whale-code 6.5.10 → 6.6.0

package/dist/server/handlers/clickhouse.js.map

@@ -1 +1 @@
-{"version":3,"file":"clickhouse.js","names":["getClickHouseClient","handleClickHouse","sb","args","storeId","sid","hoursBack","hours_back","limit","Math","min","ch","isEnabled","success","error","storeFilter","esc","action","data","query","traceId","trace_id","spans","functionName","function_name","levelFilter","level","budgets","budgetErr","from","select","eq","message","agentIds","map","b","agent_id","join","spendRows","spendMap","Map","r","total_cost_usd","spend","get","budget_amount","limit_usd","current_spend","period_start","created_at","period_end","Date","toISOString","utilization_pct","is_over_budget","groups","total_groups","length","functions","traces","budgetData","Promise","all","resolve","totalRequests","reduce","sum","f","total_requests","totalErrors","error_count","summary","function_count","total_errors","error_rate","round","recent_traces","cost_budgets","s","replace"],"sources":["../../../src/server/handlers/clickhouse.ts"],"sourcesContent":["import type { SupabaseClient } from \"@supabase/supabase-js\";\nimport { getClickHouseClient } from \"../lib/clickhouse-client.js\";\n\n/**\n * ClickHouse observability handler — platform-level metrics via direct HTTP queries.\n * Replaces FDW RPCs with direct ClickHouse queries for lower latency.\n */\nexport async function handleClickHouse(\n  sb: SupabaseClient,\n  args: Record<string, unknown>,\n  storeId?: string,\n): Promise<{ success: boolean; data?: unknown; error?: string }> {\n  const sid = storeId as string;\n  const hoursBack = (args.hours_back as number) || 24;\n  const limit = Math.min((args.limit as number) || 50, 200);\n  const ch = getClickHouseClient();\n\n  if (!ch.isEnabled) {\n    return { success: false, error: \"ClickHouse is not configured\" };\n  }\n\n  const storeFilter = sid ? `AND store_id = '${esc(sid)}'` : \"\";\n\n  switch (args.action) {\n    // ---- traces: List recent traces ----\n    case \"traces\": {\n      const data = await ch.query<{\n        trace_id: string; root_service: string; root_operation: string;\n        duration: number; span_count: number; error_count: number;\n        started_at: string; status: string;\n      }>(`\n        SELECT\n          trace_id,\n          arrayElement(groupArrayIf(service_name, parent_span_id = '' OR parent_span_id IS NULL), 1) AS root_service,\n          arrayElement(groupArrayIf(operation_name, parent_span_id = '' OR parent_span_id IS NULL), 1) AS root_operation,\n          toInt32(dateDiff('millisecond', min(started_at), max(ended_at))) AS duration,\n          count() AS span_count,\n          countIf(status_code = 'ERROR') AS error_count,\n          min(started_at) AS started_at,\n          if(countIf(status_code = 'ERROR') > 0, 'error', 'ok') AS status\n        FROM ai_spans\n        WHERE 1=1 ${storeFilter}\n        GROUP BY trace_id\n        ORDER BY min(started_at) DESC\n        LIMIT ${limit}\n      `);\n      return { success: true, data };\n    }\n\n    // ---- trace_detail: Full trace waterfall ----\n    case \"trace_detail\": {\n      const traceId = args.trace_id as string;\n      if (!traceId) return { success: false, error: \"trace_id is required\" };\n      const spans = await ch.query<Record<string, unknown>>(`\n        SELECT\n          span_id, parent_span_id, trace_id, operation_name,\n          service_name, duration_ms AS duration,\n          started_at, ended_at,\n          if(status_code = 'ERROR', 'error', 'ok') AS status,\n          attributes, events\n        FROM ai_spans\n        WHERE trace_id = '${esc(traceId)}'\n        ORDER BY started_at ASC\n      `);\n      return { success: true, data: { trace_id: traceId, spans } };\n    }\n\n    // ---- function_health: Service health metrics ----\n    case \"function_health\": {\n      const data = await ch.query<Record<string, unknown>>(`\n        SELECT\n          service_name AS function_name,\n          sum(total_requests) AS total_reqs,\n          sum(error_count) AS total_errors,\n          sum(client_error_count) AS client_errors,\n          if(sum(total_requests) > 0, sum(error_count) / sum(total_requests), 0) AS error_rate,\n          if(sum(latency_count) > 0, sum(latency_sum_ms) / sum(latency_count), 0) AS avg_latency_ms,\n          max(latency_max_ms) AS p95_latency_ms,\n          min(latency_min_ms) AS min_latency_ms,\n          max(latency_max_ms) AS max_latency_ms,\n          max(bucket) AS last_request_at\n        FROM function_health\n        WHERE bucket >= now() - INTERVAL ${hoursBack} HOUR\n          ${storeFilter}\n        GROUP BY service_name\n      `);\n      return { success: true, data };\n    }\n\n    // ---- function_logs: Request logs ----\n    case \"function_logs\": {\n      const functionName = args.function_name as string;\n      if (!functionName) return { success: false, error: \"function_name is required\" };\n      const levelFilter = args.level ? `AND severity = '${esc(args.level as string)}'` : \"\";\n      const data = await ch.query<Record<string, unknown>>(`\n        SELECT\n          request_id, service_name AS function_name, http_status AS status,\n          duration_ms, http_method AS method, http_path AS path,\n          store_id, status_code = 'ERROR' AS has_error,\n          started_at AS first_seen, events AS lines\n        FROM ai_spans\n        WHERE service_name = '${esc(functionName)}'\n          ${storeFilter} ${levelFilter}\n          AND span_kind = 'SERVER'\n        ORDER BY started_at DESC\n        LIMIT ${limit}\n      `);\n      return { success: true, data };\n    }\n\n    // ---- cost_budgets: Budget utilization ----\n    case \"cost_budgets\": {\n      if (!sid) return { success: false, error: \"store_id is required for cost_budgets\" };\n      // Cost budgets require Postgres for ai_cost_budgets table + ClickHouse for spend\n      const { data: budgets, error: budgetErr } = await sb\n        .from(\"ai_cost_budgets\")\n        .select(\"agent_id, limit_usd, is_active, created_at\")\n        .eq(\"is_active\", true)\n        .eq(\"store_id\", sid);\n      if (budgetErr) return { success: false, error: budgetErr.message };\n\n      const agentIds = (budgets || []).map(b => `'${esc(b.agent_id)}'`).join(\",\");\n      const spendRows = agentIds\n        ? await ch.query<{ agent_id: string; total_cost_usd: number }>(`\n            SELECT agent_id, sum(total_cost_usd) AS total_cost_usd\n            FROM token_usage_hourly\n            WHERE agent_id IN (${agentIds})\n              AND store_id = '${esc(sid)}'\n            GROUP BY agent_id\n          `)\n        : [];\n\n      const spendMap = new Map(spendRows.map(r => [r.agent_id, r.total_cost_usd]));\n      const data = (budgets || []).map(b => {\n        const spend = spendMap.get(b.agent_id) || 0;\n        return {\n          agent_id: b.agent_id,\n          budget_amount: b.limit_usd,\n          current_spend: spend,\n          period_start: b.created_at,\n          period_end: new Date().toISOString(),\n          utilization_pct: b.limit_usd > 0 ? (spend / b.limit_usd) * 100 : 0,\n          is_over_budget: spend > b.limit_usd,\n        };\n      });\n      return { success: true, data };\n    }\n\n    // ---- error_groups: Error fingerprints grouped ----\n    case \"error_groups\": {\n      const data = await ch.query<{\n        fingerprint: string; error_type: string; message: string;\n        severity: string; service: string; count: number; last_seen: string;\n      }>(`\n        SELECT\n          fingerprint,\n          any(error_type) AS error_type,\n          substring(any(error_message), 1, 200) AS message,\n          any(severity) AS severity,\n          any(service_name) AS service,\n          count() AS count,\n          max(occurred_at) AS last_seen\n        FROM error_events\n        WHERE occurred_at >= now() - INTERVAL ${hoursBack} HOUR\n        GROUP BY fingerprint\n        ORDER BY count DESC\n        LIMIT ${limit}\n      `);\n      return { success: true, data: { groups: data, total_groups: data.length, hours_back: hoursBack } };\n    }\n\n    // ---- system_status: Combined overview ----\n    case \"system_status\": {\n      const [functions, traces, budgetData] = await Promise.all([\n        ch.query<Record<string, unknown>>(`\n          SELECT\n            service_name AS function_name,\n            sum(total_requests) AS total_reqs,\n            sum(error_count) AS total_errors,\n            if(sum(total_requests) > 0, sum(error_count) / sum(total_requests), 0) AS error_rate,\n            max(bucket) AS last_request_at\n          FROM function_health\n          WHERE bucket >= now() - INTERVAL ${Math.min(hoursBack, 1)} HOUR\n            ${storeFilter}\n          GROUP BY service_name\n        `),\n        ch.query<Record<string, unknown>>(`\n          SELECT\n            trace_id,\n            arrayElement(groupArrayIf(service_name, parent_span_id = '' OR parent_span_id IS NULL), 1) AS root_service,\n            arrayElement(groupArrayIf(operation_name, parent_span_id = '' OR parent_span_id IS NULL), 1) AS root_operation,\n            toInt32(dateDiff('millisecond', min(started_at), max(ended_at))) AS duration,\n            count() AS span_count,\n            countIf(status_code = 'ERROR') AS error_count,\n            min(started_at) AS started_at,\n            if(countIf(status_code = 'ERROR') > 0, 'error', 'ok') AS status\n          FROM ai_spans\n          WHERE 1=1 ${storeFilter}\n          GROUP BY trace_id\n          ORDER BY min(started_at) DESC\n          LIMIT 10\n        `),\n        sid\n          ? handleClickHouse(sb, { action: \"cost_budgets\" }, sid)\n          : Promise.resolve({ success: true, data: null }),\n      ]);\n\n      const totalRequests = functions.reduce((sum, f) => sum + ((f.total_requests as number) || 0), 0);\n      const totalErrors = functions.reduce((sum, f) => sum + ((f.error_count as number) || 0), 0);\n\n      return {\n        success: true,\n        data: {\n          summary: {\n            function_count: functions.length,\n            total_requests: totalRequests,\n            total_errors: totalErrors,\n            error_rate: totalRequests > 0 ? Math.round((totalErrors / totalRequests) * 10000) / 100 : 0,\n          },\n          functions,\n          recent_traces: traces,\n          cost_budgets: budgetData.data,\n          hours_back: hoursBack,\n        },\n      };\n    }\n\n    default:\n      return {\n        success: false,\n        error: `Unknown clickhouse action: ${args.action}. Available: traces, trace_detail, function_health, function_logs, cost_budgets, error_groups, system_status`,\n      };\n  }\n}\n\n/** Escape single quotes for ClickHouse SQL */\nfunction esc(s: string): string {\n  return s.replace(/'/g, \"\\\\'\");\n}\n"],"mappings":"AACA,SAASA,mBAAmB,QAAQ,6BAA6B;;AAEjE;AACA;AACA;AACA;AACA,OAAO,eAAeC,gBAAgBA,CACpCC,EAAkB,EAClBC,IAA6B,EAC7BC,OAAgB,EAC+C;EAC/D,MAAMC,GAAG,GAAGD,OAAiB;EAC7B,MAAME,SAAS,GAAIH,IAAI,CAACI,UAAU,IAAe,EAAE;EACnD,MAAMC,KAAK,GAAGC,IAAI,CAACC,GAAG,CAAEP,IAAI,CAACK,KAAK,IAAe,EAAE,EAAE,GAAG,CAAC;EACzD,MAAMG,EAAE,GAAGX,mBAAmB,CAAC,CAAC;EAEhC,IAAI,CAACW,EAAE,CAACC,SAAS,EAAE;IACjB,OAAO;MAAEC,OAAO,EAAE,KAAK;MAAEC,KAAK,EAAE;IAA+B,CAAC;EAClE;EAEA,MAAMC,WAAW,GAAGV,GAAG,GAAG,mBAAmBW,GAAG,CAACX,GAAG,CAAC,GAAG,GAAG,EAAE;EAE7D,QAAQF,IAAI,CAACc,MAAM;IACjB;IACA,KAAK,QAAQ;MAAE;QACb,MAAMC,IAAI,GAAG,MAAMP,EAAE,CAACQ,KAAK,CAIxB;AACT;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,oBAAoBJ,WAAW;AAC/B;AACA;AACA,gBAAgBP,KAAK;AACrB,OAAO,CAAC;QACF,OAAO;UAAEK,OAAO,EAAE,IAAI;UAAEK;QAAK,CAAC;MAChC;;IAEA;IACA,KAAK,cAAc;MAAE;QACnB,MAAME,OAAO,GAAGjB,IAAI,CAACkB,QAAkB;QACvC,IAAI,CAACD,OAAO,EAAE,OAAO;UAAEP,OAAO,EAAE,KAAK;UAAEC,KAAK,EAAE;QAAuB,CAAC;QACtE,MAAMQ,KAAK,GAAG,MAAMX,EAAE,CAACQ,KAAK,CAA0B;AAC5D;AACA;AACA;AACA;AACA;AACA;AACA;AACA,4BAA4BH,GAAG,CAACI,OAAO,CAAC;AACxC;AACA,OAAO,CAAC;QACF,OAAO;UAAEP,OAAO,EAAE,IAAI;UAAEK,IAAI,EAAE;YAAEG,QAAQ,EAAED,OAAO;YAAEE;UAAM;QAAE,CAAC;MAC9D;;IAEA;IACA,KAAK,iBAAiB;MAAE;QACtB,MAAMJ,IAAI,GAAG,MAAMP,EAAE,CAACQ,KAAK,CAA0B;AAC3D;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,2CAA2Cb,SAAS;AACpD,YAAYS,WAAW;AACvB;AACA,OAAO,CAAC;QACF,OAAO;UAAEF,OAAO,EAAE,IAAI;UAAEK;QAAK,CAAC;MAChC;;IAEA;IACA,KAAK,eAAe;MAAE;QACpB,MAAMK,YAAY,GAAGpB,IAAI,CAACqB,aAAuB;QACjD,IAAI,CAACD,YAAY,EAAE,OAAO;UAAEV,OAAO,EAAE,KAAK;UAAEC,KAAK,EAAE;QAA4B,CAAC;QAChF,MAAMW,WAAW,GAAGtB,IAAI,CAACuB,KAAK,GAAG,mBAAmBV,GAAG,CAACb,IAAI,CAACuB,KAAe,CAAC,GAAG,GAAG,EAAE;QACrF,MAAMR,IAAI,GAAG,MAAMP,EAAE,CAACQ,KAAK,CAA0B;AAC3D;AACA;AACA;AACA;AACA;AACA;AACA,gCAAgCH,GAAG,CAACO,YAAY,CAAC;AACjD,YAAYR,WAAW,IAAIU,WAAW;AACtC;AACA;AACA,gBAAgBjB,KAAK;AACrB,OAAO,CAAC;QACF,OAAO;UAAEK,OAAO,EAAE,IAAI;UAAEK;QAAK,CAAC;MAChC;;IAEA;IACA,KAAK,cAAc;MAAE;QACnB,IAAI,CAACb,GAAG,EAAE,OAAO;UAAEQ,OAAO,EAAE,KAAK;UAAEC,KAAK,EAAE;QAAwC,CAAC;QACnF;QACA,MAAM;UAAEI,IAAI,EAAES,OAAO;UAAEb,KAAK,EAAEc;QAAU,CAAC,GAAG,MAAM1B,EAAE,CACjD2B,IAAI,CAAC,iBAAiB,CAAC,CACvBC,MAAM,CAAC,4CAA4C,CAAC,CACpDC,EAAE,CAAC,WAAW,EAAE,IAAI,CAAC,CACrBA,EAAE,CAAC,UAAU,EAAE1B,GAAG,CAAC;QACtB,IAAIuB,SAAS,EAAE,OAAO;UAAEf,OAAO,EAAE,KAAK;UAAEC,KAAK,EAAEc,SAAS,CAACI;QAAQ,CAAC;QAElE,MAAMC,QAAQ,GAAG,CAACN,OAAO,IAAI,EAAE,EAAEO,GAAG,CAACC,CAAC,IAAI,IAAInB,GAAG,CAACmB,CAAC,CAACC,QAAQ,CAAC,GAAG,CAAC,CAACC,IAAI,CAAC,GAAG,CAAC;QAC3E,MAAMC,SAAS,GAAGL,QAAQ,GACtB,MAAMtB,EAAE,CAACQ,KAAK,CAA+C;AACvE;AACA;AACA,iCAAiCc,QAAQ;AACzC,gCAAgCjB,GAAG,CAACX,GAAG,CAAC;AACxC;AACA,WAAW,CAAC,GACF,EAAE;QAEN,MAAMkC,QAAQ,GAAG,IAAIC,GAAG,CAACF,SAAS,CAACJ,GAAG,CAACO,CAAC,IAAI,CAACA,CAAC,CAACL,QAAQ,EAAEK,CAAC,CAACC,cAAc,CAAC,CAAC,CAAC;QAC5E,MAAMxB,IAAI,GAAG,CAACS,OAAO,IAAI,EAAE,EAAEO,GAAG,CAACC,CAAC,IAAI;UACpC,MAAMQ,KAAK,GAAGJ,QAAQ,CAACK,GAAG,CAACT,CAAC,CAACC,QAAQ,CAAC,IAAI,CAAC;UAC3C,OAAO;YACLA,QAAQ,EAAED,CAAC,CAACC,QAAQ;YACpBS,aAAa,EAAEV,CAAC,CAACW,SAAS;YAC1BC,aAAa,EAAEJ,KAAK;YACpBK,YAAY,EAAEb,CAAC,CAACc,UAAU;YAC1BC,UAAU,EAAE,IAAIC,IAAI,CAAC,CAAC,CAACC,WAAW,CAAC,CAAC;YACpCC,eAAe,EAAElB,CAAC,CAACW,SAAS,GAAG,CAAC,GAAIH,KAAK,GAAGR,CAAC,CAACW,SAAS,GAAI,GAAG,GAAG,CAAC;YAClEQ,cAAc,EAAEX,KAAK,GAAGR,CAAC,CAACW;UAC5B,CAAC;QACH,CAAC,CAAC;QACF,OAAO;UAAEjC,OAAO,EAAE,IAAI;UAAEK;QAAK,CAAC;MAChC;;IAEA;IACA,KAAK,cAAc;MAAE;QACnB,MAAMA,IAAI,GAAG,MAAMP,EAAE,CAACQ,KAAK,CAGxB;AACT;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,gDAAgDb,SAAS;AACzD;AACA;AACA,gBAAgBE,KAAK;AACrB,OAAO,CAAC;QACF,OAAO;UAAEK,OAAO,EAAE,IAAI;UAAEK,IAAI,EAAE;YAAEqC,MAAM,EAAErC,IAAI;YAAEsC,YAAY,EAAEtC,IAAI,CAACuC,MAAM;YAAElD,UAAU,EAAED;UAAU;QAAE,CAAC;MACpG;;IAEA;IACA,KAAK,eAAe;MAAE;QACpB,MAAM,CAACoD,SAAS,EAAEC,MAAM,EAAEC,UAAU,CAAC,GAAG,MAAMC,OAAO,CAACC,GAAG,CAAC,CACxDnD,EAAE,CAACQ,KAAK,CAA0B;AAC1C;AACA;AACA;AACA;AACA;AACA;AACA;AACA,6CAA6CV,IAAI,CAACC,GAAG,CAACJ,SAAS,EAAE,CAAC,CAAC;AACnE,cAAcS,WAAW;AACzB;AACA,SAAS,CAAC,EACFJ,EAAE,CAACQ,KAAK,CAA0B;AAC1C;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,sBAAsBJ,WAAW;AACjC;AACA;AACA;AACA,SAAS,CAAC,EACFV,GAAG,GACCJ,gBAAgB,CAACC,EAAE,EAAE;UAAEe,MAAM,EAAE;QAAe,CAAC,EAAEZ,GAAG,CAAC,GACrDwD,OAAO,CAACE,OAAO,CAAC;UAAElD,OAAO,EAAE,IAAI;UAAEK,IAAI,EAAE;QAAK,CAAC,CAAC,CACnD,CAAC;QAEF,MAAM8C,aAAa,GAAGN,SAAS,CAACO,MAAM,CAAC,CAACC,GAAG,EAAEC,CAAC,KAAKD,GAAG,IAAKC,CAAC,CAACC,cAAc,IAAe,CAAC,CAAC,EAAE,CAAC,CAAC;QAChG,MAAMC,WAAW,GAAGX,SAAS,CAACO,MAAM,CAAC,CAACC,GAAG,EAAEC,CAAC,KAAKD,GAAG,IAAKC,CAAC,CAACG,WAAW,IAAe,CAAC,CAAC,EAAE,CAAC,CAAC;QAE3F,OAAO;UACLzD,OAAO,EAAE,IAAI;UACbK,IAAI,EAAE;YACJqD,OAAO,EAAE;cACPC,cAAc,EAAEd,SAAS,CAACD,MAAM;cAChCW,cAAc,EAAEJ,aAAa;cAC7BS,YAAY,EAAEJ,WAAW;cACzBK,UAAU,EAAEV,aAAa,GAAG,CAAC,GAAGvD,IAAI,CAACkE,KAAK,CAAEN,WAAW,GAAGL,aAAa,GAAI,KAAK,CAAC,GAAG,GAAG,GAAG;YAC5F,CAAC;YACDN,SAAS;YACTkB,aAAa,EAAEjB,MAAM;YACrBkB,YAAY,EAAEjB,UAAU,CAAC1C,IAAI;YAC7BX,UAAU,EAAED;UACd;QACF,CAAC;MACH;IAEA;MACE,OAAO;QACLO,OAAO,EAAE,KAAK;QACdC,KAAK,EAAE,8BAA8BX,IAAI,CAACc,MAAM;MAClD,CAAC;EACL;AACF;;AAEA;AACA,SAASD,GAAGA,CAAC8D,CAAS,EAAU;EAC9B,OAAOA,CAAC,CAACC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC;AAC/B","ignoreList":[]}
