@open-mercato/core 0.6.6-develop.6543.1.49fadb4c31 → 0.6.6

package/dist/modules/customers/backend/customers/companies-v2/[id]/page.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../../src/modules/customers/backend/customers/companies-v2/%5Bid%5D/page.tsx"],
-  "sourcesContent": ["\"use client\"\n\nimport * as React from 'react'\nimport Link from 'next/link'\nimport { useRouter, useSearchParams, usePathname } from 'next/navigation'\nimport { Page, PageBody } from '@open-mercato/ui/backend/Page'\nimport { Building2, Hash, Users, BarChart3, StickyNote } from 'lucide-react'\nimport { updateCrud, deleteCrud } from '@open-mercato/ui/backend/utils/crud'\nimport { apiCallOrThrow, readApiResultOrThrow, withScopedApiRequestHeaders } from '@open-mercato/ui/backend/utils/apiCall'\nimport { buildOptimisticLockHeader } from '@open-mercato/ui/backend/utils/optimisticLock'\nimport { flash } from '@open-mercato/ui/backend/FlashMessages'\nimport { surfaceRecordConflict } from '@open-mercato/ui/backend/conflicts'\nimport { useT } from '@open-mercato/shared/lib/i18n/context'\nimport { Button } from '@open-mercato/ui/primitives/button'\nimport { AttachmentsSection, ErrorMessage, LoadingMessage, RecordNotFoundState, type SectionAction } from '@open-mercato/ui/backend/detail'\nimport { useConfirmDialog } from '@open-mercato/ui/backend/confirm-dialog'\nimport { InjectionSpot, useInjectionWidgets } from '@open-mercato/ui/backend/injection/InjectionSpot'\nimport { useGuardedMutation } from '@open-mercato/ui/backend/injection/useGuardedMutation'\nimport { buildRecordInjectionContext, useSetCurrentRecordInjectionContext } from '@open-mercato/ui/backend/injection/recordContext'\nimport { createTranslatorWithFallback } from '@open-mercato/shared/lib/i18n/translate'\nimport { CrudForm } from '@open-mercato/ui/backend/CrudForm'\nimport { CollapsibleZoneLayout, type ZoneSectionDescriptor } from '@open-mercato/ui/backend/crud/CollapsibleZoneLayout'\nimport { createCrudFormError } from '@open-mercato/ui/backend/utils/serverErrors'\nimport { E } from '#generated/entities.ids.generated'\nimport { useOrganizationScopeDetail } from '@open-mercato/shared/lib/frontend/useOrganizationScope'\nimport { DealsSection } from '../../../../components/detail/DealsSection'\nimport { ActivityLogTab } from '../../../../components/detail/ActivityLogTab'\nimport { CompanyPeopleSection, type CompanyPersonSummary } from '../../../../components/detail/CompanyPeopleSection'\nimport type { TagSummary } from '../../../../components/detail/types'\nimport type { TagsSectionController } from '@open-mercato/ui/backend/detail'\nimport { coerceDisplayName } from '../../../../lib/displayName'\nimport { CompanyDetailHeader } from '../../../../components/detail/CompanyDetailHeader'\nimport { CompanyDetailTabs, resolveLegacyTab, type CompanyTabId } from '../../../../components/detail/CompanyDetailTabs'\nimport { useDealsAccess } from '../../../../components/detail/useDealsAccess'\nimport { CompanyKpiBar } from '../../../../components/detail/CompanyKpiBar'\nimport { ScheduleActivityDialog, type ScheduleActivityEditData } from '../../../../components/detail/ScheduleActivityDialog'\nimport { ChangelogTab } from '../../../../components/detail/ChangelogTab'\nimport { useInteractionMutations } from '../../../../components/detail/hooks/useInteractionMutations'\nimport {\n  buildCompanyEditPayload,\n  createCompanyEditFields,\n  createCompanyDaneFiremyGroups,\n  createCompanyEditSchema,\n  mapCompanyOverviewToFormValues,\n  type CompanyEditFormValues,\n  type CompanyOverview,\n} from '../../../../components/formConfig'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('customers')\n\nexport default function CompanyDetailV2Page({ params }: { params?: { id?: string } }) {\n  const id = params?.id\n  const t = useT()\n  const router = useRouter()\n  const searchParams = useSearchParams()\n  const pathname = usePathname()\n  const { confirm, ConfirmDialogElement } = useConfirmDialog()\n\n  const detailTranslator = React.useMemo(() => createTranslatorWithFallback(t), [t])\n\n  const [data, setData] = React.useState<CompanyOverview | null>(null)\n  const [isLoading, setIsLoading] = React.useState(true)\n  const [error, setError] = React.useState<string | null>(null)\n  const [isNotFound, setIsNotFound] = React.useState(false)\n\n  // Tab state\n  const initialTab = React.useMemo(() => {\n    return resolveLegacyTab(searchParams?.get('tab'))\n  }, [searchParams])\n  const [activeTab, setActiveTab] = React.useState<CompanyTabId>(initialTab)\n  const [sectionAction, setSectionAction] = React.useState<SectionAction | null>(null)\n  const { canViewDeals, isReady: isDealsAccessReady } = useDealsAccess()\n\n  // Form state\n  const [isDirty, setIsDirty] = React.useState(false)\n  const [isSaving, setIsSaving] = React.useState(false)\n  const formWrapperRef = React.useRef<HTMLDivElement>(null)\n  const { organizationId } = useOrganizationScopeDetail()\n  const formSchema = React.useMemo(() => createCompanyEditSchema(), [])\n  const formFields = React.useMemo(() => createCompanyEditFields(t), [t])\n  const formGroups = React.useMemo(() => createCompanyDaneFiremyGroups(t), [t])\n  const initialValues = React.useMemo(\n    () => (data ? mapCompanyOverviewToFormValues(data) : undefined),\n    [data],\n  )\n  const zoneSections = React.useMemo<ZoneSectionDescriptor[]>(() => [\n    { id: 'identity', icon: Building2, label: t('customers.companies.form.sections.identity', 'Identity') },\n    { id: 'contact', icon: Hash, label: t('customers.companies.form.sections.contact', 'Contact') },\n    { id: 'classification', icon: Users, label: t('customers.companies.form.sections.classification', 'Classification') },\n    { id: 'businessProfile', icon: BarChart3, label: t('customers.companies.form.sections.businessProfile', 'Business profile') },\n    { id: 'notes', icon: StickyNote, label: t('customers.companies.form.groups.notes', 'Notes') },\n    { id: 'customFields', icon: Hash, label: t('customers.companies.form.groups.customAttributes', 'Custom attributes') },\n  ], [t])\n  const [scheduleDialogOpen, setScheduleDialogOpen] = React.useState(false)\n  const [scheduleEditData, setScheduleEditData] = React.useState<ScheduleActivityEditData | null>(null)\n  const [activityRefreshKey, setActivityRefreshKey] = React.useState(0)\n  const [dealCount, setDealCount] = React.useState(0)\n\n  const currentCompanyId = data?.company?.id ?? null\n  const mutationContextId = React.useMemo(\n    () => (currentCompanyId ? `customer-company:${currentCompanyId}` : `customer-company:${id ?? 'pending'}`),\n    [currentCompanyId, id],\n  )\n  const { runMutation, retryLastMutation } = useGuardedMutation<{\n    formId: string\n    companyId?: string | null\n    resourceKind: string\n    resourceId?: string\n    data: CompanyOverview | null\n    retryLastMutation: () => Promise<boolean>\n  }>({\n    contextId: mutationContextId,\n    blockedMessage: t('ui.forms.flash.saveBlocked', 'Save blocked by validation'),\n  })\n\n  const companyDisplayName = coerceDisplayName(data?.company?.displayName)\n  const companyName = companyDisplayName.trim().length\n    ? companyDisplayName\n    : t('customers.companies.list.deleteFallbackName', 'this company')\n\n  // Data loading\n  const initialLoadDoneRef = React.useRef(false)\n  const loadData = React.useCallback(async () => {\n    if (!id) {\n      setIsNotFound(true)\n      setIsLoading(false)\n      return\n    }\n    if (!initialLoadDoneRef.current) {\n      setIsLoading(true)\n    }\n    setError(null)\n    setIsNotFound(false)\n    try {\n      const payload = await readApiResultOrThrow<CompanyOverview>(\n        `/api/customers/companies/${encodeURIComponent(id)}`,\n        undefined,\n        { errorMessage: t('customers.companies.detail.error.load', 'Failed to load company.') },\n      )\n      setData(payload as CompanyOverview)\n    } catch (err) {\n      if ((err as { status?: number }).status === 404) {\n        setIsNotFound(true)\n      } else {\n        const message = err instanceof Error ? err.message : t('customers.companies.detail.error.load', 'Failed to load company.')\n        setError(message)\n      }\n      if (!initialLoadDoneRef.current) setData(null)\n    } finally {\n      setIsLoading(false)\n      initialLoadDoneRef.current = true\n    }\n  }, [id, t])\n\n  React.useEffect(() => {\n    loadData().catch((err) => logger.warn('loadData failed', { component: 'companies-v2', err }))\n  }, [loadData])\n\n  React.useEffect(() => {\n    setDealCount(data?.counts?.deals ?? 0)\n  }, [data?.counts?.deals])\n\n  const handleActivityCreated = React.useCallback(() => {\n    setActivityRefreshKey((k) => k + 1)\n    loadData().catch((err) => logger.warn('reload after activity failed', { component: 'companies-v2', err }))\n  }, [loadData])\n\n  // Planned activities for the activity-log tab\n  const plannedActivities = React.useMemo(() => {\n    return data?.plannedActivitiesPreview ?? []\n  }, [data?.plannedActivitiesPreview])\n\n  // Injection context for UMES\n  const injectionContext = React.useMemo(\n    () => ({\n      formId: mutationContextId,\n      companyId: currentCompanyId,\n      resourceKind: 'customers.company',\n      resourceId: currentCompanyId ?? (id ?? undefined),\n      data,\n      retryLastMutation,\n    }),\n    [currentCompanyId, data, id, mutationContextId, retryLastMutation],\n  )\n  const runMutationWithContext = React.useCallback(\n    async <T,>(operation: () => Promise<T>, mutationPayload?: Record<string, unknown>): Promise<T> => {\n      return runMutation({\n        operation,\n        mutationPayload,\n        context: injectionContext,\n      })\n    },\n    [injectionContext, runMutation],\n  )\n\n  const { completeInteraction: handleMarkDone, cancelInteraction: handleCancelActivity } = useInteractionMutations({\n    runMutationWithContext,\n    onAfterChange: handleActivityCreated,\n    logContext: 'customers.companies-v2',\n  })\n\n  // Publish page-load record context to the AppShell-owned `backend:record:current`\n  // mount so the enterprise record_locks widget resolves `customers.company` + id\n  // explicitly (the hardcoded path allowlist misses the `companies-v2` route).\n  useSetCurrentRecordInjectionContext(\n    buildRecordInjectionContext({\n      resourceKind: 'customers.company',\n      resourceId: currentCompanyId,\n      updatedAt: (data?.company as { updatedAt?: string | null; updated_at?: string | null } | undefined)?.updatedAt\n        ?? (data?.company as { updated_at?: string | null } | undefined)?.updated_at\n        ?? null,\n      data: data as Record<string, unknown> | null,\n      path: pathname,\n    }),\n  )\n\n  const handleEditActivity = React.useCallback((activity: { id: string; interactionType?: string; title?: string | null; body?: string | null; scheduledAt?: string | null; occurredAt?: string | null; [key: string]: unknown }) => {\n    const raw = activity as Record<string, unknown>\n    const durationValue = typeof raw.duration === 'number'\n      ? raw.duration\n      : typeof raw.durationMinutes === 'number'\n        ? raw.durationMinutes as number\n        : null\n    // Forward `customValues` so per-type chip state (callPhoneNumber, callDirection,\n    // taskPriority, \u2026) round-trips on edit (#1808 phone persistence).\n    // Forward `occurredAt` so historical activity edits prefill from the original\n    // moment instead of \"today\" (#1807 prefill).\n    const editPayload = {\n      id: activity.id,\n      updatedAt: typeof raw.updatedAt === 'string' ? raw.updatedAt as string : typeof raw.updated_at === 'string' ? raw.updated_at as string : null,\n      interactionType: typeof activity.interactionType === 'string' ? activity.interactionType : undefined,\n      title: typeof activity.title === 'string' ? activity.title : null,\n      body: typeof activity.body === 'string' ? activity.body : null,\n      scheduledAt: typeof activity.scheduledAt === 'string' ? activity.scheduledAt : null,\n      occurredAt: typeof activity.occurredAt === 'string' ? activity.occurredAt : null,\n      durationMinutes: durationValue,\n      location: typeof raw.location === 'string' ? raw.location as string : null,\n      allDay: typeof raw.allDay === 'boolean' ? raw.allDay as boolean : null,\n      recurrenceRule: typeof raw.recurrenceRule === 'string' ? raw.recurrenceRule as string : null,\n      recurrenceEnd: typeof raw.recurrenceEnd === 'string' ? raw.recurrenceEnd as string : null,\n      participants: Array.isArray(raw.participants) ? raw.participants as ScheduleActivityEditData['participants'] : null,\n      reminderMinutes: typeof raw.reminderMinutes === 'number' ? raw.reminderMinutes as number : null,\n      visibility: typeof raw.visibility === 'string' ? raw.visibility as string : null,\n      linkedEntities: Array.isArray(raw.linkedEntities) ? raw.linkedEntities as ScheduleActivityEditData['linkedEntities'] : null,\n      guestPermissions: raw.guestPermissions && typeof raw.guestPermissions === 'object'\n        ? raw.guestPermissions as ScheduleActivityEditData['guestPermissions']\n        : null,\n      customValues: raw.customValues && typeof raw.customValues === 'object'\n        ? raw.customValues as Record<string, unknown>\n        : null,\n      phoneNumber: typeof raw.phoneNumber === 'string' ? raw.phoneNumber as string : null,\n    } as ScheduleActivityEditData & { customValues?: Record<string, unknown> | null; phoneNumber?: string | null }\n    setScheduleEditData(editPayload)\n    setScheduleDialogOpen(true)\n  }, [])\n\n  const openNewScheduleDialog = React.useCallback(() => {\n    setScheduleEditData(null)\n    setScheduleDialogOpen(true)\n  }, [])\n\n  const handleAddActivity = React.useCallback((kind: 'meeting' | 'call' | 'task' | 'email') => {\n    setScheduleEditData({\n      id: '',\n      interactionType: kind,\n      title: null,\n      body: null,\n      scheduledAt: null,\n      durationMinutes: null,\n      location: null,\n      allDay: null,\n      recurrenceRule: null,\n      recurrenceEnd: null,\n      participants: null,\n      reminderMinutes: null,\n      visibility: null,\n      linkedEntities: null,\n      guestPermissions: null,\n    })\n    setScheduleDialogOpen(true)\n  }, [])\n\n  // Injected tabs from UMES\n  const { widgets: injectedTabWidgets } = useInjectionWidgets('detail:customers.company:tabs', {\n    context: injectionContext,\n    triggerOnLoad: true,\n  })\n\n  const injectedTabs = React.useMemo(\n    () =>\n      (injectedTabWidgets ?? [])\n        .filter((widget) => (widget.placement?.kind ?? 'tab') === 'tab')\n        .map((widget) => {\n          const tabId = widget.placement?.groupId ?? widget.widgetId\n          const label = widget.placement?.groupLabel ?? widget.module.metadata.title ?? tabId\n          const priority = typeof widget.placement?.priority === 'number' ? widget.placement.priority : 0\n          const render = () => (\n            <widget.module.Widget\n              context={injectionContext}\n              data={data}\n              onDataChange={(next: unknown) => setData(next as CompanyOverview)}\n            />\n          )\n          return { id: tabId, label, priority, render }\n        })\n        .sort((a, b) => b.priority - a.priority),\n    [data, injectedTabWidgets, injectionContext],\n  )\n\n  const injectedTabMap = React.useMemo(() => new Map(injectedTabs.map((tab) => [tab.id, tab.render])), [injectedTabs])\n\n  // Tags\n  const handleTagsChange = React.useCallback((nextTags: TagSummary[]) => {\n    setData((prev) => (prev ? { ...prev, tags: nextTags } : prev))\n  }, [])\n  const tagsSectionControllerRef = React.useRef<TagsSectionController | null>(null)\n\n  // Section action (for tabs that expose add/create buttons)\n  const handleSectionActionChange = React.useCallback((action: SectionAction | null) => {\n    setSectionAction((prev) => (action !== null ? action : prev))\n  }, [])\n\n  const handleSectionAction = React.useCallback(() => {\n    if (!sectionAction || sectionAction.disabled) return\n    sectionAction.onClick()\n  }, [sectionAction])\n\n  React.useEffect(() => {\n    setSectionAction(null)\n  }, [activeTab])\n\n  // A `?tab=deals` deep link must not strand users without `customers.deals.view`\n  // on a tab that no longer exists for them. Wait for the granted features to load\n  // so a permitted user is never bounced off the tab mid-fetch.\n  React.useEffect(() => {\n    if (!isDealsAccessReady || canViewDeals) return\n    setActiveTab((current) => (current === 'deals' ? 'people' : current))\n  }, [isDealsAccessReady, canViewDeals])\n\n  // Deals scope\n  const dealsScope = React.useMemo(\n    () => (currentCompanyId ? ({ kind: 'company', entityId: currentCompanyId } as const) : null),\n    [currentCompanyId],\n  )\n\n  // Delete handler (shared between header and form)\n  const handleDelete = React.useCallback(async () => {\n    const companyId = data?.company?.id ?? ''\n    if (!companyId) return\n    const approved = await confirm({\n      title: t('customers.companies.detail.deleteConfirmTitle', 'Delete company?'),\n      description: t('customers.companies.detail.deleteConfirmDescription', 'This action cannot be undone.'),\n      confirmText: t('customers.companies.detail.actions.delete', 'Delete company'),\n      cancelText: t('customers.companies.detail.actions.cancel', 'Cancel'),\n      variant: 'destructive',\n    })\n    if (!approved) return\n    try {\n      await runMutationWithContext(\n        () => withScopedApiRequestHeaders(\n          buildOptimisticLockHeader((data?.company as { updatedAt?: string } | undefined)?.updatedAt),\n          () => deleteCrud('customers/companies', { id: companyId }),\n        ),\n        { id: companyId, operation: 'deleteCompany' },\n      )\n    } catch (err) {\n      // The guarded mutation already routes a 409 to the unified conflict bar;\n      // surface any other server error (e.g. \"Cannot delete company: linked\n      // deals\u2026\") as a flash instead of letting it crash the page.\n      if (!surfaceRecordConflict(err, t)) {\n        flash(\n          err instanceof Error && err.message.trim().length > 0\n            ? err.message\n            : t('customers.companies.detail.deleteError', 'Failed to delete company.'),\n          'error',\n        )\n      }\n      return\n    }\n    flash(t('customers.companies.list.deleteSuccess', 'Company deleted.'), 'success')\n    router.push('/backend/customers/companies')\n  }, [confirm, data?.company?.id, router, runMutationWithContext, t])\n\n  // Form submit handler (lifted from CompanyDataTab)\n  const handleFormSubmit = React.useCallback(\n    async (values: CompanyEditFormValues) => {\n      setIsSaving(true)\n      try {\n        let payload: Record<string, unknown>\n        try {\n          payload = buildCompanyEditPayload(values, organizationId)\n        } catch (err) {\n          if (err instanceof Error) {\n            if (err.message === 'DISPLAY_NAME_REQUIRED') {\n              const message = t('customers.companies.form.displayName.error')\n              throw createCrudFormError(message, { displayName: message })\n            }\n            if (err.message === 'ANNUAL_REVENUE_INVALID') {\n              const message = t('customers.companies.form.annualRevenue.error')\n              throw createCrudFormError(message, { annualRevenue: message })\n            }\n          }\n          throw err\n        }\n        await updateCrud('customers/companies', payload)\n        flash(t('customers.companies.form.updateSuccess', 'Company updated.'), 'success')\n        await loadData()\n      } finally {\n        setIsSaving(false)\n      }\n    },\n    [loadData, organizationId, t],\n  )\n\n  // Save handler (triggers form submit via ref)\n  const handleHeaderSave = React.useCallback(() => {\n    const form = formWrapperRef.current?.querySelector('form')\n    if (form) form.requestSubmit()\n  }, [])\n\n  // Loading / error states\n  if (isLoading) {\n    return (\n      <Page>\n        <PageBody>\n          <LoadingMessage label={t('customers.companies.detail.loading', 'Loading company\u2026')} />\n        </PageBody>\n      </Page>\n    )\n  }\n\n  if (isNotFound) {\n    return (\n      <Page>\n        <PageBody>\n          <RecordNotFoundState\n            label={t('customers.companies.detail.error.notFound', 'Company not found.')}\n            backHref=\"/backend/customers/companies\"\n            backLabel={t('customers.companies.detail.actions.backToList', 'Back to companies')}\n          />\n        </PageBody>\n      </Page>\n    )\n  }\n\n  if (error || !data?.company?.id) {\n    return (\n      <Page>\n        <PageBody>\n          <ErrorMessage\n            label={error ?? t('customers.companies.detail.error.load', 'Failed to load company.')