@open-mercato/core 0.6.6-develop.6465.1.019f0fb26f → 0.6.6-develop.6471.1.9ab5bdd79a

package/dist/modules/sales/subscribers/reconcileOnCustomerDelete.js

@@ -1,4 +1,6 @@
 import { SalesOrder, SalesQuote } from "@open-mercato/core/modules/sales/data/entities";
+import { createLogger } from "@open-mercato/shared/lib/logger";
+const logger = createLogger("sales");
 const metadata = {
   event: "customers.person.deleted",
   persistent: true,
@@ -24,7 +26,7 @@ async function handle(payload, ctx) {
       )
     ]);
   } catch (err) {
-    console.error("[sales:reconcile-on-person-delete] Failed to null customerEntityId on sales documents:", err);
+    logger.error("sales.reconcile-on-person-delete Failed to null customerEntityId on sales documents", { err });
   }
 }
 export {

package/dist/modules/sales/subscribers/reconcileOnCustomerDelete.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/sales/subscribers/reconcileOnCustomerDelete.ts"],
-  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport { SalesOrder, SalesQuote } from '@open-mercato/core/modules/sales/data/entities'\n\nexport const metadata = {\n  event: 'customers.person.deleted',\n  persistent: true,\n  id: 'sales:reconcile-on-person-delete',\n}\n\nexport default async function handle(\n  payload: unknown,\n  ctx: { resolve: <T = unknown>(name: string) => T; eventName?: string },\n): Promise<void> {\n  const data = payload as Record<string, unknown>\n  const entityId = (data?.entityId as string | undefined) ?? (data?.id as string | undefined)\n  const tenantId = data?.tenantId as string | undefined\n  if (!entityId || !tenantId) return\n\n  const em = ctx.resolve<EntityManager>('em')\n\n  try {\n    await Promise.all([\n      em.nativeUpdate(\n        SalesOrder,\n        { customerEntityId: entityId, tenantId },\n        { customerEntityId: null },\n      ),\n      em.nativeUpdate(\n        SalesQuote,\n        { customerEntityId: entityId, tenantId },\n        { customerEntityId: null },\n      ),\n    ])\n  } catch (err) {\n    console.error('[sales:reconcile-on-person-delete] Failed to null customerEntityId on sales documents:', err)\n  }\n}\n"],
-  "mappings": "AACA,SAAS,YAAY,kBAAkB;AAEhC,MAAM,WAAW;AAAA,EACtB,OAAO;AAAA,EACP,YAAY;AAAA,EACZ,IAAI;AACN;AAEA,eAAO,OACL,SACA,KACe;AACf,QAAM,OAAO;AACb,QAAM,WAAY,MAAM,YAAoC,MAAM;AAClE,QAAM,WAAW,MAAM;AACvB,MAAI,CAAC,YAAY,CAAC,SAAU;AAE5B,QAAM,KAAK,IAAI,QAAuB,IAAI;AAE1C,MAAI;AACF,UAAM,QAAQ,IAAI;AAAA,MAChB,GAAG;AAAA,QACD;AAAA,QACA,EAAE,kBAAkB,UAAU,SAAS;AAAA,QACvC,EAAE,kBAAkB,KAAK;AAAA,MAC3B;AAAA,MACA,GAAG;AAAA,QACD;AAAA,QACA,EAAE,kBAAkB,UAAU,SAAS;AAAA,QACvC,EAAE,kBAAkB,KAAK;AAAA,MAC3B;AAAA,IACF,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,YAAQ,MAAM,0FAA0F,GAAG;AAAA,EAC7G;AACF;",
+  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport { SalesOrder, SalesQuote } from '@open-mercato/core/modules/sales/data/entities'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('sales')\n\nexport const metadata = {\n  event: 'customers.person.deleted',\n  persistent: true,\n  id: 'sales:reconcile-on-person-delete',\n}\n\nexport default async function handle(\n  payload: unknown,\n  ctx: { resolve: <T = unknown>(name: string) => T; eventName?: string },\n): Promise<void> {\n  const data = payload as Record<string, unknown>\n  const entityId = (data?.entityId as string | undefined) ?? (data?.id as string | undefined)\n  const tenantId = data?.tenantId as string | undefined\n  if (!entityId || !tenantId) return\n\n  const em = ctx.resolve<EntityManager>('em')\n\n  try {\n    await Promise.all([\n      em.nativeUpdate(\n        SalesOrder,\n        { customerEntityId: entityId, tenantId },\n        { customerEntityId: null },\n      ),\n      em.nativeUpdate(\n        SalesQuote,\n        { customerEntityId: entityId, tenantId },\n        { customerEntityId: null },\n      ),\n    ])\n  } catch (err) {\n    logger.error('sales.reconcile-on-person-delete Failed to null customerEntityId on sales documents', { err })\n  }\n}\n"],
+  "mappings": "AACA,SAAS,YAAY,kBAAkB;AACvC,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,OAAO;AAE5B,MAAM,WAAW;AAAA,EACtB,OAAO;AAAA,EACP,YAAY;AAAA,EACZ,IAAI;AACN;AAEA,eAAO,OACL,SACA,KACe;AACf,QAAM,OAAO;AACb,QAAM,WAAY,MAAM,YAAoC,MAAM;AAClE,QAAM,WAAW,MAAM;AACvB,MAAI,CAAC,YAAY,CAAC,SAAU;AAE5B,QAAM,KAAK,IAAI,QAAuB,IAAI;AAE1C,MAAI;AACF,UAAM,QAAQ,IAAI;AAAA,MAChB,GAAG;AAAA,QACD;AAAA,QACA,EAAE,kBAAkB,UAAU,SAAS;AAAA,QACvC,EAAE,kBAAkB,KAAK;AAAA,MAC3B;AAAA,MACA,GAAG;AAAA,QACD;AAAA,QACA,EAAE,kBAAkB,UAAU,SAAS;AAAA,QACvC,EAAE,kBAAkB,KAAK;AAAA,MAC3B;AAAA,IACF,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,WAAO,MAAM,uFAAuF,EAAE,IAAI,CAAC;AAAA,EAC7G;AACF;",
   "names": []
 }

package/dist/modules/sales/widgets/dashboard/makeDashboardWidgetRoute.js

@@ -7,6 +7,8 @@ import { CrudHttpError, isCrudHttpError } from "@open-mercato/shared/lib/crud/er
 import { findAndCountWithDecryption } from "@open-mercato/shared/lib/encryption/find";
 import { resolveDateRange } from "@open-mercato/ui/backend/date-range";
 import { resolveWidgetScope } from "@open-mercato/core/modules/dashboards/lib/widgetScope";
+import { createLogger } from "@open-mercato/shared/lib/logger";
+const logger = createLogger("sales");
 const WIDGET_CACHE_TTL = 12e4;
 const WIDGET_CACHE_SEGMENT_TTL = 864e5;
 const WIDGET_CACHE_SEGMENT_KEY = "widget-data:__segment__";
@@ -94,7 +96,7 @@ function makeDashboardWidgetRoute(config) {
             return NextResponse.json(cached);
           }
         } catch (err) {
-          console.debug("[widget-cache] read failed", err);
+          logger.debug("widget-cache read failed", { err });
         }
       }
       const where = {
@@ -129,7 +131,7 @@ function makeDashboardWidgetRoute(config) {
             { ttl: WIDGET_CACHE_SEGMENT_TTL, tags: ["widget-data"] }
           ));
         } catch (err) {
-          console.debug("[widget-cache] write failed", err);
+          logger.debug("widget-cache write failed", { err });
         }
       }
       return NextResponse.json(response);
@@ -137,7 +139,7 @@ function makeDashboardWidgetRoute(config) {
       if (isCrudHttpError(err)) {
         return NextResponse.json(err.body, { status: err.status });
       }
-      console.error(`${config.errorPrefix} failed`, err);
+      logger.error("dashboard widget route failed", { errorPrefix: config.errorPrefix, err });
       return NextResponse.json(
         { error: translate(`${config.errorPrefix}.error`, config.openApi.errorFallback) },
         { status: 500 }