+{"version":3,"file":"clickhouse.js","names":["getClickHouseClient","handleClickHouse","sb","args","storeId","sid","hoursBack","Math","max","min","Number","hours_back","limit","ch","isEnabled","success","error","storeFilter","esc","action","data","query","traceId","trace_id","spans","functionName","function_name","levelFilter","level","budgets","budgetErr","from","select","eq","message","agentIds","map","b","agent_id","join","spendRows","spendMap","Map","r","total_cost_usd","spend","get","budget_amount","limit_usd","current_spend","period_start","created_at","period_end","Date","toISOString","utilization_pct","is_over_budget","groups","total_groups","length","functions","traces","budgetData","Promise","all","resolve","totalRequests","reduce","sum","f","total_requests","totalErrors","error_count","summary","function_count","total_errors","error_rate","round","recent_traces","cost_budgets","s","replace"],"sources":["../../../src/server/handlers/clickhouse.ts"],"sourcesContent":["import type { SupabaseClient } from \"@supabase/supabase-js\";\nimport { getClickHouseClient } from \"../lib/clickhouse-client.js\";\n\n/**\n * ClickHouse observability handler — platform-level metrics via direct HTTP queries.\n * Replaces FDW RPCs with direct ClickHouse queries for lower latency.\n */\nexport async function handleClickHouse(\n  sb: SupabaseClient,\n  args: Record<string, unknown>,\n  storeId?: string,\n): Promise<{ success: boolean; data?: unknown; error?: string }> {\n  const sid = storeId as string;\n  const hoursBack = Math.max(1, Math.min(Number(args.hours_back) || 24, 720));\n  const limit = Math.max(1, Math.min(Number(args.limit) || 50, 1000));\n  const ch = getClickHouseClient();\n\n  if (!ch.isEnabled) {\n    return { success: false, error: \"ClickHouse is not configured\" };\n  }\n\n  const storeFilter = sid ? `AND store_id = '${esc(sid)}'` : \"\";\n\n  switch (args.action) {\n    // ---- traces: List recent traces ----\n    case \"traces\": {\n      const data = await ch.query<{\n        trace_id: string; root_service: string; root_operation: string;\n        duration: number; span_count: number; error_count: number;\n        started_at: string; status: string;\n      }>(`\n        SELECT\n          trace_id,\n          arrayElement(groupArrayIf(service_name, parent_span_id = '' OR parent_span_id IS NULL), 1) AS root_service,\n          arrayElement(groupArrayIf(operation_name, parent_span_id = '' OR parent_span_id IS NULL), 1) AS root_operation,\n          toInt32(dateDiff('millisecond', min(started_at), max(ended_at))) AS duration,\n          count() AS span_count,\n          countIf(status_code = 'ERROR') AS error_count,\n          min(started_at) AS started_at,\n          if(countIf(status_code = 'ERROR') > 0, 'error', 'ok') AS status\n        FROM ai_spans\n        WHERE 1=1 ${storeFilter}\n        GROUP BY trace_id\n        ORDER BY min(started_at) DESC\n        LIMIT ${limit}\n      `);\n      return { success: true, data };\n    }\n\n    // ---- trace_detail: Full trace waterfall ----\n    case \"trace_detail\": {\n      const traceId = args.trace_id as string;\n      if (!traceId) return { success: false, error: \"trace_id is required\" };\n      const spans = await ch.query<Record<string, unknown>>(`\n        SELECT\n          span_id, parent_span_id, trace_id, operation_name,\n          service_name, duration_ms AS duration,\n          started_at, ended_at,\n          if(status_code = 'ERROR', 'error', 'ok') AS status,\n          attributes, events\n        FROM ai_spans\n        WHERE trace_id = '${esc(traceId)}'\n        ORDER BY started_at ASC\n      `);\n      return { success: true, data: { trace_id: traceId, spans } };\n    }\n\n    // ---- function_health: Service health metrics ----\n    case \"function_health\": {\n      const data = await ch.query<Record<string, unknown>>(`\n        SELECT\n          service_name AS function_name,\n          sum(total_requests) AS total_reqs,\n          sum(error_count) AS total_errors,\n          sum(client_error_count) AS client_errors,\n          if(sum(total_requests) > 0, sum(error_count) / sum(total_requests), 0) AS error_rate,\n          if(sum(latency_count) > 0, sum(latency_sum_ms) / sum(latency_count), 0) AS avg_latency_ms,\n          max(latency_max_ms) AS p95_latency_ms,\n          min(latency_min_ms) AS min_latency_ms,\n          max(latency_max_ms) AS max_latency_ms,\n          max(bucket) AS last_request_at\n        FROM function_health\n        WHERE bucket >= now() - INTERVAL ${hoursBack} HOUR\n          ${storeFilter}\n        GROUP BY service_name\n      `);\n      return { success: true, data };\n    }\n\n    // ---- function_logs: Request logs ----\n    case \"function_logs\": {\n      const functionName = args.function_name as string;\n      if (!functionName) return { success: false, error: \"function_name is required\" };\n      const levelFilter = args.level ? `AND severity = '${esc(args.level as string)}'` : \"\";\n      const data = await ch.query<Record<string, unknown>>(`\n        SELECT\n          request_id, service_name AS function_name, http_status AS status,\n          duration_ms, http_method AS method, http_path AS path,\n          store_id, status_code = 'ERROR' AS has_error,\n          started_at AS first_seen, events AS lines\n        FROM ai_spans\n        WHERE service_name = '${esc(functionName)}'\n          ${storeFilter} ${levelFilter}\n          AND span_kind = 'SERVER'\n        ORDER BY started_at DESC\n        LIMIT ${limit}\n      `);\n      return { success: true, data };\n    }\n\n    // ---- cost_budgets: Budget utilization ----\n    case \"cost_budgets\": {\n      if (!sid) return { success: false, error: \"store_id is required for cost_budgets\" };\n      // Cost budgets require Postgres for ai_cost_budgets table + ClickHouse for spend\n      const { data: budgets, error: budgetErr } = await sb\n        .from(\"ai_cost_budgets\")\n        .select(\"agent_id, limit_usd, is_active, created_at\")\n        .eq(\"is_active\", true)\n        .eq(\"store_id\", sid);\n      if (budgetErr) return { success: false, error: budgetErr.message };\n\n      const agentIds = (budgets || []).map(b => `'${esc(b.agent_id)}'`).join(\",\");\n      const spendRows = agentIds\n        ? await ch.query<{ agent_id: string; total_cost_usd: number }>(`\n            SELECT agent_id, sum(total_cost_usd) AS total_cost_usd\n            FROM token_usage_hourly\n            WHERE agent_id IN (${agentIds})\n              AND store_id = '${esc(sid)}'\n            GROUP BY agent_id\n          `)\n        : [];\n\n      const spendMap = new Map(spendRows.map(r => [r.agent_id, r.total_cost_usd]));\n      const data = (budgets || []).map(b => {\n        const spend = spendMap.get(b.agent_id) || 0;\n        return {\n          agent_id: b.agent_id,\n          budget_amount: b.limit_usd,\n          current_spend: spend,\n          period_start: b.created_at,\n          period_end: new Date().toISOString(),\n          utilization_pct: b.limit_usd > 0 ? (spend / b.limit_usd) * 100 : 0,\n          is_over_budget: spend > b.limit_usd,\n        };\n      });\n      return { success: true, data };\n    }\n\n    // ---- error_groups: Error fingerprints grouped ----\n    case \"error_groups\": {\n      const data = await ch.query<{\n        fingerprint: string; error_type: string; message: string;\n        severity: string; service: string; count: number; last_seen: string;\n      }>(`\n        SELECT\n          fingerprint,\n          any(error_type) AS error_type,\n          substring(any(error_message), 1, 200) AS message,\n          any(severity) AS severity,\n          any(service_name) AS service,\n          count() AS count,\n          max(occurred_at) AS last_seen\n        FROM error_events\n        WHERE occurred_at >= now() - INTERVAL ${hoursBack} HOUR\n        GROUP BY fingerprint\n        ORDER BY count DESC\n        LIMIT ${limit}\n      `);\n      return { success: true, data: { groups: data, total_groups: data.length, hours_back: hoursBack } };\n    }\n\n    // ---- system_status: Combined overview ----\n    case \"system_status\": {\n      const [functions, traces, budgetData] = await Promise.all([\n        ch.query<Record<string, unknown>>(`\n          SELECT\n            service_name AS function_name,\n            sum(total_requests) AS total_reqs,\n            sum(error_count) AS total_errors,\n            if(sum(total_requests) > 0, sum(error_count) / sum(total_requests), 0) AS error_rate,\n            max(bucket) AS last_request_at\n          FROM function_health\n          WHERE bucket >= now() - INTERVAL ${Math.min(hoursBack, 1)} HOUR\n            ${storeFilter}\n          GROUP BY service_name\n        `),\n        ch.query<Record<string, unknown>>(`\n          SELECT\n            trace_id,\n            arrayElement(groupArrayIf(service_name, parent_span_id = '' OR parent_span_id IS NULL), 1) AS root_service,\n            arrayElement(groupArrayIf(operation_name, parent_span_id = '' OR parent_span_id IS NULL), 1) AS root_operation,\n            toInt32(dateDiff('millisecond', min(started_at), max(ended_at))) AS duration,\n            count() AS span_count,\n            countIf(status_code = 'ERROR') AS error_count,\n            min(started_at) AS started_at,\n            if(countIf(status_code = 'ERROR') > 0, 'error', 'ok') AS status\n          FROM ai_spans\n          WHERE 1=1 ${storeFilter}\n          GROUP BY trace_id\n          ORDER BY min(started_at) DESC\n          LIMIT 10\n        `),\n        sid\n          ? handleClickHouse(sb, { action: \"cost_budgets\" }, sid)\n          : Promise.resolve({ success: true, data: null }),\n      ]);\n\n      const totalRequests = functions.reduce((sum, f) => sum + ((f.total_requests as number) || 0), 0);\n      const totalErrors = functions.reduce((sum, f) => sum + ((f.error_count as number) || 0), 0);\n\n      return {\n        success: true,\n        data: {\n          summary: {\n            function_count: functions.length,\n            total_requests: totalRequests,\n            total_errors: totalErrors,\n            error_rate: totalRequests > 0 ? Math.round((totalErrors / totalRequests) * 10000) / 100 : 0,\n          },\n          functions,\n          recent_traces: traces,\n          cost_budgets: budgetData.data,\n          hours_back: hoursBack,\n        },\n      };\n    }\n\n    default:\n      return {\n        success: false,\n        error: `Unknown clickhouse action: ${args.action}. Available: traces, trace_detail, function_health, function_logs, cost_budgets, error_groups, system_status`,\n      };\n  }\n}\n\n/** Escape backslashes then single quotes for ClickHouse SQL */\nfunction esc(s: string): string {\n  return