@open-mercato/core 0.6.6-develop.6465.1.019f0fb26f → 0.6.6-develop.6471.1.9ab5bdd79a

package/dist/modules/entities/components/EncryptionManager.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/entities/components/EncryptionManager.tsx"],
-  "sourcesContent": ["\"use client\"\n\nimport * as React from 'react'\nimport { useQuery, useMutation } from '@tanstack/react-query'\nimport { Button } from '@open-mercato/ui/primitives/button'\nimport { Checkbox } from '@open-mercato/ui/primitives/checkbox'\nimport {\n  Select,\n  SelectContent,\n  SelectItem,\n  SelectTrigger,\n  SelectValue,\n} from '@open-mercato/ui/primitives/select'\nimport { LoadingMessage, ErrorMessage } from '@open-mercato/ui/backend/detail'\nimport { flash } from '@open-mercato/ui/backend/FlashMessages'\nimport { apiCall, readApiResultOrThrow, withScopedApiRequestHeaders } from '@open-mercato/ui/backend/utils/apiCall'\nimport { raiseCrudError } from '@open-mercato/ui/backend/utils/serverErrors'\nimport { useGuardedMutation } from '@open-mercato/ui/backend/injection/useGuardedMutation'\nimport { buildOptimisticLockHeader } from '@open-mercato/ui/backend/utils/optimisticLock'\nimport { useCustomFieldDefs, type CustomFieldDefDto } from '@open-mercato/ui/backend/utils/customFieldDefs'\nimport { Plus, Save, Trash2 } from 'lucide-react'\nimport { useOrganizationScopeVersion } from '@open-mercato/shared/lib/frontend/useOrganizationScope'\nimport { useT } from '@open-mercato/shared/lib/i18n/context'\nimport { getEntityFields } from '#generated/entity-fields-registry'\n\ntype EntityOption = { entityId: string; label?: string; source?: string }\ntype FieldOption = { value: string; label: string }\n\ntype EncryptionFieldRow = {\n  id: string\n  field: string\n  hashField?: string | null\n}\n\ntype EncryptionMapResponse = {\n  entityId: string\n  fields?: Array<{ field: string; hashField?: string | null }>\n  isActive?: boolean\n  updatedAt?: string | null\n}\n\ntype CanonicalOption = { value: string; label?: string }\n\nconst EMPTY_FIELD_DEFS: CustomFieldDefDto[] = []\n\nfunction normalizeToken(value: string): string {\n  return value\n    .replace(/([a-z0-9])([A-Z])/g, '$1_$2')\n    .replace(/[^a-z0-9]/gi, '')\n    .toLowerCase()\n}\n\nfunction canonicalizeFieldName(raw: string, options: CanonicalOption[]): string {\n  const trimmed = typeof raw === 'string' ? raw.trim() : ''\n  if (!trimmed) return ''\n  const normalized = normalizeToken(trimmed)\n  for (const option of options) {\n    const optionValue = typeof option.value === 'string' ? option.value.trim() : ''\n    if (optionValue && normalizeToken(optionValue) === normalized) return optionValue\n    if (option.label && normalizeToken(option.label) === normalized) return optionValue\n  }\n  return trimmed\n}\n\nfunction normalizeFieldRows(raw: EncryptionMapResponse | undefined, options: CanonicalOption[]): EncryptionFieldRow[] {\n  const rows = Array.isArray(raw?.fields) ? raw!.fields : []\n  return rows.map((entry, idx) => ({\n    id: `${entry.field}-${idx}`,\n    field: canonicalizeFieldName(entry.field, options),\n    hashField: entry.hashField ? canonicalizeFieldName(entry.hashField, options) : null,\n  }))\n}\n\nfunction areFieldRowsEqual(a: EncryptionFieldRow[], b: EncryptionFieldRow[]): boolean {\n  if (a === b) return true\n  if (a.length !== b.length) return false\n  return a.every((row, idx) => {\n    const other = b[idx]\n    return !!other && row.id === other.id && row.field === other.field && (row.hashField ?? null) === (other.hashField ?? null)\n  })\n}\n\nfunction areFieldOptionsEqual(a: FieldOption[], b: FieldOption[]): boolean {\n  if (a === b) return true\n  if (a.length !== b.length) return false\n  return a.every((option, idx) => {\n    const other = b[idx]\n    return !!other && option.value === other.value && option.label === other.label\n  })\n}\n\nfunction buildRowId(): string {\n  if (typeof crypto !== 'undefined' && crypto.randomUUID) return crypto.randomUUID()\n  return `row-${Math.random().toString(36).slice(2)}`\n}\n\nexport function EncryptionManager() {\n  const t = useT()\n  const scopeVersion = useOrganizationScopeVersion()\n  const [selectedEntityId, setSelectedEntityId] = React.useState('')\n  const [fields, setFields] = React.useState<EncryptionFieldRow[]>([])\n  const [isActive, setIsActive] = React.useState(true)\n  const [baseFieldOptions, setBaseFieldOptions] = React.useState<FieldOption[]>([])\n  const [hasUserEdited, setHasUserEdited] = React.useState(false)\n  const { data: rawFieldDefs, isLoading: loadingFieldDefs } = useCustomFieldDefs(selectedEntityId ? [selectedEntityId] : [], {\n    enabled: !!selectedEntityId,\n  })\n  const fieldDefs = rawFieldDefs ?? EMPTY_FIELD_DEFS\n  const canonicalOptions = React.useMemo<CanonicalOption[]>(() => {\n    const options: CanonicalOption[] = []\n    for (const option of baseFieldOptions) {\n      if (!option.value) continue\n      if (options.some((opt) => opt.value === option.value)) continue\n      options.push(option)\n    }\n    for (const def of fieldDefs) {\n      const key = typeof def.key === 'string' ? def.key.trim() : ''\n      if (!key || options.some((opt) => opt.value === key)) continue\n      const label = typeof def.label === 'string' ? def.label : undefined\n      options.push({ value: key, label })\n    }\n    return options\n  }, [baseFieldOptions, fieldDefs])\n  const fieldOptions = React.useMemo(() => {\n    const entries = new Map<string, string>()\n    for (const option of baseFieldOptions) {\n      if (!option.value || entries.has(option.value)) continue\n      entries.set(option.value, option.label || option.value)\n    }\n    for (const def of fieldDefs) {\n      const key = typeof def.key === 'string' ? def.key.trim() : ''\n      if (!key || entries.has(key)) continue\n      const label = typeof def.label === 'string' && def.label.trim().length ? def.label : key\n      entries.set(key, label)\n    }\n    for (const row of fields) {\n      const main = row.field?.trim()\n      if (main && !entries.has(main)) entries.set(main, main)\n      const hash = row.hashField?.trim()\n      if (hash && !entries.has(hash)) entries.set(hash, hash)\n    }\n    return Array.from(entries.entries()).map(([value, label]) => ({ value, label }))\n  }, [baseFieldOptions, fieldDefs, fields])\n\n  const { data: entities, isLoading: loadingEntities, error: entitiesError } = useQuery<{ items: EntityOption[] }>({\n    queryKey: ['entities-list', scopeVersion],\n    queryFn: async () =>\n      readApiResultOrThrow('/api/entities/entities', undefined, {\n        errorMessage: t('entities.encryption.errors.loadEntities', 'Failed to load entities'),\n      }),\n  })\n\n  React.useEffect(() => {\n    if (!selectedEntityId && entities?.items?.length) {\n      const first = entities.items[0]\n      setSelectedEntityId(first.entityId)\n    }\n  }, [entities, selectedEntityId])\n\n  React.useEffect(() => {\n    if (!selectedEntityId) {\n      setBaseFieldOptions((prev) => (prev.length ? [] : prev))\n      return\n    }\n    const parts = selectedEntityId.split(':')\n    const entitySlug = parts[1]\n    if (!entitySlug) {\n      setBaseFieldOptions((prev) => (prev.length ? [] : prev))\n      return\n    }\n\n    // Use static registry instead of dynamic import for Turbopack compatibility\n    const mod = getEntityFields(entitySlug)\n    if (!mod) {\n      console.warn('[encryption] No fields found for entity', entitySlug)\n      setBaseFieldOptions((prev) => (prev.length ? [] : prev))\n      return\n    }\n\n    const options: FieldOption[] = []\n    for (const raw of Object.values(mod)) {\n      if (typeof raw !== 'string' || !raw.trim()) continue\n      const value = raw.trim()\n      if (options.some((opt) => opt.value === value)) continue\n      const label = value\n        .split('_')\n        .map((segment) => (segment ? `${segment[0].toUpperCase()}${segment.slice(1)}` : ''))\n        .join(' ')\n        .trim() || value\n      options.push({ value, label })\n    }\n    setBaseFieldOptions((prev) => (areFieldOptionsEqual(prev, options) ? prev : options))\n  }, [selectedEntityId])\n\n  const {\n    data: map,\n    isLoading: loadingMap,\n    isError: mapError,\n    refetch: refetchMap,\n  } = useQuery<EncryptionMapResponse>({\n    queryKey: ['encryption-map', selectedEntityId, scopeVersion],\n    enabled: !!selectedEntityId,\n    queryFn: async () =>\n      readApiResultOrThrow(`/api/entities/encryption?entityId=${encodeURIComponent(selectedEntityId)}`, undefined, {\n        errorMessage: t('entities.encryption.errors.loadMap', 'Failed to load encryption map'),\n      }),\n  })\n\n  const mapSignature = React.useMemo(() => JSON.stringify(map ?? null), [map])\n  const lastMapSignatureRef = React.useRef<string | null>(null)\n\n  React.useEffect(() => {\n    const signature = mapSignature\n    const isSameMap = signature === lastMapSignatureRef.current\n    if (isSameMap && hasUserEdited) return\n    if (!map) {\n      setFields((prev) => (prev.length ? [] : prev))\n      setIsActive((prev) => (prev === true ? prev : true))\n      setHasUserEdited(false)\n      lastMapSignatureRef.current = signature\n      return\n    }\n    const nextFields = normalizeFieldRows(map, canonicalOptions)\n    setFields((prev) => (areFieldRowsEqual(prev, nextFields) ? prev : nextFields))\n    const nextIsActive = map?.isActive !== false\n    setIsActive((prev) => (prev === nextIsActive ? prev : nextIsActive))\n    setHasUserEdited(false)\n    lastMapSignatureRef.current = signature\n  }, [mapSignature, map, canonicalOptions, hasUserEdited])\n\n  const { runMutation } = useGuardedMutation({ contextId: 'entities.encryption-map' })\n\n  const mutation = useMutation({\n    mutationFn: async () => {\n      const trimmed = fields\n        .map((row) => ({\n          field: canonicalizeFieldName(row.field, canonicalOptions).trim(),\n          hashField: row.hashField ? canonicalizeFieldName(row.hashField, canonicalOptions).trim() : '',\n        }))\n        .filter((row) => row.field.length > 0)\n        .map((row) => ({\n          field: row.field,\n          hashField: row.hashField ? row.hashField : null,\n        }))\n      if (!selectedEntityId) {\n        throw new Error(t('entities.encryption.errors.selectEntity', 'Select an entity before saving'))\n      }\n      if (!trimmed.length) {\n        throw new Error(t('entities.encryption.errors.noFields', 'Add at least one field to encrypt'))\n      }\n      const payload = { entityId: selectedEntityId, fields: trimmed, isActive }\n      // Route the write through the guarded mutation helper so global injection\n      // modules (mutation guard, record-lock conflict handling) can run, and send\n      // the loaded map's version so a stale tab cannot silently overwrite a newer\n      // encryption configuration (the server rejects mismatches with a 409).\n      return runMutation({\n        operation: async () => {\n          const res = await withScopedApiRequestHeaders(\n            buildOptimisticLockHeader(map?.updatedAt ?? null),\n            () => apiCall('/api/entities/encryption', {\n              method: 'POST',\n              headers: { 'content-type': 'application/json' },\n              body: JSON.stringify(payload),\n            }),\n          )\n          if (!res.ok) {\n            await raiseCrudError(res.response, t('entities.encryption.errors.save', 'Failed to save encryption map'))\n          }\n          return true\n        },\n        context: {},\n        mutationPayload: payload,\n      })\n    },\n    onSuccess: () => {\n      flash(t('entities.encryption.flash.saved', 'Encryption map saved'), 'success')\n      void refetchMap()\n    },\n    onError: (err: any) => {\n      const message = err?.message || t('entities.encryption.errors.save', 'Failed to save encryption map')\n      flash(message, 'error')\n    },\n  })\n\n  const addField = () => {\n    setHasUserEdited(true)\n    setFields((prev) => [...prev, { id: buildRowId(), field: '', hashField: null }])\n  }\n\n  const updateField = (id: string, patch: Partial<EncryptionFieldRow>) => {\n    setHasUserEdited(true)\n    setFields((prev) => prev.map((row) => (row.id === id ? { ...row, ...patch } : row)))\n  }\n\n  const removeField = (id: string) => {\n    setHasUserEdited(true)\n    setFields((prev) => prev.filter((row) => row.id !== id))\n  }\n\n  const renderFields = () => {\n    if (loadingMap || loadingFieldDefs) {\n      return (\n        <LoadingMessage\n          label={t('entities.encryption.loading', 'Loading encryption map\u2026')}\n          className=\"border-0 bg-transparent p-4\"\n        />\n      )\n    }\n    if (mapError) {\n      return (\n        <ErrorMessage\n          label={t('entities.encryption.errors.loadMap', 'Failed to load encryption map')}\n          action={(\n            <Button type=\"button\" variant=\"outline\" size=\"sm\" onClick={() => void refetchMap()}>\n              {t('entities.encryption.actions.retry', 'Retry')}\n            </Button>\n          )}\n        />\n      )\n    }\n    if (!fields.length) {\n      return (\n        <div className=\"rounded border bg-background/80 p-4 text-sm text-muted-foreground\">\n          {t('entities.encryption.empty', 'No fields are encrypted yet. Add the first one below.')}\n        </div>\n      )\n    }\n    const withFallbackOption = (value?: string | null) => {\n      if (value && !fieldOptions.some((opt) => opt.value === value)) {\n        return [...fieldOptions, { value, label: value }]\n      }\n      return fieldOptions\n    }\n    return (\n      <div className=\"overflow-x-auto\">\n        <table className=\"w-full min-w-[720px] text-sm\">\n          <thead>\n            <tr className=\"text-xs uppercase tracking-wide text-muted-foreground\">\n              <th className=\"px-3 py-2 text-left\">\n                {t('entities.encryption.fields.field', 'Field name')}\n              </th>\n              <th className=\"px-3 py-2 text-left\">\n                {t('entities.encryption.fields.hash', 'Hash field (optional)')}\n              </th>\n              <th className=\"px-3 py-2 text-right\">\n                {t('entities.encryption.fields.actions', 'Actions')}\n              </th>\n            </tr>\n          </thead>\n          <tbody>\n            {fields.map((row) => {\n              const fieldOpts = withFallbackOption(row.field)\n              const hashOpts = withFallbackOption(row.hashField)\n              return (\n                <tr key={row.id} className=\"border-t\">\n                  <td className=\"px-3 py-2 align-top\">\n                    <Select\n                      value={row.field || undefined}\n                      onValueChange={(value) => updateField(row.id, { field: value ?? '' })}\n                    >\n                      <SelectTrigger>\n                        <SelectValue placeholder={t('entities.encryption.fields.selectField', 'Select field')} />\n                      </SelectTrigger>\n                      <SelectContent>\n                        {fieldOpts.map((option) => (\n                          <SelectItem key={option.value} value={option.value}>\n                            {option.label}\n                          </SelectItem>\n                        ))}\n                      </SelectContent>\n                    </Select>\n                  </td>\n                  <td className=\"px-3 py-2 align-top\">\n                    <Select\n                      value={row.hashField || undefined}\n                      onValueChange={(value) => updateField(row.id, { hashField: value || null })}\n                    >\n                      <SelectTrigger>\n                        <SelectValue placeholder={t('entities.encryption.fields.selectHash', 'Select hash field (optional)')} />\n                      </SelectTrigger>\n                      <SelectContent>\n                        {hashOpts.map((option) => (\n                          <SelectItem key={option.value} value={option.value}>\n                            {option.label}\n                          </SelectItem>\n                        ))}\n                      </SelectContent>\n                    </Select>\n                    <p className=\"mt-1 text-overline text-muted-foreground\">\n                      {t('entities.encryption.fields.hashHint', 'Use when lookups must stay deterministic (e.g., login by email).')}\n                    </p>\n                  </td>\n                  <td className=\"px-3 py-2 align-top text-right\">\n                    <Button\n                      type=\"button\"\n                      variant=\"ghost\"\n                      size=\"sm\"\n                      className=\"h-9 w-9 px-0\"\n                      aria-label={t('entities.encryption.actions.remove', 'Remove')}\n                      onClick={() => removeField(row.id)}\n                    >\n                      <Trash2 className=\"h-4 w-4\" />\n                    </Button>\n                  </td>\n                </tr>\n              )\n            })}\n          </tbody>\n        </table>\n      </div>\n    )\n  }\n\n  return (\n    <div className=\"space-y-6\">\n      <div className=\"flex flex-col gap-3 rounded-lg border bg-card p-4 shadow-sm\">\n        <div className=\"space-y-2\">\n          <h2 className=\"text-xl font-semibold\">{t('entities.encryption.title', 'Encryption')}</h2>\n          <p className=\"text-sm text-muted-foreground\">\n            {t('entities.encryption.description', 'Manage which entity fields are encrypted with tenant keys and optional hash columns.')}\n          </p>\n        </div>\n        <div className=\"flex flex-col gap-4 sm:flex-row sm:items-end\">\n          <div className=\"flex-1 space-y-3\">\n            <div>\n              <label className=\"text-xs text-muted-foreground\">\n                {t('entities.encryption.selectEntity', 'Choose entity')}\n              </label>\n              <Select\n                value={selectedEntityId || undefined}\n                onValueChange={(value) => setSelectedEntityId(value ?? '')}\n                disabled={loadingEntities || !!entitiesError}\n              >\n                <SelectTrigger className=\"mt-1\">\n                  <SelectValue placeholder={t('entities.encryption.placeholder', 'Select an entity')} />\n                </SelectTrigger>\n                <SelectContent>\n                  {(entities?.items || []).map((item) => (\n                    <SelectItem key={item.entityId} value={item.entityId}>\n                      {item.label || item.entityId} {item.source === 'custom' ? `(${t('entities.encryption.source.custom', 'custom')})` : ''}\n                    </SelectItem>\n                  ))}\n                </SelectContent>\n              </Select>\n              {entitiesError ? (\n                <p className=\"mt-1 text-xs text-status-error-text\">\n                  {t('entities.encryption.errors.loadEntities', 'Failed to load entities')}\n                </p>\n              ) : (\n                <p className=\"mt-1 text-xs text-muted-foreground\">\n                  {t('entities.encryption.entityHint', 'Maps apply per tenant/organization. Use field names from your entities.')}\n                </p>\n              )}\n            </div>\n            <div className=\"inline-flex items-center gap-2 text-sm\">\n              <Checkbox\n                id=\"entities-encryption-active\"\n                checked={isActive}\n                onCheckedChange={(checked) => setIsActive(checked === true)}\n              />\n              <label htmlFor=\"entities-encryption-active\">\n                {t('entities.encryption.active', 'Encryption enabled for this entity')}\n              </label>\n            </div>\n          </div>\n        </div>\n        <div className=\"rounded-lg border bg-background/80 p-4\">\n          <div className=\"mb-3 flex items-center justify-between\">\n            <div>\n              <h3 className=\"text-sm font-medium\">{t('entities.encryption.fields.title', 'Encrypted fields')}</h3>\n              <p className=\"text-xs text-muted-foreground\">\n                {t('entities.encryption.fields.subtitle', 'List the attributes that should be encrypted with the tenant key.')}\n              </p>\n            </div>\n            <Button type=\"button\" variant=\"outline\" size=\"sm\" onClick={addField}>\n              <Plus className=\"mr-2 h-4 w-4\" />\n              {t('entities.encryption.actions.add', 'Add field')}\n            </Button>\n          </div>\n          {renderFields()}\n        </div>\n        <div className=\"flex justify-end\">\n          <Button\n            type=\"button\"\n            onClick={() => mutation.mutate()}\n            disabled={mutation.isPending || loadingEntities || !!entitiesError || !selectedEntityId}\n          >\n            <Save className=\"mr-2 h-4 w-4\" />\n            {mutation.isPending\n              ? t('entities.encryption.actions.saving', 'Saving\u2026')\n              : t('entities.encryption.actions.save', 'Save encryption map')}\n          </Button>\n        </div>\n      </div>\n    </div>\n  )\n}\n"],
