@open-mercato/core 0.6.6-develop.6205.1.109e4b6a84 → 0.6.6-develop.6227.1.2695efff30

package/dist/modules/entities/api/records.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/entities/api/records.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport type { QueryEngine, QueryOptions, Where, Sort } from '@open-mercato/shared/lib/query/types'\nimport { normalizeExportFormat, serializeExport, defaultExportFilename, ensureColumns } from '@open-mercato/shared/lib/crud/exporters'\nimport type { RbacService } from '@open-mercato/core/modules/auth/services/rbacService'\nimport { resolveOrganizationScope, getSelectedOrganizationFromRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { SYSTEM_ENTITY_RECORDS_BLOCKED_CODE, isOrmBackedSystemEntityId } from '@open-mercato/shared/lib/data/engine'\nimport { parseBooleanToken, parseBooleanWithDefault } from '@open-mercato/shared/lib/boolean'\nimport { setRecordCustomFields } from '../lib/helpers'\nimport { CustomFieldValue } from '../data/entities'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { enforceCommandOptimisticLock } from '@open-mercato/shared/lib/crud/optimistic-lock-command'\nimport { isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { getModules } from '@open-mercato/shared/lib/i18n/server'\nimport { assertEntityAclForRequest } from '../lib/entityAcl'\n\nlet declaredCustomEntityIds: Set<string> | null = null\nfunction isDeclaredCustomEntity(entityId: string): boolean {\n  if (declaredCustomEntityIds === null) {\n    try {\n      const mods = getModules() as Array<{ customEntities?: Array<{ id?: string }> }>\n      if (Array.isArray(mods) && mods.length) {\n        const ids = new Set<string>()\n        for (const mod of mods) {\n          for (const spec of mod?.customEntities ?? []) {\n            if (spec?.id) ids.add(spec.id)\n          }\n        }\n        declaredCustomEntityIds = ids\n      }\n    } catch {}\n  }\n  return declaredCustomEntityIds?.has(entityId) ?? false\n}\n\nconst CUSTOM_ENTITY_RECORD_RESOURCE_KIND = 'entities.record'\n\ntype RecordsEntityKind = 'system' | 'custom' | 'unknown'\n\n// This surface manages doc-storage records, which exist for CUSTOM entities only.\n// Module-declared ids backed by a registered ORM table are system entities \u2014 their\n// records live in their own module tables/APIs, and stray doc rows for them poisoned\n// read-path classification platform-wide (#2939) \u2014 so they are rejected outright. The\n// previous fallback that classified an entity by the mere presence of\n// `custom_entities_storage` rows is gone: within the allowed set, declaration (ce.ts)\n// or an active `custom_entities` registration is authoritative.\nasync function classifyRecordsEntity(em: any, entityId: string): Promise<RecordsEntityKind> {\n  if (isOrmBackedSystemEntityId(em, entityId)) return 'system'\n  if (isDeclaredCustomEntity(entityId)) return 'custom'\n  try {\n    const { CustomEntity } = await import('../data/entities')\n    // Any registration row \u2014 active or soft-deleted \u2014 proves the id is a custom\n    // entity. Records persist beyond the definition's soft delete (TC-ENTITIES-006)\n    // and must stay readable/deletable, e.g. for the restore flow and cleanup.\n    const found = await em.findOne(CustomEntity as any, { entityId })\n    if (found) return 'custom'\n  } catch {}\n  return 'unknown'\n}\n\nfunction systemEntityRecordsRejection(entityId: string) {\n  return NextResponse.json(\n    { error: 'Records are available for custom entities only', code: SYSTEM_ENTITY_RECORDS_BLOCKED_CODE, entityId },\n    { status: 400 },\n  )\n}\n\nasync function readCustomEntityRecordUpdatedAt(\n  em: any,\n  input: { entityType: string; entityId: string; organizationId: string | null },\n): Promise<string | null> {\n  try {\n    const db = em.getKysely()\n    let query = db\n      .selectFrom('custom_entities_storage' as any)\n      .select(['updated_at' as any])\n      .where('entity_type' as any, '=', input.entityType)\n      .where('entity_id' as any, '=', input.entityId)\n    query = input.organizationId === null\n      ? query.where('organization_id' as any, 'is', null as any)\n      : query.where('organization_id' as any, '=', input.organizationId)\n    const row = await query.executeTakeFirst()\n    const value = (row as any)?.updated_at\n    if (value instanceof Date) return value.toISOString()\n    if (typeof value === 'string' && value.length > 0) return value\n    return null\n  } catch {\n    return null\n  }\n}\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['entities.records.view'] },\n  POST: { requireAuth: true, requireFeatures: ['entities.records.manage'] },\n  PUT: { requireAuth: true, requireFeatures: ['entities.records.manage'] },\n  DELETE: { requireAuth: true, requireFeatures: ['entities.records.manage'] },\n}\n\nconst DEFAULT_EXPORT_PAGE_SIZE = 1000\n\nconst listRecordsQuerySchema = z\n  .object({\n    entityId: z.string().min(1),\n    page: z.coerce.number().int().min(1).optional(),\n    pageSize: z.coerce.number().int().min(1).max(100).optional(),\n    sortField: z.string().optional(),\n    sortDir: z.enum(['asc', 'desc']).optional(),\n    withDeleted: z.coerce.boolean().optional(),\n    format: z.enum(['csv', 'json', 'xml', 'markdown']).optional(),\n    exportScope: z.enum(['full']).optional(),\n    export_scope: z.enum(['full']).optional(),\n    all: z.coerce.boolean().optional(),\n    full: z.coerce.boolean().optional(),\n  })\n  .passthrough()\n\nconst recordItemSchema = z.record(z.string(), z.any())\n\nconst listRecordsResponseSchema = z.object({\n  items: z.array(recordItemSchema),\n  total: z.number(),\n  page: z.number(),\n  pageSize: z.number(),\n  totalPages: z.number(),\n})\n\nexport async function GET(req: Request) {\n  const url = new URL(req.url)\n  const entityId = url.searchParams.get('entityId') || ''\n  if (!entityId) return NextResponse.json({ error: 'entityId is required' }, { status: 400 })\n\n  const auth = await getAuthFromRequest(req)\n  if (!auth || !auth.tenantId) return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n\n  const requestedExport = normalizeExportFormat(url.searchParams.get('format'))\n  const exportScopeRaw = (url.searchParams.get('exportScope') || url.searchParams.get('export_scope') || '').toLowerCase()\n  const exportFullRequested = requestedExport != null && (exportScopeRaw === 'full' || parseBooleanWithDefault(url.searchParams.get('full'), false))\n  const exportAll = parseBooleanWithDefault(url.searchParams.get('all'), false)\n  const noPagination = exportAll || requestedExport != null\n  const page = noPagination ? 1 : Math.max(parseInt(url.searchParams.get('page') || '1', 10) || 1, 1)\n  const basePageSize = Math.min(Math.max(parseInt(url.searchParams.get('pageSize') || '50', 10) || 50, 1), 100)\n  const pageSize = noPagination ? Math.max(basePageSize, DEFAULT_EXPORT_PAGE_SIZE) : basePageSize\n  const sortField = url.searchParams.get('sortField') || 'id'\n  const sortDir = (url.searchParams.get('sortDir') || 'asc').toLowerCase() === 'desc' ? 'desc' : 'asc'\n  const withDeleted = parseBooleanWithDefault(url.searchParams.get('withDeleted'), false)\n\n  const qpEntries: Array<[string, string]> = []\n  for (const [key, val] of url.searchParams.entries()) {\n    if (['entityId','page','pageSize','sortField','sortDir','withDeleted','format','exportScope','export_scope','all','full'].includes(key)) continue\n    qpEntries.push([key, val])\n  }\n\n  try {\n    const { resolve } = await createRequestContainer()\n    const qe = resolve('queryEngine') as QueryEngine\n    const em = resolve('em') as any\n    const rbac = resolve('rbacService') as RbacService\n    const scope = await resolveOrganizationScope({ em, rbac, auth, selectedId: getSelectedOrganizationFromRequest(req) })\n    let organizationIds: string[] | null = scope.filterIds\n    // Module-declared custom entities (ce.ts) carry frozen system-style ids and are never\n    // registered in `custom_entities`, so classification checks the declared registry plus\n    // active registrations. System (table-backed) ids are rejected above; for the allowed\n    // set `isCustomEntity` drives mapRow's cf_ stripping so the edit form reads back values.\n    const entityKind = await classifyRecordsEntity(em, entityId)\n    if (entityKind === 'system') return systemEntityRecordsRejection(entityId)\n    const isCustomEntity = entityKind === 'custom'\n    await assertEntityAclForRequest({ auth, entityId, action: 'view', isCustomEntity, rbac })\n    if (organizationIds && organizationIds.length === 0) {\n      return NextResponse.json({ items: [], total: 0, page, pageSize, totalPages: 0 })\n    }\n    const normalizeCustomEntityValue = (value: unknown) => {\n      if (Array.isArray(value)) {\n        return value.map((entry) => {\n          if (typeof entry !== 'string') return entry\n          const parsed = parseBooleanToken(entry)\n          return parsed === null ? entry : parsed\n        })\n      }\n      if (typeof value !== 'string') return value\n      const parsed = parseBooleanToken(value)\n      return parsed === null ? value : parsed\n    }\n    const mapRow = (row: any) => {\n      if (!isCustomEntity || !row || typeof row !== 'object') return row\n      const out: Record<string, unknown> = {}\n      for (const [k, v] of Object.entries(row)) {\n        if (k.startsWith('cf_')) out[k.replace(/^cf_/, '')] = normalizeCustomEntityValue(v)\n        else out[k] = v\n      }\n      return out\n    }\n    const mapFullRow = (row: any) => {\n      if (!row || typeof row !== 'object') return row\n      return { ...(row as Record<string, unknown>) }\n    }\n    // Build filters with awareness of custom-entity mode\n    const filtersObj: Where<any> = {}\n    const buildFilter = (key: string, val: string, allowAnyKey: boolean) => {\n      if (key.startsWith('cf_')) {\n        if (key.endsWith('In')) {\n          const base = key.slice(0, -2)\n          const values = val.split(',').map((s) => s.trim()).filter(Boolean)\n          ;(filtersObj as any)[base] = { $in: values }\n        } else {\n          if (val.includes(',')) {\n            const values = val.split(',').map((s) => s.trim()).filter(Boolean)\n            ;(filtersObj as any)[key] = { $in: values }\n          } else {\n            const parsed = parseBooleanToken(val)\n            ;(filtersObj as any)[key] = parsed === null ? val : parsed\n          }\n        }\n      } else if (allowAnyKey) {\n        if (val.includes(',')) {\n          const values = val.split(',').map((s) => s.trim()).filter(Boolean)\n          ;(filtersObj as any)[key] = { $in: values }\n        } else {\n          const parsed = parseBooleanToken(val)\n          ;(filtersObj as any)[key] = parsed === null ? val : parsed\n        }\n      } else {\n        if (['id', 'created_at', 'updated_at', 'deleted_at', 'name', 'title', 'email'].includes(key)) {\n          ;(filtersObj as any)[key] = val\n        }\n      }\n    }\n\n    if (organizationIds && organizationIds.length) {\n      (filtersObj as any).organization_id = { $in: organizationIds }\n    }\n    const qopts: QueryOptions = {\n      tenantId: auth.tenantId!,\n      includeCustomFields: true,\n      page: { page, pageSize },\n      sort: [{ field: sortField as any, dir: sortDir as any }] as Sort[],\n      filters: filtersObj as any,\n      withDeleted,\n    }\n    if (organizationIds && organizationIds.length) {\n      qopts.organizationIds = organizationIds\n    }\n    // Allowed entities are doc-storage-backed by definition (system ids were rejected\n    // above) \u2014 direct the engine to doc storage explicitly so reads stay deterministic\n    // even before the first record exists.\n    if (isCustomEntity) qopts.forceCustomEntityStorage = true\n    for (const [k, v] of qpEntries) buildFilter(k, v, isCustomEntity)\n    const res = await qe.query(entityId as any, qopts)\n    const rawItems = res.items || []\n    const viewPageItems = rawItems.map(mapRow)\n    const fullPageItems = rawItems.map(mapFullRow)\n\n    // Expose `updated_at` on custom-entity records. The query engine returns only\n    // the `doc` fields + `id`, dropping the base `updated_at` column \u2014 which made\n    // optimistic locking impossible end-to-end (no version for the edit page to\n    // round-trip as the lock header). Batch-read it from storage and merge it in.\n    if (isCustomEntity && viewPageItems.length) {\n      try {\n        const recordIds = viewPageItems\n          .map((it: any) => it?.id)\n          .filter((v: any): v is string => typeof v === 'string' && v.length > 0)\n        if (recordIds.length) {\n          const db = em.getKysely()\n          const rows = await db\n            .selectFrom('custom_entities_storage' as any)\n            .select(['entity_id' as any, 'updated_at' as any])\n            .where('entity_type' as any, '=', entityId)\n            .where('entity_id' as any, 'in', recordIds as any)\n            .execute()\n          const updatedById = new Map<string, string>()\n          for (const row of rows as any[]) {\n            const value = row?.updated_at\n            const iso = value instanceof Date ? value.toISOString() : (typeof value === 'string' && value.length > 0 ? value : null)\n            if (iso && row?.entity_id) updatedById.set(String(row.entity_id), iso)\n          }\n          for (const item of viewPageItems as any[]) {\n            const iso = updatedById.get(String(item?.id))\n            if (iso) {\n              item.updated_at = iso\n              item.updatedAt = iso\n            }\n          }\n        }\n      } catch { /* best-effort: locking simply will not engage if storage is unavailable */ }\n    }\n\n    const total = typeof res.total === 'number' ? res.total : rawItems.length\n    const effectivePageSize = res.pageSize || pageSize\n    const payload = {\n      items: viewPageItems,\n      total,\n      page: res.page || page,\n      pageSize: effectivePageSize,\n      totalPages: Math.ceil(total / (effectivePageSize || 1)),\n    }\n\n    if (requestedExport) {\n      let exportItems: any[] = exportFullRequested ? [...fullPageItems] : [...viewPageItems]\n      if (total > exportItems.length) {\n        let nextPage = 2\n        while (exportItems.length < total) {\n          const nextRes = await qe.query(entityId as any, {\n            ...qopts,\n            page: { page: nextPage, pageSize },\n          })\n          const nextRawItems = nextRes.items || []\n          if (!nextRawItems.length) break\n          const nextViewItems = nextRawItems.map(mapRow)\n          const nextFullItems = nextRawItems.map(mapFullRow)\n          const nextBatch = exportFullRequested ? nextFullItems : nextViewItems\n          exportItems.push(...nextBatch)\n          if (nextBatch.length < pageSize) break\n          nextPage += 1\n        }\n      }\n      const prepared = {\n        columns: ensureColumns(exportItems),\n        rows: exportItems,\n      }\n      const filenameBase = exportFullRequested ? `${entityId || 'records'}_full` : entityId || 'records'\n      const serialized = serializeExport(prepared, requestedExport)\n      const filename = defaultExportFilename(filenameBase, requestedExport)\n      return new Response(serialized.body, {\n        headers: {\n          'content-type': serialized.contentType,\n          'content-disposition': `attachment; filename=\"${filename}\"`,\n        },\n      })\n    }\n\n    return NextResponse.json(payload)\n  } catch (e) {\n    if (isCrudHttpError(e)) return NextResponse.json(e.body, { status: e.status })\n    try { console.error('[entities.records.GET] Error', e) } catch {}\n    return NextResponse.json({ error: 'Internal server error' }, { status: 500 })\n  }\n}\n\nconst postBodySchema = z.object({\n  entityId: z.string().min(1),\n  recordId: z.string().min(1).optional(),\n  values: z.record(z.string(), z.any()).default({}),\n})\n\nconst putBodySchema = z.object({\n  entityId: z.string().min(1),\n  recordId: z.string().min(1),\n  values: z.record(z.string(), z.any()).default({}),\n})\n\nconst mutationResponseSchema = z.object({\n  ok: z.literal(true),\n  item: z\n    .object({\n      entityId: z.string(),\n      recordId: z.string(),\n    })\n    .optional(),\n})\n\nexport async function POST(req: Request) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth || !auth.tenantId) return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n\n  let json: unknown\n  try { json = await req.json() } catch { return NextResponse.json({ error: 'Invalid JSON' }, { status: 400 }) }\n  const parsed = postBodySchema.safeParse(json)\n  if (!parsed.success) return NextResponse.json({ error: 'Validation failed', details: parsed.error.flatten() }, { status: 400 })\n  const { entityId } = parsed.data\n  let { recordId, values } = parsed.data as { recordId?: string; values: Record<string, any> }\n\n  try {\n    const { resolve } = await createRequestContainer()\n    const de = resolve('dataEngine') as any\n    const em = resolve('em') as any\n    const rbac = resolve('rbacService') as RbacService\n    const scope = await resolveOrganizationScope({ em, rbac, auth, selectedId: getSelectedOrganizationFromRequest(req) })\n    const targetOrgId = scope.selectedId ?? auth.orgId\n    if (!targetOrgId) return NextResponse.json({ error: 'Organization context is required' }, { status: 400 })\n    const entityKind = await classifyRecordsEntity(em, entityId)\n    if (entityKind === 'system') return systemEntityRecordsRejection(entityId)\n    const isCustomEntity = entityKind === 'custom'\n    await assertEntityAclForRequest({ auth, entityId, action: 'manage', isCustomEntity, rbac })\n    const norm = normalizeValues(values)\n\n    // Validate against custom field definitions\n    try {\n      const { validateCustomFieldValuesServer } = await import('../lib/validation')\n      const check = await validateCustomFieldValuesServer(em, { entityId, organizationId: targetOrgId, tenantId: auth.tenantId!, values: norm, rejectUndeclaredKeys: true })\n      if (!check.ok) return NextResponse.json({ error: 'Validation failed', fields: check.fieldErrors }, { status: 400 })\n    } catch { /* ignore if helper missing */ }\n\n    const normalizedRecordId = (() => {\n      const raw = String(recordId || '').trim()\n      if (!raw) return undefined\n      const low = raw.toLowerCase()\n      if (low === 'create' || low === 'new' || low === 'null' || low === 'undefined') return undefined\n      // Enforce UUID only; any non-uuid is ignored so we generate one in the DE\n      const uuid = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i\n      return uuid.test(raw) ? raw : undefined\n    })()\n    const { id } = await de.createCustomEntityRecord({\n      entityId,\n      recordId: normalizedRecordId,\n      organizationId: targetOrgId,\n      tenantId: auth.tenantId!,\n      values: norm,\n    })\n\n    return NextResponse.json({ ok: true, item: { entityId, recordId: id } })\n  } catch (e) {\n    if (isCrudHttpError(e)) return NextResponse.json(e.body, { status: e.status })\n    try { console.error('[entities.records.POST] Error', e) } catch {}\n    return NextResponse.json({ error: 'Internal server error' }, { status: 500 })\n  }\n}\n\n// Avoid zod here to prevent runtime import issues in some environments\nfunction parsePutBody(json: any): { ok: true; data: { entityId: string; recordId: string; values: Record<string, any> } } | { ok: false; error: string } {\n  if (!json || typeof json !