@openhi/constructs 0.0.188 → 0.0.190

package/lib/{chunk-7GMTHOYF.mjs → chunk-2TLJKOJL.mjs}

@@ -4,7 +4,7 @@ import {
 import {
   createDataEntityRecord,
   mergeAuditIntoMeta
-} from "./chunk-Q4KQD2NB.mjs";
+} from "./chunk-V6AO5T57.mjs";
 import {
   NotFoundError
 } from "./chunk-FYHBHHWK.mjs";
@@ -499,4 +499,4 @@ export {
   createPractitionerOperation,
   createProcedureOperation
 };
-//# sourceMappingURL=chunk-7GMTHOYF.mjs.map
+//# sourceMappingURL=chunk-2TLJKOJL.mjs.map

package/lib/{chunk-VQY57NOV.mjs → chunk-3PS5R367.mjs}

@@ -6,7 +6,7 @@ import {
 } from "./chunk-6BB4CRSS.mjs";
 import {
   deleteDataEntityById
-} from "./chunk-Q4KQD2NB.mjs";
+} from "./chunk-V6AO5T57.mjs";
 import {
   getDynamoControlService
 } from "./chunk-EUIP2U5F.mjs";
@@ -57,4 +57,4 @@ export {
   deleteOrganizationOperation,
   deleteWorkspaceOperation
 };
-//# sourceMappingURL=chunk-VQY57NOV.mjs.map
+//# sourceMappingURL=chunk-3PS5R367.mjs.map

package/lib/{chunk-DIVYB6GD.mjs → chunk-4WFHISV3.mjs}

@@ -1,6 +1,6 @@
 import {
   reconcileAllCountersOperation
-} from "./chunk-F2LY4TEI.mjs";
+} from "./chunk-7WBLBIQJ.mjs";
 import {
   createAccountOperation,
   createAppointmentOperation,
@@ -16,14 +16,14 @@ import {
   createPractitionerOperation,
   createProcedureOperation,
   getRoleByIdOperation
-} from "./chunk-7GMTHOYF.mjs";
+} from "./chunk-2TLJKOJL.mjs";
 import {
   PLATFORM_SCOPE_TENANT_ID,
   createMembershipOperation,
   createRoleAssignmentOperation,
   createTenantOperation,
   createWorkspaceOperation
-} from "./chunk-3M4QTQH6.mjs";
+} from "./chunk-4YQD4PFR.mjs";
 import {
   NotFoundError
 } from "./chunk-FYHBHHWK.mjs";
@@ -5124,4 +5124,4 @@ export {
   productionCognitoProvisioner,
   handler
 };
-//# sourceMappingURL=chunk-DIVYB6GD.mjs.map
+//# sourceMappingURL=chunk-4WFHISV3.mjs.map

package/lib/{chunk-3M4QTQH6.mjs → chunk-4YQD4PFR.mjs}

@@ -23,7 +23,7 @@ import {
 import {
   DATA_ENTITY_SK,
   createDataEntityRecord
-} from "./chunk-Q4KQD2NB.mjs";
+} from "./chunk-V6AO5T57.mjs";
 import {
   ConflictError,
   ValidationError
@@ -431,4 +431,4 @@ export {
   createTenantOperation,
   createWorkspaceOperation
 };
-//# sourceMappingURL=chunk-3M4QTQH6.mjs.map
+//# sourceMappingURL=chunk-4YQD4PFR.mjs.map

package/lib/{chunk-JJ3AQ6G5.mjs → chunk-63POQTMP.mjs}

@@ -5,7 +5,7 @@ import {
   batchGetWithRetry,
   dispatchListMode,
   listDataEntitiesByWorkspace
-} from "./chunk-Q4KQD2NB.mjs";
+} from "./chunk-V6AO5T57.mjs";
 import {
   SHARD_COUNT,
   getDynamoControlService
@@ -67,4 +67,4 @@ export {
   listPractitionerRolesOperation,
   listRoleAssignmentsOperation
 };
-//# sourceMappingURL=chunk-JJ3AQ6G5.mjs.map
+//# sourceMappingURL=chunk-63POQTMP.mjs.map

package/lib/{chunk-F2LY4TEI.mjs → chunk-7WBLBIQJ.mjs}

@@ -8,10 +8,10 @@ import {
   listWorkspacesOperation,
   membershipListByWorkspaceOperation,
   roleAssignmentListByWorkspaceOperation
-} from "./chunk-4LQR32D2.mjs";
+} from "./chunk-AYHBFK3Y.mjs";
 import {
   listMembershipsOperation
-} from "./chunk-PIQISEGW.mjs";
+} from "./chunk-RGE4WDND.mjs";
 import {
   extractRoleLevel
 } from "./chunk-BUAYVN3C.mjs";
@@ -20,7 +20,7 @@ import {
 } from "./chunk-I6LUPJUY.mjs";
 import {
   listUsersOperation
-} from "./chunk-Q4KQD2NB.mjs";
+} from "./chunk-V6AO5T57.mjs";
 import {
   getDynamoControlService
 } from "./chunk-EUIP2U5F.mjs";
@@ -269,4 +269,4 @@ async function reconcileAllCountersOperation(params = {}) {
 export {
   reconcileAllCountersOperation
 };
-//# sourceMappingURL=chunk-F2LY4TEI.mjs.map
+//# sourceMappingURL=chunk-7WBLBIQJ.mjs.map

package/lib/{chunk-4LQR32D2.mjs → chunk-AYHBFK3Y.mjs}

@@ -2,7 +2,7 @@ import {
   batchGetWithRetry,
   buildSkPrefix,
   dispatchListMode
-} from "./chunk-Q4KQD2NB.mjs";
+} from "./chunk-V6AO5T57.mjs";
 import {
   SHARD_COUNT,
   getDynamoControlService
@@ -213,4 +213,4 @@ export {
   listWorkspacesOperation,
   listTenantsOperation
 };
-//# sourceMappingURL=chunk-4LQR32D2.mjs.map
+//# sourceMappingURL=chunk-AYHBFK3Y.mjs.map

package/lib/{chunk-PIQISEGW.mjs → chunk-RGE4WDND.mjs}

@@ -1,7 +1,7 @@
 import {
   batchGetWithRetry,
   dispatchListMode
-} from "./chunk-Q4KQD2NB.mjs";
+} from "./chunk-V6AO5T57.mjs";
 import {
   SHARD_COUNT,
   getDynamoControlService
@@ -43,4 +43,4 @@ async function listMembershipsOperation(params) {
 export {
   listMembershipsOperation
 };
-//# sourceMappingURL=chunk-PIQISEGW.mjs.map
+//# sourceMappingURL=chunk-RGE4WDND.mjs.map

package/lib/{chunk-V6KLFEHC.mjs → chunk-UWVPF6GB.mjs}

@@ -1,6 +1,6 @@
 import {
   membershipListByUserOperation
-} from "./chunk-Q4KQD2NB.mjs";
+} from "./chunk-V6AO5T57.mjs";
 import {
   ForbiddenError,
   NotFoundError,
@@ -286,4 +286,4 @@ export {
   parseUserResource,
   switchUserTenantWorkspaceOperation
 };
-//# sourceMappingURL=chunk-V6KLFEHC.mjs.map
+//# sourceMappingURL=chunk-UWVPF6GB.mjs.map

