@open-mercato/core 0.6.6-develop.6094.1.28b081ea16 → 0.6.6-develop.6126.1.0b9392fdae

package/dist/modules/perspectives/api/[tableId]/route.js

@@ -4,6 +4,10 @@ import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
 import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
 import { withAtomicFlush } from "@open-mercato/shared/lib/commands/flush";
 import { isCrudHttpError } from "@open-mercato/shared/lib/crud/errors";
+import {
+  runCrudMutationGuardAfterSuccess,
+  validateCrudMutationGuard
+} from "@open-mercato/shared/lib/crud/mutation-guard";
 import { perspectiveSaveSchema } from "@open-mercato/core/modules/perspectives/data/validators";
 import {
   loadPerspectivesState,
@@ -127,6 +131,7 @@ async function POST(req, ctx) {
   const applyToRoles = Array.from(new Set(parsed.data.applyToRoles ?? [])).filter((id) => id.trim().length > 0);
   const clearRoleIds = Array.from(new Set(parsed.data.clearRoleIds ?? [])).filter((id) => id.trim().length > 0);
   const hasRoleOps = applyToRoles.length > 0 || clearRoleIds.length > 0;
+  const targetRoleIds = Array.from(/* @__PURE__ */ new Set([...applyToRoles, ...clearRoleIds]));
   if (hasRoleOps) {
     const canApplyToRoles = await rbac.userHasAllFeatures?.(
       auth.sub,
@@ -137,7 +142,6 @@ async function POST(req, ctx) {
       return NextResponse.json({ error: "Forbidden", requiredFeatures: ["perspectives.role_defaults"] }, { status: 403 });
     }
     const roleScope = auth.tenantId ? { $or: [{ tenantId: auth.tenantId }, { tenantId: null }] } : { tenantId: null };
-    const targetRoleIds = Array.from(/* @__PURE__ */ new Set([...applyToRoles, ...clearRoleIds]));
     const roles = await em.find(Role, {
       id: { $in: targetRoleIds },
       ...roleScope,
@@ -149,8 +153,48 @@ async function POST(req, ctx) {
       return NextResponse.json({ error: "Invalid roles", missing }, { status: 400 });
     }
   }
+  const guardResourceId = parsed.data.perspectiveId ?? tableId;
+  const guardResult = await validateCrudMutationGuard(container, {
+    tenantId: auth.tenantId ?? "",
+    organizationId: auth.orgId ?? null,
+    userId: auth.sub,
+    resourceKind: "perspectives.perspective",
+    resourceId: guardResourceId,
+    operation: "custom",
+    requestMethod: req.method,
+    requestHeaders: req.headers,
+    mutationPayload: { ...parsed.data, tableId }
+  });
+  if (guardResult && !guardResult.ok) {
+    return NextResponse.json(guardResult.body, { status: guardResult.status });
+  }
+  let roleGuardResult = null;
+  if (hasRoleOps) {
+    roleGuardResult = await validateCrudMutationGuard(container, {
+      tenantId: auth.tenantId ?? "",
+      organizationId: auth.orgId ?? null,
+      userId: auth.sub,
+      resourceKind: "perspectives.role_perspective",
+      resourceId: targetRoleIds.join(","),
+      operation: "custom",
+      requestMethod: req.method,
+      requestHeaders: req.headers,
+      mutationPayload: {
+        tableId,
+        applyToRoles,
+        clearRoleIds,
+        name: parsed.data.name,
+        settings: parsed.data.settings,
+        setRoleDefault: parsed.data.setRoleDefault ?? false
+      }
+    });
+  }
+  if (roleGuardResult && !roleGuardResult.ok) {
+    return NextResponse.json(roleGuardResult.body, { status: roleGuardResult.status });
+  }
   let saved = null;
   let updatedRolePerspectives = null;
+  let clearedRolePerspectiveCount = 0;
   try {
     await withAtomicFlush(em, [
       async () => {
@@ -178,7 +222,7 @@ async function POST(req, ctx) {
       },
       async () => {
         if (clearRoleIds.length) {
-          await clearRolePerspectives(em, cache, {
+          clearedRolePerspectiveCount = await clearRolePerspectives(em, cache, {
             tableId,
             tenantId: auth.tenantId ?? null,
             organizationId: auth.orgId ?? null,
@@ -193,6 +237,33 @@ async function POST(req, ctx) {
     }
     throw err;
   }
+  if (guardResult?.ok && guardResult.shouldRunAfterSuccess) {
+    await runCrudMutationGuardAfterSuccess(container, {
+      tenantId: auth.tenantId ?? "",
+      organizationId: auth.orgId ?? null,
+      userId: auth.sub,
+      resourceKind: "perspectives.perspective",
+      resourceId: guardResourceId,
+      operation: "custom",
+      requestMethod: req.method,
+      requestHeaders: req.headers,
+      metadata: guardResult.metadata ?? null
+    });
+  }
+  const didWriteRolePerspectives = applyToRoles.length > 0 || clearedRolePerspectiveCount > 0;
+  if (didWriteRolePerspectives && roleGuardResult?.ok && roleGuardResult.shouldRunAfterSuccess) {
+    await runCrudMutationGuardAfterSuccess(container, {
+      tenantId: auth.tenantId ?? "",
+      organizationId: auth.orgId ?? null,
+      userId: auth.sub,
+      resourceKind: "perspectives.role_perspective",
+      resourceId: targetRoleIds.join(","),
+      operation: "custom",
+      requestMethod: req.method,
+      requestHeaders: req.headers,
+      metadata: roleGuardResult.metadata ?? null
+    });
+  }
   return NextResponse.json({
     perspective: saved,
     rolePerspectives: updatedRolePerspectives ?? [],