}\n            action={(\n              <Button asChild variant=\"outline\">\n                <Link href=\"/backend/customers/companies\">\n                  {t('customers.companies.detail.actions.backToList', 'Back to companies')}\n                </Link>\n              </Button>\n            )}\n          />\n        </PageBody>\n      </Page>\n    )\n  }\n\n  const companyId = data.company.id\n  const useCanonicalInteractions = data.interactionMode === 'canonical'\n\n  return (\n    <Page>\n      <PageBody>\n        <div className=\"space-y-4\">\n          {/* UMES header injection */}\n          <InjectionSpot spotId=\"detail:customers.company:header\" context={injectionContext} data={data} />\n          <InjectionSpot spotId=\"detail:customers.company:status-badges\" context={injectionContext} data={data} />\n\n          {/* Persistent company header */}\n          <CompanyDetailHeader\n            data={data}\n            onTagsChange={handleTagsChange}\n            tagsSectionControllerRef={tagsSectionControllerRef}\n            onSave={handleHeaderSave}\n            onDelete={handleDelete}\n            isDirty={isDirty}\n            isSaving={isSaving}\n            onDataReload={() => { loadData().catch((err) => logger.warn('onDataReload failed', { component: 'companies-v2', err })) }}\n          />\n\n          {/* KPI bar \u2014 always visible above zones */}\n          <CompanyKpiBar data={data} />\n\n          {/* Two-zone layout: zone1 = form, zone2 = tabs */}\n          <CollapsibleZoneLayout\n            pageType=\"company-v2\"\n            entityName={companyName}\n            isDirty={isDirty}\n            sections={zoneSections}\n            zone1={\n              <div ref={formWrapperRef}>\n                <CrudForm<CompanyEditFormValues>\n                  embedded\n                  trackDirtyWhenEmbedded\n                  injectionSpotId=\"crud-form:customers.company\"\n                  entityIds={[E.customers.customer_entity, E.customers.customer_company_profile]}\n                  schema={formSchema}\n                  fields={formFields}\n                  groups={formGroups}\n                  initialValues={initialValues}\n                  onSubmit={handleFormSubmit}\n                  onDelete={handleDelete}\n                  optimisticLockUpdatedAt={(data?.company as { updatedAt?: string } | undefined)?.updatedAt}\n                  hideFooterActions\n                  collapsibleGroups={{ pageType: 'company-v2', chevronPosition: 'right' }}\n                  sortableGroups={{ pageType: 'company-v2' }}\n                  onDirtyChange={setIsDirty}\n                />\n              </div>\n            }\n            zone2={\n              <CompanyDetailTabs\n                activeTab={activeTab}\n                onTabChange={setActiveTab}\n                injectedTabs={injectedTabs.map((tab) => ({ id: tab.id, label: tab.label }))}\n                peopleCount={data.counts?.people ?? 0}\n                dealsCount={dealCount}\n                activitiesCount={data.counts?.activities ?? 0}\n                sectionAction={sectionAction}\n              >\n                {activeTab === 'people' && (\n                  <CompanyPeopleSection\n                    companyId={companyId}\n                    companyName={companyDisplayName}\n                    initialPeople={[]}\n                    addActionLabel={t('customers.companies.detail.people.add', 'Add person')}\n                    emptyLabel={t('customers.companies.detail.people.empty', 'No people linked to this company yet.')}\n                    emptyState={{\n                      title: t('customers.companies.detail.emptyState.people.title', 'Build the account team'),\n                      actionLabel: t('customers.companies.detail.emptyState.people.action', 'Create person'),\n                    }}\n                    onActionChange={handleSectionActionChange}\n                    translator={detailTranslator}\n                    runGuardedMutation={runMutationWithContext}\n                    onPeopleChange={(next) => {\n                      setData((prev) => {\n                        if (!prev) return prev\n                        const nextCount = next.length\n                        return {\n                          ...prev,\n                          people: next,\n                          counts: prev.counts ? { ...prev.counts, people: nextCount } : prev.counts,\n                        }\n                      })\n                    }}\n                  />\n                )}\n\n                {activeTab === 'deals' && canViewDeals && (\n                  <DealsSection\n                    scope={dealsScope}\n                    emptyLabel={t('customers.companies.detail.empty.deals', 'No deals linked to this company.')}\n                    addActionLabel={t('customers.companies.detail.actions.addDeal', 'Add deal')}\n                    emptyState={{\n                      title: t('customers.companies.detail.emptyState.deals.title', 'No deals yet'),\n                      actionLabel: t('customers.companies.detail.emptyState.deals.action', 'Create a deal'),\n                    }}\n                    onActionChange={handleSectionActionChange}\n                    translator={detailTranslator}\n                    runGuardedMutation={runMutationWithContext}\n                    onCountDelta={(delta) => setDealCount((current) => Math.max(0, current + delta))}\n                  />\n                )}\n\n                {activeTab === 'activity-log' && (\n                  <ActivityLogTab\n                    entityId={companyId}\n                    plannedActivities={plannedActivities}\n                    onActivityCreated={handleActivityCreated}\n                    onScheduleRequested={openNewScheduleDialog}\n                    onAddActivity={handleAddActivity}\n                    onMarkDone={handleMarkDone}\n                    onEditActivity={handleEditActivity}\n                    onCancelActivity={handleCancelActivity}\n                    runGuardedMutation={runMutationWithContext}\n                    refreshKey={activityRefreshKey}\n                    useCanonicalInteractions={useCanonicalInteractions}\n                  />\n                )}\n\n                {activeTab === 'changelog' && companyId && (\n                  <ChangelogTab entityId={companyId} entityType=\"company\" />\n                )}\n\n                {activeTab === 'files' && (\n                  <AttachmentsSection\n                    entityId={E.customers.customer_entity}\n                    recordId={companyId}\n                    title={t('customers.companies.detail.tabs.files', 'Files')}\n                    description={t('customers.companies.detail.files.subtitle', 'Upload and manage files linked to this company.')}\n                  />\n                )}\n\n                {/* Injected tabs from UMES */}\n                {injectedTabMap.has(activeTab) && injectedTabMap.get(activeTab)!()}\n              </CompanyDetailTabs>\n            }\n          />\n\n          {/* UMES footer injection */}\n          <InjectionSpot spotId=\"detail:customers.company:footer\" context={injectionContext} data={data} />\n\n          {/* Schedule Activity Dialog */}\n          <ScheduleActivityDialog\n            open={scheduleDialogOpen}\n            onClose={() => { setScheduleDialogOpen(false); setScheduleEditData(null) }}\n            entityId={companyId}\n            entityName={companyName}\n            entityType=\"company\"\n            onActivityCreated={handleActivityCreated}\n            editData={scheduleEditData}\n          />\n          {ConfirmDialogElement}\n        </div>\n      </PageBody>\n    </Page>\n  )\n}\n"],
-  "mappings": ";AA0SY,cA6NE,YA7NF;AAxSZ,YAAY,WAAW;AACvB,OAAO,UAAU;AACjB,SAAS,WAAW,iBAAiB,mBAAmB;AACxD,SAAS,MAAM,gBAAgB;AAC/B,SAAS,WAAW,MAAM,OAAO,WAAW,kBAAkB;AAC9D,SAAS,YAAY,kBAAkB;AACvC,SAAyB,sBAAsB,mCAAmC;AAClF,SAAS,iCAAiC;AAC1C,SAAS,aAAa;AACtB,SAAS,6BAA6B;AACtC,SAAS,YAAY;AACrB,SAAS,cAAc;AACvB,SAAS,oBAAoB,cAAc,gBAAgB,2BAA+C;AAC1G,SAAS,wBAAwB;AACjC,SAAS,eAAe,2BAA2B;AACnD,SAAS,0BAA0B;AACnC,SAAS,6BAA6B,2CAA2C;AACjF,SAAS,oCAAoC;AAC7C,SAAS,gBAAgB;AACzB,SAAS,6BAAyD;AAClE,SAAS,2BAA2B;AACpC,SAAS,SAAS;AAClB,SAAS,kCAAkC;AAC3C,SAAS,oBAAoB;AAC7B,SAAS,sBAAsB;AAC/B,SAAS,4BAAuD;AAGhE,SAAS,yBAAyB;AAClC,SAAS,2BAA2B;AACpC,SAAS,mBAAmB,wBAA2C;AACvE,SAAS,sBAAsB;AAC/B,SAAS,qBAAqB;AAC9B,SAAS,8BAA6D;AACtE,SAAS,oBAAoB;AAC7B,SAAS,+BAA+B;AACxC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAGK;AACP,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,WAAW;AAExB,SAAR,oBAAqC,EAAE,OAAO,GAAiC;AACpF,QAAM,KAAK,QAAQ;AACnB,QAAM,IAAI,KAAK;AACf,QAAM,SAAS,UAAU;AACzB,QAAM,eAAe,gBAAgB;AACrC,QAAM,WAAW,YAAY;AAC7B,QAAM,EAAE,SAAS,qBAAqB,IAAI,iBAAiB;AAE3D,QAAM,mBAAmB,MAAM,QAAQ,MAAM,6BAA6B,CAAC,GAAG,CAAC,CAAC,CAAC;AAEjF,QAAM,CAAC,MAAM,OAAO,IAAI,MAAM,SAAiC,IAAI;AACnE,QAAM,CAAC,WAAW,YAAY,IAAI,MAAM,SAAS,IAAI;AACrD,QAAM,CAAC,OAAO,QAAQ,IAAI,MAAM,SAAwB,IAAI;AAC5D,QAAM,CAAC,YAAY,aAAa,IAAI,MAAM,SAAS,KAAK;AAGxD,QAAM,aAAa,MAAM,QAAQ,MAAM;AACrC,WAAO,iBAAiB,cAAc,IAAI,KAAK,CAAC;AAAA,EAClD,GAAG,CAAC,YAAY,CAAC;AACjB,QAAM,CAAC,WAAW,YAAY,IAAI,MAAM,SAAuB,UAAU;AACzE,QAAM,CAAC,eAAe,gBAAgB,IAAI,MAAM,SAA+B,IAAI;AACnF,QAAM,EAAE,cAAc,SAAS,mBAAmB,IAAI,eAAe;AAGrE,QAAM,CAAC,SAAS,UAAU,IAAI,MAAM,SAAS,KAAK;AAClD,QAAM,CAAC,UAAU,WAAW,IAAI,MAAM,SAAS,KAAK;AACpD,QAAM,iBAAiB,MAAM,OAAuB,IAAI;AACxD,QAAM,EAAE,eAAe,IAAI,2BAA2B;AACtD,QAAM,aAAa,MAAM,QAAQ,MAAM,wBAAwB,GAAG,CAAC,CAAC;AACpE,QAAM,aAAa,MAAM,QAAQ,MAAM,wBAAwB,CAAC,GAAG,CAAC,CAAC,CAAC;AACtE,QAAM,aAAa,MAAM,QAAQ,MAAM,8BAA8B,CAAC,GAAG,CAAC,CAAC,CAAC;AAC5E,QAAM,gBAAgB,MAAM;AAAA,IAC1B,MAAO,OAAO,+BAA+B,IAAI,IAAI;AAAA,IACrD,CAAC,IAAI;AAAA,EACP;AACA,QAAM,eAAe,MAAM,QAAiC,MAAM;AAAA,IAChE,EAAE,IAAI,YAAY,MAAM,WAAW,OAAO,EAAE,8CAA8C,UAAU,EAAE;AAAA,IACtG,EAAE,IAAI,WAAW,MAAM,MAAM,OAAO,EAAE,6CAA6C,SAAS,EAAE;AAAA,IAC9F,EAAE,IAAI,kBAAkB,MAAM,OAAO,OAAO,EAAE,oDAAoD,gBAAgB,EAAE;AAAA,IACpH,EAAE,IAAI,mBAAmB,MAAM,WAAW,OAAO,EAAE,qDAAqD,kBAAkB,EAAE;AAAA,IAC5H,EAAE,IAAI,SAAS,MAAM,YAAY,OAAO,EAAE,yCAAyC,OAAO,EAAE;AAAA,IAC5F,EAAE,IAAI,gBAAgB,MAAM,MAAM,OAAO,EAAE,oDAAoD,mBAAmB,EAAE;AAAA,EACtH,GAAG,CAAC,CAAC,CAAC;AACN,QAAM,CAAC,oBAAoB,qBAAqB,IAAI,MAAM,SAAS,KAAK;AACxE,QAAM,CAAC,kBAAkB,mBAAmB,IAAI,MAAM,SAA0C,IAAI;AACpG,QAAM,CAAC,oBAAoB,qBAAqB,IAAI,MAAM,SAAS,CAAC;AACpE,QAAM,CAAC,WAAW,YAAY,IAAI,MAAM,SAAS,CAAC;AAElD,QAAM,mBAAmB,MAAM,SAAS,MAAM;AAC9C,QAAM,oBAAoB,MAAM;AAAA,IAC9B,MAAO,mBAAmB,oBAAoB,gBAAgB,KAAK,oBAAoB,MAAM,SAAS;AAAA,IACtG,CAAC,kBAAkB,EAAE;AAAA,EACvB;AACA,QAAM,EAAE,aAAa,kBAAkB,IAAI,mBAOxC;AAAA,IACD,WAAW;AAAA,IACX,gBAAgB,EAAE,8BAA8B,4BAA4B;AAAA,EAC9E,CAAC;AAED,QAAM,qBAAqB,kBAAkB,MAAM,SAAS,WAAW;AACvE,QAAM,cAAc,mBAAmB,KAAK,EAAE,SAC1C,qBACA,EAAE,+CAA+C,cAAc;AAGnE,QAAM,qBAAqB,MAAM,OAAO,KAAK;AAC7C,QAAM,WAAW,MAAM,YAAY,YAAY;AAC7C,QAAI,CAAC,IAAI;AACP,oBAAc,IAAI;AAClB,mBAAa,KAAK;AAClB;AAAA,IACF;AACA,QAAI,CAAC,mBAAmB,SAAS;AAC/B,mBAAa,IAAI;AAAA,IACnB;AACA,aAAS,IAAI;AACb,kBAAc,KAAK;AACnB,QAAI;AACF,YAAM,UAAU,MAAM;AAAA,QACpB,4BAA4B,mBAAmB,EAAE,CAAC;AAAA,QAClD;AAAA,QACA,EAAE,cAAc,EAAE,yCAAyC,yBAAyB,EAAE;AAAA,MACxF;AACA,cAAQ,OAA0B;AAAA,IACpC,SAAS,KAAK;AACZ,UAAK,IAA4B,WAAW,KAAK;AAC/C,sBAAc,IAAI;AAAA,MACpB,OAAO;AACL,cAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,EAAE,yCAAyC,yBAAyB;AACzH,iBAAS,OAAO;AAAA,MAClB;AACA,UAAI,CAAC,mBAAmB,QAAS,SAAQ,IAAI;AAAA,IAC/C,UAAE;AACA,mBAAa,KAAK;AAClB,yBAAmB,UAAU;AAAA,IAC/B;AAAA,EACF,GAAG,CAAC,IAAI,CAAC,CAAC;AAEV,QAAM,UAAU,MAAM;AACpB,aAAS,EAAE,MAAM,CAAC,QAAQ,OAAO,KAAK,mBAAmB,EAAE,WAAW,gBAAgB,IAAI,CAAC,CAAC;AAAA,EAC9F,GAAG,CAAC,QAAQ,CAAC;AAEb,QAAM,UAAU,MAAM;AACpB,iBAAa,MAAM,QAAQ,SAAS,CAAC;AAAA,EACvC,GAAG,CAAC,MAAM,QAAQ,KAAK,CAAC;AAExB,QAAM,wBAAwB,MAAM,YAAY,MAAM;AACpD,0BAAsB,CAAC,MAAM,IAAI,CAAC;AAClC,aAAS,EAAE,MAAM,CAAC,QAAQ,OAAO,KAAK,gCAAgC,EAAE,WAAW,gBAAgB,IAAI,CAAC,CAAC;AAAA,EAC3G,GAAG,CAAC,QAAQ,CAAC;AAGb,QAAM,oBAAoB,MAAM,QAAQ,MAAM;AAC5C,WAAO,MAAM,4BAA4B,CAAC;AAAA,EAC5C,GAAG,CAAC,MAAM,wBAAwB,CAAC;AAGnC,QAAM,mBAAmB,MAAM;AAAA,IAC7B,OAAO;AAAA,MACL,QAAQ;AAAA,MACR,WAAW;AAAA,MACX,cAAc;AAAA,MACd,YAAY,qBAAqB,MAAM;AAAA,MACvC;AAAA,MACA;AAAA,IACF;AAAA,IACA,CAAC,kBAAkB,MAAM,IAAI,mBAAmB,iBAAiB;AAAA,EACnE;AACA,QAAM,yBAAyB,MAAM;AAAA,IACnC,OAAW,WAA6B,oBAA0D;AAChG,aAAO,YAAY;AAAA,QACjB;AAAA,QACA;AAAA,QACA,SAAS;AAAA,MACX,CAAC;AAAA,IACH;AAAA,IACA,CAAC,kBAAkB,WAAW;AAAA,EAChC;AAEA,QAAM,EAAE,qBAAqB,gBAAgB,mBAAmB,qBAAqB,IAAI,wBAAwB;AAAA,IAC/G;AAAA,IACA,eAAe;AAAA,IACf,YAAY;AAAA,EACd,CAAC;AAKD;AAAA,IACE,4BAA4B;AAAA,MAC1B,cAAc;AAAA,MACd,YAAY;AAAA,MACZ,WAAY,MAAM,SAAmF,aAC/F,MAAM,SAAwD,cAC/D;AAAA,MACL;AAAA,MACA,MAAM;AAAA,IACR,CAAC;AAAA,EACH;AAEA,QAAM,qBAAqB,MAAM,YAAY,CAAC,aAAqL;AACjO,UAAM,MAAM;AACZ,UAAM,gBAAgB,OAAO,IAAI,aAAa,WAC1C,IAAI,WACJ,OAAO,IAAI,oBAAoB,WAC7B,IAAI,kBACJ;AAKN,UAAM,cAAc;AAAA,MAClB,IAAI,SAAS;AAAA,MACb,WAAW,OAAO,IAAI,cAAc,WAAW,IAAI,YAAsB,OAAO,IAAI,eAAe,WAAW,IAAI,aAAuB;AAAA,MACzI,iBAAiB,OAAO,SAAS,oBAAoB,WAAW,SAAS,kBAAkB;AAAA,MAC3F,OAAO,OAAO,SAAS,UAAU,WAAW,SAAS,QAAQ;AAAA,MAC7D,MAAM,OAAO,SAAS,SAAS,WAAW,SAAS,OAAO;AAAA,MAC1D,aAAa,OAAO,SAAS,gBAAgB,WAAW,SAAS,cAAc;AAAA,MAC/E,YAAY,OAAO,SAAS,eAAe,WAAW,SAAS,aAAa;AAAA,MAC5E,iBAAiB;AAAA,MACjB,UAAU,OAAO,IAAI,aAAa,WAAW,IAAI,WAAqB;AAAA,MACtE,QAAQ,OAAO,IAAI,WAAW,YAAY,IAAI,SAAoB;AAAA,MAClE,gBAAgB,OAAO,IAAI,mBAAmB,WAAW,IAAI,iBAA2B;AAAA,MACxF,eAAe,OAAO,IAAI,kBAAkB,WAAW,IAAI,gBAA0B;AAAA,MACrF,cAAc,MAAM,QAAQ,IAAI,YAAY,IAAI,IAAI,eAA2D;AAAA,MAC/G,iBAAiB,OAAO,IAAI,oBAAoB,WAAW,IAAI,kBAA4B;AAAA,MAC3F,YAAY,OAAO,IAAI,eAAe,WAAW,IAAI,aAAuB;AAAA,MAC5E,gBAAgB,MAAM,QAAQ,IAAI,cAAc,IAAI,IAAI,iBAA+D;AAAA,MACvH,kBAAkB,IAAI,oBAAoB,OAAO,IAAI,qBAAqB,WACtE,IAAI,mBACJ;AAAA,MACJ,cAAc,IAAI,gBAAgB,OAAO,IAAI,iBAAiB,WAC1D,IAAI,eACJ;AAAA,MACJ,aAAa,OAAO,IAAI,gBAAgB,WAAW,IAAI,cAAwB;AAAA,IACjF;AACA,wBAAoB,WAAW;AAC/B,0BAAsB,IAAI;AAAA,EAC5B,GAAG,CAAC,CAAC;AAEL,QAAM,wBAAwB,MAAM,YAAY,MAAM;AACpD,wBAAoB,IAAI;AACxB,0BAAsB,IAAI;AAAA,EAC5B,GAAG,CAAC,CAAC;AAEL,QAAM,oBAAoB,MAAM,YAAY,CAAC,SAAgD;AAC3F,wBAAoB;AAAA,MAClB,IAAI;AAAA,MACJ,iBAAiB;AAAA,MACjB,OAAO;AAAA,MACP,MAAM;AAAA,MACN,aAAa;AAAA,MACb,iBAAiB;AAAA,MACjB,UAAU;AAAA,MACV,QAAQ;AAAA,MACR,gBAAgB;AAAA,MAChB,eAAe;AAAA,MACf,cAAc;AAAA,MACd,iBAAiB;AAAA,MACjB,YAAY;AAAA,MACZ,gBAAgB;AAAA,MAChB,kBAAkB;AAAA,IACpB,CAAC;AACD,0BAAsB,IAAI;AAAA,EAC5B,GAAG,CAAC,CAAC;AAGL,QAAM,EAAE,SAAS,mBAAmB,IAAI,oBAAoB,iCAAiC;AAAA,IAC3F,SAAS;AAAA,IACT,eAAe;AAAA,EACjB,CAAC;AAED,QAAM,eAAe,MAAM;AAAA,IACzB,OACG,sBAAsB,CAAC,GACrB,OAAO,CAAC,YAAY,OAAO,WAAW,QAAQ,WAAW,KAAK,EAC9D,IAAI,CAAC,WAAW;AACf,YAAM,QAAQ,OAAO,WAAW,WAAW,OAAO;AAClD,YAAM,QAAQ,OAAO,WAAW,cAAc,OAAO,OAAO,SAAS,SAAS;AAC9E,YAAM,WAAW,OAAO,OAAO,WAAW,aAAa,WAAW,OAAO,UAAU,WAAW;AAC9F,YAAM,SAAS,MACb;AAAA,QAAC,OAAO,OAAO;AAAA,QAAd;AAAA,UACC,SAAS;AAAA,UACT;AAAA,UACA,cAAc,CAAC,SAAkB,QAAQ,IAAuB;AAAA;AAAA,MAClE;AAEF,aAAO,EAAE,IAAI,OAAO,OAAO,UAAU,OAAO;AAAA,IAC9C,CAAC,EACA,KAAK,CAAC,GAAG,MAAM,EAAE,WAAW,EAAE,QAAQ;AAAA,IAC3C,CAAC,MAAM,oBAAoB,gBAAgB;AAAA,EAC7C;AAEA,QAAM,iBAAiB,MAAM,QAAQ,MAAM,IAAI,IAAI,aAAa,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,IAAI,MAAM,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC;AAGnH,QAAM,mBAAmB,MAAM,YAAY,CAAC,aAA2B;AACrE,YAAQ,CAAC,SAAU,OAAO,EAAE,GAAG,MAAM,MAAM,SAAS,IAAI,IAAK;AAAA,EAC/D,GAAG,CAAC,CAAC;AACL,QAAM,2BAA2B,MAAM,OAAqC,IAAI;AAGhF,QAAM,4BAA4B,MAAM,YAAY,CAAC,WAAiC;AACpF,qBAAiB,CAAC,SAAU,WAAW,OAAO,SAAS,IAAK;AAAA,EAC9D,GAAG,CAAC,CAAC;AAEL,QAAM,sBAAsB,MAAM,YAAY,MAAM;AAClD,QAAI,CAAC,iBAAiB,cAAc,SAAU;AAC9C,kBAAc,QAAQ;AAAA,EACxB,GAAG,CAAC,aAAa,CAAC;AAElB,QAAM,UAAU,MAAM;AACpB,qBAAiB,IAAI;AAAA,EACvB,GAAG,CAAC,SAAS,CAAC;AAKd,QAAM,UAAU,MAAM;AACpB,QAAI,CAAC,sBAAsB,aAAc;AACzC,iBAAa,CAAC,YAAa,YAAY,UAAU,WAAW,OAAQ;AAAA,EACtE,GAAG,CAAC,oBAAoB,YAAY,CAAC;AAGrC,QAAM,aAAa,MAAM;AAAA,IACvB,MAAO,mBAAoB,EAAE,MAAM,WAAW,UAAU,iBAAiB,IAAc;AAAA,IACvF,CAAC,gBAAgB;AAAA,EACnB;AAGA,QAAM,eAAe,MAAM,YAAY,YAAY;AACjD,UAAMA,aAAY,MAAM,SAAS,MAAM;AACvC,QAAI,CAACA,WAAW;AAChB,UAAM,WAAW,MAAM,QAAQ;AAAA,MAC7B,OAAO,EAAE,iDAAiD,iBAAiB;AAAA,MAC3E,aAAa,EAAE,uDAAuD,+BAA+B;AAAA,MACrG,aAAa,EAAE,6CAA6C,gBAAgB;AAAA,MAC5E,YAAY,EAAE,6CAA6C,QAAQ;AAAA,MACnE,SAAS;AAAA,IACX,CAAC;AACD,QAAI,CAAC,SAAU;AACf,QAAI;AACF,YAAM;AAAA,QACJ,MAAM;AAAA,UACJ,0BAA2B,MAAM,SAAgD,SAAS;AAAA,UAC1F,MAAM,WAAW,uBAAuB,EAAE,IAAIA,WAAU,CAAC;AAAA,QAC3D;AAAA,QACA,EAAE,IAAIA,YAAW,WAAW,gBAAgB;AAAA,MAC9C;AAAA,IACF,SAAS,KAAK;AAIZ,UAAI,CAAC,sBAAsB,KAAK,CAAC,GAAG;AAClC;AAAA,UACE,eAAe,SAAS,IAAI,QAAQ,KAAK,EAAE,SAAS,IAChD,IAAI,UACJ,EAAE,0CAA0C,2BAA2B;AAAA,UAC3E;AAAA,QACF;AAAA,MACF;AACA;AAAA,IACF;AACA,UAAM,EAAE,0CAA0C,kBAAkB,GAAG,SAAS;AAChF,WAAO,KAAK,8BAA8B;AAAA,EAC5C,GAAG,CAAC,SAAS,MAAM,SAAS,IAAI,QAAQ,wBAAwB,CAAC,CAAC;AAGlE,QAAM,mBAAmB,MAAM;AAAA,IAC7B,OAAO,WAAkC;AACvC,kBAAY,IAAI;AAChB,UAAI;AACF,YAAI;AACJ,YAAI;AACF,oBAAU,wBAAwB,QAAQ,cAAc;AAAA,QAC1D,SAAS,KAAK;AACZ,cAAI,eAAe,OAAO;AACxB,gBAAI,IAAI,YAAY,yBAAyB;AAC3C,oBAAM,UAAU,EAAE,4CAA4C;AAC9D,oBAAM,oBAAoB,SAAS,EAAE,aAAa,QAAQ,CAAC;AAAA,YAC7D;AACA,gBAAI,IAAI,YAAY,0BAA0B;AAC5C,oBAAM,UAAU,EAAE,8CAA8C;AAChE,oBAAM,oBAAoB,SAAS,EAAE,eAAe,QAAQ,CAAC;AAAA,YAC/D;AAAA,UACF;AACA,gBAAM;AAAA,QACR;AACA,cAAM,WAAW,uBAAuB,OAAO;AAC/C,cAAM,EAAE,0CAA0C,kBAAkB,GAAG,SAAS;AAChF,cAAM,SAAS;AAAA,MACjB,UAAE;AACA,oBAAY,KAAK;AAAA,MACnB;AAAA,IACF;AAAA,IACA,CAAC,UAAU,gBAAgB,CAAC;AAAA,EAC9B;AAGA,QAAM,mBAAmB,MAAM,YAAY,MAAM;AAC/C,UAAM,OAAO,eAAe,SAAS,cAAc,MAAM;AACzD,QAAI,KAAM,MAAK,cAAc;AAAA,EAC/B,GAAG,CAAC,CAAC;AAGL,MAAI,WAAW;AACb,WACE,oBAAC,QACC,8BAAC,YACC,8BAAC,kBAAe,OAAO,EAAE,sCAAsC,uBAAkB,GAAG,GACtF,GACF;AAAA,EAEJ;AAEA,MAAI,YAAY;AACd,WACE,oBAAC,QACC,8BAAC,YACC;AAAA,MAAC;AAAA;AAAA,QACC,OAAO,EAAE,6CAA6C,oBAAoB;AAAA,QAC1E,UAAS;AAAA,QACT,WAAW,EAAE,iDAAiD,mBAAmB;AAAA;AAAA,IACnF,GACF,GACF;AAAA,EAEJ;AAEA,MAAI,SAAS,CAAC,MAAM,SAAS,IAAI;AAC/B,WACE,oBAAC,QACC,8BAAC,YACC;AAAA,MAAC;AAAA;AAAA,QACC,OAAO,SAAS,EAAE,yCAAyC,yBAAyB;AAAA,QACpF,QACE,oBAAC,UAAO,SAAO,MAAC,SAAQ,WACtB,8BAAC,QAAK,MAAK,gCACR,YAAE,iDAAiD,mBAAmB,GACzE,GACF;AAAA;AAAA,IAEJ,GACF,GACF;AAAA,EAEJ;AAEA,QAAM,YAAY,KAAK,QAAQ;AAC/B,QAAM,2BAA2B,KAAK,oBAAoB;AAE1D,SACE,oBAAC,QACC,8BAAC,YACC,+BAAC,SAAI,WAAU,aAEb;AAAA,wBAAC,iBAAc,QAAO,mCAAkC,SAAS,kBAAkB,MAAY;AAAA,IAC/F,oBAAC,iBAAc,QAAO,0CAAyC,SAAS,kBAAkB,MAAY;AAAA,IAGtG;AAAA,MAAC;AAAA;AAAA,QACC;AAAA,QACA,cAAc;AAAA,QACd;AAAA,QACA,QAAQ;AAAA,QACR,UAAU;AAAA,QACV;AAAA,QACA;AAAA,QACA,cAAc,MAAM;AAAE,mBAAS,EAAE,MAAM,CAAC,QAAQ,OAAO,KAAK,uBAAuB,EAAE,WAAW,gBAAgB,IAAI,CAAC,CAAC;AAAA,QAAE;AAAA;AAAA,IAC1H;AAAA,IAGA,oBAAC,iBAAc,MAAY;AAAA,IAG3B;AAAA,MAAC;AAAA;AAAA,QACC,UAAS;AAAA,QACT,YAAY;AAAA,QACZ;AAAA,QACA,UAAU;AAAA,QACV,OACE,oBAAC,SAAI,KAAK,gBACR;AAAA,UAAC;AAAA;AAAA,YACC,UAAQ;AAAA,YACR,wBAAsB;AAAA,YACtB,iBAAgB;AAAA,YAChB,WAAW,CAAC,EAAE,UAAU,iBAAiB,EAAE,UAAU,wBAAwB;AAAA,YAC7E,QAAQ;AAAA,YACR,QAAQ;AAAA,YACR,QAAQ;AAAA,YACR;AAAA,YACA,UAAU;AAAA,YACV,UAAU;AAAA,YACV,yBAA0B,MAAM,SAAgD;AAAA,YAChF,mBAAiB;AAAA,YACjB,mBAAmB,EAAE,UAAU,cAAc,iBAAiB,QAAQ;AAAA,YACtE,gBAAgB,EAAE,UAAU,aAAa;AAAA,YACzC,eAAe;AAAA;AAAA,QACjB,GACF;AAAA,QAEF,OACE;AAAA,UAAC;AAAA;AAAA,YACC;AAAA,YACA,aAAa;AAAA,YACb,cAAc,aAAa,IAAI,CAAC,SAAS,EAAE,IAAI,IAAI,IAAI,OAAO,IAAI,MAAM,EAAE;AAAA,YAC1E,aAAa,KAAK,QAAQ,UAAU;AAAA,YACpC,YAAY;AAAA,YACZ,iBAAiB,KAAK,QAAQ,cAAc;AAAA,YAC5C;AAAA,YAEC;AAAA,4BAAc,YACb;AAAA,gBAAC;AAAA;AAAA,kBACC;AAAA,kBACA,aAAa;AAAA,kBACb,eAAe,CAAC;AAAA,kBAChB,gBAAgB,EAAE,yCAAyC,YAAY;AAAA,kBACvE,YAAY,EAAE,2CAA2C,uCAAuC;AAAA,kBAChG,YAAY;AAAA,oBACV,OAAO,EAAE,sDAAsD,wBAAwB;AAAA,oBACvF,aAAa,EAAE,uDAAuD,eAAe;AAAA,kBACvF;AAAA,kBACA,gBAAgB;AAAA,kBAChB,YAAY;AAAA,kBACZ,oBAAoB;AAAA,kBACpB,gBAAgB,CAAC,SAAS;AACxB,4BAAQ,CAAC,SAAS;AAChB,0BAAI,CAAC,KAAM,QAAO;AAClB,4BAAM,YAAY,KAAK;AACvB,6BAAO;AAAA,wBACL,GAAG;AAAA,wBACH,QAAQ;AAAA,wBACR,QAAQ,KAAK,SAAS,EAAE,GAAG,KAAK,QAAQ,QAAQ,UAAU,IAAI,KAAK;AAAA,sBACrE;AAAA,oBACF,CAAC;AAAA,kBACH;AAAA;AAAA,cACF;AAAA,cAGD,cAAc,WAAW,gBACxB;AAAA,gBAAC;AAAA;AAAA,kBACC,OAAO;AAAA,kBACP,YAAY,EAAE,0CAA0C,kCAAkC;AAAA,kBAC1F,gBAAgB,EAAE,8CAA8C,UAAU;AAAA,kBAC1E,YAAY;AAAA,oBACV,OAAO,EAAE,qDAAqD,cAAc;AAAA,oBAC5E,aAAa,EAAE,sDAAsD,eAAe;AAAA,kBACtF;AAAA,kBACA,gBAAgB;AAAA,kBAChB,YAAY;AAAA,kBACZ,oBAAoB;AAAA,kBACpB,cAAc,CAAC,UAAU,aAAa,CAAC,YAAY,KAAK,IAAI,GAAG,UAAU,KAAK,CAAC;AAAA;AAAA,cACjF;AAAA,cAGD,cAAc,kBACb;AAAA,gBAAC;AAAA;AAAA,kBACC,UAAU;AAAA,kBACV;AAAA,kBACA,mBAAmB;AAAA,kBACnB,qBAAqB;AAAA,kBACrB,eAAe;AAAA,kBACf,YAAY;AAAA,kBACZ,gBAAgB;AAAA,kBAChB,kBAAkB;AAAA,kBAClB,oBAAoB;AAAA,kBACpB,YAAY;AAAA,kBACZ;AAAA;AAAA,cACF;AAAA,cAGD,cAAc,eAAe,aAC5B,oBAAC,gBAAa,UAAU,WAAW,YAAW,WAAU;AAAA,cAGzD,cAAc,WACb;AAAA,gBAAC;AAAA;AAAA,kBACC,UAAU,EAAE,UAAU;AAAA,kBACtB,UAAU;AAAA,kBACV,OAAO,EAAE,yCAAyC,OAAO;AAAA,kBACzD,aAAa,EAAE,6CAA6C,iDAAiD;AAAA;AAAA,cAC/G;AAAA,cAID,eAAe,IAAI,SAAS,KAAK,eAAe,IAAI,SAAS,EAAG;AAAA;AAAA;AAAA,QACnE;AAAA;AAAA,IAEJ;AAAA,IAGA,oBAAC,iBAAc,QAAO,mCAAkC,SAAS,kBAAkB,MAAY;AAAA,IAG/F;AAAA,MAAC;AAAA;AAAA,QACC,MAAM;AAAA,QACN,SAAS,MAAM;AAAE,gCAAsB,KAAK;AAAG,8BAAoB,IAAI;AAAA,QAAE;AAAA,QACzE,UAAU;AAAA,QACV,YAAY;AAAA,QACZ,YAAW;AAAA,QACX,mBAAmB;AAAA,QACnB,UAAU;AAAA;AAAA,IACZ;AAAA,IACC;AAAA,KACH,GACF,GACF;AAEJ;",
