@open-mercato/core 0.10.1-develop.7717.1.2befe9c634 → 0.10.1-develop.7721.1.b5c4a00a68

package/dist/modules/staff/lib/support/portalAttachments.js

@@ -0,0 +1,100 @@
+import { z } from "zod";
+import { findWithDecryption } from "@open-mercato/shared/lib/encryption/find";
+import { createLogger } from "@open-mercato/shared/lib/logger";
+import {
+  CUSTOMER_UPLOAD_TAG_PREFIX,
+  CUSTOMER_VISIBLE_ATTACHMENT_TAG,
+  SUPPORT_TICKET_ATTACHMENT_ENTITY_ID,
+  customerUploadTag
+} from "./attachments.js";
+const logger = createLogger("staff").child({ component: "lib/support/portalAttachments" });
+const portalSupportAttachmentItemSchema = z.object({
+  id: z.string().uuid(),
+  fileName: z.string(),
+  fileSize: z.number(),
+  mimeType: z.string().nullable(),
+  downloadUrl: z.string(),
+  uploadedByCustomer: z.boolean(),
+  canDelete: z.boolean(),
+  createdAt: z.string().nullable()
+});
+async function loadPortalAttachmentsApi() {
+  try {
+    const [entities, drivers, access, crud, metadataLib, imageUrls, thumbnails, limits, uploadService] = await Promise.all([
+      import("@open-mercato/core/modules/attachments/data/entities"),
+      import("@open-mercato/core/modules/attachments/lib/drivers"),
+      import("@open-mercato/core/modules/attachments/lib/access"),
+      import("@open-mercato/core/modules/attachments/lib/crud"),
+      import("@open-mercato/core/modules/attachments/lib/metadata"),
+      import("@open-mercato/core/modules/attachments/lib/imageUrls"),
+      import("@open-mercato/core/modules/attachments/lib/thumbnailCache"),
+      import("@open-mercato/core/modules/attachments/lib/upload-limits"),
+      import("@open-mercato/core/modules/attachments/lib/scoped-upload-service")
+    ]);
+    return {
+      Attachment: entities.Attachment,
+      AttachmentPartition: entities.AttachmentPartition,
+      StorageDriverFactory: drivers.StorageDriverFactory,
+      checkAttachmentAccess: access.checkAttachmentAccess,
+      attachmentCrudEvents: crud.attachmentCrudEvents,
+      attachmentCrudIndexer: crud.attachmentCrudIndexer,
+      readAttachmentMetadata: metadataLib.readAttachmentMetadata,
+      slugifyAttachmentFileName: imageUrls.slugifyAttachmentFileName,
+      clearAttachmentThumbnailCache: thumbnails.clearAttachmentThumbnailCache,
+      isMultipartRequestWithinUploadLimit: limits.isMultipartRequestWithinUploadLimit,
+      resolveAttachmentMaxBytes: limits.resolveAttachmentMaxBytes,
+      isScopedAttachmentUploadError: uploadService.isScopedAttachmentUploadError
+    };
+  } catch (err) {
+    logger.warn("staff portal support attachments module unavailable", { err });
+    return null;
+  }
+}
+function readAttachmentTags(api, attachment) {
+  return api.readAttachmentMetadata(attachment.storageMetadata).tags ?? [];
+}
+function portalAttachmentAuth(scope) {
+  return { sub: scope.auth.sub, tenantId: scope.tenantId, orgId: scope.organizationId, email: scope.auth.email };
+}
+function serializePortalAttachment(api, attachment, taskId, customerUserId, canManage = false) {
+  const tags = readAttachmentTags(api, attachment);
+  return {
+    id: attachment.id,
+    fileName: attachment.fileName,
+    fileSize: attachment.fileSize,
+    mimeType: attachment.mimeType ?? null,
+    downloadUrl: `/api/staff/portal/support-tickets/${encodeURIComponent(taskId)}/attachments?attachmentId=${encodeURIComponent(attachment.id)}`,
+    uploadedByCustomer: tags.some((tag) => tag.startsWith(CUSTOMER_UPLOAD_TAG_PREFIX)),
+    canDelete: canManage && tags.includes(customerUploadTag(customerUserId)),
+    createdAt: attachment.createdAt ? attachment.createdAt.toISOString() : null
+  };
+}
+async function listCustomerVisibleAttachments(api, scope, taskId, canManage = false) {
+  const decryptionScope = { tenantId: scope.tenantId, organizationId: scope.organizationId };
+  const attachments = await findWithDecryption(
+    scope.em,
+    api.Attachment,
+    { entityId: SUPPORT_TICKET_ATTACHMENT_ENTITY_ID, recordId: taskId, ...decryptionScope },
+    { orderBy: { createdAt: "ASC" } },
+    decryptionScope
+  );
+  const codes = Array.from(new Set(attachments.map((attachment) => attachment.partitionCode)));
+  const partitions = codes.length ? await scope.em.find(api.AttachmentPartition, { code: { $in: codes } }) : [];
+  const partitionByCode = new Map(partitions.map((partition) => [partition.code, partition]));
+  const auth = portalAttachmentAuth(scope);
+  return attachments.filter((attachment) => {
+    const partition = partitionByCode.get(attachment.partitionCode);
+    if (!partition) return false;
+    if (!readAttachmentTags(api, attachment).includes(CUSTOMER_VISIBLE_ATTACHMENT_TAG)) return false;
+    return api.checkAttachmentAccess(auth, attachment, partition, { requireAuthForPublic: true }).ok;
+  }).map((attachment) => serializePortalAttachment(api, attachment, taskId, scope.auth.sub, canManage));
+}
+export {
+  listCustomerVisibleAttachments,
+  loadPortalAttachmentsApi,
+  portalAttachmentAuth,
+  portalSupportAttachmentItemSchema,
+  readAttachmentTags,
+  serializePortalAttachment
+};
+//# sourceMappingURL=portalAttachments.js.map

