@open-mercato/core 0.6.4-develop.4121.1.0d7f20d229 → 0.6.4-develop.4133.1.48fc6c8f7b

package/.turbo/turbo-build.log

@@ -1,4 +1,4 @@
-[build:core] found 2645 entry points
+[build:core] found 2648 entry points
 [build:core] built successfully
 [build:core:generated] found 172 entry points
 [build:core:generated] built successfully

package/dist/modules/dashboards/api/widgets/data/batch/route.js

@@ -0,0 +1,137 @@
+import { NextResponse } from "next/server";
+import { z } from "zod";
+import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
+import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
+import { resolveOrganizationScopeForRequest } from "@open-mercato/core/modules/directory/utils/organizationScope";
+import {
+  createWidgetDataService,
+  WidgetDataValidationError
+} from "../../../../services/widgetDataService.js";
+import { runWidgetDataBatch } from "../../../../lib/widgetDataBatch.js";
+import { dashboardsTag, dashboardsErrorSchema } from "../../../openapi.js";
+import { widgetDataRequestSchema, widgetDataResponseSchema } from "../schema.js";
+const metadata = {
+  POST: { requireAuth: true, requireFeatures: ["analytics.view"] }
+};
+const MAX_BATCH_SIZE = 50;
+const widgetDataBatchRequestSchema = z.object({
+  requests: z.array(
+    z.object({
+      id: z.string().min(1),
+      request: widgetDataRequestSchema
+    })
+  ).min(1).max(MAX_BATCH_SIZE)
+});
+const widgetDataBatchResponseSchema = z.object({
+  results: z.array(
+    z.discriminatedUnion("ok", [
+      z.object({
+        id: z.string(),
+        ok: z.literal(true),
+        data: widgetDataResponseSchema
+      }),
+      z.object({
+        id: z.string(),
+        ok: z.literal(false),
+        error: z.string()
+      })
+    ])
+  )
+});
+async function POST(req) {
+  const auth = await getAuthFromRequest(req);
+  if (!auth) {
+    return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
+  }
+  let body;
+  try {
+    body = await req.json();
+  } catch {
+    return NextResponse.json({ error: "Invalid JSON body" }, { status: 400 });
+  }
+  const parsed = widgetDataBatchRequestSchema.safeParse(body);
+  if (!parsed.success) {
+    return NextResponse.json(
+      { error: "Invalid request payload", issues: parsed.error.issues },
+      { status: 400 }
+    );
+  }
+  const tenantId = auth.tenantId ?? null;
+  if (!tenantId) {
+    return NextResponse.json({ error: "Tenant context is required" }, { status: 400 });
+  }
+  const container = await createRequestContainer();
+  const analyticsRegistry = container.resolve("analyticsRegistry");
+  const em = container.resolve("em").fork({
+    clear: true,
+    freshEventManager: true,
+    useContext: true
+  });
+  const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req });
+  const organizationIds = (() => {
+    if (scope?.selectedId) return [scope.selectedId];
+    if (Array.isArray(scope?.filterIds) && scope.filterIds.length > 0) return scope.filterIds;
+    if (scope?.allowedIds === null) return void 0;
+    if (auth.orgId) return [auth.orgId];
+    return void 0;
+  })();
+  const cache = container.resolve("cache");
+  const service = createWidgetDataService(em, { tenantId, organizationIds }, analyticsRegistry, cache);
+  const rbacService = container.resolve("rbacService");
+  try {
+    const results = await runWidgetDataBatch(parsed.data.requests, {
+      getRequiredFeatures: (entityType) => analyticsRegistry.getRequiredFeatures(entityType),
+      checkFeatures: (features) => {
+        if (features.length === 0) return Promise.resolve(true);
+        return rbacService.userHasAllFeatures(auth.sub, features, {
+          tenantId,
+          organizationId: auth.orgId
+        });
+      },
+      fetchOne: (request) => service.fetchWidgetData(request),
+      describeError: (error) => error instanceof WidgetDataValidationError ? error.message : "An error occurred while processing your request"
+    });
+    return NextResponse.json({ results });
+  } catch (err) {
+    console.error("[widgets/data/batch] Error:", err);
+    return NextResponse.json(
+      { error: "An error occurred while processing your request" },
+      { status: 500 }
+    );
+  }
+}
+const widgetDataBatchPostDoc = {
+  summary: "Fetch aggregated data for multiple dashboard widgets in one request",
+  description: "Resolves a batch of widget data requests with a single authentication, RBAC, organization-scope, and database-context setup. Each request is keyed by an opaque widget id and resolved independently, so a failure in one widget does not fail the batch.",
+  tags: [dashboardsTag],
+  requestBody: {
+    contentType: "application/json",
+    schema: widgetDataBatchRequestSchema,
+    description: "A list of id-keyed widget data requests to resolve together."
+  },
+  responses: [
+    {
+      status: 200,
+      description: "Per-widget aggregation results keyed by request id.",
+      schema: widgetDataBatchResponseSchema
+    }
+  ],
+  errors: [
+    { status: 400, description: "Invalid request payload", schema: dashboardsErrorSchema },
+    { status: 401, description: "Authentication required", schema: dashboardsErrorSchema },
+    { status: 500, description: "Internal server error", schema: dashboardsErrorSchema }
+  ]
+};
+const openApi = {
+  tag: dashboardsTag,
+  summary: "Batch widget data aggregation endpoint",
+  methods: {
+    POST: widgetDataBatchPostDoc
+  }
+};
+export {
+  POST,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/dashboards/api/widgets/data/batch/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../../src/modules/dashboards/api/widgets/data/batch/route.ts"],
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport type { CacheStrategy } from '@open-mercato/cache'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport {\n  createWidgetDataService,\n  type WidgetDataRequest,\n  WidgetDataValidationError,\n} from '../../../../services/widgetDataService'\nimport { runWidgetDataBatch } from '../../../../lib/widgetDataBatch'\nimport type { AnalyticsRegistry } from '../../../../services/analyticsRegistry'\nimport type { OpenApiMethodDoc, OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { dashboardsTag, dashboardsErrorSchema } from '../../../openapi'\nimport { widgetDataRequestSchema, widgetDataResponseSchema } from '../schema'\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: ['analytics.view'] },\n}\n\nconst MAX_BATCH_SIZE = 50\n\nconst widgetDataBatchRequestSchema = z.object({\n  requests: z\n    .array(\n      z.object({\n        id: z.string().min(1),\n        request: widgetDataRequestSchema,\n      }),\n    )\n    .min(1)\n    .max(MAX_BATCH_SIZE),\n})\n\nconst widgetDataBatchResponseSchema = z.object({\n  results: z.array(\n    z.discriminatedUnion('ok', [\n      z.object({\n        id: z.string(),\n        ok: z.literal(true),\n        data: widgetDataResponseSchema,\n      }),\n      z.object({\n        id: z.string(),\n        ok: z.literal(false),\n        error: z.string(),\n      }),\n    ]),\n  ),\n})\n\nexport async function POST(req: Request) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n\n  let body: unknown\n  try {\n    body = await req.json()\n  } catch {\n    return NextResponse.json({ error: 'Invalid JSON body' }, { status: 400 })\n  }\n\n  const parsed = widgetDataBatchRequestSchema.safeParse(body)\n  if (!parsed.success) {\n    return NextResponse.json(\n      { error: 'Invalid request payload', issues: parsed.error.issues },\n      { status: 400 },\n    )\n  }\n\n  const tenantId = auth.tenantId ?? null\n  if (!tenantId) {\n    return NextResponse.json({ error: 'Tenant context is required' }, { status: 400 })\n  }\n\n  // Build the per-request DI/RBAC/org-scope stack exactly once for the whole\n  // batch instead of once per widget (see issue #2273).\n  const container = await createRequestContainer()\n  const analyticsRegistry = container.resolve<AnalyticsRegistry>('analyticsRegistry')\n\n  const em = (container.resolve('em') as EntityManager).fork({\n    clear: true,\n    freshEventManager: true,\n    useContext: true,\n  })\n\n  const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n\n  const organizationIds = (() => {\n    if (scope?.selectedId) return [scope.selectedId]\n    if (Array.isArray(scope?.filterIds) && scope.filterIds.length > 0) return scope.filterIds\n    if (scope?.allowedIds === null) return undefined\n    if (auth.orgId) return [auth.orgId]\n    return undefined\n  })()\n\n  const cache = container.resolve<CacheStrategy>('cache')\n  const service = createWidgetDataService(em, { tenantId, organizationIds }, analyticsRegistry, cache)\n\n  const rbacService = container.resolve<{\n    userHasAllFeatures: (\n      userId: string,\n      features: string[],\n      scope: { tenantId: string; organizationId?: string | null },\n    ) => Promise<boolean>\n  }>('rbacService')\n\n  try {\n    const results = await runWidgetDataBatch(parsed.data.requests as Array<{ id: string; request: WidgetDataRequest }>, {\n      getRequiredFeatures: (entityType) => analyticsRegistry.getRequiredFeatures(entityType),\n      checkFeatures: (features) => {\n        if (features.length === 0) return Promise.resolve(true)\n        return rbacService.userHasAllFeatures(auth.sub, features, {\n          tenantId,\n          organizationId: auth.orgId,\n        })\n      },\n      fetchOne: (request) => service.fetchWidgetData(request),\n      describeError: (error) =>\n        error instanceof WidgetDataValidationError\n          ? error.message\n          : 'An error occurred while processing your request',\n    })\n    return NextResponse.json({ results })\n  } catch (err) {\n    console.error('[widgets/data/batch] Error:', err)\n    return NextResponse.json(\n      { error: 'An error occurred while processing your request' },\n      { status: 500 },\n    )\n  }\n}\n\nconst widgetDataBatchPostDoc: OpenApiMethodDoc = {\n  summary: 'Fetch aggregated data for multiple dashboard widgets in one request',\n  description:\n    'Resolves a batch of widget data requests with a single authentication, RBAC, organization-scope, and database-context setup. Each request is keyed by an opaque widget id and resolved independently, so a failure in one widget does not fail the batch.',\n  tags: [dashboardsTag],\n  requestBody: {\n    contentType: 'application/json',\n    schema: widgetDataBatchRequestSchema,\n    description: 'A list of id-keyed widget data requests to resolve together.',\n  },\n  responses: [\n    {\n      status: 200,\n      description: 'Per-widget aggregation results keyed by request id.',\n      schema: widgetDataBatchResponseSchema,\n    },\n  ],\n  errors: [\n    { status: 400, description: 'Invalid request payload', schema: dashboardsErrorSchema },\n    { status: 401, description: 'Authentication required', schema: dashboardsErrorSchema },\n    { status: 500, description: 'Internal server error', schema: dashboardsErrorSchema },\n  ],\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: dashboardsTag,\n  summary: 'Batch widget data aggregation endpoint',\n  methods: {\n    POST: widgetDataBatchPostDoc,\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAGlB,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AACvC,SAAS,0CAA0C;AACnD;AAAA,EACE;AAAA,EAEA;AAAA,OACK;AACP,SAAS,0BAA0B;AAGnC,SAAS,eAAe,6BAA6B;AACrD,SAAS,yBAAyB,gCAAgC;AAE3D,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,gBAAgB,EAAE;AACjE;AAEA,MAAM,iBAAiB;AAEvB,MAAM,+BAA+B,EAAE,OAAO;AAAA,EAC5C,UAAU,EACP;AAAA,IACC,EAAE,OAAO;AAAA,MACP,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,MACpB,SAAS;AAAA,IACX,CAAC;AAAA,EACH,EACC,IAAI,CAAC,EACL,IAAI,cAAc;AACvB,CAAC;AAED,MAAM,gCAAgC,EAAE,OAAO;AAAA,EAC7C,SAAS,EAAE;AAAA,IACT,EAAE,mBAAmB,MAAM;AAAA,MACzB,EAAE,OAAO;AAAA,QACP,IAAI,EAAE,OAAO;AAAA,QACb,IAAI,EAAE,QAAQ,IAAI;AAAA,QAClB,MAAM;AAAA,MACR,CAAC;AAAA,MACD,EAAE,OAAO;AAAA,QACP,IAAI,EAAE,OAAO;AAAA,QACb,IAAI,EAAE,QAAQ,KAAK;AAAA,QACnB,OAAO,EAAE,OAAO;AAAA,MAClB,CAAC;AAAA,IACH,CAAC;AAAA,EACH;AACF,CAAC;AAED,eAAsB,KAAK,KAAc;AACvC,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM;AACT,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAEA,MAAI;AACJ,MAAI;AACF,WAAO,MAAM,IAAI,KAAK;AAAA,EACxB,QAAQ;AACN,WAAO,aAAa,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC1E;AAEA,QAAM,SAAS,6BAA6B,UAAU,IAAI;AAC1D,MAAI,CAAC,OAAO,SAAS;AACnB,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,2BAA2B,QAAQ,OAAO,MAAM,OAAO;AAAA,MAChE,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AAEA,QAAM,WAAW,KAAK,YAAY;AAClC,MAAI,CAAC,UAAU;AACb,WAAO,aAAa,KAAK,EAAE,OAAO,6BAA6B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACnF;AAIA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,oBAAoB,UAAU,QAA2B,mBAAmB;AAElF,QAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAAA,IACzD,OAAO;AAAA,IACP,mBAAmB;AAAA,IACnB,YAAY;AAAA,EACd,CAAC;AAED,QAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AAExF,QAAM,mBAAmB,MAAM;AAC7B,QAAI,OAAO,WAAY,QAAO,CAAC,MAAM,UAAU;AAC/C,QAAI,MAAM,QAAQ,OAAO,SAAS,KAAK,MAAM,UAAU,SAAS,EAAG,QAAO,MAAM;AAChF,QAAI,OAAO,eAAe,KAAM,QAAO;AACvC,QAAI,KAAK,MAAO,QAAO,CAAC,KAAK,KAAK;AAClC,WAAO;AAAA,EACT,GAAG;AAEH,QAAM,QAAQ,UAAU,QAAuB,OAAO;AACtD,QAAM,UAAU,wBAAwB,IAAI,EAAE,UAAU,gBAAgB,GAAG,mBAAmB,KAAK;AAEnG,QAAM,cAAc,UAAU,QAM3B,aAAa;AAEhB,MAAI;AACF,UAAM,UAAU,MAAM,mBAAmB,OAAO,KAAK,UAA+D;AAAA,MAClH,qBAAqB,CAAC,eAAe,kBAAkB,oBAAoB,UAAU;AAAA,MACrF,eAAe,CAAC,aAAa;AAC3B,YAAI,SAAS,WAAW,EAAG,QAAO,QAAQ,QAAQ,IAAI;AACtD,eAAO,YAAY,mBAAmB,KAAK,KAAK,UAAU;AAAA,UACxD;AAAA,UACA,gBAAgB,KAAK;AAAA,QACvB,CAAC;AAAA,MACH;AAAA,MACA,UAAU,CAAC,YAAY,QAAQ,gBAAgB,OAAO;AAAA,MACtD,eAAe,CAAC,UACd,iBAAiB,4BACb,MAAM,UACN;AAAA,IACR,CAAC;AACD,WAAO,aAAa,KAAK,EAAE,QAAQ,CAAC;AAAA,EACtC,SAAS,KAAK;AACZ,YAAQ,MAAM,+BAA+B,GAAG;AAChD,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,kDAAkD;AAAA,MAC3D,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAEA,MAAM,yBAA2C;AAAA,EAC/C,SAAS;AAAA,EACT,aACE;AAAA,EACF,MAAM,CAAC,aAAa;AAAA,EACpB,aAAa;AAAA,IACX,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,aAAa;AAAA,EACf;AAAA,EACA,WAAW;AAAA,IACT;AAAA,MACE,QAAQ;AAAA,MACR,aAAa;AAAA,MACb,QAAQ;AAAA,IACV;AAAA,EACF;AAAA,EACA,QAAQ;AAAA,IACN,EAAE,QAAQ,KAAK,aAAa,2BAA2B,QAAQ,sBAAsB;AAAA,IACrF,EAAE,QAAQ,KAAK,aAAa,2BAA2B,QAAQ,sBAAsB;AAAA,IACrF,EAAE,QAAQ,KAAK,aAAa,yBAAyB,QAAQ,sBAAsB;AAAA,EACrF;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,EACR;AACF;",
+  "names": []
+}

