@withpotter/lib 0.13.0-next.101

package/dist/team-roles.d.ts

@@ -0,0 +1,140 @@
+import type { ContentBehavior } from './template-types';
+import type { PermissionKey } from './use-permissions';
+/**
+ * Job-shaped roles.
+ *
+ * The api ships a seniority ladder — owner / manager / staff / viewer — which
+ * answers "how much can this person do". That isn't the question a merchant
+ * asks. They ask "which part of the business is theirs". A padel club's desk
+ * person and a fashion brand's packer are both `staff` on the ladder and need
+ * completely different dashboards, so the ladder can't produce either one.
+ *
+ * Box already answers the shape question once, for businesses: the sidebar
+ * assembles itself from the tenant's enabled behaviors. Roles hang off the same
+ * seam. A role here is a named subset of what this business actually does, so a
+ * booking business is offered Front desk and a shipping business is offered
+ * Fulfillment, and neither is offered the other. Same engine, different subject.
+ *
+ * These are presets, not a new storage model. Each one resolves to the ordinary
+ * `permissions` map the api already stores on `team_roles`, so nothing here
+ * needs a backend change and a merchant who outgrows a preset can still edit
+ * the underlying permissions in the roles manager.
+ */
+/**
+ * The api's own seniority ladder. These names belong to the api: a custom role
+ * cannot take one (it answers "\"Staff\" is a built-in role"), and a member is
+ * given one by name rather than by role id. `owner` is left out because it is
+ * never assignable.
+ */
+export declare const BUILT_IN_ROLE_KEYS: readonly ["manager", "staff", "viewer"];
+/** The built-in role a name or id refers to, or null when it is not one. */
+export declare function builtInRoleKey(nameOrId: string): string | null;
+export interface JobRole {
+    id: string;
+    name: string;
+    /** One line, in the merchant's terms, describing the job. */
+    description: string;
+    /**
+     * Behaviors that make this role meaningful. Empty means always offered.
+     * A role is only shown when the tenant has at least one of them enabled.
+     */
+    requiredBehavior?: ContentBehavior[];
+    permissions: PermissionKey[];
+}
+/**
+ * Permissions that are never handed over by a preset.
+ *
+ * Money is the one grant where a wrong default is expensive rather than
+ * annoying: `canManageFinance` reaches payouts and withdrawals. Bundling it
+ * into a job preset means someone gets it because they were labelled "Manager",
+ * which is exactly how it gets given by accident. It's offered as its own
+ * deliberate choice at invite time and defaults off, whatever the preset.
+ */
+export declare const MONEY_PERMISSIONS: PermissionKey[];
+/**
+ * The two roles a merchant sees by default.
+ *
+ * Owner is not assignable — it's the account that owns the money, and it exists
+ * whether or not anyone thinks about roles. Staff is the honest default for the
+ * solo-to-three-person businesses Box sells to: the person who works the
+ * shift. Manager and viewer stay in the api as presets rather than being
+ * presented as a four-way choice to someone inviting their first colleague.
+ */
+export declare const BASE_ROLES: JobRole[];
+/**
+ * Job presets, gated on what this business actually does.
+ *
+ * Ordered by how common the job is, since the first option carries the most
+ * weight in a picker.
+ */
+export declare const JOB_ROLES: JobRole[];
+/**
+ * The roles worth offering for a business with these behaviors: the always-on
+ * base roles, plus every job preset this business has the behaviors to justify.
+ *
+ * A role whose `requiredBehavior` the tenant doesn't have isn't hidden because
+ * it's advanced — it's hidden because it would grant access to a part of the
+ * product that business doesn't run.
+ */
+export declare function resolveJobRoles(behaviors: ContentBehavior[]): JobRole[];
+/**
+ * Expand a preset into the permission map the api stores. Money is stripped
+ * unless it was granted deliberately, so a preset can never smuggle it in.
+ */
+export declare function permissionsForRole(role: JobRole, { withMoney }?: {
+    withMoney?: boolean;
+}): Record<string, boolean>;
+/**
+ * A short, plain summary of what a role reaches, for the line under a picker.
+ * Groups by area rather than listing permission keys, because "canManageOrders,
+ * canViewOrders, canViewMembers" is the database's sentence, not the user's.
+ */
+export interface PermissionArea {
+    id: string;
+    label: string;
+    /**
+     * Grants read access. Omitted for areas the api models as a single admin
+     * switch (settings, team, domains) — those are on/off, and inventing a
+     * "view" tier for them would promise a read-only mode that doesn't exist.
+     */
+    view?: PermissionKey;
+    /** Grants write access. Implies `view` — you can't edit what you can't see. */
+    manage: PermissionKey;
+    /** Only offered when the business has one of these behaviors. */
+    requiredBehavior?: ContentBehavior[];
+    /**
+     * Administration rather than day-to-day work. Shown when editing a role
+     * (where completeness matters) and hidden at invite time (where the job is
+     * picking a job). Keeping these out of `resolveAreas` by default is what
+     * stops the front door growing back into the permission catalog it replaced.
+     */
+    advanced?: boolean;
+}
+/**
+ * The permission catalog collapsed into areas.
+ *
+ * The api exposes 23 individual keys, which is the right shape for a database
+ * and the wrong shape for a person: nobody reasons about `canViewOrders` and
+ * `canManageOrders` as two independent switches, they think "can they touch
+ * orders, and how much". So each area is one row with three states — No
+ * access / View / Full — and the pair of keys is derived from that.
+ */
+export declare const PERMISSION_AREAS: PermissionArea[];
+/**
+ * Areas worth showing for a business with these behaviors. `includeAdvanced`
+ * adds the administration switches — on for the role editor, off for invites.
+ */
+export declare function resolveAreas(behaviors: ContentBehavior[], { includeAdvanced }?: {
+    includeAdvanced?: boolean;
+}): PermissionArea[];
+export type AccessLevel = 'none' | 'view' | 'full';
+/** Read an area's level out of a permission map. */
+export declare function levelFor(area: PermissionArea, permissions: Record<string, boolean>): AccessLevel;
+/** Write an area's level into a permission map (full implies view). */
+export declare function setLevel(permissions: Record<string, boolean>, area: PermissionArea, level: AccessLevel): Record<string, boolean>;
+/**
+ * A short, plain summary of what a role reaches. Groups by area rather than
+ * listing permission keys, because "canManageOrders, canViewOrders" is the
+ * database's sentence, not the user's.
+ */
+export declare function describeAreas(permissions: Record<string, boolean>): string[];