package/dist/modules/staff/lib/support/portalAttachments.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../src/modules/staff/lib/support/portalAttachments.ts"],
+  "sourcesContent": ["import { z } from 'zod'\nimport { findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport type { Attachment as AttachmentEntity } from '@open-mercato/core/modules/attachments/data/entities'\nimport type { SupportPortalScope } from './portalTickets'\nimport {\n  CUSTOMER_UPLOAD_TAG_PREFIX,\n  CUSTOMER_VISIBLE_ATTACHMENT_TAG,\n  SUPPORT_TICKET_ATTACHMENT_ENTITY_ID,\n  customerUploadTag,\n} from './attachments'\n\nconst logger = createLogger('staff').child({ component: 'lib/support/portalAttachments' })\n\nexport type PortalAttachmentsApi = {\n  Attachment: typeof import('@open-mercato/core/modules/attachments/data/entities').Attachment\n  AttachmentPartition: typeof import('@open-mercato/core/modules/attachments/data/entities').AttachmentPartition\n  StorageDriverFactory: typeof import('@open-mercato/core/modules/attachments/lib/drivers').StorageDriverFactory\n  checkAttachmentAccess: typeof import('@open-mercato/core/modules/attachments/lib/access').checkAttachmentAccess\n  attachmentCrudEvents: typeof import('@open-mercato/core/modules/attachments/lib/crud').attachmentCrudEvents\n  attachmentCrudIndexer: typeof import('@open-mercato/core/modules/attachments/lib/crud').attachmentCrudIndexer\n  readAttachmentMetadata: typeof import('@open-mercato/core/modules/attachments/lib/metadata').readAttachmentMetadata\n  slugifyAttachmentFileName: typeof import('@open-mercato/core/modules/attachments/lib/imageUrls').slugifyAttachmentFileName\n  clearAttachmentThumbnailCache: typeof import('@open-mercato/core/modules/attachments/lib/thumbnailCache').clearAttachmentThumbnailCache\n  isMultipartRequestWithinUploadLimit: typeof import('@open-mercato/core/modules/attachments/lib/upload-limits').isMultipartRequestWithinUploadLimit\n  resolveAttachmentMaxBytes: typeof import('@open-mercato/core/modules/attachments/lib/upload-limits').resolveAttachmentMaxBytes\n  isScopedAttachmentUploadError: typeof import('@open-mercato/core/modules/attachments/lib/scoped-upload-service').isScopedAttachmentUploadError\n}\n\nexport const portalSupportAttachmentItemSchema = z.object({\n  id: z.string().uuid(),\n  fileName: z.string(),\n  fileSize: z.number(),\n  mimeType: z.string().nullable(),\n  downloadUrl: z.string(),\n  uploadedByCustomer: z.boolean(),\n  canDelete: z.boolean(),\n  createdAt: z.string().nullable(),\n})\n\nexport type PortalSupportAttachmentItem = z.infer<typeof portalSupportAttachmentItemSchema>\n\n/**\n * Staff keeps no static edge to the attachments module: it is loaded on demand and a\n * deployment without it reads as \"attachments unavailable\" (`null`).\n */\nexport async function loadPortalAttachmentsApi(): Promise<PortalAttachmentsApi | null> {\n  try {\n    const [entities, drivers, access, crud, metadataLib, imageUrls, thumbnails, limits, uploadService] = await Promise.all([\n      import('@open-mercato/core/modules/attachments/data/entities'),\n      import('@open-mercato/core/modules/attachments/lib/drivers'),\n      import('@open-mercato/core/modules/attachments/lib/access'),\n      import('@open-mercato/core/modules/attachments/lib/crud'),\n      import('@open-mercato/core/modules/attachments/lib/metadata'),\n      import('@open-mercato/core/modules/attachments/lib/imageUrls'),\n      import('@open-mercato/core/modules/attachments/lib/thumbnailCache'),\n      import('@open-mercato/core/modules/attachments/lib/upload-limits'),\n      import('@open-mercato/core/modules/attachments/lib/scoped-upload-service'),\n    ])\n    return {\n      Attachment: entities.Attachment,\n      AttachmentPartition: entities.AttachmentPartition,\n      StorageDriverFactory: drivers.StorageDriverFactory,\n      checkAttachmentAccess: access.checkAttachmentAccess,\n      attachmentCrudEvents: crud.attachmentCrudEvents,\n      attachmentCrudIndexer: crud.attachmentCrudIndexer,\n      readAttachmentMetadata: metadataLib.readAttachmentMetadata,\n      slugifyAttachmentFileName: imageUrls.slugifyAttachmentFileName,\n      clearAttachmentThumbnailCache: thumbnails.clearAttachmentThumbnailCache,\n      isMultipartRequestWithinUploadLimit: limits.isMultipartRequestWithinUploadLimit,\n      resolveAttachmentMaxBytes: limits.resolveAttachmentMaxBytes,\n      isScopedAttachmentUploadError: uploadService.isScopedAttachmentUploadError,\n    }\n  } catch (err) {\n    logger.warn('staff portal support attachments module unavailable', { err })\n    return null\n  }\n}\n\nexport function readAttachmentTags(api: PortalAttachmentsApi, attachment: AttachmentEntity): string[] {\n  return api.readAttachmentMetadata(attachment.storageMetadata).tags ?? []\n}\n\nexport function portalAttachmentAuth(scope: SupportPortalScope) {\n  return { sub: scope.auth.sub, tenantId: scope.tenantId, orgId: scope.organizationId, email: scope.auth.email }\n}\n\nexport function serializePortalAttachment(\n  api: PortalAttachmentsApi,\n  attachment: AttachmentEntity,\n  taskId: string,\n  customerUserId: string,\n  canManage = false,\n): PortalSupportAttachmentItem {\n  const tags = readAttachmentTags(api, attachment)\n  return {\n    id: attachment.id,\n    fileName: attachment.fileName,\n    fileSize: attachment.fileSize,\n    mimeType: attachment.mimeType ?? null,\n    downloadUrl: `/api/staff/portal/support-tickets/${encodeURIComponent(taskId)}/attachments?attachmentId=${encodeURIComponent(attachment.id)}`,\n    uploadedByCustomer: tags.some((tag) => tag.startsWith(CUSTOMER_UPLOAD_TAG_PREFIX)),\n    canDelete: canManage && tags.includes(customerUploadTag(customerUserId)),\n    createdAt: attachment.createdAt ? attachment.createdAt.toISOString() : null,\n  }\n}\n\n/**\n * The files of a ticket the customer may see: tagged `customer-visible` and passing\n * the attachments module's own access check. Internal staff files are never returned.\n * `canManage` is whether the caller holds `portal.support_tickets.manage`; without it\n * no item reports `canDelete`, matching the DELETE route's own feature check.\n */\nexport async function listCustomerVisibleAttachments(\n  api: PortalAttachmentsApi,\n  scope: SupportPortalScope,\n  taskId: string,\n  canManage = false,\n): Promise<PortalSupportAttachmentItem[]> {\n  const decryptionScope = { tenantId: scope.tenantId, organizationId: scope.organizationId }\n  const attachments = await findWithDecryption(\n    scope.em,\n    api.Attachment,\n    { entityId: SUPPORT_TICKET_ATTACHMENT_ENTITY_ID, recordId: taskId, ...decryptionScope },\n    { orderBy: { createdAt: 'ASC' } },\n    decryptionScope,\n  )\n  const codes = Array.from(new Set(attachments.map((attachment) => attachment.partitionCode)))\n  const partitions = codes.length ? await scope.em.find(api.AttachmentPartition, { code: { $in: codes } }) : []\n  const partitionByCode = new Map(partitions.map((partition) => [partition.code, partition]))\n  const auth = portalAttachmentAuth(scope)\n  return attachments\n    .filter((attachment) => {\n      const partition = partitionByCode.get(attachment.partitionCode)\n      if (!partition) return false\n      if (!readAttachmentTags(api, attachment).includes(CUSTOMER_VISIBLE_ATTACHMENT_TAG)) return false\n      return api.checkAttachmentAccess(auth, attachment, partition, { requireAuthForPublic: true }).ok\n    })\n    .map((attachment) => serializePortalAttachment(api, attachment, taskId, scope.auth.sub, canManage))\n}\n"],
+  "mappings": "AAAA,SAAS,SAAS;AAClB,SAAS,0BAA0B;AACnC,SAAS,oBAAoB;AAG7B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP,MAAM,SAAS,aAAa,OAAO,EAAE,MAAM,EAAE,WAAW,gCAAgC,CAAC;AAiBlF,MAAM,oCAAoC,EAAE,OAAO;AAAA,EACxD,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,UAAU,EAAE,OAAO;AAAA,EACnB,UAAU,EAAE,OAAO;AAAA,EACnB,UAAU,EAAE,OAAO,EAAE,SAAS;AAAA,EAC9B,aAAa,EAAE,OAAO;AAAA,EACtB,oBAAoB,EAAE,QAAQ;AAAA,EAC9B,WAAW,EAAE,QAAQ;AAAA,EACrB,WAAW,EAAE,OAAO,EAAE,SAAS;AACjC,CAAC;AAQD,eAAsB,2BAAiE;AACrF,MAAI;AACF,UAAM,CAAC,UAAU,SAAS,QAAQ,MAAM,aAAa,WAAW,YAAY,QAAQ,aAAa,IAAI,MAAM,QAAQ,IAAI;AAAA,MACrH,OAAO,sDAAsD;AAAA,MAC7D,OAAO,oDAAoD;AAAA,MAC3D,OAAO,mDAAmD;AAAA,MAC1D,OAAO,iDAAiD;AAAA,MACxD,OAAO,qDAAqD;AAAA,MAC5D,OAAO,sDAAsD;AAAA,MAC7D,OAAO,2DAA2D;AAAA,MAClE,OAAO,0DAA0D;AAAA,MACjE,OAAO,kEAAkE;AAAA,IAC3E,CAAC;AACD,WAAO;AAAA,MACL,YAAY,SAAS;AAAA,MACrB,qBAAqB,SAAS;AAAA,MAC9B,sBAAsB,QAAQ;AAAA,MAC9B,uBAAuB,OAAO;AAAA,MAC9B,sBAAsB,KAAK;AAAA,MAC3B,uBAAuB,KAAK;AAAA,MAC5B,wBAAwB,YAAY;AAAA,MACpC,2BAA2B,UAAU;AAAA,MACrC,+BAA+B,WAAW;AAAA,MAC1C,qCAAqC,OAAO;AAAA,MAC5C,2BAA2B,OAAO;AAAA,MAClC,+BAA+B,cAAc;AAAA,IAC/C;AAAA,EACF,SAAS,KAAK;AACZ,WAAO,KAAK,uDAAuD,EAAE,IAAI,CAAC;AAC1E,WAAO;AAAA,EACT;AACF;AAEO,SAAS,mBAAmB,KAA2B,YAAwC;AACpG,SAAO,IAAI,uBAAuB,WAAW,eAAe,EAAE,QAAQ,CAAC;AACzE;AAEO,SAAS,qBAAqB,OAA2B;AAC9D,SAAO,EAAE,KAAK,MAAM,KAAK,KAAK,UAAU,MAAM,UAAU,OAAO,MAAM,gBAAgB,OAAO,MAAM,KAAK,MAAM;AAC/G;AAEO,SAAS,0BACd,KACA,YACA,QACA,gBACA,YAAY,OACiB;AAC7B,QAAM,OAAO,mBAAmB,KAAK,UAAU;AAC/C,SAAO;AAAA,IACL,IAAI,WAAW;AAAA,IACf,UAAU,WAAW;AAAA,IACrB,UAAU,WAAW;AAAA,IACrB,UAAU,WAAW,YAAY;AAAA,IACjC,aAAa,qCAAqC,mBAAmB,MAAM,CAAC,6BAA6B,mBAAmB,WAAW,EAAE,CAAC;AAAA,IAC1I,oBAAoB,KAAK,KAAK,CAAC,QAAQ,IAAI,WAAW,0BAA0B,CAAC;AAAA,IACjF,WAAW,aAAa,KAAK,SAAS,kBAAkB,cAAc,CAAC;AAAA,IACvE,WAAW,WAAW,YAAY,WAAW,UAAU,YAAY,IAAI;AAAA,EACzE;AACF;AAQA,eAAsB,+BACpB,KACA,OACA,QACA,YAAY,OAC4B;AACxC,QAAM,kBAAkB,EAAE,UAAU,MAAM,UAAU,gBAAgB,MAAM,eAAe;AACzF,QAAM,cAAc,MAAM;AAAA,IACxB,MAAM;AAAA,IACN,IAAI;AAAA,IACJ,EAAE,UAAU,qCAAqC,UAAU,QAAQ,GAAG,gBAAgB;AAAA,IACtF,EAAE,SAAS,EAAE,WAAW,MAAM,EAAE;AAAA,IAChC;AAAA,EACF;AACA,QAAM,QAAQ,MAAM,KAAK,IAAI,IAAI,YAAY,IAAI,CAAC,eAAe,WAAW,aAAa,CAAC,CAAC;AAC3F,QAAM,aAAa,MAAM,SAAS,MAAM,MAAM,GAAG,KAAK,IAAI,qBAAqB,EAAE,MAAM,EAAE,KAAK,MAAM,EAAE,CAAC,IAAI,CAAC;AAC5G,QAAM,kBAAkB,IAAI,IAAI,WAAW,IAAI,CAAC,cAAc,CAAC,UAAU,MAAM,SAAS,CAAC,CAAC;AAC1F,QAAM,OAAO,qBAAqB,KAAK;AACvC,SAAO,YACJ,OAAO,CAAC,eAAe;AACtB,UAAM,YAAY,gBAAgB,IAAI,WAAW,aAAa;AAC9D,QAAI,CAAC,UAAW,QAAO;AACvB,QAAI,CAAC,mBAAmB,KAAK,UAAU,EAAE,SAAS,+BAA+B,EAAG,QAAO;AAC3F,WAAO,IAAI,sBAAsB,MAAM,YAAY,WAAW,EAAE,sBAAsB,KAAK,CAAC,EAAE;AAAA,EAChG,CAAC,EACA,IAAI,CAAC,eAAe,0BAA0B,KAAK,YAAY,QAAQ,MAAM,KAAK,KAAK,SAAS,CAAC;AACtG;",
+  "names": []
+}

