@open-mercato/core 0.6.3-develop.3810.1.ad92c339f5 → 0.6.3-develop.3820.1.636677865b

package/.turbo/turbo-build.log

@@ -1,4 +1,4 @@
-[build:core] found 2603 entry points
+[build:core] found 2607 entry points
 [build:core] built successfully
 [build:core:generated] found 172 entry points
 [build:core:generated] built successfully

package/AGENTS.md

@@ -2,6 +2,42 @@
 
 `@open-mercato/core` contains all core business modules (auth, catalog, customers, sales, etc.). This guide covers the full extensibility contract and module development patterns.
 
+## Always
+
+- Preserve auto-discovery contracts for module files, API routes, pages, subscribers, workers, widgets, and generated registries.
+- Export `openApi` from every API route file.
+- Use `makeCrudRoute` with `indexer: { entityType }` for CRUD routes that should participate in query indexing.
+- Wire custom write routes through the mutation guard contract.
+- Use declarative feature guards and add new `acl.ts` features to `setup.ts` `defaultRoleFeatures`.
+- Use `findWithDecryption` / `findOneWithDecryption` for encrypted entities.
+- Implement domain writes through commands so audit, undo, cache, events, and indexing stay consistent.
+- Run `yarn generate` after changing module files discovered by the generator.
+
+## Ask First
+
+- Ask before changing any contract surface from `BACKWARD_COMPATIBILITY.md`: auto-discovery, public types, import paths, event IDs, widget spot IDs, API URLs, DB schema, DI names, ACL features, notification IDs, CLI commands, or generated file contracts.
+- Ask before moving versioned generated files or changing where generated registries live.
+- Ask before applying migrations with `yarn db:migrate`; normal PRs should include migration files and snapshots.
+
+## Never
+
+- Never create direct ORM relationships between modules; use foreign key IDs and fetch separately.
+- Never expose cross-tenant data or omit tenant/organization scoping.
+- Never hand-edit generated files.
+- Never import generated app bootstrap files from packages.
+- Never run raw `em.find` / `em.findOne` between scalar mutations and `em.flush()` on the same `EntityManager` without `withAtomicFlush`.
+- Never hand-roll AES/KMS encryption or bypass `TenantDataEncryptionService`.
+- Never compare raw feature arrays with exact string checks when wildcard grants apply.
+
+## Validation Commands
+
+```bash
+yarn db:generate
+yarn generate
+yarn workspace @open-mercato/core build
+yarn workspace @open-mercato/core test
+```
+
 ## Core Modules
 
 | Module | Path | Description |
@@ -593,7 +629,7 @@ const crud = makeCrudRoute({
 })
 ```
 
-### Key Rules
+### Response Enricher Rules
 
 - MUST implement `enrichMany()` for batch endpoints (prevents N+1 queries)
 - MUST namespace enriched fields with `_moduleName` prefix (e.g. `_example.todoCount`)

package/dist/modules/customers/api/assignable-staff/route.js

@@ -1,12 +1,6 @@
 import { NextResponse } from "next/server";
 import { z } from "zod";
-import { CrudHttpError, isCrudHttpError } from "@open-mercato/shared/lib/crud/errors";
-import { findWithDecryption } from "@open-mercato/shared/lib/encryption/find";
-import { resolveTranslations } from "@open-mercato/shared/lib/i18n/server";
-import { User } from "@open-mercato/core/modules/auth/data/entities";
-import { StaffTeam, StaffTeamMember } from "@open-mercato/core/modules/staff/data/entities";
 import { createPagedListResponseSchema } from "../openapi.js";
-import { resolveAuthActorId, resolveCustomersRequestContext } from "../../lib/interactionRequestContext.js";
 const querySchema = z.object({
   page: z.coerce.number().min(1).default(1),
   pageSize: z.coerce.number().min(1).max(100).default(24),
@@ -32,164 +26,31 @@ const errorSchema = z.object({ error: z.string() });
 const metadata = {
   GET: { requireAuth: true, requireFeatures: ["customers.roles.view"] }
 };
-async function canAccessAssignableStaff(rbac, userId, scope) {
-  if (!rbac) return false;
-  if (await rbac.userHasAllFeatures(userId, ["customers.roles.manage"], scope)) {
-    return true;
-  }
-  return rbac.userHasAllFeatures(userId, ["customers.activities.manage"], scope);
-}
 async function GET(request) {
-  const { translate } = await resolveTranslations();
-  try {
-    const query = querySchema.parse(Object.fromEntries(new URL(request.url).searchParams));
-    const { container, em, auth, selectedOrganizationId } = await resolveCustomersRequestContext(request);
-    if (!selectedOrganizationId) {
-      throw new CrudHttpError(
-        400,
-        { error: translate("customers.errors.organization_required", "Organization context is required") }
-      );
-    }
-    const actorId = resolveAuthActorId(auth);
-    const rbacService = container.resolve("rbacService");
-    const scope = { tenantId: auth.tenantId, organizationId: selectedOrganizationId };
-    const hasAccess = await canAccessAssignableStaff(rbacService, actorId, scope);
-    if (!hasAccess) {
-      throw new CrudHttpError(
-        403,
-        {
-          error: translate(
-            "customers.assignableStaff.forbidden",
-            "Insufficient permissions to load assignable staff."
-          )
-        }
-      );
-    }
-    const normalizedSearch = query.search?.trim().toLowerCase() ?? "";
-    const members = await findWithDecryption(
-      em,
-      StaffTeamMember,
-      {
-        tenantId: auth.tenantId,
-        organizationId: selectedOrganizationId,
-        deletedAt: null,
-        isActive: true
-      },
-      { orderBy: { displayName: "asc" } },
-      scope
-    );
-    const userIds = Array.from(
-      new Set(
-        members.map((member) => typeof member.userId === "string" && member.userId.trim().length > 0 ? member.userId : null).filter((value) => typeof value === "string")
-      )
-    );
-    const teamIds = Array.from(
-      new Set(
-        members.map((member) => typeof member.teamId === "string" && member.teamId.trim().length > 0 ? member.teamId : null).filter((value) => typeof value === "string")
-      )
-    );
-    const [users, teams] = await Promise.all([
-      userIds.length > 0 ? findWithDecryption(
-        em,
-        User,
-        {
-          id: { $in: userIds },
-          deletedAt: null,
-          tenantId: auth.tenantId,
-          organizationId: selectedOrganizationId
-        },
-        void 0,
-        scope
-      ) : Promise.resolve([]),
-      teamIds.length > 0 ? findWithDecryption(
-        em,
-        StaffTeam,
-        {
-          id: { $in: teamIds },
-          deletedAt: null,
-          tenantId: auth.tenantId,
-          organizationId: selectedOrganizationId
-        },
-        void 0,
-        scope
-      ) : Promise.resolve([])
-    ]);
-    const userById = new Map(
-      users.map((user) => [
-        user.id,
-        {
-          id: user.id,
-          email: user.email ?? null
-        }
-      ])
-    );
-    const teamById = new Map(
