@open-mercato/core 0.6.6-develop.6465.1.019f0fb26f → 0.6.6-develop.6471.1.9ab5bdd79a

package/dist/modules/customers/api/deals/[id]/people/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../../src/modules/customers/api/deals/%5Bid%5D/people/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { CrudHttpError, isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { findOneWithDecryption, findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { isOrganizationReadAccessAllowed } from '@open-mercato/core/modules/directory/utils/organizationScopeGuard'\nimport { CustomerDeal, CustomerDealPersonLink, CustomerEntity } from '../../../../data/entities'\n\nconst paramsSchema = z.object({\n  id: z.string().uuid(),\n})\n\nconst querySchema = z.object({\n  page: z.coerce.number().min(1).default(1),\n  pageSize: z.coerce.number().min(1).max(100).default(20),\n  search: z.string().optional(),\n  sort: z.enum(['label-asc', 'label-desc', 'name-asc', 'name-desc', 'recent']).default('label-asc'),\n})\n\ntype DealLinkedEntitySort = 'label-asc' | 'label-desc' | 'recent'\n\nfunction normalizeSort(sort: z.infer<typeof querySchema>['sort']): DealLinkedEntitySort {\n  if (sort === 'name-asc') return 'label-asc'\n  if (sort === 'name-desc') return 'label-desc'\n  return sort\n}\n\ntype DealPersonItem = {\n  id: string\n  label: string\n  subtitle: string | null\n  kind: 'person'\n  linkedAt: string\n}\n\nfunction matchesSearch(item: DealPersonItem, query: string): boolean {\n  const normalized = query.trim().toLowerCase()\n  if (!normalized.length) return true\n  return [item.label, item.subtitle]\n    .filter((value): value is string => typeof value === 'string' && value.length > 0)\n    .some((value) => value.toLowerCase().includes(normalized))\n}\n\nfunction sortItems(items: DealPersonItem[], sort: 'label-asc' | 'label-desc' | 'recent'): DealPersonItem[] {\n  if (sort === 'recent') {\n    return [...items].sort((left, right) => {\n      const compare = new Date(right.linkedAt).getTime() - new Date(left.linkedAt).getTime()\n      if (compare !== 0) return compare\n      return left.label.localeCompare(right.label, undefined, { sensitivity: 'base' })\n    })\n  }\n  return [...items].sort((left, right) => {\n    const compare = left.label.localeCompare(right.label, undefined, { sensitivity: 'base' })\n    return sort === 'label-asc' ? compare : -compare\n  })\n}\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['customers.deals.view'] },\n}\n\nexport async function GET(req: Request, ctx: { params?: { id?: string } }) {\n  const { translate } = await resolveTranslations()\n  try {\n    const { id } = paramsSchema.parse({ id: ctx.params?.id })\n    const auth = await getAuthFromRequest(req)\n    if (!auth?.tenantId) throw new CrudHttpError(401, { error: 'Unauthorized' })\n\n    const url = new URL(req.url)\n    const query = querySchema.parse({\n      page: url.searchParams.get('page') ?? undefined,\n      pageSize: url.searchParams.get('pageSize') ?? undefined,\n      search: url.searchParams.get('search') ?? undefined,\n      sort: url.searchParams.get('sort') ?? undefined,\n    })\n\n    const container = await createRequestContainer()\n    const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n    const em = (container.resolve('em') as EntityManager).fork()\n    const decryptionScope = {\n      tenantId: auth.tenantId,\n      organizationId: scope?.selectedId ?? auth.orgId ?? null,\n    }\n\n    const deal = await findOneWithDecryption(\n      em,\n      CustomerDeal,\n      { id, tenantId: auth.tenantId, deletedAt: null },\n      {},\n      decryptionScope,\n    )\n    if (!deal) {\n      throw new CrudHttpError(404, { error: translate('customers.errors.deal_not_found', 'Deal not found') })\n    }\n\n    if (!isOrganizationReadAccessAllowed({ scope, auth, organizationId: deal.organizationId })) {\n      throw new CrudHttpError(403, { error: translate('customers.errors.access_denied', 'Access denied') })\n    }\n\n    const entityScope = { tenantId: deal.tenantId, organizationId: deal.organizationId }\n    const links = await findWithDecryption(\n      em,\n      CustomerDealPersonLink,\n      { deal: deal.id },\n      { populate: ['person'] },\n      entityScope,\n    )\n\n    const items = links\n      .map((link) => {\n        const person = link.person as CustomerEntity | null\n        if (!person?.id) return null\n        return {\n          id: person.id,\n          label: person.displayName ?? person.primaryEmail ?? person.id,\n          subtitle: person.primaryEmail ?? person.primaryPhone ?? null,\n          kind: 'person',\n          linkedAt: link.createdAt.toISOString(),\n        } satisfies DealPersonItem\n      })\n      .filter((item): item is DealPersonItem => item !== null)\n\n    const filtered = query.search?.trim().length ? items.filter((item) => matchesSearch(item, query.search ?? '')) : items\n    const sorted = sortItems(filtered, normalizeSort(query.sort))\n    const total = sorted.length\n    const totalPages = Math.max(1, Math.ceil(total / query.pageSize))\n    const page = Math.min(query.page, totalPages)\n    const start = (page - 1) * query.pageSize\n\n    return NextResponse.json({\n      items: sorted.slice(start, start + query.pageSize),\n      total,\n      page,\n      pageSize: query.pageSize,\n      totalPages,\n    })\n  } catch (error) {\n    if (isCrudHttpError(error)) {\n      return NextResponse.json(error.body, { status: error.status })\n    }\n    console.error('[customers.deals.people.GET]', error)\n    return NextResponse.json({ error: translate('customers.errors.deal_people_load_failed', 'Failed to load linked people') }, { status: 500 })\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Customers',\n  methods: {\n    GET: {\n      summary: 'List linked people for a deal',\n      query: querySchema,\n      responses: [\n        {\n          status: 200,\n          description: 'Paginated linked people',\n          schema: z.object({\n            items: z.array(\n              z.object({\n                id: z.string().uuid(),\n                label: z.string(),\n                subtitle: z.string().nullable(),\n                kind: z.literal('person'),\n                linkedAt: z.string(),\n              }),\n            ),\n            total: z.number().int().nonnegative(),\n            page: z.number().int().min(1),\n            pageSize: z.number().int().min(1),\n            totalPages: z.number().int().min(1),\n          }),\n        },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAElB,SAAS,eAAe,uBAAuB;AAC/C,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AACnD,SAAS,2BAA2B;AAEpC,SAAS,uBAAuB,0BAA0B;AAC1D,SAAS,uCAAuC;AAChD,SAAS,cAAc,8BAA8C;AAErE,MAAM,eAAe,EAAE,OAAO;AAAA,EAC5B,IAAI,EAAE,OAAO,EAAE,KAAK;AACtB,CAAC;AAED,MAAM,cAAc,EAAE,OAAO;AAAA,EAC3B,MAAM,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,QAAQ,CAAC;AAAA,EACxC,UAAU,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,QAAQ,EAAE;AAAA,EACtD,QAAQ,EAAE,OAAO,EAAE,SAAS;AAAA,EAC5B,MAAM,EAAE,KAAK,CAAC,aAAa,cAAc,YAAY,aAAa,QAAQ,CAAC,EAAE,QAAQ,WAAW;AAClG,CAAC;AAID,SAAS,cAAc,MAAiE;AACtF,MAAI,SAAS,WAAY,QAAO;AAChC,MAAI,SAAS,YAAa,QAAO;AACjC,SAAO;AACT;AAUA,SAAS,cAAc,MAAsB,OAAwB;AACnE,QAAM,aAAa,MAAM,KAAK,EAAE,YAAY;AAC5C,MAAI,CAAC,WAAW,OAAQ,QAAO;AAC/B,SAAO,CAAC,KAAK,OAAO,KAAK,QAAQ,EAC9B,OAAO,CAAC,UAA2B,OAAO,UAAU,YAAY,MAAM,SAAS,CAAC,EAChF,KAAK,CAAC,UAAU,MAAM,YAAY,EAAE,SAAS,UAAU,CAAC;AAC7D;AAEA,SAAS,UAAU,OAAyB,MAA+D;AACzG,MAAI,SAAS,UAAU;AACrB,WAAO,CAAC,GAAG,KAAK,EAAE,KAAK,CAAC,MAAM,UAAU;AACtC,YAAM,UAAU,IAAI,KAAK,MAAM,QAAQ,EAAE,QAAQ,IAAI,IAAI,KAAK,KAAK,QAAQ,EAAE,QAAQ;AACrF,UAAI,YAAY,EAAG,QAAO;AAC1B,aAAO,KAAK,MAAM,cAAc,MAAM,OAAO,QAAW,EAAE,aAAa,OAAO,CAAC;AAAA,IACjF,CAAC;AAAA,EACH;AACA,SAAO,CAAC,GAAG,KAAK,EAAE,KAAK,CAAC,MAAM,UAAU;AACtC,UAAM,UAAU,KAAK,MAAM,cAAc,MAAM,OAAO,QAAW,EAAE,aAAa,OAAO,CAAC;AACxF,WAAO,SAAS,cAAc,UAAU,CAAC;AAAA,EAC3C,CAAC;AACH;AAEO,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,sBAAsB,EAAE;AACtE;AAEA,eAAsB,IAAI,KAAc,KAAmC;AACzE,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,MAAI;AACF,UAAM,EAAE,GAAG,IAAI,aAAa,MAAM,EAAE,IAAI,IAAI,QAAQ,GAAG,CAAC;AACxD,UAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,QAAI,CAAC,MAAM,SAAU,OAAM,IAAI,cAAc,KAAK,EAAE,OAAO,eAAe,CAAC;AAE3E,UAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,UAAM,QAAQ,YAAY,MAAM;AAAA,MAC9B,MAAM,IAAI,aAAa,IAAI,MAAM,KAAK;AAAA,MACtC,UAAU,IAAI,aAAa,IAAI,UAAU,KAAK;AAAA,MAC9C,QAAQ,IAAI,aAAa,IAAI,QAAQ,KAAK;AAAA,MAC1C,MAAM,IAAI,aAAa,IAAI,MAAM,KAAK;AAAA,IACxC,CAAC;AAED,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AACxF,UAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC3D,UAAM,kBAAkB;AAAA,MACtB,UAAU,KAAK;AAAA,MACf,gBAAgB,OAAO,cAAc,KAAK,SAAS;AAAA,IACrD;AAEA,UAAM,OAAO,MAAM;AAAA,MACjB;AAAA,MACA;AAAA,MACA,EAAE,IAAI,UAAU,KAAK,UAAU,WAAW,KAAK;AAAA,MAC/C,CAAC;AAAA,MACD;AAAA,IACF;AACA,QAAI,CAAC,MAAM;AACT,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,mCAAmC,gBAAgB,EAAE,CAAC;AAAA,IACxG;AAEA,QAAI,CAAC,gCAAgC,EAAE,OAAO,MAAM,gBAAgB,KAAK,eAAe,CAAC,GAAG;AAC1F,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,kCAAkC,eAAe,EAAE,CAAC;AAAA,IACtG;AAEA,UAAM,cAAc,EAAE,UAAU,KAAK,UAAU,gBAAgB,KAAK,eAAe;AACnF,UAAM,QAAQ,MAAM;AAAA,MAClB;AAAA,MACA;AAAA,MACA,EAAE,MAAM,KAAK,GAAG;AAAA,MAChB,EAAE,UAAU,CAAC,QAAQ,EAAE;AAAA,MACvB;AAAA,IACF;AAEA,UAAM,QAAQ,MACX,IAAI,CAAC,SAAS;AACb,YAAM,SAAS,KAAK;AACpB,UAAI,CAAC,QAAQ,GAAI,QAAO;AACxB,aAAO;AAAA,QACL,IAAI,OAAO;AAAA,QACX,OAAO,OAAO,eAAe,OAAO,gBAAgB,OAAO;AAAA,QAC3D,UAAU,OAAO,gBAAgB,OAAO,gBAAgB;AAAA,QACxD,MAAM;AAAA,QACN,UAAU,KAAK,UAAU,YAAY;AAAA,MACvC;AAAA,IACF,CAAC,EACA,OAAO,CAAC,SAAiC,SAAS,IAAI;AAEzD,UAAM,WAAW,MAAM,QAAQ,KAAK,EAAE,SAAS,MAAM,OAAO,CAAC,SAAS,cAAc,MAAM,MAAM,UAAU,EAAE,CAAC,IAAI;AACjH,UAAM,SAAS,UAAU,UAAU,cAAc,MAAM,IAAI,CAAC;AAC5D,UAAM,QAAQ,OAAO;AACrB,UAAM,aAAa,KAAK,IAAI,GAAG,KAAK,KAAK,QAAQ,MAAM,QAAQ,CAAC;AAChE,UAAM,OAAO,KAAK,IAAI,MAAM,MAAM,UAAU;AAC5C,UAAM,SAAS,OAAO,KAAK,MAAM;AAEjC,WAAO,aAAa,KAAK;AAAA,MACvB,OAAO,OAAO,MAAM,OAAO,QAAQ,MAAM,QAAQ;AAAA,MACjD;AAAA,MACA;AAAA,MACA,UAAU,MAAM;AAAA,MAChB;AAAA,IACF,CAAC;AAAA,EACH,SAAS,OAAO;AACd,QAAI,gBAAgB,KAAK,GAAG;AAC1B,aAAO,aAAa,KAAK,MAAM,MAAM,EAAE,QAAQ,MAAM,OAAO,CAAC;AAAA,IAC/D;AACA,YAAQ,MAAM,gCAAgC,KAAK;AACnD,WAAO,aAAa,KAAK,EAAE,OAAO,UAAU,4CAA4C,8BAA8B,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC5I;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,OAAO;AAAA,MACP,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO;AAAA,YACf,OAAO,EAAE;AAAA,cACP,EAAE,OAAO;AAAA,gBACP,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,gBACpB,OAAO,EAAE,OAAO;AAAA,gBAChB,UAAU,EAAE,OAAO,EAAE,SAAS;AAAA,gBAC9B,MAAM,EAAE,QAAQ,QAAQ;AAAA,gBACxB,UAAU,EAAE,OAAO;AAAA,cACrB,CAAC;AAAA,YACH;AAAA,YACA,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY;AAAA,YACpC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC;AAAA,YAC5B,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC;AAAA,YAChC,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC;AAAA,UACpC,CAAC;AAAA,QACH;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { CrudHttpError, isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { findOneWithDecryption, findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { isOrganizationReadAccessAllowed } from '@open-mercato/core/modules/directory/utils/organizationScopeGuard'\nimport { CustomerDeal, CustomerDealPersonLink, CustomerEntity } from '../../../../data/entities'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('customers')\n\nconst paramsSchema = z.object({\n  id: z.string().uuid(),\n})\n\nconst querySchema = z.object({\n  page: z.coerce.number().min(1).default(1),\n  pageSize: z.coerce.number().min(1).max(100).default(20),\n  search: z.string().optional(),\n  sort: z.enum(['label-asc', 'label-desc', 'name-asc', 'name-desc', 'recent']).default('label-asc'),\n})\n\ntype DealLinkedEntitySort = 'label-asc' | 'label-desc' | 'recent'\n\nfunction normalizeSort(sort: z.infer<typeof querySchema>['sort']): DealLinkedEntitySort {\n  if (sort === 'name-asc') return 'label-asc'\n  if (sort === 'name-desc') return 'label-desc'\n  return sort\n}\n\ntype DealPersonItem = {\n  id: string\n  label: string\n  subtitle: string | null\n  kind: 'person'\n  linkedAt: string\n}\n\nfunction matchesSearch(item: DealPersonItem, query: string): boolean {\n  const normalized = query.trim().toLowerCase()\n  if (!normalized.length) return true\n  return [item.label, item.subtitle]\n    .filter((value): value is string => typeof value === 'string' && value.length > 0)\n    .some((value) => value.toLowerCase().includes(normalized))\n}\n\nfunction sortItems(items: DealPersonItem[], sort: 'label-asc' | 'label-desc' | 'recent'): DealPersonItem[] {\n  if (sort === 'recent') {\n    return [...items].sort((left, right) => {\n      const compare = new Date(right.linkedAt).getTime() - new Date(left.linkedAt).getTime()\n      if (compare !== 0) return compare\n      return left.label.localeCompare(right.label, undefined, { sensitivity: 'base' })\n    })\n  }\n  return [...items].sort((left, right) => {\n    const compare = left.label.localeCompare(right.label, undefined, { sensitivity: 'base' })\n    return sort === 'label-asc' ? compare : -compare\n  })\n}\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['customers.deals.view'] },\n}\n\nexport async function GET(req: Request, ctx: { params?: { id?: string } }) {\n  const { translate } = await resolveTranslations()\n  try {\n    const { id } = paramsSchema.parse({ id: ctx.params?.id })\n    const auth = await getAuthFromRequest(req)\n    if (!auth?.tenantId) throw new CrudHttpError(401, { error: 'Unauthorized' })\n\n    const url = new URL(req.url)\n    const query = querySchema.parse({\n      page: url.searchParams.get('page') ?? undefined,\n      pageSize: url.searchParams.get('pageSize') ?? undefined,\n      search: url.searchParams.get('search') ?? undefined,\n      sort: url.searchParams.get('sort') ?? undefined,\n    })\n\n    const container = await createRequestContainer()\n    const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n    const em = (container.resolve('em') as EntityManager).fork()\n    const decryptionScope = {\n      tenantId: auth.tenantId,\n      organizationId: scope?.selectedId ?? auth.orgId ?? null,\n    }\n\n    const deal = await findOneWithDecryption(\n      em,\n      CustomerDeal,\n      { id, tenantId: auth.tenantId, deletedAt: null },\n      {},\n      decryptionScope,\n    )\n    if (!deal) {\n      throw new CrudHttpError(404, { error: translate('customers.errors.deal_not_found', 'Deal not found') })\n    }\n\n    if (!isOrganizationReadAccessAllowed({ scope, auth, organizationId: deal.organizationId })) {\n      throw new CrudHttpError(403, { error: translate('customers.errors.access_denied', 'Access denied') })\n    }\n\n    const entityScope = { tenantId: deal.tenantId, organizationId: deal.organizationId }\n    const links = await findWithDecryption(\n      em,\n      CustomerDealPersonLink,\n      { deal: deal.id },\n      { populate: ['person'] },\n      entityScope,\n    )\n\n    const items = links\n      .map((link) => {\n        const person = link.person as CustomerEntity | null\n        if (!person?.id) return null\n        return {\n          id: person.id,\n          label: person.displayName ?? person.primaryEmail ?? person.id,\n          subtitle: person.primaryEmail ?? person.primaryPhone ?? null,\n          kind: 'person',\n          linkedAt: link.createdAt.toISOString(),\n        } satisfies DealPersonItem\n      })\n      .filter((item): item is DealPersonItem => item !