@open-mercato/core 0.6.6-develop.6465.1.019f0fb26f → 0.6.6-develop.6471.1.9ab5bdd79a

package/dist/modules/shipping_carriers/lib/shipping-service.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/shipping_carriers/lib/shipping-service.ts"],
-  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport type { CredentialsService } from '../../integrations/lib/credentials-service'\nimport { CarrierShipment, type CarrierShipmentIdempotencyKey } from '../data/entities'\nimport { emitShippingEvent } from '../events'\nimport { getShippingAdapter } from './adapter-registry'\nimport type { UnifiedShipmentStatus } from './adapter'\nimport {\n  claimShipmentIdempotency,\n  computeShipmentRequestHash,\n  findShipmentIdempotencyClaim,\n  isShipmentIdempotencyConflictError,\n  releaseShipmentIdempotency,\n  resolveShipmentIdempotency,\n  ShipmentIdempotencyConflictError,\n} from './shipment-idempotency'\nimport {\n  getTerminalShippingEvent,\n  isValidShippingTransition,\n  ShipmentCancelNotAllowedError,\n  syncShipmentStatus,\n  TERMINAL_SHIPPING_STATUSES,\n} from './status-sync'\n\nexport function createShippingCarrierService(deps: {\n  em: EntityManager\n  integrationCredentialsService: CredentialsService\n}) {\n  const { em, integrationCredentialsService } = deps\n\n  async function findShipmentOrThrow(\n    shipmentId: string,\n    scope: { organizationId: string; tenantId: string },\n  ): Promise<CarrierShipment> {\n    const shipment = await findOneWithDecryption(\n      em,\n      CarrierShipment,\n      {\n        id: shipmentId,\n        organizationId: scope.organizationId,\n        tenantId: scope.tenantId,\n        deletedAt: null,\n      },\n      undefined,\n      scope,\n    )\n    if (!shipment) {\n      throw new Error('Shipment not found')\n    }\n    return shipment\n  }\n\n  async function resolveAdapter(providerKey: string, scope: { organizationId: string; tenantId: string }) {\n    const adapter = getShippingAdapter(providerKey)\n    if (!adapter) throw new Error(`No shipping adapter registered for provider: ${providerKey}`)\n    const credentials = await integrationCredentialsService.resolve(`carrier_${providerKey}`, scope) ?? {}\n    return { adapter, credentials }\n  }\n\n  return {\n    async calculateRates(input: {\n      providerKey: string\n      origin: { countryCode: string; postalCode: string; city: string; line1: string; line2?: string }\n      destination: { countryCode: string; postalCode: string; city: string; line1: string; line2?: string }\n      packages: Array<{ weightKg: number; lengthCm: number; widthCm: number; heightCm: number }>\n      receiverPhone?: string\n      receiverEmail?: string\n      organizationId: string\n      tenantId: string\n    }) {\n      const { adapter, credentials } = await resolveAdapter(input.providerKey, {\n        organizationId: input.organizationId,\n        tenantId: input.tenantId,\n      })\n      const mergedCredentials = {\n        ...credentials,\n        ...(input.receiverPhone !== undefined ? { receiverPhone: input.receiverPhone } : {}),\n        ...(input.receiverEmail !== undefined ? { receiverEmail: input.receiverEmail } : {}),\n      }\n      return adapter.calculateRates({\n        origin: input.origin,\n        destination: input.destination,\n        packages: input.packages,\n        credentials: mergedCredentials,\n      })\n    },\n\n    async createShipment(input: {\n      providerKey: string\n      orderId: string\n      origin: { countryCode: string; postalCode: string; city: string; line1: string; line2?: string }\n      destination: { countryCode: string; postalCode: string; city: string; line1: string; line2?: string }\n      packages: Array<{ weightKg: number; lengthCm: number; widthCm: number; heightCm: number }>\n      serviceCode: string\n      labelFormat?: 'pdf' | 'zpl' | 'png'\n      senderPhone?: string\n      senderEmail?: string\n      receiverPhone?: string\n      receiverEmail?: string\n      targetPoint?: string\n      c2cSendingMethod?: string\n      idempotencyKey?: string\n      organizationId: string\n      tenantId: string\n    }) {\n      const scope = { organizationId: input.organizationId, tenantId: input.tenantId }\n      let claim: CarrierShipmentIdempotencyKey | null = null\n      if (input.idempotencyKey) {\n        const { idempotencyKey: _idempotencyKey, ...fingerprint } = input\n        const requestHash = computeShipmentRequestHash(fingerprint)\n        const existing = await findShipmentIdempotencyClaim(em, input.idempotencyKey, input.providerKey, scope)\n        if (existing) {\n          if (existing.requestHash !== requestHash) {\n            throw new ShipmentIdempotencyConflictError(input.idempotencyKey)\n          }\n          if (existing.shipmentId) {\n            return findShipmentOrThrow(existing.shipmentId, scope)\n          }\n          // Claim exists but the original request has not resolved yet (concurrent in-flight).\n          throw new ShipmentIdempotencyConflictError(input.idempotencyKey)\n        }\n        claim = await claimShipmentIdempotency(em, input.idempotencyKey, input.providerKey, requestHash, scope)\n        if (!claim) {\n          // Lost the claim race with a concurrent request creating the same shipment.\n          throw new ShipmentIdempotencyConflictError(input.idempotencyKey)\n        }\n      }\n      let carrierShipmentCreated = false\n      try {\n        const { adapter, credentials } = await resolveAdapter(input.providerKey, scope)\n        const mergedCredentials = {\n          ...credentials,\n          ...(input.senderPhone !== undefined ? { senderPhone: input.senderPhone } : {}),\n          ...(input.senderEmail !== undefined ? { senderEmail: input.senderEmail } : {}),\n          ...(input.receiverPhone !== undefined ? { receiverPhone: input.receiverPhone } : {}),\n          ...(input.receiverEmail !== undefined ? { receiverEmail: input.receiverEmail } : {}),\n          ...(input.targetPoint !== undefined ? { targetPoint: input.targetPoint } : {}),\n          ...(input.c2cSendingMethod !== undefined ? { c2cSendingMethod: input.c2cSendingMethod } : {}),\n        }\n        const created = await adapter.createShipment({\n          orderId: input.orderId,\n          origin: input.origin,\n          destination: input.destination,\n          packages: input.packages,\n          serviceCode: input.serviceCode,\n          credentials: mergedCredentials,\n          labelFormat: input.labelFormat,\n        })\n        carrierShipmentCreated = true\n        const shipment = em.create(CarrierShipment, {\n          orderId: input.orderId,\n          providerKey: input.providerKey,\n          carrierShipmentId: created.shipmentId,\n          trackingNumber: created.trackingNumber,\n          unifiedStatus: 'label_created',\n          labelUrl: created.labelUrl ?? null,\n          labelData: created.labelData ?? null,\n          organizationId: input.organizationId,\n          tenantId: input.tenantId,\n        })\n        await em.persist(shipment).flush()\n        if (claim) {\n          await resolveShipmentIdempotency(em, claim, shipment.id)\n        }\n        await emitShippingEvent('shipping_carriers.shipment.created', {\n          shipmentId: shipment.id,\n          orderId: input.orderId,\n          providerKey: input.providerKey,\n          trackingNumber: created.trackingNumber,\n          organizationId: input.organizationId,\n          tenantId: input.tenantId,\n        })\n        return shipment\n      } catch (error: unknown) {\n        // Release the claim only when the carrier was NOT successfully called, so a retry can\n        // proceed. If the carrier already created the shipment, keep the claim so a retry does\n        // not produce a duplicate upstream shipment.\n        if (claim && !carrierShipmentCreated && input.idempotencyKey && !isShipmentIdempotencyConflictError(error)) {\n          await releaseShipmentIdempotency(em, input.idempotencyKey, input.providerKey, scope).catch(() => {})\n        }\n        throw error\n      }\n    },\n\n    async getTracking(input: {\n      providerKey: string\n      shipmentId?: string\n      trackingNumber?: string\n      organizationId: string\n      tenantId: string\n    }) {\n      const { adapter, credentials } = await resolveAdapter(input.providerKey, {\n        organizationId: input.organizationId,\n        tenantId: input.tenantId,\n      })\n      const shipment = input.shipmentId\n        ? await findOneWithDecryption(\n          em,\n          CarrierShipment,\n          {\n            id: input.shipmentId,\n            organizationId: input.organizationId,\n            tenantId: input.tenantId,\n            deletedAt: null,\n          },\n          undefined,\n          {\n            organizationId: input.organizationId,\n            tenantId: input.tenantId,\n          },\n        )\n        : null\n      return adapter.getTracking({\n        shipmentId: shipment?.carrierShipmentId ?? input.shipmentId,\n        trackingNumber: input.trackingNumber ?? shipment?.trackingNumber,\n        credentials,\n      })\n    },\n\n    async refreshTracking(input: {\n      providerKey: string\n      shipmentId: string\n      organizationId: string\n      tenantId: string\n    }) {\n      const scope = { organizationId: input.organizationId, tenantId: input.tenantId }\n      const shipment = await findShipmentOrThrow(input.shipmentId, scope)\n      const { adapter, credentials } = await resolveAdapter(input.providerKey, scope)\n      const tracking = await adapter.getTracking({\n        shipmentId: shipment.carrierShipmentId,\n        trackingNumber: shipment.trackingNumber,\n        credentials,\n      })\n      const previousStatus = shipment.unifiedStatus\n      shipment.trackingEvents = tracking.events\n      shipment.lastPolledAt = new Date()\n      const transitionApplied = syncShipmentStatus(shipment, tracking.status)\n      await em.flush()\n      if (transitionApplied) {\n        const eventPayload = {\n          shipmentId: shipment.id,\n          providerKey: input.providerKey,\n          previousStatus,\n          newStatus: tracking.status,\n          organizationId: input.organizationId,\n          tenantId: input.tenantId,\n        }\n        await emitShippingEvent('shipping_carriers.shipment.status_changed', eventPayload)\n        if (TERMINAL_SHIPPING_STATUSES.has(tracking.status)) {\n          const terminalEvent = getTerminalShippingEvent(tracking.status)\n          if (terminalEvent) await emitShippingEvent(terminalEvent, eventPayload)\n        }\n      }\n      return tracking\n    },\n\n    async cancelShipment(input: {\n      providerKey: string\n      shipmentId: string\n      reason?: string\n      organizationId: string\n      tenantId: string\n    }) {\n      const scope = { organizationId: input.organizationId, tenantId: input.tenantId }\n      const shipment = await findShipmentOrThrow(input.shipmentId, scope)\n      if (!isValidShippingTransition(shipment.unifiedStatus as UnifiedShipmentStatus, 'cancelled')) {\n        throw new ShipmentCancelNotAllowedError(shipment.unifiedStatus)\n      }\n      const { adapter, credentials } = await resolveAdapter(input.providerKey, {\n        organizationId: input.organizationId,\n        tenantId: input.tenantId,\n      })\n      const result = await adapter.cancelShipment({\n        shipmentId: shipment.carrierShipmentId,\n        reason: input.reason,\n        credentials,\n      })\n      shipment.unifiedStatus = result.status\n      await em.flush()\n      await emitShippingEvent('shipping_carriers.shipment.cancelled', {\n        shipmentId: shipment.id,\n        providerKey: input.providerKey,\n        organizationId: input.organizationId,\n        tenantId: input.tenantId,\n      })\n      return result\n    },\n\n    async findShipmentByCarrierId(\n      providerKey: string,\n      carrierShipmentId: string,\n      scope: { organizationId: string; tenantId: string },\n    ) {\n      return findOneWithDecryption(\n        em,\n        CarrierShipment,\n        {\n          providerKey,\n          carrierShipmentId,\n          organizationId: scope.organizationId,\n          tenantId: scope.tenantId,\n          deletedAt: null,\n        },\n        undefined,\n        scope,\n      )\n    },\n\n    async searchDropOffPoints(input: {\n      providerKey: string\n      query?: string\n      type?: string\n      postCode?: string\n      organizationId: string\n      tenantId: string\n    }) {\n      const { adapter, credentials } = await resolveAdapter(input.providerKey, {\n        organizationId: input.organizationId,\n        tenantId: input.tenantId,\n      })\n      if (!adapter.searchDropOffPoints) {\n        throw new Error(`Provider ${input.providerKey} does not support drop-off point search`)\n      }\n      return adapter.searchDropOffPoints({\n        query: input.query,\n        type: input.type,\n        postCode: input.postCode,\n        credentials,\n      })\n    },\n  }\n}\n\nexport type ShippingCarrierService = ReturnType<typeof createShippingCarrierService>\n"],
-  "mappings": "AACA,SAAS,6BAA6B;AAEtC,SAAS,uBAA2D;AACpE,SAAS,yBAAyB;AAClC,SAAS,0BAA0B;AAEnC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEA,SAAS,6BAA6B,MAG1C;AACD,QAAM,EAAE,IAAI,8BAA8B,IAAI;AAE9C,iBAAe,oBACb,YACA,OAC0B;AAC1B,UAAM,WAAW,MAAM;AAAA,MACrB;AAAA,MACA;AAAA,MACA;AAAA,QACE,IAAI;AAAA,QACJ,gBAAgB,MAAM;AAAA,QACtB,UAAU,MAAM;AAAA,QAChB,WAAW;AAAA,MACb;AAAA,MACA;AAAA,MACA;AAAA,IACF;AACA,QAAI,CAAC,UAAU;AACb,YAAM,IAAI,MAAM,oBAAoB;AAAA,IACtC;AACA,WAAO;AAAA,EACT;AAEA,iBAAe,eAAe,aAAqB,OAAqD;AACtG,UAAM,UAAU,mBAAmB,WAAW;AAC9C,QAAI,CAAC,QAAS,OAAM,IAAI,MAAM,gDAAgD,WAAW,EAAE;AAC3F,UAAM,cAAc,MAAM,8BAA8B,QAAQ,WAAW,WAAW,IAAI,KAAK,KAAK,CAAC;AACrG,WAAO,EAAE,SAAS,YAAY;AAAA,EAChC;AAEA,SAAO;AAAA,IACL,MAAM,eAAe,OASlB;AACD,YAAM,EAAE,SAAS,YAAY,IAAI,MAAM,eAAe,MAAM,aAAa;AAAA,QACvE,gBAAgB,MAAM;AAAA,QACtB,UAAU,MAAM;AAAA,MAClB,CAAC;AACD,YAAM,oBAAoB;AAAA,QACxB,GAAG;AAAA,QACH,GAAI,MAAM,kBAAkB,SAAY,EAAE,eAAe,MAAM,cAAc,IAAI,CAAC;AAAA,QAClF,GAAI,MAAM,kBAAkB,SAAY,EAAE,eAAe,MAAM,cAAc,IAAI,CAAC;AAAA,MACpF;AACA,aAAO,QAAQ,eAAe;AAAA,QAC5B,QAAQ,MAAM;AAAA,QACd,aAAa,MAAM;AAAA,QACnB,UAAU,MAAM;AAAA,QAChB,aAAa;AAAA,MACf,CAAC;AAAA,IACH;AAAA,IAEA,MAAM,eAAe,OAiBlB;AACD,YAAM,QAAQ,EAAE,gBAAgB,MAAM,gBAAgB,UAAU,MAAM,SAAS;AAC/E,UAAI,QAA8C;AAClD,UAAI,MAAM,gBAAgB;AACxB,cAAM,EAAE,gBAAgB,iBAAiB,GAAG,YAAY,IAAI;AAC5D,cAAM,cAAc,2BAA2B,WAAW;AAC1D,cAAM,WAAW,MAAM,6BAA6B,IAAI,MAAM,gBAAgB,MAAM,aAAa,KAAK;AACtG,YAAI,UAAU;AACZ,cAAI,SAAS,gBAAgB,aAAa;AACxC,kBAAM,IAAI,iCAAiC,MAAM,cAAc;AAAA,UACjE;AACA,cAAI,SAAS,YAAY;AACvB,mBAAO,oBAAoB,SAAS,YAAY,KAAK;AAAA,UACvD;AAEA,gBAAM,IAAI,iCAAiC,MAAM,cAAc;AAAA,QACjE;AACA,gBAAQ,MAAM,yBAAyB,IAAI,MAAM,gBAAgB,MAAM,aAAa,aAAa,KAAK;AACtG,YAAI,CAAC,OAAO;AAEV,gBAAM,IAAI,iCAAiC,MAAM,cAAc;AAAA,QACjE;AAAA,MACF;AACA,UAAI,yBAAyB;AAC7B,UAAI;AACF,cAAM,EAAE,SAAS,YAAY,IAAI,MAAM,eAAe,MAAM,aAAa,KAAK;AAC9E,cAAM,oBAAoB;AAAA,UACxB,GAAG;AAAA,UACH,GAAI,MAAM,gBAAgB,SAAY,EAAE,aAAa,MAAM,YAAY,IAAI,CAAC;AAAA,UAC5E,GAAI,MAAM,gBAAgB,SAAY,EAAE,aAAa,MAAM,YAAY,IAAI,CAAC;AAAA,UAC5E,GAAI,MAAM,kBAAkB,SAAY,EAAE,eAAe,MAAM,cAAc,IAAI,CAAC;AAAA,UAClF,GAAI,MAAM,kBAAkB,SAAY,EAAE,eAAe,MAAM,cAAc,IAAI,CAAC;AAAA,UAClF,GAAI,MAAM,gBAAgB,SAAY,EAAE,aAAa,MAAM,YAAY,IAAI,CAAC;AAAA,UAC5E,GAAI,MAAM,qBAAqB,SAAY,EAAE,kBAAkB,MAAM,iBAAiB,IAAI,CAAC;AAAA,QAC7F;AACA,cAAM,UAAU,MAAM,QAAQ,eAAe;AAAA,UAC3C,SAAS,MAAM;AAAA,UACf,QAAQ,MAAM;AAAA,UACd,aAAa,MAAM;AAAA,UACnB,UAAU,MAAM;AAAA,UAChB,aAAa,MAAM;AAAA,UACnB,aAAa;AAAA,UACb,aAAa,MAAM;AAAA,QACrB,CAAC;AACD,iCAAyB;AACzB,cAAM,WAAW,GAAG,OAAO,iBAAiB;AAAA,UAC1C,SAAS,MAAM;AAAA,UACf,aAAa,MAAM;AAAA,UACnB,mBAAmB,QAAQ;AAAA,UAC3B,gBAAgB,QAAQ;AAAA,UACxB,eAAe;AAAA,UACf,UAAU,QAAQ,YAAY;AAAA,UAC9B,WAAW,QAAQ,aAAa;AAAA,UAChC,gBAAgB,MAAM;AAAA,UACtB,UAAU,MAAM;AAAA,QAClB,CAAC;AACD,cAAM,GAAG,QAAQ,QAAQ,EAAE,MAAM;AACjC,YAAI,OAAO;AACT,gBAAM,2BAA2B,IAAI,OAAO,SAAS,EAAE;AAAA,QACzD;AACA,cAAM,kBAAkB,sCAAsC;AAAA,UAC5D,YAAY,SAAS;AAAA,UACrB,SAAS,MAAM;AAAA,UACf,aAAa,MAAM;AAAA,UACnB,gBAAgB,QAAQ;AAAA,UACxB,gBAAgB,MAAM;AAAA,UACtB,UAAU,MAAM;AAAA,QAClB,CAAC;AACD,eAAO;AAAA,MACT,SAAS,OAAgB;AAIvB,YAAI,SAAS,CAAC,0BAA0B,MAAM,kBAAkB,CAAC,mCAAmC,KAAK,GAAG;AAC1G,gBAAM,2BAA2B,IAAI,MAAM,gBAAgB,MAAM,aAAa,KAAK,EAAE,MAAM,MAAM;AAAA,UAAC,CAAC;AAAA,QACrG;AACA,cAAM;AAAA,MACR;AAAA,IACF;AAAA,IAEA,MAAM,YAAY,OAMf;AACD,YAAM,EAAE,SAAS,YAAY,IAAI,MAAM,eAAe,MAAM,aAAa;AAAA,QACvE,gBAAgB,MAAM;AAAA,QACtB,UAAU,MAAM;AAAA,MAClB,CAAC;AACD,YAAM,WAAW,MAAM,aACnB,MAAM;AAAA,QACN;AAAA,QACA;AAAA,QACA;AAAA,UACE,IAAI,MAAM;AAAA,UACV,gBAAgB,MAAM;AAAA,UACtB,UAAU,MAAM;AAAA,UAChB,WAAW;AAAA,QACb;AAAA,QACA;AAAA,QACA;AAAA,UACE,gBAAgB,MAAM;AAAA,UACtB,UAAU,MAAM;AAAA,QAClB;AAAA,MACF,IACE;AACJ,aAAO,QAAQ,YAAY;AAAA,QACzB,YAAY,UAAU,qBAAqB,MAAM;AAAA,QACjD,gBAAgB,MAAM,kBAAkB,UAAU;AAAA,QAClD;AAAA,MACF,CAAC;AAAA,IACH;AAAA,IAEA,MAAM,gBAAgB,OAKnB;AACD,YAAM,QAAQ,EAAE,gBAAgB,MAAM,gBAAgB,UAAU,MAAM,SAAS;AAC/E,YAAM,WAAW,MAAM,oBAAoB,MAAM,YAAY,KAAK;AAClE,YAAM,EAAE,SAAS,YAAY,IAAI,MAAM,eAAe,MAAM,aAAa,KAAK;AAC9E,YAAM,WAAW,MAAM,QAAQ,YAAY;AAAA,QACzC,YAAY,SAAS;AAAA,QACrB,gBAAgB,SAAS;AAAA,QACzB;AAAA,MACF,CAAC;AACD,YAAM,iBAAiB,SAAS;AAChC,eAAS,iBAAiB,SAAS;AACnC,eAAS,eAAe,oBAAI,KAAK;AACjC,YAAM,oBAAoB,mBAAmB,UAAU,SAAS,MAAM;AACtE,YAAM,GAAG,MAAM;AACf,UAAI,mBAAmB;AACrB,cAAM,eAAe;AAAA,UACnB,YAAY,SAAS;AAAA,UACrB,aAAa,MAAM;AAAA,UACnB;AAAA,UACA,WAAW,SAAS;AAAA,UACpB,gBAAgB,MAAM;AAAA,UACtB,UAAU,MAAM;AAAA,QAClB;AACA,cAAM,kBAAkB,6CAA6C,YAAY;AACjF,YAAI,2BAA2B,IAAI,SAAS,MAAM,GAAG;AACnD,gBAAM,gBAAgB,yBAAyB,SAAS,MAAM;AAC9D,cAAI,cAAe,OAAM,kBAAkB,eAAe,YAAY;AAAA,QACxE;AAAA,MACF;AACA,aAAO;AAAA,IACT;AAAA,IAEA,MAAM,eAAe,OAMlB;AACD,YAAM,QAAQ,EAAE,gBAAgB,MAAM,gBAAgB,UAAU,MAAM,SAAS;AAC/E,YAAM,WAAW,MAAM,oBAAoB,MAAM,YAAY,KAAK;AAClE,UAAI,CAAC,0BAA0B,SAAS,eAAwC,WAAW,GAAG;AAC5F,cAAM,IAAI,8BAA8B,SAAS,aAAa;AAAA,MAChE;AACA,YAAM,EAAE,SAAS,YAAY,IAAI,MAAM,eAAe,MAAM,aAAa;AAAA,QACvE,gBAAgB,MAAM;AAAA,QACtB,UAAU,MAAM;AAAA,MAClB,CAAC;AACD,YAAM,SAAS,MAAM,QAAQ,eAAe;AAAA,QAC1C,YAAY,SAAS;AAAA,QACrB,QAAQ,MAAM;AAAA,QACd;AAAA,MACF,CAAC;AACD,eAAS,gBAAgB,OAAO;AAChC,YAAM,GAAG,MAAM;AACf,YAAM,kBAAkB,wCAAwC;AAAA,QAC9D,YAAY,SAAS;AAAA,QACrB,aAAa,MAAM;AAAA,QACnB,gBAAgB,MAAM;AAAA,QACtB,UAAU,MAAM;AAAA,MAClB,CAAC;AACD,aAAO;AAAA,IACT;AAAA,IAEA,MAAM,wBACJ,aACA,mBACA,OACA;AACA,aAAO;AAAA,QACL;AAAA,QACA;AAAA,QACA;AAAA,UACE;AAAA,UACA;AAAA,UACA,gBAAgB,MAAM;AAAA,UACtB,UAAU,MAAM;AAAA,UAChB,WAAW;AAAA,QACb;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IAEA,MAAM,oBAAoB,OAOvB;AACD,YAAM,EAAE,SAAS,YAAY,IAAI,MAAM,eAAe,MAAM,aAAa;AAAA,QACvE,gBAAgB,MAAM;AAAA,QACtB,UAAU,MAAM;AAAA,MAClB,CAAC;AACD,UAAI,CAAC,QAAQ,qBAAqB;AAChC,cAAM,IAAI,MAAM,YAAY,MAAM,WAAW,yCAAyC;AAAA,MACxF;AACA,aAAO,QAAQ,oBAAoB;AAAA,QACjC,OAAO,MAAM;AAAA,QACb,MAAM,MAAM;AAAA,QACZ,UAAU,MAAM;AAAA,QAChB;AAAA,MACF,CAAC;AAAA,IACH;AAAA,EACF;AACF;",
