@open-mercato/core 0.6.4-develop.4371.1.8f3030407e → 0.6.4

package/dist/modules/inbox_ops/data/validators.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/inbox_ops/data/validators.ts"],
-  "sourcesContent": ["import { z } from 'zod'\n\nconst uuid = () => z.string().uuid()\nconst coerceNumericString = z.preprocess(\n  (val) => (typeof val === 'number' ? String(val) : val),\n  z.string().regex(/^\\d+(\\.\\d+)?$/),\n)\n\n// ---------------------------------------------------------------------------\n// Action Payload Schemas\n// ---------------------------------------------------------------------------\n\nconst addressSchema = z.object({\n  line1: z.string().trim().max(500).optional(),\n  line2: z.string().trim().max(500).optional(),\n  city: z.string().trim().max(200).optional(),\n  state: z.string().trim().max(200).optional(),\n  postalCode: z.string().trim().max(50).optional(),\n  country: z.string().trim().max(200).optional(),\n  company: z.string().trim().max(300).optional(),\n  contactName: z.string().trim().max(300).optional(),\n}).optional()\n\nexport const orderPayloadSchema = z.object({\n  customerEntityId: uuid().optional(),\n  customerName: z.string().trim().min(1).max(300),\n  customerEmail: z.string().trim().email().max(320).optional(),\n  channelId: uuid().optional(),\n  currencyCode: z.string().trim().length(3),\n  taxRateId: uuid().optional(),\n  lineItems: z.array(z.object({\n    productName: z.string().trim().min(1).max(300),\n    productId: uuid().optional(),\n    variantId: uuid().optional(),\n    sku: z.string().trim().max(100).optional(),\n    quantity: coerceNumericString,\n    unitPrice: coerceNumericString.optional(),\n    catalogPrice: z.string().optional(),\n    kind: z.enum(['product', 'service']).default('product'),\n    description: z.string().trim().max(2000).optional(),\n  })).min(1).max(100),\n  requestedDeliveryDate: z.string().optional(),\n  notes: z.string().trim().max(4000).optional(),\n  customerReference: z.string().trim().max(200).optional(),\n  shippingAddress: addressSchema,\n  billingAddress: addressSchema,\n  shippingAddressId: uuid().optional(),\n  billingAddressId: uuid().optional(),\n})\n\nexport const updateOrderPayloadSchema = z\n  .object({\n    orderId: uuid().optional(),\n    orderNumber: z.string().trim().max(100).optional(),\n    quantityChanges: z.array(z.object({\n      lineItemName: z.string().trim().min(1).max(300),\n      lineItemId: uuid().optional(),\n      oldQuantity: z.string().optional(),\n      newQuantity: z.string().regex(/^\\d+(\\.\\d+)?$/),\n    })).optional(),\n    deliveryDateChange: z.object({\n      oldDate: z.string().optional(),\n      newDate: z.string(),\n    }).optional(),\n    noteAdditions: z.array(z.string().trim().max(4000)).optional(),\n  })\n  .refine((value) => Boolean(value.orderId || value.orderNumber), {\n    message: 'order_reference_required',\n  })\n\nexport const updateShipmentPayloadSchema = z\n  .object({\n    orderId: uuid().optional(),\n    orderNumber: z.string().trim().max(100).optional(),\n    trackingNumbers: z.array(z.string().trim().max(200)).optional(),\n    carrierName: z.string().trim().max(200).optional(),\n    statusLabel: z.string().trim().min(1).max(200),\n    shippedAt: z.string().optional(),\n    deliveredAt: z.string().optional(),\n    estimatedDelivery: z.string().optional(),\n    notes: z.string().trim().max(4000).optional(),\n  })\n  .refine((value) => Boolean(value.orderId || value.orderNumber), {\n    message: 'order_reference_required',\n  })\n\nconst lowercaseContactType = z.preprocess(\n  (val) => (typeof val === 'string' ? val.toLowerCase() : val),\n  z.enum(['person', 'company']),\n)\n\nexport const createContactPayloadSchema = z.object({\n  type: lowercaseContactType,\n  name: z.string().trim().min(1).max(300),\n  email: z.string().trim().email().max(320).optional(),\n  phone: z.string().trim().max(50).optional(),\n  companyName: z.string().trim().max(300).optional(),\n  role: z.string().trim().max(150).optional(),\n  source: z.literal('inbox_ops').default('inbox_ops'),\n})\n\nexport const linkContactPayloadSchema = z.object({\n  emailAddress: z.string().trim().email().max(320),\n  contactId: uuid(),\n  contactType: lowercaseContactType,\n  contactName: z.string().trim().min(1).max(300),\n})\n\nexport const createProductPayloadSchema = z.object({\n  title: z.string().trim().min(1).max(255),\n  sku: z.string().trim().max(100).optional(),\n  unitPrice: coerceNumericString.optional(),\n  currencyCode: z.string().trim().length(3).optional(),\n  kind: z.enum(['product', 'service']).default('product'),\n  description: z.string().trim().max(4000).optional(),\n})\n\nexport const logActivityPayloadSchema = z.object({\n  contactId: uuid().optional(),\n  contactType: lowercaseContactType,\n  contactName: z.string().trim().min(1).max(300),\n  activityType: z.enum(['email', 'call', 'meeting', 'note']),\n  subject: z.string().trim().min(1).max(200),\n  body: z.string().trim().max(8000),\n})\n\nexport const draftReplyPayloadSchema = z.object({\n  to: z.string().trim().email().max(320),\n  toName: z.string().trim().max(300).optional().nullable(),\n  replyTo: z.string().trim().email().max(320).optional().nullable(),\n  subject: z.string().trim().min(1).max(500),\n  body: z.string().trim().min(1).max(10000),\n  inReplyToMessageId: z.string().trim().max(500).optional().nullable(),\n  references: z.array(z.string().trim().max(500)).optional().nullable(),\n  context: z.string().trim().max(4000).optional().nullable(),\n})\n\n// ---------------------------------------------------------------------------\n// Category\n// ---------------------------------------------------------------------------\n\nexport const inboxProposalCategoryEnum = z.enum([\n  'rfq',\n  'order',\n  'order_update',\n  'complaint',\n  'shipping_update',\n  'inquiry',\n  'payment',\n  'other',\n])\n\nexport const ALL_CATEGORIES = inboxProposalCategoryEnum.options\n\nconst proposalCategoryFilterSchema = z.string()\n  .trim()\n  .max(200)\n  .refine((value) => {\n    const categories = value.split(',').map((category) => category.trim()).filter(Boolean)\n    return (\n      categories.length > 0 &&\n      categories.every((category) => inboxProposalCategoryEnum.safeParse(category).success)\n    )\n  }, {\n    message: `Category filter must contain only: ${ALL_CATEGORIES.join(', ')}`,\n  })\n\nexport const categorizeProposalSchema = z.object({\n  category: inboxProposalCategoryEnum,\n})\n\n// ---------------------------------------------------------------------------\n// LLM Extraction Output Schema\n// ---------------------------------------------------------------------------\n\nexport const extractedParticipantSchema = z.object({\n  name: z.string(),\n  email: z.string(),\n  role: z.enum(['buyer', 'seller', 'logistics', 'finance', 'other']),\n})\n\nexport const extractedActionSchema = z.object({\n  actionType: z.enum([\n    'create_order',\n    'create_quote',\n    'update_order',\n    'update_shipment',\n    'create_contact',\n    'create_product',\n    'link_contact',\n    'log_activity',\n    'draft_reply',\n  ]),\n  description: z.string(),\n  confidence: z.number(),\n  requiredFeature: z.string().optional(),\n  payloadJson: z.string().describe('JSON-encoded payload object for this action'),\n})\n\nexport const extractedDiscrepancySchema = z.object({\n  type: z.enum([\n    'price_mismatch',\n    'quantity_mismatch',\n    'unknown_contact',\n    'currency_mismatch',\n    'date_conflict',\n    'product_not_found',\n    'duplicate_order',\n    'other',\n  ]),\n  severity: z.enum(['warning', 'error']),\n  description: z.string(),\n  expectedValue: z.string().optional(),\n  foundValue: z.string().optional(),\n  actionIndex: z.number().optional(),\n})\n\nexport const extractionOutputSchema = z.object({\n  summary: z.string(),\n  category: inboxProposalCategoryEnum.optional(),\n  participants: z.array(extractedParticipantSchema),\n  proposedActions: z.array(extractedActionSchema),\n  discrepancies: z.array(extractedDiscrepancySchema),\n  draftReplies: z.array(z.object({\n    to: z.string(),\n    toName: z.string().optional(),\n    subject: z.string(),\n    body: z.string(),\n    context: z.string().optional(),\n  })),\n  confidence: z.number(),\n  detectedLanguage: z.string().optional(),\n  possiblyIncomplete: z.boolean().optional(),\n})\n\nexport type ExtractionOutput = z.infer<typeof extractionOutputSchema>\nexport type OrderPayload = z.infer<typeof orderPayloadSchema>\nexport type UpdateOrderPayload = z.infer<typeof updateOrderPayloadSchema>\nexport type UpdateShipmentPayload = z.infer<typeof updateShipmentPayloadSchema>\nexport type CreateContactPayload = z.infer<typeof createContactPayloadSchema>\nexport type CreateProductPayload = z.infer<typeof createProductPayloadSchema>\nexport type LinkContactPayload = z.infer<typeof linkContactPayloadSchema>\nexport type LogActivityPayload = z.infer<typeof logActivityPayloadSchema>\nexport type DraftReplyPayload = z.infer<typeof draftReplyPayloadSchema>\n\n// ---------------------------------------------------------------------------\n// Translation / Settings Schemas\n// ---------------------------------------------------------------------------\n\nexport const translateProposalSchema = z.object({\n  targetLocale: z.enum(['en', 'de', 'es', 'pl']),\n})\n\nexport const updateSettingsSchema = z.object({\n  workingLanguage: z.enum(['en', 'de', 'es', 'pl']).optional(),\n  isActive: z.boolean().optional(),\n})\n\n// ---------------------------------------------------------------------------\n// API Query Schemas\n// ---------------------------------------------------------------------------\n\nexport const proposalListQuerySchema = z.object({\n  status: z.enum(['pending', 'partial', 'accepted', 'rejected']).optional(),\n  category: proposalCategoryFilterSchema.optional(),\n  search: z.string().trim().max(200).optional(),\n  page: z.coerce.number().int().min(1).default(1),\n  pageSize: z.coerce.number().int().min(1).max(100).default(25),\n})\n\nexport const emailListQuerySchema = z.object({\n  status: z.enum(['received', 'processing', 'processed', 'needs_review', 'failed']).optional(),\n  page: z.coerce.number().int().min(1).default(1),\n  pageSize: z.coerce.number().int().min(1).max(100).default(25),\n})\n\nexport const actionEditSchema = z.object({\n  payload: z.record(z.string(), z.unknown()),\n})\n\nconst ACTION_PAYLOAD_SCHEMAS: Record<string, z.ZodType> = {\n  create_order: orderPayloadSchema,\n  create_quote: orderPayloadSchema,\n  update_order: updateOrderPayloadSchema,\n  update_shipment: updateShipmentPayloadSchema,\n  create_contact: createContactPayloadSchema,\n  create_product: createProductPayloadSchema,\n  link_contact: linkContactPayloadSchema,\n  log_activity: logActivityPayloadSchema,\n  draft_reply: draftReplyPayloadSchema,\n}\n\nexport function validateActionPayloadForType(\n  actionType: string,\n  payload: Record<string, unknown>,\n): { success: true } | { success: false; error: string } {\n  const schema = ACTION_PAYLOAD_SCHEMAS[actionType]\n  if (!schema) {\n    return { success: true }\n  }\n\n  const result = schema.safeParse(payload)\n  if (!result.success) {\n    const issues = result.error.issues.map((i) => `${i.path.join('.')}: ${i.message}`).join('; ')\n    return { success: false, error: `Invalid payload for ${actionType}: ${issues}` }\n  }\n  return { success: true }\n}\n"],
-  "mappings": "AAAA,SAAS,SAAS;AAElB,MAAM,OAAO,MAAM,EAAE,OAAO,EAAE,KAAK;AACnC,MAAM,sBAAsB,EAAE;AAAA,EAC5B,CAAC,QAAS,OAAO,QAAQ,WAAW,OAAO,GAAG,IAAI;AAAA,EAClD,EAAE,OAAO,EAAE,MAAM,eAAe;AAClC;AAMA,MAAM,gBAAgB,EAAE,OAAO;AAAA,EAC7B,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EAC3C,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EAC3C,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EAC1C,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EAC3C,YAAY,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,SAAS;AAAA,EAC/C,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EAC7C,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EAC7C,aAAa,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,SAAS;AACnD,CAAC,EAAE,SAAS;AAEL,MAAM,qBAAqB,EAAE,OAAO;AAAA,EACzC,kBAAkB,KAAK,EAAE,SAAS;AAAA,EAClC,cAAc,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EAC9C,eAAe,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EAC3D,WAAW,KAAK,EAAE,SAAS;AAAA,EAC3B,cAAc,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC;AAAA,EACxC,WAAW,KAAK,EAAE,SAAS;AAAA,EAC3B,WAAW,EAAE,MAAM,EAAE,OAAO;AAAA,IAC1B,aAAa,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,IAC7C,WAAW,KAAK,EAAE,SAAS;AAAA,IAC3B,WAAW,KAAK,EAAE,SAAS;AAAA,IAC3B,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,IACzC,UAAU;AAAA,IACV,WAAW,oBAAoB,SAAS;AAAA,IACxC,cAAc,EAAE,OAAO,EAAE,SAAS;AAAA,IAClC,MAAM,EAAE,KAAK,CAAC,WAAW,SAAS,CAAC,EAAE,QAAQ,SAAS;AAAA,IACtD,aAAa,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,GAAI,EAAE,SAAS;AAAA,EACpD,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EAClB,uBAAuB,EAAE,OAAO,EAAE,SAAS;AAAA,EAC3C,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,GAAI,EAAE,SAAS;AAAA,EAC5C,mBAAmB,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EACvD,iBAAiB;AAAA,EACjB,gBAAgB;AAAA,EAChB,mBAAmB,KAAK,EAAE,SAAS;AAAA,EACnC,kBAAkB,KAAK,EAAE,SAAS;AACpC,CAAC;AAEM,MAAM,2BAA2B,EACrC,OAAO;AAAA,EACN,SAAS,KAAK,EAAE,SAAS;AAAA,EACzB,aAAa,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EACjD,iBAAiB,EAAE,MAAM,EAAE,OAAO;AAAA,IAChC,cAAc,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,IAC9C,YAAY,KAAK,EAAE,SAAS;AAAA,IAC5B,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,IACjC,aAAa,EAAE,OAAO,EAAE,MAAM,eAAe;AAAA,EAC/C,CAAC,CAAC,EAAE,SAAS;AAAA,EACb,oBAAoB,EAAE,OAAO;AAAA,IAC3B,SAAS,EAAE,OAAO,EAAE,SAAS;AAAA,IAC7B,SAAS,EAAE,OAAO;AAAA,EACpB,CAAC,EAAE,SAAS;AAAA,EACZ,eAAe,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,GAAI,CAAC,EAAE,SAAS;AAC/D,CAAC,EACA,OAAO,CAAC,UAAU,QAAQ,MAAM,WAAW,MAAM,WAAW,GAAG;AAAA,EAC9D,SAAS;AACX,CAAC;AAEI,MAAM,8BAA8B,EACxC,OAAO;AAAA,EACN,SAAS,KAAK,EAAE,SAAS;AAAA,EACzB,aAAa,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EACjD,iBAAiB,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,GAAG,CAAC,EAAE,SAAS;AAAA,EAC9D,aAAa,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EACjD,aAAa,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EAC7C,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,EACjC,mBAAmB,EAAE,OAAO,EAAE,SAAS;AAAA,EACvC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,GAAI,EAAE,SAAS;AAC9C,CAAC,EACA,OAAO,CAAC,UAAU,QAAQ,MAAM,WAAW,MAAM,WAAW,GAAG;AAAA,EAC9D,SAAS;AACX,CAAC;AAEH,MAAM,uBAAuB,EAAE;AAAA,EAC7B,CAAC,QAAS,OAAO,QAAQ,WAAW,IAAI,YAAY,IAAI;AAAA,EACxD,EAAE,KAAK,CAAC,UAAU,SAAS,CAAC;AAC9B;AAEO,MAAM,6BAA6B,EAAE,OAAO;AAAA,EACjD,MAAM;AAAA,EACN,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EACtC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EACnD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,SAAS;AAAA,EAC1C,aAAa,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EACjD,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EAC1C,QAAQ,EAAE,QAAQ,WAAW,EAAE,QAAQ,WAAW;AACpD,CAAC;AAEM,MAAM,2BAA2B,EAAE,OAAO;AAAA,EAC/C,cAAc,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,GAAG;AAAA,EAC/C,WAAW,KAAK;AAAA,EAChB,aAAa;AAAA,EACb,aAAa,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAC/C,CAAC;AAEM,MAAM,6BAA6B,EAAE,OAAO;AAAA,EACjD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EACvC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EACzC,WAAW,oBAAoB,SAAS;AAAA,EACxC,cAAc,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,EAAE,SAAS;AAAA,EACnD,MAAM,EAAE,KAAK,CAAC,WAAW,SAAS,CAAC,EAAE,QAAQ,SAAS;AAAA,EACtD,aAAa,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,GAAI,EAAE,SAAS;AACpD,CAAC;AAEM,MAAM,2BAA2B,EAAE,OAAO;AAAA,EAC/C,WAAW,KAAK,EAAE,SAAS;AAAA,EAC3B,aAAa;AAAA,EACb,aAAa,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EAC7C,cAAc,EAAE,KAAK,CAAC,SAAS,QAAQ,WAAW,MAAM,CAAC;AAAA,EACzD,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EACzC,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,GAAI;AAClC,CAAC;AAEM,MAAM,0BAA0B,EAAE,OAAO;AAAA,EAC9C,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,GAAG;AAAA,EACrC,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,SAAS,EAAE,SAAS;AAAA,EACvD,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,GAAG,EAAE,SAAS,EAAE,SAAS;AAAA,EAChE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EACzC,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,GAAK;AAAA,EACxC,oBAAoB,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,SAAS,EAAE,SAAS;AAAA,EACnE,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,GAAG,CAAC,EAAE,SAAS,EAAE,SAAS;AAAA,EACpE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,GAAI,EAAE,SAAS,EAAE,SAAS;AAC3D,CAAC;AAMM,MAAM,4BAA4B,EAAE,KAAK;AAAA,EAC9C;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAEM,MAAM,iBAAiB,0BAA0B;AAExD,MAAM,+BAA+B,EAAE,OAAO,EAC3C,KAAK,EACL,IAAI,GAAG,EACP,OAAO,CAAC,UAAU;AACjB,QAAM,aAAa,MAAM,MAAM,GAAG,EAAE,IAAI,CAAC,aAAa,SAAS,KAAK,CAAC,EAAE,OAAO,OAAO;AACrF,SACE,WAAW,SAAS,KACpB,WAAW,MAAM,CAAC,aAAa,0BAA0B,UAAU,QAAQ,EAAE,OAAO;AAExF,GAAG;AAAA,EACD,SAAS,sCAAsC,eAAe,KAAK,IAAI,CAAC;AAC1E,CAAC;AAEI,MAAM,2BAA2B,EAAE,OAAO;AAAA,EAC/C,UAAU;AACZ,CAAC;AAMM,MAAM,6BAA6B,EAAE,OAAO;AAAA,EACjD,MAAM,EAAE,OAAO;AAAA,EACf,OAAO,EAAE,OAAO;AAAA,EAChB,MAAM,EAAE,KAAK,CAAC,SAAS,UAAU,aAAa,WAAW,OAAO,CAAC;AACnE,CAAC;AAEM,MAAM,wBAAwB,EAAE,OAAO;AAAA,EAC5C,YAAY,EAAE,KAAK;AAAA,IACjB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,CAAC;AAAA,EACD,aAAa,EAAE,OAAO;AAAA,EACtB,YAAY,EAAE,OAAO;AAAA,EACrB,iBAAiB,EAAE,OAAO,EAAE,SAAS;AAAA,EACrC,aAAa,EAAE,OAAO,EAAE,SAAS,6CAA6C;AAChF,CAAC;AAEM,MAAM,6BAA6B,EAAE,OAAO;AAAA,EACjD,MAAM,EAAE,KAAK;AAAA,IACX;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,CAAC;AAAA,EACD,UAAU,EAAE,KAAK,CAAC,WAAW,OAAO,CAAC;AAAA,EACrC,aAAa,EAAE,OAAO;AAAA,EACtB,eAAe,EAAE,OAAO,EAAE,SAAS;AAAA,EACnC,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,EAChC,aAAa,EAAE,OAAO,EAAE,SAAS;AACnC,CAAC;AAEM,MAAM,yBAAyB,EAAE,OAAO;AAAA,EAC7C,SAAS,EAAE,OAAO;AAAA,EAClB,UAAU,0BAA0B,SAAS;AAAA,EAC7C,cAAc,EAAE,MAAM,0BAA0B;AAAA,EAChD,iBAAiB,EAAE,MAAM,qBAAqB;AAAA,EAC9C,eAAe,EAAE,MAAM,0BAA0B;AAAA,EACjD,cAAc,EAAE,MAAM,EAAE,OAAO;AAAA,IAC7B,IAAI,EAAE,OAAO;AAAA,IACb,QAAQ,EAAE,OAAO,EAAE,SAAS;AAAA,IAC5B,SAAS,EAAE,OAAO;AAAA,IAClB,MAAM,EAAE,OAAO;AAAA,IACf,SAAS,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,CAAC,CAAC;AAAA,EACF,YAAY,EAAE,OAAO;AAAA,EACrB,kBAAkB,EAAE,OAAO,EAAE,SAAS;AAAA,EACtC,oBAAoB,EAAE,QAAQ,EAAE,SAAS;AAC3C,CAAC;AAgBM,MAAM,0BAA0B,EAAE,OAAO;AAAA,EAC9C,cAAc,EAAE,KAAK,CAAC,MAAM,MAAM,MAAM,IAAI,CAAC;AAC/C,CAAC;AAEM,MAAM,uBAAuB,EAAE,OAAO;AAAA,EAC3C,iBAAiB,EAAE,KAAK,CAAC,MAAM,MAAM,MAAM,IAAI,CAAC,EAAE,SAAS;AAAA,EAC3D,UAAU,EAAE,QAAQ,EAAE,SAAS;AACjC,CAAC;AAMM,MAAM,0BAA0B,EAAE,OAAO;AAAA,EAC9C,QAAQ,EAAE,KAAK,CAAC,WAAW,WAAW,YAAY,UAAU,CAAC,EAAE,SAAS;AAAA,EACxE,UAAU,6BAA6B,SAAS;AAAA,EAChD,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EAC5C,MAAM,EAAE,OAAO,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,QAAQ,CAAC;AAAA,EAC9C,UAAU,EAAE,OAAO,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,QAAQ,EAAE;AAC9D,CAAC;AAEM,MAAM,uBAAuB,EAAE,OAAO;AAAA,EAC3C,QAAQ,EAAE,KAAK,CAAC,YAAY,cAAc,aAAa,gBAAgB,QAAQ,CAAC,EAAE,SAAS;AAAA,EAC3F,MAAM,EAAE,OAAO,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,QAAQ,CAAC;AAAA,EAC9C,UAAU,EAAE,OAAO,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,QAAQ,EAAE;AAC9D,CAAC;AAEM,MAAM,mBAAmB,EAAE,OAAO;AAAA,EACvC,SAAS,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC;AAC3C,CAAC;AAED,MAAM,yBAAoD;AAAA,EACxD,cAAc;AAAA,EACd,cAAc;AAAA,EACd,cAAc;AAAA,EACd,iBAAiB;AAAA,EACjB,gBAAgB;AAAA,EAChB,gBAAgB;AAAA,EAChB,cAAc;AAAA,EACd,cAAc;AAAA,EACd,aAAa;AACf;AAEO,SAAS,6BACd,YACA,SACuD;AACvD,QAAM,SAAS,uBAAuB,UAAU;AAChD,MAAI,CAAC,QAAQ;AACX,WAAO,EAAE,SAAS,KAAK;AAAA,EACzB;AAEA,QAAM,SAAS,OAAO,UAAU,OAAO;AACvC,MAAI,CAAC,OAAO,SAAS;AACnB,UAAM,SAAS,OAAO,MAAM,OAAO,IAAI,CAAC,MAAM,GAAG,EAAE,KAAK,KAAK,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,KAAK,IAAI;AAC5F,WAAO,EAAE,SAAS,OAAO,OAAO,uBAAuB,UAAU,KAAK,MAAM,GAAG;AAAA,EACjF;AACA,SAAO,EAAE,SAAS,KAAK;AACzB;",
