@open-mercato/core 0.5.1-develop.2663.2c29774b5b → 0.5.1-develop.2681.c559bb2bc3

package/dist/modules/customers/api/companies/[id]/route.js

@@ -10,8 +10,10 @@ import {
   CustomerComment,
   CustomerActivity,
   CustomerTagAssignment,
+  CustomerLabelAssignment,
   CustomerDealCompanyLink,
   CustomerTodoLink,
+  CustomerPersonCompanyLink,
   CustomerPersonProfile,
   CustomerInteraction
 } from "../../../data/entities.js";
@@ -31,8 +33,9 @@ import {
 } from "../../../lib/interactionCompatibility.js";
 import { resolveCustomerInteractionFeatureFlags } from "../../../lib/interactionFeatureFlags.js";
 import { hydrateCanonicalInteractions } from "../../../lib/interactionReadModel.js";
-import { findWithDecryption } from "@open-mercato/shared/lib/encryption/find";
+import { findOneWithDecryption, findWithDecryption } from "@open-mercato/shared/lib/encryption/find";
 import { parseBooleanFromUnknown } from "@open-mercato/shared/lib/boolean";
+import { withActiveCustomerPersonCompanyLinkFilter } from "../../../lib/personCompanyLinkTable.js";
 const metadata = {
   GET: { requireAuth: true, requireFeatures: ["customers.companies.view"] }
 };
@@ -107,6 +110,39 @@ function readCustomField(record, key) {
   }
   return void 0;
 }
+function parseDealAmount(value) {
+  if (typeof value === "number" && Number.isFinite(value)) return value;
+  if (typeof value === "string") {
+    const trimmed = value.trim();
+    if (!trimmed.length) return null;
+    const parsed = Number(trimmed);
+    return Number.isNaN(parsed) ? null : parsed;
+  }
+  return null;
+}
+function computeActivityTrend(timestamps) {
+  if (!timestamps.length) return null;
+  const now = Date.now();
+  const weekMs = 7 * 864e5;
+  let thisWeek = 0;
+  let lastWeek = 0;
+  timestamps.forEach((value) => {
+    const time = new Date(value).getTime();
+    if (Number.isNaN(time)) return;
+    const diff = now - time;
+    if (diff < 0 || diff >= weekMs * 2) return;
+    if (diff < weekMs) {
+      thisWeek += 1;
+      return;
+    }
+    lastWeek += 1;
+  });
+  if (lastWeek === 0 && thisWeek === 0) return null;
+  if (lastWeek === 0) return { value: 100, direction: "up" };
+  const pct = (thisWeek - lastWeek) / lastWeek * 100;
+  if (Math.abs(pct) < 0.5) return { value: 0, direction: "unchanged" };
+  return { value: Math.round(Math.abs(pct) * 100) / 100, direction: pct > 0 ? "up" : "down" };
+}
 async function resolveTodoDetails(queryEngine, links, tenantId, organizationIds) {
   const details = /* @__PURE__ */ new Map();
   if (!links.length || !tenantId) return details;
@@ -261,15 +297,21 @@ async function GET(_req, ctx) {
   const includeInteractions = includeTokens.has("interactions");
   const includeTodos = includeTokens.has("todos") || includeTokens.has("tasks");
   const includePeople = includeTokens.has("people");
+  const plannedPreviewLimit = 5;
   const container = await createRequestContainer();
   const scope = await resolveOrganizationScopeForRequest({ container, auth, request: _req });
   const em = container.resolve("em");
   const interactionFlags = await resolveCustomerInteractionFeatureFlags(container, scope?.tenantId ?? auth.tenantId);
   const interactionMode = interactionFlags.unified ? "canonical" : "legacy";
-  const company = await em.findOne(
+  const company = await findOneWithDecryption(
+    em,
     CustomerEntity,
     { id: parse.data.id, kind: "company", deletedAt: null },
-    { populate: ["companyProfile"] }
+    { populate: ["companyProfile"] },
+    {
+      tenantId: auth.tenantId ?? null,
+      organizationId: scope?.selectedId ?? auth.orgId ?? null
+    }
   );
   if (!company) return notFound("Company not found");
   if (auth.tenantId && company.tenantId !== auth.tenantId) return notFound("Company not found");
@@ -279,21 +321,91 @@ async function GET(_req, ctx) {
   if (allowedOrgIds.size && company.organizationId && !allowedOrgIds.has(company.organizationId)) {
     return forbidden("Access denied");
   }
-  const profile = company.companyProfile ? await em.findOne(CustomerCompanyProfile, { id: company.companyProfile.id }) : await em.findOne(CustomerCompanyProfile, { entity: company });
-  const addresses = includeAddresses ? await em.find(CustomerAddress, { entity: company.id }, { orderBy: { isPrimary: "desc", createdAt: "desc" } }) : [];