+  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport type { CredentialsService } from '../../integrations/lib/credentials-service'\nimport { CarrierShipment, type CarrierShipmentIdempotencyKey } from '../data/entities'\nimport { emitShippingEvent } from '../events'\nimport { getShippingAdapter } from './adapter-registry'\nimport type { UnifiedShipmentStatus } from './adapter'\nimport {\n  claimShipmentIdempotency,\n  computeShipmentRequestHash,\n  findShipmentIdempotencyClaim,\n  isShipmentIdempotencyConflictError,\n  releaseShipmentIdempotency,\n  resolveShipmentIdempotency,\n  ShipmentIdempotencyConflictError,\n} from './shipment-idempotency'\nimport {\n  getTerminalShippingEvent,\n  isValidShippingTransition,\n  ShipmentCancelNotAllowedError,\n  syncShipmentStatus,\n  TERMINAL_SHIPPING_STATUSES,\n} from './status-sync'\n\nexport class CarrierShipmentNotFoundError extends Error {\n  constructor() {\n    super('Shipment not found')\n    this.name = 'CarrierShipmentNotFoundError'\n  }\n}\n\nexport function createShippingCarrierService(deps: {\n  em: EntityManager\n  integrationCredentialsService: CredentialsService\n}) {\n  const { em, integrationCredentialsService } = deps\n\n  async function findShipmentOrThrow(\n    shipmentId: string,\n    scope: { organizationId: string; tenantId: string },\n  ): Promise<CarrierShipment> {\n    const shipment = await findOneWithDecryption(\n      em,\n      CarrierShipment,\n      {\n        id: shipmentId,\n        organizationId: scope.organizationId,\n        tenantId: scope.tenantId,\n        deletedAt: null,\n      },\n      undefined,\n      scope,\n    )\n    if (!shipment) {\n      throw new CarrierShipmentNotFoundError()\n    }\n    return shipment\n  }\n\n  async function findShipmentByTrackingNumberOrThrow(\n    providerKey: string,\n    trackingNumber: string,\n    scope: { organizationId: string; tenantId: string },\n  ): Promise<CarrierShipment> {\n    const shipment = await findOneWithDecryption(\n      em,\n      CarrierShipment,\n      {\n        providerKey,\n        trackingNumber,\n        organizationId: scope.organizationId,\n        tenantId: scope.tenantId,\n        deletedAt: null,\n      },\n      undefined,\n      scope,\n    )\n    if (!shipment) {\n      throw new CarrierShipmentNotFoundError()\n    }\n    return shipment\n  }\n\n  async function resolveAdapter(providerKey: string, scope: { organizationId: string; tenantId: string }) {\n    const adapter = getShippingAdapter(providerKey)\n    if (!adapter) throw new Error(`No shipping adapter registered for provider: ${providerKey}`)\n    const credentials = await integrationCredentialsService.resolve(`carrier_${providerKey}`, scope) ?? {}\n    return { adapter, credentials }\n  }\n\n  return {\n    async calculateRates(input: {\n      providerKey: string\n      origin: { countryCode: string; postalCode: string; city: string; line1: string; line2?: string }\n      destination: { countryCode: string; postalCode: string; city: string; line1: string; line2?: string }\n      packages: Array<{ weightKg: number; lengthCm: number; widthCm: number; heightCm: number }>\n      receiverPhone?: string\n      receiverEmail?: string\n      organizationId: string\n      tenantId: string\n    }) {\n      const { adapter, credentials } = await resolveAdapter(input.providerKey, {\n        organizationId: input.organizationId,\n        tenantId: input.tenantId,\n      })\n      const mergedCredentials = {\n        ...credentials,\n        ...(input.receiverPhone !== undefined ? { receiverPhone: input.receiverPhone } : {}),\n        ...(input.receiverEmail !== undefined ? { receiverEmail: input.receiverEmail } : {}),\n      }\n      return adapter.calculateRates({\n        origin: input.origin,\n        destination: input.destination,\n        packages: input.packages,\n        credentials: mergedCredentials,\n      })\n    },\n\n    async createShipment(input: {\n      providerKey: string\n      orderId: string\n      origin: { countryCode: string; postalCode: string; city: string; line1: string; line2?: string }\n      destination: { countryCode: string; postalCode: string; city: string; line1: string; line2?: string }\n      packages: Array<{ weightKg: number; lengthCm: number; widthCm: number; heightCm: number }>\n      serviceCode: string\n      labelFormat?: 'pdf' | 'zpl' | 'png'\n      senderPhone?: string\n      senderEmail?: string\n      receiverPhone?: string\n      receiverEmail?: string\n      targetPoint?: string\n      c2cSendingMethod?: string\n      idempotencyKey?: string\n      organizationId: string\n      tenantId: string\n    }) {\n      const scope = { organizationId: input.organizationId, tenantId: input.tenantId }\n      let claim: CarrierShipmentIdempotencyKey | null = null\n      if (input.idempotencyKey) {\n        const { idempotencyKey: _idempotencyKey, ...fingerprint } = input\n        const requestHash = computeShipmentRequestHash(fingerprint)\n        const existing = await findShipmentIdempotencyClaim(em, input.idempotencyKey, input.providerKey, scope)\n        if (existing) {\n          if (existing.requestHash !== requestHash) {\n            throw new ShipmentIdempotencyConflictError(input.idempotencyKey)\n          }\n          if (existing.shipmentId) {\n            return findShipmentOrThrow(existing.shipmentId, scope)\n          }\n          // Claim exists but the original request has not resolved yet (concurrent in-flight).\n          throw new ShipmentIdempotencyConflictError(input.idempotencyKey)\n        }\n        claim = await claimShipmentIdempotency(em, input.idempotencyKey, input.providerKey, requestHash, scope)\n        if (!claim) {\n          // Lost the claim race with a concurrent request creating the same shipment.\n          throw new ShipmentIdempotencyConflictError(input.idempotencyKey)\n        }\n      }\n      let carrierShipmentCreated = false\n      try {\n        const { adapter, credentials } = await resolveAdapter(input.providerKey, scope)\n        const mergedCredentials = {\n          ...credentials,\n          ...(input.senderPhone !== undefined ? { senderPhone: input.senderPhone } : {}),\n          ...(input.senderEmail !== undefined ? { senderEmail: input.senderEmail } : {}),\n          ...(input.receiverPhone !== undefined ? { receiverPhone: input.receiverPhone } : {}),\n          ...(input.receiverEmail !== undefined ? { receiverEmail: input.receiverEmail } : {}),\n          ...(input.targetPoint !== undefined ? { targetPoint: input.targetPoint } : {}),\n          ...(input.c2cSendingMethod !== undefined ? { c2cSendingMethod: input.c2cSendingMethod } : {}),\n        }\n        const created = await adapter.createShipment({\n          orderId: input.orderId,\n          origin: input.origin,\n          destination: input.destination,\n          packages: input.packages,\n          serviceCode: input.serviceCode,\n          credentials: mergedCredentials,\n          labelFormat: input.labelFormat,\n        })\n        carrierShipmentCreated = true\n        const shipment = em.create(CarrierShipment, {\n          orderId: input.orderId,\n          providerKey: input.providerKey,\n          carrierShipmentId: created.shipmentId,\n          trackingNumber: created.trackingNumber,\n          unifiedStatus: 'label_created',\n          labelUrl: created.labelUrl ?? null,\n          labelData: created.labelData ?? null,\n          organizationId: input.organizationId,\n          tenantId: input.tenantId,\n        })\n        await em.persist(shipment).flush()\n        if (claim) {\n          await resolveShipmentIdempotency(em, claim, shipment.id)\n        }\n        await emitShippingEvent('shipping_carriers.shipment.created', {\n          shipmentId: shipment.id,\n          orderId: input.orderId,\n          providerKey: input.providerKey,\n          trackingNumber: created.trackingNumber,\n          organizationId: input.organizationId,\n          tenantId: input.tenantId,\n        })\n        return shipment\n      } catch (error: unknown) {\n        // Release the claim only when the carrier was NOT successfully called, so a retry can\n        // proceed. If the carrier already created the shipment, keep the claim so a retry does\n        // not produce a duplicate upstream shipment.\n        if (claim && !carrierShipmentCreated && input.idempotencyKey && !isShipmentIdempotencyConflictError(error)) {\n          await releaseShipmentIdempotency(em, input.idempotencyKey, input.providerKey, scope).catch(() => {})\n        }\n        throw error\n      }\n    },\n\n    async getTracking(input: {\n      providerKey: string\n      shipmentId?: string\n      trackingNumber?: string\n      organizationId: string\n      tenantId: string\n    }) {\n      const scope = {\n        organizationId: input.organizationId,\n        tenantId: input.tenantId,\n      }\n      const { adapter, credentials } = await resolveAdapter(input.providerKey, scope)\n      let shipment: CarrierShipment\n      if (input.shipmentId) {\n        shipment = await findShipmentOrThrow(input.shipmentId, scope)\n      } else {\n        const trackingNumber = input.trackingNumber\n        if (!trackingNumber) {\n          throw new CarrierShipmentNotFoundError()\n        }\n        shipment = await findShipmentByTrackingNumberOrThrow(input.providerKey, trackingNumber, scope)\n      }\n      return adapter.getTracking({\n        shipmentId: shipment.carrierShipmentId,\n        trackingNumber: shipment.trackingNumber,\n        credentials,\n      })\n    },\n\n    async refreshTracking(input: {\n      providerKey: string\n      shipmentId: string\n      organizationId: string\n      tenantId: string\n    }) {\n      const scope = { organizationId: input.organizationId, tenantId: input.tenantId }\n      const shipment = await findShipmentOrThrow(input.shipmentId, scope)\n      const { adapter, credentials } = await resolveAdapter(input.providerKey, scope)\n      const tracking = await adapter.getTracking({\n        shipmentId: shipment.carrierShipmentId,\n        trackingNumber: shipment.trackingNumber,\n        credentials,\n      })\n      const previousStatus = shipment.unifiedStatus\n      shipment.trackingEvents = tracking.events\n      shipment.lastPolledAt = new Date()\n      const transitionApplied = syncShipmentStatus(shipment, tracking.status)\n      await em.flush()\n      if (transitionApplied) {\n        const eventPayload = {\n          shipmentId: shipment.id,\n          providerKey: input.providerKey,\n          previousStatus,\n          newStatus: tracking.status,\n          organizationId: input.organizationId,\n          tenantId: input.tenantId,\n        }\n        await emitShippingEvent('shipping_carriers.shipment.status_changed', eventPayload)\n        if (TERMINAL_SHIPPING_STATUSES.has(tracking.status)) {\n          const terminalEvent = getTerminalShippingEvent(tracking.status)\n          if (terminalEvent) await emitShippingEvent(terminalEvent, eventPayload)\n        }\n      }\n      return tracking\n    },\n\n    async cancelShipment(input: {\n      providerKey: string\n      shipmentId: string\n      reason?: string\n      organizationId: string\n      tenantId: string\n    }) {\n      const scope = { organizationId: input.organizationId, tenantId: input.tenantId }\n      const shipment = await findShipmentOrThrow(input.shipmentId, scope)\n      if (!isValidShippingTransition(shipment.unifiedStatus as UnifiedShipmentStatus, 'cancelled')) {\n        throw new ShipmentCancelNotAllowedError(shipment.unifiedStatus)\n      }\n      const { adapter, credentials } = await resolveAdapter(input.providerKey, {\n        organizationId: input.organizationId,\n        tenantId: input.tenantId,\n      })\n      const result = await adapter.cancelShipment({\n        shipmentId: shipment.carrierShipmentId,\n        reason: input.reason,\n        credentials,\n      })\n      shipment.unifiedStatus = result.status\n      await em.flush()\n      await emitShippingEvent('shipping_carriers.shipment.cancelled', {\n        shipmentId: shipment.id,\n        providerKey: input.providerKey,\n        organizationId: input.organizationId,\n        tenantId: input.tenantId,\n      })\n      return result\n    },\n\n    async findShipmentByCarrierId(\n      providerKey: string,\n      carrierShipmentId: string,\n      scope: { organizationId: string; tenantId: string },\n    ) {\n      return findOneWithDecryption(\n        em,\n        CarrierShipment,\n        {\n          providerKey,\n          carrierShipmentId,\n          organizationId: scope.organizationId,\n          tenantId: scope.tenantId,\n          deletedAt: null,\n        },\n        undefined,\n        scope,\n      )\n    },\n\n    async searchDropOffPoints(input: {\n      providerKey: string\n      query?: string\n      type?: string\n      postCode?: string\n      organizationId: string\n      tenantId: string\n    }) {\n      const { adapter, credentials } = await resolveAdapter(input.providerKey, {\n        organizationId: input.organizationId,\n        tenantId: input.tenantId,\n      })\n      if (!adapter.searchDropOffPoints) {\n        throw new Error(`Provider ${input.providerKey} does not support drop-off point search`)\n      }\n      return adapter.searchDropOffPoints({\n        query: input.query,\n        type: input.type,\n        postCode: input.postCode,\n        credentials,\n      })\n    },\n  }\n}\n\nexport type ShippingCarrierService = ReturnType<typeof createShippingCarrierService>\n"],
+  "mappings": "AACA,SAAS,6BAA6B;AAEtC,SAAS,uBAA2D;AACpE,SAAS,yBAAyB;AAClC,SAAS,0BAA0B;AAEnC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEA,MAAM,qCAAqC,MAAM;AAAA,EACtD,cAAc;AACZ,UAAM,oBAAoB;AAC1B,SAAK,OAAO;AAAA,EACd;AACF;AAEO,SAAS,6BAA6B,MAG1C;AACD,QAAM,EAAE,IAAI,8BAA8B,IAAI;AAE9C,iBAAe,oBACb,YACA,OAC0B;AAC1B,UAAM,WAAW,MAAM;AAAA,MACrB;AAAA,MACA;AAAA,MACA;AAAA,QACE,IAAI;AAAA,QACJ,gBAAgB,MAAM;AAAA,QACtB,UAAU,MAAM;AAAA,QAChB,WAAW;AAAA,MACb;AAAA,MACA;AAAA,MACA;AAAA,IACF;AACA,QAAI,CAAC,UAAU;AACb,YAAM,IAAI,6BAA6B;AAAA,IACzC;AACA,WAAO;AAAA,EACT;AAEA,iBAAe,oCACb,aACA,gBACA,OAC0B;AAC1B,UAAM,WAAW,MAAM;AAAA,MACrB;AAAA,MACA;AAAA,MACA;AAAA,QACE;AAAA,QACA;AAAA,QACA,gBAAgB,MAAM;AAAA,QACtB,UAAU,MAAM;AAAA,QAChB,WAAW;AAAA,MACb;AAAA,MACA;AAAA,MACA;AAAA,IACF;AACA,QAAI,CAAC,UAAU;AACb,YAAM,IAAI,6BAA6B;AAAA,IACzC;AACA,WAAO;AAAA,EACT;AAEA,iBAAe,eAAe,aAAqB,OAAqD;AACtG,UAAM,UAAU,mBAAmB,WAAW;AAC9C,QAAI,CAAC,QAAS,OAAM,IAAI,MAAM,gDAAgD,WAAW,EAAE;AAC3F,UAAM,cAAc,MAAM,8BAA8B,QAAQ,WAAW,WAAW,IAAI,KAAK,KAAK,CAAC;AACrG,WAAO,EAAE,SAAS,YAAY;AAAA,EAChC;AAEA,SAAO;AAAA,IACL,MAAM,eAAe,OASlB;AACD,YAAM,EAAE,SAAS,YAAY,IAAI,MAAM,eAAe,MAAM,aAAa;AAAA,QACvE,gBAAgB,MAAM;AAAA,QACtB,UAAU,MAAM;AAAA,MAClB,CAAC;AACD,YAAM,oBAAoB;AAAA,QACxB,GAAG;AAAA,QACH,GAAI,MAAM,kBAAkB,SAAY,EAAE,eAAe,MAAM,cAAc,IAAI,CAAC;AAAA,QAClF,GAAI,MAAM,kBAAkB,SAAY,EAAE,eAAe,MAAM,cAAc,IAAI,CAAC;AAAA,MACpF;AACA,aAAO,QAAQ,eAAe;AAAA,QAC5B,QAAQ,MAAM;AAAA,QACd,aAAa,MAAM;AAAA,QACnB,UAAU,MAAM;AAAA,QAChB,aAAa;AAAA,MACf,CAAC;AAAA,IACH;AAAA,IAEA,MAAM,eAAe,OAiBlB;AACD,YAAM,QAAQ,EAAE,gBAAgB,MAAM,gBAAgB,UAAU,MAAM,SAAS;AAC/E,UAAI,QAA8C;AAClD,UAAI,MAAM,gBAAgB;AACxB,cAAM,EAAE,gBAAgB,iBAAiB,GAAG,YAAY,IAAI;AAC5D,cAAM,cAAc,2BAA2B,WAAW;AAC1D,cAAM,WAAW,MAAM,6BAA6B,IAAI,MAAM,gBAAgB,MAAM,aAAa,KAAK;AACtG,YAAI,UAAU;AACZ,cAAI,SAAS,gBAAgB,aAAa;AACxC,kBAAM,IAAI,iCAAiC,MAAM,cAAc;AAAA,UACjE;AACA,cAAI,SAAS,YAAY;AACvB,mBAAO,oBAAoB,SAAS,YAAY,KAAK;AAAA,UACvD;AAEA,gBAAM,IAAI,iCAAiC,MAAM,cAAc;AAAA,QACjE;AACA,gBAAQ,MAAM,yBAAyB,IAAI,MAAM,gBAAgB,MAAM,aAAa,aAAa,KAAK;AACtG,YAAI,CAAC,OAAO;AAEV,gBAAM,IAAI,iCAAiC,MAAM,cAAc;AAAA,QACjE;AAAA,MACF;AACA,UAAI,yBAAyB;AAC7B,UAAI;AACF,cAAM,EAAE,SAAS,YAAY,IAAI,MAAM,eAAe,MAAM,aAAa,KAAK;AAC9E,cAAM,oBAAoB;AAAA,UACxB,GAAG;AAAA,UACH,GAAI,MAAM,gBAAgB,SAAY,EAAE,aAAa,MAAM,YAAY,IAAI,CAAC;AAAA,UAC5E,GAAI,MAAM,gBAAgB,SAAY,EAAE,aAAa,MAAM,YAAY,IAAI,CAAC;AAAA,UAC5E,GAAI,MAAM,kBAAkB,SAAY,EAAE,eAAe,MAAM,cAAc,IAAI,CAAC;AAAA,UAClF,GAAI,MAAM,kBAAkB,SAAY,EAAE,eAAe,MAAM,cAAc,IAAI,CAAC;AAAA,UAClF,GAAI,MAAM,gBAAgB,SAAY,EAAE,aAAa,MAAM,YAAY,IAAI,CAAC;AAAA,UAC5E,GAAI,MAAM,qBAAqB,SAAY,EAAE,kBAAkB,MAAM,iBAAiB,IAAI,CAAC;AAAA,QAC7F;AACA,cAAM,UAAU,MAAM,QAAQ,eAAe;AAAA,UAC3C,SAAS,MAAM;AAAA,UACf,QAAQ,MAAM;AAAA,UACd,aAAa,MAAM;AAAA,UACnB,UAAU,MAAM;AAAA,UAChB,aAAa,MAAM;AAAA,UACnB,aAAa;AAAA,UACb,aAAa,MAAM;AAAA,QACrB,CAAC;AACD,iCAAyB;AACzB,cAAM,WAAW,GAAG,OAAO,iBAAiB;AAAA,UAC1C,SAAS,MAAM;AAAA,UACf,aAAa,MAAM;AAAA,UACnB,mBAAmB,QAAQ;AAAA,UAC3B,gBAAgB,QAAQ;AAAA,UACxB,eAAe;AAAA,UACf,UAAU,QAAQ,YAAY;AAAA,UAC9B,WAAW,QAAQ,aAAa;AAAA,UAChC,gBAAgB,MAAM;AAAA,UACtB,UAAU,MAAM;AAAA,QAClB,CAAC;AACD,cAAM,GAAG,QAAQ,QAAQ,EAAE,MAAM;AACjC,YAAI,OAAO;AACT,gBAAM,2BAA2B,IAAI,OAAO,SAAS,EAAE;AAAA,QACzD;AACA,cAAM,kBAAkB,sCAAsC;AAAA,UAC5D,YAAY,SAAS;AAAA,UACrB,SAAS,MAAM;AAAA,UACf,aAAa,MAAM;AAAA,UACnB,gBAAgB,QAAQ;AAAA,UACxB,gBAAgB,MAAM;AAAA,UACtB,UAAU,MAAM;AAAA,QAClB,CAAC;AACD,eAAO;AAAA,MACT,SAAS,OAAgB;AAIvB,YAAI,SAAS,CAAC,0BAA0B,MAAM,kBAAkB,CAAC,mCAAmC,KAAK,GAAG;AAC1G,gBAAM,2BAA2B,IAAI,MAAM,gBAAgB,MAAM,aAAa,KAAK,EAAE,MAAM,MAAM;AAAA,UAAC,CAAC;AAAA,QACrG;AACA,cAAM;AAAA,MACR;AAAA,IACF;AAAA,IAEA,MAAM,YAAY,OAMf;AACD,YAAM,QAAQ;AAAA,QACZ,gBAAgB,MAAM;AAAA,QACtB,UAAU,MAAM;AAAA,MAClB;AACA,YAAM,EAAE,SAAS,YAAY,IAAI,MAAM,eAAe,MAAM,aAAa,KAAK;AAC9E,UAAI;AACJ,UAAI,MAAM,YAAY;AACpB,mBAAW,MAAM,oBAAoB,MAAM,YAAY,KAAK;AAAA,MAC9D,OAAO;AACL,cAAM,iBAAiB,MAAM;AAC7B,YAAI,CAAC,gBAAgB;AACnB,gBAAM,IAAI,6BAA6B;AAAA,QACzC;AACA,mBAAW,MAAM,oCAAoC,MAAM,aAAa,gBAAgB,KAAK;AAAA,MAC/F;AACA,aAAO,QAAQ,YAAY;AAAA,QACzB,YAAY,SAAS;AAAA,QACrB,gBAAgB,SAAS;AAAA,QACzB;AAAA,MACF,CAAC;AAAA,IACH;AAAA,IAEA,MAAM,gBAAgB,OAKnB;AACD,YAAM,QAAQ,EAAE,gBAAgB,MAAM,gBAAgB,UAAU,MAAM,SAAS;AAC/E,YAAM,WAAW,MAAM,oBAAoB,MAAM,YAAY,KAAK;AAClE,YAAM,EAAE,SAAS,YAAY,IAAI,MAAM,eAAe,MAAM,aAAa,KAAK;AAC9E,YAAM,WAAW,MAAM,QAAQ,YAAY;AAAA,QACzC,YAAY,SAAS;AAAA,QACrB,gBAAgB,SAAS;AAAA,QACzB;AAAA,MACF,CAAC;AACD,YAAM,iBAAiB,SAAS;AAChC,eAAS,iBAAiB,SAAS;AACnC,eAAS,eAAe,oBAAI,KAAK;AACjC,YAAM,oBAAoB,mBAAmB,UAAU,SAAS,MAAM;AACtE,YAAM,GAAG,MAAM;AACf,UAAI,mBAAmB;AACrB,cAAM,eAAe;AAAA,UACnB,YAAY,SAAS;AAAA,UACrB,aAAa,MAAM;AAAA,UACnB;AAAA,UACA,WAAW,SAAS;AAAA,UACpB,gBAAgB,MAAM;AAAA,UACtB,UAAU,MAAM;AAAA,QAClB;AACA,cAAM,kBAAkB,6CAA6C,YAAY;AACjF,YAAI,2BAA2B,IAAI,SAAS,MAAM,GAAG;AACnD,gBAAM,gBAAgB,yBAAyB,SAAS,MAAM;AAC9D,cAAI,cAAe,OAAM,kBAAkB,eAAe,YAAY;AAAA,QACxE;AAAA,MACF;AACA,aAAO;AAAA,IACT;AAAA,IAEA,MAAM,eAAe,OAMlB;AACD,YAAM,QAAQ,EAAE,gBAAgB,MAAM,gBAAgB,UAAU,MAAM,SAAS;AAC/E,YAAM,WAAW,MAAM,oBAAoB,MAAM,YAAY,KAAK;AAClE,UAAI,CAAC,0BAA0B,SAAS,eAAwC,WAAW,GAAG;AAC5F,cAAM,IAAI,8BAA8B,SAAS,aAAa;AAAA,MAChE;AACA,YAAM,EAAE,SAAS,YAAY,IAAI,MAAM,eAAe,MAAM,aAAa;AAAA,QACvE,gBAAgB,MAAM;AAAA,QACtB,UAAU,MAAM;AAAA,MAClB,CAAC;AACD,YAAM,SAAS,MAAM,QAAQ,eAAe;AAAA,QAC1C,YAAY,SAAS;AAAA,QACrB,QAAQ,MAAM;AAAA,QACd;AAAA,MACF,CAAC;AACD,eAAS,gBAAgB,OAAO;AAChC,YAAM,GAAG,MAAM;AACf,YAAM,kBAAkB,wCAAwC;AAAA,QAC9D,YAAY,SAAS;AAAA,QACrB,aAAa,MAAM;AAAA,QACnB,gBAAgB,MAAM;AAAA,QACtB,UAAU,MAAM;AAAA,MAClB,CAAC;AACD,aAAO;AAAA,IACT;AAAA,IAEA,MAAM,wBACJ,aACA,mBACA,OACA;AACA,aAAO;AAAA,QACL;AAAA,QACA;AAAA,QACA;AAAA,UACE;AAAA,UACA;AAAA,UACA,gBAAgB,MAAM;AAAA,UACtB,UAAU,MAAM;AAAA,UAChB,WAAW;AAAA,QACb;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IAEA,MAAM,oBAAoB,OAOvB;AACD,YAAM,EAAE,SAAS,YAAY,IAAI,MAAM,eAAe,MAAM,aAAa;AAAA,QACvE,gBAAgB,MAAM;AAAA,QACtB,UAAU,MAAM;AAAA,MAClB,CAAC;AACD,UAAI,CAAC,QAAQ,qBAAqB;AAChC,cAAM,IAAI,MAAM,YAAY,MAAM,WAAW,yCAAyC;AAAA,MACxF;AACA,aAAO,QAAQ,oBAAoB;AAAA,QACjC,OAAO,MAAM;AAAA,QACb,MAAM,MAAM;AAAA,QACZ,UAAU,MAAM;AAAA,QAChB;AAAA,MACF,CAAC;AAAA,IACH;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/shipping_carriers/lib/upstream-error-response.js