-  "mappings": ";AA8SQ,cAmCI,YAnCJ;AA5SR,YAAY,WAAW;AACvB,SAAS,UAAU,mBAAmB;AACtC,SAAS,cAAc;AACvB,SAAS,gBAAgB;AACzB;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,gBAAgB,oBAAoB;AAC7C,SAAS,aAAa;AACtB,SAAS,SAAS,sBAAsB,mCAAmC;AAC3E,SAAS,sBAAsB;AAC/B,SAAS,0BAA0B;AACnC,SAAS,iCAAiC;AAC1C,SAAS,0BAAkD;AAC3D,SAAS,MAAM,MAAM,cAAc;AACnC,SAAS,mCAAmC;AAC5C,SAAS,YAAY;AACrB,SAAS,uBAAuB;AAoBhC,MAAM,mBAAwC,CAAC;AAE/C,SAAS,eAAe,OAAuB;AAC7C,SAAO,MACJ,QAAQ,sBAAsB,OAAO,EACrC,QAAQ,eAAe,EAAE,EACzB,YAAY;AACjB;AAEA,SAAS,sBAAsB,KAAa,SAAoC;AAC9E,QAAM,UAAU,OAAO,QAAQ,WAAW,IAAI,KAAK,IAAI;AACvD,MAAI,CAAC,QAAS,QAAO;AACrB,QAAM,aAAa,eAAe,OAAO;AACzC,aAAW,UAAU,SAAS;AAC5B,UAAM,cAAc,OAAO,OAAO,UAAU,WAAW,OAAO,MAAM,KAAK,IAAI;AAC7E,QAAI,eAAe,eAAe,WAAW,MAAM,WAAY,QAAO;AACtE,QAAI,OAAO,SAAS,eAAe,OAAO,KAAK,MAAM,WAAY,QAAO;AAAA,EAC1E;AACA,SAAO;AACT;AAEA,SAAS,mBAAmB,KAAwC,SAAkD;AACpH,QAAM,OAAO,MAAM,QAAQ,KAAK,MAAM,IAAI,IAAK,SAAS,CAAC;AACzD,SAAO,KAAK,IAAI,CAAC,OAAO,SAAS;AAAA,IAC/B,IAAI,GAAG,MAAM,KAAK,IAAI,GAAG;AAAA,IACzB,OAAO,sBAAsB,MAAM,OAAO,OAAO;AAAA,IACjD,WAAW,MAAM,YAAY,sBAAsB,MAAM,WAAW,OAAO,IAAI;AAAA,EACjF,EAAE;AACJ;AAEA,SAAS,kBAAkB,GAAyB,GAAkC;AACpF,MAAI,MAAM,EAAG,QAAO;AACpB,MAAI,EAAE,WAAW,EAAE,OAAQ,QAAO;AAClC,SAAO,EAAE,MAAM,CAAC,KAAK,QAAQ;AAC3B,UAAM,QAAQ,EAAE,GAAG;AACnB,WAAO,CAAC,CAAC,SAAS,IAAI,OAAO,MAAM,MAAM,IAAI,UAAU,MAAM,UAAU,IAAI,aAAa,WAAW,MAAM,aAAa;AAAA,EACxH,CAAC;AACH;AAEA,SAAS,qBAAqB,GAAkB,GAA2B;AACzE,MAAI,MAAM,EAAG,QAAO;AACpB,MAAI,EAAE,WAAW,EAAE,OAAQ,QAAO;AAClC,SAAO,EAAE,MAAM,CAAC,QAAQ,QAAQ;AAC9B,UAAM,QAAQ,EAAE,GAAG;AACnB,WAAO,CAAC,CAAC,SAAS,OAAO,UAAU,MAAM,SAAS,OAAO,UAAU,MAAM;AAAA,EAC3E,CAAC;AACH;AAEA,SAAS,aAAqB;AAC5B,MAAI,OAAO,WAAW,eAAe,OAAO,WAAY,QAAO,OAAO,WAAW;AACjF,SAAO,OAAO,KAAK,OAAO,EAAE,SAAS,EAAE,EAAE,MAAM,CAAC,CAAC;AACnD;AAEO,SAAS,oBAAoB;AAClC,QAAM,IAAI,KAAK;AACf,QAAM,eAAe,4BAA4B;AACjD,QAAM,CAAC,kBAAkB,mBAAmB,IAAI,MAAM,SAAS,EAAE;AACjE,QAAM,CAAC,QAAQ,SAAS,IAAI,MAAM,SAA+B,CAAC,CAAC;AACnE,QAAM,CAAC,UAAU,WAAW,IAAI,MAAM,SAAS,IAAI;AACnD,QAAM,CAAC,kBAAkB,mBAAmB,IAAI,MAAM,SAAwB,CAAC,CAAC;AAChF,QAAM,CAAC,eAAe,gBAAgB,IAAI,MAAM,SAAS,KAAK;AAC9D,QAAM,EAAE,MAAM,cAAc,WAAW,iBAAiB,IAAI,mBAAmB,mBAAmB,CAAC,gBAAgB,IAAI,CAAC,GAAG;AAAA,IACzH,SAAS,CAAC,CAAC;AAAA,EACb,CAAC;AACD,QAAM,YAAY,gBAAgB;AAClC,QAAM,mBAAmB,MAAM,QAA2B,MAAM;AAC9D,UAAM,UAA6B,CAAC;AACpC,eAAW,UAAU,kBAAkB;AACrC,UAAI,CAAC,OAAO,MAAO;AACnB,UAAI,QAAQ,KAAK,CAAC,QAAQ,IAAI,UAAU,OAAO,KAAK,EAAG;AACvD,cAAQ,KAAK,MAAM;AAAA,IACrB;AACA,eAAW,OAAO,WAAW;AAC3B,YAAM,MAAM,OAAO,IAAI,QAAQ,WAAW,IAAI,IAAI,KAAK,IAAI;AAC3D,UAAI,CAAC,OAAO,QAAQ,KAAK,CAAC,QAAQ,IAAI,UAAU,GAAG,EAAG;AACtD,YAAM,QAAQ,OAAO,IAAI,UAAU,WAAW,IAAI,QAAQ;AAC1D,cAAQ,KAAK,EAAE,OAAO,KAAK,MAAM,CAAC;AAAA,IACpC;AACA,WAAO;AAAA,EACT,GAAG,CAAC,kBAAkB,SAAS,CAAC;AAChC,QAAM,eAAe,MAAM,QAAQ,MAAM;AACvC,UAAM,UAAU,oBAAI,IAAoB;AACxC,eAAW,UAAU,kBAAkB;AACrC,UAAI,CAAC,OAAO,SAAS,QAAQ,IAAI,OAAO,KAAK,EAAG;AAChD,cAAQ,IAAI,OAAO,OAAO,OAAO,SAAS,OAAO,KAAK;AAAA,IACxD;AACA,eAAW,OAAO,WAAW;AAC3B,YAAM,MAAM,OAAO,IAAI,QAAQ,WAAW,IAAI,IAAI,KAAK,IAAI;AAC3D,UAAI,CAAC,OAAO,QAAQ,IAAI,GAAG,EAAG;AAC9B,YAAM,QAAQ,OAAO,IAAI,UAAU,YAAY,IAAI,MAAM,KAAK,EAAE,SAAS,IAAI,QAAQ;AACrF,cAAQ,IAAI,KAAK,KAAK;AAAA,IACxB;AACA,eAAW,OAAO,QAAQ;AACxB,YAAM,OAAO,IAAI,OAAO,KAAK;AAC7B,UAAI,QAAQ,CAAC,QAAQ,IAAI,IAAI,EAAG,SAAQ,IAAI,MAAM,IAAI;AACtD,YAAM,OAAO,IAAI,WAAW,KAAK;AACjC,UAAI,QAAQ,CAAC,QAAQ,IAAI,IAAI,EAAG,SAAQ,IAAI,MAAM,IAAI;AAAA,IACxD;AACA,WAAO,MAAM,KAAK,QAAQ,QAAQ,CAAC,EAAE,IAAI,CAAC,CAAC,OAAO,KAAK,OAAO,EAAE,OAAO,MAAM,EAAE;AAAA,EACjF,GAAG,CAAC,kBAAkB,WAAW,MAAM,CAAC;AAExC,QAAM,EAAE,MAAM,UAAU,WAAW,iBAAiB,OAAO,cAAc,IAAI,SAAoC;AAAA,IAC/G,UAAU,CAAC,iBAAiB,YAAY;AAAA,IACxC,SAAS,YACP,qBAAqB,0BAA0B,QAAW;AAAA,MACxD,cAAc,EAAE,2CAA2C,yBAAyB;AAAA,IACtF,CAAC;AAAA,EACL,CAAC;AAED,QAAM,UAAU,MAAM;AACpB,QAAI,CAAC,oBAAoB,UAAU,OAAO,QAAQ;AAChD,YAAM,QAAQ,SAAS,MAAM,CAAC;AAC9B,0BAAoB,MAAM,QAAQ;AAAA,IACpC;AAAA,EACF,GAAG,CAAC,UAAU,gBAAgB,CAAC;AAE/B,QAAM,UAAU,MAAM;AACpB,QAAI,CAAC,kBAAkB;AACrB,0BAAoB,CAAC,SAAU,KAAK,SAAS,CAAC,IAAI,IAAK;AACvD;AAAA,IACF;AACA,UAAM,QAAQ,iBAAiB,MAAM,GAAG;AACxC,UAAM,aAAa,MAAM,CAAC;AAC1B,QAAI,CAAC,YAAY;AACf,0BAAoB,CAAC,SAAU,KAAK,SAAS,CAAC,IAAI,IAAK;AACvD;AAAA,IACF;AAGA,UAAM,MAAM,gBAAgB,UAAU;AACtC,QAAI,CAAC,KAAK;AACR,cAAQ,KAAK,2CAA2C,UAAU;AAClE,0BAAoB,CAAC,SAAU,KAAK,SAAS,CAAC,IAAI,IAAK;AACvD;AAAA,IACF;AAEA,UAAM,UAAyB,CAAC;AAChC,eAAW,OAAO,OAAO,OAAO,GAAG,GAAG;AACpC,UAAI,OAAO,QAAQ,YAAY,CAAC,IAAI,KAAK,EAAG;AAC5C,YAAM,QAAQ,IAAI,KAAK;AACvB,UAAI,QAAQ,KAAK,CAAC,QAAQ,IAAI,UAAU,KAAK,EAAG;AAChD,YAAM,QAAQ,MACX,MAAM,GAAG,EACT,IAAI,CAAC,YAAa,UAAU,GAAG,QAAQ,CAAC,EAAE,YAAY,CAAC,GAAG,QAAQ,MAAM,CAAC,CAAC,KAAK,EAAG,EAClF,KAAK,GAAG,EACR,KAAK,KAAK;AACb,cAAQ,KAAK,EAAE,OAAO,MAAM,CAAC;AAAA,IAC/B;AACA,wBAAoB,CAAC,SAAU,qBAAqB,MAAM,OAAO,IAAI,OAAO,OAAQ;AAAA,EACtF,GAAG,CAAC,gBAAgB,CAAC;AAErB,QAAM;AAAA,IACJ,MAAM;AAAA,IACN,WAAW;AAAA,IACX,SAAS;AAAA,IACT,SAAS;AAAA,EACX,IAAI,SAAgC;AAAA,IAClC,UAAU,CAAC,kBAAkB,kBAAkB,YAAY;AAAA,IAC3D,SAAS,CAAC,CAAC;AAAA,IACX,SAAS,YACP,qBAAqB,qCAAqC,mBAAmB,gBAAgB,CAAC,IAAI,QAAW;AAAA,MAC3G,cAAc,EAAE,sCAAsC,+BAA+B;AAAA,IACvF,CAAC;AAAA,EACL,CAAC;AAED,QAAM,eAAe,MAAM,QAAQ,MAAM,KAAK,UAAU,OAAO,IAAI,GAAG,CAAC,GAAG,CAAC;AAC3E,QAAM,sBAAsB,MAAM,OAAsB,IAAI;AAE5D,QAAM,UAAU,MAAM;AACpB,UAAM,YAAY;AAClB,UAAM,YAAY,cAAc,oBAAoB;AACpD,QAAI,aAAa,cAAe;AAChC,QAAI,CAAC,KAAK;AACR,gBAAU,CAAC,SAAU,KAAK,SAAS,CAAC,IAAI,IAAK;AAC7C,kBAAY,CAAC,SAAU,SAAS,OAAO,OAAO,IAAK;AACnD,uBAAiB,KAAK;AACtB,0BAAoB,UAAU;AAC9B;AAAA,IACF;AACA,UAAM,aAAa,mBAAmB,KAAK,gBAAgB;AAC3D,cAAU,CAAC,SAAU,kBAAkB,MAAM,UAAU,IAAI,OAAO,UAAW;AAC7E,UAAM,eAAe,KAAK,aAAa;AACvC,gBAAY,CAAC,SAAU,SAAS,eAAe,OAAO,YAAa;AACnE,qBAAiB,KAAK;AACtB,wBAAoB,UAAU;AAAA,EAChC,GAAG,CAAC,cAAc,KAAK,kBAAkB,aAAa,CAAC;AAEvD,QAAM,EAAE,YAAY,IAAI,mBAAmB,EAAE,WAAW,0BAA0B,CAAC;AAEnF,QAAM,WAAW,YAAY;AAAA,IAC3B,YAAY,YAAY;AACtB,YAAM,UAAU,OACb,IAAI,CAAC,SAAS;AAAA,QACb,OAAO,sBAAsB,IAAI,OAAO,gBAAgB,EAAE,KAAK;AAAA,QAC/D,WAAW,IAAI,YAAY,sBAAsB,IAAI,WAAW,gBAAgB,EAAE,KAAK,IAAI;AAAA,MAC7F,EAAE,EACD,OAAO,CAAC,QAAQ,IAAI,MAAM,SAAS,CAAC,EACpC,IAAI,CAAC,SAAS;AAAA,QACb,OAAO,IAAI;AAAA,QACX,WAAW,IAAI,YAAY,IAAI,YAAY;AAAA,MAC7C,EAAE;AACJ,UAAI,CAAC,kBAAkB;AACrB,cAAM,IAAI,MAAM,EAAE,2CAA2C,gCAAgC,CAAC;AAAA,MAChG;AACA,UAAI,CAAC,QAAQ,QAAQ;AACnB,cAAM,IAAI,MAAM,EAAE,uCAAuC,mCAAmC,CAAC;AAAA,MAC/F;AACA,YAAM,UAAU,EAAE,UAAU,kBAAkB,QAAQ,SAAS,SAAS;AAKxE,aAAO,YAAY;AAAA,QACjB,WAAW,YAAY;AACrB,gBAAM,MAAM,MAAM;AAAA,YAChB,0BAA0B,KAAK,aAAa,IAAI;AAAA,YAChD,MAAM,QAAQ,4BAA4B;AAAA,cACxC,QAAQ;AAAA,cACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,cAC9C,MAAM,KAAK,UAAU,OAAO;AAAA,YAC9B,CAAC;AAAA,UACH;AACA,cAAI,CAAC,IAAI,IAAI;AACX,kBAAM,eAAe,IAAI,UAAU,EAAE,mCAAmC,+BAA+B,CAAC;AAAA,UAC1G;AACA,iBAAO;AAAA,QACT;AAAA,QACA,SAAS,CAAC;AAAA,QACV,iBAAiB;AAAA,MACnB,CAAC;AAAA,IACH;AAAA,IACA,WAAW,MAAM;AACf,YAAM,EAAE,mCAAmC,sBAAsB,GAAG,SAAS;AAC7E,WAAK,WAAW;AAAA,IAClB;AAAA,IACA,SAAS,CAAC,QAAa;AACrB,YAAM,UAAU,KAAK,WAAW,EAAE,mCAAmC,+BAA+B;AACpG,YAAM,SAAS,OAAO;AAAA,IACxB;AAAA,EACF,CAAC;AAED,QAAM,WAAW,MAAM;AACrB,qBAAiB,IAAI;AACrB,cAAU,CAAC,SAAS,CAAC,GAAG,MAAM,EAAE,IAAI,WAAW,GAAG,OAAO,IAAI,WAAW,KAAK,CAAC,CAAC;AAAA,EACjF;AAEA,QAAM,cAAc,CAAC,IAAY,UAAuC;AACtE,qBAAiB,IAAI;AACrB,cAAU,CAAC,SAAS,KAAK,IAAI,CAAC,QAAS,IAAI,OAAO,KAAK,EAAE,GAAG,KAAK,GAAG,MAAM,IAAI,GAAI,CAAC;AAAA,EACrF;AAEA,QAAM,cAAc,CAAC,OAAe;AAClC,qBAAiB,IAAI;AACrB,cAAU,CAAC,SAAS,KAAK,OAAO,CAAC,QAAQ,IAAI,OAAO,EAAE,CAAC;AAAA,EACzD;AAEA,QAAM,eAAe,MAAM;AACzB,QAAI,cAAc,kBAAkB;AAClC,aACE;AAAA,QAAC;AAAA;AAAA,UACC,OAAO,EAAE,+BAA+B,8BAAyB;AAAA,UACjE,WAAU;AAAA;AAAA,MACZ;AAAA,IAEJ;AACA,QAAI,UAAU;AACZ,aACE;AAAA,QAAC;AAAA;AAAA,UACC,OAAO,EAAE,sCAAsC,+BAA+B;AAAA,UAC9E,QACE,oBAAC,UAAO,MAAK,UAAS,SAAQ,WAAU,MAAK,MAAK,SAAS,MAAM,KAAK,WAAW,GAC9E,YAAE,qCAAqC,OAAO,GACjD;AAAA;AAAA,MAEJ;AAAA,IAEJ;AACA,QAAI,CAAC,OAAO,QAAQ;AAClB,aACE,oBAAC,SAAI,WAAU,qEACZ,YAAE,6BAA6B,uDAAuD,GACzF;AAAA,IAEJ;AACA,UAAM,qBAAqB,CAAC,UAA0B;AACpD,UAAI,SAAS,CAAC,aAAa,KAAK,CAAC,QAAQ,IAAI,UAAU,KAAK,GAAG;AAC7D,eAAO,CAAC,GAAG,cAAc,EAAE,OAAO,OAAO,MAAM,CAAC;AAAA,MAClD;AACA,aAAO;AAAA,IACT;AACA,WACE,oBAAC,SAAI,WAAU,mBACb,+BAAC,WAAM,WAAU,gCACf;AAAA,0BAAC,WACC,+BAAC,QAAG,WAAU,yDACZ;AAAA,4BAAC,QAAG,WAAU,uBACX,YAAE,oCAAoC,YAAY,GACrD;AAAA,QACA,oBAAC,QAAG,WAAU,uBACX,YAAE,mCAAmC,uBAAuB,GAC/D;AAAA,QACA,oBAAC,QAAG,WAAU,wBACX,YAAE,sCAAsC,SAAS,GACpD;AAAA,SACF,GACF;AAAA,MACA,oBAAC,WACE,iBAAO,IAAI,CAAC,QAAQ;AACnB,cAAM,YAAY,mBAAmB,IAAI,KAAK;AAC9C,cAAM,WAAW,mBAAmB,IAAI,SAAS;AACjD,eACE,qBAAC,QAAgB,WAAU,YACzB;AAAA,8BAAC,QAAG,WAAU,uBACZ;AAAA,YAAC;AAAA;AAAA,cACC,OAAO,IAAI,SAAS;AAAA,cACpB,eAAe,CAAC,UAAU,YAAY,IAAI,IAAI,EAAE,OAAO,SAAS,GAAG,CAAC;AAAA,cAEpE;AAAA,oCAAC,iBACC,8BAAC,eAAY,aAAa,EAAE,0CAA0C,cAAc,GAAG,GACzF;AAAA,gBACA,oBAAC,iBACE,oBAAU,IAAI,CAAC,WACd,oBAAC,cAA8B,OAAO,OAAO,OAC1C,iBAAO,SADO,OAAO,KAExB,CACD,GACH;AAAA;AAAA;AAAA,UACF,GACF;AAAA,UACA,qBAAC,QAAG,WAAU,uBACZ;AAAA;AAAA,cAAC;AAAA;AAAA,gBACC,OAAO,IAAI,aAAa;AAAA,gBACxB,eAAe,CAAC,UAAU,YAAY,IAAI,IAAI,EAAE,WAAW,SAAS,KAAK,CAAC;AAAA,gBAE1E;AAAA,sCAAC,iBACC,8BAAC,eAAY,aAAa,EAAE,yCAAyC,8BAA8B,GAAG,GACxG;AAAA,kBACA,oBAAC,iBACE,mBAAS,IAAI,CAAC,WACb,oBAAC,cAA8B,OAAO,OAAO,OAC1C,iBAAO,SADO,OAAO,KAExB,CACD,GACH;AAAA;AAAA;AAAA,YACF;AAAA,YACA,oBAAC,OAAE,WAAU,4CACV,YAAE,uCAAuC,kEAAkE,GAC9G;AAAA,aACF;AAAA,UACA,oBAAC,QAAG,WAAU,kCACZ;AAAA,YAAC;AAAA;AAAA,cACC,MAAK;AAAA,cACL,SAAQ;AAAA,cACR,MAAK;AAAA,cACL,WAAU;AAAA,cACV,cAAY,EAAE,sCAAsC,QAAQ;AAAA,cAC5D,SAAS,MAAM,YAAY,IAAI,EAAE;AAAA,cAEjC,8BAAC,UAAO,WAAU,WAAU;AAAA;AAAA,UAC9B,GACF;AAAA,aAjDO,IAAI,EAkDb;AAAA,MAEJ,CAAC,GACH;AAAA,OACF,GACF;AAAA,EAEJ;AAEA,SACE,oBAAC,SAAI,WAAU,aACb,+BAAC,SAAI,WAAU,+DACb;AAAA,yBAAC,SAAI,WAAU,aACb;AAAA,0BAAC,QAAG,WAAU,yBAAyB,YAAE,6BAA6B,YAAY,GAAE;AAAA,MACpF,oBAAC,OAAE,WAAU,iCACV,YAAE,mCAAmC,sFAAsF,GAC9H;AAAA,OACF;AAAA,IACA,oBAAC,SAAI,WAAU,gDACb,+BAAC,SAAI,WAAU,oBACb;AAAA,2BAAC,SACC;AAAA,4BAAC,WAAM,WAAU,iCACd,YAAE,oCAAoC,eAAe,GACxD;AAAA,QACA;AAAA,UAAC;AAAA;AAAA,YACC,OAAO,oBAAoB;AAAA,YAC3B,eAAe,CAAC,UAAU,oBAAoB,SAAS,EAAE;AAAA,YACzD,UAAU,mBAAmB,CAAC,CAAC;AAAA,YAE/B;AAAA,kCAAC,iBAAc,WAAU,QACvB,8BAAC,eAAY,aAAa,EAAE,mCAAmC,kBAAkB,GAAG,GACtF;AAAA,cACA,oBAAC,iBACG,qBAAU,SAAS,CAAC,GAAG,IAAI,CAAC,SAC5B,qBAAC,cAA+B,OAAO,KAAK,UACzC;AAAA,qBAAK,SAAS,KAAK;AAAA,gBAAS;AAAA,gBAAE,KAAK,WAAW,WAAW,IAAI,EAAE,qCAAqC,QAAQ,CAAC,MAAM;AAAA,mBADrG,KAAK,QAEtB,CACD,GACH;AAAA;AAAA;AAAA,QACF;AAAA,QACC,gBACC,oBAAC,OAAE,WAAU,uCACV,YAAE,2CAA2C,yBAAyB,GACzE,IAEA,oBAAC,OAAE,WAAU,sCACV,YAAE,kCAAkC,yEAAyE,GAChH;AAAA,SAEJ;AAAA,MACA,qBAAC,SAAI,WAAU,0CACb;AAAA;AAAA,UAAC;AAAA;AAAA,YACC,IAAG;AAAA,YACH,SAAS;AAAA,YACT,iBAAiB,CAAC,YAAY,YAAY,YAAY,IAAI;AAAA;AAAA,QAC5D;AAAA,QACA,oBAAC,WAAM,SAAQ,8BACZ,YAAE,8BAA8B,oCAAoC,GACvE;AAAA,SACF;AAAA,OACF,GACF;AAAA,IACA,qBAAC,SAAI,WAAU,0CACb;AAAA,2BAAC,SAAI,WAAU,0CACb;AAAA,6BAAC,SACC;AAAA,8BAAC,QAAG,WAAU,uBAAuB,YAAE,oCAAoC,kBAAkB,GAAE;AAAA,UAC/F,oBAAC,OAAE,WAAU,iCACV,YAAE,uCAAuC,mEAAmE,GAC/G;AAAA,WACF;AAAA,QACA,qBAAC,UAAO,MAAK,UAAS,SAAQ,WAAU,MAAK,MAAK,SAAS,UACzD;AAAA,8BAAC,QAAK,WAAU,gBAAe;AAAA,UAC9B,EAAE,mCAAmC,WAAW;AAAA,WACnD;AAAA,SACF;AAAA,MACC,aAAa;AAAA,OAChB;AAAA,IACA,oBAAC,SAAI,WAAU,oBACb;AAAA,MAAC;AAAA;AAAA,QACC,MAAK;AAAA,QACL,SAAS,MAAM,SAAS,OAAO;AAAA,QAC/B,UAAU,SAAS,aAAa,mBAAmB,CAAC,CAAC,iBAAiB,CAAC;AAAA,QAEvE;AAAA,8BAAC,QAAK,WAAU,gBAAe;AAAA,UAC9B,SAAS,YACN,EAAE,sCAAsC,cAAS,IACjD,EAAE,oCAAoC,qBAAqB;AAAA;AAAA;AAAA,IACjE,GACF;AAAA,KACF,GACF;AAEJ;",
+  "sourcesContent": ["\"use client\"\n\nimport * as React from 'react'\nimport { useQuery, useMutation } from '@tanstack/react-query'\nimport { Button } from '@open-mercato/ui/primitives/button'\nimport { Checkbox } from '@open-mercato/ui/primitives/checkbox'\nimport {\n  Select,\n  SelectContent,\n  SelectItem,\n  SelectTrigger,\n  SelectValue,\n} from '@open-mercato/ui/primitives/select'\nimport { LoadingMessage, ErrorMessage } from '@open-mercato/ui/backend/detail'\nimport { flash } from '@open-mercato/ui/backend/FlashMessages'\nimport { apiCall, readApiResultOrThrow, withScopedApiRequestHeaders } from '@open-mercato/ui/backend/utils/apiCall'\nimport { raiseCrudError } from '@open-mercato/ui/backend/utils/serverErrors'\nimport { useGuardedMutation } from '@open-mercato/ui/backend/injection/useGuardedMutation'\nimport { buildOptimisticLockHeader } from '@open-mercato/ui/backend/utils/optimisticLock'\nimport { useCustomFieldDefs, type CustomFieldDefDto } from '@open-mercato/ui/backend/utils/customFieldDefs'\nimport { Plus, Save, Trash2 } from 'lucide-react'\nimport { useOrganizationScopeVersion } from '@open-mercato/shared/lib/frontend/useOrganizationScope'\nimport { useT } from '@open-mercato/shared/lib/i18n/context'\nimport { getEntityFields } from '#generated/entity-fields-registry'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('entities').child({ component: 'EncryptionManager' })\n\ntype EntityOption = { entityId: string; label?: string; source?: string }\ntype FieldOption = { value: string; label: string }\n\ntype EncryptionFieldRow = {\n  id: string\n  field: string\n  hashField?: string | null\n}\n\ntype EncryptionMapResponse = {\n  entityId: string\n  fields?: Array<{ field: string; hashField?: string | null }>\n  isActive?: boolean\n  updatedAt?: string | null\n}\n\ntype CanonicalOption = { value: string; label?: string }\n\nconst EMPTY_FIELD_DEFS: CustomFieldDefDto[] = []\n\nfunction normalizeToken(value: string): string {\n  return value\n    .replace(/([a-z0-9])([A-Z])/g, '$1_$2')\n    .replace(/[^a-z0-9]/gi, '')\n    .toLowerCase()\n}\n\nfunction canonicalizeFieldName(raw: string, options: CanonicalOption[]): string {\n  const trimmed = typeof raw === 'string' ? raw.trim() : ''\n  if (!trimmed) return ''\n  const normalized = normalizeToken(trimmed)\n  for (const option of options) {\n    const optionValue = typeof option.value === 'string' ? option.value.trim() : ''\n    if (optionValue && normalizeToken(optionValue) === normalized) return optionValue\n    if (option.label && normalizeToken(option.label) === normalized) return optionValue\n  }\n  return trimmed\n}\n\nfunction normalizeFieldRows(raw: EncryptionMapResponse | undefined, options: CanonicalOption[]): EncryptionFieldRow[] {\n  const rows = Array.isArray(raw?.fields) ? raw!.fields : []\n  return rows.map((entry, idx) => ({\n    id: `${entry.field}-${idx}`,\n    field: canonicalizeFieldName(entry.field, options),\n    hashField: entry.hashField ? canonicalizeFieldName(entry.hashField, options) : null,\n  }))\n}\n\nfunction areFieldRowsEqual(a: EncryptionFieldRow[], b: EncryptionFieldRow[]): boolean {\n  if (a === b) return true\n  if (a.length !== b.length) return false\n  return a.every((row, idx) => {\n    const other = b[idx]\n    return !!other && row.id === other.id && row.field === other.field && (row.hashField ?? null) === (other.hashField ?? null)\n  })\n}\n\nfunction areFieldOptionsEqual(a: FieldOption[], b: FieldOption[]): boolean {\n  if (a === b) return true\n  if (a.length !== b.length) return false\n  return a.every((option, idx) => {\n    const other = b[idx]\n    return !!other && option.value === other.value && option.label === other.label\n  })\n}\n\nfunction buildRowId(): string {\n  if (typeof crypto !== 'undefined' && crypto.randomUUID) return crypto.randomUUID()\n  return `row-${Math.random().toString(36).slice(2)}`\n}\n\nexport function EncryptionManager() {\n  const t = useT()\n  const scopeVersion = useOrganizationScopeVersion()\n  const [selectedEntityId, setSelectedEntityId] = React.useState('')\n  const [fields, setFields] = React.useState<EncryptionFieldRow[]>([])\n  const [isActive, setIsActive] = React.useState(true)\n  const [baseFieldOptions, setBaseFieldOptions] = React.useState<FieldOption[]>([])\n  const [hasUserEdited, setHasUserEdited] = React.useState(false)\n  const { data: rawFieldDefs, isLoading: loadingFieldDefs } = useCustomFieldDefs(selectedEntityId ? [selectedEntityId] : [], {\n    enabled: !!selectedEntityId,\n  })\n  const fieldDefs = rawFieldDefs ?? EMPTY_FIELD_DEFS\n  const canonicalOptions = React.useMemo<CanonicalOption[]>(() => {\n    const options: CanonicalOption[] = []\n    for (const option of baseFieldOptions) {\n      if (!option.value) continue\n      if (options.some((opt) => opt.value === option.value)) continue\n      options.push(option)\n    }\n    for (const def of fieldDefs) {\n      const key = typeof def.key === 'string' ? def.key.trim() : ''\n      if (!key || options.some((opt) => opt.value === key)) continue\n      const label = typeof def.label === 'string' ? def.label : undefined\n      options.push({ value: key, label })\n    }\n    return options\n  }, [baseFieldOptions, fieldDefs])\n  const fieldOptions = React.useMemo(() => {\n    const entries = new Map<string, string>()\n    for (const option of baseFieldOptions) {\n      if (!option.value || entries.has(option.value)) continue\n      entries.set(option.value, option.label || option.value)\n    }\n    for (const def of fieldDefs) {\n      const key = typeof def.key === 'string' ? def.key.trim() : ''\n      if (!key || entries.has(key)) continue\n      const label = typeof def.label === 'string' && def.label.trim().length ? def.label : key\n      entries.set(key, label)\n    }\n    for (const row of fields) {\n      const main = row.field?.trim()\n      if (main && !entries.has(main)) entries.set(main, main)\n      const hash = row.hashField?.trim()\n      if (hash && !entries.has(hash)) entries.set(hash, hash)\n    }\n    return Array.from(entries.entries()).map(([value, label]) => ({ value, label }))\n  }, [baseFieldOptions, fieldDefs, fields])\n\n  const { data: entities, isLoading: loadingEntities, error: entitiesError } = useQuery<{ items: EntityOption[] }>({\n    queryKey: ['entities-list', scopeVersion],\n    queryFn: async () =>\n      readApiResultOrThrow('/api/entities/entities', undefined, {\n        errorMessage: t('entities.encryption.errors.loadEntities', 'Failed to load entities'),\n      }),\n  })\n\n  React.useEffect(() => {\n    if (!selectedEntityId && entities?.items?.length) {\n      const first = entities.items[0]\n      setSelectedEntityId(first.entityId)\n    }\n  }, [entities, selectedEntityId])\n\n  React.useEffect(() => {\n    if (!selectedEntityId) {\n      setBaseFieldOptions((prev) => (prev.length ? [] : prev))\n      return\n    }\n    const parts = selectedEntityId.split(':')\n    const entitySlug = parts[1]\n    if (!entitySlug) {\n      setBaseFieldOptions((prev) => (prev.length ? [] : prev))\n      return\n    }\n\n    // Use static registry instead of dynamic import for Turbopack compatibility\n    const mod = getEntityFields(entitySlug)\n    if (!mod) {\n      logger.warn('No fields found for entity', { entitySlug })\n      setBaseFieldOptions((prev) => (prev.length ? [] : prev))\n      return\n    }\n\n    const options: FieldOption[] = []\n    for (const raw of Object.values(mod)) {\n      if (typeof raw !== 'string' || !raw.trim()) continue\n      const value = raw.trim()\n      if (options.some((opt) => opt.value === value)) continue\n      const label = value\n        .split('_')\n        .map((segment) => (segment ? `${segment[0].toUpperCase()}${segment.slice(1)}` : ''))\n        .join(' ')\n        .trim() || value\n      options.push({ value, label })\n    }\n    setBaseFieldOptions((prev) => (areFieldOptionsEqual(prev, options) ? prev : options))\n  }, [selectedEntityId])\n\n  const {\n    data: map,\n    isLoading: loadingMap,\n    isError: mapError,\n    refetch: refetchMap,\n  } = useQuery<EncryptionMapResponse>({\n    queryKey: ['encryption-map', selectedEntityId, scopeVersion],\n    enabled: !!selectedEntityId,\n    queryFn: async () =>\n      readApiResultOrThrow(`/api/entities/encryption?entityId=${encodeURIComponent(selectedEntityId)}`, undefined, {\n        errorMessage: t('entities.encryption.errors.loadMap', 'Failed to load encryption map'),\n      }),\n  })\n\n  const mapSignature = React.useMemo(() => JSON.stringify(map ?? null), [map])\n  const lastMapSignatureRef = React.useRef<string | null>(null)\n\n  React.useEffect(() => {\n    const signature = mapSignature\n    const isSameMap = signature === lastMapSignatureRef.current\n    if (isSameMap && hasUserEdited) return\n    if (!map) {\n      setFields((prev) => (prev.length ? [] : prev))\n      setIsActive((prev) => (prev === true ? prev : true))\n      setHasUserEdited(false)\n      lastMapSignatureRef.current = signature\n      return\n    }\n    const nextFields = normalizeFieldRows(map, canonicalOptions)\n    setFields((prev) => (areFieldRowsEqual(prev, nextFields) ? prev : nextFields))\n    const nextIsActive = map?.isActive !== false\n    setIsActive((prev) => (prev === nextIsActive ? prev : nextIsActive))\n    setHasUserEdited(false)\n    lastMapSignatureRef.current = signature\n  }, [mapSignature, map, canonicalOptions, hasUserEdited])\n\n  const { runMutation } = useGuardedMutation({ contextId: 'entities.encryption-map' })\n\n  const mutation = useMutation({\n    mutationFn: async () => {\n      const trimmed = fields\n        .map((row) => ({\n          field: canonicalizeFieldName(row.field, canonicalOptions).trim(),\n          hashField: row.hashField ? canonicalizeFieldName(row.hashField, canonicalOptions).trim() : '',\n        }))\n        .filter((row) => row.field.length > 0)\n        .map((row) => ({\n          field: row.field,\n          hashField: row.hashField ? row.hashField : null,\n        }))\n      if (!selectedEntityId) {\n        throw new Error(t('entities.encryption.errors.selectEntity', 'Select an entity before saving'))\n      }\n      if (!trimmed.length) {\n        throw new Error(t('entities.encryption.errors.noFields', 'Add at least one field to encrypt'))\n      }\n      const payload = { entityId: selectedEntityId, fields: trimmed, isActive }\n      // Route the write through the guarded mutation helper so global injection\n      // modules (mutation guard, record-lock conflict handling) can run, and send\n      // the loaded map's version so a stale tab cannot silently overwrite a newer\n      // encryption configuration (the server rejects mismatches with a 409).\n      return runMutation({\n        operation: async () => {\n          const res = await withScopedApiRequestHeaders(\n            buildOptimisticLockHeader(map?.updatedAt ?? null),\n            () => apiCall('/api/entities/encryption', {\n              method: 'POST',\n              headers: { 'content-type': 'application/json' },\n              body: JSON.stringify(payload),\n            }),\n          )\n          if (!res.ok) {\n            await raiseCrudError(res.response, t('entities.encryption.errors.save', 'Failed to save encryption map'))\n          }\n          return true\n        },\n        context: {},\n        mutationPayload: payload,\n      })\n    },\n    onSuccess: () => {\n      flash(t('entities.encryption.flash.saved', 'Encryption map saved'), 'success')\n      void refetchMap()\n    },\n    onError: (err: any) => {\n      const message = err?.message || t('entities.encryption.errors.save', 'Failed to save encryption map')\n      flash(message, 'error')\n    },\n  })\n\n  const addField = () => {\n    setHasUserEdited(true)\n    setFields((prev) => [...prev, { id: buildRowId(), field: '', hashField: null }])\n  }\n\n  const updateField = (id: string, patch: Partial<EncryptionFieldRow>) => {\n    setHasUserEdited(true)\n    setFields((prev) => prev.map((row) => (row.id === id ? { ...row, ...patch } : row)))\n  }\n\n  const removeField = (id: string) => {\n    setHasUserEdited(true)\n    setFields((prev) => prev.filter((row) => row.id !== id))\n  }\n\n  const renderFields = () => {\n    if (loadingMap || loadingFieldDefs) {\n      return (\n        <LoadingMessage\n          label={t('entities.encryption.loading', 'Loading encryption map\u2026')}\n          className=\"border-0 bg-transparent p-4\"\n        />\n      )\n    }\n    if (mapError) {\n      return (\n        <ErrorMessage\n          label={t('entities.encryption.errors.loadMap', 'Failed to load encryption map')}\n          action={(\n            <Button type=\"button\" variant=\"outline\" size=\"sm\" onClick={() => void refetchMap()}>\n              {t('entities.encryption.actions.retry', 'Retry')}\n            </Button>\n          )}\n        />\n      )\n    }\n    if (!fields.length) {\n      return (\n        <div className=\"rounded border bg-background/80 p-4 text-sm text-muted-foreground\">\n          {t('entities.encryption.empty', 'No fields are encrypted yet. Add the first one below.')