== null)\n\n    const filtered = query.search?.trim().length ? items.filter((item) => matchesSearch(item, query.search ?? '')) : items\n    const sorted = sortItems(filtered, normalizeSort(query.sort))\n    const total = sorted.length\n    const totalPages = Math.max(1, Math.ceil(total / query.pageSize))\n    const page = Math.min(query.page, totalPages)\n    const start = (page - 1) * query.pageSize\n\n    return NextResponse.json({\n      items: sorted.slice(start, start + query.pageSize),\n      total,\n      page,\n      pageSize: query.pageSize,\n      totalPages,\n    })\n  } catch (error) {\n    if (isCrudHttpError(error)) {\n      return NextResponse.json(error.body, { status: error.status })\n    }\n    logger.error('customers.deals.people.GET', { err: error })\n    return NextResponse.json({ error: translate('customers.errors.deal_people_load_failed', 'Failed to load linked people') }, { status: 500 })\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Customers',\n  methods: {\n    GET: {\n      summary: 'List linked people for a deal',\n      query: querySchema,\n      responses: [\n        {\n          status: 200,\n          description: 'Paginated linked people',\n          schema: z.object({\n            items: z.array(\n              z.object({\n                id: z.string().uuid(),\n                label: z.string(),\n                subtitle: z.string().nullable(),\n                kind: z.literal('person'),\n                linkedAt: z.string(),\n              }),\n            ),\n            total: z.number().int().nonnegative(),\n            page: z.number().int().min(1),\n            pageSize: z.number().int().min(1),\n            totalPages: z.number().int().min(1),\n          }),\n        },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAElB,SAAS,eAAe,uBAAuB;AAC/C,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AACnD,SAAS,2BAA2B;AAEpC,SAAS,uBAAuB,0BAA0B;AAC1D,SAAS,uCAAuC;AAChD,SAAS,cAAc,8BAA8C;AACrE,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,WAAW;AAEvC,MAAM,eAAe,EAAE,OAAO;AAAA,EAC5B,IAAI,EAAE,OAAO,EAAE,KAAK;AACtB,CAAC;AAED,MAAM,cAAc,EAAE,OAAO;AAAA,EAC3B,MAAM,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,QAAQ,CAAC;AAAA,EACxC,UAAU,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,QAAQ,EAAE;AAAA,EACtD,QAAQ,EAAE,OAAO,EAAE,SAAS;AAAA,EAC5B,MAAM,EAAE,KAAK,CAAC,aAAa,cAAc,YAAY,aAAa,QAAQ,CAAC,EAAE,QAAQ,WAAW;AAClG,CAAC;AAID,SAAS,cAAc,MAAiE;AACtF,MAAI,SAAS,WAAY,QAAO;AAChC,MAAI,SAAS,YAAa,QAAO;AACjC,SAAO;AACT;AAUA,SAAS,cAAc,MAAsB,OAAwB;AACnE,QAAM,aAAa,MAAM,KAAK,EAAE,YAAY;AAC5C,MAAI,CAAC,WAAW,OAAQ,QAAO;AAC/B,SAAO,CAAC,KAAK,OAAO,KAAK,QAAQ,EAC9B,OAAO,CAAC,UAA2B,OAAO,UAAU,YAAY,MAAM,SAAS,CAAC,EAChF,KAAK,CAAC,UAAU,MAAM,YAAY,EAAE,SAAS,UAAU,CAAC;AAC7D;AAEA,SAAS,UAAU,OAAyB,MAA+D;AACzG,MAAI,SAAS,UAAU;AACrB,WAAO,CAAC,GAAG,KAAK,EAAE,KAAK,CAAC,MAAM,UAAU;AACtC,YAAM,UAAU,IAAI,KAAK,MAAM,QAAQ,EAAE,QAAQ,IAAI,IAAI,KAAK,KAAK,QAAQ,EAAE,QAAQ;AACrF,UAAI,YAAY,EAAG,QAAO;AAC1B,aAAO,KAAK,MAAM,cAAc,MAAM,OAAO,QAAW,EAAE,aAAa,OAAO,CAAC;AAAA,IACjF,CAAC;AAAA,EACH;AACA,SAAO,CAAC,GAAG,KAAK,EAAE,KAAK,CAAC,MAAM,UAAU;AACtC,UAAM,UAAU,KAAK,MAAM,cAAc,MAAM,OAAO,QAAW,EAAE,aAAa,OAAO,CAAC;AACxF,WAAO,SAAS,cAAc,UAAU,CAAC;AAAA,EAC3C,CAAC;AACH;AAEO,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,sBAAsB,EAAE;AACtE;AAEA,eAAsB,IAAI,KAAc,KAAmC;AACzE,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,MAAI;AACF,UAAM,EAAE,GAAG,IAAI,aAAa,MAAM,EAAE,IAAI,IAAI,QAAQ,GAAG,CAAC;AACxD,UAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,QAAI,CAAC,MAAM,SAAU,OAAM,IAAI,cAAc,KAAK,EAAE,OAAO,eAAe,CAAC;AAE3E,UAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,UAAM,QAAQ,YAAY,MAAM;AAAA,MAC9B,MAAM,IAAI,aAAa,IAAI,MAAM,KAAK;AAAA,MACtC,UAAU,IAAI,aAAa,IAAI,UAAU,KAAK;AAAA,MAC9C,QAAQ,IAAI,aAAa,IAAI,QAAQ,KAAK;AAAA,MAC1C,MAAM,IAAI,aAAa,IAAI,MAAM,KAAK;AAAA,IACxC,CAAC;AAED,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AACxF,UAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC3D,UAAM,kBAAkB;AAAA,MACtB,UAAU,KAAK;AAAA,MACf,gBAAgB,OAAO,cAAc,KAAK,SAAS;AAAA,IACrD;AAEA,UAAM,OAAO,MAAM;AAAA,MACjB;AAAA,MACA;AAAA,MACA,EAAE,IAAI,UAAU,KAAK,UAAU,WAAW,KAAK;AAAA,MAC/C,CAAC;AAAA,MACD;AAAA,IACF;AACA,QAAI,CAAC,MAAM;AACT,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,mCAAmC,gBAAgB,EAAE,CAAC;AAAA,IACxG;AAEA,QAAI,CAAC,gCAAgC,EAAE,OAAO,MAAM,gBAAgB,KAAK,eAAe,CAAC,GAAG;AAC1F,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,kCAAkC,eAAe,EAAE,CAAC;AAAA,IACtG;AAEA,UAAM,cAAc,EAAE,UAAU,KAAK,UAAU,gBAAgB,KAAK,eAAe;AACnF,UAAM,QAAQ,MAAM;AAAA,MAClB;AAAA,MACA;AAAA,MACA,EAAE,MAAM,KAAK,GAAG;AAAA,MAChB,EAAE,UAAU,CAAC,QAAQ,EAAE;AAAA,MACvB;AAAA,IACF;AAEA,UAAM,QAAQ,MACX,IAAI,CAAC,SAAS;AACb,YAAM,SAAS,KAAK;AACpB,UAAI,CAAC,QAAQ,GAAI,QAAO;AACxB,aAAO;AAAA,QACL,IAAI,OAAO;AAAA,QACX,OAAO,OAAO,eAAe,OAAO,gBAAgB,OAAO;AAAA,QAC3D,UAAU,OAAO,gBAAgB,OAAO,gBAAgB;AAAA,QACxD,MAAM;AAAA,QACN,UAAU,KAAK,UAAU,YAAY;AAAA,MACvC;AAAA,IACF,CAAC,EACA,OAAO,CAAC,SAAiC,SAAS,IAAI;AAEzD,UAAM,WAAW,MAAM,QAAQ,KAAK,EAAE,SAAS,MAAM,OAAO,CAAC,SAAS,cAAc,MAAM,MAAM,UAAU,EAAE,CAAC,IAAI;AACjH,UAAM,SAAS,UAAU,UAAU,cAAc,MAAM,IAAI,CAAC;AAC5D,UAAM,QAAQ,OAAO;AACrB,UAAM,aAAa,KAAK,IAAI,GAAG,KAAK,KAAK,QAAQ,MAAM,QAAQ,CAAC;AAChE,UAAM,OAAO,KAAK,IAAI,MAAM,MAAM,UAAU;AAC5C,UAAM,SAAS,OAAO,KAAK,MAAM;AAEjC,WAAO,aAAa,KAAK;AAAA,MACvB,OAAO,OAAO,MAAM,OAAO,QAAQ,MAAM,QAAQ;AAAA,MACjD;AAAA,MACA;AAAA,MACA,UAAU,MAAM;AAAA,MAChB;AAAA,IACF,CAAC;AAAA,EACH,SAAS,OAAO;AACd,QAAI,gBAAgB,KAAK,GAAG;AAC1B,aAAO,aAAa,KAAK,MAAM,MAAM,EAAE,QAAQ,MAAM,OAAO,CAAC;AAAA,IAC/D;AACA,WAAO,MAAM,8BAA8B,EAAE,KAAK,MAAM,CAAC;AACzD,WAAO,aAAa,KAAK,EAAE,OAAO,UAAU,4CAA4C,8BAA8B,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC5I;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,OAAO;AAAA,MACP,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO;AAAA,YACf,OAAO,EAAE;AAAA,cACP,EAAE,OAAO;AAAA,gBACP,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,gBACpB,OAAO,EAAE,OAAO;AAAA,gBAChB,UAAU,EAAE,OAAO,EAAE,SAAS;AAAA,gBAC9B,MAAM,EAAE,QAAQ,QAAQ;AAAA,gBACxB,UAAU,EAAE,OAAO;AAAA,cACrB,CAAC;AAAA,YACH;AAAA,YACA,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY;AAAA,YACpC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC;AAAA,YAC5B,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC;AAAA,YAChC,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC;AAAA,UACpC,CAAC;AAAA,QACH;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/customers/api/deals/aggregate/route.js

@@ -9,6 +9,8 @@ import { isTenantDataEncryptionEnabled } from "@open-mercato/shared/lib/encrypti
 import { fetchStuckDealIds } from "../../../lib/stuckDeals.js";
 import { findMatchingEntityIdsBySearchTokensAcrossSources } from "../../utils.js";
 import { E } from "../../../../../generated/entities.ids.generated.js";
+import { createLogger } from "@open-mercato/shared/lib/logger";
+const logger = createLogger("customers");
 const metadata = {
   GET: { requireAuth: true, requireFeatures: ["customers.deals.view"] }
 };
@@ -278,7 +280,7 @@ async function GET(req) {
           }
         }
       } catch (err) {
-        console.warn("[customers.deals.aggregate] exchange-rate lookup failed; falling back to per-currency totals", err);
+        logger.warn("exchange-rate lookup failed; falling back to per-currency totals", { component: "deals.aggregate", err });
       }
     }
     for (const agg of stageMap.values()) {

package/dist/modules/customers/api/deals/aggregate/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../src/modules/customers/api/deals/aggregate/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { EntityManager as CoreEntityManager } from '@mikro-orm/core'\nimport type { EntityManager as PgEntityManager } from '@mikro-orm/postgresql'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport type { ExchangeRateService } from '@open-mercato/core/modules/currencies/services/exchangeRateService'\nimport { parseBooleanFromUnknown } from '@open-mercato/shared/lib/boolean'\nimport { escapeLikePattern } from '@open-mercato/shared/lib/db/escapeLikePattern'\nimport type { CrudCtx } from '@open-mercato/shared/lib/crud/factory'\nimport { isTenantDataEncryptionEnabled } from '@open-mercato/shared/lib/encryption/toggles'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { fetchStuckDealIds } from '../../../lib/stuckDeals'\nimport { findMatchingEntityIdsBySearchTokensAcrossSources } from '../../utils'\nimport { E } from '#generated/entities.ids.generated'\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['customers.deals.view'] },\n}\n\nconst querySchema = z.object({\n  pipelineId: z.string().uuid().optional(),\n  search: z.string().optional(),\n  status: z.array(z.enum(['open', 'closed', 'win', 'loose'])).optional(),\n  ownerUserId: z.array(z.string().uuid()).optional(),\n  personId: z.array(z.string().uuid()).optional(),\n  companyId: z.array(z.string().uuid()).optional(),\n  isStuck: z.preprocess((value) => {\n    const parsed = parseBooleanFromUnknown(value)\n    return parsed === null ? value : parsed\n  }, z.boolean()).optional(),\n  isOverdue: z.preprocess((value) => {\n    const parsed = parseBooleanFromUnknown(value)\n    return parsed === null ? value : parsed\n  }, z.boolean()).optional(),\n  expectedCloseAtFrom: z.string().optional(),\n  expectedCloseAtTo: z.string().optional(),\n})\n\ntype StageBreakdownByCurrency = {\n  currency: string\n  total: number\n  count: number\n}\n\ntype StageAggregate = {\n  stageId: string\n  count: number\n  openCount: number\n  totalInBaseCurrency: number\n  byCurrency: StageBreakdownByCurrency[]\n  /**\n   * `true` when every currency present in `byCurrency` was either the base currency or\n   * had a usable exchange rate at request time. `false` when at least one currency in\n   * `byCurrency` could not be resolved to base \u2014 the lane header should surface a\n   * \"partial\" indicator in that case so the converted total isn't read as authoritative.\n   */\n  convertedAll: boolean\n  /**\n   * Currencies present in `byCurrency` that had NO exchange rate to the base currency.\n   * Empty when conversion was complete or there is no base currency configured. The\n   * client uses this to disclose which slice of the value is excluded from `totalInBaseCurrency`.\n   */\n  missingRateCurrencies: string[]\n}\n\ntype AggregateResponse = {\n  baseCurrencyCode: string | null\n  perStage: StageAggregate[]\n}\n\nconst stageBreakdownByCurrencySchema = z.object({\n  currency: z.string(),\n  total: z.number(),\n  count: z.number(),\n})\n\nconst stageAggregateSchema = z.object({\n  stageId: z.string(),\n  count: z.number(),\n  openCount: z.number(),\n  totalInBaseCurrency: z.number(),\n  byCurrency: z.array(stageBreakdownByCurrencySchema),\n  convertedAll: z.boolean(),\n  missingRateCurrencies: z.array(z.string()),\n})\n\nconst aggregateResponseSchema = z.object({\n  baseCurrencyCode: z.string().nullable(),\n  perStage: z.array(stageAggregateSchema),\n})\n\nconst aggregateErrorSchema = z.object({\n  error: z.string(),\n})\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Customers',\n  summary: 'Deals aggregate per pipeline stage',\n  methods: {\n    GET: {\n      summary: 'Per-stage counts and currency totals for kanban lane headers',\n      description:\n        'Returns per-stage counts and totals for deals, with values converted to the tenant base currency where rates are available. Used to power kanban lane headers without loading every deal.',\n      query: querySchema,\n      responses: [\n        { status: 200, description: 'Per-stage aggregate payload', schema: aggregateResponseSchema },\n      ],\n      errors: [\n        { status: 400, description: 'Invalid query parameters', schema: aggregateErrorSchema },\n        { status: 401, description: 'Unauthorized', schema: aggregateErrorSchema },\n      ],\n    },\n  },\n}\n\nfunction readArrayParam(searchParams: URLSearchParams, key: string): string[] | null {\n  const all = searchParams.getAll(key)\n  if (!all.length) return null\n  const flat = all.flatMap((v) => v.split(','))\n  const trimmed = flat.map((s) => s.trim()).filter(Boolean)\n  return trimmed.length ? trimmed : null\n}\n\nfunction restrictToIds(where: string[], values: Array<string | number | null>, ids: string[]) {\n  if (ids.length === 0) {\n    where.push('id = ?')\n    values.push('00000000-0000-0000-0000-000000000000')\n    return\n  }\n  const placeholders = ids.map(() => '?').join(',')\n  where.push(`id IN (${placeholders})`)\n  values.push(...ids)\n}\n\nexport async function GET(req: Request) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.tenantId || !auth.orgId) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n\n  const url = new URL(req.url)\n  const params = url.searchParams\n  const parsed = querySchema.safeParse({\n    pipelineId: params.get('pipelineId') ?? undefined,\n    search: params.get('search') ?? undefined,\n    status: readArrayParam(params, 'status') ?? undefined,\n    ownerUserId: readArrayParam(params, 'ownerUserId') ?? undefined,\n    personId: readArrayParam(params, 'personId') ?? undefined,\n    companyId: readArrayParam(params, 'companyId') ?? undefined,\n    isStuck: params.get('isStuck') ?? undefined,\n    isOverdue: params.get('isOverdue') ?? undefined,\n    expectedCloseAtFrom: params.get('expectedCloseAtFrom') ?? undefined,\n    expectedCloseAtTo: params.get('expectedCloseAtTo') ?? undefined,\n  })\n  if (!parsed.success) {\n    return NextResponse.json({ error: 'Invalid query parameters' }, { status: 400 })\n  }\n\n  const container = await createRequestContainer()\n  const em = container.resolve<CoreEntityManager>('em')\n\n  // Resolve organization scope from the request so multi-org operators can aggregate\n  // deals for any org their RBAC scope permits (matching the deal detail route at\n  // [id]/route.ts:360). Falls back to `auth.orgId` when no scope cookie is set or\n  // when rbacService cannot be resolved (e.g. in unit tests with a minimal container).\n  const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n  const effectiveTenantId = scope.tenantId ?? auth.tenantId\n  const orgFilterIds = Array.isArray(scope.filterIds) && scope.filterIds.length > 0\n    ? scope.filterIds.filter((id) => typeof id === 'string' && id.length > 0)\n    : auth.orgId\n      ? [auth.orgId]\n      : []\n  if (!effectiveTenantId || orgFilterIds.length === 0) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n\n  // Raw SQL is used here intentionally \u2014 the route only projects non-encrypted columns\n  // (`pipeline_stage_id`, `value_amount`, `value_currency`, `status`, plus filters). It\n  // avoids the per-row decryption cost that would be paid by `findWithDecryption` for an\n  // aggregate that never reads `title`/`description`. The search path still relies on\n  // the token index above to find matching deals when encrypted columns are involved.\n  const baseCurrency = await em.getConnection().execute<Array<{ code: string }>>(\n    `SELECT code FROM currencies WHERE tenant_id = ? AND organization_id = ? AND is_base = true AND deleted_at IS NULL LIMIT 1`,\n    [effectiveTenantId, orgFilterIds[0]],\n  )\n  const baseCurrencyCode = baseCurrency[0]?.code ?? null\n\n  // Build WHERE clause shared between count + sum queries\n  const orgPlaceholders = orgFilterIds.map(() => '?').join(',')\n  const where: string[] = [\n    'tenant_id = ?',\n    `organization_id IN (${orgPlaceholders})`,\n    'deleted_at IS NULL',\n  ]\n  const values: Array<string | number | null> = [effectiveTenantId, ...orgFilterIds]\n\n  if (parsed.data.pipelineId) {\n    where.push('pipeline_id = ?')\n    values.push(parsed.data.pipelineId)\n  }\n  const search = parsed.data.search?.trim()\n  if (search) {\n    const searchCtx: CrudCtx = {\n      container,\n      auth,\n      organizationScope: scope,\n      selectedOrganizationId: orgFilterIds[0],\n      organizationIds: orgFilterIds,\n      request: req,\n    }\n    const matchingIds = await findMatchingEntityIdsBySearchTokensAcrossSources({\n      ctx: searchCtx,\n      query: search,\n      sources: [\n        {\n          entityType: E.customers.customer_deal,\n          fields: [\n            'title',\n            'description',\n            'status',\n            'pipeline_stage',\n            'source',\n            'value_amount',\n            'value_currency',\n            'cf:competitive_risk',\n            'cf:implementation_complexity',\n          ],\n        },\n      ],\n    })\n    if (matchingIds !== null && matchingIds.length > 0) {\n      restrictToIds(where, values, matchingIds)\n    } else if (isTenantDataEncryptionEnabled()) {\n      // `customers:customer_deal.title` and `.description` are declared in\n      // `encryption.ts` as encrypted columns. A raw `ILIKE` over the ciphertext would\n      // silently match nothing on encrypted tenants and produce misleading lane totals,\n      // so we collapse the result to zero rows instead \u2014 consistent with the list\n      // endpoint's behavior when the token index has nothing to offer.