@open-mercato/core 0.6.4-develop.4371.1.8f3030407e → 0.6.4

package/dist/modules/feature_toggles/api/global/[id]/override/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../../src/modules/feature_toggles/api/global/%5Bid%5D/override/route.ts"],
-  "sourcesContent": ["import { getAuthFromRequest } from \"@open-mercato/shared/lib/auth/server\"\nimport { createRequestContainer } from \"@open-mercato/shared/lib/di/container\"\nimport { EntityManager } from \"@mikro-orm/postgresql\"\nimport { NextResponse } from \"next/server\"\nimport { resolveFeatureCheckContext } from \"@open-mercato/core/modules/directory/utils/organizationScope\"\nimport { Tenant } from \"@open-mercato/core/modules/directory/data/entities\"\nimport { logCrudAccess } from \"@open-mercato/shared/lib/crud/factory\"\nimport { OpenApiRouteDoc } from \"@open-mercato/shared/lib/openapi\"\nimport { FeatureToggleOverride, FeatureToggle } from '../../../../data/entities'\nimport { FeatureToggleOverrideResponse } from '../../../../data/validators'\n\nexport async function GET(req: Request, { params }: { params: { id: string } }) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth) return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  const { scope } = await resolveFeatureCheckContext({ container: await createRequestContainer(), auth, request: req })\n\n  const id = params.id\n  if (!id) return NextResponse.json({ error: 'Invalid request' }, { status: 400 })\n\n  const container = await createRequestContainer()\n  const em = container.resolve('em') as EntityManager\n\n\n  const tenant = await em.findOne(Tenant, { id: scope.tenantId })\n  if (!tenant) {\n    return NextResponse.json({\n      error: 'Tenant context required. Please select a tenant.'\n    }, { status: 400 })\n  }\n\n\n  const override = await em.findOne(FeatureToggleOverride, {\n    tenantId: tenant.id,\n    toggle: { id: id },\n  })\n\n  const toggle = await em.findOne(FeatureToggle, { id: id })\n  if (!toggle) {\n    return NextResponse.json({ error: 'Feature toggle not found' }, { status: 404 })\n  }\n\n  const responseOverride: FeatureToggleOverrideResponse = {\n    id: override?.id ?? '',\n    value: override ? override.value : toggle.defaultValue,\n    tenantName: tenant.name,\n    tenantId: tenant.id,\n    toggleType: toggle.type,\n  }\n\n  await logCrudAccess({\n    container,\n    auth,\n    request: req,\n    items: [responseOverride],\n    idField: 'id',\n    resourceKind: 'feature_toggles.feature_toggle_override',\n    tenantId: auth.tenantId ?? null,\n    query: {},\n    accessType: 'read:item',\n    fields: ['id', 'tenantId', 'value', 'toggle', 'toggleType']\n  })\n\n  return NextResponse.json(responseOverride)\n}\n\nconst routeMetadata = {\n  GET: { requireAuth: true, requireFeatures: ['feature_toggles.view'] },\n}\n\nexport const metadata = routeMetadata\n\nimport { featureTogglesTag, featureToggleErrorSchema, featureToggleOverrideResponseSchema } from '../../../openapi'\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: featureTogglesTag,\n  summary: 'Fetch feature toggle overrides',\n  methods: {\n    GET: {\n      summary: 'Fetch feature toggle override',\n      description: 'Returns feature toggle override.',\n      responses: [\n        {\n          status: 200, description: 'Feature toggle overrides', schema: featureToggleOverrideResponseSchema\n        },\n        { status: 400, description: 'Invalid request', schema: featureToggleErrorSchema },\n        { status: 401, description: 'Unauthorized', schema: featureToggleErrorSchema },\n        { status: 404, description: 'Feature toggle not found', schema: featureToggleErrorSchema },\n      ],\n    },\n  },\n}"],
-  "mappings": "AAAA,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AAEvC,SAAS,oBAAoB;AAC7B,SAAS,kCAAkC;AAC3C,SAAS,cAAc;AACvB,SAAS,qBAAqB;AAE9B,SAAS,uBAAuB,qBAAqB;AAGrD,eAAsB,IAAI,KAAc,EAAE,OAAO,GAA+B;AAC9E,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,KAAM,QAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAC9E,QAAM,EAAE,MAAM,IAAI,MAAM,2BAA2B,EAAE,WAAW,MAAM,uBAAuB,GAAG,MAAM,SAAS,IAAI,CAAC;AAEpH,QAAM,KAAK,OAAO;AAClB,MAAI,CAAC,GAAI,QAAO,aAAa,KAAK,EAAE,OAAO,kBAAkB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAE/E,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,KAAK,UAAU,QAAQ,IAAI;AAGjC,QAAM,SAAS,MAAM,GAAG,QAAQ,QAAQ,EAAE,IAAI,MAAM,SAAS,CAAC;AAC9D,MAAI,CAAC,QAAQ;AACX,WAAO,aAAa,KAAK;AAAA,MACvB,OAAO;AAAA,IACT,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACpB;AAGA,QAAM,WAAW,MAAM,GAAG,QAAQ,uBAAuB;AAAA,IACvD,UAAU,OAAO;AAAA,IACjB,QAAQ,EAAE,GAAO;AAAA,EACnB,CAAC;AAED,QAAM,SAAS,MAAM,GAAG,QAAQ,eAAe,EAAE,GAAO,CAAC;AACzD,MAAI,CAAC,QAAQ;AACX,WAAO,aAAa,KAAK,EAAE,OAAO,2BAA2B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACjF;AAEA,QAAM,mBAAkD;AAAA,IACtD,IAAI,UAAU,MAAM;AAAA,IACpB,OAAO,WAAW,SAAS,QAAQ,OAAO;AAAA,IAC1C,YAAY,OAAO;AAAA,IACnB,UAAU,OAAO;AAAA,IACjB,YAAY,OAAO;AAAA,EACrB;AAEA,QAAM,cAAc;AAAA,IAClB;AAAA,IACA;AAAA,IACA,SAAS;AAAA,IACT,OAAO,CAAC,gBAAgB;AAAA,IACxB,SAAS;AAAA,IACT,cAAc;AAAA,IACd,UAAU,KAAK,YAAY;AAAA,IAC3B,OAAO,CAAC;AAAA,IACR,YAAY;AAAA,IACZ,QAAQ,CAAC,MAAM,YAAY,SAAS,UAAU,YAAY;AAAA,EAC5D,CAAC;AAED,SAAO,aAAa,KAAK,gBAAgB;AAC3C;AAEA,MAAM,gBAAgB;AAAA,EACpB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,sBAAsB,EAAE;AACtE;AAEO,MAAM,WAAW;AAExB,SAAS,mBAAmB,0BAA0B,2CAA2C;AAE1F,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aAAa;AAAA,MACb,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UAAK,aAAa;AAAA,UAA4B,QAAQ;AAAA,QAChE;AAAA,QACA,EAAE,QAAQ,KAAK,aAAa,mBAAmB,QAAQ,yBAAyB;AAAA,QAChF,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,yBAAyB;AAAA,QAC7E,EAAE,QAAQ,KAAK,aAAa,4BAA4B,QAAQ,yBAAyB;AAAA,MAC3F;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { getAuthFromRequest } from \"@open-mercato/shared/lib/auth/server\"\nimport { createRequestContainer } from \"@open-mercato/shared/lib/di/container\"\nimport { EntityManager } from \"@mikro-orm/postgresql\"\nimport { NextResponse } from \"next/server\"\nimport { resolveFeatureCheckContext } from \"@open-mercato/core/modules/directory/utils/organizationScope\"\nimport { Tenant } from \"@open-mercato/core/modules/directory/data/entities\"\nimport { logCrudAccess } from \"@open-mercato/shared/lib/crud/factory\"\nimport { OpenApiRouteDoc } from \"@open-mercato/shared/lib/openapi\"\nimport { FeatureToggleOverride, FeatureToggle } from '../../../../data/entities'\nimport { FeatureToggleOverrideResponse } from '../../../../data/validators'\nimport { z } from 'zod'\n\nconst paramsSchema = z.object({\n  id: z.string().uuid(),\n})\n\nexport async function GET(req: Request, { params }: { params: { id: string } }) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth) return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  const container = await createRequestContainer()\n  const { scope } = await resolveFeatureCheckContext({ container, auth, request: req })\n  const parsed = paramsSchema.safeParse({ id: params.id })\n  if (!parsed.success) return NextResponse.json({ error: 'Invalid request' }, { status: 400 })\n\n  const em = container.resolve('em') as EntityManager\n\n\n  const tenant = await em.findOne(Tenant, { id: scope.tenantId })\n  if (!tenant) {\n    return NextResponse.json({\n      error: 'Tenant context required. Please select a tenant.'\n    }, { status: 400 })\n  }\n\n\n  const toggle = await em.findOne(FeatureToggle, { id: parsed.data.id, deletedAt: null })\n  if (!toggle) {\n    return NextResponse.json({ error: 'Feature toggle not found' }, { status: 404 })\n  }\n\n  const override = await em.findOne(FeatureToggleOverride, {\n    tenantId: tenant.id,\n    toggle: { id: parsed.data.id },\n  })\n\n  const responseOverride: FeatureToggleOverrideResponse = {\n    id: override?.id ?? '',\n    value: override ? override.value : toggle.defaultValue,\n    tenantName: tenant.name,\n    tenantId: tenant.id,\n    toggleType: toggle.type,\n    updatedAt: override?.updatedAt instanceof Date ? override.updatedAt.toISOString() : null,\n  }\n\n  await logCrudAccess({\n    container,\n    auth,\n    request: req,\n    items: [responseOverride],\n    idField: 'id',\n    resourceKind: 'feature_toggles.feature_toggle_override',\n    tenantId: tenant.id,\n    query: {},\n    accessType: 'read:item',\n    fields: ['id', 'tenantId', 'value', 'toggle', 'toggleType']\n  })\n\n  return NextResponse.json(responseOverride)\n}\n\nconst routeMetadata = {\n  GET: { requireAuth: true, requireFeatures: ['feature_toggles.view'] },\n}\n\nexport const metadata = routeMetadata\n\nimport { featureTogglesTag, featureToggleErrorSchema, featureToggleOverrideResponseSchema } from '../../../openapi'\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: featureTogglesTag,\n  summary: 'Fetch feature toggle overrides',\n  methods: {\n    GET: {\n      summary: 'Fetch feature toggle override',\n      description: 'Returns feature toggle override.',\n      responses: [\n        {\n          status: 200, description: 'Feature toggle overrides', schema: featureToggleOverrideResponseSchema\n        },\n        { status: 400, description: 'Invalid request', schema: featureToggleErrorSchema },\n        { status: 401, description: 'Unauthorized', schema: featureToggleErrorSchema },\n        { status: 404, description: 'Feature toggle not found', schema: featureToggleErrorSchema },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AAEvC,SAAS,oBAAoB;AAC7B,SAAS,kCAAkC;AAC3C,SAAS,cAAc;AACvB,SAAS,qBAAqB;AAE9B,SAAS,uBAAuB,qBAAqB;AAErD,SAAS,SAAS;AAElB,MAAM,eAAe,EAAE,OAAO;AAAA,EAC5B,IAAI,EAAE,OAAO,EAAE,KAAK;AACtB,CAAC;AAED,eAAsB,IAAI,KAAc,EAAE,OAAO,GAA+B;AAC9E,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,KAAM,QAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAC9E,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,EAAE,MAAM,IAAI,MAAM,2BAA2B,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AACpF,QAAM,SAAS,aAAa,UAAU,EAAE,IAAI,OAAO,GAAG,CAAC;AACvD,MAAI,CAAC,OAAO,QAAS,QAAO,aAAa,KAAK,EAAE,OAAO,kBAAkB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAE3F,QAAM,KAAK,UAAU,QAAQ,IAAI;AAGjC,QAAM,SAAS,MAAM,GAAG,QAAQ,QAAQ,EAAE,IAAI,MAAM,SAAS,CAAC;AAC9D,MAAI,CAAC,QAAQ;AACX,WAAO,aAAa,KAAK;AAAA,MACvB,OAAO;AAAA,IACT,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACpB;AAGA,QAAM,SAAS,MAAM,GAAG,QAAQ,eAAe,EAAE,IAAI,OAAO,KAAK,IAAI,WAAW,KAAK,CAAC;AACtF,MAAI,CAAC,QAAQ;AACX,WAAO,aAAa,KAAK,EAAE,OAAO,2BAA2B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACjF;AAEA,QAAM,WAAW,MAAM,GAAG,QAAQ,uBAAuB;AAAA,IACvD,UAAU,OAAO;AAAA,IACjB,QAAQ,EAAE,IAAI,OAAO,KAAK,GAAG;AAAA,EAC/B,CAAC;AAED,QAAM,mBAAkD;AAAA,IACtD,IAAI,UAAU,MAAM;AAAA,IACpB,OAAO,WAAW,SAAS,QAAQ,OAAO;AAAA,IAC1C,YAAY,OAAO;AAAA,IACnB,UAAU,OAAO;AAAA,IACjB,YAAY,OAAO;AAAA,IACnB,WAAW,UAAU,qBAAqB,OAAO,SAAS,UAAU,YAAY,IAAI;AAAA,EACtF;AAEA,QAAM,cAAc;AAAA,IAClB;AAAA,IACA;AAAA,IACA,SAAS;AAAA,IACT,OAAO,CAAC,gBAAgB;AAAA,IACxB,SAAS;AAAA,IACT,cAAc;AAAA,IACd,UAAU,OAAO;AAAA,IACjB,OAAO,CAAC;AAAA,IACR,YAAY;AAAA,IACZ,QAAQ,CAAC,MAAM,YAAY,SAAS,UAAU,YAAY;AAAA,EAC5D,CAAC;AAED,SAAO,aAAa,KAAK,gBAAgB;AAC3C;AAEA,MAAM,gBAAgB;AAAA,EACpB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,sBAAsB,EAAE;AACtE;AAEO,MAAM,WAAW;AAExB,SAAS,mBAAmB,0BAA0B,2CAA2C;AAE1F,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aAAa;AAAA,MACb,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UAAK,aAAa;AAAA,UAA4B,QAAQ;AAAA,QAChE;AAAA,QACA,EAAE,QAAQ,KAAK,aAAa,mBAAmB,QAAQ,yBAAyB;AAAA,QAChF,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,yBAAyB;AAAA,QAC7E,EAAE,QAAQ,KAAK,aAAa,4BAA4B,QAAQ,yBAAyB;AAAA,MAC3F;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/feature_toggles/api/global/[id]/route.js

@@ -20,7 +20,8 @@ async function GET(_req, ctx) {
   const container = await createRequestContainer();
   const em = container.resolve("em");
   const toggle = await em.findOne(FeatureToggle, {
-    id: parse.data.id
+    id: parse.data.id,
+    deletedAt: null
   });
   if (!toggle) {
     return NextResponse.json({ error: "Feature toggle not found" }, { status: 404 });

package/dist/modules/feature_toggles/api/global/[id]/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../src/modules/feature_toggles/api/global/%5Bid%5D/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { logCrudAccess } from '@open-mercato/shared/lib/crud/factory'\nimport { FeatureToggle } from '../../../data/entities'\nimport type { EntityManager } from '@mikro-orm/postgresql'\n\nimport { featureTogglesTag, featureToggleSchema, featureToggleErrorSchema } from '../../openapi'\n\nconst paramsSchema = z.object({\n  id: z.string().uuid(),\n})\n\nexport async function GET(_req: Request, ctx: { params?: { id?: string } }) {\n  const auth = await getAuthFromRequest(_req)\n  if (!auth) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n\n  const parse = paramsSchema.safeParse({ id: ctx.params?.id })\n  if (!parse.success) {\n    return NextResponse.json({ error: 'Invalid feature toggle id' }, { status: 400 })\n  }\n\n  const container = await createRequestContainer()\n  const em = container.resolve('em') as EntityManager\n\n  const toggle = await em.findOne(FeatureToggle, {\n    id: parse.data.id,\n  })\n\n  if (!toggle) {\n    return NextResponse.json({ error: 'Feature toggle not found' }, { status: 404 })\n  }\n\n  await logCrudAccess({\n    container,\n    auth,\n    request: _req,\n    items: [toggle],\n    idField: 'id',\n    resourceKind: 'feature_toggles.feature_toggle',\n    tenantId: auth.tenantId ?? null,\n    query: { id: parse.data.id },\n    accessType: 'read:item',\n    fields: ['id', 'identifier', 'name', 'description', 'category', 'created_at', 'updated_at']\n  })\n\n  const featureToggle: FeatureToggle = {\n    id: toggle.id,\n    identifier: toggle.identifier,\n    name: toggle.name,\n    description: toggle.description ?? null,\n    category: toggle.category ?? null,\n\n    type: toggle.type,\n    defaultValue: toggle.defaultValue,\n    createdAt: toggle.createdAt,\n    updatedAt: toggle.updatedAt,\n  }\n\n  return NextResponse.json(featureToggle)\n}\n\nconst routeMetadata = {\n  GET: { requireAuth: true, requireFeatures: ['feature_toggles.view'] },\n}\n\nexport const metadata = routeMetadata\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: featureTogglesTag,\n  summary: 'Fetch feature toggle detail',\n  methods: {\n    GET: {\n      summary: 'Fetch feature toggle by ID',\n      description: 'Returns complete details of a feature toggle.',\n      responses: [\n        { status: 200, description: 'Feature toggle detail', schema: featureToggleSchema },\n      ],\n      errors: [\n        { status: 400, description: 'Invalid identifier', schema: featureToggleErrorSchema },\n        { status: 401, description: 'Unauthorized', schema: featureToggleErrorSchema },\n        { status: 404, description: 'Feature toggle not found', schema: featureToggleErrorSchema },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAElB,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AACvC,SAAS,qBAAqB;AAC9B,SAAS,qBAAqB;AAG9B,SAAS,mBAAmB,qBAAqB,gCAAgC;AAEjF,MAAM,eAAe,EAAE,OAAO;AAAA,EAC5B,IAAI,EAAE,OAAO,EAAE,KAAK;AACtB,CAAC;AAED,eAAsB,IAAI,MAAe,KAAmC;AAC1E,QAAM,OAAO,MAAM,mBAAmB,IAAI;AAC1C,MAAI,CAAC,MAAM;AACT,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAEA,QAAM,QAAQ,aAAa,UAAU,EAAE,IAAI,IAAI,QAAQ,GAAG,CAAC;AAC3D,MAAI,CAAC,MAAM,SAAS;AAClB,WAAO,aAAa,KAAK,EAAE,OAAO,4BAA4B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAClF;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,KAAK,UAAU,QAAQ,IAAI;AAEjC,QAAM,SAAS,MAAM,GAAG,QAAQ,eAAe;AAAA,IAC7C,IAAI,MAAM,KAAK;AAAA,EACjB,CAAC;AAED,MAAI,CAAC,QAAQ;AACX,WAAO,aAAa,KAAK,EAAE,OAAO,2BAA2B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACjF;AAEA,QAAM,cAAc;AAAA,IAClB;AAAA,IACA;AAAA,IACA,SAAS;AAAA,IACT,OAAO,CAAC,MAAM;AAAA,IACd,SAAS;AAAA,IACT,cAAc;AAAA,IACd,UAAU,KAAK,YAAY;AAAA,IAC3B,OAAO,EAAE,IAAI,MAAM,KAAK,GAAG;AAAA,IAC3B,YAAY;AAAA,IACZ,QAAQ,CAAC,MAAM,cAAc,QAAQ,eAAe,YAAY,cAAc,YAAY;AAAA,EAC5F,CAAC;AAED,QAAM,gBAA+B;AAAA,IACnC,IAAI,OAAO;AAAA,IACX,YAAY,OAAO;AAAA,IACnB,MAAM,OAAO;AAAA,IACb,aAAa,OAAO,eAAe;AAAA,IACnC,UAAU,OAAO,YAAY;AAAA,IAE7B,MAAM,OAAO;AAAA,IACb,cAAc,OAAO;AAAA,IACrB,WAAW,OAAO;AAAA,IAClB,WAAW,OAAO;AAAA,EACpB;AAEA,SAAO,aAAa,KAAK,aAAa;AACxC;AAEA,MAAM,gBAAgB;AAAA,EACpB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,sBAAsB,EAAE;AACtE;AAEO,MAAM,WAAW;AAEjB,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aAAa;AAAA,MACb,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,yBAAyB,QAAQ,oBAAoB;AAAA,MACnF;AAAA,MACA,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,sBAAsB,QAAQ,yBAAyB;AAAA,QACnF,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,yBAAyB;AAAA,QAC7E,EAAE,QAAQ,KAAK,aAAa,4BAA4B,QAAQ,yBAAyB;AAAA,MAC3F;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { logCrudAccess } from '@open-mercato/shared/lib/crud/factory'\nimport { FeatureToggle } from '../../../data/entities'\nimport type { EntityManager } from '@mikro-orm/postgresql'\n\nimport { featureTogglesTag, featureToggleSchema, featureToggleErrorSchema } from '../../openapi'\n\nconst paramsSchema = z.object({\n  id: z.string().uuid(),\n})\n\nexport async function GET(_req: Request, ctx: { params?: { id?: string } }) {\n  const auth = await getAuthFromRequest(_req)\n  if (!auth) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n\n  const parse = paramsSchema.safeParse({ id: ctx.params?.id })\n  if (!parse.success) {\n    return NextResponse.json({ error: 'Invalid feature toggle id' }, { status: 400 })\n  }\n\n  const container = await createRequestContainer()\n  const em = container.resolve('em') as EntityManager\n\n  const toggle = await