@open-mercato/core 0.6.6-develop.6171.1.17de2dc37a → 0.6.6-develop.6176.1.4507b99c2f

package/dist/modules/resources/components/detail/activitiesAdapter.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../src/modules/resources/components/detail/activitiesAdapter.ts"],
-  "sourcesContent": ["\"use client\"\n\nimport { readApiResultOrThrow } from '@open-mercato/ui/backend/utils/apiCall'\nimport { createCrud, updateCrud, deleteCrud } from '@open-mercato/ui/backend/utils/crud'\nimport type { ActivitiesDataAdapter, ActivitySummary } from '@open-mercato/ui/backend/detail'\n\ntype Translator = (key: string, fallback?: string, params?: Record<string, string | number>) => string\n\nexport function createResourceActivitiesAdapter(translator: Translator): ActivitiesDataAdapter {\n  return {\n    list: async ({ entityId }) => {\n      const params = new URLSearchParams({\n        pageSize: '50',\n        sortField: 'occurredAt',\n        sortDir: 'desc',\n      })\n      if (entityId) params.set('entityId', entityId)\n      const payload = await readApiResultOrThrow<Record<string, unknown>>(\n        `/api/resources/activities?${params.toString()}`,\n        undefined,\n        { errorMessage: translator('resources.resources.detail.activities.loadError', 'Failed to load activities.') },\n      )\n      return Array.isArray(payload?.items) ? (payload.items as ActivitySummary[]) : []\n    },\n    create: async ({ entityId, activityType, subject, body, occurredAt, customFields }) => {\n      await createCrud('resources/activities', {\n        entityId,\n        activityType,\n        subject: subject ?? undefined,\n        body: body ?? undefined,\n        occurredAt: occurredAt ?? undefined,\n        ...(customFields ? { customFields } : {}),\n      }, {\n        errorMessage: translator('resources.resources.detail.activities.error', 'Failed to save activity'),\n      })\n    },\n    update: async ({ id, patch }) => {\n      await updateCrud('resources/activities', {\n        id,\n        entityId: patch.entityId,\n        activityType: patch.activityType,\n        subject: patch.subject ?? undefined,\n        body: patch.body ?? undefined,\n        occurredAt: patch.occurredAt ?? undefined,\n        ...(patch.customFields ? { customFields: patch.customFields } : {}),\n      }, {\n        errorMessage: translator('resources.resources.detail.activities.error', 'Failed to save activity'),\n      })\n    },\n    delete: async ({ id }) => {\n      await deleteCrud('resources/activities', {\n        id,\n        errorMessage: translator('resources.resources.detail.activities.deleteError', 'Failed to delete activity.'),\n      })\n    },\n  }\n}\n"],
-  "mappings": ";AAEA,SAAS,4BAA4B;AACrC,SAAS,YAAY,YAAY,kBAAkB;AAK5C,SAAS,gCAAgC,YAA+C;AAC7F,SAAO;AAAA,IACL,MAAM,OAAO,EAAE,SAAS,MAAM;AAC5B,YAAM,SAAS,IAAI,gBAAgB;AAAA,QACjC,UAAU;AAAA,QACV,WAAW;AAAA,QACX,SAAS;AAAA,MACX,CAAC;AACD,UAAI,SAAU,QAAO,IAAI,YAAY,QAAQ;AAC7C,YAAM,UAAU,MAAM;AAAA,QACpB,6BAA6B,OAAO,SAAS,CAAC;AAAA,QAC9C;AAAA,QACA,EAAE,cAAc,WAAW,mDAAmD,4BAA4B,EAAE;AAAA,MAC9G;AACA,aAAO,MAAM,QAAQ,SAAS,KAAK,IAAK,QAAQ,QAA8B,CAAC;AAAA,IACjF;AAAA,IACA,QAAQ,OAAO,EAAE,UAAU,cAAc,SAAS,MAAM,YAAY,aAAa,MAAM;AACrF,YAAM,WAAW,wBAAwB;AAAA,QACvC;AAAA,QACA;AAAA,QACA,SAAS,WAAW;AAAA,QACpB,MAAM,QAAQ;AAAA,QACd,YAAY,cAAc;AAAA,QAC1B,GAAI,eAAe,EAAE,aAAa,IAAI,CAAC;AAAA,MACzC,GAAG;AAAA,QACD,cAAc,WAAW,+CAA+C,yBAAyB;AAAA,MACnG,CAAC;AAAA,IACH;AAAA,IACA,QAAQ,OAAO,EAAE,IAAI,MAAM,MAAM;AAC/B,YAAM,WAAW,wBAAwB;AAAA,QACvC;AAAA,QACA,UAAU,MAAM;AAAA,QAChB,cAAc,MAAM;AAAA,QACpB,SAAS,MAAM,WAAW;AAAA,QAC1B,MAAM,MAAM,QAAQ;AAAA,QACpB,YAAY,MAAM,cAAc;AAAA,QAChC,GAAI,MAAM,eAAe,EAAE,cAAc,MAAM,aAAa,IAAI,CAAC;AAAA,MACnE,GAAG;AAAA,QACD,cAAc,WAAW,+CAA+C,yBAAyB;AAAA,MACnG,CAAC;AAAA,IACH;AAAA,IACA,QAAQ,OAAO,EAAE,GAAG,MAAM;AACxB,YAAM,WAAW,wBAAwB;AAAA,QACvC;AAAA,QACA,cAAc,WAAW,qDAAqD,4BAA4B;AAAA,MAC5G,CAAC;AAAA,IACH;AAAA,EACF;AACF;",