package/lib/{chunk-Q4KQD2NB.mjs → chunk-V6AO5T57.mjs}

@@ -37,6 +37,9 @@ function mergeAuditIntoMeta(meta, audit) {
 // src/data/operations/data-operations-common.ts
 import { extractSortKey, extractSummary } from "@openhi/types";
 var DATA_ENTITY_SK = "CURRENT";
+function deriveVid(lastUpdated) {
+  return lastUpdated.replace(/\D/g, "") || Date.now().toString(36);
+}
 async function getDataEntityById(entity, tenantId, workspaceId, id, resourceLabel) {
   const result = await entity.get({
     tenantId,
@@ -165,7 +168,7 @@ async function listDataEntitiesByWorkspace(entity, tenantId, workspaceId, mode =
 }
 async function createDataEntityRecord(entity, tenantId, workspaceId, id, resourceWithAudit, fallbackDate) {
   const lastUpdated = resourceWithAudit.meta?.lastUpdated ?? fallbackDate ?? (/* @__PURE__ */ new Date()).toISOString();
-  const vid = lastUpdated.replace(/[-:T.Z]/g, "").slice(0, 12) || Date.now().toString(36);
+  const vid = deriveVid(lastUpdated);
   const resourceLike = resourceWithAudit;
   const summary = JSON.stringify(extractSummary(resourceLike));
   const gsi1sk = extractSortKey(resourceLike);
@@ -236,6 +239,10 @@ async function updateDataEntityById(entity, tenantId, workspaceId, id, resourceL
   }).set({
     resource: compressResource(JSON.stringify(resource)),
     summary,
+    // A fresh vid is what makes this UPDATE visible to the search tier:
+    // the replication upsert rejects any event whose version does not
+    // strictly exceed the stored row's. See deriveVid.
+    vid: deriveVid(lastUpdated),
     lastUpdated,
     gsi1sk
   }).go();
@@ -368,4 +375,4 @@ export {
   membershipListByUserOperation,
   listUsersOperation
 };
-//# sourceMappingURL=chunk-Q4KQD2NB.mjs.map
+//# sourceMappingURL=chunk-V6AO5T57.mjs.map

