@open-mercato/core 0.6.4-develop.4382.1.6b4f656b77 → 0.6.4

package/dist/modules/business_rules/api/rules/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../src/modules/business_rules/api/rules/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { BusinessRule } from '../../data/entities'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { escapeLikePattern } from '@open-mercato/shared/lib/db/escapeLikePattern'\nimport {\n  createBusinessRuleSchema,\n  updateBusinessRuleSchema,\n  createLocalizedBusinessRuleSchema,\n  createLocalizedUpdateBusinessRuleSchema,\n  businessRuleFilterSchema,\n  ruleTypeSchema,\n} from '../../data/validators'\nimport {\n  invalidateBusinessRuleDiscoveryCache,\n  resolveBusinessRuleDiscoveryCache,\n} from '../../lib/rule-engine'\n\nconst querySchema = z.looseObject({\n  id: z.uuid().optional(),\n  page: z.coerce.number().min(1).default(1),\n  pageSize: z.coerce.number().min(1).max(100).default(50),\n  search: z.string().optional(),\n  ruleId: z.string().optional(),\n  ruleType: ruleTypeSchema.optional(),\n  entityType: z.string().optional(),\n  eventType: z.string().optional(),\n  enabled: z.coerce.boolean().optional(),\n  ruleCategory: z.string().optional(),\n  sortField: z.string().optional(),\n  sortDir: z.enum(['asc', 'desc']).optional().default('desc'),\n})\n\nconst ruleListItemSchema = z.object({\n  id: z.string().uuid(),\n  ruleId: z.string(),\n  ruleName: z.string(),\n  description: z.string().nullable(),\n  ruleType: ruleTypeSchema,\n  ruleCategory: z.string().nullable(),\n  entityType: z.string(),\n  eventType: z.string().nullable(),\n  enabled: z.boolean(),\n  priority: z.number(),\n  version: z.number(),\n  effectiveFrom: z.string().nullable(),\n  effectiveTo: z.string().nullable(),\n  tenantId: z.string().uuid(),\n  organizationId: z.string().uuid(),\n  createdAt: z.string(),\n  updatedAt: z.string(),\n})\n\nconst ruleListResponseSchema = z.object({\n  items: z.array(ruleListItemSchema),\n  total: z.number().int().nonnegative(),\n  totalPages: z.number().int().positive(),\n})\n\nconst ruleCreateResponseSchema = z.object({\n  id: z.string().uuid(),\n})\n\nconst okResponseSchema = z.object({\n  ok: z.literal(true),\n})\n\nconst errorResponseSchema = z.object({\n  error: z.string(),\n})\n\nconst routeMetadata = {\n  GET: { requireAuth: true, requireFeatures: ['business_rules.view'] },\n  POST: { requireAuth: true, requireFeatures: ['business_rules.manage'] },\n  PUT: { requireAuth: true, requireFeatures: ['business_rules.manage'] },\n  DELETE: { requireAuth: true, requireFeatures: ['business_rules.manage'] },\n}\n\nexport const metadata = routeMetadata\n\nexport async function GET(req: Request) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n\n  const url = new URL(req.url)\n  const parsed = querySchema.safeParse({\n    id: url.searchParams.get('id') || undefined,\n    page: url.searchParams.get('page') || undefined,\n    pageSize: url.searchParams.get('pageSize') || undefined,\n    search: url.searchParams.get('search') || undefined,\n    ruleId: url.searchParams.get('ruleId') || undefined,\n    ruleType: url.searchParams.get('ruleType') || undefined,\n    entityType: url.searchParams.get('entityType') || undefined,\n    eventType: url.searchParams.get('eventType') || undefined,\n    enabled: url.searchParams.get('enabled') || undefined,\n    ruleCategory: url.searchParams.get('ruleCategory') || undefined,\n    sortField: url.searchParams.get('sortField') || undefined,\n    sortDir: url.searchParams.get('sortDir') || undefined,\n  })\n\n  if (!parsed.success) {\n    return NextResponse.json({ error: 'Invalid query parameters' }, { status: 400 })\n  }\n\n  const container = await createRequestContainer()\n  const em = container.resolve('em') as EntityManager\n\n  const { id, page, pageSize, search, ruleId, ruleType, entityType, eventType, enabled, ruleCategory, sortField, sortDir } = parsed.data\n\n  const filters: Record<string, any> = {\n    tenantId: auth.tenantId,\n    organizationId: auth.orgId,\n    deletedAt: null,\n  }\n\n  if (id) filters.id = id\n  if (ruleId) filters.ruleId = { $ilike: `%${escapeLikePattern(ruleId)}%` }\n  if (search) filters.ruleName = { $ilike: `%${escapeLikePattern(search)}%` }\n  if (ruleType) filters.ruleType = ruleType\n  if (entityType) filters.entityType = entityType\n  if (eventType) filters.eventType = eventType\n  if (enabled !== undefined) filters.enabled = enabled\n  if (ruleCategory) filters.ruleCategory = ruleCategory\n\n  const sortFieldMap: Record<string, string> = {\n    ruleId: 'ruleId',\n    ruleName: 'ruleName',\n    ruleType: 'ruleType',\n    entityType: 'entityType',\n    priority: 'priority',\n    createdAt: 'createdAt',\n    updatedAt: 'updatedAt',\n  }\n\n  const orderByField = sortField && sortFieldMap[sortField] ? sortFieldMap[sortField] : 'priority'\n  const orderBy = { [orderByField]: sortDir, ruleId: 'asc' as const }\n\n  const [rows, count] = await em.findAndCount(\n    BusinessRule,\n    filters,\n    {\n      limit: pageSize,\n      offset: (page - 1) * pageSize,\n      orderBy,\n    }\n  )\n\n  const items = rows.map((rule) => ({\n    id: rule.id,\n    ruleId: rule.ruleId,\n    ruleName: rule.ruleName,\n    description: rule.description ?? null,\n    ruleType: rule.ruleType,\n    ruleCategory: rule.ruleCategory ?? null,\n    entityType: rule.entityType,\n    eventType: rule.eventType ?? null,\n    enabled: rule.enabled,\n    priority: rule.priority,\n    version: rule.version,\n    effectiveFrom: rule.effectiveFrom ? rule.effectiveFrom.toISOString() : null,\n    effectiveTo: rule.effectiveTo ? rule.effectiveTo.toISOString() : null,\n    tenantId: rule.tenantId,\n    organizationId: rule.organizationId,\n    createdAt: rule.createdAt.toISOString(),\n    updatedAt: rule.updatedAt.toISOString(),\n  }))\n\n  const totalPages = Math.max(1, Math.ceil(count / pageSize))\n\n  return NextResponse.json({ items, total: count, totalPages })\n}\n\nexport async function POST(req: Request) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n\n  const container = await createRequestContainer()\n  const em = container.resolve('em') as EntityManager\n  const cache = resolveBusinessRuleDiscoveryCache(container.resolve.bind(container))\n\n  let body: any\n  try {\n    body = await req.json()\n  } catch {\n    return NextResponse.json({ error: 'Invalid JSON body' }, { status: 400 })\n  }\n\n  const payload = {\n    ...body,\n    tenantId: auth.tenantId,\n    organizationId: auth.orgId,\n    createdBy: auth.sub ?? auth.email ?? null,\n  }\n\n  const { t } = await resolveTranslations()\n  const schema = createLocalizedBusinessRuleSchema(t)\n  const parsed = schema.safeParse(payload)\n  if (!parsed.success) {\n    const errors = parsed.error.issues.map(e => `${e.path.join('.')}: ${e.message}`)\n    return NextResponse.json({ error: `Validation failed: ${errors.join(', ')}` }, { status: 400 })\n  }\n\n  const data = {\n    ...parsed.data,\n    conditionExpression: parsed.data.conditionExpression ?? null,\n  }\n\n  const rule = em.create(BusinessRule, data)\n\n  try {\n    await em.persist(rule).flush()\n    await invalidateBusinessRuleDiscoveryCache(cache, rule.tenantId, rule.organizationId)\n  } catch (error) {\n    console.error('[business_rules.rules] Failed to persist new rule:', error)\n    return NextResponse.json(\n      { error: t('business_rules.errors.createFailed') },\n      { status: 500 },\n    )\n  }\n\n  return NextResponse.json({ id: rule.id }, { status: 201 })\n}\n\nexport async function PUT(req: Request) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n\n  const container = await createRequestContainer()\n  const em = container.resolve('em') as EntityManager\n  const cache = resolveBusinessRuleDiscoveryCache(container.resolve.bind(container))\n\n  let body: any\n  try {\n    body = await req.json()\n  } catch {\n    return NextResponse.json({ error: 'Invalid JSON body' }, { status: 400 })\n  }\n\n  if (!body.id) {\n    return NextResponse.json({ error: 'Rule id is required' }, { status: 400 })\n  }\n\n  const payload = {\n    ...body,\n    updatedBy: auth.sub ?? auth.email ?? null,\n  }\n  delete (payload as Record<string, unknown>).tenantId\n  delete (payload as Record<string, unknown>).organizationId\n  delete (payload as Record<string, unknown>).createdBy\n\n  const { t } = await resolveTranslations()\n  const schema = createLocalizedUpdateBusinessRuleSchema(t)\n  const parsed = schema.safeParse(payload)\n  if (!parsed.success) {\n    const errors = parsed.error.issues.map(e => `${e.path.join('.')}: ${e.message}`)\n    return NextResponse.json({ error: `Validation failed: ${errors.join(', ')}` }, { status: 400 })\n  }\n\n  const rule = await em.findOne(BusinessRule, {\n    id: parsed.data.id,\n    tenantId: auth.tenantId,\n    organizationId: auth.orgId,\n    deletedAt: null,\n  })\n\n  if (!rule) {\n    return NextResponse.json({ error: 'Rule not found' }, { status: 404 })\n  }\n\n  em.assign(rule, parsed.data)\n\n  try {\n    await em.persist(rule).flush()\n    await invalidateBusinessRuleDiscoveryCache(cache, rule.tenantId, rule.organizationId)\n  } catch (error) {\n    console.error('[business_rules.rules] Failed to persist rule update:', error)\n    return NextResponse.json(\n      { error: t('business_rules.errors.updateFailed') },\n      { status: 500 },\n    )\n  }\n\n  return NextResponse.json({ ok: true })\n}\n\nexport async function DELETE(req: Request) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n\n  const url = new URL(req.url)\n  const id = url.searchParams.get('id')\n\n  if (!id) {\n    return NextResponse.json({ error: 'Rule id is required' }, { status: 400 })\n  }\n\n  const container = await createRequestContainer()\n  const em = container.resolve('em') as EntityManager\n  const cache = resolveBusinessRuleDiscoveryCache(container.resolve.bind(container))\n\n  const rule = await em.findOne(BusinessRule, {\n    id,\n    tenantId: auth.tenantId,\n    organizationId: auth.orgId,\n    deletedAt: null,\n  })\n\n  if (!rule) {\n    return NextResponse.json({ error: 'Rule not found' }, { status: 404 })\n  }\n\n  rule.deletedAt = new Date()\n  await em.persist(rule).flush()\n  await invalidateBusinessRuleDiscoveryCache(cache, rule.tenantId, rule.organizationId)\n\n  return NextResponse.json({ ok: true })\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Business Rules',\n  summary: 'Business rule management',\n  methods: {\n    GET: {\n      summary: 'List business rules',\n      description: 'Returns business rules for the current tenant and organization with filtering and pagination.',\n      query: querySchema,\n      responses: [\n        { status: 200, description: 'Business rules collection', schema: ruleListResponseSchema },\n      ],\n      errors: [\n        { status: 400, description: 'Invalid query parameters', schema: errorResponseSchema },\n        { status: 401, description: 'Unauthorized', schema: errorResponseSchema },\n      ],\n    },\n    POST: {\n      summary: 'Create business rule',\n      description: 'Creates a new business rule for the current tenant and organization.',\n      requestBody: {\n        contentType: 'application/json',\n        schema: createBusinessRuleSchema,\n      },\n      responses: [\n        {\n          status: 201,\n          description: 'Business rule created',\n          schema: ruleCreateResponseSchema,\n        },\n      ],\n      errors: [\n        { status: 400, description: 'Invalid payload', schema: errorResponseSchema },\n        { status: 401, description: 'Unauthorized', schema: errorResponseSchema },\n      ],\n    },\n    PUT: {\n      summary: 'Update business rule',\n      description: 'Updates an existing business rule.',\n      requestBody: {\n        contentType: 'application/json',\n        schema: updateBusinessRuleSchema,\n      },\n      responses: [\n        {\n          status: 200,\n          description: 'Business rule updated',\n          schema: okResponseSchema,\n        },\n      ],\n      errors: [\n        { status: 400, description: 'Invalid payload', schema: errorResponseSchema },\n        { status: 401, description: 'Unauthorized', schema: errorResponseSchema },\n        { status: 404, description: 'Business rule not found', schema: errorResponseSchema },\n      ],\n    },\n    DELETE: {\n      summary: 'Delete business rule',\n      description: 'Soft deletes a business rule by identifier.',\n      query: z.object({ id: z.string().uuid().describe('Business rule identifier') }),\n      responses: [\n        { status: 200, description: 'Business rule deleted', schema: okResponseSchema },\n      ],\n      errors: [\n        { status: 400, description: 'Invalid identifier', schema: errorResponseSchema },\n        { status: 401, description: 'Unauthorized', schema: errorResponseSchema },\n        { status: 404, description: 'Business rule not found', schema: errorResponseSchema },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAElB,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AACvC,SAAS,2BAA2B;AACpC,SAAS,oBAAoB;AAE7B,SAAS,yBAAyB;AAClC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAEA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAEP,MAAM,cAAc,EAAE,YAAY;AAAA,EAChC,IAAI,EAAE,KAAK,EAAE,SAAS;AAAA,EACtB,MAAM,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,QAAQ,CAAC;AAAA,EACxC,UAAU,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,QAAQ,EAAE;AAAA,EACtD,QAAQ,EAAE,OAAO,EAAE,SAAS;AAAA,EAC5B,QAAQ,EAAE,OAAO,EAAE,SAAS;AAAA,EAC5B,UAAU,eAAe,SAAS;AAAA,EAClC,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,EAChC,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,SAAS,EAAE,OAAO,QAAQ,EAAE,SAAS;AAAA,EACrC,cAAc,EAAE,OAAO,EAAE,SAAS;AAAA,EAClC,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,SAAS,EAAE,KAAK,CAAC,OAAO,MAAM,CAAC,EAAE,SAAS,EAAE,QAAQ,MAAM;AAC5D,CAAC;AAED,MAAM,qBAAqB,EAAE,OAAO;AAAA,EAClC,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,QAAQ,EAAE,OAAO;AAAA,EACjB,UAAU,EAAE,OAAO;AAAA,EACnB,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,EACjC,UAAU;AAAA,EACV,cAAc,EAAE,OAAO,EAAE,SAAS;AAAA,EAClC,YAAY,EAAE,OAAO;AAAA,EACrB,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,SAAS,EAAE,QAAQ;AAAA,EACnB,UAAU,EAAE,OAAO;AAAA,EACnB,SAAS,EAAE,OAAO;AAAA,EAClB,eAAe,EAAE,OAAO,EAAE,SAAS;AAAA,EACnC,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,EACjC,UAAU,EAAE,OAAO,EAAE,KAAK;AAAA,EAC1B,gBAAgB,EAAE,OAAO,EAAE,KAAK;AAAA,EAChC,WAAW,EAAE,OAAO;AAAA,EACpB,WAAW,EAAE,OAAO;AACtB,CAAC;AAED,MAAM,yBAAyB,EAAE,OAAO;AAAA,EACtC,OAAO,EAAE,MAAM,kBAAkB;AAAA,EACjC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY;AAAA,EACpC,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS;AACxC,CAAC;AAED,MAAM,2BAA2B,EAAE,OAAO;AAAA,EACxC,IAAI,EAAE,OAAO,EAAE,KAAK;AACtB,CAAC;AAED,MAAM,mBAAmB,EAAE,OAAO;AAAA,EAChC,IAAI,EAAE,QAAQ,IAAI;AACpB,CAAC;AAED,MAAM,sBAAsB,EAAE,OAAO;AAAA,EACnC,OAAO,EAAE,OAAO;AAClB,CAAC;AAED,MAAM,gBAAgB;AAAA,EACpB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,qBAAqB,EAAE;AAAA,EACnE,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,uBAAuB,EAAE;AAAA,EACtE,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,uBAAuB,EAAE;AAAA,EACrE,QAAQ,EAAE,aAAa,MAAM,iBAAiB,CAAC,uBAAuB,EAAE;AAC1E;AAEO,MAAM,WAAW;AAExB,eAAsB,IAAI,KAAc;AACtC,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM;AACT,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAEA,QAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,QAAM,SAAS,YAAY,UAAU;AAAA,IACnC,IAAI,IAAI,aAAa,IAAI,IAAI,KAAK;AAAA,IAClC,MAAM,IAAI,aAAa,IAAI,MAAM,KAAK;AAAA,IACtC,UAAU,IAAI,aAAa,IAAI,UAAU,KAAK;AAAA,IAC9C,QAAQ,IAAI,aAAa,IAAI,QAAQ,KAAK;AAAA,IAC1C,QAAQ,IAAI,aAAa,IAAI,QAAQ,KAAK;AAAA,IAC1C,UAAU,IAAI,aAAa,IAAI,UAAU,KAAK;AAAA,IAC9C,YAAY,IAAI,aAAa,IAAI,YAAY,KAAK;AAAA,IAClD,WAAW,IAAI,aAAa,IAAI,WAAW,KAAK;AAAA,IAChD,SAAS,IAAI,aAAa,IAAI,SAAS,KAAK;AAAA,IAC5C,cAAc,IAAI,aAAa,IAAI,cAAc,KAAK;AAAA,IACtD,WAAW,IAAI,aAAa,IAAI,WAAW,KAAK;AAAA,IAChD,SAAS,IAAI,aAAa,IAAI,SAAS,KAAK;AAAA,EAC9C,CAAC;AAED,MAAI,CAAC,OAAO,SAAS;AACnB,WAAO,aAAa,KAAK,EAAE,OAAO,2BAA2B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACjF;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,KAAK,UAAU,QAAQ,IAAI;AAEjC,QAAM,EAAE,IAAI,MAAM,UAAU,QAAQ,QAAQ,UAAU,YAAY,WAAW,SAAS,cAAc,WAAW,QAAQ,IAAI,OAAO;AAElI,QAAM,UAA+B;AAAA,IACnC,UAAU,KAAK;AAAA,IACf,gBAAgB,KAAK;AAAA,IACrB,WAAW;AAAA,EACb;AAEA,MAAI,GAAI,SAAQ,KAAK;AACrB,MAAI,OAAQ,SAAQ,SAAS,EAAE,QAAQ,IAAI,kBAAkB,MAAM,CAAC,IAAI;AACxE,MAAI,OAAQ,SAAQ,WAAW,EAAE,QAAQ,IAAI,kBAAkB,MAAM,CAAC,IAAI;AAC1E,MAAI,SAAU,SAAQ,WAAW;AACjC,MAAI,WAAY,SAAQ,aAAa;AACrC,MAAI,UAAW,SAAQ,YAAY;AACnC,MAAI,YAAY,OAAW,SAAQ,UAAU;AAC7C,MAAI,aAAc,SAAQ,eAAe;AAEzC,QAAM,eAAuC;AAAA,IAC3C,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,UAAU;AAAA,IACV,YAAY;AAAA,IACZ,UAAU;AAAA,IACV,WAAW;AAAA,IACX,WAAW;AAAA,EACb;AAEA,QAAM,eAAe,aAAa,aAAa,SAAS,IAAI,aAAa,SAAS,IAAI;AACtF,QAAM,UAAU,EAAE,CAAC,YAAY,GAAG,SAAS,QAAQ,MAAe;AAElE,QAAM,CAAC,MAAM,KAAK,IAAI,MAAM,GAAG;AAAA,IAC7B;AAAA,IACA;AAAA,IACA;AAAA,MACE,OAAO;AAAA,MACP,SAAS,OAAO,KAAK;AAAA,MACrB;AAAA,IACF;AAAA,EACF;AAEA,QAAM,QAAQ,KAAK,IAAI,CAAC,UAAU;AAAA,IAChC,IAAI,KAAK;AAAA,IACT,QAAQ,KAAK;AAAA,IACb,UAAU,KAAK;AAAA,IACf,aAAa,KAAK,eAAe;AAAA,IACjC,UAAU,KAAK;AAAA,IACf,cAAc,KAAK,gBAAgB;AAAA,IACnC,YAAY,KAAK;AAAA,IACjB,WAAW,KAAK,aAAa;AAAA,IAC7B,SAAS,KAAK;AAAA,IACd,UAAU,KAAK;AAAA,IACf,SAAS,KAAK;AAAA,IACd,eAAe,KAAK,gBAAgB,KAAK,cAAc,YAAY,IAAI;AAAA,IACvE,aAAa,KAAK,cAAc,KAAK,YAAY,YAAY,IAAI;AAAA,IACjE,UAAU,KAAK;AAAA,IACf,gBAAgB,KAAK;AAAA,IACrB,WAAW,KAAK,UAAU,YAAY;AAAA,IACtC,WAAW,KAAK,UAAU,YAAY;AAAA,EACxC,EAAE;AAEF,QAAM,aAAa,KAAK,IAAI,GAAG,KAAK,KAAK,QAAQ,QAAQ,CAAC;AAE1D,SAAO,aAAa,KAAK,EAAE,OAAO,OAAO,OAAO,WAAW,CAAC;AAC9D;AAEA,eAAsB,KAAK,KAAc;AACvC,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM;AACT,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,QAAM,QAAQ,kCAAkC,UAAU,QAAQ,KAAK,SAAS,CAAC;AAEjF,MAAI;AACJ,MAAI;AACF,WAAO,MAAM,IAAI,KAAK;AAAA,EACxB,QAAQ;AACN,WAAO,aAAa,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC1E;AAEA,QAAM,UAAU;AAAA,IACd,GAAG;AAAA,IACH,UAAU,KAAK;AAAA,IACf,gBAAgB,KAAK;AAAA,IACrB,WAAW,KAAK,OAAO,KAAK,SAAS;AAAA,EACvC;AAEA,QAAM,EAAE,EAAE,IAAI,MAAM,oBAAoB;AACxC,QAAM,SAAS,kCAAkC,CAAC;AAClD,QAAM,SAAS,OAAO,UAAU,OAAO;AACvC,MAAI,CAAC,OAAO,SAAS;AACnB,UAAM,SAAS,OAAO,MAAM,OAAO,IAAI,OAAK,GAAG,EAAE,KAAK,KAAK,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE;AAC/E,WAAO,aAAa,KAAK,EAAE,OAAO,sBAAsB,OAAO,KAAK,IAAI,CAAC,GAAG,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAChG;AAEA,QAAM,OAAO;AAAA,IACX,GAAG,OAAO;AAAA,IACV,qBAAqB,OAAO,KAAK,uBAAuB;AAAA,EAC1D;AAEA,QAAM,OAAO,GAAG,OAAO,cAAc,IAAI;AAEzC,MAAI;AACF,UAAM,GAAG,QAAQ,IAAI,EAAE,MAAM;AAC7B,UAAM,qCAAqC,OAAO,KAAK,UAAU,KAAK,cAAc;AAAA,EACtF,SAAS,OAAO;AACd,YAAQ,MAAM,sDAAsD,KAAK;AACzE,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,EAAE,oCAAoC,EAAE;AAAA,MACjD,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AAEA,SAAO,aAAa,KAAK,EAAE,IAAI,KAAK,GAAG,GAAG,EAAE,QAAQ,IAAI,CAAC;AAC3D;AAEA,eAAsB,IAAI,KAAc;AACtC,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM;AACT,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,QAAM,QAAQ,kCAAkC,UAAU,QAAQ,KAAK,SAAS,CAAC;AAEjF,MAAI;AACJ,MAAI;AACF,WAAO,MAAM,IAAI,KAAK;AAAA,EACxB,QAAQ;AACN,WAAO,aAAa,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC1E;AAEA,MAAI,CAAC,KAAK,IAAI;AACZ,WAAO,aAAa,KAAK,EAAE,OAAO,sBAAsB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC5E;AAEA,QAAM,UAAU;AAAA,IACd,GAAG;AAAA,IACH,WAAW,KAAK,OAAO,KAAK,SAAS;AAAA,EACvC;AACA,SAAQ,QAAoC;AAC5C,SAAQ,QAAoC;AAC5C,SAAQ,QAAoC;AAE5C,QAAM,EAAE,EAAE,IAAI,MAAM,oBAAoB;AACxC,QAAM,SAAS,wCAAwC,CAAC;AACxD,QAAM,SAAS,OAAO,UAAU,OAAO;AACvC,MAAI,CAAC,OAAO,SAAS;AACnB,UAAM,SAAS,OAAO,MAAM,OAAO,IAAI,OAAK,GAAG,EAAE,KAAK,KAAK,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE;AAC/E,WAAO,aAAa,KAAK,EAAE,OAAO,sBAAsB,OAAO,KAAK,IAAI,CAAC,GAAG,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAChG;AAEA,QAAM,OAAO,MAAM,GAAG,QAAQ,cAAc;AAAA,IAC1C,IAAI,OAAO,KAAK;AAAA,IAChB,UAAU,KAAK;AAAA,IACf,gBAAgB,KAAK;AAAA,IACrB,WAAW;AAAA,EACb,CAAC;AAED,MAAI,CAAC,MAAM;AACT,WAAO,aAAa,KAAK,EAAE,OAAO,iBAAiB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACvE;AAEA,KAAG,OAAO,MAAM,OAAO,IAAI;AAE3B,MAAI;AACF,UAAM,GAAG,QAAQ,IAAI,EAAE,MAAM;AAC7B,UAAM,qCAAqC,OAAO,KAAK,UAAU,KAAK,cAAc;AAAA,EACtF,SAAS,OAAO;AACd,YAAQ,MAAM,yDAAyD,KAAK;AAC5E,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,EAAE,oCAAoC,EAAE;AAAA,MACjD,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AAEA,SAAO,aAAa,KAAK,EAAE,IAAI,KAAK,CAAC;AACvC;AAEA,eAAsB,OAAO,KAAc;AACzC,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM;AACT,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAEA,QAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,QAAM,KAAK,IAAI,aAAa,IAAI,IAAI;AAEpC,MAAI,CAAC,IAAI;AACP,WAAO,aAAa,KAAK,EAAE,OAAO,sBAAsB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC5E;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,QAAM,QAAQ,kCAAkC,UAAU,QAAQ,KAAK,SAAS,CAAC;AAEjF,QAAM,OAAO,MAAM,GAAG,QAAQ,cAAc;AAAA,IAC1C;AAAA,IACA,UAAU,KAAK;AAAA,IACf,gBAAgB,KAAK;AAAA,IACrB,WAAW;AAAA,EACb,CAAC;AAED,MAAI,CAAC,MAAM;AACT,WAAO,aAAa,KAAK,EAAE,OAAO,iBAAiB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACvE;AAEA,OAAK,YAAY,oBAAI,KAAK;AAC1B,QAAM,GAAG,QAAQ,IAAI,EAAE,MAAM;AAC7B,QAAM,qCAAqC,OAAO,KAAK,UAAU,KAAK,cAAc;AAEpF,SAAO,aAAa,KAAK,EAAE,IAAI,KAAK,CAAC;AACvC;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aAAa;AAAA,MACb,OAAO;AAAA,MACP,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,6BAA6B,QAAQ,uBAAuB;AAAA,MAC1F;AAAA,MACA,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,4BAA4B,QAAQ,oBAAoB;AAAA,QACpF,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,oBAAoB;AAAA,MAC1E;AAAA,IACF;AAAA,IACA,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa;AAAA,MACb,aAAa;AAAA,QACX,aAAa;AAAA,QACb,QAAQ;AAAA,MACV;AAAA,MACA,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ;AAAA,QACV;AAAA,MACF;AAAA,MACA,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,mBAAmB,QAAQ,oBAAoB;AAAA,QAC3E,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,oBAAoB;AAAA,MAC1E;AAAA,IACF;AAAA,IACA,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aAAa;AAAA,MACb,aAAa;AAAA,QACX,aAAa;AAAA,QACb,QAAQ;AAAA,MACV;AAAA,MACA,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ;AAAA,QACV;AAAA,MACF;AAAA,MACA,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,mBAAmB,QAAQ,oBAAoB;AAAA,QAC3E,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,oBAAoB;AAAA,QACxE,EAAE,QAAQ,KAAK,aAAa,2BAA2B,QAAQ,oBAAoB;AAAA,MACrF;AAAA,IACF;AAAA,IACA,QAAQ;AAAA,MACN,SAAS;AAAA,MACT,aAAa;AAAA,MACb,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,0BAA0B,EAAE,CAAC;AAAA,MAC9E,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,yBAAyB,QAAQ,iBAAiB;AAAA,MAChF;AAAA,MACA,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,sBAAsB,QAAQ,oBAAoB;AAAA,QAC9E,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,oBAAoB;AAAA,QACxE,EAAE,QAAQ,KAAK,aAAa,2BAA2B,QAAQ,oBAAoB;AAAA,MACrF;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { enforceCommandOptimisticLock } from '@open-mercato/shared/lib/crud/optimistic-lock-command'\nimport { BusinessRule } from '../../data/entities'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { escapeLikePattern } from '@open-mercato/shared/lib/db/escapeLikePattern'\nimport {\n  createBusinessRuleSchema,\n  updateBusinessRuleSchema,\n  createLocalizedBusinessRuleSchema,\n  createLocalizedUpdateBusinessRuleSchema,\n  businessRuleFilterSchema,\n  ruleTypeSchema,\n} from '../../data/validators'\nimport {\n  invalidateBusinessRuleDiscoveryCache,\n  resolveBusinessRuleDiscoveryCache,\n} from '../../lib/rule-engine'\n\nconst querySchema = z.looseObject({\n  id: z.uuid().optional(),\n  page: z.coerce.number().min(1).default(1),\n  pageSize: z.coerce.number().min(1).max(100).default(50),\n  search: z.string().optional(),\n  ruleId: z.string().optional(),\n  ruleType: ruleTypeSchema.optional(),\n  entityType: z.string().optional(),\n  eventType: z.string().optional(),\n  enabled: z.coerce.boolean().optional(),\n  ruleCategory: z.string().optional(),\n  sortField: z.string().optional(),\n  sortDir: z.enum(['asc', 'desc']).optional().default('desc'),\n})\n\nconst ruleListItemSchema = z.object({\n  id: z.string().uuid(),\n  ruleId: z.string(),\n  ruleName: z.string(),\n  description: z.string().nullable(),\n  ruleType: ruleTypeSchema,\n  ruleCategory: z.string().nullable(),\n  entityType: z.string(),\n  eventType: z.string().nullable(),\n  enabled: z.boolean(),\n  priority: z.number(),\n  version: z.number(),\n  effectiveFrom: z.string().nullable(),\n  effectiveTo: z.string().nullable(),\n  tenantId: z.string().uuid(),\n  organizationId: z.string().uuid(),\n  createdAt: z.string(),\n  updatedAt: z.string(),\n})\n\nconst ruleListResponseSchema = z.object({\n  items: z.array(ruleListItemSchema),\n  total: z.number().int().nonnegative(),\n  totalPages: z.number().int().positive(),\n})\n\nconst ruleCreateResponseSchema = z.object({\n  id: z.string().uuid(),\n})\n\nconst okResponseSchema = z.object({\n  ok: z.literal(true),\n})\n\nconst errorResponseSchema = z.object({\n  error: z.string(),\n})\n\nconst routeMetadata = {\n  GET: { requireAuth: true, requireFeatures: ['business_rules.view'] },\n  POST: { requireAuth: true, requireFeatures: ['business_rules.manage'] },\n  PUT: { requireAuth: true, requireFeatures: ['business_rules.manage'] },\n  DELETE: { requireAuth: true, requireFeatures: ['business_rules.manage'] },\n}\n\nexport const metadata = routeMetadata\n\nexport async function GET(req: Request) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n\n  const url = new URL(req.url)\n  const parsed = querySchema.safeParse({\n    id: url.searchParams.get('id') || undefined,\n    page: url.searchParams.get('page') || undefined,\n    pageSize: url.searchParams.get('pageSize') || undefined,\n    search: url.searchParams.get('search') || undefined,\n    ruleId: url.searchParams.get('ruleId') || undefined,\n    ruleType: url.searchParams.get('ruleType') || undefined,\n    entityType: url.searchParams.get('entityType') || undefined,\n    eventType: url.searchParams.get('eventType') || undefined,\n    enabled: url.searchParams.get('enabled') || undefined,\n    ruleCategory: url.searchParams.get('ruleCategory') || undefined,\n    sortField: url.searchParams.get('sortField') || undefined,\n    sortDir: url.searchParams.get('sortDir') || undefined,\n  })\n\n  if (!parsed.success) {\n    return NextResponse.json({ error: 'Invalid query parameters' }, { status: 400 })\n  }\n\n  const container = await createRequestContainer()\n  const em = container.resolve('em') as EntityManager\n\n  const { id, page, pageSize, search, ruleId, ruleType, entityType, eventType, enabled, ruleCategory, sortField, sortDir } = parsed.data\n\n  const filters: Record<string, any> = {\n    tenantId: auth.tenantId,\n    organizationId: auth.orgId,\n    deletedAt: null,\n  }\n\n  if (id) filters.id = id\n  if (ruleId) filters.ruleId = { $ilike: `%${escapeLikePattern(ruleId)}%` }\n  if (search) filters.ruleName = { $ilike: `%${escapeLikePattern(search)}%` }\n  if (ruleType) filters.ruleType = ruleType\n  if (entityType) filters.entityType = entityType\n  if (eventType) filters.eventType = eventType\n  if (enabled !== undefined) filters.enabled = enabled\n  if (ruleCategory) filters.ruleCategory = ruleCategory\n\n  const sortFieldMap: Record<string, string> = {\n    ruleId: 'ruleId',\n    ruleName: 'ruleName',\n    ruleType: 'ruleType',\n    entityType: 'entityType',\n    priority: 'priority',\n    createdAt: 'createdAt',\n    updatedAt: 'updatedAt',\n  }\n\n  const orderByField = sortField && sortFieldMap[sortField] ? sortFieldMap[sortField] : 'priority'\n  const orderBy = { [orderByField]: sortDir, ruleId: 'asc' as const }\n\n  const [rows, count] = await em.findAndCount(\n    BusinessRule,\n    filters,\n    {\n      limit: pageSize,\n      offset: (page - 1) * pageSize,\n      orderBy,\n    }\n  )\n\n  const items = rows.map((rule) => ({\n    id: rule.id,\n    ruleId: rule.ruleId,\n    ruleName: rule.ruleName,\n    description: rule.description ?? null,\n    ruleType: rule.ruleType,\n    ruleCategory: rule.ruleCategory ?? null,\n    entityType: rule.entityType,\n    eventType: rule.eventType ?? null,\n    enabled: rule.enabled,\n    priority: rule.priority,\n    version: rule.version,\n    effectiveFrom: rule.effectiveFrom ? rule.effectiveFrom.toISOString() : null,\n    effectiveTo: rule.effectiveTo ? rule.effectiveTo.toISOString() : null,\n    tenantId: rule.tenantId,\n    organizationId: rule.organizationId,\n    createdAt: rule.createdAt.toISOString(),\n    updatedAt: rule.updatedAt.toISOString(),\n  }))\n\n  const totalPages = Math.max(1, Math.ceil(count / pageSize))\n\n  return NextResponse.json({ items, total: count, totalPages })\n}\n\nexport async function POST(req: Request) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n\n  const container = await createRequestContainer()\n  const em = container.resolve('em') as EntityManager\n  const cache = resolveBusinessRuleDiscoveryCache(container.resolve.bind(container))\n\n  let body: any\n  try {\n    body = await req.json()\n  } catch {\n    return NextResponse.json({ error: 'Invalid JSON body' }, { status: 400 })\n  }\n\n  const payload = {\n    ...body,\n    tenantId: auth.tenantId,\n    organizationId: auth.orgId,\n    createdBy: auth.sub ?? auth.email ?? null,\n  }\n\n  const { t } = await resolveTranslations()\n  const schema = createLocalizedBusinessRuleSchema(t)\n  const parsed = schema.safeParse(payload)\n  if (!parsed.success) {\n    const errors = parsed.error.issues.map(e => `${e.path.join('.')}: ${e.message}`)\n    return NextResponse.json({ error: `Validation failed: ${errors.join(', ')}` }, { status: 400 })\n  }\n\n  const data = {\n    ...parsed.data,\n    conditionExpression: parsed.data.conditionExpression ?? null,\n  }\n\n  const rule = em.create(BusinessRule, data)\n\n  try {\n    await em.persist(rule).flush()\n    await invalidateBusinessRuleDiscoveryCache(cache, rule.tenantId, rule.organizationId)\n  } catch (error) {\n    console.error('[business_rules.rules] Failed to persist new rule:', error)\n    return NextResponse.json(\n      { error: t('business_rules.errors.createFailed') },\n      { status: 500 },\n    )\n  }\n\n  return NextResponse.json({ id: rule.id }, { status: 201 })\n}\n\nexport async function PUT(req: Request) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n\n  const container = await createRequestContainer()\n  const em = container.resolve('em') as EntityManager\n  const cache = resolveBusinessRuleDiscoveryCache(container.resolve.bind(container))\n\n  let body: any\n  try {\n    body = await req.json()\n  } catch {\n    return NextResponse.json({ error: 'Invalid JSON body' }, { status: 400 })\n  }\n\n  if (!body.id) {\n    return NextResponse.json({ error: 'Rule id is required' }, { status: 400 })\n  }\n\n  const payload = {\n    ...body,\n    updatedBy: auth.sub ?? auth.email ?? null,\n  }\n  delete (payload as Record<string, unknown>).tenantId\n  delete (payload as Record<string, unknown>).organizationId\n  delete (payload as Record<string, unknown>).createdBy\n\n  const { t } = await resolveTranslations()\n  const schema = createLocalizedUpdateBusinessRuleSchema(t)\n  const parsed = schema.safeParse(payload)\n  if (!parsed.success) {\n    const errors = parsed.error.issues.map(e => `${e.path.join('.')}: ${e.message}`)\n    return NextResponse.json({ error: `Validation failed: ${errors.join(', ')}` }, { status: 400 })\n  }\n\n  const rule = await em.findOne(BusinessRule, {\n    id: parsed.data.id,\n    tenantId: auth.tenantId,\n    organizationId: auth.orgId,\n    deletedAt: null,\n  })\n\n  if (!rule) {\n    return NextResponse.json({ error: 'Rule not found' }, { status: 404 })\n  }\n\n  try {\n    enforceCommandOptimisticLock({\n      resourceKind: 'business_rules.rule',\n      resourceId: rule.id,\n      current: rule.updatedAt ?? null,\n      request: req,\n    })\n  } catch (err) {\n    if (isCrudHttpError(err)) {\n      return NextResponse.json(err.body, { status: err.status })\n    }\n    throw err\n  }\n\n  em.assign(rule, parsed.data)\n\n  try {\n    await em.persist(rule).flush()\n    await invalidateBusinessRuleDiscoveryCache(cache, rule.tenantId, rule.organizationId)\n  } catch (error) {\n    console.error('[business_rules.rules] Failed to persist rule update:', error)\n    return NextResponse.json(\n      { error: t('business_rules.errors.updateFailed') },\n      { status: 500 },\n    )\n  }\n\n  return NextResponse.json({ ok: true })\n}\n\nexport async function DELETE(req: Request) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n\n  const url = new URL(req.url)\n  const id = url.searchParams.get('id')\n\n  if (!id) {\n    return NextResponse.json({ error: 'Rule id is required' }, { status: 400 })\n  }\n\n  const container = await createRequestContainer()\n  const em = container.resolve('em') as EntityManager\n  const cache = resolveBusinessRuleDiscoveryCache(container.resolve.bind(container))\n\n  const rule = await em.findOne(BusinessRule, {\n    id,\n    tenantId: auth.tenantId,\n    organizationId: auth.orgId,\n    deletedAt: null,\n  })\n\n  if (!rule) {\n    return NextResponse.json({ error: 'Rule not found' }, { status: 404 })\n  }\n\n  try {\n    enforceCommandOptimisticLock({\n      resourceKind: 'business_rules.rule',\n      resourceId: rule.id,\n      current: rule.updatedAt ?? null,\n      request: req,\n    })\n  } catch (err) {\n    if (isCrudHttpError(err)) {\n      return NextResponse.json(err.body, { status: err.status })\n    }\n    throw err\n  }\n\n  rule.deletedAt = new Date()\n  await em.persist(rule).flush()\n  await invalidateBusinessRuleDiscoveryCache(cache, rule.tenantId, rule.organizationId)\n\n  return NextResponse.json({ ok: true })\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Business Rules',\n  summary: 'Business rule management',\n  methods: {\n    GET: {\n      summary: 'List business rules',\n      description: 'Returns business rules for the current tenant and organization with filtering and pagination.',\n      query: querySchema,\n      responses: [\n        { status: 200, description: 'Business rules collection', schema: ruleListResponseSchema },\n      ],\n      errors: [\n        { status: 400, description: 'Invalid query parameters', schema: errorResponseSchema },\n        { status: 401, description: 'Unauthorized', schema: errorResponseSchema },\n      ],\n    },\n    POST: {\n      summary: 'Create business rule',\n      description: 'Creates a new business rule for the current tenant and organization.',\n      requestBody: {\n        contentType: 'application/json',\n        schema: createBusinessRuleSchema,\n      },\n      responses: [\n        {\n          status: 201,\n          description: 'Business rule created',\n          schema: ruleCreateResponseSchema,\n        },\n      ],\n      errors: [\n        { status: 400, description: 'Invalid payload', schema: errorResponseSchema },\n        { status: 401, description: 'Unauthorized', schema: errorResponseSchema },\n      ],\n    },\n    PUT: {\n      summary: 'Update business rule',\n      description: 'Updates an existing business rule.',\n      requestBody: {\n        contentType: 'application/json',\n        schema: updateBusinessRuleSchema,\n      },\n      responses: [\n        {\n          status: 200,\n          description: 'Business rule updated',\n          schema: okResponseSchema,\n        },\n      ],\n      errors: [\n        { status: 400, description: 'Invalid payload', schema: errorResponseSchema },\n        { status: 401, description: 'Unauthorized', schema: errorResponseSchema },\n        { status: 404, description: 'Business rule not found', schema: errorResponseSchema },\n      ],\n    },\n    DELETE: {\n      summary: 'Delete business rule',\n      description: 'Soft deletes a business rule by identifier.',\n      query: z.object({ id: z.string().uuid().describe('Business rule identifier') }),\n      responses: [\n        { status: 200, description: 'Business rule deleted', schema: okResponseSchema },\n      ],\n      errors: [\n        { status: 400, description: 'Invalid identifier', schema: errorResponseSchema },\n        { status: 401, description: 'Unauthorized', schema: errorResponseSchema },\n        { status: 404, description: 'Business rule not found', schema: errorResponseSchema },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAElB,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AACvC,SAAS,2BAA2B;AACpC,SAAS,uBAAuB;AAChC,SAAS,oCAAoC;AAC7C,SAAS,oBAAoB;AAE7B,SAAS,yBAAyB;AAClC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAEA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAEP,MAAM,cAAc,EAAE,YAAY;AAAA,EAChC,IAAI,EAAE,KAAK,EAAE,SAAS;AAAA,EACtB,MAAM,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,QAAQ,CAAC;AAAA,EACxC,UAAU,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,QAAQ,EAAE;AAAA,EACtD,QAAQ,EAAE,OAAO,EAAE,SAAS;AAAA,EAC5B,QAAQ,EAAE,OAAO,EAAE,SAAS;AAAA,EAC5B,UAAU,eAAe,SAAS;AAAA,EAClC,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,EAChC,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,SAAS,EAAE,OAAO,QAAQ,EAAE,SAAS;AAAA,EACrC,cAAc,EAAE,OAAO,EAAE,SAAS;AAAA,EAClC,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,SAAS,EAAE,KAAK,CAAC,OAAO,MAAM,CAAC,EAAE,SAAS,EAAE,QAAQ,MAAM;AAC5D,CAAC;AAED,MAAM,qBAAqB,EAAE,OAAO;AAAA,EAClC,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,QAAQ,EAAE,OAAO;AAAA,EACjB,UAAU,EAAE,OAAO;AAAA,EACnB,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,EACjC,UAAU;AAAA,EACV,cAAc,EAAE,OAAO,EAAE,SAAS;AAAA,EAClC,YAAY,EAAE,OAAO;AAAA,EACrB,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,SAAS,EAAE,QAAQ;AAAA,EACnB,UAAU,EAAE,OAAO;AAAA,EACnB,SAAS,EAAE,OAAO;AAAA,EAClB,eAAe,EAAE,OAAO,EAAE,SAAS;AAAA,EACnC,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,EACjC,UAAU,EAAE,OAAO,EAAE,KAAK;AAAA,EAC1B,gBAAgB,EAAE,OAAO,EAAE,KAAK;AAAA,EAChC,WAAW,EAAE,OAAO;AAAA,EACpB,WAAW,EAAE,OAAO;AACtB,CAAC;AAED,MAAM,yBAAyB,EAAE,OAAO;AAAA,EACtC,OAAO,EAAE,MAAM,kBAAkB;AAAA,EACjC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY;AAAA,EACpC,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS;AACxC,CAAC;AAED,MAAM,2BAA2B,EAAE,OAAO;AAAA,EACxC,IAAI,EAAE,OAAO,EAAE,KAAK;AACtB,CAAC;AAED,MAAM,mBAAmB,EAAE,OAAO;AAAA,EAChC,IAAI,EAAE,QAAQ,IAAI;AACpB,CAAC;AAED,MAAM,sBAAsB,EAAE,OAAO;AAAA,EACnC,OAAO,EAAE,OAAO;AAClB,CAAC;AAED,MAAM,gBAAgB;AAAA,EACpB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,qBAAqB,EAAE;AAAA,EACnE,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,uBAAuB,EAAE;AAAA,EACtE,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,uBAAuB,EAAE;AAAA,EACrE,QAAQ,EAAE,aAAa,MAAM,iBAAiB,CAAC,uBAAuB,EAAE;AAC1E;AAEO,MAAM,WAAW;AAExB,eAAsB,IAAI,KAAc;AACtC,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM;AACT,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAEA,QAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,QAAM,SAAS,YAAY,UAAU;AAAA,IACnC,IAAI,IAAI,aAAa,IAAI,IAAI,KAAK;AAAA,IAClC,MAAM,IAAI,aAAa,IAAI,MAAM,KAAK;AAAA,IACtC,UAAU,IAAI,aAAa,IAAI,UAAU,KAAK;AAAA,IAC9C,QAAQ,IAAI,aAAa,IAAI,QAAQ,KAAK;AAAA,IAC1C,QAAQ,IAAI,aAAa,IAAI,QAAQ,KAAK;AAAA,IAC1C,UAAU,IAAI,aAAa,IAAI,UAAU,KAAK;AAAA,IAC9C,YAAY,IAAI,aAAa,IAAI,YAAY,KAAK;AAAA,IAClD,WAAW,IAAI,aAAa,IAAI,WAAW,KAAK;AAAA,IAChD,SAAS,IAAI,aAAa,IAAI,SAAS,KAAK;AAAA,IAC5C,cAAc,IAAI,aAAa,IAAI,cAAc,KAAK;AAAA,IACtD,WAAW,IAAI,aAAa,IAAI,WAAW,KAAK;AAAA,IAChD,SAAS,IAAI,aAAa,IAAI,SAAS,KAAK;AAAA,EAC9C,CAAC;AAED,MAAI,CAAC,OAAO,SAAS;AACnB,WAAO,aAAa,KAAK,EAAE,OAAO,2BAA2B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACjF;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,KAAK,UAAU,QAAQ,IAAI;AAEjC,QAAM,EAAE,IAAI,MAAM,UAAU,QAAQ,QAAQ,UAAU,YAAY,WAAW,SAAS,cAAc,WAAW,QAAQ,IAAI,OAAO;AAElI,QAAM,UAA+B;AAAA,IACnC,UAAU,KAAK;AAAA,IACf,gBAAgB,KAAK;AAAA,IACrB,WAAW;AAAA,EACb;AAEA,MAAI,GAAI,SAAQ,KAAK;AACrB,MAAI,OAAQ,SAAQ,SAAS,EAAE,QAAQ,IAAI,kBAAkB,MAAM,CAAC,IAAI;AACxE,MAAI,OAAQ,SAAQ,WAAW,EAAE,QAAQ,IAAI,kBAAkB,MAAM,CAAC,IAAI;AAC1E,MAAI,SAAU,SAAQ,WAAW;AACjC,MAAI,WAAY,SAAQ,aAAa;AACrC,MAAI,UAAW,SAAQ,YAAY;AACnC,MAAI,YAAY,OAAW,SAAQ,UAAU;AAC7C,MAAI,aAAc,SAAQ,eAAe;AAEzC,QAAM,eAAuC;AAAA,IAC3C,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,UAAU;AAAA,IACV,YAAY;AAAA,IACZ,UAAU;AAAA,IACV,WAAW;AAAA,IACX,WAAW;AAAA,EACb;AAEA,QAAM,eAAe,aAAa,aAAa,SAAS,IAAI,aAAa,SAAS,IAAI;AACtF,QAAM,UAAU,EAAE,CAAC,YAAY,GAAG,SAAS,QAAQ,MAAe;AAElE,QAAM,CAAC,MAAM,KAAK,IAAI,MAAM,GAAG;AAAA,IAC7B;AAAA,IACA;AAAA,IACA;AAAA,MACE,OAAO;AAAA,MACP,SAAS,OAAO,KAAK;AAAA,MACrB;AAAA,IACF;AAAA,EACF;AAEA,QAAM,QAAQ,KAAK,IAAI,CAAC,UAAU;AAAA,IAChC,IAAI,KAAK;AAAA,IACT,QAAQ,KAAK;AAAA,IACb,UAAU,KAAK;AAAA,IACf,aAAa,KAAK,eAAe;AAAA,IACjC,UAAU,KAAK;AAAA,IACf,cAAc,KAAK,gBAAgB;AAAA,IACnC,YAAY,KAAK;AAAA,IACjB,WAAW,KAAK,aAAa;AAAA,IAC7B,SAAS,KAAK;AAAA,IACd,UAAU,KAAK;AAAA,IACf,SAAS,KAAK;AAAA,IACd,eAAe,KAAK,gBAAgB,KAAK,cAAc,YAAY,IAAI;AAAA,IACvE,aAAa,KAAK,cAAc,KAAK,YAAY,YAAY,IAAI;AAAA,IACjE,UAAU,KAAK;AAAA,IACf,gBAAgB,KAAK;AAAA,IACrB,WAAW,KAAK,UAAU,YAAY;AAAA,IACtC,WAAW,KAAK,UAAU,YAAY;AAAA,EACxC,EAAE;AAEF,QAAM,aAAa,KAAK,IAAI,GAAG,KAAK,KAAK,QAAQ,QAAQ,CAAC;AAE1D,SAAO,aAAa,KAAK,EAAE,OAAO,OAAO,OAAO,WAAW,CAAC;AAC9D;AAEA,eAAsB,KAAK,KAAc;AACvC,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM;AACT,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,QAAM,QAAQ,kCAAkC,UAAU,QAAQ,KAAK,SAAS,CAAC;AAEjF,MAAI;AACJ,MAAI;AACF,WAAO,MAAM,IAAI,KAAK;AAAA,EACxB,QAAQ;AACN,WAAO,aAAa,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC1E;AAEA,QAAM,UAAU;AAAA,IACd,GAAG;AAAA,IACH,UAAU,KAAK;AAAA,IACf,gBAAgB,KAAK;AAAA,IACrB,WAAW,KAAK,OAAO,KAAK,SAAS;AAAA,EACvC;AAEA,QAAM,EAAE,EAAE,IAAI,MAAM,oBAAoB;AACxC,QAAM,SAAS,kCAAkC,CAAC;AAClD,QAAM,SAAS,OAAO,UAAU,OAAO;AACvC,MAAI,CAAC,OAAO,SAAS;AACnB,UAAM,SAAS,OAAO,MAAM,OAAO,IAAI,OAAK,GAAG,EAAE,KAAK,KAAK,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE;AAC/E,WAAO,aAAa,KAAK,EAAE,OAAO,sBAAsB,OAAO,KAAK,IAAI,CAAC,GAAG,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAChG;AAEA,QAAM,OAAO;AAAA,IACX,GAAG,OAAO;AAAA,IACV,qBAAqB,OAAO,KAAK,uBAAuB;AAAA,EAC1D;AAEA,QAAM,OAAO,GAAG,OAAO,cAAc,IAAI;AAEzC,MAAI;AACF,UAAM,GAAG,QAAQ,IAAI,EAAE,MAAM;AAC7B,UAAM,qCAAqC,OAAO,KAAK,UAAU,KAAK,cAAc;AAAA,EACtF,SAAS,OAAO;AACd,YAAQ,MAAM,sDAAsD,KAAK;AACzE,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,EAAE,oCAAoC,EAAE;AAAA,MACjD,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AAEA,SAAO,aAAa,KAAK,EAAE,IAAI,KAAK,GAAG,GAAG,EAAE,QAAQ,IAAI,CAAC;AAC3D;AAEA,eAAsB,IAAI,KAAc;AACtC,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM;AACT,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,QAAM,QAAQ,kCAAkC,UAAU,QAAQ,KAAK,SAAS,CAAC;AAEjF,MAAI;AACJ,MAAI;AACF,WAAO,MAAM,IAAI,KAAK;AAAA,EACxB,QAAQ;AACN,WAAO,aAAa,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC1E;AAEA,MAAI,CAAC,KAAK,IAAI;AACZ,WAAO,aAAa,KAAK,EAAE,OAAO,sBAAsB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC5E;AAEA,QAAM,UAAU;AAAA,IACd,GAAG;AAAA,IACH,WAAW,KAAK,OAAO,KAAK,SAAS;AAAA,EACvC;AACA,SAAQ,QAAoC;AAC5C,SAAQ,QAAoC;AAC5C,SAAQ,QAAoC;AAE5C,QAAM,EAAE,EAAE,IAAI,MAAM,oBAAoB;AACxC,QAAM,SAAS,wCAAwC,CAAC;AACxD,QAAM,SAAS,OAAO,UAAU,OAAO;AACvC,MAAI,CAAC,OAAO,SAAS;AACnB,UAAM,SAAS,OAAO,MAAM,OAAO,IAAI,OAAK,GAAG,EAAE,KAAK,KAAK,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE;AAC/E,WAAO,aAAa,KAAK,EAAE,OAAO,sBAAsB,OAAO,KAAK,IAAI,CAAC,GAAG,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAChG;AAEA,QAAM,OAAO,MAAM,GAAG,QAAQ,cAAc;AAAA,IAC1C,IAAI,OAAO,KAAK;AAAA,IAChB,UAAU,KAAK;AAAA,IACf,gBAAgB,KAAK;AAAA,IACrB,WAAW;AAAA,EACb,CAAC;AAED,MAAI,CAAC,MAAM;AACT,WAAO,aAAa,KAAK,EAAE,OAAO,iBAAiB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACvE;AAEA,MAAI;AACF,iCAA6B;AAAA,MAC3B,cAAc;AAAA,MACd,YAAY,KAAK;AAAA,MACjB,SAAS,KAAK,aAAa;AAAA,MAC3B,SAAS;AAAA,IACX,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,GAAG;AACxB,aAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,IAC3D;AACA,UAAM;AAAA,EACR;AAEA,KAAG,OAAO,MAAM,OAAO,IAAI;AAE3B,MAAI;AACF,UAAM,GAAG,QAAQ,IAAI,EAAE,MAAM;AAC7B,UAAM,qCAAqC,OAAO,KAAK,UAAU,KAAK,cAAc;AAAA,EACtF,SAAS,OAAO;AACd,YAAQ,MAAM,yDAAyD,KAAK;AAC5E,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,EAAE,oCAAoC,EAAE;AAAA,MACjD,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AAEA,SAAO,aAAa,KAAK,EAAE,IAAI,KAAK,CAAC;AACvC;AAEA,eAAsB,OAAO,KAAc;AACzC,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM;AACT,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAEA,QAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,QAAM,KAAK,IAAI,aAAa,IAAI,IAAI;AAEpC,MAAI,CAAC,IAAI;AACP,WAAO,aAAa,KAAK,EAAE,OAAO,sBAAsB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC5E;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,QAAM,QAAQ,kCAAkC,UAAU,QAAQ,KAAK,SAAS,CAAC;AAEjF,QAAM,OAAO,MAAM,GAAG,QAAQ,cAAc;AAAA,IAC1C;AAAA,IACA,UAAU,KAAK;AAAA,IACf,gBAAgB,KAAK;AAAA,IACrB,WAAW;AAAA,EACb,CAAC;AAED,MAAI,CAAC,MAAM;AACT,WAAO,aAAa,KAAK,EAAE,OAAO,iBAAiB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACvE;AAEA,MAAI;AACF,iCAA6B;AAAA,MAC3B,cAAc;AAAA,MACd,YAAY,KAAK;AAAA,MACjB,SAAS,KAAK,aAAa;AAAA,MAC3B,SAAS;AAAA,IACX,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,GAAG;AACxB,aAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,IAC3D;AACA,UAAM;AAAA,EACR;AAEA,OAAK,YAAY,oBAAI,KAAK;AAC1B,QAAM,GAAG,QAAQ,IAAI,EAAE,MAAM;AAC7B,QAAM,qCAAqC,OAAO,KAAK,UAAU,KAAK,cAAc;AAEpF,SAAO,aAAa,KAAK,EAAE,IAAI,KAAK,CAAC;AACvC;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aAAa;AAAA,MACb,OAAO;AAAA,MACP,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,6BAA6B,QAAQ,uBAAuB;AAAA,MAC1F;AAAA,MACA,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,4BAA4B,QAAQ,oBAAoB;AAAA,QACpF,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,oBAAoB;AAAA,MAC1E;AAAA,IACF;AAAA,IACA,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa;AAAA,MACb,aAAa;AAAA,QACX,aAAa;AAAA,QACb,QAAQ;AAAA,MACV;AAAA,MACA,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ;AAAA,QACV;AAAA,MACF;AAAA,MACA,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,mBAAmB,QAAQ,oBAAoB;AAAA,QAC3E,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,oBAAoB;AAAA,MAC1E;AAAA,IACF;AAAA,IACA,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aAAa;AAAA,MACb,aAAa;AAAA,QACX,aAAa;AAAA,QACb,QAAQ;AAAA,MACV;AAAA,MACA,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ;AAAA,QACV;AAAA,MACF;AAAA,MACA,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,mBAAmB,QAAQ,oBAAoB;AAAA,QAC3E,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,oBAAoB;AAAA,QACxE,EAAE,QAAQ,KAAK,aAAa,2BAA2B,QAAQ,oBAAoB;AAAA,MACrF;AAAA,IACF;AAAA,IACA,QAAQ;AAAA,MACN,SAAS;AAAA,MACT,aAAa;AAAA,MACb,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,0BAA0B,EAAE,CAAC;AAAA,MAC9E,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,yBAAyB,QAAQ,iBAAiB;AAAA,MAChF;AAAA,MACA,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,sBAAsB,QAAQ,oBAAoB;AAAA,QAC9E,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,oBAAoB;AAAA,QACxE,EAAE,QAAQ,KAAK,aAAa,2BAA2B,QAAQ,oBAAoB;AAAA,MACrF;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/business_rules/api/sets/route.js

@@ -2,6 +2,8 @@ import { NextResponse } from "next/server";
 import { z } from "zod";
 import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
 import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
+import { isCrudHttpError } from "@open-mercato/shared/lib/crud/errors";
+import { enforceCommandOptimisticLock } from "@open-mercato/shared/lib/crud/optimistic-lock-command";
 import { RuleSet } from "../../data/entities.js";
 import { escapeLikePattern } from "@open-mercato/shared/lib/db/escapeLikePattern";
 import {
@@ -182,6 +184,19 @@ async function PUT(req) {
   if (!ruleSet) {
     return NextResponse.json({ error: "Rule set not found" }, { status: 404 });
   }
+  try {
+    enforceCommandOptimisticLock({
+      resourceKind: "business_rules.ruleSet",
+      resourceId: ruleSet.id,
+      current: ruleSet.updatedAt ?? null,
+      request: req
+    });
+  } catch (err) {
+    if (isCrudHttpError(err)) {
+      return NextResponse.json(err.body, { status: err.status });
+    }
+    throw err;
+  }
   em.assign(ruleSet, parsed.data);
   await em.persist(ruleSet).flush();
   return NextResponse.json({ ok: true });
@@ -207,6 +222,19 @@ async function DELETE(req) {
   if (!ruleSet) {
     return NextResponse.json({ error: "Rule set not found" }, { status: 404 });
   }
+  try {
+    enforceCommandOptimisticLock({
+      resourceKind: "business_rules.ruleSet",
+      resourceId: ruleSet.id,
+      current: ruleSet.updatedAt ?? null,
+      request: req
+    });
+  } catch (err) {
+    if (isCrudHttpError(err)) {
+      return NextResponse.json(err.body, { status: err.status });
+    }
+    throw err;
+  }
   ruleSet.deletedAt = /* @__PURE__ */ new Date();
   await em.persist(ruleSet).flush();
   return NextResponse.json({ ok: true });

package/dist/modules/business_rules/api/sets/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../src/modules/business_rules/api/sets/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { RuleSet } from '../../data/entities'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { escapeLikePattern } from '@open-mercato/shared/lib/db/escapeLikePattern'\nimport {\n  createRuleSetSchema,\n  updateRuleSetSchema,\n} from '../../data/validators'\n\nconst querySchema = z.looseObject({\n  id: z.string().uuid().optional(),\n  page: z.coerce.number().min(1).default(1),\n  pageSize: z.coerce.number().min(1).max(100).default(50),\n  search: z.string().optional(),\n  setId: z.string().optional(),\n  enabled: z.coerce.boolean().optional(),\n  sortField: z.string().optional(),\n  sortDir: z.enum(['asc', 'desc']).optional().default('asc'),\n})\n\nconst ruleSetListItemSchema = z.object({\n  id: z.string().uuid(),\n  setId: z.string(),\n  setName: z.string(),\n  description: z.string().nullable(),\n  enabled: z.boolean(),\n  tenantId: z.string().uuid(),\n  organizationId: z.string().uuid(),\n  createdBy: z.string().nullable(),\n  updatedBy: z.string().nullable(),\n  createdAt: z.string(),\n  updatedAt: z.string(),\n})\n\nconst ruleSetListResponseSchema = z.object({\n  items: z.array(ruleSetListItemSchema),\n  total: z.number().int().nonnegative(),\n  totalPages: z.number().int().positive(),\n})\n\nconst ruleSetCreateResponseSchema = z.object({\n  id: z.string().uuid(),\n})\n\nconst okResponseSchema = z.object({\n  ok: z.literal(true),\n})\n\nconst errorResponseSchema = z.object({\n  error: z.string(),\n})\n\nconst routeMetadata = {\n  GET: { requireAuth: true, requireFeatures: ['business_rules.view'] },\n  POST: { requireAuth: true, requireFeatures: ['business_rules.manage_sets'] },\n  PUT: { requireAuth: true, requireFeatures: ['business_rules.manage_sets'] },\n  DELETE: { requireAuth: true, requireFeatures: ['business_rules.manage_sets'] },\n}\n\nexport const metadata = routeMetadata\n\nexport async function GET(req: Request) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n\n  const url = new URL(req.url)\n  const parsed = querySchema.safeParse({\n    id: url.searchParams.get('id') || undefined,\n    page: url.searchParams.get('page') || undefined,\n    pageSize: url.searchParams.get('pageSize') || undefined,\n    search: url.searchParams.get('search') || undefined,\n    setId: url.searchParams.get('setId') || undefined,\n    enabled: url.searchParams.get('enabled') || undefined,\n    sortField: url.searchParams.get('sortField') || undefined,\n    sortDir: url.searchParams.get('sortDir') || undefined,\n  })\n\n  if (!parsed.success) {\n    return NextResponse.json({ error: 'Invalid query parameters' }, { status: 400 })\n  }\n\n  const container = await createRequestContainer()\n  const em = container.resolve('em') as EntityManager\n\n  const { id, page, pageSize, search, setId, enabled, sortField, sortDir } = parsed.data\n\n  const filters: Record<string, any> = {\n    tenantId: auth.tenantId,\n    organizationId: auth.orgId,\n    deletedAt: null,\n  }\n\n  if (id) filters.id = id\n  if (setId) filters.setId = { $ilike: `%${escapeLikePattern(setId)}%` }\n  if (search) filters.setName = { $ilike: `%${escapeLikePattern(search)}%` }\n  if (enabled !== undefined) filters.enabled = enabled\n\n  const sortFieldMap: Record<string, string> = {\n    setId: 'setId',\n    setName: 'setName',\n    enabled: 'enabled',\n    createdAt: 'createdAt',\n    updatedAt: 'updatedAt',\n  }\n\n  const orderByField = sortField && sortFieldMap[sortField] ? sortFieldMap[sortField] : 'setId'\n  const orderBy = { [orderByField]: sortDir }\n\n  const [rows, count] = await em.findAndCount(\n    RuleSet,\n    filters,\n    {\n      limit: pageSize,\n      offset: (page - 1) * pageSize,\n      orderBy,\n    }\n  )\n\n  const items = rows.map((set) => ({\n    id: set.id,\n    setId: set.setId,\n    setName: set.setName,\n    description: set.description ?? null,\n    enabled: set.enabled,\n    tenantId: set.tenantId,\n    organizationId: set.organizationId,\n    createdBy: set.createdBy ?? null,\n    updatedBy: set.updatedBy ?? null,\n    createdAt: set.createdAt.toISOString(),\n    updatedAt: set.updatedAt.toISOString(),\n  }))\n\n  const totalPages = Math.max(1, Math.ceil(count / pageSize))\n\n  return NextResponse.json({ items, total: count, totalPages })\n}\n\nexport async function POST(req: Request) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n\n  const container = await createRequestContainer()\n  const em = container.resolve('em') as EntityManager\n\n  let body: any\n  try {\n    body = await req.json()\n  } catch {\n    return NextResponse.json({ error: 'Invalid JSON body' }, { status: 400 })\n  }\n\n  const payload = {\n    ...body,\n    tenantId: auth.tenantId,\n    organizationId: auth.orgId,\n    createdBy: auth.sub ?? auth.email ?? null,\n  }\n\n  const parsed = createRuleSetSchema.safeParse(payload)\n  if (!parsed.success) {\n    const errors = parsed.error.issues.map(e => `${e.path.join('.')}: ${e.message}`)\n    return NextResponse.json({ error: `Validation failed: ${errors.join(', ')}` }, { status: 400 })\n  }\n\n  const ruleSet = em.create(RuleSet, parsed.data)\n  await em.persist(ruleSet).flush()\n\n  return NextResponse.json({ id: ruleSet.id }, { status: 201 })\n}\n\nexport async function PUT(req: Request) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n\n  const container = await createRequestContainer()\n  const em = container.resolve('em') as EntityManager\n\n  let body: any\n  try {\n    body = await req.json()\n  } catch {\n    return NextResponse.json({ error: 'Invalid JSON body' }, { status: 400 })\n  }\n\n  if (!body.id) {\n    return NextResponse.json({ error: 'Rule set id is required' }, { status: 400 })\n  }\n\n  const payload = {\n    ...body,\n    updatedBy: auth.sub ?? auth.email ?? null,\n  }\n  delete (payload as Record<string, unknown>).tenantId\n  delete (payload as Record<string, unknown>).organizationId\n  delete (payload as Record<string, unknown>).createdBy\n\n  const parsed = updateRuleSetSchema.safeParse(payload)\n  if (!parsed.success) {\n    const errors = parsed.error.issues.map(e => `${e.path.join('.')