em.findOne(FeatureToggle, {\n    id: parse.data.id,\n    deletedAt: null,\n  })\n\n  if (!toggle) {\n    return NextResponse.json({ error: 'Feature toggle not found' }, { status: 404 })\n  }\n\n  await logCrudAccess({\n    container,\n    auth,\n    request: _req,\n    items: [toggle],\n    idField: 'id',\n    resourceKind: 'feature_toggles.feature_toggle',\n    tenantId: auth.tenantId ?? null,\n    query: { id: parse.data.id },\n    accessType: 'read:item',\n    fields: ['id', 'identifier', 'name', 'description', 'category', 'created_at', 'updated_at']\n  })\n\n  const featureToggle: FeatureToggle = {\n    id: toggle.id,\n    identifier: toggle.identifier,\n    name: toggle.name,\n    description: toggle.description ?? null,\n    category: toggle.category ?? null,\n\n    type: toggle.type,\n    defaultValue: toggle.defaultValue,\n    createdAt: toggle.createdAt,\n    updatedAt: toggle.updatedAt,\n  }\n\n  return NextResponse.json(featureToggle)\n}\n\nconst routeMetadata = {\n  GET: { requireAuth: true, requireFeatures: ['feature_toggles.view'] },\n}\n\nexport const metadata = routeMetadata\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: featureTogglesTag,\n  summary: 'Fetch feature toggle detail',\n  methods: {\n    GET: {\n      summary: 'Fetch feature toggle by ID',\n      description: 'Returns complete details of a feature toggle.',\n      responses: [\n        { status: 200, description: 'Feature toggle detail', schema: featureToggleSchema },\n      ],\n      errors: [\n        { status: 400, description: 'Invalid identifier', schema: featureToggleErrorSchema },\n        { status: 401, description: 'Unauthorized', schema: featureToggleErrorSchema },\n        { status: 404, description: 'Feature toggle not found', schema: featureToggleErrorSchema },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAElB,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AACvC,SAAS,qBAAqB;AAC9B,SAAS,qBAAqB;AAG9B,SAAS,mBAAmB,qBAAqB,gCAAgC;AAEjF,MAAM,eAAe,EAAE,OAAO;AAAA,EAC5B,IAAI,EAAE,OAAO,EAAE,KAAK;AACtB,CAAC;AAED,eAAsB,IAAI,MAAe,KAAmC;AAC1E,QAAM,OAAO,MAAM,mBAAmB,IAAI;AAC1C,MAAI,CAAC,MAAM;AACT,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAEA,QAAM,QAAQ,aAAa,UAAU,EAAE,IAAI,IAAI,QAAQ,GAAG,CAAC;AAC3D,MAAI,CAAC,MAAM,SAAS;AAClB,WAAO,aAAa,KAAK,EAAE,OAAO,4BAA4B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAClF;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,KAAK,UAAU,QAAQ,IAAI;AAEjC,QAAM,SAAS,MAAM,GAAG,QAAQ,eAAe;AAAA,IAC7C,IAAI,MAAM,KAAK;AAAA,IACf,WAAW;AAAA,EACb,CAAC;AAED,MAAI,CAAC,QAAQ;AACX,WAAO,aAAa,KAAK,EAAE,OAAO,2BAA2B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACjF;AAEA,QAAM,cAAc;AAAA,IAClB;AAAA,IACA;AAAA,IACA,SAAS;AAAA,IACT,OAAO,CAAC,MAAM;AAAA,IACd,SAAS;AAAA,IACT,cAAc;AAAA,IACd,UAAU,KAAK,YAAY;AAAA,IAC3B,OAAO,EAAE,IAAI,MAAM,KAAK,GAAG;AAAA,IAC3B,YAAY;AAAA,IACZ,QAAQ,CAAC,MAAM,cAAc,QAAQ,eAAe,YAAY,cAAc,YAAY;AAAA,EAC5F,CAAC;AAED,QAAM,gBAA+B;AAAA,IACnC,IAAI,OAAO;AAAA,IACX,YAAY,OAAO;AAAA,IACnB,MAAM,OAAO;AAAA,IACb,aAAa,OAAO,eAAe;AAAA,IACnC,UAAU,OAAO,YAAY;AAAA,IAE7B,MAAM,OAAO;AAAA,IACb,cAAc,OAAO;AAAA,IACrB,WAAW,OAAO;AAAA,IAClB,WAAW,OAAO;AAAA,EACpB;AAEA,SAAO,aAAa,KAAK,aAAa;AACxC;AAEA,MAAM,gBAAgB;AAAA,EACpB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,sBAAsB,EAAE;AACtE;AAEO,MAAM,WAAW;AAEjB,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aAAa;AAAA,MACb,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,yBAAyB,QAAQ,oBAAoB;AAAA,MACnF;AAAA,MACA,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,sBAAsB,QAAQ,yBAAyB;AAAA,QACnF,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,yBAAyB;AAAA,QAC7E,EAAE,QAAQ,KAAK,aAAa,4BAA4B,QAAQ,yBAAyB;AAAA,MAC3F;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/feature_toggles/api/overrides/route.js

@@ -1,10 +1,11 @@
 import { NextResponse } from "next/server";
-import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
 import { Tenant } from "@open-mercato/core/modules/directory/data/entities";
 import { serializeOperationMetadata } from "@open-mercato/shared/lib/commands/operationMetadata";
 import { getOverrides } from "../../lib/queries.js";
 import { isCrudHttpError } from "@open-mercato/shared/lib/crud/errors";
+import { enforceCommandOptimisticLock } from "@open-mercato/shared/lib/crud/optimistic-lock-command";
 import { logCrudAccess } from "@open-mercato/shared/lib/crud/factory";
+import { FeatureToggleOverride } from "../../data/entities.js";
 import { buildContext } from "../../lib/utils.js";
 import { resolveFeatureCheckContext } from "@open-mercato/core/modules/directory/utils/organizationScope";
 import {
@@ -16,16 +17,15 @@ import {
   changeOverrideStateResponseSchema
 } from "../openapi.js";
 async function GET(req) {
-  const { auth } = await buildContext(req);
+  const { auth, ctx, scope } = await buildContext(req);
   const url = new URL(req.url);
   const parsed = overrideListQuerySchema.safeParse(Object.fromEntries(url.searchParams.entries()));
   if (!parsed.success) {
     return NextResponse.json({ error: "Invalid query parameters" }, { status: 400 });
   }
-  const container = await createRequestContainer();
-  const em = container.resolve("em");
+  const em = ctx.container.resolve("em");
   const tenant = await em.findOne(Tenant, {
-    id: auth?.tenantId
+    id: scope.tenantId
   });
   if (!tenant) {
     return NextResponse.json({
@@ -34,13 +34,13 @@ async function GET(req) {
   }
   const result = await getOverrides(em, tenant, parsed.data);
   await logCrudAccess({
-    container,
+    container: ctx.container,
     auth,
     request: req,
     items: [...result.raw.toggles, ...result.raw.overrides],
     idField: "id",
     resourceKind: "feature_toggles.override_list",
-    tenantId: auth.tenantId ?? null,
+    tenantId: scope.tenantId ?? null,
     query: parsed.data,
     accessType: "read:list",
     fields: ["id", "toggleId", "tenantId", "identifier", "name", "category"]
@@ -71,6 +71,19 @@ async function PUT(req) {
         error: "Tenant context required. Please select a tenant."
       }, { status: 400 });
     }
+    const em = ctx.container.resolve("em");
+    const existingOverride = await em.findOne(FeatureToggleOverride, {
+      tenantId: scope.tenantId,
+      toggle: { id: parsed.data.toggleId }
+    });
+    if (existingOverride) {
+      enforceCommandOptimisticLock({
+        resourceKind: "feature_toggles.feature_toggle_override",
+        resourceId: existingOverride.id,
+        current: existingOverride.updatedAt ?? null,
+        request: req
+      });
+    }
     const commandBus = ctx.container.resolve("commandBus");
     const { result, logEntry } = await commandBus.execute("feature_toggles.overrides.changeState", {
       input: {

package/dist/modules/feature_toggles/api/overrides/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../src/modules/feature_toggles/api/overrides/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { Tenant } from '@open-mercato/core/modules/directory/data/entities'\nimport type { CommandBus } from '@open-mercato/shared/lib/commands'\nimport { serializeOperationMetadata } from '@open-mercato/shared/lib/commands/operationMetadata'\nimport { getOverrides } from '../../lib/queries'\nimport { CrudHttpError, isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { logCrudAccess } from '@open-mercato/shared/lib/crud/factory'\nimport { buildContext } from '../../lib/utils'\nimport { resolveFeatureCheckContext } from \"@open-mercato/core/modules/directory/utils/organizationScope\"\nimport { ProcessedChangeOverrideStateInput } from '../../data/validators'\nimport {\n  changeOverrideStateBaseSchema,\n  overrideListQuerySchema,\n  featureTogglesTag,\n  featureToggleOverrideListResponseSchema,\n  featureToggleErrorSchema,\n  changeOverrideStateResponseSchema,\n} from '../openapi'\nimport type { OpenApiRouteDoc, OpenApiMethodDoc } from '@open-mercato/shared/lib/openapi'\n\nexport async function GET(req: Request) {\n  const { auth } = await buildContext(req)\n\n  const url = new URL(req.url)\n  const parsed = overrideListQuerySchema.safeParse(Object.fromEntries(url.searchParams.entries()))\n  if (!parsed.success) {\n    return NextResponse.json({ error: 'Invalid query parameters' }, { status: 400 })\n  }\n  const container = await createRequestContainer()\n  const em = container.resolve('em') as EntityManager\n\n  const tenant = await em.findOne(Tenant, {\n    id: auth?.tenantId,\n  })\n\n  if (!tenant) {\n    return NextResponse.json({\n      error: 'Tenant context required. Please select a tenant.'