}\n\nfunction getEnricherCacheTtl(enricher: ResponseEnricher): number {\n  const ttl = enricher.cache?.ttl\n  if (typeof ttl === 'number' && Number.isFinite(ttl) && ttl > 0) {\n    return ttl\n  }\n  return DEFAULT_CACHE_TTL_MS\n}\n\nfunction getEnricherCacheTags(enricher: ResponseEnricher, context: EnricherContext): string[] {\n  const tags = new Set<string>([\n    `tenant:${context.tenantId}`,\n    `organization:${context.organizationId}`,\n    `enricher:${enricher.id}`,\n  ])\n  for (const tag of enricher.cache?.tags ?? []) {\n    if (!tag || tag.trim().length === 0) continue\n    tags.add(tag)\n  }\n  return Array.from(tags)\n}\n\nasync function readEnricherCache<T>(\n  cache: CacheLike | null,\n  key: string,\n): Promise<T | null> {\n  if (!cache) return null\n  try {\n    const value = await cache.get(key)\n    return value == null ? null : (value as T)\n  } catch {\n    return null\n  }\n}\n\nasync function writeEnricherCache(\n  cache: CacheLike | null,\n  key: string,\n  value: unknown,\n  ttl: number,\n  tags: string[],\n): Promise<void> {\n  if (!cache) return\n  try {\n    await cache.set(key, value, { ttl, tags })\n  } catch {\n    // ignore cache write failures\n  }\n}\n\n/**\n * Apply response enrichers to a list of records.\n *\n * Runs AFTER CrudHooks.afterList, BEFORE HTTP response serialization.\n * Each enricher runs independently \u2014 a failed non-critical enricher is skipped.\n */\nexport async function applyResponseEnrichers<T extends Record<string, unknown>>(\n  items: T[],\n  targetEntity: string,\n  context: EnricherContext,\n  preFilteredEntries?: EnricherRegistryEntry[],\n): Promise<EnrichmentResult<T>> {\n  const activeEntries = preFilteredEntries\n    ? filterByACLAndTenant(preFilteredEntries, context)\n    : getActiveEnrichers(targetEntity, context)\n\n  if (activeEntries.length === 0) {\n    return { items, _meta: { enrichedBy: [] } }\n  }\n\n  const enrichedBy: string[] = []\n  const enricherErrors: string[] = []\n  let currentItems = items\n  const cache = resolveCache(context)\n\n  for (const entry of activeEntries) {\n    const enricher = entry.enricher\n    const timeout = enricher.timeout ?? DEFAULT_TIMEOUT\n    const startTime = Date.now()\n\n    try {\n      let result: T[]\n      const recordIds = currentItems.map((item) => extractRecordId(item))\n      const shouldUseCache = enricher.cache?.strategy === 'read-through'\n      const cacheKey = shouldUseCache ? buildCacheKey(enricher, context, 'many', recordIds) : null\n      if (shouldUseCache && cacheKey) {\n        const cached = await