+  "sourcesContent": ["import { z } from 'zod'\n\nconst uuid = () => z.string().uuid()\nconst coerceNumericString = z.preprocess(\n  (val) => (typeof val === 'number' ? String(val) : val),\n  z.string().regex(/^\\d+(\\.\\d+)?$/),\n)\n\n// ---------------------------------------------------------------------------\n// Action Payload Schemas\n// ---------------------------------------------------------------------------\n\nconst addressSchema = z.object({\n  line1: z.string().trim().max(500).optional(),\n  line2: z.string().trim().max(500).optional(),\n  city: z.string().trim().max(200).optional(),\n  state: z.string().trim().max(200).optional(),\n  postalCode: z.string().trim().max(50).optional(),\n  country: z.string().trim().max(200).optional(),\n  company: z.string().trim().max(300).optional(),\n  contactName: z.string().trim().max(300).optional(),\n}).optional()\n\nexport const orderPayloadSchema = z.object({\n  customerEntityId: uuid().optional(),\n  customerName: z.string().trim().min(1).max(300),\n  customerEmail: z.string().trim().email().max(320).optional(),\n  channelId: uuid().optional(),\n  currencyCode: z.string().trim().length(3),\n  taxRateId: uuid().optional(),\n  lineItems: z.array(z.object({\n    productName: z.string().trim().min(1).max(300),\n    productId: uuid().optional(),\n    variantId: uuid().optional(),\n    sku: z.string().trim().max(100).optional(),\n    quantity: coerceNumericString,\n    unitPrice: coerceNumericString.optional(),\n    catalogPrice: z.string().optional(),\n    kind: z.enum(['product', 'service']).default('product'),\n    description: z.string().trim().max(2000).optional(),\n  })).min(1).max(100),\n  requestedDeliveryDate: z.string().optional(),\n  notes: z.string().trim().max(4000).optional(),\n  customerReference: z.string().trim().max(200).optional(),\n  shippingAddress: addressSchema,\n  billingAddress: addressSchema,\n  shippingAddressId: uuid().optional(),\n  billingAddressId: uuid().optional(),\n})\n\nexport const updateOrderPayloadSchema = z\n  .object({\n    orderId: uuid().optional(),\n    orderNumber: z.string().trim().max(100).optional(),\n    quantityChanges: z.array(z.object({\n      lineItemName: z.string().trim().min(1).max(300),\n      lineItemId: uuid().optional(),\n      oldQuantity: z.string().optional(),\n      newQuantity: z.string().regex(/^\\d+(\\.\\d+)?$/),\n    })).optional(),\n    deliveryDateChange: z.object({\n      oldDate: z.string().optional(),\n      newDate: z.string(),\n    }).optional(),\n    noteAdditions: z.array(z.string().trim().max(4000)).optional(),\n  })\n  .refine((value) => Boolean(value.orderId || value.orderNumber), {\n    message: 'order_reference_required',\n  })\n\nexport const updateShipmentPayloadSchema = z\n  .object({\n    orderId: uuid().optional(),\n    orderNumber: z.string().trim().max(100).optional(),\n    trackingNumbers: z.array(z.string().trim().max(200)).optional(),\n    carrierName: z.string().trim().max(200).optional(),\n    statusLabel: z.string().trim().min(1).max(200),\n    shippedAt: z.string().optional(),\n    deliveredAt: z.string().optional(),\n    estimatedDelivery: z.string().optional(),\n    notes: z.string().trim().max(4000).optional(),\n  })\n  .refine((value) => Boolean(value.orderId || value.orderNumber), {\n    message: 'order_reference_required',\n  })\n\nconst lowercaseContactType = z.preprocess(\n  (val) => (typeof val === 'string' ? val.toLowerCase() : val),\n  z.enum(['person', 'company']),\n)\n\nexport const createContactPayloadSchema = z.object({\n  type: lowercaseContactType,\n  name: z.string().trim().min(1).max(300),\n  email: z.string().trim().email().max(320).optional(),\n  phone: z.string().trim().max(50).optional(),\n  companyName: z.string().trim().max(300).optional(),\n  role: z.string().trim().max(150).optional(),\n  source: z.literal('inbox_ops').default('inbox_ops'),\n})\n\nexport const linkContactPayloadSchema = z.object({\n  emailAddress: z.string().trim().email().max(320),\n  contactId: uuid(),\n  contactType: lowercaseContactType,\n  contactName: z.string().trim().min(1).max(300),\n})\n\nexport const createProductPayloadSchema = z.object({\n  title: z.string().trim().min(1).max(255),\n  sku: z.string().trim().max(100).optional(),\n  unitPrice: coerceNumericString.optional(),\n  currencyCode: z.string().trim().length(3).optional(),\n  kind: z.enum(['product', 'service']).default('product'),\n  description: z.string().trim().max(4000).optional(),\n})\n\nexport const logActivityPayloadSchema = z.object({\n  contactId: uuid().optional(),\n  contactType: lowercaseContactType,\n  contactName: z.string().trim().min(1).max(300),\n  activityType: z.enum(['email', 'call', 'meeting', 'note']),\n  subject: z.string().trim().min(1).max(200),\n  body: z.string().trim().max(8000),\n})\n\nexport const draftReplyPayloadSchema = z.object({\n  to: z.string().trim().email().max(320),\n  toName: z.string().trim().max(300).optional().nullable(),\n  replyTo: z.string().trim().email().max(320).optional().nullable(),\n  subject: z.string().trim().min(1).max(500),\n  body: z.string().trim().min(1).max(10000),\n  inReplyToMessageId: z.string().trim().max(500).optional().nullable(),\n  references: z.array(z.string().trim().max(500)).optional().nullable(),\n  context: z.string().trim().max(4000).optional().nullable(),\n})\n\n// ---------------------------------------------------------------------------\n// Category\n// ---------------------------------------------------------------------------\n\nexport const inboxProposalCategoryEnum = z.enum([\n  'rfq',\n  'order',\n  'order_update',\n  'complaint',\n  'shipping_update',\n  'inquiry',\n  'payment',\n  'other',\n])\n\nexport const ALL_CATEGORIES = inboxProposalCategoryEnum.options\n\nconst proposalCategoryFilterSchema = z.string()\n  .trim()\n  .max(200)\n  .refine((value) => {\n    const categories = value.split(',').map((category) => category.trim()).filter(Boolean)\n    return (\n      categories.length > 0 &&\n      categories.every((category) => inboxProposalCategoryEnum.safeParse(category).success)\n    )\n  }, {\n    message: `Category filter must contain only: ${ALL_CATEGORIES.join(', ')}`,\n  })\n\nexport const categorizeProposalSchema = z.object({\n  category: inboxProposalCategoryEnum,\n})\n\n// ---------------------------------------------------------------------------\n// LLM Extraction Output Schema\n// ---------------------------------------------------------------------------\n\nexport const extractedParticipantSchema = z.object({\n  name: z.string(),\n  email: z.string(),\n  role: z.enum(['buyer', 'seller', 'logistics', 'finance', 'other']),\n})\n\nexport const extractedActionSchema = z.object({\n  actionType: z.enum([\n    'create_order',\n    'create_quote',\n    'update_order',\n    'update_shipment',\n    'create_contact',\n    'create_product',\n    'link_contact',\n    'log_activity',\n    'draft_reply',\n  ]),\n  description: z.string(),\n  confidence: z.number(),\n  requiredFeature: z.string().optional(),\n  payloadJson: z.string().describe('JSON-encoded payload object for this action'),\n})\n\nexport const extractedDiscrepancySchema = z.object({\n  type: z.enum([\n    'price_mismatch',\n    'quantity_mismatch',\n    'unknown_contact',\n    'currency_mismatch',\n    'date_conflict',\n    'product_not_found',\n    'duplicate_order',\n    'other',\n  ]),\n  severity: z.enum(['warning', 'error']),\n  description: z.string(),\n  expectedValue: z.string().optional(),\n  foundValue: z.string().optional(),\n  actionIndex: z.number().optional(),\n})\n\nexport const extractionOutputSchema = z.object({\n  summary: z.string(),\n  category: inboxProposalCategoryEnum.optional(),\n  participants: z.array(extractedParticipantSchema),\n  proposedActions: z.array(extractedActionSchema),\n  discrepancies: z.array(extractedDiscrepancySchema),\n  draftReplies: z.array(z.object({\n    to: z.string(),\n    toName: z.string().optional(),\n    subject: z.string(),\n    body: z.string(),\n    context: z.string().optional(),\n  })),\n  confidence: z.number(),\n  detectedLanguage: z.string().optional(),\n  possiblyIncomplete: z.boolean().optional(),\n})\n\nexport type ExtractionOutput = z.infer<typeof extractionOutputSchema>\nexport type OrderPayload = z.infer<typeof orderPayloadSchema>\nexport type UpdateOrderPayload = z.infer<typeof updateOrderPayloadSchema>\nexport type UpdateShipmentPayload = z.infer<typeof updateShipmentPayloadSchema>\nexport type CreateContactPayload = z.infer<typeof createContactPayloadSchema>\nexport type CreateProductPayload = z.infer<typeof createProductPayloadSchema>\nexport type LinkContactPayload = z.infer<typeof linkContactPayloadSchema>\nexport type LogActivityPayload = z.infer<typeof logActivityPayloadSchema>\nexport type DraftReplyPayload = z.infer<typeof draftReplyPayloadSchema>\n\n// ---------------------------------------------------------------------------\n// Translation / Settings Schemas\n// ---------------------------------------------------------------------------\n\nexport const translateProposalSchema = z.object({\n  targetLocale: z.enum(['en', 'de', 'es', 'pl']),\n})\n\nexport const updateSettingsSchema = z.object({\n  workingLanguage: z.enum(['en', 'de', 'es', 'pl']).optional(),\n  isActive: z.boolean().optional(),\n  // Per-tenant inbound-webhook secret. Write-only: it is never returned by the\n  // settings GET. A non-empty value binds custom-provider webhook signatures for\n  // this inbox to this secret; null/empty clears it and reverts to the global key.\n  webhookSecret: z.string().trim().min(16).max(256).nullable().optional(),\n})\n\n// ---------------------------------------------------------------------------\n// API Query Schemas\n// ---------------------------------------------------------------------------\n\nexport const proposalListQuerySchema = z.object({\n  status: z.enum(['pending', 'partial', 'accepted', 'rejected']).optional(),\n  category: proposalCategoryFilterSchema.optional(),\n  search: z.string().trim().max(200).optional(),\n  page: z.coerce.number().int().min(1).default(1),\n  pageSize: z.coerce.number().int().min(1).max(100).default(25),\n})\n\nexport const emailListQuerySchema = z.object({\n  status: z.enum(['received', 'processing', 'processed', 'needs_review', 'failed']).optional(),\n  page: z.coerce.number().int().min(1).default(1),\n  pageSize: z.coerce.number().int().min(1).max(100).default(25),\n})\n\nexport const actionEditSchema = z.object({\n  payload: z.record(z.string(), z.unknown()),\n})\n\nconst ACTION_PAYLOAD_SCHEMAS: Record<string, z.ZodType> = {\n  create_order: orderPayloadSchema,\n  create_quote: orderPayloadSchema,\n  update_order: updateOrderPayloadSchema,\n  update_shipment: updateShipmentPayloadSchema,\n  create_contact: createContactPayloadSchema,\n  create_product: createProductPayloadSchema,\n  link_contact: linkContactPayloadSchema,\n  log_activity: logActivityPayloadSchema,\n  draft_reply: draftReplyPayloadSchema,\n}\n\nexport function validateActionPayloadForType(\n  actionType: string,\n  payload: Record<string, unknown>,\n): { success: true } | { success: false; error: string } {\n  const schema = ACTION_PAYLOAD_SCHEMAS[actionType]\n  if (!schema) {\n    return { success: true }\n  }\n\n  const result = schema.safeParse(payload)\n  if (!result.success) {\n    const issues = result.error.issues.map((i) => `${i.path.join('.')}: ${i.message}`).join('; ')\n    return { success: false, error: `Invalid payload for ${actionType}: ${issues}` }\n  }\n  return { success: true }\n}\n"],
+  "mappings": "AAAA,SAAS,SAAS;AAElB,MAAM,OAAO,MAAM,EAAE,OAAO,EAAE,KAAK;AACnC,MAAM,sBAAsB,EAAE;AAAA,EAC5B,CAAC,QAAS,OAAO,QAAQ,WAAW,OAAO,GAAG,IAAI;AAAA,EAClD,EAAE,OAAO,EAAE,MAAM,eAAe;AAClC;AAMA,MAAM,gBAAgB,EAAE,OAAO;AAAA,EAC7B,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EAC3C,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EAC3C,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EAC1C,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EAC3C,YAAY,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,SAAS;AAAA,EAC/C,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EAC7C,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EAC7C,aAAa,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,SAAS;AACnD,CAAC,EAAE,SAAS;AAEL,MAAM,qBAAqB,EAAE,OAAO;AAAA,EACzC,kBAAkB,KAAK,EAAE,SAAS;AAAA,EAClC,cAAc,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EAC9C,eAAe,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EAC3D,WAAW,KAAK,EAAE,SAAS;AAAA,EAC3B,cAAc,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC;AAAA,EACxC,WAAW,KAAK,EAAE,SAAS;AAAA,EAC3B,WAAW,EAAE,MAAM,EAAE,OAAO;AAAA,IAC1B,aAAa,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,IAC7C,WAAW,KAAK,EAAE,SAAS;AAAA,IAC3B,WAAW,KAAK,EAAE,SAAS;AAAA,IAC3B,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,IACzC,UAAU;AAAA,IACV,WAAW,oBAAoB,SAAS;AAAA,IACxC,cAAc,EAAE,OAAO,EAAE,SAAS;AAAA,IAClC,MAAM,EAAE,KAAK,CAAC,WAAW,SAAS,CAAC,EAAE,QAAQ,SAAS;AAAA,IACtD,aAAa,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,GAAI,EAAE,SAAS;AAAA,EACpD,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EAClB,uBAAuB,EAAE,OAAO,EAAE,SAAS;AAAA,EAC3C,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,GAAI,EAAE,SAAS;AAAA,EAC5C,mBAAmB,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EACvD,iBAAiB;AAAA,EACjB,gBAAgB;AAAA,EAChB,mBAAmB,KAAK,EAAE,SAAS;AAAA,EACnC,kBAAkB,KAAK,EAAE,SAAS;AACpC,CAAC;AAEM,MAAM,2BAA2B,EACrC,OAAO;AAAA,EACN,SAAS,KAAK,EAAE,SAAS;AAAA,EACzB,aAAa,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EACjD,iBAAiB,EAAE,MAAM,EAAE,OAAO;AAAA,IAChC,cAAc,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,IAC9C,YAAY,KAAK,EAAE,SAAS;AAAA,IAC5B,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,IACjC,aAAa,EAAE,OAAO,EAAE,MAAM,eAAe;AAAA,EAC/C,CAAC,CAAC,EAAE,SAAS;AAAA,EACb,oBAAoB,EAAE,OAAO;AAAA,IAC3B,SAAS,EAAE,OAAO,EAAE,SAAS;AAAA,IAC7B,SAAS,EAAE,OAAO;AAAA,EACpB,CAAC,EAAE,SAAS;AAAA,EACZ,eAAe,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,GAAI,CAAC,EAAE,SAAS;AAC/D,CAAC,EACA,OAAO,CAAC,UAAU,QAAQ,MAAM,WAAW,MAAM,WAAW,GAAG;AAAA,EAC9D,SAAS;AACX,CAAC;AAEI,MAAM,8BAA8B,EACxC,OAAO;AAAA,EACN,SAAS,KAAK,EAAE,SAAS;AAAA,EACzB,aAAa,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EACjD,iBAAiB,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,GAAG,CAAC,EAAE,SAAS;AAAA,EAC9D,aAAa,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EACjD,aAAa,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EAC7C,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,EACjC,mBAAmB,EAAE,OAAO,EAAE,SAAS;AAAA,EACvC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,GAAI,EAAE,SAAS;AAC9C,CAAC,EACA,OAAO,CAAC,UAAU,QAAQ,MAAM,WAAW,MAAM,WAAW,GAAG;AAAA,EAC9D,SAAS;AACX,CAAC;AAEH,MAAM,uBAAuB,EAAE;AAAA,EAC7B,CAAC,QAAS,OAAO,QAAQ,WAAW,IAAI,YAAY,IAAI;AAAA,EACxD,EAAE,KAAK,CAAC,UAAU,SAAS,CAAC;AAC9B;AAEO,MAAM,6BAA6B,EAAE,OAAO;AAAA,EACjD,MAAM;AAAA,EACN,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EACtC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EACnD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,SAAS;AAAA,EAC1C,aAAa,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EACjD,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EAC1C,QAAQ,EAAE,QAAQ,WAAW,EAAE,QAAQ,WAAW;AACpD,CAAC;AAEM,MAAM,2BAA2B,EAAE,OAAO;AAAA,EAC/C,cAAc,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,GAAG;AAAA,EAC/C,WAAW,KAAK;AAAA,EAChB,aAAa;AAAA,EACb,aAAa,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAC/C,CAAC;AAEM,MAAM,6BAA6B,EAAE,OAAO;AAAA,EACjD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EACvC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EACzC,WAAW,oBAAoB,SAAS;AAAA,EACxC,cAAc,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,EAAE,SAAS;AAAA,EACnD,MAAM,EAAE,KAAK,CAAC,WAAW,SAAS,CAAC,EAAE,QAAQ,SAAS;AAAA,EACtD,aAAa,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,GAAI,EAAE,SAAS;AACpD,CAAC;AAEM,MAAM,2BAA2B,EAAE,OAAO;AAAA,EAC/C,WAAW,KAAK,EAAE,SAAS;AAAA,EAC3B,aAAa;AAAA,EACb,aAAa,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EAC7C,cAAc,EAAE,KAAK,CAAC,SAAS,QAAQ,WAAW,MAAM,CAAC;AAAA,EACzD,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EACzC,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,GAAI;AAClC,CAAC;AAEM,MAAM,0BAA0B,EAAE,OAAO;AAAA,EAC9C,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,GAAG;AAAA,EACrC,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,SAAS,EAAE,SAAS;AAAA,EACvD,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,GAAG,EAAE,SAAS,EAAE,SAAS;AAAA,EAChE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EACzC,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,GAAK;AAAA,EACxC,oBAAoB,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,SAAS,EAAE,SAAS;AAAA,EACnE,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,GAAG,CAAC,EAAE,SAAS,EAAE,SAAS;AAAA,EACpE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,GAAI,EAAE,SAAS,EAAE,SAAS;AAC3D,CAAC;AAMM,MAAM,4BAA4B,EAAE,KAAK;AAAA,EAC9C;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAEM,MAAM,iBAAiB,0BAA0B;AAExD,MAAM,+BAA+B,EAAE,OAAO,EAC3C,KAAK,EACL,IAAI,GAAG,EACP,OAAO,CAAC,UAAU;AACjB,QAAM,aAAa,MAAM,MAAM,GAAG,EAAE,IAAI,CAAC,aAAa,SAAS,KAAK,CAAC,EAAE,OAAO,OAAO;AACrF,SACE,WAAW,SAAS,KACpB,WAAW,MAAM,CAAC,aAAa,0BAA0B,UAAU,QAAQ,EAAE,OAAO;AAExF,GAAG;AAAA,EACD,SAAS,sCAAsC,eAAe,KAAK,IAAI,CAAC;AAC1E,CAAC;AAEI,MAAM,2BAA2B,EAAE,OAAO;AAAA,EAC/C,UAAU;AACZ,CAAC;AAMM,MAAM,6BAA6B,EAAE,OAAO;AAAA,EACjD,MAAM,EAAE,OAAO;AAAA,EACf,OAAO,EAAE,OAAO;AAAA,EAChB,MAAM,EAAE,KAAK,CAAC,SAAS,UAAU,aAAa,WAAW,OAAO,CAAC;AACnE,CAAC;AAEM,MAAM,wBAAwB,EAAE,OAAO;AAAA,EAC5C,YAAY,EAAE,KAAK;AAAA,IACjB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,CAAC;AAAA,EACD,aAAa,EAAE,OAAO;AAAA,EACtB,YAAY,EAAE,OAAO;AAAA,EACrB,iBAAiB,EAAE,OAAO,EAAE,SAAS;AAAA,EACrC,aAAa,EAAE,OAAO,EAAE,SAAS,6CAA6C;AAChF,CAAC;AAEM,MAAM,6BAA6B,EAAE,OAAO;AAAA,EACjD,MAAM,EAAE,KAAK;AAAA,IACX;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,CAAC;AAAA,EACD,UAAU,EAAE,KAAK,CAAC,WAAW,OAAO,CAAC;AAAA,EACrC,aAAa,EAAE,OAAO;AAAA,EACtB,eAAe,EAAE,OAAO,EAAE,SAAS;AAAA,EACnC,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,EAChC,aAAa,EAAE,OAAO,EAAE,SAAS;AACnC,CAAC;AAEM,MAAM,yBAAyB,EAAE,OAAO;AAAA,EAC7C,SAAS,EAAE,OAAO;AAAA,EAClB,UAAU,0BAA0B,SAAS;AAAA,EAC7C,cAAc,EAAE,MAAM,0BAA0B;AAAA,EAChD,iBAAiB,EAAE,MAAM,qBAAqB;AAAA,EAC9C,eAAe,EAAE,MAAM,0BAA0B;AAAA,EACjD,cAAc,EAAE,MAAM,EAAE,OAAO;AAAA,IAC7B,IAAI,EAAE,OAAO;AAAA,IACb,QAAQ,EAAE,OAAO,EAAE,SAAS;AAAA,IAC5B,SAAS,EAAE,OAAO;AAAA,IAClB,MAAM,EAAE,OAAO;AAAA,IACf,SAAS,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,CAAC,CAAC;AAAA,EACF,YAAY,EAAE,OAAO;AAAA,EACrB,kBAAkB,EAAE,OAAO,EAAE,SAAS;AAAA,EACtC,oBAAoB,EAAE,QAAQ,EAAE,SAAS;AAC3C,CAAC;AAgBM,MAAM,0BAA0B,EAAE,OAAO;AAAA,EAC9C,cAAc,EAAE,KAAK,CAAC,MAAM,MAAM,MAAM,IAAI,CAAC;AAC/C,CAAC;AAEM,MAAM,uBAAuB,EAAE,OAAO;AAAA,EAC3C,iBAAiB,EAAE,KAAK,CAAC,MAAM,MAAM,MAAM,IAAI,CAAC,EAAE,SAAS;AAAA,EAC3D,UAAU,EAAE,QAAQ,EAAE,SAAS;AAAA;AAAA;AAAA;AAAA,EAI/B,eAAe,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,IAAI,GAAG,EAAE,SAAS,EAAE,SAAS;AACxE,CAAC;AAMM,MAAM,0BAA0B,EAAE,OAAO;AAAA,EAC9C,QAAQ,EAAE,KAAK,CAAC,WAAW,WAAW,YAAY,UAAU,CAAC,EAAE,SAAS;AAAA,EACxE,UAAU,6BAA6B,SAAS;AAAA,EAChD,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EAC5C,MAAM,EAAE,OAAO,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,QAAQ,CAAC;AAAA,EAC9C,UAAU,EAAE,OAAO,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,QAAQ,EAAE;AAC9D,CAAC;AAEM,MAAM,uBAAuB,EAAE,OAAO;AAAA,EAC3C,QAAQ,EAAE,KAAK,CAAC,YAAY,cAAc,aAAa,gBAAgB,QAAQ,CAAC,EAAE,SAAS;AAAA,EAC3F,MAAM,EAAE,OAAO,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,QAAQ,CAAC;AAAA,EAC9C,UAAU,EAAE,OAAO,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,QAAQ,EAAE;AAC9D,CAAC;AAEM,MAAM,mBAAmB,EAAE,OAAO;AAAA,EACvC,SAAS,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC;AAC3C,CAAC;AAED,MAAM,yBAAoD;AAAA,EACxD,cAAc;AAAA,EACd,cAAc;AAAA,EACd,cAAc;AAAA,EACd,iBAAiB;AAAA,EACjB,gBAAgB;AAAA,EAChB,gBAAgB;AAAA,EAChB,cAAc;AAAA,EACd,cAAc;AAAA,EACd,aAAa;AACf;AAEO,SAAS,6BACd,YACA,SACuD;AACvD,QAAM,SAAS,uBAAuB,UAAU;AAChD,MAAI,CAAC,QAAQ;AACX,WAAO,EAAE,SAAS,KAAK;AAAA,EACzB;AAEA,QAAM,SAAS,OAAO,UAAU,OAAO;AACvC,MAAI,CAAC,OAAO,SAAS;AACnB,UAAM,SAAS,OAAO,MAAM,OAAO,IAAI,CAAC,MAAM,GAAG,EAAE,KAAK,KAAK,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,KAAK,IAAI;AAC5F,WAAO,EAAE,SAAS,OAAO,OAAO,uBAAuB,UAAU,KAAK,MAAM,GAAG;AAAA,EACjF;AACA,SAAO,EAAE,SAAS,KAAK;AACzB;",
   "names": []
 }

package/dist/modules/inbox_ops/encryption.js

@@ -1,4 +1,13 @@
 const defaultEncryptionMaps = [
+  {
+    // `webhook_secret` is a tenant-scoped signing credential, never used in a
+    // WHERE/ILIKE lookup (it is loaded via the settings row, then compared with
+    // timingSafeEqual), so it is safe — and required — to encrypt at rest.
+    entityId: "inbox_ops:inbox_settings",
+    fields: [
+      { field: "webhook_secret" }
+    ]
+  },
   {
     entityId: "inbox_ops:inbox_email",
     fields: [

package/dist/modules/inbox_ops/encryption.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../src/modules/inbox_ops/encryption.ts"],
-  "sourcesContent": ["import type { ModuleEncryptionMap } from '@open-mercato/shared/modules/encryption'\n\n// Message body, extracted business data, and correspondent identities all\n// count as tenant PII. Columns routed through WHERE/ILIKE lookups or UNIQUE\n// indexes (`inbox_settings.inbox_address`, `inbox_emails.message_id`,\n// `in_reply_to`, `references`, `*.metadata`) are intentionally left plaintext\n// for now \u2014 encrypting them requires paired `*_hash` columns plus rewriting\n// the inbound-webhook lookups, which is out of scope for this fix.\nexport const defaultEncryptionMaps: ModuleEncryptionMap[] = [\n  {\n    entityId: 'inbox_ops:inbox_email',\n    fields: [\n      { field: 'subject' },\n      { field: 'raw_text' },\n      { field: 'raw_html' },\n      { field: 'cleaned_text' },\n      { field: 'thread_messages' },\n      { field: 'forwarded_by_address' },\n      { field: 'forwarded_by_name' },\n      { field: 'to_address' },\n      { field: 'reply_to' },\n      { field: 'processing_error' },\n    ],\n  },\n  {\n    entityId: 'inbox_ops:inbox_proposal',\n    fields: [\n      { field: 'summary' },\n      { field: 'participants' },\n      { field: 'translations' },\n    ],\n  },\n  {\n    entityId: 'inbox_ops:inbox_proposal_action',\n    fields: [\n      { field: 'description' },\n      { field: 'payload' },\n      { field: 'execution_error' },\n    ],\n  },\n  {\n    entityId: 'inbox_ops:inbox_discrepancy',\n    fields: [\n      { field: 'description' },\n      { field: 'expected_value' },\n      { field: 'found_value' },\n    ],\n  },\n]\n\nexport default defaultEncryptionMaps\n"],
-  "mappings": "AAQO,MAAM,wBAA+C;AAAA,EAC1D;AAAA,IACE,UAAU;AAAA,IACV,QAAQ;AAAA,MACN,EAAE,OAAO,UAAU;AAAA,MACnB,EAAE,OAAO,WAAW;AAAA,MACpB,EAAE,OAAO,WAAW;AAAA,MACpB,EAAE,OAAO,eAAe;AAAA,MACxB,EAAE,OAAO,kBAAkB;AAAA,MAC3B,EAAE,OAAO,uBAAuB;AAAA,MAChC,EAAE,OAAO,oBAAoB;AAAA,MAC7B,EAAE,OAAO,aAAa;AAAA,MACtB,EAAE,OAAO,WAAW;AAAA,MACpB,EAAE,OAAO,mBAAmB;AAAA,IAC9B;AAAA,EACF;AAAA,EACA;AAAA,IACE,UAAU;AAAA,IACV,QAAQ;AAAA,MACN,EAAE,OAAO,UAAU;AAAA,MACnB,EAAE,OAAO,eAAe;AAAA,MACxB,EAAE,OAAO,eAAe;AAAA,IAC1B;AAAA,EACF;AAAA,EACA;AAAA,IACE,UAAU;AAAA,IACV,QAAQ;AAAA,MACN,EAAE,OAAO,cAAc;AAAA,MACvB,EAAE,OAAO,UAAU;AAAA,MACnB,EAAE,OAAO,kBAAkB;AAAA,IAC7B;AAAA,EACF;AAAA,EACA;AAAA,IACE,UAAU;AAAA,IACV,QAAQ;AAAA,MACN,EAAE,OAAO,cAAc;AAAA,MACvB,EAAE,OAAO,iBAAiB;AAAA,MAC1B,EAAE,OAAO,cAAc;AAAA,IACzB;AAAA,EACF;AACF;AAEA,IAAO,qBAAQ;",
