@open-mercato/core 0.10.1-develop.7717.1.2befe9c634 → 0.10.1-develop.7721.1.b5c4a00a68

package/dist/modules/staff/commands/timesheets-task-comments.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/staff/commands/timesheets-task-comments.ts"],
-  "sourcesContent": ["/**\n * Task comment commands (T3.4b) \u2014 the \"Komentarze (2)\" thread of screen 7.\n *\n * US-C4 asks for context that lives with the work rather than in chat, so a\n * comment is only useful if the two things rendered next to its body are true:\n * *who* wrote it and *when*. Three decisions follow from that:\n *\n *  1. **`author_user_id` is stamped from the authenticated caller and is never\n *     read from input.** `staffTimeTaskCommentCreateSchema` still declares the\n *     field (it is the shared scoped-create shape), but this command discards\n *     whatever arrives there. Attribution a client can set is not attribution \u2014\n *     it is a free-text field with an authoritative-looking name. Deliberately\n *     stricter than the shared `normalizeAuthorUserId` helper, which lets a\n *     super-admin post on someone else's behalf: on a client-facing thread that\n *     escape hatch would turn the avatar into a claim rather than a fact.\n *  2. **Editing is the author's own comment only**, unless the caller holds\n *     `staff.timesheets.manage_all`. Deleting follows the same rule \u2014 a thread\n *     someone else can rewrite is not a record. The manager exemption exists\n *     because a client-facing thread sometimes has to have something removed,\n *     and the grant is checked through `authorizeFeatures` so a wildcard\n *     (`staff.*`, `staff.timesheets.*`) counts the way it does everywhere else.\n *  3. **Delete is soft.** The row keeps its body, its author and its timestamps,\n *     so the audit trail (and undo) survives a comment leaving the thread.\n *\n * The parent task's *project* access is NOT resolved here \u2014 it is the route's\n * job (see `api/timesheets/tasks/[id]/comments/route.ts`), because only the\n * route knows the task id the caller addressed. What this file does enforce is\n * that the task exists inside the caller's tenant and organization, so a direct\n * command invocation cannot write a comment onto a foreign row.\n */\n\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport type { CommandHandler, CommandRuntimeContext } from '@open-mercato/shared/lib/commands'\nimport { registerCommand } from '@open-mercato/shared/lib/commands'\nimport { CrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { assertOptimisticLock, readOptimisticLockExpected } from '@open-mercato/shared/lib/crud/optimistic-lock-command'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { buildChanges, emitCrudSideEffects, emitCrudUndoSideEffects } from '@open-mercato/shared/lib/commands/helpers'\nimport { withAtomicFlush } from '@open-mercato/shared/lib/commands/flush'\nimport { authorizeFeatures } from '@open-mercato/shared/security/featurePolicy'\nimport type { CrudEventsConfig, CrudIndexerConfig } from '@open-mercato/shared/lib/crud/types'\nimport { StaffTimeTask, StaffTimeTaskComment } from '../data/entities'\nimport { staffTimeTaskCommentCrudEvents } from '../lib/crud'\nimport {\n  staffTimeTaskCommentCreateSchema,\n  staffTimeTaskCommentUpdateSchema,\n  type StaffTimeTaskCommentCreateInput,\n  type StaffTimeTaskCommentUpdateInput,\n} from '../data/validators'\nimport {\n  applyScopeToWhere,\n  commandActorScope,\n  commandInputScope,\n  ensureOrganizationScope,\n  ensureTenantScope,\n  extractUndoPayload,\n  scopedStaffSnapshotWhere,\n  staffSnapshotScopeFromContext,\n  staffSnapshotScopeFromSnapshot,\n  type StaffCommandScope,\n  type StaffSnapshotScope,\n} from './shared'\n\nexport const staffTimeTaskCommentCommandIds = {\n  create: 'staff.timesheets.task_comments.create',\n  update: 'staff.timesheets.task_comments.update',\n  delete: 'staff.timesheets.task_comments.delete',\n} as const\n\n/**\n * Resource kind used for the audit log, the mutation-guard registry and the\n * command-level optimistic lock, matching the `staff.timesheets.<entity>` shape\n * the other hand-written timesheets routes present so an `OM_OPTIMISTIC_LOCK`\n * allow-list can name it.\n */\nexport const STAFF_TIME_TASK_COMMENT_RESOURCE_KIND = 'staff.timesheets.task_comment'\n\nexport const TASK_COMMENT_NOT_AUTHOR_CODE = 'task_comment_not_author'\n\nconst MANAGE_ALL_FEATURE = 'staff.timesheets.manage_all'\n\nconst AUTHOR_UUID_REGEX = /^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$/\n\nconst commentCrudIndexer: CrudIndexerConfig<StaffTimeTaskComment> = {\n  entityType: 'staff:staff_time_task_comment',\n}\n\n/**\n * `staff.timesheets.time_task_comment.{created,updated,deleted}` from `events.ts`.\n *\n * The route is hand-written (it must answer 404 rather than an empty page for a\n * task the caller cannot see), so it takes no `events:` config the CRUD factory\n * could read \u2014 the command emits the lifecycle events itself. It uses the shared\n * export rather than a local copy so the ids the module publishes and the ids this\n * command emits cannot drift apart.\n */\nconst commentCrudEvents: CrudEventsConfig<StaffTimeTaskComment> = staffTimeTaskCommentCrudEvents\n\ntype Translate = (key: string, fallback: string) => string\n\ntype CommentSnapshot = {\n  id: string\n  tenantId: string\n  organizationId: string\n  taskId: string\n  body: string\n  authorUserId: string | null\n  createdAt: string | null\n  deletedAt: string | null\n}\n\ntype CommentUndoPayload = {\n  before?: CommentSnapshot | null\n  after?: CommentSnapshot | null\n}\n\ntype RbacServiceLike = {\n  getGrantedFeatures?: (\n    userId: string,\n    options: { tenantId: string | null; organizationId: string | null },\n  ) => Promise<string[]>\n}\n\nfunction toCommentSnapshot(comment: StaffTimeTaskComment): CommentSnapshot {\n  return {\n    id: comment.id,\n    tenantId: comment.tenantId,\n    organizationId: comment.organizationId,\n    taskId: comment.taskId,\n    body: comment.body,\n    authorUserId: comment.authorUserId ?? null,\n    createdAt: comment.createdAt ? comment.createdAt.toISOString() : null,\n    deletedAt: comment.deletedAt ? comment.deletedAt.toISOString() : null,\n  }\n}\n\nasync function loadCommentSnapshot(\n  em: EntityManager,\n  id: string,\n  scope?: StaffSnapshotScope | null,\n): Promise<CommentSnapshot | null> {\n  const comment = await em.findOne(StaffTimeTaskComment, scopedStaffSnapshotWhere(id, scope))\n  return comment ? toCommentSnapshot(comment) : null\n}\n\nfunction commentNotFoundError(translate: Translate): CrudHttpError {\n  return new CrudHttpError(404, {\n    error: translate('staff.time_tracking.taskComments.errors.notFound', 'Comment not found or not accessible.'),\n  })\n}\n\nfunction taskNotFoundError(translate: Translate): CrudHttpError {\n  return new CrudHttpError(404, {\n    error: translate('staff.time_tracking.tasks.errors.notFound', 'Task not found or not accessible.'),\n  })\n}\n\nfunction notAuthorError(translate: Translate): CrudHttpError {\n  return new CrudHttpError(403, {\n    code: TASK_COMMENT_NOT_AUTHOR_CODE,\n    error: translate(\n      'staff.time_tracking.taskComments.errors.notAuthor',\n      'You can only edit or delete your own comments.',\n    ),\n  })\n}\n\n/**\n * The comment's author is whoever the request authenticated as \u2014 never the\n * `authorUserId` the payload carried. An API key has no human behind it, so it\n * writes an unattributed comment rather than borrowing an identity.\n */\nfunction stampAuthorUserId(ctx: CommandRuntimeContext): string | null {\n  const auth = ctx.auth as { isApiKey?: boolean; sub?: string | null } | null | undefined\n  if (!auth || auth.isApiKey === true) return null\n  const sub = typeof auth.sub === 'string' ? auth.sub.trim() : ''\n  if (!sub || !AUTHOR_UUID_REGEX.test(sub)) return null\n  return sub\n}\n\n/**\n * Wildcard-aware `staff.timesheets.manage_all` check. Reads the grants from\n * `rbacService` rather than the token's feature array so a stale or trimmed\n * browser payload cannot widen the exemption, and fails closed when the grants\n * cannot be read \u2014 the caller then falls back to \"author only\", which is the\n * safe half of the rule.\n */\nasync function callerCanManageAll(ctx: CommandRuntimeContext): Promise<boolean> {\n  if (ctx.auth?.isSuperAdmin === true || ctx.systemActor === true) return true\n  const userId = ctx.auth?.sub ?? null\n  const tenantId = ctx.auth?.tenantId ?? null\n  const organizationId = ctx.selectedOrganizationId ?? ctx.auth?.orgId ?? null\n  if (!userId || !tenantId) return false\n  let grantedFeatures: string[] = []\n  try {\n    const rbac = ctx.container.resolve('rbacService') as RbacServiceLike | undefined\n    if (rbac?.getGrantedFeatures) {\n      grantedFeatures = (await rbac.getGrantedFeatures(userId, { tenantId, organizationId })) ?? []\n    }\n  } catch {\n    return false\n  }\n  return authorizeFeatures([MANAGE_ALL_FEATURE], {\n    grantedFeatures,\n    scopeAllowed: Boolean(tenantId) && Boolean(organizationId),\n  })\n}\n\nasync function requireEditableComment(\n  comment: StaffTimeTaskComment,\n  ctx: CommandRuntimeContext,\n  translate: Translate,\n): Promise<void> {\n  const actorId = stampAuthorUserId(ctx)\n  if (actorId && comment.authorUserId === actorId) return\n  if (await callerCanManageAll(ctx)) return\n  throw notAuthorError(translate)\n}\n\nfunction assertCommentVersion(ctx: CommandRuntimeContext, comment: StaffTimeTaskComment): void {\n  assertOptimisticLock({\n    resourceKind: STAFF_TIME_TASK_COMMENT_RESOURCE_KIND,\n    resourceId: comment.id,\n    expected: readOptimisticLockExpected(ctx.request ?? null),\n    current: comment.updatedAt,\n  })\n}\n\nasync function requireTaskInScope(\n  em: EntityManager,\n  taskId: string,\n  scope: StaffCommandScope,\n  translate: Translate,\n): Promise<StaffTimeTask> {\n  const task = await em.findOne(StaffTimeTask, applyScopeToWhere<StaffTimeTask>({ id: taskId, deletedAt: null }, scope))\n  if (!task) throw taskNotFoundError(translate)\n  return task\n}\n\nconst createTaskCommentCommand: CommandHandler<\n  StaffTimeTaskCommentCreateInput,\n  { commentId: string; taskId: string; authorUserId: string | null }\n> = {\n  id: staffTimeTaskCommentCommandIds.create,\n  async execute(rawInput, ctx) {\n    const parsed = staffTimeTaskCommentCreateSchema.parse(rawInput)\n    ensureTenantScope(ctx, parsed.tenantId)\n    ensureOrganizationScope(ctx, parsed.organizationId)\n    const scope = commandInputScope(ctx, parsed.tenantId, parsed.organizationId)\n    const { translate } = await resolveTranslations()\n    // `parsed.authorUserId` is intentionally unread \u2014 see the file header.