@@ -1,9 +1,11 @@
 import { NextResponse } from "next/server";
 import { resolveTranslations } from "@open-mercato/shared/lib/i18n/server";
+import { createLogger } from "@open-mercato/shared/lib/logger";
+const logger = createLogger("shipping_carriers");
 const upstreamFailedKey = "shipping_carriers.errors.upstreamFailed";
 const upstreamFailedFallback = "Carrier provider request failed. Try again later.";
 async function shippingCarrierUpstreamErrorResponse(routeId, error) {
-  console.error(`[shipping_carriers.${routeId}] provider upstream error`, error);
+  logger.error("Provider upstream error", { routeId, err: error });
   const { translate } = await resolveTranslations();
   return NextResponse.json({ error: translate(upstreamFailedKey, upstreamFailedFallback) }, { status: 502 });
 }

package/dist/modules/shipping_carriers/lib/upstream-error-response.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/shipping_carriers/lib/upstream-error-response.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\n\nconst upstreamFailedKey = 'shipping_carriers.errors.upstreamFailed'\nconst upstreamFailedFallback = 'Carrier provider request failed. Try again later.'\n\nexport async function shippingCarrierUpstreamErrorResponse(routeId: string, error: unknown) {\n  console.error(`[shipping_carriers.${routeId}] provider upstream error`, error)\n  const { translate } = await resolveTranslations()\n  return NextResponse.json({ error: translate(upstreamFailedKey, upstreamFailedFallback) }, { status: 502 })\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,2BAA2B;AAEpC,MAAM,oBAAoB;AAC1B,MAAM,yBAAyB;AAE/B,eAAsB,qCAAqC,SAAiB,OAAgB;AAC1F,UAAQ,MAAM,sBAAsB,OAAO,6BAA6B,KAAK;AAC7E,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,SAAO,aAAa,KAAK,EAAE,OAAO,UAAU,mBAAmB,sBAAsB,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAC3G;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('shipping_carriers')\n\nconst upstreamFailedKey = 'shipping_carriers.errors.upstreamFailed'\nconst upstreamFailedFallback = 'Carrier provider request failed. Try again later.'\n\nexport async function shippingCarrierUpstreamErrorResponse(routeId: string, error: unknown) {\n  logger.error('Provider upstream error', { routeId, err: error })\n  const { translate } = await resolveTranslations()\n  return NextResponse.json({ error: translate(upstreamFailedKey, upstreamFailedFallback) }, { status: 502 })\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,2BAA2B;AACpC,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,mBAAmB;AAE/C,MAAM,oBAAoB;AAC1B,MAAM,yBAAyB;AAE/B,eAAsB,qCAAqC,SAAiB,OAAgB;AAC1F,SAAO,MAAM,2BAA2B,EAAE,SAAS,KAAK,MAAM,CAAC;AAC/D,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,SAAO,aAAa,KAAK,EAAE,OAAO,UAAU,mBAAmB,sBAAsB,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAC3G;",
   "names": []
 }

package/dist/modules/shipping_carriers/workers/webhook-processor.js

@@ -4,6 +4,8 @@ import { emitShippingEvent } from "../events.js";
 import { getShippingAdapter } from "../lib/adapter-registry.js";
 import { getTerminalShippingEvent, syncShipmentStatus, TERMINAL_SHIPPING_STATUSES } from "../lib/status-sync.js";
 import { claimWebhookProcessing, releaseWebhookClaim } from "../lib/webhook-utils.js";
+import { createLogger } from "@open-mercato/shared/lib/logger";
+const logger = createLogger("shipping_carriers").child({ component: "webhook-processor" });
 const metadata = {
   queue: "shipping-carriers-webhook",
   id: "shipping-carriers:webhook-processor",
@@ -70,11 +72,7 @@ async function handle(job, ctx) {
       throw error;
     }
   } catch (error) {
-    console.error("[shipping-carriers:webhook-processor] Job processing failed", {
-      providerKey: job.payload.providerKey,
-      shipmentId: job.payload.shipmentId,
-      error: error instanceof Error ? error.message : String(error)
-    });
+    logger.error("Job processing failed", { providerKey: job.payload.providerKey, shipmentId: job.payload.shipmentId, err: error });
     throw error;
   }
 }

package/dist/modules/shipping_carriers/workers/webhook-processor.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/shipping_carriers/workers/webhook-processor.ts"],
-  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport type { JobContext, QueuedJob, WorkerMeta } from '@open-mercato/queue'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { CarrierShipment } from '../data/entities'\nimport { emitShippingEvent } from '../events'\nimport type { ShippingWebhookEvent } from '../lib/adapter'\nimport { getShippingAdapter } from '../lib/adapter-registry'\nimport { getTerminalShippingEvent, syncShipmentStatus, TERMINAL_SHIPPING_STATUSES } from '../lib/status-sync'\nimport { claimWebhookProcessing, releaseWebhookClaim } from '../lib/webhook-utils'\n\ntype WebhookJobPayload = {\n  providerKey: string\n  event: ShippingWebhookEvent\n  shipmentId?: string | null\n  scope?: {\n    organizationId: string\n    tenantId: string\n  } | null\n}\n\ntype HandlerContext = JobContext & {\n  resolve: <T = unknown>(name: string) => T\n}\n\nexport const metadata: WorkerMeta = {\n  queue: 'shipping-carriers-webhook',\n  id: 'shipping-carriers:webhook-processor',\n  concurrency: 5,\n}\n\nexport default async function handle(job: QueuedJob<WebhookJobPayload>, ctx: HandlerContext): Promise<void> {\n  try {\n    const em = ctx.resolve<EntityManager>('em')\n    const adapter = getShippingAdapter(job.payload.providerKey)\n    if (!adapter) return\n\n    const shipment = job.payload.shipmentId && job.payload.scope\n      ? await findOneWithDecryption(\n        em,\n        CarrierShipment,\n        {\n          id: job.payload.shipmentId,\n          organizationId: job.payload.scope.organizationId,\n          tenantId: job.payload.scope.tenantId,\n          deletedAt: null,\n        },\n        undefined,\n        job.payload.scope,\n      )\n      : null\n    if (!shipment) return\n\n    const scope = { organizationId: shipment.organizationId, tenantId: shipment.tenantId }\n    const claimed = await claimWebhookProcessing(\n      em,\n      job.payload.event.idempotencyKey,\n      job.payload.providerKey,\n      scope,\n      job.payload.event.eventType,\n    )\n    if (!claimed) {\n      return\n    }\n\n    try {\n      const carrierStatus = typeof job.payload.event.data.status === 'string'\n        ? job.payload.event.data.status\n        : job.payload.event.eventType\n      const unifiedStatus = adapter.mapStatus(carrierStatus)\n      shipment.carrierStatus = carrierStatus\n      shipment.lastWebhookAt = new Date()\n\n      const transitionApplied = syncShipmentStatus(shipment, unifiedStatus)\n      if (!transitionApplied) return\n\n      await em.flush()\n\n      const eventPayload = {\n        shipmentId: shipment.id,\n        providerKey: job.payload.providerKey,\n        previousStatus: carrierStatus,\n        newStatus: unifiedStatus,\n        organizationId: shipment.organizationId,\n        tenantId: shipment.tenantId,\n      }\n      await emitShippingEvent('shipping_carriers.shipment.status_changed', eventPayload)\n      if (TERMINAL_SHIPPING_STATUSES.has(unifiedStatus)) {\n        const terminalEvent = getTerminalShippingEvent(unifiedStatus)\n        if (!terminalEvent) return\n        await emitShippingEvent(terminalEvent, eventPayload)\n      }\n    } catch (error) {\n      await releaseWebhookClaim(\n        em,\n        job.payload.event.idempotencyKey,\n        job.payload.providerKey,\n        scope,\n      )\n      throw error\n    }\n  } catch (error) {\n    console.error('[shipping-carriers:webhook-processor] Job processing failed', {\n      providerKey: job.payload.providerKey,\n      shipmentId: job.payload.shipmentId,\n      error: error instanceof Error ? error.message : String(error),\n    })\n    throw error\n  }\n}\n"],
-  "mappings": "AAEA,SAAS,6BAA6B;AACtC,SAAS,uBAAuB;AAChC,SAAS,yBAAyB;AAElC,SAAS,0BAA0B;AACnC,SAAS,0BAA0B,oBAAoB,kCAAkC;AACzF,SAAS,wBAAwB,2BAA2B;AAgBrD,MAAM,WAAuB;AAAA,EAClC,OAAO;AAAA,EACP,IAAI;AAAA,EACJ,aAAa;AACf;AAEA,eAAO,OAA8B,KAAmC,KAAoC;AAC1G,MAAI;AACF,UAAM,KAAK,IAAI,QAAuB,IAAI;AAC1C,UAAM,UAAU,mBAAmB,IAAI,QAAQ,WAAW;AAC1D,QAAI,CAAC,QAAS;AAEd,UAAM,WAAW,IAAI,QAAQ,cAAc,IAAI,QAAQ,QACnD,MAAM;AAAA,MACN;AAAA,MACA;AAAA,MACA;AAAA,QACE,IAAI,IAAI,QAAQ;AAAA,QAChB,gBAAgB,IAAI,QAAQ,MAAM;AAAA,QAClC,UAAU,IAAI,QAAQ,MAAM;AAAA,QAC5B,WAAW;AAAA,MACb;AAAA,MACA;AAAA,MACA,IAAI,QAAQ;AAAA,IACd,IACE;AACJ,QAAI,CAAC,SAAU;AAEf,UAAM,QAAQ,EAAE,gBAAgB,SAAS,gBAAgB,UAAU,SAAS,SAAS;AACrF,UAAM,UAAU,MAAM;AAAA,MACpB;AAAA,MACA,IAAI,QAAQ,MAAM;AAAA,MAClB,IAAI,QAAQ;AAAA,MACZ;AAAA,MACA,IAAI,QAAQ,MAAM;AAAA,IACpB;AACA,QAAI,CAAC,SAAS;AACZ;AAAA,IACF;AAEA,QAAI;AACF,YAAM,gBAAgB,OAAO,IAAI,QAAQ,MAAM,KAAK,WAAW,WAC3D,IAAI,QAAQ,MAAM,KAAK,SACvB,IAAI,QAAQ,MAAM;AACtB,YAAM,gBAAgB,QAAQ,UAAU,aAAa;AACrD,eAAS,gBAAgB;AACzB,eAAS,gBAAgB,oBAAI,KAAK;AAElC,YAAM,oBAAoB,mBAAmB,UAAU,aAAa;AACpE,UAAI,CAAC,kBAAmB;AAExB,YAAM,GAAG,MAAM;AAEf,YAAM,eAAe;AAAA,QACnB,YAAY,SAAS;AAAA,QACrB,aAAa,IAAI,QAAQ;AAAA,QACzB,gBAAgB;AAAA,QAChB,WAAW;AAAA,QACX,gBAAgB,SAAS;AAAA,QACzB,UAAU,SAAS;AAAA,MACrB;AACA,YAAM,kBAAkB,6CAA6C,YAAY;AACjF,UAAI,2BAA2B,IAAI,aAAa,GAAG;AACjD,cAAM,gBAAgB,yBAAyB,aAAa;AAC5D,YAAI,CAAC,cAAe;AACpB,cAAM,kBAAkB,eAAe,YAAY;AAAA,MACrD;AAAA,IACF,SAAS,OAAO;AACd,YAAM;AAAA,QACJ;AAAA,QACA,IAAI,QAAQ,MAAM;AAAA,QAClB,IAAI,QAAQ;AAAA,QACZ;AAAA,MACF;AACA,YAAM;AAAA,IACR;AAAA,EACF,SAAS,OAAO;AACd,YAAQ,MAAM,+DAA+D;AAAA,MAC3E,aAAa,IAAI,QAAQ;AAAA,MACzB,YAAY,IAAI,QAAQ;AAAA,MACxB,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAAA,IAC9D,CAAC;AACD,UAAM;AAAA,EACR;AACF;",
+  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport type { JobContext, QueuedJob, WorkerMeta } from '@open-mercato/queue'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { CarrierShipment } from '../data/entities'\nimport { emitShippingEvent } from '../events'\nimport type { ShippingWebhookEvent } from '../lib/adapter'\nimport { getShippingAdapter } from '../lib/adapter-registry'\nimport { getTerminalShippingEvent, syncShipmentStatus, TERMINAL_SHIPPING_STATUSES } from '../lib/status-sync'\nimport { claimWebhookProcessing, releaseWebhookClaim } from '../lib/webhook-utils'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('shipping_carriers').child({ component: 'webhook-processor' })\n\ntype WebhookJobPayload = {\n  providerKey: string\n  event: ShippingWebhookEvent\n  shipmentId?: string | null\n  scope?: {\n    organizationId: string\n    tenantId: string\n  } | null\n}\n\ntype HandlerContext = JobContext & {\n  resolve: <T = unknown>(name: string) => T\n}\n\nexport const metadata: WorkerMeta = {\n  queue: 'shipping-carriers-webhook',\n  id: 'shipping-carriers:webhook-processor',\n  concurrency: 5,\n}\n\nexport default async function handle(job: QueuedJob<WebhookJobPayload>, ctx: HandlerContext): Promise<void> {\n  try {\n    const em = ctx.resolve<EntityManager>('em')\n    const adapter = getShippingAdapter(job.payload.providerKey)\n    if (!adapter) return\n\n    const shipment = job.payload.shipmentId && job.payload.scope\n      ? await findOneWithDecryption(\n        em,\n        CarrierShipment,\n        {\n          id: job.payload.shipmentId,\n          organizationId: job.payload.scope.organizationId,\n          tenantId: job.payload.scope.tenantId,\n          deletedAt: null,\n        },\n        undefined,\n        job.payload.scope,\n      )\n      : null\n    if (!shipment) return\n\n    const scope = { organizationId: shipment.organizationId, tenantId: shipment.tenantId }\n    const claimed = await claimWebhookProcessing(\n      em,\n      job.payload.event.idempotencyKey,\n      job.payload.providerKey,\n      scope,\n      job.payload.event.eventType,\n    )\n    if (!claimed) {\n      return\n    }\n\n    try {\n      const carrierStatus = typeof job.payload.event.data.status === 'string'\n        ? job.payload.event.data.status\n        : job.payload.event.eventType\n      const unifiedStatus = adapter.mapStatus(carrierStatus)\n      shipment.carrierStatus = carrierStatus\n      shipment.lastWebhookAt = new Date()\n\n      const transitionApplied = syncShipmentStatus(shipment, unifiedStatus)\n      if (!transitionApplied) return\n\n      await em.flush()\n\n      const eventPayload = {\n        shipmentId: shipment.id,\n        providerKey: job.payload.providerKey,\n        previousStatus: carrierStatus,\n        newStatus: unifiedStatus,\n        organizationId: shipment.organizationId,\n        tenantId: shipment.tenantId,\n      }\n      await emitShippingEvent('shipping_carriers.shipment.status_changed', eventPayload)\n      if (TERMINAL_SHIPPING_STATUSES.has(unifiedStatus)) {\n        const terminalEvent = getTerminalShippingEvent(unifiedStatus)\n        if (!terminalEvent) return\n        await emitShippingEvent(terminalEvent, eventPayload)\n      }\n    } catch (error) {\n      await releaseWebhookClaim(\n        em,\n        job.payload.event.idempotencyKey,\n        job.payload.providerKey,\n        scope,\n      )\n      throw error\n    }\n  } catch (error) {\n    logger.error('Job processing failed', { providerKey: job.payload.providerKey, shipmentId: job.payload.shipmentId, err: error })\n    throw error\n  }\n}\n"],
+  "mappings": "AAEA,SAAS,6BAA6B;AACtC,SAAS,uBAAuB;AAChC,SAAS,yBAAyB;AAElC,SAAS,0BAA0B;AACnC,SAAS,0BAA0B,oBAAoB,kCAAkC;AACzF,SAAS,wBAAwB,2BAA2B;AAC5D,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,mBAAmB,EAAE,MAAM,EAAE,WAAW,oBAAoB,CAAC;AAgBlF,MAAM,WAAuB;AAAA,EAClC,OAAO;AAAA,EACP,IAAI;AAAA,EACJ,aAAa;AACf;AAEA,eAAO,OAA8B,KAAmC,KAAoC;AAC1G,MAAI;AACF,UAAM,KAAK,IAAI,QAAuB,IAAI;AAC1C,UAAM,UAAU,mBAAmB,IAAI,QAAQ,WAAW;AAC1D,QAAI,CAAC,QAAS;AAEd,UAAM,WAAW,IAAI,QAAQ,cAAc,IAAI,QAAQ,QACnD,MAAM;AAAA,MACN;AAAA,MACA;AAAA,MACA;AAAA,QACE,IAAI,IAAI,QAAQ;AAAA,QAChB,gBAAgB,IAAI,QAAQ,MAAM;AAAA,QAClC,UAAU,IAAI,QAAQ,MAAM;AAAA,QAC5B,WAAW;AAAA,MACb;AAAA,MACA;AAAA,MACA,IAAI,QAAQ;AAAA,IACd,IACE;AACJ,QAAI,CAAC,SAAU;AAEf,UAAM,QAAQ,EAAE,gBAAgB,SAAS,gBAAgB,UAAU,SAAS,SAAS;AACrF,UAAM,UAAU,MAAM;AAAA,MACpB;AAAA,MACA,IAAI,QAAQ,MAAM;AAAA,MAClB,IAAI,QAAQ;AAAA,MACZ;AAAA,MACA,IAAI,QAAQ,MAAM;AAAA,IACpB;AACA,QAAI,CAAC,SAAS;AACZ;AAAA,IACF;AAEA,QAAI;AACF,YAAM,gBAAgB,OAAO,IAAI,QAAQ,MAAM,KAAK,WAAW,WAC3D,IAAI,QAAQ,MAAM,KAAK,SACvB,IAAI,QAAQ,MAAM;AACtB,YAAM,gBAAgB,QAAQ,UAAU,aAAa;AACrD,eAAS,gBAAgB;AACzB,eAAS,gBAAgB,oBAAI,KAAK;AAElC,YAAM,oBAAoB,mBAAmB,UAAU,aAAa;AACpE,UAAI,CAAC,kBAAmB;AAExB,YAAM,GAAG,MAAM;AAEf,YAAM,eAAe;AAAA,QACnB,YAAY,SAAS;AAAA,QACrB,aAAa,IAAI,QAAQ;AAAA,QACzB,gBAAgB;AAAA,QAChB,WAAW;AAAA,QACX,gBAAgB,SAAS;AAAA,QACzB,UAAU,SAAS;AAAA,MACrB;AACA,YAAM,kBAAkB,6CAA6C,YAAY;AACjF,UAAI,2BAA2B,IAAI,aAAa,GAAG;AACjD,cAAM,gBAAgB,yBAAyB,aAAa;AAC5D,YAAI,CAAC,cAAe;AACpB,cAAM,kBAAkB,eAAe,YAAY;AAAA,MACrD;AAAA,IACF,SAAS,OAAO;AACd,YAAM;AAAA,QACJ;AAAA,QACA,IAAI,QAAQ,MAAM;AAAA,QAClB,IAAI,QAAQ;AAAA,QACZ;AAAA,MACF;AACA,YAAM;AAAA,IACR;AAAA,EACF,SAAS,OAAO;AACd,WAAO,MAAM,yBAAyB,EAAE,aAAa,IAAI,QAAQ,aAAa,YAAY,IAAI,QAAQ,YAAY,KAAK,MAAM,CAAC;AAC9H,UAAM;AAAA,EACR;AACF;",
   "names": []
 }