}\n        </div>\n      )\n    }\n    const withFallbackOption = (value?: string | null) => {\n      if (value && !fieldOptions.some((opt) => opt.value === value)) {\n        return [...fieldOptions, { value, label: value }]\n      }\n      return fieldOptions\n    }\n    return (\n      <div className=\"overflow-x-auto\">\n        <table className=\"w-full min-w-[720px] text-sm\">\n          <thead>\n            <tr className=\"text-xs uppercase tracking-wide text-muted-foreground\">\n              <th className=\"px-3 py-2 text-left\">\n                {t('entities.encryption.fields.field', 'Field name')}\n              </th>\n              <th className=\"px-3 py-2 text-left\">\n                {t('entities.encryption.fields.hash', 'Hash field (optional)')}\n              </th>\n              <th className=\"px-3 py-2 text-right\">\n                {t('entities.encryption.fields.actions', 'Actions')}\n              </th>\n            </tr>\n          </thead>\n          <tbody>\n            {fields.map((row) => {\n              const fieldOpts = withFallbackOption(row.field)\n              const hashOpts = withFallbackOption(row.hashField)\n              return (\n                <tr key={row.id} className=\"border-t\">\n                  <td className=\"px-3 py-2 align-top\">\n                    <Select\n                      value={row.field || undefined}\n                      onValueChange={(value) => updateField(row.id, { field: value ?? '' })}\n                    >\n                      <SelectTrigger>\n                        <SelectValue placeholder={t('entities.encryption.fields.selectField', 'Select field')} />\n                      </SelectTrigger>\n                      <SelectContent>\n                        {fieldOpts.map((option) => (\n                          <SelectItem key={option.value} value={option.value}>\n                            {option.label}\n                          </SelectItem>\n                        ))}\n                      </SelectContent>\n                    </Select>\n                  </td>\n                  <td className=\"px-3 py-2 align-top\">\n                    <Select\n                      value={row.hashField || undefined}\n                      onValueChange={(value) => updateField(row.id, { hashField: value || null })}\n                    >\n                      <SelectTrigger>\n                        <SelectValue placeholder={t('entities.encryption.fields.selectHash', 'Select hash field (optional)')} />\n                      </SelectTrigger>\n                      <SelectContent>\n                        {hashOpts.map((option) => (\n                          <SelectItem key={option.value} value={option.value}>\n                            {option.label}\n                          </SelectItem>\n                        ))}\n                      </SelectContent>\n                    </Select>\n                    <p className=\"mt-1 text-overline text-muted-foreground\">\n                      {t('entities.encryption.fields.hashHint', 'Use when lookups must stay deterministic (e.g., login by email).')}\n                    </p>\n                  </td>\n                  <td className=\"px-3 py-2 align-top text-right\">\n                    <Button\n                      type=\"button\"\n                      variant=\"ghost\"\n                      size=\"sm\"\n                      className=\"h-9 w-9 px-0\"\n                      aria-label={t('entities.encryption.actions.remove', 'Remove')}\n                      onClick={() => removeField(row.id)}\n                    >\n                      <Trash2 className=\"h-4 w-4\" />\n                    </Button>\n                  </td>\n                </tr>\n              )\n            })}\n          </tbody>\n        </table>\n      </div>\n    )\n  }\n\n  return (\n    <div className=\"space-y-6\">\n      <div className=\"flex flex-col gap-3 rounded-lg border bg-card p-4 shadow-sm\">\n        <div className=\"space-y-2\">\n          <h2 className=\"text-xl font-semibold\">{t('entities.encryption.title', 'Encryption')}</h2>\n          <p className=\"text-sm text-muted-foreground\">\n            {t('entities.encryption.description', 'Manage which entity fields are encrypted with tenant keys and optional hash columns.')}\n          </p>\n        </div>\n        <div className=\"flex flex-col gap-4 sm:flex-row sm:items-end\">\n          <div className=\"flex-1 space-y-3\">\n            <div>\n              <label className=\"text-xs text-muted-foreground\">\n                {t('entities.encryption.selectEntity', 'Choose entity')}\n              </label>\n              <Select\n                value={selectedEntityId || undefined}\n                onValueChange={(value) => setSelectedEntityId(value ?? '')}\n                disabled={loadingEntities || !!entitiesError}\n              >\n                <SelectTrigger className=\"mt-1\">\n                  <SelectValue placeholder={t('entities.encryption.placeholder', 'Select an entity')} />\n                </SelectTrigger>\n                <SelectContent>\n                  {(entities?.items || []).map((item) => (\n                    <SelectItem key={item.entityId} value={item.entityId}>\n                      {item.label || item.entityId} {item.source === 'custom' ? `(${t('entities.encryption.source.custom', 'custom')})` : ''}\n                    </SelectItem>\n                  ))}\n                </SelectContent>\n              </Select>\n              {entitiesError ? (\n                <p className=\"mt-1 text-xs text-status-error-text\">\n                  {t('entities.encryption.errors.loadEntities', 'Failed to load entities')}\n                </p>\n              ) : (\n                <p className=\"mt-1 text-xs text-muted-foreground\">\n                  {t('entities.encryption.entityHint', 'Maps apply per tenant/organization. Use field names from your entities.')}\n                </p>\n              )}\n            </div>\n            <div className=\"inline-flex items-center gap-2 text-sm\">\n              <Checkbox\n                id=\"entities-encryption-active\"\n                checked={isActive}\n                onCheckedChange={(checked) => setIsActive(checked === true)}\n              />\n              <label htmlFor=\"entities-encryption-active\">\n                {t('entities.encryption.active', 'Encryption enabled for this entity')}\n              </label>\n            </div>\n          </div>\n        </div>\n        <div className=\"rounded-lg border bg-background/80 p-4\">\n          <div className=\"mb-3 flex items-center justify-between\">\n            <div>\n              <h3 className=\"text-sm font-medium\">{t('entities.encryption.fields.title', 'Encrypted fields')}</h3>\n              <p className=\"text-xs text-muted-foreground\">\n                {t('entities.encryption.fields.subtitle', 'List the attributes that should be encrypted with the tenant key.')}\n              </p>\n            </div>\n            <Button type=\"button\" variant=\"outline\" size=\"sm\" onClick={addField}>\n              <Plus className=\"mr-2 h-4 w-4\" />\n              {t('entities.encryption.actions.add', 'Add field')}\n            </Button>\n          </div>\n          {renderFields()}\n        </div>\n        <div className=\"flex justify-end\">\n          <Button\n            type=\"button\"\n            onClick={() => mutation.mutate()}\n            disabled={mutation.isPending || loadingEntities || !!entitiesError || !selectedEntityId}\n          >\n            <Save className=\"mr-2 h-4 w-4\" />\n            {mutation.isPending\n              ? t('entities.encryption.actions.saving', 'Saving\u2026')\n              : t('entities.encryption.actions.save', 'Save encryption map')}\n          </Button>\n        </div>\n      </div>\n    </div>\n  )\n}\n"],
+  "mappings": ";AAiTQ,cAmCI,YAnCJ;AA/SR,YAAY,WAAW;AACvB,SAAS,UAAU,mBAAmB;AACtC,SAAS,cAAc;AACvB,SAAS,gBAAgB;AACzB;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,gBAAgB,oBAAoB;AAC7C,SAAS,aAAa;AACtB,SAAS,SAAS,sBAAsB,mCAAmC;AAC3E,SAAS,sBAAsB;AAC/B,SAAS,0BAA0B;AACnC,SAAS,iCAAiC;AAC1C,SAAS,0BAAkD;AAC3D,SAAS,MAAM,MAAM,cAAc;AACnC,SAAS,mCAAmC;AAC5C,SAAS,YAAY;AACrB,SAAS,uBAAuB;AAChC,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,UAAU,EAAE,MAAM,EAAE,WAAW,oBAAoB,CAAC;AAoBhF,MAAM,mBAAwC,CAAC;AAE/C,SAAS,eAAe,OAAuB;AAC7C,SAAO,MACJ,QAAQ,sBAAsB,OAAO,EACrC,QAAQ,eAAe,EAAE,EACzB,YAAY;AACjB;AAEA,SAAS,sBAAsB,KAAa,SAAoC;AAC9E,QAAM,UAAU,OAAO,QAAQ,WAAW,IAAI,KAAK,IAAI;AACvD,MAAI,CAAC,QAAS,QAAO;AACrB,QAAM,aAAa,eAAe,OAAO;AACzC,aAAW,UAAU,SAAS;AAC5B,UAAM,cAAc,OAAO,OAAO,UAAU,WAAW,OAAO,MAAM,KAAK,IAAI;AAC7E,QAAI,eAAe,eAAe,WAAW,MAAM,WAAY,QAAO;AACtE,QAAI,OAAO,SAAS,eAAe,OAAO,KAAK,MAAM,WAAY,QAAO;AAAA,EAC1E;AACA,SAAO;AACT;AAEA,SAAS,mBAAmB,KAAwC,SAAkD;AACpH,QAAM,OAAO,MAAM,QAAQ,KAAK,MAAM,IAAI,IAAK,SAAS,CAAC;AACzD,SAAO,KAAK,IAAI,CAAC,OAAO,SAAS;AAAA,IAC/B,IAAI,GAAG,MAAM,KAAK,IAAI,GAAG;AAAA,IACzB,OAAO,sBAAsB,MAAM,OAAO,OAAO;AAAA,IACjD,WAAW,MAAM,YAAY,sBAAsB,MAAM,WAAW,OAAO,IAAI;AAAA,EACjF,EAAE;AACJ;AAEA,SAAS,kBAAkB,GAAyB,GAAkC;AACpF,MAAI,MAAM,EAAG,QAAO;AACpB,MAAI,EAAE,WAAW,EAAE,OAAQ,QAAO;AAClC,SAAO,EAAE,MAAM,CAAC,KAAK,QAAQ;AAC3B,UAAM,QAAQ,EAAE,GAAG;AACnB,WAAO,CAAC,CAAC,SAAS,IAAI,OAAO,MAAM,MAAM,IAAI,UAAU,MAAM,UAAU,IAAI,aAAa,WAAW,MAAM,aAAa;AAAA,EACxH,CAAC;AACH;AAEA,SAAS,qBAAqB,GAAkB,GAA2B;AACzE,MAAI,MAAM,EAAG,QAAO;AACpB,MAAI,EAAE,WAAW,EAAE,OAAQ,QAAO;AAClC,SAAO,EAAE,MAAM,CAAC,QAAQ,QAAQ;AAC9B,UAAM,QAAQ,EAAE,GAAG;AACnB,WAAO,CAAC,CAAC,SAAS,OAAO,UAAU,MAAM,SAAS,OAAO,UAAU,MAAM;AAAA,EAC3E,CAAC;AACH;AAEA,SAAS,aAAqB;AAC5B,MAAI,OAAO,WAAW,eAAe,OAAO,WAAY,QAAO,OAAO,WAAW;AACjF,SAAO,OAAO,KAAK,OAAO,EAAE,SAAS,EAAE,EAAE,MAAM,CAAC,CAAC;AACnD;AAEO,SAAS,oBAAoB;AAClC,QAAM,IAAI,KAAK;AACf,QAAM,eAAe,4BAA4B;AACjD,QAAM,CAAC,kBAAkB,mBAAmB,IAAI,MAAM,SAAS,EAAE;AACjE,QAAM,CAAC,QAAQ,SAAS,IAAI,MAAM,SAA+B,CAAC,CAAC;AACnE,QAAM,CAAC,UAAU,WAAW,IAAI,MAAM,SAAS,IAAI;AACnD,QAAM,CAAC,kBAAkB,mBAAmB,IAAI,MAAM,SAAwB,CAAC,CAAC;AAChF,QAAM,CAAC,eAAe,gBAAgB,IAAI,MAAM,SAAS,KAAK;AAC9D,QAAM,EAAE,MAAM,cAAc,WAAW,iBAAiB,IAAI,mBAAmB,mBAAmB,CAAC,gBAAgB,IAAI,CAAC,GAAG;AAAA,IACzH,SAAS,CAAC,CAAC;AAAA,EACb,CAAC;AACD,QAAM,YAAY,gBAAgB;AAClC,QAAM,mBAAmB,MAAM,QAA2B,MAAM;AAC9D,UAAM,UAA6B,CAAC;AACpC,eAAW,UAAU,kBAAkB;AACrC,UAAI,CAAC,OAAO,MAAO;AACnB,UAAI,QAAQ,KAAK,CAAC,QAAQ,IAAI,UAAU,OAAO,KAAK,EAAG;AACvD,cAAQ,KAAK,MAAM;AAAA,IACrB;AACA,eAAW,OAAO,WAAW;AAC3B,YAAM,MAAM,OAAO,IAAI,QAAQ,WAAW,IAAI,IAAI,KAAK,IAAI;AAC3D,UAAI,CAAC,OAAO,QAAQ,KAAK,CAAC,QAAQ,IAAI,UAAU,GAAG,EAAG;AACtD,YAAM,QAAQ,OAAO,IAAI,UAAU,WAAW,IAAI,QAAQ;AAC1D,cAAQ,KAAK,EAAE,OAAO,KAAK,MAAM,CAAC;AAAA,IACpC;AACA,WAAO;AAAA,EACT,GAAG,CAAC,kBAAkB,SAAS,CAAC;AAChC,QAAM,eAAe,MAAM,QAAQ,MAAM;AACvC,UAAM,UAAU,oBAAI,IAAoB;AACxC,eAAW,UAAU,kBAAkB;AACrC,UAAI,CAAC,OAAO,SAAS,QAAQ,IAAI,OAAO,KAAK,EAAG;AAChD,cAAQ,IAAI,OAAO,OAAO,OAAO,SAAS,OAAO,KAAK;AAAA,IACxD;AACA,eAAW,OAAO,WAAW;AAC3B,YAAM,MAAM,OAAO,IAAI,QAAQ,WAAW,IAAI,IAAI,KAAK,IAAI;AAC3D,UAAI,CAAC,OAAO,QAAQ,IAAI,GAAG,EAAG;AAC9B,YAAM,QAAQ,OAAO,IAAI,UAAU,YAAY,IAAI,MAAM,KAAK,EAAE,SAAS,IAAI,QAAQ;AACrF,cAAQ,IAAI,KAAK,KAAK;AAAA,IACxB;AACA,eAAW,OAAO,QAAQ;AACxB,YAAM,OAAO,IAAI,OAAO,KAAK;AAC7B,UAAI,QAAQ,CAAC,QAAQ,IAAI,IAAI,EAAG,SAAQ,IAAI,MAAM,IAAI;AACtD,YAAM,OAAO,IAAI,WAAW,KAAK;AACjC,UAAI,QAAQ,CAAC,QAAQ,IAAI,IAAI,EAAG,SAAQ,IAAI,MAAM,IAAI;AAAA,IACxD;AACA,WAAO,MAAM,KAAK,QAAQ,QAAQ,CAAC,EAAE,IAAI,CAAC,CAAC,OAAO,KAAK,OAAO,EAAE,OAAO,MAAM,EAAE;AAAA,EACjF,GAAG,CAAC,kBAAkB,WAAW,MAAM,CAAC;AAExC,QAAM,EAAE,MAAM,UAAU,WAAW,iBAAiB,OAAO,cAAc,IAAI,SAAoC;AAAA,IAC/G,UAAU,CAAC,iBAAiB,YAAY;AAAA,IACxC,SAAS,YACP,qBAAqB,0BAA0B,QAAW;AAAA,MACxD,cAAc,EAAE,2CAA2C,yBAAyB;AAAA,IACtF,CAAC;AAAA,EACL,CAAC;AAED,QAAM,UAAU,MAAM;AACpB,QAAI,CAAC,oBAAoB,UAAU,OAAO,QAAQ;AAChD,YAAM,QAAQ,SAAS,MAAM,CAAC;AAC9B,0BAAoB,MAAM,QAAQ;AAAA,IACpC;AAAA,EACF,GAAG,CAAC,UAAU,gBAAgB,CAAC;AAE/B,QAAM,UAAU,MAAM;AACpB,QAAI,CAAC,kBAAkB;AACrB,0BAAoB,CAAC,SAAU,KAAK,SAAS,CAAC,IAAI,IAAK;AACvD;AAAA,IACF;AACA,UAAM,QAAQ,iBAAiB,MAAM,GAAG;AACxC,UAAM,aAAa,MAAM,CAAC;AAC1B,QAAI,CAAC,YAAY;AACf,0BAAoB,CAAC,SAAU,KAAK,SAAS,CAAC,IAAI,IAAK;AACvD;AAAA,IACF;AAGA,UAAM,MAAM,gBAAgB,UAAU;AACtC,QAAI,CAAC,KAAK;AACR,aAAO,KAAK,8BAA8B,EAAE,WAAW,CAAC;AACxD,0BAAoB,CAAC,SAAU,KAAK,SAAS,CAAC,IAAI,IAAK;AACvD;AAAA,IACF;AAEA,UAAM,UAAyB,CAAC;AAChC,eAAW,OAAO,OAAO,OAAO,GAAG,GAAG;AACpC,UAAI,OAAO,QAAQ,YAAY,CAAC,IAAI,KAAK,EAAG;AAC5C,YAAM,QAAQ,IAAI,KAAK;AACvB,UAAI,QAAQ,KAAK,CAAC,QAAQ,IAAI,UAAU,KAAK,EAAG;AAChD,YAAM,QAAQ,MACX,MAAM,GAAG,EACT,IAAI,CAAC,YAAa,UAAU,GAAG,QAAQ,CAAC,EAAE,YAAY,CAAC,GAAG,QAAQ,MAAM,CAAC,CAAC,KAAK,EAAG,EAClF,KAAK,GAAG,EACR,KAAK,KAAK;AACb,cAAQ,KAAK,EAAE,OAAO,MAAM,CAAC;AAAA,IAC/B;AACA,wBAAoB,CAAC,SAAU,qBAAqB,MAAM,OAAO,IAAI,OAAO,OAAQ;AAAA,EACtF,GAAG,CAAC,gBAAgB,CAAC;AAErB,QAAM;AAAA,IACJ,MAAM;AAAA,IACN,WAAW;AAAA,IACX,SAAS;AAAA,IACT,SAAS;AAAA,EACX,IAAI,SAAgC;AAAA,IAClC,UAAU,CAAC,kBAAkB,kBAAkB,YAAY;AAAA,IAC3D,SAAS,CAAC,CAAC;AAAA,IACX,SAAS,YACP,qBAAqB,qCAAqC,mBAAmB,gBAAgB,CAAC,IAAI,QAAW;AAAA,MAC3G,cAAc,EAAE,sCAAsC,+BAA+B;AAAA,IACvF,CAAC;AAAA,EACL,CAAC;AAED,QAAM,eAAe,MAAM,QAAQ,MAAM,KAAK,UAAU,OAAO,IAAI,GAAG,CAAC,GAAG,CAAC;AAC3E,QAAM,sBAAsB,MAAM,OAAsB,IAAI;AAE5D,QAAM,UAAU,MAAM;AACpB,UAAM,YAAY;AAClB,UAAM,YAAY,cAAc,oBAAoB;AACpD,QAAI,aAAa,cAAe;AAChC,QAAI,CAAC,KAAK;AACR,gBAAU,CAAC,SAAU,KAAK,SAAS,CAAC,IAAI,IAAK;AAC7C,kBAAY,CAAC,SAAU,SAAS,OAAO,OAAO,IAAK;AACnD,uBAAiB,KAAK;AACtB,0BAAoB,UAAU;AAC9B;AAAA,IACF;AACA,UAAM,aAAa,mBAAmB,KAAK,gBAAgB;AAC3D,cAAU,CAAC,SAAU,kBAAkB,MAAM,UAAU,IAAI,OAAO,UAAW;AAC7E,UAAM,eAAe,KAAK,aAAa;AACvC,gBAAY,CAAC,SAAU,SAAS,eAAe,OAAO,YAAa;AACnE,qBAAiB,KAAK;AACtB,wBAAoB,UAAU;AAAA,EAChC,GAAG,CAAC,cAAc,KAAK,kBAAkB,aAAa,CAAC;AAEvD,QAAM,EAAE,YAAY,IAAI,mBAAmB,EAAE,WAAW,0BAA0B,CAAC;AAEnF,QAAM,WAAW,YAAY;AAAA,IAC3B,YAAY,YAAY;AACtB,YAAM,UAAU,OACb,IAAI,CAAC,SAAS;AAAA,QACb,OAAO,sBAAsB,IAAI,OAAO,gBAAgB,EAAE,KAAK;AAAA,QAC/D,WAAW,IAAI,YAAY,sBAAsB,IAAI,WAAW,gBAAgB,EAAE,KAAK,IAAI;AAAA,MAC7F,EAAE,EACD,OAAO,CAAC,QAAQ,IAAI,MAAM,SAAS,CAAC,EACpC,IAAI,CAAC,SAAS;AAAA,QACb,OAAO,IAAI;AAAA,QACX,WAAW,IAAI,YAAY,IAAI,YAAY;AAAA,MAC7C,EAAE;AACJ,UAAI,CAAC,kBAAkB;AACrB,cAAM,IAAI,MAAM,EAAE,2CAA2C,gCAAgC,CAAC;AAAA,MAChG;AACA,UAAI,CAAC,QAAQ,QAAQ;AACnB,cAAM,IAAI,MAAM,EAAE,uCAAuC,mCAAmC,CAAC;AAAA,MAC/F;AACA,YAAM,UAAU,EAAE,UAAU,kBAAkB,QAAQ,SAAS,SAAS;AAKxE,aAAO,YAAY;AAAA,QACjB,WAAW,YAAY;AACrB,gBAAM,MAAM,MAAM;AAAA,YAChB,0BAA0B,KAAK,aAAa,IAAI;AAAA,YAChD,MAAM,QAAQ,4BAA4B;AAAA,cACxC,QAAQ;AAAA,cACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,cAC9C,MAAM,KAAK,UAAU,OAAO;AAAA,YAC9B,CAAC;AAAA,UACH;AACA,cAAI,CAAC,IAAI,IAAI;AACX,kBAAM,eAAe,IAAI,UAAU,EAAE,mCAAmC,+BAA+B,CAAC;AAAA,UAC1G;AACA,iBAAO;AAAA,QACT;AAAA,QACA,SAAS,CAAC;AAAA,QACV,iBAAiB;AAAA,MACnB,CAAC;AAAA,IACH;AAAA,IACA,WAAW,MAAM;AACf,YAAM,EAAE,mCAAmC,sBAAsB,GAAG,SAAS;AAC7E,WAAK,WAAW;AAAA,IAClB;AAAA,IACA,SAAS,CAAC,QAAa;AACrB,YAAM,UAAU,KAAK,WAAW,EAAE,mCAAmC,+BAA+B;AACpG,YAAM,SAAS,OAAO;AAAA,IACxB;AAAA,EACF,CAAC;AAED,QAAM,WAAW,MAAM;AACrB,qBAAiB,IAAI;AACrB,cAAU,CAAC,SAAS,CAAC,GAAG,MAAM,EAAE,IAAI,WAAW,GAAG,OAAO,IAAI,WAAW,KAAK,CAAC,CAAC;AAAA,EACjF;AAEA,QAAM,cAAc,CAAC,IAAY,UAAuC;AACtE,qBAAiB,IAAI;AACrB,cAAU,CAAC,SAAS,KAAK,IAAI,CAAC,QAAS,IAAI,OAAO,KAAK,EAAE,GAAG,KAAK,GAAG,MAAM,IAAI,GAAI,CAAC;AAAA,EACrF;AAEA,QAAM,cAAc,CAAC,OAAe;AAClC,qBAAiB,IAAI;AACrB,cAAU,CAAC,SAAS,KAAK,OAAO,CAAC,QAAQ,IAAI,OAAO,EAAE,CAAC;AAAA,EACzD;AAEA,QAAM,eAAe,MAAM;AACzB,QAAI,cAAc,kBAAkB;AAClC,aACE;AAAA,QAAC;AAAA;AAAA,UACC,OAAO,EAAE,+BAA+B,8BAAyB;AAAA,UACjE,WAAU;AAAA;AAAA,MACZ;AAAA,IAEJ;AACA,QAAI,UAAU;AACZ,aACE;AAAA,QAAC;AAAA;AAAA,UACC,OAAO,EAAE,sCAAsC,+BAA+B;AAAA,UAC9E,QACE,oBAAC,UAAO,MAAK,UAAS,SAAQ,WAAU,MAAK,MAAK,SAAS,MAAM,KAAK,WAAW,GAC9E,YAAE,qCAAqC,OAAO,GACjD;AAAA;AAAA,MAEJ;AAAA,IAEJ;AACA,QAAI,CAAC,OAAO,QAAQ;AAClB,aACE,oBAAC,SAAI,WAAU,qEACZ,YAAE,6BAA6B,uDAAuD,GACzF;AAAA,IAEJ;AACA,UAAM,qBAAqB,CAAC,UAA0B;AACpD,UAAI,SAAS,CAAC,aAAa,KAAK,CAAC,QAAQ,IAAI,UAAU,KAAK,GAAG;AAC7D,eAAO,CAAC,GAAG,cAAc,EAAE,OAAO,OAAO,MAAM,CAAC;AAAA,MAClD;AACA,aAAO;AAAA,IACT;AACA,WACE,oBAAC,SAAI,WAAU,mBACb,+BAAC,WAAM,WAAU,gCACf;AAAA,0BAAC,WACC,+BAAC,QAAG,WAAU,yDACZ;AAAA,4BAAC,QAAG,WAAU,uBACX,YAAE,oCAAoC,YAAY,GACrD;AAAA,QACA,oBAAC,QAAG,WAAU,uBACX,YAAE,mCAAmC,uBAAuB,GAC/D;AAAA,QACA,oBAAC,QAAG,WAAU,wBACX,YAAE,sCAAsC,SAAS,GACpD;AAAA,SACF,GACF;AAAA,MACA,oBAAC,WACE,iBAAO,IAAI,CAAC,QAAQ;AACnB,cAAM,YAAY,mBAAmB,IAAI,KAAK;AAC9C,cAAM,WAAW,mBAAmB,IAAI,SAAS;AACjD,eACE,qBAAC,QAAgB,WAAU,YACzB;AAAA,8BAAC,QAAG,WAAU,uBACZ;AAAA,YAAC;AAAA;AAAA,cACC,OAAO,IAAI,SAAS;AAAA,cACpB,eAAe,CAAC,UAAU,YAAY,IAAI,IAAI,EAAE,OAAO,SAAS,GAAG,CAAC;AAAA,cAEpE;AAAA,oCAAC,iBACC,8BAAC,eAAY,aAAa,EAAE,0CAA0C,cAAc,GAAG,GACzF;AAAA,gBACA,oBAAC,iBACE,oBAAU,IAAI,CAAC,WACd,oBAAC,cAA8B,OAAO,OAAO,OAC1C,iBAAO,SADO,OAAO,KAExB,CACD,GACH;AAAA;AAAA;AAAA,UACF,GACF;AAAA,UACA,qBAAC,QAAG,WAAU,uBACZ;AAAA;AAAA,cAAC;AAAA;AAAA,gBACC,OAAO,IAAI,aAAa;AAAA,gBACxB,eAAe,CAAC,UAAU,YAAY,IAAI,IAAI,EAAE,WAAW,SAAS,KAAK,CAAC;AAAA,gBAE1E;AAAA,sCAAC,iBACC,8BAAC,eAAY,aAAa,EAAE,yCAAyC,8BAA8B,GAAG,GACxG;AAAA,kBACA,oBAAC,iBACE,mBAAS,IAAI,CAAC,WACb,oBAAC,cAA8B,OAAO,OAAO,OAC1C,iBAAO,SADO,OAAO,KAExB,CACD,GACH;AAAA;AAAA;AAAA,YACF;AAAA,YACA,oBAAC,OAAE,WAAU,4CACV,YAAE,uCAAuC,kEAAkE,GAC9G;AAAA,aACF;AAAA,UACA,oBAAC,QAAG,WAAU,kCACZ;AAAA,YAAC;AAAA;AAAA,cACC,MAAK;AAAA,cACL,SAAQ;AAAA,cACR,MAAK;AAAA,cACL,WAAU;AAAA,cACV,cAAY,EAAE,sCAAsC,QAAQ;AAAA,cAC5D,SAAS,MAAM,YAAY,IAAI,EAAE;AAAA,cAEjC,8BAAC,UAAO,WAAU,WAAU;AAAA;AAAA,UAC9B,GACF;AAAA,aAjDO,IAAI,EAkDb;AAAA,MAEJ,CAAC,GACH;AAAA,OACF,GACF;AAAA,EAEJ;AAEA,SACE,oBAAC,SAAI,WAAU,aACb,+BAAC,SAAI,WAAU,+DACb;AAAA,yBAAC,SAAI,WAAU,aACb;AAAA,0BAAC,QAAG,WAAU,yBAAyB,YAAE,6BAA6B,YAAY,GAAE;AAAA,MACpF,oBAAC,OAAE,WAAU,iCACV,YAAE,mCAAmC,sFAAsF,GAC9H;AAAA,OACF;AAAA,IACA,oBAAC,SAAI,WAAU,gDACb,+BAAC,SAAI,WAAU,oBACb;AAAA,2BAAC,SACC;AAAA,4BAAC,WAAM,WAAU,iCACd,YAAE,oCAAoC,eAAe,GACxD;AAAA,QACA;AAAA,UAAC;AAAA;AAAA,YACC,OAAO,oBAAoB;AAAA,YAC3B,eAAe,CAAC,UAAU,oBAAoB,SAAS,EAAE;AAAA,YACzD,UAAU,mBAAmB,CAAC,CAAC;AAAA,YAE/B;AAAA,kCAAC,iBAAc,WAAU,QACvB,8BAAC,eAAY,aAAa,EAAE,mCAAmC,kBAAkB,GAAG,GACtF;AAAA,cACA,oBAAC,iBACG,qBAAU,SAAS,CAAC,GAAG,IAAI,CAAC,SAC5B,qBAAC,cAA+B,OAAO,KAAK,UACzC;AAAA,qBAAK,SAAS,KAAK;AAAA,gBAAS;AAAA,gBAAE,KAAK,WAAW,WAAW,IAAI,EAAE,qCAAqC,QAAQ,CAAC,MAAM;AAAA,mBADrG,KAAK,QAEtB,CACD,GACH;AAAA;AAAA;AAAA,QACF;AAAA,QACC,gBACC,oBAAC,OAAE,WAAU,uCACV,YAAE,2CAA2C,yBAAyB,GACzE,IAEA,oBAAC,OAAE,WAAU,sCACV,YAAE,kCAAkC,yEAAyE,GAChH;AAAA,SAEJ;AAAA,MACA,qBAAC,SAAI,WAAU,0CACb;AAAA;AAAA,UAAC;AAAA;AAAA,YACC,IAAG;AAAA,YACH,SAAS;AAAA,YACT,iBAAiB,CAAC,YAAY,YAAY,YAAY,IAAI;AAAA;AAAA,QAC5D;AAAA,QACA,oBAAC,WAAM,SAAQ,8BACZ,YAAE,8BAA8B,oCAAoC,GACvE;AAAA,SACF;AAAA,OACF,GACF;AAAA,IACA,qBAAC,SAAI,WAAU,0CACb;AAAA,2BAAC,SAAI,WAAU,0CACb;AAAA,6BAAC,SACC;AAAA,8BAAC,QAAG,WAAU,uBAAuB,YAAE,oCAAoC,kBAAkB,GAAE;AAAA,UAC/F,oBAAC,OAAE,WAAU,iCACV,YAAE,uCAAuC,mEAAmE,GAC/G;AAAA,WACF;AAAA,QACA,qBAAC,UAAO,MAAK,UAAS,SAAQ,WAAU,MAAK,MAAK,SAAS,UACzD;AAAA,8BAAC,QAAK,WAAU,gBAAe;AAAA,UAC9B,EAAE,mCAAmC,WAAW;AAAA,WACnD;AAAA,SACF;AAAA,MACC,aAAa;AAAA,OAChB;AAAA,IACA,oBAAC,SAAI,WAAU,oBACb;AAAA,MAAC;AAAA;AAAA,QACC,MAAK;AAAA,QACL,SAAS,MAAM,SAAS,OAAO;AAAA,QAC/B,UAAU,SAAS,aAAa,mBAAmB,CAAC,CAAC,iBAAiB,CAAC;AAAA,QAEvE;AAAA,8BAAC,QAAK,WAAU,gBAAe;AAAA,UAC9B,SAAS,YACN,EAAE,sCAAsC,cAAS,IACjD,EAAE,oCAAoC,qBAAqB;AAAA;AAAA;AAAA,IACjE,GACF;AAAA,KACF,GACF;AAEJ;",
   "names": []
 }

package/dist/modules/entities/lib/makeActivityRoute.js

@@ -8,6 +8,8 @@ import {
   createPagedListResponseSchema as createSharedPagedListResponseSchema,
   defaultOkResponseSchema as sharedDefaultOkResponseSchema
 } from "@open-mercato/shared/lib/openapi/crud";
+import { createLogger } from "@open-mercato/shared/lib/logger";
+const logger = createLogger("entities").child({ component: "activity-route" });
 function createPagedListResponseSchema(itemSchema) {
   return createSharedPagedListResponseSchema(itemSchema, { paginationMetaOptional: true });
 }
@@ -210,7 +212,7 @@ function makeActivityRoute(config) {
             if (!("author_email" in record)) record.author_email = meta.email;
           });
         } catch (err) {
-          console.warn(`${logPrefix} failed to enrich author metadata`, err);
+          logger.warn("Failed to enrich author metadata", { logPrefix, err });
         }
       }
     }

package/dist/modules/entities/lib/makeActivityRoute.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/entities/lib/makeActivityRoute.ts"],