s.replace(/\\\\/g, \"\\\\\\\\\").replace(/'/g, \"\\\\'\");\n}\n"],"mappings":"AACA,SAASA,mBAAmB,QAAQ,6BAA6B;;AAEjE;AACA;AACA;AACA;AACA,OAAO,eAAeC,gBAAgBA,CACpCC,EAAkB,EAClBC,IAA6B,EAC7BC,OAAgB,EAC+C;EAC/D,MAAMC,GAAG,GAAGD,OAAiB;EAC7B,MAAME,SAAS,GAAGC,IAAI,CAACC,GAAG,CAAC,CAAC,EAAED,IAAI,CAACE,GAAG,CAACC,MAAM,CAACP,IAAI,CAACQ,UAAU,CAAC,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC;EAC3E,MAAMC,KAAK,GAAGL,IAAI,CAACC,GAAG,CAAC,CAAC,EAAED,IAAI,CAACE,GAAG,CAACC,MAAM,CAACP,IAAI,CAACS,KAAK,CAAC,IAAI,EAAE,EAAE,IAAI,CAAC,CAAC;EACnE,MAAMC,EAAE,GAAGb,mBAAmB,CAAC,CAAC;EAEhC,IAAI,CAACa,EAAE,CAACC,SAAS,EAAE;IACjB,OAAO;MAAEC,OAAO,EAAE,KAAK;MAAEC,KAAK,EAAE;IAA+B,CAAC;EAClE;EAEA,MAAMC,WAAW,GAAGZ,GAAG,GAAG,mBAAmBa,GAAG,CAACb,GAAG,CAAC,GAAG,GAAG,EAAE;EAE7D,QAAQF,IAAI,CAACgB,MAAM;IACjB;IACA,KAAK,QAAQ;MAAE;QACb,MAAMC,IAAI,GAAG,MAAMP,EAAE,CAACQ,KAAK,CAIxB;AACT;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,oBAAoBJ,WAAW;AAC/B;AACA;AACA,gBAAgBL,KAAK;AACrB,OAAO,CAAC;QACF,OAAO;UAAEG,OAAO,EAAE,IAAI;UAAEK;QAAK,CAAC;MAChC;;IAEA;IACA,KAAK,cAAc;MAAE;QACnB,MAAME,OAAO,GAAGnB,IAAI,CAACoB,QAAkB;QACvC,IAAI,CAACD,OAAO,EAAE,OAAO;UAAEP,OAAO,EAAE,KAAK;UAAEC,KAAK,EAAE;QAAuB,CAAC;QACtE,MAAMQ,KAAK,GAAG,MAAMX,EAAE,CAACQ,KAAK,CAA0B;AAC5D;AACA;AACA;AACA;AACA;AACA;AACA;AACA,4BAA4BH,GAAG,CAACI,OAAO,CAAC;AACxC;AACA,OAAO,CAAC;QACF,OAAO;UAAEP,OAAO,EAAE,IAAI;UAAEK,IAAI,EAAE;YAAEG,QAAQ,EAAED,OAAO;YAAEE;UAAM;QAAE,CAAC;MAC9D;;IAEA;IACA,KAAK,iBAAiB;MAAE;QACtB,MAAMJ,IAAI,GAAG,MAAMP,EAAE,CAACQ,KAAK,CAA0B;AAC3D;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,2CAA2Cf,SAAS;AACpD,YAAYW,WAAW;AACvB;AACA,OAAO,CAAC;QACF,OAAO;UAAEF,OAAO,EAAE,IAAI;UAAEK;QAAK,CAAC;MAChC;;IAEA;IACA,KAAK,eAAe;MAAE;QACpB,MAAMK,YAAY,GAAGtB,IAAI,CAACuB,aAAuB;QACjD,IAAI,CAACD,YAAY,EAAE,OAAO;UAAEV,OAAO,EAAE,KAAK;UAAEC,KAAK,EAAE;QAA4B,CAAC;QAChF,MAAMW,WAAW,GAAGxB,IAAI,CAACyB,KAAK,GAAG,mBAAmBV,GAAG,CAACf,IAAI,CAACyB,KAAe,CAAC,GAAG,GAAG,EAAE;QACrF,MAAMR,IAAI,GAAG,MAAMP,EAAE,CAACQ,KAAK,CAA0B;AAC3D;AACA;AACA;AACA;AACA;AACA;AACA,gCAAgCH,GAAG,CAACO,YAAY,CAAC;AACjD,YAAYR,WAAW,IAAIU,WAAW;AACtC;AACA;AACA,gBAAgBf,KAAK;AACrB,OAAO,CAAC;QACF,OAAO;UAAEG,OAAO,EAAE,IAAI;UAAEK;QAAK,CAAC;MAChC;;IAEA;IACA,KAAK,cAAc;MAAE;QACnB,IAAI,CAACf,GAAG,EAAE,OAAO;UAAEU,OAAO,EAAE,KAAK;UAAEC,KAAK,EAAE;QAAwC,CAAC;QACnF;QACA,MAAM;UAAEI,IAAI,EAAES,OAAO;UAAEb,KAAK,EAAEc;QAAU,CAAC,GAAG,MAAM5B,EAAE,CACjD6B,IAAI,CAAC,iBAAiB,CAAC,CACvBC,MAAM,CAAC,4CAA4C,CAAC,CACpDC,EAAE,CAAC,WAAW,EAAE,IAAI,CAAC,CACrBA,EAAE,CAAC,UAAU,EAAE5B,GAAG,CAAC;QACtB,IAAIyB,SAAS,EAAE,OAAO;UAAEf,OAAO,EAAE,KAAK;UAAEC,KAAK,EAAEc,SAAS,CAACI;QAAQ,CAAC;QAElE,MAAMC,QAAQ,GAAG,CAACN,OAAO,IAAI,EAAE,EAAEO,GAAG,CAACC,CAAC,IAAI,IAAInB,GAAG,CAACmB,CAAC,CAACC,QAAQ,CAAC,GAAG,CAAC,CAACC,IAAI,CAAC,GAAG,CAAC;QAC3E,MAAMC,SAAS,GAAGL,QAAQ,GACtB,MAAMtB,EAAE,CAACQ,KAAK,CAA+C;AACvE;AACA;AACA,iCAAiCc,QAAQ;AACzC,gCAAgCjB,GAAG,CAACb,GAAG,CAAC;AACxC;AACA,WAAW,CAAC,GACF,EAAE;QAEN,MAAMoC,QAAQ,GAAG,IAAIC,GAAG,CAACF,SAAS,CAACJ,GAAG,CAACO,CAAC,IAAI,CAACA,CAAC,CAACL,QAAQ,EAAEK,CAAC,CAACC,cAAc,CAAC,CAAC,CAAC;QAC5E,MAAMxB,IAAI,GAAG,CAACS,OAAO,IAAI,EAAE,EAAEO,GAAG,CAACC,CAAC,IAAI;UACpC,MAAMQ,KAAK,GAAGJ,QAAQ,CAACK,GAAG,CAACT,CAAC,CAACC,QAAQ,CAAC,IAAI,CAAC;UAC3C,OAAO;YACLA,QAAQ,EAAED,CAAC,CAACC,QAAQ;YACpBS,aAAa,EAAEV,CAAC,CAACW,SAAS;YAC1BC,aAAa,EAAEJ,KAAK;YACpBK,YAAY,EAAEb,CAAC,CAACc,UAAU;YAC1BC,UAAU,EAAE,IAAIC,IAAI,CAAC,CAAC,CAACC,WAAW,CAAC,CAAC;YACpCC,eAAe,EAAElB,CAAC,CAACW,SAAS,GAAG,CAAC,GAAIH,KAAK,GAAGR,CAAC,CAACW,SAAS,GAAI,GAAG,GAAG,CAAC;YAClEQ,cAAc,EAAEX,KAAK,GAAGR,CAAC,CAACW;UAC5B,CAAC;QACH,CAAC,CAAC;QACF,OAAO;UAAEjC,OAAO,EAAE,IAAI;UAAEK;QAAK,CAAC;MAChC;;IAEA;IACA,KAAK,cAAc;MAAE;QACnB,MAAMA,IAAI,GAAG,MAAMP,EAAE,CAACQ,KAAK,CAGxB;AACT;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,gDAAgDf,SAAS;AACzD;AACA;AACA,gBAAgBM,KAAK;AACrB,OAAO,CAAC;QACF,OAAO;UAAEG,OAAO,EAAE,IAAI;UAAEK,IAAI,EAAE;YAAEqC,MAAM,EAAErC,IAAI;YAAEsC,YAAY,EAAEtC,IAAI,CAACuC,MAAM;YAAEhD,UAAU,EAAEL;UAAU;QAAE,CAAC;MACpG;;IAEA;IACA,KAAK,eAAe;MAAE;QACpB,MAAM,CAACsD,SAAS,EAAEC,MAAM,EAAEC,UAAU,CAAC,GAAG,MAAMC,OAAO,CAACC,GAAG,CAAC,CACxDnD,EAAE,CAACQ,KAAK,CAA0B;AAC1C;AACA;AACA;AACA;AACA;AACA;AACA;AACA,6CAA6Cd,IAAI,CAACE,GAAG,CAACH,SAAS,EAAE,CAAC,CAAC;AACnE,cAAcW,WAAW;AACzB;AACA,SAAS,CAAC,EACFJ,EAAE,CAACQ,KAAK,CAA0B;AAC1C;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,sBAAsBJ,WAAW;AACjC;AACA;AACA;AACA,SAAS,CAAC,EACFZ,GAAG,GACCJ,gBAAgB,CAACC,EAAE,EAAE;UAAEiB,MAAM,EAAE;QAAe,CAAC,EAAEd,GAAG,CAAC,GACrD0D,OAAO,CAACE,OAAO,CAAC;UAAElD,OAAO,EAAE,IAAI;UAAEK,IAAI,EAAE;QAAK,CAAC,CAAC,CACnD,CAAC;QAEF,MAAM8C,aAAa,GAAGN,SAAS,CAACO,MAAM,CAAC,CAACC,GAAG,EAAEC,CAAC,KAAKD,GAAG,IAAKC,CAAC,CAACC,cAAc,IAAe,CAAC,CAAC,EAAE,CAAC,CAAC;QAChG,MAAMC,WAAW,GAAGX,SAAS,CAACO,MAAM,CAAC,CAACC,GAAG,EAAEC,CAAC,KAAKD,GAAG,IAAKC,CAAC,CAACG,WAAW,IAAe,CAAC,CAAC,EAAE,CAAC,CAAC;QAE3F,OAAO;UACLzD,OAAO,EAAE,IAAI;UACbK,IAAI,EAAE;YACJqD,OAAO,EAAE;cACPC,cAAc,EAAEd,SAAS,CAACD,MAAM;cAChCW,cAAc,EAAEJ,aAAa;cAC7BS,YAAY,EAAEJ,WAAW;cACzBK,UAAU,EAAEV,aAAa,GAAG,CAAC,GAAG3D,IAAI,CAACsE,KAAK,CAAEN,WAAW,GAAGL,aAAa,GAAI,KAAK,CAAC,GAAG,GAAG,GAAG;YAC5F,CAAC;YACDN,SAAS;YACTkB,aAAa,EAAEjB,MAAM;YACrBkB,YAAY,EAAEjB,UAAU,CAAC1C,IAAI;YAC7BT,UAAU,EAAEL;UACd;QACF,CAAC;MACH;IAEA;MACE,OAAO;QACLS,OAAO,EAAE,KAAK;QACdC,KAAK,EAAE,8BAA8Bb,IAAI,CAACgB,MAAM;MAClD,CAAC;EACL;AACF;;AAEA;AACA,SAASD,GAAGA,CAAC8D,CAAS,EAAU;EAC9B,OAAOA,CAAC,CAACC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAACA,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC;AACtD","ignoreList":[]}

package/dist/server/handlers/comms-email.js

@@ -181,9 +181,27 @@ export async function handleEmail(sb, args, storeId) {
             attachments: resolvedAttachments
           } : {})
         };
-        if (args.cc) payload.cc = args.cc;
-        if (args.bcc) payload.bcc = args.bcc;
-        if (args.reply_to) payload.reply_to = args.reply_to;
+        if (args.cc) {
+          if (/[\r\n]/.test(String(args.cc))) return {
+            success: false,
+            error: "cc contains invalid characters"
+          };
+          payload.cc = args.cc;
+        }
+        if (args.bcc) {
+          if (/[\r\n]/.test(String(args.bcc))) return {
+            success: false,
+            error: "bcc contains invalid characters"
+          };
+          payload.bcc = args.bcc;
+        }
+        if (args.reply_to) {
+          if (/[\r\n]/.test(String(args.reply_to))) return {
+            success: false,
+            error: "reply_to contains invalid characters"
+          };
+          payload.reply_to = args.reply_to;
+        }
         const resp = await fetch("https://api.resend.com/emails", {
           method: "POST",
           headers: {
@@ -235,7 +253,8 @@ export async function handleEmail(sb, args, storeId) {
         let textContent = tpl.text_content || "";
         let subjectLine = tpl.subject || "";
         for (const [key, val] of Object.entries(tData)) {
-          const re = new RegExp(`\\{\\{\\s*${key}\\s*\\}\\}`, "g");
+          const escapedKey = key.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
+          const re = new RegExp(`\\{\\{\\s*${escapedKey}\\s*\\}\\}`, "g");
           htmlContent = htmlContent.replace(re, val);
           textContent = textContent.replace(re, val);
           subjectLine = subjectLine.replace(re, val);
@@ -310,6 +329,39 @@ export async function handleEmail(sb, args, storeId) {
           success: false,
           error: "body (reply text) required"
         };
+
+        // CRLF injection checks
+        if (args.to && /[\r\n]/.test(String(args.to))) return {
+          success: false,
+          error: "Invalid recipient email address"
+        };
+        if (args.subject && /[\r\n]/.test(String(args.subject))) return {
+          success: false,
+          error: "Subject contains invalid characters"
+        };
+        if (args.from && /[\r\n]/.test(String(args.from))) return {
+          success: false,
+          error: "from contains invalid characters"
+        };
+        if (args.in_reply_to && /[\r\n]/.test(String(args.in_reply_to))) return {
+          success: false,
+          error: "in_reply_to contains invalid characters"
+        };
+
+        // Per-store email rate limit (100 emails/hour) — same as send action
+        const replyOneHourAgo = new Date(Date.now() - 3600_000).toISOString();
+        const {
+          count: replyRecentSends
+        } = await sb.from("email_sends").select("id", {
+          count: "exact",
+          head: true
+        }).eq("store_id", sid).gte("created_at", replyOneHourAgo);
+        if ((replyRecentSends ?? 0) >= 100) {
+          return {
+            success: false,
+            error: "Rate limit exceeded: maximum 100 emails per hour per store"
+          };
+        }
         const {
           data: store
         } = await sb.from("stores").select("resend_api_key").eq("id", sid).single();
@@ -337,13 +389,23 @@ export async function handleEmail(sb, args, storeId) {
             })
           });
           const result = await resp.json();
-          return resp.ok ? {
-            success: true,
-            data: result
-          } : {
+          if (!resp.ok) return {
             success: false,
             error: result.error || "Reply failed"
           };
+
+          // Track send for rate limiting
+          const replySubject = args.subject || `Re: Thread ${args.thread_id}`;
+          await sb.from("email_sends").insert({
+            store_id: sid,
+            to_email: args.to,
+            subject: replySubject,
+            resend_id: result.id
+          }).then(() => {}, () => {});
+          return {
+            success: true,
+            data: result
+          };
         } catch (err) {
           return {
             success: false,

package/dist/server/handlers/comms-email.js.map

@@ -1 +1 @@
-{"version":3,"file":"comms-email.js","names":["sanitizeFilterValue","groupBy","validateUrl","MAX_ATTACHMENT_BYTES","MAX_TOTAL_ATTACHMENT_BYTES","MAX_ATTACHMENT_COUNT","handleEmail","sb","args","storeId","success","error","sid","action","q","from","select","eq","order","ascending","limit","status","mailbox","priority","data","message","flattened","map","row","latest_message","rest","subject","from_email","thread_id","single","messages","thread","lines","msg","sort","a","b","Date","created_at","getTime","push","to_email","slice","body","body_text","length","join","oneHourAgo","now","toISOString","count","recentSends","head","gte","to","test","bodyHtml","body_html","bodyText","attachments","att","url","urlCheck","store","resend_api_key","resolvedAttachments","totalBytes","resp","fetch","ok","buf","Buffer","arrayBuffer","filename","content","toString","fromEmail","email","store_name","toLowerCase","replace","payload","html","text","cc","bcc","reply_to","method","headers","Authorization","JSON","stringify","result","json","insert","store_id","resend_id","id","then","templateSlug","template","tpl","tplErr","or","tData","template_data","htmlContent","html_content","textContent","text_content","subjectLine","key","val","Object","entries","re","RegExp","st","ilike","email_id","in_reply_to","err","updates","intent","ai_intent","ai_summary","update","stats","total","by_status","by_mailbox","by_priority","name","slug","category","description","preview_text","is_active","template_id","undefined","keys","deleted"],"sources":["../../../src/server/handlers/comms-email.ts"],"sourcesContent":["// comms-email.ts — Email handler (inbox, send, templates)\nimport type { SupabaseClient } from \"@supabase/supabase-js\";\nimport { sanitizeFilterValue, groupBy } from \"../lib/utils.js\";\nimport { validateUrl } from \"../lib/ssrf-guard.js\";\n\nconst MAX_ATTACHMENT_BYTES = 10 * 1024 * 1024; // 10MB per attachment\nconst MAX_TOTAL_ATTACHMENT_BYTES = 25 * 1024 * 1024; // 25MB total\nconst MAX_ATTACHMENT_COUNT = 10;\n\nexport async function handleEmail(sb: SupabaseClient, args: Record<string, unknown>, storeId?: string) {\n  if (!storeId) return { success: false, error: \"store_id required\" };\n  const sid = storeId as string;\n  switch (args.action) {\n    case \"inbox\": {\n      let q = sb.from(\"email_threads\").select(\"*, latest_message:email_inbox(subject, from_email, created_at)\")\n        .eq(\"store_id\", sid).order(\"updated_at\", { ascending: false }).limit(args.limit as number || 25);\n      if (args.status) q = q.eq(\"status\", args.status as string);\n      if (args.mailbox) q = q.eq(\"mailbox\", args.mailbox as string);\n      if (args.priority) q = q.eq(\"priority\", args.priority as string);\n      const { data, error } = await q;\n      if (error) return { success: false, error: error.message };\n      // Flatten latest_message join so subject/from appear as table columns\n      const flattened = (data || []).map((row: any) => {\n        const { latest_message, ...rest } = row;\n        return { ...rest, subject: latest_message?.subject || null, from_email: latest_message?.from_email || null };\n      });\n      return { success: true, data: flattened };\n    }\n    case \"inbox_get\": {\n      const { data, error } = await sb.from(\"email_threads\")\n        .select(\"*, messages:email_inbox(id, subject, from_email, to_email, body_text, created_at)\").eq(\"id\", args.thread_id as string).eq(\"store_id\", sid).single();\n      if (error) return { success: false, error: error.message };\n      // Pre-format so messages are visible (formatter handles sub-tables but body gets truncated)\n      const { messages, ...thread } = data as any;\n      const lines: string[] = [\n        `## Email Thread`,\n        `**Status**: ${thread.status || \"\\u2014\"} | **Mailbox**: ${thread.mailbox || \"\\u2014\"} | **Priority**: ${thread.priority || \"\\u2014\"}`,\n        \"\",\n      ];\n      for (const msg of (messages || []).sort((a: any, b: any) => new Date(a.created_at).getTime() - new Date(b.created_at).getTime())) {\n        lines.push(`### ${msg.from_email} \\u2192 ${msg.to_email || \"\\u2014\"} (${msg.created_at?.slice(0, 16) || \"\\u2014\"})`);\n        lines.push(`**Subject**: ${msg.subject || \"(no subject)\"}`);\n        const body = (msg.body_text || \"\").slice(0, 500);\n        lines.push(body + (msg.body_text?.length > 500 ? \"...\" : \"\"));\n        lines.push(\"\");\n      }\n      return { success: true, data: lines.join(\"\\n\") };\n    }\n    case \"send\": {\n      // P0 FIX: Per-store email rate limit (100 emails/hour)\n      const oneHourAgo = new Date(Date.now() - 3600_000).toISOString();\n      const { count: recentSends } = await sb.from(\"email_sends\")\n        .select(\"id\", { count: \"exact\", head: true })\n        .eq(\"store_id\", sid)\n        .gte(\"created_at\", oneHourAgo);\n      if ((recentSends ?? 