-      teams.map((team) => [
-        team.id,
-        {
-          id: team.id,
-          name: team.name ?? null
-        }
-      ])
-    );
-    const items = members.filter((member) => typeof member.userId === "string" && member.userId.trim().length > 0).map((member) => {
-      const userId = member.userId;
-      const user = userById.get(userId) ?? { id: userId, email: null };
-      const team = member.teamId ? teamById.get(member.teamId) ?? null : null;
-      return {
-        id: member.id,
-        teamMemberId: member.id,
-        userId,
-        displayName: member.displayName?.trim() || user.email || userId,
-        email: user.email,
-        teamName: team?.name ?? null,
-        user,
-        team
-      };
-    }).filter((item) => {
-      if (!normalizedSearch) return true;
-      const haystack = [item.displayName, item.email, item.teamName].filter((value) => typeof value === "string" && value.length > 0).join(" ").toLowerCase();
-      return haystack.includes(normalizedSearch);
-    });
-    const deduped = Array.from(
-      items.reduce((acc, item) => {
-        if (!acc.has(item.userId)) {
-          acc.set(item.userId, item);
-        }
-        return acc;
-      }, /* @__PURE__ */ new Map())
-    ).map(([, item]) => item);
-    const start = (query.page - 1) * query.pageSize;
-    return NextResponse.json({
-      items: deduped.slice(start, start + query.pageSize),
-      total: deduped.length,
-      page: query.page,
-      pageSize: query.pageSize
-    });
-  } catch (error) {
-    if (isCrudHttpError(error)) {
-      return NextResponse.json(error.body, { status: error.status });
-    }
-    if (error instanceof z.ZodError) {
-      return NextResponse.json({ error: translate("customers.errors.validationFailed", "Validation failed") }, { status: 400 });
-    }
-    console.error("customers.assignable-staff.get failed", error);
-    return NextResponse.json({ error: translate("customers.errors.assignable_staff_load_failed", "Failed to load assignable staff") }, { status: 500 });
-  }
+  const url = new URL(request.url);
+  const target = new URL("/api/staff/team-members/assignable", url.origin);
+  target.search = url.search;
+  return NextResponse.redirect(target, 308);
 }
 const openApi = {
   tag: "Customers",
-  summary: "Assignable staff candidates",
+  summary: "Assignable staff candidates (DEPRECATED \u2014 redirects to /api/staff/team-members/assignable)",
   methods: {
     GET: {
-      summary: "List staff members that can be assigned from customer flows",
+      deprecated: true,
+      summary: "DEPRECATED: use GET /api/staff/team-members/assignable instead.",
       query: querySchema,
-      description: "Returns active staff members linked to auth users. Access requires either customers.roles.manage or customers.activities.manage.",
+      description: "Deprecated. Returns 308 Permanent Redirect to /api/staff/team-members/assignable preserving the query string. Will be removed no earlier than the next major release.",
       responses: [
         {
           status: 200,
-          description: "Assignable staff members",
+          description: "Assignable staff members (only reachable by following the redirect).",
           schema: createPagedListResponseSchema(itemSchema)
+        },
+        {
+          status: 308,
+          description: "Permanent redirect to /api/staff/team-members/assignable.",
+          schema: errorSchema
         }
       ],
       errors: [

package/dist/modules/customers/api/assignable-staff/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../src/modules/customers/api/assignable-staff/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { CrudHttpError, isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport type { RbacService } from '@open-mercato/core/modules/auth/services/rbacService'\nimport { User } from '@open-mercato/core/modules/auth/data/entities'\nimport { StaffTeam, StaffTeamMember } from '@open-mercato/core/modules/staff/data/entities'\nimport { createPagedListResponseSchema } from '../openapi'\nimport { resolveAuthActorId, resolveCustomersRequestContext } from '../../lib/interactionRequestContext'\n\nconst querySchema = z\n  .object({\n    page: z.coerce.number().min(1).default(1),\n    pageSize: z.coerce.number().min(1).max(100).default(24),\n    search: z.string().optional(),\n  })\n  .passthrough()\n\nconst itemSchema = z.object({\n  id: z.string().uuid(),\n  teamMemberId: z.string().uuid(),\n  userId: z.string().uuid(),\n  displayName: z.string(),\n  email: z.string().nullable().optional(),\n  teamName: z.string().nullable().optional(),\n  user: z\n    .object({\n      id: z.string().uuid(),\n      email: z.string().nullable().optional(),\n    })\n    .nullable()\n    .optional(),\n  team: z\n    .object({\n      id: z.string().uuid(),\n      name: z.string().nullable().optional(),\n    })\n    .nullable()\n    .optional(),\n})\n\nconst errorSchema = z.object({ error: z.string() })\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['customers.roles.view'] },\n}\n\nasync function canAccessAssignableStaff(\n  rbac: RbacService | undefined,\n  userId: string,\n  scope: { tenantId: string; organizationId: string },\n): Promise<boolean> {\n  if (!rbac) return false\n  if (\n    await rbac.userHasAllFeatures(userId, ['customers.roles.manage'], scope)\n  ) {\n    return true\n  }\n  return rbac.userHasAllFeatures(userId, ['customers.activities.manage'], scope)\n}\n\nexport async function GET(request: Request) {\n  const { translate } = await resolveTranslations()\n  try {\n    const query = querySchema.parse(Object.fromEntries(new URL(request.url).searchParams))\n    const { container, em, auth, selectedOrganizationId } = await resolveCustomersRequestContext(request)\n\n    if (!selectedOrganizationId) {\n      throw new CrudHttpError(\n        400,\n        { error: translate('customers.errors.organization_required', 'Organization context is required') },\n      )\n    }\n\n    const actorId = resolveAuthActorId(auth)\n    const rbacService = container.resolve('rbacService') as RbacService | undefined\n    const scope = { tenantId: auth.tenantId, organizationId: selectedOrganizationId }\n    const hasAccess = await canAccessAssignableStaff(rbacService, actorId, scope)\n    if (!hasAccess) {\n      throw new CrudHttpError(\n        403,\n        {\n          error: translate(\n            'customers.assignableStaff.forbidden',\n            'Insufficient permissions to load assignable staff.',\n          ),\n        },\n      )\n    }\n\n    const normalizedSearch = query.search?.trim().toLowerCase() ?? ''\n\n    const members = await findWithDecryption(\n      em,\n      StaffTeamMember,\n      {\n        tenantId: auth.tenantId,\n        organizationId: selectedOrganizationId,\n        deletedAt: null,\n        isActive: true,\n      },\n      { orderBy: { displayName: 'asc' } },\n      scope,\n    )\n\n    const userIds = Array.from(\n      new Set(\n        members\n          .map((member) => (typeof member.userId === 'string' && member.userId.trim().length > 0 ? member.userId : null))\n          .filter((value): value is string => typeof value === 'string'),\n      ),\n    )\n    const teamIds = Array.from(\n      new Set(\n        members\n          .map((member) => (typeof member.teamId === 'string' && member.teamId.trim().length > 0 ? member.teamId : null))\n          .filter((value): value is string => typeof value === 'string'),\n      ),\n    )\n\n    const [users, teams] = await Promise.all([\n      userIds.length > 0\n        ? findWithDecryption(\n            em,\n            User,\n            {\n              id: { $in: userIds },\n              deletedAt: null,\n              tenantId: auth.tenantId,\n              organizationId: selectedOrganizationId,\n            },\n            undefined,\n            scope,\n          )\n        : Promise.resolve([]),\n      teamIds.length > 0\n        ? findWithDecryption(\n            em,\n            StaffTeam,\n            {\n              id: { $in: teamIds },\n              deletedAt: null,\n              tenantId: auth.tenantId,\n              organizationId: selectedOrganizationId,\n            },\n            undefined,\n            scope,\n          )\n        : Promise.resolve([]),\n    ])\n\n    const userById = new Map(\n      users.map((user) => [\n        user.id,\n        {\n          id: user.id,\n          email: user.email ?? null,\n        },\n      ]),\n    )\n    const teamById = new Map(\n      teams.map((team) => [\n        team.id,\n        {\n          id: team.id,\n          name: team.name ?? null,\n        },\n      ]),\n    )\n\n    const items = members\n      .filter((member) => typeof member.userId === 'string' && member.userId.trim().length > 0)\n      .map((member) => {\n        const userId = member.userId as string\n        const user = userById.get(userId) ?? { id: userId, email: null }\n        const team = member.teamId ? teamById.get(member.teamId) ?? null : null\n        return {\n          id: member.id,\n          teamMemberId: member.id,\n          userId,\n          displayName: member.displayName?.trim() || user.email || userId,\n          email: user.email,\n          teamName: team?.name ?? null,\n          user,\n          team,\n        }\n      })\n      .filter((item) => {\n        if (!normalizedSearch) return true\n        const haystack = [item.displayName, item.email, item.teamName]\n          .filter((value): value is string => typeof value === 'string' && value.length > 0)\n          .join(' ')\n          .toLowerCase()\n        return haystack.includes(normalizedSearch)\n      })\n\n    const deduped = Array.from(\n      items.reduce((acc, item) => {\n        if (!acc.has(item.userId)) {\n          acc.set(item.userId, item)\n        }\n        return acc\n      }, new Map<string, (typeof items)[number]>()),\n    ).map(([, item]) => item)\n\n    const start = (query.page - 1) * query.pageSize\n    return NextResponse.json({\n      items: deduped.slice(start, start + query.pageSize),\n      total: deduped.length,\n      page: query.page,\n      pageSize: query.pageSize,\n    })\n  } catch (error) {\n    if (isCrudHttpError(error)) {\n      return NextResponse.json(error.body, { status: error.status })\n    }\n    if (error instanceof z.ZodError) {\n      return NextResponse.json({ error: translate('customers.errors.validationFailed', 'Validation failed') }, { status: 400 })\n    }\n    console.error('customers.assignable-staff.get failed', error)\n    return NextResponse.json({ error: translate('customers.errors.assignable_staff_load_failed', 'Failed to load assignable staff') }, { status: 500 })\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Customers',\n  summary: 'Assignable staff candidates',\n  methods: {\n    GET: {\n      summary: 'List staff members that can be assigned from customer flows',\n      query: querySchema,\n      description:\n        'Returns active staff members linked to auth users. Access requires either customers.roles.manage or customers.activities.manage.',\n      responses: [\n        {\n          status: 200,\n          description: 'Assignable staff members',\n          schema: createPagedListResponseSchema(itemSchema),\n        },\n      ],\n      errors: [\n        { status: 400, description: 'Invalid request', schema: errorSchema },\n        { status: 401, description: 'Unauthorized', schema: errorSchema },\n        { status: 403, description: 'Forbidden', schema: errorSchema },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAElB,SAAS,eAAe,uBAAuB;AAC/C,SAAS,0BAA0B;AACnC,SAAS,2BAA2B;AAEpC,SAAS,YAAY;AACrB,SAAS,WAAW,uBAAuB;AAC3C,SAAS,qCAAqC;AAC9C,SAAS,oBAAoB,sCAAsC;AAEnE,MAAM,cAAc,EACjB,OAAO;AAAA,EACN,MAAM,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,QAAQ,CAAC;AAAA,EACxC,UAAU,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,QAAQ,EAAE;AAAA,EACtD,QAAQ,EAAE,OAAO,EAAE,SAAS;AAC9B,CAAC,EACA,YAAY;AAEf,MAAM,aAAa,EAAE,OAAO;AAAA,EAC1B,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,cAAc,EAAE,OAAO,EAAE,KAAK;AAAA,EAC9B,QAAQ,EAAE,OAAO,EAAE,KAAK;AAAA,EACxB,aAAa,EAAE,OAAO;AAAA,EACtB,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACtC,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACzC,MAAM,EACH,OAAO;AAAA,IACN,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,IACpB,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACxC,CAAC,EACA,SAAS,EACT,SAAS;AAAA,EACZ,MAAM,EACH,OAAO;AAAA,IACN,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,IACpB,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACvC,CAAC,EACA,SAAS,EACT,SAAS;AACd,CAAC;AAED,MAAM,cAAc,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAE3C,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,sBAAsB,EAAE;AACtE;AAEA,eAAe,yBACb,MACA,QACA,OACkB;AAClB,MAAI,CAAC,KAAM,QAAO;AAClB,MACE,MAAM,KAAK,mBAAmB,QAAQ,CAAC,wBAAwB,GAAG,KAAK,GACvE;AACA,WAAO;AAAA,EACT;AACA,SAAO,KAAK,mBAAmB,QAAQ,CAAC,6BAA6B,GAAG,KAAK;AAC/E;AAEA,eAAsB,IAAI,SAAkB;AAC1C,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,MAAI;AACF,UAAM,QAAQ,YAAY,MAAM,OAAO,YAAY,IAAI,IAAI,QAAQ,GAAG,EAAE,YAAY,CAAC;AACrF,UAAM,EAAE,WAAW,IAAI,MAAM,uBAAuB,IAAI,MAAM,+BAA+B,OAAO;AAEpG,QAAI,CAAC,wBAAwB;AAC3B,YAAM,IAAI;AAAA,QACR;AAAA,QACA,EAAE,OAAO,UAAU,0CAA0C,kCAAkC,EAAE;AAAA,MACnG;AAAA,IACF;AAEA,UAAM,UAAU,mBAAmB,IAAI;AACvC,UAAM,cAAc,UAAU,QAAQ,aAAa;AACnD,UAAM,QAAQ,EAAE,UAAU,KAAK,UAAU,gBAAgB,uBAAuB;AAChF,UAAM,YAAY,MAAM,yBAAyB,aAAa,SAAS,KAAK;AAC5E,QAAI,CAAC,WAAW;AACd,YAAM,IAAI;AAAA,QACR;AAAA,QACA;AAAA,UACE,OAAO;AAAA,YACL;AAAA,YACA;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAEA,UAAM,mBAAmB,MAAM,QAAQ,KAAK,EAAE,YAAY,KAAK;AAE/D,UAAM,UAAU,MAAM;AAAA,MACpB;AAAA,MACA;AAAA,MACA;AAAA,QACE,UAAU,KAAK;AAAA,QACf,gBAAgB;AAAA,QAChB,WAAW;AAAA,QACX,UAAU;AAAA,MACZ;AAAA,MACA,EAAE,SAAS,EAAE,aAAa,MAAM,EAAE;AAAA,MAClC;AAAA,IACF;AAEA,UAAM,UAAU,MAAM;AAAA,MACpB,IAAI;AAAA,QACF,QACG,IAAI,CAAC,WAAY,OAAO,OAAO,WAAW,YAAY,OAAO,OAAO,KAAK,EAAE,SAAS,IAAI,OAAO,SAAS,IAAK,EAC7G,OAAO,CAAC,UAA2B,OAAO,UAAU,QAAQ;AAAA,MACjE;AAAA,IACF;AACA,UAAM,UAAU,MAAM;AAAA,MACpB,IAAI;AAAA,QACF,QACG,IAAI,CAAC,WAAY,OAAO,OAAO,WAAW,YAAY,OAAO,OAAO,KAAK,EAAE,SAAS,IAAI,OAAO,SAAS,IAAK,EAC7G,OAAO,CAAC,UAA2B,OAAO,UAAU,QAAQ;AAAA,MACjE;AAAA,IACF;AAEA,UAAM,CAAC,OAAO,KAAK,IAAI,MAAM,QAAQ,IAAI;AAAA,MACvC,QAAQ,SAAS,IACb;AAAA,QACE;AAAA,QACA;AAAA,QACA;AAAA,UACE,IAAI,EAAE,KAAK,QAAQ;AAAA,UACnB,WAAW;AAAA,UACX,UAAU,KAAK;AAAA,UACf,gBAAgB;AAAA,QAClB;AAAA,QACA;AAAA,QACA;AAAA,MACF,IACA,QAAQ,QAAQ,CAAC,CAAC;AAAA,MACtB,QAAQ,SAAS,IACb;AAAA,QACE;AAAA,QACA;AAAA,QACA;AAAA,UACE,IAAI,EAAE,KAAK,QAAQ;AAAA,UACnB,WAAW;AAAA,UACX,UAAU,KAAK;AAAA,UACf,gBAAgB;AAAA,QAClB;AAAA,QACA;AAAA,QACA;AAAA,MACF,IACA,QAAQ,QAAQ,CAAC,CAAC;AAAA,IACxB,CAAC;AAED,UAAM,WAAW,IAAI;AAAA,MACnB,MAAM,IAAI,CAAC,SAAS;AAAA,QAClB,KAAK;AAAA,QACL;AAAA,UACE,IAAI,KAAK;AAAA,UACT,OAAO,KAAK,SAAS;AAAA,QACvB;AAAA,MACF,CAAC;AAAA,IACH;AACA,UAAM,WAAW,IAAI;AAAA,MACnB,MAAM,IAAI,CAAC,SAAS;AAAA,QAClB,KAAK;AAAA,QACL;AAAA,UACE,IAAI,KAAK;AAAA,UACT,MAAM,KAAK,QAAQ;AAAA,QACrB;AAAA,MACF,CAAC;AAAA,IACH;AAEA,UAAM,QAAQ,QACX,OAAO,CAAC,WAAW,OAAO,OAAO,WAAW,YAAY,OAAO,OAAO,KAAK,EAAE,SAAS,CAAC,EACvF,IAAI,CAAC,WAAW;AACf,YAAM,SAAS,OAAO;AACtB,YAAM,OAAO,SAAS,IAAI,MAAM,KAAK,EAAE,IAAI,QAAQ,OAAO,KAAK;AAC/D,YAAM,OAAO,OAAO,SAAS,SAAS,IAAI,OAAO,MAAM,KAAK,OAAO;AACnE,aAAO;AAAA,QACL,IAAI,OAAO;AAAA,QACX,cAAc,OAAO;AAAA,QACrB;AAAA,QACA,aAAa,OAAO,aAAa,KAAK,KAAK,KAAK,SAAS;AAAA,QACzD,OAAO,KAAK;AAAA,QACZ,UAAU,MAAM,QAAQ;AAAA,QACxB;AAAA,QACA;AAAA,MACF;AAAA,IACF,CAAC,EACA,OAAO,CAAC,SAAS;AAChB,UAAI,CAAC,iBAAkB,QAAO;AAC9B,YAAM,WAAW,CAAC,KAAK,aAAa,KAAK,OAAO,KAAK,QAAQ,EAC1D,OAAO,CAAC,UAA2B,OAAO,UAAU,YAAY,MAAM,SAAS,CAAC,EAChF,KAAK,GAAG,EACR,YAAY;AACf,aAAO,SAAS,SAAS,gBAAgB;AAAA,IAC3C,CAAC;AAEH,UAAM,UAAU,MAAM;AAAA,MACpB,MAAM,OAAO,CAAC,KAAK,SAAS;AAC1B,YAAI,CAAC,IAAI,IAAI,KAAK,MAAM,GAAG;AACzB,cAAI,IAAI,KAAK,QAAQ,IAAI;AAAA,QAC3B;AACA,eAAO;AAAA,MACT,GAAG,oBAAI,IAAoC,CAAC;AAAA,IAC9C,EAAE,IAAI,CAAC,CAAC,EAAE,IAAI,MAAM,IAAI;AAExB,UAAM,SAAS,MAAM,OAAO,KAAK,MAAM;AACvC,WAAO,aAAa,KAAK;AAAA,MACvB,OAAO,QAAQ,MAAM,OAAO,QAAQ,MAAM,QAAQ;AAAA,MAClD,OAAO,QAAQ;AAAA,MACf,MAAM,MAAM;AAAA,MACZ,UAAU,MAAM;AAAA,IAClB,CAAC;AAAA,EACH,SAAS,OAAO;AACd,QAAI,gBAAgB,KAAK,GAAG;AAC1B,aAAO,aAAa,KAAK,MAAM,MAAM,EAAE,QAAQ,MAAM,OAAO,CAAC;AAAA,IAC/D;AACA,QAAI,iBAAiB,EAAE,UAAU;AAC/B,aAAO,aAAa,KAAK,EAAE,OAAO,UAAU,qCAAqC,mBAAmB,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC1H;AACA,YAAQ,MAAM,yCAAyC,KAAK;AAC5D,WAAO,aAAa,KAAK,EAAE,OAAO,UAAU,iDAAiD,iCAAiC,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACpJ;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,OAAO;AAAA,MACP,aACE;AAAA,MACF,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,8BAA8B,UAAU;AAAA,QAClD;AAAA,MACF;AAAA,MACA,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,mBAAmB,QAAQ,YAAY;AAAA,QACnE,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,YAAY;AAAA,QAChE,EAAE,QAAQ,KAAK,aAAa,aAAa,QAAQ,YAAY;AAAA,MAC/D;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { createPagedListResponseSchema } from '../openapi'\n\nconst querySchema = z\n  .object({\n    page: z.coerce.number().min(1).default(1),\n    pageSize: z.coerce.number().min(1).max(100).default(24),\n    search: z.string().optional(),\n  })\n  .passthrough()\n\nconst itemSchema = z.object({\n  id: z.string().uuid(),\n  teamMemberId: z.string().uuid(),\n  userId: z.string().uuid(),\n  displayName: z.string(),\n  email: z.string().nullable().optional(),\n  teamName: z.string().nullable().optional(),\n  user: z\n    .object({\n      id: z.string().uuid(),\n      email: z.string().nullable().optional(),\n    })\n    .nullable()\n    .optional(),\n  team: z\n    .object({\n      id: z.string().uuid(),\n      name: z.string().nullable().optional(),\n    })\n    .nullable()\n    .optional(),\n})\n\nconst errorSchema = z.object({ error: z.string() })\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['customers.roles.view'] },\n}\n\nexport async function GET(request: Request) {\n  const url = new URL(request.url)\n  const target = new URL('/api/staff/team-members/assignable', url.origin)\n  target.search = url.search\n  return NextResponse.redirect(target, 308)\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Customers',\n  summary: 'Assignable staff candidates (DEPRECATED \u2014 redirects to /api/staff/team-members/assignable)',\n  methods: {\n    GET: {\n      deprecated: true,\n      summary: 'DEPRECATED: use GET /api/staff/team-members/assignable instead.',\n      query: querySchema,\n      description:\n        'Deprecated. Returns 308 Permanent Redirect to /api/staff/team-members/assignable preserving the query string. Will be removed no earlier than the next major release.',\n      responses: [\n        {\n          status: 200,\n          description: 'Assignable staff members (only reachable by following the redirect).',\n          schema: createPagedListResponseSchema(itemSchema),\n        },\n        {\n          status: 308,\n          description: 'Permanent redirect to /api/staff/team-members/assignable.',\n          schema: errorSchema,\n        },\n      ],\n      errors: [\n        { status: 400, description: 'Invalid request', schema: errorSchema },\n        { status: 401, description: 'Unauthorized', schema: errorSchema },\n        { status: 403, description: 'Forbidden', schema: errorSchema },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAElB,SAAS,qCAAqC;AAE9C,MAAM,cAAc,EACjB,OAAO;AAAA,EACN,MAAM,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,QAAQ,CAAC;AAAA,EACxC,UAAU,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,QAAQ,EAAE;AAAA,EACtD,QAAQ,EAAE,OAAO,EAAE,SAAS;AAC9B,CAAC,EACA,YAAY;AAEf,MAAM,aAAa,EAAE,OAAO;AAAA,EAC1B,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,cAAc,EAAE,OAAO,EAAE,KAAK;AAAA,EAC9B,QAAQ,EAAE,OAAO,EAAE,KAAK;AAAA,EACxB,aAAa,EAAE,OAAO;AAAA,EACtB,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACtC,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACzC,MAAM,EACH,OAAO;AAAA,IACN,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,IACpB,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACxC,CAAC,EACA,SAAS,EACT,SAAS;AAAA,EACZ,MAAM,EACH,OAAO;AAAA,IACN,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,IACpB,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACvC,CAAC,EACA,SAAS,EACT,SAAS;AACd,CAAC;AAED,MAAM,cAAc,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAE3C,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,sBAAsB,EAAE;AACtE;AAEA,eAAsB,IAAI,SAAkB;AAC1C,QAAM,MAAM,IAAI,IAAI,QAAQ,GAAG;AAC/B,QAAM,SAAS,IAAI,IAAI,sCAAsC,IAAI,MAAM;AACvE,SAAO,SAAS,IAAI;AACpB,SAAO,aAAa,SAAS,QAAQ,GAAG;AAC1C;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,MACH,YAAY;AAAA,MACZ,SAAS;AAAA,MACT,OAAO;AAAA,MACP,aACE;AAAA,MACF,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,8BAA8B,UAAU;AAAA,QAClD;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ;AAAA,QACV;AAAA,MACF;AAAA,MACA,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,mBAAmB,QAAQ,YAAY;AAAA,QACnE,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,YAAY;AAAA,QAChE,EAAE,QAAQ,KAAK,aAAa,aAAa,QAAQ,YAAY;AAAA,MAC/D;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/customers/components/detail/assignableStaff.js