}: ${e.message}`)\n    return NextResponse.json({ error: `Validation failed: ${errors.join(', ')}` }, { status: 400 })\n  }\n\n  const ruleSet = await em.findOne(RuleSet, {\n    id: parsed.data.id,\n    tenantId: auth.tenantId,\n    organizationId: auth.orgId,\n    deletedAt: null,\n  })\n\n  if (!ruleSet) {\n    return NextResponse.json({ error: 'Rule set not found' }, { status: 404 })\n  }\n\n  em.assign(ruleSet, parsed.data)\n  await em.persist(ruleSet).flush()\n\n  return NextResponse.json({ ok: true })\n}\n\nexport async function DELETE(req: Request) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n\n  const url = new URL(req.url)\n  const id = url.searchParams.get('id')\n\n  if (!id) {\n    return NextResponse.json({ error: 'Rule set id is required' }, { status: 400 })\n  }\n\n  const container = await createRequestContainer()\n  const em = container.resolve('em') as EntityManager\n\n  const ruleSet = await em.findOne(RuleSet, {\n    id,\n    tenantId: auth.tenantId,\n    organizationId: auth.orgId,\n    deletedAt: null,\n  })\n\n  if (!ruleSet) {\n    return NextResponse.json({ error: 'Rule set not found' }, { status: 404 })\n  }\n\n  ruleSet.deletedAt = new Date()\n  await em.persist(ruleSet).flush()\n\n  return NextResponse.json({ ok: true })\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Business Rules',\n  summary: 'Rule set management',\n  methods: {\n    GET: {\n      summary: 'List rule sets',\n      description: 'Returns rule sets for the current tenant and organization with filtering and pagination.',\n      query: querySchema,\n      responses: [\n        { status: 200, description: 'Rule sets collection', schema: ruleSetListResponseSchema },\n      ],\n      errors: [\n        { status: 400, description: 'Invalid query parameters', schema: errorResponseSchema },\n        { status: 401, description: 'Unauthorized', schema: errorResponseSchema },\n      ],\n    },\n    POST: {\n      summary: 'Create rule set',\n      description: 'Creates a new rule set for organizing business rules.',\n      requestBody: {\n        contentType: 'application/json',\n        schema: createRuleSetSchema,\n      },\n      responses: [\n        {\n          status: 201,\n          description: 'Rule set created',\n          schema: ruleSetCreateResponseSchema,\n        },\n      ],\n      errors: [\n        { status: 400, description: 'Invalid payload', schema: errorResponseSchema },\n        { status: 401, description: 'Unauthorized', schema: errorResponseSchema },\n      ],\n    },\n    PUT: {\n      summary: 'Update rule set',\n      description: 'Updates an existing rule set.',\n      requestBody: {\n        contentType: 'application/json',\n        schema: updateRuleSetSchema,\n      },\n      responses: [\n        {\n          status: 200,\n          description: 'Rule set updated',\n          schema: okResponseSchema,\n        },\n      ],\n      errors: [\n        { status: 400, description: 'Invalid payload', schema: errorResponseSchema },\n        { status: 401, description: 'Unauthorized', schema: errorResponseSchema },\n        { status: 404, description: 'Rule set not found', schema: errorResponseSchema },\n      ],\n    },\n    DELETE: {\n      summary: 'Delete rule set',\n      description: 'Soft deletes a rule set by identifier.',\n      query: z.object({ id: z.string().uuid().describe('Rule set identifier') }),\n      responses: [\n        { status: 200, description: 'Rule set deleted', schema: okResponseSchema },\n      ],\n      errors: [\n        { status: 400, description: 'Invalid identifier', schema: errorResponseSchema },\n        { status: 401, description: 'Unauthorized', schema: errorResponseSchema },\n        { status: 404, description: 'Rule set not found', schema: errorResponseSchema },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAElB,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AACvC,SAAS,eAAe;AAExB,SAAS,yBAAyB;AAClC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAEP,MAAM,cAAc,EAAE,YAAY;AAAA,EAChC,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC/B,MAAM,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,QAAQ,CAAC;AAAA,EACxC,UAAU,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,QAAQ,EAAE;AAAA,EACtD,QAAQ,EAAE,OAAO,EAAE,SAAS;AAAA,EAC5B,OAAO,EAAE,OAAO,EAAE,SAAS;AAAA,EAC3B,SAAS,EAAE,OAAO,QAAQ,EAAE,SAAS;AAAA,EACrC,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,SAAS,EAAE,KAAK,CAAC,OAAO,MAAM,CAAC,EAAE,SAAS,EAAE,QAAQ,KAAK;AAC3D,CAAC;AAED,MAAM,wBAAwB,EAAE,OAAO;AAAA,EACrC,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,OAAO,EAAE,OAAO;AAAA,EAChB,SAAS,EAAE,OAAO;AAAA,EAClB,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,EACjC,SAAS,EAAE,QAAQ;AAAA,EACnB,UAAU,EAAE,OAAO,EAAE,KAAK;AAAA,EAC1B,gBAAgB,EAAE,OAAO,EAAE,KAAK;AAAA,EAChC,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,WAAW,EAAE,OAAO;AAAA,EACpB,WAAW,EAAE,OAAO;AACtB,CAAC;AAED,MAAM,4BAA4B,EAAE,OAAO;AAAA,EACzC,OAAO,EAAE,MAAM,qBAAqB;AAAA,EACpC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY;AAAA,EACpC,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS;AACxC,CAAC;AAED,MAAM,8BAA8B,EAAE,OAAO;AAAA,EAC3C,IAAI,EAAE,OAAO,EAAE,KAAK;AACtB,CAAC;AAED,MAAM,mBAAmB,EAAE,OAAO;AAAA,EAChC,IAAI,EAAE,QAAQ,IAAI;AACpB,CAAC;AAED,MAAM,sBAAsB,EAAE,OAAO;AAAA,EACnC,OAAO,EAAE,OAAO;AAClB,CAAC;AAED,MAAM,gBAAgB;AAAA,EACpB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,qBAAqB,EAAE;AAAA,EACnE,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,4BAA4B,EAAE;AAAA,EAC3E,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,4BAA4B,EAAE;AAAA,EAC1E,QAAQ,EAAE,aAAa,MAAM,iBAAiB,CAAC,4BAA4B,EAAE;AAC/E;AAEO,MAAM,WAAW;AAExB,eAAsB,IAAI,KAAc;AACtC,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM;AACT,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAEA,QAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,QAAM,SAAS,YAAY,UAAU;AAAA,IACnC,IAAI,IAAI,aAAa,IAAI,IAAI,KAAK;AAAA,IAClC,MAAM,IAAI,aAAa,IAAI,MAAM,KAAK;AAAA,IACtC,UAAU,IAAI,aAAa,IAAI,UAAU,KAAK;AAAA,IAC9C,QAAQ,IAAI,aAAa,IAAI,QAAQ,KAAK;AAAA,IAC1C,OAAO,IAAI,aAAa,IAAI,OAAO,KAAK;AAAA,IACxC,SAAS,IAAI,aAAa,IAAI,SAAS,KAAK;AAAA,IAC5C,WAAW,IAAI,aAAa,IAAI,WAAW,KAAK;AAAA,IAChD,SAAS,IAAI,aAAa,IAAI,SAAS,KAAK;AAAA,EAC9C,CAAC;AAED,MAAI,CAAC,OAAO,SAAS;AACnB,WAAO,aAAa,KAAK,EAAE,OAAO,2BAA2B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACjF;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,KAAK,UAAU,QAAQ,IAAI;AAEjC,QAAM,EAAE,IAAI,MAAM,UAAU,QAAQ,OAAO,SAAS,WAAW,QAAQ,IAAI,OAAO;AAElF,QAAM,UAA+B;AAAA,IACnC,UAAU,KAAK;AAAA,IACf,gBAAgB,KAAK;AAAA,IACrB,WAAW;AAAA,EACb;AAEA,MAAI,GAAI,SAAQ,KAAK;AACrB,MAAI,MAAO,SAAQ,QAAQ,EAAE,QAAQ,IAAI,kBAAkB,KAAK,CAAC,IAAI;AACrE,MAAI,OAAQ,SAAQ,UAAU,EAAE,QAAQ,IAAI,kBAAkB,MAAM,CAAC,IAAI;AACzE,MAAI,YAAY,OAAW,SAAQ,UAAU;AAE7C,QAAM,eAAuC;AAAA,IAC3C,OAAO;AAAA,IACP,SAAS;AAAA,IACT,SAAS;AAAA,IACT,WAAW;AAAA,IACX,WAAW;AAAA,EACb;AAEA,QAAM,eAAe,aAAa,aAAa,SAAS,IAAI,aAAa,SAAS,IAAI;AACtF,QAAM,UAAU,EAAE,CAAC,YAAY,GAAG,QAAQ;AAE1C,QAAM,CAAC,MAAM,KAAK,IAAI,MAAM,GAAG;AAAA,IAC7B;AAAA,IACA;AAAA,IACA;AAAA,MACE,OAAO;AAAA,MACP,SAAS,OAAO,KAAK;AAAA,MACrB;AAAA,IACF;AAAA,EACF;AAEA,QAAM,QAAQ,KAAK,IAAI,CAAC,SAAS;AAAA,IAC/B,IAAI,IAAI;AAAA,IACR,OAAO,IAAI;AAAA,IACX,SAAS,IAAI;AAAA,IACb,aAAa,IAAI,eAAe;AAAA,IAChC,SAAS,IAAI;AAAA,IACb,UAAU,IAAI;AAAA,IACd,gBAAgB,IAAI;AAAA,IACpB,WAAW,IAAI,aAAa;AAAA,IAC5B,WAAW,IAAI,aAAa;AAAA,IAC5B,WAAW,IAAI,UAAU,YAAY;AAAA,IACrC,WAAW,IAAI,UAAU,YAAY;AAAA,EACvC,EAAE;AAEF,QAAM,aAAa,KAAK,IAAI,GAAG,KAAK,KAAK,QAAQ,QAAQ,CAAC;AAE1D,SAAO,aAAa,KAAK,EAAE,OAAO,OAAO,OAAO,WAAW,CAAC;AAC9D;AAEA,eAAsB,KAAK,KAAc;AACvC,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM;AACT,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,KAAK,UAAU,QAAQ,IAAI;AAEjC,MAAI;AACJ,MAAI;AACF,WAAO,MAAM,IAAI,KAAK;AAAA,EACxB,QAAQ;AACN,WAAO,aAAa,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC1E;AAEA,QAAM,UAAU;AAAA,IACd,GAAG;AAAA,IACH,UAAU,KAAK;AAAA,IACf,gBAAgB,KAAK;AAAA,IACrB,WAAW,KAAK,OAAO,KAAK,SAAS;AAAA,EACvC;AAEA,QAAM,SAAS,oBAAoB,UAAU,OAAO;AACpD,MAAI,CAAC,OAAO,SAAS;AACnB,UAAM,SAAS,OAAO,MAAM,OAAO,IAAI,OAAK,GAAG,EAAE,KAAK,KAAK,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE;AAC/E,WAAO,aAAa,KAAK,EAAE,OAAO,sBAAsB,OAAO,KAAK,IAAI,CAAC,GAAG,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAChG;AAEA,QAAM,UAAU,GAAG,OAAO,SAAS,OAAO,IAAI;AAC9C,QAAM,GAAG,QAAQ,OAAO,EAAE,MAAM;AAEhC,SAAO,aAAa,KAAK,EAAE,IAAI,QAAQ,GAAG,GAAG,EAAE,QAAQ,IAAI,CAAC;AAC9D;AAEA,eAAsB,IAAI,KAAc;AACtC,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM;AACT,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,KAAK,UAAU,QAAQ,IAAI;AAEjC,MAAI;AACJ,MAAI;AACF,WAAO,MAAM,IAAI,KAAK;AAAA,EACxB,QAAQ;AACN,WAAO,aAAa,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC1E;AAEA,MAAI,CAAC,KAAK,IAAI;AACZ,WAAO,aAAa,KAAK,EAAE,OAAO,0BAA0B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAChF;AAEA,QAAM,UAAU;AAAA,IACd,GAAG;AAAA,IACH,WAAW,KAAK,OAAO,KAAK,SAAS;AAAA,EACvC;AACA,SAAQ,QAAoC;AAC5C,SAAQ,QAAoC;AAC5C,SAAQ,QAAoC;AAE5C,QAAM,SAAS,oBAAoB,UAAU,OAAO;AACpD,MAAI,CAAC,OAAO,SAAS;AACnB,UAAM,SAAS,OAAO,MAAM,OAAO,IAAI,OAAK,GAAG,EAAE,KAAK,KAAK,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE;AAC/E,WAAO,aAAa,KAAK,EAAE,OAAO,sBAAsB,OAAO,KAAK,IAAI,CAAC,GAAG,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAChG;AAEA,QAAM,UAAU,MAAM,GAAG,QAAQ,SAAS;AAAA,IACxC,IAAI,OAAO,KAAK;AAAA,IAChB,UAAU,KAAK;AAAA,IACf,gBAAgB,KAAK;AAAA,IACrB,WAAW;AAAA,EACb,CAAC;AAED,MAAI,CAAC,SAAS;AACZ,WAAO,aAAa,KAAK,EAAE,OAAO,qBAAqB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC3E;AAEA,KAAG,OAAO,SAAS,OAAO,IAAI;AAC9B,QAAM,GAAG,QAAQ,OAAO,EAAE,MAAM;AAEhC,SAAO,aAAa,KAAK,EAAE,IAAI,KAAK,CAAC;AACvC;AAEA,eAAsB,OAAO,KAAc;AACzC,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM;AACT,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAEA,QAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,QAAM,KAAK,IAAI,aAAa,IAAI,IAAI;AAEpC,MAAI,CAAC,IAAI;AACP,WAAO,aAAa,KAAK,EAAE,OAAO,0BAA0B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAChF;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,KAAK,UAAU,QAAQ,IAAI;AAEjC,QAAM,UAAU,MAAM,GAAG,QAAQ,SAAS;AAAA,IACxC;AAAA,IACA,UAAU,KAAK;AAAA,IACf,gBAAgB,KAAK;AAAA,IACrB,WAAW;AAAA,EACb,CAAC;AAED,MAAI,CAAC,SAAS;AACZ,WAAO,aAAa,KAAK,EAAE,OAAO,qBAAqB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC3E;AAEA,UAAQ,YAAY,oBAAI,KAAK;AAC7B,QAAM,GAAG,QAAQ,OAAO,EAAE,MAAM;AAEhC,SAAO,aAAa,KAAK,EAAE,IAAI,KAAK,CAAC;AACvC;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aAAa;AAAA,MACb,OAAO;AAAA,MACP,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,wBAAwB,QAAQ,0BAA0B;AAAA,MACxF;AAAA,MACA,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,4BAA4B,QAAQ,oBAAoB;AAAA,QACpF,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,oBAAoB;AAAA,MAC1E;AAAA,IACF;AAAA,IACA,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa;AAAA,MACb,aAAa;AAAA,QACX,aAAa;AAAA,QACb,QAAQ;AAAA,MACV;AAAA,MACA,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ;AAAA,QACV;AAAA,MACF;AAAA,MACA,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,mBAAmB,QAAQ,oBAAoB;AAAA,QAC3E,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,oBAAoB;AAAA,MAC1E;AAAA,IACF;AAAA,IACA,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aAAa;AAAA,MACb,aAAa;AAAA,QACX,aAAa;AAAA,QACb,QAAQ;AAAA,MACV;AAAA,MACA,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ;AAAA,QACV;AAAA,MACF;AAAA,MACA,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,mBAAmB,QAAQ,oBAAoB;AAAA,QAC3E,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,oBAAoB;AAAA,QACxE,EAAE,QAAQ,KAAK,aAAa,sBAAsB,QAAQ,oBAAoB;AAAA,MAChF;AAAA,IACF;AAAA,IACA,QAAQ;AAAA,MACN,SAAS;AAAA,MACT,aAAa;AAAA,MACb,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,qBAAqB,EAAE,CAAC;AAAA,MACzE,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,oBAAoB,QAAQ,iBAAiB;AAAA,MAC3E;AAAA,MACA,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,sBAAsB,QAAQ,oBAAoB;AAAA,QAC9E,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,oBAAoB;AAAA,QACxE,EAAE,QAAQ,KAAK,aAAa,sBAAsB,QAAQ,oBAAoB;AAAA,MAChF;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { enforceCommandOptimisticLock } from '@open-mercato/shared/lib/crud/optimistic-lock-command'\nimport { RuleSet } from '../../data/entities'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { escapeLikePattern } from '@open-mercato/shared/lib/db/escapeLikePattern'\nimport {\n  createRuleSetSchema,\n  updateRuleSetSchema,\n} from '../../data/validators'\n\nconst querySchema = z.looseObject({\n  id: z.string().uuid().optional(),\n  page: z.coerce.number().min(1).default(1),\n  pageSize: z.coerce.number().min(1).max(100).default(50),\n  search: z.string().optional(),\n  setId: z.string().optional(),\n  enabled: z.coerce.boolean().optional(),\n  sortField: z.string().optional(),\n  sortDir: z.enum(['asc', 'desc']).optional().default('asc'),\n})\n\nconst ruleSetListItemSchema = z.object({\n  id: z.string().uuid(),\n  setId: z.string(),\n  setName: z.string(),\n  description: z.string().nullable(),\n  enabled: z.boolean(),\n  tenantId: z.string().uuid(),\n  organizationId: z.string().uuid(),\n  createdBy: z.string().nullable(),\n  updatedBy: z.string().nullable(),\n  createdAt: z.string(),\n  updatedAt: z.string(),\n})\n\nconst ruleSetListResponseSchema = z.object({\n  items: z.array(ruleSetListItemSchema),\n  total: z.number().int().nonnegative(),\n  totalPages: z.number().int().positive(),\n})\n\nconst ruleSetCreateResponseSchema = z.object({\n  id: z.string().uuid(),\n})\n\nconst okResponseSchema = z.object({\n  ok: z.literal(true),\n})\n\nconst errorResponseSchema = z.object({\n  error: z.string(),\n})\n\nconst routeMetadata = {\n  GET: { requireAuth: true, requireFeatures: ['business_rules.view'] },\n  POST: { requireAuth: true, requireFeatures: ['business_rules.manage_sets'] },\n  PUT: { requireAuth: true, requireFeatures: ['business_rules.manage_sets'] },\n  DELETE: { requireAuth: true, requireFeatures: ['business_rules.manage_sets'] },\n}\n\nexport const metadata = routeMetadata\n\nexport async function GET(req: Request) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n\n  const url = new URL(req.url)\n  const parsed = querySchema.safeParse({\n    id: url.searchParams.get('id') || undefined,\n    page: url.searchParams.get('page') || undefined,\n    pageSize: url.searchParams.get('pageSize') || undefined,\n    search: url.searchParams.get('search') || undefined,\n    setId: url.searchParams.get('setId') || undefined,\n    enabled: url.searchParams.get('enabled') || undefined,\n    sortField: url.searchParams.get('sortField') || undefined,\n    sortDir: url.searchParams.get('sortDir') || undefined,\n  })\n\n  if (!parsed.success) {\n    return NextResponse.json({ error: 'Invalid query parameters' }, { status: 400 })\n  }\n\n  const container = await createRequestContainer()\n  const em = container.resolve('em') as EntityManager\n\n  const { id, page, pageSize, search, setId, enabled, sortField, sortDir } = parsed.data\n\n  const filters: Record<string, any> = {\n    tenantId: auth.tenantId,\n    organizationId: auth.orgId,\n    deletedAt: null,\n  }\n\n  if (id) filters.id = id\n  if (setId) filters.setId = { $ilike: `%${escapeLikePattern(setId)}%` }\n  if (search) filters.setName = { $ilike: `%${escapeLikePattern(search)}%` }\n  if (enabled !== undefined) filters.enabled = enabled\n\n  const sortFieldMap: Record<string, string> = {\n    setId: 'setId',\n    setName: 'setName',\n    enabled: 'enabled',\n    createdAt: 'createdAt',\n    updatedAt: 'updatedAt',\n  }\n\n  const orderByField = sortField && sortFieldMap[sortField] ? sortFieldMap[sortField] : 'setId'\n  const orderBy = { [orderByField]: sortDir }\n\n  const [rows, count] = await em.findAndCount(\n    RuleSet,\n    filters,\n    {\n      limit: pageSize,\n      offset: (page - 1) * pageSize,\n      orderBy,\n    }\n  )\n\n  const items = rows.map((set) => ({\n    id: set.id,\n    setId: set.setId,\n    setName: set.setName,\n    description: set.description ?? null,\n    enabled: set.enabled,\n    tenantId: set.tenantId,\n    organizationId: set.organizationId,\n    createdBy: set.createdBy ?? null,\n    updatedBy: set.updatedBy ?? null,\n    createdAt: set.createdAt.toISOString(),\n    updatedAt: set.updatedAt.toISOString(),\n  }))\n\n  const totalPages = Math.max(1, Math.ceil(count / pageSize))\n\n  return NextResponse.json({ items, total: count, totalPages })\n}\n\nexport async function POST(req: Request) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n\n  const container = await createRequestContainer()\n  const em = container.resolve('em') as EntityManager\n\n  let body: any\n  try {\n    body = await req.json()\n  } catch {\n    return NextResponse.json({ error: 'Invalid JSON body' }, { status: 400 })\n  }\n\n  const payload = {\n    ...body,\n    tenantId: auth.tenantId,\n    organizationId: auth.orgId,\n    createdBy: auth.sub ?? auth.email ?? null,\n  }\n\n  const parsed = createRuleSetSchema.safeParse(payload)\n  if (!parsed.success) {\n    const errors = parsed.error.issues.map(e => `${e.path.join('.')}: ${e.message}`)\n    return NextResponse.json({ error: `Validation failed: ${errors.join(', ')}` }, { status: 400 })\n  }\n\n  const ruleSet = em.create(RuleSet, parsed.data)\n  await em.persist(ruleSet).flush()\n\n  return NextResponse.json({ id: ruleSet.id }, { status: 201 })\n}\n\nexport async function PUT(req: Request) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n\n  const container = await createRequestContainer()\n  const em = container.resolve('em') as EntityManager\n\n  let body: any\n  try {\n    body = await req.json()\n  } catch {\n    return NextResponse.json({ error: 'Invalid JSON body' }, { status: 400 })\n  }\n\n  if (!body.id) {\n    return NextResponse.json({ error: 'Rule set id is required' }, { status: 400 })\n  }\n\n  const payload = {\n    ...body,\n    updatedBy: auth.sub ?? auth.email ?? null,\n  }\n  delete (payload as Record<string, unknown>).tenantId\n  delete (payload as Record<string, unknown>).organizationId\n  delete (payload as Record<string, unknown>).createdBy\n\n  const parsed = updateRuleSetSchema.safeParse(payload)\n  if (!parsed.success) {\n    const errors = parsed.error.issues.map(e => `${e.path.join('.')