readEnricherCache<T[]>(cache, cacheKey)\n        if (cached) {\n          currentItems = cached\n          enrichedBy.push(enricher.id)\n          continue\n        }\n      }\n\n      if (enricher.enrichMany) {\n        result = await Promise.race([\n          enricher.enrichMany(currentItems, context) as Promise<T[]>,\n          timeoutPromise(timeout),\n        ])\n      } else {\n        throw new Error(\n          `Enricher ${enricher.id} must implement enrichMany() for list endpoints`,\n        )\n      }\n\n      const elapsedMs = Date.now() - startTime\n      if (elapsedMs > SLOW_ERROR_MS) {\n        logger.error('Enricher exceeded slow threshold', { enricherId: enricher.id, elapsedMs, thresholdMs: SLOW_ERROR_MS })\n      } else if (elapsedMs > SLOW_WARN_MS) {\n        logger.warn('Enricher exceeded slow threshold', { enricherId: enricher.id, elapsedMs, thresholdMs: SLOW_WARN_MS })\n      }\n      logEnricherTiming(enricher.id, entry.moduleId, targetEntity, elapsedMs)\n\n      currentItems = result\n      if (shouldUseCache && cacheKey) {\n        await writeEnricherCache(\n          cache,\n          cacheKey,\n          result,\n          getEnricherCacheTtl(enricher),\n          getEnricherCacheTags(enricher, context),\n        )\n      }\n      enrichedBy.push(enricher.id)\n    } catch (err) {\n      if (enricher.critical) {\n        throw err\n      }\n\n      logger.warn('Enricher failed', { enricherId: enricher.id, err })\n      enricherErrors.push(enricher.id)\n\n      if (enricher.fallback) {\n        currentItems = currentItems.map((item) => ({\n          ...item,\n          ...enricher.fallback,\n        })) as T[]\n      }\n    }\n  }\n\n  return {\n    items: currentItems,\n    _meta: {\n      enrichedBy,\n      ...(enricherErrors.length > 0 ? { enricherErrors } : {}),\n    },\n  }\n}\n\n/**\n * Apply response enrichers to a single record.\n *\n * Used for detail endpoints (GET /:id), POST, and PUT responses.\n */\nexport async function applyResponseEnricherToRecord<T extends Record<string, unknown>>(\n  record: T,\n  targetEntity: string,\n  context: EnricherContext,\n  preFilteredEntries?: EnricherRegistryEntry[],\n): Promise<SingleEnrichmentResult<T>> {\n  const activeEntries = preFilteredEntries\n    ? filterByACLAndTenant(preFilteredEntries, context)\n    : getActiveEnrichers(targetEntity, context)\n\n  if (activeEntries.length === 0) {\n    return { record, _meta: { enrichedBy: [] } }\n  }\n\n  const enrichedBy: string[] = []\n  const enricherErrors: string[] = []\n  let currentRecord = record\n  const cache = resolveCache(context)\n\n  