package/lib/chunk-V6AO5T57.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/data/audit-meta.ts","../src/data/operations/data-operations-common.ts","../src/data/operations/control/user/user-list-operation.ts","../src/data/operations/control/membership/membership-list-by-user-operation.ts"],"sourcesContent":["import type { Extension, Meta } from \"@openhi/types\";\n\n/**\n * Shared audit/meta helpers for FHIR resources. Used by data operations and import.\n * OpenHI audit is stored in resource meta.extension (per ADR 2026-01-13-06).\n *\n * @see sites/www-docs/content/packages/@openhi/constructs/data/dynamo/entity-standards.md\n */\n\n/** OpenHI extension URLs for audit in resource meta (per ADR 2026-01-13-06). */\nconst OPENHI_EXT = \"http://openhi.org/fhir/StructureDefinition\";\n\n/** Meta with optional OpenHI audit extensions (created/modified by, etc.). */\nexport type MetaWithExtensions = Meta & { extension?: Array<Extension> };\n\n/** Audit fields stored in FHIR resource meta.extension. */\nexport interface AuditFields {\n  createdDate?: string;\n  createdById?: string;\n  createdByName?: string;\n  modifiedDate?: string;\n  modifiedById?: string;\n  modifiedByName?: string;\n  deletedDate?: string;\n  deletedById?: string;\n  deletedByName?: string;\n}\n\n/** Audit extension entry shape (subset of Extension used by OpenHI audit). */\ntype AuditExtensionEntry = Pick<\n  Extension,\n  \"url\" | \"valueString\" | \"valueDateTime\"\n>;\n\n/** Builds meta.extension entries for audit; merges with existing meta. */\nexport function mergeAuditIntoMeta(\n  meta: MetaWithExtensions | Record<string, unknown> | undefined,\n  audit: AuditFields,\n): MetaWithExtensions {\n  const existing = (meta ?? {}) as MetaWithExtensions;\n  const ext: Array<AuditExtensionEntry> = [\n    ...(Array.isArray(existing.extension)\n      ? (existing.extension as Array<AuditExtensionEntry>)\n      : []),\n  ];\n  const byUrl = new Map(ext.map((e) => [e.url, e]));\n  function set(\n    url: string,\n    value: string | undefined,\n    type: \"valueString\" | \"valueDateTime\",\n  ) {\n    if (value == null) return;\n    byUrl.set(url, { url, [type]: value });\n  }\n  set(`${OPENHI_EXT}/created-date`, audit.createdDate, \"valueDateTime\");\n  set(`${OPENHI_EXT}/created-by-id`, audit.createdById, \"valueString\");\n  set(`${OPENHI_EXT}/created-by-name`, audit.createdByName, \"valueString\");\n  set(`${OPENHI_EXT}/modified-date`, audit.modifiedDate, \"valueDateTime\");\n  set(`${OPENHI_EXT}/modified-by-id`, audit.modifiedById, \"valueString\");\n  set(`${OPENHI_EXT}/modified-by-name`, audit.modifiedByName, \"valueString\");\n  set(`${OPENHI_EXT}/deleted-date`, audit.deletedDate, \"valueDateTime\");\n  set(`${OPENHI_EXT}/deleted-by-id`, audit.deletedById, \"valueString\");\n  set(`${OPENHI_EXT}/deleted-by-name`, audit.deletedByName, \"valueString\");\n  return { ...existing, extension: Array.from(byUrl.values()) };\n}\n","import { extractSortKey, extractSummary } from \"@openhi/types\";\nimport type { Meta, FhirResourceLike } from \"@openhi/types\";\nimport { compressResource, decompressResource } from \"../../lib/compression\";\nimport { mergeAuditIntoMeta, type MetaWithExtensions } from \"../audit-meta\";\nimport { SHARD_COUNT } from \"../dynamo/shard\";\nimport { NotFoundError } from \"../errors\";\nimport type { OpenHiContext } from \"../openhi-context\";\n\n/**\n * Sort key for the current record version. Matches Dynamo record index SK default.\n * Use this in get/update/delete (and create where applicable) for data-plane entities.\n */\nexport const DATA_ENTITY_SK = \"CURRENT\" as const;\n\n/**\n * Derive the monotonic `vid` (version id) from a `lastUpdated` ISO instant.\n *\n * `vid` is the version the search-tier replication guards compare\n * (`EXCLUDED.version > version` on upsert, `>=` on soft delete), so it must\n * STRICTLY INCREASE on every write of the same item or the replication\n * silently drops the event as a stale replay. Two rules follow:\n *\n *  1. Every mutation path must write a fresh vid — `updateDataEntityById`\n *     not doing so is exactly what made every UPDATE a search-tier no-op\n *     (sibling of the #1379 DELETE bug).\n *  2. Full millisecond precision (all digits of the ISO instant, e.g.\n *     `20260612143055123`) — the previous minute-precision truncation\n *     (`slice(0, 12)`) would tie an update with a create from the same\n *     minute and lose it to the strict guard.\n *\n * Lexicographic text comparison stays monotonic against legacy 12-digit\n * vids: equal-prefix-but-longer sorts greater (same minute, more precision)\n * and differing minutes are decided within the first 12 digits.\n */\nexport function deriveVid(lastUpdated: string): string {\n  return lastUpdated.replace(/\\D/g, \"\") || Date.now().toString(36);\n}\n\n/** Base params for data-entity operations: context and optional table override. */\nexport interface BaseDataEntityParams {\n  context: OpenHiContext;\n  /** Optional table name override; resolved by data service from DYNAMO_TABLE_NAME when omitted. */\n  tableName?: string;\n}\n\n/** Params for get-by-id and delete (context + id + optional tableName). */\nexport interface GetByIdParams extends BaseDataEntityParams {\n  id: string;\n}\n\n/**\n * Mode for list operations introduced by #853 to back FHIR `_summary` opt-ins.\n *\n * - `full` (default): GSI1 fan-out → BatchGet hydration → full FHIR resource per entry.\n * - `summary`: GSI1 fan-out only; the `summary` JSON projected onto GSI1 is parsed and used\n *   as `resource` per entry. Skips BatchGet entirely — that's the cost win the FHIR spec\n *   intends `_summary=true` to deliver.\n * - `count`: GSI1 fan-out only; entries are dropped, only `total` is populated. Routes\n *   should pass `total` into `buildSearchsetBundle({ mode: \"count\", total })`.\n *\n * `_elements` is implemented at the route layer as `full` mode + post-hydration pruning,\n * since per-element pruning has to happen after decompression and is FHIR-spec-defined\n * (always retain root-level mandatories — see `prune-resource-by-elements.ts`).\n */\nexport type ListOperationMode = \"full\" | \"summary\" | \"count\";\n\n/** Params for list (context + optional tableName + optional mode for #853 `_summary`). */\nexport interface ListParams extends BaseDataEntityParams {\n  /** Defaults to `\"full\"` (current behavior); routes pass other modes for `_summary` opt-ins. */\n  mode?: ListOperationMode;\n}\n\n/** Result for create / get-by-id / update: single resource. */\nexport interface SingleResourceResult<T> {\n  id: string;\n  resource: T;\n}\n\n/** Entry shape for list results. */\nexport interface ListEntry<T> {\n  id: string;\n  resource: T;\n}\n\n/**\n * Result for list: entries array plus total count.