}: ${e.message}`)\n    return NextResponse.json({ error: `Validation failed: ${errors.join(', ')}` }, { status: 400 })\n  }\n\n  const ruleSet = await em.findOne(RuleSet, {\n    id: parsed.data.id,\n    tenantId: auth.tenantId,\n    organizationId: auth.orgId,\n    deletedAt: null,\n  })\n\n  if (!ruleSet) {\n    return NextResponse.json({ error: 'Rule set not found' }, { status: 404 })\n  }\n\n  try {\n    enforceCommandOptimisticLock({\n      resourceKind: 'business_rules.ruleSet',\n      resourceId: ruleSet.id,\n      current: ruleSet.updatedAt ?? null,\n      request: req,\n    })\n  } catch (err) {\n    if (isCrudHttpError(err)) {\n      return NextResponse.json(err.body, { status: err.status })\n    }\n    throw err\n  }\n\n  em.assign(ruleSet, parsed.data)\n  await em.persist(ruleSet).flush()\n\n  return NextResponse.json({ ok: true })\n}\n\nexport async function DELETE(req: Request) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n\n  const url = new URL(req.url)\n  const id = url.searchParams.get('id')\n\n  if (!id) {\n    return NextResponse.json({ error: 'Rule set id is required' }, { status: 400 })\n  }\n\n  const container = await createRequestContainer()\n  const em = container.resolve('em') as EntityManager\n\n  const ruleSet = await em.findOne(RuleSet, {\n    id,\n    tenantId: auth.tenantId,\n    organizationId: auth.orgId,\n    deletedAt: null,\n  })\n\n  if (!ruleSet) {\n    return NextResponse.json({ error: 'Rule set not found' }, { status: 404 })\n  }\n\n  try {\n    enforceCommandOptimisticLock({\n      resourceKind: 'business_rules.ruleSet',\n      resourceId: ruleSet.id,\n      current: ruleSet.updatedAt ?? null,\n      request: req,\n    })\n  } catch (err) {\n    if (isCrudHttpError(err)) {\n      return NextResponse.json(err.body, { status: err.status })\n    }\n    throw err\n  }\n\n  ruleSet.deletedAt = new Date()\n  await em.persist(ruleSet).flush()\n\n  return NextResponse.json({ ok: true })\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Business Rules',\n  summary: 'Rule set management',\n  methods: {\n    GET: {\n      summary: 'List rule sets',\n      description: 'Returns rule sets for the current tenant and organization with filtering and pagination.',\n      query: querySchema,\n      responses: [\n        { status: 200, description: 'Rule sets collection', schema: ruleSetListResponseSchema },\n      ],\n      errors: [\n        { status: 400, description: 'Invalid query parameters', schema: errorResponseSchema },\n        { status: 401, description: 'Unauthorized', schema: errorResponseSchema },\n      ],\n    },\n    POST: {\n      summary: 'Create rule set',\n      description: 'Creates a new rule set for organizing business rules.',\n      requestBody: {\n        contentType: 'application/json',\n        schema: createRuleSetSchema,\n      },\n      responses: [\n        {\n          status: 201,\n          description: 'Rule set created',\n          schema: ruleSetCreateResponseSchema,\n        },\n      ],\n      errors: [\n        { status: 400, description: 'Invalid payload', schema: errorResponseSchema },\n        { status: 401, description: 'Unauthorized', schema: errorResponseSchema },\n      ],\n    },\n    PUT: {\n      summary: 'Update rule set',\n      description: 'Updates an existing rule set.',\n      requestBody: {\n        contentType: 'application/json',\n        schema: updateRuleSetSchema,\n      },\n      responses: [\n        {\n          status: 200,\n          description: 'Rule set updated',\n          schema: okResponseSchema,\n        },\n      ],\n      errors: [\n        { status: 400, description: 'Invalid payload', schema: errorResponseSchema },\n        { status: 401, description: 'Unauthorized', schema: errorResponseSchema },\n        { status: 404, description: 'Rule set not found', schema: errorResponseSchema },\n      ],\n    },\n    DELETE: {\n      summary: 'Delete rule set',\n      description: 'Soft deletes a rule set by identifier.',\n      query: z.object({ id: z.string().uuid().describe('Rule set identifier') }),\n      responses: [\n        { status: 200, description: 'Rule set deleted', schema: okResponseSchema },\n      ],\n      errors: [\n        { status: 400, description: 'Invalid identifier', schema: errorResponseSchema },\n        { status: 401, description: 'Unauthorized', schema: errorResponseSchema },\n        { status: 404, description: 'Rule set not found', schema: errorResponseSchema },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAElB,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AACvC,SAAS,uBAAuB;AAChC,SAAS,oCAAoC;AAC7C,SAAS,eAAe;AAExB,SAAS,yBAAyB;AAClC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAEP,MAAM,cAAc,EAAE,YAAY;AAAA,EAChC,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC/B,MAAM,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,QAAQ,CAAC;AAAA,EACxC,UAAU,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,QAAQ,EAAE;AAAA,EACtD,QAAQ,EAAE,OAAO,EAAE,SAAS;AAAA,EAC5B,OAAO,EAAE,OAAO,EAAE,SAAS;AAAA,EAC3B,SAAS,EAAE,OAAO,QAAQ,EAAE,SAAS;AAAA,EACrC,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,SAAS,EAAE,KAAK,CAAC,OAAO,MAAM,CAAC,EAAE,SAAS,EAAE,QAAQ,KAAK;AAC3D,CAAC;AAED,MAAM,wBAAwB,EAAE,OAAO;AAAA,EACrC,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,OAAO,EAAE,OAAO;AAAA,EAChB,SAAS,EAAE,OAAO;AAAA,EAClB,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,EACjC,SAAS,EAAE,QAAQ;AAAA,EACnB,UAAU,EAAE,OAAO,EAAE,KAAK;AAAA,EAC1B,gBAAgB,EAAE,OAAO,EAAE,KAAK;AAAA,EAChC,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,WAAW,EAAE,OAAO;AAAA,EACpB,WAAW,EAAE,OAAO;AACtB,CAAC;AAED,MAAM,4BAA4B,EAAE,OAAO;AAAA,EACzC,OAAO,EAAE,MAAM,qBAAqB;AAAA,EACpC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY;AAAA,EACpC,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS;AACxC,CAAC;AAED,MAAM,8BAA8B,EAAE,OAAO;AAAA,EAC3C,IAAI,EAAE,OAAO,EAAE,KAAK;AACtB,CAAC;AAED,MAAM,mBAAmB,EAAE,OAAO;AAAA,EAChC,IAAI,EAAE,QAAQ,IAAI;AACpB,CAAC;AAED,MAAM,sBAAsB,EAAE,OAAO;AAAA,EACnC,OAAO,EAAE,OAAO;AAClB,CAAC;AAED,MAAM,gBAAgB;AAAA,EACpB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,qBAAqB,EAAE;AAAA,EACnE,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,4BAA4B,EAAE;AAAA,EAC3E,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,4BAA4B,EAAE;AAAA,EAC1E,QAAQ,EAAE,aAAa,MAAM,iBAAiB,CAAC,4BAA4B,EAAE;AAC/E;AAEO,MAAM,WAAW;AAExB,eAAsB,IAAI,KAAc;AACtC,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM;AACT,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAEA,QAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,QAAM,SAAS,YAAY,UAAU;AAAA,IACnC,IAAI,IAAI,aAAa,IAAI,IAAI,KAAK;AAAA,IAClC,MAAM,IAAI,aAAa,IAAI,MAAM,KAAK;AAAA,IACtC,UAAU,IAAI,aAAa,IAAI,UAAU,KAAK;AAAA,IAC9C,QAAQ,IAAI,aAAa,IAAI,QAAQ,KAAK;AAAA,IAC1C,OAAO,IAAI,aAAa,IAAI,OAAO,KAAK;AAAA,IACxC,SAAS,IAAI,aAAa,IAAI,SAAS,KAAK;AAAA,IAC5C,WAAW,IAAI,aAAa,IAAI,WAAW,KAAK;AAAA,IAChD,SAAS,IAAI,aAAa,IAAI,SAAS,KAAK;AAAA,EAC9C,CAAC;AAED,MAAI,CAAC,OAAO,SAAS;AACnB,WAAO,aAAa,KAAK,EAAE,OAAO,2BAA2B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACjF;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,KAAK,UAAU,QAAQ,IAAI;AAEjC,QAAM,EAAE,IAAI,MAAM,UAAU,QAAQ,OAAO,SAAS,WAAW,QAAQ,IAAI,OAAO;AAElF,QAAM,UAA+B;AAAA,IACnC,UAAU,KAAK;AAAA,IACf,gBAAgB,KAAK;AAAA,IACrB,WAAW;AAAA,EACb;AAEA,MAAI,GAAI,SAAQ,KAAK;AACrB,MAAI,MAAO,SAAQ,QAAQ,EAAE,QAAQ,IAAI,kBAAkB,KAAK,CAAC,IAAI;AACrE,MAAI,OAAQ,SAAQ,UAAU,EAAE,QAAQ,IAAI,kBAAkB,MAAM,CAAC,IAAI;AACzE,MAAI,YAAY,OAAW,SAAQ,UAAU;AAE7C,QAAM,eAAuC;AAAA,IAC3C,OAAO;AAAA,IACP,SAAS;AAAA,IACT,SAAS;AAAA,IACT,WAAW;AAAA,IACX,WAAW;AAAA,EACb;AAEA,QAAM,eAAe,aAAa,aAAa,SAAS,IAAI,aAAa,SAAS,IAAI;AACtF,QAAM,UAAU,EAAE,CAAC,YAAY,GAAG,QAAQ;AAE1C,QAAM,CAAC,MAAM,KAAK,IAAI,MAAM,GAAG;AAAA,IAC7B;AAAA,IACA;AAAA,IACA;AAAA,MACE,OAAO;AAAA,MACP,SAAS,OAAO,KAAK;AAAA,MACrB;AAAA,IACF;AAAA,EACF;AAEA,QAAM,QAAQ,KAAK,IAAI,CAAC,SAAS;AAAA,IAC/B,IAAI,IAAI;AAAA,IACR,OAAO,IAAI;AAAA,IACX,SAAS,IAAI;AAAA,IACb,aAAa,IAAI,eAAe;AAAA,IAChC,SAAS,IAAI;AAAA,IACb,UAAU,IAAI;AAAA,IACd,gBAAgB,IAAI;AAAA,IACpB,WAAW,IAAI,aAAa;AAAA,IAC5B,WAAW,IAAI,aAAa;AAAA,IAC5B,WAAW,IAAI,UAAU,YAAY;AAAA,IACrC,WAAW,IAAI,UAAU,YAAY;AAAA,EACvC,EAAE;AAEF,QAAM,aAAa,KAAK,IAAI,GAAG,KAAK,KAAK,QAAQ,QAAQ,CAAC;AAE1D,SAAO,aAAa,KAAK,EAAE,OAAO,OAAO,OAAO,WAAW,CAAC;AAC9D;AAEA,eAAsB,KAAK,KAAc;AACvC,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM;AACT,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,KAAK,UAAU,QAAQ,IAAI;AAEjC,MAAI;AACJ,MAAI;AACF,WAAO,MAAM,IAAI,KAAK;AAAA,EACxB,QAAQ;AACN,WAAO,aAAa,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC1E;AAEA,QAAM,UAAU;AAAA,IACd,GAAG;AAAA,IACH,UAAU,KAAK;AAAA,IACf,gBAAgB,KAAK;AAAA,IACrB,WAAW,KAAK,OAAO,KAAK,SAAS;AAAA,EACvC;AAEA,QAAM,SAAS,oBAAoB,UAAU,OAAO;AACpD,MAAI,CAAC,OAAO,SAAS;AACnB,UAAM,SAAS,OAAO,MAAM,OAAO,IAAI,OAAK,GAAG,EAAE,KAAK,KAAK,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE;AAC/E,WAAO,aAAa,KAAK,EAAE,OAAO,sBAAsB,OAAO,KAAK,IAAI,CAAC,GAAG,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAChG;AAEA,QAAM,UAAU,GAAG,OAAO,SAAS,OAAO,IAAI;AAC9C,QAAM,GAAG,QAAQ,OAAO,EAAE,MAAM;AAEhC,SAAO,aAAa,KAAK,EAAE,IAAI,QAAQ,GAAG,GAAG,EAAE,QAAQ,IAAI,CAAC;AAC9D;AAEA,eAAsB,IAAI,KAAc;AACtC,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM;AACT,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,KAAK,UAAU,QAAQ,IAAI;AAEjC,MAAI;AACJ,MAAI;AACF,WAAO,MAAM,IAAI,KAAK;AAAA,EACxB,QAAQ;AACN,WAAO,aAAa,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC1E;AAEA,MAAI,CAAC,KAAK,IAAI;AACZ,WAAO,aAAa,KAAK,EAAE,OAAO,0BAA0B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAChF;AAEA,QAAM,UAAU;AAAA,IACd,GAAG;AAAA,IACH,WAAW,KAAK,OAAO,KAAK,SAAS;AAAA,EACvC;AACA,SAAQ,QAAoC;AAC5C,SAAQ,QAAoC;AAC5C,SAAQ,QAAoC;AAE5C,QAAM,SAAS,oBAAoB,UAAU,OAAO;AACpD,MAAI,CAAC,OAAO,SAAS;AACnB,UAAM,SAAS,OAAO,MAAM,OAAO,IAAI,OAAK,GAAG,EAAE,KAAK,KAAK,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE;AAC/E,WAAO,aAAa,KAAK,EAAE,OAAO,sBAAsB,OAAO,KAAK,IAAI,CAAC,GAAG,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAChG;AAEA,QAAM,UAAU,MAAM,GAAG,QAAQ,SAAS;AAAA,IACxC,IAAI,OAAO,KAAK;AAAA,IAChB,UAAU,KAAK;AAAA,IACf,gBAAgB,KAAK;AAAA,IACrB,WAAW;AAAA,EACb,CAAC;AAED,MAAI,CAAC,SAAS;AACZ,WAAO,aAAa,KAAK,EAAE,OAAO,qBAAqB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC3E;AAEA,MAAI;AACF,iCAA6B;AAAA,MAC3B,cAAc;AAAA,MACd,YAAY,QAAQ;AAAA,MACpB,SAAS,QAAQ,aAAa;AAAA,MAC9B,SAAS;AAAA,IACX,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,GAAG;AACxB,aAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,IAC3D;AACA,UAAM;AAAA,EACR;AAEA,KAAG,OAAO,SAAS,OAAO,IAAI;AAC9B,QAAM,GAAG,QAAQ,OAAO,EAAE,MAAM;AAEhC,SAAO,aAAa,KAAK,EAAE,IAAI,KAAK,CAAC;AACvC;AAEA,eAAsB,OAAO,KAAc;AACzC,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM;AACT,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAEA,QAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,QAAM,KAAK,IAAI,aAAa,IAAI,IAAI;AAEpC,MAAI,CAAC,IAAI;AACP,WAAO,aAAa,KAAK,EAAE,OAAO,0BAA0B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAChF;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,KAAK,UAAU,QAAQ,IAAI;AAEjC,QAAM,UAAU,MAAM,GAAG,QAAQ,SAAS;AAAA,IACxC;AAAA,IACA,UAAU,KAAK;AAAA,IACf,gBAAgB,KAAK;AAAA,IACrB,WAAW;AAAA,EACb,CAAC;AAED,MAAI,CAAC,SAAS;AACZ,WAAO,aAAa,KAAK,EAAE,OAAO,qBAAqB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC3E;AAEA,MAAI;AACF,iCAA6B;AAAA,MAC3B,cAAc;AAAA,MACd,YAAY,QAAQ;AAAA,MACpB,SAAS,QAAQ,aAAa;AAAA,MAC9B,SAAS;AAAA,IACX,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,GAAG;AACxB,aAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,IAC3D;AACA,UAAM;AAAA,EACR;AAEA,UAAQ,YAAY,oBAAI,KAAK;AAC7B,QAAM,GAAG,QAAQ,OAAO,EAAE,MAAM;AAEhC,SAAO,aAAa,KAAK,EAAE,IAAI,KAAK,CAAC;AACvC;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aAAa;AAAA,MACb,OAAO;AAAA,MACP,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,wBAAwB,QAAQ,0BAA0B;AAAA,MACxF;AAAA,MACA,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,4BAA4B,QAAQ,oBAAoB;AAAA,QACpF,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,oBAAoB;AAAA,MAC1E;AAAA,IACF;AAAA,IACA,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa;AAAA,MACb,aAAa;AAAA,QACX,aAAa;AAAA,QACb,QAAQ;AAAA,MACV;AAAA,MACA,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ;AAAA,QACV;AAAA,MACF;AAAA,MACA,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,mBAAmB,QAAQ,oBAAoB;AAAA,QAC3E,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,oBAAoB;AAAA,MAC1E;AAAA,IACF;AAAA,IACA,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aAAa;AAAA,MACb,aAAa;AAAA,QACX,aAAa;AAAA,QACb,QAAQ;AAAA,MACV;AAAA,MACA,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ;AAAA,QACV;AAAA,MACF;AAAA,MACA,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,mBAAmB,QAAQ,oBAAoB;AAAA,QAC3E,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,oBAAoB;AAAA,QACxE,EAAE,QAAQ,KAAK,aAAa,sBAAsB,QAAQ,oBAAoB;AAAA,MAChF;AAAA,IACF;AAAA,IACA,QAAQ;AAAA,MACN,SAAS;AAAA,MACT,aAAa;AAAA,MACb,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,qBAAqB,EAAE,CAAC;AAAA,MACzE,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,oBAAoB,QAAQ,iBAAiB;AAAA,MAC3E;AAAA,MACA,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,sBAAsB,QAAQ,oBAAoB;AAAA,QAC9E,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,oBAAoB;AAAA,QACxE,EAAE,QAAQ,KAAK,aAAa,sBAAsB,QAAQ,oBAAoB;AAAA,MAChF;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/business_rules/backend/rules/[id]/page.js

@@ -8,7 +8,10 @@ import { Page, PageBody } from "@open-mercato/ui/backend/Page";
 import { CrudForm } from "@open-mercato/ui/backend/CrudForm";
 import { Spinner } from "@open-mercato/ui/primitives/spinner";
 import { Button } from "@open-mercato/ui/primitives/button";
-import { apiFetch } from "@open-mercato/ui/backend/utils/api";
+import { apiFetch, withScopedApiHeaders } from "@open-mercato/ui/backend/utils/api";
+import { buildOptimisticLockHeader } from "@open-mercato/ui/backend/utils/optimisticLock";
+import { readJsonSafe } from "@open-mercato/ui/backend/utils/serverErrors";
+import { CrudHttpError } from "@open-mercato/shared/lib/crud/errors";
 import { useT } from "@open-mercato/shared/lib/i18n/context";
 import { useOrganizationScopeDetail } from "@open-mercato/shared/lib/frontend/useOrganizationScope";
 import {
@@ -55,7 +58,7 @@ function EditBusinessRulePage() {
       throw new Error(t("business_rules.errors.missingTenantOrOrg"));
     }
     const payload = buildRulePayload(values, effectiveTenantId, effectiveOrgId, void 0);
-    const response = await apiFetch("/api/business_rules/rules", {
+    const updateRule = () => apiFetch("/api/business_rules/rules", {
       method: "PUT",
       headers: { "Content-Type": "application/json" },
       body: JSON.stringify({
@@ -63,9 +66,12 @@ function EditBusinessRulePage() {
         id: ruleId
       })
     });
+    const headers = buildOptimisticLockHeader(rule?.updatedAt ?? rule?.updated_at ?? null);
+    const response = Object.keys(headers).length ? await withScopedApiHeaders(headers, updateRule) : await updateRule();
     if (!response.ok) {
-      const error2 = await response.json();
-      throw new Error(error2.error || error2.message || t("business_rules.errors.updateFailed"));
+      const body = await readJsonSafe(response) ?? {};
+      const message = typeof body.error === "string" && body.error || typeof body.message === "string" && body.message || t("business_rules.errors.updateFailed");
+      throw new CrudHttpError(response.status, { ...body, error: message });
     }
     router.push("/backend/rules");
     router.refresh();
@@ -98,6 +104,7 @@ function EditBusinessRulePage() {
       schema: businessRuleFormSchema,
       fields,
       initialValues,
+      optimisticLockUpdatedAt: rule?.updatedAt ?? rule?.updated_at ?? null,
       onSubmit: handleSubmit,
       cancelHref: "/backend/rules",
       groups: formGroups,

package/dist/modules/business_rules/backend/rules/[id]/page.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../src/modules/business_rules/backend/rules/%5Bid%5D/page.tsx"],
-  "sourcesContent": ["\"use client\"\n\nimport * as React from 'react'\nimport Link from 'next/link'\nimport { useRouter, useParams } from 'next/navigation'\nimport { useQuery } from '@tanstack/react-query'\nimport { Page, PageBody } from '@open-mercato/ui/backend/Page'\nimport { CrudForm } from '@open-mercato/ui/backend/CrudForm'\nimport { Spinner } from '@open-mercato/ui/primitives/spinner'\nimport { Button } from '@open-mercato/ui/primitives/button'\nimport { apiFetch } from '@open-mercato/ui/backend/utils/api'\nimport { useT } from '@open-mercato/shared/lib/i18n/context'\nimport { useOrganizationScopeDetail } from '@open-mercato/shared/lib/frontend/useOrganizationScope'\nimport {\n  businessRuleFormSchema,\n  createFormGroups,\n  createFieldDefinitions,\n  type BusinessRuleFormValues,\n} from '../../../components/formConfig'\nimport { ConditionBuilder } from '../../../components/ConditionBuilder'\nimport { ActionBuilder } from '../../../components/ActionBuilder'\nimport { buildRulePayload, parseRuleToFormValues } from '../../../components/utils/formHelpers'\n\nexport default function EditBusinessRulePage() {\n  const router = useRouter()\n  const params = useParams()\n\n  // Handle catch-all route: params.slug = ['rules', 'uuid']\n  let ruleId: string | undefined\n  if (params?.slug && Array.isArray(params.slug)) {\n    ruleId = params.slug[1] // Second element is the ID\n  } else if (params?.id) {\n    ruleId = Array.isArray(params.id) ? params.id[0] : params.id\n  }\n\n  const t = useT()\n  const { organizationId, tenantId } = useOrganizationScopeDetail()\n\n  const { data: rule, isLoading, error } = useQuery({\n    queryKey: ['business_rule', ruleId],\n    queryFn: async () => {\n      const response = await apiFetch(`/api/business_rules/rules/${ruleId}`)\n      if (!response.ok) {\n        throw new Error(t('business_rules.errors.fetchFailed'))\n      }\n      const result = await response.json()\n      return result\n    },\n    enabled: !!ruleId,\n  })\n\n  const initialValues = React.useMemo(() => {\n    if (rule) {\n      return parseRuleToFormValues(rule)\n    }\n    return null\n  }, [rule])\n\n  const handleSubmit = async (values: BusinessRuleFormValues) => {\n    // Use tenant/org from the loaded rule if available, otherwise from context\n    const effectiveTenantId = rule?.tenantId || tenantId\n    const effectiveOrgId = rule?.organizationId || organizationId\n\n    if (!effectiveTenantId || !effectiveOrgId) {\n      throw new Error(t('business_rules.errors.missingTenantOrOrg'))\n    }\n\n    const payload = buildRulePayload(values, effectiveTenantId, effectiveOrgId, undefined)\n\n    const response = await apiFetch('/api/business_rules/rules', {\n      method: 'PUT',\n      headers: { 'Content-Type': 'application/json' },\n      body: JSON.stringify({\n        ...payload,\n        id: ruleId,\n      }),\n    })\n\n    if (!response.ok) {\n      const error = await response.json()\n      throw new Error(error.error || error.message || t('business_rules.errors.updateFailed'))\n    }\n\n    router.push('/backend/rules')\n    router.refresh()\n  }\n\n  const fields = React.useMemo(() => createFieldDefinitions(t), [t])\n\n  const formGroups = React.useMemo(\n    () => createFormGroups(t, ConditionBuilder, ActionBuilder),\n    [t]\n  )\n\n  if (isLoading) {\n    return (\n      <Page>\n        <PageBody>\n          <div className=\"flex h-[50vh] flex-col items-center justify-center gap-2 text-muted-foreground\">\n            <Spinner className=\"h-6 w-6\" />\n            <span>{t('business_rules.rules.edit.loading')}</span>\n          </div>\n        </PageBody>\n      </Page>\n    )\n  }\n\n  if (error || !rule) {\n    return (\n      <Page>\n        <PageBody>\n            <div className=\"flex h-[50vh] flex-col items-center justify-center gap-2 text-muted-foreground\">\n            <p>{t('business_rules.errors.loadFailed')}</p>\n            <Button asChild variant=\"outline\">\n              <Link href=\"/backend/rules\">{t('business_rules.rules.backToList')}</Link>\n            </Button>\n          </div>\n        </PageBody>\n      </Page>\n    )\n  }\n\n  if (!initialValues) {\n    return null\n  }\n\n  return (\n    <Page>\n      <PageBody>\n        <CrudForm\n          key={ruleId}\n          title={t('business_rules.rules.edit.title')}\n          backHref=\"/backend/rules\"\n          schema={businessRuleFormSchema}\n          fields={fields}\n          initialValues={initialValues}\n          onSubmit={handleSubmit}\n          cancelHref=\"/backend/rules\"\n          groups={formGroups}\n          submitLabel={t('business_rules.rules.form.update')}\n        />\n      </PageBody>\n    </Page>\n  )\n}\n"],