package/dist/modules/perspectives/api/[tableId]/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../src/modules/perspectives/api/%5BtableId%5D/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { withAtomicFlush } from '@open-mercato/shared/lib/commands/flush'\nimport { isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { perspectiveSaveSchema } from '@open-mercato/core/modules/perspectives/data/validators'\nimport {\n  loadPerspectivesState,\n  saveUserPerspective,\n  saveRolePerspectives,\n  clearRolePerspectives,\n  type PerspectiveScope,\n} from '@open-mercato/core/modules/perspectives/services/perspectiveService'\nimport { Role } from '@open-mercato/core/modules/auth/data/entities'\nimport type { OpenApiMethodDoc, OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport {\n  perspectivesTag,\n  perspectivesErrorSchema,\n  perspectivesIndexResponseSchema,\n  perspectiveSaveResponseSchema,\n} from '../openapi'\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['perspectives.use'] },\n  POST: { requireAuth: true, requireFeatures: ['perspectives.use'] },\n}\n\nconst decodeParam = (value: string | string[] | undefined): string => {\n  if (!value) return ''\n  const raw = Array.isArray(value) ? value[0] : value\n  try {\n    return decodeURIComponent(raw)\n  } catch {\n    return raw\n  }\n}\n\nfunction buildScope(auth: NonNullable<Awaited<ReturnType<typeof getAuthFromRequest>>>): PerspectiveScope {\n  return {\n    userId: auth.sub,\n    tenantId: auth.tenantId ?? null,\n    organizationId: auth.orgId ?? null,\n  }\n}\n\nexport async function GET(_req: Request, ctx: { params: { tableId: string } }) {\n  const auth = await getAuthFromRequest(_req)\n  if (!auth) return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n\n  const tableId = decodeParam(ctx.params?.tableId).trim()\n  if (!tableId) return NextResponse.json({ error: 'Invalid table id' }, { status: 400 })\n\n  const container = await createRequestContainer()\n  const em = container.resolve('em') as import('@mikro-orm/postgresql').EntityManager\n  const cache = ((): import('@open-mercato/cache').CacheStrategy | null => {\n    try {\n      return container.resolve('cache') as import('@open-mercato/cache').CacheStrategy\n    } catch {\n      return null\n    }\n  })()\n  const rbac = container.resolve('rbacService') as {\n    userHasAllFeatures?: (\n      userId: string,\n      features: string[],\n      scope: { tenantId: string | null; organizationId: string | null },\n    ) => Promise<boolean>\n  }\n\n  const assignedRoleNames = Array.isArray(auth.roles)\n    ? Array.from(new Set(auth.roles.filter((role): role is string => typeof role === 'string' && role.trim().length > 0)))\n    : []\n  const assignedRoles = assignedRoleNames.length\n    ? await em.find(Role, {\n        name: { $in: assignedRoleNames as any },\n        deletedAt: null,\n      } as any, { orderBy: { name: 'asc' } })\n    : []\n  const assignedRoleIds = assignedRoles.map((role) => role.id)\n\n  const canApplyToRoles = await rbac.userHasAllFeatures?.(\n    auth.sub,\n    ['perspectives.role_defaults'],\n    { tenantId: auth.tenantId ?? null, organizationId: auth.orgId ?? null },\n  ) ?? false\n\n  const roleScope = auth.tenantId\n    ? { $or: [{ tenantId: auth.tenantId }, { tenantId: null }] }\n    : { tenantId: null }\n  const availableRoles = canApplyToRoles\n    ? await em.find(Role, { ...roleScope as any, deletedAt: null } as any, { orderBy: { name: 'asc' } })\n    : assignedRoles\n\n  const state = await loadPerspectivesState(em, cache, {\n    scope: buildScope(auth),\n    tableId,\n    roleIds: assignedRoleIds,\n  })\n\n  const rolePerspectiveByRole = new Map<string, { hasDefault: boolean; count: number }>()\n  for (const item of state.rolePerspectives) {\n    const entry = rolePerspectiveByRole.get(item.roleId) ?? { hasDefault: false, count: 0 }\n    entry.count += 1\n    entry.hasDefault = entry.hasDefault || item.isDefault\n    rolePerspectiveByRole.set(item.roleId, entry)\n  }\n\n  return NextResponse.json({\n    tableId,\n    perspectives: state.personal,\n    defaultPerspectiveId: state.personalDefaultId,\n    rolePerspectives: state.rolePerspectives.map((rp) => ({\n      ...rp,\n      roleName: availableRoles.find((role) => role.id === rp.roleId)?.name ?? assignedRoles.find((role) => role.id === rp.roleId)?.name ?? null,\n    })),\n    roles: availableRoles.map((role) => {\n      const stats = rolePerspectiveByRole.get(role.id)\n      return {\n        id: role.id,\n        name: role.name,\n        hasPerspective: Boolean(stats?.count),\n        hasDefault: Boolean(stats?.hasDefault),\n      }\n    }),\n    canApplyToRoles,\n  })\n}\n\nexport async function POST(req: Request, ctx: { params: { tableId: string } }) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth) return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n\n  const tableId = decodeParam(ctx.params?.tableId).trim()\n  if (!tableId) return NextResponse.json({ error: 'Invalid table id' }, { status: 400 })\n\n  let parsedBody: unknown\n  try {\n    parsedBody = await req.json()\n  } catch {\n    return NextResponse.json({ error: 'Invalid JSON' }, { status: 400 })\n  }\n\n  const parsed = perspectiveSaveSchema.safeParse(parsedBody)\n  if (!parsed.success) {\n    return NextResponse.json({ error: 'Invalid payload', details: parsed.error.flatten() }, { status: 400 })\n  }\n\n  const container = await createRequestContainer()\n  const em = container.resolve('em') as import('@mikro-orm/postgresql').EntityManager\n  const cache = ((): import('@open-mercato/cache').CacheStrategy | null => {\n    try {\n      return container.resolve('cache') as import('@open-mercato/cache').CacheStrategy\n    } catch {\n      return null\n    }\n  })()\n  const rbac = container.resolve('rbacService') as {\n    userHasAllFeatures?: (\n      userId: string,\n      features: string[],\n      scope: { tenantId: string | null; organizationId: string | null },\n    ) => Promise<boolean>\n  }\n\n  const scope = buildScope(auth)\n\n  const applyToRoles = Array.from(new Set(parsed.data.applyToRoles ?? [])).filter((id) => id.trim().length > 0)\n  const clearRoleIds = Array.from(new Set(parsed.data.clearRoleIds ?? [])).filter((id) => id.trim().length > 0)\n  const hasRoleOps = applyToRoles.length > 0 || clearRoleIds.length > 0\n\n  if (hasRoleOps) {\n    const canApplyToRoles = await rbac.userHasAllFeatures?.(\n      auth.sub,\n      ['perspectives.role_defaults'],\n      { tenantId: auth.tenantId ?? null, organizationId: auth.orgId ?? null },\n    ) ?? false\n\n    if (!canApplyToRoles) {\n      return NextResponse.json({ error: 'Forbidden', requiredFeatures: ['perspectives.role_defaults'] }, { status: 403 })\n    }\n\n    const roleScope = auth.tenantId\n      ? { $or: [{ tenantId: auth.tenantId }, { tenantId: null }] }\n      : { tenantId: null }\n    const targetRoleIds = Array.from(new Set([...applyToRoles, ...clearRoleIds]))\n    const roles = await em.find(Role, {\n      id: { $in: targetRoleIds as any },\n      ...(roleScope as any),\n      deletedAt: null,\n    } as any)\n    const validRoleIds = new Set(roles.map((role) => role.id))\n\n    const missing = targetRoleIds.filter((id) => !validRoleIds.has(id))\n    if (missing.length) {\n      return NextResponse.json({ error: 'Invalid roles', missing }, { status: 400 })\n    }\n  }\n\n  let saved: Awaited<ReturnType<typeof saveUserPerspective>> | null = null\n  let updatedRolePerspectives: Awaited<ReturnType<typeof saveRolePerspectives>> | null = null\n\n  try {\n    await withAtomicFlush(em, [\n    async () => {\n      saved = await saveUserPerspective(em, cache, {\n        scope,\n        tableId,\n        input: parsed.data,\n        request: req,\n      })\n    },\n    async () => {\n      if (applyToRoles.length) {\n        updatedRolePerspectives = await saveRolePerspectives(em, cache, {\n          tableId,\n          tenantId: auth.tenantId ?? null,\n          organizationId: auth.orgId ?? null,\n          input: {\n            roleIds: applyToRoles,\n            name: parsed.data.name,\n            settings: parsed.data.settings,\n            setDefault: parsed.data.setRoleDefault ?? false,\n          },\n        })\n      }\n    },\n    async () => {\n      if (clearRoleIds.length) {\n        await clearRolePerspectives(em, cache, {\n          tableId,\n          tenantId: auth.tenantId ?? null,\n          organizationId: auth.orgId ?? null,\n          roleIds: clearRoleIds,\n        })\n      }\n    },\n    ], { transaction: true })\n  } catch (err) {\n    if (isCrudHttpError(err)) {\n      return NextResponse.json(err.body, { status: err.status })\n    }\n    throw err\n  }\n\n  return NextResponse.json({\n    perspective: saved,\n    rolePerspectives: updatedRolePerspectives ?? [],\n    clearedRoleIds: clearRoleIds ?? [],\n  })\n}\n\nconst perspectivePathParamsSchema = z.object({\n  tableId: z.string().min(1),\n})\n\nconst perspectivesGetDoc: OpenApiMethodDoc = {\n  summary: 'Load perspectives for a table',\n  description: 'Returns personal perspectives and available role defaults for the requested table identifier.',\n  tags: [perspectivesTag],\n  responses: [\n    { status: 200, description: 'Current perspectives and defaults.', schema: perspectivesIndexResponseSchema },\n  ],\n  errors: [\n    { status: 400, description: 'Invalid table identifier', schema: perspectivesErrorSchema },\n    { status: 401, description: 'Authentication required', schema: perspectivesErrorSchema },\n  ],\n}\n\nconst perspectivesPostDoc: OpenApiMethodDoc = {\n  summary: 'Create or update a perspective',\n  description: 'Saves a personal perspective and optionally applies the same configuration to selected roles.',\n  tags: [perspectivesTag],\n  requestBody: {\n    contentType: 'application/json',\n    schema: perspectiveSaveSchema,\n    description: 'Perspective payload including optional role defaults.',\n  },\n  responses: [\n    { status: 200, description: 'Perspective saved successfully.', schema: perspectiveSaveResponseSchema },\n  ],\n  errors: [\n    { status: 400, description: 'Validation failed or invalid roles provided', schema: perspectivesErrorSchema },\n    { status: 401, description: 'Authentication required', schema: perspectivesErrorSchema },\n    { status: 403, description: 'Missing perspectives.role_defaults feature for role updates', schema: perspectivesErrorSchema },\n  ],\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: perspectivesTag,\n  summary: 'Manage table perspectives',\n  pathParams: perspectivePathParamsSchema,\n  methods: {\n    GET: perspectivesGetDoc,\n    POST: perspectivesPostDoc,\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AACvC,SAAS,uBAAuB;AAChC,SAAS,uBAAuB;AAChC,SAAS,6BAA6B;AACtC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAEK;AACP,SAAS,YAAY;AAErB;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEA,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,kBAAkB,EAAE;AAAA,EAChE,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,kBAAkB,EAAE;AACnE;AAEA,MAAM,cAAc,CAAC,UAAiD;AACpE,MAAI,CAAC,MAAO,QAAO;AACnB,QAAM,MAAM,MAAM,QAAQ,KAAK,IAAI,MAAM,CAAC,IAAI;AAC9C,MAAI;AACF,WAAO,mBAAmB,GAAG;AAAA,EAC/B,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,WAAW,MAAqF;AACvG,SAAO;AAAA,IACL,QAAQ,KAAK;AAAA,IACb,UAAU,KAAK,YAAY;AAAA,IAC3B,gBAAgB,KAAK,SAAS;AAAA,EAChC;AACF;AAEA,eAAsB,IAAI,MAAe,KAAsC;AAC7E,QAAM,OAAO,MAAM,mBAAmB,IAAI;AAC1C,MAAI,CAAC,KAAM,QAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAE9E,QAAM,UAAU,YAAY,IAAI,QAAQ,OAAO,EAAE,KAAK;AACtD,MAAI,CAAC,QAAS,QAAO,aAAa,KAAK,EAAE,OAAO,mBAAmB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAErF,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,QAAM,SAAS,MAA0D;AACvE,QAAI;AACF,aAAO,UAAU,QAAQ,OAAO;AAAA,IAClC,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF,GAAG;AACH,QAAM,OAAO,UAAU,QAAQ,aAAa;AAQ5C,QAAM,oBAAoB,MAAM,QAAQ,KAAK,KAAK,IAC9C,MAAM,KAAK,IAAI,IAAI,KAAK,MAAM,OAAO,CAAC,SAAyB,OAAO,SAAS,YAAY,KAAK,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,IACnH,CAAC;AACL,QAAM,gBAAgB,kBAAkB,SACpC,MAAM,GAAG,KAAK,MAAM;AAAA,IAClB,MAAM,EAAE,KAAK,kBAAyB;AAAA,IACtC,WAAW;AAAA,EACb,GAAU,EAAE,SAAS,EAAE,MAAM,MAAM,EAAE,CAAC,IACtC,CAAC;AACL,QAAM,kBAAkB,cAAc,IAAI,CAAC,SAAS,KAAK,EAAE;AAE3D,QAAM,kBAAkB,MAAM,KAAK;AAAA,IACjC,KAAK;AAAA,IACL,CAAC,4BAA4B;AAAA,IAC7B,EAAE,UAAU,KAAK,YAAY,MAAM,gBAAgB,KAAK,SAAS,KAAK;AAAA,EACxE,KAAK;AAEL,QAAM,YAAY,KAAK,WACnB,EAAE,KAAK,CAAC,EAAE,UAAU,KAAK,SAAS,GAAG,EAAE,UAAU,KAAK,CAAC,EAAE,IACzD,EAAE,UAAU,KAAK;AACrB,QAAM,iBAAiB,kBACnB,MAAM,GAAG,KAAK,MAAM,EAAE,GAAG,WAAkB,WAAW,KAAK,GAAU,EAAE,SAAS,EAAE,MAAM,MAAM,EAAE,CAAC,IACjG;AAEJ,QAAM,QAAQ,MAAM,sBAAsB,IAAI,OAAO;AAAA,IACnD,OAAO,WAAW,IAAI;AAAA,IACtB;AAAA,IACA,SAAS;AAAA,EACX,CAAC;AAED,QAAM,wBAAwB,oBAAI,IAAoD;AACtF,aAAW,QAAQ,MAAM,kBAAkB;AACzC,UAAM,QAAQ,sBAAsB,IAAI,KAAK,MAAM,KAAK,EAAE,YAAY,OAAO,OAAO,EAAE;AACtF,UAAM,SAAS;AACf,UAAM,aAAa,MAAM,cAAc,KAAK;AAC5C,0BAAsB,IAAI,KAAK,QAAQ,KAAK;AAAA,EAC9C;AAEA,SAAO,aAAa,KAAK;AAAA,IACvB;AAAA,IACA,cAAc,MAAM;AAAA,IACpB,sBAAsB,MAAM;AAAA,IAC5B,kBAAkB,MAAM,iBAAiB,IAAI,CAAC,QAAQ;AAAA,MACpD,GAAG;AAAA,MACH,UAAU,eAAe,KAAK,CAAC,SAAS,KAAK,OAAO,GAAG,MAAM,GAAG,QAAQ,cAAc,KAAK,CAAC,SAAS,KAAK,OAAO,GAAG,MAAM,GAAG,QAAQ;AAAA,IACvI,EAAE;AAAA,IACF,OAAO,eAAe,IAAI,CAAC,SAAS;AAClC,YAAM,QAAQ,sBAAsB,IAAI,KAAK,EAAE;AAC/C,aAAO;AAAA,QACL,IAAI,KAAK;AAAA,QACT,MAAM,KAAK;AAAA,QACX,gBAAgB,QAAQ,OAAO,KAAK;AAAA,QACpC,YAAY,QAAQ,OAAO,UAAU;AAAA,MACvC;AAAA,IACF,CAAC;AAAA,IACD;AAAA,EACF,CAAC;AACH;AAEA,eAAsB,KAAK,KAAc,KAAsC;AAC7E,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,KAAM,QAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAE9E,QAAM,UAAU,YAAY,IAAI,QAAQ,OAAO,EAAE,KAAK;AACtD,MAAI,CAAC,QAAS,QAAO,aAAa,KAAK,EAAE,OAAO,mBAAmB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAErF,MAAI;AACJ,MAAI;AACF,iBAAa,MAAM,IAAI,KAAK;AAAA,EAC9B,QAAQ;AACN,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAEA,QAAM,SAAS,sBAAsB,UAAU,UAAU;AACzD,MAAI,CAAC,OAAO,SAAS;AACnB,WAAO,aAAa,KAAK,EAAE,OAAO,mBAAmB,SAAS,OAAO,MAAM,QAAQ,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACzG;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,QAAM,SAAS,MAA0D;AACvE,QAAI;AACF,aAAO,UAAU,QAAQ,OAAO;AAAA,IAClC,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF,GAAG;AACH,QAAM,OAAO,UAAU,QAAQ,aAAa;AAQ5C,QAAM,QAAQ,WAAW,IAAI;AAE7B,QAAM,eAAe,MAAM,KAAK,IAAI,IAAI,OAAO,KAAK,gBAAgB,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,OAAO,GAAG,KAAK,EAAE,SAAS,CAAC;AAC5G,QAAM,eAAe,MAAM,KAAK,IAAI,IAAI,OAAO,KAAK,gBAAgB,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,OAAO,GAAG,KAAK,EAAE,SAAS,CAAC;AAC5G,QAAM,aAAa,aAAa,SAAS,KAAK,aAAa,SAAS;AAEpE,MAAI,YAAY;AACd,UAAM,kBAAkB,MAAM,KAAK;AAAA,MACjC,KAAK;AAAA,MACL,CAAC,4BAA4B;AAAA,MAC7B,EAAE,UAAU,KAAK,YAAY,MAAM,gBAAgB,KAAK,SAAS,KAAK;AAAA,IACxE,KAAK;AAEL,QAAI,CAAC,iBAAiB;AACpB,aAAO,aAAa,KAAK,EAAE,OAAO,aAAa,kBAAkB,CAAC,4BAA4B,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACpH;AAEA,UAAM,YAAY,KAAK,WACnB,EAAE,KAAK,CAAC,EAAE,UAAU,KAAK,SAAS,GAAG,EAAE,UAAU,KAAK,CAAC,EAAE,IACzD,EAAE,UAAU,KAAK;AACrB,UAAM,gBAAgB,MAAM,KAAK,oBAAI,IAAI,CAAC,GAAG,cAAc,GAAG,YAAY,CAAC,CAAC;AAC5E,UAAM,QAAQ,MAAM,GAAG,KAAK,MAAM;AAAA,MAChC,IAAI,EAAE,KAAK,cAAqB;AAAA,MAChC,GAAI;AAAA,MACJ,WAAW;AAAA,IACb,CAAQ;AACR,UAAM,eAAe,IAAI,IAAI,MAAM,IAAI,CAAC,SAAS,KAAK,EAAE,CAAC;AAEzD,UAAM,UAAU,cAAc,OAAO,CAAC,OAAO,CAAC,aAAa,IAAI,EAAE,CAAC;AAClE,QAAI,QAAQ,QAAQ;AAClB,aAAO,aAAa,KAAK,EAAE,OAAO,iBAAiB,QAAQ,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC/E;AAAA,EACF;AAEA,MAAI,QAAgE;AACpE,MAAI,0BAAmF;AAEvF,MAAI;AACF,UAAM,gBAAgB,IAAI;AAAA,MAC1B,YAAY;AACV,gBAAQ,MAAM,oBAAoB,IAAI,OAAO;AAAA,UAC3C;AAAA,UACA;AAAA,UACA,OAAO,OAAO;AAAA,UACd,SAAS;AAAA,QACX,CAAC;AAAA,MACH;AAAA,MACA,YAAY;AACV,YAAI,aAAa,QAAQ;AACvB,oCAA0B,MAAM,qBAAqB,IAAI,OAAO;AAAA,YAC9D;AAAA,YACA,UAAU,KAAK,YAAY;AAAA,YAC3B,gBAAgB,KAAK,SAAS;AAAA,YAC9B,OAAO;AAAA,cACL,SAAS;AAAA,cACT,MAAM,OAAO,KAAK;AAAA,cAClB,UAAU,OAAO,KAAK;AAAA,cACtB,YAAY,OAAO,KAAK,kBAAkB;AAAA,YAC5C;AAAA,UACF,CAAC;AAAA,QACH;AAAA,MACF;AAAA,MACA,YAAY;AACV,YAAI,aAAa,QAAQ;AACvB,gBAAM,sBAAsB,IAAI,OAAO;AAAA,YACrC;AAAA,YACA,UAAU,KAAK,YAAY;AAAA,YAC3B,gBAAgB,KAAK,SAAS;AAAA,YAC9B,SAAS;AAAA,UACX,CAAC;AAAA,QACH;AAAA,MACF;AAAA,IACA,GAAG,EAAE,aAAa,KAAK,CAAC;AAAA,EAC1B,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,GAAG;AACxB,aAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,IAC3D;AACA,UAAM;AAAA,EACR;AAEA,SAAO,aAAa,KAAK;AAAA,IACvB,aAAa;AAAA,IACb,kBAAkB,2BAA2B,CAAC;AAAA,IAC9C,gBAAgB,gBAAgB,CAAC;AAAA,EACnC,CAAC;AACH;AAEA,MAAM,8BAA8B,EAAE,OAAO;AAAA,EAC3C,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC;AAC3B,CAAC;AAED,MAAM,qBAAuC;AAAA,EAC3C,SAAS;AAAA,EACT,aAAa;AAAA,EACb,MAAM,CAAC,eAAe;AAAA,EACtB,WAAW;AAAA,IACT,EAAE,QAAQ,KAAK,aAAa,sCAAsC,QAAQ,gCAAgC;AAAA,EAC5G;AAAA,EACA,QAAQ;AAAA,IACN,EAAE,QAAQ,KAAK,aAAa,4BAA4B,QAAQ,wBAAwB;AAAA,IACxF,EAAE,QAAQ,KAAK,aAAa,2BAA2B,QAAQ,wBAAwB;AAAA,EACzF;AACF;AAEA,MAAM,sBAAwC;AAAA,EAC5C,SAAS;AAAA,EACT,aAAa;AAAA,EACb,MAAM,CAAC,eAAe;AAAA,EACtB,aAAa;AAAA,IACX,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,aAAa;AAAA,EACf;AAAA,EACA,WAAW;AAAA,IACT,EAAE,QAAQ,KAAK,aAAa,mCAAmC,QAAQ,8BAA8B;AAAA,EACvG;AAAA,EACA,QAAQ;AAAA,IACN,EAAE,QAAQ,KAAK,aAAa,+CAA+C,QAAQ,wBAAwB;AAAA,IAC3G,EAAE,QAAQ,KAAK,aAAa,2BAA2B,QAAQ,wBAAwB;AAAA,IACvF,EAAE,QAAQ,KAAK,aAAa,+DAA+D,QAAQ,wBAAwB;AAAA,EAC7H;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,YAAY;AAAA,EACZ,SAAS;AAAA,IACP,KAAK;AAAA,IACL,MAAM;AAAA,EACR;AACF;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { withAtomicFlush } from '@open-mercato/shared/lib/commands/flush'\nimport { isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport {\n  runCrudMutationGuardAfterSuccess,\n  validateCrudMutationGuard,\n} from '@open-mercato/shared/lib/crud/mutation-guard'\nimport { perspectiveSaveSchema } from '@open-mercato/core/modules/perspectives/data/validators'\nimport {\n  loadPerspectivesState,\n  saveUserPerspective,\n  saveRolePerspectives,\n  clearRolePerspectives,\n  type PerspectiveScope,\n} from '@open-mercato/core/modules/perspectives/services/perspectiveService'\nimport { Role } from '@open-mercato/core/modules/auth/data/entities'\nimport type { OpenApiMethodDoc, OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport {\n  perspectivesTag,\n  perspectivesErrorSchema,\n  perspectivesIndexResponseSchema,\n  perspectiveSaveResponseSchema,\n} from '../openapi'\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['perspectives.use'] },\n  POST: { requireAuth: true, requireFeatures: ['perspectives.use'] },\n}\n\nconst decodeParam = (value: string | string[] | undefined): string => {\n  if (!value) return ''\n  const raw = Array.isArray(value) ? value[0] : value\n  try {\n    return decodeURIComponent(raw)\n  } catch {\n    return raw\n  }\n}\n\nfunction buildScope(auth: NonNullable<Awaited<ReturnType<typeof getAuthFromRequest>>>): PerspectiveScope {\n  return {\n    userId: auth.sub,\n    tenantId: auth.tenantId ?? null,\n    organizationId: auth.orgId ?? null,\n  }\n}\n\nexport async function GET(_req: Request, ctx: { params: { tableId: string } }) {\n  const auth = await getAuthFromRequest(_req)\n  if (!auth) return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n\n  const tableId = decodeParam(ctx.params?.tableId).trim()\n  if (!tableId) return NextResponse.json({ error: 'Invalid table id' }, { status: 400 })\n\n  const container = await createRequestContainer()\n  const em = container.resolve('em') as import('@mikro-orm/postgresql').EntityManager\n  const cache = ((): import('@open-mercato/cache').CacheStrategy | null => {\n    try {\n      return container.resolve('cache') as import('@open-mercato/cache').CacheStrategy\n    } catch {\n      return null\n    }\n  })()\n  const rbac = container.resolve('rbacService') as {\n    userHasAllFeatures?: (\n      userId: string,\n      features: string[],\n      scope: { tenantId: string | null; organizationId: string | null },\n    ) => Promise<boolean>\n  }\n\n  const assignedRoleNames = Array.isArray(auth.roles)\n    ? Array.from(new Set(auth.roles.filter((role): role is string => typeof role === 'string' && role.trim().length > 0)))\n    : []\n  const assignedRoles = assignedRoleNames.length\n    ? await em.find(Role, {\n        name: { $in: assignedRoleNames as any },\n        deletedAt: null,\n      } as any, { orderBy: { name: 'asc' } })\n    : []\n  const assignedRoleIds = assignedRoles.map((role) => role.id)\n\n  const canApplyToRoles = await rbac.userHasAllFeatures?.(\n    auth.sub,\n    ['perspectives.role_defaults'],\n    { tenantId: auth.tenantId ?? null, organizationId: auth.orgId ?? null },\n  ) ?? false\n\n  const roleScope = auth.tenantId\n    ? { $or: [{ tenantId: auth.tenantId }, { tenantId: null }] }\n    : { tenantId: null }\n  const availableRoles = canApplyToRoles\n    ? await em.find(Role, { ...roleScope as any, deletedAt: null } as any, { orderBy: { name: 'asc' } })\n    : assignedRoles\n\n  const state = await loadPerspectivesState(em, cache, {\n    scope: buildScope(auth),\n    tableId,\n    roleIds: assignedRoleIds,\n  })\n\n  const rolePerspectiveByRole = new Map<string, { hasDefault: boolean; count: number }>()\n  for (const item of state.rolePerspectives) {\n    const entry = rolePerspectiveByRole.get(item.roleId) ?? { hasDefault: false, count: 0 }\n    entry.count += 1\n    entry.hasDefault = entry.hasDefault || item.isDefault\n    rolePerspectiveByRole.set(item.roleId, entry)\n  }\n\n  return NextResponse.json({\n    tableId,\n    perspectives: state.personal,\n    defaultPerspectiveId: state.personalDefaultId,\n    rolePerspectives: state.rolePerspectives.map((rp) => ({\n      ...rp,\n      roleName: availableRoles.find((role) => role.id === rp.roleId)?.name ?? assignedRoles.find((role) => role.id === rp.roleId)?.name ?? null,\n    })),\n    roles: availableRoles.map((role) => {\n      const stats = rolePerspectiveByRole.get(role.id)\n      return {\n        id: role.id,\n        name: role.name,\n        hasPerspective: Boolean(stats?.count),\n        hasDefault: Boolean(stats?.hasDefault),\n      }\n    }),\n    canApplyToRoles,\n  })\n}\n\nexport async function POST(req: Request, ctx: { params: { tableId: string } }) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth) return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n\n  const tableId = decodeParam(ctx.params?.tableId).trim()\n  if (!tableId) return NextResponse.json({ error: 'Invalid table id' }, { status: 400 })\n\n  let parsedBody: unknown\n  try {\n    parsedBody = await req.json()\n  } catch {\n    return NextResponse.json({ error: 'Invalid JSON' }, { status: 400 })\n  }\n\n  const parsed = perspectiveSaveSchema.safeParse(parsedBody)\n  if (!parsed.success) {\n    return NextResponse.json({ error: 'Invalid payload', details: parsed.error.flatten() }, { status: 400 })\n  }\n\n  const container = await createRequestContainer()\n  const em = container.resolve('em') as import('@mikro-orm/postgresql').EntityManager\n  const cache = ((): import('@open-mercato/cache').CacheStrategy | null => {\n    try {\n      return container.resolve('cache') as import('@open-mercato/cache').CacheStrategy\n    } catch {\n      return null\n    }\n  })()\n  const rbac = container.resolve('rbacService') as {\n    userHasAllFeatures?: (\n      userId: string,\n      features: string[],\n      scope: { tenantId: string | null; organizationId: string | null },\n    ) => Promise<boolean>\n  }\n\n  const scope = buildScope(auth)\n\n  const applyToRoles = Array.from(new Set(parsed.data.applyToRoles ?? [])).filter((id) => id.trim().length > 0)\n  const clearRoleIds = Array.from(new Set(parsed.data.clearRoleIds ?? [])).filter((id) => id.trim().length > 0)\n  const hasRoleOps = applyToRoles.length > 0 || clearRoleIds.length > 0\n  const targetRoleIds = Array.from(new Set([...applyToRoles, ...clearRoleIds]))\n\n  if (hasRoleOps) {\n    const canApplyToRoles = await rbac.userHasAllFeatures?.(\n      auth.sub,\n      ['perspectives.role_defaults'],\n      { tenantId: auth.tenantId ?? null, organizationId: auth.orgId ?? null },\n    ) ?? false\n\n    if (!canApplyToRoles) {\n      return NextResponse.json({ error: 'Forbidden', requiredFeatures: ['perspectives.role_defaults'] }, { status: 403 })\n    }\n\n    const roleScope = auth.tenantId\n      ? { $or: [{ tenantId: auth.tenantId }, { tenantId: null }] }\n      : { tenantId: null }\n    const roles = await em.find(Role, {\n      id: { $in: targetRoleIds as any },\n      ...(roleScope as any),\n      deletedAt: null,\n    } as any)\n    const validRoleIds = new Set(roles.map((role) => role.id))\n\n    const missing = targetRoleIds.filter((id) => !validRoleIds.has(id))\n    if (missing.length) {\n      return NextResponse.json({ error: 'Invalid roles', missing }, { status: 400 })\n    }\n  }\n\n  const guardResourceId = parsed.data.perspectiveId ?? tableId\n  const guardResult = await validateCrudMutationGuard(container, {\n    tenantId: auth.tenantId ?? '',\n    organizationId: auth.orgId ?? null,\n    userId: auth.sub,\n    resourceKind: 'perspectives.perspective',\n    resourceId: guardResourceId,\n    operation: 'custom',\n    requestMethod: req.method,\n    requestHeaders: req.headers,\n    mutationPayload: { ...parsed.data, tableId },\n  })\n  if (guardResult && !guardResult.ok) {\n    return NextResponse.json(guardResult.body, { status: guardResult.status })\n  }\n\n  let roleGuardResult: Awaited<ReturnType<typeof validateCrudMutationGuard>> | null = null\n  if (hasRoleOps) {\n    roleGuardResult = await validateCrudMutationGuard(container, {\n      tenantId: auth.tenantId ?? '',\n      organizationId: auth.orgId ?? null,\n      userId: auth.sub,\n      resourceKind: 'perspectives.role_perspective',\n      resourceId: targetRoleIds.join(','),\n      operation: 'custom',\n      requestMethod: req.method,\n      requestHeaders: req.headers,\n      mutationPayload: {\n        tableId,\n        applyToRoles,\n        clearRoleIds,\n        name: parsed.data.name,\n        settings: parsed.data.settings,\n        setRoleDefault: parsed.data.setRoleDefault ?? false,\n      },\n    })\n  }\n  if (roleGuardResult && !roleGuardResult.ok) {\n    return NextResponse.json(roleGuardResult.body, { status: roleGuardResult.status })\n  }\n\n  let saved: Awaited<ReturnType<typeof saveUserPerspective>> | null = null\n  let updatedRolePerspectives: Awaited<ReturnType<typeof saveRolePerspectives>> | null = null\n  let clearedRolePerspectiveCount = 0\n\n  try {\n    await withAtomicFlush(em, [\n      async () => {\n        saved = await saveUserPerspective(em, cache, {\n          scope,\n          tableId,\n          input: parsed.data,\n          request: req,\n        })\n      },\n      async () => {\n        if (applyToRoles.length) {\n          updatedRolePerspectives = await saveRolePerspectives(em, cache, {\n            tableId,\n            tenantId: auth.tenantId ?? null,\n            organizationId: auth.orgId ?? null,\n            input: {\n              roleIds: applyToRoles,\n              name: parsed.data.name,\n              settings: parsed.data.settings,\n              setDefault: parsed.data.setRoleDefault ?? false,\n            },\n          })\n        }\n      },\n      async () => {\n        if (clearRoleIds.length) {\n          clearedRolePerspectiveCount = await clearRolePerspectives(em, cache, {\n            tableId,\n            tenantId: auth.tenantId ?? null,\n            organizationId: auth.orgId ?? null,\n            roleIds: clearRoleIds,\n          })\n        }\n      },\n    ], { transaction: true })\n  } catch (err) {\n    if (isCrudHttpError(err)) {\n      return NextResponse.json(err.body, { status: err.status })\n    }\n    throw err\n  }\n\n  if (guardResult?.ok && guardResult.shouldRunAfterSuccess) {\n    await runCrudMutationGuardAfterSuccess(container, {\n      tenantId: auth.tenantId ?? '',\n      organizationId: auth.orgId ?? null,\n      userId: auth.sub,\n      resourceKind: 'perspectives.perspective',\n      resourceId: guardResourceId,\n      operation: 'custom',\n      requestMethod: req.method,\n      requestHeaders: req.headers,\n      metadata: guardResult.metadata ?? null,\n    })\n  }\n\n  const didWriteRolePerspectives = applyToRoles.length > 0 || clearedRolePerspectiveCount > 0\n  if (didWriteRolePerspectives && roleGuardResult?.ok && roleGuardResult.shouldRunAfterSuccess) {\n    await runCrudMutationGuardAfterSuccess(container, {\n      tenantId: auth.tenantId ?? '',\n      organizationId: auth.orgId ?? null,\n      userId: auth.sub,\n      resourceKind: 'perspectives.role_perspective',\n      resourceId: targetRoleIds.join(','),\n      operation: 'custom',\n      requestMethod: req.method,\n      requestHeaders: req.headers,\n      metadata: roleGuardResult.metadata ?? null,\n    })\n  }\n\n  return NextResponse.json({\n    perspective: saved,\n    rolePerspectives: updatedRolePerspectives ?? [],\n    clearedRoleIds: clearRoleIds ?? [],\n  })\n}\n\nconst perspectivePathParamsSchema = z.object({\n  tableId: z.string().min(1),\n})\n\nconst perspectivesGetDoc: OpenApiMethodDoc = {\n  summary: 'Load perspectives for a table',\n  description: 'Returns personal perspectives and available role defaults for the requested table identifier.',\n  tags: [perspectivesTag],\n  responses: [\n    { status: 200, description: 'Current perspectives and defaults.', schema: perspectivesIndexResponseSchema },\n  ],\n  errors: [\n    { status: 400, description: 'Invalid table identifier', schema: perspectivesErrorSchema },\n    { status: 401, description: 'Authentication required', schema: perspectivesErrorSchema },\n  ],\n}\n\nconst perspectivesPostDoc: OpenApiMethodDoc = {\n  summary: 'Create or update a perspective',\n  description: 'Saves a personal perspective and optionally applies the same configuration to selected roles.',\n  tags: [perspectivesTag],\n  requestBody: {\n    contentType: 'application/json',\n    schema: perspectiveSaveSchema,\n    description: 'Perspective payload including optional role defaults.',\n  },\n  responses: [\n    { status: 200, description: 'Perspective saved successfully.', schema: perspectiveSaveResponseSchema },\n  ],\n  errors: [\n    { status: 400, description: 'Validation failed or invalid roles provided', schema: perspectivesErrorSchema },\n    { status: 401, description: 'Authentication required', schema: perspectivesErrorSchema },\n    { status: 403, description: 'Missing perspectives.role_defaults feature for role updates', schema: perspectivesErrorSchema },\n  ],\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: perspectivesTag,\n  summary: 'Manage table perspectives',\n  pathParams: perspectivePathParamsSchema,\n  methods: {\n    GET: perspectivesGetDoc,\n    POST: perspectivesPostDoc,\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AACvC,SAAS,uBAAuB;AAChC,SAAS,uBAAuB;AAChC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,6BAA6B;AACtC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAEK;AACP,SAAS,YAAY;AAErB;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEA,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,kBAAkB,EAAE;AAAA,EAChE,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,kBAAkB,EAAE;AACnE;AAEA,MAAM,cAAc,CAAC,UAAiD;AACpE,MAAI,CAAC,MAAO,QAAO;AACnB,QAAM,MAAM,MAAM,QAAQ,KAAK,IAAI,MAAM,CAAC,IAAI;AAC9C,MAAI;AACF,WAAO,mBAAmB,GAAG;AAAA,EAC/B,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,WAAW,MAAqF;AACvG,SAAO;AAAA,IACL,QAAQ,KAAK;AAAA,IACb,UAAU,KAAK,YAAY;AAAA,IAC3B,gBAAgB,KAAK,SAAS;AAAA,EAChC;AACF;AAEA,eAAsB,IAAI,MAAe,KAAsC;AAC7E,QAAM,OAAO,MAAM,mBAAmB,IAAI;AAC1C,MAAI,CAAC,KAAM,QAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAE9E,QAAM,UAAU,YAAY,IAAI,QAAQ,OAAO,EAAE,KAAK;AACtD,MAAI,CAAC,QAAS,QAAO,aAAa,KAAK,EAAE,OAAO,mBAAmB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAErF,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,QAAM,SAAS,MAA0D;AACvE,QAAI;AACF,aAAO,UAAU,QAAQ,OAAO;AAAA,IAClC,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF,GAAG;AACH,QAAM,OAAO,UAAU,QAAQ,aAAa;AAQ5C,QAAM,oBAAoB,MAAM,QAAQ,KAAK,KAAK,IAC9C,MAAM,KAAK,IAAI,IAAI,KAAK,MAAM,OAAO,CAAC,SAAyB,OAAO,SAAS,YAAY,KAAK,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,IACnH,CAAC;AACL,QAAM,gBAAgB,kBAAkB,SACpC,MAAM,GAAG,KAAK,MAAM;AAAA,IAClB,MAAM,EAAE,KAAK,kBAAyB;AAAA,IACtC,WAAW;AAAA,EACb,GAAU,EAAE,SAAS,EAAE,MAAM,MAAM,EAAE,CAAC,IACtC,CAAC;AACL,QAAM,kBAAkB,cAAc,IAAI,CAAC,SAAS,KAAK,EAAE;AAE3D,QAAM,kBAAkB,MAAM,KAAK;AAAA,IACjC,KAAK;AAAA,IACL,CAAC,4BAA4B;AAAA,IAC7B,EAAE,UAAU,KAAK,YAAY,MAAM,gBAAgB,KAAK,SAAS,KAAK;AAAA,EACxE,KAAK;AAEL,QAAM,YAAY,KAAK,WACnB,EAAE,KAAK,CAAC,EAAE,UAAU,KAAK,SAAS,GAAG,EAAE,UAAU,KAAK,CAAC,EAAE,IACzD,EAAE,UAAU,KAAK;AACrB,QAAM,iBAAiB,kBACnB,MAAM,GAAG,KAAK,MAAM,EAAE,GAAG,WAAkB,WAAW,KAAK,GAAU,EAAE,SAAS,EAAE,MAAM,MAAM,EAAE,CAAC,IACjG;AAEJ,QAAM,QAAQ,MAAM,sBAAsB,IAAI,OAAO;AAAA,IACnD,OAAO,WAAW,IAAI;AAAA,IACtB;AAAA,IACA,SAAS;AAAA,EACX,CAAC;AAED,QAAM,wBAAwB,oBAAI,IAAoD;AACtF,aAAW,QAAQ,MAAM,kBAAkB;AACzC,UAAM,QAAQ,sBAAsB,IAAI,KAAK,MAAM,KAAK,EAAE,YAAY,OAAO,OAAO,EAAE;AACtF,UAAM,SAAS;AACf,UAAM,aAAa,MAAM,cAAc,KAAK;AAC5C,0BAAsB,IAAI,KAAK,QAAQ,KAAK;AAAA,EAC9C;AAEA,SAAO,aAAa,KAAK;AAAA,IACvB;AAAA,IACA,cAAc,MAAM;AAAA,IACpB,sBAAsB,MAAM;AAAA,IAC5B,kBAAkB,MAAM,iBAAiB,IAAI,CAAC,QAAQ;AAAA,MACpD,GAAG;AAAA,MACH,UAAU,eAAe,KAAK,CAAC,SAAS,KAAK,OAAO,GAAG,MAAM,GAAG,QAAQ,cAAc,KAAK,CAAC,SAAS,KAAK,OAAO,GAAG,MAAM,GAAG,QAAQ;AAAA,IACvI,EAAE;AAAA,IACF,OAAO,eAAe,IAAI,CAAC,SAAS;AAClC,YAAM,QAAQ,sBAAsB,IAAI,KAAK,EAAE;AAC/C,aAAO;AAAA,QACL,IAAI,KAAK;AAAA,QACT,MAAM,KAAK;AAAA,QACX,gBAAgB,QAAQ,OAAO,KAAK;AAAA,QACpC,YAAY,QAAQ,OAAO,UAAU;AAAA,MACvC;AAAA,IACF,CAAC;AAAA,IACD;AAAA,EACF,CAAC;AACH;AAEA,eAAsB,KAAK,KAAc,KAAsC;AAC7E,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,KAAM,QAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAE9E,QAAM,UAAU,YAAY,IAAI,QAAQ,OAAO,EAAE,KAAK;AACtD,MAAI,CAAC,QAAS,QAAO,aAAa,KAAK,EAAE,OAAO,mBAAmB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAErF,MAAI;AACJ,MAAI;AACF,iBAAa,MAAM,IAAI,KAAK;AAAA,EAC9B,QAAQ;AACN,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAEA,QAAM,SAAS,sBAAsB,UAAU,UAAU;AACzD,MAAI,CAAC,OAAO,SAAS;AACnB,WAAO,aAAa,KAAK,EAAE,OAAO,mBAAmB,SAAS,OAAO,MAAM,QAAQ,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACzG;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,QAAM,SAAS,MAA0D;AACvE,QAAI;AACF,aAAO,UAAU,QAAQ,OAAO;AAAA,IAClC,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF,GAAG;AACH,QAAM,OAAO,UAAU,QAAQ,aAAa;AAQ5C,QAAM,QAAQ,WAAW,IAAI;AAE7B,QAAM,eAAe,MAAM,KAAK,IAAI,IAAI,OAAO,KAAK,gBAAgB,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,OAAO,GAAG,KAAK,EAAE,SAAS,CAAC;AAC5G,QAAM,eAAe,MAAM,KAAK,IAAI,IAAI,OAAO,KAAK,gBAAgB,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,OAAO,GAAG,KAAK,EAAE,SAAS,CAAC;AAC5G,QAAM,aAAa,aAAa,SAAS,KAAK,aAAa,SAAS;AACpE,QAAM,gBAAgB,MAAM,KAAK,oBAAI,IAAI,CAAC,GAAG,cAAc,GAAG,YAAY,CAAC,CAAC;AAE5E,MAAI,YAAY;AACd,UAAM,kBAAkB,MAAM,KAAK;AAAA,MACjC,KAAK;AAAA,MACL,CAAC,4BAA4B;AAAA,MAC7B,EAAE,UAAU,KAAK,YAAY,MAAM,gBAAgB,KAAK,SAAS,KAAK;AAAA,IACxE,KAAK;AAEL,QAAI,CAAC,iBAAiB;AACpB,aAAO,aAAa,KAAK,EAAE,OAAO,aAAa,kBAAkB,CAAC,4BAA4B,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACpH;AAEA,UAAM,YAAY,KAAK,WACnB,EAAE,KAAK,CAAC,EAAE,UAAU,KAAK,SAAS,GAAG,EAAE,UAAU,KAAK,CAAC,EAAE,IACzD,EAAE,UAAU,KAAK;AACrB,UAAM,QAAQ,MAAM,GAAG,KAAK,MAAM;AAAA,MAChC,IAAI,EAAE,KAAK,cAAqB;AAAA,MAChC,GAAI;AAAA,MACJ,WAAW;AAAA,IACb,CAAQ;AACR,UAAM,eAAe,IAAI,IAAI,MAAM,IAAI,CAAC,SAAS,KAAK,EAAE,CAAC;AAEzD,UAAM,UAAU,cAAc,OAAO,CAAC,OAAO,CAAC,aAAa,IAAI,EAAE,CAAC;AAClE,QAAI,QAAQ,QAAQ;AAClB,aAAO,aAAa,KAAK,EAAE,OAAO,iBAAiB,QAAQ,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC/E;AAAA,EACF;AAEA,QAAM,kBAAkB,OAAO,KAAK,iBAAiB;AACrD,QAAM,cAAc,MAAM,0BAA0B,WAAW;AAAA,IAC7D,UAAU,KAAK,YAAY;AAAA,IAC3B,gBAAgB,KAAK,SAAS;AAAA,IAC9B,QAAQ,KAAK;AAAA,IACb,cAAc;AAAA,IACd,YAAY;AAAA,IACZ,WAAW;AAAA,IACX,eAAe,IAAI;AAAA,IACnB,gBAAgB,IAAI;AAAA,IACpB,iBAAiB,EAAE,GAAG,OAAO,MAAM,QAAQ;AAAA,EAC7C,CAAC;AACD,MAAI,eAAe,CAAC,YAAY,IAAI;AAClC,WAAO,aAAa,KAAK,YAAY,MAAM,EAAE,QAAQ,YAAY,OAAO,CAAC;AAAA,EAC3E;AAEA,MAAI,kBAAgF;AACpF,MAAI,YAAY;AACd,sBAAkB,MAAM,0BAA0B,WAAW;AAAA,MAC3D,UAAU,KAAK,YAAY;AAAA,MAC3B,gBAAgB,KAAK,SAAS;AAAA,MAC9B,QAAQ,KAAK;AAAA,MACb,cAAc;AAAA,MACd,YAAY,cAAc,KAAK,GAAG;AAAA,MAClC,WAAW;AAAA,MACX,eAAe,IAAI;AAAA,MACnB,gBAAgB,IAAI;AAAA,MACpB,iBAAiB;AAAA,QACf;AAAA,QACA;AAAA,QACA;AAAA,QACA,MAAM,OAAO,KAAK;AAAA,QAClB,UAAU,OAAO,KAAK;AAAA,QACtB,gBAAgB,OAAO,KAAK,kBAAkB;AAAA,MAChD;AAAA,IACF,CAAC;AAAA,EACH;AACA,MAAI,mBAAmB,CAAC,gBAAgB,IAAI;AAC1C,WAAO,aAAa,KAAK,gBAAgB,MAAM,EAAE,QAAQ,gBAAgB,OAAO,CAAC;AAAA,EACnF;AAEA,MAAI,QAAgE;AACpE,MAAI,0BAAmF;AACvF,MAAI,8BAA8B;AAElC,MAAI;AACF,UAAM,gBAAgB,IAAI;AAAA,MACxB,YAAY;AACV,gBAAQ,MAAM,oBAAoB,IAAI,OAAO;AAAA,UAC3C;AAAA,UACA;AAAA,UACA,OAAO,OAAO;AAAA,UACd,SAAS;AAAA,QACX,CAAC;AAAA,MACH;AAAA,MACA,YAAY;AACV,YAAI,aAAa,QAAQ;AACvB,oCAA0B,MAAM,qBAAqB,IAAI,OAAO;AAAA,YAC9D;AAAA,YACA,UAAU,KAAK,YAAY;AAAA,YAC3B,gBAAgB,KAAK,SAAS;AAAA,YAC9B,OAAO;AAAA,cACL,SAAS;AAAA,cACT,MAAM,OAAO,KAAK;AAAA,cAClB,UAAU,OAAO,KAAK;AAAA,cACtB,YAAY,OAAO,KAAK,kBAAkB;AAAA,YAC5C;AAAA,UACF,CAAC;AAAA,QACH;AAAA,MACF;AAAA,MACA,YAAY;AACV,YAAI,aAAa,QAAQ;AACvB,wCAA8B,MAAM,sBAAsB,IAAI,OAAO;AAAA,YACnE;AAAA,YACA,UAAU,KAAK,YAAY;AAAA,YAC3B,gBAAgB,KAAK,SAAS;AAAA,YAC9B,SAAS;AAAA,UACX,CAAC;AAAA,QACH;AAAA,MACF;AAAA,IACF,GAAG,EAAE,aAAa,KAAK,CAAC;AAAA,EAC1B,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,GAAG;AACxB,aAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,IAC3D;AACA,UAAM;AAAA,EACR;AAEA,MAAI,aAAa,MAAM,YAAY,uBAAuB;AACxD,UAAM,iCAAiC,WAAW;AAAA,MAChD,UAAU,KAAK,YAAY;AAAA,MAC3B,gBAAgB,KAAK,SAAS;AAAA,MAC9B,QAAQ,KAAK;AAAA,MACb,cAAc;AAAA,MACd,YAAY;AAAA,MACZ,WAAW;AAAA,MACX,eAAe,IAAI;AAAA,MACnB,gBAAgB,IAAI;AAAA,MACpB,UAAU,YAAY,YAAY;AAAA,IACpC,CAAC;AAAA,EACH;AAEA,QAAM,2BAA2B,aAAa,SAAS,KAAK,8BAA8B;AAC1F,MAAI,4BAA4B,iBAAiB,MAAM,gBAAgB,uBAAuB;AAC5F,UAAM,iCAAiC,WAAW;AAAA,MAChD,UAAU,KAAK,YAAY;AAAA,MAC3B,gBAAgB,KAAK,SAAS;AAAA,MAC9B,QAAQ,KAAK;AAAA,MACb,cAAc;AAAA,MACd,YAAY,cAAc,KAAK,GAAG;AAAA,MAClC,WAAW;AAAA,MACX,eAAe,IAAI;AAAA,MACnB,gBAAgB,IAAI;AAAA,MACpB,UAAU,gBAAgB,YAAY;AAAA,IACxC,CAAC;AAAA,EACH;AAEA,SAAO,aAAa,KAAK;AAAA,IACvB,aAAa;AAAA,IACb,kBAAkB,2BAA2B,CAAC;AAAA,IAC9C,gBAAgB,gBAAgB,CAAC;AAAA,EACnC,CAAC;AACH;AAEA,MAAM,8BAA8B,EAAE,OAAO;AAAA,EAC3C,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC;AAC3B,CAAC;AAED,MAAM,qBAAuC;AAAA,EAC3C,SAAS;AAAA,EACT,aAAa;AAAA,EACb,MAAM,CAAC,eAAe;AAAA,EACtB,WAAW;AAAA,IACT,EAAE,QAAQ,KAAK,aAAa,sCAAsC,QAAQ,gCAAgC;AAAA,EAC5G;AAAA,EACA,QAAQ;AAAA,IACN,EAAE,QAAQ,KAAK,aAAa,4BAA4B,QAAQ,wBAAwB;AAAA,IACxF,EAAE,QAAQ,KAAK,aAAa,2BAA2B,QAAQ,wBAAwB;AAAA,EACzF;AACF;AAEA,MAAM,sBAAwC;AAAA,EAC5C,SAAS;AAAA,EACT,aAAa;AAAA,EACb,MAAM,CAAC,eAAe;AAAA,EACtB,aAAa;AAAA,IACX,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,aAAa;AAAA,EACf;AAAA,EACA,WAAW;AAAA,IACT,EAAE,QAAQ,KAAK,aAAa,mCAAmC,QAAQ,8BAA8B;AAAA,EACvG;AAAA,EACA,QAAQ;AAAA,IACN,EAAE,QAAQ,KAAK,aAAa,+CAA+C,QAAQ,wBAAwB;AAAA,IAC3G,EAAE,QAAQ,KAAK,aAAa,2BAA2B,QAAQ,wBAAwB;AAAA,IACvF,EAAE,QAAQ,KAAK,aAAa,+DAA+D,QAAQ,wBAAwB;AAAA,EAC7H;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,YAAY;AAAA,EACZ,SAAS;AAAA,IACP,KAAK;AAAA,IACL,MAAM;AAAA,EACR;AACF;",
   "names": []
 }