@@ -8,7 +8,7 @@ async function fetchAssignableStaffMembersPage(query, options) {
     params.set("search", normalizedQuery);
   }
   const data = await readApiResultOrThrow(
-    `/api/customers/assignable-staff?${params.toString()}`,
+    `/api/staff/team-members/assignable?${params.toString()}`,
     options?.signal ? { signal: options.signal } : void 0
   );
   const rawItems = Array.isArray(data?.items) ? data.items : [];

package/dist/modules/customers/components/detail/assignableStaff.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../src/modules/customers/components/detail/assignableStaff.ts"],
-  "sourcesContent": ["import { readApiResultOrThrow } from '@open-mercato/ui/backend/utils/apiCall'\nimport type { FilterOption } from '@open-mercato/shared/lib/query/advanced-filter'\n\nexport type AssignableStaffMember = {\n  teamMemberId: string\n  userId: string\n  displayName: string\n  email: string | null\n  teamName: string | null\n}\n\ntype AssignableStaffResponse = {\n  items?: Array<Record<string, unknown>>\n  total?: number\n  page?: number\n  pageSize?: number\n}\n\nexport type AssignableStaffMembersPage = {\n  items: AssignableStaffMember[]\n  total: number\n  page: number\n  pageSize: number\n}\n\nexport async function fetchAssignableStaffMembersPage(\n  query: string,\n  options?: { page?: number; pageSize?: number; signal?: AbortSignal },\n): Promise<AssignableStaffMembersPage> {\n  const params = new URLSearchParams()\n  params.set('page', String(options?.page ?? 1))\n  params.set('pageSize', String(options?.pageSize ?? 24))\n  const normalizedQuery = query.trim()\n  if (normalizedQuery.length > 0) {\n    params.set('search', normalizedQuery)\n  }\n\n  const data = await readApiResultOrThrow<AssignableStaffResponse>(\n    `/api/customers/assignable-staff?${params.toString()}`,\n    options?.signal ? { signal: options.signal } : undefined,\n  )\n\n  const rawItems = Array.isArray(data?.items) ? data.items : []\n  const deduped = new Map<string, AssignableStaffMember>()\n\n  for (const item of rawItems) {\n    const userId =\n      typeof item?.userId === 'string'\n        ? item.userId\n        : typeof item?.user_id === 'string'\n          ? item.user_id\n          : null\n    if (!userId || deduped.has(userId)) continue\n\n    const user =\n      item?.user && typeof item.user === 'object'\n        ? (item.user as Record<string, unknown>)\n        : null\n    const team =\n      item?.team && typeof item.team === 'object'\n        ? (item.team as Record<string, unknown>)\n        : null\n\n    const displayName =\n      typeof item?.displayName === 'string' && item.displayName.trim().length > 0\n        ? item.displayName.trim()\n        : typeof item?.display_name === 'string' && item.display_name.trim().length > 0\n          ? item.display_name.trim()\n          : null\n    const email =\n      user && typeof user.email === 'string' && user.email.trim().length > 0\n        ? user.email.trim()\n        : typeof item?.email === 'string' && item.email.trim().length > 0\n          ? item.email.trim()\n          : null\n    const teamName =\n      typeof item?.teamName === 'string' && item.teamName.trim().length > 0\n        ? item.teamName.trim()\n        : typeof item?.team_name === 'string' && item.team_name.trim().length > 0\n          ? item.team_name.trim()\n          : team && typeof team.name === 'string' && team.name.trim().length > 0\n            ? team.name.trim()\n            : null\n    const teamMemberId =\n      typeof item?.teamMemberId === 'string'\n        ? item.teamMemberId\n        : typeof item?.team_member_id === 'string'\n          ? item.team_member_id\n          : typeof item?.id === 'string'\n            ? item.id\n            : userId\n\n    deduped.set(userId, {\n      teamMemberId,\n      userId,\n      displayName: displayName ?? email ?? userId,\n      email,\n      teamName,\n    })\n  }\n\n  return {\n    items: Array.from(deduped.values()),\n    total:\n      typeof data?.total === 'number' && Number.isFinite(data.total)\n        ? data.total\n        : deduped.size,\n    page:\n      typeof data?.page === 'number' && Number.isFinite(data.page)\n        ? data.page\n        : options?.page ?? 1,\n    pageSize:\n      typeof data?.pageSize === 'number' && Number.isFinite(data.pageSize)\n        ? data.pageSize\n        : options?.pageSize ?? 24,\n  }\n}\n\nexport async function fetchAssignableStaffMembers(\n  query: string,\n  options?: { pageSize?: number; signal?: AbortSignal },\n): Promise<AssignableStaffMember[]> {\n  const result = await fetchAssignableStaffMembersPage(query, options)\n  return result.items\n}\n\nexport function mapAssignableStaffToFilterOptions(items: AssignableStaffMember[]): FilterOption[] {\n  return items.map((item) => ({\n    value: item.userId,\n    label: item.email && item.email !== item.displayName\n      ? `${item.displayName} (${item.email})`\n      : item.displayName,\n    tone: 'neutral',\n  }))\n}\n\nexport function ensureCurrentUserFilterOption(\n  options: FilterOption[],\n  currentUserId: string,\n  fallbackLabel: string,\n): FilterOption[] {\n  const trimmed = currentUserId.trim()\n  if (!trimmed || options.some((option) => option.value === trimmed)) return options\n  return [{ value: trimmed, label: fallbackLabel, tone: 'neutral' }, ...options]\n}\n"],
-  "mappings": "AAAA,SAAS,4BAA4B;AAyBrC,eAAsB,gCACpB,OACA,SACqC;AACrC,QAAM,SAAS,IAAI,gBAAgB;AACnC,SAAO,IAAI,QAAQ,OAAO,SAAS,QAAQ,CAAC,CAAC;AAC7C,SAAO,IAAI,YAAY,OAAO,SAAS,YAAY,EAAE,CAAC;AACtD,QAAM,kBAAkB,MAAM,KAAK;AACnC,MAAI,gBAAgB,SAAS,GAAG;AAC9B,WAAO,IAAI,UAAU,eAAe;AAAA,EACtC;AAEA,QAAM,OAAO,MAAM;AAAA,IACjB,mCAAmC,OAAO,SAAS,CAAC;AAAA,IACpD,SAAS,SAAS,EAAE,QAAQ,QAAQ,OAAO,IAAI;AAAA,EACjD;AAEA,QAAM,WAAW,MAAM,QAAQ,MAAM,KAAK,IAAI,KAAK,QAAQ,CAAC;AAC5D,QAAM,UAAU,oBAAI,IAAmC;AAEvD,aAAW,QAAQ,UAAU;AAC3B,UAAM,SACJ,OAAO,MAAM,WAAW,WACpB,KAAK,SACL,OAAO,MAAM,YAAY,WACvB,KAAK,UACL;AACR,QAAI,CAAC,UAAU,QAAQ,IAAI,MAAM,EAAG;AAEpC,UAAM,OACJ,MAAM,QAAQ,OAAO,KAAK,SAAS,WAC9B,KAAK,OACN;AACN,UAAM,OACJ,MAAM,QAAQ,OAAO,KAAK,SAAS,WAC9B,KAAK,OACN;AAEN,UAAM,cACJ,OAAO,MAAM,gBAAgB,YAAY,KAAK,YAAY,KAAK,EAAE,SAAS,IACtE,KAAK,YAAY,KAAK,IACtB,OAAO,MAAM,iBAAiB,YAAY,KAAK,aAAa,KAAK,EAAE,SAAS,IAC1E,KAAK,aAAa,KAAK,IACvB;AACR,UAAM,QACJ,QAAQ,OAAO,KAAK,UAAU,YAAY,KAAK,MAAM,KAAK,EAAE,SAAS,IACjE,KAAK,MAAM,KAAK,IAChB,OAAO,MAAM,UAAU,YAAY,KAAK,MAAM,KAAK,EAAE,SAAS,IAC5D,KAAK,MAAM,KAAK,IAChB;AACR,UAAM,WACJ,OAAO,MAAM,aAAa,YAAY,KAAK,SAAS,KAAK,EAAE,SAAS,IAChE,KAAK,SAAS,KAAK,IACnB,OAAO,MAAM,cAAc,YAAY,KAAK,UAAU,KAAK,EAAE,SAAS,IACpE,KAAK,UAAU,KAAK,IACpB,QAAQ,OAAO,KAAK,SAAS,YAAY,KAAK,KAAK,KAAK,EAAE,SAAS,IACjE,KAAK,KAAK,KAAK,IACf;AACV,UAAM,eACJ,OAAO,MAAM,iBAAiB,WAC1B,KAAK,eACL,OAAO,MAAM,mBAAmB,WAC9B,KAAK,iBACL,OAAO,MAAM,OAAO,WAClB,KAAK,KACL;AAEV,YAAQ,IAAI,QAAQ;AAAA,MAClB;AAAA,MACA;AAAA,MACA,aAAa,eAAe,SAAS;AAAA,MACrC;AAAA,MACA;AAAA,IACF,CAAC;AAAA,EACH;AAEA,SAAO;AAAA,IACL,OAAO,MAAM,KAAK,QAAQ,OAAO,CAAC;AAAA,IAClC,OACE,OAAO,MAAM,UAAU,YAAY,OAAO,SAAS,KAAK,KAAK,IACzD,KAAK,QACL,QAAQ;AAAA,IACd,MACE,OAAO,MAAM,SAAS,YAAY,OAAO,SAAS,KAAK,IAAI,IACvD,KAAK,OACL,SAAS,QAAQ;AAAA,IACvB,UACE,OAAO,MAAM,aAAa,YAAY,OAAO,SAAS,KAAK,QAAQ,IAC/D,KAAK,WACL,SAAS,YAAY;AAAA,EAC7B;AACF;AAEA,eAAsB,4BACpB,OACA,SACkC;AAClC,QAAM,SAAS,MAAM,gCAAgC,OAAO,OAAO;AACnE,SAAO,OAAO;AAChB;AAEO,SAAS,kCAAkC,OAAgD;AAChG,SAAO,MAAM,IAAI,CAAC,UAAU;AAAA,IAC1B,OAAO,KAAK;AAAA,IACZ,OAAO,KAAK,SAAS,KAAK,UAAU,KAAK,cACrC,GAAG,KAAK,WAAW,KAAK,KAAK,KAAK,MAClC,KAAK;AAAA,IACT,MAAM;AAAA,EACR,EAAE;AACJ;AAEO,SAAS,8BACd,SACA,eACA,eACgB;AAChB,QAAM,UAAU,cAAc,KAAK;AACnC,MAAI,CAAC,WAAW,QAAQ,KAAK,CAAC,WAAW,OAAO,UAAU,OAAO,EAAG,QAAO;AAC3E,SAAO,CAAC,EAAE,OAAO,SAAS,OAAO,eAAe,MAAM,UAAU,GAAG,GAAG,OAAO;AAC/E;",