package/dist/modules/sales/widgets/dashboard/makeDashboardWidgetRoute.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../src/modules/sales/widgets/dashboard/makeDashboardWidgetRoute.ts"],
-  "sourcesContent": ["import { createHash } from 'node:crypto'\nimport { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { EntityName, FilterQuery, FindOptions } from '@mikro-orm/core'\nimport type { CacheStrategy } from '@open-mercato/cache'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { runWithCacheTenant } from '@open-mercato/cache'\nimport { CrudHttpError, isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { findAndCountWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { resolveDateRange } from '@open-mercato/ui/backend/date-range'\nimport type { DatePeriodOption } from '../../api/dashboard/widgets/helpers'\nimport { resolveWidgetScope, type WidgetScopeContext } from '@open-mercato/core/modules/dashboards/lib/widgetScope'\n\nconst WIDGET_CACHE_TTL = 120_000\nconst WIDGET_CACHE_SEGMENT_TTL = 86_400_000\nconst WIDGET_CACHE_SEGMENT_KEY = 'widget-data:__segment__'\n\nconst querySchema = z.object({\n  limit: z.coerce.number().min(1).max(20).default(5),\n  datePeriod: z.enum(['last24h', 'last7d', 'last30d', 'custom']).default('last24h'),\n  customFrom: z.string().optional(),\n  customTo: z.string().optional(),\n  tenantId: z.string().uuid().optional(),\n  organizationId: z.string().uuid().optional(),\n})\n\ntype WidgetContext = WidgetScopeContext & {\n  limit: number\n  datePeriod: DatePeriodOption\n  customFrom?: string\n  customTo?: string\n}\n\nfunction normalizeOrganizationIds(organizationIds: string[] | null): string[] | null {\n  if (organizationIds === null) return null\n  const set = new Set(organizationIds)\n  return Array.from(set).sort((a, b) => a.localeCompare(b))\n}\n\nfunction buildCacheKey(\n  cacheId: string,\n  params: {\n    tenantId: string\n    organizationIds: string[] | null\n    limit: number\n    datePeriod: DatePeriodOption\n    customFrom?: string\n    customTo?: string\n  }\n): string {\n  const hash = createHash('sha256')\n  hash.update(\n    JSON.stringify({\n      widget: cacheId,\n      ...params,\n      organizationIds: normalizeOrganizationIds(params.organizationIds),\n    })\n  )\n  return `widget-data:${hash.digest('hex').slice(0, 16)}`\n}\n\nasync function resolveContext(req: Request, translate: (key: string, fallback?: string) => string): Promise<WidgetContext> {\n  const url = new URL(req.url)\n  const rawQuery: Record<string, string> = {}\n  for (const [key, value] of url.searchParams.entries()) rawQuery[key] = value\n  const parsed = querySchema.safeParse(rawQuery)\n  if (!parsed.success) {\n    throw new CrudHttpError(400, { error: translate('sales.errors.invalid_query', 'Invalid query parameters') })\n  }\n\n  const { container, em, tenantId, organizationIds } = await resolveWidgetScope(req, translate, {\n    tenantId: parsed.data.tenantId ?? null,\n    organizationId: parsed.data.organizationId ?? null,\n  })\n\n  return {\n    container,\n    em,\n    tenantId,\n    organizationIds,\n    limit: parsed.data.limit,\n    datePeriod: parsed.data.datePeriod,\n    customFrom: parsed.data.customFrom,\n    customTo: parsed.data.customTo,\n  }\n}\n\nexport interface DashboardWidgetRouteConfig<TEntity extends object, TItem extends Record<string, unknown>> {\n  entity: { new (...args: unknown[]): TEntity }\n  cacheId: string\n  cacheTags: string[]\n  feature: string\n  mapItem: (entity: Record<string, unknown>) => TItem\n  itemSchema: z.ZodTypeAny\n  openApi: {\n    summary: string\n    description: string\n    getSummary: string\n    itemDescription: string\n    errorFallback: string\n  }\n  errorPrefix: string\n}\n\ntype WidgetResponse<TItem> = {\n  items: TItem[]\n  total: number\n  dateRange: {\n    from: string\n    to: string\n  }\n}\n\nconst widgetErrorSchema = z.object({ error: z.string() })\n\nexport function makeDashboardWidgetRoute<TEntity extends object, TItem extends Record<string, unknown>>(config: DashboardWidgetRouteConfig<TEntity, TItem>) {\n  const cacheTags = ['widget-data', ...config.cacheTags]\n\n  const metadata = {\n    GET: { requireAuth: true, requireFeatures: ['dashboards.view', config.feature] },\n  }\n\n  async function GET(req: Request) {\n    const { translate } = await resolveTranslations()\n    try {\n      const { container, em, tenantId, organizationIds, limit, datePeriod, customFrom, customTo } = await resolveContext(\n        req,\n        translate\n      )\n      const range = (() => {\n        if (datePeriod === 'custom') {\n          const from = customFrom ? new Date(customFrom) : new Date(0)\n          const to = customTo ? new Date(customTo) : new Date()\n          return { start: from, end: to }\n        }\n        const preset = datePeriod === 'last7d' ? 'last_7_days' : datePeriod === 'last30d' ? 'last_30_days' : 'today'\n        return resolveDateRange(preset)\n      })()\n\n      let cache: CacheStrategy | null = null\n      try {\n        cache = container.resolve<CacheStrategy>('cache')\n      } catch {\n        cache = null\n      }\n\n      const cacheKey = buildCacheKey(config.cacheId, { tenantId, organizationIds, limit, datePeriod, customFrom, customTo })\n      const tenantScope = tenantId ?? null\n\n      if (cache) {\n        try {\n          const cached = await runWithCacheTenant(tenantScope, () => cache!.get(cacheKey))\n          if (cached && typeof cached === 'object' && 'items' in (cached as object)) {\n            return NextResponse.json(cached)\n          }\n        } catch (err) {\n          console.debug('[widget-cache] read failed', err)\n        }\n      }\n\n      const where: FilterQuery<{ tenantId: string; deletedAt: Date | null; createdAt: Date; organizationId: string }> = {\n        tenantId,\n        deletedAt: null,\n        createdAt: { $gte: range.start, $lte: range.end },\n      }\n\n      if (Array.isArray(organizationIds)) {\n        const unique = Array.from(new Set(organizationIds))\n        where.organizationId = unique.length === 1 ? unique[0] : { $in: unique }\n      }\n\n      const organizationIdScope = Array.isArray(organizationIds) && organizationIds.length === 1 ? organizationIds[0] : null\n      // Generic boundary: config.entity is a class constructor from the factory caller,\n      // so we cast to EntityName/FilterQuery at the call site (matching findAndCountWithDecryption's own internal casts)\n      const [entities, total] = await findAndCountWithDecryption(\n        em,\n        config.entity as EntityName<TEntity>,\n        where as FilterQuery<TEntity>,\n        { limit, orderBy: { createdAt: 'desc' as const } } as FindOptions<TEntity>,\n        { tenantId, organizationId: organizationIdScope },\n      )\n\n      const items = (entities as unknown as Record<string, unknown>[]).map(config.mapItem)\n\n      const response: WidgetResponse<TItem> = {\n        items,\n        total,\n        dateRange: { from: range.start.toISOString(), to: range.end.toISOString() },\n      }\n\n      if (cache) {\n        try {\n          await runWithCacheTenant(tenantScope, () => cache!.set(cacheKey, response, { ttl: WIDGET_CACHE_TTL, tags: cacheTags }))\n          await runWithCacheTenant(tenantScope, () => cache!.set(\n            WIDGET_CACHE_SEGMENT_KEY,\n            { updatedAt: response.dateRange.to },\n            { ttl: WIDGET_CACHE_SEGMENT_TTL, tags: ['widget-data'] },\n          ))\n        } catch (err) {\n          console.debug('[widget-cache] write failed', err)\n        }\n      }\n\n      return NextResponse.json(response)\n    } catch (err) {\n      if (isCrudHttpError(err)) {\n        return NextResponse.json(err.body, { status: err.status })\n      }\n      console.error(`${config.errorPrefix} failed`, err)\n      return NextResponse.json(\n        { error: translate(`${config.errorPrefix}.error`, config.openApi.errorFallback) },\n        { status: 500 },\n      )\n    }\n  }\n\n  const responseSchema = z.object({\n    items: z.array(config.itemSchema),\n    total: z.number(),\n    dateRange: z.object({\n      from: z.string(),\n      to: z.string(),\n    }),\n  })\n\n  const openApi: OpenApiRouteDoc = {\n    tag: 'Sales',\n    summary: config.openApi.summary,\n    description: config.openApi.description,\n    methods: {\n      GET: {\n        summary: config.openApi.getSummary,\n        query: querySchema,\n        responses: [{ status: 200, description: config.openApi.itemDescription, schema: responseSchema }],\n        errors: [\n          { status: 400, description: 'Invalid query parameters', schema: widgetErrorSchema },\n          { status: 401, description: 'Unauthorized', schema: widgetErrorSchema },\n          { status: 403, description: 'Forbidden', schema: widgetErrorSchema },\n          { status: 500, description: 'Widget failed to load', schema: widgetErrorSchema },\n        ],\n      },\n    },\n  }\n\n  return { GET, metadata, openApi }\n}\n"],
-  "mappings": "AAAA,SAAS,kBAAkB;AAC3B,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAIlB,SAAS,2BAA2B;AACpC,SAAS,0BAA0B;AACnC,SAAS,eAAe,uBAAuB;AAC/C,SAAS,kCAAkC;AAC3C,SAAS,wBAAwB;AAEjC,SAAS,0BAAmD;AAE5D,MAAM,mBAAmB;AACzB,MAAM,2BAA2B;AACjC,MAAM,2BAA2B;AAEjC,MAAM,cAAc,EAAE,OAAO;AAAA,EAC3B,OAAO,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,QAAQ,CAAC;AAAA,EACjD,YAAY,EAAE,KAAK,CAAC,WAAW,UAAU,WAAW,QAAQ,CAAC,EAAE,QAAQ,SAAS;AAAA,EAChF,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,EAChC,UAAU,EAAE,OAAO,EAAE,SAAS;AAAA,EAC9B,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACrC,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAC7C,CAAC;AASD,SAAS,yBAAyB,iBAAmD;AACnF,MAAI,oBAAoB,KAAM,QAAO;AACrC,QAAM,MAAM,IAAI,IAAI,eAAe;AACnC,SAAO,MAAM,KAAK,GAAG,EAAE,KAAK,CAAC,GAAG,MAAM,EAAE,cAAc,CAAC,CAAC;AAC1D;AAEA,SAAS,cACP,SACA,QAQQ;AACR,QAAM,OAAO,WAAW,QAAQ;AAChC,OAAK;AAAA,IACH,KAAK,UAAU;AAAA,MACb,QAAQ;AAAA,MACR,GAAG;AAAA,MACH,iBAAiB,yBAAyB,OAAO,eAAe;AAAA,IAClE,CAAC;AAAA,EACH;AACA,SAAO,eAAe,KAAK,OAAO,KAAK,EAAE,MAAM,GAAG,EAAE,CAAC;AACvD;AAEA,eAAe,eAAe,KAAc,WAA+E;AACzH,QAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,QAAM,WAAmC,CAAC;AAC1C,aAAW,CAAC,KAAK,KAAK,KAAK,IAAI,aAAa,QAAQ,EAAG,UAAS,GAAG,IAAI;AACvE,QAAM,SAAS,YAAY,UAAU,QAAQ;AAC7C,MAAI,CAAC,OAAO,SAAS;AACnB,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,8BAA8B,0BAA0B,EAAE,CAAC;AAAA,EAC7G;AAEA,QAAM,EAAE,WAAW,IAAI,UAAU,gBAAgB,IAAI,MAAM,mBAAmB,KAAK,WAAW;AAAA,IAC5F,UAAU,OAAO,KAAK,YAAY;AAAA,IAClC,gBAAgB,OAAO,KAAK,kBAAkB;AAAA,EAChD,CAAC;AAED,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,OAAO,OAAO,KAAK;AAAA,IACnB,YAAY,OAAO,KAAK;AAAA,IACxB,YAAY,OAAO,KAAK;AAAA,IACxB,UAAU,OAAO,KAAK;AAAA,EACxB;AACF;AA4BA,MAAM,oBAAoB,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAEjD,SAAS,yBAAwF,QAAoD;AAC1J,QAAM,YAAY,CAAC,eAAe,GAAG,OAAO,SAAS;AAErD,QAAM,WAAW;AAAA,IACf,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,mBAAmB,OAAO,OAAO,EAAE;AAAA,EACjF;AAEA,iBAAe,IAAI,KAAc;AAC/B,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,QAAI;AACF,YAAM,EAAE,WAAW,IAAI,UAAU,iBAAiB,OAAO,YAAY,YAAY,SAAS,IAAI,MAAM;AAAA,QAClG;AAAA,QACA;AAAA,MACF;AACA,YAAM,SAAS,MAAM;AACnB,YAAI,eAAe,UAAU;AAC3B,gBAAM,OAAO,aAAa,IAAI,KAAK,UAAU,IAAI,oBAAI,KAAK,CAAC;AAC3D,gBAAM,KAAK,WAAW,IAAI,KAAK,QAAQ,IAAI,oBAAI,KAAK;AACpD,iBAAO,EAAE,OAAO,MAAM,KAAK,GAAG;AAAA,QAChC;AACA,cAAM,SAAS,eAAe,WAAW,gBAAgB,eAAe,YAAY,iBAAiB;AACrG,eAAO,iBAAiB,MAAM;AAAA,MAChC,GAAG;AAEH,UAAI,QAA8B;AAClC,UAAI;AACF,gBAAQ,UAAU,QAAuB,OAAO;AAAA,MAClD,QAAQ;AACN,gBAAQ;AAAA,MACV;AAEA,YAAM,WAAW,cAAc,OAAO,SAAS,EAAE,UAAU,iBAAiB,OAAO,YAAY,YAAY,SAAS,CAAC;AACrH,YAAM,cAAc,YAAY;AAEhC,UAAI,OAAO;AACT,YAAI;AACF,gBAAM,SAAS,MAAM,mBAAmB,aAAa,MAAM,MAAO,IAAI,QAAQ,CAAC;AAC/E,cAAI,UAAU,OAAO,WAAW,YAAY,WAAY,QAAmB;AACzE,mBAAO,aAAa,KAAK,MAAM;AAAA,UACjC;AAAA,QACF,SAAS,KAAK;AACZ,kBAAQ,MAAM,8BAA8B,GAAG;AAAA,QACjD;AAAA,MACF;AAEA,YAAM,QAA4G;AAAA,QAChH;AAAA,QACA,WAAW;AAAA,QACX,WAAW,EAAE,MAAM,MAAM,OAAO,MAAM,MAAM,IAAI;AAAA,MAClD;AAEA,UAAI,MAAM,QAAQ,eAAe,GAAG;AAClC,cAAM,SAAS,MAAM,KAAK,IAAI,IAAI,eAAe,CAAC;AAClD,cAAM,iBAAiB,OAAO,WAAW,IAAI,OAAO,CAAC,IAAI,EAAE,KAAK,OAAO;AAAA,MACzE;AAEA,YAAM,sBAAsB,MAAM,QAAQ,eAAe,KAAK,gBAAgB,WAAW,IAAI,gBAAgB,CAAC,IAAI;AAGlH,YAAM,CAAC,UAAU,KAAK,IAAI,MAAM;AAAA,QAC9B;AAAA,QACA,OAAO;AAAA,QACP;AAAA,QACA,EAAE,OAAO,SAAS,EAAE,WAAW,OAAgB,EAAE;AAAA,QACjD,EAAE,UAAU,gBAAgB,oBAAoB;AAAA,MAClD;AAEA,YAAM,QAAS,SAAkD,IAAI,OAAO,OAAO;AAEnF,YAAM,WAAkC;AAAA,QACtC;AAAA,QACA;AAAA,QACA,WAAW,EAAE,MAAM,MAAM,MAAM,YAAY,GAAG,IAAI,MAAM,IAAI,YAAY,EAAE;AAAA,MAC5E;AAEA,UAAI,OAAO;AACT,YAAI;AACF,gBAAM,mBAAmB,aAAa,MAAM,MAAO,IAAI,UAAU,UAAU,EAAE,KAAK,kBAAkB,MAAM,UAAU,CAAC,CAAC;AACtH,gBAAM,mBAAmB,aAAa,MAAM,MAAO;AAAA,YACjD;AAAA,YACA,EAAE,WAAW,SAAS,UAAU,GAAG;AAAA,YACnC,EAAE,KAAK,0BAA0B,MAAM,CAAC,aAAa,EAAE;AAAA,UACzD,CAAC;AAAA,QACH,SAAS,KAAK;AACZ,kBAAQ,MAAM,+BAA+B,GAAG;AAAA,QAClD;AAAA,MACF;AAEA,aAAO,aAAa,KAAK,QAAQ;AAAA,IACnC,SAAS,KAAK;AACZ,UAAI,gBAAgB,GAAG,GAAG;AACxB,eAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,MAC3D;AACA,cAAQ,MAAM,GAAG,OAAO,WAAW,WAAW,GAAG;AACjD,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,UAAU,GAAG,OAAO,WAAW,UAAU,OAAO,QAAQ,aAAa,EAAE;AAAA,QAChF,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAAA,EACF;AAEA,QAAM,iBAAiB,EAAE,OAAO;AAAA,IAC9B,OAAO,EAAE,MAAM,OAAO,UAAU;AAAA,IAChC,OAAO,EAAE,OAAO;AAAA,IAChB,WAAW,EAAE,OAAO;AAAA,MAClB,MAAM,EAAE,OAAO;AAAA,MACf,IAAI,EAAE,OAAO;AAAA,IACf,CAAC;AAAA,EACH,CAAC;AAED,QAAM,UAA2B;AAAA,IAC/B,KAAK;AAAA,IACL,SAAS,OAAO,QAAQ;AAAA,IACxB,aAAa,OAAO,QAAQ;AAAA,IAC5B,SAAS;AAAA,MACP,KAAK;AAAA,QACH,SAAS,OAAO,QAAQ;AAAA,QACxB,OAAO;AAAA,QACP,WAAW,CAAC,EAAE,QAAQ,KAAK,aAAa,OAAO,QAAQ,iBAAiB,QAAQ,eAAe,CAAC;AAAA,QAChG,QAAQ;AAAA,UACN,EAAE,QAAQ,KAAK,aAAa,4BAA4B,QAAQ,kBAAkB;AAAA,UAClF,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,kBAAkB;AAAA,UACtE,EAAE,QAAQ,KAAK,aAAa,aAAa,QAAQ,kBAAkB;AAAA,UACnE,EAAE,QAAQ,KAAK,aAAa,yBAAyB,QAAQ,kBAAkB;AAAA,QACjF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,SAAO,EAAE,KAAK,UAAU,QAAQ;AAClC;",
+  "sourcesContent": ["import { createHash } from 'node:crypto'\nimport { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { EntityName, FilterQuery, FindOptions } from '@mikro-orm/core'\nimport type { CacheStrategy } from '@open-mercato/cache'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { runWithCacheTenant } from '@open-mercato/cache'\nimport { CrudHttpError, isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { findAndCountWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { resolveDateRange } from '@open-mercato/ui/backend/date-range'\nimport type { DatePeriodOption } from '../../api/dashboard/widgets/helpers'\nimport { resolveWidgetScope, type WidgetScopeContext } from '@open-mercato/core/modules/dashboards/lib/widgetScope'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('sales')\n\nconst WIDGET_CACHE_TTL = 120_000\nconst WIDGET_CACHE_SEGMENT_TTL = 86_400_000\nconst WIDGET_CACHE_SEGMENT_KEY = 'widget-data:__segment__'\n\nconst querySchema = z.object({\n  limit: z.coerce.number().min(1).max(20).default(5),\n  datePeriod: z.enum(['last24h', 'last7d', 'last30d', 'custom']).default('last24h'),\n  customFrom: z.string().optional(),\n  customTo: z.string().optional(),\n  tenantId: z.string().uuid().optional(),\n  organizationId: z.string().uuid().optional(),\n})\n\ntype WidgetContext = WidgetScopeContext & {\n  limit: number\n  datePeriod: DatePeriodOption\n  customFrom?: string\n  customTo?: string\n}\n\nfunction normalizeOrganizationIds(organizationIds: string[] | null): string[] | null {\n  if (organizationIds === null) return null\n  const set = new Set(organizationIds)\n  return Array.from(set).sort((a, b) => a.localeCompare(b))\n}\n\nfunction buildCacheKey(\n  cacheId: string,\n  params: {\n    tenantId: string\n    organizationIds: string[] | null\n    limit: number\n    datePeriod: DatePeriodOption\n    customFrom?: string\n    customTo?: string\n  }\n): string {\n  const hash = createHash('sha256')\n  hash.update(\n    JSON.stringify({\n      widget: cacheId,\n      ...params,\n      organizationIds: normalizeOrganizationIds(params.organizationIds),\n    })\n  )\n  return `widget-data:${hash.digest('hex').slice(0, 16)}`\n}\n\nasync function resolveContext(req: Request, translate: (key: string, fallback?: string) => string): Promise<WidgetContext> {\n  const url = new URL(req.url)\n  const rawQuery: Record<string, string> = {}\n  for (const [key, value] of url.searchParams.entries()) rawQuery[key] = value\n  const parsed = querySchema.safeParse(rawQuery)\n  if (!parsed.success) {\n    throw new CrudHttpError(400, { error: translate('sales.errors.invalid_query', 'Invalid query parameters') })\n  }\n\n  const { container, em, tenantId, organizationIds } = await resolveWidgetScope(req, translate, {\n    tenantId: parsed.data.tenantId ?? null,\n    organizationId: parsed.data.organizationId ?? null,\n  })\n\n  return {\n    container,\n    em,\n    tenantId,\n    organizationIds,\n    limit: parsed.data.limit,\n    datePeriod: parsed.data.datePeriod,\n    customFrom: parsed.data.customFrom,\n    customTo: parsed.data.customTo,\n  }\n}\n\nexport interface DashboardWidgetRouteConfig<TEntity extends object, TItem extends Record<string, unknown>> {\n  entity: { new (...args: unknown[]): TEntity }\n  cacheId: string\n  cacheTags: string[]\n  feature: string\n  mapItem: (entity: Record<string, unknown>) => TItem\n  itemSchema: z.ZodTypeAny\n  openApi: {\n    summary: string\n    description: string\n    getSummary: string\n    itemDescription: string\n    errorFallback: string\n  }\n  errorPrefix: string\n}\n\ntype WidgetResponse<TItem> = {\n  items: TItem[]\n  total: number\n  dateRange: {\n    from: string\n    to: string\n  }\n}\n\nconst widgetErrorSchema = z.object({ error: z.string() })\n\nexport function makeDashboardWidgetRoute<TEntity extends object, TItem extends Record<string, unknown>>(config: DashboardWidgetRouteConfig<TEntity, TItem>) {\n  const cacheTags = ['widget-data', ...config.cacheTags]\n\n  const metadata = {\n    GET: { requireAuth: true, requireFeatures: ['dashboards.view', config.feature] },\n  }\n\n  async function GET(req: Request) {\n    const { translate } = await resolveTranslations()\n    try {\n      const { container, em, tenantId, organizationIds, limit, datePeriod, customFrom, customTo } = await resolveContext(\n        req,\n        translate\n      )\n      const range = (() => {\n        if (datePeriod === 'custom') {\n          const from = customFrom ? new Date(customFrom) : new Date(0)\n          const to = customTo ? new Date(customTo) : new Date()\n          return { start: from, end: to }\n        }\n        const preset = datePeriod === 'last7d' ? 'last_7_days' : datePeriod === 'last30d' ? 'last_30_days' : 'today'\n        return resolveDateRange(preset)\n      })()\n\n      let cache: CacheStrategy | null = null\n      try {\n        cache = container.resolve<CacheStrategy>('cache')\n      } catch {\n        cache = null\n      }\n\n      const cacheKey = buildCacheKey(config.cacheId, { tenantId, organizationIds, limit, datePeriod, customFrom, customTo })\n      const tenantScope = tenantId ?? null\n\n      if (cache) {\n        try {\n          const cached = await runWithCacheTenant(tenantScope, () => cache!.get(cacheKey))\n          if (cached && typeof cached === 'object' && 'items' in (cached as object)) {\n            return NextResponse.json(cached)\n          }\n        } catch (err) {\n          logger.debug('widget-cache read failed', { err })\n        }\n      }\n\n      const where: FilterQuery<{ tenantId: string; deletedAt: Date | null; createdAt: Date; organizationId: string }> = {\n        tenantId,\n        deletedAt: null,\n        createdAt: { $gte: range.start, $lte: range.end },\n      }\n\n      if (Array.isArray(organizationIds)) {\n        const unique = Array.from(new Set(organizationIds))\n        where.organizationId = unique.length === 1 ? unique[0] : { $in: unique }\n      }\n\n      const organizationIdScope = Array.isArray(organizationIds) && organizationIds.length === 1 ? organizationIds[0] : null\n      // Generic boundary: config.entity is a class constructor from the factory caller,\n      // so we cast to EntityName/FilterQuery at the call site (matching findAndCountWithDecryption's own internal casts)\n      const [entities, total] = await findAndCountWithDecryption(\n        em,\n        config.entity as EntityName<TEntity>,\n        where as FilterQuery<TEntity>,\n        { limit, orderBy: { createdAt: 'desc' as const } } as FindOptions<TEntity>,\n        { tenantId, organizationId: organizationIdScope },\n      )\n\n      const items = (entities as unknown as Record<string, unknown>[]).map(config.mapItem)\n\n      const response: WidgetResponse<TItem> = {\n        items,\n        total,\n        dateRange: { from: range.start.toISOString(), to: range.end.toISOString() },\n      }\n\n      if (cache) {\n        try {\n          await runWithCacheTenant(tenantScope, () => cache!.set(cacheKey, response, { ttl: WIDGET_CACHE_TTL, tags: cacheTags }))\n          await runWithCacheTenant(tenantScope, () => cache!.set(\n            WIDGET_CACHE_SEGMENT_KEY,\n            { updatedAt: response.dateRange.to },\n            { ttl: WIDGET_CACHE_SEGMENT_TTL, tags: ['widget-data'] },\n          ))\n        } catch (err) {\n          logger.debug('widget-cache write failed', { err })\n        }\n      }\n\n      return NextResponse.json(response)\n    } catch (err) {\n      if (isCrudHttpError(err)) {\n        return NextResponse.json(err.body, { status: err.status })\n      }\n      logger.error('dashboard widget route failed', { errorPrefix: config.errorPrefix, err })\n      return NextResponse.json(\n        { error: translate(`${config.errorPrefix}.error`, config.openApi.errorFallback) },\n        { status: 500 },\n      )\n    }\n  }\n\n  const responseSchema = z.object({\n    items: z.array(config.itemSchema),\n    total: z.number(),\n    dateRange: z.object({\n      from: z.string(),\n      to: z.string(),\n    }),\n  })\n\n  const openApi: OpenApiRouteDoc = {\n    tag: 'Sales',\n    summary: config.openApi.summary,\n    description: config.openApi.description,\n    methods: {\n      GET: {\n        summary: config.openApi.getSummary,\n        query: querySchema,\n        responses: [{ status: 200, description: config.openApi.itemDescription, schema: responseSchema }],\n        errors: [\n          { status: 400, description: 'Invalid query parameters', schema: widgetErrorSchema },\n          { status: 401, description: 'Unauthorized', schema: widgetErrorSchema },\n          { status: 403, description: 'Forbidden', schema: widgetErrorSchema },\n          { status: 500, description: 'Widget failed to load', schema: widgetErrorSchema },\n        ],\n      },\n    },\n  }\n\n  return { GET, metadata, openApi }\n}\n"],
+  "mappings": "AAAA,SAAS,kBAAkB;AAC3B,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAIlB,SAAS,2BAA2B;AACpC,SAAS,0BAA0B;AACnC,SAAS,eAAe,uBAAuB;AAC/C,SAAS,kCAAkC;AAC3C,SAAS,wBAAwB;AAEjC,SAAS,0BAAmD;AAC5D,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,OAAO;AAEnC,MAAM,mBAAmB;AACzB,MAAM,2BAA2B;AACjC,MAAM,2BAA2B;AAEjC,MAAM,cAAc,EAAE,OAAO;AAAA,EAC3B,OAAO,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,QAAQ,CAAC;AAAA,EACjD,YAAY,EAAE,KAAK,CAAC,WAAW,UAAU,WAAW,QAAQ,CAAC,EAAE,QAAQ,SAAS;AAAA,EAChF,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,EAChC,UAAU,EAAE,OAAO,EAAE,SAAS;AAAA,EAC9B,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACrC,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAC7C,CAAC;AASD,SAAS,yBAAyB,iBAAmD;AACnF,MAAI,oBAAoB,KAAM,QAAO;AACrC,QAAM,MAAM,IAAI,IAAI,eAAe;AACnC,SAAO,MAAM,KAAK,GAAG,EAAE,KAAK,CAAC,GAAG,MAAM,EAAE,cAAc,CAAC,CAAC;AAC1D;AAEA,SAAS,cACP,SACA,QAQQ;AACR,QAAM,OAAO,WAAW,QAAQ;AAChC,OAAK;AAAA,IACH,KAAK,UAAU;AAAA,MACb,QAAQ;AAAA,MACR,GAAG;AAAA,MACH,iBAAiB,yBAAyB,OAAO,eAAe;AAAA,IAClE,CAAC;AAAA,EACH;AACA,SAAO,eAAe,KAAK,OAAO,KAAK,EAAE,MAAM,GAAG,EAAE,CAAC;AACvD;AAEA,eAAe,eAAe,KAAc,WAA+E;AACzH,QAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,QAAM,WAAmC,CAAC;AAC1C,aAAW,CAAC,KAAK,KAAK,KAAK,IAAI,aAAa,QAAQ,EAAG,UAAS,GAAG,IAAI;AACvE,QAAM,SAAS,YAAY,UAAU,QAAQ;AAC7C,MAAI,CAAC,OAAO,SAAS;AACnB,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,8BAA8B,0BAA0B,EAAE,CAAC;AAAA,EAC7G;AAEA,QAAM,EAAE,WAAW,IAAI,UAAU,gBAAgB,IAAI,MAAM,mBAAmB,KAAK,WAAW;AAAA,IAC5F,UAAU,OAAO,KAAK,YAAY;AAAA,IAClC,gBAAgB,OAAO,KAAK,kBAAkB;AAAA,EAChD,CAAC;AAED,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,OAAO,OAAO,KAAK;AAAA,IACnB,YAAY,OAAO,KAAK;AAAA,IACxB,YAAY,OAAO,KAAK;AAAA,IACxB,UAAU,OAAO,KAAK;AAAA,EACxB;AACF;AA4BA,MAAM,oBAAoB,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAEjD,SAAS,yBAAwF,QAAoD;AAC1J,QAAM,YAAY,CAAC,eAAe,GAAG,OAAO,SAAS;AAErD,QAAM,WAAW;AAAA,IACf,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,mBAAmB,OAAO,OAAO,EAAE;AAAA,EACjF;AAEA,iBAAe,IAAI,KAAc;AAC/B,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,QAAI;AACF,YAAM,EAAE,WAAW,IAAI,UAAU,iBAAiB,OAAO,YAAY,YAAY,SAAS,IAAI,MAAM;AAAA,QAClG;AAAA,QACA;AAAA,MACF;AACA,YAAM,SAAS,MAAM;AACnB,YAAI,eAAe,UAAU;AAC3B,gBAAM,OAAO,aAAa,IAAI,KAAK,UAAU,IAAI,oBAAI,KAAK,CAAC;AAC3D,gBAAM,KAAK,WAAW,IAAI,KAAK,QAAQ,IAAI,oBAAI,KAAK;AACpD,iBAAO,EAAE,OAAO,MAAM,KAAK,GAAG;AAAA,QAChC;AACA,cAAM,SAAS,eAAe,WAAW,gBAAgB,eAAe,YAAY,iBAAiB;AACrG,eAAO,iBAAiB,MAAM;AAAA,MAChC,GAAG;AAEH,UAAI,QAA8B;AAClC,UAAI;AACF,gBAAQ,UAAU,QAAuB,OAAO;AAAA,MAClD,QAAQ;AACN,gBAAQ;AAAA,MACV;AAEA,YAAM,WAAW,cAAc,OAAO,SAAS,EAAE,UAAU,iBAAiB,OAAO,YAAY,YAAY,SAAS,CAAC;AACrH,YAAM,cAAc,YAAY;AAEhC,UAAI,OAAO;AACT,YAAI;AACF,gBAAM,SAAS,MAAM,mBAAmB,aAAa,MAAM,MAAO,IAAI,QAAQ,CAAC;AAC/E,cAAI,UAAU,OAAO,WAAW,YAAY,WAAY,QAAmB;AACzE,mBAAO,aAAa,KAAK,MAAM;AAAA,UACjC;AAAA,QACF,SAAS,KAAK;AACZ,iBAAO,MAAM,4BAA4B,EAAE,IAAI,CAAC;AAAA,QAClD;AAAA,MACF;AAEA,YAAM,QAA4G;AAAA,QAChH;AAAA,QACA,WAAW;AAAA,QACX,WAAW,EAAE,MAAM,MAAM,OAAO,MAAM,MAAM,IAAI;AAAA,MAClD;AAEA,UAAI,MAAM,QAAQ,eAAe,GAAG;AAClC,cAAM,SAAS,MAAM,KAAK,IAAI,IAAI,eAAe,CAAC;AAClD,cAAM,iBAAiB,OAAO,WAAW,IAAI,OAAO,CAAC,IAAI,EAAE,KAAK,OAAO;AAAA,MACzE;AAEA,YAAM,sBAAsB,MAAM,QAAQ,eAAe,KAAK,gBAAgB,WAAW,IAAI,gBAAgB,CAAC,IAAI;AAGlH,YAAM,CAAC,UAAU,KAAK,IAAI,MAAM;AAAA,QAC9B;AAAA,QACA,OAAO;AAAA,QACP;AAAA,QACA,EAAE,OAAO,SAAS,EAAE,WAAW,OAAgB,EAAE;AAAA,QACjD,EAAE,UAAU,gBAAgB,oBAAoB;AAAA,MAClD;AAEA,YAAM,QAAS,SAAkD,IAAI,OAAO,OAAO;AAEnF,YAAM,WAAkC;AAAA,QACtC;AAAA,QACA;AAAA,QACA,WAAW,EAAE,MAAM,MAAM,MAAM,YAAY,GAAG,IAAI,MAAM,IAAI,YAAY,EAAE;AAAA,MAC5E;AAEA,UAAI,OAAO;AACT,YAAI;AACF,gBAAM,mBAAmB,aAAa,MAAM,MAAO,IAAI,UAAU,UAAU,EAAE,KAAK,kBAAkB,MAAM,UAAU,CAAC,CAAC;AACtH,gBAAM,mBAAmB,aAAa,MAAM,MAAO;AAAA,YACjD;AAAA,YACA,EAAE,WAAW,SAAS,UAAU,GAAG;AAAA,YACnC,EAAE,KAAK,0BAA0B,MAAM,CAAC,aAAa,EAAE;AAAA,UACzD,CAAC;AAAA,QACH,SAAS,KAAK;AACZ,iBAAO,MAAM,6BAA6B,EAAE,IAAI,CAAC;AAAA,QACnD;AAAA,MACF;AAEA,aAAO,aAAa,KAAK,QAAQ;AAAA,IACnC,SAAS,KAAK;AACZ,UAAI,gBAAgB,GAAG,GAAG;AACxB,eAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,MAC3D;AACA,aAAO,MAAM,iCAAiC,EAAE,aAAa,OAAO,aAAa,IAAI,CAAC;AACtF,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,UAAU,GAAG,OAAO,WAAW,UAAU,OAAO,QAAQ,aAAa,EAAE;AAAA,QAChF,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAAA,EACF;AAEA,QAAM,iBAAiB,EAAE,OAAO;AAAA,IAC9B,OAAO,EAAE,MAAM,OAAO,UAAU;AAAA,IAChC,OAAO,EAAE,OAAO;AAAA,IAChB,WAAW,EAAE,OAAO;AAAA,MAClB,MAAM,EAAE,OAAO;AAAA,MACf,IAAI,EAAE,OAAO;AAAA,IACf,CAAC;AAAA,EACH,CAAC;AAED,QAAM,UAA2B;AAAA,IAC/B,KAAK;AAAA,IACL,SAAS,OAAO,QAAQ;AAAA,IACxB,aAAa,OAAO,QAAQ;AAAA,IAC5B,SAAS;AAAA,MACP,KAAK;AAAA,QACH,SAAS,OAAO,QAAQ;AAAA,QACxB,OAAO;AAAA,QACP,WAAW,CAAC,EAAE,QAAQ,KAAK,aAAa,OAAO,QAAQ,iBAAiB,QAAQ,eAAe,CAAC;AAAA,QAChG,QAAQ;AAAA,UACN,EAAE,QAAQ,KAAK,aAAa,4BAA4B,QAAQ,kBAAkB;AAAA,UAClF,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,kBAAkB;AAAA,UACtE,EAAE,QAAQ,KAAK,aAAa,aAAa,QAAQ,kBAAkB;AAAA,UACnE,EAAE,QAAQ,KAAK,aAAa,yBAAyB,QAAQ,kBAAkB;AAAA,QACjF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,SAAO,EAAE,KAAK,UAAU,QAAQ;AAClC;",
   "names": []
 }