-  "mappings": ";AAkGU,SACE,KADF;AAhGV,YAAY,WAAW;AACvB,OAAO,UAAU;AACjB,SAAS,WAAW,iBAAiB;AACrC,SAAS,gBAAgB;AACzB,SAAS,MAAM,gBAAgB;AAC/B,SAAS,gBAAgB;AACzB,SAAS,eAAe;AACxB,SAAS,cAAc;AACvB,SAAS,gBAAgB;AACzB,SAAS,YAAY;AACrB,SAAS,kCAAkC;AAC3C;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OAEK;AACP,SAAS,wBAAwB;AACjC,SAAS,qBAAqB;AAC9B,SAAS,kBAAkB,6BAA6B;AAEzC,SAAR,uBAAwC;AAC7C,QAAM,SAAS,UAAU;AACzB,QAAM,SAAS,UAAU;AAGzB,MAAI;AACJ,MAAI,QAAQ,QAAQ,MAAM,QAAQ,OAAO,IAAI,GAAG;AAC9C,aAAS,OAAO,KAAK,CAAC;AAAA,EACxB,WAAW,QAAQ,IAAI;AACrB,aAAS,MAAM,QAAQ,OAAO,EAAE,IAAI,OAAO,GAAG,CAAC,IAAI,OAAO;AAAA,EAC5D;AAEA,QAAM,IAAI,KAAK;AACf,QAAM,EAAE,gBAAgB,SAAS,IAAI,2BAA2B;AAEhE,QAAM,EAAE,MAAM,MAAM,WAAW,MAAM,IAAI,SAAS;AAAA,IAChD,UAAU,CAAC,iBAAiB,MAAM;AAAA,IAClC,SAAS,YAAY;AACnB,YAAM,WAAW,MAAM,SAAS,6BAA6B,MAAM,EAAE;AACrE,UAAI,CAAC,SAAS,IAAI;AAChB,cAAM,IAAI,MAAM,EAAE,mCAAmC,CAAC;AAAA,MACxD;AACA,YAAM,SAAS,MAAM,SAAS,KAAK;AACnC,aAAO;AAAA,IACT;AAAA,IACA,SAAS,CAAC,CAAC;AAAA,EACb,CAAC;AAED,QAAM,gBAAgB,MAAM,QAAQ,MAAM;AACxC,QAAI,MAAM;AACR,aAAO,sBAAsB,IAAI;AAAA,IACnC;AACA,WAAO;AAAA,EACT,GAAG,CAAC,IAAI,CAAC;AAET,QAAM,eAAe,OAAO,WAAmC;AAE7D,UAAM,oBAAoB,MAAM,YAAY;AAC5C,UAAM,iBAAiB,MAAM,kBAAkB;AAE/C,QAAI,CAAC,qBAAqB,CAAC,gBAAgB;AACzC,YAAM,IAAI,MAAM,EAAE,0CAA0C,CAAC;AAAA,IAC/D;AAEA,UAAM,UAAU,iBAAiB,QAAQ,mBAAmB,gBAAgB,MAAS;AAErF,UAAM,WAAW,MAAM,SAAS,6BAA6B;AAAA,MAC3D,QAAQ;AAAA,MACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,MAC9C,MAAM,KAAK,UAAU;AAAA,QACnB,GAAG;AAAA,QACH,IAAI;AAAA,MACN,CAAC;AAAA,IACH,CAAC;AAED,QAAI,CAAC,SAAS,IAAI;AAChB,YAAMA,SAAQ,MAAM,SAAS,KAAK;AAClC,YAAM,IAAI,MAAMA,OAAM,SAASA,OAAM,WAAW,EAAE,oCAAoC,CAAC;AAAA,IACzF;AAEA,WAAO,KAAK,gBAAgB;AAC5B,WAAO,QAAQ;AAAA,EACjB;AAEA,QAAM,SAAS,MAAM,QAAQ,MAAM,uBAAuB,CAAC,GAAG,CAAC,CAAC,CAAC;AAEjE,QAAM,aAAa,MAAM;AAAA,IACvB,MAAM,iBAAiB,GAAG,kBAAkB,aAAa;AAAA,IACzD,CAAC,CAAC;AAAA,EACJ;AAEA,MAAI,WAAW;AACb,WACE,oBAAC,QACC,8BAAC,YACC,+BAAC,SAAI,WAAU,kFACb;AAAA,0BAAC,WAAQ,WAAU,WAAU;AAAA,MAC7B,oBAAC,UAAM,YAAE,mCAAmC,GAAE;AAAA,OAChD,GACF,GACF;AAAA,EAEJ;AAEA,MAAI,SAAS,CAAC,MAAM;AAClB,WACE,oBAAC,QACC,8BAAC,YACG,+BAAC,SAAI,WAAU,kFACf;AAAA,0BAAC,OAAG,YAAE,kCAAkC,GAAE;AAAA,MAC1C,oBAAC,UAAO,SAAO,MAAC,SAAQ,WACtB,8BAAC,QAAK,MAAK,kBAAkB,YAAE,iCAAiC,GAAE,GACpE;AAAA,OACF,GACF,GACF;AAAA,EAEJ;AAEA,MAAI,CAAC,eAAe;AAClB,WAAO;AAAA,EACT;AAEA,SACE,oBAAC,QACC,8BAAC,YACC;AAAA,IAAC;AAAA;AAAA,MAEC,OAAO,EAAE,iCAAiC;AAAA,MAC1C,UAAS;AAAA,MACT,QAAQ;AAAA,MACR;AAAA,MACA;AAAA,MACA,UAAU;AAAA,MACV,YAAW;AAAA,MACX,QAAQ;AAAA,MACR,aAAa,EAAE,kCAAkC;AAAA;AAAA,IAT5C;AAAA,EAUP,GACF,GACF;AAEJ;",
-  "names": ["error"]
+  "sourcesContent": ["\"use client\"\n\nimport * as React from 'react'\nimport Link from 'next/link'\nimport { useRouter, useParams } from 'next/navigation'\nimport { useQuery } from '@tanstack/react-query'\nimport { Page, PageBody } from '@open-mercato/ui/backend/Page'\nimport { CrudForm } from '@open-mercato/ui/backend/CrudForm'\nimport { Spinner } from '@open-mercato/ui/primitives/spinner'\nimport { Button } from '@open-mercato/ui/primitives/button'\nimport { apiFetch, withScopedApiHeaders } from '@open-mercato/ui/backend/utils/api'\nimport { buildOptimisticLockHeader } from '@open-mercato/ui/backend/utils/optimisticLock'\nimport { readJsonSafe } from '@open-mercato/ui/backend/utils/serverErrors'\nimport { CrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { useT } from '@open-mercato/shared/lib/i18n/context'\nimport { useOrganizationScopeDetail } from '@open-mercato/shared/lib/frontend/useOrganizationScope'\nimport {\n  businessRuleFormSchema,\n  createFormGroups,\n  createFieldDefinitions,\n  type BusinessRuleFormValues,\n} from '../../../components/formConfig'\nimport { ConditionBuilder } from '../../../components/ConditionBuilder'\nimport { ActionBuilder } from '../../../components/ActionBuilder'\nimport { buildRulePayload, parseRuleToFormValues } from '../../../components/utils/formHelpers'\n\nexport default function EditBusinessRulePage() {\n  const router = useRouter()\n  const params = useParams()\n\n  // Handle catch-all route: params.slug = ['rules', 'uuid']\n  let ruleId: string | undefined\n  if (params?.slug && Array.isArray(params.slug)) {\n    ruleId = params.slug[1] // Second element is the ID\n  } else if (params?.id) {\n    ruleId = Array.isArray(params.id) ? params.id[0] : params.id\n  }\n\n  const t = useT()\n  const { organizationId, tenantId } = useOrganizationScopeDetail()\n\n  const { data: rule, isLoading, error } = useQuery({\n    queryKey: ['business_rule', ruleId],\n    queryFn: async () => {\n      const response = await apiFetch(`/api/business_rules/rules/${ruleId}`)\n      if (!response.ok) {\n        throw new Error(t('business_rules.errors.fetchFailed'))\n      }\n      const result = await response.json()\n      return result\n    },\n    enabled: !!ruleId,\n  })\n\n  const initialValues = React.useMemo(() => {\n    if (rule) {\n      return parseRuleToFormValues(rule)\n    }\n    return null\n  }, [rule])\n\n  const handleSubmit = async (values: BusinessRuleFormValues) => {\n    // Use tenant/org from the loaded rule if available, otherwise from context\n    const effectiveTenantId = rule?.tenantId || tenantId\n    const effectiveOrgId = rule?.organizationId || organizationId\n\n    if (!effectiveTenantId || !effectiveOrgId) {\n      throw new Error(t('business_rules.errors.missingTenantOrOrg'))\n    }\n\n    const payload = buildRulePayload(values, effectiveTenantId, effectiveOrgId, undefined)\n\n    const updateRule = () => apiFetch('/api/business_rules/rules', {\n      method: 'PUT',\n      headers: { 'Content-Type': 'application/json' },\n      body: JSON.stringify({\n        ...payload,\n        id: ruleId,\n      }),\n    })\n    const headers = buildOptimisticLockHeader(rule?.updatedAt ?? rule?.updated_at ?? null)\n    const response = Object.keys(headers).length\n      ? await withScopedApiHeaders(headers, updateRule)\n      : await updateRule()\n\n    if (!response.ok) {\n      const body = (await readJsonSafe<Record<string, unknown>>(response)) ?? {}\n      const message =\n        (typeof body.error === 'string' && body.error) ||\n        (typeof body.message === 'string' && body.message) ||\n        t('business_rules.errors.updateFailed')\n      throw new CrudHttpError(response.status, { ...body, error: message })\n    }\n\n    router.push('/backend/rules')\n    router.refresh()\n  }\n\n  const fields = React.useMemo(() => createFieldDefinitions(t), [t])\n\n  const formGroups = React.useMemo(\n    () => createFormGroups(t, ConditionBuilder, ActionBuilder),\n    [t]\n  )\n\n  if (isLoading) {\n    return (\n      <Page>\n        <PageBody>\n          <div className=\"flex h-[50vh] flex-col items-center justify-center gap-2 text-muted-foreground\">\n            <Spinner className=\"h-6 w-6\" />\n            <span>{t('business_rules.rules.edit.loading')}</span>\n          </div>\n        </PageBody>\n      </Page>\n    )\n  }\n\n  if (error || !rule) {\n    return (\n      <Page>\n        <PageBody>\n            <div className=\"flex h-[50vh] flex-col items-center justify-center gap-2 text-muted-foreground\">\n            <p>{t('business_rules.errors.loadFailed')}</p>\n            <Button asChild variant=\"outline\">\n              <Link href=\"/backend/rules\">{t('business_rules.rules.backToList')}</Link>\n            </Button>\n          </div>\n        </PageBody>\n      </Page>\n    )\n  }\n\n  if (!initialValues) {\n    return null\n  }\n\n  return (\n    <Page>\n      <PageBody>\n        <CrudForm\n          key={ruleId}\n          title={t('business_rules.rules.edit.title')}\n          backHref=\"/backend/rules\"\n          schema={businessRuleFormSchema}\n          fields={fields}\n          initialValues={initialValues}\n          optimisticLockUpdatedAt={rule?.updatedAt ?? rule?.updated_at ?? null}\n          onSubmit={handleSubmit}\n          cancelHref=\"/backend/rules\"\n          groups={formGroups}\n          submitLabel={t('business_rules.rules.form.update')}\n        />\n      </PageBody>\n    </Page>\n  )\n}\n"],
+  "mappings": ";AA6GU,SACE,KADF;AA3GV,YAAY,WAAW;AACvB,OAAO,UAAU;AACjB,SAAS,WAAW,iBAAiB;AACrC,SAAS,gBAAgB;AACzB,SAAS,MAAM,gBAAgB;AAC/B,SAAS,gBAAgB;AACzB,SAAS,eAAe;AACxB,SAAS,cAAc;AACvB,SAAS,UAAU,4BAA4B;AAC/C,SAAS,iCAAiC;AAC1C,SAAS,oBAAoB;AAC7B,SAAS,qBAAqB;AAC9B,SAAS,YAAY;AACrB,SAAS,kCAAkC;AAC3C;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OAEK;AACP,SAAS,wBAAwB;AACjC,SAAS,qBAAqB;AAC9B,SAAS,kBAAkB,6BAA6B;AAEzC,SAAR,uBAAwC;AAC7C,QAAM,SAAS,UAAU;AACzB,QAAM,SAAS,UAAU;AAGzB,MAAI;AACJ,MAAI,QAAQ,QAAQ,MAAM,QAAQ,OAAO,IAAI,GAAG;AAC9C,aAAS,OAAO,KAAK,CAAC;AAAA,EACxB,WAAW,QAAQ,IAAI;AACrB,aAAS,MAAM,QAAQ,OAAO,EAAE,IAAI,OAAO,GAAG,CAAC,IAAI,OAAO;AAAA,EAC5D;AAEA,QAAM,IAAI,KAAK;AACf,QAAM,EAAE,gBAAgB,SAAS,IAAI,2BAA2B;AAEhE,QAAM,EAAE,MAAM,MAAM,WAAW,MAAM,IAAI,SAAS;AAAA,IAChD,UAAU,CAAC,iBAAiB,MAAM;AAAA,IAClC,SAAS,YAAY;AACnB,YAAM,WAAW,MAAM,SAAS,6BAA6B,MAAM,EAAE;AACrE,UAAI,CAAC,SAAS,IAAI;AAChB,cAAM,IAAI,MAAM,EAAE,mCAAmC,CAAC;AAAA,MACxD;AACA,YAAM,SAAS,MAAM,SAAS,KAAK;AACnC,aAAO;AAAA,IACT;AAAA,IACA,SAAS,CAAC,CAAC;AAAA,EACb,CAAC;AAED,QAAM,gBAAgB,MAAM,QAAQ,MAAM;AACxC,QAAI,MAAM;AACR,aAAO,sBAAsB,IAAI;AAAA,IACnC;AACA,WAAO;AAAA,EACT,GAAG,CAAC,IAAI,CAAC;AAET,QAAM,eAAe,OAAO,WAAmC;AAE7D,UAAM,oBAAoB,MAAM,YAAY;AAC5C,UAAM,iBAAiB,MAAM,kBAAkB;AAE/C,QAAI,CAAC,qBAAqB,CAAC,gBAAgB;AACzC,YAAM,IAAI,MAAM,EAAE,0CAA0C,CAAC;AAAA,IAC/D;AAEA,UAAM,UAAU,iBAAiB,QAAQ,mBAAmB,gBAAgB,MAAS;AAErF,UAAM,aAAa,MAAM,SAAS,6BAA6B;AAAA,MAC7D,QAAQ;AAAA,MACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,MAC9C,MAAM,KAAK,UAAU;AAAA,QACnB,GAAG;AAAA,QACH,IAAI;AAAA,MACN,CAAC;AAAA,IACH,CAAC;AACD,UAAM,UAAU,0BAA0B,MAAM,aAAa,MAAM,cAAc,IAAI;AACrF,UAAM,WAAW,OAAO,KAAK,OAAO,EAAE,SAClC,MAAM,qBAAqB,SAAS,UAAU,IAC9C,MAAM,WAAW;AAErB,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,OAAQ,MAAM,aAAsC,QAAQ,KAAM,CAAC;AACzE,YAAM,UACH,OAAO,KAAK,UAAU,YAAY,KAAK,SACvC,OAAO,KAAK,YAAY,YAAY,KAAK,WAC1C,EAAE,oCAAoC;AACxC,YAAM,IAAI,cAAc,SAAS,QAAQ,EAAE,GAAG,MAAM,OAAO,QAAQ,CAAC;AAAA,IACtE;AAEA,WAAO,KAAK,gBAAgB;AAC5B,WAAO,QAAQ;AAAA,EACjB;AAEA,QAAM,SAAS,MAAM,QAAQ,MAAM,uBAAuB,CAAC,GAAG,CAAC,CAAC,CAAC;AAEjE,QAAM,aAAa,MAAM;AAAA,IACvB,MAAM,iBAAiB,GAAG,kBAAkB,aAAa;AAAA,IACzD,CAAC,CAAC;AAAA,EACJ;AAEA,MAAI,WAAW;AACb,WACE,oBAAC,QACC,8BAAC,YACC,+BAAC,SAAI,WAAU,kFACb;AAAA,0BAAC,WAAQ,WAAU,WAAU;AAAA,MAC7B,oBAAC,UAAM,YAAE,mCAAmC,GAAE;AAAA,OAChD,GACF,GACF;AAAA,EAEJ;AAEA,MAAI,SAAS,CAAC,MAAM;AAClB,WACE,oBAAC,QACC,8BAAC,YACG,+BAAC,SAAI,WAAU,kFACf;AAAA,0BAAC,OAAG,YAAE,kCAAkC,GAAE;AAAA,MAC1C,oBAAC,UAAO,SAAO,MAAC,SAAQ,WACtB,8BAAC,QAAK,MAAK,kBAAkB,YAAE,iCAAiC,GAAE,GACpE;AAAA,OACF,GACF,GACF;AAAA,EAEJ;AAEA,MAAI,CAAC,eAAe;AAClB,WAAO;AAAA,EACT;AAEA,SACE,oBAAC,QACC,8BAAC,YACC;AAAA,IAAC;AAAA;AAAA,MAEC,OAAO,EAAE,iCAAiC;AAAA,MAC1C,UAAS;AAAA,MACT,QAAQ;AAAA,MACR;AAAA,MACA;AAAA,MACA,yBAAyB,MAAM,aAAa,MAAM,cAAc;AAAA,MAChE,UAAU;AAAA,MACV,YAAW;AAAA,MACX,QAAQ;AAAA,MACR,aAAa,EAAE,kCAAkC;AAAA;AAAA,IAV5C;AAAA,EAWP,GACF,GACF;AAEJ;",
+  "names": []
 }

package/dist/modules/business_rules/backend/rules/page.js

@@ -7,11 +7,13 @@ import { Page, PageBody } from "@open-mercato/ui/backend/Page";
 import { DataTable } from "@open-mercato/ui/backend/DataTable";
 import { Button } from "@open-mercato/ui/primitives/button";
 import { RowActions } from "@open-mercato/ui/backend/RowActions";
-import { apiCall } from "@open-mercato/ui/backend/utils/apiCall";
+import { apiCall, withScopedApiRequestHeaders } from "@open-mercato/ui/backend/utils/apiCall";
+import { buildOptimisticLockHeader } from "@open-mercato/ui/backend/utils/optimisticLock";
 import { flash } from "@open-mercato/ui/backend/FlashMessages";
 import { useQuery, useQueryClient } from "@tanstack/react-query";
 import { useT } from "@open-mercato/shared/lib/i18n/context";
 import { useConfirmDialog } from "@open-mercato/ui/backend/confirm-dialog";
+import { ListEmptyState } from "@open-mercato/ui/backend/filters/ListEmptyState";
 function RulesListPage() {
   const [page, setPage] = React.useState(1);
   const [pageSize] = React.useState(20);
@@ -55,9 +57,13 @@ function RulesListPage() {
       variant: "destructive"
     });
     if (!confirmed) return;
-    const result = await apiCall(`/api/business_rules/rules?id=${id}`, {
-      method: "DELETE"
-    });
+    const record = (data || []).find((item) => item.id === id);
+    const result = await withScopedApiRequestHeaders(
+      buildOptimisticLockHeader(record?.updatedAt),
+      () => apiCall(`/api/business_rules/rules?id=${id}`, {
+        method: "DELETE"
+      })
+    );
     if (result.ok) {
       flash(t("business_rules.messages.deleted"), "success");
       queryClient.invalidateQueries({ queryKey: ["business-rules"] });
@@ -66,14 +72,18 @@ function RulesListPage() {
     }
   };
   const handleToggleEnabled = async (id, currentEnabled) => {
-    const result = await apiCall("/api/business_rules/rules", {
-      method: "PUT",
-      headers: { "Content-Type": "application/json" },
-      body: JSON.stringify({
-        id,
-        enabled: !currentEnabled
+    const record = (data || []).find((item) => item.id === id);
+    const result = await withScopedApiRequestHeaders(
+      buildOptimisticLockHeader(record?.updatedAt),
+      () => apiCall("/api/business_rules/rules", {
+        method: "PUT",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify({
+          id,
+          enabled: !currentEnabled
+        })
       })
-    });
+    );
     if (result.ok) {
       flash(t("business_rules.messages.updated"), "success");
       queryClient.invalidateQueries({ queryKey: ["business-rules"] });
@@ -162,7 +172,7 @@ function RulesListPage() {
           VALIDATION: "bg-status-warning-bg text-status-warning-text",
           CALCULATION: "bg-status-info-bg text-status-info-text",
           ACTION: "bg-status-success-bg text-status-success-text",
-          ASSIGNMENT: "bg-purple-100 text-purple-800"
+          ASSIGNMENT: "bg-brand-violet/10 text-brand-violet"
         };
         const color = typeColors[row.original.ruleType] || "bg-muted text-foreground";
         return /* @__PURE__ */ jsx("span", { className: `inline-flex items-center px-2 py-1 rounded text-xs font-medium ${color}`, children: row.original.ruleType });
@@ -258,6 +268,14 @@ function RulesListPage() {
         perspective: {
           tableId: "business-rules.rules.list"
         },
+        emptyState: /* @__PURE__ */ jsx(
+          ListEmptyState,
+          {
+            entityName: t("business_rules.list.title"),
+            createHref: "/backend/rules/create",
+            createLabel: t("business_rules.actions.create")
+          }
+        ),
         pagination: { page, pageSize, total, totalPages, onPageChange: setPage }
       }
     ) }),

package/dist/modules/business_rules/backend/rules/page.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../src/modules/business_rules/backend/rules/page.tsx"],
-  "sourcesContent": ["\"use client\"\n\nimport * as React from 'react'\nimport Link from 'next/link'\nimport { useRouter } from 'next/navigation'\nimport { Page, PageBody } from '@open-mercato/ui/backend/Page'\nimport { DataTable } from '@open-mercato/ui/backend/DataTable'\nimport type { ColumnDef } from '@tanstack/react-table'\nimport { Button } from '@open-mercato/ui/primitives/button'\nimport { RowActions } from '@open-mercato/ui/backend/RowActions'\nimport { apiCall } from '@open-mercato/ui/backend/utils/apiCall'\nimport { flash } from '@open-mercato/ui/backend/FlashMessages'\nimport { useQuery, useQueryClient } from '@tanstack/react-query'\nimport { useT } from '@open-mercato/shared/lib/i18n/context'\nimport type { FilterDef, FilterValues } from '@open-mercato/ui/backend/FilterBar'\nimport { useConfirmDialog } from '@open-mercato/ui/backend/confirm-dialog'\n\ntype Rule = {\n  id: string\n  ruleId: string\n  ruleName: string\n  description: string | null\n  ruleType: 'GUARD' | 'VALIDATION' | 'CALCULATION' | 'ACTION' | 'ASSIGNMENT'\n  ruleCategory: string | null\n  entityType: string\n  eventType: string | null\n  enabled: boolean\n  priority: number\n  version: number\n  effectiveFrom: string | null\n  effectiveTo: string | null\n  tenantId: string\n  organizationId: string\n  createdAt: string\n  updatedAt: string\n}\n\ntype RulesResponse = {\n  items: Rule[]\n  total: number\n  totalPages: number\n}\n\nexport default function RulesListPage() {\n  const [page, setPage] = React.useState(1)\n  const [pageSize] = React.useState(20)\n  const [total, setTotal] = React.useState(0)\n  const [totalPages, setTotalPages] = React.useState(1)\n  const t = useT()\n  const router = useRouter()\n  const queryClient = useQueryClient()\n  const { confirm, ConfirmDialogElement } = useConfirmDialog()\n  const [filterValues, setFilterValues] = React.useState<FilterValues>({})\n\n  const { data, isLoading, error } = useQuery({\n    queryKey: ['business-rules', 'list', filterValues, page],\n    queryFn: async () => {\n      const params = new URLSearchParams()\n      params.set('page', page.toString())\n      params.set('pageSize', pageSize.toString())\n      params.set('sortField', 'priority')\n      params.set('sortDir', 'desc')\n\n      if (filterValues.enabled) params.set('enabled', filterValues.enabled as string)\n      if (filterValues.ruleType) params.set('ruleType', filterValues.ruleType as string)\n      if (filterValues.entityType) params.set('entityType', filterValues.entityType as string)\n      if (filterValues.eventType) params.set('eventType', filterValues.eventType as string)\n      if (filterValues.search) params.set('search', filterValues.search as string)\n\n      const result = await apiCall<RulesResponse>(\n        `/api/business_rules/rules?${params.toString()}`\n      )\n\n      if (!result.ok) {\n        throw new Error('Failed to fetch rules')\n      }\n\n      const response = result.result\n      if (response) {\n        setTotal(response.total || 0)\n        setTotalPages(response.totalPages || 1)\n      }\n\n      return response?.items || []\n    },\n  })\n\n  const handleDelete = async (id: string, ruleName: string) => {\n    const confirmed = await confirm({\n      title: t('business_rules.confirm.delete', { name: ruleName }),\n      variant: 'destructive',\n    })\n    if (!confirmed) return\n\n    const result = await apiCall(`/api/business_rules/rules?id=${id}`, {\n      method: 'DELETE',\n    })\n\n    if (result.ok) {\n      flash(t('business_rules.messages.deleted'), 'success')\n      queryClient.invalidateQueries({ queryKey: ['business-rules'] })\n    } else {\n      flash(t('business_rules.messages.deleteFailed'), 'error')\n    }\n  }\n\n  const handleToggleEnabled = async (id: string, currentEnabled: boolean) => {\n    const result = await apiCall('/api/business_rules/rules', {\n      method: 'PUT',\n      headers: { 'Content-Type': 'application/json' },\n      body: JSON.stringify({\n        id,\n        enabled: !currentEnabled,\n      }),\n    })\n\n    if (result.ok) {\n      flash(t('business_rules.messages.updated'), 'success')\n      queryClient.invalidateQueries({ queryKey: ['business-rules'] })\n    } else {\n      flash(t('business_rules.messages.updateFailed'), 'error')\n    }\n  }\n\n  const handleFiltersApply = React.useCallback((values: FilterValues) => {\n    const next: FilterValues = {}\n    Object.entries(values).forEach(([key, value]) => {\n      if (value !== undefined) next[key] = value\n    })\n    setFilterValues(next)\n    setPage(1)\n  }, [setFilterValues, setPage])\n\n  const handleFiltersClear = React.useCallback(() => {\n    setFilterValues({})\n    setPage(1)\n  }, [setFilterValues, setPage])\n\n  const filters: FilterDef[] = [\n    {\n      id: 'search',\n      type: 'text',\n      label: t('business_rules.filters.search'),\n      placeholder: t('business_rules.filters.searchPlaceholder'),\n    },\n    {\n      id: 'enabled',\n      type: 'select',\n      label: t('business_rules.filters.status'),\n      options: [\n        { label: t('common.all'), value: '' },\n        { label: t('common.enabled'), value: 'true' },\n        { label: t('common.disabled'), value: 'false' },\n      ],\n    },\n    {\n      id: 'ruleType',\n      type: 'select',\n      label: t('business_rules.filters.type'),\n      options: [\n        { label: t('common.all'), value: '' },\n        { label: t('business_rules.types.guard'), value: 'GUARD' },\n        { label: t('business_rules.types.validation'), value: 'VALIDATION' },\n        { label: t('business_rules.types.calculation'), value: 'CALCULATION' },\n        { label: t('business_rules.types.action'), value: 'ACTION' },\n        { label: t('business_rules.types.assignment'), value: 'ASSIGNMENT' },\n      ],\n    },\n    {\n      id: 'entityType',\n      type: 'text',\n      label: t('business_rules.filters.entityType'),\n      placeholder: t('business_rules.filters.entityTypePlaceholder'),\n    },\n    {\n      id: 'eventType',\n      type: 'text',\n      label: t('business_rules.filters.eventType'),\n      placeholder: t('business_rules.filters.eventTypePlaceholder'),\n    },\n  ]\n\n  const columns: ColumnDef<Rule>[] = [\n    {\n      id: 'ruleId',\n      header: t('business_rules.fields.ruleId'),\n      accessorKey: 'ruleId',\n      cell: ({ row }) => (\n        <span className=\"font-mono text-sm\">{row.original.ruleId}</span>\n      ),\n    },\n    {\n      id: 'ruleName',\n      header: t('business_rules.fields.ruleName'),\n      accessorKey: 'ruleName',\n      cell: ({ row }) => (\n        <div>\n          <div className=\"font-medium\">{row.original.ruleName}</div>\n          {row.original.description && (\n            <div className=\"text-xs text-muted-foreground line-clamp-1\">\n              {row.original.description}\n            </div>\n          )}\n        </div>\n      ),\n    },\n    {\n      id: 'ruleType',\n      header: t('business_rules.fields.ruleType'),\n      accessorKey: 'ruleType',\n      cell: ({ row }) => {\n        const typeColors = {\n          GUARD: 'bg-status-error-bg text-status-error-text',\n          VALIDATION: 'bg-status-warning-bg text-status-warning-text',\n          CALCULATION: 'bg-status-info-bg text-status-info-text',\n          ACTION: 'bg-status-success-bg text-status-success-text',\n          ASSIGNMENT: 'bg-purple-100 text-purple-800',\n        }\n        const color = typeColors[row.original.ruleType] || 'bg-muted text-foreground'\n        return (\n          <span className={`inline-flex items-center px-2 py-1 rounded text-xs font-medium ${color}`}>\n            {row.original.ruleType}\n          </span>\n        )\n      },\n    },\n    {\n      id: 'entityType',\n      header: t('business_rules.fields.entityType'),\n      accessorKey: 'entityType',\n    },\n    {\n      id: 'eventType',\n      header: t('business_rules.fields.eventType'),\n      accessorKey: 'eventType',\n      cell: ({ row }) => row.original.eventType || '-',\n    },\n    {\n      id: 'enabled',\n      header: t('business_rules.fields.enabled'),\n      accessorKey: 'enabled',\n      cell: ({ row }) => (\n        <button\n          onClick={() => handleToggleEnabled(row.original.id, row.original.enabled)}\n          className={`inline-flex items-center px-2 py-1 rounded text-xs font-medium cursor-pointer ${\n            row.original.enabled\n              ? 'bg-status-success-bg text-status-success-text hover:bg-status-success-bg/80'\n              : 'bg-muted text-muted-foreground hover:bg-muted/50'\n          }`}\n          title={t('business_rules.actions.toggleEnabled')}\n        >\n          {row.original.enabled ? t('common.yes') : t('common.no')}\n        </button>\n      ),\n    },\n    {\n      id: 'priority',\n      header: t('business_rules.fields.priority'),\n      accessorKey: 'priority',\n      cell: ({ row }) => (\n        <span className=\"font-mono text-sm\">{row.original.priority}</span>\n      ),\n    },\n    {\n      id: 'actions',\n      header: '',\n      cell: ({ row }) => (\n        <RowActions\n          items={[\n            {\n              id: 'edit',\n              label: t('common.edit'),\n              href: `/backend/rules/${row.original.id}`,\n            },\n            {\n              id: row.original.enabled ? 'disable' : 'enable',\n              label: row.original.enabled ? t('common.disable') : t('common.enable'),\n              onSelect: () => handleToggleEnabled(row.original.id, row.original.enabled),\n            },\n            {\n              id: 'duplicate',\n              label: t('common.duplicate'),\n              onSelect: () => {\n                // TODO: Implement duplicate functionality in Step 5.2\n                flash(t('business_rules.messages.duplicateNotYetImplemented'), 'info')\n              },\n            },\n            {\n              id: 'delete',\n              label: t('common.delete'),\n              onSelect: () => handleDelete(row.original.id, row.original.ruleName),\n              destructive: true,\n            },\n          ]}\n        />\n      ),\n    },\n  ]\n\n  if (error) {\n    return (\n      <Page>\n        <PageBody>\n          <div className=\"p-8 text-center\">\n            <p className=\"text-status-error-text\">{t('business_rules.messages.loadFailed')}</p>\n            <Button onClick={() => queryClient.invalidateQueries({ queryKey: ['business-rules'] })} className=\"mt-4\">\n              {t('common.retry')}\n            </Button>\n          </div>\n        </PageBody>\n        {ConfirmDialogElement}\n      </Page>\n    )\n  }\n\n  return (\n    <Page>\n      <PageBody>\n        <DataTable\n          title={t('business_rules.list.title')}\n          actions={(\n            <Button asChild>\n              <Link href=\"/backend/rules/create\">\n                {t('business_rules.actions.create')}\n              </Link>\n            </Button>\n          )}\n          columns={columns}\n          data={data || []}\n          filters={filters}\n          filterValues={filterValues}\n          onFiltersApply={handleFiltersApply}\n          onFiltersClear={handleFiltersClear}\n          perspective={{\n            tableId: 'business-rules.rules.list',\n          }}\n          pagination={{ page, pageSize, total, totalPages, onPageChange: setPage }}\n        />\n      </PageBody>\n      {ConfirmDialogElement}\n    </Page>\n  )\n}\n"],
-  "mappings": ";AA4LQ,cAQA,YARA;AA1LR,YAAY,WAAW;AACvB,OAAO,UAAU;AACjB,SAAS,iBAAiB;AAC1B,SAAS,MAAM,gBAAgB;AAC/B,SAAS,iBAAiB;AAE1B,SAAS,cAAc;AACvB,SAAS,kBAAkB;AAC3B,SAAS,eAAe;AACxB,SAAS,aAAa;AACtB,SAAS,UAAU,sBAAsB;AACzC,SAAS,YAAY;AAErB,SAAS,wBAAwB;AA4BlB,SAAR,gBAAiC;AACtC,QAAM,CAAC,MAAM,OAAO,IAAI,MAAM,SAAS,CAAC;AACxC,QAAM,CAAC,QAAQ,IAAI,MAAM,SAAS,EAAE;AACpC,QAAM,CAAC,OAAO,QAAQ,IAAI,MAAM,SAAS,CAAC;AAC1C,QAAM,CAAC,YAAY,aAAa,IAAI,MAAM,SAAS,CAAC;AACpD,QAAM,IAAI,KAAK;AACf,QAAM,SAAS,UAAU;AACzB,QAAM,cAAc,eAAe;AACnC,QAAM,EAAE,SAAS,qBAAqB,IAAI,iBAAiB;AAC3D,QAAM,CAAC,cAAc,eAAe,IAAI,MAAM,SAAuB,CAAC,CAAC;AAEvE,QAAM,EAAE,MAAM,WAAW,MAAM,IAAI,SAAS;AAAA,IAC1C,UAAU,CAAC,kBAAkB,QAAQ,cAAc,IAAI;AAAA,IACvD,SAAS,YAAY;AACnB,YAAM,SAAS,IAAI,gBAAgB;AACnC,aAAO,IAAI,QAAQ,KAAK,SAAS,CAAC;AAClC,aAAO,IAAI,YAAY,SAAS,SAAS,CAAC;AAC1C,aAAO,IAAI,aAAa,UAAU;AAClC,aAAO,IAAI,WAAW,MAAM;AAE5B,UAAI,aAAa,QAAS,QAAO,IAAI,WAAW,aAAa,OAAiB;AAC9E,UAAI,aAAa,SAAU,QAAO,IAAI,YAAY,aAAa,QAAkB;AACjF,UAAI,aAAa,WAAY,QAAO,IAAI,cAAc,aAAa,UAAoB;AACvF,UAAI,aAAa,UAAW,QAAO,IAAI,aAAa,aAAa,SAAmB;AACpF,UAAI,aAAa,OAAQ,QAAO,IAAI,UAAU,aAAa,MAAgB;AAE3E,YAAM,SAAS,MAAM;AAAA,QACnB,6BAA6B,OAAO,SAAS,CAAC;AAAA,MAChD;AAEA,UAAI,CAAC,OAAO,IAAI;AACd,cAAM,IAAI,MAAM,uBAAuB;AAAA,MACzC;AAEA,YAAM,WAAW,OAAO;AACxB,UAAI,UAAU;AACZ,iBAAS,SAAS,SAAS,CAAC;AAC5B,sBAAc,SAAS,cAAc,CAAC;AAAA,MACxC;AAEA,aAAO,UAAU,SAAS,CAAC;AAAA,IAC7B;AAAA,EACF,CAAC;AAED,QAAM,eAAe,OAAO,IAAY,aAAqB;AAC3D,UAAM,YAAY,MAAM,QAAQ;AAAA,MAC9B,OAAO,EAAE,iCAAiC,EAAE,MAAM,SAAS,CAAC;AAAA,MAC5D,SAAS;AAAA,IACX,CAAC;AACD,QAAI,CAAC,UAAW;AAEhB,UAAM,SAAS,MAAM,QAAQ,gCAAgC,EAAE,IAAI;AAAA,MACjE,QAAQ;AAAA,IACV,CAAC;AAED,QAAI,OAAO,IAAI;AACb,YAAM,EAAE,iCAAiC,GAAG,SAAS;AACrD,kBAAY,kBAAkB,EAAE,UAAU,CAAC,gBAAgB,EAAE,CAAC;AAAA,IAChE,OAAO;AACL,YAAM,EAAE,sCAAsC,GAAG,OAAO;AAAA,IAC1D;AAAA,EACF;AAEA,QAAM,sBAAsB,OAAO,IAAY,mBAA4B;AACzE,UAAM,SAAS,MAAM,QAAQ,6BAA6B;AAAA,MACxD,QAAQ;AAAA,MACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,MAC9C,MAAM,KAAK,UAAU;AAAA,QACnB;AAAA,QACA,SAAS,CAAC;AAAA,MACZ,CAAC;AAAA,IACH,CAAC;AAED,QAAI,OAAO,IAAI;AACb,YAAM,EAAE,iCAAiC,GAAG,SAAS;AACrD,kBAAY,kBAAkB,EAAE,UAAU,CAAC,gBAAgB,EAAE,CAAC;AAAA,IAChE,OAAO;AACL,YAAM,EAAE,sCAAsC,GAAG,OAAO;AAAA,IAC1D;AAAA,EACF;AAEA,QAAM,qBAAqB,MAAM,YAAY,CAAC,WAAyB;AACrE,UAAM,OAAqB,CAAC;AAC5B,WAAO,QAAQ,MAAM,EAAE,QAAQ,CAAC,CAAC,KAAK,KAAK,MAAM;AAC/C,UAAI,UAAU,OAAW,MAAK,GAAG,IAAI;AAAA,IACvC,CAAC;AACD,oBAAgB,IAAI;AACpB,YAAQ,CAAC;AAAA,EACX,GAAG,CAAC,iBAAiB,OAAO,CAAC;AAE7B,QAAM,qBAAqB,MAAM,YAAY,MAAM;AACjD,oBAAgB,CAAC,CAAC;AAClB,YAAQ,CAAC;AAAA,EACX,GAAG,CAAC,iBAAiB,OAAO,CAAC;AAE7B,QAAM,UAAuB;AAAA,IAC3B;AAAA,MACE,IAAI;AAAA,MACJ,MAAM;AAAA,MACN,OAAO,EAAE,+BAA+B;AAAA,MACxC,aAAa,EAAE,0CAA0C;AAAA,IAC3D;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ,MAAM;AAAA,MACN,OAAO,EAAE,+BAA+B;AAAA,MACxC,SAAS;AAAA,QACP,EAAE,OAAO,EAAE,YAAY,GAAG,OAAO,GAAG;AAAA,QACpC,EAAE,OAAO,EAAE,gBAAgB,GAAG,OAAO,OAAO;AAAA,QAC5C,EAAE,OAAO,EAAE,iBAAiB,GAAG,OAAO,QAAQ;AAAA,MAChD;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ,MAAM;AAAA,MACN,OAAO,EAAE,6BAA6B;AAAA,MACtC,SAAS;AAAA,QACP,EAAE,OAAO,EAAE,YAAY,GAAG,OAAO,GAAG;AAAA,QACpC,EAAE,OAAO,EAAE,4BAA4B,GAAG,OAAO,QAAQ;AAAA,QACzD,EAAE,OAAO,EAAE,iCAAiC,GAAG,OAAO,aAAa;AAAA,QACnE,EAAE,OAAO,EAAE,kCAAkC,GAAG,OAAO,cAAc;AAAA,QACrE,EAAE,OAAO,EAAE,6BAA6B,GAAG,OAAO,SAAS;AAAA,QAC3D,EAAE,OAAO,EAAE,iCAAiC,GAAG,OAAO,aAAa;AAAA,MACrE;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ,MAAM;AAAA,MACN,OAAO,EAAE,mCAAmC;AAAA,MAC5C,aAAa,EAAE,8CAA8C;AAAA,IAC/D;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ,MAAM;AAAA,MACN,OAAO,EAAE,kCAAkC;AAAA,MAC3C,aAAa,EAAE,6CAA6C;AAAA,IAC9D;AAAA,EACF;AAEA,QAAM,UAA6B;AAAA,IACjC;AAAA,MACE,IAAI;AAAA,MACJ,QAAQ,EAAE,8BAA8B;AAAA,MACxC,aAAa;AAAA,MACb,MAAM,CAAC,EAAE,IAAI,MACX,oBAAC,UAAK,WAAU,qBAAqB,cAAI,SAAS,QAAO;AAAA,IAE7D;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ,QAAQ,EAAE,gCAAgC;AAAA,MAC1C,aAAa;AAAA,MACb,MAAM,CAAC,EAAE,IAAI,MACX,qBAAC,SACC;AAAA,4BAAC,SAAI,WAAU,eAAe,cAAI,SAAS,UAAS;AAAA,QACnD,IAAI,SAAS,eACZ,oBAAC,SAAI,WAAU,8CACZ,cAAI,SAAS,aAChB;AAAA,SAEJ;AAAA,IAEJ;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ,QAAQ,EAAE,gCAAgC;AAAA,MAC1C,aAAa;AAAA,MACb,MAAM,CAAC,EAAE,IAAI,MAAM;AACjB,cAAM,aAAa;AAAA,UACjB,OAAO;AAAA,UACP,YAAY;AAAA,UACZ,aAAa;AAAA,UACb,QAAQ;AAAA,UACR,YAAY;AAAA,QACd;AACA,cAAM,QAAQ,WAAW,IAAI,SAAS,QAAQ,KAAK;AACnD,eACE,oBAAC,UAAK,WAAW,kEAAkE,KAAK,IACrF,cAAI,SAAS,UAChB;AAAA,MAEJ;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ,QAAQ,EAAE,kCAAkC;AAAA,MAC5C,aAAa;AAAA,IACf;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ,QAAQ,EAAE,iCAAiC;AAAA,MAC3C,aAAa;AAAA,MACb,MAAM,CAAC,EAAE,IAAI,MAAM,IAAI,SAAS,aAAa;AAAA,IAC/C;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ,QAAQ,EAAE,+BAA+B;AAAA,MACzC,aAAa;AAAA,MACb,MAAM,CAAC,EAAE,IAAI,MACX;AAAA,QAAC;AAAA;AAAA,UACC,SAAS,MAAM,oBAAoB,IAAI,SAAS,IAAI,IAAI,SAAS,OAAO;AAAA,UACxE,WAAW,iFACT,IAAI,SAAS,UACT,gFACA,kDACN;AAAA,UACA,OAAO,EAAE,sCAAsC;AAAA,UAE9C,cAAI,SAAS,UAAU,EAAE,YAAY,IAAI,EAAE,WAAW;AAAA;AAAA,MACzD;AAAA,IAEJ;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ,QAAQ,EAAE,gCAAgC;AAAA,MAC1C,aAAa;AAAA,MACb,MAAM,CAAC,EAAE,IAAI,MACX,oBAAC,UAAK,WAAU,qBAAqB,cAAI,SAAS,UAAS;AAAA,IAE/D;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ,QAAQ;AAAA,MACR,MAAM,CAAC,EAAE,IAAI,MACX;AAAA,QAAC;AAAA;AAAA,UACC,OAAO;AAAA,YACL;AAAA,cACE,IAAI;AAAA,cACJ,OAAO,EAAE,aAAa;AAAA,cACtB,MAAM,kBAAkB,IAAI,SAAS,EAAE;AAAA,YACzC;AAAA,YACA;AAAA,cACE,IAAI,IAAI,SAAS,UAAU,YAAY;AAAA,cACvC,OAAO,IAAI,SAAS,UAAU,EAAE,gBAAgB,IAAI,EAAE,eAAe;AAAA,cACrE,UAAU,MAAM,oBAAoB,IAAI,SAAS,IAAI,IAAI,SAAS,OAAO;AAAA,YAC3E;AAAA,YACA;AAAA,cACE,IAAI;AAAA,cACJ,OAAO,EAAE,kBAAkB;AAAA,cAC3B,UAAU,MAAM;AAEd,sBAAM,EAAE,oDAAoD,GAAG,MAAM;AAAA,cACvE;AAAA,YACF;AAAA,YACA;AAAA,cACE,IAAI;AAAA,cACJ,OAAO,EAAE,eAAe;AAAA,cACxB,UAAU,MAAM,aAAa,IAAI,SAAS,IAAI,IAAI,SAAS,QAAQ;AAAA,cACnE,aAAa;AAAA,YACf;AAAA,UACF;AAAA;AAAA,MACF;AAAA,IAEJ;AAAA,EACF;AAEA,MAAI,OAAO;AACT,WACE,qBAAC,QACC;AAAA,0BAAC,YACC,+BAAC,SAAI,WAAU,mBACb;AAAA,4BAAC,OAAE,WAAU,0BAA0B,YAAE,oCAAoC,GAAE;AAAA,QAC/E,oBAAC,UAAO,SAAS,MAAM,YAAY,kBAAkB,EAAE,UAAU,CAAC,gBAAgB,EAAE,CAAC,GAAG,WAAU,QAC/F,YAAE,cAAc,GACnB;AAAA,SACF,GACF;AAAA,MACC;AAAA,OACH;AAAA,EAEJ;AAEA,SACE,qBAAC,QACC;AAAA,wBAAC,YACC;AAAA,MAAC;AAAA;AAAA,QACC,OAAO,EAAE,2BAA2B;AAAA,QACpC,SACE,oBAAC,UAAO,SAAO,MACb,8BAAC,QAAK,MAAK,yBACR,YAAE,+BAA+B,GACpC,GACF;AAAA,QAEF;AAAA,QACA,MAAM,QAAQ,CAAC;AAAA,QACf;AAAA,QACA;AAAA,QACA,gBAAgB;AAAA,QAChB,gBAAgB;AAAA,QAChB,aAAa;AAAA,UACX,SAAS;AAAA,QACX;AAAA,QACA,YAAY,EAAE,MAAM,UAAU,OAAO,YAAY,cAAc,QAAQ;AAAA;AAAA,IACzE,GACF;AAAA,IACC;AAAA,KACH;AAEJ;",
+  "sourcesContent": ["\"use client\"\n\nimport * as React from 'react'\nimport Link from 'next/link'\nimport { useRouter } from 'next/navigation'\nimport { Page, PageBody } from '@open-mercato/ui/backend/Page'\nimport { DataTable } from '@open-mercato/ui/backend/DataTable'\nimport type { ColumnDef } from '@tanstack/react-table'\nimport { Button } from '@open-mercato/ui/primitives/button'\nimport { RowActions } from '@open-mercato/ui/backend/RowActions'\nimport { apiCall, withScopedApiRequestHeaders } from '@open-mercato/ui/backend/utils/apiCall'\nimport { buildOptimisticLockHeader } from '@open-mercato/ui/backend/utils/optimisticLock'\nimport { flash } from '@open-mercato/ui/backend/FlashMessages'\nimport { useQuery, useQueryClient } from '@tanstack/react-query'\nimport { useT } from '@open-mercato/shared/lib/i18n/context'\nimport type { FilterDef, FilterValues } from '@open-mercato/ui/backend/FilterBar'\nimport { useConfirmDialog } from '@open-mercato/ui/backend/confirm-dialog'\nimport { ListEmptyState } from '@open-mercato/ui/backend/filters/ListEmptyState'\n\ntype Rule = {\n  id: string\n  ruleId: string\n  ruleName: string\n  description: string | null\n  ruleType: 'GUARD' | 'VALIDATION' | 'CALCULATION' | 'ACTION' | 'ASSIGNMENT'\n  ruleCategory: string | null\n  entityType: string\n  eventType: string | null\n  enabled: boolean\n  priority: number\n  version: number\n  effectiveFrom: string | null\n  effectiveTo: string | null\n  tenantId: string\n  organizationId: string\n  createdAt: string\n  updatedAt: string\n}\n\ntype RulesResponse = {\n  items: Rule[]\n  total: number\n  totalPages: number\n}\n\nexport default function RulesListPage() {\n  const [page, setPage] = React.useState(1)\n  const [pageSize] = React.useState(20)\n  const [total, setTotal] = React.useState(0)\n  const [totalPages, setTotalPages] = React.useState(1)\n  const t = useT()\n  const router = useRouter()\n  const queryClient = useQueryClient()\n  const { confirm, ConfirmDialogElement } = useConfirmDialog()\n  const [filterValues, setFilterValues] = React.useState<FilterValues>({})\n\n  const { data, isLoading, error } = useQuery({\n    queryKey: ['business-rules', 'list', filterValues, page],\n    queryFn: async () => {\n      const params = new URLSearchParams()\n      params.set('page', page.toString())\n      params.set('pageSize', pageSize.toString())\n      params.set('sortField', 'priority')\n      params.set('sortDir', 'desc')\n\n      if (filterValues.enabled) params.set('enabled', filterValues.enabled as string)\n      if (filterValues.ruleType) params.set('ruleType', filterValues.ruleType as string)\n      if (filterValues.entityType) params.set('entityType', filterValues.entityType as string)\n      if (filterValues.eventType) params.set('eventType', filterValues.eventType as string)\n      if (filterValues.search) params.set('search', filterValues.search as string)\n\n      const result = await apiCall<RulesResponse>(\n        `/api/business_rules/rules?