+  "sourcesContent": ["import { readApiResultOrThrow } from '@open-mercato/ui/backend/utils/apiCall'\nimport type { FilterOption } from '@open-mercato/shared/lib/query/advanced-filter'\n\nexport type AssignableStaffMember = {\n  teamMemberId: string\n  userId: string\n  displayName: string\n  email: string | null\n  teamName: string | null\n}\n\ntype AssignableStaffResponse = {\n  items?: Array<Record<string, unknown>>\n  total?: number\n  page?: number\n  pageSize?: number\n}\n\nexport type AssignableStaffMembersPage = {\n  items: AssignableStaffMember[]\n  total: number\n  page: number\n  pageSize: number\n}\n\nexport async function fetchAssignableStaffMembersPage(\n  query: string,\n  options?: { page?: number; pageSize?: number; signal?: AbortSignal },\n): Promise<AssignableStaffMembersPage> {\n  const params = new URLSearchParams()\n  params.set('page', String(options?.page ?? 1))\n  params.set('pageSize', String(options?.pageSize ?? 24))\n  const normalizedQuery = query.trim()\n  if (normalizedQuery.length > 0) {\n    params.set('search', normalizedQuery)\n  }\n\n  const data = await readApiResultOrThrow<AssignableStaffResponse>(\n    `/api/staff/team-members/assignable?${params.toString()}`,\n    options?.signal ? { signal: options.signal } : undefined,\n  )\n\n  const rawItems = Array.isArray(data?.items) ? data.items : []\n  const deduped = new Map<string, AssignableStaffMember>()\n\n  for (const item of rawItems) {\n    const userId =\n      typeof item?.userId === 'string'\n        ? item.userId\n        : typeof item?.user_id === 'string'\n          ? item.user_id\n          : null\n    if (!userId || deduped.has(userId)) continue\n\n    const user =\n      item?.user && typeof item.user === 'object'\n        ? (item.user as Record<string, unknown>)\n        : null\n    const team =\n      item?.team && typeof item.team === 'object'\n        ? (item.team as Record<string, unknown>)\n        : null\n\n    const displayName =\n      typeof item?.displayName === 'string' && item.displayName.trim().length > 0\n        ? item.displayName.trim()\n        : typeof item?.display_name === 'string' && item.display_name.trim().length > 0\n          ? item.display_name.trim()\n          : null\n    const email =\n      user && typeof user.email === 'string' && user.email.trim().length > 0\n        ? user.email.trim()\n        : typeof item?.email === 'string' && item.email.trim().length > 0\n          ? item.email.trim()\n          : null\n    const teamName =\n      typeof item?.teamName === 'string' && item.teamName.trim().length > 0\n        ? item.teamName.trim()\n        : typeof item?.team_name === 'string' && item.team_name.trim().length > 0\n          ? item.team_name.trim()\n          : team && typeof team.name === 'string' && team.name.trim().length > 0\n            ? team.name.trim()\n            : null\n    const teamMemberId =\n      typeof item?.teamMemberId === 'string'\n        ? item.teamMemberId\n        : typeof item?.team_member_id === 'string'\n          ? item.team_member_id\n          : typeof item?.id === 'string'\n            ? item.id\n            : userId\n\n    deduped.set(userId, {\n      teamMemberId,\n      userId,\n      displayName: displayName ?? email ?? userId,\n      email,\n      teamName,\n    })\n  }\n\n  return {\n    items: Array.from(deduped.values()),\n    total:\n      typeof data?.total === 'number' && Number.isFinite(data.total)\n        ? data.total\n        : deduped.size,\n    page:\n      typeof data?.page === 'number' && Number.isFinite(data.page)\n        ? data.page\n        : options?.page ?? 1,\n    pageSize:\n      typeof data?.pageSize === 'number' && Number.isFinite(data.pageSize)\n        ? data.pageSize\n        : options?.pageSize ?? 24,\n  }\n}\n\nexport async function fetchAssignableStaffMembers(\n  query: string,\n  options?: { pageSize?: number; signal?: AbortSignal },\n): Promise<AssignableStaffMember[]> {\n  const result = await fetchAssignableStaffMembersPage(query, options)\n  return result.items\n}\n\nexport function mapAssignableStaffToFilterOptions(items: AssignableStaffMember[]): FilterOption[] {\n  return items.map((item) => ({\n    value: item.userId,\n    label: item.email && item.email !== item.displayName\n      ? `${item.displayName} (${item.email})`\n      : item.displayName,\n    tone: 'neutral',\n  }))\n}\n\nexport function ensureCurrentUserFilterOption(\n  options: FilterOption[],\n  currentUserId: string,\n  fallbackLabel: string,\n): FilterOption[] {\n  const trimmed = currentUserId.trim()\n  if (!trimmed || options.some((option) => option.value === trimmed)) return options\n  return [{ value: trimmed, label: fallbackLabel, tone: 'neutral' }, ...options]\n}\n"],
+  "mappings": "AAAA,SAAS,4BAA4B;AAyBrC,eAAsB,gCACpB,OACA,SACqC;AACrC,QAAM,SAAS,IAAI,gBAAgB;AACnC,SAAO,IAAI,QAAQ,OAAO,SAAS,QAAQ,CAAC,CAAC;AAC7C,SAAO,IAAI,YAAY,OAAO,SAAS,YAAY,EAAE,CAAC;AACtD,QAAM,kBAAkB,MAAM,KAAK;AACnC,MAAI,gBAAgB,SAAS,GAAG;AAC9B,WAAO,IAAI,UAAU,eAAe;AAAA,EACtC;AAEA,QAAM,OAAO,MAAM;AAAA,IACjB,sCAAsC,OAAO,SAAS,CAAC;AAAA,IACvD,SAAS,SAAS,EAAE,QAAQ,QAAQ,OAAO,IAAI;AAAA,EACjD;AAEA,QAAM,WAAW,MAAM,QAAQ,MAAM,KAAK,IAAI,KAAK,QAAQ,CAAC;AAC5D,QAAM,UAAU,oBAAI,IAAmC;AAEvD,aAAW,QAAQ,UAAU;AAC3B,UAAM,SACJ,OAAO,MAAM,WAAW,WACpB,KAAK,SACL,OAAO,MAAM,YAAY,WACvB,KAAK,UACL;AACR,QAAI,CAAC,UAAU,QAAQ,IAAI,MAAM,EAAG;AAEpC,UAAM,OACJ,MAAM,QAAQ,OAAO,KAAK,SAAS,WAC9B,KAAK,OACN;AACN,UAAM,OACJ,MAAM,QAAQ,OAAO,KAAK,SAAS,WAC9B,KAAK,OACN;AAEN,UAAM,cACJ,OAAO,MAAM,gBAAgB,YAAY,KAAK,YAAY,KAAK,EAAE,SAAS,IACtE,KAAK,YAAY,KAAK,IACtB,OAAO,MAAM,iBAAiB,YAAY,KAAK,aAAa,KAAK,EAAE,SAAS,IAC1E,KAAK,aAAa,KAAK,IACvB;AACR,UAAM,QACJ,QAAQ,OAAO,KAAK,UAAU,YAAY,KAAK,MAAM,KAAK,EAAE,SAAS,IACjE,KAAK,MAAM,KAAK,IAChB,OAAO,MAAM,UAAU,YAAY,KAAK,MAAM,KAAK,EAAE,SAAS,IAC5D,KAAK,MAAM,KAAK,IAChB;AACR,UAAM,WACJ,OAAO,MAAM,aAAa,YAAY,KAAK,SAAS,KAAK,EAAE,SAAS,IAChE,KAAK,SAAS,KAAK,IACnB,OAAO,MAAM,cAAc,YAAY,KAAK,UAAU,KAAK,EAAE,SAAS,IACpE,KAAK,UAAU,KAAK,IACpB,QAAQ,OAAO,KAAK,SAAS