+  "sourcesContent": ["import type { ModuleEncryptionMap } from '@open-mercato/shared/modules/encryption'\n\n// Message body, extracted business data, and correspondent identities all\n// count as tenant PII. Columns routed through WHERE/ILIKE lookups or UNIQUE\n// indexes (`inbox_settings.inbox_address`, `inbox_emails.message_id`,\n// `in_reply_to`, `references`, `*.metadata`) are intentionally left plaintext\n// for now \u2014 encrypting them requires paired `*_hash` columns plus rewriting\n// the inbound-webhook lookups, which is out of scope for this fix.\nexport const defaultEncryptionMaps: ModuleEncryptionMap[] = [\n  {\n    // `webhook_secret` is a tenant-scoped signing credential, never used in a\n    // WHERE/ILIKE lookup (it is loaded via the settings row, then compared with\n    // timingSafeEqual), so it is safe \u2014 and required \u2014 to encrypt at rest.\n    entityId: 'inbox_ops:inbox_settings',\n    fields: [\n      { field: 'webhook_secret' },\n    ],\n  },\n  {\n    entityId: 'inbox_ops:inbox_email',\n    fields: [\n      { field: 'subject' },\n      { field: 'raw_text' },\n      { field: 'raw_html' },\n      { field: 'cleaned_text' },\n      { field: 'thread_messages' },\n      { field: 'forwarded_by_address' },\n      { field: 'forwarded_by_name' },\n      { field: 'to_address' },\n      { field: 'reply_to' },\n      { field: 'processing_error' },\n    ],\n  },\n  {\n    entityId: 'inbox_ops:inbox_proposal',\n    fields: [\n      { field: 'summary' },\n      { field: 'participants' },\n      { field: 'translations' },\n    ],\n  },\n  {\n    entityId: 'inbox_ops:inbox_proposal_action',\n    fields: [\n      { field: 'description' },\n      { field: 'payload' },\n      { field: 'execution_error' },\n    ],\n  },\n  {\n    entityId: 'inbox_ops:inbox_discrepancy',\n    fields: [\n      { field: 'description' },\n      { field: 'expected_value' },\n      { field: 'found_value' },\n    ],\n  },\n]\n\nexport default defaultEncryptionMaps\n"],
+  "mappings": "AAQO,MAAM,wBAA+C;AAAA,EAC1D;AAAA;AAAA;AAAA;AAAA,IAIE,UAAU;AAAA,IACV,QAAQ;AAAA,MACN,EAAE,OAAO,iBAAiB;AAAA,IAC5B;AAAA,EACF;AAAA,EACA;AAAA,IACE,UAAU;AAAA,IACV,QAAQ;AAAA,MACN,EAAE,OAAO,UAAU;AAAA,MACnB,EAAE,OAAO,WAAW;AAAA,MACpB,EAAE,OAAO,WAAW;AAAA,MACpB,EAAE,OAAO,eAAe;AAAA,MACxB,EAAE,OAAO,kBAAkB;AAAA,MAC3B,EAAE,OAAO,uBAAuB;AAAA,MAChC,EAAE,OAAO,oBAAoB;AAAA,MAC7B,EAAE,OAAO,aAAa;AAAA,MACtB,EAAE,OAAO,WAAW;AAAA,MACpB,EAAE,OAAO,mBAAmB;AAAA,IAC9B;AAAA,EACF;AAAA,EACA;AAAA,IACE,UAAU;AAAA,IACV,QAAQ;AAAA,MACN,EAAE,OAAO,UAAU;AAAA,MACnB,EAAE,OAAO,eAAe;AAAA,MACxB,EAAE,OAAO,eAAe;AAAA,IAC1B;AAAA,EACF;AAAA,EACA;AAAA,IACE,UAAU;AAAA,IACV,QAAQ;AAAA,MACN,EAAE,OAAO,cAAc;AAAA,MACvB,EAAE,OAAO,UAAU;AAAA,MACnB,EAAE,OAAO,kBAAkB;AAAA,IAC7B;AAAA,EACF;AAAA,EACA;AAAA,IACE,UAAU;AAAA,IACV,QAAQ;AAAA,MACN,EAAE,OAAO,cAAc;AAAA,MACvB,EAAE,OAAO,iBAAiB;AAAA,MAC1B,EAAE,OAAO,cAAc;AAAA,IACzB;AAAA,EACF;AACF;AAEA,IAAO,qBAAQ;",
   "names": []
 }

package/dist/modules/inbox_ops/lib/executionEngine.js

@@ -306,7 +306,12 @@ async function resolveUnknownContactDiscrepanciesInProposal(em, proposalId, cont
 }
 async function ensureUserCanExecuteAction(action, ctx) {
   const requiredFeature = getRequiredFeatureForAction(action);
-  if (!requiredFeature) return;
+  if (!requiredFeature || requiredFeature.trim().length === 0) {
+    throw new ExecutionError(
+      `No required feature is mapped for action type "${action.actionType}"; refusing to execute`,
+      403
+    );
+  }
   const rbacService = ctx.container.resolve("rbacService");
   if (!rbacService || typeof rbacService.userHasAllFeatures !== "function") {
     throw new ExecutionError("Unable to verify permissions for action execution", 503);

package/dist/modules/inbox_ops/lib/executionEngine.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/inbox_ops/lib/executionEngine.ts"],
-  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport type { EntityClass } from '@mikro-orm/core'\nimport type { AwilixContainer } from 'awilix'\nimport type { EventBus } from '@open-mercato/events/types'\nimport type { AuthContext } from '@open-mercato/shared/lib/auth/server'\nimport { findOneWithDecryption, findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport type { InboxActionExecutionContext } from '@open-mercato/shared/modules/inbox-actions'\nimport { InboxProposal, InboxProposalAction, InboxDiscrepancy } from '../data/entities'\nimport type { InboxActionStatus, InboxActionType, InboxProposalStatus } from '../data/entities'\nimport { REQUIRED_FEATURES_MAP } from './constants'\nimport { formatZodErrors } from './validation'\nimport {\n  clearLatestCommandLogEntry,\n  ExecutionError,\n  executeCommand,\n  readLatestCommandLogEntry,\n} from './executionHelpers'\n\ninterface CommonEntityFields {\n  tenantId?: string\n  organizationId?: string\n  deletedAt?: Date | null\n  createdAt?: Date\n}\n\nexport interface CrossModuleEntities {\n  CustomerEntity: EntityClass<CommonEntityFields & { id: string; kind: string; displayName: string; primaryEmail?: string | null }>\n  SalesOrder: EntityClass<CommonEntityFields & { id: string; orderNumber: string; currencyCode: string; comments?: string | null; customerReference?: string | null }>\n  SalesShipment: EntityClass<CommonEntityFields & { id: string; order: unknown }>\n  SalesChannel: EntityClass<CommonEntityFields & { id: string; name: string; currencyCode?: string; metadata?: Record<string, unknown> | null }>\n  Dictionary: EntityClass<CommonEntityFields & { id: string; key: string }>\n  DictionaryEntry: EntityClass<CommonEntityFields & { id: string; label: string; value: string; normalizedValue?: string | null; dictionary: unknown }>\n}\n\ninterface ExecutionContext {\n  em: EntityManager\n  userId: string\n  tenantId: string\n  organizationId: string\n  eventBus?: EventBus | null\n  container: AwilixContainer\n  auth?: AuthContext\n  entities?: CrossModuleEntities\n}\n\ninterface ExecutionResult {\n  success: boolean\n  createdEntityId?: string | null\n  createdEntityType?: string | null\n  operationLogEntry?: {\n    id?: string | null\n    undoToken?: string | null\n    commandId?: string | null\n    actionLabel?: string | null\n    resourceKind?: string | null\n    resourceId?: string | null\n    createdAt?: Date | string | null\n  } | null\n  error?: string\n  statusCode?: number\n}\n\ninterface TypeExecutionResult {\n  createdEntityId?: string | null\n  createdEntityType?: string | null\n  matchedEntityId?: string | null\n  matchedEntityType?: string | null\n  operationLogEntry?: ExecutionResult['operationLogEntry']\n}\n\nconst ACTION_EXECUTABLE_STATUSES: InboxActionStatus[] = ['pending', 'failed']\n\nexport async function executeAction(\n  action: InboxProposalAction,\n  ctx: ExecutionContext,\n): Promise<ExecutionResult> {\n  const em = ctx.em.fork()\n\n  try {\n    await ensureUserCanExecuteAction(action, ctx)\n  } catch (err) {\n    const message = err instanceof Error ? err.message : 'Unable to verify permissions'\n    const statusCode = err instanceof ExecutionError ? err.statusCode : 503\n    return { success: false, error: message, statusCode }\n  }\n\n  const claimed = await em.nativeUpdate(\n    InboxProposalAction,\n    {\n      id: action.id,\n      proposalId: action.proposalId,\n      tenantId: ctx.tenantId,\n      organizationId: ctx.organizationId,\n      status: { $in: ACTION_EXECUTABLE_STATUSES },\n      deletedAt: null,\n    },\n    {\n      status: 'processing',\n      executionError: null,\n    },\n  )\n\n  if (claimed === 0) {\n    return { success: false, error: 'Action already processed', statusCode: 409 }\n  }\n\n  const freshAction = await findOneWithDecryption(\n    em,\n    InboxProposalAction,\n    { id: action.id, deletedAt: null },\n    undefined,\n    { tenantId: ctx.tenantId, organizationId: ctx.organizationId },\n  )\n  if (!freshAction) {\n    return { success: false, error: 'Action not found', statusCode: 404 }\n  }\n\n  try {\n    const result = await executeByType(freshAction, ctx)\n\n    freshAction.status = 'executed'\n    freshAction.executedAt = new Date()\n    freshAction.executedByUserId = ctx.userId\n    freshAction.createdEntityId = result.createdEntityId || null\n    freshAction.createdEntityType = result.createdEntityType || null\n    if (result.matchedEntityId !== undefined) {\n      freshAction.matchedEntityId = result.matchedEntityId\n    }\n    if (result.matchedEntityType !== undefined) {\n      freshAction.matchedEntityType = result.matchedEntityType\n    }\n    freshAction.executionError = null\n\n    await em.flush()\n    const encScope = { tenantId: ctx.tenantId, organizationId: ctx.organizationId }\n    await resolveActionDiscrepancies(em, freshAction.id, encScope)\n\n    // After create_contact or link_contact, resolve unknown_contact discrepancies\n    // on ALL other actions in the same proposal that reference the same email\n    if (freshAction.actionType === 'create_contact' || freshAction.actionType === 'link_contact') {\n      const payload = freshAction.payload as Record<string, unknown> | null\n      const contactEmail =\n        typeof payload?.email === 'string' ? payload.email\n          : typeof payload?.emailAddress === 'string' ? payload.emailAddress\n            : null\n      if (contactEmail) {\n        await resolveUnknownContactDiscrepanciesInProposal(\n          em, freshAction.proposalId, contactEmail, encScope,\n        )\n      }\n    }\n\n    await recalculateProposalStatus(em, freshAction.proposalId, encScope)\n\n    if (ctx.eventBus) {\n      await ctx.eventBus.emit('inbox_ops.action.executed', {\n        actionId: freshAction.id,\n        proposalId: freshAction.proposalId,\n        actionType: freshAction.actionType,\n        createdEntityId: result.createdEntityId || null,\n        createdEntityType: result.createdEntityType || null,\n        executedByUserId: ctx.userId,\n        tenantId: ctx.tenantId,\n        organizationId: ctx.organizationId,\n      })\n    }\n\n    return { success: true, ...result, statusCode: 200 }\n  } catch (err) {\n    const message = err instanceof Error ? err.message : String(err)\n    const statusCode = err instanceof ExecutionError ? err.statusCode : 500\n\n    freshAction.status = 'failed'\n    freshAction.executionError = message\n    freshAction.executedAt = new Date()\n    freshAction.executedByUserId = ctx.userId\n    await em.flush()\n\n    await recalculateProposalStatus(em, freshAction.proposalId, { tenantId: ctx.tenantId, organizationId: ctx.organizationId })\n\n    if (ctx.eventBus) {\n      await ctx.eventBus.emit('inbox_ops.action.failed', {\n        actionId: freshAction.id,\n        proposalId: freshAction.proposalId,\n        actionType: freshAction.actionType,\n        error: freshAction.executionError,\n        tenantId: ctx.tenantId,\n        organizationId: ctx.organizationId,\n      })\n    }\n\n    return { success: false, error: freshAction.executionError || 'Unknown error', statusCode }\n  }\n}\n\nexport async function rejectAction(\n  action: InboxProposalAction,\n  ctx: ExecutionContext,\n): Promise<void> {\n  const em = ctx.em.fork()\n  const rejectedAt = new Date()\n  const claimed = await em.nativeUpdate(\n    InboxProposalAction,\n    {\n      id: action.id,\n      proposalId: action.proposalId,\n      tenantId: ctx.tenantId,\n      organizationId: ctx.organizationId,\n      status: { $in: ACTION_EXECUTABLE_STATUSES },\n      deletedAt: null,\n    },\n    {\n      status: 'rejected',\n      executedAt: rejectedAt,\n      executedByUserId: ctx.userId,\n    },\n  )\n  if (claimed === 0) return\n\n  const freshAction = await findOneWithDecryption(\n    em,\n    InboxProposalAction,\n    { id: action.id, deletedAt: null },\n    undefined,\n    { tenantId: ctx.tenantId, organizationId: ctx.organizationId },\n  )\n  if (!freshAction) return\n\n  const encScope = { tenantId: ctx.tenantId, organizationId: ctx.organizationId }\n  await resolveActionDiscrepancies(em, freshAction.id, encScope)\n  await recalculateProposalStatus(em, freshAction.proposalId, encScope)\n\n  if (ctx.eventBus) {\n    await ctx.eventBus.emit('inbox_ops.action.rejected', {\n      actionId: freshAction.id,\n      proposalId: freshAction.proposalId,\n      actionType: freshAction.actionType,\n      tenantId: ctx.tenantId,\n      organizationId: ctx.organizationId,\n    })\n  }\n}\n\nexport async function rejectProposal(\n  proposalId: string,\n  ctx: ExecutionContext,\n): Promise<void> {\n  const em = ctx.em.fork()\n  const rejectedAt = new Date()\n\n  await em.nativeUpdate(\n    InboxProposalAction,\n    {\n      proposalId,\n      status: { $in: ACTION_EXECUTABLE_STATUSES },\n      tenantId: ctx.tenantId,\n      organizationId: ctx.organizationId,\n      deletedAt: null,\n    },\n    {\n      status: 'rejected',\n      executedAt: rejectedAt,\n      executedByUserId: ctx.userId,\n    },\n  )\n\n  await em.nativeUpdate(\n    InboxDiscrepancy,\n    {\n      proposalId,\n      resolved: false,\n      tenantId: ctx.tenantId,\n      organizationId: ctx.organizationId,\n    },\n    { resolved: true },\n  )\n\n  await recalculateProposalStatus(em, proposalId, { tenantId: ctx.tenantId, organizationId: ctx.organizationId })\n\n  if (ctx.eventBus) {\n    await ctx.eventBus.emit('inbox_ops.proposal.rejected', {\n      proposalId,\n      tenantId: ctx.tenantId,\n      organizationId: ctx.organizationId,\n    })\n  }\n}\n\nexport async function acceptAllActions(\n  proposalId: string,\n  ctx: ExecutionContext,\n): Promise<{ results: ExecutionResult[]; stoppedOnFailure: boolean }> {\n  const em = ctx.em.fork()\n  const actions = await findWithDecryption(\n    em,\n    InboxProposalAction,\n    {\n      proposalId,\n      status: 'pending',\n      deletedAt: null,\n    },\n    { orderBy: { sortOrder: 'ASC' } },\n    { tenantId: ctx.tenantId, organizationId: ctx.organizationId },\n  )\n\n  const results: ExecutionResult[] = []\n  let stoppedOnFailure = false\n\n  for (const action of actions) {\n    const result = await executeAction(action, ctx)\n    results.push(result)\n\n    if (!result.success) {\n      stoppedOnFailure = true\n      break\n    }\n  }\n\n  return { results, stoppedOnFailure }\n}\n\n/**\n * Normalize common LLM payload issues before action-specific normalization.\n */\nfunction normalizeCommonPayloadFields(\n  payload: Record<string, unknown>,\n  actionType: string,\n): Record<string, unknown> {\n  // Lowercase contact type fields (LLM often outputs \"Person\" / \"Company\")\n  if (typeof payload.type === 'string') {\n    payload.type = payload.type.toLowerCase()\n  }\n  if (typeof payload.contactType === 'string') {\n    payload.contactType = payload.contactType.toLowerCase()\n  }\n\n  // Normalize link_contact field names (LLM may use various alternatives)\n  if (actionType === 'link_contact') {\n    if (!payload.emailAddress) {\n      const alt = payload.email ?? payload.contactEmail\n      if (typeof alt === 'string') payload.emailAddress = alt\n    }\n    if (!payload.contactId) {\n      const alt = payload.id ?? payload.matchedId ?? payload.matchedContactId\n      if (typeof alt === 'string') payload.contactId = alt\n    }\n    if (!payload.contactType) {\n      const alt = payload.type ?? payload.kind ?? payload.matchedType ?? payload.matchedContactType\n      if (typeof alt === 'string') payload.contactType = alt.toLowerCase()\n    }\n    if (!payload.contactName) {\n      const alt = payload.name ?? payload.displayName\n      if (typeof alt === 'string') payload.contactName = alt\n    }\n  }\n\n  return payload\n}\n\n/**\n * Adapt the internal ExecutionContext to the shared InboxActionExecutionContext\n * for use by registered action handlers.\n */\nfunction adaptContext(ctx: ExecutionContext): InboxActionExecutionContext {\n  return {\n    ...ctx,\n    executeCommand: <TInput, TResult>(commandId: string, input: TInput) =>\n      executeCommand<TInput, TResult>(ctx, commandId, input),\n    resolveEntityClass: <T>(key: string) =>\n      resolveEntityClassInternal(ctx, key) as (new (...args: unknown[]) => T) | null,\n  }\n}\n\nasync function executeByType(\n  action: InboxProposalAction,\n  ctx: ExecutionContext,\n): Promise<TypeExecutionResult> {\n  // Lazy-load the generated registry to avoid circular imports at module load time\n  const { getInboxAction } = await import('@/.mercato/generated/inbox-actions.generated')\n  const definition = getInboxAction(action.actionType)\n  if (!definition) {\n    throw new ExecutionError(`Unknown action type: ${action.actionType}`, 400)\n  }\n\n  let payload = { ...(action.payload as Record<string, unknown>) }\n\n  // Common normalization (lowercase enums, field aliases)\n  payload = normalizeCommonPayloadFields(payload, action.actionType)\n\n  // Action-specific normalization from the registered handler\n  const actionCtx = adaptContext(ctx)\n  clearLatestCommandLogEntry(actionCtx)\n  if (definition.normalizePayload) {\n    payload = await definition.normalizePayload(payload, actionCtx)\n  }\n\n  const parsed = definition.payloadSchema.safeParse(payload)\n  if (!parsed.success) {\n    throw new ExecutionError(\n      `Invalid ${action.actionType} payload: ${formatZodErrors(parsed.error)}`,\n      400,\n    )\n  }\n\n  const result = await definition.execute(\n    { id: action.id, proposalId: action.proposalId, payload: parsed.data },\n    actionCtx,\n  )\n\n  return {\n    ...result,\n    operationLogEntry: readLatestCommandLogEntry(actionCtx),\n  }\n}\n\nasync function resolveUnknownContactDiscrepanciesInProposal(\n  em: EntityManager,\n  proposalId: string,\n  contactEmail: string,\n  scope: { tenantId: string; organizationId: string },\n): Promise<void> {\n  if (!contactEmail) return\n\n  const discrepancies = await findWithDecryption(\n    em,\n    InboxDiscrepancy,\n    {\n      proposalId,\n      type: 'unknown_contact',\n      resolved: false,\n      tenantId: scope.tenantId,\n      organizationId: scope.organizationId,\n    },\n    undefined,\n    scope,\n  )\n\n  const normalizedEmail = contactEmail.trim().toLowerCase()\n  const matching = discrepancies.filter((d) => {\n    const foundValue = (d.foundValue || '').trim().toLowerCase()\n    return foundValue === normalizedEmail\n  })\n\n  for (const d of matching) {\n    d.resolved = true\n  }\n\n  if (matching.length > 0) {\n    await em.flush()\n  }\n}\n\nasync function ensureUserCanExecuteAction(action: InboxProposalAction, ctx: ExecutionContext): Promise<void> {\n  const requiredFeature = getRequiredFeatureForAction(action)\n  if (!requiredFeature) return\n\n  const rbacService = ctx.container.resolve('rbacService') as {\n    userHasAllFeatures: (\n      userId: string,\n      features: string[],\n      scope: { tenantId: string; organizationId: string },\n    ) => Promise<boolean>\n  }\n\n  if (!rbacService || typeof rbacService.userHasAllFeatures !== 'function') {\n    throw new ExecutionError('Unable to verify permissions for action execution', 503)\n  }\n\n  const hasFeature = await rbacService.userHasAllFeatures(\n    ctx.userId,\n    [requiredFeature],\n    { tenantId: ctx.tenantId, organizationId: ctx.organizationId },\n  )\n\n  if (!hasFeature) {\n    throw new ExecutionError(`Insufficient permissions: ${requiredFeature} required`, 403)\n  }\n}\n\nfunction resolveEntityClassInternal(\n  ctx: ExecutionContext,\n  key: string,\n): unknown {\n  const fromEntities = (ctx.entities as Record<string, unknown> | undefined)?.[key]\n  if (fromEntities) return fromEntities\n  try { return ctx.container.resolve(key) } catch { return null }\n}\n\n// Re-export splitPersonName for backward compat\nexport { splitPersonName } from './contactValidation'\n\nasync function resolveActionDiscrepancies(\n  em: EntityManager,\n  actionId: string,\n  scope: { tenantId: string; organizationId: string },\n): Promise<void> {\n  const discrepancies = await findWithDecryption(\n    em,\n    InboxDiscrepancy,\n    { actionId, resolved: false },\n    undefined,\n    scope,\n  )\n  for (const discrepancy of discrepancies) {\n    discrepancy.resolved = true\n  }\n  if (discrepancies.length > 0) {\n    await em.flush()\n  }\n}\n\nexport async function recalculateProposalStatus(\n  em: EntityManager,\n  proposalId: string,\n  scope: { tenantId: string; organizationId: string },\n): Promise<void> {\n  const proposal = await findOneWithDecryption(\n    em,\n    InboxProposal,\n    { id: proposalId, deletedAt: null },\n    undefined,\n    scope,\n  )\n  if (!proposal) return\n\n  const actions = await findWithDecryption(\n    em,\n    InboxProposalAction,\n    { proposalId, deletedAt: null },\n    undefined,\n    scope,\n  )\n\n  if (actions.length === 0) {\n    proposal.status = 'pending'\n    await em.flush()\n    return\n  }\n\n  const statuses = actions.map((action) => action.status)\n  const allAcceptedOrExecuted = statuses.every((status) => status === 'accepted' || status === 'executed')\n  const allRejected = statuses.every((status) => status === 'rejected')\n  const allPending = statuses.every((status) => status === 'pending')\n\n  let newStatus: InboxProposalStatus\n  if (allAcceptedOrExecuted) {\n    newStatus = 'accepted'\n  } else if (allRejected) {\n    newStatus = 'rejected'\n  } else if (allPending) {\n    newStatus = 'pending'\n  } else {\n    newStatus = 'partial'\n  }\n\n  if (proposal.status !== newStatus) {\n    proposal.status = newStatus\n    await em.flush()\n  }\n}\n\nexport function getRequiredFeature(actionType: InboxActionType): string {\n  return REQUIRED_FEATURES_MAP[actionType]\n}\n\nfunction getRequiredFeatureForAction(action: InboxProposalAction): string {\n  if (action.actionType === 'create_contact') {\n    const payload = action.payload as Record<string, unknown> | null\n    if (payload?.type === 'company') {\n      return 'customers.companies.manage'\n    }\n  }\n  return REQUIRED_FEATURES_MAP[action.actionType]\n}\n"],