-  "sourcesContent": ["import { z, type ZodTypeAny } from 'zod'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { makeCrudRoute } from '@open-mercato/shared/lib/crud/factory'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { resolveCrudRecordId, parseScopedCommandInput } from '@open-mercato/shared/lib/api/scoped'\nimport { findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { User } from '@open-mercato/core/modules/auth/data/entities'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport type { CrudOpenApiOptions } from '@open-mercato/shared/lib/openapi/crud'\nimport {\n  createPagedListResponseSchema as createSharedPagedListResponseSchema,\n  defaultOkResponseSchema as sharedDefaultOkResponseSchema,\n} from '@open-mercato/shared/lib/openapi/crud'\n\n// eslint-disable-next-line @typescript-eslint/no-explicit-any -- MikroORM entity class constructor\ntype EntityClass = new (...args: any[]) => unknown\n\ninterface ActivityRouteConfig {\n  entity: EntityClass\n  entityId: string\n  parentFkColumn: string\n  parentFkParam: string\n  features: { view: string; manage: string }\n  createSchema: ZodTypeAny\n  updateSchema: ZodTypeAny\n  commandPrefix: string\n  logPrefix: string\n  openApiFactory: (options: CrudOpenApiOptions) => OpenApiRouteDoc\n  openApi: {\n    resourceName: string\n    createDescription: string\n    updateDescription: string\n    deleteDescription: string\n  }\n}\n\nfunction createPagedListResponseSchema(itemSchema: ZodTypeAny) {\n  return createSharedPagedListResponseSchema(itemSchema, { paginationMetaOptional: true })\n}\n\nconst defaultOkResponseSchema = sharedDefaultOkResponseSchema\n\nconst rawBodySchema = z.object({}).passthrough()\n\nconst listSchema = z\n  .object({\n    page: z.coerce.number().min(1).default(1),\n    pageSize: z.coerce.number().min(1).max(100).default(50),\n    entityId: z.string().uuid().optional(),\n    sortField: z.string().optional(),\n    sortDir: z.enum(['asc', 'desc']).optional(),\n  })\n  .passthrough()\n\nconst sortFieldMap = {\n  occurredAt: 'occurred_at',\n  createdAt: 'created_at',\n  updatedAt: 'updated_at',\n}\n\nconst activityCreateResponseSchema = z.object({\n  id: z.string().uuid().nullable(),\n  authorUserId: z.string().uuid().nullable(),\n})\n\nexport function makeActivityRoute(config: ActivityRouteConfig) {\n  const {\n    entity,\n    entityId,\n    parentFkColumn,\n    parentFkParam,\n    features,\n    createSchema,\n    updateSchema,\n    commandPrefix,\n    logPrefix,\n    openApiFactory,\n    openApi: openApiConfig,\n  } = config\n\n  const routeMetadata = {\n    GET: { requireAuth: true, requireFeatures: [features.view] },\n    POST: { requireAuth: true, requireFeatures: [features.manage] },\n    PUT: { requireAuth: true, requireFeatures: [features.manage] },\n    DELETE: { requireAuth: true, requireFeatures: [features.manage] },\n  }\n\n  const fields = [\n    'id',\n    parentFkColumn,\n    'activity_type',\n    'subject',\n    'body',\n    'occurred_at',\n    'author_user_id',\n    'appearance_icon',\n    'appearance_color',\n    'organization_id',\n    'tenant_id',\n    'created_at',\n    'updated_at',\n  ]\n\n  const crud = makeCrudRoute({\n    metadata: routeMetadata,\n    orm: {\n      entity,\n      idField: 'id',\n      orgField: 'organizationId',\n      tenantField: 'tenantId',\n    },\n    indexer: {\n      entityType: entityId,\n    },\n    list: {\n      schema: listSchema,\n      entityId,\n      fields,\n      decorateCustomFields: {\n        entityIds: entityId,\n      },\n      sortFieldMap,\n      buildFilters: async (query) => {\n        const filters: Record<string, unknown> = {}\n        if (query.entityId) filters[parentFkColumn] = { $eq: query.entityId }\n        return filters\n      },\n      transformItem: (item: Record<string, unknown>) => {\n        const record = (item ?? {}) as Record<string, unknown>\n        const toIsoString = (value: unknown): string | null => {\n          if (value == null) return null\n          if (value instanceof Date) return value.toISOString()\n          if (typeof value === 'string') {\n            const trimmed = value.trim()\n            if (!trimmed.length) return null\n            const date = new Date(trimmed)\n            return Number.isNaN(date.getTime()) ? trimmed : date.toISOString()\n          }\n          return null\n        }\n        const readString = (value: unknown): string | null => (typeof value === 'string' ? value : null)\n        const idValue = readString(record.id) ?? (record.id != null ? String(record.id) : '')\n        const parentId = readString(record[parentFkColumn]) ?? readString(record[parentFkParam]) ?? null\n        const activityType =\n          readString(record['activity_type']) ??\n          readString(record['activityType']) ??\n          ''\n        const subject =\n          readString(record.subject) ??\n          (record.subject == null ? null : String(record.subject))\n        const body =\n          readString(record.body) ??\n          (record.body == null ? null : String(record.body))\n        const authorUserId =\n          readString(record['author_user_id']) ?? readString(record['authorUserId']) ?? null\n        const appearanceIconRaw =\n          readString(record['appearance_icon']) ?? readString(record['appearanceIcon'])\n        const appearanceColorRaw =\n          readString(record['appearance_color']) ?? readString(record['appearanceColor'])\n        const organizationId =\n          readString(record['organization_id']) ?? readString(record['organizationId'])\n        const tenantId =\n          readString(record['tenant_id']) ?? readString(record['tenantId'])\n        const output: Record<string, unknown> = {\n          id: idValue,\n          entityId: parentId,\n          [parentFkParam]: parentId,\n          activityType,\n          subject,\n          body,\n          occurredAt: toIsoString(record['occurred_at'] ?? record['occurredAt']),\n          createdAt: toIsoString(record['created_at'] ?? record['createdAt']),\n          authorUserId,\n          organizationId,\n          tenantId,\n          appearanceIcon: appearanceIconRaw && appearanceIconRaw.trim().length ? appearanceIconRaw : null,\n          appearanceColor: appearanceColorRaw && appearanceColorRaw.trim().length ? appearanceColorRaw : null,\n          customFields: Array.isArray(record.customFields) ? record.customFields : undefined,\n          customValues: record.customValues ?? undefined,\n        }\n        for (const [key, value] of Object.entries(record)) {\n          if (key.startsWith('cf_') || key.startsWith('cf:')) {\n            output[key] = value\n          }\n        }\n        return output\n      },\n    },\n    actions: {\n      create: {\n        commandId: `${commandPrefix}.create`,\n        schema: rawBodySchema,\n        mapInput: async ({ raw, ctx }) => {\n          const { translate } = await resolveTranslations()\n          return parseScopedCommandInput(createSchema, raw ?? {}, ctx, translate)\n        },\n        response: ({ result }) => ({\n          id: result?.activityId ?? result?.id ?? null,\n          authorUserId: result?.authorUserId ?? null,\n        }),\n        status: 201,\n      },\n      update: {\n        commandId: `${commandPrefix}.update`,\n        schema: rawBodySchema,\n        mapInput: async ({ raw, ctx }) => {\n          const { translate } = await resolveTranslations()\n          return parseScopedCommandInput(updateSchema, raw ?? {}, ctx, translate)\n        },\n        response: () => ({ ok: true }),\n      },\n      delete: {\n        commandId: `${commandPrefix}.delete`,\n        schema: rawBodySchema,\n        mapInput: async ({ parsed, ctx }) => {\n          const { translate } = await resolveTranslations()\n          const id = resolveCrudRecordId(parsed, ctx, translate)\n          return { id }\n        },\n        response: () => ({ ok: true }),\n      },\n    },\n    hooks: {\n      afterList: async (payload, ctx) => {\n        const items = Array.isArray(payload.items) ? payload.items : []\n        if (!items.length) return\n        const userIds = new Set<string>()\n        items.forEach((item: unknown) => {\n          if (!item || typeof item !== 'object') return\n          const record = item as Record<string, unknown>\n          const userId =\n            typeof record.author_user_id === 'string'\n              ? record.author_user_id\n              : typeof record.authorUserId === 'string'\n                ? record.authorUserId\n                : null\n          if (userId) userIds.add(userId)\n        })\n        if (!userIds.size) return\n        try {\n          const em = (ctx.container.resolve('em') as EntityManager).fork()\n          const users = await findWithDecryption(\n            em,\n            User,\n            { id: { $in: Array.from(userIds) } },\n            undefined,\n            { tenantId: ctx.auth?.tenantId ?? null, organizationId: ctx.selectedOrganizationId ?? null },\n          )\n          const map = new Map<string, { name: string | null; email: string | null }>()\n          users.forEach((user) => {\n            const name = typeof user.name === 'string' && user.name.trim().length\n              ? user.name.trim()\n              : null\n            map.set(user.id, { name, email: user.email ?? null })\n          })\n          items.forEach((item: unknown) => {\n            if (!item || typeof item !== 'object') return\n            const record = item as Record<string, unknown>\n            const userId =\n              typeof record.author_user_id === 'string'\n                ? record.author_user_id\n                : typeof record.authorUserId === 'string'\n                  ? record.authorUserId\n                  : null\n            if (!userId) return\n            const meta = map.get(userId)\n            if (!meta) return\n            record.authorName = meta.name\n            record.authorEmail = meta.email\n            if (!('author_name' in record)) record.author_name = meta.name\n            if (!('author_email' in record)) record.author_email = meta.email\n          })\n        } catch (err) {\n          console.warn(`${logPrefix} failed to enrich author metadata`, err)\n        }\n      },\n    },\n  })\n\n  const activityListItemSchema = z\n    .object({\n      id: z.string().uuid(),\n      [parentFkColumn]: z.string().uuid().nullable().optional(),\n      activity_type: z.string().nullable().optional(),\n      subject: z.string().nullable().optional(),\n      body: z.string().nullable().optional(),\n      occurred_at: z.string().nullable().optional(),\n      author_user_id: z.string().uuid().nullable(),\n      appearance_icon: z.string().nullable().optional(),\n      appearance_color: z.string().nullable().optional(),\n      organization_id: z.string().uuid().nullable().optional(),\n      tenant_id: z.string().uuid().nullable().optional(),\n      created_at: z.string().nullable(),\n      updated_at: z.string().nullable().optional(),\n    })\n    .passthrough()\n\n  const openApi = openApiFactory({\n    resourceName: openApiConfig.resourceName,\n    querySchema: listSchema,\n    listResponseSchema: createPagedListResponseSchema(activityListItemSchema),\n    create: {\n      schema: createSchema,\n      responseSchema: activityCreateResponseSchema,\n      description: openApiConfig.createDescription,\n    },\n    update: {\n      schema: updateSchema,\n      responseSchema: defaultOkResponseSchema,\n      description: openApiConfig.updateDescription,\n    },\n    del: {\n      schema: z.object({ id: z.string().uuid() }),\n      responseSchema: defaultOkResponseSchema,\n      description: openApiConfig.deleteDescription,\n    },\n  })\n\n  return {\n    metadata: routeMetadata,\n    openApi,\n    GET: crud.GET,\n    POST: crud.POST,\n    PUT: crud.PUT,\n    DELETE: crud.DELETE,\n  }\n}\n"],
-  "mappings": "AAAA,SAAS,SAA0B;AAEnC,SAAS,qBAAqB;AAC9B,SAAS,2BAA2B;AACpC,SAAS,qBAAqB,+BAA+B;AAC7D,SAAS,0BAA0B;AACnC,SAAS,YAAY;AAGrB;AAAA,EACE,iCAAiC;AAAA,EACjC,2BAA2B;AAAA,OACtB;AAwBP,SAAS,8BAA8B,YAAwB;AAC7D,SAAO,oCAAoC,YAAY,EAAE,wBAAwB,KAAK,CAAC;AACzF;AAEA,MAAM,0BAA0B;AAEhC,MAAM,gBAAgB,EAAE,OAAO,CAAC,CAAC,EAAE,YAAY;AAE/C,MAAM,aAAa,EAChB,OAAO;AAAA,EACN,MAAM,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,QAAQ,CAAC;AAAA,EACxC,UAAU,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,QAAQ,EAAE;AAAA,EACtD,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACrC,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,SAAS,EAAE,KAAK,CAAC,OAAO,MAAM,CAAC,EAAE,SAAS;AAC5C,CAAC,EACA,YAAY;AAEf,MAAM,eAAe;AAAA,EACnB,YAAY;AAAA,EACZ,WAAW;AAAA,EACX,WAAW;AACb;AAEA,MAAM,+BAA+B,EAAE,OAAO;AAAA,EAC5C,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC/B,cAAc,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAC3C,CAAC;AAEM,SAAS,kBAAkB,QAA6B;AAC7D,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,SAAS;AAAA,EACX,IAAI;AAEJ,QAAM,gBAAgB;AAAA,IACpB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,SAAS,IAAI,EAAE;AAAA,IAC3D,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,SAAS,MAAM,EAAE;AAAA,IAC9D,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,SAAS,MAAM,EAAE;AAAA,IAC7D,QAAQ,EAAE,aAAa,MAAM,iBAAiB,CAAC,SAAS,MAAM,EAAE;AAAA,EAClE;AAEA,QAAM,SAAS;AAAA,IACb;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAEA,QAAM,OAAO,cAAc;AAAA,IACzB,UAAU;AAAA,IACV,KAAK;AAAA,MACH;AAAA,MACA,SAAS;AAAA,MACT,UAAU;AAAA,MACV,aAAa;AAAA,IACf;AAAA,IACA,SAAS;AAAA,MACP,YAAY;AAAA,IACd;AAAA,IACA,MAAM;AAAA,MACJ,QAAQ;AAAA,MACR;AAAA,MACA;AAAA,MACA,sBAAsB;AAAA,QACpB,WAAW;AAAA,MACb;AAAA,MACA;AAAA,MACA,cAAc,OAAO,UAAU;AAC7B,cAAM,UAAmC,CAAC;AAC1C,YAAI,MAAM,SAAU,SAAQ,cAAc,IAAI,EAAE,KAAK,MAAM,SAAS;AACpE,eAAO;AAAA,MACT;AAAA,MACA,eAAe,CAAC,SAAkC;AAChD,cAAM,SAAU,QAAQ,CAAC;AACzB,cAAM,cAAc,CAAC,UAAkC;AACrD,cAAI,SAAS,KAAM,QAAO;AAC1B,cAAI,iBAAiB,KAAM,QAAO,MAAM,YAAY;AACpD,cAAI,OAAO,UAAU,UAAU;AAC7B,kBAAM,UAAU,MAAM,KAAK;AAC3B,gBAAI,CAAC,QAAQ,OAAQ,QAAO;AAC5B,kBAAM,OAAO,IAAI,KAAK,OAAO;AAC7B,mBAAO,OAAO,MAAM,KAAK,QAAQ,CAAC,IAAI,UAAU,KAAK,YAAY;AAAA,UACnE;AACA,iBAAO;AAAA,QACT;AACA,cAAM,aAAa,CAAC,UAAmC,OAAO,UAAU,WAAW,QAAQ;AAC3F,cAAM,UAAU,WAAW,OAAO,EAAE,MAAM,OAAO,MAAM,OAAO,OAAO,OAAO,EAAE,IAAI;AAClF,cAAM,WAAW,WAAW,OAAO,cAAc,CAAC,KAAK,WAAW,OAAO,aAAa,CAAC,KAAK;AAC5F,cAAM,eACJ,WAAW,OAAO,eAAe,CAAC,KAClC,WAAW,OAAO,cAAc,CAAC,KACjC;AACF,cAAM,UACJ,WAAW,OAAO,OAAO,MACxB,OAAO,WAAW,OAAO,OAAO,OAAO,OAAO,OAAO;AACxD,cAAM,OACJ,WAAW,OAAO,IAAI,MACrB,OAAO,QAAQ,OAAO,OAAO,OAAO,OAAO,IAAI;AAClD,cAAM,eACJ,WAAW,OAAO,gBAAgB,CAAC,KAAK,WAAW,OAAO,cAAc,CAAC,KAAK;AAChF,cAAM,oBACJ,WAAW,OAAO,iBAAiB,CAAC,KAAK,WAAW,OAAO,gBAAgB,CAAC;AAC9E,cAAM,qBACJ,WAAW,OAAO,kBAAkB,CAAC,KAAK,WAAW,OAAO,iBAAiB,CAAC;AAChF,cAAM,iBACJ,WAAW,OAAO,iBAAiB,CAAC,KAAK,WAAW,OAAO,gBAAgB,CAAC;AAC9E,cAAM,WACJ,WAAW,OAAO,WAAW,CAAC,KAAK,WAAW,OAAO,UAAU,CAAC;AAClE,cAAM,SAAkC;AAAA,UACtC,IAAI;AAAA,UACJ,UAAU;AAAA,UACV,CAAC,aAAa,GAAG;AAAA,UACjB;AAAA,UACA;AAAA,UACA;AAAA,UACA,YAAY,YAAY,OAAO,aAAa,KAAK,OAAO,YAAY,CAAC;AAAA,UACrE,WAAW,YAAY,OAAO,YAAY,KAAK,OAAO,WAAW,CAAC;AAAA,UAClE;AAAA,UACA;AAAA,UACA;AAAA,UACA,gBAAgB,qBAAqB,kBAAkB,KAAK,EAAE,SAAS,oBAAoB;AAAA,UAC3F,iBAAiB,sBAAsB,mBAAmB,KAAK,EAAE,SAAS,qBAAqB;AAAA,UAC/F,cAAc,MAAM,QAAQ,OAAO,YAAY,IAAI,OAAO,eAAe;AAAA,UACzE,cAAc,OAAO,gBAAgB;AAAA,QACvC;AACA,mBAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,MAAM,GAAG;AACjD,cAAI,IAAI,WAAW,KAAK,KAAK,IAAI,WAAW,KAAK,GAAG;AAClD,mBAAO,GAAG,IAAI;AAAA,UAChB;AAAA,QACF;AACA,eAAO;AAAA,MACT;AAAA,IACF;AAAA,IACA,SAAS;AAAA,MACP,QAAQ;AAAA,QACN,WAAW,GAAG,aAAa;AAAA,QAC3B,QAAQ;AAAA,QACR,UAAU,OAAO,EAAE,KAAK,IAAI,MAAM;AAChC,gBAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,iBAAO,wBAAwB,cAAc,OAAO,CAAC,GAAG,KAAK,SAAS;AAAA,QACxE;AAAA,QACA,UAAU,CAAC,EAAE,OAAO,OAAO;AAAA,UACzB,IAAI,QAAQ,cAAc,QAAQ,MAAM;AAAA,UACxC,cAAc,QAAQ,gBAAgB;AAAA,QACxC;AAAA,QACA,QAAQ;AAAA,MACV;AAAA,MACA,QAAQ;AAAA,QACN,WAAW,GAAG,aAAa;AAAA,QAC3B,QAAQ;AAAA,QACR,UAAU,OAAO,EAAE,KAAK,IAAI,MAAM;AAChC,gBAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,iBAAO,wBAAwB,cAAc,OAAO,CAAC,GAAG,KAAK,SAAS;AAAA,QACxE;AAAA,QACA,UAAU,OAAO,EAAE,IAAI,KAAK;AAAA,MAC9B;AAAA,MACA,QAAQ;AAAA,QACN,WAAW,GAAG,aAAa;AAAA,QAC3B,QAAQ;AAAA,QACR,UAAU,OAAO,EAAE,QAAQ,IAAI,MAAM;AACnC,gBAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,gBAAM,KAAK,oBAAoB,QAAQ,KAAK,SAAS;AACrD,iBAAO,EAAE,GAAG;AAAA,QACd;AAAA,QACA,UAAU,OAAO,EAAE,IAAI,KAAK;AAAA,MAC9B;AAAA,IACF;AAAA,IACA,OAAO;AAAA,MACL,WAAW,OAAO,SAAS,QAAQ;AACjC,cAAM,QAAQ,MAAM,QAAQ,QAAQ,KAAK,IAAI,QAAQ,QAAQ,CAAC;AAC9D,YAAI,CAAC,MAAM,OAAQ;AACnB,cAAM,UAAU,oBAAI,IAAY;AAChC,cAAM,QAAQ,CAAC,SAAkB;AAC/B,cAAI,CAAC,QAAQ,OAAO,SAAS,SAAU;AACvC,gBAAM,SAAS;AACf,gBAAM,SACJ,OAAO,OAAO,mBAAmB,WAC7B,OAAO,iBACP,OAAO,OAAO,iBAAiB,WAC7B,OAAO,eACP;AACR,cAAI,OAAQ,SAAQ,IAAI,MAAM;AAAA,QAChC,CAAC;AACD,YAAI,CAAC,QAAQ,KAAM;AACnB,YAAI;AACF,gBAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,gBAAM,QAAQ,MAAM;AAAA,YAClB;AAAA,YACA;AAAA,YACA,EAAE,IAAI,EAAE,KAAK,MAAM,KAAK,OAAO,EAAE,EAAE;AAAA,YACnC;AAAA,YACA,EAAE,UAAU,IAAI,MAAM,YAAY,MAAM,gBAAgB,IAAI,0BAA0B,KAAK;AAAA,UAC7F;AACA,gBAAM,MAAM,oBAAI,IAA2D;AAC3E,gBAAM,QAAQ,CAAC,SAAS;AACtB,kBAAM,OAAO,OAAO,KAAK,SAAS,YAAY,KAAK,KAAK,KAAK,EAAE,SAC3D,KAAK,KAAK,KAAK,IACf;AACJ,gBAAI,IAAI,KAAK,IAAI,EAAE,MAAM,OAAO,KAAK,SAAS,KAAK,CAAC;AAAA,UACtD,CAAC;AACD,gBAAM,QAAQ,CAAC,SAAkB;AAC/B,gBAAI,CAAC,QAAQ,OAAO,SAAS,SAAU;AACvC,kBAAM,SAAS;AACf,kBAAM,SACJ,OAAO,OAAO,mBAAmB,WAC7B,OAAO,iBACP,OAAO,OAAO,iBAAiB,WAC7B,OAAO,eACP;AACR,gBAAI,CAAC,OAAQ;AACb,kBAAM,OAAO,IAAI,IAAI,MAAM;AAC3B,gBAAI,CAAC,KAAM;AACX,mBAAO,aAAa,KAAK;AACzB,mBAAO,cAAc,KAAK;AAC1B,gBAAI,EAAE,iBAAiB,QAAS,QAAO,cAAc,KAAK;AAC1D,gBAAI,EAAE,kBAAkB,QAAS,QAAO,eAAe,KAAK;AAAA,UAC9D,CAAC;AAAA,QACH,SAAS,KAAK;AACZ,kBAAQ,KAAK,GAAG,SAAS,qCAAqC,GAAG;AAAA,QACnE;AAAA,MACF;AAAA,IACF;AAAA,EACF,CAAC;AAED,QAAM,yBAAyB,EAC5B,OAAO;AAAA,IACN,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,IACpB,CAAC,cAAc,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS;AAAA,IACxD,eAAe,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,IAC9C,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,IACxC,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,IACrC,aAAa,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,IAC5C,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,IAC3C,iBAAiB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,IAChD,kBAAkB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,IACjD,iBAAiB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS;AAAA,IACvD,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS;AAAA,IACjD,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,IAChC,YAAY,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC7C,CAAC,EACA,YAAY;AAEf,QAAM,UAAU,eAAe;AAAA,IAC7B,cAAc,cAAc;AAAA,IAC5B,aAAa;AAAA,IACb,oBAAoB,8BAA8B,sBAAsB;AAAA,IACxE,QAAQ;AAAA,MACN,QAAQ;AAAA,MACR,gBAAgB;AAAA,MAChB,aAAa,cAAc;AAAA,IAC7B;AAAA,IACA,QAAQ;AAAA,MACN,QAAQ;AAAA,MACR,gBAAgB;AAAA,MAChB,aAAa,cAAc;AAAA,IAC7B;AAAA,IACA,KAAK;AAAA,MACH,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAAA,MAC1C,gBAAgB;AAAA,MAChB,aAAa,cAAc;AAAA,IAC7B;AAAA,EACF,CAAC;AAED,SAAO;AAAA,IACL,UAAU;AAAA,IACV;AAAA,IACA,KAAK,KAAK;AAAA,IACV,MAAM,KAAK;AAAA,IACX,KAAK,KAAK;AAAA,IACV,QAAQ,KAAK;AAAA,EACf;AACF;",
+  "sourcesContent": ["import { z, type ZodTypeAny } from 'zod'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { makeCrudRoute } from '@open-mercato/shared/lib/crud/factory'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { resolveCrudRecordId, parseScopedCommandInput } from '@open-mercato/shared/lib/api/scoped'\nimport { findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { User } from '@open-mercato/core/modules/auth/data/entities'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport type { CrudOpenApiOptions } from '@open-mercato/shared/lib/openapi/crud'\nimport {\n  createPagedListResponseSchema as createSharedPagedListResponseSchema,\n  defaultOkResponseSchema as sharedDefaultOkResponseSchema,\n} from '@open-mercato/shared/lib/openapi/crud'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('entities').child({ component: 'activity-route' })\n\n// eslint-disable-next-line @typescript-eslint/no-explicit-any -- MikroORM entity class constructor\ntype EntityClass = new (...args: any[]) => unknown\n\ninterface ActivityRouteConfig {\n  entity: EntityClass\n  entityId: string\n  parentFkColumn: string\n  parentFkParam: string\n  features: { view: string; manage: string }\n  createSchema: ZodTypeAny\n  updateSchema: ZodTypeAny\n  commandPrefix: string\n  logPrefix: string\n  openApiFactory: (options: CrudOpenApiOptions) => OpenApiRouteDoc\n  openApi: {\n    resourceName: string\n    createDescription: string\n    updateDescription: string\n    deleteDescription: string\n  }\n}\n\nfunction createPagedListResponseSchema(itemSchema: ZodTypeAny) {\n  return createSharedPagedListResponseSchema(itemSchema, { paginationMetaOptional: true })\n}\n\nconst defaultOkResponseSchema = sharedDefaultOkResponseSchema\n\nconst rawBodySchema = z.object({}).passthrough()\n\nconst listSchema = z\n  .object({\n    page: z.coerce.number().min(1).default(1),\n    pageSize: z.coerce.number().min(1).max(100).default(50),\n    entityId: z.string().uuid().optional(),\n    sortField: z.string().optional(),\n    sortDir: z.enum(['asc', 'desc']).optional(),\n  })\n  .passthrough()\n\nconst sortFieldMap = {\n  occurredAt: 'occurred_at',\n  createdAt: 'created_at',\n  updatedAt: 'updated_at',\n}\n\nconst activityCreateResponseSchema = z.object({\n  id: z.string().uuid().nullable(),\n  authorUserId: z.string().uuid().nullable(),\n})\n\nexport function makeActivityRoute(config: ActivityRouteConfig) {\n  const {\n    entity,\n    entityId,\n    parentFkColumn,\n    parentFkParam,\n    features,\n    createSchema,\n    updateSchema,\n    commandPrefix,\n    logPrefix,\n    openApiFactory,\n    openApi: openApiConfig,\n  } = config\n\n  const routeMetadata = {\n    GET: { requireAuth: true, requireFeatures: [features.view] },\n    POST: { requireAuth: true, requireFeatures: [features.manage] },\n    PUT: { requireAuth: true, requireFeatures: [features.manage] },\n    DELETE: { requireAuth: true, requireFeatures: [features.manage] },\n  }\n\n  const fields = [\n    'id',\n    parentFkColumn,\n    'activity_type',\n    'subject',\n    'body',\n    'occurred_at',\n    'author_user_id',\n    'appearance_icon',\n    'appearance_color',\n    'organization_id',\n    'tenant_id',\n    'created_at',\n    'updated_at',\n  ]\n\n  const crud = makeCrudRoute({\n    metadata: routeMetadata,\n    orm: {\n      entity,\n      idField: 'id',\n      orgField: 'organizationId',\n      tenantField: 'tenantId',\n    },\n    indexer: {\n      entityType: entityId,\n    },\n    list: {\n      schema: listSchema,\n      entityId,\n      fields,\n      decorateCustomFields: {\n        entityIds: entityId,\n      },\n      sortFieldMap,\n      buildFilters: async (query) => {\n        const filters: Record<string, unknown> = {}\n        if (query.entityId) filters[parentFkColumn] = { $eq: query.entityId }\n        return filters\n      },\n      transformItem: (item: Record<string, unknown>) => {\n        const record = (item ?? {}) as Record<string, unknown>\n        const toIsoString = (value: unknown): string | null => {\n          if (value == null) return null\n          if (value instanceof Date) return value.toISOString()\n          if (typeof value === 'string') {\n            const trimmed = value.trim()\n            if (!trimmed.length) return null\n            const date = new Date(trimmed)\n            return Number.isNaN(date.getTime()) ? trimmed : date.toISOString()\n          }\n          return null\n        }\n        const readString = (value: unknown): string | null => (typeof value === 'string' ? value : null)\n        const idValue = readString(record.id) ?? (record.id != null ? String(record.id) : '')\n        const parentId = readString(record[parentFkColumn]) ?? readString(record[parentFkParam]) ?? null\n        const activityType =\n          readString(record['activity_type']) ??\n          readString(record['activityType']) ??\n          ''\n        const subject =\n          readString(record.subject) ??\n          (record.subject == null ? null : String(record.subject))\n        const body =\n          readString(record.body) ??