,YAAY,KAAK,KAAK,KAAK,EAAE,SAAS,IACjE,KAAK,KAAK,KAAK,IACf;AACV,UAAM,eACJ,OAAO,MAAM,iBAAiB,WAC1B,KAAK,eACL,OAAO,MAAM,mBAAmB,WAC9B,KAAK,iBACL,OAAO,MAAM,OAAO,WAClB,KAAK,KACL;AAEV,YAAQ,IAAI,QAAQ;AAAA,MAClB;AAAA,MACA;AAAA,MACA,aAAa,eAAe,SAAS;AAAA,MACrC;AAAA,MACA;AAAA,IACF,CAAC;AAAA,EACH;AAEA,SAAO;AAAA,IACL,OAAO,MAAM,KAAK,QAAQ,OAAO,CAAC;AAAA,IAClC,OACE,OAAO,MAAM,UAAU,YAAY,OAAO,SAAS,KAAK,KAAK,IACzD,KAAK,QACL,QAAQ;AAAA,IACd,MACE,OAAO,MAAM,SAAS,YAAY,OAAO,SAAS,KAAK,IAAI,IACvD,KAAK,OACL,SAAS,QAAQ;AAAA,IACvB,UACE,OAAO,MAAM,aAAa,YAAY,OAAO,SAAS,KAAK,QAAQ,IAC/D,KAAK,WACL,SAAS,YAAY;AAAA,EAC7B;AACF;AAEA,eAAsB,4BACpB,OACA,SACkC;AAClC,QAAM,SAAS,MAAM,gCAAgC,OAAO,OAAO;AACnE,SAAO,OAAO;AAChB;AAEO,SAAS,kCAAkC,OAAgD;AAChG,SAAO,MAAM,IAAI,CAAC,UAAU;AAAA,IAC1B,OAAO,KAAK;AAAA,IACZ,OAAO,KAAK,SAAS,KAAK,UAAU,KAAK,cACrC,GAAG,KAAK,WAAW,KAAK,KAAK,KAAK,MAClC,KAAK;AAAA,IACT,MAAM;AAAA,EACR,EAAE;AACJ;AAEO,SAAS,8BACd,SACA,eACA,eACgB;AAChB,QAAM,UAAU,cAAc,KAAK;AACnC,MAAI,CAAC,WAAW,QAAQ,KAAK,CAAC,WAAW,OAAO,UAAU,OAAO,EAAG,QAAO;AAC3E,SAAO,CAAC,EAAE,OAAO,SAAS,OAAO,eAAe,MAAM,UAAU,GAAG,GAAG,OAAO;AAC/E;",
   "names": []
 }

package/dist/modules/planner/api/access.js

@@ -1,71 +1,38 @@
 import { CrudHttpError } from "@open-mercato/shared/lib/crud/errors";
-import { findOneWithDecryption } from "@open-mercato/shared/lib/encryption/find";
-import { StaffTeamMember } from "@open-mercato/core/modules/staff/data/entities";
-const MANAGE_AVAILABILITY_FEATURE = "planner.manage_availability";
-const SELF_MANAGE_FEATURE = "staff.my_availability.manage";
-const SELF_UNAVAILABILITY_FEATURE = "staff.my_availability.unavailability";
 function buildForbiddenError(translate) {
-  return new CrudHttpError(403, { error: translate("planner.availability.errors.unauthorized", "Unauthorized") });
+  return new CrudHttpError(403, {
+    error: translate("planner.availability.errors.unauthorized", "Unauthorized")
+  });
+}
+function buildStaffModuleNotLoadedError() {
+  return new CrudHttpError(403, { error: "staff_module_not_loaded" });
 }
 async function resolveAvailabilityWriteAccess(ctx) {
-  const auth = ctx.auth;
-  const tenantId = auth?.tenantId ?? null;
-  const organizationId = ctx.selectedOrganizationId ?? auth?.orgId ?? null;
-  if (!auth || !auth.sub || auth.isApiKey) {
-    return {
-      canManageAll: false,
-      canManageSelf: false,
-      canManageUnavailability: false,
-      memberId: null,
-      tenantId,
-      organizationId
-    };
-  }
-  const rbac = ctx.container.resolve("rbacService");
-  const canManageAll = await rbac.userHasAllFeatures(auth.sub, [MANAGE_AVAILABILITY_FEATURE], { tenantId, organizationId });
-  if (canManageAll) {
-    return {
-      canManageAll: true,
-      canManageSelf: true,
-      canManageUnavailability: true,
-      memberId: null,
-      tenantId,
-      organizationId
-    };
-  }
-  const [canManageSelf, canManageUnavailability] = await Promise.all([
-    rbac.userHasAllFeatures(auth.sub, [SELF_MANAGE_FEATURE], { tenantId, organizationId }),
-    rbac.userHasAllFeatures(auth.sub, [SELF_UNAVAILABILITY_FEATURE], { tenantId, organizationId })
-  ]);
-  if (!canManageSelf) {
+  const tenantId = ctx.auth?.tenantId ?? null;
+  const organizationId = ctx.selectedOrganizationId ?? ctx.auth?.orgId ?? null;
+  const resolver = ctx.container.resolve(
+    "availabilityAccessResolver",
+    { allowUnregistered: true }
+  );
+  if (!resolver) {
+    console.warn(
+      "[planner] staff_module_not_loaded \u2014 availabilityAccessResolver unregistered; denying availability write access"
+    );
     return {
       canManageAll: false,
       canManageSelf: false,
       canManageUnavailability: false,
       memberId: null,
       tenantId,
-      organizationId
+      organizationId,
+      unregistered: true
     };
   }
-  const em = ctx.container.resolve("em");
-  const member = await findOneWithDecryption(
-    em,
-    StaffTeamMember,
-    { userId: auth.sub, deletedAt: null },
-    void 0,
-    { tenantId, organizationId }
-  );
-  return {
-    canManageAll: false,
-    canManageSelf,
-    canManageUnavailability,
-    memberId: member?.id ?? null,
-    tenantId,
-    organizationId
-  };
+  return resolver.resolveAvailabilityWriteAccess(ctx);
 }
 async function assertAvailabilityWriteAccess(ctx, params, translate) {
   const access = await resolveAvailabilityWriteAccess(ctx);
+  if (access.unregistered) throw buildStaffModuleNotLoadedError();
   if (access.canManageAll) return access;
   if (!access.canManageSelf) throw buildForbiddenError(translate);
   if (!access.memberId || params.subjectType !== "member" || params.subjectId !== access.memberId) {

package/dist/modules/planner/api/access.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/planner/api/access.ts"],
-  "sourcesContent": ["import type { AwilixContainer } from 'awilix'\nimport type { AuthContext } from '@open-mercato/shared/lib/auth/server'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport type { RbacService } from '@open-mercato/core/modules/auth/services/rbacService'\nimport { CrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { StaffTeamMember } from '@open-mercato/core/modules/staff/data/entities'\n\ntype TranslateFn = (key: string, fallback?: string) => string\n\nexport type AvailabilityAccessContext = {\n  container: AwilixContainer\n  auth: AuthContext | null\n  selectedOrganizationId?: string | null\n}\n\nexport type AvailabilityWriteAccess = {\n  canManageAll: boolean\n  canManageSelf: boolean\n  canManageUnavailability: boolean\n  memberId: string | null\n  tenantId: string | null\n  organizationId: string | null\n}\n\nconst MANAGE_AVAILABILITY_FEATURE = 'planner.manage_availability'\nconst SELF_MANAGE_FEATURE = 'staff.my_availability.manage'\nconst SELF_UNAVAILABILITY_FEATURE = 'staff.my_availability.unavailability'\n\nfunction buildForbiddenError(translate: TranslateFn) {\n  return new CrudHttpError(403, { error: translate('planner.availability.errors.unauthorized', 'Unauthorized') })\n}\n\nexport async function resolveAvailabilityWriteAccess(ctx: AvailabilityAccessContext): Promise<AvailabilityWriteAccess> {\n  const auth = ctx.auth\n  const tenantId = auth?.tenantId ?? null\n  const organizationId = ctx.selectedOrganizationId ?? auth?.orgId ?? null\n  if (!auth || !auth.sub || auth.isApiKey) {\n    return {\n      canManageAll: false,\n      canManageSelf: false,\n      canManageUnavailability: false,\n      memberId: null,\n      tenantId,\n      organizationId,\n    }\n  }\n  const rbac = ctx.container.resolve('rbacService') as RbacService\n  const canManageAll = await rbac.userHasAllFeatures(auth.sub, [MANAGE_AVAILABILITY_FEATURE], { tenantId, organizationId })\n  if (canManageAll) {\n    return {\n      canManageAll: true,\n      canManageSelf: true,\n      canManageUnavailability: true,\n      memberId: null,\n      tenantId,\n      organizationId,\n    }\n  }\n  const [canManageSelf, canManageUnavailability] = await Promise.all([\n    