@open-mercato/core 0.6.4-develop.4371.1.8f3030407e → 0.6.4

package/dist/modules/customers/api/dictionaries/[kind]/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../src/modules/customers/api/dictionaries/%5Bkind%5D/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { CrudHttpError, isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport type { CommandBus } from '@open-mercato/shared/lib/commands'\nimport type { CommandExecuteResult } from '@open-mercato/shared/lib/commands/types'\nimport { serializeOperationMetadata } from '@open-mercato/shared/lib/commands/operationMetadata'\nimport { CustomerDictionaryEntry, CustomerPipelineStage } from '../../../data/entities'\nimport { ensureDictionaryEntry } from '../../../commands/shared'\nimport { mapDictionaryKind, resolveDictionaryActorId, resolveDictionaryRouteContext } from '../context'\nimport { createDictionaryCacheKey, createDictionaryCacheTags, invalidateDictionaryCache, DICTIONARY_CACHE_TTL_MS } from '../cache'\nimport { z } from 'zod'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { loadRoleTypeUsageMap, resolveRoleTypeUsageKey } from '../../../lib/roleTypeUsage'\nimport {\n  runCrudMutationGuardAfterSuccess,\n  validateCrudMutationGuard,\n} from '@open-mercato/shared/lib/crud/mutation-guard'\nimport { findWithDecryption, findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { readJsonSafe } from '@open-mercato/shared/lib/http/readJsonSafe'\n\nconst colorSchema = z.string().trim().regex(/^#([0-9A-Fa-f]{6})$/, 'Invalid color hex')\nconst iconSchema = z.string().trim().min(1).max(48)\n\nconst postSchema = z.object({\n  value: z.string().trim().min(1).max(150),\n  label: z.string().trim().max(150).optional(),\n  color: colorSchema.or(z.null()).optional(),\n  icon: iconSchema.or(z.null()).optional(),\n})\n\nconst querySchema = z.object({\n  organizationId: z.string().uuid().optional(),\n})\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['customers.people.view'] },\n  POST: { requireAuth: true, requireFeatures: ['customers.settings.manage'] },\n}\n\nexport async function GET(req: Request, ctx: { params?: { kind?: string } }) {\n  try {\n    const url = new URL(req.url)\n    const query = querySchema.parse({\n      organizationId: url.searchParams.get('organizationId') ?? undefined,\n    })\n    const { translate, em, organizationId, readableOrganizationIds, tenantId, cache } = await resolveDictionaryRouteContext(req, {\n      selectedId: query.organizationId ?? undefined,\n    })\n    const { mappedKind } = mapDictionaryKind(ctx.params?.kind)\n    if (!organizationId) {\n      throw new CrudHttpError(400, { error: translate('customers.errors.organization_required', 'Organization context is required') })\n    }\n    const scopedOrganizationIds = readableOrganizationIds.length > 0 ? readableOrganizationIds : [organizationId]\n    const canUseCache = Boolean(cache) && mappedKind !== 'person_company_role'\n\n    let cacheKey: string | null = null\n    if (canUseCache && cache) {\n      cacheKey = createDictionaryCacheKey({\n        tenantId,\n        organizationId,\n        mappedKind,\n        readableOrganizationIds: scopedOrganizationIds,\n      })\n      const cached = await cache.get(cacheKey)\n      if (cached) {\n        return NextResponse.json(cached)\n      }\n    }\n\n    const entries = await findWithDecryption(\n      em,\n      CustomerDictionaryEntry,\n      { tenantId, kind: mappedKind, organizationId: { $in: scopedOrganizationIds } } as any,\n      { orderBy: { label: 'asc' } },\n      { tenantId, organizationId },\n    )\n\n    if (mappedKind === 'pipeline_stage' && organizationId) {\n      const existingNormalized = new Set(entries.map((e) => e.normalizedValue))\n      const pipelineStages = await findWithDecryption(em, CustomerPipelineStage, { organizationId, tenantId }, {}, { tenantId, organizationId })\n      for (const stage of pipelineStages) {\n        if (!existingNormalized.has(stage.label.trim().toLowerCase())) {\n          const created = await ensureDictionaryEntry(em, {\n            tenantId,\n            organizationId,\n            kind: 'pipeline_stage',\n            value: stage.label,\n          })\n          if (created) {\n            entries.push(created)\n            existingNormalized.add(created.normalizedValue)\n          }\n        }\n      }\n    }\n\n    const inheritedPriority = new Map(scopedOrganizationIds.map((id, index) => [id, index]))\n    const sortByLabel = (left: CustomerDictionaryEntry, right: CustomerDictionaryEntry) =>\n      left.label.localeCompare(right.label, undefined, { sensitivity: 'base' })\n\n    const localEntries = entries\n      .filter((entry) => entry.organizationId === organizationId)\n      .sort(sortByLabel)\n    const inheritedEntries = entries\n      .filter((entry) => entry.organizationId !== organizationId)\n      .sort((left, right) => {\n        const leftPriority = inheritedPriority.get(left.organizationId) ?? Number.MAX_SAFE_INTEGER\n        const rightPriority = inheritedPriority.get(right.organizationId) ?? Number.MAX_SAFE_INTEGER\n        if (leftPriority !== rightPriority) return leftPriority - rightPriority\n        return sortByLabel(left, right)\n      })\n\n    const preferredEntries = new Map<string, CustomerDictionaryEntry>()\n    for (const entry of [...localEntries, ...inheritedEntries]) {\n      const normalizedValue = entry.normalizedValue?.trim() || entry.value.trim().toLowerCase()\n      if (!normalizedValue || preferredEntries.has(normalizedValue)) continue\n      preferredEntries.set(normalizedValue, entry)\n    }\n\n    const preferredEntryList = Array.from(preferredEntries.values())\n    const usageByEntryKey =\n      mappedKind === 'person_company_role'\n        ? await loadRoleTypeUsageMap(em, {\n            tenantId,\n            entries: preferredEntryList.map((entry) => ({\n              organizationId: entry.organizationId,\n              value: entry.value,\n            })),\n          })\n        : new Map()\n\n    const items = [\n      ...preferredEntryList\n        .filter((entry) => entry.organizationId === organizationId)\n        .sort(sortByLabel)\n        .map((entry) => ({\n          id: entry.id,\n          value: entry.value,\n          label: entry.label,\n          color: entry.color,\n          icon: entry.icon,\n          organizationId: entry.organizationId,\n          isInherited: false,\n          ...(mappedKind === 'person_company_role'\n            ? {\n                usageCount:\n                  usageByEntryKey.get(resolveRoleTypeUsageKey(entry.organizationId, entry.value))?.total ?? 0,\n              }\n            : {}),\n        })),\n      ...preferredEntryList\n        .filter((entry) => entry.organizationId !== organizationId)\n        .sort(sortByLabel)\n        .map((entry) => ({\n          id: entry.id,\n          value: entry.value,\n          label: entry.label,\n          color: entry.color,\n          icon: entry.icon,\n          organizationId: entry.organizationId,\n          isInherited: true,\n          ...(mappedKind === 'person_company_role'\n            ? {\n                usageCount:\n                  usageByEntryKey.get(resolveRoleTypeUsageKey(entry.organizationId, entry.value))?.total ?? 0,\n              }\n            : {}),\n        })),\n    ]\n\n    const responseBody = {\n      items,\n    }\n\n    if (canUseCache && cache && cacheKey) {\n      const tags = createDictionaryCacheTags({\n        tenantId,\n        mappedKind,\n        organizationIds: scopedOrganizationIds,\n      })\n      try {\n        await cache.set(cacheKey, responseBody, {\n          ttl: DICTIONARY_CACHE_TTL_MS,\n          tags,\n        })\n      } catch (err) {\n        console.warn('[customers.dictionaries.cache] Failed to set cache entry', err)\n      }\n    }\n\n    return NextResponse.json(responseBody)\n  } catch (err) {\n    if (isCrudHttpError(err)) {\n      return NextResponse.json(err.body, { status: err.status })\n    }\n    const { translate } = await resolveTranslations()\n    console.error('customers.dictionaries.list failed', err)\n    return NextResponse.json({ error: translate('customers.errors.lookup_failed', 'Failed to load dictionary entries') }, { status: 400 })\n  }\n}\n\nexport async function POST(req: Request, ctx: { params?: { kind?: string } }) {\n  try {\n    const context = await resolveDictionaryRouteContext(req)\n    if (!context.organizationId) {\n      throw new CrudHttpError(400, { error: context.translate('customers.errors.organization_required', 'Organization context is required') })\n    }\n    const { mappedKind } = mapDictionaryKind(ctx.params?.kind)\n    const body = postSchema.parse(await readJsonSafe(req, {}))\n    const guardUserId = resolveDictionaryActorId(context.auth)\n    const guardResult = await validateCrudMutationGuard(context.container, {\n      tenantId: context.tenantId,\n      organizationId: context.organizationId,\n      userId: guardUserId,\n      resourceKind: 'customers.dictionary_entry',\n      resourceId: '',\n      operation: 'create',\n      requestMethod: req.method,\n      requestHeaders: req.headers,\n      mutationPayload: body,\n    })\n    if (guardResult && !guardResult.ok) {\n      return NextResponse.json(guardResult.body, { status: guardResult.status })\n    }\n    const commandBus = (context.container.resolve('commandBus') as CommandBus)\n    const { result, logEntry } =\n      (await commandBus.execute('customers.dictionaryEntries.create', {\n        input: {\n          tenantId: context.tenantId,\n          organizationId: context.organizationId,\n          kind: mappedKind,\n          value: body.value,\n          label: body.label,\n          color: body.color,\n          icon: body.icon,\n        },\n        ctx: context.ctx,\n      })) as CommandExecuteResult<{ entryId: string; mode: 'created' | 'updated' | 'unchanged' }>\n    const entry = await findOneWithDecryption(context.em.fork(), CustomerDictionaryEntry, result.entryId, {}, { tenantId: context.tenantId, organizationId: context.organizationId })\n    if (!entry) {\n      throw new CrudHttpError(400, { error: context.translate('customers.errors.lookup_failed', 'Failed to save dictionary entry') })\n    }\n\n    await invalidateDictionaryCache(context.cache, {\n      tenantId: context.tenantId,\n      mappedKind,\n      organizationIds: [entry.organizationId],\n    })\n\n    if (guardResult?.ok && guardResult.shouldRunAfterSuccess) {\n      await runCrudMutationGuardAfterSuccess(context.container, {\n        tenantId: context.tenantId,\n        organizationId: context.organizationId,\n        userId: guardUserId,\n        resourceKind: 'customers.dictionary_entry',\n        resourceId: entry.id,\n        operation: 'create',\n        requestMethod: req.method,\n        requestHeaders: req.headers,\n        metadata: guardResult.metadata ?? null,\n      })\n    }\n\n    const response = NextResponse.json(\n      {\n        id: entry.id,\n        value: entry.value,\n        label: entry.label,\n        color: entry.color,\n        icon: entry.icon,\n        organizationId: entry.organizationId,\n        isInherited: false,\n      },\n      { status: result.mode === 'created' ? 201 : 200 }\n    )\n    if (logEntry?.undoToken && logEntry?.id && logEntry?.commandId) {\n      response.headers.set(\n        'x-om-operation',\n        serializeOperationMetadata({\n          id: logEntry.id,\n          undoToken: logEntry.undoToken,\n          commandId: logEntry.commandId,\n          actionLabel: logEntry.actionLabel ?? null,\n          resourceKind: logEntry.resourceKind ?? 