+  const companyScope = {
+    tenantId: company.tenantId ?? auth.tenantId ?? null,
+    organizationId: company.organizationId ?? scope?.selectedId ?? auth.orgId ?? null
+  };
+  const profile = company.companyProfile ? await findOneWithDecryption(
+    em,
+    CustomerCompanyProfile,
+    {
+      id: company.companyProfile.id,
+      tenantId: company.tenantId,
+      organizationId: company.organizationId
+    },
+    {},
+    companyScope
+  ) : await findOneWithDecryption(
+    em,
+    CustomerCompanyProfile,
+    {
+      entity: company,
+      tenantId: company.tenantId,
+      organizationId: company.organizationId
+    },
+    {},
+    companyScope
+  );
+  const addresses = includeAddresses ? await findWithDecryption(
+    em,
+    CustomerAddress,
+    {
+      entity: company.id,
+      tenantId: company.tenantId,
+      organizationId: company.organizationId
+    },
+    { orderBy: { isPrimary: "desc", createdAt: "desc" } },
+    companyScope
+  ) : [];
   const tagAssignments = await findWithDecryption(
     em,
     CustomerTagAssignment,
-    { entity: company.id },
+    {
+      entity: company.id,
+      tenantId: company.tenantId,
+      organizationId: company.organizationId
+    },
     { populate: ["tag"] },
-    { tenantId: company.tenantId ?? auth.tenantId ?? null, organizationId: company.organizationId ?? auth.orgId ?? null }
+    companyScope
   );
-  const comments = includeComments ? await em.find(CustomerComment, { entity: company.id }, { orderBy: { createdAt: "desc" }, limit: 50 }) : [];
+  const labelAssignments = await findWithDecryption(
+    em,
+    CustomerLabelAssignment,
+    {
+      entity: company.id,
+      tenantId: company.tenantId,
+      organizationId: company.organizationId
+    },
+    { populate: ["label"] },
+    companyScope
+  );
+  const comments = includeComments ? await findWithDecryption(
+    em,
+    CustomerComment,
+    {
+      entity: company.id,
+      tenantId: company.tenantId,
+      organizationId: company.organizationId
+    },
+    { orderBy: { createdAt: "desc" }, limit: 50 },
+    companyScope
+  ) : [];
   const shouldLoadCanonicalInteractions = includeInteractions || includeActivities || includeTodos;
-  const canonicalInteractionRows = shouldLoadCanonicalInteractions ? await em.find(
+  const canonicalInteractionRows = shouldLoadCanonicalInteractions ? await findWithDecryption(
+    em,
     CustomerInteraction,
-    interactionFlags.unified ? { entity: company.id, deletedAt: null } : { entity: company.id },
-    { orderBy: { scheduledAt: "asc", createdAt: "desc" }, limit: 100 }
+    interactionFlags.unified ? {
+      entity: company.id,
+      tenantId: company.tenantId,
+      organizationId: company.organizationId,
+      deletedAt: null
+    } : {
+      entity: company.id,
+      tenantId: company.tenantId,
+      organizationId: company.organizationId
+    },
+    { orderBy: { scheduledAt: "asc", createdAt: "desc" }, limit: 100 },
+    companyScope
   ) : [];
   const canonicalActiveInteractions = canonicalInteractionRows.filter((interaction) => !interaction.deletedAt);
   const canonicalInteractions = shouldLoadCanonicalInteractions ? await hydrateCanonicalInteractions({
@@ -304,8 +416,55 @@ async function GET(_req, ctx) {
     interactions: canonicalActiveInteractions,
     enrich: includeInteractions
   }) : [];
-  const activities = includeActivities && !interactionFlags.unified ? await em.find(CustomerActivity, { entity: company.id }, { orderBy: { occurredAt: "desc", createdAt: "desc" }, limit: 50 }) : [];
-  const todoLinks = includeTodos && !interactionFlags.unified ? await em.find(CustomerTodoLink, { entity: company.id }, { orderBy: { createdAt: "desc" }, limit: 50 }) : [];
+  const plannedPreviewRows = canonicalActiveInteractions.length > 0 ? canonicalActiveInteractions.filter((interaction) => interaction.status === "planned" && interaction.interactionType !== "task").sort((left, right) => {
+    const leftTime = new Date(left.scheduledAt ?? left.createdAt).getTime();
+    const rightTime = new Date(right.scheduledAt ?? right.createdAt).getTime();
+    if (leftTime === rightTime) return left.id.localeCompare(right.id);
+    return leftTime - rightTime;