-  "mappings": "AAKA,SAAS,uBAAuB,0BAA0B;AAE1D,SAAS,eAAe,qBAAqB,wBAAwB;AAErE,SAAS,6BAA6B;AACtC,SAAS,uBAAuB;AAChC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAsDP,MAAM,6BAAkD,CAAC,WAAW,QAAQ;AAE5E,eAAsB,cACpB,QACA,KAC0B;AAC1B,QAAM,KAAK,IAAI,GAAG,KAAK;AAEvB,MAAI;AACF,UAAM,2BAA2B,QAAQ,GAAG;AAAA,EAC9C,SAAS,KAAK;AACZ,UAAM,UAAU,eAAe,QAAQ,IAAI,UAAU;AACrD,UAAM,aAAa,eAAe,iBAAiB,IAAI,aAAa;AACpE,WAAO,EAAE,SAAS,OAAO,OAAO,SAAS,WAAW;AAAA,EACtD;AAEA,QAAM,UAAU,MAAM,GAAG;AAAA,IACvB;AAAA,IACA;AAAA,MACE,IAAI,OAAO;AAAA,MACX,YAAY,OAAO;AAAA,MACnB,UAAU,IAAI;AAAA,MACd,gBAAgB,IAAI;AAAA,MACpB,QAAQ,EAAE,KAAK,2BAA2B;AAAA,MAC1C,WAAW;AAAA,IACb;AAAA,IACA;AAAA,MACE,QAAQ;AAAA,MACR,gBAAgB;AAAA,IAClB;AAAA,EACF;AAEA,MAAI,YAAY,GAAG;AACjB,WAAO,EAAE,SAAS,OAAO,OAAO,4BAA4B,YAAY,IAAI;AAAA,EAC9E;AAEA,QAAM,cAAc,MAAM;AAAA,IACxB;AAAA,IACA;AAAA,IACA,EAAE,IAAI,OAAO,IAAI,WAAW,KAAK;AAAA,IACjC;AAAA,IACA,EAAE,UAAU,IAAI,UAAU,gBAAgB,IAAI,eAAe;AAAA,EAC/D;AACA,MAAI,CAAC,aAAa;AAChB,WAAO,EAAE,SAAS,OAAO,OAAO,oBAAoB,YAAY,IAAI;AAAA,EACtE;AAEA,MAAI;AACF,UAAM,SAAS,MAAM,cAAc,aAAa,GAAG;AAEnD,gBAAY,SAAS;AACrB,gBAAY,aAAa,oBAAI,KAAK;AAClC,gBAAY,mBAAmB,IAAI;AACnC,gBAAY,kBAAkB,OAAO,mBAAmB;AACxD,gBAAY,oBAAoB,OAAO,qBAAqB;AAC5D,QAAI,OAAO,oBAAoB,QAAW;AACxC,kBAAY,kBAAkB,OAAO;AAAA,IACvC;AACA,QAAI,OAAO,sBAAsB,QAAW;AAC1C,kBAAY,oBAAoB,OAAO;AAAA,IACzC;AACA,gBAAY,iBAAiB;AAE7B,UAAM,GAAG,MAAM;AACf,UAAM,WAAW,EAAE,UAAU,IAAI,UAAU,gBAAgB,IAAI,eAAe;AAC9E,UAAM,2BAA2B,IAAI,YAAY,IAAI,QAAQ;AAI7D,QAAI,YAAY,eAAe,oBAAoB,YAAY,eAAe,gBAAgB;AAC5F,YAAM,UAAU,YAAY;AAC5B,YAAM,eACJ,OAAO,SAAS,UAAU,WAAW,QAAQ,QACzC,OAAO,SAAS,iBAAiB,WAAW,QAAQ,eAClD;AACR,UAAI,cAAc;AAChB,cAAM;AAAA,UACJ;AAAA,UAAI,YAAY;AAAA,UAAY;AAAA,UAAc;AAAA,QAC5C;AAAA,MACF;AAAA,IACF;AAEA,UAAM,0BAA0B,IAAI,YAAY,YAAY,QAAQ;AAEpE,QAAI,IAAI,UAAU;AAChB,YAAM,IAAI,SAAS,KAAK,6BAA6B;AAAA,QACnD,UAAU,YAAY;AAAA,QACtB,YAAY,YAAY;AAAA,QACxB,YAAY,YAAY;AAAA,QACxB,iBAAiB,OAAO,mBAAmB;AAAA,QAC3C,mBAAmB,OAAO,qBAAqB;AAAA,QAC/C,kBAAkB,IAAI;AAAA,QACtB,UAAU,IAAI;AAAA,QACd,gBAAgB,IAAI;AAAA,MACtB,CAAC;AAAA,IACH;AAEA,WAAO,EAAE,SAAS,MAAM,GAAG,QAAQ,YAAY,IAAI;AAAA,EACrD,SAAS,KAAK;AACZ,UAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC/D,UAAM,aAAa,eAAe,iBAAiB,IAAI,aAAa;AAEpE,gBAAY,SAAS;AACrB,gBAAY,iBAAiB;AAC7B,gBAAY,aAAa,oBAAI,KAAK;AAClC,gBAAY,mBAAmB,IAAI;AACnC,UAAM,GAAG,MAAM;AAEf,UAAM,0BAA0B,IAAI,YAAY,YAAY,EAAE,UAAU,IAAI,UAAU,gBAAgB,IAAI,eAAe,CAAC;AAE1H,QAAI,IAAI,UAAU;AAChB,YAAM,IAAI,SAAS,KAAK,2BAA2B;AAAA,QACjD,UAAU,YAAY;AAAA,QACtB,YAAY,YAAY;AAAA,QACxB,YAAY,YAAY;AAAA,QACxB,OAAO,YAAY;AAAA,QACnB,UAAU,IAAI;AAAA,QACd,gBAAgB,IAAI;AAAA,MACtB,CAAC;AAAA,IACH;AAEA,WAAO,EAAE,SAAS,OAAO,OAAO,YAAY,kBAAkB,iBAAiB,WAAW;AAAA,EAC5F;AACF;AAEA,eAAsB,aACpB,QACA,KACe;AACf,QAAM,KAAK,IAAI,GAAG,KAAK;AACvB,QAAM,aAAa,oBAAI,KAAK;AAC5B,QAAM,UAAU,MAAM,GAAG;AAAA,IACvB;AAAA,IACA;AAAA,MACE,IAAI,OAAO;AAAA,MACX,YAAY,OAAO;AAAA,MACnB,UAAU,IAAI;AAAA,MACd,gBAAgB,IAAI;AAAA,MACpB,QAAQ,EAAE,KAAK,2BAA2B;AAAA,MAC1C,WAAW;AAAA,IACb;AAAA,IACA;AAAA,MACE,QAAQ;AAAA,MACR,YAAY;AAAA,MACZ,kBAAkB,IAAI;AAAA,IACxB;AAAA,EACF;AACA,MAAI,YAAY,EAAG;AAEnB,QAAM,cAAc,MAAM;AAAA,IACxB;AAAA,IACA;AAAA,IACA,EAAE,IAAI,OAAO,IAAI,WAAW,KAAK;AAAA,IACjC;AAAA,IACA,EAAE,UAAU,IAAI,UAAU,gBAAgB,IAAI,eAAe;AAAA,EAC/D;AACA,MAAI,CAAC,YAAa;AAElB,QAAM,WAAW,EAAE,UAAU,IAAI,UAAU,gBAAgB,IAAI,eAAe;AAC9E,QAAM,2BAA2B,IAAI,YAAY,IAAI,QAAQ;AAC7D,QAAM,0BAA0B,IAAI,YAAY,YAAY,QAAQ;AAEpE,MAAI,IAAI,UAAU;AAChB,UAAM,IAAI,SAAS,KAAK,6BAA6B;AAAA,MACnD,UAAU,YAAY;AAAA,MACtB,YAAY,YAAY;AAAA,MACxB,YAAY,YAAY;AAAA,MACxB,UAAU,IAAI;AAAA,MACd,gBAAgB,IAAI;AAAA,IACtB,CAAC;AAAA,EACH;AACF;AAEA,eAAsB,eACpB,YACA,KACe;AACf,QAAM,KAAK,IAAI,GAAG,KAAK;AACvB,QAAM,aAAa,oBAAI,KAAK;AAE5B,QAAM,GAAG;AAAA,IACP;AAAA,IACA;AAAA,MACE;AAAA,MACA,QAAQ,EAAE,KAAK,2BAA2B;AAAA,MAC1C,UAAU,IAAI;AAAA,MACd,gBAAgB,IAAI;AAAA,MACpB,WAAW;AAAA,IACb;AAAA,IACA;AAAA,MACE,QAAQ;AAAA,MACR,YAAY;AAAA,MACZ,kBAAkB,IAAI;AAAA,IACxB;AAAA,EACF;AAEA,QAAM,GAAG;AAAA,IACP;AAAA,IACA;AAAA,MACE;AAAA,MACA,UAAU;AAAA,MACV,UAAU,IAAI;AAAA,MACd,gBAAgB,IAAI;AAAA,IACtB;AAAA,IACA,EAAE,UAAU,KAAK;AAAA,EACnB;AAEA,QAAM,0BAA0B,IAAI,YAAY,EAAE,UAAU,IAAI,UAAU,gBAAgB,IAAI,eAAe,CAAC;AAE9G,MAAI,IAAI,UAAU;AAChB,UAAM,IAAI,SAAS,KAAK,+BAA+B;AAAA,MACrD;AAAA,MACA,UAAU,IAAI;AAAA,MACd,gBAAgB,IAAI;AAAA,IACtB,CAAC;AAAA,EACH;AACF;AAEA,eAAsB,iBACpB,YACA,KACoE;AACpE,QAAM,KAAK,IAAI,GAAG,KAAK;AACvB,QAAM,UAAU,MAAM;AAAA,IACpB;AAAA,IACA;AAAA,IACA;AAAA,MACE;AAAA,MACA,QAAQ;AAAA,MACR,WAAW;AAAA,IACb;AAAA,IACA,EAAE,SAAS,EAAE,WAAW,MAAM,EAAE;AAAA,IAChC,EAAE,UAAU,IAAI,UAAU,gBAAgB,IAAI,eAAe;AAAA,EAC/D;AAEA,QAAM,UAA6B,CAAC;AACpC,MAAI,mBAAmB;AAEvB,aAAW,UAAU,SAAS;AAC5B,UAAM,SAAS,MAAM,cAAc,QAAQ,GAAG;AAC9C,YAAQ,KAAK,MAAM;AAEnB,QAAI,CAAC,OAAO,SAAS;AACnB,yBAAmB;AACnB;AAAA,IACF;AAAA,EACF;AAEA,SAAO,EAAE,SAAS,iBAAiB;AACrC;AAKA,SAAS,6BACP,SACA,YACyB;AAEzB,MAAI,OAAO,QAAQ,SAAS,UAAU;AACpC,YAAQ,OAAO,QAAQ,KAAK,YAAY;AAAA,EAC1C;AACA,MAAI,OAAO,QAAQ,gBAAgB,UAAU;AAC3C,YAAQ,cAAc,QAAQ,YAAY,YAAY;AAAA,EACxD;AAGA,MAAI,eAAe,gBAAgB;AACjC,QAAI,CAAC,QAAQ,cAAc;AACzB,YAAM,MAAM,QAAQ,SAAS,QAAQ;AACrC,UAAI,OAAO,QAAQ,SAAU,SAAQ,eAAe;AAAA,IACtD;AACA,QAAI,CAAC,QAAQ,WAAW;AACtB,YAAM,MAAM,QAAQ,MAAM,QAAQ,aAAa,QAAQ;AACvD,UAAI,OAAO,QAAQ,SAAU,SAAQ,YAAY;AAAA,IACnD;AACA,QAAI,CAAC,QAAQ,aAAa;AACxB,YAAM,MAAM,QAAQ,QAAQ,QAAQ,QAAQ,QAAQ,eAAe,QAAQ;AAC3E,UAAI,OAAO,QAAQ,SAAU,SAAQ,cAAc,IAAI,YAAY;AAAA,IACrE;AACA,QAAI,CAAC,QAAQ,aAAa;AACxB,YAAM,MAAM,QAAQ,QAAQ,QAAQ;AACpC,UAAI,OAAO,QAAQ,SAAU,SAAQ,cAAc;AAAA,IACrD;AAAA,EACF;AAEA,SAAO;AACT;AAMA,SAAS,aAAa,KAAoD;AACxE,SAAO;AAAA,IACL,GAAG;AAAA,IACH,gBAAgB,CAAkB,WAAmB,UACnD,eAAgC,KAAK,WAAW,KAAK;AAAA,IACvD,oBAAoB,CAAI,QACtB,2BAA2B,KAAK,GAAG;AAAA,EACvC;AACF;AAEA,eAAe,cACb,QACA,KAC8B;AAE9B,QAAM,EAAE,eAAe,IAAI,MAAM,OAAO,8CAA8C;AACtF,QAAM,aAAa,eAAe,OAAO,UAAU;AACnD,MAAI,CAAC,YAAY;AACf,UAAM,IAAI,eAAe,wBAAwB,OAAO,UAAU,IAAI,GAAG;AAAA,EAC3E;AAEA,MAAI,UAAU,EAAE,GAAI,OAAO,QAAoC;AAG/D,YAAU,6BAA6B,SAAS,OAAO,UAAU;AAGjE,QAAM,YAAY,aAAa,GAAG;AAClC,6BAA2B,SAAS;AACpC,MAAI,WAAW,kBAAkB;AAC/B,cAAU,MAAM,WAAW,iBAAiB,SAAS,SAAS;AAAA,EAChE;AAEA,QAAM,SAAS,WAAW,cAAc,UAAU,OAAO;AACzD,MAAI,CAAC,OAAO,SAAS;AACnB,UAAM,IAAI;AAAA,MACR,WAAW,OAAO,UAAU,aAAa,gBAAgB,OAAO,KAAK,CAAC;AAAA,MACtE;AAAA,IACF;AAAA,EACF;AAEA,QAAM,SAAS,MAAM,WAAW;AAAA,IAC9B,EAAE,IAAI,OAAO,IAAI,YAAY,OAAO,YAAY,SAAS,OAAO,KAAK;AAAA,IACrE;AAAA,EACF;AAEA,SAAO;AAAA,IACL,GAAG;AAAA,IACH,mBAAmB,0BAA0B,SAAS;AAAA,EACxD;AACF;AAEA,eAAe,6CACb,IACA,YACA,cACA,OACe;AACf,MAAI,CAAC,aAAc;AAEnB,QAAM,gBAAgB,MAAM;AAAA,IAC1B;AAAA,IACA;AAAA,IACA;AAAA,MACE;AAAA,MACA,MAAM;AAAA,MACN,UAAU;AAAA,MACV,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM;AAAA,IACxB;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAEA,QAAM,kBAAkB,aAAa,KAAK,EAAE,YAAY;AACxD,QAAM,WAAW,cAAc,OAAO,CAAC,MAAM;AAC3C,UAAM,cAAc,EAAE,cAAc,IAAI,KAAK,EAAE,YAAY;AAC3D,WAAO,eAAe;AAAA,EACxB,CAAC;AAED,aAAW,KAAK,UAAU;AACxB,MAAE,WAAW;AAAA,EACf;AAEA,MAAI,SAAS,SAAS,GAAG;AACvB,UAAM,GAAG,MAAM;AAAA,EACjB;AACF;AAEA,eAAe,2BAA2B,QAA6B,KAAsC;AAC3G,QAAM,kBAAkB,4BAA4B,MAAM;AAC1D,MAAI,CAAC,gBAAiB;AAEtB,QAAM,cAAc,IAAI,UAAU,QAAQ,aAAa;AAQvD,MAAI,CAAC,eAAe,OAAO,YAAY,uBAAuB,YAAY;AACxE,UAAM,IAAI,eAAe,qDAAqD,GAAG;AAAA,EACnF;AAEA,QAAM,aAAa,MAAM,YAAY;AAAA,IACnC,IAAI;AAAA,IACJ,CAAC,eAAe;AAAA,IAChB,EAAE,UAAU,IAAI,UAAU,gBAAgB,IAAI,eAAe;AAAA,EAC/D;AAEA,MAAI,CAAC,YAAY;AACf,UAAM,IAAI,eAAe,6BAA6B,eAAe,aAAa,GAAG;AAAA,EACvF;AACF;AAEA,SAAS,2BACP,KACA,KACS;AACT,QAAM,eAAgB,IAAI,WAAmD,GAAG;AAChF,MAAI,aAAc,QAAO;AACzB,MAAI;AAAE,WAAO,IAAI,UAAU,QAAQ,GAAG;AAAA,EAAE,QAAQ;AAAE,WAAO;AAAA,EAAK;AAChE;AAGA,SAAS,uBAAuB;AAEhC,eAAe,2BACb,IACA,UACA,OACe;AACf,QAAM,gBAAgB,MAAM;AAAA,IAC1B;AAAA,IACA;AAAA,IACA,EAAE,UAAU,UAAU,MAAM;AAAA,IAC5B;AAAA,IACA;AAAA,EACF;AACA,aAAW,eAAe,eAAe;AACvC,gBAAY,WAAW;AAAA,EACzB;AACA,MAAI,cAAc,SAAS,GAAG;AAC5B,UAAM,GAAG,MAAM;AAAA,EACjB;AACF;AAEA,eAAsB,0BACpB,IACA,YACA,OACe;AACf,QAAM,WAAW,MAAM;AAAA,IACrB;AAAA,IACA;AAAA,IACA,EAAE,IAAI,YAAY,WAAW,KAAK;AAAA,IAClC;AAAA,IACA;AAAA,EACF;AACA,MAAI,CAAC,SAAU;AAEf,QAAM,UAAU,MAAM;AAAA,IACpB;AAAA,IACA;AAAA,IACA,EAAE,YAAY,WAAW,KAAK;AAAA,IAC9B;AAAA,IACA;AAAA,EACF;AAEA,MAAI,QAAQ,WAAW,GAAG;AACxB,aAAS,SAAS;AAClB,UAAM,GAAG,MAAM;AACf;AAAA,EACF;AAEA,QAAM,WAAW,QAAQ,IAAI,CAAC,WAAW,OAAO,MAAM;AACtD,QAAM,wBAAwB,SAAS,MAAM,CAAC,WAAW,WAAW,cAAc,WAAW,UAAU;AACvG,QAAM,cAAc,SAAS,MAAM,CAAC,WAAW,WAAW,UAAU;AACpE,QAAM,aAAa,SAAS,MAAM,CAAC,WAAW,WAAW,SAAS;AAElE,MAAI;AACJ,MAAI,uBAAuB;AACzB,gBAAY;AAAA,EACd,WAAW,aAAa;AACtB,gBAAY;AAAA,EACd,WAAW,YAAY;AACrB,gBAAY;AAAA,EACd,OAAO;AACL,gBAAY;AAAA,EACd;AAEA,MAAI,SAAS,WAAW,WAAW;AACjC,aAAS,SAAS;AAClB,UAAM,GAAG,MAAM;AAAA,EACjB;AACF;AAEO,SAAS,mBAAmB,YAAqC;AACtE,SAAO,sBAAsB,UAAU;AACzC;AAEA,SAAS,4BAA4B,QAAqC;AACxE,MAAI,OAAO,eAAe,kBAAkB;AAC1C,UAAM,UAAU,OAAO;AACvB,QAAI,SAAS,SAAS,WAAW;AAC/B,aAAO;AAAA,IACT;AAAA,EACF;AACA,SAAO,sBAAsB,OAAO,UAAU;AAChD;",
+  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport type { EntityClass } from '@mikro-orm/core'\nimport type { AwilixContainer } from 'awilix'\nimport type { EventBus } from '@open-mercato/events/types'\nimport type { AuthContext } from '@open-mercato/shared/lib/auth/server'\nimport { findOneWithDecryption, findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport type { InboxActionExecutionContext } from '@open-mercato/shared/modules/inbox-actions'\nimport { InboxProposal, InboxProposalAction, InboxDiscrepancy } from '../data/entities'\nimport type { InboxActionStatus, InboxActionType, InboxProposalStatus } from '../data/entities'\nimport { REQUIRED_FEATURES_MAP } from './constants'\nimport { formatZodErrors } from './validation'\nimport {\n  clearLatestCommandLogEntry,\n  ExecutionError,\n  executeCommand,\n  readLatestCommandLogEntry,\n} from './executionHelpers'\n\ninterface CommonEntityFields {\n  tenantId?: string\n  organizationId?: string\n  deletedAt?: Date | null\n  createdAt?: Date\n}\n\nexport interface CrossModuleEntities {\n  CustomerEntity: EntityClass<CommonEntityFields & { id: string; kind: string; displayName: string; primaryEmail?: string | null }>\n  SalesOrder: EntityClass<CommonEntityFields & { id: string; orderNumber: string; currencyCode: string; comments?: string | null; customerReference?: string | null }>\n  SalesShipment: EntityClass<CommonEntityFields & { id: string; order: unknown }>\n  SalesChannel: EntityClass<CommonEntityFields & { id: string; name: string; currencyCode?: string; metadata?: Record<string, unknown> | null }>\n  Dictionary: EntityClass<CommonEntityFields & { id: string; key: string }>\n  DictionaryEntry: EntityClass<CommonEntityFields & { id: string; label: string; value: string; normalizedValue?: string | null; dictionary: unknown }>\n}\n\ninterface ExecutionContext {\n  em: EntityManager\n  userId: string\n  tenantId: string\n  organizationId: string\n  eventBus?: EventBus | null\n  container: AwilixContainer\n  auth?: AuthContext\n  entities?: CrossModuleEntities\n}\n\ninterface ExecutionResult {\n  success: boolean\n  createdEntityId?: string | null\n  createdEntityType?: string | null\n  operationLogEntry?: {\n    id?: string | null\n    undoToken?: string | null\n    commandId?: string | null\n    actionLabel?: string | null\n    resourceKind?: string | null\n    resourceId?: string | null\n    createdAt?: Date | string | null\n  } | null\n  error?: string\n  statusCode?: number\n}\n\ninterface TypeExecutionResult {\n  createdEntityId?: string | null\n  createdEntityType?: string | null\n  matchedEntityId?: string | null\n  matchedEntityType?: string | null\n  operationLogEntry?: ExecutionResult['operationLogEntry']\n}\n\nconst ACTION_EXECUTABLE_STATUSES: InboxActionStatus[] = ['pending', 'failed']\n\nexport async function executeAction(\n  action: InboxProposalAction,\n  ctx: ExecutionContext,\n): Promise<ExecutionResult> {\n  const em = ctx.em.fork()\n\n  try {\n    await ensureUserCanExecuteAction(action, ctx)\n  } catch (err) {\n    const message = err instanceof Error ? err.message : 'Unable to verify permissions'\n    const statusCode = err instanceof ExecutionError ? err.statusCode : 503\n    return { success: false, error: message, statusCode }\n  }\n\n  const claimed = await em.nativeUpdate(\n    InboxProposalAction,\n    {\n      id: action.id,\n      proposalId: action.proposalId,\n      tenantId: ctx.tenantId,\n      organizationId: ctx.organizationId,\n      status: { $in: ACTION_EXECUTABLE_STATUSES },\n      deletedAt: null,\n    },\n    {\n      status: 'processing',\n      executionError: null,\n    },\n  )\n\n  if (claimed === 0) {\n    return { success: false, error: 'Action already processed', statusCode: 409 }\n  }\n\n  const freshAction = await findOneWithDecryption(\n    em,\n    InboxProposalAction,\n    { id: action.id, deletedAt: null },\n    undefined,\n    { tenantId: ctx.tenantId, organizationId: ctx.organizationId },\n  )\n  if (!freshAction) {\n    return { success: false, error: 'Action not found', statusCode: 404 }\n  }\n\n  try {\n    const result = await executeByType(freshAction, ctx)\n\n    freshAction.status = 'executed'\n    freshAction.executedAt = new Date()\n    freshAction.executedByUserId = ctx.userId\n    freshAction.createdEntityId = result.createdEntityId || null\n    freshAction.createdEntityType = result.createdEntityType || null\n    if (result.matchedEntityId !== undefined) {\n      freshAction.matchedEntityId = result.matchedEntityId\n    }\n    if (result.matchedEntityType !== undefined) {\n      freshAction.matchedEntityType = result.matchedEntityType\n    }\n    freshAction.executionError = null\n\n    await em.flush()\n    const encScope = { tenantId: ctx.tenantId, organizationId: ctx.organizationId }\n    await resolveActionDiscrepancies(em, freshAction.id, encScope)\n\n    // After create_contact or link_contact, resolve unknown_contact discrepancies\n    // on ALL other actions in the same proposal that reference the same email\n    if (freshAction.actionType === 'create_contact' || freshAction.actionType === 'link_contact') {\n      const payload = freshAction.payload as Record<string, unknown> | null\n      const contactEmail =\n        typeof payload?.email === 'string' ? payload.email\n          : typeof payload?.emailAddress === 'string' ? payload.emailAddress\n            : null\n      if (contactEmail) {\n        await resolveUnknownContactDiscrepanciesInProposal(\n          em, freshAction.proposalId, contactEmail, encScope,\n        )\n      }\n    }\n\n    await recalculateProposalStatus(em, freshAction.proposalId, encScope)\n\n    if (ctx.eventBus) {\n      await ctx.eventBus.emit('inbox_ops.action.executed', {\n        actionId: freshAction.id,\n        proposalId: freshAction.proposalId,\n        actionType: freshAction.actionType,\n        createdEntityId: result.createdEntityId || null,\n        createdEntityType: result.createdEntityType || null,\n        executedByUserId: ctx.userId,\n        tenantId: ctx.tenantId,\n        organizationId: ctx.organizationId,\n      })\n    }\n\n    return { success: true, ...result, statusCode: 200 }\n  } catch (err) {\n    const message = err instanceof Error ? err.message : String(err)\n    const statusCode = err instanceof ExecutionError ? err.statusCode : 500\n\n    freshAction.status = 'failed'\n    freshAction.executionError = message\n    freshAction.executedAt = new Date()\n    freshAction.executedByUserId = ctx.userId\n    await em.flush()\n\n    await recalculateProposalStatus(em, freshAction.proposalId, { tenantId: ctx.tenantId, organizationId: ctx.organizationId })\n\n    if (ctx.eventBus) {\n      await ctx.eventBus.emit('inbox_ops.action.failed', {\n        actionId: freshAction.id,\n        proposalId: freshAction.proposalId,\n        actionType: freshAction.actionType,\n        error: freshAction.executionError,\n        tenantId: ctx.tenantId,\n        organizationId: ctx.organizationId,\n      })\n    }\n\n    return { success: false, error: freshAction.executionError || 'Unknown error', statusCode }\n  }\n}\n\nexport async function rejectAction(\n  action: InboxProposalAction,\n  ctx: ExecutionContext,\n): Promise<void> {\n  const em = ctx.em.fork()\n  const rejectedAt = new Date()\n  const claimed = await em.nativeUpdate(\n    InboxProposalAction,\n    {\n      id: action.id,\n      proposalId: action.proposalId,\n      tenantId: ctx.tenantId,\n      organizationId: ctx.organizationId,\n      status: { $in: ACTION_EXECUTABLE_STATUSES },\n      deletedAt: null,\n    },\n    {\n      status: 'rejected',\n      executedAt: rejectedAt,\n      executedByUserId: ctx.userId,\n    },\n  )\n  if (claimed === 0) return\n\n  const freshAction = await findOneWithDecryption(\n    em,\n    InboxProposalAction,\n    { id: action.id, deletedAt: null },\n    undefined,\n    { tenantId: ctx.tenantId, organizationId: ctx.organizationId },\n  )\n  if (!freshAction) return\n\n  const encScope = { tenantId: ctx.tenantId, organizationId: ctx.organizationId }\n  await resolveActionDiscrepancies(em, freshAction.id, encScope)\n  await recalculateProposalStatus(em, freshAction.proposalId, encScope)\n\n  if (ctx.eventBus) {\n    await ctx.eventBus.emit('inbox_ops.action.rejected', {\n      actionId: freshAction.id,\n      proposalId: freshAction.proposalId,\n      actionType: freshAction.actionType,\n      tenantId: ctx.tenantId,\n      organizationId: ctx.organizationId,\n    })\n  }\n}\n\nexport async function rejectProposal(\n  proposalId: string,\n  ctx: ExecutionContext,\n): Promise<void> {\n  const em = ctx.em.fork()\n  const rejectedAt = new Date()\n\n  await em.nativeUpdate(\n    InboxProposalAction,\n    {\n      proposalId,\n      status: { $in: ACTION_EXECUTABLE_STATUSES },\n      tenantId: ctx.tenantId,\n      organizationId: ctx.organizationId,\n      deletedAt: null,\n    },\n    {\n      status: 'rejected',\n      executedAt: rejectedAt,\n      executedByUserId: ctx.userId,\n    },\n  )\n\n  await em.nativeUpdate(\n    InboxDiscrepancy,\n    {\n      proposalId,\n      resolved: false,\n      tenantId: ctx.tenantId,\n      organizationId: ctx.organizationId,\n    },\n    { resolved: true },\n  )\n\n  await recalculateProposalStatus(em, proposalId, { tenantId: ctx.tenantId, organizationId: ctx.organizationId })\n\n  if (ctx.eventBus) {\n    await ctx.eventBus.emit('inbox_ops.proposal.rejected', {\n      proposalId,\n      tenantId: ctx.tenantId,\n      organizationId: ctx.organizationId,\n    })\n  }\n}\n\nexport async function acceptAllActions(\n  proposalId: string,\n  ctx: ExecutionContext,\n): Promise<{ results: ExecutionResult[]; stoppedOnFailure: boolean }> {\n  const em = ctx.em.fork()\n  const actions = await findWithDecryption(\n    em,\n    InboxProposalAction,\n    {\n      proposalId,\n      status: 'pending',\n      deletedAt: null,\n    },\n    { orderBy: { sortOrder: 'ASC' } },\n    { tenantId: ctx.tenantId, organizationId: ctx.organizationId },\n  )\n\n  const results: ExecutionResult[] = []\n  let stoppedOnFailure = false\n\n  for (const action of actions) {\n    const result = await executeAction(action, ctx)\n    results.push(result)\n\n    if (!result.success) {\n      stoppedOnFailure = true\n      break\n    }\n  }\n\n  return { results, stoppedOnFailure }\n}\n\n/**\n * Normalize common LLM payload issues before action-specific normalization.\n */\nfunction normalizeCommonPayloadFields(\n  payload: Record<string, unknown>,\n  actionType: string,\n): Record<string, unknown> {\n  // Lowercase contact type fields (LLM often outputs \"Person\" / \"Company\")\n  if (typeof payload.type === 'string') {\n    payload.type = payload.type.toLowerCase()\n  }\n  if (typeof payload.contactType === 'string') {\n    payload.contactType = payload.contactType.toLowerCase()\n  }\n\n  // Normalize link_contact field names (LLM may use various alternatives)\n  if (actionType === 'link_contact') {\n    if (!payload.emailAddress) {\n      const alt = payload.email ?? payload.contactEmail\n      if (typeof alt === 'string') payload.emailAddress = alt\n    }\n    if (!payload.contactId) {\n      const alt = payload.id ?? payload.matchedId ?? payload.matchedContactId\n      if (typeof alt === 'string') payload.contactId = alt\n    }\n    if (!payload.contactType) {\n      const alt = payload.type ?? payload.kind ?? payload.matchedType ?? payload.matchedContactType\n      if (typeof alt === 'string') payload.contactType = alt.toLowerCase()\n    }\n    if (!payload.contactName) {\n      const alt = payload.name ?? payload.displayName\n      if (typeof alt === 'string') payload.contactName = alt\n    }\n  }\n\n  return payload\n}\n\n/**\n * Adapt the internal ExecutionContext to the shared InboxActionExecutionContext\n * for use by registered action handlers.\n */\nfunction adaptContext(ctx: ExecutionContext): InboxActionExecutionContext {\n  return {\n    ...ctx,\n    executeCommand: <TInput, TResult>(commandId: string, input: TInput) =>\n      executeCommand<TInput, TResult>(ctx, commandId, input),\n    resolveEntityClass: <T>(key: string) =>\n      resolveEntityClassInternal(ctx, key) as (new (...args: unknown[]) => T) | null,\n  }\n}\n\nasync function executeByType(\n  action: InboxProposalAction,\n  ctx: ExecutionContext,\n): Promise<TypeExecutionResult> {\n  // Lazy-load the generated registry to avoid circular imports at module load time\n  const { getInboxAction } = await import('@/.mercato/generated/inbox-actions.generated')\n  const definition = getInboxAction(action.actionType)\n  if (!definition) {\n    throw new ExecutionError(`Unknown action type: ${action.actionType}`, 400)\n  }\n\n  let payload = { ...(action.payload as Record<string, unknown>) }\n\n  // Common normalization (lowercase enums, field aliases)\n  payload = normalizeCommonPayloadFields(payload, action.actionType)\n\n  // Action-specific normalization from the registered handler\n  const actionCtx = adaptContext(ctx)\n  clearLatestCommandLogEntry(actionCtx)\n  if (definition.normalizePayload) {\n    payload = await definition.normalizePayload(payload, actionCtx)\n  }\n\n  const parsed = definition.payloadSchema.safeParse(payload)\n  if (!parsed.success) {\n    throw new ExecutionError(\n      `Invalid ${action.actionType} payload: ${formatZodErrors(parsed.error)}`,\n      400,\n    )\n  }\n\n  const result = await definition.execute(\n    { id: action.id, proposalId: action.proposalId, payload: parsed.data },\n    actionCtx,\n  )\n\n  return {\n    ...result,\n    operationLogEntry: readLatestCommandLogEntry(actionCtx),\n  }\n}\n\nasync function resolveUnknownContactDiscrepanciesInProposal(\n  em: EntityManager,\n  proposalId: string,\n  contactEmail: string,\n  scope: { tenantId: string; organizationId: string },\n): Promise<void> {\n  if (!contactEmail) return\n\n  const discrepancies = await findWithDecryption(\n    em,\n    InboxDiscrepancy,\n    {\n      proposalId,\n      type: 'unknown_contact',\n      resolved: false,\n      tenantId: scope.tenantId,\n      organizationId: scope.organizationId,\n    },\n    undefined,\n    scope,\n  )\n\n  const normalizedEmail = contactEmail.trim().toLowerCase()\n  const matching = discrepancies.filter((d) => {\n    const foundValue = (d.foundValue || '').trim().toLowerCase()\n    return foundValue === normalizedEmail\n  })\n\n  for (const d of matching) {\n    d.resolved = true\n  }\n\n  if (matching.length > 0) {\n    await em.flush()\n  }\n}\n\nasync function ensureUserCanExecuteAction(action: InboxProposalAction, ctx: ExecutionContext): Promise<void> {\n  const requiredFeature = getRequiredFeatureForAction(action)\n  if (!requiredFeature || requiredFeature.trim().length === 0) {\n    throw new ExecutionError(\n      `No required feature is mapped for action type \"${action.actionType}\"; refusing to execute`,\n      403,\n    )\n  }\n\n  const rbacService = ctx.container.resolve('rbacService') as {\n    userHasAllFeatures: (\n      userId: string,\n      features: string[],\n      scope: { tenantId: string; organizationId: string },\n    ) => Promise<boolean>\n  }\n\n  if (!rbacService || typeof rbacService.userHasAllFeatures !