package/dist/modules/dashboards/api/widgets/data/route.js

@@ -1,5 +1,4 @@
 import { NextResponse } from "next/server";
-import { z } from "zod";
 import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
 import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
 import { resolveOrganizationScopeForRequest } from "@open-mercato/core/modules/directory/utils/organizationScope";
@@ -8,83 +7,10 @@ import {
   WidgetDataValidationError
 } from "../../../services/widgetDataService.js";
 import { dashboardsTag, dashboardsErrorSchema } from "../../openapi.js";
+import { widgetDataRequestSchema, widgetDataResponseSchema } from "./schema.js";
 const metadata = {
   POST: { requireAuth: true, requireFeatures: ["analytics.view"] }
 };
-const aggregateFunctionSchema = z.enum(["count", "sum", "avg", "min", "max"]);
-const dateGranularitySchema = z.enum(["day", "week", "month", "quarter", "year"]);
-const dateRangePresetSchema = z.enum([
-  "today",
-  "yesterday",
-  "this_week",
-  "last_week",
-  "this_month",
-  "last_month",
-  "this_quarter",
-  "last_quarter",
-  "this_year",
-  "last_year",
-  "last_7_days",
-  "last_30_days",
-  "last_90_days"
-]);
-const filterOperatorSchema = z.enum([
-  "eq",
-  "neq",
-  "gt",
-  "gte",
-  "lt",
-  "lte",
-  "in",
-  "not_in",
-  "is_null",
-  "is_not_null"
-]);
-const widgetDataRequestSchema = z.object({
-  entityType: z.string().min(1),
-  metric: z.object({
-    field: z.string().min(1),
-    aggregate: aggregateFunctionSchema
-  }),
-  groupBy: z.object({
-    field: z.string().min(1),
-    granularity: dateGranularitySchema.optional(),
-    limit: z.number().int().min(1).max(100).optional(),
-    resolveLabels: z.boolean().optional()
-  }).optional(),
-  filters: z.array(
-    z.object({
-      field: z.string().min(1),
-      operator: filterOperatorSchema,
-      value: z.unknown().optional()
-    })
-  ).optional(),
-  dateRange: z.object({
-    field: z.string().min(1),
-    preset: dateRangePresetSchema
-  }).optional(),
-  comparison: z.object({
-    type: z.enum(["previous_period", "previous_year"])
-  }).optional()
-});
-const widgetDataItemSchema = z.object({
-  groupKey: z.unknown(),
-  groupLabel: z.string().optional(),
-  value: z.number().nullable()
-});
-const widgetDataResponseSchema = z.object({
-  value: z.number().nullable(),
-  data: z.array(widgetDataItemSchema),
-  comparison: z.object({
-    value: z.number().nullable(),
-    change: z.number(),
-    direction: z.enum(["up", "down", "unchanged"])
-  }).optional(),
-  metadata: z.object({
-    fetchedAt: z.string(),
-    recordCount: z.number()
-  })
-});
 async function POST(req) {
   const auth = await getAuthFromRequest(req);
   if (!auth) {