+  }).slice(0, plannedPreviewLimit) : await findWithDecryption(
+    em,
+    CustomerInteraction,
+    {
+      entity: company.id,
+      organizationId: company.organizationId,
+      tenantId: company.tenantId,
+      deletedAt: null,
+      status: "planned",
+      interactionType: { $ne: "task" }
+    },
+    { orderBy: { scheduledAt: "ASC", createdAt: "ASC" }, limit: plannedPreviewLimit },
+    companyScope
+  );
+  const plannedActivitiesPreview = plannedPreviewRows.length ? await hydrateCanonicalInteractions({
+    em,
+    container,
+    auth,
+    selectedOrganizationId: scope?.selectedId ?? auth.orgId ?? null,
+    interactions: plannedPreviewRows,
+    enrich: true
+  }) : [];
+  const activities = includeActivities && !interactionFlags.unified ? await findWithDecryption(
+    em,
+    CustomerActivity,
+    {
+      entity: company.id,
+      tenantId: company.tenantId,
+      organizationId: company.organizationId
+    },
+    { orderBy: { occurredAt: "desc", createdAt: "desc" }, limit: 50 },
+    companyScope
+  ) : [];
+  const todoLinks = includeTodos && !interactionFlags.unified ? await findWithDecryption(
+    em,
+    CustomerTodoLink,
+    {
+      entity: company.id,
+      tenantId: company.tenantId,
+      organizationId: company.organizationId
+    },
+    { orderBy: { createdAt: "desc" }, limit: 50 },
+    companyScope
+  ) : [];
   let todoDetails = /* @__PURE__ */ new Map();
   if (includeTodos && !interactionFlags.unified && todoLinks.length) {
     const queryEngine = container.resolve("queryEngine");
@@ -344,7 +503,16 @@ async function GET(_req, ctx) {
   let userMap = /* @__PURE__ */ new Map();
   if (authorIds.size) {
     const authorIdList = Array.from(authorIds);
-    const users = await em.find(User, { id: { $in: authorIdList } });
+    const users = await findWithDecryption(
+      em,
+      User,
+      {
+        id: { $in: authorIdList },
+        tenantId: company.tenantId
+      },
+      {},
+      companyScope
+    );
     userMap = new Map(
       users.map((user) => [
         user.id,
@@ -360,28 +528,87 @@ async function GET(_req, ctx) {
     const dealLinks = await findWithDecryption(
       em,
       CustomerDealCompanyLink,
-      { company: company.id },
+      {
+        company: company.id
+      },
       { populate: ["deal"] },
-      { tenantId: company.tenantId ?? auth.tenantId ?? null, organizationId: company.organizationId ?? auth.orgId ?? null }
+      companyScope
+    );
+    deals = dealLinks.map((link) => link.deal ?? null).filter(
+      (deal) => !!deal && typeof deal !== "string" && deal.tenantId === company.tenantId && deal.organizationId === company.organizationId
     );
-    deals = dealLinks.map((link) => link.deal ?? null).filter((deal) => !!deal && typeof deal !== "string");
   }
+  const dealLinksForMetrics = includeDeals ? deals : (await findWithDecryption(
+    em,
+    CustomerDealCompanyLink,
+    {
+      company: company.id
+    },
+    { populate: ["deal"] },
+    companyScope
+  )).map((link) => link.deal ?? null).filter(
+    (deal) => !!deal && typeof deal !== "string" && deal.tenantId === company.tenantId && deal.organizationId === company.organizationId
+  );
   let relatedPeople = [];
   if (includePeople) {
-    const profiles = await em.find(
-      CustomerPersonProfile,
-      { company: company.id, entity: { deletedAt: null } },
-      { populate: ["entity"] }
+    const peopleDecryptionScope = {
+      tenantId: company.tenantId ?? auth.tenantId ?? null,
+      organizationId: company.organizationId ?? scope?.selectedId ?? auth.orgId ?? null
+    };
+    const relatedPeopleById = /* @__PURE__ */ new Map();
+    const companyLinkWhere = await withActiveCustomerPersonCompanyLinkFilter(
+      em,
+      {
+        company: company.id,
+        organizationId: company.organizationId,
+        tenantId: company.tenantId
+      },
+      "customers.companies.GET"
     );
-    relatedPeople = profiles.reduce(
-      (acc, entry) => {
-        const entity = entry.entity;
-        if (!entity || entity.kind !== "person" || entity.deletedAt) return acc;
-        acc.push({ entity, profile: entry ?? null });
-        return acc;
+    const companyLinks = await findWithDecryption(
+      em,
+      CustomerPersonCompanyLink,