+  "sourcesContent": ["\"use client\"\n\nimport * as React from 'react'\nimport Link from 'next/link'\nimport { useRouter, useSearchParams, usePathname } from 'next/navigation'\nimport { Page, PageBody } from '@open-mercato/ui/backend/Page'\nimport { Building2, Hash, Users, BarChart3, StickyNote } from 'lucide-react'\nimport { updateCrud, deleteCrud } from '@open-mercato/ui/backend/utils/crud'\nimport { apiCallOrThrow, readApiResultOrThrow, withScopedApiRequestHeaders } from '@open-mercato/ui/backend/utils/apiCall'\nimport { buildOptimisticLockHeader } from '@open-mercato/ui/backend/utils/optimisticLock'\nimport { flash } from '@open-mercato/ui/backend/FlashMessages'\nimport { surfaceRecordConflict } from '@open-mercato/ui/backend/conflicts'\nimport { useT } from '@open-mercato/shared/lib/i18n/context'\nimport { Button } from '@open-mercato/ui/primitives/button'\nimport { AttachmentsSection, ErrorMessage, LoadingMessage, RecordNotFoundState, type SectionAction } from '@open-mercato/ui/backend/detail'\nimport { useConfirmDialog } from '@open-mercato/ui/backend/confirm-dialog'\nimport { InjectionSpot, useInjectionWidgets } from '@open-mercato/ui/backend/injection/InjectionSpot'\nimport { useGuardedMutation } from '@open-mercato/ui/backend/injection/useGuardedMutation'\nimport { buildRecordInjectionContext, useSetCurrentRecordInjectionContext } from '@open-mercato/ui/backend/injection/recordContext'\nimport { createTranslatorWithFallback } from '@open-mercato/shared/lib/i18n/translate'\nimport { CrudForm } from '@open-mercato/ui/backend/CrudForm'\nimport { CollapsibleZoneLayout, type ZoneSectionDescriptor } from '@open-mercato/ui/backend/crud/CollapsibleZoneLayout'\nimport { createCrudFormError } from '@open-mercato/ui/backend/utils/serverErrors'\nimport { E } from '#generated/entities.ids.generated'\nimport { useOrganizationScopeDetail } from '@open-mercato/shared/lib/frontend/useOrganizationScope'\nimport { DealsSection } from '../../../../components/detail/DealsSection'\nimport { ActivityLogTab } from '../../../../components/detail/ActivityLogTab'\nimport { CompanyPeopleSection, type CompanyPersonSummary } from '../../../../components/detail/CompanyPeopleSection'\nimport type { TagSummary } from '../../../../components/detail/types'\nimport type { TagsSectionController } from '@open-mercato/ui/backend/detail'\nimport { coerceDisplayName } from '../../../../lib/displayName'\nimport { CompanyDetailHeader } from '../../../../components/detail/CompanyDetailHeader'\nimport { CompanyDetailTabs, resolveLegacyTab, type CompanyTabId } from '../../../../components/detail/CompanyDetailTabs'\nimport { CompanyKpiBar } from '../../../../components/detail/CompanyKpiBar'\nimport { ScheduleActivityDialog, type ScheduleActivityEditData } from '../../../../components/detail/ScheduleActivityDialog'\nimport { ChangelogTab } from '../../../../components/detail/ChangelogTab'\nimport { useInteractionMutations } from '../../../../components/detail/hooks/useInteractionMutations'\nimport {\n  buildCompanyEditPayload,\n  createCompanyEditFields,\n  createCompanyDaneFiremyGroups,\n  createCompanyEditSchema,\n  mapCompanyOverviewToFormValues,\n  type CompanyEditFormValues,\n  type CompanyOverview,\n} from '../../../../components/formConfig'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('customers')\n\nexport default function CompanyDetailV2Page({ params }: { params?: { id?: string } }) {\n  const id = params?.id\n  const t = useT()\n  const router = useRouter()\n  const searchParams = useSearchParams()\n  const pathname = usePathname()\n  const { confirm, ConfirmDialogElement } = useConfirmDialog()\n\n  const detailTranslator = React.useMemo(() => createTranslatorWithFallback(t), [t])\n\n  const [data, setData] = React.useState<CompanyOverview | null>(null)\n  const [isLoading, setIsLoading] = React.useState(true)\n  const [error, setError] = React.useState<string | null>(null)\n  const [isNotFound, setIsNotFound] = React.useState(false)\n\n  // Tab state\n  const initialTab = React.useMemo(() => {\n    return resolveLegacyTab(searchParams?.get('tab'))\n  }, [searchParams])\n  const [activeTab, setActiveTab] = React.useState<CompanyTabId>(initialTab)\n  const [sectionAction, setSectionAction] = React.useState<SectionAction | null>(null)\n\n  // Form state\n  const [isDirty, setIsDirty] = React.useState(false)\n  const [isSaving, setIsSaving] = React.useState(false)\n  const formWrapperRef = React.useRef<HTMLDivElement>(null)\n  const { organizationId } = useOrganizationScopeDetail()\n  const formSchema = React.useMemo(() => createCompanyEditSchema(), [])\n  const formFields = React.useMemo(() => createCompanyEditFields(t), [t])\n  const formGroups = React.useMemo(() => createCompanyDaneFiremyGroups(t), [t])\n  const initialValues = React.useMemo(\n    () => (data ? mapCompanyOverviewToFormValues(data) : undefined),\n    [data],\n  )\n  const zoneSections = React.useMemo<ZoneSectionDescriptor[]>(() => [\n    { id: 'identity', icon: Building2, label: t('customers.companies.form.sections.identity', 'Identity') },\n    { id: 'contact', icon: Hash, label: t('customers.companies.form.sections.contact', 'Contact') },\n    { id: 'classification', icon: Users, label: t('customers.companies.form.sections.classification', 'Classification') },\n    { id: 'businessProfile', icon: BarChart3, label: t('customers.companies.form.sections.businessProfile', 'Business profile') },\n    { id: 'notes', icon: StickyNote, label: t('customers.companies.form.groups.notes', 'Notes') },\n    { id: 'customFields', icon: Hash, label: t('customers.companies.form.groups.customAttributes', 'Custom attributes') },\n  ], [t])\n  const [scheduleDialogOpen, setScheduleDialogOpen] = React.useState(false)\n  const [scheduleEditData, setScheduleEditData] = React.useState<ScheduleActivityEditData | null>(null)\n  const [activityRefreshKey, setActivityRefreshKey] = React.useState(0)\n  const [dealCount, setDealCount] = React.useState(0)\n\n  const currentCompanyId = data?.company?.id ?? null\n  const mutationContextId = React.useMemo(\n    () => (currentCompanyId ? `customer-company:${currentCompanyId}` : `customer-company:${id ?? 'pending'}`),\n    [currentCompanyId, id],\n  )\n  const { runMutation, retryLastMutation } = useGuardedMutation<{\n    formId: string\n    companyId?: string | null\n    resourceKind: string\n    resourceId?: string\n    data: CompanyOverview | null\n    retryLastMutation: () => Promise<boolean>\n  }>({\n    contextId: mutationContextId,\n    blockedMessage: t('ui.forms.flash.saveBlocked', 'Save blocked by validation'),\n  })\n\n  const companyDisplayName = coerceDisplayName(data?.company?.displayName)\n  const companyName = companyDisplayName.trim().length\n    ? companyDisplayName\n    : t('customers.companies.list.deleteFallbackName', 'this company')\n\n  // Data loading\n  const initialLoadDoneRef = React.useRef(false)\n  const loadData = React.useCallback(async () => {\n    if (!id) {\n      setIsNotFound(true)\n      setIsLoading(false)\n      return\n    }\n    if (!initialLoadDoneRef.current) {\n      setIsLoading(true)\n    }\n    setError(null)\n    setIsNotFound(false)\n    try {\n      const payload = await readApiResultOrThrow<CompanyOverview>(\n        `/api/customers/companies/${encodeURIComponent(id)}`,\n        undefined,\n        { errorMessage: t('customers.companies.detail.error.load', 'Failed to load company.') },\n      )\n      setData(payload as CompanyOverview)\n    } catch (err) {\n      if ((err as { status?: number }).status === 404) {\n        setIsNotFound(true)\n      } else {\n        const message = err instanceof Error ? err.message : t('customers.companies.detail.error.load', 'Failed to load company.')\n        setError(message)\n      }\n      if (!initialLoadDoneRef.current) setData(null)\n    } finally {\n      setIsLoading(false)\n      initialLoadDoneRef.current = true\n    }\n  }, [id, t])\n\n  React.useEffect(() => {\n    loadData().catch((err) => logger.warn('loadData failed', { component: 'companies-v2', err }))\n  }, [loadData])\n\n  React.useEffect(() => {\n    setDealCount(data?.counts?.deals ?? 0)\n  }, [data?.counts?.deals])\n\n  const handleActivityCreated = React.useCallback(() => {\n    setActivityRefreshKey((k) => k + 1)\n    loadData().catch((err) => logger.warn('reload after activity failed', { component: 'companies-v2', err }))\n  }, [loadData])\n\n  // Planned activities for the activity-log tab\n  const plannedActivities = React.useMemo(() => {\n    return data?.plannedActivitiesPreview ?? []\n  }, [data?.plannedActivitiesPreview])\n\n  // Injection context for UMES\n  const injectionContext = React.useMemo(\n    () => ({\n      formId: mutationContextId,\n      companyId: currentCompanyId,\n      resourceKind: 'customers.company',\n      resourceId: currentCompanyId ?? (id ?? undefined),\n      data,\n      retryLastMutation,\n    }),\n    [currentCompanyId, data, id, mutationContextId, retryLastMutation],\n  )\n  const runMutationWithContext = React.useCallback(\n    async <T,>(operation: () => Promise<T>, mutationPayload?: Record<string, unknown>): Promise<T> => {\n      return runMutation({\n        operation,\n        mutationPayload,\n        context: injectionContext,\n      })\n    },\n    [injectionContext, runMutation],\n  )\n\n  const { completeInteraction: handleMarkDone, cancelInteraction: handleCancelActivity } = useInteractionMutations({\n    runMutationWithContext,\n    onAfterChange: handleActivityCreated,\n    logContext: 'customers.companies-v2',\n  })\n\n  // Publish page-load record context to the AppShell-owned `backend:record:current`\n  // mount so the enterprise record_locks widget resolves `customers.company` + id\n  // explicitly (the hardcoded path allowlist misses the `companies-v2` route).\n  useSetCurrentRecordInjectionContext(\n    buildRecordInjectionContext({\n      resourceKind: 'customers.company',\n      resourceId: currentCompanyId,\n      updatedAt: (data?.company as { updatedAt?: string | null; updated_at?: string | null } | undefined)?.updatedAt\n        ?? (data?.company as { updated_at?: string | null } | undefined)?.updated_at\n        ?? null,\n      data: data as Record<string, unknown> | null,\n      path: pathname,\n    }),\n  )\n\n  const handleEditActivity = React.useCallback((activity: { id: string; interactionType?: string; title?: string | null; body?: string | null; scheduledAt?: string | null; occurredAt?: string | null; [key: string]: unknown }) => {\n    const raw = activity as Record<string, unknown>\n    const durationValue = typeof raw.duration === 'number'\n      ? raw.duration\n      : typeof raw.durationMinutes === 'number'\n        ? raw.durationMinutes as number\n        : null\n    // Forward `customValues` so per-type chip state (callPhoneNumber, callDirection,\n    // taskPriority, \u2026) round-trips on edit (#1808 phone persistence).\n    // Forward `occurredAt` so historical activity edits prefill from the original\n    // moment instead of \"today\" (#1807 prefill).\n    const editPayload = {\n      id: activity.id,\n      updatedAt: typeof raw.updatedAt === 'string' ? raw.updatedAt as string : typeof raw.updated_at === 'string' ? raw.updated_at as string : null,\n      interactionType: typeof activity.interactionType === 'string' ? activity.interactionType : undefined,\n      title: typeof activity.title === 'string' ? activity.title : null,\n      body: typeof activity.body === 'string' ? activity.body : null,\n      scheduledAt: typeof activity.scheduledAt === 'string' ? activity.scheduledAt : null,\n      occurredAt: typeof activity.occurredAt === 'string' ? activity.occurredAt : null,\n      durationMinutes: durationValue,\n      location: typeof raw.location === 'string' ? raw.location as string : null,\n      allDay: typeof raw.allDay === 'boolean' ? raw.allDay as boolean : null,\n      recurrenceRule: typeof raw.recurrenceRule === 'string' ? raw.recurrenceRule as string : null,\n      recurrenceEnd: typeof raw.recurrenceEnd === 'string' ? raw.recurrenceEnd as string : null,\n      participants: Array.isArray(raw.participants) ? raw.participants as ScheduleActivityEditData['participants'] : null,\n      reminderMinutes: typeof raw.reminderMinutes === 'number' ? raw.reminderMinutes as number : null,\n      visibility: typeof raw.visibility === 'string' ? raw.visibility as string : null,\n      linkedEntities: Array.isArray(raw.linkedEntities) ? raw.linkedEntities as ScheduleActivityEditData['linkedEntities'] : null,\n      guestPermissions: raw.guestPermissions && typeof raw.guestPermissions === 'object'\n        ? raw.guestPermissions as ScheduleActivityEditData['guestPermissions']\n        : null,\n      customValues: raw.customValues && typeof raw.customValues === 'object'\n        ? raw.customValues as Record<string, unknown>\n        : null,\n      phoneNumber: typeof raw.phoneNumber === 'string' ? raw.phoneNumber as string : null,\n    } as ScheduleActivityEditData & { customValues?: Record<string, unknown> | null; phoneNumber?: string | null }\n    setScheduleEditData(editPayload)\n    setScheduleDialogOpen(true)\n  }, [])\n\n  const openNewScheduleDialog = React.useCallback(() => {\n    setScheduleEditData(null)\n    setScheduleDialogOpen(true)\n  }, [])\n\n  const handleAddActivity = React.useCallback((kind: 'meeting' | 'call' | 'task' | 'email') => {\n    setScheduleEditData({\n      id: '',\n      interactionType: kind,\n      title: null,\n      body: null,\n      scheduledAt: null,\n      durationMinutes: null,\n      location: null,\n      allDay: null,\n      recurrenceRule: null,\n      recurrenceEnd: null,\n      participants: null,\n      reminderMinutes: null,\n      visibility: null,\n      linkedEntities: null,\n      guestPermissions: null,\n    })\n    setScheduleDialogOpen(true)\n  }, [])\n\n  // Injected tabs from UMES\n  const { widgets: injectedTabWidgets } = useInjectionWidgets('detail:customers.company:tabs', {\n    context: injectionContext,\n    triggerOnLoad: true,\n  })\n\n  const injectedTabs = React.useMemo(\n    () =>\n      (injectedTabWidgets ?? [])\n        .filter((widget) => (widget.placement?.kind ?? 'tab') === 'tab')\n        .map((widget) => {\n          const tabId = widget.placement?.groupId ?? widget.widgetId\n          const label = widget.placement?.groupLabel ?? widget.module.metadata.title ?? tabId\n          const priority = typeof widget.placement?.priority === 'number' ? widget.placement.priority : 0\n          const render = () => (\n            <widget.module.Widget\n              context={injectionContext}\n              data={data}\n              onDataChange={(next: unknown) => setData(next as CompanyOverview)}\n            />\n          )\n          return { id: tabId, label, priority, render }\n        })\n        .sort((a, b) => b.priority - a.priority),\n    [data, injectedTabWidgets, injectionContext],\n  )\n\n  const injectedTabMap = React.useMemo(() => new Map(injectedTabs.map((tab) => [tab.id, tab.render])), [injectedTabs])\n\n  // Tags\n  const handleTagsChange = React.useCallback((nextTags: TagSummary[]) => {\n    setData((prev) => (prev ? { ...prev, tags: nextTags } : prev))\n  }, [])\n  const tagsSectionControllerRef = React.useRef<TagsSectionController | null>(null)\n\n  // Section action (for tabs that expose add/create buttons)\n  const handleSectionActionChange = React.useCallback((action: SectionAction | null) => {\n    setSectionAction((prev) => (action !== null ? action : prev))\n  }, [])\n\n  const handleSectionAction = React.useCallback(() => {\n    if (!sectionAction || sectionAction.disabled) return\n    sectionAction.onClick()\n  }, [sectionAction])\n\n  React.useEffect(() => {\n    setSectionAction(null)\n  }, [activeTab])\n\n  // Deals scope\n  const dealsScope = React.useMemo(\n    () => (currentCompanyId ? ({ kind: 'company', entityId: currentCompanyId } as const) : null),\n    [currentCompanyId],\n  )\n\n  // Delete handler (shared between header and form)\n  const handleDelete = React.useCallback(async () => {\n    const companyId = data?.company?.id ?? ''\n    if (!companyId) return\n    const approved = await confirm({\n      title: t('customers.companies.detail.deleteConfirmTitle', 'Delete company?'),\n      description: t('customers.companies.detail.deleteConfirmDescription', 'This action cannot be undone.'),\n      confirmText: t('customers.companies.detail.actions.delete', 'Delete company'),\n      cancelText: t('customers.companies.detail.actions.cancel', 'Cancel'),\n      variant: 'destructive',\n    })\n    if (!approved) return\n    try {\n      await runMutationWithContext(\n        () => withScopedApiRequestHeaders(\n          buildOptimisticLockHeader((data?.company as { updatedAt?: string } | undefined)?.updatedAt),\n          () => deleteCrud('customers/companies', { id: companyId }),\n        ),\n        { id: companyId, operation: 'deleteCompany' },\n      )\n    } catch (err) {\n      // The guarded mutation already routes a 409 to the unified conflict bar;\n      // surface any other server error (e.g. \"Cannot delete company: linked\n      // deals\u2026\") as a flash instead of letting it crash the page.\n      if (!surfaceRecordConflict(err, t)) {\n        flash(\n          err instanceof Error && err.message.trim().length > 0\n            ? err.message\n            : t('customers.companies.detail.deleteError', 'Failed to delete company.'),\n          'error',\n        )\n      }\n      return\n    }\n    flash(t('customers.companies.list.deleteSuccess', 'Company deleted.'), 'success')\n    router.push('/backend/customers/companies')\n  }, [confirm, data?.company?.id, router, runMutationWithContext, t])\n\n  // Form submit handler (lifted from CompanyDataTab)\n  const handleFormSubmit = React.useCallback(\n    async (values: CompanyEditFormValues) => {\n      setIsSaving(true)\n      try {\n        let payload: Record<string, unknown>\n        try {\n          payload = buildCompanyEditPayload(values, organizationId)\n        } catch (err) {\n          if (err instanceof Error) {\n            if (err.message === 'DISPLAY_NAME_REQUIRED') {\n              const message = t('customers.companies.form.displayName.error')\n              throw createCrudFormError(message, { displayName: message })\n            }\n            if (err.message === 'ANNUAL_REVENUE_INVALID') {\n              const message = t('customers.companies.form.annualRevenue.error')\n              throw createCrudFormError(message, { annualRevenue: message })\n            }\n          }\n          throw err\n        }\n        await updateCrud('customers/companies', payload)\n        flash(t('customers.companies.form.updateSuccess', 'Company updated.'), 'success')\n        await loadData()\n      } finally {\n        setIsSaving(false)\n      }\n    },\n    [loadData, organizationId, t],\n  )\n\n  // Save handler (triggers form submit via ref)\n  const handleHeaderSave = React.useCallback(() => {\n    const form = formWrapperRef.current?.querySelector('form')\n    if (form) form.requestSubmit()\n  }, [])\n\n  // Loading / error states\n  if (isLoading) {\n    return (\n      <Page>\n        <PageBody>\n          <LoadingMessage label={t('customers.companies.detail.loading', 'Loading company\u2026')} />\n        </PageBody>\n      </Page>\n    )\n  }\n\n  if (isNotFound) {\n    return (\n      <Page>\n        <PageBody>\n          <RecordNotFoundState\n            label={t('customers.companies.detail.error.notFound', 'Company not found.')}\n            backHref=\"/backend/customers/companies\"\n            backLabel={t('customers.companies.detail.actions.backToList', 'Back to companies')}\n          />\n        </PageBody>\n      </Page>\n    )\n  }\n\n  if (error || !data?.company?.id) {\n    return (\n      <Page>\n        <PageBody>\n          <ErrorMessage\n            label={error ?? t('customers.companies.detail.error.load', 'Failed to load company.')