for (const entry of activeEntries) {\n    const enricher = entry.enricher\n    const timeout = enricher.timeout ?? DEFAULT_TIMEOUT\n    const startTime = Date.now()\n\n    try {\n      const recordId = extractRecordId(currentRecord)\n      const shouldUseCache = enricher.cache?.strategy === 'read-through'\n      const cacheKey = shouldUseCache ? buildCacheKey(enricher, context, 'one', [recordId]) : null\n      if (shouldUseCache && cacheKey) {\n        const cached = await readEnricherCache<T>(cache, cacheKey)\n        if (cached) {\n          currentRecord = cached\n          enrichedBy.push(enricher.id)\n          continue\n        }\n      }\n      const result = await Promise.race([\n        enricher.enrichOne(currentRecord, context) as Promise<T>,\n        timeoutPromise(timeout),\n      ])\n\n      const elapsedMs = Date.now() - startTime\n      logEnricherTiming(enricher.id, entry.moduleId, targetEntity, elapsedMs)\n\n      currentRecord = result\n      if (shouldUseCache && cacheKey) {\n        await writeEnricherCache(\n          cache,\n          cacheKey,\n          result,\n          getEnricherCacheTtl(enricher),\n          getEnricherCacheTags(enricher, context),\n        )\n      }\n      enrichedBy.push(enricher.id)\n    } catch (err) {\n      if (enricher.critical) {\n        throw err\n      }\n\n      logger.warn('Enricher failed', { enricherId: enricher.id, err })\n      enricherErrors.push(enricher.id)\n\n      if (enricher.fallback) {\n        currentRecord = { ...currentRecord, ...enricher.fallback } as T\n      }\n    }\n  }\n\n  return {\n    record: currentRecord,\n    _meta: {\n      enrichedBy,\n      ...(enricherErrors.length > 0 ? { enricherErrors } : {}),\n    },\n  }\n}\n"],
+  "mappings": "AAcA,SAAS,6BAA6B;AACtC,SAAS,yBAAyB;AAClC,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,QAAQ,EAAE,MAAM,EAAE,WAAW,OAAO,CAAC;AAEjE,MAAM,kBAAkB;AACxB,MAAM,eAAe;AACrB,MAAM,gBAAgB;AACtB,MAAM,uBAAuB;AAE7B,SAAS,eAAe,IAA4B;AAClD,SAAO,IAAI;AAAA,IAAQ,CAAC,GAAG,WACrB,WAAW,MAAM,OAAO,IAAI,MAAM,4BAA4B,EAAE,IAAI,CAAC,GAAG,EAAE;AAAA,EAC5E;AACF;AAEA,SAAS,oBACP,UACA,cACS;AACT,MAAI,CAAC,SAAS,YAAY,SAAS,SAAS,WAAW,EAAG,QAAO;AACjE,MAAI,CAAC,aAAc,QAAO;AAC1B,QAAM,aAAa,CAAC,aAA8B;AAChD,eAAW,WAAW,cAAc;AAClC,UAAI,YAAY,OAAO,YAAY,SAAU,QAAO;AACpD,UAAI,QAAQ,SAAS,IAAI,GAAG;AAC1B,cAAM,SAAS,QAAQ,MAAM,GAAG,EAAE;AAClC,YAAI,SAAS,WAAW,MAAM,EAAG,QAAO;AAAA,MAC1C;AAAA,IACF;AACA,WAAO;AAAA,EACT;AACA,SAAO,SAAS,SAAS,MAAM,CAAC,YAAY,WAAW,OAAO,CAAC;AACjE;AAEA,SAAS,qBACP,SACA,SACyB;AACzB,SAAO,QAAQ,OAAO,CAAC,UAAU;AAC/B,UAAM,WAAW,MAAM;AACvB,QAAI,CAAC,oBAAoB,UAAU,QAAQ,YAAY,EAAG,QAAO;AACjE,QAAI,SAAS,mBAAmB,SAAS,QAAQ,QAAQ,EAAG,QAAO;AACnE,WAAO;AAAA,EACT,CAAC;AACH;AAEA,SAAS,mBACP,cACA,SACyB;AACzB,QAAM,UAAU,sBAAsB,YAAY;AAClD,SAAO,qBAAqB,SAAS,OAAO;AAC9C;AAoCO,SAAS,6BACd,cACA,SACuB;AACvB,QAAM,SAAS,mBAAmB,cAAc,OAAO;AACvD,MAAI,OAAO,WAAW,EAAG,QAAO,EAAE,WAAW,IAAI,yBAAyB,MAAM;AAChF,QAAM,eAAe,OAAO,MAAM,CAAC,UAAU,MAAM,SAAS,uBAAuB,IAAI;AACvF,MAAI,CAAC,aAAc,QAAO,EAAE,WAAW,IAAI,yBAAyB,MAAM;AAC1E,SAAO;AAAA,IACL,WAAW,OAAO,IAAI,CAAC,UAAU,MAAM,SAAS,EAAE,EAAE,KAAK,GAAG;AAAA,IAC5D,yBAAyB;AAAA,EAC3B;AACF;AAOA,SAAS,aAAa,SAA4C;AAChE,QAAM,YAAY,QAAQ;AAC1B,MAAI,CAAC,WAAW,QAAS,QAAO;AAChC,MAAI;AACF,UAAM,QAAQ,UAAU,QAAQ,OAAO;AACvC,QAAI,SAAS,OAAO,MAAM,QAAQ,cAAc,OAAO,MAAM,QAAQ,YAAY;AAC/E,aAAO;AAAA,IACT;AAAA,EACF,QAAQ;AAAA,EAER;AACA,MAAI;AACF,UAAM,eAAe,UAAU,QAAQ,cAAc;AACrD,QAAI,gBAAgB,OAAO,aAAa,QAAQ,cAAc,OAAO,aAAa,QAAQ,YAAY;AACpG,aAAO;AAAA,IACT;AAAA,EACF,QAAQ;AAAA,EAER;AACA,SAAO;AACT;AAEA,SAAS,cACP,UACA,SACA,MACA,WACQ;AACR,QAAM,YAAY,CAAC,GAAG,SAAS,EAAE,KAAK,CAAC,GAAG,MAAM,EAAE,cAAc,CAAC,CAAC;AAClE,SAAO,iBAAiB,SAAS,EAAE,WAAW,QAAQ,QAAQ,QAAQ,QAAQ,cAAc,SAAS,IAAI,QAAQ,KAAK,UAAU,SAAS,CAAC;AAC5I;AAEA,SAAS,gBAAgB,QAAyC;AAChE,QAAM,UAAU,OAAO;AACvB,MAAI,OAAO,YAAY,YAAY,QAAQ,KAAK,EAAE,SAAS,EAAG,QAAO,QAAQ,KAAK;AAClF,MAAI,OAAO,YAAY,SAAU,QAAO,OAAO,OAAO;AACtD,SAAO;AACT;AAEA,SAAS,oBAAoB,UAAoC;AAC/D,QAAM,MAAM,SAAS,OAAO;AAC5B,MAAI,OAAO,QAAQ,YAAY,OAAO,SAAS,GAAG,KAAK,MAAM,GAAG;AAC9D,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAEA,SAAS,qBAAqB,UAA4B,SAAoC;AAC5F,QAAM,OAAO,oBAAI,IAAY;AAAA,IAC3B,UAAU,QAAQ,QAAQ;AAAA,IAC1B,gBAAgB,QAAQ,cAAc;AAAA,IACtC,YAAY,SAAS,EAAE;AAAA,EACzB,CAAC;AACD,aAAW,OAAO,SAAS,OAAO,QAAQ,CAAC,GAAG;AAC5C,QAAI,CAAC,OAAO,IAAI,KAAK,EAAE,WAAW,EAAG;AACrC,SAAK,IAAI,GAAG;AAAA,EACd;AACA,SAAO,MAAM,KAAK,IAAI;AACxB;AAEA,eAAe,kBACb,OACA,KACmB;AACnB,MAAI,CAAC,MAAO,QAAO;AACnB,MAAI;AACF,UAAM,QAAQ,MAAM,MAAM,IAAI,GAAG;AACjC,WAAO,SAAS,OAAO,OAAQ;AAAA,EACjC,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,eAAe,mBACb,OACA,KACA,OACA,KACA,MACe;AACf,MAAI,CAAC,MAAO;AACZ,MAAI;AACF,UAAM,MAAM,IAAI,KAAK,OAAO,EAAE,KAAK,KAAK,CAAC;AAAA,EAC3C,QAAQ;AAAA,EAER;AACF;AAQA,eAAsB,uBACpB,OACA,cACA,SACA,oBAC8B;AAC9B,QAAM,gBAAgB,qBAClB,qBAAqB,oBAAoB,OAAO,IAChD,mBAAmB,cAAc,OAAO;AAE5C,MAAI,cAAc,WAAW,GAAG;AAC9B,WAAO,EAAE,OAAO,OAAO,EAAE,YAAY,CAAC,EAAE,EAAE;AAAA,EAC5C;AAEA,QAAM,aAAuB,CAAC;AAC9B,QAAM,iBAA2B,CAAC;AAClC,MAAI,eAAe;AACnB,QAAM,QAAQ,aAAa,OAAO;AAElC,aAAW,SAAS,eAAe;AACjC,UAAM,WAAW,MAAM;AACvB,UAAM,UAAU,SAAS,WAAW;AACpC,UAAM,YAAY,KAAK,IAAI;AAE3B,QAAI;AACF,UAAI;AACJ,YAAM,YAAY,aAAa,IAAI,CAAC,SAAS,gBAAgB,IAAI,CAAC;AAClE,YAAM,iBAAiB,SAAS,OAAO,aAAa;AACpD,YAAM,WAAW,iBAAiB,cAAc,UAAU,SAAS,QAAQ,SAAS,IAAI;AACxF,UAAI,kBAAkB,UAAU;AAC9B,cAAM,SAAS,MAAM,kBAAuB,OAAO,QAAQ;AAC3D,YAAI,QAAQ;AACV,yBAAe;AACf,qBAAW,KAAK,SAAS,EAAE;AAC3B;AAAA,QACF;AAAA,MACF;AAEA,UAAI,SAAS,YAAY;AACvB,iBAAS,MAAM,QAAQ,KAAK;AAAA,UAC1B,SAAS,WAAW,cAAc,OAAO;AAAA,UACzC,eAAe,OAAO;AAAA,QACxB,CAAC;AAAA,MACH,OAAO;AACL,cAAM,IAAI;AAAA,UACR,YAAY,SAAS,EAAE;AAAA,QACzB;AAAA,MACF;AAEA,YAAM,YAAY,KAAK,IAAI,IAAI;AAC/B,UAAI,YAAY,eAAe;AAC7B,eAAO,MAAM,oCAAoC,EAAE,YAAY,SAAS,IAAI,WAAW,aAAa,cAAc,CAAC;AAAA,MACrH,WAAW,YAAY,cAAc;AACnC,eAAO,KAAK,oCAAoC,EAAE,YAAY,SAAS,IAAI,WAAW,aAAa,aAAa,CAAC;AAAA,MACnH;AACA,wBAAkB,SAAS,IAAI,MAAM,UAAU,cAAc,SAAS;AAEtE,qBAAe;AACf,UAAI,kBAAkB,UAAU;AAC9B,cAAM;AAAA,UACJ;AAAA,UACA;AAAA,UACA;AAAA,UACA,oBAAoB,QAAQ;AAAA,UAC5B,qBAAqB,UAAU,OAAO;AAAA,QACxC;AAAA,MACF;AACA,iBAAW,KAAK,SAAS,EAAE;AAAA,IAC7B,SAAS,KAAK;AACZ,UAAI,SAAS,UAAU;AACrB,cAAM;AAAA,MACR;AAEA,aAAO,KAAK,mBAAmB,EAAE,YAAY,SAAS,IAAI,IAAI,CAAC;AAC/D,qBAAe,KAAK,SAAS,EAAE;AAE/B,UAAI,SAAS,UAAU;AACrB,uBAAe,aAAa,IAAI,CAAC,UAAU;AAAA,UACzC,GAAG;AAAA,UACH,GAAG,SAAS;AAAA,QACd,EAAE;AAAA,MACJ;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AAAA,IACL,OAAO;AAAA,IACP,OAAO;AAAA,MACL;AAAA,MACA,GAAI,eAAe,SAAS,IAAI,EAAE,eAAe,IAAI,CAAC;AAAA,IACxD;AAAA,EACF;AACF;AAOA,eAAsB,8BACpB,QACA,cACA,SACA,oBACoC;AACpC,QAAM,gBAAgB,qBAClB,qBAAqB,oBAAoB,OAAO,IAChD,mBAAmB,cAAc,OAAO;AAE5C,MAAI,cAAc,WAAW,GAAG;AAC9B,WAAO,EAAE,QAAQ,OAAO,EAAE,YAAY,CAAC,EAAE,EAAE;AAAA,EAC7C;AAEA,QAAM,aAAuB,CAAC;AAC9B,QAAM,iBAA2B,CAAC;AAClC,MAAI,gBAAgB;AACpB,QAAM,QAAQ,aAAa,OAAO;AAElC,aAAW,SAAS,eAAe;AACjC,UAAM,WAAW,MAAM;AACvB,UAAM,UAAU,SAAS,WAAW;AACpC,UAAM,YAAY,KAAK,IAAI;AAE3B,QAAI;AACF,YAAM,WAAW,gBAAgB,aAAa;AAC9C,YAAM,iBAAiB,SAAS,OAAO,aAAa;AACpD,YAAM,WAAW,iBAAiB,cAAc,UAAU,SAAS,OAAO,CAAC,QAAQ,CAAC,IAAI;AACxF,UAAI,kBAAkB,UAAU;AAC9B,cAAM,SAAS,MAAM,kBAAqB,OAAO,QAAQ;AACzD,YAAI,QAAQ;AACV,0BAAgB;AAChB,qBAAW,KAAK,SAAS,EAAE;AAC3B;AAAA,QACF;AAAA,MACF;AACA,YAAM,SAAS,MAAM,QAAQ,KAAK;AAAA,QAChC,SAAS,UAAU,eAAe,OAAO;AAAA,QACzC,eAAe,OAAO;AAAA,MACxB,CAAC;AAED,YAAM,YAAY,KAAK,IAAI,IAAI;AAC/B,wBAAkB,SAAS,IAAI,MAAM,UAAU,cAAc,SAAS;AAEtE,sBAAgB;AAChB,UAAI,kBAAkB,UAAU;AAC9B,cAAM;AAAA,UACJ;AAAA,UACA;AAAA,UACA;AAAA,UACA,oBAAoB,QAAQ;AAAA,UAC5B,qBAAqB,UAAU,OAAO;AAAA,QACxC;AAAA,MACF;AACA,iBAAW,KAAK,SAAS,EAAE;AAAA,IAC7B,SAAS,KAAK;AACZ,UAAI,SAAS,UAAU;AACrB,cAAM;AAAA,MACR;AAEA,aAAO,KAAK,mBAAmB,EAAE,YAAY,SAAS,IAAI,IAAI,CAAC;AAC/D,qBAAe,KAAK,SAAS,EAAE;AAE/B,UAAI,SAAS,UAAU;AACrB,wBAAgB,EAAE,GAAG,eAAe,GAAG,SAAS,SAAS;AAAA,MAC3D;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AAAA,IACL,QAAQ;AAAA,IACR,OAAO;AAAA,MACL;AAAA,MACA,GAAI,eAAe,SAAS,IAAI,EAAE,eAAe,IAAI,CAAC;AAAA,IACxD;AAAA,EACF;AACF;",
   "names": []
 }