+      companyLinkWhere,
+      {
+        populate: ["person", "person.personProfile"],
+        orderBy: { isPrimary: "desc", createdAt: "asc" }
       },
-      []
+      peopleDecryptionScope
     );
+    companyLinks.forEach((link) => {
+      const entity = typeof link.person === "string" ? null : link.person;
+      if (!entity || entity.kind !== "person" || entity.deletedAt) return;
+      const personProfile = entity.personProfile && typeof entity.personProfile !== "string" ? entity.personProfile : null;
+      relatedPeopleById.set(entity.id, {
+        entity,
+        profile: personProfile,
+        linkedAt: link.createdAt instanceof Date ? link.createdAt.toISOString() : null
+      });
+    });
+    const profiles = await findWithDecryption(
+      em,
+      CustomerPersonProfile,
+      {
+        company: company.id,
+        tenantId: company.tenantId,
+        organizationId: company.organizationId,
+        entity: { deletedAt: null }
+      },
+      { populate: ["entity"] },
+      peopleDecryptionScope
+    );
+    profiles.forEach((entry) => {
+      const entity = entry.entity;
+      if (!entity || entity.kind !== "person" || entity.deletedAt) return;
+      if (!relatedPeopleById.has(entity.id)) {
+        relatedPeopleById.set(entity.id, {
+          entity,
+          profile: entry ?? null,
+          linkedAt: entry.createdAt instanceof Date ? entry.createdAt.toISOString() : null
+        });
+      }
+    });
+    relatedPeople = Array.from(relatedPeopleById.values());
   }
   const entityCustomFieldValues = await loadCustomFieldValues({
     em,
@@ -413,6 +640,103 @@ async function GET(_req, ctx) {
     entityCustomFieldValues?.[company.id] ?? {},
     profileId ? profileCustomFieldValues?.[profileId] ?? {} : {}
   );
+  const activityCount = await em.count(CustomerInteraction, {
+    entity: company.id,
+    organizationId: company.organizationId,
+    tenantId: company.tenantId,
+    deletedAt: null,
+    interactionType: { $ne: "task" }
+  });
+  const interactionCount = await em.count(CustomerInteraction, {
+    entity: company.id,
+    organizationId: company.organizationId,
+    tenantId: company.tenantId,
+    deletedAt: null
+  });
+  const todoCount = interactionFlags.unified ? await em.count(CustomerInteraction, {
+    entity: company.id,
+    organizationId: company.organizationId,
+    tenantId: company.tenantId,
+    deletedAt: null,
+    interactionType: "task"
+  }) : await em.count(CustomerTodoLink, {
+    entity: company.id,
+    organizationId: company.organizationId,
+    tenantId: company.tenantId
+  });
+  const commentsCount = includeComments ? comments.length : await em.count(CustomerComment, {
+    entity: company.id,
+    organizationId: company.organizationId,
+    tenantId: company.tenantId
+  });
+  const addressesCount = includeAddresses ? addresses.length : await em.count(CustomerAddress, {
+    entity: company.id,
+    organizationId: company.organizationId,
+    tenantId: company.tenantId
+  });
+  const peopleCount = includePeople ? relatedPeople.length : await em.count(
+    CustomerPersonCompanyLink,
+    await withActiveCustomerPersonCompanyLinkFilter(
+      em,
+      {
+        company: company.id,
+        organizationId: company.organizationId,
+        tenantId: company.tenantId
+      },
+      "customers.companies.GET"
+    )
+  );
+  const kpiInteractionRows = canonicalActiveInteractions.length ? canonicalActiveInteractions : await findWithDecryption(
+    em,
+    CustomerInteraction,
+    {
+      entity: company.id,
+      organizationId: company.organizationId,
+      tenantId: company.tenantId,
+      deletedAt: null
+    },
+    {
+      fields: ["id", "occurredAt", "scheduledAt", "createdAt"],
+      orderBy: { createdAt: "DESC" }
+    },
+    { tenantId: company.tenantId, organizationId: company.organizationId }
+  );
+  const activityTrend = computeActivityTrend(
+    kpiInteractionRows.map((interaction) => interaction.occurredAt ?? interaction.scheduledAt ?? interaction.createdAt).map((value) => value instanceof Date ? value.toISOString() : typeof value === "string" ? value : "").filter((value) => value.length > 0)
+  );
+  const activeDeals = dealLinksForMetrics.filter(
+    (deal) => deal.status !== "won" && deal.status !== "lost" && deal.status !== "closed"
+  );
+  const wonDeals = dealLinksForMetrics.filter((deal) => deal.status === "won");
+  const activeDealsValue = activeDeals.reduce((sum, deal) => sum + (parseDealAmount(deal.valueAmount) ?? 0), 0);
+  const ltvValue = wonDeals.length ? wonDeals.reduce((sum, deal) => sum + (parseDealAmount(deal.valueAmount) ?? 0), 0) : null;
+  const earliestInteractionTime = kpiInteractionRows.reduce((earliest, interaction) => {
+    const candidate = interaction.occurredAt ?? interaction.scheduledAt ?? interaction.createdAt;
+    const time = candidate instanceof Date ? candidate.getTime() : new Date(candidate).getTime();
+    if (Number.isNaN(time)) return earliest;
+    if (earliest === null) return time;
+    return Math.min(earliest, time);
+  }, null);
+  const companyKpis = {
+    activeDealsCount: activeDeals.length,
+    activeDealsValue: activeDeals.length ? activeDealsValue : null,
+    dealCurrency: activeDeals[0]?.valueCurrency ?? dealLinksForMetrics[0]?.valueCurrency ?? null,
+    activityCount,
+    activityTrend,
+    ltvValue,
+    completedDealsCount: wonDeals.length,
+    clientTenureYears: earliestInteractionTime === null ? null : Math.floor((Date.now() - earliestInteractionTime) / (365.25 * 864e5))
+  };
+  const counts = {
+    tags: tagAssignments.length + labelAssignments.length,
+    comments: commentsCount,
+    activities: activityCount,
+    interactions: interactionCount,
+    todos: todoCount,
+    deals: includeDeals ? deals.length : dealLinksForMetrics.length,
+    people: peopleCount,
+    addresses: addressesCount
+  };
   return NextResponse.json({
     interactionMode,
     company: {
@@ -447,7 +771,14 @@ async function GET(_req, ctx) {
       annualRevenue: profile.annualRevenue
     } : null,
     customFields,
-    tags: serializeTags(tagAssignments),
+    tags: [
+      ...serializeTags(tagAssignments),
+      ...labelAssignments.map((assignment) => {
+        const label = assignment.label;
+        if (!label || typeof label === "string") return null;
+        return { id: label.id, label: label.label, color: null };
+      }).filter((tag) => tag !== null)
+    ],
     addresses: includeAddresses ? addresses.map((address) => ({
       id: address.id,
       name: address.name,
@@ -511,6 +842,8 @@ async function GET(_req, ctx) {
       title: deal.title,
       status: deal.status,
       pipelineStage: deal.pipelineStage,
+      pipelineId: deal.pipelineId ?? null,
+      pipelineStageId: deal.pipelineStageId ?? null,
       valueAmount: deal.valueAmount,
       valueCurrency: deal.valueCurrency,
       probability: deal.probability,
@@ -552,7 +885,7 @@ async function GET(_req, ctx) {
       if (leftTime === rightTime) return right.id.localeCompare(left.id);
       return rightTime - leftTime;
     }).slice(0, 50) : [],
-    people: includePeople ? relatedPeople.map(({ entity, profile: personProfile }) => ({
+    people: includePeople ? relatedPeople.map(({ entity, profile: personProfile, linkedAt }) => ({
       id: entity.id,
       displayName: entity.displayName,
       primaryEmail: entity.primaryEmail ?? null,
@@ -562,8 +895,14 @@ async function GET(_req, ctx) {
       jobTitle: personProfile?.jobTitle ?? null,
       department: personProfile?.department ?? null,
       createdAt: entity.createdAt.toISOString(),
-      organizationId: entity.organizationId
+      organizationId: entity.organizationId,
+      source: entity.source ?? null,
+      temperature: entity.temperature ?? null,
+      linkedAt
     })) : [],
+    plannedActivitiesPreview,
+    counts,
+    kpis: companyKpis,
     viewer: {
       userId: viewerUserId,
       name: viewerUserId ? userMap.get(viewerUserId)?.name ?? null : null,
@@ -735,7 +1074,10 @@ const companyDetailResponseSchema = z.object({
       jobTitle: z.string().nullable().optional(),
       department: z.string().nullable().optional(),
       createdAt: z.string(),
-      organizationId: z.string().uuid().nullable().optional()
+      organizationId: z.string().uuid().nullable().optional(),
+      source: z.string().nullable().optional(),
+      temperature: z.string().nullable().optional(),
+      linkedAt: z.string().nullable().optional()
     })
   ),
   viewer: z.object({