package/dist/modules/staff/api/comments.js

@@ -11,6 +11,8 @@ import {
 import { User } from "@open-mercato/core/modules/auth/data/entities";
 import { E } from "../../../generated/entities.ids.generated.js";
 import { createStaffCrudOpenApi, createPagedListResponseSchema, defaultOkResponseSchema } from "./openapi.js";
+import { createLogger } from "@open-mercato/shared/lib/logger";
+const logger = createLogger("staff");
 const rawBodySchema = z.object({}).passthrough();
 const listSchema = z.object({
   page: z.coerce.number().min(1).default(1),
@@ -139,7 +141,7 @@ const crud = makeCrudRoute({
           if (!("author_email" in record)) record.author_email = meta.email;
         });
       } catch (err) {
-        console.warn("[staff.comments] failed to enrich author metadata", err);
+        logger.warn("staff.comments failed to enrich author metadata", { err });
       }
     }
   }

package/dist/modules/staff/api/comments.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/staff/api/comments.ts"],
-  "sourcesContent": ["import { z } from 'zod'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { makeCrudRoute } from '@open-mercato/shared/lib/crud/factory'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { resolveCrudRecordId, parseScopedCommandInput } from '@open-mercato/shared/lib/api/scoped'\nimport { findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { StaffTeamMemberComment } from '../data/entities'\nimport {\n  staffTeamMemberCommentCreateSchema,\n  staffTeamMemberCommentUpdateSchema,\n} from '../data/validators'\nimport { User } from '@open-mercato/core/modules/auth/data/entities'\nimport { E } from '#generated/entities.ids.generated'\nimport { createStaffCrudOpenApi, createPagedListResponseSchema, defaultOkResponseSchema } from './openapi'\n\nconst rawBodySchema = z.object({}).passthrough()\n\nconst listSchema = z\n  .object({\n    page: z.coerce.number().min(1).default(1),\n    pageSize: z.coerce.number().min(1).max(100).default(50),\n    entityId: z.string().uuid().optional(),\n    sortField: z.string().optional(),\n    sortDir: z.enum(['asc', 'desc']).optional(),\n  })\n  .passthrough()\n\nconst routeMetadata = {\n  GET: { requireAuth: true, requireFeatures: ['staff.view'] },\n  POST: { requireAuth: true, requireFeatures: ['staff.manage_team'] },\n  PUT: { requireAuth: true, requireFeatures: ['staff.manage_team'] },\n  DELETE: { requireAuth: true, requireFeatures: ['staff.manage_team'] },\n}\n\nexport const metadata = routeMetadata\n\nconst crud = makeCrudRoute({\n  metadata: routeMetadata,\n  orm: {\n    entity: StaffTeamMemberComment,\n    idField: 'id',\n    orgField: 'organizationId',\n    tenantField: 'tenantId',\n    softDeleteField: 'deletedAt',\n  },\n  indexer: {\n    entityType: E.staff.staff_team_member_comment,\n  },\n  list: {\n    schema: listSchema,\n    entityId: E.staff.staff_team_member_comment,\n    fields: [\n      'id',\n      'member_id',\n      'body',\n      'author_user_id',\n      'appearance_icon',\n      'appearance_color',\n      'organization_id',\n      'tenant_id',\n      'created_at',\n      'updated_at',\n    ],\n    sortFieldMap: {\n      createdAt: 'created_at',\n      updatedAt: 'updated_at',\n    },\n    buildFilters: async (query) => {\n      const filters: Record<string, unknown> = {}\n      if (query.entityId) filters.member_id = { $eq: query.entityId }\n      return filters\n    },\n  },\n  actions: {\n    create: {\n      commandId: 'staff.team-member-comments.create',\n      schema: rawBodySchema,\n      mapInput: async ({ raw, ctx }) => {\n        const { translate } = await resolveTranslations()\n        return parseScopedCommandInput(staffTeamMemberCommentCreateSchema, raw ?? {}, ctx, translate)\n      },\n      response: ({ result }) => ({\n        id: result?.commentId ?? result?.id ?? null,\n        authorUserId: result?.authorUserId ?? null,\n      }),\n      status: 201,\n    },\n    update: {\n      commandId: 'staff.team-member-comments.update',\n      schema: rawBodySchema,\n      mapInput: async ({ raw, ctx }) => {\n        const { translate } = await resolveTranslations()\n        return parseScopedCommandInput(staffTeamMemberCommentUpdateSchema, raw ?? {}, ctx, translate)\n      },\n      response: () => ({ ok: true }),\n    },\n    delete: {\n      commandId: 'staff.team-member-comments.delete',\n      schema: rawBodySchema,\n      mapInput: async ({ parsed, ctx }) => {\n        const { translate } = await resolveTranslations()\n        const id = resolveCrudRecordId(parsed, ctx, translate)\n        return { id }\n      },\n      response: () => ({ ok: true }),\n    },\n  },\n  hooks: {\n    afterList: async (payload, ctx) => {\n      const items = Array.isArray(payload.items) ? payload.items : []\n      if (!items.length) return\n      const userIds = new Set<string>()\n      items.forEach((item: unknown) => {\n        if (!item || typeof item !== 'object') return\n        const record = item as Record<string, unknown>\n        const userId =\n          typeof record.author_user_id === 'string'\n            ? record.author_user_id\n            : typeof record.authorUserId === 'string'\n              ? record.authorUserId\n              : null\n        if (userId) userIds.add(userId)\n      })\n      if (!userIds.size) return\n      try {\n        const em = (ctx.container.resolve('em') as EntityManager).fork()\n        const users = await findWithDecryption(\n          em,\n          User,\n          { id: { $in: Array.from(userIds) } },\n          undefined,\n          { tenantId: ctx.auth?.tenantId ?? null, organizationId: ctx.selectedOrganizationId ?? null },\n        )\n        const map = new Map<string, { name: string | null; email: string | null }>()\n        users.forEach((user) => {\n          const name = typeof user.name === 'string' && user.name.trim().length\n            ? user.name.trim()\n            : null\n          map.set(user.id, {\n            name,\n            email: user.email ?? null,\n          })\n        })\n        items.forEach((item: unknown) => {\n          if (!item || typeof item !== 'object') return\n          const record = item as Record<string, unknown>\n          const userId =\n            typeof record.author_user_id === 'string'\n              ? record.author_user_id\n              : typeof record.authorUserId === 'string'\n                ? record.authorUserId\n                : null\n          if (!userId) return\n          const meta = map.get(userId)\n          if (!meta) return\n          record.authorName = meta.name\n          record.authorEmail = meta.email\n          if (!('author_name' in record)) record.author_name = meta.name\n          if (!('author_email' in record)) record.author_email = meta.email\n        })\n      } catch (err) {\n        console.warn('[staff.comments] failed to enrich author metadata', err)\n      }\n    },\n  },\n})\n\nexport const GET = crud.GET\nexport const POST = crud.POST\nexport const PUT = crud.PUT\nexport const DELETE = crud.DELETE\n\nconst commentListItemSchema = z\n  .object({\n    id: z.string().uuid(),\n    member_id: z.string().uuid().nullable().optional(),\n    body: z.string().nullable(),\n    author_user_id: z.string().uuid().nullable(),\n    appearance_icon: z.string().nullable().optional(),\n    appearance_color: z.string().nullable().optional(),\n    organization_id: z.string().uuid().nullable().optional(),\n    tenant_id: z.string().uuid().nullable().optional(),\n    created_at: z.string().nullable(),\n    updated_at: z.string().nullable().optional(),\n  })\n  .passthrough()\n\nconst commentCreateResponseSchema = z.object({\n  id: z.string().uuid().nullable(),\n  authorUserId: z.string().uuid().nullable(),\n})\n\nexport const openApi = createStaffCrudOpenApi({\n  resourceName: 'TeamMemberComment',\n  querySchema: listSchema,\n  listResponseSchema: createPagedListResponseSchema(commentListItemSchema),\n  create: {\n    schema: staffTeamMemberCommentCreateSchema,\n    responseSchema: commentCreateResponseSchema,\n    description: 'Adds a note to a team member timeline.',\n  },\n  update: {\n    schema: staffTeamMemberCommentUpdateSchema,\n    responseSchema: defaultOkResponseSchema,\n    description: 'Updates a team member note.',\n  },\n  del: {\n    schema: z.object({ id: z.string().uuid() }),\n    responseSchema: defaultOkResponseSchema,\n    description: 'Deletes a team member note.',\n  },\n})\n"],
-  "mappings": "AAAA,SAAS,SAAS;AAElB,SAAS,qBAAqB;AAC9B,SAAS,2BAA2B;AACpC,SAAS,qBAAqB,+BAA+B;AAC7D,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AACvC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,YAAY;AACrB,SAAS,SAAS;AAClB,SAAS,wBAAwB,+BAA+B,+BAA+B;AAE/F,MAAM,gBAAgB,EAAE,OAAO,CAAC,CAAC,EAAE,YAAY;AAE/C,MAAM,aAAa,EAChB,OAAO;AAAA,EACN,MAAM,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,QAAQ,CAAC;AAAA,EACxC,UAAU,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,QAAQ,EAAE;AAAA,EACtD,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACrC,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,SAAS,EAAE,KAAK,CAAC,OAAO,MAAM,CAAC,EAAE,SAAS;AAC5C,CAAC,EACA,YAAY;AAEf,MAAM,gBAAgB;AAAA,EACpB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,YAAY,EAAE;AAAA,EAC1D,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,mBAAmB,EAAE;AAAA,EAClE,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,mBAAmB,EAAE;AAAA,EACjE,QAAQ,EAAE,aAAa,MAAM,iBAAiB,CAAC,mBAAmB,EAAE;AACtE;AAEO,MAAM,WAAW;AAExB,MAAM,OAAO,cAAc;AAAA,EACzB,UAAU;AAAA,EACV,KAAK;AAAA,IACH,QAAQ;AAAA,IACR,SAAS;AAAA,IACT,UAAU;AAAA,IACV,aAAa;AAAA,IACb,iBAAiB;AAAA,EACnB;AAAA,EACA,SAAS;AAAA,IACP,YAAY,EAAE,MAAM;AAAA,EACtB;AAAA,EACA,MAAM;AAAA,IACJ,QAAQ;AAAA,IACR,UAAU,EAAE,MAAM;AAAA,IAClB,QAAQ;AAAA,MACN;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,IACA,cAAc;AAAA,MACZ,WAAW;AAAA,MACX,WAAW;AAAA,IACb;AAAA,IACA,cAAc,OAAO,UAAU;AAC7B,YAAM,UAAmC,CAAC;AAC1C,UAAI,MAAM,SAAU,SAAQ,YAAY,EAAE,KAAK,MAAM,SAAS;AAC9D,aAAO;AAAA,IACT;AAAA,EACF;AAAA,EACA,SAAS;AAAA,IACP,QAAQ;AAAA,MACN,WAAW;AAAA,MACX,QAAQ;AAAA,MACR,UAAU,OAAO,EAAE,KAAK,IAAI,MAAM;AAChC,cAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,eAAO,wBAAwB,oCAAoC,OAAO,CAAC,GAAG,KAAK,SAAS;AAAA,MAC9F;AAAA,MACA,UAAU,CAAC,EAAE,OAAO,OAAO;AAAA,QACzB,IAAI,QAAQ,aAAa,QAAQ,MAAM;AAAA,QACvC,cAAc,QAAQ,gBAAgB;AAAA,MACxC;AAAA,MACA,QAAQ;AAAA,IACV;AAAA,IACA,QAAQ;AAAA,MACN,WAAW;AAAA,MACX,QAAQ;AAAA,MACR,UAAU,OAAO,EAAE,KAAK,IAAI,MAAM;AAChC,cAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,eAAO,wBAAwB,oCAAoC,OAAO,CAAC,GAAG,KAAK,SAAS;AAAA,MAC9F;AAAA,MACA,UAAU,OAAO,EAAE,IAAI,KAAK;AAAA,IAC9B;AAAA,IACA,QAAQ;AAAA,MACN,WAAW;AAAA,MACX,QAAQ;AAAA,MACR,UAAU,OAAO,EAAE,QAAQ,IAAI,MAAM;AACnC,cAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,cAAM,KAAK,oBAAoB,QAAQ,KAAK,SAAS;AACrD,eAAO,EAAE,GAAG;AAAA,MACd;AAAA,MACA,UAAU,OAAO,EAAE,IAAI,KAAK;AAAA,IAC9B;AAAA,EACF;AAAA,EACA,OAAO;AAAA,IACL,WAAW,OAAO,SAAS,QAAQ;AACjC,YAAM,QAAQ,MAAM,QAAQ,QAAQ,KAAK,IAAI,QAAQ,QAAQ,CAAC;AAC9D,UAAI,CAAC,MAAM,OAAQ;AACnB,YAAM,UAAU,oBAAI,IAAY;AAChC,YAAM,QAAQ,CAAC,SAAkB;AAC/B,YAAI,CAAC,QAAQ,OAAO,SAAS,SAAU;AACvC,cAAM,SAAS;AACf,cAAM,SACJ,OAAO,OAAO,mBAAmB,WAC7B,OAAO,iBACP,OAAO,OAAO,iBAAiB,WAC7B,OAAO,eACP;AACR,YAAI,OAAQ,SAAQ,IAAI,MAAM;AAAA,MAChC,CAAC;AACD,UAAI,CAAC,QAAQ,KAAM;AACnB,UAAI;AACF,cAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,cAAM,QAAQ,MAAM;AAAA,UAClB;AAAA,UACA;AAAA,UACA,EAAE,IAAI,EAAE,KAAK,MAAM,KAAK,OAAO,EAAE,EAAE;AAAA,UACnC;AAAA,UACA,EAAE,UAAU,IAAI,MAAM,YAAY,MAAM,gBAAgB,IAAI,0BAA0B,KAAK;AAAA,QAC7F;AACA,cAAM,MAAM,oBAAI,IAA2D;AAC3E,cAAM,QAAQ,CAAC,SAAS;AACtB,gBAAM,OAAO,OAAO,KAAK,SAAS,YAAY,KAAK,KAAK,KAAK,EAAE,SAC3D,KAAK,KAAK,KAAK,IACf;AACJ,cAAI,IAAI,KAAK,IAAI;AAAA,YACf;AAAA,YACA,OAAO,KAAK,SAAS;AAAA,UACvB,CAAC;AAAA,QACH,CAAC;AACD,cAAM,QAAQ,CAAC,SAAkB;AAC/B,cAAI,CAAC,QAAQ,OAAO,SAAS,SAAU;AACvC,gBAAM,SAAS;AACf,gBAAM,SACJ,OAAO,OAAO,mBAAmB,WAC7B,OAAO,iBACP,OAAO,OAAO,iBAAiB,WAC7B,OAAO,eACP;AACR,cAAI,CAAC,OAAQ;AACb,gBAAM,OAAO,IAAI,IAAI,MAAM;AAC3B,cAAI,CAAC,KAAM;AACX,iBAAO,aAAa,KAAK;AACzB,iBAAO,cAAc,KAAK;AAC1B,cAAI,EAAE,iBAAiB,QAAS,QAAO,cAAc,KAAK;AAC1D,cAAI,EAAE,kBAAkB,QAAS,QAAO,eAAe,KAAK;AAAA,QAC9D,CAAC;AAAA,MACH,SAAS,KAAK;AACZ,gBAAQ,KAAK,qDAAqD,GAAG;AAAA,MACvE;AAAA,IACF;AAAA,EACF;AACF,CAAC;AAEM,MAAM,MAAM,KAAK;AACjB,MAAM,OAAO,KAAK;AAClB,MAAM,MAAM,KAAK;AACjB,MAAM,SAAS,KAAK;AAE3B,MAAM,wBAAwB,EAC3B,OAAO;AAAA,EACN,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS;AAAA,EACjD,MAAM,EAAE,OAAO,EAAE,SAAS;AAAA,EAC1B,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC3C,iBAAiB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAChD,kBAAkB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACjD,iBAAiB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS;AAAA,EACvD,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS;AAAA,EACjD,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,EAChC,YAAY,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAC7C,CAAC,EACA,YAAY;AAEf,MAAM,8BAA8B,EAAE,OAAO;AAAA,EAC3C,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC/B,cAAc,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAC3C,CAAC;AAEM,MAAM,UAAU,uBAAuB;AAAA,EAC5C,cAAc;AAAA,EACd,aAAa;AAAA,EACb,oBAAoB,8BAA8B,qBAAqB;AAAA,EACvE,QAAQ;AAAA,IACN,QAAQ;AAAA,IACR,gBAAgB;AAAA,IAChB,aAAa;AAAA,EACf;AAAA,EACA,QAAQ;AAAA,IACN,QAAQ;AAAA,IACR,gBAAgB;AAAA,IAChB,aAAa;AAAA,EACf;AAAA,EACA,KAAK;AAAA,IACH,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAAA,IAC1C,gBAAgB;AAAA,IAChB,aAAa;AAAA,EACf;AACF,CAAC;",
+  "sourcesContent": ["import { z } from 'zod'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { makeCrudRoute } from '@open-mercato/shared/lib/crud/factory'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { resolveCrudRecordId, parseScopedCommandInput } from '@open-mercato/shared/lib/api/scoped'\nimport { findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { StaffTeamMemberComment } from '../data/entities'\nimport {\n  staffTeamMemberCommentCreateSchema,\n  staffTeamMemberCommentUpdateSchema,\n} from '../data/validators'\nimport { User } from '@open-mercato/core/modules/auth/data/entities'\nimport { E } from '#generated/entities.ids.generated'\nimport { createStaffCrudOpenApi, createPagedListResponseSchema, defaultOkResponseSchema } from './openapi'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('staff')\n\nconst rawBodySchema = z.object({}).passthrough()\n\nconst listSchema = z\n  .object({\n    page: z.coerce.number().min(1).default(1),\n    pageSize: z.coerce.number().min(1).max(100).default(50),\n    entityId: z.string().uuid().optional(),\n    sortField: z.string().optional(),\n    sortDir: z.enum(['asc', 'desc']).optional(),\n  })\n  .passthrough()\n\nconst routeMetadata = {\n  GET: { requireAuth: true, requireFeatures: ['staff.view'] },\n  POST: { requireAuth: true, requireFeatures: ['staff.manage_team'] },\n  PUT: { requireAuth: true, requireFeatures: ['staff.manage_team'] },\n  DELETE: { requireAuth: true, requireFeatures: ['staff.manage_team'] },\n}\n\nexport const metadata = routeMetadata\n\nconst crud = makeCrudRoute({\n  metadata: routeMetadata,\n  orm: {\n    entity: StaffTeamMemberComment,\n    idField: 'id',\n    orgField: 'organizationId',\n    tenantField: 'tenantId',\n    softDeleteField: 'deletedAt',\n  },\n  indexer: {\n    entityType: E.staff.staff_team_member_comment,\n  },\n  list: {\n    schema: listSchema,\n    entityId: E.staff.staff_team_member_comment,\n    fields: [\n      'id',\n      'member_id',\n      'body',\n      'author_user_id',\n      'appearance_icon',\n      'appearance_color',\n      'organization_id',\n      'tenant_id',\n      'created_at',\n      'updated_at',\n    ],\n    sortFieldMap: {\n      createdAt: 'created_at',\n      updatedAt: 'updated_at',\n    },\n    buildFilters: async (query) => {\n      const filters: Record<string, unknown> = {}\n      if (query.entityId) filters.member_id = { $eq: query.entityId }\n      return filters\n    },\n  },\n  actions: {\n    create: {\n      commandId: 'staff.team-member-comments.create',\n      schema: rawBodySchema,\n      mapInput: async ({ raw, ctx }) => {\n        const { translate } = await resolveTranslations()\n        return parseScopedCommandInput(staffTeamMemberCommentCreateSchema, raw ?? {}, ctx, translate)\n      },\n      response: ({ result }) => ({\n        id: result?.commentId ?? result?.id ?? null,\n        authorUserId: result?.authorUserId ?? null,\n      }),\n      status: 201,\n    },\n    update: {\n      commandId: 'staff.team-member-comments.update',\n      schema: rawBodySchema,\n      mapInput: async ({ raw, ctx }) => {\n        const { translate } = await resolveTranslations()\n        return parseScopedCommandInput(staffTeamMemberCommentUpdateSchema, raw ?? {}, ctx, translate)\n      },\n      response: () => ({ ok: true }),\n    },\n    delete: {\n      commandId: 'staff.team-member-comments.delete',\n      schema: rawBodySchema,\n      mapInput: async ({ parsed, ctx }) => {\n        const { translate } = await resolveTranslations()\n        const id = resolveCrudRecordId(parsed, ctx, translate)\n        return { id }\n      },\n      response: () => ({ ok: true }),\n    },\n  },\n  hooks: {\n    afterList: async (payload, ctx) => {\n      const items = Array.isArray(payload.items) ? payload.items : []\n      if (!items.length) return\n      const userIds = new Set<string>()\n      items.forEach((item: unknown) => {\n        if (!item || typeof item !== 'object') return\n        const record = item as Record<string, unknown>\n        const userId =\n          typeof record.author_user_id === 'string'\n            ? record.author_user_id\n            : typeof record.authorUserId === 'string'\n              ? record.authorUserId\n              : null\n        if (userId) userIds.add(userId)\n      })\n      if (!userIds.size) return\n      try {\n        const em = (ctx.container.resolve('em') as EntityManager).fork()\n        const users = await findWithDecryption(\n          em,\n          User,\n          { id: { $in: Array.from(userIds) } },\n          undefined,\n          { tenantId: ctx.auth?.tenantId ?? null, organizationId: ctx.selectedOrganizationId ?? null },\n        )\n        const map = new Map<string, { name: string | null; email: string | null }>()\n        users.forEach((user) => {\n          const name = typeof user.name === 'string' && user.name.trim().length\n            ? user.name.trim()\n            : null\n          map.set(user.id, {\n            name,\n            email: user.email ?? null,\n          })\n        })\n        items.forEach((item: unknown) => {\n          if (!item || typeof item !== 'object') return\n          const record = item as Record<string, unknown>\n          const userId =\n            typeof record.author_user_id === 'string'\n              ? record.author_user_id\n              : typeof record.authorUserId === 'string'\n                ? record.authorUserId\n                : null\n          if (!userId) return\n          const meta = map.get(userId)\n          if (!meta) return\n          record.authorName = meta.name\n          record.authorEmail = meta.email\n          if (!('author_name' in record)) record.author_name = meta.name\n          if (!('author_email' in record)) record.author_email = meta.email\n        })\n      } catch (err) {\n        logger.warn('staff.comments failed to enrich author metadata', { err })\n      }\n    },\n  },\n})\n\nexport const GET = crud.GET\nexport const POST = crud.POST\nexport const PUT = crud.PUT\nexport const DELETE = crud.DELETE\n\nconst commentListItemSchema = z\n  .object({\n    id: z.string().uuid(),\n    member_id: z.string().uuid().nullable().optional(),\n    body: z.string().nullable(),\n    author_user_id: z.string().uuid().nullable(),\n    appearance_icon: z.string().nullable().optional(),\n    appearance_color: z.string().nullable().optional(),\n    organization_id: z.string().uuid().nullable().optional(),\n    tenant_id: z.string().uuid().nullable().optional(),\n    created_at: z.string().nullable(),\n    updated_at: z.string().nullable().optional(),\n  })\n  .passthrough()\n\nconst commentCreateResponseSchema = z.object({\n  id: z.string().uuid().nullable(),\n  authorUserId: z.string().uuid().nullable(),\n})\n\nexport const openApi = createStaffCrudOpenApi({\n  resourceName: 'TeamMemberComment',\n  querySchema: listSchema,\n  listResponseSchema: createPagedListResponseSchema(commentListItemSchema),\n  create: {\n    schema: staffTeamMemberCommentCreateSchema,\n    responseSchema: commentCreateResponseSchema,\n    description: 'Adds a note to a team member timeline.',\n  },\n  update: {\n    schema: staffTeamMemberCommentUpdateSchema,\n    responseSchema: defaultOkResponseSchema,\n    description: 'Updates a team member note.',\n  },\n  del: {\n    schema: z.object({ id: z.string().uuid() }),\n    responseSchema: defaultOkResponseSchema,\n    description: 'Deletes a team member note.',\n  },\n})\n"],
+  "mappings": "AAAA,SAAS,SAAS;AAElB,SAAS,qBAAqB;AAC9B,SAAS,2BAA2B;AACpC,SAAS,qBAAqB,+BAA+B;AAC7D,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AACvC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,YAAY;AACrB,SAAS,SAAS;AAClB,SAAS,wBAAwB,+BAA+B,+BAA+B;AAC/F,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,OAAO;AAEnC,MAAM,gBAAgB,EAAE,OAAO,CAAC,CAAC,EAAE,YAAY;AAE/C,MAAM,aAAa,EAChB,OAAO;AAAA,EACN,MAAM,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,QAAQ,CAAC;AAAA,EACxC,UAAU,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,QAAQ,EAAE;AAAA,EACtD,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACrC,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,SAAS,EAAE,KAAK,CAAC,OAAO,MAAM,CAAC,EAAE,SAAS;AAC5C,CAAC,EACA,YAAY;AAEf,MAAM,gBAAgB;AAAA,EACpB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,YAAY,EAAE;AAAA,EAC1D,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,mBAAmB,EAAE;AAAA,EAClE,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,mBAAmB,EAAE;AAAA,EACjE,QAAQ,EAAE,aAAa,MAAM,iBAAiB,CAAC,mBAAmB,EAAE;AACtE;AAEO,MAAM,WAAW;AAExB,MAAM,OAAO,cAAc;AAAA,EACzB,UAAU;AAAA,EACV,KAAK;AAAA,IACH,QAAQ;AAAA,IACR,SAAS;AAAA,IACT,UAAU;AAAA,IACV,aAAa;AAAA,IACb,iBAAiB;AAAA,EACnB;AAAA,EACA,SAAS;AAAA,IACP,YAAY,EAAE,MAAM;AAAA,EACtB;AAAA,EACA,MAAM;AAAA,IACJ,QAAQ;AAAA,IACR,UAAU,EAAE,MAAM;AAAA,IAClB,QAAQ;AAAA,MACN;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,IACA,cAAc;AAAA,MACZ,WAAW;AAAA,MACX,WAAW;AAAA,IACb;AAAA,IACA,cAAc,OAAO,UAAU;AAC7B,YAAM,UAAmC,CAAC;AAC1C,UAAI,MAAM,SAAU,SAAQ,YAAY,EAAE,KAAK,MAAM,SAAS;AAC9D,aAAO;AAAA,IACT;AAAA,EACF;AAAA,EACA,SAAS;AAAA,IACP,QAAQ;AAAA,MACN,WAAW;AAAA,MACX,QAAQ;AAAA,MACR,UAAU,OAAO,EAAE,KAAK,IAAI,MAAM;AAChC,cAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,eAAO,wBAAwB,oCAAoC,OAAO,CAAC,GAAG,KAAK,SAAS;AAAA,MAC9F;AAAA,MACA,UAAU,CAAC,EAAE,OAAO,OAAO;AAAA,QACzB,IAAI,QAAQ,aAAa,QAAQ,MAAM;AAAA,QACvC,cAAc,QAAQ,gBAAgB;AAAA,MACxC;AAAA,MACA,QAAQ;AAAA,IACV;AAAA,IACA,QAAQ;AAAA,MACN,WAAW;AAAA,MACX,QAAQ;AAAA,MACR,UAAU,OAAO,EAAE,KAAK,IAAI,MAAM;AAChC,cAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,eAAO,wBAAwB,oCAAoC,OAAO,CAAC,GAAG,KAAK,SAAS;AAAA,MAC9F;AAAA,MACA,UAAU,OAAO,EAAE,IAAI,KAAK;AAAA,IAC9B;AAAA,IACA,QAAQ;AAAA,MACN,WAAW;AAAA,MACX,QAAQ;AAAA,MACR,UAAU,OAAO,EAAE,QAAQ,IAAI,MAAM;AACnC,cAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,cAAM,KAAK,oBAAoB,QAAQ,KAAK,SAAS;AACrD,eAAO,EAAE,GAAG;AAAA,MACd;AAAA,MACA,UAAU,OAAO,EAAE,IAAI,KAAK;AAAA,IAC9B;AAAA,EACF;AAAA,EACA,OAAO;AAAA,IACL,WAAW,OAAO,SAAS,QAAQ;AACjC,YAAM,QAAQ,MAAM,QAAQ,QAAQ,KAAK,IAAI,QAAQ,QAAQ,CAAC;AAC9D,UAAI,CAAC,MAAM,OAAQ;AACnB,YAAM,UAAU,oBAAI,IAAY;AAChC,YAAM,QAAQ,CAAC,SAAkB;AAC/B,YAAI,CAAC,QAAQ,OAAO,SAAS,SAAU;AACvC,cAAM,SAAS;AACf,cAAM,SACJ,OAAO,OAAO,mBAAmB,WAC7B,OAAO,iBACP,OAAO,OAAO,iBAAiB,WAC7B,OAAO,eACP;AACR,YAAI,OAAQ,SAAQ,IAAI,MAAM;AAAA,MAChC,CAAC;AACD,UAAI,CAAC,QAAQ,KAAM;AACnB,UAAI;AACF,cAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,cAAM,QAAQ,MAAM;AAAA,UAClB;AAAA,UACA;AAAA,UACA,EAAE,IAAI,EAAE,KAAK,MAAM,KAAK,OAAO,EAAE,EAAE;AAAA,UACnC;AAAA,UACA,EAAE,UAAU,IAAI,MAAM,YAAY,MAAM,gBAAgB,IAAI,0BAA0B,KAAK;AAAA,QAC7F;AACA,cAAM,MAAM,oBAAI,IAA2D;AAC3E,cAAM,QAAQ,CAAC,SAAS;AACtB,gBAAM,OAAO,OAAO,KAAK,SAAS,YAAY,KAAK,KAAK,KAAK,EAAE,SAC3D,KAAK,KAAK,KAAK,IACf;AACJ,cAAI,IAAI,KAAK,IAAI;AAAA,YACf;AAAA,YACA,OAAO,KAAK,SAAS;AAAA,UACvB,CAAC;AAAA,QACH,CAAC;AACD,cAAM,QAAQ,CAAC,SAAkB;AAC/B,cAAI,CAAC,QAAQ,OAAO,SAAS,SAAU;AACvC,gBAAM,SAAS;AACf,gBAAM,SACJ,OAAO,OAAO,mBAAmB,WAC7B,OAAO,iBACP,OAAO,OAAO,iBAAiB,WAC7B,OAAO,eACP;AACR,cAAI,CAAC,OAAQ;AACb,gBAAM,OAAO,IAAI,IAAI,MAAM;AAC3B,cAAI,CAAC,KAAM;AACX,iBAAO,aAAa,KAAK;AACzB,iBAAO,cAAc,KAAK;AAC1B,cAAI,EAAE,iBAAiB,QAAS,QAAO,cAAc,KAAK;AAC1D,cAAI,EAAE,kBAAkB,QAAS,QAAO,eAAe,KAAK;AAAA,QAC9D,CAAC;AAAA,MACH,SAAS,KAAK;AACZ,eAAO,KAAK,mDAAmD,EAAE,IAAI,CAAC;AAAA,MACxE;AAAA,IACF;AAAA,EACF;AACF,CAAC;AAEM,MAAM,MAAM,KAAK;AACjB,MAAM,OAAO,KAAK;AAClB,MAAM,MAAM,KAAK;AACjB,MAAM,SAAS,KAAK;AAE3B,MAAM,wBAAwB,EAC3B,OAAO;AAAA,EACN,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS;AAAA,EACjD,MAAM,EAAE,OAAO,EAAE,SAAS;AAAA,EAC1B,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC3C,iBAAiB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAChD,kBAAkB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACjD,iBAAiB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS;AAAA,EACvD,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS;AAAA,EACjD,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,EAChC,YAAY,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAC7C,CAAC,EACA,YAAY;AAEf,MAAM,8BAA8B,EAAE,OAAO;AAAA,EAC3C,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC/B,cAAc,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAC3C,CAAC;AAEM,MAAM,UAAU,uBAAuB;AAAA,EAC5C,cAAc;AAAA,EACd,aAAa;AAAA,EACb,oBAAoB,8BAA8B,qBAAqB;AAAA,EACvE,QAAQ;AAAA,IACN,QAAQ;AAAA,IACR,gBAAgB;AAAA,IAChB,aAAa;AAAA,EACf;AAAA,EACA,QAAQ;AAAA,IACN,QAAQ;AAAA,IACR,gBAAgB;AAAA,IAChB,aAAa;AAAA,EACf;AAAA,EACA,KAAK;AAAA,IACH,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAAA,IAC1C,gBAAgB;AAAA,IAChB,aAAa;AAAA,EACf;AACF,CAAC;",
   "names": []
 }

