@open-mercato/core 0.6.4-develop.4239.1.4a264a5828 → 0.6.4-develop.4254.1.7a123d970c

package/dist/modules/customers/api/activities/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../src/modules/customers/api/activities/route.ts"],
-  "sourcesContent": ["/**\n * @deprecated Use /api/customers/interactions instead. This route is maintained\n * as a compatibility bridge per SPEC-046b and delegates writes to canonical\n * interaction commands.\n */\nimport { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport type { CommandBus } from '@open-mercato/shared/lib/commands'\nimport { CrudHttpError, isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport {\n  runCrudMutationGuardAfterSuccess,\n  validateCrudMutationGuard,\n} from '@open-mercato/shared/lib/crud/mutation-guard'\nimport { readJsonSafe } from '@open-mercato/shared/lib/http/readJsonSafe'\nimport { findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { CustomerActivity, CustomerDeal, CustomerInteraction } from '../../data/entities'\nimport { User } from '@open-mercato/core/modules/auth/data/entities'\nimport { activityCreateSchema, activityUpdateSchema } from '../../data/validators'\nimport { createCustomersCrudOpenApi, createPagedListResponseSchema, defaultOkResponseSchema } from '../openapi'\nimport {\n  mapInteractionRecordToActivitySummary,\n  CUSTOMER_INTERACTION_ACTIVITY_ADAPTER_SOURCE,\n} from '../../lib/interactionCompatibility'\nimport { resolveCustomerInteractionFeatureFlags } from '../../lib/interactionFeatureFlags'\nimport { resolveCustomersRequestContext } from '../../lib/interactionRequestContext'\nimport { hydrateCanonicalInteractions } from '../../lib/interactionReadModel'\nimport { resolveCanonicalActivityTargetId } from '../../lib/legacyActivityBridge'\n\nconst listSchema = z.object({\n  page: z.coerce.number().min(1).default(1),\n  pageSize: z.coerce.number().min(1).max(100).default(50),\n  entityId: z.string().uuid().optional(),\n  dealId: z.string().uuid().optional(),\n  activityType: z.string().optional(),\n  sortField: z.string().optional(),\n  sortDir: z.enum(['asc', 'desc']).optional(),\n}).passthrough()\n\nconst routeMetadata = {\n  GET: { requireAuth: true, requireFeatures: ['customers.activities.view'] },\n  POST: { requireAuth: true, requireFeatures: ['customers.activities.manage'] },\n  PUT: { requireAuth: true, requireFeatures: ['customers.activities.manage'] },\n  DELETE: { requireAuth: true, requireFeatures: ['customers.activities.manage'] },\n}\n\nexport const metadata = routeMetadata\n\nconst activityCreateBodySchema = activityCreateSchema.omit({\n  organizationId: true,\n  tenantId: true,\n}).passthrough()\n\nconst activityUpdateBodySchema = activityUpdateSchema.omit({\n  organizationId: true,\n  tenantId: true,\n}).passthrough()\n\nconst activityDeleteBodySchema = z.object({\n  id: z.string().uuid(),\n})\n\nconst ADAPTER_HEADERS = {\n  Deprecation: 'true',\n  Sunset: 'Tue, 30 Jun 2026 00:00:00 GMT',\n  Link: '</api/customers/interactions>; rel=\"successor-version\"',\n}\n\n// Caps the per-source fetch window used by the deprecated merged (legacy +\n// canonical bridge) read path. Keeps memory bounded on tenants with large\n// activity history; deep-pagination beyond this window is not supported here \u2014\n// use /api/customers/interactions instead.\nconst MERGED_ACTIVITY_FETCH_CAP = 2000\n\ntype ActivityItem = {\n  id: string\n  activityType: string\n  subject?: string | null\n  body?: string | null\n  occurredAt?: string | null\n  createdAt: string\n  appearanceIcon?: string | null\n  appearanceColor?: string | null\n  entityId?: string | null\n  authorUserId?: string | null\n  authorName?: string | null\n  authorEmail?: string | null\n  dealId?: string | null\n  dealTitle?: string | null\n  customValues?: Record<string, unknown> | null\n  activityTypeLabel?: string | null\n}\n\ntype CanonicalActivityListResult = {\n  items: ActivityItem[]\n  total: number\n  bridgeIds: Set<string>\n}\n\nfunction resolveGuardUserId(auth: {\n  sub?: string | null\n  userId?: string | null\n  keyId?: string | null\n}): string {\n  if (typeof auth.sub === 'string' && auth.sub.trim().length > 0) return auth.sub\n  if (typeof auth.userId === 'string' && auth.userId.trim().length > 0) return auth.userId\n  if (typeof auth.keyId === 'string' && auth.keyId.trim().length > 0) return auth.keyId\n  return 'system'\n}\n\nfunction withAdapterHeaders(response: Response): Response {\n  const headers = new Headers(response.headers)\n  Object.entries(ADAPTER_HEADERS).forEach(([key, value]) => headers.set(key, value))\n  return new Response(response.body, {\n    status: response.status,\n    statusText: response.statusText,\n    headers,\n  })\n}\n\nasync function legacyAdaptersDisabledResponse(): Promise<Response> {\n  const { translate } = await resolveTranslations()\n  return withAdapterHeaders(NextResponse.json(\n    {\n      error: translate(\n        'customers.interactions.legacyAdapters.disabled',\n        'This legacy adapter has been disabled. Use /api/customers/interactions instead.',\n      ),\n    },\n    { status: 410 },\n  ))\n}\n\nfunction buildLegacyOrderBy(sortField: string | undefined, sortDir: 'asc' | 'desc') {\n  if (sortField === 'createdAt') {\n    return { createdAt: sortDir }\n  }\n  return { occurredAt: sortDir, createdAt: sortDir } as const\n}\n\nfunction buildCanonicalOrderBy(sortField: string | undefined, sortDir: 'asc' | 'desc') {\n  if (sortField === 'createdAt') {\n    return { createdAt: sortDir }\n  }\n  return { occurredAt: sortDir, createdAt: sortDir } as const\n}\n\nfunction resolveActivitySortValue(item: ActivityItem, sortField: string | undefined): number {\n  const raw =\n    sortField === 'createdAt'\n      ? item.createdAt\n      : item.occurredAt ?? item.createdAt\n  const timestamp = raw ? new Date(raw).getTime() : Number.NaN\n  return Number.isNaN(timestamp) ? 0 : timestamp\n}\n\nfunction sortActivityItems(\n  items: ActivityItem[],\n  sortField: string | undefined,\n  sortDir: 'asc' | 'desc',\n): ActivityItem[] {\n  return [...items].sort((left, right) => {\n    const leftValue = resolveActivitySortValue(left, sortField)\n    const rightValue = resolveActivitySortValue(right, sortField)\n    if (leftValue === rightValue) {\n      return sortDir === 'asc'\n        ? left.id.localeCompare(right.id)\n        : right.id.localeCompare(left.id)\n    }\n    return sortDir === 'asc' ? leftValue - rightValue : rightValue - leftValue\n  })\n}\n\nfunction paginateActivityItems(\n  items: ActivityItem[],\n  page: number,\n  pageSize: number,\n): { items: ActivityItem[]; total: number } {\n  const start = (page - 1) * pageSize\n  return {\n    items: items.slice(start, start + pageSize),\n    total: items.length,\n  }\n}\n\nasync function decorateActivityItems(\n  em: EntityManager,\n  items: ActivityItem[],\n  decryptionScope?: { tenantId: string; organizationId: string },\n): Promise<ActivityItem[]> {\n  if (items.length === 0) return items\n\n  const authorIds = Array.from(\n    new Set(\n      items\n        .map((item) => (typeof item.authorUserId === 'string' ? item.authorUserId : null))\n        .filter((value): value is string => !!value),\n    ),\n  )\n  const dealIds = Array.from(\n    new Set(\n      items\n        .map((item) => (typeof item.dealId === 'string' ? item.dealId : null))\n        .filter((value): value is string => !!value),\n    ),\n  )\n\n  const [users, deals] = await Promise.all([\n    authorIds.length > 0 ? em.find(User, { id: { $in: authorIds } }) : Promise.resolve([]),\n    dealIds.length > 0\n      ? decryptionScope\n        ? findWithDecryption(em, CustomerDeal, { id: { $in: dealIds } }, undefined, decryptionScope)\n        : em.find(CustomerDeal, { id: { $in: dealIds } })\n      : Promise.resolve([]),\n  ])\n\n  const userMap = new Map(\n    users.map((user) => [\n      user.id,\n      {\n        name: user.name ?? null,\n        email: user.email ?? null,\n      },\n    ]),\n  )\n  const dealMap = new Map(deals.map((deal) => [deal.id, deal.title]))\n\n  return items.map((item) => ({\n    ...item,\n    activityTypeLabel: item.activityType,\n    authorName: item.authorUserId ? userMap.get(item.authorUserId)?.name ?? null : null,\n    authorEmail: item.authorUserId ? userMap.get(item.authorUserId)?.email ?? null : null,\n    dealTitle: item.dealId ? dealMap.get(item.dealId) ?? null : null,\n  }))\n}\n\nfunction mapLegacyActivity(activity: CustomerActivity): ActivityItem {\n  return {\n    id: activity.id,\n    activityType: activity.activityType,\n    subject: activity.subject ?? null,\n    body: activity.body ?? null,\n    occurredAt: activity.occurredAt ? activity.occurredAt.toISOString() : null,\n    createdAt: activity.createdAt.toISOString(),\n    appearanceIcon: activity.appearanceIcon ?? null,\n    appearanceColor: activity.appearanceColor ?? null,\n    entityId: typeof activity.entity === 'string' ? activity.entity : activity.entity.id,\n    authorUserId: activity.authorUserId ?? null,\n    dealId: activity.deal ? (typeof activity.deal === 'string' ? activity.deal : activity.deal.id) : null,\n    customValues: null,\n  }\n}\n\nasync function listCanonicalActivities(\n  em: EntityManager,\n  container: { resolve: (name: string) => unknown },\n  auth: { tenantId: string | null; orgId: string | null; sub?: string | null; userId?: string | null; keyId?: string | null },\n  selectedOrganizationId: string | null,\n  tenantId: string,\n  organizationIds: string[] | null,\n  query: z.infer<typeof listSchema>,\n  options?: { includeDeleted?: boolean; source?: string | string[] | null; paginate?: boolean },\n): Promise<CanonicalActivityListResult> {\n  const where: Record<string, unknown> = {\n    tenantId,\n    interactionType: { $ne: 'task' },\n  }\n  if (!options?.includeDeleted) {\n    where.deletedAt = null\n  }\n  if (organizationIds && organizationIds.length > 0) {\n    where.organizationId = { $in: organizationIds }\n  }\n  if (query.entityId) where.entity = query.entityId\n  if (query.dealId) where.dealId = query.dealId\n  if (query.activityType) where.interactionType = query.activityType\n  if (options?.source) {\n    where.source = Array.isArray(options.source) ? { $in: options.source } : options.source\n  }\n\n  const findOptions = {\n    orderBy: buildCanonicalOrderBy(query.sortField, query.sortDir ?? 'desc'),\n    ...(options?.paginate === false\n      ? {}\n      : {\n          offset: (query.page - 1) * query.pageSize,\n          limit: query.pageSize,\n        }),\n  }\n\n  const rows =\n    options?.paginate === false\n      ? await em.find(CustomerInteraction, where, findOptions)\n      : (await em.findAndCount(CustomerInteraction, where, findOptions))[0]\n  const total =\n    options?.paginate === false\n      ? rows.filter((row) => !row.deletedAt).length\n      : await em.count(CustomerInteraction, where)\n\n  const activeRows = rows.filter((row) => !row.deletedAt)\n  const hydrated = await hydrateCanonicalInteractions({\n    em,\n    container,\n    auth,\n    selectedOrganizationId,\n    interactions: activeRows,\n  })\n  const items = hydrated.map((row) => ({\n    ...mapInteractionRecordToActivitySummary(row),\n    customValues: row.customValues ?? null,\n    activityTypeLabel: row.interactionType,\n  }))\n\n  return {\n    items,\n    total,\n    bridgeIds: new Set(rows.map((row) => row.id)),\n  }\n}\n\nasync function listLegacyActivities(\n  em: EntityManager,\n  tenantId: string,\n  organizationIds: string[] | null,\n  query: z.infer<typeof listSchema>,\n  options?: { paginate?: boolean },\n  selectedOrganizationId?: string | null,\n): Promise<{ items: ActivityItem[]; total: number }> {\n  const where: Record<string, unknown> = { tenantId }\n  if (organizationIds && organizationIds.length > 0) {\n    where.organizationId = { $in: organizationIds }\n  }\n  if (query.entityId) where.entity = query.entityId\n  if (query.dealId) where.deal = query.dealId\n  if (query.activityType) where.activityType = query.activityType\n\n  const findOptions = {\n    populate: ['entity', 'deal'] as const,\n    orderBy: buildLegacyOrderBy(query.sortField, query.sortDir ?? 'desc'),\n    ...(options?.paginate === false\n      ? {}\n      : {\n          offset: (query.page - 1) * query.pageSize,\n          limit: query.pageSize,\n        }),\n  }\n\n  const rows =\n    options?.paginate === false\n      ? await em.find(CustomerActivity, where, findOptions)\n      : (await em.findAndCount(CustomerActivity, where, findOptions))[0]\n  const total =\n    options?.paginate === false\n      ? rows.length\n      : await em.count(CustomerActivity, where)\n\n  return {\n    items: await decorateActivityItems(\n      em,\n      rows.map(mapLegacyActivity),\n      selectedOrganizationId ? { tenantId, organizationId: selectedOrganizationId } : undefined,\n    ),\n    total,\n  }\n}\n\nexport async function GET(request: Request): Promise<Response> {\n  try {\n    const url = new URL(request.url)\n    const query = listSchema.parse(Object.fromEntries(url.searchParams))\n    const {\n      auth,\n      em,\n      organizationIds,\n      container,\n      selectedOrganizationId,\n    } = await resolveCustomersRequestContext(request)\n    const flags = await resolveCustomerInteractionFeatureFlags(container, auth.tenantId)\n    if (!flags.legacyAdapters) {\n      return await legacyAdaptersDisabledResponse()\n    }\n\n    const sortDir = query.sortDir ?? 'desc'\n\n    const result = flags.unified\n      ? await listCanonicalActivities(\n          em,\n          container,\n          auth,\n          selectedOrganizationId,\n          auth.tenantId,\n          organizationIds,\n          query,\n        )\n      : await (async () => {\n        const windowSize = Math.min(\n          MERGED_ACTIVITY_FETCH_CAP,\n          Math.max(query.pageSize, query.page * query.pageSize + query.pageSize),\n        )\n        const windowedQuery = { ...query, page: 1, pageSize: windowSize }\n        const [legacy, canonical] = await Promise.all([\n          listLegacyActivities(\n            em,\n            auth.tenantId,\n            organizationIds,\n            windowedQuery,\n            { paginate: true },\n            selectedOrganizationId,\n          ),\n          listCanonicalActivities(\n            em,\n            container,\n            auth,\n            selectedOrganizationId,\n            auth.tenantId,\n            organizationIds,\n            windowedQuery,\n            {\n              includeDeleted: true,\n              paginate: true,\n              source: CUSTOMER_INTERACTION_ACTIVITY_ADAPTER_SOURCE,\n            },\n          ),\n        ])\n        const merged = sortActivityItems(\n          [\n            ...legacy.items.filter((item) => !canonical.bridgeIds.has(item.id)),\n            ...canonical.items,\n          ],\n          query.sortField,\n          sortDir,\n        )\n        const paged = paginateActivityItems(merged, query.page, query.pageSize)\n        return {\n          items: paged.items,\n          total: paged.total,\n        }\n      })()\n\n    return withAdapterHeaders(\n      NextResponse.json({\n        items: result.items,\n        total: result.total,\n        page: query.page,\n        pageSize: query.pageSize,\n        totalPages: Math.max(1, Math.ceil(result.total / query.pageSize)),\n      }),\n    )\n  } catch (err) {\n    if (isCrudHttpError(err)) {\n      return withAdapterHeaders(NextResponse.json(err.body, { status: err.status }))\n    }\n    if (err instanceof z.ZodError) {\n      return withAdapterHeaders(\n        NextResponse.json({ error: 'Validation failed', details: err.issues }, { status: 400 }),\n      )\n    }\n    console.error('customers.activities.get failed', err)\n    return withAdapterHeaders(\n      NextResponse.json({ error: 'Internal server error' }, { status: 500 }),\n    )\n  }\n}\n\nexport async function POST(request: Request): Promise<Response> {\n  try {\n    const { commandContext, container, auth, selectedOrganizationId } = await resolveCustomersRequestContext(request)\n    const flags = await resolveCustomerInteractionFeatureFlags(container, auth.tenantId)\n    if (!flags.legacyAdapters) {\n      return await legacyAdaptersDisabledResponse()\n    }\n    const body = await readJsonSafe<Record<string, unknown>>(request, {})\n    const parsed = activityCreateBodySchema.parse(body)\n    const guardUserId = resolveGuardUserId(auth)\n    const guardResult = await validateCrudMutationGuard(container, {\n      tenantId: auth.tenantId,\n      organizationId: selectedOrganizationId,\n      userId: guardUserId,\n      resourceKind: 'customers.activity',\n      resourceId: parsed.entityId,\n      operation: 'create',\n      requestMethod: request.method,\n      requestHeaders: request.headers,\n      mutationPayload: parsed,\n    })\n    if (guardResult && !guardResult.ok) {\n      return withAdapterHeaders(NextResponse.json(guardResult.body, { status: guardResult.status }))\n    }\n    const commandBus = container.resolve('commandBus') as CommandBus\n    const { result } = await commandBus.execute('customers.interactions.create', {\n      input: {\n        tenantId: auth.tenantId,\n        organizationId: selectedOrganizationId ?? auth.orgId,\n        entityId: parsed.entityId,\n        interactionType: parsed.activityType,\n        title: parsed.subject ?? null,\n        body: parsed.body ?? null,\n        occurredAt: parsed.occurredAt ?? null,\n        status: parsed.occurredAt ? 