@open-mercato/core 0.4.5-develop-0f0e676c72 → 0.4.5-develop-8f98466993

package/dist/modules/customers/setup.js

@@ -1,9 +1,10 @@
-import { seedCustomerDictionaries, seedCurrencyDictionary, seedCustomerExamples } from "./cli.js";
+import { seedCustomerDictionaries, seedCurrencyDictionary, seedCustomerExamples, seedDefaultPipeline } from "./cli.js";
 const setup = {
   seedDefaults: async (ctx) => {
     const scope = { tenantId: ctx.tenantId, organizationId: ctx.organizationId };
     await seedCustomerDictionaries(ctx.em, scope);
     await seedCurrencyDictionary(ctx.em, scope);
+    await seedDefaultPipeline(ctx.em, scope);
   },
   seedExamples: async (ctx) => {
     const scope = { tenantId: ctx.tenantId, organizationId: ctx.organizationId };
@@ -17,14 +18,17 @@ const setup = {
       "customers.companies.view",
       "customers.companies.manage",
       "customers.deals.view",
-      "customers.deals.manage"
+      "customers.deals.manage",
+      "customers.pipelines.view",
+      "customers.pipelines.manage"
     ],
     employee: [
       "customers.*",
       "customers.people.view",
       "customers.people.manage",
       "customers.companies.view",
-      "customers.companies.manage"
+      "customers.companies.manage",
+      "customers.pipelines.view"
     ]
   }
 };

package/dist/modules/customers/setup.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../src/modules/customers/setup.ts"],
-  "sourcesContent": ["import type { ModuleSetupConfig } from '@open-mercato/shared/modules/setup'\nimport { seedCustomerDictionaries, seedCurrencyDictionary, seedCustomerExamples } from './cli'\n\nexport const setup: ModuleSetupConfig = {\n  seedDefaults: async (ctx) => {\n    const scope = { tenantId: ctx.tenantId, organizationId: ctx.organizationId }\n    await seedCustomerDictionaries(ctx.em, scope)\n    await seedCurrencyDictionary(ctx.em, scope)\n  },\n\n  seedExamples: async (ctx) => {\n    const scope = { tenantId: ctx.tenantId, organizationId: ctx.organizationId }\n    await seedCustomerExamples(ctx.em, ctx.container, scope)\n  },\n\n  defaultRoleFeatures: {\n    admin: [\n      'customers.*',\n      'customers.people.view',\n      'customers.people.manage',\n      'customers.companies.view',\n      'customers.companies.manage',\n      'customers.deals.view',\n      'customers.deals.manage',\n    ],\n    employee: [\n      'customers.*',\n      'customers.people.view',\n      'customers.people.manage',\n      'customers.companies.view',\n      'customers.companies.manage',\n    ],\n  },\n}\n\nexport default setup\n"],
-  "mappings": "AACA,SAAS,0BAA0B,wBAAwB,4BAA4B;AAEhF,MAAM,QAA2B;AAAA,EACtC,cAAc,OAAO,QAAQ;AAC3B,UAAM,QAAQ,EAAE,UAAU,IAAI,UAAU,gBAAgB,IAAI,eAAe;AAC3E,UAAM,yBAAyB,IAAI,IAAI,KAAK;AAC5C,UAAM,uBAAuB,IAAI,IAAI,KAAK;AAAA,EAC5C;AAAA,EAEA,cAAc,OAAO,QAAQ;AAC3B,UAAM,QAAQ,EAAE,UAAU,IAAI,UAAU,gBAAgB,IAAI,eAAe;AAC3E,UAAM,qBAAqB,IAAI,IAAI,IAAI,WAAW,KAAK;AAAA,EACzD;AAAA,EAEA,qBAAqB;AAAA,IACnB,OAAO;AAAA,MACL;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,IACA,UAAU;AAAA,MACR;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AACF;AAEA,IAAO,gBAAQ;",
+  "sourcesContent": ["import type { ModuleSetupConfig } from '@open-mercato/shared/modules/setup'\nimport { seedCustomerDictionaries, seedCurrencyDictionary, seedCustomerExamples, seedDefaultPipeline } from './cli'\n\nexport const setup: ModuleSetupConfig = {\n  seedDefaults: async (ctx) => {\n    const scope = { tenantId: ctx.tenantId, organizationId: ctx.organizationId }\n    await seedCustomerDictionaries(ctx.em, scope)\n    await seedCurrencyDictionary(ctx.em, scope)\n    await seedDefaultPipeline(ctx.em, scope)\n  },\n\n  seedExamples: async (ctx) => {\n    const scope = { tenantId: ctx.tenantId, organizationId: ctx.organizationId }\n    await seedCustomerExamples(ctx.em, ctx.container, scope)\n  },\n\n  defaultRoleFeatures: {\n    admin: [\n      'customers.*',\n      'customers.people.view',\n      'customers.people.manage',\n      'customers.companies.view',\n      'customers.companies.manage',\n      'customers.deals.view',\n      'customers.deals.manage',\n      'customers.pipelines.view',\n      'customers.pipelines.manage',\n    ],\n    employee: [\n      'customers.*',\n      'customers.people.view',\n      'customers.people.manage',\n      'customers.companies.view',\n      'customers.companies.manage',\n      'customers.pipelines.view',\n    ],\n  },\n}\n\nexport default setup\n"],
+  "mappings": "AACA,SAAS,0BAA0B,wBAAwB,sBAAsB,2BAA2B;AAErG,MAAM,QAA2B;AAAA,EACtC,cAAc,OAAO,QAAQ;AAC3B,UAAM,QAAQ,EAAE,UAAU,IAAI,UAAU,gBAAgB,IAAI,eAAe;AAC3E,UAAM,yBAAyB,IAAI,IAAI,KAAK;AAC5C,UAAM,uBAAuB,IAAI,IAAI,KAAK;AAC1C,UAAM,oBAAoB,IAAI,IAAI,KAAK;AAAA,EACzC;AAAA,EAEA,cAAc,OAAO,QAAQ;AAC3B,UAAM,QAAQ,EAAE,UAAU,IAAI,UAAU,gBAAgB,IAAI,eAAe;AAC3E,UAAM,qBAAqB,IAAI,IAAI,IAAI,WAAW,KAAK;AAAA,EACzD;AAAA,EAEA,qBAAqB;AAAA,IACnB,OAAO;AAAA,MACL;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,IACA,UAAU;AAAA,MACR;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AACF;AAEA,IAAO,gBAAQ;",
   "names": []
 }