package/dist/modules/staff/api/leave-requests/accept/route.js

@@ -13,6 +13,8 @@ import {
   runStaffMutationGuardAfterSuccess,
   runStaffMutationGuards
 } from "../../guards.js";
+import { createLogger } from "@open-mercato/shared/lib/logger";
+const logger = createLogger("staff");
 const metadata = {
   POST: { requireAuth: true, requireFeatures: ["staff.leave_requests.manage"] }
 };
@@ -99,7 +101,7 @@ async function POST(req) {
       return NextResponse.json(err.body, { status: err.status });
     }
     const { translate } = await resolveTranslations();
-    console.error("staff.leave-requests.accept failed", err);
+    logger.error("staff.leave-requests.accept failed", { err });
     return NextResponse.json({ error: translate("staff.leaveRequests.errors.accept", "Failed to approve leave request.") }, { status: 400 });
   }
 }

package/dist/modules/staff/api/leave-requests/accept/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../src/modules/staff/api/leave-requests/accept/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { serializeOperationMetadata } from '@open-mercato/shared/lib/commands/operationMetadata'\nimport type { CommandRuntimeContext, CommandBus } from '@open-mercato/shared/lib/commands'\nimport { CrudHttpError, isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { parseScopedCommandInput } from '@open-mercato/shared/lib/api/scoped'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { staffLeaveRequestDecisionSchema, type StaffLeaveRequestDecisionInput } from '../../../data/validators'\nimport {\n  resolveUserFeatures,\n  runStaffMutationGuardAfterSuccess,\n  runStaffMutationGuards,\n} from '../../guards'\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: ['staff.leave_requests.manage'] },\n}\n\nasync function buildContext(\n  req: Request\n): Promise<{ ctx: CommandRuntimeContext; translate: (key: string, fallback?: string) => string }> {\n  const container = await createRequestContainer()\n  const auth = await getAuthFromRequest(req)\n  const { translate } = await resolveTranslations()\n  if (!auth) throw new CrudHttpError(401, { error: translate('staff.errors.unauthorized', 'Unauthorized') })\n  const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n  const ctx: CommandRuntimeContext = {\n    container,\n    auth,\n    organizationScope: scope,\n    selectedOrganizationId: scope?.selectedId ?? auth.orgId ?? null,\n    organizationIds: scope?.filterIds ?? (auth.orgId ? [auth.orgId] : null),\n    request: req,\n  }\n  return { ctx, translate }\n}\n\nexport async function POST(req: Request) {\n  try {\n    const { ctx, translate } = await buildContext(req)\n    const body = await req.json().catch(() => ({}))\n    const input = parseScopedCommandInput(staffLeaveRequestDecisionSchema, body, ctx, translate)\n\n    const auth = ctx.auth\n    const tenantId = auth?.tenantId ?? ''\n    const organizationId = ctx.selectedOrganizationId ?? null\n    const guardResult = await runStaffMutationGuards(\n      ctx.container,\n      {\n        tenantId,\n        organizationId,\n        userId: auth?.sub ?? '',\n        resourceKind: 'staff.leave_request',\n        resourceId: input.id,\n        operation: 'update',\n        requestMethod: req.method,\n        requestHeaders: req.headers,\n        mutationPayload: input,\n      },\n      resolveUserFeatures(auth),\n    )\n    if (!guardResult.ok) {\n      return NextResponse.json(\n        guardResult.errorBody ?? { error: 'Operation blocked by guard' },\n        { status: guardResult.errorStatus ?? 422 },\n      )\n    }\n\n    const commandBus = (ctx.container.resolve('commandBus') as CommandBus)\n    const { result, logEntry } = await commandBus.execute<StaffLeaveRequestDecisionInput, { requestId: string }>(\n      'staff.leave-requests.accept',\n      { input, ctx },\n    )\n\n    if (guardResult.afterSuccessCallbacks.length) {\n      await runStaffMutationGuardAfterSuccess(guardResult.afterSuccessCallbacks, {\n        tenantId,\n        organizationId,\n        userId: auth?.sub ?? '',\n        resourceKind: 'staff.leave_request',\n        resourceId: result?.requestId ?? input.id,\n        operation: 'update',\n        requestMethod: req.method,\n        requestHeaders: req.headers,\n      })\n    }\n\n    const response = NextResponse.json({ ok: true, id: result?.requestId ?? null }, { status: 200 })\n    if (logEntry?.undoToken && logEntry?.id && logEntry?.commandId) {\n      response.headers.set(\n        'x-om-operation',\n        serializeOperationMetadata({\n          id: logEntry.id,\n          undoToken: logEntry.undoToken,\n          commandId: logEntry.commandId,\n          actionLabel: logEntry.actionLabel ?? null,\n          resourceKind: logEntry.resourceKind ?? 'staff.leave_request',\n          resourceId: logEntry.resourceId ?? result?.requestId ?? null,\n          executedAt: logEntry.createdAt instanceof Date ? logEntry.createdAt.toISOString() : undefined,\n        }),\n      )\n    }\n    return response\n  } catch (err) {\n    if (isCrudHttpError(err)) {\n      return NextResponse.json(err.body, { status: err.status })\n    }\n    const { translate } = await resolveTranslations()\n    console.error('staff.leave-requests.accept failed', err)\n    return NextResponse.json({ error: translate('staff.leaveRequests.errors.accept', 'Failed to approve leave request.') }, { status: 400 })\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Staff',\n  summary: 'Approve leave request',\n  methods: {\n    POST: {\n      summary: 'Approve leave request',\n      description: 'Approves a leave request and adds unavailability rules for the staff member.',\n      requestBody: {\n        contentType: 'application/json',\n        schema: staffLeaveRequestDecisionSchema,\n      },\n      responses: [\n        { status: 200, description: 'Leave request approved', schema: z.object({ ok: z.literal(true), id: z.string().uuid().nullable() }) },\n        { status: 400, description: 'Invalid payload', schema: z.object({ error: z.string() }) },\n        { status: 401, description: 'Unauthorized', schema: z.object({ error: z.string() }) },\n        { status: 403, description: 'Forbidden', schema: z.object({ error: z.string() }) },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AACnD,SAAS,kCAAkC;AAE3C,SAAS,eAAe,uBAAuB;AAC/C,SAAS,2BAA2B;AACpC,SAAS,+BAA+B;AAExC,SAAS,uCAA4E;AACrF;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEA,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,6BAA6B,EAAE;AAC9E;AAEA,eAAe,aACb,KACgG;AAChG,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,MAAI,CAAC,KAAM,OAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,6BAA6B,cAAc,EAAE,CAAC;AACzG,QAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AACxF,QAAM,MAA6B;AAAA,IACjC;AAAA,IACA;AAAA,IACA,mBAAmB;AAAA,IACnB,wBAAwB,OAAO,cAAc,KAAK,SAAS;AAAA,IAC3D,iBAAiB,OAAO,cAAc,KAAK,QAAQ,CAAC,KAAK,KAAK,IAAI;AAAA,IAClE,SAAS;AAAA,EACX;AACA,SAAO,EAAE,KAAK,UAAU;AAC1B;AAEA,eAAsB,KAAK,KAAc;AACvC,MAAI;AACF,UAAM,EAAE,KAAK,UAAU,IAAI,MAAM,aAAa,GAAG;AACjD,UAAM,OAAO,MAAM,IAAI,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AAC9C,UAAM,QAAQ,wBAAwB,iCAAiC,MAAM,KAAK,SAAS;AAE3F,UAAM,OAAO,IAAI;AACjB,UAAM,WAAW,MAAM,YAAY;AACnC,UAAM,iBAAiB,IAAI,0BAA0B;AACrD,UAAM,cAAc,MAAM;AAAA,MACxB,IAAI;AAAA,MACJ;AAAA,QACE;AAAA,QACA;AAAA,QACA,QAAQ,MAAM,OAAO;AAAA,QACrB,cAAc;AAAA,QACd,YAAY,MAAM;AAAA,QAClB,WAAW;AAAA,QACX,eAAe,IAAI;AAAA,QACnB,gBAAgB,IAAI;AAAA,QACpB,iBAAiB;AAAA,MACnB;AAAA,MACA,oBAAoB,IAAI;AAAA,IAC1B;AACA,QAAI,CAAC,YAAY,IAAI;AACnB,aAAO,aAAa;AAAA,QAClB,YAAY,aAAa,EAAE,OAAO,6BAA6B;AAAA,QAC/D,EAAE,QAAQ,YAAY,eAAe,IAAI;AAAA,MAC3C;AAAA,IACF;AAEA,UAAM,aAAc,IAAI,UAAU,QAAQ,YAAY;AACtD,UAAM,EAAE,QAAQ,SAAS,IAAI,MAAM,WAAW;AAAA,MAC5C;AAAA,MACA,EAAE,OAAO,IAAI;AAAA,IACf;AAEA,QAAI,YAAY,sBAAsB,QAAQ;AAC5C,YAAM,kCAAkC,YAAY,uBAAuB;AAAA,QACzE;AAAA,QACA;AAAA,QACA,QAAQ,MAAM,OAAO;AAAA,QACrB,cAAc;AAAA,QACd,YAAY,QAAQ,aAAa,MAAM;AAAA,QACvC,WAAW;AAAA,QACX,eAAe,IAAI;AAAA,QACnB,gBAAgB,IAAI;AAAA,MACtB,CAAC;AAAA,IACH;AAEA,UAAM,WAAW,aAAa,KAAK,EAAE,IAAI,MAAM,IAAI,QAAQ,aAAa,KAAK,GAAG,EAAE,QAAQ,IAAI,CAAC;AAC/F,QAAI,UAAU,aAAa,UAAU,MAAM,UAAU,WAAW;AAC9D,eAAS,QAAQ;AAAA,QACf;AAAA,QACA,2BAA2B;AAAA,UACzB,IAAI,SAAS;AAAA,UACb,WAAW,SAAS;AAAA,UACpB,WAAW,SAAS;AAAA,UACpB,aAAa,SAAS,eAAe;AAAA,UACrC,cAAc,SAAS,gBAAgB;AAAA,UACvC,YAAY,SAAS,cAAc,QAAQ,aAAa;AAAA,UACxD,YAAY,SAAS,qBAAqB,OAAO,SAAS,UAAU,YAAY,IAAI;AAAA,QACtF,CAAC;AAAA,MACH;AAAA,IACF;AACA,WAAO;AAAA,EACT,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,GAAG;AACxB,aAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,IAC3D;AACA,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,YAAQ,MAAM,sCAAsC,GAAG;AACvD,WAAO,aAAa,KAAK,EAAE,OAAO,UAAU,qCAAqC,kCAAkC,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACzI;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa;AAAA,MACb,aAAa;AAAA,QACX,aAAa;AAAA,QACb,QAAQ;AAAA,MACV;AAAA,MACA,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,0BAA0B,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,IAAI,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,EAAE;AAAA,QAClI,EAAE,QAAQ,KAAK,aAAa,mBAAmB,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,QACvF,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,QACpF,EAAE,QAAQ,KAAK,aAAa,aAAa,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,MACnF;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { serializeOperationMetadata } from '@open-mercato/shared/lib/commands/operationMetadata'\nimport type { CommandRuntimeContext, CommandBus } from '@open-mercato/shared/lib/commands'\nimport { CrudHttpError, isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { parseScopedCommandInput } from '@open-mercato/shared/lib/api/scoped'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { staffLeaveRequestDecisionSchema, type StaffLeaveRequestDecisionInput } from '../../../data/validators'\nimport {\n  resolveUserFeatures,\n  runStaffMutationGuardAfterSuccess,\n  runStaffMutationGuards,\n} from '../../guards'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('staff')\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: ['staff.leave_requests.manage'] },\n}\n\nasync function buildContext(\n  req: Request\n): Promise<{ ctx: CommandRuntimeContext; translate: (key: string, fallback?: string) => string }> {\n  const container = await createRequestContainer()\n  const auth = await getAuthFromRequest(req)\n  const { translate } = await resolveTranslations()\n  if (!auth) throw new CrudHttpError(401, { error: translate('staff.errors.unauthorized', 'Unauthorized') })\n  const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n  const ctx: CommandRuntimeContext = {\n    container,\n    auth,\n    organizationScope: scope,\n    selectedOrganizationId: scope?.selectedId ?? auth.orgId ?? null,\n    organizationIds: scope?.filterIds ?? (auth.orgId ? [auth.orgId] : null),\n    request: req,\n  }\n  return { ctx, translate }\n}\n\nexport async function POST(req: Request) {\n  try {\n    const { ctx, translate } = await buildContext(req)\n    const body = await req.json().catch(() => ({}))\n    const input = parseScopedCommandInput(staffLeaveRequestDecisionSchema, body, ctx, translate)\n\n    const auth = ctx.auth\n    const tenantId = auth?.tenantId ?? ''\n    const organizationId = ctx.selectedOrganizationId ?? null\n    const guardResult = await runStaffMutationGuards(\n      ctx.container,\n      {\n        tenantId,\n        organizationId,\n        userId: auth?.sub ?? '',\n        resourceKind: 'staff.leave_request',\n        resourceId: input.id,\n        operation: 'update',\n        requestMethod: req.method,\n        requestHeaders: req.headers,\n        mutationPayload: input,\n      },\n      resolveUserFeatures(auth),\n    )\n    if (!guardResult.ok) {\n      return NextResponse.json(\n        guardResult.errorBody ?? { error: 'Operation blocked by guard' },\n        { status: guardResult.errorStatus ?? 422 },\n      )\n    }\n\n    const commandBus = (ctx.container.resolve('commandBus') as CommandBus)\n    const { result, logEntry } = await commandBus.execute<StaffLeaveRequestDecisionInput, { requestId: string }>(\n      'staff.leave-requests.accept',\n      { input, ctx },\n    )\n\n    if (guardResult.afterSuccessCallbacks.length) {\n      await runStaffMutationGuardAfterSuccess(guardResult.afterSuccessCallbacks, {\n        tenantId,\n        organizationId,\n        userId: auth?.sub ?? '',\n        resourceKind: 'staff.leave_request',\n        resourceId: result?.requestId ?? input.id,\n        operation: 'update',\n        requestMethod: req.method,\n        requestHeaders: req.headers,\n      })\n    }\n\n    const response = NextResponse.json({ ok: true, id: result?.requestId ?? null }, { status: 200 })\n    if (logEntry?.undoToken && logEntry?.id && logEntry?.commandId) {\n      response.headers.set(\n        'x-om-operation',\n        serializeOperationMetadata({\n          id: logEntry.id,\n          undoToken: logEntry.undoToken,\n          commandId: logEntry.commandId,\n          actionLabel: logEntry.actionLabel ?? null,\n          resourceKind: logEntry.resourceKind ?? 'staff.leave_request',\n          resourceId: logEntry.resourceId ?? result?.requestId ?? null,\n          executedAt: logEntry.createdAt instanceof Date ? logEntry.createdAt.toISOString() : undefined,\n        }),\n      )\n    }\n    return response\n  } catch (err) {\n    if (isCrudHttpError(err)) {\n      return NextResponse.json(err.body, { status: err.status })\n    }\n    const { translate } = await resolveTranslations()\n    logger.error('staff.leave-requests.accept failed', { err })\n    return NextResponse.json({ error: translate('staff.leaveRequests.errors.accept', 'Failed to approve leave request.') }, { status: 400 })\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Staff',\n  summary: 'Approve leave request',\n  methods: {\n    POST: {\n      summary: 'Approve leave request',\n      description: 'Approves a leave request and adds unavailability rules for the staff member.',\n      requestBody: {\n        contentType: 'application/json',\n        schema: staffLeaveRequestDecisionSchema,\n      },\n      responses: [\n        { status: 200, description: 'Leave request approved', schema: z.object({ ok: z.literal(true), id: z.string().uuid().nullable() }) },\n        { status: 400, description: 'Invalid payload', schema: z.object({ error: z.string() }) },\n        { status: 401, description: 'Unauthorized', schema: z.object({ error: z.string() }) },\n        { status: 403, description: 'Forbidden', schema: z.object({ error: z.string() }) },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AACnD,SAAS,kCAAkC;AAE3C,SAAS,eAAe,uBAAuB;AAC/C,SAAS,2BAA2B;AACpC,SAAS,+BAA+B;AAExC,SAAS,uCAA4E;AACrF;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,OAAO;AAE5B,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,6BAA6B,EAAE;AAC9E;AAEA,eAAe,aACb,KACgG;AAChG,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,MAAI,CAAC,KAAM,OAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,6BAA6B,cAAc,EAAE,CAAC;AACzG,QAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AACxF,QAAM,MAA6B;AAAA,IACjC;AAAA,IACA;AAAA,IACA,mBAAmB;AAAA,IACnB,wBAAwB,OAAO,cAAc,KAAK,SAAS;AAAA,IAC3D,iBAAiB,OAAO,cAAc,KAAK,QAAQ,CAAC,KAAK,KAAK,IAAI;AAAA,IAClE,SAAS;AAAA,EACX;AACA,SAAO,EAAE,KAAK,UAAU;AAC1B;AAEA,eAAsB,KAAK,KAAc;AACvC,MAAI;AACF,UAAM,EAAE,KAAK,UAAU,IAAI,MAAM,aAAa,GAAG;AACjD,UAAM,OAAO,MAAM,IAAI,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AAC9C,UAAM,QAAQ,wBAAwB,iCAAiC,MAAM,KAAK,SAAS;AAE3F,UAAM,OAAO,IAAI;AACjB,UAAM,WAAW,MAAM,YAAY;AACnC,UAAM,iBAAiB,IAAI,0BAA0B;AACrD,UAAM,cAAc,MAAM;AAAA,MACxB,IAAI;AAAA,MACJ;AAAA,QACE;AAAA,QACA;AAAA,QACA,QAAQ,MAAM,OAAO;AAAA,QACrB,cAAc;AAAA,QACd,YAAY,MAAM;AAAA,QAClB,WAAW;AAAA,QACX,eAAe,IAAI;AAAA,QACnB,gBAAgB,IAAI;AAAA,QACpB,iBAAiB;AAAA,MACnB;AAAA,MACA,oBAAoB,IAAI;AAAA,IAC1B;AACA,QAAI,CAAC,YAAY,IAAI;AACnB,aAAO,aAAa;AAAA,QAClB,YAAY,aAAa,EAAE,OAAO,6BAA6B;AAAA,QAC/D,EAAE,QAAQ,YAAY,eAAe,IAAI;AAAA,MAC3C;AAAA,IACF;AAEA,UAAM,aAAc,IAAI,UAAU,QAAQ,YAAY;AACtD,UAAM,EAAE,QAAQ,SAAS,IAAI,MAAM,WAAW;AAAA,MAC5C;AAAA,MACA,EAAE,OAAO,IAAI;AAAA,IACf;AAEA,QAAI,YAAY,sBAAsB,QAAQ;AAC5C,YAAM,kCAAkC,YAAY,uBAAuB;AAAA,QACzE;AAAA,QACA;AAAA,QACA,QAAQ,MAAM,OAAO;AAAA,QACrB,cAAc;AAAA,QACd,YAAY,QAAQ,aAAa,MAAM;AAAA,QACvC,WAAW;AAAA,QACX,eAAe,IAAI;AAAA,QACnB,gBAAgB,IAAI;AAAA,MACtB,CAAC;AAAA,IACH;AAEA,UAAM,WAAW,aAAa,KAAK,EAAE,IAAI,MAAM,IAAI,QAAQ,aAAa,KAAK,GAAG,EAAE,QAAQ,IAAI,CAAC;AAC/F,QAAI,UAAU,aAAa,UAAU,MAAM,UAAU,WAAW;AAC9D,eAAS,QAAQ;AAAA,QACf;AAAA,QACA,2BAA2B;AAAA,UACzB,IAAI,SAAS;AAAA,UACb,WAAW,SAAS;AAAA,UACpB,WAAW,SAAS;AAAA,UACpB,aAAa,SAAS,eAAe;AAAA,UACrC,cAAc,SAAS,gBAAgB;AAAA,UACvC,YAAY,SAAS,cAAc,QAAQ,aAAa;AAAA,UACxD,YAAY,SAAS,qBAAqB,OAAO,SAAS,UAAU,YAAY,IAAI;AAAA,QACtF,CAAC;AAAA,MACH;AAAA,IACF;AACA,WAAO;AAAA,EACT,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,GAAG;AACxB,aAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,IAC3D;AACA,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,WAAO,MAAM,sCAAsC,EAAE,IAAI,CAAC;AAC1D,WAAO,aAAa,KAAK,EAAE,OAAO,UAAU,qCAAqC,kCAAkC,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACzI;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa;AAAA,MACb,aAAa;AAAA,QACX,aAAa;AAAA,QACb,QAAQ;AAAA,MACV;AAAA,MACA,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,0BAA0B,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,IAAI,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,EAAE;AAAA,QAClI,EAAE,QAAQ,KAAK,aAAa,mBAAmB,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,QACvF,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,QACpF,EAAE,QAAQ,KAAK,aAAa,aAAa,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,MACnF;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/staff/api/leave-requests/reject/route.js