\n *\n * - For `mode === \"full\"` and `mode === \"summary\"`, `total === entries.length`.\n * - For `mode === \"count\"`, `entries` is empty and `total` is the GSI1 fan-out count.\n *\n * Splitting `total` from `entries.length` lets count-mode routes report a true count\n * while skipping any per-entry work.\n */\nexport interface ListResult<T> {\n  entries: Array<ListEntry<T>>;\n  total: number;\n}\n\n/** Minimal entity shape for get (used by getDataEntityById). */\ninterface EntityWithGet {\n  get(params: {\n    tenantId: string;\n    workspaceId: string;\n    id: string;\n    sk: string;\n  }): { go(): Promise<{ data: { id: string; resource: string } | null }> };\n}\n\n/** Minimal entity shape for delete (used by deleteDataEntityById). */\ninterface EntityWithDelete {\n  delete(params: {\n    tenantId: string;\n    workspaceId: string;\n    id: string;\n    sk: string;\n  }): { go(): Promise<unknown> };\n}\n\n/**\n * Minimal entity shape for list via GSI1 + BatchGet hydration (used by listDataEntitiesByWorkspace).\n * GSI1 is sharded per ADR-011, so listing fans out to each shard and concatenates ids; the\n * `resource` attribute is NOT projected onto GSI1 (per the summary projection in\n * `dynamo-db-data-store.ts`), so the second phase BatchGets the base table for full items.\n *\n * GSI1 INCLUDE projection (per `dynamo-db-data-store.ts`) carries `summary`, `vid`, `lastUpdated`,\n * `createdDate`, `modifiedDate`, `createdById`, `modifiedById` alongside the key attributes.\n * `summary` is what `mode: \"summary\"` returns to the caller without hitting the base table.\n */\ninterface DataEntityWithListAndBatchGet {\n  query: {\n    gsi1(params: {\n      tenantId: string;\n      workspaceId: string;\n      gsi1Shard: string;\n    }): {\n      go(): Promise<{\n        data: Array<{\n          id: string;\n          summary?: string;\n          vid?: string;\n          lastUpdated?: string;\n          createdDate?: string;\n          modifiedDate?: string;\n          createdById?: string;\n          modifiedById?: string;\n        }> | null;\n      }>;\n    };\n  };\n  get(\n    keys: Array<{\n      tenantId: string;\n      workspaceId: string;\n      id: string;\n      sk: string;\n    }>,\n  ): {\n    go(): Promise<{\n      data: Array<{ id: string; resource: string }>;\n      unprocessed: Array<{\n        tenantId: string;\n        workspaceId: string;\n        id: string;\n        sk: string;\n      }>;\n    }>;\n  };\n}\n\n/** Minimal entity shape for put (used by createDataEntityRecord). */\ninterface EntityWithPut {\n  put(attrs: {\n    sk: string;\n    tenantId: string;\n    workspaceId: string;\n    id: string;\n    resource: string;\n    summary: string;\n    vid: string;\n    lastUpdated: string;\n    gsi1sk: string;\n  }): { go(): Promise<unknown> };\n}\n\n/** Minimal entity shape for patch (used by updateDataEntityById). */\ninterface EntityWithPatch {\n  get(params: {\n    tenantId: string;\n    workspaceId: string;\n    id: string;\n    sk: string;\n  }): { go(): Promise<{ data: { id: string; resource: string } | null }> };\n  patch(params: {\n    tenantId: string;\n    workspaceId: string;\n    id: string;\n    sk: string;\n  }): {\n    set(attrs: {\n      resource: string;\n      summary: string;\n      vid: string;\n      lastUpdated: string;\n      gsi1sk: string;\n    }): {\n      go(): Promise<unknown>;\n    };\n  };\n}\n\n/**\n * Get a single data-entity record by id. Decompresses and parses resource; throws NotFoundError if missing.\n * Use from get-by-id operations with the appropriate entity and resource type.\n */\nexport async function getDataEntityById<T>(\n  entity: EntityWithGet,\n  tenantId: string,\n  workspaceId: string,\n  id: string,\n  resourceLabel: string,\n): Promise<SingleResourceResult<T>> {\n  const result = await entity\n    .get({\n      tenantId,\n      workspaceId,\n      id,\n      sk: DATA_ENTITY_SK,\n    })\n    .go();\n\n  if (!result.data) {\n    throw new NotFoundError(`${resourceLabel} ${id} not found`, {\n      details: { id },\n    });\n  }\n\n  const parsed = JSON.parse(decompressResource(result.data.resource)) as T & {\n    id?: string;\n  };\n  return {\n    id: result.data.id,\n    resource: { ...parsed, id: result.data.id } as T,\n  };\n}\n\n/**\n * Delete a data-entity record by id. Idempotent (no-op if not found).\n * Use from delete operations with the appropriate entity.\n */\nexport async function deleteDataEntityById(\n  entity: EntityWithDelete,\n  tenantId: string,\n  workspaceId: string,\n  id: string,\n): Promise<void> {\n  await entity\n    .delete({\n      tenantId,\n      workspaceId,\n      id,\n      sk: DATA_ENTITY_SK,\n    })\n    .go();\n}\n\n/** Maximum total attempts (initial + retries) when hydrating list ids via BatchGet. */\nconst BATCH_GET_MAX_ATTEMPTS = 3;\n/** Base backoff in milliseconds applied to BatchGet retries; doubles each attempt. */\nconst BATCH_GET_BASE_BACKOFF_MS = 50;\n\n/** Minimal entity shape for BatchGet hydration on the base table; chunks of 100 are handled by ElectroDB. */\ninterface EntityWithBatchGet<TKey, TItem> {\n  get(keys: TKey[]): {\n    go(options?: {\n      consistent?: boolean;\n    }): Promise<{ data: TItem[]; unprocessed: TKey[] }>;\n  };\n}\n\n/** Options accepted by {@link batchGetWithRetry}. */\nexport interface BatchGetWithRetryOptions {\n  /**\n   * Forwarded to DynamoDB as `ConsistentRead`. BatchGet reads the **base\n   * table**, which supports strongly-consistent reads, so list operations\n   * that must reflect a just-committed write (read-after-write) pass\n   * `consistent: true`. Defaults to ElectroDB's eventually-consistent read.\n   * @see #1347 — role-assignment dropdowns must reflect their own write\n   */\n  readonly consistent?: boolean;\n}\n\n/**\n * BatchGet wrapper that retries `UnprocessedKeys` with exponential backoff. ElectroDB chunks the\n * input keys into groups of 100 internally, but does not retry unprocessed keys — DynamoDB can\n * return some keys unprocessed under throttling or partial failure, and the caller must reissue\n * them. Throws after `BATCH_GET_MAX_ATTEMPTS` if any keys remain unprocessed; intended for list\n * hydration (#854) where partial results would silently truncate the response.\n *\n * Pass `{ consistent: true }` for read-after-write correctness — the base-table\n * BatchGet then reflects the latest committed write rather than a possibly-stale\n * eventually-consistent replica (#1347).