@open-mercato/core 0.6.6-develop.6551.1.1511bfa890 → 0.6.6

package/dist/modules/customers/components/detail/DetailTabsLayout.js

@@ -2,7 +2,6 @@
 import { jsx, jsxs } from "react/jsx-runtime";
 import * as React from "react";
 import { Button } from "@open-mercato/ui/primitives/button";
-import { Tabs, TabsList, TabsTrigger } from "@open-mercato/ui/primitives/tabs";
 import { cn } from "@open-mercato/shared/lib/utils";
 import { Plus } from "lucide-react";
 function DetailTabsLayout({
@@ -26,12 +25,28 @@ function DetailTabsLayout({
   return /* @__PURE__ */ jsxs("div", { className: cn("space-y-4", className), children: [
     /* @__PURE__ */ jsxs("div", { className: cn("flex flex-wrap items-center justify-between gap-3", headerClassName), children: [
       /* @__PURE__ */ jsx(
-        Tabs,
+        "nav",
         {
-          value: activeTab,
-          onValueChange: (value) => handleTabChange(value),
-          variant: "underline",
-          children: /* @__PURE__ */ jsx(TabsList, { className: cn("h-auto flex-wrap border-b-0", navClassName), "aria-label": navAriaLabel, children: tabs.map((tab) => /* @__PURE__ */ jsx(TabsTrigger, { value: tab.id, children: tab.label }, tab.id)) })
+          className: cn("flex flex-wrap items-center gap-3 text-sm", navClassName),
+          role: "tablist",
+          "aria-label": navAriaLabel,
+          children: tabs.map((tab) => /* @__PURE__ */ jsx(
+            Button,
+            {
+              type: "button",
+              variant: "ghost",
+              size: "sm",
+              role: "tab",
+              "aria-selected": activeTab === tab.id,
+              onClick: () => handleTabChange(tab.id),
+              className: cn(
+                "h-auto rounded-none border-b-2 px-0 py-1",
+                activeTab === tab.id ? "border-accent-indigo text-foreground hover:bg-transparent" : "border-transparent text-muted-foreground hover:text-foreground hover:bg-transparent"
+              ),
+              children: tab.label
+            },
+            tab.id
+          ))
         }
       ),
       sectionAction ? /* @__PURE__ */ jsxs(

package/dist/modules/customers/components/detail/DetailTabsLayout.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../src/modules/customers/components/detail/DetailTabsLayout.tsx"],
-  "sourcesContent": ["\"use client\"\n\nimport * as React from 'react'\nimport type { SectionAction } from '@open-mercato/ui/backend/detail'\nimport { Button } from '@open-mercato/ui/primitives/button'\nimport { Tabs, TabsList, TabsTrigger } from '@open-mercato/ui/primitives/tabs'\nimport { cn } from '@open-mercato/shared/lib/utils'\nimport { Plus } from 'lucide-react'\n\nexport type DetailTabDefinition<TId extends string = string> = {\n  id: TId\n  label: React.ReactNode\n}\n\ntype DetailTabsLayoutProps<TId extends string = string> = {\n  tabs: DetailTabDefinition<TId>[]\n  activeTab: TId\n  onTabChange: (id: TId) => void\n  sectionAction: SectionAction | null\n  onSectionAction: () => void\n  navAriaLabel: string\n  className?: string\n  headerClassName?: string\n  navClassName?: string\n  children: React.ReactNode\n}\n\nexport function DetailTabsLayout<TId extends string = string>({\n  tabs,\n  activeTab,\n  onTabChange,\n  sectionAction,\n  onSectionAction,\n  navAriaLabel,\n  className,\n  headerClassName,\n  navClassName,\n  children,\n}: DetailTabsLayoutProps<TId>) {\n  const handleTabChange = React.useCallback(\n    (id: TId) => {\n      onTabChange(id)\n    },\n    [onTabChange],\n  )\n\n  return (\n    <div className={cn('space-y-4', className)}>\n      <div className={cn('flex flex-wrap items-center justify-between gap-3', headerClassName)}>\n        <Tabs\n          value={activeTab}\n          onValueChange={(value) => handleTabChange(value as TId)}\n          variant=\"underline\"\n        >\n          <TabsList className={cn('h-auto flex-wrap border-b-0', navClassName)} aria-label={navAriaLabel}>\n            {tabs.map((tab) => (\n              <TabsTrigger key={tab.id} value={tab.id}>\n                {tab.label}\n              </TabsTrigger>\n            ))}\n          </TabsList>\n        </Tabs>\n        {sectionAction ? (\n          <Button\n            type=\"button\"\n            size=\"sm\"\n            onClick={onSectionAction}\n            disabled={sectionAction.disabled}\n          >\n            {sectionAction.icon ?? (typeof sectionAction.label === 'string' || typeof sectionAction.label === 'number' ? (\n              <Plus className=\"mr-2 h-4 w-4\" />\n            ) : null)}\n            {sectionAction.label}\n          </Button>\n        ) : null}\n      </div>\n      <div>{children}</div>\n    </div>\n  )\n}\n"],
-  "mappings": ";AAwDc,cAOJ,YAPI;AAtDd,YAAY,WAAW;AAEvB,SAAS,cAAc;AACvB,SAAS,MAAM,UAAU,mBAAmB;AAC5C,SAAS,UAAU;AACnB,SAAS,YAAY;AAoBd,SAAS,iBAA8C;AAAA,EAC5D;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,GAA+B;AAC7B,QAAM,kBAAkB,MAAM;AAAA,IAC5B,CAAC,OAAY;AACX,kBAAY,EAAE;AAAA,IAChB;AAAA,IACA,CAAC,WAAW;AAAA,EACd;AAEA,SACE,qBAAC,SAAI,WAAW,GAAG,aAAa,SAAS,GACvC;AAAA,yBAAC,SAAI,WAAW,GAAG,qDAAqD,eAAe,GACrF;AAAA;AAAA,QAAC;AAAA;AAAA,UACC,OAAO;AAAA,UACP,eAAe,CAAC,UAAU,gBAAgB,KAAY;AAAA,UACtD,SAAQ;AAAA,UAER,8BAAC,YAAS,WAAW,GAAG,+BAA+B,YAAY,GAAG,cAAY,cAC/E,eAAK,IAAI,CAAC,QACT,oBAAC,eAAyB,OAAO,IAAI,IAClC,cAAI,SADW,IAAI,EAEtB,CACD,GACH;AAAA;AAAA,MACF;AAAA,MACC,gBACC;AAAA,QAAC;AAAA;AAAA,UACC,MAAK;AAAA,UACL,MAAK;AAAA,UACL,SAAS;AAAA,UACT,UAAU,cAAc;AAAA,UAEvB;AAAA,0BAAc,SAAS,OAAO,cAAc,UAAU,YAAY,OAAO,cAAc,UAAU,WAChG,oBAAC,QAAK,WAAU,gBAAe,IAC7B;AAAA,YACH,cAAc;AAAA;AAAA;AAAA,MACjB,IACE;AAAA,OACN;AAAA,IACA,oBAAC,SAAK,UAAS;AAAA,KACjB;AAEJ;",
+  "sourcesContent": ["\"use client\"\n\nimport * as React from 'react'\nimport type { SectionAction } from '@open-mercato/ui/backend/detail'\nimport { Button } from '@open-mercato/ui/primitives/button'\nimport { cn } from '@open-mercato/shared/lib/utils'\nimport { Plus } from 'lucide-react'\n\nexport type DetailTabDefinition<TId extends string = string> = {\n  id: TId\n  label: React.ReactNode\n}\n\ntype DetailTabsLayoutProps<TId extends string = string> = {\n  tabs: DetailTabDefinition<TId>[]\n  activeTab: TId\n  onTabChange: (id: TId) => void\n  sectionAction: SectionAction | null\n  onSectionAction: () => void\n  navAriaLabel: string\n  className?: string\n  headerClassName?: string\n  navClassName?: string\n  children: React.ReactNode\n}\n\nexport function DetailTabsLayout<TId extends string = string>({\n  tabs,\n  activeTab,\n  onTabChange,\n  sectionAction,\n  onSectionAction,\n  navAriaLabel,\n  className,\n  headerClassName,\n  navClassName,\n  children,\n}: DetailTabsLayoutProps<TId>) {\n  const handleTabChange = React.useCallback(\n    (id: TId) => {\n      onTabChange(id)\n    },\n    [onTabChange],\n  )\n\n  return (\n    <div className={cn('space-y-4', className)}>\n      <div className={cn('flex flex-wrap items-center justify-between gap-3', headerClassName)}>\n        <nav\n          className={cn('flex flex-wrap items-center gap-3 text-sm', navClassName)}\n          role=\"tablist\"\n          aria-label={navAriaLabel}\n        >\n          {tabs.map((tab) => (\n            <Button\n              key={tab.id}\n              type=\"button\"\n              variant=\"ghost\"\n              size=\"sm\"\n              role=\"tab\"\n              aria-selected={activeTab === tab.id}\n              onClick={() => handleTabChange(tab.id)}\n              className={cn(\n                'h-auto rounded-none border-b-2 px-0 py-1',\n                activeTab === tab.id\n                  ? 'border-accent-indigo text-foreground hover:bg-transparent'\n                  : 'border-transparent text-muted-foreground hover:text-foreground hover:bg-transparent'\n              )}\n            >\n              {tab.label}\n            </Button>\n          ))}\n        </nav>\n        {sectionAction ? (\n          <Button\n            type=\"button\"\n            size=\"sm\"\n            onClick={onSectionAction}\n            disabled={sectionAction.disabled}\n          >\n            {sectionAction.icon ?? (typeof sectionAction.label === 'string' || typeof sectionAction.label === 'number' ? (\n              <Plus className=\"mr-2 h-4 w-4\" />\n            ) : null)}\n            {sectionAction.label}\n          </Button>\n        ) : null}\n      </div>\n      <div>{children}</div>\n    </div>\n  )\n}\n"],
+  "mappings": ";AAsDY,cAoBF,YApBE;AApDZ,YAAY,WAAW;AAEvB,SAAS,cAAc;AACvB,SAAS,UAAU;AACnB,SAAS,YAAY;AAoBd,SAAS,iBAA8C;AAAA,EAC5D;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,GAA+B;AAC7B,QAAM,kBAAkB,MAAM;AAAA,IAC5B,CAAC,OAAY;AACX,kBAAY,EAAE;AAAA,IAChB;AAAA,IACA,CAAC,WAAW;AAAA,EACd;AAEA,SACE,qBAAC,SAAI,WAAW,GAAG,aAAa,SAAS,GACvC;AAAA,yBAAC,SAAI,WAAW,GAAG,qDAAqD,eAAe,GACrF;AAAA;AAAA,QAAC;AAAA;AAAA,UACC,WAAW,GAAG,6CAA6C,YAAY;AAAA,UACvE,MAAK;AAAA,UACL,cAAY;AAAA,UAEX,eAAK,IAAI,CAAC,QACT;AAAA,YAAC;AAAA;AAAA,cAEC,MAAK;AAAA,cACL,SAAQ;AAAA,cACR,MAAK;AAAA,cACL,MAAK;AAAA,cACL,iBAAe,cAAc,IAAI;AAAA,cACjC,SAAS,MAAM,gBAAgB,IAAI,EAAE;AAAA,cACrC,WAAW;AAAA,gBACT;AAAA,gBACA,cAAc,IAAI,KACd,8DACA;AAAA,cACN;AAAA,cAEC,cAAI;AAAA;AAAA,YAdA,IAAI;AAAA,UAeX,CACD;AAAA;AAAA,MACH;AAAA,MACC,gBACC;AAAA,QAAC;AAAA;AAAA,UACC,MAAK;AAAA,UACL,MAAK;AAAA,UACL,SAAS;AAAA,UACT,UAAU,cAAc;AAAA,UAEvB;AAAA,0BAAc,SAAS,OAAO,cAAc,UAAU,YAAY,OAAO,cAAc,UAAU,WAChG,oBAAC,QAAK,WAAU,gBAAe,IAC7B;AAAA,YACH,cAAc;AAAA;AAAA;AAAA,MACjB,IACE;AAAA,OACN;AAAA,IACA,oBAAC,SAAK,UAAS;AAAA,KACjB;AAEJ;",
   "names": []
 }

package/dist/modules/customers/components/detail/MobilePersonDetail.js

@@ -3,7 +3,8 @@ import { jsx, jsxs } from "react/jsx-runtime";
 import * as React from "react";
 import { useRouter, useSearchParams } from "next/navigation";
 import { useT } from "@open-mercato/shared/lib/i18n/context";
-import { Tabs, TabsList, TabsTrigger } from "@open-mercato/ui/primitives/tabs";
+import { cn } from "@open-mercato/shared/lib/utils";
+import { Button } from "@open-mercato/ui/primitives/button";
 const ZONES = [
   { id: "details", labelKey: "customers.people.mobile.zoneSwitcher.details", fallback: "Details" },
   { id: "activity", labelKey: "customers.people.mobile.zoneSwitcher.activity", fallback: "Activity" }
@@ -54,33 +55,38 @@ function MobilePersonDetail({
     [handleZoneChange, zone]
   );
   return /* @__PURE__ */ jsxs("div", { className: "space-y-4", children: [
-    /* @__PURE__ */ jsx("div", { onKeyDown: handleKeyDown, children: /* @__PURE__ */ jsx(
-      Tabs,