\n    const authorUserId = stampAuthorUserId(ctx)\n\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n    let created: StaffTimeTaskComment | null = null\n\n    await withAtomicFlush(\n      em,\n      [\n        () => requireTaskInScope(em, parsed.taskId, scope, translate),\n        () => {\n          created = em.create(StaffTimeTaskComment, {\n            tenantId: parsed.tenantId,\n            organizationId: parsed.organizationId,\n            taskId: parsed.taskId,\n            body: parsed.body,\n            authorUserId,\n            createdAt: new Date(),\n            updatedAt: new Date(),\n            deletedAt: null,\n          })\n          em.persist(created)\n        },\n      ],\n      { transaction: true, label: staffTimeTaskCommentCommandIds.create },\n    )\n\n    const record = created as StaffTimeTaskComment | null\n    if (!record) throw commentNotFoundError(translate)\n\n    await emitCrudSideEffects({\n      dataEngine: ctx.container.resolve('dataEngine'),\n      action: 'created',\n      entity: record,\n      identifiers: { id: record.id, organizationId: record.organizationId, tenantId: record.tenantId },\n      events: commentCrudEvents,\n      indexer: commentCrudIndexer,\n    })\n\n    return { commentId: record.id, taskId: record.taskId, authorUserId: record.authorUserId ?? null }\n  },\n  captureAfter: async (_input, result, ctx) => {\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n    const snapshot = await loadCommentSnapshot(em, result.commentId, staffSnapshotScopeFromContext(ctx))\n    if (!snapshot) return null\n    return { snapshot }\n  },\n  buildLog: async ({ result, snapshots }) => {\n    const snapshot = (snapshots.after as { snapshot?: CommentSnapshot } | undefined)?.snapshot\n    if (!snapshot) return null\n    const { translate } = await resolveTranslations()\n    return {\n      actionLabel: translate('staff.audit.timesheets.task_comments.create', 'Create task comment'),\n      resourceKind: STAFF_TIME_TASK_COMMENT_RESOURCE_KIND,\n      resourceId: result.commentId,\n      parentResourceKind: 'staff.timesheets.task',\n      parentResourceId: snapshot.taskId,\n      tenantId: snapshot.tenantId,\n      organizationId: snapshot.organizationId,\n      snapshotAfter: snapshot,\n      payload: {\n        undo: { after: snapshot } satisfies CommentUndoPayload,\n      },\n    }\n  },\n  undo: async ({ logEntry, ctx }) => {\n    const payload = extractUndoPayload<CommentUndoPayload>(logEntry)\n    const after = payload?.after\n    if (!after) return\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n    const comment = await em.findOne(\n      StaffTimeTaskComment,\n      scopedStaffSnapshotWhere(after.id, staffSnapshotScopeFromSnapshot(after)),\n    )\n    if (!comment) return\n\n    await withAtomicFlush(\n      em,\n      [\n        () => {\n          comment.deletedAt = new Date()\n          comment.updatedAt = new Date()\n        },\n      ],\n      { transaction: true, label: `${staffTimeTaskCommentCommandIds.create}.undo` },\n    )\n\n    await emitCrudUndoSideEffects({\n      dataEngine: ctx.container.resolve('dataEngine'),\n      action: 'deleted',\n      entity: comment,\n      identifiers: { id: comment.id, organizationId: comment.organizationId, tenantId: comment.tenantId },\n      events: commentCrudEvents,\n      indexer: commentCrudIndexer,\n    })\n  },\n}\n\nconst updateTaskCommentCommand: CommandHandler<\n  StaffTimeTaskCommentUpdateInput,\n  { commentId: string; taskId: string }\n> = {\n  id: staffTimeTaskCommentCommandIds.update,\n  async prepare(rawInput, ctx) {\n    const parsed = staffTimeTaskCommentUpdateSchema.safeParse(rawInput)\n    if (!parsed.success) return {}\n    const em = ctx.container.resolve('em') as EntityManager\n    const before = await loadCommentSnapshot(em, parsed.data.id, staffSnapshotScopeFromContext(ctx))\n    if (!before) return {}\n    return { before: { snapshot: before } }\n  },\n  async execute(rawInput, ctx) {\n    const parsed = staffTimeTaskCommentUpdateSchema.parse(rawInput)\n    const { translate } = await resolveTranslations()\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n    const scope = commandActorScope(ctx)\n\n    const comment = await em.findOne(\n      StaffTimeTaskComment,\n      applyScopeToWhere<StaffTimeTaskComment>({ id: parsed.id, deletedAt: null }, scope),\n    )\n    if (!comment) throw commentNotFoundError(translate)\n    ensureTenantScope(ctx, comment.tenantId)\n    ensureOrganizationScope(ctx, comment.organizationId)\n    assertCommentVersion(ctx, comment)\n    await requireEditableComment(comment, ctx, translate)\n\n    await withAtomicFlush(\n      em,\n      [\n        () => {\n          comment.body = parsed.body\n          comment.updatedAt = new Date()\n        },\n      ],\n      { transaction: true, label: staffTimeTaskCommentCommandIds.update },\n    )\n\n    await emitCrudSideEffects({\n      dataEngine: ctx.container.resolve('dataEngine'),\n      action: 'updated',\n      entity: comment,\n      identifiers: { id: comment.id, organizationId: comment.organizationId, tenantId: comment.tenantId },\n      events: commentCrudEvents,\n      indexer: commentCrudIndexer,\n    })\n\n    return { commentId: comment.id, taskId: comment.taskId }\n  },\n  buildLog: async ({ snapshots, ctx }) => {\n    const before = (snapshots.before as { snapshot?: CommentSnapshot } | undefined)?.snapshot\n    if (!before) return null\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n    const after = await loadCommentSnapshot(em, before.id, staffSnapshotScopeFromSnapshot(before))\n    if (!after) return null\n    const { translate } = await resolveTranslations()\n    return {\n      actionLabel: translate('staff.audit.timesheets.task_comments.update', 'Update task comment'),\n      resourceKind: STAFF_TIME_TASK_COMMENT_RESOURCE_KIND,\n      resourceId: before.id,\n      parentResourceKind: 'staff.timesheets.task',\n      parentResourceId: before.taskId,\n      tenantId: before.tenantId,\n      organizationId: before.organizationId,\n      snapshotBefore: before,\n      snapshotAfter: after,\n      changes: buildChanges(\n        before as unknown as Record<string, unknown>,\n        after as unknown as Record<string, unknown>,\n        ['body'],\n      ),\n      payload: {\n        undo: { before, after } satisfies CommentUndoPayload,\n      },\n    }\n  },\n  undo: async ({ logEntry, ctx }) => {\n    const payload = extractUndoPayload<CommentUndoPayload>(logEntry)\n    const before = payload?.before\n    if (!before) return\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n    const comment = await em.findOne(\n      StaffTimeTaskComment,\n      scopedStaffSnapshotWhere(before.id, staffSnapshotScopeFromSnapshot(before)),\n    )\n    if (!comment) return\n\n    await withAtomicFlush(\n      em,\n      [\n        () => {\n          comment.body = before.body\n          comment.updatedAt = new Date()\n        },\n      ],\n      { transaction: true, label: `${staffTimeTaskCommentCommandIds.update}.undo` },\n    )\n\n    await emitCrudUndoSideEffects({\n      dataEngine: ctx.container.resolve('dataEngine'),\n      action: 'updated',\n      entity: comment,\n      identifiers: { id: comment.id, organizationId: comment.organizationId, tenantId: comment.tenantId },\n      events: commentCrudEvents,\n      indexer: commentCrudIndexer,\n    })\n  },\n}\n\nconst deleteTaskCommentCommand: CommandHandler<{ id?: string }, { commentId: string; taskId: string }> = {\n  id: staffTimeTaskCommentCommandIds.delete,\n  async prepare(input, ctx) {\n    const id = input?.id\n    if (!id) return {}\n    const em = ctx.container.resolve('em') as EntityManager\n    const before = await loadCommentSnapshot(em, id, staffSnapshotScopeFromContext(ctx))\n    if (!before) return {}\n    return { before: { snapshot: before } }\n  },\n  async execute(input, ctx) {\n    const { translate } = await resolveTranslations()\n    const id = input?.id\n    if (!id) {\n      throw new CrudHttpError(400, {\n        error: translate('staff.time_tracking.taskComments.errors.idRequired', 'Comment id is required.'),\n      })\n    }\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n    const scope = commandActorScope(ctx)\n    const comment = await em.findOne(\n      StaffTimeTaskComment,\n      applyScopeToWhere<StaffTimeTaskComment>({ id, deletedAt: null }, scope),\n    )\n    if (!comment) throw commentNotFoundError(translate)\n    ensureTenantScope(ctx, comment.tenantId)\n    ensureOrganizationScope(ctx, comment.organizationId)\n    assertCommentVersion(ctx, comment)\n    await requireEditableComment(comment, ctx, translate)\n\n    // Soft delete: the body, the author and the timestamps stay on the row so\n    // the audit trail \u2014 and undo \u2014 still has something to point at.