@open-mercato/core 0.6.6-develop.6460.1.f94c74174c → 0.6.6-develop.6471.1.9ab5bdd79a

package/dist/modules/resources/commands/comments.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/resources/commands/comments.ts"],
-  "sourcesContent": ["import { registerCommand } from '@open-mercato/shared/lib/commands'\nimport type { CommandHandler } from '@open-mercato/shared/lib/commands'\nimport { emitCrudSideEffects, emitCrudUndoSideEffects, buildChanges, requireId, normalizeAuthorUserId } from '@open-mercato/shared/lib/commands/helpers'\nimport type { DataEngine } from '@open-mercato/shared/lib/data/engine'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { CrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport type { CrudIndexerConfig } from '@open-mercato/shared/lib/crud/types'\nimport { ResourcesResourceComment } from '../data/entities'\nimport {\n  resourcesResourceCommentCreateSchema,\n  resourcesResourceCommentUpdateSchema,\n  type ResourcesResourceCommentCreateInput,\n  type ResourcesResourceCommentUpdateInput,\n} from '../data/validators'\nimport { resourcesResourceCommentCrudEvents } from '../lib/crud'\nimport { makeCreateRedo } from '@open-mercato/shared/lib/commands/redo'\nimport { ensureOrganizationScope, ensureTenantScope, extractUndoPayload, requireResource } from './shared'\nimport { E } from '#generated/entities.ids.generated'\n\nconst commentCrudIndexer: CrudIndexerConfig<ResourcesResourceComment> = {\n  entityType: E.resources.resources_resource_comment,\n}\n\ntype CommentSnapshot = {\n  id: string\n  organizationId: string\n  tenantId: string\n  resourceId: string\n  body: string\n  authorUserId: string | null\n  appearanceIcon: string | null\n  appearanceColor: string | null\n}\n\ntype CommentUndoPayload = {\n  before?: CommentSnapshot | null\n  after?: CommentSnapshot | null\n}\n\nasync function loadCommentSnapshot(em: EntityManager, id: string): Promise<CommentSnapshot | null> {\n  const comment = await em.findOne(ResourcesResourceComment, { id })\n  if (!comment) return null\n  return {\n    id: comment.id,\n    organizationId: comment.organizationId,\n    tenantId: comment.tenantId,\n    resourceId: typeof comment.resource === 'string' ? comment.resource : comment.resource.id,\n    body: comment.body,\n    authorUserId: comment.authorUserId ?? null,\n    appearanceIcon: comment.appearanceIcon ?? null,\n    appearanceColor: comment.appearanceColor ?? null,\n  }\n}\n\nconst createCommentCommand: CommandHandler<\n  ResourcesResourceCommentCreateInput,\n  { commentId: string; authorUserId: string | null }\n> = {\n  id: 'resources.resource-comments.create',\n  async execute(rawInput, ctx) {\n    const parsed = resourcesResourceCommentCreateSchema.parse(rawInput)\n    ensureTenantScope(ctx, parsed.tenantId)\n    ensureOrganizationScope(ctx, parsed.organizationId)\n    const normalizedAuthor = normalizeAuthorUserId(parsed.authorUserId, ctx.auth)\n\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n    const resource = await requireResource(em, parsed.entityId, 'Resource not found')\n    ensureTenantScope(ctx, resource.tenantId)\n    ensureOrganizationScope(ctx, resource.organizationId)\n\n    const comment = em.create(ResourcesResourceComment, {\n      organizationId: parsed.organizationId,\n      tenantId: parsed.tenantId,\n      resource,\n      body: parsed.body,\n      authorUserId: normalizedAuthor,\n      appearanceIcon: parsed.appearanceIcon ?? null,\n      appearanceColor: parsed.appearanceColor ?? null,\n      createdAt: new Date(),\n      updatedAt: new Date(),\n    })\n    em.persist(comment)\n    await em.flush()\n\n    const de = (ctx.container.resolve('dataEngine') as DataEngine)\n    await emitCrudSideEffects({\n      dataEngine: de,\n      action: 'created',\n      entity: comment,\n      identifiers: {\n        id: comment.id,\n        organizationId: comment.organizationId,\n        tenantId: comment.tenantId,\n      },\n      events: resourcesResourceCommentCrudEvents,\n      indexer: commentCrudIndexer,\n    })\n\n    return { commentId: comment.id, authorUserId: comment.authorUserId ?? null }\n  },\n  captureAfter: async (_input, result, ctx) => {\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n    return await loadCommentSnapshot(em, result.commentId)\n  },\n  buildLog: async ({ result, ctx }) => {\n    const { translate } = await resolveTranslations()\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n    const snapshot = await loadCommentSnapshot(em, result.commentId)\n    return {\n      actionLabel: translate('resources.audit.resourceComments.create', 'Create note'),\n      resourceKind: 'resources.resource_comment',\n      resourceId: result.commentId,\n      parentResourceKind: 'resources.resource',\n      parentResourceId: snapshot?.resourceId ?? null,\n      tenantId: snapshot?.tenantId ?? null,\n      organizationId: snapshot?.organizationId ?? null,\n      snapshotAfter: snapshot ?? null,\n      payload: {\n        undo: {\n          after: snapshot ?? null,\n        } satisfies CommentUndoPayload,\n      },\n    }\n  },\n  undo: async ({ logEntry, ctx }) => {\n    const commentId = logEntry?.resourceId ?? null\n    if (!commentId) return\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n    const existing = await em.findOne(ResourcesResourceComment, { id: commentId })\n    if (existing) {\n      em.remove(existing)\n      await em.flush()\n    }\n  },\n  redo: makeCreateRedo<ResourcesResourceComment, CommentSnapshot, ResourcesResourceCommentCreateInput, { commentId: string; authorUserId: string | null }>({\n    entityClass: ResourcesResourceComment,\n    seedFromSnapshot: (after) => ({\n      id: after.id,\n      organizationId: after.organizationId,\n      tenantId: after.tenantId,\n      body: after.body,\n      authorUserId: after.authorUserId,\n      appearanceIcon: after.appearanceIcon,\n      appearanceColor: after.appearanceColor,\n    }),\n    beforeRestore: async ({ em, snapshot }) => {\n      const resource = await requireResource(em, snapshot.resourceId, 'Resource not found')\n      return { resource }\n    },\n    buildResult: (entity) => ({ commentId: entity.id, authorUserId: entity.authorUserId ?? null }),\n    events: resourcesResourceCommentCrudEvents,\n    indexer: commentCrudIndexer,\n  }),\n}\n\nconst updateCommentCommand: CommandHandler<ResourcesResourceCommentUpdateInput, { commentId: string }> = {\n  id: 'resources.resource-comments.update',\n  async prepare(rawInput, ctx) {\n    const parsed = resourcesResourceCommentUpdateSchema.parse(rawInput)\n    const em = (ctx.container.resolve('em') as EntityManager)\n    const snapshot = await loadCommentSnapshot(em, parsed.id)\n    return snapshot ? { before: snapshot } : {}\n  },\n  async execute(rawInput, ctx) {\n    const parsed = resourcesResourceCommentUpdateSchema.parse(rawInput)\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n    const comment = await em.findOne(ResourcesResourceComment, { id: parsed.id })\n    if (!comment) throw new CrudHttpError(404, { error: 'Comment not found' })\n    ensureTenantScope(ctx, comment.tenantId)\n    ensureOrganizationScope(ctx, comment.organizationId)\n\n    if (parsed.entityId !== undefined) {\n      const resource = await requireResource(em, parsed.entityId, 'Resource not found')\n      ensureTenantScope(ctx, resource.tenantId)\n      ensureOrganizationScope(ctx, resource.organizationId)\n      comment.resource = resource\n    }\n    if (parsed.body !== undefined) comment.body = parsed.body\n    if (parsed.authorUserId !== undefined) comment.authorUserId = parsed.authorUserId ?? null\n    if (parsed.appearanceIcon !== undefined) comment.appearanceIcon = parsed.appearanceIcon ?? null\n    if (parsed.appearanceColor !== undefined) comment.appearanceColor = parsed.appearanceColor ?? null\n\n    await em.flush()\n\n    const de = (ctx.container.resolve('dataEngine') as DataEngine)\n    await emitCrudSideEffects({\n      dataEngine: de,\n      action: 'updated',\n      entity: comment,\n      identifiers: {\n        id: comment.id,\n        organizationId: comment.organizationId,\n        tenantId: comment.tenantId,\n      },\n      events: resourcesResourceCommentCrudEvents,\n      indexer: commentCrudIndexer,\n    })\n\n    return { commentId: comment.id }\n  },\n  buildLog: async ({ snapshots, ctx }) => {\n    const { translate } = await resolveTranslations()\n    const before = snapshots.before as CommentSnapshot | undefined\n    if (!before) return null\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n    const afterSnapshot = await loadCommentSnapshot(em, before.id)\n    const changes =\n      afterSnapshot && before\n        ? buildChanges(\n            before as Record<string, unknown>,\n            afterSnapshot as Record<string, unknown>,\n            ['resourceId', 'body', 'authorUserId', 'appearanceIcon', 'appearanceColor'],\n          )\n        : {}\n    return {\n      actionLabel: translate('resources.audit.resourceComments.update', 'Update note'),\n      resourceKind: 'resources.resource_comment',\n      resourceId: before.id,\n      parentResourceKind: 'resources.resource',\n      parentResourceId: before.resourceId ?? null,\n      tenantId: before.tenantId,\n      organizationId: before.organizationId,\n      snapshotBefore: before,\n      snapshotAfter: afterSnapshot ?? null,\n      changes,\n      payload: {\n        undo: {\n          before,\n          after: afterSnapshot ?? null,\n        } satisfies CommentUndoPayload,\n      },\n    }\n  },\n  undo: async ({ logEntry, ctx }) => {\n    const payload = extractUndoPayload<CommentUndoPayload>(logEntry)\n    const before = payload?.before\n    if (!before) return\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n    let comment = await em.findOne(ResourcesResourceComment, { id: before.id })\n    const resource = await requireResource(em, before.resourceId, 'Resource not found')\n\n    if (!comment) {\n      comment = em.create(ResourcesResourceComment, {\n        id: before.id,\n        organizationId: before.organizationId,\n        tenantId: before.tenantId,\n        resource,\n        body: before.body,\n        authorUserId: before.authorUserId,\n        appearanceIcon: before.appearanceIcon,\n        appearanceColor: before.appearanceColor,\n        createdAt: new Date(),\n        updatedAt: new Date(),\n      })\n      em.persist(comment)\n    } else {\n      comment.resource = resource\n      comment.body = before.body\n      comment.authorUserId = before.authorUserId\n      comment.appearanceIcon = before.appearanceIcon\n      comment.appearanceColor = before.appearanceColor\n    }\n    await em.flush()\n\n    const de = (ctx.container.resolve('dataEngine') as DataEngine)\n    await emitCrudUndoSideEffects({\n      dataEngine: de,\n      action: 'updated',\n      entity: comment,\n      identifiers: {\n        id: comment.id,\n        organizationId: comment.organizationId,\n        tenantId: comment.tenantId,\n      },\n      events: resourcesResourceCommentCrudEvents,\n      indexer: commentCrudIndexer,\n    })\n  },\n}\n\nconst deleteCommentCommand: CommandHandler<{ body?: Record<string, unknown>; query?: Record<string, unknown> }, { commentId: string }> = {\n  id: 'resources.resource-comments.delete',\n  async prepare(input, ctx) {\n    const id = requireId(input, 'Comment id required')\n    const em = (ctx.container.resolve('em') as EntityManager)\n    const snapshot = await loadCommentSnapshot(em, id)\n    return snapshot ? { before: snapshot } : {}\n  },\n  async execute(input, ctx) {\n    const id = requireId(input, 'Comment id required')\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n    const comment = await em.findOne(ResourcesResourceComment, { id })\n    if (!comment) throw new CrudHttpError(404, { error: 'Comment not found' })\n    ensureTenantScope(ctx, comment.tenantId)\n    ensureOrganizationScope(ctx, comment.organizationId)\n    em.remove(comment)\n    await em.flush()\n\n    const de = (ctx.container.resolve('dataEngine') as DataEngine)\n    await emitCrudSideEffects({\n      dataEngine: de,\n      action: 'deleted',\n      entity: comment,\n      identifiers: {\n        id: comment.id,\n        organizationId: comment.organizationId,\n        tenantId: comment.tenantId,\n      },\n      events: resourcesResourceCommentCrudEvents,\n      indexer: commentCrudIndexer,\n    })\n    return { commentId: comment.id }\n  },\n  buildLog: async ({ snapshots }) => {\n    const before = snapshots.before as CommentSnapshot | undefined\n    if (!before) return null\n    const { translate } = await resolveTranslations()\n    return {\n      actionLabel: translate('resources.audit.resourceComments.delete', 'Delete note'),\n      resourceKind: 'resources.resource_comment',\n      resourceId: before.id,\n      parentResourceKind: 'resources.resource',\n      parentResourceId: before.resourceId ?? null,\n      tenantId: before.tenantId,\n      organizationId: before.organizationId,\n      snapshotBefore: before,\n      payload: {\n        undo: {\n          before,\n        } satisfies CommentUndoPayload,\n      },\n    }\n  },\n  undo: async ({ logEntry, ctx }) => {\n    const payload = extractUndoPayload<CommentUndoPayload>(logEntry)\n    const before = payload?.before\n    if (!before) return\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n    const resource = await requireResource(em, before.resourceId, 'Resource not found')\n    let comment = await em.findOne(ResourcesResourceComment, { id: before.id })\n    if (!comment) {\n      comment = em.create(ResourcesResourceComment, {\n        id: before.id,\n        organizationId: before.organizationId,\n        tenantId: before.tenantId,\n        resource,\n        body: before.body,\n        authorUserId: before.authorUserId,\n        appearanceIcon: before.appearanceIcon,\n        appearanceColor: before.appearanceColor,\n        createdAt: new Date(),\n        updatedAt: new Date(),\n      })\n      em.persist(comment)\n    } else {\n      comment.resource = resource\n      comment.body = before.body\n      comment.authorUserId = before.authorUserId\n      comment.appearanceIcon = before.appearanceIcon\n      comment.appearanceColor = before.appearanceColor\n    }\n    await em.flush()\n\n    const de = (ctx.container.resolve('dataEngine') as DataEngine)\n    await emitCrudUndoSideEffects({\n      dataEngine: de,\n      action: 'created',\n      entity: comment,\n      identifiers: {\n        id: comment.id,\n        organizationId: comment.organizationId,\n        tenantId: comment.tenantId,\n      },\n      events: resourcesResourceCommentCrudEvents,\n      indexer: commentCrudIndexer,\n    })\n  },\n}\n\nregisterCommand(createCommentCommand)\nregisterCommand(updateCommentCommand)\nregisterCommand(deleteCommentCommand)\n"],
-  "mappings": "AAAA,SAAS,uBAAuB;AAEhC,SAAS,qBAAqB,yBAAyB,cAAc,WAAW,6BAA6B;AAG7G,SAAS,qBAAqB;AAC9B,SAAS,2BAA2B;AAEpC,SAAS,gCAAgC;AACzC;AAAA,EACE;AAAA,EACA;AAAA,OAGK;AACP,SAAS,0CAA0C;AACnD,SAAS,sBAAsB;AAC/B,SAAS,yBAAyB,mBAAmB,oBAAoB,uBAAuB;AAChG,SAAS,SAAS;AAElB,MAAM,qBAAkE;AAAA,EACtE,YAAY,EAAE,UAAU;AAC1B;AAkBA,eAAe,oBAAoB,IAAmB,IAA6C;AACjG,QAAM,UAAU,MAAM,GAAG,QAAQ,0BAA0B,EAAE,GAAG,CAAC;AACjE,MAAI,CAAC,QAAS,QAAO;AACrB,SAAO;AAAA,IACL,IAAI,QAAQ;AAAA,IACZ,gBAAgB,QAAQ;AAAA,IACxB,UAAU,QAAQ;AAAA,IAClB,YAAY,OAAO,QAAQ,aAAa,WAAW,QAAQ,WAAW,QAAQ,SAAS;AAAA,IACvF,MAAM,QAAQ;AAAA,IACd,cAAc,QAAQ,gBAAgB;AAAA,IACtC,gBAAgB,QAAQ,kBAAkB;AAAA,IAC1C,iBAAiB,QAAQ,mBAAmB;AAAA,EAC9C;AACF;AAEA,MAAM,uBAGF;AAAA,EACF,IAAI;AAAA,EACJ,MAAM,QAAQ,UAAU,KAAK;AAC3B,UAAM,SAAS,qCAAqC,MAAM,QAAQ;AAClE,sBAAkB,KAAK,OAAO,QAAQ;AACtC,4BAAwB,KAAK,OAAO,cAAc;AAClD,UAAM,mBAAmB,sBAAsB,OAAO,cAAc,IAAI,IAAI;AAE5E,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,UAAM,WAAW,MAAM,gBAAgB,IAAI,OAAO,UAAU,oBAAoB;AAChF,sBAAkB,KAAK,SAAS,QAAQ;AACxC,4BAAwB,KAAK,SAAS,cAAc;AAEpD,UAAM,UAAU,GAAG,OAAO,0BAA0B;AAAA,MAClD,gBAAgB,OAAO;AAAA,MACvB,UAAU,OAAO;AAAA,MACjB;AAAA,MACA,MAAM,OAAO;AAAA,MACb,cAAc;AAAA,MACd,gBAAgB,OAAO,kBAAkB;AAAA,MACzC,iBAAiB,OAAO,mBAAmB;AAAA,MAC3C,WAAW,oBAAI,KAAK;AAAA,MACpB,WAAW,oBAAI,KAAK;AAAA,IACtB,CAAC;AACD,OAAG,QAAQ,OAAO;AAClB,UAAM,GAAG,MAAM;AAEf,UAAM,KAAM,IAAI,UAAU,QAAQ,YAAY;AAC9C,UAAM,oBAAoB;AAAA,MACxB,YAAY;AAAA,MACZ,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,aAAa;AAAA,QACX,IAAI,QAAQ;AAAA,QACZ,gBAAgB,QAAQ;AAAA,QACxB,UAAU,QAAQ;AAAA,MACpB;AAAA,MACA,QAAQ;AAAA,MACR,SAAS;AAAA,IACX,CAAC;AAED,WAAO,EAAE,WAAW,QAAQ,IAAI,cAAc,QAAQ,gBAAgB,KAAK;AAAA,EAC7E;AAAA,EACA,cAAc,OAAO,QAAQ,QAAQ,QAAQ;AAC3C,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,WAAO,MAAM,oBAAoB,IAAI,OAAO,SAAS;AAAA,EACvD;AAAA,EACA,UAAU,OAAO,EAAE,QAAQ,IAAI,MAAM;AACnC,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,UAAM,WAAW,MAAM,oBAAoB,IAAI,OAAO,SAAS;AAC/D,WAAO;AAAA,MACL,aAAa,UAAU,2CAA2C,aAAa;AAAA,MAC/E,cAAc;AAAA,MACd,YAAY,OAAO;AAAA,MACnB,oBAAoB;AAAA,MACpB,kBAAkB,UAAU,cAAc;AAAA,MAC1C,UAAU,UAAU,YAAY;AAAA,MAChC,gBAAgB,UAAU,kBAAkB;AAAA,MAC5C,eAAe,YAAY;AAAA,MAC3B,SAAS;AAAA,QACP,MAAM;AAAA,UACJ,OAAO,YAAY;AAAA,QACrB;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA,MAAM,OAAO,EAAE,UAAU,IAAI,MAAM;AACjC,UAAM,YAAY,UAAU,cAAc;AAC1C,QAAI,CAAC,UAAW;AAChB,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,UAAM,WAAW,MAAM,GAAG,QAAQ,0BAA0B,EAAE,IAAI,UAAU,CAAC;AAC7E,QAAI,UAAU;AACZ,SAAG,OAAO,QAAQ;AAClB,YAAM,GAAG,MAAM;AAAA,IACjB;AAAA,EACF;AAAA,EACA,MAAM,eAAmJ;AAAA,IACvJ,aAAa;AAAA,IACb,kBAAkB,CAAC,WAAW;AAAA,MAC5B,IAAI,MAAM;AAAA,MACV,gBAAgB,MAAM;AAAA,MACtB,UAAU,MAAM;AAAA,MAChB,MAAM,MAAM;AAAA,MACZ,cAAc,MAAM;AAAA,MACpB,gBAAgB,MAAM;AAAA,MACtB,iBAAiB,MAAM;AAAA,IACzB;AAAA,IACA,eAAe,OAAO,EAAE,IAAI,SAAS,MAAM;AACzC,YAAM,WAAW,MAAM,gBAAgB,IAAI,SAAS,YAAY,oBAAoB;AACpF,aAAO,EAAE,SAAS;AAAA,IACpB;AAAA,IACA,aAAa,CAAC,YAAY,EAAE,WAAW,OAAO,IAAI,cAAc,OAAO,gBAAgB,KAAK;AAAA,IAC5F,QAAQ;AAAA,IACR,SAAS;AAAA,EACX,CAAC;AACH;AAEA,MAAM,uBAAmG;AAAA,EACvG,IAAI;AAAA,EACJ,MAAM,QAAQ,UAAU,KAAK;AAC3B,UAAM,SAAS,qCAAqC,MAAM,QAAQ;AAClE,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI;AACtC,UAAM,WAAW,MAAM,oBAAoB,IAAI,OAAO,EAAE;AACxD,WAAO,WAAW,EAAE,QAAQ,SAAS,IAAI,CAAC;AAAA,EAC5C;AAAA,EACA,MAAM,QAAQ,UAAU,KAAK;AAC3B,UAAM,SAAS,qCAAqC,MAAM,QAAQ;AAClE,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,UAAM,UAAU,MAAM,GAAG,QAAQ,0BAA0B,EAAE,IAAI,OAAO,GAAG,CAAC;AAC5E,QAAI,CAAC,QAAS,OAAM,IAAI,cAAc,KAAK,EAAE,OAAO,oBAAoB,CAAC;AACzE,sBAAkB,KAAK,QAAQ,QAAQ;AACvC,4BAAwB,KAAK,QAAQ,cAAc;AAEnD,QAAI,OAAO,aAAa,QAAW;AACjC,YAAM,WAAW,MAAM,gBAAgB,IAAI,OAAO,UAAU,oBAAoB;AAChF,wBAAkB,KAAK,SAAS,QAAQ;AACxC,8BAAwB,KAAK,SAAS,cAAc;AACpD,cAAQ,WAAW;AAAA,IACrB;AACA,QAAI,OAAO,SAAS,OAAW,SAAQ,OAAO,OAAO;AACrD,QAAI,OAAO,iBAAiB,OAAW,SAAQ,eAAe,OAAO,gBAAgB;AACrF,QAAI,OAAO,mBAAmB,OAAW,SAAQ,iBAAiB,OAAO,kBAAkB;AAC3F,QAAI,OAAO,oBAAoB,OAAW,SAAQ,kBAAkB,OAAO,mBAAmB;AAE9F,UAAM,GAAG,MAAM;AAEf,UAAM,KAAM,IAAI,UAAU,QAAQ,YAAY;AAC9C,UAAM,oBAAoB;AAAA,MACxB,YAAY;AAAA,MACZ,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,aAAa;AAAA,QACX,IAAI,QAAQ;AAAA,QACZ,gBAAgB,QAAQ;AAAA,QACxB,UAAU,QAAQ;AAAA,MACpB;AAAA,MACA,QAAQ;AAAA,MACR,SAAS;AAAA,IACX,CAAC;AAED,WAAO,EAAE,WAAW,QAAQ,GAAG;AAAA,EACjC;AAAA,EACA,UAAU,OAAO,EAAE,WAAW,IAAI,MAAM;AACtC,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,UAAM,SAAS,UAAU;AACzB,QAAI,CAAC,OAAQ,QAAO;AACpB,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,UAAM,gBAAgB,MAAM,oBAAoB,IAAI,OAAO,EAAE;AAC7D,UAAM,UACJ,iBAAiB,SACb;AAAA,MACE;AAAA,MACA;AAAA,MACA,CAAC,cAAc,QAAQ,gBAAgB,kBAAkB,iBAAiB;AAAA,IAC5E,IACA,CAAC;AACP,WAAO;AAAA,MACL,aAAa,UAAU,2CAA2C,aAAa;AAAA,MAC/E,cAAc;AAAA,MACd,YAAY,OAAO;AAAA,MACnB,oBAAoB;AAAA,MACpB,kBAAkB,OAAO,cAAc;AAAA,MACvC,UAAU,OAAO;AAAA,MACjB,gBAAgB,OAAO;AAAA,MACvB,gBAAgB;AAAA,MAChB,eAAe,iBAAiB;AAAA,MAChC;AAAA,MACA,SAAS;AAAA,QACP,MAAM;AAAA,UACJ;AAAA,UACA,OAAO,iBAAiB;AAAA,QAC1B;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA,MAAM,OAAO,EAAE,UAAU,IAAI,MAAM;AACjC,UAAM,UAAU,mBAAuC,QAAQ;AAC/D,UAAM,SAAS,SAAS;AACxB,QAAI,CAAC,OAAQ;AACb,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,QAAI,UAAU,MAAM,GAAG,QAAQ,0BAA0B,EAAE,IAAI,OAAO,GAAG,CAAC;AAC1E,UAAM,WAAW,MAAM,gBAAgB,IAAI,OAAO,YAAY,oBAAoB;AAElF,QAAI,CAAC,SAAS;AACZ,gBAAU,GAAG,OAAO,0BAA0B;AAAA,QAC5C,IAAI,OAAO;AAAA,QACX,gBAAgB,OAAO;AAAA,QACvB,UAAU,OAAO;AAAA,QACjB;AAAA,QACA,MAAM,OAAO;AAAA,QACb,cAAc,OAAO;AAAA,QACrB,gBAAgB,OAAO;AAAA,QACvB,iBAAiB,OAAO;AAAA,QACxB,WAAW,oBAAI,KAAK;AAAA,QACpB,WAAW,oBAAI,KAAK;AAAA,MACtB,CAAC;AACD,SAAG,QAAQ,OAAO;AAAA,IACpB,OAAO;AACL,cAAQ,WAAW;AACnB,cAAQ,OAAO,OAAO;AACtB,cAAQ,eAAe,OAAO;AAC9B,cAAQ,iBAAiB,OAAO;AAChC,cAAQ,kBAAkB,OAAO;AAAA,IACnC;AACA,UAAM,GAAG,MAAM;AAEf,UAAM,KAAM,IAAI,UAAU,QAAQ,YAAY;AAC9C,UAAM,wBAAwB;AAAA,MAC5B,YAAY;AAAA,MACZ,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,aAAa;AAAA,QACX,IAAI,QAAQ;AAAA,QACZ,gBAAgB,QAAQ;AAAA,QACxB,UAAU,QAAQ;AAAA,MACpB;AAAA,MACA,QAAQ;AAAA,MACR,SAAS;AAAA,IACX,CAAC;AAAA,EACH;AACF;AAEA,MAAM,uBAAmI;AAAA,EACvI,IAAI;AAAA,EACJ,MAAM,QAAQ,OAAO,KAAK;AACxB,UAAM,KAAK,UAAU,OAAO,qBAAqB;AACjD,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI;AACtC,UAAM,WAAW,MAAM,oBAAoB,IAAI,EAAE;AACjD,WAAO,WAAW,EAAE,QAAQ,SAAS,IAAI,CAAC;AAAA,EAC5C;AAAA,EACA,MAAM,QAAQ,OAAO,KAAK;AACxB,UAAM,KAAK,UAAU,OAAO,qBAAqB;AACjD,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,UAAM,UAAU,MAAM,GAAG,QAAQ,0BAA0B,EAAE,GAAG,CAAC;AACjE,QAAI,CAAC,QAAS,OAAM,IAAI,cAAc,KAAK,EAAE,OAAO,oBAAoB,CAAC;AACzE,sBAAkB,KAAK,QAAQ,QAAQ;AACvC,4BAAwB,KAAK,QAAQ,cAAc;AACnD,OAAG,OAAO,OAAO;AACjB,UAAM,GAAG,MAAM;AAEf,UAAM,KAAM,IAAI,UAAU,QAAQ,YAAY;AAC9C,UAAM,oBAAoB;AAAA,MACxB,YAAY;AAAA,MACZ,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,aAAa;AAAA,QACX,IAAI,QAAQ;AAAA,QACZ,gBAAgB,QAAQ;AAAA,QACxB,UAAU,QAAQ;AAAA,MACpB;AAAA,MACA,QAAQ;AAAA,MACR,SAAS;AAAA,IACX,CAAC;AACD,WAAO,EAAE,WAAW,QAAQ,GAAG;AAAA,EACjC;AAAA,EACA,UAAU,OAAO,EAAE,UAAU,MAAM;AACjC,UAAM,SAAS,UAAU;AACzB,QAAI,CAAC,OAAQ,QAAO;AACpB,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,WAAO;AAAA,MACL,aAAa,UAAU,2CAA2C,aAAa;AAAA,MAC/E,cAAc;AAAA,MACd,YAAY,OAAO;AAAA,MACnB,oBAAoB;AAAA,MACpB,kBAAkB,OAAO,cAAc;AAAA,MACvC,UAAU,OAAO;AAAA,MACjB,gBAAgB,OAAO;AAAA,MACvB,gBAAgB;AAAA,MAChB,SAAS;AAAA,QACP,MAAM;AAAA,UACJ;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA,MAAM,OAAO,EAAE,UAAU,IAAI,MAAM;AACjC,UAAM,UAAU,mBAAuC,QAAQ;AAC/D,UAAM,SAAS,SAAS;AACxB,QAAI,CAAC,OAAQ;AACb,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,UAAM,WAAW,MAAM,gBAAgB,IAAI,OAAO,YAAY,oBAAoB;AAClF,QAAI,UAAU,MAAM,GAAG,QAAQ,0BAA0B,EAAE,IAAI,OAAO,GAAG,CAAC;AAC1E,QAAI,CAAC,SAAS;AACZ,gBAAU,GAAG,OAAO,0BAA0B;AAAA,QAC5C,IAAI,OAAO;AAAA,QACX,gBAAgB,OAAO;AAAA,QACvB,UAAU,OAAO;AAAA,QACjB;AAAA,QACA,MAAM,OAAO;AAAA,QACb,cAAc,OAAO;AAAA,QACrB,gBAAgB,OAAO;AAAA,QACvB,iBAAiB,OAAO;AAAA,QACxB,WAAW,oBAAI,KAAK;AAAA,QACpB,WAAW,oBAAI,KAAK;AAAA,MACtB,CAAC;AACD,SAAG,QAAQ,OAAO;AAAA,IACpB,OAAO;AACL,cAAQ,WAAW;AACnB,cAAQ,OAAO,OAAO;AACtB,cAAQ,eAAe,OAAO;AAC9B,cAAQ,iBAAiB,OAAO;AAChC,cAAQ,kBAAkB,OAAO;AAAA,IACnC;AACA,UAAM,GAAG,MAAM;AAEf,UAAM,KAAM,IAAI,UAAU,QAAQ,YAAY;AAC9C,UAAM,wBAAwB;AAAA,MAC5B,YAAY;AAAA,MACZ,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,aAAa;AAAA,QACX,IAAI,QAAQ;AAAA,QACZ,gBAAgB,QAAQ;AAAA,QACxB,UAAU,QAAQ;AAAA,MACpB;AAAA,MACA,QAAQ;AAAA,MACR,SAAS;AAAA,IACX,CAAC;AAAA,EACH;AACF;AAEA,gBAAgB,oBAAoB;AACpC,gBAAgB,oBAAoB;AACpC,gBAAgB,oBAAoB;",
+  "sourcesContent": ["import { registerCommand } from '@open-mercato/shared/lib/commands'\nimport type { CommandHandler } from '@open-mercato/shared/lib/commands'\nimport { emitCrudSideEffects, emitCrudUndoSideEffects, buildChanges, requireId } from '@open-mercato/shared/lib/commands/helpers'\nimport type { DataEngine } from '@open-mercato/shared/lib/data/engine'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { CrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport type { CrudIndexerConfig } from '@open-mercato/shared/lib/crud/types'\nimport { ResourcesResourceComment } from '../data/entities'\nimport {\n  resourcesResourceCommentCreateSchema,\n  resourcesResourceCommentUpdateSchema,\n  type ResourcesResourceCommentCreateInput,\n  type ResourcesResourceCommentUpdateInput,\n} from '../data/validators'\nimport { resourcesResourceCommentCrudEvents } from '../lib/crud'\nimport { makeCreateRedo } from '@open-mercato/shared/lib/commands/redo'\nimport { ensureOrganizationScope, ensureTenantScope, extractUndoPayload, requireResource, resolveResourceAuthorUserId } from './shared'\nimport { E } from '#generated/entities.ids.generated'\n\nconst commentCrudIndexer: CrudIndexerConfig<ResourcesResourceComment> = {\n  entityType: E.resources.resources_resource_comment,\n}\n\ntype CommentSnapshot = {\n  id: string\n  organizationId: string\n  tenantId: string\n  resourceId: string\n  body: string\n  authorUserId: string | null\n  appearanceIcon: string | null\n  appearanceColor: string | null\n}\n\ntype CommentUndoPayload = {\n  before?: CommentSnapshot | null\n  after?: CommentSnapshot | null\n}\n\nasync function loadCommentSnapshot(em: EntityManager, id: string): Promise<CommentSnapshot | null> {\n  const comment = await em.findOne(ResourcesResourceComment, { id })\n  if (!comment) return null\n  return {\n    id: comment.id,\n    organizationId: comment.organizationId,\n    tenantId: comment.tenantId,\n    resourceId: typeof comment.resource === 'string' ? comment.resource : comment.resource.id,\n    body: comment.body,\n    authorUserId: comment.authorUserId ?? null,\n    appearanceIcon: comment.appearanceIcon ?? null,\n    appearanceColor: comment.appearanceColor ?? null,\n  }\n}\n\nconst createCommentCommand: CommandHandler<\n  ResourcesResourceCommentCreateInput,\n  { commentId: string; authorUserId: string | null }\n> = {\n  id: 'resources.resource-comments.create',\n  async execute(rawInput, ctx) {\n    const parsed = resourcesResourceCommentCreateSchema.parse(rawInput)\n    ensureTenantScope(ctx, parsed.tenantId)\n    ensureOrganizationScope(ctx, parsed.organizationId)\n\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n    const resource = await requireResource(em, parsed.entityId, 'Resource not found')\n    ensureTenantScope(ctx, resource.tenantId)\n    ensureOrganizationScope(ctx, resource.organizationId)\n    const normalizedAuthor = await resolveResourceAuthorUserId(em, parsed.authorUserId, ctx, {\n      tenantId: resource.tenantId,\n      organizationId: resource.organizationId,\n    })\n\n    const comment = em.create(ResourcesResourceComment, {\n      organizationId: parsed.organizationId,\n      tenantId: parsed.tenantId,\n      resource,\n      body: parsed.body,\n      authorUserId: normalizedAuthor,\n      appearanceIcon: parsed.appearanceIcon ?? null,\n      appearanceColor: parsed.appearanceColor ?? null,\n      createdAt: new Date(),\n      updatedAt: new Date(),\n    })\n    em.persist(comment)\n    await em.flush()\n\n    const de = (ctx.container.resolve('dataEngine') as DataEngine)\n    await emitCrudSideEffects({\n      dataEngine: de,\n      action: 'created',\n      entity: comment,\n      identifiers: {\n        id: comment.id,\n        organizationId: comment.organizationId,\n        tenantId: comment.tenantId,\n      },\n      events: resourcesResourceCommentCrudEvents,\n      indexer: commentCrudIndexer,\n    })\n\n    return { commentId: comment.id, authorUserId: comment.authorUserId ?? null }\n  },\n  captureAfter: async (_input, result, ctx) => {\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n    return await loadCommentSnapshot(em, result.commentId)\n  },\n  buildLog: async ({ result, ctx }) => {\n    const { translate } = await resolveTranslations()\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n    const snapshot = await loadCommentSnapshot(em, result.commentId)\n    return {\n      actionLabel: translate('resources.audit.resourceComments.create', 'Create note'),\n      resourceKind: 'resources.resource_comment',\n      resourceId: result.commentId,\n      parentResourceKind: 'resources.resource',\n      parentResourceId: snapshot?.resourceId ?? null,\n      tenantId: snapshot?.tenantId ?? null,\n      organizationId: snapshot?.organizationId ?? null,\n      snapshotAfter: snapshot ?? null,\n      payload: {\n        undo: {\n          after: snapshot ?? null,\n        } satisfies CommentUndoPayload,\n      },\n    }\n  },\n  undo: async ({ logEntry, ctx }) => {\n    const commentId = logEntry?.resourceId ?? null\n    if (!commentId) return\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n    const existing = await em.findOne(ResourcesResourceComment, { id: commentId })\n    if (existing) {\n      em.remove(existing)\n      await em.flush()\n    }\n  },\n  redo: makeCreateRedo<ResourcesResourceComment, CommentSnapshot, ResourcesResourceCommentCreateInput, { commentId: string; authorUserId: string | null }>({\n    entityClass: ResourcesResourceComment,\n    seedFromSnapshot: (after) => ({\n      id: after.id,\n      organizationId: after.organizationId,\n      tenantId: after.tenantId,\n      body: after.body,\n      authorUserId: after.authorUserId,\n      appearanceIcon: after.appearanceIcon,\n      appearanceColor: after.appearanceColor,\n    }),\n    beforeRestore: async ({ em, snapshot }) => {\n      const resource = await requireResource(em, snapshot.resourceId, 'Resource not found')\n      return { resource }\n    },\n    buildResult: (entity) => ({ commentId: entity.id, authorUserId: entity.authorUserId ?? null }),\n    events: resourcesResourceCommentCrudEvents,\n    indexer: commentCrudIndexer,\n  }),\n}\n\nconst updateCommentCommand: CommandHandler<ResourcesResourceCommentUpdateInput, { commentId: string }> = {\n  id: 'resources.resource-comments.update',\n  async prepare(rawInput, ctx) {\n    const parsed = resourcesResourceCommentUpdateSchema.parse(rawInput)\n    const em = (ctx.container.resolve('em') as EntityManager)\n    const snapshot = await loadCommentSnapshot(em, parsed.id)\n    return snapshot ? { before: snapshot } : {}\n  },\n  async execute(rawInput, ctx) {\n    const parsed = resourcesResourceCommentUpdateSchema.parse(rawInput)\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n    const comment = await em.findOne(ResourcesResourceComment, { id: parsed.id })\n    if (!comment) throw new CrudHttpError(404, { error: 'Comment not found' })\n    ensureTenantScope(ctx, comment.tenantId)\n    ensureOrganizationScope(ctx, comment.organizationId)\n\n    if (parsed.entityId !== undefined) {\n      const resource = await requireResource(em, parsed.entityId, 'Resource not found')\n      ensureTenantScope(ctx, resource.tenantId)\n      ensureOrganizationScope(ctx, resource.organizationId)\n      comment.resource = resource\n    }\n    if (parsed.body !== undefined) comment.body = parsed.body\n    if (parsed.appearanceIcon !== undefined) comment.appearanceIcon = parsed.appearanceIcon ?? null\n    if (parsed.appearanceColor !== undefined) comment.appearanceColor = parsed.appearanceColor ?? null\n\n    await em.flush()\n\n    const de = (ctx.container.resolve('dataEngine') as DataEngine)\n    await emitCrudSideEffects({\n      dataEngine: de,\n      action: 'updated',\n      entity: comment,\n      identifiers: {\n        id: comment.id,\n        organizationId: comment.organizationId,\n        tenantId: comment.tenantId,\n      },\n      events: resourcesResourceCommentCrudEvents,\n      indexer: commentCrudIndexer,\n    })\n\n    return { commentId: comment.id }\n  },\n  buildLog: async ({ snapshots, ctx }) => {\n    const { translate } = await resolveTranslations()\n    const before = snapshots.before as CommentSnapshot | undefined\n    if (!before) return null\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n    const afterSnapshot = await loadCommentSnapshot(em, before.id)\n    const changes =\n      afterSnapshot && before\n        ? buildChanges(\n            before as Record<string, unknown>,\n            afterSnapshot as Record<string, unknown>,\n            ['resourceId', 'body', 'authorUserId', 'appearanceIcon', 'appearanceColor'],\n          )\n        : {}\n    return {\n      actionLabel: translate('resources.audit.resourceComments.update', 'Update note'),\n      resourceKind: 'resources.resource_comment',\n      resourceId: before.id,\n      parentResourceKind: 'resources.resource',\n      parentResourceId: before.resourceId ?? null,\n      tenantId: before.tenantId,\n      organizationId: before.organizationId,\n      snapshotBefore: before,\n      snapshotAfter: afterSnapshot ?? null,\n      changes,\n      payload: {\n        undo: {\n          before,\n          after: afterSnapshot ?? null,\n        } satisfies CommentUndoPayload,\n      },\n    }\n  },\n  undo: async ({ logEntry, ctx }) => {\n    const payload = extractUndoPayload<CommentUndoPayload>(logEntry)\n    const before = payload?.before\n    if (!before) return\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n    let comment = await em.findOne(ResourcesResourceComment, { id: before.id })\n    const resource = await requireResource(em, before.resourceId, 'Resource not found')\n\n    if (!comment) {\n      comment = em.create(ResourcesResourceComment, {\n        id: before.id,\n        organizationId: before.organizationId,\n        tenantId: before.tenantId,\n        resource,\n        body: before.body,\n        authorUserId: before.authorUserId,\n        appearanceIcon: before.appearanceIcon,\n        appearanceColor: before.appearanceColor,\n        createdAt: new Date(),\n        updatedAt: new Date(),\n      })\n      em.persist(comment)\n    } else {\n      comment.resource = resource\n      comment.body = before.body\n      comment.authorUserId = before.authorUserId\n      comment.appearanceIcon = before.appearanceIcon\n      comment.appearanceColor = before.appearanceColor\n    }\n    await em.flush()\n\n    const de = (ctx.container.resolve('dataEngine') as DataEngine)\n    await emitCrudUndoSideEffects({\n      dataEngine: de,\n      action: 'updated',\n      entity: comment,\n      identifiers: {\n        id: comment.id,\n        organizationId: comment.organizationId,\n        tenantId: comment.tenantId,\n      },\n      events: resourcesResourceCommentCrudEvents,\n      indexer: commentCrudIndexer,\n    })\n  },\n}\n\nconst deleteCommentCommand: CommandHandler<{ body?: Record<string, unknown>; query?: Record<string, unknown> }, { commentId: string }> = {\n  id: 'resources.resource-comments.delete',\n  async prepare(input, ctx) {\n    const id = requireId(input, 'Comment id required')\n    const em = (ctx.container.resolve('em') as EntityManager)\n    const snapshot = await loadCommentSnapshot(em, id)\n    return snapshot ? { before: snapshot } : {}\n  },\n  async execute(input, ctx) {\n    const id = requireId(input, 'Comment id required')\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n    const comment = await em.findOne(ResourcesResourceComment, { id })\n    if (!comment) throw new CrudHttpError(404, { error: 'Comment not found' })\n    ensureTenantScope(ctx, comment.tenantId)\n    ensureOrganizationScope(ctx, comment.organizationId)\n    em.remove(comment)\n    await em.flush()\n\n    const de = (ctx.container.resolve('dataEngine') as DataEngine)\n    await emitCrudSideEffects({\n      dataEngine: de,\n      action: 'deleted',\n      entity: comment,\n      identifiers: {\n        id: comment.id,\n        organizationId: comment.organizationId,\n        tenantId: comment.tenantId,\n      },\n      events: resourcesResourceCommentCrudEvents,\n      indexer: commentCrudIndexer,\n    })\n    return { commentId: comment.id }\n  },\n  buildLog: async ({ snapshots }) => {\n    const before = snapshots.before as CommentSnapshot | undefined\n    if (!before) return null\n    const { translate } = await resolveTranslations()\n    return {\n      actionLabel: translate('resources.audit.resourceComments.delete', 'Delete note'),\n      resourceKind: 'resources.resource_comment',\n      resourceId: before.id,\n      parentResourceKind: 'resources.resource',\n      parentResourceId: before.resourceId ?? null,\n      tenantId: before.tenantId,\n      organizationId: before.organizationId,\n      snapshotBefore: before,\n      payload: {\n        undo: {\n          before,\n        } satisfies CommentUndoPayload,\n      },\n    }\n  },\n  undo: async ({ logEntry, ctx }) => {\n    const payload = extractUndoPayload<CommentUndoPayload>(logEntry)\n    const before = payload?.before\n    if (!before) return\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n    const resource = await requireResource(em, before.resourceId, 'Resource not found')\n    let comment = await em.findOne(ResourcesResourceComment, { id: before.id })\n    if (!comment) {\n      comment = em.create(ResourcesResourceComment, {\n        id: before.id,\n        organizationId: before.organizationId,\n        tenantId: before.tenantId,\n        resource,\n        body: before.body,\n        authorUserId: before.authorUserId,\n        appearanceIcon: before.appearanceIcon,\n        appearanceColor: before.appearanceColor,\n        createdAt: new Date(),\n        updatedAt: new Date(),\n      })\n      em.persist(comment)\n    } else {\n      comment.resource = resource\n      comment.body = before.body\n      comment.authorUserId = before.authorUserId\n      comment.appearanceIcon = before.appearanceIcon\n      comment.appearanceColor = before.appearanceColor\n    }\n    await em.flush()\n\n    const de = (ctx.container.resolve('dataEngine') as DataEngine)\n    await emitCrudUndoSideEffects({\n      dataEngine: de,\n      action: 'created',\n      entity: comment,\n      identifiers: {\n        id: comment.id,\n        organizationId: comment.organizationId,\n        tenantId: comment.tenantId,\n      },\n      events: resourcesResourceCommentCrudEvents,\n      indexer: commentCrudIndexer,\n    })\n  },\n}\n\nregisterCommand(createCommentCommand)\nregisterCommand(updateCommentCommand)\nregisterCommand(deleteCommentCommand)\n"],