'customers.dictionary_entry',\n          resourceId: entry.id,\n          executedAt: logEntry.createdAt instanceof Date ? logEntry.createdAt.toISOString() : undefined,\n        })\n      )\n    }\n    return response\n  } catch (err) {\n    if (isCrudHttpError(err)) {\n      return NextResponse.json(err.body, { status: err.status })\n    }\n    const { translate } = await resolveTranslations()\n    console.error('customers.dictionaries.create failed', err)\n    return NextResponse.json({ error: translate('customers.errors.lookup_failed', 'Failed to save dictionary entry') }, { status: 400 })\n  }\n}\n\nconst dictionaryEntrySchema = z.object({\n  id: z.string().uuid(),\n  value: z.string(),\n  label: z.string().nullable().optional(),\n  color: z.string().nullable().optional(),\n  icon: z.string().nullable().optional(),\n  organizationId: z.string().uuid().nullable().optional(),\n  isInherited: z.boolean().optional(),\n})\n\nconst dictionaryListResponseSchema = z.object({\n  items: z.array(dictionaryEntrySchema),\n})\n\nconst dictionaryErrorSchema = z.object({\n  error: z.string(),\n})\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Customers',\n  summary: 'Customer dictionary entries',\n  methods: {\n    GET: {\n      summary: 'List dictionary entries',\n      description: 'Returns dictionary entries for the requested kind within the currently selected organization.',\n      responses: [\n        { status: 200, description: 'Dictionary entries', schema: dictionaryListResponseSchema },\n        { status: 401, description: 'Unauthorized', schema: dictionaryErrorSchema },\n        { status: 400, description: 'Failed to resolve dictionary context', schema: dictionaryErrorSchema },\n      ],\n    },\n    POST: {\n      summary: 'Create or override dictionary entry',\n      description: 'Creates a dictionary entry (or updates the existing entry for the same value) within the current organization scope.',\n      requestBody: {\n        contentType: 'application/json',\n        schema: postSchema,\n      },\n      responses: [\n        { status: 201, description: 'Dictionary entry created', schema: dictionaryEntrySchema },\n        { status: 200, description: 'Dictionary entry updated', schema: dictionaryEntrySchema },\n      ],\n      errors: [\n        { status: 400, description: 'Invalid payload', schema: dictionaryErrorSchema },\n        { status: 401, description: 'Unauthorized', schema: dictionaryErrorSchema },\n        { status: 409, description: 'Duplicate value conflict', schema: dictionaryErrorSchema },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,2BAA2B;AACpC,SAAS,eAAe,uBAAuB;AAG/C,SAAS,kCAAkC;AAC3C,SAAS,yBAAyB,6BAA6B;AAC/D,SAAS,6BAA6B;AACtC,SAAS,mBAAmB,0BAA0B,qCAAqC;AAC3F,SAAS,0BAA0B,2BAA2B,2BAA2B,+BAA+B;AACxH,SAAS,SAAS;AAElB,SAAS,sBAAsB,+BAA+B;AAC9D;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,oBAAoB,6BAA6B;AAC1D,SAAS,oBAAoB;AAE7B,MAAM,cAAc,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,uBAAuB,mBAAmB;AACtF,MAAM,aAAa,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE;AAElD,MAAM,aAAa,EAAE,OAAO;AAAA,EAC1B,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EACvC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EAC3C,OAAO,YAAY,GAAG,EAAE,KAAK,CAAC,EAAE,SAAS;AAAA,EACzC,MAAM,WAAW,GAAG,EAAE,KAAK,CAAC,EAAE,SAAS;AACzC,CAAC;AAED,MAAM,cAAc,EAAE,OAAO;AAAA,EAC3B,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAC7C,CAAC;AAEM,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,uBAAuB,EAAE;AAAA,EACrE,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,2BAA2B,EAAE;AAC5E;AAEA,eAAsB,IAAI,KAAc,KAAqC;AAC3E,MAAI;AACF,UAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,UAAM,QAAQ,YAAY,MAAM;AAAA,MAC9B,gBAAgB,IAAI,aAAa,IAAI,gBAAgB,KAAK;AAAA,IAC5D,CAAC;AACD,UAAM,EAAE,WAAW,IAAI,gBAAgB,yBAAyB,UAAU,MAAM,IAAI,MAAM,8BAA8B,KAAK;AAAA,MAC3H,YAAY,MAAM,kBAAkB;AAAA,IACtC,CAAC;AACD,UAAM,EAAE,WAAW,IAAI,kBAAkB,IAAI,QAAQ,IAAI;AACzD,QAAI,CAAC,gBAAgB;AACnB,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,0CAA0C,kCAAkC,EAAE,CAAC;AAAA,IACjI;AACA,UAAM,wBAAwB,wBAAwB,SAAS,IAAI,0BAA0B,CAAC,cAAc;AAC5G,UAAM,cAAc,QAAQ,KAAK,KAAK,eAAe;AAErD,QAAI,WAA0B;AAC9B,QAAI,eAAe,OAAO;AACxB,iBAAW,yBAAyB;AAAA,QAClC;AAAA,QACA;AAAA,QACA;AAAA,QACA,yBAAyB;AAAA,MAC3B,CAAC;AACD,YAAM,SAAS,MAAM,MAAM,IAAI,QAAQ;AACvC,UAAI,QAAQ;AACV,eAAO,aAAa,KAAK,MAAM;AAAA,MACjC;AAAA,IACF;AAEA,UAAM,UAAU,MAAM;AAAA,MACpB;AAAA,MACA;AAAA,MACA,EAAE,UAAU,MAAM,YAAY,gBAAgB,EAAE,KAAK,sBAAsB,EAAE;AAAA,MAC7E,EAAE,SAAS,EAAE,OAAO,MAAM,EAAE;AAAA,MAC5B,EAAE,UAAU,eAAe;AAAA,IAC7B;AAEA,QAAI,eAAe,oBAAoB,gBAAgB;AACrD,YAAM,qBAAqB,IAAI,IAAI,QAAQ,IAAI,CAAC,MAAM,EAAE,eAAe,CAAC;AACxE,YAAM,iBAAiB,MAAM,mBAAmB,IAAI,uBAAuB,EAAE,gBAAgB,SAAS,GAAG,CAAC,GAAG,EAAE,UAAU,eAAe,CAAC;AACzI,iBAAW,SAAS,gBAAgB;AAClC,YAAI,CAAC,mBAAmB,IAAI,MAAM,MAAM,KAAK,EAAE,YAAY,CAAC,GAAG;AAC7D,gBAAM,UAAU,MAAM,sBAAsB,IAAI;AAAA,YAC9C;AAAA,YACA;AAAA,YACA,MAAM;AAAA,YACN,OAAO,MAAM;AAAA,UACf,CAAC;AACD,cAAI,SAAS;AACX,oBAAQ,KAAK,OAAO;AACpB,+BAAmB,IAAI,QAAQ,eAAe;AAAA,UAChD;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAEA,UAAM,oBAAoB,IAAI,IAAI,sBAAsB,IAAI,CAAC,IAAI,UAAU,CAAC,IAAI,KAAK,CAAC,CAAC;AACvF,UAAM,cAAc,CAAC,MAA+B,UAClD,KAAK,MAAM,cAAc,MAAM,OAAO,QAAW,EAAE,aAAa,OAAO,CAAC;AAE1E,UAAM,eAAe,QAClB,OAAO,CAAC,UAAU,MAAM,mBAAmB,cAAc,EACzD,KAAK,WAAW;AACnB,UAAM,mBAAmB,QACtB,OAAO,CAAC,UAAU,MAAM,mBAAmB,cAAc,EACzD,KAAK,CAAC,MAAM,UAAU;AACrB,YAAM,eAAe,kBAAkB,IAAI,KAAK,cAAc,KAAK,OAAO;AAC1E,YAAM,gBAAgB,kBAAkB,IAAI,MAAM,cAAc,KAAK,OAAO;AAC5E,UAAI,iBAAiB,cAAe,QAAO,eAAe;AAC1D,aAAO,YAAY,MAAM,KAAK;AAAA,IAChC,CAAC;AAEH,UAAM,mBAAmB,oBAAI,IAAqC;AAClE,eAAW,SAAS,CAAC,GAAG,cAAc,GAAG,gBAAgB,GAAG;AAC1D,YAAM,kBAAkB,MAAM,iBAAiB,KAAK,KAAK,MAAM,MAAM,KAAK,EAAE,YAAY;AACxF,UAAI,CAAC,mBAAmB,iBAAiB,IAAI,eAAe,EAAG;AAC/D,uBAAiB,IAAI,iBAAiB,KAAK;AAAA,IAC7C;AAEA,UAAM,qBAAqB,MAAM,KAAK,iBAAiB,OAAO,CAAC;AAC/D,UAAM,kBACJ,eAAe,wBACX,MAAM,qBAAqB,IAAI;AAAA,MAC7B;AAAA,MACA,SAAS,mBAAmB,IAAI,CAAC,WAAW;AAAA,QAC1C,gBAAgB,MAAM;AAAA,QACtB,OAAO,MAAM;AAAA,MACf,EAAE;AAAA,IACJ,CAAC,IACD,oBAAI,IAAI;AAEd,UAAM,QAAQ;AAAA,MACZ,GAAG,mBACA,OAAO,CAAC,UAAU,MAAM,mBAAmB,cAAc,EACzD,KAAK,WAAW,EAChB,IAAI,CAAC,WAAW;AAAA,QACf,IAAI,MAAM;AAAA,QACV,OAAO,MAAM;AAAA,QACb,OAAO,MAAM;AAAA,QACb,OAAO,MAAM;AAAA,QACb,MAAM,MAAM;AAAA,QACZ,gBAAgB,MAAM;AAAA,QACtB,aAAa;AAAA,QACb,GAAI,eAAe,wBACf;AAAA,UACE,YACE,gBAAgB,IAAI,wBAAwB,MAAM,gBAAgB,MAAM,KAAK,CAAC,GAAG,SAAS;AAAA,QAC9F,IACA,CAAC;AAAA,MACP,EAAE;AAAA,MACJ,GAAG,mBACA,OAAO,CAAC,UAAU,MAAM,mBAAmB,cAAc,EACzD,KAAK,WAAW,EAChB,IAAI,CAAC,WAAW;AAAA,QACf,IAAI,MAAM;AAAA,QACV,OAAO,MAAM;AAAA,QACb,OAAO,MAAM;AAAA,QACb,OAAO,MAAM;AAAA,QACb,MAAM,MAAM;AAAA,QACZ,gBAAgB,MAAM;AAAA,QACtB,aAAa;AAAA,QACb,GAAI,eAAe,wBACf;AAAA,UACE,YACE,gBAAgB,IAAI,wBAAwB,MAAM,gBAAgB,MAAM,KAAK,CAAC,GAAG,SAAS;AAAA,QAC9F,IACA,CAAC;AAAA,MACP,EAAE;AAAA,IACN;AAEA,UAAM,eAAe;AAAA,MACnB;AAAA,IACF;AAEA,QAAI,eAAe,SAAS,UAAU;AACpC,YAAM,OAAO,0BAA0B;AAAA,QACrC;AAAA,QACA;AAAA,QACA,iBAAiB;AAAA,MACnB,CAAC;AACD,UAAI;AACF,cAAM,MAAM,IAAI,UAAU,cAAc;AAAA,UACtC,KAAK;AAAA,UACL;AAAA,QACF,CAAC;AAAA,MACH,SAAS,KAAK;AACZ,gBAAQ,KAAK,4DAA4D,GAAG;AAAA,MAC9E;AAAA,IACF;AAEA,WAAO,aAAa,KAAK,YAAY;AAAA,EACvC,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,GAAG;AACxB,aAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,IAC3D;AACA,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,YAAQ,MAAM,sCAAsC,GAAG;AACvD,WAAO,aAAa,KAAK,EAAE,OAAO,UAAU,kCAAkC,mCAAmC,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACvI;AACF;AAEA,eAAsB,KAAK,KAAc,KAAqC;AAC5E,MAAI;AACF,UAAM,UAAU,MAAM,8BAA8B,GAAG;AACvD,QAAI,CAAC,QAAQ,gBAAgB;AAC3B,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,QAAQ,UAAU,0CAA0C,kCAAkC,EAAE,CAAC;AAAA,IACzI;AACA,UAAM,EAAE,WAAW,IAAI,kBAAkB,IAAI,QAAQ,IAAI;AACzD,UAAM,OAAO,WAAW,MAAM,MAAM,aAAa,KAAK,CAAC,CAAC,CAAC;AACzD,UAAM,cAAc,yBAAyB,QAAQ,IAAI;AACzD,UAAM,cAAc,MAAM,0BAA0B,QAAQ,WAAW;AAAA,MACrE,UAAU,QAAQ;AAAA,MAClB,gBAAgB,QAAQ;AAAA,MACxB,QAAQ;AAAA,MACR,cAAc;AAAA,MACd,YAAY;AAAA,MACZ,WAAW;AAAA,MACX,eAAe,IAAI;AAAA,MACnB,gBAAgB,IAAI;AAAA,MACpB,iBAAiB;AAAA,IACnB,CAAC;AACD,QAAI,eAAe,CAAC,YAAY,IAAI;AAClC,aAAO,aAAa,KAAK,YAAY,MAAM,EAAE,QAAQ,YAAY,OAAO,CAAC;AAAA,IAC3E;AACA,UAAM,aAAc,QAAQ,UAAU,QAAQ,YAAY;AAC1D,UAAM,EAAE,QAAQ,SAAS,IACtB,MAAM,WAAW,QAAQ,sCAAsC;AAAA,MAC9D,OAAO;AAAA,QACL,UAAU,QAAQ;AAAA,QAClB,gBAAgB,QAAQ;AAAA,QACxB,MAAM;AAAA,QACN,OAAO,KAAK;AAAA,QACZ,OAAO,KAAK;AAAA,QACZ,OAAO,KAAK;AAAA,QACZ,MAAM,KAAK;AAAA,MACb;AAAA,MACA,KAAK,QAAQ;AAAA,IACf,CAAC;AACH,UAAM,QAAQ,MAAM,sBAAsB,QAAQ,GAAG,KAAK,GAAG,yBAAyB,OAAO,SAAS,CAAC,GAAG,EAAE,UAAU,QAAQ,UAAU,gBAAgB,QAAQ,eAAe,CAAC;AAChL,QAAI,CAAC,OAAO;AACV,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,QAAQ,UAAU,kCAAkC,iCAAiC,EAAE,CAAC;AAAA,IAChI;AAEA,UAAM,0BAA0B,QAAQ,OAAO;AAAA,MAC7C,UAAU,QAAQ;AAAA,MAClB;AAAA,MACA,iBAAiB,CAAC,MAAM,cAAc;AAAA,IACxC,CAAC;AAED,QAAI,aAAa,MAAM,YAAY,uBAAuB;AACxD,YAAM,iCAAiC,QAAQ,WAAW;AAAA,QACxD,UAAU,QAAQ;AAAA,QAClB,gBAAgB,QAAQ;AAAA,QACxB,QAAQ;AAAA,QACR,cAAc;AAAA,QACd,YAAY,MAAM;AAAA,QAClB,WAAW;AAAA,QACX,eAAe,IAAI;AAAA,QACnB,gBAAgB,IAAI;AAAA,QACpB,UAAU,YAAY,YAAY;AAAA,MACpC,CAAC;AAAA,IACH;AAEA,UAAM,WAAW,aAAa;AAAA,MAC5B;AAAA,QACE,IAAI,MAAM;AAAA,QACV,OAAO,MAAM;AAAA,QACb,OAAO,MAAM;AAAA,QACb,OAAO,MAAM;AAAA,QACb,MAAM,MAAM;AAAA,QACZ,gBAAgB,MAAM;AAAA,QACtB,aAAa;AAAA,MACf;AAAA,MACA,EAAE,QAAQ,OAAO,SAAS,YAAY,MAAM,IAAI;AAAA,IAClD;AACA,QAAI,UAAU,aAAa,UAAU,MAAM,UAAU,WAAW;AAC9D,eAAS,QAAQ;AAAA,QACf;AAAA,QACA,2BAA2B;AAAA,UACzB,IAAI,SAAS;AAAA,UACb,WAAW,SAAS;AAAA,UACpB,WAAW,SAAS;AAAA,UACpB,aAAa,SAAS,eAAe;AAAA,UACrC,cAAc,SAAS,gBAAgB;AAAA,UACvC,YAAY,MAAM;AAAA,UAClB,YAAY,SAAS,qBAAqB,OAAO,SAAS,UAAU,YAAY,IAAI;AAAA,QACtF,CAAC;AAAA,MACH;AAAA,IACF;AACA,WAAO;AAAA,EACT,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,GAAG;AACxB,aAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,IAC3D;AACA,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,YAAQ,MAAM,wCAAwC,GAAG;AACzD,WAAO,aAAa,KAAK,EAAE,OAAO,UAAU,kCAAkC,iCAAiC,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrI;AACF;AAEA,MAAM,wBAAwB,EAAE,OAAO;AAAA,EACrC,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,OAAO,EAAE,OAAO;AAAA,EAChB,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACtC,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACtC,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACrC,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS;AAAA,EACtD,aAAa,EAAE,QAAQ,EAAE,SAAS;AACpC,CAAC;AAED,MAAM,+BAA+B,EAAE,OAAO;AAAA,EAC5C,OAAO,EAAE,MAAM,qBAAqB;AACtC,CAAC;AAED,MAAM,wBAAwB,EAAE,OAAO;AAAA,EACrC,OAAO,EAAE,OAAO;AAClB,CAAC;AAEM,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aAAa;AAAA,MACb,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,sBAAsB,QAAQ,6BAA6B;AAAA,QACvF,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,sBAAsB;AAAA,QAC1E,EAAE,QAAQ,KAAK,aAAa,wCAAwC,QAAQ,sBAAsB;AAAA,MACpG;AAAA,IACF;AAAA,IACA,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa;AAAA,MACb,aAAa;AAAA,QACX,aAAa;AAAA,QACb,QAAQ;AAAA,MACV;AAAA,MACA,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,4BAA4B,QAAQ,sBAAsB;AAAA,QACtF,EAAE,QAAQ,KAAK,aAAa,4BAA4B,QAAQ,sBAAsB;AAAA,MACxF;AAAA,MACA,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,mBAAmB,QAAQ,sBAAsB;AAAA,QAC7E,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,sBAAsB;AAAA,QAC1E,EAAE,QAAQ,KAAK,aAAa,4BAA4B,QAAQ,sBAAsB;AAAA,MACxF;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { CrudHttpError, isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport type { CommandBus } from '@open-mercato/shared/lib/commands'\nimport type { CommandExecuteResult } from '@open-mercato/shared/lib/commands/types'\nimport { serializeOperationMetadata } from '@open-mercato/shared/lib/commands/operationMetadata'\nimport { CustomerDictionaryEntry } from '../../../data/entities'\nimport { mapDictionaryKind, resolveDictionaryActorId, resolveDictionaryRouteContext } from '../context'\nimport { createDictionaryCacheKey, createDictionaryCacheTags, invalidateDictionaryCache, DICTIONARY_CACHE_TTL_MS } from '../cache'\nimport { loadCustomerSettings } from '../../../commands/settings'\nimport {\n  resolveDictionaryEntrySortMode,\n  sortDictionaryEntries,\n} from '@open-mercato/core/modules/dictionaries/lib/entrySort'\nimport { z } from 'zod'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { loadRoleTypeUsageMap, resolveRoleTypeUsageKey } from '../../../lib/roleTypeUsage'\nimport {\n  runCrudMutationGuardAfterSuccess,\n  validateCrudMutationGuard,\n} from '@open-mercato/shared/lib/crud/mutation-guard'\nimport { findWithDecryption, findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { readJsonSafe } from '@open-mercato/shared/lib/http/readJsonSafe'\n\nconst colorSchema = z.string().trim().regex(/^#([0-9A-Fa-f]{6})$/, 'Invalid color hex')\nconst iconSchema = z.string().trim().min(1).max(48)\n\nconst postSchema = z.object({\n  value: z.string().trim().min(1).max(150),\n  label: z.string().trim().max(150).optional(),\n  color: colorSchema.or(z.null()).optional(),\n  icon: iconSchema.or(z.null()).optional(),\n})\n\nconst querySchema = z.object({\n  organizationId: z.string().uuid().optional(),\n})\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['customers.people.view'] },\n  POST: { requireAuth: true, requireFeatures: ['customers.settings.manage'] },\n}\n\nexport async function GET(req: Request, ctx: { params?: { kind?: string } }) {\n  try {\n    const url = new URL(req.url)\n    const query = querySchema.parse({\n      organizationId: url.searchParams.get('organizationId') ?? undefined,\n    })\n    const { translate, em, organizationId, readableOrganizationIds, tenantId, cache } = await resolveDictionaryRouteContext(req, {\n      selectedId: query.organizationId ?? undefined,\n    })\n    const { kind, mappedKind } = mapDictionaryKind(ctx.params?.kind)\n    if (!organizationId) {\n      throw new CrudHttpError(400, { error: translate('customers.errors.organization_required', 'Organization context is required') })\n    }\n    const settings = await loadCustomerSettings(em, { tenantId, organizationId })\n    const sortMode = resolveDictionaryEntrySortMode(settings?.dictionarySortModes?.