@open-mercato/core 0.6.6-develop.6331.1.a33b8e99b7 → 0.6.6-develop.6335.1.66528bcc62

package/src/modules/messages/lib/actions.ts

@@ -1,8 +1,8 @@
 import { parseDecryptedFieldValue } from '@open-mercato/shared/lib/encryption/tenantDataEncryptionService'
 import { sanitizeRichTextHref } from '@open-mercato/shared/lib/html/sanitizeRichText'
 import type { Message, MessageAction, MessageActionData, MessageObject } from '../data/entities'
-import { getMessageObjectType } from './message-objects-registry'
-import { getMessageType } from './message-types-registry'
+import { getAllMessageObjectTypes, getMessageObjectType } from './message-objects-registry'
+import { getAllMessageTypes, getMessageType } from './message-types-registry'
 
 type MessageActionSource = 'message' | 'type_default' | 'object'
 
@@ -227,6 +227,34 @@ export function resolveActionHref(
   return sanitizeRichTextHref(resolved)
 }
 
+function collectCommandId(target: Set<string>, commandId: unknown): void {
+  if (typeof commandId !== 'string') return
+  const trimmed = commandId.trim()
+  if (trimmed.length > 0) target.add(trimmed)
+}
+
+export function getMessageSafeCommandIds(): Set<string> {
+  const safeCommandIds = new Set<string>()
+  for (const messageType of getAllMessageTypes()) {
+    for (const action of messageType.defaultActions ?? []) {
+      collectCommandId(safeCommandIds, action.commandId)
+    }
+  }
+  for (const objectType of getAllMessageObjectTypes()) {
+    for (const action of objectType.actions ?? []) {
+      collectCommandId(safeCommandIds, action.commandId)
+    }
+  }
+  return safeCommandIds
+}
+
+export function isMessageSafeCommandId(commandId: unknown): boolean {
+  if (typeof commandId !== 'string') return false
+  const trimmed = commandId.trim()
+  if (trimmed.length === 0) return false
+  return getMessageSafeCommandIds().has(trimmed)
+}
+
 export function resolveActionCommandInput(
   action: ResolvedMessageAction,
   message: Message,

package/src/modules/sales/api/documents/factory.ts

@@ -344,6 +344,27 @@ export function buildDocumentCrudOptions(binding: DocumentBinding) {
     ...(binding.kind === 'order' ? orderOnlyFields : quoteOnlyFields),
   ]
 
+  // Large JSONB snapshot/payload columns that only the detail page renders. The
+  // grid never reads them, so selecting them for list pages fetches and decrypts
+  // blobs over the wire for nothing (#2233). `customer_snapshot` is intentionally
+  // kept because the grid derives the customer name/email column from it.
+  const detailOnlyProjectionFields = new Set([
+    'billing_address_snapshot',
+    'shipping_address_snapshot',
+    'shipping_method_snapshot',
+    'payment_method_snapshot',
+    'totals_snapshot',
+    'metadata',
+  ])
+
+  const gridFields = listFields.filter((field) => !detailOnlyProjectionFields.has(field))
+
+  // The detail page fetches a single document through this same list route with an
+  // `?id=` filter (there is no separate detail endpoint), so it needs the full
+  // projection. Grid listings (no `id`) use the trimmed projection.
+  const resolveListFields = (query: ListQuery) =>
+    query && typeof query.id === 'string' && query.id.length ? listFields : gridFields
+
   return {
     metadata: routeMetadata,
     orm: {
@@ -359,7 +380,7 @@ export function buildDocumentCrudOptions(binding: DocumentBinding) {
     list: {
       schema: listSchema,
       entityId: binding.entityId,
-      fields: listFields,
+      fields: (query: ListQuery) => resolveListFields(query),
       sortFieldMap: buildSortMap(numberColumn),
       buildFilters: async (query: any) => buildFilters(query, numberColumn, binding.kind),
       decorateCustomFields: { entityIds: [binding.entityId] },