\n    await withAtomicFlush(\n      em,\n      [\n        () => {\n          comment.deletedAt = new Date()\n          comment.updatedAt = new Date()\n        },\n      ],\n      { transaction: true, label: staffTimeTaskCommentCommandIds.delete },\n    )\n\n    await emitCrudSideEffects({\n      dataEngine: ctx.container.resolve('dataEngine'),\n      action: 'deleted',\n      entity: comment,\n      identifiers: { id: comment.id, organizationId: comment.organizationId, tenantId: comment.tenantId },\n      events: commentCrudEvents,\n      indexer: commentCrudIndexer,\n    })\n\n    return { commentId: comment.id, taskId: comment.taskId }\n  },\n  buildLog: async ({ snapshots }) => {\n    const before = (snapshots.before as { snapshot?: CommentSnapshot } | undefined)?.snapshot\n    if (!before) return null\n    const { translate } = await resolveTranslations()\n    return {\n      actionLabel: translate('staff.audit.timesheets.task_comments.delete', 'Delete task comment'),\n      resourceKind: STAFF_TIME_TASK_COMMENT_RESOURCE_KIND,\n      resourceId: before.id,\n      parentResourceKind: 'staff.timesheets.task',\n      parentResourceId: before.taskId,\n      tenantId: before.tenantId,\n      organizationId: before.organizationId,\n      snapshotBefore: before,\n      payload: {\n        undo: { before } satisfies CommentUndoPayload,\n      },\n    }\n  },\n  undo: async ({ logEntry, ctx }) => {\n    const payload = extractUndoPayload<CommentUndoPayload>(logEntry)\n    const before = payload?.before\n    if (!before) return\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n    let comment = await em.findOne(\n      StaffTimeTaskComment,\n      scopedStaffSnapshotWhere(before.id, staffSnapshotScopeFromSnapshot(before)),\n    )\n\n    await withAtomicFlush(\n      em,\n      [\n        () => {\n          if (!comment) {\n            comment = em.create(StaffTimeTaskComment, {\n              id: before.id,\n              tenantId: before.tenantId,\n              organizationId: before.organizationId,\n              taskId: before.taskId,\n              body: before.body,\n              authorUserId: before.authorUserId,\n              createdAt: before.createdAt ? new Date(before.createdAt) : new Date(),\n              updatedAt: new Date(),\n              deletedAt: null,\n            })\n            em.persist(comment)\n            return\n          }\n          comment.body = before.body\n          comment.authorUserId = before.authorUserId\n          comment.deletedAt = null\n          comment.updatedAt = new Date()\n        },\n      ],\n      { transaction: true, label: `${staffTimeTaskCommentCommandIds.delete}.undo` },\n    )\n\n    await emitCrudUndoSideEffects({\n      dataEngine: ctx.container.resolve('dataEngine'),\n      action: 'created',\n      entity: comment,\n      identifiers: { id: before.id, organizationId: before.organizationId, tenantId: before.tenantId },\n      events: commentCrudEvents,\n      indexer: commentCrudIndexer,\n    })\n  },\n}\n\nregisterCommand(createTaskCommentCommand)\nregisterCommand(updateTaskCommentCommand)\nregisterCommand(deleteTaskCommentCommand)\n"],
-  "mappings": "AAiCA,SAAS,uBAAuB;AAChC,SAAS,qBAAqB;AAC9B,SAAS,sBAAsB,kCAAkC;AACjE,SAAS,2BAA2B;AACpC,SAAS,cAAc,qBAAqB,+BAA+B;AAC3E,SAAS,uBAAuB;AAChC,SAAS,yBAAyB;AAElC,SAAS,eAAe,4BAA4B;AACpD,SAAS,sCAAsC;AAC/C;AAAA,EACE;AAAA,EACA;AAAA,OAGK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAGK;AAEA,MAAM,iCAAiC;AAAA,EAC5C,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,QAAQ;AACV;AAQO,MAAM,wCAAwC;AAE9C,MAAM,+BAA+B;AAE5C,MAAM,qBAAqB;AAE3B,MAAM,oBAAoB;AAE1B,MAAM,qBAA8D;AAAA,EAClE,YAAY;AACd;AAWA,MAAM,oBAA4D;AA2BlE,SAAS,kBAAkB,SAAgD;AACzE,SAAO;AAAA,IACL,IAAI,QAAQ;AAAA,IACZ,UAAU,QAAQ;AAAA,IAClB,gBAAgB,QAAQ;AAAA,IACxB,QAAQ,QAAQ;AAAA,IAChB,MAAM,QAAQ;AAAA,IACd,cAAc,QAAQ,gBAAgB;AAAA,IACtC,WAAW,QAAQ,YAAY,QAAQ,UAAU,YAAY,IAAI;AAAA,IACjE,WAAW,QAAQ,YAAY,QAAQ,UAAU,YAAY,IAAI;AAAA,EACnE;AACF;AAEA,eAAe,oBACb,IACA,IACA,OACiC;AACjC,QAAM,UAAU,MAAM,GAAG,QAAQ,sBAAsB,yBAAyB,IAAI,KAAK,CAAC;AAC1F,SAAO,UAAU,kBAAkB,OAAO,IAAI;AAChD;AAEA,SAAS,qBAAqB,WAAqC;AACjE,SAAO,IAAI,cAAc,KAAK;AAAA,IAC5B,OAAO,UAAU,oDAAoD,sCAAsC;AAAA,EAC7G,CAAC;AACH;AAEA,SAAS,kBAAkB,WAAqC;AAC9D,SAAO,IAAI,cAAc,KAAK;AAAA,IAC5B,OAAO,UAAU,6CAA6C,mCAAmC;AAAA,EACnG,CAAC;AACH;AAEA,SAAS,eAAe,WAAqC;AAC3D,SAAO,IAAI,cAAc,KAAK;AAAA,IAC5B,MAAM;AAAA,IACN,OAAO;AAAA,MACL;AAAA,MACA;AAAA,IACF;AAAA,EACF,CAAC;AACH;AAOA,SAAS,kBAAkB,KAA2C;AACpE,QAAM,OAAO,IAAI;AACjB,MAAI,CAAC,QAAQ,KAAK,aAAa,KAAM,QAAO;AAC5C,QAAM,MAAM,OAAO,KAAK,QAAQ,WAAW,KAAK,IAAI,KAAK,IAAI;AAC7D,MAAI,CAAC,OAAO,CAAC,kBAAkB,KAAK,GAAG,EAAG,QAAO;AACjD,SAAO;AACT;AASA,eAAe,mBAAmB,KAA8C;AAC9E,MAAI,IAAI,MAAM,iBAAiB,QAAQ,IAAI,gBAAgB,KAAM,QAAO;AACxE,QAAM,SAAS,IAAI,MAAM,OAAO;AAChC,QAAM,WAAW,IAAI,MAAM,YAAY;AACvC,QAAM,iBAAiB,IAAI,0BAA0B,IAAI,MAAM,SAAS;AACxE,MAAI,CAAC,UAAU,CAAC,SAAU,QAAO;AACjC,MAAI,kBAA4B,CAAC;AACjC,MAAI;AACF,UAAM,OAAO,IAAI,UAAU,QAAQ,aAAa;AAChD,QAAI,MAAM,oBAAoB;AAC5B,wBAAmB,MAAM,KAAK,mBAAmB,QAAQ,EAAE,UAAU,eAAe,CAAC,KAAM,CAAC;AAAA,IAC9F;AAAA,EACF,QAAQ;AACN,WAAO;AAAA,EACT;AACA,SAAO,kBAAkB,CAAC,kBAAkB,GAAG;AAAA,IAC7C;AAAA,IACA,cAAc,QAAQ,QAAQ,KAAK,QAAQ,cAAc;AAAA,EAC3D,CAAC;AACH;AAEA,eAAe,uBACb,SACA,KACA,WACe;AACf,QAAM,UAAU,kBAAkB,GAAG;AACrC,MAAI,WAAW,QAAQ,iBAAiB,QAAS;AACjD,MAAI,MAAM,mBAAmB,GAAG,EAAG;AACnC,QAAM,eAAe,SAAS;AAChC;AAEA,SAAS,qBAAqB,KAA4B,SAAqC;AAC7F,uBAAqB;AAAA,IACnB,cAAc;AAAA,IACd,YAAY,QAAQ;AAAA,IACpB,UAAU,2BAA2B,IAAI,WAAW,IAAI;AAAA,IACxD,SAAS,QAAQ;AAAA,EACnB,CAAC;AACH;AAEA,eAAe,mBACb,IACA,QACA,OACA,WACwB;AACxB,QAAM,OAAO,MAAM,GAAG,QAAQ,eAAe,kBAAiC,EAAE,IAAI,QAAQ,WAAW,KAAK,GAAG,KAAK,CAAC;AACrH,MAAI,CAAC,KAAM,OAAM,kBAAkB,SAAS;AAC5C,SAAO;AACT;AAEA,MAAM,2BAGF;AAAA,EACF,IAAI,+BAA+B;AAAA,EACnC,MAAM,QAAQ,UAAU,KAAK;AAC3B,UAAM,SAAS,iCAAiC,MAAM,QAAQ;AAC9D,sBAAkB,KAAK,OAAO,QAAQ;AACtC,4BAAwB,KAAK,OAAO,cAAc;AAClD,UAAM,QAAQ,kBAAkB,KAAK,OAAO,UAAU,OAAO,cAAc;AAC3E,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAEhD,UAAM,eAAe,kBAAkB,GAAG;AAE1C,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,QAAI,UAAuC;AAE3C,UAAM;AAAA,MACJ;AAAA,MACA;AAAA,QACE,MAAM,mBAAmB,IAAI,OAAO,QAAQ,OAAO,SAAS;AAAA,QAC5D,MAAM;AACJ,oBAAU,GAAG,OAAO,sBAAsB;AAAA,YACxC,UAAU,OAAO;AAAA,YACjB,gBAAgB,OAAO;AAAA,YACvB,QAAQ,OAAO;AAAA,YACf,MAAM,OAAO;AAAA,YACb;AAAA,YACA,WAAW,oBAAI,KAAK;AAAA,YACpB,WAAW,oBAAI,KAAK;AAAA,YACpB,WAAW;AAAA,UACb,CAAC;AACD,aAAG,QAAQ,OAAO;AAAA,QACpB;AAAA,MACF;AAAA,MACA,EAAE,aAAa,MAAM,OAAO,+BAA+B,OAAO;AAAA,IACpE;AAEA,UAAM,SAAS;AACf,QAAI,CAAC,OAAQ,OAAM,qBAAqB,SAAS;AAEjD,UAAM,oBAAoB;AAAA,MACxB,YAAY,IAAI,UAAU,QAAQ,YAAY;AAAA,MAC9C,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,aAAa,EAAE,IAAI,OAAO,IAAI,gBAAgB,OAAO,gBAAgB,UAAU,OAAO,SAAS;AAAA,MAC/F,QAAQ;AAAA,MACR,SAAS;AAAA,IACX,CAAC;AAED,WAAO,EAAE,WAAW,OAAO,IAAI,QAAQ,OAAO,QAAQ,cAAc,OAAO,gBAAgB,KAAK;AAAA,EAClG;AAAA,EACA,cAAc,OAAO,QAAQ,QAAQ,QAAQ;AAC3C,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,UAAM,WAAW,MAAM,oBAAoB,IAAI,OAAO,WAAW,8BAA8B,GAAG,CAAC;AACnG,QAAI,CAAC,SAAU,QAAO;AACtB,WAAO,EAAE,SAAS;AAAA,EACpB;AAAA,EACA,UAAU,OAAO,EAAE,QAAQ,UAAU,MAAM;AACzC,UAAM,WAAY,UAAU,OAAsD;AAClF,QAAI,CAAC,SAAU,QAAO;AACtB,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,WAAO;AAAA,MACL,aAAa,UAAU,+CAA+C,qBAAqB;AAAA,MAC3F,cAAc;AAAA,MACd,YAAY,OAAO;AAAA,MACnB,oBAAoB;AAAA,MACpB,kBAAkB,SAAS;AAAA,MAC3B,UAAU,SAAS;AAAA,MACnB,gBAAgB,SAAS;AAAA,MACzB,eAAe;AAAA,MACf,SAAS;AAAA,QACP,MAAM,EAAE,OAAO,SAAS;AAAA,MAC1B;AAAA,IACF;AAAA,EACF;AAAA,EACA,MAAM,OAAO,EAAE,UAAU,IAAI,MAAM;AACjC,UAAM,UAAU,mBAAuC,QAAQ;AAC/D,UAAM,QAAQ,SAAS;AACvB,QAAI,CAAC,MAAO;AACZ,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,UAAM,UAAU,MAAM,GAAG;AAAA,MACvB;AAAA,MACA,yBAAyB,MAAM,IAAI,+BAA+B,KAAK,CAAC;AAAA,IAC1E;AACA,QAAI,CAAC,QAAS;AAEd,UAAM;AAAA,MACJ;AAAA,MACA;AAAA,QACE,MAAM;AACJ,kBAAQ,YAAY,oBAAI,KAAK;AAC7B,kBAAQ,YAAY,oBAAI,KAAK;AAAA,QAC/B;AAAA,MACF;AAAA,MACA,EAAE,aAAa,MAAM,OAAO,GAAG,+BAA+B,MAAM,QAAQ;AAAA,IAC9E;AAEA,UAAM,wBAAwB;AAAA,MAC5B,YAAY,IAAI,UAAU,QAAQ,YAAY;AAAA,MAC9C,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,aAAa,EAAE,IAAI,QAAQ,IAAI,gBAAgB,QAAQ,gBAAgB,UAAU,QAAQ,SAAS;AAAA,MAClG,QAAQ;AAAA,MACR,SAAS;AAAA,IACX,CAAC;AAAA,EACH;AACF;AAEA,MAAM,2BAGF;AAAA,EACF,IAAI,+BAA+B;AAAA,EACnC,MAAM,QAAQ,UAAU,KAAK;AAC3B,UAAM,SAAS,iCAAiC,UAAU,QAAQ;AAClE,QAAI,CAAC,OAAO,QAAS,QAAO,CAAC;AAC7B,UAAM,KAAK,IAAI,UAAU,QAAQ,IAAI;AACrC,UAAM,SAAS,MAAM,oBAAoB,IAAI,OAAO,KAAK,IAAI,8BAA8B,GAAG,CAAC;AAC/F,QAAI,CAAC,OAAQ,QAAO,CAAC;AACrB,WAAO,EAAE,QAAQ,EAAE,UAAU,OAAO,EAAE;AAAA,EACxC;AAAA,EACA,MAAM,QAAQ,UAAU,KAAK;AAC3B,UAAM,SAAS,iCAAiC,MAAM,QAAQ;AAC9D,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,UAAM,QAAQ,kBAAkB,GAAG;AAEnC,UAAM,UAAU,MAAM,GAAG;AAAA,MACvB;AAAA,MACA,kBAAwC,EAAE,IAAI,OAAO,IAAI,WAAW,KAAK,GAAG,KAAK;AAAA,IACnF;AACA,QAAI,CAAC,QAAS,OAAM,qBAAqB,SAAS;AAClD,sBAAkB,KAAK,QAAQ,QAAQ;AACvC,4BAAwB,KAAK,QAAQ,cAAc;AACnD,yBAAqB,KAAK,OAAO;AACjC,UAAM,uBAAuB,SAAS,KAAK,SAAS;AAEpD,UAAM;AAAA,MACJ;AAAA,MACA;AAAA,QACE,MAAM;AACJ,kBAAQ,OAAO,OAAO;AACtB,kBAAQ,YAAY,oBAAI,KAAK;AAAA,QAC/B;AAAA,MACF;AAAA,MACA,EAAE,aAAa,MAAM,OAAO,+BAA+B,OAAO;AAAA,IACpE;AAEA,UAAM,oBAAoB;AAAA,MACxB,YAAY,IAAI,UAAU,QAAQ,YAAY;AAAA,MAC9C,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,aAAa,EAAE,IAAI,QAAQ,IAAI,gBAAgB,QAAQ,gBAAgB,UAAU,QAAQ,SAAS;AAAA,MAClG,QAAQ;AAAA,MACR,SAAS;AAAA,IACX,CAAC;AAED,WAAO,EAAE,WAAW,QAAQ,IAAI,QAAQ,QAAQ,OAAO;AAAA,EACzD;AAAA,EACA,UAAU,OAAO,EAAE,WAAW,IAAI,MAAM;AACtC,UAAM,SAAU,UAAU,QAAuD;AACjF,QAAI,CAAC,OAAQ,QAAO;AACpB,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,UAAM,QAAQ,MAAM,oBAAoB,IAAI,OAAO,IAAI,+BAA+B,MAAM,CAAC;AAC7F,QAAI,CAAC,MAAO,QAAO;AACnB,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,WAAO;AAAA,MACL,aAAa,UAAU,+CAA+C,qBAAqB;AAAA,MAC3F,cAAc;AAAA,MACd,YAAY,OAAO;AAAA,MACnB,oBAAoB;AAAA,MACpB,kBAAkB,OAAO;AAAA