\n      restrictToIds(where, values, [])\n    } else {\n      const searchPattern = `%${escapeLikePattern(search)}%`\n      where.push(\"(title ILIKE ? ESCAPE '\\\\' OR description ILIKE ? ESCAPE '\\\\')\")\n      values.push(searchPattern, searchPattern)\n    }\n  }\n  if (parsed.data.status && parsed.data.status.length) {\n    const placeholders = parsed.data.status.map(() => '?').join(',')\n    where.push(`status IN (${placeholders})`)\n    values.push(...parsed.data.status)\n  }\n  if (parsed.data.ownerUserId && parsed.data.ownerUserId.length) {\n    const placeholders = parsed.data.ownerUserId.map(() => '?').join(',')\n    where.push(`owner_user_id IN (${placeholders})`)\n    values.push(...parsed.data.ownerUserId)\n  }\n  if (parsed.data.expectedCloseAtFrom) {\n    where.push('expected_close_at >= ?')\n    values.push(parsed.data.expectedCloseAtFrom)\n  }\n  if (parsed.data.expectedCloseAtTo) {\n    where.push('expected_close_at <= ?')\n    values.push(parsed.data.expectedCloseAtTo)\n  }\n  if (parsed.data.isOverdue) {\n    where.push(\"expected_close_at < CURRENT_DATE AND status = 'open'\")\n  }\n  if (parsed.data.isStuck) {\n    // Reuse the list endpoint's stuck-deal lookup so kanban headers, lane counts, and the\n    // cards rendered inside each lane agree on the same definition of \"stuck\". Empty result\n    // \u2192 narrow to a sentinel UUID so the WHERE clause collapses to zero rows.\n    const stuckIds = await fetchStuckDealIds(em as unknown as PgEntityManager, orgFilterIds[0], effectiveTenantId)\n    restrictToIds(where, values, stuckIds)\n  }\n  if (parsed.data.personId && parsed.data.personId.length) {\n    const placeholders = parsed.data.personId.map(() => '?').join(',')\n    where.push(`EXISTS (SELECT 1 FROM customer_deal_people dp WHERE dp.deal_id = customer_deals.id AND dp.person_entity_id IN (${placeholders}))`)\n    values.push(...parsed.data.personId)\n  }\n  if (parsed.data.companyId && parsed.data.companyId.length) {\n    const placeholders = parsed.data.companyId.map(() => '?').join(',')\n    where.push(`EXISTS (SELECT 1 FROM customer_deal_companies dc WHERE dc.deal_id = customer_deals.id AND dc.company_entity_id IN (${placeholders}))`)\n    values.push(...parsed.data.companyId)\n  }\n\n  const whereSql = where.join(' AND ')\n\n  // Aggregate by (stage, currency). Treat null stage as the literal `__unassigned`.\n  const rows = await em.getConnection().execute<\n    Array<{\n      stage_id: string | null\n      currency: string | null\n      total: string | number | null\n      count: string | number\n      open_count: string | number\n    }>\n  >(\n    `SELECT\n        pipeline_stage_id AS stage_id,\n        UPPER(COALESCE(value_currency, '')) AS currency,\n        COALESCE(SUM(value_amount), 0) AS total,\n        COUNT(*) AS count,\n        COUNT(*) FILTER (WHERE status = 'open') AS open_count\n      FROM customer_deals\n      WHERE ${whereSql}\n      GROUP BY pipeline_stage_id, UPPER(COALESCE(value_currency, ''))`,\n    values,\n  )\n\n  // Reduce to per-stage aggregates\n  const stageMap = new Map<string, StageAggregate>()\n  for (const row of rows) {\n    const stageId = row.stage_id ?? '__unassigned'\n    const total = Number(row.total ?? 0)\n    const count = Number(row.count ?? 0)\n    const openCount = Number(row.open_count ?? 0)\n    const currency = (row.currency ?? '').toString().trim()\n\n    if (!stageMap.has(stageId)) {\n      stageMap.set(stageId, {\n        stageId,\n        count: 0,\n        openCount: 0,\n        totalInBaseCurrency: 0,\n        byCurrency: [],\n        convertedAll: true,\n        missingRateCurrencies: [],\n      })\n    }\n    const agg = stageMap.get(stageId)!\n    agg.count += count\n    agg.openCount += openCount\n    // Include any row that has a real currency code, even when its summed amount is\n    // zero \u2014 `byCurrency` should agree with `count` so the per-currency breakdown\n    // doesn't silently drop deals whose amount happens to be zero. Rows with no\n    // currency code at all still get folded into the stage totals via `count`.\n    if (currency.length > 0) {\n      agg.byCurrency.push({ currency, total, count })\n    }\n  }\n\n  // Convert to base currency where possible\n  if (baseCurrencyCode) {\n    const exchange = container.resolve('exchangeRateService') as ExchangeRateService | undefined\n    const today = new Date()\n    const distinctCurrencies = new Set<string>()\n    for (const agg of stageMap.values()) {\n      for (const row of agg.byCurrency) {\n        if (row.currency && row.currency !== baseCurrencyCode) {\n          distinctCurrencies.add(row.currency)\n        }\n      }\n    }\n\n    const rateCache = new Map<string, number>()\n    if (exchange && distinctCurrencies.size > 0) {\n      const pairs = Array.from(distinctCurrencies).map((c) => ({\n        fromCurrencyCode: c,\n        toCurrencyCode: baseCurrencyCode,\n      }))\n      try {\n        const results = await exchange.getRates({\n          pairs,\n          date: today,\n          scope: { tenantId: effectiveTenantId, organizationId: orgFilterIds[0] },\n          options: { maxDaysBack: 60, autoFetch: false },\n        })\n        for (const [key, rateResult] of results) {\n          if (rateResult.rates.length > 0) {\n            // Pick the first matching rate (sources are equivalent for display purposes)\n            const rate = Number(rateResult.rates[0].rate)\n            if (Number.isFinite(rate) && rate > 0) {\n              rateCache.set(key, rate)\n            }\n          }\n        }\n      } catch (err) {\n        // Swallow \u2014 partial totals are still useful and we'll fall back to currency-native\n        // sums. Logging at warn level so operators can correlate missing-rate disclosures in\n        // the UI (`convertedAll: false` / `missingRateCurrencies`) with the underlying error.\n        console.warn('[customers.deals.aggregate] exchange-rate lookup failed; falling back to per-currency totals', err)\n      }\n    }\n\n    for (const agg of stageMap.values()) {\n      let totalBase = 0\n      let convertedAll = true\n      const missingRateCurrencies: string[] = []\n      for (const row of agg.byCurrency) {\n        if (!row.currency) continue\n        if (row.currency === baseCurrencyCode) {\n          totalBase += row.total\n          continue\n        }\n        const key = `${row.currency}/${baseCurrencyCode}`\n        const rate = rateCache.get(key)\n        if (rate !== undefined) {\n          totalBase += row.total * rate\n        } else {\n          convertedAll = false\n          if (!missingRateCurrencies.includes(row.currency)) {\n            missingRateCurrencies.push(row.currency)\n          }\n        }\n      }\n      // Even when some rates are missing, totalInBaseCurrency reflects the converted slice.\n      // `convertedAll`/`missingRateCurrencies` let the client distinguish a complete\n      // conversion from a partial one and disclose which currencies were excluded.\n      agg.totalInBaseCurrency = Math.round(totalBase)\n      agg.convertedAll = convertedAll\n      agg.missingRateCurrencies = missingRateCurrencies\n    }\n  } else {\n    // No base currency configured for the tenant \u2014 surface this by marking every stage as\n    // \"not converted\" with all currencies flagged as missing rates. This way the client UI\n    // can fall back to a per-currency breakdown without trying to render a board total.\n    for (const agg of stageMap.values()) {\n      const present = agg.byCurrency.map((row) => row.currency).filter((c): c is string => !!c)\n      if (present.length > 0) {\n        agg.convertedAll = false\n        agg.missingRateCurrencies = Array.from(new Set(present))\n      }\n    }\n  }\n\n  // Sort byCurrency rows by total descending for stable display\n  for (const agg of stageMap.values()) {\n    agg.byCurrency.sort((a, b) => b.total - a.total)\n  }\n\n  const response: AggregateResponse = {\n    baseCurrencyCode,\n    perStage: Array.from(stageMap.values()),\n  }\n\n  return NextResponse.json(response)\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAGlB,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AACvC,SAAS,0CAA0C;AAEnD,SAAS,+BAA+B;AACxC,SAAS,yBAAyB;AAElC,SAAS,qCAAqC;AAE9C,SAAS,yBAAyB;AAClC,SAAS,wDAAwD;AACjE,SAAS,SAAS;AAEX,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,sBAAsB,EAAE;AACtE;AAEA,MAAM,cAAc,EAAE,OAAO;AAAA,EAC3B,YAAY,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACvC,QAAQ,EAAE,OAAO,EAAE,SAAS;AAAA,EAC5B,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,QAAQ,UAAU,OAAO,OAAO,CAAC,CAAC,EAAE,SAAS;AAAA,EACrE,aAAa,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,SAAS;AAAA,EACjD,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,SAAS;AAAA,EAC9C,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,SAAS;AAAA,EAC/C,SAAS,EAAE,WAAW,CAAC,UAAU;AAC/B,UAAM,SAAS,wBAAwB,KAAK;AAC5C,WAAO,WAAW,OAAO,QAAQ;AAAA,EACnC,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS;AAAA,EACzB,WAAW,EAAE,WAAW,CAAC,UAAU;AACjC,UAAM,SAAS,wBAAwB,KAAK;AAC5C,WAAO,WAAW,OAAO,QAAQ;AAAA,EACnC,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS;AAAA,EACzB,qBAAqB,EAAE,OAAO,EAAE,SAAS;AAAA,EACzC,mBAAmB,EAAE,OAAO,EAAE,SAAS;AACzC,CAAC;AAkCD,MAAM,iCAAiC,EAAE,OAAO;AAAA,EAC9C,UAAU,EAAE,OAAO;AAAA,EACnB,OAAO,EAAE,OAAO;AAAA,EAChB,OAAO,EAAE,OAAO;AAClB,CAAC;AAED,MAAM,uBAAuB,EAAE,OAAO;AAAA,EACpC,SAAS,EAAE,OAAO;AAAA,EAClB,OAAO,EAAE,OAAO;AAAA,EAChB,WAAW,EAAE,OAAO;AAAA,EACpB,qBAAqB,EAAE,OAAO;AAAA,EAC9B,YAAY,EAAE,MAAM,8BAA8B;AAAA,EAClD,cAAc,EAAE,QAAQ;AAAA,EACxB,uBAAuB,EAAE,MAAM,EAAE,OAAO,CAAC;AAC3C,CAAC;AAED,MAAM,0BAA0B,EAAE,OAAO;AAAA,EACvC,kBAAkB,EAAE,OAAO,EAAE,SAAS;AAAA,EACtC,UAAU,EAAE,MAAM,oBAAoB;AACxC,CAAC;AAED,MAAM,uBAAuB,EAAE,OAAO;AAAA,EACpC,OAAO,EAAE,OAAO;AAClB,CAAC;AAEM,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aACE;AAAA,MACF,OAAO;AAAA,MACP,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,+BAA+B,QAAQ,wBAAwB;AAAA,MAC7F;AAAA,MACA,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,4BAA4B,QAAQ,qBAAqB;AAAA,QACrF,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,qBAAqB;AAAA,MAC3E;AAAA,IACF;AAAA,EACF;AACF;AAEA,SAAS,eAAe,cAA+B,KAA8B;AACnF,QAAM,MAAM,aAAa,OAAO,GAAG;AACnC,MAAI,CAAC,IAAI,OAAQ,QAAO;AACxB,QAAM,OAAO,IAAI,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,CAAC;AAC5C,QAAM,UAAU,KAAK,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,OAAO;AACxD,SAAO,QAAQ,SAAS,UAAU;AACpC;AAEA,SAAS,cAAc,OAAiB,QAAuC,KAAe;AAC5F,MAAI,IAAI,WAAW,GAAG;AACpB,UAAM,KAAK,QAAQ;AACnB,WAAO,KAAK,sCAAsC;AAClD;AAAA,EACF;AACA,QAAM,eAAe,IAAI,IAAI,MAAM,GAAG,EAAE,KAAK,GAAG;AAChD,QAAM,KAAK,UAAU,YAAY,GAAG;AACpC,SAAO,KAAK,GAAG,GAAG;AACpB;AAEA,eAAsB,IAAI,KAAc;AACtC,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,YAAY,CAAC,KAAK,OAAO;AAClC,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAEA,QAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,QAAM,SAAS,IAAI;AACnB,QAAM,SAAS,YAAY,UAAU;AAAA,IACnC,YAAY,OAAO,IAAI,YAAY,KAAK;AAAA,IACxC,QAAQ,OAAO,IAAI,QAAQ,KAAK;AAAA,IAChC,QAAQ,eAAe,QAAQ,QAAQ,KAAK;AAAA,IAC5C,aAAa,eAAe,QAAQ,aAAa,KAAK;AAAA,IACtD,UAAU,eAAe,QAAQ,UAAU,KAAK;AAAA,IAChD,WAAW,eAAe,QAAQ,WAAW,KAAK;AAAA,IAClD,SAAS,OAAO,IAAI,SAAS,KAAK;AAAA,IAClC,WAAW,OAAO,IAAI,WAAW,KAAK;AAAA,IACtC,qBAAqB,OAAO,IAAI,qBAAqB,KAAK;AAAA,IAC1D,mBAAmB,OAAO,IAAI,mBAAmB,KAAK;AAAA,EACxD,CAAC;AACD,MAAI,CAAC,OAAO,SAAS;AACnB,WAAO,aAAa,KAAK,EAAE,OAAO,2BAA2B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACjF;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,KAAK,UAAU,QAA2B,IAAI;AAMpD,QAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AACxF,QAAM,oBAAoB,MAAM,YAAY,KAAK;AACjD,QAAM,eAAe,MAAM,QAAQ,MAAM,SAAS,KAAK,MAAM,UAAU,SAAS,IAC5E,MAAM,UAAU,OAAO,CAAC,OAAO,OAAO,OAAO,YAAY,GAAG,SAAS,CAAC,IACtE,KAAK,QACH,CAAC,KAAK,KAAK,IACX,CAAC;AACP,MAAI,CAAC,qBAAqB,aAAa,WAAW,GAAG;AACnD,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAOA,QAAM,eAAe,MAAM,GAAG,cAAc,EAAE;AAAA,IAC5C;AAAA,IACA,CAAC,mBAAmB,aAAa,CAAC,CAAC;AAAA,EACrC;AACA,QAAM,mBAAmB,aAAa,CAAC,GAAG,QAAQ;AAGlD,QAAM,kBAAkB,aAAa,IAAI,MAAM,GAAG,EAAE,KAAK,GAAG;AAC5D,QAAM,QAAkB;AAAA,IACtB;AAAA,IACA,uBAAuB,eAAe;AAAA,IACtC;AAAA,EACF;AACA,QAAM,SAAwC,CAAC,mBAAmB,GAAG,YAAY;AAEjF,MAAI,OAAO,KAAK,YAAY;AAC1B,UAAM,KAAK,iBAAiB;AAC5B,WAAO,KAAK,OAAO,KAAK,UAAU;AAAA,EACpC;AACA,QAAM,SAAS,OAAO,KAAK,QAAQ,KAAK;AACxC,MAAI,QAAQ;AACV,UAAM,YAAqB;AAAA,MACzB;AAAA,MACA;AAAA,MACA,mBAAmB;AAAA,MACnB,wBAAwB,aAAa,CAAC;AAAA,MACtC,iBAAiB;AAAA,MACjB,SAAS;AAAA,IACX;AACA,UAAM,cAAc,MAAM,iDAAiD;AAAA,MACzE,KAAK;AAAA,MACL,OAAO;AAAA,MACP,SAAS;AAAA,QACP;AAAA,UACE,YAAY,EAAE,UAAU;AAAA,UACxB,QAAQ;AAAA,YACN;AAAA,YACA;AAAA,YACA;AAAA,YACA;AAAA,YACA;AAAA,YACA;AAAA,YACA;AAAA,YACA;AAAA,YACA;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,IACF,CAAC;AACD,QAAI,gBAAgB,QAAQ,YAAY,SAAS,GAAG;AAClD,oBAAc,OAAO,QAAQ,WAAW;AAAA,IAC1C,WAAW,8BAA8B,GAAG;AAM1C,oBAAc,OAAO,QAAQ,CAAC,CAAC;AAAA,IACjC,OAAO;AACL,YAAM,gBAAgB,IAAI,kBAAkB,MAAM,CAAC;AACnD,YAAM,KAAK,gEAAgE;AAC3E,aAAO,KAAK,eAAe,aAAa;AAAA,IAC1C;AAAA,EACF;AACA,MAAI,OAAO,KAAK,UAAU,OAAO,KAAK,OAAO,QAAQ;AACnD,UAAM,eAAe,OAAO,KAAK,OAAO,IAAI,MAAM,GAAG,EAAE,KAAK,GAAG;AAC/D,UAAM,KAAK,cAAc,YAAY,GAAG;AACxC,WAAO,KAAK,GAAG,OAAO,KAAK,MAAM;AAAA,EACnC;AACA,MAAI,OAAO,KAAK,eAAe,OAAO,KAAK,YAAY,QAAQ;AAC7D,UAAM,eAAe,OAAO,KAAK,YAAY,IAAI,MAAM,GAAG,EAAE,KAAK,GAAG;AACpE,UAAM,KAAK,qBAAqB,YAAY,GAAG;AAC/C,WAAO,KAAK,GAAG,OAAO,KAAK,WAAW;AAAA,EACxC;AACA,MAAI,OAAO,KAAK,qBAAqB;AACnC,UAAM,KAAK,wBAAwB;AACnC,WAAO,KAAK,OAAO,KAAK,mBAAmB;AAAA,EAC7C;AACA,MAAI,OAAO,KAAK,mBAAmB;AACjC,UAAM,KAAK,wBAAwB;AACnC,WAAO,KAAK,OAAO,KAAK,iBAAiB;AAAA,EAC3C;AACA,MAAI,OAAO,KAAK,WAAW;AACzB,UAAM,KAAK,sDAAsD;AAAA,EACnE;AACA,MAAI,OAAO,KAAK,SAAS;AAIvB,UAAM,WAAW,MAAM,kBAAkB,IAAkC,aAAa,CAAC,GAAG,iBAAiB;AAC7G,kBAAc,OAAO,QAAQ,QAAQ;AAAA,EACvC;AACA,MAAI,OAAO,KAAK,YAAY,OAAO,KAAK,SAAS,QAAQ;AACvD,UAAM,eAAe,OAAO,KAAK,SAAS,IAAI,MAAM,GAAG,EAAE,KAAK,GAAG;AACjE,UAAM,KAAK,kHAAkH,YAAY,IAAI;AAC7I,WAAO,KAAK,GAAG,OAAO,KAAK,QAAQ;AAAA,EACrC;AACA,MAAI,OAAO,KAAK,aAAa,OAAO,KAAK,UAAU,QAAQ;AACzD,UAAM,eAAe,OAAO,KAAK,UAAU,IAAI,MAAM,GAAG,EAAE,KAAK,GAAG;AAClE,UAAM,KAAK,sHAAsH,YAAY,IAAI;AACjJ,WAAO,KAAK,GAAG,OAAO,KAAK,SAAS;AAAA,EACtC;AAEA,QAAM,WAAW,MAAM,KAAK,OAAO;AAGnC,QAAM,OAAO,MAAM,GAAG,cAAc,EAAE;AAAA,IASpC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,cAOU,QAAQ;AAAA;AAAA,IAElB;AAAA,EACF;AAGA,QAAM,WAAW,oBAAI,IAA4B;AACjD,aAAW,OAAO,MAAM;AACtB,UAAM,UAAU,IAAI,YAAY;AAChC,UAAM,QAAQ,OAAO,IAAI,SAAS,CAAC;AACnC,UAAM,QAAQ,OAAO,IAAI,SAAS,CAAC;AACnC,UAAM,YAAY,OAAO,IAAI,cAAc,CAAC;AAC5C,UAAM,YAAY,IAAI,YAAY,IAAI,SAAS,EAAE,KAAK;AAEtD,QAAI,CAAC,SAAS,IAAI,OAAO,GAAG;AAC1B,eAAS,IAAI,SAAS;AAAA,QACpB;AAAA,QACA,OAAO;AAAA,QACP,WAAW;AAAA,QACX,qBAAqB;AAAA,QACrB,YAAY,CAAC;AAAA,QACb,cAAc;AAAA,QACd,uBAAuB,CAAC;AAAA,MAC1B,CAAC;AAAA,IACH;AACA,UAAM,MAAM,SAAS,IAAI,OAAO;AAChC,QAAI,SAAS;AACb,QAAI,aAAa;AAKjB,QAAI,SAAS,SAAS,GAAG;AACvB,UAAI,WAAW,KAAK,EAAE,UAAU,OAAO,MAAM,CAAC;AAAA,IAChD;AAAA,EACF;AAGA,MAAI,kBAAkB;AACpB,UAAM,WAAW,UAAU,QAAQ,qBAAqB;AACxD,UAAM,QAAQ,oBAAI,KAAK;AACvB,UAAM,qBAAqB,oBAAI,IAAY;AAC3C,eAAW,OAAO,SAAS,OAAO,GAAG;AACnC,iBAAW,OAAO,IAAI,YAAY;AAChC,YAAI,IAAI,YAAY,IAAI,aAAa,kBAAkB;AACrD,6BAAmB,IAAI,IAAI,QAAQ;AAAA,QACrC;AAAA,MACF;AAAA,IACF;AAEA,UAAM,YAAY,oBAAI,IAAoB;AAC1C,QAAI,YAAY,mBAAmB,OAAO,GAAG;AAC3C,YAAM,QAAQ,MAAM,KAAK,kBAAkB,EAAE,IAAI,CAAC,OAAO;AAAA,QACvD,kBAAkB;AAAA,QAClB,gBAAgB;AAAA,MAClB,EAAE;AACF,UAAI;AACF,cAAM,UAAU,MAAM,SAAS,SAAS;AAAA,UACtC;AAAA,UACA,MAAM;AAAA,UACN,OAAO,EAAE,UAAU,mBAAmB,gBAAgB,aAAa,CAAC,EAAE;AAAA,UACtE,SAAS,EAAE,aAAa,IAAI,WAAW,MAAM;AAAA,QAC/C,CAAC;AACD,mBAAW,CAAC,KAAK,UAAU,KAAK,SAAS;AACvC,cAAI,WAAW,MAAM,SAAS,GAAG;AAE/B,kBAAM,OAAO,OAAO,WAAW,MAAM,CAAC,EAAE,IAAI;AAC5C,gBAAI,OAAO,SAAS,IAAI,KAAK,OAAO,GAAG;AACrC,wBAAU,IAAI,KAAK,IAAI;AAAA,YACzB;AAAA,UACF;AAAA,QACF;AAAA,MACF,SAAS,KAAK;AAIZ,gBAAQ,KAAK,gGAAgG,GAAG;AAAA,MAClH;AAAA,IACF;AAEA,eAAW,OAAO,SAAS,OAAO,GAAG;AACnC,UAAI,YAAY;AAChB,UAAI,eAAe;AACnB,YAAM,wBAAkC,CAAC;AACzC,iBAAW,OAAO,IAAI,YAAY;AAChC,YAAI,CAAC,IAAI,SAAU;AACnB,YAAI,IAAI,aAAa,kBAAkB;AACrC,uBAAa,IAAI;AACjB;AAAA,QACF;AACA,cAAM,MAAM,GAAG,IAAI,QAAQ,IAAI,gBAAgB;AAC/C,cAAM,OAAO,UAAU,IAAI,GAAG;AAC9B,YAAI,SAAS,QAAW;AACtB,uBAAa,IAAI,QAAQ;AAAA,QAC3B,OAAO;AACL,yBAAe;AACf,cAAI,CAAC,sBAAsB,SAAS,IAAI,QAAQ,GAAG;AACjD,kCAAsB,KAAK,IAAI,QAAQ;AAAA,UACzC;AAAA,QACF;AAAA,MACF;AAIA,UAAI,sBAAsB,KAAK,MAAM,SAAS;AAC9C,UAAI,eAAe;AACnB,UAAI,wBAAwB;AAAA,IAC9B;AAAA,EACF,OAAO;AAIL,eAAW,OAAO,SAAS,OAAO,GAAG;AACnC,YAAM,UAAU,IAAI,WAAW,IAAI,CAAC,QAAQ,IAAI,QAAQ,EAAE,OAAO,CAAC,MAAmB,CAAC,CAAC,CAAC;AACxF,UAAI,QAAQ,SAAS,GAAG;AACtB,YAAI,eAAe;AACnB,YAAI,wBAAwB,MAAM,KAAK,IAAI,IAAI,OAAO,CAAC;AAAA,MACzD;AAAA,IACF;AAAA,EACF;AAGA,aAAW,OAAO,SAAS,OAAO,GAAG;AACnC,QAAI,WAAW,KAAK,CAAC,GAAG,MAAM,EAAE,QAAQ,EAAE,KAAK;AAAA,EACjD;AAEA,QAAM,WAA8B;AAAA,IAClC;AAAA,IACA,UAAU,MAAM,KAAK,SAAS,OAAO,CAAC;AAAA,EACxC;AAEA,SAAO,aAAa,KAAK,QAAQ;AACnC;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { EntityManager as CoreEntityManager } from '@mikro-orm/core'\nimport type { EntityManager as PgEntityManager } from '@mikro-orm/postgresql'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport type { ExchangeRateService } from '@open-mercato/core/modules/currencies/services/exchangeRateService'\nimport { parseBooleanFromUnknown } from '@open-mercato/shared/lib/boolean'\nimport { escapeLikePattern } from '@open-mercato/shared/lib/db/escapeLikePattern'\nimport type { CrudCtx } from '@open-mercato/shared/lib/crud/factory'\nimport { isTenantDataEncryptionEnabled } from '@open-mercato/shared/lib/encryption/toggles'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { fetchStuckDealIds } from '../../../lib/stuckDeals'\nimport { findMatchingEntityIdsBySearchTokensAcrossSources } from '../../utils'\nimport { E } from '#generated/entities.ids.generated'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('customers')\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['customers.deals.view'] },\n}\n\nconst querySchema = z.object({\n  pipelineId: z.string().uuid().optional(),\n  search: z.string().optional(),\n  status: z.array(z.enum(['open', 'closed', 'win', 'loose'])).optional(),\n  ownerUserId: z.array(z.string().uuid()).optional(),\n  personId: z.array(z.string().uuid()).optional(),\n  companyId: z.array(z.string().uuid()).optional(),\n  isStuck: z.preprocess((value) => {\n    const parsed = parseBooleanFromUnknown(value)\n    return parsed === null ? value : parsed\n  }, z.boolean()).optional(),\n  isOverdue: z.preprocess((value) => {\n    const parsed = parseBooleanFromUnknown(value)\n    return parsed === null ? value : parsed\n  }, z.boolean()).optional(),\n  expectedCloseAtFrom: z.string().optional(),\n  expectedCloseAtTo: z.string().optional(),\n})\n\ntype StageBreakdownByCurrency = {\n  currency: string\n  total: number\n  count: number\n}\n\ntype StageAggregate = {\n  stageId: string\n  count: number\n  openCount: number\n  totalInBaseCurrency: number\n  byCurrency: StageBreakdownByCurrency[]\n  /**\n   * `true` when every currency present in `byCurrency` was either the base currency or\n   * had a usable exchange rate at request time. `false` when at least one currency in\n   * `byCurrency` could not be resolved to base \u2014 the lane header should surface a\n   * \"partial\" indicator in that case so the converted total isn't read as authoritative.\n   */\n  convertedAll: boolean\n  /**\n   * Currencies present in `byCurrency` that had NO exchange rate to the base currency.\n   * Empty when conversion was complete or there is no base currency configured. The\n   * client uses this to disclose which slice of the value is excluded from `totalInBaseCurrency`.\n   */\n  missingRateCurrencies: string[]\n}\n\ntype AggregateResponse = {\n  baseCurrencyCode: string | null\n  perStage: StageAggregate[]\n}\n\nconst stageBreakdownByCurrencySchema = z.object({\n  currency: z.string(),\n  total: z.number(),\n  count: z.number(),\n})\n\nconst stageAggregateSchema = z.object({\n  stageId: z.string(),\n  count: z.number(),\n  openCount: z.number(),\n  totalInBaseCurrency: z.number(),\n  byCurrency: z.array(stageBreakdownByCurrencySchema),\n  convertedAll: z.boolean(),\n  missingRateCurrencies: z.array(z.string()),\n})\n\nconst aggregateResponseSchema = z.object({\n  baseCurrencyCode: z.string().nullable(),\n  perStage: z.array(stageAggregateSchema),\n})\n\nconst aggregateErrorSchema = z.object({\n  error: z.string(),\n})\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Customers',\n  summary: 'Deals aggregate per pipeline stage',\n  methods: {\n    GET: {\n      summary: 'Per-stage counts and currency totals for kanban lane headers',\n      description:\n        'Returns per-stage counts and totals for deals, with values converted to the tenant base currency where rates are available. Used to power kanban lane headers without loading every deal.',\n      query: querySchema,\n      responses: [\n        { status: 200, description: 'Per-stage aggregate payload', schema: aggregateResponseSchema },\n      ],\n      errors: [\n        { status: 400, description: 'Invalid query parameters', schema: aggregateErrorSchema },\n        { status: 401, description: 'Unauthorized', schema: aggregateErrorSchema },\n      ],\n    },\n  },\n}\n\nfunction readArrayParam(searchParams: URLSearchParams, key: string): string[] | null {\n  const all = searchParams.getAll(key)\n  if (!all.length) return null\n  const flat = all.flatMap((v) => v.split(','))\n  const trimmed = flat.map((s) => s.trim()).filter(Boolean)\n  return trimmed.length ? trimmed : null\n}\n\nfunction restrictToIds(where: string[], values: Array<string | number | null>, ids: string[]) {\n  if (ids.length === 0) {\n    where.push('id = ?')\n    values.push('00000000-0000-0000-0000-000000000000')\n    return\n  }\n  const placeholders = ids.map(() => '?').join(',')\n  where.push(`id IN (${placeholders})`)\n  values.push(...ids)\n}\n\nexport async function GET(req: Request) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.tenantId || !auth.orgId) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n\n  const url = new URL(req.url)\n  const params = url.searchParams\n  const parsed = querySchema.safeParse({\n    pipelineId: params.get('pipelineId') ?? undefined,\n    search: params.get('search') ?? undefined,\n    status: readArrayParam(params, 'status') ?? undefined,\n    ownerUserId: readArrayParam(params, 'ownerUserId') ?? undefined,\n    personId: readArrayParam(params, 'personId') ?? undefined,\n    companyId: readArrayParam(params, 'companyId') ?? undefined,\n    isStuck: params.get('isStuck') ?? undefined,\n    isOverdue: params.get('isOverdue') ?? undefined,\n    expectedCloseAtFrom: params.get('expectedCloseAtFrom') ?? undefined,\n    expectedCloseAtTo: params.get('expectedCloseAtTo') ?? undefined,\n  })\n  if (!parsed.success) {\n    return NextResponse.json({ error: 'Invalid query parameters' }, { status: 400 })\n  }\n\n  const container = await createRequestContainer()\n  const em = container.resolve<CoreEntityManager>('em')\n\n  // Resolve organization scope from the request so multi-org operators can aggregate\n  // deals for any org their RBAC scope permits (matching the deal detail route at\n  // [id]/route.ts:360). Falls back to `auth.orgId` when no scope cookie is set or\n  // when rbacService cannot be resolved (e.g. in unit tests with a minimal container).\n  const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n  const effectiveTenantId = scope.tenantId ?? auth.tenantId\n  const orgFilterIds = Array.isArray(scope.filterIds) && scope.filterIds.length > 0\n    ? scope.filterIds.filter((id) => typeof id === 'string' && id.length > 0)\n    : auth.orgId\n      ? [auth.orgId]\n      : []\n  if (!effectiveTenantId || orgFilterIds.length === 0) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n\n  // Raw SQL is used here intentionally \u2014 the route only projects non-encrypted columns\n  // (`pipeline_stage_id`, `value_amount`, `value_currency`, `status`, plus filters). It\n  // avoids the per-row decryption cost that would be paid by `findWithDecryption` for an\n  // aggregate that never reads `title`/`description`. The search path still relies on\n  // the token index above to find matching deals when encrypted columns are involved.\n  const baseCurrency = await em.getConnection().execute<Array<{ code: string }>>(\n    `SELECT code FROM currencies WHERE tenant_id = ? AND organization_id = ? AND is_base = true AND deleted_at IS NULL LIMIT 1`,\n    [effectiveTenantId, orgFilterIds[0]],\n  )\n  const baseCurrencyCode = baseCurrency[0]?.code ?? null\n\n  // Build WHERE clause shared between count + sum queries\n  const orgPlaceholders = orgFilterIds.map(() => '?').join(',')\n  const where: string[] = [\n    'tenant_id = ?',\n    `organization_id IN (${orgPlaceholders})`,\n    'deleted_at IS NULL',\n  ]\n  const values: Array<string | number | null> = [effectiveTenantId, ...orgFilterIds]\n\n  if (parsed.data.pipelineId) {\n    where.push('pipeline_id = ?')\n    values.push(parsed.data.pipelineId)\n  }\n  const search = parsed.data.search?.trim()\n  if (search) {\n    const searchCtx: CrudCtx = {\n      container,\n      auth,\n      organizationScope: scope,\n      selectedOrganizationId: orgFilterIds[0],\n      organizationIds: orgFilterIds,\n      request: req,\n    }\n    const matchingIds = await findMatchingEntityIdsBySearchTokensAcrossSources({\n      ctx: searchCtx,\n      query: search,\n      sources: [\n        {\n          entityType: E.customers.customer_deal,\n          fields: [\n            'title',\n            'description',\n            'status',\n            'pipeline_stage',\n            'source',\n            'value_amount',\n            'value_currency',\n            'cf:competitive_risk',\n            'cf:implementation_complexity',\n          ],\n        },\n      ],\n    })\n    if (matchingIds !== null && matchingIds.length > 0) {\n      restrictToIds(where, values, matchingIds)\n    } else if (isTenantDataEncryptionEnabled()) {\n      // `customers:customer_deal.title` and `.description` are declared in\n      // `encryption.ts` as encrypted columns. A raw `ILIKE` over the ciphertext would\n      // silently match nothing on encrypted tenants and produce misleading lane totals,\n      // so we collapse the result to zero rows instead \u2014 consistent with the list\n      // endpoint's behavior when the token index has nothing to offer.\n      restrictToIds(where, values, [])\n    } else {\n      const searchPattern = `%${escapeLikePattern(search)}%`\n      where.push(\"(title ILIKE ? ESCAPE '\\\\' OR description ILIKE ? ESCAPE '\\\\')\")\n      values.push(searchPattern, searchPattern)\n    }\n  }\n  if (parsed.data.status && parsed.data.status.length) {\n    const placeholders = parsed.data.status.map(() => '?').join(',')\n    where.push(`status IN (${placeholders})`)\n    values.push(...parsed.data.status)\n  }\n  if (parsed.data.ownerUserId && parsed.data.ownerUserId.length) {\n    const placeholders = parsed.data.ownerUserId.map(() => '?').join(',')\n    where.push(`owner_user_id IN (${placeholders})`)\n    values.push(...parsed.data.ownerUserId)\n  }\n  if (parsed.data.expectedCloseAtFrom) {\n    where.push('expected_close_at >= ?')\n    values.push(parsed.data.expectedCloseAtFrom)\n  }\n  if (parsed.data.expectedCloseAtTo) {\n    where.push('expected_close_at <= ?')\n    values.push(parsed.data.expectedCloseAtTo)\n  }\n  if (parsed.data.isOverdue) {\n    where.push(\"expected_close_at < CURRENT_DATE AND status = 'open'\")\n  }\n  if (parsed.data.isStuck) {\n    // Reuse the list endpoint's stuck-deal lookup so kanban headers, lane counts, and the\n    // cards rendered inside each lane agree on the same definition of \"stuck\". Empty result\n    // \u2192 narrow to a sentinel UUID so the WHERE clause collapses to zero rows.\n    const stuckIds = await fetchStuckDealIds(em as unknown as PgEntityManager, orgFilterIds[0], effectiveTenantId)\n    restrictToIds(where, values, stuckIds)\n  }\n  if (parsed.data.personId && parsed.data.personId.length) {\n    const placeholders = parsed.data.personId.map(() => '?').join(',')\n    where.push(`EXISTS (SELECT 1 FROM customer_deal_people dp WHERE dp.deal_id = customer_deals.id AND dp.person_entity_id IN (${placeholders}))`)\n    values.push(...parsed.data.personId)\n  }\n  if (parsed.data.companyId && parsed.data.companyId.length) {\n    const placeholders = parsed.data.companyId.map(() => '?').join(',')\n    where.push(`EXISTS (SELECT 1 FROM customer_deal_companies dc WHERE dc.deal_id = customer_deals.id AND dc.company_entity_id IN (${placeholders}))`)\n    values.push(...parsed.data.companyId)\n  }\n\n  const whereSql = where.join(' AND ')\n\n  // Aggregate by (stage, currency). Treat null stage as the literal `__unassigned`.\n  const rows = await em.getConnection().execute<\n    Array<{\n      stage_id: string | null\n      currency: string | null\n      total: string | number | null\n      count: string | number\n      open_count: string | number\n    }>\n  >(\n    `SELECT\n        pipeline_stage_id AS stage_id,\n        UPPER(COALESCE(value_currency, '')) AS currency,\n        COALESCE(SUM(value_amount), 0) AS total,\n        COUNT(*) AS count,\n        COUNT(*) FILTER (WHERE status = 'open') AS open_count\n      FROM customer_deals\n      WHERE ${whereSql}\n      GROUP BY pipeline_stage_id, UPPER(COALESCE(value_currency, ''))`,\n    values,\n  )\n\n  // Reduce to per-stage aggregates\n  const stageMap = new Map<string, StageAggregate>()\n  for (const row of rows) {\n    const stageId = row.stage_id ?? '__unassigned'\n    const total = Number(row.total ?? 0)\n    const count = Number(row.count ?? 0)\n    const openCount = Number(row.open_count ?? 0)\n    const currency = (row.currency ?? '').toString().trim()\n\n    if (!stageMap.has(stageId)) {\n      stageMap.set(stageId, {\n        stageId,\n        count: 0,\n        openCount: 0,\n        totalInBaseCurrency: 0,\n        byCurrency: [],\n        convertedAll: true,\n        missingRateCurrencies: [],\n      })\n    }\n    const agg = stageMap.get(stageId)!\n    agg.count += count\n    agg.openCount += openCount\n    // Include any row that has a real currency code, even when its summed amount is\n    // zero \u2014 `byCurrency` should agree with `count` so the per-currency breakdown\n    // doesn't silently drop deals whose amount happens to be zero. Rows with no\n    // currency code at all still get folded into the stage totals via `count`.\n    if (currency.length > 0) {\n      agg.byCurrency.push({ currency, total, count })\n    }\n  }\n\n  // Convert to base currency where possible\n  if (baseCurrencyCode) {\n    const exchange = container.resolve('exchangeRateService') as ExchangeRateService | undefined\n    const today = new Date()\n    const distinctCurrencies = new Set<string>()\n    for (const agg of stageMap.values()) {\n      for (const row of agg.byCurrency) {\n        if (row.currency && row.currency !== baseCurrencyCode) {\n          distinctCurrencies.add(row.currency)\n        }\n      }\n    }\n\n    const rateCache = new Map<string, number>()\n    if (exchange && distinctCurrencies.size > 0) {\n      const pairs = Array.from(distinctCurrencies).map((c) => ({\n        fromCurrencyCode: c,\n        toCurrencyCode: baseCurrencyCode,\n      }))\n      try {\n        const results = await exchange.getRates({\n          pairs,\n          date: today,\n          scope: { tenantId: effectiveTenantId, organizationId: orgFilterIds[0] },\n          options: { maxDaysBack: 60, autoFetch: false },\n        })\n        for (const [key, rateResult] of results) {\n          if (rateResult.rates.length > 0) {\n            // Pick the first matching rate (sources are equivalent for display purposes)\n            const rate = Number(rateResult.rates[0].rate)\n            if (Number.isFinite(rate) && rate > 0) {\n              rateCache.set(key, rate)\n            }\n          }\n        }\n      } catch (err) {\n        // Swallow \u2014 partial totals are still useful and we'll fall back to currency-native\n        // sums. Logging at warn level so operators can correlate missing-rate disclosures in\n        // the UI (`convertedAll: false` / `missingRateCurrencies`) with the underlying error.