package/dist/modules/workflows/migrations/Migration20260222205305.js

@@ -0,0 +1,14 @@
+import { Migration } from "@mikro-orm/migrations";
+class Migration20260222205305 extends Migration {
+  async up() {
+    this.addSql(`create table if not exists "workflow_event_triggers" ("id" uuid not null default gen_random_uuid(), "name" varchar(255) not null, "description" text null, "workflow_definition_id" uuid not null, "event_pattern" varchar(255) not null, "config" jsonb null, "enabled" boolean not null default true, "priority" int not null default 0, "tenant_id" uuid not null, "organization_id" uuid not null, "created_by" varchar(255) null, "updated_by" varchar(255) null, "created_at" timestamptz not null, "updated_at" timestamptz not null, "deleted_at" timestamptz null, constraint "workflow_event_triggers_pkey" primary key ("id"));`);
+    this.addSql(`create index if not exists "workflow_event_triggers_enabled_priority_idx" on "workflow_event_triggers" ("enabled", "priority");`);
+    this.addSql(`create index if not exists "workflow_event_triggers_tenant_org_idx" on "workflow_event_triggers" ("tenant_id", "organization_id");`);
+    this.addSql(`create index if not exists "workflow_event_triggers_definition_idx" on "workflow_event_triggers" ("workflow_definition_id");`);
+    this.addSql(`create index if not exists "workflow_event_triggers_event_pattern_idx" on "workflow_event_triggers" ("event_pattern", "enabled");`);
+  }
+}
+export {
+  Migration20260222205305
+};
+//# sourceMappingURL=Migration20260222205305.js.map

package/dist/modules/workflows/migrations/Migration20260222205305.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/workflows/migrations/Migration20260222205305.ts"],
+  "sourcesContent": ["import { Migration } from '@mikro-orm/migrations';\n\nexport class Migration20260222205305 extends Migration {\n\n  override async up(): Promise<void> {\n    this.addSql(`create table if not exists \"workflow_event_triggers\" (\"id\" uuid not null default gen_random_uuid(), \"name\" varchar(255) not null, \"description\" text null, \"workflow_definition_id\" uuid not null, \"event_pattern\" varchar(255) not null, \"config\" jsonb null, \"enabled\" boolean not null default true, \"priority\" int not null default 0, \"tenant_id\" uuid not null, \"organization_id\" uuid not null, \"created_by\" varchar(255) null, \"updated_by\" varchar(255) null, \"created_at\" timestamptz not null, \"updated_at\" timestamptz not null, \"deleted_at\" timestamptz null, constraint \"workflow_event_triggers_pkey\" primary key (\"id\"));`);\n    this.addSql(`create index if not exists \"workflow_event_triggers_enabled_priority_idx\" on \"workflow_event_triggers\" (\"enabled\", \"priority\");`);\n    this.addSql(`create index if not exists \"workflow_event_triggers_tenant_org_idx\" on \"workflow_event_triggers\" (\"tenant_id\", \"organization_id\");`);\n    this.addSql(`create index if not exists \"workflow_event_triggers_definition_idx\" on \"workflow_event_triggers\" (\"workflow_definition_id\");`);\n    this.addSql(`create index if not exists \"workflow_event_triggers_event_pattern_idx\" on \"workflow_event_triggers\" (\"event_pattern\", \"enabled\");`);\n  }\n\n}\n"],
+  "mappings": "AAAA,SAAS,iBAAiB;AAEnB,MAAM,gCAAgC,UAAU;AAAA,EAErD,MAAe,KAAoB;AACjC,SAAK,OAAO,4mBAA4mB;AACxnB,SAAK,OAAO,iIAAiI;AAC7I,SAAK,OAAO,oIAAoI;AAChJ,SAAK,OAAO,8HAA8H;AAC1I,SAAK,OAAO,mIAAmI;AAAA,EACjJ;AAEF;",
+  "names": []
+}

package/generated/entities/customer_deal/index.ts

@@ -5,6 +5,8 @@ export const title = 'title'
 export const description = 'description'
 export const status = 'status'
 export const pipeline_stage = 'pipeline_stage'
+export const pipeline_id = 'pipeline_id'
+export const pipeline_stage_id = 'pipeline_stage_id'
 export const value_amount = 'value_amount'
 export const value_currency = 'value_currency'
 export const probability = 'probability'

package/generated/entities/customer_pipeline/index.ts

@@ -0,0 +1,7 @@
+export const id = 'id'
+export const organization_id = 'organization_id'
+export const tenant_id = 'tenant_id'
+export const name = 'name'
+export const is_default = 'is_default'
+export const created_at = 'created_at'
+export const updated_at = 'updated_at'

package/generated/entities/customer_pipeline_stage/index.ts

@@ -0,0 +1,8 @@
+export const id = 'id'
+export const organization_id = 'organization_id'
+export const tenant_id = 'tenant_id'
+export const pipeline_id = 'pipeline_id'
+export const name = 'name'
+export const position = 'position'
+export const created_at = 'created_at'
+export const updated_at = 'updated_at'

package/generated/entities.ids.generated.ts

@@ -63,6 +63,8 @@ export const E = {
     "customer_tag": "customers:customer_tag",
     "customer_tag_assignment": "customers:customer_tag_assignment",
     "customer_dictionary_entry": "customers:customer_dictionary_entry",
+    "customer_pipeline": "customers:customer_pipeline",
+    "customer_pipeline_stage": "customers:customer_pipeline_stage",
     "customer_todo_link": "customers:customer_todo_link"
   },
   "perspectives": {

package/generated/entity-fields-registry.ts

@@ -35,6 +35,8 @@ import * as customer_deal_person_link from './entities/customer_deal_person_link
 import * as customer_dictionary_entry from './entities/customer_dictionary_entry/index'
 import * as customer_entity from './entities/customer_entity/index'
 import * as customer_person_profile from './entities/customer_person_profile/index'
+import * as customer_pipeline from './entities/customer_pipeline/index'
+import * as customer_pipeline_stage from './entities/customer_pipeline_stage/index'
 import * as customer_settings from './entities/customer_settings/index'
 import * as customer_tag from './entities/customer_tag/index'
 import * as customer_tag_assignment from './entities/customer_tag_assignment/index'
@@ -169,6 +171,8 @@ export const entityFieldsRegistry: Record<string, Record<string, string>> = {
   customer_dictionary_entry,
   customer_entity,
   customer_person_profile,
+  customer_pipeline,
+  customer_pipeline_stage,
   customer_settings,
   customer_tag,
   customer_tag_assignment,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@open-mercato/core",
-  "version": "0.4.5-develop-0f0e676c72",
+  "version": "0.4.5-develop-8f98466993",
   "type": "module",
   "main": "./dist/index.js",
   "scripts": {
@@ -207,7 +207,7 @@
     }
   },
   "dependencies": {
-    "@open-mercato/shared": "0.4.5-develop-0f0e676c72",
+    "@open-mercato/shared": "0.4.5-develop-8f98466993",
     "@types/semver": "^7.5.8",
     "@xyflow/react": "^12.6.0",
     "ai": "^6.0.0",

package/src/modules/customers/acl.ts

@@ -8,6 +8,8 @@ export const features = [
   { id: 'customers.activities.view', title: 'View activities', module: 'customers' },
   { id: 'customers.activities.manage', title: 'Manage activities', module: 'customers' },
   { id: 'customers.settings.manage', title: 'Manage customer settings', module: 'customers' },
+  { id: 'customers.pipelines.view', title: 'View pipelines', module: 'customers' },
+  { id: 'customers.pipelines.manage', title: 'Manage pipelines', module: 'customers' },
   { id: 'customers.widgets.todos', title: 'Use customer todos widget', module: 'customers' },
   { id: 'customers.widgets.next-interactions', title: 'Use customer next interactions widget', module: 'customers' },
   { id: 'customers.widgets.new-customers', title: 'Use customer new customers widget', module: 'customers' },

package/src/modules/customers/api/deals/[id]/route.ts

@@ -212,6 +212,8 @@ export async function GET(request: Request, context: { params?: Record<string, u
       description: deal.description ?? null,
       status: deal.status ?? null,
       pipelineStage: deal.pipelineStage ?? null,
+      pipelineId: deal.pipelineId ?? null,
+      pipelineStageId: deal.pipelineStageId ?? null,
       valueAmount: deal.valueAmount ?? null,
       valueCurrency: deal.valueCurrency ?? null,
       probability: deal.probability ?? null,
@@ -241,6 +243,8 @@ const dealDetailResponseSchema = z.object({
     description: z.string().nullable().optional(),
     status: z.string().nullable().optional(),
     pipelineStage: z.string().nullable().optional(),
+    pipelineId: z.string().uuid().nullable().optional(),
+    pipelineStageId: z.string().uuid().nullable().optional(),
     valueAmount: z.number().nullable().optional(),
     valueCurrency: z.string().nullable().optional(),
     probability: z.number().nullable().optional(),

package/src/modules/customers/api/deals/route.ts

@@ -25,6 +25,8 @@ const listSchema = z
     search: z.string().optional(),
     status: z.string().optional(),
     pipelineStage: z.string().optional(),
+    pipelineId: z.string().uuid().optional(),
+    pipelineStageId: z.string().uuid().optional(),
     sortField: z.string().optional(),
     sortDir: z.enum(['asc', 'desc']).optional(),
     personEntityId: z.string().uuid().optional(),
@@ -98,6 +100,8 @@ const crud = makeCrudRoute<unknown, unknown, DealListQuery>({
       'description',
       'status',
       'pipeline_stage',
+      'pipeline_id',
+      'pipeline_stage_id',
       'value_amount',
       'value_currency',
       'probability',
@@ -129,6 +133,12 @@ const crud = makeCrudRoute<unknown, unknown, DealListQuery>({
       if (query.pipelineStage) {
         filters.pipeline_stage = { $eq: query.pipelineStage }
       }
+      if (query.pipelineId) {
+        filters.pipeline_id = { $eq: query.pipelineId }
+      }
+      if (query.pipelineStageId) {
+        filters.pipeline_stage_id = { $eq: query.pipelineStageId }
+      }
       return filters
     },
   },
@@ -394,6 +404,8 @@ const dealListItemSchema = z
     description: z.string().nullable().optional(),
     status: z.string().nullable().optional(),
     pipeline_stage: z.string().nullable().optional(),
+    pipeline_id: z.string().uuid().nullable().optional(),
+    pipeline_stage_id: z.string().uuid().nullable().optional(),
     value_amount: z.number().nullable().optional(),
     value_currency: z.string().nullable().optional(),
     probability: z.number().nullable().optional(),

package/src/modules/customers/api/dictionaries/[kind]/route.ts

@@ -4,7 +4,8 @@ import { CrudHttpError } from '@open-mercato/shared/lib/crud/errors'
 import type { CommandBus } from '@open-mercato/shared/lib/commands'
 import type { CommandExecuteResult } from '@open-mercato/shared/lib/commands/types'
 import { serializeOperationMetadata } from '@open-mercato/shared/lib/commands/operationMetadata'
-import { CustomerDictionaryEntry } from '../../../data/entities'
+import { CustomerDictionaryEntry, CustomerPipelineStage } from '../../../data/entities'
+import { ensureDictionaryEntry } from '../../../commands/shared'
 import { mapDictionaryKind, resolveDictionaryRouteContext } from '../context'
 import { createDictionaryCacheKey, createDictionaryCacheTags, invalidateDictionaryCache, DICTIONARY_CACHE_TTL_MS } from '../cache'
 import { z } from 'zod'
@@ -48,6 +49,25 @@ export async function GET(req: Request, ctx: { params?: { kind?: string } }) {
       { orderBy: { label: 'asc' } }
     )
 
+    if (mappedKind === 'pipeline_stage' && organizationId) {
+      const existingNormalized = new Set(entries.map((e) => e.normalizedValue))
+      const pipelineStages = await em.find(CustomerPipelineStage, { organizationId, tenantId })
+      for (const stage of pipelineStages) {
+        if (!existingNormalized.has(stage.label.trim().toLowerCase())) {
+          const created = await ensureDictionaryEntry(em, {
+            tenantId,
+            organizationId,
+            kind: 'pipeline_stage',
+            value: stage.label,
+          })
+          if (created) {
+            entries.push(created)
+            existingNormalized.add(created.normalizedValue)
+          }
+        }
+      }
+    }
+
     const byValue = new Map<string, { entry: CustomerDictionaryEntry; isInherited: boolean; order: number }>()
     for (const entry of entries) {
       const normalized = entry.normalizedValue

package/src/modules/customers/api/pipeline-stages/reorder/route.ts

@@ -0,0 +1,71 @@
+import { NextResponse } from 'next/server'
+import { z } from 'zod'
+import { createRequestContainer } from '@open-mercato/shared/lib/di/container'
+import { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'
+import { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'
+import type { CommandRuntimeContext, CommandBus } from '@open-mercato/shared/lib/commands'
+import { pipelineStageReorderSchema, type PipelineStageReorderInput } from '../../../data/validators'
+import { withScopedPayload } from '../../utils'
+import { CrudHttpError } from '@open-mercato/shared/lib/crud/errors'
+import { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'
+import type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'
+
+export const metadata = {
+  POST: { requireAuth: true, requireFeatures: ['customers.pipelines.manage'] },
+}
+
+export async function POST(req: Request) {
+  try {
+    const container = await createRequestContainer()
+    const auth = await getAuthFromRequest(req)
+    const { translate } = await resolveTranslations()
+    if (!auth) throw new CrudHttpError(401, { error: translate('customers.errors.unauthorized', 'Unauthorized') })
+    const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })
+    const ctx: CommandRuntimeContext = {
+      container,
+      auth,
+      organizationScope: scope,
+      selectedOrganizationId: scope?.selectedId ?? auth.orgId ?? null,
+      organizationIds: scope?.filterIds ?? (auth.orgId ? [auth.orgId] : null),
+      request: req,
+    }
+
+    const body = await req.json().catch(() => ({}))
+    const scoped = withScopedPayload(body, ctx, translate)
+
+    const commandBus = (ctx.container.resolve('commandBus') as CommandBus)
+    await commandBus.execute<PipelineStageReorderInput, void>(
+      'customers.pipeline-stages.reorder',
+      { input: pipelineStageReorderSchema.parse(scoped), ctx },
+    )
+    return NextResponse.json({ ok: true })
+  } catch (err) {
+    if (err instanceof CrudHttpError) {
+      return NextResponse.json(err.body, { status: err.status })
+    }
+    console.error('customers.pipeline-stages.reorder failed', err)
+    return NextResponse.json({ error: 'Failed to reorder pipeline stages' }, { status: 400 })
+  }
+}
+
+const reorderOkResponseSchema = z.object({ ok: z.boolean() })
+const reorderErrorSchema = z.object({ error: z.string() })
+
+export const openApi: OpenApiRouteDoc = {
+  tag: 'Customers',
+  summary: 'Reorder pipeline stages',
+  methods: {
+    POST: {
+      summary: 'Reorder pipeline stages',
+      description: 'Updates the order of pipeline stages in bulk.',
+      requestBody: { contentType: 'application/json', schema: pipelineStageReorderSchema },
+      responses: [
+        { status: 200, description: 'Stages reordered', schema: reorderOkResponseSchema },
+      ],
+      errors: [
+        { status: 400, description: 'Validation failed', schema: reorderErrorSchema },
+        { status: 401, description: 'Unauthorized', schema: reorderErrorSchema },
+      ],
+    },
+  },
+}

package/src/modules/customers/api/pipeline-stages/route.ts

@@ -0,0 +1,296 @@
+import { NextResponse } from 'next/server'
+import { z } from 'zod'
+import { createRequestContainer } from '@open-mercato/shared/lib/di/container'
+import { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'
+import { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'
+import type { EntityManager } from '@mikro-orm/postgresql'
+import type { CommandRuntimeContext, CommandBus } from '@open-mercato/shared/lib/commands'
+import { CustomerPipelineStage, CustomerDictionaryEntry } from '../../data/entities'
+import {
+  pipelineStageCreateSchema,
+  pipelineStageUpdateSchema,
+  pipelineStageDeleteSchema,
+  type PipelineStageCreateInput,
+  type PipelineStageUpdateInput,
+  type PipelineStageDeleteInput,
+} from '../../data/validators'
+import { withScopedPayload } from '../utils'
+import { ensureDictionaryEntry } from '../../commands/shared'
+import { CrudHttpError } from '@open-mercato/shared/lib/crud/errors'
+import { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'
+import { serializeOperationMetadata } from '@open-mercato/shared/lib/commands/operationMetadata'
+import type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'
+
+export const metadata = {
+  GET: { requireAuth: true, requireFeatures: ['customers.pipelines.view'] },
+  POST: { requireAuth: true, requireFeatures: ['customers.pipelines.manage'] },
+  PUT: { requireAuth: true, requireFeatures: ['customers.pipelines.manage'] },
+  DELETE: { requireAuth: true, requireFeatures: ['customers.pipelines.manage'] },
+}
+
+async function buildContext(
+  req: Request
+): Promise<{ ctx: CommandRuntimeContext; organizationId: string | null; tenantId: string | null }> {
+  const container = await createRequestContainer()
+  const auth = await getAuthFromRequest(req)
+  const { translate } = await resolveTranslations()
+  if (!auth) throw new CrudHttpError(401, { error: translate('customers.errors.unauthorized', 'Unauthorized') })
+  const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })
+  const ctx: CommandRuntimeContext = {
+    container,
+    auth,
+    organizationScope: scope,
+    selectedOrganizationId: scope?.selectedId ?? auth.orgId ?? null,
+    organizationIds: scope?.filterIds ?? (auth.orgId ? [auth.orgId] : null),
+    request: req,
+  }
+  const organizationId = scope?.selectedId ?? auth.orgId ?? null
+  const tenantId = auth.tenantId ?? null
+  return { ctx, organizationId, tenantId }
+}
+
+export async function GET(req: Request) {
+  try {
+    const { ctx, organizationId, tenantId } = await buildContext(req)
+    if (!organizationId || !tenantId) {
+      return NextResponse.json({ error: 'Organization and tenant context required' }, { status: 400 })
+    }
+    const url = new URL(req.url)
+    const pipelineId = url.searchParams.get('pipelineId')
+
+    const em = (ctx.container.resolve('em') as EntityManager)
+    const where: Record<string, unknown> = { organizationId, tenantId }
+    if (pipelineId) where.pipelineId = pipelineId
+
+    const stages = await em.find(CustomerPipelineStage, where, { orderBy: { order: 'ASC' } })
+
+    const stageLabels = stages.map((s) => s.label.trim().toLowerCase())
+    const dictEntries = stageLabels.length
+      ? await em.find(CustomerDictionaryEntry, {
+          organizationId,
+          tenantId,
+          kind: 'pipeline_stage',
+          normalizedValue: { $in: stageLabels },
+        })
+      : []
+    const dictByNormalized = new Map<string, CustomerDictionaryEntry>()
+    dictEntries.forEach((entry) => dictByNormalized.set(entry.normalizedValue, entry))
+
+    const missingStages = stages.filter((s) => !dictByNormalized.has(s.label.trim().toLowerCase()))
+    if (missingStages.length) {
+      for (const stage of missingStages) {
+        const created = await ensureDictionaryEntry(em, {
+          tenantId,
+          organizationId,
+          kind: 'pipeline_stage',
+          value: stage.label,
+        })
+        if (created) dictByNormalized.set(created.normalizedValue, created)
+      }
+    }
+
+    const items = stages.map((stage) => {
+      const dictEntry = dictByNormalized.get(stage.label.trim().toLowerCase())
+      return {
+        id: stage.id,
+        pipelineId: stage.pipelineId,
+        label: stage.label,
+        order: stage.order,
+        color: dictEntry?.color ?? null,
+        icon: dictEntry?.icon ?? null,
+        organizationId: stage.organizationId,
+        tenantId: stage.tenantId,
+        createdAt: stage.createdAt,
+        updatedAt: stage.updatedAt,
+      }
+    })
+    return NextResponse.json({ items, total: items.length })
+  } catch (err) {
+    if (err instanceof CrudHttpError) {
+      return NextResponse.json(err.body, { status: err.status })
+    }
+    console.error('customers.pipeline-stages GET failed', err)
+    return NextResponse.json({ error: 'Failed to load pipeline stages' }, { status: 500 })
+  }
+}
+
+export async function POST(req: Request) {
+  try {
+    const { ctx } = await buildContext(req)
+    const body = await req.json().catch(() => ({}))
+    const { translate } = await resolveTranslations()
+    const scoped = withScopedPayload(body, ctx, translate)
+
+    const commandBus = (ctx.container.resolve('commandBus') as CommandBus)
+    const { result, logEntry } = await commandBus.execute<PipelineStageCreateInput, { stageId: string }>(
+      'customers.pipeline-stages.create',
+      { input: pipelineStageCreateSchema.parse(scoped), ctx },
+    )
+    const response = NextResponse.json({ id: result?.stageId ?? null }, { status: 201 })
+    if (logEntry?.undoToken && logEntry?.id && logEntry?.commandId) {
+      response.headers.set(
+        'x-om-operation',
+        serializeOperationMetadata({
+          id: logEntry.id,
+          undoToken: logEntry.undoToken,
+          commandId: logEntry.commandId,
+          actionLabel: logEntry.actionLabel ?? null,
+          resourceKind: logEntry.resourceKind ?? 'customers.pipelineStage',
+          resourceId: logEntry.resourceId ?? result?.stageId ?? null,
+          executedAt: logEntry.createdAt instanceof Date ? logEntry.createdAt.toISOString() : undefined,
+        })
+      )
+    }
+    return response
+  } catch (err) {
+    if (err instanceof CrudHttpError) {
+      return NextResponse.json(err.body, { status: err.status })
+    }
+    console.error('customers.pipeline-stages POST failed', err)
+    return NextResponse.json({ error: 'Failed to create pipeline stage' }, { status: 400 })
+  }
+}
+
+export async function PUT(req: Request) {
+  try {
+    const { ctx } = await buildContext(req)
+    const body = await req.json().catch(() => ({}))
+    const { translate } = await resolveTranslations()
+    const scoped = withScopedPayload(body, ctx, translate)
+
+    const commandBus = (ctx.container.resolve('commandBus') as CommandBus)
+    const { logEntry } = await commandBus.execute<PipelineStageUpdateInput, void>(
+      'customers.pipeline-stages.update',
+      { input: pipelineStageUpdateSchema.parse(scoped), ctx },
+    )
+    const response = NextResponse.json({ ok: true })
+    if (logEntry?.undoToken && logEntry?.id && logEntry?.commandId) {
+      response.headers.set(
+        'x-om-operation',
+        serializeOperationMetadata({
+          id: logEntry.id,
+          undoToken: logEntry.undoToken,
+          commandId: logEntry.commandId,
+          actionLabel: logEntry.actionLabel ?? null,
+          resourceKind: logEntry.resourceKind ?? 'customers.pipelineStage',
+          resourceId: logEntry.resourceId ?? null,
+          executedAt: logEntry.createdAt instanceof Date ? logEntry.createdAt.toISOString() : undefined,
+        })
+      )
+    }
+    return response
+  } catch (err) {
+    if (err instanceof CrudHttpError) {
+      return NextResponse.json(err.body, { status: err.status })
+    }
+    console.error('customers.pipeline-stages PUT failed', err)
+    return NextResponse.json({ error: 'Failed to update pipeline stage' }, { status: 400 })
+  }
+}
+
+export async function DELETE(req: Request) {
+  try {
+    const { ctx } = await buildContext(req)
+    const body = await req.json().catch(() => ({}))
+    const { translate } = await resolveTranslations()
+    const scoped = withScopedPayload(body, ctx, translate)
+
+    const commandBus = (ctx.container.resolve('commandBus') as CommandBus)
+    await commandBus.execute<PipelineStageDeleteInput, void>(
+      'customers.pipeline-stages.delete',
+      { input: pipelineStageDeleteSchema.parse(scoped), ctx },
+    )
+    return NextResponse.json({ ok: true })
+  } catch (err) {
+    if (err instanceof CrudHttpError) {
+      return NextResponse.json(err.body, { status: err.status })
+    }
+    console.error('customers.pipeline-stages DELETE failed', err)
+    return NextResponse.json({ error: 'Failed to delete pipeline stage' }, { status: 400 })
+  }
+}
+
+const stageItemSchema = z.object({
+  id: z.string().uuid(),
+  pipelineId: z.string().uuid(),
+  label: z.string(),
+  order: z.number(),
+  color: z.string().nullable(),
+  icon: z.string().nullable(),
+  organizationId: z.string().uuid(),
+  tenantId: z.string().uuid(),
+  createdAt: z.date(),
+  updatedAt: z.date(),
+})
+
+const stageListResponseSchema = z.object({
+  items: z.array(stageItemSchema),
+  total: z.number(),
+})
+
+const stageCreateResponseSchema = z.object({
+  id: z.string().uuid().nullable(),
+})
+
+const stageOkResponseSchema = z.object({
+  ok: z.boolean(),
+})
+
+const stageErrorSchema = z.object({
+  error: z.string(),
+})
+
+export const openApi: OpenApiRouteDoc = {
+  tag: 'Customers',
+  summary: 'Manage pipeline stages',
+  methods: {
+    GET: {
+      summary: 'List pipeline stages',
+      description: 'Returns pipeline stages for the authenticated organization, optionally filtered by pipelineId.',
+      query: z.object({ pipelineId: z.string().uuid().optional() }),
+      responses: [
+        { status: 200, description: 'Stage list', schema: stageListResponseSchema },
+      ],
+      errors: [
+        { status: 401, description: 'Unauthorized', schema: stageErrorSchema },
+        { status: 400, description: 'Invalid request', schema: stageErrorSchema },
+      ],
+    },
+    POST: {
+      summary: 'Create pipeline stage',
+      description: 'Creates a new pipeline stage.',
+      requestBody: { contentType: 'application/json', schema: pipelineStageCreateSchema },
+      responses: [
+        { status: 201, description: 'Stage created', schema: stageCreateResponseSchema },
+      ],
+      errors: [
+        { status: 400, description: 'Validation failed', schema: stageErrorSchema },
+        { status: 401, description: 'Unauthorized', schema: stageErrorSchema },
+      ],
+    },
+    PUT: {
+      summary: 'Update pipeline stage',
+      description: 'Updates an existing pipeline stage.',
+      requestBody: { contentType: 'application/json', schema: pipelineStageUpdateSchema },
+      responses: [
+        { status: 200, description: 'Stage updated', schema: stageOkResponseSchema },
+      ],
+      errors: [
+        { status: 400, description: 'Validation failed', schema: stageErrorSchema },
+        { status: 404, description: 'Stage not found', schema: stageErrorSchema },
+      ],
+    },
+    DELETE: {
+      summary: 'Delete pipeline stage',
+      description: 'Deletes a pipeline stage. Returns 409 if active deals use this stage.',
+      requestBody: { contentType: 'application/json', schema: pipelineStageDeleteSchema },
+      responses: [
+        { status: 200, description: 'Stage deleted', schema: stageOkResponseSchema },
+      ],
+      errors: [
+        { status: 409, description: 'Stage has active deals', schema: stageErrorSchema },
+        { status: 404, description: 'Stage not found', schema: stageErrorSchema },
+      ],
+    },
+  },
+}