,MACzB,UAAU,OAAO;AAAA,MACjB,gBAAgB,OAAO;AAAA,MACvB,gBAAgB;AAAA,MAChB,eAAe;AAAA,MACf,SAAS;AAAA,QACP;AAAA,QACA;AAAA,QACA,CAAC,MAAM;AAAA,MACT;AAAA,MACA,SAAS;AAAA,QACP,MAAM,EAAE,QAAQ,MAAM;AAAA,MACxB;AAAA,IACF;AAAA,EACF;AAAA,EACA,MAAM,OAAO,EAAE,UAAU,IAAI,MAAM;AACjC,UAAM,UAAU,mBAAuC,QAAQ;AAC/D,UAAM,SAAS,SAAS;AACxB,QAAI,CAAC,OAAQ;AACb,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,UAAM,UAAU,MAAM,GAAG;AAAA,MACvB;AAAA,MACA,yBAAyB,OAAO,IAAI,+BAA+B,MAAM,CAAC;AAAA,IAC5E;AACA,QAAI,CAAC,QAAS;AAEd,UAAM;AAAA,MACJ;AAAA,MACA;AAAA,QACE,MAAM;AACJ,kBAAQ,OAAO,OAAO;AACtB,kBAAQ,YAAY,oBAAI,KAAK;AAAA,QAC/B;AAAA,MACF;AAAA,MACA,EAAE,aAAa,MAAM,OAAO,GAAG,+BAA+B,MAAM,QAAQ;AAAA,IAC9E;AAEA,UAAM,wBAAwB;AAAA,MAC5B,YAAY,IAAI,UAAU,QAAQ,YAAY;AAAA,MAC9C,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,aAAa,EAAE,IAAI,QAAQ,IAAI,gBAAgB,QAAQ,gBAAgB,UAAU,QAAQ,SAAS;AAAA,MAClG,QAAQ;AAAA,MACR,SAAS;AAAA,IACX,CAAC;AAAA,EACH;AACF;AAEA,MAAM,2BAAmG;AAAA,EACvG,IAAI,+BAA+B;AAAA,EACnC,MAAM,QAAQ,OAAO,KAAK;AACxB,UAAM,KAAK,OAAO;AAClB,QAAI,CAAC,GAAI,QAAO,CAAC;AACjB,UAAM,KAAK,IAAI,UAAU,QAAQ,IAAI;AACrC,UAAM,SAAS,MAAM,oBAAoB,IAAI,IAAI,8BAA8B,GAAG,CAAC;AACnF,QAAI,CAAC,OAAQ,QAAO,CAAC;AACrB,WAAO,EAAE,QAAQ,EAAE,UAAU,OAAO,EAAE;AAAA,EACxC;AAAA,EACA,MAAM,QAAQ,OAAO,KAAK;AACxB,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,UAAM,KAAK,OAAO;AAClB,QAAI,CAAC,IAAI;AACP,YAAM,IAAI,cAAc,KAAK;AAAA,QAC3B,OAAO,UAAU,sDAAsD,yBAAyB;AAAA,MAClG,CAAC;AAAA,IACH;AACA,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,UAAM,QAAQ,kBAAkB,GAAG;AACnC,UAAM,UAAU,MAAM,GAAG;AAAA,MACvB;AAAA,MACA,kBAAwC,EAAE,IAAI,WAAW,KAAK,GAAG,KAAK;AAAA,IACxE;AACA,QAAI,CAAC,QAAS,OAAM,qBAAqB,SAAS;AAClD,sBAAkB,KAAK,QAAQ,QAAQ;AACvC,4BAAwB,KAAK,QAAQ,cAAc;AACnD,yBAAqB,KAAK,OAAO;AACjC,UAAM,uBAAuB,SAAS,KAAK,SAAS;AAIpD,UAAM;AAAA,MACJ;AAAA,MACA;AAAA,QACE,MAAM;AACJ,kBAAQ,YAAY,oBAAI,KAAK;AAC7B,kBAAQ,YAAY,oBAAI,KAAK;AAAA,QAC/B;AAAA,MACF;AAAA,MACA,EAAE,aAAa,MAAM,OAAO,+BAA+B,OAAO;AAAA,IACpE;AAEA,UAAM,oBAAoB;AAAA,MACxB,YAAY,IAAI,UAAU,QAAQ,YAAY;AAAA,MAC9C,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,aAAa,EAAE,IAAI,QAAQ,IAAI,gBAAgB,QAAQ,gBAAgB,UAAU,QAAQ,SAAS;AAAA,MAClG,QAAQ;AAAA,MACR,SAAS;AAAA,IACX,CAAC;AAED,WAAO,EAAE,WAAW,QAAQ,IAAI,QAAQ,QAAQ,OAAO;AAAA,EACzD;AAAA,EACA,UAAU,OAAO,EAAE,UAAU,MAAM;AACjC,UAAM,SAAU,UAAU,QAAuD;AACjF,QAAI,CAAC,OAAQ,QAAO;AACpB,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,WAAO;AAAA,MACL,aAAa,UAAU,+CAA+C,qBAAqB;AAAA,MAC3F,cAAc;AAAA,MACd,YAAY,OAAO;AAAA,MACnB,oBAAoB;AAAA,MACpB,kBAAkB,OAAO;AAAA,MACzB,UAAU,OAAO;AAAA,MACjB,gBAAgB,OAAO;AAAA,MACvB,gBAAgB;AAAA,MAChB,SAAS;AAAA,QACP,MAAM,EAAE,OAAO;AAAA,MACjB;AAAA,IACF;AAAA,EACF;AAAA,EACA,MAAM,OAAO,EAAE,UAAU,IAAI,MAAM;AACjC,UAAM,UAAU,mBAAuC,QAAQ;AAC/D,UAAM,SAAS,SAAS;AACxB,QAAI,CAAC,OAAQ;AACb,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,QAAI,UAAU,MAAM,GAAG;AAAA,MACrB;AAAA,MACA,yBAAyB,OAAO,IAAI,+BAA+B,MAAM,CAAC;AAAA,IAC5E;AAEA,UAAM;AAAA,MACJ;AAAA,MACA;AAAA,QACE,MAAM;AACJ,cAAI,CAAC,SAAS;AACZ,sBAAU,GAAG,OAAO,sBAAsB;AAAA,cACxC,IAAI,OAAO;AAAA,cACX,UAAU,OAAO;AAAA,cACjB,gBAAgB,OAAO;AAAA,cACvB,QAAQ,OAAO;AAAA,cACf,MAAM,OAAO;AAAA,cACb,cAAc,OAAO;AAAA,cACrB,WAAW,OAAO,YAAY,IAAI,KAAK,OAAO,SAAS,IAAI,oBAAI,KAAK;AAAA,cACpE,WAAW,oBAAI,KAAK;AAAA,cACpB,WAAW;AAAA,YACb,CAAC;AACD,eAAG,QAAQ,OAAO;AAClB;AAAA,UACF;AACA,kBAAQ,OAAO,OAAO;AACtB,kBAAQ,eAAe,OAAO;AAC9B,kBAAQ,YAAY;AACpB,kBAAQ,YAAY,oBAAI,KAAK;AAAA,QAC/B;AAAA,MACF;AAAA,MACA,EAAE,aAAa,MAAM,OAAO,GAAG,+BAA+B,MAAM,QAAQ;AAAA,IAC9E;AAEA,UAAM,wBAAwB;AAAA,MAC5B,YAAY,IAAI,UAAU,QAAQ,YAAY;AAAA,MAC9C,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,aAAa,EAAE,IAAI,OAAO,IAAI,gBAAgB,OAAO,gBAAgB,UAAU,OAAO,SAAS;AAAA,MAC/F,QAAQ;AAAA,MACR,SAAS;AAAA,IACX,CAAC;AAAA,EACH;AACF;AAEA,gBAAgB,wBAAwB;AACxC,gBAAgB,wBAAwB;AACxC,gBAAgB,wBAAwB;",
+  "sourcesContent": ["/**\n * Task comment commands (T3.4b) \u2014 the \"Komentarze (2)\" thread of screen 7.\n *\n * US-C4 asks for context that lives with the work rather than in chat, so a\n * comment is only useful if the two things rendered next to its body are true:\n * *who* wrote it and *when*. Three decisions follow from that:\n *\n *  1. **`author_user_id` is stamped from the authenticated caller and is never\n *     read from input.** `staffTimeTaskCommentCreateSchema` still declares the\n *     field (it is the shared scoped-create shape), but this command discards\n *     whatever arrives there. Attribution a client can set is not attribution \u2014\n *     it is a free-text field with an authoritative-looking name. Deliberately\n *     stricter than the shared `normalizeAuthorUserId` helper, which lets a\n *     super-admin post on someone else's behalf: on a client-facing thread that\n *     escape hatch would turn the avatar into a claim rather than a fact.\n *  2. **Editing is the author's own comment only**, unless the caller holds\n *     `staff.timesheets.manage_all`. Deleting follows the same rule \u2014 a thread\n *     someone else can rewrite is not a record. The manager exemption exists\n *     because a client-facing thread sometimes has to have something removed,\n *     and the grant is checked through `authorizeFeatures` so a wildcard\n *     (`staff.*`, `staff.timesheets.*`) counts the way it does everywhere else.\n *  3. **Delete is soft.** The row keeps its body, its author and its timestamps,\n *     so the audit trail (and undo) survives a comment leaving the thread.\n *\n * The parent task's *project* access is NOT resolved here \u2014 it is the route's\n * job (see `api/timesheets/tasks/[id]/comments/route.ts`), because only the\n * route knows the task id the caller addressed. What this file does enforce is\n * that the task exists inside the caller's tenant and organization, so a direct\n * command invocation cannot write a comment onto a foreign row.\n */\n\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport type { CommandHandler, CommandRuntimeContext } from '@open-mercato/shared/lib/commands'\nimport { registerCommand } from '@open-mercato/shared/lib/commands'\nimport { CrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { assertOptimisticLock, readOptimisticLockExpected } from '@open-mercato/shared/lib/crud/optimistic-lock-command'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { buildChanges, emitCrudSideEffects, emitCrudUndoSideEffects } from '@open-mercato/shared/lib/commands/helpers'\nimport { withAtomicFlush } from '@open-mercato/shared/lib/commands/flush'\nimport { authorizeFeatures } from '@open-mercato/shared/security/featurePolicy'\nimport type { CrudEventsConfig, CrudIndexerConfig } from '@open-mercato/shared/lib/crud/types'\nimport { StaffTimeTask, StaffTimeTaskComment, type StaffTimeTaskCommentVisibility } from '../data/entities'\nimport { staffTimeTaskCommentCrudEvents } from '../lib/crud'\nimport {\n  staffTimeTaskCommentCreateSchema,\n  staffTimeTaskCommentUpdateRequestSchema,\n  type StaffTimeTaskCommentCreateInput,\n  type StaffTimeTaskCommentUpdateRequestInput,\n} from '../data/validators'\nimport {\n  applyScopeToWhere,\n  commandActorScope,\n  commandInputScope,\n  ensureOrganizationScope,\n  ensureTenantScope,\n  extractUndoPayload,\n  scopedStaffSnapshotWhere,\n  staffSnapshotScopeFromContext,\n  staffSnapshotScopeFromSnapshot,\n  type StaffCommandScope,\n  type StaffSnapshotScope,\n} from './shared'\n\nexport const staffTimeTaskCommentCommandIds = {\n  create: 'staff.timesheets.task_comments.create',\n  update: 'staff.timesheets.task_comments.update',\n  delete: 'staff.timesheets.task_comments.delete',\n} as const\n\n/**\n * Resource kind used for the audit log, the mutation-guard registry and the\n * command-level optimistic lock, matching the `staff.timesheets.<entity>` shape\n * the other hand-written timesheets routes present so an `OM_OPTIMISTIC_LOCK`\n * allow-list can name it.\n */\nexport const STAFF_TIME_TASK_COMMENT_RESOURCE_KIND = 'staff.timesheets.task_comment'\n\nexport const TASK_COMMENT_NOT_AUTHOR_CODE = 'task_comment_not_author'\n\nconst MANAGE_ALL_FEATURE = 'staff.timesheets.manage_all'\n\nconst AUTHOR_UUID_REGEX = /^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$/\n\nconst commentCrudIndexer: CrudIndexerConfig<StaffTimeTaskComment> = {\n  entityType: 'staff:staff_time_task_comment',\n}\n\n/**\n * `staff.timesheets.time_task_comment.{created,updated,deleted}` from `events.ts`.\n *\n * The route is hand-written (it must answer 404 rather than an empty page for a\n * task the caller cannot see), so it takes no `events:` config the CRUD factory\n * could read \u2014 the command emits the lifecycle events itself. It uses the shared\n * export rather than a local copy so the ids the module publishes and the ids this\n * command emits cannot drift apart.\n */\nconst commentCrudEvents: CrudEventsConfig<StaffTimeTaskComment> = staffTimeTaskCommentCrudEvents\n\n/**\n * The comment CRUD events carry `portalVisible`: true when the comment is visible to\n * the customer before OR after the change, so publishing, retracting and deleting a\n * reply all refresh the portal. Internal notes never set it.\n */\nfunction commentEvents(portalVisible: boolean): CrudEventsConfig<StaffTimeTaskComment> {\n  const base = staffTimeTaskCommentCrudEvents\n  return {\n    ...base,\n    buildPayload: (context) => ({\n      ...