@@ -13,6 +13,8 @@ import {
   runStaffMutationGuardAfterSuccess,
   runStaffMutationGuards
 } from "../../guards.js";
+import { createLogger } from "@open-mercato/shared/lib/logger";
+const logger = createLogger("staff");
 const metadata = {
   POST: { requireAuth: true, requireFeatures: ["staff.leave_requests.manage"] }
 };
@@ -99,7 +101,7 @@ async function POST(req) {
       return NextResponse.json(err.body, { status: err.status });
     }
     const { translate } = await resolveTranslations();
-    console.error("staff.leave-requests.reject failed", err);
+    logger.error("staff.leave-requests.reject failed", { err });
     return NextResponse.json({ error: translate("staff.leaveRequests.errors.reject", "Failed to reject leave request.") }, { status: 400 });
   }
 }

package/dist/modules/staff/api/leave-requests/reject/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../src/modules/staff/api/leave-requests/reject/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { serializeOperationMetadata } from '@open-mercato/shared/lib/commands/operationMetadata'\nimport type { CommandRuntimeContext, CommandBus } from '@open-mercato/shared/lib/commands'\nimport { CrudHttpError, isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { parseScopedCommandInput } from '@open-mercato/shared/lib/api/scoped'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { staffLeaveRequestDecisionSchema, type StaffLeaveRequestDecisionInput } from '../../../data/validators'\nimport {\n  resolveUserFeatures,\n  runStaffMutationGuardAfterSuccess,\n  runStaffMutationGuards,\n} from '../../guards'\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: ['staff.leave_requests.manage'] },\n}\n\nasync function buildContext(\n  req: Request\n): Promise<{ ctx: CommandRuntimeContext; translate: (key: string, fallback?: string) => string }> {\n  const container = await createRequestContainer()\n  const auth = await getAuthFromRequest(req)\n  const { translate } = await resolveTranslations()\n  if (!auth) throw new CrudHttpError(401, { error: translate('staff.errors.unauthorized', 'Unauthorized') })\n  const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n  const ctx: CommandRuntimeContext = {\n    container,\n    auth,\n    organizationScope: scope,\n    selectedOrganizationId: scope?.selectedId ?? auth.orgId ?? null,\n    organizationIds: scope?.filterIds ?? (auth.orgId ? [auth.orgId] : null),\n    request: req,\n  }\n  return { ctx, translate }\n}\n\nexport async function POST(req: Request) {\n  try {\n    const { ctx, translate } = await buildContext(req)\n    const body = await req.json().catch(() => ({}))\n    const input = parseScopedCommandInput(staffLeaveRequestDecisionSchema, body, ctx, translate)\n\n    const auth = ctx.auth\n    const tenantId = auth?.tenantId ?? ''\n    const organizationId = ctx.selectedOrganizationId ?? null\n    const guardResult = await runStaffMutationGuards(\n      ctx.container,\n      {\n        tenantId,\n        organizationId,\n        userId: auth?.sub ?? '',\n        resourceKind: 'staff.leave_request',\n        resourceId: input.id,\n        operation: 'update',\n        requestMethod: req.method,\n        requestHeaders: req.headers,\n        mutationPayload: input,\n      },\n      resolveUserFeatures(auth),\n    )\n    if (!guardResult.ok) {\n      return NextResponse.json(\n        guardResult.errorBody ?? { error: 'Operation blocked by guard' },\n        { status: guardResult.errorStatus ?? 422 },\n      )\n    }\n\n    const commandBus = (ctx.container.resolve('commandBus') as CommandBus)\n    const { result, logEntry } = await commandBus.execute<StaffLeaveRequestDecisionInput, { requestId: string }>(\n      'staff.leave-requests.reject',\n      { input, ctx },\n    )\n\n    if (guardResult.afterSuccessCallbacks.length) {\n      await runStaffMutationGuardAfterSuccess(guardResult.afterSuccessCallbacks, {\n        tenantId,\n        organizationId,\n        userId: auth?.sub ?? '',\n        resourceKind: 'staff.leave_request',\n        resourceId: result?.requestId ?? input.id,\n        operation: 'update',\n        requestMethod: req.method,\n        requestHeaders: req.headers,\n      })\n    }\n\n    const response = NextResponse.json({ ok: true, id: result?.requestId ?? null }, { status: 200 })\n    if (logEntry?.undoToken && logEntry?.id && logEntry?.commandId) {\n      response.headers.set(\n        'x-om-operation',\n        serializeOperationMetadata({\n          id: logEntry.id,\n          undoToken: logEntry.undoToken,\n          commandId: logEntry.commandId,\n          actionLabel: logEntry.actionLabel ?? null,\n          resourceKind: logEntry.resourceKind ?? 'staff.leave_request',\n          resourceId: logEntry.resourceId ?? result?.requestId ?? null,\n          executedAt: logEntry.createdAt instanceof Date ? logEntry.createdAt.toISOString() : undefined,\n        }),\n      )\n    }\n    return response\n  } catch (err) {\n    if (isCrudHttpError(err)) {\n      return NextResponse.json(err.body, { status: err.status })\n    }\n    const { translate } = await resolveTranslations()\n    console.error('staff.leave-requests.reject failed', err)\n    return NextResponse.json({ error: translate('staff.leaveRequests.errors.reject', 'Failed to reject leave request.') }, { status: 400 })\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Staff',\n  summary: 'Reject leave request',\n  methods: {\n    POST: {\n      summary: 'Reject leave request',\n      description: 'Rejects a leave request with an optional comment.',\n      requestBody: {\n        contentType: 'application/json',\n        schema: staffLeaveRequestDecisionSchema,\n      },\n      responses: [\n        { status: 200, description: 'Leave request rejected', schema: z.object({ ok: z.literal(true), id: z.string().uuid().nullable() }) },\n        { status: 400, description: 'Invalid payload', schema: z.object({ error: z.string() }) },\n        { status: 401, description: 'Unauthorized', schema: z.object({ error: z.string() }) },\n        { status: 403, description: 'Forbidden', schema: z.object({ error: z.string() }) },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AACnD,SAAS,kCAAkC;AAE3C,SAAS,eAAe,uBAAuB;AAC/C,SAAS,2BAA2B;AACpC,SAAS,+BAA+B;AAExC,SAAS,uCAA4E;AACrF;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEA,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,6BAA6B,EAAE;AAC9E;AAEA,eAAe,aACb,KACgG;AAChG,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,MAAI,CAAC,KAAM,OAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,6BAA6B,cAAc,EAAE,CAAC;AACzG,QAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AACxF,QAAM,MAA6B;AAAA,IACjC;AAAA,IACA;AAAA,IACA,mBAAmB;AAAA,IACnB,wBAAwB,OAAO,cAAc,KAAK,SAAS;AAAA,IAC3D,iBAAiB,OAAO,cAAc,KAAK,QAAQ,CAAC,KAAK,KAAK,IAAI;AAAA,IAClE,SAAS;AAAA,EACX;AACA,SAAO,EAAE,KAAK,UAAU;AAC1B;AAEA,eAAsB,KAAK,KAAc;AACvC,MAAI;AACF,UAAM,EAAE,KAAK,UAAU,IAAI,MAAM,aAAa,GAAG;AACjD,UAAM,OAAO,MAAM,IAAI,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AAC9C,UAAM,QAAQ,wBAAwB,iCAAiC,MAAM,KAAK,SAAS;AAE3F,UAAM,OAAO,IAAI;AACjB,UAAM,WAAW,MAAM,YAAY;AACnC,UAAM,iBAAiB,IAAI,0BAA0B;AACrD,UAAM,cAAc,MAAM;AAAA,MACxB,IAAI;AAAA,MACJ;AAAA,QACE;AAAA,QACA;AAAA,QACA,QAAQ,MAAM,OAAO;AAAA,QACrB,cAAc;AAAA,QACd,YAAY,MAAM;AAAA,QAClB,WAAW;AAAA,QACX,eAAe,IAAI;AAAA,QACnB,gBAAgB,IAAI;AAAA,QACpB,iBAAiB;AAAA,MACnB;AAAA,MACA,oBAAoB,IAAI;AAAA,IAC1B;AACA,QAAI,CAAC,YAAY,IAAI;AACnB,aAAO,aAAa;AAAA,QAClB,YAAY,aAAa,EAAE,OAAO,6BAA6B;AAAA,QAC/D,EAAE,QAAQ,YAAY,eAAe,IAAI;AAAA,MAC3C;AAAA,IACF;AAEA,UAAM,aAAc,IAAI,UAAU,QAAQ,YAAY;AACtD,UAAM,EAAE,QAAQ,SAAS,IAAI,MAAM,WAAW;AAAA,MAC5C;AAAA,MACA,EAAE,OAAO,IAAI;AAAA,IACf;AAEA,QAAI,YAAY,sBAAsB,QAAQ;AAC5C,YAAM,kCAAkC,YAAY,uBAAuB;AAAA,QACzE;AAAA,QACA;AAAA,QACA,QAAQ,MAAM,OAAO;AAAA,QACrB,cAAc;AAAA,QACd,YAAY,QAAQ,aAAa,MAAM;AAAA,QACvC,WAAW;AAAA,QACX,eAAe,IAAI;AAAA,QACnB,gBAAgB,IAAI;AAAA,MACtB,CAAC;AAAA,IACH;AAEA,UAAM,WAAW,aAAa,KAAK,EAAE,IAAI,MAAM,IAAI,QAAQ,aAAa,KAAK,GAAG,EAAE,QAAQ,IAAI,CAAC;AAC/F,QAAI,UAAU,aAAa,UAAU,MAAM,UAAU,WAAW;AAC9D,eAAS,QAAQ;AAAA,QACf;AAAA,QACA,2BAA2B;AAAA,UACzB,IAAI,SAAS;AAAA,UACb,WAAW,SAAS;AAAA,UACpB,WAAW,SAAS;AAAA,UACpB,aAAa,SAAS,eAAe;AAAA,UACrC,cAAc,SAAS,gBAAgB;AAAA,UACvC,YAAY,SAAS,cAAc,QAAQ,aAAa;AAAA,UACxD,YAAY,SAAS,qBAAqB,OAAO,SAAS,UAAU,YAAY,IAAI;AAAA,QACtF,CAAC;AAAA,MACH;AAAA,IACF;AACA,WAAO;AAAA,EACT,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,GAAG;AACxB,aAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,IAC3D;AACA,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,YAAQ,MAAM,sCAAsC,GAAG;AACvD,WAAO,aAAa,KAAK,EAAE,OAAO,UAAU,qCAAqC,iCAAiC,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACxI;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa;AAAA,MACb,aAAa;AAAA,QACX,aAAa;AAAA,QACb,QAAQ;AAAA,MACV;AAAA,MACA,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,0BAA0B,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,IAAI,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,EAAE;AAAA,QAClI,EAAE,QAAQ,KAAK,aAAa,mBAAmB,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,QACvF,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,QACpF,EAAE,QAAQ,KAAK,aAAa,aAAa,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,MACnF;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { serializeOperationMetadata } from '@open-mercato/shared/lib/commands/operationMetadata'\nimport type { CommandRuntimeContext, CommandBus } from '@open-mercato/shared/lib/commands'\nimport { CrudHttpError, isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { parseScopedCommandInput } from '@open-mercato/shared/lib/api/scoped'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { staffLeaveRequestDecisionSchema, type StaffLeaveRequestDecisionInput } from '../../../data/validators'\nimport {\n  resolveUserFeatures,\n  runStaffMutationGuardAfterSuccess,\n  runStaffMutationGuards,\n} from '../../guards'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('staff')\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: ['staff.leave_requests.manage'] },\n}\n\nasync function buildContext(\n  req: Request\n): Promise<{ ctx: CommandRuntimeContext; translate: (key: string, fallback?: string) => string }> {\n  const container = await createRequestContainer()\n  const auth = await getAuthFromRequest(req)\n  const { translate } = await resolveTranslations()\n  if (!auth) throw new CrudHttpError(401, { error: translate('staff.errors.unauthorized', 'Unauthorized') })\n  const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n  const ctx: CommandRuntimeContext = {\n    container,\n    auth,\n    organizationScope: scope,\n    selectedOrganizationId: scope?.selectedId ?? auth.orgId ?? null,\n    organizationIds: scope?.filterIds ?? (auth.orgId ? [auth.orgId] : null),\n    request: req,\n  }\n  return { ctx, translate }\n}\n\nexport async function POST(req: Request) {\n  try {\n    const { ctx, translate } = await buildContext(req)\n    const body = await req.json().catch(() => ({}))\n    const input = parseScopedCommandInput(staffLeaveRequestDecisionSchema, body, ctx, translate)\n\n    const auth = ctx.auth\n    const tenantId = auth?.tenantId ?? ''\n    const organizationId = ctx.selectedOrganizationId ?? null\n    const guardResult = await runStaffMutationGuards(\n      ctx.container,\n      {\n        tenantId,\n        organizationId,\n        userId: auth?.sub ?? '',\n        resourceKind: 'staff.leave_request',\n        resourceId: input.id,\n        operation: 'update',\n        requestMethod: req.method,\n        requestHeaders: req.headers,\n        mutationPayload: input,\n      },\n      resolveUserFeatures(auth),\n    )\n    if (!guardResult.ok) {\n      return NextResponse.json(\n        guardResult.errorBody ?? { error: 'Operation blocked by guard' },\n        { status: guardResult.errorStatus ?? 422 },\n      )\n    }\n\n    const commandBus = (ctx.container.resolve('commandBus') as CommandBus)\n    const { result, logEntry } = await commandBus.execute<StaffLeaveRequestDecisionInput, { requestId: string }>(\n      'staff.leave-requests.reject',\n      { input, ctx },\n    )\n\n    if (guardResult.afterSuccessCallbacks.length) {\n      await runStaffMutationGuardAfterSuccess(guardResult.afterSuccessCallbacks, {\n        tenantId,\n        organizationId,\n        userId: auth?.sub ?? '',\n        resourceKind: 'staff.leave_request',\n        resourceId: result?.requestId ?? input.id,\n        operation: 'update',\n        requestMethod: req.method,\n        requestHeaders: req.headers,\n      })\n    }\n\n    const response = NextResponse.json({ ok: true, id: result?.requestId ?? null }, { status: 200 })\n    if (logEntry?.undoToken && logEntry?.id && logEntry?.commandId) {\n      response.headers.set(\n        'x-om-operation',\n        serializeOperationMetadata({\n          id: logEntry.id,\n          undoToken: logEntry.undoToken,\n          commandId: logEntry.commandId,\n          actionLabel: logEntry.actionLabel ?? null,\n          resourceKind: logEntry.resourceKind ?? 'staff.leave_request',\n          resourceId: logEntry.resourceId ?? result?.requestId ?? null,\n          executedAt: logEntry.createdAt instanceof Date ? logEntry.createdAt.toISOString() : undefined,\n        }),\n      )\n    }\n    return response\n  } catch (err) {\n    if (isCrudHttpError(err)) {\n      return NextResponse.json(err.body, { status: err.status })\n    }\n    const { translate } = await resolveTranslations()\n    logger.error('staff.leave-requests.reject failed', { err })\n    return NextResponse.json({ error: translate('staff.leaveRequests.errors.reject', 'Failed to reject leave request.') }, { status: 400 })\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Staff',\n  summary: 'Reject leave request',\n  methods: {\n    POST: {\n      summary: 'Reject leave request',\n      description: 'Rejects a leave request with an optional comment.',\n      requestBody: {\n        contentType: 'application/json',\n        schema: staffLeaveRequestDecisionSchema,\n      },\n      responses: [\n        { status: 200, description: 'Leave request rejected', schema: z.object({ ok: z.literal(true), id: z.string().uuid().nullable() }) },\n        { status: 400, description: 'Invalid payload', schema: z.object({ error: z.string() }) },\n        { status: 401, description: 'Unauthorized', schema: z.object({ error: z.string() }) },\n        { status: 403, description: 'Forbidden', schema: z.object({ error: z.string() }) },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AACnD,SAAS,kCAAkC;AAE3C,SAAS,eAAe,uBAAuB;AAC/C,SAAS,2BAA2B;AACpC,SAAS,+BAA+B;AAExC,SAAS,uCAA4E;AACrF;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,OAAO;AAE5B,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,6BAA6B,EAAE;AAC9E;AAEA,eAAe,aACb,KACgG;AAChG,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,MAAI,CAAC,KAAM,OAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,6BAA6B,cAAc,EAAE,CAAC;AACzG,QAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AACxF,QAAM,MAA6B;AAAA,IACjC;AAAA,IACA;AAAA,IACA,mBAAmB;AAAA,IACnB,wBAAwB,OAAO,cAAc,KAAK,SAAS;AAAA,IAC3D,iBAAiB,OAAO,cAAc,KAAK,QAAQ,CAAC,KAAK,KAAK,IAAI;AAAA,IAClE,SAAS;AAAA,EACX;AACA,SAAO,EAAE,KAAK,UAAU;AAC1B;AAEA,eAAsB,KAAK,KAAc;AACvC,MAAI;AACF,UAAM,EAAE,KAAK,UAAU,IAAI,MAAM,aAAa,GAAG;AACjD,UAAM,OAAO,MAAM,IAAI,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AAC9C,UAAM,QAAQ,wBAAwB,iCAAiC,MAAM,KAAK,SAAS;AAE3F,UAAM,OAAO,IAAI;AACjB,UAAM,WAAW,MAAM,YAAY;AACnC,UAAM,iBAAiB,IAAI,0BAA0B;AACrD,UAAM,cAAc,MAAM;AAAA,MACxB,IAAI;AAAA,MACJ;AAAA,QACE;AAAA,QACA;AAAA,QACA,QAAQ,MAAM,OAAO;AAAA,QACrB,cAAc;AAAA,QACd,YAAY,MAAM;AAAA,QAClB,WAAW;AAAA,QACX,eAAe,IAAI;AAAA,QACnB,gBAAgB,IAAI;AAAA,QACpB,iBAAiB;AAAA,MACnB;AAAA,MACA,oBAAoB,IAAI;AAAA,IAC1B;AACA,QAAI,CAAC,YAAY,IAAI;AACnB,aAAO,aAAa;AAAA,QAClB,YAAY,aAAa,EAAE,OAAO,6BAA6B;AAAA,QAC/D,EAAE,QAAQ,YAAY,eAAe,IAAI;AAAA,MAC3C;AAAA,IACF;AAEA,UAAM,aAAc,IAAI,UAAU,QAAQ,YAAY;AACtD,UAAM,EAAE,QAAQ,SAAS,IAAI,MAAM,WAAW;AAAA,MAC5C;AAAA,MACA,EAAE,OAAO,IAAI;AAAA,IACf;AAEA,QAAI,YAAY,sBAAsB,QAAQ;AAC5C,YAAM,kCAAkC,YAAY,uBAAuB;AAAA,QACzE;AAAA,QACA;AAAA,QACA,QAAQ,MAAM,OAAO;AAAA,QACrB,cAAc;AAAA,QACd,YAAY,QAAQ,aAAa,MAAM;AAAA,QACvC,WAAW;AAAA,QACX,eAAe,IAAI;AAAA,QACnB,gBAAgB,IAAI;AAAA,MACtB,CAAC;AAAA,IACH;AAEA,UAAM,WAAW,aAAa,KAAK,EAAE,IAAI,MAAM,IAAI,QAAQ,aAAa,KAAK,GAAG,EAAE,QAAQ,IAAI,CAAC;AAC/F,QAAI,UAAU,aAAa,UAAU,MAAM,UAAU,WAAW;AAC9D,eAAS,QAAQ;AAAA,QACf;AAAA,QACA,2BAA2B;AAAA,UACzB,IAAI,SAAS;AAAA,UACb,WAAW,SAAS;AAAA,UACpB,WAAW,SAAS;AAAA,UACpB,aAAa,SAAS,eAAe;AAAA,UACrC,cAAc,SAAS,gBAAgB;AAAA,UACvC,YAAY,SAAS,cAAc,QAAQ,aAAa;AAAA,UACxD,YAAY,SAAS,qBAAqB,OAAO,SAAS,UAAU,YAAY,IAAI;AAAA,QACtF,CAAC;AAAA,MACH;AAAA,IACF;AACA,WAAO;AAAA,EACT,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,GAAG;AACxB,aAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,IAC3D;AACA,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,WAAO,MAAM,sCAAsC,EAAE,IAAI,CAAC;AAC1D,WAAO,aAAa,KAAK,EAAE,OAAO,UAAU,qCAAqC,iCAAiC,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACxI;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa;AAAA,MACb,aAAa;AAAA,QACX,aAAa;AAAA,QACb,QAAQ;AAAA,MACV;AAAA,MACA,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,0BAA0B,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,IAAI,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,EAAE;AAAA,QAClI,EAAE,QAAQ,KAAK,aAAa,mBAAmB,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,QACvF,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,QACpF,EAAE,QAAQ,KAAK,aAAa,aAAa,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,MACnF;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/staff/api/team-members/assignable/route.js