package/dist/modules/sales/widgets/dashboard/new-orders/widget.client.js

@@ -17,6 +17,8 @@ import { formatRelativeTime } from "@open-mercato/shared/lib/time";
 import { useT } from "@open-mercato/shared/lib/i18n/context";
 import { DEFAULT_SETTINGS, hydrateSalesNewOrdersSettings } from "./config.js";
 import { readString, toDateInputValue, openNativeDatePicker, formatAmount } from "../shared.js";
+import { createLogger } from "@open-mercato/shared/lib/logger";
+const logger = createLogger("sales");
 function parseNewOrderItems(payload) {
   const rawItems = Array.isArray(payload?.items) ? payload?.items : [];
   return rawItems.map((item) => {
@@ -84,7 +86,7 @@ const SalesNewOrdersWidget = ({
       const data = await loadNewOrders(hydrated);
       setItems(data);
     } catch (err) {
-      console.error("Failed to load new orders widget data", err);
+      logger.error("Failed to load new orders widget data", { err });
       setError(translate("sales.widgets.newOrders.error", "Failed to load orders"));
     } finally {
       setLoading(false);

package/dist/modules/sales/widgets/dashboard/new-orders/widget.client.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../src/modules/sales/widgets/dashboard/new-orders/widget.client.tsx"],
-  "sourcesContent": ["\"use client\"\r\n\r\nimport * as React from 'react'\r\nimport Link from 'next/link'\r\nimport type { DashboardWidgetComponentProps } from '@open-mercato/shared/modules/dashboard/widgets'\r\nimport { apiCall } from '@open-mercato/ui/backend/utils/apiCall'\r\nimport { Input } from '@open-mercato/ui/primitives/input'\r\nimport {\r\n  Select,\r\n  SelectContent,\r\n  SelectItem,\r\n  SelectTrigger,\r\n  SelectValue,\r\n} from '@open-mercato/ui/primitives/select'\r\nimport { Spinner } from '@open-mercato/ui/primitives/spinner'\r\nimport { Badge } from '@open-mercato/ui/primitives/badge'\r\nimport { formatRelativeTime } from '@open-mercato/shared/lib/time'\r\nimport { useT } from '@open-mercato/shared/lib/i18n/context'\r\nimport { DEFAULT_SETTINGS, hydrateSalesNewOrdersSettings, type DatePeriodOption, type SalesNewOrdersSettings } from './config'\r\nimport { readString, toDateInputValue, openNativeDatePicker, formatAmount } from '../shared'\r\n\r\ntype NewOrderItem = {\r\n  id: string\r\n  orderNumber: string\r\n  status: string | null\r\n  customerName: string | null\r\n  customerEntityId: string | null\r\n  netAmount: string\r\n  grossAmount: string\r\n  currency: string | null\r\n  createdAt: string\r\n}\r\n\r\ntype NewOrdersApiPayload = {\r\n  items?: unknown[]\r\n  error?: string\r\n}\r\n\r\nfunction parseNewOrderItems(payload: NewOrdersApiPayload | null): NewOrderItem[] {\r\n  const rawItems = Array.isArray(payload?.items) ? payload?.items : []\r\n  return rawItems\r\n    .map((item) => {\r\n      if (!item || typeof item !== 'object') return null\r\n      const data = item as Record<string, unknown>\r\n      const id = readString(data.id)\r\n      const orderNumber = readString(data.orderNumber)\r\n      const createdAt = readString(data.createdAt)\r\n      if (!id || !orderNumber || !createdAt) return null\r\n      return {\r\n        id,\r\n        orderNumber,\r\n        status: readString(data.status),\r\n        customerName: readString(data.customerName),\r\n        customerEntityId: readString(data.customerEntityId),\r\n        netAmount: readString(data.netAmount) ?? '0',\r\n        grossAmount: readString(data.grossAmount) ?? '0',\r\n        currency: readString(data.currency),\r\n        createdAt,\r\n      }\r\n    })\r\n    .filter((item): item is NewOrderItem => !!item)\r\n}\r\n\r\nasync function loadNewOrders(settings: SalesNewOrdersSettings): Promise<NewOrderItem[]> {\r\n  const params = new URLSearchParams({\r\n    limit: String(settings.pageSize),\r\n    datePeriod: settings.datePeriod,\r\n  })\r\n  if (settings.datePeriod === 'custom') {\r\n    if (settings.customFrom) params.set('customFrom', settings.customFrom)\r\n    if (settings.customTo) params.set('customTo', settings.customTo)\r\n  }\r\n\r\n  const call = await apiCall<NewOrdersApiPayload>(`/api/sales/dashboard/widgets/new-orders?${params.toString()}`)\r\n  if (!call.ok) {\r\n    const message =\r\n      typeof (call.result as Record<string, unknown> | null)?.error === 'string'\r\n        ? ((call.result as Record<string, unknown>).error as string)\r\n        : `Request failed with status ${call.status}`\r\n    throw new Error(message)\r\n  }\r\n  return parseNewOrderItems(call.result ?? null)\r\n}\r\n\r\nfunction resolveDetailHref(item: NewOrderItem): string | null {\r\n  return item.id ? `/backend/sales/orders/${encodeURIComponent(item.id)}` : null\r\n}\r\n\r\n\r\nconst SalesNewOrdersWidget: React.FC<DashboardWidgetComponentProps<SalesNewOrdersSettings>> = ({\r\n  mode,\r\n  settings = DEFAULT_SETTINGS,\r\n  onSettingsChange,\r\n  refreshToken,\r\n  onRefreshStateChange,\r\n}) => {\r\n  const translate = useT()\r\n  const hydrated = React.useMemo(() => hydrateSalesNewOrdersSettings(settings), [settings])\r\n  const [items, setItems] = React.useState<NewOrderItem[]>([])\r\n  const [loading, setLoading] = React.useState(true)\r\n  const [error, setError] = React.useState<string | null>(null)\r\n  const [locale, setLocale] = React.useState<string | undefined>(undefined)\r\n\r\n  React.useEffect(() => {\r\n    if (typeof navigator !== 'undefined') {\r\n      setLocale(navigator.language)\r\n    }\r\n  }, [])\r\n\r\n  const refresh = React.useCallback(async () => {\r\n    onRefreshStateChange?.(true)\r\n    setLoading(true)\r\n    setError(null)\r\n    try {\r\n      const data = await loadNewOrders(hydrated)\r\n      setItems(data)\r\n    } catch (err) {\r\n      console.error('Failed to load new orders widget data', err)\r\n      setError(translate('sales.widgets.newOrders.error', 'Failed to load orders'))\r\n    } finally {\r\n      setLoading(false)\r\n      onRefreshStateChange?.(false)\r\n    }\r\n  }, [hydrated, onRefreshStateChange, translate])\r\n\r\n  React.useEffect(() => {\r\n    refresh().catch(() => {})\r\n  }, [refresh, refreshToken])\r\n\r\n  if (mode === 'settings') {\r\n    return (\r\n      <div className=\"space-y-4 text-sm\">\r\n        <div className=\"space-y-1.5\">\r\n          <label htmlFor=\"sales-new-orders-page-size\" className=\"text-xs font-semibold uppercase text-muted-foreground\">\r\n            {translate('sales.widgets.newOrders.settings.pageSize', 'Number of Orders')}\r\n          </label>\r\n          <Input\r\n            id=\"sales-new-orders-page-size\"\r\n            type=\"number\"\r\n            min={1}\r\n            max={20}\r\n            className=\"w-24\"\r\n            value={hydrated.pageSize}\r\n            onChange={(event) => {\r\n              const next = Number(event.target.value)\r\n              if (!Number.isFinite(next)) return\r\n              const clamped = Math.min(20, Math.max(1, Math.floor(next)))\r\n              onSettingsChange?.({ ...hydrated, pageSize: clamped })\r\n            }}\r\n          />\r\n        </div>\r\n\r\n        <div className=\"space-y-1.5\">\r\n          <label htmlFor=\"sales-new-orders-date-period\" className=\"text-xs font-semibold uppercase text-muted-foreground\">\r\n            {translate('sales.widgets.newOrders.settings.datePeriod', 'Date Period')}\r\n          </label>\r\n          <Select\r\n            value={hydrated.datePeriod}\r\n            onValueChange={(value) => {\r\n              onSettingsChange?.({ ...hydrated, datePeriod: value as DatePeriodOption })\r\n            }}\r\n          >\r\n            <SelectTrigger id=\"sales-new-orders-date-period\" size=\"sm\">\r\n              <SelectValue />\r\n            </SelectTrigger>\r\n            <SelectContent>\r\n              <SelectItem value=\"last24h\">{translate('sales.widgets.newOrders.settings.last24h', 'Last 24 hours')}</SelectItem>\r\n              <SelectItem value=\"last7d\">{translate('sales.widgets.newOrders.settings.last7d', 'Last 7 days')}</SelectItem>\r\n              <SelectItem value=\"last30d\">{translate('sales.widgets.newOrders.settings.last30d', 'Last 30 days')}</SelectItem>\r\n              <SelectItem value=\"custom\">{translate('sales.widgets.newOrders.settings.custom', 'Custom range')}</SelectItem>\r\n            </SelectContent>\r\n          </Select>\r\n        </div>\r\n\r\n        {hydrated.datePeriod === 'custom' ? (\r\n          <div className=\"grid gap-3\">\r\n            <div className=\"space-y-1.5\">\r\n              <label htmlFor=\"sales-new-orders-custom-from\" className=\"text-xs font-semibold uppercase text-muted-foreground\">\r\n                {translate('sales.widgets.newOrders.settings.customFrom', 'From')}\r\n              </label>\r\n              <input\r\n                id=\"sales-new-orders-custom-from\"\r\n                type=\"date\"\r\n                value={toDateInputValue(hydrated.customFrom)}\r\n                onChange={(event) => {\r\n                  onSettingsChange?.({ ...hydrated, customFrom: event.target.value })\r\n                }}\r\n                onFocus={openNativeDatePicker}\r\n                onClick={openNativeDatePicker}\r\n                className=\"w-full rounded-md border border-input bg-background px-2 py-1 text-sm text-foreground focus-visible:border-ring focus-visible:outline-none focus-visible:ring-1 focus-visible:ring-ring\"\r\n              />\r\n            </div>\r\n            <div className=\"space-y-1.5\">\r\n              <label htmlFor=\"sales-new-orders-custom-to\" className=\"text-xs font-semibold uppercase text-muted-foreground\">\r\n                {translate('sales.widgets.newOrders.settings.customTo', 'To')}\r\n              </label>\r\n              <input\r\n                id=\"sales-new-orders-custom-to\"\r\n                type=\"date\"\r\n                value={toDateInputValue(hydrated.customTo)}\r\n                onChange={(event) => {\r\n                  onSettingsChange?.({ ...hydrated, customTo: event.target.value })\r\n                }}\r\n                onFocus={openNativeDatePicker}\r\n                onClick={openNativeDatePicker}\r\n                className=\"w-full rounded-md border border-input bg-background px-2 py-1 text-sm text-foreground focus-visible:border-ring focus-visible:outline-none focus-visible:ring-1 focus-visible:ring-ring\"\r\n              />\r\n            </div>\r\n          </div>\r\n        ) : null}\r\n      </div>\r\n    )\r\n  }\r\n\r\n  if (error) {\r\n    return <p className=\"text-sm text-destructive\">{error}</p>\r\n  }\r\n\r\n  if (loading) {\r\n    return (\r\n      <div className=\"flex h-32 items-center justify-center\">\r\n        <Spinner className=\"h-6 w-6 text-muted-foreground\" />\r\n      </div>\r\n    )\r\n  }\r\n\r\n  if (!items.length) {\r\n    return <p className=\"text-sm text-muted-foreground\">{translate('sales.widgets.newOrders.empty', 'No orders found')}</p>\r\n  }\r\n\r\n  return (\r\n    <ul className=\"space-y-3\">\r\n      {items.map((item) => {\r\n        const detailHref = resolveDetailHref(item)\r\n        const amountLabel = formatAmount(item.grossAmount, item.currency, locale)\r\n        const createdLabel = formatRelativeTime(item.createdAt) ?? ''\r\n        return (\r\n          <li key={item.id} className=\"rounded-md border p-3\">\r\n            <div className=\"flex items-start justify-between gap-3\">\r\n              <div className=\"space-y-1\">\r\n                <div className=\"flex items-center gap-2\">\r\n                  {detailHref ? (\r\n                    <Link href={detailHref} className=\"text-sm font-semibold text-foreground hover:underline\">\r\n                      {item.orderNumber}\r\n                    </Link>\r\n                  ) : (\r\n                    <span className=\"text-sm font-semibold text-foreground\">{item.orderNumber}</span>\r\n                  )}\r\n                  {item.status ? (\r\n                    <Badge variant=\"outline\" className=\"text-xs\">\r\n                      {item.status}\r\n                    </Badge>\r\n                  ) : null}\r\n                </div>\r\n                <p className=\"text-xs text-muted-foreground\">\r\n                  {item.customerName ?? translate('sales.widgets.newOrders.noCustomer', 'No customer')}\r\n                </p>\r\n                <p className=\"text-xs text-muted-foreground\">{createdLabel}</p>\r\n              </div>\r\n              <div className=\"text-right\">\r\n                <p className=\"text-sm font-semibold\">{amountLabel}</p>\r\n              </div>\r\n            </div>\r\n          </li>\r\n        )\r\n      })}\r\n    </ul>\r\n  )\r\n}\r\n\r\nexport default SalesNewOrdersWidget\r\n"],
-  "mappings": ";AAoIQ,SACE,KADF;AAlIR,YAAY,WAAW;AACvB,OAAO,UAAU;AAEjB,SAAS,eAAe;AACxB,SAAS,aAAa;AACtB;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,eAAe;AACxB,SAAS,aAAa;AACtB,SAAS,0BAA0B;AACnC,SAAS,YAAY;AACrB,SAAS,kBAAkB,qCAAyF;AACpH,SAAS,YAAY,kBAAkB,sBAAsB,oBAAoB;AAmBjF,SAAS,mBAAmB,SAAqD;AAC/E,QAAM,WAAW,MAAM,QAAQ,SAAS,KAAK,IAAI,SAAS,QAAQ,CAAC;AACnE,SAAO,SACJ,IAAI,CAAC,SAAS;AACb,QAAI,CAAC,QAAQ,OAAO,SAAS,SAAU,QAAO;AAC9C,UAAM,OAAO;AACb,UAAM,KAAK,WAAW,KAAK,EAAE;AAC7B,UAAM,cAAc,WAAW,KAAK,WAAW;AAC/C,UAAM,YAAY,WAAW,KAAK,SAAS;AAC3C,QAAI,CAAC,MAAM,CAAC,eAAe,CAAC,UAAW,QAAO;AAC9C,WAAO;AAAA,MACL;AAAA,MACA;AAAA,MACA,QAAQ,WAAW,KAAK,MAAM;AAAA,MAC9B,cAAc,WAAW,KAAK,YAAY;AAAA,MAC1C,kBAAkB,WAAW,KAAK,gBAAgB;AAAA,MAClD,WAAW,WAAW,KAAK,SAAS,KAAK;AAAA,MACzC,aAAa,WAAW,KAAK,WAAW,KAAK;AAAA,MAC7C,UAAU,WAAW,KAAK,QAAQ;AAAA,MAClC;AAAA,IACF;AAAA,EACF,CAAC,EACA,OAAO,CAAC,SAA+B,CAAC,CAAC,IAAI;AAClD;AAEA,eAAe,cAAc,UAA2D;AACtF,QAAM,SAAS,IAAI,gBAAgB;AAAA,IACjC,OAAO,OAAO,SAAS,QAAQ;AAAA,IAC/B,YAAY,SAAS;AAAA,EACvB,CAAC;AACD,MAAI,SAAS,eAAe,UAAU;AACpC,QAAI,SAAS,WAAY,QAAO,IAAI,cAAc,SAAS,UAAU;AACrE,QAAI,SAAS,SAAU,QAAO,IAAI,YAAY,SAAS,QAAQ;AAAA,EACjE;AAEA,QAAM,OAAO,MAAM,QAA6B,2CAA2C,OAAO,SAAS,CAAC,EAAE;AAC9G,MAAI,CAAC,KAAK,IAAI;AACZ,UAAM,UACJ,OAAQ,KAAK,QAA2C,UAAU,WAC5D,KAAK,OAAmC,QAC1C,8BAA8B,KAAK,MAAM;AAC/C,UAAM,IAAI,MAAM,OAAO;AAAA,EACzB;AACA,SAAO,mBAAmB,KAAK,UAAU,IAAI;AAC/C;AAEA,SAAS,kBAAkB,MAAmC;AAC5D,SAAO,KAAK,KAAK,yBAAyB,mBAAmB,KAAK,EAAE,CAAC,KAAK;AAC5E;AAGA,MAAM,uBAAwF,CAAC;AAAA,EAC7F;AAAA,EACA,WAAW;AAAA,EACX;AAAA,EACA;AAAA,EACA;AACF,MAAM;AACJ,QAAM,YAAY,KAAK;AACvB,QAAM,WAAW,MAAM,QAAQ,MAAM,8BAA8B,QAAQ,GAAG,CAAC,QAAQ,CAAC;AACxF,QAAM,CAAC,OAAO,QAAQ,IAAI,MAAM,SAAyB,CAAC,CAAC;AAC3D,QAAM,CAAC,SAAS,UAAU,IAAI,MAAM,SAAS,IAAI;AACjD,QAAM,CAAC,OAAO,QAAQ,IAAI,MAAM,SAAwB,IAAI;AAC5D,QAAM,CAAC,QAAQ,SAAS,IAAI,MAAM,SAA6B,MAAS;AAExE,QAAM,UAAU,MAAM;AACpB,QAAI,OAAO,cAAc,aAAa;AACpC,gBAAU,UAAU,QAAQ;AAAA,IAC9B;AAAA,EACF,GAAG,CAAC,CAAC;AAEL,QAAM,UAAU,MAAM,YAAY,YAAY;AAC5C,2BAAuB,IAAI;AAC3B,eAAW,IAAI;AACf,aAAS,IAAI;AACb,QAAI;AACF,YAAM,OAAO,MAAM,cAAc,QAAQ;AACzC,eAAS,IAAI;AAAA,IACf,SAAS,KAAK;AACZ,cAAQ,MAAM,yCAAyC,GAAG;AAC1D,eAAS,UAAU,iCAAiC,uBAAuB,CAAC;AAAA,IAC9E,UAAE;AACA,iBAAW,KAAK;AAChB,6BAAuB,KAAK;AAAA,IAC9B;AAAA,EACF,GAAG,CAAC,UAAU,sBAAsB,SAAS,CAAC;AAE9C,QAAM,UAAU,MAAM;AACpB,YAAQ,EAAE,MAAM,MAAM;AAAA,IAAC,CAAC;AAAA,EAC1B,GAAG,CAAC,SAAS,YAAY,CAAC;AAE1B,MAAI,SAAS,YAAY;AACvB,WACE,qBAAC,SAAI,WAAU,qBACb;AAAA,2BAAC,SAAI,WAAU,eACb;AAAA,4BAAC,WAAM,SAAQ,8BAA6B,WAAU,yDACnD,oBAAU,6CAA6C,kBAAkB,GAC5E;AAAA,QACA;AAAA,UAAC;AAAA;AAAA,YACC,IAAG;AAAA,YACH,MAAK;AAAA,YACL,KAAK;AAAA,YACL,KAAK;AAAA,YACL,WAAU;AAAA,YACV,OAAO,SAAS;AAAA,YAChB,UAAU,CAAC,UAAU;AACnB,oBAAM,OAAO,OAAO,MAAM,OAAO,KAAK;AACtC,kBAAI,CAAC,OAAO,SAAS,IAAI,EAAG;AAC5B,oBAAM,UAAU,KAAK,IAAI,IAAI,KAAK,IAAI,GAAG,KAAK,MAAM,IAAI,CAAC,CAAC;AAC1D,iCAAmB,EAAE,GAAG,UAAU,UAAU,QAAQ,CAAC;AAAA,YACvD;AAAA;AAAA,QACF;AAAA,SACF;AAAA,MAEA,qBAAC,SAAI,WAAU,eACb;AAAA,4BAAC,WAAM,SAAQ,gCAA+B,WAAU,yDACrD,oBAAU,+CAA+C,aAAa,GACzE;AAAA,QACA;AAAA,UAAC;AAAA;AAAA,YACC,OAAO,SAAS;AAAA,YAChB,eAAe,CAAC,UAAU;AACxB,iCAAmB,EAAE,GAAG,UAAU,YAAY,MAA0B,CAAC;AAAA,YAC3E;AAAA,YAEA;AAAA,kCAAC,iBAAc,IAAG,gCAA+B,MAAK,MACpD,8BAAC,eAAY,GACf;AAAA,cACA,qBAAC,iBACC;AAAA,oCAAC,cAAW,OAAM,WAAW,oBAAU,4CAA4C,eAAe,GAAE;AAAA,gBACpG,oBAAC,cAAW,OAAM,UAAU,oBAAU,2CAA2C,aAAa,GAAE;AAAA,gBAChG,oBAAC,cAAW,OAAM,WAAW,oBAAU,4CAA4C,cAAc,GAAE;AAAA,gBACnG,oBAAC,cAAW,OAAM,UAAU,oBAAU,2CAA2C,cAAc,GAAE;AAAA,iBACnG;AAAA;AAAA;AAAA,QACF;AAAA,SACF;AAAA,MAEC,SAAS,eAAe,WACvB,qBAAC,SAAI,WAAU,cACb;AAAA,6BAAC,SAAI,WAAU,eACb;AAAA,8BAAC,WAAM,SAAQ,gCAA+B,WAAU,yDACrD,oBAAU,+CAA+C,MAAM,GAClE;AAAA,UACA;AAAA,YAAC;AAAA;AAAA,cACC,IAAG;AAAA,cACH,MAAK;AAAA,cACL,OAAO,iBAAiB,SAAS,UAAU;AAAA,cAC3C,UAAU,CAAC,UAAU;AACnB,mCAAmB,EAAE,GAAG,UAAU,YAAY,MAAM,OAAO,MAAM,CAAC;AAAA,cACpE;AAAA,cACA,SAAS;AAAA,cACT,SAAS;AAAA,cACT,WAAU;AAAA;AAAA,UACZ;AAAA,WACF;AAAA,QACA,qBAAC,SAAI,WAAU,eACb;AAAA,8BAAC,WAAM,SAAQ,8BAA6B,WAAU,yDACnD,oBAAU,6CAA6C,IAAI,GAC9D;AAAA,UACA;AAAA,YAAC;AAAA;AAAA,cACC,IAAG;AAAA,cACH,MAAK;AAAA,cACL,OAAO,iBAAiB,SAAS,QAAQ;AAAA,cACzC,UAAU,CAAC,UAAU;AACnB,mCAAmB,EAAE,GAAG,UAAU,UAAU,MAAM,OAAO,MAAM,CAAC;AAAA,cAClE;AAAA,cACA,SAAS;AAAA,cACT,SAAS;AAAA,cACT,WAAU;AAAA;AAAA,UACZ;AAAA,WACF;AAAA,SACF,IACE;AAAA,OACN;AAAA,EAEJ;AAEA,MAAI,OAAO;AACT,WAAO,oBAAC,OAAE,WAAU,4BAA4B,iBAAM;AAAA,EACxD;AAEA,MAAI,SAAS;AACX,WACE,oBAAC,SAAI,WAAU,yCACb,8BAAC,WAAQ,WAAU,iCAAgC,GACrD;AAAA,EAEJ;AAEA,MAAI,CAAC,MAAM,QAAQ;AACjB,WAAO,oBAAC,OAAE,WAAU,iCAAiC,oBAAU,iCAAiC,iBAAiB,GAAE;AAAA,EACrH;AAEA,SACE,oBAAC,QAAG,WAAU,aACX,gBAAM,IAAI,CAAC,SAAS;AACnB,UAAM,aAAa,kBAAkB,IAAI;AACzC,UAAM,cAAc,aAAa,KAAK,aAAa,KAAK,UAAU,MAAM;AACxE,UAAM,eAAe,mBAAmB,KAAK,SAAS,KAAK;AAC3D,WACE,oBAAC,QAAiB,WAAU,yBAC1B,+BAAC,SAAI,WAAU,0CACb;AAAA,2BAAC,SAAI,WAAU,aACb;AAAA,6BAAC,SAAI,WAAU,2BACZ;AAAA,uBACC,oBAAC,QAAK,MAAM,YAAY,WAAU,yDAC/B,eAAK,aACR,IAEA,oBAAC,UAAK,WAAU,yCAAyC,eAAK,aAAY;AAAA,UAE3E,KAAK,SACJ,oBAAC,SAAM,SAAQ,WAAU,WAAU,WAChC,eAAK,QACR,IACE;AAAA,WACN;AAAA,QACA,oBAAC,OAAE,WAAU,iCACV,eAAK,gBAAgB,UAAU,sCAAsC,aAAa,GACrF;AAAA,QACA,oBAAC,OAAE,WAAU,iCAAiC,wBAAa;AAAA,SAC7D;AAAA,MACA,oBAAC,SAAI,WAAU,cACb,8BAAC,OAAE,WAAU,yBAAyB,uBAAY,GACpD;AAAA,OACF,KAzBO,KAAK,EA0Bd;AAAA,EAEJ,CAAC,GACH;AAEJ;AAEA,IAAO,wBAAQ;",