== 'function') {\n    throw new ExecutionError('Unable to verify permissions for action execution', 503)\n  }\n\n  const hasFeature = await rbacService.userHasAllFeatures(\n    ctx.userId,\n    [requiredFeature],\n    { tenantId: ctx.tenantId, organizationId: ctx.organizationId },\n  )\n\n  if (!hasFeature) {\n    throw new ExecutionError(`Insufficient permissions: ${requiredFeature} required`, 403)\n  }\n}\n\nfunction resolveEntityClassInternal(\n  ctx: ExecutionContext,\n  key: string,\n): unknown {\n  const fromEntities = (ctx.entities as Record<string, unknown> | undefined)?.[key]\n  if (fromEntities) return fromEntities\n  try { return ctx.container.resolve(key) } catch { return null }\n}\n\n// Re-export splitPersonName for backward compat\nexport { splitPersonName } from './contactValidation'\n\nasync function resolveActionDiscrepancies(\n  em: EntityManager,\n  actionId: string,\n  scope: { tenantId: string; organizationId: string },\n): Promise<void> {\n  const discrepancies = await findWithDecryption(\n    em,\n    InboxDiscrepancy,\n    { actionId, resolved: false },\n    undefined,\n    scope,\n  )\n  for (const discrepancy of discrepancies) {\n    discrepancy.resolved = true\n  }\n  if (discrepancies.length > 0) {\n    await em.flush()\n  }\n}\n\nexport async function recalculateProposalStatus(\n  em: EntityManager,\n  proposalId: string,\n  scope: { tenantId: string; organizationId: string },\n): Promise<void> {\n  const proposal = await findOneWithDecryption(\n    em,\n    InboxProposal,\n    { id: proposalId, deletedAt: null },\n    undefined,\n    scope,\n  )\n  if (!proposal) return\n\n  const actions = await findWithDecryption(\n    em,\n    InboxProposalAction,\n    { proposalId, deletedAt: null },\n    undefined,\n    scope,\n  )\n\n  if (actions.length === 0) {\n    proposal.status = 'pending'\n    await em.flush()\n    return\n  }\n\n  const statuses = actions.map((action) => action.status)\n  const allAcceptedOrExecuted = statuses.every((status) => status === 'accepted' || status === 'executed')\n  const allRejected = statuses.every((status) => status === 'rejected')\n  const allPending = statuses.every((status) => status === 'pending')\n\n  let newStatus: InboxProposalStatus\n  if (allAcceptedOrExecuted) {\n    newStatus = 'accepted'\n  } else if (allRejected) {\n    newStatus = 'rejected'\n  } else if (allPending) {\n    newStatus = 'pending'\n  } else {\n    newStatus = 'partial'\n  }\n\n  if (proposal.status !== newStatus) {\n    proposal.status = newStatus\n    await em.flush()\n  }\n}\n\nexport function getRequiredFeature(actionType: InboxActionType): string {\n  return REQUIRED_FEATURES_MAP[actionType]\n}\n\nfunction getRequiredFeatureForAction(action: InboxProposalAction): string {\n  if (action.actionType === 'create_contact') {\n    const payload = action.payload as Record<string, unknown> | null\n    if (payload?.type === 'company') {\n      return 'customers.companies.manage'\n    }\n  }\n  return REQUIRED_FEATURES_MAP[action.actionType]\n}\n"],
+  "mappings": "AAKA,SAAS,uBAAuB,0BAA0B;AAE1D,SAAS,eAAe,qBAAqB,wBAAwB;AAErE,SAAS,6BAA6B;AACtC,SAAS,uBAAuB;AAChC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAsDP,MAAM,6BAAkD,CAAC,WAAW,QAAQ;AAE5E,eAAsB,cACpB,QACA,KAC0B;AAC1B,QAAM,KAAK,IAAI,GAAG,KAAK;AAEvB,MAAI;AACF,UAAM,2BAA2B,QAAQ,GAAG;AAAA,EAC9C,SAAS,KAAK;AACZ,UAAM,UAAU,eAAe,QAAQ,IAAI,UAAU;AACrD,UAAM,aAAa,eAAe,iBAAiB,IAAI,aAAa;AACpE,WAAO,EAAE,SAAS,OAAO,OAAO,SAAS,WAAW;AAAA,EACtD;AAEA,QAAM,UAAU,MAAM,GAAG;AAAA,IACvB;AAAA,IACA;AAAA,MACE,IAAI,OAAO;AAAA,MACX,YAAY,OAAO;AAAA,MACnB,UAAU,IAAI;AAAA,MACd,gBAAgB,IAAI;AAAA,MACpB,QAAQ,EAAE,KAAK,2BAA2B;AAAA,MAC1C,WAAW;AAAA,IACb;AAAA,IACA;AAAA,MACE,QAAQ;AAAA,MACR,gBAAgB;AAAA,IAClB;AAAA,EACF;AAEA,MAAI,YAAY,GAAG;AACjB,WAAO,EAAE,SAAS,OAAO,OAAO,4BAA4B,YAAY,IAAI;AAAA,EAC9E;AAEA,QAAM,cAAc,MAAM;AAAA,IACxB;AAAA,IACA;AAAA,IACA,EAAE,IAAI,OAAO,IAAI,WAAW,KAAK;AAAA,IACjC;AAAA,IACA,EAAE,UAAU,IAAI,UAAU,gBAAgB,IAAI,eAAe;AAAA,EAC/D;AACA,MAAI,CAAC,aAAa;AAChB,WAAO,EAAE,SAAS,OAAO,OAAO,oBAAoB,YAAY,IAAI;AAAA,EACtE;AAEA,MAAI;AACF,UAAM,SAAS,MAAM,cAAc,aAAa,GAAG;AAEnD,gBAAY,SAAS;AACrB,gBAAY,aAAa,oBAAI,KAAK;AAClC,gBAAY,mBAAmB,IAAI;AACnC,gBAAY,kBAAkB,OAAO,mBAAmB;AACxD,gBAAY,oBAAoB,OAAO,qBAAqB;AAC5D,QAAI,OAAO,oBAAoB,QAAW;AACxC,kBAAY,kBAAkB,OAAO;AAAA,IACvC;AACA,QAAI,OAAO,sBAAsB,QAAW;AAC1C,kBAAY,oBAAoB,OAAO;AAAA,IACzC;AACA,gBAAY,iBAAiB;AAE7B,UAAM,GAAG,MAAM;AACf,UAAM,WAAW,EAAE,UAAU,IAAI,UAAU,gBAAgB,IAAI,eAAe;AAC9E,UAAM,2BAA2B,IAAI,YAAY,IAAI,QAAQ;AAI7D,QAAI,YAAY,eAAe,oBAAoB,YAAY,eAAe,gBAAgB;AAC5F,YAAM,UAAU,YAAY;AAC5B,YAAM,eACJ,OAAO,SAAS,UAAU,WAAW,QAAQ,QACzC,OAAO,SAAS,iBAAiB,WAAW,QAAQ,eAClD;AACR,UAAI,cAAc;AAChB,cAAM;AAAA,UACJ;AAAA,UAAI,YAAY;AAAA,UAAY;AAAA,UAAc;AAAA,QAC5C;AAAA,MACF;AAAA,IACF;AAEA,UAAM,0BAA0B,IAAI,YAAY,YAAY,QAAQ;AAEpE,QAAI,IAAI,UAAU;AAChB,YAAM,IAAI,SAAS,KAAK,6BAA6B;AAAA,QACnD,UAAU,YAAY;AAAA,QACtB,YAAY,YAAY;AAAA,QACxB,YAAY,YAAY;AAAA,QACxB,iBAAiB,OAAO,mBAAmB;AAAA,QAC3C,mBAAmB,OAAO,qBAAqB;AAAA,QAC/C,kBAAkB,IAAI;AAAA,QACtB,UAAU,IAAI;AAAA,QACd,gBAAgB,IAAI;AAAA,MACtB,CAAC;AAAA,IACH;AAEA,WAAO,EAAE,SAAS,MAAM,GAAG,QAAQ,YAAY,IAAI;AAAA,EACrD,SAAS,KAAK;AACZ,UAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC/D,UAAM,aAAa,eAAe,iBAAiB,IAAI,aAAa;AAEpE,gBAAY,SAAS;AACrB,gBAAY,iBAAiB;AAC7B,gBAAY,aAAa,oBAAI,KAAK;AAClC,gBAAY,mBAAmB,IAAI;AACnC,UAAM,GAAG,MAAM;AAEf,UAAM,0BAA0B,IAAI,YAAY,YAAY,EAAE,UAAU,IAAI,UAAU,gBAAgB,IAAI,eAAe,CAAC;AAE1H,QAAI,IAAI,UAAU;AAChB,YAAM,IAAI,SAAS,KAAK,2BAA2B;AAAA,QACjD,UAAU,YAAY;AAAA,QACtB,YAAY,YAAY;AAAA,QACxB,YAAY,YAAY;AAAA,QACxB,OAAO,YAAY;AAAA,QACnB,UAAU,IAAI;AAAA,QACd,gBAAgB,IAAI;AAAA,MACtB,CAAC;AAAA,IACH;AAEA,WAAO,EAAE,SAAS,OAAO,OAAO,YAAY,kBAAkB,iBAAiB,WAAW;AAAA,EAC5F;AACF;AAEA,eAAsB,aACpB,QACA,KACe;AACf,QAAM,KAAK,IAAI,GAAG,KAAK;AACvB,QAAM,aAAa,oBAAI,KAAK;AAC5B,QAAM,UAAU,MAAM,GAAG;AAAA,IACvB;AAAA,IACA;AAAA,MACE,IAAI,OAAO;AAAA,MACX,YAAY,OAAO;AAAA,MACnB,UAAU,IAAI;AAAA,MACd,gBAAgB,IAAI;AAAA,MACpB,QAAQ,EAAE,KAAK,2BAA2B;AAAA,MAC1C,WAAW;AAAA,IACb;AAAA,IACA;AAAA,MACE,QAAQ;AAAA,MACR,YAAY;AAAA,MACZ,kBAAkB,IAAI;AAAA,IACxB;AAAA,EACF;AACA,MAAI,YAAY,EAAG;AAEnB,QAAM,cAAc,MAAM;AAAA,IACxB;AAAA,IACA;AAAA,IACA,EAAE,IAAI,OAAO,IAAI,WAAW,KAAK;AAAA,IACjC;AAAA,IACA,EAAE,UAAU,IAAI,UAAU,gBAAgB,IAAI,eAAe;AAAA,EAC/D;AACA,MAAI,CAAC,YAAa;AAElB,QAAM,WAAW,EAAE,UAAU,IAAI,UAAU,gBAAgB,IAAI,eAAe;AAC9E,QAAM,2BAA2B,IAAI,YAAY,IAAI,QAAQ;AAC7D,QAAM,0BAA0B,IAAI,YAAY,YAAY,QAAQ;AAEpE,MAAI,IAAI,UAAU;AAChB,UAAM,IAAI,SAAS,KAAK,6BAA6B;AAAA,MACnD,UAAU,YAAY;AAAA,MACtB,YAAY,YAAY;AAAA,MACxB,YAAY,YAAY;AAAA,MACxB,UAAU,IAAI;AAAA,MACd,gBAAgB,IAAI;AAAA,IACtB,CAAC;AAAA,EACH;AACF;AAEA,eAAsB,eACpB,YACA,KACe;AACf,QAAM,KAAK,IAAI,GAAG,KAAK;AACvB,QAAM,aAAa,oBAAI,KAAK;AAE5B,QAAM,GAAG;AAAA,IACP;AAAA,IACA;AAAA,MACE;AAAA,MACA,QAAQ,EAAE,KAAK,2BAA2B;AAAA,MAC1C,UAAU,IAAI;AAAA,MACd,gBAAgB,IAAI;AAAA,MACpB,WAAW;AAAA,IACb;AAAA,IACA;AAAA,MACE,QAAQ;AAAA,MACR,YAAY;AAAA,MACZ,kBAAkB,IAAI;AAAA,IACxB;AAAA,EACF;AAEA,QAAM,GAAG;AAAA,IACP;AAAA,IACA;AAAA,MACE;AAAA,MACA,UAAU;AAAA,MACV,UAAU,IAAI;AAAA,MACd,gBAAgB,IAAI;AAAA,IACtB;AAAA,IACA,EAAE,UAAU,KAAK;AAAA,EACnB;AAEA,QAAM,0BAA0B,IAAI,YAAY,EAAE,UAAU,IAAI,UAAU,gBAAgB,IAAI,eAAe,CAAC;AAE9G,MAAI,IAAI,UAAU;AAChB,UAAM,IAAI,SAAS,KAAK,+BAA+B;AAAA,MACrD;AAAA,MACA,UAAU,IAAI;AAAA,MACd,gBAAgB,IAAI;AAAA,IACtB,CAAC;AAAA,EACH;AACF;AAEA,eAAsB,iBACpB,YACA,KACoE;AACpE,QAAM,KAAK,IAAI,GAAG,KAAK;AACvB,QAAM,UAAU,MAAM;AAAA,IACpB;AAAA,IACA;AAAA,IACA;AAAA,MACE;AAAA,MACA,QAAQ;AAAA,MACR,WAAW;AAAA,IACb;AAAA,IACA,EAAE,SAAS,EAAE,WAAW,MAAM,EAAE;AAAA,IAChC,EAAE,UAAU,IAAI,UAAU,gBAAgB,IAAI,eAAe;AAAA,EAC/D;AAEA,QAAM,UAA6B,CAAC;AACpC,MAAI,mBAAmB;AAEvB,aAAW,UAAU,SAAS;AAC5B,UAAM,SAAS,MAAM,cAAc,QAAQ,GAAG;AAC9C,YAAQ,KAAK,MAAM;AAEnB,QAAI,CAAC,OAAO,SAAS;AACnB,yBAAmB;AACnB;AAAA,IACF;AAAA,EACF;AAEA,SAAO,EAAE,SAAS,iBAAiB;AACrC;AAKA,SAAS,6BACP,SACA,YACyB;AAEzB,MAAI,OAAO,QAAQ,SAAS,UAAU;AACpC,YAAQ,OAAO,QAAQ,KAAK,YAAY;AAAA,EAC1C;AACA,MAAI,OAAO,QAAQ,gBAAgB,UAAU;AAC3C,YAAQ,cAAc,QAAQ,YAAY,YAAY;AAAA,EACxD;AAGA,MAAI,eAAe,gBAAgB;AACjC,QAAI,CAAC,QAAQ,cAAc;AACzB,YAAM,MAAM,QAAQ,SAAS,QAAQ;AACrC,UAAI,OAAO,QAAQ,SAAU,SAAQ,eAAe;AAAA,IACtD;AACA,QAAI,CAAC,QAAQ,WAAW;AACtB,YAAM,MAAM,QAAQ,MAAM,QAAQ,aAAa,QAAQ;AACvD,UAAI,OAAO,QAAQ,SAAU,SAAQ,YAAY;AAAA,IACnD;AACA,QAAI,CAAC,QAAQ,aAAa;AACxB,YAAM,MAAM,QAAQ,QAAQ,QAAQ,QAAQ,QAAQ,eAAe,QAAQ;AAC3E,UAAI,OAAO,QAAQ,SAAU,SAAQ,cAAc,IAAI,YAAY;AAAA,IACrE;AACA,QAAI,CAAC,QAAQ,aAAa;AACxB,YAAM,MAAM,QAAQ,QAAQ,QAAQ;AACpC,UAAI,OAAO,QAAQ,SAAU,SAAQ,cAAc;AAAA,IACrD;AAAA,EACF;AAEA,SAAO;AACT;AAMA,SAAS,aAAa,KAAoD;AACxE,SAAO;AAAA,IACL,GAAG;AAAA,IACH,gBAAgB,CAAkB,WAAmB,UACnD,eAAgC,KAAK,WAAW,KAAK;AAAA,IACvD,oBAAoB,CAAI,QACtB,2BAA2B,KAAK,GAAG;AAAA,EACvC;AACF;AAEA,eAAe,cACb,QACA,KAC8B;AAE9B,QAAM,EAAE,eAAe,IAAI,MAAM,OAAO,8CAA8C;AACtF,QAAM,aAAa,eAAe,OAAO,UAAU;AACnD,MAAI,CAAC,YAAY;AACf,UAAM,IAAI,eAAe,wBAAwB,OAAO,UAAU,IAAI,GAAG;AAAA,EAC3E;AAEA,MAAI,UAAU,EAAE,GAAI,OAAO,QAAoC;AAG/D,YAAU,6BAA6B,SAAS,OAAO,UAAU;AAGjE,QAAM,YAAY,aAAa,GAAG;AAClC,6BAA2B,SAAS;AACpC,MAAI,WAAW,kBAAkB;AAC/B,cAAU,MAAM,WAAW,iBAAiB,SAAS,SAAS;AAAA,EAChE;AAEA,QAAM,SAAS,WAAW,cAAc,UAAU,OAAO;AACzD,MAAI,CAAC,OAAO,SAAS;AACnB,UAAM,IAAI;AAAA,MACR,WAAW,OAAO,UAAU,aAAa,gBAAgB,OAAO,KAAK,CAAC;AAAA,MACtE;AAAA,IACF;AAAA,EACF;AAEA,QAAM,SAAS,MAAM,WAAW;AAAA,IAC9B,EAAE,IAAI,OAAO,IAAI,YAAY,OAAO,YAAY,SAAS,OAAO,KAAK;AAAA,IACrE;AAAA,EACF;AAEA,SAAO;AAAA,IACL,GAAG;AAAA,IACH,mBAAmB,0BAA0B,SAAS;AAAA,EACxD;AACF;AAEA,eAAe,6CACb,IACA,YACA,cACA,OACe;AACf,MAAI,CAAC,aAAc;AAEnB,QAAM,gBAAgB,MAAM;AAAA,IAC1B;AAAA,IACA;AAAA,IACA;AAAA,MACE;AAAA,MACA,MAAM;AAAA,MACN,UAAU;AAAA,MACV,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM;AAAA,IACxB;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAEA,QAAM,kBAAkB,aAAa,KAAK,EAAE,YAAY;AACxD,QAAM,WAAW,cAAc,OAAO,CAAC,MAAM;AAC3C,UAAM,cAAc,EAAE,cAAc,IAAI,KAAK,EAAE,YAAY;AAC3D,WAAO,eAAe;AAAA,EACxB,CAAC;AAED,aAAW,KAAK,UAAU;AACxB,MAAE,WAAW;AAAA,EACf;AAEA,MAAI,SAAS,SAAS,GAAG;AACvB,UAAM,GAAG,MAAM;AAAA,EACjB;AACF;AAEA,eAAe,2BAA2B,QAA6B,KAAsC;AAC3G,QAAM,kBAAkB,4BAA4B,MAAM;AAC1D,MAAI,CAAC,mBAAmB,gBAAgB,KAAK,EAAE,WAAW,GAAG;AAC3D,UAAM,IAAI;AAAA,MACR,kDAAkD,OAAO,UAAU;AAAA,MACnE;AAAA,IACF;AAAA,EACF;AAEA,QAAM,cAAc,IAAI,UAAU,QAAQ,aAAa;AAQvD,MAAI,CAAC,eAAe,OAAO,YAAY,uBAAuB,YAAY;AACxE,UAAM,IAAI,eAAe,qDAAqD,GAAG;AAAA,EACnF;AAEA,QAAM,aAAa,MAAM,YAAY;AAAA,IACnC,IAAI;AAAA,IACJ,CAAC,eAAe;AAAA,IAChB,EAAE,UAAU,IAAI,UAAU,gBAAgB,IAAI,eAAe;AAAA,EAC/D;AAEA,MAAI,CAAC,YAAY;AACf,UAAM,IAAI,eAAe,6BAA6B,eAAe,aAAa,GAAG;AAAA,EACvF;AACF;AAEA,SAAS,2BACP,KACA,KACS;AACT,QAAM,eAAgB,IAAI,WAAmD,GAAG;AAChF,MAAI,aAAc,QAAO;AACzB,MAAI;AAAE,WAAO,IAAI,UAAU,QAAQ,GAAG;AAAA,EAAE,QAAQ;AAAE,WAAO;AAAA,EAAK;AAChE;AAGA,SAAS,uBAAuB;AAEhC,eAAe,2BACb,IACA,UACA,OACe;AACf,QAAM,gBAAgB,MAAM;AAAA,IAC1B;AAAA,IACA;AAAA,IACA,EAAE,UAAU,UAAU,MAAM;AAAA,IAC5B;AAAA,IACA;AAAA,EACF;AACA,aAAW,eAAe,eAAe;AACvC,gBAAY,WAAW;AAAA,EACzB;AACA,MAAI,cAAc,SAAS,GAAG;AAC5B,UAAM,GAAG,MAAM;AAAA,EACjB;AACF;AAEA,eAAsB,0BACpB,IACA,YACA,OACe;AACf,QAAM,WAAW,MAAM;AAAA,IACrB;AAAA,IACA;AAAA,IACA,EAAE,IAAI,YAAY,WAAW,KAAK;AAAA,IAClC;AAAA,IACA;AAAA,EACF;AACA,MAAI,CAAC,SAAU;AAEf,QAAM,UAAU,MAAM;AAAA,IACpB;AAAA,IACA;AAAA,IACA,EAAE,YAAY,WAAW,KAAK;AAAA,IAC9B;AAAA,IACA;AAAA,EACF;AAEA,MAAI,QAAQ,WAAW,GAAG;AACxB,aAAS,SAAS;AAClB,UAAM,GAAG,MAAM;AACf;AAAA,EACF;AAEA,QAAM,WAAW,QAAQ,IAAI,CAAC,WAAW,OAAO,MAAM;AACtD,QAAM,wBAAwB,SAAS,MAAM,CAAC,WAAW,WAAW,cAAc,WAAW,UAAU;AACvG,QAAM,cAAc,SAAS,MAAM,CAAC,WAAW,WAAW,UAAU;AACpE,QAAM,aAAa,SAAS,MAAM,CAAC,WAAW,WAAW,SAAS;AAElE,MAAI;AACJ,MAAI,uBAAuB;AACzB,gBAAY;AAAA,EACd,WAAW,aAAa;AACtB,gBAAY;AAAA,EACd,WAAW,YAAY;AACrB,gBAAY;AAAA,EACd,OAAO;AACL,gBAAY;AAAA,EACd;AAEA,MAAI,SAAS,WAAW,WAAW;AACjC,aAAS,SAAS;AAClB,UAAM,GAAG,MAAM;AAAA,EACjB;AACF;AAEO,SAAS,mBAAmB,YAAqC;AACtE,SAAO,sBAAsB,UAAU;AACzC;AAEA,SAAS,4BAA4B,QAAqC;AACxE,MAAI,OAAO,eAAe,kBAAkB;AAC1C,UAAM,UAAU,OAAO;AACvB,QAAI,SAAS,SAAS,WAAW;AAC/B,aAAO;AAAA,IACT;AAAA,EACF;AACA,SAAO,sBAAsB,OAAO,UAAU;AAChD;",
   "names": []
 }

package/dist/modules/inbox_ops/lib/executionHelpers.js

@@ -13,12 +13,7 @@ function readLatestCommandLogEntry(ctx) {
 }
 function hasSuperAdminAccess(auth) {
   if (!auth || typeof auth !== "object") return false;
-  if (auth.isSuperAdmin === true) return true;
-  const roles = auth.roles;
-  if (!Array.isArray(roles)) return false;
-  return roles.some(
-    (role) => typeof role === "string" && role.trim().toLowerCase() === "superadmin"
-  );
+  return auth.isSuperAdmin === true;
 }
 class ExecutionError extends Error {
   constructor(message, statusCode = 400) {
@@ -56,7 +51,7 @@ async function executeCommand(ctx, commandId, input) {
   return result;
 }
 async function userHasFeature(ctx, feature) {
-  if (!feature) return true;
+  if (!feature || feature.trim().length === 0) return false;
   if (hasSuperAdminAccess(ctx.auth)) return true;
   try {
     const rbacService = ctx.container.resolve("rbacService");

package/dist/modules/inbox_ops/lib/executionHelpers.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/inbox_ops/lib/executionHelpers.ts"],
-  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport type { EntityClass } from '@mikro-orm/core'\nimport type { AwilixContainer } from 'awilix'\nimport type { EventBus } from '@open-mercato/events/types'\nimport type { AuthContext } from '@open-mercato/shared/lib/auth/server'\nimport type { CommandBus, CommandRuntimeContext } from '@open-mercato/shared/lib/commands'\nimport { findOneWithDecryption, findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport type { InboxActionExecutionContext } from '@open-mercato/shared/modules/inbox-actions'\nimport type { CrossModuleEntities } from './executionEngine'\nexport { formatZodErrors } from './validation'\n\n// ---------------------------------------------------------------------------\n// Context type used by helper functions (concrete types for ORM/DI access)\n// ---------------------------------------------------------------------------\n\nexport interface ExecutionHelperContext {\n  em: EntityManager\n  userId: string\n  tenantId: string\n  organizationId: string\n  eventBus?: EventBus | null\n  container: AwilixContainer\n  auth?: AuthContext\n  entities?: CrossModuleEntities\n}\n\ntype OperationLogEntryLike = {\n  id?: string | null\n  undoToken?: string | null\n  commandId?: string | null\n  actionLabel?: string | null\n  resourceKind?: string | null\n  resourceId?: string | null\n  createdAt?: Date | string | null\n}\n\nconst LAST_OPERATION_LOG_ENTRY = Symbol('inboxOps:lastOperationLogEntry')\n\ntype OperationLogCarrier = {\n  [LAST_OPERATION_LOG_ENTRY]?: OperationLogEntryLike | null\n}\n\n/**\n * Cast InboxActionExecutionContext (from shared) to the concrete helper context.\n * The inbox-actions.ts handlers receive InboxActionExecutionContext but helpers\n * need concrete EntityManager / AwilixContainer types.\n */\nexport function asHelperContext(ctx: InboxActionExecutionContext): ExecutionHelperContext {\n  return ctx as unknown as ExecutionHelperContext\n}\n\nexport function clearLatestCommandLogEntry(ctx: object) {\n  ;(ctx as OperationLogCarrier)[LAST_OPERATION_LOG_ENTRY] = null\n}\n\nexport function readLatestCommandLogEntry(ctx: object): OperationLogEntryLike | null {\n  return (ctx as OperationLogCarrier)[LAST_OPERATION_LOG_ENTRY] ?? null\n}\n\ninterface FeatureCheckingRbacService {\n  userHasAllFeatures: (\n    userId: string,\n    features: string[],\n    scope: { tenantId: string; organizationId: string },\n  ) => Promise<boolean>\n}\n\nfunction hasSuperAdminAccess(auth: ExecutionHelperContext['auth']): boolean {\n  if (!auth || typeof auth !== 'object') return false\n  if ((auth as Record<string, unknown>).isSuperAdmin === true) return true\n  const roles = (auth as Record<string, unknown>).roles\n  if (!Array.isArray(roles)) return false\n  return roles.some(\n    (role) => typeof role === 'string' && role.trim().toLowerCase() === 'superadmin',\n  )\n}\n\n// ---------------------------------------------------------------------------\n// Error\n// ---------------------------------------------------------------------------\n\nexport class ExecutionError extends Error {\n  statusCode: number\n\n  constructor(message: string, statusCode = 400) {\n    super(message)\n    this.statusCode = statusCode\n  }\n}\n\n// ---------------------------------------------------------------------------\n// Command execution\n// ---------------------------------------------------------------------------\n\nexport async function executeCommand<TInput, TResult>(\n  ctx: ExecutionHelperContext,\n  commandId: string,\n  input: TInput,\n): Promise<TResult> {\n  const commandBus = ctx.container.resolve('commandBus') as CommandBus\n  if (!commandBus || typeof commandBus.execute !== 'function') {\n    throw new ExecutionError('Command bus is not available', 503)\n  }\n\n  const auth =\n    ctx.auth ??\n    ({\n      sub: ctx.userId,\n      userId: ctx.userId,\n      tenantId: ctx.tenantId,\n      orgId: ctx.organizationId,\n      isSuperAdmin: false,\n    } satisfies Exclude<AuthContext, null>)\n\n  const commandContext: CommandRuntimeContext = {\n    container: ctx.container,\n    auth,\n    organizationScope: null,\n    selectedOrganizationId: ctx.organizationId,\n    organizationIds: [ctx.organizationId],\n  }\n\n  const { result, logEntry } = await commandBus.execute<TInput, TResult>(commandId, {\n    input,\n    ctx: commandContext,\n  })\n\n  if (logEntry?.undoToken && logEntry.id && logEntry.commandId) {\n    ;(ctx as ExecutionHelperContext & OperationLogCarrier)[LAST_OPERATION_LOG_ENTRY] = logEntry\n  }\n\n  return result\n}\n\nexport async function userHasFeature(\n  ctx: ExecutionHelperContext,\n  feature: string,\n): Promise<boolean> {\n  if (!feature) return true\n  if (hasSuperAdminAccess(ctx.auth)) return true\n\n  try {\n    const rbacService = ctx.container.resolve('rbacService') as FeatureCheckingRbacService\n    if (!rbacService || typeof rbacService.userHasAllFeatures !== 'function') {\n      return false\n    }\n    return rbacService.userHasAllFeatures(\n      ctx.userId,\n      [feature],\n      { tenantId: ctx.tenantId, organizationId: ctx.organizationId },\n    )\n  } catch {\n    return false\n  }\n}\n\n// ---------------------------------------------------------------------------\n// Entity resolution\n// ---------------------------------------------------------------------------\n\nexport function resolveEntityClass<K extends keyof CrossModuleEntities>(\n  ctx: ExecutionHelperContext,\n  key: K,\n): CrossModuleEntities[K] | null {\n  const fromEntities = ctx.entities?.