\n        logger.warn('exchange-rate lookup failed; falling back to per-currency totals', { component: 'deals.aggregate', err })\n      }\n    }\n\n    for (const agg of stageMap.values()) {\n      let totalBase = 0\n      let convertedAll = true\n      const missingRateCurrencies: string[] = []\n      for (const row of agg.byCurrency) {\n        if (!row.currency) continue\n        if (row.currency === baseCurrencyCode) {\n          totalBase += row.total\n          continue\n        }\n        const key = `${row.currency}/${baseCurrencyCode}`\n        const rate = rateCache.get(key)\n        if (rate !== undefined) {\n          totalBase += row.total * rate\n        } else {\n          convertedAll = false\n          if (!missingRateCurrencies.includes(row.currency)) {\n            missingRateCurrencies.push(row.currency)\n          }\n        }\n      }\n      // Even when some rates are missing, totalInBaseCurrency reflects the converted slice.\n      // `convertedAll`/`missingRateCurrencies` let the client distinguish a complete\n      // conversion from a partial one and disclose which currencies were excluded.\n      agg.totalInBaseCurrency = Math.round(totalBase)\n      agg.convertedAll = convertedAll\n      agg.missingRateCurrencies = missingRateCurrencies\n    }\n  } else {\n    // No base currency configured for the tenant \u2014 surface this by marking every stage as\n    // \"not converted\" with all currencies flagged as missing rates. This way the client UI\n    // can fall back to a per-currency breakdown without trying to render a board total.\n    for (const agg of stageMap.values()) {\n      const present = agg.byCurrency.map((row) => row.currency).filter((c): c is string => !!c)\n      if (present.length > 0) {\n        agg.convertedAll = false\n        agg.missingRateCurrencies = Array.from(new Set(present))\n      }\n    }\n  }\n\n  // Sort byCurrency rows by total descending for stable display\n  for (const agg of stageMap.values()) {\n    agg.byCurrency.sort((a, b) => b.total - a.total)\n  }\n\n  const response: AggregateResponse = {\n    baseCurrencyCode,\n    perStage: Array.from(stageMap.values()),\n  }\n\n  return NextResponse.json(response)\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAGlB,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AACvC,SAAS,0CAA0C;AAEnD,SAAS,+BAA+B;AACxC,SAAS,yBAAyB;AAElC,SAAS,qCAAqC;AAE9C,SAAS,yBAAyB;AAClC,SAAS,wDAAwD;AACjE,SAAS,SAAS;AAClB,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,WAAW;AAEhC,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,sBAAsB,EAAE;AACtE;AAEA,MAAM,cAAc,EAAE,OAAO;AAAA,EAC3B,YAAY,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACvC,QAAQ,EAAE,OAAO,EAAE,SAAS;AAAA,EAC5B,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,QAAQ,UAAU,OAAO,OAAO,CAAC,CAAC,EAAE,SAAS;AAAA,EACrE,aAAa,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,SAAS;AAAA,EACjD,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,SAAS;AAAA,EAC9C,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,SAAS;AAAA,EAC/C,SAAS,EAAE,WAAW,CAAC,UAAU;AAC/B,UAAM,SAAS,wBAAwB,KAAK;AAC5C,WAAO,WAAW,OAAO,QAAQ;AAAA,EACnC,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS;AAAA,EACzB,WAAW,EAAE,WAAW,CAAC,UAAU;AACjC,UAAM,SAAS,wBAAwB,KAAK;AAC5C,WAAO,WAAW,OAAO,QAAQ;AAAA,EACnC,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS;AAAA,EACzB,qBAAqB,EAAE,OAAO,EAAE,SAAS;AAAA,EACzC,mBAAmB,EAAE,OAAO,EAAE,SAAS;AACzC,CAAC;AAkCD,MAAM,iCAAiC,EAAE,OAAO;AAAA,EAC9C,UAAU,EAAE,OAAO;AAAA,EACnB,OAAO,EAAE,OAAO;AAAA,EAChB,OAAO,EAAE,OAAO;AAClB,CAAC;AAED,MAAM,uBAAuB,EAAE,OAAO;AAAA,EACpC,SAAS,EAAE,OAAO;AAAA,EAClB,OAAO,EAAE,OAAO;AAAA,EAChB,WAAW,EAAE,OAAO;AAAA,EACpB,qBAAqB,EAAE,OAAO;AAAA,EAC9B,YAAY,EAAE,MAAM,8BAA8B;AAAA,EAClD,cAAc,EAAE,QAAQ;AAAA,EACxB,uBAAuB,EAAE,MAAM,EAAE,OAAO,CAAC;AAC3C,CAAC;AAED,MAAM,0BAA0B,EAAE,OAAO;AAAA,EACvC,kBAAkB,EAAE,OAAO,EAAE,SAAS;AAAA,EACtC,UAAU,EAAE,MAAM,oBAAoB;AACxC,CAAC;AAED,MAAM,uBAAuB,EAAE,OAAO;AAAA,EACpC,OAAO,EAAE,OAAO;AAClB,CAAC;AAEM,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aACE;AAAA,MACF,OAAO;AAAA,MACP,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,+BAA+B,QAAQ,wBAAwB;AAAA,MAC7F;AAAA,MACA,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,4BAA4B,QAAQ,qBAAqB;AAAA,QACrF,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,qBAAqB;AAAA,MAC3E;AAAA,IACF;AAAA,EACF;AACF;AAEA,SAAS,eAAe,cAA+B,KAA8B;AACnF,QAAM,MAAM,aAAa,OAAO,GAAG;AACnC,MAAI,CAAC,IAAI,OAAQ,QAAO;AACxB,QAAM,OAAO,IAAI,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,CAAC;AAC5C,QAAM,UAAU,KAAK,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,OAAO;AACxD,SAAO,QAAQ,SAAS,UAAU;AACpC;AAEA,SAAS,cAAc,OAAiB,QAAuC,KAAe;AAC5F,MAAI,IAAI,WAAW,GAAG;AACpB,UAAM,KAAK,QAAQ;AACnB,WAAO,KAAK,sCAAsC;AAClD;AAAA,EACF;AACA,QAAM,eAAe,IAAI,IAAI,MAAM,GAAG,EAAE,KAAK,GAAG;AAChD,QAAM,KAAK,UAAU,YAAY,GAAG;AACpC,SAAO,KAAK,GAAG,GAAG;AACpB;AAEA,eAAsB,IAAI,KAAc;AACtC,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,YAAY,CAAC,KAAK,OAAO;AAClC,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAEA,QAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,QAAM,SAAS,IAAI;AACnB,QAAM,SAAS,YAAY,UAAU;AAAA,IACnC,YAAY,OAAO,IAAI,YAAY,KAAK;AAAA,IACxC,QAAQ,OAAO,IAAI,QAAQ,KAAK;AAAA,IAChC,QAAQ,eAAe,QAAQ,QAAQ,KAAK;AAAA,IAC5C,aAAa,eAAe,QAAQ,aAAa,KAAK;AAAA,IACtD,UAAU,eAAe,QAAQ,UAAU,KAAK;AAAA,IAChD,WAAW,eAAe,QAAQ,WAAW,KAAK;AAAA,IAClD,SAAS,OAAO,IAAI,SAAS,KAAK;AAAA,IAClC,WAAW,OAAO,IAAI,WAAW,KAAK;AAAA,IACtC,qBAAqB,OAAO,IAAI,qBAAqB,KAAK;AAAA,IAC1D,mBAAmB,OAAO,IAAI,mBAAmB,KAAK;AAAA,EACxD,CAAC;AACD,MAAI,CAAC,OAAO,SAAS;AACnB,WAAO,aAAa,KAAK,EAAE,OAAO,2BAA2B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACjF;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,KAAK,UAAU,QAA2B,IAAI;AAMpD,QAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AACxF,QAAM,oBAAoB,MAAM,YAAY,KAAK;AACjD,QAAM,eAAe,MAAM,QAAQ,MAAM,SAAS,KAAK,MAAM,UAAU,SAAS,IAC5E,MAAM,UAAU,OAAO,CAAC,OAAO,OAAO,OAAO,YAAY,GAAG,SAAS,CAAC,IACtE,KAAK,QACH,CAAC,KAAK,KAAK,IACX,CAAC;AACP,MAAI,CAAC,qBAAqB,aAAa,WAAW,GAAG;AACnD,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAOA,QAAM,eAAe,MAAM,GAAG,cAAc,EAAE;AAAA,IAC5C;AAAA,IACA,CAAC,mBAAmB,aAAa,CAAC,CAAC;AAAA,EACrC;AACA,QAAM,mBAAmB,aAAa,CAAC,GAAG,QAAQ;AAGlD,QAAM,kBAAkB,aAAa,IAAI,MAAM,GAAG,EAAE,KAAK,GAAG;AAC5D,QAAM,QAAkB;AAAA,IACtB;AAAA,IACA,uBAAuB,eAAe;AAAA,IACtC;AAAA,EACF;AACA,QAAM,SAAwC,CAAC,mBAAmB,GAAG,YAAY;AAEjF,MAAI,OAAO,KAAK,YAAY;AAC1B,UAAM,KAAK,iBAAiB;AAC5B,WAAO,KAAK,OAAO,KAAK,UAAU;AAAA,EACpC;AACA,QAAM,SAAS,OAAO,KAAK,QAAQ,KAAK;AACxC,MAAI,QAAQ;AACV,UAAM,YAAqB;AAAA,MACzB;AAAA,MACA;AAAA,MACA,mBAAmB;AAAA,MACnB,wBAAwB,aAAa,CAAC;AAAA,MACtC,iBAAiB;AAAA,MACjB,SAAS;AAAA,IACX;AACA,UAAM,cAAc,MAAM,iDAAiD;AAAA,MACzE,KAAK;AAAA,MACL,OAAO;AAAA,MACP,SAAS;AAAA,QACP;AAAA,UACE,YAAY,EAAE,UAAU;AAAA,UACxB,QAAQ;AAAA,YACN;AAAA,YACA;AAAA,YACA;AAAA,YACA;AAAA,YACA;AAAA,YACA;AAAA,YACA;AAAA,YACA;AAAA,YACA;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,IACF,CAAC;AACD,QAAI,gBAAgB,QAAQ,YAAY,SAAS,GAAG;AAClD,oBAAc,OAAO,QAAQ,WAAW;AAAA,IAC1C,WAAW,8BAA8B,GAAG;AAM1C,oBAAc,OAAO,QAAQ,CAAC,CAAC;AAAA,IACjC,OAAO;AACL,YAAM,gBAAgB,IAAI,kBAAkB,MAAM,CAAC;AACnD,YAAM,KAAK,gEAAgE;AAC3E,aAAO,KAAK,eAAe,aAAa;AAAA,IAC1C;AAAA,EACF;AACA,MAAI,OAAO,KAAK,UAAU,OAAO,KAAK,OAAO,QAAQ;AACnD,UAAM,eAAe,OAAO,KAAK,OAAO,IAAI,MAAM,GAAG,EAAE,KAAK,GAAG;AAC/D,UAAM,KAAK,cAAc,YAAY,GAAG;AACxC,WAAO,KAAK,GAAG,OAAO,KAAK,MAAM;AAAA,EACnC;AACA,MAAI,OAAO,KAAK,eAAe,OAAO,KAAK,YAAY,QAAQ;AAC7D,UAAM,eAAe,OAAO,KAAK,YAAY,IAAI,MAAM,GAAG,EAAE,KAAK,GAAG;AACpE,UAAM,KAAK,qBAAqB,YAAY,GAAG;AAC/C,WAAO,KAAK,GAAG,OAAO,KAAK,WAAW;AAAA,EACxC;AACA,MAAI,OAAO,KAAK,qBAAqB;AACnC,UAAM,KAAK,wBAAwB;AACnC,WAAO,KAAK,OAAO,KAAK,mBAAmB;AAAA,EAC7C;AACA,MAAI,OAAO,KAAK,mBAAmB;AACjC,UAAM,KAAK,wBAAwB;AACnC,WAAO,KAAK,OAAO,KAAK,iBAAiB;AAAA,EAC3C;AACA,MAAI,OAAO,KAAK,WAAW;AACzB,UAAM,KAAK,sDAAsD;AAAA,EACnE;AACA,MAAI,OAAO,KAAK,SAAS;AAIvB,UAAM,WAAW,MAAM,kBAAkB,IAAkC,aAAa,CAAC,GAAG,iBAAiB;AAC7G,kBAAc,OAAO,QAAQ,QAAQ;AAAA,EACvC;AACA,MAAI,OAAO,KAAK,YAAY,OAAO,KAAK,SAAS,QAAQ;AACvD,UAAM,eAAe,OAAO,KAAK,SAAS,IAAI,MAAM,GAAG,EAAE,KAAK,GAAG;AACjE,UAAM,KAAK,kHAAkH,YAAY,IAAI;AAC7I,WAAO,KAAK,GAAG,OAAO,KAAK,QAAQ;AAAA,EACrC;AACA,MAAI,OAAO,KAAK,aAAa,OAAO,KAAK,UAAU,QAAQ;AACzD,UAAM,eAAe,OAAO,KAAK,UAAU,IAAI,MAAM,GAAG,EAAE,KAAK,GAAG;AAClE,UAAM,KAAK,sHAAsH,YAAY,IAAI;AACjJ,WAAO,KAAK,GAAG,OAAO,KAAK,SAAS;AAAA,EACtC;AAEA,QAAM,WAAW,MAAM,KAAK,OAAO;AAGnC,QAAM,OAAO,MAAM,GAAG,cAAc,EAAE;AAAA,IASpC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,cAOU,QAAQ;AAAA;AAAA,IAElB;AAAA,EACF;AAGA,QAAM,WAAW,oBAAI,IAA4B;AACjD,aAAW,OAAO,MAAM;AACtB,UAAM,UAAU,IAAI,YAAY;AAChC,UAAM,QAAQ,OAAO,IAAI,SAAS,CAAC;AACnC,UAAM,QAAQ,OAAO,IAAI,SAAS,CAAC;AACnC,UAAM,YAAY,OAAO,IAAI,cAAc,CAAC;AAC5C,UAAM,YAAY,IAAI,YAAY,IAAI,SAAS,EAAE,KAAK;AAEtD,QAAI,CAAC,SAAS,IAAI,OAAO,GAAG;AAC1B,eAAS,IAAI,SAAS;AAAA,QACpB;AAAA,QACA,OAAO;AAAA,QACP,WAAW;AAAA,QACX,qBAAqB;AAAA,QACrB,YAAY,CAAC;AAAA,QACb,cAAc;AAAA,QACd,uBAAuB,CAAC;AAAA,MAC1B,CAAC;AAAA,IACH;AACA,UAAM,MAAM,SAAS,IAAI,OAAO;AAChC,QAAI,SAAS;AACb,QAAI,aAAa;AAKjB,QAAI,SAAS,SAAS,GAAG;AACvB,UAAI,WAAW,KAAK,EAAE,UAAU,OAAO,MAAM,CAAC;AAAA,IAChD;AAAA,EACF;AAGA,MAAI,kBAAkB;AACpB,UAAM,WAAW,UAAU,QAAQ,qBAAqB;AACxD,UAAM,QAAQ,oBAAI,KAAK;AACvB,UAAM,qBAAqB,oBAAI,IAAY;AAC3C,eAAW,OAAO,SAAS,OAAO,GAAG;AACnC,iBAAW,OAAO,IAAI,YAAY;AAChC,YAAI,IAAI,YAAY,IAAI,aAAa,kBAAkB;AACrD,6BAAmB,IAAI,IAAI,QAAQ;AAAA,QACrC;AAAA,MACF;AAAA,IACF;AAEA,UAAM,YAAY,oBAAI,IAAoB;AAC1C,QAAI,YAAY,mBAAmB,OAAO,GAAG;AAC3C,YAAM,QAAQ,MAAM,KAAK,kBAAkB,EAAE,IAAI,CAAC,OAAO;AAAA,QACvD,kBAAkB;AAAA,QAClB,gBAAgB;AAAA,MAClB,EAAE;AACF,UAAI;AACF,cAAM,UAAU,MAAM,SAAS,SAAS;AAAA,UACtC;AAAA,UACA,MAAM;AAAA,UACN,OAAO,EAAE,UAAU,mBAAmB,gBAAgB,aAAa,CAAC,EAAE;AAAA,UACtE,SAAS,EAAE,aAAa,IAAI,WAAW,MAAM;AAAA,QAC/C,CAAC;AACD,mBAAW,CAAC,KAAK,UAAU,KAAK,SAAS;AACvC,cAAI,WAAW,MAAM,SAAS,GAAG;AAE/B,kBAAM,OAAO,OAAO,WAAW,MAAM,CAAC,EAAE,IAAI;AAC5C,gBAAI,OAAO,SAAS,IAAI,KAAK,OAAO,GAAG;AACrC,wBAAU,IAAI,KAAK,IAAI;AAAA,YACzB;AAAA,UACF;AAAA,QACF;AAAA,MACF,SAAS,KAAK;AAIZ,eAAO,KAAK,oEAAoE,EAAE,WAAW,mBAAmB,IAAI,CAAC;AAAA,MACvH;AAAA,IACF;AAEA,eAAW,OAAO,SAAS,OAAO,GAAG;AACnC,UAAI,YAAY;AAChB,UAAI,eAAe;AACnB,YAAM,wBAAkC,CAAC;AACzC,iBAAW,OAAO,IAAI,YAAY;AAChC,YAAI,CAAC,IAAI,SAAU;AACnB,YAAI,IAAI,aAAa,kBAAkB;AACrC,uBAAa,IAAI;AACjB;AAAA,QACF;AACA,cAAM,MAAM,GAAG,IAAI,QAAQ,IAAI,gBAAgB;AAC/C,cAAM,OAAO,UAAU,IAAI,GAAG;AAC9B,YAAI,SAAS,QAAW;AACtB,uBAAa,IAAI,QAAQ;AAAA,QAC3B,OAAO;AACL,yBAAe;AACf,cAAI,CAAC,sBAAsB,SAAS,IAAI,QAAQ,GAAG;AACjD,kCAAsB,KAAK,IAAI,QAAQ;AAAA,UACzC;AAAA,QACF;AAAA,MACF;AAIA,UAAI,sBAAsB,KAAK,MAAM,SAAS;AAC9C,UAAI,eAAe;AACnB,UAAI,wBAAwB;AAAA,IAC9B;AAAA,EACF,OAAO;AAIL,eAAW,OAAO,SAAS,OAAO,GAAG;AACnC,YAAM,UAAU,IAAI,WAAW,IAAI,CAAC,QAAQ,IAAI,QAAQ,EAAE,OAAO,CAAC,MAAmB,CAAC,CAAC,CAAC;AACxF,UAAI,QAAQ,SAAS,GAAG;AACtB,YAAI,eAAe;AACnB,YAAI,wBAAwB,MAAM,KAAK,IAAI,IAAI,OAAO,CAAC;AAAA,MACzD;AAAA,IACF;AAAA,EACF;AAGA,aAAW,OAAO,SAAS,OAAO,GAAG;AACnC,QAAI,WAAW,KAAK,CAAC,GAAG,MAAM,EAAE,QAAQ,EAAE,KAAK;AAAA,EACjD;AAEA,QAAM,WAA8B;AAAA,IAClC;AAAA,IACA,UAAU,MAAM,KAAK,SAAS,OAAO,CAAC;AAAA,EACxC;AAEA,SAAO,aAAa,KAAK,QAAQ;AACnC;",
   "names": []
 }

package/dist/modules/customers/api/deals/bulk-update-owner/route.js

@@ -15,6 +15,8 @@ import {
   dealsBulkUpdateOwnerSchema as requestSchema,
   dealsBulkUpdateResponseSchema as responseSchema
 } from "../../../data/validators.js";
+import { createLogger } from "@open-mercato/shared/lib/logger";
+const logger = createLogger("customers");
 const metadata = {
   POST: { requireAuth: true, requireFeatures: ["customers.deals.manage"] }
 };
@@ -62,7 +64,7 @@ async function postImpl(req, translate) {
       mutationPayload: { ids, ownerUserId: parsed.data.ownerUserId }
     });
   } catch (guardError) {
-    console.warn("[customers.deals.bulk-update-owner] mutation-guard skipped", guardError);
+    logger.warn("mutation-guard skipped", { component: "deals.bulk-update-owner", err: guardError });
     guardResult = null;
   }
   if (guardResult && !guardResult.ok) {
@@ -72,7 +74,7 @@ async function postImpl(req, translate) {
   try {
     progressService = container.resolve("progressService");
   } catch (resolveError) {
-    console.error("[customers.deals.bulk-update-owner] progressService resolve failed", resolveError);
+    logger.error("progressService resolve failed", { component: "deals.bulk-update-owner", err: resolveError });
     throw new Error(
       `progressService resolve failed: ${resolveError instanceof Error ? resolveError.message : String(resolveError)}`
     );
@@ -105,7 +107,7 @@ async function postImpl(req, translate) {
       }
     );
   } catch (createError) {
-    console.error("[customers.deals.bulk-update-owner] progressService.createJob failed", createError);
+    logger.error("progressService.createJob failed", { component: "deals.bulk-update-owner", err: createError });
     throw new Error(
       `progressService.createJob failed: ${createError instanceof Error ? createError.message : String(createError)}`
     );
@@ -134,7 +136,7 @@ async function postImpl(req, translate) {
         userId: auth.sub
       }
     ).catch((failErr) => {
-      console.warn("[customers.deals.bulk-update-owner] failed to mark progress job as failed", failErr);
+      logger.warn("failed to mark progress job as failed", { component: "deals.bulk-update-owner", err: failErr });
     });
     throw error;
   }
@@ -169,7 +171,7 @@ async function POST(req) {
   try {
     return await postImpl(req, translate);
   } catch (error) {
-    console.error("[customers.deals.bulk-update-owner] route failed", error);
+    logger.error("route failed", { component: "deals.bulk-update-owner", err: error });
     return NextResponse.json(
       responseSchema.parse({
         ok: false,

package/dist/modules/customers/api/deals/bulk-update-owner/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../src/modules/customers/api/deals/bulk-update-owner/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { readJsonSafe } from '@open-mercato/shared/lib/http/readJsonSafe'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport type { TranslateWithFallbackFn } from '@open-mercato/shared/lib/i18n/translate'\nimport {\n  runCrudMutationGuardAfterSuccess,\n  validateCrudMutationGuard,\n} from '@open-mercato/shared/lib/crud/mutation-guard'\nimport type { ProgressService } from '../../../../progress/lib/progressService'\nimport {\n  CUSTOMERS_DEALS_BULK_UPDATE_OWNER_QUEUE,\n  getCustomersQueue,\n} from '../../../lib/bulkDeals'\nimport {\n  dealsBulkUpdateOwnerSchema as requestSchema,\n  dealsBulkUpdateResponseSchema as responseSchema,\n} from '../../../data/validators'\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: ['customers.deals.manage'] },\n}\n\nexport const openApi = {\n  tags: ['Customers'],\n  summary: 'Bulk reassign deal owner',\n  description:\n    'Queues a background job that reassigns the listed deals to a new owner (or clears the owner when null).',\n}\n\nasync function postImpl(req: Request, translate: TranslateWithFallbackFn): Promise<NextResponse> {\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.tenantId || !auth.orgId) {\n    return NextResponse.json(\n      responseSchema.parse({\n        ok: false,\n        progressJobId: null,\n        message: translate('customers.errors.unauthorized', 'Unauthorized'),\n      }),\n      { status: 401 },\n    )\n  }\n\n  const parsed = requestSchema.safeParse(await readJsonSafe(req))\n  if (!parsed.success) {\n    return NextResponse.json(\n      responseSchema.parse({\n        ok: false,\n        progressJobId: null,\n        message: translate('customers.errors.invalid_payload', 'Invalid payload'),\n      }),\n      { status: 400 },\n    )\n  }\n\n  const ids = Array.from(new Set(parsed.data.ids))\n  const container = await createRequestContainer()\n\n  // Mutation-guard contract for custom write routes \u2014 see comment on bulk-update-stage\n  // route for full rationale. Per-record locks are enforced inside the worker (per id).\n  // The guard at the bulk-entry point is best-effort: failures (e.g. a guard that\n  // expects a single-record id, or transient lock-table errors) must NOT take the whole\n  // bulk enqueue down \u2014 swallow so the bulk job still gets queued.\n  let guardResult: Awaited<ReturnType<typeof validateCrudMutationGuard>> = null\n  try {\n    guardResult = await validateCrudMutationGuard(container, {\n      tenantId: auth.tenantId,\n      organizationId: auth.orgId,\n      userId: auth.sub,\n      resourceKind: 'customers.deal',\n      resourceId: ids.join(','),\n      operation: 'custom',\n      requestMethod: req.method,\n      requestHeaders: req.headers,\n      mutationPayload: { ids, ownerUserId: parsed.data.ownerUserId },\n    })\n  } catch (guardError) {\n    console.warn('[customers.deals.bulk-update-owner] mutation-guard skipped', guardError)\n    guardResult = null\n  }\n  if (guardResult && !guardResult.ok) {\n    return NextResponse.json(guardResult.body, { status: guardResult.status })\n  }\n\n  let progressService: ProgressService\n  try {\n    progressService = container.resolve('progressService') as ProgressService\n  } catch (resolveError) {\n    console.error('[customers.deals.bulk-update-owner] progressService resolve failed', resolveError)\n    throw new Error(\n      `progressService resolve failed: ${resolveError instanceof Error ? resolveError.message : String(resolveError)}`,\n    )\n  }\n\n  let progressJob: Awaited<ReturnType<ProgressService['createJob']>>\n  try {\n    progressJob = await progressService.createJob(\n      {\n        jobType: 'customers.deals.bulk_update_owner',\n        name: translate(\n          'customers.deals.kanban.bulk.changeOwner.progress.name',\n          'Reassign selected deals to a new owner',\n        ),\n        description: translate(\n          'customers.deals.kanban.bulk.changeOwner.progress.description',\n          '{count} deals queued for owner reassignment',\n          { count: ids.length },\n        ),\n        totalCount: ids.length,\n        cancellable: false,\n        meta: {\n          source: 'customers.deals.bulk-update-owner',\n          ownerUserId: parsed.data.ownerUserId,\n        },\n      },\n      {\n        tenantId: auth.tenantId,\n        organizationId: auth.orgId,\n        userId: auth.sub,\n      },\n    )\n  } catch (createError) {\n    console.error('[customers.deals.bulk-update-owner] progressService.createJob failed', createError)\n    throw new Error(\n      `progressService.createJob failed: ${createError instanceof Error ? createError.message : String(createError)}`,\n    )\n  }\n\n  const queue = getCustomersQueue(CUSTOMERS_DEALS_BULK_UPDATE_OWNER_QUEUE)\n  try {\n    await queue.enqueue({\n      progressJobId: progressJob.id,\n      ids,\n      ownerUserId: parsed.data.ownerUserId,\n      scope: {\n        organizationId: auth.orgId,\n        tenantId: auth.tenantId,\n        userId: auth.sub,\n      },\n    })\n  } catch (error) {\n    // See bulk-update-stage route for rationale: without this guard the progress\n    // job hangs in `pending` because the worker will never pick it up after a\n    // failed enqueue, and the top-bar polls indefinitely.\n    await progressService\n      .failJob(\n        progressJob.id,\n        {\n          errorMessage:\n            error instanceof Error\n              ? error.message\n              : translate('customers.errors.bulk_enqueue_failed', 'Failed to enqueue bulk job'),\n        },\n        {\n          tenantId: auth.tenantId,\n          organizationId: auth.orgId,\n          userId: auth.sub,\n        },\n      )\n      .catch((failErr) => {\n        console.warn('[customers.deals.bulk-update-owner] failed to mark progress job as failed', failErr)\n      })\n    throw error\n  }\n\n  // After-success half of the mutation-guard contract \u2014 see bulk-update-stage route.\n  if (guardResult?.ok && guardResult.shouldRunAfterSuccess) {\n    await runCrudMutationGuardAfterSuccess(container, {\n      tenantId: auth.tenantId,\n      organizationId: auth.orgId,\n      userId: auth.sub,\n      resourceKind: 'customers.deal',\n      resourceId: ids.join(','),\n      operation: 'custom',\n      requestMethod: req.method,\n      requestHeaders: req.headers,\n      metadata: guardResult.metadata ?? null,\n    })\n  }\n\n  return NextResponse.json(\n    responseSchema.parse({\n      ok: true,\n      progressJobId: progressJob.id,\n      message: translate(\n        'customers.deals.kanban.bulk.changeOwner.queued',\n        'Bulk owner update started ({count} deals).',\n        { count: ids.length },\n      ),\n    }),\n    { status: 202 },\n  )\n}\n\n// Outer wrapper: every uncaught error becomes a controlled JSON 500 instead of\n// Next.js's default HTML error page. See bulk-update-stage for the same rationale.\nexport async function POST(req: Request) {\n  const { translate } = await resolveTranslations()\n  try {\n    return await postImpl(req, translate)\n  } catch (error) {\n    console.error('[customers.deals.bulk-update-owner] route failed', error)\n    return NextResponse.json(\n      responseSchema.parse({\n        ok: false,\n        progressJobId: null,\n        message:\n          error instanceof Error\n            ? error.message\n            : translate('customers.errors.bulk_enqueue_failed', 'Failed to enqueue bulk job'),\n      }),\n      { status: 500 },\n    )\n  }\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AACvC,SAAS,oBAAoB;AAC7B,SAAS,2BAA2B;AAEpC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAEP;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE,8BAA8B;AAAA,EAC9B,iCAAiC;AAAA,OAC5B;AAEA,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,wBAAwB,EAAE;AACzE;AAEO,MAAM,UAAU;AAAA,EACrB,MAAM,CAAC,WAAW;AAAA,EAClB,SAAS;AAAA,EACT,aACE;AACJ;AAEA,eAAe,SAAS,KAAc,WAA2D;AAC/F,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,YAAY,CAAC,KAAK,OAAO;AAClC,WAAO,aAAa;AAAA,MAClB,eAAe,MAAM;AAAA,QACnB,IAAI;AAAA,QACJ,eAAe;AAAA,QACf,SAAS,UAAU,iCAAiC,cAAc;AAAA,MACpE,CAAC;AAAA,MACD,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AAEA,QAAM,SAAS,cAAc,UAAU,MAAM,aAAa,GAAG,CAAC;AAC9D,MAAI,CAAC,OAAO,SAAS;AACnB,WAAO,aAAa;AAAA,MAClB,eAAe,MAAM;AAAA,QACnB,IAAI;AAAA,QACJ,eAAe;AAAA,QACf,SAAS,UAAU,oCAAoC,iBAAiB;AAAA,MAC1E,CAAC;AAAA,MACD,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AAEA,QAAM,MAAM,MAAM,KAAK,IAAI,IAAI,OAAO,KAAK,GAAG,CAAC;AAC/C,QAAM,YAAY,MAAM,uBAAuB;AAO/C,MAAI,cAAqE;AACzE,MAAI;AACF,kBAAc,MAAM,0BAA0B,WAAW;AAAA,MACvD,UAAU,KAAK;AAAA,MACf,gBAAgB,KAAK;AAAA,MACrB,QAAQ,KAAK;AAAA,MACb,cAAc;AAAA,MACd,YAAY,IAAI,KAAK,GAAG;AAAA,MACxB,WAAW;AAAA,MACX,eAAe,IAAI;AAAA,MACnB,gBAAgB,IAAI;AAAA,MACpB,iBAAiB,EAAE,KAAK,aAAa,OAAO,KAAK,YAAY;AAAA,IAC/D,CAAC;AAAA,EACH,SAAS,YAAY;AACnB,YAAQ,KAAK,8DAA8D,UAAU;AACrF,kBAAc;AAAA,EAChB;AACA,MAAI,eAAe,CAAC,YAAY,IAAI;AAClC,WAAO,aAAa,KAAK,YAAY,MAAM,EAAE,QAAQ,YAAY,OAAO,CAAC;AAAA,EAC3E;AAEA,MAAI;AACJ,MAAI;AACF,sBAAkB,UAAU,QAAQ,iBAAiB;AAAA,EACvD,SAAS,cAAc;AACrB,YAAQ,MAAM,sEAAsE,YAAY;AAChG,UAAM,IAAI;AAAA,MACR,mCAAmC,wBAAwB,QAAQ,aAAa,UAAU,OAAO,YAAY,CAAC;AAAA,IAChH;AAAA,EACF;AAEA,MAAI;AACJ,MAAI;AACF,kBAAc,MAAM,gBAAgB;AAAA,MAClC;AAAA,QACE,SAAS;AAAA,QACT,MAAM;AAAA,UACJ;AAAA,UACA;AAAA,QACF;AAAA,QACA,aAAa;AAAA,UACX;AAAA,UACA;AAAA,UACA,EAAE,OAAO,IAAI,OAAO;AAAA,QACtB;AAAA,QACA,YAAY,IAAI;AAAA,QAChB,aAAa;AAAA,QACb,MAAM;AAAA,UACJ,QAAQ;AAAA,UACR,aAAa,OAAO,KAAK;AAAA,QAC3B;AAAA,MACF;AAAA,MACA;AAAA,QACE,UAAU,KAAK;AAAA,QACf,gBAAgB,KAAK;AAAA,QACrB,QAAQ,KAAK;AAAA,MACf;AAAA,IACF;AAAA,EACF,SAAS,aAAa;AACpB,YAAQ,MAAM,wEAAwE,WAAW;AACjG,UAAM,IAAI;AAAA,MACR,qCAAqC,uBAAuB,QAAQ,YAAY,UAAU,OAAO,WAAW,CAAC;AAAA,IAC/G;AAAA,EACF;AAEA,QAAM,QAAQ,kBAAkB,uCAAuC;AACvE,MAAI;AACF,UAAM,MAAM,QAAQ;AAAA,MAClB,eAAe,YAAY;AAAA,MAC3B;AAAA,MACA,aAAa,OAAO,KAAK;AAAA,MACzB,OAAO;AAAA,QACL,gBAAgB,KAAK;AAAA,QACrB,UAAU,KAAK;AAAA,QACf,QAAQ,KAAK;AAAA,MACf;AAAA,IACF,CAAC;AAAA,EACH,SAAS,OAAO;AAId,UAAM,gBACH;AAAA,MACC,YAAY;AAAA,MACZ;AAAA,QACE,cACE,iBAAiB,QACb,MAAM,UACN,UAAU,wCAAwC,4BAA4B;AAAA,MACtF;AAAA,MACA;AAAA,QACE,UAAU,KAAK;AAAA,QACf,gBAAgB,KAAK;AAAA,QACrB,QAAQ,KAAK;AAAA,MACf;AAAA,IACF,EACC,MAAM,CAAC,YAAY;AAClB,cAAQ,KAAK,6EAA6E,OAAO;AAAA,IACnG,CAAC;AACH,UAAM;AAAA,EACR;AAGA,MAAI,aAAa,MAAM,YAAY,uBAAuB;AACxD,UAAM,iCAAiC,WAAW;AAAA,MAChD,UAAU,KAAK;AAAA,MACf,gBAAgB,KAAK;AAAA,MACrB,QAAQ,KAAK;AAAA,MACb,cAAc;AAAA,MACd,YAAY,IAAI,KAAK,GAAG;AAAA,MACxB,WAAW;AAAA,MACX,eAAe,IAAI;AAAA,MACnB,gBAAgB,IAAI;AAAA,MACpB,UAAU,YAAY,YAAY;AAAA,IACpC,CAAC;AAAA,EACH;AAEA,SAAO,aAAa;AAAA,IAClB,eAAe,MAAM;AAAA,MACnB,IAAI;AAAA,MACJ,eAAe,YAAY;AAAA,MAC3B,SAAS;AAAA,QACP;AAAA,QACA;AAAA,QACA,EAAE,OAAO,IAAI,OAAO;AAAA,MACtB;AAAA,IACF,CAAC;AAAA,IACD,EAAE,QAAQ,IAAI;AAAA,EAChB;AACF;AAIA,eAAsB,KAAK,KAAc;AACvC,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,MAAI;AACF,WAAO,MAAM,SAAS,KAAK,SAAS;AAAA,EACtC,SAAS,OAAO;AACd,YAAQ,MAAM,oDAAoD,KAAK;AACvE,WAAO,aAAa;AAAA,MAClB,eAAe,MAAM;AAAA,QACnB,IAAI;AAAA,QACJ,eAAe;AAAA,QACf,SACE,iBAAiB,QACb,MAAM,UACN,UAAU,wCAAwC,4BAA4B;AAAA,MACtF,CAAC;AAAA,MACD,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { readJsonSafe } from '@open-mercato/shared/lib/http/readJsonSafe'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport type { TranslateWithFallbackFn } from '@open-mercato/shared/lib/i18n/translate'\nimport {\n  runCrudMutationGuardAfterSuccess,\n  validateCrudMutationGuard,\n} from '@open-mercato/shared/lib/crud/mutation-guard'\nimport type { ProgressService } from '../../../../progress/lib/progressService'\nimport {\n  CUSTOMERS_DEALS_BULK_UPDATE_OWNER_QUEUE,\n  getCustomersQueue,\n} from '../../../lib/bulkDeals'\nimport {\n  dealsBulkUpdateOwnerSchema as requestSchema,\n  dealsBulkUpdateResponseSchema as responseSchema,\n} from '../../../data/validators'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('customers')\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: ['customers.deals.manage'] },\n}\n\nexport const openApi = {\n  tags: ['Customers'],\n  summary: 'Bulk reassign deal owner',\n  description:\n    'Queues a background job that reassigns the listed deals to a new owner (or clears the owner when null).',\n}\n\nasync function postImpl(req: Request, translate: TranslateWithFallbackFn): Promise<NextResponse> {\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.tenantId || !auth.orgId) {\n    return NextResponse.json(\n      responseSchema.parse({\n        ok: false,\n        progressJobId: null,\n        message: translate('customers.errors.unauthorized', 'Unauthorized'),\n      }),\n      { status: 401 },\n    )\n  }\n\n  const parsed = requestSchema.safeParse(await readJsonSafe(req))\n  if (!parsed.success) {\n    return NextResponse.json(\n      responseSchema.parse({\n        ok: false,\n        progressJobId: null,\n        message: translate('customers.errors.invalid_payload', 'Invalid payload'),\n      }),\n      { status: 400 },\n    )\n  }\n\n  const ids = Array.from(new Set(parsed.data.ids))\n  const container = await createRequestContainer()\n\n  // Mutation-guard contract for custom write routes \u2014 see comment on bulk-update-stage\n  // route for full rationale. Per-record locks are enforced inside the worker (per id).\n  // The guard at the bulk-entry point is best-effort: failures (e.g. a guard that\n  // expects a single-record id, or transient lock-table errors) must NOT take the whole\n  // bulk enqueue down \u2014 swallow so the bulk job still gets queued.\n  let guardResult: Awaited<ReturnType<typeof validateCrudMutationGuard>> = null\n  try {\n    guardResult = await validateCrudMutationGuard(container, {\n      tenantId: auth.tenantId,\n      organizationId: auth.orgId,\n      userId: auth.sub,\n      resourceKind: 'customers.deal',\n      resourceId: ids.join(','),\n      operation: 'custom',\n      requestMethod: req.method,\n      requestHeaders: req.headers,\n      mutationPayload: { ids, ownerUserId: parsed.data.ownerUserId },\n    })\n  } catch (guardError) {\n    logger.warn('mutation-guard skipped', { component: 'deals.bulk-update-owner', err: guardError })\n    guardResult = null\n  }\n  if (guardResult && !guardResult.ok) {\n    return NextResponse.json(guardResult.body, { status: guardResult.status })\n  }\n\n  let progressService: ProgressService\n  try {\n    progressService = container.resolve('progressService') as ProgressService\n  } catch (resolveError) {\n    logger.error('progressService resolve failed', { component: 'deals.bulk-update-owner', err: resolveError })\n    throw new Error(\n      `progressService resolve failed: ${resolveError instanceof Error ? resolveError.message : String(resolveError)}`,\n    )\n  }\n\n  let progressJob: Awaited<ReturnType<ProgressService['createJob']>>\n  try {\n    progressJob = await progressService.createJob(\n      {\n        jobType: 'customers.deals.bulk_update_owner',\n        name: translate(\n          'customers.deals.kanban.bulk.changeOwner.progress.name',\n          'Reassign selected deals to a new owner',\n        ),\n        description: translate(\n          'customers.deals.kanban.bulk.changeOwner.progress.description',\n          '{count} deals queued for owner reassignment',\n          { count: ids.length },\n        ),\n        totalCount: ids.length,\n        cancellable: false,\n        meta: {\n          source: 'customers.deals.bulk-update-owner',\n          ownerUserId: parsed.data.ownerUserId,\n        },\n      },\n      {\n        tenantId: auth.tenantId,\n        organizationId: auth.orgId,\n        userId: auth.sub,\n      },\n    )\n  } catch (createError) {\n    logger.error('progressService.createJob failed', { component: 'deals.bulk-update-owner', err: createError })\n    throw new Error(\n      `progressService.createJob failed: ${createError instanceof Error ? createError.message : String(createError)}`,\n    )\n  }\n\n  const queue = getCustomersQueue(CUSTOMERS_DEALS_BULK_UPDATE_OWNER_QUEUE)\n  try {\n    await queue.enqueue({\n      progressJobId: progressJob.id,\n      ids,\n      ownerUserId: parsed.data.ownerUserId,\n      scope: {\n        organizationId: auth.orgId,\n        tenantId: auth.tenantId,\n        userId: auth.sub,\n      },\n    })\n  } catch (error) {\n    // See bulk-update-stage route for rationale: without this guard the progress\n    // job hangs in `pending` because the worker will never pick it up after a\n    // failed enqueue, and the top-bar polls indefinitely.\n    await progressService\n      .failJob(\n        progressJob.id,\n        {\n          errorMessage:\n            error instanceof Error\n              ? error.message\n              : translate('customers.errors.bulk_enqueue_failed', 'Failed to enqueue bulk job'),\n        },\n        {\n          tenantId: auth.tenantId,\n          organizationId: auth.orgId,\n          userId: auth.sub,\n        },\n      )\n      .catch((failErr) => {\n        logger.warn('failed to mark progress job as failed', { component: 'deals.bulk-update-owner', err: failErr })\n      })\n    throw error\n  }\n\n  // After-success half of the mutation-guard contract \u2014 see bulk-update-stage route.\n  if (guardResult?.ok && guardResult.shouldRunAfterSuccess) {\n    await runCrudMutationGuardAfterSuccess(container, {\n      tenantId: auth.tenantId,\n      organizationId: auth.orgId,\n      userId: auth.sub,\n      resourceKind: 'customers.deal',\n      resourceId: ids.join(','),\n      operation: 'custom',\n      requestMethod: req.method,\n      requestHeaders: req.headers,\n      metadata: guardResult.metadata ?? null,\n    })\n  }\n\n  return NextResponse.json(\n    responseSchema.parse({\n      ok: true,\n      progressJobId: progressJob.id,\n      message: translate(\n        'customers.deals.kanban.bulk.changeOwner.queued',\n        'Bulk owner update started ({count} deals).',\n        { count: ids.length },\n      ),\n    }),\n    { status: 202 },\n  )\n}\n\n// Outer wrapper: every uncaught error becomes a controlled JSON 500 instead of\n// Next.js's default HTML error page. See bulk-update-stage for the same rationale.