package/dist/modules/perspectives/services/perspectiveService.js

@@ -202,13 +202,14 @@ async function deleteUserPerspective(em, cache, options) {
     tableId,
     deletedAt: null
   });
-  if (!existing) return;
+  if (!existing) return false;
   existing.deletedAt = /* @__PURE__ */ new Date();
   existing.isDefault = false;
   await em.flush();
   if (cache?.deleteByTags) {
     await cache.deleteByTags([userTag(scope, tableId)]);
   }
+  return true;
 }
 async function saveRolePerspectives(em, cache, options) {
   const { tableId, input } = options;
@@ -282,8 +283,8 @@ async function clearRolePerspectives(em, cache, options) {
   const { tableId, roleIds } = options;
   const tenantId = options.tenantId ?? null;
   const organizationId = options.organizationId ?? null;
-  if (!roleIds.length) return;
-  await em.nativeUpdate(
+  if (!roleIds.length) return 0;
+  const affected = await em.nativeUpdate(
     RolePerspective,
     {
       roleId: { $in: roleIds },
@@ -298,6 +299,7 @@ async function clearRolePerspectives(em, cache, options) {
     const tags = roleIds.map((roleId) => roleTag(roleId, tableId, tenantId));
     await cache.deleteByTags(tags);
   }
+  return affected;
 }
 export {
   clearRolePerspectives,