+    /* @__PURE__ */ jsx(
+      "div",
       {
-        value: zone,
-        onValueChange: (value) => handleZoneChange(value),
-        variant: "underline",
-        children: /* @__PURE__ */ jsx(
-          TabsList,
-          {
-            "aria-label": t(
-              "customers.people.mobile.zoneSwitcher.ariaLabel",
-              "Zone selector"
-            ),
-            className: "w-full",
-            children: ZONES.map((entry) => /* @__PURE__ */ jsx(
-              TabsTrigger,
-              {
-                value: entry.id,
-                className: "flex-1 justify-center",
-                children: t(entry.labelKey, entry.fallback)
-              },
-              entry.id
-            ))
-          }
-        )
+        role: "tablist",
+        "aria-label": t(
+          "customers.people.mobile.zoneSwitcher.ariaLabel",
+          "Zone selector"
+        ),
+        className: "grid grid-cols-2 gap-1 rounded-lg border border-border/70 bg-muted/20 p-1",
+        onKeyDown: handleKeyDown,
+        children: ZONES.map((entry) => {
+          const isActive = zone === entry.id;
+          return /* @__PURE__ */ jsx(
+            Button,
+            {
+              type: "button",
+              role: "tab",
+              "aria-selected": isActive,
+              "aria-controls": `mobile-person-zone-${entry.id}`,
+              variant: isActive ? "default" : "ghost",
+              className: cn(
+                "h-11 rounded-lg text-sm font-semibold",
+                isActive ? "" : "text-muted-foreground"
+              ),
+              onClick: () => handleZoneChange(entry.id),
+              children: t(entry.labelKey, entry.fallback)
+            },
+            entry.id
+          );
+        })
       }
-    ) }),
+    ),
     /* @__PURE__ */ jsx(
       "div",
       {

package/dist/modules/customers/components/detail/MobilePersonDetail.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../src/modules/customers/components/detail/MobilePersonDetail.tsx"],
-  "sourcesContent": ["'use client'\n\nimport * as React from 'react'\nimport { useRouter, useSearchParams } from 'next/navigation'\nimport { useT } from '@open-mercato/shared/lib/i18n/context'\nimport { Tabs, TabsList, TabsTrigger } from '@open-mercato/ui/primitives/tabs'\n\nexport type MobilePersonZone = 'details' | 'activity'\n\nexport type MobilePersonDetailProps = {\n  zone1: React.ReactNode\n  zone2: React.ReactNode\n  defaultZone?: MobilePersonZone\n  /**\n   * Controls whether zone state is synced to the URL `?zone=` query param.\n   * Defaults to true on the page route so deep links round-trip.\n   */\n  syncToUrl?: boolean\n}\n\nconst ZONES: Array<{ id: MobilePersonZone; labelKey: string; fallback: string }> = [\n  { id: 'details', labelKey: 'customers.people.mobile.zoneSwitcher.details', fallback: 'Details' },\n  { id: 'activity', labelKey: 'customers.people.mobile.zoneSwitcher.activity', fallback: 'Activity' },\n]\n\nexport function MobilePersonDetail({\n  zone1,\n  zone2,\n  defaultZone = 'details',\n  syncToUrl = true,\n}: MobilePersonDetailProps) {\n  const t = useT()\n  const router = useRouter()\n  const searchParams = useSearchParams()\n\n  const initialZone = React.useMemo<MobilePersonZone>(() => {\n    if (!syncToUrl) return defaultZone\n    const raw = searchParams?.get('zone')\n    if (raw === 'activity' || raw === 'details') return raw\n    return defaultZone\n    // Intentionally compute only from the initial searchParams snapshot; external URL updates\n    // (browser back, manual edit) are acceptable to be out of sync on mobile \u2014 local clicks\n    // own the zone state thereafter.\n    // eslint-disable-next-line react-hooks/exhaustive-deps\n  }, [])\n\n  const [zone, setZone] = React.useState<MobilePersonZone>(initialZone)\n  const lastWrittenZoneRef = React.useRef<MobilePersonZone | null>(null)\n\n  const handleZoneChange = React.useCallback(\n    (next: MobilePersonZone) => {\n      setZone(next)\n      lastWrittenZoneRef.current = next\n      if (!syncToUrl) return\n      const params = new URLSearchParams(searchParams?.toString() ?? '')\n      if (next === defaultZone) {\n        params.delete('zone')\n      } else {\n        params.set('zone', next)\n      }\n      const query = params.toString()\n      router.replace(query.length ? `?${query}` : '?', { scroll: false })\n    },\n    [defaultZone, router, searchParams, syncToUrl],\n  )\n\n  const handleKeyDown = React.useCallback(\n    (event: React.KeyboardEvent<HTMLDivElement>) => {\n      if (event.key !== 'ArrowLeft' && event.key !== 'ArrowRight') return\n      event.preventDefault()\n      const currentIndex = ZONES.findIndex((entry) => entry.id === zone)\n      if (currentIndex < 0) return\n      const offset = event.key === 'ArrowRight' ? 1 : -1\n      const nextIndex = (currentIndex + offset + ZONES.length) % ZONES.length\n      handleZoneChange(ZONES[nextIndex].id)\n    },\n    [handleZoneChange, zone],\n  )\n\n  return (\n    <div className=\"space-y-4\">\n      <div onKeyDown={handleKeyDown}>\n        <Tabs\n          value={zone}\n          onValueChange={(value) => handleZoneChange(value as MobilePersonZone)}\n          variant=\"underline\"\n        >\n          <TabsList\n            aria-label={t(\n              'customers.people.mobile.zoneSwitcher.ariaLabel',\n              'Zone selector',\n            )}\n            className=\"w-full\"\n          >\n            {ZONES.map((entry) => (\n              <TabsTrigger\n                key={entry.id}\n                value={entry.id}\n                className=\"flex-1 justify-center\"\n              >\n                {t(entry.labelKey, entry.fallback)}\n              </TabsTrigger>\n            ))}\n          </TabsList>\n        </Tabs>\n      </div>\n      <div\n        id={`mobile-person-zone-${zone}`}\n        role=\"tabpanel\"\n        aria-labelledby={`mobile-person-zone-${zone}-tab`}\n      >\n        {zone === 'details' ? zone1 : zone2}\n      </div>\n    </div>\n  )\n}\n\nexport default MobilePersonDetail\n"],
-  "mappings": ";AAgFI,SAeU,KAfV;AA9EJ,YAAY,WAAW;AACvB,SAAS,WAAW,uBAAuB;AAC3C,SAAS,YAAY;AACrB,SAAS,MAAM,UAAU,mBAAmB;AAe5C,MAAM,QAA6E;AAAA,EACjF,EAAE,IAAI,WAAW,UAAU,gDAAgD,UAAU,UAAU;AAAA,EAC/F,EAAE,IAAI,YAAY,UAAU,iDAAiD,UAAU,WAAW;AACpG;AAEO,SAAS,mBAAmB;AAAA,EACjC;AAAA,EACA;AAAA,EACA,cAAc;AAAA,EACd,YAAY;AACd,GAA4B;AAC1B,QAAM,IAAI,KAAK;AACf,QAAM,SAAS,UAAU;AACzB,QAAM,eAAe,gBAAgB;AAErC,QAAM,cAAc,MAAM,QAA0B,MAAM;AACxD,QAAI,CAAC,UAAW,QAAO;AACvB,UAAM,MAAM,cAAc,IAAI,MAAM;AACpC,QAAI,QAAQ,cAAc,QAAQ,UAAW,QAAO;AACpD,WAAO;AAAA,EAKT,GAAG,CAAC,CAAC;AAEL,QAAM,CAAC,MAAM,OAAO,IAAI,MAAM,SAA2B,WAAW;AACpE,QAAM,qBAAqB,MAAM,OAAgC,IAAI;AAErE,QAAM,mBAAmB,MAAM;AAAA,IAC7B,CAAC,SAA2B;AAC1B,cAAQ,IAAI;AACZ,yBAAmB,UAAU;AAC7B,UAAI,CAAC,UAAW;AAChB,YAAM,SAAS,IAAI,gBAAgB,cAAc,SAAS,KAAK,EAAE;AACjE,UAAI,SAAS,aAAa;AACxB,eAAO,OAAO,MAAM;AAAA,MACtB,OAAO;AACL,eAAO,IAAI,QAAQ,IAAI;AAAA,MACzB;AACA,YAAM,QAAQ,OAAO,SAAS;AAC9B,aAAO,QAAQ,MAAM,SAAS,IAAI,KAAK,KAAK,KAAK,EAAE,QAAQ,MAAM,CAAC;AAAA,IACpE;AAAA,IACA,CAAC,aAAa,QAAQ,cAAc,SAAS;AAAA,EAC/C;AAEA,QAAM,gBAAgB,MAAM;AAAA,IAC1B,CAAC,UAA+C;AAC9C,UAAI,MAAM,QAAQ,eAAe,MAAM,QAAQ,aAAc;AAC7D,YAAM,eAAe;AACrB,YAAM,eAAe,MAAM,UAAU,CAAC,UAAU,MAAM,OAAO,IAAI;AACjE,UAAI,eAAe,EAAG;AACtB,YAAM,SAAS,MAAM,QAAQ,eAAe,IAAI;AAChD,YAAM,aAAa,eAAe,SAAS,MAAM,UAAU,MAAM;AACjE,uBAAiB,MAAM,SAAS,EAAE,EAAE;AAAA,IACtC;AAAA,IACA,CAAC,kBAAkB,IAAI;AAAA,EACzB;AAEA,SACE,qBAAC,SAAI,WAAU,aACb;AAAA,wBAAC,SAAI,WAAW,eACd;AAAA,MAAC;AAAA;AAAA,QACC,OAAO;AAAA,QACP,eAAe,CAAC,UAAU,iBAAiB,KAAyB;AAAA,QACpE,SAAQ;AAAA,QAER;AAAA,UAAC;AAAA;AAAA,YACC,cAAY;AAAA,cACV;AAAA,cACA;AAAA,YACF;AAAA,YACA,WAAU;AAAA,YAET,gBAAM,IAAI,CAAC,UACV;AAAA,cAAC;AAAA;AAAA,gBAEC,OAAO,MAAM;AAAA,gBACb,WAAU;AAAA,gBAET,YAAE,MAAM,UAAU,MAAM,QAAQ;AAAA;AAAA,cAJ5B,MAAM;AAAA,YAKb,CACD;AAAA;AAAA,QACH;AAAA;AAAA,IACF,GACF;AAAA,IACA;AAAA,MAAC;AAAA;AAAA,QACC,IAAI,sBAAsB,IAAI;AAAA,QAC9B,MAAK;AAAA,QACL,mBAAiB,sBAAsB,IAAI;AAAA,QAE1C,mBAAS,YAAY,QAAQ;AAAA;AAAA,IAChC;AAAA,KACF;AAEJ;AAEA,IAAO,6BAAQ;",
+  "sourcesContent": ["'use client'\n\nimport * as React from 'react'\nimport { useRouter, useSearchParams } from 'next/navigation'\nimport { useT } from '@open-mercato/shared/lib/i18n/context'\nimport { cn } from '@open-mercato/shared/lib/utils'\nimport { Button } from '@open-mercato/ui/primitives/button'\n\nexport type MobilePersonZone = 'details' | 'activity'\n\nexport type MobilePersonDetailProps = {\n  zone1: React.ReactNode\n  zone2: React.ReactNode\n  defaultZone?: MobilePersonZone\n  /**\n   * Controls whether zone state is synced to the URL `?zone=` query param.\n   * Defaults to true on the page route so deep links round-trip.\n   */\n  syncToUrl?: boolean\n}\n\nconst ZONES: Array<{ id: MobilePersonZone; labelKey: string; fallback: string }> = [\n  { id: 'details', labelKey: 'customers.people.mobile.zoneSwitcher.details', fallback: 'Details' },\n  { id: 'activity', labelKey: 'customers.people.mobile.zoneSwitcher.activity', fallback: 'Activity' },\n]\n\nexport function MobilePersonDetail({\n  zone1,\n  zone2,\n  defaultZone = 'details',\n  syncToUrl = true,\n}: MobilePersonDetailProps) {\n  const t = useT()\n  const router = useRouter()\n  const searchParams = useSearchParams()\n\n  const initialZone = React.useMemo<MobilePersonZone>(() => {\n    if (!syncToUrl) return defaultZone\n    const raw = searchParams?.get('zone')\n    if (raw === 'activity' || raw === 'details') return raw\n    return defaultZone\n    // Intentionally compute only from the initial searchParams snapshot; external URL updates\n    // (browser back, manual edit) are acceptable to be out of sync on mobile \u2014 local clicks\n    // own the zone state thereafter.\n    // eslint-disable-next-line react-hooks/exhaustive-deps\n  }, [])\n\n  const [zone, setZone] = React.useState<MobilePersonZone>(initialZone)\n  const lastWrittenZoneRef = React.useRef<MobilePersonZone | null>(null)\n\n  const handleZoneChange = React.useCallback(\n    (next: MobilePersonZone) => {\n      setZone(next)\n      lastWrittenZoneRef.current = next\n      if (!syncToUrl) return\n      const params = new URLSearchParams(searchParams?.toString() ?? '')\n      if (next === defaultZone) {\n        params.delete('zone')\n      } else {\n        params.set('zone', next)\n      }\n      const query = params.toString()\n      router.replace(query.length ? `?