\n    }, { status: 400 })\n  }\n\n  const result = await getOverrides(em, tenant, parsed.data)\n\n  await logCrudAccess({\n    container,\n    auth,\n    request: req,\n    items: [...result.raw.toggles, ...result.raw.overrides],\n    idField: 'id',\n    resourceKind: 'feature_toggles.override_list',\n    tenantId: auth.tenantId ?? null,\n    query: parsed.data,\n    accessType: 'read:list',\n    fields: ['id', 'toggleId', 'tenantId', 'identifier', 'name', 'category']\n  })\n\n  return NextResponse.json({\n    items: result.items,\n    total: result.total,\n    totalPages: result.totalPages,\n    page: result.page,\n    pageSize: result.pageSize,\n    isSuperAdmin: auth.isSuperAdmin ?? false\n  })\n}\n\nexport async function PUT(req: Request) {\n  try {\n    const { ctx } = await buildContext(req)\n\n    const parsed = changeOverrideStateBaseSchema.safeParse(await req.json())\n    if (!parsed.success) {\n      return NextResponse.json({ error: 'Invalid payload', details: parsed.error.flatten() }, { status: 400 })\n    }\n\n    const { scope } = await resolveFeatureCheckContext({\n      container: ctx.container,\n      auth: ctx.auth,\n      request: req\n    })\n\n    if (!scope.tenantId) {\n      return NextResponse.json({\n        error: 'Tenant context required. Please select a tenant.'\n      }, { status: 400 })\n    }\n\n    const commandBus = ctx.container.resolve('commandBus') as CommandBus\n    const { result, logEntry } = await commandBus.execute<ProcessedChangeOverrideStateInput, { overrideToggleId: string | null }>('feature_toggles.overrides.changeState', {\n      input: {\n        toggleId: parsed.data.toggleId,\n        tenantId: scope.tenantId,\n        isOverride: parsed.data.isOverride,\n        overrideValue: parsed.data.overrideValue,\n      },\n      ctx,\n    })\n\n    const response = NextResponse.json({\n      ok: true,\n      overrideToggleId: result?.overrideToggleId ?? null,\n    })\n\n    if (logEntry?.undoToken && logEntry?.id && logEntry?.commandId) {\n      response.headers.set(\n        'x-om-operation',\n        serializeOperationMetadata({\n          id: logEntry.id,\n          undoToken: logEntry.undoToken,\n          commandId: logEntry.commandId,\n          actionLabel: logEntry.actionLabel ?? null,\n          resourceKind: logEntry.resourceKind ?? 'feature_toggles.override',\n          resourceId: logEntry.resourceId ?? result?.overrideToggleId ?? null,\n          executedAt: logEntry.createdAt instanceof Date ? logEntry.createdAt.toISOString() : undefined,\n        })\n      )\n    }\n\n    return response\n  } catch (error) {\n    if (isCrudHttpError(error)) {\n      return NextResponse.json(error.body, { status: error.status })\n    }\n    const message = error instanceof Error ? error.message : 'Unknown error'\n    if (message === 'NOT_FOUND') return NextResponse.json({ error: 'Not found' }, { status: 404 })\n    if (message === 'INVALID_STATE' || message === 'INVALID_TOGGLE_ID' || message === 'INVALID_TENANT_ID') {\n      return NextResponse.json({ error: message }, { status: 400 })\n    }\n    console.error('feature_toggles.overrides.changeState failed', error)\n    return NextResponse.json({ error: 'Failed to update override' }, { status: 500 })\n  }\n}\n\nconst routeMetadata = {\n  GET: { requireAuth: true, requireFeatures: ['feature_toggles.view'] },\n  PUT: { requireAuth: true, requireFeatures: ['feature_toggles.manage'] },\n}\n\nexport const metadata = routeMetadata\n\nconst overrideGetDoc: OpenApiMethodDoc = {\n  summary: 'List overrides',\n  description: 'Returns list of feature toggle overrides.',\n  tags: [featureTogglesTag],\n  query: overrideListQuerySchema,\n  responses: [\n    { status: 200, description: 'List of overrides', schema: featureToggleOverrideListResponseSchema },\n  ],\n  errors: [\n    { status: 400, description: 'Invalid query parameters', schema: featureToggleErrorSchema },\n    { status: 401, description: 'Authentication required', schema: featureToggleErrorSchema },\n  ],\n}\n\nconst overridePutDoc: OpenApiMethodDoc = {\n  summary: 'Change override state',\n  description: 'Enable, disable or inherit a feature toggle for a specific tenant.',\n  tags: [featureTogglesTag],\n  requestBody: {\n    contentType: 'application/json',\n    schema: changeOverrideStateBaseSchema,\n    description: 'Override details.',\n  },\n  responses: [\n    { status: 200, description: 'Override updated', schema: changeOverrideStateResponseSchema },\n  ],\n  errors: [\n    { status: 400, description: 'Validation failed', schema: featureToggleErrorSchema },\n    { status: 401, description: 'Authentication required', schema: featureToggleErrorSchema },\n    { status: 404, description: 'Not found', schema: featureToggleErrorSchema },\n    { status: 500, description: 'Internal server error', schema: featureToggleErrorSchema },\n  ],\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: featureTogglesTag,\n  summary: 'Manage feature toggle overrides',\n  methods: {\n    GET: overrideGetDoc,\n    PUT: overridePutDoc,\n  },\n}"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,8BAA8B;AAEvC,SAAS,cAAc;AAEvB,SAAS,kCAAkC;AAC3C,SAAS,oBAAoB;AAC7B,SAAwB,uBAAuB;AAC/C,SAAS,qBAAqB;AAC9B,SAAS,oBAAoB;AAC7B,SAAS,kCAAkC;AAE3C;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAGP,eAAsB,IAAI,KAAc;AACtC,QAAM,EAAE,KAAK,IAAI,MAAM,aAAa,GAAG;AAEvC,QAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,QAAM,SAAS,wBAAwB,UAAU,OAAO,YAAY,IAAI,aAAa,QAAQ,CAAC,CAAC;AAC/F,MAAI,CAAC,OAAO,SAAS;AACnB,WAAO,aAAa,KAAK,EAAE,OAAO,2BAA2B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACjF;AACA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,KAAK,UAAU,QAAQ,IAAI;AAEjC,QAAM,SAAS,MAAM,GAAG,QAAQ,QAAQ;AAAA,IACtC,IAAI,MAAM;AAAA,EACZ,CAAC;AAED,MAAI,CAAC,QAAQ;AACX,WAAO,aAAa,KAAK;AAAA,MACvB,OAAO;AAAA,IACT,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACpB;AAEA,QAAM,SAAS,MAAM,aAAa,IAAI,QAAQ,OAAO,IAAI;AAEzD,QAAM,cAAc;AAAA,IAClB;AAAA,IACA;AAAA,IACA,SAAS;AAAA,IACT,OAAO,CAAC,GAAG,OAAO,IAAI,SAAS,GAAG,OAAO,IAAI,SAAS;AAAA,IACtD,SAAS;AAAA,IACT,cAAc;AAAA,IACd,UAAU,KAAK,YAAY;AAAA,IAC3B,OAAO,OAAO;AAAA,IACd,YAAY;AAAA,IACZ,QAAQ,CAAC,MAAM,YAAY,YAAY,cAAc,QAAQ,UAAU;AAAA,EACzE,CAAC;AAED,SAAO,aAAa,KAAK;AAAA,IACvB,OAAO,OAAO;AAAA,IACd,OAAO,OAAO;AAAA,IACd,YAAY,OAAO;AAAA,IACnB,MAAM,OAAO;AAAA,IACb,UAAU,OAAO;AAAA,IACjB,cAAc,KAAK,gBAAgB;AAAA,EACrC,CAAC;AACH;AAEA,eAAsB,IAAI,KAAc;AACtC,MAAI;AACF,UAAM,EAAE,IAAI,IAAI,MAAM,aAAa,GAAG;AAEtC,UAAM,SAAS,8BAA8B,UAAU,MAAM,IAAI,KAAK,CAAC;AACvE,QAAI,CAAC,OAAO,SAAS;AACnB,aAAO,aAAa,KAAK,EAAE,OAAO,mBAAmB,SAAS,OAAO,MAAM,QAAQ,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACzG;AAEA,UAAM,EAAE,MAAM,IAAI,MAAM,2BAA2B;AAAA,MACjD,WAAW,IAAI;AAAA,MACf,MAAM,IAAI;AAAA,MACV,SAAS;AAAA,IACX,CAAC;AAED,QAAI,CAAC,MAAM,UAAU;AACnB,aAAO,aAAa,KAAK;AAAA,QACvB,OAAO;AAAA,MACT,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACpB;AAEA,UAAM,aAAa,IAAI,UAAU,QAAQ,YAAY;AACrD,UAAM,EAAE,QAAQ,SAAS,IAAI,MAAM,WAAW,QAAgF,yCAAyC;AAAA,MACrK,OAAO;AAAA,QACL,UAAU,OAAO,KAAK;AAAA,QACtB,UAAU,MAAM;AAAA,QAChB,YAAY,OAAO,KAAK;AAAA,QACxB,eAAe,OAAO,KAAK;AAAA,MAC7B;AAAA,MACA;AAAA,IACF,CAAC;AAED,UAAM,WAAW,aAAa,KAAK;AAAA,MACjC,IAAI;AAAA,MACJ,kBAAkB,QAAQ,oBAAoB;AAAA,IAChD,CAAC;AAED,QAAI,UAAU,aAAa,UAAU,MAAM,UAAU,WAAW;AAC9D,eAAS,QAAQ;AAAA,QACf;AAAA,QACA,2BAA2B;AAAA,UACzB,IAAI,SAAS;AAAA,UACb,WAAW,SAAS;AAAA,UACpB,WAAW,SAAS;AAAA,UACpB,aAAa,SAAS,eAAe;AAAA,UACrC,cAAc,SAAS,gBAAgB;AAAA,UACvC,YAAY,SAAS,cAAc,QAAQ,oBAAoB;AAAA,UAC/D,YAAY,SAAS,qBAAqB,OAAO,SAAS,UAAU,YAAY,IAAI;AAAA,QACtF,CAAC;AAAA,MACH;AAAA,IACF;AAEA,WAAO;AAAA,EACT,SAAS,OAAO;AACd,QAAI,gBAAgB,KAAK,GAAG;AAC1B,aAAO,aAAa,KAAK,MAAM,MAAM,EAAE,QAAQ,MAAM,OAAO,CAAC;AAAA,IAC/D;AACA,UAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU;AACzD,QAAI,YAAY,YAAa,QAAO,aAAa,KAAK,EAAE,OAAO,YAAY,GAAG,EAAE,QAAQ,IAAI,CAAC;AAC7F,QAAI,YAAY,mBAAmB,YAAY,uBAAuB,YAAY,qBAAqB;AACrG,aAAO,aAAa,KAAK,EAAE,OAAO,QAAQ,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC9D;AACA,YAAQ,MAAM,gDAAgD,KAAK;AACnE,WAAO,aAAa,KAAK,EAAE,OAAO,4BAA4B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAClF;AACF;AAEA,MAAM,gBAAgB;AAAA,EACpB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,sBAAsB,EAAE;AAAA,EACpE,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,wBAAwB,EAAE;AACxE;AAEO,MAAM,WAAW;AAExB,MAAM,iBAAmC;AAAA,EACvC,SAAS;AAAA,EACT,aAAa;AAAA,EACb,MAAM,CAAC,iBAAiB;AAAA,EACxB,OAAO;AAAA,EACP,WAAW;AAAA,IACT,EAAE,QAAQ,KAAK,aAAa,qBAAqB,QAAQ,wCAAwC;AAAA,EACnG;AAAA,EACA,QAAQ;AAAA,IACN,EAAE,QAAQ,KAAK,aAAa,4BAA4B,QAAQ,yBAAyB;AAAA,IACzF,EAAE,QAAQ,KAAK,aAAa,2BAA2B,QAAQ,yBAAyB;AAAA,EAC1F;AACF;AAEA,MAAM,iBAAmC;AAAA,EACvC,SAAS;AAAA,EACT,aAAa;AAAA,EACb,MAAM,CAAC,iBAAiB;AAAA,EACxB,aAAa;AAAA,IACX,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,aAAa;AAAA,EACf;AAAA,EACA,WAAW;AAAA,IACT,EAAE,QAAQ,KAAK,aAAa,oBAAoB,QAAQ,kCAAkC;AAAA,EAC5F;AAAA,EACA,QAAQ;AAAA,IACN,EAAE,QAAQ,KAAK,aAAa,qBAAqB,QAAQ,yBAAyB;AAAA,IAClF,EAAE,QAAQ,KAAK,aAAa,2BAA2B,QAAQ,yBAAyB;AAAA,IACxF,EAAE,QAAQ,KAAK,aAAa,aAAa,QAAQ,yBAAyB;AAAA,IAC1E,EAAE,QAAQ,KAAK,aAAa,yBAAyB,QAAQ,yBAAyB;AAAA,EACxF;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,IACL,KAAK;AAAA,EACP;AACF;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { Tenant } from '@open-mercato/core/modules/directory/data/entities'\nimport type { CommandBus } from '@open-mercato/shared/lib/commands'\nimport { serializeOperationMetadata } from '@open-mercato/shared/lib/commands/operationMetadata'\nimport { getOverrides } from '../../lib/queries'\nimport { isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { enforceCommandOptimisticLock } from '@open-mercato/shared/lib/crud/optimistic-lock-command'\nimport { logCrudAccess } from '@open-mercato/shared/lib/crud/factory'\nimport { FeatureToggleOverride } from '../../data/entities'\nimport { buildContext } from '../../lib/utils'\nimport { resolveFeatureCheckContext } from \"@open-mercato/core/modules/directory/utils/organizationScope\"\nimport { ProcessedChangeOverrideStateInput } from '../../data/validators'\nimport {\n  changeOverrideStateBaseSchema,\n  overrideListQuerySchema,\n  featureTogglesTag,\n  featureToggleOverrideListResponseSchema,\n  featureToggleErrorSchema,\n  changeOverrideStateResponseSchema,\n} from '../openapi'\nimport type { OpenApiRouteDoc, OpenApiMethodDoc } from '@open-mercato/shared/lib/openapi'\n\nexport async function GET(req: Request) {\n  const { auth, ctx, scope } = await buildContext(req)\n\n  const url = new URL(req.url)\n  const parsed = overrideListQuerySchema.safeParse(Object.fromEntries(url.searchParams.entries()))\n  if (!parsed.success) {\n    return NextResponse.json({ error: 'Invalid query parameters' }, { status: 400 })\n  }\n  const em = ctx.container.resolve('em') as EntityManager\n\n  const tenant = await em.findOne(Tenant, {\n    id: scope.tenantId,\n  })\n\n  if (!tenant) {\n    return NextResponse.json({\n      error: 'Tenant context required. Please select a tenant.'\n    }, { status: 400 })\n  }\n\n  const result = await getOverrides(em, tenant, parsed.data)\n\n  await logCrudAccess({\n    container: ctx.container,\n    auth,\n    request: req,\n    items: [...result.raw.toggles, ...result.raw.overrides],\n    idField: 'id',\n    resourceKind: 'feature_toggles.override_list',\n    tenantId: scope.tenantId ?? null,\n    query: parsed.data,\n    accessType: 'read:list',\n    fields: ['id', 'toggleId', 'tenantId', 'identifier', 'name', 'category']\n  })\n\n  return NextResponse.json({\n    items: result.items,\n    total: result.total,\n    totalPages: result.totalPages,\n    page: result.page,\n    pageSize: result.pageSize,\n    isSuperAdmin: auth.isSuperAdmin ?? false\n  })\n}\n\nexport async function PUT(req: Request) {\n  try {\n    const { ctx } = await buildContext(req)\n\n    const parsed = changeOverrideStateBaseSchema.safeParse(await req.json())\n    if (!parsed.success) {\n      return NextResponse.json({ error: 'Invalid payload', details: parsed.error.flatten() }, { status: 400 })\n    }\n\n    const { scope } = await resolveFeatureCheckContext({\n      container: ctx.container,\n      auth: ctx.auth,\n      request: req\n    })\n\n    if (!scope.tenantId) {\n      return NextResponse.json({\n        error: 'Tenant context required. Please select a tenant.'\n      }, { status: 400 })\n    }\n\n    // Optimistic lock: refuse a stale override overwrite when two admins edit the\n    // same global toggle override in parallel. Only enforced when an override row\n    // already exists (first set has no prior version). Strictly additive.\n    const em = ctx.container.resolve('em') as EntityManager\n    const existingOverride = await em.findOne(FeatureToggleOverride, {\n      tenantId: scope.tenantId,\n      toggle: { id: parsed.data.toggleId },\n    })\n    if (existingOverride) {\n      enforceCommandOptimisticLock({\n        resourceKind: 'feature_toggles.feature_toggle_override',\n        resourceId: existingOverride.id,\n        current: existingOverride.updatedAt ?? null,\n        request: req,\n      })\n    }\n\n    const commandBus = ctx.container.resolve('commandBus') as CommandBus\n    const { result, logEntry } = await commandBus.execute<ProcessedChangeOverrideStateInput, { overrideToggleId: string | null }>('feature_toggles.overrides.changeState', {\n      input: {\n        toggleId: parsed.data.toggleId,\n        tenantId: scope.tenantId,\n        isOverride: parsed.data.isOverride,\n        overrideValue: parsed.data.overrideValue,\n      },\n      ctx,\n    })\n\n    const response = NextResponse.json({\n      ok: true,\n      overrideToggleId: result?.overrideToggleId ?? null,\n    })\n\n    if (logEntry?.undoToken && logEntry?.id && logEntry?.commandId) {\n      response.headers.set(\n        'x-om-operation',\n        serializeOperationMetadata({\n          id: logEntry.id,\n          undoToken: logEntry.undoToken,\n          commandId: logEntry.commandId,\n          actionLabel: logEntry.actionLabel ?? null,\n          resourceKind: logEntry.resourceKind ?? 'feature_toggles.override',\n          resourceId: logEntry.resourceId ?? result?.overrideToggleId ?? null,\n          executedAt: logEntry.createdAt instanceof Date ? logEntry.createdAt.toISOString() : undefined,\n        })\n      )\n    }\n\n    return response\n  } catch (error) {\n    if (isCrudHttpError(error)) {\n      return NextResponse.json(error.body, { status: error.status })\n    }\n    const message = error instanceof Error ? error.message : 'Unknown error'\n    if (message === 'NOT_FOUND') return NextResponse.json({ error: 'Not found' }, { status: 404 })\n    if (message === 'INVALID_STATE' || message === 'INVALID_TOGGLE_ID' || message === 'INVALID_TENANT_ID') {\n      return NextResponse.json({ error: message }, { status: 400 })\n    }\n    console.error('feature_toggles.overrides.changeState failed', error)\n    return NextResponse.json({ error: 'Failed to update override' }, { status: 500 })\n  }\n}\n\nconst routeMetadata = {\n  GET: { requireAuth: true, requireFeatures: ['feature_toggles.view'] },\n  PUT: { requireAuth: true, requireFeatures: ['feature_toggles.manage'] },\n}\n\nexport const metadata = routeMetadata\n\nconst overrideGetDoc: OpenApiMethodDoc = {\n  summary: 'List overrides',\n  description: 'Returns list of feature toggle overrides.',\n  tags: [featureTogglesTag],\n  query: overrideListQuerySchema,\n  responses: [\n    { status: 200, description: 'List of overrides', schema: featureToggleOverrideListResponseSchema },\n  ],\n  errors: [\n    { status: 400, description: 'Invalid query parameters', schema: featureToggleErrorSchema },\n    { status: 401, description: 'Authentication required', schema: featureToggleErrorSchema },\n  ],\n}\n\nconst overridePutDoc: OpenApiMethodDoc = {\n  summary: 'Change override state',\n  description: 'Enable, disable or inherit a feature toggle for a specific tenant.',\n  tags: [featureTogglesTag],\n  requestBody: {\n    contentType: 'application/json',\n    schema: changeOverrideStateBaseSchema,\n    description: 'Override details.',\n  },\n  responses: [\n    { status: 200, description: 'Override updated', schema: changeOverrideStateResponseSchema },\n  ],\n  errors: [\n    { status: 400, description: 'Validation failed', schema: featureToggleErrorSchema },\n    { status: 401, description: 'Authentication required', schema: featureToggleErrorSchema },\n    { status: 404, description: 'Not found', schema: featureToggleErrorSchema },\n    { status: 500, description: 'Internal server error', schema: featureToggleErrorSchema },\n  ],\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: featureTogglesTag,\n  summary: 'Manage feature toggle overrides',\n  methods: {\n    GET: overrideGetDoc,\n    PUT: overridePutDoc,\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAE7B,SAAS,cAAc;AAEvB,SAAS,kCAAkC;AAC3C,SAAS,oBAAoB;AAC7B,SAAS,uBAAuB;AAChC,SAAS,oCAAoC;AAC7C,SAAS,qBAAqB;AAC9B,SAAS,6BAA6B;AACtC,SAAS,oBAAoB;AAC7B,SAAS,kCAAkC;AAE3C;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAGP,eAAsB,IAAI,KAAc;AACtC,QAAM,EAAE,MAAM,KAAK,MAAM,IAAI,MAAM,aAAa,GAAG;AAEnD,QAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,QAAM,SAAS,wBAAwB,UAAU,OAAO,YAAY,IAAI,aAAa,QAAQ,CAAC,CAAC;AAC/F,MAAI,CAAC,OAAO,SAAS;AACnB,WAAO,aAAa,KAAK,EAAE,OAAO,2BAA2B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACjF;AACA,QAAM,KAAK,IAAI,UAAU,QAAQ,IAAI;AAErC,QAAM,SAAS,MAAM,GAAG,QAAQ,QAAQ;AAAA,IACtC,IAAI,MAAM;AAAA,EACZ,CAAC;AAED,MAAI,CAAC,QAAQ;AACX,WAAO,aAAa,KAAK;AAAA,MACvB,OAAO;AAAA,IACT,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACpB;AAEA,QAAM,SAAS,MAAM,aAAa,IAAI,QAAQ,OAAO,IAAI;AAEzD,QAAM,cAAc;AAAA,IAClB,WAAW,IAAI;AAAA,IACf;AAAA,IACA,SAAS;AAAA,IACT,OAAO,CAAC,GAAG,OAAO,IAAI,SAAS,GAAG,OAAO,IAAI,SAAS;AAAA,IACtD,SAAS;AAAA,IACT,cAAc;AAAA,IACd,UAAU,MAAM,YAAY;AAAA,IAC5B,OAAO,OAAO;AAAA,IACd,YAAY;AAAA,IACZ,QAAQ,CAAC,MAAM,YAAY,YAAY,cAAc,QAAQ,UAAU;AAAA,EACzE,CAAC;AAED,SAAO,aAAa,KAAK;AAAA,IACvB,OAAO,OAAO;AAAA,IACd,OAAO,OAAO;AAAA,IACd,YAAY,OAAO;AAAA,IACnB,MAAM,OAAO;AAAA,IACb,UAAU,OAAO;AAAA,IACjB,cAAc,KAAK,gBAAgB;AAAA,EACrC,CAAC;AACH;AAEA,eAAsB,IAAI,KAAc;AACtC,MAAI;AACF,UAAM,EAAE,IAAI,IAAI,MAAM,aAAa,GAAG;AAEtC,UAAM,SAAS,8BAA8B,UAAU,MAAM,IAAI,KAAK,CAAC;AACvE,QAAI,CAAC,OAAO,SAAS;AACnB,aAAO,aAAa,KAAK,EAAE,OAAO,mBAAmB,SAAS,OAAO,MAAM,QAAQ,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACzG;AAEA,UAAM,EAAE,MAAM,IAAI,MAAM,2BAA2B;AAAA,MACjD,WAAW,IAAI;AAAA,MACf,MAAM,IAAI;AAAA,MACV,SAAS;AAAA,IACX,CAAC;AAED,QAAI,CAAC,MAAM,UAAU;AACnB,aAAO,aAAa,KAAK;AAAA,QACvB,OAAO;AAAA,MACT,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACpB;AAKA,UAAM,KAAK,IAAI,UAAU,QAAQ,IAAI;AACrC,UAAM,mBAAmB,MAAM,GAAG,QAAQ,uBAAuB;AAAA,MAC/D,UAAU,MAAM;AAAA,MAChB,QAAQ,EAAE,IAAI,OAAO,KAAK,SAAS;AAAA,IACrC,CAAC;AACD,QAAI,kBAAkB;AACpB,mCAA6B;AAAA,QAC3B,cAAc;AAAA,QACd,YAAY,iBAAiB;AAAA,QAC7B,SAAS,iBAAiB,aAAa;AAAA,QACvC,SAAS;AAAA,MACX,CAAC;AAAA,IACH;AAEA,UAAM,aAAa,IAAI,UAAU,QAAQ,YAAY;AACrD,UAAM,EAAE,QAAQ,SAAS,IAAI,MAAM,WAAW,QAAgF,yCAAyC;AAAA,MACrK,OAAO;AAAA,QACL,UAAU,OAAO,KAAK;AAAA,QACtB,UAAU,MAAM;AAAA,QAChB,YAAY,OAAO,KAAK;AAAA,QACxB,eAAe,OAAO,KAAK;AAAA,MAC7B;AAAA,MACA;AAAA,IACF,CAAC;AAED,UAAM,WAAW,aAAa,KAAK;AAAA,MACjC,IAAI;AAAA,MACJ,kBAAkB,QAAQ,oBAAoB;AAAA,IAChD,CAAC;AAED,QAAI,UAAU,aAAa,UAAU,MAAM,UAAU,WAAW;AAC9D,eAAS,QAAQ;AAAA,QACf;AAAA,QACA,2BAA2B;AAAA,UACzB,IAAI,SAAS;AAAA,UACb,WAAW,SAAS;AAAA,UACpB,WAAW,SAAS;AAAA,UACpB,aAAa,SAAS,eAAe;AAAA,UACrC,cAAc,SAAS,gBAAgB;AAAA,UACvC,YAAY,SAAS,cAAc,QAAQ,oBAAoB;AAAA,UAC/D,YAAY,SAAS,qBAAqB,OAAO,SAAS,UAAU,YAAY,IAAI;AAAA,QACtF,CAAC;AAAA,MACH;AAAA,IACF;AAEA,WAAO;AAAA,EACT,SAAS,OAAO;AACd,QAAI,gBAAgB,KAAK,GAAG;AAC1B,aAAO,aAAa,KAAK,MAAM,MAAM,EAAE,QAAQ,MAAM,OAAO,CAAC;AAAA,IAC/D;AACA,UAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU;AACzD,QAAI,YAAY,YAAa,QAAO,aAAa,KAAK,EAAE,OAAO,YAAY,GAAG,EAAE,QAAQ,IAAI,CAAC;AAC7F,QAAI,YAAY,mBAAmB,YAAY,uBAAuB,YAAY,qBAAqB;AACrG,aAAO,aAAa,KAAK,EAAE,OAAO,QAAQ,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC9D;AACA,YAAQ,MAAM,gDAAgD,KAAK;AACnE,WAAO,aAAa,KAAK,EAAE,OAAO,4BAA4B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAClF;AACF;AAEA,MAAM,gBAAgB;AAAA,EACpB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,sBAAsB,EAAE;AAAA,EACpE,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,wBAAwB,EAAE;AACxE;AAEO,MAAM,WAAW;AAExB,MAAM,iBAAmC;AAAA,EACvC,SAAS;AAAA,EACT,aAAa;AAAA,EACb,MAAM,CAAC,iBAAiB;AAAA,EACxB,OAAO;AAAA,EACP,WAAW;AAAA,IACT,EAAE,QAAQ,KAAK,aAAa,qBAAqB,QAAQ,wCAAwC;AAAA,EACnG;AAAA,EACA,QAAQ;AAAA,IACN,EAAE,QAAQ,KAAK,aAAa,4BAA4B,QAAQ,yBAAyB;AAAA,IACzF,EAAE,QAAQ,KAAK,aAAa,2BAA2B,QAAQ,yBAAyB;AAAA,EAC1F;AACF;AAEA,MAAM,iBAAmC;AAAA,EACvC,SAAS;AAAA,EACT,aAAa;AAAA,EACb,MAAM,CAAC,iBAAiB;AAAA,EACxB,aAAa;AAAA,IACX,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,aAAa;AAAA,EACf;AAAA,EACA,WAAW;AAAA,IACT,EAAE,QAAQ,KAAK,aAAa,oBAAoB,QAAQ,kCAAkC;AAAA,EAC5F;AAAA,EACA,QAAQ;AAAA,IACN,EAAE,QAAQ,KAAK,aAAa,qBAAqB,QAAQ,yBAAyB;AAAA,IAClF,EAAE,QAAQ,KAAK,aAAa,2BAA2B,QAAQ,yBAAyB;AAAA,IACxF,EAAE,QAAQ,KAAK,aAAa,aAAa,QAAQ,yBAAyB;AAAA,IAC1E,EAAE,QAAQ,KAAK,aAAa,yBAAyB,QAAQ,yBAAyB;AAAA,EACxF;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,IACL,KAAK;AAAA,EACP;AACF;",
   "names": []
 }

package/dist/modules/feature_toggles/backend/feature-toggles/global/[id]/edit/page.js

@@ -2,6 +2,7 @@
 import { jsx } from "react/jsx-runtime";
 import { Page, PageBody } from "@open-mercato/ui/backend/Page";
 import { CrudForm } from "@open-mercato/ui/backend/CrudForm";
+import { ErrorMessage, LoadingMessage } from "@open-mercato/ui/backend/detail";
 import { E } from "../../../../../../../generated/entities.ids.generated.js";
 import { useT } from "@open-mercato/shared/lib/i18n/context";
 import * as React from "react";
@@ -9,24 +10,26 @@ import { updateCrud } from "@open-mercato/ui/backend/utils/crud";
 import { useFeatureToggleItem } from "@open-mercato/core/modules/feature_toggles/components/hooks/useFeatureToggleItem";
 import { createFieldDefinitions, createFormGroups } from "@open-mercato/core/modules/feature_toggles/components/formConfig";
 function EditFeatureTogglePage({ params }) {
-  const [initialValues, setInitialValues] = React.useState(null);
   const { id } = params ?? {};
   const t = useT();
   const fields = createFieldDefinitions(t);
   const formGroups = createFormGroups(t);
-  const { data: featureToggleItem, isLoading } = useFeatureToggleItem(id);
-  React.useEffect(() => {
-    if (featureToggleItem) {
-      setInitialValues({
-        identifier: featureToggleItem.identifier,
-        name: featureToggleItem.name,
-        description: featureToggleItem.description,
-        category: featureToggleItem.category,
-        type: featureToggleItem.type,
-        defaultValue: featureToggleItem.defaultValue
-      });
-    }
-  }, [featureToggleItem]);
+  const { data: featureToggleItem, isLoading, isError } = useFeatureToggleItem(id);
+  const initialValues = React.useMemo(() => {
+    if (!featureToggleItem) return null;
+    return {
+      id: featureToggleItem.id ?? (id ? String(id) : ""),
+      identifier: featureToggleItem.identifier,
+      name: featureToggleItem.name,
+      description: featureToggleItem.description,
+      category: featureToggleItem.category,
+      type: featureToggleItem.type,
+      defaultValue: featureToggleItem.defaultValue
+    };
+  }, [featureToggleItem, id]);
+  if (!initialValues) {
+    return /* @__PURE__ */ jsx(Page, { children: /* @__PURE__ */ jsx(PageBody, { children: isError && !isLoading ? /* @__PURE__ */ jsx(ErrorMessage, { label: t("feature_toggles.form.errors.load", "Failed to load feature toggle") }) : /* @__PURE__ */ jsx(LoadingMessage, { label: t("feature_toggles.form.loading", "Loading feature toggles") }) }) });
+  }
   return /* @__PURE__ */ jsx(Page, { children: /* @__PURE__ */ jsx(PageBody, { children: /* @__PURE__ */ jsx(
     CrudForm,
     {
@@ -35,7 +38,8 @@ function EditFeatureTogglePage({ params }) {
       versionHistory: { resourceKind: "feature_toggles.global", resourceId: id ? String(id) : "" },
       fields,
       entityId: E.feature_toggles.feature_toggle,
-      initialValues: initialValues ?? {},
+      initialValues,
+      optimisticLockUpdatedAt: featureToggleItem?.updatedAt ?? null,
       isLoading,
       groups: formGroups,
       loadingMessage: t("feature_toggles.form.loading", "Loading feature toggles"),
@@ -55,7 +59,8 @@ function EditFeatureTogglePage({ params }) {
         };
         await updateCrud("feature_toggles/global", payload);
       }
-    }
+    },
+    initialValues ? "ft-edit-loaded" : "ft-edit-loading"
   ) }) });
 }
 export {

package/dist/modules/feature_toggles/backend/feature-toggles/global/[id]/edit/page.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../../../src/modules/feature_toggles/backend/feature-toggles/global/%5Bid%5D/edit/page.tsx"],
-  "sourcesContent": ["\"use client\"\nimport { Page, PageBody } from \"@open-mercato/ui/backend/Page\";\nimport { CrudForm } from \"@open-mercato/ui/backend/CrudForm\";\nimport { E } from \"#generated/entities.ids.generated\";\nimport { useT } from \"@open-mercato/shared/lib/i18n/context\";\nimport * as React from 'react'\nimport { updateCrud } from \"@open-mercato/ui/backend/utils/crud\";\nimport { useFeatureToggleItem } from \"@open-mercato/core/modules/feature_toggles/components/hooks/useFeatureToggleItem\";\nimport { createFieldDefinitions, createFormGroups } from \"@open-mercato/core/modules/feature_toggles/components/formConfig\";\n\n\nexport default function EditFeatureTogglePage({ params }: { params?: { id?: string } }) {\n  const [initialValues, setInitialValues] = React.useState<any>(null)\n  const { id } = params ?? {}\n  const t = useT()\n  const fields = createFieldDefinitions(t);\n  const formGroups = createFormGroups(t);\n\n  const { data: featureToggleItem, isLoading } = useFeatureToggleItem(id)\n\n  React.useEffect(() => {\n    if (featureToggleItem) {\n      setInitialValues({\n        identifier: featureToggleItem.identifier,\n        name: featureToggleItem.name,\n        description: featureToggleItem.description,\n        category: featureToggleItem.category,\n\n        type: featureToggleItem.type,\n        defaultValue: featureToggleItem.defaultValue,\n      })\n    }\n  }, [featureToggleItem])\n\n  return (\n    <Page>\n      <PageBody>\n        <CrudForm\n          title={t('feature_toggles.form.title.edit', 'Edit Feature Toggle')}\n          backHref=\"/backend/feature-toggles/global\"\n          versionHistory={{ resourceKind: 'feature_toggles.global', resourceId: id ? String(id) : '' }}\n          fields={fields}\n          entityId={E.feature_toggles.feature_toggle}\n          initialValues={initialValues ?? {}}\n          isLoading={isLoading}\n          groups={formGroups}\n          loadingMessage={t('feature_toggles.form.loading', 'Loading feature toggles')}\n          submitLabel={t('feature_toggles.form.action.save', 'Save')}\n          cancelHref=\"/backend/feature-toggles/global\"\n          successRedirect={`/backend/feature-toggles/global`}\n          onSubmit={async (values) => {\n            if (!id) return\n            const payload = {\n              id: id ? String(id) : '',\n              identifier: values.identifier,\n              name: values.name,\n              description: values.description,\n              category: values.category,\n\n              type: values.type,\n              defaultValue: values.defaultValue,\n            }\n            await updateCrud('feature_toggles/global', payload)\n          }}\n        />\n      </PageBody>\n    </Page>\n  )\n}\n"],
