@open-mercato/core 0.10.1-develop.7717.1.2befe9c634 → 0.10.1-develop.7721.1.b5c4a00a68

package/dist/modules/staff/commands/timesheets-task-assignment.js

@@ -0,0 +1,270 @@
+import { z } from "zod";
+import { registerCommand } from "@open-mercato/shared/lib/commands";
+import { CrudHttpError } from "@open-mercato/shared/lib/crud/errors";
+import { resolveTranslations } from "@open-mercato/shared/lib/i18n/server";
+import { emitCrudSideEffects, emitCrudUndoSideEffects } from "@open-mercato/shared/lib/commands/helpers";
+import { findOneWithDecryption } from "@open-mercato/shared/lib/encryption/find";
+import { StaffTeamMember, StaffTimeTask, StaffTimeTaskStatus } from "../data/entities.js";
+import {
+  isActiveProjectAssigner,
+  resolveAssignmentGraceDaysFromContainer
+} from "../lib/time-tracking/projectAssignment.js";
+import {
+  TASK_LIST_CACHE_RESOURCE,
+  emitTaskAssigneeChanged,
+  taskCrudEvents,
+  taskCrudIndexer
+} from "./timesheets-tasks.js";
+import {
+  applyScopeToWhere,
+  commandActorScope,
+  ensureOrganizationScope,
+  ensureTenantScope,
+  extractUndoPayload
+} from "./shared.js";
+const staffTimeTaskAssignmentCommandIds = {
+  claim: "staff.timesheets.tasks.claim",
+  release: "staff.timesheets.tasks.release"
+};
+const TASK_ALREADY_CLAIMED_CODE = "task_already_claimed";
+const TASK_NOT_CLAIMABLE_CODE = "task_not_claimable";
+const TASK_NOT_ASSIGNER_CODE = "task_not_assigner";
+const TASK_NOT_ASSIGNEE_CODE = "task_not_assignee";
+const TASK_ASSIGNMENT_CHANGED_CODE = "task_assignment_changed";
+const assignmentInputSchema = z.object({ id: z.string().uuid() });
+function notFound(translate) {
+  return new CrudHttpError(404, {
+    error: translate("staff.time_tracking.tasks.errors.notFound", "Task not found or not accessible.")
+  });
+}
+function notClaimable(translate) {
+  return new CrudHttpError(422, {
+    code: TASK_NOT_CLAIMABLE_CODE,
+    error: translate("staff.timesheets.errors.taskNotClaimable", "A finished task cannot be claimed.")
+  });
+}
+function alreadyClaimed(translate) {
+  return new CrudHttpError(409, {
+    code: TASK_ALREADY_CLAIMED_CODE,
+    error: translate("staff.timesheets.errors.taskAlreadyClaimed", "Someone else already took this task.")
+  });
+}
+async function loadDoneStatusIds(em, task) {
+  const statuses = await em.find(
+    StaffTimeTaskStatus,
+    { timeProjectId: task.timeProjectId, tenantId: task.tenantId, organizationId: task.organizationId, isDone: true },
+    { fields: ["id"] }
+  );
+  return statuses.map((status) => status.id);
+}
+async function resolveActorStaffMemberId(em, ctx, task) {
+  const userId = ctx.auth?.sub ?? null;
+  if (!userId) return null;
+  const member = await findOneWithDecryption(
+    em,
+    StaffTeamMember,
+    { userId, tenantId: task.tenantId, organizationId: task.organizationId, deletedAt: null },
+    void 0,
+    { tenantId: task.tenantId, organizationId: task.organizationId }
+  );
+  return member?.id ?? null;
+}
+async function loadScopedTask(em, ctx, id, translate) {
+  const task = await em.findOne(
+    StaffTimeTask,
+    applyScopeToWhere({ id, deletedAt: null }, commandActorScope(ctx))
+  );
+  if (!task) throw notFound(translate);
+  ensureTenantScope(ctx, task.tenantId);
+  ensureOrganizationScope(ctx, task.organizationId);
+  return task;
+}
+async function emitTaskSideEffects(ctx, task, undo = false) {
+  const params = {
+    dataEngine: ctx.container.resolve("dataEngine"),
+    action: "updated",
+    entity: task,
+    identifiers: { id: task.id, organizationId: task.organizationId, tenantId: task.tenantId },
+    events: taskCrudEvents,
+    indexer: taskCrudIndexer
+  };
+  if (undo) await emitCrudUndoSideEffects(params);
+  else await emitCrudSideEffects(params);
+}
+function captureWrittenState(em, task, assigneeStaffMemberId, updatedAt) {
+  em.clear();
+  task.assigneeStaffMemberId = assigneeStaffMemberId;
+  task.updatedAt = updatedAt;
+  return task;
+}
+function toResult(task) {
+  return {
+    taskId: task.id,
+    tenantId: task.tenantId,
+    organizationId: task.organizationId,
+    timeProjectId: task.timeProjectId,
+    assigneeStaffMemberId: task.assigneeStaffMemberId ?? null,
+    updatedAt: task.updatedAt ? task.updatedAt.toISOString() : null
+  };
+}
+async function restoreAssignee(ctx, payload) {
+  const em = ctx.container.resolve("em").fork();
+  const where = {
+    id: payload.taskId,
+    tenantId: payload.tenantId,
+    organizationId: payload.organizationId,
+    assigneeStaffMemberId: payload.nextAssigneeStaffMemberId,
+    deletedAt: null
+  };
+  const current = await em.findOne(StaffTimeTask, where);
+  if (!current) return;
+  const now = /* @__PURE__ */ new Date();
+  const affected = await em.nativeUpdate(
+    StaffTimeTask,
+    where,
+    { assigneeStaffMemberId: payload.previousAssigneeStaffMemberId, updatedAt: now }
+  );
+  if (affected === 0) return;
+  const task = captureWrittenState(em, current, payload.previousAssigneeStaffMemberId, now);
+  await emitTaskSideEffects(ctx, task, true);
+  emitTaskAssigneeChanged(task, payload.nextAssigneeStaffMemberId, "manual", ctx.auth?.sub ?? null);
+}
+const claimTaskCommand = {
+  id: staffTimeTaskAssignmentCommandIds.claim,
+  async execute(rawInput, ctx) {
+    const parsed = assignmentInputSchema.parse(rawInput);
+    const { translate } = await resolveTranslations();
+    const em = ctx.container.resolve("em").fork();
+    const task = await loadScopedTask(em, ctx, parsed.id, translate);
+    const scope = { tenantId: task.tenantId, organizationId: task.organizationId };
+    const staffMemberId = await resolveActorStaffMemberId(em, ctx, task);
+    const graceDays = await resolveAssignmentGraceDaysFromContainer(ctx.container, task.tenantId);
+    const isAssigner = staffMemberId ? await isActiveProjectAssigner(em, scope, task.timeProjectId, staffMemberId, { graceDays }) : false;
+    if (!staffMemberId || !isAssigner) {
+      throw new CrudHttpError(403, {
+        code: TASK_NOT_ASSIGNER_CODE,
+        error: translate("staff.timesheets.errors.notAssigner", "Only active assigners of this project can claim tasks.")