\n */\nexport async function batchGetWithRetry<TKey, TItem>(\n  entity: EntityWithBatchGet<TKey, TItem>,\n  keys: TKey[],\n  options?: BatchGetWithRetryOptions,\n): Promise<TItem[]> {\n  if (keys.length === 0) return [];\n\n  const collected: TItem[] = [];\n  let pending = keys;\n  let attempt = 0;\n\n  while (pending.length > 0) {\n    if (attempt > 0) {\n      await new Promise((resolve) =>\n        setTimeout(resolve, BATCH_GET_BASE_BACKOFF_MS * 2 ** (attempt - 1)),\n      );\n    }\n    attempt++;\n    const result = await entity\n      .get(pending)\n      .go(options?.consistent ? { consistent: true } : undefined);\n    collected.push(...result.data);\n    const unprocessed = result.unprocessed ?? [];\n    if (unprocessed.length === 0) break;\n    if (attempt >= BATCH_GET_MAX_ATTEMPTS) {\n      throw new Error(\n        `BatchGet exhausted retries: ${unprocessed.length} key(s) still unprocessed after ${BATCH_GET_MAX_ATTEMPTS} attempt(s)`,\n      );\n    }\n    pending = unprocessed;\n  }\n\n  return collected;\n}\n\n/** GSI1 index item shape — what a sharded `gsi1.query().go()` returns per row. */\nexport interface ShardedListIndexItem {\n  id: string;\n  summary?: string;\n}\n\n/** Hooks that adapt a generic mode-dispatching list to a specific entity's hydration and entry shape. */\nexport interface DispatchListModeHooks<TItem, TEntry> {\n  /** Hydrate the base table for the given ids (typically `batchGetWithRetry(entity, keys)`). */\n  hydrate: (orderedIds: string[]) => Promise<TItem[]>;\n  /** Extract the canonical id from a hydrated item so it can be matched back to the GSI1 order. */\n  getId: (item: TItem) => string;\n  /** Build the result entry for `mode === \"full\"` from a hydrated base-table item. */\n  buildEntry: (id: string, item: TItem) => TEntry;\n  /** Build the result entry for `mode === \"summary\"` from the parsed GSI1 `summary` JSON. */\n  buildSummaryEntry: (\n    id: string,\n    parsedSummary: Record<string, unknown>,\n  ) => TEntry;\n}\n\n/**\n * Mode dispatcher shared by data-plane and control-plane list operations (#853).\n *\n * Given pre-fetched `shardResults` from a sharded GSI1 fan-out, returns either:\n * - `mode === \"count\"` — `{ entries: [], total }` where total is the sum of shard row counts.\n * - `mode === \"summary\"` — entries built from each shard row's parsed `summary` JSON; rows with\n *   missing or unparseable `summary` are dropped.\n * - `mode === \"full\"` — calls `hydrate(orderedIds)` (typically a BatchGet) and builds entries\n *   from hydrated items in per-shard GSI1 sort order; missing items are dropped.\n *\n * Lives here (alongside `listDataEntitiesByWorkspace`) because the same dispatch logic is needed\n * by every list operation that backs a FHIR list/search endpoint, including the seven\n * control-plane peers (User, Role, Tenant, Workspace, Membership, RoleAssignment, Configuration).\n */\nexport async function dispatchListMode<TItem, TEntry>(\n  mode: ListOperationMode,\n  shardResults: Array<{ data: Array<ShardedListIndexItem> | null }>,\n  hooks: DispatchListModeHooks<TItem, TEntry>,\n): Promise<{ entries: TEntry[]; total: number }> {\n  if (mode === \"count\") {\n    let total = 0;\n    for (const shardResult of shardResults) {\n      total += (shardResult.data ?? []).length;\n    }\n    return { entries: [], total };\n  }\n\n  if (mode === \"summary\") {\n    const entries: TEntry[] = [];\n    for (const shardResult of shardResults) {\n      for (const item of shardResult.data ?? []) {\n        if (typeof item.summary !== \"string\") continue;\n        let parsed: Record<string, unknown>;\n        try {\n          parsed = JSON.parse(item.summary) as Record<string, unknown>;\n        } catch {\n          continue;\n        }\n        entries.push(hooks.buildSummaryEntry(item.id, parsed));\n      }\n    }\n    return { entries, total: entries.length };\n  }\n\n  const orderedIds: string[] = [];\n  for (const shardResult of shardResults) {\n    for (const item of shardResult.data ?? []) {\n      orderedIds.push(item.id);\n    }\n  }\n\n  if (orderedIds.length === 0) return { entries: [], total: 0 };\n\n  const items = await hooks.hydrate(orderedIds);\n  const byId = new Map(items.map((item) => [hooks.getId(item), item]));\n\n  const entries: TEntry[] = [];\n  for (const id of orderedIds) {\n    const item = byId.get(id);\n    if (!item) continue;\n    entries.push(hooks.buildEntry(id, item));\n  }\n\n  return { entries, total: entries.length };\n}\n\n/**\n * List data-entity records in a workspace via GSI1.\n *\n * `mode` (default `\"full\"`) selects the read shape — see `dispatchListMode`. The data-plane\n * binding here adds the four-shard fan-out (per ADR-011) and the BatchGet hydration with\n * decompression for `mode === \"full\"`. K-way merge by `gsi1sk` is intentionally NOT done here\n * — full server-side natural sort lands with the FHIR list-endpoint plumbing that adds\n * pagination tokens.\n */\nexport async function listDataEntitiesByWorkspace<T>(\n  entity: DataEntityWithListAndBatchGet,\n  tenantId: string,\n  workspaceId: string,\n  mode: ListOperationMode = \"full\",\n): Promise<ListResult<T>> {\n  const shardResults = await Promise.all(\n    Array.from({ length: SHARD_COUNT }, (_, shard) =>\n      entity.query\n        .gsi1({ tenantId, workspaceId, gsi1Shard: String(shard) })\n        .go(),\n    ),\n  );\n\n  return dispatchListMode<{ id: string; resource: string }, ListEntry<T>>(\n    mode,\n    shardResults,\n    {\n      hydrate: (orderedIds) =>\n        batchGetWithRetry(\n          entity,\n          orderedIds.map((id) => ({\n            tenantId,\n            workspaceId,\n            id,\n            sk: DATA_ENTITY_SK,\n          })),\n        ),\n      getId: (item) => item.id,\n      buildEntry: (id, item) => {\n        const parsed = JSON.parse(decompressResource(item.resource)) as T & {\n          id?: string;\n        };\n        return { id, resource: { ...parsed, id } as T };\n      },\n      buildSummaryEntry: (id, parsed) => ({\n        id,\n        resource: { ...parsed, id } as T,\n      }),\n    },\n  );\n}\n\n/**\n * Create a data-entity record with put. Computes vid from lastUpdated (from resource meta or fallback).\n * Use from create operations (e.g. Practitioner, Encounter) that build the resource with audit in meta.\n */\nexport async function createDataEntityRecord<T>(\n  entity: EntityWithPut,\n  tenantId: string,\n  workspaceId: string,\n  id: string,\n  resourceWithAudit: T & { meta?: { lastUpdated?: string } },\n  fallbackDate: string,\n): Promise<SingleResourceResult<T>> {\n  const lastUpdated =\n    resourceWithAudit.meta?.lastUpdated ??\n    fallbackDate ??\n    new Date().toISOString();\n  const vid = deriveVid(lastUpdated);\n\n  const resourceLike = resourceWithAudit as unknown as FhirResourceLike;\n  const summary = JSON.stringify(extractSummary(resourceLike));\n  const gsi1sk = extractSortKey(resourceLike);\n\n  await entity\n    .put({\n      sk: DATA_ENTITY_SK,\n      tenantId,\n      workspaceId,\n      id,\n      resource: compressResource(JSON.stringify(resourceWithAudit)),\n      summary,\n      vid,\n      lastUpdated,\n      gsi1sk,\n    })\n    .go();\n\n  return {\n    id,\n    resource: resourceWithAudit as T,\n  };\n}\n\n/**\n * Build an updated resource with audit in meta for use with updateDataEntityById.