+  "mappings": "AAAA,SAAS,uBAAuB;AAEhC,SAAS,qBAAqB,yBAAyB,cAAc,iBAAiB;AAGtF,SAAS,qBAAqB;AAC9B,SAAS,2BAA2B;AAEpC,SAAS,gCAAgC;AACzC;AAAA,EACE;AAAA,EACA;AAAA,OAGK;AACP,SAAS,0CAA0C;AACnD,SAAS,sBAAsB;AAC/B,SAAS,yBAAyB,mBAAmB,oBAAoB,iBAAiB,mCAAmC;AAC7H,SAAS,SAAS;AAElB,MAAM,qBAAkE;AAAA,EACtE,YAAY,EAAE,UAAU;AAC1B;AAkBA,eAAe,oBAAoB,IAAmB,IAA6C;AACjG,QAAM,UAAU,MAAM,GAAG,QAAQ,0BAA0B,EAAE,GAAG,CAAC;AACjE,MAAI,CAAC,QAAS,QAAO;AACrB,SAAO;AAAA,IACL,IAAI,QAAQ;AAAA,IACZ,gBAAgB,QAAQ;AAAA,IACxB,UAAU,QAAQ;AAAA,IAClB,YAAY,OAAO,QAAQ,aAAa,WAAW,QAAQ,WAAW,QAAQ,SAAS;AAAA,IACvF,MAAM,QAAQ;AAAA,IACd,cAAc,QAAQ,gBAAgB;AAAA,IACtC,gBAAgB,QAAQ,kBAAkB;AAAA,IAC1C,iBAAiB,QAAQ,mBAAmB;AAAA,EAC9C;AACF;AAEA,MAAM,uBAGF;AAAA,EACF,IAAI;AAAA,EACJ,MAAM,QAAQ,UAAU,KAAK;AAC3B,UAAM,SAAS,qCAAqC,MAAM,QAAQ;AAClE,sBAAkB,KAAK,OAAO,QAAQ;AACtC,4BAAwB,KAAK,OAAO,cAAc;AAElD,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,UAAM,WAAW,MAAM,gBAAgB,IAAI,OAAO,UAAU,oBAAoB;AAChF,sBAAkB,KAAK,SAAS,QAAQ;AACxC,4BAAwB,KAAK,SAAS,cAAc;AACpD,UAAM,mBAAmB,MAAM,4BAA4B,IAAI,OAAO,cAAc,KAAK;AAAA,MACvF,UAAU,SAAS;AAAA,MACnB,gBAAgB,SAAS;AAAA,IAC3B,CAAC;AAED,UAAM,UAAU,GAAG,OAAO,0BAA0B;AAAA,MAClD,gBAAgB,OAAO;AAAA,MACvB,UAAU,OAAO;AAAA,MACjB;AAAA,MACA,MAAM,OAAO;AAAA,MACb,cAAc;AAAA,MACd,gBAAgB,OAAO,kBAAkB;AAAA,MACzC,iBAAiB,OAAO,mBAAmB;AAAA,MAC3C,WAAW,oBAAI,KAAK;AAAA,MACpB,WAAW,oBAAI,KAAK;AAAA,IACtB,CAAC;AACD,OAAG,QAAQ,OAAO;AAClB,UAAM,GAAG,MAAM;AAEf,UAAM,KAAM,IAAI,UAAU,QAAQ,YAAY;AAC9C,UAAM,oBAAoB;AAAA,MACxB,YAAY;AAAA,MACZ,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,aAAa;AAAA,QACX,IAAI,QAAQ;AAAA,QACZ,gBAAgB,QAAQ;AAAA,QACxB,UAAU,QAAQ;AAAA,MACpB;AAAA,MACA,QAAQ;AAAA,MACR,SAAS;AAAA,IACX,CAAC;AAED,WAAO,EAAE,WAAW,QAAQ,IAAI,cAAc,QAAQ,gBAAgB,KAAK;AAAA,EAC7E;AAAA,EACA,cAAc,OAAO,QAAQ,QAAQ,QAAQ;AAC3C,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,WAAO,MAAM,oBAAoB,IAAI,OAAO,SAAS;AAAA,EACvD;AAAA,EACA,UAAU,OAAO,EAAE,QAAQ,IAAI,MAAM;AACnC,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,UAAM,WAAW,MAAM,oBAAoB,IAAI,OAAO,SAAS;AAC/D,WAAO;AAAA,MACL,aAAa,UAAU,2CAA2C,aAAa;AAAA,MAC/E,cAAc;AAAA,MACd,YAAY,OAAO;AAAA,MACnB,oBAAoB;AAAA,MACpB,kBAAkB,UAAU,cAAc;AAAA,MAC1C,UAAU,UAAU,YAAY;AAAA,MAChC,gBAAgB,UAAU,kBAAkB;AAAA,MAC5C,eAAe,YAAY;AAAA,MAC3B,SAAS;AAAA,QACP,MAAM;AAAA,UACJ,OAAO,YAAY;AAAA,QACrB;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA,MAAM,OAAO,EAAE,UAAU,IAAI,MAAM;AACjC,UAAM,YAAY,UAAU,cAAc;AAC1C,QAAI,CAAC,UAAW;AAChB,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,UAAM,WAAW,MAAM,GAAG,QAAQ,0BAA0B,EAAE,IAAI,UAAU,CAAC;AAC7E,QAAI,UAAU;AACZ,SAAG,OAAO,QAAQ;AAClB,YAAM,GAAG,MAAM;AAAA,IACjB;AAAA,EACF;AAAA,EACA,MAAM,eAAmJ;AAAA,IACvJ,aAAa;AAAA,IACb,kBAAkB,CAAC,WAAW;AAAA,MAC5B,IAAI,MAAM;AAAA,MACV,gBAAgB,MAAM;AAAA,MACtB,UAAU,MAAM;AAAA,MAChB,MAAM,MAAM;AAAA,MACZ,cAAc,MAAM;AAAA,MACpB,gBAAgB,MAAM;AAAA,MACtB,iBAAiB,MAAM;AAAA,IACzB;AAAA,IACA,eAAe,OAAO,EAAE,IAAI,SAAS,MAAM;AACzC,YAAM,WAAW,MAAM,gBAAgB,IAAI,SAAS,YAAY,oBAAoB;AACpF,aAAO,EAAE,SAAS;AAAA,IACpB;AAAA,IACA,aAAa,CAAC,YAAY,EAAE,WAAW,OAAO,IAAI,cAAc,OAAO,gBAAgB,KAAK;AAAA,IAC5F,QAAQ;AAAA,IACR,SAAS;AAAA,EACX,CAAC;AACH;AAEA,MAAM,uBAAmG;AAAA,EACvG,IAAI;AAAA,EACJ,MAAM,QAAQ,UAAU,KAAK;AAC3B,UAAM,SAAS,qCAAqC,MAAM,QAAQ;AAClE,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI;AACtC,UAAM,WAAW,MAAM,oBAAoB,IAAI,OAAO,EAAE;AACxD,WAAO,WAAW,EAAE,QAAQ,SAAS,IAAI,CAAC;AAAA,EAC5C;AAAA,EACA,MAAM,QAAQ,UAAU,KAAK;AAC3B,UAAM,SAAS,qCAAqC,MAAM,QAAQ;AAClE,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,UAAM,UAAU,MAAM,GAAG,QAAQ,0BAA0B,EAAE,IAAI,OAAO,GAAG,CAAC;AAC5E,QAAI,CAAC,QAAS,OAAM,IAAI,cAAc,KAAK,EAAE,OAAO,oBAAoB,CAAC;AACzE,sBAAkB,KAAK,QAAQ,QAAQ;AACvC,4BAAwB,KAAK,QAAQ,cAAc;AAEnD,QAAI,OAAO,aAAa,QAAW;AACjC,YAAM,WAAW,MAAM,gBAAgB,IAAI,OAAO,UAAU,oBAAoB;AAChF,wBAAkB,KAAK,SAAS,QAAQ;AACxC,8BAAwB,KAAK,SAAS,cAAc;AACpD,cAAQ,WAAW;AAAA,IACrB;AACA,QAAI,OAAO,SAAS,OAAW,SAAQ,OAAO,OAAO;AACrD,QAAI,OAAO,mBAAmB,OAAW,SAAQ,iBAAiB,OAAO,kBAAkB;AAC3F,QAAI,OAAO,oBAAoB,OAAW,SAAQ,kBAAkB,OAAO,mBAAmB;AAE9F,UAAM,GAAG,MAAM;AAEf,UAAM,KAAM,IAAI,UAAU,QAAQ,YAAY;AAC9C,UAAM,oBAAoB;AAAA,MACxB,YAAY;AAAA,MACZ,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,aAAa;AAAA,QACX,IAAI,QAAQ;AAAA,QACZ,gBAAgB,QAAQ;AAAA,QACxB,UAAU,QAAQ;AAAA,MACpB;AAAA,MACA,QAAQ;AAAA,MACR,SAAS;AAAA,IACX,CAAC;AAED,WAAO,EAAE,WAAW,QAAQ,GAAG;AAAA,EACjC;AAAA,EACA,UAAU,OAAO,EAAE,WAAW,IAAI,MAAM;AACtC,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,UAAM,SAAS,UAAU;AACzB,QAAI,CAAC,OAAQ,QAAO;AACpB,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,UAAM,gBAAgB,MAAM,oBAAoB,IAAI,OAAO,EAAE;AAC7D,UAAM,UACJ,iBAAiB,SACb;AAAA,MACE;AAAA,MACA;AAAA,MACA,CAAC,cAAc,QAAQ,gBAAgB,kBAAkB,iBAAiB;AAAA,IAC5E,IACA,CAAC;AACP,WAAO;AAAA,MACL,aAAa,UAAU,2CAA2C,aAAa;AAAA,MAC/E,cAAc;AAAA,MACd,YAAY,OAAO;AAAA,MACnB,oBAAoB;AAAA,MACpB,kBAAkB,OAAO,cAAc;AAAA,MACvC,UAAU,OAAO;AAAA,MACjB,gBAAgB,OAAO;AAAA,MACvB,gBAAgB;AAAA,MAChB,eAAe,iBAAiB;AAAA,MAChC;AAAA,MACA,SAAS;AAAA,QACP,MAAM;AAAA,UACJ;AAAA,UACA,OAAO,iBAAiB;AAAA,QAC1B;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA,MAAM,OAAO,EAAE,UAAU,IAAI,MAAM;AACjC,UAAM,UAAU,mBAAuC,QAAQ;AAC/D,UAAM,SAAS,SAAS;AACxB,QAAI,CAAC,OAAQ;AACb,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,QAAI,UAAU,MAAM,GAAG,QAAQ,0BAA0B,EAAE,IAAI,OAAO,GAAG,CAAC;AAC1E,UAAM,WAAW,MAAM,gBAAgB,IAAI,OAAO,YAAY,oBAAoB;AAElF,QAAI,CAAC,SAAS;AACZ,gBAAU,GAAG,OAAO,0BAA0B;AAAA,QAC5C,IAAI,OAAO;AAAA,QACX,gBAAgB,OAAO;AAAA,QACvB,UAAU,OAAO;AAAA,QACjB;AAAA,QACA,MAAM,OAAO;AAAA,QACb,cAAc,OAAO;AAAA,QACrB,gBAAgB,OAAO;AAAA,QACvB,iBAAiB,OAAO;AAAA,QACxB,WAAW,oBAAI,KAAK;AAAA,QACpB,WAAW,oBAAI,KAAK;AAAA,MACtB,CAAC;AACD,SAAG,QAAQ,OAAO;AAAA,IACpB,OAAO;AACL,cAAQ,WAAW;AACnB,cAAQ,OAAO,OAAO;AACtB,cAAQ,eAAe,OAAO;AAC9B,cAAQ,iBAAiB,OAAO;AAChC,cAAQ,kBAAkB,OAAO;AAAA,IACnC;AACA,UAAM,GAAG,MAAM;AAEf,UAAM,KAAM,IAAI,UAAU,QAAQ,YAAY;AAC9C,UAAM,wBAAwB;AAAA,MAC5B,YAAY;AAAA,MACZ,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,aAAa;AAAA,QACX,IAAI,QAAQ;AAAA,QACZ,gBAAgB,QAAQ;AAAA,QACxB,UAAU,QAAQ;AAAA,MACpB;AAAA,MACA,QAAQ;AAAA,MACR,SAAS;AAAA,IACX,CAAC;AAAA,EACH;AACF;AAEA,MAAM,uBAAmI;AAAA,EACvI,IAAI;AAAA,EACJ,MAAM,QAAQ,OAAO,KAAK;AACxB,UAAM,KAAK,UAAU,OAAO,qBAAqB;AACjD,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI;AACtC,UAAM,WAAW,MAAM,oBAAoB,IAAI,EAAE;AACjD,WAAO,WAAW,EAAE,QAAQ,SAAS,IAAI,CAAC;AAAA,EAC5C;AAAA,EACA,MAAM,QAAQ,OAAO,KAAK;AACxB,UAAM,KAAK,UAAU,OAAO,qBAAqB;AACjD,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,UAAM,UAAU,MAAM,GAAG,QAAQ,0BAA0B,EAAE,GAAG,CAAC;AACjE,QAAI,CAAC,QAAS,OAAM,IAAI,cAAc,KAAK,EAAE,OAAO,oBAAoB,CAAC;AACzE,sBAAkB,KAAK,QAAQ,QAAQ;AACvC,4BAAwB,KAAK,QAAQ,cAAc;AACnD,OAAG,OAAO,OAAO;AACjB,UAAM,GAAG,MAAM;AAEf,UAAM,KAAM,IAAI,UAAU,QAAQ,YAAY;AAC9C,UAAM,oBAAoB;AAAA,MACxB,YAAY;AAAA,MACZ,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,aAAa;AAAA,QACX,IAAI,QAAQ;AAAA,QACZ,gBAAgB,QAAQ;AAAA,QACxB,UAAU,QAAQ;AAAA,MACpB;AAAA,MACA,QAAQ;AAAA,MACR,SAAS;AAAA,IACX,CAAC;AACD,WAAO,EAAE,WAAW,QAAQ,GAAG;AAAA,EACjC;AAAA,EACA,UAAU,OAAO,EAAE,UAAU,MAAM;AACjC,UAAM,SAAS,UAAU;AACzB,QAAI,CAAC,OAAQ,QAAO;AACpB,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,WAAO;AAAA,MACL,aAAa,UAAU,2CAA2C,aAAa;AAAA,MAC/E,cAAc;AAAA,MACd,YAAY,OAAO;AAAA,MACnB,oBAAoB;AAAA,MACpB,kBAAkB,OAAO,cAAc;AAAA,MACvC,UAAU,OAAO;AAAA,MACjB,gBAAgB,OAAO;AAAA,MACvB,gBAAgB;AAAA,MAChB,SAAS;AAAA,QACP,MAAM;AAAA,UACJ;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA,MAAM,OAAO,EAAE,UAAU,IAAI,MAAM;AACjC,UAAM,UAAU,mBAAuC,QAAQ;AAC/D,UAAM,SAAS,SAAS;AACxB,QAAI,CAAC,OAAQ;AACb,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,UAAM,WAAW,MAAM,gBAAgB,IAAI,OAAO,YAAY,oBAAoB;AAClF,QAAI,UAAU,MAAM,GAAG,QAAQ,0BAA0B,EAAE,IAAI,OAAO,GAAG,CAAC;AAC1E,QAAI,CAAC,SAAS;AACZ,gBAAU,GAAG,OAAO,0BAA0B;AAAA,QAC5C,IAAI,OAAO;AAAA,QACX,gBAAgB,OAAO;AAAA,QACvB,UAAU,OAAO;AAAA,QACjB;AAAA,QACA,MAAM,OAAO;AAAA,QACb,cAAc,OAAO;AAAA,QACrB,gBAAgB,OAAO;AAAA,QACvB,iBAAiB,OAAO;AAAA,QACxB,WAAW,oBAAI,KAAK;AAAA,QACpB,WAAW,oBAAI,KAAK;AAAA,MACtB,CAAC;AACD,SAAG,QAAQ,OAAO;AAAA,IACpB,OAAO;AACL,cAAQ,WAAW;AACnB,cAAQ,OAAO,OAAO;AACtB,cAAQ,eAAe,OAAO;AAC9B,cAAQ,iBAAiB,OAAO;AAChC,cAAQ,kBAAkB,OAAO;AAAA,IACnC;AACA,UAAM,GAAG,MAAM;AAEf,UAAM,KAAM,IAAI,UAAU,QAAQ,YAAY;AAC9C,UAAM,wBAAwB;AAAA,MAC5B,YAAY;AAAA,MACZ,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,aAAa;AAAA,QACX,IAAI,QAAQ;AAAA,QACZ,gBAAgB,QAAQ;AAAA,QACxB,UAAU,QAAQ;AAAA,MACpB;AAAA,MACA,QAAQ;AAAA,MACR,SAAS;AAAA,IACX,CAAC;AAAA,EACH;AACF;AAEA,gBAAgB,oBAAoB;AACpC,gBAAgB,oBAAoB;AACpC,gBAAgB,oBAAoB;",
   "names": []
 }

package/dist/modules/resources/commands/shared.js

@@ -1,16 +1,39 @@
 import { CrudHttpError } from "@open-mercato/shared/lib/crud/errors";
 import { ensureOrganizationScope, ensureTenantScope } from "@open-mercato/shared/lib/commands/scope";
 import { extractUndoPayload } from "@open-mercato/shared/lib/commands/undo";
+import { normalizeAuthorUserId } from "@open-mercato/shared/lib/commands/helpers";
+import { findOneWithDecryption } from "@open-mercato/shared/lib/encryption/find";
+import { User } from "@open-mercato/core/modules/auth/data/entities";
 import { ResourcesResource } from "../data/entities.js";
 async function requireResource(em, resourceId, message = "Resource not found") {
   const resource = await em.findOne(ResourcesResource, { id: resourceId });
   if (!resource) throw new CrudHttpError(404, { error: message });
   return resource;
 }
+async function resolveResourceAuthorUserId(em, explicitAuthorUserId, ctx, scope) {
+  const normalizedAuthor = normalizeAuthorUserId(explicitAuthorUserId, ctx.auth);
+  const fallbackAuthor = normalizeAuthorUserId(null, ctx.auth);
+  const isExplicitSuperAdminAuthor = Boolean(explicitAuthorUserId) && normalizedAuthor === explicitAuthorUserId && ctx.auth?.isApiKey !== true && ctx.auth?.isSuperAdmin === true;
+  if (!isExplicitSuperAdminAuthor || !normalizedAuthor) return normalizedAuthor;
+  const author = await findOneWithDecryption(
+    em,
+    User,
+    {
+      id: normalizedAuthor,
+      tenantId: scope.tenantId,
+      organizationId: scope.organizationId,
+      deletedAt: null
+    },
+    void 0,
+    { tenantId: scope.tenantId, organizationId: scope.organizationId }
+  );
+  return author ? normalizedAuthor : fallbackAuthor;
+}
 export {
   ensureOrganizationScope,
   ensureTenantScope,
   extractUndoPayload,
-  requireResource
+  requireResource,
+  resolveResourceAuthorUserId
 };
 //# sourceMappingURL=shared.js.map

package/dist/modules/resources/commands/shared.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/resources/commands/shared.ts"],
-  "sourcesContent": ["import { CrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { ensureOrganizationScope, ensureTenantScope } from '@open-mercato/shared/lib/commands/scope'\nimport { extractUndoPayload } from '@open-mercato/shared/lib/commands/undo'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { ResourcesResource } from '../data/entities'\n\nexport { ensureOrganizationScope, ensureTenantScope, extractUndoPayload }\n\nexport async function requireResource(\n  em: EntityManager,\n  resourceId: string,\n  message = 'Resource not found',\n): Promise<ResourcesResource> {\n  const resource = await em.findOne(ResourcesResource, { id: resourceId })\n  if (!resource) throw new CrudHttpError(404, { error: message })\n  return resource\n}\n"],
-  "mappings": "AAAA,SAAS,qBAAqB;AAC9B,SAAS,yBAAyB,yBAAyB;AAC3D,SAAS,0BAA0B;AAEnC,SAAS,yBAAyB;AAIlC,eAAsB,gBACpB,IACA,YACA,UAAU,sBACkB;AAC5B,QAAM,WAAW,MAAM,GAAG,QAAQ,mBAAmB,EAAE,IAAI,WAAW,CAAC;AACvE,MAAI,CAAC,SAAU,OAAM,IAAI,cAAc,KAAK,EAAE,OAAO,QAAQ,CAAC;AAC9D,SAAO;AACT;",
+  "sourcesContent": ["import { CrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport type { CommandRuntimeContext } from '@open-mercato/shared/lib/commands'\nimport { ensureOrganizationScope, ensureTenantScope } from '@open-mercato/shared/lib/commands/scope'\nimport { extractUndoPayload } from '@open-mercato/shared/lib/commands/undo'\nimport { normalizeAuthorUserId } from '@open-mercato/shared/lib/commands/helpers'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { User } from '@open-mercato/core/modules/auth/data/entities'\nimport { ResourcesResource } from '../data/entities'\n\nexport { ensureOrganizationScope, ensureTenantScope, extractUndoPayload }\n\nexport async function requireResource(\n  em: EntityManager,\n  resourceId: string,\n  message = 'Resource not found',\n): Promise<ResourcesResource> {\n  const resource = await em.findOne(ResourcesResource, { id: resourceId })\n  if (!resource) throw new CrudHttpError(404, { error: message })\n  return resource\n}\n\nexport async function resolveResourceAuthorUserId(\n  em: EntityManager,\n  explicitAuthorUserId: string | undefined | null,\n  ctx: CommandRuntimeContext,\n  scope: { tenantId: string; organizationId: string },\n): Promise<string | null> {\n  const normalizedAuthor = normalizeAuthorUserId(explicitAuthorUserId, ctx.auth)\n  const fallbackAuthor = normalizeAuthorUserId(null, ctx.auth)\n  const isExplicitSuperAdminAuthor =\n    Boolean(explicitAuthorUserId) &&\n    normalizedAuthor === explicitAuthorUserId &&\n    ctx.auth?.isApiKey !== true &&\n    (ctx.auth as { isSuperAdmin?: boolean } | null)?.isSuperAdmin === true\n\n  if (!isExplicitSuperAdminAuthor || !normalizedAuthor) return normalizedAuthor\n\n  const author = await findOneWithDecryption(\n    em,\n    User,\n    {\n      id: normalizedAuthor,\n      tenantId: scope.tenantId,\n      organizationId: scope.organizationId,\n      deletedAt: null,\n    },\n    undefined,\n    { tenantId: scope.tenantId, organizationId: scope.organizationId },\n  )\n\n  return author ? normalizedAuthor : fallbackAuthor\n}\n"],
+  "mappings": "AAAA,SAAS,qBAAqB;AAE9B,SAAS,yBAAyB,yBAAyB;AAC3D,SAAS,0BAA0B;AACnC,SAAS,6BAA6B;AACtC,SAAS,6BAA6B;AAEtC,SAAS,YAAY;AACrB,SAAS,yBAAyB;AAIlC,eAAsB,gBACpB,IACA,YACA,UAAU,sBACkB;AAC5B,QAAM,WAAW,MAAM,GAAG,QAAQ,mBAAmB,EAAE,IAAI,WAAW,CAAC;AACvE,MAAI,CAAC,SAAU,OAAM,IAAI,cAAc,KAAK,EAAE,OAAO,QAAQ,CAAC;AAC9D,SAAO;AACT;AAEA,eAAsB,4BACpB,IACA,sBACA,KACA,OACwB;AACxB,QAAM,mBAAmB,sBAAsB,sBAAsB,IAAI,IAAI;AAC7E,QAAM,iBAAiB,sBAAsB,MAAM,IAAI,IAAI;AAC3D,QAAM,6BACJ,QAAQ,oBAAoB,KAC5B,qBAAqB,wBACrB,IAAI,MAAM,aAAa,QACtB,IAAI,MAA4C,iBAAiB;AAEpE,MAAI,CAAC,8BAA8B,CAAC,iBAAkB,QAAO;AAE7D,QAAM,SAAS,MAAM;AAAA,IACnB;AAAA,IACA;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM;AAAA,MACtB,WAAW;AAAA,IACb;AAAA,IACA;AAAA,IACA,EAAE,UAAU,MAAM,UAAU,gBAAgB,MAAM,eAAe;AAAA,EACnE;AAEA,SAAO,SAAS,mBAAmB;AACrC;",
   "names": []
 }

package/dist/modules/sales/api/channels/route.js

@@ -14,6 +14,8 @@ import {
 } from "../openapi.js";
 import { CatalogOffer } from "@open-mercato/core/modules/catalog/data/entities";
 import { parseBooleanToken } from "@open-mercato/shared/lib/boolean";
+import { createLogger } from "@open-mercato/shared/lib/logger";
+const logger = createLogger("sales");
 const rawBodySchema = z.object({}).passthrough();
 const UUID_REGEX = /^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-5][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}$/;
 const listSchema = z.object({
@@ -219,7 +221,7 @@ async function decorateChannelsWithOfferCounts(payload, ctx) {
       item.offerCount = countMap.get(id) ?? 0;
     });
   } catch (err) {
-    console.warn("[sales.channels] failed to resolve channel offer counts", err);
+    logger.warn("sales.channels failed to resolve channel offer counts", { err });
   }
 }
 export {

package/dist/modules/sales/api/channels/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../src/modules/sales/api/channels/route.ts"],