'done' : 'planned',\n        dealId: parsed.dealId ?? null,\n        authorUserId: parsed.authorUserId ?? null,\n        appearanceIcon: parsed.appearanceIcon ?? null,\n        appearanceColor: parsed.appearanceColor ?? null,\n        source: CUSTOMER_INTERACTION_ACTIVITY_ADAPTER_SOURCE,\n        customFields: (parsed as Record<string, unknown>).customFields,\n        customValues: (parsed as Record<string, unknown>).customValues,\n      },\n      ctx: commandContext,\n    })\n    if (guardResult?.ok && guardResult.shouldRunAfterSuccess) {\n      await runCrudMutationGuardAfterSuccess(container, {\n        tenantId: auth.tenantId,\n        organizationId: selectedOrganizationId,\n        userId: guardUserId,\n        resourceKind: 'customers.activity',\n        resourceId: parsed.entityId,\n        operation: 'create',\n        requestMethod: request.method,\n        requestHeaders: request.headers,\n        metadata: guardResult.metadata ?? null,\n      })\n    }\n\n    return withAdapterHeaders(\n      NextResponse.json(\n        {\n          id:\n            result &&\n            typeof result === 'object' &&\n            'interactionId' in result &&\n            typeof result.interactionId === 'string'\n              ? result.interactionId\n              : result &&\n                  typeof result === 'object' &&\n                  'id' in result &&\n                  typeof result.id === 'string'\n                ? result.id\n                : null,\n        },\n        { status: 201 },\n      ),\n    )\n  } catch (err) {\n    if (isCrudHttpError(err)) {\n      return withAdapterHeaders(NextResponse.json(err.body, { status: err.status }))\n    }\n    if (err instanceof z.ZodError) {\n      return withAdapterHeaders(\n        NextResponse.json({ error: 'Validation failed', details: err.issues }, { status: 400 }),\n      )\n    }\n    console.error('customers.activities.post failed', err)\n    return withAdapterHeaders(\n      NextResponse.json({ error: 'Internal server error' }, { status: 500 }),\n    )\n  }\n}\n\nexport async function PUT(request: Request): Promise<Response> {\n  try {\n    const { commandContext, container, em, auth, selectedOrganizationId } = await resolveCustomersRequestContext(request)\n    const flags = await resolveCustomerInteractionFeatureFlags(container, auth.tenantId)\n    if (!flags.legacyAdapters) {\n      return await legacyAdaptersDisabledResponse()\n    }\n    const body = await readJsonSafe<Record<string, unknown>>(request, {})\n    const parsed = activityUpdateBodySchema.parse(body)\n    const guardUserId = resolveGuardUserId(auth)\n    const guardResult = await validateCrudMutationGuard(container, {\n      tenantId: auth.tenantId,\n      organizationId: selectedOrganizationId,\n      userId: guardUserId,\n      resourceKind: 'customers.activity',\n      resourceId: parsed.id,\n      operation: 'update',\n      requestMethod: request.method,\n      requestHeaders: request.headers,\n      mutationPayload: parsed,\n    })\n    if (guardResult && !guardResult.ok) {\n      return withAdapterHeaders(NextResponse.json(guardResult.body, { status: guardResult.status }))\n    }\n    const commandBus = container.resolve('commandBus') as CommandBus\n    const interactionId = flags.unified\n      ? parsed.id\n      : await resolveCanonicalActivityTargetId(em, commandBus, commandContext, parsed.id, auth.tenantId)\n\n    await commandBus.execute('customers.interactions.update', {\n      input: {\n        id: interactionId,\n        interactionType: parsed.activityType,\n        title: parsed.subject ?? undefined,\n        body: parsed.body ?? undefined,\n        occurredAt: parsed.occurredAt ?? undefined,\n        status: parsed.occurredAt ? 'done' : undefined,\n        dealId: parsed.dealId ?? undefined,\n        authorUserId: parsed.authorUserId ?? undefined,\n        appearanceIcon: parsed.appearanceIcon ?? undefined,\n        appearanceColor: parsed.appearanceColor ?? undefined,\n        customFields: (parsed as Record<string, unknown>).customFields,\n        customValues: (parsed as Record<string, unknown>).customValues,\n      },\n      ctx: commandContext,\n    })\n    if (guardResult?.ok && guardResult.shouldRunAfterSuccess) {\n      await runCrudMutationGuardAfterSuccess(container, {\n        tenantId: auth.tenantId,\n        organizationId: selectedOrganizationId,\n        userId: guardUserId,\n        resourceKind: 'customers.activity',\n        resourceId: parsed.id,\n        operation: 'update',\n        requestMethod: request.method,\n        requestHeaders: request.headers,\n        metadata: guardResult.metadata ?? null,\n      })\n    }\n\n    return withAdapterHeaders(NextResponse.json({ ok: true }))\n  } catch (err) {\n    if (isCrudHttpError(err)) {\n      return withAdapterHeaders(NextResponse.json(err.body, { status: err.status }))\n    }\n    if (err instanceof z.ZodError) {\n      return withAdapterHeaders(\n        NextResponse.json({ error: 'Validation failed', details: err.issues }, { status: 400 }),\n      )\n    }\n    console.error('customers.activities.put failed', err)\n    return withAdapterHeaders(\n      NextResponse.json({ error: 'Internal server error' }, { status: 500 }),\n    )\n  }\n}\n\nexport async function DELETE(request: Request): Promise<Response> {\n  try {\n    const { commandContext, container, em, auth, selectedOrganizationId } = await resolveCustomersRequestContext(request)\n    const flags = await resolveCustomerInteractionFeatureFlags(container, auth.tenantId)\n    if (!flags.legacyAdapters) {\n      return await legacyAdaptersDisabledResponse()\n    }\n    const body = await readJsonSafe<Record<string, unknown>>(request, {})\n    const parsed = activityDeleteBodySchema.parse(body)\n    const guardUserId = resolveGuardUserId(auth)\n    const guardResult = await validateCrudMutationGuard(container, {\n      tenantId: auth.tenantId,\n      organizationId: selectedOrganizationId,\n      userId: guardUserId,\n      resourceKind: 'customers.activity',\n      resourceId: parsed.id,\n      operation: 'delete',\n      requestMethod: request.method,\n      requestHeaders: request.headers,\n      mutationPayload: parsed,\n    })\n    if (guardResult && !guardResult.ok) {\n      return withAdapterHeaders(NextResponse.json(guardResult.body, { status: guardResult.status }))\n    }\n    const commandBus = container.resolve('commandBus') as CommandBus\n    const interactionId = flags.unified\n      ? parsed.id\n      : await resolveCanonicalActivityTargetId(em, commandBus, commandContext, parsed.id, auth.tenantId)\n    await commandBus.execute('customers.interactions.delete', {\n      input: { id: interactionId },\n      ctx: commandContext,\n    })\n    if (guardResult?.ok && guardResult.shouldRunAfterSuccess) {\n      await runCrudMutationGuardAfterSuccess(container, {\n        tenantId: auth.tenantId,\n        organizationId: selectedOrganizationId,\n        userId: guardUserId,\n        resourceKind: 'customers.activity',\n        resourceId: parsed.id,\n        operation: 'delete',\n        requestMethod: request.method,\n        requestHeaders: request.headers,\n        metadata: guardResult.metadata ?? null,\n      })\n    }\n    return withAdapterHeaders(NextResponse.json({ ok: true }))\n  } catch (err) {\n    if (isCrudHttpError(err)) {\n      return withAdapterHeaders(NextResponse.json(err.body, { status: err.status }))\n    }\n    if (err instanceof z.ZodError) {\n      return withAdapterHeaders(\n        NextResponse.json({ error: 'Validation failed', details: err.issues }, { status: 400 }),\n      )\n    }\n    console.error('customers.activities.delete failed', err)\n    return withAdapterHeaders(\n      NextResponse.json({ error: 'Internal server error' }, { status: 500 }),\n    )\n  }\n}\n\nconst activityListItemSchema = z\n  .object({\n    id: z.string().uuid(),\n    activityType: z.string(),\n    subject: z.string().nullable().optional(),\n    body: z.string().nullable().optional(),\n    occurredAt: z.string().nullable().optional(),\n    createdAt: z.string(),\n    appearanceIcon: z.string().nullable().optional(),\n    appearanceColor: z.string().nullable().optional(),\n    entityId: z.string().uuid().nullable().optional(),\n    authorUserId: z.string().uuid().nullable().optional(),\n    authorName: z.string().nullable().optional(),\n    authorEmail: z.string().nullable().optional(),\n    dealId: z.string().uuid().nullable().optional(),\n    dealTitle: z.string().nullable().optional(),\n    customValues: z.record(z.string(), z.unknown()).nullable().optional(),\n    activityTypeLabel: z.string().nullable().optional(),\n  })\n  .passthrough()\n\nconst activityCreateResponseSchema = z.object({\n  id: z.string().uuid().nullable(),\n})\n\nexport const openApi: OpenApiRouteDoc = createCustomersCrudOpenApi({\n  resourceName: 'Activity',\n  querySchema: listSchema,\n  listResponseSchema: createPagedListResponseSchema(activityListItemSchema),\n  create: {\n    schema: activityCreateBodySchema,\n    responseSchema: activityCreateResponseSchema,\n    description: 'DEPRECATED (sunset 2026-06-30): Creates a timeline activity. Use POST /api/customers/interactions instead.',\n  },\n  update: {\n    schema: activityUpdateBodySchema,\n    responseSchema: defaultOkResponseSchema,\n    description: 'DEPRECATED (sunset 2026-06-30): Updates an activity. Use PUT /api/customers/interactions instead.',\n  },\n  del: {\n    schema: activityDeleteBodySchema,\n    responseSchema: defaultOkResponseSchema,\n    description: 'DEPRECATED (sunset 2026-06-30): Deletes an activity. Use DELETE /api/customers/interactions instead.',\n  },\n})\n"],
-  "mappings": "AAKA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAIlB,SAAwB,uBAAuB;AAC/C,SAAS,2BAA2B;AACpC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,oBAAoB;AAC7B,SAAS,0BAA0B;AACnC,SAAS,kBAAkB,cAAc,2BAA2B;AACpE,SAAS,YAAY;AACrB,SAAS,sBAAsB,4BAA4B;AAC3D,SAAS,4BAA4B,+BAA+B,+BAA+B;AACnG;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,8CAA8C;AACvD,SAAS,sCAAsC;AAC/C,SAAS,oCAAoC;AAC7C,SAAS,wCAAwC;AAEjD,MAAM,aAAa,EAAE,OAAO;AAAA,EAC1B,MAAM,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,QAAQ,CAAC;AAAA,EACxC,UAAU,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,QAAQ,EAAE;AAAA,EACtD,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACrC,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACnC,cAAc,EAAE,OAAO,EAAE,SAAS;AAAA,EAClC,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,SAAS,EAAE,KAAK,CAAC,OAAO,MAAM,CAAC,EAAE,SAAS;AAC5C,CAAC,EAAE,YAAY;AAEf,MAAM,gBAAgB;AAAA,EACpB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,2BAA2B,EAAE;AAAA,EACzE,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,6BAA6B,EAAE;AAAA,EAC5E,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,6BAA6B,EAAE;AAAA,EAC3E,QAAQ,EAAE,aAAa,MAAM,iBAAiB,CAAC,6BAA6B,EAAE;AAChF;AAEO,MAAM,WAAW;AAExB,MAAM,2BAA2B,qBAAqB,KAAK;AAAA,EACzD,gBAAgB;AAAA,EAChB,UAAU;AACZ,CAAC,EAAE,YAAY;AAEf,MAAM,2BAA2B,qBAAqB,KAAK;AAAA,EACzD,gBAAgB;AAAA,EAChB,UAAU;AACZ,CAAC,EAAE,YAAY;AAEf,MAAM,2BAA2B,EAAE,OAAO;AAAA,EACxC,IAAI,EAAE,OAAO,EAAE,KAAK;AACtB,CAAC;AAED,MAAM,kBAAkB;AAAA,EACtB,aAAa;AAAA,EACb,QAAQ;AAAA,EACR,MAAM;AACR;AAMA,MAAM,4BAA4B;AA2BlC,SAAS,mBAAmB,MAIjB;AACT,MAAI,OAAO,KAAK,QAAQ,YAAY,KAAK,IAAI,KAAK,EAAE,SAAS,EAAG,QAAO,KAAK;AAC5E,MAAI,OAAO,KAAK,WAAW,YAAY,KAAK,OAAO,KAAK,EAAE,SAAS,EAAG,QAAO,KAAK;AAClF,MAAI,OAAO,KAAK,UAAU,YAAY,KAAK,MAAM,KAAK,EAAE,SAAS,EAAG,QAAO,KAAK;AAChF,SAAO;AACT;AAEA,SAAS,mBAAmB,UAA8B;AACxD,QAAM,UAAU,IAAI,QAAQ,SAAS,OAAO;AAC5C,SAAO,QAAQ,eAAe,EAAE,QAAQ,CAAC,CAAC,KAAK,KAAK,MAAM,QAAQ,IAAI,KAAK,KAAK,CAAC;AACjF,SAAO,IAAI,SAAS,SAAS,MAAM;AAAA,IACjC,QAAQ,SAAS;AAAA,IACjB,YAAY,SAAS;AAAA,IACrB;AAAA,EACF,CAAC;AACH;AAEA,eAAe,iCAAoD;AACjE,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,SAAO,mBAAmB,aAAa;AAAA,IACrC;AAAA,MACE,OAAO;AAAA,QACL;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IACA,EAAE,QAAQ,IAAI;AAAA,EAChB,CAAC;AACH;AAEA,SAAS,mBAAmB,WAA+B,SAAyB;AAClF,MAAI,cAAc,aAAa;AAC7B,WAAO,EAAE,WAAW,QAAQ;AAAA,EAC9B;AACA,SAAO,EAAE,YAAY,SAAS,WAAW,QAAQ;AACnD;AAEA,SAAS,sBAAsB,WAA+B,SAAyB;AACrF,MAAI,cAAc,aAAa;AAC7B,WAAO,EAAE,WAAW,QAAQ;AAAA,EAC9B;AACA,SAAO,EAAE,YAAY,SAAS,WAAW,QAAQ;AACnD;AAEA,SAAS,yBAAyB,MAAoB,WAAuC;AAC3F,QAAM,MACJ,cAAc,cACV,KAAK,YACL,KAAK,cAAc,KAAK;AAC9B,QAAM,YAAY,MAAM,IAAI,KAAK,GAAG,EAAE,QAAQ,IAAI,OAAO;AACzD,SAAO,OAAO,MAAM,SAAS,IAAI,IAAI;AACvC;AAEA,SAAS,kBACP,OACA,WACA,SACgB;AAChB,SAAO,CAAC,GAAG,KAAK,EAAE,KAAK,CAAC,MAAM,UAAU;AACtC,UAAM,YAAY,yBAAyB,MAAM,SAAS;AAC1D,UAAM,aAAa,yBAAyB,OAAO,SAAS;AAC5D,QAAI,cAAc,YAAY;AAC5B,aAAO,YAAY,QACf,KAAK,GAAG,cAAc,MAAM,EAAE,IAC9B,MAAM,GAAG,cAAc,KAAK,EAAE;AAAA,IACpC;AACA,WAAO,YAAY,QAAQ,YAAY,aAAa,aAAa;AAAA,EACnE,CAAC;AACH;AAEA,SAAS,sBACP,OACA,MACA,UAC0C;AAC1C,QAAM,SAAS,OAAO,KAAK;AAC3B,SAAO;AAAA,IACL,OAAO,MAAM,MAAM,OAAO,QAAQ,QAAQ;AAAA,IAC1C,OAAO,MAAM;AAAA,EACf;AACF;AAEA,eAAe,sBACb,IACA,OACA,iBACyB;AACzB,MAAI,MAAM,WAAW,EAAG,QAAO;AAE/B,QAAM,YAAY,MAAM;AAAA,IACtB,IAAI;AAAA,MACF,MACG,IAAI,CAAC,SAAU,OAAO,KAAK,iBAAiB,WAAW,KAAK,eAAe,IAAK,EAChF,OAAO,CAAC,UAA2B,CAAC,CAAC,KAAK;AAAA,IAC/C;AAAA,EACF;AACA,QAAM,UAAU,MAAM;AAAA,IACpB,IAAI;AAAA,MACF,MACG,IAAI,CAAC,SAAU,OAAO,KAAK,WAAW,WAAW,KAAK,SAAS,IAAK,EACpE,OAAO,CAAC,UAA2B,CAAC,CAAC,KAAK;AAAA,IAC/C;AAAA,EACF;AAEA,QAAM,CAAC,OAAO,KAAK,IAAI,MAAM,QAAQ,IAAI;AAAA,IACvC,UAAU,SAAS,IAAI,GAAG,KAAK,MAAM,EAAE,IAAI,EAAE,KAAK,UAAU,EAAE,CAAC,IAAI,QAAQ,QAAQ,CAAC,CAAC;AAAA,IACrF,QAAQ,SAAS,IACb,kBACE,mBAAmB,IAAI,cAAc,EAAE,IAAI,EAAE,KAAK,QAAQ,EAAE,GAAG,QAAW,eAAe,IACzF,GAAG,KAAK,cAAc,EAAE,IAAI,EAAE,KAAK,QAAQ,EAAE,CAAC,IAChD,QAAQ,QAAQ,CAAC,CAAC;AAAA,EACxB,CAAC;AAED,QAAM,UAAU,IAAI;AAAA,IAClB,MAAM,IAAI,CAAC,SAAS;AAAA,MAClB,KAAK;AAAA,MACL;AAAA,QACE,MAAM,KAAK,QAAQ;AAAA,QACnB,OAAO,KAAK,SAAS;AAAA,MACvB;AAAA,IACF,CAAC;AAAA,EACH;AACA,QAAM,UAAU,IAAI,IAAI,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,IAAI,KAAK,KAAK,CAAC,CAAC;AAElE,SAAO,MAAM,IAAI,CAAC,UAAU;AAAA,IAC1B,GAAG;AAAA,IACH,mBAAmB,KAAK;AAAA,IACxB,YAAY,KAAK,eAAe,QAAQ,IAAI,KAAK,YAAY,GAAG,QAAQ,OAAO;AAAA,IAC/E,aAAa,KAAK,eAAe,QAAQ,IAAI,KAAK,YAAY,GAAG,SAAS,OAAO;AAAA,IACjF,WAAW,KAAK,SAAS,QAAQ,IAAI,KAAK,MAAM,KAAK,OAAO;AAAA,EAC9D,EAAE;AACJ;AAEA,SAAS,kBAAkB,UAA0C;AACnE,SAAO;AAAA,IACL,IAAI,SAAS;AAAA,IACb,cAAc,SAAS;AAAA,IACvB,SAAS,SAAS,WAAW;AAAA,IAC7B,MAAM,SAAS,QAAQ;AAAA,IACvB,YAAY,SAAS,aAAa,SAAS,WAAW,YAAY,IAAI;AAAA,IACtE,WAAW,SAAS,UAAU,YAAY;AAAA,IAC1C,gBAAgB,SAAS,kBAAkB;AAAA,IAC3C,iBAAiB,SAAS,mBAAmB;AAAA,IAC7C,UAAU,OAAO,SAAS,WAAW,WAAW,SAAS,SAAS,SAAS,OAAO;AAAA,IAClF,cAAc,SAAS,gBAAgB;AAAA,IACvC,QAAQ,SAAS,OAAQ,OAAO,SAAS,SAAS,WAAW,SAAS,OAAO,SAAS,KAAK,KAAM;AAAA,IACjG,cAAc;AAAA,EAChB;AACF;AAEA,eAAe,wBACb,IACA,WACA,MACA,wBACA,UACA,iBACA,OACA,SACsC;AACtC,QAAM,QAAiC;AAAA,IACrC;AAAA,IACA,iBAAiB,EAAE,KAAK,OAAO;AAAA,EACjC;AACA,MAAI,CAAC,SAAS,gBAAgB;AAC5B,UAAM,YAAY;AAAA,EACpB;AACA,MAAI,mBAAmB,gBAAgB,SAAS,GAAG;AACjD,UAAM,iBAAiB,EAAE,KAAK,gBAAgB;AAAA,EAChD;AACA,MAAI,MAAM,SAAU,OAAM,SAAS,MAAM;AACzC,MAAI,MAAM,OAAQ,OAAM,SAAS,MAAM;AACvC,MAAI,MAAM,aAAc,OAAM,kBAAkB,MAAM;AACtD,MAAI,SAAS,QAAQ;AACnB,UAAM,SAAS,MAAM,QAAQ,QAAQ,MAAM,IAAI,EAAE,KAAK,QAAQ,OAAO,IAAI,QAAQ;AAAA,EACnF;AAEA,QAAM,cAAc;AAAA,IAClB,SAAS,sBAAsB,MAAM,WAAW,MAAM,WAAW,MAAM;AAAA,IACvE,GAAI,SAAS,aAAa,QACtB,CAAC,IACD;AAAA,MACE,SAAS,MAAM,OAAO,KAAK,MAAM;AAAA,MACjC,OAAO,MAAM;AAAA,IACf;AAAA,EACN;AAEA,QAAM,OACJ,SAAS,aAAa,QAClB,MAAM,GAAG,KAAK,qBAAqB,OAAO,WAAW,KACpD,MAAM,GAAG,aAAa,qBAAqB,OAAO,WAAW,GAAG,CAAC;AACxE,QAAM,QACJ,SAAS,aAAa,QAClB,KAAK,OAAO,CAAC,QAAQ,CAAC,IAAI,SAAS,EAAE,SACrC,MAAM,GAAG,MAAM,qBAAqB,KAAK;AAE/C,QAAM,aAAa,KAAK,OAAO,CAAC,QAAQ,CAAC,IAAI,SAAS;AACtD,QAAM,WAAW,MAAM,6BAA6B;AAAA,IAClD;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,cAAc;AAAA,EAChB,CAAC;AACD,QAAM,QAAQ,SAAS,IAAI,CAAC,SAAS;AAAA,IACnC,GAAG,sCAAsC,GAAG;AAAA,IAC5C,cAAc,IAAI,gBAAgB;AAAA,IAClC,mBAAmB,IAAI;AAAA,EACzB,EAAE;AAEF,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,WAAW,IAAI,IAAI,KAAK,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC;AAAA,EAC9C;AACF;AAEA,eAAe,qBACb,IACA,UACA,iBACA,OACA,SACA,wBACmD;AACnD,QAAM,QAAiC,EAAE,SAAS;AAClD,MAAI,mBAAmB,gBAAgB,SAAS,GAAG;AACjD,UAAM,iBAAiB,EAAE,KAAK,gBAAgB;AAAA,EAChD;AACA,MAAI,MAAM,SAAU,OAAM,SAAS,MAAM;AACzC,MAAI,MAAM,OAAQ,OAAM,OAAO,MAAM;AACrC,MAAI,MAAM,aAAc,OAAM,eAAe,MAAM;AAEnD,QAAM,cAAc;AAAA,IAClB,UAAU,CAAC,UAAU,MAAM;AAAA,IAC3B,SAAS,mBAAmB,MAAM,WAAW,MAAM,WAAW,MAAM;AAAA,IACpE,GAAI,SAAS,aAAa,QACtB,CAAC,IACD;AAAA,MACE,SAAS,MAAM,OAAO,KAAK,MAAM;AAAA,MACjC,OAAO,MAAM;AAAA,IACf;AAAA,EACN;AAEA,QAAM,OACJ,SAAS,aAAa,QAClB,MAAM,GAAG,KAAK,kBAAkB,OAAO,WAAW,KACjD,MAAM,GAAG,aAAa,kBAAkB,OAAO,WAAW,GAAG,CAAC;AACrE,QAAM,QACJ,SAAS,aAAa,QAClB,KAAK,SACL,MAAM,GAAG,MAAM,kBAAkB,KAAK;AAE5C,SAAO;AAAA,IACL,OAAO,MAAM;AAAA,MACX;AAAA,MACA,KAAK,IAAI,iBAAiB;AAAA,MAC1B,yBAAyB,EAAE,UAAU,gBAAgB,uBAAuB,IAAI;AAAA,IAClF;AAAA,IACA;AAAA,EACF;AACF;AAEA,eAAsB,IAAI,SAAqC;AAC7D,MAAI;AACF,UAAM,MAAM,IAAI,IAAI,QAAQ,GAAG;AAC/B,UAAM,QAAQ,WAAW,MAAM,OAAO,YAAY,IAAI,YAAY,CAAC;AACnE,UAAM;AAAA,MACJ;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,IAAI,MAAM,+BAA+B,OAAO;AAChD,UAAM,QAAQ,MAAM,uCAAuC,WAAW,KAAK,QAAQ;AACnF,QAAI,CAAC,MAAM,gBAAgB;AACzB,aAAO,MAAM,+BAA+B;AAAA,IAC9C;AAEA,UAAM,UAAU,MAAM,WAAW;AAEjC,UAAM,SAAS,MAAM,UACjB,MAAM;AAAA,MACJ;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,KAAK;AAAA,MACL;AAAA,MACA;AAAA,IACF,IACA,OAAO,YAAY;AACnB,YAAM,aAAa,KAAK;AAAA,QACtB;AAAA,QACA,KAAK,IAAI,MAAM,UAAU,MAAM,OAAO,MAAM,WAAW,MAAM,QAAQ;AAAA,MACvE;AACA,YAAM,gBAAgB,EAAE,GAAG,OAAO,MAAM,GAAG,UAAU,WAAW;AAChE,YAAM,CAAC,QAAQ,SAAS,IAAI,MAAM,QAAQ,IAAI;AAAA,QAC5C;AAAA,UACE;AAAA,UACA,KAAK;AAAA,UACL;AAAA,UACA;AAAA,UACA,EAAE,UAAU,KAAK;AAAA,UACjB;AAAA,QACF;AAAA,QACA;AAAA,UACE;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA,KAAK;AAAA,UACL;AAAA,UACA;AAAA,UACA;AAAA,YACE,gBAAgB;AAAA,YAChB,UAAU;AAAA,YACV,QAAQ;AAAA,UACV;AAAA,QACF;AAAA,MACF,CAAC;AACD,YAAM,SAAS;AAAA,QACb;AAAA,UACE,GAAG,OAAO,MAAM,OAAO,CAAC,SAAS,CAAC,UAAU,UAAU,IAAI,KAAK,EAAE,CAAC;AAAA,UAClE,GAAG,UAAU;AAAA,QACf;AAAA,QACA,MAAM;AAAA,QACN;AAAA,MACF;AACA,YAAM,QAAQ,sBAAsB,QAAQ,MAAM,MAAM,MAAM,QAAQ;AACtE,aAAO;AAAA,QACL,OAAO,MAAM;AAAA,QACb,OAAO,MAAM;AAAA,MACf;AAAA,IACF,GAAG;AAEL,WAAO;AAAA,MACL,aAAa,KAAK;AAAA,QAChB,OAAO,OAAO;AAAA,QACd,OAAO,OAAO;AAAA,QACd,MAAM,MAAM;AAAA,QACZ,UAAU,MAAM;AAAA,QAChB,YAAY,KAAK,IAAI,GAAG,KAAK,KAAK,OAAO,QAAQ,MAAM,QAAQ,CAAC;AAAA,MAClE,CAAC;AAAA,IACH;AAAA,EACF,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,GAAG;AACxB,aAAO,mBAAmB,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC,CAAC;AAAA,IAC/E;AACA,QAAI,eAAe,EAAE,UAAU;AAC7B,aAAO;AAAA,QACL,aAAa,KAAK,EAAE,OAAO,qBAAqB,SAAS,IAAI,OAAO,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,MACxF;AAAA,IACF;AACA,YAAQ,MAAM,mCAAmC,GAAG;AACpD,WAAO;AAAA,MACL,aAAa,KAAK,EAAE,OAAO,wBAAwB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACvE;AAAA,EACF;AACF;AAEA,eAAsB,KAAK,SAAqC;AAC9D,MAAI;AACF,UAAM,EAAE,gBAAgB,WAAW,MAAM,uBAAuB,IAAI,MAAM,+BAA+B,OAAO;AAChH,UAAM,QAAQ,MAAM,uCAAuC,WAAW,KAAK,QAAQ;AACnF,QAAI,CAAC,MAAM,gBAAgB;AACzB,aAAO,MAAM,+BAA+B;AAAA,IAC9C;AACA,UAAM,OAAO,MAAM,aAAsC,SAAS,CAAC,CAAC;AACpE,UAAM,SAAS,yBAAyB,MAAM,IAAI;AAClD,UAAM,cAAc,mBAAmB,IAAI;AAC3C,UAAM,cAAc,MAAM,0BAA0B,WAAW;AAAA,MAC7D,UAAU,KAAK;AAAA,MACf,gBAAgB;AAAA,MAChB,QAAQ;AAAA,MACR,cAAc;AAAA,MACd,YAAY,OAAO;AAAA,MACnB,WAAW;AAAA,MACX,eAAe,QAAQ;AAAA,MACvB,gBAAgB,QAAQ;AAAA,MACxB,iBAAiB;AAAA,IACnB,CAAC;AACD,QAAI,eAAe,CAAC,YAAY,IAAI;AAClC,aAAO,mBAAmB,aAAa,KAAK,YAAY,MAAM,EAAE,QAAQ,YAAY,OAAO,CAAC,CAAC;AAAA,IAC/F;AACA,UAAM,aAAa,UAAU,QAAQ,YAAY;AACjD,UAAM,EAAE,OAAO,IAAI,MAAM,WAAW,QAAQ,iCAAiC;AAAA,MAC3E,OAAO;AAAA,QACL,UAAU,KAAK;AAAA,QACf,gBAAgB,0BAA0B,KAAK;AAAA,QAC/C,UAAU,OAAO;AAAA,QACjB,iBAAiB,OAAO;AAAA,QACxB,OAAO,OAAO,WAAW;AAAA,QACzB,MAAM,OAAO,QAAQ;AAAA,QACrB,YAAY,OAAO,cAAc;AAAA,QACjC,QAAQ,OAAO,aAAa,SAAS;AAAA,QACrC,QAAQ,OAAO,UAAU;AAAA,QACzB,cAAc,OAAO,gBAAgB;AAAA,QACrC,gBAAgB,OAAO,kBAAkB;AAAA,QACzC,iBAAiB,OAAO,mBAAmB;AAAA,QAC3C,QAAQ;AAAA,QACR,cAAe,OAAmC;AAAA,QAClD,cAAe,OAAmC;AAAA,MACpD;AAAA,MACA,KAAK;AAAA,IACP,CAAC;AACD,QAAI,aAAa,MAAM,YAAY,uBAAuB;AACxD,YAAM,iCAAiC,WAAW;AAAA,QAChD,UAAU,KAAK;AAAA,QACf,gBAAgB;AAAA,QAChB,QAAQ;AAAA,QACR,cAAc;AAAA,QACd,YAAY,OAAO;AAAA,QACnB,WAAW;AAAA,QACX,eAAe,QAAQ;AAAA,QACvB,gBAAgB,QAAQ;AAAA,QACxB,UAAU,YAAY,YAAY;AAAA,MACpC,CAAC;AAAA,IACH;AAEA,WAAO;AAAA,MACL,aAAa;AAAA,QACX;AAAA,UACE,IACE,UACA,OAAO,WAAW,YAClB,mBAAmB,UACnB,OAAO,OAAO,kBAAkB,WAC5B,OAAO,gBACP,UACE,OAAO,WAAW,YAClB,QAAQ,UACR,OAAO,OAAO,OAAO,WACrB,OAAO,KACP;AAAA,QACV;AAAA,QACA,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAAA,EACF,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,GAAG;AACxB,aAAO,mBAAmB,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC,CAAC;AAAA,IAC/E;AACA,QAAI,eAAe,EAAE,UAAU;AAC7B,aAAO;AAAA,QACL,aAAa,KAAK,EAAE,OAAO,qBAAqB,SAAS,IAAI,OAAO,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,MACxF;AAAA,IACF;AACA,YAAQ,MAAM,oCAAoC,GAAG;AACrD,WAAO;AAAA,MACL,aAAa,KAAK,EAAE,OAAO,wBAAwB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACvE;AAAA,EACF;AACF;AAEA,eAAsB,IAAI,SAAqC;AAC7D,MAAI;AACF,UAAM,EAAE,gBAAgB,WAAW,IAAI,MAAM,uBAAuB,IAAI,MAAM,+BAA+B,OAAO;AACpH,UAAM,QAAQ,MAAM,uCAAuC,WAAW,KAAK,QAAQ;AACnF,QAAI,CAAC,MAAM,gBAAgB;AACzB,aAAO,MAAM,+BAA+B;AAAA,IAC9C;AACA,UAAM,OAAO,MAAM,aAAsC,SAAS,CAAC,CAAC;AACpE,UAAM,SAAS,yBAAyB,MAAM,IAAI;AAClD,UAAM,cAAc,mBAAmB,IAAI;AAC3C,UAAM,cAAc,MAAM,0BAA0B,WAAW;AAAA,MAC7D,UAAU,KAAK;AAAA,MACf,gBAAgB;AAAA,MAChB,QAAQ;AAAA,MACR,cAAc;AAAA,MACd,YAAY,OAAO;AAAA,MACnB,WAAW;AAAA,MACX,eAAe,QAAQ;AAAA,MACvB,gBAAgB,QAAQ;AAAA,MACxB,iBAAiB;AAAA,IACnB,CAAC;AACD,QAAI,eAAe,CAAC,YAAY,IAAI;AAClC,aAAO,mBAAmB,aAAa,KAAK,YAAY,MAAM,EAAE,QAAQ,YAAY,OAAO,CAAC,CAAC;AAAA,IAC/F;AACA,UAAM,aAAa,UAAU,QAAQ,YAAY;AACjD,UAAM,gBAAgB,MAAM,UACxB,OAAO,KACP,MAAM,iCAAiC,IAAI,YAAY,gBAAgB,OAAO,IAAI,KAAK,QAAQ;AAEnG,UAAM,WAAW,QAAQ,iCAAiC;AAAA,MACxD,OAAO;AAAA,QACL,IAAI;AAAA,QACJ,iBAAiB,OAAO;AAAA,QACxB,OAAO,OAAO,WAAW;AAAA,QACzB,MAAM,OAAO,QAAQ;AAAA,QACrB,YAAY,OAAO,cAAc;AAAA,QACjC,QAAQ,OAAO,aAAa,SAAS;AAAA,QACrC,QAAQ,OAAO,UAAU;AAAA,QACzB,cAAc,OAAO,gBAAgB;AAAA,QACrC,gBAAgB,OAAO,kBAAkB;AAAA,QACzC,iBAAiB,OAAO,mBAAmB;AAAA,QAC3C,cAAe,OAAmC;AAAA,QAClD,cAAe,OAAmC;AAAA,MACpD;AAAA,MACA,KAAK;AAAA,IACP,CAAC;AACD,QAAI,aAAa,MAAM,YAAY,uBAAuB;AACxD,YAAM,iCAAiC,WAAW;AAAA,QAChD,UAAU,KAAK;AAAA,QACf,gBAAgB;AAAA,QAChB,QAAQ;AAAA,QACR,cAAc;AAAA,QACd,YAAY,OAAO;AAAA,QACnB,WAAW;AAAA,QACX,eAAe,QAAQ;AAAA,QACvB,gBAAgB,QAAQ;AAAA,QACxB,UAAU,YAAY,YAAY;AAAA,MACpC,CAAC;AAAA,IACH;AAEA,WAAO,mBAAmB,aAAa,KAAK,EAAE,IAAI,KAAK,CAAC,CAAC;AAAA,EAC3D,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,GAAG;AACxB,aAAO,mBAAmB,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC,CAAC;AAAA,IAC/E;AACA,QAAI,eAAe,EAAE,UAAU;AAC7B,aAAO;AAAA,QACL,aAAa,KAAK,EAAE,OAAO,qBAAqB,SAAS,IAAI,OAAO,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,MACxF;AAAA,IACF;AACA,YAAQ,MAAM,mCAAmC,GAAG;AACpD,WAAO;AAAA,MACL,aAAa,KAAK,EAAE,OAAO,wBAAwB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACvE;AAAA,EACF;AACF;AAEA,eAAsB,OAAO,SAAqC;AAChE,MAAI;AACF,UAAM,EAAE,gBAAgB,WAAW,IAAI,MAAM,uBAAuB,IAAI,MAAM,+BAA+B,OAAO;AACpH,UAAM,QAAQ,MAAM,uCAAuC,WAAW,KAAK,QAAQ;AACnF,QAAI,CAAC,MAAM,gBAAgB;AACzB,aAAO,MAAM,+BAA+B;AAAA,IAC9C;AACA,UAAM,OAAO,MAAM,aAAsC,SAAS,CAAC,CAAC;AACpE,UAAM,SAAS,yBAAyB,MAAM,IAAI;AAClD,UAAM,cAAc,mBAAmB,IAAI;AAC3C,UAAM,cAAc,MAAM,0BAA0B,WAAW;AAAA,MAC7D,UAAU,KAAK;AAAA,MACf,gBAAgB;AAAA,MAChB,QAAQ;AAAA,MACR,cAAc;AAAA,MACd,YAAY,OAAO;AAAA,MACnB,WAAW;AAAA,MACX,eAAe,QAAQ;AAAA,MACvB,gBAAgB,QAAQ;AAAA,MACxB,iBAAiB;AAAA,IACnB,CAAC;AACD,QAAI,eAAe,CAAC,YAAY,IAAI;AAClC,aAAO,mBAAmB,aAAa,KAAK,YAAY,MAAM,EAAE,QAAQ,YAAY,OAAO,CAAC,CAAC;AAAA,IAC/F;AACA,UAAM,aAAa,UAAU,QAAQ,YAAY;AACjD,UAAM,gBAAgB,MAAM,UACxB,OAAO,KACP,MAAM,iCAAiC,IAAI,YAAY,gBAAgB,OAAO,IAAI,KAAK,QAAQ;AACnG,UAAM,WAAW,QAAQ,iCAAiC;AAAA,MACxD,OAAO,EAAE,IAAI,cAAc;AAAA,MAC3B,KAAK;AAAA,IACP,CAAC;AACD,QAAI,aAAa,MAAM,YAAY,uBAAuB;AACxD,YAAM,iCAAiC,WAAW;AAAA,QAChD,UAAU,KAAK;AAAA,QACf,gBAAgB;AAAA,QAChB,QAAQ;AAAA,QACR,cAAc;AAAA,QACd,YAAY,OAAO;AAAA,QACnB,WAAW;AAAA,QACX,eAAe,QAAQ;AAAA,QACvB,gBAAgB,QAAQ;AAAA,QACxB,UAAU,YAAY,YAAY;AAAA,MACpC,CAAC;AAAA,IACH;AACA,WAAO,mBAAmB,aAAa,KAAK,EAAE,IAAI,KAAK,CAAC,CAAC;AAAA,EAC3D,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,GAAG;AACxB,aAAO,mBAAmB,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC,CAAC;AAAA,IAC/E;AACA,QAAI,eAAe,EAAE,UAAU;AAC7B,aAAO;AAAA,QACL,aAAa,KAAK,EAAE,OAAO,qBAAqB,SAAS,IAAI,OAAO,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,MACxF;AAAA,IACF;AACA,YAAQ,MAAM,sCAAsC,GAAG;AACvD,WAAO;AAAA,MACL,aAAa,KAAK,EAAE,OAAO,wBAAwB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACvE;AAAA,EACF;AACF;AAEA,MAAM,yBAAyB,EAC5B,OAAO;AAAA,EACN,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,cAAc,EAAE,OAAO;AAAA,EACvB,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACxC,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACrC,YAAY,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC3C,WAAW,EAAE,OAAO;AAAA,EACpB,gBAAgB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC/C,iBAAiB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAChD,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS;AAAA,EAChD,cAAc,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS;AAAA,EACpD,YAAY,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC3C,aAAa,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC5C,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS;AAAA,EAC9C,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC1C,cAAc,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS,EAAE,SAAS;AAAA,EACpE,mBAAmB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AACpD,CAAC,EACA,YAAY;AAEf,MAAM,+BAA+B,EAAE,OAAO;AAAA,EAC5C,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AACjC,CAAC;AAEM,MAAM,UAA2B,2BAA2B;AAAA,EACjE,cAAc;AAAA,EACd,aAAa;AAAA,EACb,oBAAoB,8BAA8B,sBAAsB;AAAA,EACxE,QAAQ;AAAA,IACN,QAAQ;AAAA,IACR,gBAAgB;AAAA,IAChB,aAAa;AAAA,EACf;AAAA,EACA,QAAQ;AAAA,IACN,QAAQ;AAAA,IACR,gBAAgB;AAAA,IAChB,aAAa;AAAA,EACf;AAAA,EACA,KAAK;AAAA,IACH,QAAQ;AAAA,IACR,gBAAgB;AAAA,IAChB,aAAa;AAAA,EACf;AACF,CAAC;",
+  "sourcesContent": ["/**\n * @deprecated Use /api/customers/interactions instead. This route is maintained\n * as a compatibility bridge per SPEC-046b and delegates writes to canonical\n * interaction commands.\n */\nimport { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport type { CommandBus } from '@open-mercato/shared/lib/commands'\nimport { CrudHttpError, isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport {\n  runCrudMutationGuardAfterSuccess,\n  validateCrudMutationGuard,\n} from '@open-mercato/shared/lib/crud/mutation-guard'\nimport { readJsonSafe } from '@open-mercato/shared/lib/http/readJsonSafe'\nimport { findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { CustomerActivity, CustomerDeal, CustomerInteraction } from '../../data/entities'\nimport { User } from '@open-mercato/core/modules/auth/data/entities'\nimport { activityCreateSchema, activityUpdateSchema } from '../../data/validators'\nimport { createCustomersCrudOpenApi, createPagedListResponseSchema, defaultOkResponseSchema } from '../openapi'\nimport {\n  mapInteractionRecordToActivitySummary,\n  CUSTOMER_INTERACTION_ACTIVITY_ADAPTER_SOURCE,\n} from '../../lib/interactionCompatibility'\nimport { resolveCustomerInteractionFeatureFlags } from '../../lib/interactionFeatureFlags'\nimport { resolveCustomersRequestContext } from '../../lib/interactionRequestContext'\nimport { hydrateCanonicalInteractions } from '../../lib/interactionReadModel'\nimport { resolveCanonicalActivityTargetId } from '../../lib/legacyActivityBridge'\n\nconst listSchema = z.object({\n  page: z.coerce.number().min(1).default(1),\n  pageSize: z.coerce.number().min(1).max(100).default(50),\n  entityId: z.string().uuid().optional(),\n  dealId: z.string().uuid().optional(),\n  activityType: z.string().optional(),\n  sortField: z.string().optional(),\n  sortDir: z.enum(['asc', 'desc']).optional(),\n}).passthrough()\n\nconst routeMetadata = {\n  GET: { requireAuth: true, requireFeatures: ['customers.activities.view'] },\n  POST: { requireAuth: true, requireFeatures: ['customers.activities.manage'] },\n  PUT: { requireAuth: true, requireFeatures: ['customers.activities.manage'] },\n  DELETE: { requireAuth: true, requireFeatures: ['customers.activities.manage'] },\n}\n\nexport const metadata = routeMetadata\n\nconst activityCreateBodySchema = activityCreateSchema.omit({\n  organizationId: true,\n  tenantId: true,\n}).passthrough()\n\nconst activityUpdateBodySchema = activityUpdateSchema.omit({\n  organizationId: true,\n  tenantId: true,\n}).passthrough()\n\nconst activityDeleteBodySchema = z.object({\n  id: z.string().uuid(),\n})\n\nconst ADAPTER_HEADERS = {\n  Deprecation: 'true',\n  Sunset: 'Tue, 30 Jun 2026 00:00:00 GMT',\n  Link: '</api/customers/interactions>; rel=\"successor-version\"',\n}\n\n// Caps the per-source fetch window used by the deprecated merged (legacy +\n// canonical bridge) read path. Keeps memory bounded on tenants with large\n// activity history; deep-pagination beyond this window is not supported here \u2014\n// use /api/customers/interactions instead.\nconst MERGED_ACTIVITY_FETCH_CAP = 2000\n\ntype ActivityItem = {\n  id: string\n  activityType: string\n  subject?: string | null\n  body?: string | null\n  occurredAt?: string | null\n  createdAt: string\n  appearanceIcon?: string | null\n  appearanceColor?: string | null\n  entityId?: string | null\n  authorUserId?: string | null\n  authorName?: string | null\n  authorEmail?: string | null\n  dealId?: string | null\n  dealTitle?: string | null\n  customValues?: Record<string, unknown> | null\n  activityTypeLabel?: string | null\n}\n\ntype CanonicalActivityListResult = {\n  items: ActivityItem[]\n  total: number\n  bridgeIds: Set<string>\n}\n\nfunction resolveGuardUserId(auth: {\n  sub?: string | null\n  userId?: string | null\n  keyId?: string | null\n}): string {\n  if (typeof auth.sub === 'string' && auth.sub.trim().length > 0) return auth.sub\n  if (typeof auth.userId === 'string' && auth.userId.trim().length > 0) return auth.userId\n  if (typeof auth.keyId === 'string' && auth.keyId.trim().length > 0) return auth.keyId\n  return 'system'\n}\n\nfunction withAdapterHeaders(response: Response): Response {\n  const headers = new Headers(response.headers)\n  Object.entries(ADAPTER_HEADERS).forEach(([key, value]) => headers.set(key, value))\n  return new Response(response.body, {\n    status: response.status,\n    statusText: response.statusText,\n    headers,\n  })\n}\n\nasync function legacyAdaptersDisabledResponse(): Promise<Response> {\n  const { translate } = await resolveTranslations()\n  return withAdapterHeaders(NextResponse.json(\n    {\n      error: translate(\n        'customers.interactions.legacyAdapters.disabled',\n        'This legacy adapter has been disabled. Use /api/customers/interactions instead.',\n      ),\n    },\n    { status: 410 },\n  ))\n}\n\nfunction buildLegacyOrderBy(sortField: string | undefined, sortDir: 'asc' | 'desc') {\n  if (sortField === 'createdAt') {\n    return { createdAt: sortDir }\n  }\n  return { occurredAt: sortDir, createdAt: sortDir } as const\n}\n\nfunction buildCanonicalOrderBy(sortField: string | undefined, sortDir: 'asc' | 'desc') {\n  if (sortField === 'createdAt') {\n    return { createdAt: sortDir }\n  }\n  return { occurredAt: sortDir, createdAt: sortDir } as const\n}\n\nfunction resolveActivitySortValue(item: ActivityItem, sortField: string | undefined): number {\n  const raw =\n    sortField === 'createdAt'\n      ? item.createdAt\n      : item.occurredAt ?? item.createdAt\n  const timestamp = raw ? new Date(raw).getTime() : Number.NaN\n  return Number.isNaN(timestamp) ? 0 : timestamp\n}\n\nfunction sortActivityItems(\n  items: ActivityItem[],\n  sortField: string | undefined,\n  sortDir: 'asc' | 'desc',\n): ActivityItem[] {\n  return [...items].sort((left, right) => {\n    const leftValue = resolveActivitySortValue(left, sortField)\n    const rightValue = resolveActivitySortValue(right, sortField)\n    if (leftValue === rightValue) {\n      return sortDir === 'asc'\n        ? left.id.localeCompare(right.id)\n        : right.id.localeCompare(left.id)\n    }\n    return sortDir === 'asc' ? leftValue - rightValue : rightValue - leftValue\n  })\n}\n\nfunction paginateActivityItems(\n  items: ActivityItem[],\n  page: number,\n  pageSize: number,\n): { items: ActivityItem[]; total: number } {\n  const start = (page - 1) * pageSize\n  return {\n    items: items.slice(start, start + pageSize),\n    total: items.length,\n  }\n}\n\nexport async function decorateActivityItems(\n  em: EntityManager,\n  items: ActivityItem[],\n  decryptionScope?: { tenantId: string; organizationId: string },\n): Promise<ActivityItem[]> {\n  if (items.length === 0) return items\n\n  const authorIds = Array.from(\n    new Set(\n      items\n        .map((item) => (typeof item.authorUserId === 'string' ? item.authorUserId : null))\n        .filter((value): value is string => !!value),\n    ),\n  )\n  const dealIds = Array.from(\n    new Set(\n      items\n        .map((item) => (typeof item.dealId === 'string' ? item.dealId : null))\n        .filter((value): value is string => !!value),\n    ),\n  )\n\n  if (dealIds.length > 0 && (!decryptionScope?.tenantId || !decryptionScope?.organizationId)) {\n    const { translate } = await resolveTranslations()\n    throw new CrudHttpError(400, {\n      error: translate('customers.errors.tenant_required', 'Tenant context is required'),\n    })\n  }\n\n  const [users, deals] = await Promise.all([\n    authorIds.length > 0 ? em.find(User, { id: { $in: authorIds } }) : Promise.resolve([]),\n    dealIds.length > 0 && decryptionScope\n      ? findWithDecryption(\n          em,\n          CustomerDeal,\n          { id: { $in: dealIds }, tenantId: decryptionScope.tenantId, organizationId: decryptionScope.organizationId },\n          undefined,\n          decryptionScope,\n        )\n      : Promise.resolve([]),\n  ])\n\n  const userMap = new Map(\n    users.map((user) => [\n      user.id,\n      {\n        name: user.name ?? null,\n        email: user.email ?? null,\n      },\n    ]),\n  )\n  const dealMap = new Map(deals.map((deal) => [deal.id, deal.title]))\n\n  return items.map((item) => ({\n    ...item,\n    activityTypeLabel: item.activityType,\n    authorName: item.authorUserId ? userMap.get(item.authorUserId)?.name ?? null : null,\n    authorEmail: item.authorUserId ? userMap.get(item.authorUserId)?.email ?? null : null,\n    dealTitle: item.dealId ? dealMap.get(item.dealId) ?? null : null,\n  }))\n}\n\nfunction mapLegacyActivity(activity: CustomerActivity): ActivityItem {\n  return {\n    id: activity.id,\n    activityType: activity.activityType,\n    subject: activity.subject ?? null,\n    body: activity.body ?? null,\n    occurredAt: activity.occurredAt ? activity.occurredAt.toISOString() : null,\n    createdAt: activity.createdAt.toISOString(),\n    appearanceIcon: activity.appearanceIcon ?? null,\n    appearanceColor: activity.appearanceColor ?? null,\n    entityId: typeof activity.entity === 'string' ? activity.entity : activity.entity.id,\n    authorUserId: activity.authorUserId ?? null,\n    dealId: activity.deal ? (typeof activity.deal === 'string' ? activity.deal : activity.deal.id) : null,\n    customValues: null,\n  }\n}\n\nasync function listCanonicalActivities(\n  em: EntityManager,\n  container: { resolve: (name: string) => unknown },\n  auth: { tenantId: string | null; orgId: string | null; sub?: string | null; userId?: string | null; keyId?: string | null },\n  selectedOrganizationId: string | null,\n  tenantId: string,\n  organizationIds: string[] | null,\n  query: z.infer<typeof listSchema>,\n  options?: { includeDeleted?: boolean; source?: string | string[] | null; paginate?: boolean },\n): Promise<CanonicalActivityListResult> {\n  const where: Record<string, unknown> = {\n    tenantId,\n    interactionType: { $ne: 'task' },\n  }\n  if (!options?.includeDeleted) {\n    where.deletedAt = null\n  }\n  if (organizationIds && organizationIds.length > 0) {\n    where.organizationId = { $in: organizationIds }\n  }\n  if (query.entityId) where.entity = query.entityId\n  if (query.dealId) where.dealId = query.dealId\n  if (query.activityType) where.interactionType = query.activityType\n  if (options?.source) {\n    where.source = Array.isArray(options.source) ? { $in: options.source } : options.source\n  }\n\n  const findOptions = {\n    orderBy: buildCanonicalOrderBy(query.sortField, query.sortDir ?? 'desc'),\n    ...(options?.paginate === false\n      ? {}\n      : {\n          offset: (query.page - 1) * query.pageSize,\n          limit: query.pageSize,\n        }),\n  }\n\n  const rows =\n    options?.paginate === false\n      ? await em.find(CustomerInteraction, where, findOptions)\n      : (await em.findAndCount(CustomerInteraction, where, findOptions))[0]\n  const total =\n    options?.paginate === false\n      ? rows.filter((row) => !row.deletedAt).length\n      : await em.count(CustomerInteraction, where)\n\n  const activeRows = rows.filter((row) => !row.deletedAt)\n  const hydrated = await hydrateCanonicalInteractions({\n    em,\n    container,\n    auth,\n    selectedOrganizationId,\n    interactions: activeRows,\n  })\n  const items = hydrated.map((row) => ({\n    ...mapInteractionRecordToActivitySummary(row),\n    customValues: row.customValues ?? null,\n    activityTypeLabel: row.interactionType,\n  }))\n\n  return {\n    items,\n    total,\n    bridgeIds: new Set(rows.map((row) => row.id)),\n  }\n}\n\nasync function listLegacyActivities(\n  em: EntityManager,\n  tenantId: string,\n  organizationIds: string[] | null,\n  query: z.infer<typeof listSchema>,\n  options?: { paginate?: boolean },\n  selectedOrganizationId?: string | null,\n): Promise<{ items: ActivityItem[]; total: number }> {\n  const where: Record<string, unknown> = { tenantId }\n  if (organizationIds && organizationIds.length > 0) {\n    where.organizationId = { $in: organizationIds }\n  }\n  if (query.entityId) where.entity = query.entityId\n  if (query.dealId) where.deal = query.dealId\n  if (query.activityType) where.activityType = query.activityType\n\n  const findOptions = {\n    populate: ['entity', 'deal'] as const,\n    orderBy: buildLegacyOrderBy(query.sortField, query.sortDir ?? 