${query}` : '?', { scroll: false })\n    },\n    [defaultZone, router, searchParams, syncToUrl],\n  )\n\n  const handleKeyDown = React.useCallback(\n    (event: React.KeyboardEvent<HTMLDivElement>) => {\n      if (event.key !== 'ArrowLeft' && event.key !== 'ArrowRight') return\n      event.preventDefault()\n      const currentIndex = ZONES.findIndex((entry) => entry.id === zone)\n      if (currentIndex < 0) return\n      const offset = event.key === 'ArrowRight' ? 1 : -1\n      const nextIndex = (currentIndex + offset + ZONES.length) % ZONES.length\n      handleZoneChange(ZONES[nextIndex].id)\n    },\n    [handleZoneChange, zone],\n  )\n\n  return (\n    <div className=\"space-y-4\">\n      <div\n        role=\"tablist\"\n        aria-label={t(\n          'customers.people.mobile.zoneSwitcher.ariaLabel',\n          'Zone selector',\n        )}\n        className=\"grid grid-cols-2 gap-1 rounded-lg border border-border/70 bg-muted/20 p-1\"\n        onKeyDown={handleKeyDown}\n      >\n        {ZONES.map((entry) => {\n          const isActive = zone === entry.id\n          return (\n            <Button\n              key={entry.id}\n              type=\"button\"\n              role=\"tab\"\n              aria-selected={isActive}\n              aria-controls={`mobile-person-zone-${entry.id}`}\n              variant={isActive ? 'default' : 'ghost'}\n              className={cn(\n                'h-11 rounded-lg text-sm font-semibold',\n                isActive ? '' : 'text-muted-foreground',\n              )}\n              onClick={() => handleZoneChange(entry.id)}\n            >\n              {t(entry.labelKey, entry.fallback)}\n            </Button>\n          )\n        })}\n      </div>\n      <div\n        id={`mobile-person-zone-${zone}`}\n        role=\"tabpanel\"\n        aria-labelledby={`mobile-person-zone-${zone}-tab`}\n      >\n        {zone === 'details' ? zone1 : zone2}\n      </div>\n    </div>\n  )\n}\n\nexport default MobilePersonDetail\n"],
+  "mappings": ";AAiFI,SAaQ,KAbR;AA/EJ,YAAY,WAAW;AACvB,SAAS,WAAW,uBAAuB;AAC3C,SAAS,YAAY;AACrB,SAAS,UAAU;AACnB,SAAS,cAAc;AAevB,MAAM,QAA6E;AAAA,EACjF,EAAE,IAAI,WAAW,UAAU,gDAAgD,UAAU,UAAU;AAAA,EAC/F,EAAE,IAAI,YAAY,UAAU,iDAAiD,UAAU,WAAW;AACpG;AAEO,SAAS,mBAAmB;AAAA,EACjC;AAAA,EACA;AAAA,EACA,cAAc;AAAA,EACd,YAAY;AACd,GAA4B;AAC1B,QAAM,IAAI,KAAK;AACf,QAAM,SAAS,UAAU;AACzB,QAAM,eAAe,gBAAgB;AAErC,QAAM,cAAc,MAAM,QAA0B,MAAM;AACxD,QAAI,CAAC,UAAW,QAAO;AACvB,UAAM,MAAM,cAAc,IAAI,MAAM;AACpC,QAAI,QAAQ,cAAc,QAAQ,UAAW,QAAO;AACpD,WAAO;AAAA,EAKT,GAAG,CAAC,CAAC;AAEL,QAAM,CAAC,MAAM,OAAO,IAAI,MAAM,SAA2B,WAAW;AACpE,QAAM,qBAAqB,MAAM,OAAgC,IAAI;AAErE,QAAM,mBAAmB,MAAM;AAAA,IAC7B,CAAC,SAA2B;AAC1B,cAAQ,IAAI;AACZ,yBAAmB,UAAU;AAC7B,UAAI,CAAC,UAAW;AAChB,YAAM,SAAS,IAAI,gBAAgB,cAAc,SAAS,KAAK,EAAE;AACjE,UAAI,SAAS,aAAa;AACxB,eAAO,OAAO,MAAM;AAAA,MACtB,OAAO;AACL,eAAO,IAAI,QAAQ,IAAI;AAAA,MACzB;AACA,YAAM,QAAQ,OAAO,SAAS;AAC9B,aAAO,QAAQ,MAAM,SAAS,IAAI,KAAK,KAAK,KAAK,EAAE,QAAQ,MAAM,CAAC;AAAA,IACpE;AAAA,IACA,CAAC,aAAa,QAAQ,cAAc,SAAS;AAAA,EAC/C;AAEA,QAAM,gBAAgB,MAAM;AAAA,IAC1B,CAAC,UAA+C;AAC9C,UAAI,MAAM,QAAQ,eAAe,MAAM,QAAQ,aAAc;AAC7D,YAAM,eAAe;AACrB,YAAM,eAAe,MAAM,UAAU,CAAC,UAAU,MAAM,OAAO,IAAI;AACjE,UAAI,eAAe,EAAG;AACtB,YAAM,SAAS,MAAM,QAAQ,eAAe,IAAI;AAChD,YAAM,aAAa,eAAe,SAAS,MAAM,UAAU,MAAM;AACjE,uBAAiB,MAAM,SAAS,EAAE,EAAE;AAAA,IACtC;AAAA,IACA,CAAC,kBAAkB,IAAI;AAAA,EACzB;AAEA,SACE,qBAAC,SAAI,WAAU,aACb;AAAA;AAAA,MAAC;AAAA;AAAA,QACC,MAAK;AAAA,QACL,cAAY;AAAA,UACV;AAAA,UACA;AAAA,QACF;AAAA,QACA,WAAU;AAAA,QACV,WAAW;AAAA,QAEV,gBAAM,IAAI,CAAC,UAAU;AACpB,gBAAM,WAAW,SAAS,MAAM;AAChC,iBACE;AAAA,YAAC;AAAA;AAAA,cAEC,MAAK;AAAA,cACL,MAAK;AAAA,cACL,iBAAe;AAAA,cACf,iBAAe,sBAAsB,MAAM,EAAE;AAAA,cAC7C,SAAS,WAAW,YAAY;AAAA,cAChC,WAAW;AAAA,gBACT;AAAA,gBACA,WAAW,KAAK;AAAA,cAClB;AAAA,cACA,SAAS,MAAM,iBAAiB,MAAM,EAAE;AAAA,cAEvC,YAAE,MAAM,UAAU,MAAM,QAAQ;AAAA;AAAA,YAZ5B,MAAM;AAAA,UAab;AAAA,QAEJ,CAAC;AAAA;AAAA,IACH;AAAA,IACA;AAAA,MAAC;AAAA;AAAA,QACC,IAAI,sBAAsB,IAAI;AAAA,QAC9B,MAAK;AAAA,QACL,mBAAiB,sBAAsB,IAAI;AAAA,QAE1C,mBAAS,YAAY,QAAQ;AAAA;AAAA,IAChC;AAAA,KACF;AAEJ;AAEA,IAAO,6BAAQ;",
   "names": []
 }

package/dist/modules/customers/components/detail/PersonDetailTabs.js

@@ -1,9 +1,9 @@
 "use client";
 import { jsx, jsxs } from "react/jsx-runtime";
 import * as React from "react";
+import { cn } from "@open-mercato/shared/lib/utils";
 import { useT } from "@open-mercato/shared/lib/i18n/context";
 import { Button } from "@open-mercato/ui/primitives/button";
-import { Tabs, TabsList, TabsTrigger } from "@open-mercato/ui/primitives/tabs";
 import {
   SquareCheckBig,
   Mail,
@@ -20,9 +20,12 @@ function resolveLegacyTab(tab) {
   if (!tab) return "activities";
   return SUPPORTED_TAB_IDS.has(tab) ? tab : "activities";
 }
-function formatTabCount(count) {
-  if (count <= 0) return void 0;
-  return count > 999 ? "999+" : count;
+function CountBadge({ count }) {
+  if (count <= 0) return null;
+  return /* @__PURE__ */ jsx("span", { className: "ml-1 rounded-full bg-muted px-1.5 py-0.5 text-xs font-medium leading-none text-muted-foreground", children: count > 999 ? "999+" : count });
+}
+function NewBadge() {
+  return /* @__PURE__ */ jsx("span", { className: "ml-1.5 rounded bg-foreground px-1.5 py-0.5 text-overline font-semibold leading-none text-background", children: "NEW" });
 }
 function PersonDetailTabs({
   activeTab,
@@ -44,7 +47,7 @@ function PersonDetailTabs({
         id: "activities",
         label: t("customers.people.detail.tabs.activities", "Activities"),
         icon: /* @__PURE__ */ jsx(SquareCheckBig, { className: "size-4" }),
-        count: formatTabCount(activitiesCount)
+        badge: /* @__PURE__ */ jsx(CountBadge, { count: activitiesCount })
       },
       {
         id: "emails",
@@ -55,37 +58,37 @@ function PersonDetailTabs({
         id: "deals",
         label: t("customers.people.detail.tabs.deals", "Deals"),
         icon: /* @__PURE__ */ jsx(Briefcase, { className: "size-4" }),
-        count: formatTabCount(dealsCount)
+        badge: /* @__PURE__ */ jsx(CountBadge, { count: dealsCount })
       },
       {
         id: "companies",
         label: t("customers.people.detail.tabs.companies", "Companies"),
         icon: /* @__PURE__ */ jsx(Building2, { className: "size-4" }),
-        count: formatTabCount(companiesCount)
+        badge: /* @__PURE__ */ jsx(CountBadge, { count: companiesCount })
       },
       {
         id: "addresses",
         label: t("customers.people.detail.tabs.addresses", "Addresses"),
         icon: /* @__PURE__ */ jsx(MapPin, { className: "size-4" }),
-        count: formatTabCount(addressesCount)
+        badge: /* @__PURE__ */ jsx(CountBadge, { count: addressesCount })
       },
       {
         id: "tasks",
         label: t("customers.people.detail.tabs.tasks", "Tasks"),
         icon: /* @__PURE__ */ jsx(Check, { className: "size-4" }),
-        count: formatTabCount(tasksCount)
+        badge: /* @__PURE__ */ jsx(CountBadge, { count: tasksCount })
       },
       {
         id: "changelog",
         label: t("customers.people.detail.tabs.changelog", "Change log"),
         icon: /* @__PURE__ */ jsx(History, { className: "size-4" }),
-        count: "NEW"
+        badge: /* @__PURE__ */ jsx(NewBadge, {})
       },
       {
         id: "files",
         label: t("customers.people.detail.tabs.files", "Files"),
         icon: /* @__PURE__ */ jsx(Paperclip, { className: "size-4" }),
-        count: formatTabCount(filesCount)
+        badge: /* @__PURE__ */ jsx(CountBadge, { count: filesCount })
       }
     ],
     [t, activitiesCount, dealsCount, companiesCount, addressesCount, tasksCount, filesCount]
@@ -101,24 +104,31 @@ function PersonDetailTabs({
     [builtInTabs, injectedTabs]
   );
   return /* @__PURE__ */ jsxs("div", { children: [
-    /* @__PURE__ */ jsxs("div", { className: "flex items-end justify-between gap-2 border-b", children: [
-      /* @__PURE__ */ jsx(
-        Tabs,
-        {
-          value: activeTab,
-          onValueChange: (value) => onTabChange(value),
-          variant: "underline",
-          className: "min-w-0 flex-1",
-          children: /* @__PURE__ */ jsx(
-            TabsList,
-            {
-              "aria-label": t("customers.people.detail.tabs.label", "Person detail sections"),
-              className: "-mb-px w-full overflow-x-auto border-b-0 px-1",
-              children: allTabs.map((tab) => /* @__PURE__ */ jsx(TabsTrigger, { value: tab.id, leading: tab.icon, count: tab.count, children: tab.label }, tab.id))
-            }
-          )
-        }
-      ),
+    /* @__PURE__ */ jsxs("div", { className: "flex items-end justify-between gap-2 border-b", role: "tablist", "aria-label": t("customers.people.detail.tabs.label", "Person detail sections"), children: [
+      /* @__PURE__ */ jsx("nav", { className: "-mb-px flex flex-1 gap-1 overflow-x-auto px-1", children: allTabs.map((tab) => {
+        const isActive = activeTab === tab.id;
+        return /* @__PURE__ */ jsxs(
+          Button,
+          {
+            type: "button",
+            variant: "ghost",
+            size: "sm",
+            role: "tab",
+            "aria-selected": isActive,
+            onClick: () => onTabChange(tab.id),
+            className: cn(
+              "h-auto shrink-0 rounded-none border-b-2 px-3 py-2.5 hover:bg-transparent",
+              isActive ? "border-foreground text-foreground font-semibold" : "border-transparent text-muted-foreground hover:text-foreground"
+            ),
+            children: [
+              tab.icon && /* @__PURE__ */ jsx("span", { className: "mr-1.5", children: tab.icon }),
+              tab.label,
+              tab.badge
+            ]
+          },
+          tab.id
+        );
+      }) }),
       sectionAction ? /* @__PURE__ */ jsxs(
         Button,
         {

package/dist/modules/customers/components/detail/PersonDetailTabs.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../src/modules/customers/components/detail/PersonDetailTabs.tsx"],