\nexport async function POST(req: Request) {\n  const { translate } = await resolveTranslations()\n  try {\n    return await postImpl(req, translate)\n  } catch (error) {\n    logger.error('route failed', { component: 'deals.bulk-update-owner', err: error })\n    return NextResponse.json(\n      responseSchema.parse({\n        ok: false,\n        progressJobId: null,\n        message:\n          error instanceof Error\n            ? error.message\n            : translate('customers.errors.bulk_enqueue_failed', 'Failed to enqueue bulk job'),\n      }),\n      { status: 500 },\n    )\n  }\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AACvC,SAAS,oBAAoB;AAC7B,SAAS,2BAA2B;AAEpC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAEP;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE,8BAA8B;AAAA,EAC9B,iCAAiC;AAAA,OAC5B;AACP,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,WAAW;AAEhC,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,wBAAwB,EAAE;AACzE;AAEO,MAAM,UAAU;AAAA,EACrB,MAAM,CAAC,WAAW;AAAA,EAClB,SAAS;AAAA,EACT,aACE;AACJ;AAEA,eAAe,SAAS,KAAc,WAA2D;AAC/F,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,YAAY,CAAC,KAAK,OAAO;AAClC,WAAO,aAAa;AAAA,MAClB,eAAe,MAAM;AAAA,QACnB,IAAI;AAAA,QACJ,eAAe;AAAA,QACf,SAAS,UAAU,iCAAiC,cAAc;AAAA,MACpE,CAAC;AAAA,MACD,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AAEA,QAAM,SAAS,cAAc,UAAU,MAAM,aAAa,GAAG,CAAC;AAC9D,MAAI,CAAC,OAAO,SAAS;AACnB,WAAO,aAAa;AAAA,MAClB,eAAe,MAAM;AAAA,QACnB,IAAI;AAAA,QACJ,eAAe;AAAA,QACf,SAAS,UAAU,oCAAoC,iBAAiB;AAAA,MAC1E,CAAC;AAAA,MACD,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AAEA,QAAM,MAAM,MAAM,KAAK,IAAI,IAAI,OAAO,KAAK,GAAG,CAAC;AAC/C,QAAM,YAAY,MAAM,uBAAuB;AAO/C,MAAI,cAAqE;AACzE,MAAI;AACF,kBAAc,MAAM,0BAA0B,WAAW;AAAA,MACvD,UAAU,KAAK;AAAA,MACf,gBAAgB,KAAK;AAAA,MACrB,QAAQ,KAAK;AAAA,MACb,cAAc;AAAA,MACd,YAAY,IAAI,KAAK,GAAG;AAAA,MACxB,WAAW;AAAA,MACX,eAAe,IAAI;AAAA,MACnB,gBAAgB,IAAI;AAAA,MACpB,iBAAiB,EAAE,KAAK,aAAa,OAAO,KAAK,YAAY;AAAA,IAC/D,CAAC;AAAA,EACH,SAAS,YAAY;AACnB,WAAO,KAAK,0BAA0B,EAAE,WAAW,2BAA2B,KAAK,WAAW,CAAC;AAC/F,kBAAc;AAAA,EAChB;AACA,MAAI,eAAe,CAAC,YAAY,IAAI;AAClC,WAAO,aAAa,KAAK,YAAY,MAAM,EAAE,QAAQ,YAAY,OAAO,CAAC;AAAA,EAC3E;AAEA,MAAI;AACJ,MAAI;AACF,sBAAkB,UAAU,QAAQ,iBAAiB;AAAA,EACvD,SAAS,cAAc;AACrB,WAAO,MAAM,kCAAkC,EAAE,WAAW,2BAA2B,KAAK,aAAa,CAAC;AAC1G,UAAM,IAAI;AAAA,MACR,mCAAmC,wBAAwB,QAAQ,aAAa,UAAU,OAAO,YAAY,CAAC;AAAA,IAChH;AAAA,EACF;AAEA,MAAI;AACJ,MAAI;AACF,kBAAc,MAAM,gBAAgB;AAAA,MAClC;AAAA,QACE,SAAS;AAAA,QACT,MAAM;AAAA,UACJ;AAAA,UACA;AAAA,QACF;AAAA,QACA,aAAa;AAAA,UACX;AAAA,UACA;AAAA,UACA,EAAE,OAAO,IAAI,OAAO;AAAA,QACtB;AAAA,QACA,YAAY,IAAI;AAAA,QAChB,aAAa;AAAA,QACb,MAAM;AAAA,UACJ,QAAQ;AAAA,UACR,aAAa,OAAO,KAAK;AAAA,QAC3B;AAAA,MACF;AAAA,MACA;AAAA,QACE,UAAU,KAAK;AAAA,QACf,gBAAgB,KAAK;AAAA,QACrB,QAAQ,KAAK;AAAA,MACf;AAAA,IACF;AAAA,EACF,SAAS,aAAa;AACpB,WAAO,MAAM,oCAAoC,EAAE,WAAW,2BAA2B,KAAK,YAAY,CAAC;AAC3G,UAAM,IAAI;AAAA,MACR,qCAAqC,uBAAuB,QAAQ,YAAY,UAAU,OAAO,WAAW,CAAC;AAAA,IAC/G;AAAA,EACF;AAEA,QAAM,QAAQ,kBAAkB,uCAAuC;AACvE,MAAI;AACF,UAAM,MAAM,QAAQ;AAAA,MAClB,eAAe,YAAY;AAAA,MAC3B;AAAA,MACA,aAAa,OAAO,KAAK;AAAA,MACzB,OAAO;AAAA,QACL,gBAAgB,KAAK;AAAA,QACrB,UAAU,KAAK;AAAA,QACf,QAAQ,KAAK;AAAA,MACf;AAAA,IACF,CAAC;AAAA,EACH,SAAS,OAAO;AAId,UAAM,gBACH;AAAA,MACC,YAAY;AAAA,MACZ;AAAA,QACE,cACE,iBAAiB,QACb,MAAM,UACN,UAAU,wCAAwC,4BAA4B;AAAA,MACtF;AAAA,MACA;AAAA,QACE,UAAU,KAAK;AAAA,QACf,gBAAgB,KAAK;AAAA,QACrB,QAAQ,KAAK;AAAA,MACf;AAAA,IACF,EACC,MAAM,CAAC,YAAY;AAClB,aAAO,KAAK,yCAAyC,EAAE,WAAW,2BAA2B,KAAK,QAAQ,CAAC;AAAA,IAC7G,CAAC;AACH,UAAM;AAAA,EACR;AAGA,MAAI,aAAa,MAAM,YAAY,uBAAuB;AACxD,UAAM,iCAAiC,WAAW;AAAA,MAChD,UAAU,KAAK;AAAA,MACf,gBAAgB,KAAK;AAAA,MACrB,QAAQ,KAAK;AAAA,MACb,cAAc;AAAA,MACd,YAAY,IAAI,KAAK,GAAG;AAAA,MACxB,WAAW;AAAA,MACX,eAAe,IAAI;AAAA,MACnB,gBAAgB,IAAI;AAAA,MACpB,UAAU,YAAY,YAAY;AAAA,IACpC,CAAC;AAAA,EACH;AAEA,SAAO,aAAa;AAAA,IAClB,eAAe,MAAM;AAAA,MACnB,IAAI;AAAA,MACJ,eAAe,YAAY;AAAA,MAC3B,SAAS;AAAA,QACP;AAAA,QACA;AAAA,QACA,EAAE,OAAO,IAAI,OAAO;AAAA,MACtB;AAAA,IACF,CAAC;AAAA,IACD,EAAE,QAAQ,IAAI;AAAA,EAChB;AACF;AAIA,eAAsB,KAAK,KAAc;AACvC,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,MAAI;AACF,WAAO,MAAM,SAAS,KAAK,SAAS;AAAA,EACtC,SAAS,OAAO;AACd,WAAO,MAAM,gBAAgB,EAAE,WAAW,2BAA2B,KAAK,MAAM,CAAC;AACjF,WAAO,aAAa;AAAA,MAClB,eAAe,MAAM;AAAA,QACnB,IAAI;AAAA,QACJ,eAAe;AAAA,QACf,SACE,iBAAiB,QACb,MAAM,UACN,UAAU,wCAAwC,4BAA4B;AAAA,MACtF,CAAC;AAAA,MACD,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/customers/api/deals/bulk-update-stage/route.js

@@ -15,6 +15,8 @@ import {
   dealsBulkUpdateStageSchema as requestSchema,
   dealsBulkUpdateResponseSchema as responseSchema
 } from "../../../data/validators.js";
+import { createLogger } from "@open-mercato/shared/lib/logger";
+const logger = createLogger("customers");
 const metadata = {
   POST: { requireAuth: true, requireFeatures: ["customers.deals.manage"] }
 };
@@ -62,7 +64,7 @@ async function postImpl(req, translate) {
       mutationPayload: { ids, pipelineStageId: parsed.data.pipelineStageId }
     });
   } catch (guardError) {
-    console.warn("[customers.deals.bulk-update-stage] mutation-guard skipped", guardError);
+    logger.warn("mutation-guard skipped", { component: "deals.bulk-update-stage", err: guardError });
     guardResult = null;
   }
   if (guardResult && !guardResult.ok) {
@@ -72,7 +74,7 @@ async function postImpl(req, translate) {
   try {
     progressService = container.resolve("progressService");
   } catch (resolveError) {
-    console.error("[customers.deals.bulk-update-stage] progressService resolve failed", resolveError);
+    logger.error("progressService resolve failed", { component: "deals.bulk-update-stage", err: resolveError });
     throw new Error(
       `progressService resolve failed: ${resolveError instanceof Error ? resolveError.message : String(resolveError)}`
     );
@@ -105,7 +107,7 @@ async function postImpl(req, translate) {
       }
     );
   } catch (createError) {
-    console.error("[customers.deals.bulk-update-stage] progressService.createJob failed", createError);
+    logger.error("progressService.createJob failed", { component: "deals.bulk-update-stage", err: createError });
     throw new Error(
       `progressService.createJob failed: ${createError instanceof Error ? createError.message : String(createError)}`
     );
@@ -134,7 +136,7 @@ async function postImpl(req, translate) {
         userId: auth.sub
       }
     ).catch((failErr) => {
-      console.warn("[customers.deals.bulk-update-stage] failed to mark progress job as failed", failErr);
+      logger.warn("failed to mark progress job as failed", { component: "deals.bulk-update-stage", err: failErr });
     });
     throw error;
   }
@@ -169,7 +171,7 @@ async function POST(req) {
   try {
     return await postImpl(req, translate);
   } catch (error) {
-    console.error("[customers.deals.bulk-update-stage] route failed", error);
+    logger.error("route failed", { component: "deals.bulk-update-stage", err: error });
     return NextResponse.json(
       responseSchema.parse({
         ok: false,

package/dist/modules/customers/api/deals/bulk-update-stage/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../src/modules/customers/api/deals/bulk-update-stage/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { readJsonSafe } from '@open-mercato/shared/lib/http/readJsonSafe'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport type { TranslateWithFallbackFn } from '@open-mercato/shared/lib/i18n/translate'\nimport {\n  runCrudMutationGuardAfterSuccess,\n  validateCrudMutationGuard,\n} from '@open-mercato/shared/lib/crud/mutation-guard'\nimport type { ProgressService } from '../../../../progress/lib/progressService'\nimport {\n  CUSTOMERS_DEALS_BULK_UPDATE_STAGE_QUEUE,\n  getCustomersQueue,\n} from '../../../lib/bulkDeals'\nimport {\n  dealsBulkUpdateStageSchema as requestSchema,\n  dealsBulkUpdateResponseSchema as responseSchema,\n} from '../../../data/validators'\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: ['customers.deals.manage'] },\n}\n\nexport const openApi = {\n  tags: ['Customers'],\n  summary: 'Bulk update deal pipeline stage',\n  description:\n    'Queues a background job that moves the listed deals to the same pipeline stage. Returns a progress job id to poll for completion.',\n}\n\nasync function postImpl(req: Request, translate: TranslateWithFallbackFn): Promise<NextResponse> {\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.tenantId || !auth.orgId) {\n    return NextResponse.json(\n      responseSchema.parse({\n        ok: false,\n        progressJobId: null,\n        message: translate('customers.errors.unauthorized', 'Unauthorized'),\n      }),\n      { status: 401 },\n    )\n  }\n\n  const parsed = requestSchema.safeParse(await readJsonSafe(req))\n  if (!parsed.success) {\n    return NextResponse.json(\n      responseSchema.parse({\n        ok: false,\n        progressJobId: null,\n        message: translate('customers.errors.invalid_payload', 'Invalid payload'),\n      }),\n      { status: 400 },\n    )\n  }\n\n  const ids = Array.from(new Set(parsed.data.ids))\n  const container = await createRequestContainer()\n\n  // Mutation-guard contract for custom write routes \u2014 lets injection modules (record-lock\n  // conflict handling, scoped headers, undo-history reconciliation) run `onBeforeSave` /\n  // `onAfterSave` for non-`makeCrudRoute` writes. Per-record locks are enforced by the\n  // worker (the worker calls `customers.deals.update` per id, which itself goes through\n  // the single-record route + guard). The guard at the bulk-entry point is best-effort:\n  // it gives lock-aware modules a chance to register a bulk activity log, but failures\n  // (e.g. a guard that expects a single-record id, or transient lock-table errors) must\n  // NOT take the whole bulk enqueue down. Swallow the error so the bulk job still gets\n  // queued and per-record enforcement happens downstream.\n  let guardResult: Awaited<ReturnType<typeof validateCrudMutationGuard>> = null\n  try {\n    guardResult = await validateCrudMutationGuard(container, {\n      tenantId: auth.tenantId,\n      organizationId: auth.orgId,\n      userId: auth.sub,\n      resourceKind: 'customers.deal',\n      resourceId: ids.join(','),\n      operation: 'custom',\n      requestMethod: req.method,\n      requestHeaders: req.headers,\n      mutationPayload: { ids, pipelineStageId: parsed.data.pipelineStageId },\n    })\n  } catch (guardError) {\n    console.warn('[customers.deals.bulk-update-stage] mutation-guard skipped', guardError)\n    guardResult = null\n  }\n  if (guardResult && !guardResult.ok) {\n    return NextResponse.json(guardResult.body, { status: guardResult.status })\n  }\n\n  let progressService: ProgressService\n  try {\n    progressService = container.resolve('progressService') as ProgressService\n  } catch (resolveError) {\n    console.error('[customers.deals.bulk-update-stage] progressService resolve failed', resolveError)\n    throw new Error(\n      `progressService resolve failed: ${resolveError instanceof Error ? resolveError.message : String(resolveError)}`,\n    )\n  }\n\n  let progressJob: Awaited<ReturnType<ProgressService['createJob']>>\n  try {\n    progressJob = await progressService.createJob(\n      {\n        jobType: 'customers.deals.bulk_update_stage',\n        name: translate(\n          'customers.deals.kanban.bulk.changeStage.progress.name',\n          'Move selected deals to a new stage',\n        ),\n        description: translate(\n          'customers.deals.kanban.bulk.changeStage.progress.description',\n          '{count} deals queued for stage update',\n          { count: ids.length },\n        ),\n        totalCount: ids.length,\n        cancellable: false,\n        meta: {\n          source: 'customers.deals.bulk-update-stage',\n          pipelineStageId: parsed.data.pipelineStageId,\n        },\n      },\n      {\n        tenantId: auth.tenantId,\n        organizationId: auth.orgId,\n        userId: auth.sub,\n      },\n    )\n  } catch (createError) {\n    console.error('[customers.deals.bulk-update-stage] progressService.createJob failed', createError)\n    throw new Error(\n      `progressService.createJob failed: ${createError instanceof Error ? createError.message : String(createError)}`,\n    )\n  }\n\n  const queue = getCustomersQueue(CUSTOMERS_DEALS_BULK_UPDATE_STAGE_QUEUE)\n  try {\n    await queue.enqueue({\n      progressJobId: progressJob.id,\n      ids,\n      pipelineStageId: parsed.data.pipelineStageId,\n      scope: {\n        organizationId: auth.orgId,\n        tenantId: auth.tenantId,\n        userId: auth.sub,\n      },\n    })\n  } catch (error) {\n    // Without this guard the progress row sits in `pending` forever \u2014 the worker\n    // never picks the job up, and the top-bar polls a job that will never finish.\n    // Mark it failed so the operator gets a deterministic UX (a failure toast +\n    // ability to retry) instead of an invisible stuck job.\n    await progressService\n      .failJob(\n        progressJob.id,\n        {\n          errorMessage:\n            error instanceof Error\n              ? error.message\n              : translate('customers.errors.bulk_enqueue_failed', 'Failed to enqueue bulk job'),\n        },\n        {\n          tenantId: auth.tenantId,\n          organizationId: auth.orgId,\n          userId: auth.sub,\n        },\n      )\n      .catch((failErr) => {\n        console.warn('[customers.deals.bulk-update-stage] failed to mark progress job as failed', failErr)\n      })\n    throw error\n  }\n\n  // After-success half of the mutation-guard contract \u2014 fires `onAfterSave` injection\n  // hooks. We invoke it here because enqueue succeeded; the worker takes over from here.\n  // If an injection-side after-handler needs the bulk job's actual completion (rather than\n  // enqueue), it should subscribe to the progress event stream \u2014 beyond the scope of the\n  // synchronous guard contract.\n  if (guardResult?.ok && guardResult.shouldRunAfterSuccess) {\n    await runCrudMutationGuardAfterSuccess(container, {\n      tenantId: auth.tenantId,\n      organizationId: auth.orgId,\n      userId: auth.sub,\n      resourceKind: 'customers.deal',\n      resourceId: ids.join(','),\n      operation: 'custom',\n      requestMethod: req.method,\n      requestHeaders: req.headers,\n      metadata: guardResult.metadata ?? null,\n    })\n  }\n\n  return NextResponse.json(\n    responseSchema.parse({\n      ok: true,\n      progressJobId: progressJob.id,\n      message: translate(\n        'customers.deals.kanban.bulk.changeStage.queued',\n        'Bulk stage update started ({count} deals).',\n        { count: ids.length },\n      ),\n    }),\n    { status: 202 },\n  )\n}\n\n// Outer wrapper: every uncaught error from `postImpl` becomes a controlled 500 with\n// diagnostic JSON instead of Next.js's default HTML error page. Routes that throw\n// produced opaque 500s in CI integration tests (no body, no message), making the\n// root cause invisible. With this wrapper the operator sees the actual error string\n// in the response body and the server log, and the test framework can surface it.