== 'object') return { ok: false, error: 'Invalid JSON' }\n  const entityId = typeof json.entityId === 'string' && json.entityId.length ? json.entityId : ''\n  const recordId = typeof json.recordId === 'string' && json.recordId.length ? json.recordId : ''\n  const values = (json.values && typeof json.values === 'object') ? json.values as Record<string, any> : {}\n  if (!entityId || !recordId) return { ok: false, error: 'entityId and recordId are required' }\n  return { ok: true, data: { entityId, recordId, values } }\n}\n\nexport async function PUT(req: Request) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth || !auth.tenantId) return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n\n  let json: any\n  try { json = await req.json() } catch { return NextResponse.json({ error: 'Invalid JSON' }, { status: 400 }) }\n  const parsed = parsePutBody(json)\n  if (!parsed.ok) return NextResponse.json({ error: parsed.error }, { status: 400 })\n  const { entityId, recordId, values } = parsed.data\n\n  try {\n    const { resolve } = await createRequestContainer()\n    const de = resolve('dataEngine') as any\n    const em = resolve('em') as any\n    const rbac = resolve('rbacService') as RbacService\n    const scope = await resolveOrganizationScope({ em, rbac, auth, selectedId: getSelectedOrganizationFromRequest(req) })\n    const targetOrgId = scope.selectedId ?? auth.orgId\n    if (!targetOrgId) return NextResponse.json({ error: 'Organization context is required' }, { status: 400 })\n    const entityKind = await classifyRecordsEntity(em, entityId)\n    if (entityKind === 'system') return systemEntityRecordsRejection(entityId)\n    const isCustomEntity = entityKind === 'custom'\n    await assertEntityAclForRequest({ auth, entityId, action: 'manage', isCustomEntity, rbac })\n    const norm = normalizeValues(values)\n\n    // Validate against custom field definitions\n    try {\n      const { validateCustomFieldValuesServer } = await import('../lib/validation')\n      const check = await validateCustomFieldValuesServer(em, { entityId, organizationId: targetOrgId, tenantId: auth.tenantId!, values: norm, rejectUndeclaredKeys: true })\n      if (!check.ok) return NextResponse.json({ error: 'Validation failed', fields: check.fieldErrors }, { status: 400 })\n    } catch { /* ignore if helper missing */ }\n\n    // Normalize recordId: if blank/sentinel/non-uuid => create instead of update\n    const uuidRe = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i\n    const rid = String(recordId || '').trim()\n    const low = rid.toLowerCase()\n    const isSentinel = !rid || low === 'create' || low === 'new' || low === 'null' || low === 'undefined'\n    const isUuid = uuidRe.test(rid)\n    if (isSentinel || !isUuid) {\n      const created = await de.createCustomEntityRecord({\n        entityId,\n        recordId: undefined,\n        organizationId: targetOrgId,\n        tenantId: auth.tenantId!,\n        values: norm,\n      })\n      return NextResponse.json({ ok: true, item: { entityId, recordId: created.id } })\n    }\n\n    try {\n      const currentUpdatedAt = await readCustomEntityRecordUpdatedAt(em, {\n        entityType: entityId,\n        entityId: rid,\n        organizationId: targetOrgId,\n      })\n      enforceCommandOptimisticLock({\n        resourceKind: CUSTOM_ENTITY_RECORD_RESOURCE_KIND,\n        resourceId: rid,\n        current: currentUpdatedAt,\n        request: req,\n      })\n    } catch (lockError) {\n      if (isCrudHttpError(lockError)) {\n        return NextResponse.json(lockError.body, { status: lockError.status })\n      }\n      throw lockError\n    }\n\n    await de.updateCustomEntityRecord({\n      entityId,\n      recordId: rid,\n      organizationId: targetOrgId,\n      tenantId: auth.tenantId!,\n      values: norm,\n    })\n    return NextResponse.json({ ok: true, item: { entityId, recordId: rid } })\n  } catch (e) {\n    if (isCrudHttpError(e)) return NextResponse.json(e.body, { status: e.status })\n    return NextResponse.json({ error: 'Internal server error' }, { status: 500 })\n  }\n}\n\nconst deleteBodySchema = z.object({\n  entityId: z.string().min(1),\n  recordId: z.string().min(1),\n})\n\nexport async function DELETE(req: Request) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth || !auth.tenantId) return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n\n  const url = new URL(req.url)\n  const qpEntityId = url.searchParams.get('entityId')\n  const qpRecordId = url.searchParams.get('recordId')\n  let payload: any = qpEntityId && qpRecordId ? { entityId: qpEntityId, recordId: qpRecordId } : null\n  if (!payload) {\n    try { payload = await req.json() } catch { payload = null }\n  }\n  const parsed = deleteBodySchema.safeParse(payload)\n  if (!parsed.success) return NextResponse.json({ error: 'Validation failed', details: parsed.error.flatten() }, { status: 400 })\n  const { entityId, recordId } = parsed.data\n\n  try {\n    const { resolve } = await createRequestContainer()\n    const de = resolve('dataEngine') as any\n    const em = resolve('em') as any\n    const rbac = resolve('rbacService') as RbacService\n    const scope = await resolveOrganizationScope({ em, rbac, auth, selectedId: getSelectedOrganizationFromRequest(req) })\n    const targetOrgId = scope.selectedId ?? auth.orgId\n    if (!targetOrgId) return NextResponse.json({ error: 'Organization context is required' }, { status: 400 })\n    const entityKind = await classifyRecordsEntity(em, entityId)\n    if (entityKind === 'system') return systemEntityRecordsRejection(entityId)\n    const isCustomEntity = entityKind === 'custom'\n    await assertEntityAclForRequest({ auth, entityId, action: 'manage', isCustomEntity, rbac })\n    await de.deleteCustomEntityRecord({ entityId, recordId, organizationId: targetOrgId, tenantId: auth.tenantId!, soft: true })\n    return NextResponse.json({ ok: true })\n  } catch (e) {\n    if (isCrudHttpError(e)) return NextResponse.json(e.body, { status: e.status })\n    return NextResponse.json({ error: 'Internal server error' }, { status: 500 })\n  }\n}\n\nfunction normalizeValues(input: Record<string, any>): Record<string, any> {\n  const out: Record<string, any> = {}\n  for (const [k, v] of Object.entries(input || {})) {\n    const key = k.startsWith('cf_') ? k.replace(/^cf_/, '') : k\n    out[key] = v\n  }\n  return out\n}\n\nconst deleteResponseSchema = z.object({\n  ok: z.literal(true),\n})\n\nconst errorSchema = z.object({\n  error: z.string(),\n}).passthrough()\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Entities',\n  summary: 'CRUD operations on entity records',\n  methods: {\n    GET: {\n      summary: 'List records',\n      description:\n        'Returns paginated records for the supplied entity. Supports custom field filters, exports, and soft-delete toggles.',\n      query: listRecordsQuerySchema,\n      responses: [\n        {\n          status: 200,\n          description: 'Paginated records',\n          schema: listRecordsResponseSchema,\n        },\n        {\n          status: 400,\n          description: 'Missing entity id',\n          schema: errorSchema,\n        },\n        {\n          status: 401,\n          description: 'Missing authentication',\n          schema: errorSchema,\n        },\n        {\n          status: 500,\n          description: 'Unexpected failure',\n          schema: errorSchema,\n        },\n      ],\n    },\n    POST: {\n      summary: 'Create record',\n      description:\n        'Creates a record for the given entity. When `recordId` is omitted or not a UUID the data engine will generate one automatically.',\n      requestBody: {\n        contentType: 'application/json',\n        schema: postBodySchema,\n      },\n      responses: [\n        {\n          status: 200,\n          description: 'Record created',\n          schema: mutationResponseSchema,\n        },\n        {\n          status: 400,\n          description: 'Validation failure',\n          schema: errorSchema,\n        },\n        {\n          status: 401,\n          description: 'Missing authentication',\n          schema: errorSchema,\n        },\n        {\n          status: 500,\n          description: 'Unexpected failure',\n          schema: errorSchema,\n        },\n      ],\n    },\n    PUT: {\n      summary: 'Update record',\n      description:\n        'Updates an existing record. If the provided recordId is not a UUID the record will be created instead to support optimistic flows.',\n      requestBody: {\n        contentType: 'application/json',\n        schema: putBodySchema,\n      },\n      responses: [\n        {\n          status: 200,\n          description: 'Record updated',\n          schema: mutationResponseSchema,\n        },\n        {\n          status: 400,\n          description: 'Validation failure',\n          schema: errorSchema,\n        },\n        {\n          status: 401,\n          description: 'Missing authentication',\n          schema: errorSchema,\n        },\n        {\n          status: 500,\n          description: 'Unexpected failure',\n          schema: errorSchema,\n        },\n      ],\n    },\n    DELETE: {\n      summary: 'Delete record',\n      description: 'Soft deletes the specified record within the current tenant/org scope.',\n      requestBody: {\n        contentType: 'application/json',\n        schema: deleteBodySchema,\n      },\n      responses: [\n        {\n          status: 200,\n          description: 'Record deleted',\n          schema: deleteResponseSchema,\n        },\n        {\n          status: 400,\n          description: 'Missing entity id or record id',\n          schema: errorSchema,\n        },\n        {\n          status: 401,\n          description: 'Missing authentication',\n          schema: errorSchema,\n        },\n        {\n          status: 404,\n          description: 'Record not found',\n          schema: errorSchema,\n        },\n        {\n          status: 500,\n          description: 'Unexpected failure',\n          schema: errorSchema,\n        },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AAEnC,SAAS,uBAAuB,iBAAiB,uBAAuB,qBAAqB;AAE7F,SAAS,0BAA0B,0CAA0C;AAC7E,SAAS,oCAAoC,iCAAiC;AAC9E,SAAS,mBAAmB,+BAA+B;AAI3D,SAAS,oCAAoC;AAC7C,SAAS,uBAAuB;AAChC,SAAS,kBAAkB;AAC3B,SAAS,iCAAiC;AAE1C,IAAI,0BAA8C;AAClD,SAAS,uBAAuB,UAA2B;AACzD,MAAI,4BAA4B,MAAM;AACpC,QAAI;AACF,YAAM,OAAO,WAAW;AACxB,UAAI,MAAM,QAAQ,IAAI,KAAK,KAAK,QAAQ;AACtC,cAAM,MAAM,oBAAI,IAAY;AAC5B,mBAAW,OAAO,MAAM;AACtB,qBAAW,QAAQ,KAAK,kBAAkB,CAAC,GAAG;AAC5C,gBAAI,MAAM,GAAI,KAAI,IAAI,KAAK,EAAE;AAAA,UAC/B;AAAA,QACF;AACA,kCAA0B;AAAA,MAC5B;AAAA,IACF,QAAQ;AAAA,IAAC;AAAA,EACX;AACA,SAAO,yBAAyB,IAAI,QAAQ,KAAK;AACnD;AAEA,MAAM,qCAAqC;AAW3C,eAAe,sBAAsB,IAAS,UAA8C;AAC1F,MAAI,0BAA0B,IAAI,QAAQ,EAAG,QAAO;AACpD,MAAI,uBAAuB,QAAQ,EAAG,QAAO;AAC7C,MAAI;AACF,UAAM,EAAE,aAAa,IAAI,MAAM,OAAO,kBAAkB;AAIxD,UAAM,QAAQ,MAAM,GAAG,QAAQ,cAAqB,EAAE,SAAS,CAAC;AAChE,QAAI,MAAO,QAAO;AAAA,EACpB,QAAQ;AAAA,EAAC;AACT,SAAO;AACT;AAEA,SAAS,6BAA6B,UAAkB;AACtD,SAAO,aAAa;AAAA,IAClB,EAAE,OAAO,kDAAkD,MAAM,oCAAoC,SAAS;AAAA,IAC9G,EAAE,QAAQ,IAAI;AAAA,EAChB;AACF;AAEA,eAAe,gCACb,IACA,OACwB;AACxB,MAAI;AACF,UAAM,KAAK,GAAG,UAAU;AACxB,QAAI,QAAQ,GACT,WAAW,yBAAgC,EAC3C,OAAO,CAAC,YAAmB,CAAC,EAC5B,MAAM,eAAsB,KAAK,MAAM,UAAU,EACjD,MAAM,aAAoB,KAAK,MAAM,QAAQ;AAChD,YAAQ,MAAM,mBAAmB,OAC7B,MAAM,MAAM,mBAA0B,MAAM,IAAW,IACvD,MAAM,MAAM,mBAA0B,KAAK,MAAM,cAAc;AACnE,UAAM,MAAM,MAAM,MAAM,iBAAiB;AACzC,UAAM,QAAS,KAAa;AAC5B,QAAI,iBAAiB,KAAM,QAAO,MAAM,YAAY;AACpD,QAAI,OAAO,UAAU,YAAY,MAAM,SAAS,EAAG,QAAO;AAC1D,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEO,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,uBAAuB,EAAE;AAAA,EACrE,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,yBAAyB,EAAE;AAAA,EACxE,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,yBAAyB,EAAE;AAAA,EACvE,QAAQ,EAAE,aAAa,MAAM,iBAAiB,CAAC,yBAAyB,EAAE;AAC5E;AAEA,MAAM,2BAA2B;AAEjC,MAAM,yBAAyB,EAC5B,OAAO;AAAA,EACN,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EAC1B,MAAM,EAAE,OAAO,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,EAC9C,UAAU,EAAE,OAAO,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EAC3D,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,SAAS,EAAE,KAAK,CAAC,OAAO,MAAM,CAAC,EAAE,SAAS;AAAA,EAC1C,aAAa,EAAE,OAAO,QAAQ,EAAE,SAAS;AAAA,EACzC,QAAQ,EAAE,KAAK,CAAC,OAAO,QAAQ,OAAO,UAAU,CAAC,EAAE,SAAS;AAAA,EAC5D,aAAa,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,SAAS;AAAA,EACvC,cAAc,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,SAAS;AAAA,EACxC,KAAK,EAAE,OAAO,QAAQ,EAAE,SAAS;AAAA,EACjC,MAAM,EAAE,OAAO,QAAQ,EAAE,SAAS;AACpC,CAAC,EACA,YAAY;AAEf,MAAM,mBAAmB,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,IAAI,CAAC;AAErD,MAAM,4BAA4B,EAAE,OAAO;AAAA,EACzC,OAAO,EAAE,MAAM,gBAAgB;AAAA,EAC/B,OAAO,EAAE,OAAO;AAAA,EAChB,MAAM,EAAE,OAAO;AAAA,EACf,UAAU,EAAE,OAAO;AAAA,EACnB,YAAY,EAAE,OAAO;AACvB,CAAC;AAED,eAAsB,IAAI,KAAc;AACtC,QAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,QAAM,WAAW,IAAI,aAAa,IAAI,UAAU,KAAK;AACrD,MAAI,CAAC,SAAU,QAAO,aAAa,KAAK,EAAE,OAAO,uBAAuB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAE1F,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,QAAQ,CAAC,KAAK,SAAU,QAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAEhG,QAAM,kBAAkB,sBAAsB,IAAI,aAAa,IAAI,QAAQ,CAAC;AAC5E,QAAM,kBAAkB,IAAI,aAAa,IAAI,aAAa,KAAK,IAAI,aAAa,IAAI,cAAc,KAAK,IAAI,YAAY;AACvH,QAAM,sBAAsB,mBAAmB,SAAS,mBAAmB,UAAU,wBAAwB,IAAI,aAAa,IAAI,MAAM,GAAG,KAAK;AAChJ,QAAM,YAAY,wBAAwB,IAAI,aAAa,IAAI,KAAK,GAAG,KAAK;AAC5E,QAAM,eAAe,aAAa,mBAAmB;AACrD,QAAM,OAAO,eAAe,IAAI,KAAK,IAAI,SAAS,IAAI,aAAa,IAAI,MAAM,KAAK,KAAK,EAAE,KAAK,GAAG,CAAC;AAClG,QAAM,eAAe,KAAK,IAAI,KAAK,IAAI,SAAS,IAAI,aAAa,IAAI,UAAU,KAAK,MAAM,EAAE,KAAK,IAAI,CAAC,GAAG,GAAG;AAC5G,QAAM,WAAW,eAAe,KAAK,IAAI,cAAc,wBAAwB,IAAI;AACnF,QAAM,YAAY,IAAI,aAAa,IAAI,WAAW,KAAK;AACvD,QAAM,WAAW,IAAI,aAAa,IAAI,SAAS,KAAK,OAAO,YAAY,MAAM,SAAS,SAAS;AAC/F,QAAM,cAAc,wBAAwB,IAAI,aAAa,IAAI,aAAa,GAAG,KAAK;AAEtF,QAAM,YAAqC,CAAC;AAC5C,aAAW,CAAC,KAAK,GAAG,KAAK,IAAI,aAAa,QAAQ,GAAG;AACnD,QAAI,CAAC,YAAW,QAAO,YAAW,aAAY,WAAU,eAAc,UAAS,eAAc,gBAAe,OAAM,MAAM,EAAE,SAAS,GAAG,EAAG;AACzI,cAAU,KAAK,CAAC,KAAK,GAAG,CAAC;AAAA,EAC3B;AAEA,MAAI;AACF,UAAM,EAAE,QAAQ,IAAI,MAAM,uBAAuB;AACjD,UAAM,KAAK,QAAQ,aAAa;AAChC,UAAM,KAAK,QAAQ,IAAI;AACvB,UAAM,OAAO,QAAQ,aAAa;AAClC,UAAM,QAAQ,MAAM,yBAAyB,EAAE,IAAI,MAAM,MAAM,YAAY,mCAAmC,GAAG,EAAE,CAAC;AACpH,QAAI,kBAAmC,MAAM;AAK7C,UAAM,aAAa,MAAM,sBAAsB,IAAI,QAAQ;AAC3D,QAAI,eAAe,SAAU,QAAO,6BAA6B,QAAQ;AACzE,UAAM,iBAAiB,eAAe;AACtC,UAAM,0BAA0B,EAAE,MAAM,UAAU,QAAQ,QAAQ,gBAAgB,KAAK,CAAC;AACxF,QAAI,mBAAmB,gBAAgB,WAAW,GAAG;AACnD,aAAO,aAAa,KAAK,EAAE,OAAO,CAAC,GAAG,OAAO,GAAG,MAAM,UAAU,YAAY,EAAE,CAAC;AAAA,IACjF;AACA,UAAM,6BAA6B,CAAC,UAAmB;AACrD,UAAI,MAAM,QAAQ,KAAK,GAAG;AACxB,eAAO,MAAM,IAAI,CAAC,UAAU;AAC1B,cAAI,OAAO,UAAU,SAAU,QAAO;AACtC,gBAAMA,UAAS,kBAAkB,KAAK;AACtC,iBAAOA,YAAW,OAAO,QAAQA;AAAA,QACnC,CAAC;AAAA,MACH;AACA,UAAI,OAAO,UAAU,SAAU,QAAO;AACtC,YAAM,SAAS,kBAAkB,KAAK;AACtC,aAAO,WAAW,OAAO,QAAQ;AAAA,IACnC;AACA,UAAM,SAAS,CAAC,QAAa;AAC3B,UAAI,CAAC,kBAAkB,CAAC,OAAO,OAAO,QAAQ,SAAU,QAAO;AAC/D,YAAM,MAA+B,CAAC;AACtC,iBAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,GAAG,GAAG;AACxC,YAAI,EAAE,WAAW,KAAK,EAAG,KAAI,EAAE,QAAQ,QAAQ,EAAE,CAAC,IAAI,2BAA2B,CAAC;AAAA,YAC7E,KAAI,CAAC,IAAI;AAAA,MAChB;AACA,aAAO;AAAA,IACT;AACA,UAAM,aAAa,CAAC,QAAa;AAC/B,UAAI,CAAC,OAAO,OAAO,QAAQ,SAAU,QAAO;AAC5C,aAAO,EAAE,GAAI,IAAgC;AAAA,IAC/C;AAEA,UAAM,aAAyB,CAAC;AAChC,UAAM,cAAc,CAAC,KAAa,KAAa,gBAAyB;AACtE,UAAI,IAAI,WAAW,KAAK,GAAG;AACzB,YAAI,IAAI,SAAS,IAAI,GAAG;AACtB,gBAAM,OAAO,IAAI,MAAM,GAAG,EAAE;AAC5B,gBAAM,SAAS,IAAI,MAAM,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,OAAO;AAChE,UAAC,WAAmB,IAAI,IAAI,EAAE,KAAK,OAAO;AAAA,QAC7C,OAAO;AACL,cAAI,IAAI,SAAS,GAAG,GAAG;AACrB,kBAAM,SAAS,IAAI,MAAM,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,OAAO;AAChE,YAAC,WAAmB,GAAG,IAAI,EAAE,KAAK,OAAO;AAAA,UAC5C,OAAO;AACL,kBAAM,SAAS,kBAAkB,GAAG;AACnC,YAAC,WAAmB,GAAG,IAAI,WAAW,OAAO,MAAM;AAAA,UACtD;AAAA,QACF;AAAA,MACF,WAAW,aAAa;AACtB,YAAI,IAAI,SAAS,GAAG,GAAG;AACrB,gBAAM,SAAS,IAAI,MAAM,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,OAAO;AAChE,UAAC,WAAmB,GAAG,IAAI,EAAE,KAAK,OAAO;AAAA,QAC5C,OAAO;AACL,gBAAM,SAAS,kBAAkB,GAAG;AACnC,UAAC,WAAmB,GAAG,IAAI,WAAW,OAAO,MAAM;AAAA,QACtD;AAAA,MACF,OAAO;AACL,YAAI,CAAC,MAAM,cAAc,cAAc,cAAc,QAAQ,SAAS,OAAO,EAAE,SAAS,GAAG,GAAG;AAC5F;AAAC,UAAC,WAAmB,GAAG,IAAI;AAAA,QAC9B;AAAA,MACF;AAAA,IACF;AAEA,QAAI,mBAAmB,gBAAgB,QAAQ;AAC7C,MAAC,WAAmB,kBAAkB,EAAE,KAAK,gBAAgB;AAAA,IAC/D;AACA,UAAM,QAAsB;AAAA,MAC1B,UAAU,KAAK;AAAA,MACf,qBAAqB;AAAA,MACrB,MAAM,EAAE,MAAM,SAAS;AAAA,MACvB,MAAM,CAAC,EAAE,OAAO,WAAkB,KAAK,QAAe,CAAC;AAAA,MACvD,SAAS;AAAA,MACT;AAAA,IACF;AACA,QAAI,mBAAmB,gBAAgB,QAAQ;AAC7C,YAAM,kBAAkB;AAAA,IAC1B;AAIA,QAAI,eAAgB,OAAM,2BAA2B;AACrD,eAAW,CAAC,GAAG,CAAC,KAAK,UAAW,aAAY,GAAG,GAAG,cAAc;AAChE,UAAM,MAAM,MAAM,GAAG,MAAM,UAAiB,KAAK;AACjD,UAAM,WAAW,IAAI,SAAS,CAAC;AAC/B,UAAM,gBAAgB,SAAS,IAAI,MAAM;AACzC,UAAM,gBAAgB,SAAS,IAAI,UAAU;AAM7C,QAAI,kBAAkB,cAAc,QAAQ;AAC1C,UAAI;AACF,cAAM,YAAY,cACf,IAAI,CAAC,OAAY,IAAI,EAAE,EACvB,OAAO,CAAC,MAAwB,OAAO,MAAM,YAAY,EAAE,SAAS,CAAC;AACxE,YAAI,UAAU,QAAQ;AACpB,gBAAM,KAAK,GAAG,UAAU;AACxB,gBAAM,OAAO,MAAM,GAChB,WAAW,yBAAgC,EAC3C,OAAO,CAAC,aAAoB,YAAmB,CAAC,EAChD,MAAM,eAAsB,KAAK,QAAQ,EACzC,MAAM,aAAoB,MAAM,SAAgB,EAChD,QAAQ;AACX,gBAAM,cAAc,oBAAI,IAAoB;AAC5C,qBAAW,OAAO,MAAe;AAC/B,kBAAM,QAAQ,KAAK;AACnB,kBAAM,MAAM,iBAAiB,OAAO,MAAM,YAAY,IAAK,OAAO,UAAU,YAAY,MAAM,SAAS,IAAI,QAAQ;AACnH,gBAAI,OAAO,KAAK,UAAW,aAAY,IAAI,OAAO,IAAI,SAAS,GAAG,GAAG;AAAA,UACvE;AACA,qBAAW,QAAQ,eAAwB;AACzC,kBAAM,MAAM,YAAY,IAAI,OAAO,MAAM,EAAE,CAAC;AAC5C,gBAAI,KAAK;AACP,mBAAK,aAAa;AAClB,mBAAK,YAAY;AAAA,YACnB;AAAA,UACF;AAAA,QACF;AAAA,MACF,QAAQ;AAAA,MAA8E;AAAA,IACxF;AAEA,UAAM,QAAQ,OAAO,IAAI,UAAU,WAAW,IAAI,QAAQ,SAAS;AACnE,UAAM,oBAAoB,IAAI,YAAY;AAC1C,UAAM,UAAU;AAAA,MACd,OAAO;AAAA,MACP;AAAA,MACA,MAAM,IAAI,QAAQ;AAAA,MAClB,UAAU;AAAA,MACV,YAAY,KAAK,KAAK,SAAS,qBAAqB,EAAE;AAAA,IACxD;AAEA,QAAI,iBAAiB;AACnB,UAAI,cAAqB,sBAAsB,CAAC,GAAG,aAAa,IAAI,CAAC,GAAG,aAAa;AACrF,UAAI,QAAQ,YAAY,QAAQ;AAC9B,YAAI,WAAW;AACf,eAAO,YAAY,SAAS,OAAO;AACjC,gBAAM,UAAU,MAAM,GAAG,MAAM,UAAiB;AAAA,YAC9C,GAAG;AAAA,YACH,MAAM,EAAE,MAAM,UAAU,SAAS;AAAA,UACnC,CAAC;AACD,gBAAM,eAAe,QAAQ,SAAS,CAAC;AACvC,cAAI,CAAC,aAAa,OAAQ;AAC1B,gBAAM,gBAAgB,aAAa,IAAI,MAAM;AAC7C,gBAAM,gBAAgB,aAAa,IAAI,UAAU;AACjD,gBAAM,YAAY,sBAAsB,gBAAgB;AACxD,sBAAY,KAAK,GAAG,SAAS;AAC7B,cAAI,UAAU,SAAS,SAAU;AACjC,sBAAY;AAAA,QACd;AAAA,MACF;AACA,YAAM,WAAW;AAAA,QACf,SAAS,cAAc,WAAW;AAAA,QAClC,MAAM;AAAA,MACR;AACA,YAAM,eAAe,sBAAsB,GAAG,YAAY,SAAS,UAAU,YAAY;AACzF,YAAM,aAAa,gBAAgB,UAAU,eAAe;AAC5D,YAAM,WAAW,sBAAsB,cAAc,eAAe;AACpE,aAAO,IAAI,SAAS,WAAW,MAAM;AAAA,QACnC,SAAS;AAAA,UACP,gBAAgB,WAAW;AAAA,UAC3B,uBAAuB,yBAAyB,QAAQ;AAAA,QAC1D;AAAA,MACF,CAAC;AAAA,IACH;AAEA,WAAO,aAAa,KAAK,OAAO;AAAA,EAClC,SAAS,GAAG;AACV,QAAI,gBAAgB,CAAC,EAAG,QAAO,aAAa,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC;AAC7E,QAAI;AAAE,cAAQ,MAAM,gCAAgC,CAAC;AAAA,IAAE,QAAQ;AAAA,IAAC;AAChE,WAAO,aAAa,KAAK,EAAE,OAAO,wBAAwB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC9E;AACF;AAEA,MAAM,iBAAiB,EAAE,OAAO;AAAA,EAC9B,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EAC1B,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,EACrC,QAAQ,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,IAAI,CAAC,EAAE,QAAQ,CAAC,CAAC;AAClD,CAAC;AAED,MAAM,gBAAgB,EAAE,OAAO;AAAA,EAC7B,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EAC1B,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EAC1B,QAAQ,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,IAAI,CAAC,EAAE,QAAQ,CAAC,CAAC;AAClD,CAAC;AAED,MAAM,yBAAyB,EAAE,OAAO;AAAA,EACtC,IAAI,EAAE,QAAQ,IAAI;AAAA,EAClB,MAAM,EACH,OAAO;AAAA,IACN,UAAU,EAAE,OAAO;AAAA,IACnB,UAAU,EAAE,OAAO;AAAA,EACrB,CAAC,EACA,SAAS;AACd,CAAC;AAED,eAAsB,KAAK,KAAc;AACvC,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,QAAQ,CAAC,KAAK,SAAU,QAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAEhG,MAAI;AACJ,MAAI;AAAE,WAAO,MAAM,IAAI,KAAK;AAAA,EAAE,QAAQ;AAAE,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAAE;AAC7G,QAAM,SAAS,eAAe,UAAU,IAAI;AAC5C,MAAI,CAAC,OAAO,QAAS,QAAO,aAAa,KAAK,EAAE,OAAO,qBAAqB,SAAS,OAAO,MAAM,QAAQ,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAC9H,QAAM,EAAE,SAAS,IAAI,OAAO;AAC5B,MAAI,EAAE,UAAU,OAAO,IAAI,OAAO;AAElC,MAAI;AACF,UAAM,EAAE,QAAQ,IAAI,MAAM,uBAAuB;AACjD,UAAM,KAAK,QAAQ,YAAY;AAC/B,UAAM,KAAK,QAAQ,IAAI;AACvB,UAAM,OAAO,QAAQ,aAAa;AAClC,UAAM,QAAQ,MAAM,yBAAyB,EAAE,IAAI,MAAM,MAAM,YAAY,mCAAmC,GAAG,EAAE,CAAC;AACpH,UAAM,cAAc,MAAM,cAAc,KAAK;AAC7C,QAAI,CAAC,YAAa,QAAO,