((base.buildPayload ? base.buildPayload(context) : {}) as Record<string, unknown>),\n      portalVisible,\n    }),\n  }\n}\n\nexport const TASK_COMMENT_CUSTOMER_IMMUTABLE_CODE = 'task_comment_customer_immutable'\nexport const TASK_COMMENT_VISIBILITY_INVALID_CODE = 'task_comment_visibility_invalid'\n\nfunction customerCommentImmutableError(translate: Translate): CrudHttpError {\n  return new CrudHttpError(403, {\n    code: TASK_COMMENT_CUSTOMER_IMMUTABLE_CODE,\n    error: translate(\n      'staff.time_tracking.taskComments.errors.customerImmutable',\n      'Messages written by the customer cannot be edited or deleted.',\n    ),\n  })\n}\n\nfunction visibilityInvalidError(translate: Translate): CrudHttpError {\n  const message = translate(\n    'staff.time_tracking.taskComments.errors.visibilityPortalOnly',\n    'Only customer support tickets can carry replies visible to the customer.',\n  )\n  return new CrudHttpError(422, { code: TASK_COMMENT_VISIBILITY_INVALID_CODE, error: message, fieldErrors: { visibility: message } })\n}\n\ntype Translate = (key: string, fallback: string) => string\n\ntype CommentSnapshot = {\n  id: string\n  tenantId: string\n  organizationId: string\n  taskId: string\n  body: string\n  authorUserId: string | null\n  visibility: StaffTimeTaskCommentVisibility\n  authorKind: string\n  createdAt: string | null\n  deletedAt: string | null\n}\n\ntype CommentUndoPayload = {\n  before?: CommentSnapshot | null\n  after?: CommentSnapshot | null\n}\n\ntype RbacServiceLike = {\n  getGrantedFeatures?: (\n    userId: string,\n    options: { tenantId: string | null; organizationId: string | null },\n  ) => Promise<string[]>\n}\n\nfunction toCommentSnapshot(comment: StaffTimeTaskComment): CommentSnapshot {\n  return {\n    id: comment.id,\n    tenantId: comment.tenantId,\n    organizationId: comment.organizationId,\n    taskId: comment.taskId,\n    body: comment.body,\n    authorUserId: comment.authorUserId ?? null,\n    visibility: comment.visibility ?? 'internal',\n    authorKind: comment.authorKind ?? 'staff',\n    createdAt: comment.createdAt ? comment.createdAt.toISOString() : null,\n    deletedAt: comment.deletedAt ? comment.deletedAt.toISOString() : null,\n  }\n}\n\nasync function loadCommentSnapshot(\n  em: EntityManager,\n  id: string,\n  scope?: StaffSnapshotScope | null,\n): Promise<CommentSnapshot | null> {\n  const comment = await em.findOne(StaffTimeTaskComment, scopedStaffSnapshotWhere(id, scope))\n  return comment ? toCommentSnapshot(comment) : null\n}\n\nfunction commentNotFoundError(translate: Translate): CrudHttpError {\n  return new CrudHttpError(404, {\n    error: translate('staff.time_tracking.taskComments.errors.notFound', 'Comment not found or not accessible.'),\n  })\n}\n\nfunction taskNotFoundError(translate: Translate): CrudHttpError {\n  return new CrudHttpError(404, {\n    error: translate('staff.time_tracking.tasks.errors.notFound', 'Task not found or not accessible.'),\n  })\n}\n\nfunction notAuthorError(translate: Translate): CrudHttpError {\n  return new CrudHttpError(403, {\n    code: TASK_COMMENT_NOT_AUTHOR_CODE,\n    error: translate(\n      'staff.time_tracking.taskComments.errors.notAuthor',\n      'You can only edit or delete your own comments.',\n    ),\n  })\n}\n\n/**\n * The comment's author is whoever the request authenticated as \u2014 never the\n * `authorUserId` the payload carried. An API key has no human behind it, so it\n * writes an unattributed comment rather than borrowing an identity.\n */\nfunction stampAuthorUserId(ctx: CommandRuntimeContext): string | null {\n  const auth = ctx.auth as { isApiKey?: boolean; sub?: string | null } | null | undefined\n  if (!auth || auth.isApiKey === true) return null\n  const sub = typeof auth.sub === 'string' ? auth.sub.trim() : ''\n  if (!sub || !AUTHOR_UUID_REGEX.test(sub)) return null\n  return sub\n}\n\n/**\n * Wildcard-aware `staff.timesheets.manage_all` check. Reads the grants from\n * `rbacService` rather than the token's feature array so a stale or trimmed\n * browser payload cannot widen the exemption, and fails closed when the grants\n * cannot be read \u2014 the caller then falls back to \"author only\", which is the\n * safe half of the rule.\n */\nasync function callerCanManageAll(ctx: CommandRuntimeContext): Promise<boolean> {\n  if (ctx.auth?.isSuperAdmin === true || ctx.systemActor === true) return true\n  const userId = ctx.auth?.sub ?? null\n  const tenantId = ctx.auth?.tenantId ?? null\n  const organizationId = ctx.selectedOrganizationId ?? ctx.auth?.orgId ?? null\n  if (!userId || !tenantId) return false\n  let grantedFeatures: string[] = []\n  try {\n    const rbac = ctx.container.resolve('rbacService') as RbacServiceLike | undefined\n    if (rbac?.getGrantedFeatures) {\n      grantedFeatures = (await rbac.getGrantedFeatures(userId, { tenantId, organizationId })) ?? []\n    }\n  } catch {\n    return false\n  }\n  return authorizeFeatures([MANAGE_ALL_FEATURE], {\n    grantedFeatures,\n    scopeAllowed: Boolean(tenantId) && Boolean(organizationId),\n  })\n}\n\nasync function requireEditableComment(\n  comment: StaffTimeTaskComment,\n  ctx: CommandRuntimeContext,\n  translate: Translate,\n): Promise<void> {\n  if (comment.authorKind === 'customer') throw customerCommentImmutableError(translate)\n  const actorId = stampAuthorUserId(ctx)\n  if (actorId && comment.authorUserId === actorId) return\n  if (await callerCanManageAll(ctx)) return\n  throw notAuthorError(translate)\n}\n\nfunction assertCommentVersion(ctx: CommandRuntimeContext, comment: StaffTimeTaskComment): void {\n  assertOptimisticLock({\n    resourceKind: STAFF_TIME_TASK_COMMENT_RESOURCE_KIND,\n    resourceId: comment.id,\n    expected: readOptimisticLockExpected(ctx.request ?? null),\n    current: comment.updatedAt,\n  })\n}\n\nasync function requireTaskInScope(\n  em: EntityManager,\n  taskId: string,\n  scope: StaffCommandScope,\n  translate: Translate,\n): Promise<StaffTimeTask> {\n  const task = await em.findOne(StaffTimeTask, applyScopeToWhere<StaffTimeTask>({ id: taskId, deletedAt: null }, scope))\n  if (!task) throw taskNotFoundError(translate)\n  return task\n}\n\nconst createTaskCommentCommand: CommandHandler<\n  StaffTimeTaskCommentCreateInput,\n  { commentId: string; taskId: string; authorUserId: string | null }\n> = {\n  id: staffTimeTaskCommentCommandIds.create,\n  async execute(rawInput, ctx) {\n    const parsed = staffTimeTaskCommentCreateSchema.parse(rawInput)\n    ensureTenantScope(ctx, parsed.tenantId)\n    ensureOrganizationScope(ctx, parsed.organizationId)\n    const scope = commandInputScope(ctx, parsed.tenantId, parsed.organizationId)\n    const { translate } = await resolveTranslations()\n    // `parsed.authorUserId` is intentionally unread \u2014 see the file header.\n    const authorUserId = stampAuthorUserId(ctx)\n\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n    let created: StaffTimeTaskComment | null = null\n\n    await withAtomicFlush(\n      em,\n      [\n        async () => {\n          const task = await requireTaskInScope(em, parsed.taskId, scope, translate)\n          if (parsed.visibility === 'customer' && task.source !== 'portal') throw visibilityInvalidError(translate)\n        },\n        () => {\n          created = em.create(StaffTimeTaskComment, {\n            tenantId: parsed.tenantId,\n            organizationId: parsed.organizationId,\n            taskId: parsed.taskId,\n            body: parsed.body,\n            authorUserId,\n            visibility: parsed.visibility ?? 'internal',\n            authorKind: 'staff',\n            createdAt: new Date(),\n            updatedAt: new Date(),\n            deletedAt: null,\n          })\n          em.persist(created)\n        },\n      ],\n      { transaction: true, label: staffTimeTaskCommentCommandIds.create },\n    )\n\n    const record = created as StaffTimeTaskComment | null\n    if (!record) throw commentNotFoundError(translate)\n\n    await emitCrudSideEffects({\n      dataEngine: ctx.container.resolve('dataEngine'),\n      action: 'created',\n      entity: record,\n      identifiers: { id: record.id, organizationId: record.organizationId, tenantId: record.tenantId },\n      events: commentEvents(record.visibility === 'customer'),\n      indexer: commentCrudIndexer,\n    })\n\n    return { commentId: record.id, taskId: record.taskId, authorUserId: record.authorUserId ?? null }\n  },\n  captureAfter: async (_input, result, ctx) => {\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n    const snapshot = await loadCommentSnapshot(em, result.commentId, staffSnapshotScopeFromContext(ctx))\n    if (!snapshot) return null\n    return { snapshot }\n  },\n  buildLog: async ({ result, snapshots }) => {\n    const snapshot = (snapshots.after as { snapshot?: CommentSnapshot } | undefined)?.snapshot\n    if (!snapshot) return null\n    const { translate } = await resolveTranslations()\n    return {\n      actionLabel: translate('staff.audit.timesheets.task_comments.create', 'Create task comment'),\n      resourceKind: STAFF_TIME_TASK_COMMENT_RESOURCE_KIND,\n      resourceId: result.commentId,\n      parentResourceKind: 'staff.timesheets.task',\n      parentResourceId: snapshot.taskId,\n      tenantId: snapshot.tenantId,\n      organizationId: snapshot.organizationId,\n      snapshotAfter: snapshot,\n      payload: {\n        undo: { after: snapshot } satisfies CommentUndoPayload,\n      },\n    }\n  },\n  undo: async ({ logEntry, ctx }) => {\n    const payload = extractUndoPayload<CommentUndoPayload>(logEntry)\n    const after = payload?.after\n    if (!after) return\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n    const comment = await em.findOne(\n      StaffTimeTaskComment,\n      scopedStaffSnapshotWhere(after.id, staffSnapshotScopeFromSnapshot(after)),\n    )\n    if (!comment) return\n\n    await withAtomicFlush(\n      em,\n      [\n        () => {\n          comment.deletedAt = new Date()\n          comment.updatedAt = new Date()\n        },\n      ],\n      { transaction: true, label: `${staffTimeTaskCommentCommandIds.create}.undo` },\n    )\n\n    await emitCrudUndoSideEffects({\n      dataEngine: ctx.container.resolve('dataEngine'),\n      action: 'deleted',\n      entity: comment,\n      