0) >= 100) {\n        return { success: false, error: \"Rate limit exceeded: maximum 100 emails per hour per store\" };\n      }\n\n      const to = args.to as string;\n      if (!to) return { success: false, error: \"to (email address) is required\" };\n      // P0 FIX: Sanitize email recipient to prevent header injection\n      if (/[\\r\\n]/.test(to)) return { success: false, error: \"Invalid recipient email address\" };\n      const subject = (args.subject as string) || \"No Subject\";\n      // P0 FIX: Sanitize subject to prevent header injection\n      if (/[\\r\\n]/.test(subject)) return { success: false, error: \"Subject contains invalid characters\" };\n      const bodyHtml = (args.body_html as string) || \"\";\n      const bodyText = (args.body_text as string) || \"\";\n\n      // P0 FIX: Validate attachments — reject oversized or too-many attachments\n      const attachments = (args.attachments as { filename: string; url: string }[]) || [];\n      if (attachments.length > MAX_ATTACHMENT_COUNT) {\n        return { success: false, error: `Too many attachments (max ${MAX_ATTACHMENT_COUNT})` };\n      }\n      // Validate all attachment URLs are public (no SSRF into internal services)\n      for (const att of attachments) {\n        if (att.url) {\n          const urlCheck = await validateUrl(att.url);\n          if (urlCheck) return { success: false, error: `Invalid attachment URL \"${att.url}\": ${urlCheck}` };\n        }\n      }\n\n      // Fetch store Resend API key\n      const { data: store } = await sb.from(\"stores\")\n        .select(\"resend_api_key, store_name, email\")\n        .eq(\"id\", sid).single();\n      if (!store?.resend_api_key) return { success: false, error: \"Store has no Resend API key configured\" };\n\n      // Download and validate attachment sizes (best-effort — streams through Resend)\n      const resolvedAttachments: Array<{ filename: string; content: string }> = [];\n      let totalBytes = 0;\n      for (const att of attachments) {\n        if (att.url) {\n          const resp = await fetch(att.url);\n          if (!resp.ok) return { success: false, error: `Failed to fetch attachment: ${att.url}` };\n          const buf = Buffer.from(await resp.arrayBuffer());\n          if (buf.length > MAX_ATTACHMENT_BYTES) {\n            return { success: false, error: `Attachment \"${att.filename}\" exceeds ${MAX_ATTACHMENT_BYTES / 1024 / 1024}MB limit` };\n          }\n          totalBytes += buf.length;\n          if (totalBytes > MAX_TOTAL_ATTACHMENT_BYTES) {\n            return { success: false, error: `Total attachment size exceeds ${MAX_TOTAL_ATTACHMENT_BYTES / 1024 / 1024}MB limit` };\n          }\n          resolvedAttachments.push({ filename: att.filename || \"attachment\", content: buf.toString(\"base64\") });\n        }\n      }\n\n      const fromEmail = (args.from as string) || store.email || `${store.store_name?.toLowerCase().replace(/\\s+/g, \"\")}@mail.floradistro.com`;\n      const payload: Record<string, unknown> = {\n        from: fromEmail, to, subject,\n        ...(bodyHtml ? { html: bodyHtml } : {}),\n        ...(bodyText ? { text: bodyText } : {}),\n        ...(resolvedAttachments.length ? { attachments: resolvedAttachments } : {}),\n      };\n      if (args.cc) payload.cc = args.cc;\n      if (args.bcc) payload.bcc = args.bcc;\n      if (args.reply_to) payload.reply_to = args.reply_to;\n\n      const resp = await fetch(\"https://api.resend.com/emails\", {\n        method: \"POST\",\n        headers: { Authorization: `Bearer ${store.resend_api_key}`, \"Content-Type\": \"application/json\" },\n        body: JSON.stringify(payload),\n      });\n      const result = await resp.json();\n      if (!resp.ok) return { success: false, error: `Email send failed: ${result.message || JSON.stringify(result)}` };\n\n      // Track send for rate limiting\n      await sb.from(\"email_sends\").insert({ store_id: sid, to_email: to, subject, resend_id: result.id }).then(() => {}, () => {});\n\n      return { success: true, data: { id: result.id, to, subject, status: \"sent\" } };\n    }\n    case \"send_template\": {\n      const templateSlug = args.template as string;\n      if (!templateSlug) return { success: false, error: \"template slug required\" };\n\n      const { data: tpl, error: tplErr } = await sb.from(\"email_templates\")\n        .select(\"*\")\n        .eq(\"slug\", templateSlug)\n        .or(`store_id.eq.${sid},store_id.is.null`)\n        .eq(\"is_active\", true)\n        .limit(1)\n        .single();\n      if (tplErr || !tpl) return { success: false, error: `Template \"${templateSlug}\" not found` };\n\n      const tData = (args.template_data as Record<string, string>) || {};\n      let htmlContent = tpl.html_content as string || \"\";\n      let textContent = tpl.text_content as string || \"\";\n      let subjectLine = tpl.subject as string || \"\";\n      for (const [key, val] of Object.entries(tData)) {\n        const re = new RegExp(`\\\\{\\\\{\\\\s*${key}\\\\s*\\\\}\\\\}`, \"g\");\n        htmlContent = htmlContent.replace(re, val);\n        textContent = textContent.replace(re, val);\n        subjectLine = subjectLine.replace(re, val);\n      }\n\n      return handleEmail(sb, {\n        action: \"send\",\n        to: args.to,\n        subject: subjectLine,\n        body_html: htmlContent,\n        body_text: textContent,\n        from: args.from,\n        cc: args.cc,\n        bcc: args.bcc,\n      }, storeId);\n    }\n    case \"list\": {\n      let q = sb.from(\"email_sends\")\n        .select(\"id, to_email, subject, status, resend_id, created_at\")\n        .eq(\"store_id\", sid).order(\"created_at\", { ascending: false });\n      if (args.to) { const st = sanitizeFilterValue(args.to as string); q = q.ilike(\"to_email\", `%${st}%`); }\n      const { data, error } = await q.limit(args.limit as number || 25);\n      return error ? { success: false, error: error.message } : { success: true, data };\n    }\n    case \"get\": {\n      const { data, error } = await sb.from(\"email_sends\")\n        .select(\"*\").eq(\"id\", args.email_id as string).eq(\"store_id\", sid).single();\n      return error ? { success: false, error: error.message } : { success: true, data };\n    }\n    case \"templates\": {\n      const { data, error } = await sb.from(\"email_templates\")\n        .select(\"id, name, slug, subject, category, description, preview_text, is_active, created_at\")\n        .or(`store_id.eq.${sid},store_id.is.null`)\n        .eq(\"is_active\", true)\n        .order(\"name\");\n      return error ? { success: false, error: error.message } : { success: true, data };\n    }\n    case \"inbox_reply\": {\n      if (!args.thread_id) return { success: false, error: \"thread_id required\" };\n      if (!args.body) return { success: false, error: \"body (reply text) required\" };\n      const { data: store } = await sb.from(\"stores\")\n        .select(\"resend_api_key\").eq(\"id\", sid).single();\n      if (!store?.resend_api_key) return { success: false, error: \"Store has no Resend API key\" };\n      try {\n        const resp = await fetch(\"https://api.resend.com/emails\", {\n          method: \"POST\",\n          headers: { Authorization: `Bearer ${store.resend_api_key}`, \"Content-Type\": \"application/json\" },\n          body: JSON.stringify({\n            from: args.from || `support@mail.floradistro.com`,\n            to: args.to as string,\n            subject: args.subject || `Re: Thread ${args.thread_id}`,\n            html: args.body as string,\n            ...(args.in_reply_to ? { headers: { \"In-Reply-To\": args.in_reply_to } } : {}),\n          }),\n        });\n        const result = await resp.json();\n        return resp.ok ? { success: true, data: result } : { success: false, error: result.error || \"Reply failed\" };\n      } catch (err) {\n        return { success: false, error: `Reply failed: ${err}` };\n      }\n    }\n    case \"inbox_update\": {\n      const updates: Record<string, unknown> = {};\n      if (args.status) updates.status = args.status;\n      if (args.priority) updates.priority = args.priority;\n      if (args.intent) updates.ai_intent = args.intent;\n      if (args.ai_summary) updates.ai_summary = args.ai_summary;\n      const { data, error } = await sb.from(\"email_threads\")\n        .update(updates).eq(\"id\", args.thread_id as string).eq(\"store_id\", sid).select().single();\n      return error ? { success: false, error: error.message } : { success: true, data };\n    }\n    case \"inbox_stats\": {\n      const { data, error } = await sb.from(\"email_threads\")\n        .select(\"status, mailbox, priority\").eq(\"store_id\", sid).limit(1000);\n      if (error) return { success: false, error: error.message };\n      const stats = {\n        total: data.length,\n        by_status: groupBy(data, \"status\"),\n        by_mailbox: groupBy(data, \"mailbox\"),\n        by_priority: groupBy(data, \"priority\")\n      };\n      return { success: true, data: stats };\n    }\n    case \"create_template\": {\n      if (!args.name) return { success: false, error: \"name is required\" };\n      if (!args.subject) return { success: false, error: \"subject is required\" };\n      const slug = (args.slug as string) || (args.name as string).toLowerCase().replace(/[^a-z0-9]+/g, \"-\").replace(/^-|-$/g, \"\");\n      const { data, error } = await sb.from(\"email_templates\").insert({\n        store_id: sid,\n        name: args.name as string,\n        slug,\n        subject: args.subject as string,\n        category: (args.category as string) || \"general\",\n        description: (args.description as string) || null,\n        html_content: (args.html_content as string) || null,\n        preview_text: (args.preview_text as string) || null,\n        text_content: (args.text_content as string) || null,\n        is_active: true,\n      }).select(\"id, name, slug, subject, category, created_at\").single();\n      if (error) return { success: false, error: error.message };\n      return { success: true, data };\n    }\n    case \"update_template\": {\n      if (!args.template_id) return { success: false, error: \"template_id is required\" };\n      const updates: Record<string, unknown> = {};\n      if (args.name !== undefined) updates.name = args.name;\n      if (args.slug !== undefined) updates.slug = args.slug;\n      if (args.subject !== undefined) updates.subject = args.subject;\n      if (args.category !== undefined) updates.category = args.category;\n      if (args.description !== undefined) updates.description = args.description;\n      if (args.html_content !== undefined) updates.html_content = args.html_content;\n      if (args.preview_text !== undefined) updates.preview_text = args.preview_text;\n      if (args.text_content !== undefined) updates.text_content = args.text_content;\n      if (Object.keys(updates).length === 0) return { success: false, error: \"No fields to update\" };\n      const { data, error } = await sb.from(\"email_templates\")\n        .update(updates).eq(\"id\", args.template_id as string).eq(\"store_id\", sid)\n        .select(\"id, name, slug, subject, category, updated_at\").single();\n      if (error) return { success: false, error: error.message };\n      return { success: true, data };\n    }\n    case \"delete_template\": {\n      if (!args.template_id) return { success: false, error: \"template_id is required\" };\n      const { data, error } = await sb.from(\"email_templates\")\n        .update({ is_active: false }).eq(\"id\", args.template_id as string).eq(\"store_id\", sid)\n        .select(\"id, name\").single();\n      if (error) return { success: false, error: error.message };\n      return { success: true, data: { ...data, deleted: true } };\n    }\n    default:\n      return { success: false, error: `Unknown email action: ${args.action}. Valid: send, send_template, list, get, templates, inbox, inbox_get, inbox_reply, inbox_update, inbox_stats, create_template, update_template, delete_template` };\n  }\n}\n"],"mappings":"AAAA;;AAEA,SAASA,mBAAmB,EAAEC,OAAO,QAAQ,iBAAiB;AAC9D,SAASC,WAAW,QAAQ,sBAAsB;AAElD,MAAMC,oBAAoB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC;AAC/C,MAAMC,0BAA0B,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC;AACrD,MAAMC,oBAAoB,GAAG,EAAE;AAE/B,OAAO,eAAeC,WAAWA,CAACC,EAAkB,EAAEC,IAA6B,EAAEC,OAAgB,EAAE;EACrG,IAAI,CAACA,OAAO,EAAE,OAAO;IAAEC,OAAO,EAAE,KAAK;IAAEC,KAAK,EAAE;EAAoB,CAAC;EACnE,MAAMC,GAAG,GAAGH,OAAiB;EAC7B,QAAQD,IAAI,CAACK,MAAM;IACjB,KAAK,OAAO;MAAE;QACZ,IAAIC,CAAC,GAAGP,EAAE,CAACQ,IAAI,CAAC,eAAe,CAAC,CAACC,MAAM,CAAC,gEAAgE,CAAC,CACtGC,EAAE,CAAC,UAAU,EAAEL,GAAG,CAAC,CAACM,KAAK,CAAC,YAAY,EAAE;UAAEC,SAAS,EAAE;QAAM,CAAC,CAAC,CAACC,KAAK,CAACZ,IAAI,CAACY,KAAK,IAAc,EAAE,CAAC;QAClG,IAAIZ,IAAI,CAACa,MAAM,EAAEP,CAAC,GAAGA,CAAC,CAACG,EAAE,CAAC,QAAQ,EAAET,IAAI,CAACa,MAAgB,CAAC;QAC1D,IAAIb,IAAI,CAACc,OAAO,EAAER,CAAC,GAAGA,CAAC,CAACG,EAAE,CAAC,SAAS,EAAET,IAAI,CAACc,OAAiB,CAAC;QAC7D,IAAId,IAAI,CAACe,QAAQ,EAAET,CAAC,GAAGA,CAAC,CAACG,EAAE,CAAC,UAAU,EAAET,IAAI,CAACe,QAAkB,CAAC;QAChE,MAAM;UAAEC,IAAI;UAAEb;QAAM,CAAC,GAAG,MAAMG,CAAC;QAC/B,IAAIH,KAAK,EAAE,OAAO;UAAED,OAAO,EAAE,KAAK;UAAEC,KAAK,EAAEA,KAAK,CAACc;QAAQ,CAAC;QAC1D;QACA,MAAMC,SAAS,GAAG,CAACF,IAAI,IAAI,EAAE,EAAEG,GAAG,CAAEC,GAAQ,IAAK;UAC/C,MAAM;YAAEC,cAAc;YAAE,GAAGC;UAAK,CAAC,GAAGF,GAAG;UACvC,OAAO;YAAE,GAAGE,IAAI;YAAEC,OAAO,EAAEF,cAAc,EAAEE,OAAO,IAAI,IAAI;YAAEC,UAAU,EAAEH,cAAc,EAAEG,UAAU,IAAI;UAAK,CAAC;QAC9G,CAAC,CAAC;QACF,OAAO;UAAEtB,OAAO,EAAE,IAAI;UAAEc,IAAI,EAAEE;QAAU,CAAC;MAC3C;IACA,KAAK,WAAW;MAAE;QAChB,MAAM;UAAEF,IAAI;UAAEb;QAAM,CAAC,GAAG,MAAMJ,EAAE,CAACQ,IAAI,CAAC,eAAe,CAAC,CACnDC,MAAM,CAAC,mFAAmF,CAAC,CAACC,EAAE,CAAC,IAAI,EAAET,IAAI,CAACyB,SAAmB,CAAC,CAAChB,EAAE,CAAC,UAAU,EAAEL,GAAG,CAAC,CAACsB,MAAM,CAAC,CAAC;QAC9J,IAAIvB,KAAK,EAAE,OAAO;UAAED,OAAO,EAAE,KAAK;UAAEC,KAAK,EAAEA,KAAK,CAACc;QAAQ,CAAC;QAC1D;QACA,MAAM;UAAEU,QAAQ;UAAE,GAAGC;QAAO,CAAC,GAAGZ,IAAW;QAC3C,MAAMa,KAAe,GAAG,CACtB,iBAAiB,EACjB,eAAeD,MAAM,CAACf,MAAM,IAAI,QAAQ,mBAAmBe,MAAM,CAACd,OAAO,IAAI,QAAQ,oBAAoBc,MAAM,CAACb,QAAQ,IAAI,QAAQ,EAAE,EACtI,EAAE,CACH;QACD,KAAK,MAAMe,GAAG,IAAI,CAACH,QAAQ,IAAI,EAAE,EAAEI,IAAI,CAAC,CAACC,CAAM,EAAEC,CAAM,KAAK,IAAIC,IAAI,CAACF,CAAC,CAACG,UAAU,CAAC,CAACC,OAAO,CAAC,CAAC,GAAG,IAAIF,IAAI,CAACD,CAAC,CAACE,UAAU,CAAC,CAACC,OAAO,CAAC,CAAC,CAAC,EAAE;UAChIP,KAAK,CAACQ,IAAI,CAAC,OAAOP,GAAG,CAACN,UAAU,WAAWM,GAAG,CAACQ,QAAQ,IAAI,QAAQ,KAAKR,GAAG,CAACK,UAAU,EAAEI,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,QAAQ,GAAG,CAAC;UACpHV,KAAK,CAACQ,IAAI,CAAC,gBAAgBP,GAAG,CAACP,OAAO,IAAI,cAAc,EAAE,CAAC;UAC3D,MAAMiB,IAAI,GAAG,CAACV,GAAG,CAACW,SAAS,IAAI,EAAE,EAAEF,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;UAChDV,KAAK,CAACQ,IAAI,CAACG,IAAI,IAAIV,GAAG,CAACW,SAAS,EAAEC,MAAM,GAAG,GAAG,GAAG,KAAK,GAAG,EAAE,CAAC,CAAC;UAC7Db,KAAK,CAACQ,IAAI,CAAC,EAAE,CAAC;QAChB;QACA,OAAO;UAAEnC,OAAO,EAAE,IAAI;UAAEc,IAAI,EAAEa,KAAK,CAACc,IAAI,CAAC,IAAI;QAAE,CAAC;MAClD;IACA,KAAK,MAAM;MAAE;QACX;QACA,MAAMC,UAAU,GAAG,IAAIV,IAAI,CAACA,IAAI,CAACW,GAAG,CAAC,CAAC,GAAG,QAAQ,CAAC,CAACC,WAAW,CAAC,CAAC;QAChE,MAAM;UAAEC,KAAK,EAAEC;QAAY,CAAC,GAAG,MAAMjD,EAAE,CAACQ,IAAI,CAAC,aAAa,CAAC,CACxDC,MAAM,CAAC,IAAI,EAAE;UAAEuC,KAAK,EAAE,OAAO;UAAEE,IAAI,EAAE;QAAK,CAAC,CAAC,CAC5CxC,EAAE,CAAC,UAAU,EAAEL,GAAG,CAAC,CACnB8C,GAAG,CAAC,YAAY,EAAEN,UAAU,CAAC;QAChC,IAAI,CAACI,WAAW,IAAI,CAAC,KAAK,GAAG,EAAE;UAC7B,OAAO;YAAE9C,OAAO,EAAE,KAAK;YAAEC,KAAK,EAAE;UAA6D,CAAC;QAChG;QAEA,MAAMgD,EAAE,GAAGnD,IAAI,CAACmD,EAAY;QAC5B,IAAI,CAACA,EAAE,EAAE,OAAO;UAAEjD,OAAO,EAAE,KAAK;UAAEC,KAAK,EAAE;QAAiC,CAAC;QAC3E;QACA,IAAI,QAAQ,CAACiD,IAAI,CAACD,EAAE,CAAC,EAAE,OAAO;UAAEjD,OAAO,EAAE,KAAK;UAAEC,KAAK,EAAE;QAAkC,CAAC;QAC1F,MAAMoB,OAAO,GAAIvB,IAAI,CAACuB,OAAO,IAAe,YAAY;QACxD;QACA,IAAI,QAAQ,CAAC6B,IAAI,CAAC7B,OAAO,CAAC,EAAE,OAAO;UAAErB,OAAO,EAAE,KAAK;UAAEC,KAAK,EAAE;QAAsC,CAAC;QACnG,MAAMkD,QAAQ,GAAIrD,IAAI,CAACsD,SAAS,IAAe,EAAE;QACjD,MAAMC,QAAQ,GAAIvD,IAAI,CAACyC,SAAS,IAAe,EAAE;;QAEjD;QACA,MAAMe,WAAW,GAAIxD,IAAI,CAACwD,WAAW,IAA4C,EAAE;QACnF,IAAIA,WAAW,CAACd,MAAM,GAAG7C,oBAAoB,EAAE;UAC7C,OAAO;YAAEK,OAAO,EAAE,KAAK;YAAEC,KAAK,EAAE,6BAA6BN,oBAAoB;UAAI,CAAC;QACxF;QACA;QACA,KAAK,MAAM4D,GAAG,IAAID,WAAW,EAAE;UAC7B,IAAIC,GAAG,CAACC,GAAG,EAAE;YACX,MAAMC,QAAQ,GAAG,MAAMjE,WAAW,CAAC+D,GAAG,CAACC,GAAG,CAAC;YAC3C,IAAIC,QAAQ,EAAE,OAAO;cAAEzD,OAAO,EAAE,KAAK;cAAEC,KAAK,EAAE,2BAA2BsD,GAAG,CAACC,GAAG,MAAMC,QAAQ;YAAG,CAAC;UACpG;QACF;;QAEA;QACA,MAAM;UAAE3C,IAAI,EAAE4C;QAAM,CAAC,GAAG,MAAM7D,EAAE,CAACQ,IAAI,CAAC,QAAQ,CAAC,CAC5CC,MAAM,CAAC,mCAAmC,CAAC,CAC3CC,EAAE,CAAC,IAAI,EAAEL,GAAG,CAAC,CAACsB,MAAM,CAAC,CAAC;QACzB,IAAI,CAACkC,KAAK,EAAEC,cAAc,EAAE,OAAO;UAAE3D,OAAO,EAAE,KAAK;UAAEC,KAAK,EAAE;QAAyC,CAAC;;QAEtG;QACA,MAAM2D,mBAAiE,GAAG,EAAE;QAC5E,IAAIC,UAAU,GAAG,CAAC;QAClB,KAAK,MAAMN,GAAG,IAAID,WAAW,EAAE;UAC7B,IAAIC,GAAG,CAACC,GAAG,EAAE;YACX,MAAMM,IAAI,GAAG,MAAMC,KAAK,CAACR,GAAG,CAACC,GAAG,CAAC;YACjC,IAAI,CAACM,IAAI,CAACE,EAAE,EAAE,OAAO;cAAEhE,OAAO,EAAE,KAAK;cAAEC,KAAK,EAAE,+BAA+BsD,GAAG,CAACC,GAAG;YAAG,CAAC;YACxF,MAAMS,GAAG,GAAGC,MAAM,CAAC7D,IAAI,CAAC,MAAMyD,IAAI,CAACK,WAAW,CAAC,CAAC,CAAC;YACjD,IAAIF,GAAG,CAACzB,MAAM,GAAG/C,oBAAoB,EAAE;cACrC,OAAO;gBAAEO,OAAO,EAAE,KAAK;gBAAEC,KAAK,EAAE,eAAesD,GAAG,CAACa,QAAQ,aAAa3E,oBAAoB,GAAG,IAAI,GAAG,IAAI;cAAW,CAAC;YACxH;YACAoE,UAAU,IAAII,GAAG,CAACzB,MAAM;YACxB,IAAIqB,UAAU,GAAGnE,0BAA0B,EAAE;cAC3C,OAAO;gBAAEM,OAAO,EAAE,KAAK;gBAAEC,KAAK,EAAE,iCAAiCP,0BAA0B,GAAG,IAAI,GAAG,IAAI;cAAW,CAAC;YACvH;YACAkE,mBAAmB,CAACzB,IAAI,CAAC;cAAEiC,QAAQ,EAAEb,GAAG,CAACa,QAAQ,IAAI,YAAY;cAAEC,OAAO,EAAEJ,GAAG,CAACK,QAAQ,CAAC,QAAQ;YAAE,CAAC,CAAC;UACvG;QACF;QAEA,MAAMC,SAAS,GAAIzE,IAAI,CAACO,IAAI,IAAeqD,KAAK,CAACc,KAAK,IAAI,GAAGd,KAAK,CAACe,UAAU,EAAEC,WAAW,CAAC,CAAC,CAACC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,uBAAuB;QACvI,MAAMC,OAAgC,GAAG;UACvCvE,IAAI,EAAEkE,SAAS;UAAEtB,EAAE;UAAE5B,OAAO;UAC5B,IAAI8B,QAAQ,GAAG;YAAE0B,IAAI,EAAE1B;UAAS,CAAC,GAAG,CAAC,CAAC,CAAC;UACvC,IAAIE,QAAQ,GAAG;YAAEyB,IAAI,EAAEzB;UAAS,CAAC,GAAG,CAAC,CAAC,CAAC;UACvC,IAAIO,mBAAmB,CAACpB,MAAM,GAAG;YAAEc,WAAW,EAAEM;UAAoB,CAAC,GAAG,CAAC,CAAC;QAC5E,CAAC;QACD,IAAI9D,IAAI,CAACiF,EAAE,EAAEH,OAAO,CAACG,EAAE,GAAGjF,IAAI,CAACiF,EAAE;QACjC,IAAIjF,IAAI,CAACkF,GAAG,EAAEJ,OAAO,CAACI,GAAG,GAAGlF,IAAI,CAACkF,GAAG;QACpC,IAAIlF,IAAI,CAACmF,QAAQ,EAAEL,OAAO,CAACK,QAAQ,GAAGnF,IAAI,CAACmF,QAAQ;QAEnD,MAAMnB,IAAI,GAAG,MAAMC,KAAK,CAAC,+BAA+B,EAAE;UACxDmB,MAAM,EAAE,MAAM;UACdC,OAAO,EAAE;YAAEC,aAAa,EAAE,UAAU1B,KAAK,CAACC,cAAc,EAAE;YAAE,cAAc,EAAE;UAAmB,CAAC;UAChGrB,IAAI,EAAE+C,IAAI,CAACC,SAAS,CAACV,OAAO;QAC9B,CAAC,CAAC;QACF,MAAMW,MAAM,GAAG,MAAMzB,IAAI,CAAC0B,IAAI,CAAC,CAAC;QAChC,IAAI,CAAC1B,IAAI,CAACE,EAAE,EAAE,OAAO;UAAEhE,OAAO,EAAE,KAAK;UAAEC,KAAK,EAAE,sBAAsBsF,MAAM,CAACxE,OAAO,IAAIsE,IAAI,CAACC,SAAS,CAACC,MAAM,CAAC;QAAG,CAAC;;QAEhH;QACA,MAAM1F,EAAE,CAACQ,IAAI,CAAC,aAAa,CAAC,CAACoF,MAAM,CAAC;UAAEC,QAAQ,EAAExF,GAAG;UAAEkC,QAAQ,EAAEa,EAAE;UAAE5B,OAAO;UAAEsE,SAAS,EAAEJ,MAAM,CAACK;QAAG,CAAC,CAAC,CAACC,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;QAE5H,OAAO;UAAE7F,OAAO,EAAE,IAAI;UAAEc,IAAI,EAAE;YAAE8E,EAAE,EAAEL,MAAM,CAACK,EAAE;YAAE3C,EAAE;YAAE5B,OAAO;YAAEV,MAAM,EAAE;UAAO;QAAE,CAAC;MAChF;IACA,KAAK,eAAe;MAAE;QACpB,MAAMmF,YAAY,GAAGhG,IAAI,CAACiG,QAAkB;QAC5C,IAAI,CAACD,YAAY,EAAE,OAAO;UAAE9F,OAAO,EAAE,KAAK;UAAEC,KAAK,EAAE;QAAyB,CAAC;QAE7E,MAAM;UAAEa,IAAI,EAAEkF,GAAG;UAAE/F,KAAK,EAAEgG;QAAO,CAAC,GAAG,MAAMpG,EAAE,CAACQ,IAAI,CAAC,iBAAiB,CAAC,CAClEC,MAAM,CAAC,GAAG,CAAC,CACXC,EAAE,CAAC,MAAM,EAAEuF,YAAY,CAAC,CACxBI,EAAE,CAAC,eAAehG,GAAG,mBAAmB,CAAC,CACzCK,EAAE,CAAC,WAAW,EAAE,IAAI,CAAC,CACrBG,KAAK,CAAC,CAAC,CAAC,CACRc,MAAM,CAAC,CAAC;QACX,IAAIyE,MAAM,IAAI,CAACD,GAAG,EAAE,OAAO;UAAEhG,OAAO,EAAE,KAAK;UAAEC,KAAK,EAAE,aAAa6F,YAAY;QAAc,CAAC;QAE5F,MAAMK,KAAK,GAAIrG,IAAI,CAACsG,aAAa,IAA+B,CAAC,CAAC;QAClE,IAAIC,WAAW,GAAGL,GAAG,CAACM,YAAY,IAAc,EAAE;QAClD,IAAIC,WAAW,GAAGP,GAAG,CAACQ,YAAY,IAAc,EAAE;QAClD,IAAIC,WAAW,GAAGT,GAAG,CAAC3E,OAAO,IAAc,EAAE;QAC7C,KAAK,MAAM,CAACqF,GAAG,EAAEC,GAAG,CAAC,IAAIC,MAAM,CAACC,OAAO,CAACV,KAAK,CAAC,EAAE;UAC9C,MAAMW,EAAE,GAAG,IAAIC,MAAM,CAAC,aAAaL,GAAG,YAAY,EAAE,GAAG,CAAC;UACxDL,WAAW,GAAGA,WAAW,CAAC1B,OAAO,CAACmC,EAAE,EAAEH,GAAG,CAAC;UAC1CJ,WAAW,GAAGA,WAAW,CAAC5B,OAAO,CAACmC,EAAE,EAAEH,GAAG,CAAC;UAC1CF,WAAW,GAAGA,WAAW,CAAC9B,OAAO,CAACmC,EAAE,EAAEH,GAAG,CAAC;QAC5C;QAEA,OAAO/G,WAAW,CAACC,EAAE,EAAE;UACrBM,MAAM,EAAE,MAAM;UACd8C,EAAE,EAAEnD,IAAI,CAACmD,EAAE;UACX5B,OAAO,EAAEoF,WAAW;UACpBrD,SAAS,EAAEiD,WAAW;UACtB9D,SAAS,EAAEgE,WAAW;UACtBlG,IAAI,EAAEP,IAAI,CAACO,IAAI;UACf0E,EAAE,EAAEjF,IAAI,CAACiF,EAAE;UACXC,GAAG,EAAElF,IAAI,CAACkF;QACZ,CAAC,EAAEjF,OAAO,CAAC;MACb;IACA,KAAK,MAAM;MAAE;QACX,IAAIK,CAAC,GAAGP,EAAE,CAACQ,IAAI,CAAC,aAAa,CAAC,CAC3BC,MAAM,CAAC,sDAAsD,CAAC,CAC9DC,EAAE,CAAC,UAAU,EAAEL,GAAG,CAAC,CAACM,KAAK,CAAC,YAAY,EAAE;UAAEC,SAAS,EAAE;QAAM,CAAC,CAAC;QAChE,IAAIX,IAAI,CAACmD,EAAE,EAAE;UAAE,MAAM+D,EAAE,GAAG1H,mBAAmB,CAACQ,IAAI,CAACmD,EAAY,CAAC;UAAE7C,CAAC,GAAGA,CAAC,CAAC6G,KAAK,CAAC,UAAU,EAAE,IAAID,EAAE,GAAG,CAAC;QAAE;QACtG,MAAM;UAAElG,IAAI;UAAEb;QAAM,CAAC,GAAG,MAAMG,CAAC,CAACM,KAAK,CAACZ,IAAI,CAACY,KAAK,IAAc,EAAE,CAAC;QACjE,OAAOT,KAAK,GAAG;UAAED,OAAO,EAAE,KAAK;UAAEC,KAAK,EAAEA,KAAK,CAACc;QAAQ,CAAC,GAAG;UAAEf,OAAO,EAAE,IAAI;UAAEc;QAAK,CAAC;MACnF;IACA,KAAK,KAAK;MAAE;QACV,MAAM;UAAEA,IAAI;UAAEb;QAAM,CAAC,GAAG,MAAMJ,EAAE,CAACQ,IAAI,CAAC,aAAa,CAAC,CACjDC,MAAM,CAAC,GAAG,CAAC,CAACC,EAAE,CAAC,IAAI,EAAET,IAAI,CAACoH,QAAkB,CAAC,CAAC3G,EAAE,CAAC,UAAU,EAAEL,GAAG,CAAC,CAACsB,MAAM,CAAC,CAAC;QAC7E,OAAOvB,KAAK,GAAG;UAAED,OAAO,EAAE,KAAK;UAAEC,KAAK,EAAEA,KAAK,CAACc;QAAQ,CAAC,GAAG;UAAEf,OAAO,EAAE,IAAI;UAAEc;QAAK,CAAC;MACnF;IACA,KAAK,WAAW;MAAE;QAChB,MAAM;UAAEA,IAAI;UAAEb;QAAM,CAAC,GAAG,MAAMJ,EAAE,CAACQ,IAAI,CAAC,iBAAiB,CAAC,CACrDC,MAAM,CAAC,qFAAqF,CAAC,CAC7F4F,EAAE,CAAC,eAAehG,GAAG,mBAAmB,CAAC,CACzCK,EAAE,CAAC,WAAW,EAAE,IAAI,CAAC,CACrBC,KAAK,CAAC,MAAM,CAAC;QAChB,OAAOP,KAAK,GAAG;UAAED,OAAO,EAAE,KAAK;UAAEC,KAAK,EAAEA,KAAK,CAACc;QAAQ,CAAC,GAAG;UAAEf,OAAO,EAAE,IAAI;UAAEc;QAAK,CAAC;MACnF;IACA,KAAK,aAAa;MAAE;QAClB,IAAI,CAAChB,IAAI,CAACyB,SAAS,EAAE,OAAO;UAAEvB,OAAO,EAAE,KAAK;UAAEC,KAAK,EAAE;QAAqB,CAAC;QAC3E,IAAI,CAACH,IAAI,CAACwC,IAAI,EAAE,OAAO;UAAEtC,OAAO,EAAE,KAAK;UAAEC,KAAK,EAAE;QAA6B,CAAC;QAC9E,MAAM;UAAEa,IAAI,EAAE4C;QAAM,CAAC,GAAG,MAAM7D,EAAE,CAACQ,IAAI,CAAC,QAAQ,CAAC,CAC5CC,MAAM,CAAC,gBAAgB,CAAC,CAACC,EAAE,CAAC,IAAI,EAAEL,GAAG,CAAC,CAACsB,MAAM,CAAC,CAAC;QAClD,IAAI,CAACkC,KAAK,EAAEC,cAAc,EAAE,OAAO;UAAE3D,OAAO,EAAE,KAAK;UAAEC,KAAK,EAAE;QAA8B,CAAC;QAC3F,IAAI;UACF,MAAM6D,IAAI,GAAG,MAAMC,KAAK,CAAC,+BAA+B,EAAE;YACxDmB,MAAM,EAAE,MAAM;YACdC,OAAO,EAAE;cAAEC,aAAa,EAAE,UAAU1B,KAAK,CAACC,cAAc,EAAE;cAAE,cAAc,EAAE;YAAmB,CAAC;YAChGrB,IAAI,EAAE+C,IAAI,CAACC,SAAS,CAAC;cACnBjF,IAAI,EAAEP,IAAI,CAACO,IAAI,IAAI,8BAA8B;cACjD4C,EAAE,EAAEnD,IAAI,CAACmD,EAAY;cACrB5B,OAAO,EAAEvB,IAAI,CAACuB,OAAO,IAAI,cAAcvB,IAAI,CAACyB,SAAS,EAAE;cACvDsD,IAAI,EAAE/E,IAAI,CAACwC,IAAc;cACzB,IAAIxC,IAAI,CAACqH,WAAW,GAAG;gBAAEhC,OAAO,EAAE;kBAAE,aAAa,EAAErF,IAAI,CAACqH;gBAAY;cAAE,CAAC,GAAG,CAAC,CAAC;YAC9E,CAAC;UACH,CAAC,CAAC;UACF,MAAM5B,MAAM,GAAG,MAAMzB,IAAI,CAAC0B,IAAI,CAAC,CAAC;UAChC,OAAO1B,IAAI,CAACE,EAAE,GAAG;YAAEhE,OAAO,EAAE,IAAI;YAAEc,IAAI,EAAEyE;UAAO,CAAC,GAAG;YAAEvF,OAAO,EAAE,KAAK;YAAEC,KAAK,EAAEsF,MAAM,CAACtF,KAAK,IAAI;UAAe,CAAC;QAC9G,CAAC,CAAC,OAAOmH,GAAG,EAAE;UACZ,OAAO;YAAEpH,OAAO,EAAE,KAAK;YAAEC,KAAK,EAAE,iBAAiBmH,GAAG;UAAG,CAAC;QAC1D;MACF;IACA,KAAK,cAAc;MAAE;QACnB,MAAMC,OAAgC,GAAG,CAAC,CAAC;QAC3C,IAAIvH,IAAI,CAACa,MAAM,EAAE0G,OAAO,CAAC1G,MAAM,GAAGb,IAAI,CAACa,MAAM;QAC7C,IAAIb,IAAI,CAACe,QAAQ,EAAEwG,OAAO,CAACxG,QAAQ,GAAGf,IAAI,CAACe,QAAQ;QACnD,IAAIf,IAAI,CAACwH,MAAM,EAAED,OAAO,CAACE,SAAS,GAAGzH,IAAI,CAACwH,MAAM;QAChD,IAAIxH,IAAI,CAAC0H,UAAU,EAAEH,OAAO,CAACG,UAAU,GAAG1H,IAAI,CAAC0H,UAAU;QACzD,MAAM;UAAE1G,IAAI;UAAEb;QAAM,CAAC,GAAG,MAAMJ,EAAE,CAACQ,IAAI,CAAC,eAAe,CAAC,CACnDoH,MAAM,CAACJ,OAAO,CAAC,CAAC9G,EAAE,CAAC,IAAI,EAAET,IAAI,CAACyB,SAAmB,CAAC,CAAChB,EAAE,CAAC,UAAU,EAAEL,GAAG,CAAC,CAACI,MAAM,CAAC,CAAC,CAACkB,MAAM,CAAC,CAAC;QAC3F,OAAOvB,KAAK,GAAG;UAAED,OAAO,EAAE,KAAK;UAAEC,KAAK,EAAEA,KAAK,CAACc;QAAQ,CAAC,GAAG;UAAEf,OAAO,EAAE,IAAI;UAAEc;QAAK,CAAC;MACnF;IACA,KAAK,aAAa;MAAE;QAClB,MAAM;UAAEA,IAAI;UAAEb;QAAM,CAAC,GAAG,MAAMJ,EAAE,CAACQ,IAAI,CAAC,eAAe,CAAC,CACnDC,MAAM,CAAC,2BAA2B,CAAC,CAACC,EAAE,CAAC,UAAU,EAAEL,GAAG,CAAC,CAACQ,KAAK,CAAC,IAAI,CAAC;QACtE,IAAIT,KAAK,EAAE,OAAO;UAAED,OAAO,EAAE,KAAK;UAAEC,KAAK,EAAEA,KAAK,CAACc;QAAQ,CAAC;QAC1D,MAAM2G,KAAK,GAAG;UACZC,KAAK,EAAE7G,IAAI,CAAC0B,MAAM;UAClBoF,SAAS,EAAErI,OAAO,CAACuB,IAAI,EAAE,QAAQ,CAAC;UAClC+G,UAAU,EAAEtI,OAAO,CAACuB,IAAI,EAAE,SAAS,CAAC;UACpCgH,WAAW,EAAEvI,OAAO,CAACuB,IAAI,EAAE,UAAU;QACvC,CAAC;QACD,OAAO;UAAEd,OAAO,EAAE,IAAI;UAAEc,IAAI,EAAE4G;QAAM,CAAC;MACvC;IACA,KAAK,iBAAiB;MAAE;QACtB,IAAI,CAAC5H,IAAI,CAACiI,IAAI,EAAE,OAAO;UAAE/H,OAAO,EAAE,KAAK;UAAEC,KAAK,EAAE;QAAmB,CAAC;QACpE,IAAI,CAACH,IAAI,CAACuB,OAAO,EAAE,OAAO;UAAErB,OAAO,EAAE,KAAK;UAAEC,KAAK,EAAE;QAAsB,CAAC;QAC1E,MAAM+H,IAAI,GAAIlI,IAAI,CAACkI,IAAI,IAAgBlI,IAAI,CAACiI,IAAI,CAAYrD,WAAW,CAAC,CAAC,CAACC,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC,CAACA,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC;QAC3H,MAAM;UAAE7D,IAAI;UAAEb;QAAM,CAAC,GAAG,MAAMJ,EAAE,CAACQ,IAAI,CAAC,iBAAiB,CAAC,CAACoF,MAAM,CAAC;UAC9DC,QAAQ,EAAExF,GAAG;UACb6H,IAAI,EAAEjI,IAAI,CAACiI,IAAc;UACzBC,IAAI;UACJ3G,OAAO,EAAEvB,IAAI,CAACuB,OAAiB;UAC/B4G,QAAQ,EAAGnI,IAAI,CAACmI,QAAQ,IAAe,SAAS;UAChDC,WAAW,EAAGpI,IAAI,CAACoI,WAAW,IAAe,IAAI;UACjD5B,YAAY,EAAGxG,IAAI,CAACwG,YAAY,IAAe,IAAI;UACnD6B,YAAY,EAAGrI,IAAI,CAACqI,YAAY,IAAe,IAAI;UACnD3B,YAAY,EAAG1G,IAAI,CAAC0G,YAAY,IAAe,IAAI;UACnD4B,SAAS,EAAE;QACb,CAAC,CAAC,CAAC9H,MAAM,CAAC,+CAA+C,CAAC,CAACkB,MAAM,CAAC,CAAC;QACnE,IAAIvB,KAAK,EAAE,OAAO;UAAED,OAAO,EAAE,KAAK;UAAEC,KAAK,EAAEA,KAAK,CAACc;QAAQ,CAAC;QAC1D,OAAO;UAAEf,OAAO,EAAE,IAAI;UAAEc;QAAK,CAAC;MAChC;IACA,KAAK,iBAAiB;MAAE;QACtB,IAAI,CAAChB,IAAI,CAACuI,WAAW,EAAE,OAAO;UAAErI,OAAO,EAAE,KAAK;UAAEC,KAAK,EAAE;QAA0B,CAAC;QAClF,MAAMoH,OAAgC,GAAG,CAAC,CAAC;QAC3C,IAAIvH,IAAI,CAACiI,IAAI,KAAKO,SAAS,EAAEjB,OAAO,CAACU,IAAI,GAAGjI,IAAI,CAACiI,IAAI;QACrD,IAAIjI,IAAI,CAACkI,IAAI,KAAKM,SAAS,EAAEjB,OAAO,CAACW,IAAI,GAAGlI,IAAI,CAACkI,IAAI;QACrD,IAAIlI,IAAI,CAACuB,OAAO,KAAKiH,SAAS,EAAEjB,OAAO,CAAChG,OAAO,GAAGvB,IAAI,CAACuB,OAAO;QAC9D,IAAIvB,IAAI,CAACmI,QAAQ,KAAKK,SAAS,EAAEjB,OAAO,CAACY,QAAQ,GAAGnI,IAAI,CAACmI,QAAQ;QACjE,IAAInI,IAAI,CAACoI,WAAW,KAAKI,SAAS,EAAEjB,OAAO,CAACa,WAAW,GAAGpI,IAAI,CAACoI,WAAW;QAC1E,IAAIpI,IAAI,CAACwG,YAAY,KAAKgC,SAAS,EAAEjB,OAAO,CAACf,YAAY,GAAGxG,IAAI,CAACwG,YAAY;QAC7E,IAAIxG,IAAI,CAACqI,YAAY,KAAKG,SAAS,EAAEjB,OAAO,CAACc,YAAY,GAAGrI,IAAI,CAACqI,YAAY;QAC7E,IAAIrI,IAAI,CAAC0G,YAAY,KAAK8B,SAAS,EAAEjB,OAAO,CAACb,YAAY,GAAG1G,IAAI,CAAC0G,YAAY;QAC7E,IAAII,MAAM,CAAC2B,IAAI,CAAClB,OAAO,CAAC,CAAC7E,MAAM,KAAK,CAAC,EAAE,OAAO;UAAExC,OAAO,EAAE,KAAK;UAAEC,KAAK,EAAE;QAAsB,CAAC;QAC9F,MAAM;UAAEa,IAAI;UAAEb;QAAM,CAAC,GAAG,MAAMJ,EAAE,CAACQ,IAAI,CAAC,iBAAiB,CAAC,CACrDoH,MAAM,CAACJ,OAAO,CAAC,CAAC9G,EAAE,CAAC,IAAI,EAAET,IAAI,CAACuI,WAAqB,CAAC,CAAC9H,EAAE,CAAC,UAAU,EAAEL,GAAG,CAAC,CACxEI,MAAM,CAAC,+CAA+C,CAAC,CAACkB,MAAM,CAAC,CAAC;QACnE,IAAIvB,KAAK,EAAE,OAAO;UAAED,OAAO,EAAE,KAAK;UAAEC,KAAK,EAAEA,KAAK,CAACc;QAAQ,CAAC;QAC1D,OAAO;UAAEf,OAAO,EAAE,IAAI;UAAEc;QAAK,CAAC;MAChC;IACA,KAAK,iBAAiB;MAAE;QACtB,IAAI,CAAChB,IAAI,CAACuI,WAAW,EAAE,OAAO;UAAErI,OAAO,EAAE,KAAK;UAAEC,KAAK,EAAE;QAA0B,CAAC;QAClF,MAAM;UAAEa,IAAI;UAAEb;QAAM,CAAC,GAAG,MAAMJ,EAAE,CAACQ,IAAI,CAAC,iBAAiB,CAAC,CACrDoH,MAAM,CAAC;UAAEW,SAAS,EAAE;QAAM,CAAC,CAAC,CAAC7H,EAAE,CAAC,IAAI,EAAET,IAAI,CAACuI,WAAqB,CAAC,CAAC9H,EAAE,CAAC,UAAU,EAAEL,GAAG,CAAC,CACrFI,MAAM,CAAC,UAAU,CAAC,CAACkB,MAAM,CAAC,CAAC;QAC9B,IAAIvB,KAAK,EAAE,OAAO;UAAED,OAAO,EAAE,KAAK;UAAEC,KAAK,EAAEA,KAAK,CAACc;QAAQ,CAAC;QAC1D,OAAO;UAAEf,OAAO,EAAE,IAAI;UAAEc,IAAI,EAAE;YAAE,GAAGA,IAAI;YAAE0H,OAAO,EAAE;UAAK;QAAE,CAAC;MAC5D;IACA;MACE,OAAO;QAAExI,OAAO,EAAE,KAAK;QAAEC,KAAK,EAAE,yBAAyBH,IAAI,CAACK,MAAM;MAAkK,CAAC;EAC3O;AACF","ignoreList":[]}