package/dist/team-roles.js

@@ -0,0 +1,247 @@
+const BUILT_IN_ROLE_KEYS = ["manager", "staff", "viewer"];
+function builtInRoleKey(nameOrId) {
+  const key = nameOrId.trim().toLowerCase();
+  return BUILT_IN_ROLE_KEYS.includes(key) ? key : null;
+}
+const MONEY_PERMISSIONS = [
+  "canViewFinance",
+  "canManageFinance"
+];
+const BASE_ROLES = [
+  {
+    id: "staff",
+    name: "Staff",
+    description: "Works the day to day. Sees orders and customers, not money.",
+    permissions: [
+      "canViewProducts",
+      "canViewOrders",
+      "canManageOrders",
+      "canViewMembers"
+    ]
+  }
+];
+const JOB_ROLES = [
+  {
+    id: "front-desk",
+    name: "Front desk",
+    description: "Takes bookings, checks people in, and looks up customers.",
+    requiredBehavior: ["bookable"],
+    permissions: [
+      "canViewProducts",
+      "canViewOrders",
+      "canManageOrders",
+      "canViewMembers",
+      "canManageMembers",
+      "canViewCommunications"
+    ]
+  },
+  {
+    id: "fulfillment",
+    name: "Fulfillment",
+    description: "Packs and ships orders. Reads the catalog, never edits it.",
+    requiredBehavior: ["shippable"],
+    permissions: [
+      "canViewProducts",
+      "canViewOrders",
+      "canManageOrders",
+      "canViewMembers"
+    ]
+  },
+  {
+    id: "store-manager",
+    name: "Store manager",
+    description: "Runs the catalog, orders, and discounts end to end.",
+    requiredBehavior: ["sellable"],
+    permissions: [
+      "canViewProducts",
+      "canManageProducts",
+      "canViewOrders",
+      "canManageOrders",
+      "canViewMembers",
+      "canManageMembers",
+      "canViewDiscounts",
+      "canManageDiscounts",
+      "canViewAnalytics"
+    ]
+  },
+  {
+    id: "invoicing",
+    name: "Invoicing",
+    description: "Raises and chases invoices for work already agreed.",
+    requiredBehavior: ["billable"],
+    permissions: [
+      "canViewOrders",
+      "canManageOrders",
+      "canViewMembers",
+      "canManageMembers",
+      "canViewCommunications",
+      "canManageCommunications"
+    ]
+  },
+  {
+    id: "support",
+    name: "Support",
+    description: "Answers customers. Reads orders, replies on your channels.",
+    permissions: [
+      "canViewOrders",
+      "canViewMembers",
+      "canManageMembers",
+      "canViewCommunications",
+      "canManageCommunications",
+      "canViewReviews",
+      "canManageReviews"
+    ]
+  },
+  {
+    id: "content",
+    name: "Content & site",
+    description: "Edits the website, posts, and how the brand reads.",
+    permissions: [
+      "canViewProducts",
+      "canManageEditor",
+      "canManageBusinessProfile",
+      "canViewBlog",
+      "canManageBlog"
+    ]
+  }
+];
+function resolveJobRoles(behaviors) {
+  const enabled = new Set(behaviors);
+  return [
+    ...BASE_ROLES,
+    ...JOB_ROLES.filter(
+      (r) => !r.requiredBehavior?.length || r.requiredBehavior.some((b) => enabled.has(b))
+    )
+  ];
+}
+function permissionsForRole(role, { withMoney = false } = {}) {
+  const granted = new Set(role.permissions);
+  for (const key of MONEY_PERMISSIONS) granted.delete(key);
+  if (withMoney) for (const key of MONEY_PERMISSIONS) granted.add(key);
+  return Object.fromEntries([...granted].map((k) => [k, true]));
+}
+const PERMISSION_AREAS = [
+  {
+    id: "products",
+    label: "Products",
+    view: "canViewProducts",
+    manage: "canManageProducts",
+    requiredBehavior: ["sellable", "bookable", "rentable", "subscribable"]
+  },
+  {
+    id: "orders",
+    label: "Orders",
+    view: "canViewOrders",
+    manage: "canManageOrders"
+  },
+  {
+    id: "customers",
+    label: "Customers",
+    view: "canViewMembers",
+    manage: "canManageMembers"
+  },
+  {
+    id: "discounts",
+    label: "Discounts",
+    view: "canViewDiscounts",
+    manage: "canManageDiscounts"
+  },
+  {
+    id: "messages",
+    label: "Messages",
+    view: "canViewCommunications",
+    manage: "canManageCommunications"
+  },
+  {
+    id: "reviews",
+    label: "Reviews",
+    view: "canViewReviews",
+    manage: "canManageReviews"
+  },
+  {
+    id: "analytics",
+    label: "Analytics",
+    view: "canViewAnalytics",
+    manage: "canManageAnalytics"
+  },
+  {
+    id: "website",
+    label: "Website",
+    // Looking is its own grant now. This read `canManageBusinessProfile`, so
+    // the only way to let somebody SEE the site was to hand them the
+    // workspace's identity — and the invite card's "See the website" promised
+    // something no role could grant without also granting more.
+    view: "canViewWebsite",
+    manage: "canManageEditor"
+  },
+  { id: "blog", label: "Blog", view: "canViewBlog", manage: "canManageBlog" },
+  {
+    id: "money",
+    label: "Money",
+    view: "canViewFinance",
+    manage: "canManageFinance"
+  },
+  // Admin switches. Without these three the matrix reaches 20 of the api's 23
+  // permission keys, and canManageSettings / canManageTeam / canManageDomains
+  // would be unreachable in the role editor that used to grant them.
+  {
+    id: "settings",
+    label: "Business settings",
+    manage: "canManageSettings",
+    advanced: true
+  },
+  {
+    id: "team",
+    label: "Team & roles",
+    manage: "canManageTeam",
+    advanced: true
+  },
+  {
+    id: "domains",
+    label: "Domains",
+    manage: "canManageDomains",
+    advanced: true
+  }
+];
+function resolveAreas(behaviors, { includeAdvanced = false } = {}) {
+  const enabled = new Set(behaviors);
+  return PERMISSION_AREAS.filter(
+    (a) => (includeAdvanced || !a.advanced) && (!a.requiredBehavior?.length || a.requiredBehavior.some((b) => enabled.has(b)))
+  );
+}
+function levelFor(area, permissions) {
+  if (permissions[area.manage]) return "full";
+  if (area.view && permissions[area.view]) return "view";
+  return "none";
+}
+function setLevel(permissions, area, level) {
+  const next = { ...permissions };
+  if (area.view) delete next[area.view];
+  delete next[area.manage];
+  if (level === "view" && area.view) next[area.view] = true;
+  if (level === "full") {
+    if (area.view) next[area.view] = true;
+    next[area.manage] = true;
+  }
+  return next;
+}
+function describeAreas(permissions) {
+  return PERMISSION_AREAS.filter(
+    (a) => a.view && permissions[a.view] || permissions[a.manage]
+  ).map((a) => a.label);
+}
+export {
+  BASE_ROLES,
+  BUILT_IN_ROLE_KEYS,
+  JOB_ROLES,
+  MONEY_PERMISSIONS,
+  PERMISSION_AREAS,
+  builtInRoleKey,
+  describeAreas,
+  levelFor,
+  permissionsForRole,
+  resolveAreas,
+  resolveJobRoles,
+  setLevel
+};
+//# sourceMappingURL=team-roles.js.map