package/dist/modules/perspectives/services/perspectiveService.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/perspectives/services/perspectiveService.ts"],
-  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport type { CacheStrategy } from '@open-mercato/cache'\nimport { enforceCommandOptimisticLock } from '@open-mercato/shared/lib/crud/optimistic-lock-command'\nimport { Perspective, RolePerspective } from '../data/entities'\nimport type {\n  PerspectiveSettings,\n  PerspectiveSaveInput,\n  RolePerspectiveSaveInput,\n} from '../data/validators'\n\nexport type PerspectiveScope = {\n  userId: string\n  tenantId?: string | null\n  organizationId?: string | null\n}\n\nexport type ResolvedPerspective = {\n  id: string\n  name: string\n  tableId: string\n  settings: PerspectiveSettings\n  isDefault: boolean\n  createdAt: string\n  updatedAt?: string | null\n}\n\nexport type ResolvedRolePerspective = {\n  id: string\n  roleId: string\n  tableId: string\n  name: string\n  settings: PerspectiveSettings\n  isDefault: boolean\n  tenantId: string | null\n  organizationId: string | null\n  createdAt: string\n  updatedAt?: string | null\n}\n\nexport type PerspectivesState = {\n  tableId: string\n  personal: ResolvedPerspective[]\n  personalDefaultId: string | null\n  rolePerspectives: ResolvedRolePerspective[]\n}\n\nconst CACHE_TTL_MS = 5 * 60 * 1000\n\nconst nullish = <T extends string | null | undefined>(value: T): string | null =>\n  value == null ? null : value\n\nconst scopeKey = (scope: PerspectiveScope) =>\n  `${scope.userId}:${scope.tenantId ?? 'null'}:${scope.organizationId ?? 'null'}`\n\nconst userCacheKey = (scope: PerspectiveScope, tableId: string, roleIds: string[]) =>\n  `perspectives:user-state:${scopeKey(scope)}:${tableId}:${roleIds.sort((a, b) => a.localeCompare(b)).join(',')}`\n\nconst userTag = (scope: PerspectiveScope, tableId?: string) =>\n  tableId\n    ? `perspectives:user:${scopeKey(scope)}:${tableId}`\n    : `perspectives:user:${scopeKey(scope)}`\n\nconst roleTag = (roleId: string, tableId?: string, tenantId?: string | null) => {\n  const tenant = tenantId ?? 'null'\n  return tableId ? `perspectives:role:${roleId}:${tenant}:${tableId}` : `perspectives:role:${roleId}:${tenant}`\n}\n\nfunction isResolvedPerspective(value: unknown): value is ResolvedPerspective {\n  if (typeof value !== 'object' || value === null) return false\n  const record = value as Partial<ResolvedPerspective>\n  return typeof record.id === 'string'\n    && typeof record.name === 'string'\n    && typeof record.tableId === 'string'\n    && typeof record.isDefault === 'boolean'\n    && typeof record.createdAt === 'string'\n}\n\nfunction isResolvedRolePerspective(value: unknown): value is ResolvedRolePerspective {\n  if (typeof value !== 'object' || value === null) return false\n  const record = value as Partial<ResolvedRolePerspective>\n  return typeof record.id === 'string'\n    && typeof record.roleId === 'string'\n    && typeof record.tableId === 'string'\n    && typeof record.name === 'string'\n    && typeof record.isDefault === 'boolean'\n    && typeof record.createdAt === 'string'\n}\n\nfunction isPerspectivesState(value: unknown): value is PerspectivesState {\n  if (typeof value !== 'object' || value === null) return false\n  const record = value as Partial<PerspectivesState>\n  if (typeof record.tableId !== 'string') return false\n  if (!Array.isArray(record.personal) || record.personal.some((item) => !isResolvedPerspective(item))) return false\n  if (record.personalDefaultId !== null && typeof record.personalDefaultId !== 'string') return false\n  if (!Array.isArray(record.rolePerspectives) || record.rolePerspectives.some((item) => !isResolvedRolePerspective(item))) return false\n  return true\n}\n\n/**\n * Defensive migration for legacy filter state shapes captured before the\n * advanced-filter tree (SPEC-048). Existing perspectives only store either\n * advanced-filter URL params (tree shape with `v:2` or a `root` key) or\n * undefined \u2014 this helper is a safety net for legacy `FilterValues`-shaped\n * records (flat key/value records of column filters) that could only appear\n * if old saved-view JSON were imported.\n *\n * - Tree-shaped state (`v:2` or `root` key) is passed through unchanged.\n * - Undefined / null filters are passed through unchanged.\n * - Legacy `FilterValues`-shaped records are dropped (set to `undefined`)\n *   because there is no reliable mapping back to the new operator model;\n *   the user sees an empty tree and can recreate.\n */\nexport function maybeMigrateLegacyFilterValues(settings: PerspectiveSettings): PerspectiveSettings {\n  const filters = settings.filters\n  if (!filters || typeof filters !== 'object') return settings\n  const record = filters as Record<string, unknown>\n  if ('v' in record && record.v === 2) return settings\n  if ('root' in record) return settings\n  if (typeof console !== 'undefined') {\n    console.warn('[perspectives] Dropping legacy filterValues shape; please re-create the perspective with the new filter UI.')\n  }\n  return { ...settings, filters: undefined }\n}\n\nfunction toResolvedPerspective(entity: Perspective): ResolvedPerspective {\n  const settings = maybeMigrateLegacyFilterValues((entity.settingsJson ?? {}) as PerspectiveSettings)\n  return {\n    id: entity.id,\n    name: entity.name,\n    tableId: entity.tableId,\n    isDefault: !!entity.isDefault,\n    settings,\n    createdAt: entity.createdAt.toISOString(),\n    updatedAt: entity.updatedAt ? entity.updatedAt.toISOString() : null,\n  }\n}\n\nfunction toResolvedRolePerspective(entity: RolePerspective): ResolvedRolePerspective {\n  const settings = maybeMigrateLegacyFilterValues((entity.settingsJson ?? {}) as PerspectiveSettings)\n  return {\n    id: entity.id,\n    roleId: entity.roleId,\n    tableId: entity.tableId,\n    name: entity.name,\n    isDefault: !!entity.isDefault,\n    settings,\n    tenantId: nullish(entity.tenantId),\n    organizationId: nullish(entity.organizationId),\n    createdAt: entity.createdAt.toISOString(),\n    updatedAt: entity.updatedAt ? entity.updatedAt.toISOString() : null,\n  }\n}\n\nexport async function loadPerspectivesState(\n  em: EntityManager,\n  cache: CacheStrategy | null | undefined,\n  options: { scope: PerspectiveScope; tableId: string; roleIds?: string[] },\n): Promise<PerspectivesState> {\n  const { scope, tableId } = options\n  const roleIds = Array.isArray(options.roleIds) ? options.roleIds.filter((id) => id && id.length > 0) : []\n  const uniqueRoles = Array.from(new Set(roleIds))\n  const cacheKey = cache && uniqueRoles.length <= 16 ? userCacheKey(scope, tableId, uniqueRoles) : null\n\n  if (cache && cacheKey) {\n    const cached = await cache.get(cacheKey)\n    if (cached && isPerspectivesState(cached)) return cached\n  }\n\n  const tenantId = scope.tenantId ?? null\n  const organizationId = scope.organizationId ?? null\n\n  const [personal, roleRecords] = await Promise.all([\n    em.find(Perspective, {\n      userId: scope.userId,\n      tenantId,\n      organizationId,\n      tableId,\n      deletedAt: null,\n    }, { orderBy: { updatedAt: 'desc' } }),\n    uniqueRoles.length\n      ? em.find(RolePerspective, {\n          roleId: { $in: uniqueRoles as any },\n          tableId,\n          deletedAt: null,\n          $and: [\n            { $or: [{ tenantId }, { tenantId: null }] },\n            { $or: [{ organizationId }, { organizationId: null }] },\n          ],\n        } as any, { orderBy: { updatedAt: 'desc' } })\n      : [],\n  ])\n\n  const personalResolved = personal.map(toResolvedPerspective)\n  const personalDefaultId = personalResolved.find((p) => p.isDefault)?.id ?? null\n  const roleResolved = roleRecords.map(toResolvedRolePerspective)\n\n  const state: PerspectivesState = {\n    tableId,\n    personal: personalResolved,\n    personalDefaultId,\n    rolePerspectives: roleResolved,\n  }\n\n  if (cache && cacheKey) {\n    await cache.set(cacheKey, state, {\n      ttl: CACHE_TTL_MS,\n      tags: [\n        userTag(scope, tableId),\n        ...uniqueRoles.map((roleId) => roleTag(roleId, tableId, tenantId)),\n      ],\n    })\n  }\n\n  return state\n}\n\nexport async function saveUserPerspective(\n  em: EntityManager,\n  cache: CacheStrategy | null | undefined,\n  options: {\n    scope: PerspectiveScope\n    tableId: string\n    input: PerspectiveSaveInput\n    request?: Request | Headers | null\n  },\n): Promise<ResolvedPerspective> {\n  const { scope, tableId, input } = options\n  const tenantId = scope.tenantId ?? null\n  const organizationId = scope.organizationId ?? null\n\n  let entity: Perspective | null = null\n  if (input.perspectiveId) {\n    entity = await em.findOne(Perspective, {\n      id: input.perspectiveId,\n      userId: scope.userId,\n      tenantId,\n      organizationId,\n      tableId,\n      deletedAt: null,\n    })\n    if (!entity) {\n      throw Object.assign(new Error('Perspective not found'), { code: 'NOT_FOUND' })\n    }\n    enforceCommandOptimisticLock({\n      resourceKind: 'perspectives.perspective',\n      resourceId: entity.id,\n      current: entity.updatedAt ?? null,\n      request: options.request ?? null,\n    })\n  } else {\n    entity = await em.findOne(Perspective, {\n      userId: scope.userId,\n      tenantId,\n      organizationId,\n      tableId,\n      name: input.name,\n      deletedAt: null,\n    })\n  }\n\n  const now = new Date()\n  if (!entity) {\n    entity = em.create(Perspective, {\n      userId: scope.userId,\n      tenantId,\n      organizationId,\n      tableId,\n      name: input.name,\n      settingsJson: input.settings,\n      isDefault: Boolean(input.isDefault),\n      createdAt: now,\n      updatedAt: now,\n    })\n    em.persist(entity)\n  } else {\n    entity.name = input.name\n    entity.settingsJson = input.settings\n    entity.updatedAt = now\n    if (input.isDefault === true) entity.isDefault = true\n    if (input.isDefault === false) entity.isDefault = false\n  }\n\n  if (input.isDefault === true) {\n    await em.nativeUpdate(\n      Perspective,\n      {\n        userId: scope.userId,\n        tenantId,\n        organizationId,\n        tableId,\n        id: { $ne: entity.id } as any,\n        deletedAt: null,\n      },\n      { isDefault: false, updatedAt: now },\n    )\n    entity.isDefault = true\n  }\n\n  await em.flush()\n\n  if (cache?.deleteByTags) {\n    await cache.deleteByTags([userTag(scope, tableId)])\n  }\n\n  return toResolvedPerspective(entity)\n}\n\nexport async function deleteUserPerspective(\n  em: EntityManager,\n  cache: CacheStrategy | null | undefined,\n  options: { scope: PerspectiveScope; tableId: string; perspectiveId: string },\n): Promise<void> {\n  const { scope, tableId, perspectiveId } = options\n  const tenantId = scope.tenantId ?? null\n  const organizationId = scope.organizationId ?? null\n\n  const existing = await em.findOne(Perspective, {\n    id: perspectiveId,\n    userId: scope.userId,\n    tenantId,\n    organizationId,\n    tableId,\n    deletedAt: null,\n  })\n  if (!existing) return\n\n  existing.deletedAt = new Date()\n  existing.isDefault = false\n  await em.flush()\n\n  if (cache?.deleteByTags) {\n    await cache.deleteByTags([userTag(scope, tableId)])\n  }\n}\n\nexport async function saveRolePerspectives(\n  em: EntityManager,\n  cache: CacheStrategy | null | undefined,\n  options: {\n    tableId: string\n    tenantId?: string | null\n    organizationId?: string | null\n    input: RolePerspectiveSaveInput\n  },\n): Promise<ResolvedRolePerspective[]> {\n  const { tableId, input } = options\n  const tenantId = options.tenantId ?? null\n  const organizationId = options.organizationId ?? null\n  const now = new Date()\n  const touchedRoleIds = new Set<string>()\n\n  const results: ResolvedRolePerspective[] = []\n\n  // Prefetch every matching role perspective in a single query, then index by role id\n  // so the loop resolves create/update without a lookup per role.\n  const recordByRole = new Map<string, RolePerspective>()\n  if (input.roleIds.length) {\n    const existingRecords = await em.find(RolePerspective, {\n      roleId: { $in: input.roleIds },\n      tableId,\n      tenantId,\n      organizationId,\n      name: input.name,\n      deletedAt: null,\n    })\n    for (const existing of existingRecords) recordByRole.set(existing.roleId, existing)\n  }\n\n  for (const roleId of input.roleIds) {\n    let record = recordByRole.get(roleId) ?? null\n    if (!record) {\n      record = em.create(RolePerspective, {\n        roleId,\n        tableId,\n        tenantId,\n        organizationId,\n        name: input.name,\n        settingsJson: input.settings,\n        isDefault: Boolean(input.setDefault),\n        createdAt: now,\n        updatedAt: now,\n      })\n      em.persist(record)\n      recordByRole.set(roleId, record)\n    } else {\n      record.settingsJson = input.settings\n      record.updatedAt = now\n      if (input.setDefault === true) record.isDefault = true\n      if (input.setDefault === false) record.isDefault = false\n    }\n\n    if (input.setDefault === true) {\n      await em.nativeUpdate(\n        RolePerspective,\n        {\n          roleId,\n          tableId,\n          tenantId,\n          organizationId,\n          id: { $ne: record.id } as any,\n          deletedAt: null,\n        },\n        { isDefault: false, updatedAt: now },\n      )\n      record.isDefault = true\n    }\n\n    touchedRoleIds.add(roleId)\n    results.push(toResolvedRolePerspective(record))\n  }\n\n  if (input.roleIds.length) {\n    await em.flush()\n  }\n\n  if (cache?.deleteByTags && touchedRoleIds.size > 0) {\n    const tags = Array.from(touchedRoleIds).map((roleId) => roleTag(roleId, tableId, tenantId))\n    await cache.deleteByTags(tags)\n  }\n\n  return results\n}\n\nexport async function clearRolePerspectives(\n  em: EntityManager,\n  cache: CacheStrategy | null | undefined,\n  options: {\n    tableId: string\n    tenantId?: string | null\n    organizationId?: string | null\n    roleIds: string[]\n  },\n): Promise<void> {\n  const { tableId, roleIds } = options\n  const tenantId = options.tenantId ?? null\n  const organizationId = options.organizationId ?? null\n  if (!roleIds.length) return\n\n  await em.nativeUpdate(\n    RolePerspective,\n    {\n      roleId: { $in: roleIds as any },\n      tableId,\n      tenantId,\n      organizationId,\n      deletedAt: null,\n    },\n    { deletedAt: new Date(), isDefault: false },\n  )\n\n  if (cache?.deleteByTags) {\n    const tags = roleIds.map((roleId) => roleTag(roleId, tableId, tenantId))\n    await cache.deleteByTags(tags)\n  }\n}\n"],
-  "mappings": "AAEA,SAAS,oCAAoC;AAC7C,SAAS,aAAa,uBAAuB;AA2C7C,MAAM,eAAe,IAAI,KAAK;AAE9B,MAAM,UAAU,CAAsC,UACpD,SAAS,OAAO,OAAO;AAEzB,MAAM,WAAW,CAAC,UAChB,GAAG,MAAM,MAAM,IAAI,MAAM,YAAY,MAAM,IAAI,MAAM,kBAAkB,MAAM;AAE/E,MAAM,eAAe,CAAC,OAAyB,SAAiB,YAC9D,2BAA2B,SAAS,KAAK,CAAC,IAAI,OAAO,IAAI,QAAQ,KAAK,CAAC,GAAG,MAAM,EAAE,cAAc,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC;AAE/G,MAAM,UAAU,CAAC,OAAyB,YACxC,UACI,qBAAqB,SAAS,KAAK,CAAC,IAAI,OAAO,KAC/C,qBAAqB,SAAS,KAAK,CAAC;AAE1C,MAAM,UAAU,CAAC,QAAgB,SAAkB,aAA6B;AAC9E,QAAM,SAAS,YAAY;AAC3B,SAAO,UAAU,qBAAqB,MAAM,IAAI,MAAM,IAAI,OAAO,KAAK,qBAAqB,MAAM,IAAI,MAAM;AAC7G;AAEA,SAAS,sBAAsB,OAA8C;AAC3E,MAAI,OAAO,UAAU,YAAY,UAAU,KAAM,QAAO;AACxD,QAAM,SAAS;AACf,SAAO,OAAO,OAAO,OAAO,YACvB,OAAO,OAAO,SAAS,YACvB,OAAO,OAAO,YAAY,YAC1B,OAAO,OAAO,cAAc,aAC5B,OAAO,OAAO,cAAc;AACnC;AAEA,SAAS,0BAA0B,OAAkD;AACnF,MAAI,OAAO,UAAU,YAAY,UAAU,KAAM,QAAO;AACxD,QAAM,SAAS;AACf,SAAO,OAAO,OAAO,OAAO,YACvB,OAAO,OAAO,WAAW,YACzB,OAAO,OAAO,YAAY,YAC1B,OAAO,OAAO,SAAS,YACvB,OAAO,OAAO,cAAc,aAC5B,OAAO,OAAO,cAAc;AACnC;AAEA,SAAS,oBAAoB,OAA4C;AACvE,MAAI,OAAO,UAAU,YAAY,UAAU,KAAM,QAAO;AACxD,QAAM,SAAS;AACf,MAAI,OAAO,OAAO,YAAY,SAAU,QAAO;AAC/C,MAAI,CAAC,MAAM,QAAQ,OAAO,QAAQ,KAAK,OAAO,SAAS,KAAK,CAAC,SAAS,CAAC,sBAAsB,IAAI,CAAC,EAAG,QAAO;AAC5G,MAAI,OAAO,sBAAsB,QAAQ,OAAO,OAAO,sBAAsB,SAAU,QAAO;AAC9F,MAAI,CAAC,MAAM,QAAQ,OAAO,gBAAgB,KAAK,OAAO,iBAAiB,KAAK,CAAC,SAAS,CAAC,0BAA0B,IAAI,CAAC,EAAG,QAAO;AAChI,SAAO;AACT;AAgBO,SAAS,+BAA+B,UAAoD;AACjG,QAAM,UAAU,SAAS;AACzB,MAAI,CAAC,WAAW,OAAO,YAAY,SAAU,QAAO;AACpD,QAAM,SAAS;AACf,MAAI,OAAO,UAAU,OAAO,MAAM,EAAG,QAAO;AAC5C,MAAI,UAAU,OAAQ,QAAO;AAC7B,MAAI,OAAO,YAAY,aAAa;AAClC,YAAQ,KAAK,6GAA6G;AAAA,EAC5H;AACA,SAAO,EAAE,GAAG,UAAU,SAAS,OAAU;AAC3C;AAEA,SAAS,sBAAsB,QAA0C;AACvE,QAAM,WAAW,+BAAgC,OAAO,gBAAgB,CAAC,CAAyB;AAClG,SAAO;AAAA,IACL,IAAI,OAAO;AAAA,IACX,MAAM,OAAO;AAAA,IACb,SAAS,OAAO;AAAA,IAChB,WAAW,CAAC,CAAC,OAAO;AAAA,IACpB;AAAA,IACA,WAAW,OAAO,UAAU,YAAY;AAAA,IACxC,WAAW,OAAO,YAAY,OAAO,UAAU,YAAY,IAAI;AAAA,EACjE;AACF;AAEA,SAAS,0BAA0B,QAAkD;AACnF,QAAM,WAAW,+BAAgC,OAAO,gBAAgB,CAAC,CAAyB;AAClG,SAAO;AAAA,IACL,IAAI,OAAO;AAAA,IACX,QAAQ,OAAO;AAAA,IACf,SAAS,OAAO;AAAA,IAChB,MAAM,OAAO;AAAA,IACb,WAAW,CAAC,CAAC,OAAO;AAAA,IACpB;AAAA,IACA,UAAU,QAAQ,OAAO,QAAQ;AAAA,IACjC,gBAAgB,QAAQ,OAAO,cAAc;AAAA,IAC7C,WAAW,OAAO,UAAU,YAAY;AAAA,IACxC,WAAW,OAAO,YAAY,OAAO,UAAU,YAAY,IAAI;AAAA,EACjE;AACF;AAEA,eAAsB,sBACpB,IACA,OACA,SAC4B;AAC5B,QAAM,EAAE,OAAO,QAAQ,IAAI;AAC3B,QAAM,UAAU,MAAM,QAAQ,QAAQ,OAAO,IAAI,QAAQ,QAAQ,OAAO,CAAC,OAAO,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC;AACxG,QAAM,cAAc,MAAM,KAAK,IAAI,IAAI,OAAO,CAAC;AAC/C,QAAM,WAAW,SAAS,YAAY,UAAU,KAAK,aAAa,OAAO,SAAS,WAAW,IAAI;AAEjG,MAAI,SAAS,UAAU;AACrB,UAAM,SAAS,MAAM,MAAM,IAAI,QAAQ;AACvC,QAAI,UAAU,oBAAoB,MAAM,EAAG,QAAO;AAAA,EACpD;AAEA,QAAM,WAAW,MAAM,YAAY;AACnC,QAAM,iBAAiB,MAAM,kBAAkB;AAE/C,QAAM,CAAC,UAAU,WAAW,IAAI,MAAM,QAAQ,IAAI;AAAA,IAChD,GAAG,KAAK,aAAa;AAAA,MACnB,QAAQ,MAAM;AAAA,MACd;AAAA,MACA;AAAA,MACA;AAAA,MACA,WAAW;AAAA,IACb,GAAG,EAAE,SAAS,EAAE,WAAW,OAAO,EAAE,CAAC;AAAA,IACrC,YAAY,SACR,GAAG,KAAK,iBAAiB;AAAA,MACvB,QAAQ,EAAE,KAAK,YAAmB;AAAA,MAClC;AAAA,MACA,WAAW;AAAA,MACX,MAAM;AAAA,QACJ,EAAE,KAAK,CAAC,EAAE,SAAS,GAAG,EAAE,UAAU,KAAK,CAAC,EAAE;AAAA,QAC1C,EAAE,KAAK,CAAC,EAAE,eAAe,GAAG,EAAE,gBAAgB,KAAK,CAAC,EAAE;AAAA,MACxD;AAAA,IACF,GAAU,EAAE,SAAS,EAAE,WAAW,OAAO,EAAE,CAAC,IAC5C,CAAC;AAAA,EACP,CAAC;AAED,QAAM,mBAAmB,SAAS,IAAI,qBAAqB;AAC3D,QAAM,oBAAoB,iBAAiB,KAAK,CAAC,MAAM,EAAE,SAAS,GAAG,MAAM;AAC3E,QAAM,eAAe,YAAY,IAAI,yBAAyB;AAE9D,QAAM,QAA2B;AAAA,IAC/B;AAAA,IACA,UAAU;AAAA,IACV;AAAA,IACA,kBAAkB;AAAA,EACpB;AAEA,MAAI,SAAS,UAAU;AACrB,UAAM,MAAM,IAAI,UAAU,OAAO;AAAA,MAC/B,KAAK;AAAA,MACL,MAAM;AAAA,QACJ,QAAQ,OAAO,OAAO;AAAA,QACtB,GAAG,YAAY,IAAI,CAAC,WAAW,QAAQ,QAAQ,SAAS,QAAQ,CAAC;AAAA,MACnE;AAAA,IACF,CAAC;AAAA,EACH;AAEA,SAAO;AACT;AAEA,eAAsB,oBACpB,IACA,OACA,SAM8B;AAC9B,QAAM,EAAE,OAAO,SAAS,MAAM,IAAI;AAClC,QAAM,WAAW,MAAM,YAAY;AACnC,QAAM,iBAAiB,MAAM,kBAAkB;AAE/C,MAAI,SAA6B;AACjC,MAAI,MAAM,eAAe;AACvB,aAAS,MAAM,GAAG,QAAQ,aAAa;AAAA,MACrC,IAAI,MAAM;AAAA,MACV,QAAQ,MAAM;AAAA,MACd;AAAA,MACA;AAAA,MACA;AAAA,MACA,WAAW;AAAA,IACb,CAAC;AACD,QAAI,CAAC,QAAQ;AACX,YAAM,OAAO,OAAO,IAAI,MAAM,uBAAuB,GAAG,EAAE,MAAM,YAAY,CAAC;AAAA,IAC/E;AACA,iCAA6B;AAAA,MAC3B,cAAc;AAAA,MACd,YAAY,OAAO;AAAA,MACnB,SAAS,OAAO,aAAa;AAAA,MAC7B,SAAS,QAAQ,WAAW;AAAA,IAC9B,CAAC;AAAA,EACH,OAAO;AACL,aAAS,MAAM,GAAG,QAAQ,aAAa;AAAA,MACrC,QAAQ,MAAM;AAAA,MACd;AAAA,MACA;AAAA,MACA;AAAA,MACA,MAAM,MAAM;AAAA,MACZ,WAAW;AAAA,IACb,CAAC;AAAA,EACH;AAEA,QAAM,MAAM,oBAAI,KAAK;AACrB,MAAI,CAAC,QAAQ;AACX,aAAS,GAAG,OAAO,aAAa;AAAA,MAC9B,QAAQ,MAAM;AAAA,MACd;AAAA,MACA;AAAA,MACA;AAAA,MACA,MAAM,MAAM;AAAA,MACZ,cAAc,MAAM;AAAA,MACpB,WAAW,QAAQ,MAAM,SAAS;AAAA,MAClC,WAAW;AAAA,MACX,WAAW;AAAA,IACb,CAAC;AACD,OAAG,QAAQ,MAAM;AAAA,EACnB,OAAO;AACL,WAAO,OAAO,MAAM;AACpB,WAAO,eAAe,MAAM;AAC5B,WAAO,YAAY;AACnB,QAAI,MAAM,cAAc,KAAM,QAAO,YAAY;AACjD,QAAI,MAAM,cAAc,MAAO,QAAO,YAAY;AAAA,EACpD;AAEA,MAAI,MAAM,cAAc,MAAM;AAC5B,UAAM,GAAG;AAAA,MACP;AAAA,MACA;AAAA,QACE,QAAQ,MAAM;AAAA,QACd;AAAA,QACA;AAAA,QACA;AAAA,QACA,IAAI,EAAE,KAAK,OAAO,GAAG;AAAA,QACrB,WAAW;AAAA,MACb;AAAA,MACA,EAAE,WAAW,OAAO,WAAW,IAAI;AAAA,IACrC;AACA,WAAO,YAAY;AAAA,EACrB;AAEA,QAAM,GAAG,MAAM;AAEf,MAAI,OAAO,cAAc;AACvB,UAAM,MAAM,aAAa,CAAC,QAAQ,OAAO,OAAO,CAAC,CAAC;AAAA,EACpD;AAEA,SAAO,sBAAsB,MAAM;AACrC;AAEA,eAAsB,sBACpB,IACA,OACA,SACe;AACf,QAAM,EAAE,OAAO,SAAS,cAAc,IAAI;AAC1C,QAAM,WAAW,MAAM,YAAY;AACnC,QAAM,iBAAiB,MAAM,kBAAkB;AAE/C,QAAM,WAAW,MAAM,GAAG,QAAQ,aAAa;AAAA,IAC7C,IAAI;AAAA,IACJ,QAAQ,MAAM;AAAA,IACd;AAAA,IACA;AAAA,IACA;AAAA,IACA,WAAW;AAAA,EACb,CAAC;AACD,MAAI,CAAC,SAAU;AAEf,WAAS,YAAY,oBAAI,KAAK;AAC9B,WAAS,YAAY;AACrB,QAAM,GAAG,MAAM;AAEf,MAAI,OAAO,cAAc;AACvB,UAAM,MAAM,aAAa,CAAC,QAAQ,OAAO,OAAO,CAAC,CAAC;AAAA,EACpD;AACF;AAEA,eAAsB,qBACpB,IACA,OACA,SAMoC;AACpC,QAAM,EAAE,SAAS,MAAM,IAAI;AAC3B,QAAM,WAAW,QAAQ,YAAY;AACrC,QAAM,iBAAiB,QAAQ,kBAAkB;AACjD,QAAM,MAAM,oBAAI,KAAK;AACrB,QAAM,iBAAiB,oBAAI,IAAY;AAEvC,QAAM,UAAqC,CAAC;AAI5C,QAAM,eAAe,oBAAI,IAA6B;AACtD,MAAI,MAAM,QAAQ,QAAQ;AACxB,UAAM,kBAAkB,MAAM,GAAG,KAAK,iBAAiB;AAAA,MACrD,QAAQ,EAAE,KAAK,MAAM,QAAQ;AAAA,MAC7B;AAAA,MACA;AAAA,MACA;AAAA,MACA,MAAM,MAAM;AAAA,MACZ,WAAW;AAAA,IACb,CAAC;AACD,eAAW,YAAY,gBAAiB,cAAa,IAAI,SAAS,QAAQ,QAAQ;AAAA,EACpF;AAEA,aAAW,UAAU,MAAM,SAAS;AAClC,QAAI,SAAS,aAAa,IAAI,MAAM,KAAK;AACzC,QAAI,CAAC,QAAQ;AACX,eAAS,GAAG,OAAO,iBAAiB;AAAA,QAClC;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA,MAAM,MAAM;AAAA,QACZ,cAAc,MAAM;AAAA,QACpB,WAAW,QAAQ,MAAM,UAAU;AAAA,QACnC,WAAW;AAAA,QACX,WAAW;AAAA,MACb,CAAC;AACD,SAAG,QAAQ,MAAM;AACjB,mBAAa,IAAI,QAAQ,MAAM;AAAA,IACjC,OAAO;AACL,aAAO,eAAe,MAAM;AAC5B,aAAO,YAAY;AACnB,UAAI,MAAM,eAAe,KAAM,QAAO,YAAY;AAClD,UAAI,MAAM,eAAe,MAAO,QAAO,YAAY;AAAA,IACrD;AAEA,QAAI,MAAM,eAAe,MAAM;AAC7B,YAAM,GAAG;AAAA,QACP;AAAA,QACA;AAAA,UACE;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA,IAAI,EAAE,KAAK,OAAO,GAAG;AAAA,UACrB,WAAW;AAAA,QACb;AAAA,QACA,EAAE,WAAW,OAAO,WAAW,IAAI;AAAA,MACrC;AACA,aAAO,YAAY;AAAA,IACrB;AAEA,mBAAe,IAAI,MAAM;AACzB,YAAQ,KAAK,0BAA0B,MAAM,CAAC;AAAA,EAChD;AAEA,MAAI,MAAM,QAAQ,QAAQ;AACxB,UAAM,GAAG,MAAM;AAAA,EACjB;AAEA,MAAI,OAAO,gBAAgB,eAAe,OAAO,GAAG;AAClD,UAAM,OAAO,MAAM,KAAK,cAAc,EAAE,IAAI,CAAC,WAAW,QAAQ,QAAQ,SAAS,QAAQ,CAAC;AAC1F,UAAM,MAAM,aAAa,IAAI;AAAA,EAC/B;AAEA,SAAO;AACT;AAEA,eAAsB,sBACpB,IACA,OACA,SAMe;AACf,QAAM,EAAE,SAAS,QAAQ,IAAI;AAC7B,QAAM,WAAW,QAAQ,YAAY;AACrC,QAAM,iBAAiB,QAAQ,kBAAkB;AACjD,MAAI,CAAC,QAAQ,OAAQ;AAErB,QAAM,GAAG;AAAA,IACP;AAAA,IACA;AAAA,MACE,QAAQ,EAAE,KAAK,QAAe;AAAA,MAC9B;AAAA,MACA;AAAA,MACA;AAAA,MACA,WAAW;AAAA,IACb;AAAA,IACA,EAAE,WAAW,oBAAI,KAAK,GAAG,WAAW,MAAM;AAAA,EAC5C;AAEA,MAAI,OAAO,cAAc;AACvB,UAAM,OAAO,QAAQ,IAAI,CAAC,WAAW,QAAQ,QAAQ,SAAS,QAAQ,CAAC;AACvE,UAAM,MAAM,aAAa,IAAI;AAAA,EAC/B;AACF;",
+  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport type { CacheStrategy } from '@open-mercato/cache'\nimport { enforceCommandOptimisticLock } from '@open-mercato/shared/lib/crud/optimistic-lock-command'\nimport { Perspective, RolePerspective } from '../data/entities'\nimport type {\n  PerspectiveSettings,\n  PerspectiveSaveInput,\n  RolePerspectiveSaveInput,\n} from '../data/validators'\n\nexport type PerspectiveScope = {\n  userId: string\n  tenantId?: string | null\n  organizationId?: string | null\n}\n\nexport type ResolvedPerspective = {\n  id: string\n  name: string\n  tableId: string\n  settings: PerspectiveSettings\n  isDefault: boolean\n  createdAt: string\n  updatedAt?: string | null\n}\n\nexport type ResolvedRolePerspective = {\n  id: string\n  roleId: string\n  tableId: string\n  name: string\n  settings: PerspectiveSettings\n  isDefault: boolean\n  tenantId: string | null\n  organizationId: string | null\n  createdAt: string\n  updatedAt?: string | null\n}\n\nexport type PerspectivesState = {\n  tableId: string\n  personal: ResolvedPerspective[]\n  personalDefaultId: string | null\n  rolePerspectives: ResolvedRolePerspective[]\n}\n\nconst CACHE_TTL_MS = 5 * 60 * 1000\n\nconst nullish = <T extends string | null | undefined>(value: T): string | null =>\n  value == null ? null : value\n\nconst scopeKey = (scope: PerspectiveScope) =>\n  `${scope.userId}:${scope.tenantId ?? 'null'}:${scope.organizationId ?? 'null'}`\n\nconst userCacheKey = (scope: PerspectiveScope, tableId: string, roleIds: string[]) =>\n  `perspectives:user-state:${scopeKey(scope)}:${tableId}:${roleIds.sort((a, b) => a.localeCompare(b)).join(',')}`\n\nconst userTag = (scope: PerspectiveScope, tableId?: string) =>\n  tableId\n    ? `perspectives:user:${scopeKey(scope)}:${tableId}`\n    : `perspectives:user:${scopeKey(scope)}`\n\nconst roleTag = (roleId: string, tableId?: string, tenantId?: string | null) => {\n  const tenant = tenantId ?? 'null'\n  return tableId ? `perspectives:role:${roleId}:${tenant}:${tableId}` : `perspectives:role:${roleId}:${tenant}`\n}\n\nfunction isResolvedPerspective(value: unknown): value is ResolvedPerspective {\n  if (typeof value !== 'object' || value === null) return false\n  const record = value as Partial<ResolvedPerspective>\n  return typeof record.id === 'string'\n    && typeof record.name === 'string'\n    && typeof record.tableId === 'string'\n    && typeof record.isDefault === 'boolean'\n    && typeof record.createdAt === 'string'\n}\n\nfunction isResolvedRolePerspective(value: unknown): value is ResolvedRolePerspective {\n  if (typeof value !== 'object' || value === null) return false\n  const record = value as Partial<ResolvedRolePerspective>\n  return typeof record.id === 'string'\n    && typeof record.roleId === 'string'\n    && typeof record.tableId === 'string'\n    && typeof record.name === 'string'\n    && typeof record.isDefault === 'boolean'\n    && typeof record.createdAt === 'string'\n}\n\nfunction isPerspectivesState(value: unknown): value is PerspectivesState {\n  if (typeof value !== 'object' || value === null) return false\n  const record = value as Partial<PerspectivesState>\n  if (typeof record.tableId !== 'string') return false\n  if (!Array.isArray(record.personal) || record.personal.some((item) => !isResolvedPerspective(item))) return false\n  if (record.personalDefaultId !== null && typeof record.personalDefaultId !== 'string') return false\n  if (!Array.isArray(record.rolePerspectives) || record.rolePerspectives.some((item) => !isResolvedRolePerspective(item))) return false\n  return true\n}\n\n/**\n * Defensive migration for legacy filter state shapes captured before the\n * advanced-filter tree (SPEC-048). Existing perspectives only store either\n * advanced-filter URL params (tree shape with `v:2` or a `root` key) or\n * undefined \u2014 this helper is a safety net for legacy `FilterValues`-shaped\n * records (flat key/value records of column filters) that could only appear\n * if old saved-view JSON were imported.\n *\n * - Tree-shaped state (`v:2` or `root` key) is passed through unchanged.\n * - Undefined / null filters are passed through unchanged.\n * - Legacy `FilterValues`-shaped records are dropped (set to `undefined`)\n *   because there is no reliable mapping back to the new operator model;\n *   the user sees an empty tree and can recreate.\n */\nexport function maybeMigrateLegacyFilterValues(settings: PerspectiveSettings): PerspectiveSettings {\n  const filters = settings.filters\n  if (!filters || typeof filters !== 'object') return settings\n  const record = filters as Record<string, unknown>\n  if ('v' in record && record.v === 2) return settings\n  if ('root' in record) return settings\n  if (typeof console !== 'undefined') {\n    console.warn('[perspectives] Dropping legacy filterValues shape; please re-create the perspective with the new filter UI.')\n  }\n  return { ...settings, filters: undefined }\n}\n\nfunction toResolvedPerspective(entity: Perspective): ResolvedPerspective {\n  const settings = maybeMigrateLegacyFilterValues((entity.settingsJson ?? {}) as PerspectiveSettings)\n  return {\n    id: entity.id,\n    name: entity.name,\n    tableId: entity.tableId,\n    isDefault: !!entity.isDefault,\n    settings,\n    createdAt: entity.createdAt.toISOString(),\n    updatedAt: entity.updatedAt ? entity.updatedAt.toISOString() : null,\n  }\n}\n\nfunction toResolvedRolePerspective(entity: RolePerspective): ResolvedRolePerspective {\n  const settings = maybeMigrateLegacyFilterValues((entity.settingsJson ?? {}) as PerspectiveSettings)\n  return {\n    id: entity.id,\n    roleId: entity.roleId,\n    tableId: entity.tableId,\n    name: entity.name,\n    isDefault: !!entity.isDefault,\n    settings,\n    tenantId: nullish(entity.tenantId),\n    organizationId: nullish(entity.organizationId),\n    createdAt: entity.createdAt.toISOString(),\n    updatedAt: entity.updatedAt ? entity.updatedAt.toISOString() : null,\n  }\n}\n\nexport async function loadPerspectivesState(\n  em: EntityManager,\n  cache: CacheStrategy | null | undefined,\n  options: { scope: PerspectiveScope; tableId: string; roleIds?: string[] },\n): Promise<PerspectivesState> {\n  const { scope, tableId } = options\n  const roleIds = Array.isArray(options.roleIds) ? options.roleIds.filter((id) => id && id.length > 0) : []\n  const uniqueRoles = Array.from(new Set(roleIds))\n  const cacheKey = cache && uniqueRoles.length <= 16 ? userCacheKey(scope, tableId, uniqueRoles) : null\n\n  if (cache && cacheKey) {\n    const cached = await cache.get(cacheKey)\n    if (cached && isPerspectivesState(cached)) return cached\n  }\n\n  const tenantId = scope.tenantId ?? null\n  const organizationId = scope.organizationId ?? null\n\n  const [personal, roleRecords] = await Promise.all([\n    em.find(Perspective, {\n      userId: scope.userId,\n      tenantId,\n      organizationId,\n      tableId,\n      deletedAt: null,\n    }, { orderBy: { updatedAt: 'desc' } }),\n    uniqueRoles.length\n      ? em.find(RolePerspective, {\n          roleId: { $in: uniqueRoles as any },\n          tableId,\n          deletedAt: null,\n          $and: [\n            { $or: [{ tenantId }, { tenantId: null }] },\n            { $or: [{ organizationId }, { organizationId: null }] },\n          ],\n        } as any, { orderBy: { updatedAt: 'desc' } })\n      : [],\n  ])\n\n  const personalResolved = personal.map(toResolvedPerspective)\n  const personalDefaultId = personalResolved.find((p) => p.isDefault)?.id ?? null\n  const roleResolved = roleRecords.map(toResolvedRolePerspective)\n\n  const state: PerspectivesState = {\n    tableId,\n    personal: personalResolved,\n    personalDefaultId,\n    rolePerspectives: roleResolved,\n  }\n\n  if (cache && cacheKey) {\n    await cache.set(cacheKey, state, {\n      ttl: CACHE_TTL_MS,\n      tags: [\n        userTag(scope, tableId),\n        ...uniqueRoles.map((roleId) => roleTag(roleId, tableId, tenantId)),\n      ],\n    })\n  }\n\n  return state\n}\n\nexport async function saveUserPerspective(\n  em: EntityManager,\n  cache: CacheStrategy | null | undefined,\n  options: {\n    scope: PerspectiveScope\n    tableId: string\n    input: PerspectiveSaveInput\n    request?: Request | Headers | null\n  },\n): Promise<ResolvedPerspective> {\n  const { scope, tableId, input } = options\n  const tenantId = scope.tenantId ?? null\n  const organizationId = scope.organizationId ?? null\n\n  let entity: Perspective | null = null\n  if (input.perspectiveId) {\n    entity = await em.findOne(Perspective, {\n      id: input.perspectiveId,\n      userId: scope.userId,\n      tenantId,\n      organizationId,\n      tableId,\n      deletedAt: null,\n    })\n    if (!entity) {\n      throw Object.assign(new Error('Perspective not found'), { code: 'NOT_FOUND' })\n    }\n    enforceCommandOptimisticLock({\n      resourceKind: 'perspectives.perspective',\n      resourceId: entity.id,\n      current: entity.updatedAt ?? null,\n      request: options.request ?? null,\n    })\n  } else {\n    entity = await em.findOne(Perspective, {\n      userId: scope.userId,\n      tenantId,\n      organizationId,\n      tableId,\n      name: input.name,\n      deletedAt: null,\n    })\n  }\n\n  const now = new Date()\n  if (!entity) {\n    entity = em.create(Perspective, {\n      userId: scope.userId,\n      tenantId,\n      organizationId,\n      tableId,\n      name: input.name,\n      settingsJson: input.settings,\n      isDefault: Boolean(input.isDefault),\n      createdAt: now,\n      updatedAt: now,\n    })\n    em.persist(entity)\n  } else {\n    entity.name = input.name\n    entity.settingsJson = input.settings\n    entity.updatedAt = now\n    if (input.isDefault === true) entity.isDefault = true\n    if (input.isDefault === false) entity.isDefault = false\n  }\n\n  if (input.isDefault === true) {\n    await em.nativeUpdate(\n      Perspective,\n      {\n        userId: scope.userId,\n        tenantId,\n        organizationId,\n        tableId,\n        id: { $ne: entity.id } as any,\n        deletedAt: null,\n      },\n      { isDefault: false, updatedAt: now },\n    )\n    entity.isDefault = true\n  }\n\n  await em.flush()\n\n  if (cache?.deleteByTags) {\n    await cache.deleteByTags([userTag(scope, tableId)])\n  }\n\n  return toResolvedPerspective(entity)\n}\n\nexport async function deleteUserPerspective(\n  em: EntityManager,\n  cache: CacheStrategy | null | undefined,\n  options: { scope: PerspectiveScope; tableId: string; perspectiveId: string },\n): Promise<boolean> {\n  const { scope, tableId, perspectiveId } = options\n  const tenantId = scope.tenantId ?? null\n  const organizationId = scope.organizationId ?? null\n\n  const existing = await em.findOne(Perspective, {\n    id: perspectiveId,\n    userId: scope.userId,\n    tenantId,\n    organizationId,\n    tableId,\n    deletedAt: null,\n  })\n  if (!existing) return false\n\n  existing.deletedAt = new Date()\n  existing.isDefault = false\n  await em.flush()\n\n  if (cache?.deleteByTags) {\n    await cache.deleteByTags([userTag(scope, tableId)])\n  }\n\n  return true\n}\n\nexport async function saveRolePerspectives(\n  em: EntityManager,\n  cache: CacheStrategy | null | undefined,\n  options: {\n    tableId: string\n    tenantId?: string | null\n    organizationId?: string | null\n    input: RolePerspectiveSaveInput\n  },\n): Promise<ResolvedRolePerspective[]> {\n  const { tableId, input } = options\n  const tenantId = options.tenantId ?? null\n  const organizationId = options.organizationId ?? null\n  const now = new Date()\n  const touchedRoleIds = new Set<string>()\n\n  const results: ResolvedRolePerspective[] = []\n\n  // Prefetch every matching role perspective in a single query, then index by role id\n  // so the loop resolves create/update without a lookup per role.\n  const recordByRole = new Map<string, RolePerspective>()\n  if (input.roleIds.length) {\n    const existingRecords = await em.find(RolePerspective, {\n      roleId: { $in: input.roleIds },\n      tableId,\n      tenantId,\n      organizationId,\n      name: input.name,\n      deletedAt: null,\n    })\n    for (const existing of existingRecords) recordByRole.set(existing.roleId, existing)\n  }\n\n  for (const roleId of input.roleIds) {\n    let record = recordByRole.get(roleId) ?? null\n    if (!record) {\n      record = em.create(RolePerspective, {\n        roleId,\n        tableId,\n        tenantId,\n        organizationId,\n        name: input.name,\n        settingsJson: input.settings,\n        isDefault: Boolean(input.setDefault),\n        createdAt: now,\n        updatedAt: now,\n      })\n      em.persist(record)\n      recordByRole.set(roleId, record)\n    } else {\n      record.settingsJson = input.settings\n      record.updatedAt = now\n      if (input.setDefault === true) record.isDefault = true\n      if (input.setDefault === false) record.isDefault = false\n    }\n\n    if (input.setDefault === true) {\n      await em.nativeUpdate(\n        RolePerspective,\n        {\n          roleId,\n          tableId,\n          tenantId,\n          organizationId,\n          id: { $ne: record.id } as any,\n          deletedAt: null,\n        },\n        { isDefault: false, updatedAt: now },\n      )\n      record.isDefault = true\n    }\n\n    touchedRoleIds.add(roleId)\n    results.push(toResolvedRolePerspective(record))\n  }\n\n  if (input.roleIds.length) {\n    await em.flush()\n  }\n\n  if (cache?.deleteByTags && touchedRoleIds.size > 0) {\n    const tags = Array.from(touchedRoleIds).map((roleId) => roleTag(roleId, tableId, tenantId))\n    await cache.deleteByTags(tags)\n  }\n\n  return results\n}\n\nexport async function clearRolePerspectives(\n  em: EntityManager,\n  cache: CacheStrategy | null | undefined,\n  options: {\n    tableId: string\n    tenantId?: string | null\n    organizationId?: string | null\n    roleIds: string[]\n  },\n): Promise<number> {\n  const { tableId, roleIds } = options\n  const tenantId = options.tenantId ?? null\n  const organizationId = options.organizationId ?? null\n  if (!roleIds.length) return 0\n\n  const affected = await em.nativeUpdate(\n    RolePerspective,\n    {\n      roleId: { $in: roleIds as any },\n      tableId,\n      tenantId,\n      organizationId,\n      deletedAt: null,\n    },\n    { deletedAt: new Date(), isDefault: false },\n  )\n\n  if (cache?.deleteByTags) {\n    const tags = roleIds.map((roleId) => roleTag(roleId, tableId, tenantId))\n    await cache.deleteByTags(tags)\n  }\n\n  return affected\n}\n"],
+  "mappings": "AAEA,SAAS,oCAAoC;AAC7C,SAAS,aAAa,uBAAuB;AA2C7C,MAAM,eAAe,IAAI,KAAK;AAE9B,MAAM,UAAU,CAAsC,UACpD,SAAS,OAAO,OAAO;AAEzB,MAAM,WAAW,CAAC,UAChB,GAAG,MAAM,MAAM,IAAI,MAAM,YAAY,MAAM,IAAI,MAAM,kBAAkB,MAAM;AAE/E,MAAM,eAAe,CAAC,OAAyB,SAAiB,YAC9D,2BAA2B,SAAS,KAAK,CAAC,IAAI,OAAO,IAAI,QAAQ,KAAK,CAAC,GAAG,MAAM,EAAE,cAAc,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC;AAE/G,MAAM,UAAU,CAAC,OAAyB,YACxC,UACI,qBAAqB,SAAS,KAAK,CAAC,IAAI,OAAO,KAC/C,qBAAqB,SAAS,KAAK,CAAC;AAE1C,MAAM,UAAU,CAAC,QAAgB,SAAkB,aAA6B;AAC9E,QAAM,SAAS,YAAY;AAC3B,SAAO,UAAU,qBAAqB,MAAM,IAAI,MAAM,IAAI,OAAO,KAAK,qBAAqB,MAAM,IAAI,MAAM;AAC7G;AAEA,SAAS,sBAAsB,OAA8C;AAC3E,MAAI,OAAO,UAAU,YAAY,UAAU,KAAM,QAAO;AACxD,QAAM,SAAS;AACf,SAAO,OAAO,OAAO,OAAO,YACvB,OAAO,OAAO,SAAS,YACvB,OAAO,OAAO,YAAY,YAC1B,OAAO,OAAO,cAAc,aAC5B,OAAO,OAAO,cAAc;AACnC;AAEA,SAAS,0BAA0B,OAAkD;AACnF,MAAI,OAAO,UAAU,YAAY,UAAU,KAAM,QAAO;AACxD,QAAM,SAAS;AACf,SAAO,OAAO,OAAO,OAAO,YACvB,OAAO,OAAO,WAAW,YACzB,OAAO,OAAO,YAAY,YAC1B,OAAO,OAAO,SAAS,YACvB,OAAO,OAAO,cAAc,aAC5B,OAAO,OAAO,cAAc;AACnC;AAEA,SAAS,oBAAoB,OAA4C;AACvE,MAAI,OAAO,UAAU,YAAY,UAAU,KAAM,QAAO;AACxD,QAAM,SAAS;AACf,MAAI,OAAO,OAAO,YAAY,SAAU,QAAO;AAC/C,MAAI,CAAC,MAAM,QAAQ,OAAO,QAAQ,KAAK,OAAO,SAAS,KAAK,CAAC,SAAS,CAAC,sBAAsB,IAAI,CAAC,EAAG,QAAO;AAC5G,MAAI,OAAO,sBAAsB,QAAQ,OAAO,OAAO,sBAAsB,SAAU,QAAO;AAC9F,MAAI,CAAC,MAAM,QAAQ,OAAO,gBAAgB,KAAK,OAAO,iBAAiB,KAAK,CAAC,SAAS,CAAC,0BAA0B,IAAI,CAAC,EAAG,QAAO;AAChI,SAAO;AACT;AAgBO,SAAS,+BAA+B,UAAoD;AACjG,QAAM,UAAU,SAAS;AACzB,MAAI,CAAC,WAAW,OAAO,YAAY,SAAU,QAAO;AACpD,QAAM,SAAS;AACf,MAAI,OAAO,UAAU,OAAO,MAAM,EAAG,QAAO;AAC5C,MAAI,UAAU,OAAQ,QAAO;AAC7B,MAAI,OAAO,YAAY,aAAa;AAClC,YAAQ,KAAK,6GAA6G;AAAA,EAC5H;AACA,SAAO,EAAE,GAAG,UAAU,SAAS,OAAU;AAC3C;AAEA,SAAS,sBAAsB,QAA0C;AACvE,QAAM,WAAW,+BAAgC,OAAO,gBAAgB,CAAC,CAAyB;AAClG,SAAO;AAAA,IACL,IAAI,OAAO;AAAA,IACX,MAAM,OAAO;AAAA,IACb,SAAS,OAAO;AAAA,IAChB,WAAW,CAAC,CAAC,OAAO;AAAA,IACpB;AAAA,IACA,WAAW,OAAO,UAAU,YAAY;AAAA,IACxC,WAAW,OAAO,YAAY,OAAO,UAAU,YAAY,IAAI;AAAA,EACjE;AACF;AAEA,SAAS,0BAA0B,QAAkD;AACnF,QAAM,WAAW,+BAAgC,OAAO,gBAAgB,CAAC,CAAyB;AAClG,SAAO;AAAA,IACL,IAAI,OAAO;AAAA,IACX,QAAQ,OAAO;AAAA,IACf,SAAS,OAAO;AAAA,IAChB,MAAM,OAAO;AAAA,IACb,WAAW,CAAC,CAAC,OAAO;AAAA,IACpB;AAAA,IACA,UAAU,QAAQ,OAAO,QAAQ;AAAA,IACjC,gBAAgB,QAAQ,OAAO,cAAc;AAAA,IAC7C,WAAW,OAAO,UAAU,YAAY;AAAA,IACxC,WAAW,OAAO,YAAY,OAAO,UAAU,YAAY,IAAI;AAAA,EACjE;AACF;AAEA,eAAsB,sBACpB,IACA,OACA,SAC4B;AAC5B,QAAM,EAAE,OAAO,QAAQ,IAAI;AAC3B,QAAM,UAAU,MAAM,QAAQ,QAAQ,OAAO,IAAI,QAAQ,QAAQ,OAAO,CAAC,OAAO,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC;AACxG,QAAM,cAAc,MAAM,KAAK,IAAI,IAAI,OAAO,CAAC;AAC/C,QAAM,WAAW,SAAS,YAAY,UAAU,KAAK,aAAa,OAAO,SAAS,WAAW,IAAI;AAEjG,MAAI,SAAS,UAAU;AACrB,UAAM,SAAS,MAAM,MAAM,IAAI,QAAQ;AACvC,QAAI,UAAU,oBAAoB,MAAM,EAAG,QAAO;AAAA,EACpD;AAEA,QAAM,WAAW,MAAM,YAAY;AACnC,QAAM,iBAAiB,MAAM,kBAAkB;AAE/C,QAAM,CAAC,UAAU,WAAW,IAAI,MAAM,QAAQ,IAAI;AAAA,IAChD,GAAG,KAAK,aAAa;AAAA,MACnB,QAAQ,MAAM;AAAA,MACd;AAAA,MACA;AAAA,MACA;AAAA,MACA,WAAW;AAAA,IACb,GAAG,EAAE,SAAS,EAAE,WAAW,OAAO,EAAE,CAAC;AAAA,IACrC,YAAY,SACR,GAAG,KAAK,iBAAiB;AAAA,MACvB,QAAQ,EAAE,KAAK,YAAmB;AAAA,MAClC;AAAA,MACA,WAAW;AAAA,MACX,MAAM;AAAA,QACJ,EAAE,KAAK,CAAC,EAAE,SAAS,GAAG,EAAE,UAAU,KAAK,CAAC,EAAE;AAAA,QAC1C,EAAE,KAAK,CAAC,EAAE,eAAe,GAAG,EAAE,gBAAgB,KAAK,CAAC,EAAE;AAAA,MACxD;AAAA,IACF,GAAU,EAAE,SAAS,EAAE,WAAW,OAAO,EAAE,CAAC,IAC5C,CAAC;AAAA,EACP,CAAC;AAED,QAAM,mBAAmB,SAAS,IAAI,qBAAqB;AAC3D,QAAM,oBAAoB,iBAAiB,KAAK,CAAC,MAAM,EAAE,SAAS,GAAG,MAAM;AAC3E,QAAM,eAAe,YAAY,IAAI,yBAAyB;AAE9D,QAAM,QAA2B;AAAA,IAC/B;AAAA,IACA,UAAU;AAAA,IACV;AAAA,IACA,kBAAkB;AAAA,EACpB;AAEA,MAAI,SAAS,UAAU;AACrB,UAAM,MAAM,IAAI,UAAU,OAAO;AAAA,MAC/B,KAAK;AAAA,MACL,MAAM;AAAA,QACJ,QAAQ,OAAO,OAAO;AAAA,QACtB,GAAG,YAAY,IAAI,CAAC,WAAW,QAAQ,QAAQ,SAAS,QAAQ,CAAC;AAAA,MACnE;AAAA,IACF,CAAC;AAAA,EACH;AAEA,SAAO;AACT;AAEA,eAAsB,oBACpB,IACA,OACA,SAM8B;AAC9B,QAAM,EAAE,OAAO,SAAS,MAAM,IAAI;AAClC,QAAM,WAAW,MAAM,YAAY;AACnC,QAAM,iBAAiB,MAAM,kBAAkB;AAE/C,MAAI,SAA6B;AACjC,MAAI,MAAM,eAAe;AACvB,aAAS,MAAM,GAAG,QAAQ,aAAa;AAAA,MACrC,IAAI,MAAM;AAAA,MACV,QAAQ,MAAM;AAAA,MACd;AAAA,MACA;AAAA,MACA;AAAA,MACA,WAAW;AAAA,IACb,CAAC;AACD,QAAI,CAAC,QAAQ;AACX,YAAM,OAAO,OAAO,IAAI,MAAM,uBAAuB,GAAG,EAAE,MAAM,YAAY,CAAC;AAAA,IAC/E;AACA,iCAA6B;AAAA,MAC3B,cAAc;AAAA,MACd,YAAY,OAAO;AAAA,MACnB,SAAS,OAAO,aAAa;AAAA,MAC7B,SAAS,QAAQ,WAAW;AAAA,IAC9B,CAAC;AAAA,EACH,OAAO;AACL,aAAS,MAAM,GAAG,QAAQ,aAAa;AAAA,MACrC,QAAQ,MAAM;AAAA,MACd;AAAA,MACA;AAAA,MACA;AAAA,MACA,MAAM,MAAM;AAAA,MACZ,WAAW;AAAA,IACb,CAAC;AAAA,EACH;AAEA,QAAM,MAAM,oBAAI,KAAK;AACrB,MAAI,CAAC,QAAQ;AACX,aAAS,GAAG,OAAO,aAAa;AAAA,MAC9B,QAAQ,MAAM;AAAA,MACd;AAAA,MACA;AAAA,MACA;AAAA,MACA,MAAM,MAAM;AAAA,MACZ,cAAc,MAAM;AAAA,MACpB,WAAW,QAAQ,MAAM,SAAS;AAAA,MAClC,WAAW;AAAA,MACX,WAAW;AAAA,IACb,CAAC;AACD,OAAG,QAAQ,MAAM;AAAA,EACnB,OAAO;AACL,WAAO,OAAO,MAAM;AACpB,WAAO,eAAe,MAAM;AAC5B,WAAO,YAAY;AACnB,QAAI,MAAM,cAAc,KAAM,QAAO,YAAY;AACjD,QAAI,MAAM,cAAc,MAAO,QAAO,YAAY;AAAA,EACpD;AAEA,MAAI,MAAM,cAAc,MAAM;AAC5B,UAAM,GAAG;AAAA,MACP;AAAA,MACA;AAAA,QACE,QAAQ,MAAM;AAAA,QACd;AAAA,QACA;AAAA,QACA;AAAA,QACA,IAAI,EAAE,KAAK,OAAO,GAAG;AAAA,QACrB,WAAW;AAAA,MACb;AAAA,MACA,EAAE,WAAW,OAAO,WAAW,IAAI;AAAA,IACrC;AACA,WAAO,YAAY;AAAA,EACrB;AAEA,QAAM,GAAG,MAAM;AAEf,MAAI,OAAO,cAAc;AACvB,UAAM,MAAM,aAAa,CAAC,QAAQ,OAAO,OAAO,CAAC,CAAC;AAAA,EACpD;AAEA,SAAO,sBAAsB,MAAM;AACrC;AAEA,eAAsB,sBACpB,IACA,OACA,SACkB;AAClB,QAAM,EAAE,OAAO,SAAS,cAAc,IAAI;AAC1C,QAAM,WAAW,MAAM,YAAY;AACnC,QAAM,iBAAiB,MAAM,kBAAkB;AAE/C,QAAM,WAAW,MAAM,GAAG,QAAQ,aAAa;AAAA,IAC7C,IAAI;AAAA,IACJ,QAAQ,MAAM;AAAA,IACd;AAAA,IACA;AAAA,IACA;AAAA,IACA,WAAW;AAAA,EACb,CAAC;AACD,MAAI,CAAC,SAAU,QAAO;AAEtB,WAAS,YAAY,oBAAI,KAAK;AAC9B,WAAS,YAAY;AACrB,QAAM,GAAG,MAAM;AAEf,MAAI,OAAO,cAAc;AACvB,UAAM,MAAM,aAAa,CAAC,QAAQ,OAAO,OAAO,CAAC,CAAC;AAAA,EACpD;AAEA,SAAO;AACT;AAEA,eAAsB,qBACpB,IACA,OACA,SAMoC;AACpC,QAAM,EAAE,SAAS,MAAM,IAAI;AAC3B,QAAM,WAAW,QAAQ,YAAY;AACrC,QAAM,iBAAiB,QAAQ,kBAAkB;AACjD,QAAM,MAAM,oBAAI,KAAK;AACrB,QAAM,iBAAiB,oBAAI,IAAY;AAEvC,QAAM,UAAqC,CAAC;AAI5C,QAAM,eAAe,oBAAI,IAA6B;AACtD,MAAI,MAAM,QAAQ,QAAQ;AACxB,UAAM,kBAAkB,MAAM,GAAG,KAAK,iBAAiB;AAAA,MACrD,QAAQ,EAAE,KAAK,MAAM,QAAQ;AAAA,MAC7B;AAAA,MACA;AAAA,MACA;AAAA,MACA,MAAM,MAAM;AAAA,MACZ,WAAW;AAAA,IACb,CAAC;AACD,eAAW,YAAY,gBAAiB,cAAa,IAAI,SAAS,QAAQ,QAAQ;AAAA,EACpF;AAEA,aAAW,UAAU,MAAM,SAAS;AAClC,QAAI,SAAS,aAAa,IAAI,MAAM,KAAK;AACzC,QAAI,CAAC,QAAQ;AACX,eAAS,GAAG,OAAO,iBAAiB;AAAA,QAClC;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA,MAAM,MAAM;AAAA,QACZ,cAAc,MAAM;AAAA,QACpB,WAAW,QAAQ,MAAM,UAAU;AAAA,QACnC,WAAW;AAAA,QACX,WAAW;AAAA,MACb,CAAC;AACD,SAAG,QAAQ,MAAM;AACjB,mBAAa,IAAI,QAAQ,MAAM;AAAA,IACjC,OAAO;AACL,aAAO,eAAe,MAAM;AAC5B,aAAO,YAAY;AACnB,UAAI,MAAM,eAAe,KAAM,QAAO,YAAY;AAClD,UAAI,MAAM,eAAe,MAAO,QAAO,YAAY;AAAA,IACrD;AAEA,QAAI,MAAM,eAAe,MAAM;AAC7B,YAAM,GAAG;AAAA,QACP;AAAA,QACA;AAAA,UACE;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA,IAAI,EAAE,KAAK,OAAO,GAAG;AAAA,UACrB,WAAW;AAAA,QACb;AAAA,QACA,EAAE,WAAW,OAAO,WAAW,IAAI;AAAA,MACrC;AACA,aAAO,YAAY;AAAA,IACrB;AAEA,mBAAe,IAAI,MAAM;AACzB,YAAQ,KAAK,0BAA0B,MAAM,CAAC;AAAA,EAChD;AAEA,MAAI,MAAM,QAAQ,QAAQ;AACxB,UAAM,GAAG,MAAM;AAAA,EACjB;AAEA,MAAI,OAAO,gBAAgB,eAAe,OAAO,GAAG;AAClD,UAAM,OAAO,MAAM,KAAK,cAAc,EAAE,IAAI,CAAC,WAAW,QAAQ,QAAQ,SAAS,QAAQ,CAAC;AAC1F,UAAM,MAAM,aAAa,IAAI;AAAA,EAC/B;AAEA,SAAO;AACT;AAEA,eAAsB,sBACpB,IACA,OACA,SAMiB;AACjB,QAAM,EAAE,SAAS,QAAQ,IAAI;AAC7B,QAAM,WAAW,QAAQ,YAAY;AACrC,QAAM,iBAAiB,QAAQ,kBAAkB;AACjD,MAAI,CAAC,QAAQ,OAAQ,QAAO;AAE5B,QAAM,WAAW,MAAM,GAAG;AAAA,IACxB;AAAA,IACA;AAAA,MACE,QAAQ,EAAE,KAAK,QAAe;AAAA,MAC9B;AAAA,MACA;AAAA,MACA;AAAA,MACA,WAAW;AAAA,IACb;AAAA,IACA,EAAE,WAAW,oBAAI,KAAK,GAAG,WAAW,MAAM;AAAA,EAC5C;AAEA,MAAI,OAAO,cAAc;AACvB,UAAM,OAAO,QAAQ,IAAI,CAAC,WAAW,QAAQ,QAAQ,SAAS,QAAQ,CAAC;AACvE,UAAM,MAAM,aAAa,IAAI;AAAA,EAC/B;AAEA,SAAO;AACT;",
   "names": []
 }

package/dist/modules/planner/api/access.js

@@ -43,8 +43,17 @@ async function assertAvailabilityWriteAccess(ctx, params, translate) {
   }
   return access;
 }
+function resolveAvailabilityActorId(auth) {
+  if (auth) {
+    if (typeof auth.sub === "string" && auth.sub.trim().length > 0) return auth.sub;
+    if (typeof auth.userId === "string" && auth.userId.trim().length > 0) return auth.userId;
+    if (typeof auth.keyId === "string" && auth.keyId.trim().length > 0) return auth.keyId;
+  }
+  return "system";
+}
 export {
   assertAvailabilityWriteAccess,
+  resolveAvailabilityActorId,
   resolveAvailabilityWriteAccess
 };
 //# sourceMappingURL=access.js.map

package/dist/modules/planner/api/access.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/planner/api/access.ts"],
-  "sourcesContent": ["import type { AwilixContainer } from 'awilix'\nimport type { AuthContext } from '@open-mercato/shared/lib/auth/server'\nimport { CrudHttpError } from '@open-mercato/shared/lib/crud/errors'\n\ntype TranslateFn = (key: string, fallback?: string) => string\n\nexport type AvailabilityAccessContext = {\n  container: AwilixContainer\n  auth: AuthContext | null\n  selectedOrganizationId?: string | null\n}\n\nexport type AvailabilityWriteAccess = {\n  canManageAll: boolean\n  canManageSelf: boolean\n  canManageUnavailability: boolean\n  memberId: string | null\n  tenantId: string | null\n  organizationId: string | null\n  unregistered?: boolean\n}\n\ntype AvailabilityAccessResolver = {\n  resolveAvailabilityWriteAccess(\n    ctx: AvailabilityAccessContext,\n  ): Promise<AvailabilityWriteAccess>\n}\n\nfunction buildForbiddenError(translate: TranslateFn) {\n  return new CrudHttpError(403, {\n    error: translate('planner.availability.errors.unauthorized', 'Unauthorized'),\n  })\n}\n\nfunction buildStaffModuleNotLoadedError() {\n  return new CrudHttpError(403, { error: 'staff_module_not_loaded' })\n}\n\nexport async function resolveAvailabilityWriteAccess(\n  ctx: AvailabilityAccessContext,\n): Promise<AvailabilityWriteAccess> {\n  const tenantId = ctx.auth?.tenantId ?? null\n  const organizationId = ctx.selectedOrganizationId ?? ctx.auth?.orgId ?? null\n  const resolver = ctx.container.resolve<AvailabilityAccessResolver | undefined>(\n    'availabilityAccessResolver',\n    { allowUnregistered: true },\n  )\n  if (!resolver) {\n    console.warn(\n      '[planner] staff_module_not_loaded \u2014 availabilityAccessResolver unregistered; denying availability write access',\n    )\n    return {\n      canManageAll: false,\n      canManageSelf: false,\n      canManageUnavailability: false,\n      memberId: null,\n      tenantId,\n      organizationId,\n      unregistered: true,\n    }\n  }\n  return resolver.resolveAvailabilityWriteAccess(ctx)\n}\n\nexport async function assertAvailabilityWriteAccess(\n  ctx: AvailabilityAccessContext,\n  params: { subjectType: string; subjectId: string; requiresUnavailability?: boolean },\n  translate: TranslateFn,\n): Promise<AvailabilityWriteAccess> {\n  const access = await resolveAvailabilityWriteAccess(ctx)\n  if (access.unregistered) throw buildStaffModuleNotLoadedError()\n  if (access.canManageAll) return access\n  if (!access.canManageSelf) throw buildForbiddenError(translate)\n  if (!access.memberId || params.subjectType !== 'member' || params.subjectId !== access.memberId) {\n    throw buildForbiddenError(translate)\n  }\n  if (params.requiresUnavailability && !access.canManageUnavailability) {\n    throw buildForbiddenError(translate)\n  }\n  return access\n}\n"],
-  "mappings": "AAEA,SAAS,qBAAqB;AA0B9B,SAAS,oBAAoB,WAAwB;AACnD,SAAO,IAAI,cAAc,KAAK;AAAA,IAC5B,OAAO,UAAU,4CAA4C,cAAc;AAAA,EAC7E,CAAC;AACH;AAEA,SAAS,iCAAiC;AACxC,SAAO,IAAI,cAAc,KAAK,EAAE,OAAO,0BAA0B,CAAC;AACpE;AAEA,eAAsB,+BACpB,KACkC;AAClC,QAAM,WAAW,IAAI,MAAM,YAAY;AACvC,QAAM,iBAAiB,IAAI,0BAA0B,IAAI,MAAM,SAAS;AACxE,QAAM,WAAW,IAAI,UAAU;AAAA,IAC7B;AAAA,IACA,EAAE,mBAAmB,KAAK;AAAA,EAC5B;AACA,MAAI,CAAC,UAAU;AACb,YAAQ;AAAA,MACN;AAAA,IACF;AACA,WAAO;AAAA,MACL,cAAc;AAAA,MACd,eAAe;AAAA,MACf,yBAAyB;AAAA,MACzB,UAAU;AAAA,MACV;AAAA,MACA;AAAA,MACA,cAAc;AAAA,IAChB;AAAA,EACF;AACA,SAAO,SAAS,+BAA+B,GAAG;AACpD;AAEA,eAAsB,8BACpB,KACA,QACA,WACkC;AAClC,QAAM,SAAS,MAAM,+BAA+B,GAAG;AACvD,MAAI,OAAO,aAAc,OAAM,+BAA+B;AAC9D,MAAI,OAAO,aAAc,QAAO;AAChC,MAAI,CAAC,OAAO,cAAe,OAAM,oBAAoB,SAAS;AAC9D,MAAI,CAAC,OAAO,YAAY,OAAO,gBAAgB,YAAY,OAAO,cAAc,OAAO,UAAU;AAC/F,UAAM,oBAAoB,SAAS;AAAA,EACrC;AACA,MAAI,OAAO,0BAA0B,CAAC,OAAO,yBAAyB;AACpE,UAAM,oBAAoB,SAAS;AAAA,EACrC;AACA,SAAO;AACT;",
+  "sourcesContent": ["import type { AwilixContainer } from 'awilix'\nimport type { AuthContext } from '@open-mercato/shared/lib/auth/server'\nimport { CrudHttpError } from '@open-mercato/shared/lib/crud/errors'\n\ntype TranslateFn = (key: string, fallback?: string) => string\n\nexport type AvailabilityAccessContext = {\n  container: AwilixContainer\n  auth: AuthContext | null\n  selectedOrganizationId?: string | null\n}\n\nexport type AvailabilityWriteAccess = {\n  canManageAll: boolean\n  canManageSelf: boolean\n  canManageUnavailability: boolean\n  memberId: string | null\n  tenantId: string | null\n  organizationId: string | null\n  unregistered?: boolean\n}\n\ntype AvailabilityAccessResolver = {\n  resolveAvailabilityWriteAccess(\n    ctx: AvailabilityAccessContext,\n  ): Promise<AvailabilityWriteAccess>\n}\n\nfunction buildForbiddenError(translate: TranslateFn) {\n  return new CrudHttpError(403, {\n    error: translate('planner.availability.errors.unauthorized', 'Unauthorized'),\n  })\n}\n\nfunction buildStaffModuleNotLoadedError() {\n  return new CrudHttpError(403, { error: 'staff_module_not_loaded' })\n}\n\nexport async function resolveAvailabilityWriteAccess(\n  ctx: AvailabilityAccessContext,\n): Promise<AvailabilityWriteAccess> {\n  const tenantId = ctx.auth?.tenantId ?? null\n  const organizationId = ctx.selectedOrganizationId ?? ctx.auth?.orgId ?? null\n  const resolver = ctx.container.resolve<AvailabilityAccessResolver | undefined>(\n    'availabilityAccessResolver',\n    { allowUnregistered: true },\n  )\n  if (!resolver) {\n    console.warn(\n      '[planner] staff_module_not_loaded \u2014 availabilityAccessResolver unregistered; denying availability write access',\n    )\n    return {\n      canManageAll: false,\n      canManageSelf: false,\n      canManageUnavailability: false,\n      memberId: null,\n      tenantId,\n      organizationId,\n      unregistered: true,\n    }\n  }\n  return resolver.resolveAvailabilityWriteAccess(ctx)\n}\n\nexport async function assertAvailabilityWriteAccess(\n  ctx: AvailabilityAccessContext,\n  params: { subjectType: string; subjectId: string; requiresUnavailability?: boolean },\n  translate: TranslateFn,\n): Promise<AvailabilityWriteAccess> {\n  const access = await resolveAvailabilityWriteAccess(ctx)\n  if (access.unregistered) throw buildStaffModuleNotLoadedError()\n  if (access.canManageAll) return access\n  if (!access.canManageSelf) throw buildForbiddenError(translate)\n  if (!access.memberId || params.subjectType !== 'member' || params.subjectId !== access.memberId) {\n    throw buildForbiddenError(translate)\n  }\n  if (params.requiresUnavailability && !access.canManageUnavailability) {\n    throw buildForbiddenError(translate)\n  }\n  return access\n}\n\nexport function resolveAvailabilityActorId(auth: AuthContext): string {\n  if (auth) {\n    if (typeof auth.sub === 'string' && auth.sub.trim().length > 0) return auth.sub\n    if (typeof auth.userId === 'string' && auth.userId.trim().length > 0) return auth.userId\n    if (typeof auth.keyId === 'string' && auth.keyId.trim().length > 0) return auth.keyId\n  }\n  return 'system'\n}\n"],
+  "mappings": "AAEA,SAAS,qBAAqB;AA0B9B,SAAS,oBAAoB,WAAwB;AACnD,SAAO,IAAI,cAAc,KAAK;AAAA,IAC5B,OAAO,UAAU,4CAA4C,cAAc;AAAA,EAC7E,CAAC;AACH;AAEA,SAAS,iCAAiC;AACxC,SAAO,IAAI,cAAc,KAAK,EAAE,OAAO,0BAA0B,CAAC;AACpE;AAEA,eAAsB,+BACpB,KACkC;AAClC,QAAM,WAAW,IAAI,MAAM,YAAY;AACvC,QAAM,iBAAiB,IAAI,0BAA0B,IAAI,MAAM,SAAS;AACxE,QAAM,WAAW,IAAI,UAAU;AAAA,IAC7B;AAAA,IACA,EAAE,mBAAmB,KAAK;AAAA,EAC5B;AACA,MAAI,CAAC,UAAU;AACb,YAAQ;AAAA,MACN;AAAA,IACF;AACA,WAAO;AAAA,MACL,cAAc;AAAA,MACd,eAAe;AAAA,MACf,yBAAyB;AAAA,MACzB,UAAU;AAAA,MACV;AAAA,MACA;AAAA,MACA,cAAc;AAAA,IAChB;AAAA,EACF;AACA,SAAO,SAAS,+BAA+B,GAAG;AACpD;AAEA,eAAsB,8BACpB,KACA,QACA,WACkC;AAClC,QAAM,SAAS,MAAM,+BAA+B,GAAG;AACvD,MAAI,OAAO,aAAc,OAAM,+BAA+B;AAC9D,MAAI,OAAO,aAAc,QAAO;AAChC,MAAI,CAAC,OAAO,cAAe,OAAM,oBAAoB,SAAS;AAC9D,MAAI,CAAC,OAAO,YAAY,OAAO,gBAAgB,YAAY,OAAO,cAAc,OAAO,UAAU;AAC/F,UAAM,oBAAoB,SAAS;AAAA,EACrC;AACA,MAAI,OAAO,0BAA0B,CAAC,OAAO,yBAAyB;AACpE,UAAM,oBAAoB,SAAS;AAAA,EACrC;AACA,SAAO;AACT;AAEO,SAAS,2BAA2B,MAA2B;AACpE,MAAI,MAAM;AACR,QAAI,OAAO,KAAK,QAAQ,YAAY,KAAK,IAAI,KAAK,EAAE,SAAS,EAAG,QAAO,KAAK;AAC5E,QAAI,OAAO,KAAK,WAAW,YAAY,KAAK,OAAO,KAAK,EAAE,SAAS,EAAG,QAAO,KAAK;AAClF,QAAI,OAAO,KAAK,UAAU,YAAY,KAAK,MAAM,KAAK,EAAE,SAAS,EAAG,QAAO,KAAK;AAAA,EAClF;AACA,SAAO;AACT;",
   "names": []
 }

package/dist/modules/planner/api/availability-date-specific.js

@@ -9,9 +9,13 @@ import { parseScopedCommandInput } from "@open-mercato/shared/lib/api/scoped";
 import { findWithDecryption } from "@open-mercato/shared/lib/encryption/find";
 import { plannerAvailabilityDateSpecificReplaceSchema } from "../data/validators.js";
 import { serializeOperationMetadata } from "@open-mercato/shared/lib/commands/operationMetadata";
+import {
+  runCrudMutationGuardAfterSuccess,
+  validateCrudMutationGuard
+} from "@open-mercato/shared/lib/crud/mutation-guard";
 import { PlannerAvailabilityRule } from "../data/entities.js";
 import { parseAvailabilityRuleWindow } from "../lib/availabilitySchedule.js";
-import { assertAvailabilityWriteAccess } from "./access.js";
+import { assertAvailabilityWriteAccess, resolveAvailabilityActorId } from "./access.js";
 const metadata = {
   POST: { requireAuth: true }
 };
@@ -80,8 +84,25 @@ async function POST(req) {
         }
       }
     }
+    const guardInput = {
+      tenantId: input.tenantId,
+      organizationId: input.organizationId,
+      userId: resolveAvailabilityActorId(ctx.auth),
+      resourceKind: "planner.availability",
+      resourceId: input.subjectId,
+      operation: "custom",
+      requestMethod: req.method,
+      requestHeaders: req.headers
+    };
+    const guardResult = await validateCrudMutationGuard(ctx.container, { ...guardInput, mutationPayload: input });
+    if (guardResult && !guardResult.ok) {
+      return NextResponse.json(guardResult.body, { status: guardResult.status });
+    }
     const commandBus = ctx.container.resolve("commandBus");
     const { logEntry } = await commandBus.execute("planner.availability.date-specific.replace", { input, ctx });
+    if (guardResult?.ok && guardResult.shouldRunAfterSuccess) {
+      await runCrudMutationGuardAfterSuccess(ctx.container, { ...guardInput, metadata: guardResult.metadata ?? null });
+    }
     const response = NextResponse.json({ ok: true });
     if (logEntry?.undoToken && logEntry?.id && logEntry?.commandId) {
       response.headers.set(

package/dist/modules/planner/api/availability-date-specific.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/planner/api/availability-date-specific.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport type { CommandBus, CommandRuntimeContext } from '@open-mercato/shared/lib/commands'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { CrudHttpError, isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { parseScopedCommandInput } from '@open-mercato/shared/lib/api/scoped'\nimport { findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { plannerAvailabilityDateSpecificReplaceSchema } from '../data/validators'\nimport { serializeOperationMetadata } from '@open-mercato/shared/lib/commands/operationMetadata'\nimport { PlannerAvailabilityRule } from '../data/entities'\nimport { parseAvailabilityRuleWindow } from '../lib/availabilitySchedule'\nimport { assertAvailabilityWriteAccess } from './access'\n\nexport const metadata = {\n  POST: { requireAuth: true },\n}\n\ntype RequestContext = {\n  ctx: CommandRuntimeContext\n}\n\nasync function resolveRequestContext(req: Request): Promise<RequestContext> {\n  const container = await createRequestContainer()\n  const auth = await getAuthFromRequest(req)\n  const { translate } = await resolveTranslations()\n\n  if (!auth || !auth.tenantId) {\n    throw new CrudHttpError(401, { error: translate('planner.availability.errors.unauthorized', 'Unauthorized') })\n  }\n\n  const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n  const organizationId = scope?.selectedId ?? auth.orgId ?? null\n  if (!organizationId) {\n    throw new CrudHttpError(400, {\n      error: translate('planner.availability.errors.organizationRequired', 'Organization context is required'),\n    })\n  }\n\n  const ctx: CommandRuntimeContext = {\n    container,\n    auth,\n    organizationScope: scope,\n    selectedOrganizationId: organizationId,\n    organizationIds: scope?.filterIds ?? (auth.orgId ? [auth.orgId] : null),\n    request: req,\n  }\n\n  return { ctx }\n}\n\nexport async function POST(req: Request) {\n  try {\n    const { ctx } = await resolveRequestContext(req)\n    const { translate } = await resolveTranslations()\n    const payload = await req.json().catch(() => ({}))\n    const normalized = normalizeDateSpecificPayload(payload)\n    const input = parseScopedCommandInput(plannerAvailabilityDateSpecificReplaceSchema, normalized, ctx, translate)\n    const isUnavailability = input.kind === 'unavailability' || input.isAvailable === false\n    const access = await assertAvailabilityWriteAccess(\n      ctx,\n      { subjectType: input.subjectType, subjectId: input.subjectId, requiresUnavailability: isUnavailability },\n      translate,\n    )\n    if (!access.canManageAll && !access.canManageUnavailability) {\n      const dateSet = resolveDateSet(input)\n      if (dateSet.size) {\n        const em = ctx.container.resolve('em') as EntityManager\n        const rules = await findWithDecryption(\n          em,\n          PlannerAvailabilityRule,\n          {\n            tenantId: input.tenantId,\n            organizationId: input.organizationId,\n            subjectType: input.subjectType,\n            subjectId: input.subjectId,\n            kind: 'unavailability',\n            deletedAt: null,\n          },\n          undefined,\n          { tenantId: input.tenantId, organizationId: input.organizationId },\n        )\n        const blocked = rules.some((rule) => {\n          const window = parseAvailabilityRuleWindow(rule)\n          if (window.repeat !== 'once') return false\n          return dateSet.has(formatDateKey(window.startAt))\n        })\n        if (blocked) {\n          throw new CrudHttpError(403, { error: translate('planner.availability.errors.unauthorized', 'Unauthorized') })\n        }\n      }\n    }\n    const commandBus = ctx.container.resolve('commandBus') as CommandBus\n    const { logEntry } = await commandBus.execute('planner.availability.date-specific.replace', { input, ctx })\n    const response = NextResponse.json({ ok: true })\n    if (logEntry?.undoToken && logEntry?.id && logEntry?.commandId) {\n      response.headers.set(\n        'x-om-operation',\n        serializeOperationMetadata({\n          id: logEntry.id,\n          undoToken: logEntry.undoToken,\n          commandId: logEntry.commandId,\n          actionLabel: logEntry.actionLabel ?? null,\n          resourceKind: logEntry.resourceKind ?? 'planner.availability',\n          resourceId: logEntry.resourceId ?? null,\n          executedAt: logEntry.createdAt instanceof Date ? logEntry.createdAt.toISOString() : undefined,\n        })\n      )\n    }\n    return response\n  } catch (err) {\n    if (isCrudHttpError(err)) {\n      return NextResponse.json(err.body, { status: err.status })\n    }\n    const { translate } = await resolveTranslations()\n    console.error('planner.availability.date-specific.replace failed', err)\n    return NextResponse.json(\n      { error: translate('planner.availability.errors.updateDateSpecific', 'Failed to save date-specific availability.') },\n      { status: 400 },\n    )\n  }\n}\n\nexport const openApi = {\n  tag: 'Planner',\n  summary: 'Replace date-specific availability',\n  methods: {\n    POST: {\n      summary: 'Replace date-specific availability',\n      description: 'Replaces date-specific availability rules for the subject in a single request.',\n      requestBody: {\n        contentType: 'application/json',\n        schema: plannerAvailabilityDateSpecificReplaceSchema,\n      },\n      responses: [\n        { status: 200, description: 'Date-specific availability updated', schema: z.object({ ok: z.literal(true) }) },\n        { status: 400, description: 'Invalid payload', schema: z.object({ error: z.string() }) },\n        { status: 401, description: 'Unauthorized', schema: z.object({ error: z.string() }) },\n        { status: 403, description: 'Forbidden', schema: z.object({ error: z.string() }) },\n      ],\n    },\n  },\n}\n\ntype DateSpecificPayload = {\n  date?: string\n  dates?: string[]\n  kind?: string\n  isAvailable?: boolean\n  [key: string]: unknown\n}\n\nfunction normalizeDateSpecificPayload(payload: unknown): DateSpecificPayload {\n  if (!payload || typeof payload !== 'object') return {}\n  const data = { ...(payload as Record<string, unknown>) } as DateSpecificPayload\n  if (!data.date && Array.isArray(data.dates) && data.dates.length > 0) {\n    const first = data.dates.find((value) => typeof value === 'string' && value.length > 0)\n    if (first) data.date = first\n  }\n  if (data.isAvailable === undefined && typeof data.kind === 'string') {\n    data.isAvailable = data.kind !== 'unavailability'\n  }\n  return data\n}\n\nfunction resolveDateSet(input: { date?: string; dates?: string[] }): Set<string> {\n  const dates = new Set<string>()\n  if (typeof input.date === 'string' && input.date.length > 0) {\n    dates.add(input.date)\n  }\n  if (Array.isArray(input.dates)) {\n    input.dates.forEach((value) => {\n      if (typeof value === 'string' && value.length > 0) {\n        dates.add(value)\n      }\n    })\n  }\n  return dates\n}\n\nfunction formatDateKey(value: Date): string {\n  const year = value.getFullYear()\n  const month = String(value.getMonth() + 1).padStart(2, '0')\n  const day = String(value.getDate()).padStart(2, '0')\n  return `${year}-${month}-${day}`\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAElB,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AAEnD,SAAS,2BAA2B;AACpC,SAAS,eAAe,uBAAuB;AAC/C,SAAS,+BAA+B;AACxC,SAAS,0BAA0B;AACnC,SAAS,oDAAoD;AAC7D,SAAS,kCAAkC;AAC3C,SAAS,+BAA+B;AACxC,SAAS,mCAAmC;AAC5C,SAAS,qCAAqC;AAEvC,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,KAAK;AAC5B;AAMA,eAAe,sBAAsB,KAAuC;AAC1E,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAEhD,MAAI,CAAC,QAAQ,CAAC,KAAK,UAAU;AAC3B,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,4CAA4C,cAAc,EAAE,CAAC;AAAA,EAC/G;AAEA,QAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AACxF,QAAM,iBAAiB,OAAO,cAAc,KAAK,SAAS;AAC1D,MAAI,CAAC,gBAAgB;AACnB,UAAM,IAAI,cAAc,KAAK;AAAA,MAC3B,OAAO,UAAU,oDAAoD,kCAAkC;AAAA,IACzG,CAAC;AAAA,EACH;AAEA,QAAM,MAA6B;AAAA,IACjC;AAAA,IACA;AAAA,IACA,mBAAmB;AAAA,IACnB,wBAAwB;AAAA,IACxB,iBAAiB,OAAO,cAAc,KAAK,QAAQ,CAAC,KAAK,KAAK,IAAI;AAAA,IAClE,SAAS;AAAA,EACX;AAEA,SAAO,EAAE,IAAI;AACf;AAEA,eAAsB,KAAK,KAAc;AACvC,MAAI;AACF,UAAM,EAAE,IAAI,IAAI,MAAM,sBAAsB,GAAG;AAC/C,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,UAAM,UAAU,MAAM,IAAI,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AACjD,UAAM,aAAa,6BAA6B,OAAO;AACvD,UAAM,QAAQ,wBAAwB,8CAA8C,YAAY,KAAK,SAAS;AAC9G,UAAM,mBAAmB,MAAM,SAAS,oBAAoB,MAAM,gBAAgB;AAClF,UAAM,SAAS,MAAM;AAAA,MACnB;AAAA,MACA,EAAE,aAAa,MAAM,aAAa,WAAW,MAAM,WAAW,wBAAwB,iBAAiB;AAAA,MACvG;AAAA,IACF;AACA,QAAI,CAAC,OAAO,gBAAgB,CAAC,OAAO,yBAAyB;AAC3D,YAAM,UAAU,eAAe,KAAK;AACpC,UAAI,QAAQ,MAAM;AAChB,cAAM,KAAK,IAAI,UAAU,QAAQ,IAAI;AACrC,cAAM,QAAQ,MAAM;AAAA,UAClB;AAAA,UACA;AAAA,UACA;AAAA,YACE,UAAU,MAAM;AAAA,YAChB,gBAAgB,MAAM;AAAA,YACtB,aAAa,MAAM;AAAA,YACnB,WAAW,MAAM;AAAA,YACjB,MAAM;AAAA,YACN,WAAW;AAAA,UACb;AAAA,UACA;AAAA,UACA,EAAE,UAAU,MAAM,UAAU,gBAAgB,MAAM,eAAe;AAAA,QACnE;AACA,cAAM,UAAU,MAAM,KAAK,CAAC,SAAS;AACnC,gBAAM,SAAS,4BAA4B,IAAI;AAC/C,cAAI,OAAO,WAAW,OAAQ,QAAO;AACrC,iBAAO,QAAQ,IAAI,cAAc,OAAO,OAAO,CAAC;AAAA,QAClD,CAAC;AACD,YAAI,SAAS;AACX,gBAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,4CAA4C,cAAc,EAAE,CAAC;AAAA,QAC/G;AAAA,MACF;AAAA,IACF;AACA,UAAM,aAAa,IAAI,UAAU,QAAQ,YAAY;AACrD,UAAM,EAAE,SAAS,IAAI,MAAM,WAAW,QAAQ,8CAA8C,EAAE,OAAO,IAAI,CAAC;AAC1G,UAAM,WAAW,aAAa,KAAK,EAAE,IAAI,KAAK,CAAC;AAC/C,QAAI,UAAU,aAAa,UAAU,MAAM,UAAU,WAAW;AAC9D,eAAS,QAAQ;AAAA,QACf;AAAA,QACA,2BAA2B;AAAA,UACzB,IAAI,SAAS;AAAA,UACb,WAAW,SAAS;AAAA,UACpB,WAAW,SAAS;AAAA,UACpB,aAAa,SAAS,eAAe;AAAA,UACrC,cAAc,SAAS,gBAAgB;AAAA,UACvC,YAAY,SAAS,cAAc;AAAA,UACnC,YAAY,SAAS,qBAAqB,OAAO,SAAS,UAAU,YAAY,IAAI;AAAA,QACtF,CAAC;AAAA,MACH;AAAA,IACF;AACA,WAAO;AAAA,EACT,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,GAAG;AACxB,aAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,IAC3D;AACA,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,YAAQ,MAAM,qDAAqD,GAAG;AACtE,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,UAAU,kDAAkD,4CAA4C,EAAE;AAAA,MACnH,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAEO,MAAM,UAAU;AAAA,EACrB,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa;AAAA,MACb,aAAa;AAAA,QACX,aAAa;AAAA,QACb,QAAQ;AAAA,MACV;AAAA,MACA,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,sCAAsC,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,IAAI,EAAE,CAAC,EAAE;AAAA,QAC5G,EAAE,QAAQ,KAAK,aAAa,mBAAmB,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,QACvF,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,QACpF,EAAE,QAAQ,KAAK,aAAa,aAAa,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,MACnF;AAAA,IACF;AAAA,EACF;AACF;AAUA,SAAS,6BAA6B,SAAuC;AAC3E,MAAI,CAAC,WAAW,OAAO,YAAY,SAAU,QAAO,CAAC;AACrD,QAAM,OAAO,EAAE,GAAI,QAAoC;AACvD,MAAI,CAAC,KAAK,QAAQ,MAAM,QAAQ,KAAK,KAAK,KAAK,KAAK,MAAM,SAAS,GAAG;AACpE,UAAM,QAAQ,KAAK,MAAM,KAAK,CAAC,UAAU,OAAO,UAAU,YAAY,MAAM,SAAS,CAAC;AACtF,QAAI,MAAO,MAAK,OAAO;AAAA,EACzB;AACA,MAAI,KAAK,gBAAgB,UAAa,OAAO,KAAK,SAAS,UAAU;AACnE,SAAK,cAAc,KAAK,SAAS;AAAA,EACnC;AACA,SAAO;AACT;AAEA,SAAS,eAAe,OAAyD;AAC/E,QAAM,QAAQ,oBAAI,IAAY;AAC9B,MAAI,OAAO,MAAM,SAAS,YAAY,MAAM,KAAK,SAAS,GAAG;AAC3D,UAAM,IAAI,MAAM,IAAI;AAAA,EACtB;AACA,MAAI,MAAM,QAAQ,MAAM,KAAK,GAAG;AAC9B,UAAM,MAAM,QAAQ,CAAC,UAAU;AAC7B,UAAI,OAAO,UAAU,YAAY,MAAM,SAAS,GAAG;AACjD,cAAM,IAAI,KAAK;AAAA,MACjB;AAAA,IACF,CAAC;AAAA,EACH;AACA,SAAO;AACT;AAEA,SAAS,cAAc,OAAqB;AAC1C,QAAM,OAAO,MAAM,YAAY;AAC/B,QAAM,QAAQ,OAAO,MAAM,SAAS,IAAI,CAAC,EAAE,SAAS,GAAG,GAAG;AAC1D,QAAM,MAAM,OAAO,MAAM,QAAQ,CAAC,EAAE,SAAS,GAAG,GAAG;AACnD,SAAO,GAAG,IAAI,IAAI,KAAK,IAAI,GAAG;AAChC;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport type { CommandBus, CommandRuntimeContext } from '@open-mercato/shared/lib/commands'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { CrudHttpError, isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { parseScopedCommandInput } from '@open-mercato/shared/lib/api/scoped'\nimport { findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { plannerAvailabilityDateSpecificReplaceSchema } from '../data/validators'\nimport { serializeOperationMetadata } from '@open-mercato/shared/lib/commands/operationMetadata'\nimport {\n  runCrudMutationGuardAfterSuccess,\n  validateCrudMutationGuard,\n} from '@open-mercato/shared/lib/crud/mutation-guard'\nimport { PlannerAvailabilityRule } from '../data/entities'\nimport { parseAvailabilityRuleWindow } from '../lib/availabilitySchedule'\nimport { assertAvailabilityWriteAccess, resolveAvailabilityActorId } from './access'\n\nexport const metadata = {\n  POST: { requireAuth: true },\n}\n\ntype RequestContext = {\n  ctx: CommandRuntimeContext\n}\n\nasync function resolveRequestContext(req: Request): Promise<RequestContext> {\n  const container = await createRequestContainer()\n  const auth = await getAuthFromRequest(req)\n  const { translate } = await resolveTranslations()\n\n  if (!auth || !auth.tenantId) {\n    throw new CrudHttpError(401, { error: translate('planner.availability.errors.unauthorized', 'Unauthorized') })\n  }\n\n  const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n  const organizationId = scope?.selectedId ?? auth.orgId ?? null\n  if (!organizationId) {\n    throw new CrudHttpError(400, {\n      error: translate('planner.availability.errors.organizationRequired', 'Organization context is required'),\n    })\n  }\n\n  const ctx: CommandRuntimeContext = {\n    container,\n    auth,\n    organizationScope: scope,\n    selectedOrganizationId: organizationId,\n    organizationIds: scope?.filterIds ?? (auth.orgId ? [auth.orgId] : null),\n    request: req,\n  }\n\n  return { ctx }\n}\n\nexport async function POST(req: Request) {\n  try {\n    const { ctx } = await resolveRequestContext(req)\n    const { translate } = await resolveTranslations()\n    const payload = await req.json().catch(() => ({}))\n    const normalized = normalizeDateSpecificPayload(payload)\n    const input = parseScopedCommandInput(plannerAvailabilityDateSpecificReplaceSchema, normalized, ctx, translate)\n    const isUnavailability = input.kind === 'unavailability' || input.isAvailable === false\n    const access = await assertAvailabilityWriteAccess(\n      ctx,\n      { subjectType: input.subjectType, subjectId: input.subjectId, requiresUnavailability: isUnavailability },\n      translate,\n    )\n    if (!access.canManageAll && !access.canManageUnavailability) {\n      const dateSet = resolveDateSet(input)\n      if (dateSet.size) {\n        const em = ctx.container.resolve('em') as EntityManager\n        const rules = await findWithDecryption(\n          em,\n          PlannerAvailabilityRule,\n          {\n            tenantId: input.tenantId,\n            organizationId: input.organizationId,\n            subjectType: input.subjectType,\n            subjectId: input.subjectId,\n            kind: 'unavailability',\n            deletedAt: null,\n          },\n          undefined,\n          { tenantId: input.tenantId, organizationId: input.organizationId },\n        )\n        const blocked = rules.some((rule) => {\n          const window = parseAvailabilityRuleWindow(rule)\n          if (window.repeat !== 'once') return false\n          return dateSet.has(formatDateKey(window.startAt))\n        })\n        if (blocked) {\n          throw new CrudHttpError(403, { error: translate('planner.availability.errors.unauthorized', 'Unauthorized') })\n        }\n      }\n    }\n    const guardInput = {\n      tenantId: input.tenantId,\n      organizationId: input.organizationId,\n      userId: resolveAvailabilityActorId(ctx.auth),\n      resourceKind: 'planner.availability',\n      resourceId: input.subjectId,\n      operation: 'custom' as const,\n      requestMethod: req.method,\n      requestHeaders: req.headers,\n    }\n    const guardResult = await validateCrudMutationGuard(ctx.container, { ...guardInput, mutationPayload: input })\n    if (guardResult && !guardResult.ok) {\n      return NextResponse.json(guardResult.body, { status: guardResult.status })\n    }\n    const commandBus = ctx.container.resolve('commandBus') as CommandBus\n    const { logEntry } = await commandBus.execute('planner.availability.date-specific.replace', { input, ctx })\n    if (guardResult?.ok && guardResult.shouldRunAfterSuccess) {\n      await runCrudMutationGuardAfterSuccess(ctx.container, { ...guardInput, metadata: guardResult.metadata ?? null })\n    }\n    const response = NextResponse.json({ ok: true })\n    if (logEntry?.undoToken && logEntry?.id && logEntry?.commandId) {\n      response.headers.set(\n        'x-om-operation',\n        serializeOperationMetadata({\n          id: logEntry.id,\n          undoToken: logEntry.undoToken,\n          commandId: logEntry.commandId,\n          actionLabel: logEntry.actionLabel ?? null,\n          resourceKind: logEntry.resourceKind ?? 'planner.availability',\n          resourceId: logEntry.resourceId ?? null,\n          executedAt: logEntry.createdAt instanceof Date ? logEntry.createdAt.toISOString() : undefined,\n        })\n      )\n    }\n    return response\n  } catch (err) {\n    if (isCrudHttpError(err)) {\n      return NextResponse.json(err.body, { status: err.status })\n    }\n    const { translate } = await resolveTranslations()\n    console.error('planner.availability.date-specific.replace failed', err)\n    return NextResponse.json(\n      { error: translate('planner.availability.errors.updateDateSpecific', 'Failed to save date-specific availability.') },\n      { status: 400 },\n    )\n  }\n}\n\nexport const openApi = {\n  tag: 'Planner',\n  summary: 'Replace date-specific availability',\n  methods: {\n    POST: {\n      summary: 'Replace date-specific availability',\n      description: 'Replaces date-specific availability rules for the subject in a single request.',\n      requestBody: {\n        contentType: 'application/json',\n        schema: plannerAvailabilityDateSpecificReplaceSchema,\n      },\n      responses: [\n        { status: 200, description: 'Date-specific availability updated', schema: z.object({ ok: z.literal(true) }) },\n        { status: 400, description: 'Invalid payload', schema: z.object({ error: z.string() }) },\n        { status: 401, description: 'Unauthorized', schema: z.object({ error: z.string() }) },\n        { status: 403, description: 'Forbidden', schema: z.object({ error: z.string() }) },\n      ],\n    },\n  },\n}\n\ntype DateSpecificPayload = {\n  date?: string\n  dates?: string[]\n  kind?: string\n  isAvailable?: boolean\n  [key: string]: unknown\n}\n\nfunction normalizeDateSpecificPayload(payload: unknown): DateSpecificPayload {\n  if (!payload || typeof payload !== 'object') return {}\n  const data = { ...(payload as Record<string, unknown>) } as DateSpecificPayload\n  if (!data.date && Array.isArray(data.dates) && data.dates.length > 0) {\n    const first = data.dates.find((value) => typeof value === 'string' && value.length > 0)\n    if (first) data.date = first\n  }\n  if (data.isAvailable === undefined && typeof data.kind === 'string') {\n    data.isAvailable = data.kind !== 'unavailability'\n  }\n  return data\n}\n\nfunction resolveDateSet(input: { date?: string; dates?: string[] }): Set<string> {\n  const dates = new Set<string>()\n  if (typeof input.date === 'string' && input.date.length > 0) {\n    dates.add(input.date)\n  }\n  if (Array.isArray(input.dates)) {\n    input.dates.forEach((value) => {\n      if (typeof value === 'string' && value.length > 0) {\n        dates.add(value)\n      }\n    })\n  }\n  return dates\n}\n\nfunction formatDateKey(value: Date): string {\n  const year = value.getFullYear()\n  const month = String(value.getMonth() + 1).padStart(2, '0')\n  const day = String(value.getDate()).padStart(2, '0')\n  return `${year}-${month}-${day}`\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAElB,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AAEnD,SAAS,2BAA2B;AACpC,SAAS,eAAe,uBAAuB;AAC/C,SAAS,+BAA+B;AACxC,SAAS,0BAA0B;AACnC,SAAS,oDAAoD;AAC7D,SAAS,kCAAkC;AAC3C;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,+BAA+B;AACxC,SAAS,mCAAmC;AAC5C,SAAS,+BAA+B,kCAAkC;AAEnE,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,KAAK;AAC5B;AAMA,eAAe,sBAAsB,KAAuC;AAC1E,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAEhD,MAAI,CAAC,QAAQ,CAAC,KAAK,UAAU;AAC3B,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,4CAA4C,cAAc,EAAE,CAAC;AAAA,EAC/G;AAEA,QAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AACxF,QAAM,iBAAiB,OAAO,cAAc,KAAK,SAAS;AAC1D,MAAI,CAAC,gBAAgB;AACnB,UAAM,IAAI,cAAc,KAAK;AAAA,MAC3B,OAAO,UAAU,oDAAoD,kCAAkC;AAAA,IACzG,CAAC;AAAA,EACH;AAEA,QAAM,MAA6B;AAAA,IACjC;AAAA,IACA;AAAA,IACA,mBAAmB;AAAA,IACnB,wBAAwB;AAAA,IACxB,iBAAiB,OAAO,cAAc,KAAK,QAAQ,CAAC,KAAK,KAAK,IAAI;AAAA,IAClE,SAAS;AAAA,EACX;AAEA,SAAO,EAAE,IAAI;AACf;AAEA,eAAsB,KAAK,KAAc;AACvC,MAAI;AACF,UAAM,EAAE,IAAI,IAAI,MAAM,sBAAsB,GAAG;AAC/C,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,UAAM,UAAU,MAAM,IAAI,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AACjD,UAAM,aAAa,6BAA6B,OAAO;AACvD,UAAM,QAAQ,wBAAwB,8CAA8C,YAAY,KAAK,SAAS;AAC9G,UAAM,mBAAmB,MAAM,SAAS,oBAAoB,MAAM,gBAAgB;AAClF,UAAM,SAAS,MAAM;AAAA,MACnB;AAAA,MACA,EAAE,aAAa,MAAM,aAAa,WAAW,MAAM,WAAW,wBAAwB,iBAAiB;AAAA,MACvG;AAAA,IACF;AACA,QAAI,CAAC,OAAO,gBAAgB,CAAC,OAAO,yBAAyB;AAC3D,YAAM,UAAU,eAAe,KAAK;AACpC,UAAI,QAAQ,MAAM;AAChB,cAAM,KAAK,IAAI,UAAU,QAAQ,IAAI;AACrC,cAAM,QAAQ,MAAM;AAAA,UAClB;AAAA,UACA;AAAA,UACA;AAAA,YACE,UAAU,MAAM;AAAA,YAChB,gBAAgB,MAAM;AAAA,YACtB,aAAa,MAAM;AAAA,YACnB,WAAW,MAAM;AAAA,YACjB,MAAM;AAAA,YACN,WAAW;AAAA,UACb;AAAA,UACA;AAAA,UACA,EAAE,UAAU,MAAM,UAAU,gBAAgB,MAAM,eAAe;AAAA,QACnE;AACA,cAAM,UAAU,MAAM,KAAK,CAAC,SAAS;AACnC,gBAAM,SAAS,4BAA4B,IAAI;AAC/C,cAAI,OAAO,WAAW,OAAQ,QAAO;AACrC,iBAAO,QAAQ,IAAI,cAAc,OAAO,OAAO,CAAC;AAAA,QAClD,CAAC;AACD,YAAI,SAAS;AACX,gBAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,4CAA4C,cAAc,EAAE,CAAC;AAAA,QAC/G;AAAA,MACF;AAAA,IACF;AACA,UAAM,aAAa;AAAA,MACjB,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM;AAAA,MACtB,QAAQ,2BAA2B,IAAI,IAAI;AAAA,MAC3C,cAAc;AAAA,MACd,YAAY,MAAM;AAAA,MAClB,WAAW;AAAA,MACX,eAAe,IAAI;AAAA,MACnB,gBAAgB,IAAI;AAAA,IACtB;AACA,UAAM,cAAc,MAAM,0BAA0B,IAAI,WAAW,EAAE,GAAG,YAAY,iBAAiB,MAAM,CAAC;AAC5G,QAAI,eAAe,CAAC,YAAY,IAAI;AAClC,aAAO,aAAa,KAAK,YAAY,MAAM,EAAE,QAAQ,YAAY,OAAO,CAAC;AAAA,IAC3E;AACA,UAAM,aAAa,IAAI,UAAU,QAAQ,YAAY;AACrD,UAAM,EAAE,SAAS,IAAI,MAAM,WAAW,QAAQ,8CAA8C,EAAE,OAAO,IAAI,CAAC;AAC1G,QAAI,aAAa,MAAM,YAAY,uBAAuB;AACxD,YAAM,iCAAiC,IAAI,WAAW,EAAE,GAAG,YAAY,UAAU,YAAY,YAAY,KAAK,CAAC;AAAA,IACjH;AACA,UAAM,WAAW,aAAa,KAAK,EAAE,IAAI,KAAK,CAAC;AAC/C,QAAI,UAAU,aAAa,UAAU,MAAM,UAAU,WAAW;AAC9D,eAAS,QAAQ;AAAA,QACf;AAAA,QACA,2BAA2B;AAAA,UACzB,IAAI,SAAS;AAAA,UACb,WAAW,SAAS;AAAA,UACpB,WAAW,SAAS;AAAA,UACpB,aAAa,SAAS,eAAe;AAAA,UACrC,cAAc,SAAS,gBAAgB;AAAA,UACvC,YAAY,SAAS,cAAc;AAAA,UACnC,YAAY,SAAS,qBAAqB,OAAO,SAAS,UAAU,YAAY,IAAI;AAAA,QACtF,CAAC;AAAA,MACH;AAAA,IACF;AACA,WAAO;AAAA,EACT,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,GAAG;AACxB,aAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,IAC3D;AACA,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,YAAQ,MAAM,qDAAqD,GAAG;AACtE,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,UAAU,kDAAkD,4CAA4C,EAAE;AAAA,MACnH,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAEO,MAAM,UAAU;AAAA,EACrB,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa;AAAA,MACb,aAAa;AAAA,QACX,aAAa;AAAA,QACb,QAAQ;AAAA,MACV;AAAA,MACA,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,sCAAsC,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,IAAI,EAAE,CAAC,EAAE;AAAA,QAC5G,EAAE,QAAQ,KAAK,aAAa,mBAAmB,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,QACvF,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,QACpF,EAAE,QAAQ,KAAK,aAAa,aAAa,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,MACnF;AAAA,IACF;AAAA,EACF;AACF;AAUA,SAAS,6BAA6B,SAAuC;AAC3E,MAAI,CAAC,WAAW,OAAO,YAAY,SAAU,QAAO,CAAC;AACrD,QAAM,OAAO,EAAE,GAAI,QAAoC;AACvD,MAAI,CAAC,KAAK,QAAQ,MAAM,QAAQ,KAAK,KAAK,KAAK,KAAK,MAAM,SAAS,GAAG;AACpE,UAAM,QAAQ,KAAK,MAAM,KAAK,CAAC,UAAU,OAAO,UAAU,YAAY,MAAM,SAAS,CAAC;AACtF,QAAI,MAAO,MAAK,OAAO;AAAA,EACzB;AACA,MAAI,KAAK,gBAAgB,UAAa,OAAO,KAAK,SAAS,UAAU;AACnE,SAAK,cAAc,KAAK,SAAS;AAAA,EACnC;AACA,SAAO;AACT;AAEA,SAAS,eAAe,OAAyD;AAC/E,QAAM,QAAQ,oBAAI,IAAY;AAC9B,MAAI,OAAO,MAAM,SAAS,YAAY,MAAM,KAAK,SAAS,GAAG;AAC3D,UAAM,IAAI,MAAM,IAAI;AAAA,EACtB;AACA,MAAI,MAAM,QAAQ,MAAM,KAAK,GAAG;AAC9B,UAAM,MAAM,QAAQ,CAAC,UAAU;AAC7B,UAAI,OAAO,UAAU,YAAY,MAAM,SAAS,GAAG;AACjD,cAAM,IAAI,KAAK;AAAA,MACjB;AAAA,IACF,CAAC;AAAA,EACH;AACA,SAAO;AACT;AAEA,SAAS,cAAc,OAAqB;AAC1C,QAAM,OAAO,MAAM,YAAY;AAC/B,QAAM,QAAQ,OAAO,MAAM,SAAS,IAAI,CAAC,EAAE,SAAS,GAAG,GAAG;AAC1D,QAAM,MAAM,OAAO,MAAM,QAAQ,CAAC,EAAE,SAAS,GAAG,GAAG;AACnD,SAAO,GAAG,IAAI,IAAI,KAAK,IAAI,GAAG;AAChC;",
   "names": []
 }