+      });
+    }
+    const doneStatusIds = await loadDoneStatusIds(em, task);
+    if (doneStatusIds.includes(task.taskStatusId)) throw notClaimable(translate);
+    if (task.assigneeStaffMemberId) throw alreadyClaimed(translate);
+    const now = /* @__PURE__ */ new Date();
+    const affected = await em.nativeUpdate(
+      StaffTimeTask,
+      {
+        id: task.id,
+        tenantId: task.tenantId,
+        organizationId: task.organizationId,
+        assigneeStaffMemberId: null,
+        deletedAt: null,
+        ...doneStatusIds.length > 0 ? { taskStatusId: { $nin: doneStatusIds } } : {}
+      },
+      { assigneeStaffMemberId: staffMemberId, updatedAt: now }
+    );
+    if (affected === 0) {
+      em.clear();
+      const current = await em.findOne(StaffTimeTask, { id: task.id, tenantId: task.tenantId, organizationId: task.organizationId, deletedAt: null });
+      if (!current) throw notFound(translate);
+      if (!current.assigneeStaffMemberId && doneStatusIds.includes(current.taskStatusId)) throw notClaimable(translate);
+      throw alreadyClaimed(translate);
+    }
+    const claimed = captureWrittenState(em, task, staffMemberId, now);
+    await emitTaskSideEffects(ctx, claimed);
+    emitTaskAssigneeChanged(claimed, null, "claim", ctx.auth?.sub ?? null);
+    return toResult(claimed);
+  },
+  buildLog: async ({ result }) => {
+    const { translate } = await resolveTranslations();
+    return {
+      actionLabel: translate("staff.audit.timesheets.tasks.claim", "Claim task"),
+      resourceKind: "staff.timesheets.task",
+      resourceId: result.taskId,
+      tenantId: result.tenantId,
+      organizationId: result.organizationId,
+      context: { cacheAliases: [TASK_LIST_CACHE_RESOURCE] },
+      payload: {
+        undo: {
+          taskId: result.taskId,
+          tenantId: result.tenantId,
+          organizationId: result.organizationId,
+          previousAssigneeStaffMemberId: null,
+          nextAssigneeStaffMemberId: result.assigneeStaffMemberId
+        }
+      }
+    };
+  },
+  undo: async ({ logEntry, ctx }) => {
+    const payload = extractUndoPayload(logEntry);
+    if (!payload?.taskId) return;
+    await restoreAssignee(ctx, payload);
+  }
+};
+const releaseTaskCommand = {
+  id: staffTimeTaskAssignmentCommandIds.release,
+  async execute(rawInput, ctx) {
+    const parsed = assignmentInputSchema.parse(rawInput);
+    const { translate } = await resolveTranslations();
+    const em = ctx.container.resolve("em").fork();
+    const task = await loadScopedTask(em, ctx, parsed.id, translate);
+    const staffMemberId = await resolveActorStaffMemberId(em, ctx, task);
+    if (!staffMemberId || task.assigneeStaffMemberId !== staffMemberId) {
+      throw new CrudHttpError(403, {
+        code: TASK_NOT_ASSIGNEE_CODE,
+        error: translate("staff.timesheets.errors.notAssignee", "Only the current assignee can release this task.")
+      });
+    }
+    const now = /* @__PURE__ */ new Date();
+    const affected = await em.nativeUpdate(
+      StaffTimeTask,
+      { id: task.id, tenantId: task.tenantId, organizationId: task.organizationId, assigneeStaffMemberId: staffMemberId, deletedAt: null },
+      { assigneeStaffMemberId: null, updatedAt: now }
+    );
+    if (affected === 0) {
+      throw new CrudHttpError(409, {
+        code: TASK_ASSIGNMENT_CHANGED_CODE,
+        error: translate("staff.timesheets.errors.taskChanged", "The task changed while you were releasing it. Refresh and try again.")