rbac.userHasAllFeatures(auth.sub, [SELF_MANAGE_FEATURE], { tenantId, organizationId }),\n    rbac.userHasAllFeatures(auth.sub, [SELF_UNAVAILABILITY_FEATURE], { tenantId, organizationId }),\n  ])\n  if (!canManageSelf) {\n    return {\n      canManageAll: false,\n      canManageSelf: false,\n      canManageUnavailability: false,\n      memberId: null,\n      tenantId,\n      organizationId,\n    }\n  }\n  const em = ctx.container.resolve('em') as EntityManager\n  const member = await findOneWithDecryption(\n    em,\n    StaffTeamMember,\n    { userId: auth.sub, deletedAt: null },\n    undefined,\n    { tenantId, organizationId },\n  )\n  return {\n    canManageAll: false,\n    canManageSelf,\n    canManageUnavailability,\n    memberId: member?.id ?? null,\n    tenantId,\n    organizationId,\n  }\n}\n\nexport async function assertAvailabilityWriteAccess(\n  ctx: AvailabilityAccessContext,\n  params: { subjectType: string; subjectId: string; requiresUnavailability?: boolean },\n  translate: TranslateFn,\n): Promise<AvailabilityWriteAccess> {\n  const access = await resolveAvailabilityWriteAccess(ctx)\n  if (access.canManageAll) return access\n  if (!access.canManageSelf) throw buildForbiddenError(translate)\n  if (!access.memberId || params.subjectType !== 'member' || params.subjectId !== access.memberId) {\n    throw buildForbiddenError(translate)\n  }\n  if (params.requiresUnavailability && !access.canManageUnavailability) {\n    throw buildForbiddenError(translate)\n  }\n  return access\n}\n"],
-  "mappings": "AAIA,SAAS,qBAAqB;AAC9B,SAAS,6BAA6B;AACtC,SAAS,uBAAuB;AAmBhC,MAAM,8BAA8B;AACpC,MAAM,sBAAsB;AAC5B,MAAM,8BAA8B;AAEpC,SAAS,oBAAoB,WAAwB;AACnD,SAAO,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,4CAA4C,cAAc,EAAE,CAAC;AAChH;AAEA,eAAsB,+BAA+B,KAAkE;AACrH,QAAM,OAAO,IAAI;AACjB,QAAM,WAAW,MAAM,YAAY;AACnC,QAAM,iBAAiB,IAAI,0BAA0B,MAAM,SAAS;AACpE,MAAI,CAAC,QAAQ,CAAC,KAAK,OAAO,KAAK,UAAU;AACvC,WAAO;AAAA,MACL,cAAc;AAAA,MACd,eAAe;AAAA,MACf,yBAAyB;AAAA,MACzB,UAAU;AAAA,MACV;AAAA,MACA;AAAA,IACF;AAAA,EACF;AACA,QAAM,OAAO,IAAI,UAAU,QAAQ,aAAa;AAChD,QAAM,eAAe,MAAM,KAAK,mBAAmB,KAAK,KAAK,CAAC,2BAA2B,GAAG,EAAE,UAAU,eAAe,CAAC;AACxH,MAAI,cAAc;AAChB,WAAO;AAAA,MACL,cAAc;AAAA,MACd,eAAe;AAAA,MACf,yBAAyB;AAAA,MACzB,UAAU;AAAA,MACV;AAAA,MACA;AAAA,IACF;AAAA,EACF;AACA,QAAM,CAAC,eAAe,uBAAuB,IAAI,MAAM,QAAQ,IAAI;AAAA,IACjE,KAAK,mBAAmB,KAAK,KAAK,CAAC,mBAAmB,GAAG,EAAE,UAAU,eAAe,CAAC;AAAA,IACrF,KAAK,mBAAmB,KAAK,KAAK,CAAC,2BAA2B,GAAG,EAAE,UAAU,eAAe,CAAC;AAAA,EAC/F,CAAC;AACD,MAAI,CAAC,eAAe;AAClB,WAAO;AAAA,MACL,cAAc;AAAA,MACd,eAAe;AAAA,MACf,yBAAyB;AAAA,MACzB,UAAU;AAAA,MACV;AAAA,MACA;AAAA,IACF;AAAA,EACF;AACA,QAAM,KAAK,IAAI,UAAU,QAAQ,IAAI;AACrC,QAAM,SAAS,MAAM;AAAA,IACnB;AAAA,IACA;AAAA,IACA,EAAE,QAAQ,KAAK,KAAK,WAAW,KAAK;AAAA,IACpC;AAAA,IACA,EAAE,UAAU,eAAe;AAAA,EAC7B;AACA,SAAO;AAAA,IACL,cAAc;AAAA,IACd;AAAA,IACA;AAAA,IACA,UAAU,QAAQ,MAAM;AAAA,IACxB;AAAA,IACA;AAAA,EACF;AACF;AAEA,eAAsB,8BACpB,KACA,QACA,WACkC;AAClC,QAAM,SAAS,MAAM,+BAA+B,GAAG;AACvD,MAAI,OAAO,aAAc,QAAO;AAChC,MAAI,CAAC,OAAO,cAAe,OAAM,oBAAoB,SAAS;AAC9D,MAAI,CAAC,OAAO,YAAY,OAAO,gBAAgB,YAAY,OAAO,cAAc,OAAO,UAAU;AAC/F,UAAM,oBAAoB,SAAS;AAAA,EACrC;AACA,MAAI,OAAO,0BAA0B,CAAC,OAAO,yBAAyB;AACpE,UAAM,oBAAoB,SAAS;AAAA,EACrC;AACA,SAAO;AACT;",
+  "sourcesContent": ["import type { AwilixContainer } from 'awilix'\nimport type { AuthContext } from '@open-mercato/shared/lib/auth/server'\nimport { CrudHttpError } from '@open-mercato/shared/lib/crud/errors'\n\ntype TranslateFn = (key: string, fallback?: string) => string\n\nexport type AvailabilityAccessContext = {\n  container: AwilixContainer\n  auth: AuthContext | null\n  selectedOrganizationId?: string | null\n}\n\nexport type AvailabilityWriteAccess = {\n  canManageAll: boolean\n  canManageSelf: boolean\n  canManageUnavailability: boolean\n  memberId: string | null\n  tenantId: string | null\n  organizationId: string | null\n  unregistered?: boolean\n}\n\ntype AvailabilityAccessResolver = {\n  resolveAvailabilityWriteAccess(\n    ctx: AvailabilityAccessContext,\n  ): Promise<AvailabilityWriteAccess>\n}\n\nfunction buildForbiddenError(translate: TranslateFn) {\n  return new CrudHttpError(403, {\n    error: translate('planner.availability.errors.unauthorized', 'Unauthorized'),\n  })\n}\n\nfunction buildStaffModuleNotLoadedError() {\n  return new CrudHttpError(403, { error: 'staff_module_not_loaded' })\n}\n\nexport async function resolveAvailabilityWriteAccess(\n  ctx: AvailabilityAccessContext,\n): Promise<AvailabilityWriteAccess> {\n  const tenantId = ctx.auth?.tenantId ?? null\n  const organizationId = ctx.selectedOrganizationId ?? ctx.auth?.orgId ?? null\n  const resolver = ctx.container.resolve<AvailabilityAccessResolver | undefined>(\n    'availabilityAccessResolver',\n    { allowUnregistered: true },\n  )\n  if (!resolver) {\n    console.warn(\n      '[planner] staff_module_not_loaded \u2014 availabilityAccessResolver unregistered; denying availability write access',\n    )\n    return {\n      canManageAll: false,\n      canManageSelf: false,\n      canManageUnavailability: false,\n      memberId: null,\n      tenantId,\n      organizationId,\n      unregistered: true,\n    }\n  }\n  return resolver.resolveAvailabilityWriteAccess(ctx)\n}\n\nexport async function assertAvailabilityWriteAccess(\n  ctx: AvailabilityAccessContext,\n  params: { subjectType: string; subjectId: string; requiresUnavailability?: boolean },\n  translate: TranslateFn,\n): Promise<AvailabilityWriteAccess> {\n  const access = await resolveAvailabilityWriteAccess(ctx)\n  if (access.unregistered) throw buildStaffModuleNotLoadedError()\n  if (access.canManageAll) return access\n  if (!access.canManageSelf) throw buildForbiddenError(translate)\n  if (!access.memberId || params.subjectType !== 'member' || params.subjectId !== access.memberId) {\n    throw buildForbiddenError(translate)\n  }\n  if (params.requiresUnavailability && !access.canManageUnavailability) {\n    throw buildForbiddenError(translate)\n  }\n  return access\n}\n"],
+  "mappings": "AAEA,SAAS,qBAAqB;AA0B9B,SAAS,oBAAoB,WAAwB;AACnD,SAAO,IAAI,cAAc,KAAK;AAAA,IAC5B,OAAO,UAAU,4CAA4C,cAAc;AAAA,EAC7E,CAAC;AACH;AAEA,SAAS,iCAAiC;AACxC,SAAO,IAAI,cAAc,KAAK,EAAE,OAAO,0BAA0B,CAAC;AACpE;AAEA,eAAsB,+BACpB,KACkC;AAClC,QAAM,WAAW,IAAI,MAAM,YAAY;AACvC,QAAM,iBAAiB,IAAI,0BAA0B,IAAI,MAAM,SAAS;AACxE,QAAM,WAAW,IAAI,UAAU;AAAA,IAC7B;AAAA,IACA,EAAE,mBAAmB,KAAK;AAAA,EAC5B;AACA,MAAI,CAAC,UAAU;AACb,YAAQ;AAAA,MACN;AAAA,IACF;AACA,WAAO;AAAA,MACL,cAAc;AAAA,MACd,eAAe;AAAA,MACf,yBAAyB;AAAA,MACzB,UAAU;AAAA,MACV;AAAA,MACA;AAAA,MACA,cAAc;AAAA,IAChB;AAAA,EACF;AACA,SAAO,SAAS,+BAA+B,GAAG;AACpD;AAEA,eAAsB,8BACpB,KACA,QACA,WACkC;AAClC,QAAM,SAAS,MAAM,+BAA+B,GAAG;AACvD,MAAI,OAAO,aAAc,OAAM,+BAA+B;AAC9D,MAAI,OAAO,aAAc,QAAO;AAChC,MAAI,CAAC,OAAO,cAAe,OAAM,oBAAoB,SAAS;AAC9D,MAAI,CAAC,OAAO,YAAY,OAAO,gBAAgB,YAAY,OAAO,cAAc,OAAO,UAAU;AAC/F,UAAM,oBAAoB,SAAS;AAAA,EACrC;AACA,MAAI,OAAO,0BAA0B,CAAC,OAAO,yBAAyB;AACpE,UAAM,oBAAoB,SAAS;AAAA,EACrC;AACA,SAAO;AACT;",
   "names": []
 }