}\n            action={(\n              <Button asChild variant=\"outline\">\n                <Link href=\"/backend/customers/companies\">\n                  {t('customers.companies.detail.actions.backToList', 'Back to companies')}\n                </Link>\n              </Button>\n            )}\n          />\n        </PageBody>\n      </Page>\n    )\n  }\n\n  const companyId = data.company.id\n  const useCanonicalInteractions = data.interactionMode === 'canonical'\n\n  return (\n    <Page>\n      <PageBody>\n        <div className=\"space-y-4\">\n          {/* UMES header injection */}\n          <InjectionSpot spotId=\"detail:customers.company:header\" context={injectionContext} data={data} />\n          <InjectionSpot spotId=\"detail:customers.company:status-badges\" context={injectionContext} data={data} />\n\n          {/* Persistent company header */}\n          <CompanyDetailHeader\n            data={data}\n            onTagsChange={handleTagsChange}\n            tagsSectionControllerRef={tagsSectionControllerRef}\n            onSave={handleHeaderSave}\n            onDelete={handleDelete}\n            isDirty={isDirty}\n            isSaving={isSaving}\n            onDataReload={() => { loadData().catch((err) => logger.warn('onDataReload failed', { component: 'companies-v2', err })) }}\n          />\n\n          {/* KPI bar \u2014 always visible above zones */}\n          <CompanyKpiBar data={data} />\n\n          {/* Two-zone layout: zone1 = form, zone2 = tabs */}\n          <CollapsibleZoneLayout\n            pageType=\"company-v2\"\n            entityName={companyName}\n            isDirty={isDirty}\n            sections={zoneSections}\n            zone1={\n              <div ref={formWrapperRef}>\n                <CrudForm<CompanyEditFormValues>\n                  embedded\n                  trackDirtyWhenEmbedded\n                  injectionSpotId=\"crud-form:customers.company\"\n                  entityIds={[E.customers.customer_entity, E.customers.customer_company_profile]}\n                  schema={formSchema}\n                  fields={formFields}\n                  groups={formGroups}\n                  initialValues={initialValues}\n                  onSubmit={handleFormSubmit}\n                  onDelete={handleDelete}\n                  optimisticLockUpdatedAt={(data?.company as { updatedAt?: string } | undefined)?.updatedAt}\n                  hideFooterActions\n                  collapsibleGroups={{ pageType: 'company-v2', chevronPosition: 'right' }}\n                  sortableGroups={{ pageType: 'company-v2' }}\n                  onDirtyChange={setIsDirty}\n                />\n              </div>\n            }\n            zone2={\n              <CompanyDetailTabs\n                activeTab={activeTab}\n                onTabChange={setActiveTab}\n                injectedTabs={injectedTabs.map((tab) => ({ id: tab.id, label: tab.label }))}\n                peopleCount={data.counts?.people ?? 0}\n                dealsCount={dealCount}\n                activitiesCount={data.counts?.activities ?? 0}\n                sectionAction={sectionAction}\n              >\n                {activeTab === 'people' && (\n                  <CompanyPeopleSection\n                    companyId={companyId}\n                    companyName={companyDisplayName}\n                    initialPeople={[]}\n                    addActionLabel={t('customers.companies.detail.people.add', 'Add person')}\n                    emptyLabel={t('customers.companies.detail.people.empty', 'No people linked to this company yet.')}\n                    emptyState={{\n                      title: t('customers.companies.detail.emptyState.people.title', 'Build the account team'),\n                      actionLabel: t('customers.companies.detail.emptyState.people.action', 'Create person'),\n                    }}\n                    onActionChange={handleSectionActionChange}\n                    translator={detailTranslator}\n                    runGuardedMutation={runMutationWithContext}\n                    onPeopleChange={(next) => {\n                      setData((prev) => {\n                        if (!prev) return prev\n                        const nextCount = next.length\n                        return {\n                          ...prev,\n                          people: next,\n                          counts: prev.counts ? { ...prev.counts, people: nextCount } : prev.counts,\n                        }\n                      })\n                    }}\n                  />\n                )}\n\n                {activeTab === 'deals' && (\n                  <DealsSection\n                    scope={dealsScope}\n                    emptyLabel={t('customers.companies.detail.empty.deals', 'No deals linked to this company.')}\n                    addActionLabel={t('customers.companies.detail.actions.addDeal', 'Add deal')}\n                    emptyState={{\n                      title: t('customers.companies.detail.emptyState.deals.title', 'No deals yet'),\n                      actionLabel: t('customers.companies.detail.emptyState.deals.action', 'Create a deal'),\n                    }}\n                    onActionChange={handleSectionActionChange}\n                    translator={detailTranslator}\n                    runGuardedMutation={runMutationWithContext}\n                    onCountDelta={(delta) => setDealCount((current) => Math.max(0, current + delta))}\n                  />\n                )}\n\n                {activeTab === 'activity-log' && (\n                  <ActivityLogTab\n                    entityId={companyId}\n                    plannedActivities={plannedActivities}\n                    onActivityCreated={handleActivityCreated}\n                    onScheduleRequested={openNewScheduleDialog}\n                    onAddActivity={handleAddActivity}\n                    onMarkDone={handleMarkDone}\n                    onEditActivity={handleEditActivity}\n                    onCancelActivity={handleCancelActivity}\n                    runGuardedMutation={runMutationWithContext}\n                    refreshKey={activityRefreshKey}\n                    useCanonicalInteractions={useCanonicalInteractions}\n                  />\n                )}\n\n                {activeTab === 'changelog' && companyId && (\n                  <ChangelogTab entityId={companyId} entityType=\"company\" />\n                )}\n\n                {activeTab === 'files' && (\n                  <AttachmentsSection\n                    entityId={E.customers.customer_entity}\n                    recordId={companyId}\n                    title={t('customers.companies.detail.tabs.files', 'Files')}\n                    description={t('customers.companies.detail.files.subtitle', 'Upload and manage files linked to this company.')}\n                  />\n                )}\n\n                {/* Injected tabs from UMES */}\n                {injectedTabMap.has(activeTab) && injectedTabMap.get(activeTab)!()}\n              </CompanyDetailTabs>\n            }\n          />\n\n          {/* UMES footer injection */}\n          <InjectionSpot spotId=\"detail:customers.company:footer\" context={injectionContext} data={data} />\n\n          {/* Schedule Activity Dialog */}\n          <ScheduleActivityDialog\n            open={scheduleDialogOpen}\n            onClose={() => { setScheduleDialogOpen(false); setScheduleEditData(null) }}\n            entityId={companyId}\n            entityName={companyName}\n            entityType=\"company\"\n            onActivityCreated={handleActivityCreated}\n            editData={scheduleEditData}\n          />\n          {ConfirmDialogElement}\n        </div>\n      </PageBody>\n    </Page>\n  )\n}\n"],
+  "mappings": ";AAwSY,cAqNE,YArNF;AAtSZ,YAAY,WAAW;AACvB,OAAO,UAAU;AACjB,SAAS,WAAW,iBAAiB,mBAAmB;AACxD,SAAS,MAAM,gBAAgB;AAC/B,SAAS,WAAW,MAAM,OAAO,WAAW,kBAAkB;AAC9D,SAAS,YAAY,kBAAkB;AACvC,SAAyB,sBAAsB,mCAAmC;AAClF,SAAS,iCAAiC;AAC1C,SAAS,aAAa;AACtB,SAAS,6BAA6B;AACtC,SAAS,YAAY;AACrB,SAAS,cAAc;AACvB,SAAS,oBAAoB,cAAc,gBAAgB,2BAA+C;AAC1G,SAAS,wBAAwB;AACjC,SAAS,eAAe,2BAA2B;AACnD,SAAS,0BAA0B;AACnC,SAAS,6BAA6B,2CAA2C;AACjF,SAAS,oCAAoC;AAC7C,SAAS,gBAAgB;AACzB,SAAS,6BAAyD;AAClE,SAAS,2BAA2B;AACpC,SAAS,SAAS;AAClB,SAAS,kCAAkC;AAC3C,SAAS,oBAAoB;AAC7B,SAAS,sBAAsB;AAC/B,SAAS,4BAAuD;AAGhE,SAAS,yBAAyB;AAClC,SAAS,2BAA2B;AACpC,SAAS,mBAAmB,wBAA2C;AACvE,SAAS,qBAAqB;AAC9B,SAAS,8BAA6D;AACtE,SAAS,oBAAoB;AAC7B,SAAS,+BAA+B;AACxC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAGK;AACP,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,WAAW;AAExB,SAAR,oBAAqC,EAAE,OAAO,GAAiC;AACpF,QAAM,KAAK,QAAQ;AACnB,QAAM,IAAI,KAAK;AACf,QAAM,SAAS,UAAU;AACzB,QAAM,eAAe,gBAAgB;AACrC,QAAM,WAAW,YAAY;AAC7B,QAAM,EAAE,SAAS,qBAAqB,IAAI,iBAAiB;AAE3D,QAAM,mBAAmB,MAAM,QAAQ,MAAM,6BAA6B,CAAC,GAAG,CAAC,CAAC,CAAC;AAEjF,QAAM,CAAC,MAAM,OAAO,IAAI,MAAM,SAAiC,IAAI;AACnE,QAAM,CAAC,WAAW,YAAY,IAAI,MAAM,SAAS,IAAI;AACrD,QAAM,CAAC,OAAO,QAAQ,IAAI,MAAM,SAAwB,IAAI;AAC5D,QAAM,CAAC,YAAY,aAAa,IAAI,MAAM,SAAS,KAAK;AAGxD,QAAM,aAAa,MAAM,QAAQ,MAAM;AACrC,WAAO,iBAAiB,cAAc,IAAI,KAAK,CAAC;AAAA,EAClD,GAAG,CAAC,YAAY,CAAC;AACjB,QAAM,CAAC,WAAW,YAAY,IAAI,MAAM,SAAuB,UAAU;AACzE,QAAM,CAAC,eAAe,gBAAgB,IAAI,MAAM,SAA+B,IAAI;AAGnF,QAAM,CAAC,SAAS,UAAU,IAAI,MAAM,SAAS,KAAK;AAClD,QAAM,CAAC,UAAU,WAAW,IAAI,MAAM,SAAS,KAAK;AACpD,QAAM,iBAAiB,MAAM,OAAuB,IAAI;AACxD,QAAM,EAAE,eAAe,IAAI,2BAA2B;AACtD,QAAM,aAAa,MAAM,QAAQ,MAAM,wBAAwB,GAAG,CAAC,CAAC;AACpE,QAAM,aAAa,MAAM,QAAQ,MAAM,wBAAwB,CAAC,GAAG,CAAC,CAAC,CAAC;AACtE,QAAM,aAAa,MAAM,QAAQ,MAAM,8BAA8B,CAAC,GAAG,CAAC,CAAC,CAAC;AAC5E,QAAM,gBAAgB,MAAM;AAAA,IAC1B,MAAO,OAAO,+BAA+B,IAAI,IAAI;AAAA,IACrD,CAAC,IAAI;AAAA,EACP;AACA,QAAM,eAAe,MAAM,QAAiC,MAAM;AAAA,IAChE,EAAE,IAAI,YAAY,MAAM,WAAW,OAAO,EAAE,8CAA8C,UAAU,EAAE;AAAA,IACtG,EAAE,IAAI,WAAW,MAAM,MAAM,OAAO,EAAE,6CAA6C,SAAS,EAAE;AAAA,IAC9F,EAAE,IAAI,kBAAkB,MAAM,OAAO,OAAO,EAAE,oDAAoD,gBAAgB,EAAE;AAAA,IACpH,EAAE,IAAI,mBAAmB,MAAM,WAAW,OAAO,EAAE,qDAAqD,kBAAkB,EAAE;AAAA,IAC5H,EAAE,IAAI,SAAS,MAAM,YAAY,OAAO,EAAE,yCAAyC,OAAO,EAAE;AAAA,IAC5F,EAAE,IAAI,gBAAgB,MAAM,MAAM,OAAO,EAAE,oDAAoD,mBAAmB,EAAE;AAAA,EACtH,GAAG,CAAC,CAAC,CAAC;AACN,QAAM,CAAC,oBAAoB,qBAAqB,IAAI,MAAM,SAAS,KAAK;AACxE,QAAM,CAAC,kBAAkB,mBAAmB,IAAI,MAAM,SAA0C,IAAI;AACpG,QAAM,CAAC,oBAAoB,qBAAqB,IAAI,MAAM,SAAS,CAAC;AACpE,QAAM,CAAC,WAAW,YAAY,IAAI,MAAM,SAAS,CAAC;AAElD,QAAM,mBAAmB,MAAM,SAAS,MAAM;AAC9C,QAAM,oBAAoB,MAAM;AAAA,IAC9B,MAAO,mBAAmB,oBAAoB,gBAAgB,KAAK,oBAAoB,MAAM,SAAS;AAAA,IACtG,CAAC,kBAAkB,EAAE;AAAA,EACvB;AACA,QAAM,EAAE,aAAa,kBAAkB,IAAI,mBAOxC;AAAA,IACD,WAAW;AAAA,IACX,gBAAgB,EAAE,8BAA8B,4BAA4B;AAAA,EAC9E,CAAC;AAED,QAAM,qBAAqB,kBAAkB,MAAM,SAAS,WAAW;AACvE,QAAM,cAAc,mBAAmB,KAAK,EAAE,SAC1C,qBACA,EAAE,+CAA+C,cAAc;AAGnE,QAAM,qBAAqB,MAAM,OAAO,KAAK;AAC7C,QAAM,WAAW,MAAM,YAAY,YAAY;AAC7C,QAAI,CAAC,IAAI;AACP,oBAAc,IAAI;AAClB,mBAAa,KAAK;AAClB;AAAA,IACF;AACA,QAAI,CAAC,mBAAmB,SAAS;AAC/B,mBAAa,IAAI;AAAA,IACnB;AACA,aAAS,IAAI;AACb,kBAAc,KAAK;AACnB,QAAI;AACF,YAAM,UAAU,MAAM;AAAA,QACpB,4BAA4B,mBAAmB,EAAE,CAAC;AAAA,QAClD;AAAA,QACA,EAAE,cAAc,EAAE,yCAAyC,yBAAyB,EAAE;AAAA,MACxF;AACA,cAAQ,OAA0B;AAAA,IACpC,SAAS,KAAK;AACZ,UAAK,IAA4B,WAAW,KAAK;AAC/C,sBAAc,IAAI;AAAA,MACpB,OAAO;AACL,cAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,EAAE,yCAAyC,yBAAyB;AACzH,iBAAS,OAAO;AAAA,MAClB;AACA,UAAI,CAAC,mBAAmB,QAAS,SAAQ,IAAI;AAAA,IAC/C,UAAE;AACA,mBAAa,KAAK;AAClB,yBAAmB,UAAU;AAAA,IAC/B;AAAA,EACF,GAAG,CAAC,IAAI,CAAC,CAAC;AAEV,QAAM,UAAU,MAAM;AACpB,aAAS,EAAE,MAAM,CAAC,QAAQ,OAAO,KAAK,mBAAmB,EAAE,WAAW,gBAAgB,IAAI,CAAC,CAAC;AAAA,EAC9F,GAAG,CAAC,QAAQ,CAAC;AAEb,QAAM,UAAU,MAAM;AACpB,iBAAa,MAAM,QAAQ,SAAS,CAAC;AAAA,EACvC,GAAG,CAAC,MAAM,QAAQ,KAAK,CAAC;AAExB,QAAM,wBAAwB,MAAM,YAAY,MAAM;AACpD,0BAAsB,CAAC,MAAM,IAAI,CAAC;AAClC,aAAS,EAAE,MAAM,CAAC,QAAQ,OAAO,KAAK,gCAAgC,EAAE,WAAW,gBAAgB,IAAI,CAAC,CAAC;AAAA,EAC3G,GAAG,CAAC,QAAQ,CAAC;AAGb,QAAM,oBAAoB,MAAM,QAAQ,MAAM;AAC5C,WAAO,MAAM,4BAA4B,CAAC;AAAA,EAC5C,GAAG,CAAC,MAAM,wBAAwB,CAAC;AAGnC,QAAM,mBAAmB,MAAM;AAAA,IAC7B,OAAO;AAAA,MACL,QAAQ;AAAA,MACR,WAAW;AAAA,MACX,cAAc;AAAA,MACd,YAAY,qBAAqB,MAAM;AAAA,MACvC;AAAA,MACA;AAAA,IACF;AAAA,IACA,CAAC,kBAAkB,MAAM,IAAI,mBAAmB,iBAAiB;AAAA,EACnE;AACA,QAAM,yBAAyB,MAAM;AAAA,IACnC,OAAW,WAA6B,oBAA0D;AAChG,aAAO,YAAY;AAAA,QACjB;AAAA,QACA;AAAA,QACA,SAAS;AAAA,MACX,CAAC;AAAA,IACH;AAAA,IACA,CAAC,kBAAkB,WAAW;AAAA,EAChC;AAEA,QAAM,EAAE,qBAAqB,gBAAgB,mBAAmB,qBAAqB,IAAI,wBAAwB;AAAA,IAC/G;AAAA,IACA,eAAe;AAAA,IACf,YAAY;AAAA,EACd,CAAC;AAKD;AAAA,IACE,4BAA4B;AAAA,MAC1B,cAAc;AAAA,MACd,YAAY;AAAA,MACZ,WAAY,MAAM,SAAmF,aAC/F,MAAM,SAAwD,cAC/D;AAAA,MACL;AAAA,MACA,MAAM;AAAA,IACR,CAAC;AAAA,EACH;AAEA,QAAM,qBAAqB,MAAM,YAAY,CAAC,aAAqL;AACjO,UAAM,MAAM;AACZ,UAAM,gBAAgB,OAAO,IAAI,aAAa,WAC1C,IAAI,WACJ,OAAO,IAAI,oBAAoB,WAC7B,IAAI,kBACJ;AAKN,UAAM,cAAc;AAAA,MAClB,IAAI,SAAS;AAAA,MACb,WAAW,OAAO,IAAI,cAAc,WAAW,IAAI,YAAsB,OAAO,IAAI,eAAe,WAAW,IAAI,aAAuB;AAAA,MACzI,iBAAiB,OAAO,SAAS,oBAAoB,WAAW,SAAS,kBAAkB;AAAA,MAC3F,OAAO,OAAO,SAAS,UAAU,WAAW,SAAS,QAAQ;AAAA,MAC7D,MAAM,OAAO,SAAS,SAAS,WAAW,SAAS,OAAO;AAAA,MAC1D,aAAa,OAAO,SAAS,gBAAgB,WAAW,SAAS,cAAc;AAAA,MAC/E,YAAY,OAAO,SAAS,eAAe,WAAW,SAAS,aAAa;AAAA,MAC5E,iBAAiB;AAAA,MACjB,UAAU,OAAO,IAAI,aAAa,WAAW,IAAI,WAAqB;AAAA,MACtE,QAAQ,OAAO,IAAI,WAAW,YAAY,IAAI,SAAoB;AAAA,MAClE,gBAAgB,OAAO,IAAI,mBAAmB,WAAW,IAAI,iBAA2B;AAAA,MACxF,eAAe,OAAO,IAAI,kBAAkB,WAAW,IAAI,gBAA0B;AAAA,MACrF,cAAc,MAAM,QAAQ,IAAI,YAAY,IAAI,IAAI,eAA2D;AAAA,MAC/G,iBAAiB,OAAO,IAAI,oBAAoB,WAAW,IAAI,kBAA4B;AAAA,MAC3F,YAAY,OAAO,IAAI,eAAe,WAAW,IAAI,aAAuB;AAAA,MAC5E,gBAAgB,MAAM,QAAQ,IAAI,cAAc,IAAI,IAAI,iBAA+D;AAAA,MACvH,kBAAkB,IAAI,oBAAoB,OAAO,IAAI,qBAAqB,WACtE,IAAI,mBACJ;AAAA,MACJ,cAAc,IAAI,gBAAgB,OAAO,IAAI,iBAAiB,WAC1D,IAAI,eACJ;AAAA,MACJ,aAAa,OAAO,IAAI,gBAAgB,WAAW,IAAI,cAAwB;AAAA,IACjF;AACA,wBAAoB,WAAW;AAC/B,0BAAsB,IAAI;AAAA,EAC5B,GAAG,CAAC,CAAC;AAEL,QAAM,wBAAwB,MAAM,YAAY,MAAM;AACpD,wBAAoB,IAAI;AACxB,0BAAsB,IAAI;AAAA,EAC5B,GAAG,CAAC,CAAC;AAEL,QAAM,oBAAoB,MAAM,YAAY,CAAC,SAAgD;AAC3F,wBAAoB;AAAA,MAClB,IAAI;AAAA,MACJ,iBAAiB;AAAA,MACjB,OAAO;AAAA,MACP,MAAM;AAAA,MACN,aAAa;AAAA,MACb,iBAAiB;AAAA,MACjB,UAAU;AAAA,MACV,QAAQ;AAAA,MACR,gBAAgB;AAAA,MAChB,eAAe;AAAA,MACf,cAAc;AAAA,MACd,iBAAiB;AAAA,MACjB,YAAY;AAAA,MACZ,gBAAgB;AAAA,MAChB,kBAAkB;AAAA,IACpB,CAAC;AACD,0BAAsB,IAAI;AAAA,EAC5B,GAAG,CAAC,CAAC;AAGL,QAAM,EAAE,SAAS,mBAAmB,IAAI,oBAAoB,iCAAiC;AAAA,IAC3F,SAAS;AAAA,IACT,eAAe;AAAA,EACjB,CAAC;AAED,QAAM,eAAe,MAAM;AAAA,IACzB,OACG,sBAAsB,CAAC,GACrB,OAAO,CAAC,YAAY,OAAO,WAAW,QAAQ,WAAW,KAAK,EAC9D,IAAI,CAAC,WAAW;AACf,YAAM,QAAQ,OAAO,WAAW,WAAW,OAAO;AAClD,YAAM,QAAQ,OAAO,WAAW,cAAc,OAAO,OAAO,SAAS,SAAS;AAC9E,YAAM,WAAW,OAAO,OAAO,WAAW,aAAa,WAAW,OAAO,UAAU,WAAW;AAC9F,YAAM,SAAS,MACb;AAAA,QAAC,OAAO,OAAO;AAAA,QAAd;AAAA,UACC,SAAS;AAAA,UACT;AAAA,UACA,cAAc,CAAC,SAAkB,QAAQ,IAAuB;AAAA;AAAA,MAClE;AAEF,aAAO,EAAE,IAAI,OAAO,OAAO,UAAU,OAAO;AAAA,IAC9C,CAAC,EACA,KAAK,CAAC,GAAG,MAAM,EAAE,WAAW,EAAE,QAAQ;AAAA,IAC3C,CAAC,MAAM,oBAAoB,gBAAgB;AAAA,EAC7C;AAEA,QAAM,iBAAiB,MAAM,QAAQ,MAAM,IAAI,IAAI,aAAa,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,IAAI,MAAM,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC;AAGnH,QAAM,mBAAmB,MAAM,YAAY,CAAC,aAA2B;AACrE,YAAQ,CAAC,SAAU,OAAO,EAAE,GAAG,MAAM,MAAM,SAAS,IAAI,IAAK;AAAA,EAC/D,GAAG,CAAC,CAAC;AACL,QAAM,2BAA2B,MAAM,OAAqC,IAAI;AAGhF,QAAM,4BAA4B,MAAM,YAAY,CAAC,WAAiC;AACpF,qBAAiB,CAAC,SAAU,WAAW,OAAO,SAAS,IAAK;AAAA,EAC9D,GAAG,CAAC,CAAC;AAEL,QAAM,sBAAsB,MAAM,YAAY,MAAM;AAClD,QAAI,CAAC,iBAAiB,cAAc,SAAU;AAC9C,kBAAc,QAAQ;AAAA,EACxB,GAAG,CAAC,aAAa,CAAC;AAElB,QAAM,UAAU,MAAM;AACpB,qBAAiB,IAAI;AAAA,EACvB,GAAG,CAAC,SAAS,CAAC;AAGd,QAAM,aAAa,MAAM;AAAA,IACvB,MAAO,mBAAoB,EAAE,MAAM,WAAW,UAAU,iBAAiB,IAAc;AAAA,IACvF,CAAC,gBAAgB;AAAA,EACnB;AAGA,QAAM,eAAe,MAAM,YAAY,YAAY;AACjD,UAAMA,aAAY,MAAM,SAAS,MAAM;AACvC,QAAI,CAACA,WAAW;AAChB,UAAM,WAAW,MAAM,QAAQ;AAAA,MAC7B,OAAO,EAAE,iDAAiD,iBAAiB;AAAA,MAC3E,aAAa,EAAE,uDAAuD,+BAA+B;AAAA,MACrG,aAAa,EAAE,6CAA6C,gBAAgB;AAAA,MAC5E,YAAY,EAAE,6CAA6C,QAAQ;AAAA,MACnE,SAAS;AAAA,IACX,CAAC;AACD,QAAI,CAAC,SAAU;AACf,QAAI;AACF,YAAM;AAAA,QACJ,MAAM;AAAA,UACJ,0BAA2B,MAAM,SAAgD,SAAS;AAAA,UAC1F,MAAM,WAAW,uBAAuB,EAAE,IAAIA,WAAU,CAAC;AAAA,QAC3D;AAAA,QACA,EAAE,IAAIA,YAAW,WAAW,gBAAgB;AAAA,MAC9C;AAAA,IACF,SAAS,KAAK;AAIZ,UAAI,CAAC,sBAAsB,KAAK,CAAC,GAAG;AAClC;AAAA,UACE,eAAe,SAAS,IAAI,QAAQ,KAAK,EAAE,SAAS,IAChD,IAAI,UACJ,EAAE,0CAA0C,2BAA2B;AAAA,UAC3E;AAAA,QACF;AAAA,MACF;AACA;AAAA,IACF;AACA,UAAM,EAAE,0CAA0C,kBAAkB,GAAG,SAAS;AAChF,WAAO,KAAK,8BAA8B;AAAA,EAC5C,GAAG,CAAC,SAAS,MAAM,SAAS,IAAI,QAAQ,wBAAwB,CAAC,CAAC;AAGlE,QAAM,mBAAmB,MAAM;AAAA,IAC7B,OAAO,WAAkC;AACvC,kBAAY,IAAI;AAChB,UAAI;AACF,YAAI;AACJ,YAAI;AACF,oBAAU,wBAAwB,QAAQ,cAAc;AAAA,QAC1D,SAAS,KAAK;AACZ,cAAI,eAAe,OAAO;AACxB,gBAAI,IAAI,YAAY,yBAAyB;AAC3C,oBAAM,UAAU,EAAE,4CAA4C;AAC9D,oBAAM,oBAAoB,SAAS,EAAE,aAAa,QAAQ,CAAC;AAAA,YAC7D;AACA,gBAAI,IAAI,YAAY,0BAA0B;AAC5C,oBAAM,UAAU,EAAE,8CAA8C;AAChE,oBAAM,oBAAoB,SAAS,EAAE,eAAe,QAAQ,CAAC;AAAA,YAC/D;AAAA,UACF;AACA,gBAAM;AAAA,QACR;AACA,cAAM,WAAW,uBAAuB,OAAO;AAC/C,cAAM,EAAE,0CAA0C,kBAAkB,GAAG,SAAS;AAChF,cAAM,SAAS;AAAA,MACjB,UAAE;AACA,oBAAY,KAAK;AAAA,MACnB;AAAA,IACF;AAAA,IACA,CAAC,UAAU,gBAAgB,CAAC;AAAA,EAC9B;AAGA,QAAM,mBAAmB,MAAM,YAAY,MAAM;AAC/C,UAAM,OAAO,eAAe,SAAS,cAAc,MAAM;AACzD,QAAI,KAAM,MAAK,cAAc;AAAA,EAC/B,GAAG,CAAC,CAAC;AAGL,MAAI,WAAW;AACb,WACE,oBAAC,QACC,8BAAC,YACC,8BAAC,kBAAe,OAAO,EAAE,sCAAsC,uBAAkB,GAAG,GACtF,GACF;AAAA,EAEJ;AAEA,MAAI,YAAY;AACd,WACE,oBAAC,QACC,8BAAC,YACC;AAAA,MAAC;AAAA;AAAA,QACC,OAAO,EAAE,6CAA6C,oBAAoB;AAAA,QAC1E,UAAS;AAAA,QACT,WAAW,EAAE,iDAAiD,mBAAmB;AAAA;AAAA,IACnF,GACF,GACF;AAAA,EAEJ;AAEA,MAAI,SAAS,CAAC,MAAM,SAAS,IAAI;AAC/B,WACE,oBAAC,QACC,8BAAC,YACC;AAAA,MAAC;AAAA;AAAA,QACC,OAAO,SAAS,EAAE,yCAAyC,yBAAyB;AAAA,QACpF,QACE,oBAAC,UAAO,SAAO,MAAC,SAAQ,WACtB,8BAAC,QAAK,MAAK,gCACR,YAAE,iDAAiD,mBAAmB,GACzE,GACF;AAAA;AAAA,IAEJ,GACF,GACF;AAAA,EAEJ;AAEA,QAAM,YAAY,KAAK,QAAQ;AAC/B,QAAM,2BAA2B,KAAK,oBAAoB;AAE1D,SACE,oBAAC,QACC,8BAAC,YACC,+BAAC,SAAI,WAAU,aAEb;AAAA,wBAAC,iBAAc,QAAO,mCAAkC,SAAS,kBAAkB,MAAY;AAAA,IAC/F,oBAAC,iBAAc,QAAO,0CAAyC,SAAS,kBAAkB,MAAY;AAAA,IAGtG;AAAA,MAAC;AAAA;AAAA,QACC;AAAA,QACA,cAAc;AAAA,QACd;AAAA,QACA,QAAQ;AAAA,QACR,UAAU;AAAA,QACV;AAAA,QACA;AAAA,QACA,cAAc,MAAM;AAAE,mBAAS,EAAE,MAAM,CAAC,QAAQ,OAAO,KAAK,uBAAuB,EAAE,WAAW,gBAAgB,IAAI,CAAC,CAAC;AAAA,QAAE;AAAA;AAAA,IAC1H;AAAA,IAGA,oBAAC,iBAAc,MAAY;AAAA,IAG3B;AAAA,MAAC;AAAA;AAAA,QACC,UAAS;AAAA,QACT,YAAY;AAAA,QACZ;AAAA,QACA,UAAU;AAAA,QACV,OACE,oBAAC,SAAI,KAAK,gBACR;AAAA,UAAC;AAAA;AAAA,YACC,UAAQ;AAAA,YACR,wBAAsB;AAAA,YACtB,iBAAgB;AAAA,YAChB,WAAW,CAAC,EAAE,UAAU,iBAAiB,EAAE,UAAU,wBAAwB;AAAA,YAC7E,QAAQ;AAAA,YACR,QAAQ;AAAA,YACR,QAAQ;AAAA,YACR;AAAA,YACA,UAAU;AAAA,YACV,UAAU;AAAA,YACV,yBAA0B,MAAM,SAAgD;AAAA,YAChF,mBAAiB;AAAA,YACjB,mBAAmB,EAAE,UAAU,cAAc,iBAAiB,QAAQ;AAAA,YACtE,gBAAgB,EAAE,UAAU,aAAa;AAAA,YACzC,eAAe;AAAA;AAAA,QACjB,GACF;AAAA,QAEF,OACE;AAAA,UAAC;AAAA;AAAA,YACC;AAAA,YACA,aAAa;AAAA,YACb,cAAc,aAAa,IAAI,CAAC,SAAS,EAAE,IAAI,IAAI,IAAI,OAAO,IAAI,MAAM,EAAE;AAAA,YAC1E,aAAa,KAAK,QAAQ,UAAU;AAAA,YACpC,YAAY;AAAA,YACZ,iBAAiB,KAAK,QAAQ,cAAc;AAAA,YAC5C;AAAA,YAEC;AAAA,4BAAc,YACb;AAAA,gBAAC;AAAA;AAAA,kBACC;AAAA,kBACA,aAAa;AAAA,kBACb,eAAe,CAAC;AAAA,kBAChB,gBAAgB,EAAE,yCAAyC,YAAY;AAAA,kBACvE,YAAY,EAAE,2CAA2C,uCAAuC;AAAA,kBAChG,YAAY;AAAA,oBACV,OAAO,EAAE,sDAAsD,wBAAwB;AAAA,oBACvF,aAAa,EAAE,uDAAuD,eAAe;AAAA,kBACvF;AAAA,kBACA,gBAAgB;AAAA,kBAChB,YAAY;AAAA,kBACZ,oBAAoB;AAAA,kBACpB,gBAAgB,CAAC,SAAS;AACxB,4BAAQ,CAAC,SAAS;AAChB,0BAAI,CAAC,KAAM,QAAO;AAClB,4BAAM,YAAY,KAAK;AACvB,6BAAO;AAAA,wBACL,GAAG;AAAA,wBACH,QAAQ;AAAA,wBACR,QAAQ,KAAK,SAAS,EAAE,GAAG,KAAK,QAAQ,QAAQ,UAAU,IAAI,KAAK;AAAA,sBACrE;AAAA,oBACF,CAAC;AAAA,kBACH;AAAA;AAAA,cACF;AAAA,cAGD,cAAc,WACb;AAAA,gBAAC;AAAA;AAAA,kBACC,OAAO;AAAA,kBACP,YAAY,EAAE,0CAA0C,kCAAkC;AAAA,kBAC1F,gBAAgB,EAAE,8CAA8C,UAAU;AAAA,kBAC1E,YAAY;AAAA,oBACV,OAAO,EAAE,qDAAqD,cAAc;AAAA,oBAC5E,aAAa,EAAE,sDAAsD,eAAe;AAAA,kBACtF;AAAA,kBACA,gBAAgB;AAAA,kBAChB,YAAY;AAAA,kBACZ,oBAAoB;AAAA,kBACpB,cAAc,CAAC,UAAU,aAAa,CAAC,YAAY,KAAK,IAAI,GAAG,UAAU,KAAK,CAAC;AAAA;AAAA,cACjF;AAAA,cAGD,cAAc,kBACb;AAAA,gBAAC;AAAA;AAAA,kBACC,UAAU;AAAA,kBACV;AAAA,kBACA,mBAAmB;AAAA,kBACnB,qBAAqB;AAAA,kBACrB,eAAe;AAAA,kBACf,YAAY;AAAA,kBACZ,gBAAgB;AAAA,kBAChB,kBAAkB;AAAA,kBAClB,oBAAoB;AAAA,kBACpB,YAAY;AAAA,kBACZ;AAAA;AAAA,cACF;AAAA,cAGD,cAAc,eAAe,aAC5B,oBAAC,gBAAa,UAAU,WAAW,YAAW,WAAU;AAAA,cAGzD,cAAc,WACb;AAAA,gBAAC;AAAA;AAAA,kBACC,UAAU,EAAE,UAAU;AAAA,kBACtB,UAAU;AAAA,kBACV,OAAO,EAAE,yCAAyC,OAAO;AAAA,kBACzD,aAAa,EAAE,6CAA6C,iDAAiD;AAAA;AAAA,cAC/G;AAAA,cAID,eAAe,IAAI,SAAS,KAAK,eAAe,IAAI,SAAS,EAAG;AAAA;AAAA;AAAA,QACnE;AAAA;AAAA,IAEJ;AAAA,IAGA,oBAAC,iBAAc,QAAO,mCAAkC,SAAS,kBAAkB,MAAY;AAAA,IAG/F;AAAA,MAAC;AAAA;AAAA,QACC,MAAM;AAAA,QACN,SAAS,MAAM;AAAE,gCAAsB,KAAK;AAAG,8BAAoB,IAAI;AAAA,QAAE;AAAA,QACzE,UAAU;AAAA,QACV,YAAY;AAAA,QACZ,YAAW;AAAA,QACX,mBAAmB;AAAA,QACnB,UAAU;AAAA;AAAA,IACZ;AAAA,IACC;AAAA,KACH,GACF,GACF;AAEJ;",
   "names": ["companyId"]
 }

package/dist/modules/customers/components/detail/CompanyDetailTabs.js

@@ -12,7 +12,6 @@ import {
   Paperclip,
   Plus
 } from "lucide-react";
-import { useDealsAccess } from "./useDealsAccess.js";
 const LEGACY_TAB_MAP = {
   notes: "people",
   activities: "activity-log",
@@ -46,7 +45,6 @@ function CompanyDetailTabs({
   children
 }) {
   const t = useT();
-  const { canViewDeals } = useDealsAccess();
   const builtInTabs = React.useMemo(
     () => [
       {
@@ -55,14 +53,12 @@ function CompanyDetailTabs({
         icon: /* @__PURE__ */ jsx(Users, { className: "size-4" }),
         badge: /* @__PURE__ */ jsx(CountBadge, { count: peopleCount })
       },
-      ...canViewDeals ? [
-        {
-          id: "deals",
-          label: t("customers.companies.detail.tabs.deals", "Deals"),
-          icon: /* @__PURE__ */ jsx(Handshake, { className: "size-4" }),
-          badge: /* @__PURE__ */ jsx(CountBadge, { count: dealsCount })
-        }
-      ] : [],
+      {
+        id: "deals",
+        label: t("customers.companies.detail.tabs.deals", "Deals"),
+        icon: /* @__PURE__ */ jsx(Handshake, { className: "size-4" }),
+        badge: /* @__PURE__ */ jsx(CountBadge, { count: dealsCount })
+      },
       {
         id: "activity-log",
         label: t("customers.companies.detail.tabs.activityLog", "Activity log"),
@@ -82,7 +78,7 @@ function CompanyDetailTabs({
         badge: /* @__PURE__ */ jsx(CountBadge, { count: filesCount })
       }
     ],
-    [t, canViewDeals, peopleCount, dealsCount, activitiesCount, filesCount]
+    [t, peopleCount, dealsCount, activitiesCount, filesCount]
   );
   const allTabs = React.useMemo(
     () => [

package/dist/modules/customers/components/detail/CompanyDetailTabs.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../src/modules/customers/components/detail/CompanyDetailTabs.tsx"],
-  "sourcesContent": ["\"use client\"\n\nimport * as React from 'react'\nimport { cn } from '@open-mercato/shared/lib/utils'\nimport { useT } from '@open-mercato/shared/lib/i18n/context'\nimport { Button } from '@open-mercato/ui/primitives/button'\nimport { Badge } from '@open-mercato/ui/primitives/badge'\nimport {\n  Users,\n  Handshake,\n  Clock,\n  History,\n  Paperclip,\n  Plus,\n} from 'lucide-react'\nimport type { SectionAction } from '@open-mercato/ui/backend/detail'\nimport { useDealsAccess } from './useDealsAccess'\n\nexport type CompanyTabId =\n  | 'people'\n  | 'deals'\n  | 'activity-log'\n  | 'changelog'\n  | 'files'\n  | string\n\ntype TabDef = {\n  id: CompanyTabId\n  label: string\n  icon?: React.ReactNode\n  badge?: React.ReactNode\n}\n\ntype CompanyDetailTabsProps = {\n  activeTab: CompanyTabId\n  onTabChange: (tab: CompanyTabId) => void\n  injectedTabs?: Array<{ id: string; label: string; priority?: number }>\n  peopleCount?: number\n  dealsCount?: number\n  activitiesCount?: number\n  filesCount?: number\n  sectionAction?: SectionAction | null\n  children: React.ReactNode\n}\n\nconst LEGACY_TAB_MAP: Record<string, CompanyTabId> = {\n  notes: 'people',\n  activities: 'activity-log',\n  addresses: 'people',\n  tasks: 'people',\n  dashboard: 'people',\n  'dane-firmy': 'people',\n  analysis: 'people',\n}\n\nexport function resolveLegacyTab(tab: string | null | undefined): CompanyTabId {\n  if (!tab) return 'people'\n  if (LEGACY_TAB_MAP[tab]) return LEGACY_TAB_MAP[tab]\n  return tab as CompanyTabId\n}\n\nfunction NewBadge() {\n  return (\n    <span className=\"ml-1.5 rounded bg-foreground px-1.5 py-0.5 text-overline font-semibold leading-none text-background\">\n      NEW\n    </span>\n  )\n}\n\nfunction CountBadge({ count }: { count: number }) {\n  if (count <= 0) return null\n  return (\n    <span className=\"ml-1.5 rounded-full bg-muted px-1.5 py-0.5 text-xs font-medium leading-none text-muted-foreground\">\n      {count > 999 ? '999+' : count}\n    </span>\n  )\n}\n\nexport function CompanyDetailTabs({\n  activeTab,\n  onTabChange,\n  injectedTabs = [],\n  peopleCount = 0,\n  dealsCount = 0,\n  activitiesCount = 0,\n  filesCount = 0,\n  sectionAction = null,\n  children,\n}: CompanyDetailTabsProps) {\n  const t = useT()\n  const { canViewDeals } = useDealsAccess()\n\n  const builtInTabs: TabDef[] = React.useMemo(\n    () => [\n      {\n        id: 'people',\n        label: t('customers.companies.detail.tabs.people', 'People'),\n        icon: <Users className=\"size-4\" />,\n        badge: <CountBadge count={peopleCount} />,\n      },\n      ...(canViewDeals\n        ? [\n            {\n              id: 'deals' as CompanyTabId,\n              label: t('customers.companies.detail.tabs.deals', 'Deals'),\n              icon: <Handshake className=\"size-4\" />,\n              badge: <CountBadge count={dealsCount} />,\n            },\n          ]\n        : []),\n      {\n        id: 'activity-log',\n        label: t('customers.companies.detail.tabs.activityLog', 'Activity log'),\n        icon: <Clock className=\"size-4\" />,\n        badge: <CountBadge count={activitiesCount} />,\n      },\n      {\n        id: 'changelog',\n        label: t('customers.companies.detail.tabs.changelog', 'Changelog'),\n        icon: <History className=\"size-4\" />,\n        badge: <NewBadge />,\n      },\n      {\n        id: 'files',\n        label: t('customers.companies.detail.tabs.files', 'Files'),\n        icon: <Paperclip className=\"size-4\" />,\n        badge: <CountBadge count={filesCount} />,\n      },\n    ],\n    [t, canViewDeals, peopleCount, dealsCount, activitiesCount, filesCount],\n  )\n\n  const allTabs: TabDef[] = React.useMemo(\n    () => [\n      ...builtInTabs,\n      ...injectedTabs.map((tab) => ({\n        id: tab.id as CompanyTabId,\n        label: tab.label,\n      })),\n    ],\n    [builtInTabs, injectedTabs],\n  )\n\n  return (\n    <div>\n      {/* Tab navigation */}\n      <div className=\"flex items-end justify-between gap-2 border-b\" role=\"tablist\" aria-label={t('customers.companies.detail.tabs.label', 'Company detail sections')}>\n        <nav className=\"-mb-px flex flex-1 gap-1 overflow-x-auto px-1\">\n          {allTabs.map((tab) => {\n            const isActive = activeTab === tab.id\n            return (\n              <Button\n                key={tab.id}\n                type=\"button\"\n                variant=\"ghost\"\n                size=\"sm\"\n                role=\"tab\"\n                aria-selected={isActive}\n                onClick={() => onTabChange(tab.id)}\n                className={cn(\n                  'h-auto shrink-0 rounded-none border-b-2 px-3 py-2.5 hover:bg-transparent',\n                  isActive\n                    ? 'border-foreground text-foreground font-semibold'\n                    : 'border-transparent text-muted-foreground hover:text-foreground',\n                )}\n              >\n                {tab.icon && <span className=\"mr-1.5\">{tab.icon}</span>}\n                {tab.label}\n                {tab.badge}\n              </Button>\n            )\n          })}\n        </nav>\n        {sectionAction ? (\n          <Button\n            type=\"button\"\n            size=\"sm\"\n            onClick={sectionAction.onClick}\n            disabled={sectionAction.disabled}\n            className=\"mb-1.5 mr-1 shrink-0\"\n          >\n            <Plus className=\"mr-1.5 h-4 w-4\" />\n            {sectionAction.label}\n          </Button>\n        ) : null}\n      </div>\n\n      {/* Tab content */}\n      <div className=\"pt-6\" role=\"tabpanel\">\n        {children}\n      </div>\n    </div>\n  )\n}\n"],
-  "mappings": ";AA+DI,cAwFU,YAxFV;AA7DJ,YAAY,WAAW;AACvB,SAAS,UAAU;AACnB,SAAS,YAAY;AACrB,SAAS,cAAc;AAEvB;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP,SAAS,sBAAsB;AA6B/B,MAAM,iBAA+C;AAAA,EACnD,OAAO;AAAA,EACP,YAAY;AAAA,EACZ,WAAW;AAAA,EACX,OAAO;AAAA,EACP,WAAW;AAAA,EACX,cAAc;AAAA,EACd,UAAU;AACZ;AAEO,SAAS,iBAAiB,KAA8C;AAC7E,MAAI,CAAC,IAAK,QAAO;AACjB,MAAI,eAAe,GAAG,EAAG,QAAO,eAAe,GAAG;AAClD,SAAO;AACT;AAEA,SAAS,WAAW;AAClB,SACE,oBAAC,UAAK,WAAU,uGAAsG,iBAEtH;AAEJ;AAEA,SAAS,WAAW,EAAE,MAAM,GAAsB;AAChD,MAAI,SAAS,EAAG,QAAO;AACvB,SACE,oBAAC,UAAK,WAAU,qGACb,kBAAQ,MAAM,SAAS,OAC1B;AAEJ;AAEO,SAAS,kBAAkB;AAAA,EAChC;AAAA,EACA;AAAA,EACA,eAAe,CAAC;AAAA,EAChB,cAAc;AAAA,EACd,aAAa;AAAA,EACb,kBAAkB;AAAA,EAClB,aAAa;AAAA,EACb,gBAAgB;AAAA,EAChB;AACF,GAA2B;AACzB,QAAM,IAAI,KAAK;AACf,QAAM,EAAE,aAAa,IAAI,eAAe;AAExC,QAAM,cAAwB,MAAM;AAAA,IAClC,MAAM;AAAA,MACJ;AAAA,QACE,IAAI;AAAA,QACJ,OAAO,EAAE,0CAA0C,QAAQ;AAAA,QAC3D,MAAM,oBAAC,SAAM,WAAU,UAAS;AAAA,QAChC,OAAO,oBAAC,cAAW,OAAO,aAAa;AAAA,MACzC;AAAA,MACA,GAAI,eACA;AAAA,QACE;AAAA,UACE,IAAI;AAAA,UACJ,OAAO,EAAE,yCAAyC,OAAO;AAAA,UACzD,MAAM,oBAAC,aAAU,WAAU,UAAS;AAAA,UACpC,OAAO,oBAAC,cAAW,OAAO,YAAY;AAAA,QACxC;AAAA,MACF,IACA,CAAC;AAAA,MACL;AAAA,QACE,IAAI;AAAA,QACJ,OAAO,EAAE,+CAA+C,cAAc;AAAA,QACtE,MAAM,oBAAC,SAAM,WAAU,UAAS;AAAA,QAChC,OAAO,oBAAC,cAAW,OAAO,iBAAiB;AAAA,MAC7C;AAAA,MACA;AAAA,QACE,IAAI;AAAA,QACJ,OAAO,EAAE,6CAA6C,WAAW;AAAA,QACjE,MAAM,oBAAC,WAAQ,WAAU,UAAS;AAAA,QAClC,OAAO,oBAAC,YAAS;AAAA,MACnB;AAAA,MACA;AAAA,QACE,IAAI;AAAA,QACJ,OAAO,EAAE,yCAAyC,OAAO;AAAA,QACzD,MAAM,oBAAC,aAAU,WAAU,UAAS;AAAA,QACpC,OAAO,oBAAC,cAAW,OAAO,YAAY;AAAA,MACxC;AAAA,IACF;AAAA,IACA,CAAC,GAAG,cAAc,aAAa,YAAY,iBAAiB,UAAU;AAAA,EACxE;AAEA,QAAM,UAAoB,MAAM;AAAA,IAC9B,MAAM;AAAA,MACJ,GAAG;AAAA,MACH,GAAG,aAAa,IAAI,CAAC,SAAS;AAAA,QAC5B,IAAI,IAAI;AAAA,QACR,OAAO,IAAI;AAAA,MACb,EAAE;AAAA,IACJ;AAAA,IACA,CAAC,aAAa,YAAY;AAAA,EAC5B;AAEA,SACE,qBAAC,SAEC;AAAA,yBAAC,SAAI,WAAU,iDAAgD,MAAK,WAAU,cAAY,EAAE,yCAAyC,yBAAyB,GAC5J;AAAA,0BAAC,SAAI,WAAU,iDACZ,kBAAQ,IAAI,CAAC,QAAQ;AACpB,cAAM,WAAW,cAAc,IAAI;AACnC,eACE;AAAA,UAAC;AAAA;AAAA,YAEC,MAAK;AAAA,YACL,SAAQ;AAAA,YACR,MAAK;AAAA,YACL,MAAK;AAAA,YACL,iBAAe;AAAA,YACf,SAAS,MAAM,YAAY,IAAI,EAAE;AAAA,YACjC,WAAW;AAAA,cACT;AAAA,cACA,WACI,oDACA;AAAA,YACN;AAAA,YAEC;AAAA,kBAAI,QAAQ,oBAAC,UAAK,WAAU,UAAU,cAAI,MAAK;AAAA,cAC/C,IAAI;AAAA,cACJ,IAAI;AAAA;AAAA;AAAA,UAhBA,IAAI;AAAA,QAiBX;AAAA,MAEJ,CAAC,GACH;AAAA,MACC,gBACC;AAAA,QAAC;AAAA;AAAA,UACC,MAAK;AAAA,UACL,MAAK;AAAA,UACL,SAAS,cAAc;AAAA,UACvB,UAAU,cAAc;AAAA,UACxB,WAAU;AAAA,UAEV;AAAA,gCAAC,QAAK,WAAU,kBAAiB;AAAA,YAChC,cAAc;AAAA;AAAA;AAAA,MACjB,IACE;AAAA,OACN;AAAA,IAGA,oBAAC,SAAI,WAAU,QAAO,MAAK,YACxB,UACH;AAAA,KACF;AAEJ;",
+  "sourcesContent": ["\"use client\"\n\nimport * as React from 'react'\nimport { cn } from '@open-mercato/shared/lib/utils'\nimport { useT } from '@open-mercato/shared/lib/i18n/context'\nimport { Button } from '@open-mercato/ui/primitives/button'\nimport { Badge } from '@open-mercato/ui/primitives/badge'\nimport {\n  Users,\n  Handshake,\n  Clock,\n  History,\n  Paperclip,\n  Plus,\n} from 'lucide-react'\nimport type { SectionAction } from '@open-mercato/ui/backend/detail'\n\nexport type CompanyTabId =\n  | 'people'\n  | 'deals'\n  | 'activity-log'\n  | 'changelog'\n  | 'files'\n  | string\n\ntype TabDef = {\n  id: CompanyTabId\n  label: string\n  icon?: React.ReactNode\n  badge?: React.ReactNode\n}\n\ntype CompanyDetailTabsProps = {\n  activeTab: CompanyTabId\n  onTabChange: (tab: CompanyTabId) => void\n  injectedTabs?: Array<{ id: string; label: string; priority?: number }>\n  peopleCount?: number\n  dealsCount?: number\n  activitiesCount?: number\n  filesCount?: number\n  sectionAction?: SectionAction | null\n  children: React.ReactNode\n}\n\nconst LEGACY_TAB_MAP: Record<string, CompanyTabId> = {\n  notes: 'people',\n  activities: 'activity-log',\n  addresses: 'people',\n  tasks: 'people',\n  dashboard: 'people',\n  'dane-firmy': 'people',\n  analysis: 'people',\n}\n\nexport function resolveLegacyTab(tab: string | null | undefined): CompanyTabId {\n  if (!tab) return 'people'\n  if (LEGACY_TAB_MAP[tab]) return LEGACY_TAB_MAP[tab]\n  return tab as CompanyTabId\n}\n\nfunction NewBadge() {\n  return (\n    <span className=\"ml-1.5 rounded bg-foreground px-1.5 py-0.5 text-overline font-semibold leading-none text-background\">\n      NEW\n    </span>\n  )\n}\n\nfunction CountBadge({ count }: { count: number }) {\n  if (count <= 0) return null\n  return (\n    <span className=\"ml-1.5 rounded-full bg-muted px-1.5 py-0.5 text-xs font-medium leading-none text-muted-foreground\">\n      {count > 999 ? '999+' : count}\n    </span>\n  )\n}\n\nexport function CompanyDetailTabs({\n  activeTab,\n  onTabChange,\n  injectedTabs = [],\n  peopleCount = 0,\n  dealsCount = 0,\n  activitiesCount = 0,\n  filesCount = 0,\n  sectionAction = null,\n  children,\n}: CompanyDetailTabsProps) {\n  const t = useT()\n\n  const builtInTabs: TabDef[] = React.useMemo(\n    () => [\n      {\n        id: 'people',\n        label: t('customers.companies.detail.tabs.people', 'People'),\n        icon: <Users className=\"size-4\" />,\n        badge: <CountBadge count={peopleCount} />,\n      },\n      {\n        id: 'deals',\n        label: t('customers.companies.detail.tabs.deals', 'Deals'),\n        icon: <Handshake className=\"size-4\" />,\n        badge: <CountBadge count={dealsCount} />,\n      },\n      {\n        id: 'activity-log',\n        label: t('customers.companies.detail.tabs.activityLog', 'Activity log'),\n        icon: <Clock className=\"size-4\" />,\n        badge: <CountBadge count={activitiesCount} />,\n      },\n      {\n        id: 'changelog',\n        label: t('customers.companies.detail.tabs.changelog', 'Changelog'),\n        icon: <History className=\"size-4\" />,\n        badge: <NewBadge />,\n      },\n      {\n        id: 'files',\n        label: t('customers.companies.detail.tabs.files', 'Files'),\n        icon: <Paperclip className=\"size-4\" />,\n        badge: <CountBadge count={filesCount} />,\n      },\n    ],\n    [t, peopleCount, dealsCount, activitiesCount, filesCount],\n  )\n\n  const allTabs: TabDef[] = React.useMemo(\n    () => [\n      ...builtInTabs,\n      ...injectedTabs.map((tab) => ({\n        id: tab.id as CompanyTabId,\n        label: tab.label,\n      })),\n    ],\n    [builtInTabs, injectedTabs],\n  )\n\n  return (\n    <div>\n      {/* Tab navigation */}\n      <div className=\"flex items-end justify-between gap-2 border-b\" role=\"tablist\" aria-label={t('customers.companies.detail.tabs.label', 'Company detail sections')}>\n        <nav className=\"-mb-px flex flex-1 gap-1 overflow-x-auto px-1\">\n          {allTabs.map((tab) => {\n            const isActive = activeTab === tab.id\n            return (\n              <Button\n                key={tab.id}\n                type=\"button\"\n                variant=\"ghost\"\n                size=\"sm\"\n                role=\"tab\"\n                aria-selected={isActive}\n                onClick={() => onTabChange(tab.id)}\n                className={cn(\n                  'h-auto shrink-0 rounded-none border-b-2 px-3 py-2.5 hover:bg-transparent',\n                  isActive\n                    ? 'border-foreground text-foreground font-semibold'\n                    : 'border-transparent text-muted-foreground hover:text-foreground',\n                )}\n              >\n                {tab.icon && <span className=\"mr-1.5\">{tab.icon}</span>}\n                {tab.label}\n                {tab.badge}\n              </Button>\n            )\n          })}\n        </nav>\n        {sectionAction ? (\n          <Button\n            type=\"button\"\n            size=\"sm\"\n            onClick={sectionAction.onClick}\n            disabled={sectionAction.disabled}\n            className=\"mb-1.5 mr-1 shrink-0\"\n          >\n            <Plus className=\"mr-1.5 h-4 w-4\" />\n            {sectionAction.label}\n          </Button>\n        ) : null}\n      </div>\n\n      {/* Tab content */}\n      <div className=\"pt-6\" role=\"tabpanel\">\n        {children}\n      </div>\n    </div>\n  )\n}\n"],
+  "mappings": ";AA8DI,cAmFU,YAnFV;AA5DJ,YAAY,WAAW;AACvB,SAAS,UAAU;AACnB,SAAS,YAAY;AACrB,SAAS,cAAc;AAEvB;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AA8BP,MAAM,iBAA+C;AAAA,EACnD,OAAO;AAAA,EACP,YAAY;AAAA,EACZ,WAAW;AAAA,EACX,OAAO;AAAA,EACP,WAAW;AAAA,EACX,cAAc;AAAA,EACd,UAAU;AACZ;AAEO,SAAS,iBAAiB,KAA8C;AAC7E,MAAI,CAAC,IAAK,QAAO;AACjB,MAAI,eAAe,GAAG,EAAG,QAAO,eAAe,GAAG;AAClD,SAAO;AACT;AAEA,SAAS,WAAW;AAClB,SACE,oBAAC,UAAK,WAAU,uGAAsG,iBAEtH;AAEJ;AAEA,SAAS,WAAW,EAAE,MAAM,GAAsB;AAChD,MAAI,SAAS,EAAG,QAAO;AACvB,SACE,oBAAC,UAAK,WAAU,qGACb,kBAAQ,MAAM,SAAS,OAC1B;AAEJ;AAEO,SAAS,kBAAkB;AAAA,EAChC;AAAA,EACA;AAAA,EACA,eAAe,CAAC;AAAA,EAChB,cAAc;AAAA,EACd,aAAa;AAAA,EACb,kBAAkB;AAAA,EAClB,aAAa;AAAA,EACb,gBAAgB;AAAA,EAChB;AACF,GAA2B;AACzB,QAAM,IAAI,KAAK;AAEf,QAAM,cAAwB,MAAM;AAAA,IAClC,MAAM;AAAA,MACJ;AAAA,QACE,IAAI;AAAA,QACJ,OAAO,EAAE,0CAA0C,QAAQ;AAAA,QAC3D,MAAM,oBAAC,SAAM,WAAU,UAAS;AAAA,QAChC,OAAO,oBAAC,cAAW,OAAO,aAAa;AAAA,MACzC;AAAA,MACA;AAAA,QACE,IAAI;AAAA,QACJ,OAAO,EAAE,yCAAyC,OAAO;AAAA,QACzD,MAAM,oBAAC,aAAU,WAAU,UAAS;AAAA,QACpC,OAAO,oBAAC,cAAW,OAAO,YAAY;AAAA,MACxC;AAAA,MACA;AAAA,QACE,IAAI;AAAA,QACJ,OAAO,EAAE,+CAA+C,cAAc;AAAA,QACtE,MAAM,oBAAC,SAAM,WAAU,UAAS;AAAA,QAChC,OAAO,oBAAC,cAAW,OAAO,iBAAiB;AAAA,MAC7C;AAAA,MACA;AAAA,QACE,IAAI;AAAA,QACJ,OAAO,EAAE,6CAA6C,WAAW;AAAA,QACjE,MAAM,oBAAC,WAAQ,WAAU,UAAS;AAAA,QAClC,OAAO,oBAAC,YAAS;AAAA,MACnB;AAAA,MACA;AAAA,QACE,IAAI;AAAA,QACJ,OAAO,EAAE,yCAAyC,OAAO;AAAA,QACzD,MAAM,oBAAC,aAAU,WAAU,UAAS;AAAA,QACpC,OAAO,oBAAC,cAAW,OAAO,YAAY;AAAA,MACxC;AAAA,IACF;AAAA,IACA,CAAC,GAAG,aAAa,YAAY,iBAAiB,UAAU;AAAA,EAC1D;AAEA,QAAM,UAAoB,MAAM;AAAA,IAC9B,MAAM;AAAA,MACJ,GAAG;AAAA,MACH,GAAG,aAAa,IAAI,CAAC,SAAS;AAAA,QAC5B,IAAI,IAAI;AAAA,QACR,OAAO,IAAI;AAAA,MACb,EAAE;AAAA,IACJ;AAAA,IACA,CAAC,aAAa,YAAY;AAAA,EAC5B;AAEA,SACE,qBAAC,SAEC;AAAA,yBAAC,SAAI,WAAU,iDAAgD,MAAK,WAAU,cAAY,EAAE,yCAAyC,yBAAyB,GAC5J;AAAA,0BAAC,SAAI,WAAU,iDACZ,kBAAQ,IAAI,CAAC,QAAQ;AACpB,cAAM,WAAW,cAAc,IAAI;AACnC,eACE;AAAA,UAAC;AAAA;AAAA,YAEC,MAAK;AAAA,YACL,SAAQ;AAAA,YACR,MAAK;AAAA,YACL,MAAK;AAAA,YACL,iBAAe;AAAA,YACf,SAAS,MAAM,YAAY,IAAI,EAAE;AAAA,YACjC,WAAW;AAAA,cACT;AAAA,cACA,WACI,oDACA;AAAA,YACN;AAAA,YAEC;AAAA,kBAAI,QAAQ,oBAAC,UAAK,WAAU,UAAU,cAAI,MAAK;AAAA,cAC/C,IAAI;AAAA,cACJ,IAAI;AAAA;AAAA;AAAA,UAhBA,IAAI;AAAA,QAiBX;AAAA,MAEJ,CAAC,GACH;AAAA,MACC,gBACC;AAAA,QAAC;AAAA;AAAA,UACC,MAAK;AAAA,UACL,MAAK;AAAA,UACL,SAAS,cAAc;AAAA,UACvB,UAAU,cAAc;AAAA,UACxB,WAAU;AAAA,UAEV;AAAA,gCAAC,QAAK,WAAU,kBAAiB;AAAA,YAChC,cAAc;AAAA;AAAA;AAAA,MACjB,IACE;AAAA,OACN;AAAA,IAGA,oBAAC,SAAI,WAAU,QAAO,MAAK,YACxB,UACH;AAAA,KACF;AAEJ;",
   "names": []
 }

package/dist/modules/dashboards/api/roles/widgets/route.js

@@ -6,10 +6,7 @@ import { DashboardRoleWidgets } from "@open-mercato/core/modules/dashboards/data
 import { Role } from "@open-mercato/core/modules/auth/data/entities";
 import { roleWidgetSettingsSchema } from "@open-mercato/core/modules/dashboards/data/validators";
 import { loadAllWidgets } from "@open-mercato/core/modules/dashboards/lib/widgets";
-import {
-  resolveWidgetAssignmentReadScope,
-  resolveWidgetAssignmentTargetAccess
-} from "@open-mercato/core/modules/dashboards/lib/widgetAssignmentScope";
+import { resolveWidgetAssignmentReadScope } from "@open-mercato/core/modules/dashboards/lib/widgetAssignmentScope";
 import { hasFeature } from "@open-mercato/shared/security/features";
 import {
   runCrudMutationGuardAfterSuccess,
@@ -64,15 +61,7 @@ async function GET(req) {
     queryOrganizationId: url.searchParams.get("organizationId")
   });
   const role = await em.findOne(Role, { id: roleId, deletedAt: null });
-  const access = resolveWidgetAssignmentTargetAccess({
-    isSuperAdmin: !!acl.isSuperAdmin,
-    scopeTenantId: tenantId,
-    target: role
-  });
-  if (access === "forbidden") {
-    return NextResponse.json({ error: "Forbidden" }, { status: 403 });
-  }
-  if (access === "not-found") {
+  if (!role || tenantId && role.tenantId !== tenantId) {
     return NextResponse.json({ error: "Role not found" }, { status: 404 });
   }
   const records = await em.find(DashboardRoleWidgets, { roleId, deletedAt: null });
@@ -114,15 +103,7 @@ async function PUT(req) {
   const tenantId = auth.tenantId ?? null;
   const organizationId = auth.orgId ?? null;
   const role = await em.findOne(Role, { id: parsed.data.roleId, deletedAt: null });
-  const access = resolveWidgetAssignmentTargetAccess({
-    isSuperAdmin: !!acl.isSuperAdmin,
-    scopeTenantId: tenantId,
-    target: role
-  });
-  if (access === "forbidden") {
-    return NextResponse.json({ error: "Forbidden" }, { status: 403 });
-  }
-  if (access === "not-found") {
+  if (!role || tenantId && role.tenantId !== tenantId) {
     return NextResponse.json({ error: "Role not found" }, { status: 404 });
   }
   const guardResult = await validateCrudMutationGuard(container, {

package/dist/modules/dashboards/api/roles/widgets/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../src/modules/dashboards/api/roles/widgets/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { DashboardRoleWidgets } from '@open-mercato/core/modules/dashboards/data/entities'\nimport { Role } from '@open-mercato/core/modules/auth/data/entities'\nimport { roleWidgetSettingsSchema } from '@open-mercato/core/modules/dashboards/data/validators'\nimport { loadAllWidgets } from '@open-mercato/core/modules/dashboards/lib/widgets'\nimport {\n  resolveWidgetAssignmentReadScope,\n  resolveWidgetAssignmentTargetAccess,\n} from '@open-mercato/core/modules/dashboards/lib/widgetAssignmentScope'\nimport { hasFeature } from '@open-mercato/shared/security/features'\nimport {\n  runCrudMutationGuardAfterSuccess,\n  validateCrudMutationGuard,\n} from '@open-mercato/shared/lib/crud/mutation-guard'\nimport type { OpenApiMethodDoc, OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport {\n  dashboardsTag,\n  dashboardsErrorSchema,\n  dashboardRoleWidgetsResponseSchema,\n  dashboardRoleWidgetsUpdateResponseSchema,\n} from '../../openapi'\n\nconst FEATURE = 'dashboards.admin.assign-widgets'\nconst RESOURCE_KIND = 'dashboards.roleWidgets'\n\nfunction pickBestRecord(records: DashboardRoleWidgets[], tenantId: string | null, organizationId: string | null): DashboardRoleWidgets | null {\n  let best: DashboardRoleWidgets | null = null\n  let bestScore = -1\n  for (const record of records) {\n    if (record.deletedAt) continue\n    if (record.tenantId && tenantId && record.tenantId !== tenantId) continue\n    if (record.tenantId && !tenantId) continue\n    if (record.organizationId && organizationId && record.organizationId !== organizationId) continue\n    if (record.organizationId && !organizationId) continue\n    const score = (record.tenantId ? 1 : 0) + (record.organizationId ? 2 : 0)\n    if (score > bestScore) {\n      best = record\n      bestScore = score\n    }\n  }\n  return best\n}\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: [FEATURE] },\n  PUT: { requireAuth: true, requireFeatures: [FEATURE] },\n}\n\nexport async function GET(req: Request) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth) return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n\n  const url = new URL(req.url)\n  const roleId = url.searchParams.get('roleId')\n  if (!roleId) return NextResponse.json({ error: 'roleId is required' }, { status: 400 })\n\n  const container = await createRequestContainer()\n  const em = container.resolve('em') as any\n  const rbac = container.resolve('rbacService') as any\n  const acl = await rbac.loadAcl(auth.sub, { tenantId: auth.tenantId ?? null, organizationId: auth.orgId ?? null })\n  if (!acl.isSuperAdmin && !hasFeature(acl.features, FEATURE)) {\n    return NextResponse.json({ error: 'Forbidden' }, { status: 403 })\n  }\n\n  const { tenantId, organizationId } = resolveWidgetAssignmentReadScope({\n    auth: { tenantId: auth.tenantId ?? null, orgId: auth.orgId ?? null },\n    isSuperAdmin: !!acl.isSuperAdmin,\n    queryTenantId: url.searchParams.get('tenantId'),\n    queryOrganizationId: url.searchParams.get('organizationId'),\n  })\n\n  const role = await em.findOne(Role, { id: roleId, deletedAt: null })\n  const access = resolveWidgetAssignmentTargetAccess({\n    isSuperAdmin: !!acl.isSuperAdmin,\n    scopeTenantId: tenantId,\n    target: role,\n  })\n  if (access === 'forbidden') {\n    return NextResponse.json({ error: 'Forbidden' }, { status: 403 })\n  }\n  if (access === 'not-found') {\n    return NextResponse.json({ error: 'Role not found' }, { status: 404 })\n  }\n\n  const records = await em.find(DashboardRoleWidgets, { roleId, deletedAt: null })\n  const best = pickBestRecord(records, tenantId, organizationId)\n\n  const response = {\n    widgetIds: best ? best.widgetIdsJson : [],\n    hasCustom: !!best,\n    scope: {\n      tenantId,\n      organizationId,\n    },\n  }\n\n  return NextResponse.json(response)\n}\n\nexport async function PUT(req: Request) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth) return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n\n  let payload: unknown\n  try {\n    payload = await req.json()\n  } catch {\n    return NextResponse.json({ error: 'Invalid JSON body' }, { status: 400 })\n  }\n  const parsed = roleWidgetSettingsSchema.safeParse(payload)\n  if (!parsed.success) {\n    return NextResponse.json({ error: 'Invalid payload', issues: parsed.error.issues }, { status: 400 })\n  }\n\n  const container = await createRequestContainer()\n  const { resolve } = container\n  const em = resolve('em') as any\n  const rbac = resolve('rbacService') as any\n  const acl = await rbac.loadAcl(auth.sub, { tenantId: auth.tenantId ?? null, organizationId: auth.orgId ?? null })\n  if (!acl.isSuperAdmin && !hasFeature(acl.features, FEATURE)) {\n    return NextResponse.json({ error: 'Forbidden' }, { status: 403 })\n  }\n\n  const widgets = await loadAllWidgets()\n  const validWidgetIds = new Set(widgets.map((w) => w.metadata.id))\n  const widgetIds = parsed.data.widgetIds.filter((id) => validWidgetIds.has(id))\n\n  const tenantId = auth.tenantId ?? null\n  const organizationId = auth.orgId ?? null\n\n  const role = await em.findOne(Role, { id: parsed.data.roleId, deletedAt: null })\n  const access = resolveWidgetAssignmentTargetAccess({\n    isSuperAdmin: !!acl.isSuperAdmin,\n    scopeTenantId: tenantId,\n    target: role,\n  })\n  if (access === 'forbidden') {\n    return NextResponse.json({ error: 'Forbidden' }, { status: 403 })\n  }\n  if (access === 'not-found') {\n    return NextResponse.json({ error: 'Role not found' }, { status: 404 })\n  }\n\n  const guardResult = await validateCrudMutationGuard(container, {\n    tenantId: tenantId ?? '',\n    organizationId,\n    userId: String(auth.sub),\n    resourceKind: RESOURCE_KIND,\n    resourceId: parsed.data.roleId,\n    operation: 'update',\n    requestMethod: req.method,\n    requestHeaders: req.headers,\n    mutationPayload: { roleId: parsed.data.roleId, widgetIds },\n  })\n  if (guardResult && !guardResult.ok) {\n    return NextResponse.json(guardResult.body, { status: guardResult.status })\n  }\n\n  let record = await em.findOne(DashboardRoleWidgets, {\n    roleId: parsed.data.roleId,\n    tenantId,\n    organizationId,\n    deletedAt: null,\n  })\n\n  if (!widgetIds.length) {\n    if (record) {\n      await em.remove(record).flush()\n    }\n    if (guardResult?.ok && guardResult.shouldRunAfterSuccess) {\n      await runCrudMutationGuardAfterSuccess(container, {\n        tenantId: tenantId ?? '',\n        organizationId,\n        userId: String(auth.sub),\n        resourceKind: RESOURCE_KIND,\n        resourceId: parsed.data.roleId,\n        operation: 'update',\n        requestMethod: req.method,\n        requestHeaders: req.headers,\n        metadata: guardResult.metadata ?? null,\n      })\n    }\n    return NextResponse.json({ ok: true, widgetIds: [] })\n  }\n\n  if (!record) {\n    record = em.create(DashboardRoleWidgets, {\n      roleId: parsed.data.roleId,\n      tenantId,\n      organizationId,\n      widgetIdsJson: widgetIds,\n    })\n    em.persist(record)\n  } else {\n    record.widgetIdsJson = widgetIds\n  }\n  await em.flush()\n\n  if (guardResult?.ok && guardResult.shouldRunAfterSuccess) {\n    await runCrudMutationGuardAfterSuccess(container, {\n      tenantId: tenantId ?? '',\n      organizationId,\n      userId: String(auth.sub),\n      resourceKind: RESOURCE_KIND,\n      resourceId: parsed.data.roleId,\n      operation: 'update',\n      requestMethod: req.method,\n      requestHeaders: req.headers,\n      metadata: guardResult.metadata ?? null,\n    })\n  }\n\n  return NextResponse.json({ ok: true, widgetIds })\n}\n\nconst roleWidgetsQuerySchema = z.object({\n  roleId: z.string().uuid(),\n  tenantId: z.string().uuid().optional(),\n  organizationId: z.string().uuid().optional(),\n})\n\nconst roleWidgetsGetDoc: OpenApiMethodDoc = {\n  summary: 'Fetch widget assignments for a role',\n  description: 'Returns the widgets explicitly assigned to the given role together with the evaluation scope.',\n  tags: [dashboardsTag],\n  query: roleWidgetsQuerySchema,\n  responses: [\n    { status: 200, description: 'Current widget configuration for the role.', schema: dashboardRoleWidgetsResponseSchema },\n  ],\n  errors: [\n    { status: 400, description: 'Missing role identifier', schema: dashboardsErrorSchema },\n    { status: 401, description: 'Authentication required', schema: dashboardsErrorSchema },\n    { status: 403, description: 'Insufficient permissions to manage role widgets', schema: dashboardsErrorSchema },\n  ],\n}\n\nconst roleWidgetsPutDoc: OpenApiMethodDoc = {\n  summary: 'Update widgets assigned to a role',\n  description: 'Persists the widget list for a role within the provided tenant and organization scope.',\n  tags: [dashboardsTag],\n  requestBody: {\n    contentType: 'application/json',\n    schema: roleWidgetSettingsSchema,\n    description: 'Role identifier and the widget ids that should remain assigned. Scope is derived from the authenticated session.',\n  },\n  responses: [\n    { status: 200, description: 'Widgets updated successfully.', schema: dashboardRoleWidgetsUpdateResponseSchema },\n  ],\n  errors: [\n    { status: 400, description: 'Invalid payload or unknown widgets', schema: dashboardsErrorSchema },\n    { status: 401, description: 'Authentication required', schema: dashboardsErrorSchema },\n    { status: 403, description: 'Insufficient permissions to manage role widgets', schema: dashboardsErrorSchema },\n  ],\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: dashboardsTag,\n  summary: 'Manage dashboard widgets assigned to a role',\n  methods: {\n    GET: roleWidgetsGetDoc,\n    PUT: roleWidgetsPutDoc,\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AACvC,SAAS,4BAA4B;AACrC,SAAS,YAAY;AACrB,SAAS,gCAAgC;AACzC,SAAS,sBAAsB;AAC/B;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,kBAAkB;AAC3B;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAEP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP,MAAM,UAAU;AAChB,MAAM,gBAAgB;AAEtB,SAAS,eAAe,SAAiC,UAAyB,gBAA4D;AAC5I,MAAI,OAAoC;AACxC,MAAI,YAAY;AAChB,aAAW,UAAU,SAAS;AAC5B,QAAI,OAAO,UAAW;AACtB,QAAI,OAAO,YAAY,YAAY,OAAO,aAAa,SAAU;AACjE,QAAI,OAAO,YAAY,CAAC,SAAU;AAClC,QAAI,OAAO,kBAAkB,kBAAkB,OAAO,mBAAmB,eAAgB;AACzF,QAAI,OAAO,kBAAkB,CAAC,eAAgB;AAC9C,UAAM,SAAS,OAAO,WAAW,IAAI,MAAM,OAAO,iBAAiB,IAAI;AACvE,QAAI,QAAQ,WAAW;AACrB,aAAO;AACP,kBAAY;AAAA,IACd;AAAA,EACF;AACA,SAAO;AACT;AAEO,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,OAAO,EAAE;AAAA,EACrD,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,OAAO,EAAE;AACvD;AAEA,eAAsB,IAAI,KAAc;AACtC,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,KAAM,QAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAE9E,QAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,QAAM,SAAS,IAAI,aAAa,IAAI,QAAQ;AAC5C,MAAI,CAAC,OAAQ,QAAO,aAAa,KAAK,EAAE,OAAO,qBAAqB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAEtF,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,QAAM,OAAO,UAAU,QAAQ,aAAa;AAC5C,QAAM,MAAM,MAAM,KAAK,QAAQ,KAAK,KAAK,EAAE,UAAU,KAAK,YAAY,MAAM,gBAAgB,KAAK,SAAS,KAAK,CAAC;AAChH,MAAI,CAAC,IAAI,gBAAgB,CAAC,WAAW,IAAI,UAAU,OAAO,GAAG;AAC3D,WAAO,aAAa,KAAK,EAAE,OAAO,YAAY,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAClE;AAEA,QAAM,EAAE,UAAU,eAAe,IAAI,iCAAiC;AAAA,IACpE,MAAM,EAAE,UAAU,KAAK,YAAY,MAAM,OAAO,KAAK,SAAS,KAAK;AAAA,IACnE,cAAc,CAAC,CAAC,IAAI;AAAA,IACpB,eAAe,IAAI,aAAa,IAAI,UAAU;AAAA,IAC9C,qBAAqB,IAAI,aAAa,IAAI,gBAAgB;AAAA,EAC5D,CAAC;AAED,QAAM,OAAO,MAAM,GAAG,QAAQ,MAAM,EAAE,IAAI,QAAQ,WAAW,KAAK,CAAC;AACnE,QAAM,SAAS,oCAAoC;AAAA,IACjD,cAAc,CAAC,CAAC,IAAI;AAAA,IACpB,eAAe;AAAA,IACf,QAAQ;AAAA,EACV,CAAC;AACD,MAAI,WAAW,aAAa;AAC1B,WAAO,aAAa,KAAK,EAAE,OAAO,YAAY,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAClE;AACA,MAAI,WAAW,aAAa;AAC1B,WAAO,aAAa,KAAK,EAAE,OAAO,iBAAiB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACvE;AAEA,QAAM,UAAU,MAAM,GAAG,KAAK,sBAAsB,EAAE,QAAQ,WAAW,KAAK,CAAC;AAC/E,QAAM,OAAO,eAAe,SAAS,UAAU,cAAc;AAE7D,QAAM,WAAW;AAAA,IACf,WAAW,OAAO,KAAK,gBAAgB,CAAC;AAAA,IACxC,WAAW,CAAC,CAAC;AAAA,IACb,OAAO;AAAA,MACL;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAEA,SAAO,aAAa,KAAK,QAAQ;AACnC;AAEA,eAAsB,IAAI,KAAc;AACtC,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,KAAM,QAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAE9E,MAAI;AACJ,MAAI;AACF,cAAU,MAAM,IAAI,KAAK;AAAA,EAC3B,QAAQ;AACN,WAAO,aAAa,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC1E;AACA,QAAM,SAAS,yBAAyB,UAAU,OAAO;AACzD,MAAI,CAAC,OAAO,SAAS;AACnB,WAAO,aAAa,KAAK,EAAE,OAAO,mBAAmB,QAAQ,OAAO,MAAM,OAAO,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrG;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,EAAE,QAAQ,IAAI;AACpB,QAAM,KAAK,QAAQ,IAAI;AACvB,QAAM,OAAO,QAAQ,aAAa;AAClC,QAAM,MAAM,MAAM,KAAK,QAAQ,KAAK,KAAK,EAAE,UAAU,KAAK,YAAY,MAAM,gBAAgB,KAAK,SAAS,KAAK,CAAC;AAChH,MAAI,CAAC,IAAI,gBAAgB,CAAC,WAAW,IAAI,UAAU,OAAO,GAAG;AAC3D,WAAO,aAAa,KAAK,EAAE,OAAO,YAAY,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAClE;AAEA,QAAM,UAAU,MAAM,eAAe;AACrC,QAAM,iBAAiB,IAAI,IAAI,QAAQ,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC;AAChE,QAAM,YAAY,OAAO,KAAK,UAAU,OAAO,CAAC,OAAO,eAAe,IAAI,EAAE,CAAC;AAE7E,QAAM,WAAW,KAAK,YAAY;AAClC,QAAM,iBAAiB,KAAK,SAAS;AAErC,QAAM,OAAO,MAAM,GAAG,QAAQ,MAAM,EAAE,IAAI,OAAO,KAAK,QAAQ,WAAW,KAAK,CAAC;AAC/E,QAAM,SAAS,oCAAoC;AAAA,IACjD,cAAc,CAAC,CAAC,IAAI;AAAA,IACpB,eAAe;AAAA,IACf,QAAQ;AAAA,EACV,CAAC;AACD,MAAI,WAAW,aAAa;AAC1B,WAAO,aAAa,KAAK,EAAE,OAAO,YAAY,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAClE;AACA,MAAI,WAAW,aAAa;AAC1B,WAAO,aAAa,KAAK,EAAE,OAAO,iBAAiB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACvE;AAEA,QAAM,cAAc,MAAM,0BAA0B,WAAW;AAAA,IAC7D,UAAU,YAAY;AAAA,IACtB;AAAA,IACA,QAAQ,OAAO,KAAK,GAAG;AAAA,IACvB,cAAc;AAAA,IACd,YAAY,OAAO,KAAK;AAAA,IACxB,WAAW;AAAA,IACX,eAAe,IAAI;AAAA,IACnB,gBAAgB,IAAI;AAAA,IACpB,iBAAiB,EAAE,QAAQ,OAAO,KAAK,QAAQ,UAAU;AAAA,EAC3D,CAAC;AACD,MAAI,eAAe,CAAC,YAAY,IAAI;AAClC,WAAO,aAAa,KAAK,YAAY,MAAM,EAAE,QAAQ,YAAY,OAAO,CAAC;AAAA,EAC3E;AAEA,MAAI,SAAS,MAAM,GAAG,QAAQ,sBAAsB;AAAA,IAClD,QAAQ,OAAO,KAAK;AAAA,IACpB;AAAA,IACA;AAAA,IACA,WAAW;AAAA,EACb,CAAC;AAED,MAAI,CAAC,UAAU,QAAQ;AACrB,QAAI,QAAQ;AACV,YAAM,GAAG,OAAO,MAAM,EAAE,MAAM;AAAA,IAChC;AACA,QAAI,aAAa,MAAM,YAAY,uBAAuB;AACxD,YAAM,iCAAiC,WAAW;AAAA,QAChD,UAAU,YAAY;AAAA,QACtB;AAAA,QACA,QAAQ,OAAO,KAAK,GAAG;AAAA,QACvB,cAAc;AAAA,QACd,YAAY,OAAO,KAAK;AAAA,QACxB,WAAW;AAAA,QACX,eAAe,IAAI;AAAA,QACnB,gBAAgB,IAAI;AAAA,QACpB,UAAU,YAAY,YAAY;AAAA,MACpC,CAAC;AAAA,IACH;AACA,WAAO,aAAa,KAAK,EAAE,IAAI,MAAM,WAAW,CAAC,EAAE,CAAC;AAAA,EACtD;AAEA,MAAI,CAAC,QAAQ;AACX,aAAS,GAAG,OAAO,sBAAsB;AAAA,MACvC,QAAQ,OAAO,KAAK;AAAA,MACpB;AAAA,MACA;AAAA,MACA,eAAe;AAAA,IACjB,CAAC;AACD,OAAG,QAAQ,MAAM;AAAA,EACnB,OAAO;AACL,WAAO,gBAAgB;AAAA,EACzB;AACA,QAAM,GAAG,MAAM;AAEf,MAAI,aAAa,MAAM,YAAY,uBAAuB;AACxD,UAAM,iCAAiC,WAAW;AAAA,MAChD,UAAU,YAAY;AAAA,MACtB;AAAA,MACA,QAAQ,OAAO,KAAK,GAAG;AAAA,MACvB,cAAc;AAAA,MACd,YAAY,OAAO,KAAK;AAAA,MACxB,WAAW;AAAA,MACX,eAAe,IAAI;AAAA,MACnB,gBAAgB,IAAI;AAAA,MACpB,UAAU,YAAY,YAAY;AAAA,IACpC,CAAC;AAAA,EACH;AAEA,SAAO,aAAa,KAAK,EAAE,IAAI,MAAM,UAAU,CAAC;AAClD;AAEA,MAAM,yBAAyB,EAAE,OAAO;AAAA,EACtC,QAAQ,EAAE,OAAO,EAAE,KAAK;AAAA,EACxB,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACrC,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAC7C,CAAC;AAED,MAAM,oBAAsC;AAAA,EAC1C,SAAS;AAAA,EACT,aAAa;AAAA,EACb,MAAM,CAAC,aAAa;AAAA,EACpB,OAAO;AAAA,EACP,WAAW;AAAA,IACT,EAAE,QAAQ,KAAK,aAAa,8CAA8C,QAAQ,mCAAmC;AAAA,EACvH;AAAA,EACA,QAAQ;AAAA,IACN,EAAE,QAAQ,KAAK,aAAa,2BAA2B,QAAQ,sBAAsB;AAAA,IACrF,EAAE,QAAQ,KAAK,aAAa,2BAA2B,QAAQ,sBAAsB;AAAA,IACrF,EAAE,QAAQ,KAAK,aAAa,mDAAmD,QAAQ,sBAAsB;AAAA,EAC/G;AACF;AAEA,MAAM,oBAAsC;AAAA,EAC1C,SAAS;AAAA,EACT,aAAa;AAAA,EACb,MAAM,CAAC,aAAa;AAAA,EACpB,aAAa;AAAA,IACX,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,aAAa;AAAA,EACf;AAAA,EACA,WAAW;AAAA,IACT,EAAE,QAAQ,KAAK,aAAa,iCAAiC,QAAQ,yCAAyC;AAAA,EAChH;AAAA,EACA,QAAQ;AAAA,IACN,EAAE,QAAQ,KAAK,aAAa,sCAAsC,QAAQ,sBAAsB;AAAA,IAChG,EAAE,QAAQ,KAAK,aAAa,2BAA2B,QAAQ,sBAAsB;AAAA,IACrF,EAAE,QAAQ,KAAK,aAAa,mDAAmD,QAAQ,sBAAsB;AAAA,EAC/G;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,IACL,KAAK;AAAA,EACP;AACF;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { DashboardRoleWidgets } from '@open-mercato/core/modules/dashboards/data/entities'\nimport { Role } from '@open-mercato/core/modules/auth/data/entities'\nimport { roleWidgetSettingsSchema } from '@open-mercato/core/modules/dashboards/data/validators'\nimport { loadAllWidgets } from '@open-mercato/core/modules/dashboards/lib/widgets'\nimport { resolveWidgetAssignmentReadScope } from '@open-mercato/core/modules/dashboards/lib/widgetAssignmentScope'\nimport { hasFeature } from '@open-mercato/shared/security/features'\nimport {\n  runCrudMutationGuardAfterSuccess,\n  validateCrudMutationGuard,\n} from '@open-mercato/shared/lib/crud/mutation-guard'\nimport type { OpenApiMethodDoc, OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport {\n  dashboardsTag,\n  dashboardsErrorSchema,\n  dashboardRoleWidgetsResponseSchema,\n  dashboardRoleWidgetsUpdateResponseSchema,\n} from '../../openapi'\n\nconst FEATURE = 'dashboards.admin.assign-widgets'\nconst RESOURCE_KIND = 'dashboards.roleWidgets'\n\nfunction pickBestRecord(records: DashboardRoleWidgets[], tenantId: string | null, organizationId: string | null): DashboardRoleWidgets | null {\n  let best: DashboardRoleWidgets | null = null\n  let bestScore = -1\n  for (const record of records) {\n    if (record.deletedAt) continue\n    if (record.tenantId && tenantId && record.tenantId !== tenantId) continue\n    if (record.tenantId && !tenantId) continue\n    if (record.organizationId && organizationId && record.organizationId !== organizationId) continue\n    if (record.organizationId && !organizationId) continue\n    const score = (record.tenantId ? 1 : 0) + (record.organizationId ? 2 : 0)\n    if (score > bestScore) {\n      best = record\n      bestScore = score\n    }\n  }\n  return best\n}\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: [FEATURE] },\n  PUT: { requireAuth: true, requireFeatures: [FEATURE] },\n}\n\nexport async function GET(req: Request) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth) return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n\n  const url = new URL(req.url)\n  const roleId = url.searchParams.get('roleId')\n  if (!roleId) return NextResponse.json({ error: 'roleId is required' }, { status: 400 })\n\n  const container = await createRequestContainer()\n  const em = container.resolve('em') as any\n  const rbac = container.resolve('rbacService') as any\n  const acl = await rbac.loadAcl(auth.sub, { tenantId: auth.tenantId ?? null, organizationId: auth.orgId ?? null })\n  if (!acl.isSuperAdmin && !hasFeature(acl.features, FEATURE)) {\n    return NextResponse.json({ error: 'Forbidden' }, { status: 403 })\n  }\n\n  const { tenantId, organizationId } = resolveWidgetAssignmentReadScope({\n    auth: { tenantId: auth.tenantId ?? null, orgId: auth.orgId ?? null },\n    isSuperAdmin: !!acl.isSuperAdmin,\n    queryTenantId: url.searchParams.get('tenantId'),\n    queryOrganizationId: url.searchParams.get('organizationId'),\n  })\n\n  const role = await em.findOne(Role, { id: roleId, deletedAt: null })\n  if (!role || (tenantId && role.tenantId !== tenantId)) {\n    return NextResponse.json({ error: 'Role not found' }, { status: 404 })\n  }\n\n  const records = await em.find(DashboardRoleWidgets, { roleId, deletedAt: null })\n  const best = pickBestRecord(records, tenantId, organizationId)\n\n  const response = {\n    widgetIds: best ? best.widgetIdsJson : [],\n    hasCustom: !!best,\n    scope: {\n      tenantId,\n      organizationId,\n    },\n  }\n\n  return NextResponse.json(response)\n}\n\nexport async function PUT(req: Request) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth) return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n\n  let payload: unknown\n  try {\n    payload = await req.json()\n  } catch {\n    return NextResponse.json({ error: 'Invalid JSON body' }, { status: 400 })\n  }\n  const parsed = roleWidgetSettingsSchema.safeParse(payload)\n  if (!parsed.success) {\n    return NextResponse.json({ error: 'Invalid payload', issues: parsed.error.issues }, { status: 400 })\n  }\n\n  const container = await createRequestContainer()\n  const { resolve } = container\n  const em = resolve('em') as any\n  const rbac = resolve('rbacService') as any\n  const acl = await rbac.loadAcl(auth.sub, { tenantId: auth.tenantId ?? null, organizationId: auth.orgId ?? null })\n  if (!acl.isSuperAdmin && !hasFeature(acl.features, FEATURE)) {\n    return NextResponse.json({ error: 'Forbidden' }, { status: 403 })\n  }\n\n  const widgets = await loadAllWidgets()\n  const validWidgetIds = new Set(widgets.map((w) => w.metadata.id))\n  const widgetIds = parsed.data.widgetIds.filter((id) => validWidgetIds.has(id))\n\n  const tenantId = auth.tenantId ?? null\n  const organizationId = auth.orgId ?? null\n\n  const role = await em.findOne(Role, { id: parsed.data.roleId, deletedAt: null })\n  if (!role || (tenantId && role.tenantId !