package/dist/modules/dashboards/api/widgets/data/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../src/modules/dashboards/api/widgets/data/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport type { CacheStrategy } from '@open-mercato/cache'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport {\n  createWidgetDataService,\n  type WidgetDataRequest,\n  WidgetDataValidationError,\n} from '../../../services/widgetDataService'\nimport type { AnalyticsRegistry } from '../../../services/analyticsRegistry'\nimport type { OpenApiMethodDoc, OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { dashboardsTag, dashboardsErrorSchema } from '../../openapi'\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: ['analytics.view'] },\n}\n\nconst aggregateFunctionSchema = z.enum(['count', 'sum', 'avg', 'min', 'max'])\nconst dateGranularitySchema = z.enum(['day', 'week', 'month', 'quarter', 'year'])\nconst dateRangePresetSchema = z.enum([\n  'today',\n  'yesterday',\n  'this_week',\n  'last_week',\n  'this_month',\n  'last_month',\n  'this_quarter',\n  'last_quarter',\n  'this_year',\n  'last_year',\n  'last_7_days',\n  'last_30_days',\n  'last_90_days',\n])\n\nconst filterOperatorSchema = z.enum([\n  'eq',\n  'neq',\n  'gt',\n  'gte',\n  'lt',\n  'lte',\n  'in',\n  'not_in',\n  'is_null',\n  'is_not_null',\n])\n\nconst widgetDataRequestSchema = z.object({\n  entityType: z.string().min(1),\n  metric: z.object({\n    field: z.string().min(1),\n    aggregate: aggregateFunctionSchema,\n  }),\n  groupBy: z\n    .object({\n      field: z.string().min(1),\n      granularity: dateGranularitySchema.optional(),\n      limit: z.number().int().min(1).max(100).optional(),\n      resolveLabels: z.boolean().optional(),\n    })\n    .optional(),\n  filters: z\n    .array(\n      z.object({\n        field: z.string().min(1),\n        operator: filterOperatorSchema,\n        value: z.unknown().optional(),\n      }),\n    )\n    .optional(),\n  dateRange: z\n    .object({\n      field: z.string().min(1),\n      preset: dateRangePresetSchema,\n    })\n    .optional(),\n  comparison: z\n    .object({\n      type: z.enum(['previous_period', 'previous_year']),\n    })\n    .optional(),\n})\n\nconst widgetDataItemSchema = z.object({\n  groupKey: z.unknown(),\n  groupLabel: z.string().optional(),\n  value: z.number().nullable(),\n})\n\nconst widgetDataResponseSchema = z.object({\n  value: z.number().nullable(),\n  data: z.array(widgetDataItemSchema),\n  comparison: z\n    .object({\n      value: z.number().nullable(),\n      change: z.number(),\n      direction: z.enum(['up', 'down', 'unchanged']),\n    })\n    .optional(),\n  metadata: z.object({\n    fetchedAt: z.string(),\n    recordCount: z.number(),\n  }),\n})\n\nexport async function POST(req: Request) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n\n  let body: unknown\n  try {\n    body = await req.json()\n  } catch {\n    return NextResponse.json({ error: 'Invalid JSON body' }, { status: 400 })\n  }\n\n  const parsed = widgetDataRequestSchema.safeParse(body)\n  if (!parsed.success) {\n    return NextResponse.json(\n      { error: 'Invalid request payload', issues: parsed.error.issues },\n      { status: 400 },\n    )\n  }\n\n  const container = await createRequestContainer()\n  const analyticsRegistry = container.resolve<AnalyticsRegistry>('analyticsRegistry')\n\n  const entityFeatures = analyticsRegistry.getRequiredFeatures(parsed.data.entityType)\n  if (entityFeatures && entityFeatures.length > 0) {\n    const rbacService = container.resolve<{\n      userHasAllFeatures: (\n        userId: string,\n        features: string[],\n        scope: { tenantId: string; organizationId?: string | null },\n      ) => Promise<boolean>\n    }>('rbacService')\n    const hasAccess = await rbacService.userHasAllFeatures(auth.sub, entityFeatures, {\n      tenantId: auth.tenantId!,\n      organizationId: auth.orgId,\n    })\n    if (!hasAccess) {\n      return NextResponse.json({ error: 'Forbidden' }, { status: 403 })\n    }\n  }\n\n  const em = (container.resolve('em') as EntityManager).fork({\n    clear: true,\n    freshEventManager: true,\n    useContext: true,\n  })\n\n  const tenantId = auth.tenantId ?? null\n  if (!tenantId) {\n    return NextResponse.json({ error: 'Tenant context is required' }, { status: 400 })\n  }\n\n  const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n\n  const organizationIds = (() => {\n    if (scope?.selectedId) return [scope.selectedId]\n    if (Array.isArray(scope?.filterIds) && scope.filterIds.length > 0) return scope.filterIds\n    if (scope?.allowedIds === null) return undefined\n    if (auth.orgId) return [auth.orgId]\n    return undefined\n  })()\n\n  try {\n    const cache = container.resolve<CacheStrategy>('cache')\n    const service = createWidgetDataService(em, { tenantId, organizationIds }, analyticsRegistry, cache)\n    const result = await service.fetchWidgetData(parsed.data as WidgetDataRequest)\n    return NextResponse.json(result)\n  } catch (err) {\n    console.error('[widgets/data] Error:', err)\n    if (err instanceof WidgetDataValidationError) {\n      return NextResponse.json({ error: err.message }, { status: 400 })\n    }\n    return NextResponse.json(\n      { error: 'An error occurred while processing your request' },\n      { status: 500 },\n    )\n  }\n}\n\nconst widgetDataPostDoc: OpenApiMethodDoc = {\n  summary: 'Fetch aggregated data for dashboard widgets',\n  description:\n    'Executes an aggregation query against the specified entity type and returns the result. Supports date range filtering, grouping, and period-over-period comparison.',\n  tags: [dashboardsTag],\n  requestBody: {\n    contentType: 'application/json',\n    schema: widgetDataRequestSchema,\n    description: 'Widget data request configuration specifying entity type, metric, filters, and grouping.',\n  },\n  responses: [\n    {\n      status: 200,\n      description: 'Aggregated data for the widget.',\n      schema: widgetDataResponseSchema,\n    },\n  ],\n  errors: [\n    { status: 400, description: 'Invalid request payload', schema: dashboardsErrorSchema },\n    { status: 401, description: 'Authentication required', schema: dashboardsErrorSchema },\n    { status: 403, description: 'Missing analytics.view feature', schema: dashboardsErrorSchema },\n    { status: 500, description: 'Internal server error', schema: dashboardsErrorSchema },\n  ],\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: dashboardsTag,\n  summary: 'Widget data aggregation endpoint',\n  methods: {\n    POST: widgetDataPostDoc,\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAGlB,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AACvC,SAAS,0CAA0C;AACnD;AAAA,EACE;AAAA,EAEA;AAAA,OACK;AAGP,SAAS,eAAe,6BAA6B;AAE9C,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,gBAAgB,EAAE;AACjE;AAEA,MAAM,0BAA0B,EAAE,KAAK,CAAC,SAAS,OAAO,OAAO,OAAO,KAAK,CAAC;AAC5E,MAAM,wBAAwB,EAAE,KAAK,CAAC,OAAO,QAAQ,SAAS,WAAW,MAAM,CAAC;AAChF,MAAM,wBAAwB,EAAE,KAAK;AAAA,EACnC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAED,MAAM,uBAAuB,EAAE,KAAK;AAAA,EAClC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAED,MAAM,0BAA0B,EAAE,OAAO;AAAA,EACvC,YAAY,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EAC5B,QAAQ,EAAE,OAAO;AAAA,IACf,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,IACvB,WAAW;AAAA,EACb,CAAC;AAAA,EACD,SAAS,EACN,OAAO;AAAA,IACN,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,IACvB,aAAa,sBAAsB,SAAS;AAAA,IAC5C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,IACjD,eAAe,EAAE,QAAQ,EAAE,SAAS;AAAA,EACtC,CAAC,EACA,SAAS;AAAA,EACZ,SAAS,EACN;AAAA,IACC,EAAE,OAAO;AAAA,MACP,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,MACvB,UAAU;AAAA,MACV,OAAO,EAAE,QAAQ,EAAE,SAAS;AAAA,IAC9B,CAAC;AAAA,EACH,EACC,SAAS;AAAA,EACZ,WAAW,EACR,OAAO;AAAA,IACN,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,IACvB,QAAQ;AAAA,EACV,CAAC,EACA,SAAS;AAAA,EACZ,YAAY,EACT,OAAO;AAAA,IACN,MAAM,EAAE,KAAK,CAAC,mBAAmB,eAAe,CAAC;AAAA,EACnD,CAAC,EACA,SAAS;AACd,CAAC;AAED,MAAM,uBAAuB,EAAE,OAAO;AAAA,EACpC,UAAU,EAAE,QAAQ;AAAA,EACpB,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,EAChC,OAAO,EAAE,OAAO,EAAE,SAAS;AAC7B,CAAC;AAED,MAAM,2BAA2B,EAAE,OAAO;AAAA,EACxC,OAAO,EAAE,OAAO,EAAE,SAAS;AAAA,EAC3B,MAAM,EAAE,MAAM,oBAAoB;AAAA,EAClC,YAAY,EACT,OAAO;AAAA,IACN,OAAO,EAAE,OAAO,EAAE,SAAS;AAAA,IAC3B,QAAQ,EAAE,OAAO;AAAA,IACjB,WAAW,EAAE,KAAK,CAAC,MAAM,QAAQ,WAAW,CAAC;AAAA,EAC/C,CAAC,EACA,SAAS;AAAA,EACZ,UAAU,EAAE,OAAO;AAAA,IACjB,WAAW,EAAE,OAAO;AAAA,IACpB,aAAa,EAAE,OAAO;AAAA,EACxB,CAAC;AACH,CAAC;AAED,eAAsB,KAAK,KAAc;AACvC,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM;AACT,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAEA,MAAI;AACJ,MAAI;AACF,WAAO,MAAM,IAAI,KAAK;AAAA,EACxB,QAAQ;AACN,WAAO,aAAa,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC1E;AAEA,QAAM,SAAS,wBAAwB,UAAU,IAAI;AACrD,MAAI,CAAC,OAAO,SAAS;AACnB,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,2BAA2B,QAAQ,OAAO,MAAM,OAAO;AAAA,MAChE,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,oBAAoB,UAAU,QAA2B,mBAAmB;AAElF,QAAM,iBAAiB,kBAAkB,oBAAoB,OAAO,KAAK,UAAU;AACnF,MAAI,kBAAkB,