'desc'),\n    ...(options?.paginate === false\n      ? {}\n      : {\n          offset: (query.page - 1) * query.pageSize,\n          limit: query.pageSize,\n        }),\n  }\n\n  const rows =\n    options?.paginate === false\n      ? await em.find(CustomerActivity, where, findOptions)\n      : (await em.findAndCount(CustomerActivity, where, findOptions))[0]\n  const total =\n    options?.paginate === false\n      ? rows.length\n      : await em.count(CustomerActivity, where)\n\n  return {\n    items: await decorateActivityItems(\n      em,\n      rows.map(mapLegacyActivity),\n      selectedOrganizationId ? { tenantId, organizationId: selectedOrganizationId } : undefined,\n    ),\n    total,\n  }\n}\n\nexport async function GET(request: Request): Promise<Response> {\n  try {\n    const url = new URL(request.url)\n    const query = listSchema.parse(Object.fromEntries(url.searchParams))\n    const {\n      auth,\n      em,\n      organizationIds,\n      container,\n      selectedOrganizationId,\n    } = await resolveCustomersRequestContext(request)\n    const flags = await resolveCustomerInteractionFeatureFlags(container, auth.tenantId)\n    if (!flags.legacyAdapters) {\n      return await legacyAdaptersDisabledResponse()\n    }\n\n    const sortDir = query.sortDir ?? 'desc'\n\n    const result = flags.unified\n      ? await listCanonicalActivities(\n          em,\n          container,\n          auth,\n          selectedOrganizationId,\n          auth.tenantId,\n          organizationIds,\n          query,\n        )\n      : await (async () => {\n        const windowSize = Math.min(\n          MERGED_ACTIVITY_FETCH_CAP,\n          Math.max(query.pageSize, query.page * query.pageSize + query.pageSize),\n        )\n        const windowedQuery = { ...query, page: 1, pageSize: windowSize }\n        const [legacy, canonical] = await Promise.all([\n          listLegacyActivities(\n            em,\n            auth.tenantId,\n            organizationIds,\n            windowedQuery,\n            { paginate: true },\n            selectedOrganizationId,\n          ),\n          listCanonicalActivities(\n            em,\n            container,\n            auth,\n            selectedOrganizationId,\n            auth.tenantId,\n            organizationIds,\n            windowedQuery,\n            {\n              includeDeleted: true,\n              paginate: true,\n              source: CUSTOMER_INTERACTION_ACTIVITY_ADAPTER_SOURCE,\n            },\n          ),\n        ])\n        const merged = sortActivityItems(\n          [\n            ...legacy.items.filter((item) => !canonical.bridgeIds.has(item.id)),\n            ...canonical.items,\n          ],\n          query.sortField,\n          sortDir,\n        )\n        const paged = paginateActivityItems(merged, query.page, query.pageSize)\n        return {\n          items: paged.items,\n          total: paged.total,\n        }\n      })()\n\n    return withAdapterHeaders(\n      NextResponse.json({\n        items: result.items,\n        total: result.total,\n        page: query.page,\n        pageSize: query.pageSize,\n        totalPages: Math.max(1, Math.ceil(result.total / query.pageSize)),\n      }),\n    )\n  } catch (err) {\n    if (isCrudHttpError(err)) {\n      return withAdapterHeaders(NextResponse.json(err.body, { status: err.status }))\n    }\n    if (err instanceof z.ZodError) {\n      return withAdapterHeaders(\n        NextResponse.json({ error: 'Validation failed', details: err.issues }, { status: 400 }),\n      )\n    }\n    console.error('customers.activities.get failed', err)\n    return withAdapterHeaders(\n      NextResponse.json({ error: 'Internal server error' }, { status: 500 }),\n    )\n  }\n}\n\nexport async function POST(request: Request): Promise<Response> {\n  try {\n    const { commandContext, container, auth, selectedOrganizationId } = await resolveCustomersRequestContext(request)\n    const flags = await resolveCustomerInteractionFeatureFlags(container, auth.tenantId)\n    if (!flags.legacyAdapters) {\n      return await legacyAdaptersDisabledResponse()\n    }\n    const body = await readJsonSafe<Record<string, unknown>>(request, {})\n    const parsed = activityCreateBodySchema.parse(body)\n    const guardUserId = resolveGuardUserId(auth)\n    const guardResult = await validateCrudMutationGuard(container, {\n      tenantId: auth.tenantId,\n      organizationId: selectedOrganizationId,\n      userId: guardUserId,\n      resourceKind: 'customers.activity',\n      resourceId: parsed.entityId,\n      operation: 'create',\n      requestMethod: request.method,\n      requestHeaders: request.headers,\n      mutationPayload: parsed,\n    })\n    if (guardResult && !guardResult.ok) {\n      return withAdapterHeaders(NextResponse.json(guardResult.body, { status: guardResult.status }))\n    }\n    const commandBus = container.resolve('commandBus') as CommandBus\n    const { result } = await commandBus.execute('customers.interactions.create', {\n      input: {\n        tenantId: auth.tenantId,\n        organizationId: selectedOrganizationId ?? auth.orgId,\n        entityId: parsed.entityId,\n        interactionType: parsed.activityType,\n        title: parsed.subject ?? null,\n        body: parsed.body ?? null,\n        occurredAt: parsed.occurredAt ?? null,\n        status: parsed.occurredAt ? 'done' : 'planned',\n        dealId: parsed.dealId ?? null,\n        authorUserId: parsed.authorUserId ?? null,\n        appearanceIcon: parsed.appearanceIcon ?? null,\n        appearanceColor: parsed.appearanceColor ?? null,\n        source: CUSTOMER_INTERACTION_ACTIVITY_ADAPTER_SOURCE,\n        customFields: (parsed as Record<string, unknown>).customFields,\n        customValues: (parsed as Record<string, unknown>).customValues,\n      },\n      ctx: commandContext,\n    })\n    if (guardResult?.ok && guardResult.shouldRunAfterSuccess) {\n      await runCrudMutationGuardAfterSuccess(container, {\n        tenantId: auth.tenantId,\n        organizationId: selectedOrganizationId,\n        userId: guardUserId,\n        resourceKind: 'customers.activity',\n        resourceId: parsed.entityId,\n        operation: 'create',\n        requestMethod: request.method,\n        requestHeaders: request.headers,\n        metadata: guardResult.metadata ?? null,\n      })\n    }\n\n    return withAdapterHeaders(\n      NextResponse.json(\n        {\n          id:\n            result &&\n            typeof result === 'object' &&\n            'interactionId' in result &&\n            typeof result.interactionId === 'string'\n              ? result.interactionId\n              : result &&\n                  typeof result === 'object' &&\n                  'id' in result &&\n                  typeof result.id === 'string'\n                ? result.id\n                : null,\n        },\n        { status: 201 },\n      ),\n    )\n  } catch (err) {\n    if (isCrudHttpError(err)) {\n      return withAdapterHeaders(NextResponse.json(err.body, { status: err.status }))\n    }\n    if (err instanceof z.ZodError) {\n      return withAdapterHeaders(\n        NextResponse.json({ error: 'Validation failed', details: err.issues }, { status: 400 }),\n      )\n    }\n    console.error('customers.activities.post failed', err)\n    return withAdapterHeaders(\n      NextResponse.json({ error: 'Internal server error' }, { status: 500 }),\n    )\n  }\n}\n\nexport async function PUT(request: Request): Promise<Response> {\n  try {\n    const { commandContext, container, em, auth, selectedOrganizationId } = await resolveCustomersRequestContext(request)\n    const flags = await resolveCustomerInteractionFeatureFlags(container, auth.tenantId)\n    if (!flags.legacyAdapters) {\n      return await legacyAdaptersDisabledResponse()\n    }\n    const body = await readJsonSafe<Record<string, unknown>>(request, {})\n    const parsed = activityUpdateBodySchema.parse(body)\n    const guardUserId = resolveGuardUserId(auth)\n    const guardResult = await validateCrudMutationGuard(container, {\n      tenantId: auth.tenantId,\n      organizationId: selectedOrganizationId,\n      userId: guardUserId,\n      resourceKind: 'customers.activity',\n      resourceId: parsed.id,\n      operation: 'update',\n      requestMethod: request.method,\n      requestHeaders: request.headers,\n      mutationPayload: parsed,\n    })\n    if (guardResult && !guardResult.ok) {\n      return withAdapterHeaders(NextResponse.json(guardResult.body, { status: guardResult.status }))\n    }\n    const commandBus = container.resolve('commandBus') as CommandBus\n    const interactionId = flags.unified\n      ? parsed.id\n      : await resolveCanonicalActivityTargetId(em, commandBus, commandContext, parsed.id, auth.tenantId)\n\n    await commandBus.execute('customers.interactions.update', {\n      input: {\n        id: interactionId,\n        interactionType: parsed.activityType,\n        title: parsed.subject ?? undefined,\n        body: parsed.body ?? undefined,\n        occurredAt: parsed.occurredAt ?? undefined,\n        status: parsed.occurredAt ? 'done' : undefined,\n        dealId: parsed.dealId ?? undefined,\n        authorUserId: parsed.authorUserId ?? undefined,\n        appearanceIcon: parsed.appearanceIcon ?? undefined,\n        appearanceColor: parsed.appearanceColor ?? undefined,\n        customFields: (parsed as Record<string, unknown>).customFields,\n        customValues: (parsed as Record<string, unknown>).customValues,\n      },\n      ctx: commandContext,\n    })\n    if (guardResult?.ok && guardResult.shouldRunAfterSuccess) {\n      await runCrudMutationGuardAfterSuccess(container, {\n        tenantId: auth.tenantId,\n        organizationId: selectedOrganizationId,\n        userId: guardUserId,\n        resourceKind: 'customers.activity',\n        resourceId: parsed.id,\n        operation: 'update',\n        requestMethod: request.method,\n        requestHeaders: request.headers,\n        metadata: guardResult.metadata ?? null,\n      })\n    }\n\n    return withAdapterHeaders(NextResponse.json({ ok: true }))\n  } catch (err) {\n    if (isCrudHttpError(err)) {\n      return withAdapterHeaders(NextResponse.json(err.body, { status: err.status }))\n    }\n    if (err instanceof z.ZodError) {\n      return withAdapterHeaders(\n        NextResponse.json({ error: 'Validation failed', details: err.issues }, { status: 400 }),\n      )\n    }\n    console.error('customers.activities.put failed', err)\n    return withAdapterHeaders(\n      NextResponse.json({ error: 'Internal server error' }, { status: 500 }),\n    )\n  }\n}\n\nexport async function DELETE(request: Request): Promise<Response> {\n  try {\n    const { commandContext, container, em, auth, selectedOrganizationId } = await resolveCustomersRequestContext(request)\n    const flags = await resolveCustomerInteractionFeatureFlags(container, auth.tenantId)\n    if (!flags.legacyAdapters) {\n      return await legacyAdaptersDisabledResponse()\n    }\n    const body = await readJsonSafe<Record<string, unknown>>(request, {})\n    const parsed = activityDeleteBodySchema.parse(body)\n    const guardUserId = resolveGuardUserId(auth)\n    const guardResult = await validateCrudMutationGuard(container, {\n      tenantId: auth.tenantId,\n      organizationId: selectedOrganizationId,\n      userId: guardUserId,\n      resourceKind: 'customers.activity',\n      resourceId: parsed.id,\n      operation: 'delete',\n      requestMethod: request.method,\n      requestHeaders: request.headers,\n      mutationPayload: parsed,\n    })\n    if (guardResult && !guardResult.ok) {\n      return withAdapterHeaders(NextResponse.json(guardResult.body, { status: guardResult.status }))\n    }\n    const commandBus = container.resolve('commandBus') as CommandBus\n    const interactionId = flags.unified\n      ? parsed.id\n      : await resolveCanonicalActivityTargetId(em, commandBus, commandContext, parsed.id, auth.tenantId)\n    await commandBus.execute('customers.interactions.delete', {\n      input: { id: interactionId },\n      ctx: commandContext,\n    })\n    if (guardResult?.ok && guardResult.shouldRunAfterSuccess) {\n      await runCrudMutationGuardAfterSuccess(container, {\n        tenantId: auth.tenantId,\n        organizationId: selectedOrganizationId,\n        userId: guardUserId,\n        resourceKind: 'customers.activity',\n        resourceId: parsed.id,\n        operation: 'delete',\n        requestMethod: request.method,\n        requestHeaders: request.headers,\n        metadata: guardResult.metadata ?? null,\n      })\n    }\n    return withAdapterHeaders(NextResponse.json({ ok: true }))\n  } catch (err) {\n    if (isCrudHttpError(err)) {\n      return withAdapterHeaders(NextResponse.json(err.body, { status: err.status }))\n    }\n    if (err instanceof z.ZodError) {\n      return withAdapterHeaders(\n        NextResponse.json({ error: 'Validation failed', details: err.issues }, { status: 400 }),\n      )\n    }\n    console.error('customers.activities.delete failed', err)\n    return withAdapterHeaders(\n      NextResponse.json({ error: 'Internal server error' }, { status: 500 }),\n    )\n  }\n}\n\nconst activityListItemSchema = z\n  .object({\n    id: z.string().uuid(),\n    activityType: z.string(),\n    subject: z.string().nullable().optional(),\n    body: z.string().nullable().optional(),\n    occurredAt: z.string().nullable().optional(),\n    createdAt: z.string(),\n    appearanceIcon: z.string().nullable().optional(),\n    appearanceColor: z.string().nullable().optional(),\n    entityId: z.string().uuid().nullable().optional(),\n    authorUserId: z.string().uuid().nullable().optional(),\n    authorName: z.string().nullable().optional(),\n    authorEmail: z.string().nullable().optional(),\n    dealId: z.string().uuid().nullable().optional(),\n    dealTitle: z.string().nullable().optional(),\n    customValues: z.record(z.string(), z.unknown()).nullable().optional(),\n    activityTypeLabel: z.string().nullable().optional(),\n  })\n  .passthrough()\n\nconst activityCreateResponseSchema = z.object({\n  id: z.string().uuid().nullable(),\n})\n\nexport const openApi: OpenApiRouteDoc = createCustomersCrudOpenApi({\n  resourceName: 'Activity',\n  querySchema: listSchema,\n  listResponseSchema: createPagedListResponseSchema(activityListItemSchema),\n  create: {\n    schema: activityCreateBodySchema,\n    responseSchema: activityCreateResponseSchema,\n    description: 'DEPRECATED (sunset 2026-06-30): Creates a timeline activity. Use POST /api/customers/interactions instead.',\n  },\n  update: {\n    schema: activityUpdateBodySchema,\n    responseSchema: defaultOkResponseSchema,\n    description: 'DEPRECATED (sunset 2026-06-30): Updates an activity. Use PUT /api/customers/interactions instead.',\n  },\n  del: {\n    schema: activityDeleteBodySchema,\n    responseSchema: defaultOkResponseSchema,\n    description: 'DEPRECATED (sunset 2026-06-30): Deletes an activity. Use DELETE /api/customers/interactions instead.',\n  },\n})\n"],
+  "mappings": "AAKA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAIlB,SAAS,eAAe,uBAAuB;AAC/C,SAAS,2BAA2B;AACpC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,oBAAoB;AAC7B,SAAS,0BAA0B;AACnC,SAAS,kBAAkB,cAAc,2BAA2B;AACpE,SAAS,YAAY;AACrB,SAAS,sBAAsB,4BAA4B;AAC3D,SAAS,4BAA4B,+BAA+B,+BAA+B;AACnG;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,8CAA8C;AACvD,SAAS,sCAAsC;AAC/C,SAAS,oCAAoC;AAC7C,SAAS,wCAAwC;AAEjD,MAAM,aAAa,EAAE,OAAO;AAAA,EAC1B,MAAM,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,QAAQ,CAAC;AAAA,EACxC,UAAU,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,QAAQ,EAAE;AAAA,EACtD,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACrC,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACnC,cAAc,EAAE,OAAO,EAAE,SAAS;AAAA,EAClC,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,SAAS,EAAE,KAAK,CAAC,OAAO,MAAM,CAAC,EAAE,SAAS;AAC5C,CAAC,EAAE,YAAY;AAEf,MAAM,gBAAgB;AAAA,EACpB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,2BAA2B,EAAE;AAAA,EACzE,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,6BAA6B,EAAE;AAAA,EAC5E,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,6BAA6B,EAAE;AAAA,EAC3E,QAAQ,EAAE,aAAa,MAAM,iBAAiB,CAAC,6BAA6B,EAAE;AAChF;AAEO,MAAM,WAAW;AAExB,MAAM,2BAA2B,qBAAqB,KAAK;AAAA,EACzD,gBAAgB;AAAA,EAChB,UAAU;AACZ,CAAC,EAAE,YAAY;AAEf,MAAM,2BAA2B,qBAAqB,KAAK;AAAA,EACzD,gBAAgB;AAAA,EAChB,UAAU;AACZ,CAAC,EAAE,YAAY;AAEf,MAAM,2BAA2B,EAAE,OAAO;AAAA,EACxC,IAAI,EAAE,OAAO,EAAE,KAAK;AACtB,CAAC;AAED,MAAM,kBAAkB;AAAA,EACtB,aAAa;AAAA,EACb,QAAQ;AAAA,EACR,MAAM;AACR;AAMA,MAAM,4BAA4B;AA2BlC,SAAS,mBAAmB,MAIjB;AACT,MAAI,OAAO,KAAK,QAAQ,YAAY,KAAK,IAAI,KAAK,EAAE,SAAS,EAAG,QAAO,KAAK;AAC5E,MAAI,OAAO,KAAK,WAAW,YAAY,KAAK,OAAO,KAAK,EAAE,SAAS,EAAG,QAAO,KAAK;AAClF,MAAI,OAAO,KAAK,UAAU,YAAY,KAAK,MAAM,KAAK,EAAE,SAAS,EAAG,QAAO,KAAK;AAChF,SAAO;AACT;AAEA,SAAS,mBAAmB,UAA8B;AACxD,QAAM,UAAU,IAAI,QAAQ,SAAS,OAAO;AAC5C,SAAO,QAAQ,eAAe,EAAE,QAAQ,CAAC,CAAC,KAAK,KAAK,MAAM,QAAQ,IAAI,KAAK,KAAK,CAAC;AACjF,SAAO,IAAI,SAAS,SAAS,MAAM;AAAA,IACjC,QAAQ,SAAS;AAAA,IACjB,YAAY,SAAS;AAAA,IACrB;AAAA,EACF,CAAC;AACH;AAEA,eAAe,iCAAoD;AACjE,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,SAAO,mBAAmB,aAAa;AAAA,IACrC;AAAA,MACE,OAAO;AAAA,QACL;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IACA,EAAE,QAAQ,IAAI;AAAA,EAChB,CAAC;AACH;AAEA,SAAS,mBAAmB,WAA+B,SAAyB;AAClF,MAAI,cAAc,aAAa;AAC7B,WAAO,EAAE,WAAW,QAAQ;AAAA,EAC9B;AACA,SAAO,EAAE,YAAY,SAAS,WAAW,QAAQ;AACnD;AAEA,SAAS,sBAAsB,WAA+B,SAAyB;AACrF,MAAI,cAAc,aAAa;AAC7B,WAAO,EAAE,WAAW,QAAQ;AAAA,EAC9B;AACA,SAAO,EAAE,YAAY,SAAS,WAAW,QAAQ;AACnD;AAEA,SAAS,yBAAyB,MAAoB,WAAuC;AAC3F,QAAM,MACJ,cAAc,cACV,KAAK,YACL,KAAK,cAAc,KAAK;AAC9B,QAAM,YAAY,MAAM,IAAI,KAAK,GAAG,EAAE,QAAQ,IAAI,OAAO;AACzD,SAAO,OAAO,MAAM,SAAS,IAAI,IAAI;AACvC;AAEA,SAAS,kBACP,OACA,WACA,SACgB;AAChB,SAAO,CAAC,GAAG,KAAK,EAAE,KAAK,CAAC,MAAM,UAAU;AACtC,UAAM,YAAY,yBAAyB,MAAM,SAAS;AAC1D,UAAM,aAAa,yBAAyB,OAAO,SAAS;AAC5D,QAAI,cAAc,YAAY;AAC5B,aAAO,YAAY,QACf,KAAK,GAAG,cAAc,MAAM,EAAE,IAC9B,MAAM,GAAG,cAAc,KAAK,EAAE;AAAA,IACpC;AACA,WAAO,YAAY,QAAQ,YAAY,aAAa,aAAa;AAAA,EACnE,CAAC;AACH;AAEA,SAAS,sBACP,OACA,MACA,UAC0C;AAC1C,QAAM,SAAS,OAAO,KAAK;AAC3B,SAAO;AAAA,IACL,OAAO,MAAM,MAAM,OAAO,QAAQ,QAAQ;AAAA,IAC1C,OAAO,MAAM;AAAA,EACf;AACF;AAEA,eAAsB,sBACpB,IACA,OACA,iBACyB;AACzB,MAAI,MAAM,WAAW,EAAG,QAAO;AAE/B,QAAM,YAAY,MAAM;AAAA,IACtB,IAAI;AAAA,MACF,MACG,IAAI,CAAC,SAAU,OAAO,KAAK,iBAAiB,WAAW,KAAK,eAAe,IAAK,EAChF,OAAO,CAAC,UAA2B,CAAC,CAAC,KAAK;AAAA,IAC/C;AAAA,EACF;AACA,QAAM,UAAU,MAAM;AAAA,IACpB,IAAI;AAAA,MACF,MACG,IAAI,CAAC,SAAU,OAAO,KAAK,WAAW,WAAW,KAAK,SAAS,IAAK,EACpE,OAAO,CAAC,UAA2B,CAAC,CAAC,KAAK;AAAA,IAC/C;AAAA,EACF;AAEA,MAAI,QAAQ,SAAS,MAAM,CAAC,iBAAiB,YAAY,CAAC,iBAAiB,iBAAiB;AAC1F,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,UAAM,IAAI,cAAc,KAAK;AAAA,MAC3B,OAAO,UAAU,oCAAoC,4BAA4B;AAAA,IACnF,CAAC;AAAA,EACH;AAEA,QAAM,CAAC,OAAO,KAAK,IAAI,MAAM,QAAQ,IAAI;AAAA,IACvC,UAAU,SAAS,IAAI,GAAG,KAAK,MAAM,EAAE,IAAI,EAAE,KAAK,UAAU,EAAE,CAAC,IAAI,QAAQ,QAAQ,CAAC,CAAC;AAAA,IACrF,QAAQ,SAAS,KAAK,kBAClB;AAAA,MACE;AAAA,MACA;AAAA,MACA,EAAE,IAAI,EAAE,KAAK,QAAQ,GAAG,UAAU,gBAAgB,UAAU,gBAAgB,gBAAgB,eAAe;AAAA,MAC3G;AAAA,MACA;AAAA,IACF,IACA,QAAQ,QAAQ,CAAC,CAAC;AAAA,EACxB,CAAC;AAED,QAAM,UAAU,IAAI;AAAA,IAClB,MAAM,IAAI,CAAC,SAAS;AAAA,MAClB,KAAK;AAAA,MACL;AAAA,QACE,MAAM,KAAK,QAAQ;AAAA,QACnB,OAAO,KAAK,SAAS;AAAA,MACvB;AAAA,IACF,CAAC;AAAA,EACH;AACA,QAAM,UAAU,IAAI,IAAI,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,IAAI,KAAK,KAAK,CAAC,CAAC;AAElE,SAAO,MAAM,IAAI,CAAC,UAAU;AAAA,IAC1B,GAAG;AAAA,IACH,mBAAmB,KAAK;AAAA,IACxB,YAAY,KAAK,eAAe,QAAQ,IAAI,KAAK,YAAY,GAAG,QAAQ,OAAO;AAAA,IAC/E,aAAa,KAAK,eAAe,QAAQ,IAAI,KAAK,YAAY,GAAG,SAAS,OAAO;AAAA,IACjF,WAAW,KAAK,SAAS,QAAQ,IAAI,KAAK,MAAM,KAAK,OAAO;AAAA,EAC9D,EAAE;AACJ;AAEA,SAAS,kBAAkB,UAA0C;AACnE,SAAO;AAAA,IACL,IAAI,SAAS;AAAA,IACb,cAAc,SAAS;AAAA,IACvB,SAAS,SAAS,WAAW;AAAA,IAC7B,MAAM,SAAS,QAAQ;AAAA,IACvB,YAAY,SAAS,aAAa,SAAS,WAAW,YAAY,IAAI;AAAA,IACtE,WAAW,SAAS,UAAU,YAAY;AAAA,IAC1C,gBAAgB,SAAS,kBAAkB;AAAA,IAC3C,iBAAiB,SAAS,mBAAmB;AAAA,IAC7C,UAAU,OAAO,SAAS,WAAW,WAAW,SAAS,SAAS,SAAS,OAAO;AAAA,IAClF,cAAc,SAAS,gBAAgB;AAAA,IACvC,QAAQ,SAAS,OAAQ,OAAO,SAAS,SAAS,WAAW,SAAS,OAAO,SAAS,KAAK,KAAM;AAAA,IACjG,cAAc;AAAA,EAChB;AACF;AAEA,eAAe,wBACb,IACA,WACA,MACA,wBACA,UACA,iBACA,OACA,SACsC;AACtC,QAAM,QAAiC;AAAA,IACrC;AAAA,IACA,iBAAiB,EAAE,KAAK,OAAO;AAAA,EACjC;AACA,MAAI,CAAC,SAAS,gBAAgB;AAC5B,UAAM,YAAY;AAAA,EACpB;AACA,MAAI,mBAAmB,gBAAgB,SAAS,GAAG;AACjD,UAAM,iBAAiB,EAAE,KAAK,gBAAgB;AAAA,EAChD;AACA,MAAI,MAAM,SAAU,OAAM,SAAS,MAAM;AACzC,MAAI,MAAM,OAAQ,OAAM,SAAS,MAAM;AACvC,MAAI,MAAM,aAAc,OAAM,kBAAkB,MAAM;AACtD,MAAI,SAAS,QAAQ;AACnB,UAAM,SAAS,MAAM,QAAQ,QAAQ,MAAM,IAAI,EAAE,KAAK,QAAQ,OAAO,IAAI,QAAQ;AAAA,EACnF;AAEA,QAAM,cAAc;AAAA,IAClB,SAAS,sBAAsB,MAAM,WAAW,MAAM,WAAW,MAAM;AAAA,IACvE,GAAI,SAAS,aAAa,QACtB,CAAC,IACD;AAAA,MACE,SAAS,MAAM,OAAO,KAAK,MAAM;AAAA,MACjC,OAAO,MAAM;AAAA,IACf;AAAA,EACN;AAEA,QAAM,OACJ,SAAS,aAAa,QAClB,MAAM,GAAG,KAAK,qBAAqB,OAAO,WAAW,KACpD,MAAM,GAAG,aAAa,qBAAqB,OAAO,WAAW,GAAG,CAAC;AACxE,QAAM,QACJ,SAAS,aAAa,QAClB,KAAK,OAAO,CAAC,QAAQ,CAAC,IAAI,SAAS,EAAE,SACrC,MAAM,GAAG,MAAM,qBAAqB,KAAK;AAE/C,QAAM,aAAa,KAAK,OAAO,CAAC,QAAQ,CAAC,IAAI,SAAS;AACtD,QAAM,WAAW,MAAM,6BAA6B;AAAA,IAClD;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,cAAc;AAAA,EAChB,CAAC;AACD,QAAM,QAAQ,SAAS,IAAI,CAAC,SAAS;AAAA,IACnC,GAAG,sCAAsC,GAAG;AAAA,IAC5C,cAAc,IAAI,gBAAgB;AAAA,IAClC,mBAAmB,IAAI;AAAA,EACzB,EAAE;AAEF,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,WAAW,IAAI,IAAI,KAAK,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC;AAAA,EAC9C;AACF;AAEA,eAAe,qBACb,IACA,UACA,iBACA,OACA,SACA,wBACmD;AACnD,QAAM,QAAiC,EAAE,SAAS;AAClD,MAAI,mBAAmB,gBAAgB,SAAS,GAAG;AACjD,UAAM,iBAAiB,EAAE,KAAK,gBAAgB;AAAA,EAChD;AACA,MAAI,MAAM,SAAU,OAAM,SAAS,MAAM;AACzC,MAAI,MAAM,OAAQ,OAAM,OAAO,MAAM;AACrC,MAAI,MAAM,aAAc,OAAM,eAAe,MAAM;AAEnD,QAAM,cAAc;AAAA,IAClB,UAAU,CAAC,UAAU,MAAM;AAAA,IAC3B,SAAS,mBAAmB,MAAM,WAAW,MAAM,WAAW,MAAM;AAAA,IACpE,GAAI,SAAS,aAAa,QACtB,CAAC,IACD;AAAA,MACE,SAAS,MAAM,OAAO,KAAK,MAAM;AAAA,MACjC,OAAO,MAAM;AAAA,IACf;AAAA,EACN;AAEA,QAAM,OACJ,SAAS,aAAa,QAClB,MAAM,GAAG,KAAK,kBAAkB,OAAO,WAAW,KACjD,MAAM,GAAG,aAAa,kBAAkB,OAAO,WAAW,GAAG,CAAC;AACrE,QAAM,QACJ,SAAS,aAAa,QAClB,KAAK,SACL,MAAM,GAAG,MAAM,kBAAkB,KAAK;AAE5C,SAAO;AAAA,IACL,OAAO,MAAM;AAAA,MACX;AAAA,MACA,KAAK,IAAI,iBAAiB;AAAA,MAC1B,yBAAyB,EAAE,UAAU,gBAAgB,uBAAuB,IAAI;AAAA,IAClF;AAAA,IACA;AAAA,EACF;AACF;AAEA,eAAsB,IAAI,SAAqC;AAC7D,MAAI;AACF,UAAM,MAAM,IAAI,IAAI,QAAQ,GAAG;AAC/B,UAAM,QAAQ,WAAW,MAAM,OAAO,YAAY,IAAI,YAAY,CAAC;AACnE,UAAM;AAAA,MACJ;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,IAAI,MAAM,+BAA+B,OAAO;AAChD,UAAM,QAAQ,MAAM,uCAAuC,WAAW,KAAK,QAAQ;AACnF,QAAI,CAAC,MAAM,gBAAgB;AACzB,aAAO,MAAM,+BAA+B;AAAA,IAC9C;AAEA,UAAM,UAAU,MAAM,WAAW;AAEjC,UAAM,SAAS,MAAM,UACjB,MAAM;AAAA,MACJ;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,KAAK;AAAA,MACL;AAAA,MACA;AAAA,IACF,IACA,OAAO,YAAY;AACnB,YAAM,aAAa,KAAK;AAAA,QACtB;AAAA,QACA,KAAK,IAAI,MAAM,UAAU,MAAM,OAAO,MAAM,WAAW,MAAM,QAAQ;AAAA,MACvE;AACA,YAAM,gBAAgB,EAAE,GAAG,OAAO,MAAM,GAAG,UAAU,WAAW;AAChE,YAAM,CAAC,QAAQ,SAAS,IAAI,MAAM,QAAQ,IAAI;AAAA,QAC5C;AAAA,UACE;AAAA,UACA,KAAK;AAAA,UACL;AAAA,UACA;AAAA,UACA,EAAE,UAAU,KAAK;AAAA,UACjB;AAAA,QACF;AAAA,QACA;AAAA,UACE;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA,KAAK;AAAA,UACL;AAAA,UACA;AAAA,UACA;AAAA,YACE,gBAAgB;AAAA,YAChB,UAAU;AAAA,YACV,QAAQ;AAAA,UACV;AAAA,QACF;AAAA,MACF,CAAC;AACD,YAAM,SAAS;AAAA,QACb;AAAA,UACE,GAAG,OAAO,MAAM,OAAO,CAAC,SAAS,CAAC,UAAU,UAAU,IAAI,KAAK,EAAE,CAAC;AAAA,UAClE,GAAG,UAAU;AAAA,QACf;AAAA,QACA,MAAM;AAAA,QACN;AAAA,MACF;AACA,YAAM,QAAQ,sBAAsB,QAAQ,MAAM,MAAM,MAAM,QAAQ;AACtE,aAAO;AAAA,QACL,OAAO,MAAM;AAAA,QACb,OAAO,MAAM;AAAA,MACf;AAAA,IACF,GAAG;AAEL,WAAO;AAAA,MACL,aAAa,KAAK;AAAA,QAChB,OAAO,OAAO;AAAA,QACd,OAAO,OAAO;AAAA,QACd,MAAM,MAAM;AAAA,QACZ,UAAU,MAAM;AAAA,QAChB,YAAY,KAAK,IAAI,GAAG,KAAK,KAAK,OAAO,QAAQ,MAAM,QAAQ,CAAC;AAAA,MAClE,CAAC;AAAA,IACH;AAAA,EACF,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,GAAG;AACxB,aAAO,mBAAmB,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC,CAAC;AAAA,IAC/E;AACA,QAAI,eAAe,EAAE,UAAU;AAC7B,aAAO;AAAA,QACL,aAAa,KAAK,EAAE,OAAO,qBAAqB,SAAS,IAAI,OAAO,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,MACxF;AAAA,IACF;AACA,YAAQ,MAAM,mCAAmC,GAAG;AACpD,WAAO;AAAA,MACL,aAAa,KAAK,EAAE,OAAO,wBAAwB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACvE;AAAA,EACF;AACF;AAEA,eAAsB,KAAK,SAAqC;AAC9D,MAAI;AACF,UAAM,EAAE,gBAAgB,WAAW,MAAM,uBAAuB,IAAI,MAAM,+BAA+B,OAAO;AAChH,UAAM,QAAQ,MAAM,uCAAuC,WAAW,KAAK,QAAQ;AACnF,QAAI,CAAC,MAAM,gBAAgB;AACzB,aAAO,MAAM,+BAA+B;AAAA,IAC9C;AACA,UAAM,OAAO,MAAM,aAAsC,SAAS,CAAC,CAAC;AACpE,UAAM,SAAS,yBAAyB,MAAM,IAAI;AAClD,UAAM,cAAc,mBAAmB,IAAI;AAC3C,UAAM,cAAc,MAAM,0BAA0B,WAAW;AAAA,MAC7D,UAAU,KAAK;AAAA,MACf,gBAAgB;AAAA,MAChB,QAAQ;AAAA,MACR,cAAc;AAAA,MACd,YAAY,OAAO;AAAA,MACnB,WAAW;AAAA,MACX,eAAe,QAAQ;AAAA,MACvB,gBAAgB,QAAQ;AAAA,MACxB,iBAAiB;AAAA,IACnB,CAAC;AACD,QAAI,eAAe,CAAC,YAAY,IAAI;AAClC,aAAO,mBAAmB,aAAa,KAAK,YAAY,MAAM,EAAE,QAAQ,YAAY,OAAO,CAAC,CAAC;AAAA,IAC/F;AACA,UAAM,aAAa,UAAU,QAAQ,YAAY;AACjD,UAAM,EAAE,OAAO,IAAI,MAAM,WAAW,QAAQ,iCAAiC;AAAA,MAC3E,OAAO;AAAA,QACL,UAAU,KAAK;AAAA,QACf,gBAAgB,0BAA0B,KAAK;AAAA,QAC/C,UAAU,OAAO;AAAA,QACjB,iBAAiB,OAAO;AAAA,QACxB,OAAO,OAAO,WAAW;AAAA,QACzB,MAAM,OAAO,QAAQ;AAAA,QACrB,YAAY,OAAO,cAAc;AAAA,QACjC,QAAQ,OAAO,aAAa,SAAS;AAAA,QACrC,QAAQ,OAAO,UAAU;AAAA,QACzB,cAAc,OAAO,gBAAgB;AAAA,QACrC,gBAAgB,OAAO,kBAAkB;AAAA,QACzC,iBAAiB,OAAO,mBAAmB;AAAA,QAC3C,QAAQ;AAAA,QACR,cAAe,OAAmC;AAAA,QAClD,cAAe,OAAmC;AAAA,MACpD;AAAA,MACA,KAAK;AAAA,IACP,CAAC;AACD,QAAI,aAAa,MAAM,YAAY,uBAAuB;AACxD,YAAM,iCAAiC,WAAW;AAAA,QAChD,UAAU,KAAK;AAAA,QACf,gBAAgB;AAAA,QAChB,QAAQ;AAAA,QACR,cAAc;AAAA,QACd,YAAY,OAAO;AAAA,QACnB,WAAW;AAAA,QACX,eAAe,QAAQ;AAAA,QACvB,gBAAgB,QAAQ;AAAA,QACxB,UAAU,YAAY,YAAY;AAAA,MACpC,CAAC;AAAA,IACH;AAEA,WAAO;AAAA,MACL,aAAa;AAAA,QACX;AAAA,UACE,IACE,UACA,OAAO,WAAW,YAClB,mBAAmB,UACnB,OAAO,OAAO,kBAAkB,WAC5B,OAAO,gBACP,UACE,OAAO,WAAW,YAClB,QAAQ,UACR,OAAO,OAAO,OAAO,WACrB,OAAO,KACP;AAAA,QACV;AAAA,QACA,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAAA,EACF,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,GAAG;AACxB,aAAO,mBAAmB,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC,CAAC;AAAA,IAC/E;AACA,QAAI,eAAe,EAAE,UAAU;AAC7B,aAAO;AAAA,QACL,aAAa,KAAK,EAAE,OAAO,qBAAqB,SAAS,IAAI,OAAO,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,MACxF;AAAA,IACF;AACA,YAAQ,MAAM,oCAAoC,GAAG;AACrD,WAAO;AAAA,MACL,aAAa,KAAK,EAAE,OAAO,wBAAwB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACvE;AAAA,EACF;AACF;AAEA,eAAsB,IAAI,SAAqC;AAC7D,MAAI;AACF,UAAM,EAAE,gBAAgB,WAAW,IAAI,MAAM,uBAAuB,IAAI,MAAM,+BAA+B,OAAO;AACpH,UAAM,QAAQ,MAAM,uCAAuC,WAAW,KAAK,QAAQ;AACnF,QAAI,CAAC,MAAM,gBAAgB;AACzB,aAAO,MAAM,+BAA+B;AAAA,IAC9C;AACA,UAAM,OAAO,MAAM,aAAsC,SAAS,CAAC,CAAC;AACpE,UAAM,SAAS,yBAAyB,MAAM,IAAI;AAClD,UAAM,cAAc,mBAAmB,IAAI;AAC3C,UAAM,cAAc,MAAM,0BAA0B,WAAW;AAAA,MAC7D,UAAU,KAAK;AAAA,MACf,gBAAgB;AAAA,MAChB,QAAQ;AAAA,MACR,cAAc;AAAA,MACd,YAAY,OAAO;AAAA,MACnB,WAAW;AAAA,MACX,eAAe,QAAQ;AAAA,MACvB,gBAAgB,QAAQ;AAAA,MACxB,iBAAiB;AAAA,IACnB,CAAC;AACD,QAAI,eAAe,CAAC,YAAY,IAAI;AAClC,aAAO,mBAAmB,aAAa,KAAK,YAAY,MAAM,EAAE,QAAQ,YAAY,OAAO,CAAC,CAAC;AAAA,IAC/F;AACA,UAAM,aAAa,UAAU,QAAQ,YAAY;AACjD,UAAM,gBAAgB,MAAM,UACxB,OAAO,KACP,MAAM,iCAAiC,IAAI,YAAY,gBAAgB,OAAO,IAAI,KAAK,QAAQ;AAEnG,UAAM,WAAW,QAAQ,iCAAiC;AAAA,MACxD,OAAO;AAAA,QACL,IAAI;AAAA,QACJ,iBAAiB,OAAO;AAAA,QACxB,OAAO,OAAO,WAAW;AAAA,QACzB,MAAM,OAAO,QAAQ;AAAA,QACrB,YAAY,OAAO,cAAc;AAAA,QACjC,QAAQ,OAAO,aAAa,SAAS;AAAA,QACrC,QAAQ,OAAO,UAAU;AAAA,QACzB,cAAc,OAAO,gBAAgB;AAAA,QACrC,gBAAgB,OAAO,kBAAkB;AAAA,QACzC,iBAAiB,OAAO,mBAAmB;AAAA,QAC3C,cAAe,OAAmC;AAAA,QAClD,cAAe,OAAmC;AAAA,MACpD;AAAA,MACA,KAAK;AAAA,IACP,CAAC;AACD,QAAI,aAAa,MAAM,YAAY,uBAAuB;AACxD,YAAM,iCAAiC,WAAW;AAAA,QAChD,UAAU,KAAK;AAAA,QACf,gBAAgB;AAAA,QAChB,QAAQ;AAAA,QACR,cAAc;AAAA,QACd,YAAY,OAAO;AAAA,QACnB,WAAW;AAAA,QACX,eAAe,QAAQ;AAAA,QACvB,gBAAgB,QAAQ;AAAA,QACxB,UAAU,YAAY,YAAY;AAAA,MACpC,CAAC;AAAA,IACH;AAEA,WAAO,mBAAmB,aAAa,KAAK,EAAE,IAAI,KAAK,CAAC,CAAC;AAAA,EAC3D,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,GAAG;AACxB,aAAO,mBAAmB,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC,CAAC;AAAA,IAC/E;AACA,QAAI,eAAe,EAAE,UAAU;AAC7B,aAAO;AAAA,QACL,aAAa,KAAK,EAAE,OAAO,qBAAqB,SAAS,IAAI,OAAO,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,MACxF;AAAA,IACF;AACA,YAAQ,MAAM,mCAAmC,GAAG;AACpD,WAAO;AAAA,MACL,aAAa,KAAK,EAAE,OAAO,wBAAwB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACvE;AAAA,EACF;AACF;AAEA,eAAsB,OAAO,SAAqC;AAChE,MAAI;AACF,UAAM,EAAE,gBAAgB,WAAW,IAAI,MAAM,uBAAuB,IAAI,MAAM,+BAA+B,OAAO;AACpH,UAAM,QAAQ,MAAM,uCAAuC,WAAW,KAAK,QAAQ;AACnF,QAAI,CAAC,MAAM,gBAAgB;AACzB,aAAO,MAAM,+BAA+B;AAAA,IAC9C;AACA,UAAM,OAAO,MAAM,aAAsC,SAAS,CAAC,CAAC;AACpE,UAAM,SAAS,yBAAyB,MAAM,IAAI;AAClD,UAAM,cAAc,mBAAmB,IAAI;AAC3C,UAAM,cAAc,MAAM,0BAA0B,WAAW;AAAA,MAC7D,UAAU,KAAK;AAAA,MACf,gBAAgB;AAAA,MAChB,QAAQ;AAAA,MACR,cAAc;AAAA,MACd,YAAY,OAAO;AAAA,MACnB,WAAW;AAAA,MACX,eAAe,QAAQ;AAAA,MACvB,gBAAgB,QAAQ;AAAA,MACxB,iBAAiB;AAAA,IACnB,CAAC;AACD,QAAI,eAAe,CAAC,YAAY,IAAI;AAClC,aAAO,mBAAmB,aAAa,KAAK,YAAY,MAAM,EAAE,QAAQ,YAAY,OAAO,CAAC,CAAC;AAAA,IAC/F;AACA,UAAM,aAAa,UAAU,QAAQ,YAAY;AACjD,UAAM,gBAAgB,MAAM,UACxB,OAAO,KACP,MAAM,iCAAiC,IAAI,YAAY,gBAAgB,OAAO,IAAI,KAAK,QAAQ;AACnG,UAAM,WAAW,QAAQ,iCAAiC;AAAA,MACxD,OAAO,EAAE,IAAI,cAAc;AAAA,MAC3B,KAAK;AAAA,IACP,CAAC;AACD,QAAI,aAAa,MAAM,YAAY,uBAAuB;AACxD,YAAM,iCAAiC,WAAW;AAAA,QAChD,UAAU,KAAK;AAAA,QACf,gBAAgB;AAAA,QAChB,QAAQ;AAAA,QACR,cAAc;AAAA,QACd,YAAY,OAAO;AAAA,QACnB,WAAW;AAAA,QACX,eAAe,QAAQ;AAAA,QACvB,gBAAgB,QAAQ;AAAA,QACxB,UAAU,YAAY,YAAY;AAAA,MACpC,CAAC;AAAA,IACH;AACA,WAAO,mBAAmB,aAAa,KAAK,EAAE,IAAI,KAAK,CAAC,CAAC;AAAA,EAC3D,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,GAAG;AACxB,aAAO,mBAAmB,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC,CAAC;AAAA,IAC/E;AACA,QAAI,eAAe,EAAE,UAAU;AAC7B,aAAO;AAAA,QACL,aAAa,KAAK,EAAE,OAAO,qBAAqB,SAAS,IAAI,OAAO,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,MACxF;AAAA,IACF;AACA,YAAQ,MAAM,sCAAsC,GAAG;AACvD,WAAO;AAAA,MACL,aAAa,KAAK,EAAE,OAAO,wBAAwB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACvE;AAAA,EACF;AACF;AAEA,MAAM,yBAAyB,EAC5B,OAAO;AAAA,EACN,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,cAAc,EAAE,OAAO;AAAA,EACvB,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACxC,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACrC,YAAY,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC3C,WAAW,EAAE,OAAO;AAAA,EACpB,gBAAgB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC/C,iBAAiB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAChD,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS;AAAA,EAChD,cAAc,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS;AAAA,EACpD,YAAY,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC3C,aAAa,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC5C,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS;AAAA,EAC9C,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC1C,cAAc,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS,EAAE,SAAS;AAAA,EACpE,mBAAmB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AACpD,CAAC,EACA,YAAY;AAEf,MAAM,+BAA+B,EAAE,OAAO;AAAA,EAC5C,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AACjC,CAAC;AAEM,MAAM,UAA2B,2BAA2B;AAAA,EACjE,cAAc;AAAA,EACd,aAAa;AAAA,EACb,oBAAoB,8BAA8B,sBAAsB;AAAA,EACxE,QAAQ;AAAA,IACN,QAAQ;AAAA,IACR,gBAAgB;AAAA,IAChB,aAAa;AAAA,EACf;AAAA,EACA,QAAQ;AAAA,IACN,QAAQ;AAAA,IACR,gBAAgB;AAAA,IAChB,aAAa;AAAA,EACf;AAAA,EACA,KAAK;AAAA,IACH,QAAQ;AAAA,IACR,gBAAgB;AAAA,IAChB,aAAa;AAAA,EACf;AACF,CAAC;",
   "names": []
 }

package/dist/modules/customers/api/comments/route.js

@@ -119,11 +119,23 @@ const crud = makeCrudRoute({
         )
       );
       if (!dealIds.length) return;
+      const tenantId = ctx.auth?.tenantId ?? null;
+      const organizationId = ctx.selectedOrganizationId ?? ctx.auth?.orgId ?? null;
+      if (!tenantId || !organizationId) {
+        const { translate } = await resolveTranslations();
+        throw new CrudHttpError(400, {
+          error: translate("customers.errors.tenant_required", "Tenant context is required")
+        });
+      }
       try {
         const em = ctx.container.resolve("em");
-        const tenantId = ctx.auth?.tenantId ?? null;
-        const organizationId = ctx.selectedOrganizationId ?? ctx.auth?.orgId ?? null;
-        const deals = tenantId && organizationId ? await findWithDecryption(em, CustomerDeal, { id: { $in: dealIds } }, void 0, { tenantId, organizationId }) : await em.find(CustomerDeal, { id: { $in: dealIds } });
+        const deals = await findWithDecryption(
+          em,
+          CustomerDeal,
+          { id: { $in: dealIds }, tenantId, organizationId },
+          void 0,
+          { tenantId, organizationId }
+        );
         const map = /* @__PURE__ */ new Map();
         deals.forEach((deal) => {
           if (deal.id) map.set(deal.id, deal.title ?? "");

package/dist/modules/customers/api/comments/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../src/modules/customers/api/comments/route.ts"],
-  "sourcesContent": ["import { z } from 'zod'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { makeCrudRoute } from '@open-mercato/shared/lib/crud/factory'\nimport { CrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { CustomerComment, CustomerDeal } from '../../data/entities'\nimport { commentCreateSchema, commentUpdateSchema } from '../../data/validators'\nimport { E } from '#generated/entities.ids.generated'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { withScopedPayload } from '../utils'\nimport {\n  createCustomersCrudOpenApi,\n  createPagedListResponseSchema,\n  defaultOkResponseSchema,\n} from '../openapi'\n\nconst rawBodySchema = z.object({}).passthrough()\n\nconst listSchema = z\n  .object({\n    page: z.coerce.number().min(1).default(1),\n    pageSize: z.coerce.number().min(1).max(100).default(50),\n    entityId: z.string().uuid().optional(),\n    dealId: z.string().uuid().optional(),\n    sortField: z.string().optional(),\n    sortDir: z.enum(['asc', 'desc']).optional(),\n  })\n  .passthrough()\n\nconst routeMetadata = {\n  GET: { requireAuth: true, requireFeatures: ['customers.activities.view'] },\n  POST: { requireAuth: true, requireFeatures: ['customers.activities.manage'] },\n  PUT: { requireAuth: true, requireFeatures: ['customers.activities.manage'] },\n  DELETE: { requireAuth: true, requireFeatures: ['customers.activities.manage'] },\n}\n\nexport const metadata = routeMetadata\n\nconst crud = makeCrudRoute({\n  metadata: routeMetadata,\n  orm: {\n    entity: CustomerComment,\n    idField: 'id',\n    orgField: 'organizationId',\n    tenantField: 'tenantId',\n    softDeleteField: 'deletedAt',\n  },\n  indexer: {\n    entityType: E.customers.customer_comment,\n  },\n  list: {\n    schema: listSchema,\n    entityId: E.customers.customer_comment,\n    fields: [\n      'id',\n      'entity_id',\n      'deal_id',\n      'body',\n      'author_user_id',\n      'appearance_icon',\n      'appearance_color',\n      'organization_id',\n      'tenant_id',\n      'created_at',\n      'updated_at',\n    ],\n    sortFieldMap: {\n      createdAt: 'created_at',\n      updatedAt: 'updated_at',\n    },\n    buildFilters: async (query: Record<string, unknown>) => {\n      const filters: Record<string, unknown> = {}\n      if (query.entityId) filters.entity_id = { $eq: query.entityId }\n      if (query.dealId) filters.deal_id = { $eq: query.dealId }\n      return filters\n    },\n  },\n  actions: {\n    create: {\n      commandId: 'customers.comments.create',\n      schema: rawBodySchema,\n      mapInput: async ({ raw, ctx }) => {\n        const { translate } = await resolveTranslations()\n        return commentCreateSchema.parse(withScopedPayload(raw ?? {}, ctx, translate))\n      },\n      response: ({ result }) => ({\n        id: result?.commentId ?? result?.id ?? null,\n        authorUserId: result?.authorUserId ?? null,\n      }),\n      status: 201,\n    },\n    update: {\n      commandId: 'customers.comments.update',\n      schema: rawBodySchema,\n      mapInput: async ({ raw, ctx }) => {\n        const { translate } = await resolveTranslations()\n        return commentUpdateSchema.parse(withScopedPayload(raw ?? {}, ctx, translate))\n      },\n      response: () => ({ ok: true }),\n    },\n    delete: {\n      commandId: 'customers.comments.delete',\n      schema: rawBodySchema,\n      mapInput: async ({ parsed, ctx }) => {\n        const { translate } = await resolveTranslations()\n        const id =\n          parsed?.body?.id ??\n          parsed?.id ??\n          parsed?.query?.id ??\n          (ctx.request ? new URL(ctx.request.url).searchParams.get('id') : null)\n        if (!id) throw new CrudHttpError(400, { error: translate('customers.errors.comment_required', 'Comment id is required') })\n        return { id }\n      },\n      response: () => ({ ok: true }),\n    },\n  },\n  hooks: {\n    afterList: async (payload, ctx) => {\n      const items = Array.isArray(payload.items) ? payload.items : []\n      if (!items.length) return\n      const dealIds = Array.from(\n        new Set<string>(\n          items\n            .map((item: unknown) => {\n              if (!item || typeof item !== 'object') return null\n              const record = item as Record<string, unknown>\n              const raw =\n                typeof record.deal_id === 'string'\n                  ? record.deal_id\n                  : typeof record.dealId === 'string'\n                    ? record.dealId\n                    : null\n              return raw && raw.trim().length ? raw : null\n            })\n            .filter(\n              (value: string | null): value is string =>\n                typeof value === 'string' && value.length > 0,\n            ),\n        ),\n      )\n      if (!dealIds.length) return\n      try {\n        const em = (ctx.container.resolve('em') as EntityManager)\n        const tenantId = ctx.auth?.tenantId ?? null\n        const organizationId = ctx.selectedOrganizationId ?? ctx.auth?.orgId ?? null\n        const deals = tenantId && organizationId\n          ? await findWithDecryption(em, CustomerDeal, { id: { $in: dealIds } }, undefined, { tenantId, organizationId })\n          : await em.find(CustomerDeal, { id: { $in: dealIds } })\n        const map = new Map<string, string>()\n        deals.forEach((deal: CustomerDeal) => {\n          if (deal.id) map.set(deal.id, deal.title ?? '')\n        })\n        items.forEach((item: unknown) => {\n          if (!item || typeof item !== 'object') return\n          const record = item as Record<string, unknown>\n          const raw =\n            typeof record.deal_id === 'string'\n              ? record.deal_id\n              : typeof record.dealId === 'string'\n                ? record.dealId\n                : null\n          if (!raw) return\n          const title = map.get(raw) ?? null\n          ;(record as Record<string, unknown>).dealTitle = title\n          if (!('deal_title' in record)) {\n            ;(record as Record<string, unknown>).deal_title = title\n          }\n        })\n      } catch (err) {\n        console.warn('[customers.comments] failed to enrich deal titles', err)\n      }\n    },\n  },\n})\n\nconst { POST, PUT, DELETE } = crud\n\nexport { POST, PUT, DELETE }\nexport const GET = crud.GET\n\nconst commentListItemSchema = z\n  .object({\n    id: z.string().uuid(),\n    entity_id: z.string().uuid().nullable(),\n    deal_id: z.string().uuid().nullable(),\n    body: z.string().nullable(),\n    author_user_id: z.string().uuid().nullable(),\n    appearance_icon: z.string().nullable().optional(),\n    appearance_color: z.string().nullable().optional(),\n    organization_id: z.string().uuid().nullable().optional(),\n    tenant_id: z.string().uuid().nullable().optional(),\n    created_at: z.string().nullable(),\n    updated_at: z.string().nullable().optional(),\n  })\n  .passthrough()\n\nconst commentCreateResponseSchema = z.object({\n  id: z.string().uuid().nullable(),\n  authorUserId: z.string().uuid().nullable(),\n})\n\nexport const openApi = createCustomersCrudOpenApi({\n  resourceName: 'Comment',\n  querySchema: listSchema,\n  listResponseSchema: createPagedListResponseSchema(commentListItemSchema),\n  create: {\n    schema: commentCreateSchema,\n    responseSchema: commentCreateResponseSchema,\n    description: 'Adds a comment to a customer timeline.',\n  },\n  update: {\n    schema: commentUpdateSchema,\n    responseSchema: defaultOkResponseSchema,\n    description: 'Updates an existing timeline comment.',\n  },\n  del: {\n    schema: z.object({ id: z.string().uuid() }),\n    responseSchema: defaultOkResponseSchema,\n    description: 'Deletes a comment identified by `id` supplied via body or query string.',\n  },\n})\n"],
-  "mappings": "AAAA,SAAS,SAAS;AAElB,SAAS,qBAAqB;AAC9B,SAAS,qBAAqB;AAC9B,SAAS,0BAA0B;AACnC,SAAS,iBAAiB,oBAAoB;AAC9C,SAAS,qBAAqB,2BAA2B;AACzD,SAAS,SAAS;AAClB,SAAS,2BAA2B;AACpC,SAAS,yBAAyB;AAClC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP,MAAM,gBAAgB,EAAE,OAAO,CAAC,CAAC,EAAE,YAAY;AAE/C,MAAM,aAAa,EAChB,OAAO;AAAA,EACN,MAAM,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,QAAQ,CAAC;AAAA,EACxC,UAAU,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,QAAQ,EAAE;AAAA,EACtD,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACrC,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACnC,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,SAAS,EAAE,KAAK,CAAC,OAAO,MAAM,CAAC,EAAE,SAAS;AAC5C,CAAC,EACA,YAAY;AAEf,MAAM,gBAAgB;AAAA,EACpB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,2BAA2B,EAAE;AAAA,EACzE,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,6BAA6B,EAAE;AAAA,EAC5E,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,6BAA6B,EAAE;AAAA,EAC3E,QAAQ,EAAE,aAAa,MAAM,iBAAiB,CAAC,6BAA6B,EAAE;AAChF;AAEO,MAAM,WAAW;AAExB,MAAM,OAAO,cAAc;AAAA,EACzB,UAAU;AAAA,EACV,KAAK;AAAA,IACH,QAAQ;AAAA,IACR,SAAS;AAAA,IACT,UAAU;AAAA,IACV,aAAa;AAAA,IACb,iBAAiB;AAAA,EACnB;AAAA,EACA,SAAS;AAAA,IACP,YAAY,EAAE,UAAU;AAAA,EAC1B;AAAA,EACA,MAAM;AAAA,IACJ,QAAQ;AAAA,IACR,UAAU,EAAE,UAAU;AAAA,IACtB,QAAQ;AAAA,MACN;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,IACA,cAAc;AAAA,MACZ,WAAW;AAAA,MACX,WAAW;AAAA,IACb;AAAA,IACA,cAAc,OAAO,UAAmC;AACtD,YAAM,UAAmC,CAAC;AAC1C,UAAI,MAAM,SAAU,SAAQ,YAAY,EAAE,KAAK,MAAM,SAAS;AAC9D,UAAI,MAAM,OAAQ,SAAQ,UAAU,EAAE,KAAK,MAAM,OAAO;AACxD,aAAO;AAAA,IACT;AAAA,EACF;AAAA,EACA,SAAS;AAAA,IACP,QAAQ;AAAA,MACN,WAAW;AAAA,MACX,QAAQ;AAAA,MACR,UAAU,OAAO,EAAE,KAAK,IAAI,MAAM;AAChC,cAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,eAAO,oBAAoB,MAAM,kBAAkB,OAAO,CAAC,GAAG,KAAK,SAAS,CAAC;AAAA,MAC/E;AAAA,MACA,UAAU,CAAC,EAAE,OAAO,OAAO;AAAA,QACzB,IAAI,QAAQ,aAAa,QAAQ,MAAM;AAAA,QACvC,cAAc,QAAQ,gBAAgB;AAAA,MACxC;AAAA,MACA,QAAQ;AAAA,IACV;AAAA,IACA,QAAQ;AAAA,MACN,WAAW;AAAA,MACX,QAAQ;AAAA,MACR,UAAU,OAAO,EAAE,KAAK,IAAI,MAAM;AAChC,cAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,eAAO,oBAAoB,MAAM,kBAAkB,OAAO,CAAC,GAAG,KAAK,SAAS,CAAC;AAAA,MAC/E;AAAA,MACA,UAAU,OAAO,EAAE,IAAI,KAAK;AAAA,IAC9B;AAAA,IACA,QAAQ;AAAA,MACN,WAAW;AAAA,MACX,QAAQ;AAAA,MACR,UAAU,OAAO,EAAE,QAAQ,IAAI,MAAM;AACnC,cAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,cAAM,KACJ,QAAQ,MAAM,MACd,QAAQ,MACR,QAAQ,OAAO,OACd,IAAI,UAAU,IAAI,IAAI,IAAI,QAAQ,GAAG,EAAE,aAAa,IAAI,IAAI,IAAI;AACnE,YAAI,CAAC,GAAI,OAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,qCAAqC,wBAAwB,EAAE,CAAC;AACzH,eAAO,EAAE,GAAG;AAAA,MACd;AAAA,MACA,UAAU,OAAO,EAAE,IAAI,KAAK;AAAA,IAC9B;AAAA,EACF;AAAA,EACA,OAAO;AAAA,IACL,WAAW,OAAO,SAAS,QAAQ;AACjC,YAAM,QAAQ,MAAM,QAAQ,QAAQ,KAAK,IAAI,QAAQ,QAAQ,CAAC;AAC9D,UAAI,CAAC,MAAM,OAAQ;AACnB,YAAM,UAAU,MAAM;AAAA,QACpB,IAAI;AAAA,UACF,MACG,IAAI,CAAC,SAAkB;AACtB,gBAAI,CAAC,QAAQ,OAAO,SAAS,SAAU,QAAO;AAC9C,kBAAM,SAAS;AACf,kBAAM,MACJ,OAAO,OAAO,YAAY,WACtB,OAAO,UACP,OAAO,OAAO,WAAW,WACvB,OAAO,SACP;AACR,mBAAO,OAAO,IAAI,KAAK,EAAE,SAAS,MAAM;AAAA,UAC1C,CAAC,EACA;AAAA,YACC,CAAC,UACC,OAAO,UAAU,YAAY,MAAM,SAAS;AAAA,UAChD;AAAA,QACJ;AAAA,MACF;AACA,UAAI,CAAC,QAAQ,OAAQ;AACrB,UAAI;AACF,cAAM,KAAM,IAAI,UAAU,QAAQ,IAAI;AACtC,cAAM,WAAW,IAAI,MAAM,YAAY;AACvC,cAAM,iBAAiB,IAAI,0BAA0B,IAAI,MAAM,SAAS;AACxE,cAAM,QAAQ,YAAY,iBACtB,MAAM,mBAAmB,IAAI,cAAc,EAAE,IAAI,EAAE,KAAK,QAAQ,EAAE,GAAG,QAAW,EAAE,UAAU,eAAe,CAAC,IAC5G,MAAM,GAAG,KAAK,cAAc,EAAE,IAAI,EAAE,KAAK,QAAQ,EAAE,CAAC;AACxD,cAAM,MAAM,oBAAI,IAAoB;AACpC,cAAM,QAAQ,CAAC,SAAuB;AACpC,cAAI,KAAK,GAAI,KAAI,IAAI,KAAK,IAAI,KAAK,SAAS,EAAE;AAAA,QAChD,CAAC;AACD,cAAM,QAAQ,CAAC,SAAkB;AAC/B,cAAI,CAAC,QAAQ,OAAO,SAAS,SAAU;AACvC,gBAAM,SAAS;AACf,gBAAM,MACJ,OAAO,OAAO,YAAY,WACtB,OAAO,UACP,OAAO,OAAO,WAAW,WACvB,OAAO,SACP;AACR,cAAI,CAAC,IAAK;AACV,gBAAM,QAAQ,IAAI,IAAI,GAAG,KAAK;AAC7B,UAAC,OAAmC,YAAY;AACjD,cAAI,EAAE,gBAAgB,SAAS;AAC7B;AAAC,YAAC,OAAmC,aAAa;AAAA,UACpD;AAAA,QACF,CAAC;AAAA,MACH,SAAS,KAAK;AACZ,gBAAQ,KAAK,qDAAqD,GAAG;AAAA,MACvE;AAAA,IACF;AAAA,EACF;AACF,CAAC;AAED,MAAM,EAAE,MAAM,KAAK,OAAO,IAAI;AAGvB,MAAM,MAAM,KAAK;AAExB,MAAM,wBAAwB,EAC3B,OAAO;AAAA,EACN,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACtC,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACpC,MAAM,EAAE,OAAO,EAAE,SAAS;AAAA,EAC1B,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC3C,iBAAiB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAChD,kBAAkB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACjD,iBAAiB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS;AAAA,EACvD,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS;AAAA,EACjD,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,EAChC,YAAY,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAC7C,CAAC,EACA,YAAY;AAEf,MAAM,8BAA8B,EAAE,OAAO;AAAA,EAC3C,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC/B,cAAc,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAC3C,CAAC;AAEM,MAAM,UAAU,2BAA2B;AAAA,EAChD,cAAc;AAAA,EACd,aAAa;AAAA,EACb,oBAAoB,8BAA8B,qBAAqB;AAAA,EACvE,QAAQ;AAAA,IACN,QAAQ;AAAA,IACR,gBAAgB;AAAA,IAChB,aAAa;AAAA,EACf;AAAA,EACA,QAAQ;AAAA,IACN,QAAQ;AAAA,IACR,gBAAgB;AAAA,IAChB,aAAa;AAAA,EACf;AAAA,EACA,KAAK;AAAA,IACH,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAAA,IAC1C,gBAAgB;AAAA,IAChB,aAAa;AAAA,EACf;AACF,CAAC;",
+  "sourcesContent": ["import { z } from 'zod'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { makeCrudRoute } from '@open-mercato/shared/lib/crud/factory'\nimport { CrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { CustomerComment, CustomerDeal } from '../../data/entities'\nimport { commentCreateSchema, commentUpdateSchema } from '../../data/validators'\nimport { E } from '#generated/entities.ids.generated'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { withScopedPayload } from '../utils'\nimport {\n  createCustomersCrudOpenApi,\n  createPagedListResponseSchema,\n  defaultOkResponseSchema,\n} from '../openapi'\n\nconst rawBodySchema = z.object({}).passthrough()\n\nconst listSchema = z\n  .object({\n    page: z.coerce.number().min(1).default(1),\n    pageSize: z.coerce.number().min(1).max(100).default(50),\n    entityId: z.string().uuid().optional(),\n    dealId: z.string().uuid().optional(),\n    sortField: z.string().optional(),\n    sortDir: z.enum(['asc', 'desc']).optional(),\n  })\n  .passthrough()\n\nconst routeMetadata = {\n  GET: { requireAuth: true, requireFeatures: ['customers.activities.view'] },\n  POST: { requireAuth: true, requireFeatures: ['customers.activities.manage'] },\n  PUT: { requireAuth: true, requireFeatures: ['customers.activities.manage'] },\n  DELETE: { requireAuth: true, requireFeatures: ['customers.activities.manage'] },\n}\n\nexport const metadata = routeMetadata\n\nconst crud = makeCrudRoute({\n  metadata: routeMetadata,\n  orm: {\n    entity: CustomerComment,\n    idField: 'id',\n    orgField: 'organizationId',\n    tenantField: 'tenantId',\n    softDeleteField: 'deletedAt',\n  },\n  indexer: {\n    entityType: E.customers.customer_comment,\n  },\n  list: {\n    schema: listSchema,\n    entityId: E.customers.customer_comment,\n    fields: [\n      'id',\n      'entity_id',\n      'deal_id',\n      'body',\n      'author_user_id',\n      'appearance_icon',\n      'appearance_color',\n      'organization_id',\n      'tenant_id',\n      'created_at',\n      'updated_at',\n    ],\n    sortFieldMap: {\n      createdAt: 'created_at',\n      updatedAt: 'updated_at',\n    },\n    buildFilters: async (query: Record<string, unknown>) => {\n      const filters: Record<string, unknown> = {}\n      if (query.entityId) filters.entity_id = { $eq: query.entityId }\n      if (query.dealId) filters.deal_id = { $eq: query.dealId }\n      return filters\n    },\n  },\n  actions: {\n    create: {\n      commandId: 'customers.comments.create',\n      schema: rawBodySchema,\n      mapInput: async ({ raw, ctx }) => {\n        const { translate } = await resolveTranslations()\n        return commentCreateSchema.parse(withScopedPayload(raw ?? {}, ctx, translate))\n      },\n      response: ({ result }) => ({\n        id: result?.commentId ?? result?.id ?? null,\n        authorUserId: result?.authorUserId ?? null,\n      }),\n      status: 201,\n    },\n    update: {\n      commandId: 'customers.comments.update',\n      schema: rawBodySchema,\n      mapInput: async ({ raw, ctx }) => {\n        const { translate } = await resolveTranslations()\n        return commentUpdateSchema.parse(withScopedPayload(raw ?? {}, ctx, translate))\n      },\n      response: () => ({ ok: true }),\n    },\n    delete: {\n      commandId: 'customers.comments.delete',\n      schema: rawBodySchema,\n      mapInput: async ({ parsed, ctx }) => {\n        const { translate } = await resolveTranslations()\n        const id =\n          parsed?.body?.id ??\n          parsed?.id ??\n          parsed?.query?.id ??\n          (ctx.request ? new URL(ctx.request.url).searchParams.get('id') : null)\n        if (!id) throw new CrudHttpError(400, { error: translate('customers.errors.comment_required', 'Comment id is required') })\n        return { id }\n      },\n      response: () => ({ ok: true }),\n    },\n  },\n  hooks: {\n    afterList: async (payload, ctx) => {\n      const items = Array.isArray(payload.items) ? payload.items : []\n      if (!items.length) return\n      const dealIds = Array.from(\n        new Set<string>(\n          items\n            .map((item: unknown) => {\n              if (!item || typeof item !== 'object') return null\n              const record = item as Record<string, unknown>\n              const raw =\n                typeof record.deal_id === 'string'\n                  ? record.deal_id\n                  : typeof record.dealId === 'string'\n                    ? record.dealId\n                    : null\n              return raw && raw.trim().length ? raw : null\n            })\n            .filter(\n              (value: string | null): value is string =>\n                typeof value === 'string' && value.length > 0,\n            ),\n        ),\n      )\n      if (!dealIds.length) return\n      const tenantId = ctx.auth?.tenantId ?? null\n      const organizationId = ctx.selectedOrganizationId ?? ctx.auth?.orgId ?? null\n      if (!tenantId || !organizationId) {\n        const { translate } = await resolveTranslations()\n        throw new CrudHttpError(400, {\n          error: translate('customers.errors.tenant_required', 'Tenant context is required'),\n        })\n      }\n      try {\n        const em = (ctx.container.resolve('em') as EntityManager)\n        const deals = await findWithDecryption(\n          em,\n          CustomerDeal,\n          { id: { $in: dealIds }, tenantId, organizationId },\n          undefined,\n          { tenantId, organizationId },\n        )\n        const map = new Map<string, string>()\n        deals.forEach((deal: CustomerDeal) => {\n          if (deal.id) map.set(deal.id, deal.title ?? '')\n        })\n        items.forEach((item: unknown) => {\n          if (!item || typeof item !== 'object') return\n          const record = item as Record<string, unknown>\n          const raw =\n            typeof record.deal_id === 'string'\n              ? record.deal_id\n              : typeof record.dealId === 'string'\n                ? record.dealId\n                : null\n          if (!raw) return\n          const title = map.get(raw) ?? null\n          ;(record as Record<string, unknown>).dealTitle = title\n          if (!('deal_title' in record)) {\n            ;(record as Record<string, unknown>).deal_title = title\n          }\n        })\n      } catch (err) {\n        console.warn('[customers.comments] failed to enrich deal titles', err)\n      }\n    },\n  },\n})\n\nconst { POST, PUT, DELETE } = crud\n\nexport { POST, PUT, DELETE }\nexport const GET = crud.GET\n\nconst commentListItemSchema = z\n  .object({\n    id: z.string().uuid(),\n    entity_id: z.string().uuid().nullable(),\n    deal_id: z.string().uuid().nullable(),\n    body: z.string().nullable(),\n    author_user_id: z.string().uuid().nullable(),\n    appearance_icon: z.string().nullable().optional(),\n    appearance_color: z.string().nullable().optional(),\n    organization_id: z.string().uuid().nullable().optional(),\n    tenant_id: z.string().uuid().nullable().optional(),\n    created_at: z.string().nullable(),\n    updated_at: z.string().nullable().optional(),\n  })\n  .passthrough()\n\nconst commentCreateResponseSchema = z.object({\n  id: z.string().uuid().nullable(),\n  authorUserId: z.string().uuid().nullable(),\n})\n\nexport const openApi = createCustomersCrudOpenApi({\n  resourceName: 'Comment',\n  querySchema: listSchema,\n  listResponseSchema: createPagedListResponseSchema(commentListItemSchema),\n  create: {\n    schema: commentCreateSchema,\n    responseSchema: commentCreateResponseSchema,\n    description: 'Adds a comment to a customer timeline.',\n  },\n  update: {\n    schema: commentUpdateSchema,\n    responseSchema: defaultOkResponseSchema,\n    description: 'Updates an existing timeline comment.',\n  },\n  del: {\n    schema: z.object({ id: z.string().uuid() }),\n    responseSchema: defaultOkResponseSchema,\n    description: 'Deletes a comment identified by `id` supplied via body or query string.',\n  },\n})\n"],