+  "sourcesContent": ["\"use client\"\n\nimport * as React from 'react'\nimport Link from 'next/link'\nimport type { DashboardWidgetComponentProps } from '@open-mercato/shared/modules/dashboard/widgets'\nimport { apiCall } from '@open-mercato/ui/backend/utils/apiCall'\nimport { Input } from '@open-mercato/ui/primitives/input'\nimport {\n  Select,\n  SelectContent,\n  SelectItem,\n  SelectTrigger,\n  SelectValue,\n} from '@open-mercato/ui/primitives/select'\nimport { Spinner } from '@open-mercato/ui/primitives/spinner'\nimport { Badge } from '@open-mercato/ui/primitives/badge'\nimport { formatRelativeTime } from '@open-mercato/shared/lib/time'\nimport { useT } from '@open-mercato/shared/lib/i18n/context'\nimport { DEFAULT_SETTINGS, hydrateSalesNewOrdersSettings, type DatePeriodOption, type SalesNewOrdersSettings } from './config'\nimport { readString, toDateInputValue, openNativeDatePicker, formatAmount } from '../shared'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('sales')\n\ntype NewOrderItem = {\n  id: string\n  orderNumber: string\n  status: string | null\n  customerName: string | null\n  customerEntityId: string | null\n  netAmount: string\n  grossAmount: string\n  currency: string | null\n  createdAt: string\n}\n\ntype NewOrdersApiPayload = {\n  items?: unknown[]\n  error?: string\n}\n\nfunction parseNewOrderItems(payload: NewOrdersApiPayload | null): NewOrderItem[] {\n  const rawItems = Array.isArray(payload?.items) ? payload?.items : []\n  return rawItems\n    .map((item) => {\n      if (!item || typeof item !== 'object') return null\n      const data = item as Record<string, unknown>\n      const id = readString(data.id)\n      const orderNumber = readString(data.orderNumber)\n      const createdAt = readString(data.createdAt)\n      if (!id || !orderNumber || !createdAt) return null\n      return {\n        id,\n        orderNumber,\n        status: readString(data.status),\n        customerName: readString(data.customerName),\n        customerEntityId: readString(data.customerEntityId),\n        netAmount: readString(data.netAmount) ?? '0',\n        grossAmount: readString(data.grossAmount) ?? '0',\n        currency: readString(data.currency),\n        createdAt,\n      }\n    })\n    .filter((item): item is NewOrderItem => !!item)\n}\n\nasync function loadNewOrders(settings: SalesNewOrdersSettings): Promise<NewOrderItem[]> {\n  const params = new URLSearchParams({\n    limit: String(settings.pageSize),\n    datePeriod: settings.datePeriod,\n  })\n  if (settings.datePeriod === 'custom') {\n    if (settings.customFrom) params.set('customFrom', settings.customFrom)\n    if (settings.customTo) params.set('customTo', settings.customTo)\n  }\n\n  const call = await apiCall<NewOrdersApiPayload>(`/api/sales/dashboard/widgets/new-orders?${params.toString()}`)\n  if (!call.ok) {\n    const message =\n      typeof (call.result as Record<string, unknown> | null)?.error === 'string'\n        ? ((call.result as Record<string, unknown>).error as string)\n        : `Request failed with status ${call.status}`\n    throw new Error(message)\n  }\n  return parseNewOrderItems(call.result ?? null)\n}\n\nfunction resolveDetailHref(item: NewOrderItem): string | null {\n  return item.id ? `/backend/sales/orders/${encodeURIComponent(item.id)}` : null\n}\n\n\nconst SalesNewOrdersWidget: React.FC<DashboardWidgetComponentProps<SalesNewOrdersSettings>> = ({\n  mode,\n  settings = DEFAULT_SETTINGS,\n  onSettingsChange,\n  refreshToken,\n  onRefreshStateChange,\n}) => {\n  const translate = useT()\n  const hydrated = React.useMemo(() => hydrateSalesNewOrdersSettings(settings), [settings])\n  const [items, setItems] = React.useState<NewOrderItem[]>([])\n  const [loading, setLoading] = React.useState(true)\n  const [error, setError] = React.useState<string | null>(null)\n  const [locale, setLocale] = React.useState<string | undefined>(undefined)\n\n  React.useEffect(() => {\n    if (typeof navigator !== 'undefined') {\n      setLocale(navigator.language)\n    }\n  }, [])\n\n  const refresh = React.useCallback(async () => {\n    onRefreshStateChange?.(true)\n    setLoading(true)\n    setError(null)\n    try {\n      const data = await loadNewOrders(hydrated)\n      setItems(data)\n    } catch (err) {\n      logger.error('Failed to load new orders widget data', { err })\n      setError(translate('sales.widgets.newOrders.error', 'Failed to load orders'))\n    } finally {\n      setLoading(false)\n      onRefreshStateChange?.(false)\n    }\n  }, [hydrated, onRefreshStateChange, translate])\n\n  React.useEffect(() => {\n    refresh().catch(() => {})\n  }, [refresh, refreshToken])\n\n  if (mode === 'settings') {\n    return (\n      <div className=\"space-y-4 text-sm\">\n        <div className=\"space-y-1.5\">\n          <label htmlFor=\"sales-new-orders-page-size\" className=\"text-xs font-semibold uppercase text-muted-foreground\">\n            {translate('sales.widgets.newOrders.settings.pageSize', 'Number of Orders')}\n          </label>\n          <Input\n            id=\"sales-new-orders-page-size\"\n            type=\"number\"\n            min={1}\n            max={20}\n            className=\"w-24\"\n            value={hydrated.pageSize}\n            onChange={(event) => {\n              const next = Number(event.target.value)\n              if (!Number.isFinite(next)) return\n              const clamped = Math.min(20, Math.max(1, Math.floor(next)))\n              onSettingsChange?.({ ...hydrated, pageSize: clamped })\n            }}\n          />\n        </div>\n\n        <div className=\"space-y-1.5\">\n          <label htmlFor=\"sales-new-orders-date-period\" className=\"text-xs font-semibold uppercase text-muted-foreground\">\n            {translate('sales.widgets.newOrders.settings.datePeriod', 'Date Period')}\n          </label>\n          <Select\n            value={hydrated.datePeriod}\n            onValueChange={(value) => {\n              onSettingsChange?.({ ...hydrated, datePeriod: value as DatePeriodOption })\n            }}\n          >\n            <SelectTrigger id=\"sales-new-orders-date-period\" size=\"sm\">\n              <SelectValue />\n            </SelectTrigger>\n            <SelectContent>\n              <SelectItem value=\"last24h\">{translate('sales.widgets.newOrders.settings.last24h', 'Last 24 hours')}</SelectItem>\n              <SelectItem value=\"last7d\">{translate('sales.widgets.newOrders.settings.last7d', 'Last 7 days')}</SelectItem>\n              <SelectItem value=\"last30d\">{translate('sales.widgets.newOrders.settings.last30d', 'Last 30 days')}</SelectItem>\n              <SelectItem value=\"custom\">{translate('sales.widgets.newOrders.settings.custom', 'Custom range')}</SelectItem>\n            </SelectContent>\n          </Select>\n        </div>\n\n        {hydrated.datePeriod === 'custom' ? (\n          <div className=\"grid gap-3\">\n            <div className=\"space-y-1.5\">\n              <label htmlFor=\"sales-new-orders-custom-from\" className=\"text-xs font-semibold uppercase text-muted-foreground\">\n                {translate('sales.widgets.newOrders.settings.customFrom', 'From')}\n              </label>\n              <input\n                id=\"sales-new-orders-custom-from\"\n                type=\"date\"\n                value={toDateInputValue(hydrated.customFrom)}\n                onChange={(event) => {\n                  onSettingsChange?.({ ...hydrated, customFrom: event.target.value })\n                }}\n                onFocus={openNativeDatePicker}\n                onClick={openNativeDatePicker}\n                className=\"w-full rounded-md border border-input bg-background px-2 py-1 text-sm text-foreground focus-visible:border-ring focus-visible:outline-none focus-visible:ring-1 focus-visible:ring-ring\"\n              />\n            </div>\n            <div className=\"space-y-1.5\">\n              <label htmlFor=\"sales-new-orders-custom-to\" className=\"text-xs font-semibold uppercase text-muted-foreground\">\n                {translate('sales.widgets.newOrders.settings.customTo', 'To')}\n              </label>\n              <input\n                id=\"sales-new-orders-custom-to\"\n                type=\"date\"\n                value={toDateInputValue(hydrated.customTo)}\n                onChange={(event) => {\n                  onSettingsChange?.({ ...hydrated, customTo: event.target.value })\n                }}\n                onFocus={openNativeDatePicker}\n                onClick={openNativeDatePicker}\n                className=\"w-full rounded-md border border-input bg-background px-2 py-1 text-sm text-foreground focus-visible:border-ring focus-visible:outline-none focus-visible:ring-1 focus-visible:ring-ring\"\n              />\n            </div>\n          </div>\n        ) : null}\n      </div>\n    )\n  }\n\n  if (error) {\n    return <p className=\"text-sm text-destructive\">{error}</p>\n  }\n\n  if (loading) {\n    return (\n      <div className=\"flex h-32 items-center justify-center\">\n        <Spinner className=\"h-6 w-6 text-muted-foreground\" />\n      </div>\n    )\n  }\n\n  if (!items.length) {\n    return <p className=\"text-sm text-muted-foreground\">{translate('sales.widgets.newOrders.empty', 'No orders found')}</p>\n  }\n\n  return (\n    <ul className=\"space-y-3\">\n      {items.map((item) => {\n        const detailHref = resolveDetailHref(item)\n        const amountLabel = formatAmount(item.grossAmount, item.currency, locale)\n        const createdLabel = formatRelativeTime(item.createdAt) ?? ''\n        return (\n          <li key={item.id} className=\"rounded-md border p-3\">\n            <div className=\"flex items-start justify-between gap-3\">\n              <div className=\"space-y-1\">\n                <div className=\"flex items-center gap-2\">\n                  {detailHref ? (\n                    <Link href={detailHref} className=\"text-sm font-semibold text-foreground hover:underline\">\n                      {item.orderNumber}\n                    </Link>\n                  ) : (\n                    <span className=\"text-sm font-semibold text-foreground\">{item.orderNumber}</span>\n                  )}\n                  {item.status ? (\n                    <Badge variant=\"outline\" className=\"text-xs\">\n                      {item.status}\n                    </Badge>\n                  ) : null}\n                </div>\n                <p className=\"text-xs text-muted-foreground\">\n                  {item.customerName ?? translate('sales.widgets.newOrders.noCustomer', 'No customer')}\n                </p>\n                <p className=\"text-xs text-muted-foreground\">{createdLabel}</p>\n              </div>\n              <div className=\"text-right\">\n                <p className=\"text-sm font-semibold\">{amountLabel}</p>\n              </div>\n            </div>\n          </li>\n        )\n      })}\n    </ul>\n  )\n}\n\nexport default SalesNewOrdersWidget\n"],
+  "mappings": ";AAuIQ,SACE,KADF;AArIR,YAAY,WAAW;AACvB,OAAO,UAAU;AAEjB,SAAS,eAAe;AACxB,SAAS,aAAa;AACtB;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,eAAe;AACxB,SAAS,aAAa;AACtB,SAAS,0BAA0B;AACnC,SAAS,YAAY;AACrB,SAAS,kBAAkB,qCAAyF;AACpH,SAAS,YAAY,kBAAkB,sBAAsB,oBAAoB;AACjF,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,OAAO;AAmBnC,SAAS,mBAAmB,SAAqD;AAC/E,QAAM,WAAW,MAAM,QAAQ,SAAS,KAAK,IAAI,SAAS,QAAQ,CAAC;AACnE,SAAO,SACJ,IAAI,CAAC,SAAS;AACb,QAAI,CAAC,QAAQ,OAAO,SAAS,SAAU,QAAO;AAC9C,UAAM,OAAO;AACb,UAAM,KAAK,WAAW,KAAK,EAAE;AAC7B,UAAM,cAAc,WAAW,KAAK,WAAW;AAC/C,UAAM,YAAY,WAAW,KAAK,SAAS;AAC3C,QAAI,CAAC,MAAM,CAAC,eAAe,CAAC,UAAW,QAAO;AAC9C,WAAO;AAAA,MACL;AAAA,MACA;AAAA,MACA,QAAQ,WAAW,KAAK,MAAM;AAAA,MAC9B,cAAc,WAAW,KAAK,YAAY;AAAA,MAC1C,kBAAkB,WAAW,KAAK,gBAAgB;AAAA,MAClD,WAAW,WAAW,KAAK,SAAS,KAAK;AAAA,MACzC,aAAa,WAAW,KAAK,WAAW,KAAK;AAAA,MAC7C,UAAU,WAAW,KAAK,QAAQ;AAAA,MAClC;AAAA,IACF;AAAA,EACF,CAAC,EACA,OAAO,CAAC,SAA+B,CAAC,CAAC,IAAI;AAClD;AAEA,eAAe,cAAc,UAA2D;AACtF,QAAM,SAAS,IAAI,gBAAgB;AAAA,IACjC,OAAO,OAAO,SAAS,QAAQ;AAAA,IAC/B,YAAY,SAAS;AAAA,EACvB,CAAC;AACD,MAAI,SAAS,eAAe,UAAU;AACpC,QAAI,SAAS,WAAY,QAAO,IAAI,cAAc,SAAS,UAAU;AACrE,QAAI,SAAS,SAAU,QAAO,IAAI,YAAY,SAAS,QAAQ;AAAA,EACjE;AAEA,QAAM,OAAO,MAAM,QAA6B,2CAA2C,OAAO,SAAS,CAAC,EAAE;AAC9G,MAAI,CAAC,KAAK,IAAI;AACZ,UAAM,UACJ,OAAQ,KAAK,QAA2C,UAAU,WAC5D,KAAK,OAAmC,QAC1C,8BAA8B,KAAK,MAAM;AAC/C,UAAM,IAAI,MAAM,OAAO;AAAA,EACzB;AACA,SAAO,mBAAmB,KAAK,UAAU,IAAI;AAC/C;AAEA,SAAS,kBAAkB,MAAmC;AAC5D,SAAO,KAAK,KAAK,yBAAyB,mBAAmB,KAAK,EAAE,CAAC,KAAK;AAC5E;AAGA,MAAM,uBAAwF,CAAC;AAAA,EAC7F;AAAA,EACA,WAAW;AAAA,EACX;AAAA,EACA;AAAA,EACA;AACF,MAAM;AACJ,QAAM,YAAY,KAAK;AACvB,QAAM,WAAW,MAAM,QAAQ,MAAM,8BAA8B,QAAQ,GAAG,CAAC,QAAQ,CAAC;AACxF,QAAM,CAAC,OAAO,QAAQ,IAAI,MAAM,SAAyB,CAAC,CAAC;AAC3D,QAAM,CAAC,SAAS,UAAU,IAAI,MAAM,SAAS,IAAI;AACjD,QAAM,CAAC,OAAO,QAAQ,IAAI,MAAM,SAAwB,IAAI;AAC5D,QAAM,CAAC,QAAQ,SAAS,IAAI,MAAM,SAA6B,MAAS;AAExE,QAAM,UAAU,MAAM;AACpB,QAAI,OAAO,cAAc,aAAa;AACpC,gBAAU,UAAU,QAAQ;AAAA,IAC9B;AAAA,EACF,GAAG,CAAC,CAAC;AAEL,QAAM,UAAU,MAAM,YAAY,YAAY;AAC5C,2BAAuB,IAAI;AAC3B,eAAW,IAAI;AACf,aAAS,IAAI;AACb,QAAI;AACF,YAAM,OAAO,MAAM,cAAc,QAAQ;AACzC,eAAS,IAAI;AAAA,IACf,SAAS,KAAK;AACZ,aAAO,MAAM,yCAAyC,EAAE,IAAI,CAAC;AAC7D,eAAS,UAAU,iCAAiC,uBAAuB,CAAC;AAAA,IAC9E,UAAE;AACA,iBAAW,KAAK;AAChB,6BAAuB,KAAK;AAAA,IAC9B;AAAA,EACF,GAAG,CAAC,UAAU,sBAAsB,SAAS,CAAC;AAE9C,QAAM,UAAU,MAAM;AACpB,YAAQ,EAAE,MAAM,MAAM;AAAA,IAAC,CAAC;AAAA,EAC1B,GAAG,CAAC,SAAS,YAAY,CAAC;AAE1B,MAAI,SAAS,YAAY;AACvB,WACE,qBAAC,SAAI,WAAU,qBACb;AAAA,2BAAC,SAAI,WAAU,eACb;AAAA,4BAAC,WAAM,SAAQ,8BAA6B,WAAU,yDACnD,oBAAU,6CAA6C,kBAAkB,GAC5E;AAAA,QACA;AAAA,UAAC;AAAA;AAAA,YACC,IAAG;AAAA,YACH,MAAK;AAAA,YACL,KAAK;AAAA,YACL,KAAK;AAAA,YACL,WAAU;AAAA,YACV,OAAO,SAAS;AAAA,YAChB,UAAU,CAAC,UAAU;AACnB,oBAAM,OAAO,OAAO,MAAM,OAAO,KAAK;AACtC,kBAAI,CAAC,OAAO,SAAS,IAAI,EAAG;AAC5B,oBAAM,UAAU,KAAK,IAAI,IAAI,KAAK,IAAI,GAAG,KAAK,MAAM,IAAI,CAAC,CAAC;AAC1D,iCAAmB,EAAE,GAAG,UAAU,UAAU,QAAQ,CAAC;AAAA,YACvD;AAAA;AAAA,QACF;AAAA,SACF;AAAA,MAEA,qBAAC,SAAI,WAAU,eACb;AAAA,4BAAC,WAAM,SAAQ,gCAA+B,WAAU,yDACrD,oBAAU,+CAA+C,aAAa,GACzE;AAAA,QACA;AAAA,UAAC;AAAA;AAAA,YACC,OAAO,SAAS;AAAA,YAChB,eAAe,CAAC,UAAU;AACxB,iCAAmB,EAAE,GAAG,UAAU,YAAY,MAA0B,CAAC;AAAA,YAC3E;AAAA,YAEA;AAAA,kCAAC,iBAAc,IAAG,gCAA+B,MAAK,MACpD,8BAAC,eAAY,GACf;AAAA,cACA,qBAAC,iBACC;AAAA,oCAAC,cAAW,OAAM,WAAW,oBAAU,4CAA4C,eAAe,GAAE;AAAA,gBACpG,oBAAC,cAAW,OAAM,UAAU,oBAAU,2CAA2C,aAAa,GAAE;AAAA,gBAChG,oBAAC,cAAW,OAAM,WAAW,oBAAU,4CAA4C,cAAc,GAAE;AAAA,gBACnG,oBAAC,cAAW,OAAM,UAAU,oBAAU,2CAA2C,cAAc,GAAE;AAAA,iBACnG;AAAA;AAAA;AAAA,QACF;AAAA,SACF;AAAA,MAEC,SAAS,eAAe,WACvB,qBAAC,SAAI,WAAU,cACb;AAAA,6BAAC,SAAI,WAAU,eACb;AAAA,8BAAC,WAAM,SAAQ,gCAA+B,WAAU,yDACrD,oBAAU,+CAA+C,MAAM,GAClE;AAAA,UACA;AAAA,YAAC;AAAA;AAAA,cACC,IAAG;AAAA,cACH,MAAK;AAAA,cACL,OAAO,iBAAiB,SAAS,UAAU;AAAA,cAC3C,UAAU,CAAC,UAAU;AACnB,mCAAmB,EAAE,GAAG,UAAU,YAAY,MAAM,OAAO,MAAM,CAAC;AAAA,cACpE;AAAA,cACA,SAAS;AAAA,cACT,SAAS;AAAA,cACT,WAAU;AAAA;AAAA,UACZ;AAAA,WACF;AAAA,QACA,qBAAC,SAAI,WAAU,eACb;AAAA,8BAAC,WAAM,SAAQ,8BAA6B,WAAU,yDACnD,oBAAU,6CAA6C,IAAI,GAC9D;AAAA,UACA;AAAA,YAAC;AAAA;AAAA,cACC,IAAG;AAAA,cACH,MAAK;AAAA,cACL,OAAO,iBAAiB,SAAS,QAAQ;AAAA,cACzC,UAAU,CAAC,UAAU;AACnB,mCAAmB,EAAE,GAAG,UAAU,UAAU,MAAM,OAAO,MAAM,CAAC;AAAA,cAClE;AAAA,cACA,SAAS;AAAA,cACT,SAAS;AAAA,cACT,WAAU;AAAA;AAAA,UACZ;AAAA,WACF;AAAA,SACF,IACE;AAAA,OACN;AAAA,EAEJ;AAEA,MAAI,OAAO;AACT,WAAO,oBAAC,OAAE,WAAU,4BAA4B,iBAAM;AAAA,EACxD;AAEA,MAAI,SAAS;AACX,WACE,oBAAC,SAAI,WAAU,yCACb,8BAAC,WAAQ,WAAU,iCAAgC,GACrD;AAAA,EAEJ;AAEA,MAAI,CAAC,MAAM,QAAQ;AACjB,WAAO,oBAAC,OAAE,WAAU,iCAAiC,oBAAU,iCAAiC,iBAAiB,GAAE;AAAA,EACrH;AAEA,SACE,oBAAC,QAAG,WAAU,aACX,gBAAM,IAAI,CAAC,SAAS;AACnB,UAAM,aAAa,kBAAkB,IAAI;AACzC,UAAM,cAAc,aAAa,KAAK,aAAa,KAAK,UAAU,MAAM;AACxE,UAAM,eAAe,mBAAmB,KAAK,SAAS,KAAK;AAC3D,WACE,oBAAC,QAAiB,WAAU,yBAC1B,+BAAC,SAAI,WAAU,0CACb;AAAA,2BAAC,SAAI,WAAU,aACb;AAAA,6BAAC,SAAI,WAAU,2BACZ;AAAA,uBACC,oBAAC,QAAK,MAAM,YAAY,WAAU,yDAC/B,eAAK,aACR,IAEA,oBAAC,UAAK,WAAU,yCAAyC,eAAK,aAAY;AAAA,UAE3E,KAAK,SACJ,oBAAC,SAAM,SAAQ,WAAU,WAAU,WAChC,eAAK,QACR,IACE;AAAA,WACN;AAAA,QACA,oBAAC,OAAE,WAAU,iCACV,eAAK,gBAAgB,UAAU,sCAAsC,aAAa,GACrF;AAAA,QACA,oBAAC,OAAE,WAAU,iCAAiC,wBAAa;AAAA,SAC7D;AAAA,MACA,oBAAC,SAAI,WAAU,cACb,8BAAC,OAAE,WAAU,yBAAyB,uBAAY,GACpD;AAAA,OACF,KAzBO,KAAK,EA0Bd;AAAA,EAEJ,CAAC,GACH;AAEJ;AAEA,IAAO,wBAAQ;",
   "names": []
 }