+  "sourcesContent": ["\"use client\"\n\nimport { readApiResultOrThrow } from '@open-mercato/ui/backend/utils/apiCall'\nimport { createCrud, updateCrud, deleteCrud } from '@open-mercato/ui/backend/utils/crud'\nimport type { ActivitiesDataAdapter, ActivitySummary } from '@open-mercato/ui/backend/detail'\n\ntype Translator = (key: string, fallback?: string, params?: Record<string, string | number>) => string\n\nexport type ResourceActivitiesGuardedMutation = <T>(\n  runner: () => Promise<T>,\n  payload?: Record<string, unknown>,\n) => Promise<T>\n\nexport type CreateResourceActivitiesAdapterOptions = {\n  runMutation?: ResourceActivitiesGuardedMutation\n}\n\nexport function createResourceActivitiesAdapter(\n  translator: Translator,\n  options: CreateResourceActivitiesAdapterOptions = {},\n): ActivitiesDataAdapter {\n  const runWrite = async <T,>(\n    runner: () => Promise<T>,\n    payload: Record<string, unknown>,\n  ): Promise<T> => {\n    if (options.runMutation) {\n      return options.runMutation(runner, payload)\n    }\n    return runner()\n  }\n\n  return {\n    list: async ({ entityId }) => {\n      const params = new URLSearchParams({\n        pageSize: '50',\n        sortField: 'occurredAt',\n        sortDir: 'desc',\n      })\n      if (entityId) params.set('entityId', entityId)\n      const payload = await readApiResultOrThrow<Record<string, unknown>>(\n        `/api/resources/activities?${params.toString()}`,\n        undefined,\n        { errorMessage: translator('resources.resources.detail.activities.loadError', 'Failed to load activities.') },\n      )\n      return Array.isArray(payload?.items) ? (payload.items as ActivitySummary[]) : []\n    },\n    create: async ({ entityId, activityType, subject, body, occurredAt, customFields }) => {\n      const payload = {\n        entityId,\n        activityType,\n        subject: subject ?? undefined,\n        body: body ?? undefined,\n        occurredAt: occurredAt ?? undefined,\n        ...(customFields ? { customFields } : {}),\n      }\n      await runWrite(\n        () => createCrud('resources/activities', payload, {\n          errorMessage: translator('resources.resources.detail.activities.error', 'Failed to save activity'),\n        }),\n        { operation: 'createActivity', entityId, activityType },\n      )\n    },\n    update: async ({ id, patch }) => {\n      const payload = {\n        id,\n        entityId: patch.entityId,\n        activityType: patch.activityType,\n        subject: patch.subject ?? undefined,\n        body: patch.body ?? undefined,\n        occurredAt: patch.occurredAt ?? undefined,\n        ...(patch.customFields ? { customFields: patch.customFields } : {}),\n      }\n      await runWrite(\n        () => updateCrud('resources/activities', payload, {\n          errorMessage: translator('resources.resources.detail.activities.error', 'Failed to save activity'),\n        }),\n        { operation: 'updateActivity', id },\n      )\n    },\n    delete: async ({ id }) => {\n      await runWrite(\n        () => deleteCrud('resources/activities', {\n          id,\n          errorMessage: translator('resources.resources.detail.activities.deleteError', 'Failed to delete activity.'),\n        }),\n        { operation: 'deleteActivity', id },\n      )\n    },\n  }\n}\n"],
+  "mappings": ";AAEA,SAAS,4BAA4B;AACrC,SAAS,YAAY,YAAY,kBAAkB;AAc5C,SAAS,gCACd,YACA,UAAkD,CAAC,GAC5B;AACvB,QAAM,WAAW,OACf,QACA,YACe;AACf,QAAI,QAAQ,aAAa;AACvB,aAAO,QAAQ,YAAY,QAAQ,OAAO;AAAA,IAC5C;AACA,WAAO,OAAO;AAAA,EAChB;AAEA,SAAO;AAAA,IACL,MAAM,OAAO,EAAE,SAAS,MAAM;AAC5B,YAAM,SAAS,IAAI,gBAAgB;AAAA,QACjC,UAAU;AAAA,QACV,WAAW;AAAA,QACX,SAAS;AAAA,MACX,CAAC;AACD,UAAI,SAAU,QAAO,IAAI,YAAY,QAAQ;AAC7C,YAAM,UAAU,MAAM;AAAA,QACpB,6BAA6B,OAAO,SAAS,CAAC;AAAA,QAC9C;AAAA,QACA,EAAE,cAAc,WAAW,mDAAmD,4BAA4B,EAAE;AAAA,MAC9G;AACA,aAAO,MAAM,QAAQ,SAAS,KAAK,IAAK,QAAQ,QAA8B,CAAC;AAAA,IACjF;AAAA,IACA,QAAQ,OAAO,EAAE,UAAU,cAAc,SAAS,MAAM,YAAY,aAAa,MAAM;AACrF,YAAM,UAAU;AAAA,QACd;AAAA,QACA;AAAA,QACA,SAAS,WAAW;AAAA,QACpB,MAAM,QAAQ;AAAA,QACd,YAAY,cAAc;AAAA,QAC1B,GAAI,eAAe,EAAE,aAAa,IAAI,CAAC;AAAA,MACzC;AACA,YAAM;AAAA,QACJ,MAAM,WAAW,wBAAwB,SAAS;AAAA,UAChD,cAAc,WAAW,+CAA+C,yBAAyB;AAAA,QACnG,CAAC;AAAA,QACD,EAAE,WAAW,kBAAkB,UAAU,aAAa;AAAA,MACxD;AAAA,IACF;AAAA,IACA,QAAQ,OAAO,EAAE,IAAI,MAAM,MAAM;AAC/B,YAAM,UAAU;AAAA,QACd;AAAA,QACA,UAAU,MAAM;AAAA,QAChB,cAAc,MAAM;AAAA,QACpB,SAAS,MAAM,WAAW;AAAA,QAC1B,MAAM,MAAM,QAAQ;AAAA,QACpB,YAAY,MAAM,cAAc;AAAA,QAChC,GAAI,MAAM,eAAe,EAAE,cAAc,MAAM,aAAa,IAAI,CAAC;AAAA,MACnE;AACA,YAAM;AAAA,QACJ,MAAM,WAAW,wBAAwB,SAAS;AAAA,UAChD,cAAc,WAAW,+CAA+C,yBAAyB;AAAA,QACnG,CAAC;AAAA,QACD,EAAE,WAAW,kBAAkB,GAAG;AAAA,MACpC;AAAA,IACF;AAAA,IACA,QAAQ,OAAO,EAAE,GAAG,MAAM;AACxB,YAAM;AAAA,QACJ,MAAM,WAAW,wBAAwB;AAAA,UACvC;AAAA,UACA,cAAc,WAAW,qDAAqD,4BAA4B;AAAA,QAC5G,CAAC;AAAA,QACD,EAAE,WAAW,kBAAkB,GAAG;AAAA,MACpC;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/resources/components/detail/notesAdapter.js