-  "sourcesContent": ["\"use client\"\n\nimport * as React from 'react'\nimport { useT } from '@open-mercato/shared/lib/i18n/context'\nimport { Button } from '@open-mercato/ui/primitives/button'\nimport { Tabs, TabsList, TabsTrigger } from '@open-mercato/ui/primitives/tabs'\nimport {\n  SquareCheckBig,\n  Mail,\n  Briefcase,\n  Building2,\n  Check,\n  History,\n  Paperclip,\n  Plus,\n  MapPin,\n} from 'lucide-react'\nimport type { SectionAction } from '@open-mercato/ui/backend/detail'\n\nexport type PersonTabId =\n  | 'activities'\n  | 'emails'\n  | 'deals'\n  | 'companies'\n  | 'addresses'\n  | 'tasks'\n  | 'changelog'\n  | 'files'\n  | string\n\ntype TabDef = {\n  id: PersonTabId\n  label: string\n  icon?: React.ReactNode\n  count?: React.ReactNode\n}\n\ntype PersonDetailTabsProps = {\n  activeTab: PersonTabId\n  onTabChange: (tab: PersonTabId) => void\n  injectedTabs?: Array<{ id: string; label: string }>\n  activitiesCount?: number\n  dealsCount?: number\n  companiesCount?: number\n  addressesCount?: number\n  tasksCount?: number\n  filesCount?: number\n  sectionAction?: SectionAction | null\n  children: React.ReactNode\n}\n\nconst SUPPORTED_TAB_IDS = new Set<PersonTabId>(['activities', 'emails', 'deals', 'companies', 'addresses', 'tasks', 'changelog', 'files'])\n\nexport function resolveLegacyTab(tab: string | null | undefined): PersonTabId {\n  if (!tab) return 'activities'\n  return SUPPORTED_TAB_IDS.has(tab as PersonTabId) ? (tab as PersonTabId) : 'activities'\n}\n\nfunction formatTabCount(count: number): string | number | undefined {\n  if (count <= 0) return undefined\n  return count > 999 ? '999+' : count\n}\n\nexport function PersonDetailTabs({\n  activeTab,\n  onTabChange,\n  injectedTabs = [],\n  activitiesCount = 0,\n  dealsCount = 0,\n  companiesCount = 0,\n  addressesCount = 0,\n  tasksCount = 0,\n  filesCount = 0,\n  sectionAction = null,\n  children,\n}: PersonDetailTabsProps) {\n  const t = useT()\n\n  const builtInTabs: TabDef[] = React.useMemo(\n    () => [\n      {\n        id: 'activities',\n        label: t('customers.people.detail.tabs.activities', 'Activities'),\n        icon: <SquareCheckBig className=\"size-4\" />,\n        count: formatTabCount(activitiesCount),\n      },\n      {\n        id: 'emails',\n        label: t('customers.people.detail.tabs.emails', 'Emails'),\n        icon: <Mail className=\"size-4\" />,\n      },\n      {\n        id: 'deals',\n        label: t('customers.people.detail.tabs.deals', 'Deals'),\n        icon: <Briefcase className=\"size-4\" />,\n        count: formatTabCount(dealsCount),\n      },\n      {\n        id: 'companies',\n        label: t('customers.people.detail.tabs.companies', 'Companies'),\n        icon: <Building2 className=\"size-4\" />,\n        count: formatTabCount(companiesCount),\n      },\n      {\n        id: 'addresses',\n        label: t('customers.people.detail.tabs.addresses', 'Addresses'),\n        icon: <MapPin className=\"size-4\" />,\n        count: formatTabCount(addressesCount),\n      },\n      {\n        id: 'tasks',\n        label: t('customers.people.detail.tabs.tasks', 'Tasks'),\n        icon: <Check className=\"size-4\" />,\n        count: formatTabCount(tasksCount),\n      },\n      {\n        id: 'changelog',\n        label: t('customers.people.detail.tabs.changelog', 'Change log'),\n        icon: <History className=\"size-4\" />,\n        count: 'NEW',\n      },\n      {\n        id: 'files',\n        label: t('customers.people.detail.tabs.files', 'Files'),\n        icon: <Paperclip className=\"size-4\" />,\n        count: formatTabCount(filesCount),\n      },\n    ],\n    [t, activitiesCount, dealsCount, companiesCount, addressesCount, tasksCount, filesCount],\n  )\n\n  const allTabs: TabDef[] = React.useMemo(\n    () => [\n      ...builtInTabs,\n      ...injectedTabs.map((tab) => ({\n        id: tab.id as PersonTabId,\n        label: tab.label,\n      })),\n    ],\n    [builtInTabs, injectedTabs],\n  )\n\n  return (\n    <div>\n      {/* Tab navigation \u2014 full width above both zones */}\n      <div className=\"flex items-end justify-between gap-2 border-b\">\n        <Tabs\n          value={activeTab}\n          onValueChange={(value) => onTabChange(value as PersonTabId)}\n          variant=\"underline\"\n          className=\"min-w-0 flex-1\"\n        >\n          <TabsList\n            aria-label={t('customers.people.detail.tabs.label', 'Person detail sections')}\n            className=\"-mb-px w-full overflow-x-auto border-b-0 px-1\"\n          >\n            {allTabs.map((tab) => (\n              <TabsTrigger key={tab.id} value={tab.id} leading={tab.icon} count={tab.count}>\n                {tab.label}\n              </TabsTrigger>\n            ))}\n          </TabsList>\n        </Tabs>\n        {sectionAction ? (\n          <Button\n            type=\"button\"\n            size=\"sm\"\n            onClick={sectionAction.onClick}\n            disabled={sectionAction.disabled}\n            className=\"mb-1.5 mr-1 shrink-0\"\n          >\n            <Plus className=\"mr-1.5 h-4 w-4\" />\n            {sectionAction.label}\n          </Button>\n        ) : null}\n      </div>\n\n      {/* Two-column content below tabs */}\n      <div className=\"pt-6\">\n        {children}\n      </div>\n    </div>\n  )\n}\n"],
-  "mappings": ";AAmFc,cAiFJ,YAjFI;AAjFd,YAAY,WAAW;AACvB,SAAS,YAAY;AACrB,SAAS,cAAc;AACvB,SAAS,MAAM,UAAU,mBAAmB;AAC5C;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAmCP,MAAM,oBAAoB,oBAAI,IAAiB,CAAC,cAAc,UAAU,SAAS,aAAa,aAAa,SAAS,aAAa,OAAO,CAAC;AAElI,SAAS,iBAAiB,KAA6C;AAC5E,MAAI,CAAC,IAAK,QAAO;AACjB,SAAO,kBAAkB,IAAI,GAAkB,IAAK,MAAsB;AAC5E;AAEA,SAAS,eAAe,OAA4C;AAClE,MAAI,SAAS,EAAG,QAAO;AACvB,SAAO,QAAQ,MAAM,SAAS;AAChC;AAEO,SAAS,iBAAiB;AAAA,EAC/B;AAAA,EACA;AAAA,EACA,eAAe,CAAC;AAAA,EAChB,kBAAkB;AAAA,EAClB,aAAa;AAAA,EACb,iBAAiB;AAAA,EACjB,iBAAiB;AAAA,EACjB,aAAa;AAAA,EACb,aAAa;AAAA,EACb,gBAAgB;AAAA,EAChB;AACF,GAA0B;AACxB,QAAM,IAAI,KAAK;AAEf,QAAM,cAAwB,MAAM;AAAA,IAClC,MAAM;AAAA,MACJ;AAAA,QACE,IAAI;AAAA,QACJ,OAAO,EAAE,2CAA2C,YAAY;AAAA,QAChE,MAAM,oBAAC,kBAAe,WAAU,UAAS;AAAA,QACzC,OAAO,eAAe,eAAe;AAAA,MACvC;AAAA,MACA;AAAA,QACE,IAAI;AAAA,QACJ,OAAO,EAAE,uCAAuC,QAAQ;AAAA,QACxD,MAAM,oBAAC,QAAK,WAAU,UAAS;AAAA,MACjC;AAAA,MACA;AAAA,QACE,IAAI;AAAA,QACJ,OAAO,EAAE,sCAAsC,OAAO;AAAA,QACtD,MAAM,oBAAC,aAAU,WAAU,UAAS;AAAA,QACpC,OAAO,eAAe,UAAU;AAAA,MAClC;AAAA,MACA;AAAA,QACE,IAAI;AAAA,QACJ,OAAO,EAAE,0CAA0C,WAAW;AAAA,QAC9D,MAAM,oBAAC,aAAU,WAAU,UAAS;AAAA,QACpC,OAAO,eAAe,cAAc;AAAA,MACtC;AAAA,MACA;AAAA,QACE,IAAI;AAAA,QACJ,OAAO,EAAE,0CAA0C,WAAW;AAAA,QAC9D,MAAM,oBAAC,UAAO,WAAU,UAAS;AAAA,QACjC,OAAO,eAAe,cAAc;AAAA,MACtC;AAAA,MACA;AAAA,QACE,IAAI;AAAA,QACJ,OAAO,EAAE,sCAAsC,OAAO;AAAA,QACtD,MAAM,oBAAC,SAAM,WAAU,UAAS;AAAA,QAChC,OAAO,eAAe,UAAU;AAAA,MAClC;AAAA,MACA;AAAA,QACE,IAAI;AAAA,QACJ,OAAO,EAAE,0CAA0C,YAAY;AAAA,QAC/D,MAAM,oBAAC,WAAQ,WAAU,UAAS;AAAA,QAClC,OAAO;AAAA,MACT;AAAA,MACA;AAAA,QACE,IAAI;AAAA,QACJ,OAAO,EAAE,sCAAsC,OAAO;AAAA,QACtD,MAAM,oBAAC,aAAU,WAAU,UAAS;AAAA,QACpC,OAAO,eAAe,UAAU;AAAA,MAClC;AAAA,IACF;AAAA,IACA,CAAC,GAAG,iBAAiB,YAAY,gBAAgB,gBAAgB,YAAY,UAAU;AAAA,EACzF;AAEA,QAAM,UAAoB,MAAM;AAAA,IAC9B,MAAM;AAAA,MACJ,GAAG;AAAA,MACH,GAAG,aAAa,IAAI,CAAC,SAAS;AAAA,QAC5B,IAAI,IAAI;AAAA,QACR,OAAO,IAAI;AAAA,MACb,EAAE;AAAA,IACJ;AAAA,IACA,CAAC,aAAa,YAAY;AAAA,EAC5B;AAEA,SACE,qBAAC,SAEC;AAAA,yBAAC,SAAI,WAAU,iDACb;AAAA;AAAA,QAAC;AAAA;AAAA,UACC,OAAO;AAAA,UACP,eAAe,CAAC,UAAU,YAAY,KAAoB;AAAA,UAC1D,SAAQ;AAAA,UACR,WAAU;AAAA,UAEV;AAAA,YAAC;AAAA;AAAA,cACC,cAAY,EAAE,sCAAsC,wBAAwB;AAAA,cAC5E,WAAU;AAAA,cAET,kBAAQ,IAAI,CAAC,QACZ,oBAAC,eAAyB,OAAO,IAAI,IAAI,SAAS,IAAI,MAAM,OAAO,IAAI,OACpE,cAAI,SADW,IAAI,EAEtB,CACD;AAAA;AAAA,UACH;AAAA;AAAA,MACF;AAAA,MACC,gBACC;AAAA,QAAC;AAAA;AAAA,UACC,MAAK;AAAA,UACL,MAAK;AAAA,UACL,SAAS,cAAc;AAAA,UACvB,UAAU,cAAc;AAAA,UACxB,WAAU;AAAA,UAEV;AAAA,gCAAC,QAAK,WAAU,kBAAiB;AAAA,YAChC,cAAc;AAAA;AAAA;AAAA,MACjB,IACE;AAAA,OACN;AAAA,IAGA,oBAAC,SAAI,WAAU,QACZ,UACH;AAAA,KACF;AAEJ;",
+  "sourcesContent": ["\"use client\"\n\nimport * as React from 'react'\nimport { cn } from '@open-mercato/shared/lib/utils'\nimport { useT } from '@open-mercato/shared/lib/i18n/context'\nimport { Button } from '@open-mercato/ui/primitives/button'\nimport {\n  SquareCheckBig,\n  Mail,\n  Briefcase,\n  Building2,\n  Check,\n  History,\n  Paperclip,\n  Plus,\n  MapPin,\n} from 'lucide-react'\nimport type { SectionAction } from '@open-mercato/ui/backend/detail'\n\nexport type PersonTabId =\n  | 'activities'\n  | 'emails'\n  | 'deals'\n  | 'companies'\n  | 'addresses'\n  | 'tasks'\n  | 'changelog'\n  | 'files'\n  | string\n\ntype TabDef = {\n  id: PersonTabId\n  label: string\n  icon?: React.ReactNode\n  badge?: React.ReactNode\n}\n\ntype PersonDetailTabsProps = {\n  activeTab: PersonTabId\n  onTabChange: (tab: PersonTabId) => void\n  injectedTabs?: Array<{ id: string; label: string }>\n  activitiesCount?: number\n  dealsCount?: number\n  companiesCount?: number\n  addressesCount?: number\n  tasksCount?: number\n  filesCount?: number\n  sectionAction?: SectionAction | null\n  children: React.ReactNode\n}\n\nconst SUPPORTED_TAB_IDS = new Set<PersonTabId>(['activities', 'emails', 'deals', 'companies', 'addresses', 'tasks', 'changelog', 'files'])\n\nexport function resolveLegacyTab(tab: string | null | undefined): PersonTabId {\n  if (!tab) return 'activities'\n  return SUPPORTED_TAB_IDS.has(tab as PersonTabId) ? (tab as PersonTabId) : 'activities'\n}\n\nfunction CountBadge({ count }: { count: number }) {\n  if (count <= 0) return null\n  return (\n    <span className=\"ml-1 rounded-full bg-muted px-1.5 py-0.5 text-xs font-medium leading-none text-muted-foreground\">\n      {count > 999 ? '999+' : count}\n    </span>\n  )\n}\n\nfunction NewBadge() {\n  return (\n    <span className=\"ml-1.5 rounded bg-foreground px-1.5 py-0.5 text-overline font-semibold leading-none text-background\">\n      NEW\n    </span>\n  )\n}\n\nexport function PersonDetailTabs({\n  activeTab,\n  onTabChange,\n  injectedTabs = [],\n  activitiesCount = 0,\n  dealsCount = 0,\n  companiesCount = 0,\n  addressesCount = 0,\n  tasksCount = 0,\n  filesCount = 0,\n  sectionAction = null,\n  children,\n}: PersonDetailTabsProps) {\n  const t = useT()\n\n  const builtInTabs: TabDef[] = React.useMemo(\n    () => [\n      {\n        id: 'activities',\n        label: t('customers.people.detail.tabs.activities', 'Activities'),\n        icon: <SquareCheckBig className=\"size-4\" />,\n        badge: <CountBadge count={activitiesCount} />,\n      },\n      {\n        id: 'emails',\n        label: t('customers.people.detail.tabs.emails', 'Emails'),\n        icon: <Mail className=\"size-4\" />,\n      },\n      {\n        id: 'deals',\n        label: t('customers.people.detail.tabs.deals', 'Deals'),\n        icon: <Briefcase className=\"size-4\" />,\n        badge: <CountBadge count={dealsCount} />,\n      },\n      {\n        id: 'companies',\n        label: t('customers.people.detail.tabs.companies', 'Companies'),\n        icon: <Building2 className=\"size-4\" />,\n        badge: <CountBadge count={companiesCount} />,\n      },\n      {\n        id: 'addresses',\n        label: t('customers.people.detail.tabs.addresses', 'Addresses'),\n        icon: <MapPin className=\"size-4\" />,\n        badge: <CountBadge count={addressesCount} />,\n      },\n      {\n        id: 'tasks',\n        label: t('customers.people.detail.tabs.tasks', 'Tasks'),\n        icon: <Check className=\"size-4\" />,\n        badge: <CountBadge count={tasksCount} />,\n      },\n      {\n        id: 'changelog',\n        label: t('customers.people.detail.tabs.changelog', 'Change log'),\n        icon: <History className=\"size-4\" />,\n        badge: <NewBadge />,\n      },\n      {\n        id: 'files',\n        label: t('customers.people.detail.tabs.files', 'Files'),\n        icon: <Paperclip className=\"size-4\" />,\n        badge: <CountBadge count={filesCount} />,\n      },\n    ],\n    [t, activitiesCount, dealsCount, companiesCount, addressesCount, tasksCount, filesCount],\n  )\n\n  const allTabs: TabDef[] = React.useMemo(\n    () => [\n      ...builtInTabs,\n      ...injectedTabs.map((tab) => ({\n        id: tab.id as PersonTabId,\n        label: tab.label,\n      })),\n    ],\n    [builtInTabs, injectedTabs],\n  )\n\n  return (\n    <div>\n      {/* Tab navigation \u2014 full width above both zones */}\n      <div className=\"flex items-end justify-between gap-2 border-b\" role=\"tablist\" aria-label={t('customers.people.detail.tabs.label', 'Person detail sections')}>\n        <nav className=\"-mb-px flex flex-1 gap-1 overflow-x-auto px-1\">\n          {allTabs.map((tab) => {\n            const isActive = activeTab === tab.id\n            return (\n              <Button\n                key={tab.id}\n                type=\"button\"\n                variant=\"ghost\"\n                size=\"sm\"\n                role=\"tab\"\n                aria-selected={isActive}\n                onClick={() => onTabChange(tab.id)}\n                className={cn(\n                  'h-auto shrink-0 rounded-none border-b-2 px-3 py-2.5 hover:bg-transparent',\n                  isActive\n                    ? 'border-foreground text-foreground font-semibold'\n                    : 'border-transparent text-muted-foreground hover:text-foreground',\n                )}\n              >\n                {tab.icon && <span className=\"mr-1.5\">{tab.icon}</span>}\n                {tab.label}\n                {tab.badge}\n              </Button>\n            )\n          })}\n        </nav>\n        {sectionAction ? (\n          <Button\n            type=\"button\"\n            size=\"sm\"\n            onClick={sectionAction.onClick}\n            disabled={sectionAction.disabled}\n            className=\"mb-1.5 mr-1 shrink-0\"\n          >\n            <Plus className=\"mr-1.5 h-4 w-4\" />\n            {sectionAction.label}\n          </Button>\n        ) : null}\n      </div>\n\n      {/* Two-column content below tabs */}\n      <div className=\"pt-6\">\n        {children}\n      </div>\n    </div>\n  )\n}\n"],
+  "mappings": ";AA6DI,cAqGU,YArGV;AA3DJ,YAAY,WAAW;AACvB,SAAS,UAAU;AACnB,SAAS,YAAY;AACrB,SAAS,cAAc;AACvB;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAmCP,MAAM,oBAAoB,oBAAI,IAAiB,CAAC,cAAc,UAAU,SAAS,aAAa,aAAa,SAAS,aAAa,OAAO,CAAC;AAElI,SAAS,iBAAiB,KAA6C;AAC5E,MAAI,CAAC,IAAK,QAAO;AACjB,SAAO,kBAAkB,IAAI,GAAkB,IAAK,MAAsB;AAC5E;AAEA,SAAS,WAAW,EAAE,MAAM,GAAsB;AAChD,MAAI,SAAS,EAAG,QAAO;AACvB,SACE,oBAAC,UAAK,WAAU,mGACb,kBAAQ,MAAM,SAAS,OAC1B;AAEJ;AAEA,SAAS,WAAW;AAClB,SACE,oBAAC,UAAK,WAAU,uGAAsG,iBAEtH;AAEJ;AAEO,SAAS,iBAAiB;AAAA,EAC/B;AAAA,EACA;AAAA,EACA,eAAe,CAAC;AAAA,EAChB,kBAAkB;AAAA,EAClB,aAAa;AAAA,EACb,iBAAiB;AAAA,EACjB,iBAAiB;AAAA,EACjB,aAAa;AAAA,EACb,aAAa;AAAA,EACb,gBAAgB;AAAA,EAChB;AACF,GAA0B;AACxB,QAAM,IAAI,KAAK;AAEf,QAAM,cAAwB,MAAM;AAAA,IAClC,MAAM;AAAA,MACJ;AAAA,QACE,IAAI;AAAA,QACJ,OAAO,EAAE,2CAA2C,YAAY;AAAA,QAChE,MAAM,oBAAC,kBAAe,WAAU,UAAS;AAAA,QACzC,OAAO,oBAAC,cAAW,OAAO,iBAAiB;AAAA,MAC7C;AAAA,MACA;AAAA,QACE,IAAI;AAAA,QACJ,OAAO,EAAE,uCAAuC,QAAQ;AAAA,QACxD,MAAM,oBAAC,QAAK,WAAU,UAAS;AAAA,MACjC;AAAA,MACA;AAAA,QACE,IAAI;AAAA,QACJ,OAAO,EAAE,sCAAsC,OAAO;AAAA,QACtD,MAAM,oBAAC,aAAU,WAAU,UAAS;AAAA,QACpC,OAAO,oBAAC,cAAW,OAAO,YAAY;AAAA,MACxC;AAAA,MACA;AAAA,QACE,IAAI;AAAA,QACJ,OAAO,EAAE,0CAA0C,WAAW;AAAA,QAC9D,MAAM,oBAAC,aAAU,WAAU,UAAS;AAAA,QACpC,OAAO,oBAAC,cAAW,OAAO,gBAAgB;AAAA,MAC5C;AAAA,MACA;AAAA,QACE,IAAI;AAAA,QACJ,OAAO,EAAE,0CAA0C,WAAW;AAAA,QAC9D,MAAM,oBAAC,UAAO,WAAU,UAAS;AAAA,QACjC,OAAO,oBAAC,cAAW,OAAO,gBAAgB;AAAA,MAC5C;AAAA,MACA;AAAA,QACE,IAAI;AAAA,QACJ,OAAO,EAAE,sCAAsC,OAAO;AAAA,QACtD,MAAM,oBAAC,SAAM,WAAU,UAAS;AAAA,QAChC,OAAO,oBAAC,cAAW,OAAO,YAAY;AAAA,MACxC;AAAA,MACA;AAAA,QACE,IAAI;AAAA,QACJ,OAAO,EAAE,0CAA0C,YAAY;AAAA,QAC/D,MAAM,oBAAC,WAAQ,WAAU,UAAS;AAAA,QAClC,OAAO,oBAAC,YAAS;AAAA,MACnB;AAAA,MACA;AAAA,QACE,IAAI;AAAA,QACJ,OAAO,EAAE,sCAAsC,OAAO;AAAA,QACtD,MAAM,oBAAC,aAAU,WAAU,UAAS;AAAA,QACpC,OAAO,oBAAC,cAAW,OAAO,YAAY;AAAA,MACxC;AAAA,IACF;AAAA,IACA,CAAC,GAAG,iBAAiB,YAAY,gBAAgB,gBAAgB,YAAY,UAAU;AAAA,EACzF;AAEA,QAAM,UAAoB,MAAM;AAAA,IAC9B,MAAM;AAAA,MACJ,GAAG;AAAA,MACH,GAAG,aAAa,IAAI,CAAC,SAAS;AAAA,QAC5B,IAAI,IAAI;AAAA,QACR,OAAO,IAAI;AAAA,MACb,EAAE;AAAA,IACJ;AAAA,IACA,CAAC,aAAa,YAAY;AAAA,EAC5B;AAEA,SACE,qBAAC,SAEC;AAAA,yBAAC,SAAI,WAAU,iDAAgD,MAAK,WAAU,cAAY,EAAE,sCAAsC,wBAAwB,GACxJ;AAAA,0BAAC,SAAI,WAAU,iDACZ,kBAAQ,IAAI,CAAC,QAAQ;AACpB,cAAM,WAAW,cAAc,IAAI;AACnC,eACE;AAAA,UAAC;AAAA;AAAA,YAEC,MAAK;AAAA,YACL,SAAQ;AAAA,YACR,MAAK;AAAA,YACL,MAAK;AAAA,YACL,iBAAe;AAAA,YACf,SAAS,MAAM,YAAY,IAAI,EAAE;AAAA,YACjC,WAAW;AAAA,cACT;AAAA,cACA,WACI,oDACA;AAAA,YACN;AAAA,YAEC;AAAA,kBAAI,QAAQ,oBAAC,UAAK,WAAU,UAAU,cAAI,MAAK;AAAA,cAC/C,IAAI;AAAA,cACJ,IAAI;AAAA;AAAA;AAAA,UAhBA,IAAI;AAAA,QAiBX;AAAA,MAEJ,CAAC,GACH;AAAA,MACC,gBACC;AAAA,QAAC;AAAA;AAAA,UACC,MAAK;AAAA,UACL,MAAK;AAAA,UACL,SAAS,cAAc;AAAA,UACvB,UAAU,cAAc;AAAA,UACxB,WAAU;AAAA,UAEV;AAAA,gCAAC,QAAK,WAAU,kBAAiB;AAAA,YAChC,cAAc;AAAA;AAAA;AAAA,MACjB,IACE;AAAA,OACN;AAAA,IAGA,oBAAC,SAAI,WAAU,QACZ,UACH;AAAA,KACF;AAEJ;",
   "names": []
 }

package/dist/modules/dashboards/api/roles/widgets/route.js

@@ -6,10 +6,7 @@ import { DashboardRoleWidgets } from "@open-mercato/core/modules/dashboards/data
 import { Role } from "@open-mercato/core/modules/auth/data/entities";
 import { roleWidgetSettingsSchema } from "@open-mercato/core/modules/dashboards/data/validators";
 import { loadAllWidgets } from "@open-mercato/core/modules/dashboards/lib/widgets";
-import {
-  resolveWidgetAssignmentReadScope,
-  resolveWidgetAssignmentTargetAccess
-} from "@open-mercato/core/modules/dashboards/lib/widgetAssignmentScope";
+import { resolveWidgetAssignmentReadScope } from "@open-mercato/core/modules/dashboards/lib/widgetAssignmentScope";
 import { hasFeature } from "@open-mercato/shared/security/features";
 import {
   runCrudMutationGuardAfterSuccess,
@@ -64,15 +61,7 @@ async function GET(req) {
     queryOrganizationId: url.searchParams.get("organizationId")
   });
   const role = await em.findOne(Role, { id: roleId, deletedAt: null });
-  const access = resolveWidgetAssignmentTargetAccess({
-    isSuperAdmin: !!acl.isSuperAdmin,
-    scopeTenantId: tenantId,
-    target: role
-  });
-  if (access === "forbidden") {
-    return NextResponse.json({ error: "Forbidden" }, { status: 403 });
-  }
-  if (access === "not-found") {
+  if (!role || tenantId && role.tenantId !== tenantId) {
     return NextResponse.json({ error: "Role not found" }, { status: 404 });
   }
   const records = await em.find(DashboardRoleWidgets, { roleId, deletedAt: null });
@@ -114,15 +103,7 @@ async function PUT(req) {
   const tenantId = auth.tenantId ?? null;
   const organizationId = auth.orgId ?? null;
   const role = await em.findOne(Role, { id: parsed.data.roleId, deletedAt: null });
-  const access = resolveWidgetAssignmentTargetAccess({
-    isSuperAdmin: !!acl.isSuperAdmin,
-    scopeTenantId: tenantId,
-    target: role
-  });
-  if (access === "forbidden") {
-    return NextResponse.json({ error: "Forbidden" }, { status: 403 });
-  }
-  if (access === "not-found") {
+  if (!role || tenantId && role.tenantId !== tenantId) {
     return NextResponse.json({ error: "Role not found" }, { status: 404 });
   }
   const guardResult = await validateCrudMutationGuard(container, {

package/dist/modules/dashboards/api/roles/widgets/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../src/modules/dashboards/api/roles/widgets/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { DashboardRoleWidgets } from '@open-mercato/core/modules/dashboards/data/entities'\nimport { Role } from '@open-mercato/core/modules/auth/data/entities'\nimport { roleWidgetSettingsSchema } from '@open-mercato/core/modules/dashboards/data/validators'\nimport { loadAllWidgets } from '@open-mercato/core/modules/dashboards/lib/widgets'\nimport {\n  resolveWidgetAssignmentReadScope,\n  resolveWidgetAssignmentTargetAccess,\n} from '@open-mercato/core/modules/dashboards/lib/widgetAssignmentScope'\nimport { hasFeature } from '@open-mercato/shared/security/features'\nimport {\n  runCrudMutationGuardAfterSuccess,\n  validateCrudMutationGuard,\n} from '@open-mercato/shared/lib/crud/mutation-guard'\nimport type { OpenApiMethodDoc, OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport {\n  dashboardsTag,\n  dashboardsErrorSchema,\n  dashboardRoleWidgetsResponseSchema,\n  dashboardRoleWidgetsUpdateResponseSchema,\n} from '../../openapi'\n\nconst FEATURE = 'dashboards.admin.assign-widgets'\nconst RESOURCE_KIND = 'dashboards.roleWidgets'\n\nfunction pickBestRecord(records: DashboardRoleWidgets[], tenantId: string | null, organizationId: string | null): DashboardRoleWidgets | null {\n  let best: DashboardRoleWidgets | null = null\n  let bestScore = -1\n  for (const record of records) {\n    if (record.deletedAt) continue\n    if (record.tenantId && tenantId && record.tenantId !== tenantId) continue\n    if (record.tenantId && !tenantId) continue\n    if (record.organizationId && organizationId && record.organizationId !== organizationId) continue\n    if (record.organizationId && !organizationId) continue\n    const score = (record.tenantId ? 1 : 0) + (record.organizationId ? 