package/dist/modules/sales/widgets/dashboard/new-quotes/widget.client.js

@@ -17,6 +17,8 @@ import { formatRelativeTime } from "@open-mercato/shared/lib/time";
 import { useT } from "@open-mercato/shared/lib/i18n/context";
 import { DEFAULT_SETTINGS, hydrateSalesNewQuotesSettings } from "./config.js";
 import { readString, toDateInputValue, openNativeDatePicker, formatAmount } from "../shared.js";
+import { createLogger } from "@open-mercato/shared/lib/logger";
+const logger = createLogger("sales");
 function parseNewQuoteItems(payload) {
   const rawItems = Array.isArray(payload?.items) ? payload?.items : [];
   return rawItems.map((item) => {
@@ -87,7 +89,7 @@ const SalesNewQuotesWidget = ({
       const data = await loadNewQuotes(hydrated);
       setItems(data);
     } catch (err) {
-      console.error("Failed to load new quotes widget data", err);
+      logger.error("Failed to load new quotes widget data", { err });
       setError(translate("sales.widgets.newQuotes.error", "Failed to load quotes"));
     } finally {
       setLoading(false);

package/dist/modules/sales/widgets/dashboard/new-quotes/widget.client.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../src/modules/sales/widgets/dashboard/new-quotes/widget.client.tsx"],
-  "sourcesContent": ["\"use client\"\r\n\r\nimport * as React from 'react'\r\nimport Link from 'next/link'\r\nimport type { DashboardWidgetComponentProps } from '@open-mercato/shared/modules/dashboard/widgets'\r\nimport { apiCall } from '@open-mercato/ui/backend/utils/apiCall'\r\nimport { Input } from '@open-mercato/ui/primitives/input'\r\nimport {\r\n  Select,\r\n  SelectContent,\r\n  SelectItem,\r\n  SelectTrigger,\r\n  SelectValue,\r\n} from '@open-mercato/ui/primitives/select'\r\nimport { Spinner } from '@open-mercato/ui/primitives/spinner'\r\nimport { Badge } from '@open-mercato/ui/primitives/badge'\r\nimport { formatRelativeTime } from '@open-mercato/shared/lib/time'\r\nimport { useT } from '@open-mercato/shared/lib/i18n/context'\r\nimport { DEFAULT_SETTINGS, hydrateSalesNewQuotesSettings, type DatePeriodOption, type SalesNewQuotesSettings } from './config'\r\nimport { readString, toDateInputValue, openNativeDatePicker, formatAmount } from '../shared'\r\n\r\ntype NewQuoteItem = {\r\n  id: string\r\n  quoteNumber: string\r\n  status: string | null\r\n  customerName: string | null\r\n  customerEntityId: string | null\r\n  netAmount: string\r\n  grossAmount: string\r\n  currency: string | null\r\n  createdAt: string\r\n  validFrom: string | null\r\n  validUntil: string | null\r\n  convertedOrderId: string | null\r\n}\r\n\r\ntype NewQuotesApiPayload = {\r\n  items?: unknown[]\r\n  error?: string\r\n}\r\n\r\nfunction parseNewQuoteItems(payload: NewQuotesApiPayload | null): NewQuoteItem[] {\r\n  const rawItems = Array.isArray(payload?.items) ? payload?.items : []\r\n  return rawItems\r\n    .map((item) => {\r\n      if (!item || typeof item !== 'object') return null\r\n      const data = item as Record<string, unknown>\r\n      const id = readString(data.id)\r\n      const quoteNumber = readString(data.quoteNumber)\r\n      const createdAt = readString(data.createdAt)\r\n      if (!id || !quoteNumber || !createdAt) return null\r\n      return {\r\n        id,\r\n        quoteNumber,\r\n        status: readString(data.status),\r\n        customerName: readString(data.customerName),\r\n        customerEntityId: readString(data.customerEntityId),\r\n        netAmount: readString(data.netAmount) ?? '0',\r\n        grossAmount: readString(data.grossAmount) ?? '0',\r\n        currency: readString(data.currency),\r\n        createdAt,\r\n        validFrom: readString(data.validFrom),\r\n        validUntil: readString(data.validUntil),\r\n        convertedOrderId: readString(data.convertedOrderId),\r\n      }\r\n    })\r\n    .filter((item): item is NewQuoteItem => !!item)\r\n}\r\n\r\nasync function loadNewQuotes(settings: SalesNewQuotesSettings): Promise<NewQuoteItem[]> {\r\n  const params = new URLSearchParams({\r\n    limit: String(settings.pageSize),\r\n    datePeriod: settings.datePeriod,\r\n  })\r\n  if (settings.datePeriod === 'custom') {\r\n    if (settings.customFrom) params.set('customFrom', settings.customFrom)\r\n    if (settings.customTo) params.set('customTo', settings.customTo)\r\n  }\r\n\r\n  const call = await apiCall<NewQuotesApiPayload>(`/api/sales/dashboard/widgets/new-quotes?${params.toString()}`)\r\n  if (!call.ok) {\r\n    const message =\r\n      typeof (call.result as Record<string, unknown> | null)?.error === 'string'\r\n        ? ((call.result as Record<string, unknown>).error as string)\r\n        : `Request failed with status ${call.status}`\r\n    throw new Error(message)\r\n  }\r\n  return parseNewQuoteItems(call.result ?? null)\r\n}\r\n\r\nfunction resolveDetailHref(item: NewQuoteItem): string | null {\r\n  return item.id ? `/backend/sales/quotes/${encodeURIComponent(item.id)}` : null\r\n}\r\n\r\n\r\nconst SalesNewQuotesWidget: React.FC<DashboardWidgetComponentProps<SalesNewQuotesSettings>> = ({\r\n  mode,\r\n  settings = DEFAULT_SETTINGS,\r\n  onSettingsChange,\r\n  refreshToken,\r\n  onRefreshStateChange,\r\n}) => {\r\n  const translate = useT()\r\n  const hydrated = React.useMemo(() => hydrateSalesNewQuotesSettings(settings), [settings])\r\n  const [items, setItems] = React.useState<NewQuoteItem[]>([])\r\n  const [loading, setLoading] = React.useState(true)\r\n  const [error, setError] = React.useState<string | null>(null)\r\n  const [locale, setLocale] = React.useState<string | undefined>(undefined)\r\n\r\n  React.useEffect(() => {\r\n    if (typeof navigator !== 'undefined') {\r\n      setLocale(navigator.language)\r\n    }\r\n  }, [])\r\n\r\n  const refresh = React.useCallback(async () => {\r\n    onRefreshStateChange?.(true)\r\n    setLoading(true)\r\n    setError(null)\r\n    try {\r\n      const data = await loadNewQuotes(hydrated)\r\n      setItems(data)\r\n    } catch (err) {\r\n      console.error('Failed to load new quotes widget data', err)\r\n      setError(translate('sales.widgets.newQuotes.error', 'Failed to load quotes'))\r\n    } finally {\r\n      setLoading(false)\r\n      onRefreshStateChange?.(false)\r\n    }\r\n  }, [hydrated, onRefreshStateChange, translate])\r\n\r\n  React.useEffect(() => {\r\n    refresh().catch(() => {})\r\n  }, [refresh, refreshToken])\r\n\r\n  if (mode === 'settings') {\r\n    return (\r\n      <div className=\"space-y-4 text-sm\">\r\n        <div className=\"space-y-1.5\">\r\n          <label htmlFor=\"sales-new-quotes-page-size\" className=\"text-xs font-semibold uppercase text-muted-foreground\">\r\n            {translate('sales.widgets.newQuotes.settings.pageSize', 'Number of Quotes')}\r\n          </label>\r\n          <Input\r\n            id=\"sales-new-quotes-page-size\"\r\n            type=\"number\"\r\n            min={1}\r\n            max={20}\r\n            className=\"w-24\"\r\n            value={hydrated.pageSize}\r\n            onChange={(event) => {\r\n              const next = Number(event.target.value)\r\n              if (!Number.isFinite(next)) return\r\n              const clamped = Math.min(20, Math.max(1, Math.floor(next)))\r\n              onSettingsChange?.({ ...hydrated, pageSize: clamped })\r\n            }}\r\n          />\r\n        </div>\r\n\r\n        <div className=\"space-y-1.5\">\r\n          <label htmlFor=\"sales-new-quotes-date-period\" className=\"text-xs font-semibold uppercase text-muted-foreground\">\r\n            {translate('sales.widgets.newQuotes.settings.datePeriod', 'Date Period')}\r\n          </label>\r\n          <Select\r\n            value={hydrated.datePeriod}\r\n            onValueChange={(value) => {\r\n              onSettingsChange?.({ ...hydrated, datePeriod: value as DatePeriodOption })\r\n            }}\r\n          >\r\n            <SelectTrigger id=\"sales-new-quotes-date-period\" size=\"sm\">\r\n              <SelectValue />\r\n            </SelectTrigger>\r\n            <SelectContent>\r\n              <SelectItem value=\"last24h\">{translate('sales.widgets.newQuotes.settings.last24h', 'Last 24 hours')}</SelectItem>\r\n              <SelectItem value=\"last7d\">{translate('sales.widgets.newQuotes.settings.last7d', 'Last 7 days')}</SelectItem>\r\n              <SelectItem value=\"last30d\">{translate('sales.widgets.newQuotes.settings.last30d', 'Last 30 days')}</SelectItem>\r\n              <SelectItem value=\"custom\">{translate('sales.widgets.newQuotes.settings.custom', 'Custom range')}</SelectItem>\r\n            </SelectContent>\r\n          </Select>\r\n        </div>\r\n\r\n        {hydrated.datePeriod === 'custom' ? (\r\n          <div className=\"grid gap-3\">\r\n            <div className=\"space-y-1.5\">\r\n              <label htmlFor=\"sales-new-quotes-custom-from\" className=\"text-xs font-semibold uppercase text-muted-foreground\">\r\n                {translate('sales.widgets.newQuotes.settings.customFrom', 'From')}\r\n              </label>\r\n              <input\r\n                id=\"sales-new-quotes-custom-from\"\r\n                type=\"date\"\r\n                value={toDateInputValue(hydrated.customFrom)}\r\n                onChange={(event) => {\r\n                  onSettingsChange?.({ ...hydrated, customFrom: event.target.value })\r\n                }}\r\n                onFocus={openNativeDatePicker}\r\n                onClick={openNativeDatePicker}\r\n                className=\"w-full rounded-md border border-input bg-background px-2 py-1 text-sm text-foreground focus-visible:border-ring focus-visible:outline-none focus-visible:ring-1 focus-visible:ring-ring\"\r\n              />\r\n            </div>\r\n            <div className=\"space-y-1.5\">\r\n              <label htmlFor=\"sales-new-quotes-custom-to\" className=\"text-xs font-semibold uppercase text-muted-foreground\">\r\n                {translate('sales.widgets.newQuotes.settings.customTo', 'To')}\r\n              </label>\r\n              <input\r\n                id=\"sales-new-quotes-custom-to\"\r\n                type=\"date\"\r\n                value={toDateInputValue(hydrated.customTo)}\r\n                onChange={(event) => {\r\n                  onSettingsChange?.({ ...hydrated, customTo: event.target.value })\r\n                }}\r\n                onFocus={openNativeDatePicker}\r\n                onClick={openNativeDatePicker}\r\n                className=\"w-full rounded-md border border-input bg-background px-2 py-1 text-sm text-foreground focus-visible:border-ring focus-visible:outline-none focus-visible:ring-1 focus-visible:ring-ring\"\r\n              />\r\n            </div>\r\n          </div>\r\n        ) : null}\r\n      </div>\r\n    )\r\n  }\r\n\r\n  if (error) {\r\n    return <p className=\"text-sm text-destructive\">{error}</p>\r\n  }\r\n\r\n  if (loading) {\r\n    return (\r\n      <div className=\"flex h-32 items-center justify-center\">\r\n        <Spinner className=\"h-6 w-6 text-muted-foreground\" />\r\n      </div>\r\n    )\r\n  }\r\n\r\n  if (!items.length) {\r\n    return <p className=\"text-sm text-muted-foreground\">{translate('sales.widgets.newQuotes.empty', 'No quotes found')}</p>\r\n  }\r\n\r\n  return (\r\n    <ul className=\"space-y-3\">\r\n      {items.map((item) => {\r\n        const detailHref = resolveDetailHref(item)\r\n        const amountLabel = formatAmount(item.grossAmount, item.currency, locale)\r\n        const createdLabel = formatRelativeTime(item.createdAt) ?? ''\r\n        return (\r\n          <li key={item.id} className=\"rounded-md border p-3\">\r\n            <div className=\"flex items-start justify-between gap-3\">\r\n              <div className=\"space-y-1\">\r\n                <div className=\"flex items-center gap-2\">\r\n                  {detailHref ? (\r\n                    <Link href={detailHref} className=\"text-sm font-semibold text-foreground hover:underline\">\r\n                      {item.quoteNumber}\r\n                    </Link>\r\n                  ) : (\r\n                    <span className=\"text-sm font-semibold text-foreground\">{item.quoteNumber}</span>\r\n                  )}\r\n                  {item.status ? (\r\n                    <Badge variant=\"outline\" className=\"text-xs\">\r\n                      {item.status}\r\n                    </Badge>\r\n                  ) : null}\r\n                </div>\r\n                <p className=\"text-xs text-muted-foreground\">\r\n                  {item.customerName ?? translate('sales.widgets.newQuotes.noCustomer', 'No customer')}\r\n                </p>\r\n                <p className=\"text-xs text-muted-foreground\">{createdLabel}</p>\r\n              </div>\r\n              <div className=\"text-right\">\r\n                <p className=\"text-sm font-semibold\">{amountLabel}</p>\r\n              </div>\r\n            </div>\r\n          </li>\r\n        )\r\n      })}\r\n    </ul>\r\n  )\r\n}\r\n\r\nexport default SalesNewQuotesWidget\r\n"],
-  "mappings": ";AA0IQ,SACE,KADF;AAxIR,YAAY,WAAW;AACvB,OAAO,UAAU;AAEjB,SAAS,eAAe;AACxB,SAAS,aAAa;AACtB;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,eAAe;AACxB,SAAS,aAAa;AACtB,SAAS,0BAA0B;AACnC,SAAS,YAAY;AACrB,SAAS,kBAAkB,qCAAyF;AACpH,SAAS,YAAY,kBAAkB,sBAAsB,oBAAoB;AAsBjF,SAAS,mBAAmB,SAAqD;AAC/E,QAAM,WAAW,MAAM,QAAQ,SAAS,KAAK,IAAI,SAAS,QAAQ,CAAC;AACnE,SAAO,SACJ,IAAI,CAAC,SAAS;AACb,QAAI,CAAC,QAAQ,OAAO,SAAS,SAAU,QAAO;AAC9C,UAAM,OAAO;AACb,UAAM,KAAK,WAAW,KAAK,EAAE;AAC7B,UAAM,cAAc,WAAW,KAAK,WAAW;AAC/C,UAAM,YAAY,WAAW,KAAK,SAAS;AAC3C,QAAI,CAAC,MAAM,CAAC,eAAe,CAAC,UAAW,QAAO;AAC9C,WAAO;AAAA,MACL;AAAA,MACA;AAAA,MACA,QAAQ,WAAW,KAAK,MAAM;AAAA,MAC9B,cAAc,WAAW,KAAK,YAAY;AAAA,MAC1C,kBAAkB,WAAW,KAAK,gBAAgB;AAAA,MAClD,WAAW,WAAW,KAAK,SAAS,KAAK;AAAA,MACzC,aAAa,WAAW,KAAK,WAAW,KAAK;AAAA,MAC7C,UAAU,WAAW,KAAK,QAAQ;AAAA,MAClC;AAAA,MACA,WAAW,WAAW,KAAK,SAAS;AAAA,MACpC,YAAY,WAAW,KAAK,UAAU;AAAA,MACtC,kBAAkB,WAAW,KAAK,gBAAgB;AAAA,IACpD;AAAA,EACF,CAAC,EACA,OAAO,CAAC,SAA+B,CAAC,CAAC,IAAI;AAClD;AAEA,eAAe,cAAc,UAA2D;AACtF,QAAM,SAAS,IAAI,gBAAgB;AAAA,IACjC,OAAO,OAAO,SAAS,QAAQ;AAAA,IAC/B,YAAY,SAAS;AAAA,EACvB,CAAC;AACD,MAAI,SAAS,eAAe,UAAU;AACpC,QAAI,SAAS,WAAY,QAAO,IAAI,cAAc,SAAS,UAAU;AACrE,QAAI,SAAS,SAAU,QAAO,IAAI,YAAY,SAAS,QAAQ;AAAA,EACjE;AAEA,QAAM,OAAO,MAAM,QAA6B,2CAA2C,OAAO,SAAS,CAAC,EAAE;AAC9G,MAAI,CAAC,KAAK,IAAI;AACZ,UAAM,UACJ,OAAQ,KAAK,QAA2C,UAAU,WAC5D,KAAK,OAAmC,QAC1C,8BAA8B,KAAK,MAAM;AAC/C,UAAM,IAAI,MAAM,OAAO;AAAA,EACzB;AACA,SAAO,mBAAmB,KAAK,UAAU,IAAI;AAC/C;AAEA,SAAS,kBAAkB,MAAmC;AAC5D,SAAO,KAAK,KAAK,yBAAyB,mBAAmB,KAAK,EAAE,CAAC,KAAK;AAC5E;AAGA,MAAM,uBAAwF,CAAC;AAAA,EAC7F;AAAA,EACA,WAAW;AAAA,EACX;AAAA,EACA;AAAA,EACA;AACF,MAAM;AACJ,QAAM,YAAY,KAAK;AACvB,QAAM,WAAW,MAAM,QAAQ,MAAM,8BAA8B,QAAQ,GAAG,CAAC,QAAQ,CAAC;AACxF,QAAM,CAAC,OAAO,QAAQ,IAAI,MAAM,SAAyB,CAAC,CAAC;AAC3D,QAAM,CAAC,SAAS,UAAU,IAAI,MAAM,SAAS,IAAI;AACjD,QAAM,CAAC,OAAO,QAAQ,IAAI,MAAM,SAAwB,IAAI;AAC5D,QAAM,CAAC,QAAQ,SAAS,IAAI,MAAM,SAA6B,MAAS;AAExE,QAAM,UAAU,MAAM;AACpB,QAAI,OAAO,cAAc,aAAa;AACpC,gBAAU,UAAU,QAAQ;AAAA,IAC9B;AAAA,EACF,GAAG,CAAC,CAAC;AAEL,QAAM,UAAU,MAAM,YAAY,YAAY;AAC5C,2BAAuB,IAAI;AAC3B,eAAW,IAAI;AACf,aAAS,IAAI;AACb,QAAI;AACF,YAAM,OAAO,MAAM,cAAc,QAAQ;AACzC,eAAS,IAAI;AAAA,IACf,SAAS,KAAK;AACZ,cAAQ,MAAM,yCAAyC,GAAG;AAC1D,eAAS,UAAU,iCAAiC,uBAAuB,CAAC;AAAA,IAC9E,UAAE;AACA,iBAAW,KAAK;AAChB,6BAAuB,KAAK;AAAA,IAC9B;AAAA,EACF,GAAG,CAAC,UAAU,sBAAsB,SAAS,CAAC;AAE9C,QAAM,UAAU,MAAM;AACpB,YAAQ,EAAE,MAAM,MAAM;AAAA,IAAC,CAAC;AAAA,EAC1B,GAAG,CAAC,SAAS,YAAY,CAAC;AAE1B,MAAI,SAAS,YAAY;AACvB,WACE,qBAAC,SAAI,WAAU,qBACb;AAAA,2BAAC,SAAI,WAAU,eACb;AAAA,4BAAC,WAAM,SAAQ,8BAA6B,WAAU,yDACnD,oBAAU,6CAA6C,kBAAkB,GAC5E;AAAA,QACA;AAAA,UAAC;AAAA;AAAA,YACC,IAAG;AAAA,YACH,MAAK;AAAA,YACL,KAAK;AAAA,YACL,KAAK;AAAA,YACL,WAAU;AAAA,YACV,OAAO,SAAS;AAAA,YAChB,UAAU,CAAC,UAAU;AACnB,oBAAM,OAAO,OAAO,MAAM,OAAO,KAAK;AACtC,kBAAI,CAAC,OAAO,SAAS,IAAI,EAAG;AAC5B,oBAAM,UAAU,KAAK,IAAI,IAAI,KAAK,IAAI,GAAG,KAAK,MAAM,IAAI,CAAC,CAAC;AAC1D,iCAAmB,EAAE,GAAG,UAAU,UAAU,QAAQ,CAAC;AAAA,YACvD;AAAA;AAAA,QACF;AAAA,SACF;AAAA,MAEA,qBAAC,SAAI,WAAU,eACb;AAAA,4BAAC,WAAM,SAAQ,gCAA+B,WAAU,yDACrD,oBAAU,+CAA+C,aAAa,GACzE;AAAA,QACA;AAAA,UAAC;AAAA;AAAA,YACC,OAAO,SAAS;AAAA,YAChB,eAAe,CAAC,UAAU;AACxB,iCAAmB,EAAE,GAAG,UAAU,YAAY,MAA0B,CAAC;AAAA,YAC3E;AAAA,YAEA;AAAA,kCAAC,iBAAc,IAAG,gCAA+B,MAAK,MACpD,8BAAC,eAAY,GACf;AAAA,cACA,qBAAC,iBACC;AAAA,oCAAC,cAAW,OAAM,WAAW,oBAAU,4CAA4C,eAAe,GAAE;AAAA,gBACpG,oBAAC,cAAW,OAAM,UAAU,oBAAU,2CAA2C,aAAa,GAAE;AAAA,gBAChG,oBAAC,cAAW,OAAM,WAAW,oBAAU,4CAA4C,cAAc,GAAE;AAAA,gBACnG,oBAAC,cAAW,OAAM,UAAU,oBAAU,2CAA2C,cAAc,GAAE;AAAA,iBACnG;AAAA;AAAA;AAAA,QACF;AAAA,SACF;AAAA,MAEC,SAAS,eAAe,WACvB,qBAAC,SAAI,WAAU,cACb;AAAA,6BAAC,SAAI,WAAU,eACb;AAAA,8BAAC,WAAM,SAAQ,gCAA+B,WAAU,yDACrD,oBAAU,+CAA+C,MAAM,GAClE;AAAA,UACA;AAAA,YAAC;AAAA;AAAA,cACC,IAAG;AAAA,cACH,MAAK;AAAA,cACL,OAAO,iBAAiB,SAAS,UAAU;AAAA,cAC3C,UAAU,CAAC,UAAU;AACnB,mCAAmB,EAAE,GAAG,UAAU,YAAY,MAAM,OAAO,MAAM,CAAC;AAAA,cACpE;AAAA,cACA,SAAS;AAAA,cACT,SAAS;AAAA,cACT,WAAU;AAAA;AAAA,UACZ;AAAA,WACF;AAAA,QACA,qBAAC,SAAI,WAAU,eACb;AAAA,8BAAC,WAAM,SAAQ,8BAA6B,WAAU,yDACnD,oBAAU,6CAA6C,IAAI,GAC9D;AAAA,UACA;AAAA,YAAC;AAAA;AAAA,cACC,IAAG;AAAA,cACH,MAAK;AAAA,cACL,OAAO,iBAAiB,SAAS,QAAQ;AAAA,cACzC,UAAU,CAAC,UAAU;AACnB,mCAAmB,EAAE,GAAG,UAAU,UAAU,MAAM,OAAO,MAAM,CAAC;AAAA,cAClE;AAAA,cACA,SAAS;AAAA,cACT,SAAS;AAAA,cACT,WAAU;AAAA;AAAA,UACZ;AAAA,WACF;AAAA,SACF,IACE;AAAA,OACN;AAAA,EAEJ;AAEA,MAAI,OAAO;AACT,WAAO,oBAAC,OAAE,WAAU,4BAA4B,iBAAM;AAAA,EACxD;AAEA,MAAI,SAAS;AACX,WACE,oBAAC,SAAI,WAAU,yCACb,8BAAC,WAAQ,WAAU,iCAAgC,GACrD;AAAA,EAEJ;AAEA,MAAI,CAAC,MAAM,QAAQ;AACjB,WAAO,oBAAC,OAAE,WAAU,iCAAiC,oBAAU,iCAAiC,iBAAiB,GAAE;AAAA,EACrH;AAEA,SACE,oBAAC,QAAG,WAAU,aACX,gBAAM,IAAI,CAAC,SAAS;AACnB,UAAM,aAAa,kBAAkB,IAAI;AACzC,UAAM,cAAc,aAAa,KAAK,aAAa,KAAK,UAAU,MAAM;AACxE,UAAM,eAAe,mBAAmB,KAAK,SAAS,KAAK;AAC3D,WACE,oBAAC,QAAiB,WAAU,yBAC1B,+BAAC,SAAI,WAAU,0CACb;AAAA,2BAAC,SAAI,WAAU,aACb;AAAA,6BAAC,SAAI,WAAU,2BACZ;AAAA,uBACC,oBAAC,QAAK,MAAM,YAAY,WAAU,yDAC/B,eAAK,aACR,IAEA,oBAAC,UAAK,WAAU,yCAAyC,eAAK,aAAY;AAAA,UAE3E,KAAK,SACJ,oBAAC,SAAM,SAAQ,WAAU,WAAU,WAChC,eAAK,QACR,IACE;AAAA,WACN;AAAA,QACA,oBAAC,OAAE,WAAU,iCACV,eAAK,gBAAgB,UAAU,sCAAsC,aAAa,GACrF;AAAA,QACA,oBAAC,OAAE,WAAU,iCAAiC,wBAAa;AAAA,SAC7D;AAAA,MACA,oBAAC,SAAI,WAAU,cACb,8BAAC,OAAE,WAAU,yBAAyB,uBAAY,GACpD;AAAA,OACF,KAzBO,KAAK,EA0Bd;AAAA,EAEJ,CAAC,GACH;AAEJ;AAEA,IAAO,wBAAQ;",