aAAa,KAAK,EAAE,OAAO,mCAAmC,GAAG,EAAE,QAAQ,IAAI,CAAC;AACzG,UAAM,aAAa,MAAM,sBAAsB,IAAI,QAAQ;AAC3D,QAAI,eAAe,SAAU,QAAO,6BAA6B,QAAQ;AACzE,UAAM,iBAAiB,eAAe;AACtC,UAAM,0BAA0B,EAAE,MAAM,UAAU,QAAQ,UAAU,gBAAgB,KAAK,CAAC;AAC1F,UAAM,OAAO,gBAAgB,MAAM;AAGnC,QAAI;AACF,YAAM,EAAE,gCAAgC,IAAI,MAAM,OAAO,mBAAmB;AAC5E,YAAM,QAAQ,MAAM,gCAAgC,IAAI,EAAE,UAAU,gBAAgB,aAAa,UAAU,KAAK,UAAW,QAAQ,MAAM,sBAAsB,KAAK,CAAC;AACrK,UAAI,CAAC,MAAM,GAAI,QAAO,aAAa,KAAK,EAAE,OAAO,qBAAqB,QAAQ,MAAM,YAAY,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACpH,QAAQ;AAAA,IAAiC;AAEzC,UAAM,sBAAsB,MAAM;AAChC,YAAM,MAAM,OAAO,YAAY,EAAE,EAAE,KAAK;AACxC,UAAI,CAAC,IAAK,QAAO;AACjB,YAAM,MAAM,IAAI,YAAY;AAC5B,UAAI,QAAQ,YAAY,QAAQ,SAAS,QAAQ,UAAU,QAAQ,YAAa,QAAO;AAEvF,YAAM,OAAO;AACb,aAAO,KAAK,KAAK,GAAG,IAAI,MAAM;AAAA,IAChC,GAAG;AACH,UAAM,EAAE,GAAG,IAAI,MAAM,GAAG,yBAAyB;AAAA,MAC/C;AAAA,MACA,UAAU;AAAA,MACV,gBAAgB;AAAA,MAChB,UAAU,KAAK;AAAA,MACf,QAAQ;AAAA,IACV,CAAC;AAED,WAAO,aAAa,KAAK,EAAE,IAAI,MAAM,MAAM,EAAE,UAAU,UAAU,GAAG,EAAE,CAAC;AAAA,EACzE,SAAS,GAAG;AACV,QAAI,gBAAgB,CAAC,EAAG,QAAO,aAAa,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC;AAC7E,QAAI;AAAE,cAAQ,MAAM,iCAAiC,CAAC;AAAA,IAAE,QAAQ;AAAA,IAAC;AACjE,WAAO,aAAa,KAAK,EAAE,OAAO,wBAAwB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC9E;AACF;AAGA,SAAS,aAAa,MAAmI;AACvJ,MAAI,CAAC,QAAQ,OAAO,SAAS,SAAU,QAAO,EAAE,IAAI,OAAO,OAAO,eAAe;AACjF,QAAM,WAAW,OAAO,KAAK,aAAa,YAAY,KAAK,SAAS,SAAS,KAAK,WAAW;AAC7F,QAAM,WAAW,OAAO,KAAK,aAAa,YAAY,KAAK,SAAS,SAAS,KAAK,WAAW;AAC7F,QAAM,SAAU,KAAK,UAAU,OAAO,KAAK,WAAW,WAAY,KAAK,SAAgC,CAAC;AACxG,MAAI,CAAC,YAAY,CAAC,SAAU,QAAO,EAAE,IAAI,OAAO,OAAO,qCAAqC;AAC5F,SAAO,EAAE,IAAI,MAAM,MAAM,EAAE,UAAU,UAAU,OAAO,EAAE;AAC1D;AAEA,eAAsB,IAAI,KAAc;AACtC,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,QAAQ,CAAC,KAAK,SAAU,QAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAEhG,MAAI;AACJ,MAAI;AAAE,WAAO,MAAM,IAAI,KAAK;AAAA,EAAE,QAAQ;AAAE,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAAE;AAC7G,QAAM,SAAS,aAAa,IAAI;AAChC,MAAI,CAAC,OAAO,GAAI,QAAO,aAAa,KAAK,EAAE,OAAO,OAAO,MAAM,GAAG,EAAE,QAAQ,IAAI,CAAC;AACjF,QAAM,EAAE,UAAU,UAAU,OAAO,IAAI,OAAO;AAE9C,MAAI;AACF,UAAM,EAAE,QAAQ,IAAI,MAAM,uBAAuB;AACjD,UAAM,KAAK,QAAQ,YAAY;AAC/B,UAAM,KAAK,QAAQ,IAAI;AACvB,UAAM,OAAO,QAAQ,aAAa;AAClC,UAAM,QAAQ,MAAM,yBAAyB,EAAE,IAAI,MAAM,MAAM,YAAY,mCAAmC,GAAG,EAAE,CAAC;AACpH,UAAM,cAAc,MAAM,cAAc,KAAK;AAC7C,QAAI,CAAC,YAAa,QAAO,aAAa,KAAK,EAAE,OAAO,mCAAmC,GAAG,EAAE,QAAQ,IAAI,CAAC;AACzG,UAAM,aAAa,MAAM,sBAAsB,IAAI,QAAQ;AAC3D,QAAI,eAAe,SAAU,QAAO,6BAA6B,QAAQ;AACzE,UAAM,iBAAiB,eAAe;AACtC,UAAM,0BAA0B,EAAE,MAAM,UAAU,QAAQ,UAAU,gBAAgB,KAAK,CAAC;AAC1F,UAAM,OAAO,gBAAgB,MAAM;AAGnC,QAAI;AACF,YAAM,EAAE,gCAAgC,IAAI,MAAM,OAAO,mBAAmB;AAC5E,YAAM,QAAQ,MAAM,gCAAgC,IAAI,EAAE,UAAU,gBAAgB,aAAa,UAAU,KAAK,UAAW,QAAQ,MAAM,sBAAsB,KAAK,CAAC;AACrK,UAAI,CAAC,MAAM,GAAI,QAAO,aAAa,KAAK,EAAE,OAAO,qBAAqB,QAAQ,MAAM,YAAY,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACpH,QAAQ;AAAA,IAAiC;AAGzC,UAAM,SAAS;AACf,UAAM,MAAM,OAAO,YAAY,EAAE,EAAE,KAAK;AACxC,UAAM,MAAM,IAAI,YAAY;AAC5B,UAAM,aAAa,CAAC,OAAO,QAAQ,YAAY,QAAQ,SAAS,QAAQ,UAAU,QAAQ;AAC1F,UAAM,SAAS,OAAO,KAAK,GAAG;AAC9B,QAAI,cAAc,CAAC,QAAQ;AACzB,YAAM,UAAU,MAAM,GAAG,yBAAyB;AAAA,QAChD;AAAA,QACA,UAAU;AAAA,QACV,gBAAgB;AAAA,QAChB,UAAU,KAAK;AAAA,QACf,QAAQ;AAAA,MACV,CAAC;AACD,aAAO,aAAa,KAAK,EAAE,IAAI,MAAM,MAAM,EAAE,UAAU,UAAU,QAAQ,GAAG,EAAE,CAAC;AAAA,IACjF;AAEA,QAAI;AACF,YAAM,mBAAmB,MAAM,gCAAgC,IAAI;AAAA,QACjE,YAAY;AAAA,QACZ,UAAU;AAAA,QACV,gBAAgB;AAAA,MAClB,CAAC;AACD,mCAA6B;AAAA,QAC3B,cAAc;AAAA,QACd,YAAY;AAAA,QACZ,SAAS;AAAA,QACT,SAAS;AAAA,MACX,CAAC;AAAA,IACH,SAAS,WAAW;AAClB,UAAI,gBAAgB,SAAS,GAAG;AAC9B,eAAO,aAAa,KAAK,UAAU,MAAM,EAAE,QAAQ,UAAU,OAAO,CAAC;AAAA,MACvE;AACA,YAAM;AAAA,IACR;AAEA,UAAM,GAAG,yBAAyB;AAAA,MAChC;AAAA,MACA,UAAU;AAAA,MACV,gBAAgB;AAAA,MAChB,UAAU,KAAK;AAAA,MACf,QAAQ;AAAA,IACV,CAAC;AACD,WAAO,aAAa,KAAK,EAAE,IAAI,MAAM,MAAM,EAAE,UAAU,UAAU,IAAI,EAAE,CAAC;AAAA,EAC1E,SAAS,GAAG;AACV,QAAI,gBAAgB,CAAC,EAAG,QAAO,aAAa,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC;AAC7E,WAAO,aAAa,KAAK,EAAE,OAAO,wBAAwB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC9E;AACF;AAEA,MAAM,mBAAmB,EAAE,OAAO;AAAA,EAChC,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EAC1B,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC;AAC5B,CAAC;AAED,eAAsB,OAAO,KAAc;AACzC,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,QAAQ,CAAC,KAAK,SAAU,QAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAEhG,QAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,QAAM,aAAa,IAAI,aAAa,IAAI,UAAU;AAClD,QAAM,aAAa,IAAI,aAAa,IAAI,UAAU;AAClD,MAAI,UAAe,cAAc,aAAa,EAAE,UAAU,YAAY,UAAU,WAAW,IAAI;AAC/F,MAAI,CAAC,SAAS;AACZ,QAAI;AAAE,gBAAU,MAAM,IAAI,KAAK;AAAA,IAAE,QAAQ;AAAE,gBAAU;AAAA,IAAK;AAAA,EAC5D;AACA,QAAM,SAAS,iBAAiB,UAAU,OAAO;AACjD,MAAI,CAAC,OAAO,QAAS,QAAO,aAAa,KAAK,EAAE,OAAO,qBAAqB,SAAS,OAAO,MAAM,QAAQ,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAC9H,QAAM,EAAE,UAAU,SAAS,IAAI,OAAO;AAEtC,MAAI;AACF,UAAM,EAAE,QAAQ,IAAI,MAAM,uBAAuB;AACjD,UAAM,KAAK,QAAQ,YAAY;AAC/B,UAAM,KAAK,QAAQ,IAAI;AACvB,UAAM,OAAO,QAAQ,aAAa;AAClC,UAAM,QAAQ,MAAM,yBAAyB,EAAE,IAAI,MAAM,MAAM,YAAY,mCAAmC,GAAG,EAAE,CAAC;AACpH,UAAM,cAAc,MAAM,cAAc,KAAK;AAC7C,QAAI,CAAC,YAAa,QAAO,aAAa,KAAK,EAAE,OAAO,mCAAmC,GAAG,EAAE,QAAQ,IAAI,CAAC;AACzG,UAAM,aAAa,MAAM,sBAAsB,IAAI,QAAQ;AAC3D,QAAI,eAAe,SAAU,QAAO,6BAA6B,QAAQ;AACzE,UAAM,iBAAiB,eAAe;AACtC,UAAM,0BAA0B,EAAE,MAAM,UAAU,QAAQ,UAAU,gBAAgB,KAAK,CAAC;AAC1F,UAAM,GAAG,yBAAyB,EAAE,UAAU,UAAU,gBAAgB,aAAa,UAAU,KAAK,UAAW,MAAM,KAAK,CAAC;AAC3H,WAAO,aAAa,KAAK,EAAE,IAAI,KAAK,CAAC;AAAA,EACvC,SAAS,GAAG;AACV,QAAI,gBAAgB,CAAC,EAAG,QAAO,aAAa,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC;AAC7E,WAAO,aAAa,KAAK,EAAE,OAAO,wBAAwB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC9E;AACF;AAEA,SAAS,gBAAgB,OAAiD;AACxE,QAAM,MAA2B,CAAC;AAClC,aAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,SAAS,CAAC,CAAC,GAAG;AAChD,UAAM,MAAM,EAAE,WAAW,KAAK,IAAI,EAAE,QAAQ,QAAQ,EAAE,IAAI;AAC1D,QAAI,GAAG,IAAI;AAAA,EACb;AACA,SAAO;AACT;AAEA,MAAM,uBAAuB,EAAE,OAAO;AAAA,EACpC,IAAI,EAAE,QAAQ,IAAI;AACpB,CAAC;AAED,MAAM,cAAc,EAAE,OAAO;AAAA,EAC3B,OAAO,EAAE,OAAO;AAClB,CAAC,EAAE,YAAY;AAER,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aACE;AAAA,MACF,OAAO;AAAA,MACP,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ;AAAA,QACV;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ;AAAA,QACV;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ;AAAA,QACV;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aACE;AAAA,MACF,aAAa;AAAA,QACX,aAAa;AAAA,QACb,QAAQ;AAAA,MACV;AAAA,MACA,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ;AAAA,QACV;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ;AAAA,QACV;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ;AAAA,QACV;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aACE;AAAA,MACF,aAAa;AAAA,QACX,aAAa;AAAA,QACb,QAAQ;AAAA,MACV;AAAA,MACA,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ;AAAA,QACV;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ;AAAA,QACV;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ;AAAA,QACV;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA,QAAQ;AAAA,MACN,SAAS;AAAA,MACT,aAAa;AAAA,MACb,aAAa;AAAA,QACX,aAAa;AAAA,QACb,QAAQ;AAAA,MACV;AAAA,MACA,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ;AAAA,QACV;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ;AAAA,QACV;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ;AAAA,QACV;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ;AAAA,QACV;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport type { QueryEngine, QueryOptions, Where, Sort } from '@open-mercato/shared/lib/query/types'\nimport { normalizeExportFormat, serializeExport, defaultExportFilename, ensureColumns } from '@open-mercato/shared/lib/crud/exporters'\nimport type { RbacService } from '@open-mercato/core/modules/auth/services/rbacService'\nimport { resolveOrganizationScope, getSelectedOrganizationFromRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { SYSTEM_ENTITY_RECORDS_BLOCKED_CODE, isOrmBackedSystemEntityId } from '@open-mercato/shared/lib/data/engine'\nimport { parseBooleanToken, parseBooleanWithDefault } from '@open-mercato/shared/lib/boolean'\nimport { setRecordCustomFields } from '../lib/helpers'\nimport { CustomFieldValue } from '../data/entities'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { enforceCommandOptimisticLock } from '@open-mercato/shared/lib/crud/optimistic-lock-command'\nimport { isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { getModules } from '@open-mercato/shared/lib/i18n/server'\nimport { assertEntityAclForRequest } from '../lib/entityAcl'\n\nlet declaredCustomEntityIds: Set<string> | null = null\nfunction isDeclaredCustomEntity(entityId: string): boolean {\n  if (declaredCustomEntityIds === null) {\n    try {\n      const mods = getModules() as Array<{ customEntities?: Array<{ id?: string }> }>\n      if (Array.isArray(mods) && mods.length) {\n        const ids = new Set<string>()\n        for (const mod of mods) {\n          for (const spec of mod?.customEntities ?? []) {\n            if (spec?.id) ids.add(spec.id)\n          }\n        }\n        declaredCustomEntityIds = ids\n      }\n    } catch {}\n  }\n  return declaredCustomEntityIds?.has(entityId) ?? false\n}\n\nconst CUSTOM_ENTITY_RECORD_RESOURCE_KIND = 'entities.record'\n\ntype RecordsEntityKind = 'system' | 'custom' | 'unknown'\n\n// This surface manages doc-storage records, which exist for CUSTOM entities only.\n// Module-declared ids backed by a registered ORM table are system entities \u2014 their\n// records live in their own module tables/APIs, and stray doc rows for them poisoned\n// read-path classification platform-wide (#2939) \u2014 so they are rejected outright. The\n// previous fallback that classified an entity by the mere presence of\n// `custom_entities_storage` rows is gone: within the allowed set, declaration (ce.ts)\n// or an active `custom_entities` registration is authoritative.\nasync function classifyRecordsEntity(em: any, entityId: string): Promise<RecordsEntityKind> {\n  if (isOrmBackedSystemEntityId(em, entityId)) return 'system'\n  if (isDeclaredCustomEntity(entityId)) return 'custom'\n  try {\n    const { CustomEntity } = await import('../data/entities')\n    // Any registration row \u2014 active or soft-deleted \u2014 proves the id is a custom\n    // entity. Records persist beyond the definition's soft delete (TC-ENTITIES-006)\n    // and must stay readable/deletable, e.g. for the restore flow and cleanup.\n    const found = await em.findOne(CustomEntity as any, { entityId })\n    if (found) return 'custom'\n  } catch {}\n  return 'unknown'\n}\n\nfunction systemEntityRecordsRejection(entityId: string) {\n  return NextResponse.json(\n    { error: 'Records are available for custom entities only', code: SYSTEM_ENTITY_RECORDS_BLOCKED_CODE, entityId },\n    { status: 400 },\n  )\n}\n\nasync function readCustomEntityRecordUpdatedAt(\n  em: any,\n  input: { entityType: string; entityId: string; organizationId: string | null },\n): Promise<string | null> {\n  try {\n    const db = em.getKysely()\n    let query = db\n      .selectFrom('custom_entities_storage' as any)\n      .select(['updated_at' as any])\n      .where('entity_type' as any, '=', input.entityType)\n      .where('entity_id' as any, '=', input.entityId)\n    query = input.organizationId === null\n      ? query.where('organization_id' as any, 'is', null as any)\n      : query.where('organization_id' as any, '=', input.organizationId)\n    const row = await query.executeTakeFirst()\n    const value = (row as any)?.updated_at\n    if (value instanceof Date) return value.toISOString()\n    if (typeof value === 'string' && value.length > 0) return value\n    return null\n  } catch {\n    return null\n  }\n}\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['entities.records.view'] },\n  POST: { requireAuth: true, requireFeatures: ['entities.records.manage'] },\n  PUT: { requireAuth: true, requireFeatures: ['entities.records.manage'] },\n  DELETE: { requireAuth: true, requireFeatures: ['entities.records.manage'] },\n}\n\nconst DEFAULT_EXPORT_PAGE_SIZE = 1000\n\nconst listRecordsQuerySchema = z\n  .object({\n    entityId: z.string().min(1),\n    page: z.coerce.number().int().min(1).optional(),\n    pageSize: z.coerce.number().int().min(1).max(100).optional(),\n    sortField: z.string().optional(),\n    sortDir: z.enum(['asc', 'desc']).optional(),\n    withDeleted: z.coerce.boolean().optional(),\n    format: z.enum(['csv', 'json', 'xml', 'markdown']).optional(),\n    exportScope: z.enum(['full']).optional(),\n    export_scope: z.enum(['full']).optional(),\n    all: z.coerce.boolean().optional(),\n    full: z.coerce.boolean().optional(),\n  })\n  .passthrough()\n\nconst recordItemSchema = z.record(z.string(), z.any())\n\nconst listRecordsResponseSchema = z.object({\n  items: z.array(recordItemSchema),\n  total: z.number(),\n  page: z.number(),\n  pageSize: z.number(),\n  totalPages: z.number(),\n})\n\nexport async function GET(req: Request) {\n  const url = new URL(req.url)\n  const entityId = url.searchParams.get('entityId') || ''\n  if (!entityId) return NextResponse.json({ error: 'entityId is required' }, { status: 400 })\n\n  const auth = await getAuthFromRequest(req)\n  if (!auth || !auth.tenantId) return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n\n  const requestedExport = normalizeExportFormat(url.searchParams.get('format'))\n  const exportScopeRaw = (url.searchParams.get('exportScope') || url.searchParams.get('export_scope') || '').toLowerCase()\n  const exportFullRequested = requestedExport != null && (exportScopeRaw === 'full' || parseBooleanWithDefault(url.searchParams.get('full'), false))\n  const exportAll = parseBooleanWithDefault(url.searchParams.get('all'), false)\n  const noPagination = exportAll || requestedExport != null\n  const page = noPagination ? 1 : Math.max(parseInt(url.searchParams.get('page') || '1', 10) || 1, 1)\n  const basePageSize = Math.min(Math.max(parseInt(url.searchParams.get('pageSize') || '50', 10) || 50, 1), 100)\n  const pageSize = noPagination ? Math.max(basePageSize, DEFAULT_EXPORT_PAGE_SIZE) : basePageSize\n  const sortField = url.searchParams.get('sortField') || 'id'\n  const sortDir = (url.searchParams.get('sortDir') || 'asc').toLowerCase() === 'desc' ? 'desc' : 'asc'\n  const withDeleted = parseBooleanWithDefault(url.searchParams.get('withDeleted'), false)\n\n  const qpEntries: Array<[string, string]> = []\n  for (const [key, val] of url.searchParams.entries()) {\n    if (['entityId','page','pageSize','sortField','sortDir','withDeleted','format','exportScope','export_scope','all','full'].includes(key)) continue\n    qpEntries.push([key, val])\n  }\n\n  try {\n    const { resolve } = await createRequestContainer()\n    const qe = resolve('queryEngine') as QueryEngine\n    const em = resolve('em') as any\n    const rbac = resolve('rbacService') as RbacService\n    const scope = await resolveOrganizationScope({ em, rbac, auth, selectedId: getSelectedOrganizationFromRequest(req) })\n    let organizationIds: string[] | null = scope.filterIds\n    // Module-declared custom entities (ce.ts) carry frozen system-style ids and are never\n    // registered in `custom_entities`, so classification checks the declared registry plus\n    // active registrations. System (table-backed) ids are rejected above; for the allowed\n    // set `isCustomEntity` drives mapRow's cf_ stripping so the edit form reads back values.\n    const entityKind = await classifyRecordsEntity(em, entityId)\n    if (entityKind === 'system') return systemEntityRecordsRejection(entityId)\n    const isCustomEntity = entityKind === 'custom'\n    await assertEntityAclForRequest({ auth, entityId, action: 'view', isCustomEntity, rbac })\n    if (organizationIds && organizationIds.length === 0) {\n      return NextResponse.json({ items: [], total: 0, page, pageSize, totalPages: 0 })\n    }\n    const normalizeCustomEntityValue = (value: unknown) => {\n      if (Array.isArray(value)) {\n        return value.map((entry) => {\n          if (typeof entry !== 'string') return entry\n          const parsed = parseBooleanToken(entry)\n          return parsed === null ? entry : parsed\n        })\n      }\n      if (typeof value !== 'string') return value\n      const parsed = parseBooleanToken(value)\n      return parsed === null ? value : parsed\n    }\n    const mapRow = (row: any) => {\n      if (!isCustomEntity || !row || typeof row !== 'object') return row\n      const out: Record<string, unknown> = {}\n      for (const [k, v] of Object.entries(row)) {\n        if (k.startsWith('cf_')) out[k.replace(/^cf_/, '')] = normalizeCustomEntityValue(v)\n        else out[k] = v\n      }\n      return out\n    }\n    const mapFullRow = (row: any) => {\n      if (!row || typeof row !== 'object') return row\n      return { ...(row as Record<string, unknown>) }\n    }\n    // Build filters with awareness of custom-entity mode\n    const filtersObj: Where<any> = {}\n    const buildFilter = (key: string, val: string, allowAnyKey: boolean) => {\n      if (key.startsWith('cf_')) {\n        if (key.endsWith('In')) {\n          const base = key.slice(0, -2)\n          const values = val.split(',').map((s) => s.trim()).filter(Boolean)\n          ;(filtersObj as any)[base] = { $in: values }\n        } else {\n          if (val.includes(',')) {\n            const values = val.split(',').map((s) => s.trim()).filter(Boolean)\n            ;(filtersObj as any)[key] = { $in: values }\n          } else {\n            const parsed = parseBooleanToken(val)\n            ;(filtersObj as any)[key] = parsed === null ? val : parsed\n          }\n        }\n      } else if (allowAnyKey) {\n        if (val.includes(',')) {\n          const values = val.split(',').map((s) => s.trim()).filter(Boolean)\n          ;(filtersObj as any)[key] = { $in: values }\n        } else {\n          const parsed = parseBooleanToken(val)\n          ;(filtersObj as any)[key] = parsed === null ? val : parsed\n        }\n      } else {\n        if (['id', 'created_at', 'updated_at', 'deleted_at', 'name', 'title', 'email'].includes(key)) {\n          ;(filtersObj as any)[key] = val\n        }\n      }\n    }\n\n    if (organizationIds && organizationIds.length) {\n      (filtersObj as any).organization_id = { $in: organizationIds }\n    }\n    const qopts: QueryOptions = {\n      tenantId: auth.tenantId!,\n      includeCustomFields: true,\n      page: { page, pageSize },\n      sort: [{ field: sortField as any, dir: sortDir as any }] as Sort[],\n      filters: filtersObj as any,\n      withDeleted,\n    }\n    if (organizationIds && organizationIds.length) {\n      qopts.organizationIds = organizationIds\n    }\n    // Allowed entities are doc-storage-backed by definition (system ids were rejected\n    // above) \u2014 direct the engine to doc storage explicitly so reads stay deterministic\n    // even before the first record exists.\n    if (isCustomEntity) qopts.forceCustomEntityStorage = true\n    for (const [k, v] of qpEntries) buildFilter(k, v, isCustomEntity)\n    const res = await qe.query(entityId as any, qopts)\n    const rawItems = res.items || []\n    const viewPageItems = rawItems.map(mapRow)\n    const fullPageItems = rawItems.map(mapFullRow)\n\n    // Expose `updated_at` on custom-entity records. The query engine returns only\n    // the `doc` fields + `id`, dropping the base `updated_at` column \u2014 which made\n    // optimistic locking impossible end-to-end (no version for the edit page to\n    // round-trip as the lock header). Batch-read it from storage and merge it in.