-  "sourcesContent": ["import { z } from 'zod'\nimport { makeCrudRoute, type CrudCtx } from '@open-mercato/shared/lib/crud/factory'\nimport { splitCustomFieldPayload } from '@open-mercato/shared/lib/crud/custom-fields'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { SalesChannel } from '../../data/entities'\nimport { channelCreateSchema, channelUpdateSchema } from '../../data/validators'\nimport { buildAggregateSearchFilter, parseScopedCommandInput, resolveCrudRecordId } from '../utils'\nimport { E } from '#generated/entities.ids.generated'\nimport * as F from '#generated/entities/sales_channel'\nimport {\n  createPagedListResponseSchema,\n  createSalesCrudOpenApi,\n  defaultDeleteRequestSchema,\n} from '../openapi'\nimport { CatalogOffer } from '@open-mercato/core/modules/catalog/data/entities'\nimport { parseBooleanToken } from '@open-mercato/shared/lib/boolean'\n\nconst rawBodySchema = z.object({}).passthrough()\n\nconst UUID_REGEX = /^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-5][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}$/\n\nconst listSchema = z\n  .object({\n    page: z.coerce.number().min(1).default(1),\n    pageSize: z.coerce.number().min(1).max(100).default(50),\n    search: z.string().optional(),\n    id: z.string().uuid().optional(),\n    ids: z.string().optional(),\n    isActive: z.string().optional(),\n    sortField: z.string().optional(),\n    sortDir: z.enum(['asc', 'desc']).optional(),\n    withDeleted: z.coerce.boolean().optional(),\n  })\n  .passthrough()\n\nconst routeMetadata = {\n  GET: { requireAuth: true, requireFeatures: ['sales.channels.manage'] },\n  POST: { requireAuth: true, requireFeatures: ['sales.channels.manage'] },\n  PUT: { requireAuth: true, requireFeatures: ['sales.channels.manage'] },\n  DELETE: { requireAuth: true, requireFeatures: ['sales.channels.manage'] },\n}\n\nexport const metadata = routeMetadata\n\nconst salesChannelItemSchema = z.object({\n  id: z.string().uuid(),\n  name: z.string(),\n  code: z.string().nullable(),\n  description: z.string().nullable(),\n  statusEntryId: z.string().uuid().nullable(),\n  isActive: z.boolean(),\n  organizationId: z.string().uuid().nullable(),\n  tenantId: z.string().uuid().nullable(),\n  createdAt: z.string(),\n  updatedAt: z.string(),\n  customFields: z.record(z.string(), z.unknown()).optional(),\n  offerCount: z.number().optional(),\n})\n\nconst salesChannelListResponseSchema = createPagedListResponseSchema(salesChannelItemSchema)\n\nexport function parseIdList(raw?: string): string[] {\n  if (!raw) return []\n  return raw\n    .split(',')\n    .map((value) => value.trim())\n    .filter((value) => UUID_REGEX.test(value))\n}\n\nexport function buildSearchFilters(query: z.infer<typeof listSchema>): Record<string, unknown> {\n  const filters: Record<string, unknown> = {}\n  if (query.id) filters.id = { $eq: query.id }\n  else {\n    const ids = parseIdList(query.ids)\n    if (ids.length) filters.id = { $in: ids }\n  }\n  const searchFilter = buildAggregateSearchFilter(query.search)\n  if (searchFilter) Object.assign(filters, searchFilter)\n  const isActive = parseBooleanToken(query.isActive)\n  if (isActive !== null) filters.is_active = isActive\n  return filters\n}\n\nconst crud = makeCrudRoute({\n  metadata: routeMetadata,\n  orm: {\n    entity: SalesChannel,\n    idField: 'id',\n    orgField: 'organizationId',\n    tenantField: 'tenantId',\n    softDeleteField: 'deletedAt',\n  },\n  indexer: { entityType: E.sales.sales_channel },\n  list: {\n    schema: listSchema,\n    entityId: E.sales.sales_channel,\n    fields: [\n      F.id,\n      F.name,\n      F.code,\n      F.description,\n      F.status_entry_id,\n      F.is_active,\n      F.website_url,\n      F.contact_email,\n      F.contact_phone,\n      F.address_line1,\n      F.address_line2,\n      F.city,\n      F.region,\n      F.postal_code,\n      F.country,\n      F.latitude,\n      F.longitude,\n      F.organization_id,\n      F.tenant_id,\n      F.created_at,\n      F.updated_at,\n    ],\n    sortFieldMap: {\n      id: F.id,\n      name: F.name,\n      code: F.code,\n      createdAt: F.created_at,\n      updatedAt: F.updated_at,\n    },\n    buildFilters: async (query) => buildSearchFilters(query),\n    decorateCustomFields: { entityIds: [E.sales.sales_channel] },\n    transformItem: (item: any) => {\n      const offerCount =\n        typeof item.offerCount === 'number'\n          ? item.offerCount\n          : typeof item.offer_count === 'number'\n            ? item.offer_count\n            : 0\n      const base = {\n        id: item.id,\n        name: item.name,\n        code: item.code ?? null,\n        description: item.description ?? null,\n        statusEntryId: item.status_entry_id ?? null,\n        isActive: item.is_active ?? false,\n        websiteUrl: item.website_url ?? null,\n        contactEmail: item.contact_email ?? null,\n        contactPhone: item.contact_phone ?? null,\n        addressLine1: item.address_line1 ?? null,\n        addressLine2: item.address_line2 ?? null,\n        city: item.city ?? null,\n        region: item.region ?? null,\n        postalCode: item.postal_code ?? null,\n        country: item.country ?? null,\n        latitude: item.latitude ?? null,\n        longitude: item.longitude ?? null,\n        organizationId: item.organization_id ?? null,\n        tenantId: item.tenant_id ?? null,\n        createdAt: item.created_at,\n        updatedAt: item.updated_at,\n        offerCount,\n      }\n      const { custom } = splitCustomFieldPayload(item)\n      return Object.keys(custom).length ? { ...base, customFields: custom } : base\n    },\n  },\n  actions: {\n    create: {\n      commandId: 'sales.channels.create',\n      schema: rawBodySchema,\n      mapInput: async ({ raw, ctx }) => {\n        const { translate } = await resolveTranslations()\n        return parseScopedCommandInput(channelCreateSchema, raw ?? {}, ctx, translate)\n      },\n      response: ({ result }) => ({ id: result?.channelId ?? result?.id ?? null }),\n      status: 201,\n    },\n    update: {\n      commandId: 'sales.channels.update',\n      schema: rawBodySchema,\n      mapInput: async ({ raw, ctx }) => {\n        const { translate } = await resolveTranslations()\n        return parseScopedCommandInput(channelUpdateSchema, raw ?? {}, ctx, translate)\n      },\n      response: () => ({ ok: true }),\n    },\n    delete: {\n      commandId: 'sales.channels.delete',\n      schema: rawBodySchema,\n      mapInput: async ({ parsed, ctx }) => {\n        const { translate } = await resolveTranslations()\n        const id = resolveCrudRecordId(parsed, ctx, translate)\n        return { id }\n      },\n      response: () => ({ ok: true }),\n    },\n  },\n  hooks: {\n    afterList: async (payload, ctx) => {\n      await decorateChannelsWithOfferCounts(payload, ctx)\n    },\n  },\n})\n\nexport const openApi = createSalesCrudOpenApi({\n  resourceName: 'Sales channel',\n  pluralName: 'Sales channels',\n  description: 'Manage sales channels to segment orders and pricing across marketplaces or stores.',\n  querySchema: listSchema,\n  listResponseSchema: salesChannelListResponseSchema,\n  create: { schema: channelCreateSchema },\n  update: { schema: channelUpdateSchema },\n  del: { schema: defaultDeleteRequestSchema },\n})\n\nexport const GET = crud.GET\nexport const POST = crud.POST\nexport const PUT = crud.PUT\nexport const DELETE = crud.DELETE\n\nexport async function decorateChannelsWithOfferCounts(\n  payload: { items?: Array<Record<string, unknown>> },\n  ctx: CrudCtx,\n) {\n  const items = Array.isArray(payload.items) ? payload.items : []\n  if (!items.length) return\n  const channelIds = items\n    .map((item) => {\n      const value = item?.id\n      return typeof value === 'string' && value.length ? value : null\n    })\n    .filter((value): value is string => !!value)\n  if (!channelIds.length) return\n  try {\n    const em = ctx.container.resolve('em') as EntityManager\n    const offers = await em.find(\n      CatalogOffer,\n      { channelId: { $in: channelIds }, deletedAt: null },\n      { fields: ['id', 'channelId'] },\n    )\n    const countMap = new Map<string, number>()\n    offers.forEach((offer) => {\n      const channelId = offer.channelId\n      if (!channelId) return\n      countMap.set(channelId, (countMap.get(channelId) ?? 0) + 1)\n    })\n    items.forEach((item) => {\n      const id = typeof item.id === 'string' ? item.id : null\n      if (!id) return\n      ;(item as Record<string, unknown>).offerCount = countMap.get(id) ?? 0\n    })\n  } catch (err) {\n    console.warn('[sales.channels] failed to resolve channel offer counts', err)\n  }\n}\n"],
-  "mappings": "AAAA,SAAS,SAAS;AAClB,SAAS,qBAAmC;AAC5C,SAAS,+BAA+B;AACxC,SAAS,2BAA2B;AAEpC,SAAS,oBAAoB;AAC7B,SAAS,qBAAqB,2BAA2B;AACzD,SAAS,4BAA4B,yBAAyB,2BAA2B;AACzF,SAAS,SAAS;AAClB,YAAY,OAAO;AACnB;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,oBAAoB;AAC7B,SAAS,yBAAyB;AAElC,MAAM,gBAAgB,EAAE,OAAO,CAAC,CAAC,EAAE,YAAY;AAE/C,MAAM,aAAa;AAEnB,MAAM,aAAa,EAChB,OAAO;AAAA,EACN,MAAM,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,QAAQ,CAAC;AAAA,EACxC,UAAU,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,QAAQ,EAAE;AAAA,EACtD,QAAQ,EAAE,OAAO,EAAE,SAAS;AAAA,EAC5B,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC/B,KAAK,EAAE,OAAO,EAAE,SAAS;AAAA,EACzB,UAAU,EAAE,OAAO,EAAE,SAAS;AAAA,EAC9B,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,SAAS,EAAE,KAAK,CAAC,OAAO,MAAM,CAAC,EAAE,SAAS;AAAA,EAC1C,aAAa,EAAE,OAAO,QAAQ,EAAE,SAAS;AAC3C,CAAC,EACA,YAAY;AAEf,MAAM,gBAAgB;AAAA,EACpB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,uBAAuB,EAAE;AAAA,EACrE,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,uBAAuB,EAAE;AAAA,EACtE,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,uBAAuB,EAAE;AAAA,EACrE,QAAQ,EAAE,aAAa,MAAM,iBAAiB,CAAC,uBAAuB,EAAE;AAC1E;AAEO,MAAM,WAAW;AAExB,MAAM,yBAAyB,EAAE,OAAO;AAAA,EACtC,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,MAAM,EAAE,OAAO;AAAA,EACf,MAAM,EAAE,OAAO,EAAE,SAAS;AAAA,EAC1B,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,EACjC,eAAe,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC1C,UAAU,EAAE,QAAQ;AAAA,EACpB,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC3C,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACrC,WAAW,EAAE,OAAO;AAAA,EACpB,WAAW,EAAE,OAAO;AAAA,EACpB,cAAc,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS;AAAA,EACzD,YAAY,EAAE,OAAO,EAAE,SAAS;AAClC,CAAC;AAED,MAAM,iCAAiC,8BAA8B,sBAAsB;AAEpF,SAAS,YAAY,KAAwB;AAClD,MAAI,CAAC,IAAK,QAAO,CAAC;AAClB,SAAO,IACJ,MAAM,GAAG,EACT,IAAI,CAAC,UAAU,MAAM,KAAK,CAAC,EAC3B,OAAO,CAAC,UAAU,WAAW,KAAK,KAAK,CAAC;AAC7C;AAEO,SAAS,mBAAmB,OAA4D;AAC7F,QAAM,UAAmC,CAAC;AAC1C,MAAI,MAAM,GAAI,SAAQ,KAAK,EAAE,KAAK,MAAM,GAAG;AAAA,OACtC;AACH,UAAM,MAAM,YAAY,MAAM,GAAG;AACjC,QAAI,IAAI,OAAQ,SAAQ,KAAK,EAAE,KAAK,IAAI;AAAA,EAC1C;AACA,QAAM,eAAe,2BAA2B,MAAM,MAAM;AAC5D,MAAI,aAAc,QAAO,OAAO,SAAS,YAAY;AACrD,QAAM,WAAW,kBAAkB,MAAM,QAAQ;AACjD,MAAI,aAAa,KAAM,SAAQ,YAAY;AAC3C,SAAO;AACT;AAEA,MAAM,OAAO,cAAc;AAAA,EACzB,UAAU;AAAA,EACV,KAAK;AAAA,IACH,QAAQ;AAAA,IACR,SAAS;AAAA,IACT,UAAU;AAAA,IACV,aAAa;AAAA,IACb,iBAAiB;AAAA,EACnB;AAAA,EACA,SAAS,EAAE,YAAY,EAAE,MAAM,cAAc;AAAA,EAC7C,MAAM;AAAA,IACJ,QAAQ;AAAA,IACR,UAAU,EAAE,MAAM;AAAA,IAClB,QAAQ;AAAA,MACN,EAAE;AAAA,MACF,EAAE;AAAA,MACF,EAAE;AAAA,MACF,EAAE;AAAA,MACF,EAAE;AAAA,MACF,EAAE;AAAA,MACF,EAAE;AAAA,MACF,EAAE;AAAA,MACF,EAAE;AAAA,MACF,EAAE;AAAA,MACF,EAAE;AAAA,MACF,EAAE;AAAA,MACF,EAAE;AAAA,MACF,EAAE;AAAA,MACF,EAAE;AAAA,MACF,EAAE;AAAA,MACF,EAAE;AAAA,MACF,EAAE;AAAA,MACF,EAAE;AAAA,MACF,EAAE;AAAA,MACF,EAAE;AAAA,IACJ;AAAA,IACA,cAAc;AAAA,MACZ,IAAI,EAAE;AAAA,MACN,MAAM,EAAE;AAAA,MACR,MAAM,EAAE;AAAA,MACR,WAAW,EAAE;AAAA,MACb,WAAW,EAAE;AAAA,IACf;AAAA,IACA,cAAc,OAAO,UAAU,mBAAmB,KAAK;AAAA,IACvD,sBAAsB,EAAE,WAAW,CAAC,EAAE,MAAM,aAAa,EAAE;AAAA,IAC3D,eAAe,CAAC,SAAc;AAC5B,YAAM,aACJ,OAAO,KAAK,eAAe,WACvB,KAAK,aACL,OAAO,KAAK,gBAAgB,WAC1B,KAAK,cACL;AACR,YAAM,OAAO;AAAA,QACX,IAAI,KAAK;AAAA,QACT,MAAM,KAAK;AAAA,QACX,MAAM,KAAK,QAAQ;AAAA,QACnB,aAAa,KAAK,eAAe;AAAA,QACjC,eAAe,KAAK,mBAAmB;AAAA,QACvC,UAAU,KAAK,aAAa;AAAA,QAC5B,YAAY,KAAK,eAAe;AAAA,QAChC,cAAc,KAAK,iBAAiB;AAAA,QACpC,cAAc,KAAK,iBAAiB;AAAA,QACpC,cAAc,KAAK,iBAAiB;AAAA,QACpC,cAAc,KAAK,iBAAiB;AAAA,QACpC,MAAM,KAAK,QAAQ;AAAA,QACnB,QAAQ,KAAK,UAAU;AAAA,QACvB,YAAY,KAAK,eAAe;AAAA,QAChC,SAAS,KAAK,WAAW;AAAA,QACzB,UAAU,KAAK,YAAY;AAAA,QAC3B,WAAW,KAAK,aAAa;AAAA,QAC7B,gBAAgB,KAAK,mBAAmB;AAAA,QACxC,UAAU,KAAK,aAAa;AAAA,QAC5B,WAAW,KAAK;AAAA,QAChB,WAAW,KAAK;AAAA,QAChB;AAAA,MACF;AACA,YAAM,EAAE,OAAO,IAAI,wBAAwB,IAAI;AAC/C,aAAO,OAAO,KAAK,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,cAAc,OAAO,IAAI;AAAA,IAC1E;AAAA,EACF;AAAA,EACA,SAAS;AAAA,IACP,QAAQ;AAAA,MACN,WAAW;AAAA,MACX,QAAQ;AAAA,MACR,UAAU,OAAO,EAAE,KAAK,IAAI,MAAM;AAChC,cAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,eAAO,wBAAwB,qBAAqB,OAAO,CAAC,GAAG,KAAK,SAAS;AAAA,MAC/E;AAAA,MACA,UAAU,CAAC,EAAE,OAAO,OAAO,EAAE,IAAI,QAAQ,aAAa,QAAQ,MAAM,KAAK;AAAA,MACzE,QAAQ;AAAA,IACV;AAAA,IACA,QAAQ;AAAA,MACN,WAAW;AAAA,MACX,QAAQ;AAAA,MACR,UAAU,OAAO,EAAE,KAAK,IAAI,MAAM;AAChC,cAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,eAAO,wBAAwB,qBAAqB,OAAO,CAAC,GAAG,KAAK,SAAS;AAAA,MAC/E;AAAA,MACA,UAAU,OAAO,EAAE,IAAI,KAAK;AAAA,IAC9B;AAAA,IACA,QAAQ;AAAA,MACN,WAAW;AAAA,MACX,QAAQ;AAAA,MACR,UAAU,OAAO,EAAE,QAAQ,IAAI,MAAM;AACnC,cAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,cAAM,KAAK,oBAAoB,QAAQ,KAAK,SAAS;AACrD,eAAO,EAAE,GAAG;AAAA,MACd;AAAA,MACA,UAAU,OAAO,EAAE,IAAI,KAAK;AAAA,IAC9B;AAAA,EACF;AAAA,EACA,OAAO;AAAA,IACL,WAAW,OAAO,SAAS,QAAQ;AACjC,YAAM,gCAAgC,SAAS,GAAG;AAAA,IACpD;AAAA,EACF;AACF,CAAC;AAEM,MAAM,UAAU,uBAAuB;AAAA,EAC5C,cAAc;AAAA,EACd,YAAY;AAAA,EACZ,aAAa;AAAA,EACb,aAAa;AAAA,EACb,oBAAoB;AAAA,EACpB,QAAQ,EAAE,QAAQ,oBAAoB;AAAA,EACtC,QAAQ,EAAE,QAAQ,oBAAoB;AAAA,EACtC,KAAK,EAAE,QAAQ,2BAA2B;AAC5C,CAAC;AAEM,MAAM,MAAM,KAAK;AACjB,MAAM,OAAO,KAAK;AAClB,MAAM,MAAM,KAAK;AACjB,MAAM,SAAS,KAAK;AAE3B,eAAsB,gCACpB,SACA,KACA;AACA,QAAM,QAAQ,MAAM,QAAQ,QAAQ,KAAK,IAAI,QAAQ,QAAQ,CAAC;AAC9D,MAAI,CAAC,MAAM,OAAQ;AACnB,QAAM,aAAa,MAChB,IAAI,CAAC,SAAS;AACb,UAAM,QAAQ,MAAM;AACpB,WAAO,OAAO,UAAU,YAAY,MAAM,SAAS,QAAQ;AAAA,EAC7D,CAAC,EACA,OAAO,CAAC,UAA2B,CAAC,CAAC,KAAK;AAC7C,MAAI,CAAC,WAAW,OAAQ;AACxB,MAAI;AACF,UAAM,KAAK,IAAI,UAAU,QAAQ,IAAI;AACrC,UAAM,SAAS,MAAM,GAAG;AAAA,MACtB;AAAA,MACA,EAAE,WAAW,EAAE,KAAK,WAAW,GAAG,WAAW,KAAK;AAAA,MAClD,EAAE,QAAQ,CAAC,MAAM,WAAW,EAAE;AAAA,IAChC;AACA,UAAM,WAAW,oBAAI,IAAoB;AACzC,WAAO,QAAQ,CAAC,UAAU;AACxB,YAAM,YAAY,MAAM;AACxB,UAAI,CAAC,UAAW;AAChB,eAAS,IAAI,YAAY,SAAS,IAAI,SAAS,KAAK,KAAK,CAAC;AAAA,IAC5D,CAAC;AACD,UAAM,QAAQ,CAAC,SAAS;AACtB,YAAM,KAAK,OAAO,KAAK,OAAO,WAAW,KAAK,KAAK;AACnD,UAAI,CAAC,GAAI;AACR,MAAC,KAAiC,aAAa,SAAS,IAAI,EAAE,KAAK;AAAA,IACtE,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,YAAQ,KAAK,2DAA2D,GAAG;AAAA,EAC7E;AACF;",
+  "sourcesContent": ["import { z } from 'zod'\nimport { makeCrudRoute, type CrudCtx } from '@open-mercato/shared/lib/crud/factory'\nimport { splitCustomFieldPayload } from '@open-mercato/shared/lib/crud/custom-fields'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { SalesChannel } from '../../data/entities'\nimport { channelCreateSchema, channelUpdateSchema } from '../../data/validators'\nimport { buildAggregateSearchFilter, parseScopedCommandInput, resolveCrudRecordId } from '../utils'\nimport { E } from '#generated/entities.ids.generated'\nimport * as F from '#generated/entities/sales_channel'\nimport {\n  createPagedListResponseSchema,\n  createSalesCrudOpenApi,\n  defaultDeleteRequestSchema,\n} from '../openapi'\nimport { CatalogOffer } from '@open-mercato/core/modules/catalog/data/entities'\nimport { parseBooleanToken } from '@open-mercato/shared/lib/boolean'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('sales')\n\nconst rawBodySchema = z.object({}).passthrough()\n\nconst UUID_REGEX = /^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-5][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}$/\n\nconst listSchema = z\n  .object({\n    page: z.coerce.number().min(1).default(1),\n    pageSize: z.coerce.number().min(1).max(100).default(50),\n    search: z.string().optional(),\n    id: z.string().uuid().optional(),\n    ids: z.string().optional(),\n    isActive: z.string().optional(),\n    sortField: z.string().optional(),\n    sortDir: z.enum(['asc', 'desc']).optional(),\n    withDeleted: z.coerce.boolean().optional(),\n  })\n  .passthrough()\n\nconst routeMetadata = {\n  GET: { requireAuth: true, requireFeatures: ['sales.channels.manage'] },\n  POST: { requireAuth: true, requireFeatures: ['sales.channels.manage'] },\n  PUT: { requireAuth: true, requireFeatures: ['sales.channels.manage'] },\n  DELETE: { requireAuth: true, requireFeatures: ['sales.channels.manage'] },\n}\n\nexport const metadata = routeMetadata\n\nconst salesChannelItemSchema = z.object({\n  id: z.string().uuid(),\n  name: z.string(),\n  code: z.string().nullable(),\n  description: z.string().nullable(),\n  statusEntryId: z.string().uuid().nullable(),\n  isActive: z.boolean(),\n  organizationId: z.string().uuid().nullable(),\n  tenantId: z.string().uuid().nullable(),\n  createdAt: z.string(),\n  updatedAt: z.string(),\n  customFields: z.record(z.string(), z.unknown()).optional(),\n  offerCount: z.number().optional(),\n})\n\nconst salesChannelListResponseSchema = createPagedListResponseSchema(salesChannelItemSchema)\n\nexport function parseIdList(raw?: string): string[] {\n  if (!raw) return []\n  return raw\n    .split(',')\n    .map((value) => value.trim())\n    .filter((value) => UUID_REGEX.test(value))\n}\n\nexport function buildSearchFilters(query: z.infer<typeof listSchema>): Record<string, unknown> {\n  const filters: Record<string, unknown> = {}\n  if (query.id) filters.id = { $eq: query.id }\n  else {\n    const ids = parseIdList(query.ids)\n    if (ids.length) filters.id = { $in: ids }\n  }\n  const searchFilter = buildAggregateSearchFilter(query.search)\n  if (searchFilter) Object.assign(filters, searchFilter)\n  const isActive = parseBooleanToken(query.isActive)\n  if (isActive !