@@ -1,7 +1,13 @@
 "use client";
 import { apiCallOrThrow, readApiResultOrThrow } from "@open-mercato/ui/backend/utils/apiCall";
 import { mapCommentSummary } from "@open-mercato/ui/backend/detail/NotesSection";
-function createResourceNotesAdapter(translator) {
+function createResourceNotesAdapter(translator, options = {}) {
+  const runWrite = async (runner, payload) => {
+    if (options.runMutation) {
+      return options.runMutation(runner, payload);
+    }
+    return runner();
+  };
   return {
     list: async ({ entityId }) => {
       const params = new URLSearchParams();
@@ -15,19 +21,23 @@ function createResourceNotesAdapter(translator) {
       return items.map(mapCommentSummary);
     },
     create: async ({ entityId, body, appearanceIcon, appearanceColor }) => {
-      const response = await apiCallOrThrow(
-        "/api/resources/comments",
-        {
-          method: "POST",
-          headers: { "content-type": "application/json" },
-          body: JSON.stringify({
-            entityId,
-            body,
-            appearanceIcon: appearanceIcon ?? void 0,
-            appearanceColor: appearanceColor ?? void 0
-          })
-        },
-        { errorMessage: translator("resources.resources.detail.notes.error", "Failed to save note.") }
+      const requestBody = {
+        entityId,
+        body,
+        appearanceIcon: appearanceIcon ?? void 0,
+        appearanceColor: appearanceColor ?? void 0
+      };
+      const response = await runWrite(
+        () => apiCallOrThrow(
+          "/api/resources/comments",
+          {
+            method: "POST",
+            headers: { "content-type": "application/json" },
+            body: JSON.stringify(requestBody)
+          },
+          { errorMessage: translator("resources.resources.detail.notes.error", "Failed to save note.") }
+        ),
+        { operation: "createNote", entityId }
       );
       return response.result ?? {};
     },
@@ -36,24 +46,30 @@ function createResourceNotesAdapter(translator) {
       if (patch.body !== void 0) payload.body = patch.body;
       if (patch.appearanceIcon !== void 0) payload.appearanceIcon = patch.appearanceIcon;
       if (patch.appearanceColor !== void 0) payload.appearanceColor = patch.appearanceColor;
-      await apiCallOrThrow(
-        "/api/resources/comments",
-        {
-          method: "PUT",
-          headers: { "content-type": "application/json" },
-          body: JSON.stringify(payload)
-        },
-        { errorMessage: translator("resources.resources.detail.notes.updateError", "Failed to update note.") }
+      await runWrite(
+        () => apiCallOrThrow(
+          "/api/resources/comments",
+          {
+            method: "PUT",
+            headers: { "content-type": "application/json" },
+            body: JSON.stringify(payload)
+          },
+          { errorMessage: translator("resources.resources.detail.notes.updateError", "Failed to update note.") }
+        ),
+        { operation: "updateNote", id }
       );
     },
     delete: async ({ id }) => {
-      await apiCallOrThrow(
-        `/api/resources/comments?id=${encodeURIComponent(id)}`,
-        {
-          method: "DELETE",
-          headers: { "content-type": "application/json" }
-        },
-        { errorMessage: translator("resources.resources.detail.notes.deleteError", "Failed to delete note") }
+      await runWrite(
+        () => apiCallOrThrow(
+          `/api/resources/comments?id=${encodeURIComponent(id)}`,
+          {
+            method: "DELETE",
+            headers: { "content-type": "application/json" }
+          },
+          { errorMessage: translator("resources.resources.detail.notes.deleteError", "Failed to delete note") }
+        ),
+        { operation: "deleteNote", id }
       );
     }
   };