[kind])\n    const scopedOrganizationIds = readableOrganizationIds.length > 0 ? readableOrganizationIds : [organizationId]\n    const canUseCache = Boolean(cache) && mappedKind !== 'person_company_role'\n\n    let cacheKey: string | null = null\n    if (canUseCache && cache) {\n      cacheKey = createDictionaryCacheKey({\n        tenantId,\n        organizationId,\n        mappedKind,\n        sortMode,\n        readableOrganizationIds: scopedOrganizationIds,\n      })\n      const cached = await cache.get(cacheKey)\n      if (cached) {\n        return NextResponse.json(cached)\n      }\n    }\n\n    const entries = await findWithDecryption(\n      em,\n      CustomerDictionaryEntry,\n      { tenantId, kind: mappedKind, organizationId: { $in: scopedOrganizationIds } } as any,\n      { orderBy: { label: 'asc' } },\n      { tenantId, organizationId },\n    )\n\n    const inheritedPriority = new Map(scopedOrganizationIds.map((id, index) => [id, index]))\n    const sortByLabel = (left: CustomerDictionaryEntry, right: CustomerDictionaryEntry) =>\n      left.label.localeCompare(right.label, undefined, { sensitivity: 'base' })\n\n    const localEntries = entries\n      .filter((entry) => entry.organizationId === organizationId)\n      .sort(sortByLabel)\n    const inheritedEntries = entries\n      .filter((entry) => entry.organizationId !== organizationId)\n      .sort((left, right) => {\n        const leftPriority = inheritedPriority.get(left.organizationId) ?? Number.MAX_SAFE_INTEGER\n        const rightPriority = inheritedPriority.get(right.organizationId) ?? Number.MAX_SAFE_INTEGER\n        if (leftPriority !== rightPriority) return leftPriority - rightPriority\n        return sortByLabel(left, right)\n      })\n\n    const preferredEntries = new Map<string, CustomerDictionaryEntry>()\n    for (const entry of [...localEntries, ...inheritedEntries]) {\n      const normalizedValue = entry.normalizedValue?.trim() || entry.value.trim().toLowerCase()\n      if (!normalizedValue || preferredEntries.has(normalizedValue)) continue\n      preferredEntries.set(normalizedValue, entry)\n    }\n\n    const preferredEntryList = Array.from(preferredEntries.values())\n    const usageByEntryKey =\n      mappedKind === 'person_company_role'\n        ? await loadRoleTypeUsageMap(em, {\n            tenantId,\n            entries: preferredEntryList.map((entry) => ({\n              organizationId: entry.organizationId,\n              value: entry.value,\n            })),\n          })\n        : new Map()\n\n    const items = sortDictionaryEntries(\n      preferredEntryList\n        .map((entry) => ({\n          id: entry.id,\n          value: entry.value,\n          label: entry.label,\n          color: entry.color,\n          icon: entry.icon,\n          organizationId: entry.organizationId,\n          isInherited: entry.organizationId !== organizationId,\n          createdAt: entry.createdAt,\n          updatedAt: entry.updatedAt,\n          ...(mappedKind === 'person_company_role'\n            ? {\n                usageCount:\n                  usageByEntryKey.get(resolveRoleTypeUsageKey(entry.organizationId, entry.value))?.total ?? 0,\n              }\n            : {}),\n        })),\n      sortMode,\n    )\n\n    const responseBody = {\n      sortMode,\n      items,\n    }\n\n    if (canUseCache && cache && cacheKey) {\n      const tags = createDictionaryCacheTags({\n        tenantId,\n        mappedKind,\n        organizationIds: scopedOrganizationIds,\n      })\n      try {\n        await cache.set(cacheKey, responseBody, {\n          ttl: DICTIONARY_CACHE_TTL_MS,\n          tags,\n        })\n      } catch (err) {\n        console.warn('[customers.dictionaries.cache] Failed to set cache entry', err)\n      }\n    }\n\n    return NextResponse.json(responseBody)\n  } catch (err) {\n    if (isCrudHttpError(err)) {\n      return NextResponse.json(err.body, { status: err.status })\n    }\n    const { translate } = await resolveTranslations()\n    console.error('customers.dictionaries.list failed', err)\n    return NextResponse.json({ error: translate('customers.errors.lookup_failed', 'Failed to load dictionary entries') }, { status: 400 })\n  }\n}\n\nexport async function POST(req: Request, ctx: { params?: { kind?: string } }) {\n  try {\n    const context = await resolveDictionaryRouteContext(req)\n    if (!context.organizationId) {\n      throw new CrudHttpError(400, { error: context.translate('customers.errors.organization_required', 'Organization context is required') })\n    }\n    const { mappedKind } = mapDictionaryKind(ctx.params?.kind)\n    const body = postSchema.parse(await readJsonSafe(req, {}))\n    const guardUserId = resolveDictionaryActorId(context.auth)\n    const guardResult = await validateCrudMutationGuard(context.container, {\n      tenantId: context.tenantId,\n      organizationId: context.organizationId,\n      userId: guardUserId,\n      resourceKind: 'customers.dictionary_entry',\n      resourceId: '',\n      operation: 'create',\n      requestMethod: req.method,\n      requestHeaders: req.headers,\n      mutationPayload: body,\n    })\n    if (guardResult && !guardResult.ok) {\n      return NextResponse.json(guardResult.body, { status: guardResult.status })\n    }\n    const commandBus = (context.container.resolve('commandBus') as CommandBus)\n    const { result, logEntry } =\n      (await commandBus.execute('customers.dictionaryEntries.create', {\n        input: {\n          tenantId: context.tenantId,\n          organizationId: context.organizationId,\n          kind: mappedKind,\n          value: body.value,\n          label: body.label,\n          color: body.color,\n          icon: body.icon,\n        },\n        ctx: context.ctx,\n      })) as CommandExecuteResult<{ entryId: string; mode: 'created' | 'updated' | 'unchanged' }>\n    const entry = await findOneWithDecryption(context.em.fork(), CustomerDictionaryEntry, result.entryId, {}, { tenantId: context.tenantId, organizationId: context.organizationId })\n    if (!entry) {\n      throw new CrudHttpError(400, { error: context.translate('customers.errors.lookup_failed', 'Failed to save dictionary entry') })\n    }\n\n    await invalidateDictionaryCache(context.cache, {\n      tenantId: context.tenantId,\n      mappedKind,\n      organizationIds: [entry.organizationId],\n    })\n\n    if (guardResult?.ok && guardResult.shouldRunAfterSuccess) {\n      await runCrudMutationGuardAfterSuccess(context.container, {\n        tenantId: context.tenantId,\n        organizationId: context.organizationId,\n        userId: guardUserId,\n        resourceKind: 'customers.dictionary_entry',\n        resourceId: entry.id,\n        operation: 'create',\n        requestMethod: req.method,\n        requestHeaders: req.headers,\n        metadata: guardResult.metadata ?? null,\n      })\n    }\n\n    const response = NextResponse.json(\n      {\n        id: entry.id,\n        value: entry.value,\n        label: entry.label,\n        color: entry.color,\n        icon: entry.icon,\n        organizationId: entry.organizationId,\n        isInherited: false,\n      },\n      { status: result.mode === 'created' ? 201 : 200 }\n    )\n    if (logEntry?.undoToken && logEntry?.id && logEntry?.commandId) {\n      response.headers.set(\n        'x-om-operation',\n        serializeOperationMetadata({\n          id: logEntry.id,\n          undoToken: logEntry.undoToken,\n          commandId: logEntry.commandId,\n          actionLabel: logEntry.actionLabel ?? null,\n          resourceKind: logEntry.resourceKind ?? 'customers.dictionary_entry',\n          resourceId: entry.id,\n          executedAt: logEntry.createdAt instanceof Date ? logEntry.createdAt.toISOString() : undefined,\n        })\n      )\n    }\n    return response\n  } catch (err) {\n    if (isCrudHttpError(err)) {\n      return NextResponse.json(err.body, { status: err.status })\n    }\n    const { translate } = await resolveTranslations()\n    console.error('customers.dictionaries.create failed', err)\n    return NextResponse.json({ error: translate('customers.errors.lookup_failed', 'Failed to save dictionary entry') }, { status: 400 })\n  }\n}\n\nconst dictionaryEntrySchema = z.object({\n  id: z.string().uuid(),\n  value: z.string(),\n  label: z.string().nullable().optional(),\n  color: z.string().nullable().optional(),\n  icon: z.string().nullable().optional(),\n  organizationId: z.string().uuid().nullable().optional(),\n  isInherited: z.boolean().optional(),\n  createdAt: z.date().or(z.string()).optional(),\n  updatedAt: z.date().or(z.string()).optional(),\n})\n\nconst dictionaryListResponseSchema = z.object({\n  sortMode: z.string().optional(),\n  items: z.array(dictionaryEntrySchema),\n})\n\nconst dictionaryErrorSchema = z.object({\n  error: z.string(),\n})\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Customers',\n  summary: 'Customer dictionary entries',\n  methods: {\n    GET: {\n      summary: 'List dictionary entries',\n      description: 'Returns dictionary entries for the requested kind within the currently selected organization.',\n      responses: [\n        { status: 200, description: 'Dictionary entries', schema: dictionaryListResponseSchema },\n        { status: 401, description: 'Unauthorized', schema: dictionaryErrorSchema },\n        { status: 400, description: 'Failed to resolve dictionary context', schema: dictionaryErrorSchema },\n      ],\n    },\n    POST: {\n      summary: 'Create or override dictionary entry',\n      description: 'Creates a dictionary entry (or updates the existing entry for the same value) within the current organization scope.',\n      requestBody: {\n        contentType: 'application/json',\n        schema: postSchema,\n      },\n      responses: [\n        { status: 201, description: 'Dictionary entry created', schema: dictionaryEntrySchema },\n        { status: 200, description: 'Dictionary entry updated', schema: dictionaryEntrySchema },\n      ],\n      errors: [\n        { status: 400, description: 'Invalid payload', schema: dictionaryErrorSchema },\n        { status: 401, description: 'Unauthorized', schema: dictionaryErrorSchema },\n        { status: 409, description: 'Duplicate value conflict', schema: dictionaryErrorSchema },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,2BAA2B;AACpC,SAAS,eAAe,uBAAuB;AAG/C,SAAS,kCAAkC;AAC3C,SAAS,+BAA+B;AACxC,SAAS,mBAAmB,0BAA0B,qCAAqC;AAC3F,SAAS,0BAA0B,2BAA2B,2BAA2B,+BAA+B;AACxH,SAAS,4BAA4B;AACrC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,SAAS;AAElB,SAAS,sBAAsB,+BAA+B;AAC9D;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,oBAAoB,6BAA6B;AAC1D,SAAS,oBAAoB;AAE7B,MAAM,cAAc,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,uBAAuB,mBAAmB;AACtF,MAAM,aAAa,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE;AAElD,MAAM,aAAa,EAAE,OAAO;AAAA,EAC1B,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EACvC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EAC3C,OAAO,YAAY,GAAG,EAAE,KAAK,CAAC,EAAE,SAAS;AAAA,EACzC,MAAM,WAAW,GAAG,EAAE,KAAK,CAAC,EAAE,SAAS;AACzC,CAAC;AAED,MAAM,cAAc,EAAE,OAAO;AAAA,EAC3B,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAC7C,CAAC;AAEM,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,uBAAuB,EAAE;AAAA,EACrE,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,2BAA2B,EAAE;AAC5E;AAEA,eAAsB,IAAI,KAAc,KAAqC;AAC3E,MAAI;AACF,UAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,UAAM,QAAQ,YAAY,MAAM;AAAA,MAC9B,gBAAgB,IAAI,aAAa,IAAI,gBAAgB,KAAK;AAAA,IAC5D,CAAC;AACD,UAAM,EAAE,WAAW,IAAI,gBAAgB,yBAAyB,UAAU,MAAM,IAAI,MAAM,8BAA8B,KAAK;AAAA,MAC3H,YAAY,MAAM,kBAAkB;AAAA,IACtC,CAAC;AACD,UAAM,EAAE,MAAM,WAAW,IAAI,kBAAkB,IAAI,QAAQ,IAAI;AAC/D,QAAI,CAAC,gBAAgB;AACnB,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,0CAA0C,kCAAkC,EAAE,CAAC;AAAA,IACjI;AACA,UAAM,WAAW,MAAM,qBAAqB,IAAI,EAAE,UAAU,eAAe,CAAC;AAC5E,UAAM,WAAW,+BAA+B,UAAU,sBAAsB,IAAI,CAAC;AACrF,UAAM,wBAAwB,wBAAwB,SAAS,IAAI,0BAA0B,CAAC,cAAc;AAC5G,UAAM,cAAc,QAAQ,KAAK,KAAK,eAAe;AAErD,QAAI,WAA0B;AAC9B,QAAI,eAAe,OAAO;AACxB,iBAAW,yBAAyB;AAAA,QAClC;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA,yBAAyB;AAAA,MAC3B,CAAC;AACD,YAAM,SAAS,MAAM,MAAM,IAAI,QAAQ;AACvC,UAAI,QAAQ;AACV,eAAO,aAAa,KAAK,MAAM;AAAA,MACjC;AAAA,IACF;AAEA,UAAM,UAAU,MAAM;AAAA,MACpB;AAAA,MACA;AAAA,MACA,EAAE,UAAU,MAAM,YAAY,gBAAgB,EAAE,KAAK,sBAAsB,EAAE;AAAA,MAC7E,EAAE,SAAS,EAAE,OAAO,MAAM,EAAE;AAAA,MAC5B,EAAE,UAAU,eAAe;AAAA,IAC7B;AAEA,UAAM,oBAAoB,IAAI,IAAI,sBAAsB,IAAI,CAAC,IAAI,UAAU,CAAC,IAAI,KAAK,CAAC,CAAC;AACvF,UAAM,cAAc,CAAC,MAA+B,UAClD,KAAK,MAAM,cAAc,MAAM,OAAO,QAAW,EAAE,aAAa,OAAO,CAAC;AAE1E,UAAM,eAAe,QAClB,OAAO,CAAC,UAAU,MAAM,mBAAmB,cAAc,EACzD,KAAK,WAAW;AACnB,UAAM,mBAAmB,QACtB,OAAO,CAAC,UAAU,MAAM,mBAAmB,cAAc,EACzD,KAAK,CAAC,MAAM,UAAU;AACrB,YAAM,eAAe,kBAAkB,IAAI,KAAK,cAAc,KAAK,OAAO;AAC1E,YAAM,gBAAgB,kBAAkB,IAAI,MAAM,cAAc,KAAK,OAAO;AAC5E,UAAI,iBAAiB,cAAe,QAAO,eAAe;AAC1D,aAAO,YAAY,MAAM,KAAK;AAAA,IAChC,CAAC;AAEH,UAAM,mBAAmB,oBAAI,IAAqC;AAClE,eAAW,SAAS,CAAC,GAAG,cAAc,GAAG,gBAAgB,GAAG;AAC1D,YAAM,kBAAkB,MAAM,iBAAiB,KAAK,KAAK,MAAM,MAAM,KAAK,EAAE,YAAY;AACxF,UAAI,CAAC,mBAAmB,iBAAiB,IAAI,eAAe,EAAG;AAC/D,uBAAiB,IAAI,iBAAiB,KAAK;AAAA,IAC7C;AAEA,UAAM,qBAAqB,MAAM,KAAK,iBAAiB,OAAO,CAAC;AAC/D,UAAM,kBACJ,eAAe,wBACX,MAAM,qBAAqB,IAAI;AAAA,MAC7B;AAAA,MACA,SAAS,mBAAmB,IAAI,CAAC,WAAW;AAAA,QAC1C,gBAAgB,MAAM;AAAA,QACtB,OAAO,MAAM;AAAA,MACf,EAAE;AAAA,IACJ,CAAC,IACD,oBAAI,IAAI;AAEd,UAAM,QAAQ;AAAA,MACZ,mBACG,IAAI,CAAC,WAAW;AAAA,QACf,IAAI,MAAM;AAAA,QACV,OAAO,MAAM;AAAA,QACb,OAAO,MAAM;AAAA,QACb,OAAO,MAAM;AAAA,QACb,MAAM,MAAM;AAAA,QACZ,gBAAgB,MAAM;AAAA,QACtB,aAAa,MAAM,mBAAmB;AAAA,QACtC,WAAW,MAAM;AAAA,QACjB,WAAW,MAAM;AAAA,QACjB,GAAI,eAAe,wBACf;AAAA,UACE,YACE,gBAAgB,IAAI,wBAAwB,MAAM,gBAAgB,MAAM,KAAK,CAAC,GAAG,SAAS;AAAA,QAC9F,IACA,CAAC;AAAA,MACP,EAAE;AAAA,MACJ;AAAA,IACF;AAEA,UAAM,eAAe;AAAA,MACnB;AAAA,MACA;AAAA,IACF;AAEA,QAAI,eAAe,SAAS,UAAU;AACpC,YAAM,OAAO,0BAA0B;AAAA,QACrC;AAAA,QACA;AAAA,QACA,iBAAiB;AAAA,MACnB,CAAC;AACD,UAAI;AACF,cAAM,MAAM,IAAI,UAAU,cAAc;AAAA,UACtC,KAAK;AAAA,UACL;AAAA,QACF,CAAC;AAAA,MACH,SAAS,KAAK;AACZ,gBAAQ,KAAK,4DAA4D,GAAG;AAAA,MAC9E;AAAA,IACF;AAEA,WAAO,aAAa,KAAK,YAAY;AAAA,EACvC,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,GAAG;AACxB,aAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,IAC3D;AACA,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,YAAQ,MAAM,sCAAsC,GAAG;AACvD,WAAO,aAAa,KAAK,EAAE,OAAO,UAAU,kCAAkC,mCAAmC,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACvI;AACF;AAEA,eAAsB,KAAK,KAAc,KAAqC;AAC5E,MAAI;AACF,UAAM,UAAU,MAAM,8BAA8B,GAAG;AACvD,QAAI,CAAC,QAAQ,gBAAgB;AAC3B,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,QAAQ,UAAU,0CAA0C,kCAAkC,EAAE,CAAC;AAAA,IACzI;AACA,UAAM,EAAE,WAAW,IAAI,kBAAkB,IAAI,QAAQ,IAAI;AACzD,UAAM,OAAO,WAAW,MAAM,MAAM,aAAa,KAAK,CAAC,CAAC,CAAC;AACzD,UAAM,cAAc,yBAAyB,QAAQ,IAAI;AACzD,UAAM,cAAc,MAAM,0BAA0B,QAAQ,WAAW;AAAA,MACrE,UAAU,QAAQ;AAAA,MAClB,gBAAgB,QAAQ;AAAA,MACxB,QAAQ;AAAA,MACR,cAAc;AAAA,MACd,YAAY;AAAA,MACZ,WAAW;AAAA,MACX,eAAe,IAAI;AAAA,MACnB,gBAAgB,IAAI;AAAA,MACpB,iBAAiB;AAAA,IACnB,CAAC;AACD,QAAI,eAAe,CAAC,YAAY,IAAI;AAClC,aAAO,aAAa,KAAK,YAAY,MAAM,EAAE,QAAQ,YAAY,OAAO,CAAC;AAAA,IAC3E;AACA,UAAM,aAAc,QAAQ,UAAU,QAAQ,YAAY;AAC1D,UAAM,EAAE,QAAQ,SAAS,IACtB,MAAM,WAAW,QAAQ,sCAAsC;AAAA,MAC9D,OAAO;AAAA,QACL,UAAU,QAAQ;AAAA,QAClB,gBAAgB,QAAQ;AAAA,QACxB,MAAM;AAAA,QACN,OAAO,KAAK;AAAA,QACZ,OAAO,KAAK;AAAA,QACZ,OAAO,KAAK;AAAA,QACZ,MAAM,KAAK;AAAA,MACb;AAAA,MACA,KAAK,QAAQ;AAAA,IACf,CAAC;AACH,UAAM,QAAQ,MAAM,sBAAsB,QAAQ,GAAG,KAAK,GAAG,yBAAyB,OAAO,SAAS,CAAC,GAAG,EAAE,UAAU,QAAQ,UAAU,gBAAgB,QAAQ,eAAe,CAAC;AAChL,QAAI,CAAC,OAAO;AACV,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,QAAQ,UAAU,kCAAkC,iCAAiC,EAAE,CAAC;AAAA,IAChI;AAEA,UAAM,0BAA0B,QAAQ,OAAO;AAAA,MAC7C,UAAU,QAAQ;AAAA,MAClB;AAAA,MACA,iBAAiB,CAAC,MAAM,cAAc;AAAA,IACxC,CAAC;AAED,QAAI,aAAa,MAAM,YAAY,uBAAuB;AACxD,YAAM,iCAAiC,QAAQ,WAAW;AAAA,QACxD,UAAU,QAAQ;AAAA,QAClB,gBAAgB,QAAQ;AAAA,QACxB,QAAQ;AAAA,QACR,cAAc;AAAA,QACd,YAAY,MAAM;AAAA,QAClB,WAAW;AAAA,QACX,eAAe,IAAI;AAAA,QACnB,gBAAgB,IAAI;AAAA,QACpB,UAAU,YAAY,YAAY;AAAA,MACpC,CAAC;AAAA,IACH;AAEA,UAAM,WAAW,aAAa;AAAA,MAC5B;AAAA,QACE,IAAI,MAAM;AAAA,QACV,OAAO,MAAM;AAAA,QACb,OAAO,MAAM;AAAA,QACb,OAAO,MAAM;AAAA,QACb,MAAM,MAAM;AAAA,QACZ,gBAAgB,MAAM;AAAA,QACtB,aAAa;AAAA,MACf;AAAA,MACA,EAAE,QAAQ,OAAO,SAAS,YAAY,MAAM,IAAI;AAAA,IAClD;AACA,QAAI,UAAU,aAAa,UAAU,MAAM,UAAU,WAAW;AAC9D,eAAS,QAAQ;AAAA,QACf;AAAA,QACA,2BAA2B;AAAA,UACzB,IAAI,SAAS;AAAA,UACb,WAAW,SAAS;AAAA,UACpB,WAAW,SAAS;AAAA,UACpB,aAAa,SAAS,eAAe;AAAA,UACrC,cAAc,SAAS,gBAAgB;AAAA,UACvC,YAAY,MAAM;AAAA,UAClB,YAAY,SAAS,qBAAqB,OAAO,SAAS,UAAU,YAAY,IAAI;AAAA,QACtF,CAAC;AAAA,MACH;AAAA,IACF;AACA,WAAO;AAAA,EACT,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,GAAG;AACxB,aAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,IAC3D;AACA,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,YAAQ,MAAM,wCAAwC,GAAG;AACzD,WAAO,aAAa,KAAK,EAAE,OAAO,UAAU,kCAAkC,iCAAiC,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrI;AACF;AAEA,MAAM,wBAAwB,EAAE,OAAO;AAAA,EACrC,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,OAAO,EAAE,OAAO;AAAA,EAChB,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACtC,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACtC,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACrC,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS;AAAA,EACtD,aAAa,EAAE,QAAQ,EAAE,SAAS;AAAA,EAClC,WAAW,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,CAAC,EAAE,SAAS;AAAA,EAC5C,WAAW,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,CAAC,EAAE,SAAS;AAC9C,CAAC;AAED,MAAM,+BAA+B,EAAE,OAAO;AAAA,EAC5C,UAAU,EAAE,OAAO,EAAE,SAAS;AAAA,EAC9B,OAAO,EAAE,MAAM,qBAAqB;AACtC,CAAC;AAED,MAAM,wBAAwB,EAAE,OAAO;AAAA,EACrC,OAAO,EAAE,OAAO;AAClB,CAAC;AAEM,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aAAa;AAAA,MACb,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,sBAAsB,QAAQ,6BAA6B;AAAA,QACvF,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,sBAAsB;AAAA,QAC1E,EAAE,QAAQ,KAAK,aAAa,wCAAwC,QAAQ,sBAAsB;AAAA,MACpG;AAAA,IACF;AAAA,IACA,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa;AAAA,MACb,aAAa;AAAA,QACX,aAAa;AAAA,QACb,QAAQ;AAAA,MACV;AAAA,MACA,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,4BAA4B,QAAQ,sBAAsB;AAAA,QACtF,EAAE,QAAQ,KAAK,aAAa,4BAA4B,QAAQ,sBAAsB;AAAA,MACxF;AAAA,MACA,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,mBAAmB,QAAQ,sBAAsB;AAAA,QAC7E,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,sBAAsB;AAAA,QAC1E,EAAE,QAAQ,KAAK,aAAa,4BAA4B,QAAQ,sBAAsB;AAAA,MACxF;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/customers/api/dictionaries/cache.js

@@ -3,7 +3,8 @@ const DICTIONARY_CACHE_TTL_MS = 5 * 60 * 1e3;
 function createDictionaryCacheKey(options) {
   const scope = options.readableOrganizationIds.join("|");
   const organizationPart = options.organizationId ?? "all";
-  return `${CACHE_PREFIX}:${options.tenantId}:${options.mappedKind}:org=${organizationPart}:scope=${scope}`;
+  const sortPart = options.sortMode ? `:sort=${options.sortMode}` : "";
+  return `${CACHE_PREFIX}:${options.tenantId}:${options.mappedKind}:org=${organizationPart}:scope=${scope}${sortPart}`;
 }
 function createDictionaryCacheTags(options) {
   const tags = /* @__PURE__ */ new Set();

package/dist/modules/customers/api/dictionaries/cache.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../src/modules/customers/api/dictionaries/cache.ts"],
-  "sourcesContent": ["import type { CacheStrategy } from '@open-mercato/cache'\n\nconst CACHE_PREFIX = 'customers:dictionaries'\nexport const DICTIONARY_CACHE_TTL_MS = 5 * 60 * 1000\n\ntype CacheKeyOptions = {\n  tenantId: string\n  organizationId: string | null\n  mappedKind: string\n  readableOrganizationIds: string[]\n}\n\ntype CacheTagOptions = {\n  tenantId: string\n  mappedKind: string\n  organizationIds: string[]\n  includeBase?: boolean\n}\n\nexport function createDictionaryCacheKey(options: CacheKeyOptions): string {\n  const scope = options.readableOrganizationIds.join('|')\n  const organizationPart = options.organizationId ?? 'all'\n  return `${CACHE_PREFIX}:${options.tenantId}:${options.mappedKind}:org=${organizationPart}:scope=${scope}`\n}\n\nexport function createDictionaryCacheTags(options: CacheTagOptions): string[] {\n  const tags = new Set<string>()\n  if (options.includeBase !== false) {\n    tags.add(`${CACHE_PREFIX}:${options.tenantId}:${options.mappedKind}`)\n  }\n  for (const orgId of options.organizationIds) {\n    if (orgId) {\n      tags.add(`${CACHE_PREFIX}:${options.tenantId}:${options.mappedKind}:org:${orgId}`)\n    }\n  }\n  return Array.from(tags)\n}\n\nexport async function invalidateDictionaryCache(\n  cache: CacheStrategy | undefined,\n  options: { tenantId: string; mappedKind: string; organizationIds: string[] }\n): Promise<void> {\n  if (!cache?.deleteByTags) return\n  const tags = createDictionaryCacheTags({ ...options, includeBase: false })\n  if (!tags.length) return\n  try {\n    await cache.deleteByTags(tags)\n  } catch (err) {\n    console.warn('[customers.dictionaries.cache] Failed to invalidate cache', err)\n  }\n}\n"],
-  "mappings": "AAEA,MAAM,eAAe;AACd,MAAM,0BAA0B,IAAI,KAAK;AAgBzC,SAAS,yBAAyB,SAAkC;AACzE,QAAM,QAAQ,QAAQ,wBAAwB,KAAK,GAAG;AACtD,QAAM,mBAAmB,QAAQ,kBAAkB;AACnD,SAAO,GAAG,YAAY,IAAI,QAAQ,QAAQ,IAAI,QAAQ,UAAU,QAAQ,gBAAgB,UAAU,KAAK;AACzG;AAEO,SAAS,0BAA0B,SAAoC;AAC5E,QAAM,OAAO,oBAAI,IAAY;AAC7B,MAAI,QAAQ,gBAAgB,OAAO;AACjC,SAAK,IAAI,GAAG,YAAY,IAAI,QAAQ,QAAQ,IAAI,QAAQ,UAAU,EAAE;AAAA,EACtE;AACA,aAAW,SAAS,QAAQ,iBAAiB;AAC3C,QAAI,OAAO;AACT,WAAK,IAAI,GAAG,YAAY,IAAI,QAAQ,QAAQ,IAAI,QAAQ,UAAU,QAAQ,KAAK,EAAE;AAAA,IACnF;AAAA,EACF;AACA,SAAO,MAAM,KAAK,IAAI;AACxB;AAEA,eAAsB,0BACpB,OACA,SACe;AACf,MAAI,CAAC,OAAO,aAAc;AAC1B,QAAM,OAAO,0BAA0B,EAAE,GAAG,SAAS,aAAa,MAAM,CAAC;AACzE,MAAI,CAAC,KAAK,OAAQ;AAClB,MAAI;AACF,UAAM,MAAM,aAAa,IAAI;AAAA,EAC/B,SAAS,KAAK;AACZ,YAAQ,KAAK,6DAA6D,GAAG;AAAA,EAC/E;AACF;",
+  "sourcesContent": ["import type { CacheStrategy } from '@open-mercato/cache'\n\nconst CACHE_PREFIX = 'customers:dictionaries'\nexport const DICTIONARY_CACHE_TTL_MS = 5 * 60 * 1000\n\ntype CacheKeyOptions = {\n  tenantId: string\n  organizationId: string | null\n  mappedKind: string\n  readableOrganizationIds: string[]\n  sortMode?: string\n}\n\ntype CacheTagOptions = {\n  tenantId: string\n  mappedKind: string\n  organizationIds: string[]\n  includeBase?: boolean\n}\n\nexport function createDictionaryCacheKey(options: CacheKeyOptions): string {\n  const scope = options.readableOrganizationIds.join('|')\n  const organizationPart = options.organizationId ?? 'all'\n  const sortPart = options.sortMode ? `:sort=${options.sortMode}` : ''\n  return `${CACHE_PREFIX}:${options.tenantId}:${options.mappedKind}:org=${organizationPart}:scope=${scope}${sortPart}`\n}\n\nexport function createDictionaryCacheTags(options: CacheTagOptions): string[] {\n  const tags = new Set<string>()\n  if (options.includeBase !== false) {\n    tags.add(`${CACHE_PREFIX}:${options.tenantId}:${options.mappedKind}`)\n  }\n  for (const orgId of options.organizationIds) {\n    if (orgId) {\n      tags.add(`${CACHE_PREFIX}:${options.tenantId}:${options.mappedKind}:org:${orgId}`)\n    }\n  }\n  return Array.from(tags)\n}\n\nexport async function invalidateDictionaryCache(\n  cache: CacheStrategy | undefined,\n  options: { tenantId: string; mappedKind: string; organizationIds: string[] }\n): Promise<void> {\n  if (!cache?.deleteByTags) return\n  const tags = createDictionaryCacheTags({ ...options, includeBase: false })\n  if (!tags.length) return\n  try {\n    await cache.deleteByTags(tags)\n  } catch (err) {\n    console.warn('[customers.dictionaries.cache] Failed to invalidate cache', err)\n  }\n}\n"],