== null) filters.is_active = isActive\n  return filters\n}\n\nconst crud = makeCrudRoute({\n  metadata: routeMetadata,\n  orm: {\n    entity: SalesChannel,\n    idField: 'id',\n    orgField: 'organizationId',\n    tenantField: 'tenantId',\n    softDeleteField: 'deletedAt',\n  },\n  indexer: { entityType: E.sales.sales_channel },\n  list: {\n    schema: listSchema,\n    entityId: E.sales.sales_channel,\n    fields: [\n      F.id,\n      F.name,\n      F.code,\n      F.description,\n      F.status_entry_id,\n      F.is_active,\n      F.website_url,\n      F.contact_email,\n      F.contact_phone,\n      F.address_line1,\n      F.address_line2,\n      F.city,\n      F.region,\n      F.postal_code,\n      F.country,\n      F.latitude,\n      F.longitude,\n      F.organization_id,\n      F.tenant_id,\n      F.created_at,\n      F.updated_at,\n    ],\n    sortFieldMap: {\n      id: F.id,\n      name: F.name,\n      code: F.code,\n      createdAt: F.created_at,\n      updatedAt: F.updated_at,\n    },\n    buildFilters: async (query) => buildSearchFilters(query),\n    decorateCustomFields: { entityIds: [E.sales.sales_channel] },\n    transformItem: (item: any) => {\n      const offerCount =\n        typeof item.offerCount === 'number'\n          ? item.offerCount\n          : typeof item.offer_count === 'number'\n            ? item.offer_count\n            : 0\n      const base = {\n        id: item.id,\n        name: item.name,\n        code: item.code ?? null,\n        description: item.description ?? null,\n        statusEntryId: item.status_entry_id ?? null,\n        isActive: item.is_active ?? false,\n        websiteUrl: item.website_url ?? null,\n        contactEmail: item.contact_email ?? null,\n        contactPhone: item.contact_phone ?? null,\n        addressLine1: item.address_line1 ?? null,\n        addressLine2: item.address_line2 ?? null,\n        city: item.city ?? null,\n        region: item.region ?? null,\n        postalCode: item.postal_code ?? null,\n        country: item.country ?? null,\n        latitude: item.latitude ?? null,\n        longitude: item.longitude ?? null,\n        organizationId: item.organization_id ?? null,\n        tenantId: item.tenant_id ?? null,\n        createdAt: item.created_at,\n        updatedAt: item.updated_at,\n        offerCount,\n      }\n      const { custom } = splitCustomFieldPayload(item)\n      return Object.keys(custom).length ? { ...base, customFields: custom } : base\n    },\n  },\n  actions: {\n    create: {\n      commandId: 'sales.channels.create',\n      schema: rawBodySchema,\n      mapInput: async ({ raw, ctx }) => {\n        const { translate } = await resolveTranslations()\n        return parseScopedCommandInput(channelCreateSchema, raw ?? {}, ctx, translate)\n      },\n      response: ({ result }) => ({ id: result?.channelId ?? result?.id ?? null }),\n      status: 201,\n    },\n    update: {\n      commandId: 'sales.channels.update',\n      schema: rawBodySchema,\n      mapInput: async ({ raw, ctx }) => {\n        const { translate } = await resolveTranslations()\n        return parseScopedCommandInput(channelUpdateSchema, raw ?? {}, ctx, translate)\n      },\n      response: () => ({ ok: true }),\n    },\n    delete: {\n      commandId: 'sales.channels.delete',\n      schema: rawBodySchema,\n      mapInput: async ({ parsed, ctx }) => {\n        const { translate } = await resolveTranslations()\n        const id = resolveCrudRecordId(parsed, ctx, translate)\n        return { id }\n      },\n      response: () => ({ ok: true }),\n    },\n  },\n  hooks: {\n    afterList: async (payload, ctx) => {\n      await decorateChannelsWithOfferCounts(payload, ctx)\n    },\n  },\n})\n\nexport const openApi = createSalesCrudOpenApi({\n  resourceName: 'Sales channel',\n  pluralName: 'Sales channels',\n  description: 'Manage sales channels to segment orders and pricing across marketplaces or stores.',\n  querySchema: listSchema,\n  listResponseSchema: salesChannelListResponseSchema,\n  create: { schema: channelCreateSchema },\n  update: { schema: channelUpdateSchema },\n  del: { schema: defaultDeleteRequestSchema },\n})\n\nexport const GET = crud.GET\nexport const POST = crud.POST\nexport const PUT = crud.PUT\nexport const DELETE = crud.DELETE\n\nexport async function decorateChannelsWithOfferCounts(\n  payload: { items?: Array<Record<string, unknown>> },\n  ctx: CrudCtx,\n) {\n  const items = Array.isArray(payload.items) ? payload.items : []\n  if (!items.length) return\n  const channelIds = items\n    .map((item) => {\n      const value = item?.id\n      return typeof value === 'string' && value.length ? value : null\n    })\n    .filter((value): value is string => !!value)\n  if (!channelIds.length) return\n  try {\n    const em = ctx.container.resolve('em') as EntityManager\n    const offers = await em.find(\n      CatalogOffer,\n      { channelId: { $in: channelIds }, deletedAt: null },\n      { fields: ['id', 'channelId'] },\n    )\n    const countMap = new Map<string, number>()\n    offers.forEach((offer) => {\n      const channelId = offer.channelId\n      if (!channelId) return\n      countMap.set(channelId, (countMap.get(channelId) ?? 0) + 1)\n    })\n    items.forEach((item) => {\n      const id = typeof item.id === 'string' ? item.id : null\n      if (!id) return\n      ;(item as Record<string, unknown>).offerCount = countMap.get(id) ?? 0\n    })\n  } catch (err) {\n    logger.warn('sales.channels failed to resolve channel offer counts', { err })\n  }\n}\n"],
+  "mappings": "AAAA,SAAS,SAAS;AAClB,SAAS,qBAAmC;AAC5C,SAAS,+BAA+B;AACxC,SAAS,2BAA2B;AAEpC,SAAS,oBAAoB;AAC7B,SAAS,qBAAqB,2BAA2B;AACzD,SAAS,4BAA4B,yBAAyB,2BAA2B;AACzF,SAAS,SAAS;AAClB,YAAY,OAAO;AACnB;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,oBAAoB;AAC7B,SAAS,yBAAyB;AAClC,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,OAAO;AAEnC,MAAM,gBAAgB,EAAE,OAAO,CAAC,CAAC,EAAE,YAAY;AAE/C,MAAM,aAAa;AAEnB,MAAM,aAAa,EAChB,OAAO;AAAA,EACN,MAAM,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,QAAQ,CAAC;AAAA,EACxC,UAAU,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,QAAQ,EAAE;AAAA,EACtD,QAAQ,EAAE,OAAO,EAAE,SAAS;AAAA,EAC5B,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC/B,KAAK,EAAE,OAAO,EAAE,SAAS;AAAA,EACzB,UAAU,EAAE,OAAO,EAAE,SAAS;AAAA,EAC9B,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,SAAS,EAAE,KAAK,CAAC,OAAO,MAAM,CAAC,EAAE,SAAS;AAAA,EAC1C,aAAa,EAAE,OAAO,QAAQ,EAAE,SAAS;AAC3C,CAAC,EACA,YAAY;AAEf,MAAM,gBAAgB;AAAA,EACpB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,uBAAuB,EAAE;AAAA,EACrE,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,uBAAuB,EAAE;AAAA,EACtE,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,uBAAuB,EAAE;AAAA,EACrE,QAAQ,EAAE,aAAa,MAAM,iBAAiB,CAAC,uBAAuB,EAAE;AAC1E;AAEO,MAAM,WAAW;AAExB,MAAM,yBAAyB,EAAE,OAAO;AAAA,EACtC,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,MAAM,EAAE,OAAO;AAAA,EACf,MAAM,EAAE,OAAO,EAAE,SAAS;AAAA,EAC1B,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,EACjC,eAAe,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC1C,UAAU,EAAE,QAAQ;AAAA,EACpB,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC3C,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACrC,WAAW,EAAE,OAAO;AAAA,EACpB,WAAW,EAAE,OAAO;AAAA,EACpB,cAAc,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS;AAAA,EACzD,YAAY,EAAE,OAAO,EAAE,SAAS;AAClC,CAAC;AAED,MAAM,iCAAiC,8BAA8B,sBAAsB;AAEpF,SAAS,YAAY,KAAwB;AAClD,MAAI,CAAC,IAAK,QAAO,CAAC;AAClB,SAAO,IACJ,MAAM,GAAG,EACT,IAAI,CAAC,UAAU,MAAM,KAAK,CAAC,EAC3B,OAAO,CAAC,UAAU,WAAW,KAAK,KAAK,CAAC;AAC7C;AAEO,SAAS,mBAAmB,OAA4D;AAC7F,QAAM,UAAmC,CAAC;AAC1C,MAAI,MAAM,GAAI,SAAQ,KAAK,EAAE,KAAK,MAAM,GAAG;AAAA,OACtC;AACH,UAAM,MAAM,YAAY,MAAM,GAAG;AACjC,QAAI,IAAI,OAAQ,SAAQ,KAAK,EAAE,KAAK,IAAI;AAAA,EAC1C;AACA,QAAM,eAAe,2BAA2B,MAAM,MAAM;AAC5D,MAAI,aAAc,QAAO,OAAO,SAAS,YAAY;AACrD,QAAM,WAAW,kBAAkB,MAAM,QAAQ;AACjD,MAAI,aAAa,KAAM,SAAQ,YAAY;AAC3C,SAAO;AACT;AAEA,MAAM,OAAO,cAAc;AAAA,EACzB,UAAU;AAAA,EACV,KAAK;AAAA,IACH,QAAQ;AAAA,IACR,SAAS;AAAA,IACT,UAAU;AAAA,IACV,aAAa;AAAA,IACb,iBAAiB;AAAA,EACnB;AAAA,EACA,SAAS,EAAE,YAAY,EAAE,MAAM,cAAc;AAAA,EAC7C,MAAM;AAAA,IACJ,QAAQ;AAAA,IACR,UAAU,EAAE,MAAM;AAAA,IAClB,QAAQ;AAAA,MACN,EAAE;AAAA,MACF,EAAE;AAAA,MACF,EAAE;AAAA,MACF,EAAE;AAAA,MACF,EAAE;AAAA,MACF,EAAE;AAAA,MACF,EAAE;AAAA,MACF,EAAE;AAAA,MACF,EAAE;AAAA,MACF,EAAE;AAAA,MACF,EAAE;AAAA,MACF,EAAE;AAAA,MACF,EAAE;AAAA,MACF,EAAE;AAAA,MACF,EAAE;AAAA,MACF,EAAE;AAAA,MACF,EAAE;AAAA,MACF,EAAE;AAAA,MACF,EAAE;AAAA,MACF,EAAE;AAAA,MACF,EAAE;AAAA,IACJ;AAAA,IACA,cAAc;AAAA,MACZ,IAAI,EAAE;AAAA,MACN,MAAM,EAAE;AAAA,MACR,MAAM,EAAE;AAAA,MACR,WAAW,EAAE;AAAA,MACb,WAAW,EAAE;AAAA,IACf;AAAA,IACA,cAAc,OAAO,UAAU,mBAAmB,KAAK;AAAA,IACvD,sBAAsB,EAAE,WAAW,CAAC,EAAE,MAAM,aAAa,EAAE;AAAA,IAC3D,eAAe,CAAC,SAAc;AAC5B,YAAM,aACJ,OAAO,KAAK,eAAe,WACvB,KAAK,aACL,OAAO,KAAK,gBAAgB,WAC1B,KAAK,cACL;AACR,YAAM,OAAO;AAAA,QACX,IAAI,KAAK;AAAA,QACT,MAAM,KAAK;AAAA,QACX,MAAM,KAAK,QAAQ;AAAA,QACnB,aAAa,KAAK,eAAe;AAAA,QACjC,eAAe,KAAK,mBAAmB;AAAA,QACvC,UAAU,KAAK,aAAa;AAAA,QAC5B,YAAY,KAAK,eAAe;AAAA,QAChC,cAAc,KAAK,iBAAiB;AAAA,QACpC,cAAc,KAAK,iBAAiB;AAAA,QACpC,cAAc,KAAK,iBAAiB;AAAA,QACpC,cAAc,KAAK,iBAAiB;AAAA,QACpC,MAAM,KAAK,QAAQ;AAAA,QACnB,QAAQ,KAAK,UAAU;AAAA,QACvB,YAAY,KAAK,eAAe;AAAA,QAChC,SAAS,KAAK,WAAW;AAAA,QACzB,UAAU,KAAK,YAAY;AAAA,QAC3B,WAAW,KAAK,aAAa;AAAA,QAC7B,gBAAgB,KAAK,mBAAmB;AAAA,QACxC,UAAU,KAAK,aAAa;AAAA,QAC5B,WAAW,KAAK;AAAA,QAChB,WAAW,KAAK;AAAA,QAChB;AAAA,MACF;AACA,YAAM,EAAE,OAAO,IAAI,wBAAwB,IAAI;AAC/C,aAAO,OAAO,KAAK,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,cAAc,OAAO,IAAI;AAAA,IAC1E;AAAA,EACF;AAAA,EACA,SAAS;AAAA,IACP,QAAQ;AAAA,MACN,WAAW;AAAA,MACX,QAAQ;AAAA,MACR,UAAU,OAAO,EAAE,KAAK,IAAI,MAAM;AAChC,cAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,eAAO,wBAAwB,qBAAqB,OAAO,CAAC,GAAG,KAAK,SAAS;AAAA,MAC/E;AAAA,MACA,UAAU,CAAC,EAAE,OAAO,OAAO,EAAE,IAAI,QAAQ,aAAa,QAAQ,MAAM,KAAK;AAAA,MACzE,QAAQ;AAAA,IACV;AAAA,IACA,QAAQ;AAAA,MACN,WAAW;AAAA,MACX,QAAQ;AAAA,MACR,UAAU,OAAO,EAAE,KAAK,IAAI,MAAM;AAChC,cAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,eAAO,wBAAwB,qBAAqB,OAAO,CAAC,GAAG,KAAK,SAAS;AAAA,MAC/E;AAAA,MACA,UAAU,OAAO,EAAE,IAAI,KAAK;AAAA,IAC9B;AAAA,IACA,QAAQ;AAAA,MACN,WAAW;AAAA,MACX,QAAQ;AAAA,MACR,UAAU,OAAO,EAAE,QAAQ,IAAI,MAAM;AACnC,cAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,cAAM,KAAK,oBAAoB,QAAQ,KAAK,SAAS;AACrD,eAAO,EAAE,GAAG;AAAA,MACd;AAAA,MACA,UAAU,OAAO,EAAE,IAAI,KAAK;AAAA,IAC9B;AAAA,EACF;AAAA,EACA,OAAO;AAAA,IACL,WAAW,OAAO,SAAS,QAAQ;AACjC,YAAM,gCAAgC,SAAS,GAAG;AAAA,IACpD;AAAA,EACF;AACF,CAAC;AAEM,MAAM,UAAU,uBAAuB;AAAA,EAC5C,cAAc;AAAA,EACd,YAAY;AAAA,EACZ,aAAa;AAAA,EACb,aAAa;AAAA,EACb,oBAAoB;AAAA,EACpB,QAAQ,EAAE,QAAQ,oBAAoB;AAAA,EACtC,QAAQ,EAAE,QAAQ,oBAAoB;AAAA,EACtC,KAAK,EAAE,QAAQ,2BAA2B;AAC5C,CAAC;AAEM,MAAM,MAAM,KAAK;AACjB,MAAM,OAAO,KAAK;AAClB,MAAM,MAAM,KAAK;AACjB,MAAM,SAAS,KAAK;AAE3B,eAAsB,gCACpB,SACA,KACA;AACA,QAAM,QAAQ,MAAM,QAAQ,QAAQ,KAAK,IAAI,QAAQ,QAAQ,CAAC;AAC9D,MAAI,CAAC,MAAM,OAAQ;AACnB,QAAM,aAAa,MAChB,IAAI,CAAC,SAAS;AACb,UAAM,QAAQ,MAAM;AACpB,WAAO,OAAO,UAAU,YAAY,MAAM,SAAS,QAAQ;AAAA,EAC7D,CAAC,EACA,OAAO,CAAC,UAA2B,CAAC,CAAC,KAAK;AAC7C,MAAI,CAAC,WAAW,OAAQ;AACxB,MAAI;AACF,UAAM,KAAK,IAAI,UAAU,QAAQ,IAAI;AACrC,UAAM,SAAS,MAAM,GAAG;AAAA,MACtB;AAAA,MACA,EAAE,WAAW,EAAE,KAAK,WAAW,GAAG,WAAW,KAAK;AAAA,MAClD,EAAE,QAAQ,CAAC,MAAM,WAAW,EAAE;AAAA,IAChC;AACA,UAAM,WAAW,oBAAI,IAAoB;AACzC,WAAO,QAAQ,CAAC,UAAU;AACxB,YAAM,YAAY,MAAM;AACxB,UAAI,CAAC,UAAW;AAChB,eAAS,IAAI,YAAY,SAAS,IAAI,SAAS,KAAK,KAAK,CAAC;AAAA,IAC5D,CAAC;AACD,UAAM,QAAQ,CAAC,SAAS;AACtB,YAAM,KAAK,OAAO,KAAK,OAAO,WAAW,KAAK,KAAK;AACnD,UAAI,CAAC,GAAI;AACR,MAAC,KAAiC,aAAa,SAAS,IAAI,EAAE,KAAK;AAAA,IACtE,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,WAAO,KAAK,yDAAyD,EAAE,IAAI,CAAC;AAAA,EAC9E;AACF;",
   "names": []
 }

package/dist/modules/sales/api/document-addresses/route.js

@@ -2,9 +2,10 @@ import { z } from "zod";
 import { makeCrudRoute } from "@open-mercato/shared/lib/crud/factory";
 import { CrudHttpError } from "@open-mercato/shared/lib/crud/errors";
 import { resolveTranslations } from "@open-mercato/shared/lib/i18n/server";
+import { findOneWithDecryption } from "@open-mercato/shared/lib/encryption/find";
 import { createSalesCrudOpenApi, createPagedListResponseSchema, defaultOkResponseSchema } from "../openapi.js";
 import { withScopedPayload } from "../utils.js";
-import { SalesDocumentAddress } from "../../data/entities.js";
+import { SalesDocumentAddress, SalesOrder, SalesQuote } from "../../data/entities.js";
 import {
   documentAddressCreateSchema,
   documentAddressDeleteSchema,
@@ -27,8 +28,90 @@ const routeMetadata = {
   DELETE: { requireAuth: true }
 };
 const metadata = routeMetadata;
+const DOCUMENT_ADDRESS_FEATURES = {
+  order: { view: "sales.orders.view", manage: "sales.orders.manage" },
+  quote: { view: "sales.quotes.view", manage: "sales.quotes.manage" }
+};
+function toDocumentKind(value) {
+  return value === "order" || value === "quote" ? value : null;
+}
+async function resolveDocumentKindForRead(query, ctx) {
+  if (query.documentKind) return query.documentKind;
+  const tenantId = ctx.auth?.tenantId ?? null;
+  const organizationId = ctx.selectedOrganizationId ?? ctx.auth?.orgId ?? (Array.isArray(ctx.organizationIds) && ctx.organizationIds.length === 1 ? ctx.organizationIds[0] : null);
+  if (!query.documentId || !tenantId || !organizationId) return null;
+  const em = ctx.container.resolve("em");
+  const scope = { tenantId, organizationId };
+  const order = await findOneWithDecryption(em, SalesOrder, { id: query.documentId, tenantId, organizationId }, {}, scope);
+  if (order) return "order";
+  const quote = await findOneWithDecryption(em, SalesQuote, { id: query.documentId, tenantId, organizationId }, {}, scope);
+  if (quote) return "quote";
+  return null;
+}
+async function ensureDocumentAddressReadAccess(query, ctx) {
+  const documentKind = await resolveDocumentKindForRead(query, ctx);
+  const requiredFeatures = documentKind ? [DOCUMENT_ADDRESS_FEATURES[documentKind].view] : [DOCUMENT_ADDRESS_FEATURES.order.view, DOCUMENT_ADDRESS_FEATURES.quote.view];
+  await ensureDocumentAddressAccess(ctx, requiredFeatures);
+  return documentKind;
+}
+async function resolveExistingAddressKind(ctx, id, scope) {
+  const em = ctx.container.resolve("em");
+  const address = await findOneWithDecryption(
+    em,
+    SalesDocumentAddress,
+    { id, tenantId: scope.tenantId, organizationId: scope.organizationId },
+    {},
+    scope
+  );
+  return toDocumentKind(address?.documentKind);
+}
+async function ensureDocumentAddressAccess(ctx, requiredFeatures, translate) {
+  const resolvedTranslate = translate ?? (await resolveTranslations()).translate;
+  const auth = ctx.auth;
+  if (!auth?.sub) {
+    throw new CrudHttpError(401, { error: resolvedTranslate("api.errors.unauthorized", "Unauthorized") });
+  }
+  let rbac = null;
+  try {
+    rbac = ctx.container.resolve("rbacService");
+  } catch {
+    rbac = null;
+  }
+  const ok = rbac ? await rbac.userHasAllFeatures(auth.sub, requiredFeatures, {
+    tenantId: auth.tenantId ?? null,
+    organizationId: ctx.selectedOrganizationId ?? auth.orgId ?? null
+  }) : false;
+  if (!ok) {
+    throw new CrudHttpError(403, {
+      error: resolvedTranslate("api.errors.forbidden", "Forbidden"),
+      requiredFeatures
+    });
+  }
+}
+async function ensureDocumentAddressKindAccess(ctx, documentKind, access, translate) {
+  await ensureDocumentAddressAccess(ctx, [DOCUMENT_ADDRESS_FEATURES[documentKind][access]], translate);
+}
+async function ensureDocumentAddressMutationAccess(ctx, input, options) {
+  const existingKind = await resolveExistingAddressKind(ctx, input.id, {
+    tenantId: input.tenantId,
+    organizationId: input.organizationId
+  });
+  const featureKinds = /* @__PURE__ */ new Set();
+  if (existingKind) featureKinds.add(existingKind);
+  if (!existingKind || options.includeTargetKind) featureKinds.add(input.documentKind);
+  await ensureDocumentAddressAccess(
+    ctx,
+    [...featureKinds].map((kind) => DOCUMENT_ADDRESS_FEATURES[kind].manage),
+    options.translate
+  );
+}
 const crud = makeCrudRoute({
   metadata: routeMetadata,
+  hooks: {
+    beforeList: async (query, ctx) => {
+      await ensureDocumentAddressReadAccess(query, ctx);
+    }
+  },
   orm: {
     entity: SalesDocumentAddress,
     idField: "id",
@@ -69,11 +152,12 @@ const crud = makeCrudRoute({
       createdAt: "created_at",
       updatedAt: "updated_at"
     },
-    buildFilters: async (query) => {
+    buildFilters: async (query, ctx) => {
+      const documentKind = await resolveDocumentKindForRead(query, ctx);
       const filters = {
         document_id: { $eq: query.documentId }
       };
-      if (query.documentKind) filters.document_kind = { $eq: query.documentKind };
+      if (query.documentKind ?? documentKind) filters.document_kind = { $eq: query.documentKind ?? documentKind };
       return filters;
     }
   },
@@ -83,7 +167,9 @@ const crud = makeCrudRoute({
       schema: rawBodySchema,
       mapInput: async ({ raw, ctx }) => {
         const { translate } = await resolveTranslations();
-        return documentAddressCreateSchema.parse(withScopedPayload(raw ?? {}, ctx, translate));
+        const input = documentAddressCreateSchema.parse(withScopedPayload(raw ?? {}, ctx, translate));
+        await ensureDocumentAddressKindAccess(ctx, input.documentKind, "manage", translate);
+        return input;
       },
       response: ({ result }) => ({ id: result?.id ?? null }),
       status: 201
@@ -93,7 +179,9 @@ const crud = makeCrudRoute({
       schema: rawBodySchema,
       mapInput: async ({ raw, ctx }) => {
         const { translate } = await resolveTranslations();
-        return documentAddressUpdateSchema.parse(withScopedPayload(raw ?? {}, ctx, translate));
+        const input = documentAddressUpdateSchema.parse(withScopedPayload(raw ?? {}, ctx, translate));
+        await ensureDocumentAddressMutationAccess(ctx, input, { includeTargetKind: true, translate });
+        return input;
       },
       response: () => ({ ok: true })
     },
@@ -110,7 +198,9 @@ const crud = makeCrudRoute({
             error: translate("sales.documents.detail.error", "Document not found or inaccessible.")
           });
         }
-        return documentAddressDeleteSchema.parse(withScopedPayload({ id, documentId, documentKind }, ctx, translate));
+        const input = documentAddressDeleteSchema.parse(withScopedPayload({ id, documentId, documentKind }, ctx, translate));
+        await ensureDocumentAddressMutationAccess(ctx, input, { includeTargetKind: false, translate });
+        return input;
       },
       response: () => ({ ok: true })
     }

package/dist/modules/sales/api/document-addresses/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../src/modules/sales/api/document-addresses/route.ts"],
-  "sourcesContent": ["import { z } from 'zod'\nimport { makeCrudRoute } from '@open-mercato/shared/lib/crud/factory'\nimport { CrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { createSalesCrudOpenApi, createPagedListResponseSchema, defaultOkResponseSchema } from '../openapi'\nimport { withScopedPayload } from '../utils'\nimport { SalesDocumentAddress } from '../../data/entities'\nimport {\n  documentAddressCreateSchema,\n  documentAddressDeleteSchema,\n  documentAddressUpdateSchema,\n} from '../../data/validators'\nimport { E } from '#generated/entities.ids.generated'\n\nconst rawBodySchema = z.object({}).passthrough()\n\nconst listSchema = z\n  .object({\n    page: z.coerce.number().min(1).default(1),\n    pageSize: z.coerce.number().min(1).max(100).default(50),\n    documentId: z.string().uuid(),\n    documentKind: z.enum(['order', 'quote']).optional(),\n    sortField: z.string().optional(),\n    sortDir: z.enum(['asc', 'desc']).optional(),\n  })\n  .passthrough()\n\nconst routeMetadata = {\n  GET: { requireAuth: true },\n  POST: { requireAuth: true },\n  PUT: { requireAuth: true },\n  DELETE: { requireAuth: true },\n}\n\nexport const metadata = routeMetadata\n\nconst crud = makeCrudRoute({\n  metadata: routeMetadata,\n  orm: {\n    entity: SalesDocumentAddress,\n    idField: 'id',\n    orgField: 'organizationId',\n    tenantField: 'tenantId',\n    softDeleteField: 'deletedAt',\n  },\n  indexer: { entityType: E.sales.sales_document_address },\n  list: {\n    schema: listSchema,\n    entityId: E.sales.sales_document_address,\n    fields: [\n      'id',\n      'organization_id',\n      'tenant_id',\n      'document_id',\n      'document_kind',\n      'customer_address_id',\n      'name',\n      'purpose',\n      'company_name',\n      'address_line1',\n      'address_line2',\n      'building_number',\n      'flat_number',\n      'city',\n      'region',\n      'postal_code',\n      'country',\n      'latitude',\n      'longitude',\n      'order_id',\n      'quote_id',\n      'created_at',\n      'updated_at',\n    ],\n    sortFieldMap: {\n      createdAt: 'created_at',\n      updatedAt: 'updated_at',\n    },\n    buildFilters: async (query: any) => {\n      const filters: Record<string, any> = {\n        document_id: { $eq: query.documentId },\n      }\n\n      if (query.documentKind) filters.document_kind = { $eq: query.documentKind }\n      return filters\n    },\n  },\n  actions: {\n    create: {\n      commandId: 'sales.document-addresses.create',\n      schema: rawBodySchema,\n      mapInput: async ({ raw, ctx }) => {\n        const { translate } = await resolveTranslations()\n        return documentAddressCreateSchema.parse(withScopedPayload(raw ?? {}, ctx, translate))\n      },\n      response: ({ result }) => ({ id: result?.id ?? null }),\n      status: 201,\n    },\n    update: {\n      commandId: 'sales.document-addresses.update',\n      schema: rawBodySchema,\n      mapInput: async ({ raw, ctx }) => {\n        const { translate } = await resolveTranslations()\n        return documentAddressUpdateSchema.parse(withScopedPayload(raw ?? {}, ctx, translate))\n      },\n      response: () => ({ ok: true }),\n    },\n    delete: {\n      commandId: 'sales.document-addresses.delete',\n      schema: rawBodySchema,\n      mapInput: async ({ parsed, ctx }) => {\n        const { translate } = await resolveTranslations()\n        const id =\n          parsed?.body?.id ??\n          parsed?.id ??\n          parsed?.query?.id ??\n          (ctx.request ? new URL(ctx.request.url).searchParams.get('id') : null)\n        const documentId =\n          parsed?.body?.documentId ??\n          parsed?.query?.documentId ??\n          (ctx.request ? new URL(ctx.request.url).searchParams.get('documentId') : null)\n        const documentKind =\n          parsed?.body?.documentKind ??\n          parsed?.query?.documentKind ??\n          (ctx.request ? new URL(ctx.request.url).searchParams.get('documentKind') : null)\n        if (!id || !documentId || !documentKind) {\n          throw new CrudHttpError(400, {\n            error: translate('sales.documents.detail.error', 'Document not found or inaccessible.'),\n          })\n        }\n        return documentAddressDeleteSchema.parse(withScopedPayload({ id, documentId, documentKind }, ctx, translate))\n      },\n      response: () => ({ ok: true }),\n    },\n  },\n})\n\nconst { GET, POST, PUT, DELETE } = crud\n\nexport { GET, POST, PUT, DELETE }\n\nconst documentAddressSchema = z.object({\n  id: z.string().uuid(),\n  document_id: z.string().uuid(),\n  document_kind: z.enum(['order', 'quote']),\n  customer_address_id: z.string().uuid().nullable().optional(),\n  name: z.string().nullable().optional(),\n  purpose: z.string().nullable().optional(),\n  company_name: z.string().nullable().optional(),\n  address_line1: z.string(),\n  address_line2: z.string().nullable().optional(),\n  building_number: z.string().nullable().optional(),\n  flat_number: z.string().nullable().optional(),\n  city: z.string().nullable().optional(),\n  region: z.string().nullable().optional(),\n  postal_code: z.string().nullable().optional(),\n  country: z.string().nullable().optional(),\n  latitude: z.number().nullable().optional(),\n  longitude: z.number().nullable().optional(),\n  created_at: z.string(),\n  updated_at: z.string(),\n})\n\nexport const openApi = createSalesCrudOpenApi({\n  resourceName: 'Document address',\n  querySchema: listSchema,\n  listResponseSchema: createPagedListResponseSchema(documentAddressSchema),\n  create: {\n    schema: documentAddressCreateSchema,\n    responseSchema: z.object({ id: z.string().uuid().nullable() }),\n    description: 'Creates a sales document address linked to an order or quote.',\n  },\n  update: {\n    schema: documentAddressUpdateSchema,\n    responseSchema: defaultOkResponseSchema,\n    description: 'Updates a sales document address.',\n  },\n  del: {\n    schema: documentAddressDeleteSchema.pick({ id: true, documentId: true, documentKind: true }),\n    responseSchema: defaultOkResponseSchema,\n    description: 'Deletes a sales document address.',\n  },\n})\n"],
-  "mappings": "AAAA,SAAS,SAAS;AAClB,SAAS,qBAAqB;AAC9B,SAAS,qBAAqB;AAC9B,SAAS,2BAA2B;AACpC,SAAS,wBAAwB,+BAA+B,+BAA+B;AAC/F,SAAS,yBAAyB;AAClC,SAAS,4BAA4B;AACrC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,SAAS;AAElB,MAAM,gBAAgB,EAAE,OAAO,CAAC,CAAC,EAAE,YAAY;AAE/C,MAAM,aAAa,EAChB,OAAO;AAAA,EACN,MAAM,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,QAAQ,CAAC;AAAA,EACxC,UAAU,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,QAAQ,EAAE;AAAA,EACtD,YAAY,EAAE,OAAO,EAAE,KAAK;AAAA,EAC5B,cAAc,EAAE,KAAK,CAAC,SAAS,OAAO,CAAC,EAAE,SAAS;AAAA,EAClD,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,SAAS,EAAE,KAAK,CAAC,OAAO,MAAM,CAAC,EAAE,SAAS;AAC5C,CAAC,EACA,YAAY;AAEf,MAAM,gBAAgB;AAAA,EACpB,KAAK,EAAE,aAAa,KAAK;AAAA,EACzB,MAAM,EAAE,aAAa,KAAK;AAAA,EAC1B,KAAK,EAAE,aAAa,KAAK;AAAA,EACzB,QAAQ,EAAE,aAAa,KAAK;AAC9B;AAEO,MAAM,WAAW;AAExB,MAAM,OAAO,cAAc;AAAA,EACzB,UAAU;AAAA,EACV,KAAK;AAAA,IACH,QAAQ;AAAA,IACR,SAAS;AAAA,IACT,UAAU;AAAA,IACV,aAAa;AAAA,IACb,iBAAiB;AAAA,EACnB;AAAA,EACA,SAAS,EAAE,YAAY,EAAE,MAAM,uBAAuB;AAAA,EACtD,MAAM;AAAA,IACJ,QAAQ;AAAA,IACR,UAAU,EAAE,MAAM;AAAA,IAClB,QAAQ;AAAA,MACN;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,IACA,cAAc;AAAA,MACZ,WAAW;AAAA,MACX,WAAW;AAAA,IACb;AAAA,IACA,cAAc,OAAO,UAAe;AAClC,YAAM,UAA+B;AAAA,QACnC,aAAa,EAAE,KAAK,MAAM,WAAW;AAAA,MACvC;AAEA,UAAI,MAAM,aAAc,SAAQ,gBAAgB,EAAE,KAAK,MAAM,aAAa;AAC1E,aAAO;AAAA,IACT;AAAA,EACF;AAAA,EACA,SAAS;AAAA,IACP,QAAQ;AAAA,MACN,WAAW;AAAA,MACX,QAAQ;AAAA,MACR,UAAU,OAAO,EAAE,KAAK,IAAI,MAAM;AAChC,cAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,eAAO,4BAA4B,MAAM,kBAAkB,OAAO,CAAC,GAAG,KAAK,SAAS,CAAC;AAAA,MACvF;AAAA,MACA,UAAU,CAAC,EAAE,OAAO,OAAO,EAAE,IAAI,QAAQ,MAAM,KAAK;AAAA,MACpD,QAAQ;AAAA,IACV;AAAA,IACA,QAAQ;AAAA,MACN,WAAW;AAAA,MACX,QAAQ;AAAA,MACR,UAAU,OAAO,EAAE,KAAK,IAAI,MAAM;AAChC,cAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,eAAO,4BAA4B,MAAM,kBAAkB,OAAO,CAAC,GAAG,KAAK,SAAS,CAAC;AAAA,MACvF;AAAA,MACA,UAAU,OAAO,EAAE,IAAI,KAAK;AAAA,IAC9B;AAAA,IACA,QAAQ;AAAA,MACN,WAAW;AAAA,MACX,QAAQ;AAAA,MACR,UAAU,OAAO,EAAE,QAAQ,IAAI,MAAM;AACnC,cAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,cAAM,KACJ,QAAQ,MAAM,MACd,QAAQ,MACR,QAAQ,OAAO,OACd,IAAI,UAAU,IAAI,IAAI,IAAI,QAAQ,GAAG,EAAE,aAAa,IAAI,IAAI,IAAI;AACnE,cAAM,aACJ,QAAQ,MAAM,cACd,QAAQ,OAAO,eACd,IAAI,UAAU,IAAI,IAAI,IAAI,QAAQ,GAAG,EAAE,aAAa,IAAI,YAAY,IAAI;AAC3E,cAAM,eACJ,QAAQ,MAAM,gBACd,QAAQ,OAAO,iBACd,IAAI,UAAU,IAAI,IAAI,IAAI,QAAQ,GAAG,EAAE,aAAa,IAAI,cAAc,IAAI;AAC7E,YAAI,CAAC,MAAM,CAAC,cAAc,CAAC,cAAc;AACvC,gBAAM,IAAI,cAAc,KAAK;AAAA,YAC3B,OAAO,UAAU,gCAAgC,qCAAqC;AAAA,UACxF,CAAC;AAAA,QACH;AACA,eAAO,4BAA4B,MAAM,kBAAkB,EAAE,IAAI,YAAY,aAAa,GAAG,KAAK,SAAS,CAAC;AAAA,MAC9G;AAAA,MACA,UAAU,OAAO,EAAE,IAAI,KAAK;AAAA,IAC9B;AAAA,EACF;AACF,CAAC;AAED,MAAM,EAAE,KAAK,MAAM,KAAK,OAAO,IAAI;AAInC,MAAM,wBAAwB,EAAE,OAAO;AAAA,EACrC,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,aAAa,EAAE,OAAO,EAAE,KAAK;AAAA,EAC7B,eAAe,EAAE,KAAK,CAAC,SAAS,OAAO,CAAC;AAAA,EACxC,qBAAqB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS;AAAA,EAC3D,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACrC,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACxC,cAAc,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC7C,eAAe,EAAE,OAAO;AAAA,EACxB,eAAe,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC9C,iBAAiB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAChD,aAAa,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC5C,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACrC,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACvC,aAAa,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC5C,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACxC,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACzC,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC1C,YAAY,EAAE,OAAO;AAAA,EACrB,YAAY,EAAE,OAAO;AACvB,CAAC;AAEM,MAAM,UAAU,uBAAuB;AAAA,EAC5C,cAAc;AAAA,EACd,aAAa;AAAA,EACb,oBAAoB,8BAA8B,qBAAqB;AAAA,EACvE,QAAQ;AAAA,IACN,QAAQ;AAAA,IACR,gBAAgB,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;AAAA,IAC7D,aAAa;AAAA,EACf;AAAA,EACA,QAAQ;AAAA,IACN,QAAQ;AAAA,IACR,gBAAgB;AAAA,IAChB,aAAa;AAAA,EACf;AAAA,EACA,KAAK;AAAA,IACH,QAAQ,4BAA4B,KAAK,EAAE,IAAI,MAAM,YAAY,MAAM,cAAc,KAAK,CAAC;AAAA,IAC3F,gBAAgB;AAAA,IAChB,aAAa;AAAA,EACf;AACF,CAAC;",
+  "sourcesContent": ["import { z } from 'zod'\nimport { makeCrudRoute, type CrudCtx } from '@open-mercato/shared/lib/crud/factory'\nimport { CrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport type { RbacService } from '@open-mercato/core/modules/auth/services/rbacService'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { createSalesCrudOpenApi, createPagedListResponseSchema, defaultOkResponseSchema } from '../openapi'\nimport { withScopedPayload } from '../utils'\nimport { SalesDocumentAddress, SalesOrder, SalesQuote } from '../../data/entities'\nimport {\n  documentAddressCreateSchema,\n  documentAddressDeleteSchema,\n  documentAddressUpdateSchema,\n} from '../../data/validators'\nimport { E } from '#generated/entities.ids.generated'\n\nconst rawBodySchema = z.object({}).passthrough()\n\nconst listSchema = z\n  .object({\n    page: z.coerce.number().min(1).default(1),\n    pageSize: z.coerce.number().min(1).max(100).default(50),\n    documentId: z.string().uuid(),\n    documentKind: z.enum(['order', 'quote']).optional(),\n    sortField: z.string().optional(),\n    sortDir: z.enum(['asc', 'desc']).optional(),\n  })\n  .passthrough()\n\nconst routeMetadata = {\n  GET: { requireAuth: true },\n  POST: { requireAuth: true },\n  PUT: { requireAuth: true },\n  DELETE: { requireAuth: true },\n}\n\nexport const metadata = routeMetadata\n\ntype DocumentKind = 'order' | 'quote'\ntype DocumentAddressAccess = 'view' | 'manage'\ntype Translate = (key: string, fallback?: string) => string\n\nconst DOCUMENT_ADDRESS_FEATURES: Record<DocumentKind, Record<DocumentAddressAccess, string>> = {\n  order: { view: 'sales.orders.view', manage: 'sales.orders.manage' },\n  quote: { view: 'sales.quotes.view', manage: 'sales.quotes.manage' },\n}\n\nfunction toDocumentKind(value: unknown): DocumentKind | null {\n  return value === 'order' || value === 'quote' ? value : null\n}\n\nasync function resolveDocumentKindForRead(query: { documentId?: string; documentKind?: DocumentKind }, ctx: CrudCtx) {\n  if (query.documentKind) return query.documentKind\n\n  const tenantId = ctx.auth?.tenantId ?? null\n  const organizationId =\n    ctx.selectedOrganizationId ??\n    ctx.auth?.orgId ??\n    (Array.isArray(ctx.organizationIds) && ctx.organizationIds.length === 1 ? ctx.organizationIds[0] : null)\n  if (!query.documentId || !tenantId || !organizationId) return null\n\n  const em = ctx.container.resolve('em') as EntityManager\n  const scope = { tenantId, organizationId }\n  const order = await findOneWithDecryption(em, SalesOrder, { id: query.documentId, tenantId, organizationId }, {}, scope)\n  if (order) return 'order'\n  const quote = await findOneWithDecryption(em, SalesQuote, { id: query.documentId, tenantId, organizationId }, {}, scope)\n  if (quote) return 'quote'\n  return null\n}\n\nasync function ensureDocumentAddressReadAccess(query: { documentId?: string; documentKind?: DocumentKind }, ctx: CrudCtx) {\n  const documentKind = await resolveDocumentKindForRead(query, ctx)\n  const requiredFeatures = documentKind\n    ? [DOCUMENT_ADDRESS_FEATURES[documentKind].view]\n    : [DOCUMENT_ADDRESS_FEATURES.order.view, DOCUMENT_ADDRESS_FEATURES.quote.view]\n  await ensureDocumentAddressAccess(ctx, requiredFeatures)\n  return documentKind\n}\n\nasync function resolveExistingAddressKind(\n  ctx: CrudCtx,\n  id: string,\n  scope: { tenantId: string; organizationId: string },\n): Promise<DocumentKind | null> {\n  const em = ctx.container.resolve('em') as EntityManager\n  const address = await findOneWithDecryption(\n    em,\n    SalesDocumentAddress,\n    { id, tenantId: scope.tenantId, organizationId: scope.organizationId },\n    {},\n    scope,\n  )\n  return toDocumentKind(address?.documentKind)\n}\n\nasync function ensureDocumentAddressAccess(\n  ctx: CrudCtx,\n  requiredFeatures: string[],\n  translate?: Translate,\n): Promise<void> {\n  const resolvedTranslate = translate ?? (await resolveTranslations()).translate\n  const auth = ctx.auth\n  if (!auth?.sub) {\n    throw new CrudHttpError(401, { error: resolvedTranslate('api.errors.unauthorized', 'Unauthorized') })\n  }\n\n  let rbac: RbacService | null = null\n  try {\n    rbac = ctx.container.resolve('rbacService') as RbacService\n  } catch {\n    rbac = null\n  }\n\n  const ok = rbac\n    ? await rbac.userHasAllFeatures(auth.sub, requiredFeatures, {\n        tenantId: auth.tenantId ?? null,\n        organizationId: ctx.selectedOrganizationId ?? auth.orgId ?? null,\n      })\n    : false\n  if (!ok) {\n    throw new CrudHttpError(403, {\n      error: resolvedTranslate('api.errors.forbidden', 'Forbidden'),\n      requiredFeatures,\n    })\n  }\n}\n\nasync function ensureDocumentAddressKindAccess(\n  ctx: CrudCtx,\n  documentKind: DocumentKind,\n  access: DocumentAddressAccess,\n  translate?: Translate,\n): Promise<void> {\n  await ensureDocumentAddressAccess(ctx, [DOCUMENT_ADDRESS_FEATURES[documentKind][access]], translate)\n}\n\nasync function ensureDocumentAddressMutationAccess(\n  ctx: CrudCtx,\n  input: { id: string; documentKind: DocumentKind; tenantId: string; organizationId: string },\n  options: { includeTargetKind: boolean; translate?: Translate },\n): Promise<void> {\n  const existingKind = await resolveExistingAddressKind(ctx, input.id, {\n    tenantId: input.tenantId,\n    organizationId: input.organizationId,\n  })\n  const featureKinds = new Set<DocumentKind>()\n  if (existingKind) featureKinds.add(existingKind)\n  if (!existingKind || options.includeTargetKind) featureKinds.add(input.documentKind)\n\n  await ensureDocumentAddressAccess(\n    ctx,\n    [...featureKinds].map((kind) => DOCUMENT_ADDRESS_FEATURES[kind].manage),\n    options.translate,\n  )\n}\n\nconst crud = makeCrudRoute({\n  metadata: routeMetadata,\n  hooks: {\n    beforeList: async (query, ctx) => {\n      await ensureDocumentAddressReadAccess(query, ctx)\n    },\n  },\n  orm: {\n    entity: SalesDocumentAddress,\n    idField: 'id',\n    orgField: 'organizationId',\n    tenantField: 'tenantId',\n    softDeleteField: 'deletedAt',\n  },\n  indexer: { entityType: E.sales.sales_document_address },\n  list: {\n    schema: listSchema,\n    entityId: E.sales.sales_document_address,\n    fields: [\n      'id',\n      'organization_id',\n      'tenant_id',\n      'document_id',\n      'document_kind',\n      'customer_address_id',\n      'name',\n      'purpose',\n      'company_name',\n      'address_line1',\n      'address_line2',\n      'building_number',\n      'flat_number',\n      'city',\n      'region',\n      'postal_code',\n      'country',\n      'latitude',\n      'longitude',\n      'order_id',\n      'quote_id',\n      'created_at',\n      'updated_at',\n    ],\n    sortFieldMap: {\n      createdAt: 'created_at',\n      updatedAt: 'updated_at',\n    },\n    buildFilters: async (query: any, ctx) => {\n      const documentKind = await resolveDocumentKindForRead(query, ctx)\n      const filters: Record<string, any> = {\n        document_id: { $eq: query.documentId },\n      }\n\n      if (query.documentKind ?? documentKind) filters.document_kind = { $eq: query.documentKind ?? documentKind }\n      return filters\n    },\n  },\n  actions: {\n    create: {\n      commandId: 'sales.document-addresses.create',\n      schema: rawBodySchema,\n      mapInput: async ({ raw, ctx }) => {\n        const { translate } = await resolveTranslations()\n        const input = documentAddressCreateSchema.parse(withScopedPayload(raw ?? {}, ctx, translate))\n        await ensureDocumentAddressKindAccess(ctx, input.documentKind, 'manage', translate)\n        return input\n      },\n      response: ({ result }) => ({ id: result?.id ?? null }),\n      status: 201,\n    },\n    update: {\n      commandId: 'sales.document-addresses.update',\n      schema: rawBodySchema,\n      mapInput: async ({ raw, ctx }) => {\n        const { translate } = await resolveTranslations()\n        const input = documentAddressUpdateSchema.parse(withScopedPayload(raw ?? {}, ctx, translate))\n        await ensureDocumentAddressMutationAccess(ctx, input, { includeTargetKind: true, translate })\n        return input\n      },\n      response: () => ({ ok: true }),\n    },\n    delete: {\n      commandId: 'sales.document-addresses.delete',\n      schema: rawBodySchema,\n      mapInput: async ({ parsed, ctx }) => {\n        const { translate } = await resolveTranslations()\n        const id =\n          parsed?.body?.id ??