@@ -11,6 +11,8 @@ import {
   resolveCustomersRequestContext
 } from "@open-mercato/core/modules/customers/lib/interactionRequestContext";
 import { StaffTeam, StaffTeamMember } from "../../../data/entities.js";
+import { createLogger } from "@open-mercato/shared/lib/logger";
+const logger = createLogger("staff");
 const querySchema = z.object({
   page: z.coerce.number().min(1).default(1),
   pageSize: z.coerce.number().min(1).max(100).default(24),
@@ -175,7 +177,7 @@ async function GET(request) {
     if (error instanceof z.ZodError) {
       return NextResponse.json({ error: translate("customers.errors.validationFailed", "Validation failed") }, { status: 400 });
     }
-    console.error("staff.assignable-team-members.get failed", error);
+    logger.error("staff.assignable-team-members.get failed", { err: error });
     return NextResponse.json({ error: translate("customers.errors.assignable_staff_load_failed", "Failed to load assignable staff") }, { status: 500 });
   }
 }

package/dist/modules/staff/api/team-members/assignable/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../src/modules/staff/api/team-members/assignable/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { CrudHttpError, isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { createPagedListResponseSchema as createSharedPagedListResponseSchema } from '@open-mercato/shared/lib/openapi/crud'\nimport type { RbacService } from '@open-mercato/core/modules/auth/services/rbacService'\nimport { resolveOrganizationScopeFilter } from '@open-mercato/core/modules/directory/utils/organizationScopeFilter'\nimport { User } from '@open-mercato/core/modules/auth/data/entities'\nimport {\n  resolveAuthActorId,\n  resolveCustomersRequestContext,\n} from '@open-mercato/core/modules/customers/lib/interactionRequestContext'\nimport { StaffTeam, StaffTeamMember } from '../../../data/entities'\n\nconst querySchema = z\n  .object({\n    page: z.coerce.number().min(1).default(1),\n    pageSize: z.coerce.number().min(1).max(100).default(24),\n    search: z.string().optional(),\n  })\n  .passthrough()\n\nconst itemSchema = z.object({\n  id: z.string().uuid(),\n  teamMemberId: z.string().uuid(),\n  userId: z.string().uuid(),\n  displayName: z.string(),\n  email: z.string().nullable().optional(),\n  teamName: z.string().nullable().optional(),\n  user: z\n    .object({\n      id: z.string().uuid(),\n      email: z.string().nullable().optional(),\n    })\n    .nullable()\n    .optional(),\n  team: z\n    .object({\n      id: z.string().uuid(),\n      name: z.string().nullable().optional(),\n    })\n    .nullable()\n    .optional(),\n})\n\nconst errorSchema = z.object({ error: z.string() })\n\nconst pagedListSchema = createSharedPagedListResponseSchema(itemSchema, {\n  paginationMetaOptional: true,\n})\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['customers.roles.view'] },\n}\n\nasync function canAccessAssignableStaff(\n  rbac: RbacService | undefined,\n  userId: string,\n  scope: { tenantId: string; organizationId: string | null },\n): Promise<boolean> {\n  if (!rbac) return false\n  if (\n    await rbac.userHasAllFeatures(userId, ['customers.roles.manage'], scope)\n  ) {\n    return true\n  }\n  return rbac.userHasAllFeatures(userId, ['customers.activities.manage'], scope)\n}\n\nexport async function GET(request: Request) {\n  const { translate } = await resolveTranslations()\n  try {\n    const query = querySchema.parse(Object.fromEntries(new URL(request.url).searchParams))\n    const { container, em, auth, scope: organizationScope } = await resolveCustomersRequestContext(request)\n\n    const orgFilter = resolveOrganizationScopeFilter(organizationScope, auth)\n\n    const actorId = resolveAuthActorId(auth)\n    const rbacService = container.resolve('rbacService') as RbacService | undefined\n    const scope = { tenantId: auth.tenantId, organizationId: orgFilter.rbacOrganizationId }\n    const hasAccess = await canAccessAssignableStaff(rbacService, actorId, scope)\n    if (!hasAccess) {\n      throw new CrudHttpError(\n        403,\n        {\n          error: translate(\n            'customers.assignableStaff.forbidden',\n            'Insufficient permissions to load assignable staff.',\n          ),\n        },\n      )\n    }\n\n    const normalizedSearch = query.search?.trim().toLowerCase() ?? ''\n\n    const members = await findWithDecryption(\n      em,\n      StaffTeamMember,\n      {\n        tenantId: auth.tenantId,\n        ...orgFilter.where,\n        deletedAt: null,\n        isActive: true,\n      },\n      { orderBy: { displayName: 'asc' } },\n      scope,\n    )\n\n    const userIds = Array.from(\n      new Set(\n        members\n          .map((member) => (typeof member.userId === 'string' && member.userId.trim().length > 0 ? member.userId : null))\n          .filter((value): value is string => typeof value === 'string'),\n      ),\n    )\n    const teamIds = Array.from(\n      new Set(\n        members\n          .map((member) => (typeof member.teamId === 'string' && member.teamId.trim().length > 0 ? member.teamId : null))\n          .filter((value): value is string => typeof value === 'string'),\n      ),\n    )\n\n    const [users, teams] = await Promise.all([\n      userIds.length > 0\n        ? findWithDecryption(\n            em,\n            User,\n            {\n              id: { $in: userIds },\n              deletedAt: null,\n              tenantId: auth.tenantId,\n              ...orgFilter.where,\n            },\n            undefined,\n            scope,\n          )\n        : Promise.resolve([]),\n      teamIds.length > 0\n        ? findWithDecryption(\n            em,\n            StaffTeam,\n            {\n              id: { $in: teamIds },\n              deletedAt: null,\n              tenantId: auth.tenantId,\n              ...orgFilter.where,\n            },\n            undefined,\n            scope,\n          )\n        : Promise.resolve([]),\n    ])\n\n    const userById = new Map(\n      users.map((user) => [\n        user.id,\n        {\n          id: user.id,\n          email: user.email ?? null,\n        },\n      ]),\n    )\n    const teamById = new Map(\n      teams.map((team) => [\n        team.id,\n        {\n          id: team.id,\n          name: team.name ?? null,\n        },\n      ]),\n    )\n\n    const items = members\n      .filter((member) => typeof member.userId === 'string' && member.userId.trim().length > 0)\n      .map((member) => {\n        const userId = member.userId as string\n        const user = userById.get(userId) ?? { id: userId, email: null }\n        const team = member.teamId ? teamById.get(member.teamId) ?? null : null\n        return {\n          id: member.id,\n          teamMemberId: member.id,\n          userId,\n          displayName: member.displayName?.trim() || user.email || userId,\n          email: user.email,\n          teamName: team?.name ?? null,\n          user,\n          team,\n        }\n      })\n      .filter((item) => {\n        if (!normalizedSearch) return true\n        const haystack = [item.displayName, item.email, item.teamName]\n          .filter((value): value is string => typeof value === 'string' && value.length > 0)\n          .join(' ')\n          .toLowerCase()\n        return haystack.includes(normalizedSearch)\n      })\n\n    const deduped = Array.from(\n      items.reduce((acc, item) => {\n        if (!acc.has(item.userId)) {\n          acc.set(item.userId, item)\n        }\n        return acc\n      }, new Map<string, (typeof items)[number]>()),\n    ).map(([, item]) => item)\n\n    const start = (query.page - 1) * query.pageSize\n    return NextResponse.json({\n      items: deduped.slice(start, start + query.pageSize),\n      total: deduped.length,\n      page: query.page,\n      pageSize: query.pageSize,\n    })\n  } catch (error) {\n    if (isCrudHttpError(error)) {\n      return NextResponse.json(error.body, { status: error.status })\n    }\n    if (error instanceof z.ZodError) {\n      return NextResponse.json({ error: translate('customers.errors.validationFailed', 'Validation failed') }, { status: 400 })\n    }\n    console.error('staff.assignable-team-members.get failed', error)\n    return NextResponse.json({ error: translate('customers.errors.assignable_staff_load_failed', 'Failed to load assignable staff') }, { status: 500 })\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Staff',\n  summary: 'Assignable staff candidates',\n  methods: {\n    GET: {\n      summary: 'List staff members that can be assigned from customer flows',\n      query: querySchema,\n      description:\n        'Returns active staff members linked to auth users. Access requires either customers.roles.manage or customers.activities.manage. Owned by the staff module; consumed from customer flows via this canonical URL. Replaces the deprecated /api/customers/assignable-staff route.',\n      responses: [\n        {\n          status: 200,\n          description: 'Assignable staff members',\n          schema: pagedListSchema,\n        },\n      ],\n      errors: [\n        { status: 400, description: 'Invalid request', schema: errorSchema },\n        { status: 401, description: 'Unauthorized', schema: errorSchema },\n        { status: 403, description: 'Forbidden', schema: errorSchema },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAElB,SAAS,eAAe,uBAAuB;AAC/C,SAAS,0BAA0B;AACnC,SAAS,2BAA2B;AACpC,SAAS,iCAAiC,2CAA2C;AAErF,SAAS,sCAAsC;AAC/C,SAAS,YAAY;AACrB;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,WAAW,uBAAuB;AAE3C,MAAM,cAAc,EACjB,OAAO;AAAA,EACN,MAAM,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,QAAQ,CAAC;AAAA,EACxC,UAAU,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,QAAQ,EAAE;AAAA,EACtD,QAAQ,EAAE,OAAO,EAAE,SAAS;AAC9B,CAAC,EACA,YAAY;AAEf,MAAM,aAAa,EAAE,OAAO;AAAA,EAC1B,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,cAAc,EAAE,OAAO,EAAE,KAAK;AAAA,EAC9B,QAAQ,EAAE,OAAO,EAAE,KAAK;AAAA,EACxB,aAAa,EAAE,OAAO;AAAA,EACtB,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACtC,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACzC,MAAM,EACH,OAAO;AAAA,IACN,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,IACpB,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACxC,CAAC,EACA,SAAS,EACT,SAAS;AAAA,EACZ,MAAM,EACH,OAAO;AAAA,IACN,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,IACpB,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACvC,CAAC,EACA,SAAS,EACT,SAAS;AACd,CAAC;AAED,MAAM,cAAc,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAElD,MAAM,kBAAkB,oCAAoC,YAAY;AAAA,EACtE,wBAAwB;AAC1B,CAAC;AAEM,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,sBAAsB,EAAE;AACtE;AAEA,eAAe,yBACb,MACA,QACA,OACkB;AAClB,MAAI,CAAC,KAAM,QAAO;AAClB,MACE,MAAM,KAAK,mBAAmB,QAAQ,CAAC,wBAAwB,GAAG,KAAK,GACvE;AACA,WAAO;AAAA,EACT;AACA,SAAO,KAAK,mBAAmB,QAAQ,CAAC,6BAA6B,GAAG,KAAK;AAC/E;AAEA,eAAsB,IAAI,SAAkB;AAC1C,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,MAAI;AACF,UAAM,QAAQ,YAAY,MAAM,OAAO,YAAY,IAAI,IAAI,QAAQ,GAAG,EAAE,YAAY,CAAC;AACrF,UAAM,EAAE,WAAW,IAAI,MAAM,OAAO,kBAAkB,IAAI,MAAM,+BAA+B,OAAO;AAEtG,UAAM,YAAY,+BAA+B,mBAAmB,IAAI;AAExE,UAAM,UAAU,mBAAmB,IAAI;AACvC,UAAM,cAAc,UAAU,QAAQ,aAAa;AACnD,UAAM,QAAQ,EAAE,UAAU,KAAK,UAAU,gBAAgB,UAAU,mBAAmB;AACtF,UAAM,YAAY,MAAM,yBAAyB,aAAa,SAAS,KAAK;AAC5E,QAAI,CAAC,WAAW;AACd,YAAM,IAAI;AAAA,QACR;AAAA,QACA;AAAA,UACE,OAAO;AAAA,YACL;AAAA,YACA;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAEA,UAAM,mBAAmB,MAAM,QAAQ,KAAK,EAAE,YAAY,KAAK;AAE/D,UAAM,UAAU,MAAM;AAAA,MACpB;AAAA,MACA;AAAA,MACA;AAAA,QACE,UAAU,KAAK;AAAA,QACf,GAAG,UAAU;AAAA,QACb,WAAW;AAAA,QACX,UAAU;AAAA,MACZ;AAAA,MACA,EAAE,SAAS,EAAE,aAAa,MAAM,EAAE;AAAA,MAClC;AAAA,IACF;AAEA,UAAM,UAAU,MAAM;AAAA,MACpB,IAAI;AAAA,QACF,QACG,IAAI,CAAC,WAAY,OAAO,OAAO,WAAW,YAAY,OAAO,OAAO,KAAK,EAAE,SAAS,IAAI,OAAO,SAAS,IAAK,EAC7G,OAAO,CAAC,UAA2B,OAAO,UAAU,QAAQ;AAAA,MACjE;AAAA,IACF;AACA,UAAM,UAAU,MAAM;AAAA,MACpB,IAAI;AAAA,QACF,QACG,IAAI,CAAC,WAAY,OAAO,OAAO,WAAW,YAAY,OAAO,OAAO,KAAK,EAAE,SAAS,IAAI,OAAO,SAAS,IAAK,EAC7G,OAAO,CAAC,UAA2B,OAAO,UAAU,QAAQ;AAAA,MACjE;AAAA,IACF;AAEA,UAAM,CAAC,OAAO,KAAK,IAAI,MAAM,QAAQ,IAAI;AAAA,MACvC,QAAQ,SAAS,IACb;AAAA,QACE;AAAA,QACA;AAAA,QACA;AAAA,UACE,IAAI,EAAE,KAAK,QAAQ;AAAA,UACnB,WAAW;AAAA,UACX,UAAU,KAAK;AAAA,UACf,GAAG,UAAU;AAAA,QACf;AAAA,QACA;AAAA,QACA;AAAA,MACF,IACA,QAAQ,QAAQ,CAAC,CAAC;AAAA,MACtB,QAAQ,SAAS,IACb;AAAA,QACE;AAAA,QACA;AAAA,QACA;AAAA,UACE,IAAI,EAAE,KAAK,QAAQ;AAAA,UACnB,WAAW;AAAA,UACX,UAAU,KAAK;AAAA,UACf,GAAG,UAAU;AAAA,QACf;AAAA,QACA;AAAA,QACA;AAAA,MACF,IACA,QAAQ,QAAQ,CAAC,CAAC;AAAA,IACxB,CAAC;AAED,UAAM,WAAW,IAAI;AAAA,MACnB,MAAM,IAAI,CAAC,SAAS;AAAA,QAClB,KAAK;AAAA,QACL;AAAA,UACE,IAAI,KAAK;AAAA,UACT,OAAO,KAAK,SAAS;AAAA,QACvB;AAAA,MACF,CAAC;AAAA,IACH;AACA,UAAM,WAAW,IAAI;AAAA,MACnB,MAAM,IAAI,CAAC,SAAS;AAAA,QAClB,KAAK;AAAA,QACL;AAAA,UACE,IAAI,KAAK;AAAA,UACT,MAAM,KAAK,QAAQ;AAAA,QACrB;AAAA,MACF,CAAC;AAAA,IACH;AAEA,UAAM,QAAQ,QACX,OAAO,CAAC,WAAW,OAAO,OAAO,WAAW,YAAY,OAAO,OAAO,KAAK,EAAE,SAAS,CAAC,EACvF,IAAI,CAAC,WAAW;AACf,YAAM,SAAS,OAAO;AACtB,YAAM,OAAO,SAAS,IAAI,MAAM,KAAK,EAAE,IAAI,QAAQ,OAAO,KAAK;AAC/D,YAAM,OAAO,OAAO,SAAS,SAAS,IAAI,OAAO,MAAM,KAAK,OAAO;AACnE,aAAO;AAAA,QACL,IAAI,OAAO;AAAA,QACX,cAAc,OAAO;AAAA,QACrB;AAAA,QACA,aAAa,OAAO,aAAa,KAAK,KAAK,KAAK,SAAS;AAAA,QACzD,OAAO,KAAK;AAAA,QACZ,UAAU,MAAM,QAAQ;AAAA,QACxB;AAAA,QACA;AAAA,MACF;AAAA,IACF,CAAC,EACA,OAAO,CAAC,SAAS;AAChB,UAAI,CAAC,iBAAkB,QAAO;AAC9B,YAAM,WAAW,CAAC,KAAK,aAAa,KAAK,OAAO,KAAK,QAAQ,EAC1D,OAAO,CAAC,UAA2B,OAAO,UAAU,YAAY,MAAM,SAAS,CAAC,EAChF,KAAK,GAAG,EACR,YAAY;AACf,aAAO,SAAS,SAAS,gBAAgB;AAAA,IAC3C,CAAC;AAEH,UAAM,UAAU,MAAM;AAAA,MACpB,MAAM,OAAO,CAAC,KAAK,SAAS;AAC1B,YAAI,CAAC,IAAI,IAAI,KAAK,MAAM,GAAG;AACzB,cAAI,IAAI,KAAK,QAAQ,IAAI;AAAA,QAC3B;AACA,eAAO;AAAA,MACT,GAAG,oBAAI,IAAoC,CAAC;AAAA,IAC9C,EAAE,IAAI,CAAC,CAAC,EAAE,IAAI,MAAM,IAAI;AAExB,UAAM,SAAS,MAAM,OAAO,KAAK,MAAM;AACvC,WAAO,aAAa,KAAK;AAAA,MACvB,OAAO,QAAQ,MAAM,OAAO,QAAQ,MAAM,QAAQ;AAAA,MAClD,OAAO,QAAQ;AAAA,MACf,MAAM,MAAM;AAAA,MACZ,UAAU,MAAM;AAAA,IAClB,CAAC;AAAA,EACH,SAAS,OAAO;AACd,QAAI,gBAAgB,KAAK,GAAG;AAC1B,aAAO,aAAa,KAAK,MAAM,MAAM,EAAE,QAAQ,MAAM,OAAO,CAAC;AAAA,IAC/D;AACA,QAAI,iBAAiB,EAAE,UAAU;AAC/B,aAAO,aAAa,KAAK,EAAE,OAAO,UAAU,qCAAqC,mBAAmB,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC1H;AACA,YAAQ,MAAM,4CAA4C,KAAK;AAC/D,WAAO,aAAa,KAAK,EAAE,OAAO,UAAU,iDAAiD,iCAAiC,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACpJ;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,OAAO;AAAA,MACP,aACE;AAAA,MACF,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ;AAAA,QACV;AAAA,MACF;AAAA,MACA,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,mBAAmB,QAAQ,YAAY;AAAA,QACnE,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,YAAY;AAAA,QAChE,EAAE,QAAQ,KAAK,aAAa,aAAa,QAAQ,YAAY;AAAA,MAC/D;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { CrudHttpError, isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { createPagedListResponseSchema