[key]\n  if (fromEntities) return fromEntities\n  try { return ctx.container.resolve(key) } catch { return null }\n}\n\n// ---------------------------------------------------------------------------\n// Source metadata\n// ---------------------------------------------------------------------------\n\nexport function buildSourceMetadata(actionId: string, proposalId: string): Record<string, unknown> {\n  return {\n    source: 'inbox_ops',\n    inboxOpsActionId: actionId,\n    inboxOpsProposalId: proposalId,\n  }\n}\n\n// ---------------------------------------------------------------------------\n// Order resolution\n// ---------------------------------------------------------------------------\n\nexport async function resolveOrderByReference(\n  ctx: ExecutionHelperContext,\n  orderId?: string,\n  orderNumber?: string,\n): Promise<{ id: string; orderNumber: string; currencyCode: string; comments?: string | null }> {\n  const SalesOrderClass = resolveEntityClass(ctx, 'SalesOrder')\n  if (!SalesOrderClass) {\n    throw new ExecutionError('Sales module entities not available', 503)\n  }\n\n  const where: Record<string, unknown> = {\n    tenantId: ctx.tenantId,\n    organizationId: ctx.organizationId,\n    deletedAt: null,\n  }\n  if (orderId) {\n    where.id = orderId\n  } else if (orderNumber && orderNumber.trim().length > 0) {\n    where.orderNumber = orderNumber.trim()\n  } else {\n    throw new ExecutionError('Order reference is required', 400)\n  }\n\n  const order = await findOneWithDecryption(\n    ctx.em,\n    SalesOrderClass,\n    where,\n    undefined,\n    { tenantId: ctx.tenantId, organizationId: ctx.organizationId },\n  )\n  if (!order) {\n    throw new ExecutionError('Referenced order not found', 404)\n  }\n  return order\n}\n\n// ---------------------------------------------------------------------------\n// Channel resolution\n// ---------------------------------------------------------------------------\n\nexport async function resolveFirstChannelId(ctx: ExecutionHelperContext): Promise<string | null> {\n  const SalesChannelClass = resolveEntityClass(ctx, 'SalesChannel')\n  if (!SalesChannelClass) return null\n\n  try {\n    const channel = await findOneWithDecryption(\n      ctx.em,\n      SalesChannelClass,\n      {\n        tenantId: ctx.tenantId,\n        organizationId: ctx.organizationId,\n        deletedAt: null,\n      },\n      { orderBy: { name: 'ASC' } },\n      { tenantId: ctx.tenantId, organizationId: ctx.organizationId },\n    )\n    return channel?.id ?? null\n  } catch {\n    return null\n  }\n}\n\nexport async function resolveChannelCurrency(\n  ctx: ExecutionHelperContext,\n  channelId: string | null,\n): Promise<string | null> {\n  const SalesChannelClass = resolveEntityClass(ctx, 'SalesChannel')\n  if (!SalesChannelClass) return null\n\n  try {\n    const where: Record<string, unknown> = {\n      tenantId: ctx.tenantId,\n      organizationId: ctx.organizationId,\n      deletedAt: null,\n    }\n    if (channelId) where.id = channelId\n    const channel = await findOneWithDecryption(\n      ctx.em,\n      SalesChannelClass,\n      where,\n      channelId ? undefined : { orderBy: { name: 'ASC' } },\n      { tenantId: ctx.tenantId, organizationId: ctx.organizationId },\n    )\n    return channel?.currencyCode ?? null\n  } catch {\n    return null\n  }\n}\n\nexport async function resolveEffectiveDocumentKind(\n  ctx: ExecutionHelperContext,\n  channelId: string,\n): Promise<'order' | 'quote'> {\n  const SalesChannelClass = resolveEntityClass(ctx, 'SalesChannel')\n  if (!SalesChannelClass) return 'order'\n\n  const channel = await findOneWithDecryption(\n    ctx.em,\n    SalesChannelClass,\n    {\n      id: channelId,\n      tenantId: ctx.tenantId,\n      organizationId: ctx.organizationId,\n      deletedAt: null,\n    },\n    undefined,\n    { tenantId: ctx.tenantId, organizationId: ctx.organizationId },\n  )\n  if (!channel) return 'order'\n\n  const metadata = channel.metadata as Record<string, unknown> | null\n  if (metadata?.quotesRequired === true) {\n    return 'quote'\n  }\n  return 'order'\n}\n\n// ---------------------------------------------------------------------------\n// Shipment status resolution\n// ---------------------------------------------------------------------------\n\nconst SALES_SHIPMENT_STATUS_DICTIONARY_KEY = 'sales.shipment_status'\n\nexport async function resolveShipmentStatusEntryId(\n  ctx: ExecutionHelperContext,\n  statusLabel: string,\n): Promise<string | null> {\n  const DictionaryClass = resolveEntityClass(ctx, 'Dictionary')\n  const DictionaryEntryClass = resolveEntityClass(ctx, 'DictionaryEntry')\n  if (!DictionaryClass || !DictionaryEntryClass) return null\n\n  const encryptionScope = { tenantId: ctx.tenantId, organizationId: ctx.organizationId }\n\n  const dictionary = await findOneWithDecryption(\n    ctx.em,\n    DictionaryClass,\n    {\n      key: SALES_SHIPMENT_STATUS_DICTIONARY_KEY,\n      tenantId: ctx.tenantId,\n      organizationId: ctx.organizationId,\n      deletedAt: null,\n    },\n    undefined,\n    encryptionScope,\n  )\n  if (!dictionary) return null\n\n  const entries = await findWithDecryption(\n    ctx.em,\n    DictionaryEntryClass,\n    {\n      dictionary: dictionary.id,\n      tenantId: ctx.tenantId,\n      organizationId: ctx.organizationId,\n    },\n    undefined,\n    encryptionScope,\n  )\n  if (!entries.length) return null\n\n  const normalizedTarget = normalizeDictionaryToken(statusLabel)\n  const loweredTarget = statusLabel.trim().toLowerCase()\n\n  const match = entries.find((entry) => {\n    const label = entry.label.trim().toLowerCase()\n    const value = entry.value.trim().toLowerCase()\n    return (\n      entry.normalizedValue === normalizedTarget ||\n      label === loweredTarget ||\n      value === loweredTarget\n    )\n  })\n\n  return match?.id ?? null\n}\n\n// ---------------------------------------------------------------------------\n// Customer / contact resolution\n// ---------------------------------------------------------------------------\n\nexport async function resolveCustomerEntityIdByEmail(\n  ctx: ExecutionHelperContext,\n  email: string,\n): Promise<string | null> {\n  const normalized = email.trim().toLowerCase()\n  if (!normalized) return null\n\n  const CustomerEntityClass = resolveEntityClass(ctx, 'CustomerEntity')\n  if (!CustomerEntityClass) return null\n\n  const entity = await findOneWithDecryption(\n    ctx.em,\n    CustomerEntityClass,\n    {\n      primaryEmail: normalized,\n      tenantId: ctx.tenantId,\n      organizationId: ctx.organizationId,\n      deletedAt: null,\n    },\n    undefined,\n    { tenantId: ctx.tenantId, organizationId: ctx.organizationId },\n  )\n  if (entity) return entity.id\n\n  const candidates = await findWithDecryption(\n    ctx.em,\n    CustomerEntityClass,\n    {\n      tenantId: ctx.tenantId,\n      organizationId: ctx.organizationId,\n      deletedAt: null,\n    },\n    { limit: 100, orderBy: { createdAt: 'DESC' } },\n    { tenantId: ctx.tenantId, organizationId: ctx.organizationId },\n  )\n  const match = candidates.find(\n    (e) => e.primaryEmail && e.primaryEmail.toLowerCase() === normalized,\n  )\n  return match?.id ?? null\n}\n\nexport async function resolveContactIdByNameAndType(\n  ctx: ExecutionHelperContext,\n  contactName: string,\n  contactType: string,\n): Promise<string | null> {\n  const CustomerEntityClass = resolveEntityClass(ctx, 'CustomerEntity')\n  if (!CustomerEntityClass) return null\n\n  const normalized = contactName.trim()\n  if (!normalized) return null\n\n  const entity = await findOneWithDecryption(\n    ctx.em,\n    CustomerEntityClass,\n    {\n      displayName: normalized,\n      kind: contactType,\n      tenantId: ctx.tenantId,\n      organizationId: ctx.organizationId,\n      deletedAt: null,\n    },\n    undefined,\n    { tenantId: ctx.tenantId, organizationId: ctx.organizationId },\n  )\n\n  return entity?.id ?? null\n}\n\n// ---------------------------------------------------------------------------\n// Order line items\n// ---------------------------------------------------------------------------\n\nexport interface OrderLineItem {\n  id: string\n  name?: string | null\n}\n\nexport async function loadOrderLineItems(\n  ctx: ExecutionHelperContext,\n  orderId: string,\n): Promise<OrderLineItem[]> {\n  try {\n    const result = await executeCommand<Record<string, unknown>, { lines?: OrderLineItem[] }>(\n      ctx,\n      'sales.orders.lines.list',\n      { orderId, organizationId: ctx.organizationId, tenantId: ctx.tenantId },\n    )\n    return result.lines ?? []\n  } catch {\n    return []\n  }\n}\n\nexport function matchLineItemByName(\n  orderLines: OrderLineItem[],\n  lineItemName: string,\n): string | null {\n  const target = lineItemName.trim().toLowerCase()\n  if (!target) return null\n\n  const exact = orderLines.find((l) => (l.name || '').trim().toLowerCase() === target)\n  if (exact) return exact.id\n\n  const partial = orderLines.find((l) => {\n    const name = (l.name || '').trim().toLowerCase()\n    return name.includes(target) || target.includes(name)\n  })\n  return partial?.id ?? null\n}\n\n// ---------------------------------------------------------------------------\n// Data normalization utilities\n// ---------------------------------------------------------------------------\n\nexport function normalizeAddressSnapshot(\n  address: Record<string, unknown>,\n): Record<string, unknown> {\n  return {\n    addressLine1: address.line1 ?? address.addressLine1 ?? '',\n    addressLine2: address.line2 ?? address.addressLine2 ?? null,\n    companyName: address.company ?? address.companyName ?? null,\n    name: address.contactName ?? address.name ?? null,\n    city: address.city ?? null,\n    region: address.state ?? address.region ?? null,\n    postalCode: address.postalCode ?? null,\n    country: address.country ?? null,\n  }\n}\n\nexport function parseDateToken(value?: string | null): Date | undefined {\n  if (!value) return undefined\n  const parsed = new Date(value)\n  if (Number.isNaN(parsed.getTime())) return undefined\n  return parsed\n}\n\nexport function parseNumberToken(value: string, fieldName: string): number {\n  const parsed = Number(value)\n  if (!Number.isFinite(parsed)) {\n    throw new ExecutionError(`Invalid numeric value for ${fieldName}`, 400)\n  }\n  return parsed\n}\n\nexport function normalizeDictionaryToken(value: string): string {\n  return value.trim().toLowerCase().replace(/[\\s-]+/g, '_')\n}\n\n// ---------------------------------------------------------------------------\n// Product discrepancy resolution (used by catalog inbox action handler)\n// ---------------------------------------------------------------------------\n\nexport async function resolveProductDiscrepanciesInProposal(\n  em: EntityManager,\n  proposalId: string,\n  productTitle: string,\n  productId: string,\n  scope: { tenantId: string; organizationId: string },\n): Promise<void> {\n  const { InboxDiscrepancy, InboxProposalAction } = await import('../data/entities')\n\n  const discrepancies = await findWithDecryption(\n    em,\n    InboxDiscrepancy,\n    {\n      proposalId,\n      type: 'product_not_found',\n      resolved: false,\n      tenantId: scope.tenantId,\n      organizationId: scope.organizationId,\n    },\n    undefined,\n    scope,\n  )\n\n  const normalizedTitle = productTitle.toLowerCase().trim()\n  const matchingDiscrepancies = discrepancies.filter((d) => {\n    const foundValue = (d.foundValue || '').toLowerCase().trim()\n    return foundValue === normalizedTitle\n  })\n\n  if (matchingDiscrepancies.length === 0) return\n\n  // Phase 1: flush scalar mutations before any queries to avoid UoW tracking loss (SPEC-018)\n  for (const discrepancy of matchingDiscrepancies) {\n    discrepancy.resolved = true\n  }\n  await em.flush()\n\n  // Phase 2: update line item product IDs (involves findOneWithDecryption queries)\n  const actionIds = matchingDiscrepancies\n    .map((d) => d.actionId)\n    .filter((id): id is string => !!id)\n\n  for (const actionId of actionIds) {\n    const action = await findOneWithDecryption(\n      em,\n      InboxProposalAction,\n      { id: actionId, deletedAt: null },\n      undefined,\n      scope,\n    )\n    if (!action) continue\n\n    const payload = action.payload as Record<string, unknown>\n    const lineItems = Array.isArray(payload?.lineItems)\n      ? (payload.lineItems as Record<string, unknown>[])\n      : []\n\n    let updated = false\n    for (const item of lineItems) {\n      if (item.productId) continue\n      const itemName = (typeof item.productName === 'string' ? item.productName : '').toLowerCase().trim()\n      if (itemName === normalizedTitle) {\n        item.productId = productId\n        updated = true\n        break\n      }\n    }\n\n    if (updated) {\n      action.payload = { ...payload, lineItems }\n    }\n  }\n\n  if (actionIds.length > 0) {\n    await em.flush()\n  }\n}\n"],
-  "mappings": "AAMA,SAAS,uBAAuB,0BAA0B;AAG1D,SAAS,uBAAuB;AA2BhC,MAAM,2BAA2B,uBAAO,gCAAgC;AAWjE,SAAS,gBAAgB,KAA0D;AACxF,SAAO;AACT;AAEO,SAAS,2BAA2B,KAAa;AACtD;AAAC,EAAC,IAA4B,wBAAwB,IAAI;AAC5D;AAEO,SAAS,0BAA0B,KAA2C;AACnF,SAAQ,IAA4B,wBAAwB,KAAK;AACnE;AAUA,SAAS,oBAAoB,MAA+C;AAC1E,MAAI,CAAC,QAAQ,OAAO,SAAS,SAAU,QAAO;AAC9C,MAAK,KAAiC,iBAAiB,KAAM,QAAO;AACpE,QAAM,QAAS,KAAiC;AAChD,MAAI,CAAC,MAAM,QAAQ,KAAK,EAAG,QAAO;AAClC,SAAO,MAAM;AAAA,IACX,CAAC,SAAS,OAAO,SAAS,YAAY,KAAK,KAAK,EAAE,YAAY,MAAM;AAAA,EACtE;AACF;AAMO,MAAM,uBAAuB,MAAM;AAAA,EAGxC,YAAY,SAAiB,aAAa,KAAK;AAC7C,UAAM,OAAO;AACb,SAAK,aAAa;AAAA,EACpB;AACF;AAMA,eAAsB,eACpB,KACA,WACA,OACkB;AAClB,QAAM,aAAa,IAAI,UAAU,QAAQ,YAAY;AACrD,MAAI,CAAC,cAAc,OAAO,WAAW,YAAY,YAAY;AAC3D,UAAM,IAAI,eAAe,gCAAgC,GAAG;AAAA,EAC9D;AAEA,QAAM,OACJ,IAAI,QACH;AAAA,IACC,KAAK,IAAI;AAAA,IACT,QAAQ,IAAI;AAAA,IACZ,UAAU,IAAI;AAAA,IACd,OAAO,IAAI;AAAA,IACX,cAAc;AAAA,EAChB;AAEF,QAAM,iBAAwC;AAAA,IAC5C,WAAW,IAAI;AAAA,IACf;AAAA,IACA,mBAAmB;AAAA,IACnB,wBAAwB,IAAI;AAAA,IAC5B,iBAAiB,CAAC,IAAI,cAAc;AAAA,EACtC;AAEA,QAAM,EAAE,QAAQ,SAAS,IAAI,MAAM,WAAW,QAAyB,WAAW;AAAA,IAChF;AAAA,IACA,KAAK;AAAA,EACP,CAAC;AAED,MAAI,UAAU,aAAa,SAAS,MAAM,SAAS,WAAW;AAC5D;AAAC,IAAC,IAAqD,wBAAwB,IAAI;AAAA,EACrF;AAEA,SAAO;AACT;AAEA,eAAsB,eACpB,KACA,SACkB;AAClB,MAAI,CAAC,QAAS,QAAO;AACrB,MAAI,oBAAoB,IAAI,IAAI,EAAG,QAAO;AAE1C,MAAI;AACF,UAAM,cAAc,IAAI,UAAU,QAAQ,aAAa;AACvD,QAAI,CAAC,eAAe,OAAO,YAAY,uBAAuB,YAAY;AACxE,aAAO;AAAA,IACT;AACA,WAAO,YAAY;AAAA,MACjB,IAAI;AAAA,MACJ,CAAC,OAAO;AAAA,MACR,EAAE,UAAU,IAAI,UAAU,gBAAgB,IAAI,eAAe;AAAA,IAC/D;AAAA,EACF,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAMO,SAAS,mBACd,KACA,KAC+B;AAC/B,QAAM,eAAe,IAAI,WAAW,GAAG;AACvC,MAAI,aAAc,QAAO;AACzB,MAAI;AAAE,WAAO,IAAI,UAAU,QAAQ,GAAG;AAAA,EAAE,QAAQ;AAAE,WAAO;AAAA,EAAK;AAChE;AAMO,SAAS,oBAAoB,UAAkB,YAA6C;AACjG,SAAO;AAAA,IACL,QAAQ;AAAA,IACR,kBAAkB;AAAA,IAClB,oBAAoB;AAAA,EACtB;AACF;AAMA,eAAsB,wBACpB,KACA,SACA,aAC8F;AAC9F,QAAM,kBAAkB,mBAAmB,KAAK,YAAY;AAC5D,MAAI,CAAC,iBAAiB;AACpB,UAAM,IAAI,eAAe,uCAAuC,GAAG;AAAA,EACrE;AAEA,QAAM,QAAiC;AAAA,IACrC,UAAU,IAAI;AAAA,IACd,gBAAgB,IAAI;AAAA,IACpB,WAAW;AAAA,EACb;AACA,MAAI,SAAS;AACX,UAAM,KAAK;AAAA,EACb,WAAW,eAAe,YAAY,KAAK,EAAE,SAAS,GAAG;AACvD,UAAM,cAAc,YAAY,KAAK;AAAA,EACvC,OAAO;AACL,UAAM,IAAI,eAAe,+BAA+B,GAAG;AAAA,EAC7D;AAEA,QAAM,QAAQ,MAAM;AAAA,IAClB,IAAI;AAAA,IACJ;AAAA,IACA;AAAA,IACA;AAAA,IACA,EAAE,UAAU,IAAI,UAAU,gBAAgB,IAAI,eAAe;AAAA,EAC/D;AACA,MAAI,CAAC,OAAO;AACV,UAAM,IAAI,eAAe,8BAA8B,GAAG;AAAA,EAC5D;AACA,SAAO;AACT;AAMA,eAAsB,sBAAsB,KAAqD;AAC/F,QAAM,oBAAoB,mBAAmB,KAAK,cAAc;AAChE,MAAI,CAAC,kBAAmB,QAAO;AAE/B,MAAI;AACF,UAAM,UAAU,MAAM;AAAA,MACpB,IAAI;AAAA,MACJ;AAAA,MACA;AAAA,QACE,UAAU,IAAI;AAAA,QACd,gBAAgB,IAAI;AAAA,QACpB,WAAW;AAAA,MACb;AAAA,MACA,EAAE,SAAS,EAAE,MAAM,MAAM,EAAE;AAAA,MAC3B,EAAE,UAAU,IAAI,UAAU,gBAAgB,IAAI,eAAe;AAAA,IAC/D;AACA,WAAO,SAAS,MAAM;AAAA,EACxB,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,eAAsB,uBACpB,KACA,WACwB;AACxB,QAAM,oBAAoB,mBAAmB,KAAK,cAAc;AAChE,MAAI,CAAC,kBAAmB,QAAO;AAE/B,MAAI;AACF,UAAM,QAAiC;AAAA,MACrC,UAAU,IAAI;AAAA,MACd,gBAAgB,IAAI;AAAA,MACpB,WAAW;AAAA,IACb;AACA,QAAI,UAAW,OAAM,KAAK;AAC1B,UAAM,UAAU,MAAM;AAAA,MACpB,IAAI;AAAA,MACJ;AAAA,MACA;AAAA,MACA,YAAY,SAAY,EAAE,SAAS,EAAE,MAAM,MAAM,EAAE;AAAA,MACnD,EAAE,UAAU,IAAI,UAAU,gBAAgB,IAAI,eAAe;AAAA,IAC/D;AACA,WAAO,SAAS,gBAAgB;AAAA,EAClC,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,eAAsB,6BACpB,KACA,WAC4B;AAC5B,QAAM,oBAAoB,mBAAmB,KAAK,cAAc;AAChE,MAAI,CAAC,kBAAmB,QAAO;AAE/B,QAAM,UAAU,MAAM;AAAA,IACpB,IAAI;AAAA,IACJ;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ,UAAU,IAAI;AAAA,MACd,gBAAgB,IAAI;AAAA,MACpB,WAAW;AAAA,IACb;AAAA,IACA;AAAA,IACA,EAAE,UAAU,IAAI,UAAU,gBAAgB,IAAI,eAAe;AAAA,EAC/D;AACA,MAAI,CAAC,QAAS,QAAO;AAErB,QAAM,WAAW,QAAQ;AACzB,MAAI,UAAU,mBAAmB,MAAM;AACrC,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAMA,MAAM,uCAAuC;AAE7C,eAAsB,6BACpB,KACA,aACwB;AACxB,QAAM,kBAAkB,mBAAmB,KAAK,YAAY;AAC5D,QAAM,uBAAuB,mBAAmB,KAAK,iBAAiB;AACtE,MAAI,CAAC,mBAAmB,CAAC,qBAAsB,QAAO;AAEtD,QAAM,kBAAkB,EAAE,UAAU,IAAI,UAAU,gBAAgB,IAAI,eAAe;AAErF,QAAM,aAAa,MAAM;AAAA,IACvB,IAAI;AAAA,IACJ;AAAA,IACA;AAAA,MACE,KAAK;AAAA,MACL,UAAU,IAAI;AAAA,MACd,gBAAgB,IAAI;AAAA,MACpB,WAAW;AAAA,IACb;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACA,MAAI,CAAC,WAAY,QAAO;AAExB,QAAM,UAAU,MAAM;AAAA,IACpB,IAAI;AAAA,IACJ;AAAA,IACA;AAAA,MACE,YAAY,WAAW;AAAA,MACvB,UAAU,IAAI;AAAA,MACd,gBAAgB,IAAI;AAAA,IACtB;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACA,MAAI,CAAC,QAAQ,OAAQ,QAAO;AAE5B,QAAM,mBAAmB,yBAAyB,WAAW;AAC7D,QAAM,gBAAgB,YAAY,KAAK,EAAE,YAAY;AAErD,QAAM,QAAQ,QAAQ,KAAK,CAAC,UAAU;AACpC,UAAM,QAAQ,MAAM,MAAM,KAAK,EAAE,YAAY;AAC7C,UAAM,QAAQ,MAAM,MAAM,KAAK,EAAE,YAAY;AAC7C,WACE,MAAM,oBAAoB,oBAC1B,UAAU,iBACV,UAAU;AAAA,EAEd,CAAC;AAED,SAAO,OAAO,MAAM;AACtB;AAMA,eAAsB,+BACpB,KACA,OACwB;AACxB,QAAM,aAAa,MAAM,KAAK,EAAE,YAAY;AAC5C,MAAI,CAAC,WAAY,QAAO;AAExB,QAAM,sBAAsB,mBAAmB,KAAK,gBAAgB;AACpE,MAAI,CAAC,oBAAqB,QAAO;AAEjC,QAAM,SAAS,MAAM;AAAA,IACnB,IAAI;AAAA,IACJ;AAAA,IACA;AAAA,MACE,cAAc;AAAA,MACd,UAAU,IAAI;AAAA,MACd,gBAAgB,IAAI;AAAA,MACpB,WAAW;AAAA,IACb;AAAA,IACA;AAAA,IACA,EAAE,UAAU,IAAI,UAAU,gBAAgB,IAAI,eAAe;AAAA,EAC/D;AACA,MAAI,OAAQ,QAAO,OAAO;AAE1B,QAAM,aAAa,MAAM;AAAA,IACvB,IAAI;AAAA,IACJ;AAAA,IACA;AAAA,MACE,UAAU,IAAI;AAAA,MACd,gBAAgB,IAAI;AAAA,MACpB,WAAW;AAAA,IACb;AAAA,IACA,EAAE,OAAO,KAAK,SAAS,EAAE,WAAW,OAAO,EAAE;AAAA,IAC7C,EAAE,UAAU,IAAI,UAAU,gBAAgB,IAAI,eAAe;AAAA,EAC/D;AACA,QAAM,QAAQ,WAAW;AAAA,IACvB,CAAC,MAAM,EAAE,gBAAgB,EAAE,aAAa,YAAY,MAAM;AAAA,EAC5D;AACA,SAAO,OAAO,MAAM;AACtB;AAEA,eAAsB,8BACpB,KACA,aACA,aACwB;AACxB,QAAM,sBAAsB,mBAAmB,KAAK,gBAAgB;AACpE,MAAI,CAAC,oBAAqB,QAAO;AAEjC,QAAM,aAAa,YAAY,KAAK;AACpC,MAAI,CAAC,WAAY,QAAO;AAExB,QAAM,SAAS,MAAM;AAAA,IACnB,IAAI;AAAA,IACJ;AAAA,IACA;AAAA,MACE,aAAa;AAAA,MACb,MAAM;AAAA,MACN,UAAU,IAAI;AAAA,MACd,gBAAgB,IAAI;AAAA,MACpB,WAAW;AAAA,IACb;AAAA,IACA;AAAA,IACA,EAAE,UAAU,IAAI,UAAU,gBAAgB,IAAI,eAAe;AAAA,EAC/D;AAEA,SAAO,QAAQ,MAAM;AACvB;AAWA,eAAsB,mBACpB,KACA,SAC0B;AAC1B,MAAI;AACF,UAAM,SAAS,MAAM;AAAA,MACnB;AAAA,MACA;AAAA,MACA,EAAE,SAAS,gBAAgB,IAAI,gBAAgB,UAAU,IAAI,SAAS;AAAA,IACxE;AACA,WAAO,OAAO,SAAS,CAAC;AAAA,EAC1B,QAAQ;AACN,WAAO,CAAC;AAAA,EACV;AACF;AAEO,SAAS,oBACd,YACA,cACe;AACf,QAAM,SAAS,aAAa,KAAK,EAAE,YAAY;AAC/C,MAAI,CAAC,OAAQ,QAAO;AAEpB,QAAM,QAAQ,WAAW,KAAK,CAAC,OAAO,EAAE,QAAQ,IAAI,KAAK,EAAE,YAAY,MAAM,MAAM;AACnF,MAAI,MAAO,QAAO,MAAM;AAExB,QAAM,UAAU,WAAW,KAAK,CAAC,MAAM;AACrC,UAAM,QAAQ,EAAE,QAAQ,IAAI,KAAK,EAAE,YAAY;AAC/C,WAAO,KAAK,SAAS,MAAM,KAAK,OAAO,SAAS,IAAI;AAAA,EACtD,CAAC;AACD,SAAO,SAAS,MAAM;AACxB;AAMO,SAAS,yBACd,SACyB;AACzB,SAAO;AAAA,IACL,cAAc,QAAQ,SAAS,QAAQ,gBAAgB;AAAA,IACvD,cAAc,QAAQ,SAAS,QAAQ,gBAAgB;AAAA,IACvD,aAAa,QAAQ,WAAW,QAAQ,eAAe;AAAA,IACvD,MAAM,QAAQ,eAAe,QAAQ,QAAQ;AAAA,IAC7C,MAAM,QAAQ,QAAQ;AAAA,IACtB,QAAQ,QAAQ,SAAS,QAAQ,UAAU;AAAA,IAC3C,YAAY,QAAQ,cAAc;AAAA,IAClC,SAAS,QAAQ,WAAW;AAAA,EAC9B;AACF;AAEO,SAAS,eAAe,OAAyC;AACtE,MAAI,CAAC,MAAO,QAAO;AACnB,QAAM,SAAS,IAAI,KAAK,KAAK;AAC7B,MAAI,OAAO,MAAM,OAAO,QAAQ,CAAC,EAAG,QAAO;AAC3C,SAAO;AACT;AAEO,SAAS,iBAAiB,OAAe,WAA2B;AACzE,QAAM,SAAS,OAAO,KAAK;AAC3B,MAAI,CAAC,OAAO,SAAS,MAAM,GAAG;AAC5B,UAAM,IAAI,eAAe,6BAA6B,SAAS,IAAI,GAAG;AAAA,EACxE;AACA,SAAO;AACT;AAEO,SAAS,yBAAyB,OAAuB;AAC9D,SAAO,MAAM,KAAK,EAAE,YAAY,EAAE,QAAQ,WAAW,GAAG;AAC1D;AAMA,eAAsB,sCACpB,IACA,YACA,cACA,WACA,OACe;AACf,QAAM,EAAE,kBAAkB,oBAAoB,IAAI,MAAM,OAAO,kBAAkB;AAEjF,QAAM,gBAAgB,MAAM;AAAA,IAC1B;AAAA,IACA;AAAA,IACA;AAAA,MACE;AAAA,MACA,MAAM;AAAA,MACN,UAAU;AAAA,MACV,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM;AAAA,IACxB;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAEA,QAAM,kBAAkB,aAAa,YAAY,EAAE,KAAK;AACxD,QAAM,wBAAwB,cAAc,OAAO,CAAC,MAAM;AACxD,UAAM,cAAc,EAAE,cAAc,IAAI,YAAY,EAAE,KAAK;AAC3D,WAAO,eAAe;AAAA,EACxB,CAAC;AAED,MAAI,sBAAsB,WAAW,EAAG;AAGxC,aAAW,eAAe,uBAAuB;AAC/C,gBAAY,WAAW;AAAA,EACzB;AACA,QAAM,GAAG,MAAM;AAGf,QAAM,YAAY,sBACf,IAAI,CAAC,MAAM,EAAE,QAAQ,EACrB,OAAO,CAAC,OAAqB,CAAC,CAAC,EAAE;AAEpC,aAAW,YAAY,WAAW;AAChC,UAAM,SAAS,MAAM;AAAA,MACnB;AAAA,MACA;AAAA,MACA,EAAE,IAAI,UAAU,WAAW,KAAK;AAAA,MAChC;AAAA,MACA;AAAA,IACF;AACA,QAAI,CAAC,OAAQ;AAEb,UAAM,UAAU,OAAO;AACvB,UAAM,YAAY,MAAM,QAAQ,SAAS,SAAS,IAC7C,QAAQ,YACT,CAAC;AAEL,QAAI,UAAU;AACd,eAAW,QAAQ,WAAW;AAC5B,UAAI,KAAK,UAAW;AACpB,YAAM,YAAY,OAAO,KAAK,gBAAgB,WAAW,KAAK,cAAc,IAAI,YAAY,EAAE,KAAK;AACnG,UAAI,aAAa,iBAAiB;AAChC,aAAK,YAAY;AACjB,kBAAU;AACV;AAAA,MACF;AAAA,IACF;AAEA,QAAI,SAAS;AACX,aAAO,UAAU,EAAE,GAAG,SAAS,UAAU;AAAA,IAC3C;AAAA,EACF;AAEA,MAAI,UAAU,SAAS,GAAG;AACxB,UAAM,GAAG,MAAM;AAAA,EACjB;AACF;",
+  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport type { EntityClass } from '@mikro-orm/core'\nimport type { AwilixContainer } from 'awilix'\nimport type { EventBus } from '@open-mercato/events/types'\nimport type { AuthContext } from '@open-mercato/shared/lib/auth/server'\nimport type { CommandBus, CommandRuntimeContext } from '@open-mercato/shared/lib/commands'\nimport { findOneWithDecryption, findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport type { InboxActionExecutionContext } from '@open-mercato/shared/modules/inbox-actions'\nimport type { CrossModuleEntities } from './executionEngine'\nexport { formatZodErrors } from './validation'\n\n// ---------------------------------------------------------------------------\n// Context type used by helper functions (concrete types for ORM/DI access)\n// ---------------------------------------------------------------------------\n\nexport interface ExecutionHelperContext {\n  em: EntityManager\n  userId: string\n  tenantId: string\n  organizationId: string\n  eventBus?: EventBus | null\n  container: AwilixContainer\n  auth?: AuthContext\n  entities?: CrossModuleEntities\n}\n\ntype OperationLogEntryLike = {\n  id?: string | null\n  undoToken?: string | null\n  commandId?: string | null\n  actionLabel?: string | null\n  resourceKind?: string | null\n  resourceId?: string | null\n  createdAt?: Date | string | null\n}\n\nconst LAST_OPERATION_LOG_ENTRY = Symbol('inboxOps:lastOperationLogEntry')\n\ntype OperationLogCarrier = {\n  [LAST_OPERATION_LOG_ENTRY]?: OperationLogEntryLike | null\n}\n\n/**\n * Cast InboxActionExecutionContext (from shared) to the concrete helper context.\n * The inbox-actions.ts handlers receive InboxActionExecutionContext but helpers\n * need concrete EntityManager / AwilixContainer types.\n */\nexport function asHelperContext(ctx: InboxActionExecutionContext): ExecutionHelperContext {\n  return ctx as unknown as ExecutionHelperContext\n}\n\nexport function clearLatestCommandLogEntry(ctx: object) {\n  ;(ctx as OperationLogCarrier)[LAST_OPERATION_LOG_ENTRY] = null\n}\n\nexport function readLatestCommandLogEntry(ctx: object): OperationLogEntryLike | null {\n  return (ctx as OperationLogCarrier)[LAST_OPERATION_LOG_ENTRY] ?? null\n}\n\ninterface FeatureCheckingRbacService {\n  userHasAllFeatures: (\n    userId: string,\n    features: string[],\n    scope: { tenantId: string; organizationId: string },\n  ) => Promise<boolean>\n}\n\n// Super-admin status is the immutable `isSuperAdmin` flag derived from the ACL\n// `is_super_admin` column at session resolution. Never fall back to comparing the\n// auth context's `roles` against a literal like 'superadmin' \u2014 role names are\n// tenant-mutable and trivially spoofable, so a role-name fallback would let a tenant\n// admin mint a `superadmin`-named role to bypass every inbox-ops feature gate\n// (#2699). Mirrors the scheduler module's hardened gate.\nfunction hasSuperAdminAccess(auth: ExecutionHelperContext['auth']): boolean {\n  if (!auth || typeof auth !== 'object') return false\n  return (auth as Record<string, unknown>).isSuperAdmin === true\n}\n\n// ---------------------------------------------------------------------------\n// Error\n// ---------------------------------------------------------------------------\n\nexport class ExecutionError extends Error {\n  statusCode: number\n\n  constructor(message: string, statusCode = 400) {\n    super(message)\n    this.statusCode = statusCode\n  }\n}\n\n// ---------------------------------------------------------------------------\n// Command execution\n// ---------------------------------------------------------------------------\n\nexport async function executeCommand<TInput, TResult>(\n  ctx: ExecutionHelperContext,\n  commandId: string,\n  input: TInput,\n): Promise<TResult> {\n  const commandBus = ctx.container.resolve('commandBus') as CommandBus\n  if (!commandBus || typeof commandBus.execute !== 'function') {\n    throw new ExecutionError('Command bus is not available', 503)\n  }\n\n  const auth =\n    ctx.auth ??\n    ({\n      sub: ctx.userId,\n      userId: ctx.userId,\n      tenantId: ctx.tenantId,\n      orgId: ctx.organizationId,\n      isSuperAdmin: false,\n    } satisfies Exclude<AuthContext, null>)\n\n  const commandContext: CommandRuntimeContext = {\n    container: ctx.container,\n    auth,\n    organizationScope: null,\n    selectedOrganizationId: ctx.organizationId,\n    organizationIds: [ctx.organizationId],\n  }\n\n  const { result, logEntry } = await commandBus.execute<TInput, TResult>(commandId, {\n    input,\n    ctx: commandContext,\n  })\n\n  if (logEntry?.undoToken && logEntry.id && logEntry.commandId) {\n    ;(ctx as ExecutionHelperContext & OperationLogCarrier)[LAST_OPERATION_LOG_ENTRY] = logEntry\n  }\n\n  return result\n}\n\nexport async function userHasFeature(\n  ctx: ExecutionHelperContext,\n  feature: string,\n): Promise<boolean> {\n  if (!feature || feature.trim().length === 0) return false\n  if (hasSuperAdminAccess(ctx.auth)) return true\n\n  try {\n    const rbacService = ctx.container.resolve('rbacService') as FeatureCheckingRbacService\n    if (!rbacService || typeof rbacService.userHasAllFeatures !== 'function') {\n      return false\n    }\n    return rbacService.userHasAllFeatures(\n      ctx.userId,\n      [feature],\n      { tenantId: ctx.tenantId, organizationId: ctx.organizationId },\n    )\n  } catch {\n    return false\n  }\n}\n\n// ---------------------------------------------------------------------------\n// Entity resolution\n// ---------------------------------------------------------------------------\n\nexport function resolveEntityClass<K extends keyof CrossModuleEntities>(\n  ctx: ExecutionHelperContext,\n  key: K,\n): CrossModuleEntities[K] | null {\n  const fromEntities = ctx.entities?.[key]\n  if (fromEntities) return fromEntities\n  try { return ctx.container.resolve(key) } catch { return null }\n}\n\n// ---------------------------------------------------------------------------\n// Source metadata\n// ---------------------------------------------------------------------------\n\nexport function buildSourceMetadata(actionId: string, proposalId: string): Record<string, unknown> {\n  return {\n    source: 'inbox_ops',\n    inboxOpsActionId: actionId,\n    inboxOpsProposalId: proposalId,\n  }\n}\n\n// ---------------------------------------------------------------------------\n// Order resolution\n// ---------------------------------------------------------------------------\n\nexport async function resolveOrderByReference(\n  ctx: ExecutionHelperContext,\n  orderId?: string,\n  orderNumber?: string,\n): Promise<{ id: string; orderNumber: string; currencyCode: string; comments?: string | null }> {\n  const SalesOrderClass = resolveEntityClass(ctx, 'SalesOrder')\n  if (!SalesOrderClass) {\n    throw new ExecutionError('Sales module entities not available', 503)\n  }\n\n  const where: Record<string, unknown> = {\n    tenantId: ctx.tenantId,\n    organizationId: ctx.organizationId,\n    deletedAt: null,\n  }\n  if (orderId) {\n    where.id = orderId\n  } else if (orderNumber && orderNumber.trim().length > 0) {\n    where.orderNumber = orderNumber.trim()\n  } else {\n    throw new ExecutionError('Order reference is required', 400)\n  }\n\n  const order = await findOneWithDecryption(\n    ctx.em,\n    SalesOrderClass,\n    where,\n    undefined,\n    { tenantId: ctx.tenantId, organizationId: ctx.organizationId },\n  )\n  if (!order) {\n    throw new ExecutionError('Referenced order not found', 404)\n  }\n  return order\n}\n\n// ---------------------------------------------------------------------------\n// Channel resolution\n// ---------------------------------------------------------------------------\n\nexport async function resolveFirstChannelId(ctx: ExecutionHelperContext): Promise<string | null> {\n  const SalesChannelClass = resolveEntityClass(ctx, 'SalesChannel')\n  if (!SalesChannelClass) return null\n\n  try {\n    const channel = await findOneWithDecryption(\n      ctx.em,\n      SalesChannelClass,\n      {\n        tenantId: ctx.tenantId,\n        organizationId: ctx.organizationId,\n        deletedAt: null,\n      },\n      { orderBy: { name: 'ASC' } },\n      { tenantId: ctx.tenantId, organizationId: ctx.organizationId },\n    )\n    return channel?.id ?? null\n  } catch {\n    return null\n  }\n}\n\nexport async function resolveChannelCurrency(\n  ctx: ExecutionHelperContext,\n  channelId: string | null,\n): Promise<string | null> {\n  const SalesChannelClass = resolveEntityClass(ctx, 'SalesChannel')\n  if (!SalesChannelClass) return null\n\n  try {\n    const where: Record<string, unknown> = {\n      tenantId: ctx.tenantId,\n      organizationId: ctx.organizationId,\n      deletedAt: null,\n    }\n    if (channelId) where.id = channelId\n    const channel = await findOneWithDecryption(\n      ctx.em,\n      SalesChannelClass,\n      where,\n      channelId ? undefined : { orderBy: { name: 'ASC' } },\n      { tenantId: ctx.tenantId, organizationId: ctx.organizationId },\n    )\n    return channel?.currencyCode ?? null\n  } catch {\n    return null\n  }\n}\n\nexport async function resolveEffectiveDocumentKind(\n  ctx: ExecutionHelperContext,\n  channelId: string,\n): Promise<'order' | 'quote'> {\n  const SalesChannelClass = resolveEntityClass(ctx, 'SalesChannel')\n  if (!SalesChannelClass) return 'order'\n\n  const channel = await findOneWithDecryption(\n    ctx.em,\n    SalesChannelClass,\n    {\n      id: channelId,\n      tenantId: ctx.tenantId,\n      organizationId: ctx.organizationId,\n      deletedAt: null,\n    },\n    undefined,\n    { tenantId: ctx.tenantId, organizationId: ctx.organizationId },\n  )\n  if (!channel) return 'order'\n\n  const metadata = channel.metadata as Record<string, unknown> | null\n  if (metadata?.quotesRequired === true) {\n    return 'quote'\n  }\n  return 'order'\n}\n\n// ---------------------------------------------------------------------------\n// Shipment status resolution\n// ---------------------------------------------------------------------------\n\nconst SALES_SHIPMENT_STATUS_DICTIONARY_KEY = 'sales.shipment_status'\n\nexport async function resolveShipmentStatusEntryId(\n  ctx: ExecutionHelperContext,\n  statusLabel: string,\n): Promise<string | null> {\n  const DictionaryClass = resolveEntityClass(ctx, 'Dictionary')\n  const DictionaryEntryClass = resolveEntityClass(ctx, 'DictionaryEntry')\n  if (!DictionaryClass || !DictionaryEntryClass) return null\n\n  const encryptionScope = { tenantId: ctx.tenantId, organizationId: ctx.organizationId }\n\n  const dictionary = await findOneWithDecryption(\n    ctx.em,\n    DictionaryClass,\n    {\n      key: SALES_SHIPMENT_STATUS_DICTIONARY_KEY,\n      tenantId: ctx.tenantId,\n      organizationId: ctx.organizationId,\n      deletedAt: null,\n    },\n    undefined,\n    encryptionScope,\n  )\n  if (!dictionary) return null\n\n  const entries = await findWithDecryption(\n    ctx.em,\n    DictionaryEntryClass,\n    {\n      dictionary: dictionary.id,\n      tenantId: ctx.tenantId,\n      organizationId: ctx.organizationId,\n    },\n    undefined,\n    encryptionScope,\n  )\n  if (!entries.length) return null\n\n  const normalizedTarget = normalizeDictionaryToken(statusLabel)\n  const loweredTarget = statusLabel.trim().toLowerCase()\n\n  const match = entries.find((entry) => {\n    const label = entry.label.trim().toLowerCase()\n    const value = entry.value.trim().toLowerCase()\n    return (\n      entry.normalizedValue === normalizedTarget ||\n      label === loweredTarget ||\n      value === loweredTarget\n    )\n  })\n\n  return match?.id ?? null\n}\n\n// ---------------------------------------------------------------------------\n// Customer / contact resolution\n// ---------------------------------------------------------------------------\n\nexport async function resolveCustomerEntityIdByEmail(\n  ctx: ExecutionHelperContext,\n  email: string,\n): Promise<string | null> {\n  const normalized = email.trim().toLowerCase()\n  if (!normalized) return null\n\n  const CustomerEntityClass = resolveEntityClass(ctx, 'CustomerEntity')\n  if (!CustomerEntityClass) return null\n\n  const entity = await findOneWithDecryption(\n    ctx.em,\n    CustomerEntityClass,\n    {\n      primaryEmail: normalized,\n      tenantId: ctx.tenantId,\n      organizationId: ctx.organizationId,\n      deletedAt: null,\n    },\n    undefined,\n    { tenantId: ctx.tenantId, organizationId: ctx.organizationId },\n  )\n  if (entity) return entity.id\n\n  const candidates = await findWithDecryption(\n    ctx.em,\n    CustomerEntityClass,\n    {\n      tenantId: ctx.tenantId,\n      organizationId: ctx.organizationId,\n      deletedAt: null,\n    },\n    { limit: 100, orderBy: { createdAt: 'DESC' } },\n    { tenantId: ctx.tenantId, organizationId: ctx.organizationId },\n  )\n  const match = candidates.find(\n    (e) => e.primaryEmail && e.primaryEmail.toLowerCase() === normalized,\n  )\n  return match?.id ?? null\n}\n\nexport async function resolveContactIdByNameAndType(\n  ctx: ExecutionHelperContext,\n  contactName: string,\n  contactType: string,\n): Promise<string | null> {\n  const CustomerEntityClass = resolveEntityClass(ctx, 'CustomerEntity')\n  if (!CustomerEntityClass) return null\n\n  const normalized = contactName.trim()\n  if (!normalized) return null\n\n  const entity = await findOneWithDecryption(\n    ctx.em,\n    CustomerEntityClass,\n    {\n      displayName: normalized,\n      kind: contactType,\n      tenantId: ctx.tenantId,\n      organizationId: ctx.organizationId,\n      deletedAt: null,\n    },\n    undefined,\n    { tenantId: ctx.tenantId, organizationId: ctx.organizationId },\n  )\n\n  return entity?.id ?? null\n}\n\n// ---------------------------------------------------------------------------\n// Order line items\n// ---------------------------------------------------------------------------\n\nexport interface OrderLineItem {\n  id: string\n  name?: string | null\n}\n\nexport async function loadOrderLineItems(\n  ctx: ExecutionHelperContext,\n  orderId: string,\n): Promise<OrderLineItem[]> {\n  try {\n    const result = await executeCommand<Record<string, unknown>, { lines?: OrderLineItem[] }>(\n      ctx,\n      'sales.orders.lines.list',\n      { orderId, organizationId: ctx.organizationId, tenantId: ctx.tenantId },\n    )\n    return result.lines ?? []\n  } catch {\n    return []\n  }\n}\n\nexport function matchLineItemByName(\n  orderLines: OrderLineItem[],\n  lineItemName: string,\n): string | null {\n  const target = lineItemName.trim().toLowerCase()\n  if (!target) return null\n\n  const exact = orderLines.find((l) => (l.name || '').trim().toLowerCase() === target)\n  if (exact) return exact.id\n\n  const partial = orderLines.find((l) => {\n    const name = (l.name || '').trim().toLowerCase()\n    return name.includes(target) || target.includes(name)\n  })\n  return partial?.id ?? null\n}\n\n// ---------------------------------------------------------------------------\n// Data normalization utilities\n// ---------------------------------------------------------------------------\n\nexport function normalizeAddressSnapshot(\n  address: Record<string, unknown>,\n): Record<string, unknown> {\n  return {\n    addressLine1: address.line1 ?? address.addressLine1 ?? '',\n    addressLine2: address.line2 ?? address.addressLine2 ?? null,\n    companyName: address.company ?? address.companyName ?? null,\n    name: address.contactName ?? address.name ?? null,\n    city: address.city ?? null,\n    region: address.state ?? address.region ?? null,\n    postalCode: address.postalCode ?? null,\n    country: address.country ?? null,\n  }\n}\n\nexport function parseDateToken(value?: string | null): Date | undefined {\n  if (!value) return undefined\n  const parsed = new Date(value)\n  if (Number.isNaN(parsed.getTime())) return undefined\n  return parsed\n}\n\nexport function parseNumberToken(value: string, fieldName: string): number {\n  const parsed = Number(value)\n  if (!Number.isFinite(parsed)) {\n    throw new ExecutionError(`Invalid numeric value for ${fieldName}`, 400)\n  }\n  return parsed\n}\n\nexport function normalizeDictionaryToken(value: string): string {\n  return value.trim().toLowerCase().replace(/[\\s-]+/g, '_')\n}\n\n// ---------------------------------------------------------------------------\n// Product discrepancy resolution (used by catalog inbox action handler)\n// ---------------------------------------------------------------------------\n\nexport async function resolveProductDiscrepanciesInProposal(\n  em: EntityManager,\n  proposalId: string,\n  productTitle: string,\n  productId: string,\n  scope: { tenantId: string; organizationId: string },\n): Promise<void> {\n  const { InboxDiscrepancy, InboxProposalAction } = await import('../data/entities')\n\n  const discrepancies = await findWithDecryption(\n    em,\n    InboxDiscrepancy,\n    {\n      proposalId,\n      type: 'product_not_found',\n      resolved: false,\n      tenantId: scope.tenantId,\n      organizationId: scope.organizationId,\n    },\n    undefined,\n    scope,\n  )\n\n  const normalizedTitle = productTitle.toLowerCase().trim()\n  const matchingDiscrepancies = discrepancies.filter((d) => {\n    const foundValue = (d.foundValue || '').toLowerCase().trim()\n    return foundValue === normalizedTitle\n  })\n\n  if (matchingDiscrepancies.length === 0) return\n\n  // Phase 1: flush scalar mutations before any queries to avoid UoW tracking loss (SPEC-018)\n  for (const discrepancy of matchingDiscrepancies) {\n    discrepancy.resolved = true\n  }\n  await em.flush()\n\n  // Phase 2: update line item product IDs (involves findOneWithDecryption queries)\n  const actionIds = matchingDiscrepancies\n    .map((d) => d.actionId)\n    .filter((id): id is string => !!id)\n\n  for (const actionId of actionIds) {\n    const action = await findOneWithDecryption(\n      em,\n      InboxProposalAction,\n      { id: actionId, deletedAt: null },\n      undefined,\n      scope,\n    )\n    if (!action) continue\n\n    const payload = action.payload as Record<string, unknown>\n    const lineItems = Array.isArray(payload?.lineItems)\n      ? (payload.lineItems as Record<string, unknown>[])\n      : []\n\n    let updated = false\n    for (const item of lineItems) {\n      if (item.productId) continue\n      const itemName = (typeof item.productName === 'string' ? item.productName : '').toLowerCase().trim()\n      if (itemName === normalizedTitle) {\n        item.productId = productId\n        updated = true\n        break\n      }\n    }\n\n    if (updated) {\n      action.payload = { ...payload, lineItems }\n    }\n  }\n\n  if (actionIds.length > 0) {\n    await em.flush()\n  }\n}\n"],
+  "mappings": "AAMA,SAAS,uBAAuB,0BAA0B;AAG1D,SAAS,uBAAuB;AA2BhC,MAAM,2BAA2B,uBAAO,gCAAgC;AAWjE,SAAS,gBAAgB,KAA0D;AACxF,SAAO;AACT;AAEO,SAAS,2BAA2B,KAAa;AACtD;AAAC,EAAC,IAA4B,wBAAwB,IAAI;AAC5D;AAEO,SAAS,0BAA0B,KAA2C;AACnF,SAAQ,IAA4B,wBAAwB,KAAK;AACnE;AAgBA,SAAS,oBAAoB,MAA+C;AAC1E,MAAI,CAAC,QAAQ,OAAO,SAAS,SAAU,QAAO;AAC9C,SAAQ,KAAiC,iBAAiB;AAC5D;AAMO,MAAM,uBAAuB,MAAM;AAAA,EAGxC,YAAY,SAAiB,aAAa,KAAK;AAC7C,UAAM,OAAO;AACb,SAAK,aAAa;AAAA,EACpB;AACF;AAMA,eAAsB,eACpB,KACA,WACA,OACkB;AAClB,QAAM,aAAa,IAAI,UAAU,QAAQ,YAAY;AACrD,MAAI,CAAC,cAAc,OAAO,WAAW,YAAY,YAAY;AAC3D,UAAM,IAAI,eAAe,gCAAgC,GAAG;AAAA,EAC9D;AAEA,QAAM,OACJ,IAAI,QACH;AAAA,IACC,KAAK,IAAI;AAAA,IACT,QAAQ,IAAI;AAAA,IACZ,UAAU,IAAI;AAAA,IACd,OAAO,IAAI;AAAA,IACX,cAAc;AAAA,EAChB;AAEF,QAAM,iBAAwC;AAAA,IAC5C,WAAW,IAAI;AAAA,IACf;AAAA,IACA,mBAAmB;AAAA,IACnB,wBAAwB,IAAI;AAAA,IAC5B,iBAAiB,CAAC,IAAI,cAAc;AAAA,EACtC;AAEA,QAAM,EAAE,QAAQ,SAAS,IAAI,MAAM,WAAW,QAAyB,WAAW;AAAA,IAChF;AAAA,IACA,KAAK;AAAA,EACP,CAAC;AAED,MAAI,UAAU,aAAa,SAAS,MAAM,SAAS,WAAW;AAC5D;AAAC,IAAC,IAAqD,wBAAwB,IAAI;AAAA,EACrF;AAEA,SAAO;AACT;AAEA,eAAsB,eACpB,KACA,SACkB;AAClB,MAAI,CAAC,WAAW,QAAQ,KAAK,EAAE,WAAW,EAAG,QAAO;AACpD,MAAI,oBAAoB,IAAI,IAAI,EAAG,QAAO;AAE1C,MAAI;AACF,UAAM,cAAc,IAAI,UAAU,QAAQ,aAAa;AACvD,QAAI,CAAC,eAAe,OAAO,YAAY,uBAAuB,YAAY;AACxE,aAAO;AAAA,IACT;AACA,WAAO,YAAY;AAAA,MACjB,IAAI;AAAA,MACJ,CAAC,OAAO;AAAA,MACR,EAAE,UAAU,IAAI,UAAU,gBAAgB,IAAI,eAAe;AAAA,IAC/D;AAAA,EACF,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAMO,SAAS,mBACd,KACA,KAC+B;AAC/B,QAAM,eAAe,IAAI,WAAW,GAAG;AACvC,MAAI,aAAc,QAAO;AACzB,MAAI;AAAE,WAAO,IAAI,UAAU,QAAQ,GAAG;AAAA,EAAE,QAAQ;AAAE,WAAO;AAAA,EAAK;AAChE;AAMO,SAAS,oBAAoB,UAAkB,YAA6C;AACjG,SAAO;AAAA,IACL,QAAQ;AAAA,IACR,kBAAkB;AAAA,IAClB,oBAAoB;AAAA,EACtB;AACF;AAMA,eAAsB,wBACpB,KACA,SACA,aAC8F;AAC9F,QAAM,kBAAkB,mBAAmB,KAAK,YAAY;AAC5D,MAAI,CAAC,iBAAiB;AACpB,UAAM,IAAI,eAAe,uCAAuC,GAAG;AAAA,EACrE;AAEA,QAAM,QAAiC;AAAA,IACrC,UAAU,IAAI;AAAA,IACd,gBAAgB,IAAI;AAAA,IACpB,WAAW;AAAA,EACb;AACA,MAAI,SAAS;AACX,UAAM,KAAK;AAAA,EACb,WAAW,eAAe,YAAY,KAAK,EAAE,SAAS,GAAG;AACvD,UAAM,cAAc,YAAY,KAAK;AAAA,EACvC,OAAO;AACL,UAAM,IAAI,eAAe,+BAA+B,GAAG;AAAA,EAC7D;AAEA,QAAM,QAAQ,MAAM;AAAA,IAClB,IAAI;AAAA,IACJ;AAAA,IACA;AAAA,IACA;AAAA,IACA,EAAE,UAAU,IAAI,UAAU,gBAAgB,IAAI,eAAe;AAAA,EAC/D;AACA,MAAI,CAAC,OAAO;AACV,UAAM,IAAI,eAAe,8BAA8B,GAAG;AAAA,EAC5D;AACA,SAAO;AACT;AAMA,eAAsB,sBAAsB,KAAqD;AAC/F,QAAM,oBAAoB,mBAAmB,KAAK,cAAc;AAChE,MAAI,CAAC,kBAAmB,QAAO;AAE/B,MAAI;AACF,UAAM,UAAU,MAAM;AAAA,MACpB,IAAI;AAAA,MACJ;AAAA,MACA;AAAA,QACE,UAAU,IAAI;AAAA,QACd,gBAAgB,IAAI;AAAA,QACpB,WAAW;AAAA,MACb;AAAA,MACA,EAAE,SAAS,EAAE,MAAM,MAAM,EAAE;AAAA,MAC3B,EAAE,UAAU,IAAI,UAAU,gBAAgB,IAAI,eAAe;AAAA,IAC/D;AACA,WAAO,SAAS,MAAM;AAAA,EACxB,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,eAAsB,uBACpB,KACA,WACwB;AACxB,QAAM,oBAAoB,mBAAmB,KAAK,cAAc;AAChE,MAAI,CAAC,kBAAmB,QAAO;AAE/B,MAAI;AACF,UAAM,QAAiC;AAAA,MACrC,UAAU,IAAI;AAAA,MACd,gBAAgB,IAAI;AAAA,MACpB,WAAW;AAAA,IACb;AACA,QAAI,UAAW,OAAM,KAAK;AAC1B,UAAM,UAAU,MAAM;AAAA,MACpB,IAAI;AAAA,MACJ;AAAA,MACA;AAAA,MACA,YAAY,SAAY,EAAE,SAAS,EAAE,MAAM,MAAM,EAAE;AAAA,MACnD,EAAE,UAAU,IAAI,UAAU,gBAAgB,IAAI,eAAe;AAAA,IAC/D;AACA,WAAO,SAAS,gBAAgB;AAAA,EAClC,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,eAAsB,6BACpB,KACA,WAC4B;AAC5B,QAAM,oBAAoB,mBAAmB,KAAK,cAAc;AAChE,MAAI,CAAC,kBAAmB,QAAO;AAE/B,QAAM,UAAU,MAAM;AAAA,IACpB,IAAI;AAAA,IACJ;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ,UAAU,IAAI;AAAA,MACd,gBAAgB,IAAI;AAAA,MACpB,WAAW;AAAA,IACb;AAAA,IACA;AAAA,IACA,EAAE,UAAU,IAAI,UAAU,gBAAgB,IAAI,eAAe;AAAA,EAC/D;AACA,MAAI,CAAC,QAAS,QAAO;AAErB,QAAM,WAAW,QAAQ;AACzB,MAAI,UAAU,mBAAmB,MAAM;AACrC,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAMA,MAAM,uCAAuC;AAE7C,eAAsB,6BACpB,KACA,aACwB;AACxB,QAAM,kBAAkB,mBAAmB,KAAK,YAAY;AAC5D,QAAM,uBAAuB,mBAAmB,KAAK,iBAAiB;AACtE,MAAI,CAAC,mBAAmB,CAAC,qBAAsB,QAAO;AAEtD,QAAM,kBAAkB,EAAE,UAAU,IAAI,UAAU,gBAAgB,IAAI,eAAe;AAErF,QAAM,aAAa,MAAM;AAAA,IACvB,IAAI;AAAA,IACJ;AAAA,IACA;AAAA,MACE,KAAK;AAAA,MACL,UAAU,IAAI;AAAA,MACd,gBAAgB,IAAI;AAAA,MACpB,WAAW;AAAA,IACb;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACA,MAAI,CAAC,WAAY,QAAO;AAExB,QAAM,UAAU,MAAM;AAAA,IACpB,IAAI;AAAA,IACJ;AAAA,IACA;AAAA,MACE,YAAY,WAAW;AAAA,MACvB,UAAU,IAAI;AAAA,MACd,gBAAgB,IAAI;AAAA,IACtB;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACA,MAAI,CAAC,QAAQ,OAAQ,QAAO;AAE5B,QAAM,mBAAmB,yBAAyB,WAAW;AAC7D,QAAM,gBAAgB,YAAY,KAAK,EAAE,YAAY;AAErD,QAAM,QAAQ,QAAQ,KAAK,CAAC,UAAU;AACpC,UAAM,QAAQ,MAAM,MAAM,KAAK,EAAE,YAAY;AAC7C,UAAM,QAAQ,MAAM,MAAM,KAAK,EAAE,YAAY;AAC7C,WACE,MAAM,oBAAoB,oBAC1B,UAAU,iBACV,UAAU;AAAA,EAEd,CAAC;AAED,SAAO,OAAO,MAAM;AACtB;AAMA,eAAsB,+BACpB,KACA,OACwB;AACxB,QAAM,aAAa,MAAM,KAAK,EAAE,YAAY;AAC5C,MAAI,CAAC,WAAY,QAAO;AAExB,QAAM,sBAAsB,mBAAmB,KAAK,gBAAgB;AACpE,MAAI,CAAC,oBAAqB,QAAO;AAEjC,QAAM,SAAS,MAAM;AAAA,IACnB,IAAI;AAAA,IACJ;AAAA,IACA;AAAA,MACE,cAAc;AAAA,MACd,UAAU,IAAI;AAAA,MACd,gBAAgB,IAAI;AAAA,MACpB,WAAW;AAAA,IACb;AAAA,IACA;AAAA,IACA,EAAE,UAAU,IAAI,UAAU,gBAAgB,IAAI,eAAe;AAAA,EAC/D;AACA,MAAI,OAAQ,QAAO,OAAO;AAE1B,QAAM,aAAa,MAAM;AAAA,IACvB,IAAI;AAAA,IACJ;AAAA,IACA;AAAA,MACE,UAAU,IAAI;AAAA,MACd,gBAAgB,IAAI;AAAA,MACpB,WAAW;AAAA,IACb;AAAA,IACA,EAAE,OAAO,KAAK,SAAS,EAAE,WAAW,OAAO,EAAE;AAAA,IAC7C,EAAE,UAAU,IAAI,UAAU,gBAAgB,IAAI,eAAe;AAAA,EAC/D;AACA,QAAM,QAAQ,WAAW;AAAA,IACvB,CAAC,MAAM,EAAE,gBAAgB,EAAE,aAAa,YAAY,MAAM;AAAA,EAC5D;AACA,SAAO,OAAO,MAAM;AACtB;AAEA,eAAsB,8BACpB,KACA,aACA,aACwB;AACxB,QAAM,sBAAsB,mBAAmB,KAAK,gBAAgB;AACpE,MAAI,CAAC,oBAAqB,QAAO;AAEjC,QAAM,aAAa,YAAY,KAAK;AACpC,MAAI,CAAC,WAAY,QAAO;AAExB,QAAM,SAAS,MAAM;AAAA,IACnB,IAAI;AAAA,IACJ;AAAA,IACA;AAAA,MACE,aAAa;AAAA,MACb,MAAM;AAAA,MACN,UAAU,IAAI;AAAA,MACd,gBAAgB,IAAI;AAAA,MACpB,WAAW;AAAA,IACb;AAAA,IACA;AAAA,IACA,EAAE,UAAU,IAAI,UAAU,gBAAgB,IAAI,eAAe;AAAA,EAC/D;AAEA,SAAO,QAAQ,MAAM;AACvB;AAWA,eAAsB,mBACpB,KACA,SAC0B;AAC1B,MAAI;AACF,UAAM,SAAS,MAAM;AAAA,MACnB;AAAA,MACA;AAAA,MACA,EAAE,SAAS,gBAAgB,IAAI,gBAAgB,UAAU,IAAI,SAAS;AAAA,IACxE;AACA,WAAO,OAAO,SAAS,CAAC;AAAA,EAC1B,QAAQ;AACN,WAAO,CAAC;AAAA,EACV;AACF;AAEO,SAAS,oBACd,YACA,cACe;AACf,QAAM,SAAS,aAAa,KAAK,EAAE,YAAY;AAC/C,MAAI,CAAC,OAAQ,QAAO;AAEpB,QAAM,QAAQ,WAAW,KAAK,CAAC,OAAO,EAAE,QAAQ,IAAI,KAAK,EAAE,YAAY,MAAM,MAAM;AACnF,MAAI,MAAO,QAAO,MAAM;AAExB,QAAM,UAAU,WAAW,KAAK,CAAC,MAAM;AACrC,UAAM,QAAQ,EAAE,QAAQ,IAAI,KAAK,EAAE,YAAY;AAC/C,WAAO,KAAK,SAAS,MAAM,KAAK,OAAO,SAAS,IAAI;AAAA,EACtD,CAAC;AACD,SAAO,SAAS,MAAM;AACxB;AAMO,SAAS,yBACd,SACyB;AACzB,SAAO;AAAA,IACL,cAAc,QAAQ,SAAS,QAAQ,gBAAgB;AAAA,IACvD,cAAc,QAAQ,SAAS,QAAQ,gBAAgB;AAAA,IACvD,aAAa,QAAQ,WAAW,QAAQ,eAAe;AAAA,IACvD,MAAM,QAAQ,eAAe,QAAQ,QAAQ;AAAA,IAC7C,MAAM,QAAQ,QAAQ;AAAA,IACtB,QAAQ,QAAQ,SAAS,QAAQ,UAAU;AAAA,IAC3C,YAAY,QAAQ,cAAc;AAAA,IAClC,SAAS,QAAQ,WAAW;AAAA,EAC9B;AACF;AAEO,SAAS,eAAe,OAAyC;AACtE,MAAI,CAAC,MAAO,QAAO;AACnB,QAAM,SAAS,IAAI,KAAK,KAAK;AAC7B,MAAI,OAAO,MAAM,OAAO,QAAQ,CAAC,EAAG,QAAO;AAC3C,SAAO;AACT;AAEO,SAAS,iBAAiB,OAAe,WAA2B;AACzE,QAAM,SAAS,OAAO,KAAK;AAC3B,MAAI,CAAC,OAAO,SAAS,MAAM,GAAG;AAC5B,UAAM,IAAI,eAAe,6BAA6B,SAAS,IAAI,GAAG;AAAA,EACxE;AACA,SAAO;AACT;AAEO,SAAS,yBAAyB,OAAuB;AAC9D,SAAO,MAAM,KAAK,EAAE,YAAY,EAAE,QAAQ,WAAW,GAAG;AAC1D;AAMA,eAAsB,sCACpB,IACA,YACA,cACA,WACA,OACe;AACf,QAAM,EAAE,kBAAkB,oBAAoB,IAAI,MAAM,OAAO,kBAAkB;AAEjF,QAAM,gBAAgB,MAAM;AAAA,IAC1B;AAAA,IACA;AAAA,IACA;AAAA,MACE;AAAA,MACA,MAAM;AAAA,MACN,UAAU;AAAA,MACV,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM;AAAA,IACxB;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAEA,QAAM,kBAAkB,aAAa,YAAY,EAAE,KAAK;AACxD,QAAM,wBAAwB,cAAc,OAAO,CAAC,MAAM;AACxD,UAAM,cAAc,EAAE,cAAc,IAAI,YAAY,EAAE,KAAK;AAC3D,WAAO,eAAe;AAAA,EACxB,CAAC;AAED,MAAI,sBAAsB,WAAW,EAAG;AAGxC,aAAW,eAAe,uBAAuB;AAC/C,gBAAY,WAAW;AAAA,EACzB;AACA,QAAM,GAAG,MAAM;AAGf,QAAM,YAAY,sBACf,IAAI,CAAC,MAAM,EAAE,QAAQ,EACrB,OAAO,CAAC,OAAqB,CAAC,CAAC,EAAE;AAEpC,aAAW,YAAY,WAAW;AAChC,UAAM,SAAS,MAAM;AAAA,MACnB;AAAA,MACA;AAAA,MACA,EAAE,IAAI,UAAU,WAAW,KAAK;AAAA,MAChC;AAAA,MACA;AAAA,IACF;AACA,QAAI,CAAC,OAAQ;AAEb,UAAM,UAAU,OAAO;AACvB,UAAM,YAAY,MAAM,QAAQ,SAAS,SAAS,IAC7C,QAAQ,YACT,CAAC;AAEL,QAAI,UAAU;AACd,eAAW,QAAQ,WAAW;AAC5B,UAAI,KAAK,UAAW;AACpB,YAAM,YAAY,OAAO,KAAK,gBAAgB,WAAW,KAAK,cAAc,IAAI,YAAY,EAAE,KAAK;AACnG,UAAI,aAAa,iBAAiB;AAChC,aAAK,YAAY;AACjB,kBAAU;AACV;AAAA,MACF;AAAA,IACF;AAEA,QAAI,SAAS;AACX,aAAO,UAAU,EAAE,GAAG,SAAS,UAAU;AAAA,IAC3C;AAAA,EACF;AAEA,MAAI,UAAU,SAAS,GAAG;AACxB,UAAM,GAAG,MAAM;AAAA,EACjB;AACF;",