\n          parsed?.id ??\n          parsed?.query?.id ??\n          (ctx.request ? new URL(ctx.request.url).searchParams.get('id') : null)\n        const documentId =\n          parsed?.body?.documentId ??\n          parsed?.query?.documentId ??\n          (ctx.request ? new URL(ctx.request.url).searchParams.get('documentId') : null)\n        const documentKind =\n          parsed?.body?.documentKind ??\n          parsed?.query?.documentKind ??\n          (ctx.request ? new URL(ctx.request.url).searchParams.get('documentKind') : null)\n        if (!id || !documentId || !documentKind) {\n          throw new CrudHttpError(400, {\n            error: translate('sales.documents.detail.error', 'Document not found or inaccessible.'),\n          })\n        }\n        const input = documentAddressDeleteSchema.parse(withScopedPayload({ id, documentId, documentKind }, ctx, translate))\n        await ensureDocumentAddressMutationAccess(ctx, input, { includeTargetKind: false, translate })\n        return input\n      },\n      response: () => ({ ok: true }),\n    },\n  },\n})\n\nconst { GET, POST, PUT, DELETE } = crud\n\nexport { GET, POST, PUT, DELETE }\n\nconst documentAddressSchema = z.object({\n  id: z.string().uuid(),\n  document_id: z.string().uuid(),\n  document_kind: z.enum(['order', 'quote']),\n  customer_address_id: z.string().uuid().nullable().optional(),\n  name: z.string().nullable().optional(),\n  purpose: z.string().nullable().optional(),\n  company_name: z.string().nullable().optional(),\n  address_line1: z.string(),\n  address_line2: z.string().nullable().optional(),\n  building_number: z.string().nullable().optional(),\n  flat_number: z.string().nullable().optional(),\n  city: z.string().nullable().optional(),\n  region: z.string().nullable().optional(),\n  postal_code: z.string().nullable().optional(),\n  country: z.string().nullable().optional(),\n  latitude: z.number().nullable().optional(),\n  longitude: z.number().nullable().optional(),\n  created_at: z.string(),\n  updated_at: z.string(),\n})\n\nexport const openApi = createSalesCrudOpenApi({\n  resourceName: 'Document address',\n  querySchema: listSchema,\n  listResponseSchema: createPagedListResponseSchema(documentAddressSchema),\n  create: {\n    schema: documentAddressCreateSchema,\n    responseSchema: z.object({ id: z.string().uuid().nullable() }),\n    description: 'Creates a sales document address linked to an order or quote.',\n  },\n  update: {\n    schema: documentAddressUpdateSchema,\n    responseSchema: defaultOkResponseSchema,\n    description: 'Updates a sales document address.',\n  },\n  del: {\n    schema: documentAddressDeleteSchema.pick({ id: true, documentId: true, documentKind: true }),\n    responseSchema: defaultOkResponseSchema,\n    description: 'Deletes a sales document address.',\n  },\n})\n"],
+  "mappings": "AAAA,SAAS,SAAS;AAClB,SAAS,qBAAmC;AAC5C,SAAS,qBAAqB;AAC9B,SAAS,2BAA2B;AAGpC,SAAS,6BAA6B;AACtC,SAAS,wBAAwB,+BAA+B,+BAA+B;AAC/F,SAAS,yBAAyB;AAClC,SAAS,sBAAsB,YAAY,kBAAkB;AAC7D;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,SAAS;AAElB,MAAM,gBAAgB,EAAE,OAAO,CAAC,CAAC,EAAE,YAAY;AAE/C,MAAM,aAAa,EAChB,OAAO;AAAA,EACN,MAAM,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,QAAQ,CAAC;AAAA,EACxC,UAAU,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,QAAQ,EAAE;AAAA,EACtD,YAAY,EAAE,OAAO,EAAE,KAAK;AAAA,EAC5B,cAAc,EAAE,KAAK,CAAC,SAAS,OAAO,CAAC,EAAE,SAAS;AAAA,EAClD,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,SAAS,EAAE,KAAK,CAAC,OAAO,MAAM,CAAC,EAAE,SAAS;AAC5C,CAAC,EACA,YAAY;AAEf,MAAM,gBAAgB;AAAA,EACpB,KAAK,EAAE,aAAa,KAAK;AAAA,EACzB,MAAM,EAAE,aAAa,KAAK;AAAA,EAC1B,KAAK,EAAE,aAAa,KAAK;AAAA,EACzB,QAAQ,EAAE,aAAa,KAAK;AAC9B;AAEO,MAAM,WAAW;AAMxB,MAAM,4BAAyF;AAAA,EAC7F,OAAO,EAAE,MAAM,qBAAqB,QAAQ,sBAAsB;AAAA,EAClE,OAAO,EAAE,MAAM,qBAAqB,QAAQ,sBAAsB;AACpE;AAEA,SAAS,eAAe,OAAqC;AAC3D,SAAO,UAAU,WAAW,UAAU,UAAU,QAAQ;AAC1D;AAEA,eAAe,2BAA2B,OAA6D,KAAc;AACnH,MAAI,MAAM,aAAc,QAAO,MAAM;AAErC,QAAM,WAAW,IAAI,MAAM,YAAY;AACvC,QAAM,iBACJ,IAAI,0BACJ,IAAI,MAAM,UACT,MAAM,QAAQ,IAAI,eAAe,KAAK,IAAI,gBAAgB,WAAW,IAAI,IAAI,gBAAgB,CAAC,IAAI;AACrG,MAAI,CAAC,MAAM,cAAc,CAAC,YAAY,CAAC,eAAgB,QAAO;AAE9D,QAAM,KAAK,IAAI,UAAU,QAAQ,IAAI;AACrC,QAAM,QAAQ,EAAE,UAAU,eAAe;AACzC,QAAM,QAAQ,MAAM,sBAAsB,IAAI,YAAY,EAAE,IAAI,MAAM,YAAY,UAAU,eAAe,GAAG,CAAC,GAAG,KAAK;AACvH,MAAI,MAAO,QAAO;AAClB,QAAM,QAAQ,MAAM,sBAAsB,IAAI,YAAY,EAAE,IAAI,MAAM,YAAY,UAAU,eAAe,GAAG,CAAC,GAAG,KAAK;AACvH,MAAI,MAAO,QAAO;AAClB,SAAO;AACT;AAEA,eAAe,gCAAgC,OAA6D,KAAc;AACxH,QAAM,eAAe,MAAM,2BAA2B,OAAO,GAAG;AAChE,QAAM,mBAAmB,eACrB,CAAC,0BAA0B,YAAY,EAAE,IAAI,IAC7C,CAAC,0BAA0B,MAAM,MAAM,0BAA0B,MAAM,IAAI;AAC/E,QAAM,4BAA4B,KAAK,gBAAgB;AACvD,SAAO;AACT;AAEA,eAAe,2BACb,KACA,IACA,OAC8B;AAC9B,QAAM,KAAK,IAAI,UAAU,QAAQ,IAAI;AACrC,QAAM,UAAU,MAAM;AAAA,IACpB;AAAA,IACA;AAAA,IACA,EAAE,IAAI,UAAU,MAAM,UAAU,gBAAgB,MAAM,eAAe;AAAA,IACrE,CAAC;AAAA,IACD;AAAA,EACF;AACA,SAAO,eAAe,SAAS,YAAY;AAC7C;AAEA,eAAe,4BACb,KACA,kBACA,WACe;AACf,QAAM,oBAAoB,cAAc,MAAM,oBAAoB,GAAG;AACrE,QAAM,OAAO,IAAI;AACjB,MAAI,CAAC,MAAM,KAAK;AACd,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,kBAAkB,2BAA2B,cAAc,EAAE,CAAC;AAAA,EACtG;AAEA,MAAI,OAA2B;AAC/B,MAAI;AACF,WAAO,IAAI,UAAU,QAAQ,aAAa;AAAA,EAC5C,QAAQ;AACN,WAAO;AAAA,EACT;AAEA,QAAM,KAAK,OACP,MAAM,KAAK,mBAAmB,KAAK,KAAK,kBAAkB;AAAA,IACxD,UAAU,KAAK,YAAY;AAAA,IAC3B,gBAAgB,IAAI,0BAA0B,KAAK,SAAS;AAAA,EAC9D,CAAC,IACD;AACJ,MAAI,CAAC,IAAI;AACP,UAAM,IAAI,cAAc,KAAK;AAAA,MAC3B,OAAO,kBAAkB,wBAAwB,WAAW;AAAA,MAC5D;AAAA,IACF,CAAC;AAAA,EACH;AACF;AAEA,eAAe,gCACb,KACA,cACA,QACA,WACe;AACf,QAAM,4BAA4B,KAAK,CAAC,0BAA0B,YAAY,EAAE,MAAM,CAAC,GAAG,SAAS;AACrG;AAEA,eAAe,oCACb,KACA,OACA,SACe;AACf,QAAM,eAAe,MAAM,2BAA2B,KAAK,MAAM,IAAI;AAAA,IACnE,UAAU,MAAM;AAAA,IAChB,gBAAgB,MAAM;AAAA,EACxB,CAAC;AACD,QAAM,eAAe,oBAAI,IAAkB;AAC3C,MAAI,aAAc,cAAa,IAAI,YAAY;AAC/C,MAAI,CAAC,gBAAgB,QAAQ,kBAAmB,cAAa,IAAI,MAAM,YAAY;AAEnF,QAAM;AAAA,IACJ;AAAA,IACA,CAAC,GAAG,YAAY,EAAE,IAAI,CAAC,SAAS,0BAA0B,IAAI,EAAE,MAAM;AAAA,IACtE,QAAQ;AAAA,EACV;AACF;AAEA,MAAM,OAAO,cAAc;AAAA,EACzB,UAAU;AAAA,EACV,OAAO;AAAA,IACL,YAAY,OAAO,OAAO,QAAQ;AAChC,YAAM,gCAAgC,OAAO,GAAG;AAAA,IAClD;AAAA,EACF;AAAA,EACA,KAAK;AAAA,IACH,QAAQ;AAAA,IACR,SAAS;AAAA,IACT,UAAU;AAAA,IACV,aAAa;AAAA,IACb,iBAAiB;AAAA,EACnB;AAAA,EACA,SAAS,EAAE,YAAY,EAAE,MAAM,uBAAuB;AAAA,EACtD,MAAM;AAAA,IACJ,QAAQ;AAAA,IACR,UAAU,EAAE,MAAM;AAAA,IAClB,QAAQ;AAAA,MACN;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,IACA,cAAc;AAAA,MACZ,WAAW;AAAA,MACX,WAAW;AAAA,IACb;AAAA,IACA,cAAc,OAAO,OAAY,QAAQ;AACvC,YAAM,eAAe,MAAM,2BAA2B,OAAO,GAAG;AAChE,YAAM,UAA+B;AAAA,QACnC,aAAa,EAAE,KAAK,MAAM,WAAW;AAAA,MACvC;AAEA,UAAI,MAAM,gBAAgB,aAAc,SAAQ,gBAAgB,EAAE,KAAK,MAAM,gBAAgB,aAAa;AAC1G,aAAO;AAAA,IACT;AAAA,EACF;AAAA,EACA,SAAS;AAAA,IACP,QAAQ;AAAA,MACN,WAAW;AAAA,MACX,QAAQ;AAAA,MACR,UAAU,OAAO,EAAE,KAAK,IAAI,MAAM;AAChC,cAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,cAAM,QAAQ,4BAA4B,MAAM,kBAAkB,OAAO,CAAC,GAAG,KAAK,SAAS,CAAC;AAC5F,cAAM,gCAAgC,KAAK,MAAM,cAAc,UAAU,SAAS;AAClF,eAAO;AAAA,MACT;AAAA,MACA,UAAU,CAAC,EAAE,OAAO,OAAO,EAAE,IAAI,QAAQ,MAAM,KAAK;AAAA,MACpD,QAAQ;AAAA,IACV;AAAA,IACA,QAAQ;AAAA,MACN,WAAW;AAAA,MACX,QAAQ;AAAA,MACR,UAAU,OAAO,EAAE,KAAK,IAAI,MAAM;AAChC,cAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,cAAM,QAAQ,4BAA4B,MAAM,kBAAkB,OAAO,CAAC,GAAG,KAAK,SAAS,CAAC;AAC5F,cAAM,oCAAoC,KAAK,OAAO,EAAE,mBAAmB,MAAM,UAAU,CAAC;AAC5F,eAAO;AAAA,MACT;AAAA,MACA,UAAU,OAAO,EAAE,IAAI,KAAK;AAAA,IAC9B;AAAA,IACA,QAAQ;AAAA,MACN,WAAW;AAAA,MACX,QAAQ;AAAA,MACR,UAAU,OAAO,EAAE,QAAQ,IAAI,MAAM;AACnC,cAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,cAAM,KACJ,QAAQ,MAAM,MACd,QAAQ,MACR,QAAQ,OAAO,OACd,IAAI,UAAU,IAAI,IAAI,IAAI,QAAQ,GAAG,EAAE,aAAa,IAAI,IAAI,IAAI;AACnE,cAAM,aACJ,QAAQ,MAAM,cACd,QAAQ,OAAO,eACd,IAAI,UAAU,IAAI,IAAI,IAAI,QAAQ,GAAG,EAAE,aAAa,IAAI,YAAY,IAAI;AAC3E,cAAM,eACJ,QAAQ,MAAM,gBACd,QAAQ,OAAO,iBACd,IAAI,UAAU,IAAI,IAAI,IAAI,QAAQ,GAAG,EAAE,aAAa,IAAI,cAAc,IAAI;AAC7E,YAAI,CAAC,MAAM,CAAC,cAAc,CAAC,cAAc;AACvC,gBAAM,IAAI,cAAc,KAAK;AAAA,YAC3B,OAAO,UAAU,gCAAgC,qCAAqC;AAAA,UACxF,CAAC;AAAA,QACH;AACA,cAAM,QAAQ,4BAA4B,MAAM,kBAAkB,EAAE,IAAI,YAAY,aAAa,GAAG,KAAK,SAAS,CAAC;AACnH,cAAM,oCAAoC,KAAK,OAAO,EAAE,mBAAmB,OAAO,UAAU,CAAC;AAC7F,eAAO;AAAA,MACT;AAAA,MACA,UAAU,OAAO,EAAE,IAAI,KAAK;AAAA,IAC9B;AAAA,EACF;AACF,CAAC;AAED,MAAM,EAAE,KAAK,MAAM,KAAK,OAAO,IAAI;AAInC,MAAM,wBAAwB,EAAE,OAAO;AAAA,EACrC,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,aAAa,EAAE,OAAO,EAAE,KAAK;AAAA,EAC7B,eAAe,EAAE,KAAK,CAAC,SAAS,OAAO,CAAC;AAAA,EACxC,qBAAqB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS;AAAA,EAC3D,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACrC,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACxC,cAAc,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC7C,eAAe,EAAE,OAAO;AAAA,EACxB,eAAe,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC9C,iBAAiB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAChD,aAAa,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC5C,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACrC,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACvC,aAAa,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC5C,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACxC,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACzC,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC1C,YAAY,EAAE,OAAO;AAAA,EACrB,YAAY,EAAE,OAAO;AACvB,CAAC;AAEM,MAAM,UAAU,uBAAuB;AAAA,EAC5C,cAAc;AAAA,EACd,aAAa;AAAA,EACb,oBAAoB,8BAA8B,qBAAqB;AAAA,EACvE,QAAQ;AAAA,IACN,QAAQ;AAAA,IACR,gBAAgB,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;AAAA,IAC7D,aAAa;AAAA,EACf;AAAA,EACA,QAAQ;AAAA,IACN,QAAQ;AAAA,IACR,gBAAgB;AAAA,IAChB,aAAa;AAAA,EACf;AAAA,EACA,KAAK;AAAA,IACH,QAAQ,4BAA4B,KAAK,EAAE,IAAI,MAAM,YAAY,MAAM,cAAc,KAAK,CAAC;AAAA,IAC3F,gBAAgB;AAAA,IAChB,aAAa;AAAA,EACf;AACF,CAAC;",
   "names": []
 }

package/dist/modules/sales/api/document-history/route.js

@@ -9,6 +9,8 @@ import { NextResponse } from "next/server";
 import { buildHistoryEntries } from "../../lib/historyHelpers.js";
 import { SalesNote } from "../../data/entities.js";
 import { findWithDecryption } from "@open-mercato/shared/lib/encryption/find";
+import { createLogger } from "@open-mercato/shared/lib/logger";
+const logger = createLogger("sales");
 const metadata = {
   GET: { requireAuth: true }
 };
@@ -104,7 +106,7 @@ async function GET(req) {
     if (isCrudHttpError(err)) {
       return NextResponse.json(err.body, { status: err.status });
     }
-    console.error("sales.document-history.get failed", err);
+    logger.error("sales.document-history.get failed", { err });
     const { translate } = await resolveTranslations();
     return NextResponse.json(
       { error: translate("sales.documents.history.error", "Failed to load history.") },

package/dist/modules/sales/api/document-history/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../src/modules/sales/api/document-history/route.ts"],
-  "sourcesContent": ["import { z } from 'zod'\nimport { ActionLogService } from '@open-mercato/core/modules/audit_logs/services/actionLogService'\nimport { loadAuditLogDisplayMaps } from '@open-mercato/core/modules/audit_logs/api/audit-logs/display'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { CrudHttpError, isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { NextResponse } from 'next/server'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport type { ActionLog } from '@open-mercato/core/modules/audit_logs/data/entities'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { buildHistoryEntries } from '../../lib/historyHelpers'\nimport { SalesNote } from '../../data/entities'\nimport { findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\n\n// Spec: SPEC-006-2026-01-23-order-status-history\n\nexport const metadata = {\n  GET: { requireAuth: true },\n}\n\nconst querySchema = z.object({\n  kind: z.enum(['order', 'quote']),\n  id: z.string().uuid(),\n  limit: z.coerce.number().min(1).max(100).default(50),\n  before: z.string().optional(),\n  after: z.string().optional(),\n  types: z.string().optional(), // comma-separated: status,action,comment\n})\n\nexport type DocumentHistoryEntryKind = 'status' | 'action' | 'comment'\n\nconst HISTORY_TYPES: ReadonlySet<DocumentHistoryEntryKind> = new Set(['status', 'action', 'comment'])\n\nexport function parseDocumentHistoryTypes(input: string | null | undefined): Set<DocumentHistoryEntryKind> {\n  const raw = typeof input === 'string' ? input.trim() : ''\n  if (!raw) return new Set()\n  const values = raw\n    .split(',')\n    .map((part) => part.trim().toLowerCase())\n    .filter((value) => value.length > 0)\n  const result = new Set<DocumentHistoryEntryKind>()\n  values.forEach((value) => {\n    if (HISTORY_TYPES.has(value as DocumentHistoryEntryKind)) {\n      result.add(value as DocumentHistoryEntryKind)\n    }\n  })\n  return result\n}\n\nexport async function GET(req: Request) {\n  try {\n    const url = new URL(req.url)\n    const query = querySchema.parse(Object.fromEntries(url.searchParams))\n\n    const container = await createRequestContainer()\n    const auth = await getAuthFromRequest(req)\n    const { translate } = await resolveTranslations()\n\n    if (!auth || !auth.tenantId) {\n      throw new CrudHttpError(401, { error: translate('sales.documents.errors.unauthorized', 'Unauthorized') })\n    }\n\n    const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n    const organizationId = scope?.selectedId ?? auth.orgId ?? null\n    if (!organizationId) {\n      throw new CrudHttpError(400, {\n        error: translate('sales.documents.errors.organization_required', 'Organization context is required'),\n      })\n    }\n\n    const resourceKind = query.kind === 'order' ? 