+      });
+    }
+    const released = captureWrittenState(em, task, null, now);
+    await emitTaskSideEffects(ctx, released);
+    emitTaskAssigneeChanged(released, staffMemberId, "release", ctx.auth?.sub ?? null);
+    return { ...toResult(released), previousAssigneeStaffMemberId: staffMemberId };
+  },
+  buildLog: async ({ result }) => {
+    const { translate } = await resolveTranslations();
+    return {
+      actionLabel: translate("staff.audit.timesheets.tasks.release", "Release task"),
+      resourceKind: "staff.timesheets.task",
+      resourceId: result.taskId,
+      tenantId: result.tenantId,
+      organizationId: result.organizationId,
+      context: { cacheAliases: [TASK_LIST_CACHE_RESOURCE] },
+      payload: {
+        undo: {
+          taskId: result.taskId,
+          tenantId: result.tenantId,
+          organizationId: result.organizationId,
+          previousAssigneeStaffMemberId: result.previousAssigneeStaffMemberId,
+          nextAssigneeStaffMemberId: null
+        }
+      }
+    };
+  },
+  undo: async ({ logEntry, ctx }) => {
+    const payload = extractUndoPayload(logEntry);
+    if (!payload?.taskId) return;
+    await restoreAssignee(ctx, payload);
+  }
+};
+registerCommand(claimTaskCommand);
+registerCommand(releaseTaskCommand);
+export {
+  TASK_ALREADY_CLAIMED_CODE,
+  TASK_ASSIGNMENT_CHANGED_CODE,
+  TASK_NOT_ASSIGNEE_CODE,
+  TASK_NOT_ASSIGNER_CODE,
+  TASK_NOT_CLAIMABLE_CODE,
+  staffTimeTaskAssignmentCommandIds
+};
+//# sourceMappingURL=timesheets-task-assignment.js.map

package/dist/modules/staff/commands/timesheets-task-assignment.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/staff/commands/timesheets-task-assignment.ts"],
+  "sourcesContent": ["import { z } from 'zod'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport type { CommandHandler, CommandRuntimeContext } from '@open-mercato/shared/lib/commands'\nimport { registerCommand } from '@open-mercato/shared/lib/commands'\nimport { CrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { emitCrudSideEffects, emitCrudUndoSideEffects } from '@open-mercato/shared/lib/commands/helpers'\nimport type { DataEngine } from '@open-mercato/shared/lib/data/engine'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { StaffTeamMember, StaffTimeTask, StaffTimeTaskStatus } from '../data/entities'\nimport {\n  isActiveProjectAssigner,\n  resolveAssignmentGraceDaysFromContainer,\n} from '../lib/time-tracking/projectAssignment'\nimport {\n  TASK_LIST_CACHE_RESOURCE,\n  emitTaskAssigneeChanged,\n  taskCrudEvents,\n  taskCrudIndexer,\n} from './timesheets-tasks'\nimport {\n  applyScopeToWhere,\n  commandActorScope,\n  ensureOrganizationScope,\n  ensureTenantScope,\n  extractUndoPayload,\n} from './shared'\n\nexport const staffTimeTaskAssignmentCommandIds = {\n  claim: 'staff.timesheets.tasks.claim',\n  release: 'staff.timesheets.tasks.release',\n} as const\n\nexport const TASK_ALREADY_CLAIMED_CODE = 'task_already_claimed'\nexport const TASK_NOT_CLAIMABLE_CODE = 'task_not_claimable'\nexport const TASK_NOT_ASSIGNER_CODE = 'task_not_assigner'\nexport const TASK_NOT_ASSIGNEE_CODE = 'task_not_assignee'\nexport const TASK_ASSIGNMENT_CHANGED_CODE = 'task_assignment_changed'\n\nconst assignmentInputSchema = z.object({ id: z.string().uuid() })\n\nexport type StaffTimeTaskAssignmentInput = z.infer<typeof assignmentInputSchema>\n\nexport type StaffTimeTaskAssignmentResult = {\n  taskId: string\n  tenantId: string\n  organizationId: string\n  timeProjectId: string\n  assigneeStaffMemberId: string | null\n  updatedAt: string | null\n}\n\ntype AssignmentUndoPayload = {\n  taskId: string\n  tenantId: string\n  organizationId: string\n  previousAssigneeStaffMemberId: string | null\n  nextAssigneeStaffMemberId: string | null\n}\n\ntype Translate = (key: string, fallback: string) => string\n\nfunction notFound(translate: Translate): CrudHttpError {\n  return new CrudHttpError(404, {\n    error: translate('staff.time_tracking.tasks.errors.notFound', 'Task not found or not accessible.'),\n  })\n}\n\nfunction notClaimable(translate: Translate): CrudHttpError {\n  return new CrudHttpError(422, {\n    code: TASK_NOT_CLAIMABLE_CODE,\n    error: translate('staff.timesheets.errors.taskNotClaimable', 'A finished task cannot be claimed.'),\n  })\n}\n\nfunction alreadyClaimed(translate: Translate): CrudHttpError {\n  return new CrudHttpError(409, {\n    code: TASK_ALREADY_CLAIMED_CODE,\n    error: translate('staff.timesheets.errors.taskAlreadyClaimed', 'Someone else already took this task.'),\n  })\n}\n\nasync function loadDoneStatusIds(em: EntityManager, task: StaffTimeTask): Promise<string[]> {\n  const statuses = await em.find(\n    StaffTimeTaskStatus,\n    { timeProjectId: task.timeProjectId, tenantId: task.tenantId, organizationId: task.organizationId, isDone: true },\n    { fields: ['id'] },\n  )\n  return statuses.map((status) => status.id)\n}\n\nasync function resolveActorStaffMemberId(em: EntityManager, ctx: CommandRuntimeContext, task: StaffTimeTask): Promise<string | null> {\n  const userId = ctx.auth?.sub ?? null\n  if (!userId) return null\n  const member = await findOneWithDecryption(\n    em,\n    StaffTeamMember,\n    { userId, tenantId: task.tenantId, organizationId: task.organizationId, deletedAt: null },\n    undefined,\n    { tenantId: task.tenantId, organizationId: task.organizationId },\n  )\n  return member?.id ?? null\n}\n\nasync function loadScopedTask(em: EntityManager, ctx: CommandRuntimeContext, id: string, translate: Translate): Promise<StaffTimeTask> {\n  const task = await em.findOne(\n    StaffTimeTask,\n    applyScopeToWhere<StaffTimeTask>({ id, deletedAt: null }, commandActorScope(ctx)),\n  )\n  if (!task) throw notFound(translate)\n  ensureTenantScope(ctx, task.tenantId)\n  ensureOrganizationScope(ctx, task.organizationId)\n  return task\n}\n\nasync function emitTaskSideEffects(ctx: CommandRuntimeContext, task: StaffTimeTask, undo = false): Promise<void> {\n  const params = {\n    dataEngine: ctx.container.resolve('dataEngine') as DataEngine,\n    action: 'updated' as const,\n    entity: task,\n    identifiers: { id: task.id, organizationId: task.organizationId, tenantId: task.tenantId },\n    events: taskCrudEvents,\n    indexer: taskCrudIndexer,\n  }\n  if (undo) await emitCrudUndoSideEffects(params)\n  else await emitCrudSideEffects(params)\n}\n\n/**\n * The conditional UPDATE is the only moment this writer owns the row, so the outcome is\n * built from what it wrote rather than re-read: a later writer may already have replaced\n * the assignee, and reporting or undoing their value would be wrong.\n */\nfunction captureWrittenState(\n  em: EntityManager,\n  task: StaffTimeTask,\n  assigneeStaffMemberId: string | null,\n  updatedAt: Date,\n): StaffTimeTask {\n  em.clear()\n  task.assigneeStaffMemberId = assigneeStaffMemberId\n  task.updatedAt = updatedAt\n  return task\n}\n\nfunction toResult(task: StaffTimeTask): StaffTimeTaskAssignmentResult {\n  return {\n    taskId: task.id,\n    tenantId: task.tenantId,\n    organizationId: task.organizationId,\n    timeProjectId: task.timeProjectId,\n    assigneeStaffMemberId: task.assigneeStaffMemberId ?? null,\n    updatedAt: task.updatedAt ? task.updatedAt.toISOString() : null,\n  }\n}\n\nasync function restoreAssignee(\n  ctx: CommandRuntimeContext,\n  payload: AssignmentUndoPayload,\n): Promise<void> {\n  const em = (ctx.container.resolve('em') as EntityManager).fork()\n  const where = {\n    id: payload.taskId,\n    tenantId: payload.tenantId,\n    organizationId: payload.organizationId,\n    assigneeStaffMemberId: payload.nextAssigneeStaffMemberId,\n    deletedAt: null,\n  }\n  const current = await em.findOne(StaffTimeTask, where)\n  if (!current) return\n  const now = new Date()\n  const affected = await em.nativeUpdate(\n    StaffTimeTask,\n    where,\n    { assigneeStaffMemberId: payload.previousAssigneeStaffMemberId, updatedAt: now },\n  )\n  if (affected === 0) return\n  const task = captureWrittenState(em, current, payload.previousAssigneeStaffMemberId, now)\n  await emitTaskSideEffects(ctx, task, true)\n  emitTaskAssigneeChanged(task, payload.nextAssigneeStaffMemberId, 'manual', ctx.auth?.sub ?? null)\n}\n\nconst claimTaskCommand: CommandHandler<StaffTimeTaskAssignmentInput, StaffTimeTaskAssignmentResult> = {\n  id: staffTimeTaskAssignmentCommandIds.claim,\n  async execute(rawInput, ctx) {\n    const parsed = assignmentInputSchema.parse(rawInput)\n    const { translate } = await resolveTranslations()\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n    const task = await loadScopedTask(em, ctx, parsed.id, translate)\n    const scope = { tenantId: task.tenantId, organizationId: task.organizationId }\n\n    const staffMemberId = await resolveActorStaffMemberId(em, ctx, task)\n    const graceDays = await resolveAssignmentGraceDaysFromContainer(ctx.container, task.tenantId)\n    const isAssigner = staffMemberId\n      ? await isActiveProjectAssigner(em, scope, task.timeProjectId, staffMemberId, { graceDays })\n      : false\n    if (!staffMemberId || !isAssigner) {\n      throw new CrudHttpError(403, {\n        code: TASK_NOT_ASSIGNER_CODE,\n        error: translate('staff.timesheets.errors.notAssigner', 'Only active assigners of this project can claim tasks.'),\n      })\n    }\n\n    const doneStatusIds = await loadDoneStatusIds(em, task)\n    if (doneStatusIds.includes(task.taskStatusId)) throw notClaimable(translate)\n    if (task.assigneeStaffMemberId) throw alreadyClaimed(translate)\n\n    const now = new Date()\n    const affected = await em.nativeUpdate(\n      StaffTimeTask,\n      {\n        id: task.id,\n        tenantId: task.tenantId,\n        organizationId: task.organizationId,\n        assigneeStaffMemberId: null,\n        deletedAt: null,\n        ...(doneStatusIds.length > 0 ? { taskStatusId: { $nin: doneStatusIds } } : {}),\n      },\n      { assigneeStaffMemberId: staffMemberId, updatedAt: now },\n    )\n    if (affected === 0) {\n      em.clear()\n      const current = await em.findOne(StaffTimeTask, { id: task.id, tenantId: task.tenantId, organizationId: task.organizationId, deletedAt: null })\n      if (!current) throw notFound(translate)\n      if (!current.assigneeStaffMemberId && doneStatusIds.includes(current.taskStatusId)) throw notClaimable(translate)\n      throw alreadyClaimed(translate)\n    }\n    const claimed = captureWrittenState(em, task, staffMemberId, now)\n    await emitTaskSideEffects(ctx, claimed)\n    emitTaskAssigneeChanged(claimed, null, 'claim', ctx.auth?.sub ?? null)\n    return toResult(claimed)\n  },\n  buildLog: async ({ result }) => {\n    const { translate } = await resolveTranslations()\n    return {\n      actionLabel: translate('staff.audit.timesheets.tasks.claim', 'Claim task'),\n      resourceKind: 'staff.timesheets.task',\n      resourceId: result.taskId,\n      tenantId: result.tenantId,\n      organizationId: result.organizationId,\n      context: { cacheAliases: [TASK_LIST_CACHE_RESOURCE] },\n      payload: {\n        undo: {\n          taskId: result.taskId,\n          tenantId: result.tenantId,\n          organizationId: result.organizationId,\n          previousAssigneeStaffMemberId: null,\n          nextAssigneeStaffMemberId: result.assigneeStaffMemberId,\n        } satisfies AssignmentUndoPayload,\n      },\n    }\n  },\n  undo: async ({ logEntry, ctx }) => {\n    const payload = extractUndoPayload<AssignmentUndoPayload>(logEntry)\n    if (!payload?.taskId) return\n    await restoreAssignee(ctx, payload)\n  },\n}\n\nconst releaseTaskCommand: CommandHandler<StaffTimeTaskAssignmentInput, StaffTimeTaskAssignmentResult & { previousAssigneeStaffMemberId: string | null }> = {\n  id: staffTimeTaskAssignmentCommandIds.release,\n  async execute(rawInput, ctx) {\n    const parsed = assignmentInputSchema.parse(rawInput)\n    const { translate } = await resolveTranslations()\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n    const task = await loadScopedTask(em, ctx, parsed.id, translate)\n    const staffMemberId = await resolveActorStaffMemberId(em, ctx, task)\n    if (!staffMemberId || task.assigneeStaffMemberId !== staffMemberId) {\n      throw new CrudHttpError(403, {\n        code: TASK_NOT_ASSIGNEE_CODE,\n        error: translate('staff.timesheets.errors.notAssignee', 'Only the current assignee can release this task.'),\n      })\n    }\n    const now = new Date()\n    const affected = await em.nativeUpdate(\n      StaffTimeTask,\n      { id: task.id, tenantId: task.tenantId, organizationId: task.organizationId, assigneeStaffMemberId: staffMemberId, deletedAt: null },\n      { assigneeStaffMemberId: null, updatedAt: now },\n    )\n    if (affected === 0) {\n      throw new CrudHttpError(409, {\n        code: TASK_ASSIGNMENT_CHANGED_CODE,\n        error: translate('staff.timesheets.errors.taskChanged', 'The task changed while you were releasing it. Refresh and try again.'),\n      })\n    }\n    const released = captureWrittenState(em, task, null, now)\n    await emitTaskSideEffects(ctx, released)\n    emitTaskAssigneeChanged(released, staffMemberId, 'release', ctx.auth?.sub ?? null)\n    return { ...toResult(released), previousAssigneeStaffMemberId: staffMemberId }\n  },\n  buildLog: async ({ result }) => {\n    const { translate } = await resolveTranslations()\n    return {\n      actionLabel: translate('staff.audit.timesheets.tasks.release', 'Release task'),\n      resourceKind: 'staff.timesheets.task',\n      resourceId: result.taskId,\n      tenantId: result.tenantId,\n      organizationId: result.organizationId,\n      context: { cacheAliases: [TASK_LIST_CACHE_RESOURCE] },\n      payload: {\n        undo: {\n          taskId: result.taskId,\n          tenantId: result.tenantId,\n          organizationId: result.organizationId,\n          previousAssigneeStaffMemberId: result.previousAssigneeStaffMemberId,\n          nextAssigneeStaffMemberId: null,\n        } satisfies AssignmentUndoPayload,\n      },\n    }\n  },\n  undo: async ({ logEntry, ctx }) => {\n    const payload = extractUndoPayload<AssignmentUndoPayload>(logEntry)\n    if (!payload?.taskId) return\n    await restoreAssignee(ctx, payload)\n  },\n}\n\nregisterCommand(claimTaskCommand)\nregisterCommand(releaseTaskCommand)\n"],
+  "mappings": "AAAA,SAAS,SAAS;AAGlB,SAAS,uBAAuB;AAChC,SAAS,qBAAqB;AAC9B,SAAS,2BAA2B;AACpC,SAAS,qBAAqB,+BAA+B;AAE7D,SAAS,6BAA6B;AACtC,SAAS,iBAAiB,eAAe,2BAA2B;AACpE;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEA,MAAM,oCAAoC;AAAA,EAC/C,OAAO;AAAA,EACP,SAAS;AACX;AAEO,MAAM,4BAA4B;AAClC,MAAM,0BAA0B;AAChC,MAAM,yBAAyB;AAC/B,MAAM,yBAAyB;AAC/B,MAAM,+BAA+B;AAE5C,MAAM,wBAAwB,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAuBhE,SAAS,SAAS,WAAqC;AACrD,SAAO,IAAI,cAAc,KAAK;AAAA,IAC5B,OAAO,UAAU,6CAA6C,mCAAmC;AAAA,EACnG,CAAC;AACH;AAEA,SAAS,aAAa,WAAqC;AACzD,SAAO,IAAI,cAAc,KAAK;AAAA,IAC5B,MAAM;AAAA,IACN,OAAO,UAAU,4CAA4C,oCAAoC;AAAA,EACnG,CAAC;AACH;AAEA,SAAS,eAAe,WAAqC;AAC3D,SAAO,IAAI,cAAc,KAAK;AAAA,IAC5B,MAAM;AAAA,IACN,OAAO,UAAU,8CAA8C,sCAAsC;AAAA,EACvG,CAAC;AACH;AAEA,eAAe,kBAAkB,IAAmB,MAAwC;AAC1F,QAAM,WAAW,MAAM,GAAG;AAAA,IACxB;AAAA,IACA,EAAE,eAAe,KAAK,eAAe,UAAU,KAAK,UAAU,gBAAgB,KAAK,gBAAgB,QAAQ,KAAK;AAAA,IAChH,EAAE,QAAQ,CAAC,IAAI,EAAE;AAAA,EACnB;AACA,SAAO,SAAS,IAAI,CAAC,WAAW,OAAO,EAAE;AAC3C;AAEA,eAAe,0BAA0B,IAAmB,KAA4B,MAA6C;AACnI,QAAM,SAAS,IAAI,MAAM,OAAO;AAChC,MAAI,CAAC,OAAQ,QAAO;AACpB,QAAM,SAAS,MAAM;AAAA,IACnB;AAAA,IACA;AAAA,IACA,EAAE,QAAQ,UAAU,KAAK,UAAU,gBAAgB,KAAK,gBAAgB,WAAW,KAAK;AAAA,IACxF;AAAA,IACA,EAAE,UAAU,KAAK,UAAU,gBAAgB,KAAK,eAAe;AAAA,EACjE;AACA,SAAO,QAAQ,MAAM;AACvB;AAEA,eAAe,eAAe,IAAmB,KAA4B,IAAY,WAA8C;AACrI,QAAM,OAAO,MAAM,GAAG;AAAA,IACpB;AAAA,IACA,kBAAiC,EAAE,IAAI,WAAW,KAAK,GAAG,kBAAkB,GAAG,CAAC;AAAA,EAClF;AACA,MAAI,CAAC,KAAM,OAAM,SAAS,SAAS;AACnC,oBAAkB,KAAK,KAAK,QAAQ;AACpC,0BAAwB,KAAK,KAAK,cAAc;AAChD,SAAO;AACT;AAEA,eAAe,oBAAoB,KAA4B,MAAqB,OAAO,OAAsB;AAC/G,QAAM,SAAS;AAAA,IACb,YAAY,IAAI,UAAU,QAAQ,YAAY;AAAA,IAC9C,QAAQ;AAAA,IACR,QAAQ;AAAA,IACR,aAAa,EAAE,IAAI,KAAK,IAAI,gBAAgB,KAAK,gBAAgB,UAAU,KAAK,SAAS;AAAA,IACzF,QAAQ;AAAA,IACR,SAAS;AAAA,EACX;AACA,MAAI,KAAM,OAAM,wBAAwB,MAAM;AAAA,MACzC,OAAM,oBAAoB,MAAM;AACvC;AAOA,SAAS,oBACP,IACA,MACA,uBACA,WACe;AACf,KAAG,MAAM;AACT,OAAK,wBAAwB;AAC7B,OAAK,YAAY;AACjB,SAAO;AACT;AAEA,SAAS,SAAS,MAAoD;AACpE,SAAO;AAAA,IACL,QAAQ,KAAK;AAAA,IACb,UAAU,KAAK;AAAA,IACf,gBAAgB,KAAK;AAAA,IACrB,eAAe,KAAK;AAAA,IACpB,uBAAuB,KAAK,yBAAyB;AAAA,IACrD,WAAW,KAAK,YAAY,KAAK,UAAU,YAAY,IAAI;AAAA,EAC7D;AACF;AAEA,eAAe,gBACb,KACA,SACe;AACf,QAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,QAAM,QAAQ;AAAA,IACZ,IAAI,QAAQ;AAAA,IACZ,UAAU,QAAQ;AAAA,IAClB,gBAAgB,QAAQ;AAAA,IACxB,uBAAuB,QAAQ;AAAA,IAC/B,WAAW;AAAA,EACb;AACA,QAAM,UAAU,MAAM,GAAG,QAAQ,eAAe,KAAK;AACrD,MAAI,CAAC,QAAS;AACd,QAAM,MAAM,oBAAI,KAAK;AACrB,QAAM,WAAW,MAAM,GAAG;AAAA,IACxB;AAAA,IACA;AAAA,IACA,EAAE,uBAAuB,QAAQ,+BAA+B,WAAW,IAAI;AAAA,EACjF;AACA,MAAI,aAAa,EAAG;AACpB,QAAM,OAAO,oBAAoB,IAAI,SAAS,QAAQ,+BAA+B,GAAG;AACxF,QAAM,oBAAoB,KAAK,MAAM,IAAI;AACzC,0BAAwB,MAAM,QAAQ,2BAA2B,UAAU,IAAI,MAAM,OAAO,IAAI;AAClG;AAEA,MAAM,mBAAgG;AAAA,EACpG,IAAI,kCAAkC;AAAA,EACtC,MAAM,QAAQ,UAAU,KAAK;AAC3B,UAAM,SAAS,sBAAsB,MAAM,QAAQ;AACnD,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,UAAM,OAAO,MAAM,eAAe,IAAI,KAAK,OAAO,IAAI,SAAS;AAC/D,UAAM,QAAQ,EAAE,UAAU,KAAK,UAAU,gBAAgB,KAAK,eAAe;AAE7E,UAAM,gBAAgB,MAAM,0BAA0B,IAAI,KAAK,IAAI;AACnE,UAAM,YAAY,MAAM,wCAAwC,IAAI,WAAW,KAAK,QAAQ;AAC5F,UAAM,aAAa,gBACf,MAAM,wBAAwB,IAAI,OAAO,KAAK,eAAe,eAAe,EAAE,UAAU,CAAC,IACzF;AACJ,QAAI,CAAC,iBAAiB,CAAC,YAAY;AACjC,YAAM,IAAI,cAAc,KAAK;AAAA,QAC3B,MAAM;AAAA,QACN,OAAO,UAAU,uCAAuC,wDAAwD;AAAA,MAClH,CAAC;AAAA,IACH;AAEA,UAAM,gBAAgB,MAAM,kBAAkB,IAAI,IAAI;AACtD,QAAI,cAAc,SAAS,KAAK,YAAY,EAAG,OAAM,aAAa,SAAS;AAC3E,QAAI,KAAK,sBAAuB,OAAM,eAAe,SAAS;AAE9D,UAAM,MAAM,oBAAI,KAAK;AACrB,UAAM,WAAW,MAAM,GAAG;AAAA,MACxB;AAAA,MACA;AAAA,QACE,IAAI,KAAK;AAAA,QACT,UAAU,KAAK;AAAA,QACf,gBAAgB,KAAK;AAAA,QACrB,uBAAuB;AAAA,QACvB,WAAW;AAAA,QACX,GAAI,cAAc,SAAS,IAAI,EAAE,cAAc,EAAE,MAAM,cAAc,EAAE,IAAI,CAAC;AAAA,MAC9E;AAAA,MACA,EAAE,uBAAuB,eAAe,WAAW,IAAI;AAAA,IACzD;AACA,QAAI,aAAa,GAAG;AAClB,SAAG,MAAM;AACT,YAAM,UAAU,MAAM,GAAG,QAAQ,eAAe,EAAE,IAAI,KAAK,IAAI,UAAU,KAAK,UAAU,gBAAgB,KAAK,gBAAgB,WAAW,KAAK,CAAC;AAC9I,UAAI,CAAC,QAAS,OAAM,SAAS,SAAS;AACtC,UAAI,CAAC,QAAQ,yBAAyB,cAAc,SAAS,QAAQ,YAAY,EAAG,OAAM,aAAa,SAAS;AAChH,YAAM,eAAe,SAAS;AAAA,IAChC;AACA,UAAM,UAAU,oBAAoB,IAAI,MAAM,eAAe,GAAG;AAChE,UAAM,oBAAoB,KAAK,OAAO;AACtC,4BAAwB,SAAS,MAAM,SAAS,IAAI,MAAM,OAAO,IAAI;AACrE,WAAO,SAAS,OAAO;AAAA,EACzB;AAAA,EACA,UAAU,OAAO,EAAE,OAAO,MAAM;AAC9B,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,WAAO;AAAA,MACL,aAAa,UAAU,sCAAsC,YAAY;AAAA,MACzE,cAAc;AAAA,MACd,YAAY,OAAO;AAAA,MACnB,UAAU,OAAO;AAAA,MACjB,gBAAgB,OAAO;AAAA,MACvB,SAAS,EAAE,cAAc,CAAC,wBAAwB,EAAE;AAAA,MACpD,SAAS;AAAA,QACP,MAAM;AAAA,UACJ,QAAQ,OAAO;AAAA,UACf,UAAU,OAAO;AAAA,UACjB,gBAAgB,OAAO;AAAA,UACvB,+BAA+B;AAAA,UAC/B,2BAA2B,OAAO;AAAA,QACpC;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA,MAAM,OAAO,EAAE,UAAU,IAAI,MAAM;AACjC,UAAM,UAAU,mBAA0C,QAAQ;AAClE,QAAI,CAAC,SAAS,OAAQ;AACtB,UAAM,gBAAgB,KAAK,OAAO;AAAA,EACpC;AACF;AAEA,MAAM,qBAAqJ;AAAA,EACzJ,IAAI,kCAAkC;AAAA,EACtC,MAAM,QAAQ,UAAU,KAAK;AAC3B,UAAM,SAAS,sBAAsB,MAAM,QAAQ;AACnD,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,UAAM,OAAO,MAAM,eAAe,IAAI,KAAK,OAAO,IAAI,SAAS;AAC/D,UAAM,gBAAgB,MAAM,0BAA0B,IAAI,KAAK,IAAI;AACnE,QAAI,CAAC,iBAAiB,KAAK,0BAA0B,eAAe;AAClE,YAAM,IAAI,cAAc,KAAK;AAAA,QAC3B,MAAM;AAAA,QACN,OAAO,UAAU,uCAAuC,kDAAkD;AAAA,MAC5G,CAAC;AAAA,IACH;AACA,UAAM,MAAM,oBAAI,KAAK;AACrB,UAAM,WAAW,MAAM,GAAG;AAAA,MACxB;AAAA,MACA,EAAE,IAAI,KAAK,IAAI,UAAU,KAAK,UAAU,gBAAgB,KAAK,gBAAgB,uBAAuB,eAAe,WAAW,KAAK;AAAA,MACnI,EAAE,uBAAuB,MAAM,WAAW,IAAI;AAAA,IAChD;AACA,QAAI,aAAa,GAAG;AAClB,YAAM,IAAI,cAAc,KAAK;AAAA,QAC3B,MAAM;AAAA,QACN,OAAO,UAAU,uCAAuC,sEAAsE;AAAA,MAChI,CAAC;AAAA,IACH;AACA,UAAM,WAAW,oBAAoB,IAAI,MAAM,MAAM,GAAG;AACxD,UAAM,oBAAoB,KAAK,QAAQ;AACvC,4BAAwB,UAAU,eAAe,WAAW,IAAI,MAAM,OAAO,IAAI;AACjF,WAAO,EAAE,GAAG,SAAS,QAAQ,GAAG,+BAA+B,cAAc;AAAA,EAC/E;AAAA,EACA,UAAU,OAAO,EAAE,OAAO,MAAM;AAC9B,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,WAAO;AAAA,MACL,aAAa,UAAU,wCAAwC,cAAc;AAAA,MAC7E,cAAc;AAAA,MACd,YAAY,OAAO;AAAA,MACnB,UAAU,OAAO;AAAA,MACjB,gBAAgB,OAAO;AAAA,MACvB,SAAS,EAAE,cAAc,CAAC,wBAAwB,EAAE;AAAA,MACpD,SAAS;AAAA,QACP,MAAM;AAAA,UACJ,QAAQ,OAAO;AAAA,UACf,UAAU,OAAO;AAAA,UACjB,gBAAgB,OAAO;AAAA,UACvB,+BAA+B,OAAO;AAAA,UACtC,2BAA2B;AAAA,QAC7B;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA,MAAM,OAAO,EAAE,UAAU,IAAI,MAAM;AACjC,UAAM,UAAU,mBAA0C,QAAQ;AAClE,QAAI,CAAC,SAAS,OAAQ;AACtB,UAAM,gBAAgB,KAAK,OAAO;AAAA,EACpC;AACF;AAEA,gBAAgB,gBAAgB;AAChC,gBAAgB,kBAAkB;",
+  "names": []
+}

package/dist/modules/staff/commands/timesheets-task-comments.js

@@ -9,7 +9,7 @@ import { StaffTimeTask, StaffTimeTaskComment } from "../data/entities.js";
 import { staffTimeTaskCommentCrudEvents } from "../lib/crud.js";
 import {
   staffTimeTaskCommentCreateSchema,
-  staffTimeTaskCommentUpdateSchema
+  staffTimeTaskCommentUpdateRequestSchema
 } from "../data/validators.js";
 import {
   applyScopeToWhere,
@@ -35,6 +35,34 @@ const commentCrudIndexer = {
   entityType: "staff:staff_time_task_comment"
 };
 const commentCrudEvents = staffTimeTaskCommentCrudEvents;
+function commentEvents(portalVisible) {
+  const base = staffTimeTaskCommentCrudEvents;
+  return {
+    ...base,
+    buildPayload: (context) => ({
+      ...base.buildPayload ? base.buildPayload(context) : {},
+      portalVisible
+    })
+  };
+}
+const TASK_COMMENT_CUSTOMER_IMMUTABLE_CODE = "task_comment_customer_immutable";
+const TASK_COMMENT_VISIBILITY_INVALID_CODE = "task_comment_visibility_invalid";
+function customerCommentImmutableError(translate) {
+  return new CrudHttpError(403, {
+    code: TASK_COMMENT_CUSTOMER_IMMUTABLE_CODE,
+    error: translate(
+      "staff.time_tracking.taskComments.errors.customerImmutable",
+      "Messages written by the customer cannot be edited or deleted."
+    )
+  });
+}
+function visibilityInvalidError(translate) {
+  const message = translate(
+    "staff.time_tracking.taskComments.errors.visibilityPortalOnly",
+    "Only customer support tickets can carry replies visible to the customer."
+  );
+  return new CrudHttpError(422, { code: TASK_COMMENT_VISIBILITY_INVALID_CODE, error: message, fieldErrors: { visibility: message } });
+}
 function toCommentSnapshot(comment) {
   return {
     id: comment.id,
@@ -43,6 +71,8 @@ function toCommentSnapshot(comment) {
     taskId: comment.taskId,
     body: comment.body,
     authorUserId: comment.authorUserId ?? null,
+    visibility: comment.visibility ?? "internal",
+    authorKind: comment.authorKind ?? "staff",
     createdAt: comment.createdAt ? comment.createdAt.toISOString() : null,
     deletedAt: comment.deletedAt ? comment.deletedAt.toISOString() : null
   };
@@ -98,6 +128,7 @@ async function callerCanManageAll(ctx) {
   });
 }
 async function requireEditableComment(comment, ctx, translate) {
+  if (comment.authorKind === "customer") throw customerCommentImmutableError(translate);
   const actorId = stampAuthorUserId(ctx);
   if (actorId && comment.authorUserId === actorId) return;
   if (await callerCanManageAll(ctx)) return;
@@ -130,7 +161,10 @@ const createTaskCommentCommand = {
     await withAtomicFlush(
       em,
       [
-        () => requireTaskInScope(em, parsed.taskId, scope, translate),
+        async () => {
+          const task = await requireTaskInScope(em, parsed.taskId, scope, translate);
+          if (parsed.visibility === "customer" && task.source !== "portal") throw visibilityInvalidError(translate);
+        },
         () => {
           created = em.create(StaffTimeTaskComment, {
             tenantId: parsed.tenantId,
@@ -138,6 +172,8 @@ const createTaskCommentCommand = {
             taskId: parsed.taskId,
             body: parsed.body,
             authorUserId,
+            visibility: parsed.visibility ?? "internal",
+            authorKind: "staff",
             createdAt: /* @__PURE__ */ new Date(),
             updatedAt: /* @__PURE__ */ new Date(),
             deletedAt: null
@@ -154,7 +190,7 @@ const createTaskCommentCommand = {
       action: "created",
       entity: record,
       identifiers: { id: record.id, organizationId: record.organizationId, tenantId: record.tenantId },
-      events: commentCrudEvents,
+      events: commentEvents(record.visibility === "customer"),
       indexer: commentCrudIndexer
     });
     return { commentId: record.id, taskId: record.taskId, authorUserId: record.authorUserId ?? null };
@@ -208,7 +244,7 @@ const createTaskCommentCommand = {
       action: "deleted",
       entity: comment,
       identifiers: { id: comment.id, organizationId: comment.organizationId, tenantId: comment.tenantId },
-      events: commentCrudEvents,
+      events: commentEvents(comment.visibility === "customer"),
       indexer: commentCrudIndexer
     });
   }
@@ -216,7 +252,7 @@ const createTaskCommentCommand = {
 const updateTaskCommentCommand = {
   id: staffTimeTaskCommentCommandIds.update,
   async prepare(rawInput, ctx) {
-    const parsed = staffTimeTaskCommentUpdateSchema.safeParse(rawInput);
+    const parsed = staffTimeTaskCommentUpdateRequestSchema.safeParse(rawInput);
     if (!parsed.success) return {};
     const em = ctx.container.resolve("em");
     const before = await loadCommentSnapshot(em, parsed.data.id, staffSnapshotScopeFromContext(ctx));
@@ -224,7 +260,7 @@ const updateTaskCommentCommand = {
     return { before: { snapshot: before } };
   },
   async execute(rawInput, ctx) {
-    const parsed = staffTimeTaskCommentUpdateSchema.parse(rawInput);
+    const parsed = staffTimeTaskCommentUpdateRequestSchema.parse(rawInput);
     const { translate } = await resolveTranslations();
     const em = ctx.container.resolve("em").fork();
     const scope = commandActorScope(ctx);
@@ -237,11 +273,17 @@ const updateTaskCommentCommand = {
     ensureOrganizationScope(ctx, comment.organizationId);
     assertCommentVersion(ctx, comment);
     await requireEditableComment(comment, ctx, translate);
+    const visibilityBefore = comment.visibility ?? "internal";
+    if (parsed.visibility === "customer" && visibilityBefore !== "customer") {
+      const task = await requireTaskInScope(em, comment.taskId, scope, translate);
+      if (task.source !== "portal") throw visibilityInvalidError(translate);
+    }
     await withAtomicFlush(
       em,
       [
         () => {
-          comment.body = parsed.body;
+          if (parsed.body !== void 0) comment.body = parsed.body;
+          if (parsed.visibility !== void 0) comment.visibility = parsed.visibility;
           comment.updatedAt = /* @__PURE__ */ new Date();
         }
       ],
@@ -252,7 +294,7 @@ const updateTaskCommentCommand = {
       action: "updated",
       entity: comment,
       identifiers: { id: comment.id, organizationId: comment.organizationId, tenantId: comment.tenantId },
-      events: commentCrudEvents,
+      events: commentEvents(visibilityBefore === "customer" || comment.visibility === "customer"),
       indexer: commentCrudIndexer
     });
     return { commentId: comment.id, taskId: comment.taskId };
@@ -277,7 +319,7 @@ const updateTaskCommentCommand = {
       changes: buildChanges(
         before,
         after,
-        ["body"]
+        ["body", "visibility"]
       ),
       payload: {
         undo: { before, after }
@@ -299,6 +341,7 @@ const updateTaskCommentCommand = {
       [
         () => {
           comment.body = before.body;
+          comment.visibility = before.visibility ?? "internal";
           comment.updatedAt = /* @__PURE__ */ new Date();
         }
       ],
@@ -309,7 +352,7 @@ const updateTaskCommentCommand = {
       action: "updated",
       entity: comment,
       identifiers: { id: comment.id, organizationId: comment.organizationId, tenantId: comment.tenantId },
-      events: commentCrudEvents,
+      events: commentEvents(true),
       indexer: commentCrudIndexer
     });
   }
@@ -358,7 +401,7 @@ const deleteTaskCommentCommand = {
       action: "deleted",
       entity: comment,
       identifiers: { id: comment.id, organizationId: comment.organizationId, tenantId: comment.tenantId },
-      events: commentCrudEvents,
+      events: commentEvents(comment.visibility === "customer"),
       indexer: commentCrudIndexer
     });
     return { commentId: comment.id, taskId: comment.taskId };
@@ -402,6 +445,7 @@ const deleteTaskCommentCommand = {
               taskId: before.taskId,
               body: before.body,
               authorUserId: before.authorUserId,
+              visibility: before.visibility ?? "internal",
               createdAt: before.createdAt ? new Date(before.createdAt) : /* @__PURE__ */ new Date(),
               updatedAt: /* @__PURE__ */ new Date(),
               deletedAt: null
@@ -422,7 +466,7 @@ const deleteTaskCommentCommand = {
       action: "created",
       entity: comment,
       identifiers: { id: before.id, organizationId: before.organizationId, tenantId: before.tenantId },
-      events: commentCrudEvents,
+      events: commentEvents(before.visibility === "customer"),
       indexer: commentCrudIndexer
     });
   }
@@ -432,7 +476,9 @@ registerCommand(updateTaskCommentCommand);
 registerCommand(deleteTaskCommentCommand);
 export {
   STAFF_TIME_TASK_COMMENT_RESOURCE_KIND,
+  TASK_COMMENT_CUSTOMER_IMMUTABLE_CODE,
   TASK_COMMENT_NOT_AUTHOR_CODE,
+  TASK_COMMENT_VISIBILITY_INVALID_CODE,
   staffTimeTaskCommentCommandIds
 };
 //# sourceMappingURL=timesheets-task-comments.js.map