identifiers: { id: comment.id, organizationId: comment.organizationId, tenantId: comment.tenantId },\n      events: commentEvents(comment.visibility === 'customer'),\n      indexer: commentCrudIndexer,\n    })\n  },\n}\n\nconst updateTaskCommentCommand: CommandHandler<\n  StaffTimeTaskCommentUpdateRequestInput,\n  { commentId: string; taskId: string }\n> = {\n  id: staffTimeTaskCommentCommandIds.update,\n  async prepare(rawInput, ctx) {\n    const parsed = staffTimeTaskCommentUpdateRequestSchema.safeParse(rawInput)\n    if (!parsed.success) return {}\n    const em = ctx.container.resolve('em') as EntityManager\n    const before = await loadCommentSnapshot(em, parsed.data.id, staffSnapshotScopeFromContext(ctx))\n    if (!before) return {}\n    return { before: { snapshot: before } }\n  },\n  async execute(rawInput, ctx) {\n    const parsed = staffTimeTaskCommentUpdateRequestSchema.parse(rawInput)\n    const { translate } = await resolveTranslations()\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n    const scope = commandActorScope(ctx)\n\n    const comment = await em.findOne(\n      StaffTimeTaskComment,\n      applyScopeToWhere<StaffTimeTaskComment>({ id: parsed.id, deletedAt: null }, scope),\n    )\n    if (!comment) throw commentNotFoundError(translate)\n    ensureTenantScope(ctx, comment.tenantId)\n    ensureOrganizationScope(ctx, comment.organizationId)\n    assertCommentVersion(ctx, comment)\n    await requireEditableComment(comment, ctx, translate)\n    const visibilityBefore = comment.visibility ?? 'internal'\n    if (parsed.visibility === 'customer' && visibilityBefore !== 'customer') {\n      const task = await requireTaskInScope(em, comment.taskId, scope, translate)\n      if (task.source !== 'portal') throw visibilityInvalidError(translate)\n    }\n\n    await withAtomicFlush(\n      em,\n      [\n        () => {\n          if (parsed.body !== undefined) comment.body = parsed.body\n          if (parsed.visibility !== undefined) comment.visibility = parsed.visibility\n          comment.updatedAt = new Date()\n        },\n      ],\n      { transaction: true, label: staffTimeTaskCommentCommandIds.update },\n    )\n\n    await emitCrudSideEffects({\n      dataEngine: ctx.container.resolve('dataEngine'),\n      action: 'updated',\n      entity: comment,\n      identifiers: { id: comment.id, organizationId: comment.organizationId, tenantId: comment.tenantId },\n      events: commentEvents(visibilityBefore === 'customer' || comment.visibility === 'customer'),\n      indexer: commentCrudIndexer,\n    })\n\n    return { commentId: comment.id, taskId: comment.taskId }\n  },\n  buildLog: async ({ snapshots, ctx }) => {\n    const before = (snapshots.before as { snapshot?: CommentSnapshot } | undefined)?.snapshot\n    if (!before) return null\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n    const after = await loadCommentSnapshot(em, before.id, staffSnapshotScopeFromSnapshot(before))\n    if (!after) return null\n    const { translate } = await resolveTranslations()\n    return {\n      actionLabel: translate('staff.audit.timesheets.task_comments.update', 'Update task comment'),\n      resourceKind: STAFF_TIME_TASK_COMMENT_RESOURCE_KIND,\n      resourceId: before.id,\n      parentResourceKind: 'staff.timesheets.task',\n      parentResourceId: before.taskId,\n      tenantId: before.tenantId,\n      organizationId: before.organizationId,\n      snapshotBefore: before,\n      snapshotAfter: after,\n      changes: buildChanges(\n        before as unknown as Record<string, unknown>,\n        after as unknown as Record<string, unknown>,\n        ['body', 'visibility'],\n      ),\n      payload: {\n        undo: { before, after } satisfies CommentUndoPayload,\n      },\n    }\n  },\n  undo: async ({ logEntry, ctx }) => {\n    const payload = extractUndoPayload<CommentUndoPayload>(logEntry)\n    const before = payload?.before\n    if (!before) return\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n    const comment = await em.findOne(\n      StaffTimeTaskComment,\n      scopedStaffSnapshotWhere(before.id, staffSnapshotScopeFromSnapshot(before)),\n    )\n    if (!comment) return\n\n    await withAtomicFlush(\n      em,\n      [\n        () => {\n          comment.body = before.body\n          comment.visibility = before.visibility ?? 'internal'\n          comment.updatedAt = new Date()\n        },\n      ],\n      { transaction: true, label: `${staffTimeTaskCommentCommandIds.update}.undo` },\n    )\n\n    await emitCrudUndoSideEffects({\n      dataEngine: ctx.container.resolve('dataEngine'),\n      action: 'updated',\n      entity: comment,\n      identifiers: { id: comment.id, organizationId: comment.organizationId, tenantId: comment.tenantId },\n      events: commentEvents(true),\n      indexer: commentCrudIndexer,\n    })\n  },\n}\n\nconst deleteTaskCommentCommand: CommandHandler<{ id?: string }, { commentId: string; taskId: string }> = {\n  id: staffTimeTaskCommentCommandIds.delete,\n  async prepare(input, ctx) {\n    const id = input?.id\n    if (!id) return {}\n    const em = ctx.container.resolve('em') as EntityManager\n    const before = await loadCommentSnapshot(em, id, staffSnapshotScopeFromContext(ctx))\n    if (!before) return {}\n    return { before: { snapshot: before } }\n  },\n  async execute(input, ctx) {\n    const { translate } = await resolveTranslations()\n    const id = input?.id\n    if (!id) {\n      throw new CrudHttpError(400, {\n        error: translate('staff.time_tracking.taskComments.errors.idRequired', 'Comment id is required.'),\n      })\n    }\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n    const scope = commandActorScope(ctx)\n    const comment = await em.findOne(\n      StaffTimeTaskComment,\n      applyScopeToWhere<StaffTimeTaskComment>({ id, deletedAt: null }, scope),\n    )\n    if (!comment) throw commentNotFoundError(translate)\n    ensureTenantScope(ctx, comment.tenantId)\n    ensureOrganizationScope(ctx, comment.organizationId)\n    assertCommentVersion(ctx, comment)\n    await requireEditableComment(comment, ctx, translate)\n\n    // Soft delete: the body, the author and the timestamps stay on the row so\n    // the audit trail \u2014 and undo \u2014 still has something to point at.\n    await withAtomicFlush(\n      em,\n      [\n        () => {\n          comment.deletedAt = new Date()\n          comment.updatedAt = new Date()\n        },\n      ],\n      { transaction: true, label: staffTimeTaskCommentCommandIds.delete },\n    )\n\n    await emitCrudSideEffects({\n      dataEngine: ctx.container.resolve('dataEngine'),\n      action: 'deleted',\n      entity: comment,\n      identifiers: { id: comment.id, organizationId: comment.organizationId, tenantId: comment.tenantId },\n      events: commentEvents(comment.visibility === 'customer'),\n      indexer: commentCrudIndexer,\n    })\n\n    return { commentId: comment.id, taskId: comment.taskId }\n  },\n  buildLog: async ({ snapshots }) => {\n    const before = (snapshots.before as { snapshot?: CommentSnapshot } | undefined)?.snapshot\n    if (!before) return null\n    const { translate } = await resolveTranslations()\n    return {\n      actionLabel: translate('staff.audit.timesheets.task_comments.delete', 'Delete task comment'),\n      resourceKind: STAFF_TIME_TASK_COMMENT_RESOURCE_KIND,\n      resourceId: before.id,\n      parentResourceKind: 'staff.timesheets.task',\n      parentResourceId: before.taskId,\n      tenantId: before.tenantId,\n      organizationId: before.organizationId,\n      snapshotBefore: before,\n      payload: {\n        undo: { before } satisfies CommentUndoPayload,\n      },\n    }\n  },\n  undo: async ({ logEntry, ctx }) => {\n    const payload = extractUndoPayload<CommentUndoPayload>(logEntry)\n    const before = payload?.before\n    if (!before) return\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n    let comment = await em.findOne(\n      StaffTimeTaskComment,\n      scopedStaffSnapshotWhere(before.id, staffSnapshotScopeFromSnapshot(before)),\n    )\n\n    await withAtomicFlush(\n      em,\n      [\n        () => {\n          if (!comment) {\n            comment = em.create(StaffTimeTaskComment, {\n              id: before.id,\n              tenantId: before.tenantId,\n              organizationId: before.organizationId,\n              taskId: before.taskId,\n              body: before.body,\n              authorUserId: before.authorUserId,\n              visibility: before.visibility ?? 'internal',\n              createdAt: before.createdAt ? new Date(before.createdAt) : new Date(),\n              updatedAt: new Date(),\n              deletedAt: null,\n            })\n            em.persist(comment)\n            return\n          }\n          comment.body = before.body\n          comment.authorUserId = before.authorUserId\n          comment.deletedAt = null\n          comment.updatedAt = new Date()\n        },\n      ],\n      { transaction: true, label: `${staffTimeTaskCommentCommandIds.delete}.undo` },\n    )\n\n    await emitCrudUndoSideEffects({\n      dataEngine: ctx.container.resolve('dataEngine'),\n      action: 'created',\n      entity: comment,\n      identifiers: { id: before.id, organizationId: before.organizationId, tenantId: before.tenantId },\n      events: commentEvents(before.visibility === 'customer'),\n      indexer: commentCrudIndexer,\n    })\n  },\n}\n\nregisterCommand(createTaskCommentCommand)\nregisterCommand(updateTaskCommentCommand)\nregisterCommand(deleteTaskCommentCommand)\n"],
+  "mappings": "AAiCA,SAAS,uBAAuB;AAChC,SAAS,qBAAqB;AAC9B,SAAS,sBAAsB,kCAAkC;AACjE,SAAS,2BAA2B;AACpC,SAAS,cAAc,qBAAqB,+BAA+B;AAC3E,SAAS,uBAAuB;AAChC,SAAS,yBAAyB;AAElC,SAAS,eAAe,4BAAiE;AACzF,SAAS,sCAAsC;AAC/C;AAAA,EACE;AAAA,EACA;AAAA,OAGK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAGK;AAEA,MAAM,iCAAiC;AAAA,EAC5C,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,QAAQ;AACV;AAQO,MAAM,wCAAwC;AAE9C,MAAM,+BAA+B;AAE5C,MAAM,qBAAqB;AAE3B,MAAM,oBAAoB;AAE1B,MAAM,qBAA8D;AAAA,EAClE,YAAY;AACd;AAWA,MAAM,oBAA4D;AAOlE,SAAS,cAAc,eAAgE;AACrF,QAAM,OAAO;AACb,SAAO;AAAA,IACL,GAAG;AAAA,IACH,cAAc,CAAC,aAAa;AAAA,MAC1B,GAAK,KAAK,eAAe,KAAK,aAAa,OAAO,IAAI,CAAC;AAAA,MACvD;AAAA,IACF;AAAA,EACF;AACF;AAEO,MAAM,uCAAuC;AAC7C,MAAM,uCAAuC;AAEpD,SAAS,8BAA8B,WAAqC;AAC1E,SAAO,IAAI,cAAc,KAAK;AAAA,IAC5B,MAAM;AAAA,IACN,OAAO;AAAA,MACL;AAAA,MACA;AAAA,IACF;AAAA,EACF,CAAC;AACH;AAEA,SAAS,uBAAuB,WAAqC;AACnE,QAAM,UAAU;AAAA,IACd;AAAA,IACA;AAAA,EACF;AACA,SAAO,IAAI,cAAc,KAAK,EAAE,MAAM,sCAAsC,OAAO,SAAS,aAAa,EAAE,YAAY,QAAQ,EAAE,CAAC;AACpI;AA6BA,SAAS,kBAAkB,SAAgD;AACzE,SAAO;AAAA,IACL,IAAI,QAAQ;AAAA,IACZ,UAAU,QAAQ;AAAA,IAClB,gBAAgB,QAAQ;AAAA,IACxB,QAAQ,QAAQ;AAAA,IAChB,MAAM,QAAQ;AAAA,IACd,cAAc,QAAQ,gBAAgB;AAAA,IACtC,YAAY,QAAQ,cAAc;AAAA,IAClC,YAAY,QAAQ,cAAc;AAAA,IAClC,WAAW,QAAQ,YAAY,QAAQ,UAAU,YAAY,IAAI;AAAA,IACjE,WAAW,QAAQ,YAAY,QAAQ,UAAU,YAAY,IAAI;AAAA,EACnE;AACF;AAEA,eAAe,oBACb,IACA,IACA,OACiC;AACjC,QAAM,UAAU,MAAM,GAAG,QAAQ,sBAAsB,yBAAyB,IAAI,KAAK,CAAC;AAC1F,SAAO,UAAU,kBAAkB,OAAO,IAAI;AAChD;AAEA,SAAS,qBAAqB,WAAqC;AACjE,SAAO,IAAI,cAAc,KAAK;AAAA,IAC5B,OAAO,UAAU,oDAAoD,sCAAsC;AAAA,EAC7G,CAAC;AACH;AAEA,SAAS,kBAAkB,WAAqC;AAC9D,SAAO,IAAI,cAAc,KAAK;AAAA,IAC5B,OAAO,UAAU,6CAA6C,mCAAmC;AAAA,EACnG,CAAC;AACH;AAEA,SAAS,eAAe,WAAqC;AAC3D,SAAO,IAAI,cAAc,KAAK;AAAA,IAC5B,MAAM;AAAA,IACN,OAAO;AAAA,MACL;AAAA,MACA;AAAA,IACF;AAAA,EACF,CAAC;AACH;AAOA,SAAS,kBAAkB,KAA2C;AACpE,QAAM,OAAO,IAAI;AACjB,MAAI,CAAC,QAAQ,KAAK,aAAa,KAAM,QAAO;AAC5C,QAAM,MAAM,OAAO,KAAK,QAAQ,WAAW,KAAK,IAAI,KAAK,IAAI;AAC7D,MAAI,CAAC,OAAO,CAAC,kBAAkB,KAAK,GAAG,EAAG,QAAO;AACjD,SAAO;AACT;AASA,eAAe,mBAAmB,KAA8C;AAC9E,MAAI,IAAI,MAAM,iBAAiB,QAAQ,IAAI,gBAAgB,KAAM,QAAO;AACxE,QAAM,SAAS,IAAI,MAAM,OAAO;AAChC,QAAM,WAAW,IAAI,MAAM,YAAY;AACvC,QAAM,iBAAiB,IAAI,0BAA0B,IAAI,MAAM,SAAS;AACxE,MAAI,CAAC,UAAU,CAAC,SAAU,QAAO;AACjC,MAAI,kBAA4B,CAAC;AACjC,MAAI;AACF,UAAM,OAAO,IAAI,UAAU,QAAQ,aAAa;AAChD,QAAI,MAAM,oBAAoB;AAC5B,wBAAmB,MAAM,KAAK,mBAAmB,QAAQ,EAAE,UAAU,eAAe,CAAC,KAAM,CAAC;AAAA,IAC9F;AAAA,EACF,QAAQ;AACN,WAAO;AAAA,EACT;AACA,SAAO,kBAAkB,CAAC,kBAAkB,GAAG;AAAA,IAC7C;AAAA,IACA,cAAc,QAAQ,QAAQ,KAAK,QAAQ,cAAc;AAAA,EAC3D,CAAC;AACH;AAEA,eAAe,uBACb,SACA,KACA,WACe;AACf,MAAI,QAAQ,eAAe,WAAY,OAAM,8BAA8B,SAAS;AACpF,QAAM,UAAU,kBAAkB,GAAG;AACrC,MAAI,WAAW,QAAQ,iBAAiB,QAAS;AACjD,MAAI,MAAM,mBAAmB,GAAG,EAAG;AACnC,QAAM,eAAe,SAAS;AAChC;AAEA,SAAS,qBAAqB,KAA4B,SAAqC;AAC7F,uBAAqB;AAAA,IACnB,cAAc;AAAA,IACd,YAAY,QAAQ;AAAA,IACpB,UAAU,2BAA2B,IAAI,WAAW,IAAI;AAAA,IACxD,SAAS,QAAQ;AAAA,EACnB,CAAC;AACH;AAEA,eAAe,mBACb,IACA,QACA,OACA,WACwB;AACxB,QAAM,OAAO,MAAM,GAAG,QAAQ,eAAe,kBAAiC,EAAE,IAAI,QAAQ,WAAW,KAAK,GAAG,KAAK,CAAC;AACrH,MAAI,CAAC,KAAM,OAAM,kBAAkB,SAAS;AAC5C,SAAO;AACT;AAEA,MAAM,2BAGF;AAAA,EACF,IAAI,+BAA+B;AAAA,EACnC,MAAM,QAAQ,UAAU,KAAK;AAC3B,UAAM,SAAS,iCAAiC,MAAM,QAAQ;AAC9D,sBAAkB,KAAK,OAAO,QAAQ;AACtC,4BAAwB,KAAK,OAAO,cAAc;AAClD,UAAM,QAAQ,kBAAkB,KAAK,OAAO,UAAU,OAAO,cAAc;AAC3E,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAEhD,UAAM,eAAe,kBAAkB,GAAG;AAE1C,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,QAAI,UAAuC;AAE3C,UAAM;AAAA,MACJ;AAAA,MACA;AAAA,QACE,YAAY;AACV,gBAAM,OAAO,MAAM,mBAAmB,IAAI,OAAO,QAAQ,OAAO,SAAS;AACzE,cAAI,OAAO,eAAe,cAAc,KAAK,WAAW,SAAU,OAAM,uBAAuB,SAAS;AAAA,QAC1G;AAAA,QACA,MAAM;AACJ,oBAAU,GAAG,OAAO,sBAAsB;AAAA,YACxC,UAAU,OAAO;AAAA,YACjB,gBAAgB,OAAO;AAAA,YACvB,QAAQ,OAAO;AAAA,YACf,MAAM,OAAO;AAAA,YACb;AAAA,YACA,YAAY,OAAO,cAAc;AAAA,YACjC,YAAY;AAAA,YACZ,WAAW,oBAAI,KAAK;AAAA,YACpB,WAAW,oBAAI,KAAK;AAAA,YACpB,WAAW;AAAA,UACb,CAAC;AACD,aAAG,QAAQ,OAAO;AAAA,QACpB;AAAA,MACF;AAAA,MACA,EAAE,aAAa,MAAM,OAAO,+BAA+B,OAAO;AAAA,IACpE;AAEA,UAAM,SAAS;AACf,QAAI,CAAC,OAAQ,OAAM,qBAAqB,SAAS;AAEjD,UAAM,oBAAoB;AAAA,MACxB,YAAY,IAAI,UAAU,QAAQ,YAAY;AAAA,MAC9C,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,aAAa,EAAE,IAAI,OAAO,IAAI,gBAAgB,OAAO,gBAAgB,UAAU,OAAO,SAAS;AAAA,MAC/F,QAAQ,cAAc,OAAO,eAAe,UAAU;AAAA,MACtD,SAAS;AAAA,IACX,CAAC;AAED,WAAO,EAAE,WAAW,OAAO,IAAI,QAAQ,OAAO,QAAQ,cAAc,OAAO,gBAAgB,KAAK;AAAA,EAClG;AAAA,EACA,cAAc,OAAO,QAAQ,QAAQ,QAAQ;AAC3C,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,UAAM,WAAW,MAAM,oBAAoB,IAAI,OAAO,WAAW,8BAA8B,GAAG,CAAC;AACnG,QAAI,CAAC,SAAU,QAAO;AACtB,WAAO,EAAE,SAAS;AAAA,EACpB;AAAA,EACA,UAAU,OAAO,EAAE,QAAQ,UAAU,MAAM;AACzC,UAAM,WAAY,UAAU,OAAsD;AAClF,QAAI,CAAC,SAAU,QAAO;AACtB,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,WAAO;AAAA,MACL,aAAa,UAAU,+CAA+C,qBAAqB;AAAA,MAC3F,cAAc;AAAA,MACd,YAAY,OAAO;AAAA,MACnB,oBAAoB;AAAA,MACpB,kBAAkB,SAAS;AAAA,MAC3B,UAAU,SAAS;AAAA,MACnB,gBAAgB,SAAS;AAAA,MACzB,eAAe;AAAA,MACf,SAAS;AAAA,QACP,MAAM,EAAE,OAAO,SAAS;AAAA,MAC1B;AAAA,IACF;AAAA,EACF;AAAA,EACA,MAAM,OAAO,EAAE,UAAU,IAAI,MAAM;AACjC,UAAM,UAAU,mBAAuC,QAAQ;AAC/D,UAAM,QAAQ,SAAS;AACvB,QAAI,CAAC,MAAO;AACZ,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,UAAM,UAAU,MAAM,GAAG;AAAA,MACvB;AAAA,MACA,yBAAyB,MAAM,IAAI,+BAA+B,KAAK,CAAC;AAAA,IAC1E;AACA,QAAI,CAAC,QAAS;AAEd,UAAM;AAAA,MACJ;AAAA,MACA;AAAA,QACE,MAAM;AACJ,kBAAQ,YAAY,oBAAI,KAAK;AAC7B,kBAAQ,YAAY,oBAAI,KAAK;AAAA,QAC/B;AAAA,MACF;AAAA,MACA,EAAE,aAAa,MAAM,OAAO,GAAG,+BAA+B,MAAM,QAAQ;AAAA,IAC9E;AAEA,UAAM,wBAAwB;AAAA,MAC5B,YAAY,IAAI,UAAU,QAAQ,YAAY;AAAA,MAC9C,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,aAAa,EAAE,IAAI,QAAQ,IAAI,gBAAgB,QAAQ,gBAAgB,UAAU,QAAQ,SAAS;AAAA,MAClG,QAAQ,cAAc,QAAQ,eAAe,UAAU;AAAA,MACvD,SAAS;AAAA,IACX,CAAC;AAAA,EACH;AACF;AAEA,MAAM,2BAGF;AAAA,EACF,IAAI,+BAA+B;AAAA,EACnC,MAAM,QAAQ,UAAU,KAAK;AAC3B,UAAM,SAAS,wCAAwC,UAAU,QAAQ;AACzE,QAAI,CAAC,OAAO,QAAS,QAAO,CAAC;AAC7B,UAAM,KAAK,IAAI,UAAU,QAAQ,IAAI;AACrC,UAAM,SAAS,MAAM,oBAAoB,IAAI,OAAO,KAAK,IAAI,8BAA8B,GAAG,CAAC;AAC/F,QAAI,CAAC,OAAQ,QAAO,CAAC;AACrB,WAAO,EAAE,QAAQ,EAAE,UAAU,OAAO,EAAE;AAAA,EACxC;AAAA,EACA,MAAM,QAAQ,UAAU,KAAK;AAC3B,UAAM,SAAS,wCAAwC,MAAM,QAAQ;AACrE,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,UAAM,QAAQ,kBAAkB,GAAG;AAEnC,UAAM,UAAU,MAAM,GAAG;AAAA,MACvB;AAAA,MACA,kBAAwC,EAAE,IAAI,OAAO,IAAI,WAAW,KAAK,GAAG,KAAK;AAAA,IACnF;AACA,QAAI,CAAC,QAAS,OAAM,qBAAqB,SAAS;AAClD,sBAAkB,KAAK,QAAQ,QAAQ;AACvC,4BAAwB,KAAK,QAAQ,cAAc;AACnD,yBAAqB,KAAK,OAAO;AACjC,UAAM,uBAAuB,SAAS,KAAK,SAAS;AACpD,UAAM,mBAAmB,QAAQ,cAAc;AAC/C,QAAI,OAAO,eAAe,cAAc,qBAAqB,YAAY;AACvE,YAAM,OAAO,MAAM,mBAAmB,IAAI,QAAQ,QAAQ,OAAO,SAAS;AAC1E,UAAI,KAAK,WAAW,SAAU,OAAM,uBAAuB,SAAS;AAAA,IACtE;AAEA,UAAM;AAAA,MACJ;AAAA,MACA;AAAA,QACE,MAAM;AACJ,cAAI,OAAO,SAAS,OAAW,SAAQ,OAAO,OAAO;AACrD,cAAI,OAAO,eAAe,OAAW,SAAQ,aAAa,OAAO;AACjE,kBAAQ,YAAY,oBAAI,KAAK;AAAA,QAC/B;AAAA,MACF;AAAA,MACA,EAAE,aAAa,MAAM,OAAO,+BAA+B,OAAO;AAAA,IACpE;AAEA,UAAM,oBAAoB;AAAA,MACxB,YAAY,IAAI,UAAU,QAAQ,YAAY;AAAA,MAC9C,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,aAAa,EAAE,IAAI,QAAQ,IAAI,gBAAgB,QAAQ,gBAAgB,UAAU,QAAQ,SAAS;AAAA,MAClG,QAAQ,cAAc,qBAAqB,cAAc,QAAQ,eAAe,UAAU;AAAA,MAC1F,SAAS;AAAA,IACX,CAAC;AAED,WAAO,EAAE,WAAW,QAAQ,IAAI,QAAQ,QAAQ,OAAO;AAAA,EACzD;AAAA,EACA,UAAU,OAAO,EAAE,WAAW,IAAI,MAAM;AACtC,UAAM,SAAU,UAAU,QAAuD;AACjF,QAAI,CAAC,OAAQ,QAAO;AACpB,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,UAAM,QAAQ,MAAM,oBAAoB,IAAI,OAAO,IAAI,+BAA+B,MAAM,CAAC;AAC7F,QAAI,CAAC,MAAO,QAAO;AACnB,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,WAAO;AAAA,MACL,aAAa,UAAU,+CAA+C,qBAAqB;AAAA,MAC3F,cAAc;AAAA,MACd,YAAY,OAAO;AAAA,MACnB,oBAAoB;AAAA,MACpB,kBAAkB,OAAO;AAAA,MACzB,UAAU,OAAO;AAAA,MACjB,gBAAgB,OAAO;AAAA,MACvB,gBAAgB;AAAA,MAChB,eAAe;AAAA,MACf,SAAS;AAAA,QACP;AAAA,QACA;AAAA,QACA,CAAC,QAAQ,YAAY;AAAA,MACvB;AAAA,MACA,SAAS;AAAA,QACP,MAAM,EAAE,QAAQ,MAAM;AAAA,MACxB;AAAA,IACF;AAAA,EACF;AAAA,EACA,MAAM,OAAO,EAAE,UAAU,IAAI,MAAM;AACjC,UAAM,UAAU,mBAAuC,QAAQ;AAC/D,UAAM,SAAS,SAAS;AACxB,QAAI,CAAC,OAAQ;AACb,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,UAAM,UAAU,MAAM,GAAG;AAAA,MACvB;AAAA,MACA,yBAAyB,OAAO,IAAI,+BAA+B,MAAM,CAAC;AAAA,IAC5E;AACA,QAAI,CAAC,QAAS;AAEd,UAAM;AAAA,MACJ;AAAA,MACA;AAAA,QACE,MAAM;AACJ,kBAAQ,OAAO,OAAO;AACtB,kBAAQ,aAAa,OAAO,cAAc;AAC1C,kBAAQ,YAAY,oBAAI,KAAK;AAAA,QAC/B;AAAA,MACF;AAAA,MACA,EAAE,aAAa,MAAM,OAAO,GAAG,+BAA+B,MAAM,QAAQ;AAAA,IAC9E;AAEA,UAAM,wBAAwB;AAAA,MAC5B,YAAY,IAAI,UAAU,QAAQ,YAAY;AAAA,MAC9C,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,aAAa,EAAE,IAAI,QAAQ,IAAI,gBAAgB,QAAQ,gBAAgB,UAAU,QAAQ,SAAS;AAAA,MAClG,QAAQ,cAAc,IAAI;AAAA,MAC1B,SAAS;AAAA,IACX,CAAC;AAAA,EACH;AACF;AAEA,MAAM,2BAAmG;AAAA,EACvG,IAAI,+BAA+B;AAAA,EACnC,MAAM,QAAQ,OAAO,KAAK;AACxB,UAAM,KAAK,OAAO;AAClB,QAAI,CAAC,GAAI,QAAO,CAAC;AACjB,UAAM,KAAK,IAAI,UAAU,QAAQ,IAAI;AACrC,UAAM,SAAS,MAAM,oBAAoB,IAAI,IAAI,8BAA8B,GAAG,CAAC;AACnF,QAAI,CAAC,OAAQ,QAAO,CAAC;AACrB,WAAO,EAAE,QAAQ,EAAE,UAAU,OAAO,EAAE;AAAA,EACxC;AAAA,EACA,MAAM,QAAQ,OAAO,KAAK;AACxB,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,UAAM,KAAK,OAAO;AAClB,QAAI,CAAC,IAAI;AACP,YAAM,IAAI,cAAc,KAAK;AAAA,QAC3B,OAAO,UAAU,sDAAsD,yBAAyB;AAAA,MAClG,CAAC;AAAA,IACH;AACA,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,UAAM,QAAQ,kBAAkB,GAAG;AACnC,UAAM,UAAU,MAAM,GAAG;AAAA,MACvB;AAAA,MACA,kBAAwC,EAAE,IAAI,WAAW,KAAK,GAAG,KAAK;AAAA,IACxE;AACA,QAAI,CAAC,QAAS,OAAM,qBAAqB,SAAS;AAClD,sBAAkB,KAAK,QAAQ,QAAQ;AACvC,4BAAwB,KAAK,QAAQ,cAAc;AACnD,yBAAqB,KAAK,OAAO;AACjC,UAAM,uBAAuB,SAAS,KAAK,SAAS;AAIpD,UAAM;AAAA,MACJ;AAAA,MACA;AAAA,QACE,MAAM;AACJ,kBAAQ,YAAY,oBAAI,KAAK;AAC7B,kBAAQ,YAAY,oBAAI,KAAK;AAAA,QAC/B;AAAA,MACF;AAAA,MACA,EAAE,aAAa,MAAM,OAAO,+BAA+B,OAAO;AAAA,IACpE;AAEA,UAAM,oBAAoB;AAAA,MACxB,YAAY,IAAI,UAAU,QAAQ,YAAY;AAAA,MAC9C,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,aAAa,EAAE,IAAI,QAAQ,IAAI,gBAAgB,QAAQ,gBAAgB,UAAU,QAAQ,SAAS;AAAA,MAClG,QAAQ,cAAc,QAAQ,eAAe,UAAU;AAAA,MACvD,SAAS;AAAA,IACX,CAAC;AAED,WAAO,EAAE,WAAW,QAAQ,IAAI,QAAQ,QAAQ,OAAO;AAAA,EACzD;AAAA,EACA,UAAU,OAAO,EAAE,UAAU,MAAM;AACjC,UAAM,SAAU,UAAU,QAAuD;AACjF,QAAI,CAAC,OAAQ,QAAO;AACpB,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,WAAO;AAAA,MACL,aAAa,UAAU,+CAA+C,qBAAqB;AAAA,MAC3F,cAAc;AAAA,MACd,YAAY,OAAO;AAAA,MACnB,oBAAoB;AAAA,MACpB,kBAAkB,OAAO;AAAA,MACzB,UAAU,OAAO;AAAA,MACjB,gBAAgB,OAAO;AAAA,MACvB,gBAAgB;AAAA,MAChB,SAAS;AAAA,QACP,MAAM,EAAE,OAAO;AAAA,MACjB;AAAA,IACF;AAAA,EACF;AAAA,EACA,MAAM,OAAO,EAAE,UAAU,IAAI,MAAM;AACjC,UAAM,UAAU,mBAAuC,QAAQ;AAC/D,UAAM,SAAS,SAAS;AACxB,QAAI,CAAC,OAAQ;AACb,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,QAAI,UAAU,MAAM,GAAG;AAAA,MACrB;AAAA,MACA,yBAAyB,OAAO,IAAI,+BAA+B,MAAM,CAAC;AAAA,IAC5E;AAEA,UAAM;AAAA,MACJ;AAAA,MACA;AAAA,QACE,MAAM;AACJ,cAAI,CAAC,SAAS;AACZ,sBAAU,GAAG,OAAO,sBAAsB;AAAA,cACxC,IAAI,OAAO;AAAA,cACX,UAAU,OAAO;AAAA,cACjB,gBAAgB,OAAO;AAAA,cACvB,QAAQ,OAAO;AAAA,cACf,MAAM,OAAO;AAAA,cACb,cAAc,OAAO;AAAA,cACrB,YAAY,OAAO,cAAc;AAAA,cACjC,WAAW,OAAO,YAAY,IAAI,KAAK,OAAO,SAAS,IAAI,oBAAI,KAAK;AAAA,cACpE,WAAW,oBAAI,KAAK;AAAA,cACpB,WAAW;AAAA,YACb,CAAC;AACD,eAAG,QAAQ,OAAO;AAClB;AAAA,UACF;AACA,kBAAQ,OAAO,OAAO;AACtB,kBAAQ,eAAe,OAAO;AAC9B,kBAAQ,YAAY;AACpB,kBAAQ,YAAY,oBAAI,KAAK;AAAA,QAC/B;AAAA,MACF;AAAA,MACA,EAAE,aAAa,MAAM,OAAO,GAAG,+BAA+B,MAAM,QAAQ;AAAA,IAC9E;AAEA,UAAM,wBAAwB;AAAA,MAC5B,YAAY,IAAI,UAAU,QAAQ,YAAY;AAAA,MAC9C,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,aAAa,EAAE,IAAI,OAAO,IAAI,gBAAgB,OAAO,gBAAgB,UAAU,OAAO,SAAS;AAAA,MAC/F,QAAQ,cAAc,OAAO,eAAe,UAAU;AAAA,MACtD,SAAS;AAAA,IACX,CAAC;AAAA,EACH;AACF;AAEA,gBAAgB,wBAAwB;AACxC,gBAAgB,wBAAwB;AACxC,gBAAgB,wBAAwB;",