   "names": []
 }

package/dist/modules/inbox_ops/lib/priceValidator.js

@@ -1,19 +1,44 @@
 import { findWithDecryption } from "@open-mercato/shared/lib/encryption/find";
 const DEFAULT_MISMATCH_THRESHOLD = 0.05;
+function readUuid(value) {
+  return typeof value === "string" && value.trim() ? value.trim() : void 0;
+}
+function parsePositiveQuantity(value) {
+  const parsed = typeof value === "number" ? value : typeof value === "string" ? parseFloat(value) : NaN;
+  return Number.isFinite(parsed) && parsed > 0 ? parsed : 1;
+}
 async function validatePrices(em, actions, scope, deps) {
-  if (!deps?.catalogProductPriceClass) return [];
+  if (!deps?.catalogProductPriceClass || !deps?.catalogPricingService) return [];
   const threshold = parseFloat(process.env.INBOX_OPS_PRICE_MISMATCH_THRESHOLD || String(DEFAULT_MISMATCH_THRESHOLD));
   const discrepancies = [];
+  const now = /* @__PURE__ */ new Date();
   for (const action of actions) {
     if (action.actionType !== "create_order" && action.actionType !== "create_quote") {
       continue;
     }
     const lineItems = action.payload.lineItems || [];
     const orderCurrency = typeof action.payload.currencyCode === "string" ? action.payload.currencyCode.trim().toUpperCase() : null;
+    const channelId = readUuid(action.payload.channelId) ?? scope.channelId ?? null;
+    const customerId = readUuid(action.payload.customerEntityId) ?? scope.customerId ?? null;
     for (const line of lineItems) {
       if (!line.productId || !line.unitPrice) continue;
       try {
-        const catalogResult = await lookupCatalogPrice(em, line.productId, scope, deps.catalogProductPriceClass);
+        const pricingContext = {
+          channelId,
+          customerId,
+          customerGroupId: null,
+          quantity: parsePositiveQuantity(line.quantity),
+          date: now
+        };
+        const catalogResult = await lookupCatalogPrice(
+          em,
+          line.productId,
+          scope,
+          deps.catalogProductPriceClass,
+          deps.catalogPricingService,
+          pricingContext,
+          orderCurrency
+        );
         if (catalogResult === null) continue;
         if (orderCurrency && catalogResult.currencyCode && orderCurrency !== catalogResult.currencyCode.toUpperCase()) {
           discrepancies.push({
@@ -47,9 +72,9 @@ async function validatePrices(em, actions, scope, deps) {
   }
   return discrepancies;
 }
-async function lookupCatalogPrice(em, productId, scope, entityClass) {
+async function lookupCatalogPrice(em, productId, scope, entityClass, pricingService, pricingContext, orderCurrency) {
   try {
-    const prices = await findWithDecryption(
+    const rows = await findWithDecryption(
       em,
       entityClass,
       {
@@ -58,11 +83,14 @@ async function lookupCatalogPrice(em, productId, scope, entityClass) {
         organizationId: scope.organizationId,
         tenantId: scope.tenantId
       },
-      { limit: 10, orderBy: { createdAt: "DESC" } },
+      { populate: ["priceKind", "offer"] },
       { tenantId: scope.tenantId, organizationId: scope.organizationId }
     );
-    if (!prices || prices.length === 0) return null;
-    const priceRecord = prices[0];
+    if (!rows || rows.length === 0) return null;
+    const sameCurrencyRows = orderCurrency ? rows.filter((row) => (row.currencyCode ?? "").toUpperCase() === orderCurrency) : rows;
+    const candidateRows = sameCurrencyRows.length > 0 ? sameCurrencyRows : rows;
+    const priceRecord = await pricingService.resolvePrice(candidateRows, pricingContext);
+    if (!priceRecord) return null;
     const priceValue = priceRecord.unitPriceNet ?? priceRecord.unitPriceGross ?? null;
     if (!priceValue) return null;
     return {

package/dist/modules/inbox_ops/lib/priceValidator.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/inbox_ops/lib/priceValidator.ts"],
-  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport type { EntityClass } from '@mikro-orm/core'\nimport { findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport type { InboxDiscrepancyType } from '../data/entities'\n\nexport interface PriceDiscrepancy {\n  type: InboxDiscrepancyType\n  severity: 'warning' | 'error'\n  description: string\n  expectedValue?: string\n  foundValue?: string\n  actionIndex: number\n}\n\ninterface LineItem {\n  productName: string\n  productId?: string\n  unitPrice?: string\n  quantity: string\n  currencyCode?: string\n}\n\ninterface PriceValidatorScope {\n  tenantId: string\n  organizationId: string\n  channelId?: string\n  customerId?: string\n}\n\ninterface CatalogProductPriceLike {\n  product?: unknown\n  unitPriceNet?: string | null\n  unitPriceGross?: string | null\n  currencyCode?: string | null\n  tenantId?: string\n  organizationId?: string\n  deletedAt?: Date | null\n  createdAt?: Date\n}\n\nconst DEFAULT_MISMATCH_THRESHOLD = 0.05 // 5%\n\nexport async function validatePrices(\n  em: EntityManager,\n  actions: { actionType: string; payload: Record<string, unknown>; index: number }[],\n  scope: PriceValidatorScope,\n  deps?: { catalogProductPriceClass: EntityClass<CatalogProductPriceLike> },\n): Promise<PriceDiscrepancy[]> {\n  if (!deps?.catalogProductPriceClass) return []\n\n  const threshold = parseFloat(process.env.INBOX_OPS_PRICE_MISMATCH_THRESHOLD || String(DEFAULT_MISMATCH_THRESHOLD))\n  const discrepancies: PriceDiscrepancy[] = []\n\n  for (const action of actions) {\n    if (action.actionType !== 'create_order' && action.actionType !== 'create_quote') {\n      continue\n    }\n\n    const lineItems = (action.payload.lineItems as LineItem[]) || []\n\n    const orderCurrency = typeof action.payload.currencyCode === 'string'\n      ? action.payload.currencyCode.trim().toUpperCase()\n      : null\n\n    for (const line of lineItems) {\n      if (!line.productId || !line.unitPrice) continue\n\n      try {\n        const catalogResult = await lookupCatalogPrice(em, line.productId, scope, deps.catalogProductPriceClass)\n        if (catalogResult === null) continue\n\n        if (orderCurrency && catalogResult.currencyCode && orderCurrency !== catalogResult.currencyCode.toUpperCase()) {\n          discrepancies.push({\n            type: 'currency_mismatch',\n            severity: 'warning',\n            description: `Currency mismatch for \"${line.productName}\": order uses ${orderCurrency} but catalog price is in ${catalogResult.currencyCode.toUpperCase()}`,\n            expectedValue: catalogResult.currencyCode.toUpperCase(),\n            foundValue: orderCurrency,\n            actionIndex: action.index,\n          })\n          continue\n        }\n\n        const extractedPrice = parseFloat(line.unitPrice)\n        const catPrice = parseFloat(catalogResult.price)\n\n        if (isNaN(extractedPrice) || isNaN(catPrice) || catPrice === 0) continue\n\n        const priceDiff = Math.abs(extractedPrice - catPrice) / catPrice\n\n        if (priceDiff > threshold) {\n          const percentDiff = (priceDiff * 100).toFixed(1)\n          discrepancies.push({\n            type: 'price_mismatch',\n            severity: priceDiff > 0.2 ? 'error' : 'warning',\n            description: `Price for \"${line.productName}\": email says ${line.unitPrice} but catalog price is ${catalogResult.price} (${percentDiff}% difference)`,\n            expectedValue: catalogResult.price,\n            foundValue: line.unitPrice,\n            actionIndex: action.index,\n          })\n        }\n      } catch {\n        // Skip price validation if lookup fails\n      }\n    }\n  }\n\n  return discrepancies\n}\n\nasync function lookupCatalogPrice(\n  em: EntityManager,\n  productId: string,\n  scope: PriceValidatorScope,\n  entityClass: EntityClass<CatalogProductPriceLike>,\n): Promise<{ price: string; currencyCode: string | null } | null> {\n  try {\n    const prices = await findWithDecryption(\n      em,\n      entityClass,\n      {\n        product: productId,\n        deletedAt: null,\n        organizationId: scope.organizationId,\n        tenantId: scope.tenantId,\n      },\n      { limit: 10, orderBy: { createdAt: 'DESC' } },\n      { tenantId: scope.tenantId, organizationId: scope.organizationId },\n    )\n\n    if (!prices || prices.length === 0) return null\n\n    const priceRecord = prices[0]\n    const priceValue = priceRecord.unitPriceNet ?? priceRecord.unitPriceGross ?? null\n    if (!priceValue) return null\n\n    return {\n      price: priceValue,\n      currencyCode: priceRecord.currencyCode ?? null,\n    }\n  } catch {\n    return null\n  }\n}\n"],
-  "mappings": "AAEA,SAAS,0BAA0B;AAsCnC,MAAM,6BAA6B;AAEnC,eAAsB,eACpB,IACA,SACA,OACA,MAC6B;AAC7B,MAAI,CAAC,MAAM,yBAA0B,QAAO,CAAC;AAE7C,QAAM,YAAY,WAAW,QAAQ,IAAI,sCAAsC,OAAO,0BAA0B,CAAC;AACjH,QAAM,gBAAoC,CAAC;AAE3C,aAAW,UAAU,SAAS;AAC5B,QAAI,OAAO,eAAe,kBAAkB,OAAO,eAAe,gBAAgB;AAChF;AAAA,IACF;AAEA,UAAM,YAAa,OAAO,QAAQ,aAA4B,CAAC;AAE/D,UAAM,gBAAgB,OAAO,OAAO,QAAQ,iBAAiB,WACzD,OAAO,QAAQ,aAAa,KAAK,EAAE,YAAY,IAC/C;AAEJ,eAAW,QAAQ,WAAW;AAC5B,UAAI,CAAC,KAAK,aAAa,CAAC,KAAK,UAAW;AAExC,UAAI;AACF,cAAM,gBAAgB,MAAM,mBAAmB,IAAI,KAAK,WAAW,OAAO,KAAK,wBAAwB;AACvG,YAAI,kBAAkB,KAAM;AAE5B,YAAI,iBAAiB,cAAc,gBAAgB,kBAAkB,cAAc,aAAa,YAAY,GAAG;AAC7G,wBAAc,KAAK;AAAA,YACjB,MAAM;AAAA,YACN,UAAU;AAAA,YACV,aAAa,0BAA0B,KAAK,WAAW,iBAAiB,aAAa,4BAA4B,cAAc,aAAa,YAAY,CAAC;AAAA,YACzJ,eAAe,cAAc,aAAa,YAAY;AAAA,YACtD,YAAY;AAAA,YACZ,aAAa,OAAO;AAAA,UACtB,CAAC;AACD;AAAA,QACF;AAEA,cAAM,iBAAiB,WAAW,KAAK,SAAS;AAChD,cAAM,WAAW,WAAW,cAAc,KAAK;AAE/C,YAAI,MAAM,cAAc,KAAK,MAAM,QAAQ,KAAK,aAAa,EAAG;AAEhE,cAAM,YAAY,KAAK,IAAI,iBAAiB,QAAQ,IAAI;AAExD,YAAI,YAAY,WAAW;AACzB,gBAAM,eAAe,YAAY,KAAK,QAAQ,CAAC;AAC/C,wBAAc,KAAK;AAAA,YACjB,MAAM;AAAA,YACN,UAAU,YAAY,MAAM,UAAU;AAAA,YACtC,aAAa,cAAc,KAAK,WAAW,iBAAiB,KAAK,SAAS,yBAAyB,cAAc,KAAK,KAAK,WAAW;AAAA,YACtI,eAAe,cAAc;AAAA,YAC7B,YAAY,KAAK;AAAA,YACjB,aAAa,OAAO;AAAA,UACtB,CAAC;AAAA,QACH;AAAA,MACF,QAAQ;AAAA,MAER;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AACT;AAEA,eAAe,mBACb,IACA,WACA,OACA,aACgE;AAChE,MAAI;AACF,UAAM,SAAS,MAAM;AAAA,MACnB;AAAA,MACA;AAAA,MACA;AAAA,QACE,SAAS;AAAA,QACT,WAAW;AAAA,QACX,gBAAgB,MAAM;AAAA,QACtB,UAAU,MAAM;AAAA,MAClB;AAAA,MACA,EAAE,OAAO,IAAI,SAAS,EAAE,WAAW,OAAO,EAAE;AAAA,MAC5C,EAAE,UAAU,MAAM,UAAU,gBAAgB,MAAM,eAAe;AAAA,IACnE;AAEA,QAAI,CAAC,UAAU,OAAO,WAAW,EAAG,QAAO;AAE3C,UAAM,cAAc,OAAO,CAAC;AAC5B,UAAM,aAAa,YAAY,gBAAgB,YAAY,kBAAkB;AAC7E,QAAI,CAAC,WAAY,QAAO;AAExB,WAAO;AAAA,MACL,OAAO;AAAA,MACP,cAAc,YAAY,gBAAgB;AAAA,IAC5C;AAAA,EACF,QAAQ;AACN,WAAO;AAAA,EACT;AACF;",
+  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport type { EntityClass } from '@mikro-orm/core'\nimport { findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport type { InboxDiscrepancyType } from '../data/entities'\n\nexport interface PriceDiscrepancy {\n  type: InboxDiscrepancyType\n  severity: 'warning' | 'error'\n  description: string\n  expectedValue?: string\n  foundValue?: string\n  actionIndex: number\n}\n\ninterface LineItem {\n  productName: string\n  productId?: string\n  unitPrice?: string\n  quantity: string\n  currencyCode?: string\n}\n\ninterface PriceValidatorScope {\n  tenantId: string\n  organizationId: string\n  channelId?: string\n  customerId?: string\n}\n\ninterface CatalogProductPriceLike {\n  product?: unknown\n  priceKind?: unknown\n  offer?: unknown\n  unitPriceNet?: string | null\n  unitPriceGross?: string | null\n  currencyCode?: string | null\n  tenantId?: string\n  organizationId?: string\n  deletedAt?: Date | null\n  createdAt?: Date\n}\n\n// Minimal structural view of catalog's `PricingContext`. The validator resolves\n// prices through the catalog pricing engine so channel/customer/quantity/time/kind\n// scoping is honored consistently with the rest of the platform.\nexport interface CatalogPricingContext {\n  channelId?: string | null\n  customerId?: string | null\n  customerGroupId?: string | null\n  quantity: number\n  date: Date\n}\n\n// Minimal structural view of the `catalogPricingService` DI token. Using the engine\n// (selectBestPrice + resolver pipeline) instead of a bespoke query is mandated by\n// packages/core/src/modules/catalog/AGENTS.md and ensures tenant pricing overrides apply.\nexport interface CatalogPricingServiceLike {\n  resolvePrice(\n    rows: CatalogProductPriceLike[],\n    context: CatalogPricingContext,\n  ): Promise<CatalogProductPriceLike | null>\n}\n\ninterface PriceValidatorDeps {\n  catalogProductPriceClass: EntityClass<CatalogProductPriceLike>\n  catalogPricingService: CatalogPricingServiceLike\n}\n\nconst DEFAULT_MISMATCH_THRESHOLD = 0.05 // 5%\n\nfunction readUuid(value: unknown): string | undefined {\n  return typeof value === 'string' && value.trim() ? value.trim() : undefined\n}\n\nfunction parsePositiveQuantity(value: unknown): number {\n  const parsed = typeof value === 'number' ? value : typeof value === 'string' ? parseFloat(value) : NaN\n  return Number.isFinite(parsed) && parsed > 0 ? parsed : 1\n}\n\nexport async function validatePrices(\n  em: EntityManager,\n  actions: { actionType: string; payload: Record<string, unknown>; index: number }[],\n  scope: PriceValidatorScope,\n  deps?: PriceValidatorDeps,\n): Promise<PriceDiscrepancy[]> {\n  if (!deps?.catalogProductPriceClass || !deps?.catalogPricingService) return []\n\n  const threshold = parseFloat(process.env.INBOX_OPS_PRICE_MISMATCH_THRESHOLD || String(DEFAULT_MISMATCH_THRESHOLD))\n  const discrepancies: PriceDiscrepancy[] = []\n  const now = new Date()\n\n  for (const action of actions) {\n    if (action.actionType !== 'create_order' && action.actionType !== 'create_quote') {\n      continue\n    }\n\n    const lineItems = (action.payload.lineItems as LineItem[]) || []\n\n    const orderCurrency = typeof action.payload.currencyCode === 'string'\n      ? action.payload.currencyCode.trim().toUpperCase()\n      : null\n\n    // Channel and customer scoping come from the proposal payload (or the caller's\n    // scope as a fallback). When unknown, the engine correctly excludes channel/\n    // customer-specific rows and falls back to the generally-applicable price.\n    const channelId = readUuid(action.payload.channelId) ?? scope.channelId ?? null\n    const customerId = readUuid(action.payload.customerEntityId) ?? scope.customerId ?? null\n\n    for (const line of lineItems) {\n      if (!line.productId || !line.unitPrice) continue\n\n      try {\n        const pricingContext: CatalogPricingContext = {\n          channelId,\n          customerId,\n          customerGroupId: null,\n          quantity: parsePositiveQuantity(line.quantity),\n          date: now,\n        }\n        const catalogResult = await lookupCatalogPrice(\n          em,\n          line.productId,\n          scope,\n          deps.catalogProductPriceClass,\n          deps.catalogPricingService,\n          pricingContext,\n          orderCurrency,\n        )\n        if (catalogResult === null) continue\n\n        if (orderCurrency && catalogResult.currencyCode && orderCurrency !== catalogResult.currencyCode.toUpperCase()) {\n          discrepancies.push({\n            type: 'currency_mismatch',\n            severity: 'warning',\n            description: `Currency mismatch for \"${line.productName}\": order uses ${orderCurrency} but catalog price is in ${catalogResult.currencyCode.toUpperCase()}`,\n            expectedValue: catalogResult.currencyCode.toUpperCase(),\n            foundValue: orderCurrency,\n            actionIndex: action.index,\n          })\n          continue\n        }\n\n        const extractedPrice = parseFloat(line.unitPrice)\n        const catPrice = parseFloat(catalogResult.price)\n\n        if (isNaN(extractedPrice) || isNaN(catPrice) || catPrice === 0) continue\n\n        const priceDiff = Math.abs(extractedPrice - catPrice) / catPrice\n\n        if (priceDiff > threshold) {\n          const percentDiff = (priceDiff * 100).toFixed(1)\n          discrepancies.push({\n            type: 'price_mismatch',\n            severity: priceDiff > 0.2 ? 'error' : 'warning',\n            description: `Price for \"${line.productName}\": email says ${line.unitPrice} but catalog price is ${catalogResult.price} (${percentDiff}% difference)`,\n            expectedValue: catalogResult.price,\n            foundValue: line.unitPrice,\n            actionIndex: action.index,\n          })\n        }\n      } catch {\n        // Skip price validation if lookup fails\n      }\n    }\n  }\n\n  return discrepancies\n}\n\nasync function lookupCatalogPrice(\n  em: EntityManager,\n  productId: string,\n  scope: PriceValidatorScope,\n  entityClass: EntityClass<CatalogProductPriceLike>,\n  pricingService: CatalogPricingServiceLike,\n  pricingContext: CatalogPricingContext,\n  orderCurrency: string | null,\n): Promise<{ price: string; currencyCode: string | null } | null> {\n  try {\n    // Load all non-deleted price rows for the product (populating the relations the\n    // pricing engine scores on), then let the engine pick the applicable one \u2014 never\n    // the \"most recently created\" row, which ignores every pricing dimension (#2737).\n    const rows = await findWithDecryption(\n      em,\n      entityClass,\n      {\n        product: productId,\n        deletedAt: null,\n        organizationId: scope.organizationId,\n        tenantId: scope.tenantId,\n      },\n      { populate: ['priceKind', 'offer'] },\n      { tenantId: scope.tenantId, organizationId: scope.organizationId },\n    )\n\n    if (!rows || rows.length === 0) return null\n\n    // Prefer rows in the order's currency so we compare like-for-like instead of\n    // raising a spurious currency mismatch against an unrelated-currency row; fall\n    // back to all rows (which surfaces a genuine mismatch when no match exists).\n    const sameCurrencyRows = orderCurrency\n      ? rows.filter((row) => (row.currencyCode ?? '').toUpperCase() === orderCurrency)\n      : rows\n    const candidateRows = sameCurrencyRows.length > 0 ? sameCurrencyRows : rows\n\n    const priceRecord = await pricingService.resolvePrice(candidateRows, pricingContext)\n    if (!priceRecord) return null\n\n    const priceValue = priceRecord.unitPriceNet ?? priceRecord.unitPriceGross ?? null\n    if (!priceValue) return null\n\n    return {\n      price: priceValue,\n      currencyCode: priceRecord.currencyCode ?? null,\n    }\n  } catch {\n    return null\n  }\n}\n"],
+  "mappings": "AAEA,SAAS,0BAA0B;AAkEnC,MAAM,6BAA6B;AAEnC,SAAS,SAAS,OAAoC;AACpD,SAAO,OAAO,UAAU,YAAY,MAAM,KAAK,IAAI,MAAM,KAAK,IAAI;AACpE;AAEA,SAAS,sBAAsB,OAAwB;AACrD,QAAM,SAAS,OAAO,UAAU,WAAW,QAAQ,OAAO,UAAU,WAAW,WAAW,KAAK,IAAI;AACnG,SAAO,OAAO,SAAS,MAAM,KAAK,SAAS,IAAI,SAAS;AAC1D;AAEA,eAAsB,eACpB,IACA,SACA,OACA,MAC6B;AAC7B,MAAI,CAAC,MAAM,4BAA4B,CAAC,MAAM,sBAAuB,QAAO,CAAC;AAE7E,QAAM,YAAY,WAAW,QAAQ,IAAI,sCAAsC,OAAO,0BAA0B,CAAC;AACjH,QAAM,gBAAoC,CAAC;AAC3C,QAAM,MAAM,oBAAI,KAAK;AAErB,aAAW,UAAU,SAAS;AAC5B,QAAI,OAAO,eAAe,kBAAkB,OAAO,eAAe,gBAAgB;AAChF;AAAA,IACF;AAEA,UAAM,YAAa,OAAO,QAAQ,aAA4B,CAAC;AAE/D,UAAM,gBAAgB,OAAO,OAAO,QAAQ,iBAAiB,WACzD,OAAO,QAAQ,aAAa,KAAK,EAAE,YAAY,IAC/C;AAKJ,UAAM,YAAY,SAAS,OAAO,QAAQ,SAAS,KAAK,MAAM,aAAa;AAC3E,UAAM,aAAa,SAAS,OAAO,QAAQ,gBAAgB,KAAK,MAAM,cAAc;AAEpF,eAAW,QAAQ,WAAW;AAC5B,UAAI,CAAC,KAAK,aAAa,CAAC,KAAK,UAAW;AAExC,UAAI;AACF,cAAM,iBAAwC;AAAA,UAC5C;AAAA,UACA;AAAA,UACA,iBAAiB;AAAA,UACjB,UAAU,sBAAsB,KAAK,QAAQ;AAAA,UAC7C,MAAM;AAAA,QACR;AACA,cAAM,gBAAgB,MAAM;AAAA,UAC1B;AAAA,UACA,KAAK;AAAA,UACL;AAAA,UACA,KAAK;AAAA,UACL,KAAK;AAAA,UACL;AAAA,UACA;AAAA,QACF;AACA,YAAI,kBAAkB,KAAM;AAE5B,YAAI,iBAAiB,cAAc,gBAAgB,kBAAkB,cAAc,aAAa,YAAY,GAAG;AAC7G,wBAAc,KAAK;AAAA,YACjB,MAAM;AAAA,YACN,UAAU;AAAA,YACV,aAAa,0BAA0B,KAAK,WAAW,iBAAiB,aAAa,4BAA4B,cAAc,aAAa,YAAY,CAAC;AAAA,YACzJ,eAAe,cAAc,aAAa,YAAY;AAAA,YACtD,YAAY;AAAA,YACZ,aAAa,OAAO;AAAA,UACtB,CAAC;AACD;AAAA,QACF;AAEA,cAAM,iBAAiB,WAAW,KAAK,SAAS;AAChD,cAAM,WAAW,WAAW,cAAc,KAAK;AAE/C,YAAI,MAAM,cAAc,KAAK,MAAM,QAAQ,KAAK,aAAa,EAAG;AAEhE,cAAM,YAAY,KAAK,IAAI,iBAAiB,QAAQ,IAAI;AAExD,YAAI,YAAY,WAAW;AACzB,gBAAM,eAAe,YAAY,KAAK,QAAQ,CAAC;AAC/C,wBAAc,KAAK;AAAA,YACjB,MAAM;AAAA,YACN,UAAU,YAAY,MAAM,UAAU;AAAA,YACtC,aAAa,cAAc,KAAK,WAAW,iBAAiB,KAAK,SAAS,yBAAyB,cAAc,KAAK,KAAK,WAAW;AAAA,YACtI,eAAe,cAAc;AAAA,YAC7B,YAAY,KAAK;AAAA,YACjB,aAAa,OAAO;AAAA,UACtB,CAAC;AAAA,QACH;AAAA,MACF,QAAQ;AAAA,MAER;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AACT;AAEA,eAAe,mBACb,IACA,WACA,OACA,aACA,gBACA,gBACA,eACgE;AAChE,MAAI;AAIF,UAAM,OAAO,MAAM;AAAA,MACjB;AAAA,MACA;AAAA,MACA;AAAA,QACE,SAAS;AAAA,QACT,WAAW;AAAA,QACX,gBAAgB,MAAM;AAAA,QACtB,UAAU,MAAM;AAAA,MAClB;AAAA,MACA,EAAE,UAAU,CAAC,aAAa,OAAO,EAAE;AAAA,MACnC,EAAE,UAAU,MAAM,UAAU,gBAAgB,MAAM,eAAe;AAAA,IACnE;AAEA,QAAI,CAAC,QAAQ,KAAK,WAAW,EAAG,QAAO;AAKvC,UAAM,mBAAmB,gBACrB,KAAK,OAAO,CAAC,SAAS,IAAI,gBAAgB,IAAI,YAAY,MAAM,aAAa,IAC7E;AACJ,UAAM,gBAAgB,iBAAiB,SAAS,IAAI,mBAAmB;AAEvE,UAAM,cAAc,MAAM,eAAe,aAAa,eAAe,cAAc;AACnF,QAAI,CAAC,YAAa,QAAO;AAEzB,UAAM,aAAa,YAAY,gBAAgB,YAAY,kBAAkB;AAC7E,QAAI,CAAC,WAAY,QAAO;AAExB,WAAO;AAAA,MACL,OAAO;AAAA,MACP,cAAc,YAAY,gBAAgB;AAAA,IAC5C;AAAA,EACF,QAAQ;AACN,WAAO;AAAA,EACT;AACF;",
   "names": []
 }