+  "mappings": "AAEA,MAAM,eAAe;AACd,MAAM,0BAA0B,IAAI,KAAK;AAiBzC,SAAS,yBAAyB,SAAkC;AACzE,QAAM,QAAQ,QAAQ,wBAAwB,KAAK,GAAG;AACtD,QAAM,mBAAmB,QAAQ,kBAAkB;AACnD,QAAM,WAAW,QAAQ,WAAW,SAAS,QAAQ,QAAQ,KAAK;AAClE,SAAO,GAAG,YAAY,IAAI,QAAQ,QAAQ,IAAI,QAAQ,UAAU,QAAQ,gBAAgB,UAAU,KAAK,GAAG,QAAQ;AACpH;AAEO,SAAS,0BAA0B,SAAoC;AAC5E,QAAM,OAAO,oBAAI,IAAY;AAC7B,MAAI,QAAQ,gBAAgB,OAAO;AACjC,SAAK,IAAI,GAAG,YAAY,IAAI,QAAQ,QAAQ,IAAI,QAAQ,UAAU,EAAE;AAAA,EACtE;AACA,aAAW,SAAS,QAAQ,iBAAiB;AAC3C,QAAI,OAAO;AACT,WAAK,IAAI,GAAG,YAAY,IAAI,QAAQ,QAAQ,IAAI,QAAQ,UAAU,QAAQ,KAAK,EAAE;AAAA,IACnF;AAAA,EACF;AACA,SAAO,MAAM,KAAK,IAAI;AACxB;AAEA,eAAsB,0BACpB,OACA,SACe;AACf,MAAI,CAAC,OAAO,aAAc;AAC1B,QAAM,OAAO,0BAA0B,EAAE,GAAG,SAAS,aAAa,MAAM,CAAC;AACzE,MAAI,CAAC,KAAK,OAAQ;AAClB,MAAI;AACF,UAAM,MAAM,aAAa,IAAI;AAAA,EAC/B,SAAS,KAAK;AACZ,YAAQ,KAAK,6DAA6D,GAAG;AAAA,EAC/E;AACF;",
   "names": []
 }

package/dist/modules/customers/api/dictionaries/context.js

@@ -144,6 +144,7 @@ async function resolveDictionaryRouteContext(req, options) {
   };
 }
 export {
+  BUILTIN_DICTIONARY_ROUTE_KINDS,
   dictionaryKindSchema,
   mapDictionaryKind,
   paramsSchema,

package/dist/modules/customers/api/dictionaries/context.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../src/modules/customers/api/dictionaries/context.ts"],
-  "sourcesContent": ["import { z } from 'zod'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { createRequestContainer, type AppContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { Organization } from '@open-mercato/core/modules/directory/data/entities'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { CrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport type { CacheStrategy } from '@open-mercato/cache'\nimport type { CommandRuntimeContext } from '@open-mercato/shared/lib/commands'\n\nconst BUILTIN_DICTIONARY_ROUTE_KINDS = [\n  'statuses',\n  'sources',\n  'lifecycle-stages',\n  'address-types',\n  'activity-types',\n  'deal-statuses',\n  'pipeline-stages',\n  'job-titles',\n  'industries',\n  'temperature',\n  'renewal-quarters',\n  'person-company-roles',\n] as const\n\ntype BuiltinDictionaryRouteKind = (typeof BUILTIN_DICTIONARY_ROUTE_KINDS)[number]\n\nconst dictionaryCustomKindSchema = z\n  .string()\n  .trim()\n  .regex(/^[a-z0-9]+(?:-[a-z0-9]+)*$/, 'Invalid dictionary kind')\n\nexport const dictionaryKindSchema = z.union([\n  z.enum(BUILTIN_DICTIONARY_ROUTE_KINDS),\n  dictionaryCustomKindSchema,\n])\n\nexport type DictionaryRouteParam = z.infer<typeof dictionaryKindSchema>\nexport type DictionaryEntityKind = string\n\nconst KIND_MAP: Record<BuiltinDictionaryRouteKind, DictionaryEntityKind> = {\n  statuses: 'status',\n  sources: 'source',\n  'lifecycle-stages': 'lifecycle_stage',\n  'address-types': 'address_type',\n  'activity-types': 'activity_type',\n  'deal-statuses': 'deal_status',\n  'pipeline-stages': 'pipeline_stage',\n  'job-titles': 'job_title',\n  industries: 'industry',\n  temperature: 'temperature',\n  'renewal-quarters': 'renewal_quarter',\n  'person-company-roles': 'person_company_role',\n}\n\nexport const paramsSchema = z.object({\n  kind: dictionaryKindSchema,\n})\n\nexport type DictionaryRouteContext = {\n  auth: Awaited<ReturnType<typeof getAuthFromRequest>>\n  translate: (key: string, fallback?: string) => string\n  em: EntityManager\n  organizationId: string | null\n  tenantId: string\n  readableOrganizationIds: string[]\n  cache?: CacheStrategy\n  container: AppContainer\n  ctx: CommandRuntimeContext\n}\n\nexport function resolveDictionaryActorId(\n  auth: Awaited<ReturnType<typeof getAuthFromRequest>>,\n): string {\n  if (auth && typeof auth.sub === 'string' && auth.sub.trim().length > 0) return auth.sub\n  if (auth && typeof auth.userId === 'string' && auth.userId.trim().length > 0) return auth.userId\n  if (auth && typeof auth.keyId === 'string' && auth.keyId.trim().length > 0) return auth.keyId\n  return 'system'\n}\n\nexport function mapDictionaryKind(kind: string | undefined) {\n  const parsed = paramsSchema.parse({ kind })\n  const mappedKind = Object.prototype.hasOwnProperty.call(KIND_MAP, parsed.kind)\n    ? KIND_MAP[parsed.kind as BuiltinDictionaryRouteKind]\n    : parsed.kind\n  return {\n    kind: parsed.kind,\n    mappedKind,\n  }\n}\n\nexport async function resolveDictionaryRouteContext(\n  req: Request,\n  options?: { selectedId?: string | null },\n): Promise<DictionaryRouteContext> {\n  const container = await createRequestContainer()\n  const auth = await getAuthFromRequest(req)\n  const { translate } = await resolveTranslations()\n  if (!auth || !auth.tenantId) {\n    throw new CrudHttpError(401, { error: translate('customers.errors.unauthorized', 'Unauthorized') })\n  }\n\n  const scope = await resolveOrganizationScopeForRequest({\n    container,\n    auth,\n    request: req,\n    selectedId: options?.selectedId,\n  })\n  const em = (container.resolve('em') as EntityManager)\n  const tenantId = scope?.tenantId ?? auth.tenantId\n  const organizationId = scope?.selectedId ?? auth.orgId ?? null\n\n  const normalizeId = (value: unknown): string | null => {\n    if (typeof value !== 'string') return null\n    const trimmed = value.trim()\n    return trimmed.length > 0 ? trimmed : null\n  }\n\n  const candidateIds = new Set<string>()\n  const pushCandidate = (value: unknown) => {\n    const normalized = normalizeId(value)\n    if (normalized) candidateIds.add(normalized)\n  }\n\n  pushCandidate(organizationId)\n  pushCandidate(auth.orgId ?? null)\n  if (Array.isArray(scope?.filterIds)) {\n    for (const id of scope.filterIds) pushCandidate(id)\n  }\n  if (Array.isArray(scope?.allowedIds)) {\n    for (const id of scope.allowedIds) pushCandidate(id)\n  }\n\n  let cache: CacheStrategy | undefined\n  try {\n    cache = (container.resolve('cache') as CacheStrategy)\n  } catch {}\n\n  const readableOrganizationIds = new Set<string>()\n  try {\n    const shouldLoadAll = candidateIds.size === 0\n    const organizations = await em.find(\n      Organization,\n      {\n        tenant: tenantId as any,\n        deletedAt: null,\n        ...(shouldLoadAll ? {} : { id: { $in: Array.from(candidateIds) } }),\n      } as any,\n      { fields: ['id', 'ancestorIds'] },\n    )\n    for (const organization of organizations) {\n      const id = normalizeId(organization.id)\n      if (id) readableOrganizationIds.add(id)\n      if (Array.isArray(organization.ancestorIds)) {\n        for (const ancestorId of organization.ancestorIds) {\n          const normalized = normalizeId(ancestorId)\n          if (normalized) readableOrganizationIds.add(normalized)\n        }\n      }\n    }\n    if (!shouldLoadAll && readableOrganizationIds.size === 0) {\n      for (const id of candidateIds) readableOrganizationIds.add(id)\n    }\n  } catch (err) {\n    console.warn('[customers.dictionaries.context] Failed to resolve ancestor organizations', err)\n    for (const id of candidateIds) readableOrganizationIds.add(id)\n  }\n\n  const commandContext: CommandRuntimeContext = {\n    container,\n    auth,\n    organizationScope: scope,\n    selectedOrganizationId: organizationId,\n    organizationIds: scope?.filterIds ?? (auth.orgId ? [auth.orgId] : null),\n    request: req,\n  }\n\n  return {\n    auth,\n    translate,\n    em,\n    organizationId,\n    tenantId,\n    readableOrganizationIds: Array.from(readableOrganizationIds),\n    cache,\n    container,\n    ctx: commandContext,\n  }\n}\n"],
-  "mappings": "AAAA,SAAS,SAAS;AAElB,SAAS,8BAAiD;AAC1D,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AACnD,SAAS,oBAAoB;AAC7B,SAAS,2BAA2B;AACpC,SAAS,qBAAqB;AAI9B,MAAM,iCAAiC;AAAA,EACrC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAIA,MAAM,6BAA6B,EAChC,OAAO,EACP,KAAK,EACL,MAAM,8BAA8B,yBAAyB;AAEzD,MAAM,uBAAuB,EAAE,MAAM;AAAA,EAC1C,EAAE,KAAK,8BAA8B;AAAA,EACrC;AACF,CAAC;AAKD,MAAM,WAAqE;AAAA,EACzE,UAAU;AAAA,EACV,SAAS;AAAA,EACT,oBAAoB;AAAA,EACpB,iBAAiB;AAAA,EACjB,kBAAkB;AAAA,EAClB,iBAAiB;AAAA,EACjB,mBAAmB;AAAA,EACnB,cAAc;AAAA,EACd,YAAY;AAAA,EACZ,aAAa;AAAA,EACb,oBAAoB;AAAA,EACpB,wBAAwB;AAC1B;AAEO,MAAM,eAAe,EAAE,OAAO;AAAA,EACnC,MAAM;AACR,CAAC;AAcM,SAAS,yBACd,MACQ;AACR,MAAI,QAAQ,OAAO,KAAK,QAAQ,YAAY,KAAK,IAAI,KAAK,EAAE,SAAS,EAAG,QAAO,KAAK;AACpF,MAAI,QAAQ,OAAO,KAAK,WAAW,YAAY,KAAK,OAAO,KAAK,EAAE,SAAS,EAAG,QAAO,KAAK;AAC1F,MAAI,QAAQ,OAAO,KAAK,UAAU,YAAY,KAAK,MAAM,KAAK,EAAE,SAAS,EAAG,QAAO,KAAK;AACxF,SAAO;AACT;AAEO,SAAS,kBAAkB,MAA0B;AAC1D,QAAM,SAAS,aAAa,MAAM,EAAE,KAAK,CAAC;AAC1C,QAAM,aAAa,OAAO,UAAU,eAAe,KAAK,UAAU,OAAO,IAAI,IACzE,SAAS,OAAO,IAAkC,IAClD,OAAO;AACX,SAAO;AAAA,IACL,MAAM,OAAO;AAAA,IACb;AAAA,EACF;AACF;AAEA,eAAsB,8BACpB,KACA,SACiC;AACjC,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,MAAI,CAAC,QAAQ,CAAC,KAAK,UAAU;AAC3B,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,iCAAiC,cAAc,EAAE,CAAC;AAAA,EACpG;AAEA,QAAM,QAAQ,MAAM,mCAAmC;AAAA,IACrD;AAAA,IACA;AAAA,IACA,SAAS;AAAA,IACT,YAAY,SAAS;AAAA,EACvB,CAAC;AACD,QAAM,KAAM,UAAU,QAAQ,IAAI;AAClC,QAAM,WAAW,OAAO,YAAY,KAAK;AACzC,QAAM,iBAAiB,OAAO,cAAc,KAAK,SAAS;AAE1D,QAAM,cAAc,CAAC,UAAkC;AACrD,QAAI,OAAO,UAAU,SAAU,QAAO;AACtC,UAAM,UAAU,MAAM,KAAK;AAC3B,WAAO,QAAQ,SAAS,IAAI,UAAU;AAAA,EACxC;AAEA,QAAM,eAAe,oBAAI,IAAY;AACrC,QAAM,gBAAgB,CAAC,UAAmB;AACxC,UAAM,aAAa,YAAY,KAAK;AACpC,QAAI,WAAY,cAAa,IAAI,UAAU;AAAA,EAC7C;AAEA,gBAAc,cAAc;AAC5B,gBAAc,KAAK,SAAS,IAAI;AAChC,MAAI,MAAM,QAAQ,OAAO,SAAS,GAAG;AACnC,eAAW,MAAM,MAAM,UAAW,eAAc,EAAE;AAAA,EACpD;AACA,MAAI,MAAM,QAAQ,OAAO,UAAU,GAAG;AACpC,eAAW,MAAM,MAAM,WAAY,eAAc,EAAE;AAAA,EACrD;AAEA,MAAI;AACJ,MAAI;AACF,YAAS,UAAU,QAAQ,OAAO;AAAA,EACpC,QAAQ;AAAA,EAAC;AAET,QAAM,0BAA0B,oBAAI,IAAY;AAChD,MAAI;AACF,UAAM,gBAAgB,aAAa,SAAS;AAC5C,UAAM,gBAAgB,MAAM,GAAG;AAAA,MAC7B;AAAA,MACA;AAAA,QACE,QAAQ;AAAA,QACR,WAAW;AAAA,QACX,GAAI,gBAAgB,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,MAAM,KAAK,YAAY,EAAE,EAAE;AAAA,MACnE;AAAA,MACA,EAAE,QAAQ,CAAC,MAAM,aAAa,EAAE;AAAA,IAClC;AACA,eAAW,gBAAgB,eAAe;AACxC,YAAM,KAAK,YAAY,aAAa,EAAE;AACtC,UAAI,GAAI,yBAAwB,IAAI,EAAE;AACtC,UAAI,MAAM,QAAQ,aAAa,WAAW,GAAG;AAC3C,mBAAW,cAAc,aAAa,aAAa;AACjD,gBAAM,aAAa,YAAY,UAAU;AACzC,cAAI,WAAY,yBAAwB,IAAI,UAAU;AAAA,QACxD;AAAA,MACF;AAAA,IACF;AACA,QAAI,CAAC,iBAAiB,wBAAwB,SAAS,GAAG;AACxD,iBAAW,MAAM,aAAc,yBAAwB,IAAI,EAAE;AAAA,IAC/D;AAAA,EACF,SAAS,KAAK;AACZ,YAAQ,KAAK,6EAA6E,GAAG;AAC7F,eAAW,MAAM,aAAc,yBAAwB,IAAI,EAAE;AAAA,EAC/D;AAEA,QAAM,iBAAwC;AAAA,IAC5C;AAAA,IACA;AAAA,IACA,mBAAmB;AAAA,IACnB,wBAAwB;AAAA,IACxB,iBAAiB,OAAO,cAAc,KAAK,QAAQ,CAAC,KAAK,KAAK,IAAI;AAAA,IAClE,SAAS;AAAA,EACX;AAEA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,yBAAyB,MAAM,KAAK,uBAAuB;AAAA,IAC3D;AAAA,IACA;AAAA,IACA,KAAK;AAAA,EACP;AACF;",