   "names": []
 }

package/dist/modules/staff/commands/timesheets-tasks.js

@@ -3,11 +3,13 @@ import { registerCommand } from "@open-mercato/shared/lib/commands";
 import { CrudHttpError } from "@open-mercato/shared/lib/crud/errors";
 import { enforceCommandOptimisticLockWithGuards } from "@open-mercato/shared/lib/crud/optimistic-lock-command";
 import { createLogger } from "@open-mercato/shared/lib/logger";
+import { getTelemetryRuntime } from "@open-mercato/shared/lib/telemetry/runtime";
 import { resolveTranslations } from "@open-mercato/shared/lib/i18n/server";
 import { findOneWithDecryption } from "@open-mercato/shared/lib/encryption/find";
 import { buildChanges, emitCrudSideEffects, emitCrudUndoSideEffects } from "@open-mercato/shared/lib/commands/helpers";
+import { findWithDecryption } from "@open-mercato/shared/lib/encryption/find";
 import { withAtomicFlush } from "@open-mercato/shared/lib/commands/flush";
-import { StaffTeamMember, StaffTimeProject, StaffTimeTask, StaffTimeTaskStatus } from "../data/entities.js";
+import { StaffSupportTicket, StaffTeamMember, StaffTimeTask, StaffTimeTaskStatus } from "../data/entities.js";
 import {
   staffTimeTaskCreateSchema,
   staffTimeTaskStatusChangeSchema,
@@ -31,7 +33,9 @@ import {
   commandInputScope,
   ensureOrganizationScope,
   ensureTenantScope,
+  explicitStaffCommandScope,
   extractUndoPayload,
+  lockLiveProjectForWrite,
   scopeForDecryption,
   scopedStaffSnapshotWhere,
   staffSnapshotScopeFromContext,
@@ -193,10 +197,7 @@ function referenceConflictError(translate) {
   });
 }
 async function requireProject(em, timeProjectId, scope, translate) {
-  const project = await em.findOne(
-    StaffTimeProject,
-    applyScopeToWhere({ id: timeProjectId, deletedAt: null }, scope)
-  );
+  const project = await lockLiveProjectForWrite(em, timeProjectId, scope);
   if (!project) throw projectNotFoundError(translate);
   return project;
 }
@@ -407,6 +408,25 @@ const createTaskCommand = {
     });
   }
 };
+function emitTaskAssigneeChanged(task, previousAssigneeStaffMemberId, changeKind, actorUserId2 = null) {
+  void emitStaffEvent(
+    "staff.timesheets.time_task.assignee_changed",
+    {
+      id: task.id,
+      tenantId: task.tenantId,
+      organizationId: task.organizationId,
+      timeProjectId: task.timeProjectId,
+      previousAssigneeStaffMemberId,
+      assigneeStaffMemberId: task.assigneeStaffMemberId ?? null,
+      changeKind,
+      actorUserId: actorUserId2
+    },
+    { persistent: true }
+  ).catch((err) => {
+    logger.error("staff.timesheets.time_task.assignee_changed emit failed", { err, taskId: task.id });
+    getTelemetryRuntime()?.reportError(err, { module: "staff", code: "staff.task_assignee_changed_emit_failed" });
+  });
+}
 const updateTaskCommand = {
   id: staffTimeTaskCommandIds.update,
   async prepare(rawInput, ctx) {
@@ -433,6 +453,7 @@ const updateTaskCommand = {
     let targetStatus = null;
     let targetParentTaskId;
     let targetAssigneeStaffMemberId;
+    const previousAssigneeStaffMemberId = task.assigneeStaffMemberId ?? null;
     await withAtomicFlush(
       em,
       [
@@ -483,6 +504,10 @@ const updateTaskCommand = {
       events: taskCrudEvents,
       indexer: taskCrudIndexer
     });
+    const nextAssigneeStaffMemberId = task.assigneeStaffMemberId ?? null;
+    if (targetAssigneeStaffMemberId !== void 0 && nextAssigneeStaffMemberId !== previousAssigneeStaffMemberId) {
+      emitTaskAssigneeChanged(task, previousAssigneeStaffMemberId, "manual", ctx.auth?.sub ?? null);
+    }
     return { taskId: task.id };
   },
   buildLog: async ({ snapshots, ctx }) => {
@@ -570,6 +595,8 @@ const deleteTaskCommand = {
     ensureOrganizationScope(ctx, task.organizationId);
     let children = [];
     let childIds = [];
+    let supportTickets = [];
+    const supportTicketIds = [];
     await withAtomicFlush(
       em,
       [
@@ -578,6 +605,18 @@ const deleteTaskCommand = {
             StaffTimeTask,
             applyScopeToWhere({ parentTaskId: task.id, deletedAt: null }, scope)
           );
+          supportTickets = await findWithDecryption(
+            em,
+            StaffSupportTicket,
+            {
+              taskId: { $in: [task.id, ...children.map((child) => child.id)] },
+              tenantId: task.tenantId,
+              organizationId: task.organizationId,
+              deletedAt: null
+            },
+            void 0,
+            { tenantId: task.tenantId, organizationId: task.organizationId }
+          );
         },
         () => {
           const plan = planTaskSoftDelete(task, children);
@@ -592,6 +631,13 @@ const deleteTaskCommand = {
             child.deletedAt = now;
             child.updatedAt = now;
           }
+          const removedTaskIds = /* @__PURE__ */ new Set([task.id, ...childIds]);
+          for (const ticket of supportTickets) {
+            if (!removedTaskIds.has(ticket.taskId)) continue;
+            ticket.deletedAt = now;
+            ticket.updatedAt = now;
+            supportTicketIds.push(ticket.id);
+          }
         }
       ],
       { transaction: true, label: staffTimeTaskCommandIds.delete }
@@ -607,9 +653,9 @@ const deleteTaskCommand = {
         indexer: taskCrudIndexer
       });
     }
-    return { taskId: task.id, childIds };
+    return { taskId: task.id, childIds, supportTicketIds };
   },
-  buildLog: async ({ snapshots }) => {
+  buildLog: async ({ snapshots, result }) => {
     const prepared = snapshots.before;
     const before = prepared?.snapshot;
     if (!before) return null;
@@ -624,7 +670,8 @@ const deleteTaskCommand = {
       payload: {
         undo: {
           before,
-          cascadedChildren: prepared?.cascadedChildren ?? null
+          cascadedChildren: prepared?.cascadedChildren ?? null,
+          cascadedSupportTicketIds: result?.supportTicketIds ?? []
         }
       }
     };
@@ -637,21 +684,48 @@ const deleteTaskCommand = {
     const em = ctx.container.resolve("em").fork();
     const ids = [before.id, ...(payload?.cascadedChildren ?? []).map((child) => child.id)];
     const restored = [];
+    const restoredTickets = [];
+    const ticketIds = payload?.cascadedSupportTicketIds ?? [];
+    const { translate } = await resolveTranslations();
     await withAtomicFlush(
       em,
       [
         async () => {
+          const project = await lockLiveProjectForWrite(
+            em,
+            before.timeProjectId,
+            explicitStaffCommandScope(before.tenantId, before.organizationId)
+          );
+          if (!project) throw projectNotFoundError(translate);
           const tasks = await em.find(StaffTimeTask, {
             id: { $in: ids },
             ...snapshotScopeWhere(snapshotScope)
           });
           restored.push(...tasks);
+          if (ticketIds.length === 0) return;
+          const tickets = await findWithDecryption(
+            em,
+            StaffSupportTicket,
+            {
+              id: { $in: ticketIds },
+              taskId: { $in: ids },
+              ...snapshotScopeWhere(snapshotScope),
+              deletedAt: { $ne: null }
+            },
+            void 0,
+            { tenantId: before.tenantId, organizationId: before.organizationId }
+          );
+          restoredTickets.push(...tickets);
         },
         () => {
           for (const task of restored) {
             task.deletedAt = null;
             task.updatedAt = /* @__PURE__ */ new Date();
           }
+          for (const ticket of restoredTickets) {
+            ticket.deletedAt = null;
+            ticket.updatedAt = /* @__PURE__ */ new Date();
+          }
         }
       ],
       { transaction: true, label: `${staffTimeTaskCommandIds.delete}.undo` }
@@ -824,11 +898,19 @@ registerCommand(statusChangeTaskCommand);
 export {
   STAFF_TIME_TASK_RESOURCE_KIND,
   TASK_DEPTH_EXCEEDED_CODE,
+  TASK_LIST_CACHE_RESOURCE,
   TASK_PARENT_PROJECT_MISMATCH_CODE,
   TASK_PARENT_SELF_CODE,
   TASK_PROJECT_MOVE_UNSUPPORTED_CODE,
   TASK_REFERENCE_CONFLICT_CODE,
   TASK_STATUS_MISSING_CODE,
-  staffTimeTaskCommandIds
+  applyStatusToTask,
+  emitTaskAssigneeChanged,
+  nextTaskPosition,
+  readHighestSequenceNumber,
+  resolveTaskStatus,
+  staffTimeTaskCommandIds,
+  taskCrudEvents,
+  taskCrudIndexer
 };
 //# sourceMappingURL=timesheets-tasks.js.map