+{"version":3,"file":"comms-email.js","names":["sanitizeFilterValue","groupBy","validateUrl","MAX_ATTACHMENT_BYTES","MAX_TOTAL_ATTACHMENT_BYTES","MAX_ATTACHMENT_COUNT","handleEmail","sb","args","storeId","success","error","sid","action","q","from","select","eq","order","ascending","limit","status","mailbox","priority","data","message","flattened","map","row","latest_message","rest","subject","from_email","thread_id","single","messages","thread","lines","msg","sort","a","b","Date","created_at","getTime","push","to_email","slice","body","body_text","length","join","oneHourAgo","now","toISOString","count","recentSends","head","gte","to","test","bodyHtml","body_html","bodyText","attachments","att","url","urlCheck","store","resend_api_key","resolvedAttachments","totalBytes","resp","fetch","ok","buf","Buffer","arrayBuffer","filename","content","toString","fromEmail","email","store_name","toLowerCase","replace","payload","html","text","cc","String","bcc","reply_to","method","headers","Authorization","JSON","stringify","result","json","insert","store_id","resend_id","id","then","templateSlug","template","tpl","tplErr","or","tData","template_data","htmlContent","html_content","textContent","text_content","subjectLine","key","val","Object","entries","escapedKey","re","RegExp","st","ilike","email_id","in_reply_to","replyOneHourAgo","replyRecentSends","replySubject","err","updates","intent","ai_intent","ai_summary","update","stats","total","by_status","by_mailbox","by_priority","name","slug","category","description","preview_text","is_active","template_id","undefined","keys","deleted"],"sources":["../../../src/server/handlers/comms-email.ts"],"sourcesContent":["// comms-email.ts — Email handler (inbox, send, templates)\nimport type { SupabaseClient } from \"@supabase/supabase-js\";\nimport { sanitizeFilterValue, groupBy } from \"../lib/utils.js\";\nimport { validateUrl } from \"../lib/ssrf-guard.js\";\n\nconst MAX_ATTACHMENT_BYTES = 10 * 1024 * 1024; // 10MB per attachment\nconst MAX_TOTAL_ATTACHMENT_BYTES = 25 * 1024 * 1024; // 25MB total\nconst MAX_ATTACHMENT_COUNT = 10;\n\nexport async function handleEmail(sb: SupabaseClient, args: Record<string, unknown>, storeId?: string) {\n  if (!storeId) return { success: false, error: \"store_id required\" };\n  const sid = storeId as string;\n  switch (args.action) {\n    case \"inbox\": {\n      let q = sb.from(\"email_threads\").select(\"*, latest_message:email_inbox(subject, from_email, created_at)\")\n        .eq(\"store_id\", sid).order(\"updated_at\", { ascending: false }).limit(args.limit as number || 25);\n      if (args.status) q = q.eq(\"status\", args.status as string);\n      if (args.mailbox) q = q.eq(\"mailbox\", args.mailbox as string);\n      if (args.priority) q = q.eq(\"priority\", args.priority as string);\n      const { data, error } = await q;\n      if (error) return { success: false, error: error.message };\n      // Flatten latest_message join so subject/from appear as table columns\n      const flattened = (data || []).map((row: any) => {\n        const { latest_message, ...rest } = row;\n        return { ...rest, subject: latest_message?.subject || null, from_email: latest_message?.from_email || null };\n      });\n      return { success: true, data: flattened };\n    }\n    case \"inbox_get\": {\n      const { data, error } = await sb.from(\"email_threads\")\n        .select(\"*, messages:email_inbox(id, subject, from_email, to_email, body_text, created_at)\").eq(\"id\", args.thread_id as string).eq(\"store_id\", sid).single();\n      if (error) return { success: false, error: error.message };\n      // Pre-format so messages are visible (formatter handles sub-tables but body gets truncated)\n      const { messages, ...thread } = data as any;\n      const lines: string[] = [\n        `## Email Thread`,\n        `**Status**: ${thread.status || \"\\u2014\"} | **Mailbox**: ${thread.mailbox || \"\\u2014\"} | **Priority**: ${thread.priority || \"\\u2014\"}`,\n        \"\",\n      ];\n      for (const msg of (messages || []).sort((a: any, b: any) => new Date(a.created_at).getTime() - new Date(b.created_at).getTime())) {\n        lines.push(`### ${msg.from_email} \\u2192 ${msg.to_email || \"\\u2014\"} (${msg.created_at?.slice(0, 16) || \"\\u2014\"})`);\n        lines.push(`**Subject**: ${msg.subject || \"(no subject)\"}`);\n        const body = (msg.body_text || \"\").slice(0, 500);\n        lines.push(body + (msg.body_text?.length > 500 ? \"...\" : \"\"));\n        lines.push(\"\");\n      }\n      return { success: true, data: lines.join(\"\\n\") };\n    }\n    case \"send\": {\n      // P0 FIX: Per-store email rate limit (100 emails/hour)\n      const oneHourAgo = new Date(Date.now() - 3600_000).toISOString();\n      const { count: recentSends } = await sb.from(\"email_sends\")\n        .select(\"id\", { count: \"exact\", head: true })\n        .eq(\"store_id\", sid)\n        .gte(\"created_at\", oneHourAgo);\n      if ((recentSends ?? 0) >= 100) {\n        return { success: false, error: \"Rate limit exceeded: maximum 100 emails per hour per store\" };\n      }\n\n      const to = args.to as string;\n      if (!to) return { success: false, error: \"to (email address) is required\" };\n      // P0 FIX: Sanitize email recipient to prevent header injection\n      if (/[\\r\\n]/.test(to)) return { success: false, error: \"Invalid recipient email address\" };\n      const subject = (args.subject as string) || \"No Subject\";\n      // P0 FIX: Sanitize subject to prevent header injection\n      if (/[\\r\\n]/.test(subject)) return { success: false, error: \"Subject contains invalid characters\" };\n      const bodyHtml = (args.body_html as string) || \"\";\n      const bodyText = (args.body_text as string) || \"\";\n\n      // P0 FIX: Validate attachments — reject oversized or too-many attachments\n      const attachments = (args.attachments as { filename: string; url: string }[]) || [];\n      if (attachments.length > MAX_ATTACHMENT_COUNT) {\n        return { success: false, error: `Too many attachments (max ${MAX_ATTACHMENT_COUNT})` };\n      }\n      // Validate all attachment URLs are public (no SSRF into internal services)\n      for (const att of attachments) {\n        if (att.url) {\n          const urlCheck = await validateUrl(att.url);\n          if (urlCheck) return { success: false, error: `Invalid attachment URL \"${att.url}\": ${urlCheck}` };\n        }\n      }\n\n      // Fetch store Resend API key\n      const { data: store } = await sb.from(\"stores\")\n        .select(\"resend_api_key, store_name, email\")\n        .eq(\"id\", sid).single();\n      if (!store?.resend_api_key) return { success: false, error: \"Store has no Resend API key configured\" };\n\n      // Download and validate attachment sizes (best-effort — streams through Resend)\n      const resolvedAttachments: Array<{ filename: string; content: string }> = [];\n      let totalBytes = 0;\n      for (const att of attachments) {\n        if (att.url) {\n          const resp = await fetch(att.url);\n          if (!resp.ok) return { success: false, error: `Failed to fetch attachment: ${att.url}` };\n          const buf = Buffer.from(await resp.arrayBuffer());\n          if (buf.length > MAX_ATTACHMENT_BYTES) {\n            return { success: false, error: `Attachment \"${att.filename}\" exceeds ${MAX_ATTACHMENT_BYTES / 1024 / 1024}MB limit` };\n          }\n          totalBytes += buf.length;\n          if (totalBytes > MAX_TOTAL_ATTACHMENT_BYTES) {\n            return { success: false, error: `Total attachment size exceeds ${MAX_TOTAL_ATTACHMENT_BYTES / 1024 / 1024}MB limit` };\n          }\n          resolvedAttachments.push({ filename: att.filename || \"attachment\", content: buf.toString(\"base64\") });\n        }\n      }\n\n      const fromEmail = (args.from as string) || store.email || `${store.store_name?.toLowerCase().replace(/\\s+/g, \"\")}@mail.floradistro.com`;\n      const payload: Record<string, unknown> = {\n        from: fromEmail, to, subject,\n        ...(bodyHtml ? { html: bodyHtml } : {}),\n        ...(bodyText ? { text: bodyText } : {}),\n        ...(resolvedAttachments.length ? { attachments: resolvedAttachments } : {}),\n      };\n      if (args.cc) {\n        if (/[\\r\\n]/.test(String(args.cc))) return { success: false, error: \"cc contains invalid characters\" };\n        payload.cc = args.cc;\n      }\n      if (args.bcc) {\n        if (/[\\r\\n]/.test(String(args.bcc))) return { success: false, error: \"bcc contains invalid characters\" };\n        payload.bcc = args.bcc;\n      }\n      if (args.reply_to) {\n        if (/[\\r\\n]/.test(String(args.reply_to))) return { success: false, error: \"reply_to contains invalid characters\" };\n        payload.reply_to = args.reply_to;\n      }\n\n      const resp = await fetch(\"https://api.resend.com/emails\", {\n        method: \"POST\",\n        headers: { Authorization: `Bearer ${store.resend_api_key}`, \"Content-Type\": \"application/json\" },\n        body: JSON.stringify(payload),\n      });\n      const result = await resp.json();\n      if (!resp.ok) return { success: false, error: `Email send failed: ${result.message || JSON.stringify(result)}` };\n\n      // Track send for rate limiting\n      await sb.from(\"email_sends\").insert({ store_id: sid, to_email: to, subject, resend_id: result.id }).then(() => {}, () => {});\n\n      return { success: true, data: { id: result.id, to, subject, status: \"sent\" } };\n    }\n    case \"send_template\": {\n      const templateSlug = args.template as string;\n      if (!templateSlug) return { success: false, error: \"template slug required\" };\n\n      const { data: tpl, error: tplErr } = await sb.from(\"email_templates\")\n        .select(\"*\")\n        .eq(\"slug\", templateSlug)\n        .or(`store_id.eq.${sid},store_id.is.null`)\n        .eq(\"is_active\", true)\n        .limit(1)\n        .single();\n      if (tplErr || !tpl) return { success: false, error: `Template \"${templateSlug}\" not found` };\n\n      const tData = (args.template_data as Record<string, string>) || {};\n      let htmlContent = tpl.html_content as string || \"\";\n      let textContent = tpl.text_content as string || \"\";\n      let subjectLine = tpl.subject as string || \"\";\n      for (const [key, val] of Object.entries(tData)) {\n        const escapedKey = key.replace(/[.*+?^${}()|[\\]\\\\]/g, '\\\\$&');\n        const re = new RegExp(`\\\\{\\\\{\\\\s*${escapedKey}\\\\s*\\\\}\\\\}`, \"g\");\n        htmlContent = htmlContent.replace(re, val);\n        textContent = textContent.replace(re, val);\n        subjectLine = subjectLine.replace(re, val);\n      }\n\n      return handleEmail(sb, {\n        action: \"send\",\n        to: args.to,\n        subject: subjectLine,\n        body_html: htmlContent,\n        body_text: textContent,\n        from: args.from,\n        cc: args.cc,\n        bcc: args.bcc,\n      }, storeId);\n    }\n    case \"list\": {\n      let q = sb.from(\"email_sends\")\n        .select(\"id, to_email, subject, status, resend_id, created_at\")\n        .eq(\"store_id\", sid).order(\"created_at\", { ascending: false });\n      if (args.to) { const st = sanitizeFilterValue(args.to as string); q = q.ilike(\"to_email\", `%${st}%`); }\n      const { data, error } = await q.limit(args.limit as number || 25);\n      return error ? { success: false, error: error.message } : { success: true, data };\n    }\n    case \"get\": {\n      const { data, error } = await sb.from(\"email_sends\")\n        .select(\"*\").eq(\"id\", args.email_id as string).eq(\"store_id\", sid).single();\n      return error ? { success: false, error: error.message } : { success: true, data };\n    }\n    case \"templates\": {\n      const { data, error } = await sb.from(\"email_templates\")\n        .select(\"id, name, slug, subject, category, description, preview_text, is_active, created_at\")\n        .or(`store_id.eq.${sid},store_id.is.null`)\n        .eq(\"is_active\", true)\n        .order(\"name\");\n      return error ? { success: false, error: error.message } : { success: true, data };\n    }\n    case \"inbox_reply\": {\n      if (!args.thread_id) return { success: false, error: \"thread_id required\" };\n      if (!args.body) return { success: false, error: \"body (reply text) required\" };\n\n      // CRLF injection checks\n      if (args.to && /[\\r\\n]/.test(String(args.to))) return { success: false, error: \"Invalid recipient email address\" };\n      if (args.subject && /[\\r\\n]/.test(String(args.subject))) return { success: false, error: \"Subject contains invalid characters\" };\n      if (args.from && /[\\r\\n]/.test(String(args.from))) return { success: false, error: \"from contains invalid characters\" };\n      if (args.in_reply_to && /[\\r\\n]/.test(String(args.in_reply_to))) return { success: false, error: \"in_reply_to contains invalid characters\" };\n\n      // Per-store email rate limit (100 emails/hour) — same as send action\n      const replyOneHourAgo = new Date(Date.now() - 3600_000).toISOString();\n      const { count: replyRecentSends } = await sb.from(\"email_sends\")\n        .select(\"id\", { count: \"exact\", head: true })\n        .eq(\"store_id\", sid)\n        .gte(\"created_at\", replyOneHourAgo);\n      if ((replyRecentSends ?? 0) >= 100) {\n        return { success: false, error: \"Rate limit exceeded: maximum 100 emails per hour per store\" };\n      }\n\n      const { data: store } = await sb.from(\"stores\")\n        .select(\"resend_api_key\").eq(\"id\", sid).single();\n      if (!store?.resend_api_key) return { success: false, error: \"Store has no Resend API key\" };\n      try {\n        const resp = await fetch(\"https://api.resend.com/emails\", {\n          method: \"POST\",\n          headers: { Authorization: `Bearer ${store.resend_api_key}`, \"Content-Type\": \"application/json\" },\n          body: JSON.stringify({\n            from: args.from || `support@mail.floradistro.com`,\n            to: args.to as string,\n            subject: args.subject || `Re: Thread ${args.thread_id}`,\n            html: args.body as string,\n            ...(args.in_reply_to ? { headers: { \"In-Reply-To\": args.in_reply_to } } : {}),\n          }),\n        });\n        const result = await resp.json();\n        if (!resp.ok) return { success: false, error: result.error || \"Reply failed\" };\n\n        // Track send for rate limiting\n        const replySubject = (args.subject as string) || `Re: Thread ${args.thread_id}`;\n        await sb.from(\"email_sends\").insert({ store_id: sid, to_email: args.to as string, subject: replySubject, resend_id: result.id }).then(() => {}, () => {});\n\n        return { success: true, data: result };\n      } catch (err) {\n        return { success: false, error: `Reply failed: ${err}` };\n      }\n    }\n    case \"inbox_update\": {\n      const updates: Record<string, unknown> = {};\n      if (args.status) updates.status = args.status;\n      if (args.priority) updates.priority = args.priority;\n      if (args.intent) updates.ai_intent = args.intent;\n      if (args.ai_summary) updates.ai_summary = args.ai_summary;\n      const { data, error } = await sb.from(\"email_threads\")\n        .update(updates).eq(\"id\", args.thread_id as string).eq(\"store_id\", sid).select().single();\n      return error ? { success: false, error: error.message } : { success: true, data };\n    }\n    case \"inbox_stats\": {\n      const { data, error } = await sb.from(\"email_threads\")\n        .select(\"status, mailbox, priority\").eq(\"store_id\", sid).limit(1000);\n      if (error) return { success: false, error: error.message };\n      const stats = {\n        total: data.length,\n        by_status: groupBy(data, \"status\"),\n        by_mailbox: groupBy(data, \"mailbox\"),\n        by_priority: groupBy(data, \"priority\")\n      };\n      return { success: true, data: stats };\n    }\n    case \"create_template\": {\n      if (!args.name) return { success: false, error: \"name is required\" };\n      if (!args.subject) return { success: false, error: \"subject is required\" };\n      const slug = (args.slug as string) || (args.name as string).toLowerCase().replace(/[^a-z0-9]+/g, \"-\").replace(/^-|-$/g, \"\");\n      const { data, error } = await sb.from(\"email_templates\").insert({\n        store_id: sid,\n        name: args.name as string,\n        slug,\n        subject: args.subject as string,\n        category: (args.category as string) || \"general\",\n        description: (args.description as string) || null,\n        html_content: (args.html_content as string) || null,\n        preview_text: (args.preview_text as string) || null,\n        text_content: (args.text_content as string) || null,\n        is_active: true,\n      }).select(\"id, name, slug, subject, category, created_at\").single();\n      if (error) return { success: false, error: error.message };\n      return { success: true, data };\n    }\n    case \"update_template\": {\n      if (!args.template_id) return { success: false, error: \"template_id is required\" };\n      const updates: Record<string, unknown> = {};\n      if (args.name !== undefined) updates.name = args.name;\n      if (args.slug !== undefined) updates.slug = args.slug;\n      if (args.subject !== undefined) updates.subject = args.subject;\n      if (args.category !== undefined) updates.category = args.category;\n      if (args.description !== undefined) updates.description = args.description;\n      if (args.html_content !== undefined) updates.html_content = args.html_content;\n      if (args.preview_text !== undefined) updates.preview_text = args.preview_text;\n      if (args.text_content !== undefined) updates.text_content = args.text_content;\n      if (Object.keys(updates).length === 0) return { success: false, error: \"No fields to update\" };\n      const { data, error } = await sb.from(\"email_templates\")\n        .update(updates).eq(\"id\", args.template_id as string).eq(\"store_id\", sid)\n        .select(\"id, name, slug, subject, category, updated_at\").single();\n      if (error) return { success: false, error: error.message };\n      return { success: true, data };\n    }\n    case \"delete_template\": {\n      if (!args.template_id) return { success: false, error: \"template_id is required\" };\n      const { data, error } = await sb.from(\"email_templates\")\n        .update({ is_active: false }).eq(\"id\", args.template_id as string).eq(\"store_id\", sid)\n        .select(\"id, name\").single();\n      if (error) return { success: false, error: error.message };\n      return { success: true, data: { ...data, deleted: true } };\n    }\n    default:\n      return { success: false, error: `Unknown email action: ${args.action}. Valid: send, send_template, list, get, templates, inbox, inbox_get, inbox_reply, inbox_update, inbox_stats, create_template, update_template, delete_template` };\n  }\n}\n"],"mappings":"AAAA;;AAEA,SAASA,mBAAmB,EAAEC,OAAO,QAAQ,iBAAiB;AAC9D,SAASC,WAAW,QAAQ,sBAAsB;AAElD,MAAMC,oBAAoB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC;AAC/C,MAAMC,0BAA0B,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC;AACrD,MAAMC,oBAAoB,GAAG,EAAE;AAE/B,OAAO,eAAeC,WAAWA,CAACC,EAAkB,EAAEC,IAA6B,EAAEC,OAAgB,EAAE;EACrG,IAAI,CAACA,OAAO,EAAE,OAAO;IAAEC,OAAO,EAAE,KAAK;IAAEC,KAAK,EAAE;EAAoB,CAAC;EACnE,MAAMC,GAAG,GAAGH,OAAiB;EAC7B,QAAQD,IAAI,CAACK,MAAM;IACjB,KAAK,OAAO;MAAE;QACZ,IAAIC,CAAC,GAAGP,EAAE,CAACQ,IAAI,CAAC,eAAe,CAAC,CAACC,MAAM,CAAC,gEAAgE,CAAC,CACtGC,EAAE,CAAC,UAAU,EAAEL,GAAG,CAAC,CAACM,KAAK,CAAC,YAAY,EAAE;UAAEC,SAAS,EAAE;QAAM,CAAC,CAAC,CAACC,KAAK,CAACZ,IAAI,CAACY,KAAK,IAAc,EAAE,CAAC;QAClG,IAAIZ,IAAI,CAACa,MAAM,EAAEP,CAAC,GAAGA,CAAC,CAACG,EAAE,CAAC,QAAQ,EAAET,IAAI,CAACa,MAAgB,CAAC;QAC1D,IAAIb,IAAI,CAACc,OAAO,EAAER,CAAC,GAAGA,CAAC,CAACG,EAAE,CAAC,SAAS,EAAET,IAAI,CAACc,OAAiB,CAAC;QAC7D,IAAId,IAAI,CAACe,QAAQ,EAAET,CAAC,GAAGA,CAAC,CAACG,EAAE,CAAC,UAAU,EAAET,IAAI,CAACe,QAAkB,CAAC;QAChE,MAAM;UAAEC,IAAI;UAAEb;QAAM,CAAC,GAAG,MAAMG,CAAC;QAC/B,IAAIH,KAAK,EAAE,OAAO;UAAED,OAAO,EAAE,KAAK;UAAEC,KAAK,EAAEA,KAAK,CAACc;QAAQ,CAAC;QAC1D;QACA,MAAMC,SAAS,GAAG,CAACF,IAAI,IAAI,EAAE,EAAEG,GAAG,CAAEC,GAAQ,IAAK;UAC/C,MAAM;YAAEC,cAAc;YAAE,GAAGC;UAAK,CAAC,GAAGF,GAAG;UACvC,OAAO;YAAE,GAAGE,IAAI;YAAEC,OAAO,EAAEF,cAAc,EAAEE,OAAO,IAAI,IAAI;YAAEC,UAAU,EAAEH,cAAc,EAAEG,UAAU,IAAI;UAAK,CAAC;QAC9G,CAAC,CAAC;QACF,OAAO;UAAEtB,OAAO,EAAE,IAAI;UAAEc,IAAI,EAAEE;QAAU,CAAC;MAC3C;IACA,KAAK,WAAW;MAAE;QAChB,MAAM;UAAEF,IAAI;UAAEb;QAAM,CAAC,GAAG,MAAMJ,EAAE,CAACQ,IAAI,CAAC,eAAe,CAAC,CACnDC,MAAM,CAAC,mFAAmF,CAAC,CAACC,EAAE,CAAC,IAAI,EAAET,IAAI,CAACyB,SAAmB,CAAC,CAAChB,EAAE,CAAC,UAAU,EAAEL,GAAG,CAAC,CAACsB,MAAM,CAAC,CAAC;QAC9J,IAAIvB,KAAK,EAAE,OAAO;UAAED,OAAO,EAAE,KAAK;UAAEC,KAAK,EAAEA,KAAK,CAACc;QAAQ,CAAC;QAC1D;QACA,MAAM;UAAEU,QAAQ;UAAE,GAAGC;QAAO,CAAC,GAAGZ,IAAW;QAC3C,MAAMa,KAAe,GAAG,CACtB,iBAAiB,EACjB,eAAeD,MAAM,CAACf,MAAM,IAAI,QAAQ,mBAAmBe,MAAM,CAACd,OAAO,IAAI,QAAQ,oBAAoBc,MAAM,CAACb,QAAQ,IAAI,QAAQ,EAAE,EACtI,EAAE,CACH;QACD,KAAK,MAAMe,GAAG,IAAI,CAACH,QAAQ,IAAI,EAAE,EAAEI,IAAI,CAAC,CAACC,CAAM,EAAEC,CAAM,KAAK,IAAIC,IAAI,CAACF,CAAC,CAACG,UAAU,CAAC,CAACC,OAAO,CAAC,CAAC,GAAG,IAAIF,IAAI,CAACD,CAAC,CAACE,UAAU,CAAC,CAACC,OAAO,CAAC,CAAC,CAAC,EAAE;UAChIP,KAAK,CAACQ,IAAI,CAAC,OAAOP,GAAG,CAACN,UAAU,WAAWM,GAAG,CAACQ,QAAQ,IAAI,QAAQ,KAAKR,GAAG,CAACK,UAAU,EAAEI,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,QAAQ,GAAG,CAAC;UACpHV,KAAK,CAACQ,IAAI,CAAC,gBAAgBP,GAAG,CAACP,OAAO,IAAI,cAAc,EAAE,CAAC;UAC3D,MAAMiB,IAAI,GAAG,CAACV,GAAG,CAACW,SAAS,IAAI,EAAE,EAAEF,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;UAChDV,KAAK,CAACQ,IAAI,CAACG,IAAI,IAAIV,GAAG,CAACW,SAAS,EAAEC,MAAM,GAAG,GAAG,GAAG,KAAK,GAAG,EAAE,CAAC,CAAC;UAC7Db,KAAK,CAACQ,IAAI,CAAC,EAAE,CAAC;QAChB;QACA,OAAO;UAAEnC,OAAO,EAAE,IAAI;UAAEc,IAAI,EAAEa,KAAK,CAACc,IAAI,CAAC,IAAI;QAAE,CAAC;MAClD;IACA,KAAK,MAAM;MAAE;QACX;QACA,MAAMC,UAAU,GAAG,IAAIV,IAAI,CAACA,IAAI,CAACW,GAAG,CAAC,CAAC,GAAG,QAAQ,CAAC,CAACC,WAAW,CAAC,CAAC;QAChE,MAAM;UAAEC,KAAK,EAAEC;QAAY,CAAC,GAAG,MAAMjD,EAAE,CAACQ,IAAI,CAAC,aAAa,CAAC,CACxDC,MAAM,CAAC,IAAI,EAAE;UAAEuC,KAAK,EAAE,OAAO;UAAEE,IAAI,EAAE;QAAK,CAAC,CAAC,CAC5CxC,EAAE,CAAC,UAAU,EAAEL,GAAG,CAAC,CACnB8C,GAAG,CAAC,YAAY,EAAEN,UAAU,CAAC;QAChC,IAAI,CAACI,WAAW,IAAI,CAAC,KAAK,GAAG,EAAE;UAC7B,OAAO;YAAE9C,OAAO,EAAE,KAAK;YAAEC,KAAK,EAAE;UAA6D,CAAC;QAChG;QAEA,MAAMgD,EAAE,GAAGnD,IAAI,CAACmD,EAAY;QAC5B,IAAI,CAACA,EAAE,EAAE,OAAO;UAAEjD,OAAO,EAAE,KAAK;UAAEC,KAAK,EAAE;QAAiC,CAAC;QAC3E;QACA,IAAI,QAAQ,CAACiD,IAAI,CAACD,EAAE,CAAC,EAAE,OAAO;UAAEjD,OAAO,EAAE,KAAK;UAAEC,KAAK,EAAE;QAAkC,CAAC;QAC1F,MAAMoB,OAAO,GAAIvB,IAAI,CAACuB,OAAO,IAAe,YAAY;QACxD;QACA,IAAI,QAAQ,CAAC6B,IAAI,CAAC7B,OAAO,CAAC,EAAE,OAAO;UAAErB,OAAO,EAAE,KAAK;UAAEC,KAAK,EAAE;QAAsC,CAAC;QACnG,MAAMkD,QAAQ,GAAIrD,IAAI,CAACsD,SAAS,IAAe,EAAE;QACjD,MAAMC,QAAQ,GAAIvD,IAAI,CAACyC,SAAS,IAAe,EAAE;;QAEjD;QACA,MAAMe,WAAW,GAAIxD,IAAI,CAACwD,WAAW,IAA4C,EAAE;QACnF,IAAIA,WAAW,CAACd,MAAM,GAAG7C,oBAAoB,EAAE;UAC7C,OAAO;YAAEK,OAAO,EAAE,KAAK;YAAEC,KAAK,EAAE,6BAA6BN,oBAAoB;UAAI,CAAC;QACxF;QACA;QACA,KAAK,MAAM4D,GAAG,IAAID,WAAW,EAAE;UAC7B,IAAIC,GAAG,CAACC,GAAG,EAAE;YACX,MAAMC,QAAQ,GAAG,MAAMjE,WAAW,CAAC+D,GAAG,CAACC,GAAG,CAAC;YAC3C,IAAIC,QAAQ,EAAE,OAAO;cAAEzD,OAAO,EAAE,KAAK;cAAEC,KAAK,EAAE,2BAA2BsD,GAAG,CAACC,GAAG,MAAMC,QAAQ;YAAG,CAAC;UACpG;QACF;;QAEA;QACA,MAAM;UAAE3C,IAAI,EAAE4C;QAAM,CAAC,GAAG,MAAM7D,EAAE,CAACQ,IAAI,CAAC,QAAQ,CAAC,CAC5CC,MAAM,CAAC,mCAAmC,CAAC,CAC3CC,EAAE,CAAC,IAAI,EAAEL,GAAG,CAAC,CAACsB,MAAM,CAAC,CAAC;QACzB,IAAI,CAACkC,KAAK,EAAEC,cAAc,EAAE,OAAO;UAAE3D,OAAO,EAAE,KAAK;UAAEC,KAAK,EAAE;QAAyC,CAAC;;QAEtG;QACA,MAAM2D,mBAAiE,GAAG,EAAE;QAC5E,IAAIC,UAAU,GAAG,CAAC;QAClB,KAAK,MAAMN,GAAG,IAAID,WAAW,EAAE;UAC7B,IAAIC,GAAG,CAACC,GAAG,EAAE;YACX,MAAMM,IAAI,GAAG,MAAMC,KAAK,CAACR,GAAG,CAACC,GAAG,CAAC;YACjC,IAAI,CAACM,IAAI,CAACE,EAAE,EAAE,OAAO;cAAEhE,OAAO,EAAE,KAAK;cAAEC,KAAK,EAAE,+BAA+BsD,GAAG,CAACC,GAAG;YAAG,CAAC;YACxF,MAAMS,GAAG,GAAGC,MAAM,CAAC7D,IAAI,CAAC,MAAMyD,IAAI,CAACK,WAAW,CAAC,CAAC,CAAC;YACjD,IAAIF,GAAG,CAACzB,MAAM,GAAG/C,oBAAoB,EAAE;cACrC,OAAO;gBAAEO,OAAO,EAAE,KAAK;gBAAEC,KAAK,EAAE,eAAesD,GAAG,CAACa,QAAQ,aAAa3E,oBAAoB,GAAG,IAAI,GAAG,IAAI;cAAW,CAAC;YACxH;YACAoE,UAAU,IAAII,GAAG,CAACzB,MAAM;YACxB,IAAIqB,UAAU,GAAGnE,0BAA0B,EAAE;cAC3C,OAAO;gBAAEM,OAAO,EAAE,KAAK;gBAAEC,KAAK,EAAE,iCAAiCP,0BAA0B,GAAG,IAAI,GAAG,IAAI;cAAW,CAAC;YACvH;YACAkE,mBAAmB,CAACzB,IAAI,CAAC;cAAEiC,QAAQ,EAAEb,GAAG,CAACa,QAAQ,IAAI,YAAY;cAAEC,OAAO,EAAEJ,GAAG,CAACK,QAAQ,CAAC,QAAQ;YAAE,CAAC,CAAC;UACvG;QACF;QAEA,MAAMC,SAAS,GAAIzE,IAAI,CAACO,IAAI,IAAeqD,KAAK,CAACc,KAAK,IAAI,GAAGd,KAAK,CAACe,UAAU,EAAEC,WAAW,CAAC,CAAC,CAACC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,uBAAuB;QACvI,MAAMC,OAAgC,GAAG;UACvCvE,IAAI,EAAEkE,SAAS;UAAEtB,EAAE;UAAE5B,OAAO;UAC5B,IAAI8B,QAAQ,GAAG;YAAE0B,IAAI,EAAE1B;UAAS,CAAC,GAAG,CAAC,CAAC,CAAC;UACvC,IAAIE,QAAQ,GAAG;YAAEyB,IAAI,EAAEzB;UAAS,CAAC,GAAG,CAAC,CAAC,CAAC;UACvC,IAAIO,mBAAmB,CAACpB,MAAM,GAAG;YAAEc,WAAW,EAAEM;UAAoB,CAAC,GAAG,CAAC,CAAC;QAC5E,CAAC;QACD,IAAI9D,IAAI,CAACiF,EAAE,EAAE;UACX,IAAI,QAAQ,CAAC7B,IAAI,CAAC8B,MAAM,CAAClF,IAAI,CAACiF,EAAE,CAAC,CAAC,EAAE,OAAO;YAAE/E,OAAO,EAAE,KAAK;YAAEC,KAAK,EAAE;UAAiC,CAAC;UACtG2E,OAAO,CAACG,EAAE,GAAGjF,IAAI,CAACiF,EAAE;QACtB;QACA,IAAIjF,IAAI,CAACmF,GAAG,EAAE;UACZ,IAAI,QAAQ,CAAC/B,IAAI,CAAC8B,MAAM,CAAClF,IAAI,CAACmF,GAAG,CAAC,CAAC,EAAE,OAAO;YAAEjF,OAAO,EAAE,KAAK;YAAEC,KAAK,EAAE;UAAkC,CAAC;UACxG2E,OAAO,CAACK,GAAG,GAAGnF,IAAI,CAACmF,GAAG;QACxB;QACA,IAAInF,IAAI,CAACoF,QAAQ,EAAE;UACjB,IAAI,QAAQ,CAAChC,IAAI,CAAC8B,MAAM,CAAClF,IAAI,CAACoF,QAAQ,CAAC,CAAC,EAAE,OAAO;YAAElF,OAAO,EAAE,KAAK;YAAEC,KAAK,EAAE;UAAuC,CAAC;UAClH2E,OAAO,CAACM,QAAQ,GAAGpF,IAAI,CAACoF,QAAQ;QAClC;QAEA,MAAMpB,IAAI,GAAG,MAAMC,KAAK,CAAC,+BAA+B,EAAE;UACxDoB,MAAM,EAAE,MAAM;UACdC,OAAO,EAAE;YAAEC,aAAa,EAAE,UAAU3B,KAAK,CAACC,cAAc,EAAE;YAAE,cAAc,EAAE;UAAmB,CAAC;UAChGrB,IAAI,EAAEgD,IAAI,CAACC,SAAS,CAACX,OAAO;QAC9B,CAAC,CAAC;QACF,MAAMY,MAAM,GAAG,MAAM1B,IAAI,CAAC2B,IAAI,CAAC,CAAC;QAChC,IAAI,CAAC3B,IAAI,CAACE,EAAE,EAAE,OAAO;UAAEhE,OAAO,EAAE,KAAK;UAAEC,KAAK,EAAE,sBAAsBuF,MAAM,CAACzE,OAAO,IAAIuE,IAAI,CAACC,SAAS,CAACC,MAAM,CAAC;QAAG,CAAC;;QAEhH;QACA,MAAM3F,EAAE,CAACQ,IAAI,CAAC,aAAa,CAAC,CAACqF,MAAM,CAAC;UAAEC,QAAQ,EAAEzF,GAAG;UAAEkC,QAAQ,EAAEa,EAAE;UAAE5B,OAAO;UAAEuE,SAAS,EAAEJ,MAAM,CAACK;QAAG,CAAC,CAAC,CAACC,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;QAE5H,OAAO;UAAE9F,OAAO,EAAE,IAAI;UAAEc,IAAI,EAAE;YAAE+E,EAAE,EAAEL,MAAM,CAACK,EAAE;YAAE5C,EAAE;YAAE5B,OAAO;YAAEV,MAAM,EAAE;UAAO;QAAE,CAAC;MAChF;IACA,KAAK,eAAe;MAAE;QACpB,MAAMoF,YAAY,GAAGjG,IAAI,CAACkG,QAAkB;QAC5C,IAAI,CAACD,YAAY,EAAE,OAAO;UAAE/F,OAAO,EAAE,KAAK;UAAEC,KAAK,EAAE;QAAyB,CAAC;QAE7E,MAAM;UAAEa,IAAI,EAAEmF,GAAG;UAAEhG,KAAK,EAAEiG;QAAO,CAAC,GAAG,MAAMrG,EAAE,CAACQ,IAAI,CAAC,iBAAiB,CAAC,CAClEC,MAAM,CAAC,GAAG,CAAC,CACXC,EAAE,CAAC,MAAM,EAAEwF,YAAY,CAAC,CACxBI,EAAE,CAAC,eAAejG,GAAG,mBAAmB,CAAC,CACzCK,EAAE,CAAC,WAAW,EAAE,IAAI,CAAC,CACrBG,KAAK,CAAC,CAAC,CAAC,CACRc,MAAM,CAAC,CAAC;QACX,IAAI0E,MAAM,IAAI,CAACD,GAAG,EAAE,OAAO;UAAEjG,OAAO,EAAE,KAAK;UAAEC,KAAK,EAAE,aAAa8F,YAAY;QAAc,CAAC;QAE5F,MAAMK,KAAK,GAAItG,IAAI,CAACuG,aAAa,IAA+B,CAAC,CAAC;QAClE,IAAIC,WAAW,GAAGL,GAAG,CAACM,YAAY,IAAc,EAAE;QAClD,IAAIC,WAAW,GAAGP,GAAG,CAACQ,YAAY,IAAc,EAAE;QAClD,IAAIC,WAAW,GAAGT,GAAG,CAAC5E,OAAO,IAAc,EAAE;QAC7C,KAAK,MAAM,CAACsF,GAAG,EAAEC,GAAG,CAAC,IAAIC,MAAM,CAACC,OAAO,CAACV,KAAK,CAAC,EAAE;UAC9C,MAAMW,UAAU,GAAGJ,GAAG,CAAChC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC;UAC7D,MAAMqC,EAAE,GAAG,IAAIC,MAAM,CAAC,aAAaF,UAAU,YAAY,EAAE,GAAG,CAAC;UAC/DT,WAAW,GAAGA,WAAW,CAAC3B,OAAO,CAACqC,EAAE,EAAEJ,GAAG,CAAC;UAC1CJ,WAAW,GAAGA,WAAW,CAAC7B,OAAO,CAACqC,EAAE,EAAEJ,GAAG,CAAC;UAC1CF,WAAW,GAAGA,WAAW,CAAC/B,OAAO,CAACqC,EAAE,EAAEJ,GAAG,CAAC;QAC5C;QAEA,OAAOhH,WAAW,CAACC,EAAE,EAAE;UACrBM,MAAM,EAAE,MAAM;UACd8C,EAAE,EAAEnD,IAAI,CAACmD,EAAE;UACX5B,OAAO,EAAEqF,WAAW;UACpBtD,SAAS,EAAEkD,WAAW;UACtB/D,SAAS,EAAEiE,WAAW;UACtBnG,IAAI,EAAEP,IAAI,CAACO,IAAI;UACf0E,EAAE,EAAEjF,IAAI,CAACiF,EAAE;UACXE,GAAG,EAAEnF,IAAI,CAACmF;QACZ,CAAC,EAAElF,OAAO,CAAC;MACb;IACA,KAAK,MAAM;MAAE;QACX,IAAIK,CAAC,GAAGP,EAAE,CAACQ,IAAI,CAAC,aAAa,CAAC,CAC3BC,MAAM,CAAC,sDAAsD,CAAC,CAC9DC,EAAE,CAAC,UAAU,EAAEL,GAAG,CAAC,CAACM,KAAK,CAAC,YAAY,EAAE;UAAEC,SAAS,EAAE;QAAM,CAAC,CAAC;QAChE,IAAIX,IAAI,CAACmD,EAAE,EAAE;UAAE,MAAMiE,EAAE,GAAG5H,mBAAmB,CAACQ,IAAI,CAACmD,EAAY,CAAC;UAAE7C,CAAC,GAAGA,CAAC,CAAC+G,KAAK,CAAC,UAAU,EAAE,IAAID,EAAE,GAAG,CAAC;QAAE;QACtG,MAAM;UAAEpG,IAAI;UAAEb;QAAM,CAAC,GAAG,MAAMG,CAAC,CAACM,KAAK,CAACZ,IAAI,CAACY,KAAK,IAAc,EAAE,CAAC;QACjE,OAAOT,KAAK,GAAG;UAAED,OAAO,EAAE,KAAK;UAAEC,KAAK,EAAEA,KAAK,CAACc;QAAQ,CAAC,GAAG;UAAEf,OAAO,EAAE,IAAI;UAAEc;QAAK,CAAC;MACnF;IACA,KAAK,KAAK;MAAE;QACV,MAAM;UAAEA,IAAI;UAAEb;QAAM,CAAC,GAAG,MAAMJ,EAAE,CAACQ,IAAI,CAAC,aAAa,CAAC,CACjDC,MAAM,CAAC,GAAG,CAAC,CAACC,EAAE,CAAC,IAAI,EAAET,IAAI,CAACsH,QAAkB,CAAC,CAAC7G,EAAE,CAAC,UAAU,EAAEL,GAAG,CAAC,CAACsB,MAAM,CAAC,CAAC;QAC7E,OAAOvB,KAAK,GAAG;UAAED,OAAO,EAAE,KAAK;UAAEC,KAAK,EAAEA,KAAK,CAACc;QAAQ,CAAC,GAAG;UAAEf,OAAO,EAAE,IAAI;UAAEc;QAAK,CAAC;MACnF;IACA,KAAK,WAAW;MAAE;QAChB,MAAM;UAAEA,IAAI;UAAEb;QAAM,CAAC,GAAG,MAAMJ,EAAE,CAACQ,IAAI,CAAC,iBAAiB,CAAC,CACrDC,MAAM,CAAC,qFAAqF,CAAC,CAC7F6F,EAAE,CAAC,eAAejG,GAAG,mBAAmB,CAAC,CACzCK,EAAE,CAAC,WAAW,EAAE,IAAI,CAAC,CACrBC,KAAK,CAAC,MAAM,CAAC;QAChB,OAAOP,KAAK,GAAG;UAAED,OAAO,EAAE,KAAK;UAAEC,KAAK,EAAEA,KAAK,CAACc;QAAQ,CAAC,GAAG;UAAEf,OAAO,EAAE,IAAI;UAAEc;QAAK,CAAC;MACnF;IACA,KAAK,aAAa;MAAE;QAClB,IAAI,CAAChB,IAAI,CAACyB,SAAS,EAAE,OAAO;UAAEvB,OAAO,EAAE,KAAK;UAAEC,KAAK,EAAE;QAAqB,CAAC;QAC3E,IAAI,CAACH,IAAI,CAACwC,IAAI,EAAE,OAAO;UAAEtC,OAAO,EAAE,KAAK;UAAEC,KAAK,EAAE;QAA6B,CAAC;;QAE9E;QACA,IAAIH,IAAI,CAACmD,EAAE,IAAI,QAAQ,CAACC,IAAI,CAAC8B,MAAM,CAAClF,IAAI,CAACmD,EAAE,CAAC,CAAC,EAAE,OAAO;UAAEjD,OAAO,EAAE,KAAK;UAAEC,KAAK,EAAE;QAAkC,CAAC;QAClH,IAAIH,IAAI,CAACuB,OAAO,IAAI,QAAQ,CAAC6B,IAAI,CAAC8B,MAAM,CAAClF,IAAI,CAACuB,OAAO,CAAC,CAAC,EAAE,OAAO;UAAErB,OAAO,EAAE,KAAK;UAAEC,KAAK,EAAE;QAAsC,CAAC;QAChI,IAAIH,IAAI,CAACO,IAAI,IAAI,QAAQ,CAAC6C,IAAI,CAAC8B,MAAM,CAAClF,IAAI,CAACO,IAAI,CAAC,CAAC,EAAE,OAAO;UAAEL,OAAO,EAAE,KAAK;UAAEC,KAAK,EAAE;QAAmC,CAAC;QACvH,IAAIH,IAAI,CAACuH,WAAW,IAAI,QAAQ,CAACnE,IAAI,CAAC8B,MAAM,CAAClF,IAAI,CAACuH,WAAW,CAAC,CAAC,EAAE,OAAO;UAAErH,OAAO,EAAE,KAAK;UAAEC,KAAK,EAAE;QAA0C,CAAC;;QAE5I;QACA,MAAMqH,eAAe,GAAG,IAAItF,IAAI,CAACA,IAAI,CAACW,GAAG,CAAC,CAAC,GAAG,QAAQ,CAAC,CAACC,WAAW,CAAC,CAAC;QACrE,MAAM;UAAEC,KAAK,EAAE0E;QAAiB,CAAC,GAAG,MAAM1H,EAAE,CAACQ,IAAI,CAAC,aAAa,CAAC,CAC7DC,MAAM,CAAC,IAAI,EAAE;UAAEuC,KAAK,EAAE,OAAO;UAAEE,IAAI,EAAE;QAAK,CAAC,CAAC,CAC5CxC,EAAE,CAAC,UAAU,EAAEL,GAAG,CAAC,CACnB8C,GAAG,CAAC,YAAY,EAAEsE,eAAe,CAAC;QACrC,IAAI,CAACC,gBAAgB,IAAI,CAAC,KAAK,GAAG,EAAE;UAClC,OAAO;YAAEvH,OAAO,EAAE,KAAK;YAAEC,KAAK,EAAE;UAA6D,CAAC;QAChG;QAEA,MAAM;UAAEa,IAAI,EAAE4C;QAAM,CAAC,GAAG,MAAM7D,EAAE,CAACQ,IAAI,CAAC,QAAQ,CAAC,CAC5CC,MAAM,CAAC,gBAAgB,CAAC,CAACC,EAAE,CAAC,IAAI,EAAEL,GAAG,CAAC,CAACsB,MAAM,CAAC,CAAC;QAClD,IAAI,CAACkC,KAAK,EAAEC,cAAc,EAAE,OAAO;UAAE3D,OAAO,EAAE,KAAK;UAAEC,KAAK,EAAE;QAA8B,CAAC;QAC3F,IAAI;UACF,MAAM6D,IAAI,GAAG,MAAMC,KAAK,CAAC,+BAA+B,EAAE;YACxDoB,MAAM,EAAE,MAAM;YACdC,OAAO,EAAE;cAAEC,aAAa,EAAE,UAAU3B,KAAK,CAACC,cAAc,EAAE;cAAE,cAAc,EAAE;YAAmB,CAAC;YAChGrB,IAAI,EAAEgD,IAAI,CAACC,SAAS,CAAC;cACnBlF,IAAI,EAAEP,IAAI,CAACO,IAAI,IAAI,8BAA8B;cACjD4C,EAAE,EAAEnD,IAAI,CAACmD,EAAY;cACrB5B,OAAO,EAAEvB,IAAI,CAACuB,OAAO,IAAI,cAAcvB,IAAI,CAACyB,SAAS,EAAE;cACvDsD,IAAI,EAAE/E,IAAI,CAACwC,IAAc;cACzB,IAAIxC,IAAI,CAACuH,WAAW,GAAG;gBAAEjC,OAAO,EAAE;kBAAE,aAAa,EAAEtF,IAAI,CAACuH;gBAAY;cAAE,CAAC,GAAG,CAAC,CAAC;YAC9E,CAAC;UACH,CAAC,CAAC;UACF,MAAM7B,MAAM,GAAG,MAAM1B,IAAI,CAAC2B,IAAI,CAAC,CAAC;UAChC,IAAI,CAAC3B,IAAI,CAACE,EAAE,EAAE,OAAO;YAAEhE,OAAO,EAAE,KAAK;YAAEC,KAAK,EAAEuF,MAAM,CAACvF,KAAK,IAAI;UAAe,CAAC;;UAE9E;UACA,MAAMuH,YAAY,GAAI1H,IAAI,CAACuB,OAAO,IAAe,cAAcvB,IAAI,CAACyB,SAAS,EAAE;UAC/E,MAAM1B,EAAE,CAACQ,IAAI,CAAC,aAAa,CAAC,CAACqF,MAAM,CAAC;YAAEC,QAAQ,EAAEzF,GAAG;YAAEkC,QAAQ,EAAEtC,IAAI,CAACmD,EAAY;YAAE5B,OAAO,EAAEmG,YAAY;YAAE5B,SAAS,EAAEJ,MAAM,CAACK;UAAG,CAAC,CAAC,CAACC,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;UAEzJ,OAAO;YAAE9F,OAAO,EAAE,IAAI;YAAEc,IAAI,EAAE0E;UAAO,CAAC;QACxC,CAAC,CAAC,OAAOiC,GAAG,EAAE;UACZ,OAAO;YAAEzH,OAAO,EAAE,KAAK;YAAEC,KAAK,EAAE,iBAAiBwH,GAAG;UAAG,CAAC;QAC1D;MACF;IACA,KAAK,cAAc;MAAE;QACnB,MAAMC,OAAgC,GAAG,CAAC,CAAC;QAC3C,IAAI5H,IAAI,CAACa,MAAM,EAAE+G,OAAO,CAAC/G,MAAM,GAAGb,IAAI,CAACa,MAAM;QAC7C,IAAIb,IAAI,CAACe,QAAQ,EAAE6G,OAAO,CAAC7G,QAAQ,GAAGf,IAAI,CAACe,QAAQ;QACnD,IAAIf,IAAI,CAAC6H,MAAM,EAAED,OAAO,CAACE,SAAS,GAAG9H,IAAI,CAAC6H,MAAM;QAChD,IAAI7H,IAAI,CAAC+H,UAAU,EAAEH,OAAO,CAACG,UAAU,GAAG/H,IAAI,CAAC+H,UAAU;QACzD,MAAM;UAAE/G,IAAI;UAAEb;QAAM,CAAC,GAAG,MAAMJ,EAAE,CAACQ,IAAI,CAAC,eAAe,CAAC,CACnDyH,MAAM,CAACJ,OAAO,CAAC,CAACnH,EAAE,CAAC,IAAI,EAAET,IAAI,CAACyB,SAAmB,CAAC,CAAChB,EAAE,CAAC,UAAU,EAAEL,GAAG,CAAC,CAACI,MAAM,CAAC,CAAC,CAACkB,MAAM,CAAC,CAAC;QAC3F,OAAOvB,KAAK,GAAG;UAAED,OAAO,EAAE,KAAK;UAAEC,KAAK,EAAEA,KAAK,CAACc;QAAQ,CAAC,GAAG;UAAEf,OAAO,EAAE,IAAI;UAAEc;QAAK,CAAC;MACnF;IACA,KAAK,aAAa;MAAE;QAClB,MAAM;UAAEA,IAAI;UAAEb;QAAM,CAAC,GAAG,MAAMJ,EAAE,CAACQ,IAAI,CAAC,eAAe,CAAC,CACnDC,MAAM,CAAC,2BAA2B,CAAC,CAACC,EAAE,CAAC,UAAU,EAAEL,GAAG,CAAC,CAACQ,KAAK,CAAC,IAAI,CAAC;QACtE,IAAIT,KAAK,EAAE,OAAO;UAAED,OAAO,EAAE,KAAK;UAAEC,KAAK,EAAEA,KAAK,CAACc;QAAQ,CAAC;QAC1D,MAAMgH,KAAK,GAAG;UACZC,KAAK,EAAElH,IAAI,CAAC0B,MAAM;UAClByF,SAAS,EAAE1I,OAAO,CAACuB,IAAI,EAAE,QAAQ,CAAC;UAClCoH,UAAU,EAAE3I,OAAO,CAACuB,IAAI,EAAE,SAAS,CAAC;UACpCqH,WAAW,EAAE5I,OAAO,CAACuB,IAAI,EAAE,UAAU;QACvC,CAAC;QACD,OAAO;UAAEd,OAAO,EAAE,IAAI;UAAEc,IAAI,EAAEiH;QAAM,CAAC;MACvC;IACA,KAAK,iBAAiB;MAAE;QACtB,IAAI,CAACjI,IAAI,CAACsI,IAAI,EAAE,OAAO;UAAEpI,OAAO,EAAE,KAAK;UAAEC,KAAK,EAAE;QAAmB,CAAC;QACpE,IAAI,CAACH,IAAI,CAACuB,OAAO,EAAE,OAAO;UAAErB,OAAO,EAAE,KAAK;UAAEC,KAAK,EAAE;QAAsB,CAAC;QAC1E,MAAMoI,IAAI,GAAIvI,IAAI,CAACuI,IAAI,IAAgBvI,IAAI,CAACsI,IAAI,CAAY1D,WAAW,CAAC,CAAC,CAACC,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC,CAACA,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC;QAC3H,MAAM;UAAE7D,IAAI;UAAEb;QAAM,CAAC,GAAG,MAAMJ,EAAE,CAACQ,IAAI,CAAC,iBAAiB,CAAC,CAACqF,MAAM,CAAC;UAC9DC,QAAQ,EAAEzF,GAAG;UACbkI,IAAI,EAAEtI,IAAI,CAACsI,IAAc;UACzBC,IAAI;UACJhH,OAAO,EAAEvB,IAAI,CAACuB,OAAiB;UAC/BiH,QAAQ,EAAGxI,IAAI,CAACwI,QAAQ,IAAe,SAAS;UAChDC,WAAW,EAAGzI,IAAI,CAACyI,WAAW,IAAe,IAAI;UACjDhC,YAAY,EAAGzG,IAAI,CAACyG,YAAY,IAAe,IAAI;UACnDiC,YAAY,EAAG1I,IAAI,CAAC0I,YAAY,IAAe,IAAI;UACnD/B,YAAY,EAAG3G,IAAI,CAAC2G,YAAY,IAAe,IAAI;UACnDgC,SAAS,EAAE;QACb,CAAC,CAAC,CAACnI,MAAM,CAAC,+CAA+C,CAAC,CAACkB,MAAM,CAAC,CAAC;QACnE,IAAIvB,KAAK,EAAE,OAAO;UAAED,OAAO,EAAE,KAAK;UAAEC,KAAK,EAAEA,KAAK,CAACc;QAAQ,CAAC;QAC1D,OAAO;UAAEf,OAAO,EAAE,IAAI;UAAEc;QAAK,CAAC;MAChC;IACA,KAAK,iBAAiB;MAAE;QACtB,IAAI,CAAChB,IAAI,CAAC4I,WAAW,EAAE,OAAO;UAAE1I,OAAO,EAAE,KAAK;UAAEC,KAAK,EAAE;QAA0B,CAAC;QAClF,MAAMyH,OAAgC,GAAG,CAAC,CAAC;QAC3C,IAAI5H,IAAI,CAACsI,IAAI,KAAKO,SAAS,EAAEjB,OAAO,CAACU,IAAI,GAAGtI,IAAI,CAACsI,IAAI;QACrD,IAAItI,IAAI,CAACuI,IAAI,KAAKM,SAAS,EAAEjB,OAAO,CAACW,IAAI,GAAGvI,IAAI,CAACuI,IAAI;QACrD,IAAIvI,IAAI,CAACuB,OAAO,KAAKsH,SAAS,EAAEjB,OAAO,CAACrG,OAAO,GAAGvB,IAAI,CAACuB,OAAO;QAC9D,IAAIvB,IAAI,CAACwI,QAAQ,KAAKK,SAAS,EAAEjB,OAAO,CAACY,QAAQ,GAAGxI,IAAI,CAACwI,QAAQ;QACjE,IAAIxI,IAAI,CAACyI,WAAW,KAAKI,SAAS,EAAEjB,OAAO,CAACa,WAAW,GAAGzI,IAAI,CAACyI,WAAW;QAC1E,IAAIzI,IAAI,CAACyG,YAAY,KAAKoC,SAAS,EAAEjB,OAAO,CAACnB,YAAY,GAAGzG,IAAI,CAACyG,YAAY;QAC7E,IAAIzG,IAAI,CAAC0I,YAAY,KAAKG,SAAS,EAAEjB,OAAO,CAACc,YAAY,GAAG1I,IAAI,CAAC0I,YAAY;QAC7E,IAAI1I,IAAI,CAAC2G,YAAY,KAAKkC,SAAS,EAAEjB,OAAO,CAACjB,YAAY,GAAG3G,IAAI,CAAC2G,YAAY;QAC7E,IAAII,MAAM,CAAC+B,IAAI,CAAClB,OAAO,CAAC,CAAClF,MAAM,KAAK,CAAC,EAAE,OAAO;UAAExC,OAAO,EAAE,KAAK;UAAEC,KAAK,EAAE;QAAsB,CAAC;QAC9F,MAAM;UAAEa,IAAI;UAAEb;QAAM,CAAC,GAAG,MAAMJ,EAAE,CAACQ,IAAI,CAAC,iBAAiB,CAAC,CACrDyH,MAAM,CAACJ,OAAO,CAAC,CAACnH,EAAE,CAAC,IAAI,EAAET,IAAI,CAAC4I,WAAqB,CAAC,CAACnI,EAAE,CAAC,UAAU,EAAEL,GAAG,CAAC,CACxEI,MAAM,CAAC,+CAA+C,CAAC,CAACkB,MAAM,CAAC,CAAC;QACnE,IAAIvB,KAAK,EAAE,OAAO;UAAED,OAAO,EAAE,KAAK;UAAEC,KAAK,EAAEA,KAAK,CAACc;QAAQ,CAAC;QAC1D,OAAO;UAAEf,OAAO,EAAE,IAAI;UAAEc;QAAK,CAAC;MAChC;IACA,KAAK,iBAAiB;MAAE;QACtB,IAAI,CAAChB,IAAI,CAAC4I,WAAW,EAAE,OAAO;UAAE1I,OAAO,EAAE,KAAK;UAAEC,KAAK,EAAE;QAA0B,CAAC;QAClF,MAAM;UAAEa,IAAI;UAAEb;QAAM,CAAC,GAAG,MAAMJ,EAAE,CAACQ,IAAI,CAAC,iBAAiB,CAAC,CACrDyH,MAAM,CAAC;UAAEW,SAAS,EAAE;QAAM,CAAC,CAAC,CAAClI,EAAE,CAAC,IAAI,EAAET,IAAI,CAAC4I,WAAqB,CAAC,CAACnI,EAAE,CAAC,UAAU,EAAEL,GAAG,CAAC,CACrFI,MAAM,CAAC,UAAU,CAAC,CAACkB,MAAM,CAAC,CAAC;QAC9B,IAAIvB,KAAK,EAAE,OAAO;UAAED,OAAO,EAAE,KAAK;UAAEC,KAAK,EAAEA,KAAK,CAACc;QAAQ,CAAC;QAC1D,OAAO;UAAEf,OAAO,EAAE,IAAI;UAAEc,IAAI,EAAE;YAAE,GAAGA,IAAI;YAAE+H,OAAO,EAAE;UAAK;QAAE,CAAC;MAC5D;IACA;MACE,OAAO;QAAE7I,OAAO,EAAE,KAAK;QAAEC,KAAK,EAAE,yBAAyBH,IAAI,CAACK,MAAM;MAAkK,CAAC;EAC3O;AACF","ignoreList":[]}

package/dist/server/handlers/comms.js

@@ -4,33 +4,71 @@ import { applyGenerationRules, generateCannabinoidData, applyCalculations, runVa
 import { renderLayoutToPdf, renderHtmlToPdf, renderLabelToPdf } from "../lib/react-pdf-layout.js";
 import { renderCOAToPdf } from "../lib/coa-renderer.js";
 import QRCode from "qrcode";
-import { handleBrowser } from "./browser.js";
+import { createCanvas } from "@napi-rs/canvas";
 const MAX_ATTACHMENT_BYTES = 10 * 1024 * 1024; // 10MB per attachment
 const MAX_TOTAL_ATTACHMENT_BYTES = 25 * 1024 * 1024; // 25MB total
 const MAX_ATTACHMENT_COUNT = 10;
+const THUMB_HEIGHT = 400;
+class NodeCanvasFactory {
+  create(w, h) {
+    const canvas = createCanvas(w, h);
+    return {
+      canvas,
+      context: canvas.getContext("2d")
+    };
+  }
+  reset(cc, w, h) {
+    cc.canvas.width = w;
+    cc.canvas.height = h;
+  }
+  destroy(cc) {
+    cc.canvas.width = 0;
+    cc.canvas.height = 0;
+  }
+}
 
-/** Generate a PNG thumbnail for a PDF document via Playwright screenshot and store it in Supabase. */
+/** Generate a PNG thumbnail for a PDF document and store it in Supabase. */
 async function generateThumbnail(sb, docId, pdfUrl) {
-  // Wrap in Google Docs viewer — headless Chromium downloads raw PDFs instead of rendering them
-  const viewerUrl = `https://docs.google.com/gview?url=${encodeURIComponent(pdfUrl)}&embedded=true`;
-  const result = await handleBrowser(sb, {
-    action: "screenshot",
-    url: viewerUrl
+  const pdfjs = await import("pdfjs-dist/legacy/build/pdf.mjs");
+  const resp = await fetch(pdfUrl);
+  if (!resp.ok) return;
+  const data = new Uint8Array(await resp.arrayBuffer());
+  const pdf = await pdfjs.getDocument({
+    data,
+    useSystemFonts: true,
+    disableFontFace: true
+  }).promise;
+  const page = await pdf.getPage(1);
+  const vp = page.getViewport({
+    scale: 1
   });
-  const b64 = result.data?.screenshot_base64;
-  if (!b64) return;
-  const thumbBuffer = Buffer.from(b64, 'base64');
+  const scale = THUMB_HEIGHT / vp.height;
+  const svp = page.getViewport({
+    scale
+  });
+  const factory = new NodeCanvasFactory();
+  const {
+    canvas,
+    context
+  } = factory.create(Math.round(svp.width), Math.round(svp.height));
+  await page.render({
+    canvasContext: context,
+    viewport: svp,
+    canvasFactory: factory
+  }).promise;
+  const thumbBuffer = Buffer.from(canvas.toBuffer("image/png"));
+  pdf.destroy();
   const thumbPath = `thumbs/${docId}.png`;
-  await sb.storage.from('screenshots').upload(thumbPath, thumbBuffer, {
-    contentType: 'image/png',
+  await sb.storage.from("screenshots").upload(thumbPath, thumbBuffer, {
+    contentType: "image/png",
     upsert: true
   });
   const {
     data: thumbUrlData
-  } = sb.storage.from('screenshots').getPublicUrl(thumbPath);
-  await sb.from('store_documents').update({
+  } = sb.storage.from("screenshots").getPublicUrl(thumbPath);
+  await sb.from("store_documents").update({
     thumbnail_url: thumbUrlData.publicUrl
-  }).eq('id', docId);
+  }).eq("id", docId);
 }
 export async function handleEmail(sb, args, storeId) {
   if (!storeId) return {
@@ -586,7 +624,7 @@ export async function handleDocuments(sb, args, storeId) {
           success: false,
           error: insertErr.message
         };
-        if (fileUrl.endsWith('.pdf')) await generateThumbnail(sb, record.id, fileUrl).catch(() => {});
+        if (fileUrl.endsWith('.pdf')) await generateThumbnail(sb, record.id, fileUrl).catch(err => console.error("[thumbnail]", err.message));
         return {
           success: true,
           data: {
@@ -829,7 +867,7 @@ export async function handleDocuments(sb, args, storeId) {
           success: false,
           error: insertErr.message
         };
-        if (urlData.publicUrl.endsWith('.pdf')) await generateThumbnail(sb, record.id, urlData.publicUrl).catch(() => {});
+        if (urlData.publicUrl.endsWith('.pdf')) await generateThumbnail(sb, record.id, urlData.publicUrl).catch(err => console.error("[thumbnail]", err.message));
         return {
           success: true,
           data: {
@@ -966,7 +1004,7 @@ export async function handleDocuments(sb, args, storeId) {
           error: "template_id or template_slug required"
         };
 
-        // 1. Load pdf_template
+        // 1. Load pdf_template + store's custom QR domain
         let tplQuery = sb.from("pdf_templates").select("*").eq("is_active", true);
         if (templateId) tplQuery = tplQuery.eq("id", templateId);else tplQuery = tplQuery.eq("slug", templateSlug);
         tplQuery = tplQuery.or(`store_id.eq.${sid},store_id.is.null`);
@@ -978,6 +1016,10 @@ export async function handleDocuments(sb, args, storeId) {
           success: false,
           error: `Template not found: ${templateId || templateSlug}`
         };
+        const {
+          data: storeRow
+        } = await sb.from("stores").select("qr_domain").eq("id", sid).single();
+        const qrDomain = storeRow?.qr_domain || "whale-gateway.fly.dev";
 
         // 2. Optionally load document_profile + its client store
         let profileConfig = {};
@@ -1173,7 +1215,7 @@ export async function handleDocuments(sb, args, storeId) {
           // Generate a predictable QR code — will be registered in qr_codes table after document insert
           const _qrCodePrefix = `DOC-${Date.now().toString(36)}`;
           mergedData._qrCodePrefix = _qrCodePrefix;
-          const resolverUrl = `https://whale-gateway.fly.dev/q/${_qrCodePrefix}`;
+          const resolverUrl = `https://${qrDomain}/q/${_qrCodePrefix}`;
           mergedData._resolverUrl = resolverUrl;
           try {
             mergedData.qrCodeDataUrl = await QRCode.toDataURL(resolverUrl, {
@@ -1352,12 +1394,12 @@ export async function handleDocuments(sb, args, storeId) {
           success: false,
           error: insertErr.message
         };
-        await generateThumbnail(sb, record.id, urlData.publicUrl).catch(() => {});
+        await generateThumbnail(sb, record.id, urlData.publicUrl).catch(err => console.error("[thumbnail]", err.message));
 
         // 14. Create unified qr_codes record for scan tracking
         if (mergedData._coaVerificationUrl && mergedData._qrCodePrefix) {
           const qrCode = mergedData._qrCodePrefix;
-          const resolverUrl = `https://whale-gateway.fly.dev/q/${qrCode}`;
+          const resolverUrl = `https://${qrDomain}/q/${qrCode}`;
           sb.from("qr_codes").insert({
             store_id: sid,
             code: qrCode,