2 : 0)\n    if (score > bestScore) {\n      best = record\n      bestScore = score\n    }\n  }\n  return best\n}\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: [FEATURE] },\n  PUT: { requireAuth: true, requireFeatures: [FEATURE] },\n}\n\nexport async function GET(req: Request) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth) return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n\n  const url = new URL(req.url)\n  const roleId = url.searchParams.get('roleId')\n  if (!roleId) return NextResponse.json({ error: 'roleId is required' }, { status: 400 })\n\n  const container = await createRequestContainer()\n  const em = container.resolve('em') as any\n  const rbac = container.resolve('rbacService') as any\n  const acl = await rbac.loadAcl(auth.sub, { tenantId: auth.tenantId ?? null, organizationId: auth.orgId ?? null })\n  if (!acl.isSuperAdmin && !hasFeature(acl.features, FEATURE)) {\n    return NextResponse.json({ error: 'Forbidden' }, { status: 403 })\n  }\n\n  const { tenantId, organizationId } = resolveWidgetAssignmentReadScope({\n    auth: { tenantId: auth.tenantId ?? null, orgId: auth.orgId ?? null },\n    isSuperAdmin: !!acl.isSuperAdmin,\n    queryTenantId: url.searchParams.get('tenantId'),\n    queryOrganizationId: url.searchParams.get('organizationId'),\n  })\n\n  const role = await em.findOne(Role, { id: roleId, deletedAt: null })\n  const access = resolveWidgetAssignmentTargetAccess({\n    isSuperAdmin: !!acl.isSuperAdmin,\n    scopeTenantId: tenantId,\n    target: role,\n  })\n  if (access === 'forbidden') {\n    return NextResponse.json({ error: 'Forbidden' }, { status: 403 })\n  }\n  if (access === 'not-found') {\n    return NextResponse.json({ error: 'Role not found' }, { status: 404 })\n  }\n\n  const records = await em.find(DashboardRoleWidgets, { roleId, deletedAt: null })\n  const best = pickBestRecord(records, tenantId, organizationId)\n\n  const response = {\n    widgetIds: best ? best.widgetIdsJson : [],\n    hasCustom: !!best,\n    scope: {\n      tenantId,\n      organizationId,\n    },\n  }\n\n  return NextResponse.json(response)\n}\n\nexport async function PUT(req: Request) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth) return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n\n  let payload: unknown\n  try {\n    payload = await req.json()\n  } catch {\n    return NextResponse.json({ error: 'Invalid JSON body' }, { status: 400 })\n  }\n  const parsed = roleWidgetSettingsSchema.safeParse(payload)\n  if (!parsed.success) {\n    return NextResponse.json({ error: 'Invalid payload', issues: parsed.error.issues }, { status: 400 })\n  }\n\n  const container = await createRequestContainer()\n  const { resolve } = container\n  const em = resolve('em') as any\n  const rbac = resolve('rbacService') as any\n  const acl = await rbac.loadAcl(auth.sub, { tenantId: auth.tenantId ?? null, organizationId: auth.orgId ?? null })\n  if (!acl.isSuperAdmin && !hasFeature(acl.features, FEATURE)) {\n    return NextResponse.json({ error: 'Forbidden' }, { status: 403 })\n  }\n\n  const widgets = await loadAllWidgets()\n  const validWidgetIds = new Set(widgets.map((w) => w.metadata.id))\n  const widgetIds = parsed.data.widgetIds.filter((id) => validWidgetIds.has(id))\n\n  const tenantId = auth.tenantId ?? null\n  const organizationId = auth.orgId ?? null\n\n  const role = await em.findOne(Role, { id: parsed.data.roleId, deletedAt: null })\n  const access = resolveWidgetAssignmentTargetAccess({\n    isSuperAdmin: !!acl.isSuperAdmin,\n    scopeTenantId: tenantId,\n    target: role,\n  })\n  if (access === 'forbidden') {\n    return NextResponse.json({ error: 'Forbidden' }, { status: 403 })\n  }\n  if (access === 'not-found') {\n    return NextResponse.json({ error: 'Role not found' }, { status: 404 })\n  }\n\n  const guardResult = await validateCrudMutationGuard(container, {\n    tenantId: tenantId ?? '',\n    organizationId,\n    userId: String(auth.sub),\n    resourceKind: RESOURCE_KIND,\n    resourceId: parsed.data.roleId,\n    operation: 'update',\n    requestMethod: req.method,\n    requestHeaders: req.headers,\n    mutationPayload: { roleId: parsed.data.roleId, widgetIds },\n  })\n  if (guardResult && !guardResult.ok) {\n    return NextResponse.json(guardResult.body, { status: guardResult.status })\n  }\n\n  let record = await em.findOne(DashboardRoleWidgets, {\n    roleId: parsed.data.roleId,\n    tenantId,\n    organizationId,\n    deletedAt: null,\n  })\n\n  if (!widgetIds.length) {\n    if (record) {\n      await em.remove(record).flush()\n    }\n    if (guardResult?.ok && guardResult.shouldRunAfterSuccess) {\n      await runCrudMutationGuardAfterSuccess(container, {\n        tenantId: tenantId ?? '',\n        organizationId,\n        userId: String(auth.sub),\n        resourceKind: RESOURCE_KIND,\n        resourceId: parsed.data.roleId,\n        operation: 'update',\n        requestMethod: req.method,\n        requestHeaders: req.headers,\n        metadata: guardResult.metadata ?? null,\n      })\n    }\n    return NextResponse.json({ ok: true, widgetIds: [] })\n  }\n\n  if (!record) {\n    record = em.create(DashboardRoleWidgets, {\n      roleId: parsed.data.roleId,\n      tenantId,\n      organizationId,\n      widgetIdsJson: widgetIds,\n    })\n    em.persist(record)\n  } else {\n    record.widgetIdsJson = widgetIds\n  }\n  await em.flush()\n\n  if (guardResult?.ok && guardResult.shouldRunAfterSuccess) {\n    await runCrudMutationGuardAfterSuccess(container, {\n      tenantId: tenantId ?? '',\n      organizationId,\n      userId: String(auth.sub),\n      resourceKind: RESOURCE_KIND,\n      resourceId: parsed.data.roleId,\n      operation: 'update',\n      requestMethod: req.method,\n      requestHeaders: req.headers,\n      metadata: guardResult.metadata ?? null,\n    })\n  }\n\n  return NextResponse.json({ ok: true, widgetIds })\n}\n\nconst roleWidgetsQuerySchema = z.object({\n  roleId: z.string().uuid(),\n  tenantId: z.string().uuid().optional(),\n  organizationId: z.string().uuid().optional(),\n})\n\nconst roleWidgetsGetDoc: OpenApiMethodDoc = {\n  summary: 'Fetch widget assignments for a role',\n  description: 'Returns the widgets explicitly assigned to the given role together with the evaluation scope.',\n  tags: [dashboardsTag],\n  query: roleWidgetsQuerySchema,\n  responses: [\n    { status: 200, description: 'Current widget configuration for the role.', schema: dashboardRoleWidgetsResponseSchema },\n  ],\n  errors: [\n    { status: 400, description: 'Missing role identifier', schema: dashboardsErrorSchema },\n    { status: 401, description: 'Authentication required', schema: dashboardsErrorSchema },\n    { status: 403, description: 'Insufficient permissions to manage role widgets', schema: dashboardsErrorSchema },\n  ],\n}\n\nconst roleWidgetsPutDoc: OpenApiMethodDoc = {\n  summary: 'Update widgets assigned to a role',\n  description: 'Persists the widget list for a role within the provided tenant and organization scope.',\n  tags: [dashboardsTag],\n  requestBody: {\n    contentType: 'application/json',\n    schema: roleWidgetSettingsSchema,\n    description: 'Role identifier and the widget ids that should remain assigned. Scope is derived from the authenticated session.',\n  },\n  responses: [\n    { status: 200, description: 'Widgets updated successfully.', schema: dashboardRoleWidgetsUpdateResponseSchema },\n  ],\n  errors: [\n    { status: 400, description: 'Invalid payload or unknown widgets', schema: dashboardsErrorSchema },\n    { status: 401, description: 'Authentication required', schema: dashboardsErrorSchema },\n    { status: 403, description: 'Insufficient permissions to manage role widgets', schema: dashboardsErrorSchema },\n  ],\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: dashboardsTag,\n  summary: 'Manage dashboard widgets assigned to a role',\n  methods: {\n    GET: roleWidgetsGetDoc,\n    PUT: roleWidgetsPutDoc,\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AACvC,SAAS,4BAA4B;AACrC,SAAS,YAAY;AACrB,SAAS,gCAAgC;AACzC,SAAS,sBAAsB;AAC/B;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,kBAAkB;AAC3B;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAEP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP,MAAM,UAAU;AAChB,MAAM,gBAAgB;AAEtB,SAAS,eAAe,SAAiC,UAAyB,gBAA4D;AAC5I,MAAI,OAAoC;AACxC,MAAI,YAAY;AAChB,aAAW,UAAU,SAAS;AAC5B,QAAI,OAAO,UAAW;AACtB,QAAI,OAAO,YAAY,YAAY,OAAO,aAAa,SAAU;AACjE,QAAI,OAAO,YAAY,CAAC,SAAU;AAClC,QAAI,OAAO,kBAAkB,kBAAkB,OAAO,mBAAmB,eAAgB;AACzF,QAAI,OAAO,kBAAkB,CAAC,eAAgB;AAC9C,UAAM,SAAS,OAAO,WAAW,IAAI,MAAM,OAAO,iBAAiB,IAAI;AACvE,QAAI,QAAQ,WAAW;AACrB,aAAO;AACP,kBAAY;AAAA,IACd;AAAA,EACF;AACA,SAAO;AACT;AAEO,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,OAAO,EAAE;AAAA,EACrD,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,OAAO,EAAE;AACvD;AAEA,eAAsB,IAAI,KAAc;AACtC,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,KAAM,QAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAE9E,QAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,QAAM,SAAS,IAAI,aAAa,IAAI,QAAQ;AAC5C,MAAI,CAAC,OAAQ,QAAO,aAAa,KAAK,EAAE,OAAO,qBAAqB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAEtF,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,QAAM,OAAO,UAAU,QAAQ,aAAa;AAC5C,QAAM,MAAM,MAAM,KAAK,QAAQ,KAAK,KAAK,EAAE,UAAU,KAAK,YAAY,MAAM,gBAAgB,KAAK,SAAS,KAAK,CAAC;AAChH,MAAI,CAAC,IAAI,gBAAgB,CAAC,WAAW,IAAI,UAAU,OAAO,GAAG;AAC3D,WAAO,aAAa,KAAK,EAAE,OAAO,YAAY,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAClE;AAEA,QAAM,EAAE,UAAU,eAAe,IAAI,iCAAiC;AAAA,IACpE,MAAM,EAAE,UAAU,KAAK,YAAY,MAAM,OAAO,KAAK,SAAS,KAAK;AAAA,IACnE,cAAc,CAAC,CAAC,IAAI;AAAA,IACpB,eAAe,IAAI,aAAa,IAAI,UAAU;AAAA,IAC9C,qBAAqB,IAAI,aAAa,IAAI,gBAAgB;AAAA,EAC5D,CAAC;AAED,QAAM,OAAO,MAAM,GAAG,QAAQ,MAAM,EAAE,IAAI,QAAQ,WAAW,KAAK,CAAC;AACnE,QAAM,SAAS,oCAAoC;AAAA,IACjD,cAAc,CAAC,CAAC,IAAI;AAAA,IACpB,eAAe;AAAA,IACf,QAAQ;AAAA,EACV,CAAC;AACD,MAAI,WAAW,aAAa;AAC1B,WAAO,aAAa,KAAK,EAAE,OAAO,YAAY,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAClE;AACA,MAAI,WAAW,aAAa;AAC1B,WAAO,aAAa,KAAK,EAAE,OAAO,iBAAiB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACvE;AAEA,QAAM,UAAU,MAAM,GAAG,KAAK,sBAAsB,EAAE,QAAQ,WAAW,KAAK,CAAC;AAC/E,QAAM,OAAO,eAAe,SAAS,UAAU,cAAc;AAE7D,QAAM,WAAW;AAAA,IACf,WAAW,OAAO,KAAK,gBAAgB,CAAC;AAAA,IACxC,WAAW,CAAC,CAAC;AAAA,IACb,OAAO;AAAA,MACL;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAEA,SAAO,aAAa,KAAK,QAAQ;AACnC;AAEA,eAAsB,IAAI,KAAc;AACtC,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,KAAM,QAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAE9E,MAAI;AACJ,MAAI;AACF,cAAU,MAAM,IAAI,KAAK;AAAA,EAC3B,QAAQ;AACN,WAAO,aAAa,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC1E;AACA,QAAM,SAAS,yBAAyB,UAAU,OAAO;AACzD,MAAI,CAAC,OAAO,SAAS;AACnB,WAAO,aAAa,KAAK,EAAE,OAAO,mBAAmB,QAAQ,OAAO,MAAM,OAAO,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrG;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,EAAE,QAAQ,IAAI;AACpB,QAAM,KAAK,QAAQ,IAAI;AACvB,QAAM,OAAO,QAAQ,aAAa;AAClC,QAAM,MAAM,MAAM,KAAK,QAAQ,KAAK,KAAK,EAAE,UAAU,KAAK,YAAY,MAAM,gBAAgB,KAAK,SAAS,KAAK,CAAC;AAChH,MAAI,CAAC,IAAI,gBAAgB,CAAC,WAAW,IAAI,UAAU,OAAO,GAAG;AAC3D,WAAO,aAAa,KAAK,EAAE,OAAO,YAAY,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAClE;AAEA,QAAM,UAAU,MAAM,eAAe;AACrC,QAAM,iBAAiB,IAAI,IAAI,QAAQ,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC;AAChE,QAAM,YAAY,OAAO,KAAK,UAAU,OAAO,CAAC,OAAO,eAAe,IAAI,EAAE,CAAC;AAE7E,QAAM,WAAW,KAAK,YAAY;AAClC,QAAM,iBAAiB,KAAK,SAAS;AAErC,QAAM,OAAO,MAAM,GAAG,QAAQ,MAAM,EAAE,IAAI,OAAO,KAAK,QAAQ,WAAW,KAAK,CAAC;AAC/E,QAAM,SAAS,oCAAoC;AAAA,IACjD,cAAc,CAAC,CAAC,IAAI;AAAA,IACpB,eAAe;AAAA,IACf,QAAQ;AAAA,EACV,CAAC;AACD,MAAI,WAAW,aAAa;AAC1B,WAAO,aAAa,KAAK,EAAE,OAAO,YAAY,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAClE;AACA,MAAI,WAAW,aAAa;AAC1B,WAAO,aAAa,KAAK,EAAE,OAAO,iBAAiB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACvE;AAEA,QAAM,cAAc,MAAM,0BAA0B,WAAW;AAAA,IAC7D,UAAU,YAAY;AAAA,IACtB;AAAA,IACA,QAAQ,OAAO,KAAK,GAAG;AAAA,IACvB,cAAc;AAAA,IACd,YAAY,OAAO,KAAK;AAAA,IACxB,WAAW;AAAA,IACX,eAAe,IAAI;AAAA,IACnB,gBAAgB,IAAI;AAAA,IACpB,iBAAiB,EAAE,QAAQ,OAAO,KAAK,QAAQ,UAAU;AAAA,EAC3D,CAAC;AACD,MAAI,eAAe,CAAC,YAAY,IAAI;AAClC,WAAO,aAAa,KAAK,YAAY,MAAM,EAAE,QAAQ,YAAY,OAAO,CAAC;AAAA,EAC3E;AAEA,MAAI,SAAS,MAAM,GAAG,QAAQ,sBAAsB;AAAA,IAClD,QAAQ,OAAO,KAAK;AAAA,IACpB;AAAA,IACA;AAAA,IACA,WAAW;AAAA,EACb,CAAC;AAED,MAAI,CAAC,UAAU,QAAQ;AACrB,QAAI,QAAQ;AACV,YAAM,GAAG,OAAO,MAAM,EAAE,MAAM;AAAA,IAChC;AACA,QAAI,aAAa,MAAM,YAAY,uBAAuB;AACxD,YAAM,iCAAiC,WAAW;AAAA,QAChD,UAAU,YAAY;AAAA,QACtB;AAAA,QACA,QAAQ,OAAO,KAAK,GAAG;AAAA,QACvB,cAAc;AAAA,QACd,YAAY,OAAO,KAAK;AAAA,QACxB,WAAW;AAAA,QACX,eAAe,IAAI;AAAA,QACnB,gBAAgB,IAAI;AAAA,QACpB,UAAU,YAAY,YAAY;AAAA,MACpC,CAAC;AAAA,IACH;AACA,WAAO,aAAa,KAAK,EAAE,IAAI,MAAM,WAAW,CAAC,EAAE,CAAC;AAAA,EACtD;AAEA,MAAI,CAAC,QAAQ;AACX,aAAS,GAAG,OAAO,sBAAsB;AAAA,MACvC,QAAQ,OAAO,KAAK;AAAA,MACpB;AAAA,MACA;AAAA,MACA,eAAe;AAAA,IACjB,CAAC;AACD,OAAG,QAAQ,MAAM;AAAA,EACnB,OAAO;AACL,WAAO,gBAAgB;AAAA,EACzB;AACA,QAAM,GAAG,MAAM;AAEf,MAAI,aAAa,MAAM,YAAY,uBAAuB;AACxD,UAAM,iCAAiC,WAAW;AAAA,MAChD,UAAU,YAAY;AAAA,MACtB;AAAA,MACA,QAAQ,OAAO,KAAK,GAAG;AAAA,MACvB,cAAc;AAAA,MACd,YAAY,OAAO,KAAK;AAAA,MACxB,WAAW;AAAA,MACX,eAAe,IAAI;AAAA,MACnB,gBAAgB,IAAI;AAAA,MACpB,UAAU,YAAY,YAAY;AAAA,IACpC,CAAC;AAAA,EACH;AAEA,SAAO,aAAa,KAAK,EAAE,IAAI,MAAM,UAAU,CAAC;AAClD;AAEA,MAAM,yBAAyB,EAAE,OAAO;AAAA,EACtC,QAAQ,EAAE,OAAO,EAAE,KAAK;AAAA,EACxB,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACrC,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAC7C,CAAC;AAED,MAAM,oBAAsC;AAAA,EAC1C,SAAS;AAAA,EACT,aAAa;AAAA,EACb,MAAM,CAAC,aAAa;AAAA,EACpB,OAAO;AAAA,EACP,WAAW;AAAA,IACT,EAAE,QAAQ,KAAK,aAAa,8CAA8C,QAAQ,mCAAmC;AAAA,EACvH;AAAA,EACA,QAAQ;AAAA,IACN,EAAE,QAAQ,KAAK,aAAa,2BAA2B,QAAQ,sBAAsB;AAAA,IACrF,EAAE,QAAQ,KAAK,aAAa,2BAA2B,QAAQ,sBAAsB;AAAA,IACrF,EAAE,QAAQ,KAAK,aAAa,mDAAmD,QAAQ,sBAAsB;AAAA,EAC/G;AACF;AAEA,MAAM,oBAAsC;AAAA,EAC1C,SAAS;AAAA,EACT,aAAa;AAAA,EACb,MAAM,CAAC,aAAa;AAAA,EACpB,aAAa;AAAA,IACX,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,aAAa;AAAA,EACf;AAAA,EACA,WAAW;AAAA,IACT,EAAE,QAAQ,KAAK,aAAa,iCAAiC,QAAQ,yCAAyC;AAAA,EAChH;AAAA,EACA,QAAQ;AAAA,IACN,EAAE,QAAQ,KAAK,aAAa,sCAAsC,QAAQ,sBAAsB;AAAA,IAChG,EAAE,QAAQ,KAAK,aAAa,2BAA2B,QAAQ,sBAAsB;AAAA,IACrF,EAAE,QAAQ,KAAK,aAAa,mDAAmD,QAAQ,sBAAsB;AAAA,EAC/G;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,IACL,KAAK;AAAA,EACP;AACF;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { DashboardRoleWidgets } from '@open-mercato/core/modules/dashboards/data/entities'\nimport { Role } from '@open-mercato/core/modules/auth/data/entities'\nimport { roleWidgetSettingsSchema } from '@open-mercato/core/modules/dashboards/data/validators'\nimport { loadAllWidgets } from '@open-mercato/core/modules/dashboards/lib/widgets'\nimport { resolveWidgetAssignmentReadScope } from '@open-mercato/core/modules/dashboards/lib/widgetAssignmentScope'\nimport { hasFeature } from '@open-mercato/shared/security/features'\nimport {\n  runCrudMutationGuardAfterSuccess,\n  validateCrudMutationGuard,\n} from '@open-mercato/shared/lib/crud/mutation-guard'\nimport type { OpenApiMethodDoc, OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport {\n  dashboardsTag,\n  dashboardsErrorSchema,\n  dashboardRoleWidgetsResponseSchema,\n  dashboardRoleWidgetsUpdateResponseSchema,\n} from '../../openapi'\n\nconst FEATURE = 'dashboards.admin.assign-widgets'\nconst RESOURCE_KIND = 'dashboards.roleWidgets'\n\nfunction pickBestRecord(records: DashboardRoleWidgets[], tenantId: string | null, organizationId: string | null): DashboardRoleWidgets | null {\n  let best: DashboardRoleWidgets | null = null\n  let bestScore = -1\n  for (const record of records) {\n    if (record.deletedAt) continue\n    if (record.tenantId && tenantId && record.tenantId !== tenantId) continue\n    if (record.tenantId && !tenantId) continue\n    if (record.organizationId && organizationId && record.organizationId !== organizationId) continue\n    if (record.organizationId && !organizationId) continue\n    const score = (record.tenantId ? 1 : 0) + (record.organizationId ? 2 : 0)\n    if (score > bestScore) {\n      best = record\n      bestScore = score\n    }\n  }\n  return best\n}\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: [FEATURE] },\n  PUT: { requireAuth: true, requireFeatures: [FEATURE] },\n}\n\nexport async function GET(req: Request) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth) return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n\n  const url = new URL(req.url)\n  const roleId = url.searchParams.get('roleId')\n  if (!roleId) return NextResponse.json({ error: 'roleId is required' }, { status: 400 })\n\n  const container = await createRequestContainer()\n  const em = container.resolve('em') as any\n  const rbac = container.resolve('rbacService') as any\n  const acl = await rbac.loadAcl(auth.sub, { tenantId: auth.tenantId ?? null, organizationId: auth.orgId ?? null })\n  if (!acl.isSuperAdmin && !hasFeature(acl.features, FEATURE)) {\n    return NextResponse.json({ error: 'Forbidden' }, { status: 403 })\n  }\n\n  const { tenantId, organizationId } = resolveWidgetAssignmentReadScope({\n    auth: { tenantId: auth.tenantId ?? null, orgId: auth.orgId ?? null },\n    isSuperAdmin: !!acl.isSuperAdmin,\n    queryTenantId: url.searchParams.get('tenantId'),\n    queryOrganizationId: url.searchParams.get('organizationId'),\n  })\n\n  const role = await em.findOne(Role, { id: roleId, deletedAt: null })\n  if (!role || (tenantId && role.tenantId !== tenantId)) {\n    return NextResponse.json({ error: 'Role not found' }, { status: 404 })\n  }\n\n  const records = await em.find(DashboardRoleWidgets, { roleId, deletedAt: null })\n  const best = pickBestRecord(records, tenantId, organizationId)\n\n  const response = {\n    widgetIds: best ? best.widgetIdsJson : [],\n    hasCustom: !!best,\n    scope: {\n      tenantId,\n      organizationId,\n    },\n  }\n\n  return NextResponse.json(response)\n}\n\nexport async function PUT(req: Request) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth) return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n\n  let payload: unknown\n  try {\n    payload = await req.json()\n  } catch {\n    return NextResponse.json({ error: 'Invalid JSON body' }, { status: 400 })\n  }\n  const parsed = roleWidgetSettingsSchema.safeParse(payload)\n  if (!parsed.success) {\n    return NextResponse.json({ error: 'Invalid payload', issues: parsed.error.issues }, { status: 400 })\n  }\n\n  const container = await createRequestContainer()\n  const { resolve } = container\n  const em = resolve('em') as any\n  const rbac = resolve('rbacService') as any\n  const acl = await rbac.loadAcl(auth.sub, { tenantId: auth.tenantId ?? null, organizationId: auth.orgId ?? null })\n  if (!acl.isSuperAdmin && !hasFeature(acl.features, FEATURE)) {\n    return NextResponse.json({ error: 'Forbidden' }, { status: 403 })\n  }\n\n  const widgets = await loadAllWidgets()\n  const validWidgetIds = new Set(widgets.map((w) => w.metadata.id))\n  const widgetIds = parsed.data.widgetIds.filter((id) => validWidgetIds.has(id))\n\n  const tenantId = auth.tenantId ?? null\n  const organizationId = auth.orgId ?? null\n\n  const role = await em.findOne(Role, { id: parsed.data.roleId, deletedAt: null })\n  if (!role || (tenantId && role.tenantId !== tenantId)) {\n    return NextResponse.json({ error: 'Role not found' }, { status: 404 })\n  }\n\n  const guardResult = await validateCrudMutationGuard(container, {\n    tenantId: tenantId ?? '',\n    organizationId,\n    userId: String(auth.sub),\n    resourceKind: RESOURCE_KIND,\n    resourceId: parsed.data.roleId,\n    operation: 'update',\n    requestMethod: req.method,\n    requestHeaders: req.headers,\n    mutationPayload: { roleId: parsed.data.roleId, widgetIds },\n  })\n  if (guardResult && !guardResult.ok) {\n    return NextResponse.json(guardResult.body, { status: guardResult.status })\n  }\n\n  let record = await em.findOne(DashboardRoleWidgets, {\n    roleId: parsed.data.roleId,\n    tenantId,\n    organizationId,\n    deletedAt: null,\n  })\n\n  if (!widgetIds.length) {\n    if (record) {\n      await em.remove(record).flush()\n    }\n    if (guardResult?.ok && guardResult.shouldRunAfterSuccess) {\n      await runCrudMutationGuardAfterSuccess(container, {\n        tenantId: tenantId ?? '',\n        organizationId,\n        userId: String(auth.sub),\n        resourceKind: RESOURCE_KIND,\n        resourceId: parsed.data.roleId,\n        operation: 'update',\n        requestMethod: req.method,\n        requestHeaders: req.headers,\n        metadata: guardResult.metadata ?? null,\n      })\n    }\n    return NextResponse.json({ ok: true, widgetIds: [] })\n  }\n\n  if (!record) {\n    record = em.create(DashboardRoleWidgets, {\n      roleId: parsed.data.roleId,\n      tenantId,\n      organizationId,\n      widgetIdsJson: widgetIds,\n    })\n    em.persist(record)\n  } else {\n    record.widgetIdsJson = widgetIds\n  }\n  await em.flush()\n\n  if (guardResult?.ok && guardResult.shouldRunAfterSuccess) {\n    await runCrudMutationGuardAfterSuccess(container, {\n      tenantId: tenantId ?? '',\n      organizationId,\n      userId: String(auth.sub),\n      resourceKind: RESOURCE_KIND,\n      resourceId: parsed.data.roleId,\n      operation: 'update',\n      requestMethod: req.method,\n      requestHeaders: req.headers,\n      metadata: guardResult.metadata ?? null,\n    })\n  }\n\n  return NextResponse.json({ ok: true, widgetIds })\n}\n\nconst roleWidgetsQuerySchema = z.object({\n  roleId: z.string().uuid(),\n  tenantId: z.string().uuid().optional(),\n  organizationId: z.string().uuid().optional(),\n})\n\nconst roleWidgetsGetDoc: OpenApiMethodDoc = {\n  summary: 'Fetch widget assignments for a role',\n  description: 'Returns the widgets explicitly assigned to the given role together with the evaluation scope.',\n  tags: [dashboardsTag],\n  query: roleWidgetsQuerySchema,\n  responses: [\n    { status: 200, description: 'Current widget configuration for the role.', schema: dashboardRoleWidgetsResponseSchema },\n  ],\n  errors: [\n    { status: 400, description: 'Missing role identifier', schema: dashboardsErrorSchema },\n    { status: 401, description: 'Authentication required', schema: dashboardsErrorSchema },\n    { status: 403, description: 'Insufficient permissions to manage role widgets', schema: dashboardsErrorSchema },\n  ],\n}\n\nconst roleWidgetsPutDoc: OpenApiMethodDoc = {\n  summary: 'Update widgets assigned to a role',\n  description: 'Persists the widget list for a role within the provided tenant and organization scope.',\n  tags: [dashboardsTag],\n  requestBody: {\n    contentType: 'application/json',\n    schema: roleWidgetSettingsSchema,\n    description: 'Role identifier and the widget ids that should remain assigned. Scope is derived from the authenticated session.',\n  },\n  responses: [\n    { status: 200, description: 'Widgets updated successfully.', schema: dashboardRoleWidgetsUpdateResponseSchema },\n  ],\n  errors: [\n    { status: 400, description: 'Invalid payload or unknown widgets', schema: dashboardsErrorSchema },\n    { status: 401, description: 'Authentication required', schema: dashboardsErrorSchema },\n    { status: 403, description: 'Insufficient permissions to manage role widgets', schema: dashboardsErrorSchema },\n  ],\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: dashboardsTag,\n  summary: 'Manage dashboard widgets assigned to a role',\n  methods: {\n    GET: roleWidgetsGetDoc,\n    PUT: roleWidgetsPutDoc,\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AACvC,SAAS,4BAA4B;AACrC,SAAS,YAAY;AACrB,SAAS,gCAAgC;AACzC,SAAS,sBAAsB;AAC/B,SAAS,wCAAwC;AACjD,SAAS,kBAAkB;AAC3B;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAEP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP,MAAM,UAAU;AAChB,MAAM,gBAAgB;AAEtB,SAAS,eAAe,SAAiC,UAAyB,gBAA4D;AAC5I,MAAI,OAAoC;AACxC,MAAI,YAAY;AAChB,aAAW,UAAU,SAAS;AAC5B,QAAI,OAAO,UAAW;AACtB,QAAI,OAAO,YAAY,YAAY,OAAO,aAAa,SAAU;AACjE,QAAI,OAAO,YAAY,CAAC,SAAU;AAClC,QAAI,OAAO,kBAAkB,kBAAkB,OAAO,mBAAmB,eAAgB;AACzF,QAAI,OAAO,kBAAkB,CAAC,eAAgB;AAC9C,UAAM,SAAS,OAAO,WAAW,IAAI,MAAM,OAAO,iBAAiB,IAAI;AACvE,QAAI,QAAQ,WAAW;AACrB,aAAO;AACP,kBAAY;AAAA,IACd;AAAA,EACF;AACA,SAAO;AACT;AAEO,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,OAAO,EAAE;AAAA,EACrD,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,OAAO,EAAE;AACvD;AAEA,eAAsB,IAAI,KAAc;AACtC,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,KAAM,QAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAE9E,QAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,QAAM,SAAS,IAAI,aAAa,IAAI,QAAQ;AAC5C,MAAI,CAAC,OAAQ,QAAO,aAAa,KAAK,EAAE,OAAO,qBAAqB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAEtF,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,QAAM,OAAO,UAAU,QAAQ,aAAa;AAC5C,QAAM,MAAM,MAAM,KAAK,QAAQ,KAAK,KAAK,EAAE,UAAU,KAAK,YAAY,MAAM,gBAAgB,KAAK,SAAS,KAAK,CAAC;AAChH,MAAI,CAAC,IAAI,gBAAgB,CAAC,WAAW,IAAI,UAAU,OAAO,GAAG;AAC3D,WAAO,aAAa,KAAK,EAAE,OAAO,YAAY,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAClE;AAEA,QAAM,EAAE,UAAU,eAAe,IAAI,iCAAiC;AAAA,IACpE,MAAM,EAAE,UAAU,KAAK,YAAY,MAAM,OAAO,KAAK,SAAS,KAAK;AAAA,IACnE,cAAc,CAAC,CAAC,IAAI;AAAA,IACpB,eAAe,IAAI,aAAa,IAAI,UAAU;AAAA,IAC9C,qBAAqB,IAAI,aAAa,IAAI,gBAAgB;AAAA,EAC5D,CAAC;AAED,QAAM,OAAO,MAAM,GAAG,QAAQ,MAAM,EAAE,IAAI,QAAQ,WAAW,KAAK,CAAC;AACnE,MAAI,CAAC,QAAS,YAAY,KAAK,aAAa,UAAW;AACrD,WAAO,aAAa,KAAK,EAAE,OAAO,iBAAiB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACvE;AAEA,QAAM,UAAU,MAAM,GAAG,KAAK,sBAAsB,EAAE,QAAQ,WAAW,KAAK,CAAC;AAC/E,QAAM,OAAO,eAAe,SAAS,UAAU,cAAc;AAE7D,QAAM,WAAW;AAAA,IACf,WAAW,OAAO,KAAK,gBAAgB,CAAC;AAAA,IACxC,WAAW,CAAC,CAAC;AAAA,IACb,OAAO;AAAA,MACL;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAEA,SAAO,aAAa,KAAK,QAAQ;AACnC;AAEA,eAAsB,IAAI,KAAc;AACtC,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,KAAM,QAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAE9E,MAAI;AACJ,MAAI;AACF,cAAU,MAAM,IAAI,KAAK;AAAA,EAC3B,QAAQ;AACN,WAAO,aAAa,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC1E;AACA,QAAM,SAAS,yBAAyB,UAAU,OAAO;AACzD,MAAI,CAAC,OAAO,SAAS;AACnB,WAAO,aAAa,KAAK,EAAE,OAAO,mBAAmB,QAAQ,OAAO,MAAM,OAAO,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrG;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,EAAE,QAAQ,IAAI;AACpB,QAAM,KAAK,QAAQ,IAAI;AACvB,QAAM,OAAO,QAAQ,aAAa;AAClC,QAAM,MAAM,MAAM,KAAK,QAAQ,KAAK,KAAK,EAAE,UAAU,KAAK,YAAY,MAAM,gBAAgB,KAAK,SAAS,KAAK,CAAC;AAChH,MAAI,CAAC,IAAI,gBAAgB,CAAC,WAAW,IAAI,UAAU,OAAO,GAAG;AAC3D,WAAO,aAAa,KAAK,EAAE,OAAO,YAAY,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAClE;AAEA,QAAM,UAAU,MAAM,eAAe;AACrC,QAAM,iBAAiB,IAAI,IAAI,QAAQ,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC;AAChE,QAAM,YAAY,OAAO,KAAK,UAAU,OAAO,CAAC,OAAO,eAAe,IAAI,EAAE,CAAC;AAE7E,QAAM,WAAW,KAAK,YAAY;AAClC,QAAM,iBAAiB,KAAK,SAAS;AAErC,QAAM,OAAO,MAAM,GAAG,QAAQ,MAAM,EAAE,IAAI,OAAO,KAAK,QAAQ,WAAW,KAAK,CAAC;AAC/E,MAAI,CAAC,QAAS,YAAY,KAAK,aAAa,UAAW;AACrD,WAAO,aAAa,KAAK,EAAE,OAAO,iBAAiB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACvE;AAEA,QAAM,cAAc,MAAM,0BAA0B,WAAW;AAAA,IAC7D,UAAU,YAAY;AAAA,IACtB;AAAA,IACA,QAAQ,OAAO,KAAK,GAAG;AAAA,IACvB,cAAc;AAAA,IACd,YAAY,OAAO,KAAK;AAAA,IACxB,WAAW;AAAA,IACX,eAAe,IAAI;AAAA,IACnB,gBAAgB,IAAI;AAAA,IACpB,iBAAiB,EAAE,QAAQ,OAAO,KAAK,QAAQ,UAAU;AAAA,EAC3D,CAAC;AACD,MAAI,eAAe,CAAC,YAAY,IAAI;AAClC,WAAO,aAAa,KAAK,YAAY,MAAM,EAAE,QAAQ,YAAY,OAAO,CAAC;AAAA,EAC3E;AAEA,MAAI,SAAS,MAAM,GAAG,QAAQ,sBAAsB;AAAA,IAClD,QAAQ,OAAO,KAAK;AAAA,IACpB;AAAA,IACA;AAAA,IACA,WAAW;AAAA,EACb,CAAC;AAED,MAAI,CAAC,UAAU,QAAQ;AACrB,QAAI,QAAQ;AACV,YAAM,GAAG,OAAO,MAAM,EAAE,MAAM;AAAA,IAChC;AACA,QAAI,aAAa,MAAM,YAAY,uBAAuB;AACxD,YAAM,iCAAiC,WAAW;AAAA,QAChD,UAAU,YAAY;AAAA,QACtB;AAAA,QACA,QAAQ,OAAO,KAAK,GAAG;AAAA,QACvB,cAAc;AAAA,QACd,YAAY,OAAO,KAAK;AAAA,QACxB,WAAW;AAAA,QACX,eAAe,IAAI;AAAA,QACnB,gBAAgB,IAAI;AAAA,QACpB,UAAU,YAAY,YAAY;AAAA,MACpC,CAAC;AAAA,IACH;AACA,WAAO,aAAa,KAAK,EAAE,IAAI,MAAM,WAAW,CAAC,EAAE,CAAC;AAAA,EACtD;AAEA,MAAI,CAAC,QAAQ;AACX,aAAS,GAAG,OAAO,sBAAsB;AAAA,MACvC,QAAQ,OAAO,KAAK;AAAA,MACpB;AAAA,MACA;AAAA,MACA,eAAe;AAAA,IACjB,CAAC;AACD,OAAG,QAAQ,MAAM;AAAA,EACnB,OAAO;AACL,WAAO,gBAAgB;AAAA,EACzB;AACA,QAAM,GAAG,MAAM;AAEf,MAAI,aAAa,MAAM,YAAY,uBAAuB;AACxD,UAAM,iCAAiC,WAAW;AAAA,MAChD,UAAU,YAAY;AAAA,MACtB;AAAA,MACA,QAAQ,OAAO,KAAK,GAAG;AAAA,MACvB,cAAc;AAAA,MACd,YAAY,OAAO,KAAK;AAAA,MACxB,WAAW;AAAA,MACX,eAAe,IAAI;AAAA,MACnB,gBAAgB,IAAI;AAAA,MACpB,UAAU,YAAY,YAAY;AAAA,IACpC,CAAC;AAAA,EACH;AAEA,SAAO,aAAa,KAAK,EAAE,IAAI,MAAM,UAAU,CAAC;AAClD;AAEA,MAAM,yBAAyB,EAAE,OAAO;AAAA,EACtC,QAAQ,EAAE,OAAO,EAAE,KAAK;AAAA,EACxB,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACrC,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAC7C,CAAC;AAED,MAAM,oBAAsC;AAAA,EAC1C,SAAS;AAAA,EACT,aAAa;AAAA,EACb,MAAM,CAAC,aAAa;AAAA,EACpB,OAAO;AAAA,EACP,WAAW;AAAA,IACT,EAAE,QAAQ,KAAK,aAAa,8CAA8C,QAAQ,mCAAmC;AAAA,EACvH;AAAA,EACA,QAAQ;AAAA,IACN,EAAE,QAAQ,KAAK,aAAa,2BAA2B,QAAQ,sBAAsB;AAAA,IACrF,EAAE,QAAQ,KAAK,aAAa,2BAA2B,QAAQ,sBAAsB;AAAA,IACrF,EAAE,QAAQ,KAAK,aAAa,mDAAmD,QAAQ,sBAAsB;AAAA,EAC/G;AACF;AAEA,MAAM,oBAAsC;AAAA,EAC1C,SAAS;AAAA,EACT,aAAa;AAAA,EACb,MAAM,CAAC,aAAa;AAAA,EACpB,aAAa;AAAA,IACX,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,aAAa;AAAA,EACf;AAAA,EACA,WAAW;AAAA,IACT,EAAE,QAAQ,KAAK,aAAa,iCAAiC,QAAQ,yCAAyC;AAAA,EAChH;AAAA,EACA,QAAQ;AAAA,IACN,EAAE,QAAQ,KAAK,aAAa,sCAAsC,QAAQ,sBAAsB;AAAA,IAChG,EAAE,QAAQ,KAAK,aAAa,2BAA2B,QAAQ,sBAAsB;AAAA,IACrF,EAAE,QAAQ,KAAK,aAAa,mDAAmD,QAAQ,sBAAsB;AAAA,EAC/G;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,IACL,KAAK;AAAA,EACP;AACF;",
   "names": []
 }

package/dist/modules/dashboards/api/users/widgets/route.js

@@ -7,10 +7,7 @@ import { User } from "@open-mercato/core/modules/auth/data/entities";
 import { userWidgetSettingsSchema } from "@open-mercato/core/modules/dashboards/data/validators";
 import { loadAllWidgets } from "@open-mercato/core/modules/dashboards/lib/widgets";
 import { resolveAllowedWidgetIds } from "@open-mercato/core/modules/dashboards/lib/access";
-import {
-  resolveWidgetAssignmentReadScope,
-  resolveWidgetAssignmentTargetAccess
-} from "@open-mercato/core/modules/dashboards/lib/widgetAssignmentScope";
+import { resolveWidgetAssignmentReadScope } from "@open-mercato/core/modules/dashboards/lib/widgetAssignmentScope";
 import { hasFeature } from "@open-mercato/shared/security/features";
 import {
   runCrudMutationGuardAfterSuccess,
@@ -48,15 +45,7 @@ async function GET(req) {
     queryOrganizationId: url.searchParams.get("organizationId")
   });
   const targetUserForRead = await em.findOne(User, { id: userId, deletedAt: null });
-  const readAccess = resolveWidgetAssignmentTargetAccess({
-    isSuperAdmin: !!acl.isSuperAdmin,
-    scopeTenantId: tenantId,
-    target: targetUserForRead
-  });
-  if (readAccess === "forbidden") {
-    return NextResponse.json({ error: "Forbidden" }, { status: 403 });
-  }
-  if (readAccess === "not-found") {
+  if (!targetUserForRead || tenantId && (targetUserForRead.tenantId ?? null) !== tenantId) {
     return NextResponse.json({ error: "User not found" }, { status: 404 });
   }
   const widgets = await loadAllWidgets();
@@ -114,15 +103,7 @@ async function PUT(req) {
   const tenantId = auth.tenantId ?? null;
   const organizationId = auth.orgId ?? null;
   const targetUser = await em.findOne(User, { id: parsed.data.userId, deletedAt: null });
-  const writeAccess = resolveWidgetAssignmentTargetAccess({
-    isSuperAdmin: !!acl.isSuperAdmin,
-    scopeTenantId: tenantId,
-    target: targetUser
-  });
-  if (writeAccess === "forbidden") {
-    return NextResponse.json({ error: "Forbidden" }, { status: 403 });
-  }
-  if (writeAccess === "not-found") {
+  if (!targetUser || tenantId && (targetUser.tenantId ?? null) !== tenantId) {
     return NextResponse.json({ error: "User not found" }, { status: 404 });
   }
   const guardResult = await validateCrudMutationGuard(container, {