+  "sourcesContent": ["import { z } from 'zod'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { createRequestContainer, type AppContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { Organization } from '@open-mercato/core/modules/directory/data/entities'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { CrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport type { CacheStrategy } from '@open-mercato/cache'\nimport type { CommandRuntimeContext } from '@open-mercato/shared/lib/commands'\n\nexport const BUILTIN_DICTIONARY_ROUTE_KINDS = [\n  'statuses',\n  'sources',\n  'lifecycle-stages',\n  'address-types',\n  'activity-types',\n  'deal-statuses',\n  'pipeline-stages',\n  'job-titles',\n  'industries',\n  'temperature',\n  'renewal-quarters',\n  'person-company-roles',\n] as const\n\ntype BuiltinDictionaryRouteKind = (typeof BUILTIN_DICTIONARY_ROUTE_KINDS)[number]\n\nconst dictionaryCustomKindSchema = z\n  .string()\n  .trim()\n  .regex(/^[a-z0-9]+(?:-[a-z0-9]+)*$/, 'Invalid dictionary kind')\n\nexport const dictionaryKindSchema = z.union([\n  z.enum(BUILTIN_DICTIONARY_ROUTE_KINDS),\n  dictionaryCustomKindSchema,\n])\n\nexport type DictionaryRouteParam = z.infer<typeof dictionaryKindSchema>\nexport type DictionaryEntityKind = string\n\nconst KIND_MAP: Record<BuiltinDictionaryRouteKind, DictionaryEntityKind> = {\n  statuses: 'status',\n  sources: 'source',\n  'lifecycle-stages': 'lifecycle_stage',\n  'address-types': 'address_type',\n  'activity-types': 'activity_type',\n  'deal-statuses': 'deal_status',\n  'pipeline-stages': 'pipeline_stage',\n  'job-titles': 'job_title',\n  industries: 'industry',\n  temperature: 'temperature',\n  'renewal-quarters': 'renewal_quarter',\n  'person-company-roles': 'person_company_role',\n}\n\nexport const paramsSchema = z.object({\n  kind: dictionaryKindSchema,\n})\n\nexport type DictionaryRouteContext = {\n  auth: Awaited<ReturnType<typeof getAuthFromRequest>>\n  translate: (key: string, fallback?: string) => string\n  em: EntityManager\n  organizationId: string | null\n  tenantId: string\n  readableOrganizationIds: string[]\n  cache?: CacheStrategy\n  container: AppContainer\n  ctx: CommandRuntimeContext\n}\n\nexport function resolveDictionaryActorId(\n  auth: Awaited<ReturnType<typeof getAuthFromRequest>>,\n): string {\n  if (auth && typeof auth.sub === 'string' && auth.sub.trim().length > 0) return auth.sub\n  if (auth && typeof auth.userId === 'string' && auth.userId.trim().length > 0) return auth.userId\n  if (auth && typeof auth.keyId === 'string' && auth.keyId.trim().length > 0) return auth.keyId\n  return 'system'\n}\n\nexport function mapDictionaryKind(kind: string | undefined) {\n  const parsed = paramsSchema.parse({ kind })\n  const mappedKind = Object.prototype.hasOwnProperty.call(KIND_MAP, parsed.kind)\n    ? KIND_MAP[parsed.kind as BuiltinDictionaryRouteKind]\n    : parsed.kind\n  return {\n    kind: parsed.kind,\n    mappedKind,\n  }\n}\n\nexport async function resolveDictionaryRouteContext(\n  req: Request,\n  options?: { selectedId?: string | null },\n): Promise<DictionaryRouteContext> {\n  const container = await createRequestContainer()\n  const auth = await getAuthFromRequest(req)\n  const { translate } = await resolveTranslations()\n  if (!auth || !auth.tenantId) {\n    throw new CrudHttpError(401, { error: translate('customers.errors.unauthorized', 'Unauthorized') })\n  }\n\n  const scope = await resolveOrganizationScopeForRequest({\n    container,\n    auth,\n    request: req,\n    selectedId: options?.selectedId,\n  })\n  const em = (container.resolve('em') as EntityManager)\n  const tenantId = scope?.tenantId ?? auth.tenantId\n  const organizationId = scope?.selectedId ?? auth.orgId ?? null\n\n  const normalizeId = (value: unknown): string | null => {\n    if (typeof value !== 'string') return null\n    const trimmed = value.trim()\n    return trimmed.length > 0 ? trimmed : null\n  }\n\n  const candidateIds = new Set<string>()\n  const pushCandidate = (value: unknown) => {\n    const normalized = normalizeId(value)\n    if (normalized) candidateIds.add(normalized)\n  }\n\n  pushCandidate(organizationId)\n  pushCandidate(auth.orgId ?? null)\n  if (Array.isArray(scope?.filterIds)) {\n    for (const id of scope.filterIds) pushCandidate(id)\n  }\n  if (Array.isArray(scope?.allowedIds)) {\n    for (const id of scope.allowedIds) pushCandidate(id)\n  }\n\n  let cache: CacheStrategy | undefined\n  try {\n    cache = (container.resolve('cache') as CacheStrategy)\n  } catch {}\n\n  const readableOrganizationIds = new Set<string>()\n  try {\n    const shouldLoadAll = candidateIds.size === 0\n    const organizations = await em.find(\n      Organization,\n      {\n        tenant: tenantId as any,\n        deletedAt: null,\n        ...(shouldLoadAll ? {} : { id: { $in: Array.from(candidateIds) } }),\n      } as any,\n      { fields: ['id', 'ancestorIds'] },\n    )\n    for (const organization of organizations) {\n      const id = normalizeId(organization.id)\n      if (id) readableOrganizationIds.add(id)\n      if (Array.isArray(organization.ancestorIds)) {\n        for (const ancestorId of organization.ancestorIds) {\n          const normalized = normalizeId(ancestorId)\n          if (normalized) readableOrganizationIds.add(normalized)\n        }\n      }\n    }\n    if (!shouldLoadAll && readableOrganizationIds.size === 0) {\n      for (const id of candidateIds) readableOrganizationIds.add(id)\n    }\n  } catch (err) {\n    console.warn('[customers.dictionaries.context] Failed to resolve ancestor organizations', err)\n    for (const id of candidateIds) readableOrganizationIds.add(id)\n  }\n\n  const commandContext: CommandRuntimeContext = {\n    container,\n    auth,\n    organizationScope: scope,\n    selectedOrganizationId: organizationId,\n    organizationIds: scope?.filterIds ?? (auth.orgId ? [auth.orgId] : null),\n    request: req,\n  }\n\n  return {\n    auth,\n    translate,\n    em,\n    organizationId,\n    tenantId,\n    readableOrganizationIds: Array.from(readableOrganizationIds),\n    cache,\n    container,\n    ctx: commandContext,\n  }\n}\n"],
+  "mappings": "AAAA,SAAS,SAAS;AAElB,SAAS,8BAAiD;AAC1D,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AACnD,SAAS,oBAAoB;AAC7B,SAAS,2BAA2B;AACpC,SAAS,qBAAqB;AAIvB,MAAM,iCAAiC;AAAA,EAC5C;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAIA,MAAM,6BAA6B,EAChC,OAAO,EACP,KAAK,EACL,MAAM,8BAA8B,yBAAyB;AAEzD,MAAM,uBAAuB,EAAE,MAAM;AAAA,EAC1C,EAAE,KAAK,8BAA8B;AAAA,EACrC;AACF,CAAC;AAKD,MAAM,WAAqE;AAAA,EACzE,UAAU;AAAA,EACV,SAAS;AAAA,EACT,oBAAoB;AAAA,EACpB,iBAAiB;AAAA,EACjB,kBAAkB;AAAA,EAClB,iBAAiB;AAAA,EACjB,mBAAmB;AAAA,EACnB,cAAc;AAAA,EACd,YAAY;AAAA,EACZ,aAAa;AAAA,EACb,oBAAoB;AAAA,EACpB,wBAAwB;AAC1B;AAEO,MAAM,eAAe,EAAE,OAAO;AAAA,EACnC,MAAM;AACR,CAAC;AAcM,SAAS,yBACd,MACQ;AACR,MAAI,QAAQ,OAAO,KAAK,QAAQ,YAAY,KAAK,IAAI,KAAK,EAAE,SAAS,EAAG,QAAO,KAAK;AACpF,MAAI,QAAQ,OAAO,KAAK,WAAW,YAAY,KAAK,OAAO,KAAK,EAAE,SAAS,EAAG,QAAO,KAAK;AAC1F,MAAI,QAAQ,OAAO,KAAK,UAAU,YAAY,KAAK,MAAM,KAAK,EAAE,SAAS,EAAG,QAAO,KAAK;AACxF,SAAO;AACT;AAEO,SAAS,kBAAkB,MAA0B;AAC1D,QAAM,SAAS,aAAa,MAAM,EAAE,KAAK,CAAC;AAC1C,QAAM,aAAa,OAAO,UAAU,eAAe,KAAK,UAAU,OAAO,IAAI,IACzE,SAAS,OAAO,IAAkC,IAClD,OAAO;AACX,SAAO;AAAA,IACL,MAAM,OAAO;AAAA,IACb;AAAA,EACF;AACF;AAEA,eAAsB,8BACpB,KACA,SACiC;AACjC,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,MAAI,CAAC,QAAQ,CAAC,KAAK,UAAU;AAC3B,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,iCAAiC,cAAc,EAAE,CAAC;AAAA,EACpG;AAEA,QAAM,QAAQ,MAAM,mCAAmC;AAAA,IACrD;AAAA,IACA;AAAA,IACA,SAAS;AAAA,IACT,YAAY,SAAS;AAAA,EACvB,CAAC;AACD,QAAM,KAAM,UAAU,QAAQ,IAAI;AAClC,QAAM,WAAW,OAAO,YAAY,KAAK;AACzC,QAAM,iBAAiB,OAAO,cAAc,KAAK,SAAS;AAE1D,QAAM,cAAc,CAAC,UAAkC;AACrD,QAAI,OAAO,UAAU,SAAU,QAAO;AACtC,UAAM,UAAU,MAAM,KAAK;AAC3B,WAAO,QAAQ,SAAS,IAAI,UAAU;AAAA,EACxC;AAEA,QAAM,eAAe,oBAAI,IAAY;AACrC,QAAM,gBAAgB,CAAC,UAAmB;AACxC,UAAM,aAAa,YAAY,KAAK;AACpC,QAAI,WAAY,cAAa,IAAI,UAAU;AAAA,EAC7C;AAEA,gBAAc,cAAc;AAC5B,gBAAc,KAAK,SAAS,IAAI;AAChC,MAAI,MAAM,QAAQ,OAAO,SAAS,GAAG;AACnC,eAAW,MAAM,MAAM,UAAW,eAAc,EAAE;AAAA,EACpD;AACA,MAAI,MAAM,QAAQ,OAAO,UAAU,GAAG;AACpC,eAAW,MAAM,MAAM,WAAY,eAAc,EAAE;AAAA,EACrD;AAEA,MAAI;AACJ,MAAI;AACF,YAAS,UAAU,QAAQ,OAAO;AAAA,EACpC,QAAQ;AAAA,EAAC;AAET,QAAM,0BAA0B,oBAAI,IAAY;AAChD,MAAI;AACF,UAAM,gBAAgB,aAAa,SAAS;AAC5C,UAAM,gBAAgB,MAAM,GAAG;AAAA,MAC7B;AAAA,MACA;AAAA,QACE,QAAQ;AAAA,QACR,WAAW;AAAA,QACX,GAAI,gBAAgB,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,MAAM,KAAK,YAAY,EAAE,EAAE;AAAA,MACnE;AAAA,MACA,EAAE,QAAQ,CAAC,MAAM,aAAa,EAAE;AAAA,IAClC;AACA,eAAW,gBAAgB,eAAe;AACxC,YAAM,KAAK,YAAY,aAAa,EAAE;AACtC,UAAI,GAAI,yBAAwB,IAAI,EAAE;AACtC,UAAI,MAAM,QAAQ,aAAa,WAAW,GAAG;AAC3C,mBAAW,cAAc,aAAa,aAAa;AACjD,gBAAM,aAAa,YAAY,UAAU;AACzC,cAAI,WAAY,yBAAwB,IAAI,UAAU;AAAA,QACxD;AAAA,MACF;AAAA,IACF;AACA,QAAI,CAAC,iBAAiB,wBAAwB,SAAS,GAAG;AACxD,iBAAW,MAAM,aAAc,yBAAwB,IAAI,EAAE;AAAA,IAC/D;AAAA,EACF,SAAS,KAAK;AACZ,YAAQ,KAAK,6EAA6E,GAAG;AAC7F,eAAW,MAAM,aAAc,yBAAwB,IAAI,EAAE;AAAA,EAC/D;AAEA,QAAM,iBAAwC;AAAA,IAC5C;AAAA,IACA;AAAA,IACA,mBAAmB;AAAA,IACnB,wBAAwB;AAAA,IACxB,iBAAiB,OAAO,cAAc,KAAK,QAAQ,CAAC,KAAK,KAAK,IAAI;AAAA,IAClE,SAAS;AAAA,EACX;AAEA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,yBAAyB,MAAM,KAAK,uBAAuB;AAAA,IAC3D;AAAA,IACA;AAAA,IACA,KAAK;AAAA,EACP;AACF;",
   "names": []
 }

package/dist/modules/customers/api/interactions/[id]/visibility/route.js

@@ -0,0 +1,151 @@
+import { NextResponse } from "next/server";
+import { z } from "zod";
+import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
+import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
+import { findOneWithDecryption } from "@open-mercato/shared/lib/encryption/find";
+import { readJsonSafe } from "@open-mercato/shared/lib/http/readJsonSafe";
+import {
+  validateCrudMutationGuard,
+  runCrudMutationGuardAfterSuccess
+} from "@open-mercato/shared/lib/crud/mutation-guard";
+import { resolveOrganizationScopeForRequest } from "@open-mercato/core/modules/directory/utils/organizationScope";
+import { CustomerInteraction } from "../../../../data/entities.js";
+import { resolveAuthActorId } from "../../../../lib/interactionRequestContext.js";
+import { emitCustomersEvent } from "../../../../events.js";
+const metadata = {
+  path: "/customers/interactions/[id]/visibility",
+  PATCH: {
+    requireAuth: true,
+    requireFeatures: ["customers.email.compose"]
+  }
+};
+const bodySchema = z.object({ visibility: z.enum(["private", "shared"]) }).strict();
+async function PATCH(req, context) {
+  const { id } = await context.params;
+  if (!z.string().uuid().safeParse(id).success) {
+    return NextResponse.json({ error: "Invalid interaction id" }, { status: 400 });
+  }
+  const auth = await getAuthFromRequest(req);
+  if (!auth?.sub || !auth?.tenantId) {
+    return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
+  }
+  let body;
+  try {
+    body = bodySchema.parse(await readJsonSafe(req, null));
+  } catch (err) {
+    return NextResponse.json(
+      { error: err instanceof Error ? err.message : "Invalid request body" },
+      { status: 422 }
+    );
+  }
+  const container = await createRequestContainer();
+  const em = container.resolve("em").fork();
+  const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req });
+  const organizationId = scope?.selectedId ?? auth.orgId ?? null;
+  const dscope = { tenantId: auth.tenantId, organizationId };
+  const userId = resolveAuthActorId(auth);
+  const guardResult = await validateCrudMutationGuard(container, {
+    tenantId: auth.tenantId,
+    organizationId,
+    userId,
+    resourceKind: "customers.interaction",
+    resourceId: id,
+    operation: "custom",
+    requestMethod: req.method,
+    requestHeaders: req.headers
+  });
+  if (guardResult && !guardResult.ok) {
+    return NextResponse.json(guardResult.body, { status: guardResult.status });
+  }
+  const interaction = await findOneWithDecryption(
+    em,
+    CustomerInteraction,
+    {
+      id,
+      tenantId: auth.tenantId,
+      organizationId,
+      deletedAt: null,
+      interactionType: "email"
+    },
+    void 0,
+    dscope
+  );
+  if (!interaction) {
+    return NextResponse.json({ error: "Email not found" }, { status: 404 });
+  }
+  const isAuthor = !!interaction.authorUserId && interaction.authorUserId === auth.sub;
+  if (!isAuthor) {
+    return NextResponse.json({ error: "Email not found" }, { status: 404 });
+  }
+  if (interaction.visibility === body.visibility) {
+    return NextResponse.json({ ok: true, changed: false });
+  }
+  const previousVisibility = interaction.visibility ?? "private";
+  const commandBus = container.resolve("commandBus");
+  await commandBus.execute(
+    "customers.interactions.update",
+    {
+      input: { id, visibility: body.visibility },
+      ctx: {
+        container,
+        auth,
+        organizationScope: null,
+        selectedOrganizationId: organizationId,
+        organizationIds: organizationId ? [organizationId] : null
+      }
+    }
+  );
+  if (guardResult?.ok && guardResult.shouldRunAfterSuccess) {
+    await runCrudMutationGuardAfterSuccess(container, {
+      tenantId: auth.tenantId,
+      organizationId,
+      userId,
+      resourceKind: "customers.interaction",
+      resourceId: id,
+      operation: "custom",
+      requestMethod: req.method,
+      requestHeaders: req.headers,
+      metadata: guardResult.metadata ?? null
+    });
+  }
+  try {
+    await emitCustomersEvent("customers.email.visibility_changed", {
+      interactionId: interaction.id,
+      previousVisibility,
+      nextVisibility: body.visibility,
+      authorUserId: interaction.authorUserId ?? null,
+      actorUserId: auth.sub,
+      // v1: strict owner-only — only the author reaches this point, so a
+      // visibility change is never an admin bypass.