\n    if (isCustomEntity && viewPageItems.length) {\n      try {\n        const recordIds = viewPageItems\n          .map((it: any) => it?.id)\n          .filter((v: any): v is string => typeof v === 'string' && v.length > 0)\n        if (recordIds.length) {\n          const db = em.getKysely()\n          const rows = await db\n            .selectFrom('custom_entities_storage' as any)\n            .select(['entity_id' as any, 'updated_at' as any])\n            .where('entity_type' as any, '=', entityId)\n            .where('entity_id' as any, 'in', recordIds as any)\n            .execute()\n          const updatedById = new Map<string, string>()\n          for (const row of rows as any[]) {\n            const value = row?.updated_at\n            const iso = value instanceof Date ? value.toISOString() : (typeof value === 'string' && value.length > 0 ? value : null)\n            if (iso && row?.entity_id) updatedById.set(String(row.entity_id), iso)\n          }\n          for (const item of viewPageItems as any[]) {\n            const iso = updatedById.get(String(item?.id))\n            if (iso) {\n              item.updated_at = iso\n              item.updatedAt = iso\n            }\n          }\n        }\n      } catch { /* best-effort: locking simply will not engage if storage is unavailable */ }\n    }\n\n    const total = typeof res.total === 'number' ? res.total : rawItems.length\n    const effectivePageSize = res.pageSize || pageSize\n    const payload = {\n      items: viewPageItems,\n      total,\n      page: res.page || page,\n      pageSize: effectivePageSize,\n      totalPages: Math.ceil(total / (effectivePageSize || 1)),\n    }\n\n    if (requestedExport) {\n      let exportItems: any[] = exportFullRequested ? [...fullPageItems] : [...viewPageItems]\n      if (total > exportItems.length) {\n        let nextPage = 2\n        while (exportItems.length < total) {\n          const nextRes = await qe.query(entityId as any, {\n            ...qopts,\n            page: { page: nextPage, pageSize },\n          })\n          const nextRawItems = nextRes.items || []\n          if (!nextRawItems.length) break\n          const nextViewItems = nextRawItems.map(mapRow)\n          const nextFullItems = nextRawItems.map(mapFullRow)\n          const nextBatch = exportFullRequested ? nextFullItems : nextViewItems\n          exportItems.push(...nextBatch)\n          if (nextBatch.length < pageSize) break\n          nextPage += 1\n        }\n      }\n      const prepared = {\n        columns: ensureColumns(exportItems),\n        rows: exportItems,\n      }\n      const filenameBase = exportFullRequested ? `${entityId || 'records'}_full` : entityId || 'records'\n      const serialized = serializeExport(prepared, requestedExport)\n      const filename = defaultExportFilename(filenameBase, requestedExport)\n      return new Response(serialized.body, {\n        headers: {\n          'content-type': serialized.contentType,\n          'content-disposition': `attachment; filename=\"${filename}\"`,\n        },\n      })\n    }\n\n    return NextResponse.json(payload)\n  } catch (e) {\n    if (isCrudHttpError(e)) return NextResponse.json(e.body, { status: e.status })\n    try { console.error('[entities.records.GET] Error', e) } catch {}\n    return NextResponse.json({ error: 'Internal server error' }, { status: 500 })\n  }\n}\n\nconst postBodySchema = z.object({\n  entityId: z.string().min(1),\n  recordId: z.string().min(1).optional(),\n  values: z.record(z.string(), z.any()).default({}),\n})\n\nconst putBodySchema = z.object({\n  entityId: z.string().min(1),\n  recordId: z.string().min(1),\n  values: z.record(z.string(), z.any()).default({}),\n})\n\nconst mutationResponseSchema = z.object({\n  ok: z.literal(true),\n  item: z\n    .object({\n      entityId: z.string(),\n      recordId: z.string(),\n    })\n    .optional(),\n})\n\nexport async function POST(req: Request) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth || !auth.tenantId) return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n\n  let json: unknown\n  try { json = await req.json() } catch { return NextResponse.json({ error: 'Invalid JSON' }, { status: 400 }) }\n  const parsed = postBodySchema.safeParse(json)\n  if (!parsed.success) return NextResponse.json({ error: 'Validation failed', details: parsed.error.flatten() }, { status: 400 })\n  const { entityId } = parsed.data\n  let { recordId, values } = parsed.data as { recordId?: string; values: Record<string, any> }\n\n  try {\n    const { resolve } = await createRequestContainer()\n    const de = resolve('dataEngine') as any\n    const em = resolve('em') as any\n    const rbac = resolve('rbacService') as RbacService\n    const scope = await resolveOrganizationScope({ em, rbac, auth, selectedId: getSelectedOrganizationFromRequest(req) })\n    const targetOrgId = scope.selectedId ?? auth.orgId\n    if (!targetOrgId) return NextResponse.json({ error: 'Organization context is required' }, { status: 400 })\n    const entityKind = await classifyRecordsEntity(em, entityId)\n    if (entityKind === 'system') return systemEntityRecordsRejection(entityId)\n    const isCustomEntity = entityKind === 'custom'\n    await assertEntityAclForRequest({ auth, entityId, action: 'manage', isCustomEntity, rbac })\n    const norm = normalizeValues(values)\n\n    // Validate against custom field definitions\n    try {\n      const { validateCustomFieldValuesServer } = await import('../lib/validation')\n      const check = await validateCustomFieldValuesServer(em, { entityId, organizationId: targetOrgId, tenantId: auth.tenantId!, values: norm, rejectUndeclaredKeys: true })\n      if (!check.ok) return NextResponse.json({ error: 'Validation failed', fields: check.fieldErrors }, { status: 400 })\n    } catch { /* ignore if helper missing */ }\n\n    const normalizedRecordId = (() => {\n      const raw = String(recordId || '').trim()\n      if (!raw) return undefined\n      const low = raw.toLowerCase()\n      if (low === 'create' || low === 'new' || low === 'null' || low === 'undefined') return undefined\n      // Enforce UUID only; any non-uuid is ignored so we generate one in the DE\n      const uuid = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i\n      return uuid.test(raw) ? raw : undefined\n    })()\n    const { id } = await de.createCustomEntityRecord({\n      entityId,\n      recordId: normalizedRecordId,\n      organizationId: targetOrgId,\n      tenantId: auth.tenantId!,\n      values: norm,\n    })\n\n    return NextResponse.json({ ok: true, item: { entityId, recordId: id } })\n  } catch (e) {\n    if (isCrudHttpError(e)) return NextResponse.json(e.body, { status: e.status })\n    try { console.error('[entities.records.POST] Error', e) } catch {}\n    return NextResponse.json({ error: 'Internal server error' }, { status: 500 })\n  }\n}\n\n// Avoid zod here to prevent runtime import issues in some environments\nfunction parsePutBody(json: any): { ok: true; data: { entityId: string; recordId: string; values: Record<string, any> } } | { ok: false; error: string } {\n  if (!json || typeof json !== 'object') return { ok: false, error: 'Invalid JSON' }\n  const entityId = typeof json.entityId === 'string' && json.entityId.length ? json.entityId : ''\n  const recordId = typeof json.recordId === 'string' && json.recordId.length ? json.recordId : ''\n  const values = (json.values && typeof json.values === 'object') ? json.values as Record<string, any> : {}\n  if (!entityId || !recordId) return { ok: false, error: 'entityId and recordId are required' }\n  return { ok: true, data: { entityId, recordId, values } }\n}\n\nexport async function PUT(req: Request) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth || !auth.tenantId) return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n\n  let json: any\n  try { json = await req.json() } catch { return NextResponse.json({ error: 'Invalid JSON' }, { status: 400 }) }\n  const parsed = parsePutBody(json)\n  if (!parsed.ok) return NextResponse.json({ error: parsed.error }, { status: 400 })\n  const { entityId, recordId, values } = parsed.data\n\n  try {\n    const { resolve } = await createRequestContainer()\n    const de = resolve('dataEngine') as any\n    const em = resolve('em') as any\n    const rbac = resolve('rbacService') as RbacService\n    const scope = await resolveOrganizationScope({ em, rbac, auth, selectedId: getSelectedOrganizationFromRequest(req) })\n    const targetOrgId = scope.selectedId ?? auth.orgId\n    if (!targetOrgId) return NextResponse.json({ error: 'Organization context is required' }, { status: 400 })\n    const entityKind = await classifyRecordsEntity(em, entityId)\n    if (entityKind === 'system') return systemEntityRecordsRejection(entityId)\n    const isCustomEntity = entityKind === 'custom'\n    await assertEntityAclForRequest({ auth, entityId, action: 'manage', isCustomEntity, rbac })\n    const norm = normalizeValues(values)\n\n    // Validate against custom field definitions\n    try {\n      const { validateCustomFieldValuesServer } = await import('../lib/validation')\n      const check = await validateCustomFieldValuesServer(em, { entityId, organizationId: targetOrgId, tenantId: auth.tenantId!, values: norm, rejectUndeclaredKeys: true })\n      if (!check.ok) return NextResponse.json({ error: 'Validation failed', fields: check.fieldErrors }, { status: 400 })\n    } catch { /* ignore if helper missing */ }\n\n    // Normalize recordId: if blank/sentinel/non-uuid => create instead of update\n    const uuidRe = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i\n    const rid = String(recordId || '').trim()\n    const low = rid.toLowerCase()\n    const isSentinel = !rid || low === 'create' || low === 'new' || low === 'null' || low === 'undefined'\n    const isUuid = uuidRe.test(rid)\n    if (isSentinel || !isUuid) {\n      const created = await de.createCustomEntityRecord({\n        entityId,\n        recordId: undefined,\n        organizationId: targetOrgId,\n        tenantId: auth.tenantId!,\n        values: norm,\n      })\n      return NextResponse.json({ ok: true, item: { entityId, recordId: created.id } })\n    }\n\n    try {\n      const currentUpdatedAt = await readCustomEntityRecordUpdatedAt(em, {\n        entityType: entityId,\n        entityId: rid,\n        organizationId: targetOrgId,\n      })\n      enforceCommandOptimisticLock({\n        resourceKind: CUSTOM_ENTITY_RECORD_RESOURCE_KIND,\n        resourceId: rid,\n        current: currentUpdatedAt,\n        request: req,\n      })\n    } catch (lockError) {\n      if (isCrudHttpError(lockError)) {\n        return NextResponse.json(lockError.body, { status: lockError.status })\n      }\n      throw lockError\n    }\n\n    await de.updateCustomEntityRecord({\n      entityId,\n      recordId: rid,\n      organizationId: targetOrgId,\n      tenantId: auth.tenantId!,\n      values: norm,\n    })\n    return NextResponse.json({ ok: true, item: { entityId, recordId: rid } })\n  } catch (e) {\n    if (isCrudHttpError(e)) return NextResponse.json(e.body, { status: e.status })\n    return NextResponse.json({ error: 'Internal server error' }, { status: 500 })\n  }\n}\n\nconst deleteBodySchema = z.object({\n  entityId: z.string().min(1),\n  recordId: z.string().min(1),\n})\n\nexport async function DELETE(req: Request) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth || !auth.tenantId) return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n\n  const url = new URL(req.url)\n  const qpEntityId = url.searchParams.get('entityId')\n  const qpRecordId = url.searchParams.get('recordId')\n  let payload: any = qpEntityId && qpRecordId ? { entityId: qpEntityId, recordId: qpRecordId } : null\n  if (!payload) {\n    try { payload = await req.json() } catch { payload = null }\n  }\n  const parsed = deleteBodySchema.safeParse(payload)\n  if (!parsed.success) return NextResponse.json({ error: 'Validation failed', details: parsed.error.flatten() }, { status: 400 })\n  const { entityId, recordId } = parsed.data\n\n  try {\n    const { resolve } = await createRequestContainer()\n    const de = resolve('dataEngine') as any\n    const em = resolve('em') as any\n    const rbac = resolve('rbacService') as RbacService\n    const scope = await resolveOrganizationScope({ em, rbac, auth, selectedId: getSelectedOrganizationFromRequest(req) })\n    const targetOrgId = scope.selectedId ?? auth.orgId\n    if (!targetOrgId) return NextResponse.json({ error: 'Organization context is required' }, { status: 400 })\n    const entityKind = await classifyRecordsEntity(em, entityId)\n    if (entityKind === 'system') return systemEntityRecordsRejection(entityId)\n    const isCustomEntity = entityKind === 'custom'\n    await assertEntityAclForRequest({ auth, entityId, action: 'manage', isCustomEntity, rbac })\n\n    try {\n      const currentUpdatedAt = await readCustomEntityRecordUpdatedAt(em, {\n        entityType: entityId,\n        entityId: recordId,\n        organizationId: targetOrgId,\n      })\n      enforceCommandOptimisticLock({\n        resourceKind: CUSTOM_ENTITY_RECORD_RESOURCE_KIND,\n        resourceId: recordId,\n        current: currentUpdatedAt,\n        request: req,\n      })\n    } catch (lockError) {\n      if (isCrudHttpError(lockError)) {\n        return NextResponse.json(lockError.body, { status: lockError.status })\n      }\n      throw lockError\n    }\n\n    await de.deleteCustomEntityRecord({ entityId, recordId, organizationId: targetOrgId, tenantId: auth.tenantId!, soft: true })\n    return NextResponse.json({ ok: true })\n  } catch (e) {\n    if (isCrudHttpError(e)) return NextResponse.json(e.body, { status: e.status })\n    return NextResponse.json({ error: 'Internal server error' }, { status: 500 })\n  }\n}\n\nfunction normalizeValues(input: Record<string, any>): Record<string, any> {\n  const out: Record<string, any> = {}\n  for (const [k, v] of Object.entries(input || {})) {\n    const key = k.startsWith('cf_') ? k.replace(/^cf_/, '') : k\n    out[key] = v\n  }\n  return out\n}\n\nconst deleteResponseSchema = z.object({\n  ok: z.literal(true),\n})\n\nconst errorSchema = z.object({\n  error: z.string(),\n}).passthrough()\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Entities',\n  summary: 'CRUD operations on entity records',\n  methods: {\n    GET: {\n      summary: 'List records',\n      description:\n        'Returns paginated records for the supplied entity. Supports custom field filters, exports, and soft-delete toggles.',\n      query: listRecordsQuerySchema,\n      responses: [\n        {\n          status: 200,\n          description: 'Paginated records',\n          schema: listRecordsResponseSchema,\n        },\n        {\n          status: 400,\n          description: 'Missing entity id',\n          schema: errorSchema,\n        },\n        {\n          status: 401,\n          description: 'Missing authentication',\n          schema: errorSchema,\n        },\n        {\n          status: 500,\n          description: 'Unexpected failure',\n          schema: errorSchema,\n        },\n      ],\n    },\n    POST: {\n      summary: 'Create record',\n      description:\n        'Creates a record for the given entity. When `recordId` is omitted or not a UUID the data engine will generate one automatically.',\n      requestBody: {\n        contentType: 'application/json',\n        schema: postBodySchema,\n      },\n      responses: [\n        {\n          status: 200,\n          description: 'Record created',\n          schema: mutationResponseSchema,\n        },\n        {\n          status: 400,\n          description: 'Validation failure',\n          schema: errorSchema,\n        },\n        {\n          status: 401,\n          description: 'Missing authentication',\n          schema: errorSchema,\n        },\n        {\n          status: 500,\n          description: 'Unexpected failure',\n          schema: errorSchema,\n        },\n      ],\n    },\n    PUT: {\n      summary: 'Update record',\n      description:\n        'Updates an existing record. If the provided recordId is not a UUID the record will be created instead to support optimistic flows.',\n      requestBody: {\n        contentType: 'application/json',\n        schema: putBodySchema,\n      },\n      responses: [\n        {\n          status: 200,\n          description: 'Record updated',\n          schema: mutationResponseSchema,\n        },\n        {\n          status: 400,\n          description: 'Validation failure',\n          schema: errorSchema,\n        },\n        {\n          status: 401,\n          description: 'Missing authentication',\n          schema: errorSchema,\n        },\n        {\n          status: 500,\n          description: 'Unexpected failure',\n          schema: errorSchema,\n        },\n      ],\n    },\n    DELETE: {\n      summary: 'Delete record',\n      description: 'Soft deletes the specified record within the current tenant/org scope.',\n      requestBody: {\n        contentType: 'application/json',\n        schema: deleteBodySchema,\n      },\n      responses: [\n        {\n          status: 200,\n          description: 'Record deleted',\n          schema: deleteResponseSchema,\n        },\n        {\n          status: 400,\n          description: 'Missing entity id or record id',\n          schema: errorSchema,\n        },\n        {\n          status: 401,\n          description: 'Missing authentication',\n          schema: errorSchema,\n        },\n        {\n          status: 404,\n          description: 'Record not found',\n          schema: errorSchema,\n        },\n        {\n          status: 500,\n          description: 'Unexpected failure',\n          schema: errorSchema,\n        },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AAEnC,SAAS,uBAAuB,iBAAiB,uBAAuB,qBAAqB;AAE7F,SAAS,0BAA0B,0CAA0C;AAC7E,SAAS,oCAAoC,iCAAiC;AAC9E,SAAS,mBAAmB,+BAA+B;AAI3D,SAAS,oCAAoC;AAC7C,SAAS,uBAAuB;AAChC,SAAS,kBAAkB;AAC3B,SAAS,iCAAiC;AAE1C,IAAI,0BAA8C;AAClD,SAAS,uBAAuB,UAA2B;AACzD,MAAI,4BAA4B,MAAM;AACpC,QAAI;AACF,YAAM,OAAO,WAAW;AACxB,UAAI,MAAM,QAAQ,IAAI,KAAK,KAAK,QAAQ;AACtC,cAAM,MAAM,oBAAI,IAAY;AAC5B,mBAAW,OAAO,MAAM;AACtB,qBAAW,QAAQ,KAAK,kBAAkB,CAAC,GAAG;AAC5C,gBAAI,MAAM,GAAI,KAAI,IAAI,KAAK,EAAE;AAAA,UAC/B;AAAA,QACF;AACA,kCAA0B;AAAA,MAC5B;AAAA,IACF,QAAQ;AAAA,IAAC;AAAA,EACX;AACA,SAAO,yBAAyB,IAAI,QAAQ,KAAK;AACnD;AAEA,MAAM,qCAAqC;AAW3C,eAAe,sBAAsB,IAAS,UAA8C;AAC1F,MAAI,0BAA0B,IAAI,QAAQ,EAAG,QAAO;AACpD,MAAI,uBAAuB,QAAQ,EAAG,QAAO;AAC7C,MAAI;AACF,UAAM,EAAE,aAAa,IAAI,MAAM,OAAO,kBAAkB;AAIxD,UAAM,QAAQ,MAAM,GAAG,QAAQ,cAAqB,EAAE,SAAS,CAAC;AAChE,QAAI,MAAO,QAAO;AAAA,EACpB,QAAQ;AAAA,EAAC;AACT,SAAO;AACT;AAEA,SAAS,6BAA6B,UAAkB;AACtD,SAAO,aAAa;AAAA,IAClB,EAAE,OAAO,kDAAkD,MAAM,oCAAoC,SAAS;AAAA,IAC9G,EAAE,QAAQ,IAAI;AAAA,EAChB;AACF;AAEA,eAAe,gCACb,IACA,OACwB;AACxB,MAAI;AACF,UAAM,KAAK,GAAG,UAAU;AACxB,QAAI,QAAQ,GACT,WAAW,yBAAgC,EAC3C,OAAO,CAAC,YAAmB,CAAC,EAC5B,MAAM,eAAsB,KAAK,MAAM,UAAU,EACjD,MAAM,aAAoB,KAAK,MAAM,QAAQ;AAChD,YAAQ,MAAM,mBAAmB,OAC7B,MAAM,MAAM,mBAA0B,MAAM,IAAW,IACvD,MAAM,MAAM,mBAA0B,KAAK,MAAM,cAAc;AACnE,UAAM,MAAM,MAAM,MAAM,iBAAiB;AACzC,UAAM,QAAS,KAAa;AAC5B,QAAI,iBAAiB,KAAM,QAAO,MAAM,YAAY;AACpD,QAAI,OAAO,UAAU,YAAY,MAAM,SAAS,EAAG,QAAO;AAC1D,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEO,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,uBAAuB,EAAE;AAAA,EACrE,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,yBAAyB,EAAE;AAAA,EACxE,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,yBAAyB,EAAE;AAAA,EACvE,QAAQ,EAAE,aAAa,MAAM,iBAAiB,CAAC,yBAAyB,EAAE;AAC5E;AAEA,MAAM,2BAA2B;AAEjC,MAAM,yBAAyB,EAC5B,OAAO;AAAA,EACN,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EAC1B,MAAM,EAAE,OAAO,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,EAC9C,UAAU,EAAE,OAAO,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EAC3D,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,SAAS,EAAE,KAAK,CAAC,OAAO,MAAM,CAAC,EAAE,SAAS;AAAA,EAC1C,aAAa,EAAE,OAAO,QAAQ,EAAE,SAAS;AAAA,EACzC,QAAQ,EAAE,KAAK,CAAC,OAAO,QAAQ,OAAO,UAAU,CAAC,EAAE,SAAS;AAAA,EAC5D,aAAa,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,SAAS;AAAA,EACvC,cAAc,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,SAAS;AAAA,EACxC,KAAK,EAAE,OAAO,QAAQ,EAAE,SAAS;AAAA,EACjC,MAAM,EAAE,OAAO,QAAQ,EAAE,SAAS;AACpC,CAAC,EACA,YAAY;AAEf,MAAM,mBAAmB,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,IAAI,CAAC;AAErD,MAAM,4BAA4B,EAAE,OAAO;AAAA,EACzC,OAAO,EAAE,MAAM,gBAAgB;AAAA,EAC/B,OAAO,EAAE,OAAO;AAAA,EAChB,MAAM,EAAE,OAAO;AAAA,EACf,UAAU,EAAE,OAAO;AAAA,EACnB,YAAY,EAAE,OAAO;AACvB,CAAC;AAED,eAAsB,IAAI,KAAc;AACtC,QAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,QAAM,WAAW,IAAI,aAAa,IAAI,UAAU,KAAK;AACrD,MAAI,CAAC,SAAU,QAAO,aAAa,KAAK,EAAE,OAAO,uBAAuB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAE1F,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,QAAQ,CAAC,KAAK,SAAU,QAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAEhG,QAAM,kBAAkB,sBAAsB,IAAI,aAAa,IAAI,QAAQ,CAAC;AAC5E,QAAM,kBAAkB,IAAI,aAAa,IAAI,aAAa,KAAK,IAAI,aAAa,IAAI,cAAc,KAAK,IAAI,YAAY;AACvH,QAAM,sBAAsB,mBAAmB,SAAS,mBAAmB,UAAU,wBAAwB,IAAI,aAAa,IAAI,MAAM,GAAG,KAAK;AAChJ,QAAM,YAAY,wBAAwB,IAAI,aAAa,IAAI,KAAK,GAAG,KAAK;AAC5E,QAAM,eAAe,aAAa,mBAAmB;AACrD,QAAM,OAAO,eAAe,IAAI,KAAK,IAAI,SAAS,IAAI,aAAa,IAAI,MAAM,KAAK,KAAK,EAAE,KAAK,GAAG,CAAC;AAClG,QAAM,eAAe,KAAK,IAAI,KAAK,IAAI,SAAS,IAAI,aAAa,IAAI,UAAU,KAAK,MAAM,EAAE,KAAK,IAAI,CAAC,GAAG,GAAG;AAC5G,QAAM,WAAW,eAAe,KAAK,IAAI,cAAc,wBAAwB,IAAI;AACnF,QAAM,YAAY,IAAI,aAAa,IAAI,WAAW,KAAK;AACvD,QAAM,WAAW,IAAI,aAAa,IAAI,SAAS,KAAK,OAAO,YAAY,MAAM,SAAS,SAAS;AAC/F,QAAM,cAAc,wBAAwB,IAAI,aAAa,IAAI,aAAa,GAAG,KAAK;AAEtF,QAAM,YAAqC,CAAC;AAC5C,aAAW,CAAC,KAAK,GAAG,KAAK,IAAI,aAAa,QAAQ,GAAG;AACnD,QAAI,CAAC,YAAW,QAAO,YAAW,aAAY,WAAU,eAAc,UAAS,eAAc,gBAAe,OAAM,MAAM,EAAE,SAAS,GAAG,EAAG;AACzI,cAAU,KAAK,CAAC,KAAK,GAAG,CAAC;AAAA,EAC3B;AAEA,MAAI;AACF,UAAM,EAAE,QAAQ,IAAI,MAAM,uBAAuB;AACjD,UAAM,KAAK,QAAQ,aAAa;AAChC,UAAM,KAAK,QAAQ,IAAI;AACvB,UAAM,OAAO,QAAQ,aAAa;AAClC,UAAM,QAAQ,MAAM,yBAAyB,EAAE,IAAI,MAAM,MAAM,YAAY,mCAAmC,GAAG,EAAE,CAAC;AACpH,QAAI,kBAAmC,MAAM;AAK7C,UAAM,aAAa,MAAM,sBAAsB,IAAI,QAAQ;AAC3D,QAAI,eAAe,SAAU,QAAO,6BAA6B,QAAQ;AACzE,UAAM,iBAAiB,eAAe;AACtC,UAAM,0BAA0B,EAAE,MAAM,UAAU,QAAQ,QAAQ,gBAAgB,KAAK,CAAC;AACxF,QAAI,mBAAmB,gBAAgB,WAAW,GAAG;AACnD,aAAO,aAAa,KAAK,EAAE,OAAO,CAAC,GAAG,OAAO,GAAG,MAAM,UAAU,YAAY,EAAE,CAAC;AAAA,IACjF;AACA,UAAM,6BAA6B,CAAC,UAAmB;AACrD,UAAI,MAAM,QAAQ,KAAK,GAAG;AACxB,eAAO,MAAM,IAAI,CAAC,UAAU;AAC1B,cAAI,OAAO,UAAU,SAAU,QAAO;AACtC,gBAAMA,UAAS,kBAAkB,KAAK;AACtC,iBAAOA,YAAW,OAAO,QAAQA;AAAA,QACnC,CAAC;AAAA,MACH;AACA,UAAI,OAAO,UAAU,SAAU,QAAO;AACtC,YAAM,SAAS,kBAAkB,KAAK;AACtC,aAAO,WAAW,OAAO,QAAQ;AAAA,IACnC;AACA,UAAM,SAAS,CAAC,QAAa;AAC3B,UAAI,CAAC,kBAAkB,CAAC,OAAO,OAAO,QAAQ,SAAU,QAAO;AAC/D,YAAM,MAA+B,CAAC;AACtC,iBAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,GAAG,GAAG;AACxC,YAAI,EAAE,WAAW,KAAK,EAAG,KAAI,EAAE,QAAQ,QAAQ,EAAE,CAAC,IAAI,2BAA2B,CAAC;AAAA,YAC7E,KAAI,CAAC,IAAI;AAAA,MAChB;AACA,aAAO;AAAA,IACT;AACA,UAAM,aAAa,CAAC,QAAa;AAC/B,UAAI,CAAC,OAAO,OAAO,QAAQ,SAAU,QAAO;AAC5C,aAAO,EAAE,GAAI,IAAgC;AAAA,IAC/C;AAEA,UAAM,aAAyB,CAAC;AAChC,UAAM,cAAc,CAAC,KAAa,KAAa,gBAAyB;AACtE,UAAI,IAAI,WAAW,KAAK,GAAG;AACzB,YAAI,IAAI,SAAS,IAAI,GAAG;AACtB,gBAAM,OAAO,IAAI,MAAM,GAAG,EAAE;AAC5B,gBAAM,SAAS,IAAI,MAAM,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,OAAO;AAChE,UAAC,WAAmB,IAAI,IAAI,EAAE,KAAK,OAAO;AAAA,QAC7C,OAAO;AACL,cAAI,IAAI,SAAS,GAAG,GAAG;AACrB,kBAAM,SAAS,IAAI,MAAM,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,OAAO;AAChE,YAAC,WAAmB,GAAG,IAAI,EAAE,KAAK,OAAO;AAAA,UAC5C,OAAO;AACL,kBAAM,SAAS,kBAAkB,GAAG;AACnC,YAAC,WAAmB,GAAG,IAAI,WAAW,OAAO,MAAM;AAAA,UACtD;AAAA,QACF;AAAA,MACF,WAAW,aAAa;AACtB,YAAI,IAAI,SAAS,GAAG,GAAG;AACrB,gBAAM,SAAS,IAAI,MAAM,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,OAAO;AAChE,UAAC,WAAmB,GAAG,IAAI,EAAE,KAAK,OAAO;AAAA,QAC5C,OAAO;AACL,gBAAM,SAAS,kBAAkB,GAAG;AACnC,UAAC,WAAmB,GAAG,IAAI,WAAW,OAAO,MAAM;AAAA,QACtD;AAAA,MACF,OAAO;AACL,YAAI,CAAC,MAAM,cAAc,cAAc,cAAc,QAAQ,SAAS,OAAO,EAAE,SAAS,GAAG,GAAG;AAC5F;AAAC,UAAC,WAAmB,GAAG,IAAI;AAAA,QAC9B;AAAA,MACF;AAAA,IACF;AAEA,QAAI,mBAAmB,gBAAgB,QAAQ;AAC7C,MAAC,WAAmB,kBAAkB,EAAE,KAAK,gBAAgB;AAAA,IAC/D;AACA,UAAM,QAAsB;AAAA,MAC1B,UAAU,KAAK;AAAA,MACf,qBAAqB;AAAA,MACrB,MAAM,EAAE,MAAM,SAAS;AAAA,MACvB,MAAM,CAAC,EAAE,OAAO,WAAkB,KAAK,QAAe,CAAC;AAAA,MACvD,SAAS;AAAA,MACT;AAAA,IACF;AACA,QAAI,mBAAmB,gBAAgB,QAAQ;AAC7C,YAAM,kBAAkB;AAAA,IAC1B;AAIA,QAAI,eAAgB,OAAM,2BAA2B;AACrD,eAAW,CAAC,GAAG,CAAC,KAAK,UAAW,aAAY,GAAG,GAAG,cAAc;AAChE,UAAM,MAAM,MAAM,GAAG,MAAM,UAAiB,KAAK;AACjD,UAAM,WAAW,IAAI,SAAS,CAAC;AAC/B,UAAM,gBAAgB,SAAS,IAAI,MAAM;AACzC,UAAM,gBAAgB,SAAS,IAAI,UAAU;AAM7C,QAAI,kBAAkB,cAAc,QAAQ;AAC1C,UAAI;AACF,cAAM,YAAY,cACf,IAAI,CAAC,OAAY,IAAI,EAAE,EACvB,OAAO,CAAC,MAAwB,OAAO,MAAM,YAAY,EAAE,SAAS,CAAC;AACxE,YAAI,UAAU,QAAQ;AACpB,gBAAM,KAAK,GAAG,UAAU;AACxB,gBAAM,OAAO,MAAM,GAChB,WAAW,yBAAgC,EAC3C,OAAO,CAAC,aAAoB,YAAmB,CAAC,EAChD,MAAM,eAAsB,KAAK,QAAQ,EACzC,MAAM,aAAoB,MAAM,SAAgB,EAChD,QAAQ;AACX,gBAAM,cAAc,oBAAI,IAAoB;AAC5C,qBAAW,OAAO,MAAe;AAC/B,kBAAM,QAAQ,KAAK;AACnB,kBAAM,MAAM,iBAAiB,OAAO,MAAM,YAAY,IAAK,OAAO,UAAU,YAAY,MAAM,SAAS,IAAI,QAAQ;AACnH,gBAAI,OAAO,KAAK,UAAW,aAAY,IAAI,OAAO,IAAI,SAAS,GAAG,GAAG;AAAA,UACvE;AACA,qBAAW,QAAQ,eAAwB;AACzC,kBAAM,MAAM,YAAY,IAAI,OAAO,MAAM,EAAE,CAAC;AAC5C,gBAAI,KAAK;AACP,mBAAK,aAAa;AAClB,mBAAK,YAAY;AAAA,YACnB;AAAA,UACF;AAAA,QACF;AAAA,MACF,QAAQ;AAAA,MAA8E;AAAA,IACxF;AAEA,UAAM,QAAQ,OAAO,IAAI,UAAU,WAAW,IAAI,QAAQ,SAAS;AACnE,UAAM,oBAAoB,IAAI,YAAY;AAC1C,UAAM,UAAU;AAAA,MACd,OAAO;AAAA,MACP;AAAA,MACA,MAAM,IAAI,QAAQ;AAAA,MAClB,UAAU;AAAA,MACV,YAAY,KAAK,KAAK,SAAS,qBAAqB,EAAE;AAAA,IACxD;AAEA,QAAI,iBAAiB;AACnB,UAAI,cAAqB,sBAAsB,CAAC,GAAG,aAAa,IAAI,CAAC,GAAG,aAAa;AACrF,UAAI,QAAQ,YAAY,QAAQ;AAC9B,YAAI,WAAW;AACf,eAAO,YAAY,SAAS,OAAO;AACjC,gBAAM,UAAU,MAAM,GAAG,MAAM,UAAiB;AAAA,YAC9C,GAAG;AAAA,YACH,MAAM,EAAE,MAAM,UAAU,SAAS;AAAA,UACnC,CAAC;AACD,gBAAM,eAAe,QAAQ,SAAS,CAAC;AACvC,cAAI,CAAC,aAAa,OAAQ;AAC1B,gBAAM,gBAAgB,aAAa,IAAI,MAAM;AAC7C,gBAAM,gBAAgB,aAAa,IAAI,UAAU;AACjD,gBAAM,YAAY,sBAAsB,gBAAgB;AACxD,sBAAY,KAAK,GAAG,SAAS;AAC7B,cAAI,UAAU,SAAS,SAAU;AACjC,sBAAY;AAAA,QACd;AAAA,MACF;AACA,YAAM,WAAW;AAAA,QACf,SAAS,cAAc,WAAW;AAAA,QAClC,MAAM;AAAA,MACR;AACA,YAAM,eAAe,sBAAsB,GAAG,YAAY,SAAS,UAAU,YAAY;AACzF,YAAM,aAAa,gBAAgB,UAAU,eAAe;AAC5D,YAAM,WAAW,sBAAsB,cAAc,eAAe;AACpE,aAAO,IAAI,SAAS,WAAW,MAAM;AAAA,QACnC,SAAS;AAAA,UACP,gBAAgB,WAAW;AAAA,UAC3B,uBAAuB,yBAAyB,QAAQ;AAAA,QAC1D;AAAA,MACF,CAAC;AAAA,IACH;AAEA,WAAO,aAAa,KAAK,OAAO;AAAA,EAClC,SAAS,GAAG;AACV,QAAI,gBAAgB,CAAC,EAAG,QAAO,aAAa,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC;AAC7E,QAAI;AAAE,cAAQ,MAAM,gCAAgC,CAAC;AAAA,IAAE,QAAQ;AAAA,IAAC;AAChE,WAAO,aAAa,KAAK,EAAE,OAAO,wBAAwB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC9E;AACF;AAEA,MAAM,iBAAiB,EAAE,OAAO;AAAA,EAC9B,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EAC1B,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,EACrC,QAAQ,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,IAAI,CAAC,EAAE,QAAQ,CAAC,CAAC;AAClD,CAAC;AAED,MAAM,gBAAgB,EAAE,OAAO;AAAA,EAC7B,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EAC1B,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EAC1B,QAAQ,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,IAAI,CAAC,EAAE,QAAQ,CAAC,CAAC;AAClD,CAAC;AAED,MAAM,yBAAyB,EAAE,OAAO;AAAA,EACtC,IAAI,EAAE,QAAQ,IAAI;AAAA,EAClB,MAAM,EACH,OAAO;AAAA,IACN,UAAU,EAAE,OAAO;AAAA,IACnB,UAAU,EAAE,OAAO;AAAA,EACrB,CAAC,EACA,SAAS;AACd,CAAC;AAED,eAAsB,KAAK,KAAc;AACvC,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,QAAQ,CAAC,KAAK,SAAU,QAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAEhG,MAAI;AACJ,MAAI;AAAE,WAAO,MAAM,IAAI,KAAK;AAAA,EAAE,QAAQ;AAAE,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAAE;AAC7G,QAAM,SAAS,eAAe,UAAU,IAAI;AAC5C,MAAI,CAAC,OAAO,QAAS,QAAO,aAAa,KAAK,EAAE,OAAO,qBAAqB,SAAS,OAAO,MAAM,QAAQ,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAC9H,QAAM,EAAE,SAAS,IAAI,OAAO;AAC5B,MAAI,EAAE,UAAU,OAAO,IAAI,OAAO;AAElC,MAAI;AACF,UAAM,EAAE,QAAQ,IAAI,MAAM,uBAAuB;AACjD,UAAM,KAAK,QAAQ,YAAY;AAC/B,UAAM,KAAK,QAAQ,IAAI;AACvB,UAAM,OAAO,QAAQ,aAAa;AAClC,UAAM,QAAQ,MAAM,yBAAyB,EAAE,IAAI,MAAM,MAAM,YAAY,mCAAmC,GAAG,EAAE,CAAC;AACpH,UAAM,cAAc,MAAM,cAAc,KAAK;AAC7C,QAAI,CAAC,YAAa,QAAO,aAAa,KAAK,EAAE,OAAO,mCAAmC,GAAG,EAAE,QAAQ,IAAI,CAAC;AACzG,UAAM,aAAa,MAAM,sBAAsB,IAAI,QAAQ;AAC3D,QAAI,eAAe,SAAU,QAAO,6BAA6B,QAAQ;AACzE,UAAM,iBAAiB,eAAe;AACtC,UAAM,0BAA0B,EAAE,MAAM,UAAU,QAAQ,UAAU,gBAAgB,KAAK,CAAC;AAC1F,UAAM,OAAO,gBAAgB,MAAM;AAGnC,QAAI;AACF,YAAM,EAAE,gCAAgC,IAAI,MAAM,OAAO,mBAAmB;AAC5E,YAAM,QAAQ,MAAM,gCAAgC,IAAI,EAAE,UAAU,gBAAgB,aAAa,UAAU,KAAK,UAAW,QAAQ,MAAM,sBAAsB,KAAK,CAAC;AACrK,UAAI,CAAC,MAAM,GAAI,QAAO,aAAa,KAAK,EAAE,OAAO,qBAAqB,QAAQ,MAAM,YAAY,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACpH,QAAQ;AAAA,IAAiC;AAEzC,UAAM,sBAAsB,MAAM;AAChC,YAAM,MAAM,OAAO,YAAY,EAAE,EAAE,KAAK;AACxC,UAAI,CAAC,IAAK,QAAO;AACjB,YAAM,MAAM,IAAI,YAAY;AAC5B,UAAI,QAAQ,YAAY,QAAQ,SAAS,QAAQ,UAAU,QAAQ,YAAa,QAAO;AAEvF,YAAM,OAAO;AACb,aAAO,KAAK,KAAK,GAAG,IAAI,MAAM;AAAA,IAChC,GAAG;AACH,UAAM,EAAE,GAAG,IAAI,MAAM,GAAG,yBAAyB;AAAA,MAC/C;AAAA,MACA,UAAU;AAAA,MACV,gBAAgB;AAAA,MAChB,UAAU,KAAK;AAAA,MACf,QAAQ;AAAA,IACV,CAAC;AAED,WAAO,aAAa,KAAK,EAAE,IAAI,MAAM,MAAM,EAAE,UAAU,UAAU,GAAG,EAAE,CAAC;AAAA,EACzE,SAAS,GAAG;AACV,QAAI,gBAAgB,CAAC,EAAG,QAAO,aAAa,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC;AAC7E,QAAI;AAAE,cAAQ,MAAM,iCAAiC,CAAC;AAAA,IAAE,QAAQ;AAAA,IAAC;AACjE,WAAO,aAAa,KAAK,EAAE,OAAO,wBAAwB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC9E;AACF;AAGA,SAAS,aAAa,MAAmI;AACvJ,MAAI,CAAC,QAAQ,OAAO,SAAS,SAAU,QAAO,EAAE,IAAI,OAAO,OAAO,eAAe;AACjF,QAAM,WAAW,OAAO,KAAK,aAAa,YAAY,KAAK,SAAS,SAAS,KAAK,WAAW;AAC7F,QAAM,WAAW,OAAO,KAAK,aAAa,YAAY,KAAK,SAAS,SAAS,KAAK,WAAW;AAC7F,QAAM,SAAU,KAAK,UAAU,OAAO,KAAK,WAAW,WAAY,KAAK,SAAgC,CAAC;AACxG,MAAI,CAAC,YAAY,CAAC,SAAU,QAAO,EAAE,IAAI,OAAO,OAAO,qCAAqC;AAC5F,SAAO,EAAE,IAAI,MAAM,MAAM,EAAE,UAAU,UAAU,OAAO,EAAE;AAC1D;AAEA,eAAsB,IAAI,KAAc;AACtC,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,QAAQ,CAAC,KAAK,SAAU,QAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAEhG,MAAI;AACJ,MAAI;AAAE,WAAO,MAAM,IAAI,KAAK;AAAA,EAAE,QAAQ;AAAE,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAAE;AAC7G,QAAM,SAAS,aAAa,IAAI;AAChC,MAAI,CAAC,OAAO,GAAI,QAAO,aAAa,KAAK,EAAE,OAAO,OAAO,MAAM,GAAG,EAAE,QAAQ,IAAI,CAAC;AACjF,QAAM,EAAE,UAAU,UAAU,OAAO,IAAI,OAAO;AAE9C,MAAI;AACF,UAAM,EAAE,QAAQ,IAAI,MAAM,uBAAuB;AACjD,UAAM,KAAK,QAAQ,YAAY;AAC/B,UAAM,KAAK,QAAQ,IAAI;AACvB,UAAM,OAAO,QAAQ,aAAa;AAClC,UAAM,QAAQ,MAAM,yBAAyB,EAAE,IAAI,MAAM,MAAM,YAAY,mCAAmC,GAAG,EAAE,CAAC;AACpH,UAAM,cAAc,MAAM,cAAc,KAAK;AAC7C,QAAI,CAAC,YAAa,QAAO,aAAa,KAAK,EAAE,OAAO,mCAAmC,GAAG,EAAE,QAAQ,IAAI,CAAC;AACzG,UAAM,aAAa,MAAM,sBAAsB,IAAI,QAAQ;AAC3D,QAAI,eAAe,SAAU,QAAO,6BAA6B,QAAQ;AACzE,UAAM,iBAAiB,eAAe;AACtC,UAAM,0BAA0B,EAAE,MAAM,UAAU,QAAQ,UAAU,gBAAgB,KAAK,CAAC;AAC1F,UAAM,OAAO,gBAAgB,MAAM;AAGnC,QAAI;AACF,YAAM,EAAE,gCAAgC,IAAI,MAAM,OAAO,mBAAmB;AAC5E,YAAM,QAAQ,MAAM,gCAAgC,IAAI,EAAE,UAAU,gBAAgB,aAAa,UAAU,KAAK,UAAW,QAAQ,MAAM,sBAAsB,KAAK,CAAC;AACrK,UAAI,CAAC,MAAM,GAAI,QAAO,aAAa,KAAK,EAAE,OAAO,qBAAqB,QAAQ,MAAM,YAAY,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACpH,QAAQ;AAAA,IAAiC;AAGzC,UAAM,SAAS;AACf,UAAM,MAAM,OAAO,YAAY,EAAE,EAAE,KAAK;AACxC,UAAM,MAAM,IAAI,YAAY;AAC5B,UAAM,aAAa,CAAC,OAAO,QAAQ,YAAY,QAAQ,SAAS,QAAQ,UAAU,QAAQ;AAC1F,UAAM,SAAS,OAAO,KAAK,GAAG;AAC9B,QAAI,cAAc,CAAC,QAAQ;AACzB,YAAM,UAAU,MAAM,GAAG,yBAAyB;AAAA,QAChD;AAAA,QACA,UAAU;AAAA,QACV,gBAAgB;AAAA,QAChB,UAAU,KAAK;AAAA,QACf,QAAQ;AAAA,MACV,CAAC;AACD,aAAO,aAAa,KAAK,EAAE,IAAI,MAAM,MAAM,EAAE,UAAU,UAAU,QAAQ,GAAG,EAAE,CAAC;AAAA,IACjF;AAEA,QAAI;AACF,YAAM,mBAAmB,MAAM,gCAAgC,IAAI;AAAA,QACjE,YAAY;AAAA,QACZ,UAAU;AAAA,QACV,gBAAgB;AAAA,MAClB,CAAC;AACD,mCAA6B;AAAA,QAC3B,cAAc;AAAA,QACd,YAAY;AAAA,QACZ,SAAS;AAAA,QACT,SAAS;AAAA,MACX,CAAC;AAAA,IACH,SAAS,WAAW;AAClB,UAAI,gBAAgB,SAAS,GAAG;AAC9B,eAAO,aAAa,KAAK,UAAU,MAAM,EAAE,QAAQ,UAAU,OAAO,CAAC;AAAA,MACvE;AACA,YAAM;AAAA,IACR;AAEA,UAAM,GAAG,yBAAyB;AAAA,MAChC;AAAA,MACA,UAAU;AAAA,MACV,gBAAgB;AAAA,MAChB,UAAU,KAAK;AAAA,MACf,QAAQ;AAAA,IACV,CAAC;AACD,WAAO,aAAa,KAAK,EAAE,IAAI,MAAM,MAAM,EAAE,UAAU,UAAU,IAAI,EAAE,CAAC;AAAA,EAC1E,SAAS,GAAG;AACV,QAAI,gBAAgB,CAAC,EAAG,QAAO,aAAa,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC;AAC7E,WAAO,aAAa,KAAK,EAAE,OAAO,wBAAwB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC9E;AACF;AAEA,MAAM,mBAAmB,EAAE,OAAO;AAAA,EAChC,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EAC1B,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC;AAC5B,CAAC;AAED,eAAsB,OAAO,KAAc;AACzC,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,QAAQ,CAAC,KAAK,SAAU,QAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAEhG,QAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,QAAM,aAAa,IAAI,aAAa,IAAI,UAAU;AAClD,QAAM,aAAa,IAAI,aAAa,IAAI,UAAU;AAClD,MAAI,UAAe,cAAc,aAAa,EAAE,UAAU,YAAY,UAAU,WAAW,IAAI;AAC/F,MAAI,CAAC,SAAS;AACZ,QAAI;AAAE,gBAAU,MAAM,IAAI,KAAK;AAAA,IAAE,QAAQ;AAAE,gBAAU;AAAA,IAAK;AAAA,EAC5D;AACA,QAAM,SAAS,iBAAiB,UAAU,OAAO;AACjD,MAAI,CAAC,OAAO,QAAS,QAAO,aAAa,KAAK,EAAE,OAAO,qBAAqB,SAAS,OAAO,MAAM,QAAQ,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAC9H,QAAM,EAAE,UAAU,SAAS,IAAI,OAAO;AAEtC,MAAI;AACF,UAAM,EAAE,QAAQ,IAAI,MAAM,uBAAuB;AACjD,UAAM,KAAK,QAAQ,YAAY;AAC/B,UAAM,KAAK,QAAQ,IAAI;AACvB,UAAM,OAAO,QAAQ,aAAa;AAClC,UAAM,QAAQ,MAAM,yBAAyB,EAAE,IAAI,MAAM,MAAM,YAAY,mCAAmC,GAAG,EAAE,CAAC;AACpH,UAAM,cAAc,MAAM,cAAc,KAAK;AAC7C,QAAI,CAAC,YAAa,QAAO,aAAa,KAAK,EAAE,OAAO,mCAAmC,GAAG,EAAE,QAAQ,IAAI,CAAC;AACzG,UAAM,aAAa,MAAM,sBAAsB,IAAI,QAAQ;AAC3D,QAAI,eAAe,SAAU,QAAO,6BAA6B,QAAQ;AACzE,UAAM,iBAAiB,eAAe;AACtC,UAAM,0BAA0B,EAAE,MAAM,UAAU,QAAQ,UAAU,gBAAgB,KAAK,CAAC;AAE1F,QAAI;AACF,YAAM,mBAAmB,MAAM,gCAAgC,IAAI;AAAA,QACjE,YAAY;AAAA,QACZ,UAAU;AAAA,QACV,gBAAgB;AAAA,MAClB,CAAC;AACD,mCAA6B;AAAA,QAC3B,cAAc;AAAA,QACd,YAAY;AAAA,QACZ,SAAS;AAAA,QACT,SAAS;AAAA,MACX,CAAC;AAAA,IACH,SAAS,WAAW;AAClB,UAAI,gBAAgB,SAAS,GAAG;AAC9B,eAAO,aAAa,KAAK,UAAU,MAAM,EAAE,QAAQ,UAAU,OAAO,CAAC;AAAA,MACvE;AACA,YAAM;AAAA,IACR;AAEA,UAAM,GAAG,yBAAyB,EAAE,UAAU,UAAU,gBAAgB,aAAa,UAAU,KAAK,UAAW,MAAM,KAAK,CAAC;AAC3H,WAAO,aAAa,KAAK,EAAE,IAAI,KAAK,CAAC;AAAA,EACvC,SAAS,GAAG;AACV,QAAI,gBAAgB,CAAC,EAAG,QAAO,aAAa,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC;AAC7E,WAAO,aAAa,KAAK,EAAE,OAAO,wBAAwB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC9E;AACF;AAEA,SAAS,gBAAgB,OAAiD;AACxE,QAAM,MAA2B,CAAC;AAClC,aAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,SAAS,CAAC,CAAC,GAAG;AAChD,UAAM,MAAM,EAAE,WAAW,KAAK,IAAI,EAAE,QAAQ,QAAQ,EAAE,IAAI;AAC1D,QAAI,GAAG,IAAI;AAAA,EACb;AACA,SAAO;AACT;AAEA,MAAM,uBAAuB,EAAE,OAAO;AAAA,EACpC,IAAI,EAAE,QAAQ,IAAI;AACpB,CAAC;AAED,MAAM,cAAc,EAAE,OAAO;AAAA,EAC3B,OAAO,EAAE,OAAO;AAClB,CAAC,EAAE,YAAY;AAER,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aACE;AAAA,MACF,OAAO;AAAA,MACP,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ;AAAA,QACV;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ;AAAA,QACV;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ;AAAA,QACV;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aACE;AAAA,MACF,aAAa;AAAA,QACX,aAAa;AAAA,QACb,QAAQ;AAAA,MACV;AAAA,MACA,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ;AAAA,QACV;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ;AAAA,QACV;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ;AAAA,QACV;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aACE;AAAA,MACF,aAAa;AAAA,QACX,aAAa;AAAA,QACb,QAAQ;AAAA,MACV;AAAA,MACA,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ;AAAA,QACV;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ;AAAA,QACV;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ;AAAA,QACV;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA,QAAQ;AAAA,MACN,SAAS;AAAA,MACT,aAAa;AAAA,MACb,aAAa;AAAA,QACX,aAAa;AAAA,QACb,QAAQ;AAAA,MACV;AAAA,MACA,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ;AAAA,QACV;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ;AAAA,QACV;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ;AAAA,QACV;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ;AAAA,QACV;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;",
   "names": ["parsed"]
 }

package/dist/modules/entities/backend/entities/user/[entityId]/records/page.js

@@ -14,6 +14,7 @@ import { flash } from "@open-mercato/ui/backend/FlashMessages";
 import { raiseCrudError } from "@open-mercato/ui/backend/utils/serverErrors";
 import { useOrganizationScopeVersion } from "@open-mercato/shared/lib/frontend/useOrganizationScope";
 import { useConfirmDialog } from "@open-mercato/ui/backend/confirm-dialog";
+import { useGuardedMutation } from "@open-mercato/ui/backend/injection/useGuardedMutation";
 import { useT } from "@open-mercato/shared/lib/i18n/context";
 import { ErrorMessage, LoadingMessage } from "@open-mercato/ui/backend/detail";
 import { useRecordsEntityGuard } from "@open-mercato/core/modules/entities/components/useRecordsEntityGuard";
@@ -41,6 +42,7 @@ function RecordsPage({ params }) {
   return /* @__PURE__ */ jsx(RecordsPageInner, { params });
 }
 function RecordsPageInner({ params }) {
+  const t = useT();
   const entityId = decodeURIComponent(params?.entityId || "");
   const [sorting, setSorting] = React.useState([{ id: "id", desc: false }]);
   const [page, setPage] = React.useState(1);
@@ -54,6 +56,11 @@ function RecordsPageInner({ params }) {
   const [loading, setLoading] = React.useState(false);
   const scopeVersion = useOrganizationScopeVersion();
   const { confirm, ConfirmDialogElement } = useConfirmDialog();
+  const deleteMutationContextId = `entities.user.records.${entityId}:single-delete`;
+  const { runMutation: runDeleteMutation, retryLastMutation: retryDeleteMutation } = useGuardedMutation({
+    contextId: deleteMutationContextId,
+    blockedMessage: t("ui.forms.flash.saveBlocked", "Save blocked by validation")
+  });
   const { data: cfDefs = [] } = useCustomFieldDefs(entityId, {
     enabled: Boolean(entityId),
     keyExtras: [scopeVersion]
@@ -300,22 +307,33 @@ export RECORD_ID="<record uuid>"` }) }),
               items: [
                 { id: "edit", label: "Edit", href: `/backend/entities/user/${encodeURIComponent(entityId)}/records/${encodeURIComponent(String(row.id))}` },
                 { id: "delete", label: "Delete", destructive: true, onSelect: async () => {
+                  const recordId = String(row.id);
                   try {
                     const confirmed = await confirm({
                       title: "Delete this record?",
                       variant: "destructive"
                     });
                     if (!confirmed) return;
-                    const deleteCall = await withScopedApiRequestHeaders(
-                      buildOptimisticLockHeader(row.updatedAt),
-                      () => apiCall(
-                        `/api/entities/records?entityId=${encodeURIComponent(entityId)}&recordId=${encodeURIComponent(String(row.id))}`,
-                        { method: "DELETE" }
-                      )
-                    );
-                    if (!deleteCall.ok) {
-                      await raiseCrudError(deleteCall.response, "Failed to delete record");
-                    }
+                    await runDeleteMutation({
+                      operation: async () => {
+                        const deleteCall = await withScopedApiRequestHeaders(
+                          buildOptimisticLockHeader(row.updatedAt),
+                          () => apiCall(
+                            `/api/entities/records?entityId=${encodeURIComponent(entityId)}&recordId=${encodeURIComponent(recordId)}`,
+                            { method: "DELETE" }
+                          )
+                        );
+                        if (!deleteCall.ok) {
+                          await raiseCrudError(deleteCall.response, "Failed to delete record");
+                        }
+                      },
+                      context: {
+                        formId: deleteMutationContextId,
+                        resourceKind: "entities.record",
+                        resourceId: recordId,
+                        retryLastMutation: retryDeleteMutation
+                      }
+                    });
                     const j = await readApiResultOrThrow(
                       `/api/entities/records?entityId=${encodeURIComponent(entityId)}&page=${page}&pageSize=${pageSize}`,
                       void 0,

package/dist/modules/entities/backend/entities/user/[entityId]/records/page.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../../../src/modules/entities/backend/entities/user/%5BentityId%5D/records/page.tsx"],
-  "sourcesContent": ["\"use client\"\nimport * as React from 'react'\nimport { useSearchParams } from 'next/navigation'\nimport type { ColumnDef, SortingState } from '@tanstack/react-table'\nimport { filterCustomFieldDefs, useCustomFieldDefs } from '@open-mercato/ui/backend/utils/customFieldDefs'\nimport { Page, PageBody } from '@open-mercato/ui/backend/Page'\nimport { DataTable, type DataTableExportFormat } from '@open-mercato/ui/backend/DataTable'\nimport type { PreparedExport } from '@open-mercato/shared/lib/crud/exporters'\nimport type { FilterDef } from '@open-mercato/ui/backend/FilterBar'\nimport { ContextHelp } from '@open-mercato/ui/backend/ContextHelp'\nimport { Button } from '@open-mercato/ui/primitives/button'\nimport { RowActions } from '@open-mercato/ui/backend/RowActions'\nimport Link from 'next/link'\nimport { apiCall, readApiResultOrThrow, withScopedApiRequestHeaders } from '@open-mercato/ui/backend/utils/apiCall'\nimport { buildOptimisticLockHeader } from '@open-mercato/ui/backend/utils/optimisticLock'\nimport { flash } from '@open-mercato/ui/backend/FlashMessages'\nimport { raiseCrudError } from '@open-mercato/ui/backend/utils/serverErrors'\nimport { useOrganizationScopeVersion } from '@open-mercato/shared/lib/frontend/useOrganizationScope'\nimport { useConfirmDialog } from '@open-mercato/ui/backend/confirm-dialog'\nimport { useT } from '@open-mercato/shared/lib/i18n/context'\nimport { ErrorMessage, LoadingMessage } from '@open-mercato/ui/backend/detail'\nimport { useRecordsEntityGuard } from '@open-mercato/core/modules/entities/components/useRecordsEntityGuard'\n\ntype RecordsResponse = {\n  items: any[]\n  total: number\n  page: number\n  pageSize: number\n  totalPages: number\n}\n\nfunction toCsvUrl(base: string, params: URLSearchParams) {\n  // Build a relative URL to avoid SSR/CSR origin mismatch hydration issues\n  const p = new URLSearchParams(params)\n  p.set('format', 'csv')\n  const qs = p.toString()\n  return qs ? `${base}?${qs}` : base\n}\n\nfunction normalizeCell(v: any): string {\n  if (Array.isArray(v)) return v.filter((x) => x != null && x !== '').join(', ')\n  if (v === true) return 'Yes'\n  if (v === false) return 'No'\n  if (v == null) return ''\n  if (v instanceof Date) return v.toISOString()\n  return String(v)\n}\n\nexport default function RecordsPage({ params }: { params: { entityId?: string } }) {\n  const t = useT()\n  const entityId = decodeURIComponent(params?.entityId || '')\n  const guard = useRecordsEntityGuard(entityId)\n  if (guard !== 'allowed') {\n    return (\n      <Page>\n        <PageBody>\n          {guard === 'blocked' ? (\n            <ErrorMessage label={t('entities.userEntities.records.errors.systemEntity', 'This entity is system-managed. Records are available for custom entities only.')} />\n          ) : (\n            <LoadingMessage label={t('entities.userEntities.records.loading', 'Loading records...')} />\n          )}\n        </PageBody>\n      </Page>\n    )\n  }\n  return <RecordsPageInner params={params} />\n}\n\nfunction RecordsPageInner({ params }: { params: { entityId?: string } }) {\n  const entityId = decodeURIComponent(params?.entityId || '')\n  const [sorting, setSorting] = React.useState<SortingState>([{ id: 'id', desc: false }])\n  const [page, setPage] = React.useState(1)\n  const [pageSize, setPageSize] = React.useState(50)\n  const [search, setSearch] = React.useState('')\n  const [filterValues, setFilterValues] = React.useState<Record<string, any>>({})\n  const [columns, setColumns] = React.useState<ColumnDef<any>[]>([])\n  const [rawData, setRawData] = React.useState<any[]>([])\n  const [total, setTotal] = React.useState(0)\n  const [totalPages, setTotalPages] = React.useState(1)\n  const [loading, setLoading] = React.useState(false)\n  const scopeVersion = useOrganizationScopeVersion()\n  const { confirm, ConfirmDialogElement } = useConfirmDialog()\n  const { data: cfDefs = [] } = useCustomFieldDefs(entityId, {\n    enabled: Boolean(entityId),\n    keyExtras: [scopeVersion],\n  })\n\n  // Fetch records whenever paging/sorting/filters change (do NOT refetch on cfDefs/search changes)\n  React.useEffect(() => {\n    let cancelled = false\n    const run = async () => {\n      setLoading(true)\n      try {\n        const params = new URLSearchParams()\n        params.set('entityId', entityId)\n        params.set('page', String(page))\n        params.set('pageSize', String(pageSize))\n        const s = sorting?.[0]\n        if (s?.id) {\n          params.set('sortField', String(s.id))\n          params.set('sortDir', s.desc ? 'desc' : 'asc')\n        }\n        // Flatten filter values into query params\n        for (const [k, v] of Object.entries(filterValues)) {\n          if (v == null) continue\n          if (Array.isArray(v)) {\n            if (v.length) params.set(k, v.join(','))\n          } else if (typeof v === 'object') {\n            // dateRange-like shapes are not supported generically here; skip\n          } else {\n            params.set(k, String(v))\n          }\n        }\n        const j = await readApiResultOrThrow<RecordsResponse>(\n          `/api/entities/records?${params.toString()}`,\n          undefined,\n          {\n            errorMessage: 'Failed to load records',\n            fallback: {\n              items: [],\n              total: 0,\n              page,\n              pageSize,\n              totalPages: 1,\n            },\n          },\n        )\n        if (!cancelled) {\n          setRawData(j.items || [])\n          setTotal(j.total)\n          setTotalPages(j.totalPages)\n        }\n      } catch (e) {\n        if (!cancelled) {\n          setRawData([])\n          setTotal(0)\n          setTotalPages(1)\n        }\n      } finally {\n        if (!cancelled) setLoading(false)\n      }\n    }\n    if (entityId) run()\n    return () => { cancelled = true }\n  }, [entityId, page, pageSize, sorting, filterValues, scopeVersion])\n\n  // Build columns from custom field definitions only (no data round-trip)\n  React.useEffect(() => {\n    const visibleDefs = filterCustomFieldDefs(cfDefs, 'list') as any\n    const maxVisible = 10\n    const cols: ColumnDef<any>[] = visibleDefs.map((d: any, idx: number) => ({\n      accessorKey: d.key,\n      header: d.label || d.key,\n      meta: { priority: idx < 4 ? 1 : idx < 6 ? 2 : idx < 8 ? 3 : idx < maxVisible ? 4 : 5 },\n      cell: ({ getValue }: { getValue: () => unknown }) => {\n        const v = getValue() as any\n        return <span className=\"truncate max-w-[24ch] inline-block align-top\" title={normalizeCell(v)}>{normalizeCell(v)}</span>\n      },\n    }))\n    // Ensure hidden 'id' column exists for sorting/state\n    const hasIdCol = cols.some((c) => (c as any).accessorKey === 'id' || (c as any).id === 'id')\n    if (!hasIdCol) cols.unshift({ accessorKey: 'id', header: 'ID', meta: { hidden: true, priority: 6 } } as any)\n    setColumns(cols)\n  }, [cfDefs])\n\n  // Client-side quick search filtering without triggering server refetch\n  const data = React.useMemo(() => {\n    if (!search.trim()) return rawData\n    const q = search.trim().toLowerCase()\n    return (rawData || []).filter((row: any) => {\n      const values = Object.values(row || {})\n      return values.some((v) => normalizeCell(v).toLowerCase().includes(q))\n    })\n  }, [rawData, search])\n\n  const viewExportColumns = React.useMemo(() => {\n    return (columns || [])\n      .map((col) => {\n        const accessorKey = (col as any).accessorKey\n        if (!accessorKey || typeof accessorKey !== 'string') return null\n        if ((col as any).meta?.hidden) return null\n        const header = typeof col.header === 'string'\n          ? col.header\n          : accessorKey.startsWith('cf_')\n            ? accessorKey.slice(3)\n            : accessorKey\n        return { field: accessorKey, header }\n      })\n      .filter((col): col is { field: string; header: string } => !!col)\n  }, [columns])\n\n  const buildFullExportUrl = React.useCallback((format: DataTableExportFormat) => {\n    const qp = new URLSearchParams({\n      entityId,\n      format,\n      exportScope: 'full',\n      all: 'true',\n    })\n    const sort = sorting?.[0]\n    if (sort?.id) {\n      qp.set('sortField', String(sort.id))\n      qp.set('sortDir', sort.desc ? 'desc' : 'asc')\n    }\n    return `/api/entities/records?${qp.toString()}`\n  }, [entityId, sorting])\n\n  const exportConfig = React.useMemo(() => {\n    const safeEntityId = entityId.replace(/[^a-z0-9_-]/gi, '_') || 'records'\n    return {\n      view: {\n        description: 'Exports the current list respecting filters and column visibility.',\n        prepare: async (): Promise<{ prepared: PreparedExport; filename: string }> => {\n          const rowsForExport = data.map((row) => {\n            const out: Record<string, unknown> = {}\n            for (const col of viewExportColumns) {\n              out[col.field] = (row as Record<string, unknown>)[col.field]\n            }\n            return out\n          })\n          const prepared: PreparedExport = {\n            columns: viewExportColumns.map((col) => ({ field: col.field, header: col.header })),\n            rows: rowsForExport,\n          }\n          return { prepared, filename: `${safeEntityId}_view` }\n        },\n      },\n      full: {\n        description: 'Exports raw records with every field and custom field included.',\n        getUrl: (format: DataTableExportFormat) => buildFullExportUrl(format),\n        filename: () => `${safeEntityId}_full`,\n      },\n    }\n  }, [buildFullExportUrl, data, entityId, viewExportColumns])\n\n  const hasAnyFormFields = React.useMemo(() => filterCustomFieldDefs(cfDefs, 'form').length > 0, [cfDefs])\n  const actions = (\n    <>\n      <Button asChild variant=\"outline\" size=\"sm\">\n        <Link href={`/backend/entities/user/${encodeURIComponent(entityId)}`}>\n          Edit Entity Definition\n        </Link>\n      </Button>\n      {hasAnyFormFields && (\n        <Button asChild>\n          <Link href={`/backend/entities/user/${encodeURIComponent(entityId)}/records/create`}>\n            Create\n          </Link>\n        </Button>\n      )}\n    </>\n  )\n\n  // Ensure filters are visible even if no custom fields are marked filterable\n  const baseFilters: FilterDef[] = React.useMemo(() => ([\n    { id: 'id', label: 'ID', type: 'text' },\n  ]), [])\n\n  return (\n    <Page>\n      <PageBody>\n        <ContextHelp bulb title=\"API: Manage Records via cURL\" className=\"mb-4\">\n          <p className=\"mb-2\">\n            Interact with this custom entity via the backend API using cURL. Use API keys for machine-to-machine access\u2014mint one from the{' '}\n            <a className=\"underline\" target=\"_blank\" rel=\"noreferrer\" href=\"https://docs.openmercato.com/user-guide/api-keys\">\n              Managing API keys guide\n            </a>{' '}\n            or the{' '}\n            <a className=\"underline\" target=\"_blank\" rel=\"noreferrer\" href=\"https://docs.openmercato.com/cli/api-keys\">\n              API keys CLI documentation\n            </a>{' '}\n            before running these calls.\n          </p>\n          <div className=\"space-y-2\">\n            <div>\n              <div className=\"font-medium mb-1\">1) Configure environment variables</div>\n              <pre className=\"bg-muted p-3 rounded text-xs overflow-auto\"><code>{`export BASE_URL=\"http://localhost:3000/api\"\nexport API_KEY=\"<paste API key secret here>\"           # scoped with entities.features\nexport ENTITY_ID=\"${entityId}\"\nexport RECORD_ID=\"<record uuid>\"`}</code></pre>\n              <p className=\"text-muted-foreground mt-1\">\n                Need a new key? Follow the{' '}\n                <a className=\"underline\" target=\"_blank\" rel=\"noreferrer\" href=\"https://docs.openmercato.com/user-guide/api-keys\">\n                  Managing API keys\n                </a>{' '}\n                walkthrough or mint one via{' '}\n                <a className=\"underline\" target=\"_blank\" rel=\"noreferrer\" href=\"https://docs.openmercato.com/cli/api-keys\">\n                  mercato api_keys add\n                </a>\n                .\n              </p>\n            </div>\n\n            <div>\n              <div className=\"font-medium mb-1\">2) List records</div>\n              <pre className=\"bg-muted p-3 rounded text-xs overflow-auto\"><code>{`curl -s -H \"X-Api-Key: $API_KEY\" \\\n  \"$BASE_URL/entities/records?entityId=$ENTITY_ID\" | jq`}</code></pre>\n            </div>\n\n            <div>\n              <div className=\"font-medium mb-1\">3) Read a single record (by id)</div>\n              <pre className=\"bg-muted p-3 rounded text-xs overflow-auto\"><code>{`curl -s -H \"X-Api-Key: $API_KEY\" \\\n  \"$BASE_URL/entities/records?entityId=$ENTITY_ID&id=$RECORD_ID\" | jq`}</code></pre>\n              <p className=\"text-muted-foreground mt-1\">Note: Response is a list; filter by <code>id</code> to get a single item.</p>\n            </div>\n\n            <div>\n              <div className=\"font-medium mb-1\">4) Create a record</div>\n              <pre className=\"bg-muted p-3 rounded text-xs overflow-auto\"><code>{`curl -s -X POST \\\n  -H \"X-Api-Key: $API_KEY\" \\\n  -H \"Content-Type: application/json\" \\\n  -d \"{\n    \\\\\"entityId\\\\\": \\\\\"$ENTITY_ID\\\\\",\n    \\\\\"values\\\\\": {\n      \\\\\"field_one\\\\\": \\\\\"Example\\\\\",\n      \\\\\"field_two\\\\\": 123\n    }\n  }\" \\\n  \"$BASE_URL/entities/records\" | jq`}</code></pre>\n              <p className=\"text-muted-foreground mt-1\">For custom entities, send field keys without the <code>cf_</code> prefix. The API normalizes this server-side.</p>\n            </div>\n\n            <div>\n              <div className=\"font-medium mb-1\">5) Update a record</div>\n              <pre className=\"bg-muted p-3 rounded text-xs overflow-auto\"><code>{`curl -s -X PUT \\\n  -H \"X-Api-Key: $API_KEY\" \\\n  -H \"Content-Type: application/json\" \\\n  -d \"{\n    \\\\\"entityId\\\\\": \\\\\"$ENTITY_ID\\\\\",\n    \\\\\"recordId\\\\\": \\\\\"$RECORD_ID\\\\\",\n    \\\\\"values\\\\\": {\n      \\\\\"field_one\\\\\": \\\\\"Updated\\\\\"\n    }\n  }\" \\\n  \"$BASE_URL/entities/records\" | jq`}</code></pre>\n            </div>\n\n            <div>\n              <div className=\"font-medium mb-1\">6) Delete a record</div>\n              <pre className=\"bg-muted p-3 rounded text-xs overflow-auto\"><code>{`curl -s -X DELETE \\\n  -H \"X-Api-Key: $API_KEY\" \\\n  \"$BASE_URL/entities/records?entityId=$ENTITY_ID&recordId=$RECORD_ID\" | jq`}</code></pre>\n            </div>\n\n            <div className=\"text-muted-foreground\">\n              Security notes:\n              <ul className=\"list-disc pl-5 mt-1 space-y-1\">\n                <li>All endpoints require a valid API key. Keys inherit tenant, organization, and feature scope.</li>\n                <li>Rotate keys regularly and delete unused ones in the admin UI.</li>\n                <li>Store the secret in a secure vault; anyone with the header can act within the key&apos;s permissions.</li>\n              </ul>\n            </div>\n          </div>\n        </ContextHelp>\n        <DataTable\n          stickyActionsColumn\n          title={`Records: ${entityId}`}\n          entityId={entityId}\n          actions={actions}\n          columns={columns}\n          data={data}\n          perspective={{ tableId: `entities.user.records.${entityId}` }}\n          exporter={exportConfig}\n          filters={baseFilters}\n          filterValues={filterValues}\n          rowActions={(row) => (\n            <RowActions\n              items={[\n                { id: 'edit', label: 'Edit', href: `/backend/entities/user/${encodeURIComponent(entityId)}/records/${encodeURIComponent(String((row as any).id))}` },\n                { id: 'delete', label: 'Delete', destructive: true, onSelect: async () => {\n                  try {\n                    const confirmed = await confirm({\n                      title: 'Delete this record?',\n                      variant: 'destructive',\n                    })\n                    if (!confirmed) return\n                    const deleteCall = await withScopedApiRequestHeaders(\n                      buildOptimisticLockHeader((row as any).updatedAt),\n                      () => apiCall(\n                        `/api/entities/records?entityId=${encodeURIComponent(entityId)}&recordId=${encodeURIComponent(String((row as any).id))}`,\n                        { method: 'DELETE' },\n                      ),\n                    )\n                    if (!deleteCall.ok) {\n                      await raiseCrudError(deleteCall.response, 'Failed to delete record')\n                    }\n                    const j = await readApiResultOrThrow<RecordsResponse>(\n                      `/api/entities/records?entityId=${encodeURIComponent(entityId)}&page=${page}&pageSize=${pageSize}`,\n                      undefined,\n                      {\n                        errorMessage: 'Failed to reload records',\n                        fallback: { items: [], total: 0, page, pageSize, totalPages: 1 },\n                      },\n                    )\n                    setRawData(j.items || [])\n                    setTotal(j.total || 0)\n                    setTotalPages(j.totalPages || 1)\n                    flash('Record has been removed', 'success')\n                  } catch (error) {\n                    const message = error instanceof Error ? error.message : 'Failed to delete record'\n                    flash(message, 'error')\n                  }\n                } },\n              ]}\n            />\n          )}\n          sortable\n          sorting={sorting}\n          onSortingChange={setSorting}\n          searchValue={search}\n          onSearchChange={(v) => { setSearch(v); setPage(1) }}\n          onFiltersApply={(vals) => { setFilterValues(vals); setPage(1) }}\n          onFiltersClear={() => { setFilterValues({}); setPage(1) }}\n          pagination={{ page, pageSize, total, totalPages, onPageChange: setPage }}\n          isLoading={loading}\n        />\n      </PageBody>\n      {ConfirmDialogElement}\n    </Page>\n  )\n}\n"],
-  "mappings": ";AAyDY,SAmLR,UAnLQ,KAmLR,YAnLQ;AAxDZ,YAAY,WAAW;AAGvB,SAAS,uBAAuB,0BAA0B;AAC1D,SAAS,MAAM,gBAAgB;AAC/B,SAAS,iBAA6C;AAGtD,SAAS,mBAAmB;AAC5B,SAAS,cAAc;AACvB,SAAS,kBAAkB;AAC3B,OAAO,UAAU;AACjB,SAAS,SAAS,sBAAsB,mCAAmC;AAC3E,SAAS,iCAAiC;AAC1C,SAAS,aAAa;AACtB,SAAS,sBAAsB;AAC/B,SAAS,mCAAmC;AAC5C,SAAS,wBAAwB;AACjC,SAAS,YAAY;AACrB,SAAS,cAAc,sBAAsB;AAC7C,SAAS,6BAA6B;AAUtC,SAAS,SAAS,MAAc,QAAyB;AAEvD,QAAM,IAAI,IAAI,gBAAgB,MAAM;AACpC,IAAE,IAAI,UAAU,KAAK;AACrB,QAAM,KAAK,EAAE,SAAS;AACtB,SAAO,KAAK,GAAG,IAAI,IAAI,EAAE,KAAK;AAChC;AAEA,SAAS,cAAc,GAAgB;AACrC,MAAI,MAAM,QAAQ,CAAC,EAAG,QAAO,EAAE,OAAO,CAAC,MAAM,KAAK,QAAQ,MAAM,EAAE,EAAE,KAAK,IAAI;AAC7E,MAAI,MAAM,KAAM,QAAO;AACvB,MAAI,MAAM,MAAO,QAAO;AACxB,MAAI,KAAK,KAAM,QAAO;AACtB,MAAI,aAAa,KAAM,QAAO,EAAE,YAAY;AAC5C,SAAO,OAAO,CAAC;AACjB;AAEe,SAAR,YAA6B,EAAE,OAAO,GAAsC;AACjF,QAAM,IAAI,KAAK;AACf,QAAM,WAAW,mBAAmB,QAAQ,YAAY,EAAE;AAC1D,QAAM,QAAQ,sBAAsB,QAAQ;AAC5C,MAAI,UAAU,WAAW;AACvB,WACE,oBAAC,QACC,8BAAC,YACE,oBAAU,YACT,oBAAC,gBAAa,OAAO,EAAE,qDAAqD,gFAAgF,GAAG,IAE/J,oBAAC,kBAAe,OAAO,EAAE,yCAAyC,oBAAoB,GAAG,GAE7F,GACF;AAAA,EAEJ;AACA,SAAO,oBAAC,oBAAiB,QAAgB;AAC3C;AAEA,SAAS,iBAAiB,EAAE,OAAO,GAAsC;AACvE,QAAM,WAAW,mBAAmB,QAAQ,YAAY,EAAE;AAC1D,QAAM,CAAC,SAAS,UAAU,IAAI,MAAM,SAAuB,CAAC,EAAE,IAAI,MAAM,MAAM,MAAM,CAAC,CAAC;AACtF,QAAM,CAAC,MAAM,OAAO,IAAI,MAAM,SAAS,CAAC;AACxC,QAAM,CAAC,UAAU,WAAW,IAAI,MAAM,SAAS,EAAE;AACjD,QAAM,CAAC,QAAQ,SAAS,IAAI,MAAM,SAAS,EAAE;AAC7C,QAAM,CAAC,cAAc,eAAe,IAAI,MAAM,SAA8B,CAAC,CAAC;AAC9E,QAAM,CAAC,SAAS,UAAU,IAAI,MAAM,SAA2B,CAAC,CAAC;AACjE,QAAM,CAAC,SAAS,UAAU,IAAI,MAAM,SAAgB,CAAC,CAAC;AACtD,QAAM,CAAC,OAAO,QAAQ,IAAI,MAAM,SAAS,CAAC;AAC1C,QAAM,CAAC,YAAY,aAAa,IAAI,MAAM,SAAS,CAAC;AACpD,QAAM,CAAC,SAAS,UAAU,IAAI,MAAM,SAAS,KAAK;AAClD,QAAM,eAAe,4BAA4B;AACjD,QAAM,EAAE,SAAS,qBAAqB,IAAI,iBAAiB;AAC3D,QAAM,EAAE,MAAM,SAAS,CAAC,EAAE,IAAI,mBAAmB,UAAU;AAAA,IACzD,SAAS,QAAQ,QAAQ;AAAA,IACzB,WAAW,CAAC,YAAY;AAAA,EAC1B,CAAC;AAGD,QAAM,UAAU,MAAM;AACpB,QAAI,YAAY;AAChB,UAAM,MAAM,YAAY;AACtB,iBAAW,IAAI;AACf,UAAI;AACF,cAAMA,UAAS,IAAI,gBAAgB;AACnC,QAAAA,QAAO,IAAI,YAAY,QAAQ;AAC/B,QAAAA,QAAO,IAAI,QAAQ,OAAO,IAAI,CAAC;AAC/B,QAAAA,QAAO,IAAI,YAAY,OAAO,QAAQ,CAAC;AACvC,cAAM,IAAI,UAAU,CAAC;AACrB,YAAI,GAAG,IAAI;AACT,UAAAA,QAAO,IAAI,aAAa,OAAO,EAAE,EAAE,CAAC;AACpC,UAAAA,QAAO,IAAI,WAAW,EAAE,OAAO,SAAS,KAAK;AAAA,QAC/C;AAEA,mBAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,YAAY,GAAG;AACjD,cAAI,KAAK,KAAM;AACf,cAAI,MAAM,QAAQ,CAAC,GAAG;AACpB,gBAAI,EAAE,OAAQ,CAAAA,QAAO,IAAI,GAAG,EAAE,KAAK,GAAG,CAAC;AAAA,UACzC,WAAW,OAAO,MAAM,UAAU;AAAA,UAElC,OAAO;AACL,YAAAA,QAAO,IAAI,GAAG,OAAO,CAAC,CAAC;AAAA,UACzB;AAAA,QACF;AACA,cAAM,IAAI,MAAM;AAAA,UACd,yBAAyBA,QAAO,SAAS,CAAC;AAAA,UAC1C;AAAA,UACA;AAAA,YACE,cAAc;AAAA,YACd,UAAU;AAAA,cACR,OAAO,CAAC;AAAA,cACR,OAAO;AAAA,cACP;AAAA,cACA;AAAA,cACA,YAAY;AAAA,YACd;AAAA,UACF;AAAA,QACF;AACA,YAAI,CAAC,WAAW;AACd,qBAAW,EAAE,SAAS,CAAC,CAAC;AACxB,mBAAS,EAAE,KAAK;AAChB,wBAAc,EAAE,UAAU;AAAA,QAC5B;AAAA,MACF,SAAS,GAAG;AACV,YAAI,CAAC,WAAW;AACd,qBAAW,CAAC,CAAC;AACb,mBAAS,CAAC;AACV,wBAAc,CAAC;AAAA,QACjB;AAAA,MACF,UAAE;AACA,YAAI,CAAC,UAAW,YAAW,KAAK;AAAA,MAClC;AAAA,IACF;AACA,QAAI,SAAU,KAAI;AAClB,WAAO,MAAM;AAAE,kBAAY;AAAA,IAAK;AAAA,EAClC,GAAG,CAAC,UAAU,MAAM,UAAU,SAAS,cAAc,YAAY,CAAC;AAGlE,QAAM,UAAU,MAAM;AACpB,UAAM,cAAc,sBAAsB,QAAQ,MAAM;AACxD,UAAM,aAAa;AACnB,UAAM,OAAyB,YAAY,IAAI,CAAC,GAAQ,SAAiB;AAAA,MACvE,aAAa,EAAE;AAAA,MACf,QAAQ,EAAE,SAAS,EAAE;AAAA,MACrB,MAAM,EAAE,UAAU,MAAM,IAAI,IAAI,MAAM,IAAI,IAAI,MAAM,IAAI,IAAI,MAAM,aAAa,IAAI,EAAE;AAAA,MACrF,MAAM,CAAC,EAAE,SAAS,MAAmC;AACnD,cAAM,IAAI,SAAS;AACnB,eAAO,oBAAC,UAAK,WAAU,gDAA+C,OAAO,cAAc,CAAC,GAAI,wBAAc,CAAC,GAAE;AAAA,MACnH;AAAA,IACF,EAAE;AAEF,UAAM,WAAW,KAAK,KAAK,CAAC,MAAO,EAAU,gBAAgB,QAAS,EAAU,OAAO,IAAI;AAC3F,QAAI,CAAC,SAAU,MAAK,QAAQ,EAAE,aAAa,MAAM,QAAQ,MAAM,MAAM,EAAE,QAAQ,MAAM,UAAU,EAAE,EAAE,CAAQ;AAC3G,eAAW,IAAI;AAAA,EACjB,GAAG,CAAC,MAAM,CAAC;AAGX,QAAM,OAAO,MAAM,QAAQ,MAAM;AAC/B,QAAI,CAAC,OAAO,KAAK,EAAG,QAAO;AAC3B,UAAM,IAAI,OAAO,KAAK,EAAE,YAAY;AACpC,YAAQ,WAAW,CAAC,GAAG,OAAO,CAAC,QAAa;AAC1C,YAAM,SAAS,OAAO,OAAO,OAAO,CAAC,CAAC;AACtC,aAAO,OAAO,KAAK,CAAC,MAAM,cAAc,CAAC,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC;AAAA,IACtE,CAAC;AAAA,EACH,GAAG,CAAC,SAAS,MAAM,CAAC;AAEpB,QAAM,oBAAoB,MAAM,QAAQ,MAAM;AAC5C,YAAQ,WAAW,CAAC,GACjB,IAAI,CAAC,QAAQ;AACZ,YAAM,cAAe,IAAY;AACjC,UAAI,CAAC,eAAe,OAAO,gBAAgB,SAAU,QAAO;AAC5D,UAAK,IAAY,MAAM,OAAQ,QAAO;AACtC,YAAM,SAAS,OAAO,IAAI,WAAW,WACjC,IAAI,SACJ,YAAY,WAAW,KAAK,IAC1B,YAAY,MAAM,CAAC,IACnB;AACN,aAAO,EAAE,OAAO,aAAa,OAAO;AAAA,IACtC,CAAC,EACA,OAAO,CAAC,QAAkD,CAAC,CAAC,GAAG;AAAA,EACpE,GAAG,CAAC,OAAO,CAAC;AAEZ,QAAM,qBAAqB,MAAM,YAAY,CAAC,WAAkC;AAC9E,UAAM,KAAK,IAAI,gBAAgB;AAAA,MAC7B;AAAA,MACA;AAAA,MACA,aAAa;AAAA,MACb,KAAK;AAAA,IACP,CAAC;AACD,UAAM,OAAO,UAAU,CAAC;AACxB,QAAI,MAAM,IAAI;AACZ,SAAG,IAAI,aAAa,OAAO,KAAK,EAAE,CAAC;AACnC,SAAG,IAAI,WAAW,KAAK,OAAO,SAAS,KAAK;AAAA,IAC9C;AACA,WAAO,yBAAyB,GAAG,SAAS,CAAC;AAAA,EAC/C,GAAG,CAAC,UAAU,OAAO,CAAC;AAEtB,QAAM,eAAe,MAAM,QAAQ,MAAM;AACvC,UAAM,eAAe,SAAS,QAAQ,iBAAiB,GAAG,KAAK;AAC/D,WAAO;AAAA,MACL,MAAM;AAAA,QACJ,aAAa;AAAA,QACb,SAAS,YAAqE;AAC5E,gBAAM,gBAAgB,KAAK,IAAI,CAAC,QAAQ;AACtC,kBAAM,MAA+B,CAAC;AACtC,uBAAW,OAAO,mBAAmB;AACnC,kBAAI,IAAI,KAAK,IAAK,IAAgC,IAAI,KAAK;AAAA,YAC7D;AACA,mBAAO;AAAA,UACT,CAAC;AACD,gBAAM,WAA2B;AAAA,YAC/B,SAAS,kBAAkB,IAAI,CAAC,SAAS,EAAE,OAAO,IAAI,OAAO,QAAQ,IAAI,OAAO,EAAE;AAAA,YAClF,MAAM;AAAA,UACR;AACA,iBAAO,EAAE,UAAU,UAAU,GAAG,YAAY,QAAQ;AAAA,QACtD;AAAA,MACF;AAAA,MACA,MAAM;AAAA,QACJ,aAAa;AAAA,QACb,QAAQ,CAAC,WAAkC,mBAAmB,MAAM;AAAA,QACpE,UAAU,MAAM,GAAG,YAAY;AAAA,MACjC;AAAA,IACF;AAAA,EACF,GAAG,CAAC,oBAAoB,MAAM,UAAU,iBAAiB,CAAC;AAE1D,QAAM,mBAAmB,MAAM,QAAQ,MAAM,sBAAsB,QAAQ,MAAM,EAAE,SAAS,GAAG,CAAC,MAAM,CAAC;AACvG,QAAM,UACJ,iCACE;AAAA,wBAAC,UAAO,SAAO,MAAC,SAAQ,WAAU,MAAK,MACrC,8BAAC,QAAK,MAAM,0BAA0B,mBAAmB,QAAQ,CAAC,IAAI,oCAEtE,GACF;AAAA,IACC,oBACC,oBAAC,UAAO,SAAO,MACb,8BAAC,QAAK,MAAM,0BAA0B,mBAAmB,QAAQ,CAAC,mBAAmB,oBAErF,GACF;AAAA,KAEJ;AAIF,QAAM,cAA2B,MAAM,QAAQ,MAAO;AAAA,IACpD,EAAE,IAAI,MAAM,OAAO,MAAM,MAAM,OAAO;AAAA,EACxC,GAAI,CAAC,CAAC;AAEN,SACE,qBAAC,QACC;AAAA,yBAAC,YACC;AAAA,2BAAC,eAAY,MAAI,MAAC,OAAM,gCAA+B,WAAU,QAC/D;AAAA,6BAAC,OAAE,WAAU,QAAO;AAAA;AAAA,UAC4G;AAAA,UAC9H,oBAAC,OAAE,WAAU,aAAY,QAAO,UAAS,KAAI,cAAa,MAAK,oDAAmD,qCAElH;AAAA,UAAK;AAAA,UAAI;AAAA,UACF;AAAA,UACP,oBAAC,OAAE,WAAU,aAAY,QAAO,UAAS,KAAI,cAAa,MAAK,6CAA4C,wCAE3G;AAAA,UAAK;AAAA,UAAI;AAAA,WAEX;AAAA,QACA,qBAAC,SAAI,WAAU,aACb;AAAA,+BAAC,SACC;AAAA,gCAAC,SAAI,WAAU,oBAAmB,gDAAkC;AAAA,YACpE,oBAAC,SAAI,WAAU,8CAA6C,8BAAC,UAAM;AAAA;AAAA,oBAE7D,QAAQ;AAAA,mCACM,GAAO;AAAA,YAC3B,qBAAC,OAAE,WAAU,8BAA6B;AAAA;AAAA,cACb;AAAA,cAC3B,oBAAC,OAAE,WAAU,aAAY,QAAO,UAAS,KAAI,cAAa,MAAK,oDAAmD,+BAElH;AAAA,cAAK;AAAA,cAAI;AAAA,cACmB;AAAA,cAC5B,oBAAC,OAAE,WAAU,aAAY,QAAO,UAAS,KAAI,cAAa,MAAK,6CAA4C,kCAE3G;AAAA,cAAI;AAAA,eAEN;AAAA,aACF;AAAA,UAEA,qBAAC,SACC;AAAA,gCAAC,SAAI,WAAU,oBAAmB,6BAAe;AAAA,YACjD,oBAAC,SAAI,WAAU,8CAA6C,8BAAC,UAAM,sGACxB,GAAO;AAAA,aACpD;AAAA,UAEA,qBAAC,SACC;AAAA,gCAAC,SAAI,WAAU,oBAAmB,6CAA+B;AAAA,YACjE,oBAAC,SAAI,WAAU,8CAA6C,8BAAC,UAAM,oHACV,GAAO;AAAA,YAChE,qBAAC,OAAE,WAAU,8BAA6B;AAAA;AAAA,cAAoC,oBAAC,UAAK,gBAAE;AAAA,cAAO;AAAA,eAAsB;AAAA,aACrH;AAAA,UAEA,qBAAC,SACC;AAAA,gCAAC,SAAI,WAAU,oBAAmB,gCAAkB;AAAA,YACpD,oBAAC,SAAI,WAAU,8CAA6C,8BAAC,UAAM;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,2CAU5C,GAAO;AAAA,YAC9B,qBAAC,OAAE,WAAU,8BAA6B;AAAA;AAAA,cAAiD,oBAAC,UAAK,iBAAG;AAAA,cAAO;AAAA,eAA6C;AAAA,aAC1J;AAAA,UAEA,qBAAC,SACC;AAAA,gCAAC,SAAI,WAAU,oBAAmB,gCAAkB;AAAA,YACpD,oBAAC,SAAI,WAAU,8CAA6C,8BAAC,UAAM;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,2CAU5C,GAAO;AAAA,aAChC;AAAA,UAEA,qBAAC,SACC;AAAA,gCAAC,SAAI,WAAU,oBAAmB,gCAAkB;AAAA,YACpD,oBAAC,SAAI,WAAU,8CAA6C,8BAAC,UAAM,sIAEJ,GAAO;AAAA,aACxE;AAAA,UAEA,qBAAC,SAAI,WAAU,yBAAwB;AAAA;AAAA,YAErC,qBAAC,QAAG,WAAU,iCACZ;AAAA,kCAAC,QAAG,0GAA4F;AAAA,cAChG,oBAAC,QAAG,2EAA6D;AAAA,cACjE,oBAAC,QAAG,8GAAqG;AAAA,eAC3G;AAAA,aACF;AAAA,WACF;AAAA,SACF;AAAA,MACA;AAAA,QAAC;AAAA;AAAA,UACC,qBAAmB;AAAA,UACnB,OAAO,YAAY,QAAQ;AAAA,UAC3B;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA,aAAa,EAAE,SAAS,yBAAyB,QAAQ,GAAG;AAAA,UAC5D,UAAU;AAAA,UACV,SAAS;AAAA,UACT;AAAA,UACA,YAAY,CAAC,QACX;AAAA,YAAC;AAAA;AAAA,cACC,OAAO;AAAA,gBACL,EAAE,IAAI,QAAQ,OAAO,QAAQ,MAAM,0BAA0B,mBAAmB,QAAQ,CAAC,YAAY,mBAAmB,OAAQ,IAAY,EAAE,CAAC,CAAC,GAAG;AAAA,gBACnJ,EAAE,IAAI,UAAU,OAAO,UAAU,aAAa,MAAM,UAAU,YAAY;AACxE,sBAAI;AACF,0BAAM,YAAY,MAAM,QAAQ;AAAA,sBAC9B,OAAO;AAAA,sBACP,SAAS;AAAA,oBACX,CAAC;AACD,wBAAI,CAAC,UAAW;AAChB,0BAAM,aAAa,MAAM;AAAA,sBACvB,0BAA2B,IAAY,SAAS;AAAA,sBAChD,MAAM;AAAA,wBACJ,kCAAkC,mBAAmB,QAAQ,CAAC,aAAa,mBAAmB,OAAQ,IAAY,EAAE,CAAC,CAAC;AAAA,wBACtH,EAAE,QAAQ,SAAS;AAAA,sBACrB;AAAA,oBACF;AACA,wBAAI,CAAC,WAAW,IAAI;AAClB,4BAAM,eAAe,WAAW,UAAU,yBAAyB;AAAA,oBACrE;AACA,0BAAM,IAAI,MAAM;AAAA,sBACd,kCAAkC,mBAAmB,QAAQ,CAAC,SAAS,IAAI,aAAa,QAAQ;AAAA,sBAChG;AAAA,sBACA;AAAA,wBACE,cAAc;AAAA,wBACd,UAAU,EAAE,OAAO,CAAC,GAAG,OAAO,GAAG,MAAM,UAAU,YAAY,EAAE;AAAA,sBACjE;AAAA,oBACF;AACA,+BAAW,EAAE,SAAS,CAAC,CAAC;AACxB,6BAAS,EAAE,SAAS,CAAC;AACrB,kCAAc,EAAE,cAAc,CAAC;AAC/B,0BAAM,2BAA2B,SAAS;AAAA,kBAC5C,SAAS,OAAO;AACd,0BAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU;AACzD,0BAAM,SAAS,OAAO;AAAA,kBACxB;AAAA,gBACF,EAAE;AAAA,cACJ;AAAA;AAAA,UACF;AAAA,UAEF,UAAQ;AAAA,UACR;AAAA,UACA,iBAAiB;AAAA,UACjB,aAAa;AAAA,UACb,gBAAgB,CAAC,MAAM;AAAE,sBAAU,CAAC;AAAG,oBAAQ,CAAC;AAAA,UAAE;AAAA,UAClD,gBAAgB,CAAC,SAAS;AAAE,4BAAgB,IAAI;AAAG,oBAAQ,CAAC;AAAA,UAAE;AAAA,UAC9D,gBAAgB,MAAM;AAAE,4BAAgB,CAAC,CAAC;AAAG,oBAAQ,CAAC;AAAA,UAAE;AAAA,UACxD,YAAY,EAAE,MAAM,UAAU,OAAO,YAAY,cAAc,QAAQ;AAAA,UACvE,WAAW;AAAA;AAAA,MACb;AAAA,OACF;AAAA,IACC;AAAA,KACH;AAEJ;",
+  "sourcesContent": ["\"use client\"\nimport * as React from 'react'\nimport { useSearchParams } from 'next/navigation'\nimport type { ColumnDef, SortingState } from '@tanstack/react-table'\nimport { filterCustomFieldDefs, useCustomFieldDefs } from '@open-mercato/ui/backend/utils/customFieldDefs'\nimport { Page, PageBody } from '@open-mercato/ui/backend/Page'\nimport { DataTable, type DataTableExportFormat } from '@open-mercato/ui/backend/DataTable'\nimport type { PreparedExport } from '@open-mercato/shared/lib/crud/exporters'\nimport type { FilterDef } from '@open-mercato/ui/backend/FilterBar'\nimport { ContextHelp } from '@open-mercato/ui/backend/ContextHelp'\nimport { Button } from '@open-mercato/ui/primitives/button'\nimport { RowActions } from '@open-mercato/ui/backend/RowActions'\nimport Link from 'next/link'\nimport { apiCall, readApiResultOrThrow, withScopedApiRequestHeaders } from '@open-mercato/ui/backend/utils/apiCall'\nimport { buildOptimisticLockHeader } from '@open-mercato/ui/backend/utils/optimisticLock'\nimport { flash } from '@open-mercato/ui/backend/FlashMessages'\nimport { raiseCrudError } from '@open-mercato/ui/backend/utils/serverErrors'\nimport { useOrganizationScopeVersion } from '@open-mercato/shared/lib/frontend/useOrganizationScope'\nimport { useConfirmDialog } from '@open-mercato/ui/backend/confirm-dialog'\nimport { useGuardedMutation } from '@open-mercato/ui/backend/injection/useGuardedMutation'\nimport { useT } from '@open-mercato/shared/lib/i18n/context'\nimport { ErrorMessage, LoadingMessage } from '@open-mercato/ui/backend/detail'\nimport { useRecordsEntityGuard } from '@open-mercato/core/modules/entities/components/useRecordsEntityGuard'\n\ntype RecordsResponse = {\n  items: any[]\n  total: number\n  page: number\n  pageSize: number\n  totalPages: number\n}\n\nfunction toCsvUrl(base: string, params: URLSearchParams) {\n  // Build a relative URL to avoid SSR/CSR origin mismatch hydration issues\n  const p = new URLSearchParams(params)\n  p.set('format', 'csv')\n  const qs = p.toString()\n  return qs ? `${base}?${qs}` : base\n}\n\nfunction normalizeCell(v: any): string {\n  if (Array.isArray(v)) return v.filter((x) => x != null && x !== '').join(', ')\n  if (v === true) return 'Yes'\n  if (v === false) return 'No'\n  if (v == null) return ''\n  if (v instanceof Date) return v.toISOString()\n  return String(v)\n}\n\nexport default function RecordsPage({ params }: { params: { entityId?: string } }) {\n  const t = useT()\n  const entityId = decodeURIComponent(params?.entityId || '')\n  const guard = useRecordsEntityGuard(entityId)\n  if (guard !== 'allowed') {\n    return (\n      <Page>\n        <PageBody>\n          {guard === 'blocked' ? (\n            <ErrorMessage label={t('entities.userEntities.records.errors.systemEntity', 'This entity is system-managed. Records are available for custom entities only.')} />\n          ) : (\n            <LoadingMessage label={t('entities.userEntities.records.loading', 'Loading records...')} />\n          )}\n        </PageBody>\n      </Page>\n    )\n  }\n  return <RecordsPageInner params={params} />\n}\n\nfunction RecordsPageInner({ params }: { params: { entityId?: string } }) {\n  const t = useT()\n  const entityId = decodeURIComponent(params?.entityId || '')\n  const [sorting, setSorting] = React.useState<SortingState>([{ id: 'id', desc: false }])\n  const [page, setPage] = React.useState(1)\n  const [pageSize, setPageSize] = React.useState(50)\n  const [search, setSearch] = React.useState('')\n  const [filterValues, setFilterValues] = React.useState<Record<string, any>>({})\n  const [columns, setColumns] = React.useState<ColumnDef<any>[]>([])\n  const [rawData, setRawData] = React.useState<any[]>([])\n  const [total, setTotal] = React.useState(0)\n  const [totalPages, setTotalPages] = React.useState(1)\n  const [loading, setLoading] = React.useState(false)\n  const scopeVersion = useOrganizationScopeVersion()\n  const { confirm, ConfirmDialogElement } = useConfirmDialog()\n  const deleteMutationContextId = `entities.user.records.${entityId}:single-delete`\n  const { runMutation: runDeleteMutation, retryLastMutation: retryDeleteMutation } = useGuardedMutation<{\n    formId: string\n    resourceKind: string\n    resourceId: string\n    retryLastMutation: () => Promise<boolean>\n  }>({\n    contextId: deleteMutationContextId,\n    blockedMessage: t('ui.forms.flash.saveBlocked', 'Save blocked by validation'),\n  })\n  const { data: cfDefs = [] } = useCustomFieldDefs(entityId, {\n    enabled: Boolean(entityId),\n    keyExtras: [scopeVersion],\n  })\n\n  // Fetch records whenever paging/sorting/filters change (do NOT refetch on cfDefs/search changes)\n  React.useEffect(() => {\n    let cancelled = false\n    const run = async () => {\n      setLoading(true)\n      try {\n        const params = new URLSearchParams()\n        params.set('entityId', entityId)\n        params.set('page', String(page))\n        params.set('pageSize', String(pageSize))\n        const s = sorting?.[0]\n        if (s?.id) {\n          params.set('sortField', String(s.id))\n          params.set('sortDir', s.desc ? 'desc' : 'asc')\n        }\n        // Flatten filter values into query params\n        for (const [k, v] of Object.entries(filterValues)) {\n          if (v == null) continue\n          if (Array.isArray(v)) {\n            if (v.length) params.set(k, v.join(','))\n          } else if (typeof v === 'object') {\n            // dateRange-like shapes are not supported generically here; skip\n          } else {\n            params.set(k, String(v))\n          }\n        }\n        const j = await readApiResultOrThrow<RecordsResponse>(\n          `/api/entities/records?${params.toString()}`,\n          undefined,\n          {\n            errorMessage: 'Failed to load records',\n            fallback: {\n              items: [],\n              total: 0,\n              page,\n              pageSize,\n              totalPages: 1,\n            },\n          },\n        )\n        if (!cancelled) {\n          setRawData(j.items || [])\n          setTotal(j.total)\n          setTotalPages(j.totalPages)\n        }\n      } catch (e) {\n        if (!cancelled) {\n          setRawData([])\n          setTotal(0)\n          setTotalPages(1)\n        }\n      } finally {\n        if (!cancelled) setLoading(false)\n      }\n    }\n    if (entityId) run()\n    return () => { cancelled = true }\n  }, [entityId, page, pageSize, sorting, filterValues, scopeVersion])\n\n  // Build columns from custom field definitions only (no data round-trip)\n  React.useEffect(() => {\n    const visibleDefs = filterCustomFieldDefs(cfDefs, 'list') as any\n    const maxVisible = 10\n    const cols: ColumnDef<any>[] = visibleDefs.map((d: any, idx: number) => ({\n      accessorKey: d.key,\n      header: d.label || d.key,\n      meta: { priority: idx < 4 ? 1 : idx < 6 ? 2 : idx < 8 ? 3 : idx < maxVisible ? 4 : 5 },\n      cell: ({ getValue }: { getValue: () => unknown }) => {\n        const v = getValue() as any\n        return <span className=\"truncate max-w-[24ch] inline-block align-top\" title={normalizeCell(v)}>{normalizeCell(v)}</span>\n      },\n    }))\n    // Ensure hidden 'id' column exists for sorting/state\n    const hasIdCol = cols.some((c) => (c as any).accessorKey === 'id' || (c as any).id === 'id')\n    if (!hasIdCol) cols.unshift({ accessorKey: 'id', header: 'ID', meta: { hidden: true, priority: 6 } } as any)\n    setColumns(cols)\n  }, [cfDefs])\n\n  // Client-side quick search filtering without triggering server refetch\n  const data = React.useMemo(() => {\n    if (!search.trim()) return rawData\n    const q = search.trim().toLowerCase()\n    return (rawData || []).filter((row: any) => {\n      const values = Object.values(row || {})\n      return values.some((v) => normalizeCell(v).toLowerCase().includes(q))\n    })\n  }, [rawData, search])\n\n  const viewExportColumns = React.useMemo(() => {\n    return (columns || [])\n      .map((col) => {\n        const accessorKey = (col as any).accessorKey\n        if (!accessorKey || typeof accessorKey !== 'string') return null\n        if ((col as any).meta?.hidden) return null\n        const header = typeof col.header === 'string'\n          ? col.header\n          : accessorKey.startsWith('cf_')\n            ? accessorKey.slice(3)\n            : accessorKey\n        return { field: accessorKey, header }\n      })\n      .filter((col): col is { field: string; header: string } => !!col)\n  }, [columns])\n\n  const buildFullExportUrl = React.useCallback((format: DataTableExportFormat) => {\n    const qp = new URLSearchParams({\n      entityId,\n      format,\n      exportScope: 'full',\n      all: 'true',\n    })\n    const sort = sorting?.[0]\n    if (sort?.id) {\n      qp.set('sortField', String(sort.id))\n      qp.set('sortDir', sort.desc ? 'desc' : 'asc')\n    }\n    return `/api/entities/records?${qp.toString()}`\n  }, [entityId, sorting])\n\n  const exportConfig = React.useMemo(() => {\n    const safeEntityId = entityId.replace(/[^a-z0-9_-]/gi, '_') || 'records'\n    return {\n      view: {\n        description: 'Exports the current list respecting filters and column visibility.',\n        prepare: async (): Promise<{ prepared: PreparedExport; filename: string }> => {\n          const rowsForExport = data.map((row) => {\n            const out: Record<string, unknown> = {}\n            for (const col of viewExportColumns) {\n              out[col.field] = (row as Record<string, unknown>)[col.field]\n            }\n            return out\n          })\n          const prepared: PreparedExport = {\n            columns: viewExportColumns.map((col) => ({ field: col.field, header: col.header })),\n            rows: rowsForExport,\n          }\n          return { prepared, filename: `${safeEntityId}_view` }\n        },\n      },\n      full: {\n        description: 'Exports raw records with every field and custom field included.',\n        getUrl: (format: DataTableExportFormat) => buildFullExportUrl(format),\n        filename: () => `${safeEntityId}_full`,\n      },\n    }\n  }, [buildFullExportUrl, data, entityId, viewExportColumns])\n\n  const hasAnyFormFields = React.useMemo(() => filterCustomFieldDefs(cfDefs, 'form').length > 0, [cfDefs])\n  const actions = (\n    <>\n      <Button asChild variant=\"outline\" size=\"sm\">\n        <Link href={`/backend/entities/user/${encodeURIComponent(entityId)}`}>\n          Edit Entity Definition\n        </Link>\n      </Button>\n      {hasAnyFormFields && (\n        <Button asChild>\n          <Link href={`/backend/entities/user/${encodeURIComponent(entityId)}/records/create`}>\n            Create\n          </Link>\n        </Button>\n      )}\n    </>\n  )\n\n  // Ensure filters are visible even if no custom fields are marked filterable\n  const baseFilters: FilterDef[] = React.useMemo(() => ([\n    { id: 'id', label: 'ID', type: 'text' },\n  ]), [])\n\n  return (\n    <Page>\n      <PageBody>\n        <ContextHelp bulb title=\"API: Manage Records via cURL\" className=\"mb-4\">\n          <p className=\"mb-2\">\n            Interact with this custom entity via the backend API using cURL. Use API keys for machine-to-machine access\u2014mint one from the{' '}\n            <a className=\"underline\" target=\"_blank\" rel=\"noreferrer\" href=\"https://docs.openmercato.com/user-guide/api-keys\">\n              Managing API keys guide\n            </a>{' '}\n            or the{' '}\n            <a className=\"underline\" target=\"_blank\" rel=\"noreferrer\" href=\"https://docs.openmercato.com/cli/api-keys\">\n              API keys CLI documentation\n            </a>{' '}\n            before running these calls.\n          </p>\n          <div className=\"space-y-2\">\n            <div>\n              <div className=\"font-medium mb-1\">1) Configure environment variables</div>\n              <pre className=\"bg-muted p-3 rounded text-xs overflow-auto\"><code>{`export BASE_URL=\"http://localhost:3000/api\"\nexport API_KEY=\"<paste API key secret here>\"           # scoped with entities.features\nexport ENTITY_ID=\"${entityId}\"\nexport RECORD_ID=\"<record uuid>\"`}</code></pre>\n              <p className=\"text-muted-foreground mt-1\">\n                Need a new key? Follow the{' '}\n                <a className=\"underline\" target=\"_blank\" rel=\"noreferrer\" href=\"https://docs.openmercato.com/user-guide/api-keys\">\n                  Managing API keys\n                </a>{' '}\n                walkthrough or mint one via{' '}\n                <a className=\"underline\" target=\"_blank\" rel=\"noreferrer\" href=\"https://docs.openmercato.com/cli/api-keys\">\n                  mercato api_keys add\n                </a>\n                .\n              </p>\n            </div>\n\n            <div>\n              <div className=\"font-medium mb-1\">2) List records</div>\n              <pre className=\"bg-muted p-3 rounded text-xs overflow-auto\"><code>{`curl -s -H \"X-Api-Key: $API_KEY\" \\\n  \"$BASE_URL/entities/records?entityId=$ENTITY_ID\" | jq`}</code></pre>\n            </div>\n\n            <div>\n              <div className=\"font-medium mb-1\">3) Read a single record (by id)</div>\n              <pre className=\"bg-muted p-3 rounded text-xs overflow-auto\"><code>{`curl -s -H \"X-Api-Key: $API_KEY\" \\\n  \"$BASE_URL/entities/records?entityId=$ENTITY_ID&id=$RECORD_ID\" | jq`}</code></pre>\n              <p className=\"text-muted-foreground mt-1\">Note: Response is a list; filter by <code>id</code> to get a single item.</p>\n            </div>\n\n            <div>\n              <div className=\"font-medium mb-1\">4) Create a record</div>\n              <pre className=\"bg-muted p-3 rounded text-xs overflow-auto\"><code>{`curl -s -X POST \\\n  -H \"X-Api-Key: $API_KEY\" \\\n  -H \"Content-Type: application/json\" \\\n  -d \"{\n    \\\\\"entityId\\\\\": \\\\\"$ENTITY_ID\\\\\",\n    \\\\\"values\\\\\": {\n      \\\\\"field_one\\\\\": \\\\\"Example\\\\\",\n      \\\\\"field_two\\\\\": 123\n    }\n  }\" \\\n  \"$BASE_URL/entities/records\" | jq`}</code></pre>\n              <p className=\"text-muted-foreground mt-1\">For custom entities, send field keys without the <code>cf_</code> prefix. The API normalizes this server-side.</p>\n            </div>\n\n            <div>\n              <div className=\"font-medium mb-1\">5) Update a record</div>\n              <pre className=\"bg-muted p-3 rounded text-xs overflow-auto\"><code>{`curl -s -X PUT \\\n  -H \"X-Api-Key: $API_KEY\" \\\n  -H \"Content-Type: application/json\" \\\n  -d \"{\n    \\\\\"entityId\\\\\": \\\\\"$ENTITY_ID\\\\\",\n    \\\\\"recordId\\\\\": \\\\\"$RECORD_ID\\\\\",\n    \\\\\"values\\\\\": {\n      \\\\\"field_one\\\\\": \\\\\"Updated\\\\\"\n    }\n  }\" \\\n  \"$BASE_URL/entities/records\" | jq`}</code></pre>\n            </div>\n\n            <div>\n              <div className=\"font-medium mb-1\">6) Delete a record</div>\n              <pre className=\"bg-muted p-3 rounded text-xs overflow-auto\"><code>{`curl -s -X DELETE \\\n  -H \"X-Api-Key: $API_KEY\" \\\n  \"$BASE_URL/entities/records?entityId=$ENTITY_ID&recordId=$RECORD_ID\" | jq`}</code></pre>\n            </div>\n\n            <div className=\"text-muted-foreground\">\n              Security notes:\n              <ul className=\"list-disc pl-5 mt-1 space-y-1\">\n                <li>All endpoints require a valid API key. Keys inherit tenant, organization, and feature scope.</li>\n                <li>Rotate keys regularly and delete unused ones in the admin UI.</li>\n                <li>Store the secret in a secure vault; anyone with the header can act within the key&apos;s permissions.</li>\n              </ul>\n            </div>\n          </div>\n        </ContextHelp>\n        <DataTable\n          stickyActionsColumn\n          title={`Records: ${entityId}`}\n          entityId={entityId}\n          actions={actions}\n          columns={columns}\n          data={data}\n          perspective={{ tableId: `entities.user.records.${entityId}` }}\n          exporter={exportConfig}\n          filters={baseFilters}\n          filterValues={filterValues}\n          rowActions={(row) => (\n            <RowActions\n              items={[\n                { id: 'edit', label: 'Edit', href: `/backend/entities/user/${encodeURIComponent(entityId)}/records/${encodeURIComponent(String((row as any).id))}` },\n                { id: 'delete', label: 'Delete', destructive: true, onSelect: async () => {\n                  const recordId = String((row as any).id)\n                  try {\n                    const confirmed = await confirm({\n                      title: 'Delete this record?',\n                      variant: 'destructive',\n                    })\n                    if (!confirmed) return\n                    await runDeleteMutation({\n                      operation: async () => {\n                        const deleteCall = await withScopedApiRequestHeaders(\n                          buildOptimisticLockHeader((row as any).updatedAt),\n                          () => apiCall(\n                            `/api/entities/records?entityId=${encodeURIComponent(entityId)}&recordId=${encodeURIComponent(recordId)}`,\n                            { method: 'DELETE' },\n                          ),\n                        )\n                        if (!deleteCall.ok) {\n                          await raiseCrudError(deleteCall.response, 'Failed to delete record')\n                        }\n                      },\n                      context: {\n                        formId: deleteMutationContextId,\n                        resourceKind: 'entities.record',\n                        resourceId: recordId,\n                        retryLastMutation: retryDeleteMutation,\n                      },\n                    })\n                    const j = await readApiResultOrThrow<RecordsResponse>(\n                      `/api/entities/records?entityId=${encodeURIComponent(entityId)}&page=${page}&pageSize=${pageSize}`,\n                      undefined,\n                      {\n                        errorMessage: 'Failed to reload records',\n                        fallback: { items: [], total: 0, page, pageSize, totalPages: 1 },\n                      },\n                    )\n                    setRawData(j.items || [])\n                    setTotal(j.total || 0)\n                    setTotalPages(j.totalPages || 1)\n                    flash('Record has been removed', 'success')\n                  } catch (error) {\n                    const message = error instanceof Error ? error.message : 'Failed to delete record'\n                    flash(message, 'error')\n                  }\n                } },\n              ]}\n            />\n          )}\n          sortable\n          sorting={sorting}\n          onSortingChange={setSorting}\n          searchValue={search}\n          onSearchChange={(v) => { setSearch(v); setPage(1) }}\n          onFiltersApply={(vals) => { setFilterValues(vals); setPage(1) }}\n          onFiltersClear={() => { setFilterValues({}); setPage(1) }}\n          pagination={{ page, pageSize, total, totalPages, onPageChange: setPage }}\n          isLoading={loading}\n        />\n      </PageBody>\n      {ConfirmDialogElement}\n    </Page>\n  )\n}\n"],
+  "mappings": ";AA0DY,SA8LR,UA9LQ,KA8LR,YA9LQ;AAzDZ,YAAY,WAAW;AAGvB,SAAS,uBAAuB,0BAA0B;AAC1D,SAAS,MAAM,gBAAgB;AAC/B,SAAS,iBAA6C;AAGtD,SAAS,mBAAmB;AAC5B,SAAS,cAAc;AACvB,SAAS,kBAAkB;AAC3B,OAAO,UAAU;AACjB,SAAS,SAAS,sBAAsB,mCAAmC;AAC3E,SAAS,iCAAiC;AAC1C,SAAS,aAAa;AACtB,SAAS,sBAAsB;AAC/B,SAAS,mCAAmC;AAC5C,SAAS,wBAAwB;AACjC,SAAS,0BAA0B;AACnC,SAAS,YAAY;AACrB,SAAS,cAAc,sBAAsB;AAC7C,SAAS,6BAA6B;AAUtC,SAAS,SAAS,MAAc,QAAyB;AAEvD,QAAM,IAAI,IAAI,gBAAgB,MAAM;AACpC,IAAE,IAAI,UAAU,KAAK;AACrB,QAAM,KAAK,EAAE,SAAS;AACtB,SAAO,KAAK,GAAG,IAAI,IAAI,EAAE,KAAK;AAChC;AAEA,SAAS,cAAc,GAAgB;AACrC,MAAI,MAAM,QAAQ,CAAC,EAAG,QAAO,EAAE,OAAO,CAAC,MAAM,KAAK,QAAQ,MAAM,EAAE,EAAE,KAAK,IAAI;AAC7E,MAAI,MAAM,KAAM,QAAO;AACvB,MAAI,MAAM,MAAO,QAAO;AACxB,MAAI,KAAK,KAAM,QAAO;AACtB,MAAI,aAAa,KAAM,QAAO,EAAE,YAAY;AAC5C,SAAO,OAAO,CAAC;AACjB;AAEe,SAAR,YAA6B,EAAE,OAAO,GAAsC;AACjF,QAAM,IAAI,KAAK;AACf,QAAM,WAAW,mBAAmB,QAAQ,YAAY,EAAE;AAC1D,QAAM,QAAQ,sBAAsB,QAAQ;AAC5C,MAAI,UAAU,WAAW;AACvB,WACE,oBAAC,QACC,8BAAC,YACE,oBAAU,YACT,oBAAC,gBAAa,OAAO,EAAE,qDAAqD,gFAAgF,GAAG,IAE/J,oBAAC,kBAAe,OAAO,EAAE,yCAAyC,oBAAoB,GAAG,GAE7F,GACF;AAAA,EAEJ;AACA,SAAO,oBAAC,oBAAiB,QAAgB;AAC3C;AAEA,SAAS,iBAAiB,EAAE,OAAO,GAAsC;AACvE,QAAM,IAAI,KAAK;AACf,QAAM,WAAW,mBAAmB,QAAQ,YAAY,EAAE;AAC1D,QAAM,CAAC,SAAS,UAAU,IAAI,MAAM,SAAuB,CAAC,EAAE,IAAI,MAAM,MAAM,MAAM,CAAC,CAAC;AACtF,QAAM,CAAC,MAAM,OAAO,IAAI,MAAM,SAAS,CAAC;AACxC,QAAM,CAAC,UAAU,WAAW,IAAI,MAAM,SAAS,EAAE;AACjD,QAAM,CAAC,QAAQ,SAAS,IAAI,MAAM,SAAS,EAAE;AAC7C,QAAM,CAAC,cAAc,eAAe,IAAI,MAAM,SAA8B,CAAC,CAAC;AAC9E,QAAM,CAAC,SAAS,UAAU,IAAI,MAAM,SAA2B,CAAC,CAAC;AACjE,QAAM,CAAC,SAAS,UAAU,IAAI,MAAM,SAAgB,CAAC,CAAC;AACtD,QAAM,CAAC,OAAO,QAAQ,IAAI,MAAM,SAAS,CAAC;AAC1C,QAAM,CAAC,YAAY,aAAa,IAAI,MAAM,SAAS,CAAC;AACpD,QAAM,CAAC,SAAS,UAAU,IAAI,MAAM,SAAS,KAAK;AAClD,QAAM,eAAe,4BAA4B;AACjD,QAAM,EAAE,SAAS,qBAAqB,IAAI,iBAAiB;AAC3D,QAAM,0BAA0B,yBAAyB,QAAQ;AACjE,QAAM,EAAE,aAAa,mBAAmB,mBAAmB,oBAAoB,IAAI,mBAKhF;AAAA,IACD,WAAW;AAAA,IACX,gBAAgB,EAAE,8BAA8B,4BAA4B;AAAA,EAC9E,CAAC;AACD,QAAM,EAAE,MAAM,SAAS,CAAC,EAAE,IAAI,mBAAmB,UAAU;AAAA,IACzD,SAAS,QAAQ,QAAQ;AAAA,IACzB,WAAW,CAAC,YAAY;AAAA,EAC1B,CAAC;AAGD,QAAM,UAAU,MAAM;AACpB,QAAI,YAAY;AAChB,UAAM,MAAM,YAAY;AACtB,iBAAW,IAAI;AACf,UAAI;AACF,cAAMA,UAAS,IAAI,gBAAgB;AACnC,QAAAA,QAAO,IAAI,YAAY,QAAQ;AAC/B,QAAAA,QAAO,IAAI,QAAQ,OAAO,IAAI,CAAC;AAC/B,QAAAA,QAAO,IAAI,YAAY,OAAO,QAAQ,CAAC;AACvC,cAAM,IAAI,UAAU,CAAC;AACrB,YAAI,GAAG,IAAI;AACT,UAAAA,QAAO,IAAI,aAAa,OAAO,EAAE,EAAE,CAAC;AACpC,UAAAA,QAAO,IAAI,WAAW,EAAE,OAAO,SAAS,KAAK;AAAA,QAC/C;AAEA,mBAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,YAAY,GAAG;AACjD,cAAI,KAAK,KAAM;AACf,cAAI,MAAM,QAAQ,CAAC,GAAG;AACpB,gBAAI,EAAE,OAAQ,CAAAA,QAAO,IAAI,GAAG,EAAE,KAAK,GAAG,CAAC;AAAA,UACzC,WAAW,OAAO,MAAM,UAAU;AAAA,UAElC,OAAO;AACL,YAAAA,QAAO,IAAI,GAAG,OAAO,CAAC,CAAC;AAAA,UACzB;AAAA,QACF;AACA,cAAM,IAAI,MAAM;AAAA,UACd,yBAAyBA,QAAO,SAAS,CAAC;AAAA,UAC1C;AAAA,UACA;AAAA,YACE,cAAc;AAAA,YACd,UAAU;AAAA,cACR,OAAO,CAAC;AAAA,cACR,OAAO;AAAA,cACP;AAAA,cACA;AAAA,cACA,YAAY;AAAA,YACd;AAAA,UACF;AAAA,QACF;AACA,YAAI,CAAC,WAAW;AACd,qBAAW,EAAE,SAAS,CAAC,CAAC;AACxB,mBAAS,EAAE,KAAK;AAChB,wBAAc,EAAE,UAAU;AAAA,QAC5B;AAAA,MACF,SAAS,GAAG;AACV,YAAI,CAAC,WAAW;AACd,qBAAW,CAAC,CAAC;AACb,mBAAS,CAAC;AACV,wBAAc,CAAC;AAAA,QACjB;AAAA,MACF,UAAE;AACA,YAAI,CAAC,UAAW,YAAW,KAAK;AAAA,MAClC;AAAA,IACF;AACA,QAAI,SAAU,KAAI;AAClB,WAAO,MAAM;AAAE,kBAAY;AAAA,IAAK;AAAA,EAClC,GAAG,CAAC,UAAU,MAAM,UAAU,SAAS,cAAc,YAAY,CAAC;AAGlE,QAAM,UAAU,MAAM;AACpB,UAAM,cAAc,sBAAsB,QAAQ,MAAM;AACxD,UAAM,aAAa;AACnB,UAAM,OAAyB,YAAY,IAAI,CAAC,GAAQ,SAAiB;AAAA,MACvE,aAAa,EAAE;AAAA,MACf,QAAQ,EAAE,SAAS,EAAE;AAAA,MACrB,MAAM,EAAE,UAAU,MAAM,IAAI,IAAI,MAAM,IAAI,IAAI,MAAM,IAAI,IAAI,MAAM,aAAa,IAAI,EAAE;AAAA,MACrF,MAAM,CAAC,EAAE,SAAS,MAAmC;AACnD,cAAM,IAAI,SAAS;AACnB,eAAO,oBAAC,UAAK,WAAU,gDAA+C,OAAO,cAAc,CAAC,GAAI,wBAAc,CAAC,GAAE;AAAA,MACnH;AAAA,IACF,EAAE;AAEF,UAAM,WAAW,KAAK,KAAK,CAAC,MAAO,EAAU,gBAAgB,QAAS,EAAU,OAAO,IAAI;AAC3F,QAAI,CAAC,SAAU,MAAK,QAAQ,EAAE,aAAa,MAAM,QAAQ,MAAM,MAAM,EAAE,QAAQ,MAAM,UAAU,EAAE,EAAE,CAAQ;AAC3G,eAAW,IAAI;AAAA,EACjB,GAAG,CAAC,MAAM,CAAC;AAGX,QAAM,OAAO,MAAM,QAAQ,MAAM;AAC/B,QAAI,CAAC,OAAO,KAAK,EAAG,QAAO;AAC3B,UAAM,IAAI,OAAO,KAAK,EAAE,YAAY;AACpC,YAAQ,WAAW,CAAC,GAAG,OAAO,CAAC,QAAa;AAC1C,YAAM,SAAS,OAAO,OAAO,OAAO,CAAC,CAAC;AACtC,aAAO,OAAO,KAAK,CAAC,MAAM,cAAc,CAAC,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC;AAAA,IACtE,CAAC;AAAA,EACH,GAAG,CAAC,SAAS,MAAM,CAAC;AAEpB,QAAM,oBAAoB,MAAM,QAAQ,MAAM;AAC5C,YAAQ,WAAW,CAAC,GACjB,IAAI,CAAC,QAAQ;AACZ,YAAM,cAAe,IAAY;AACjC,UAAI,CAAC,eAAe,OAAO,gBAAgB,SAAU,QAAO;AAC5D,UAAK,IAAY,MAAM,OAAQ,QAAO;AACtC,YAAM,SAAS,OAAO,IAAI,WAAW,WACjC,IAAI,SACJ,YAAY,WAAW,KAAK,IAC1B,YAAY,MAAM,CAAC,IACnB;AACN,aAAO,EAAE,OAAO,aAAa,OAAO;AAAA,IACtC,CAAC,EACA,OAAO,CAAC,QAAkD,CAAC,CAAC,GAAG;AAAA,EACpE,GAAG,CAAC,OAAO,CAAC;AAEZ,QAAM,qBAAqB,MAAM,YAAY,CAAC,WAAkC;AAC9E,UAAM,KAAK,IAAI,gBAAgB;AAAA,MAC7B;AAAA,MACA;AAAA,MACA,aAAa;AAAA,MACb,KAAK;AAAA,IACP,CAAC;AACD,UAAM,OAAO,UAAU,CAAC;AACxB,QAAI,MAAM,IAAI;AACZ,SAAG,IAAI,aAAa,OAAO,KAAK,EAAE,CAAC;AACnC,SAAG,IAAI,WAAW,KAAK,OAAO,SAAS,KAAK;AAAA,IAC9C;AACA,WAAO,yBAAyB,GAAG,SAAS,CAAC;AAAA,EAC/C,GAAG,CAAC,UAAU,OAAO,CAAC;AAEtB,QAAM,eAAe,MAAM,QAAQ,MAAM;AACvC,UAAM,eAAe,SAAS,QAAQ,iBAAiB,GAAG,KAAK;AAC/D,WAAO;AAAA,MACL,MAAM;AAAA,QACJ,aAAa;AAAA,QACb,SAAS,YAAqE;AAC5E,gBAAM,gBAAgB,KAAK,IAAI,CAAC,QAAQ;AACtC,kBAAM,MAA+B,CAAC;AACtC,uBAAW,OAAO,mBAAmB;AACnC,kBAAI,IAAI,KAAK,IAAK,IAAgC,IAAI,KAAK;AAAA,YAC7D;AACA,mBAAO;AAAA,UACT,CAAC;AACD,gBAAM,WAA2B;AAAA,YAC/B,SAAS,kBAAkB,IAAI,CAAC,SAAS,EAAE,OAAO,IAAI,OAAO,QAAQ,IAAI,OAAO,EAAE;AAAA,YAClF,MAAM;AAAA,UACR;AACA,iBAAO,EAAE,UAAU,UAAU,GAAG,YAAY,QAAQ;AAAA,QACtD;AAAA,MACF;AAAA,MACA,MAAM;AAAA,QACJ,aAAa;AAAA,QACb,QAAQ,CAAC,WAAkC,mBAAmB,MAAM;AAAA,QACpE,UAAU,MAAM,GAAG,YAAY;AAAA,MACjC;AAAA,IACF;AAAA,EACF,GAAG,CAAC,oBAAoB,MAAM,UAAU,iBAAiB,CAAC;AAE1D,QAAM,mBAAmB,MAAM,QAAQ,MAAM,sBAAsB,QAAQ,MAAM,EAAE,SAAS,GAAG,CAAC,MAAM,CAAC;AACvG,QAAM,UACJ,iCACE;AAAA,wBAAC,UAAO,SAAO,MAAC,SAAQ,WAAU,MAAK,MACrC,8BAAC,QAAK,MAAM,0BAA0B,mBAAmB,QAAQ,CAAC,IAAI,oCAEtE,GACF;AAAA,IACC,oBACC,oBAAC,UAAO,SAAO,MACb,8BAAC,QAAK,MAAM,0BAA0B,mBAAmB,QAAQ,CAAC,mBAAmB,oBAErF,GACF;AAAA,KAEJ;AAIF,QAAM,cAA2B,MAAM,QAAQ,MAAO;AAAA,IACpD,EAAE,IAAI,MAAM,OAAO,MAAM,MAAM,OAAO;AAAA,EACxC,GAAI,CAAC,CAAC;AAEN,SACE,qBAAC,QACC;AAAA,yBAAC,YACC;AAAA,2BAAC,eAAY,MAAI,MAAC,OAAM,gCAA+B,WAAU,QAC/D;AAAA,6BAAC,OAAE,WAAU,QAAO;AAAA;AAAA,UAC4G;AAAA,UAC9H,oBAAC,OAAE,WAAU,aAAY,QAAO,UAAS,KAAI,cAAa,MAAK,oDAAmD,qCAElH;AAAA,UAAK;AAAA,UAAI;AAAA,UACF;AAAA,UACP,oBAAC,OAAE,WAAU,aAAY,QAAO,UAAS,KAAI,cAAa,MAAK,6CAA4C,wCAE3G;AAAA,UAAK;AAAA,UAAI;AAAA,WAEX;AAAA,QACA,qBAAC,SAAI,WAAU,aACb;AAAA,+BAAC,SACC;AAAA,gCAAC,SAAI,WAAU,oBAAmB,gDAAkC;AAAA,YACpE,oBAAC,SAAI,WAAU,8CAA6C,8BAAC,UAAM;AAAA;AAAA,oBAE7D,QAAQ;AAAA,mCACM,GAAO;AAAA,YAC3B,qBAAC,OAAE,WAAU,8BAA6B;AAAA;AAAA,cACb;AAAA,cAC3B,oBAAC,OAAE,WAAU,aAAY,QAAO,UAAS,KAAI,cAAa,MAAK,oDAAmD,+BAElH;AAAA,cAAK;AAAA,cAAI;AAAA,cACmB;AAAA,cAC5B,oBAAC,OAAE,WAAU,aAAY,QAAO,UAAS,KAAI,cAAa,MAAK,6CAA4C,kCAE3G;AAAA,cAAI;AAAA,eAEN;AAAA,aACF;AAAA,UAEA,qBAAC,SACC;AAAA,gCAAC,SAAI,WAAU,oBAAmB,6BAAe;AAAA,YACjD,oBAAC,SAAI,WAAU,8CAA6C,8BAAC,UAAM,sGACxB,GAAO;AAAA,aACpD;AAAA,UAEA,qBAAC,SACC;AAAA,gCAAC,SAAI,WAAU,oBAAmB,6CAA+B;AAAA,YACjE,oBAAC,SAAI,WAAU,8CAA6C,8BAAC,UAAM,oHACV,GAAO;AAAA,YAChE,qBAAC,OAAE,WAAU,8BAA6B;AAAA;AAAA,cAAoC,oBAAC,UAAK,gBAAE;AAAA,cAAO;AAAA,eAAsB;AAAA,aACrH;AAAA,UAEA,qBAAC,SACC;AAAA,gCAAC,SAAI,WAAU,oBAAmB,gCAAkB;AAAA,YACpD,oBAAC,SAAI,WAAU,8CAA6C,8BAAC,UAAM;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,2CAU5C,GAAO;AAAA,YAC9B,qBAAC,OAAE,WAAU,8BAA6B;AAAA;AAAA,cAAiD,oBAAC,UAAK,iBAAG;AAAA,cAAO;AAAA,eAA6C;AAAA,aAC1J;AAAA,UAEA,qBAAC,SACC;AAAA,gCAAC,SAAI,WAAU,oBAAmB,gCAAkB;AAAA,YACpD,oBAAC,SAAI,WAAU,8CAA6C,8BAAC,UAAM;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,2CAU5C,GAAO;AAAA,aAChC;AAAA,UAEA,qBAAC,SACC;AAAA,gCAAC,SAAI,WAAU,oBAAmB,gCAAkB;AAAA,YACpD,oBAAC,SAAI,WAAU,8CAA6C,8BAAC,UAAM,sIAEJ,GAAO;AAAA,aACxE;AAAA,UAEA,qBAAC,SAAI,WAAU,yBAAwB;AAAA;AAAA,YAErC,qBAAC,QAAG,WAAU,iCACZ;AAAA,kCAAC,QAAG,0GAA4F;AAAA,cAChG,oBAAC,QAAG,2EAA6D;AAAA,cACjE,oBAAC,QAAG,8GAAqG;AAAA,eAC3G;AAAA,aACF;AAAA,WACF;AAAA,SACF;AAAA,MACA;AAAA,QAAC;AAAA;AAAA,UACC,qBAAmB;AAAA,UACnB,OAAO,YAAY,QAAQ;AAAA,UAC3B;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA,aAAa,EAAE,SAAS,yBAAyB,QAAQ,GAAG;AAAA,UAC5D,UAAU;AAAA,UACV,SAAS;AAAA,UACT;AAAA,UACA,YAAY,CAAC,QACX;AAAA,YAAC;AAAA;AAAA,cACC,OAAO;AAAA,gBACL,EAAE,IAAI,QAAQ,OAAO,QAAQ,MAAM,0BAA0B,mBAAmB,QAAQ,CAAC,YAAY,mBAAmB,OAAQ,IAAY,EAAE,CAAC,CAAC,GAAG;AAAA,gBACnJ,EAAE,IAAI,UAAU,OAAO,UAAU,aAAa,MAAM,UAAU,YAAY;AACxE,wBAAM,WAAW,OAAQ,IAAY,EAAE;AACvC,sBAAI;AACF,0BAAM,YAAY,MAAM,QAAQ;AAAA,sBAC9B,OAAO;AAAA,sBACP,SAAS;AAAA,oBACX,CAAC;AACD,wBAAI,CAAC,UAAW;AAChB,0BAAM,kBAAkB;AAAA,sBACtB,WAAW,YAAY;AACrB,8BAAM,aAAa,MAAM;AAAA,0BACvB,0BAA2B,IAAY,SAAS;AAAA,0BAChD,MAAM;AAAA,4BACJ,kCAAkC,mBAAmB,QAAQ,CAAC,aAAa,mBAAmB,QAAQ,CAAC;AAAA,4BACvG,EAAE,QAAQ,SAAS;AAAA,0BACrB;AAAA,wBACF;AACA,4BAAI,CAAC,WAAW,IAAI;AAClB,gCAAM,eAAe,WAAW,UAAU,yBAAyB;AAAA,wBACrE;AAAA,sBACF;AAAA,sBACA,SAAS;AAAA,wBACP,QAAQ;AAAA,wBACR,cAAc;AAAA,wBACd,YAAY;AAAA,wBACZ,mBAAmB;AAAA,sBACrB;AAAA,oBACF,CAAC;AACD,0BAAM,IAAI,MAAM;AAAA,sBACd,kCAAkC,mBAAmB,QAAQ,CAAC,SAAS,IAAI,aAAa,QAAQ;AAAA,sBAChG;AAAA,sBACA;AAAA,wBACE,cAAc;AAAA,wBACd,UAAU,EAAE,OAAO,CAAC,GAAG,OAAO,GAAG,MAAM,UAAU,YAAY,EAAE;AAAA,sBACjE;AAAA,oBACF;AACA,+BAAW,EAAE,SAAS,CAAC,CAAC;AACxB,6BAAS,EAAE,SAAS,CAAC;AACrB,kCAAc,EAAE,cAAc,CAAC;AAC/B,0BAAM,2BAA2B,SAAS;AAAA,kBAC5C,SAAS,OAAO;AACd,0BAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU;AACzD,0BAAM,SAAS,OAAO;AAAA,kBACxB;AAAA,gBACF,EAAE;AAAA,cACJ;AAAA;AAAA,UACF;AAAA,UAEF,UAAQ;AAAA,UACR;AAAA,UACA,iBAAiB;AAAA,UACjB,aAAa;AAAA,UACb,gBAAgB,CAAC,MAAM;AAAE,sBAAU,CAAC;AAAG,oBAAQ,CAAC;AAAA,UAAE;AAAA,UAClD,gBAAgB,CAAC,SAAS;AAAE,4BAAgB,IAAI;AAAG,oBAAQ,CAAC;AAAA,UAAE;AAAA,UAC9D,gBAAgB,MAAM;AAAE,4BAAgB,CAAC,CAAC;AAAG,oBAAQ,CAAC;AAAA,UAAE;AAAA,UACxD,YAAY,EAAE,MAAM,UAAU,OAAO,YAAY,cAAc,QAAQ;AAAA,UACvE,WAAW;AAAA;AAAA,MACb;AAAA,OACF;AAAA,IACC;AAAA,KACH;AAEJ;",
   "names": ["params"]
 }

package/dist/modules/feature_toggles/api/overrides/route.js

@@ -4,6 +4,10 @@ import { serializeOperationMetadata } from "@open-mercato/shared/lib/commands/op
 import { getOverrides } from "../../lib/queries.js";
 import { isCrudHttpError } from "@open-mercato/shared/lib/crud/errors";
 import { enforceCommandOptimisticLock } from "@open-mercato/shared/lib/crud/optimistic-lock-command";
+import {
+  runCrudMutationGuardAfterSuccess,
+  validateCrudMutationGuard
+} from "@open-mercato/shared/lib/crud/mutation-guard";
 import { logCrudAccess } from "@open-mercato/shared/lib/crud/factory";
 import { FeatureToggleOverride } from "../../data/entities.js";
 import { buildContext } from "../../lib/utils.js";
@@ -61,7 +65,7 @@ async function PUT(req) {
     if (!parsed.success) {
       return NextResponse.json({ error: "Invalid payload", details: parsed.error.flatten() }, { status: 400 });
     }
-    const { scope } = await resolveFeatureCheckContext({
+    const { scope, organizationId } = await resolveFeatureCheckContext({
       container: ctx.container,
       auth: ctx.auth,
       request: req
@@ -84,6 +88,26 @@ async function PUT(req) {
         request: req
       });
     }
+    const guardUserId = ctx.auth?.userId ?? ctx.auth?.sub ?? null;
+    if (!guardUserId) {
+      return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
+    }
+    const guardResourceKind = "feature_toggles.feature_toggle_override";
+    const guardResourceId = existingOverride?.id ?? parsed.data.toggleId;
+    const guardResult = await validateCrudMutationGuard(ctx.container, {
+      tenantId: scope.tenantId,
+      organizationId: organizationId ?? null,
+      userId: guardUserId,
+      resourceKind: guardResourceKind,
+      resourceId: guardResourceId,
+      operation: "update",
+      requestMethod: req.method,
+      requestHeaders: req.headers,
+      mutationPayload: parsed.data
+    });
+    if (guardResult && !guardResult.ok) {
+      return NextResponse.json(guardResult.body, { status: guardResult.status });
+    }
     const commandBus = ctx.container.resolve("commandBus");
     const { result, logEntry } = await commandBus.execute("feature_toggles.overrides.changeState", {
       input: {
@@ -94,6 +118,19 @@ async function PUT(req) {
       },
       ctx
     });
+    if (guardResult?.ok && guardResult.shouldRunAfterSuccess) {
+      await runCrudMutationGuardAfterSuccess(ctx.container, {
+        tenantId: scope.tenantId,
+        organizationId: organizationId ?? null,
+        userId: guardUserId,
+        resourceKind: guardResourceKind,
+        resourceId: result?.overrideToggleId ?? guardResourceId,
+        operation: "update",
+        requestMethod: req.method,
+        requestHeaders: req.headers,
+        metadata: guardResult.metadata ?? null
+      });
+    }
     const response = NextResponse.json({
       ok: true,
       overrideToggleId: result?.overrideToggleId ?? null