eAAe,SAAS,GAAG;AAC/C,UAAM,cAAc,UAAU,QAM3B,aAAa;AAChB,UAAM,YAAY,MAAM,YAAY,mBAAmB,KAAK,KAAK,gBAAgB;AAAA,MAC/E,UAAU,KAAK;AAAA,MACf,gBAAgB,KAAK;AAAA,IACvB,CAAC;AACD,QAAI,CAAC,WAAW;AACd,aAAO,aAAa,KAAK,EAAE,OAAO,YAAY,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAClE;AAAA,EACF;AAEA,QAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAAA,IACzD,OAAO;AAAA,IACP,mBAAmB;AAAA,IACnB,YAAY;AAAA,EACd,CAAC;AAED,QAAM,WAAW,KAAK,YAAY;AAClC,MAAI,CAAC,UAAU;AACb,WAAO,aAAa,KAAK,EAAE,OAAO,6BAA6B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACnF;AAEA,QAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AAExF,QAAM,mBAAmB,MAAM;AAC7B,QAAI,OAAO,WAAY,QAAO,CAAC,MAAM,UAAU;AAC/C,QAAI,MAAM,QAAQ,OAAO,SAAS,KAAK,MAAM,UAAU,SAAS,EAAG,QAAO,MAAM;AAChF,QAAI,OAAO,eAAe,KAAM,QAAO;AACvC,QAAI,KAAK,MAAO,QAAO,CAAC,KAAK,KAAK;AAClC,WAAO;AAAA,EACT,GAAG;AAEH,MAAI;AACF,UAAM,QAAQ,UAAU,QAAuB,OAAO;AACtD,UAAM,UAAU,wBAAwB,IAAI,EAAE,UAAU,gBAAgB,GAAG,mBAAmB,KAAK;AACnG,UAAM,SAAS,MAAM,QAAQ,gBAAgB,OAAO,IAAyB;AAC7E,WAAO,aAAa,KAAK,MAAM;AAAA,EACjC,SAAS,KAAK;AACZ,YAAQ,MAAM,yBAAyB,GAAG;AAC1C,QAAI,eAAe,2BAA2B;AAC5C,aAAO,aAAa,KAAK,EAAE,OAAO,IAAI,QAAQ,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAClE;AACA,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,kDAAkD;AAAA,MAC3D,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAEA,MAAM,oBAAsC;AAAA,EAC1C,SAAS;AAAA,EACT,aACE;AAAA,EACF,MAAM,CAAC,aAAa;AAAA,EACpB,aAAa;AAAA,IACX,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,aAAa;AAAA,EACf;AAAA,EACA,WAAW;AAAA,IACT;AAAA,MACE,QAAQ;AAAA,MACR,aAAa;AAAA,MACb,QAAQ;AAAA,IACV;AAAA,EACF;AAAA,EACA,QAAQ;AAAA,IACN,EAAE,QAAQ,KAAK,aAAa,2BAA2B,QAAQ,sBAAsB;AAAA,IACrF,EAAE,QAAQ,KAAK,aAAa,2BAA2B,QAAQ,sBAAsB;AAAA,IACrF,EAAE,QAAQ,KAAK,aAAa,kCAAkC,QAAQ,sBAAsB;AAAA,IAC5F,EAAE,QAAQ,KAAK,aAAa,yBAAyB,QAAQ,sBAAsB;AAAA,EACrF;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,EACR;AACF;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport type { CacheStrategy } from '@open-mercato/cache'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport {\n  createWidgetDataService,\n  type WidgetDataRequest,\n  WidgetDataValidationError,\n} from '../../../services/widgetDataService'\nimport type { AnalyticsRegistry } from '../../../services/analyticsRegistry'\nimport type { OpenApiMethodDoc, OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { dashboardsTag, dashboardsErrorSchema } from '../../openapi'\nimport { widgetDataRequestSchema, widgetDataResponseSchema } from './schema'\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: ['analytics.view'] },\n}\n\nexport async function POST(req: Request) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n\n  let body: unknown\n  try {\n    body = await req.json()\n  } catch {\n    return NextResponse.json({ error: 'Invalid JSON body' }, { status: 400 })\n  }\n\n  const parsed = widgetDataRequestSchema.safeParse(body)\n  if (!parsed.success) {\n    return NextResponse.json(\n      { error: 'Invalid request payload', issues: parsed.error.issues },\n      { status: 400 },\n    )\n  }\n\n  const container = await createRequestContainer()\n  const analyticsRegistry = container.resolve<AnalyticsRegistry>('analyticsRegistry')\n\n  const entityFeatures = analyticsRegistry.getRequiredFeatures(parsed.data.entityType)\n  if (entityFeatures && entityFeatures.length > 0) {\n    const rbacService = container.resolve<{\n      userHasAllFeatures: (\n        userId: string,\n        features: string[],\n        scope: { tenantId: string; organizationId?: string | null },\n      ) => Promise<boolean>\n    }>('rbacService')\n    const hasAccess = await rbacService.userHasAllFeatures(auth.sub, entityFeatures, {\n      tenantId: auth.tenantId!,\n      organizationId: auth.orgId,\n    })\n    if (!hasAccess) {\n      return NextResponse.json({ error: 'Forbidden' }, { status: 403 })\n    }\n  }\n\n  const em = (container.resolve('em') as EntityManager).fork({\n    clear: true,\n    freshEventManager: true,\n    useContext: true,\n  })\n\n  const tenantId = auth.tenantId ?? null\n  if (!tenantId) {\n    return NextResponse.json({ error: 'Tenant context is required' }, { status: 400 })\n  }\n\n  const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n\n  const organizationIds = (() => {\n    if (scope?.selectedId) return [scope.selectedId]\n    if (Array.isArray(scope?.filterIds) && scope.filterIds.length > 0) return scope.filterIds\n    if (scope?.allowedIds === null) return undefined\n    if (auth.orgId) return [auth.orgId]\n    return undefined\n  })()\n\n  try {\n    const cache = container.resolve<CacheStrategy>('cache')\n    const service = createWidgetDataService(em, { tenantId, organizationIds }, analyticsRegistry, cache)\n    const result = await service.fetchWidgetData(parsed.data as WidgetDataRequest)\n    return NextResponse.json(result)\n  } catch (err) {\n    console.error('[widgets/data] Error:', err)\n    if (err instanceof WidgetDataValidationError) {\n      return NextResponse.json({ error: err.message }, { status: 400 })\n    }\n    return NextResponse.json(\n      { error: 'An error occurred while processing your request' },\n      { status: 500 },\n    )\n  }\n}\n\nconst widgetDataPostDoc: OpenApiMethodDoc = {\n  summary: 'Fetch aggregated data for dashboard widgets',\n  description:\n    'Executes an aggregation query against the specified entity type and returns the result. Supports date range filtering, grouping, and period-over-period comparison.',\n  tags: [dashboardsTag],\n  requestBody: {\n    contentType: 'application/json',\n    schema: widgetDataRequestSchema,\n    description: 'Widget data request configuration specifying entity type, metric, filters, and grouping.',\n  },\n  responses: [\n    {\n      status: 200,\n      description: 'Aggregated data for the widget.',\n      schema: widgetDataResponseSchema,\n    },\n  ],\n  errors: [\n    { status: 400, description: 'Invalid request payload', schema: dashboardsErrorSchema },\n    { status: 401, description: 'Authentication required', schema: dashboardsErrorSchema },\n    { status: 403, description: 'Missing analytics.view feature', schema: dashboardsErrorSchema },\n    { status: 500, description: 'Internal server error', schema: dashboardsErrorSchema },\n  ],\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: dashboardsTag,\n  summary: 'Widget data aggregation endpoint',\n  methods: {\n    POST: widgetDataPostDoc,\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAG7B,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AACvC,SAAS,0CAA0C;AACnD;AAAA,EACE;AAAA,EAEA;AAAA,OACK;AAGP,SAAS,eAAe,6BAA6B;AACrD,SAAS,yBAAyB,gCAAgC;AAE3D,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,gBAAgB,EAAE;AACjE;AAEA,eAAsB,KAAK,KAAc;AACvC,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM;AACT,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAEA,MAAI;AACJ,MAAI;AACF,WAAO,MAAM,IAAI,KAAK;AAAA,EACxB,QAAQ;AACN,WAAO,aAAa,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC1E;AAEA,QAAM,SAAS,wBAAwB,UAAU,IAAI;AACrD,MAAI,CAAC,OAAO,SAAS;AACnB,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,2BAA2B,QAAQ,OAAO,MAAM,OAAO;AAAA,MAChE,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,oBAAoB,UAAU,QAA2B,mBAAmB;AAElF,QAAM,iBAAiB,kBAAkB,oBAAoB,OAAO,KAAK,UAAU;AACnF,MAAI,kBAAkB,eAAe,SAAS,GAAG;AAC/C,UAAM,cAAc,UAAU,QAM3B,aAAa;AAChB,UAAM,YAAY,MAAM,YAAY,mBAAmB,KAAK,KAAK,gBAAgB;AAAA,MAC/E,UAAU,KAAK;AAAA,MACf,gBAAgB,KAAK;AAAA,IACvB,CAAC;AACD,QAAI,CAAC,WAAW;AACd,aAAO,aAAa,KAAK,EAAE,OAAO,YAAY,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAClE;AAAA,EACF;AAEA,QAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAAA,IACzD,OAAO;AAAA,IACP,mBAAmB;AAAA,IACnB,YAAY;AAAA,EACd,CAAC;AAED,QAAM,WAAW,KAAK,YAAY;AAClC,MAAI,CAAC,UAAU;AACb,WAAO,aAAa,KAAK,EAAE,OAAO,6BAA6B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACnF;AAEA,QAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AAExF,QAAM,mBAAmB,MAAM;AAC7B,QAAI,OAAO,WAAY,QAAO,CAAC,MAAM,UAAU;AAC/C,QAAI,MAAM,QAAQ,OAAO,SAAS,KAAK,MAAM,UAAU,SAAS,EAAG,QAAO,MAAM;AAChF,QAAI,OAAO,eAAe,KAAM,QAAO;AACvC,QAAI,KAAK,MAAO,QAAO,CAAC,KAAK,KAAK;AAClC,WAAO;AAAA,EACT,GAAG;AAEH,MAAI;AACF,UAAM,QAAQ,UAAU,QAAuB,OAAO;AACtD,UAAM,UAAU,wBAAwB,IAAI,EAAE,UAAU,gBAAgB,GAAG,mBAAmB,KAAK;AACnG,UAAM,SAAS,MAAM,QAAQ,gBAAgB,OAAO,IAAyB;AAC7E,WAAO,aAAa,KAAK,MAAM;AAAA,EACjC,SAAS,KAAK;AACZ,YAAQ,MAAM,yBAAyB,GAAG;AAC1C,QAAI,eAAe,2BAA2B;AAC5C,aAAO,aAAa,KAAK,EAAE,OAAO,IAAI,QAAQ,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAClE;AACA,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,kDAAkD;AAAA,MAC3D,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAEA,MAAM,oBAAsC;AAAA,EAC1C,SAAS;AAAA,EACT,aACE;AAAA,EACF,MAAM,CAAC,aAAa;AAAA,EACpB,aAAa;AAAA,IACX,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,aAAa;AAAA,EACf;AAAA,EACA,WAAW;AAAA,IACT;AAAA,MACE,QAAQ;AAAA,MACR,aAAa;AAAA,MACb,QAAQ;AAAA,IACV;AAAA,EACF;AAAA,EACA,QAAQ;AAAA,IACN,EAAE,QAAQ,KAAK,aAAa,2BAA2B,QAAQ,sBAAsB;AAAA,IACrF,EAAE,QAAQ,KAAK,aAAa,2BAA2B,QAAQ,sBAAsB;AAAA,IACrF,EAAE,QAAQ,KAAK,aAAa,kCAAkC,QAAQ,sBAAsB;AAAA,IAC5F,EAAE,QAAQ,KAAK,aAAa,yBAAyB,QAAQ,sBAAsB;AAAA,EACrF;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,EACR;AACF;",
   "names": []
 }