== tenantId)) {\n    return NextResponse.json({ error: 'Role not found' }, { status: 404 })\n  }\n\n  const guardResult = await validateCrudMutationGuard(container, {\n    tenantId: tenantId ?? '',\n    organizationId,\n    userId: String(auth.sub),\n    resourceKind: RESOURCE_KIND,\n    resourceId: parsed.data.roleId,\n    operation: 'update',\n    requestMethod: req.method,\n    requestHeaders: req.headers,\n    mutationPayload: { roleId: parsed.data.roleId, widgetIds },\n  })\n  if (guardResult && !guardResult.ok) {\n    return NextResponse.json(guardResult.body, { status: guardResult.status })\n  }\n\n  let record = await em.findOne(DashboardRoleWidgets, {\n    roleId: parsed.data.roleId,\n    tenantId,\n    organizationId,\n    deletedAt: null,\n  })\n\n  if (!widgetIds.length) {\n    if (record) {\n      await em.remove(record).flush()\n    }\n    if (guardResult?.ok && guardResult.shouldRunAfterSuccess) {\n      await runCrudMutationGuardAfterSuccess(container, {\n        tenantId: tenantId ?? '',\n        organizationId,\n        userId: String(auth.sub),\n        resourceKind: RESOURCE_KIND,\n        resourceId: parsed.data.roleId,\n        operation: 'update',\n        requestMethod: req.method,\n        requestHeaders: req.headers,\n        metadata: guardResult.metadata ?? null,\n      })\n    }\n    return NextResponse.json({ ok: true, widgetIds: [] })\n  }\n\n  if (!record) {\n    record = em.create(DashboardRoleWidgets, {\n      roleId: parsed.data.roleId,\n      tenantId,\n      organizationId,\n      widgetIdsJson: widgetIds,\n    })\n    em.persist(record)\n  } else {\n    record.widgetIdsJson = widgetIds\n  }\n  await em.flush()\n\n  if (guardResult?.ok && guardResult.shouldRunAfterSuccess) {\n    await runCrudMutationGuardAfterSuccess(container, {\n      tenantId: tenantId ?? '',\n      organizationId,\n      userId: String(auth.sub),\n      resourceKind: RESOURCE_KIND,\n      resourceId: parsed.data.roleId,\n      operation: 'update',\n      requestMethod: req.method,\n      requestHeaders: req.headers,\n      metadata: guardResult.metadata ?? null,\n    })\n  }\n\n  return NextResponse.json({ ok: true, widgetIds })\n}\n\nconst roleWidgetsQuerySchema = z.object({\n  roleId: z.string().uuid(),\n  tenantId: z.string().uuid().optional(),\n  organizationId: z.string().uuid().optional(),\n})\n\nconst roleWidgetsGetDoc: OpenApiMethodDoc = {\n  summary: 'Fetch widget assignments for a role',\n  description: 'Returns the widgets explicitly assigned to the given role together with the evaluation scope.',\n  tags: [dashboardsTag],\n  query: roleWidgetsQuerySchema,\n  responses: [\n    { status: 200, description: 'Current widget configuration for the role.', schema: dashboardRoleWidgetsResponseSchema },\n  ],\n  errors: [\n    { status: 400, description: 'Missing role identifier', schema: dashboardsErrorSchema },\n    { status: 401, description: 'Authentication required', schema: dashboardsErrorSchema },\n    { status: 403, description: 'Insufficient permissions to manage role widgets', schema: dashboardsErrorSchema },\n  ],\n}\n\nconst roleWidgetsPutDoc: OpenApiMethodDoc = {\n  summary: 'Update widgets assigned to a role',\n  description: 'Persists the widget list for a role within the provided tenant and organization scope.',\n  tags: [dashboardsTag],\n  requestBody: {\n    contentType: 'application/json',\n    schema: roleWidgetSettingsSchema,\n    description: 'Role identifier and the widget ids that should remain assigned. Scope is derived from the authenticated session.',\n  },\n  responses: [\n    { status: 200, description: 'Widgets updated successfully.', schema: dashboardRoleWidgetsUpdateResponseSchema },\n  ],\n  errors: [\n    { status: 400, description: 'Invalid payload or unknown widgets', schema: dashboardsErrorSchema },\n    { status: 401, description: 'Authentication required', schema: dashboardsErrorSchema },\n    { status: 403, description: 'Insufficient permissions to manage role widgets', schema: dashboardsErrorSchema },\n  ],\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: dashboardsTag,\n  summary: 'Manage dashboard widgets assigned to a role',\n  methods: {\n    GET: roleWidgetsGetDoc,\n    PUT: roleWidgetsPutDoc,\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AACvC,SAAS,4BAA4B;AACrC,SAAS,YAAY;AACrB,SAAS,gCAAgC;AACzC,SAAS,sBAAsB;AAC/B,SAAS,wCAAwC;AACjD,SAAS,kBAAkB;AAC3B;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAEP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP,MAAM,UAAU;AAChB,MAAM,gBAAgB;AAEtB,SAAS,eAAe,SAAiC,UAAyB,gBAA4D;AAC5I,MAAI,OAAoC;AACxC,MAAI,YAAY;AAChB,aAAW,UAAU,SAAS;AAC5B,QAAI,OAAO,UAAW;AACtB,QAAI,OAAO,YAAY,YAAY,OAAO,aAAa,SAAU;AACjE,QAAI,OAAO,YAAY,CAAC,SAAU;AAClC,QAAI,OAAO,kBAAkB,kBAAkB,OAAO,mBAAmB,eAAgB;AACzF,QAAI,OAAO,kBAAkB,CAAC,eAAgB;AAC9C,UAAM,SAAS,OAAO,WAAW,IAAI,MAAM,OAAO,iBAAiB,IAAI;AACvE,QAAI,QAAQ,WAAW;AACrB,aAAO;AACP,kBAAY;AAAA,IACd;AAAA,EACF;AACA,SAAO;AACT;AAEO,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,OAAO,EAAE;AAAA,EACrD,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,OAAO,EAAE;AACvD;AAEA,eAAsB,IAAI,KAAc;AACtC,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,KAAM,QAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAE9E,QAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,QAAM,SAAS,IAAI,aAAa,IAAI,QAAQ;AAC5C,MAAI,CAAC,OAAQ,QAAO,aAAa,KAAK,EAAE,OAAO,qBAAqB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAEtF,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,QAAM,OAAO,UAAU,QAAQ,aAAa;AAC5C,QAAM,MAAM,MAAM,KAAK,QAAQ,KAAK,KAAK,EAAE,UAAU,KAAK,YAAY,MAAM,gBAAgB,KAAK,SAAS,KAAK,CAAC;AAChH,MAAI,CAAC,IAAI,gBAAgB,CAAC,WAAW,IAAI,UAAU,OAAO,GAAG;AAC3D,WAAO,aAAa,KAAK,EAAE,OAAO,YAAY,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAClE;AAEA,QAAM,EAAE,UAAU,eAAe,IAAI,iCAAiC;AAAA,IACpE,MAAM,EAAE,UAAU,KAAK,YAAY,MAAM,OAAO,KAAK,SAAS,KAAK;AAAA,IACnE,cAAc,CAAC,CAAC,IAAI;AAAA,IACpB,eAAe,IAAI,aAAa,IAAI,UAAU;AAAA,IAC9C,qBAAqB,IAAI,aAAa,IAAI,gBAAgB;AAAA,EAC5D,CAAC;AAED,QAAM,OAAO,MAAM,GAAG,QAAQ,MAAM,EAAE,IAAI,QAAQ,WAAW,KAAK,CAAC;AACnE,MAAI,CAAC,QAAS,YAAY,KAAK,aAAa,UAAW;AACrD,WAAO,aAAa,KAAK,EAAE,OAAO,iBAAiB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACvE;AAEA,QAAM,UAAU,MAAM,GAAG,KAAK,sBAAsB,EAAE,QAAQ,WAAW,KAAK,CAAC;AAC/E,QAAM,OAAO,eAAe,SAAS,UAAU,cAAc;AAE7D,QAAM,WAAW;AAAA,IACf,WAAW,OAAO,KAAK,gBAAgB,CAAC;AAAA,IACxC,WAAW,CAAC,CAAC;AAAA,IACb,OAAO;AAAA,MACL;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAEA,SAAO,aAAa,KAAK,QAAQ;AACnC;AAEA,eAAsB,IAAI,KAAc;AACtC,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,KAAM,QAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAE9E,MAAI;AACJ,MAAI;AACF,cAAU,MAAM,IAAI,KAAK;AAAA,EAC3B,QAAQ;AACN,WAAO,aAAa,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC1E;AACA,QAAM,SAAS,yBAAyB,UAAU,OAAO;AACzD,MAAI,CAAC,OAAO,SAAS;AACnB,WAAO,aAAa,KAAK,EAAE,OAAO,mBAAmB,QAAQ,OAAO,MAAM,OAAO,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrG;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,EAAE,QAAQ,IAAI;AACpB,QAAM,KAAK,QAAQ,IAAI;AACvB,QAAM,OAAO,QAAQ,aAAa;AAClC,QAAM,MAAM,MAAM,KAAK,QAAQ,KAAK,KAAK,EAAE,UAAU,KAAK,YAAY,MAAM,gBAAgB,KAAK,SAAS,KAAK,CAAC;AAChH,MAAI,CAAC,IAAI,gBAAgB,CAAC,WAAW,IAAI,UAAU,OAAO,GAAG;AAC3D,WAAO,aAAa,KAAK,EAAE,OAAO,YAAY,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAClE;AAEA,QAAM,UAAU,MAAM,eAAe;AACrC,QAAM,iBAAiB,IAAI,IAAI,QAAQ,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC;AAChE,QAAM,YAAY,OAAO,KAAK,UAAU,OAAO,CAAC,OAAO,eAAe,IAAI,EAAE,CAAC;AAE7E,QAAM,WAAW,KAAK,YAAY;AAClC,QAAM,iBAAiB,KAAK,SAAS;AAErC,QAAM,OAAO,MAAM,GAAG,QAAQ,MAAM,EAAE,IAAI,OAAO,KAAK,QAAQ,WAAW,KAAK,CAAC;AAC/E,MAAI,CAAC,QAAS,YAAY,KAAK,aAAa,UAAW;AACrD,WAAO,aAAa,KAAK,EAAE,OAAO,iBAAiB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACvE;AAEA,QAAM,cAAc,MAAM,0BAA0B,WAAW;AAAA,IAC7D,UAAU,YAAY;AAAA,IACtB;AAAA,IACA,QAAQ,OAAO,KAAK,GAAG;AAAA,IACvB,cAAc;AAAA,IACd,YAAY,OAAO,KAAK;AAAA,IACxB,WAAW;AAAA,IACX,eAAe,IAAI;AAAA,IACnB,gBAAgB,IAAI;AAAA,IACpB,iBAAiB,EAAE,QAAQ,OAAO,KAAK,QAAQ,UAAU;AAAA,EAC3D,CAAC;AACD,MAAI,eAAe,CAAC,YAAY,IAAI;AAClC,WAAO,aAAa,KAAK,YAAY,MAAM,EAAE,QAAQ,YAAY,OAAO,CAAC;AAAA,EAC3E;AAEA,MAAI,SAAS,MAAM,GAAG,QAAQ,sBAAsB;AAAA,IAClD,QAAQ,OAAO,KAAK;AAAA,IACpB;AAAA,IACA;AAAA,IACA,WAAW;AAAA,EACb,CAAC;AAED,MAAI,CAAC,UAAU,QAAQ;AACrB,QAAI,QAAQ;AACV,YAAM,GAAG,OAAO,MAAM,EAAE,MAAM;AAAA,IAChC;AACA,QAAI,aAAa,MAAM,YAAY,uBAAuB;AACxD,YAAM,iCAAiC,WAAW;AAAA,QAChD,UAAU,YAAY;AAAA,QACtB;AAAA,QACA,QAAQ,OAAO,KAAK,GAAG;AAAA,QACvB,cAAc;AAAA,QACd,YAAY,OAAO,KAAK;AAAA,QACxB,WAAW;AAAA,QACX,eAAe,IAAI;AAAA,QACnB,gBAAgB,IAAI;AAAA,QACpB,UAAU,YAAY,YAAY;AAAA,MACpC,CAAC;AAAA,IACH;AACA,WAAO,aAAa,KAAK,EAAE,IAAI,MAAM,WAAW,CAAC,EAAE,CAAC;AAAA,EACtD;AAEA,MAAI,CAAC,QAAQ;AACX,aAAS,GAAG,OAAO,sBAAsB;AAAA,MACvC,QAAQ,OAAO,KAAK;AAAA,MACpB;AAAA,MACA;AAAA,MACA,eAAe;AAAA,IACjB,CAAC;AACD,OAAG,QAAQ,MAAM;AAAA,EACnB,OAAO;AACL,WAAO,gBAAgB;AAAA,EACzB;AACA,QAAM,GAAG,MAAM;AAEf,MAAI,aAAa,MAAM,YAAY,uBAAuB;AACxD,UAAM,iCAAiC,WAAW;AAAA,MAChD,UAAU,YAAY;AAAA,MACtB;AAAA,MACA,QAAQ,OAAO,KAAK,GAAG;AAAA,MACvB,cAAc;AAAA,MACd,YAAY,OAAO,KAAK;AAAA,MACxB,WAAW;AAAA,MACX,eAAe,IAAI;AAAA,MACnB,gBAAgB,IAAI;AAAA,MACpB,UAAU,YAAY,YAAY;AAAA,IACpC,CAAC;AAAA,EACH;AAEA,SAAO,aAAa,KAAK,EAAE,IAAI,MAAM,UAAU,CAAC;AAClD;AAEA,MAAM,yBAAyB,EAAE,OAAO;AAAA,EACtC,QAAQ,EAAE,OAAO,EAAE,KAAK;AAAA,EACxB,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACrC,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAC7C,CAAC;AAED,MAAM,oBAAsC;AAAA,EAC1C,SAAS;AAAA,EACT,aAAa;AAAA,EACb,MAAM,CAAC,aAAa;AAAA,EACpB,OAAO;AAAA,EACP,WAAW;AAAA,IACT,EAAE,QAAQ,KAAK,aAAa,8CAA8C,QAAQ,mCAAmC;AAAA,EACvH;AAAA,EACA,QAAQ;AAAA,IACN,EAAE,QAAQ,KAAK,aAAa,2BAA2B,QAAQ,sBAAsB;AAAA,IACrF,EAAE,QAAQ,KAAK,aAAa,2BAA2B,QAAQ,sBAAsB;AAAA,IACrF,EAAE,QAAQ,KAAK,aAAa,mDAAmD,QAAQ,sBAAsB;AAAA,EAC/G;AACF;AAEA,MAAM,oBAAsC;AAAA,EAC1C,SAAS;AAAA,EACT,aAAa;AAAA,EACb,MAAM,CAAC,aAAa;AAAA,EACpB,aAAa;AAAA,IACX,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,aAAa;AAAA,EACf;AAAA,EACA,WAAW;AAAA,IACT,EAAE,QAAQ,KAAK,aAAa,iCAAiC,QAAQ,yCAAyC;AAAA,EAChH;AAAA,EACA,QAAQ;AAAA,IACN,EAAE,QAAQ,KAAK,aAAa,sCAAsC,QAAQ,sBAAsB;AAAA,IAChG,EAAE,QAAQ,KAAK,aAAa,2BAA2B,QAAQ,sBAAsB;AAAA,IACrF,EAAE,QAAQ,KAAK,aAAa,mDAAmD,QAAQ,sBAAsB;AAAA,EAC/G;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,IACL,KAAK;AAAA,EACP;AACF;",
   "names": []
 }

package/dist/modules/dashboards/api/users/widgets/route.js

@@ -7,10 +7,7 @@ import { User } from "@open-mercato/core/modules/auth/data/entities";
 import { userWidgetSettingsSchema } from "@open-mercato/core/modules/dashboards/data/validators";
 import { loadAllWidgets } from "@open-mercato/core/modules/dashboards/lib/widgets";
 import { resolveAllowedWidgetIds } from "@open-mercato/core/modules/dashboards/lib/access";
-import {
-  resolveWidgetAssignmentReadScope,
-  resolveWidgetAssignmentTargetAccess
-} from "@open-mercato/core/modules/dashboards/lib/widgetAssignmentScope";
+import { resolveWidgetAssignmentReadScope } from "@open-mercato/core/modules/dashboards/lib/widgetAssignmentScope";
 import { hasFeature } from "@open-mercato/shared/security/features";
 import {
   runCrudMutationGuardAfterSuccess,
@@ -48,15 +45,7 @@ async function GET(req) {
     queryOrganizationId: url.searchParams.get("organizationId")
   });
   const targetUserForRead = await em.findOne(User, { id: userId, deletedAt: null });
-  const readAccess = resolveWidgetAssignmentTargetAccess({
-    isSuperAdmin: !!acl.isSuperAdmin,
-    scopeTenantId: tenantId,
-    target: targetUserForRead
-  });
-  if (readAccess === "forbidden") {
-    return NextResponse.json({ error: "Forbidden" }, { status: 403 });
-  }
-  if (readAccess === "not-found") {
+  if (!targetUserForRead || tenantId && (targetUserForRead.tenantId ?? null) !== tenantId) {
     return NextResponse.json({ error: "User not found" }, { status: 404 });
   }
   const widgets = await loadAllWidgets();
@@ -114,15 +103,7 @@ async function PUT(req) {
   const tenantId = auth.tenantId ?? null;
   const organizationId = auth.orgId ?? null;
   const targetUser = await em.findOne(User, { id: parsed.data.userId, deletedAt: null });
-  const writeAccess = resolveWidgetAssignmentTargetAccess({
-    isSuperAdmin: !!acl.isSuperAdmin,
-    scopeTenantId: tenantId,
-    target: targetUser
-  });
-  if (writeAccess === "forbidden") {
-    return NextResponse.json({ error: "Forbidden" }, { status: 403 });
-  }
-  if (writeAccess === "not-found") {
+  if (!targetUser || tenantId && (targetUser.tenantId ?? null) !== tenantId) {
     return NextResponse.json({ error: "User not found" }, { status: 404 });
   }
   const guardResult = await validateCrudMutationGuard(container, {

package/dist/modules/dashboards/api/users/widgets/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../src/modules/dashboards/api/users/widgets/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { DashboardUserWidgets } from '@open-mercato/core/modules/dashboards/data/entities'\nimport { User } from '@open-mercato/core/modules/auth/data/entities'\nimport { userWidgetSettingsSchema } from '@open-mercato/core/modules/dashboards/data/validators'\nimport { loadAllWidgets } from '@open-mercato/core/modules/dashboards/lib/widgets'\nimport { resolveAllowedWidgetIds } from '@open-mercato/core/modules/dashboards/lib/access'\nimport {\n  resolveWidgetAssignmentReadScope,\n  resolveWidgetAssignmentTargetAccess,\n} from '@open-mercato/core/modules/dashboards/lib/widgetAssignmentScope'\nimport { hasFeature } from '@open-mercato/shared/security/features'\nimport {\n  runCrudMutationGuardAfterSuccess,\n  validateCrudMutationGuard,\n} from '@open-mercato/shared/lib/crud/mutation-guard'\nimport type { OpenApiMethodDoc, OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport {\n  dashboardsTag,\n  dashboardsErrorSchema,\n  dashboardUserWidgetsResponseSchema,\n  dashboardUserWidgetsUpdateResponseSchema,\n} from '../../openapi'\n\nconst FEATURE = 'dashboards.admin.assign-widgets'\nconst RESOURCE_KIND = 'dashboards.userWidgets'\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: [FEATURE] },\n  PUT: { requireAuth: true, requireFeatures: [FEATURE] },\n}\n\nexport async function GET(req: Request) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth) return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n\n  const url = new URL(req.url)\n  const userId = url.searchParams.get('userId')\n  if (!userId) return NextResponse.json({ error: 'userId is required' }, { status: 400 })\n\n  const container = await createRequestContainer()\n  const em = container.resolve('em') as any\n  const rbac = container.resolve('rbacService') as any\n  const acl = await rbac.loadAcl(auth.sub, { tenantId: auth.tenantId ?? null, organizationId: auth.orgId ?? null })\n  if (!acl.isSuperAdmin && !hasFeature(acl.features, FEATURE)) {\n    return NextResponse.json({ error: 'Forbidden' }, { status: 403 })\n  }\n\n  const { tenantId, organizationId } = resolveWidgetAssignmentReadScope({\n    auth: { tenantId: auth.tenantId ?? null, orgId: auth.orgId ?? null },\n    isSuperAdmin: !!acl.isSuperAdmin,\n    queryTenantId: url.searchParams.get('tenantId'),\n    queryOrganizationId: url.searchParams.get('organizationId'),\n  })\n\n  const targetUserForRead = await em.findOne(User, { id: userId, deletedAt: null })\n  const readAccess = resolveWidgetAssignmentTargetAccess({\n    isSuperAdmin: !!acl.isSuperAdmin,\n    scopeTenantId: tenantId,\n    target: targetUserForRead,\n  })\n  if (readAccess === 'forbidden') {\n    return NextResponse.json({ error: 'Forbidden' }, { status: 403 })\n  }\n  if (readAccess === 'not-found') {\n    return NextResponse.json({ error: 'User not found' }, { status: 404 })\n  }\n\n  const widgets = await loadAllWidgets()\n  const targetAcl = await rbac.loadAcl(userId, { tenantId, organizationId })\n  const allowed = await resolveAllowedWidgetIds(\n    em,\n    {\n      userId,\n      tenantId,\n      organizationId,\n      features: targetAcl.features ?? [],\n      isSuperAdmin: !!targetAcl.isSuperAdmin,\n    },\n    widgets,\n  )\n\n  const record = await em.findOne(DashboardUserWidgets, {\n    userId,\n    tenantId,\n    organizationId,\n    deletedAt: null,\n  })\n\n  const response = {\n    mode: record ? record.mode : 'inherit',\n    widgetIds: record && record.mode === 'override' ? record.widgetIdsJson : [],\n    hasCustom: !!record && record.mode === 'override',\n    effectiveWidgetIds: allowed,\n    scope: { tenantId, organizationId },\n  }\n\n  return NextResponse.json(response)\n}\n\nexport async function PUT(req: Request) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth) return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n\n  let payload: unknown\n  try {\n    payload = await req.json()\n  } catch {\n    return NextResponse.json({ error: 'Invalid JSON body' }, { status: 400 })\n  }\n  const parsed = userWidgetSettingsSchema.safeParse(payload)\n  if (!parsed.success) {\n    return NextResponse.json({ error: 'Invalid payload', issues: parsed.error.issues }, { status: 400 })\n  }\n\n  const container = await createRequestContainer()\n  const { resolve } = container\n  const em = resolve('em') as any\n  const rbac = resolve('rbacService') as any\n  const acl = await rbac.loadAcl(auth.sub, { tenantId: auth.tenantId ?? null, organizationId: auth.orgId ?? null })\n  if (!acl.isSuperAdmin && !hasFeature(acl.features, FEATURE)) {\n    return NextResponse.json({ error: 'Forbidden' }, { status: 403 })\n  }\n\n  const widgets = await loadAllWidgets()\n  const validWidgetIds = new Set(widgets.map((w) => w.metadata.id))\n  const widgetIds = parsed.data.widgetIds.filter((id) => validWidgetIds.has(id))\n\n  const tenantId = auth.tenantId ?? null\n  const organizationId = auth.orgId ?? null\n\n  const targetUser = await em.findOne(User, { id: parsed.data.userId, deletedAt: null })\n  const writeAccess = resolveWidgetAssignmentTargetAccess({\n    isSuperAdmin: !!acl.isSuperAdmin,\n    scopeTenantId: tenantId,\n    target: targetUser,\n  })\n  if (writeAccess === 'forbidden') {\n    return NextResponse.json({ error: 'Forbidden' }, { status: 403 })\n  }\n  if (writeAccess === 'not-found') {\n    return NextResponse.json({ error: 'User not found' }, { status: 404 })\n  }\n\n  const guardResult = await validateCrudMutationGuard(container, {\n    tenantId: tenantId ?? '',\n    organizationId,\n    userId: String(auth.sub),\n    resourceKind: RESOURCE_KIND,\n    resourceId: parsed.data.userId,\n    operation: 'update',\n    requestMethod: req.method,\n    requestHeaders: req.headers,\n    mutationPayload: { userId: parsed.data.userId, mode: parsed.data.mode, widgetIds },\n  })\n  if (guardResult && !guardResult.ok) {\n    return NextResponse.json(guardResult.body, { status: guardResult.status })\n  }\n\n  let record = await em.findOne(DashboardUserWidgets, {\n    userId: parsed.data.userId,\n    tenantId,\n    organizationId,\n    deletedAt: null,\n  })\n\n  if (parsed.data.mode === 'inherit') {\n    if (record) {\n      await em.remove(record).flush()\n    }\n    if (guardResult?.ok && guardResult.shouldRunAfterSuccess) {\n      await runCrudMutationGuardAfterSuccess(container, {\n        tenantId: tenantId ?? '',\n        organizationId,\n        userId: String(auth.sub),\n        resourceKind: RESOURCE_KIND,\n        resourceId: parsed.data.userId,\n        operation: 'update',\n        requestMethod: req.method,\n        requestHeaders: req.headers,\n        metadata: guardResult.metadata ?? null,\n      })\n    }\n    return NextResponse.json({ ok: true, mode: 'inherit', widgetIds: [] })\n  }\n\n  if (!record) {\n    record = em.create(DashboardUserWidgets, {\n      userId: parsed.data.userId,\n      tenantId,\n      organizationId,\n      mode: 'override',\n      widgetIdsJson: widgetIds,\n    })\n    em.persist(record)\n  } else {\n    record.mode = 'override'\n    record.widgetIdsJson = widgetIds\n  }\n  await em.flush()\n\n  if (guardResult?.ok && guardResult.shouldRunAfterSuccess) {\n    await runCrudMutationGuardAfterSuccess(container, {\n      tenantId: tenantId ?? '',\n      organizationId,\n      userId: String(auth.sub),\n      resourceKind: RESOURCE_KIND,\n      resourceId: parsed.data.userId,\n      operation: 'update',\n      requestMethod: req.method,\n      requestHeaders: req.headers,\n      metadata: guardResult.metadata ?? null,\n    })\n  }\n\n  return NextResponse.json({ ok: true, mode: 'override', widgetIds })\n}\n\nconst userWidgetsQuerySchema = z.object({\n  userId: z.string().uuid(),\n  tenantId: z.string().uuid().optional(),\n  organizationId: z.string().uuid().optional(),\n})\n\nconst userWidgetsGetDoc: OpenApiMethodDoc = {\n  summary: 'Read widget overrides for a user',\n  description: 'Returns the widgets inherited and explicitly configured for the requested user within the current scope.',\n  tags: [dashboardsTag],\n  query: userWidgetsQuerySchema,\n  responses: [\n    { status: 200, description: 'Widget settings for the user.', schema: dashboardUserWidgetsResponseSchema },\n  ],\n  errors: [\n    { status: 400, description: 'Missing user identifier', schema: dashboardsErrorSchema },\n    { status: 401, description: 'Authentication required', schema: dashboardsErrorSchema },\n    { status: 403, description: 'Insufficient permissions to manage user widgets', schema: dashboardsErrorSchema },\n  ],\n}\n\nconst userWidgetsPutDoc: OpenApiMethodDoc = {\n  summary: 'Update user-specific dashboard widgets',\n  description: 'Sets the widget override mode and allowed widgets for a user. Passing `mode: inherit` clears overrides.',\n  tags: [dashboardsTag],\n  requestBody: {\n    contentType: 'application/json',\n    schema: userWidgetSettingsSchema,\n    description: 'User identifier, override mode, and widget ids. Scope is derived from the authenticated session.',\n  },\n  responses: [\n    { status: 200, description: 'Overrides saved.', schema: dashboardUserWidgetsUpdateResponseSchema },\n  ],\n  errors: [\n    { status: 400, description: 'Invalid payload or unknown widgets', schema: dashboardsErrorSchema },\n    { status: 401, description: 'Authentication required', schema: dashboardsErrorSchema },\n    { status: 403, description: 'Insufficient permissions to manage user widgets', schema: dashboardsErrorSchema },\n  ],\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: dashboardsTag,\n  summary: 'Manage user-level dashboard widgets',\n  methods: {\n    GET: userWidgetsGetDoc,\n    PUT: userWidgetsPutDoc,\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AACvC,SAAS,4BAA4B;AACrC,SAAS,YAAY;AACrB,SAAS,gCAAgC;AACzC,SAAS,sBAAsB;AAC/B,SAAS,+BAA+B;AACxC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,kBAAkB;AAC3B;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAEP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP,MAAM,UAAU;AAChB,MAAM,gBAAgB;AAEf,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,OAAO,EAAE;AAAA,EACrD,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,OAAO,EAAE;AACvD;AAEA,eAAsB,IAAI,KAAc;AACtC,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,KAAM,QAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAE9E,QAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,QAAM,SAAS,IAAI,aAAa,IAAI,QAAQ;AAC5C,MAAI,CAAC,OAAQ,QAAO,aAAa,KAAK,EAAE,OAAO,qBAAqB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAEtF,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,QAAM,OAAO,UAAU,QAAQ,aAAa;AAC5C,QAAM,MAAM,MAAM,KAAK,QAAQ,KAAK,KAAK,EAAE,UAAU,KAAK,YAAY,MAAM,gBAAgB,KAAK,SAAS,KAAK,CAAC;AAChH,MAAI,CAAC,IAAI,gBAAgB,CAAC,WAAW,IAAI,UAAU,OAAO,GAAG;AAC3D,WAAO,aAAa,KAAK,EAAE,OAAO,YAAY,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAClE;AAEA,QAAM,EAAE,UAAU,eAAe,IAAI,iCAAiC;AAAA,IACpE,MAAM,EAAE,UAAU,KAAK,YAAY,MAAM,OAAO,KAAK,SAAS,KAAK;AAAA,IACnE,cAAc,CAAC,CAAC,IAAI;AAAA,IACpB,eAAe,IAAI,aAAa,IAAI,UAAU;AAAA,IAC9C,qBAAqB,IAAI,aAAa,IAAI,gBAAgB;AAAA,EAC5D,CAAC;AAED,QAAM,oBAAoB,MAAM,GAAG,QAAQ,MAAM,EAAE,IAAI,QAAQ,WAAW,KAAK,CAAC;AAChF,QAAM,aAAa,oCAAoC;AAAA,IACrD,cAAc,CAAC,CAAC,IAAI;AAAA,IACpB,eAAe;AAAA,IACf,QAAQ;AAAA,EACV,CAAC;AACD,MAAI,eAAe,aAAa;AAC9B,WAAO,aAAa,KAAK,EAAE,OAAO,YAAY,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAClE;AACA,MAAI,eAAe,aAAa;AAC9B,WAAO,aAAa,KAAK,EAAE,OAAO,iBAAiB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACvE;AAEA,QAAM,UAAU,MAAM,eAAe;AACrC,QAAM,YAAY,MAAM,KAAK,QAAQ,QAAQ,EAAE,UAAU,eAAe,CAAC;AACzE,QAAM,UAAU,MAAM;AAAA,IACpB;AAAA,IACA;AAAA,MACE;AAAA,MACA;AAAA,MACA;AAAA,MACA,UAAU,UAAU,YAAY,CAAC;AAAA,MACjC,cAAc,CAAC,CAAC,UAAU;AAAA,IAC5B;AAAA,IACA;AAAA,EACF;AAEA,QAAM,SAAS,MAAM,GAAG,QAAQ,sBAAsB;AAAA,IACpD;AAAA,IACA;AAAA,IACA;AAAA,IACA,WAAW;AAAA,EACb,CAAC;AAED,QAAM,WAAW;AAAA,IACf,MAAM,SAAS,OAAO,OAAO;AAAA,IAC7B,WAAW,UAAU,OAAO,SAAS,aAAa,OAAO,gBAAgB,CAAC;AAAA,IAC1E,WAAW,CAAC,CAAC,UAAU,OAAO,SAAS;AAAA,IACvC,oBAAoB;AAAA,IACpB,OAAO,EAAE,UAAU,eAAe;AAAA,EACpC;AAEA,SAAO,aAAa,KAAK,QAAQ;AACnC;AAEA,eAAsB,IAAI,KAAc;AACtC,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,KAAM,QAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAE9E,MAAI;AACJ,MAAI;AACF,cAAU,MAAM,IAAI,KAAK;AAAA,EAC3B,QAAQ;AACN,WAAO,aAAa,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC1E;AACA,QAAM,SAAS,yBAAyB,UAAU,OAAO;AACzD,MAAI,CAAC,OAAO,SAAS;AACnB,WAAO,aAAa,KAAK,EAAE,OAAO,mBAAmB,QAAQ,OAAO,MAAM,OAAO,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrG;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,EAAE,QAAQ,IAAI;AACpB,QAAM,KAAK,QAAQ,IAAI;AACvB,QAAM,OAAO,QAAQ,aAAa;AAClC,QAAM,MAAM,MAAM,KAAK,QAAQ,KAAK,KAAK,EAAE,UAAU,KAAK,YAAY,MAAM,gBAAgB,KAAK,SAAS,KAAK,CAAC;AAChH,MAAI,CAAC,IAAI,gBAAgB,CAAC,WAAW,IAAI,UAAU,OAAO,GAAG;AAC3D,WAAO,aAAa,KAAK,EAAE,OAAO,YAAY,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAClE;AAEA,QAAM,UAAU,MAAM,eAAe;AACrC,QAAM,iBAAiB,IAAI,IAAI,QAAQ,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC;AAChE,QAAM,YAAY,OAAO,KAAK,UAAU,OAAO,CAAC,OAAO,eAAe,IAAI,EAAE,CAAC;AAE7E,QAAM,WAAW,KAAK,YAAY;AAClC,QAAM,iBAAiB,KAAK,SAAS;AAErC,QAAM,aAAa,MAAM,GAAG,QAAQ,MAAM,EAAE,IAAI,OAAO,KAAK,QAAQ,WAAW,KAAK,CAAC;AACrF,QAAM,cAAc,oCAAoC;AAAA,IACtD,cAAc,CAAC,CAAC,IAAI;AAAA,IACpB,eAAe;AAAA,IACf,QAAQ;AAAA,EACV,CAAC;AACD,MAAI,gBAAgB,aAAa;AAC/B,WAAO,aAAa,KAAK,EAAE,OAAO,YAAY,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAClE;AACA,MAAI,gBAAgB,aAAa;AAC/B,WAAO,aAAa,KAAK,EAAE,OAAO,iBAAiB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACvE;AAEA,QAAM,cAAc,MAAM,0BAA0B,WAAW;AAAA,IAC7D,UAAU,YAAY;AAAA,IACtB;AAAA,IACA,QAAQ,OAAO,KAAK,GAAG;AAAA,IACvB,cAAc;AAAA,IACd,YAAY,OAAO,KAAK;AAAA,IACxB,WAAW;AAAA,IACX,eAAe,IAAI;AAAA,IACnB,gBAAgB,IAAI;AAAA,IACpB,iBAAiB,EAAE,QAAQ,OAAO,KAAK,QAAQ,MAAM,OAAO,KAAK,MAAM,UAAU;AAAA,EACnF,CAAC;AACD,MAAI,eAAe,CAAC,YAAY,IAAI;AAClC,WAAO,aAAa,KAAK,YAAY,MAAM,EAAE,QAAQ,YAAY,OAAO,CAAC;AAAA,EAC3E;AAEA,MAAI,SAAS,MAAM,GAAG,QAAQ,sBAAsB;AAAA,IAClD,QAAQ,OAAO,KAAK;AAAA,IACpB;AAAA,IACA;AAAA,IACA,WAAW;AAAA,EACb,CAAC;AAED,MAAI,OAAO,KAAK,SAAS,WAAW;AAClC,QAAI,QAAQ;AACV,YAAM,GAAG,OAAO,MAAM,EAAE,MAAM;AAAA,IAChC;AACA,QAAI,aAAa,MAAM,YAAY,uBAAuB;AACxD,YAAM,iCAAiC,WAAW;AAAA,QAChD,UAAU,YAAY;AAAA,QACtB;AAAA,QACA,QAAQ,OAAO,KAAK,GAAG;AAAA,QACvB,cAAc;AAAA,QACd,YAAY,OAAO,KAAK;AAAA,QACxB,WAAW;AAAA,QACX,eAAe,IAAI;AAAA,QACnB,gBAAgB,IAAI;AAAA,QACpB,UAAU,YAAY,YAAY;AAAA,MACpC,CAAC;AAAA,IACH;AACA,WAAO,aAAa,KAAK,EAAE,IAAI,MAAM,MAAM,WAAW,WAAW,CAAC,EAAE,CAAC;AAAA,EACvE;AAEA,MAAI,CAAC,QAAQ;AACX,aAAS,GAAG,OAAO,sBAAsB;AAAA,MACvC,QAAQ,OAAO,KAAK;AAAA,MACpB;AAAA,MACA;AAAA,MACA,MAAM;AAAA,MACN,eAAe;AAAA,IACjB,CAAC;AACD,OAAG,QAAQ,MAAM;AAAA,EACnB,OAAO;AACL,WAAO,OAAO;AACd,WAAO,gBAAgB;AAAA,EACzB;AACA,QAAM,GAAG,MAAM;AAEf,MAAI,aAAa,MAAM,YAAY,uBAAuB;AACxD,UAAM,iCAAiC,WAAW;AAAA,MAChD,UAAU,YAAY;AAAA,MACtB;AAAA,MACA,QAAQ,OAAO,KAAK,GAAG;AAAA,MACvB,cAAc;AAAA,MACd,YAAY,OAAO,KAAK;AAAA,MACxB,WAAW;AAAA,MACX,eAAe,IAAI;AAAA,MACnB,gBAAgB,IAAI;AAAA,MACpB,UAAU,YAAY,YAAY;AAAA,IACpC,CAAC;AAAA,EACH;AAEA,SAAO,aAAa,KAAK,EAAE,IAAI,MAAM,MAAM,YAAY,UAAU,CAAC;AACpE;AAEA,MAAM,yBAAyB,EAAE,OAAO;AAAA,EACtC,QAAQ,EAAE,OAAO,EAAE,KAAK;AAAA,EACxB,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACrC,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAC7C,CAAC;AAED,MAAM,oBAAsC;AAAA,EAC1C,SAAS;AAAA,EACT,aAAa;AAAA,EACb,MAAM,CAAC,aAAa;AAAA,EACpB,OAAO;AAAA,EACP,WAAW;AAAA,IACT,EAAE,QAAQ,KAAK,aAAa,iCAAiC,QAAQ,mCAAmC;AAAA,EAC1G;AAAA,EACA,QAAQ;AAAA,IACN,EAAE,QAAQ,KAAK,aAAa,2BAA2B,QAAQ,sBAAsB;AAAA,IACrF,EAAE,QAAQ,KAAK,aAAa,2BAA2B,QAAQ,sBAAsB;AAAA,IACrF,EAAE,QAAQ,KAAK,aAAa,mDAAmD,QAAQ,sBAAsB;AAAA,EAC/G;AACF;AAEA,MAAM,oBAAsC;AAAA,EAC1C,SAAS;AAAA,EACT,aAAa;AAAA,EACb,MAAM,CAAC,aAAa;AAAA,EACpB,aAAa;AAAA,IACX,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,aAAa;AAAA,EACf;AAAA,EACA,WAAW;AAAA,IACT,EAAE,QAAQ,KAAK,aAAa,oBAAoB,QAAQ,yCAAyC;AAAA,EACnG;AAAA,EACA,QAAQ;AAAA,IACN,EAAE,QAAQ,KAAK,aAAa,sCAAsC,QAAQ,sBAAsB;AAAA,IAChG,EAAE,QAAQ,KAAK,aAAa,2BAA2B,QAAQ,sBAAsB;AAAA,IACrF,EAAE,QAAQ,KAAK,aAAa,mDAAmD,QAAQ,sBAAsB;AAAA,EAC/G;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,IACL,KAAK;AAAA,EACP;AACF;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { DashboardUserWidgets } from '@open-mercato/core/modules/dashboards/data/entities'\nimport { User } from '@open-mercato/core/modules/auth/data/entities'\nimport { userWidgetSettingsSchema } from '@open-mercato/core/modules/dashboards/data/validators'\nimport { loadAllWidgets } from '@open-mercato/core/modules/dashboards/lib/widgets'\nimport { resolveAllowedWidgetIds } from '@open-mercato/core/modules/dashboards/lib/access'\nimport { resolveWidgetAssignmentReadScope } from '@open-mercato/core/modules/dashboards/lib/widgetAssignmentScope'\nimport { hasFeature } from '@open-mercato/shared/security/features'\nimport {\n  runCrudMutationGuardAfterSuccess,\n  validateCrudMutationGuard,\n} from '@open-mercato/shared/lib/crud/mutation-guard'\nimport type { OpenApiMethodDoc, OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport {\n  dashboardsTag,\n  dashboardsErrorSchema,\n  dashboardUserWidgetsResponseSchema,\n  dashboardUserWidgetsUpdateResponseSchema,\n} from '../../openapi'\n\nconst FEATURE = 'dashboards.admin.assign-widgets'\nconst RESOURCE_KIND = 'dashboards.userWidgets'\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: [FEATURE] },\n  PUT: { requireAuth: true, requireFeatures: [FEATURE] },\n}\n\nexport async function GET(req: Request) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth) return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n\n  const url = new URL(req.url)\n  const userId = url.searchParams.get('userId')\n  if (!userId) return NextResponse.json({ error: 'userId is required' }, { status: 400 })\n\n  const container = await createRequestContainer()\n  const em = container.resolve('em') as any\n  const rbac = container.resolve('rbacService') as any\n  const acl = await rbac.loadAcl(auth.sub, { tenantId: auth.tenantId ?? null, organizationId: auth.orgId ?? null })\n  if (!acl.isSuperAdmin && !hasFeature(acl.features, FEATURE)) {\n    return NextResponse.json({ error: 'Forbidden' }, { status: 403 })\n  }\n\n  const { tenantId, organizationId } = resolveWidgetAssignmentReadScope({\n    auth: { tenantId: auth.tenantId ?? null, orgId: auth.orgId ?? null },\n    isSuperAdmin: !!acl.isSuperAdmin,\n    queryTenantId: url.searchParams.get('tenantId'),\n    queryOrganizationId: url.searchParams.get('organizationId'),\n  })\n\n  const targetUserForRead = await em.findOne(User, { id: userId, deletedAt: null })\n  if (!targetUserForRead || (tenantId && (targetUserForRead.tenantId ?? null) !== tenantId)) {\n    return NextResponse.json({ error: 'User not found' }, { status: 404 })\n  }\n\n  const widgets = await loadAllWidgets()\n  const targetAcl = await rbac.loadAcl(userId, { tenantId, organizationId })\n  const allowed = await resolveAllowedWidgetIds(\n    em,\n    {\n      userId,\n      tenantId,\n      organizationId,\n      features: targetAcl.features ?? [],\n      isSuperAdmin: !!targetAcl.isSuperAdmin,\n    },\n    widgets,\n  )\n\n  const record = await em.findOne(DashboardUserWidgets, {\n    userId,\n    tenantId,\n    organizationId,\n    deletedAt: null,\n  })\n\n  const response = {\n    mode: record ? record.mode : 'inherit',\n    widgetIds: record && record.mode === 'override' ? record.widgetIdsJson : [],\n    hasCustom: !!record && record.mode === 'override',\n    effectiveWidgetIds: allowed,\n    scope: { tenantId, organizationId },\n  }\n\n  return NextResponse.json(response)\n}\n\nexport async function PUT(req: Request) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth) return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n\n  let payload: unknown\n  try {\n    payload = await req.json()\n  } catch {\n    return NextResponse.json({ error: 'Invalid JSON body' }, { status: 400 })\n  }\n  const parsed = userWidgetSettingsSchema.safeParse(payload)\n  if (!parsed.success) {\n    return NextResponse.json({ error: 'Invalid payload', issues: parsed.error.issues }, { status: 400 })\n  }\n\n  const container = await createRequestContainer()\n  const { resolve } = container\n  const em = resolve('em') as any\n  const rbac = resolve('rbacService') as any\n  const acl = await rbac.loadAcl(auth.sub, { tenantId: auth.tenantId ?? null, organizationId: auth.orgId ?? null })\n  if (!acl.isSuperAdmin && !hasFeature(acl.features, FEATURE)) {\n    return NextResponse.json({ error: 'Forbidden' }, { status: 403 })\n  }\n\n  const widgets = await loadAllWidgets()\n  const validWidgetIds = new Set(widgets.map((w) => w.metadata.id))\n  const widgetIds = parsed.data.widgetIds.filter((id) => validWidgetIds.has(id))\n\n  const tenantId = auth.tenantId ?? null\n  const organizationId = auth.orgId ?? null\n\n  const targetUser = await em.findOne(User, { id: parsed.data.userId, deletedAt: null })\n  if (!targetUser || (tenantId && (targetUser.tenantId ?? null) !== tenantId)) {\n    return NextResponse.json({ error: 'User not found' }, { status: 404 })\n  }\n\n  const guardResult = await validateCrudMutationGuard(container, {\n    tenantId: tenantId ?? '',\n    organizationId,\n    userId: String(auth.sub),\n    resourceKind: RESOURCE_KIND,\n    resourceId: parsed.data.userId,\n    operation: 'update',\n    requestMethod: req.method,\n    requestHeaders: req.headers,\n    mutationPayload: { userId: parsed.data.userId, mode: parsed.data.mode, widgetIds },\n  })\n  if (guardResult && !guardResult.ok) {\n    return NextResponse.json(guardResult.body, { status: guardResult.status })\n  }\n\n  let record = await em.findOne(DashboardUserWidgets, {\n    userId: parsed.data.userId,\n    tenantId,\n    organizationId,\n    deletedAt: null,\n  })\n\n  if (parsed.data.mode === 'inherit') {\n    if (record) {\n      await em.remove(record).flush()\n    }\n    if (guardResult?.ok && guardResult.shouldRunAfterSuccess) {\n      await runCrudMutationGuardAfterSuccess(container, {\n        tenantId: tenantId ?? '',\n        organizationId,\n        userId: String(auth.sub),\n        resourceKind: RESOURCE_KIND,\n        resourceId: parsed.data.userId,\n        operation: 'update',\n        requestMethod: req.method,\n        requestHeaders: req.headers,\n        metadata: guardResult.metadata ?? null,\n      })\n    }\n    return NextResponse.json({ ok: true, mode: 'inherit', widgetIds: [] })\n  }\n\n  if (!record) {\n    record = em.create(DashboardUserWidgets, {\n      userId: parsed.data.userId,\n      tenantId,\n      organizationId,\n      mode: 'override',\n      widgetIdsJson: widgetIds,\n    })\n    em.persist(record)\n  } else {\n    record.mode = 'override'\n    record.widgetIdsJson = widgetIds\n  }\n  await em.flush()\n\n  if (guardResult?.ok && guardResult.shouldRunAfterSuccess) {\n    await runCrudMutationGuardAfterSuccess(container, {\n      tenantId: tenantId ?? '',\n      organizationId,\n      userId: String(auth.sub),\n      resourceKind: RESOURCE_KIND,\n      resourceId: parsed.data.userId,\n      operation: 'update',\n      requestMethod: req.method,\n      requestHeaders: req.headers,\n      metadata: guardResult.metadata ?? null,\n    })\n  }\n\n  return NextResponse.json({ ok: true, mode: 'override', widgetIds })\n}\n\nconst userWidgetsQuerySchema = z.object({\n  userId: z.string().uuid(),\n  tenantId: z.string().uuid().optional(),\n  organizationId: z.string().uuid().optional(),\n})\n\nconst userWidgetsGetDoc: OpenApiMethodDoc = {\n  summary: 'Read widget overrides for a user',\n  description: 'Returns the widgets inherited and explicitly configured for the requested user within the current scope.',\n  tags: [dashboardsTag],\n  query: userWidgetsQuerySchema,\n  responses: [\n    { status: 200, description: 'Widget settings for the user.', schema: dashboardUserWidgetsResponseSchema },\n  ],\n  errors: [\n    { status: 400, description: 'Missing user identifier', schema: dashboardsErrorSchema },\n    { status: 401, description: 'Authentication required', schema: dashboardsErrorSchema },\n    { status: 403, description: 'Insufficient permissions to manage user widgets', schema: dashboardsErrorSchema },\n  ],\n}\n\nconst userWidgetsPutDoc: OpenApiMethodDoc = {\n  summary: 'Update user-specific dashboard widgets',\n  description: 'Sets the widget override mode and allowed widgets for a user. Passing `mode: inherit` clears overrides.',\n  tags: [dashboardsTag],\n  requestBody: {\n    contentType: 'application/json',\n    schema: userWidgetSettingsSchema,\n    description: 'User identifier, override mode, and widget ids. Scope is derived from the authenticated session.',\n  },\n  responses: [\n    { status: 200, description: 'Overrides saved.', schema: dashboardUserWidgetsUpdateResponseSchema },\n  ],\n  errors: [\n    { status: 400, description: 'Invalid payload or unknown widgets', schema: dashboardsErrorSchema },\n    { status: 401, description: 'Authentication required', schema: dashboardsErrorSchema },\n    { status: 403, description: 'Insufficient permissions to manage user widgets', schema: dashboardsErrorSchema },\n  ],\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: dashboardsTag,\n  summary: 'Manage user-level dashboard widgets',\n  methods: {\n    GET: userWidgetsGetDoc,\n    PUT: userWidgetsPutDoc,\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AACvC,SAAS,4BAA4B;AACrC,SAAS,YAAY;AACrB,SAAS,gCAAgC;AACzC,SAAS,sBAAsB;AAC/B,SAAS,+BAA+B;AACxC,SAAS,wCAAwC;AACjD,SAAS,kBAAkB;AAC3B;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAEP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP,MAAM,UAAU;AAChB,MAAM,gBAAgB;AAEf,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,OAAO,EAAE;AAAA,EACrD,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,OAAO,EAAE;AACvD;AAEA,eAAsB,IAAI,KAAc;AACtC,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,KAAM,QAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAE9E,QAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,QAAM,SAAS,IAAI,aAAa,IAAI,QAAQ;AAC5C,MAAI,CAAC,OAAQ,QAAO,aAAa,KAAK,EAAE,OAAO,qBAAqB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAEtF,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,QAAM,OAAO,UAAU,QAAQ,aAAa;AAC5C,QAAM,MAAM,MAAM,KAAK,QAAQ,KAAK,KAAK,EAAE,UAAU,KAAK,YAAY,MAAM,gBAAgB,KAAK,SAAS,KAAK,CAAC;AAChH,MAAI,CAAC,IAAI,gBAAgB,CAAC,WAAW,IAAI,UAAU,OAAO,GAAG;AAC3D,WAAO,aAAa,KAAK,EAAE,OAAO,YAAY,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAClE;AAEA,QAAM,EAAE,UAAU,eAAe,IAAI,iCAAiC;AAAA,IACpE,MAAM,EAAE,UAAU,KAAK,YAAY,MAAM,OAAO,KAAK,SAAS,KAAK;AAAA,IACnE,cAAc,CAAC,CAAC,IAAI;AAAA,IACpB,eAAe,IAAI,aAAa,IAAI,UAAU;AAAA,IAC9C,qBAAqB,IAAI,aAAa,IAAI,gBAAgB;AAAA,EAC5D,CAAC;AAED,QAAM,oBAAoB,MAAM,GAAG,QAAQ,MAAM,EAAE,IAAI,QAAQ,WAAW,KAAK,CAAC;AAChF,MAAI,CAAC,qBAAsB,aAAa,kBAAkB,YAAY,UAAU,UAAW;AACzF,WAAO,aAAa,KAAK,EAAE,OAAO,iBAAiB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACvE;AAEA,QAAM,UAAU,MAAM,eAAe;AACrC,QAAM,YAAY,MAAM,KAAK,QAAQ,QAAQ,EAAE,UAAU,eAAe,CAAC;AACzE,QAAM,UAAU,MAAM;AAAA,IACpB;AAAA,IACA;AAAA,MACE;AAAA,MACA;AAAA,MACA;AAAA,MACA,UAAU,UAAU,YAAY,CAAC;AAAA,MACjC,cAAc,CAAC,CAAC,UAAU;AAAA,IAC5B;AAAA,IACA;AAAA,EACF;AAEA,QAAM,SAAS,MAAM,GAAG,QAAQ,sBAAsB;AAAA,IACpD;AAAA,IACA;AAAA,IACA;AAAA,IACA,WAAW;AAAA,EACb,CAAC;AAED,QAAM,WAAW;AAAA,IACf,MAAM,SAAS,OAAO,OAAO;AAAA,IAC7B,WAAW,UAAU,OAAO,SAAS,aAAa,OAAO,gBAAgB,CAAC;AAAA,IAC1E,WAAW,CAAC,CAAC,UAAU,OAAO,SAAS;AAAA,IACvC,oBAAoB;AAAA,IACpB,OAAO,EAAE,UAAU,eAAe;AAAA,EACpC;AAEA,SAAO,aAAa,KAAK,QAAQ;AACnC;AAEA,eAAsB,IAAI,KAAc;AACtC,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,KAAM,QAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAE9E,MAAI;AACJ,MAAI;AACF,cAAU,MAAM,IAAI,KAAK;AAAA,EAC3B,QAAQ;AACN,WAAO,aAAa,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC1E;AACA,QAAM,SAAS,yBAAyB,UAAU,OAAO;AACzD,MAAI,CAAC,OAAO,SAAS;AACnB,WAAO,aAAa,KAAK,EAAE,OAAO,mBAAmB,QAAQ,OAAO,MAAM,OAAO,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrG;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,EAAE,QAAQ,IAAI;AACpB,QAAM,KAAK,QAAQ,IAAI;AACvB,QAAM,OAAO,QAAQ,aAAa;AAClC,QAAM,MAAM,MAAM,KAAK,QAAQ,KAAK,KAAK,EAAE,UAAU,KAAK,YAAY,MAAM,gBAAgB,KAAK,SAAS,KAAK,CAAC;AAChH,MAAI,CAAC,IAAI,gBAAgB,CAAC,WAAW,IAAI,UAAU,OAAO,GAAG;AAC3D,WAAO,aAAa,KAAK,EAAE,OAAO,YAAY,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAClE;AAEA,QAAM,UAAU,MAAM,eAAe;AACrC,QAAM,iBAAiB,IAAI,IAAI,QAAQ,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC;AAChE,QAAM,YAAY,OAAO,KAAK,UAAU,OAAO,CAAC,OAAO,eAAe,IAAI,EAAE,CAAC;AAE7E,QAAM,WAAW,KAAK,YAAY;AAClC,QAAM,iBAAiB,KAAK,SAAS;AAErC,QAAM,aAAa,MAAM,GAAG,QAAQ,MAAM,EAAE,IAAI,OAAO,KAAK,QAAQ,WAAW,KAAK,CAAC;AACrF,MAAI,CAAC,cAAe,aAAa,WAAW,YAAY,UAAU,UAAW;AAC3E,WAAO,aAAa,KAAK,EAAE,OAAO,iBAAiB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACvE;AAEA,QAAM,cAAc,MAAM,0BAA0B,WAAW;AAAA,IAC7D,UAAU,YAAY;AAAA,IACtB;AAAA,IACA,QAAQ,OAAO,KAAK,GAAG;AAAA,IACvB,cAAc;AAAA,IACd,YAAY,OAAO,KAAK;AAAA,IACxB,WAAW;AAAA,IACX,eAAe,IAAI;AAAA,IACnB,gBAAgB,IAAI;AAAA,IACpB,iBAAiB,EAAE,QAAQ,OAAO,KAAK,QAAQ,MAAM,OAAO,KAAK,MAAM,UAAU;AAAA,EACnF,CAAC;AACD,MAAI,eAAe,CAAC,YAAY,IAAI;AAClC,WAAO,aAAa,KAAK,YAAY,MAAM,EAAE,QAAQ,YAAY,OAAO,CAAC;AAAA,EAC3E;AAEA,MAAI,SAAS,MAAM,GAAG,QAAQ,sBAAsB;AAAA,IAClD,QAAQ,OAAO,KAAK;AAAA,IACpB;AAAA,IACA;AAAA,IACA,WAAW;AAAA,EACb,CAAC;AAED,MAAI,OAAO,KAAK,SAAS,WAAW;AAClC,QAAI,QAAQ;AACV,YAAM,GAAG,OAAO,MAAM,EAAE,MAAM;AAAA,IAChC;AACA,QAAI,aAAa,MAAM,YAAY,uBAAuB;AACxD,YAAM,iCAAiC,WAAW;AAAA,QAChD,UAAU,YAAY;AAAA,QACtB;AAAA,QACA,QAAQ,OAAO,KAAK,GAAG;AAAA,QACvB,cAAc;AAAA,QACd,YAAY,OAAO,KAAK;AAAA,QACxB,WAAW;AAAA,QACX,eAAe,IAAI;AAAA,QACnB,gBAAgB,IAAI;AAAA,QACpB,UAAU,YAAY,YAAY;AAAA,MACpC,CAAC;AAAA,IACH;AACA,WAAO,aAAa,KAAK,EAAE,IAAI,MAAM,MAAM,WAAW,WAAW,CAAC,EAAE,CAAC;AAAA,EACvE;AAEA,MAAI,CAAC,QAAQ;AACX,aAAS,GAAG,OAAO,sBAAsB;AAAA,MACvC,QAAQ,OAAO,KAAK;AAAA,MACpB;AAAA,MACA;AAAA,MACA,MAAM;AAAA,MACN,eAAe;AAAA,IACjB,CAAC;AACD,OAAG,QAAQ,MAAM;AAAA,EACnB,OAAO;AACL,WAAO,OAAO;AACd,WAAO,gBAAgB;AAAA,EACzB;AACA,QAAM,GAAG,MAAM;AAEf,MAAI,aAAa,MAAM,YAAY,uBAAuB;AACxD,UAAM,iCAAiC,WAAW;AAAA,MAChD,UAAU,YAAY;AAAA,MACtB;AAAA,MACA,QAAQ,OAAO,KAAK,GAAG;AAAA,MACvB,cAAc;AAAA,MACd,YAAY,OAAO,KAAK;AAAA,MACxB,WAAW;AAAA,MACX,eAAe,IAAI;AAAA,MACnB,gBAAgB,IAAI;AAAA,MACpB,UAAU,YAAY,YAAY;AAAA,IACpC,CAAC;AAAA,EACH;AAEA,SAAO,aAAa,KAAK,EAAE,IAAI,MAAM,MAAM,YAAY,UAAU,CAAC;AACpE;AAEA,MAAM,yBAAyB,EAAE,OAAO;AAAA,EACtC,QAAQ,EAAE,OAAO,EAAE,KAAK;AAAA,EACxB,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACrC,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAC7C,CAAC;AAED,MAAM,oBAAsC;AAAA,EAC1C,SAAS;AAAA,EACT,aAAa;AAAA,EACb,MAAM,CAAC,aAAa;AAAA,EACpB,OAAO;AAAA,EACP,WAAW;AAAA,IACT,EAAE,QAAQ,KAAK,aAAa,iCAAiC,QAAQ,mCAAmC;AAAA,EAC1G;AAAA,EACA,QAAQ;AAAA,IACN,EAAE,QAAQ,KAAK,aAAa,2BAA2B,QAAQ,sBAAsB;AAAA,IACrF,EAAE,QAAQ,KAAK,aAAa,2BAA2B,QAAQ,sBAAsB;AAAA,IACrF,EAAE,QAAQ,KAAK,aAAa,mDAAmD,QAAQ,sBAAsB;AAAA,EAC/G;AACF;AAEA,MAAM,oBAAsC;AAAA,EAC1C,SAAS;AAAA,EACT,aAAa;AAAA,EACb,MAAM,CAAC,aAAa;AAAA,EACpB,aAAa;AAAA,IACX,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,aAAa;AAAA,EACf;AAAA,EACA,WAAW;AAAA,IACT,EAAE,QAAQ,KAAK,aAAa,oBAAoB,QAAQ,yCAAyC;AAAA,EACnG;AAAA,EACA,QAAQ;AAAA,IACN,EAAE,QAAQ,KAAK,aAAa,sCAAsC,QAAQ,sBAAsB;AAAA,IAChG,EAAE,QAAQ,KAAK,aAAa,2BAA2B,QAAQ,sBAAsB;AAAA,IACrF,EAAE,QAAQ,KAAK,aAAa,mDAAmD,QAAQ,sBAAsB;AAAA,EAC/G;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,IACL,KAAK;AAAA,EACP;AACF;",
   "names": []
 }