package/dist/team-roles.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/team-roles.ts"],"sourcesContent":["import type { ContentBehavior } from './template-types';\nimport type { PermissionKey } from './use-permissions';\n\n/**\n * Job-shaped roles.\n *\n * The api ships a seniority ladder — owner / manager / staff / viewer — which\n * answers \"how much can this person do\". That isn't the question a merchant\n * asks. They ask \"which part of the business is theirs\". A padel club's desk\n * person and a fashion brand's packer are both `staff` on the ladder and need\n * completely different dashboards, so the ladder can't produce either one.\n *\n * Box already answers the shape question once, for businesses: the sidebar\n * assembles itself from the tenant's enabled behaviors. Roles hang off the same\n * seam. A role here is a named subset of what this business actually does, so a\n * booking business is offered Front desk and a shipping business is offered\n * Fulfillment, and neither is offered the other. Same engine, different subject.\n *\n * These are presets, not a new storage model. Each one resolves to the ordinary\n * `permissions` map the api already stores on `team_roles`, so nothing here\n * needs a backend change and a merchant who outgrows a preset can still edit\n * the underlying permissions in the roles manager.\n */\n\n/**\n * The api's own seniority ladder. These names belong to the api: a custom role\n * cannot take one (it answers \"\\\"Staff\\\" is a built-in role\"), and a member is\n * given one by name rather than by role id. `owner` is left out because it is\n * never assignable.\n */\nexport const BUILT_IN_ROLE_KEYS = ['manager', 'staff', 'viewer'] as const;\n\n/** The built-in role a name or id refers to, or null when it is not one. */\nexport function builtInRoleKey(nameOrId: string): string | null {\n  const key = nameOrId.trim().toLowerCase();\n  return (BUILT_IN_ROLE_KEYS as readonly string[]).includes(key) ? key : null;\n}\n\nexport interface JobRole {\n  id: string;\n  name: string;\n  /** One line, in the merchant's terms, describing the job. */\n  description: string;\n  /**\n   * Behaviors that make this role meaningful. Empty means always offered.\n   * A role is only shown when the tenant has at least one of them enabled.\n   */\n  requiredBehavior?: ContentBehavior[];\n  permissions: PermissionKey[];\n}\n\n/**\n * Permissions that are never handed over by a preset.\n *\n * Money is the one grant where a wrong default is expensive rather than\n * annoying: `canManageFinance` reaches payouts and withdrawals. Bundling it\n * into a job preset means someone gets it because they were labelled \"Manager\",\n * which is exactly how it gets given by accident. It's offered as its own\n * deliberate choice at invite time and defaults off, whatever the preset.\n */\nexport const MONEY_PERMISSIONS: PermissionKey[] = [\n  'canViewFinance',\n  'canManageFinance',\n];\n\n/**\n * The two roles a merchant sees by default.\n *\n * Owner is not assignable — it's the account that owns the money, and it exists\n * whether or not anyone thinks about roles. Staff is the honest default for the\n * solo-to-three-person businesses Box sells to: the person who works the\n * shift. Manager and viewer stay in the api as presets rather than being\n * presented as a four-way choice to someone inviting their first colleague.\n */\nexport const BASE_ROLES: JobRole[] = [\n  {\n    id: 'staff',\n    name: 'Staff',\n    description: 'Works the day to day. Sees orders and customers, not money.',\n    permissions: [\n      'canViewProducts',\n      'canViewOrders',\n      'canManageOrders',\n      'canViewMembers',\n    ],\n  },\n];\n\n/**\n * Job presets, gated on what this business actually does.\n *\n * Ordered by how common the job is, since the first option carries the most\n * weight in a picker.\n */\nexport const JOB_ROLES: JobRole[] = [\n  {\n    id: 'front-desk',\n    name: 'Front desk',\n    description: 'Takes bookings, checks people in, and looks up customers.',\n    requiredBehavior: ['bookable'],\n    permissions: [\n      'canViewProducts',\n      'canViewOrders',\n      'canManageOrders',\n      'canViewMembers',\n      'canManageMembers',\n      'canViewCommunications',\n    ],\n  },\n  {\n    id: 'fulfillment',\n    name: 'Fulfillment',\n    description: 'Packs and ships orders. Reads the catalog, never edits it.',\n    requiredBehavior: ['shippable'],\n    permissions: [\n      'canViewProducts',\n      'canViewOrders',\n      'canManageOrders',\n      'canViewMembers',\n    ],\n  },\n  {\n    id: 'store-manager',\n    name: 'Store manager',\n    description: 'Runs the catalog, orders, and discounts end to end.',\n    requiredBehavior: ['sellable'],\n    permissions: [\n      'canViewProducts',\n      'canManageProducts',\n      'canViewOrders',\n      'canManageOrders',\n      'canViewMembers',\n      'canManageMembers',\n      'canViewDiscounts',\n      'canManageDiscounts',\n      'canViewAnalytics',\n    ],\n  },\n  {\n    id: 'invoicing',\n    name: 'Invoicing',\n    description: 'Raises and chases invoices for work already agreed.',\n    requiredBehavior: ['billable'],\n    permissions: [\n      'canViewOrders',\n      'canManageOrders',\n      'canViewMembers',\n      'canManageMembers',\n      