package/dist/modules/dashboards/api/widgets/data/schema.js

@@ -0,0 +1,85 @@
+import { z } from "zod";
+const aggregateFunctionSchema = z.enum(["count", "sum", "avg", "min", "max"]);
+const dateGranularitySchema = z.enum(["day", "week", "month", "quarter", "year"]);
+const dateRangePresetSchema = z.enum([
+  "today",
+  "yesterday",
+  "this_week",
+  "last_week",
+  "this_month",
+  "last_month",
+  "this_quarter",
+  "last_quarter",
+  "this_year",
+  "last_year",
+  "last_7_days",
+  "last_30_days",
+  "last_90_days"
+]);
+const filterOperatorSchema = z.enum([
+  "eq",
+  "neq",
+  "gt",
+  "gte",
+  "lt",
+  "lte",
+  "in",
+  "not_in",
+  "is_null",
+  "is_not_null"
+]);
+const widgetDataRequestSchema = z.object({
+  entityType: z.string().min(1),
+  metric: z.object({
+    field: z.string().min(1),
+    aggregate: aggregateFunctionSchema
+  }),
+  groupBy: z.object({
+    field: z.string().min(1),
+    granularity: dateGranularitySchema.optional(),
+    limit: z.number().int().min(1).max(100).optional(),
+    resolveLabels: z.boolean().optional()
+  }).optional(),
+  filters: z.array(
+    z.object({
+      field: z.string().min(1),
+      operator: filterOperatorSchema,
+      value: z.unknown().optional()
+    })
+  ).optional(),
+  dateRange: z.object({
+    field: z.string().min(1),
+    preset: dateRangePresetSchema
+  }).optional(),
+  comparison: z.object({
+    type: z.enum(["previous_period", "previous_year"])
+  }).optional()
+});
+const widgetDataItemSchema = z.object({
+  groupKey: z.unknown(),
+  groupLabel: z.string().optional(),
+  value: z.number().nullable()
+});
+const widgetDataResponseSchema = z.object({
+  value: z.number().nullable(),
+  data: z.array(widgetDataItemSchema),
+  comparison: z.object({
+    value: z.number().nullable(),
+    change: z.number(),
+    direction: z.enum(["up", "down", "unchanged"])
+  }).optional(),
+  metadata: z.object({
+    fetchedAt: z.string(),
+    recordCount: z.number()
+  })
+});
+export {
+  aggregateFunctionSchema,
+  dateGranularitySchema,
+  dateRangePresetSchema,
+  filterOperatorSchema,
+  widgetDataItemSchema,
+  widgetDataRequestSchema,
+  widgetDataResponseSchema
+};
+//# sourceMappingURL=schema.js.map

package/dist/modules/dashboards/api/widgets/data/schema.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../src/modules/dashboards/api/widgets/data/schema.ts"],
+  "sourcesContent": ["import { z } from 'zod'\n\nexport const aggregateFunctionSchema = z.enum(['count', 'sum', 'avg', 'min', 'max'])\nexport const dateGranularitySchema = z.enum(['day', 'week', 'month', 'quarter', 'year'])\nexport const dateRangePresetSchema = z.enum([\n  'today',\n  'yesterday',\n  'this_week',\n  'last_week',\n  'this_month',\n  'last_month',\n  'this_quarter',\n  'last_quarter',\n  'this_year',\n  'last_year',\n  'last_7_days',\n  'last_30_days',\n  'last_90_days',\n])\n\nexport const filterOperatorSchema = z.enum([\n  'eq',\n  'neq',\n  'gt',\n  'gte',\n  'lt',\n  'lte',\n  'in',\n  'not_in',\n  'is_null',\n  'is_not_null',\n])\n\nexport const widgetDataRequestSchema = z.object({\n  entityType: z.string().min(1),\n  metric: z.object({\n    field: z.string().min(1),\n    aggregate: aggregateFunctionSchema,\n  }),\n  groupBy: z\n    .object({\n      field: z.string().min(1),\n      granularity: dateGranularitySchema.optional(),\n      limit: z.number().int().min(1).max(100).optional(),\n      resolveLabels: z.boolean().optional(),\n    })\n    .optional(),\n  filters: z\n    .array(\n      z.object({\n        field: z.string().min(1),\n        operator: filterOperatorSchema,\n        value: z.unknown().optional(),\n      }),\n    )\n    .optional(),\n  dateRange: z\n    .object({\n      field: z.string().min(1),\n      preset: dateRangePresetSchema,\n    })\n    .optional(),\n  comparison: z\n    .object({\n      type: z.enum(['previous_period', 'previous_year']),\n    })\n    .optional(),\n})\n\nexport const widgetDataItemSchema = z.object({\n  groupKey: z.unknown(),\n  groupLabel: z.string().optional(),\n  value: z.number().nullable(),\n})\n\nexport const widgetDataResponseSchema = z.object({\n  value: z.number().nullable(),\n  data: z.array(widgetDataItemSchema),\n  comparison: z\n    .object({\n      value: z.number().nullable(),\n      change: z.number(),\n      direction: z.enum(['up', 'down', 'unchanged']),\n    })\n    .optional(),\n  metadata: z.object({\n    fetchedAt: z.string(),\n    recordCount: z.number(),\n  }),\n})\n"],
+  "mappings": "AAAA,SAAS,SAAS;AAEX,MAAM,0BAA0B,EAAE,KAAK,CAAC,SAAS,OAAO,OAAO,OAAO,KAAK,CAAC;AAC5E,MAAM,wBAAwB,EAAE,KAAK,CAAC,OAAO,QAAQ,SAAS,WAAW,MAAM,CAAC;AAChF,MAAM,wBAAwB,EAAE,KAAK;AAAA,EAC1C;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAEM,MAAM,uBAAuB,EAAE,KAAK;AAAA,EACzC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAEM,MAAM,0BAA0B,EAAE,OAAO;AAAA,EAC9C,YAAY,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EAC5B,QAAQ,EAAE,OAAO;AAAA,IACf,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,IACvB,WAAW;AAAA,EACb,CAAC;AAAA,EACD,SAAS,EACN,OAAO;AAAA,IACN,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,IACvB,aAAa,sBAAsB,SAAS;AAAA,IAC5C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,IACjD,eAAe,EAAE,QAAQ,EAAE,SAAS;AAAA,EACtC,CAAC,EACA,SAAS;AAAA,EACZ,SAAS,EACN;AAAA,IACC,EAAE,OAAO;AAAA,MACP,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,MACvB,UAAU;AAAA,MACV,OAAO,EAAE,QAAQ,EAAE,SAAS;AAAA,IAC9B,CAAC;AAAA,EACH,EACC,SAAS;AAAA,EACZ,WAAW,EACR,OAAO;AAAA,IACN,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,IACvB,QAAQ;AAAA,EACV,CAAC,EACA,SAAS;AAAA,EACZ,YAAY,EACT,OAAO;AAAA,IACN,MAAM,EAAE,KAAK,CAAC,mBAAmB,eAAe,CAAC;AAAA,EACnD,CAAC,EACA,SAAS;AACd,CAAC;AAEM,MAAM,uBAAuB,EAAE,OAAO;AAAA,EAC3C,UAAU,EAAE,QAAQ;AAAA,EACpB,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,EAChC,OAAO,EAAE,OAAO,EAAE,SAAS;AAC7B,CAAC;AAEM,MAAM,2BAA2B,EAAE,OAAO;AAAA,EAC/C,OAAO,EAAE,OAAO,EAAE,SAAS;AAAA,EAC3B,MAAM,EAAE,MAAM,oBAAoB;AAAA,EAClC,YAAY,EACT,OAAO;AAAA,IACN,OAAO,EAAE,OAAO,EAAE,SAAS;AAAA,IAC3B,QAAQ,EAAE,OAAO;AAAA,IACjB,WAAW,EAAE,KAAK,CAAC,MAAM,QAAQ,WAAW,CAAC;AAAA,EAC/C,CAAC,EACA,SAAS;AAAA,EACZ,UAAU,EAAE,OAAO;AAAA,IACjB,WAAW,EAAE,OAAO;AAAA,IACpB,aAAa,EAAE,OAAO;AAAA,EACxB,CAAC;AACH,CAAC;",
+  "names": []
+}

package/dist/modules/dashboards/lib/widgetDataBatch.js

@@ -0,0 +1,49 @@
+async function resolveEntityFeatureAccess(entityTypes, getRequiredFeatures, checkFeatures) {
+  const access = /* @__PURE__ */ new Map();
+  const featuresByEntity = /* @__PURE__ */ new Map();
+  const unionFeatures = /* @__PURE__ */ new Set();
+  for (const entityType of new Set(entityTypes)) {
+    const features = getRequiredFeatures(entityType) ?? [];
+    featuresByEntity.set(entityType, features);
+    if (features.length === 0) {
+      access.set(entityType, true);
+    } else {
+      for (const feature of features) unionFeatures.add(feature);
+    }
+  }
+  const gated = [...featuresByEntity.entries()].filter(([, features]) => features.length > 0);
+  if (gated.length === 0) return access;
+  if (await checkFeatures([...unionFeatures])) {
+    for (const [entityType] of gated) access.set(entityType, true);
+    return access;
+  }
+  for (const [entityType, features] of gated) {
+    access.set(entityType, await checkFeatures(features));
+  }
+  return access;
+}
+async function runWidgetDataBatch(entries, deps) {
+  const access = await resolveEntityFeatureAccess(
+    entries.map((entry) => entry.request.entityType),
+    deps.getRequiredFeatures,
+    deps.checkFeatures
+  );
+  return Promise.all(
+    entries.map(async (entry) => {
+      if (access.get(entry.request.entityType) === false) {
+        return { id: entry.id, ok: false, error: "Forbidden" };
+      }
+      try {
+        const data = await deps.fetchOne(entry.request);
+        return { id: entry.id, ok: true, data };
+      } catch (error) {
+        return { id: entry.id, ok: false, error: deps.describeError(error) };
+      }
+    })
+  );
+}
+export {
+  resolveEntityFeatureAccess,
+  runWidgetDataBatch
+};
+//# sourceMappingURL=widgetDataBatch.js.map

package/dist/modules/dashboards/lib/widgetDataBatch.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/dashboards/lib/widgetDataBatch.ts"],
+  "sourcesContent": ["import type { WidgetDataRequest, WidgetDataResponse } from '../services/widgetDataService'\n\nexport type WidgetDataBatchEntry = {\n  id: string\n  request: WidgetDataRequest\n}\n\nexport type WidgetDataBatchResult =\n  | { id: string; ok: true; data: WidgetDataResponse }\n  | { id: string; ok: false; error: string }\n\nexport type WidgetDataBatchDeps = {\n  getRequiredFeatures: (entityType: string) => string[] | null\n  checkFeatures: (features: string[]) => Promise<boolean>\n  fetchOne: (request: WidgetDataRequest) => Promise<WidgetDataResponse>\n  describeError: (error: unknown) => string\n}\n\n/**\n * Resolves per-entity-type feature access for a batch of widget requests while\n * collapsing the common case to a single RBAC resolution. The happy path checks\n * the union of all required features once; only when the union check fails do we\n * fall back to per-entity-type checks so a single privileged entity type does\n * not reject widgets the caller is allowed to see.\n */\nexport async function resolveEntityFeatureAccess(\n  entityTypes: string[],\n  getRequiredFeatures: (entityType: string) => string[] | null,\n  checkFeatures: (features: string[]) => Promise<boolean>,\n): Promise<Map<string, boolean>> {\n  const access = new Map<string, boolean>()\n  const featuresByEntity = new Map<string, string[]>()\n  const unionFeatures = new Set<string>()\n\n  for (const entityType of new Set(entityTypes)) {\n    const features = getRequiredFeatures(entityType) ?? []\n    featuresByEntity.set(entityType, features)\n    if (features.length === 0) {\n      access.set(entityType, true)\n    } else {\n      for (const feature of features) unionFeatures.add(feature)\n    }\n  }\n\n  const gated = [...featuresByEntity.entries()].filter(([, features]) => features.length > 0)\n  if (gated.length === 0) return access\n\n  if (await checkFeatures([...unionFeatures])) {\n    for (const [entityType] of gated) access.set(entityType, true)\n    return access\n  }\n\n  for (const [entityType, features] of gated) {\n    access.set(entityType, await checkFeatures(features))\n  }\n  return access\n}\n\n/**\n * Runs a batch of widget-data requests against shared request-scoped\n * dependencies (a single container, RBAC resolution, org-scope, and EM fork).\n * Feature access is resolved once up front; each request is then executed\n * concurrently with per-widget error isolation so one bad request never fails\n * the whole batch.\n */\nexport async function runWidgetDataBatch(\n  entries: WidgetDataBatchEntry[],\n  deps: WidgetDataBatchDeps,\n): Promise<WidgetDataBatchResult[]> {\n  const access = await resolveEntityFeatureAccess(\n    entries.map((entry) => entry.request.entityType),\n    deps.getRequiredFeatures,\n    deps.checkFeatures,\n  )\n\n  return Promise.all(\n    entries.map(async (entry): Promise<WidgetDataBatchResult> => {\n      if (access.get(entry.request.entityType) === false) {\n        return { id: entry.id, ok: false, error: 'Forbidden' }\n      }\n      try {\n        const data = await deps.fetchOne(entry.request)\n        return { id: entry.id, ok: true, data }\n      } catch (error) {\n        return { id: entry.id, ok: false, error: deps.describeError(error) }\n      }\n    }),\n  )\n}\n"],
+  "mappings": "AAyBA,eAAsB,2BACpB,aACA,qBACA,eAC+B;AAC/B,QAAM,SAAS,oBAAI,IAAqB;AACxC,QAAM,mBAAmB,oBAAI,IAAsB;AACnD,QAAM,gBAAgB,oBAAI,IAAY;AAEtC,aAAW,cAAc,IAAI,IAAI,WAAW,GAAG;AAC7C,UAAM,WAAW,oBAAoB,UAAU,KAAK,CAAC;AACrD,qBAAiB,IAAI,YAAY,QAAQ;AACzC,QAAI,SAAS,WAAW,GAAG;AACzB,aAAO,IAAI,YAAY,IAAI;AAAA,IAC7B,OAAO;AACL,iBAAW,WAAW,SAAU,eAAc,IAAI,OAAO;AAAA,IAC3D;AAAA,EACF;AAEA,QAAM,QAAQ,CAAC,GAAG,iBAAiB,QAAQ,CAAC,EAAE,OAAO,CAAC,CAAC,EAAE,QAAQ,MAAM,SAAS,SAAS,CAAC;AAC1F,MAAI,MAAM,WAAW,EAAG,QAAO;AAE/B,MAAI,MAAM,cAAc,CAAC,GAAG,aAAa,CAAC,GAAG;AAC3C,eAAW,CAAC,UAAU,KAAK,MAAO,QAAO,IAAI,YAAY,IAAI;AAC7D,WAAO;AAAA,EACT;AAEA,aAAW,CAAC,YAAY,QAAQ,KAAK,OAAO;AAC1C,WAAO,IAAI,YAAY,MAAM,cAAc,QAAQ,CAAC;AAAA,EACtD;AACA,SAAO;AACT;AASA,eAAsB,mBACpB,SACA,MACkC;AAClC,QAAM,SAAS,MAAM;AAAA,IACnB,QAAQ,IAAI,CAAC,UAAU,MAAM,QAAQ,UAAU;AAAA,IAC/C,KAAK;AAAA,IACL,KAAK;AAAA,EACP;AAEA,SAAO,QAAQ;AAAA,IACb,QAAQ,IAAI,OAAO,UAA0C;AAC3D,UAAI,OAAO,IAAI,MAAM,QAAQ,UAAU,MAAM,OAAO;AAClD,eAAO,EAAE,IAAI,MAAM,IAAI,IAAI,OAAO,OAAO,YAAY;AAAA,MACvD;AACA,UAAI;AACF,cAAM,OAAO,MAAM,KAAK,SAAS,MAAM,OAAO;AAC9C,eAAO,EAAE,IAAI,MAAM,IAAI,IAAI,MAAM,KAAK;AAAA,MACxC,SAAS,OAAO;AACd,eAAO,EAAE,IAAI,MAAM,IAAI,IAAI,OAAO,OAAO,KAAK,cAAc,KAAK,EAAE;AAAA,MACrE;AAAA,IACF,CAAC;AAAA,EACH;AACF;",
+  "names": []
+}

package/dist/modules/dashboards/widgets/dashboard/aov-kpi/widget.client.js

@@ -1,7 +1,7 @@
 "use client";
 import { jsx, jsxs } from "react/jsx-runtime";
 import * as React from "react";
-import { apiCall } from "@open-mercato/ui/backend/utils/apiCall";
+import { useWidgetData } from "@open-mercato/ui/backend/dashboard/widgetData";
 import { useT } from "@open-mercato/shared/lib/i18n/context";
 import { KpiCard } from "@open-mercato/ui/backend/charts";
 import {
@@ -11,7 +11,7 @@ import {
 } from "@open-mercato/ui/backend/date-range";
 import { DEFAULT_SETTINGS, hydrateSettings } from "./config.js";
 import { formatCurrencyWithDecimals } from "../../../lib/formatters.js";
-async function fetchAovData(settings) {
+async function fetchAovData(settings, fetchWidgetData) {
   const body = {
     entityType: "sales:orders",
     metric: {
@@ -24,16 +24,7 @@ async function fetchAovData(settings) {
     },
     comparison: settings.showComparison ? { type: "previous_period" } : void 0
   };
-  const call = await apiCall("/api/dashboards/widgets/data", {
-    method: "POST",
-    headers: { "Content-Type": "application/json" },
-    body: JSON.stringify(body)
-  });
-  if (!call.ok) {
-    const errorMsg = call.result?.error;
-    throw new Error(typeof errorMsg === "string" ? errorMsg : "Failed to fetch AOV data");
-  }
-  return call.result;
+  return fetchWidgetData(body);
 }
 const AovKpiWidget = ({
   mode,
@@ -48,12 +39,13 @@ const AovKpiWidget = ({
   const [trend, setTrend] = React.useState(void 0);
   const [loading, setLoading] = React.useState(true);
   const [error, setError] = React.useState(null);
+  const fetchWidgetData = useWidgetData();
   const refresh = React.useCallback(async () => {
     onRefreshStateChange?.(true);
     setLoading(true);
     setError(null);
     try {
-      const data = await fetchAovData(hydrated);
+      const data = await fetchAovData(hydrated, fetchWidgetData);
       setValue(data.value);
       if (data.comparison) {
         setTrend({
@@ -70,7 +62,7 @@ const AovKpiWidget = ({
       setLoading(false);
       onRefreshStateChange?.(false);
     }
-  }, [hydrated, onRefreshStateChange, t]);
+  }, [hydrated, fetchWidgetData, onRefreshStateChange, t]);
   React.useEffect(() => {
     refresh().catch(() => {
     });