+  "mappings": "AAAA,SAAS,SAAS;AAElB,SAAS,qBAAqB;AAC9B,SAAS,qBAAqB;AAC9B,SAAS,0BAA0B;AACnC,SAAS,iBAAiB,oBAAoB;AAC9C,SAAS,qBAAqB,2BAA2B;AACzD,SAAS,SAAS;AAClB,SAAS,2BAA2B;AACpC,SAAS,yBAAyB;AAClC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP,MAAM,gBAAgB,EAAE,OAAO,CAAC,CAAC,EAAE,YAAY;AAE/C,MAAM,aAAa,EAChB,OAAO;AAAA,EACN,MAAM,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,QAAQ,CAAC;AAAA,EACxC,UAAU,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,QAAQ,EAAE;AAAA,EACtD,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACrC,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACnC,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,SAAS,EAAE,KAAK,CAAC,OAAO,MAAM,CAAC,EAAE,SAAS;AAC5C,CAAC,EACA,YAAY;AAEf,MAAM,gBAAgB;AAAA,EACpB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,2BAA2B,EAAE;AAAA,EACzE,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,6BAA6B,EAAE;AAAA,EAC5E,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,6BAA6B,EAAE;AAAA,EAC3E,QAAQ,EAAE,aAAa,MAAM,iBAAiB,CAAC,6BAA6B,EAAE;AAChF;AAEO,MAAM,WAAW;AAExB,MAAM,OAAO,cAAc;AAAA,EACzB,UAAU;AAAA,EACV,KAAK;AAAA,IACH,QAAQ;AAAA,IACR,SAAS;AAAA,IACT,UAAU;AAAA,IACV,aAAa;AAAA,IACb,iBAAiB;AAAA,EACnB;AAAA,EACA,SAAS;AAAA,IACP,YAAY,EAAE,UAAU;AAAA,EAC1B;AAAA,EACA,MAAM;AAAA,IACJ,QAAQ;AAAA,IACR,UAAU,EAAE,UAAU;AAAA,IACtB,QAAQ;AAAA,MACN;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,IACA,cAAc;AAAA,MACZ,WAAW;AAAA,MACX,WAAW;AAAA,IACb;AAAA,IACA,cAAc,OAAO,UAAmC;AACtD,YAAM,UAAmC,CAAC;AAC1C,UAAI,MAAM,SAAU,SAAQ,YAAY,EAAE,KAAK,MAAM,SAAS;AAC9D,UAAI,MAAM,OAAQ,SAAQ,UAAU,EAAE,KAAK,MAAM,OAAO;AACxD,aAAO;AAAA,IACT;AAAA,EACF;AAAA,EACA,SAAS;AAAA,IACP,QAAQ;AAAA,MACN,WAAW;AAAA,MACX,QAAQ;AAAA,MACR,UAAU,OAAO,EAAE,KAAK,IAAI,MAAM;AAChC,cAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,eAAO,oBAAoB,MAAM,kBAAkB,OAAO,CAAC,GAAG,KAAK,SAAS,CAAC;AAAA,MAC/E;AAAA,MACA,UAAU,CAAC,EAAE,OAAO,OAAO;AAAA,QACzB,IAAI,QAAQ,aAAa,QAAQ,MAAM;AAAA,QACvC,cAAc,QAAQ,gBAAgB;AAAA,MACxC;AAAA,MACA,QAAQ;AAAA,IACV;AAAA,IACA,QAAQ;AAAA,MACN,WAAW;AAAA,MACX,QAAQ;AAAA,MACR,UAAU,OAAO,EAAE,KAAK,IAAI,MAAM;AAChC,cAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,eAAO,oBAAoB,MAAM,kBAAkB,OAAO,CAAC,GAAG,KAAK,SAAS,CAAC;AAAA,MAC/E;AAAA,MACA,UAAU,OAAO,EAAE,IAAI,KAAK;AAAA,IAC9B;AAAA,IACA,QAAQ;AAAA,MACN,WAAW;AAAA,MACX,QAAQ;AAAA,MACR,UAAU,OAAO,EAAE,QAAQ,IAAI,MAAM;AACnC,cAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,cAAM,KACJ,QAAQ,MAAM,MACd,QAAQ,MACR,QAAQ,OAAO,OACd,IAAI,UAAU,IAAI,IAAI,IAAI,QAAQ,GAAG,EAAE,aAAa,IAAI,IAAI,IAAI;AACnE,YAAI,CAAC,GAAI,OAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,qCAAqC,wBAAwB,EAAE,CAAC;AACzH,eAAO,EAAE,GAAG;AAAA,MACd;AAAA,MACA,UAAU,OAAO,EAAE,IAAI,KAAK;AAAA,IAC9B;AAAA,EACF;AAAA,EACA,OAAO;AAAA,IACL,WAAW,OAAO,SAAS,QAAQ;AACjC,YAAM,QAAQ,MAAM,QAAQ,QAAQ,KAAK,IAAI,QAAQ,QAAQ,CAAC;AAC9D,UAAI,CAAC,MAAM,OAAQ;AACnB,YAAM,UAAU,MAAM;AAAA,QACpB,IAAI;AAAA,UACF,MACG,IAAI,CAAC,SAAkB;AACtB,gBAAI,CAAC,QAAQ,OAAO,SAAS,SAAU,QAAO;AAC9C,kBAAM,SAAS;AACf,kBAAM,MACJ,OAAO,OAAO,YAAY,WACtB,OAAO,UACP,OAAO,OAAO,WAAW,WACvB,OAAO,SACP;AACR,mBAAO,OAAO,IAAI,KAAK,EAAE,SAAS,MAAM;AAAA,UAC1C,CAAC,EACA;AAAA,YACC,CAAC,UACC,OAAO,UAAU,YAAY,MAAM,SAAS;AAAA,UAChD;AAAA,QACJ;AAAA,MACF;AACA,UAAI,CAAC,QAAQ,OAAQ;AACrB,YAAM,WAAW,IAAI,MAAM,YAAY;AACvC,YAAM,iBAAiB,IAAI,0BAA0B,IAAI,MAAM,SAAS;AACxE,UAAI,CAAC,YAAY,CAAC,gBAAgB;AAChC,cAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,cAAM,IAAI,cAAc,KAAK;AAAA,UAC3B,OAAO,UAAU,oCAAoC,4BAA4B;AAAA,QACnF,CAAC;AAAA,MACH;AACA,UAAI;AACF,cAAM,KAAM,IAAI,UAAU,QAAQ,IAAI;AACtC,cAAM,QAAQ,MAAM;AAAA,UAClB;AAAA,UACA;AAAA,UACA,EAAE,IAAI,EAAE,KAAK,QAAQ,GAAG,UAAU,eAAe;AAAA,UACjD;AAAA,UACA,EAAE,UAAU,eAAe;AAAA,QAC7B;AACA,cAAM,MAAM,oBAAI,IAAoB;AACpC,cAAM,QAAQ,CAAC,SAAuB;AACpC,cAAI,KAAK,GAAI,KAAI,IAAI,KAAK,IAAI,KAAK,SAAS,EAAE;AAAA,QAChD,CAAC;AACD,cAAM,QAAQ,CAAC,SAAkB;AAC/B,cAAI,CAAC,QAAQ,OAAO,SAAS,SAAU;AACvC,gBAAM,SAAS;AACf,gBAAM,MACJ,OAAO,OAAO,YAAY,WACtB,OAAO,UACP,OAAO,OAAO,WAAW,WACvB,OAAO,SACP;AACR,cAAI,CAAC,IAAK;AACV,gBAAM,QAAQ,IAAI,IAAI,GAAG,KAAK;AAC7B,UAAC,OAAmC,YAAY;AACjD,cAAI,EAAE,gBAAgB,SAAS;AAC7B;AAAC,YAAC,OAAmC,aAAa;AAAA,UACpD;AAAA,QACF,CAAC;AAAA,MACH,SAAS,KAAK;AACZ,gBAAQ,KAAK,qDAAqD,GAAG;AAAA,MACvE;AAAA,IACF;AAAA,EACF;AACF,CAAC;AAED,MAAM,EAAE,MAAM,KAAK,OAAO,IAAI;AAGvB,MAAM,MAAM,KAAK;AAExB,MAAM,wBAAwB,EAC3B,OAAO;AAAA,EACN,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACtC,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACpC,MAAM,EAAE,OAAO,EAAE,SAAS;AAAA,EAC1B,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC3C,iBAAiB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAChD,kBAAkB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACjD,iBAAiB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS;AAAA,EACvD,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS;AAAA,EACjD,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,EAChC,YAAY,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAC7C,CAAC,EACA,YAAY;AAEf,MAAM,8BAA8B,EAAE,OAAO;AAAA,EAC3C,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC/B,cAAc,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAC3C,CAAC;AAEM,MAAM,UAAU,2BAA2B;AAAA,EAChD,cAAc;AAAA,EACd,aAAa;AAAA,EACb,oBAAoB,8BAA8B,qBAAqB;AAAA,EACvE,QAAQ;AAAA,IACN,QAAQ;AAAA,IACR,gBAAgB;AAAA,IAChB,aAAa;AAAA,EACf;AAAA,EACA,QAAQ;AAAA,IACN,QAAQ;AAAA,IACR,gBAAgB;AAAA,IAChB,aAAa;AAAA,EACf;AAAA,EACA,KAAK;AAAA,IACH,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAAA,IAC1C,gBAAgB;AAAA,IAChB,aAAa;AAAA,EACf;AACF,CAAC;",
   "names": []
 }

package/dist/modules/customers/api/companies/[id]/people/route.js

@@ -6,6 +6,7 @@ import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
 import { resolveOrganizationScopeForRequest } from "@open-mercato/core/modules/directory/utils/organizationScope";
 import { resolveTranslations } from "@open-mercato/shared/lib/i18n/server";
 import { findOneWithDecryption, findWithDecryption } from "@open-mercato/shared/lib/encryption/find";
+import { isOrganizationReadAccessAllowed } from "@open-mercato/core/modules/directory/utils/organizationScopeGuard";
 import {
   CustomerEntity,
   CustomerPersonCompanyLink,
@@ -84,10 +85,7 @@ async function GET(req, ctx) {
     if (!company) {
       throw new CrudHttpError(404, { error: translate("customers.errors.company_not_found", "Company not found") });
     }
-    const allowedOrgIds = /* @__PURE__ */ new Set();
-    if (scope?.filterIds?.length) scope.filterIds.forEach((entry) => allowedOrgIds.add(entry));
-    else if (auth.orgId) allowedOrgIds.add(auth.orgId);
-    if (allowedOrgIds.size > 0 && company.organizationId && !allowedOrgIds.has(company.organizationId)) {
+    if (!isOrganizationReadAccessAllowed({ scope, auth, organizationId: company.organizationId })) {
       throw new CrudHttpError(403, { error: translate("customers.errors.access_denied", "Access denied") });
     }
     const entityScope = { tenantId: auth.tenantId, organizationId: company.organizationId };

package/dist/modules/customers/api/companies/[id]/people/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../../src/modules/customers/api/companies/%5Bid%5D/people/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { CrudHttpError, isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { findOneWithDecryption, findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport {\n  CustomerEntity,\n  CustomerPersonCompanyLink,\n  CustomerPersonProfile,\n} from '../../../../data/entities'\nimport {\n  filterActivePersonCompanyLinks,\n  withActiveCustomerPersonCompanyLinkFilter,\n} from '../../../../lib/personCompanyLinkTable'\n\nconst paramsSchema = z.object({\n  id: z.string().uuid(),\n})\n\nconst querySchema = z.object({\n  page: z.coerce.number().min(1).default(1),\n  pageSize: z.coerce.number().min(1).max(100).default(20),\n  search: z.string().optional(),\n  sort: z.enum(['name-asc', 'name-desc', 'recent']).default('name-asc'),\n})\n\ntype CompanyPersonItem = {\n  id: string\n  displayName: string\n  primaryEmail: string | null\n  primaryPhone: string | null\n  status: string | null\n  lifecycleStage: string | null\n  jobTitle: string | null\n  department: string | null\n  createdAt: string\n  organizationId: string\n  temperature: string | null\n  source: string | null\n  linkedAt: string | null\n}\n\nfunction matchesSearch(item: CompanyPersonItem, query: string): boolean {\n  const normalized = query.trim().toLowerCase()\n  if (!normalized.length) return true\n  return [\n    item.displayName,\n    item.primaryEmail,\n    item.primaryPhone,\n    item.jobTitle,\n    item.department,\n    item.status,\n    item.lifecycleStage,\n    item.source,\n  ]\n    .filter((value): value is string => typeof value === 'string' && value.length > 0)\n    .some((value) => value.toLowerCase().includes(normalized))\n}\n\nfunction sortItems(items: CompanyPersonItem[], sort: 'name-asc' | 'name-desc' | 'recent'): CompanyPersonItem[] {\n  if (sort === 'recent') {\n    return [...items].sort((left, right) => {\n      const leftTimestamp = left.linkedAt ? new Date(left.linkedAt).getTime() : new Date(left.createdAt).getTime()\n      const rightTimestamp = right.linkedAt ? new Date(right.linkedAt).getTime() : new Date(right.createdAt).getTime()\n      if (leftTimestamp === rightTimestamp) return left.displayName.localeCompare(right.displayName)\n      return rightTimestamp - leftTimestamp\n    })\n  }\n\n  return [...items].sort((left, right) => {\n    const compare = left.displayName.localeCompare(right.displayName, undefined, { sensitivity: 'base' })\n    return sort === 'name-asc' ? compare : -compare\n  })\n}\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['customers.companies.view'] },\n}\n\nexport async function GET(req: Request, ctx: { params?: { id?: string } }) {\n  const { translate } = await resolveTranslations()\n  try {\n    const { id } = paramsSchema.parse({ id: ctx.params?.id })\n    const auth = await getAuthFromRequest(req)\n    if (!auth?.tenantId) throw new CrudHttpError(401, { error: 'Unauthorized' })\n\n    const query = querySchema.parse({\n      page: new URL(req.url).searchParams.get('page') ?? undefined,\n      pageSize: new URL(req.url).searchParams.get('pageSize') ?? undefined,\n      search: new URL(req.url).searchParams.get('search') ?? undefined,\n      sort: new URL(req.url).searchParams.get('sort') ?? undefined,\n    })\n\n    const container = await createRequestContainer()\n    const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n    const em = (container.resolve('em') as EntityManager).fork()\n    const decryptionScope = {\n      tenantId: auth.tenantId,\n      organizationId: scope?.selectedId ?? auth.orgId ?? null,\n    }\n\n    const company = await findOneWithDecryption(\n      em,\n      CustomerEntity,\n      { id, kind: 'company', tenantId: auth.tenantId, deletedAt: null },\n      {},\n      decryptionScope,\n    )\n    if (!company) {\n      throw new CrudHttpError(404, { error: translate('customers.errors.company_not_found', 'Company not found') })\n    }\n\n    const allowedOrgIds = new Set<string>()\n    if (scope?.filterIds?.length) scope.filterIds.forEach((entry) => allowedOrgIds.add(entry))\n    else if (auth.orgId) allowedOrgIds.add(auth.orgId)\n    if (allowedOrgIds.size > 0 && company.organizationId && !allowedOrgIds.has(company.organizationId)) {\n      throw new CrudHttpError(403, { error: translate('customers.errors.access_denied', 'Access denied') })\n    }\n\n    const entityScope = { tenantId: auth.tenantId, organizationId: company.organizationId }\n    const linkWhere = await withActiveCustomerPersonCompanyLinkFilter(\n      em,\n      {\n        company: company.id,\n        tenantId: company.tenantId,\n        organizationId: company.organizationId,\n      },\n      'customers.companies.people.GET',\n    )\n    const links = filterActivePersonCompanyLinks(\n      await findWithDecryption(\n        em,\n        CustomerPersonCompanyLink,\n        linkWhere,\n        { populate: ['person'] },\n        entityScope,\n      ),\n    )\n\n    const personIds = links\n      .map((link) => link.person?.id)\n      .filter((personId): personId is string => typeof personId === 'string' && personId.length > 0)\n\n    const profiles = personIds.length > 0\n      ? await findWithDecryption(\n          em,\n          CustomerPersonProfile,\n          {\n            entity: { $in: personIds },\n            tenantId: company.tenantId,\n            organizationId: company.organizationId,\n          },\n          {},\n          entityScope,\n        )\n      : []\n    const profileByPersonId = new Map(\n      profiles.map((profile) => [(profile.entity as { id: string }).id, profile]),\n    )\n\n    const items = links\n      .map((link) => {\n        const person = link.person\n        if (!person?.id) return null\n        const profile = profileByPersonId.get(person.id) ?? null\n        return {\n          id: person.id,\n          displayName: person.displayName ?? person.primaryEmail ?? person.id,\n          primaryEmail: person.primaryEmail ?? null,\n          primaryPhone: person.primaryPhone ?? null,\n          status: person.status ?? null,\n          lifecycleStage: person.lifecycleStage ?? null,\n          jobTitle: profile?.jobTitle ?? null,\n          department: profile?.department ?? null,\n          createdAt: person.createdAt.toISOString(),\n          organizationId: person.organizationId,\n          temperature: person.temperature ?? null,\n          source: person.source ?? null,\n          linkedAt: link.createdAt ? link.createdAt.toISOString() : null,\n        } satisfies CompanyPersonItem\n      })\n      .filter((item): item is CompanyPersonItem => item !== null)\n\n    const filtered = query.search?.trim().length ? items.filter((item) => matchesSearch(item, query.search ?? '')) : items\n    const sorted = sortItems(filtered, query.sort)\n    const total = sorted.length\n    const totalPages = Math.max(1, Math.ceil(total / query.pageSize))\n    const page = Math.min(query.page, totalPages)\n    const start = (page - 1) * query.pageSize\n\n    return NextResponse.json({\n      items: sorted.slice(start, start + query.pageSize),\n      total,\n      page,\n      pageSize: query.pageSize,\n      totalPages,\n    })\n  } catch (error) {\n    if (isCrudHttpError(error)) {\n      return NextResponse.json(error.body, { status: error.status })\n    }\n    console.error('[customers.companies.people.GET]', error)\n    return NextResponse.json({ error: translate('customers.errors.company_people_load_failed', 'Failed to load linked people') }, { status: 500 })\n  }\n}\n\nconst companyPeopleItemSchema = z.object({\n  id: z.string().uuid(),\n  displayName: z.string(),\n  primaryEmail: z.string().nullable(),\n  primaryPhone: z.string().nullable(),\n  status: z.string().nullable(),\n  lifecycleStage: z.string().nullable(),\n  jobTitle: z.string().nullable(),\n  department: z.string().nullable(),\n  createdAt: z.string(),\n  organizationId: z.string().uuid().nullable(),\n  temperature: z.string().nullable(),\n  source: z.string().nullable(),\n  linkedAt: z.string().nullable(),\n})\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Customers',\n  methods: {\n    GET: {\n      summary: 'List linked people for a company',\n      query: querySchema,\n      responses: [\n        {\n          status: 200,\n          description: 'Paginated linked people',\n          schema: z.object({\n            items: z.array(companyPeopleItemSchema),\n            total: z.number().int().nonnegative(),\n            page: z.number().int().min(1),\n            pageSize: z.number().int().min(1),\n            totalPages: z.number().int().min(1),\n          }),\n        },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAElB,SAAS,eAAe,uBAAuB;AAC/C,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AACnD,SAAS,2BAA2B;AAEpC,SAAS,uBAAuB,0BAA0B;AAC1D;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAEP,MAAM,eAAe,EAAE,OAAO;AAAA,EAC5B,IAAI,EAAE,OAAO,EAAE,KAAK;AACtB,CAAC;AAED,MAAM,cAAc,EAAE,OAAO;AAAA,EAC3B,MAAM,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,QAAQ,CAAC;AAAA,EACxC,UAAU,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,QAAQ,EAAE;AAAA,EACtD,QAAQ,EAAE,OAAO,EAAE,SAAS;AAAA,EAC5B,MAAM,EAAE,KAAK,CAAC,YAAY,aAAa,QAAQ,CAAC,EAAE,QAAQ,UAAU;AACtE,CAAC;AAkBD,SAAS,cAAc,MAAyB,OAAwB;AACtE,QAAM,aAAa,MAAM,KAAK,EAAE,YAAY;AAC5C,MAAI,CAAC,WAAW,OAAQ,QAAO;AAC/B,SAAO;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,EACP,EACG,OAAO,CAAC,UAA2B,OAAO,UAAU,YAAY,MAAM,SAAS,CAAC,EAChF,KAAK,CAAC,UAAU,MAAM,YAAY,EAAE,SAAS,UAAU,CAAC;AAC7D;AAEA,SAAS,UAAU,OAA4B,MAAgE;AAC7G,MAAI,SAAS,UAAU;AACrB,WAAO,CAAC,GAAG,KAAK,EAAE,KAAK,CAAC,MAAM,UAAU;AACtC,YAAM,gBAAgB,KAAK,WAAW,IAAI,KAAK,KAAK,QAAQ,EAAE,QAAQ,IAAI,IAAI,KAAK,KAAK,SAAS,EAAE,QAAQ;AAC3G,YAAM,iBAAiB,MAAM,WAAW,IAAI,KAAK,MAAM,QAAQ,EAAE,QAAQ,IAAI,IAAI,KAAK,MAAM,SAAS,EAAE,QAAQ;AAC/G,UAAI,kBAAkB,eAAgB,QAAO,KAAK,YAAY,cAAc,MAAM,WAAW;AAC7F,aAAO,iBAAiB;AAAA,IAC1B,CAAC;AAAA,EACH;AAEA,SAAO,CAAC,GAAG,KAAK,EAAE,KAAK,CAAC,MAAM,UAAU;AACtC,UAAM,UAAU,KAAK,YAAY,cAAc,MAAM,aAAa,QAAW,EAAE,aAAa,OAAO,CAAC;AACpG,WAAO,SAAS,aAAa,UAAU,CAAC;AAAA,EAC1C,CAAC;AACH;AAEO,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,0BAA0B,EAAE;AAC1E;AAEA,eAAsB,IAAI,KAAc,KAAmC;AACzE,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,MAAI;AACF,UAAM,EAAE,GAAG,IAAI,aAAa,MAAM,EAAE,IAAI,IAAI,QAAQ,GAAG,CAAC;AACxD,UAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,QAAI,CAAC,MAAM,SAAU,OAAM,IAAI,cAAc,KAAK,EAAE,OAAO,eAAe,CAAC;AAE3E,UAAM,QAAQ,YAAY,MAAM;AAAA,MAC9B,MAAM,IAAI,IAAI,IAAI,GAAG,EAAE,aAAa,IAAI,MAAM,KAAK;AAAA,MACnD,UAAU,IAAI,IAAI,IAAI,GAAG,EAAE,aAAa,IAAI,UAAU,KAAK;AAAA,MAC3D,QAAQ,IAAI,IAAI,IAAI,GAAG,EAAE,aAAa,IAAI,QAAQ,KAAK;AAAA,MACvD,MAAM,IAAI,IAAI,IAAI,GAAG,EAAE,aAAa,IAAI,MAAM,KAAK;AAAA,IACrD,CAAC;AAED,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AACxF,UAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC3D,UAAM,kBAAkB;AAAA,MACtB,UAAU,KAAK;AAAA,MACf,gBAAgB,OAAO,cAAc,KAAK,SAAS;AAAA,IACrD;AAEA,UAAM,UAAU,MAAM;AAAA,MACpB;AAAA,MACA;AAAA,MACA,EAAE,IAAI,MAAM,WAAW,UAAU,KAAK,UAAU,WAAW,KAAK;AAAA,MAChE,CAAC;AAAA,MACD;AAAA,IACF;AACA,QAAI,CAAC,SAAS;AACZ,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,sCAAsC,mBAAmB,EAAE,CAAC;AAAA,IAC9G;AAEA,UAAM,gBAAgB,oBAAI,IAAY;AACtC,QAAI,OAAO,WAAW,OAAQ,OAAM,UAAU,QAAQ,CAAC,UAAU,cAAc,IAAI,KAAK,CAAC;AAAA,aAChF,KAAK,MAAO,eAAc,IAAI,KAAK,KAAK;AACjD,QAAI,cAAc,OAAO,KAAK,QAAQ,kBAAkB,CAAC,cAAc,IAAI,QAAQ,cAAc,GAAG;AAClG,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,kCAAkC,eAAe,EAAE,CAAC;AAAA,IACtG;AAEA,UAAM,cAAc,EAAE,UAAU,KAAK,UAAU,gBAAgB,QAAQ,eAAe;AACtF,UAAM,YAAY,MAAM;AAAA,MACtB;AAAA,MACA;AAAA,QACE,SAAS,QAAQ;AAAA,QACjB,UAAU,QAAQ;AAAA,QAClB,gBAAgB,QAAQ;AAAA,MAC1B;AAAA,MACA;AAAA,IACF;AACA,UAAM,QAAQ;AAAA,MACZ,MAAM;AAAA,QACJ;AAAA,QACA;AAAA,QACA;AAAA,QACA,EAAE,UAAU,CAAC,QAAQ,EAAE;AAAA,QACvB;AAAA,MACF;AAAA,IACF;AAEA,UAAM,YAAY,MACf,IAAI,CAAC,SAAS,KAAK,QAAQ,EAAE,EAC7B,OAAO,CAAC,aAAiC,OAAO,aAAa,YAAY,SAAS,SAAS,CAAC;AAE/F,UAAM,WAAW,UAAU,SAAS,IAChC,MAAM;AAAA,MACJ;AAAA,MACA;AAAA,MACA;AAAA,QACE,QAAQ,EAAE,KAAK,UAAU;AAAA,QACzB,UAAU,QAAQ;AAAA,QAClB,gBAAgB,QAAQ;AAAA,MAC1B;AAAA,MACA,CAAC;AAAA,MACD;AAAA,IACF,IACA,CAAC;AACL,UAAM,oBAAoB,IAAI;AAAA,MAC5B,SAAS,IAAI,CAAC,YAAY,CAAE,QAAQ,OAA0B,IAAI,OAAO,CAAC;AAAA,IAC5E;AAEA,UAAM,QAAQ,MACX,IAAI,CAAC,SAAS;AACb,YAAM,SAAS,KAAK;AACpB,UAAI,CAAC,QAAQ,GAAI,QAAO;AACxB,YAAM,UAAU,kBAAkB,IAAI,OAAO,EAAE,KAAK;AACpD,aAAO;AAAA,QACL,IAAI,OAAO;AAAA,QACX,aAAa,OAAO,eAAe,OAAO,gBAAgB,OAAO;AAAA,QACjE,cAAc,OAAO,gBAAgB;AAAA,QACrC,cAAc,OAAO,gBAAgB;AAAA,QACrC,QAAQ,OAAO,UAAU;AAAA,QACzB,gBAAgB,OAAO,kBAAkB;AAAA,QACzC,UAAU,SAAS,YAAY;AAAA,QAC/B,YAAY,SAAS,cAAc;AAAA,QACnC,WAAW,OAAO,UAAU,YAAY;AAAA,QACxC,gBAAgB,OAAO;AAAA,QACvB,aAAa,OAAO,eAAe;AAAA,QACnC,QAAQ,OAAO,UAAU;AAAA,QACzB,UAAU,KAAK,YAAY,KAAK,UAAU,YAAY,IAAI;AAAA,MAC5D;AAAA,IACF,CAAC,EACA,OAAO,CAAC,SAAoC,SAAS,IAAI;AAE5D,UAAM,WAAW,MAAM,QAAQ,KAAK,EAAE,SAAS,MAAM,OAAO,CAAC,SAAS,cAAc,MAAM,MAAM,UAAU,EAAE,CAAC,IAAI;AACjH,UAAM,SAAS,UAAU,UAAU,MAAM,IAAI;AAC7C,UAAM,QAAQ,OAAO;AACrB,UAAM,aAAa,KAAK,IAAI,GAAG,KAAK,KAAK,QAAQ,MAAM,QAAQ,CAAC;AAChE,UAAM,OAAO,KAAK,IAAI,MAAM,MAAM,UAAU;AAC5C,UAAM,SAAS,OAAO,KAAK,MAAM;AAEjC,WAAO,aAAa,KAAK;AAAA,MACvB,OAAO,OAAO,MAAM,OAAO,QAAQ,MAAM,QAAQ;AAAA,MACjD;AAAA,MACA;AAAA,MACA,UAAU,MAAM;AAAA,MAChB;AAAA,IACF,CAAC;AAAA,EACH,SAAS,OAAO;AACd,QAAI,gBAAgB,KAAK,GAAG;AAC1B,aAAO,aAAa,KAAK,MAAM,MAAM,EAAE,QAAQ,MAAM,OAAO,CAAC;AAAA,IAC/D;AACA,YAAQ,MAAM,oCAAoC,KAAK;AACvD,WAAO,aAAa,KAAK,EAAE,OAAO,UAAU,+CAA+C,8BAA8B,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC/I;AACF;AAEA,MAAM,0BAA0B,EAAE,OAAO;AAAA,EACvC,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,aAAa,EAAE,OAAO;AAAA,EACtB,cAAc,EAAE,OAAO,EAAE,SAAS;AAAA,EAClC,cAAc,EAAE,OAAO,EAAE,SAAS;AAAA,EAClC,QAAQ,EAAE,OAAO,EAAE,SAAS;AAAA,EAC5B,gBAAgB,EAAE,OAAO,EAAE,SAAS;AAAA,EACpC,UAAU,EAAE,OAAO,EAAE,SAAS;AAAA,EAC9B,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,EAChC,WAAW,EAAE,OAAO;AAAA,EACpB,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC3C,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,EACjC,QAAQ,EAAE,OAAO,EAAE,SAAS;AAAA,EAC5B,UAAU,EAAE,OAAO,EAAE,SAAS;AAChC,CAAC;AAEM,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,OAAO;AAAA,MACP,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO;AAAA,YACf,OAAO,EAAE,MAAM,uBAAuB;AAAA,YACtC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY;AAAA,YACpC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC;AAAA,YAC5B,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC;AAAA,YAChC,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC;AAAA,UACpC,CAAC;AAAA,QACH;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { CrudHttpError, isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { findOneWithDecryption, findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { isOrganizationReadAccessAllowed } from '@open-mercato/core/modules/directory/utils/organizationScopeGuard'\nimport {\n  CustomerEntity,\n  CustomerPersonCompanyLink,\n  CustomerPersonProfile,\n} from '../../../../data/entities'\nimport {\n  filterActivePersonCompanyLinks,\n  withActiveCustomerPersonCompanyLinkFilter,\n} from '../../../../lib/personCompanyLinkTable'\n\nconst paramsSchema = z.object({\n  id: z.string().uuid(),\n})\n\nconst querySchema = z.object({\n  page: z.coerce.number().min(1).default(1),\n  pageSize: z.coerce.number().min(1).max(100).default(20),\n  search: z.string().optional(),\n  sort: z.enum(['name-asc', 'name-desc', 'recent']).default('name-asc'),\n})\n\ntype CompanyPersonItem = {\n  id: string\n  displayName: string\n  primaryEmail: string | null\n  primaryPhone: string | null\n  status: string | null\n  lifecycleStage: string | null\n  jobTitle: string | null\n  department: string | null\n  createdAt: string\n  organizationId: string\n  temperature: string | null\n  source: string | null\n  linkedAt: string | null\n}\n\nfunction matchesSearch(item: CompanyPersonItem, query: string): boolean {\n  const normalized = query.trim().toLowerCase()\n  if (!normalized.length) return true\n  return [\n    item.displayName,\n    item.primaryEmail,\n    item.primaryPhone,\n    item.jobTitle,\n    item.department,\n    item.status,\n    item.lifecycleStage,\n    item.source,\n  ]\n    .filter((value): value is string => typeof value === 'string' && value.length > 0)\n    .some((value) => value.toLowerCase().includes(normalized))\n}\n\nfunction sortItems(items: CompanyPersonItem[], sort: 'name-asc' | 'name-desc' | 'recent'): CompanyPersonItem[] {\n  if (sort === 'recent') {\n    return [...items].sort((left, right) => {\n      const leftTimestamp = left.linkedAt ? new Date(left.linkedAt).getTime() : new Date(left.createdAt).getTime()\n      const rightTimestamp = right.linkedAt ? new Date(right.linkedAt).getTime() : new Date(right.createdAt).getTime()\n      if (leftTimestamp === rightTimestamp) return left.displayName.localeCompare(right.displayName)\n      return rightTimestamp - leftTimestamp\n    })\n  }\n\n  return [...items].sort((left, right) => {\n    const compare = left.displayName.localeCompare(right.displayName, undefined, { sensitivity: 'base' })\n    return sort === 'name-asc' ? compare : -compare\n  })\n}\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['customers.companies.view'] },\n}\n\nexport async function GET(req: Request, ctx: { params?: { id?: string } }) {\n  const { translate } = await resolveTranslations()\n  try {\n    const { id } = paramsSchema.parse({ id: ctx.params?.id })\n    const auth = await getAuthFromRequest(req)\n    if (!auth?.tenantId) throw new CrudHttpError(401, { error: 'Unauthorized' })\n\n    const query = querySchema.parse({\n      page: new URL(req.url).searchParams.get('page') ?? undefined,\n      pageSize: new URL(req.url).searchParams.get('pageSize') ?? undefined,\n      search: new URL(req.url).searchParams.get('search') ?? undefined,\n      sort: new URL(req.url).searchParams.get('sort') ?? undefined,\n    })\n\n    const container = await createRequestContainer()\n    const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n    const em = (container.resolve('em') as EntityManager).fork()\n    const decryptionScope = {\n      tenantId: auth.tenantId,\n      organizationId: scope?.selectedId ?? auth.orgId ?? null,\n    }\n\n    const company = await findOneWithDecryption(\n      em,\n      CustomerEntity,\n      { id, kind: 'company', tenantId: auth.tenantId, deletedAt: null },\n      {},\n      decryptionScope,\n    )\n    if (!company) {\n      throw new CrudHttpError(404, { error: translate('customers.errors.company_not_found', 'Company not found') })\n    }\n\n    if (!isOrganizationReadAccessAllowed({ scope, auth, organizationId: company.organizationId })) {\n      throw new CrudHttpError(403, { error: translate('customers.errors.access_denied', 'Access denied') })\n    }\n\n    const entityScope = { tenantId: auth.tenantId, organizationId: company.organizationId }\n    const linkWhere = await withActiveCustomerPersonCompanyLinkFilter(\n      em,\n      {\n        company: company.id,\n        tenantId: company.tenantId,\n        organizationId: company.organizationId,\n      },\n      'customers.companies.people.GET',\n    )\n    const links = filterActivePersonCompanyLinks(\n      await findWithDecryption(\n        em,\n        CustomerPersonCompanyLink,\n        linkWhere,\n        { populate: ['person'] },\n        entityScope,\n      ),\n    )\n\n    const personIds = links\n      .map((link) => link.person?.id)\n      .filter((personId): personId is string => typeof personId === 'string' && personId.length > 0)\n\n    const profiles = personIds.length > 0\n      ? await findWithDecryption(\n          em,\n          CustomerPersonProfile,\n          {\n            entity: { $in: personIds },\n            tenantId: company.tenantId,\n            organizationId: company.organizationId,\n          },\n          {},\n          entityScope,\n        )\n      : []\n    const profileByPersonId = new Map(\n      profiles.map((profile) => [(profile.entity as { id: string }).id, profile]),\n    )\n\n    const items = links\n      .map((link) => {\n        const person = link.person\n        if (!person?.id) return null\n        const profile = profileByPersonId.get(person.id) ?? null\n        return {\n          id: person.id,\n          displayName: person.displayName ?? person.primaryEmail ?? person.id,\n          primaryEmail: person.primaryEmail ?? null,\n          primaryPhone: person.primaryPhone ?? null,\n          status: person.status ?? null,\n          lifecycleStage: person.lifecycleStage ?? null,\n          jobTitle: profile?.jobTitle ?? null,\n          department: profile?.department ?? null,\n          createdAt: person.createdAt.toISOString(),\n          organizationId: person.organizationId,\n          temperature: person.temperature ?? null,\n          source: person.source ?? null,\n          linkedAt: link.createdAt ? link.createdAt.toISOString() : null,\n        } satisfies CompanyPersonItem\n      })\n      .filter((item): item is CompanyPersonItem => item !== null)\n\n    const filtered = query.search?.trim().length ? items.filter((item) => matchesSearch(item, query.search ?? '')) : items\n    const sorted = sortItems(filtered, query.sort)\n    const total = sorted.length\n    const totalPages = Math.max(1, Math.ceil(total / query.pageSize))\n    const page = Math.min(query.page, totalPages)\n    const start = (page - 1) * query.pageSize\n\n    return NextResponse.json({\n      items: sorted.slice(start, start + query.pageSize),\n      total,\n      page,\n      pageSize: query.pageSize,\n      totalPages,\n    })\n  } catch (error) {\n    if (isCrudHttpError(error)) {\n      return NextResponse.json(error.body, { status: error.status })\n    }\n    console.error('[customers.companies.people.GET]', error)\n    return NextResponse.json({ error: translate('customers.errors.company_people_load_failed', 'Failed to load linked people') }, { status: 500 })\n  }\n}\n\nconst companyPeopleItemSchema = z.object({\n  id: z.string().uuid(),\n  displayName: z.string(),\n  primaryEmail: z.string().nullable(),\n  primaryPhone: z.string().nullable(),\n  status: z.string().nullable(),\n  lifecycleStage: z.string().nullable(),\n  jobTitle: z.string().nullable(),\n  department: z.string().nullable(),\n  createdAt: z.string(),\n  organizationId: z.string().uuid().nullable(),\n  temperature: z.string().nullable(),\n  source: z.string().nullable(),\n  linkedAt: z.string().nullable(),\n})\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Customers',\n  methods: {\n    GET: {\n      summary: 'List linked people for a company',\n      query: querySchema,\n      responses: [\n        {\n          status: 200,\n          description: 'Paginated linked people',\n          schema: z.object({\n            items: z.array(companyPeopleItemSchema),\n            total: z.number().int().nonnegative(),\n            page: z.number().int().min(1),\n            pageSize: z.number().int().min(1),\n            totalPages: z.number().int().min(1),\n          }),\n        },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAElB,SAAS,eAAe,uBAAuB;AAC/C,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AACnD,SAAS,2BAA2B;AAEpC,SAAS,uBAAuB,0BAA0B;AAC1D,SAAS,uCAAuC;AAChD;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAEP,MAAM,eAAe,EAAE,OAAO;AAAA,EAC5B,IAAI,EAAE,OAAO,EAAE,KAAK;AACtB,CAAC;AAED,MAAM,cAAc,EAAE,OAAO;AAAA,EAC3B,MAAM,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,QAAQ,CAAC;AAAA,EACxC,UAAU,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,QAAQ,EAAE;AAAA,EACtD,QAAQ,EAAE,OAAO,EAAE,SAAS;AAAA,EAC5B,MAAM,EAAE,KAAK,CAAC,YAAY,aAAa,QAAQ,CAAC,EAAE,QAAQ,UAAU;AACtE,CAAC;AAkBD,SAAS,cAAc,MAAyB,OAAwB;AACtE,QAAM,aAAa,MAAM,KAAK,EAAE,YAAY;AAC5C,MAAI,CAAC,WAAW,OAAQ,QAAO;AAC/B,SAAO;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,EACP,EACG,OAAO,CAAC,UAA2B,OAAO,UAAU,YAAY,MAAM,SAAS,CAAC,EAChF,KAAK,CAAC,UAAU,MAAM,YAAY,EAAE,SAAS,UAAU,CAAC;AAC7D;AAEA,SAAS,UAAU,OAA4B,MAAgE;AAC7G,MAAI,SAAS,UAAU;AACrB,WAAO,CAAC,GAAG,KAAK,EAAE,KAAK,CAAC,MAAM,UAAU;AACtC,YAAM,gBAAgB,KAAK,WAAW,IAAI,KAAK,KAAK,QAAQ,EAAE,QAAQ,IAAI,IAAI,KAAK,KAAK,SAAS,EAAE,QAAQ;AAC3G,YAAM,iBAAiB,MAAM,WAAW,IAAI,KAAK,MAAM,QAAQ,EAAE,QAAQ,IAAI,IAAI,KAAK,MAAM,SAAS,EAAE,QAAQ;AAC/G,UAAI,kBAAkB,eAAgB,QAAO,KAAK,YAAY,cAAc,MAAM,WAAW;AAC7F,aAAO,iBAAiB;AAAA,IAC1B,CAAC;AAAA,EACH;AAEA,SAAO,CAAC,GAAG,KAAK,EAAE,KAAK,CAAC,MAAM,UAAU;AACtC,UAAM,UAAU,KAAK,YAAY,cAAc,MAAM,aAAa,QAAW,EAAE,aAAa,OAAO,CAAC;AACpG,WAAO,SAAS,aAAa,UAAU,CAAC;AAAA,EAC1C,CAAC;AACH;AAEO,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,0BAA0B,EAAE;AAC1E;AAEA,eAAsB,IAAI,KAAc,KAAmC;AACzE,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,MAAI;AACF,UAAM,EAAE,GAAG,IAAI,aAAa,MAAM,EAAE,IAAI,IAAI,QAAQ,GAAG,CAAC;AACxD,UAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,QAAI,CAAC,MAAM,SAAU,OAAM,IAAI,cAAc,KAAK,EAAE,OAAO,eAAe,CAAC;AAE3E,UAAM,QAAQ,YAAY,MAAM;AAAA,MAC9B,MAAM,IAAI,IAAI,IAAI,GAAG,EAAE,aAAa,IAAI,MAAM,KAAK;AAAA,MACnD,UAAU,IAAI,IAAI,IAAI,GAAG,EAAE,aAAa,IAAI,UAAU,KAAK;AAAA,MAC3D,QAAQ,IAAI,IAAI,IAAI,GAAG,EAAE,aAAa,IAAI,QAAQ,KAAK;AAAA,MACvD,MAAM,IAAI,IAAI,IAAI,GAAG,EAAE,aAAa,IAAI,MAAM,KAAK;AAAA,IACrD,CAAC;AAED,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AACxF,UAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC3D,UAAM,kBAAkB;AAAA,MACtB,UAAU,KAAK;AAAA,MACf,gBAAgB,OAAO,cAAc,KAAK,SAAS;AAAA,IACrD;AAEA,UAAM,UAAU,MAAM;AAAA,MACpB;AAAA,MACA;AAAA,MACA,EAAE,IAAI,MAAM,WAAW,UAAU,KAAK,UAAU,WAAW,KAAK;AAAA,MAChE,CAAC;AAAA,MACD;AAAA,IACF;AACA,QAAI,CAAC,SAAS;AACZ,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,sCAAsC,mBAAmB,EAAE,CAAC;AAAA,IAC9G;AAEA,QAAI,CAAC,gCAAgC,EAAE,OAAO,MAAM,gBAAgB,QAAQ,eAAe,CAAC,GAAG;AAC7F,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,kCAAkC,eAAe,EAAE,CAAC;AAAA,IACtG;AAEA,UAAM,cAAc,EAAE,UAAU,KAAK,UAAU,gBAAgB,QAAQ,eAAe;AACtF,UAAM,YAAY,MAAM;AAAA,MACtB;AAAA,MACA;AAAA,QACE,SAAS,QAAQ;AAAA,QACjB,UAAU,QAAQ;AAAA,QAClB,gBAAgB,QAAQ;AAAA,MAC1B;AAAA,MACA;AAAA,IACF;AACA,UAAM,QAAQ;AAAA,MACZ,MAAM;AAAA,QACJ;AAAA,QACA;AAAA,QACA;AAAA,QACA,EAAE,UAAU,CAAC,QAAQ,EAAE;AAAA,QACvB;AAAA,MACF;AAAA,IACF;AAEA,UAAM,YAAY,MACf,IAAI,CAAC,SAAS,KAAK,QAAQ,EAAE,EAC7B,OAAO,CAAC,aAAiC,OAAO,aAAa,YAAY,SAAS,SAAS,CAAC;AAE/F,UAAM,WAAW,UAAU,SAAS,IAChC,MAAM;AAAA,MACJ;AAAA,MACA;AAAA,MACA;AAAA,QACE,QAAQ,EAAE,KAAK,UAAU;AAAA,QACzB,UAAU,QAAQ;AAAA,QAClB,gBAAgB,QAAQ;AAAA,MAC1B;AAAA,MACA,CAAC;AAAA,MACD;AAAA,IACF,IACA,CAAC;AACL,UAAM,oBAAoB,IAAI;AAAA,MAC5B,SAAS,IAAI,CAAC,YAAY,CAAE,QAAQ,OAA0B,IAAI,OAAO,CAAC;AAAA,IAC5E;AAEA,UAAM,QAAQ,MACX,IAAI,CAAC,SAAS;AACb,YAAM,SAAS,KAAK;AACpB,UAAI,CAAC,QAAQ,GAAI,QAAO;AACxB,YAAM,UAAU,kBAAkB,IAAI,OAAO,EAAE,KAAK;AACpD,aAAO;AAAA,QACL,IAAI,OAAO;AAAA,QACX,aAAa,OAAO,eAAe,OAAO,gBAAgB,OAAO;AAAA,QACjE,cAAc,OAAO,gBAAgB;AAAA,QACrC,cAAc,OAAO,gBAAgB;AAAA,QACrC,QAAQ,OAAO,UAAU;AAAA,QACzB,gBAAgB,OAAO,kBAAkB;AAAA,QACzC,UAAU,SAAS,YAAY;AAAA,QAC/B,YAAY,SAAS,cAAc;AAAA,QACnC,WAAW,OAAO,UAAU,YAAY;AAAA,QACxC,gBAAgB,OAAO;AAAA,QACvB,aAAa,OAAO,eAAe;AAAA,QACnC,QAAQ,OAAO,UAAU;AAAA,QACzB,UAAU,KAAK,YAAY,KAAK,UAAU,YAAY,IAAI;AAAA,MAC5D;AAAA,IACF,CAAC,EACA,OAAO,CAAC,SAAoC,SAAS,IAAI;AAE5D,UAAM,WAAW,MAAM,QAAQ,KAAK,EAAE,SAAS,MAAM,OAAO,CAAC,SAAS,cAAc,MAAM,MAAM,UAAU,EAAE,CAAC,IAAI;AACjH,UAAM,SAAS,UAAU,UAAU,MAAM,IAAI;AAC7C,UAAM,QAAQ,OAAO;AACrB,UAAM,aAAa,KAAK,IAAI,GAAG,KAAK,KAAK,QAAQ,MAAM,QAAQ,CAAC;AAChE,UAAM,OAAO,KAAK,IAAI,MAAM,MAAM,UAAU;AAC5C,UAAM,SAAS,OAAO,KAAK,MAAM;AAEjC,WAAO,aAAa,KAAK;AAAA,MACvB,OAAO,OAAO,MAAM,OAAO,QAAQ,MAAM,QAAQ;AAAA,MACjD;AAAA,MACA;AAAA,MACA,UAAU,MAAM;AAAA,MAChB;AAAA,IACF,CAAC;AAAA,EACH,SAAS,OAAO;AACd,QAAI,gBAAgB,KAAK,GAAG;AAC1B,aAAO,aAAa,KAAK,MAAM,MAAM,EAAE,QAAQ,MAAM,OAAO,CAAC;AAAA,IAC/D;AACA,YAAQ,MAAM,oCAAoC,KAAK;AACvD,WAAO,aAAa,KAAK,EAAE,OAAO,UAAU,+CAA+C,8BAA8B,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC/I;AACF;AAEA,MAAM,0BAA0B,EAAE,OAAO;AAAA,EACvC,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,aAAa,EAAE,OAAO;AAAA,EACtB,cAAc,EAAE,OAAO,EAAE,SAAS;AAAA,EAClC,cAAc,EAAE,OAAO,EAAE,SAAS;AAAA,EAClC,QAAQ,EAAE,OAAO,EAAE,SAAS;AAAA,EAC5B,gBAAgB,EAAE,OAAO,EAAE,SAAS;AAAA,EACpC,UAAU,EAAE,OAAO,EAAE,SAAS;AAAA,EAC9B,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,EAChC,WAAW,EAAE,OAAO;AAAA,EACpB,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC3C,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,EACjC,QAAQ,EAAE,OAAO,EAAE,SAAS;AAAA,EAC5B,UAAU,EAAE,OAAO,EAAE,SAAS;AAChC,CAAC;AAEM,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,OAAO;AAAA,MACP,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO;AAAA,YACf,OAAO,EAAE,MAAM,uBAAuB;AAAA,YACtC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY;AAAA,YACpC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC;AAAA,YAC5B,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC;AAAA,YAChC,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC;AAAA,UACpC,CAAC;AAAA,QACH;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/customers/api/companies/[id]/route.js

@@ -40,6 +40,7 @@ import {
   withActiveCustomerPersonCompanyLinkFilter
 } from "../../../lib/personCompanyLinkTable.js";
 import { normalizeCustomerDetailCustomFields } from "../../detailCustomFields.js";
+import { isOrganizationReadAccessAllowed } from "@open-mercato/core/modules/directory/utils/organizationScopeGuard";
 const metadata = {
   GET: { requireAuth: true, requireFeatures: ["customers.companies.view"] }
 };
@@ -319,10 +320,7 @@ async function GET(_req, ctx) {
   );
   if (!company) return notFound("Company not found");
   if (auth.tenantId && company.tenantId !== auth.tenantId) return notFound("Company not found");
-  const allowedOrgIds = /* @__PURE__ */ new Set();
-  if (scope?.filterIds?.length) scope.filterIds.forEach((id) => allowedOrgIds.add(id));
-  else if (auth.orgId) allowedOrgIds.add(auth.orgId);
-  if (allowedOrgIds.size && company.organizationId && !allowedOrgIds.has(company.organizationId)) {
+  if (!isOrganizationReadAccessAllowed({ scope, auth, organizationId: company.organizationId })) {
     return forbidden("Access denied");
   }
   const companyScope = {