\n          (record.body == null ? null : String(record.body))\n        const authorUserId =\n          readString(record['author_user_id']) ?? readString(record['authorUserId']) ?? null\n        const appearanceIconRaw =\n          readString(record['appearance_icon']) ?? readString(record['appearanceIcon'])\n        const appearanceColorRaw =\n          readString(record['appearance_color']) ?? readString(record['appearanceColor'])\n        const organizationId =\n          readString(record['organization_id']) ?? readString(record['organizationId'])\n        const tenantId =\n          readString(record['tenant_id']) ?? readString(record['tenantId'])\n        const output: Record<string, unknown> = {\n          id: idValue,\n          entityId: parentId,\n          [parentFkParam]: parentId,\n          activityType,\n          subject,\n          body,\n          occurredAt: toIsoString(record['occurred_at'] ?? record['occurredAt']),\n          createdAt: toIsoString(record['created_at'] ?? record['createdAt']),\n          authorUserId,\n          organizationId,\n          tenantId,\n          appearanceIcon: appearanceIconRaw && appearanceIconRaw.trim().length ? appearanceIconRaw : null,\n          appearanceColor: appearanceColorRaw && appearanceColorRaw.trim().length ? appearanceColorRaw : null,\n          customFields: Array.isArray(record.customFields) ? record.customFields : undefined,\n          customValues: record.customValues ?? undefined,\n        }\n        for (const [key, value] of Object.entries(record)) {\n          if (key.startsWith('cf_') || key.startsWith('cf:')) {\n            output[key] = value\n          }\n        }\n        return output\n      },\n    },\n    actions: {\n      create: {\n        commandId: `${commandPrefix}.create`,\n        schema: rawBodySchema,\n        mapInput: async ({ raw, ctx }) => {\n          const { translate } = await resolveTranslations()\n          return parseScopedCommandInput(createSchema, raw ?? {}, ctx, translate)\n        },\n        response: ({ result }) => ({\n          id: result?.activityId ?? result?.id ?? null,\n          authorUserId: result?.authorUserId ?? null,\n        }),\n        status: 201,\n      },\n      update: {\n        commandId: `${commandPrefix}.update`,\n        schema: rawBodySchema,\n        mapInput: async ({ raw, ctx }) => {\n          const { translate } = await resolveTranslations()\n          return parseScopedCommandInput(updateSchema, raw ?? {}, ctx, translate)\n        },\n        response: () => ({ ok: true }),\n      },\n      delete: {\n        commandId: `${commandPrefix}.delete`,\n        schema: rawBodySchema,\n        mapInput: async ({ parsed, ctx }) => {\n          const { translate } = await resolveTranslations()\n          const id = resolveCrudRecordId(parsed, ctx, translate)\n          return { id }\n        },\n        response: () => ({ ok: true }),\n      },\n    },\n    hooks: {\n      afterList: async (payload, ctx) => {\n        const items = Array.isArray(payload.items) ? payload.items : []\n        if (!items.length) return\n        const userIds = new Set<string>()\n        items.forEach((item: unknown) => {\n          if (!item || typeof item !== 'object') return\n          const record = item as Record<string, unknown>\n          const userId =\n            typeof record.author_user_id === 'string'\n              ? record.author_user_id\n              : typeof record.authorUserId === 'string'\n                ? record.authorUserId\n                : null\n          if (userId) userIds.add(userId)\n        })\n        if (!userIds.size) return\n        try {\n          const em = (ctx.container.resolve('em') as EntityManager).fork()\n          const users = await findWithDecryption(\n            em,\n            User,\n            { id: { $in: Array.from(userIds) } },\n            undefined,\n            { tenantId: ctx.auth?.tenantId ?? null, organizationId: ctx.selectedOrganizationId ?? null },\n          )\n          const map = new Map<string, { name: string | null; email: string | null }>()\n          users.forEach((user) => {\n            const name = typeof user.name === 'string' && user.name.trim().length\n              ? user.name.trim()\n              : null\n            map.set(user.id, { name, email: user.email ?? null })\n          })\n          items.forEach((item: unknown) => {\n            if (!item || typeof item !== 'object') return\n            const record = item as Record<string, unknown>\n            const userId =\n              typeof record.author_user_id === 'string'\n                ? record.author_user_id\n                : typeof record.authorUserId === 'string'\n                  ? record.authorUserId\n                  : null\n            if (!userId) return\n            const meta = map.get(userId)\n            if (!meta) return\n            record.authorName = meta.name\n            record.authorEmail = meta.email\n            if (!('author_name' in record)) record.author_name = meta.name\n            if (!('author_email' in record)) record.author_email = meta.email\n          })\n        } catch (err) {\n          logger.warn('Failed to enrich author metadata', { logPrefix, err })\n        }\n      },\n    },\n  })\n\n  const activityListItemSchema = z\n    .object({\n      id: z.string().uuid(),\n      [parentFkColumn]: z.string().uuid().nullable().optional(),\n      activity_type: z.string().nullable().optional(),\n      subject: z.string().nullable().optional(),\n      body: z.string().nullable().optional(),\n      occurred_at: z.string().nullable().optional(),\n      author_user_id: z.string().uuid().nullable(),\n      appearance_icon: z.string().nullable().optional(),\n      appearance_color: z.string().nullable().optional(),\n      organization_id: z.string().uuid().nullable().optional(),\n      tenant_id: z.string().uuid().nullable().optional(),\n      created_at: z.string().nullable(),\n      updated_at: z.string().nullable().optional(),\n    })\n    .passthrough()\n\n  const openApi = openApiFactory({\n    resourceName: openApiConfig.resourceName,\n    querySchema: listSchema,\n    listResponseSchema: createPagedListResponseSchema(activityListItemSchema),\n    create: {\n      schema: createSchema,\n      responseSchema: activityCreateResponseSchema,\n      description: openApiConfig.createDescription,\n    },\n    update: {\n      schema: updateSchema,\n      responseSchema: defaultOkResponseSchema,\n      description: openApiConfig.updateDescription,\n    },\n    del: {\n      schema: z.object({ id: z.string().uuid() }),\n      responseSchema: defaultOkResponseSchema,\n      description: openApiConfig.deleteDescription,\n    },\n  })\n\n  return {\n    metadata: routeMetadata,\n    openApi,\n    GET: crud.GET,\n    POST: crud.POST,\n    PUT: crud.PUT,\n    DELETE: crud.DELETE,\n  }\n}\n"],
+  "mappings": "AAAA,SAAS,SAA0B;AAEnC,SAAS,qBAAqB;AAC9B,SAAS,2BAA2B;AACpC,SAAS,qBAAqB,+BAA+B;AAC7D,SAAS,0BAA0B;AACnC,SAAS,YAAY;AAGrB;AAAA,EACE,iCAAiC;AAAA,EACjC,2BAA2B;AAAA,OACtB;AACP,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,UAAU,EAAE,MAAM,EAAE,WAAW,iBAAiB,CAAC;AAwB7E,SAAS,8BAA8B,YAAwB;AAC7D,SAAO,oCAAoC,YAAY,EAAE,wBAAwB,KAAK,CAAC;AACzF;AAEA,MAAM,0BAA0B;AAEhC,MAAM,gBAAgB,EAAE,OAAO,CAAC,CAAC,EAAE,YAAY;AAE/C,MAAM,aAAa,EAChB,OAAO;AAAA,EACN,MAAM,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,QAAQ,CAAC;AAAA,EACxC,UAAU,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,QAAQ,EAAE;AAAA,EACtD,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACrC,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,SAAS,EAAE,KAAK,CAAC,OAAO,MAAM,CAAC,EAAE,SAAS;AAC5C,CAAC,EACA,YAAY;AAEf,MAAM,eAAe;AAAA,EACnB,YAAY;AAAA,EACZ,WAAW;AAAA,EACX,WAAW;AACb;AAEA,MAAM,+BAA+B,EAAE,OAAO;AAAA,EAC5C,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC/B,cAAc,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAC3C,CAAC;AAEM,SAAS,kBAAkB,QAA6B;AAC7D,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,SAAS;AAAA,EACX,IAAI;AAEJ,QAAM,gBAAgB;AAAA,IACpB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,SAAS,IAAI,EAAE;AAAA,IAC3D,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,SAAS,MAAM,EAAE;AAAA,IAC9D,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,SAAS,MAAM,EAAE;AAAA,IAC7D,QAAQ,EAAE,aAAa,MAAM,iBAAiB,CAAC,SAAS,MAAM,EAAE;AAAA,EAClE;AAEA,QAAM,SAAS;AAAA,IACb;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAEA,QAAM,OAAO,cAAc;AAAA,IACzB,UAAU;AAAA,IACV,KAAK;AAAA,MACH;AAAA,MACA,SAAS;AAAA,MACT,UAAU;AAAA,MACV,aAAa;AAAA,IACf;AAAA,IACA,SAAS;AAAA,MACP,YAAY;AAAA,IACd;AAAA,IACA,MAAM;AAAA,MACJ,QAAQ;AAAA,MACR;AAAA,MACA;AAAA,MACA,sBAAsB;AAAA,QACpB,WAAW;AAAA,MACb;AAAA,MACA;AAAA,MACA,cAAc,OAAO,UAAU;AAC7B,cAAM,UAAmC,CAAC;AAC1C,YAAI,MAAM,SAAU,SAAQ,cAAc,IAAI,EAAE,KAAK,MAAM,SAAS;AACpE,eAAO;AAAA,MACT;AAAA,MACA,eAAe,CAAC,SAAkC;AAChD,cAAM,SAAU,QAAQ,CAAC;AACzB,cAAM,cAAc,CAAC,UAAkC;AACrD,cAAI,SAAS,KAAM,QAAO;AAC1B,cAAI,iBAAiB,KAAM,QAAO,MAAM,YAAY;AACpD,cAAI,OAAO,UAAU,UAAU;AAC7B,kBAAM,UAAU,MAAM,KAAK;AAC3B,gBAAI,CAAC,QAAQ,OAAQ,QAAO;AAC5B,kBAAM,OAAO,IAAI,KAAK,OAAO;AAC7B,mBAAO,OAAO,MAAM,KAAK,QAAQ,CAAC,IAAI,UAAU,KAAK,YAAY;AAAA,UACnE;AACA,iBAAO;AAAA,QACT;AACA,cAAM,aAAa,CAAC,UAAmC,OAAO,UAAU,WAAW,QAAQ;AAC3F,cAAM,UAAU,WAAW,OAAO,EAAE,MAAM,OAAO,MAAM,OAAO,OAAO,OAAO,EAAE,IAAI;AAClF,cAAM,WAAW,WAAW,OAAO,cAAc,CAAC,KAAK,WAAW,OAAO,aAAa,CAAC,KAAK;AAC5F,cAAM,eACJ,WAAW,OAAO,eAAe,CAAC,KAClC,WAAW,OAAO,cAAc,CAAC,KACjC;AACF,cAAM,UACJ,WAAW,OAAO,OAAO,MACxB,OAAO,WAAW,OAAO,OAAO,OAAO,OAAO,OAAO;AACxD,cAAM,OACJ,WAAW,OAAO,IAAI,MACrB,OAAO,QAAQ,OAAO,OAAO,OAAO,OAAO,IAAI;AAClD,cAAM,eACJ,WAAW,OAAO,gBAAgB,CAAC,KAAK,WAAW,OAAO,cAAc,CAAC,KAAK;AAChF,cAAM,oBACJ,WAAW,OAAO,iBAAiB,CAAC,KAAK,WAAW,OAAO,gBAAgB,CAAC;AAC9E,cAAM,qBACJ,WAAW,OAAO,kBAAkB,CAAC,KAAK,WAAW,OAAO,iBAAiB,CAAC;AAChF,cAAM,iBACJ,WAAW,OAAO,iBAAiB,CAAC,KAAK,WAAW,OAAO,gBAAgB,CAAC;AAC9E,cAAM,WACJ,WAAW,OAAO,WAAW,CAAC,KAAK,WAAW,OAAO,UAAU,CAAC;AAClE,cAAM,SAAkC;AAAA,UACtC,IAAI;AAAA,UACJ,UAAU;AAAA,UACV,CAAC,aAAa,GAAG;AAAA,UACjB;AAAA,UACA;AAAA,UACA;AAAA,UACA,YAAY,YAAY,OAAO,aAAa,KAAK,OAAO,YAAY,CAAC;AAAA,UACrE,WAAW,YAAY,OAAO,YAAY,KAAK,OAAO,WAAW,CAAC;AAAA,UAClE;AAAA,UACA;AAAA,UACA;AAAA,UACA,gBAAgB,qBAAqB,kBAAkB,KAAK,EAAE,SAAS,oBAAoB;AAAA,UAC3F,iBAAiB,sBAAsB,mBAAmB,KAAK,EAAE,SAAS,qBAAqB;AAAA,UAC/F,cAAc,MAAM,QAAQ,OAAO,YAAY,IAAI,OAAO,eAAe;AAAA,UACzE,cAAc,OAAO,gBAAgB;AAAA,QACvC;AACA,mBAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,MAAM,GAAG;AACjD,cAAI,IAAI,WAAW,KAAK,KAAK,IAAI,WAAW,KAAK,GAAG;AAClD,mBAAO,GAAG,IAAI;AAAA,UAChB;AAAA,QACF;AACA,eAAO;AAAA,MACT;AAAA,IACF;AAAA,IACA,SAAS;AAAA,MACP,QAAQ;AAAA,QACN,WAAW,GAAG,aAAa;AAAA,QAC3B,QAAQ;AAAA,QACR,UAAU,OAAO,EAAE,KAAK,IAAI,MAAM;AAChC,gBAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,iBAAO,wBAAwB,cAAc,OAAO,CAAC,GAAG,KAAK,SAAS;AAAA,QACxE;AAAA,QACA,UAAU,CAAC,EAAE,OAAO,OAAO;AAAA,UACzB,IAAI,QAAQ,cAAc,QAAQ,MAAM;AAAA,UACxC,cAAc,QAAQ,gBAAgB;AAAA,QACxC;AAAA,QACA,QAAQ;AAAA,MACV;AAAA,MACA,QAAQ;AAAA,QACN,WAAW,GAAG,aAAa;AAAA,QAC3B,QAAQ;AAAA,QACR,UAAU,OAAO,EAAE,KAAK,IAAI,MAAM;AAChC,gBAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,iBAAO,wBAAwB,cAAc,OAAO,CAAC,GAAG,KAAK,SAAS;AAAA,QACxE;AAAA,QACA,UAAU,OAAO,EAAE,IAAI,KAAK;AAAA,MAC9B;AAAA,MACA,QAAQ;AAAA,QACN,WAAW,GAAG,aAAa;AAAA,QAC3B,QAAQ;AAAA,QACR,UAAU,OAAO,EAAE,QAAQ,IAAI,MAAM;AACnC,gBAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,gBAAM,KAAK,oBAAoB,QAAQ,KAAK,SAAS;AACrD,iBAAO,EAAE,GAAG;AAAA,QACd;AAAA,QACA,UAAU,OAAO,EAAE,IAAI,KAAK;AAAA,MAC9B;AAAA,IACF;AAAA,IACA,OAAO;AAAA,MACL,WAAW,OAAO,SAAS,QAAQ;AACjC,cAAM,QAAQ,MAAM,QAAQ,QAAQ,KAAK,IAAI,QAAQ,QAAQ,CAAC;AAC9D,YAAI,CAAC,MAAM,OAAQ;AACnB,cAAM,UAAU,oBAAI,IAAY;AAChC,cAAM,QAAQ,CAAC,SAAkB;AAC/B,cAAI,CAAC,QAAQ,OAAO,SAAS,SAAU;AACvC,gBAAM,SAAS;AACf,gBAAM,SACJ,OAAO,OAAO,mBAAmB,WAC7B,OAAO,iBACP,OAAO,OAAO,iBAAiB,WAC7B,OAAO,eACP;AACR,cAAI,OAAQ,SAAQ,IAAI,MAAM;AAAA,QAChC,CAAC;AACD,YAAI,CAAC,QAAQ,KAAM;AACnB,YAAI;AACF,gBAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,gBAAM,QAAQ,MAAM;AAAA,YAClB;AAAA,YACA;AAAA,YACA,EAAE,IAAI,EAAE,KAAK,MAAM,KAAK,OAAO,EAAE,EAAE;AAAA,YACnC;AAAA,YACA,EAAE,UAAU,IAAI,MAAM,YAAY,MAAM,gBAAgB,IAAI,0BAA0B,KAAK;AAAA,UAC7F;AACA,gBAAM,MAAM,oBAAI,IAA2D;AAC3E,gBAAM,QAAQ,CAAC,SAAS;AACtB,kBAAM,OAAO,OAAO,KAAK,SAAS,YAAY,KAAK,KAAK,KAAK,EAAE,SAC3D,KAAK,KAAK,KAAK,IACf;AACJ,gBAAI,IAAI,KAAK,IAAI,EAAE,MAAM,OAAO,KAAK,SAAS,KAAK,CAAC;AAAA,UACtD,CAAC;AACD,gBAAM,QAAQ,CAAC,SAAkB;AAC/B,gBAAI,CAAC,QAAQ,OAAO,SAAS,SAAU;AACvC,kBAAM,SAAS;AACf,kBAAM,SACJ,OAAO,OAAO,mBAAmB,WAC7B,OAAO,iBACP,OAAO,OAAO,iBAAiB,WAC7B,OAAO,eACP;AACR,gBAAI,CAAC,OAAQ;AACb,kBAAM,OAAO,IAAI,IAAI,MAAM;AAC3B,gBAAI,CAAC,KAAM;AACX,mBAAO,aAAa,KAAK;AACzB,mBAAO,cAAc,KAAK;AAC1B,gBAAI,EAAE,iBAAiB,QAAS,QAAO,cAAc,KAAK;AAC1D,gBAAI,EAAE,kBAAkB,QAAS,QAAO,eAAe,KAAK;AAAA,UAC9D,CAAC;AAAA,QACH,SAAS,KAAK;AACZ,iBAAO,KAAK,oCAAoC,EAAE,WAAW,IAAI,CAAC;AAAA,QACpE;AAAA,MACF;AAAA,IACF;AAAA,EACF,CAAC;AAED,QAAM,yBAAyB,EAC5B,OAAO;AAAA,IACN,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,IACpB,CAAC,cAAc,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS;AAAA,IACxD,eAAe,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,IAC9C,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,IACxC,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,IACrC,aAAa,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,IAC5C,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,IAC3C,iBAAiB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,IAChD,kBAAkB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,IACjD,iBAAiB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS;AAAA,IACvD,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS;AAAA,IACjD,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,IAChC,YAAY,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC7C,CAAC,EACA,YAAY;AAEf,QAAM,UAAU,eAAe;AAAA,IAC7B,cAAc,cAAc;AAAA,IAC5B,aAAa;AAAA,IACb,oBAAoB,8BAA8B,sBAAsB;AAAA,IACxE,QAAQ;AAAA,MACN,QAAQ;AAAA,MACR,gBAAgB;AAAA,MAChB,aAAa,cAAc;AAAA,IAC7B;AAAA,IACA,QAAQ;AAAA,MACN,QAAQ;AAAA,MACR,gBAAgB;AAAA,MAChB,aAAa,cAAc;AAAA,IAC7B;AAAA,IACA,KAAK;AAAA,MACH,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAAA,MAC1C,gBAAgB;AAAA,MAChB,aAAa,cAAc;AAAA,IAC7B;AAAA,EACF,CAAC;AAED,SAAO;AAAA,IACL,UAAU;AAAA,IACV;AAAA,IACA,KAAK,KAAK;AAAA,IACV,MAAM,KAAK;AAAA,IACX,KAAK,KAAK;AAAA,IACV,QAAQ,KAAK;AAAA,EACf;AACF;",
   "names": []
 }

package/dist/modules/feature_toggles/api/overrides/route.js

@@ -20,6 +20,8 @@ import {
   featureToggleErrorSchema,
   changeOverrideStateResponseSchema
 } from "../openapi.js";
+import { createLogger } from "@open-mercato/shared/lib/logger";
+const logger = createLogger("feature_toggles").child({ component: "overrides" });
 async function GET(req) {
   const { auth, ctx, scope } = await buildContext(req);
   const url = new URL(req.url);
@@ -159,7 +161,7 @@ async function PUT(req) {
     if (message === "INVALID_STATE" || message === "INVALID_TOGGLE_ID" || message === "INVALID_TENANT_ID") {
       return NextResponse.json({ error: message }, { status: 400 });
     }
-    console.error("feature_toggles.overrides.changeState failed", error);
+    logger.error("Override state change failed", { err: error });
     return NextResponse.json({ error: "Failed to update override" }, { status: 500 });
   }
 }

package/dist/modules/feature_toggles/api/overrides/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../src/modules/feature_toggles/api/overrides/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { Tenant } from '@open-mercato/core/modules/directory/data/entities'\nimport type { CommandBus } from '@open-mercato/shared/lib/commands'\nimport { serializeOperationMetadata } from '@open-mercato/shared/lib/commands/operationMetadata'\nimport { getOverrides } from '../../lib/queries'\nimport { isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { enforceCommandOptimisticLockWithGuards } from '@open-mercato/shared/lib/crud/optimistic-lock-command'\nimport {\n  runCrudMutationGuardAfterSuccess,\n  validateCrudMutationGuard,\n} from '@open-mercato/shared/lib/crud/mutation-guard'\nimport { logCrudAccess } from '@open-mercato/shared/lib/crud/factory'\nimport { FeatureToggleOverride } from '../../data/entities'\nimport { buildContext } from '../../lib/utils'\nimport { resolveFeatureCheckContext } from \"@open-mercato/core/modules/directory/utils/organizationScope\"\nimport { ProcessedChangeOverrideStateInput } from '../../data/validators'\nimport {\n  changeOverrideStateBaseSchema,\n  overrideListQuerySchema,\n  featureTogglesTag,\n  featureToggleOverrideListResponseSchema,\n  featureToggleErrorSchema,\n  changeOverrideStateResponseSchema,\n} from '../openapi'\nimport type { OpenApiRouteDoc, OpenApiMethodDoc } from '@open-mercato/shared/lib/openapi'\n\nexport async function GET(req: Request) {\n  const { auth, ctx, scope } = await buildContext(req)\n\n  const url = new URL(req.url)\n  const parsed = overrideListQuerySchema.safeParse(Object.fromEntries(url.searchParams.entries()))\n  if (!parsed.success) {\n    return NextResponse.json({ error: 'Invalid query parameters' }, { status: 400 })\n  }\n  const em = ctx.container.resolve('em') as EntityManager\n\n  const tenant = await em.findOne(Tenant, {\n    id: scope.tenantId,\n  })\n\n  if (!tenant) {\n    return NextResponse.json({\n      error: 'Tenant context required. Please select a tenant.'\n    }, { status: 400 })\n  }\n\n  const result = await getOverrides(em, tenant, parsed.data)\n\n  await logCrudAccess({\n    container: ctx.container,\n    auth,\n    request: req,\n    items: [...result.raw.toggles, ...result.raw.overrides],\n    idField: 'id',\n    resourceKind: 'feature_toggles.override_list',\n    tenantId: scope.tenantId ?? null,\n    query: parsed.data,\n    accessType: 'read:list',\n    fields: ['id', 'toggleId', 'tenantId', 'identifier', 'name', 'category']\n  })\n\n  return NextResponse.json({\n    items: result.items,\n    total: result.total,\n    totalPages: result.totalPages,\n    page: result.page,\n    pageSize: result.pageSize,\n    isSuperAdmin: auth.isSuperAdmin ?? false\n  })\n}\n\nexport async function PUT(req: Request) {\n  try {\n    const { ctx } = await buildContext(req)\n\n    const parsed = changeOverrideStateBaseSchema.safeParse(await req.json())\n    if (!parsed.success) {\n      return NextResponse.json({ error: 'Invalid payload', details: parsed.error.flatten() }, { status: 400 })\n    }\n\n    const { scope, organizationId } = await resolveFeatureCheckContext({\n      container: ctx.container,\n      auth: ctx.auth,\n      request: req\n    })\n\n    if (!scope.tenantId) {\n      return NextResponse.json({\n        error: 'Tenant context required. Please select a tenant.'\n      }, { status: 400 })\n    }\n\n    // Optimistic lock: refuse a stale override overwrite when two admins edit the\n    // same global toggle override in parallel. Only enforced when an override row\n    // already exists (first set has no prior version). Strictly additive.\n    const em = ctx.container.resolve('em') as EntityManager\n    const existingOverride = await em.findOne(FeatureToggleOverride, {\n      tenantId: scope.tenantId,\n      toggle: { id: parsed.data.toggleId },\n    })\n    if (existingOverride) {\n      await enforceCommandOptimisticLockWithGuards(ctx.container, {\n        resourceKind: 'feature_toggles.feature_toggle_override',\n        resourceId: existingOverride.id,\n        current: existingOverride.updatedAt ?? null,\n        request: req,\n      })\n    }\n\n    // Run the CRUD mutation guard lifecycle so this custom write route honors\n    // module-level guard injections (and after-success hooks) like every other\n    // mutating endpoint. The override either updates an existing row or creates a\n    // new one, so the resource id falls back to the toggle id when no row exists.\n    const guardUserId = ctx.auth?.userId ?? ctx.auth?.sub ?? null\n    if (!guardUserId) {\n      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n    }\n    const guardResourceKind = 'feature_toggles.feature_toggle_override'\n    const guardResourceId = existingOverride?.id ?? parsed.data.toggleId\n    const guardResult = await validateCrudMutationGuard(ctx.container, {\n      tenantId: scope.tenantId,\n      organizationId: organizationId ?? null,\n      userId: guardUserId,\n      resourceKind: guardResourceKind,\n      resourceId: guardResourceId,\n      operation: 'update',\n      requestMethod: req.method,\n      requestHeaders: req.headers,\n      mutationPayload: parsed.data,\n    })\n    if (guardResult && !guardResult.ok) {\n      return NextResponse.json(guardResult.body, { status: guardResult.status })\n    }\n\n    const commandBus = ctx.container.resolve('commandBus') as CommandBus\n    const { result, logEntry } = await commandBus.execute<ProcessedChangeOverrideStateInput, { overrideToggleId: string | null }>('feature_toggles.overrides.changeState', {\n      input: {\n        toggleId: parsed.data.toggleId,\n        tenantId: scope.tenantId,\n        isOverride: parsed.data.isOverride,\n        overrideValue: parsed.data.overrideValue,\n      },\n      ctx,\n    })\n\n    if (guardResult?.ok && guardResult.shouldRunAfterSuccess) {\n      await runCrudMutationGuardAfterSuccess(ctx.container, {\n        tenantId: scope.tenantId,\n        organizationId: organizationId ?? null,\n        userId: guardUserId,\n        resourceKind: guardResourceKind,\n        resourceId: result?.overrideToggleId ?? guardResourceId,\n        operation: 'update',\n        requestMethod: req.method,\n        requestHeaders: req.headers,\n        metadata: guardResult.metadata ?? null,\n      })\n    }\n\n    const response = NextResponse.json({\n      ok: true,\n      overrideToggleId: result?.overrideToggleId ?? null,\n    })\n\n    if (logEntry?.undoToken && logEntry?.id && logEntry?.commandId) {\n      response.headers.set(\n        'x-om-operation',\n        serializeOperationMetadata({\n          id: logEntry.id,\n          undoToken: logEntry.undoToken,\n          commandId: logEntry.commandId,\n          actionLabel: logEntry.actionLabel ?? null,\n          resourceKind: logEntry.resourceKind ?? 