package/dist/modules/planner/api/availability-weekly.js

@@ -8,7 +8,11 @@ import { CrudHttpError, isCrudHttpError } from "@open-mercato/shared/lib/crud/er
 import { parseScopedCommandInput } from "@open-mercato/shared/lib/api/scoped";
 import { plannerAvailabilityWeeklyReplaceSchema } from "../data/validators.js";
 import { serializeOperationMetadata } from "@open-mercato/shared/lib/commands/operationMetadata";
-import { assertAvailabilityWriteAccess } from "./access.js";
+import {
+  runCrudMutationGuardAfterSuccess,
+  validateCrudMutationGuard
+} from "@open-mercato/shared/lib/crud/mutation-guard";
+import { assertAvailabilityWriteAccess, resolveAvailabilityActorId } from "./access.js";
 const metadata = {
   POST: { requireAuth: true }
 };
@@ -43,8 +47,25 @@ async function POST(req) {
     const payload = await req.json().catch(() => ({}));
     const input = parseScopedCommandInput(plannerAvailabilityWeeklyReplaceSchema, payload, ctx, translate);
     await assertAvailabilityWriteAccess(ctx, { subjectType: input.subjectType, subjectId: input.subjectId }, translate);
+    const guardInput = {
+      tenantId: input.tenantId,
+      organizationId: input.organizationId,
+      userId: resolveAvailabilityActorId(ctx.auth),
+      resourceKind: "planner.availability",
+      resourceId: input.subjectId,
+      operation: "custom",
+      requestMethod: req.method,
+      requestHeaders: req.headers
+    };
+    const guardResult = await validateCrudMutationGuard(ctx.container, { ...guardInput, mutationPayload: input });
+    if (guardResult && !guardResult.ok) {
+      return NextResponse.json(guardResult.body, { status: guardResult.status });
+    }
     const commandBus = ctx.container.resolve("commandBus");
     const { logEntry } = await commandBus.execute("planner.availability.weekly.replace", { input, ctx });
+    if (guardResult?.ok && guardResult.shouldRunAfterSuccess) {
+      await runCrudMutationGuardAfterSuccess(ctx.container, { ...guardInput, metadata: guardResult.metadata ?? null });
+    }
     const response = NextResponse.json({ ok: true });
     if (logEntry?.undoToken && logEntry?.id && logEntry?.commandId) {
       response.headers.set(

package/dist/modules/planner/api/availability-weekly.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/planner/api/availability-weekly.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport type { CommandBus, CommandRuntimeContext } from '@open-mercato/shared/lib/commands'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { CrudHttpError, isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { parseScopedCommandInput } from '@open-mercato/shared/lib/api/scoped'\nimport { plannerAvailabilityWeeklyReplaceSchema } from '../data/validators'\nimport { serializeOperationMetadata } from '@open-mercato/shared/lib/commands/operationMetadata'\nimport { assertAvailabilityWriteAccess } from './access'\n\nexport const metadata = {\n  POST: { requireAuth: true },\n}\n\ntype RequestContext = {\n  ctx: CommandRuntimeContext\n}\n\nasync function resolveRequestContext(req: Request): Promise<RequestContext> {\n  const container = await createRequestContainer()\n  const auth = await getAuthFromRequest(req)\n  const { translate } = await resolveTranslations()\n\n  if (!auth || !auth.tenantId) {\n    throw new CrudHttpError(401, { error: translate('planner.availability.errors.unauthorized', 'Unauthorized') })\n  }\n\n  const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n  const organizationId = scope?.selectedId ?? auth.orgId ?? null\n  if (!organizationId) {\n    throw new CrudHttpError(400, {\n      error: translate('planner.availability.errors.organizationRequired', 'Organization context is required'),\n    })\n  }\n\n  const ctx: CommandRuntimeContext = {\n    container,\n    auth,\n    organizationScope: scope,\n    selectedOrganizationId: organizationId,\n    organizationIds: scope?.filterIds ?? (auth.orgId ? [auth.orgId] : null),\n    request: req,\n  }\n\n  return { ctx }\n}\n\nexport async function POST(req: Request) {\n  try {\n    const { ctx } = await resolveRequestContext(req)\n    const { translate } = await resolveTranslations()\n    const payload = await req.json().catch(() => ({}))\n    const input = parseScopedCommandInput(plannerAvailabilityWeeklyReplaceSchema, payload, ctx, translate)\n    await assertAvailabilityWriteAccess(ctx, { subjectType: input.subjectType, subjectId: input.subjectId }, translate)\n    const commandBus = ctx.container.resolve('commandBus') as CommandBus\n    const { logEntry } = await commandBus.execute('planner.availability.weekly.replace', { input, ctx })\n    const response = NextResponse.json({ ok: true })\n    if (logEntry?.undoToken && logEntry?.id && logEntry?.commandId) {\n      response.headers.set(\n        'x-om-operation',\n        serializeOperationMetadata({\n          id: logEntry.id,\n          undoToken: logEntry.undoToken,\n          commandId: logEntry.commandId,\n          actionLabel: logEntry.actionLabel ?? null,\n          resourceKind: logEntry.resourceKind ?? 'planner.availability',\n          resourceId: logEntry.resourceId ?? null,\n          executedAt: logEntry.createdAt instanceof Date ? logEntry.createdAt.toISOString() : undefined,\n        })\n      )\n    }\n    return response\n  } catch (err) {\n    if (isCrudHttpError(err)) {\n      return NextResponse.json(err.body, { status: err.status })\n    }\n    const { translate } = await resolveTranslations()\n    console.error('planner.availability.weekly.replace failed', err)\n    return NextResponse.json(\n      { error: translate('planner.availability.errors.updateWeekly', 'Failed to save weekly availability.') },\n      { status: 400 },\n    )\n  }\n}\n\nexport const openApi = {\n  tag: 'Planner',\n  summary: 'Replace weekly availability',\n  methods: {\n    POST: {\n      summary: 'Replace weekly availability',\n      description: 'Replaces weekly availability rules for the subject in a single request.',\n      requestBody: {\n        contentType: 'application/json',\n        schema: plannerAvailabilityWeeklyReplaceSchema,\n      },\n      responses: [\n        { status: 200, description: 'Weekly availability updated', schema: z.object({ ok: z.literal(true) }) },\n        { status: 400, description: 'Invalid payload', schema: z.object({ error: z.string() }) },\n        { status: 401, description: 'Unauthorized', schema: z.object({ error: z.string() }) },\n        { status: 403, description: 'Forbidden', schema: z.object({ error: z.string() }) },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AAEnD,SAAS,2BAA2B;AACpC,SAAS,eAAe,uBAAuB;AAC/C,SAAS,+BAA+B;AACxC,SAAS,8CAA8C;AACvD,SAAS,kCAAkC;AAC3C,SAAS,qCAAqC;AAEvC,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,KAAK;AAC5B;AAMA,eAAe,sBAAsB,KAAuC;AAC1E,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAEhD,MAAI,CAAC,QAAQ,CAAC,KAAK,UAAU;AAC3B,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,4CAA4C,cAAc,EAAE,CAAC;AAAA,EAC/G;AAEA,QAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AACxF,QAAM,iBAAiB,OAAO,cAAc,KAAK,SAAS;AAC1D,MAAI,CAAC,gBAAgB;AACnB,UAAM,IAAI,cAAc,KAAK;AAAA,MAC3B,OAAO,UAAU,oDAAoD,kCAAkC;AAAA,IACzG,CAAC;AAAA,EACH;AAEA,QAAM,MAA6B;AAAA,IACjC;AAAA,IACA;AAAA,IACA,mBAAmB;AAAA,IACnB,wBAAwB;AAAA,IACxB,iBAAiB,OAAO,cAAc,KAAK,QAAQ,CAAC,KAAK,KAAK,IAAI;AAAA,IAClE,SAAS;AAAA,EACX;AAEA,SAAO,EAAE,IAAI;AACf;AAEA,eAAsB,KAAK,KAAc;AACvC,MAAI;AACF,UAAM,EAAE,IAAI,IAAI,MAAM,sBAAsB,GAAG;AAC/C,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,UAAM,UAAU,MAAM,IAAI,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AACjD,UAAM,QAAQ,wBAAwB,wCAAwC,SAAS,KAAK,SAAS;AACrG,UAAM,8BAA8B,KAAK,EAAE,aAAa,MAAM,aAAa,WAAW,MAAM,UAAU,GAAG,SAAS;AAClH,UAAM,aAAa,IAAI,UAAU,QAAQ,YAAY;AACrD,UAAM,EAAE,SAAS,IAAI,MAAM,WAAW,QAAQ,uCAAuC,EAAE,OAAO,IAAI,CAAC;AACnG,UAAM,WAAW,aAAa,KAAK,EAAE,IAAI,KAAK,CAAC;AAC/C,QAAI,UAAU,aAAa,UAAU,MAAM,UAAU,WAAW;AAC9D,eAAS,QAAQ;AAAA,QACf;AAAA,QACA,2BAA2B;AAAA,UACzB,IAAI,SAAS;AAAA,UACb,WAAW,SAAS;AAAA,UACpB,WAAW,SAAS;AAAA,UACpB,aAAa,SAAS,eAAe;AAAA,UACrC,cAAc,SAAS,gBAAgB;AAAA,UACvC,YAAY,SAAS,cAAc;AAAA,UACnC,YAAY,SAAS,qBAAqB,OAAO,SAAS,UAAU,YAAY,IAAI;AAAA,QACtF,CAAC;AAAA,MACH;AAAA,IACF;AACA,WAAO;AAAA,EACT,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,GAAG;AACxB,aAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,IAC3D;AACA,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,YAAQ,MAAM,8CAA8C,GAAG;AAC/D,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,UAAU,4CAA4C,qCAAqC,EAAE;AAAA,MACtG,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAEO,MAAM,UAAU;AAAA,EACrB,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa;AAAA,MACb,aAAa;AAAA,QACX,aAAa;AAAA,QACb,QAAQ;AAAA,MACV;AAAA,MACA,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,+BAA+B,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,IAAI,EAAE,CAAC,EAAE;AAAA,QACrG,EAAE,QAAQ,KAAK,aAAa,mBAAmB,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,QACvF,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,QACpF,EAAE,QAAQ,KAAK,aAAa,aAAa,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,MACnF;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport type { CommandBus, CommandRuntimeContext } from '@open-mercato/shared/lib/commands'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { CrudHttpError, isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { parseScopedCommandInput } from '@open-mercato/shared/lib/api/scoped'\nimport { plannerAvailabilityWeeklyReplaceSchema } from '../data/validators'\nimport { serializeOperationMetadata } from '@open-mercato/shared/lib/commands/operationMetadata'\nimport {\n  runCrudMutationGuardAfterSuccess,\n  validateCrudMutationGuard,\n} from '@open-mercato/shared/lib/crud/mutation-guard'\nimport { assertAvailabilityWriteAccess, resolveAvailabilityActorId } from './access'\n\nexport const metadata = {\n  POST: { requireAuth: true },\n}\n\ntype RequestContext = {\n  ctx: CommandRuntimeContext\n}\n\nasync function resolveRequestContext(req: Request): Promise<RequestContext> {\n  const container = await createRequestContainer()\n  const auth = await getAuthFromRequest(req)\n  const { translate } = await resolveTranslations()\n\n  if (!auth || !auth.tenantId) {\n    throw new CrudHttpError(401, { error: translate('planner.availability.errors.unauthorized', 'Unauthorized') })\n  }\n\n  const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n  const organizationId = scope?.selectedId ?? auth.orgId ?? null\n  if (!organizationId) {\n    throw new CrudHttpError(400, {\n      error: translate('planner.availability.errors.organizationRequired', 'Organization context is required'),\n    })\n  }\n\n  const ctx: CommandRuntimeContext = {\n    container,\n    auth,\n    organizationScope: scope,\n    selectedOrganizationId: organizationId,\n    organizationIds: scope?.filterIds ?? (auth.orgId ? [auth.orgId] : null),\n    request: req,\n  }\n\n  return { ctx }\n}\n\nexport async function POST(req: Request) {\n  try {\n    const { ctx } = await resolveRequestContext(req)\n    const { translate } = await resolveTranslations()\n    const payload = await req.json().catch(() => ({}))\n    const input = parseScopedCommandInput(plannerAvailabilityWeeklyReplaceSchema, payload, ctx, translate)\n    await assertAvailabilityWriteAccess(ctx, { subjectType: input.subjectType, subjectId: input.subjectId }, translate)\n    const guardInput = {\n      tenantId: input.tenantId,\n      organizationId: input.organizationId,\n      userId: resolveAvailabilityActorId(ctx.auth),\n      resourceKind: 'planner.availability',\n      resourceId: input.subjectId,\n      operation: 'custom' as const,\n      requestMethod: req.method,\n      requestHeaders: req.headers,\n    }\n    const guardResult = await validateCrudMutationGuard(ctx.container, { ...guardInput, mutationPayload: input })\n    if (guardResult && !guardResult.ok) {\n      return NextResponse.json(guardResult.body, { status: guardResult.status })\n    }\n    const commandBus = ctx.container.resolve('commandBus') as CommandBus\n    const { logEntry } = await commandBus.execute('planner.availability.weekly.replace', { input, ctx })\n    if (guardResult?.ok && guardResult.shouldRunAfterSuccess) {\n      await runCrudMutationGuardAfterSuccess(ctx.container, { ...guardInput, metadata: guardResult.metadata ?? null })\n    }\n    const response = NextResponse.json({ ok: true })\n    if (logEntry?.undoToken && logEntry?.id && logEntry?.commandId) {\n      response.headers.set(\n        'x-om-operation',\n        serializeOperationMetadata({\n          id: logEntry.id,\n          undoToken: logEntry.undoToken,\n          commandId: logEntry.commandId,\n          actionLabel: logEntry.actionLabel ?? null,\n          resourceKind: logEntry.resourceKind ?? 'planner.availability',\n          resourceId: logEntry.resourceId ?? null,\n          executedAt: logEntry.createdAt instanceof Date ? logEntry.createdAt.toISOString() : undefined,\n        })\n      )\n    }\n    return response\n  } catch (err) {\n    if (isCrudHttpError(err)) {\n      return NextResponse.json(err.body, { status: err.status })\n    }\n    const { translate } = await resolveTranslations()\n    console.error('planner.availability.weekly.replace failed', err)\n    return NextResponse.json(\n      { error: translate('planner.availability.errors.updateWeekly', 'Failed to save weekly availability.') },\n      { status: 400 },\n    )\n  }\n}\n\nexport const openApi = {\n  tag: 'Planner',\n  summary: 'Replace weekly availability',\n  methods: {\n    POST: {\n      summary: 'Replace weekly availability',\n      description: 'Replaces weekly availability rules for the subject in a single request.',\n      requestBody: {\n        contentType: 'application/json',\n        schema: plannerAvailabilityWeeklyReplaceSchema,\n      },\n      responses: [\n        { status: 200, description: 'Weekly availability updated', schema: z.object({ ok: z.literal(true) }) },\n        { status: 400, description: 'Invalid payload', schema: z.object({ error: z.string() }) },\n        { status: 401, description: 'Unauthorized', schema: z.object({ error: z.string() }) },\n        { status: 403, description: 'Forbidden', schema: z.object({ error: z.string() }) },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AAEnD,SAAS,2BAA2B;AACpC,SAAS,eAAe,uBAAuB;AAC/C,SAAS,+BAA+B;AACxC,SAAS,8CAA8C;AACvD,SAAS,kCAAkC;AAC3C;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,+BAA+B,kCAAkC;AAEnE,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,KAAK;AAC5B;AAMA,eAAe,sBAAsB,KAAuC;AAC1E,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAEhD,MAAI,CAAC,QAAQ,CAAC,KAAK,UAAU;AAC3B,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,4CAA4C,cAAc,EAAE,CAAC;AAAA,EAC/G;AAEA,QAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AACxF,QAAM,iBAAiB,OAAO,cAAc,KAAK,SAAS;AAC1D,MAAI,CAAC,gBAAgB;AACnB,UAAM,IAAI,cAAc,KAAK;AAAA,MAC3B,OAAO,UAAU,oDAAoD,kCAAkC;AAAA,IACzG,CAAC;AAAA,EACH;AAEA,QAAM,MAA6B;AAAA,IACjC;AAAA,IACA;AAAA,IACA,mBAAmB;AAAA,IACnB,wBAAwB;AAAA,IACxB,iBAAiB,OAAO,cAAc,KAAK,QAAQ,CAAC,KAAK,KAAK,IAAI;AAAA,IAClE,SAAS;AAAA,EACX;AAEA,SAAO,EAAE,IAAI;AACf;AAEA,eAAsB,KAAK,KAAc;AACvC,MAAI;AACF,UAAM,EAAE,IAAI,IAAI,MAAM,sBAAsB,GAAG;AAC/C,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,UAAM,UAAU,MAAM,IAAI,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AACjD,UAAM,QAAQ,wBAAwB,wCAAwC,SAAS,KAAK,SAAS;AACrG,UAAM,8BAA8B,KAAK,EAAE,aAAa,MAAM,aAAa,WAAW,MAAM,UAAU,GAAG,SAAS;AAClH,UAAM,aAAa;AAAA,MACjB,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM;AAAA,MACtB,QAAQ,2BAA2B,IAAI,IAAI;AAAA,MAC3C,cAAc;AAAA,MACd,YAAY,MAAM;AAAA,MAClB,WAAW;AAAA,MACX,eAAe,IAAI;AAAA,MACnB,gBAAgB,IAAI;AAAA,IACtB;AACA,UAAM,cAAc,MAAM,0BAA0B,IAAI,WAAW,EAAE,GAAG,YAAY,iBAAiB,MAAM,CAAC;AAC5G,QAAI,eAAe,CAAC,YAAY,IAAI;AAClC,aAAO,aAAa,KAAK,YAAY,MAAM,EAAE,QAAQ,YAAY,OAAO,CAAC;AAAA,IAC3E;AACA,UAAM,aAAa,IAAI,UAAU,QAAQ,YAAY;AACrD,UAAM,EAAE,SAAS,IAAI,MAAM,WAAW,QAAQ,uCAAuC,EAAE,OAAO,IAAI,CAAC;AACnG,QAAI,aAAa,MAAM,YAAY,uBAAuB;AACxD,YAAM,iCAAiC,IAAI,WAAW,EAAE,GAAG,YAAY,UAAU,YAAY,YAAY,KAAK,CAAC;AAAA,IACjH;AACA,UAAM,WAAW,aAAa,KAAK,EAAE,IAAI,KAAK,CAAC;AAC/C,QAAI,UAAU,aAAa,UAAU,MAAM,UAAU,WAAW;AAC9D,eAAS,QAAQ;AAAA,QACf;AAAA,QACA,2BAA2B;AAAA,UACzB,IAAI,SAAS;AAAA,UACb,WAAW,SAAS;AAAA,UACpB,WAAW,SAAS;AAAA,UACpB,aAAa,SAAS,eAAe;AAAA,UACrC,cAAc,SAAS,gBAAgB;AAAA,UACvC,YAAY,SAAS,cAAc;AAAA,UACnC,YAAY,SAAS,qBAAqB,OAAO,SAAS,UAAU,YAAY,IAAI;AAAA,QACtF,CAAC;AAAA,MACH;AAAA,IACF;AACA,WAAO;AAAA,EACT,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,GAAG;AACxB,aAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,IAC3D;AACA,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,YAAQ,MAAM,8CAA8C,GAAG;AAC/D,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,UAAU,4CAA4C,qCAAqC,EAAE;AAAA,MACtG,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAEO,MAAM,UAAU;AAAA,EACrB,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa;AAAA,MACb,aAAa;AAAA,QACX,aAAa;AAAA,QACb,QAAQ;AAAA,MACV;AAAA,MACA,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,+BAA+B,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,IAAI,EAAE,CAAC,EAAE;AAAA,QACrG,EAAE,QAAQ,KAAK,aAAa,mBAAmB,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,QACvF,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,QACpF,EAAE,QAAQ,KAAK,aAAa,aAAa,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,MACnF;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }