@open-mercato/core 0.6.6 → 0.6.7-develop.6553.1.2ec7246e04

package/dist/modules/customers/components/detail/PersonDetailTabs.js

@@ -1,9 +1,9 @@
 "use client";
 import { jsx, jsxs } from "react/jsx-runtime";
 import * as React from "react";
-import { cn } from "@open-mercato/shared/lib/utils";
 import { useT } from "@open-mercato/shared/lib/i18n/context";
 import { Button } from "@open-mercato/ui/primitives/button";
+import { Tabs, TabsList, TabsTrigger } from "@open-mercato/ui/primitives/tabs";
 import {
   SquareCheckBig,
   Mail,
@@ -20,12 +20,9 @@ function resolveLegacyTab(tab) {
   if (!tab) return "activities";
   return SUPPORTED_TAB_IDS.has(tab) ? tab : "activities";
 }
-function CountBadge({ count }) {
-  if (count <= 0) return null;
-  return /* @__PURE__ */ jsx("span", { className: "ml-1 rounded-full bg-muted px-1.5 py-0.5 text-xs font-medium leading-none text-muted-foreground", children: count > 999 ? "999+" : count });
-}
-function NewBadge() {
-  return /* @__PURE__ */ jsx("span", { className: "ml-1.5 rounded bg-foreground px-1.5 py-0.5 text-overline font-semibold leading-none text-background", children: "NEW" });
+function formatTabCount(count) {
+  if (count <= 0) return void 0;
+  return count > 999 ? "999+" : count;
 }
 function PersonDetailTabs({
   activeTab,
@@ -47,7 +44,7 @@ function PersonDetailTabs({
         id: "activities",
         label: t("customers.people.detail.tabs.activities", "Activities"),
         icon: /* @__PURE__ */ jsx(SquareCheckBig, { className: "size-4" }),
-        badge: /* @__PURE__ */ jsx(CountBadge, { count: activitiesCount })
+        count: formatTabCount(activitiesCount)
       },
       {
         id: "emails",
@@ -58,37 +55,37 @@ function PersonDetailTabs({
         id: "deals",
         label: t("customers.people.detail.tabs.deals", "Deals"),
         icon: /* @__PURE__ */ jsx(Briefcase, { className: "size-4" }),
-        badge: /* @__PURE__ */ jsx(CountBadge, { count: dealsCount })
+        count: formatTabCount(dealsCount)
       },
       {
         id: "companies",
         label: t("customers.people.detail.tabs.companies", "Companies"),
         icon: /* @__PURE__ */ jsx(Building2, { className: "size-4" }),
-        badge: /* @__PURE__ */ jsx(CountBadge, { count: companiesCount })
+        count: formatTabCount(companiesCount)
       },
       {
         id: "addresses",
         label: t("customers.people.detail.tabs.addresses", "Addresses"),
         icon: /* @__PURE__ */ jsx(MapPin, { className: "size-4" }),
-        badge: /* @__PURE__ */ jsx(CountBadge, { count: addressesCount })
+        count: formatTabCount(addressesCount)
       },
       {
         id: "tasks",
         label: t("customers.people.detail.tabs.tasks", "Tasks"),
         icon: /* @__PURE__ */ jsx(Check, { className: "size-4" }),
-        badge: /* @__PURE__ */ jsx(CountBadge, { count: tasksCount })
+        count: formatTabCount(tasksCount)
       },
       {
         id: "changelog",
         label: t("customers.people.detail.tabs.changelog", "Change log"),
         icon: /* @__PURE__ */ jsx(History, { className: "size-4" }),
-        badge: /* @__PURE__ */ jsx(NewBadge, {})
+        count: "NEW"
       },
       {
         id: "files",
         label: t("customers.people.detail.tabs.files", "Files"),
         icon: /* @__PURE__ */ jsx(Paperclip, { className: "size-4" }),
-        badge: /* @__PURE__ */ jsx(CountBadge, { count: filesCount })
+        count: formatTabCount(filesCount)
       }
     ],
     [t, activitiesCount, dealsCount, companiesCount, addressesCount, tasksCount, filesCount]
@@ -104,31 +101,24 @@ function PersonDetailTabs({
     [builtInTabs, injectedTabs]
   );
   return /* @__PURE__ */ jsxs("div", { children: [
-    /* @__PURE__ */ jsxs("div", { className: "flex items-end justify-between gap-2 border-b", role: "tablist", "aria-label": t("customers.people.detail.tabs.label", "Person detail sections"), children: [
-      /* @__PURE__ */ jsx("nav", { className: "-mb-px flex flex-1 gap-1 overflow-x-auto px-1", children: allTabs.map((tab) => {
-        const isActive = activeTab === tab.id;
-        return /* @__PURE__ */ jsxs(
-          Button,
-          {
-            type: "button",
-            variant: "ghost",
-            size: "sm",
-            role: "tab",
-            "aria-selected": isActive,
-            onClick: () => onTabChange(tab.id),
-            className: cn(
-              "h-auto shrink-0 rounded-none border-b-2 px-3 py-2.5 hover:bg-transparent",
-              isActive ? "border-foreground text-foreground font-semibold" : "border-transparent text-muted-foreground hover:text-foreground"
-            ),
-            children: [
-              tab.icon && /* @__PURE__ */ jsx("span", { className: "mr-1.5", children: tab.icon }),
-              tab.label,
-              tab.badge
-            ]
-          },
-          tab.id
-        );
-      }) }),
+    /* @__PURE__ */ jsxs("div", { className: "flex items-end justify-between gap-2 border-b", children: [
+      /* @__PURE__ */ jsx(
+        Tabs,
+        {
+          value: activeTab,
+          onValueChange: (value) => onTabChange(value),
+          variant: "underline",
+          className: "min-w-0 flex-1",
+          children: /* @__PURE__ */ jsx(
+            TabsList,
+            {
+              "aria-label": t("customers.people.detail.tabs.label", "Person detail sections"),
+              className: "-mb-px w-full overflow-x-auto border-b-0 px-1",
+              children: allTabs.map((tab) => /* @__PURE__ */ jsx(TabsTrigger, { value: tab.id, leading: tab.icon, count: tab.count, children: tab.label }, tab.id))
+            }
+          )
+        }
+      ),
       sectionAction ? /* @__PURE__ */ jsxs(
         Button,
         {