'sales.order' : 'sales.quote'\n\n    const actionLogService = container.resolve('actionLogService') as ActionLogService\n    const em = (container.resolve('em') as EntityManager).fork()\n\n    const [actionLogList, notes] = await Promise.all([\n      actionLogService.list({\n        tenantId: auth.tenantId,\n        organizationId,\n        resourceKind,\n        resourceId: query.id,\n        includeRelated: true,\n        limit: query.limit,\n        before: query.before ? new Date(query.before) : undefined,\n        after: query.after ? new Date(query.after) : undefined,\n      }),\n      findWithDecryption(\n        em,\n        SalesNote,\n        {\n          contextType: query.kind,\n          contextId: query.id,\n          tenantId: auth.tenantId,\n          organizationId,\n          deletedAt: null,\n        },\n        { orderBy: { createdAt: 'DESC' } },\n        { tenantId: auth.tenantId, organizationId },\n      ),\n    ])\n    const logs = actionLogList.items as ActionLog[]\n\n    const allUserIds = [\n      ...logs.map((l) => l.actorUserId).filter((v): v is string => !!v),\n      ...notes.map((n) => n.authorUserId).filter((v): v is string => !!v),\n    ]\n\n    const displayMaps = await loadAuditLogDisplayMaps(em, {\n      userIds: allUserIds,\n      tenantIds: [],\n      organizationIds: [],\n    })\n\n    let items = buildHistoryEntries({ actionLogs: logs, notes, kind: query.kind, displayUsers: displayMaps.users })\n    const typesFilter = parseDocumentHistoryTypes(query.types)\n    if (typesFilter.size > 0) {\n      items = items.filter((entry) => typesFilter.has(entry.kind as DocumentHistoryEntryKind))\n    }\n\n    let nextCursor: string | undefined = undefined\n    if (logs.length === query.limit && items.length > 0) {\n      const last = items[items.length - 1]\n      nextCursor = Buffer.from(`${last.occurredAt}|${last.id}`).toString('base64')\n    }\n\n    return NextResponse.json({ items, nextCursor })\n  } catch (err) {\n    if (isCrudHttpError(err)) {\n      return NextResponse.json(err.body, { status: err.status })\n    }\n    console.error('sales.document-history.get failed', err)\n    const { translate } = await resolveTranslations()\n    return NextResponse.json(\n      { error: translate('sales.documents.history.error', 'Failed to load history.') },\n      { status: 400 }\n    )\n  }\n}\n\nconst historyActorSchema = z.object({\n  id: z.string().uuid().nullable(),\n  label: z.string(),\n})\n\nconst historyEntrySchema = z.object({\n  id: z.string(),\n  occurredAt: z.string().datetime(),\n  kind: z.enum(['status', 'action', 'comment']),\n  action: z.string(),\n  actor: historyActorSchema,\n  source: z.enum(['action_log', 'note']),\n  metadata: z.object({\n    statusFrom: z.string().nullable().optional(),\n    statusTo: z.string().nullable().optional(),\n    documentKind: z.enum(['order', 'quote']).optional(),\n    commandId: z.string().optional(),\n  }).optional(),\n})\n\nconst documentHistoryResponseSchema = z.object({\n  items: z.array(historyEntrySchema),\n  nextCursor: z.string().optional(),\n})\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Sales',\n  summary: 'Get document change history',\n  methods: {\n    GET: {\n      summary: 'List history entries for an order or quote',\n      query: querySchema,\n      responses: [\n        { status: 200, description: 'History entries', schema: documentHistoryResponseSchema },\n        { status: 400, description: 'Invalid query', schema: z.object({ error: z.string() }) },\n        { status: 401, description: 'Unauthorized', schema: z.object({ error: z.string() }) },\n        { status: 404, description: 'Document not found', schema: z.object({ error: z.string() }) },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,SAAS;AAElB,SAAS,+BAA+B;AACxC,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AACnD,SAAS,2BAA2B;AACpC,SAAS,eAAe,uBAAuB;AAC/C,SAAS,oBAAoB;AAI7B,SAAS,2BAA2B;AACpC,SAAS,iBAAiB;AAC1B,SAAS,0BAA0B;AAI5B,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,KAAK;AAC3B;AAEA,MAAM,cAAc,EAAE,OAAO;AAAA,EAC3B,MAAM,EAAE,KAAK,CAAC,SAAS,OAAO,CAAC;AAAA,EAC/B,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,OAAO,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,QAAQ,EAAE;AAAA,EACnD,QAAQ,EAAE,OAAO,EAAE,SAAS;AAAA,EAC5B,OAAO,EAAE,OAAO,EAAE,SAAS;AAAA,EAC3B,OAAO,EAAE,OAAO,EAAE,SAAS;AAAA;AAC7B,CAAC;AAID,MAAM,gBAAuD,oBAAI,IAAI,CAAC,UAAU,UAAU,SAAS,CAAC;AAE7F,SAAS,0BAA0B,OAAiE;AACzG,QAAM,MAAM,OAAO,UAAU,WAAW,MAAM,KAAK,IAAI;AACvD,MAAI,CAAC,IAAK,QAAO,oBAAI,IAAI;AACzB,QAAM,SAAS,IACZ,MAAM,GAAG,EACT,IAAI,CAAC,SAAS,KAAK,KAAK,EAAE,YAAY,CAAC,EACvC,OAAO,CAAC,UAAU,MAAM,SAAS,CAAC;AACrC,QAAM,SAAS,oBAAI,IAA8B;AACjD,SAAO,QAAQ,CAAC,UAAU;AACxB,QAAI,cAAc,IAAI,KAAiC,GAAG;AACxD,aAAO,IAAI,KAAiC;AAAA,IAC9C;AAAA,EACF,CAAC;AACD,SAAO;AACT;AAEA,eAAsB,IAAI,KAAc;AACtC,MAAI;AACF,UAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,UAAM,QAAQ,YAAY,MAAM,OAAO,YAAY,IAAI,YAAY,CAAC;AAEpE,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAEhD,QAAI,CAAC,QAAQ,CAAC,KAAK,UAAU;AAC3B,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,uCAAuC,cAAc,EAAE,CAAC;AAAA,IAC1G;AAEA,UAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AACxF,UAAM,iBAAiB,OAAO,cAAc,KAAK,SAAS;AAC1D,QAAI,CAAC,gBAAgB;AACnB,YAAM,IAAI,cAAc,KAAK;AAAA,QAC3B,OAAO,UAAU,gDAAgD,kCAAkC;AAAA,MACrG,CAAC;AAAA,IACH;AAEA,UAAM,eAAe,MAAM,SAAS,UAAU,gBAAgB;AAE9D,UAAM,mBAAmB,UAAU,QAAQ,kBAAkB;AAC7D,UAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAE3D,UAAM,CAAC,eAAe,KAAK,IAAI,MAAM,QAAQ,IAAI;AAAA,MAC/C,iBAAiB,KAAK;AAAA,QACpB,UAAU,KAAK;AAAA,QACf;AAAA,QACA;AAAA,QACA,YAAY,MAAM;AAAA,QAClB,gBAAgB;AAAA,QAChB,OAAO,MAAM;AAAA,QACb,QAAQ,MAAM,SAAS,IAAI,KAAK,MAAM,MAAM,IAAI;AAAA,QAChD,OAAO,MAAM,QAAQ,IAAI,KAAK,MAAM,KAAK,IAAI;AAAA,MAC/C,CAAC;AAAA,MACD;AAAA,QACE;AAAA,QACA;AAAA,QACA;AAAA,UACE,aAAa,MAAM;AAAA,UACnB,WAAW,MAAM;AAAA,UACjB,UAAU,KAAK;AAAA,UACf;AAAA,UACA,WAAW;AAAA,QACb;AAAA,QACA,EAAE,SAAS,EAAE,WAAW,OAAO,EAAE;AAAA,QACjC,EAAE,UAAU,KAAK,UAAU,eAAe;AAAA,MAC5C;AAAA,IACF,CAAC;AACD,UAAM,OAAO,cAAc;AAE3B,UAAM,aAAa;AAAA,MACjB,GAAG,KAAK,IAAI,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,CAAC,MAAmB,CAAC,CAAC,CAAC;AAAA,MAChE,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,YAAY,EAAE,OAAO,CAAC,MAAmB,CAAC,CAAC,CAAC;AAAA,IACpE;AAEA,UAAM,cAAc,MAAM,wBAAwB,IAAI;AAAA,MACpD,SAAS;AAAA,MACT,WAAW,CAAC;AAAA,MACZ,iBAAiB,CAAC;AAAA,IACpB,CAAC;AAED,QAAI,QAAQ,oBAAoB,EAAE,YAAY,MAAM,OAAO,MAAM,MAAM,MAAM,cAAc,YAAY,MAAM,CAAC;AAC9G,UAAM,cAAc,0BAA0B,MAAM,KAAK;AACzD,QAAI,YAAY,OAAO,GAAG;AACxB,cAAQ,MAAM,OAAO,CAAC,UAAU,YAAY,IAAI,MAAM,IAAgC,CAAC;AAAA,IACzF;AAEA,QAAI,aAAiC;AACrC,QAAI,KAAK,WAAW,MAAM,SAAS,MAAM,SAAS,GAAG;AACnD,YAAM,OAAO,MAAM,MAAM,SAAS,CAAC;AACnC,mBAAa,OAAO,KAAK,GAAG,KAAK,UAAU,IAAI,KAAK,EAAE,EAAE,EAAE,SAAS,QAAQ;AAAA,IAC7E;AAEA,WAAO,aAAa,KAAK,EAAE,OAAO,WAAW,CAAC;AAAA,EAChD,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,GAAG;AACxB,aAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,IAC3D;AACA,YAAQ,MAAM,qCAAqC,GAAG;AACtD,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,UAAU,iCAAiC,yBAAyB,EAAE;AAAA,MAC/E,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAEA,MAAM,qBAAqB,EAAE,OAAO;AAAA,EAClC,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC/B,OAAO,EAAE,OAAO;AAClB,CAAC;AAED,MAAM,qBAAqB,EAAE,OAAO;AAAA,EAClC,IAAI,EAAE,OAAO;AAAA,EACb,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,EAChC,MAAM,EAAE,KAAK,CAAC,UAAU,UAAU,SAAS,CAAC;AAAA,EAC5C,QAAQ,EAAE,OAAO;AAAA,EACjB,OAAO;AAAA,EACP,QAAQ,EAAE,KAAK,CAAC,cAAc,MAAM,CAAC;AAAA,EACrC,UAAU,EAAE,OAAO;AAAA,IACjB,YAAY,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,IAC3C,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,IACzC,cAAc,EAAE,KAAK,CAAC,SAAS,OAAO,CAAC,EAAE,SAAS;AAAA,IAClD,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EACjC,CAAC,EAAE,SAAS;AACd,CAAC;AAED,MAAM,gCAAgC,EAAE,OAAO;AAAA,EAC7C,OAAO,EAAE,MAAM,kBAAkB;AAAA,EACjC,YAAY,EAAE,OAAO,EAAE,SAAS;AAClC,CAAC;AAEM,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,OAAO;AAAA,MACP,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,mBAAmB,QAAQ,8BAA8B;AAAA,QACrF,EAAE,QAAQ,KAAK,aAAa,iBAAiB,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,QACrF,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,QACpF,EAAE,QAAQ,KAAK,aAAa,sBAAsB,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,MAC5F;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { z } from 'zod'\nimport { ActionLogService } from '@open-mercato/core/modules/audit_logs/services/actionLogService'\nimport { loadAuditLogDisplayMaps } from '@open-mercato/core/modules/audit_logs/api/audit-logs/display'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { CrudHttpError, isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { NextResponse } from 'next/server'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport type { ActionLog } from '@open-mercato/core/modules/audit_logs/data/entities'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { buildHistoryEntries } from '../../lib/historyHelpers'\nimport { SalesNote } from '../../data/entities'\nimport { findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('sales')\n\n// Spec: SPEC-006-2026-01-23-order-status-history\n\nexport const metadata = {\n  GET: { requireAuth: true },\n}\n\nconst querySchema = z.object({\n  kind: z.enum(['order', 'quote']),\n  id: z.string().uuid(),\n  limit: z.coerce.number().min(1).max(100).default(50),\n  before: z.string().optional(),\n  after: z.string().optional(),\n  types: z.string().optional(), // comma-separated: status,action,comment\n})\n\nexport type DocumentHistoryEntryKind = 'status' | 'action' | 'comment'\n\nconst HISTORY_TYPES: ReadonlySet<DocumentHistoryEntryKind> = new Set(['status', 'action', 'comment'])\n\nexport function parseDocumentHistoryTypes(input: string | null | undefined): Set<DocumentHistoryEntryKind> {\n  const raw = typeof input === 'string' ? input.trim() : ''\n  if (!raw) return new Set()\n  const values = raw\n    .split(',')\n    .map((part) => part.trim().toLowerCase())\n    .filter((value) => value.length > 0)\n  const result = new Set<DocumentHistoryEntryKind>()\n  values.forEach((value) => {\n    if (HISTORY_TYPES.has(value as DocumentHistoryEntryKind)) {\n      result.add(value as DocumentHistoryEntryKind)\n    }\n  })\n  return result\n}\n\nexport async function GET(req: Request) {\n  try {\n    const url = new URL(req.url)\n    const query = querySchema.parse(Object.fromEntries(url.searchParams))\n\n    const container = await createRequestContainer()\n    const auth = await getAuthFromRequest(req)\n    const { translate } = await resolveTranslations()\n\n    if (!auth || !auth.tenantId) {\n      throw new CrudHttpError(401, { error: translate('sales.documents.errors.unauthorized', 'Unauthorized') })\n    }\n\n    const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n    const organizationId = scope?.selectedId ?? auth.orgId ?? null\n    if (!organizationId) {\n      throw new CrudHttpError(400, {\n        error: translate('sales.documents.errors.organization_required', 'Organization context is required'),\n      })\n    }\n\n    const resourceKind = query.kind === 'order' ? 'sales.order' : 'sales.quote'\n\n    const actionLogService = container.resolve('actionLogService') as ActionLogService\n    const em = (container.resolve('em') as EntityManager).fork()\n\n    const [actionLogList, notes] = await Promise.all([\n      actionLogService.list({\n        tenantId: auth.tenantId,\n        organizationId,\n        resourceKind,\n        resourceId: query.id,\n        includeRelated: true,\n        limit: query.limit,\n        before: query.before ? new Date(query.before) : undefined,\n        after: query.after ? new Date(query.after) : undefined,\n      }),\n      findWithDecryption(\n        em,\n        SalesNote,\n        {\n          contextType: query.kind,\n          contextId: query.id,\n          tenantId: auth.tenantId,\n          organizationId,\n          deletedAt: null,\n        },\n        { orderBy: { createdAt: 'DESC' } },\n        { tenantId: auth.tenantId, organizationId },\n      ),\n    ])\n    const logs = actionLogList.items as ActionLog[]\n\n    const allUserIds = [\n      ...logs.map((l) => l.actorUserId).filter((v): v is string => !!v),\n      ...notes.map((n) => n.authorUserId).filter((v): v is string => !!v),\n    ]\n\n    const displayMaps = await loadAuditLogDisplayMaps(em, {\n      userIds: allUserIds,\n      tenantIds: [],\n      organizationIds: [],\n    })\n\n    let items = buildHistoryEntries({ actionLogs: logs, notes, kind: query.kind, displayUsers: displayMaps.users })\n    const typesFilter = parseDocumentHistoryTypes(query.types)\n    if (typesFilter.size > 0) {\n      items = items.filter((entry) => typesFilter.has(entry.kind as DocumentHistoryEntryKind))\n    }\n\n    let nextCursor: string | undefined = undefined\n    if (logs.length === query.limit && items.length > 0) {\n      const last = items[items.length - 1]\n      nextCursor = Buffer.from(`${last.occurredAt}|${last.id}`).toString('base64')\n    }\n\n    return NextResponse.json({ items, nextCursor })\n  } catch (err) {\n    if (isCrudHttpError(err)) {\n      return NextResponse.json(err.body, { status: err.status })\n    }\n    logger.error('sales.document-history.get failed', { err })\n    const { translate } = await resolveTranslations()\n    return NextResponse.json(\n      { error: translate('sales.documents.history.error', 'Failed to load history.') },\n      { status: 400 }\n    )\n  }\n}\n\nconst historyActorSchema = z.object({\n  id: z.string().uuid().nullable(),\n  label: z.string(),\n})\n\nconst historyEntrySchema = z.object({\n  id: z.string(),\n  occurredAt: z.string().datetime(),\n  kind: z.enum(['status', 'action', 'comment']),\n  action: z.string(),\n  actor: historyActorSchema,\n  source: z.enum(['action_log', 'note']),\n  metadata: z.object({\n    statusFrom: z.string().nullable().optional(),\n    statusTo: z.string().nullable().optional(),\n    documentKind: z.enum(['order', 'quote']).optional(),\n    commandId: z.string().optional(),\n  }).optional(),\n})\n\nconst documentHistoryResponseSchema = z.object({\n  items: z.array(historyEntrySchema),\n  nextCursor: z.string().optional(),\n})\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Sales',\n  summary: 'Get document change history',\n  methods: {\n    GET: {\n      summary: 'List history entries for an order or quote',\n      query: querySchema,\n      responses: [\n        { status: 200, description: 'History entries', schema: documentHistoryResponseSchema },\n        { status: 400, description: 'Invalid query', schema: z.object({ error: z.string() }) },\n        { status: 401, description: 'Unauthorized', schema: z.object({ error: z.string() }) },\n        { status: 404, description: 'Document not found', schema: z.object({ error: z.string() }) },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,SAAS;AAElB,SAAS,+BAA+B;AACxC,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AACnD,SAAS,2BAA2B;AACpC,SAAS,eAAe,uBAAuB;AAC/C,SAAS,oBAAoB;AAI7B,SAAS,2BAA2B;AACpC,SAAS,iBAAiB;AAC1B,SAAS,0BAA0B;AACnC,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,OAAO;AAI5B,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,KAAK;AAC3B;AAEA,MAAM,cAAc,EAAE,OAAO;AAAA,EAC3B,MAAM,EAAE,KAAK,CAAC,SAAS,OAAO,CAAC;AAAA,EAC/B,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,OAAO,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,QAAQ,EAAE;AAAA,EACnD,QAAQ,EAAE,OAAO,EAAE,SAAS;AAAA,EAC5B,OAAO,EAAE,OAAO,EAAE,SAAS;AAAA,EAC3B,OAAO,EAAE,OAAO,EAAE,SAAS;AAAA;AAC7B,CAAC;AAID,MAAM,gBAAuD,oBAAI,IAAI,CAAC,UAAU,UAAU,SAAS,CAAC;AAE7F,SAAS,0BAA0B,OAAiE;AACzG,QAAM,MAAM,OAAO,UAAU,WAAW,MAAM,KAAK,IAAI;AACvD,MAAI,CAAC,IAAK,QAAO,oBAAI,IAAI;AACzB,QAAM,SAAS,IACZ,MAAM,GAAG,EACT,IAAI,CAAC,SAAS,KAAK,KAAK,EAAE,YAAY,CAAC,EACvC,OAAO,CAAC,UAAU,MAAM,SAAS,CAAC;AACrC,QAAM,SAAS,oBAAI,IAA8B;AACjD,SAAO,QAAQ,CAAC,UAAU;AACxB,QAAI,cAAc,IAAI,KAAiC,GAAG;AACxD,aAAO,IAAI,KAAiC;AAAA,IAC9C;AAAA,EACF,CAAC;AACD,SAAO;AACT;AAEA,eAAsB,IAAI,KAAc;AACtC,MAAI;AACF,UAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,UAAM,QAAQ,YAAY,MAAM,OAAO,YAAY,IAAI,YAAY,CAAC;AAEpE,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAEhD,QAAI,CAAC,QAAQ,CAAC,KAAK,UAAU;AAC3B,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,uCAAuC,cAAc,EAAE,CAAC;AAAA,IAC1G;AAEA,UAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AACxF,UAAM,iBAAiB,OAAO,cAAc,KAAK,SAAS;AAC1D,QAAI,CAAC,gBAAgB;AACnB,YAAM,IAAI,cAAc,KAAK;AAAA,QAC3B,OAAO,UAAU,gDAAgD,kCAAkC;AAAA,MACrG,CAAC;AAAA,IACH;AAEA,UAAM,eAAe,MAAM,SAAS,UAAU,gBAAgB;AAE9D,UAAM,mBAAmB,UAAU,QAAQ,kBAAkB;AAC7D,UAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAE3D,UAAM,CAAC,eAAe,KAAK,IAAI,MAAM,QAAQ,IAAI;AAAA,MAC/C,iBAAiB,KAAK;AAAA,QACpB,UAAU,KAAK;AAAA,QACf;AAAA,QACA;AAAA,QACA,YAAY,MAAM;AAAA,QAClB,gBAAgB;AAAA,QAChB,OAAO,MAAM;AAAA,QACb,QAAQ,MAAM,SAAS,IAAI,KAAK,MAAM,MAAM,IAAI;AAAA,QAChD,OAAO,MAAM,QAAQ,IAAI,KAAK,MAAM,KAAK,IAAI;AAAA,MAC/C,CAAC;AAAA,MACD;AAAA,QACE;AAAA,QACA;AAAA,QACA;AAAA,UACE,aAAa,MAAM;AAAA,UACnB,WAAW,MAAM;AAAA,UACjB,UAAU,KAAK;AAAA,UACf;AAAA,UACA,WAAW;AAAA,QACb;AAAA,QACA,EAAE,SAAS,EAAE,WAAW,OAAO,EAAE;AAAA,QACjC,EAAE,UAAU,KAAK,UAAU,eAAe;AAAA,MAC5C;AAAA,IACF,CAAC;AACD,UAAM,OAAO,cAAc;AAE3B,UAAM,aAAa;AAAA,MACjB,GAAG,KAAK,IAAI,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,CAAC,MAAmB,CAAC,CAAC,CAAC;AAAA,MAChE,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,YAAY,EAAE,OAAO,CAAC,MAAmB,CAAC,CAAC,CAAC;AAAA,IACpE;AAEA,UAAM,cAAc,MAAM,wBAAwB,IAAI;AAAA,MACpD,SAAS;AAAA,MACT,WAAW,CAAC;AAAA,MACZ,iBAAiB,CAAC;AAAA,IACpB,CAAC;AAED,QAAI,QAAQ,oBAAoB,EAAE,YAAY,MAAM,OAAO,MAAM,MAAM,MAAM,cAAc,YAAY,MAAM,CAAC;AAC9G,UAAM,cAAc,0BAA0B,MAAM,KAAK;AACzD,QAAI,YAAY,OAAO,GAAG;AACxB,cAAQ,MAAM,OAAO,CAAC,UAAU,YAAY,IAAI,MAAM,IAAgC,CAAC;AAAA,IACzF;AAEA,QAAI,aAAiC;AACrC,QAAI,KAAK,WAAW,MAAM,SAAS,MAAM,SAAS,GAAG;AACnD,YAAM,OAAO,MAAM,MAAM,SAAS,CAAC;AACnC,mBAAa,OAAO,KAAK,GAAG,KAAK,UAAU,IAAI,KAAK,EAAE,EAAE,EAAE,SAAS,QAAQ;AAAA,IAC7E;AAEA,WAAO,aAAa,KAAK,EAAE,OAAO,WAAW,CAAC;AAAA,EAChD,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,GAAG;AACxB,aAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,IAC3D;AACA,WAAO,MAAM,qCAAqC,EAAE,IAAI,CAAC;AACzD,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,UAAU,iCAAiC,yBAAyB,EAAE;AAAA,MAC/E,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAEA,MAAM,qBAAqB,EAAE,OAAO;AAAA,EAClC,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC/B,OAAO,EAAE,OAAO;AAClB,CAAC;AAED,MAAM,qBAAqB,EAAE,OAAO;AAAA,EAClC,IAAI,EAAE,OAAO;AAAA,EACb,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,EAChC,MAAM,EAAE,KAAK,CAAC,UAAU,UAAU,SAAS,CAAC;AAAA,EAC5C,QAAQ,EAAE,OAAO;AAAA,EACjB,OAAO;AAAA,EACP,QAAQ,EAAE,KAAK,CAAC,cAAc,MAAM,CAAC;AAAA,EACrC,UAAU,EAAE,OAAO;AAAA,IACjB,YAAY,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,IAC3C,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,IACzC,cAAc,EAAE,KAAK,CAAC,SAAS,OAAO,CAAC,EAAE,SAAS;AAAA,IAClD,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EACjC,CAAC,EAAE,SAAS;AACd,CAAC;AAED,MAAM,gCAAgC,EAAE,OAAO;AAAA,EAC7C,OAAO,EAAE,MAAM,kBAAkB;AAAA,EACjC,YAAY,EAAE,OAAO,EAAE,SAAS;AAClC,CAAC;AAEM,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,OAAO;AAAA,MACP,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,mBAAmB,QAAQ,8BAA8B;AAAA,QACrF,EAAE,QAAQ,KAAK,aAAa,iBAAiB,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,QACrF,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,QACpF,EAAE,QAAQ,KAAK,aAAa,sBAAsB,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,MAC5F;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/sales/api/document-numbers/route.js

@@ -7,6 +7,8 @@ import { resolveTranslations } from "@open-mercato/shared/lib/i18n/server";
 import { CrudHttpError, isCrudHttpError } from "@open-mercato/shared/lib/crud/errors";
 import { documentNumberRequestSchema } from "../../data/validators.js";
 import { withScopedPayload } from "../utils.js";
+import { createLogger } from "@open-mercato/shared/lib/logger";
+const logger = createLogger("sales");
 const metadata = {
   POST: { requireAuth: true }
 };
@@ -82,7 +84,7 @@ async function POST(req) {
       return NextResponse.json(err.body, { status: err.status });
     }
     const { translate } = await resolveTranslations();
-    console.error("sales.document-numbers.generate failed", err);
+    logger.error("sales.document-numbers.generate failed", { err });
     return NextResponse.json(
       { error: translate("sales.documents.errors.number_generate_failed", "Failed to generate document number.") },
       { status: 400 }