-  "mappings": ";AAqCQ;AApCR,SAAS,MAAM,gBAAgB;AAC/B,SAAS,gBAAgB;AACzB,SAAS,SAAS;AAClB,SAAS,YAAY;AACrB,YAAY,WAAW;AACvB,SAAS,kBAAkB;AAC3B,SAAS,4BAA4B;AACrC,SAAS,wBAAwB,wBAAwB;AAG1C,SAAR,sBAAuC,EAAE,OAAO,GAAiC;AACtF,QAAM,CAAC,eAAe,gBAAgB,IAAI,MAAM,SAAc,IAAI;AAClE,QAAM,EAAE,GAAG,IAAI,UAAU,CAAC;AAC1B,QAAM,IAAI,KAAK;AACf,QAAM,SAAS,uBAAuB,CAAC;AACvC,QAAM,aAAa,iBAAiB,CAAC;AAErC,QAAM,EAAE,MAAM,mBAAmB,UAAU,IAAI,qBAAqB,EAAE;AAEtE,QAAM,UAAU,MAAM;AACpB,QAAI,mBAAmB;AACrB,uBAAiB;AAAA,QACf,YAAY,kBAAkB;AAAA,QAC9B,MAAM,kBAAkB;AAAA,QACxB,aAAa,kBAAkB;AAAA,QAC/B,UAAU,kBAAkB;AAAA,QAE5B,MAAM,kBAAkB;AAAA,QACxB,cAAc,kBAAkB;AAAA,MAClC,CAAC;AAAA,IACH;AAAA,EACF,GAAG,CAAC,iBAAiB,CAAC;AAEtB,SACE,oBAAC,QACC,8BAAC,YACC;AAAA,IAAC;AAAA;AAAA,MACC,OAAO,EAAE,mCAAmC,qBAAqB;AAAA,MACjE,UAAS;AAAA,MACT,gBAAgB,EAAE,cAAc,0BAA0B,YAAY,KAAK,OAAO,EAAE,IAAI,GAAG;AAAA,MAC3F;AAAA,MACA,UAAU,EAAE,gBAAgB;AAAA,MAC5B,eAAe,iBAAiB,CAAC;AAAA,MACjC;AAAA,MACA,QAAQ;AAAA,MACR,gBAAgB,EAAE,gCAAgC,yBAAyB;AAAA,MAC3E,aAAa,EAAE,oCAAoC,MAAM;AAAA,MACzD,YAAW;AAAA,MACX,iBAAiB;AAAA,MACjB,UAAU,OAAO,WAAW;AAC1B,YAAI,CAAC,GAAI;AACT,cAAM,UAAU;AAAA,UACd,IAAI,KAAK,OAAO,EAAE,IAAI;AAAA,UACtB,YAAY,OAAO;AAAA,UACnB,MAAM,OAAO;AAAA,UACb,aAAa,OAAO;AAAA,UACpB,UAAU,OAAO;AAAA,UAEjB,MAAM,OAAO;AAAA,UACb,cAAc,OAAO;AAAA,QACvB;AACA,cAAM,WAAW,0BAA0B,OAAO;AAAA,MACpD;AAAA;AAAA,EACF,GACF,GACF;AAEJ;",
+  "sourcesContent": ["\"use client\"\nimport { Page, PageBody } from \"@open-mercato/ui/backend/Page\";\nimport { CrudForm } from \"@open-mercato/ui/backend/CrudForm\";\nimport { ErrorMessage, LoadingMessage } from \"@open-mercato/ui/backend/detail\";\nimport { E } from \"#generated/entities.ids.generated\";\nimport { useT } from \"@open-mercato/shared/lib/i18n/context\";\nimport * as React from 'react'\nimport { updateCrud } from \"@open-mercato/ui/backend/utils/crud\";\nimport { useFeatureToggleItem } from \"@open-mercato/core/modules/feature_toggles/components/hooks/useFeatureToggleItem\";\nimport { createFieldDefinitions, createFormGroups } from \"@open-mercato/core/modules/feature_toggles/components/formConfig\";\n\n\nexport default function EditFeatureTogglePage({ params }: { params?: { id?: string } }) {\n  const { id } = params ?? {}\n  const t = useT()\n  const fields = createFieldDefinitions(t);\n  const formGroups = createFormGroups(t);\n\n  const { data: featureToggleItem, isLoading, isError } = useFeatureToggleItem(id)\n\n  // Derive the form's initial values synchronously from the loaded record. Using\n  // a useState+useEffect here caused #2452: `isLoading` flips to false one render\n  // before the effect set `initialValues`, so CrudForm mounted with `{}` and the\n  // `type` SELECT captured an empty value (text inputs re-sync from the prop, the\n  // select does not). Deriving here means the value is present in the same render\n  // the data arrives; the `key` below also forces a clean remount on load.\n  const initialValues = React.useMemo(() => {\n    if (!featureToggleItem) return null\n    return {\n      id: featureToggleItem.id ?? (id ? String(id) : ''),\n      identifier: featureToggleItem.identifier,\n      name: featureToggleItem.name,\n      description: featureToggleItem.description,\n      category: featureToggleItem.category,\n      type: featureToggleItem.type,\n      defaultValue: featureToggleItem.defaultValue,\n    }\n  }, [featureToggleItem, id])\n\n  // Gate the form on load. Mounting CrudForm with placeholder `{}` before the\n  // record arrives makes the required `type` Select mount controlled with `''`,\n  // then flip empty\u2192value asynchronously \u2014 a transition the Radix trigger fails\n  // to re-derive, leaving Type blank and blocking save. Rendering CrudForm only\n  // once the record is present mirrors the synchronous create flow, so the\n  // Select mounts a single time with the stored value already set.\n  if (!initialValues) {\n    return (\n      <Page>\n        <PageBody>\n          {isError && !isLoading ? (\n            <ErrorMessage label={t('feature_toggles.form.errors.load', 'Failed to load feature toggle')} />\n          ) : (\n            <LoadingMessage label={t('feature_toggles.form.loading', 'Loading feature toggles')} />\n          )}\n        </PageBody>\n      </Page>\n    )\n  }\n\n  return (\n    <Page>\n      <PageBody>\n        <CrudForm\n          key={initialValues ? 'ft-edit-loaded' : 'ft-edit-loading'}\n          title={t('feature_toggles.form.title.edit', 'Edit Feature Toggle')}\n          backHref=\"/backend/feature-toggles/global\"\n          versionHistory={{ resourceKind: 'feature_toggles.global', resourceId: id ? String(id) : '' }}\n          fields={fields}\n          entityId={E.feature_toggles.feature_toggle}\n          initialValues={initialValues}\n          optimisticLockUpdatedAt={featureToggleItem?.updatedAt ?? null}\n          isLoading={isLoading}\n          groups={formGroups}\n          loadingMessage={t('feature_toggles.form.loading', 'Loading feature toggles')}\n          submitLabel={t('feature_toggles.form.action.save', 'Save')}\n          cancelHref=\"/backend/feature-toggles/global\"\n          successRedirect={`/backend/feature-toggles/global`}\n          onSubmit={async (values) => {\n            if (!id) return\n            const payload = {\n              id: id ? String(id) : '',\n              identifier: values.identifier,\n              name: values.name,\n              description: values.description,\n              category: values.category,\n\n              type: values.type,\n              defaultValue: values.defaultValue,\n            }\n            await updateCrud('feature_toggles/global', payload)\n          }}\n        />\n      </PageBody>\n    </Page>\n  )\n}\n"],
+  "mappings": ";AAkDY;AAjDZ,SAAS,MAAM,gBAAgB;AAC/B,SAAS,gBAAgB;AACzB,SAAS,cAAc,sBAAsB;AAC7C,SAAS,SAAS;AAClB,SAAS,YAAY;AACrB,YAAY,WAAW;AACvB,SAAS,kBAAkB;AAC3B,SAAS,4BAA4B;AACrC,SAAS,wBAAwB,wBAAwB;AAG1C,SAAR,sBAAuC,EAAE,OAAO,GAAiC;AACtF,QAAM,EAAE,GAAG,IAAI,UAAU,CAAC;AAC1B,QAAM,IAAI,KAAK;AACf,QAAM,SAAS,uBAAuB,CAAC;AACvC,QAAM,aAAa,iBAAiB,CAAC;AAErC,QAAM,EAAE,MAAM,mBAAmB,WAAW,QAAQ,IAAI,qBAAqB,EAAE;AAQ/E,QAAM,gBAAgB,MAAM,QAAQ,MAAM;AACxC,QAAI,CAAC,kBAAmB,QAAO;AAC/B,WAAO;AAAA,MACL,IAAI,kBAAkB,OAAO,KAAK,OAAO,EAAE,IAAI;AAAA,MAC/C,YAAY,kBAAkB;AAAA,MAC9B,MAAM,kBAAkB;AAAA,MACxB,aAAa,kBAAkB;AAAA,MAC/B,UAAU,kBAAkB;AAAA,MAC5B,MAAM,kBAAkB;AAAA,MACxB,cAAc,kBAAkB;AAAA,IAClC;AAAA,EACF,GAAG,CAAC,mBAAmB,EAAE,CAAC;AAQ1B,MAAI,CAAC,eAAe;AAClB,WACE,oBAAC,QACC,8BAAC,YACE,qBAAW,CAAC,YACX,oBAAC,gBAAa,OAAO,EAAE,oCAAoC,+BAA+B,GAAG,IAE7F,oBAAC,kBAAe,OAAO,EAAE,gCAAgC,yBAAyB,GAAG,GAEzF,GACF;AAAA,EAEJ;AAEA,SACE,oBAAC,QACC,8BAAC,YACC;AAAA,IAAC;AAAA;AAAA,MAEC,OAAO,EAAE,mCAAmC,qBAAqB;AAAA,MACjE,UAAS;AAAA,MACT,gBAAgB,EAAE,cAAc,0BAA0B,YAAY,KAAK,OAAO,EAAE,IAAI,GAAG;AAAA,MAC3F;AAAA,MACA,UAAU,EAAE,gBAAgB;AAAA,MAC5B;AAAA,MACA,yBAAyB,mBAAmB,aAAa;AAAA,MACzD;AAAA,MACA,QAAQ;AAAA,MACR,gBAAgB,EAAE,gCAAgC,yBAAyB;AAAA,MAC3E,aAAa,EAAE,oCAAoC,MAAM;AAAA,MACzD,YAAW;AAAA,MACX,iBAAiB;AAAA,MACjB,UAAU,OAAO,WAAW;AAC1B,YAAI,CAAC,GAAI;AACT,cAAM,UAAU;AAAA,UACd,IAAI,KAAK,OAAO,EAAE,IAAI;AAAA,UACtB,YAAY,OAAO;AAAA,UACnB,MAAM,OAAO;AAAA,UACb,aAAa,OAAO;AAAA,UACpB,UAAU,OAAO;AAAA,UAEjB,MAAM,OAAO;AAAA,UACb,cAAc,OAAO;AAAA,QACvB;AACA,cAAM,WAAW,0BAA0B,OAAO;AAAA,MACpD;AAAA;AAAA,IA3BK,gBAAgB,mBAAmB;AAAA,EA4B1C,GACF,GACF;AAEJ;",
   "names": []
 }

package/dist/modules/feature_toggles/commands/global.js

@@ -3,14 +3,24 @@ import { toggleCreateSchema, toggleUpdateSchema } from "../data/validators.js";
 import { resolveTranslations } from "@open-mercato/shared/lib/i18n/server";
 import { registerCommand } from "@open-mercato/shared/lib/commands";
 import { CrudHttpError } from "@open-mercato/shared/lib/crud/errors";
-import { buildChanges, requireId } from "@open-mercato/shared/lib/commands/helpers";
+import { buildChanges, emitCrudSideEffects, emitCrudUndoSideEffects, requireId } from "@open-mercato/shared/lib/commands/helpers";
 import { extractUndoPayload } from "@open-mercato/shared/lib/commands/undo";