'feature_toggles.override',\n          resourceId: logEntry.resourceId ?? result?.overrideToggleId ?? null,\n          executedAt: logEntry.createdAt instanceof Date ? logEntry.createdAt.toISOString() : undefined,\n        })\n      )\n    }\n\n    return response\n  } catch (error) {\n    if (isCrudHttpError(error)) {\n      return NextResponse.json(error.body, { status: error.status })\n    }\n    const message = error instanceof Error ? error.message : 'Unknown error'\n    if (message === 'NOT_FOUND') return NextResponse.json({ error: 'Not found' }, { status: 404 })\n    if (message === 'INVALID_STATE' || message === 'INVALID_TOGGLE_ID' || message === 'INVALID_TENANT_ID') {\n      return NextResponse.json({ error: message }, { status: 400 })\n    }\n    console.error('feature_toggles.overrides.changeState failed', error)\n    return NextResponse.json({ error: 'Failed to update override' }, { status: 500 })\n  }\n}\n\nconst routeMetadata = {\n  GET: { requireAuth: true, requireFeatures: ['feature_toggles.view'] },\n  PUT: { requireAuth: true, requireFeatures: ['feature_toggles.manage'] },\n}\n\nexport const metadata = routeMetadata\n\nconst overrideGetDoc: OpenApiMethodDoc = {\n  summary: 'List overrides',\n  description: 'Returns list of feature toggle overrides.',\n  tags: [featureTogglesTag],\n  query: overrideListQuerySchema,\n  responses: [\n    { status: 200, description: 'List of overrides', schema: featureToggleOverrideListResponseSchema },\n  ],\n  errors: [\n    { status: 400, description: 'Invalid query parameters', schema: featureToggleErrorSchema },\n    { status: 401, description: 'Authentication required', schema: featureToggleErrorSchema },\n  ],\n}\n\nconst overridePutDoc: OpenApiMethodDoc = {\n  summary: 'Change override state',\n  description: 'Enable, disable or inherit a feature toggle for a specific tenant.',\n  tags: [featureTogglesTag],\n  requestBody: {\n    contentType: 'application/json',\n    schema: changeOverrideStateBaseSchema,\n    description: 'Override details.',\n  },\n  responses: [\n    { status: 200, description: 'Override updated', schema: changeOverrideStateResponseSchema },\n  ],\n  errors: [\n    { status: 400, description: 'Validation failed', schema: featureToggleErrorSchema },\n    { status: 401, description: 'Authentication required', schema: featureToggleErrorSchema },\n    { status: 404, description: 'Not found', schema: featureToggleErrorSchema },\n    { status: 500, description: 'Internal server error', schema: featureToggleErrorSchema },\n  ],\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: featureTogglesTag,\n  summary: 'Manage feature toggle overrides',\n  methods: {\n    GET: overrideGetDoc,\n    PUT: overridePutDoc,\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAE7B,SAAS,cAAc;AAEvB,SAAS,kCAAkC;AAC3C,SAAS,oBAAoB;AAC7B,SAAS,uBAAuB;AAChC,SAAS,8CAA8C;AACvD;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,qBAAqB;AAC9B,SAAS,6BAA6B;AACtC,SAAS,oBAAoB;AAC7B,SAAS,kCAAkC;AAE3C;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAGP,eAAsB,IAAI,KAAc;AACtC,QAAM,EAAE,MAAM,KAAK,MAAM,IAAI,MAAM,aAAa,GAAG;AAEnD,QAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,QAAM,SAAS,wBAAwB,UAAU,OAAO,YAAY,IAAI,aAAa,QAAQ,CAAC,CAAC;AAC/F,MAAI,CAAC,OAAO,SAAS;AACnB,WAAO,aAAa,KAAK,EAAE,OAAO,2BAA2B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACjF;AACA,QAAM,KAAK,IAAI,UAAU,QAAQ,IAAI;AAErC,QAAM,SAAS,MAAM,GAAG,QAAQ,QAAQ;AAAA,IACtC,IAAI,MAAM;AAAA,EACZ,CAAC;AAED,MAAI,CAAC,QAAQ;AACX,WAAO,aAAa,KAAK;AAAA,MACvB,OAAO;AAAA,IACT,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACpB;AAEA,QAAM,SAAS,MAAM,aAAa,IAAI,QAAQ,OAAO,IAAI;AAEzD,QAAM,cAAc;AAAA,IAClB,WAAW,IAAI;AAAA,IACf;AAAA,IACA,SAAS;AAAA,IACT,OAAO,CAAC,GAAG,OAAO,IAAI,SAAS,GAAG,OAAO,IAAI,SAAS;AAAA,IACtD,SAAS;AAAA,IACT,cAAc;AAAA,IACd,UAAU,MAAM,YAAY;AAAA,IAC5B,OAAO,OAAO;AAAA,IACd,YAAY;AAAA,IACZ,QAAQ,CAAC,MAAM,YAAY,YAAY,cAAc,QAAQ,UAAU;AAAA,EACzE,CAAC;AAED,SAAO,aAAa,KAAK;AAAA,IACvB,OAAO,OAAO;AAAA,IACd,OAAO,OAAO;AAAA,IACd,YAAY,OAAO;AAAA,IACnB,MAAM,OAAO;AAAA,IACb,UAAU,OAAO;AAAA,IACjB,cAAc,KAAK,gBAAgB;AAAA,EACrC,CAAC;AACH;AAEA,eAAsB,IAAI,KAAc;AACtC,MAAI;AACF,UAAM,EAAE,IAAI,IAAI,MAAM,aAAa,GAAG;AAEtC,UAAM,SAAS,8BAA8B,UAAU,MAAM,IAAI,KAAK,CAAC;AACvE,QAAI,CAAC,OAAO,SAAS;AACnB,aAAO,aAAa,KAAK,EAAE,OAAO,mBAAmB,SAAS,OAAO,MAAM,QAAQ,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACzG;AAEA,UAAM,EAAE,OAAO,eAAe,IAAI,MAAM,2BAA2B;AAAA,MACjE,WAAW,IAAI;AAAA,MACf,MAAM,IAAI;AAAA,MACV,SAAS;AAAA,IACX,CAAC;AAED,QAAI,CAAC,MAAM,UAAU;AACnB,aAAO,aAAa,KAAK;AAAA,QACvB,OAAO;AAAA,MACT,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACpB;AAKA,UAAM,KAAK,IAAI,UAAU,QAAQ,IAAI;AACrC,UAAM,mBAAmB,MAAM,GAAG,QAAQ,uBAAuB;AAAA,MAC/D,UAAU,MAAM;AAAA,MAChB,QAAQ,EAAE,IAAI,OAAO,KAAK,SAAS;AAAA,IACrC,CAAC;AACD,QAAI,kBAAkB;AACpB,YAAM,uCAAuC,IAAI,WAAW;AAAA,QAC1D,cAAc;AAAA,QACd,YAAY,iBAAiB;AAAA,QAC7B,SAAS,iBAAiB,aAAa;AAAA,QACvC,SAAS;AAAA,MACX,CAAC;AAAA,IACH;AAMA,UAAM,cAAc,IAAI,MAAM,UAAU,IAAI,MAAM,OAAO;AACzD,QAAI,CAAC,aAAa;AAChB,aAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrE;AACA,UAAM,oBAAoB;AAC1B,UAAM,kBAAkB,kBAAkB,MAAM,OAAO,KAAK;AAC5D,UAAM,cAAc,MAAM,0BAA0B,IAAI,WAAW;AAAA,MACjE,UAAU,MAAM;AAAA,MAChB,gBAAgB,kBAAkB;AAAA,MAClC,QAAQ;AAAA,MACR,cAAc;AAAA,MACd,YAAY;AAAA,MACZ,WAAW;AAAA,MACX,eAAe,IAAI;AAAA,MACnB,gBAAgB,IAAI;AAAA,MACpB,iBAAiB,OAAO;AAAA,IAC1B,CAAC;AACD,QAAI,eAAe,CAAC,YAAY,IAAI;AAClC,aAAO,aAAa,KAAK,YAAY,MAAM,EAAE,QAAQ,YAAY,OAAO,CAAC;AAAA,IAC3E;AAEA,UAAM,aAAa,IAAI,UAAU,QAAQ,YAAY;AACrD,UAAM,EAAE,QAAQ,SAAS,IAAI,MAAM,WAAW,QAAgF,yCAAyC;AAAA,MACrK,OAAO;AAAA,QACL,UAAU,OAAO,KAAK;AAAA,QACtB,UAAU,MAAM;AAAA,QAChB,YAAY,OAAO,KAAK;AAAA,QACxB,eAAe,OAAO,KAAK;AAAA,MAC7B;AAAA,MACA;AAAA,IACF,CAAC;AAED,QAAI,aAAa,MAAM,YAAY,uBAAuB;AACxD,YAAM,iCAAiC,IAAI,WAAW;AAAA,QACpD,UAAU,MAAM;AAAA,QAChB,gBAAgB,kBAAkB;AAAA,QAClC,QAAQ;AAAA,QACR,cAAc;AAAA,QACd,YAAY,QAAQ,oBAAoB;AAAA,QACxC,WAAW;AAAA,QACX,eAAe,IAAI;AAAA,QACnB,gBAAgB,IAAI;AAAA,QACpB,UAAU,YAAY,YAAY;AAAA,MACpC,CAAC;AAAA,IACH;AAEA,UAAM,WAAW,aAAa,KAAK;AAAA,MACjC,IAAI;AAAA,MACJ,kBAAkB,QAAQ,oBAAoB;AAAA,IAChD,CAAC;AAED,QAAI,UAAU,aAAa,UAAU,MAAM,UAAU,WAAW;AAC9D,eAAS,QAAQ;AAAA,QACf;AAAA,QACA,2BAA2B;AAAA,UACzB,IAAI,SAAS;AAAA,UACb,WAAW,SAAS;AAAA,UACpB,WAAW,SAAS;AAAA,UACpB,aAAa,SAAS,eAAe;AAAA,UACrC,cAAc,SAAS,gBAAgB;AAAA,UACvC,YAAY,SAAS,cAAc,QAAQ,oBAAoB;AAAA,UAC/D,YAAY,SAAS,qBAAqB,OAAO,SAAS,UAAU,YAAY,IAAI;AAAA,QACtF,CAAC;AAAA,MACH;AAAA,IACF;AAEA,WAAO;AAAA,EACT,SAAS,OAAO;AACd,QAAI,gBAAgB,KAAK,GAAG;AAC1B,aAAO,aAAa,KAAK,MAAM,MAAM,EAAE,QAAQ,MAAM,OAAO,CAAC;AAAA,IAC/D;AACA,UAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU;AACzD,QAAI,YAAY,YAAa,QAAO,aAAa,KAAK,EAAE,OAAO,YAAY,GAAG,EAAE,QAAQ,IAAI,CAAC;AAC7F,QAAI,YAAY,mBAAmB,YAAY,uBAAuB,YAAY,qBAAqB;AACrG,aAAO,aAAa,KAAK,EAAE,OAAO,QAAQ,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC9D;AACA,YAAQ,MAAM,gDAAgD,KAAK;AACnE,WAAO,aAAa,KAAK,EAAE,OAAO,4BAA4B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAClF;AACF;AAEA,MAAM,gBAAgB;AAAA,EACpB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,sBAAsB,EAAE;AAAA,EACpE,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,wBAAwB,EAAE;AACxE;AAEO,MAAM,WAAW;AAExB,MAAM,iBAAmC;AAAA,EACvC,SAAS;AAAA,EACT,aAAa;AAAA,EACb,MAAM,CAAC,iBAAiB;AAAA,EACxB,OAAO;AAAA,EACP,WAAW;AAAA,IACT,EAAE,QAAQ,KAAK,aAAa,qBAAqB,QAAQ,wCAAwC;AAAA,EACnG;AAAA,EACA,QAAQ;AAAA,IACN,EAAE,QAAQ,KAAK,aAAa,4BAA4B,QAAQ,yBAAyB;AAAA,IACzF,EAAE,QAAQ,KAAK,aAAa,2BAA2B,QAAQ,yBAAyB;AAAA,EAC1F;AACF;AAEA,MAAM,iBAAmC;AAAA,EACvC,SAAS;AAAA,EACT,aAAa;AAAA,EACb,MAAM,CAAC,iBAAiB;AAAA,EACxB,aAAa;AAAA,IACX,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,aAAa;AAAA,EACf;AAAA,EACA,WAAW;AAAA,IACT,EAAE,QAAQ,KAAK,aAAa,oBAAoB,QAAQ,kCAAkC;AAAA,EAC5F;AAAA,EACA,QAAQ;AAAA,IACN,EAAE,QAAQ,KAAK,aAAa,qBAAqB,QAAQ,yBAAyB;AAAA,IAClF,EAAE,QAAQ,KAAK,aAAa,2BAA2B,QAAQ,yBAAyB;AAAA,IACxF,EAAE,QAAQ,KAAK,aAAa,aAAa,QAAQ,yBAAyB;AAAA,IAC1E,EAAE,QAAQ,KAAK,aAAa,yBAAyB,QAAQ,yBAAyB;AAAA,EACxF;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,IACL,KAAK;AAAA,EACP;AACF;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { Tenant } from '@open-mercato/core/modules/directory/data/entities'\nimport type { CommandBus } from '@open-mercato/shared/lib/commands'\nimport { serializeOperationMetadata } from '@open-mercato/shared/lib/commands/operationMetadata'\nimport { getOverrides } from '../../lib/queries'\nimport { isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { enforceCommandOptimisticLockWithGuards } from '@open-mercato/shared/lib/crud/optimistic-lock-command'\nimport {\n  runCrudMutationGuardAfterSuccess,\n  validateCrudMutationGuard,\n} from '@open-mercato/shared/lib/crud/mutation-guard'\nimport { logCrudAccess } from '@open-mercato/shared/lib/crud/factory'\nimport { FeatureToggleOverride } from '../../data/entities'\nimport { buildContext } from '../../lib/utils'\nimport { resolveFeatureCheckContext } from \"@open-mercato/core/modules/directory/utils/organizationScope\"\nimport { ProcessedChangeOverrideStateInput } from '../../data/validators'\nimport {\n  changeOverrideStateBaseSchema,\n  overrideListQuerySchema,\n  featureTogglesTag,\n  featureToggleOverrideListResponseSchema,\n  featureToggleErrorSchema,\n  changeOverrideStateResponseSchema,\n} from '../openapi'\nimport type { OpenApiRouteDoc, OpenApiMethodDoc } from '@open-mercato/shared/lib/openapi'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('feature_toggles').child({ component: 'overrides' })\n\nexport async function GET(req: Request) {\n  const { auth, ctx, scope } = await buildContext(req)\n\n  const url = new URL(req.url)\n  const parsed = overrideListQuerySchema.safeParse(Object.fromEntries(url.searchParams.entries()))\n  if (!parsed.success) {\n    return NextResponse.json({ error: 'Invalid query parameters' }, { status: 400 })\n  }\n  const em = ctx.container.resolve('em') as EntityManager\n\n  const tenant = await em.findOne(Tenant, {\n    id: scope.tenantId,\n  })\n\n  if (!tenant) {\n    return NextResponse.json({\n      error: 'Tenant context required. Please select a tenant.'\n    }, { status: 400 })\n  }\n\n  const result = await getOverrides(em, tenant, parsed.data)\n\n  await logCrudAccess({\n    container: ctx.container,\n    auth,\n    request: req,\n    items: [...result.raw.toggles, ...result.raw.overrides],\n    idField: 'id',\n    resourceKind: 'feature_toggles.override_list',\n    tenantId: scope.tenantId ?? null,\n    query: parsed.data,\n    accessType: 'read:list',\n    fields: ['id', 'toggleId', 'tenantId', 'identifier', 'name', 'category']\n  })\n\n  return NextResponse.json({\n    items: result.items,\n    total: result.total,\n    totalPages: result.totalPages,\n    page: result.page,\n    pageSize: result.pageSize,\n    isSuperAdmin: auth.isSuperAdmin ?? false\n  })\n}\n\nexport async function PUT(req: Request) {\n  try {\n    const { ctx } = await buildContext(req)\n\n    const parsed = changeOverrideStateBaseSchema.safeParse(await req.json())\n    if (!parsed.success) {\n      return NextResponse.json({ error: 'Invalid payload', details: parsed.error.flatten() }, { status: 400 })\n    }\n\n    const { scope, organizationId } = await resolveFeatureCheckContext({\n      container: ctx.container,\n      auth: ctx.auth,\n      request: req\n    })\n\n    if (!scope.tenantId) {\n      return NextResponse.json({\n        error: 'Tenant context required. Please select a tenant.'\n      }, { status: 400 })\n    }\n\n    // Optimistic lock: refuse a stale override overwrite when two admins edit the\n    // same global toggle override in parallel. Only enforced when an override row\n    // already exists (first set has no prior version). Strictly additive.\n    const em = ctx.container.resolve('em') as EntityManager\n    const existingOverride = await em.findOne(FeatureToggleOverride, {\n      tenantId: scope.tenantId,\n      toggle: { id: parsed.data.toggleId },\n    })\n    if (existingOverride) {\n      await enforceCommandOptimisticLockWithGuards(ctx.container, {\n        resourceKind: 'feature_toggles.feature_toggle_override',\n        resourceId: existingOverride.id,\n        current: existingOverride.updatedAt ?? null,\n        request: req,\n      })\n    }\n\n    // Run the CRUD mutation guard lifecycle so this custom write route honors\n    // module-level guard injections (and after-success hooks) like every other\n    // mutating endpoint. The override either updates an existing row or creates a\n    // new one, so the resource id falls back to the toggle id when no row exists.\n    const guardUserId = ctx.auth?.userId ?? ctx.auth?.sub ?? null\n    if (!guardUserId) {\n      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n    }\n    const guardResourceKind = 'feature_toggles.feature_toggle_override'\n    const guardResourceId = existingOverride?.id ?? parsed.data.toggleId\n    const guardResult = await validateCrudMutationGuard(ctx.container, {\n      tenantId: scope.tenantId,\n      organizationId: organizationId ?? null,\n      userId: guardUserId,\n      resourceKind: guardResourceKind,\n      resourceId: guardResourceId,\n      operation: 'update',\n      requestMethod: req.method,\n      requestHeaders: req.headers,\n      mutationPayload: parsed.data,\n    })\n    if (guardResult && !guardResult.ok) {\n      return NextResponse.json(guardResult.body, { status: guardResult.status })\n    }\n\n    const commandBus = ctx.container.resolve('commandBus') as CommandBus\n    const { result, logEntry } = await commandBus.execute<ProcessedChangeOverrideStateInput, { overrideToggleId: string | null }>('feature_toggles.overrides.changeState', {\n      input: {\n        toggleId: parsed.data.toggleId,\n        tenantId: scope.tenantId,\n        isOverride: parsed.data.isOverride,\n        overrideValue: parsed.data.overrideValue,\n      },\n      ctx,\n    })\n\n    if (guardResult?.ok && guardResult.shouldRunAfterSuccess) {\n      await runCrudMutationGuardAfterSuccess(ctx.container, {\n        tenantId: scope.tenantId,\n        organizationId: organizationId ?? null,\n        userId: guardUserId,\n        resourceKind: guardResourceKind,\n        resourceId: result?.overrideToggleId ?? guardResourceId,\n        operation: 'update',\n        requestMethod: req.method,\n        requestHeaders: req.headers,\n        metadata: guardResult.metadata ?? null,\n      })\n    }\n\n    const response = NextResponse.json({\n      ok: true,\n      overrideToggleId: result?.overrideToggleId ?? null,\n    })\n\n    if (logEntry?.undoToken && logEntry?.id && logEntry?.commandId) {\n      response.headers.set(\n        'x-om-operation',\n        serializeOperationMetadata({\n          id: logEntry.id,\n          undoToken: logEntry.undoToken,\n          commandId: logEntry.commandId,\n          actionLabel: logEntry.actionLabel ?? null,\n          resourceKind: logEntry.resourceKind ?? 'feature_toggles.override',\n          resourceId: logEntry.resourceId ?? result?.overrideToggleId ?? null,\n          executedAt: logEntry.createdAt instanceof Date ? logEntry.createdAt.toISOString() : undefined,\n        })\n      )\n    }\n\n    return response\n  } catch (error) {\n    if (isCrudHttpError(error)) {\n      return NextResponse.json(error.body, { status: error.status })\n    }\n    const message = error instanceof Error ? error.message : 'Unknown error'\n    if (message === 'NOT_FOUND') return NextResponse.json({ error: 'Not found' }, { status: 404 })\n    if (message === 'INVALID_STATE' || message === 'INVALID_TOGGLE_ID' || message === 'INVALID_TENANT_ID') {\n      return NextResponse.json({ error: message }, { status: 400 })\n    }\n    logger.error('Override state change failed', { err: error })\n    return NextResponse.json({ error: 'Failed to update override' }, { status: 500 })\n  }\n}\n\nconst routeMetadata = {\n  GET: { requireAuth: true, requireFeatures: ['feature_toggles.view'] },\n  PUT: { requireAuth: true, requireFeatures: ['feature_toggles.manage'] },\n}\n\nexport const metadata = routeMetadata\n\nconst overrideGetDoc: OpenApiMethodDoc = {\n  summary: 'List overrides',\n  description: 'Returns list of feature toggle overrides.',\n  tags: [featureTogglesTag],\n  query: overrideListQuerySchema,\n  responses: [\n    { status: 200, description: 'List of overrides', schema: featureToggleOverrideListResponseSchema },\n  ],\n  errors: [\n    { status: 400, description: 'Invalid query parameters', schema: featureToggleErrorSchema },\n    { status: 401, description: 'Authentication required', schema: featureToggleErrorSchema },\n  ],\n}\n\nconst overridePutDoc: OpenApiMethodDoc = {\n  summary: 'Change override state',\n  description: 'Enable, disable or inherit a feature toggle for a specific tenant.',\n  tags: [featureTogglesTag],\n  requestBody: {\n    contentType: 'application/json',\n    schema: changeOverrideStateBaseSchema,\n    description: 'Override details.',\n  },\n  responses: [\n    { status: 200, description: 'Override updated', schema: changeOverrideStateResponseSchema },\n  ],\n  errors: [\n    { status: 400, description: 'Validation failed', schema: featureToggleErrorSchema },\n    { status: 401, description: 'Authentication required', schema: featureToggleErrorSchema },\n    { status: 404, description: 'Not found', schema: featureToggleErrorSchema },\n    { status: 500, description: 'Internal server error', schema: featureToggleErrorSchema },\n  ],\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: featureTogglesTag,\n  summary: 'Manage feature toggle overrides',\n  methods: {\n    GET: overrideGetDoc,\n    PUT: overridePutDoc,\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAE7B,SAAS,cAAc;AAEvB,SAAS,kCAAkC;AAC3C,SAAS,oBAAoB;AAC7B,SAAS,uBAAuB;AAChC,SAAS,8CAA8C;AACvD;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,qBAAqB;AAC9B,SAAS,6BAA6B;AACtC,SAAS,oBAAoB;AAC7B,SAAS,kCAAkC;AAE3C;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,iBAAiB,EAAE,MAAM,EAAE,WAAW,YAAY,CAAC;AAE/E,eAAsB,IAAI,KAAc;AACtC,QAAM,EAAE,MAAM,KAAK,MAAM,IAAI,MAAM,aAAa,GAAG;AAEnD,QAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,QAAM,SAAS,wBAAwB,UAAU,OAAO,YAAY,IAAI,aAAa,QAAQ,CAAC,CAAC;AAC/F,MAAI,CAAC,OAAO,SAAS;AACnB,WAAO,aAAa,KAAK,EAAE,OAAO,2BAA2B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACjF;AACA,QAAM,KAAK,IAAI,UAAU,QAAQ,IAAI;AAErC,QAAM,SAAS,MAAM,GAAG,QAAQ,QAAQ;AAAA,IACtC,IAAI,MAAM;AAAA,EACZ,CAAC;AAED,MAAI,CAAC,QAAQ;AACX,WAAO,aAAa,KAAK;AAAA,MACvB,OAAO;AAAA,IACT,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACpB;AAEA,QAAM,SAAS,MAAM,aAAa,IAAI,QAAQ,OAAO,IAAI;AAEzD,QAAM,cAAc;AAAA,IAClB,WAAW,IAAI;AAAA,IACf;AAAA,IACA,SAAS;AAAA,IACT,OAAO,CAAC,GAAG,OAAO,IAAI,SAAS,GAAG,OAAO,IAAI,SAAS;AAAA,IACtD,SAAS;AAAA,IACT,cAAc;AAAA,IACd,UAAU,MAAM,YAAY;AAAA,IAC5B,OAAO,OAAO;AAAA,IACd,YAAY;AAAA,IACZ,QAAQ,CAAC,MAAM,YAAY,YAAY,cAAc,QAAQ,UAAU;AAAA,EACzE,CAAC;AAED,SAAO,aAAa,KAAK;AAAA,IACvB,OAAO,OAAO;AAAA,IACd,OAAO,OAAO;AAAA,IACd,YAAY,OAAO;AAAA,IACnB,MAAM,OAAO;AAAA,IACb,UAAU,OAAO;AAAA,IACjB,cAAc,KAAK,gBAAgB;AAAA,EACrC,CAAC;AACH;AAEA,eAAsB,IAAI,KAAc;AACtC,MAAI;AACF,UAAM,EAAE,IAAI,IAAI,MAAM,aAAa,GAAG;AAEtC,UAAM,SAAS,8BAA8B,UAAU,MAAM,IAAI,KAAK,CAAC;AACvE,QAAI,CAAC,OAAO,SAAS;AACnB,aAAO,aAAa,KAAK,EAAE,OAAO,mBAAmB,SAAS,OAAO,MAAM,QAAQ,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACzG;AAEA,UAAM,EAAE,OAAO,eAAe,IAAI,MAAM,2BAA2B;AAAA,MACjE,WAAW,IAAI;AAAA,MACf,MAAM,IAAI;AAAA,MACV,SAAS;AAAA,IACX,CAAC;AAED,QAAI,CAAC,MAAM,UAAU;AACnB,aAAO,aAAa,KAAK;AAAA,QACvB,OAAO;AAAA,MACT,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACpB;AAKA,UAAM,KAAK,IAAI,UAAU,QAAQ,IAAI;AACrC,UAAM,mBAAmB,MAAM,GAAG,QAAQ,uBAAuB;AAAA,MAC/D,UAAU,MAAM;AAAA,MAChB,QAAQ,EAAE,IAAI,OAAO,KAAK,SAAS;AAAA,IACrC,CAAC;AACD,QAAI,kBAAkB;AACpB,YAAM,uCAAuC,IAAI,WAAW;AAAA,QAC1D,cAAc;AAAA,QACd,YAAY,iBAAiB;AAAA,QAC7B,SAAS,iBAAiB,aAAa;AAAA,QACvC,SAAS;AAAA,MACX,CAAC;AAAA,IACH;AAMA,UAAM,cAAc,IAAI,MAAM,UAAU,IAAI,MAAM,OAAO;AACzD,QAAI,CAAC,aAAa;AAChB,aAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrE;AACA,UAAM,oBAAoB;AAC1B,UAAM,kBAAkB,kBAAkB,MAAM,OAAO,KAAK;AAC5D,UAAM,cAAc,MAAM,0BAA0B,IAAI,WAAW;AAAA,MACjE,UAAU,MAAM;AAAA,MAChB,gBAAgB,kBAAkB;AAAA,MAClC,QAAQ;AAAA,MACR,cAAc;AAAA,MACd,YAAY;AAAA,MACZ,WAAW;AAAA,MACX,eAAe,IAAI;AAAA,MACnB,gBAAgB,IAAI;AAAA,MACpB,iBAAiB,OAAO;AAAA,IAC1B,CAAC;AACD,QAAI,eAAe,CAAC,YAAY,IAAI;AAClC,aAAO,aAAa,KAAK,YAAY,MAAM,EAAE,QAAQ,YAAY,OAAO,CAAC;AAAA,IAC3E;AAEA,UAAM,aAAa,IAAI,UAAU,QAAQ,YAAY;AACrD,UAAM,EAAE,QAAQ,SAAS,IAAI,MAAM,WAAW,QAAgF,yCAAyC;AAAA,MACrK,OAAO;AAAA,QACL,UAAU,OAAO,KAAK;AAAA,QACtB,UAAU,MAAM;AAAA,QAChB,YAAY,OAAO,KAAK;AAAA,QACxB,eAAe,OAAO,KAAK;AAAA,MAC7B;AAAA,MACA;AAAA,IACF,CAAC;AAED,QAAI,aAAa,MAAM,YAAY,uBAAuB;AACxD,YAAM,iCAAiC,IAAI,WAAW;AAAA,QACpD,UAAU,MAAM;AAAA,QAChB,gBAAgB,kBAAkB;AAAA,QAClC,QAAQ;AAAA,QACR,cAAc;AAAA,QACd,YAAY,QAAQ,oBAAoB;AAAA,QACxC,WAAW;AAAA,QACX,eAAe,IAAI;AAAA,QACnB,gBAAgB,IAAI;AAAA,QACpB,UAAU,YAAY,YAAY;AAAA,MACpC,CAAC;AAAA,IACH;AAEA,UAAM,WAAW,aAAa,KAAK;AAAA,MACjC,IAAI;AAAA,MACJ,kBAAkB,QAAQ,oBAAoB;AAAA,IAChD,CAAC;AAED,QAAI,UAAU,aAAa,UAAU,MAAM,UAAU,WAAW;AAC9D,eAAS,QAAQ;AAAA,QACf;AAAA,QACA,2BAA2B;AAAA,UACzB,IAAI,SAAS;AAAA,UACb,WAAW,SAAS;AAAA,UACpB,WAAW,SAAS;AAAA,UACpB,aAAa,SAAS,eAAe;AAAA,UACrC,cAAc,SAAS,gBAAgB;AAAA,UACvC,YAAY,SAAS,cAAc,QAAQ,oBAAoB;AAAA,UAC/D,YAAY,SAAS,qBAAqB,OAAO,SAAS,UAAU,YAAY,IAAI;AAAA,QACtF,CAAC;AAAA,MACH;AAAA,IACF;AAEA,WAAO;AAAA,EACT,SAAS,OAAO;AACd,QAAI,gBAAgB,KAAK,GAAG;AAC1B,aAAO,aAAa,KAAK,MAAM,MAAM,EAAE,QAAQ,MAAM,OAAO,CAAC;AAAA,IAC/D;AACA,UAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU;AACzD,QAAI,YAAY,YAAa,QAAO,aAAa,KAAK,EAAE,OAAO,YAAY,GAAG,EAAE,QAAQ,IAAI,CAAC;AAC7F,QAAI,YAAY,mBAAmB,YAAY,uBAAuB,YAAY,qBAAqB;AACrG,aAAO,aAAa,KAAK,EAAE,OAAO,QAAQ,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC9D;AACA,WAAO,MAAM,gCAAgC,EAAE,KAAK,MAAM,CAAC;AAC3D,WAAO,aAAa,KAAK,EAAE,OAAO,4BAA4B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAClF;AACF;AAEA,MAAM,gBAAgB;AAAA,EACpB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,sBAAsB,EAAE;AAAA,EACpE,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,wBAAwB,EAAE;AACxE;AAEO,MAAM,WAAW;AAExB,MAAM,iBAAmC;AAAA,EACvC,SAAS;AAAA,EACT,aAAa;AAAA,EACb,MAAM,CAAC,iBAAiB;AAAA,EACxB,OAAO;AAAA,EACP,WAAW;AAAA,IACT,EAAE,QAAQ,KAAK,aAAa,qBAAqB,QAAQ,wCAAwC;AAAA,EACnG;AAAA,EACA,QAAQ;AAAA,IACN,EAAE,QAAQ,KAAK,aAAa,4BAA4B,QAAQ,yBAAyB;AAAA,IACzF,EAAE,QAAQ,KAAK,aAAa,2BAA2B,QAAQ,yBAAyB;AAAA,EAC1F;AACF;AAEA,MAAM,iBAAmC;AAAA,EACvC,SAAS;AAAA,EACT,aAAa;AAAA,EACb,MAAM,CAAC,iBAAiB;AAAA,EACxB,aAAa;AAAA,IACX,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,aAAa;AAAA,EACf;AAAA,EACA,WAAW;AAAA,IACT,EAAE,QAAQ,KAAK,aAAa,oBAAoB,QAAQ,kCAAkC;AAAA,EAC5F;AAAA,EACA,QAAQ;AAAA,IACN,EAAE,QAAQ,KAAK,aAAa,qBAAqB,QAAQ,yBAAyB;AAAA,IAClF,EAAE,QAAQ,KAAK,aAAa,2BAA2B,QAAQ,yBAAyB;AAAA,IACxF,EAAE,QAAQ,KAAK,aAAa,aAAa,QAAQ,yBAAyB;AAAA,IAC1E,EAAE,QAAQ,KAAK,aAAa,yBAAyB,QAAQ,yBAAyB;AAAA,EACxF;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,IACL,KAAK;AAAA,EACP;AACF;",
   "names": []
 }

package/dist/modules/feature_toggles/lib/feature-flag-check.js

@@ -1,5 +1,7 @@
 import { FeatureToggle, FeatureToggleOverride } from "../data/entities.js";
 import { runWithCacheTenant } from "@open-mercato/cache";
+import { createLogger } from "@open-mercato/shared/lib/logger";
+const logger = createLogger("feature_toggles").child({ component: "flag-check" });
 const toCachedResolution = (value) => {
   if (typeof value !== "object" || value === null) return null;
   const record = value;
@@ -79,7 +81,7 @@ class FeatureTogglesService {
   async getFeatureToggleValue(identifier, ctx) {
     const resolution = await this.resolveToggle(identifier, ctx.tenantId);
     if (resolution.source === "missing") {
-      console.warn(`[feature_toggles] Toggle "${identifier}" not found (missing).`);
+      logger.warn("Toggle not found", { identifier });