as createSharedPagedListResponseSchema } from '@open-mercato/shared/lib/openapi/crud'\nimport type { RbacService } from '@open-mercato/core/modules/auth/services/rbacService'\nimport { resolveOrganizationScopeFilter } from '@open-mercato/core/modules/directory/utils/organizationScopeFilter'\nimport { User } from '@open-mercato/core/modules/auth/data/entities'\nimport {\n  resolveAuthActorId,\n  resolveCustomersRequestContext,\n} from '@open-mercato/core/modules/customers/lib/interactionRequestContext'\nimport { StaffTeam, StaffTeamMember } from '../../../data/entities'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('staff')\n\nconst querySchema = z\n  .object({\n    page: z.coerce.number().min(1).default(1),\n    pageSize: z.coerce.number().min(1).max(100).default(24),\n    search: z.string().optional(),\n  })\n  .passthrough()\n\nconst itemSchema = z.object({\n  id: z.string().uuid(),\n  teamMemberId: z.string().uuid(),\n  userId: z.string().uuid(),\n  displayName: z.string(),\n  email: z.string().nullable().optional(),\n  teamName: z.string().nullable().optional(),\n  user: z\n    .object({\n      id: z.string().uuid(),\n      email: z.string().nullable().optional(),\n    })\n    .nullable()\n    .optional(),\n  team: z\n    .object({\n      id: z.string().uuid(),\n      name: z.string().nullable().optional(),\n    })\n    .nullable()\n    .optional(),\n})\n\nconst errorSchema = z.object({ error: z.string() })\n\nconst pagedListSchema = createSharedPagedListResponseSchema(itemSchema, {\n  paginationMetaOptional: true,\n})\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['customers.roles.view'] },\n}\n\nasync function canAccessAssignableStaff(\n  rbac: RbacService | undefined,\n  userId: string,\n  scope: { tenantId: string; organizationId: string | null },\n): Promise<boolean> {\n  if (!rbac) return false\n  if (\n    await rbac.userHasAllFeatures(userId, ['customers.roles.manage'], scope)\n  ) {\n    return true\n  }\n  return rbac.userHasAllFeatures(userId, ['customers.activities.manage'], scope)\n}\n\nexport async function GET(request: Request) {\n  const { translate } = await resolveTranslations()\n  try {\n    const query = querySchema.parse(Object.fromEntries(new URL(request.url).searchParams))\n    const { container, em, auth, scope: organizationScope } = await resolveCustomersRequestContext(request)\n\n    const orgFilter = resolveOrganizationScopeFilter(organizationScope, auth)\n\n    const actorId = resolveAuthActorId(auth)\n    const rbacService = container.resolve('rbacService') as RbacService | undefined\n    const scope = { tenantId: auth.tenantId, organizationId: orgFilter.rbacOrganizationId }\n    const hasAccess = await canAccessAssignableStaff(rbacService, actorId, scope)\n    if (!hasAccess) {\n      throw new CrudHttpError(\n        403,\n        {\n          error: translate(\n            'customers.assignableStaff.forbidden',\n            'Insufficient permissions to load assignable staff.',\n          ),\n        },\n      )\n    }\n\n    const normalizedSearch = query.search?.trim().toLowerCase() ?? ''\n\n    const members = await findWithDecryption(\n      em,\n      StaffTeamMember,\n      {\n        tenantId: auth.tenantId,\n        ...orgFilter.where,\n        deletedAt: null,\n        isActive: true,\n      },\n      { orderBy: { displayName: 'asc' } },\n      scope,\n    )\n\n    const userIds = Array.from(\n      new Set(\n        members\n          .map((member) => (typeof member.userId === 'string' && member.userId.trim().length > 0 ? member.userId : null))\n          .filter((value): value is string => typeof value === 'string'),\n      ),\n    )\n    const teamIds = Array.from(\n      new Set(\n        members\n          .map((member) => (typeof member.teamId === 'string' && member.teamId.trim().length > 0 ? member.teamId : null))\n          .filter((value): value is string => typeof value === 'string'),\n      ),\n    )\n\n    const [users, teams] = await Promise.all([\n      userIds.length > 0\n        ? findWithDecryption(\n            em,\n            User,\n            {\n              id: { $in: userIds },\n              deletedAt: null,\n              tenantId: auth.tenantId,\n              ...orgFilter.where,\n            },\n            undefined,\n            scope,\n          )\n        : Promise.resolve([]),\n      teamIds.length > 0\n        ? findWithDecryption(\n            em,\n            StaffTeam,\n            {\n              id: { $in: teamIds },\n              deletedAt: null,\n              tenantId: auth.tenantId,\n              ...orgFilter.where,\n            },\n            undefined,\n            scope,\n          )\n        : Promise.resolve([]),\n    ])\n\n    const userById = new Map(\n      users.map((user) => [\n        user.id,\n        {\n          id: user.id,\n          email: user.email ?? null,\n        },\n      ]),\n    )\n    const teamById = new Map(\n      teams.map((team) => [\n        team.id,\n        {\n          id: team.id,\n          name: team.name ?? null,\n        },\n      ]),\n    )\n\n    const items = members\n      .filter((member) => typeof member.userId === 'string' && member.userId.trim().length > 0)\n      .map((member) => {\n        const userId = member.userId as string\n        const user = userById.get(userId) ?? { id: userId, email: null }\n        const team = member.teamId ? teamById.get(member.teamId) ?? null : null\n        return {\n          id: member.id,\n          teamMemberId: member.id,\n          userId,\n          displayName: member.displayName?.trim() || user.email || userId,\n          email: user.email,\n          teamName: team?.name ?? null,\n          user,\n          team,\n        }\n      })\n      .filter((item) => {\n        if (!normalizedSearch) return true\n        const haystack = [item.displayName, item.email, item.teamName]\n          .filter((value): value is string => typeof value === 'string' && value.length > 0)\n          .join(' ')\n          .toLowerCase()\n        return haystack.includes(normalizedSearch)\n      })\n\n    const deduped = Array.from(\n      items.reduce((acc, item) => {\n        if (!acc.has(item.userId)) {\n          acc.set(item.userId, item)\n        }\n        return acc\n      }, new Map<string, (typeof items)[number]>()),\n    ).map(([, item]) => item)\n\n    const start = (query.page - 1) * query.pageSize\n    return NextResponse.json({\n      items: deduped.slice(start, start + query.pageSize),\n      total: deduped.length,\n      page: query.page,\n      pageSize: query.pageSize,\n    })\n  } catch (error) {\n    if (isCrudHttpError(error)) {\n      return NextResponse.json(error.body, { status: error.status })\n    }\n    if (error instanceof z.ZodError) {\n      return NextResponse.json({ error: translate('customers.errors.validationFailed', 'Validation failed') }, { status: 400 })\n    }\n    logger.error('staff.assignable-team-members.get failed', { err: error })\n    return NextResponse.json({ error: translate('customers.errors.assignable_staff_load_failed', 'Failed to load assignable staff') }, { status: 500 })\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Staff',\n  summary: 'Assignable staff candidates',\n  methods: {\n    GET: {\n      summary: 'List staff members that can be assigned from customer flows',\n      query: querySchema,\n      description:\n        'Returns active staff members linked to auth users. Access requires either customers.roles.manage or customers.activities.manage. Owned by the staff module; consumed from customer flows via this canonical URL. Replaces the deprecated /api/customers/assignable-staff route.',\n      responses: [\n        {\n          status: 200,\n          description: 'Assignable staff members',\n          schema: pagedListSchema,\n        },\n      ],\n      errors: [\n        { status: 400, description: 'Invalid request', schema: errorSchema },\n        { status: 401, description: 'Unauthorized', schema: errorSchema },\n        { status: 403, description: 'Forbidden', schema: errorSchema },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAElB,SAAS,eAAe,uBAAuB;AAC/C,SAAS,0BAA0B;AACnC,SAAS,2BAA2B;AACpC,SAAS,iCAAiC,2CAA2C;AAErF,SAAS,sCAAsC;AAC/C,SAAS,YAAY;AACrB;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,WAAW,uBAAuB;AAC3C,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,OAAO;AAEnC,MAAM,cAAc,EACjB,OAAO;AAAA,EACN,MAAM,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,QAAQ,CAAC;AAAA,EACxC,UAAU,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,QAAQ,EAAE;AAAA,EACtD,QAAQ,EAAE,OAAO,EAAE,SAAS;AAC9B,CAAC,EACA,YAAY;AAEf,MAAM,aAAa,EAAE,OAAO;AAAA,EAC1B,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,cAAc,EAAE,OAAO,EAAE,KAAK;AAAA,EAC9B,QAAQ,EAAE,OAAO,EAAE,KAAK;AAAA,EACxB,aAAa,EAAE,OAAO;AAAA,EACtB,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACtC,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACzC,MAAM,EACH,OAAO;AAAA,IACN,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,IACpB,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACxC,CAAC,EACA,SAAS,EACT,SAAS;AAAA,EACZ,MAAM,EACH,OAAO;AAAA,IACN,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,IACpB,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACvC,CAAC,EACA,SAAS,EACT,SAAS;AACd,CAAC;AAED,MAAM,cAAc,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAElD,MAAM,kBAAkB,oCAAoC,YAAY;AAAA,EACtE,wBAAwB;AAC1B,CAAC;AAEM,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,sBAAsB,EAAE;AACtE;AAEA,eAAe,yBACb,MACA,QACA,OACkB;AAClB,MAAI,CAAC,KAAM,QAAO;AAClB,MACE,MAAM,KAAK,mBAAmB,QAAQ,CAAC,wBAAwB,GAAG,KAAK,GACvE;AACA,WAAO;AAAA,EACT;AACA,SAAO,KAAK,mBAAmB,QAAQ,CAAC,6BAA6B,GAAG,KAAK;AAC/E;AAEA,eAAsB,IAAI,SAAkB;AAC1C,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,MAAI;AACF,UAAM,QAAQ,YAAY,MAAM,OAAO,YAAY,IAAI,IAAI,QAAQ,GAAG,EAAE,YAAY,CAAC;AACrF,UAAM,EAAE,WAAW,IAAI,MAAM,OAAO,kBAAkB,IAAI,MAAM,+BAA+B,OAAO;AAEtG,UAAM,YAAY,+BAA+B,mBAAmB,IAAI;AAExE,UAAM,UAAU,mBAAmB,IAAI;AACvC,UAAM,cAAc,UAAU,QAAQ,aAAa;AACnD,UAAM,QAAQ,EAAE,UAAU,KAAK,UAAU,gBAAgB,UAAU,mBAAmB;AACtF,UAAM,YAAY,MAAM,yBAAyB,aAAa,SAAS,KAAK;AAC5E,QAAI,CAAC,WAAW;AACd,YAAM,IAAI;AAAA,QACR;AAAA,QACA;AAAA,UACE,OAAO;AAAA,YACL;AAAA,YACA;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAEA,UAAM,mBAAmB,MAAM,QAAQ,KAAK,EAAE,YAAY,KAAK;AAE/D,UAAM,UAAU,MAAM;AAAA,MACpB;AAAA,MACA;AAAA,MACA;AAAA,QACE,UAAU,KAAK;AAAA,QACf,GAAG,UAAU;AAAA,QACb,WAAW;AAAA,QACX,UAAU;AAAA,MACZ;AAAA,MACA,EAAE,SAAS,EAAE,aAAa,MAAM,EAAE;AAAA,MAClC;AAAA,IACF;AAEA,UAAM,UAAU,MAAM;AAAA,MACpB,IAAI;AAAA,QACF,QACG,IAAI,CAAC,WAAY,OAAO,OAAO,WAAW,YAAY,OAAO,OAAO,KAAK,EAAE,SAAS,IAAI,OAAO,SAAS,IAAK,EAC7G,OAAO,CAAC,UAA2B,OAAO,UAAU,QAAQ;AAAA,MACjE;AAAA,IACF;AACA,UAAM,UAAU,MAAM;AAAA,MACpB,IAAI;AAAA,QACF,QACG,IAAI,CAAC,WAAY,OAAO,OAAO,WAAW,YAAY,OAAO,OAAO,KAAK,EAAE,SAAS,IAAI,OAAO,SAAS,IAAK,EAC7G,OAAO,CAAC,UAA2B,OAAO,UAAU,QAAQ;AAAA,MACjE;AAAA,IACF;AAEA,UAAM,CAAC,OAAO,KAAK,IAAI,MAAM,QAAQ,IAAI;AAAA,MACvC,QAAQ,SAAS,IACb;AAAA,QACE;AAAA,QACA;AAAA,QACA;AAAA,UACE,IAAI,EAAE,KAAK,QAAQ;AAAA,UACnB,WAAW;AAAA,UACX,UAAU,KAAK;AAAA,UACf,GAAG,UAAU;AAAA,QACf;AAAA,QACA;AAAA,QACA;AAAA,MACF,IACA,QAAQ,QAAQ,CAAC,CAAC;AAAA,MACtB,QAAQ,SAAS,IACb;AAAA,QACE;AAAA,QACA;AAAA,QACA;AAAA,UACE,IAAI,EAAE,KAAK,QAAQ;AAAA,UACnB,WAAW;AAAA,UACX,UAAU,KAAK;AAAA,UACf,GAAG,UAAU;AAAA,QACf;AAAA,QACA;AAAA,QACA;AAAA,MACF,IACA,QAAQ,QAAQ,CAAC,CAAC;AAAA,IACxB,CAAC;AAED,UAAM,WAAW,IAAI;AAAA,MACnB,MAAM,IAAI,CAAC,SAAS;AAAA,QAClB,KAAK;AAAA,QACL;AAAA,UACE,IAAI,KAAK;AAAA,UACT,OAAO,KAAK,SAAS;AAAA,QACvB;AAAA,MACF,CAAC;AAAA,IACH;AACA,UAAM,WAAW,IAAI;AAAA,MACnB,MAAM,IAAI,CAAC,SAAS;AAAA,QAClB,KAAK;AAAA,QACL;AAAA,UACE,IAAI,KAAK;AAAA,UACT,MAAM,KAAK,QAAQ;AAAA,QACrB;AAAA,MACF,CAAC;AAAA,IACH;AAEA,UAAM,QAAQ,QACX,OAAO,CAAC,WAAW,OAAO,OAAO,WAAW,YAAY,OAAO,OAAO,KAAK,EAAE,SAAS,CAAC,EACvF,IAAI,CAAC,WAAW;AACf,YAAM,SAAS,OAAO;AACtB,YAAM,OAAO,SAAS,IAAI,MAAM,KAAK,EAAE,IAAI,QAAQ,OAAO,KAAK;AAC/D,YAAM,OAAO,OAAO,SAAS,SAAS,IAAI,OAAO,MAAM,KAAK,OAAO;AACnE,aAAO;AAAA,QACL,IAAI,OAAO;AAAA,QACX,cAAc,OAAO;AAAA,QACrB;AAAA,QACA,aAAa,OAAO,aAAa,KAAK,KAAK,KAAK,SAAS;AAAA,QACzD,OAAO,KAAK;AAAA,QACZ,UAAU,MAAM,QAAQ;AAAA,QACxB;AAAA,QACA;AAAA,MACF;AAAA,IACF,CAAC,EACA,OAAO,CAAC,SAAS;AAChB,UAAI,CAAC,iBAAkB,QAAO;AAC9B,YAAM,WAAW,CAAC,KAAK,aAAa,KAAK,OAAO,KAAK,QAAQ,EAC1D,OAAO,CAAC,UAA2B,OAAO,UAAU,YAAY,MAAM,SAAS,CAAC,EAChF,KAAK,GAAG,EACR,YAAY;AACf,aAAO,SAAS,SAAS,gBAAgB;AAAA,IAC3C,CAAC;AAEH,UAAM,UAAU,MAAM;AAAA,MACpB,MAAM,OAAO,CAAC,KAAK,SAAS;AAC1B,YAAI,CAAC,IAAI,IAAI,KAAK,MAAM,GAAG;AACzB,cAAI,IAAI,KAAK,QAAQ,IAAI;AAAA,QAC3B;AACA,eAAO;AAAA,MACT,GAAG,oBAAI,IAAoC,CAAC;AAAA,IAC9C,EAAE,IAAI,CAAC,CAAC,EAAE,IAAI,MAAM,IAAI;AAExB,UAAM,SAAS,MAAM,OAAO,KAAK,MAAM;AACvC,WAAO,aAAa,KAAK;AAAA,MACvB,OAAO,QAAQ,MAAM,OAAO,QAAQ,MAAM,QAAQ;AAAA,MAClD,OAAO,QAAQ;AAAA,MACf,MAAM,MAAM;AAAA,MACZ,UAAU,MAAM;AAAA,IAClB,CAAC;AAAA,EACH,SAAS,OAAO;AACd,QAAI,gBAAgB,KAAK,GAAG;AAC1B,aAAO,aAAa,KAAK,MAAM,MAAM,EAAE,QAAQ,MAAM,OAAO,CAAC;AAAA,IAC/D;AACA,QAAI,iBAAiB,EAAE,UAAU;AAC/B,aAAO,aAAa,KAAK,EAAE,OAAO,UAAU,qCAAqC,mBAAmB,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC1H;AACA,WAAO,MAAM,4CAA4C,EAAE,KAAK,MAAM,CAAC;AACvE,WAAO,aAAa,KAAK,EAAE,OAAO,UAAU,iDAAiD,iCAAiC,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACpJ;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,OAAO;AAAA,MACP,aACE;AAAA,MACF,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ;AAAA,QACV;AAAA,MACF;AAAA,MACA,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,mBAAmB,QAAQ,YAAY;AAAA,QACnE,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,YAAY;AAAA,QAChE,EAAE,QAAQ,KAAK,aAAa,aAAa,QAAQ,YAAY;AAAA,MAC/D;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/staff/api/team-members/self/route.js

@@ -17,6 +17,8 @@ import {
   runStaffMutationGuardAfterSuccess,
   runStaffMutationGuards
 } from "../../guards.js";
+import { createLogger } from "@open-mercato/shared/lib/logger";
+const logger = createLogger("staff");
 const metadata = {
   GET: { requireAuth: true, requireFeatures: ["staff.leave_requests.send"] },
   POST: { requireAuth: true, requireFeatures: ["staff.leave_requests.send"] }
@@ -71,7 +73,7 @@ async function GET(req) {
     });
   } catch (err) {
     if (isCrudHttpError(err)) return NextResponse.json(err.body, { status: err.status });
-    console.error("staff.teamMembers.self.load failed", err);
+    logger.error("staff.teamMembers.self.load failed", { err });
     return NextResponse.json({ member: null });
   }
 }
@@ -166,7 +168,7 @@ async function POST(req) {
       return NextResponse.json(err.body, { status: err.status });
     }
     const { translate } = await resolveTranslations();
-    console.error("staff.teamMembers.self.create failed", err);
+    logger.error("staff.teamMembers.self.create failed", { err });
     return NextResponse.json({ error: translate("staff.teamMembers.form.errors.create", "Failed to create team member.") }, { status: 400 });
   }
 }