+import { resolveRedoSnapshot } from "@open-mercato/shared/lib/commands/redo";
+import { E } from "../../../generated/entities.ids.generated.js";
 function assertGlobalToggleSuperAdmin(ctx) {
   if (ctx.systemActor === true) return;
   if (ctx.auth?.isSuperAdmin !== true) {
     throw new CrudHttpError(403, { error: "Global feature toggles can only be managed by a super administrator." });
   }
 }
+const featureToggleCrudIndexer = { entityType: E.feature_toggles.feature_toggle };
+function featureToggleIdentifiers(toggle, ctx) {
+  return {
+    id: toggle.id,
+    organizationId: null,
+    tenantId: ctx.auth?.tenantId ?? null
+  };
+}
 async function loadToggleSnapshot(em, id) {
   const toggle = await em.findOne(FeatureToggle, { id });
   if (!toggle) return null;
@@ -39,6 +49,10 @@ const createToggleCommand = {
     assertGlobalToggleSuperAdmin(ctx);
     const parsed = toggleCreateSchema.parse(rawInput);
     const em = ctx.container.resolve("em").fork();
+    const existing = await em.findOne(FeatureToggle, { identifier: parsed.identifier });
+    if (existing) {
+      throw new CrudHttpError(400, { error: "Feature toggle identifier already exists" });
+    }
     const toggle = em.create(FeatureToggle, {
       identifier: parsed.identifier,
       name: parsed.name,
@@ -49,6 +63,15 @@ const createToggleCommand = {
     });
     em.persist(toggle);
     await em.flush();
+    const dataEngine = ctx.container.resolve("dataEngine");
+    await emitCrudSideEffects({
+      dataEngine,
+      action: "created",
+      entity: toggle,
+      identifiers: featureToggleIdentifiers(toggle, ctx),
+      syncOrigin: ctx.syncOrigin,
+      indexer: featureToggleCrudIndexer
+    });
     return { toggleId: toggle.id };
   },
   captureAfter: async (_input, result, ctx) => {
@@ -83,9 +106,57 @@ const createToggleCommand = {
     if (toggle) {
       em.remove(toggle);
       await em.flush();
+      const dataEngine = ctx.container.resolve("dataEngine");
+      await emitCrudUndoSideEffects({
+        dataEngine,
+        action: "deleted",
+        entity: toggle,
+        identifiers: featureToggleIdentifiers(toggle, ctx),
+        syncOrigin: ctx.syncOrigin,
+        indexer: featureToggleCrudIndexer
+      });
       const featureTogglesService = ctx.container.resolve("featureTogglesService");
       await featureTogglesService.invalidateIsEnabledCacheByIdentifierTag(toggle.identifier);
     }
+  },
+  redo: async ({ logEntry, ctx }) => {
+    const after = resolveRedoSnapshot(logEntry);
+    if (!after) throw new CrudHttpError(400, { error: "[internal] redo snapshot unavailable for toggle create" });
+    const em = ctx.container.resolve("em").fork();
+    let toggle = await em.findOne(FeatureToggle, { id: after.id });
+    if (!toggle) {
+      toggle = em.create(FeatureToggle, {
+        id: after.id,
+        identifier: after.identifier,
+        name: after.name,
+        description: after.description,
+        category: after.category,
+        type: after.type,
+        defaultValue: after.defaultValue
+      });
+      em.persist(toggle);
+    } else {
+      toggle.deletedAt = null;
+      toggle.identifier = after.identifier;
+      toggle.name = after.name;
+      toggle.description = after.description;
+      toggle.category = after.category;
+      toggle.type = after.type;
+      toggle.defaultValue = after.defaultValue;
+    }
+    await em.flush();
+    const dataEngine = ctx.container.resolve("dataEngine");
+    await emitCrudSideEffects({
+      dataEngine,
+      action: "created",
+      entity: toggle,
+      identifiers: featureToggleIdentifiers(toggle, ctx),
+      syncOrigin: ctx.syncOrigin,
+      indexer: featureToggleCrudIndexer
+    });
+    const featureTogglesService = ctx.container.resolve("featureTogglesService");
+    await featureTogglesService.invalidateIsEnabledCacheByIdentifierTag(toggle.identifier);
+    return { toggleId: toggle.id };
   }
 };
 const updateToggleCommand = {
@@ -100,8 +171,15 @@ const updateToggleCommand = {
     assertGlobalToggleSuperAdmin(ctx);
     const parsed = toggleUpdateSchema.parse(rawInput);
     const em = ctx.container.resolve("em").fork();
-    const toggle = await em.findOne(FeatureToggle, { id: parsed.id });
+    const toggle = await em.findOne(FeatureToggle, { id: parsed.id, deletedAt: null });
     if (!toggle) throw new CrudHttpError(404, { error: "Toggle not found" });
+    const previousIdentifier = toggle.identifier;
+    if (parsed.identifier && parsed.identifier !== toggle.identifier) {
+      const existing = await em.findOne(FeatureToggle, { identifier: parsed.identifier });
+      if (existing && existing.id !== toggle.id) {
+        throw new CrudHttpError(400, { error: "Feature toggle identifier already exists" });
+      }
+    }
     toggle.identifier = parsed.identifier ?? toggle.identifier;
     toggle.name = parsed.name ?? toggle.name;
     toggle.description = parsed.description ?? toggle.description;
@@ -109,7 +187,19 @@ const updateToggleCommand = {
     toggle.type = parsed.type ?? toggle.type;
     toggle.defaultValue = parsed.defaultValue ?? toggle.defaultValue;
     await em.flush();
+    const dataEngine = ctx.container.resolve("dataEngine");
+    await emitCrudSideEffects({
+      dataEngine,
+      action: "updated",
+      entity: toggle,
+      identifiers: featureToggleIdentifiers(toggle, ctx),
+      syncOrigin: ctx.syncOrigin,
+      indexer: featureToggleCrudIndexer
+    });
     const featureTogglesService = ctx.container.resolve("featureTogglesService");
+    if (previousIdentifier !== toggle.identifier) {
+      await featureTogglesService.invalidateIsEnabledCacheByIdentifierTag(previousIdentifier);
+    }
     await featureTogglesService.invalidateIsEnabledCacheByIdentifierTag(toggle.identifier);
     return { toggleId: toggle.id };
   },
@@ -171,8 +261,20 @@ const updateToggleCommand = {
       toggle.name = before.name;
       toggle.description = before.description;
       toggle.category = before.category;
+      toggle.type = before.type;
+      toggle.defaultValue = before.defaultValue;
+      toggle.deletedAt = null;
     }
     await em.flush();
+    const dataEngine = ctx.container.resolve("dataEngine");
+    await emitCrudUndoSideEffects({
+      dataEngine,
+      action: "updated",
+      entity: toggle,
+      identifiers: featureToggleIdentifiers(toggle, ctx),
+      syncOrigin: ctx.syncOrigin,
+      indexer: featureToggleCrudIndexer
+    });
     const featureTogglesService = ctx.container.resolve("featureTogglesService");
     await featureTogglesService.invalidateIsEnabledCacheByIdentifierTag(toggle.identifier);
   }
@@ -190,16 +292,21 @@ const deleteToggleCommand = {
     assertGlobalToggleSuperAdmin(ctx);
     const id = requireId(input, "Feature toggle id required");
     const em = ctx.container.resolve("em").fork();
-    const toggle = await em.findOne(FeatureToggle, { id });
+    const toggle = await em.findOne(FeatureToggle, { id, deletedAt: null });
     if (!toggle) throw new CrudHttpError(404, { error: "Feature toggle not found" });
     const featureTogglesService = ctx.container.resolve("featureTogglesService");
     await featureTogglesService.invalidateIsEnabledCacheByIdentifierTag(toggle.identifier);
-    const overrides = await em.find(FeatureToggleOverride, { toggle: toggle.id });
-    if (overrides.length > 0) {
-      em.remove(overrides);
-    }
-    em.remove(toggle);
+    toggle.deletedAt = /* @__PURE__ */ new Date();
     await em.flush();
+    const dataEngine = ctx.container.resolve("dataEngine");
+    await emitCrudSideEffects({
+      dataEngine,
+      action: "deleted",
+      entity: toggle,
+      identifiers: featureToggleIdentifiers(toggle, ctx),
+      syncOrigin: ctx.syncOrigin,
+      indexer: featureToggleCrudIndexer
+    });
     return { toggleId: toggle.id };
   },
   buildLog: async ({ snapshots }) => {
@@ -254,10 +361,22 @@ const deleteToggleCommand = {
       toggle.name = before.name;
       toggle.description = before.description;
       toggle.category = before.category;
+      toggle.type = before.type;
+      toggle.defaultValue = before.defaultValue;
+      toggle.deletedAt = null;
     }
     const featureTogglesService = ctx.container.resolve("featureTogglesService");
     await featureTogglesService.invalidateIsEnabledCacheByIdentifierTag(toggle.identifier);
     await em.flush();
+    const dataEngine = ctx.container.resolve("dataEngine");
+    await emitCrudUndoSideEffects({
+      dataEngine,
+      action: "updated",
+      entity: toggle,
+      identifiers: featureToggleIdentifiers(toggle, ctx),
+      syncOrigin: ctx.syncOrigin,
+      indexer: featureToggleCrudIndexer
+    });
   }
 };
 registerCommand(createToggleCommand);