       return {
         ok: false,
         error: {
@@ -94,10 +96,7 @@ class FeatureTogglesService {
       };
     }
     if (resolution.valueType !== ctx.valueType) {
-      console.error(
-        `[feature_toggles] Toggle "${identifier}" has type "${resolution.valueType}" but "${ctx.valueType}" was requested.`,
-        { resolution }
-      );
+      logger.error("Toggle type mismatch", { identifier, expectedType: ctx.valueType, actualType: resolution.valueType, resolution });
       return {
         ok: false,
         error: {
@@ -113,10 +112,7 @@ class FeatureTogglesService {
     }
     const isValueValid = ctx.valueType === "boolean" && typeof resolution.value === "boolean" || ctx.valueType === "string" && typeof resolution.value === "string" || ctx.valueType === "number" && typeof resolution.value === "number" || ctx.valueType === "json";
     if (!isValueValid) {
-      console.error(
-        `[feature_toggles] Toggle "${identifier}" has invalid value for type "${resolution.valueType}".`,
-        { resolution }
-      );
+      logger.error("Toggle has invalid value for type", { identifier, valueType: resolution.valueType, resolution });
       return {
         ok: false,
         error: {

package/dist/modules/feature_toggles/lib/feature-flag-check.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/feature_toggles/lib/feature-flag-check.ts"],
-  "sourcesContent": ["import { FeatureToggle, FeatureToggleOverride } from \"../data/entities\"\nimport { EntityManager } from \"@mikro-orm/core\"\nimport { CacheService, runWithCacheTenant } from \"@open-mercato/cache\"\n\ntype ToggleValueType = \"boolean\" | \"string\" | \"number\" | \"json\"\n\ntype ToggleResolutionSource = \"override\" | \"default\" | \"missing\"\n\ntype ToggleResolutionResult = {\n  valueType: ToggleValueType\n  value: boolean | string | number | unknown | null\n  source: ToggleResolutionSource\n  toggleId: string\n  identifier: string\n  tenantId: string\n}\n\ntype ToggleErrorCode = \"TYPE_MISMATCH\" | \"MISSING_TOGGLE\" | \"INVALID_VALUE\"\n\ntype ToggleError = {\n  code: ToggleErrorCode\n  message: string\n  identifier: string\n  expectedType: ToggleValueType\n  actualType?: ToggleValueType\n  source?: ToggleResolutionSource\n}\n\ntype ResultOk<T> = { ok: true; value: T; resolution: ToggleResolutionResult }\ntype ResultErr = { ok: false; error: ToggleError; resolution: ToggleResolutionResult }\nexport type Result<T> = ResultOk<T> | ResultErr\n\ntype ResolutionContext = {\n  tenantId: string\n  valueType: ToggleValueType\n}\n\nconst toCachedResolution = (value: unknown): ToggleResolutionResult | null => {\n  if (typeof value !== \"object\" || value === null) return null\n  const record = value as Partial<ToggleResolutionResult>\n  if (\n    !record.valueType ||\n    typeof record.source !== \"string\" ||\n    !record.toggleId ||\n    !record.identifier ||\n    !record.tenantId\n  )\n    return null\n  return value as ToggleResolutionResult\n}\n\nexport const getIsEnabledCacheKey = (identifier: string, tenantId: string) => {\n  return `feature_toggles:resolution:${identifier}:${tenantId}`\n}\n\nconst getIdentifierTag = (identifier: string) => `feature_toggles:identifier:${identifier}`\nconst getTenantTag = (tenantId: string) => `feature_toggles:tenant:${tenantId}`\n\nconst getCacheTags = (identifier: string, tenantId: string) => {\n  return [getIdentifierTag(identifier), getTenantTag(tenantId)]\n}\n\nexport class FeatureTogglesService {\n  private cacheTtlMs: number = 1 * 60 * 1000 // 1 minute\n  // Resolution cache can be disabled via env (e.g. integration tests that flip\n  // overrides rapidly between cases). The 1-minute TTL is a production\n  // optimization; under fast flag churn it can serve a stale value across\n  // override set/clear despite invalidation, so tests opt out for determinism.\n  private readonly cacheDisabled: boolean =\n    process.env.OM_FEATURE_TOGGLES_CACHE_DISABLED === '1' ||\n    process.env.OM_FEATURE_TOGGLES_CACHE_DISABLED === 'true'\n  constructor(\n    private readonly cache: CacheService,\n    private readonly em: EntityManager\n  ) { }\n\n  private async saveCache(\n    identifier: string,\n    tenantId: string,\n    result: ToggleResolutionResult,\n  ) {\n    if (this.cacheDisabled) return\n    const key = getIsEnabledCacheKey(identifier, tenantId)\n    await runWithCacheTenant(\n      tenantId,\n      () => this.cache.set(key, result, { ttl: this.cacheTtlMs, tags: getCacheTags(identifier, tenantId) }),\n    )\n  }\n\n  private async resolveToggle(identifier: string, tenantId: string): Promise<ToggleResolutionResult> {\n    const key = getIsEnabledCacheKey(identifier, tenantId)\n\n    if (!this.cacheDisabled) {\n      const cached = await runWithCacheTenant(tenantId, () => this.cache.get(key))\n      if (cached) {\n        const parsed = toCachedResolution(cached)\n        if (parsed) return parsed\n      }\n    }\n\n    let toggle: FeatureToggle | null = null\n    toggle = await this.em.findOne(FeatureToggle, { identifier, deletedAt: null })\n\n    if (!toggle) {\n      const result: ToggleResolutionResult = {\n        valueType: \"boolean\",\n        value: null,\n        source: \"missing\",\n        toggleId: \"\",\n        identifier,\n        tenantId,\n      }\n      return result\n    }\n\n    let override: FeatureToggleOverride | null = null\n    override = await this.em.findOne(FeatureToggleOverride, { toggle: toggle.id, tenantId })\n\n\n    const result: ToggleResolutionResult = {\n      valueType: toggle.type,\n      value: override ? override.value : toggle.defaultValue,\n      source: override ? \"override\" : \"default\",\n      toggleId: toggle.id,\n      identifier: toggle.identifier,\n      tenantId,\n    }\n\n    await this.saveCache(identifier, tenantId, result)\n    return result\n  }\n\n  public async invalidateIsEnabledCacheByIdentifierTag(identifier: string) {\n    await this.cache.deleteByTags([getIdentifierTag(identifier)])\n  }\n\n  public async invalidateIsEnabledCacheByKey(identifier: string, tenantId: string) {\n    await runWithCacheTenant(tenantId, () => this.cache.delete(getIsEnabledCacheKey(identifier, tenantId)))\n  }\n\n  public async getFeatureToggleValue<T>(\n    identifier: string,\n    ctx: ResolutionContext\n  ): Promise<Result<T>> {\n    const resolution = await this.resolveToggle(identifier, ctx.tenantId)\n\n    if (resolution.source === \"missing\") {\n      console.warn(`[feature_toggles] Toggle \"${identifier}\" not found (missing).`)\n      return {\n        ok: false,\n        error: {\n          code: \"MISSING_TOGGLE\",\n          message: `Toggle \"${identifier}\" not found (missing).`,\n          identifier,\n          expectedType: ctx.valueType,\n          actualType: resolution.valueType,\n          source: resolution.source,\n        },\n        resolution,\n      }\n    }\n\n\n\n    if (resolution.valueType !== ctx.valueType) {\n      console.error(\n        `[feature_toggles] Toggle \"${identifier}\" has type \"${resolution.valueType}\" but \"${ctx.valueType}\" was requested.`,\n        { resolution }\n      )\n      return {\n        ok: false,\n        error: {\n          code: \"TYPE_MISMATCH\",\n          message: `Toggle \"${identifier}\" has type \"${resolution.valueType}\" but \"${ctx.valueType}\" was requested.`,\n          identifier,\n          expectedType: ctx.valueType,\n          actualType: resolution.valueType,\n          source: resolution.source,\n        },\n        resolution,\n      }\n    }\n\n    const isValueValid =\n      (ctx.valueType === \"boolean\" && typeof resolution.value === \"boolean\") ||\n      (ctx.valueType === \"string\" && typeof resolution.value === \"string\") ||\n      (ctx.valueType === \"number\" && typeof resolution.value === \"number\") ||\n      (ctx.valueType === \"json\")\n\n    if (!isValueValid) {\n      console.error(\n        `[feature_toggles] Toggle \"${identifier}\" has invalid value for type \"${resolution.valueType}\".`,\n        { resolution }\n      )\n      return {\n        ok: false,\n        error: {\n          code: \"INVALID_VALUE\",\n          message: `Toggle \"${identifier}\" has invalid value for type \"${resolution.valueType}\".`,\n          identifier,\n          expectedType: ctx.valueType,\n          actualType: resolution.valueType,\n          source: resolution.source,\n        },\n        resolution,\n      }\n    }\n\n    return {\n      ok: true,\n      value: resolution.value as T,\n      resolution,\n    }\n  }\n\n  public async getBoolConfig(identifier: string, tenantId: string) {\n    return this.getFeatureToggleValue<boolean>(identifier, { tenantId, valueType: \"boolean\" })\n  }\n\n  public async getNumberConfig(identifier: string, tenantId: string) {\n    return this.getFeatureToggleValue<number>(identifier, { tenantId, valueType: \"number\" })\n  }\n\n  public async getStringConfig(identifier: string, tenantId: string) {\n    return this.getFeatureToggleValue<string>(identifier, { tenantId, valueType: \"string\" })\n  }\n\n  public async getJsonConfig<T = unknown>(identifier: string, tenantId: string) {\n    return this.getFeatureToggleValue<T>(identifier, { tenantId, valueType: \"json\" })\n  }\n}\n"],
-  "mappings": "AAAA,SAAS,eAAe,6BAA6B;AAErD,SAAuB,0BAA0B;AAmCjD,MAAM,qBAAqB,CAAC,UAAkD;AAC5E,MAAI,OAAO,UAAU,YAAY,UAAU,KAAM,QAAO;AACxD,QAAM,SAAS;AACf,MACE,CAAC,OAAO,aACR,OAAO,OAAO,WAAW,YACzB,CAAC,OAAO,YACR,CAAC,OAAO,cACR,CAAC,OAAO;AAER,WAAO;AACT,SAAO;AACT;AAEO,MAAM,uBAAuB,CAAC,YAAoB,aAAqB;AAC5E,SAAO,8BAA8B,UAAU,IAAI,QAAQ;AAC7D;AAEA,MAAM,mBAAmB,CAAC,eAAuB,8BAA8B,UAAU;AACzF,MAAM,eAAe,CAAC,aAAqB,0BAA0B,QAAQ;AAE7E,MAAM,eAAe,CAAC,YAAoB,aAAqB;AAC7D,SAAO,CAAC,iBAAiB,UAAU,GAAG,aAAa,QAAQ,CAAC;AAC9D;AAEO,MAAM,sBAAsB;AAAA,EASjC,YACmB,OACA,IACjB;AAFiB;AACA;AAVnB,SAAQ,aAAqB,IAAI,KAAK;AAKtC;AAAA;AAAA;AAAA;AAAA;AAAA,SAAiB,gBACf,QAAQ,IAAI,sCAAsC,OAClD,QAAQ,IAAI,sCAAsC;AAAA,EAIhD;AAAA,EAEJ,MAAc,UACZ,YACA,UACA,QACA;AACA,QAAI,KAAK,cAAe;AACxB,UAAM,MAAM,qBAAqB,YAAY,QAAQ;AACrD,UAAM;AAAA,MACJ;AAAA,MACA,MAAM,KAAK,MAAM,IAAI,KAAK,QAAQ,EAAE,KAAK,KAAK,YAAY,MAAM,aAAa,YAAY,QAAQ,EAAE,CAAC;AAAA,IACtG;AAAA,EACF;AAAA,EAEA,MAAc,cAAc,YAAoB,UAAmD;AACjG,UAAM,MAAM,qBAAqB,YAAY,QAAQ;AAErD,QAAI,CAAC,KAAK,eAAe;AACvB,YAAM,SAAS,MAAM,mBAAmB,UAAU,MAAM,KAAK,MAAM,IAAI,GAAG,CAAC;AAC3E,UAAI,QAAQ;AACV,cAAM,SAAS,mBAAmB,MAAM;AACxC,YAAI,OAAQ,QAAO;AAAA,MACrB;AAAA,IACF;AAEA,QAAI,SAA+B;AACnC,aAAS,MAAM,KAAK,GAAG,QAAQ,eAAe,EAAE,YAAY,WAAW,KAAK,CAAC;AAE7E,QAAI,CAAC,QAAQ;AACX,YAAMA,UAAiC;AAAA,QACrC,WAAW;AAAA,QACX,OAAO;AAAA,QACP,QAAQ;AAAA,QACR,UAAU;AAAA,QACV;AAAA,QACA;AAAA,MACF;AACA,aAAOA;AAAA,IACT;AAEA,QAAI,WAAyC;AAC7C,eAAW,MAAM,KAAK,GAAG,QAAQ,uBAAuB,EAAE,QAAQ,OAAO,IAAI,SAAS,CAAC;AAGvF,UAAM,SAAiC;AAAA,MACrC,WAAW,OAAO;AAAA,MAClB,OAAO,WAAW,SAAS,QAAQ,OAAO;AAAA,MAC1C,QAAQ,WAAW,aAAa;AAAA,MAChC,UAAU,OAAO;AAAA,MACjB,YAAY,OAAO;AAAA,MACnB;AAAA,IACF;AAEA,UAAM,KAAK,UAAU,YAAY,UAAU,MAAM;AACjD,WAAO;AAAA,EACT;AAAA,EAEA,MAAa,wCAAwC,YAAoB;AACvE,UAAM,KAAK,MAAM,aAAa,CAAC,iBAAiB,UAAU,CAAC,CAAC;AAAA,EAC9D;AAAA,EAEA,MAAa,8BAA8B,YAAoB,UAAkB;AAC/E,UAAM,mBAAmB,UAAU,MAAM,KAAK,MAAM,OAAO,qBAAqB,YAAY,QAAQ,CAAC,CAAC;AAAA,EACxG;AAAA,EAEA,MAAa,sBACX,YACA,KACoB;AACpB,UAAM,aAAa,MAAM,KAAK,cAAc,YAAY,IAAI,QAAQ;AAEpE,QAAI,WAAW,WAAW,WAAW;AACnC,cAAQ,KAAK,6BAA6B,UAAU,wBAAwB;AAC5E,aAAO;AAAA,QACL,IAAI;AAAA,QACJ,OAAO;AAAA,UACL,MAAM;AAAA,UACN,SAAS,WAAW,UAAU;AAAA,UAC9B;AAAA,UACA,cAAc,IAAI;AAAA,UAClB,YAAY,WAAW;AAAA,UACvB,QAAQ,WAAW;AAAA,QACrB;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAIA,QAAI,WAAW,cAAc,IAAI,WAAW;AAC1C,cAAQ;AAAA,QACN,6BAA6B,UAAU,eAAe,WAAW,SAAS,UAAU,IAAI,SAAS;AAAA,QACjG,EAAE,WAAW;AAAA,MACf;AACA,aAAO;AAAA,QACL,IAAI;AAAA,QACJ,OAAO;AAAA,UACL,MAAM;AAAA,UACN,SAAS,WAAW,UAAU,eAAe,WAAW,SAAS,UAAU,IAAI,SAAS;AAAA,UACxF;AAAA,UACA,cAAc,IAAI;AAAA,UAClB,YAAY,WAAW;AAAA,UACvB,QAAQ,WAAW;AAAA,QACrB;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,UAAM,eACH,IAAI,cAAc,aAAa,OAAO,WAAW,UAAU,aAC3D,IAAI,cAAc,YAAY,OAAO,WAAW,UAAU,YAC1D,IAAI,cAAc,YAAY,OAAO,WAAW,UAAU,YAC1D,IAAI,cAAc;AAErB,QAAI,CAAC,cAAc;AACjB,cAAQ;AAAA,QACN,6BAA6B,UAAU,iCAAiC,WAAW,SAAS;AAAA,QAC5F,EAAE,WAAW;AAAA,MACf;AACA,aAAO;AAAA,QACL,IAAI;AAAA,QACJ,OAAO;AAAA,UACL,MAAM;AAAA,UACN,SAAS,WAAW,UAAU,iCAAiC,WAAW,SAAS;AAAA,UACnF;AAAA,UACA,cAAc,IAAI;AAAA,UAClB,YAAY,WAAW;AAAA,UACvB,QAAQ,WAAW;AAAA,QACrB;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,WAAO;AAAA,MACL,IAAI;AAAA,MACJ,OAAO,WAAW;AAAA,MAClB;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAa,cAAc,YAAoB,UAAkB;AAC/D,WAAO,KAAK,sBAA+B,YAAY,EAAE,UAAU,WAAW,UAAU,CAAC;AAAA,EAC3F;AAAA,EAEA,MAAa,gBAAgB,YAAoB,UAAkB;AACjE,WAAO,KAAK,sBAA8B,YAAY,EAAE,UAAU,WAAW,SAAS,CAAC;AAAA,EACzF;AAAA,EAEA,MAAa,gBAAgB,YAAoB,UAAkB;AACjE,WAAO,KAAK,sBAA8B,YAAY,EAAE,UAAU,WAAW,SAAS,CAAC;AAAA,EACzF;AAAA,EAEA,MAAa,cAA2B,YAAoB,UAAkB;AAC5E,WAAO,KAAK,sBAAyB,YAAY,EAAE,UAAU,WAAW,OAAO,CAAC;AAAA,EAClF;AACF;",
+  "sourcesContent": ["import { FeatureToggle, FeatureToggleOverride } from \"../data/entities\"\nimport { EntityManager } from \"@mikro-orm/core\"\nimport { CacheService, runWithCacheTenant } from \"@open-mercato/cache\"\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('feature_toggles').child({ component: 'flag-check' })\n\ntype ToggleValueType = \"boolean\" | \"string\" | \"number\" | \"json\"\n\ntype ToggleResolutionSource = \"override\" | \"default\" | \"missing\"\n\ntype ToggleResolutionResult = {\n  valueType: ToggleValueType\n  value: boolean | string | number | unknown | null\n  source: ToggleResolutionSource\n  toggleId: string\n  identifier: string\n  tenantId: string\n}\n\ntype ToggleErrorCode = \"TYPE_MISMATCH\" | \"MISSING_TOGGLE\" | \"INVALID_VALUE\"\n\ntype ToggleError = {\n  code: ToggleErrorCode\n  message: string\n  identifier: string\n  expectedType: ToggleValueType\n  actualType?: ToggleValueType\n  source?: ToggleResolutionSource\n}\n\ntype ResultOk<T> = { ok: true; value: T; resolution: ToggleResolutionResult }\ntype ResultErr = { ok: false; error: ToggleError; resolution: ToggleResolutionResult }\nexport type Result<T> = ResultOk<T> | ResultErr\n\ntype ResolutionContext = {\n  tenantId: string\n  valueType: ToggleValueType\n}\n\nconst toCachedResolution = (value: unknown): ToggleResolutionResult | null => {\n  if (typeof value !== \"object\" || value === null) return null\n  const record = value as Partial<ToggleResolutionResult>\n  if (\n    !record.valueType ||\n    typeof record.source !== \"string\" ||\n    !record.toggleId ||\n    !record.identifier ||\n    !record.tenantId\n  )\n    return null\n  return value as ToggleResolutionResult\n}\n\nexport const getIsEnabledCacheKey = (identifier: string, tenantId: string) => {\n  return `feature_toggles:resolution:${identifier}:${tenantId}`\n}\n\nconst getIdentifierTag = (identifier: string) => `feature_toggles:identifier:${identifier}`\nconst getTenantTag = (tenantId: string) => `feature_toggles:tenant:${tenantId}`\n\nconst getCacheTags = (identifier: string, tenantId: string) => {\n  return [getIdentifierTag(identifier), getTenantTag(tenantId)]\n}\n\nexport class FeatureTogglesService {\n  private cacheTtlMs: number = 1 * 60 * 1000 // 1 minute\n  // Resolution cache can be disabled via env (e.g. integration tests that flip\n  // overrides rapidly between cases). The 1-minute TTL is a production\n  // optimization; under fast flag churn it can serve a stale value across\n  // override set/clear despite invalidation, so tests opt out for determinism.\n  private readonly cacheDisabled: boolean =\n    process.env.OM_FEATURE_TOGGLES_CACHE_DISABLED === '1' ||\n    process.env.OM_FEATURE_TOGGLES_CACHE_DISABLED === 'true'\n  constructor(\n    private readonly cache: CacheService,\n    private readonly em: EntityManager\n  ) { }\n\n  private async saveCache(\n    identifier: string,\n    tenantId: string,\n    result: ToggleResolutionResult,\n  ) {\n    if (this.cacheDisabled) return\n    const key = getIsEnabledCacheKey(identifier, tenantId)\n    await runWithCacheTenant(\n      tenantId,\n      () => this.cache.set(key, result, { ttl: this.cacheTtlMs, tags: getCacheTags(identifier, tenantId) }),\n    )\n  }\n\n  private async resolveToggle(identifier: string, tenantId: string): Promise<ToggleResolutionResult> {\n    const key = getIsEnabledCacheKey(identifier, tenantId)\n\n    if (!this.cacheDisabled) {\n      const cached = await runWithCacheTenant(tenantId, () => this.cache.get(key))\n      if (cached) {\n        const parsed = toCachedResolution(cached)\n        if (parsed) return parsed\n      }\n    }\n\n    let toggle: FeatureToggle | null = null\n    toggle = await this.em.findOne(FeatureToggle, { identifier, deletedAt: null })\n\n    if (!toggle) {\n      const result: ToggleResolutionResult = {\n        valueType: \"boolean\",\n        value: null,\n        source: \"missing\",\n        toggleId: \"\",\n        identifier,\n        tenantId,\n      }\n      return result\n    }\n\n    let override: FeatureToggleOverride | null = null\n    override = await this.em.findOne(FeatureToggleOverride, { toggle: toggle.id, tenantId })\n\n\n    const result: ToggleResolutionResult = {\n      valueType: toggle.type,\n      value: override ? override.value : toggle.defaultValue,\n      source: override ? \"override\" : \"default\",\n      toggleId: toggle.id,\n      identifier: toggle.identifier,\n      tenantId,\n    }\n\n    await this.saveCache(identifier, tenantId, result)\n    return result\n  }\n\n  public async invalidateIsEnabledCacheByIdentifierTag(identifier: string) {\n    await this.cache.deleteByTags([getIdentifierTag(identifier)])\n  }\n\n  public async invalidateIsEnabledCacheByKey(identifier: string, tenantId: string) {\n    await runWithCacheTenant(tenantId, () => this.cache.delete(getIsEnabledCacheKey(identifier, tenantId)))\n  }\n\n  public async getFeatureToggleValue<T>(\n    identifier: string,\n    ctx: ResolutionContext\n  ): Promise<Result<T>> {\n    const resolution = await this.resolveToggle(identifier, ctx.tenantId)\n\n    if (resolution.source === \"missing\") {\n      logger.warn('Toggle not found', { identifier })\n      return {\n        ok: false,\n        error: {\n          code: \"MISSING_TOGGLE\",\n          message: `Toggle \"${identifier}\" not found (missing).`,\n          identifier,\n          expectedType: ctx.valueType,\n          actualType: resolution.valueType,\n          source: resolution.source,\n        },\n        resolution,\n      }\n    }\n\n\n\n    if (resolution.valueType !== ctx.valueType) {\n      logger.error('Toggle type mismatch', { identifier, expectedType: ctx.valueType, actualType: resolution.valueType, resolution })\n      return {\n        ok: false,\n        error: {\n          code: \"TYPE_MISMATCH\",\n          message: `Toggle \"${identifier}\" has type \"${resolution.valueType}\" but \"${ctx.valueType}\" was requested.`,\n          identifier,\n          expectedType: ctx.valueType,\n          actualType: resolution.valueType,\n          source: resolution.source,\n        },\n        resolution,\n      }\n    }\n\n    const isValueValid =\n      (ctx.valueType === \"boolean\" && typeof resolution.value === \"boolean\") ||\n      (ctx.valueType === \"string\" && typeof resolution.value === \"string\") ||\n      (ctx.valueType === \"number\" && typeof resolution.value === \"number\") ||\n      (ctx.valueType === \"json\")\n\n    if (!isValueValid) {\n      logger.error('Toggle has invalid value for type', { identifier, valueType: resolution.valueType, resolution })\n      return {\n        ok: false,\n        error: {\n          code: \"INVALID_VALUE\",\n          message: `Toggle \"${identifier}\" has invalid value for type \"${resolution.valueType}\".`,\n          identifier,\n          expectedType: ctx.valueType,\n          actualType: resolution.valueType,\n          source: resolution.source,\n        },\n        resolution,\n      }\n    }\n\n    return {\n      ok: true,\n      value: resolution.value as T,\n      resolution,\n    }\n  }\n\n  public async getBoolConfig(identifier: string, tenantId: string) {\n    return this.getFeatureToggleValue<boolean>(identifier, { tenantId, valueType: \"boolean\" })\n  }\n\n  public async getNumberConfig(identifier: string, tenantId: string) {\n    return this.getFeatureToggleValue<number>(identifier, { tenantId, valueType: \"number\" })\n  }\n\n  public async getStringConfig(identifier: string, tenantId: string) {\n    return this.getFeatureToggleValue<string>(identifier, { tenantId, valueType: \"string\" })\n  }\n\n  public async getJsonConfig<T = unknown>(identifier: string, tenantId: string) {\n    return this.getFeatureToggleValue<T>(identifier, { tenantId, valueType: \"json\" })\n  }\n}\n"],
+  "mappings": "AAAA,SAAS,eAAe,6BAA6B;AAErD,SAAuB,0BAA0B;AACjD,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,iBAAiB,EAAE,MAAM,EAAE,WAAW,aAAa,CAAC;AAmChF,MAAM,qBAAqB,CAAC,UAAkD;AAC5E,MAAI,OAAO,UAAU,YAAY,UAAU,KAAM,QAAO;AACxD,QAAM,SAAS;AACf,MACE,CAAC,OAAO,aACR,OAAO,OAAO,WAAW,YACzB,CAAC,OAAO,YACR,CAAC,OAAO,cACR,CAAC,OAAO;AAER,WAAO;AACT,SAAO;AACT;AAEO,MAAM,uBAAuB,CAAC,YAAoB,aAAqB;AAC5E,SAAO,8BAA8B,UAAU,IAAI,QAAQ;AAC7D;AAEA,MAAM,mBAAmB,CAAC,eAAuB,8BAA8B,UAAU;AACzF,MAAM,eAAe,CAAC,aAAqB,0BAA0B,QAAQ;AAE7E,MAAM,eAAe,CAAC,YAAoB,aAAqB;AAC7D,SAAO,CAAC,iBAAiB,UAAU,GAAG,aAAa,QAAQ,CAAC;AAC9D;AAEO,MAAM,sBAAsB;AAAA,EASjC,YACmB,OACA,IACjB;AAFiB;AACA;AAVnB,SAAQ,aAAqB,IAAI,KAAK;AAKtC;AAAA;AAAA;AAAA;AAAA;AAAA,SAAiB,gBACf,QAAQ,IAAI,sCAAsC,OAClD,QAAQ,IAAI,sCAAsC;AAAA,EAIhD;AAAA,EAEJ,MAAc,UACZ,YACA,UACA,QACA;AACA,QAAI,KAAK,cAAe;AACxB,UAAM,MAAM,qBAAqB,YAAY,QAAQ;AACrD,UAAM;AAAA,MACJ;AAAA,MACA,MAAM,KAAK,MAAM,IAAI,KAAK,QAAQ,EAAE,KAAK,KAAK,YAAY,MAAM,aAAa,YAAY,QAAQ,EAAE,CAAC;AAAA,IACtG;AAAA,EACF;AAAA,EAEA,MAAc,cAAc,YAAoB,UAAmD;AACjG,UAAM,MAAM,qBAAqB,YAAY,QAAQ;AAErD,QAAI,CAAC,KAAK,eAAe;AACvB,YAAM,SAAS,MAAM,mBAAmB,UAAU,MAAM,KAAK,MAAM,IAAI,GAAG,CAAC;AAC3E,UAAI,QAAQ;AACV,cAAM,SAAS,mBAAmB,MAAM;AACxC,YAAI,OAAQ,QAAO;AAAA,MACrB;AAAA,IACF;AAEA,QAAI,SAA+B;AACnC,aAAS,MAAM,KAAK,GAAG,QAAQ,eAAe,EAAE,YAAY,WAAW,KAAK,CAAC;AAE7E,QAAI,CAAC,QAAQ;AACX,YAAMA,UAAiC;AAAA,QACrC,WAAW;AAAA,QACX,OAAO;AAAA,QACP,QAAQ;AAAA,QACR,UAAU;AAAA,QACV;AAAA,QACA;AAAA,MACF;AACA,aAAOA;AAAA,IACT;AAEA,QAAI,WAAyC;AAC7C,eAAW,MAAM,KAAK,GAAG,QAAQ,uBAAuB,EAAE,QAAQ,OAAO,IAAI,SAAS,CAAC;AAGvF,UAAM,SAAiC;AAAA,MACrC,WAAW,OAAO;AAAA,MAClB,OAAO,WAAW,SAAS,QAAQ,OAAO;AAAA,MAC1C,QAAQ,WAAW,aAAa;AAAA,MAChC,UAAU,OAAO;AAAA,MACjB,YAAY,OAAO;AAAA,MACnB;AAAA,IACF;AAEA,UAAM,KAAK,UAAU,YAAY,UAAU,MAAM;AACjD,WAAO;AAAA,EACT;AAAA,EAEA,MAAa,wCAAwC,YAAoB;AACvE,UAAM,KAAK,MAAM,aAAa,CAAC,iBAAiB,UAAU,CAAC,CAAC;AAAA,EAC9D;AAAA,EAEA,MAAa,8BAA8B,YAAoB,UAAkB;AAC/E,UAAM,mBAAmB,UAAU,MAAM,KAAK,MAAM,OAAO,qBAAqB,YAAY,QAAQ,CAAC,CAAC;AAAA,EACxG;AAAA,EAEA,MAAa,sBACX,YACA,KACoB;AACpB,UAAM,aAAa,MAAM,KAAK,cAAc,YAAY,IAAI,QAAQ;AAEpE,QAAI,WAAW,WAAW,WAAW;AACnC,aAAO,KAAK,oBAAoB,EAAE,WAAW,CAAC;AAC9C,aAAO;AAAA,QACL,IAAI;AAAA,QACJ,OAAO;AAAA,UACL,MAAM;AAAA,UACN,SAAS,WAAW,UAAU;AAAA,UAC9B;AAAA,UACA,cAAc,IAAI;AAAA,UAClB,YAAY,WAAW;AAAA,UACvB,QAAQ,WAAW;AAAA,QACrB;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAIA,QAAI,WAAW,cAAc,IAAI,WAAW;AAC1C,aAAO,MAAM,wBAAwB,EAAE,YAAY,cAAc,IAAI,WAAW,YAAY,WAAW,WAAW,WAAW,CAAC;AAC9H,aAAO;AAAA,QACL,IAAI;AAAA,QACJ,OAAO;AAAA,UACL,MAAM;AAAA,UACN,SAAS,WAAW,UAAU,eAAe,WAAW,SAAS,UAAU,IAAI,SAAS;AAAA,UACxF;AAAA,UACA,cAAc,IAAI;AAAA,UAClB,YAAY,WAAW;AAAA,UACvB,QAAQ,WAAW;AAAA,QACrB;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,UAAM,eACH,IAAI,cAAc,aAAa,OAAO,WAAW,UAAU,aAC3D,IAAI,cAAc,YAAY,OAAO,WAAW,UAAU,YAC1D,IAAI,cAAc,YAAY,OAAO,WAAW,UAAU,YAC1D,IAAI,cAAc;AAErB,QAAI,CAAC,cAAc;AACjB,aAAO,MAAM,qCAAqC,EAAE,YAAY,WAAW,WAAW,WAAW,WAAW,CAAC;AAC7G,aAAO;AAAA,QACL,IAAI;AAAA,QACJ,OAAO;AAAA,UACL,MAAM;AAAA,UACN,SAAS,WAAW,UAAU,iCAAiC,WAAW,SAAS;AAAA,UACnF;AAAA,UACA,cAAc,IAAI;AAAA,UAClB,YAAY,WAAW;AAAA,UACvB,QAAQ,WAAW;AAAA,QACrB;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,WAAO;AAAA,MACL,IAAI;AAAA,MACJ,OAAO,WAAW;AAAA,MAClB;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAa,cAAc,YAAoB,UAAkB;AAC/D,WAAO,KAAK,sBAA+B,YAAY,EAAE,UAAU,WAAW,UAAU,CAAC;AAAA,EAC3F;AAAA,EAEA,MAAa,gBAAgB,YAAoB,UAAkB;AACjE,WAAO,KAAK,sBAA8B,YAAY,EAAE,UAAU,WAAW,SAAS,CAAC;AAAA,EACzF;AAAA,EAEA,MAAa,gBAAgB,YAAoB,UAAkB;AACjE,WAAO,KAAK,sBAA8B,YAAY,EAAE,UAAU,WAAW,SAAS,CAAC;AAAA,EACzF;AAAA,EAEA,MAAa,cAA2B,YAAoB,UAAkB;AAC5E,WAAO,KAAK,sBAAyB,YAAY,EAAE,UAAU,WAAW,OAAO,CAAC;AAAA,EAClF;AACF;",