'canViewCommunications',\n      'canManageCommunications',\n    ],\n  },\n  {\n    id: 'support',\n    name: 'Support',\n    description: 'Answers customers. Reads orders, replies on your channels.',\n    permissions: [\n      'canViewOrders',\n      'canViewMembers',\n      'canManageMembers',\n      'canViewCommunications',\n      'canManageCommunications',\n      'canViewReviews',\n      'canManageReviews',\n    ],\n  },\n  {\n    id: 'content',\n    name: 'Content & site',\n    description: 'Edits the website, posts, and how the brand reads.',\n    permissions: [\n      'canViewProducts',\n      'canManageEditor',\n      'canManageBusinessProfile',\n      'canViewBlog',\n      'canManageBlog',\n    ],\n  },\n];\n\n/**\n * The roles worth offering for a business with these behaviors: the always-on\n * base roles, plus every job preset this business has the behaviors to justify.\n *\n * A role whose `requiredBehavior` the tenant doesn't have isn't hidden because\n * it's advanced — it's hidden because it would grant access to a part of the\n * product that business doesn't run.\n */\nexport function resolveJobRoles(behaviors: ContentBehavior[]): JobRole[] {\n  const enabled = new Set(behaviors);\n  return [\n    ...BASE_ROLES,\n    ...JOB_ROLES.filter(\n      (r) =>\n        !r.requiredBehavior?.length ||\n        r.requiredBehavior.some((b) => enabled.has(b)),\n    ),\n  ];\n}\n\n/**\n * Expand a preset into the permission map the api stores. Money is stripped\n * unless it was granted deliberately, so a preset can never smuggle it in.\n */\nexport function permissionsForRole(\n  role: JobRole,\n  { withMoney = false }: { withMoney?: boolean } = {},\n): Record<string, boolean> {\n  const granted = new Set<string>(role.permissions);\n  for (const key of MONEY_PERMISSIONS) granted.delete(key);\n  if (withMoney) for (const key of MONEY_PERMISSIONS) granted.add(key);\n  return Object.fromEntries([...granted].map((k) => [k, true]));\n}\n\n/**\n * A short, plain summary of what a role reaches, for the line under a picker.\n * Groups by area rather than listing permission keys, because \"canManageOrders,\n * canViewOrders, canViewMembers\" is the database's sentence, not the user's.\n */\nexport interface PermissionArea {\n  id: string;\n  label: string;\n  /**\n   * Grants read access. Omitted for areas the api models as a single admin\n   * switch (settings, team, domains) — those are on/off, and inventing a\n   * \"view\" tier for them would promise a read-only mode that doesn't exist.\n   */\n  view?: PermissionKey;\n  /** Grants write access. Implies `view` — you can't edit what you can't see. */\n  manage: PermissionKey;\n  /** Only offered when the business has one of these behaviors. */\n  requiredBehavior?: ContentBehavior[];\n  /**\n   * Administration rather than day-to-day work. Shown when editing a role\n   * (where completeness matters) and hidden at invite time (where the job is\n   * picking a job). Keeping these out of `resolveAreas` by default is what\n   * stops the front door growing back into the permission catalog it replaced.\n   */\n  advanced?: boolean;\n}\n\n/**\n * The permission catalog collapsed into areas.\n *\n * The api exposes 23 individual keys, which is the right shape for a database\n * and the wrong shape for a person: nobody reasons about `canViewOrders` and\n * `canManageOrders` as two independent switches, they think \"can they touch\n * orders, and how much\". So each area is one row with three states — No\n * access / View / Full — and the pair of keys is derived from that.\n */\nexport const PERMISSION_AREAS: PermissionArea[] = [\n  {\n    id: 'products',\n    label: 'Products',\n    view: 'canViewProducts',\n    manage: 'canManageProducts',\n    requiredBehavior: ['sellable', 'bookable', 'rentable', 'subscribable'],\n  },\n  {\n    id: 'orders',\n    label: 'Orders',\n    view: 'canViewOrders',\n    manage: 'canManageOrders',\n  },\n  {\n    id: 'customers',\n    label: 'Customers',\n    view: 'canViewMembers',\n    manage: 'canManageMembers',\n  },\n  {\n    id: 'discounts',\n    label: 'Discounts',\n    view: 'canViewDiscounts',\n    manage: 'canManageDiscounts',\n  },\n  {\n    id: 'messages',\n    label: 'Messages',\n    view: 'canViewCommunications',\n    manage: 'canManageCommunications',\n  },\n  {\n    id: 'reviews',\n    label: 'Reviews',\n    view: 'canViewReviews',\n    manage: 'canManageReviews',\n  },\n  {\n    id: 'analytics',\n    label: 'Analytics',\n    view: 'canViewAnalytics',\n    manage: 'canManageAnalytics',\n  },\n  {\n    id: 'website',\n    label: 'Website',\n    // Looking is its own grant now. This read `canManageBusinessProfile`, so\n    // the only way to let somebody SEE the site was to hand them the\n    // workspace's identity — and the invite card's \"See the website\" promised\n    // something no role could grant without also granting more.\n    view: 'canViewWebsite',\n    manage: 'canManageEditor',\n  },\n  { id: 'blog', label: 'Blog', view: 'canViewBlog', manage: 'canManageBlog' },\n  {\n    id: 'money',\n    label: 'Money',\n    view: 'canViewFinance',\n    manage: 'canManageFinance',\n  },\n  // Admin switches. Without these three the matrix reaches 20 of the api's 23\n  // permission keys, and canManageSettings / canManageTeam / canManageDomains\n  // would be unreachable in the role editor that used to grant them.