+  "sourcesContent": ["\"use client\"\n\nimport * as React from 'react'\nimport Link from 'next/link'\nimport type { DashboardWidgetComponentProps } from '@open-mercato/shared/modules/dashboard/widgets'\nimport { apiCall } from '@open-mercato/ui/backend/utils/apiCall'\nimport { Input } from '@open-mercato/ui/primitives/input'\nimport {\n  Select,\n  SelectContent,\n  SelectItem,\n  SelectTrigger,\n  SelectValue,\n} from '@open-mercato/ui/primitives/select'\nimport { Spinner } from '@open-mercato/ui/primitives/spinner'\nimport { Badge } from '@open-mercato/ui/primitives/badge'\nimport { formatRelativeTime } from '@open-mercato/shared/lib/time'\nimport { useT } from '@open-mercato/shared/lib/i18n/context'\nimport { DEFAULT_SETTINGS, hydrateSalesNewQuotesSettings, type DatePeriodOption, type SalesNewQuotesSettings } from './config'\nimport { readString, toDateInputValue, openNativeDatePicker, formatAmount } from '../shared'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('sales')\n\ntype NewQuoteItem = {\n  id: string\n  quoteNumber: string\n  status: string | null\n  customerName: string | null\n  customerEntityId: string | null\n  netAmount: string\n  grossAmount: string\n  currency: string | null\n  createdAt: string\n  validFrom: string | null\n  validUntil: string | null\n  convertedOrderId: string | null\n}\n\ntype NewQuotesApiPayload = {\n  items?: unknown[]\n  error?: string\n}\n\nfunction parseNewQuoteItems(payload: NewQuotesApiPayload | null): NewQuoteItem[] {\n  const rawItems = Array.isArray(payload?.items) ? payload?.items : []\n  return rawItems\n    .map((item) => {\n      if (!item || typeof item !== 'object') return null\n      const data = item as Record<string, unknown>\n      const id = readString(data.id)\n      const quoteNumber = readString(data.quoteNumber)\n      const createdAt = readString(data.createdAt)\n      if (!id || !quoteNumber || !createdAt) return null\n      return {\n        id,\n        quoteNumber,\n        status: readString(data.status),\n        customerName: readString(data.customerName),\n        customerEntityId: readString(data.customerEntityId),\n        netAmount: readString(data.netAmount) ?? '0',\n        grossAmount: readString(data.grossAmount) ?? '0',\n        currency: readString(data.currency),\n        createdAt,\n        validFrom: readString(data.validFrom),\n        validUntil: readString(data.validUntil),\n        convertedOrderId: readString(data.convertedOrderId),\n      }\n    })\n    .filter((item): item is NewQuoteItem => !!item)\n}\n\nasync function loadNewQuotes(settings: SalesNewQuotesSettings): Promise<NewQuoteItem[]> {\n  const params = new URLSearchParams({\n    limit: String(settings.pageSize),\n    datePeriod: settings.datePeriod,\n  })\n  if (settings.datePeriod === 'custom') {\n    if (settings.customFrom) params.set('customFrom', settings.customFrom)\n    if (settings.customTo) params.set('customTo', settings.customTo)\n  }\n\n  const call = await apiCall<NewQuotesApiPayload>(`/api/sales/dashboard/widgets/new-quotes?${params.toString()}`)\n  if (!call.ok) {\n    const message =\n      typeof (call.result as Record<string, unknown> | null)?.error === 'string'\n        ? ((call.result as Record<string, unknown>).error as string)\n        : `Request failed with status ${call.status}`\n    throw new Error(message)\n  }\n  return parseNewQuoteItems(call.result ?? null)\n}\n\nfunction resolveDetailHref(item: NewQuoteItem): string | null {\n  return item.id ? `/backend/sales/quotes/${encodeURIComponent(item.id)}` : null\n}\n\n\nconst SalesNewQuotesWidget: React.FC<DashboardWidgetComponentProps<SalesNewQuotesSettings>> = ({\n  mode,\n  settings = DEFAULT_SETTINGS,\n  onSettingsChange,\n  refreshToken,\n  onRefreshStateChange,\n}) => {\n  const translate = useT()\n  const hydrated = React.useMemo(() => hydrateSalesNewQuotesSettings(settings), [settings])\n  const [items, setItems] = React.useState<NewQuoteItem[]>([])\n  const [loading, setLoading] = React.useState(true)\n  const [error, setError] = React.useState<string | null>(null)\n  const [locale, setLocale] = React.useState<string | undefined>(undefined)\n\n  React.useEffect(() => {\n    if (typeof navigator !== 'undefined') {\n      setLocale(navigator.language)\n    }\n  }, [])\n\n  const refresh = React.useCallback(async () => {\n    onRefreshStateChange?.(true)\n    setLoading(true)\n    setError(null)\n    try {\n      const data = await loadNewQuotes(hydrated)\n      setItems(data)\n    } catch (err) {\n      logger.error('Failed to load new quotes widget data', { err })\n      setError(translate('sales.widgets.newQuotes.error', 'Failed to load quotes'))\n    } finally {\n      setLoading(false)\n      onRefreshStateChange?.(false)\n    }\n  }, [hydrated, onRefreshStateChange, translate])\n\n  React.useEffect(() => {\n    refresh().catch(() => {})\n  }, [refresh, refreshToken])\n\n  if (mode === 'settings') {\n    return (\n      <div className=\"space-y-4 text-sm\">\n        <div className=\"space-y-1.5\">\n          <label htmlFor=\"sales-new-quotes-page-size\" className=\"text-xs font-semibold uppercase text-muted-foreground\">\n            {translate('sales.widgets.newQuotes.settings.pageSize', 'Number of Quotes')}\n          </label>\n          <Input\n            id=\"sales-new-quotes-page-size\"\n            type=\"number\"\n            min={1}\n            max={20}\n            className=\"w-24\"\n            value={hydrated.pageSize}\n            onChange={(event) => {\n              const next = Number(event.target.value)\n              if (!Number.isFinite(next)) return\n              const clamped = Math.min(20, Math.max(1, Math.floor(next)))\n              onSettingsChange?.({ ...hydrated, pageSize: clamped })\n            }}\n          />\n        </div>\n\n        <div className=\"space-y-1.5\">\n          <label htmlFor=\"sales-new-quotes-date-period\" className=\"text-xs font-semibold uppercase text-muted-foreground\">\n            {translate('sales.widgets.newQuotes.settings.datePeriod', 'Date Period')}\n          </label>\n          <Select\n            value={hydrated.datePeriod}\n            onValueChange={(value) => {\n              onSettingsChange?.({ ...hydrated, datePeriod: value as DatePeriodOption })\n            }}\n          >\n            <SelectTrigger id=\"sales-new-quotes-date-period\" size=\"sm\">\n              <SelectValue />\n            </SelectTrigger>\n            <SelectContent>\n              <SelectItem value=\"last24h\">{translate('sales.widgets.newQuotes.settings.last24h', 'Last 24 hours')}</SelectItem>\n              <SelectItem value=\"last7d\">{translate('sales.widgets.newQuotes.settings.last7d', 'Last 7 days')}</SelectItem>\n              <SelectItem value=\"last30d\">{translate('sales.widgets.newQuotes.settings.last30d', 'Last 30 days')}</SelectItem>\n              <SelectItem value=\"custom\">{translate('sales.widgets.newQuotes.settings.custom', 'Custom range')}</SelectItem>\n            </SelectContent>\n          </Select>\n        </div>\n\n        {hydrated.datePeriod === 'custom' ? (\n          <div className=\"grid gap-3\">\n            <div className=\"space-y-1.5\">\n              <label htmlFor=\"sales-new-quotes-custom-from\" className=\"text-xs font-semibold uppercase text-muted-foreground\">\n                {translate('sales.widgets.newQuotes.settings.customFrom', 'From')}\n              </label>\n              <input\n                id=\"sales-new-quotes-custom-from\"\n                type=\"date\"\n                value={toDateInputValue(hydrated.customFrom)}\n                onChange={(event) => {\n                  onSettingsChange?.({ ...hydrated, customFrom: event.target.value })\n                }}\n                onFocus={openNativeDatePicker}\n                onClick={openNativeDatePicker}\n                className=\"w-full rounded-md border border-input bg-background px-2 py-1 text-sm text-foreground focus-visible:border-ring focus-visible:outline-none focus-visible:ring-1 focus-visible:ring-ring\"\n              />\n            </div>\n            <div className=\"space-y-1.5\">\n              <label htmlFor=\"sales-new-quotes-custom-to\" className=\"text-xs font-semibold uppercase text-muted-foreground\">\n                {translate('sales.widgets.newQuotes.settings.customTo', 'To')}\n              </label>\n              <input\n                id=\"sales-new-quotes-custom-to\"\n                type=\"date\"\n                value={toDateInputValue(hydrated.customTo)}\n                onChange={(event) => {\n                  onSettingsChange?.({ ...hydrated, customTo: event.target.value })\n                }}\n                onFocus={openNativeDatePicker}\n                onClick={openNativeDatePicker}\n                className=\"w-full rounded-md border border-input bg-background px-2 py-1 text-sm text-foreground focus-visible:border-ring focus-visible:outline-none focus-visible:ring-1 focus-visible:ring-ring\"\n              />\n            </div>\n          </div>\n        ) : null}\n      </div>\n    )\n  }\n\n  if (error) {\n    return <p className=\"text-sm text-destructive\">{error}</p>\n  }\n\n  if (loading) {\n    return (\n      <div className=\"flex h-32 items-center justify-center\">\n        <Spinner className=\"h-6 w-6 text-muted-foreground\" />\n      </div>\n    )\n  }\n\n  if (!items.length) {\n    return <p className=\"text-sm text-muted-foreground\">{translate('sales.widgets.newQuotes.empty', 'No quotes found')}</p>\n  }\n\n  return (\n    <ul className=\"space-y-3\">\n      {items.map((item) => {\n        const detailHref = resolveDetailHref(item)\n        const amountLabel = formatAmount(item.grossAmount, item.currency, locale)\n        const createdLabel = formatRelativeTime(item.createdAt) ?? ''\n        return (\n          <li key={item.id} className=\"rounded-md border p-3\">\n            <div className=\"flex items-start justify-between gap-3\">\n              <div className=\"space-y-1\">\n                <div className=\"flex items-center gap-2\">\n                  {detailHref ? (\n                    <Link href={detailHref} className=\"text-sm font-semibold text-foreground hover:underline\">\n                      {item.quoteNumber}\n                    </Link>\n                  ) : (\n                    <span className=\"text-sm font-semibold text-foreground\">{item.quoteNumber}</span>\n                  )}\n                  {item.status ? (\n                    <Badge variant=\"outline\" className=\"text-xs\">\n                      {item.status}\n                    </Badge>\n                  ) : null}\n                </div>\n                <p className=\"text-xs text-muted-foreground\">\n                  {item.customerName ?? translate('sales.widgets.newQuotes.noCustomer', 'No customer')}\n                </p>\n                <p className=\"text-xs text-muted-foreground\">{createdLabel}</p>\n              </div>\n              <div className=\"text-right\">\n                <p className=\"text-sm font-semibold\">{amountLabel}</p>\n              </div>\n            </div>\n          </li>\n        )\n      })}\n    </ul>\n  )\n}\n\nexport default SalesNewQuotesWidget\n"],
+  "mappings": ";AA6IQ,SACE,KADF;AA3IR,YAAY,WAAW;AACvB,OAAO,UAAU;AAEjB,SAAS,eAAe;AACxB,SAAS,aAAa;AACtB;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,eAAe;AACxB,SAAS,aAAa;AACtB,SAAS,0BAA0B;AACnC,SAAS,YAAY;AACrB,SAAS,kBAAkB,qCAAyF;AACpH,SAAS,YAAY,kBAAkB,sBAAsB,oBAAoB;AACjF,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,OAAO;AAsBnC,SAAS,mBAAmB,SAAqD;AAC/E,QAAM,WAAW,MAAM,QAAQ,SAAS,KAAK,IAAI,SAAS,QAAQ,CAAC;AACnE,SAAO,SACJ,IAAI,CAAC,SAAS;AACb,QAAI,CAAC,QAAQ,OAAO,SAAS,SAAU,QAAO;AAC9C,UAAM,OAAO;AACb,UAAM,KAAK,WAAW,KAAK,EAAE;AAC7B,UAAM,cAAc,WAAW,KAAK,WAAW;AAC/C,UAAM,YAAY,WAAW,KAAK,SAAS;AAC3C,QAAI,CAAC,MAAM,CAAC,eAAe,CAAC,UAAW,QAAO;AAC9C,WAAO;AAAA,MACL;AAAA,MACA;AAAA,MACA,QAAQ,WAAW,KAAK,MAAM;AAAA,MAC9B,cAAc,WAAW,KAAK,YAAY;AAAA,MAC1C,kBAAkB,WAAW,KAAK,gBAAgB;AAAA,MAClD,WAAW,WAAW,KAAK,SAAS,KAAK;AAAA,MACzC,aAAa,WAAW,KAAK,WAAW,KAAK;AAAA,MAC7C,UAAU,WAAW,KAAK,QAAQ;AAAA,MAClC;AAAA,MACA,WAAW,WAAW,KAAK,SAAS;AAAA,MACpC,YAAY,WAAW,KAAK,UAAU;AAAA,MACtC,kBAAkB,WAAW,KAAK,gBAAgB;AAAA,IACpD;AAAA,EACF,CAAC,EACA,OAAO,CAAC,SAA+B,CAAC,CAAC,IAAI;AAClD;AAEA,eAAe,cAAc,UAA2D;AACtF,QAAM,SAAS,IAAI,gBAAgB;AAAA,IACjC,OAAO,OAAO,SAAS,QAAQ;AAAA,IAC/B,YAAY,SAAS;AAAA,EACvB,CAAC;AACD,MAAI,SAAS,eAAe,UAAU;AACpC,QAAI,SAAS,WAAY,QAAO,IAAI,cAAc,SAAS,UAAU;AACrE,QAAI,SAAS,SAAU,QAAO,IAAI,YAAY,SAAS,QAAQ;AAAA,EACjE;AAEA,QAAM,OAAO,MAAM,QAA6B,2CAA2C,OAAO,SAAS,CAAC,EAAE;AAC9G,MAAI,CAAC,KAAK,IAAI;AACZ,UAAM,UACJ,OAAQ,KAAK,QAA2C,UAAU,WAC5D,KAAK,OAAmC,QAC1C,8BAA8B,KAAK,MAAM;AAC/C,UAAM,IAAI,MAAM,OAAO;AAAA,EACzB;AACA,SAAO,mBAAmB,KAAK,UAAU,IAAI;AAC/C;AAEA,SAAS,kBAAkB,MAAmC;AAC5D,SAAO,KAAK,KAAK,yBAAyB,mBAAmB,KAAK,EAAE,CAAC,KAAK;AAC5E;AAGA,MAAM,uBAAwF,CAAC;AAAA,EAC7F;AAAA,EACA,WAAW;AAAA,EACX;AAAA,EACA;AAAA,EACA;AACF,MAAM;AACJ,QAAM,YAAY,KAAK;AACvB,QAAM,WAAW,MAAM,QAAQ,MAAM,8BAA8B,QAAQ,GAAG,CAAC,QAAQ,CAAC;AACxF,QAAM,CAAC,OAAO,QAAQ,IAAI,MAAM,SAAyB,CAAC,CAAC;AAC3D,QAAM,CAAC,SAAS,UAAU,IAAI,MAAM,SAAS,IAAI;AACjD,QAAM,CAAC,OAAO,QAAQ,IAAI,MAAM,SAAwB,IAAI;AAC5D,QAAM,CAAC,QAAQ,SAAS,IAAI,MAAM,SAA6B,MAAS;AAExE,QAAM,UAAU,MAAM;AACpB,QAAI,OAAO,cAAc,aAAa;AACpC,gBAAU,UAAU,QAAQ;AAAA,IAC9B;AAAA,EACF,GAAG,CAAC,CAAC;AAEL,QAAM,UAAU,MAAM,YAAY,YAAY;AAC5C,2BAAuB,IAAI;AAC3B,eAAW,IAAI;AACf,aAAS,IAAI;AACb,QAAI;AACF,YAAM,OAAO,MAAM,cAAc,QAAQ;AACzC,eAAS,IAAI;AAAA,IACf,SAAS,KAAK;AACZ,aAAO,MAAM,yCAAyC,EAAE,IAAI,CAAC;AAC7D,eAAS,UAAU,iCAAiC,uBAAuB,CAAC;AAAA,IAC9E,UAAE;AACA,iBAAW,KAAK;AAChB,6BAAuB,KAAK;AAAA,IAC9B;AAAA,EACF,GAAG,CAAC,UAAU,sBAAsB,SAAS,CAAC;AAE9C,QAAM,UAAU,MAAM;AACpB,YAAQ,EAAE,MAAM,MAAM;AAAA,IAAC,CAAC;AAAA,EAC1B,GAAG,CAAC,SAAS,YAAY,CAAC;AAE1B,MAAI,SAAS,YAAY;AACvB,WACE,qBAAC,SAAI,WAAU,qBACb;AAAA,2BAAC,SAAI,WAAU,eACb;AAAA,4BAAC,WAAM,SAAQ,8BAA6B,WAAU,yDACnD,oBAAU,6CAA6C,kBAAkB,GAC5E;AAAA,QACA;AAAA,UAAC;AAAA;AAAA,YACC,IAAG;AAAA,YACH,MAAK;AAAA,YACL,KAAK;AAAA,YACL,KAAK;AAAA,YACL,WAAU;AAAA,YACV,OAAO,SAAS;AAAA,YAChB,UAAU,CAAC,UAAU;AACnB,oBAAM,OAAO,OAAO,MAAM,OAAO,KAAK;AACtC,kBAAI,CAAC,OAAO,SAAS,IAAI,EAAG;AAC5B,oBAAM,UAAU,KAAK,IAAI,IAAI,KAAK,IAAI,GAAG,KAAK,MAAM,IAAI,CAAC,CAAC;AAC1D,iCAAmB,EAAE,GAAG,UAAU,UAAU,QAAQ,CAAC;AAAA,YACvD;AAAA;AAAA,QACF;AAAA,SACF;AAAA,MAEA,qBAAC,SAAI,WAAU,eACb;AAAA,4BAAC,WAAM,SAAQ,gCAA+B,WAAU,yDACrD,oBAAU,+CAA+C,aAAa,GACzE;AAAA,QACA;AAAA,UAAC;AAAA;AAAA,YACC,OAAO,SAAS;AAAA,YAChB,eAAe,CAAC,UAAU;AACxB,iCAAmB,EAAE,GAAG,UAAU,YAAY,MAA0B,CAAC;AAAA,YAC3E;AAAA,YAEA;AAAA,kCAAC,iBAAc,IAAG,gCAA+B,MAAK,MACpD,8BAAC,eAAY,GACf;AAAA,cACA,qBAAC,iBACC;AAAA,oCAAC,cAAW,OAAM,WAAW,oBAAU,4CAA4C,eAAe,GAAE;AAAA,gBACpG,oBAAC,cAAW,OAAM,UAAU,oBAAU,2CAA2C,aAAa,GAAE;AAAA,gBAChG,oBAAC,cAAW,OAAM,WAAW,oBAAU,4CAA4C,cAAc,GAAE;AAAA,gBACnG,oBAAC,cAAW,OAAM,UAAU,oBAAU,2CAA2C,cAAc,GAAE;AAAA,iBACnG;AAAA;AAAA;AAAA,QACF;AAAA,SACF;AAAA,MAEC,SAAS,eAAe,WACvB,qBAAC,SAAI,WAAU,cACb;AAAA,6BAAC,SAAI,WAAU,eACb;AAAA,8BAAC,WAAM,SAAQ,gCAA+B,WAAU,yDACrD,oBAAU,+CAA+C,MAAM,GAClE;AAAA,UACA;AAAA,YAAC;AAAA;AAAA,cACC,IAAG;AAAA,cACH,MAAK;AAAA,cACL,OAAO,iBAAiB,SAAS,UAAU;AAAA,cAC3C,UAAU,CAAC,UAAU;AACnB,mCAAmB,EAAE,GAAG,UAAU,YAAY,MAAM,OAAO,MAAM,CAAC;AAAA,cACpE;AAAA,cACA,SAAS;AAAA,cACT,SAAS;AAAA,cACT,WAAU;AAAA;AAAA,UACZ;AAAA,WACF;AAAA,QACA,qBAAC,SAAI,WAAU,eACb;AAAA,8BAAC,WAAM,SAAQ,8BAA6B,WAAU,yDACnD,oBAAU,6CAA6C,IAAI,GAC9D;AAAA,UACA;AAAA,YAAC;AAAA;AAAA,cACC,IAAG;AAAA,cACH,MAAK;AAAA,cACL,OAAO,iBAAiB,SAAS,QAAQ;AAAA,cACzC,UAAU,CAAC,UAAU;AACnB,mCAAmB,EAAE,GAAG,UAAU,UAAU,MAAM,OAAO,MAAM,CAAC;AAAA,cAClE;AAAA,cACA,SAAS;AAAA,cACT,SAAS;AAAA,cACT,WAAU;AAAA;AAAA,UACZ;AAAA,WACF;AAAA,SACF,IACE;AAAA,OACN;AAAA,EAEJ;AAEA,MAAI,OAAO;AACT,WAAO,oBAAC,OAAE,WAAU,4BAA4B,iBAAM;AAAA,EACxD;AAEA,MAAI,SAAS;AACX,WACE,oBAAC,SAAI,WAAU,yCACb,8BAAC,WAAQ,WAAU,iCAAgC,GACrD;AAAA,EAEJ;AAEA,MAAI,CAAC,MAAM,QAAQ;AACjB,WAAO,oBAAC,OAAE,WAAU,iCAAiC,oBAAU,iCAAiC,iBAAiB,GAAE;AAAA,EACrH;AAEA,SACE,oBAAC,QAAG,WAAU,aACX,gBAAM,IAAI,CAAC,SAAS;AACnB,UAAM,aAAa,kBAAkB,IAAI;AACzC,UAAM,cAAc,aAAa,KAAK,aAAa,KAAK,UAAU,MAAM;AACxE,UAAM,eAAe,mBAAmB,KAAK,SAAS,KAAK;AAC3D,WACE,oBAAC,QAAiB,WAAU,yBAC1B,+BAAC,SAAI,WAAU,0CACb;AAAA,2BAAC,SAAI,WAAU,aACb;AAAA,6BAAC,SAAI,WAAU,2BACZ;AAAA,uBACC,oBAAC,QAAK,MAAM,YAAY,WAAU,yDAC/B,eAAK,aACR,IAEA,oBAAC,UAAK,WAAU,yCAAyC,eAAK,aAAY;AAAA,UAE3E,KAAK,SACJ,oBAAC,SAAM,SAAQ,WAAU,WAAU,WAChC,eAAK,QACR,IACE;AAAA,WACN;AAAA,QACA,oBAAC,OAAE,WAAU,iCACV,eAAK,gBAAgB,UAAU,sCAAsC,aAAa,GACrF;AAAA,QACA,oBAAC,OAAE,WAAU,iCAAiC,wBAAa;AAAA,SAC7D;AAAA,MACA,oBAAC,SAAI,WAAU,cACb,8BAAC,OAAE,WAAU,yBAAyB,uBAAY,GACpD;AAAA,OACF,KAzBO,KAAK,EA0Bd;AAAA,EAEJ,CAAC,GACH;AAEJ;AAEA,IAAO,wBAAQ;",
   "names": []
 }