${params.toString()}`\n      )\n\n      if (!result.ok) {\n        throw new Error('Failed to fetch rules')\n      }\n\n      const response = result.result\n      if (response) {\n        setTotal(response.total || 0)\n        setTotalPages(response.totalPages || 1)\n      }\n\n      return response?.items || []\n    },\n  })\n\n  const handleDelete = async (id: string, ruleName: string) => {\n    const confirmed = await confirm({\n      title: t('business_rules.confirm.delete', { name: ruleName }),\n      variant: 'destructive',\n    })\n    if (!confirmed) return\n\n    const record = (data || []).find((item) => item.id === id)\n    const result = await withScopedApiRequestHeaders(\n      buildOptimisticLockHeader(record?.updatedAt),\n      () => apiCall(`/api/business_rules/rules?id=${id}`, {\n        method: 'DELETE',\n      }),\n    )\n\n    if (result.ok) {\n      flash(t('business_rules.messages.deleted'), 'success')\n      queryClient.invalidateQueries({ queryKey: ['business-rules'] })\n    } else {\n      flash(t('business_rules.messages.deleteFailed'), 'error')\n    }\n  }\n\n  const handleToggleEnabled = async (id: string, currentEnabled: boolean) => {\n    const record = (data || []).find((item) => item.id === id)\n    const result = await withScopedApiRequestHeaders(\n      buildOptimisticLockHeader(record?.updatedAt),\n      () => apiCall('/api/business_rules/rules', {\n        method: 'PUT',\n        headers: { 'Content-Type': 'application/json' },\n        body: JSON.stringify({\n          id,\n          enabled: !currentEnabled,\n        }),\n      }),\n    )\n\n    if (result.ok) {\n      flash(t('business_rules.messages.updated'), 'success')\n      queryClient.invalidateQueries({ queryKey: ['business-rules'] })\n    } else {\n      flash(t('business_rules.messages.updateFailed'), 'error')\n    }\n  }\n\n  const handleFiltersApply = React.useCallback((values: FilterValues) => {\n    const next: FilterValues = {}\n    Object.entries(values).forEach(([key, value]) => {\n      if (value !== undefined) next[key] = value\n    })\n    setFilterValues(next)\n    setPage(1)\n  }, [setFilterValues, setPage])\n\n  const handleFiltersClear = React.useCallback(() => {\n    setFilterValues({})\n    setPage(1)\n  }, [setFilterValues, setPage])\n\n  const filters: FilterDef[] = [\n    {\n      id: 'search',\n      type: 'text',\n      label: t('business_rules.filters.search'),\n      placeholder: t('business_rules.filters.searchPlaceholder'),\n    },\n    {\n      id: 'enabled',\n      type: 'select',\n      label: t('business_rules.filters.status'),\n      options: [\n        { label: t('common.all'), value: '' },\n        { label: t('common.enabled'), value: 'true' },\n        { label: t('common.disabled'), value: 'false' },\n      ],\n    },\n    {\n      id: 'ruleType',\n      type: 'select',\n      label: t('business_rules.filters.type'),\n      options: [\n        { label: t('common.all'), value: '' },\n        { label: t('business_rules.types.guard'), value: 'GUARD' },\n        { label: t('business_rules.types.validation'), value: 'VALIDATION' },\n        { label: t('business_rules.types.calculation'), value: 'CALCULATION' },\n        { label: t('business_rules.types.action'), value: 'ACTION' },\n        { label: t('business_rules.types.assignment'), value: 'ASSIGNMENT' },\n      ],\n    },\n    {\n      id: 'entityType',\n      type: 'text',\n      label: t('business_rules.filters.entityType'),\n      placeholder: t('business_rules.filters.entityTypePlaceholder'),\n    },\n    {\n      id: 'eventType',\n      type: 'text',\n      label: t('business_rules.filters.eventType'),\n      placeholder: t('business_rules.filters.eventTypePlaceholder'),\n    },\n  ]\n\n  const columns: ColumnDef<Rule>[] = [\n    {\n      id: 'ruleId',\n      header: t('business_rules.fields.ruleId'),\n      accessorKey: 'ruleId',\n      cell: ({ row }) => (\n        <span className=\"font-mono text-sm\">{row.original.ruleId}</span>\n      ),\n    },\n    {\n      id: 'ruleName',\n      header: t('business_rules.fields.ruleName'),\n      accessorKey: 'ruleName',\n      cell: ({ row }) => (\n        <div>\n          <div className=\"font-medium\">{row.original.ruleName}</div>\n          {row.original.description && (\n            <div className=\"text-xs text-muted-foreground line-clamp-1\">\n              {row.original.description}\n            </div>\n          )}\n        </div>\n      ),\n    },\n    {\n      id: 'ruleType',\n      header: t('business_rules.fields.ruleType'),\n      accessorKey: 'ruleType',\n      cell: ({ row }) => {\n        const typeColors = {\n          GUARD: 'bg-status-error-bg text-status-error-text',\n          VALIDATION: 'bg-status-warning-bg text-status-warning-text',\n          CALCULATION: 'bg-status-info-bg text-status-info-text',\n          ACTION: 'bg-status-success-bg text-status-success-text',\n          ASSIGNMENT: 'bg-brand-violet/10 text-brand-violet',\n        }\n        const color = typeColors[row.original.ruleType] || 'bg-muted text-foreground'\n        return (\n          <span className={`inline-flex items-center px-2 py-1 rounded text-xs font-medium ${color}`}>\n            {row.original.ruleType}\n          </span>\n        )\n      },\n    },\n    {\n      id: 'entityType',\n      header: t('business_rules.fields.entityType'),\n      accessorKey: 'entityType',\n    },\n    {\n      id: 'eventType',\n      header: t('business_rules.fields.eventType'),\n      accessorKey: 'eventType',\n      cell: ({ row }) => row.original.eventType || '-',\n    },\n    {\n      id: 'enabled',\n      header: t('business_rules.fields.enabled'),\n      accessorKey: 'enabled',\n      cell: ({ row }) => (\n        <button\n          onClick={() => handleToggleEnabled(row.original.id, row.original.enabled)}\n          className={`inline-flex items-center px-2 py-1 rounded text-xs font-medium cursor-pointer ${\n            row.original.enabled\n              ? 'bg-status-success-bg text-status-success-text hover:bg-status-success-bg/80'\n              : 'bg-muted text-muted-foreground hover:bg-muted/50'\n          }`}\n          title={t('business_rules.actions.toggleEnabled')}\n        >\n          {row.original.enabled ? t('common.yes') : t('common.no')}\n        </button>\n      ),\n    },\n    {\n      id: 'priority',\n      header: t('business_rules.fields.priority'),\n      accessorKey: 'priority',\n      cell: ({ row }) => (\n        <span className=\"font-mono text-sm\">{row.original.priority}</span>\n      ),\n    },\n    {\n      id: 'actions',\n      header: '',\n      cell: ({ row }) => (\n        <RowActions\n          items={[\n            {\n              id: 'edit',\n              label: t('common.edit'),\n              href: `/backend/rules/${row.original.id}`,\n            },\n            {\n              id: row.original.enabled ? 'disable' : 'enable',\n              label: row.original.enabled ? t('common.disable') : t('common.enable'),\n              onSelect: () => handleToggleEnabled(row.original.id, row.original.enabled),\n            },\n            {\n              id: 'duplicate',\n              label: t('common.duplicate'),\n              onSelect: () => {\n                // TODO: Implement duplicate functionality in Step 5.2\n                flash(t('business_rules.messages.duplicateNotYetImplemented'), 'info')\n              },\n            },\n            {\n              id: 'delete',\n              label: t('common.delete'),\n              onSelect: () => handleDelete(row.original.id, row.original.ruleName),\n              destructive: true,\n            },\n          ]}\n        />\n      ),\n    },\n  ]\n\n  if (error) {\n    return (\n      <Page>\n        <PageBody>\n          <div className=\"p-8 text-center\">\n            <p className=\"text-status-error-text\">{t('business_rules.messages.loadFailed')}</p>\n            <Button onClick={() => queryClient.invalidateQueries({ queryKey: ['business-rules'] })} className=\"mt-4\">\n              {t('common.retry')}\n            </Button>\n          </div>\n        </PageBody>\n        {ConfirmDialogElement}\n      </Page>\n    )\n  }\n\n  return (\n    <Page>\n      <PageBody>\n        <DataTable\n          title={t('business_rules.list.title')}\n          actions={(\n            <Button asChild>\n              <Link href=\"/backend/rules/create\">\n                {t('business_rules.actions.create')}\n              </Link>\n            </Button>\n          )}\n          columns={columns}\n          data={data || []}\n          filters={filters}\n          filterValues={filterValues}\n          onFiltersApply={handleFiltersApply}\n          onFiltersClear={handleFiltersClear}\n          perspective={{\n            tableId: 'business-rules.rules.list',\n          }}\n          emptyState={(\n            <ListEmptyState\n              entityName={t('business_rules.list.title')}\n              createHref=\"/backend/rules/create\"\n              createLabel={t('business_rules.actions.create')}\n            />\n          )}\n          pagination={{ page, pageSize, total, totalPages, onPageChange: setPage }}\n        />\n      </PageBody>\n      {ConfirmDialogElement}\n    </Page>\n  )\n}\n"],
+  "mappings": ";AAsMQ,cAQA,YARA;AApMR,YAAY,WAAW;AACvB,OAAO,UAAU;AACjB,SAAS,iBAAiB;AAC1B,SAAS,MAAM,gBAAgB;AAC/B,SAAS,iBAAiB;AAE1B,SAAS,cAAc;AACvB,SAAS,kBAAkB;AAC3B,SAAS,SAAS,mCAAmC;AACrD,SAAS,iCAAiC;AAC1C,SAAS,aAAa;AACtB,SAAS,UAAU,sBAAsB;AACzC,SAAS,YAAY;AAErB,SAAS,wBAAwB;AACjC,SAAS,sBAAsB;AA4BhB,SAAR,gBAAiC;AACtC,QAAM,CAAC,MAAM,OAAO,IAAI,MAAM,SAAS,CAAC;AACxC,QAAM,CAAC,QAAQ,IAAI,MAAM,SAAS,EAAE;AACpC,QAAM,CAAC,OAAO,QAAQ,IAAI,MAAM,SAAS,CAAC;AAC1C,QAAM,CAAC,YAAY,aAAa,IAAI,MAAM,SAAS,CAAC;AACpD,QAAM,IAAI,KAAK;AACf,QAAM,SAAS,UAAU;AACzB,QAAM,cAAc,eAAe;AACnC,QAAM,EAAE,SAAS,qBAAqB,IAAI,iBAAiB;AAC3D,QAAM,CAAC,cAAc,eAAe,IAAI,MAAM,SAAuB,CAAC,CAAC;AAEvE,QAAM,EAAE,MAAM,WAAW,MAAM,IAAI,SAAS;AAAA,IAC1C,UAAU,CAAC,kBAAkB,QAAQ,cAAc,IAAI;AAAA,IACvD,SAAS,YAAY;AACnB,YAAM,SAAS,IAAI,gBAAgB;AACnC,aAAO,IAAI,QAAQ,KAAK,SAAS,CAAC;AAClC,aAAO,IAAI,YAAY,SAAS,SAAS,CAAC;AAC1C,aAAO,IAAI,aAAa,UAAU;AAClC,aAAO,IAAI,WAAW,MAAM;AAE5B,UAAI,aAAa,QAAS,QAAO,IAAI,WAAW,aAAa,OAAiB;AAC9E,UAAI,aAAa,SAAU,QAAO,IAAI,YAAY,aAAa,QAAkB;AACjF,UAAI,aAAa,WAAY,QAAO,IAAI,cAAc,aAAa,UAAoB;AACvF,UAAI,aAAa,UAAW,QAAO,IAAI,aAAa,aAAa,SAAmB;AACpF,UAAI,aAAa,OAAQ,QAAO,IAAI,UAAU,aAAa,MAAgB;AAE3E,YAAM,SAAS,MAAM;AAAA,QACnB,6BAA6B,OAAO,SAAS,CAAC;AAAA,MAChD;AAEA,UAAI,CAAC,OAAO,IAAI;AACd,cAAM,IAAI,MAAM,uBAAuB;AAAA,MACzC;AAEA,YAAM,WAAW,OAAO;AACxB,UAAI,UAAU;AACZ,iBAAS,SAAS,SAAS,CAAC;AAC5B,sBAAc,SAAS,cAAc,CAAC;AAAA,MACxC;AAEA,aAAO,UAAU,SAAS,CAAC;AAAA,IAC7B;AAAA,EACF,CAAC;AAED,QAAM,eAAe,OAAO,IAAY,aAAqB;AAC3D,UAAM,YAAY,MAAM,QAAQ;AAAA,MAC9B,OAAO,EAAE,iCAAiC,EAAE,MAAM,SAAS,CAAC;AAAA,MAC5D,SAAS;AAAA,IACX,CAAC;AACD,QAAI,CAAC,UAAW;AAEhB,UAAM,UAAU,QAAQ,CAAC,GAAG,KAAK,CAAC,SAAS,KAAK,OAAO,EAAE;AACzD,UAAM,SAAS,MAAM;AAAA,MACnB,0BAA0B,QAAQ,SAAS;AAAA,MAC3C,MAAM,QAAQ,gCAAgC,EAAE,IAAI;AAAA,QAClD,QAAQ;AAAA,MACV,CAAC;AAAA,IACH;AAEA,QAAI,OAAO,IAAI;AACb,YAAM,EAAE,iCAAiC,GAAG,SAAS;AACrD,kBAAY,kBAAkB,EAAE,UAAU,CAAC,gBAAgB,EAAE,CAAC;AAAA,IAChE,OAAO;AACL,YAAM,EAAE,sCAAsC,GAAG,OAAO;AAAA,IAC1D;AAAA,EACF;AAEA,QAAM,sBAAsB,OAAO,IAAY,mBAA4B;AACzE,UAAM,UAAU,QAAQ,CAAC,GAAG,KAAK,CAAC,SAAS,KAAK,OAAO,EAAE;AACzD,UAAM,SAAS,MAAM;AAAA,MACnB,0BAA0B,QAAQ,SAAS;AAAA,MAC3C,MAAM,QAAQ,6BAA6B;AAAA,QACzC,QAAQ;AAAA,QACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,QAC9C,MAAM,KAAK,UAAU;AAAA,UACnB;AAAA,UACA,SAAS,CAAC;AAAA,QACZ,CAAC;AAAA,MACH,CAAC;AAAA,IACH;AAEA,QAAI,OAAO,IAAI;AACb,YAAM,EAAE,iCAAiC,GAAG,SAAS;AACrD,kBAAY,kBAAkB,EAAE,UAAU,CAAC,gBAAgB,EAAE,CAAC;AAAA,IAChE,OAAO;AACL,YAAM,EAAE,sCAAsC,GAAG,OAAO;AAAA,IAC1D;AAAA,EACF;AAEA,QAAM,qBAAqB,MAAM,YAAY,CAAC,WAAyB;AACrE,UAAM,OAAqB,CAAC;AAC5B,WAAO,QAAQ,MAAM,EAAE,QAAQ,CAAC,CAAC,KAAK,KAAK,MAAM;AAC/C,UAAI,UAAU,OAAW,MAAK,GAAG,IAAI;AAAA,IACvC,CAAC;AACD,oBAAgB,IAAI;AACpB,YAAQ,CAAC;AAAA,EACX,GAAG,CAAC,iBAAiB,OAAO,CAAC;AAE7B,QAAM,qBAAqB,MAAM,YAAY,MAAM;AACjD,oBAAgB,CAAC,CAAC;AAClB,YAAQ,CAAC;AAAA,EACX,GAAG,CAAC,iBAAiB,OAAO,CAAC;AAE7B,QAAM,UAAuB;AAAA,IAC3B;AAAA,MACE,IAAI;AAAA,MACJ,MAAM;AAAA,MACN,OAAO,EAAE,+BAA+B;AAAA,MACxC,aAAa,EAAE,0CAA0C;AAAA,IAC3D;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ,MAAM;AAAA,MACN,OAAO,EAAE,+BAA+B;AAAA,MACxC,SAAS;AAAA,QACP,EAAE,OAAO,EAAE,YAAY,GAAG,OAAO,GAAG;AAAA,QACpC,EAAE,OAAO,EAAE,gBAAgB,GAAG,OAAO,OAAO;AAAA,QAC5C,EAAE,OAAO,EAAE,iBAAiB,GAAG,OAAO,QAAQ;AAAA,MAChD;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ,MAAM;AAAA,MACN,OAAO,EAAE,6BAA6B;AAAA,MACtC,SAAS;AAAA,QACP,EAAE,OAAO,EAAE,YAAY,GAAG,OAAO,GAAG;AAAA,QACpC,EAAE,OAAO,EAAE,4BAA4B,GAAG,OAAO,QAAQ;AAAA,QACzD,EAAE,OAAO,EAAE,iCAAiC,GAAG,OAAO,aAAa;AAAA,QACnE,EAAE,OAAO,EAAE,kCAAkC,GAAG,OAAO,cAAc;AAAA,QACrE,EAAE,OAAO,EAAE,6BAA6B,GAAG,OAAO,SAAS;AAAA,QAC3D,EAAE,OAAO,EAAE,iCAAiC,GAAG,OAAO,aAAa;AAAA,MACrE;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ,MAAM;AAAA,MACN,OAAO,EAAE,mCAAmC;AAAA,MAC5C,aAAa,EAAE,8CAA8C;AAAA,IAC/D;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ,MAAM;AAAA,MACN,OAAO,EAAE,kCAAkC;AAAA,MAC3C,aAAa,EAAE,6CAA6C;AAAA,IAC9D;AAAA,EACF;AAEA,QAAM,UAA6B;AAAA,IACjC;AAAA,MACE,IAAI;AAAA,MACJ,QAAQ,EAAE,8BAA8B;AAAA,MACxC,aAAa;AAAA,MACb,MAAM,CAAC,EAAE,IAAI,MACX,oBAAC,UAAK,WAAU,qBAAqB,cAAI,SAAS,QAAO;AAAA,IAE7D;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ,QAAQ,EAAE,gCAAgC;AAAA,MAC1C,aAAa;AAAA,MACb,MAAM,CAAC,EAAE,IAAI,MACX,qBAAC,SACC;AAAA,4BAAC,SAAI,WAAU,eAAe,cAAI,SAAS,UAAS;AAAA,QACnD,IAAI,SAAS,eACZ,oBAAC,SAAI,WAAU,8CACZ,cAAI,SAAS,aAChB;AAAA,SAEJ;AAAA,IAEJ;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ,QAAQ,EAAE,gCAAgC;AAAA,MAC1C,aAAa;AAAA,MACb,MAAM,CAAC,EAAE,IAAI,MAAM;AACjB,cAAM,aAAa;AAAA,UACjB,OAAO;AAAA,UACP,YAAY;AAAA,UACZ,aAAa;AAAA,UACb,QAAQ;AAAA,UACR,YAAY;AAAA,QACd;AACA,cAAM,QAAQ,WAAW,IAAI,SAAS,QAAQ,KAAK;AACnD,eACE,oBAAC,UAAK,WAAW,kEAAkE,KAAK,IACrF,cAAI,SAAS,UAChB;AAAA,MAEJ;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ,QAAQ,EAAE,kCAAkC;AAAA,MAC5C,aAAa;AAAA,IACf;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ,QAAQ,EAAE,iCAAiC;AAAA,MAC3C,aAAa;AAAA,MACb,MAAM,CAAC,EAAE,IAAI,MAAM,IAAI,SAAS,aAAa;AAAA,IAC/C;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ,QAAQ,EAAE,+BAA+B;AAAA,MACzC,aAAa;AAAA,MACb,MAAM,CAAC,EAAE,IAAI,MACX;AAAA,QAAC;AAAA;AAAA,UACC,SAAS,MAAM,oBAAoB,IAAI,SAAS,IAAI,IAAI,SAAS,OAAO;AAAA,UACxE,WAAW,iFACT,IAAI,SAAS,UACT,gFACA,kDACN;AAAA,UACA,OAAO,EAAE,sCAAsC;AAAA,UAE9C,cAAI,SAAS,UAAU,EAAE,YAAY,IAAI,EAAE,WAAW;AAAA;AAAA,MACzD;AAAA,IAEJ;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ,QAAQ,EAAE,gCAAgC;AAAA,MAC1C,aAAa;AAAA,MACb,MAAM,CAAC,EAAE,IAAI,MACX,oBAAC,UAAK,WAAU,qBAAqB,cAAI,SAAS,UAAS;AAAA,IAE/D;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ,QAAQ;AAAA,MACR,MAAM,CAAC,EAAE,IAAI,MACX;AAAA,QAAC;AAAA;AAAA,UACC,OAAO;AAAA,YACL;AAAA,cACE,IAAI;AAAA,cACJ,OAAO,EAAE,aAAa;AAAA,cACtB,MAAM,kBAAkB,IAAI,SAAS,EAAE;AAAA,YACzC;AAAA,YACA;AAAA,cACE,IAAI,IAAI,SAAS,UAAU,YAAY;AAAA,cACvC,OAAO,IAAI,SAAS,UAAU,EAAE,gBAAgB,IAAI,EAAE,eAAe;AAAA,cACrE,UAAU,MAAM,oBAAoB,IAAI,SAAS,IAAI,IAAI,SAAS,OAAO;AAAA,YAC3E;AAAA,YACA;AAAA,cACE,IAAI;AAAA,cACJ,OAAO,EAAE,kBAAkB;AAAA,cAC3B,UAAU,MAAM;AAEd,sBAAM,EAAE,oDAAoD,GAAG,MAAM;AAAA,cACvE;AAAA,YACF;AAAA,YACA;AAAA,cACE,IAAI;AAAA,cACJ,OAAO,EAAE,eAAe;AAAA,cACxB,UAAU,MAAM,aAAa,IAAI,SAAS,IAAI,IAAI,SAAS,QAAQ;AAAA,cACnE,aAAa;AAAA,YACf;AAAA,UACF;AAAA;AAAA,MACF;AAAA,IAEJ;AAAA,EACF;AAEA,MAAI,OAAO;AACT,WACE,qBAAC,QACC;AAAA,0BAAC,YACC,+BAAC,SAAI,WAAU,mBACb;AAAA,4BAAC,OAAE,WAAU,0BAA0B,YAAE,oCAAoC,GAAE;AAAA,QAC/E,oBAAC,UAAO,SAAS,MAAM,YAAY,kBAAkB,EAAE,UAAU,CAAC,gBAAgB,EAAE,CAAC,GAAG,WAAU,QAC/F,YAAE,cAAc,GACnB;AAAA,SACF,GACF;AAAA,MACC;AAAA,OACH;AAAA,EAEJ;AAEA,SACE,qBAAC,QACC;AAAA,wBAAC,YACC;AAAA,MAAC;AAAA;AAAA,QACC,OAAO,EAAE,2BAA2B;AAAA,QACpC,SACE,oBAAC,UAAO,SAAO,MACb,8BAAC,QAAK,MAAK,yBACR,YAAE,+BAA+B,GACpC,GACF;AAAA,QAEF;AAAA,QACA,MAAM,QAAQ,CAAC;AAAA,QACf;AAAA,QACA;AAAA,QACA,gBAAgB;AAAA,QAChB,gBAAgB;AAAA,QAChB,aAAa;AAAA,UACX,SAAS;AAAA,QACX;AAAA,QACA,YACE;AAAA,UAAC;AAAA;AAAA,YACC,YAAY,EAAE,2BAA2B;AAAA,YACzC,YAAW;AAAA,YACX,aAAa,EAAE,+BAA+B;AAAA;AAAA,QAChD;AAAA,QAEF,YAAY,EAAE,MAAM,UAAU,OAAO,YAAY,cAAc,QAAQ;AAAA;AAAA,IACzE,GACF;AAAA,IACC;AAAA,KACH;AAEJ;",
   "names": []
 }

package/dist/modules/business_rules/backend/sets/[id]/page.js

@@ -8,8 +8,11 @@ import { Page, PageBody } from "@open-mercato/ui/backend/Page";
 import { CrudForm } from "@open-mercato/ui/backend/CrudForm";
 import { Spinner } from "@open-mercato/ui/primitives/spinner";
 import { Button } from "@open-mercato/ui/primitives/button";
-import { apiFetch } from "@open-mercato/ui/backend/utils/api";
+import { apiFetch, withScopedApiHeaders } from "@open-mercato/ui/backend/utils/api";
 import { apiCall } from "@open-mercato/ui/backend/utils/apiCall";
+import { buildOptimisticLockHeader } from "@open-mercato/ui/backend/utils/optimisticLock";
+import { readJsonSafe } from "@open-mercato/ui/backend/utils/serverErrors";
+import { CrudHttpError } from "@open-mercato/shared/lib/crud/errors";
 import { flash } from "@open-mercato/ui/backend/FlashMessages";
 import { useT } from "@open-mercato/shared/lib/i18n/context";
 import { useOrganizationScopeDetail } from "@open-mercato/shared/lib/frontend/useOrganizationScope";
@@ -52,14 +55,17 @@ function EditRuleSetPage() {
       id: setId,
       ...values
     };
-    const response = await apiFetch("/api/business_rules/sets", {
+    const updateSet = () => apiFetch("/api/business_rules/sets", {
       method: "PUT",
       headers: { "Content-Type": "application/json" },
       body: JSON.stringify(payload)
     });
+    const headers = buildOptimisticLockHeader(ruleSet?.updatedAt ?? null);
+    const response = Object.keys(headers).length ? await withScopedApiHeaders(headers, updateSet) : await updateSet();
     if (!response.ok) {
-      const error2 = await response.json();
-      throw new Error(error2.error || error2.message || t("business_rules.sets.errors.updateFailed"));
+      const body = await readJsonSafe(response) ?? {};
+      const message = typeof body.error === "string" && body.error || typeof body.message === "string" && body.message || t("business_rules.sets.errors.updateFailed");
+      throw new CrudHttpError(response.status, { ...body, error: message });
     }
     flash(t("business_rules.sets.messages.updated"), "success");
     queryClient.invalidateQueries({ queryKey: ["business-rules", "sets", setId] });
@@ -208,6 +214,7 @@ function EditRuleSetPage() {
         schema: ruleSetFormSchema,
         fields,
         initialValues,
+        optimisticLockUpdatedAt: ruleSet.updatedAt,
         onSubmit: handleSubmit,
         cancelHref: "/backend/sets",
         submitLabel: t("business_rules.sets.form.update"),