   "names": ["result"]
 }

package/dist/modules/inbox_ops/api/emails/[id]/reprocess/route.js

@@ -8,6 +8,8 @@ import {
   extractPathSegment,
   UnauthorizedError
 } from "../../../routeHelpers.js";
+import { createLogger } from "@open-mercato/shared/lib/logger";
+const logger = createLogger("inbox_ops").child({ component: "email-reprocess" });
 const metadata = {
   POST: { requireAuth: true, requireFeatures: ["inbox_ops.proposals.manage"] }
 };
@@ -63,7 +65,7 @@ async function POST(req) {
         subject: email.subject
       });
     } catch (eventError) {
-      console.error("[inbox_ops:email:reprocess] Failed to emit events:", eventError);
+      logger.error("Failed to emit events", { err: eventError });
     }
     return NextResponse.json({ ok: true, ...retiredCounts });
   } catch (err) {
@@ -73,7 +75,7 @@ async function POST(req) {
     if (err instanceof ReprocessConflictError) {
       return NextResponse.json({ error: err.message }, { status: 409 });
     }
-    console.error("[inbox_ops:email:reprocess] Error:", err);
+    logger.error("Reprocess failed", { err });
     return NextResponse.json({ error: "Failed to reprocess email" }, { status: 500 });
   }
 }

package/dist/modules/inbox_ops/api/emails/[id]/reprocess/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../../src/modules/inbox_ops/api/emails/%5Bid%5D/reprocess/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { findOneWithDecryption, findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { withAtomicFlush } from '@open-mercato/shared/lib/commands/flush'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { InboxDiscrepancy, InboxEmail, InboxProposal, InboxProposalAction } from '../../../../data/entities'\nimport { emitInboxOpsEvent } from '../../../../events'\nimport {\n  resolveRequestContext,\n  extractPathSegment,\n  UnauthorizedError,\n} from '../../../routeHelpers'\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: ['inbox_ops.proposals.manage'] },\n}\n\nclass ReprocessConflictError extends Error {}\n\nexport async function POST(req: Request) {\n  try {\n    const url = new URL(req.url)\n    const id = extractPathSegment(url, 'emails')\n\n    if (!id) {\n      return NextResponse.json({ error: 'Missing email ID' }, { status: 400 })\n    }\n\n    const ctx = await resolveRequestContext(req)\n\n    const email = await findOneWithDecryption(\n      ctx.em,\n      InboxEmail,\n      {\n        id,\n        organizationId: ctx.organizationId,\n        tenantId: ctx.tenantId,\n        deletedAt: null,\n      },\n      undefined,\n      ctx.scope,\n    )\n\n    if (!email) {\n      return NextResponse.json({ error: 'Email not found' }, { status: 404 })\n    }\n\n    if (email.status === 'received' || email.status === 'processing') {\n      return NextResponse.json({ error: 'Email is already queued for processing' }, { status: 409 })\n    }\n\n    let retiredCounts = { retiredProposalCount: 0, retiredActionCount: 0 }\n    await withAtomicFlush(ctx.em, [\n      async () => {\n        retiredCounts = await retireActiveProposalsForEmail(ctx.em, email.id, ctx.userId, ctx.scope)\n      },\n      () => {\n        email.status = 'received'\n        email.processingError = null\n      },\n    ], { transaction: true })\n\n    try {\n      await emitInboxOpsEvent('inbox_ops.email.reprocessed', {\n        emailId: email.id,\n        tenantId: email.tenantId,\n        organizationId: email.organizationId,\n      })\n      await emitInboxOpsEvent('inbox_ops.email.received', {\n        emailId: email.id,\n        tenantId: email.tenantId,\n        organizationId: email.organizationId,\n        forwardedByAddress: email.forwardedByAddress,\n        subject: email.subject,\n      })\n    } catch (eventError) {\n      console.error('[inbox_ops:email:reprocess] Failed to emit events:', eventError)\n    }\n\n    return NextResponse.json({ ok: true, ...retiredCounts })\n  } catch (err) {\n    if (err instanceof UnauthorizedError) {\n      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n    }\n    if (err instanceof ReprocessConflictError) {\n      return NextResponse.json({ error: err.message }, { status: 409 })\n    }\n\n    console.error('[inbox_ops:email:reprocess] Error:', err)\n    return NextResponse.json({ error: 'Failed to reprocess email' }, { status: 500 })\n  }\n}\n\nasync function retireActiveProposalsForEmail(\n  em: EntityManager,\n  emailId: string,\n  userId: string,\n  scope: { tenantId: string; organizationId: string },\n): Promise<{ retiredProposalCount: number; retiredActionCount: number }> {\n  const proposals = await findWithDecryption(\n    em,\n    InboxProposal,\n    {\n      inboxEmailId: emailId,\n      isActive: true,\n      deletedAt: null,\n    },\n    undefined,\n    scope,\n  )\n\n  if (proposals.length === 0) {\n    return { retiredProposalCount: 0, retiredActionCount: 0 }\n  }\n\n  const proposalIds = proposals.map((proposal) => proposal.id)\n  const actions = await findWithDecryption(\n    em,\n    InboxProposalAction,\n    {\n      proposalId: { $in: proposalIds },\n      deletedAt: null,\n    },\n    undefined,\n    scope,\n  )\n\n  if (actions.some((action) => action.status === 'accepted' || action.status === 'executed' || action.status === 'processing')) {\n    throw new ReprocessConflictError('Cannot reprocess after actions were already executed. Open the latest proposal instead.')\n  }\n\n  // Resolve every read before mutating: a query issued between a scalar\n  // mutation and the flush can silently reset the Unit of Work (SPEC-018\n  // Problem 1). withAtomicFlush flushes once at the end, so ordering is ours.\n  const discrepancies = await findWithDecryption(\n    em,\n    InboxDiscrepancy,\n    {\n      proposalId: { $in: proposalIds },\n      resolved: false,\n      deletedAt: null,\n    },\n    undefined,\n    scope,\n  )\n\n  const now = new Date()\n  const supersededAt = now.toISOString()\n  for (const proposal of proposals) {\n    const previousMetadata = proposal.metadata && typeof proposal.metadata === 'object'\n      ? proposal.metadata\n      : {}\n    proposal.isActive = false\n    proposal.status = proposal.status === 'accepted' ? proposal.status : 'rejected'\n    proposal.reviewedAt = now\n    proposal.reviewedByUserId = userId\n    proposal.metadata = {\n      ...previousMetadata,\n      supersededAt,\n      supersededByUserId: userId,\n      supersededReason: 'email_reprocessed',\n    }\n  }\n\n  let retiredActionCount = 0\n  for (const action of actions) {\n    if (action.status !== 'pending' && action.status !== 'failed') {\n      continue\n    }\n    action.status = 'rejected'\n    action.executedAt = now\n    action.executedByUserId = userId\n    action.executionError = action.executionError || 'Superseded by email reprocess'\n    retiredActionCount += 1\n  }\n\n  for (const discrepancy of discrepancies) {\n    discrepancy.resolved = true\n  }\n\n  return {\n    retiredProposalCount: proposals.length,\n    retiredActionCount,\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'InboxOps',\n  summary: 'Reprocess email',\n  methods: {\n    POST: {\n      summary: 'Re-trigger LLM extraction on a failed or low-confidence email',\n      responses: [\n        { status: 200, description: 'Email queued for reprocessing' },\n        { status: 404, description: 'Email not found' },\n        { status: 409, description: 'Email is already processing or proposal cannot be superseded safely' },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAE7B,SAAS,uBAAuB,0BAA0B;AAC1D,SAAS,uBAAuB;AAEhC,SAAS,kBAAkB,YAAY,eAAe,2BAA2B;AACjF,SAAS,yBAAyB;AAClC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEA,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,4BAA4B,EAAE;AAC7E;AAEA,MAAM,+BAA+B,MAAM;AAAC;AAE5C,eAAsB,KAAK,KAAc;AACvC,MAAI;AACF,UAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,UAAM,KAAK,mBAAmB,KAAK,QAAQ;AAE3C,QAAI,CAAC,IAAI;AACP,aAAO,aAAa,KAAK,EAAE,OAAO,mBAAmB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACzE;AAEA,UAAM,MAAM,MAAM,sBAAsB,GAAG;AAE3C,UAAM,QAAQ,MAAM;AAAA,MAClB,IAAI;AAAA,MACJ;AAAA,MACA;AAAA,QACE;AAAA,QACA,gBAAgB,IAAI;AAAA,QACpB,UAAU,IAAI;AAAA,QACd,WAAW;AAAA,MACb;AAAA,MACA;AAAA,MACA,IAAI;AAAA,IACN;AAEA,QAAI,CAAC,OAAO;AACV,aAAO,aAAa,KAAK,EAAE,OAAO,kBAAkB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACxE;AAEA,QAAI,MAAM,WAAW,cAAc,MAAM,WAAW,cAAc;AAChE,aAAO,aAAa,KAAK,EAAE,OAAO,yCAAyC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC/F;AAEA,QAAI,gBAAgB,EAAE,sBAAsB,GAAG,oBAAoB,EAAE;AACrE,UAAM,gBAAgB,IAAI,IAAI;AAAA,MAC5B,YAAY;AACV,wBAAgB,MAAM,8BAA8B,IAAI,IAAI,MAAM,IAAI,IAAI,QAAQ,IAAI,KAAK;AAAA,MAC7F;AAAA,MACA,MAAM;AACJ,cAAM,SAAS;AACf,cAAM,kBAAkB;AAAA,MAC1B;AAAA,IACF,GAAG,EAAE,aAAa,KAAK,CAAC;AAExB,QAAI;AACF,YAAM,kBAAkB,+BAA+B;AAAA,QACrD,SAAS,MAAM;AAAA,QACf,UAAU,MAAM;AAAA,QAChB,gBAAgB,MAAM;AAAA,MACxB,CAAC;AACD,YAAM,kBAAkB,4BAA4B;AAAA,QAClD,SAAS,MAAM;AAAA,QACf,UAAU,MAAM;AAAA,QAChB,gBAAgB,MAAM;AAAA,QACtB,oBAAoB,MAAM;AAAA,QAC1B,SAAS,MAAM;AAAA,MACjB,CAAC;AAAA,IACH,SAAS,YAAY;AACnB,cAAQ,MAAM,sDAAsD,UAAU;AAAA,IAChF;AAEA,WAAO,aAAa,KAAK,EAAE,IAAI,MAAM,GAAG,cAAc,CAAC;AAAA,EACzD,SAAS,KAAK;AACZ,QAAI,eAAe,mBAAmB;AACpC,aAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrE;AACA,QAAI,eAAe,wBAAwB;AACzC,aAAO,aAAa,KAAK,EAAE,OAAO,IAAI,QAAQ,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAClE;AAEA,YAAQ,MAAM,sCAAsC,GAAG;AACvD,WAAO,aAAa,KAAK,EAAE,OAAO,4BAA4B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAClF;AACF;AAEA,eAAe,8BACb,IACA,SACA,QACA,OACuE;AACvE,QAAM,YAAY,MAAM;AAAA,IACtB;AAAA,IACA;AAAA,IACA;AAAA,MACE,cAAc;AAAA,MACd,UAAU;AAAA,MACV,WAAW;AAAA,IACb;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAEA,MAAI,UAAU,WAAW,GAAG;AAC1B,WAAO,EAAE,sBAAsB,GAAG,oBAAoB,EAAE;AAAA,EAC1D;AAEA,QAAM,cAAc,UAAU,IAAI,CAAC,aAAa,SAAS,EAAE;AAC3D,QAAM,UAAU,MAAM;AAAA,IACpB;AAAA,IACA;AAAA,IACA;AAAA,MACE,YAAY,EAAE,KAAK,YAAY;AAAA,MAC/B,WAAW;AAAA,IACb;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAEA,MAAI,QAAQ,KAAK,CAAC,WAAW,OAAO,WAAW,cAAc,OAAO,WAAW,cAAc,OAAO,WAAW,YAAY,GAAG;AAC5H,UAAM,IAAI,uBAAuB,yFAAyF;AAAA,EAC5H;AAKA,QAAM,gBAAgB,MAAM;AAAA,IAC1B;AAAA,IACA;AAAA,IACA;AAAA,MACE,YAAY,EAAE,KAAK,YAAY;AAAA,MAC/B,UAAU;AAAA,MACV,WAAW;AAAA,IACb;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAEA,QAAM,MAAM,oBAAI,KAAK;AACrB,QAAM,eAAe,IAAI,YAAY;AACrC,aAAW,YAAY,WAAW;AAChC,UAAM,mBAAmB,SAAS,YAAY,OAAO,SAAS,aAAa,WACvE,SAAS,WACT,CAAC;AACL,aAAS,WAAW;AACpB,aAAS,SAAS,SAAS,WAAW,aAAa,SAAS,SAAS;AACrE,aAAS,aAAa;AACtB,aAAS,mBAAmB;AAC5B,aAAS,WAAW;AAAA,MAClB,GAAG;AAAA,MACH;AAAA,MACA,oBAAoB;AAAA,MACpB,kBAAkB;AAAA,IACpB;AAAA,EACF;AAEA,MAAI,qBAAqB;AACzB,aAAW,UAAU,SAAS;AAC5B,QAAI,OAAO,WAAW,aAAa,OAAO,WAAW,UAAU;AAC7D;AAAA,IACF;AACA,WAAO,SAAS;AAChB,WAAO,aAAa;AACpB,WAAO,mBAAmB;AAC1B,WAAO,iBAAiB,OAAO,kBAAkB;AACjD,0BAAsB;AAAA,EACxB;AAEA,aAAW,eAAe,eAAe;AACvC,gBAAY,WAAW;AAAA,EACzB;AAEA,SAAO;AAAA,IACL,sBAAsB,UAAU;AAAA,IAChC;AAAA,EACF;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,gCAAgC;AAAA,QAC5D,EAAE,QAAQ,KAAK,aAAa,kBAAkB;AAAA,QAC9C,EAAE,QAAQ,KAAK,aAAa,sEAAsE;AAAA,MACpG;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { findOneWithDecryption, findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { withAtomicFlush } from '@open-mercato/shared/lib/commands/flush'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { InboxDiscrepancy, InboxEmail, InboxProposal, InboxProposalAction } from '../../../../data/entities'\nimport { emitInboxOpsEvent } from '../../../../events'\nimport {\n  resolveRequestContext,\n  extractPathSegment,\n  UnauthorizedError,\n} from '../../../routeHelpers'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('inbox_ops').child({ component: 'email-reprocess' })\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: ['inbox_ops.proposals.manage'] },\n}\n\nclass ReprocessConflictError extends Error {}\n\nexport async function POST(req: Request) {\n  try {\n    const url = new URL(req.url)\n    const id = extractPathSegment(url, 'emails')\n\n    if (!id) {\n      return NextResponse.json({ error: 'Missing email ID' }, { status: 400 })\n    }\n\n    const ctx = await resolveRequestContext(req)\n\n    const email = await findOneWithDecryption(\n      ctx.em,\n      InboxEmail,\n      {\n        id,\n        organizationId: ctx.organizationId,\n        tenantId: ctx.tenantId,\n        deletedAt: null,\n      },\n      undefined,\n      ctx.scope,\n    )\n\n    if (!email) {\n      return NextResponse.json({ error: 'Email not found' }, { status: 404 })\n    }\n\n    if (email.status === 'received' || email.status === 'processing') {\n      return NextResponse.json({ error: 'Email is already queued for processing' }, { status: 409 })\n    }\n\n    let retiredCounts = { retiredProposalCount: 0, retiredActionCount: 0 }\n    await withAtomicFlush(ctx.em, [\n      async () => {\n        retiredCounts = await retireActiveProposalsForEmail(ctx.em, email.id, ctx.userId, ctx.scope)\n      },\n      () => {\n        email.status = 'received'\n        email.processingError = null\n      },\n    ], { transaction: true })\n\n    try {\n      await emitInboxOpsEvent('inbox_ops.email.reprocessed', {\n        emailId: email.id,\n        tenantId: email.tenantId,\n        organizationId: email.organizationId,\n      })\n      await emitInboxOpsEvent('inbox_ops.email.received', {\n        emailId: email.id,\n        tenantId: email.tenantId,\n        organizationId: email.organizationId,\n        forwardedByAddress: email.forwardedByAddress,\n        subject: email.subject,\n      })\n    } catch (eventError) {\n      logger.error('Failed to emit events', { err: eventError })\n    }\n\n    return NextResponse.json({ ok: true, ...retiredCounts })\n  } catch (err) {\n    if (err instanceof UnauthorizedError) {\n      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n    }\n    if (err instanceof ReprocessConflictError) {\n      return NextResponse.json({ error: err.message }, { status: 409 })\n    }\n\n    logger.error('Reprocess failed', { err })\n    return NextResponse.json({ error: 'Failed to reprocess email' }, { status: 500 })\n  }\n}\n\nasync function retireActiveProposalsForEmail(\n  em: EntityManager,\n  emailId: string,\n  userId: string,\n  scope: { tenantId: string; organizationId: string },\n): Promise<{ retiredProposalCount: number; retiredActionCount: number }> {\n  const proposals = await findWithDecryption(\n    em,\n    InboxProposal,\n    {\n      inboxEmailId: emailId,\n      isActive: true,\n      deletedAt: null,\n    },\n    undefined,\n    scope,\n  )\n\n  if (proposals.length === 0) {\n    return { retiredProposalCount: 0, retiredActionCount: 0 }\n  }\n\n  const proposalIds = proposals.map((proposal) => proposal.id)\n  const actions = await findWithDecryption(\n    em,\n    InboxProposalAction,\n    {\n      proposalId: { $in: proposalIds },\n      deletedAt: null,\n    },\n    undefined,\n    scope,\n  )\n\n  if (actions.some((action) => action.status === 'accepted' || action.status === 'executed' || action.status === 'processing')) {\n    throw new ReprocessConflictError('Cannot reprocess after actions were already executed. Open the latest proposal instead.')\n  }\n\n  // Resolve every read before mutating: a query issued between a scalar\n  // mutation and the flush can silently reset the Unit of Work (SPEC-018\n  // Problem 1). withAtomicFlush flushes once at the end, so ordering is ours.\n  const discrepancies = await findWithDecryption(\n    em,\n    InboxDiscrepancy,\n    {\n      proposalId: { $in: proposalIds },\n      resolved: false,\n      deletedAt: null,\n    },\n    undefined,\n    scope,\n  )\n\n  const now = new Date()\n  const supersededAt = now.toISOString()\n  for (const proposal of proposals) {\n    const previousMetadata = proposal.metadata && typeof proposal.metadata === 'object'\n      ? proposal.metadata\n      : {}\n    proposal.isActive = false\n    proposal.status = proposal.status === 'accepted' ? proposal.status : 'rejected'\n    proposal.reviewedAt = now\n    proposal.reviewedByUserId = userId\n    proposal.metadata = {\n      ...previousMetadata,\n      supersededAt,\n      supersededByUserId: userId,\n      supersededReason: 'email_reprocessed',\n    }\n  }\n\n  let retiredActionCount = 0\n  for (const action of actions) {\n    if (action.status !== 'pending' && action.status !== 'failed') {\n      continue\n    }\n    action.status = 'rejected'\n    action.executedAt = now\n    action.executedByUserId = userId\n    action.executionError = action.executionError || 'Superseded by email reprocess'\n    retiredActionCount += 1\n  }\n\n  for (const discrepancy of discrepancies) {\n    discrepancy.resolved = true\n  }\n\n  return {\n    retiredProposalCount: proposals.length,\n    retiredActionCount,\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'InboxOps',\n  summary: 'Reprocess email',\n  methods: {\n    POST: {\n      summary: 'Re-trigger LLM extraction on a failed or low-confidence email',\n      responses: [\n        { status: 200, description: 'Email queued for reprocessing' },\n        { status: 404, description: 'Email not found' },\n        { status: 409, description: 'Email is already processing or proposal cannot be superseded safely' },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAE7B,SAAS,uBAAuB,0BAA0B;AAC1D,SAAS,uBAAuB;AAEhC,SAAS,kBAAkB,YAAY,eAAe,2BAA2B;AACjF,SAAS,yBAAyB;AAClC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,WAAW,EAAE,MAAM,EAAE,WAAW,kBAAkB,CAAC;AAExE,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,4BAA4B,EAAE;AAC7E;AAEA,MAAM,+BAA+B,MAAM;AAAC;AAE5C,eAAsB,KAAK,KAAc;AACvC,MAAI;AACF,UAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,UAAM,KAAK,mBAAmB,KAAK,QAAQ;AAE3C,QAAI,CAAC,IAAI;AACP,aAAO,aAAa,KAAK,EAAE,OAAO,mBAAmB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACzE;AAEA,UAAM,MAAM,MAAM,sBAAsB,GAAG;AAE3C,UAAM,QAAQ,MAAM;AAAA,MAClB,IAAI;AAAA,MACJ;AAAA,MACA;AAAA,QACE;AAAA,QACA,gBAAgB,IAAI;AAAA,QACpB,UAAU,IAAI;AAAA,QACd,WAAW;AAAA,MACb;AAAA,MACA;AAAA,MACA,IAAI;AAAA,IACN;AAEA,QAAI,CAAC,OAAO;AACV,aAAO,aAAa,KAAK,EAAE,OAAO,kBAAkB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACxE;AAEA,QAAI,MAAM,WAAW,cAAc,MAAM,WAAW,cAAc;AAChE,aAAO,aAAa,KAAK,EAAE,OAAO,yCAAyC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC/F;AAEA,QAAI,gBAAgB,EAAE,sBAAsB,GAAG,oBAAoB,EAAE;AACrE,UAAM,gBAAgB,IAAI,IAAI;AAAA,MAC5B,YAAY;AACV,wBAAgB,MAAM,8BAA8B,IAAI,IAAI,MAAM,IAAI,IAAI,QAAQ,IAAI,KAAK;AAAA,MAC7F;AAAA,MACA,MAAM;AACJ,cAAM,SAAS;AACf,cAAM,kBAAkB;AAAA,MAC1B;AAAA,IACF,GAAG,EAAE,aAAa,KAAK,CAAC;AAExB,QAAI;AACF,YAAM,kBAAkB,+BAA+B;AAAA,QACrD,SAAS,MAAM;AAAA,QACf,UAAU,MAAM;AAAA,QAChB,gBAAgB,MAAM;AAAA,MACxB,CAAC;AACD,YAAM,kBAAkB,4BAA4B;AAAA,QAClD,SAAS,MAAM;AAAA,QACf,UAAU,MAAM;AAAA,QAChB,gBAAgB,MAAM;AAAA,QACtB,oBAAoB,MAAM;AAAA,QAC1B,SAAS,MAAM;AAAA,MACjB,CAAC;AAAA,IACH,SAAS,YAAY;AACnB,aAAO,MAAM,yBAAyB,EAAE,KAAK,WAAW,CAAC;AAAA,IAC3D;AAEA,WAAO,aAAa,KAAK,EAAE,IAAI,MAAM,GAAG,cAAc,CAAC;AAAA,EACzD,SAAS,KAAK;AACZ,QAAI,eAAe,mBAAmB;AACpC,aAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrE;AACA,QAAI,eAAe,wBAAwB;AACzC,aAAO,aAAa,KAAK,EAAE,OAAO,IAAI,QAAQ,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAClE;AAEA,WAAO,MAAM,oBAAoB,EAAE,IAAI,CAAC;AACxC,WAAO,aAAa,KAAK,EAAE,OAAO,4BAA4B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAClF;AACF;AAEA,eAAe,8BACb,IACA,SACA,QACA,OACuE;AACvE,QAAM,YAAY,MAAM;AAAA,IACtB;AAAA,IACA;AAAA,IACA;AAAA,MACE,cAAc;AAAA,MACd,UAAU;AAAA,MACV,WAAW;AAAA,IACb;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAEA,MAAI,UAAU,WAAW,GAAG;AAC1B,WAAO,EAAE,sBAAsB,GAAG,oBAAoB,EAAE;AAAA,EAC1D;AAEA,QAAM,cAAc,UAAU,IAAI,CAAC,aAAa,SAAS,EAAE;AAC3D,QAAM,UAAU,MAAM;AAAA,IACpB;AAAA,IACA;AAAA,IACA;AAAA,MACE,YAAY,EAAE,KAAK,YAAY;AAAA,MAC/B,WAAW;AAAA,IACb;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAEA,MAAI,QAAQ,KAAK,CAAC,WAAW,OAAO,WAAW,cAAc,OAAO,WAAW,cAAc,OAAO,WAAW,YAAY,GAAG;AAC5H,UAAM,IAAI,uBAAuB,yFAAyF;AAAA,EAC5H;AAKA,QAAM,gBAAgB,MAAM;AAAA,IAC1B;AAAA,IACA;AAAA,IACA;AAAA,MACE,YAAY,EAAE,KAAK,YAAY;AAAA,MAC/B,UAAU;AAAA,MACV,WAAW;AAAA,IACb;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAEA,QAAM,MAAM,oBAAI,KAAK;AACrB,QAAM,eAAe,IAAI,YAAY;AACrC,aAAW,YAAY,WAAW;AAChC,UAAM,mBAAmB,SAAS,YAAY,OAAO,SAAS,aAAa,WACvE,SAAS,WACT,CAAC;AACL,aAAS,WAAW;AACpB,aAAS,SAAS,SAAS,WAAW,aAAa,SAAS,SAAS;AACrE,aAAS,aAAa;AACtB,aAAS,mBAAmB;AAC5B,aAAS,WAAW;AAAA,MAClB,GAAG;AAAA,MACH;AAAA,MACA,oBAAoB;AAAA,MACpB,kBAAkB;AAAA,IACpB;AAAA,EACF;AAEA,MAAI,qBAAqB;AACzB,aAAW,UAAU,SAAS;AAC5B,QAAI,OAAO,WAAW,aAAa,OAAO,WAAW,UAAU;AAC7D;AAAA,IACF;AACA,WAAO,SAAS;AAChB,WAAO,aAAa;AACpB,WAAO,mBAAmB;AAC1B,WAAO,iBAAiB,OAAO,kBAAkB;AACjD,0BAAsB;AAAA,EACxB;AAEA,aAAW,eAAe,eAAe;AACvC,gBAAY,WAAW;AAAA,EACzB;AAEA,SAAO;AAAA,IACL,sBAAsB,UAAU;AAAA,IAChC;AAAA,EACF;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,gCAAgC;AAAA,QAC5D,EAAE,QAAQ,KAAK,aAAa,kBAAkB;AAAA,QAC9C,EAAE,QAAQ,KAAK,aAAa,sEAAsE;AAAA,MACpG;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }