@open-mercato/core 0.6.6-develop.6317.1.b3be10ab84 → 0.6.6-develop.6331.1.a33b8e99b7

package/src/modules/customer_accounts/widgets/injection/company-users/widget.client.tsx

@@ -3,6 +3,7 @@
 import { useQuery } from '@tanstack/react-query'
 import { apiCall } from '@open-mercato/ui/backend/utils/apiCall'
 import { useT } from '@open-mercato/shared/lib/i18n/context'
+import { StatusBadge } from '@open-mercato/ui/primitives/status-badge'
 
 interface CompanyUser {
   id: string
@@ -59,9 +60,9 @@ export default function CompanyUsersWidget({ context }: CompanyUsersProps) {
                 <div className="text-xs text-muted-foreground">{user.email}</div>
               </div>
               <div className="flex items-center gap-2">
-                <span className={`text-xs ${user.isActive ? 'text-green-600' : 'text-red-600'}`}>
+                <StatusBadge variant={user.isActive ? 'success' : 'error'} dot>
                   {user.isActive ? t('common.active', 'Active') : t('common.inactive', 'Inactive')}
-                </span>
+                </StatusBadge>
                 <a
                   href={`/backend/customer_accounts/users/${user.id}`}
                   className="text-xs text-primary hover:underline"

package/src/modules/customers/api/addresses/route.ts

@@ -68,6 +68,7 @@ const crud = makeCrudRoute({
       'is_primary',
       'organization_id',
       'tenant_id',
+      'updated_at',
     ],
     sortFieldMap: {
       createdAt: 'created_at',
@@ -142,6 +143,7 @@ const addressListItemSchema = z.object({
   is_primary: z.boolean().nullable().optional(),
   organization_id: z.string().uuid().nullable().optional(),
   tenant_id: z.string().uuid().nullable().optional(),
+  updated_at: z.string().nullable().optional(),
 })
 
 const addressCreateResponseSchema = z.object({

package/src/modules/customers/api/tags/route.ts

@@ -42,12 +42,16 @@ const crud = makeCrudRoute({
     idField: 'id',
     orgField: 'organizationId',
     tenantField: 'tenantId',
+    // CustomerTag has no `deleted_at` column. Without this, the auto-registered
+    // generic optimistic-lock reader would filter on `deletedAt: null` against a
+    // non-existent column, throw, and fail open — silently disabling the lock.
+    softDeleteField: null,
   },
   indexer: { entityType: E.customers.customer_tag },
   list: {
     schema: listSchema,
     entityId: E.customers.customer_tag,
-    fields: ['id', 'slug', 'label', 'color', 'description', 'organization_id', 'tenant_id'],
+    fields: ['id', 'slug', 'label', 'color', 'description', 'organization_id', 'tenant_id', 'updated_at'],
     buildFilters: async (query: any) => {
       const filters: Record<string, any> = {}
       if (query.search) {
@@ -107,6 +111,7 @@ const tagListItemSchema = z.object({
   description: z.string().nullable().optional(),
   organization_id: z.string().uuid().nullable().optional(),
   tenant_id: z.string().uuid().nullable().optional(),
+  updated_at: z.string().nullable().optional(),
 })
 
 const tagCreateResponseSchema = z.object({

package/src/modules/customers/backend/customers/companies-v2/[id]/page.tsx

@@ -2,7 +2,7 @@
 
 import * as React from 'react'
 import Link from 'next/link'
-import { useRouter, useSearchParams } from 'next/navigation'
+import { useRouter, useSearchParams, usePathname } from 'next/navigation'
 import { Page, PageBody } from '@open-mercato/ui/backend/Page'
 import { Building2, Hash, Users, BarChart3, StickyNote } from 'lucide-react'
 import { updateCrud, deleteCrud } from '@open-mercato/ui/backend/utils/crud'
@@ -16,6 +16,7 @@ import { AttachmentsSection, ErrorMessage, LoadingMessage, RecordNotFoundState,
 import { useConfirmDialog } from '@open-mercato/ui/backend/confirm-dialog'
 import { InjectionSpot, useInjectionWidgets } from '@open-mercato/ui/backend/injection/InjectionSpot'
 import { useGuardedMutation } from '@open-mercato/ui/backend/injection/useGuardedMutation'
+import { buildRecordInjectionContext, useSetCurrentRecordInjectionContext } from '@open-mercato/ui/backend/injection/recordContext'
 import { createTranslatorWithFallback } from '@open-mercato/shared/lib/i18n/translate'
 import { CrudForm } from '@open-mercato/ui/backend/CrudForm'
 import { CollapsibleZoneLayout, type ZoneSectionDescriptor } from '@open-mercato/ui/backend/crud/CollapsibleZoneLayout'
@@ -49,6 +50,7 @@ export default function CompanyDetailV2Page({ params }: { params?: { id?: string
   const t = useT()
   const router = useRouter()
   const searchParams = useSearchParams()
+  const pathname = usePathname()
   const { confirm, ConfirmDialogElement } = useConfirmDialog()
 
   const detailTranslator = React.useMemo(() => createTranslatorWithFallback(t), [t])
@@ -193,6 +195,21 @@ export default function CompanyDetailV2Page({ params }: { params?: { id?: string
     logContext: 'customers.companies-v2',
   })
 
+  // Publish page-load record context to the AppShell-owned `backend:record:current`
+  // mount so the enterprise record_locks widget resolves `customers.company` + id
+  // explicitly (the hardcoded path allowlist misses the `companies-v2` route).
+  useSetCurrentRecordInjectionContext(
+    buildRecordInjectionContext({
+      resourceKind: 'customers.company',
+      resourceId: currentCompanyId,
+      updatedAt: (data?.company as { updatedAt?: string | null; updated_at?: string | null } | undefined)?.updatedAt
+        ?? (data?.company as { updated_at?: string | null } | undefined)?.updated_at
+        ?? null,
+      data: data as Record<string, unknown> | null,
+      path: pathname,
+    }),
+  )
+
   const handleEditActivity = React.useCallback((activity: { id: string; interactionType?: string; title?: string | null; body?: string | null; scheduledAt?: string | null; occurredAt?: string | null; [key: string]: unknown }) => {
     const raw = activity as Record<string, unknown>
     const durationValue = typeof raw.duration === 'number'
@@ -470,7 +487,7 @@ export default function CompanyDetailV2Page({ params }: { params?: { id?: string
                 <CrudForm<CompanyEditFormValues>
                   embedded
                   trackDirtyWhenEmbedded
-                  injectionSpotId="customers.company"
+                  injectionSpotId="crud-form:customers.company"
                   entityIds={[E.customers.customer_entity, E.customers.customer_company_profile]}
                   schema={formSchema}
                   fields={formFields}

package/src/modules/customers/backend/customers/deals/[id]/hooks/useDealAssociations.ts

@@ -1,7 +1,9 @@
 import * as React from 'react'
 import { flash } from '@open-mercato/ui/backend/FlashMessages'
+import { surfaceRecordConflict } from '@open-mercato/ui/backend/conflicts'
 import { updateCrud } from '@open-mercato/ui/backend/utils/crud'
-import { readApiResultOrThrow } from '@open-mercato/ui/backend/utils/apiCall'
+import { readApiResultOrThrow, withScopedApiRequestHeaders } from '@open-mercato/ui/backend/utils/apiCall'
+import { buildOptimisticLockHeader } from '@open-mercato/ui/backend/utils/optimisticLock'
 import { useT } from '@open-mercato/shared/lib/i18n/context'
 import type {
   CompanyAssociationApiRecord,
@@ -95,6 +97,8 @@ type UseDealAssociationsOptions = {
   data: DealDetailPayload | null
   setData: React.Dispatch<React.SetStateAction<DealDetailPayload | null>>
   runMutationWithContext: GuardedMutationRunner
+  /** Re-fetch the deal detail; wired into the conflict bar's refresh action on a 409. */
+  onRefresh?: (() => void) | null
 }
 
 type UseDealAssociationsResult = {
@@ -113,6 +117,7 @@ export function useDealAssociations({
   data,
   setData,
   runMutationWithContext,
+  onRefresh,
 }: UseDealAssociationsOptions): UseDealAssociationsResult {
   const t = useT()
   const [peopleEditorIds, setPeopleEditorIds] = React.useState<string[]>([])
@@ -263,7 +268,10 @@ export function useDealAssociations({
       setPeopleSaving(true)
       try {
         await runMutationWithContext(
-          () => updateCrud('customers/deals', { id: currentDealId, personIds: nextIds }),
+          () => withScopedApiRequestHeaders(
+            buildOptimisticLockHeader(data?.deal.updatedAt),
+            () => updateCrud('customers/deals', { id: currentDealId, personIds: nextIds }),
+          ),
           { id: currentDealId, personIds: nextIds, operation: 'updateDealPeople' },
         )
         const nextPeople = await loadPeopleAssociations(nextIds.slice(0, 3))
@@ -277,7 +285,7 @@ export function useDealAssociations({
               }
             : prev,
         )
-      } catch {
+      } catch (error) {
         setPeopleEditorIds(previousIds)
         setData((prev) =>
           prev
@@ -289,12 +297,16 @@ export function useDealAssociations({
               }
             : prev,
         )
-        flash(t('customers.deals.detail.peopleUpdateError', 'Failed to update linked people.'), 'error')
+        // runMutationWithContext already surfaces the conflict bar on a 409; only
+        // fall back to the generic flash when this is not a record conflict.
+        if (!surfaceRecordConflict(error, t, { onRefresh: onRefresh ?? null })) {
+          flash(t('customers.deals.detail.peopleUpdateError', 'Failed to update linked people.'), 'error')
+        }
       } finally {
         setPeopleSaving(false)
       }
     },
-    [currentDealId, data?.people, loadPeopleAssociations, peopleEditorIds, runMutationWithContext, setData, t],
+    [currentDealId, data?.deal.updatedAt, data?.people, loadPeopleAssociations, onRefresh, peopleEditorIds, runMutationWithContext, setData, t],
   )
 
   const handleCompaniesAssociationsChange = React.useCallback(
@@ -307,7 +319,10 @@ export function useDealAssociations({
       setCompaniesSaving(true)
       try {
         await runMutationWithContext(
-          () => updateCrud('customers/deals', { id: currentDealId, companyIds: nextIds }),
+          () => withScopedApiRequestHeaders(
+            buildOptimisticLockHeader(data?.deal.updatedAt),
+            () => updateCrud('customers/deals', { id: currentDealId, companyIds: nextIds }),
+          ),
           { id: currentDealId, companyIds: nextIds, operation: 'updateDealCompanies' },
         )
         const nextCompanies = await loadCompanyAssociations(nextIds.slice(0, 3))
@@ -321,7 +336,7 @@ export function useDealAssociations({
               }
             : prev,
         )
-      } catch {
+      } catch (error) {
         setCompaniesEditorIds(previousIds)
         setData((prev) =>
           prev
@@ -333,7 +348,11 @@ export function useDealAssociations({
               }
             : prev,
         )
-        flash(t('customers.deals.detail.companiesUpdateError', 'Failed to update linked companies.'), 'error')
+        // runMutationWithContext already surfaces the conflict bar on a 409; only
+        // fall back to the generic flash when this is not a record conflict.
+        if (!surfaceRecordConflict(error, t, { onRefresh: onRefresh ?? null })) {
+          flash(t('customers.deals.detail.companiesUpdateError', 'Failed to update linked companies.'), 'error')
+        }
       } finally {
         setCompaniesSaving(false)
       }
@@ -342,7 +361,9 @@ export function useDealAssociations({
       companiesEditorIds,
       currentDealId,
       data?.companies,
+      data?.deal.updatedAt,
       loadCompanyAssociations,
+      onRefresh,
       runMutationWithContext,
       setData,
       t,

package/src/modules/customers/backend/customers/deals/[id]/hooks/useDealClosure.ts

@@ -1,10 +1,15 @@
 import * as React from 'react'
 import { updateCrud } from '@open-mercato/ui/backend/utils/crud'
-import { readApiResultOrThrow } from '@open-mercato/ui/backend/utils/apiCall'
+import { readApiResultOrThrow, withScopedApiRequestHeaders } from '@open-mercato/ui/backend/utils/apiCall'
+import { buildOptimisticLockHeader } from '@open-mercato/ui/backend/utils/optimisticLock'
+import { surfaceRecordConflict } from '@open-mercato/ui/backend/conflicts'
+import { flash } from '@open-mercato/ui/backend/FlashMessages'
+import { useT } from '@open-mercato/shared/lib/i18n/context'
 import type { DealStatsPayload, GuardedMutationRunner } from './types'
 
 type UseDealClosureOptions = {
   currentDealId: string | null
+  dealUpdatedAt: string | null
   runMutationWithContext: GuardedMutationRunner
   confirmDiscardIfDirty: () => Promise<boolean>
   onClosed: () => Promise<void>
@@ -26,10 +31,12 @@ type UseDealClosureResult = {
 
 export function useDealClosure({
   currentDealId,
+  dealUpdatedAt,
   runMutationWithContext,
   confirmDiscardIfDirty,
   onClosed,
 }: UseDealClosureOptions): UseDealClosureResult {
+  const t = useT()
   const [lostDialogOpen, setLostDialogOpen] = React.useState(false)
   const [wonPopupOpen, setWonPopupOpen] = React.useState(false)
   const [lostPopupOpen, setLostPopupOpen] = React.useState(false)
@@ -51,45 +58,65 @@ export function useDealClosure({
   const handleWon = React.useCallback(async () => {
     if (!currentDealId) return
     if (!(await confirmDiscardIfDirty())) return
-    await runMutationWithContext(
-      () => updateCrud('customers/deals', { id: currentDealId, closureOutcome: 'won', status: 'win' }),
-      { id: currentDealId, closureOutcome: 'won', status: 'win', operation: 'closeWon' },
-    )
+    try {
+      await runMutationWithContext(
+        () => withScopedApiRequestHeaders(
+          buildOptimisticLockHeader(dealUpdatedAt),
+          () => updateCrud('customers/deals', { id: currentDealId, closureOutcome: 'won', status: 'win' }),
+        ),
+        { id: currentDealId, closureOutcome: 'won', status: 'win', operation: 'closeWon' },
+      )
+    } catch (err) {
+      if (!surfaceRecordConflict(err, t, { onRefresh: () => { void onClosed() } })) {
+        flash(t('customers.deals.detail.closeWonError', 'Failed to mark deal as won.'), 'error')
+      }
+      return
+    }
     const stats = await fetchDealStats()
     setWonStats(stats)
     setWonPopupOpen(true)
     await onClosed()
-  }, [confirmDiscardIfDirty, currentDealId, fetchDealStats, onClosed, runMutationWithContext])
+  }, [confirmDiscardIfDirty, currentDealId, dealUpdatedAt, fetchDealStats, onClosed, runMutationWithContext, t])
 
   const handleLostConfirm = React.useCallback(
     async (input: { lossReasonId: string; lossNotes?: string }) => {
       if (!currentDealId) return
       if (!(await confirmDiscardIfDirty())) return
-      await runMutationWithContext(
-        () =>
-          updateCrud('customers/deals', {
+      try {
+        await runMutationWithContext(
+          () => withScopedApiRequestHeaders(
+            buildOptimisticLockHeader(dealUpdatedAt),
+            () =>
+              updateCrud('customers/deals', {
+                id: currentDealId,
+                closureOutcome: 'lost',
+                status: 'loose',
+                lossReasonId: input.lossReasonId,
+                lossNotes: input.lossNotes ?? null,
+              }),
+          ),
+          {
             id: currentDealId,
             closureOutcome: 'lost',
             status: 'loose',
             lossReasonId: input.lossReasonId,
             lossNotes: input.lossNotes ?? null,
-          }),
-        {
-          id: currentDealId,
-          closureOutcome: 'lost',
-          status: 'loose',
-          lossReasonId: input.lossReasonId,
-          lossNotes: input.lossNotes ?? null,
-          operation: 'closeLost',
-        },
-      )
+            operation: 'closeLost',
+          },
+        )
+      } catch (err) {
+        if (!surfaceRecordConflict(err, t, { onRefresh: () => { void onClosed() } })) {
+          flash(t('customers.deals.detail.closeLostError', 'Failed to mark deal as lost.'), 'error')
+        }
+        return
+      }
       setLostDialogOpen(false)
       const stats = await fetchDealStats()
       setLostStats(stats)
       setLostPopupOpen(true)
       await onClosed()
     },
-    [confirmDiscardIfDirty, currentDealId, fetchDealStats, onClosed, runMutationWithContext],
+    [confirmDiscardIfDirty, currentDealId, dealUpdatedAt, fetchDealStats, onClosed, runMutationWithContext, t],
   )
 
   const openLostDialog = React.useCallback(() => setLostDialogOpen(true), [])

package/src/modules/customers/backend/customers/deals/[id]/hooks/useDealPipeline.ts

@@ -1,6 +1,9 @@
 import * as React from 'react'
 import { flash } from '@open-mercato/ui/backend/FlashMessages'
 import { updateCrud } from '@open-mercato/ui/backend/utils/crud'
+import { withScopedApiRequestHeaders } from '@open-mercato/ui/backend/utils/apiCall'
+import { buildOptimisticLockHeader } from '@open-mercato/ui/backend/utils/optimisticLock'
+import { surfaceRecordConflict } from '@open-mercato/ui/backend/conflicts'
 import { useT } from '@open-mercato/shared/lib/i18n/context'
 import type { DealDetailPayload, GuardedMutationRunner } from './types'
 
@@ -35,13 +38,20 @@ export function useDealPipeline({
       setIsStageSaving(true)
       try {
         await runMutationWithContext(
-          () => updateCrud('customers/deals', { id: currentDealId, pipelineStageId: nextStageId }),
+          () => withScopedApiRequestHeaders(
+            buildOptimisticLockHeader(data.deal.updatedAt),
+            () => updateCrud('customers/deals', { id: currentDealId, pipelineStageId: nextStageId }),
+          ),
           { id: currentDealId, pipelineStageId: nextStageId, operation: 'updateDealStage' },
         )
         flash(t('customers.deals.detail.stageUpdateSuccess', 'Deal stage updated.'), 'success')
         await onStageChanged()
-      } catch {
-        flash(t('customers.deals.detail.stageUpdateError', 'Failed to update deal stage.'), 'error')
+      } catch (err) {
+        // A concurrent edit / pessimistic lock 409 routes to the unified conflict
+        // bar or merge dialog (S3); surface any other error as a flash.
+        if (!surfaceRecordConflict(err, t, { onRefresh: () => { void onStageChanged() } })) {
+          flash(t('customers.deals.detail.stageUpdateError', 'Failed to update deal stage.'), 'error')
+        }
       } finally {
         setIsStageSaving(false)
       }

package/src/modules/customers/backend/customers/deals/[id]/page.tsx

@@ -4,11 +4,12 @@ import * as React from 'react'
 import Link from 'next/link'
 import { Building2, UserSearch, Users } from 'lucide-react'
 import { EmptyState } from '@open-mercato/ui/primitives/empty-state'
-import { useRouter, useSearchParams } from 'next/navigation'
+import { useRouter, useSearchParams, usePathname } from 'next/navigation'
 import { Page, PageBody } from '@open-mercato/ui/backend/Page'
 import { Button } from '@open-mercato/ui/primitives/button'
 import { AttachmentsSection, ErrorMessage, LoadingMessage, NotesSection, RecordNotFoundState } from '@open-mercato/ui/backend/detail'
 import { InjectionSpot } from '@open-mercato/ui/backend/injection/InjectionSpot'
+import { buildRecordInjectionContext, useSetCurrentRecordInjectionContext } from '@open-mercato/ui/backend/injection/recordContext'
 import { useConfirmDialog } from '@open-mercato/ui/backend/confirm-dialog'
 import { CollapsibleZoneLayout } from '@open-mercato/ui/backend/crud/CollapsibleZoneLayout'
 import { useT } from '@open-mercato/shared/lib/i18n/context'
@@ -52,6 +53,7 @@ export default function DealDetailPage({ params }: { params?: { id?: string } })
   const t = useT()
   const router = useRouter()
   const searchParams = useSearchParams()
+  const pathname = usePathname()
   const { confirm, ConfirmDialogElement } = useConfirmDialog()
   const detailTranslator = React.useMemo(() => createTranslatorWithFallback(t), [t])
 
@@ -80,6 +82,20 @@ export default function DealDetailPage({ params }: { params?: { id?: string } })
     data,
   })
 
+  // Publish page-load record context with explicit `updatedAt`/`data` to the
+  // AppShell-owned `backend:record:current` mount. The deal path is already in the
+  // widget's allowlist (presence works) but supplied no version/record payload —
+  // this gives the merge dialog its action-log base and field-diff source.
+  useSetCurrentRecordInjectionContext(
+    buildRecordInjectionContext({
+      resourceKind: 'customers.deal',
+      resourceId: data?.deal.id ?? null,
+      updatedAt: data?.deal.updatedAt ?? null,
+      data: data as Record<string, unknown> | null,
+      path: pathname,
+    }),
+  )
+
   const notesAdapter = React.useMemo(
     () => createCustomerNotesAdapter(detailTranslator, { runMutation: runMutationWithContext }),
     [detailTranslator, runMutationWithContext],
@@ -171,6 +187,7 @@ export default function DealDetailPage({ params }: { params?: { id?: string } })
     data,
     setData,
     runMutationWithContext,
+    onRefresh: () => { void loadData() },
   })
 
   const { isStageSaving, handleStageChange } = useDealPipeline({
@@ -195,6 +212,7 @@ export default function DealDetailPage({ params }: { params?: { id?: string } })
     handleLostConfirm,
   } = useDealClosure({
     currentDealId,
+    dealUpdatedAt: data?.deal.updatedAt ?? null,
     runMutationWithContext,
     confirmDiscardIfDirty,
     onClosed: loadData,
@@ -365,6 +383,8 @@ export default function DealDetailPage({ params }: { params?: { id?: string } })
         showAssociationsGroup={false}
         showVersionHistory={false}
         showCancelAction={false}
+        injectionSpotId="crud-form:customers.deal"
+        optimisticLockUpdatedAt={data.deal.updatedAt}
         onDirtyChange={setIsDirty}
         initialPipelineOptions={formPipelineOptions}
         initialPipelineStageOptions={data.pipelineStages}

package/src/modules/customers/backend/customers/people-v2/[id]/page.tsx

@@ -2,7 +2,7 @@
 
 import * as React from 'react'
 import Link from 'next/link'
-import { useRouter, useSearchParams } from 'next/navigation'
+import { useRouter, useSearchParams, usePathname } from 'next/navigation'
 import { User, Hash, Users, Building2 } from 'lucide-react'
 import { Page, PageBody } from '@open-mercato/ui/backend/Page'
 import { CrudForm } from '@open-mercato/ui/backend/CrudForm'
@@ -24,6 +24,7 @@ import { AttachmentsSection, ErrorMessage, LoadingMessage, RecordNotFoundState,
 import { useConfirmDialog } from '@open-mercato/ui/backend/confirm-dialog'
 import { InjectionSpot, useInjectionWidgets } from '@open-mercato/ui/backend/injection/InjectionSpot'
 import { useGuardedMutation } from '@open-mercato/ui/backend/injection/useGuardedMutation'
+import { buildRecordInjectionContext, useSetCurrentRecordInjectionContext } from '@open-mercato/ui/backend/injection/recordContext'
 import { createTranslatorWithFallback } from '@open-mercato/shared/lib/i18n/translate'
 
 import { ActivitiesSection } from '../../../../components/detail/ActivitiesSection'
@@ -57,6 +58,7 @@ export default function PersonDetailV2Page({ params }: { params?: { id?: string
   const t = useT()
   const router = useRouter()
   const searchParams = useSearchParams()
+  const pathname = usePathname()
   const { organizationId } = useOrganizationScopeDetail()
   const isMobile = useIsMobile()
   const { confirm, ConfirmDialogElement } = useConfirmDialog()
@@ -219,6 +221,20 @@ export default function PersonDetailV2Page({ params }: { params?: { id?: string
     [injectionContext, runMutation],
   )
 
+  // Publish page-load record context to the AppShell-owned `backend:record:current`
+  // mount so the enterprise record_locks widget resolves `customers.person` + id
+  // explicitly (the hardcoded path allowlist misses the `people-v2` route).
+  // Presence/acquire/heartbeat run on load; the hook clears on unmount/record switch.
+  useSetCurrentRecordInjectionContext(
+    buildRecordInjectionContext({
+      resourceKind: 'customers.person',
+      resourceId: currentPersonId,
+      updatedAt: data?.person?.updatedAt ?? data?.person?.updated_at ?? null,
+      data: data as Record<string, unknown> | null,
+      path: pathname,
+    }),
+  )
+
   const handleAddActivity = React.useCallback((kind: ActivityKind) => {
     setScheduleEditData({
       id: '',
@@ -518,7 +534,7 @@ export default function PersonDetailV2Page({ params }: { params?: { id?: string
                 <CrudForm<PersonEditFormValues>
                   embedded
                   trackDirtyWhenEmbedded
-                  injectionSpotId="customers.person"
+                  injectionSpotId="crud-form:customers.person"
                   entityIds={[E.customers.customer_entity, E.customers.customer_person_profile]}
                   schema={formSchema}
                   fields={fields}

package/src/modules/customers/commands/interactions.ts

@@ -39,7 +39,7 @@ import {
   buildCustomFieldResetMap,
 } from '@open-mercato/shared/lib/commands/customFieldSnapshots'
 import { CrudHttpError } from '@open-mercato/shared/lib/crud/errors'
-import { enforceRecordGoneIsConflict, enforceCommandOptimisticLock } from '@open-mercato/shared/lib/crud/optimistic-lock-command'
+import { enforceRecordGoneIsConflict, enforceCommandOptimisticLockWithGuards } from '@open-mercato/shared/lib/crud/optimistic-lock-command'
 import { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'
 import type { CrudIndexerConfig, CrudEventsConfig } from '@open-mercato/shared/lib/crud/types'
 import { recomputeNextInteraction } from '../lib/interactionProjection'
@@ -644,7 +644,7 @@ const updateInteractionCommand: CommandHandler<InteractionUpdateInput, { interac
       // when the client opted into optimistic locking, a stale edit fails with the
       // unified 409 instead of silently overwriting (#2055). Strictly additive —
       // no-op when no expected-version header is present.
-      enforceCommandOptimisticLock({
+      await enforceCommandOptimisticLockWithGuards(ctx.container, {
         resourceKind: 'customers.interaction',
         resourceId: interaction.id,
         current: interaction.updatedAt,
@@ -912,7 +912,7 @@ const completeInteractionCommand: CommandHandler<InteractionCompleteInput, { int
       ensureTenantScope(ctx, interaction.tenantId)
       ensureOrganizationScope(ctx, interaction.organizationId)
 
-      enforceCommandOptimisticLock({
+      await enforceCommandOptimisticLockWithGuards(ctx.container, {
         resourceKind: 'customers.interaction',
         resourceId: interaction.id,
         current: interaction.updatedAt,
@@ -1052,7 +1052,7 @@ const cancelInteractionCommand: CommandHandler<InteractionCancelInput, { interac
       ensureTenantScope(ctx, interaction.tenantId)
       ensureOrganizationScope(ctx, interaction.organizationId)
 
-      enforceCommandOptimisticLock({
+      await enforceCommandOptimisticLockWithGuards(ctx.container, {
         resourceKind: 'customers.interaction',
         resourceId: interaction.id,
         current: interaction.updatedAt,
@@ -1190,7 +1190,7 @@ const deleteInteractionCommand: CommandHandler<{ body?: Record<string, unknown>;
         ensureTenantScope(ctx, interaction.tenantId)
         ensureOrganizationScope(ctx, interaction.organizationId)
 
-        enforceCommandOptimisticLock({
+        await enforceCommandOptimisticLockWithGuards(ctx.container, {
           resourceKind: 'customers.interaction',
           resourceId: interaction.id,
           current: interaction.updatedAt,

package/src/modules/customers/commands/pipeline-stages.ts

@@ -16,6 +16,10 @@ import {
 import { ensureOrganizationScope, ensureTenantScope, ensureDictionaryEntry } from './shared'
 import { CrudHttpError } from '@open-mercato/shared/lib/crud/errors'
 import { withAtomicFlush } from '@open-mercato/shared/lib/commands/flush'
+import {
+  enforceCommandOptimisticLockWithGuards,
+  enforceRecordGoneIsConflict,
+} from '@open-mercato/shared/lib/crud/optimistic-lock-command'
 
 const createPipelineStageCommand: CommandHandler<PipelineStageCreateInput, { stageId: string }> = {
   id: 'customers.pipeline-stages.create',
@@ -106,11 +110,21 @@ const updatePipelineStageCommand: CommandHandler<PipelineStageUpdateInput, void>
       ...(callerTenantId ? { tenantId: callerTenantId } : {}),
       ...(callerOrganizationId ? { organizationId: callerOrganizationId } : {}),
     })
-    if (!stage) throw new CrudHttpError(404, { error: 'Pipeline stage not found' })
+    if (!stage) {
+      enforceRecordGoneIsConflict({ resourceKind: 'customers.pipelineStage', resourceId: parsed.id, request: ctx.request ?? null })
+      throw new CrudHttpError(404, { error: 'Pipeline stage not found' })
+    }
 
     ensureTenantScope(ctx, stage.tenantId)
     ensureOrganizationScope(ctx, stage.organizationId)
 
+    await enforceCommandOptimisticLockWithGuards(ctx.container, {
+      resourceKind: 'customers.pipelineStage',
+      resourceId: stage.id,
+      current: stage.updatedAt,
+      request: ctx.request ?? null,
+    })
+
     await withAtomicFlush(em, [
       () => {
         if (parsed.label !== undefined) stage.label = parsed.label
@@ -148,11 +162,21 @@ const deletePipelineStageCommand: CommandHandler<PipelineStageDeleteInput, void>
       ...(callerTenantId ? { tenantId: callerTenantId } : {}),
       ...(callerOrganizationId ? { organizationId: callerOrganizationId } : {}),
     })
-    if (!stage) throw new CrudHttpError(404, { error: 'Pipeline stage not found' })
+    if (!stage) {
+      enforceRecordGoneIsConflict({ resourceKind: 'customers.pipelineStage', resourceId: parsed.id, request: ctx.request ?? null })
+      throw new CrudHttpError(404, { error: 'Pipeline stage not found' })
+    }
 
     ensureTenantScope(ctx, stage.tenantId)
     ensureOrganizationScope(ctx, stage.organizationId)
 
+    await enforceCommandOptimisticLockWithGuards(ctx.container, {
+      resourceKind: 'customers.pipelineStage',
+      resourceId: stage.id,
+      current: stage.updatedAt,
+      request: ctx.request ?? null,
+    })
+
     const activeDealsCount = await em.count(CustomerDeal, {
       pipelineStageId: parsed.id,
       deletedAt: null,

package/src/modules/customers/commands/pipelines.ts

@@ -12,6 +12,10 @@ import {
 } from '../data/validators'
 import { ensureOrganizationScope, ensureTenantScope } from './shared'
 import { CrudHttpError } from '@open-mercato/shared/lib/crud/errors'
+import {
+  enforceCommandOptimisticLockWithGuards,
+  enforceRecordGoneIsConflict,
+} from '@open-mercato/shared/lib/crud/optimistic-lock-command'
 import { withAtomicFlush } from '@open-mercato/shared/lib/commands/flush'
 
 const createPipelineCommand: CommandHandler<PipelineCreateInput, { pipelineId: string }> = {
@@ -56,11 +60,21 @@ const updatePipelineCommand: CommandHandler<PipelineUpdateInput, void> = {
 
     const em = (ctx.container.resolve('em') as EntityManager).fork()
     const pipeline = await em.findOne(CustomerPipeline, { id: parsed.id })
-    if (!pipeline) throw new CrudHttpError(404, { error: 'Pipeline not found' })
+    if (!pipeline) {
+      enforceRecordGoneIsConflict({ resourceKind: 'customers.pipeline', resourceId: parsed.id, request: ctx.request ?? null })
+      throw new CrudHttpError(404, { error: 'Pipeline not found' })
+    }
 
     ensureTenantScope(ctx, pipeline.tenantId)
     ensureOrganizationScope(ctx, pipeline.organizationId)
 
+    await enforceCommandOptimisticLockWithGuards(ctx.container, {
+      resourceKind: 'customers.pipeline',
+      resourceId: pipeline.id,
+      current: pipeline.updatedAt,
+      request: ctx.request ?? null,
+    })
+
     await withAtomicFlush(em, [
       async () => {
         if (parsed.isDefault && !pipeline.isDefault) {
@@ -86,11 +100,21 @@ const deletePipelineCommand: CommandHandler<PipelineDeleteInput, void> = {
 
     const em = (ctx.container.resolve('em') as EntityManager).fork()
     const pipeline = await em.findOne(CustomerPipeline, { id: parsed.id })
-    if (!pipeline) throw new CrudHttpError(404, { error: 'Pipeline not found' })
+    if (!pipeline) {
+      enforceRecordGoneIsConflict({ resourceKind: 'customers.pipeline', resourceId: parsed.id, request: ctx.request ?? null })
+      throw new CrudHttpError(404, { error: 'Pipeline not found' })
+    }
 
     ensureTenantScope(ctx, pipeline.tenantId)
     ensureOrganizationScope(ctx, pipeline.organizationId)
 
+    await enforceCommandOptimisticLockWithGuards(ctx.container, {
+      resourceKind: 'customers.pipeline',
+      resourceId: pipeline.id,
+      current: pipeline.updatedAt,
+      request: ctx.request ?? null,
+    })
+
     const activeDealsCount = await em.count(CustomerDeal, {
       pipelineId: parsed.id,
       deletedAt: null,