\nexport async function POST(req: Request) {\n  const { translate } = await resolveTranslations()\n  try {\n    return await postImpl(req, translate)\n  } catch (error) {\n    console.error('[customers.deals.bulk-update-stage] route failed', error)\n    return NextResponse.json(\n      responseSchema.parse({\n        ok: false,\n        progressJobId: null,\n        message:\n          error instanceof Error\n            ? error.message\n            : translate('customers.errors.bulk_enqueue_failed', 'Failed to enqueue bulk job'),\n      }),\n      { status: 500 },\n    )\n  }\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AACvC,SAAS,oBAAoB;AAC7B,SAAS,2BAA2B;AAEpC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAEP;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE,8BAA8B;AAAA,EAC9B,iCAAiC;AAAA,OAC5B;AAEA,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,wBAAwB,EAAE;AACzE;AAEO,MAAM,UAAU;AAAA,EACrB,MAAM,CAAC,WAAW;AAAA,EAClB,SAAS;AAAA,EACT,aACE;AACJ;AAEA,eAAe,SAAS,KAAc,WAA2D;AAC/F,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,YAAY,CAAC,KAAK,OAAO;AAClC,WAAO,aAAa;AAAA,MAClB,eAAe,MAAM;AAAA,QACnB,IAAI;AAAA,QACJ,eAAe;AAAA,QACf,SAAS,UAAU,iCAAiC,cAAc;AAAA,MACpE,CAAC;AAAA,MACD,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AAEA,QAAM,SAAS,cAAc,UAAU,MAAM,aAAa,GAAG,CAAC;AAC9D,MAAI,CAAC,OAAO,SAAS;AACnB,WAAO,aAAa;AAAA,MAClB,eAAe,MAAM;AAAA,QACnB,IAAI;AAAA,QACJ,eAAe;AAAA,QACf,SAAS,UAAU,oCAAoC,iBAAiB;AAAA,MAC1E,CAAC;AAAA,MACD,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AAEA,QAAM,MAAM,MAAM,KAAK,IAAI,IAAI,OAAO,KAAK,GAAG,CAAC;AAC/C,QAAM,YAAY,MAAM,uBAAuB;AAW/C,MAAI,cAAqE;AACzE,MAAI;AACF,kBAAc,MAAM,0BAA0B,WAAW;AAAA,MACvD,UAAU,KAAK;AAAA,MACf,gBAAgB,KAAK;AAAA,MACrB,QAAQ,KAAK;AAAA,MACb,cAAc;AAAA,MACd,YAAY,IAAI,KAAK,GAAG;AAAA,MACxB,WAAW;AAAA,MACX,eAAe,IAAI;AAAA,MACnB,gBAAgB,IAAI;AAAA,MACpB,iBAAiB,EAAE,KAAK,iBAAiB,OAAO,KAAK,gBAAgB;AAAA,IACvE,CAAC;AAAA,EACH,SAAS,YAAY;AACnB,YAAQ,KAAK,8DAA8D,UAAU;AACrF,kBAAc;AAAA,EAChB;AACA,MAAI,eAAe,CAAC,YAAY,IAAI;AAClC,WAAO,aAAa,KAAK,YAAY,MAAM,EAAE,QAAQ,YAAY,OAAO,CAAC;AAAA,EAC3E;AAEA,MAAI;AACJ,MAAI;AACF,sBAAkB,UAAU,QAAQ,iBAAiB;AAAA,EACvD,SAAS,cAAc;AACrB,YAAQ,MAAM,sEAAsE,YAAY;AAChG,UAAM,IAAI;AAAA,MACR,mCAAmC,wBAAwB,QAAQ,aAAa,UAAU,OAAO,YAAY,CAAC;AAAA,IAChH;AAAA,EACF;AAEA,MAAI;AACJ,MAAI;AACF,kBAAc,MAAM,gBAAgB;AAAA,MAClC;AAAA,QACE,SAAS;AAAA,QACT,MAAM;AAAA,UACJ;AAAA,UACA;AAAA,QACF;AAAA,QACA,aAAa;AAAA,UACX;AAAA,UACA;AAAA,UACA,EAAE,OAAO,IAAI,OAAO;AAAA,QACtB;AAAA,QACA,YAAY,IAAI;AAAA,QAChB,aAAa;AAAA,QACb,MAAM;AAAA,UACJ,QAAQ;AAAA,UACR,iBAAiB,OAAO,KAAK;AAAA,QAC/B;AAAA,MACF;AAAA,MACA;AAAA,QACE,UAAU,KAAK;AAAA,QACf,gBAAgB,KAAK;AAAA,QACrB,QAAQ,KAAK;AAAA,MACf;AAAA,IACF;AAAA,EACF,SAAS,aAAa;AACpB,YAAQ,MAAM,wEAAwE,WAAW;AACjG,UAAM,IAAI;AAAA,MACR,qCAAqC,uBAAuB,QAAQ,YAAY,UAAU,OAAO,WAAW,CAAC;AAAA,IAC/G;AAAA,EACF;AAEA,QAAM,QAAQ,kBAAkB,uCAAuC;AACvE,MAAI;AACF,UAAM,MAAM,QAAQ;AAAA,MAClB,eAAe,YAAY;AAAA,MAC3B;AAAA,MACA,iBAAiB,OAAO,KAAK;AAAA,MAC7B,OAAO;AAAA,QACL,gBAAgB,KAAK;AAAA,QACrB,UAAU,KAAK;AAAA,QACf,QAAQ,KAAK;AAAA,MACf;AAAA,IACF,CAAC;AAAA,EACH,SAAS,OAAO;AAKd,UAAM,gBACH;AAAA,MACC,YAAY;AAAA,MACZ;AAAA,QACE,cACE,iBAAiB,QACb,MAAM,UACN,UAAU,wCAAwC,4BAA4B;AAAA,MACtF;AAAA,MACA;AAAA,QACE,UAAU,KAAK;AAAA,QACf,gBAAgB,KAAK;AAAA,QACrB,QAAQ,KAAK;AAAA,MACf;AAAA,IACF,EACC,MAAM,CAAC,YAAY;AAClB,cAAQ,KAAK,6EAA6E,OAAO;AAAA,IACnG,CAAC;AACH,UAAM;AAAA,EACR;AAOA,MAAI,aAAa,MAAM,YAAY,uBAAuB;AACxD,UAAM,iCAAiC,WAAW;AAAA,MAChD,UAAU,KAAK;AAAA,MACf,gBAAgB,KAAK;AAAA,MACrB,QAAQ,KAAK;AAAA,MACb,cAAc;AAAA,MACd,YAAY,IAAI,KAAK,GAAG;AAAA,MACxB,WAAW;AAAA,MACX,eAAe,IAAI;AAAA,MACnB,gBAAgB,IAAI;AAAA,MACpB,UAAU,YAAY,YAAY;AAAA,IACpC,CAAC;AAAA,EACH;AAEA,SAAO,aAAa;AAAA,IAClB,eAAe,MAAM;AAAA,MACnB,IAAI;AAAA,MACJ,eAAe,YAAY;AAAA,MAC3B,SAAS;AAAA,QACP;AAAA,QACA;AAAA,QACA,EAAE,OAAO,IAAI,OAAO;AAAA,MACtB;AAAA,IACF,CAAC;AAAA,IACD,EAAE,QAAQ,IAAI;AAAA,EAChB;AACF;AAOA,eAAsB,KAAK,KAAc;AACvC,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,MAAI;AACF,WAAO,MAAM,SAAS,KAAK,SAAS;AAAA,EACtC,SAAS,OAAO;AACd,YAAQ,MAAM,oDAAoD,KAAK;AACvE,WAAO,aAAa;AAAA,MAClB,eAAe,MAAM;AAAA,QACnB,IAAI;AAAA,QACJ,eAAe;AAAA,QACf,SACE,iBAAiB,QACb,MAAM,UACN,UAAU,wCAAwC,4BAA4B;AAAA,MACtF,CAAC;AAAA,MACD,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { readJsonSafe } from '@open-mercato/shared/lib/http/readJsonSafe'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport type { TranslateWithFallbackFn } from '@open-mercato/shared/lib/i18n/translate'\nimport {\n  runCrudMutationGuardAfterSuccess,\n  validateCrudMutationGuard,\n} from '@open-mercato/shared/lib/crud/mutation-guard'\nimport type { ProgressService } from '../../../../progress/lib/progressService'\nimport {\n  CUSTOMERS_DEALS_BULK_UPDATE_STAGE_QUEUE,\n  getCustomersQueue,\n} from '../../../lib/bulkDeals'\nimport {\n  dealsBulkUpdateStageSchema as requestSchema,\n  dealsBulkUpdateResponseSchema as responseSchema,\n} from '../../../data/validators'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('customers')\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: ['customers.deals.manage'] },\n}\n\nexport const openApi = {\n  tags: ['Customers'],\n  summary: 'Bulk update deal pipeline stage',\n  description:\n    'Queues a background job that moves the listed deals to the same pipeline stage. Returns a progress job id to poll for completion.',\n}\n\nasync function postImpl(req: Request, translate: TranslateWithFallbackFn): Promise<NextResponse> {\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.tenantId || !auth.orgId) {\n    return NextResponse.json(\n      responseSchema.parse({\n        ok: false,\n        progressJobId: null,\n        message: translate('customers.errors.unauthorized', 'Unauthorized'),\n      }),\n      { status: 401 },\n    )\n  }\n\n  const parsed = requestSchema.safeParse(await readJsonSafe(req))\n  if (!parsed.success) {\n    return NextResponse.json(\n      responseSchema.parse({\n        ok: false,\n        progressJobId: null,\n        message: translate('customers.errors.invalid_payload', 'Invalid payload'),\n      }),\n      { status: 400 },\n    )\n  }\n\n  const ids = Array.from(new Set(parsed.data.ids))\n  const container = await createRequestContainer()\n\n  // Mutation-guard contract for custom write routes \u2014 lets injection modules (record-lock\n  // conflict handling, scoped headers, undo-history reconciliation) run `onBeforeSave` /\n  // `onAfterSave` for non-`makeCrudRoute` writes. Per-record locks are enforced by the\n  // worker (the worker calls `customers.deals.update` per id, which itself goes through\n  // the single-record route + guard). The guard at the bulk-entry point is best-effort:\n  // it gives lock-aware modules a chance to register a bulk activity log, but failures\n  // (e.g. a guard that expects a single-record id, or transient lock-table errors) must\n  // NOT take the whole bulk enqueue down. Swallow the error so the bulk job still gets\n  // queued and per-record enforcement happens downstream.\n  let guardResult: Awaited<ReturnType<typeof validateCrudMutationGuard>> = null\n  try {\n    guardResult = await validateCrudMutationGuard(container, {\n      tenantId: auth.tenantId,\n      organizationId: auth.orgId,\n      userId: auth.sub,\n      resourceKind: 'customers.deal',\n      resourceId: ids.join(','),\n      operation: 'custom',\n      requestMethod: req.method,\n      requestHeaders: req.headers,\n      mutationPayload: { ids, pipelineStageId: parsed.data.pipelineStageId },\n    })\n  } catch (guardError) {\n    logger.warn('mutation-guard skipped', { component: 'deals.bulk-update-stage', err: guardError })\n    guardResult = null\n  }\n  if (guardResult && !guardResult.ok) {\n    return NextResponse.json(guardResult.body, { status: guardResult.status })\n  }\n\n  let progressService: ProgressService\n  try {\n    progressService = container.resolve('progressService') as ProgressService\n  } catch (resolveError) {\n    logger.error('progressService resolve failed', { component: 'deals.bulk-update-stage', err: resolveError })\n    throw new Error(\n      `progressService resolve failed: ${resolveError instanceof Error ? resolveError.message : String(resolveError)}`,\n    )\n  }\n\n  let progressJob: Awaited<ReturnType<ProgressService['createJob']>>\n  try {\n    progressJob = await progressService.createJob(\n      {\n        jobType: 'customers.deals.bulk_update_stage',\n        name: translate(\n          'customers.deals.kanban.bulk.changeStage.progress.name',\n          'Move selected deals to a new stage',\n        ),\n        description: translate(\n          'customers.deals.kanban.bulk.changeStage.progress.description',\n          '{count} deals queued for stage update',\n          { count: ids.length },\n        ),\n        totalCount: ids.length,\n        cancellable: false,\n        meta: {\n          source: 'customers.deals.bulk-update-stage',\n          pipelineStageId: parsed.data.pipelineStageId,\n        },\n      },\n      {\n        tenantId: auth.tenantId,\n        organizationId: auth.orgId,\n        userId: auth.sub,\n      },\n    )\n  } catch (createError) {\n    logger.error('progressService.createJob failed', { component: 'deals.bulk-update-stage', err: createError })\n    throw new Error(\n      `progressService.createJob failed: ${createError instanceof Error ? createError.message : String(createError)}`,\n    )\n  }\n\n  const queue = getCustomersQueue(CUSTOMERS_DEALS_BULK_UPDATE_STAGE_QUEUE)\n  try {\n    await queue.enqueue({\n      progressJobId: progressJob.id,\n      ids,\n      pipelineStageId: parsed.data.pipelineStageId,\n      scope: {\n        organizationId: auth.orgId,\n        tenantId: auth.tenantId,\n        userId: auth.sub,\n      },\n    })\n  } catch (error) {\n    // Without this guard the progress row sits in `pending` forever \u2014 the worker\n    // never picks the job up, and the top-bar polls a job that will never finish.\n    // Mark it failed so the operator gets a deterministic UX (a failure toast +\n    // ability to retry) instead of an invisible stuck job.\n    await progressService\n      .failJob(\n        progressJob.id,\n        {\n          errorMessage:\n            error instanceof Error\n              ? error.message\n              : translate('customers.errors.bulk_enqueue_failed', 'Failed to enqueue bulk job'),\n        },\n        {\n          tenantId: auth.tenantId,\n          organizationId: auth.orgId,\n          userId: auth.sub,\n        },\n      )\n      .catch((failErr) => {\n        logger.warn('failed to mark progress job as failed', { component: 'deals.bulk-update-stage', err: failErr })\n      })\n    throw error\n  }\n\n  // After-success half of the mutation-guard contract \u2014 fires `onAfterSave` injection\n  // hooks. We invoke it here because enqueue succeeded; the worker takes over from here.\n  // If an injection-side after-handler needs the bulk job's actual completion (rather than\n  // enqueue), it should subscribe to the progress event stream \u2014 beyond the scope of the\n  // synchronous guard contract.\n  if (guardResult?.ok && guardResult.shouldRunAfterSuccess) {\n    await runCrudMutationGuardAfterSuccess(container, {\n      tenantId: auth.tenantId,\n      organizationId: auth.orgId,\n      userId: auth.sub,\n      resourceKind: 'customers.deal',\n      resourceId: ids.join(','),\n      operation: 'custom',\n      requestMethod: req.method,\n      requestHeaders: req.headers,\n      metadata: guardResult.metadata ?? null,\n    })\n  }\n\n  return NextResponse.json(\n    responseSchema.parse({\n      ok: true,\n      progressJobId: progressJob.id,\n      message: translate(\n        'customers.deals.kanban.bulk.changeStage.queued',\n        'Bulk stage update started ({count} deals).',\n        { count: ids.length },\n      ),\n    }),\n    { status: 202 },\n  )\n}\n\n// Outer wrapper: every uncaught error from `postImpl` becomes a controlled 500 with\n// diagnostic JSON instead of Next.js's default HTML error page. Routes that throw\n// produced opaque 500s in CI integration tests (no body, no message), making the\n// root cause invisible. With this wrapper the operator sees the actual error string\n// in the response body and the server log, and the test framework can surface it.\nexport async function POST(req: Request) {\n  const { translate } = await resolveTranslations()\n  try {\n    return await postImpl(req, translate)\n  } catch (error) {\n    logger.error('route failed', { component: 'deals.bulk-update-stage', err: error })\n    return NextResponse.json(\n      responseSchema.parse({\n        ok: false,\n        progressJobId: null,\n        message:\n          error instanceof Error\n            ? error.message\n            : translate('customers.errors.bulk_enqueue_failed', 'Failed to enqueue bulk job'),\n      }),\n      { status: 500 },\n    )\n  }\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AACvC,SAAS,oBAAoB;AAC7B,SAAS,2BAA2B;AAEpC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAEP;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE,8BAA8B;AAAA,EAC9B,iCAAiC;AAAA,OAC5B;AACP,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,WAAW;AAEhC,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,wBAAwB,EAAE;AACzE;AAEO,MAAM,UAAU;AAAA,EACrB,MAAM,CAAC,WAAW;AAAA,EAClB,SAAS;AAAA,EACT,aACE;AACJ;AAEA,eAAe,SAAS,KAAc,WAA2D;AAC/F,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,YAAY,CAAC,KAAK,OAAO;AAClC,WAAO,aAAa;AAAA,MAClB,eAAe,MAAM;AAAA,QACnB,IAAI;AAAA,QACJ,eAAe;AAAA,QACf,SAAS,UAAU,iCAAiC,cAAc;AAAA,MACpE,CAAC;AAAA,MACD,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AAEA,QAAM,SAAS,cAAc,UAAU,MAAM,aAAa,GAAG,CAAC;AAC9D,MAAI,CAAC,OAAO,SAAS;AACnB,WAAO,aAAa;AAAA,MAClB,eAAe,MAAM;AAAA,QACnB,IAAI;AAAA,QACJ,eAAe;AAAA,QACf,SAAS,UAAU,oCAAoC,iBAAiB;AAAA,MAC1E,CAAC;AAAA,MACD,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AAEA,QAAM,MAAM,MAAM,KAAK,IAAI,IAAI,OAAO,KAAK,GAAG,CAAC;AAC/C,QAAM,YAAY,MAAM,uBAAuB;AAW/C,MAAI,cAAqE;AACzE,MAAI;AACF,kBAAc,MAAM,0BAA0B,WAAW;AAAA,MACvD,UAAU,KAAK;AAAA,MACf,gBAAgB,KAAK;AAAA,MACrB,QAAQ,KAAK;AAAA,MACb,cAAc;AAAA,MACd,YAAY,IAAI,KAAK,GAAG;AAAA,MACxB,WAAW;AAAA,MACX,eAAe,IAAI;AAAA,MACnB,gBAAgB,IAAI;AAAA,MACpB,iBAAiB,EAAE,KAAK,iBAAiB,OAAO,KAAK,gBAAgB;AAAA,IACvE,CAAC;AAAA,EACH,SAAS,YAAY;AACnB,WAAO,KAAK,0BAA0B,EAAE,WAAW,2BAA2B,KAAK,WAAW,CAAC;AAC/F,kBAAc;AAAA,EAChB;AACA,MAAI,eAAe,CAAC,YAAY,IAAI;AAClC,WAAO,aAAa,KAAK,YAAY,MAAM,EAAE,QAAQ,YAAY,OAAO,CAAC;AAAA,EAC3E;AAEA,MAAI;AACJ,MAAI;AACF,sBAAkB,UAAU,QAAQ,iBAAiB;AAAA,EACvD,SAAS,cAAc;AACrB,WAAO,MAAM,kCAAkC,EAAE,WAAW,2BAA2B,KAAK,aAAa,CAAC;AAC1G,UAAM,IAAI;AAAA,MACR,mCAAmC,wBAAwB,QAAQ,aAAa,UAAU,OAAO,YAAY,CAAC;AAAA,IAChH;AAAA,EACF;AAEA,MAAI;AACJ,MAAI;AACF,kBAAc,MAAM,gBAAgB;AAAA,MAClC;AAAA,QACE,SAAS;AAAA,QACT,MAAM;AAAA,UACJ;AAAA,UACA;AAAA,QACF;AAAA,QACA,aAAa;AAAA,UACX;AAAA,UACA;AAAA,UACA,EAAE,OAAO,IAAI,OAAO;AAAA,QACtB;AAAA,QACA,YAAY,IAAI;AAAA,QAChB,aAAa;AAAA,QACb,MAAM;AAAA,UACJ,QAAQ;AAAA,UACR,iBAAiB,OAAO,KAAK;AAAA,QAC/B;AAAA,MACF;AAAA,MACA;AAAA,QACE,UAAU,KAAK;AAAA,QACf,gBAAgB,KAAK;AAAA,QACrB,QAAQ,KAAK;AAAA,MACf;AAAA,IACF;AAAA,EACF,SAAS,aAAa;AACpB,WAAO,MAAM,oCAAoC,EAAE,WAAW,2BAA2B,KAAK,YAAY,CAAC;AAC3G,UAAM,IAAI;AAAA,MACR,qCAAqC,uBAAuB,QAAQ,YAAY,UAAU,OAAO,WAAW,CAAC;AAAA,IAC/G;AAAA,EACF;AAEA,QAAM,QAAQ,kBAAkB,uCAAuC;AACvE,MAAI;AACF,UAAM,MAAM,QAAQ;AAAA,MAClB,eAAe,YAAY;AAAA,MAC3B;AAAA,MACA,iBAAiB,OAAO,KAAK;AAAA,MAC7B,OAAO;AAAA,QACL,gBAAgB,KAAK;AAAA,QACrB,UAAU,KAAK;AAAA,QACf,QAAQ,KAAK;AAAA,MACf;AAAA,IACF,CAAC;AAAA,EACH,SAAS,OAAO;AAKd,UAAM,gBACH;AAAA,MACC,YAAY;AAAA,MACZ;AAAA,QACE,cACE,iBAAiB,QACb,MAAM,UACN,UAAU,wCAAwC,4BAA4B;AAAA,MACtF;AAAA,MACA;AAAA,QACE,UAAU,KAAK;AAAA,QACf,gBAAgB,KAAK;AAAA,QACrB,QAAQ,KAAK;AAAA,MACf;AAAA,IACF,EACC,MAAM,CAAC,YAAY;AAClB,aAAO,KAAK,yCAAyC,EAAE,WAAW,2BAA2B,KAAK,QAAQ,CAAC;AAAA,IAC7G,CAAC;AACH,UAAM;AAAA,EACR;AAOA,MAAI,aAAa,MAAM,YAAY,uBAAuB;AACxD,UAAM,iCAAiC,WAAW;AAAA,MAChD,UAAU,KAAK;AAAA,MACf,gBAAgB,KAAK;AAAA,MACrB,QAAQ,KAAK;AAAA,MACb,cAAc;AAAA,MACd,YAAY,IAAI,KAAK,GAAG;AAAA,MACxB,WAAW;AAAA,MACX,eAAe,IAAI;AAAA,MACnB,gBAAgB,IAAI;AAAA,MACpB,UAAU,YAAY,YAAY;AAAA,IACpC,CAAC;AAAA,EACH;AAEA,SAAO,aAAa;AAAA,IAClB,eAAe,MAAM;AAAA,MACnB,IAAI;AAAA,MACJ,eAAe,YAAY;AAAA,MAC3B,SAAS;AAAA,QACP;AAAA,QACA;AAAA,QACA,EAAE,OAAO,IAAI,OAAO;AAAA,MACtB;AAAA,IACF,CAAC;AAAA,IACD,EAAE,QAAQ,IAAI;AAAA,EAChB;AACF;AAOA,eAAsB,KAAK,KAAc;AACvC,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,MAAI;AACF,WAAO,MAAM,SAAS,KAAK,SAAS;AAAA,EACtC,SAAS,OAAO;AACd,WAAO,MAAM,gBAAgB,EAAE,WAAW,2BAA2B,KAAK,MAAM,CAAC;AACjF,WAAO,aAAa;AAAA,MAClB,eAAe,MAAM;AAAA,QACnB,IAAI;AAAA,QACJ,eAAe;AAAA,QACf,SACE,iBAAiB,QACb,MAAM,UACN,UAAU,wCAAwC,4BAA4B;AAAA,MACtF,CAAC;AAAA,MACD,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/customers/api/deals/route.js

@@ -22,6 +22,8 @@ import { isTenantDataEncryptionEnabled } from "@open-mercato/shared/lib/encrypti
 import { escapeLikePattern } from "@open-mercato/shared/lib/db/escapeLikePattern";
 import { consumeAdvancedFilterState, mergeAdvancedFilterTree } from "@open-mercato/shared/lib/crud/advanced-filter-integration";
 import { fetchStuckDealIds } from "../../lib/stuckDeals.js";
+import { createLogger } from "@open-mercato/shared/lib/logger";
+const logger = createLogger("customers");
 const rawBodySchema = z.object({}).passthrough();
 const stringOrStringArray = z.union([z.string(), z.array(z.string())]);
 const OPEN_DEAL_STATUSES = ["open", "in_progress"];
@@ -518,7 +520,7 @@ const crud = makeCrudRoute({
         );
         payload.items = enhancedItems;
       } catch (err) {
-        console.warn("[customers.deals] failed to decorate items with person/company links", err);
+        logger.warn("failed to decorate items with person/company links", { component: "deals", err });
         payload.items = items.map((item) => {
           if (!item || typeof item !== "object") return item;
           return {