package/dist/modules/dashboards/widgets/dashboard/aov-kpi/widget.client.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../src/modules/dashboards/widgets/dashboard/aov-kpi/widget.client.tsx"],
-  "sourcesContent": ["\"use client\"\n\nimport * as React from 'react'\nimport type { DashboardWidgetComponentProps } from '@open-mercato/shared/modules/dashboard/widgets'\nimport { apiCall } from '@open-mercato/ui/backend/utils/apiCall'\nimport { useT } from '@open-mercato/shared/lib/i18n/context'\nimport { KpiCard, type KpiTrend } from '@open-mercato/ui/backend/charts'\nimport {\n  DateRangeSelect,\n  InlineDateRangeSelect,\n  type DateRangePreset,\n  getComparisonLabelKey,\n} from '@open-mercato/ui/backend/date-range'\nimport { DEFAULT_SETTINGS, hydrateSettings, type AovKpiSettings } from './config'\nimport type { WidgetDataResponse } from '../../../services/widgetDataService'\nimport { formatCurrencyWithDecimals } from '../../../lib/formatters'\n\nasync function fetchAovData(settings: AovKpiSettings): Promise<WidgetDataResponse> {\n  const body = {\n    entityType: 'sales:orders',\n    metric: {\n      field: 'grandTotalGrossAmount',\n      aggregate: 'avg',\n    },\n    dateRange: {\n      field: 'placedAt',\n      preset: settings.dateRange,\n    },\n    comparison: settings.showComparison ? { type: 'previous_period' } : undefined,\n  }\n\n  const call = await apiCall<WidgetDataResponse>('/api/dashboards/widgets/data', {\n    method: 'POST',\n    headers: { 'Content-Type': 'application/json' },\n    body: JSON.stringify(body),\n  })\n\n  if (!call.ok) {\n    const errorMsg = (call.result as Record<string, unknown>)?.error\n    throw new Error(typeof errorMsg === 'string' ? errorMsg : 'Failed to fetch AOV data')\n  }\n\n  return call.result as WidgetDataResponse\n}\n\nconst AovKpiWidget: React.FC<DashboardWidgetComponentProps<AovKpiSettings>> = ({\n  mode,\n  settings = DEFAULT_SETTINGS,\n  onSettingsChange,\n  refreshToken,\n  onRefreshStateChange,\n}) => {\n  const t = useT()\n  const hydrated = React.useMemo(() => hydrateSettings(settings), [settings])\n  const [value, setValue] = React.useState<number | null>(null)\n  const [trend, setTrend] = React.useState<KpiTrend | undefined>(undefined)\n  const [loading, setLoading] = React.useState(true)\n  const [error, setError] = React.useState<string | null>(null)\n\n  const refresh = React.useCallback(async () => {\n    onRefreshStateChange?.(true)\n    setLoading(true)\n    setError(null)\n    try {\n      const data = await fetchAovData(hydrated)\n      setValue(data.value)\n      if (data.comparison) {\n        setTrend({\n          value: data.comparison.change,\n          direction: data.comparison.direction,\n        })\n      } else {\n        setTrend(undefined)\n      }\n    } catch (err) {\n      console.error('Failed to load AOV KPI data', err)\n      setError(t('dashboards.analytics.widgets.aovKpi.error', 'Failed to load data'))\n    } finally {\n      setLoading(false)\n      onRefreshStateChange?.(false)\n    }\n  }, [hydrated, onRefreshStateChange, t])\n\n  React.useEffect(() => {\n    refresh().catch(() => {})\n  }, [refresh, refreshToken])\n\n  if (mode === 'settings') {\n    return (\n      <div className=\"space-y-4 text-sm\">\n        <DateRangeSelect\n          id=\"aov-kpi-date-range\"\n          label={t('dashboards.analytics.settings.dateRange', 'Date Range')}\n          value={hydrated.dateRange}\n          onChange={(dateRange: DateRangePreset) => onSettingsChange({ ...hydrated, dateRange })}\n        />\n        <div className=\"space-y-1.5\">\n          <label className=\"flex items-center gap-2 text-sm\">\n            <input\n              type=\"checkbox\"\n              checked={hydrated.showComparison}\n              onChange={(e) => onSettingsChange({ ...hydrated, showComparison: e.target.checked })}\n              className=\"h-4 w-4 rounded border focus-visible:ring-ring\"\n            />\n            {t('dashboards.analytics.settings.showComparison', 'Show comparison')}\n          </label>\n        </div>\n      </div>\n    )\n  }\n\n  const comparisonLabelInfo = getComparisonLabelKey(hydrated.dateRange)\n  const comparisonLabel = hydrated.showComparison\n    ? t(comparisonLabelInfo.key, comparisonLabelInfo.fallback)\n    : undefined\n\n  return (\n    <KpiCard\n      value={value}\n      trend={trend}\n      comparisonLabel={comparisonLabel}\n      loading={loading}\n      error={error}\n      formatValue={formatCurrencyWithDecimals}\n      headerAction={\n        <InlineDateRangeSelect\n          value={hydrated.dateRange}\n          onChange={(dateRange) => onSettingsChange({ ...hydrated, dateRange })}\n        />\n      }\n    />\n  )\n}\n\nexport default AovKpiWidget\n"],
-  "mappings": ";AA0FQ,cAOE,YAPF;AAxFR,YAAY,WAAW;AAEvB,SAAS,eAAe;AACxB,SAAS,YAAY;AACrB,SAAS,eAA8B;AACvC;AAAA,EACE;AAAA,EACA;AAAA,EAEA;AAAA,OACK;AACP,SAAS,kBAAkB,uBAA4C;AAEvE,SAAS,kCAAkC;AAE3C,eAAe,aAAa,UAAuD;AACjF,QAAM,OAAO;AAAA,IACX,YAAY;AAAA,IACZ,QAAQ;AAAA,MACN,OAAO;AAAA,MACP,WAAW;AAAA,IACb;AAAA,IACA,WAAW;AAAA,MACT,OAAO;AAAA,MACP,QAAQ,SAAS;AAAA,IACnB;AAAA,IACA,YAAY,SAAS,iBAAiB,EAAE,MAAM,kBAAkB,IAAI;AAAA,EACtE;AAEA,QAAM,OAAO,MAAM,QAA4B,gCAAgC;AAAA,IAC7E,QAAQ;AAAA,IACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,IAC9C,MAAM,KAAK,UAAU,IAAI;AAAA,EAC3B,CAAC;AAED,MAAI,CAAC,KAAK,IAAI;AACZ,UAAM,WAAY,KAAK,QAAoC;AAC3D,UAAM,IAAI,MAAM,OAAO,aAAa,WAAW,WAAW,0BAA0B;AAAA,EACtF;AAEA,SAAO,KAAK;AACd;AAEA,MAAM,eAAwE,CAAC;AAAA,EAC7E;AAAA,EACA,WAAW;AAAA,EACX;AAAA,EACA;AAAA,EACA;AACF,MAAM;AACJ,QAAM,IAAI,KAAK;AACf,QAAM,WAAW,MAAM,QAAQ,MAAM,gBAAgB,QAAQ,GAAG,CAAC,QAAQ,CAAC;AAC1E,QAAM,CAAC,OAAO,QAAQ,IAAI,MAAM,SAAwB,IAAI;AAC5D,QAAM,CAAC,OAAO,QAAQ,IAAI,MAAM,SAA+B,MAAS;AACxE,QAAM,CAAC,SAAS,UAAU,IAAI,MAAM,SAAS,IAAI;AACjD,QAAM,CAAC,OAAO,QAAQ,IAAI,MAAM,SAAwB,IAAI;AAE5D,QAAM,UAAU,MAAM,YAAY,YAAY;AAC5C,2BAAuB,IAAI;AAC3B,eAAW,IAAI;AACf,aAAS,IAAI;AACb,QAAI;AACF,YAAM,OAAO,MAAM,aAAa,QAAQ;AACxC,eAAS,KAAK,KAAK;AACnB,UAAI,KAAK,YAAY;AACnB,iBAAS;AAAA,UACP,OAAO,KAAK,WAAW;AAAA,UACvB,WAAW,KAAK,WAAW;AAAA,QAC7B,CAAC;AAAA,MACH,OAAO;AACL,iBAAS,MAAS;AAAA,MACpB;AAAA,IACF,SAAS,KAAK;AACZ,cAAQ,MAAM,+BAA+B,GAAG;AAChD,eAAS,EAAE,6CAA6C,qBAAqB,CAAC;AAAA,IAChF,UAAE;AACA,iBAAW,KAAK;AAChB,6BAAuB,KAAK;AAAA,IAC9B;AAAA,EACF,GAAG,CAAC,UAAU,sBAAsB,CAAC,CAAC;AAEtC,QAAM,UAAU,MAAM;AACpB,YAAQ,EAAE,MAAM,MAAM;AAAA,IAAC,CAAC;AAAA,EAC1B,GAAG,CAAC,SAAS,YAAY,CAAC;AAE1B,MAAI,SAAS,YAAY;AACvB,WACE,qBAAC,SAAI,WAAU,qBACb;AAAA;AAAA,QAAC;AAAA;AAAA,UACC,IAAG;AAAA,UACH,OAAO,EAAE,2CAA2C,YAAY;AAAA,UAChE,OAAO,SAAS;AAAA,UAChB,UAAU,CAAC,cAA+B,iBAAiB,EAAE,GAAG,UAAU,UAAU,CAAC;AAAA;AAAA,MACvF;AAAA,MACA,oBAAC,SAAI,WAAU,eACb,+BAAC,WAAM,WAAU,mCACf;AAAA;AAAA,UAAC;AAAA;AAAA,YACC,MAAK;AAAA,YACL,SAAS,SAAS;AAAA,YAClB,UAAU,CAAC,MAAM,iBAAiB,EAAE,GAAG,UAAU,gBAAgB,EAAE,OAAO,QAAQ,CAAC;AAAA,YACnF,WAAU;AAAA;AAAA,QACZ;AAAA,QACC,EAAE,gDAAgD,iBAAiB;AAAA,SACtE,GACF;AAAA,OACF;AAAA,EAEJ;AAEA,QAAM,sBAAsB,sBAAsB,SAAS,SAAS;AACpE,QAAM,kBAAkB,SAAS,iBAC7B,EAAE,oBAAoB,KAAK,oBAAoB,QAAQ,IACvD;AAEJ,SACE;AAAA,IAAC;AAAA;AAAA,MACC;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,aAAa;AAAA,MACb,cACE;AAAA,QAAC;AAAA;AAAA,UACC,OAAO,SAAS;AAAA,UAChB,UAAU,CAAC,cAAc,iBAAiB,EAAE,GAAG,UAAU,UAAU,CAAC;AAAA;AAAA,MACtE;AAAA;AAAA,EAEJ;AAEJ;AAEA,IAAO,wBAAQ;",
+  "sourcesContent": ["\"use client\"\n\nimport * as React from 'react'\nimport type { DashboardWidgetComponentProps } from '@open-mercato/shared/modules/dashboard/widgets'\nimport { useWidgetData, type WidgetDataFetcher } from '@open-mercato/ui/backend/dashboard/widgetData'\nimport { useT } from '@open-mercato/shared/lib/i18n/context'\nimport { KpiCard, type KpiTrend } from '@open-mercato/ui/backend/charts'\nimport {\n  DateRangeSelect,\n  InlineDateRangeSelect,\n  type DateRangePreset,\n  getComparisonLabelKey,\n} from '@open-mercato/ui/backend/date-range'\nimport { DEFAULT_SETTINGS, hydrateSettings, type AovKpiSettings } from './config'\nimport type { WidgetDataResponse } from '../../../services/widgetDataService'\nimport { formatCurrencyWithDecimals } from '../../../lib/formatters'\n\nasync function fetchAovData(settings: AovKpiSettings, fetchWidgetData: WidgetDataFetcher): Promise<WidgetDataResponse> {\n  const body = {\n    entityType: 'sales:orders',\n    metric: {\n      field: 'grandTotalGrossAmount',\n      aggregate: 'avg',\n    },\n    dateRange: {\n      field: 'placedAt',\n      preset: settings.dateRange,\n    },\n    comparison: settings.showComparison ? { type: 'previous_period' } : undefined,\n  }\n\n  return fetchWidgetData<WidgetDataResponse>(body)\n}\n\nconst AovKpiWidget: React.FC<DashboardWidgetComponentProps<AovKpiSettings>> = ({\n  mode,\n  settings = DEFAULT_SETTINGS,\n  onSettingsChange,\n  refreshToken,\n  onRefreshStateChange,\n}) => {\n  const t = useT()\n  const hydrated = React.useMemo(() => hydrateSettings(settings), [settings])\n  const [value, setValue] = React.useState<number | null>(null)\n  const [trend, setTrend] = React.useState<KpiTrend | undefined>(undefined)\n  const [loading, setLoading] = React.useState(true)\n  const [error, setError] = React.useState<string | null>(null)\n\n  const fetchWidgetData = useWidgetData()\n  const refresh = React.useCallback(async () => {\n    onRefreshStateChange?.(true)\n    setLoading(true)\n    setError(null)\n    try {\n      const data = await fetchAovData(hydrated, fetchWidgetData)\n      setValue(data.value)\n      if (data.comparison) {\n        setTrend({\n          value: data.comparison.change,\n          direction: data.comparison.direction,\n        })\n      } else {\n        setTrend(undefined)\n      }\n    } catch (err) {\n      console.error('Failed to load AOV KPI data', err)\n      setError(t('dashboards.analytics.widgets.aovKpi.error', 'Failed to load data'))\n    } finally {\n      setLoading(false)\n      onRefreshStateChange?.(false)\n    }\n  }, [hydrated, fetchWidgetData, onRefreshStateChange, t])\n\n  React.useEffect(() => {\n    refresh().catch(() => {})\n  }, [refresh, refreshToken])\n\n  if (mode === 'settings') {\n    return (\n      <div className=\"space-y-4 text-sm\">\n        <DateRangeSelect\n          id=\"aov-kpi-date-range\"\n          label={t('dashboards.analytics.settings.dateRange', 'Date Range')}\n          value={hydrated.dateRange}\n          onChange={(dateRange: DateRangePreset) => onSettingsChange({ ...hydrated, dateRange })}\n        />\n        <div className=\"space-y-1.5\">\n          <label className=\"flex items-center gap-2 text-sm\">\n            <input\n              type=\"checkbox\"\n              checked={hydrated.showComparison}\n              onChange={(e) => onSettingsChange({ ...hydrated, showComparison: e.target.checked })}\n              className=\"h-4 w-4 rounded border focus-visible:ring-ring\"\n            />\n            {t('dashboards.analytics.settings.showComparison', 'Show comparison')}\n          </label>\n        </div>\n      </div>\n    )\n  }\n\n  const comparisonLabelInfo = getComparisonLabelKey(hydrated.dateRange)\n  const comparisonLabel = hydrated.showComparison\n    ? t(comparisonLabelInfo.key, comparisonLabelInfo.fallback)\n    : undefined\n\n  return (\n    <KpiCard\n      value={value}\n      trend={trend}\n      comparisonLabel={comparisonLabel}\n      loading={loading}\n      error={error}\n      formatValue={formatCurrencyWithDecimals}\n      headerAction={\n        <InlineDateRangeSelect\n          value={hydrated.dateRange}\n          onChange={(dateRange) => onSettingsChange({ ...hydrated, dateRange })}\n        />\n      }\n    />\n  )\n}\n\nexport default AovKpiWidget\n"],
+  "mappings": ";AAgFQ,cAOE,YAPF;AA9ER,YAAY,WAAW;AAEvB,SAAS,qBAA6C;AACtD,SAAS,YAAY;AACrB,SAAS,eAA8B;AACvC;AAAA,EACE;AAAA,EACA;AAAA,EAEA;AAAA,OACK;AACP,SAAS,kBAAkB,uBAA4C;AAEvE,SAAS,kCAAkC;AAE3C,eAAe,aAAa,UAA0B,iBAAiE;AACrH,QAAM,OAAO;AAAA,IACX,YAAY;AAAA,IACZ,QAAQ;AAAA,MACN,OAAO;AAAA,MACP,WAAW;AAAA,IACb;AAAA,IACA,WAAW;AAAA,MACT,OAAO;AAAA,MACP,QAAQ,SAAS;AAAA,IACnB;AAAA,IACA,YAAY,SAAS,iBAAiB,EAAE,MAAM,kBAAkB,IAAI;AAAA,EACtE;AAEA,SAAO,gBAAoC,IAAI;AACjD;AAEA,MAAM,eAAwE,CAAC;AAAA,EAC7E;AAAA,EACA,WAAW;AAAA,EACX;AAAA,EACA;AAAA,EACA;AACF,MAAM;AACJ,QAAM,IAAI,KAAK;AACf,QAAM,WAAW,MAAM,QAAQ,MAAM,gBAAgB,QAAQ,GAAG,CAAC,QAAQ,CAAC;AAC1E,QAAM,CAAC,OAAO,QAAQ,IAAI,MAAM,SAAwB,IAAI;AAC5D,QAAM,CAAC,OAAO,QAAQ,IAAI,MAAM,SAA+B,MAAS;AACxE,QAAM,CAAC,SAAS,UAAU,IAAI,MAAM,SAAS,IAAI;AACjD,QAAM,CAAC,OAAO,QAAQ,IAAI,MAAM,SAAwB,IAAI;AAE5D,QAAM,kBAAkB,cAAc;AACtC,QAAM,UAAU,MAAM,YAAY,YAAY;AAC5C,2BAAuB,IAAI;AAC3B,eAAW,IAAI;AACf,aAAS,IAAI;AACb,QAAI;AACF,YAAM,OAAO,MAAM,aAAa,UAAU,eAAe;AACzD,eAAS,KAAK,KAAK;AACnB,UAAI,KAAK,YAAY;AACnB,iBAAS;AAAA,UACP,OAAO,KAAK,WAAW;AAAA,UACvB,WAAW,KAAK,WAAW;AAAA,QAC7B,CAAC;AAAA,MACH,OAAO;AACL,iBAAS,MAAS;AAAA,MACpB;AAAA,IACF,SAAS,KAAK;AACZ,cAAQ,MAAM,+BAA+B,GAAG;AAChD,eAAS,EAAE,6CAA6C,qBAAqB,CAAC;AAAA,IAChF,UAAE;AACA,iBAAW,KAAK;AAChB,6BAAuB,KAAK;AAAA,IAC9B;AAAA,EACF,GAAG,CAAC,UAAU,iBAAiB,sBAAsB,CAAC,CAAC;AAEvD,QAAM,UAAU,MAAM;AACpB,YAAQ,EAAE,MAAM,MAAM;AAAA,IAAC,CAAC;AAAA,EAC1B,GAAG,CAAC,SAAS,YAAY,CAAC;AAE1B,MAAI,SAAS,YAAY;AACvB,WACE,qBAAC,SAAI,WAAU,qBACb;AAAA;AAAA,QAAC;AAAA;AAAA,UACC,IAAG;AAAA,UACH,OAAO,EAAE,2CAA2C,YAAY;AAAA,UAChE,OAAO,SAAS;AAAA,UAChB,UAAU,CAAC,cAA+B,iBAAiB,EAAE,GAAG,UAAU,UAAU,CAAC;AAAA;AAAA,MACvF;AAAA,MACA,oBAAC,SAAI,WAAU,eACb,+BAAC,WAAM,WAAU,mCACf;AAAA;AAAA,UAAC;AAAA;AAAA,YACC,MAAK;AAAA,YACL,SAAS,SAAS;AAAA,YAClB,UAAU,CAAC,MAAM,iBAAiB,EAAE,GAAG,UAAU,gBAAgB,EAAE,OAAO,QAAQ,CAAC;AAAA,YACnF,WAAU;AAAA;AAAA,QACZ;AAAA,QACC,EAAE,gDAAgD,iBAAiB;AAAA,SACtE,GACF;AAAA,OACF;AAAA,EAEJ;AAEA,QAAM,sBAAsB,sBAAsB,SAAS,SAAS;AACpE,QAAM,kBAAkB,SAAS,iBAC7B,EAAE,oBAAoB,KAAK,oBAAoB,QAAQ,IACvD;AAEJ,SACE;AAAA,IAAC;AAAA;AAAA,MACC;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,aAAa;AAAA,MACb,cACE;AAAA,QAAC;AAAA;AAAA,UACC,OAAO,SAAS;AAAA,UAChB,UAAU,CAAC,cAAc,iBAAiB,EAAE,GAAG,UAAU,UAAU,CAAC;AAAA;AAAA,MACtE;AAAA;AAAA,EAEJ;AAEJ;AAEA,IAAO,wBAAQ;",
   "names": []
 }

package/dist/modules/dashboards/widgets/dashboard/new-customers-kpi/widget.client.js

@@ -1,7 +1,7 @@
 "use client";
 import { jsx, jsxs } from "react/jsx-runtime";
 import * as React from "react";
-import { apiCall } from "@open-mercato/ui/backend/utils/apiCall";
+import { useWidgetData } from "@open-mercato/ui/backend/dashboard/widgetData";
 import { useT } from "@open-mercato/shared/lib/i18n/context";
 import { KpiCard } from "@open-mercato/ui/backend/charts";
 import {
@@ -10,7 +10,7 @@ import {
   getComparisonLabelKey
 } from "@open-mercato/ui/backend/date-range";
 import { DEFAULT_SETTINGS, hydrateSettings } from "./config.js";
-async function fetchNewCustomersData(settings) {
+async function fetchNewCustomersData(settings, fetchWidgetData) {
   const body = {
     entityType: "customers:entities",
     metric: {
@@ -23,16 +23,7 @@ async function fetchNewCustomersData(settings) {
     },
     comparison: settings.showComparison ? { type: "previous_period" } : void 0
   };
-  const call = await apiCall("/api/dashboards/widgets/data", {
-    method: "POST",
-    headers: { "Content-Type": "application/json" },
-    body: JSON.stringify(body)
-  });
-  if (!call.ok) {
-    const errorMsg = call.result?.error;
-    throw new Error(typeof errorMsg === "string" ? errorMsg : "Failed to fetch new customers data");
-  }
-  return call.result;
+  return fetchWidgetData(body);
 }
 const NewCustomersKpiWidget = ({
   mode,
@@ -47,12 +38,13 @@ const NewCustomersKpiWidget = ({
   const [trend, setTrend] = React.useState(void 0);
   const [loading, setLoading] = React.useState(true);
   const [error, setError] = React.useState(null);
+  const fetchWidgetData = useWidgetData();
   const refresh = React.useCallback(async () => {
     onRefreshStateChange?.(true);
     setLoading(true);
     setError(null);
     try {
-      const data = await fetchNewCustomersData(hydrated);
+      const data = await fetchNewCustomersData(hydrated, fetchWidgetData);
       setValue(data.value);
       if (data.comparison) {
         setTrend({
@@ -69,7 +61,7 @@ const NewCustomersKpiWidget = ({
       setLoading(false);
       onRefreshStateChange?.(false);
     }
-  }, [hydrated, onRefreshStateChange, t]);
+  }, [hydrated, fetchWidgetData, onRefreshStateChange, t]);
   React.useEffect(() => {
     refresh().catch(() => {
     });