package/dist/modules/resources/components/detail/notesAdapter.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../src/modules/resources/components/detail/notesAdapter.ts"],
-  "sourcesContent": ["\"use client\"\n\nimport { apiCallOrThrow, readApiResultOrThrow } from '@open-mercato/ui/backend/utils/apiCall'\nimport { mapCommentSummary, type NotesDataAdapter } from '@open-mercato/ui/backend/detail/NotesSection'\n\ntype Translator = (key: string, fallback?: string, params?: Record<string, string | number>) => string\n\nexport function createResourceNotesAdapter(translator: Translator): NotesDataAdapter {\n  return {\n    list: async ({ entityId }) => {\n      const params = new URLSearchParams()\n      if (entityId) params.set('entityId', entityId)\n      const payload = await readApiResultOrThrow<Record<string, unknown>>(\n        `/api/resources/comments?${params.toString()}`,\n        undefined,\n        { errorMessage: translator('resources.resources.detail.notes.loadError', 'Failed to load notes.') },\n      )\n      const items = Array.isArray(payload?.items) ? payload.items : []\n      return items.map(mapCommentSummary)\n    },\n    create: async ({ entityId, body, appearanceIcon, appearanceColor }) => {\n      const response = await apiCallOrThrow<Record<string, unknown>>(\n        '/api/resources/comments',\n        {\n          method: 'POST',\n          headers: { 'content-type': 'application/json' },\n          body: JSON.stringify({\n            entityId,\n            body,\n            appearanceIcon: appearanceIcon ?? undefined,\n            appearanceColor: appearanceColor ?? undefined,\n          }),\n        },\n        { errorMessage: translator('resources.resources.detail.notes.error', 'Failed to save note.') },\n      )\n      return response.result ?? {}\n    },\n    update: async ({ id, patch }) => {\n      const payload: Record<string, unknown> = { id }\n      if (patch.body !== undefined) payload.body = patch.body\n      if (patch.appearanceIcon !== undefined) payload.appearanceIcon = patch.appearanceIcon\n      if (patch.appearanceColor !== undefined) payload.appearanceColor = patch.appearanceColor\n      await apiCallOrThrow(\n        '/api/resources/comments',\n        {\n          method: 'PUT',\n          headers: { 'content-type': 'application/json' },\n          body: JSON.stringify(payload),\n        },\n        { errorMessage: translator('resources.resources.detail.notes.updateError', 'Failed to update note.') },\n      )\n    },\n    delete: async ({ id }) => {\n      await apiCallOrThrow(\n        `/api/resources/comments?id=${encodeURIComponent(id)}`,\n        {\n          method: 'DELETE',\n          headers: { 'content-type': 'application/json' },\n        },\n        { errorMessage: translator('resources.resources.detail.notes.deleteError', 'Failed to delete note') },\n      )\n    },\n  }\n}\n"],
-  "mappings": ";AAEA,SAAS,gBAAgB,4BAA4B;AACrD,SAAS,yBAAgD;AAIlD,SAAS,2BAA2B,YAA0C;AACnF,SAAO;AAAA,IACL,MAAM,OAAO,EAAE,SAAS,MAAM;AAC5B,YAAM,SAAS,IAAI,gBAAgB;AACnC,UAAI,SAAU,QAAO,IAAI,YAAY,QAAQ;AAC7C,YAAM,UAAU,MAAM;AAAA,QACpB,2BAA2B,OAAO,SAAS,CAAC;AAAA,QAC5C;AAAA,QACA,EAAE,cAAc,WAAW,8CAA8C,uBAAuB,EAAE;AAAA,MACpG;AACA,YAAM,QAAQ,MAAM,QAAQ,SAAS,KAAK,IAAI,QAAQ,QAAQ,CAAC;AAC/D,aAAO,MAAM,IAAI,iBAAiB;AAAA,IACpC;AAAA,IACA,QAAQ,OAAO,EAAE,UAAU,MAAM,gBAAgB,gBAAgB,MAAM;AACrE,YAAM,WAAW,MAAM;AAAA,QACrB;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,UAC9C,MAAM,KAAK,UAAU;AAAA,YACnB;AAAA,YACA;AAAA,YACA,gBAAgB,kBAAkB;AAAA,YAClC,iBAAiB,mBAAmB;AAAA,UACtC,CAAC;AAAA,QACH;AAAA,QACA,EAAE,cAAc,WAAW,0CAA0C,sBAAsB,EAAE;AAAA,MAC/F;AACA,aAAO,SAAS,UAAU,CAAC;AAAA,IAC7B;AAAA,IACA,QAAQ,OAAO,EAAE,IAAI,MAAM,MAAM;AAC/B,YAAM,UAAmC,EAAE,GAAG;AAC9C,UAAI,MAAM,SAAS,OAAW,SAAQ,OAAO,MAAM;AACnD,UAAI,MAAM,mBAAmB,OAAW,SAAQ,iBAAiB,MAAM;AACvE,UAAI,MAAM,oBAAoB,OAAW,SAAQ,kBAAkB,MAAM;AACzE,YAAM;AAAA,QACJ;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,UAC9C,MAAM,KAAK,UAAU,OAAO;AAAA,QAC9B;AAAA,QACA,EAAE,cAAc,WAAW,gDAAgD,wBAAwB,EAAE;AAAA,MACvG;AAAA,IACF;AAAA,IACA,QAAQ,OAAO,EAAE,GAAG,MAAM;AACxB,YAAM;AAAA,QACJ,8BAA8B,mBAAmB,EAAE,CAAC;AAAA,QACpD;AAAA,UACE,QAAQ;AAAA,UACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,QAChD;AAAA,QACA,EAAE,cAAc,WAAW,gDAAgD,uBAAuB,EAAE;AAAA,MACtG;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["\"use client\"\n\nimport { apiCallOrThrow, readApiResultOrThrow } from '@open-mercato/ui/backend/utils/apiCall'\nimport { mapCommentSummary, type NotesDataAdapter } from '@open-mercato/ui/backend/detail/NotesSection'\n\ntype Translator = (key: string, fallback?: string, params?: Record<string, string | number>) => string\n\nexport type ResourceNotesGuardedMutation = <T>(\n  runner: () => Promise<T>,\n  payload?: Record<string, unknown>,\n) => Promise<T>\n\nexport type CreateResourceNotesAdapterOptions = {\n  runMutation?: ResourceNotesGuardedMutation\n}\n\nexport function createResourceNotesAdapter(\n  translator: Translator,\n  options: CreateResourceNotesAdapterOptions = {},\n): NotesDataAdapter {\n  const runWrite = async <T,>(\n    runner: () => Promise<T>,\n    payload: Record<string, unknown>,\n  ): Promise<T> => {\n    if (options.runMutation) {\n      return options.runMutation(runner, payload)\n    }\n    return runner()\n  }\n\n  return {\n    list: async ({ entityId }) => {\n      const params = new URLSearchParams()\n      if (entityId) params.set('entityId', entityId)\n      const payload = await readApiResultOrThrow<Record<string, unknown>>(\n        `/api/resources/comments?${params.toString()}`,\n        undefined,\n        { errorMessage: translator('resources.resources.detail.notes.loadError', 'Failed to load notes.') },\n      )\n      const items = Array.isArray(payload?.items) ? payload.items : []\n      return items.map(mapCommentSummary)\n    },\n    create: async ({ entityId, body, appearanceIcon, appearanceColor }) => {\n      const requestBody = {\n        entityId,\n        body,\n        appearanceIcon: appearanceIcon ?? undefined,\n        appearanceColor: appearanceColor ?? undefined,\n      }\n      const response = await runWrite(\n        () => apiCallOrThrow<Record<string, unknown>>(\n          '/api/resources/comments',\n          {\n            method: 'POST',\n            headers: { 'content-type': 'application/json' },\n            body: JSON.stringify(requestBody),\n          },\n          { errorMessage: translator('resources.resources.detail.notes.error', 'Failed to save note.') },\n        ),\n        { operation: 'createNote', entityId },\n      )\n      return response.result ?? {}\n    },\n    update: async ({ id, patch }) => {\n      const payload: Record<string, unknown> = { id }\n      if (patch.body !== undefined) payload.body = patch.body\n      if (patch.appearanceIcon !== undefined) payload.appearanceIcon = patch.appearanceIcon\n      if (patch.appearanceColor !== undefined) payload.appearanceColor = patch.appearanceColor\n      await runWrite(\n        () => apiCallOrThrow(\n          '/api/resources/comments',\n          {\n            method: 'PUT',\n            headers: { 'content-type': 'application/json' },\n            body: JSON.stringify(payload),\n          },\n          { errorMessage: translator('resources.resources.detail.notes.updateError', 'Failed to update note.') },\n        ),\n        { operation: 'updateNote', id },\n      )\n    },\n    delete: async ({ id }) => {\n      await runWrite(\n        () => apiCallOrThrow(\n          `/api/resources/comments?id=${encodeURIComponent(id)}`,\n          {\n            method: 'DELETE',\n            headers: { 'content-type': 'application/json' },\n          },\n          { errorMessage: translator('resources.resources.detail.notes.deleteError', 'Failed to delete note') },\n        ),\n        { operation: 'deleteNote', id },\n      )\n    },\n  }\n}\n"],
+  "mappings": ";AAEA,SAAS,gBAAgB,4BAA4B;AACrD,SAAS,yBAAgD;AAalD,SAAS,2BACd,YACA,UAA6C,CAAC,GAC5B;AAClB,QAAM,WAAW,OACf,QACA,YACe;AACf,QAAI,QAAQ,aAAa;AACvB,aAAO,QAAQ,YAAY,QAAQ,OAAO;AAAA,IAC5C;AACA,WAAO,OAAO;AAAA,EAChB;AAEA,SAAO;AAAA,IACL,MAAM,OAAO,EAAE,SAAS,MAAM;AAC5B,YAAM,SAAS,IAAI,gBAAgB;AACnC,UAAI,SAAU,QAAO,IAAI,YAAY,QAAQ;AAC7C,YAAM,UAAU,MAAM;AAAA,QACpB,2BAA2B,OAAO,SAAS,CAAC;AAAA,QAC5C;AAAA,QACA,EAAE,cAAc,WAAW,8CAA8C,uBAAuB,EAAE;AAAA,MACpG;AACA,YAAM,QAAQ,MAAM,QAAQ,SAAS,KAAK,IAAI,QAAQ,QAAQ,CAAC;AAC/D,aAAO,MAAM,IAAI,iBAAiB;AAAA,IACpC;AAAA,IACA,QAAQ,OAAO,EAAE,UAAU,MAAM,gBAAgB,gBAAgB,MAAM;AACrE,YAAM,cAAc;AAAA,QAClB;AAAA,QACA;AAAA,QACA,gBAAgB,kBAAkB;AAAA,QAClC,iBAAiB,mBAAmB;AAAA,MACtC;AACA,YAAM,WAAW,MAAM;AAAA,QACrB,MAAM;AAAA,UACJ;AAAA,UACA;AAAA,YACE,QAAQ;AAAA,YACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,YAC9C,MAAM,KAAK,UAAU,WAAW;AAAA,UAClC;AAAA,UACA,EAAE,cAAc,WAAW,0CAA0C,sBAAsB,EAAE;AAAA,QAC/F;AAAA,QACA,EAAE,WAAW,cAAc,SAAS;AAAA,MACtC;AACA,aAAO,SAAS,UAAU,CAAC;AAAA,IAC7B;AAAA,IACA,QAAQ,OAAO,EAAE,IAAI,MAAM,MAAM;AAC/B,YAAM,UAAmC,EAAE,GAAG;AAC9C,UAAI,MAAM,SAAS,OAAW,SAAQ,OAAO,MAAM;AACnD,UAAI,MAAM,mBAAmB,OAAW,SAAQ,iBAAiB,MAAM;AACvE,UAAI,MAAM,oBAAoB,OAAW,SAAQ,kBAAkB,MAAM;AACzE,YAAM;AAAA,QACJ,MAAM;AAAA,UACJ;AAAA,UACA;AAAA,YACE,QAAQ;AAAA,YACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,YAC9C,MAAM,KAAK,UAAU,OAAO;AAAA,UAC9B;AAAA,UACA,EAAE,cAAc,WAAW,gDAAgD,wBAAwB,EAAE;AAAA,QACvG;AAAA,QACA,EAAE,WAAW,cAAc,GAAG;AAAA,MAChC;AAAA,IACF;AAAA,IACA,QAAQ,OAAO,EAAE,GAAG,MAAM;AACxB,YAAM;AAAA,QACJ,MAAM;AAAA,UACJ,8BAA8B,mBAAmB,EAAE,CAAC;AAAA,UACpD;AAAA,YACE,QAAQ;AAAA,YACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,UAChD;AAAA,UACA,EAAE,cAAc,WAAW,gDAAgD,uBAAuB,EAAE;AAAA,QACtG;AAAA,QACA,EAAE,WAAW,cAAc,GAAG;AAAA,MAChC;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@open-mercato/core",
-  "version": "0.6.6-develop.6171.1.17de2dc37a",
+  "version": "0.6.6-develop.6176.1.4507b99c2f",
   "license": "MIT",
   "type": "module",
   "main": "./dist/index.js",
@@ -246,16 +246,16 @@
     "zod": "^4.4.3"
   },
   "peerDependencies": {
-    "@open-mercato/ai-assistant": "0.6.6-develop.6171.1.17de2dc37a",
-    "@open-mercato/shared": "0.6.6-develop.6171.1.17de2dc37a",
-    "@open-mercato/ui": "0.6.6-develop.6171.1.17de2dc37a",
+    "@open-mercato/ai-assistant": "0.6.6-develop.6176.1.4507b99c2f",
+    "@open-mercato/shared": "0.6.6-develop.6176.1.4507b99c2f",
+    "@open-mercato/ui": "0.6.6-develop.6176.1.4507b99c2f",
     "react": "^19.0.0",
     "react-dom": "^19.0.0"
   },
   "devDependencies": {
-    "@open-mercato/ai-assistant": "0.6.6-develop.6171.1.17de2dc37a",
-    "@open-mercato/shared": "0.6.6-develop.6171.1.17de2dc37a",
-    "@open-mercato/ui": "0.6.6-develop.6171.1.17de2dc37a",
+    "@open-mercato/ai-assistant": "0.6.6-develop.6176.1.4507b99c2f",
+    "@open-mercato/shared": "0.6.6-develop.6176.1.4507b99c2f",
+    "@open-mercato/ui": "0.6.6-develop.6176.1.4507b99c2f",
     "@testing-library/dom": "^10.4.1",
     "@testing-library/jest-dom": "^6.9.1",
     "@testing-library/react": "^16.3.1",

package/src/modules/customers/api/interactions/encryptedSortPage.ts

@@ -0,0 +1,34 @@
+import { mapWithConcurrency } from '@open-mercato/shared/lib/query/bounded-decrypt'
+import { sortRowsInMemory } from '@open-mercato/shared/lib/query/encrypted-sort'
+import { SortDir } from '@open-mercato/shared/lib/query/types'
+
+const DECRYPT_CONCURRENCY = 8
+
+export type EncryptedSortCandidate = { id: string } & Record<string, unknown>
+
+// Re-sorts the bounded candidate set by plaintext on every call and resumes
+// from the cursor's id position — SQL keyset comparison against ciphertext
+// is meaningless for ordering.
+export async function resolveEncryptedSortPage<T extends EncryptedSortCandidate>(params: {
+  candidates: readonly T[]
+  decryptRow: (row: T) => Promise<T>
+  sortField: string
+  sortDir: 'asc' | 'desc'
+  cursorId: string | null
+  limit: number
+}): Promise<{ pageIds: string[]; hasMore: boolean }> {
+  const decrypted = await mapWithConcurrency(params.candidates, DECRYPT_CONCURRENCY, params.decryptRow)
+  const ordered = sortRowsInMemory(decrypted, [
+    { field: params.sortField, dir: params.sortDir === 'desc' ? SortDir.Desc : SortDir.Asc },
+  ])
+  let start = 0
+  if (params.cursorId) {
+    const idx = ordered.findIndex((row) => row.id === params.cursorId)
+    start = idx >= 0 ? idx + 1 : 0
+  }
+  const page = ordered.slice(start, start + params.limit)
+  return {
+    pageIds: page.map((row) => row.id),
+    hasMore: start + params.limit < ordered.length,
+  }
+}

package/src/modules/customers/api/interactions/route.ts

@@ -9,6 +9,8 @@ import { normalizeCustomFieldResponse } from '@open-mercato/shared/lib/custom-fi
 import { applyResponseEnrichers } from '@open-mercato/shared/lib/crud/enricher-runner'
 import type { EnricherContext } from '@open-mercato/shared/lib/crud/response-enricher'
 import { findWithDecryption } from '@open-mercato/shared/lib/encryption/find'
+import { resolveTenantEncryptionService } from '@open-mercato/shared/lib/encryption/customFieldValues'
+import { resolveEncryptedSortFields, resolveEncryptedSortMaxRows } from '@open-mercato/shared/lib/query/encrypted-sort'
 import { escapeLikePattern } from '@open-mercato/shared/lib/db/escapeLikePattern'
 import { createRequestContainer } from '@open-mercato/shared/lib/di/container'
 import { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'
@@ -24,6 +26,7 @@ import {
 } from '../openapi'
 import { CUSTOMER_INTERACTION_ENTITY_ID } from '../../lib/interactionCompatibility'
 import { applyEmailVisibilityFilter } from '../../lib/visibilityFilter'
+import { resolveEncryptedSortPage } from './encryptedSortPage'
 import { resolveCanonicalActivityTargetId } from '../../lib/legacyActivityBridge'
 import type { CommandBus, CommandRuntimeContext } from '@open-mercato/shared/lib/commands'
 
@@ -284,6 +287,85 @@ function buildSortSql(
   return `coalesce(${config.column}, ${sentinel})`
 }
 
+const INTERACTION_LIST_COLUMNS = [
+  'id',
+  'entity_id',
+  'deal_id',
+  'interaction_type',
+  'title',
+  'body',
+  'status',
+  'scheduled_at',
+  'occurred_at',
+  'priority',
+  'author_user_id',
+  'owner_user_id',
+  'appearance_icon',
+  'appearance_color',
+  'source',
+  'duration_minutes',
+  'location',
+  'all_day',
+  'recurrence_rule',
+  'recurrence_end',
+  'participants',
+  'reminder_minutes',
+  'visibility',
+  'linked_entities',
+  'guest_permissions',
+  'pinned',
+  'organization_id',
+  'tenant_id',
+  'created_at',
+  'updated_at',
+] as const
+
+// Shared by both the SQL keyset path and the encrypted-sort candidate scan
+// so the two paths never drift on which rows are in scope.
+function applyInteractionListFilters(
+  baseQuery: any,
+  params: {
+    tenantId: string
+    organizationIds: string[]
+    query: z.infer<typeof listSchema>
+  },
+): any {
+  let q = baseQuery.where('deleted_at', 'is', null).where('tenant_id', '=', params.tenantId)
+  if (params.organizationIds.length > 0) q = q.where('organization_id', 'in', params.organizationIds)
+  const { query } = params
+  if (query.entityId) q = q.where('entity_id', '=', query.entityId)
+  if (query.dealId) q = q.where('deal_id', '=', query.dealId)
+  if (query.status) q = q.where('status', '=', query.status)
+  if (query.interactionType) q = q.where('interaction_type', '=', query.interactionType)
+  if (query.type) {
+    const types = query.type.split(',').map((t) => t.trim()).filter(Boolean)
+    if (types.length > 0) q = q.where('interaction_type', 'in', types)
+  }
+  if (query.pinned === 'true') {
+    q = q.where('pinned', '=', true)
+  } else if (query.pinned === 'false') {
+    q = q.where('pinned', '=', false)
+  }
+  if (query.excludeInteractionType) q = q.where('interaction_type', '!=', query.excludeInteractionType)
+  if (query.search) {
+    // NOTE: for tenants with data encryption enabled, `title`/`body` are
+    // ciphertext at rest (see encryption.ts), so this ILIKE matches encrypted
+    // bytes and returns no rows — substring search over encrypted free-text
+    // columns is unsupported, the same documented limitation as
+    // customer_activity / customer_comment. The returned page's title/body are
+    // still decrypted for display further below.
+    const searchTerm = `%${escapeLikePattern(query.search)}%`
+    q = q.where(sql<boolean>`coalesce(title, '') ilike ${searchTerm} or coalesce(body, '') ilike ${searchTerm}`)
+  }
+  if (query.from) {
+    q = q.where(sql<boolean>`coalesce(occurred_at, scheduled_at, created_at) >= ${query.from}`)
+  }
+  if (query.to) {
+    q = q.where(sql<boolean>`coalesce(occurred_at, scheduled_at, created_at) <= ${query.to}`)
+  }
+  return q
+}
+
 async function resolveUserFeatures(
   container: { resolve: (name: string) => unknown },
   userId: string,
@@ -366,94 +448,6 @@ export async function GET(req: Request) {
       })
     }
 
-    let rowsQuery = db
-      .selectFrom('customer_interactions')
-      .select([
-        'id',
-        'entity_id',
-        'deal_id',
-        'interaction_type',
-        'title',
-        'body',
-        'status',
-        'scheduled_at',
-        'occurred_at',
-        'priority',
-        'author_user_id',
-        'owner_user_id',
-        'appearance_icon',
-        'appearance_color',
-        'source',
-        'duration_minutes',
-        'location',
-        'all_day',
-        'recurrence_rule',
-        'recurrence_end',
-        'participants',
-        'reminder_minutes',
-        'visibility',
-        'linked_entities',
-        'guest_permissions',
-        'pinned',
-        'organization_id',
-        'tenant_id',
-        'created_at',
-        'updated_at',
-        sql`${sql.raw(sortSql)}`.as('__sort_value'),
-      ])
-      .where('deleted_at', 'is', null)
-      .where('tenant_id', '=', auth.tenantId)
-      .limit(query.limit + 1)
-
-    if (organizationIds.length > 0) {
-      rowsQuery = rowsQuery.where('organization_id', 'in', organizationIds)
-    }
-    if (query.entityId) rowsQuery = rowsQuery.where('entity_id', '=', query.entityId)
-    if (query.dealId) rowsQuery = rowsQuery.where('deal_id', '=', query.dealId)
-    if (query.status) rowsQuery = rowsQuery.where('status', '=', query.status)
-    if (query.interactionType) rowsQuery = rowsQuery.where('interaction_type', '=', query.interactionType)
-    if (query.type) {
-      const types = query.type.split(',').map((t) => t.trim()).filter(Boolean)
-      if (types.length > 0) {
-        rowsQuery = rowsQuery.where('interaction_type', 'in', types)
-      }
-    }
-    if (query.pinned === 'true') {
-      rowsQuery = rowsQuery.where('pinned', '=', true)
-    } else if (query.pinned === 'false') {
-      rowsQuery = rowsQuery.where('pinned', '=', false)
-    }
-    if (query.excludeInteractionType) rowsQuery = rowsQuery.where('interaction_type', '!=', query.excludeInteractionType)
-    if (query.search) {
-      // NOTE: for tenants with data encryption enabled, `title`/`body` are
-      // ciphertext at rest (see encryption.ts), so this ILIKE matches encrypted
-      // bytes and returns no rows — substring search over encrypted free-text
-      // columns is unsupported, the same documented limitation as
-      // customer_activity / customer_comment. The returned page's title/body are
-      // still decrypted for display further below.
-      const searchTerm = `%${escapeLikePattern(query.search)}%`
-      rowsQuery = rowsQuery.where(sql<boolean>`coalesce(title, '') ilike ${searchTerm} or coalesce(body, '') ilike ${searchTerm}`)
-    }
-    if (query.from) {
-      rowsQuery = rowsQuery.where(sql<boolean>`coalesce(occurred_at, scheduled_at, created_at) >= ${query.from}`)
-    }
-    if (query.to) {
-      rowsQuery = rowsQuery.where(sql<boolean>`coalesce(occurred_at, scheduled_at, created_at) <= ${query.to}`)
-    }
-
-    if (cursor) {
-      const op = sortDir === 'asc' ? '>' : '<'
-      const opRaw = sql.raw(op)
-      const sortRaw = sql.raw(sortSql)
-      rowsQuery = rowsQuery.where((eb: any) => eb.or([
-        sql<boolean>`${sortRaw} ${opRaw} ${cursor.sortValue}`,
-        eb.and([
-          sql<boolean>`${sortRaw} = ${cursor.sortValue}`,
-          eb('id', op, cursor.id),
-        ]),
-      ]))
-    }
-
     // ── Email visibility filter (2026-05-27) ──────────────────────────────
     // Non-email interactions pass through; email rows with visibility='private'
     // are filtered out unless the caller is the author or has admin bypass.
@@ -461,19 +455,121 @@ export async function GET(req: Request) {
     // viewer to null so they never gain the author bypass and only see shared
     // emails (fail-closed). Mirrors counts/people/activities routes.
     const viewerUserId = auth.isApiKey ? null : (auth.sub ?? null)
-    const callerUserFeatures = viewerUserId
-      ? await resolveUserFeatures(container, viewerUserId, auth.tenantId ?? null, selectedOrganizationId)
-      : undefined
-    rowsQuery = applyEmailVisibilityFilter(rowsQuery as any, {
-      currentUserId: viewerUserId,
-      userFeatures: callerUserFeatures,
-    })
+    const encryptionService = resolveTenantEncryptionService(em)
+    // Encrypted sort columns can't use SQL keyset ordering on ciphertext, so an
+    // encrypted sort field takes a bounded candidate-scan + in-memory-sort path
+    // instead of the SQL path below. Resolved alongside the independent
+    // visibility-feature lookup rather than after it.
+    const [callerUserFeatures, encryptedSortFields] = await Promise.all([
+      viewerUserId
+        ? resolveUserFeatures(container, viewerUserId, auth.tenantId ?? null, selectedOrganizationId)
+        : Promise.resolve(undefined),
+      resolveEncryptedSortFields(
+        encryptionService,
+        CUSTOMER_INTERACTION_ENTITY_ID,
+        [sortConfig.column],
+        auth.tenantId,
+        selectedOrganizationId,
+      ),
+    ])
+    const sortFieldIsEncrypted = encryptedSortFields.has(sortConfig.column)
 
-    rowsQuery = rowsQuery.orderBy(sql`${sql.raw(sortSql)} ${sql.raw(sortDir)}`).orderBy('id', sortDir)
+    let pageRows: InteractionListRow[]
+    let hasMore: boolean
 
-    const rows = await rowsQuery.execute() as InteractionListRow[]
-    const pageRows = rows.slice(0, query.limit)
-    const hasMore = rows.length > query.limit
+    if (sortFieldIsEncrypted) {
+      let candidateQuery = applyInteractionListFilters(
+        db.selectFrom('customer_interactions').select(['id', sortConfig.column]),
+        { tenantId: auth.tenantId, organizationIds, query },
+      )
+      candidateQuery = applyEmailVisibilityFilter(candidateQuery as any, {
+        currentUserId: viewerUserId,
+        userFeatures: callerUserFeatures,
+      })
+      const cap = resolveEncryptedSortMaxRows()
+      if (cap !== null) {
+        candidateQuery = candidateQuery.limit(cap).orderBy('id', 'asc')
+      }
+      const candidateRows = await candidateQuery.execute() as Array<{ id: string } & Record<string, unknown>>
+      if (cap !== null && candidateRows.length >= cap) {
+        console.warn('[customers/interactions.GET] encrypted sort candidate scan hit OM_ENCRYPTED_SORT_MAX_ROWS cap; results may be incomplete', {
+          cap,
+          sortField: sortConfig.column,
+          tenantId: auth.tenantId,
+        })
+      }
+
+      const decryptPayload = encryptionService?.decryptEntityPayload?.bind(encryptionService)
+      const { pageIds, hasMore: encryptedHasMore } = await resolveEncryptedSortPage({
+        candidates: candidateRows,
+        decryptRow: async (row) => {
+          if (!decryptPayload) return row
+          try {
+            const decrypted = await decryptPayload(CUSTOMER_INTERACTION_ENTITY_ID, row, auth.tenantId, selectedOrganizationId)
+            return { ...row, ...decrypted }
+          } catch (err) {
+            console.error('[customers/interactions.GET] error decrypting sort candidate', err)
+            return row
+          }
+        },
+        sortField: sortConfig.column,
+        sortDir,
+        cursorId: cursor?.id ?? null,
+        limit: query.limit,
+      })
+      hasMore = encryptedHasMore
+
+      if (pageIds.length === 0) {
+        pageRows = []
+      } else {
+        let pageQuery = applyInteractionListFilters(
+          db.selectFrom('customer_interactions').select([...INTERACTION_LIST_COLUMNS, sql`${sql.raw(sortSql)}`.as('__sort_value')]),
+          { tenantId: auth.tenantId, organizationIds, query },
+        )
+        pageQuery = applyEmailVisibilityFilter(pageQuery as any, {
+          currentUserId: viewerUserId,
+          userFeatures: callerUserFeatures,
+        })
+        pageQuery = pageQuery.where('id', 'in', pageIds)
+        const rawPageRows = await pageQuery.execute() as InteractionListRow[]
+        const byId = new Map(rawPageRows.map((row) => [row.id, row]))
+        pageRows = pageIds
+          .map((id) => byId.get(id))
+          .filter((row): row is InteractionListRow => row != null)
+      }
+    } else {
+      let rowsQuery = applyInteractionListFilters(
+        db
+          .selectFrom('customer_interactions')
+          .select([...INTERACTION_LIST_COLUMNS, sql`${sql.raw(sortSql)}`.as('__sort_value')])
+          .limit(query.limit + 1),
+        { tenantId: auth.tenantId, organizationIds, query },
+      )
+
+      if (cursor) {
+        const op = sortDir === 'asc' ? '>' : '<'
+        const opRaw = sql.raw(op)
+        const sortRaw = sql.raw(sortSql)
+        rowsQuery = rowsQuery.where((eb: any) => eb.or([
+          sql<boolean>`${sortRaw} ${opRaw} ${cursor.sortValue}`,
+          eb.and([
+            sql<boolean>`${sortRaw} = ${cursor.sortValue}`,
+            eb('id', op, cursor.id),
+          ]),
+        ]))
+      }
+
+      rowsQuery = applyEmailVisibilityFilter(rowsQuery as any, {
+        currentUserId: viewerUserId,
+        userFeatures: callerUserFeatures,
+      })
+
+      rowsQuery = rowsQuery.orderBy(sql`${sql.raw(sortSql)} ${sql.raw(sortDir)}`).orderBy('id', sortDir)
+
+      const rows = await rowsQuery.execute() as InteractionListRow[]
+      pageRows = rows.slice(0, query.limit)
+      hasMore = rows.length > query.limit
+    }
 
     const authorIds = Array.from(
       new Set(

package/src/modules/customers/api/labels/route.ts

@@ -11,6 +11,10 @@ import type { CommandBus } from '@open-mercato/shared/lib/commands'
 import type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'
 import { serializeOperationMetadata } from '@open-mercato/shared/lib/commands/operationMetadata'
 import { findWithDecryption, findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'
+import { decryptEntitiesWithFallbackScope } from '@open-mercato/shared/lib/encryption/subscriber'
+import { mapWithConcurrency } from '@open-mercato/shared/lib/query/bounded-decrypt'
+import { resolveEncryptedSortMaxRows, sortRowsInMemory } from '@open-mercato/shared/lib/query/encrypted-sort'
+import { SortDir } from '@open-mercato/shared/lib/query/types'
 import { resolveLabelActorUserId } from './auth'
 import {
   runCrudMutationGuardAfterSuccess,
@@ -28,6 +32,8 @@ export const metadata = {
   POST: { requireAuth: true, requireFeatures: ['customers.people.manage'] },
 }
 
+const DECRYPT_CONCURRENCY = 8
+
 const querySchema = z.object({
   entityId: z.string().uuid().optional(),
   organizationId: z.string().uuid().optional(),
@@ -72,12 +78,30 @@ export async function GET(req: Request) {
       throw new CrudHttpError(400, { error: translate('customers.errors.organization_required', 'Organization context is required') })
     }
 
-    // Load all labels for this user
-    const labels = await findWithDecryption(em, CustomerLabel, {
+    // `label` is encrypted at rest; SQL can't sort it meaningfully, so the
+    // candidate set is decrypted and sorted in memory below.
+    const cap = resolveEncryptedSortMaxRows()
+    const candidateLabels = await em.find(CustomerLabel, {
       tenantId: auth.tenantId,
       organizationId,
       userId: actorUserId,
-    }, { orderBy: { label: 'asc' } }, { tenantId: auth.tenantId, organizationId })
+    } as FilterQuery<CustomerLabel>, cap !== null ? { limit: cap, orderBy: { id: 'asc' } } : {})
+    if (cap !== null && candidateLabels.length >= cap) {
+      console.warn('[customers/labels.GET] encrypted sort candidate scan hit OM_ENCRYPTED_SORT_MAX_ROWS cap; results may be incomplete', {
+        cap,
+        tenantId: auth.tenantId,
+        organizationId,
+      })
+    }
+
+    await mapWithConcurrency(candidateLabels, DECRYPT_CONCURRENCY, (label) =>
+      decryptEntitiesWithFallbackScope(label, { em, tenantId: auth.tenantId, organizationId }),
+    )
+
+    const labels = sortRowsInMemory(
+      candidateLabels as unknown as Record<string, unknown>[],
+      [{ field: 'label', dir: SortDir.Asc }],
+    ) as unknown as CustomerLabel[]
 
     // If entityId provided, also load assignments for that entity
     let assignedLabelIds: string[] = []