\n  {\n    id: 'settings',\n    label: 'Business settings',\n    manage: 'canManageSettings',\n    advanced: true,\n  },\n  {\n    id: 'team',\n    label: 'Team & roles',\n    manage: 'canManageTeam',\n    advanced: true,\n  },\n  {\n    id: 'domains',\n    label: 'Domains',\n    manage: 'canManageDomains',\n    advanced: true,\n  },\n];\n\n/**\n * Areas worth showing for a business with these behaviors. `includeAdvanced`\n * adds the administration switches — on for the role editor, off for invites.\n */\nexport function resolveAreas(\n  behaviors: ContentBehavior[],\n  { includeAdvanced = false }: { includeAdvanced?: boolean } = {},\n): PermissionArea[] {\n  const enabled = new Set(behaviors);\n  return PERMISSION_AREAS.filter(\n    (a) =>\n      (includeAdvanced || !a.advanced) &&\n      (!a.requiredBehavior?.length ||\n        a.requiredBehavior.some((b) => enabled.has(b))),\n  );\n}\n\nexport type AccessLevel = 'none' | 'view' | 'full';\n\n/** Read an area's level out of a permission map. */\nexport function levelFor(\n  area: PermissionArea,\n  permissions: Record<string, boolean>,\n): AccessLevel {\n  if (permissions[area.manage]) return 'full';\n  if (area.view && permissions[area.view]) return 'view';\n  return 'none';\n}\n\n/** Write an area's level into a permission map (full implies view). */\nexport function setLevel(\n  permissions: Record<string, boolean>,\n  area: PermissionArea,\n  level: AccessLevel,\n): Record<string, boolean> {\n  // Spread-and-delete, so permission keys this area doesn't own survive\n  // untouched — an editor showing a subset must never drop the rest.\n  const next = { ...permissions };\n  if (area.view) delete next[area.view];\n  delete next[area.manage];\n  if (level === 'view' && area.view) next[area.view] = true;\n  if (level === 'full') {\n    if (area.view) next[area.view] = true;\n    next[area.manage] = true;\n  }\n  return next;\n}\n\n/**\n * A short, plain summary of what a role reaches. Groups by area rather than\n * listing permission keys, because \"canManageOrders, canViewOrders\" is the\n * database's sentence, not the user's.\n */\nexport function describeAreas(permissions: Record<string, boolean>): string[] {\n  return PERMISSION_AREAS.filter(\n    (a) => (a.view && permissions[a.view]) || permissions[a.manage],\n  ).map((a) => a.label);\n}\n"],"mappings":"AA8BO,MAAM,qBAAqB,CAAC,WAAW,SAAS,QAAQ;AAGxD,SAAS,eAAe,UAAiC;AAC9D,QAAM,MAAM,SAAS,KAAK,EAAE,YAAY;AACxC,SAAQ,mBAAyC,SAAS,GAAG,IAAI,MAAM;AACzE;AAwBO,MAAM,oBAAqC;AAAA,EAChD;AAAA,EACA;AACF;AAWO,MAAM,aAAwB;AAAA,EACnC;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,aAAa;AAAA,IACb,aAAa;AAAA,MACX;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AACF;AAQO,MAAM,YAAuB;AAAA,EAClC;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,aAAa;AAAA,IACb,kBAAkB,CAAC,UAAU;AAAA,IAC7B,aAAa;AAAA,MACX;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,aAAa;AAAA,IACb,kBAAkB,CAAC,WAAW;AAAA,IAC9B,aAAa;AAAA,MACX;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,aAAa;AAAA,IACb,kBAAkB,CAAC,UAAU;AAAA,IAC7B,aAAa;AAAA,MACX;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,aAAa;AAAA,IACb,kBAAkB,CAAC,UAAU;AAAA,IAC7B,aAAa;AAAA,MACX;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,aAAa;AAAA,IACb,aAAa;AAAA,MACX;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,aAAa;AAAA,IACb,aAAa;AAAA,MACX;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AACF;AAUO,SAAS,gBAAgB,WAAyC;AACvE,QAAM,UAAU,IAAI,IAAI,SAAS;AACjC,SAAO;AAAA,IACL,GAAG;AAAA,IACH,GAAG,UAAU;AAAA,MACX,CAAC,MACC,CAAC,EAAE,kBAAkB,UACrB,EAAE,iBAAiB,KAAK,CAAC,MAAM,QAAQ,IAAI,CAAC,CAAC;AAAA,IACjD;AAAA,EACF;AACF;AAMO,SAAS,mBACd,MACA,EAAE,YAAY,MAAM,IAA6B,CAAC,GACzB;AACzB,QAAM,UAAU,IAAI,IAAY,KAAK,WAAW;AAChD,aAAW,OAAO,kBAAmB,SAAQ,OAAO,GAAG;AACvD,MAAI,UAAW,YAAW,OAAO,kBAAmB,SAAQ,IAAI,GAAG;AACnE,SAAO,OAAO,YAAY,CAAC,GAAG,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC;AAC9D;AAsCO,MAAM,mBAAqC;AAAA,EAChD;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,MAAM;AAAA,IACN,QAAQ;AAAA,IACR,kBAAkB,CAAC,YAAY,YAAY,YAAY,cAAc;AAAA,EACv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eAAe,QAAQ,gBAAgB;AAAA,EAC1E;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,MAAM;AAAA,IACN,QAAQ;AAAA,EACV;AAAA;AAAA;AAAA;AAAA,EAIA;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,QAAQ;AAAA,IACR,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,QAAQ;AAAA,IACR,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,QAAQ;AAAA,IACR,UAAU;AAAA,EACZ;AACF;AAMO,SAAS,aACd,WACA,EAAE,kBAAkB,MAAM,IAAmC,CAAC,GAC5C;AAClB,QAAM,UAAU,IAAI,IAAI,SAAS;AACjC,SAAO,iBAAiB;AAAA,IACtB,CAAC,OACE,mBAAmB,CAAC,EAAE,cACtB,CAAC,EAAE,kBAAkB,UACpB,EAAE,iBAAiB,KAAK,CAAC,MAAM,QAAQ,IAAI,CAAC,CAAC;AAAA,EACnD;AACF;AAKO,SAAS,SACd,MACA,aACa;AACb,MAAI,YAAY,KAAK,MAAM,EAAG,QAAO;AACrC,MAAI,KAAK,QAAQ,YAAY,KAAK,IAAI,EAAG,QAAO;AAChD,SAAO;AACT;AAGO,SAAS,SACd,aACA,MACA,OACyB;AAGzB,QAAM,OAAO,EAAE,GAAG,YAAY;AAC9B,MAAI,KAAK,KAAM,QAAO,KAAK,KAAK,IAAI;AACpC,SAAO,KAAK,KAAK,MAAM;AACvB,MAAI,UAAU,UAAU,KAAK,KAAM,MAAK,KAAK,IAAI,IAAI;AACrD,MAAI,UAAU,QAAQ;AACpB,QAAI,KAAK,KAAM,MAAK,KAAK,IAAI,IAAI;AACjC,SAAK,KAAK,MAAM,IAAI;AAAA,EACtB;AACA,SAAO;AACT;AAOO,SAAS,cAAc,aAAgD;AAC5E,SAAO,iBAAiB;AAAA,IACtB,CAAC,MAAO,EAAE,QAAQ,YAAY,EAAE,IAAI,KAAM,YAAY,EAAE,MAAM;AAAA,EAChE,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK;AACtB;","names":[]}

package/dist/team-successors.d.ts

@@ -0,0 +1,20 @@
+import type { TeamMemberResponse } from './api/types';
+/**
+ * Who can receive a workspace.
+ *
+ * Active members only, and only ones who have actually joined — the api
+ * refuses an unaccepted invite, because a workspace owned by a token is owned
+ * by nobody. Filtered on this side as well so the picker never offers a name
+ * that will be turned away.
+ *
+ * Role is not a qualification. A viewer is offered exactly like a manager:
+ * who should run the business is the owner's call, and the only thing this is
+ * entitled to insist on is that the person has turned up.
+ *
+ * Lives here rather than beside the dialog so it can be tested — the dialog is
+ * a client component the node runner cannot load, and a rule whose failure mode
+ * is a workspace handed to nobody should not be the untested half.
+ */
+export declare function eligibleSuccessors(members: readonly TeamMemberResponse[]): TeamMemberResponse[];
+/** The name to put in front of somebody, in the order they would recognise. */
+export declare function memberDisplayName(member: TeamMemberResponse): string;

package/dist/team-successors.js

@@ -0,0 +1,13 @@
+function eligibleSuccessors(members) {
+  return members.filter(
+    (m) => m.status === "active" && !!m.accountId && m.role !== "owner"
+  );
+}
+function memberDisplayName(member) {
+  return member.name?.trim() || member.email || "this member";
+}
+export {
+  eligibleSuccessors,
+  memberDisplayName
+};
+//# sourceMappingURL=team-successors.js.map

package/dist/team-successors.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/team-successors.ts"],"sourcesContent":["import type { TeamMemberResponse } from './api/types';\n\n/**\n * Who can receive a workspace.\n *\n * Active members only, and only ones who have actually joined — the api\n * refuses an unaccepted invite, because a workspace owned by a token is owned\n * by nobody. Filtered on this side as well so the picker never offers a name\n * that will be turned away.\n *\n * Role is not a qualification. A viewer is offered exactly like a manager:\n * who should run the business is the owner's call, and the only thing this is\n * entitled to insist on is that the person has turned up.\n *\n * Lives here rather than beside the dialog so it can be tested — the dialog is\n * a client component the node runner cannot load, and a rule whose failure mode\n * is a workspace handed to nobody should not be the untested half.\n */\nexport function eligibleSuccessors(\n  members: readonly TeamMemberResponse[],\n): TeamMemberResponse[] {\n  return members.filter(\n    (m) => m.status === 'active' && !!m.accountId && m.role !== 'owner',\n  );\n}\n\n/** The name to put in front of somebody, in the order they would recognise. */\nexport function memberDisplayName(member: TeamMemberResponse): string {\n  return member.name?.trim() || member.email || 'this member';\n}\n"],"mappings":"AAkBO,SAAS,mBACd,SACsB;AACtB,SAAO,QAAQ;AAAA,IACb,CAAC,MAAM,EAAE,WAAW,YAAY,CAAC,CAAC,EAAE,aAAa,EAAE,SAAS;AAAA,EAC9D;AACF;AAGO,SAAS,kBAAkB,QAAoC;AACpE,SAAO,OAAO,MAAM,KAAK,KAAK,OAAO,SAAS;AAChD;","names":[]}

package/dist/template-asset-url.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Where a template's own picture is served from.
+ *
+ * A template's schema gives its sample photos as paths on the renderer, such
+ * as `/templates/baseline-gym-01/photos/hero.jpg`. The storefront preview is
+ * the renderer, so they load there; the editor's image field is the dashboard,
+ * so the same path asked the dashboard's own host and came back 404, leaving a
+ * broken picture where the template's hero should be. Those paths are read
+ * from the renderer. Anything else (an upload, a full URL) is left alone.
+ */
+export declare function templateAssetUrl(src: string): string;

package/dist/template-asset-url.js

@@ -0,0 +1,8 @@
+import { resolveWebUrl } from "./web-url";
+function templateAssetUrl(src) {
+  return src.startsWith("/templates/") ? `${resolveWebUrl()}${src}` : src;
+}
+export {
+  templateAssetUrl
+};
+//# sourceMappingURL=template-asset-url.js.map

package/dist/template-asset-url.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/template-asset-url.ts"],"sourcesContent":["import { resolveWebUrl } from './web-url';\n\n/**\n * Where a template's own picture is served from.\n *\n * A template's schema gives its sample photos as paths on the renderer, such\n * as `/templates/baseline-gym-01/photos/hero.jpg`. The storefront preview is\n * the renderer, so they load there; the editor's image field is the dashboard,\n * so the same path asked the dashboard's own host and came back 404, leaving a\n * broken picture where the template's hero should be. Those paths are read\n * from the renderer. Anything else (an upload, a full URL) is left alone.\n */\nexport function templateAssetUrl(src: string): string {\n  return src.startsWith('/templates/') ? `${resolveWebUrl()}${src}` : src;\n}\n"],"mappings":"AAAA,SAAS,qBAAqB;AAYvB,SAAS,iBAAiB,KAAqB;AACpD,SAAO,IAAI,WAAW,aAAa,IAAI,GAAG,cAAc,CAAC,GAAG,GAAG,KAAK;AACtE;","names":[]}

package/dist/template-capabilities.d.ts

@@ -0,0 +1,2 @@
+import type { TemplateConfig } from './template-types';
+export declare function buildTemplateCapabilitySettings(template: TemplateConfig, currentSettings?: Record<string, unknown>): Record<string, unknown>;

package/dist/template-capabilities.js

@@ -0,0 +1,71 @@
+const VALID_BEHAVIORS = /* @__PURE__ */ new Set([
+  "sellable",
+  "bookable",
+  "subscribable",
+  "downloadable",
+  "shippable",
+  "rentable",
+  "ticketed"
+]);
+const MODULE_BEHAVIOR_GATES = {
+  inventory: ["sellable", "rentable", "ticketed", "shippable"],
+  shipping: ["shippable"],
+  bookings: ["bookable"],
+  resources: ["bookable"],
+  subscriptions: ["subscribable"],
+  discounts: ["sellable", "bookable", "rentable", "ticketed", "subscribable"],
+  collections: ["sellable", "rentable", "ticketed"]
+};
+function collectTemplateBehaviors(template) {
+  const behaviors = /* @__PURE__ */ new Set();
+  const add = (behavior) => {
+    if (VALID_BEHAVIORS.has(behavior)) behaviors.add(behavior);
+  };
+  template.behaviors?.forEach(add);
+  if (template.category === "ecommerce") {
+    if (behaviors.size === 0) behaviors.add("sellable");
+    return [...behaviors];
+  }
+  Object.values(template.contentTypes).forEach(
+    (contentType) => contentType.behaviors?.forEach(add)
+  );
+  return [...behaviors];
+}
+function resolveTemplateIntents(template, behaviors) {
+  const intents = /* @__PURE__ */ new Set();
+  const pages = template.pageContent ?? {};
+  if (behaviors.includes("bookable")) intents.add("take-bookings");
+  if (behaviors.includes("rentable")) intents.add("rent-property");
+  if (behaviors.includes("subscribable")) intents.add("subscriptions");
+  if (behaviors.includes("ticketed")) intents.add("event-tickets");
+  if (behaviors.includes("downloadable")) intents.add("digital-products");
+  if (behaviors.includes("sellable")) {
+    if (template.category === "ecommerce" || behaviors.includes("shippable") || "shop" in pages) {
+      intents.add("sell-products");
+    }
+    if ("menu" in pages) intents.add("food-orders");
+    if (intents.size === 0) intents.add("sell-products");
+  }
+  return [...intents];
+}
+function buildTemplateCapabilitySettings(template, currentSettings = {}) {
+  const preservedSettings = { ...currentSettings };
+  delete preservedSettings.operatingModel;
+  const enabledBehaviors = collectTemplateBehaviors(template);
+  const enabledSet = new Set(enabledBehaviors);
+  const hiddenModules = Array.isArray(currentSettings.hiddenModules) ? currentSettings.hiddenModules.filter(
+    (moduleId) => typeof moduleId === "string" && !MODULE_BEHAVIOR_GATES[moduleId]?.some(
+      (behavior) => enabledSet.has(behavior)
+    )
+  ) : [];
+  return {
+    ...preservedSettings,
+    selectedIntents: resolveTemplateIntents(template, enabledBehaviors),
+    enabledBehaviors,
+    hiddenModules
+  };
+}
+export {
+  buildTemplateCapabilitySettings
+};
+//# sourceMappingURL=template-capabilities.js.map

package/dist/template-capabilities.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/template-capabilities.ts"],"sourcesContent":["import type { ContentBehavior, TemplateConfig } from './template-types';\n\nconst VALID_BEHAVIORS = new Set<ContentBehavior>([\n  'sellable',\n  'bookable',\n  'subscribable',\n  'downloadable',\n  'shippable',\n  'rentable',\n  'ticketed',\n]);\n\nconst MODULE_BEHAVIOR_GATES: Record<string, ContentBehavior[]> = {\n  inventory: ['sellable', 'rentable', 'ticketed', 'shippable'],\n  shipping: ['shippable'],\n  bookings: ['bookable'],\n  resources: ['bookable'],\n  subscriptions: ['subscribable'],\n  discounts: ['sellable', 'bookable', 'rentable', 'ticketed', 'subscribable'],\n  collections: ['sellable', 'rentable', 'ticketed'],\n};\n\nfunction collectTemplateBehaviors(template: TemplateConfig): ContentBehavior[] {\n  const behaviors = new Set<ContentBehavior>();\n  const add = (behavior: ContentBehavior) => {\n    if (VALID_BEHAVIORS.has(behavior)) behaviors.add(behavior);\n  };\n\n  template.behaviors?.forEach(add);\n  if (template.category === 'ecommerce') {\n    if (behaviors.size === 0) behaviors.add('sellable');\n    return [...behaviors];\n  }\n  Object.values(template.contentTypes).forEach((contentType) =>\n    contentType.behaviors?.forEach(add),\n  );\n\n  return [...behaviors];\n}\n\nfunction resolveTemplateIntents(\n  template: TemplateConfig,\n  behaviors: ContentBehavior[],\n): string[] {\n  const intents = new Set<string>();\n  const pages = template.pageContent ?? {};\n\n  if (behaviors.includes('bookable')) intents.add('take-bookings');\n  if (behaviors.includes('rentable')) intents.add('rent-property');\n  if (behaviors.includes('subscribable')) intents.add('subscriptions');\n  if (behaviors.includes('ticketed')) intents.add('event-tickets');\n  if (behaviors.includes('downloadable')) intents.add('digital-products');\n\n  if (behaviors.includes('sellable')) {\n    if (\n      template.category === 'ecommerce' ||\n      behaviors.includes('shippable') ||\n      'shop' in pages\n    ) {\n      intents.add('sell-products');\n    }\n    if ('menu' in pages) intents.add('food-orders');\n    if (intents.size === 0) intents.add('sell-products');\n  }\n\n  return [...intents];\n}\n\nexport function buildTemplateCapabilitySettings(\n  template: TemplateConfig,\n  currentSettings: Record<string, unknown> = {},\n): Record<string, unknown> {\n  const preservedSettings = { ...currentSettings };\n  delete preservedSettings.operatingModel;\n  const enabledBehaviors = collectTemplateBehaviors(template);\n  const enabledSet = new Set(enabledBehaviors);\n  const hiddenModules = Array.isArray(currentSettings.hiddenModules)\n    ? currentSettings.hiddenModules.filter(\n        (moduleId): moduleId is string =>\n          typeof moduleId === 'string' &&\n          !MODULE_BEHAVIOR_GATES[moduleId]?.some((behavior) =>\n            enabledSet.has(behavior),\n          ),\n      )\n    : [];\n\n  return {\n    ...preservedSettings,\n    selectedIntents: resolveTemplateIntents(template, enabledBehaviors),\n    enabledBehaviors,\n    hiddenModules,\n  };\n}\n"],"mappings":"AAEA,MAAM,kBAAkB,oBAAI,IAAqB;AAAA,EAC/C;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAED,MAAM,wBAA2D;AAAA,EAC/D,WAAW,CAAC,YAAY,YAAY,YAAY,WAAW;AAAA,EAC3D,UAAU,CAAC,WAAW;AAAA,EACtB,UAAU,CAAC,UAAU;AAAA,EACrB,WAAW,CAAC,UAAU;AAAA,EACtB,eAAe,CAAC,cAAc;AAAA,EAC9B,WAAW,CAAC,YAAY,YAAY,YAAY,YAAY,cAAc;AAAA,EAC1E,aAAa,CAAC,YAAY,YAAY,UAAU;AAClD;AAEA,SAAS,yBAAyB,UAA6C;AAC7E,QAAM,YAAY,oBAAI,IAAqB;AAC3C,QAAM,MAAM,CAAC,aAA8B;AACzC,QAAI,gBAAgB,IAAI,QAAQ,EAAG,WAAU,IAAI,QAAQ;AAAA,EAC3D;AAEA,WAAS,WAAW,QAAQ,GAAG;AAC/B,MAAI,SAAS,aAAa,aAAa;AACrC,QAAI,UAAU,SAAS,EAAG,WAAU,IAAI,UAAU;AAClD,WAAO,CAAC,GAAG,SAAS;AAAA,EACtB;AACA,SAAO,OAAO,SAAS,YAAY,EAAE;AAAA,IAAQ,CAAC,gBAC5C,YAAY,WAAW,QAAQ,GAAG;AAAA,EACpC;AAEA,SAAO,CAAC,GAAG,SAAS;AACtB;AAEA,SAAS,uBACP,UACA,WACU;AACV,QAAM,UAAU,oBAAI,IAAY;AAChC,QAAM,QAAQ,SAAS,eAAe,CAAC;AAEvC,MAAI,UAAU,SAAS,UAAU,EAAG,SAAQ,IAAI,eAAe;AAC/D,MAAI,UAAU,SAAS,UAAU,EAAG,SAAQ,IAAI,eAAe;AAC/D,MAAI,UAAU,SAAS,cAAc,EAAG,SAAQ,IAAI,eAAe;AACnE,MAAI,UAAU,SAAS,UAAU,EAAG,SAAQ,IAAI,eAAe;AAC/D,MAAI,UAAU,SAAS,cAAc,EAAG,SAAQ,IAAI,kBAAkB;AAEtE,MAAI,UAAU,SAAS,UAAU,GAAG;AAClC,QACE,SAAS,aAAa,eACtB,UAAU,SAAS,WAAW,KAC9B,UAAU,OACV;AACA,cAAQ,IAAI,eAAe;AAAA,IAC7B;AACA,QAAI,UAAU,MAAO,SAAQ,IAAI,aAAa;AAC9C,QAAI,QAAQ,SAAS,EAAG,SAAQ,IAAI,eAAe;AAAA,EACrD;AAEA,SAAO,CAAC,GAAG,OAAO;AACpB;AAEO,SAAS,gCACd,UACA,kBAA2C,CAAC,GACnB;AACzB,QAAM,oBAAoB,EAAE,GAAG,gBAAgB;AAC/C,SAAO,kBAAkB;AACzB,QAAM,mBAAmB,yBAAyB,QAAQ;AAC1D,QAAM,aAAa,IAAI,IAAI,gBAAgB;AAC3C,QAAM,gBAAgB,MAAM,QAAQ,gBAAgB,aAAa,IAC7D,gBAAgB,cAAc;AAAA,IAC5B,CAAC,aACC,OAAO,aAAa,YACpB,CAAC,sBAAsB,QAAQ,GAAG;AAAA,MAAK,CAAC,aACtC,WAAW,IAAI,QAAQ;AAAA,IACzB;AAAA,EACJ,IACA,CAAC;AAEL,SAAO;AAAA,IACL,GAAG;AAAA,IACH,iBAAiB,uBAAuB,UAAU,gBAAgB;AAAA,IAClE;AAAA,IACA;AAAA,EACF;AACF;","names":[]}