package/dist/modules/shipping_carriers/api/tracking/route.js

@@ -1,6 +1,7 @@
 import { NextResponse } from "next/server";
 import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
 import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
+import { CarrierShipmentNotFoundError } from "../../lib/shipping-service.js";
 import { shippingCarrierUpstreamErrorResponse } from "../../lib/upstream-error-response.js";
 import { trackingQuerySchema } from "../../data/validators.js";
 import { shippingCarriersTag } from "../openapi.js";
@@ -32,6 +33,9 @@ async function GET(req) {
     });
     return NextResponse.json(tracking);
   } catch (error) {
+    if (error instanceof CarrierShipmentNotFoundError) {
+      return NextResponse.json({ error: error.message }, { status: 404 });
+    }
     return shippingCarrierUpstreamErrorResponse("tracking.get", error);
   }
 }
@@ -44,6 +48,7 @@ const openApi = {
       tags: [shippingCarriersTag],
       responses: [
         { status: 200, description: "Tracking returned" },
+        { status: 404, description: "Shipment not found" },
         { status: 422, description: "Validation failed" },
         { status: 502, description: "Provider upstream error" }
       ]

package/dist/modules/shipping_carriers/api/tracking/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../src/modules/shipping_carriers/api/tracking/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport type { ShippingCarrierService } from '../../lib/shipping-service'\nimport { shippingCarrierUpstreamErrorResponse } from '../../lib/upstream-error-response'\nimport { trackingQuerySchema } from '../../data/validators'\nimport { shippingCarriersTag } from '../openapi'\n\nexport const metadata = {\n  path: '/shipping-carriers/tracking',\n  GET: { requireAuth: true, requireFeatures: ['shipping_carriers.view'] },\n}\n\nexport async function GET(req: Request) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.tenantId || !auth.orgId) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n  const url = new URL(req.url)\n  const parsed = trackingQuerySchema.safeParse({\n    providerKey: url.searchParams.get('providerKey'),\n    shipmentId: url.searchParams.get('shipmentId') ?? undefined,\n    trackingNumber: url.searchParams.get('trackingNumber') ?? undefined,\n  })\n  if (!parsed.success) {\n    return NextResponse.json({ error: 'Invalid query', details: parsed.error.flatten() }, { status: 422 })\n  }\n  const container = await createRequestContainer()\n  const service = container.resolve('shippingCarrierService') as ShippingCarrierService\n  try {\n    const tracking = await service.getTracking({\n      ...parsed.data,\n      organizationId: auth.orgId as string,\n      tenantId: auth.tenantId,\n    })\n    return NextResponse.json(tracking)\n  } catch (error: unknown) {\n    return shippingCarrierUpstreamErrorResponse('tracking.get', error)\n  }\n}\n\nexport const openApi = {\n  tags: [shippingCarriersTag],\n  summary: 'Get tracking',\n  methods: {\n    GET: {\n      summary: 'Get tracking',\n      tags: [shippingCarriersTag],\n      responses: [\n        { status: 200, description: 'Tracking returned' },\n        { status: 422, description: 'Validation failed' },\n        { status: 502, description: 'Provider upstream error' },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AAEvC,SAAS,4CAA4C;AACrD,SAAS,2BAA2B;AACpC,SAAS,2BAA2B;AAE7B,MAAM,WAAW;AAAA,EACtB,MAAM;AAAA,EACN,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,wBAAwB,EAAE;AACxE;AAEA,eAAsB,IAAI,KAAc;AACtC,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,YAAY,CAAC,KAAK,OAAO;AAClC,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AACA,QAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,QAAM,SAAS,oBAAoB,UAAU;AAAA,IAC3C,aAAa,IAAI,aAAa,IAAI,aAAa;AAAA,IAC/C,YAAY,IAAI,aAAa,IAAI,YAAY,KAAK;AAAA,IAClD,gBAAgB,IAAI,aAAa,IAAI,gBAAgB,KAAK;AAAA,EAC5D,CAAC;AACD,MAAI,CAAC,OAAO,SAAS;AACnB,WAAO,aAAa,KAAK,EAAE,OAAO,iBAAiB,SAAS,OAAO,MAAM,QAAQ,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACvG;AACA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,UAAU,UAAU,QAAQ,wBAAwB;AAC1D,MAAI;AACF,UAAM,WAAW,MAAM,QAAQ,YAAY;AAAA,MACzC,GAAG,OAAO;AAAA,MACV,gBAAgB,KAAK;AAAA,MACrB,UAAU,KAAK;AAAA,IACjB,CAAC;AACD,WAAO,aAAa,KAAK,QAAQ;AAAA,EACnC,SAAS,OAAgB;AACvB,WAAO,qCAAqC,gBAAgB,KAAK;AAAA,EACnE;AACF;AAEO,MAAM,UAAU;AAAA,EACrB,MAAM,CAAC,mBAAmB;AAAA,EAC1B,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,MAAM,CAAC,mBAAmB;AAAA,MAC1B,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,oBAAoB;AAAA,QAChD,EAAE,QAAQ,KAAK,aAAa,oBAAoB;AAAA,QAChD,EAAE,QAAQ,KAAK,aAAa,0BAA0B;AAAA,MACxD;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { CarrierShipmentNotFoundError, type ShippingCarrierService } from '../../lib/shipping-service'\nimport { shippingCarrierUpstreamErrorResponse } from '../../lib/upstream-error-response'\nimport { trackingQuerySchema } from '../../data/validators'\nimport { shippingCarriersTag } from '../openapi'\n\nexport const metadata = {\n  path: '/shipping-carriers/tracking',\n  GET: { requireAuth: true, requireFeatures: ['shipping_carriers.view'] },\n}\n\nexport async function GET(req: Request) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.tenantId || !auth.orgId) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n  const url = new URL(req.url)\n  const parsed = trackingQuerySchema.safeParse({\n    providerKey: url.searchParams.get('providerKey'),\n    shipmentId: url.searchParams.get('shipmentId') ?? undefined,\n    trackingNumber: url.searchParams.get('trackingNumber') ?? undefined,\n  })\n  if (!parsed.success) {\n    return NextResponse.json({ error: 'Invalid query', details: parsed.error.flatten() }, { status: 422 })\n  }\n  const container = await createRequestContainer()\n  const service = container.resolve('shippingCarrierService') as ShippingCarrierService\n  try {\n    const tracking = await service.getTracking({\n      ...parsed.data,\n      organizationId: auth.orgId as string,\n      tenantId: auth.tenantId,\n    })\n    return NextResponse.json(tracking)\n  } catch (error: unknown) {\n    if (error instanceof CarrierShipmentNotFoundError) {\n      return NextResponse.json({ error: error.message }, { status: 404 })\n    }\n    return shippingCarrierUpstreamErrorResponse('tracking.get', error)\n  }\n}\n\nexport const openApi = {\n  tags: [shippingCarriersTag],\n  summary: 'Get tracking',\n  methods: {\n    GET: {\n      summary: 'Get tracking',\n      tags: [shippingCarriersTag],\n      responses: [\n        { status: 200, description: 'Tracking returned' },\n        { status: 404, description: 'Shipment not found' },\n        { status: 422, description: 'Validation failed' },\n        { status: 502, description: 'Provider upstream error' },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AACvC,SAAS,oCAAiE;AAC1E,SAAS,4CAA4C;AACrD,SAAS,2BAA2B;AACpC,SAAS,2BAA2B;AAE7B,MAAM,WAAW;AAAA,EACtB,MAAM;AAAA,EACN,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,wBAAwB,EAAE;AACxE;AAEA,eAAsB,IAAI,KAAc;AACtC,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,YAAY,CAAC,KAAK,OAAO;AAClC,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AACA,QAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,QAAM,SAAS,oBAAoB,UAAU;AAAA,IAC3C,aAAa,IAAI,aAAa,IAAI,aAAa;AAAA,IAC/C,YAAY,IAAI,aAAa,IAAI,YAAY,KAAK;AAAA,IAClD,gBAAgB,IAAI,aAAa,IAAI,gBAAgB,KAAK;AAAA,EAC5D,CAAC;AACD,MAAI,CAAC,OAAO,SAAS;AACnB,WAAO,aAAa,KAAK,EAAE,OAAO,iBAAiB,SAAS,OAAO,MAAM,QAAQ,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACvG;AACA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,UAAU,UAAU,QAAQ,wBAAwB;AAC1D,MAAI;AACF,UAAM,WAAW,MAAM,QAAQ,YAAY;AAAA,MACzC,GAAG,OAAO;AAAA,MACV,gBAAgB,KAAK;AAAA,MACrB,UAAU,KAAK;AAAA,IACjB,CAAC;AACD,WAAO,aAAa,KAAK,QAAQ;AAAA,EACnC,SAAS,OAAgB;AACvB,QAAI,iBAAiB,8BAA8B;AACjD,aAAO,aAAa,KAAK,EAAE,OAAO,MAAM,QAAQ,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACpE;AACA,WAAO,qCAAqC,gBAAgB,KAAK;AAAA,EACnE;AACF;AAEO,MAAM,UAAU;AAAA,EACrB,MAAM,CAAC,mBAAmB;AAAA,EAC1B,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,MAAM,CAAC,mBAAmB;AAAA,MAC1B,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,oBAAoB;AAAA,QAChD,EAAE,QAAQ,KAAK,aAAa,qBAAqB;AAAA,QACjD,EAAE,QAAQ,KAAK,aAAa,oBAAoB;AAAA,QAChD,EAAE,QAAQ,KAAK,aAAa,0BAA0B;AAAA,MACxD;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/shipping_carriers/api/webhook/[provider]/route.js

@@ -7,6 +7,8 @@ import { CarrierShipment } from "../../../data/entities.js";
 import { getShippingAdapter } from "../../../lib/adapter-registry.js";
 import { getShippingCarrierQueue } from "../../../lib/queue.js";
 import { shippingCarriersTag } from "../../openapi.js";
+import { createLogger } from "@open-mercato/shared/lib/logger";
+const logger = createLogger("shipping_carriers").child({ component: "webhook" });
 const metadata = {
   path: "/shipping-carriers/webhook/[provider]",
   POST: { requireAuth: false }
@@ -89,7 +91,7 @@ async function POST(req, { params }) {
     });
     return NextResponse.json({ received: true, queued: true }, { status: 202 });
   } catch (error) {
-    console.warn(`[shipping_carriers] Webhook verification failed for provider "${providerKey}"`, error);
+    logger.warn("Webhook verification failed", { providerKey, err: error });
     return NextResponse.json({ error: WEBHOOK_VERIFICATION_FAILED }, { status: 401 });
   }
 }