\n * Parses existing resource string for existing meta, merges body with id/resourceType/meta (versionId \"2\"),\n * then merges modified audit (modifiedDate, modifiedById, modifiedByName) into meta.\n * Use from update operations (Patient, Encounter, Practitioner) to avoid duplicating this logic.\n */\nexport function buildUpdatedResourceWithAudit<T extends { meta?: Meta }>(\n  body: T,\n  id: string,\n  date: string,\n  actorId: string,\n  actorName: string,\n  existingResourceStr: string,\n  resourceType: string,\n): {\n  resource: T & { id: string; meta: MetaWithExtensions };\n  lastUpdated: string;\n} {\n  const existingMeta: MetaWithExtensions | undefined = (\n    JSON.parse(existingResourceStr) as { meta?: MetaWithExtensions }\n  ).meta;\n\n  const bodyWithMeta = body as T & { id?: string; meta?: Meta };\n  const resourceWithVersion: T & { id: string; meta?: Meta } = {\n    ...body,\n    resourceType: resourceType as T[\"resourceType\"],\n    id,\n    meta: {\n      ...(bodyWithMeta.meta ?? {}),\n      lastUpdated: date,\n      versionId: \"2\",\n    },\n  };\n\n  const resourceWithAudit: T & { id: string; meta: MetaWithExtensions } = {\n    ...resourceWithVersion,\n    meta: mergeAuditIntoMeta(resourceWithVersion.meta ?? existingMeta, {\n      modifiedDate: date,\n      modifiedById: actorId,\n      modifiedByName: actorName,\n    }),\n  };\n\n  return {\n    resource: resourceWithAudit,\n    lastUpdated: date,\n  };\n}\n\n/**\n * Update a data-entity record by id: get existing, throw if not found, then call builder with\n * decompressed existing resource string; builder returns \\{ resource, lastUpdated \\}; then patch.\n * Use from update operations with the appropriate entity and resource type.\n */\nexport async function updateDataEntityById<T>(\n  entity: EntityWithPatch,\n  tenantId: string,\n  workspaceId: string,\n  id: string,\n  resourceLabel: string,\n  context: OpenHiContext,\n  buildPatched: (existingResourceStr: string) => {\n    resource: unknown;\n    lastUpdated: string;\n  },\n): Promise<SingleResourceResult<T>> {\n  const existing = await entity\n    .get({\n      tenantId,\n      workspaceId,\n      id,\n      sk: DATA_ENTITY_SK,\n    })\n    .go();\n\n  if (!existing.data) {\n    throw new NotFoundError(`${resourceLabel} ${id} not found`, {\n      details: { id },\n    });\n  }\n\n  const existingStr = decompressResource(existing.data.resource);\n  const { resource, lastUpdated } = buildPatched(existingStr);\n\n  const resourceLike = resource as FhirResourceLike;\n  const summary = JSON.stringify(extractSummary(resourceLike));\n  const gsi1sk = extractSortKey(resourceLike);\n\n  await entity\n    .patch({\n      tenantId,\n      workspaceId,\n      id,\n      sk: DATA_ENTITY_SK,\n    })\n    .set({\n      resource: compressResource(JSON.stringify(resource)),\n      summary,\n      // A fresh vid is what makes this UPDATE visible to the search tier:\n      // the replication upsert rejects any event whose version does not\n      // strictly exceed the stored row's. See deriveVid.\n      vid: deriveVid(lastUpdated),\n      lastUpdated,\n      gsi1sk,\n    })\n    .go();\n\n  return {\n    id,\n    resource: resource as T,\n  };\n}\n","import { getDynamoControlService } from \"../../../dynamo/dynamo-control-service\";\nimport { SHARD_COUNT } from \"../../../dynamo/shard\";\nimport { OpenHiContext } from \"../../../openhi-context\";\nimport {\n  batchGetWithRetry,\n  dispatchListMode,\n  type ListOperationMode,\n} from \"../../data-operations-common\";\n\nconst SK = \"CURRENT\";\n\nexport interface UserListParams {\n  context: OpenHiContext;\n  tableName?: string;\n  /** #853: defaults to `\"full\"`. `\"summary\"` skips BatchGet, `\"count\"` returns total only. */\n  mode?: ListOperationMode;\n}\n\n/**\n * ADR-028 denormalized counter shape surfaced on a User list entry's\n * `resource.counts`. Missing counters render as `0`.\n */\nexport interface UserCounts {\n  tenantsForUser: number;\n  workspacesForUser: number;\n}\n\nexport interface UserListResult {\n  entries: Array<{\n    id: string;\n    resource: {\n      resourceType: string;\n      id: string;\n      counts: UserCounts;\n      [key: string]: unknown;\n    };\n  }>;\n  total: number;\n}\n\n/** Coerce a possibly-absent counter attribute to a non-negative number (default 0). */\nfunction counterValue(value: unknown): number {\n  return typeof value === \"number\" && Number.isFinite(value) ? value : 0;\n}\n\n/**\n * Lists Users via GSI1 (sharded). `mode` (default `\"full\"`) selects between BatchGet hydration,\n * summary-only (parse `summary` JSON projected on GSI1), or count-only (skip both). See\n * `dispatchListMode` in data-operations-common for the canonical mode contract.\n */\nexport async function listUsersOperation(\n  params: UserListParams,\n): Promise<UserListResult> {\n  const { tableName, mode = \"full\" } = params;\n  const service = getDynamoControlService(tableName);\n\n  const shardResults = await Promise.all(\n    Array.from({ length: SHARD_COUNT }, (_, shard) =>\n      service.entities.user.query.gsi1({ gsi1Shard: String(shard) }).go(),\n    ),\n  );\n\n  return dispatchListMode<\n    {\n      id: string;\n      resource: string;\n      tenantsForUser?: number;\n      workspacesForUser?: number;\n    },\n    UserListResult[\"entries\"][number]\n  >(mode, shardResults, {\n    hydrate: (orderedIds) =>\n      batchGetWithRetry(\n        service.entities.user,\n        orderedIds.map((id) => ({ id, sk: SK })),\n      ) as Promise<\n        Array<{\n          id: string;\n          resource: string;\n          tenantsForUser?: number;\n          workspacesForUser?: number;\n        }>\n      >,\n    getId: (item) => item.id,\n    // FULL mode (admin list default): read the ADR-028 counters off the\n    // canonical record hydrated by BatchGet and expose them as\n    // `resource.counts`. Missing counters render as 0.\n    buildEntry: (id, item) => ({\n      id,\n      resource: {\n        resourceType: \"User\",\n        id,\n        ...(JSON.parse(item.resource) as Record<string, unknown>),\n        counts: {\n          tenantsForUser: counterValue(item.tenantsForUser),\n          workspacesForUser: counterValue(item.workspacesForUser),\n        },\n      },\n    }),\n    // SUMMARY mode reads only the GSI1 `summary` projection (no\n    // counters); surface zeros so the shape stays uniform.\n    buildSummaryEntry: (id, parsed) => ({\n      id,\n      resource: {\n        resourceType: \"User\",\n        id,\n        ...parsed,\n        counts: { tenantsForUser: 0, workspacesForUser: 0 },\n      },\n    }),\n  });\n}\n","import { getDynamoControlService } from \"../../../dynamo/dynamo-control-service\";\n\n/**\n * Filter modes for {@link membershipListByUserOperation}.\n *\n * Maps directly to the ADR-018 sub-lane discriminator in the user-projection\n * SK (`MEMBERSHIP#TENANT#…` vs `MEMBERSHIP#WORKSPACE#…`):\n *\n * - `\"all\"` — `Query(PK = USER#ID#<userId>, SK begins_with 'MEMBERSHIP#')`.\n *   Returns both lanes interleaved in raw SK order.\n * - `\"tenant\"` — `SK begins_with 'MEMBERSHIP#TENANT#'`. Pattern #3 only.\n * - `\"workspace\"` — `SK begins_with 'MEMBERSHIP#WORKSPACE#'`. Pattern #4\n *   across every tenant.\n * - `\"workspaceInTenant\"` — `SK begins_with 'MEMBERSHIP#WORKSPACE#TID#<tenantId>#'`.\n *   Pattern #4 narrowed to one tenant. Requires `tenantId`.\n */\nexport type MembershipListByUserMode =\n  | \"all\"\n  | \"tenant\"\n  | \"workspace\"\n  | \"workspaceInTenant\";\n\n/** Inputs accepted by {@link membershipListByUserOperation}. */\nexport interface MembershipListByUserParams {\n  readonly userId: string;\n  /** Filter mode — see {@link MembershipListByUserMode}. Defaults to `\"all\"`. */\n  readonly mode?: MembershipListByUserMode;\n  /** Required only when `mode === \"workspaceInTenant\"`. */\n  readonly tenantId?: string;\n  /** ElectroDB cursor from a prior page. Forwarded to `.go({ cursor })`. */\n  readonly cursor?: string | null;\n  /** Per-page item limit forwarded to `.go({ limit })`. */\n  readonly limit?: number;\n  /** Sort order forwarded to `.go({ order })`. Defaults to ElectroDB's `\"asc\"`. */\n  readonly order?: \"asc\" | \"desc\";\n  /** Optional table-name override; resolved via env when omitted. */\n  readonly tableName?: string;\n}\n\n/** One projection-row payload as returned to a consumer. */\nexport interface MembershipUserProjectionEntry {\n  readonly userId: string;\n  readonly sk: string;\n  readonly tenantId: string;\n  readonly workspaceId?: string;\n  readonly membershipId: string;\n  readonly summary: string;\n  readonly vid: string;\n  readonly lastUpdated: string;\n  readonly denormalizedTenantName?: string;\n  readonly denormalizedUserName?: string;\n  readonly denormalizedWorkspaceName?: string;\n}\n\n/** Page returned by {@link membershipListByUserOperation}. */\nexport interface MembershipListByUserResult {\n  readonly items: Array<MembershipUserProjectionEntry>;\n  /** ElectroDB cursor for the next page, or `null` when exhausted. */\n  readonly cursor: string | null;\n}\n\n/**\n * Compose the SK prefix for a given filter mode. Centralizing the\n * prefix string here keeps the SK grammar (owned by\n * `membership-user-projection.ts`) the single source of truth for the\n * lane discriminators — this function reads them, it does not invent them.\n */\nexport function buildSkPrefix(\n  mode: MembershipListByUserMode,\n  tenantId: string | undefined,\n): string {\n  switch (mode) {\n    case \"tenant\":\n      return \"MEMBERSHIP#TENANT#\";\n    case \"workspace\":\n      return \"MEMBERSHIP#WORKSPACE#\";\n    case \"workspaceInTenant\":\n      // Pattern-#4 SK places `<tenantId>` directly after the\n      // `MEMBERSHIP#WORKSPACE#TID#` segment so a `begins_with` filter\n      // narrows the workspace lane to a single tenant.\n      return `MEMBERSHIP#WORKSPACE#TID#${tenantId}#`;\n    case \"all\":\n    default:\n      return \"MEMBERSHIP#\";\n  }\n}\n\n/**\n * List Memberships for a user via the ADR-018 user-partition projection\n * (no GSI hop).\n *\n * Reads `MembershipUserProjectionEntity` rows under `PK = USER#ID#<userId>`\n * with an `SK begins_with` filter selected by `mode`:\n *\n * | Mode | SK begins_with | Covers |\n * |---|---|---|\n * | `all` (default) | `MEMBERSHIP#` | patterns #3 + #4 interleaved |\n * | `tenant` | `MEMBERSHIP#TENANT#` | pattern #3 only |\n * | `workspace` | `MEMBERSHIP#WORKSPACE#` | pattern #4 only, across tenants |\n * | `workspaceInTenant` | `MEMBERSHIP#WORKSPACE#TID#<tenantId>#` | pattern #4 in one tenant |\n *\n * Returns the projection rows verbatim (`summary`, `vid`, `lastUpdated`\n * plus the projection-discriminating fields) — full canonical-resource\n * hydration is opt-in for callers via\n * `MembershipEntity.get({ tenantId, id: membershipId })`. Pagination\n * mirrors ElectroDB's native `.go({ cursor })` shape; the returned\n * `cursor` is opaque to callers.\n *\n * @see ADR-018 § Access Pattern Coverage (patterns #3 and #4)\n * @see .state/adr-018-implementation-guide.md § 1 (SK grammar)\n */\nexport async function membershipListByUserOperation(\n  params: MembershipListByUserParams,\n): Promise<MembershipListByUserResult> {\n  const {\n    userId,\n    mode = \"all\",\n    tenantId,\n    cursor = null,\n    limit,\n    order,\n    tableName,\n  } = params;\n\n  if (mode === \"workspaceInTenant\" && !tenantId) {\n    throw new Error(\n      'membershipListByUserOperation: tenantId is required when mode === \"workspaceInTenant\"',\n    );\n  }\n\n  const service = getDynamoControlService(tableName);\n  const skPrefix = buildSkPrefix(mode, tenantId);\n\n  const goOptions: {\n    cursor?: string | null;\n    limit?: number;\n    order?: \"asc\" | \"desc\";\n  } = {\n    cursor,\n  };\n  if (limit !== undefined) {\n    goOptions.limit = limit;\n  }\n  if (order !== undefined) {\n    goOptions.order = order;\n  }\n\n  const result = await service.entities.membershipUserProjection.query\n    .record({ userId })\n    .begins({ sk: skPrefix })\n    .go(goOptions);\n\n  const items: Array<MembershipUserProjectionEntry> = (result.data ?? []).map(\n    (row) => ({\n      userId: row.userId,\n      sk: row.sk,\n      tenantId: row.tenantId,\n      workspaceId: row.workspaceId,\n      membershipId: row.membershipId,\n      summary: row.summary,\n      vid: row.vid,\n      lastUpdated: row.lastUpdated,\n      denormalizedTenantName: row.denormalizedTenantName,\n      denormalizedUserName: row.denormalizedUserName,\n      denormalizedWorkspaceName: row.denormalizedWorkspaceName,\n    }),\n  );\n\n  return { items, cursor: result.cursor ?? null };\n}\n"],"mappings":";;;;;;;;;;;;;AAUA,IAAM,aAAa;AAyBZ,SAAS,mBACd,MACA,OACoB;AACpB,QAAM,WAAY,QAAQ,CAAC;AAC3B,QAAM,MAAkC;AAAA,IACtC,GAAI,MAAM,QAAQ,SAAS,SAAS,IAC/B,SAAS,YACV,CAAC;AAAA,EACP;AACA,QAAM,QAAQ,IAAI,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;AAChD,WAAS,IACP,KACA,OACA,MACA;AACA,QAAI,SAAS,KAAM;AACnB,UAAM,IAAI,KAAK,EAAE,KAAK,CAAC,IAAI,GAAG,MAAM,CAAC;AAAA,EACvC;AACA,MAAI,GAAG,UAAU,iBAAiB,MAAM,aAAa,eAAe;AACpE,MAAI,GAAG,UAAU,kBAAkB,MAAM,aAAa,aAAa;AACnE,MAAI,GAAG,UAAU,oBAAoB,MAAM,eAAe,aAAa;AACvE,MAAI,GAAG,UAAU,kBAAkB,MAAM,cAAc,eAAe;AACtE,MAAI,GAAG,UAAU,mBAAmB,MAAM,cAAc,aAAa;AACrE,MAAI,GAAG,UAAU,qBAAqB,MAAM,gBAAgB,aAAa;AACzE,MAAI,GAAG,UAAU,iBAAiB,MAAM,aAAa,eAAe;AACpE,MAAI,GAAG,UAAU,kBAAkB,MAAM,aAAa,aAAa;AACnE,MAAI,GAAG,UAAU,oBAAoB,MAAM,eAAe,aAAa;AACvE,SAAO,EAAE,GAAG,UAAU,WAAW,MAAM,KAAK,MAAM,OAAO,CAAC,EAAE;AAC9D;;;AChEA,SAAS,gBAAgB,sBAAsB;AAYxC,IAAM,iBAAiB;AAsBvB,SAAS,UAAU,aAA6B;AACrD,SAAO,YAAY,QAAQ,OAAO,EAAE,KAAK,KAAK,IAAI,EAAE,SAAS,EAAE;AACjE;AAkLA,eAAsB,kBACpB,QACA,UACA,aACA,IACA,eACkC;AAClC,QAAM,SAAS,MAAM,OAClB,IAAI;AAAA,IACH;AAAA,IACA;AAAA,IACA;AAAA,IACA,IAAI;AAAA,EACN,CAAC,EACA,GAAG;AAEN,MAAI,CAAC,OAAO,MAAM;AAChB,UAAM,IAAI,cAAc,GAAG,aAAa,IAAI,EAAE,cAAc;AAAA,MAC1D,SAAS,EAAE,GAAG;AAAA,IAChB,CAAC;AAAA,EACH;AAEA,QAAM,SAAS,KAAK,MAAM,mBAAmB,OAAO,KAAK,QAAQ,CAAC;AAGlE,SAAO;AAAA,IACL,IAAI,OAAO,KAAK;AAAA,IAChB,UAAU,EAAE,GAAG,QAAQ,IAAI,OAAO,KAAK,GAAG;AAAA,EAC5C;AACF;AAMA,eAAsB,qBACpB,QACA,UACA,aACA,IACe;AACf,QAAM,OACH,OAAO;AAAA,IACN;AAAA,IACA;AAAA,IACA;AAAA,IACA,IAAI;AAAA,EACN,CAAC,EACA,GAAG;AACR;AAGA,IAAM,yBAAyB;AAE/B,IAAM,4BAA4B;AAkClC,eAAsB,kBACpB,QACA,MACA,SACkB;AAClB,MAAI,KAAK,WAAW,EAAG,QAAO,CAAC;AAE/B,QAAM,YAAqB,CAAC;AAC5B,MAAI,UAAU;AACd,MAAI,UAAU;AAEd,SAAO,QAAQ,SAAS,GAAG;AACzB,QAAI,UAAU,GAAG;AACf,YAAM,IAAI;AAAA,QAAQ,CAAC,YACjB,WAAW,SAAS,4BAA4B,MAAM,UAAU,EAAE;AAAA,MACpE;AAAA,IACF;AACA;AACA,UAAM,SAAS,MAAM,OAClB,IAAI,OAAO,EACX,GAAG,SAAS,aAAa,EAAE,YAAY,KAAK,IAAI,MAAS;AAC5D,cAAU,KAAK,GAAG,OAAO,IAAI;AAC7B,UAAM,cAAc,OAAO,eAAe,CAAC;AAC3C,QAAI,YAAY,WAAW,EAAG;AAC9B,QAAI,WAAW,wBAAwB;AACrC,YAAM,IAAI;AAAA,QACR,+BAA+B,YAAY,MAAM,mCAAmC,sBAAsB;AAAA,MAC5G;AAAA,IACF;AACA,cAAU;AAAA,EACZ;AAEA,SAAO;AACT;AAqCA,eAAsB,iBACpB,MACA,cACA,OAC+C;AAC/C,MAAI,SAAS,SAAS;AACpB,QAAI,QAAQ;AACZ,eAAW,eAAe,cAAc;AACtC,gBAAU,YAAY,QAAQ,CAAC,GAAG;AAAA,IACpC;AACA,WAAO,EAAE,SAAS,CAAC,GAAG,MAAM;AAAA,EAC9B;AAEA,MAAI,SAAS,WAAW;AACtB,UAAMA,WAAoB,CAAC;AAC3B,eAAW,eAAe,cAAc;AACtC,iBAAW,QAAQ,YAAY,QAAQ,CAAC,GAAG;AACzC,YAAI,OAAO,KAAK,YAAY,SAAU;AACtC,YAAI;AACJ,YAAI;AACF,mBAAS,KAAK,MAAM,KAAK,OAAO;AAAA,QAClC,QAAQ;AACN;AAAA,QACF;AACA,QAAAA,SAAQ,KAAK,MAAM,kBAAkB,KAAK,IAAI,MAAM,CAAC;AAAA,MACvD;AAAA,IACF;AACA,WAAO,EAAE,SAAAA,UAAS,OAAOA,SAAQ,OAAO;AAAA,EAC1C;AAEA,QAAM,aAAuB,CAAC;AAC9B,aAAW,eAAe,cAAc;AACtC,eAAW,QAAQ,YAAY,QAAQ,CAAC,GAAG;AACzC,iBAAW,KAAK,KAAK,EAAE;AAAA,IACzB;AAAA,EACF;AAEA,MAAI,WAAW,WAAW,EAAG,QAAO,EAAE,SAAS,CAAC,GAAG,OAAO,EAAE;AAE5D,QAAM,QAAQ,MAAM,MAAM,QAAQ,UAAU;AAC5C,QAAM,OAAO,IAAI,IAAI,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC;AAEnE,QAAM,UAAoB,CAAC;AAC3B,aAAW,MAAM,YAAY;AAC3B,UAAM,OAAO,KAAK,IAAI,EAAE;AACxB,QAAI,CAAC,KAAM;AACX,YAAQ,KAAK,MAAM,WAAW,IAAI,IAAI,CAAC;AAAA,EACzC;AAEA,SAAO,EAAE,SAAS,OAAO,QAAQ,OAAO;AAC1C;AAWA,eAAsB,4BACpB,QACA,UACA,aACA,OAA0B,QACF;AACxB,QAAM,eAAe,MAAM,QAAQ;AAAA,IACjC,MAAM;AAAA,MAAK,EAAE,QAAQ,YAAY;AAAA,MAAG,CAAC,GAAG,UACtC,OAAO,MACJ,KAAK,EAAE,UAAU,aAAa,WAAW,OAAO,KAAK,EAAE,CAAC,EACxD,GAAG;AAAA,IACR;AAAA,EACF;AAEA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,MACE,SAAS,CAAC,eACR;AAAA,QACE;AAAA,QACA,WAAW,IAAI,CAAC,QAAQ;AAAA,UACtB;AAAA,UACA;AAAA,UACA;AAAA,UACA,IAAI;AAAA,QACN,EAAE;AAAA,MACJ;AAAA,MACF,OAAO,CAAC,SAAS,KAAK;AAAA,MACtB,YAAY,CAAC,IAAI,SAAS;AACxB,cAAM,SAAS,KAAK,MAAM,mBAAmB,KAAK,QAAQ,CAAC;AAG3D,eAAO,EAAE,IAAI,UAAU,EAAE,GAAG,QAAQ,GAAG,EAAO;AAAA,MAChD;AAAA,MACA,mBAAmB,CAAC,IAAI,YAAY;AAAA,QAClC;AAAA,QACA,UAAU,EAAE,GAAG,QAAQ,GAAG;AAAA,MAC5B;AAAA,IACF;AAAA,EACF;AACF;AAMA,eAAsB,uBACpB,QACA,UACA,aACA,IACA,mBACA,cACkC;AAClC,QAAM,cACJ,kBAAkB,MAAM,eACxB,iBACA,oBAAI,KAAK,GAAE,YAAY;AACzB,QAAM,MAAM,UAAU,WAAW;AAEjC,QAAM,eAAe;AACrB,QAAM,UAAU,KAAK,UAAU,eAAe,YAAY,CAAC;AAC3D,QAAM,SAAS,eAAe,YAAY;AAE1C,QAAM,OACH,IAAI;AAAA,IACH,IAAI;AAAA,IACJ;AAAA,IACA;AAAA,IACA;AAAA,IACA,UAAU,iBAAiB,KAAK,UAAU,iBAAiB,CAAC;AAAA,IAC5D;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,CAAC,EACA,GAAG;AAEN,SAAO;AAAA,IACL;AAAA,IACA,UAAU;AAAA,EACZ;AACF;AAQO,SAAS,8BACd,MACA,IACA,MACA,SACA,WACA,qBACA,cAIA;AACA,QAAM,eACJ,KAAK,MAAM,mBAAmB,EAC9B;AAEF,QAAM,eAAe;AACrB,QAAM,sBAAuD;AAAA,IAC3D,GAAG;AAAA,IACH;AAAA,IACA;AAAA,IACA,MAAM;AAAA,MACJ,GAAI,aAAa,QAAQ,CAAC;AAAA,MAC1B,aAAa;AAAA,MACb,WAAW;AAAA,IACb;AAAA,EACF;AAEA,QAAM,oBAAkE;AAAA,IACtE,GAAG;AAAA,IACH,MAAM,mBAAmB,oBAAoB,QAAQ,cAAc;AAAA,MACjE,cAAc;AAAA,MACd,cAAc;AAAA,MACd,gBAAgB;AAAA,IAClB,CAAC;AAAA,EACH;AAEA,SAAO;AAAA,IACL,UAAU;AAAA,IACV,aAAa;AAAA,EACf;AACF;AAOA,eAAsB,qBACpB,QACA,UACA,aACA,IACA,eACA,SACA,cAIkC;AAClC,QAAM,WAAW,MAAM,OACpB,IAAI;AAAA,IACH;AAAA,IACA;AAAA,IACA;AAAA,IACA,IAAI;AAAA,EACN,CAAC,EACA,GAAG;AAEN,MAAI,CAAC,SAAS,MAAM;AAClB,UAAM,IAAI,cAAc,GAAG,aAAa,IAAI,EAAE,cAAc;AAAA,MAC1D,SAAS,EAAE,GAAG;AAAA,IAChB,CAAC;AAAA,EACH;AAEA,QAAM,cAAc,mBAAmB,SAAS,KAAK,QAAQ;AAC7D,QAAM,EAAE,UAAU,YAAY,IAAI,aAAa,WAAW;AAE1D,QAAM,eAAe;AACrB,QAAM,UAAU,KAAK,UAAU,eAAe,YAAY,CAAC;AAC3D,QAAM,SAAS,eAAe,YAAY;AAE1C,QAAM,OACH,MAAM;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA,IAAI;AAAA,EACN,CAAC,EACA,IAAI;AAAA,IACH,UAAU,iBAAiB,KAAK,UAAU,QAAQ,CAAC;AAAA,IACnD;AAAA;AAAA;AAAA;AAAA,IAIA,KAAK,UAAU,WAAW;AAAA,IAC1B;AAAA,IACA;AAAA,EACF,CAAC,EACA,GAAG;AAEN,SAAO;AAAA,IACL;AAAA,IACA;AAAA,EACF;AACF;;;AC5mBA,IAAM,KAAK;AAgCX,SAAS,aAAa,OAAwB;AAC5C,SAAO,OAAO,UAAU,YAAY,OAAO,SAAS,KAAK,IAAI,QAAQ;AACvE;AAOA,eAAsB,mBACpB,QACyB;AACzB,QAAM,EAAE,WAAW,OAAO,OAAO,IAAI;AACrC,QAAM,UAAU,wBAAwB,SAAS;AAEjD,QAAM,eAAe,MAAM,QAAQ;AAAA,IACjC,MAAM;AAAA,MAAK,EAAE,QAAQ,YAAY;AAAA,MAAG,CAAC,GAAG,UACtC,QAAQ,SAAS,KAAK,MAAM,KAAK,EAAE,WAAW,OAAO,KAAK,EAAE,CAAC,EAAE,GAAG;AAAA,IACpE;AAAA,EACF;AAEA,SAAO,iBAQL,MAAM,cAAc;AAAA,IACpB,SAAS,CAAC,eACR;AAAA,MACE,QAAQ,SAAS;AAAA,MACjB,WAAW,IAAI,CAAC,QAAQ,EAAE,IAAI,IAAI,GAAG,EAAE;AAAA,IACzC;AAAA,IAQF,OAAO,CAAC,SAAS,KAAK;AAAA;AAAA;AAAA;AAAA,IAItB,YAAY,CAAC,IAAI,UAAU;AAAA,MACzB;AAAA,MACA,UAAU;AAAA,QACR,cAAc;AAAA,QACd;AAAA,QACA,GAAI,KAAK,MAAM,KAAK,QAAQ;AAAA,QAC5B,QAAQ;AAAA,UACN,gBAAgB,aAAa,KAAK,cAAc;AAAA,UAChD,mBAAmB,aAAa,KAAK,iBAAiB;AAAA,QACxD;AAAA,MACF;AAAA,IACF;AAAA;AAAA;AAAA,IAGA,mBAAmB,CAAC,IAAI,YAAY;AAAA,MAClC;AAAA,MACA,UAAU;AAAA,QACR,cAAc;AAAA,QACd;AAAA,QACA,GAAG;AAAA,QACH,QAAQ,EAAE,gBAAgB,GAAG,mBAAmB,EAAE;AAAA,MACpD;AAAA,IACF;AAAA,EACF,CAAC;AACH;;;AC5CO,SAAS,cACd,MACA,UACQ;AACR,UAAQ,MAAM;AAAA,IACZ,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AAIH,aAAO,4BAA4B,QAAQ;AAAA,IAC7C,KAAK;AAAA,IACL;AACE,aAAO;AAAA,EACX;AACF;AA0BA,eAAsB,8BACpB,QACqC;AACrC,QAAM;AAAA,IACJ;AAAA,IACA,OAAO;AAAA,IACP;AAAA,IACA,SAAS;AAAA,IACT;AAAA,IACA;AAAA,IACA;AAAA,EACF,IAAI;AAEJ,MAAI,SAAS,uBAAuB,CAAC,UAAU;AAC7C,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AAEA,QAAM,UAAU,wBAAwB,SAAS;AACjD,QAAM,WAAW,cAAc,MAAM,QAAQ;AAE7C,QAAM,YAIF;AAAA,IACF;AAAA,EACF;AACA,MAAI,UAAU,QAAW;AACvB,cAAU,QAAQ;AAAA,EACpB;AACA,MAAI,UAAU,QAAW;AACvB,cAAU,QAAQ;AAAA,EACpB;AAEA,QAAM,SAAS,MAAM,QAAQ,SAAS,yBAAyB,MAC5D,OAAO,EAAE,OAAO,CAAC,EACjB,OAAO,EAAE,IAAI,SAAS,CAAC,EACvB,GAAG,SAAS;AAEf,QAAM,SAA+C,OAAO,QAAQ,CAAC,GAAG;AAAA,IACtE,CAAC,SAAS;AAAA,MACR,QAAQ,IAAI;AAAA,MACZ,IAAI,IAAI;AAAA,MACR,UAAU,IAAI;AAAA,MACd,aAAa,IAAI;AAAA,MACjB,cAAc,IAAI;AAAA,MAClB,SAAS,IAAI;AAAA,MACb,KAAK,IAAI;AAAA,MACT,aAAa,IAAI;AAAA,MACjB,wBAAwB,IAAI;AAAA,MAC5B,sBAAsB,IAAI;AAAA,MAC1B,2BAA2B,IAAI;AAAA,IACjC;AAAA,EACF;AAEA,SAAO,EAAE,OAAO,QAAQ,OAAO,UAAU,KAAK;AAChD;","names":["entries"]}