+      adminBypass: false,
+      tenantId: auth.tenantId,
+      organizationId
+    });
+  } catch {
+  }
+  return NextResponse.json({ ok: true, changed: true });
+}
+const openApi = {
+  tags: ["Customers", "Email"],
+  methods: {
+    PATCH: {
+      summary: "Flip an email interaction visibility (private \u2194 shared)",
+      tags: ["Customers", "Email"],
+      responses: [
+        { status: 200, description: "Updated" },
+        { status: 400, description: "Invalid id" },
+        { status: 401, description: "Unauthorized" },
+        { status: 404, description: "Email not found or not visible to caller" },
+        { status: 422, description: "Invalid body" }
+      ]
+    }
+  }
+};
+var route_default = PATCH;
+export {
+  PATCH,
+  route_default as default,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/customers/api/interactions/[id]/visibility/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../../src/modules/customers/api/interactions/%5Bid%5D/visibility/route.ts"],
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { readJsonSafe } from '@open-mercato/shared/lib/http/readJsonSafe'\nimport type { CommandBus } from '@open-mercato/shared/lib/commands'\nimport {\n  validateCrudMutationGuard,\n  runCrudMutationGuardAfterSuccess,\n} from '@open-mercato/shared/lib/crud/mutation-guard'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { CustomerInteraction } from '../../../../data/entities'\nimport type { InteractionUpdateInput } from '../../../../data/validators'\nimport { resolveAuthActorId } from '../../../../lib/interactionRequestContext'\nimport { emitCustomersEvent } from '../../../../events'\n\nexport const metadata = {\n  path: '/customers/interactions/[id]/visibility',\n  PATCH: {\n    requireAuth: true,\n    requireFeatures: ['customers.email.compose'],\n  },\n}\n\nconst bodySchema = z.object({ visibility: z.enum(['private', 'shared']) }).strict()\n\ntype RouteContext = { params: Promise<{ id: string }> | { id: string } }\n\nexport async function PATCH(req: Request, context: RouteContext): Promise<Response> {\n  const { id } = await context.params\n  if (!z.string().uuid().safeParse(id).success) {\n    return NextResponse.json({ error: 'Invalid interaction id' }, { status: 400 })\n  }\n\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.sub || !auth?.tenantId) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n\n  let body: z.infer<typeof bodySchema>\n  try {\n    body = bodySchema.parse(await readJsonSafe(req, null))\n  } catch (err) {\n    return NextResponse.json(\n      { error: err instanceof Error ? err.message : 'Invalid request body' },\n      { status: 422 },\n    )\n  }\n\n  const container = await createRequestContainer()\n  const em = (container.resolve('em') as EntityManager).fork()\n  const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n  const organizationId = scope?.selectedId ?? (auth as { orgId?: string | null }).orgId ?? null\n  const dscope = { tenantId: auth.tenantId as string, organizationId }\n  const userId = resolveAuthActorId(auth)\n\n  const guardResult = await validateCrudMutationGuard(container, {\n    tenantId: auth.tenantId,\n    organizationId,\n    userId,\n    resourceKind: 'customers.interaction',\n    resourceId: id,\n    operation: 'custom',\n    requestMethod: req.method,\n    requestHeaders: req.headers,\n  })\n  if (guardResult && !guardResult.ok) {\n    return NextResponse.json(guardResult.body, { status: guardResult.status })\n  }\n\n  const interaction = (await findOneWithDecryption(\n    em,\n    CustomerInteraction,\n    {\n      id,\n      tenantId: auth.tenantId,\n      organizationId,\n      deletedAt: null,\n      interactionType: 'email',\n    } as any,\n    undefined,\n    dscope,\n  )) as { id: string; authorUserId?: string | null; visibility?: string | null } | null\n\n  if (!interaction) {\n    return NextResponse.json({ error: 'Email not found' }, { status: 404 })\n  }\n\n  // Personal mailbox privacy (v1: strict owner-only): ONLY the author may flip\n  // their own email's visibility \u2014 no admin bypass. Return 404 (not 403) for\n  // everyone else so we don't leak the row's existence \u2014 this also covers\n  // non-authors who cannot see a private email in the first place.\n  const isAuthor = !!interaction.authorUserId && interaction.authorUserId === auth.sub\n  if (!isAuthor) {\n    return NextResponse.json({ error: 'Email not found' }, { status: 404 })\n  }\n\n  // No-op: visibility is already at the requested value.\n  if (interaction.visibility === body.visibility) {\n    return NextResponse.json({ ok: true, changed: false })\n  }\n\n  const previousVisibility = (interaction.visibility ?? 'private') as 'private' | 'shared'\n\n  // Route the write through the interactions update command so the change runs\n  // the full mutation pipeline \u2014 query-index refresh, audit log and undo \u2014\n  // instead of a raw em.flush() that would leave the indexed `entity_indexes`\n  // doc stale. Authorization (author-only, v1) was already enforced above; the\n  // command only owns persistence and side effects.\n  const commandBus = container.resolve('commandBus') as CommandBus\n  await commandBus.execute<InteractionUpdateInput, { interactionId: string }>(\n    'customers.interactions.update',\n    {\n      input: { id, visibility: body.visibility },\n      ctx: {\n        container,\n        auth: auth as never,\n        organizationScope: null,\n        selectedOrganizationId: organizationId,\n        organizationIds: organizationId ? [organizationId] : null,\n      },\n    },\n  )\n\n  if (guardResult?.ok && guardResult.shouldRunAfterSuccess) {\n    await runCrudMutationGuardAfterSuccess(container, {\n      tenantId: auth.tenantId,\n      organizationId,\n      userId,\n      resourceKind: 'customers.interaction',\n      resourceId: id,\n      operation: 'custom',\n      requestMethod: req.method,\n      requestHeaders: req.headers,\n      metadata: guardResult.metadata ?? null,\n    })\n  }\n\n  // Emit audit event best-effort \u2014 failure must NOT roll back the DB flush.\n  try {\n    await emitCustomersEvent('customers.email.visibility_changed', {\n      interactionId: interaction.id,\n      previousVisibility,\n      nextVisibility: body.visibility,\n      authorUserId: interaction.authorUserId ?? null,\n      actorUserId: auth.sub,\n      // v1: strict owner-only \u2014 only the author reaches this point, so a\n      // visibility change is never an admin bypass.\n      adminBypass: false,\n      tenantId: auth.tenantId,\n      organizationId,\n    })\n  } catch {\n    /* swallow \u2014 audit emission must not block the response */\n  }\n\n  return NextResponse.json({ ok: true, changed: true })\n}\n\nexport const openApi = {\n  tags: ['Customers', 'Email'],\n  methods: {\n    PATCH: {\n      summary: 'Flip an email interaction visibility (private \u2194 shared)',\n      tags: ['Customers', 'Email'],\n      responses: [\n        { status: 200, description: 'Updated' },\n        { status: 400, description: 'Invalid id' },\n        { status: 401, description: 'Unauthorized' },\n        { status: 404, description: 'Email not found or not visible to caller' },\n        { status: 422, description: 'Invalid body' },\n      ],\n    },\n  },\n}\n\nexport default PATCH\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAElB,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AACvC,SAAS,6BAA6B;AACtC,SAAS,oBAAoB;AAE7B;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,0CAA0C;AACnD,SAAS,2BAA2B;AAEpC,SAAS,0BAA0B;AACnC,SAAS,0BAA0B;AAE5B,MAAM,WAAW;AAAA,EACtB,MAAM;AAAA,EACN,OAAO;AAAA,IACL,aAAa;AAAA,IACb,iBAAiB,CAAC,yBAAyB;AAAA,EAC7C;AACF;AAEA,MAAM,aAAa,EAAE,OAAO,EAAE,YAAY,EAAE,KAAK,CAAC,WAAW,QAAQ,CAAC,EAAE,CAAC,EAAE,OAAO;AAIlF,eAAsB,MAAM,KAAc,SAA0C;AAClF,QAAM,EAAE,GAAG,IAAI,MAAM,QAAQ;AAC7B,MAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,SAAS;AAC5C,WAAO,aAAa,KAAK,EAAE,OAAO,yBAAyB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC/E;AAEA,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,OAAO,CAAC,MAAM,UAAU;AACjC,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAEA,MAAI;AACJ,MAAI;AACF,WAAO,WAAW,MAAM,MAAM,aAAa,KAAK,IAAI,CAAC;AAAA,EACvD,SAAS,KAAK;AACZ,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,eAAe,QAAQ,IAAI,UAAU,uBAAuB;AAAA,MACrE,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC3D,QAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AACxF,QAAM,iBAAiB,OAAO,cAAe,KAAmC,SAAS;AACzF,QAAM,SAAS,EAAE,UAAU,KAAK,UAAoB,eAAe;AACnE,QAAM,SAAS,mBAAmB,IAAI;AAEtC,QAAM,cAAc,MAAM,0BAA0B,WAAW;AAAA,IAC7D,UAAU,KAAK;AAAA,IACf;AAAA,IACA;AAAA,IACA,cAAc;AAAA,IACd,YAAY;AAAA,IACZ,WAAW;AAAA,IACX,eAAe,IAAI;AAAA,IACnB,gBAAgB,IAAI;AAAA,EACtB,CAAC;AACD,MAAI,eAAe,CAAC,YAAY,IAAI;AAClC,WAAO,aAAa,KAAK,YAAY,MAAM,EAAE,QAAQ,YAAY,OAAO,CAAC;AAAA,EAC3E;AAEA,QAAM,cAAe,MAAM;AAAA,IACzB;AAAA,IACA;AAAA,IACA;AAAA,MACE;AAAA,MACA,UAAU,KAAK;AAAA,MACf;AAAA,MACA,WAAW;AAAA,MACX,iBAAiB;AAAA,IACnB;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAEA,MAAI,CAAC,aAAa;AAChB,WAAO,aAAa,KAAK,EAAE,OAAO,kBAAkB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACxE;AAMA,QAAM,WAAW,CAAC,CAAC,YAAY,gBAAgB,YAAY,iBAAiB,KAAK;AACjF,MAAI,CAAC,UAAU;AACb,WAAO,aAAa,KAAK,EAAE,OAAO,kBAAkB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACxE;AAGA,MAAI,YAAY,eAAe,KAAK,YAAY;AAC9C,WAAO,aAAa,KAAK,EAAE,IAAI,MAAM,SAAS,MAAM,CAAC;AAAA,EACvD;AAEA,QAAM,qBAAsB,YAAY,cAAc;AAOtD,QAAM,aAAa,UAAU,QAAQ,YAAY;AACjD,QAAM,WAAW;AAAA,IACf;AAAA,IACA;AAAA,MACE,OAAO,EAAE,IAAI,YAAY,KAAK,WAAW;AAAA,MACzC,KAAK;AAAA,QACH;AAAA,QACA;AAAA,QACA,mBAAmB;AAAA,QACnB,wBAAwB;AAAA,QACxB,iBAAiB,iBAAiB,CAAC,cAAc,IAAI;AAAA,MACvD;AAAA,IACF;AAAA,EACF;AAEA,MAAI,aAAa,MAAM,YAAY,uBAAuB;AACxD,UAAM,iCAAiC,WAAW;AAAA,MAChD,UAAU,KAAK;AAAA,MACf;AAAA,MACA;AAAA,MACA,cAAc;AAAA,MACd,YAAY;AAAA,MACZ,WAAW;AAAA,MACX,eAAe,IAAI;AAAA,MACnB,gBAAgB,IAAI;AAAA,MACpB,UAAU,YAAY,YAAY;AAAA,IACpC,CAAC;AAAA,EACH;AAGA,MAAI;AACF,UAAM,mBAAmB,sCAAsC;AAAA,MAC7D,eAAe,YAAY;AAAA,MAC3B;AAAA,MACA,gBAAgB,KAAK;AAAA,MACrB,cAAc,YAAY,gBAAgB;AAAA,MAC1C,aAAa,KAAK;AAAA;AAAA;AAAA,MAGlB,aAAa;AAAA,MACb,UAAU,KAAK;AAAA,MACf;AAAA,IACF,CAAC;AAAA,EACH,QAAQ;AAAA,EAER;AAEA,SAAO,aAAa,KAAK,EAAE,IAAI,MAAM,SAAS,KAAK,CAAC;AACtD;AAEO,MAAM,UAAU;AAAA,EACrB,MAAM,CAAC,aAAa,OAAO;AAAA,EAC3B,SAAS;AAAA,IACP,OAAO;AAAA,MACL,SAAS;AAAA,MACT,MAAM,CAAC,aAAa,OAAO;AAAA,MAC3B,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,UAAU;AAAA,QACtC,EAAE,QAAQ,KAAK,aAAa,aAAa;AAAA,QACzC,EAAE,QAAQ,KAAK,aAAa,eAAe;AAAA,QAC3C,EAAE,QAAQ,KAAK,aAAa,2CAA2C;AAAA,QACvE,EAAE,QAAQ,KAAK,aAAa,eAAe;AAAA,MAC7C;AAAA,IACF;AAAA,EACF;AACF;AAEA,IAAO,gBAAQ;",
+  "names": []
+}

package/dist/modules/customers/api/interactions/counts/route.js

@@ -6,6 +6,7 @@ import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
 import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
 import { resolveOrganizationScopeForRequest } from "@open-mercato/core/modules/directory/utils/organizationScope";
 import { resolveTranslations } from "@open-mercato/shared/lib/i18n/server";
+import { applyEmailVisibilityFilter } from "../../../lib/visibilityFilter.js";
 const querySchema = z.object({
   entityId: z.string().uuid(),
   status: z.enum(["done", "planned"]).optional()
@@ -66,6 +67,11 @@ async function GET(req) {
     if (query.status) {
       baseQuery = baseQuery.where("status", "=", query.status);
     }
+    const viewerUserId = auth.isApiKey ? null : auth.sub ?? null;
+    baseQuery = applyEmailVisibilityFilter(baseQuery, {
+      currentUserId: viewerUserId,
+      userFeatures: void 0
+    });
     const rows = await baseQuery.select(["interaction_type", sql`count(*)`.as("count")]).groupBy("interaction_type").execute();
     const counts = { call: 0, email: 0, meeting: 0, note: 0, task: 0 };
     let total = 0;

package/dist/modules/customers/api/interactions/counts/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../src/modules/customers/api/interactions/counts/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { sql } from 'kysely'\nimport { CrudHttpError, isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\n\nconst querySchema = z.object({\n  entityId: z.string().uuid(),\n  status: z.enum(['done', 'planned']).optional(),\n})\n\nconst responseSchema = z.object({\n  ok: z.literal(true),\n  result: z.object({\n    call: z.number(),\n    email: z.number(),\n    meeting: z.number(),\n    note: z.number(),\n    task: z.number(),\n    total: z.number(),\n  }),\n})\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['customers.interactions.view'] },\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Customers',\n  methods: {\n    GET: {\n      summary: 'Get interaction counts by type',\n      description: 'Returns per-type interaction counts scoped to an entity.',\n      query: querySchema,\n      responses: [\n        {\n          status: 200,\n          description: 'Counts by interaction type',\n          schema: responseSchema,\n        },\n      ],\n    },\n  },\n}\n\nexport async function GET(req: Request) {\n  try {\n    const queryUrl = new URL(req.url)\n    const query = querySchema.parse(Object.fromEntries(queryUrl.searchParams))\n    const container = await createRequestContainer()\n    const auth = await getAuthFromRequest(req)\n    const { translate } = await resolveTranslations()\n\n    if (!auth || !auth.tenantId) {\n      throw new CrudHttpError(401, {\n        error: translate('customers.errors.unauthorized', 'Unauthorized'),\n      })\n    }\n\n    const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n    const organizationIds = Array.isArray(scope?.filterIds) && scope.filterIds.length > 0\n      ? scope.filterIds\n      : auth.orgId\n        ? [auth.orgId]\n        : []\n    const em = (container.resolve('em') as EntityManager).fork()\n    const kysely = em.getKysely<any>()\n\n    let baseQuery = (kysely as any)\n      .selectFrom('customer_interactions')\n      .where('entity_id', '=', query.entityId)\n      .where('tenant_id', '=', auth.tenantId)\n      .where('deleted_at', 'is', null)\n\n    if (organizationIds.length === 1) {\n      baseQuery = baseQuery.where('organization_id', '=', organizationIds[0])\n    } else if (organizationIds.length > 1) {\n      baseQuery = baseQuery.where('organization_id', 'in', organizationIds)\n    }\n\n    if (query.status) {\n      baseQuery = baseQuery.where('status', '=', query.status)\n    }\n\n    // Raw SELECT: reads only unencrypted columns (id, interaction_type); title/notes are excluded to avoid ciphertext leakage.\n    const rows = await baseQuery\n      .select(['interaction_type', sql<string>`count(*)`.as('count')])\n      .groupBy('interaction_type')\n      .execute() as Array<{ interaction_type: string; count: string | number }>\n\n    const counts: Record<string, number> = { call: 0, email: 0, meeting: 0, note: 0, task: 0 }\n    let total = 0\n    for (const row of rows) {\n      const count = typeof row.count === 'string' ? parseInt(row.count, 10) : row.count\n      const type = row.interaction_type\n      if (type in counts) {\n        counts[type] = count\n      }\n      total += count\n    }\n\n    return NextResponse.json({ ok: true, result: { ...counts, total } })\n  } catch (err) {\n    if (isCrudHttpError(err)) {\n      return NextResponse.json(err.body, { status: err.status })\n    }\n    console.error('[customers/interactions/counts] GET failed', err)\n    return NextResponse.json({ error: 'Internal server error' }, { status: 500 })\n  }\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAElB,SAAS,WAAW;AACpB,SAAS,eAAe,uBAAuB;AAC/C,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AACnD,SAAS,2BAA2B;AAGpC,MAAM,cAAc,EAAE,OAAO;AAAA,EAC3B,UAAU,EAAE,OAAO,EAAE,KAAK;AAAA,EAC1B,QAAQ,EAAE,KAAK,CAAC,QAAQ,SAAS,CAAC,EAAE,SAAS;AAC/C,CAAC;AAED,MAAM,iBAAiB,EAAE,OAAO;AAAA,EAC9B,IAAI,EAAE,QAAQ,IAAI;AAAA,EAClB,QAAQ,EAAE,OAAO;AAAA,IACf,MAAM,EAAE,OAAO;AAAA,IACf,OAAO,EAAE,OAAO;AAAA,IAChB,SAAS,EAAE,OAAO;AAAA,IAClB,MAAM,EAAE,OAAO;AAAA,IACf,MAAM,EAAE,OAAO;AAAA,IACf,OAAO,EAAE,OAAO;AAAA,EAClB,CAAC;AACH,CAAC;AAEM,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,6BAA6B,EAAE;AAC7E;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aAAa;AAAA,MACb,OAAO;AAAA,MACP,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;AAEA,eAAsB,IAAI,KAAc;AACtC,MAAI;AACF,UAAM,WAAW,IAAI,IAAI,IAAI,GAAG;AAChC,UAAM,QAAQ,YAAY,MAAM,OAAO,YAAY,SAAS,YAAY,CAAC;AACzE,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAEhD,QAAI,CAAC,QAAQ,CAAC,KAAK,UAAU;AAC3B,YAAM,IAAI,cAAc,KAAK;AAAA,QAC3B,OAAO,UAAU,iCAAiC,cAAc;AAAA,MAClE,CAAC;AAAA,IACH;AAEA,UAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AACxF,UAAM,kBAAkB,MAAM,QAAQ,OAAO,SAAS,KAAK,MAAM,UAAU,SAAS,IAChF,MAAM,YACN,KAAK,QACH,CAAC,KAAK,KAAK,IACX,CAAC;AACP,UAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC3D,UAAM,SAAS,GAAG,UAAe;AAEjC,QAAI,YAAa,OACd,WAAW,uBAAuB,EAClC,MAAM,aAAa,KAAK,MAAM,QAAQ,EACtC,MAAM,aAAa,KAAK,KAAK,QAAQ,EACrC,MAAM,cAAc,MAAM,IAAI;AAEjC,QAAI,gBAAgB,WAAW,GAAG;AAChC,kBAAY,UAAU,MAAM,mBAAmB,KAAK,gBAAgB,CAAC,CAAC;AAAA,IACxE,WAAW,gBAAgB,SAAS,GAAG;AACrC,kBAAY,UAAU,MAAM,mBAAmB,MAAM,eAAe;AAAA,IACtE;AAEA,QAAI,MAAM,QAAQ;AAChB,kBAAY,UAAU,MAAM,UAAU,KAAK,MAAM,MAAM;AAAA,IACzD;AAGA,UAAM,OAAO,MAAM,UAChB,OAAO,CAAC,oBAAoB,cAAsB,GAAG,OAAO,CAAC,CAAC,EAC9D,QAAQ,kBAAkB,EAC1B,QAAQ;AAEX,UAAM,SAAiC,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,GAAG,MAAM,GAAG,MAAM,EAAE;AACzF,QAAI,QAAQ;AACZ,eAAW,OAAO,MAAM;AACtB,YAAM,QAAQ,OAAO,IAAI,UAAU,WAAW,SAAS,IAAI,OAAO,EAAE,IAAI,IAAI;AAC5E,YAAM,OAAO,IAAI;AACjB,UAAI,QAAQ,QAAQ;AAClB,eAAO,IAAI,IAAI;AAAA,MACjB;AACA,eAAS;AAAA,IACX;AAEA,WAAO,aAAa,KAAK,EAAE,IAAI,MAAM,QAAQ,EAAE,GAAG,QAAQ,MAAM,EAAE,CAAC;AAAA,EACrE,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,GAAG;AACxB,aAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,IAC3D;AACA,YAAQ,MAAM,8CAA8C,GAAG;AAC/D,WAAO,aAAa,KAAK,EAAE,OAAO,wBAAwB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC9E;AACF;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { sql } from 'kysely'\nimport { CrudHttpError, isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { applyEmailVisibilityFilter } from '../../../lib/visibilityFilter'\n\nconst querySchema = z.object({\n  entityId: z.string().uuid(),\n  status: z.enum(['done', 'planned']).optional(),\n})\n\nconst responseSchema = z.object({\n  ok: z.literal(true),\n  result: z.object({\n    call: z.number(),\n    email: z.number(),\n    meeting: z.number(),\n    note: z.number(),\n    task: z.number(),\n    total: z.number(),\n  }),\n})\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['customers.interactions.view'] },\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Customers',\n  methods: {\n    GET: {\n      summary: 'Get interaction counts by type',\n      description: 'Returns per-type interaction counts scoped to an entity.',\n      query: querySchema,\n      responses: [\n        {\n          status: 200,\n          description: 'Counts by interaction type',\n          schema: responseSchema,\n        },\n      ],\n    },\n  },\n}\n\nexport async function GET(req: Request) {\n  try {\n    const queryUrl = new URL(req.url)\n    const query = querySchema.parse(Object.fromEntries(queryUrl.searchParams))\n    const container = await createRequestContainer()\n    const auth = await getAuthFromRequest(req)\n    const { translate } = await resolveTranslations()\n\n    if (!auth || !auth.tenantId) {\n      throw new CrudHttpError(401, {\n        error: translate('customers.errors.unauthorized', 'Unauthorized'),\n      })\n    }\n\n    const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n    const organizationIds = Array.isArray(scope?.filterIds) && scope.filterIds.length > 0\n      ? scope.filterIds\n      : auth.orgId\n        ? [auth.orgId]\n        : []\n    const em = (container.resolve('em') as EntityManager).fork()\n    const kysely = em.getKysely<any>()\n\n    let baseQuery = (kysely as any)\n      .selectFrom('customer_interactions')\n      .where('entity_id', '=', query.entityId)\n      .where('tenant_id', '=', auth.tenantId)\n      .where('deleted_at', 'is', null)\n\n    if (organizationIds.length === 1) {\n      baseQuery = baseQuery.where('organization_id', '=', organizationIds[0])\n    } else if (organizationIds.length > 1) {\n      baseQuery = baseQuery.where('organization_id', 'in', organizationIds)\n    }\n\n    if (query.status) {\n      baseQuery = baseQuery.where('status', '=', query.status)\n    }\n\n    // Per-user email privacy: exclude other users' private emails from the\n    // per-type counts so the `email` total matches the visibility-filtered list.\n    // v1 strict owner-only \u2014 no admin bypass (the filter ignores caller features).\n    const viewerUserId = auth.isApiKey ? null : auth.sub ?? null\n    baseQuery = applyEmailVisibilityFilter(baseQuery, {\n      currentUserId: viewerUserId,\n      userFeatures: undefined,\n    })\n\n    // Raw SELECT: reads only unencrypted columns (id, interaction_type); title/notes are excluded to avoid ciphertext leakage.\n    const rows = await baseQuery\n      .select(['interaction_type', sql<string>`count(*)`.as('count')])\n      .groupBy('interaction_type')\n      .execute() as Array<{ interaction_type: string; count: string | number }>\n\n    const counts: Record<string, number> = { call: 0, email: 0, meeting: 0, note: 0, task: 0 }\n    let total = 0\n    for (const row of rows) {\n      const count = typeof row.count === 'string' ? parseInt(row.count, 10) : row.count\n      const type = row.interaction_type\n      if (type in counts) {\n        counts[type] = count\n      }\n      total += count\n    }\n\n    return NextResponse.json({ ok: true, result: { ...counts, total } })\n  } catch (err) {\n    if (isCrudHttpError(err)) {\n      return NextResponse.json(err.body, { status: err.status })\n    }\n    console.error('[customers/interactions/counts] GET failed', err)\n    return NextResponse.json({ error: 'Internal server error' }, { status: 500 })\n  }\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAElB,SAAS,WAAW;AACpB,SAAS,eAAe,uBAAuB;AAC/C,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AACnD,SAAS,2BAA2B;AAEpC,SAAS,kCAAkC;AAE3C,MAAM,cAAc,EAAE,OAAO;AAAA,EAC3B,UAAU,EAAE,OAAO,EAAE,KAAK;AAAA,EAC1B,QAAQ,EAAE,KAAK,CAAC,QAAQ,SAAS,CAAC,EAAE,SAAS;AAC/C,CAAC;AAED,MAAM,iBAAiB,EAAE,OAAO;AAAA,EAC9B,IAAI,EAAE,QAAQ,IAAI;AAAA,EAClB,QAAQ,EAAE,OAAO;AAAA,IACf,MAAM,EAAE,OAAO;AAAA,IACf,OAAO,EAAE,OAAO;AAAA,IAChB,SAAS,EAAE,OAAO;AAAA,IAClB,MAAM,EAAE,OAAO;AAAA,IACf,MAAM,EAAE,OAAO;AAAA,IACf,OAAO,EAAE,OAAO;AAAA,EAClB,CAAC;AACH,CAAC;AAEM,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,6BAA6B,EAAE;AAC7E;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aAAa;AAAA,MACb,OAAO;AAAA,MACP,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;AAEA,eAAsB,IAAI,KAAc;AACtC,MAAI;AACF,UAAM,WAAW,IAAI,IAAI,IAAI,GAAG;AAChC,UAAM,QAAQ,YAAY,MAAM,OAAO,YAAY,SAAS,YAAY,CAAC;AACzE,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAEhD,QAAI,CAAC,QAAQ,CAAC,KAAK,UAAU;AAC3B,YAAM,IAAI,cAAc,KAAK;AAAA,QAC3B,OAAO,UAAU,iCAAiC,cAAc;AAAA,MAClE,CAAC;AAAA,IACH;AAEA,UAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AACxF,UAAM,kBAAkB,MAAM,QAAQ,OAAO,SAAS,KAAK,MAAM,UAAU,SAAS,IAChF,MAAM,YACN,KAAK,QACH,CAAC,KAAK,KAAK,IACX,CAAC;AACP,UAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC3D,UAAM,SAAS,GAAG,UAAe;AAEjC,QAAI,YAAa,OACd,WAAW,uBAAuB,EAClC,MAAM,aAAa,KAAK,MAAM,QAAQ,EACtC,MAAM,aAAa,KAAK,KAAK,QAAQ,EACrC,MAAM,cAAc,MAAM,IAAI;AAEjC,QAAI,gBAAgB,WAAW,GAAG;AAChC,kBAAY,UAAU,MAAM,mBAAmB,KAAK,gBAAgB,CAAC,CAAC;AAAA,IACxE,WAAW,gBAAgB,SAAS,GAAG;AACrC,kBAAY,UAAU,MAAM,mBAAmB,MAAM,eAAe;AAAA,IACtE;AAEA,QAAI,MAAM,QAAQ;AAChB,kBAAY,UAAU,MAAM,UAAU,KAAK,MAAM,MAAM;AAAA,IACzD;AAKA,UAAM,eAAe,KAAK,WAAW,OAAO,KAAK,OAAO;AACxD,gBAAY,2BAA2B,WAAW;AAAA,MAChD,eAAe;AAAA,MACf,cAAc;AAAA,IAChB,CAAC;AAGD,UAAM,OAAO,MAAM,UAChB,OAAO,CAAC,oBAAoB,cAAsB,GAAG,OAAO,CAAC,CAAC,EAC9D,QAAQ,kBAAkB,EAC1B,QAAQ;AAEX,UAAM,SAAiC,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,GAAG,MAAM,GAAG,MAAM,EAAE;AACzF,QAAI,QAAQ;AACZ,eAAW,OAAO,MAAM;AACtB,YAAM,QAAQ,OAAO,IAAI,UAAU,WAAW,SAAS,IAAI,OAAO,EAAE,IAAI,IAAI;AAC5E,YAAM,OAAO,IAAI;AACjB,UAAI,QAAQ,QAAQ;AAClB,eAAO,IAAI,IAAI;AAAA,MACjB;AACA,eAAS;AAAA,IACX;AAEA,WAAO,aAAa,KAAK,EAAE,IAAI,MAAM,QAAQ,EAAE,GAAG,QAAQ,MAAM,EAAE,CAAC;AAAA,EACrE,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,GAAG;AACxB,aAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,IAC3D;AACA,YAAQ,MAAM,8CAA8C,GAAG;AAC/D,WAAO,aAAa,KAAK,EAAE,OAAO,wBAAwB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC9E;AACF;",
   "names": []
 }

package/dist/modules/customers/api/interactions/route.js

@@ -7,6 +7,7 @@ import { loadCustomFieldValues } from "@open-mercato/shared/lib/crud/custom-fiel
 import { normalizeCustomFieldResponse } from "@open-mercato/shared/lib/custom-fields/normalize";
 import { applyResponseEnrichers } from "@open-mercato/shared/lib/crud/enricher-runner";
 import { findWithDecryption } from "@open-mercato/shared/lib/encryption/find";
+import { escapeLikePattern } from "@open-mercato/shared/lib/db/escapeLikePattern";
 import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
 import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
 import { resolveOrganizationScopeForRequest } from "@open-mercato/core/modules/directory/utils/organizationScope";
@@ -20,6 +21,7 @@ import {
   defaultOkResponseSchema
 } from "../openapi.js";
 import { CUSTOMER_INTERACTION_ENTITY_ID } from "../../lib/interactionCompatibility.js";
+import { applyEmailVisibilityFilter } from "../../lib/visibilityFilter.js";
 import { resolveCanonicalActivityTargetId } from "../../lib/legacyActivityBridge.js";
 const rawBodySchema = z.object({}).passthrough();
 const interactionSortFieldSchema = z.enum([
@@ -42,8 +44,8 @@ const listSchema = z.object({
   type: z.string().optional(),
   excludeInteractionType: z.string().optional(),
   search: z.string().trim().min(1).optional(),
-  from: z.string().optional(),
-  to: z.string().optional(),
+  from: z.coerce.date().optional(),
+  to: z.coerce.date().optional(),
   pinned: z.enum(["true", "false"]).optional(),
   sortField: interactionSortFieldSchema.optional(),
   sortDir: z.enum(["asc", "desc"]).optional()
@@ -207,15 +209,16 @@ async function resolveUserFeatures(container, userId, tenantId, organizationId)
     return void 0;
   }
 }
-async function buildEnricherContext(container, auth, organizationId) {
+async function buildEnricherContext(container, auth, organizationId, precomputedUserFeatures) {
   const userId = typeof auth.sub === "string" && auth.sub.trim().length > 0 ? auth.sub : typeof auth.userId === "string" && auth.userId.trim().length > 0 ? auth.userId : typeof auth.keyId === "string" && auth.keyId.trim().length > 0 ? auth.keyId : "system";
+  const userFeatures = precomputedUserFeatures && precomputedUserFeatures.userId === userId ? precomputedUserFeatures.features : await resolveUserFeatures(container, userId, auth.tenantId ?? null, organizationId);
   return {
     organizationId: organizationId ?? "",
     tenantId: auth.tenantId ?? "",
     userId,
     em: container.resolve("em"),
     container,
-    userFeatures: await resolveUserFeatures(container, userId, auth.tenantId ?? null, organizationId)
+    userFeatures
   };
 }
 async function GET(req) {
@@ -298,14 +301,14 @@ async function GET(req) {
     }
     if (query.excludeInteractionType) rowsQuery = rowsQuery.where("interaction_type", "!=", query.excludeInteractionType);
     if (query.search) {
-      const searchTerm = `%${query.search}%`;
+      const searchTerm = `%${escapeLikePattern(query.search)}%`;
       rowsQuery = rowsQuery.where(sql`coalesce(title, '') ilike ${searchTerm} or coalesce(body, '') ilike ${searchTerm}`);
     }
     if (query.from) {
-      rowsQuery = rowsQuery.where(sql`coalesce(occurred_at, scheduled_at, created_at) >= ${new Date(query.from)}`);
+      rowsQuery = rowsQuery.where(sql`coalesce(occurred_at, scheduled_at, created_at) >= ${query.from}`);
     }
     if (query.to) {
-      rowsQuery = rowsQuery.where(sql`coalesce(occurred_at, scheduled_at, created_at) <= ${new Date(query.to)}`);
+      rowsQuery = rowsQuery.where(sql`coalesce(occurred_at, scheduled_at, created_at) <= ${query.to}`);
     }
     if (cursor) {
       const op = sortDir === "asc" ? ">" : "<";
@@ -319,6 +322,12 @@ async function GET(req) {
         ])
       ]));
     }
+    const viewerUserId = auth.isApiKey ? null : auth.sub ?? null;
+    const callerUserFeatures = viewerUserId ? await resolveUserFeatures(container, viewerUserId, auth.tenantId ?? null, selectedOrganizationId) : void 0;
+    rowsQuery = applyEmailVisibilityFilter(rowsQuery, {
+      currentUserId: viewerUserId,
+      userFeatures: callerUserFeatures
+    });
     rowsQuery = rowsQuery.orderBy(sql`${sql.raw(sortSql)} ${sql.raw(sortDir)}`).orderBy("id", sortDir);
     const rows = await rowsQuery.execute();
     const pageRows = rows.slice(0, query.limit);
@@ -334,7 +343,7 @@ async function GET(req) {
       )
     );
     const interactionIds = pageRows.map((row) => row.id);
-    const [users, deals, customFieldValues] = await Promise.all([
+    const [users, deals, customFieldValues, interactionRecords] = await Promise.all([
       authorIds.length > 0 ? findWithDecryption(em, User, { id: { $in: authorIds } }, void 0, { tenantId: auth.tenantId, organizationId: selectedOrganizationId }) : Promise.resolve([]),
       dealIds.length > 0 ? findWithDecryption(em, CustomerDeal, { id: { $in: dealIds } }, void 0, { tenantId: auth.tenantId, organizationId: selectedOrganizationId }) : Promise.resolve([]),
       interactionIds.length > 0 ? loadCustomFieldValues({
@@ -344,7 +353,8 @@ async function GET(req) {
         tenantIdByRecord: Object.fromEntries(pageRows.map((row) => [row.id, row.tenant_id])),
         organizationIdByRecord: Object.fromEntries(pageRows.map((row) => [row.id, row.organization_id])),
         tenantFallbacks: [auth.tenantId].filter((value) => !!value)
-      }) : Promise.resolve({})
+      }) : Promise.resolve({}),
+      interactionIds.length > 0 ? findWithDecryption(em, CustomerInteraction, { id: { $in: interactionIds } }, void 0, { tenantId: auth.tenantId, organizationId: selectedOrganizationId }) : Promise.resolve([])
     ]);
     const userMap = new Map(
       users.map((user) => [
@@ -358,13 +368,18 @@ async function GET(req) {
     const dealMap = new Map(
       deals.map((deal) => [deal.id, deal.title])
     );
+    const interactionContentMap = new Map(
+      interactionRecords.map(
+        (record) => [record.id, { title: record.title ?? null, body: record.body ?? null }]
+      )
+    );
     const baseItems = pageRows.map((row) => ({
       id: row.id,
       entityId: row.entity_id,
       dealId: row.deal_id ?? null,
       interactionType: row.interaction_type,
-      title: row.title ?? null,
-      body: row.body ?? null,
+      title: (interactionContentMap.has(row.id) ? interactionContentMap.get(row.id).title : row.title) ?? null,
+      body: (interactionContentMap.has(row.id) ? interactionContentMap.get(row.id).body : row.body) ?? null,
       status: row.status,
       scheduledAt: toIsoString(row.scheduled_at),
       occurredAt: toIsoString(row.occurred_at),
@@ -395,7 +410,12 @@ async function GET(req) {
       dealTitle: row.deal_id ? dealMap.get(row.deal_id) ?? null : null,
       customValues: normalizeCustomFieldResponse(customFieldValues[row.id]) ?? null
     }));
-    const enricherContext = await buildEnricherContext(container, auth, selectedOrganizationId);
+    const enricherContext = await buildEnricherContext(
+      container,
+      auth,
+      selectedOrganizationId,
+      viewerUserId ? { userId: viewerUserId, features: callerUserFeatures } : void 0
+    );
     const enriched = await applyResponseEnrichers(baseItems, "customers.interaction", enricherContext);
     let nextCursor;
     if (hasMore && pageRows.length > 0) {
@@ -513,6 +533,7 @@ export {
   GET,
   POST,
   PUT,
+  listSchema,
   metadata,
   openApi
 };