package/dist/modules/shipping_carriers/api/webhook/[provider]/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../src/modules/shipping_carriers/api/webhook/%5Bprovider%5D/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { readJsonSafe } from '@open-mercato/shared/lib/http/readJsonSafe'\nimport { checkRateLimit, getClientIp, RATE_LIMIT_ERROR_FALLBACK } from '@open-mercato/shared/lib/ratelimit/helpers'\nimport type { RateLimiterService } from '@open-mercato/shared/lib/ratelimit/service'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport type { CredentialsService } from '../../../../integrations/lib/credentials-service'\nimport { CarrierShipment } from '../../../data/entities'\nimport { getShippingAdapter } from '../../../lib/adapter-registry'\nimport { getShippingCarrierQueue } from '../../../lib/queue'\nimport { shippingCarriersTag } from '../../openapi'\n\nexport const metadata = {\n  path: '/shipping-carriers/webhook/[provider]',\n  POST: { requireAuth: false },\n}\n\nconst WEBHOOK_VERIFICATION_FAILED = 'Webhook verification failed'\n\nconst shippingCarrierWebhookRateLimitConfig = {\n  points: 60,\n  duration: 60,\n  keyPrefix: 'shipping_carriers:webhook',\n}\n\nfunction readCarrierShipmentId(payload: Record<string, unknown> | null): string | null {\n  if (!payload) return null\n  const shipmentId = payload.shipmentId\n  if (typeof shipmentId === 'string' && shipmentId.trim().length > 0) return shipmentId.trim()\n  const data = payload.data\n  if (data && typeof data === 'object') {\n    const nested = (data as Record<string, unknown>).shipmentId\n    if (typeof nested === 'string' && nested.trim().length > 0) return nested.trim()\n  }\n  return null\n}\n\nexport async function POST(req: Request, { params }: { params: Promise<{ provider: string }> | { provider: string } }) {\n  const resolvedParams = await params\n  const providerKey = resolvedParams.provider\n  const adapter = getShippingAdapter(providerKey)\n  if (!adapter) {\n    return NextResponse.json({ error: `No shipping adapter for provider: ${providerKey}` }, { status: 404 })\n  }\n\n  const container = await createRequestContainer()\n  const rateLimitResponse = await checkProviderWebhookRateLimit(container, req, providerKey)\n  if (rateLimitResponse) return rateLimitResponse\n\n  const rawBody = await req.text()\n  const headers: Record<string, string> = {}\n  req.headers.forEach((value, key) => {\n    headers[key] = value\n  })\n\n  const em = container.resolve('em') as EntityManager\n  const integrationCredentialsService = container.resolve('integrationCredentialsService') as CredentialsService\n  const queue = getShippingCarrierQueue('shipping-carriers-webhook')\n  const payload = await readJsonSafe<Record<string, unknown>>(rawBody)\n  const carrierShipmentId = readCarrierShipmentId(payload)\n\n  try {\n    // The webhook endpoint is unauthenticated. Tenant/organization scope MUST come from a\n    // CarrierShipment whose per-tenant credentials successfully verify the inbound\n    // signature \u2014 NEVER from attacker-controlled payload metadata or an unsigned retry.\n    // If no candidate shipment can be located by the provider-reported carrierShipmentId,\n    // or no candidate's credentials can verify the signature, we fail closed with 401.\n    // This mirrors the fix landed for payment_gateways in PR #1311.\n    const candidates = carrierShipmentId\n      ? await findWithDecryption(\n        em,\n        CarrierShipment,\n        {\n          providerKey,\n          carrierShipmentId,\n          deletedAt: null,\n        },\n        { limit: 10, orderBy: { createdAt: 'desc' } },\n      )\n      : []\n\n    let shipment: CarrierShipment | null = null\n    let matchedScope: { organizationId: string; tenantId: string } | null = null\n    let event: Awaited<ReturnType<typeof adapter.verifyWebhook>> | null = null\n    let lastVerificationError: unknown = null\n\n    for (const candidate of candidates) {\n      const candidateScope = { organizationId: candidate.organizationId, tenantId: candidate.tenantId }\n      const credentials = await integrationCredentialsService.resolve(`carrier_${providerKey}`, candidateScope) ?? {}\n      try {\n        event = await adapter.verifyWebhook({ rawBody, headers, credentials })\n        shipment = candidate\n        matchedScope = candidateScope\n        break\n      } catch (error: unknown) {\n        lastVerificationError = error\n      }\n    }\n\n    if (!event || !shipment || !matchedScope) {\n      throw lastVerificationError ?? new Error('Webhook verification failed: no matching shipment')\n    }\n\n    await queue.enqueue({\n      name: 'shipping-carrier-webhook',\n      payload: {\n        providerKey,\n        event,\n        shipmentId: shipment.id,\n        scope: matchedScope,\n      },\n    })\n\n    return NextResponse.json({ received: true, queued: true }, { status: 202 })\n  } catch (error: unknown) {\n    console.warn(`[shipping_carriers] Webhook verification failed for provider \"${providerKey}\"`, error)\n    return NextResponse.json({ error: WEBHOOK_VERIFICATION_FAILED }, { status: 401 })\n  }\n}\n\nasync function checkProviderWebhookRateLimit(\n  container: { resolve: (name: string) => unknown },\n  req: Request,\n  providerKey: string,\n): Promise<NextResponse | null> {\n  const rateLimiterService = tryResolve<RateLimiterService>(container, 'rateLimiterService')\n  if (!rateLimiterService) return null\n\n  return checkRateLimit(\n    rateLimiterService,\n    shippingCarrierWebhookRateLimitConfig,\n    `${providerKey}:${getClientIp(req, rateLimiterService.trustProxyDepth) ?? 'unknown'}`,\n    RATE_LIMIT_ERROR_FALLBACK,\n  )\n}\n\nfunction tryResolve<T>(container: { resolve: (name: string) => unknown }, name: string): T | null {\n  try {\n    return container.resolve(name) as T\n  } catch {\n    return null\n  }\n}\n\nexport const openApi = {\n  tags: [shippingCarriersTag],\n  summary: 'Receive shipping carrier webhook',\n  methods: {\n    POST: {\n      summary: 'Process inbound carrier webhook',\n      tags: [shippingCarriersTag],\n      responses: [\n        { status: 202, description: 'Webhook accepted for async processing' },\n        { status: 401, description: 'Signature verification failed' },\n        { status: 404, description: 'Unknown provider' },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,oBAAoB;AAC7B,SAAS,gBAAgB,aAAa,iCAAiC;AAIvE,SAAS,uBAAuB;AAChC,SAAS,0BAA0B;AACnC,SAAS,+BAA+B;AACxC,SAAS,2BAA2B;AAE7B,MAAM,WAAW;AAAA,EACtB,MAAM;AAAA,EACN,MAAM,EAAE,aAAa,MAAM;AAC7B;AAEA,MAAM,8BAA8B;AAEpC,MAAM,wCAAwC;AAAA,EAC5C,QAAQ;AAAA,EACR,UAAU;AAAA,EACV,WAAW;AACb;AAEA,SAAS,sBAAsB,SAAwD;AACrF,MAAI,CAAC,QAAS,QAAO;AACrB,QAAM,aAAa,QAAQ;AAC3B,MAAI,OAAO,eAAe,YAAY,WAAW,KAAK,EAAE,SAAS,EAAG,QAAO,WAAW,KAAK;AAC3F,QAAM,OAAO,QAAQ;AACrB,MAAI,QAAQ,OAAO,SAAS,UAAU;AACpC,UAAM,SAAU,KAAiC;AACjD,QAAI,OAAO,WAAW,YAAY,OAAO,KAAK,EAAE,SAAS,EAAG,QAAO,OAAO,KAAK;AAAA,EACjF;AACA,SAAO;AACT;AAEA,eAAsB,KAAK,KAAc,EAAE,OAAO,GAAqE;AACrH,QAAM,iBAAiB,MAAM;AAC7B,QAAM,cAAc,eAAe;AACnC,QAAM,UAAU,mBAAmB,WAAW;AAC9C,MAAI,CAAC,SAAS;AACZ,WAAO,aAAa,KAAK,EAAE,OAAO,qCAAqC,WAAW,GAAG,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACzG;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,oBAAoB,MAAM,8BAA8B,WAAW,KAAK,WAAW;AACzF,MAAI,kBAAmB,QAAO;AAE9B,QAAM,UAAU,MAAM,IAAI,KAAK;AAC/B,QAAM,UAAkC,CAAC;AACzC,MAAI,QAAQ,QAAQ,CAAC,OAAO,QAAQ;AAClC,YAAQ,GAAG,IAAI;AAAA,EACjB,CAAC;AAED,QAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,QAAM,gCAAgC,UAAU,QAAQ,+BAA+B;AACvF,QAAM,QAAQ,wBAAwB,2BAA2B;AACjE,QAAM,UAAU,MAAM,aAAsC,OAAO;AACnE,QAAM,oBAAoB,sBAAsB,OAAO;AAEvD,MAAI;AAOF,UAAM,aAAa,oBACf,MAAM;AAAA,MACN;AAAA,MACA;AAAA,MACA;AAAA,QACE;AAAA,QACA;AAAA,QACA,WAAW;AAAA,MACb;AAAA,MACA,EAAE,OAAO,IAAI,SAAS,EAAE,WAAW,OAAO,EAAE;AAAA,IAC9C,IACE,CAAC;AAEL,QAAI,WAAmC;AACvC,QAAI,eAAoE;AACxE,QAAI,QAAkE;AACtE,QAAI,wBAAiC;AAErC,eAAW,aAAa,YAAY;AAClC,YAAM,iBAAiB,EAAE,gBAAgB,UAAU,gBAAgB,UAAU,UAAU,SAAS;AAChG,YAAM,cAAc,MAAM,8BAA8B,QAAQ,WAAW,WAAW,IAAI,cAAc,KAAK,CAAC;AAC9G,UAAI;AACF,gBAAQ,MAAM,QAAQ,cAAc,EAAE,SAAS,SAAS,YAAY,CAAC;AACrE,mBAAW;AACX,uBAAe;AACf;AAAA,MACF,SAAS,OAAgB;AACvB,gCAAwB;AAAA,MAC1B;AAAA,IACF;AAEA,QAAI,CAAC,SAAS,CAAC,YAAY,CAAC,cAAc;AACxC,YAAM,yBAAyB,IAAI,MAAM,mDAAmD;AAAA,IAC9F;AAEA,UAAM,MAAM,QAAQ;AAAA,MAClB,MAAM;AAAA,MACN,SAAS;AAAA,QACP;AAAA,QACA;AAAA,QACA,YAAY,SAAS;AAAA,QACrB,OAAO;AAAA,MACT;AAAA,IACF,CAAC;AAED,WAAO,aAAa,KAAK,EAAE,UAAU,MAAM,QAAQ,KAAK,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC5E,SAAS,OAAgB;AACvB,YAAQ,KAAK,iEAAiE,WAAW,KAAK,KAAK;AACnG,WAAO,aAAa,KAAK,EAAE,OAAO,4BAA4B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAClF;AACF;AAEA,eAAe,8BACb,WACA,KACA,aAC8B;AAC9B,QAAM,qBAAqB,WAA+B,WAAW,oBAAoB;AACzF,MAAI,CAAC,mBAAoB,QAAO;AAEhC,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,GAAG,WAAW,IAAI,YAAY,KAAK,mBAAmB,eAAe,KAAK,SAAS;AAAA,IACnF;AAAA,EACF;AACF;AAEA,SAAS,WAAc,WAAmD,MAAwB;AAChG,MAAI;AACF,WAAO,UAAU,QAAQ,IAAI;AAAA,EAC/B,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEO,MAAM,UAAU;AAAA,EACrB,MAAM,CAAC,mBAAmB;AAAA,EAC1B,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,MAAM,CAAC,mBAAmB;AAAA,MAC1B,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,wCAAwC;AAAA,QACpE,EAAE,QAAQ,KAAK,aAAa,gCAAgC;AAAA,QAC5D,EAAE,QAAQ,KAAK,aAAa,mBAAmB;AAAA,MACjD;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { readJsonSafe } from '@open-mercato/shared/lib/http/readJsonSafe'\nimport { checkRateLimit, getClientIp, RATE_LIMIT_ERROR_FALLBACK } from '@open-mercato/shared/lib/ratelimit/helpers'\nimport type { RateLimiterService } from '@open-mercato/shared/lib/ratelimit/service'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport type { CredentialsService } from '../../../../integrations/lib/credentials-service'\nimport { CarrierShipment } from '../../../data/entities'\nimport { getShippingAdapter } from '../../../lib/adapter-registry'\nimport { getShippingCarrierQueue } from '../../../lib/queue'\nimport { shippingCarriersTag } from '../../openapi'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('shipping_carriers').child({ component: 'webhook' })\n\nexport const metadata = {\n  path: '/shipping-carriers/webhook/[provider]',\n  POST: { requireAuth: false },\n}\n\nconst WEBHOOK_VERIFICATION_FAILED = 'Webhook verification failed'\n\nconst shippingCarrierWebhookRateLimitConfig = {\n  points: 60,\n  duration: 60,\n  keyPrefix: 'shipping_carriers:webhook',\n}\n\nfunction readCarrierShipmentId(payload: Record<string, unknown> | null): string | null {\n  if (!payload) return null\n  const shipmentId = payload.shipmentId\n  if (typeof shipmentId === 'string' && shipmentId.trim().length > 0) return shipmentId.trim()\n  const data = payload.data\n  if (data && typeof data === 'object') {\n    const nested = (data as Record<string, unknown>).shipmentId\n    if (typeof nested === 'string' && nested.trim().length > 0) return nested.trim()\n  }\n  return null\n}\n\nexport async function POST(req: Request, { params }: { params: Promise<{ provider: string }> | { provider: string } }) {\n  const resolvedParams = await params\n  const providerKey = resolvedParams.provider\n  const adapter = getShippingAdapter(providerKey)\n  if (!adapter) {\n    return NextResponse.json({ error: `No shipping adapter for provider: ${providerKey}` }, { status: 404 })\n  }\n\n  const container = await createRequestContainer()\n  const rateLimitResponse = await checkProviderWebhookRateLimit(container, req, providerKey)\n  if (rateLimitResponse) return rateLimitResponse\n\n  const rawBody = await req.text()\n  const headers: Record<string, string> = {}\n  req.headers.forEach((value, key) => {\n    headers[key] = value\n  })\n\n  const em = container.resolve('em') as EntityManager\n  const integrationCredentialsService = container.resolve('integrationCredentialsService') as CredentialsService\n  const queue = getShippingCarrierQueue('shipping-carriers-webhook')\n  const payload = await readJsonSafe<Record<string, unknown>>(rawBody)\n  const carrierShipmentId = readCarrierShipmentId(payload)\n\n  try {\n    // The webhook endpoint is unauthenticated. Tenant/organization scope MUST come from a\n    // CarrierShipment whose per-tenant credentials successfully verify the inbound\n    // signature \u2014 NEVER from attacker-controlled payload metadata or an unsigned retry.\n    // If no candidate shipment can be located by the provider-reported carrierShipmentId,\n    // or no candidate's credentials can verify the signature, we fail closed with 401.\n    // This mirrors the fix landed for payment_gateways in PR #1311.\n    const candidates = carrierShipmentId\n      ? await findWithDecryption(\n        em,\n        CarrierShipment,\n        {\n          providerKey,\n          carrierShipmentId,\n          deletedAt: null,\n        },\n        { limit: 10, orderBy: { createdAt: 'desc' } },\n      )\n      : []\n\n    let shipment: CarrierShipment | null = null\n    let matchedScope: { organizationId: string; tenantId: string } | null = null\n    let event: Awaited<ReturnType<typeof adapter.verifyWebhook>> | null = null\n    let lastVerificationError: unknown = null\n\n    for (const candidate of candidates) {\n      const candidateScope = { organizationId: candidate.organizationId, tenantId: candidate.tenantId }\n      const credentials = await integrationCredentialsService.resolve(`carrier_${providerKey}`, candidateScope) ?? {}\n      try {\n        event = await adapter.verifyWebhook({ rawBody, headers, credentials })\n        shipment = candidate\n        matchedScope = candidateScope\n        break\n      } catch (error: unknown) {\n        lastVerificationError = error\n      }\n    }\n\n    if (!event || !shipment || !matchedScope) {\n      throw lastVerificationError ?? new Error('Webhook verification failed: no matching shipment')\n    }\n\n    await queue.enqueue({\n      name: 'shipping-carrier-webhook',\n      payload: {\n        providerKey,\n        event,\n        shipmentId: shipment.id,\n        scope: matchedScope,\n      },\n    })\n\n    return NextResponse.json({ received: true, queued: true }, { status: 202 })\n  } catch (error: unknown) {\n    logger.warn('Webhook verification failed', { providerKey, err: error })\n    return NextResponse.json({ error: WEBHOOK_VERIFICATION_FAILED }, { status: 401 })\n  }\n}\n\nasync function checkProviderWebhookRateLimit(\n  container: { resolve: (name: string) => unknown },\n  req: Request,\n  providerKey: string,\n): Promise<NextResponse | null> {\n  const rateLimiterService = tryResolve<RateLimiterService>(container, 'rateLimiterService')\n  if (!rateLimiterService) return null\n\n  return checkRateLimit(\n    rateLimiterService,\n    shippingCarrierWebhookRateLimitConfig,\n    `${providerKey}:${getClientIp(req, rateLimiterService.trustProxyDepth) ?? 'unknown'}`,\n    RATE_LIMIT_ERROR_FALLBACK,\n  )\n}\n\nfunction tryResolve<T>(container: { resolve: (name: string) => unknown }, name: string): T | null {\n  try {\n    return container.resolve(name) as T\n  } catch {\n    return null\n  }\n}\n\nexport const openApi = {\n  tags: [shippingCarriersTag],\n  summary: 'Receive shipping carrier webhook',\n  methods: {\n    POST: {\n      summary: 'Process inbound carrier webhook',\n      tags: [shippingCarriersTag],\n      responses: [\n        { status: 202, description: 'Webhook accepted for async processing' },\n        { status: 401, description: 'Signature verification failed' },\n        { status: 404, description: 'Unknown provider' },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,oBAAoB;AAC7B,SAAS,gBAAgB,aAAa,iCAAiC;AAIvE,SAAS,uBAAuB;AAChC,SAAS,0BAA0B;AACnC,SAAS,+BAA+B;AACxC,SAAS,2BAA2B;AACpC,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,mBAAmB,EAAE,MAAM,EAAE,WAAW,UAAU,CAAC;AAExE,MAAM,WAAW;AAAA,EACtB,MAAM;AAAA,EACN,MAAM,EAAE,aAAa,MAAM;AAC7B;AAEA,MAAM,8BAA8B;AAEpC,MAAM,wCAAwC;AAAA,EAC5C,QAAQ;AAAA,EACR,UAAU;AAAA,EACV,WAAW;AACb;AAEA,SAAS,sBAAsB,SAAwD;AACrF,MAAI,CAAC,QAAS,QAAO;AACrB,QAAM,aAAa,QAAQ;AAC3B,MAAI,OAAO,eAAe,YAAY,WAAW,KAAK,EAAE,SAAS,EAAG,QAAO,WAAW,KAAK;AAC3F,QAAM,OAAO,QAAQ;AACrB,MAAI,QAAQ,OAAO,SAAS,UAAU;AACpC,UAAM,SAAU,KAAiC;AACjD,QAAI,OAAO,WAAW,YAAY,OAAO,KAAK,EAAE,SAAS,EAAG,QAAO,OAAO,KAAK;AAAA,EACjF;AACA,SAAO;AACT;AAEA,eAAsB,KAAK,KAAc,EAAE,OAAO,GAAqE;AACrH,QAAM,iBAAiB,MAAM;AAC7B,QAAM,cAAc,eAAe;AACnC,QAAM,UAAU,mBAAmB,WAAW;AAC9C,MAAI,CAAC,SAAS;AACZ,WAAO,aAAa,KAAK,EAAE,OAAO,qCAAqC,WAAW,GAAG,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACzG;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,oBAAoB,MAAM,8BAA8B,WAAW,KAAK,WAAW;AACzF,MAAI,kBAAmB,QAAO;AAE9B,QAAM,UAAU,MAAM,IAAI,KAAK;AAC/B,QAAM,UAAkC,CAAC;AACzC,MAAI,QAAQ,QAAQ,CAAC,OAAO,QAAQ;AAClC,YAAQ,GAAG,IAAI;AAAA,EACjB,CAAC;AAED,QAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,QAAM,gCAAgC,UAAU,QAAQ,+BAA+B;AACvF,QAAM,QAAQ,wBAAwB,2BAA2B;AACjE,QAAM,UAAU,MAAM,aAAsC,OAAO;AACnE,QAAM,oBAAoB,sBAAsB,OAAO;AAEvD,MAAI;AAOF,UAAM,aAAa,oBACf,MAAM;AAAA,MACN;AAAA,MACA;AAAA,MACA;AAAA,QACE;AAAA,QACA;AAAA,QACA,WAAW;AAAA,MACb;AAAA,MACA,EAAE,OAAO,IAAI,SAAS,EAAE,WAAW,OAAO,EAAE;AAAA,IAC9C,IACE,CAAC;AAEL,QAAI,WAAmC;AACvC,QAAI,eAAoE;AACxE,QAAI,QAAkE;AACtE,QAAI,wBAAiC;AAErC,eAAW,aAAa,YAAY;AAClC,YAAM,iBAAiB,EAAE,gBAAgB,UAAU,gBAAgB,UAAU,UAAU,SAAS;AAChG,YAAM,cAAc,MAAM,8BAA8B,QAAQ,WAAW,WAAW,IAAI,cAAc,KAAK,CAAC;AAC9G,UAAI;AACF,gBAAQ,MAAM,QAAQ,cAAc,EAAE,SAAS,SAAS,YAAY,CAAC;AACrE,mBAAW;AACX,uBAAe;AACf;AAAA,MACF,SAAS,OAAgB;AACvB,gCAAwB;AAAA,MAC1B;AAAA,IACF;AAEA,QAAI,CAAC,SAAS,CAAC,YAAY,CAAC,cAAc;AACxC,YAAM,yBAAyB,IAAI,MAAM,mDAAmD;AAAA,IAC9F;AAEA,UAAM,MAAM,QAAQ;AAAA,MAClB,MAAM;AAAA,MACN,SAAS;AAAA,QACP;AAAA,QACA;AAAA,QACA,YAAY,SAAS;AAAA,QACrB,OAAO;AAAA,MACT;AAAA,IACF,CAAC;AAED,WAAO,aAAa,KAAK,EAAE,UAAU,MAAM,QAAQ,KAAK,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC5E,SAAS,OAAgB;AACvB,WAAO,KAAK,+BAA+B,EAAE,aAAa,KAAK,MAAM,CAAC;AACtE,WAAO,aAAa,KAAK,EAAE,OAAO,4BAA4B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAClF;AACF;AAEA,eAAe,8BACb,WACA,KACA,aAC8B;AAC9B,QAAM,qBAAqB,WAA+B,WAAW,oBAAoB;AACzF,MAAI,CAAC,mBAAoB,QAAO;AAEhC,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,GAAG,WAAW,IAAI,YAAY,KAAK,mBAAmB,eAAe,KAAK,SAAS;AAAA,IACnF;AAAA,EACF;AACF;AAEA,SAAS,WAAc,WAAmD,MAAwB;AAChG,MAAI;AACF,WAAO,UAAU,QAAQ,IAAI;AAAA,EAC/B,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEO,MAAM,UAAU;AAAA,EACrB,MAAM,CAAC,mBAAmB;AAAA,EAC1B,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,MAAM,CAAC,mBAAmB;AAAA,MAC1B,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,wCAAwC;AAAA,QACpE,EAAE,QAAQ,KAAK,aAAa,gCAAgC;AAAA,QAC5D,EAAE,QAAQ,KAAK,aAAa,mBAAmB;AAAA,MACjD;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/shipping_carriers/lib/shipping-service.js

@@ -18,6 +18,12 @@ import {
   syncShipmentStatus,
   TERMINAL_SHIPPING_STATUSES
 } from "./status-sync.js";
+class CarrierShipmentNotFoundError extends Error {
+  constructor() {
+    super("Shipment not found");
+    this.name = "CarrierShipmentNotFoundError";
+  }
+}
 function createShippingCarrierService(deps) {
   const { em, integrationCredentialsService } = deps;
   async function findShipmentOrThrow(shipmentId, scope) {
@@ -34,7 +40,26 @@ function createShippingCarrierService(deps) {
       scope
     );
     if (!shipment) {
-      throw new Error("Shipment not found");
+      throw new CarrierShipmentNotFoundError();
+    }
+    return shipment;
+  }
+  async function findShipmentByTrackingNumberOrThrow(providerKey, trackingNumber, scope) {
+    const shipment = await findOneWithDecryption(
+      em,
+      CarrierShipment,
+      {
+        providerKey,
+        trackingNumber,
+        organizationId: scope.organizationId,
+        tenantId: scope.tenantId,
+        deletedAt: null
+      },
+      void 0,
+      scope
+    );
+    if (!shipment) {
+      throw new CarrierShipmentNotFoundError();
     }
     return shipment;
   }
@@ -138,28 +163,24 @@ function createShippingCarrierService(deps) {
       }
     },
     async getTracking(input) {
-      const { adapter, credentials } = await resolveAdapter(input.providerKey, {
+      const scope = {
         organizationId: input.organizationId,
         tenantId: input.tenantId
-      });
-      const shipment = input.shipmentId ? await findOneWithDecryption(
-        em,
-        CarrierShipment,
-        {
-          id: input.shipmentId,
-          organizationId: input.organizationId,
-          tenantId: input.tenantId,
-          deletedAt: null
-        },
-        void 0,
-        {
-          organizationId: input.organizationId,
-          tenantId: input.tenantId
+      };
+      const { adapter, credentials } = await resolveAdapter(input.providerKey, scope);
+      let shipment;
+      if (input.shipmentId) {
+        shipment = await findShipmentOrThrow(input.shipmentId, scope);
+      } else {
+        const trackingNumber = input.trackingNumber;
+        if (!trackingNumber) {
+          throw new CarrierShipmentNotFoundError();
         }
-      ) : null;
+        shipment = await findShipmentByTrackingNumberOrThrow(input.providerKey, trackingNumber, scope);
+      }
       return adapter.getTracking({
-        shipmentId: shipment?.carrierShipmentId ?? input.shipmentId,
-        trackingNumber: input.trackingNumber ?? shipment?.trackingNumber,
+        shipmentId: shipment.carrierShipmentId,
+        trackingNumber: shipment.trackingNumber,
         credentials
       });
     },
@@ -252,6 +273,7 @@ function createShippingCarrierService(deps) {
   };
 }
 export {
+  CarrierShipmentNotFoundError,
   createShippingCarrierService
 };
 //# sourceMappingURL=shipping-service.js.map