package/dist/modules/staff/lib/support/portalBroadcast.js

@@ -0,0 +1,117 @@
+import { createLogger } from "@open-mercato/shared/lib/logger";
+import { findOneWithDecryption } from "@open-mercato/shared/lib/encryption/find";
+import { getTelemetryRuntime } from "@open-mercato/shared/lib/telemetry/runtime";
+import { StaffSupportTicket, StaffTimeTask, StaffTimeTaskComment, StaffTimeTaskStatus } from "../../data/entities.js";
+import { emitStaffEvent } from "../../events.js";
+import { filterPortalRecipientsByFeatureStrict, resolvePortalRecipientUserIdsStrict } from "../time-tracking/portalRecipients.js";
+import { derivePortalStatus } from "./portalStatus.js";
+import { PORTAL_SUPPORT_TICKETS_VIEW_FEATURE } from "./portalTickets.js";
+const logger = createLogger("staff").child({ component: "lib/support/portalBroadcast" });
+const PORTAL_FANOUT_BATCH_SIZE = 200;
+async function emitPortalUpdate(em, task, ticket, portalStatus, kind, version) {
+  if (!task.customerId) return false;
+  const customerUserIds = await resolvePortalRecipientUserIdsStrict(em, {
+    tenantId: task.tenantId,
+    organizationId: task.organizationId,
+    customerId: task.customerId
+  });
+  const recipientUserIds = await filterPortalRecipientsByFeatureStrict(
+    em,
+    customerUserIds,
+    { tenantId: task.tenantId, organizationId: task.organizationId },
+    PORTAL_SUPPORT_TICKETS_VIEW_FEATURE
+  );
+  if (recipientUserIds.length === 0) return false;
+  await emitStaffEvent(
+    "staff.support_ticket.portal_updated",
+    {
+      id: task.id,
+      tenantId: task.tenantId,
+      organizationId: task.organizationId,
+      ticketId: task.id,
+      supportReference: ticket.supportReference,
+      portalStatus,
+      kind,
+      version,
+      recipientUserIds
+    },
+    { persistent: true }
+  );
+  return true;
+}
+function emitActivity(task, ticket, kind) {
+  void emitStaffEvent(
+    "staff.support_ticket.activity_recorded",
+    {
+      id: ticket.id,
+      tenantId: task.tenantId,
+      organizationId: task.organizationId,
+      taskId: task.id,
+      projectId: task.timeProjectId,
+      kind
+    },
+    { persistent: true }
+  ).catch((err) => {
+    logger.error("staff support activity emit failed", { err, taskId: task.id });
+    getTelemetryRuntime()?.reportError(err, { module: "staff", code: "staff.support_activity_emit_failed" });
+  });
+}
+async function publishTaskPortalStatus(em, taskId, scope, options = {}) {
+  const task = await em.findOne(StaffTimeTask, { id: taskId, ...scope, source: "portal", deletedAt: null });
+  if (!task) return false;
+  const ticket = await findOneWithDecryption(em, StaffSupportTicket, { taskId: task.id, ...scope, deletedAt: null }, void 0, scope);
+  if (!ticket) return false;
+  const status = await em.findOne(StaffTimeTaskStatus, { id: task.taskStatusId, ...scope }, { fields: ["id", "isDefault", "isDone"] });
+  const portalStatus = derivePortalStatus(status);
+  const unchanged = ticket.portalStatusPublished === portalStatus;
+  if (unchanged && !options.always) return false;
+  await emitPortalUpdate(em, task, ticket, portalStatus, "status", task.updatedAt ? task.updatedAt.toISOString() : task.id);
+  if (!unchanged) {
+    ticket.portalStatusPublished = portalStatus;
+    ticket.updatedAt = /* @__PURE__ */ new Date();
+    await em.flush();
+  }
+  emitActivity(task, ticket, "portal_status");
+  return true;
+}
+async function fanOutStatusColumn(em, taskStatusId, scope) {
+  let published = 0;
+  let offset = 0;
+  for (; ; ) {
+    const tasks = await em.find(
+      StaffTimeTask,
+      { taskStatusId, ...scope, source: "portal", deletedAt: null },
+      { fields: ["id"], limit: PORTAL_FANOUT_BATCH_SIZE, offset, orderBy: { id: "asc" } }
+    );
+    if (tasks.length === 0) break;
+    for (const task of tasks) {
+      if (await publishTaskPortalStatus(em.fork(), task.id, scope)) published += 1;
+    }
+    if (tasks.length < PORTAL_FANOUT_BATCH_SIZE) break;
+    offset += PORTAL_FANOUT_BATCH_SIZE;
+  }
+  return published;
+}
+async function publishTicketReply(em, commentId, scope) {
+  const comment = await em.findOne(StaffTimeTaskComment, { id: commentId, ...scope }, { fields: ["id", "taskId", "updatedAt"] });
+  if (!comment) return false;
+  const task = await em.findOne(StaffTimeTask, { id: comment.taskId, ...scope, source: "portal", deletedAt: null });
+  if (!task) return false;
+  const ticket = await findOneWithDecryption(em, StaffSupportTicket, { taskId: task.id, ...scope, deletedAt: null }, void 0, scope);
+  if (!ticket) return false;
+  const status = await em.findOne(StaffTimeTaskStatus, { id: task.taskStatusId, ...scope }, { fields: ["id", "isDefault", "isDone"] });
+  return emitPortalUpdate(em, task, ticket, derivePortalStatus(status), "reply", `${comment.id}:${comment.updatedAt ? comment.updatedAt.toISOString() : ""}`);
+}
+function readEventScope(payload) {
+  const tenantId = typeof payload.tenantId === "string" ? payload.tenantId : null;
+  const organizationId = typeof payload.organizationId === "string" ? payload.organizationId : null;
+  return tenantId && organizationId ? { tenantId, organizationId } : null;
+}
+export {
+  PORTAL_FANOUT_BATCH_SIZE,
+  fanOutStatusColumn,
+  publishTaskPortalStatus,
+  publishTicketReply,
+  readEventScope
+};
+//# sourceMappingURL=portalBroadcast.js.map

package/dist/modules/staff/lib/support/portalBroadcast.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../src/modules/staff/lib/support/portalBroadcast.ts"],
+  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { getTelemetryRuntime } from '@open-mercato/shared/lib/telemetry/runtime'\nimport { StaffSupportTicket, StaffTimeTask, StaffTimeTaskComment, StaffTimeTaskStatus } from '../../data/entities'\nimport { emitStaffEvent } from '../../events'\nimport { filterPortalRecipientsByFeatureStrict, resolvePortalRecipientUserIdsStrict } from '../time-tracking/portalRecipients'\nimport { derivePortalStatus } from './portalStatus'\nimport { PORTAL_SUPPORT_TICKETS_VIEW_FEATURE } from './portalTickets'\n\nconst logger = createLogger('staff').child({ component: 'lib/support/portalBroadcast' })\n\nexport const PORTAL_FANOUT_BATCH_SIZE = 200\n\ntype Scope = { tenantId: string; organizationId: string }\n\nexport type PortalUpdateKind = 'status' | 'reply'\n\n/**\n * `version` names the change being announced (the task version for a status change,\n * the comment for a reply). The portal event bridge drops an event whose payload\n * repeats one seen in the last 500 ms, so two different changes must never produce\n * identical payloads, while two publishers of the same change still collapse.\n *\n * Resolves `true` when the update was emitted and `false` when there is genuinely no\n * one to tell (no customer, no portal users, nobody holding the view feature, or the\n * `customer_accounts` module absent). Any other recipient-lookup failure rejects, so a\n * caller never records a publication that did not happen.\n */\nasync function emitPortalUpdate(\n  em: EntityManager,\n  task: StaffTimeTask,\n  ticket: StaffSupportTicket,\n  portalStatus: string,\n  kind: PortalUpdateKind,\n  version: string,\n): Promise<boolean> {\n  if (!task.customerId) return false\n  const customerUserIds = await resolvePortalRecipientUserIdsStrict(em, {\n    tenantId: task.tenantId,\n    organizationId: task.organizationId,\n    customerId: task.customerId,\n  })\n  const recipientUserIds = await filterPortalRecipientsByFeatureStrict(\n    em,\n    customerUserIds,\n    { tenantId: task.tenantId, organizationId: task.organizationId },\n    PORTAL_SUPPORT_TICKETS_VIEW_FEATURE,\n  )\n  if (recipientUserIds.length === 0) return false\n  await emitStaffEvent(\n    'staff.support_ticket.portal_updated',\n    {\n      id: task.id,\n      tenantId: task.tenantId,\n      organizationId: task.organizationId,\n      ticketId: task.id,\n      supportReference: ticket.supportReference,\n      portalStatus,\n      kind,\n      version,\n      recipientUserIds,\n    },\n    { persistent: true },\n  )\n  return true\n}\n\nfunction emitActivity(task: StaffTimeTask, ticket: StaffSupportTicket, kind: 'portal_status'): void {\n  void emitStaffEvent(\n    'staff.support_ticket.activity_recorded',\n    {\n      id: ticket.id,\n      tenantId: task.tenantId,\n      organizationId: task.organizationId,\n      taskId: task.id,\n      projectId: task.timeProjectId,\n      kind,\n    },\n    { persistent: true },\n  ).catch((err) => {\n    logger.error('staff support activity emit failed', { err, taskId: task.id })\n    getTelemetryRuntime()?.reportError(err, { module: 'staff', code: 'staff.support_activity_emit_failed' })\n  })\n}\n\n/**\n * Compare-and-publish: re-derive the customer-facing status of a portal ticket and\n * broadcast only when it differs from what the portal was last told. Safe to call\n * on any task event; internal tasks and tasks without a ticket row are ignored.\n *\n * `always` skips the comparison for triggers that are a status change by definition.\n * Concurrent publishers (a reopen followed quickly by a resolve) each run on their own\n * fork, so both can read a stale `portalStatusPublished` and skip; the portal refetches\n * the ticket on every event, so publishing after each status change keeps it correct.\n *\n * `portalStatusPublished` advances only after `emitPortalUpdate` settles: an emitted\n * update or a genuinely empty audience. A recipient-lookup or emit failure propagates\n * with the marker untouched, so the persistent fan-out retries and republishes.\n */\nexport async function publishTaskPortalStatus(\n  em: EntityManager,\n  taskId: string,\n  scope: Scope,\n  options: { always?: boolean } = {},\n): Promise<boolean> {\n  const task = await em.findOne(StaffTimeTask, { id: taskId, ...scope, source: 'portal', deletedAt: null })\n  if (!task) return false\n  const ticket = await findOneWithDecryption(em, StaffSupportTicket, { taskId: task.id, ...scope, deletedAt: null }, undefined, scope)\n  if (!ticket) return false\n  const status = await em.findOne(StaffTimeTaskStatus, { id: task.taskStatusId, ...scope }, { fields: ['id', 'isDefault', 'isDone'] })\n  const portalStatus = derivePortalStatus(status)\n  const unchanged = ticket.portalStatusPublished === portalStatus\n  if (unchanged && !options.always) return false\n  await emitPortalUpdate(em, task, ticket, portalStatus, 'status', task.updatedAt ? task.updatedAt.toISOString() : task.id)\n  if (!unchanged) {\n    ticket.portalStatusPublished = portalStatus\n    ticket.updatedAt = new Date()\n    await em.flush()\n  }\n  emitActivity(task, ticket, 'portal_status')\n  return true\n}\n\n/** A status column's `isDone`/`isDefault` flags changed: re-derive every live portal ticket in it, in batches. */\nexport async function fanOutStatusColumn(em: EntityManager, taskStatusId: string, scope: Scope): Promise<number> {\n  let published = 0\n  let offset = 0\n  for (;;) {\n    const tasks = await em.find(\n      StaffTimeTask,\n      { taskStatusId, ...scope, source: 'portal', deletedAt: null },\n      { fields: ['id'], limit: PORTAL_FANOUT_BATCH_SIZE, offset, orderBy: { id: 'asc' } },\n    )\n    if (tasks.length === 0) break\n    for (const task of tasks) {\n      if (await publishTaskPortalStatus(em.fork(), task.id, scope)) published += 1\n    }\n    if (tasks.length < PORTAL_FANOUT_BATCH_SIZE) break\n    offset += PORTAL_FANOUT_BATCH_SIZE\n  }\n  return published\n}\n\n/** A customer-visible comment was published, retracted or deleted: tell the ticket's own customer users to refetch. */\nexport async function publishTicketReply(em: EntityManager, commentId: string, scope: Scope): Promise<boolean> {\n  const comment = await em.findOne(StaffTimeTaskComment, { id: commentId, ...scope }, { fields: ['id', 'taskId', 'updatedAt'] })\n  if (!comment) return false\n  const task = await em.findOne(StaffTimeTask, { id: comment.taskId, ...scope, source: 'portal', deletedAt: null })\n  if (!task) return false\n  const ticket = await findOneWithDecryption(em, StaffSupportTicket, { taskId: task.id, ...scope, deletedAt: null }, undefined, scope)\n  if (!ticket) return false\n  const status = await em.findOne(StaffTimeTaskStatus, { id: task.taskStatusId, ...scope }, { fields: ['id', 'isDefault', 'isDone'] })\n  return emitPortalUpdate(em, task, ticket, derivePortalStatus(status), 'reply', `${comment.id}:${comment.updatedAt ? comment.updatedAt.toISOString() : ''}`)\n}\n\nexport function readEventScope(payload: { tenantId?: unknown; organizationId?: unknown }): Scope | null {\n  const tenantId = typeof payload.tenantId === 'string' ? payload.tenantId : null\n  const organizationId = typeof payload.organizationId === 'string' ? payload.organizationId : null\n  return tenantId && organizationId ? { tenantId, organizationId } : null\n}\n"],
+  "mappings": "AACA,SAAS,oBAAoB;AAC7B,SAAS,6BAA6B;AACtC,SAAS,2BAA2B;AACpC,SAAS,oBAAoB,eAAe,sBAAsB,2BAA2B;AAC7F,SAAS,sBAAsB;AAC/B,SAAS,uCAAuC,2CAA2C;AAC3F,SAAS,0BAA0B;AACnC,SAAS,2CAA2C;AAEpD,MAAM,SAAS,aAAa,OAAO,EAAE,MAAM,EAAE,WAAW,8BAA8B,CAAC;AAEhF,MAAM,2BAA2B;AAiBxC,eAAe,iBACb,IACA,MACA,QACA,cACA,MACA,SACkB;AAClB,MAAI,CAAC,KAAK,WAAY,QAAO;AAC7B,QAAM,kBAAkB,MAAM,oCAAoC,IAAI;AAAA,IACpE,UAAU,KAAK;AAAA,IACf,gBAAgB,KAAK;AAAA,IACrB,YAAY,KAAK;AAAA,EACnB,CAAC;AACD,QAAM,mBAAmB,MAAM;AAAA,IAC7B;AAAA,IACA;AAAA,IACA,EAAE,UAAU,KAAK,UAAU,gBAAgB,KAAK,eAAe;AAAA,IAC/D;AAAA,EACF;AACA,MAAI,iBAAiB,WAAW,EAAG,QAAO;AAC1C,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,MACE,IAAI,KAAK;AAAA,MACT,UAAU,KAAK;AAAA,MACf,gBAAgB,KAAK;AAAA,MACrB,UAAU,KAAK;AAAA,MACf,kBAAkB,OAAO;AAAA,MACzB;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,IACA,EAAE,YAAY,KAAK;AAAA,EACrB;AACA,SAAO;AACT;AAEA,SAAS,aAAa,MAAqB,QAA4B,MAA6B;AAClG,OAAK;AAAA,IACH;AAAA,IACA;AAAA,MACE,IAAI,OAAO;AAAA,MACX,UAAU,KAAK;AAAA,MACf,gBAAgB,KAAK;AAAA,MACrB,QAAQ,KAAK;AAAA,MACb,WAAW,KAAK;AAAA,MAChB;AAAA,IACF;AAAA,IACA,EAAE,YAAY,KAAK;AAAA,EACrB,EAAE,MAAM,CAAC,QAAQ;AACf,WAAO,MAAM,sCAAsC,EAAE,KAAK,QAAQ,KAAK,GAAG,CAAC;AAC3E,wBAAoB,GAAG,YAAY,KAAK,EAAE,QAAQ,SAAS,MAAM,qCAAqC,CAAC;AAAA,EACzG,CAAC;AACH;AAgBA,eAAsB,wBACpB,IACA,QACA,OACA,UAAgC,CAAC,GACf;AAClB,QAAM,OAAO,MAAM,GAAG,QAAQ,eAAe,EAAE,IAAI,QAAQ,GAAG,OAAO,QAAQ,UAAU,WAAW,KAAK,CAAC;AACxG,MAAI,CAAC,KAAM,QAAO;AAClB,QAAM,SAAS,MAAM,sBAAsB,IAAI,oBAAoB,EAAE,QAAQ,KAAK,IAAI,GAAG,OAAO,WAAW,KAAK,GAAG,QAAW,KAAK;AACnI,MAAI,CAAC,OAAQ,QAAO;AACpB,QAAM,SAAS,MAAM,GAAG,QAAQ,qBAAqB,EAAE,IAAI,KAAK,cAAc,GAAG,MAAM,GAAG,EAAE,QAAQ,CAAC,MAAM,aAAa,QAAQ,EAAE,CAAC;AACnI,QAAM,eAAe,mBAAmB,MAAM;AAC9C,QAAM,YAAY,OAAO,0BAA0B;AACnD,MAAI,aAAa,CAAC,QAAQ,OAAQ,QAAO;AACzC,QAAM,iBAAiB,IAAI,MAAM,QAAQ,cAAc,UAAU,KAAK,YAAY,KAAK,UAAU,YAAY,IAAI,KAAK,EAAE;AACxH,MAAI,CAAC,WAAW;AACd,WAAO,wBAAwB;AAC/B,WAAO,YAAY,oBAAI,KAAK;AAC5B,UAAM,GAAG,MAAM;AAAA,EACjB;AACA,eAAa,MAAM,QAAQ,eAAe;AAC1C,SAAO;AACT;AAGA,eAAsB,mBAAmB,IAAmB,cAAsB,OAA+B;AAC/G,MAAI,YAAY;AAChB,MAAI,SAAS;AACb,aAAS;AACP,UAAM,QAAQ,MAAM,GAAG;AAAA,MACrB;AAAA,MACA,EAAE,cAAc,GAAG,OAAO,QAAQ,UAAU,WAAW,KAAK;AAAA,MAC5D,EAAE,QAAQ,CAAC,IAAI,GAAG,OAAO,0BAA0B,QAAQ,SAAS,EAAE,IAAI,MAAM,EAAE;AAAA,IACpF;AACA,QAAI,MAAM,WAAW,EAAG;AACxB,eAAW,QAAQ,OAAO;AACxB,UAAI,MAAM,wBAAwB,GAAG,KAAK,GAAG,KAAK,IAAI,KAAK,EAAG,cAAa;AAAA,IAC7E;AACA,QAAI,MAAM,SAAS,yBAA0B;AAC7C,cAAU;AAAA,EACZ;AACA,SAAO;AACT;AAGA,eAAsB,mBAAmB,IAAmB,WAAmB,OAAgC;AAC7G,QAAM,UAAU,MAAM,GAAG,QAAQ,sBAAsB,EAAE,IAAI,WAAW,GAAG,MAAM,GAAG,EAAE,QAAQ,CAAC,MAAM,UAAU,WAAW,EAAE,CAAC;AAC7H,MAAI,CAAC,QAAS,QAAO;AACrB,QAAM,OAAO,MAAM,GAAG,QAAQ,eAAe,EAAE,IAAI,QAAQ,QAAQ,GAAG,OAAO,QAAQ,UAAU,WAAW,KAAK,CAAC;AAChH,MAAI,CAAC,KAAM,QAAO;AAClB,QAAM,SAAS,MAAM,sBAAsB,IAAI,oBAAoB,EAAE,QAAQ,KAAK,IAAI,GAAG,OAAO,WAAW,KAAK,GAAG,QAAW,KAAK;AACnI,MAAI,CAAC,OAAQ,QAAO;AACpB,QAAM,SAAS,MAAM,GAAG,QAAQ,qBAAqB,EAAE,IAAI,KAAK,cAAc,GAAG,MAAM,GAAG,EAAE,QAAQ,CAAC,MAAM,aAAa,QAAQ,EAAE,CAAC;AACnI,SAAO,iBAAiB,IAAI,MAAM,QAAQ,mBAAmB,MAAM,GAAG,SAAS,GAAG,QAAQ,EAAE,IAAI,QAAQ,YAAY,QAAQ,UAAU,YAAY,IAAI,EAAE,EAAE;AAC5J;AAEO,SAAS,eAAe,SAAyE;AACtG,QAAM,WAAW,OAAO,QAAQ,aAAa,WAAW,QAAQ,WAAW;AAC3E,QAAM,iBAAiB,OAAO,QAAQ,mBAAmB,WAAW,QAAQ,iBAAiB;AAC7F,SAAO,YAAY,iBAAiB,EAAE,UAAU,eAAe,IAAI;AACrE;",
+  "names": []
+}

package/dist/modules/staff/lib/support/portalRoute.js

@@ -0,0 +1,99 @@
+import { NextResponse } from "next/server";
+import { z } from "zod";
+import { getCommandInterceptorHttpRejection } from "@open-mercato/shared/lib/commands/errors";
+import { isCrudHttpError } from "@open-mercato/shared/lib/crud/errors";
+import { createLogger } from "@open-mercato/shared/lib/logger";
+import { checkRateLimit, RATE_LIMIT_ERROR_FALLBACK, RATE_LIMIT_ERROR_KEY } from "@open-mercato/shared/lib/ratelimit/helpers";
+import { readEndpointRateLimitConfig } from "@open-mercato/shared/lib/ratelimit/config";
+import { resolveTranslations } from "@open-mercato/shared/lib/i18n/server";
+import { getTelemetryRuntime } from "@open-mercato/shared/lib/telemetry/runtime";
+const logger = createLogger("staff").child({ component: "lib/support/portalRoute" });
+const SUPPORT_TICKET_RESOURCE_KIND = "staff.support_ticket";
+const RATE_LIMITS = {
+  create: readEndpointRateLimitConfig("STAFF_SUPPORT_TICKET_CREATE", {
+    points: 10,
+    duration: 3600,
+    keyPrefix: "staff_support_ticket_create"
+  }),
+  message: readEndpointRateLimitConfig("STAFF_SUPPORT_TICKET_MESSAGE", {
+    points: 60,
+    duration: 3600,
+    keyPrefix: "staff_support_ticket_message"
+  }),
+  upload: readEndpointRateLimitConfig("STAFF_SUPPORT_TICKET_UPLOAD", {
+    points: 30,
+    duration: 3600,
+    keyPrefix: "staff_support_ticket_upload"
+  })
+};
+function buildPortalCommandContext(scope, req) {
+  const auth = {
+    sub: scope.auth.sub,
+    sid: scope.auth.sid,
+    tenantId: scope.auth.tenantId,
+    orgId: scope.auth.orgId,
+    email: scope.auth.email,
+    customerEntityId: scope.auth.customerEntityId ?? null,
+    personEntityId: scope.auth.personEntityId ?? null
+  };
+  return {
+    container: scope.container,
+    auth,
+    organizationScope: null,
+    selectedOrganizationId: scope.organizationId,
+    organizationIds: [scope.organizationId],
+    request: req
+  };
+}
+async function checkPortalRateLimit(scope, kind) {
+  let service = null;
+  try {
+    service = scope.container.resolve("rateLimiterService");
+  } catch {
+    return null;
+  }
+  if (!service) return null;
+  const { translate } = await resolveTranslations();
+  return checkRateLimit(
+    service,
+    RATE_LIMITS[kind],
+    `${scope.tenantId}:${scope.auth.sub}`,
+    translate(RATE_LIMIT_ERROR_KEY, RATE_LIMIT_ERROR_FALLBACK)
+  );
+}
+async function portalErrorResponse(err, label) {
+  if (isCrudHttpError(err)) return NextResponse.json(err.body, { status: err.status });
+  const rejection = getCommandInterceptorHttpRejection(err);
+  if (rejection) return NextResponse.json(rejection.body, { status: rejection.status });
+  if (err instanceof z.ZodError) {
+    const { translate } = await resolveTranslations();
+    return NextResponse.json(
+      { ok: false, error: translate("staff.errors.invalid_request", "Invalid request"), details: err.issues },
+      { status: 400 }
+    );
+  }
+  logger.error(label, { err });
+  getTelemetryRuntime()?.reportError(err, {
+    module: "staff",
+    code: "staff.portal_support_route_failed",
+    attributes: { operation: label }
+  });
+  return NextResponse.json({ ok: false, error: "staff.errors.internal" }, { status: 500 });
+}
+function readPathId(req, pattern) {
+  try {
+    const match = new URL(req.url).pathname.match(pattern);
+    const id = match?.[1] ? decodeURIComponent(match[1]) : null;
+    return id && z.string().uuid().safeParse(id).success ? id : null;
+  } catch {
+    return null;
+  }
+}
+export {
+  SUPPORT_TICKET_RESOURCE_KIND,
+  buildPortalCommandContext,
+  checkPortalRateLimit,
+  portalErrorResponse,
+  readPathId
+};
+//# sourceMappingURL=portalRoute.js.map

package/dist/modules/staff/lib/support/portalRoute.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../src/modules/staff/lib/support/portalRoute.ts"],
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { CommandRuntimeContext } from '@open-mercato/shared/lib/commands'\nimport type { AuthContext } from '@open-mercato/shared/lib/auth/server'\nimport { getCommandInterceptorHttpRejection } from '@open-mercato/shared/lib/commands/errors'\nimport { isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport { checkRateLimit, RATE_LIMIT_ERROR_FALLBACK, RATE_LIMIT_ERROR_KEY } from '@open-mercato/shared/lib/ratelimit/helpers'\nimport { readEndpointRateLimitConfig } from '@open-mercato/shared/lib/ratelimit/config'\nimport type { RateLimiterService } from '@open-mercato/shared/lib/ratelimit/service'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { getTelemetryRuntime } from '@open-mercato/shared/lib/telemetry/runtime'\nimport type { SupportPortalScope } from './portalTickets'\n\nconst logger = createLogger('staff').child({ component: 'lib/support/portalRoute' })\n\nexport const SUPPORT_TICKET_RESOURCE_KIND = 'staff.support_ticket'\n\nconst RATE_LIMITS = {\n  create: readEndpointRateLimitConfig('STAFF_SUPPORT_TICKET_CREATE', {\n    points: 10,\n    duration: 3600,\n    keyPrefix: 'staff_support_ticket_create',\n  }),\n  message: readEndpointRateLimitConfig('STAFF_SUPPORT_TICKET_MESSAGE', {\n    points: 60,\n    duration: 3600,\n    keyPrefix: 'staff_support_ticket_message',\n  }),\n  upload: readEndpointRateLimitConfig('STAFF_SUPPORT_TICKET_UPLOAD', {\n    points: 30,\n    duration: 3600,\n    keyPrefix: 'staff_support_ticket_upload',\n  }),\n} as const\n\nexport type PortalRateLimitKind = keyof typeof RATE_LIMITS\n\nexport function buildPortalCommandContext(scope: SupportPortalScope, req: Request): CommandRuntimeContext {\n  const auth: NonNullable<AuthContext> = {\n    sub: scope.auth.sub,\n    sid: scope.auth.sid,\n    tenantId: scope.auth.tenantId,\n    orgId: scope.auth.orgId,\n    email: scope.auth.email,\n    customerEntityId: scope.auth.customerEntityId ?? null,\n    personEntityId: scope.auth.personEntityId ?? null,\n  }\n  return {\n    container: scope.container,\n    auth,\n    organizationScope: null,\n    selectedOrganizationId: scope.organizationId,\n    organizationIds: [scope.organizationId],\n    request: req,\n  }\n}\n\n/** Per customer user, so one noisy account cannot exhaust its colleagues' budget. */\nexport async function checkPortalRateLimit(\n  scope: SupportPortalScope,\n  kind: PortalRateLimitKind,\n): Promise<Response | null> {\n  let service: RateLimiterService | null = null\n  try {\n    service = scope.container.resolve('rateLimiterService') as RateLimiterService\n  } catch {\n    return null\n  }\n  if (!service) return null\n  const { translate } = await resolveTranslations()\n  return checkRateLimit(\n    service,\n    RATE_LIMITS[kind],\n    `${scope.tenantId}:${scope.auth.sub}`,\n    translate(RATE_LIMIT_ERROR_KEY, RATE_LIMIT_ERROR_FALLBACK),\n  )\n}\n\nexport async function portalErrorResponse(err: unknown, label: string): Promise<Response> {\n  if (isCrudHttpError(err)) return NextResponse.json(err.body, { status: err.status })\n  const rejection = getCommandInterceptorHttpRejection(err)\n  if (rejection) return NextResponse.json(rejection.body, { status: rejection.status })\n  if (err instanceof z.ZodError) {\n    const { translate } = await resolveTranslations()\n    return NextResponse.json(\n      { ok: false, error: translate('staff.errors.invalid_request', 'Invalid request'), details: err.issues },\n      { status: 400 },\n    )\n  }\n  logger.error(label, { err })\n  getTelemetryRuntime()?.reportError(err, {\n    module: 'staff',\n    code: 'staff.portal_support_route_failed',\n    attributes: { operation: label },\n  })\n  return NextResponse.json({ ok: false, error: 'staff.errors.internal' }, { status: 500 })\n}\n\nexport function readPathId(req: Request, pattern: RegExp): string | null {\n  try {\n    const match = new URL(req.url).pathname.match(pattern)\n    const id = match?.[1] ? decodeURIComponent(match[1]) : null\n    return id && z.string().uuid().safeParse(id).success ? id : null\n  } catch {\n    return null\n  }\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAGlB,SAAS,0CAA0C;AACnD,SAAS,uBAAuB;AAChC,SAAS,oBAAoB;AAC7B,SAAS,gBAAgB,2BAA2B,4BAA4B;AAChF,SAAS,mCAAmC;AAE5C,SAAS,2BAA2B;AACpC,SAAS,2BAA2B;AAGpC,MAAM,SAAS,aAAa,OAAO,EAAE,MAAM,EAAE,WAAW,0BAA0B,CAAC;AAE5E,MAAM,+BAA+B;AAE5C,MAAM,cAAc;AAAA,EAClB,QAAQ,4BAA4B,+BAA+B;AAAA,IACjE,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,WAAW;AAAA,EACb,CAAC;AAAA,EACD,SAAS,4BAA4B,gCAAgC;AAAA,IACnE,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,WAAW;AAAA,EACb,CAAC;AAAA,EACD,QAAQ,4BAA4B,+BAA+B;AAAA,IACjE,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,WAAW;AAAA,EACb,CAAC;AACH;AAIO,SAAS,0BAA0B,OAA2B,KAAqC;AACxG,QAAM,OAAiC;AAAA,IACrC,KAAK,MAAM,KAAK;AAAA,IAChB,KAAK,MAAM,KAAK;AAAA,IAChB,UAAU,MAAM,KAAK;AAAA,IACrB,OAAO,MAAM,KAAK;AAAA,IAClB,OAAO,MAAM,KAAK;AAAA,IAClB,kBAAkB,MAAM,KAAK,oBAAoB;AAAA,IACjD,gBAAgB,MAAM,KAAK,kBAAkB;AAAA,EAC/C;AACA,SAAO;AAAA,IACL,WAAW,MAAM;AAAA,IACjB;AAAA,IACA,mBAAmB;AAAA,IACnB,wBAAwB,MAAM;AAAA,IAC9B,iBAAiB,CAAC,MAAM,cAAc;AAAA,IACtC,SAAS;AAAA,EACX;AACF;AAGA,eAAsB,qBACpB,OACA,MAC0B;AAC1B,MAAI,UAAqC;AACzC,MAAI;AACF,cAAU,MAAM,UAAU,QAAQ,oBAAoB;AAAA,EACxD,QAAQ;AACN,WAAO;AAAA,EACT;AACA,MAAI,CAAC,QAAS,QAAO;AACrB,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,SAAO;AAAA,IACL;AAAA,IACA,YAAY,IAAI;AAAA,IAChB,GAAG,MAAM,QAAQ,IAAI,MAAM,KAAK,GAAG;AAAA,IACnC,UAAU,sBAAsB,yBAAyB;AAAA,EAC3D;AACF;AAEA,eAAsB,oBAAoB,KAAc,OAAkC;AACxF,MAAI,gBAAgB,GAAG,EAAG,QAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AACnF,QAAM,YAAY,mCAAmC,GAAG;AACxD,MAAI,UAAW,QAAO,aAAa,KAAK,UAAU,MAAM,EAAE,QAAQ,UAAU,OAAO,CAAC;AACpF,MAAI,eAAe,EAAE,UAAU;AAC7B,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,WAAO,aAAa;AAAA,MAClB,EAAE,IAAI,OAAO,OAAO,UAAU,gCAAgC,iBAAiB,GAAG,SAAS,IAAI,OAAO;AAAA,MACtG,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACA,SAAO,MAAM,OAAO,EAAE,IAAI,CAAC;AAC3B,sBAAoB,GAAG,YAAY,KAAK;AAAA,IACtC,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,YAAY,EAAE,WAAW,MAAM;AAAA,EACjC,CAAC;AACD,SAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,wBAAwB,GAAG,EAAE,QAAQ,IAAI,CAAC;AACzF;AAEO,SAAS,WAAW,KAAc,SAAgC;AACvE,MAAI;AACF,UAAM,QAAQ,IAAI,IAAI,IAAI,GAAG,EAAE,SAAS,MAAM,OAAO;AACrD,UAAM,KAAK,QAAQ,CAAC,IAAI,mBAAmB,MAAM,CAAC,CAAC,IAAI;AACvD,WAAO,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,UAAU,KAAK;AAAA,EAC9D,QAAQ;AACN,WAAO;AAAA,EACT;AACF;",
+  "names": []
+}

package/dist/modules/staff/lib/support/portalStatus.js

@@ -0,0 +1,12 @@
+function derivePortalStatus(status) {
+  if (!status) return "received";
+  if (status.isDone) return "resolved";
+  if (status.isDefault) return "received";
+  return "in_progress";
+}
+const SUPPORT_PORTAL_STATUSES = ["received", "in_progress", "resolved"];
+export {
+  SUPPORT_PORTAL_STATUSES,
+  derivePortalStatus
+};
+//# sourceMappingURL=portalStatus.js.map

package/dist/modules/staff/lib/support/portalStatus.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../src/modules/staff/lib/support/portalStatus.ts"],
+  "sourcesContent": ["import type { StaffSupportPortalStatus } from '../../data/entities'\n\nexport type PortalStatusFlags = {\n  isDefault: boolean\n  isDone: boolean\n}\n\nexport function derivePortalStatus(status: PortalStatusFlags | null | undefined): StaffSupportPortalStatus {\n  if (!status) return 'received'\n  if (status.isDone) return 'resolved'\n  if (status.isDefault) return 'received'\n  return 'in_progress'\n}\n\nexport const SUPPORT_PORTAL_STATUSES: readonly StaffSupportPortalStatus[] = ['received', 'in_progress', 'resolved']\n"],
+  "mappings": "AAOO,SAAS,mBAAmB,QAAwE;AACzG,MAAI,CAAC,OAAQ,QAAO;AACpB,MAAI,OAAO,OAAQ,QAAO;AAC1B,MAAI,OAAO,UAAW,QAAO;AAC7B,SAAO;AACT;AAEO,MAAM,0BAA+D,CAAC,YAAY,eAAe,UAAU;",
+  "names": []
+}

package/dist/modules/staff/lib/support/portalTickets.js

@@ -0,0 +1,148 @@
+import { NextResponse } from "next/server";
+import { sql } from "kysely";
+import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
+import { createLogger } from "@open-mercato/shared/lib/logger";
+import { findOneWithDecryption } from "@open-mercato/shared/lib/encryption/find";
+import { CustomerEntity } from "@open-mercato/core/modules/customers/data/entities";
+import { StaffSupportTicket, StaffTimeTask } from "../../data/entities.js";
+import { PORTAL_SUPPORT_NOT_LINKED_CODE } from "../support-ui/portalSupport.js";
+const logger = createLogger("staff").child({ component: "lib/support/portalTickets" });
+const PORTAL_SUPPORT_TICKETS_VIEW_FEATURE = "portal.support_tickets.view";
+const PORTAL_SUPPORT_TICKETS_MANAGE_FEATURE = "portal.support_tickets.manage";
+async function resolveSupportPortalScope(req, requiredFeature) {
+  let auth = null;
+  let requireFeature = null;
+  try {
+    const customerAuth = await import("@open-mercato/core/modules/customer_accounts/lib/customerAuth");
+    auth = await customerAuth.getCustomerAuthFromRequest(req);
+    const guard2 = customerAuth.requireCustomerFeature;
+    requireFeature = typeof guard2 === "function" ? guard2 : null;
+  } catch (err) {
+    logger.warn("staff portal support could not resolve customer auth", { err });
+    return NextResponse.json({ ok: false, error: "staff.errors.unauthorized" }, { status: 401 });
+  }
+  if (!auth) return NextResponse.json({ ok: false, error: "staff.errors.unauthorized" }, { status: 401 });
+  const customerId = typeof auth.customerEntityId === "string" && auth.customerEntityId.trim().length > 0 ? auth.customerEntityId.trim() : null;
+  if (!customerId) {
+    return NextResponse.json(
+      { ok: false, error: "staff.errors.customerAccountNotLinked", code: PORTAL_SUPPORT_NOT_LINKED_CODE },
+      { status: 403 }
+    );
+  }
+  if (!requireFeature) {
+    logger.error("staff portal support could not resolve requireCustomerFeature; refusing the request", {
+      feature: requiredFeature
+    });
+    return NextResponse.json({ ok: false, error: "staff.errors.forbidden" }, { status: 403 });
+  }
+  const guard = requireFeature;
+  const container = await createRequestContainer();
+  const resolvedAuth = auth;
+  const hasFeature = async (feature) => {
+    try {
+      await guard(resolvedAuth, [feature], container.resolve("customerRbacService"));
+      return true;
+    } catch {
+      return false;
+    }
+  };
+  try {
+    await guard(auth, [requiredFeature], container.resolve("customerRbacService"));
+  } catch (response) {
+    if (response instanceof Response) return response;
+    logger.warn("staff portal support feature check failed", { err: response });
+    return NextResponse.json({ ok: false, error: "staff.errors.forbidden" }, { status: 403 });
+  }
+  return {
+    auth,
+    customerId,
+    tenantId: auth.tenantId,
+    organizationId: auth.orgId,
+    container,
+    em: container.resolve("em").fork(),
+    hasFeature
+  };
+}
+function portalOwnedTaskWhere(scope) {
+  return {
+    tenantId: scope.tenantId,
+    organizationId: scope.organizationId,
+    customerId: scope.customerId,
+    source: "portal",
+    deletedAt: null
+  };
+}
+async function loadPortalOwnedTicket(scope, taskId) {
+  const task = await scope.em.findOne(StaffTimeTask, { id: taskId, ...portalOwnedTaskWhere(scope) });
+  if (!task) return null;
+  const ticket = await findOneWithDecryption(
+    scope.em,
+    StaffSupportTicket,
+    { taskId: task.id, tenantId: scope.tenantId, organizationId: scope.organizationId, deletedAt: null },
+    void 0,
+    { tenantId: scope.tenantId, organizationId: scope.organizationId }
+  );
+  if (!ticket) return null;
+  return { task, ticket };
+}
+async function resolveCustomerDisplay(scope) {
+  try {
+    const customer = await findOneWithDecryption(
+      scope.em,
+      CustomerEntity,
+      { id: scope.customerId, tenantId: scope.tenantId, organizationId: scope.organizationId, deletedAt: null },
+      void 0,
+      { tenantId: scope.tenantId, organizationId: scope.organizationId }
+    );
+    const displayName = typeof customer?.displayName === "string" ? customer.displayName : null;
+    const kind = typeof customer?.kind === "string" ? customer.kind : null;
+    return { displayName, kind };
+  } catch {
+    return { displayName: null, kind: null };
+  }
+}
+function toDate(value, fallback) {
+  if (value instanceof Date) return value;
+  if (typeof value === "string" || typeof value === "number") {
+    const parsed = new Date(value);
+    if (!Number.isNaN(parsed.getTime())) return parsed;
+  }
+  return fallback;
+}
+async function listPortalTicketPage(scope, options) {
+  if (options.statusIds && options.statusIds.length === 0) return { rows: [], total: 0 };
+  const db = scope.em.getKysely();
+  let owned = db.selectFrom("staff_time_tasks as task").where("task.tenant_id", "=", scope.tenantId).where("task.organization_id", "=", scope.organizationId).where("task.customer_id", "=", scope.customerId).where("task.source", "=", "portal").where("task.deleted_at", "is", null);
+  if (options.statusIds) owned = owned.where("task.task_status_id", "in", [...options.statusIds]);
+  const lastActivity = sql`greatest(task.created_at, coalesce((
+    select max(visible_comment.created_at)
+    from staff_time_task_comments as visible_comment
+    where visible_comment.organization_id = task.organization_id
+      and visible_comment.task_id = task.id
+      and visible_comment.tenant_id = task.tenant_id
+      and visible_comment.visibility = 'customer'
+      and visible_comment.deleted_at is null
+  ), task.created_at))`;
+  const [countRow, pageRows] = await Promise.all([
+    owned.select((builder) => builder.fn.countAll().as("total")).executeTakeFirst(),
+    owned.select(["task.id as id", "task.created_at as created_at"]).select(lastActivity.as("last_activity_at")).orderBy("last_activity_at", "desc").orderBy("task.id", "desc").limit(options.limit).offset(options.offset).execute()
+  ]);
+  const total = Number(countRow?.total ?? 0);
+  return {
+    total: Number.isFinite(total) ? total : 0,
+    rows: pageRows.map((row) => ({
+      id: row.id,
+      lastActivityAt: toDate(row.last_activity_at, toDate(row.created_at, /* @__PURE__ */ new Date(0)))
+    }))
+  };
+}
+export {
+  PORTAL_SUPPORT_TICKETS_MANAGE_FEATURE,
+  PORTAL_SUPPORT_TICKETS_VIEW_FEATURE,
+  listPortalTicketPage,
+  loadPortalOwnedTicket,
+  portalOwnedTaskWhere,
+  resolveCustomerDisplay,
+  resolveSupportPortalScope
+};
+//# sourceMappingURL=portalTickets.js.map

package/dist/modules/staff/lib/support/portalTickets.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../src/modules/staff/lib/support/portalTickets.ts"],
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { sql } from 'kysely'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport type { CustomerAuthContext } from '@open-mercato/shared/modules/customer-auth'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { CustomerEntity } from '@open-mercato/core/modules/customers/data/entities'\nimport { StaffSupportTicket, StaffTimeTask } from '../../data/entities'\nimport { PORTAL_SUPPORT_NOT_LINKED_CODE } from '../support-ui/portalSupport'\n\nconst logger = createLogger('staff').child({ component: 'lib/support/portalTickets' })\n\nexport const PORTAL_SUPPORT_TICKETS_VIEW_FEATURE = 'portal.support_tickets.view'\nexport const PORTAL_SUPPORT_TICKETS_MANAGE_FEATURE = 'portal.support_tickets.manage'\n\ntype AppContainer = Awaited<ReturnType<typeof createRequestContainer>>\n\nexport type SupportPortalScope = {\n  auth: CustomerAuthContext\n  customerId: string\n  tenantId: string\n  organizationId: string\n  container: AppContainer\n  em: EntityManager\n  hasFeature: (feature: string) => Promise<boolean>\n}\n\ntype CustomerFeatureGuard = (auth: CustomerAuthContext, features: string[], rbac: unknown) => Promise<void>\n\n/**\n * The portal identity is resolved through `customer_accounts` with a dynamic import,\n * exactly like the EP-50 time-reports routes, so `staff` keeps no static edge to the\n * portal module: a deployment without it answers 401 instead of failing to load.\n * A session with no `customerEntityId` is refused (403); a missing feature guard\n * fails closed (403) so a revoked grant keeps working as a revocation.\n */\nexport async function resolveSupportPortalScope(\n  req: Request,\n  requiredFeature: string,\n): Promise<SupportPortalScope | Response> {\n  let auth: CustomerAuthContext | null = null\n  let requireFeature: CustomerFeatureGuard | null = null\n  try {\n    const customerAuth = await import('@open-mercato/core/modules/customer_accounts/lib/customerAuth')\n    auth = await customerAuth.getCustomerAuthFromRequest(req)\n    const guard: unknown = (customerAuth as { requireCustomerFeature?: unknown }).requireCustomerFeature\n    requireFeature = typeof guard === 'function' ? (guard as CustomerFeatureGuard) : null\n  } catch (err) {\n    logger.warn('staff portal support could not resolve customer auth', { err })\n    return NextResponse.json({ ok: false, error: 'staff.errors.unauthorized' }, { status: 401 })\n  }\n  if (!auth) return NextResponse.json({ ok: false, error: 'staff.errors.unauthorized' }, { status: 401 })\n  const customerId =\n    typeof auth.customerEntityId === 'string' && auth.customerEntityId.trim().length > 0\n      ? auth.customerEntityId.trim()\n      : null\n  if (!customerId) {\n    return NextResponse.json(\n      { ok: false, error: 'staff.errors.customerAccountNotLinked', code: PORTAL_SUPPORT_NOT_LINKED_CODE },\n      { status: 403 },\n    )\n  }\n  if (!requireFeature) {\n    logger.error('staff portal support could not resolve requireCustomerFeature; refusing the request', {\n      feature: requiredFeature,\n    })\n    return NextResponse.json({ ok: false, error: 'staff.errors.forbidden' }, { status: 403 })\n  }\n  const guard = requireFeature\n  const container = await createRequestContainer()\n  const resolvedAuth = auth\n  const hasFeature = async (feature: string): Promise<boolean> => {\n    try {\n      await guard(resolvedAuth, [feature], container.resolve('customerRbacService'))\n      return true\n    } catch {\n      return false\n    }\n  }\n  try {\n    await guard(auth, [requiredFeature], container.resolve('customerRbacService'))\n  } catch (response) {\n    if (response instanceof Response) return response\n    logger.warn('staff portal support feature check failed', { err: response })\n    return NextResponse.json({ ok: false, error: 'staff.errors.forbidden' }, { status: 403 })\n  }\n  return {\n    auth,\n    customerId,\n    tenantId: auth.tenantId,\n    organizationId: auth.orgId,\n    container,\n    em: (container.resolve('em') as EntityManager).fork(),\n    hasFeature,\n  }\n}\n\n/**\n * THE ownership clause for every portal support read and write. Ownership comes from\n * the task's own `customer_id` \u2014 never the project's \u2014 so tickets from many customers\n * can share one project. Callers load WITH this clause rather than loading and\n * checking afterwards, so a foreign id is never read even momentarily.\n */\nexport function portalOwnedTaskWhere(scope: Pick<SupportPortalScope, 'tenantId' | 'organizationId' | 'customerId'>) {\n  return {\n    tenantId: scope.tenantId,\n    organizationId: scope.organizationId,\n    customerId: scope.customerId,\n    source: 'portal' as const,\n    deletedAt: null,\n  }\n}\n\nexport async function loadPortalOwnedTicket(\n  scope: Pick<SupportPortalScope, 'tenantId' | 'organizationId' | 'customerId' | 'em'>,\n  taskId: string,\n): Promise<{ task: StaffTimeTask; ticket: StaffSupportTicket } | null> {\n  const task = await scope.em.findOne(StaffTimeTask, { id: taskId, ...portalOwnedTaskWhere(scope) })\n  if (!task) return null\n  const ticket = await findOneWithDecryption(\n    scope.em,\n    StaffSupportTicket,\n    { taskId: task.id, tenantId: scope.tenantId, organizationId: scope.organizationId, deletedAt: null },\n    undefined,\n    { tenantId: scope.tenantId, organizationId: scope.organizationId },\n  )\n  if (!ticket) return null\n  return { task, ticket }\n}\n\nexport async function resolveCustomerDisplay(\n  scope: Pick<SupportPortalScope, 'tenantId' | 'organizationId' | 'customerId' | 'em'>,\n): Promise<{ displayName: string | null; kind: string | null }> {\n  try {\n    const customer = await findOneWithDecryption(\n      scope.em,\n      CustomerEntity,\n      { id: scope.customerId, tenantId: scope.tenantId, organizationId: scope.organizationId, deletedAt: null },\n      undefined,\n      { tenantId: scope.tenantId, organizationId: scope.organizationId },\n    )\n    const displayName = typeof customer?.displayName === 'string' ? customer.displayName : null\n    const kind = typeof customer?.kind === 'string' ? customer.kind : null\n    return { displayName, kind }\n  } catch {\n    return { displayName: null, kind: null }\n  }\n}\n\ntype PortalTicketActivityDb = {\n  staff_time_tasks: {\n    id: string\n    tenant_id: string\n    organization_id: string\n    customer_id: string | null\n    source: string\n    task_status_id: string\n    created_at: Date\n    deleted_at: Date | null\n  }\n  staff_time_task_comments: {\n    task_id: string\n    tenant_id: string\n    organization_id: string\n    visibility: string\n    created_at: Date\n    deleted_at: Date | null\n  }\n}\n\nexport type PortalTicketPageRow = { id: string; lastActivityAt: Date }\n\nfunction toDate(value: unknown, fallback: Date): Date {\n  if (value instanceof Date) return value\n  if (typeof value === 'string' || typeof value === 'number') {\n    const parsed = new Date(value)\n    if (!Number.isNaN(parsed.getTime())) return parsed\n  }\n  return fallback\n}\n\n/**\n * One page of the caller's tickets, newest customer-visible activity first. Activity\n * is the latest of the ticket's filing time and its newest customer-visible comment\n * (either side), so internal staff edits \u2014 which bump `updated_at` \u2014 never reorder the\n * customer's list while a reply the customer can read always does. The ownership\n * clause is the same as `portalOwnedTaskWhere`; the activity is computed per row by a\n * correlated `max()` served by the comments `(organization_id, task_id, created_at)` index.\n */\nexport async function listPortalTicketPage(\n  scope: Pick<SupportPortalScope, 'tenantId' | 'organizationId' | 'customerId' | 'em'>,\n  options: { statusIds: readonly string[] | null; limit: number; offset: number },\n): Promise<{ rows: PortalTicketPageRow[]; total: number }> {\n  if (options.statusIds && options.statusIds.length === 0) return { rows: [], total: 0 }\n  const db = scope.em.getKysely<PortalTicketActivityDb>()\n  let owned = db\n    .selectFrom('staff_time_tasks as task')\n    .where('task.tenant_id', '=', scope.tenantId)\n    .where('task.organization_id', '=', scope.organizationId)\n    .where('task.customer_id', '=', scope.customerId)\n    .where('task.source', '=', 'portal')\n    .where('task.deleted_at', 'is', null)\n  if (options.statusIds) owned = owned.where('task.task_status_id', 'in', [...options.statusIds])\n  const lastActivity = sql<Date>`greatest(task.created_at, coalesce((\n    select max(visible_comment.created_at)\n    from staff_time_task_comments as visible_comment\n    where visible_comment.organization_id = task.organization_id\n      and visible_comment.task_id = task.id\n      and visible_comment.tenant_id = task.tenant_id\n      and visible_comment.visibility = 'customer'\n      and visible_comment.deleted_at is null\n  ), task.created_at))`\n  const [countRow, pageRows] = await Promise.all([\n    owned.select((builder) => builder.fn.countAll<string | number>().as('total')).executeTakeFirst(),\n    owned\n      .select(['task.id as id', 'task.created_at as created_at'])\n      .select(lastActivity.as('last_activity_at'))\n      .orderBy('last_activity_at', 'desc')\n      .orderBy('task.id', 'desc')\n      .limit(options.limit)\n      .offset(options.offset)\n      .execute(),\n  ])\n  const total = Number(countRow?.total ?? 0)\n  return {\n    total: Number.isFinite(total) ? total : 0,\n    rows: pageRows.map((row) => ({\n      id: row.id,\n      lastActivityAt: toDate(row.last_activity_at, toDate(row.created_at, new Date(0))),\n    })),\n  }\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,WAAW;AAGpB,SAAS,8BAA8B;AACvC,SAAS,oBAAoB;AAC7B,SAAS,6BAA6B;AACtC,SAAS,sBAAsB;AAC/B,SAAS,oBAAoB,qBAAqB;AAClD,SAAS,sCAAsC;AAE/C,MAAM,SAAS,aAAa,OAAO,EAAE,MAAM,EAAE,WAAW,4BAA4B,CAAC;AAE9E,MAAM,sCAAsC;AAC5C,MAAM,wCAAwC;AAuBrD,eAAsB,0BACpB,KACA,iBACwC;AACxC,MAAI,OAAmC;AACvC,MAAI,iBAA8C;AAClD,MAAI;AACF,UAAM,eAAe,MAAM,OAAO,+DAA+D;AACjG,WAAO,MAAM,aAAa,2BAA2B,GAAG;AACxD,UAAMA,SAAkB,aAAsD;AAC9E,qBAAiB,OAAOA,WAAU,aAAcA,SAAiC;AAAA,EACnF,SAAS,KAAK;AACZ,WAAO,KAAK,wDAAwD,EAAE,IAAI,CAAC;AAC3E,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,4BAA4B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC7F;AACA,MAAI,CAAC,KAAM,QAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,4BAA4B,GAAG,EAAE,QAAQ,IAAI,CAAC;AACtG,QAAM,aACJ,OAAO,KAAK,qBAAqB,YAAY,KAAK,iBAAiB,KAAK,EAAE,SAAS,IAC/E,KAAK,iBAAiB,KAAK,IAC3B;AACN,MAAI,CAAC,YAAY;AACf,WAAO,aAAa;AAAA,MAClB,EAAE,IAAI,OAAO,OAAO,yCAAyC,MAAM,+BAA+B;AAAA,MAClG,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACA,MAAI,CAAC,gBAAgB;AACnB,WAAO,MAAM,uFAAuF;AAAA,MAClG,SAAS;AAAA,IACX,CAAC;AACD,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,yBAAyB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC1F;AACA,QAAM,QAAQ;AACd,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,eAAe;AACrB,QAAM,aAAa,OAAO,YAAsC;AAC9D,QAAI;AACF,YAAM,MAAM,cAAc,CAAC,OAAO,GAAG,UAAU,QAAQ,qBAAqB,CAAC;AAC7E,aAAO;AAAA,IACT,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF;AACA,MAAI;AACF,UAAM,MAAM,MAAM,CAAC,eAAe,GAAG,UAAU,QAAQ,qBAAqB,CAAC;AAAA,EAC/E,SAAS,UAAU;AACjB,QAAI,oBAAoB,SAAU,QAAO;AACzC,WAAO,KAAK,6CAA6C,EAAE,KAAK,SAAS,CAAC;AAC1E,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,yBAAyB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC1F;AACA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,UAAU,KAAK;AAAA,IACf,gBAAgB,KAAK;AAAA,IACrB;AAAA,IACA,IAAK,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAAA,IACpD;AAAA,EACF;AACF;AAQO,SAAS,qBAAqB,OAA+E;AAClH,SAAO;AAAA,IACL,UAAU,MAAM;AAAA,IAChB,gBAAgB,MAAM;AAAA,IACtB,YAAY,MAAM;AAAA,IAClB,QAAQ;AAAA,IACR,WAAW;AAAA,EACb;AACF;AAEA,eAAsB,sBACpB,OACA,QACqE;AACrE,QAAM,OAAO,MAAM,MAAM,GAAG,QAAQ,eAAe,EAAE,IAAI,QAAQ,GAAG,qBAAqB,KAAK,EAAE,CAAC;AACjG,MAAI,CAAC,KAAM,QAAO;AAClB,QAAM,SAAS,MAAM;AAAA,IACnB,MAAM;AAAA,IACN;AAAA,IACA,EAAE,QAAQ,KAAK,IAAI,UAAU,MAAM,UAAU,gBAAgB,MAAM,gBAAgB,WAAW,KAAK;AAAA,IACnG;AAAA,IACA,EAAE,UAAU,MAAM,UAAU,gBAAgB,MAAM,eAAe;AAAA,EACnE;AACA,MAAI,CAAC,OAAQ,QAAO;AACpB,SAAO,EAAE,MAAM,OAAO;AACxB;AAEA,eAAsB,uBACpB,OAC8D;AAC9D,MAAI;AACF,UAAM,WAAW,MAAM;AAAA,MACrB,MAAM;AAAA,MACN;AAAA,MACA,EAAE,IAAI,MAAM,YAAY,UAAU,MAAM,UAAU,gBAAgB,MAAM,gBAAgB,WAAW,KAAK;AAAA,MACxG;AAAA,MACA,EAAE,UAAU,MAAM,UAAU,gBAAgB,MAAM,eAAe;AAAA,IACnE;AACA,UAAM,cAAc,OAAO,UAAU,gBAAgB,WAAW,SAAS,cAAc;AACvF,UAAM,OAAO,OAAO,UAAU,SAAS,WAAW,SAAS,OAAO;AAClE,WAAO,EAAE,aAAa,KAAK;AAAA,EAC7B,QAAQ;AACN,WAAO,EAAE,aAAa,MAAM,MAAM,KAAK;AAAA,EACzC;AACF;AAyBA,SAAS,OAAO,OAAgB,UAAsB;AACpD,MAAI,iBAAiB,KAAM,QAAO;AAClC,MAAI,OAAO,UAAU,YAAY,OAAO,UAAU,UAAU;AAC1D,UAAM,SAAS,IAAI,KAAK,KAAK;AAC7B,QAAI,CAAC,OAAO,MAAM,OAAO,QAAQ,CAAC,EAAG,QAAO;AAAA,EAC9C;AACA,SAAO;AACT;AAUA,eAAsB,qBACpB,OACA,SACyD;AACzD,MAAI,QAAQ,aAAa,QAAQ,UAAU,WAAW,EAAG,QAAO,EAAE,MAAM,CAAC,GAAG,OAAO,EAAE;AACrF,QAAM,KAAK,MAAM,GAAG,UAAkC;AACtD,MAAI,QAAQ,GACT,WAAW,0BAA0B,EACrC,MAAM,kBAAkB,KAAK,MAAM,QAAQ,EAC3C,MAAM,wBAAwB,KAAK,MAAM,cAAc,EACvD,MAAM,oBAAoB,KAAK,MAAM,UAAU,EAC/C,MAAM,eAAe,KAAK,QAAQ,EAClC,MAAM,mBAAmB,MAAM,IAAI;AACtC,MAAI,QAAQ,UAAW,SAAQ,MAAM,MAAM,uBAAuB,MAAM,CAAC,GAAG,QAAQ,SAAS,CAAC;AAC9F,QAAM,eAAe;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AASrB,QAAM,CAAC,UAAU,QAAQ,IAAI,MAAM,QAAQ,IAAI;AAAA,IAC7C,MAAM,OAAO,CAAC,YAAY,QAAQ,GAAG,SAA0B,EAAE,GAAG,OAAO,CAAC,EAAE,iBAAiB;AAAA,IAC/F,MACG,OAAO,CAAC,iBAAiB,+BAA+B,CAAC,EACzD,OAAO,aAAa,GAAG,kBAAkB,CAAC,EAC1C,QAAQ,oBAAoB,MAAM,EAClC,QAAQ,WAAW,MAAM,EACzB,MAAM,QAAQ,KAAK,EACnB,OAAO,QAAQ,MAAM,EACrB,QAAQ;AAAA,EACb,CAAC;AACD,QAAM,QAAQ,OAAO,UAAU,SAAS,CAAC;AACzC,SAAO;AAAA,IACL,OAAO,OAAO,SAAS,KAAK,IAAI,QAAQ;AAAA,IACxC,MAAM,SAAS,IAAI,CAAC,SAAS;AAAA,MAC3B,IAAI,IAAI;AAAA,MACR,gBAAgB,OAAO,IAAI,kBAAkB,OAAO,IAAI,YAAY,oBAAI,KAAK,CAAC,CAAC,CAAC;AAAA,IAClF,EAAE;AAAA,EACJ;AACF;",
+  "names": ["guard"]
+}