package/dist/modules/customers/components/detail/PersonDetailTabs.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../src/modules/customers/components/detail/PersonDetailTabs.tsx"],
-  "sourcesContent": ["\"use client\"\n\nimport * as React from 'react'\nimport { cn } from '@open-mercato/shared/lib/utils'\nimport { useT } from '@open-mercato/shared/lib/i18n/context'\nimport { Button } from '@open-mercato/ui/primitives/button'\nimport {\n  SquareCheckBig,\n  Mail,\n  Briefcase,\n  Building2,\n  Check,\n  History,\n  Paperclip,\n  Plus,\n  MapPin,\n} from 'lucide-react'\nimport type { SectionAction } from '@open-mercato/ui/backend/detail'\n\nexport type PersonTabId =\n  | 'activities'\n  | 'emails'\n  | 'deals'\n  | 'companies'\n  | 'addresses'\n  | 'tasks'\n  | 'changelog'\n  | 'files'\n  | string\n\ntype TabDef = {\n  id: PersonTabId\n  label: string\n  icon?: React.ReactNode\n  badge?: React.ReactNode\n}\n\ntype PersonDetailTabsProps = {\n  activeTab: PersonTabId\n  onTabChange: (tab: PersonTabId) => void\n  injectedTabs?: Array<{ id: string; label: string }>\n  activitiesCount?: number\n  dealsCount?: number\n  companiesCount?: number\n  addressesCount?: number\n  tasksCount?: number\n  filesCount?: number\n  sectionAction?: SectionAction | null\n  children: React.ReactNode\n}\n\nconst SUPPORTED_TAB_IDS = new Set<PersonTabId>(['activities', 'emails', 'deals', 'companies', 'addresses', 'tasks', 'changelog', 'files'])\n\nexport function resolveLegacyTab(tab: string | null | undefined): PersonTabId {\n  if (!tab) return 'activities'\n  return SUPPORTED_TAB_IDS.has(tab as PersonTabId) ? (tab as PersonTabId) : 'activities'\n}\n\nfunction CountBadge({ count }: { count: number }) {\n  if (count <= 0) return null\n  return (\n    <span className=\"ml-1 rounded-full bg-muted px-1.5 py-0.5 text-xs font-medium leading-none text-muted-foreground\">\n      {count > 999 ? '999+' : count}\n    </span>\n  )\n}\n\nfunction NewBadge() {\n  return (\n    <span className=\"ml-1.5 rounded bg-foreground px-1.5 py-0.5 text-overline font-semibold leading-none text-background\">\n      NEW\n    </span>\n  )\n}\n\nexport function PersonDetailTabs({\n  activeTab,\n  onTabChange,\n  injectedTabs = [],\n  activitiesCount = 0,\n  dealsCount = 0,\n  companiesCount = 0,\n  addressesCount = 0,\n  tasksCount = 0,\n  filesCount = 0,\n  sectionAction = null,\n  children,\n}: PersonDetailTabsProps) {\n  const t = useT()\n\n  const builtInTabs: TabDef[] = React.useMemo(\n    () => [\n      {\n        id: 'activities',\n        label: t('customers.people.detail.tabs.activities', 'Activities'),\n        icon: <SquareCheckBig className=\"size-4\" />,\n        badge: <CountBadge count={activitiesCount} />,\n      },\n      {\n        id: 'emails',\n        label: t('customers.people.detail.tabs.emails', 'Emails'),\n        icon: <Mail className=\"size-4\" />,\n      },\n      {\n        id: 'deals',\n        label: t('customers.people.detail.tabs.deals', 'Deals'),\n        icon: <Briefcase className=\"size-4\" />,\n        badge: <CountBadge count={dealsCount} />,\n      },\n      {\n        id: 'companies',\n        label: t('customers.people.detail.tabs.companies', 'Companies'),\n        icon: <Building2 className=\"size-4\" />,\n        badge: <CountBadge count={companiesCount} />,\n      },\n      {\n        id: 'addresses',\n        label: t('customers.people.detail.tabs.addresses', 'Addresses'),\n        icon: <MapPin className=\"size-4\" />,\n        badge: <CountBadge count={addressesCount} />,\n      },\n      {\n        id: 'tasks',\n        label: t('customers.people.detail.tabs.tasks', 'Tasks'),\n        icon: <Check className=\"size-4\" />,\n        badge: <CountBadge count={tasksCount} />,\n      },\n      {\n        id: 'changelog',\n        label: t('customers.people.detail.tabs.changelog', 'Change log'),\n        icon: <History className=\"size-4\" />,\n        badge: <NewBadge />,\n      },\n      {\n        id: 'files',\n        label: t('customers.people.detail.tabs.files', 'Files'),\n        icon: <Paperclip className=\"size-4\" />,\n        badge: <CountBadge count={filesCount} />,\n      },\n    ],\n    [t, activitiesCount, dealsCount, companiesCount, addressesCount, tasksCount, filesCount],\n  )\n\n  const allTabs: TabDef[] = React.useMemo(\n    () => [\n      ...builtInTabs,\n      ...injectedTabs.map((tab) => ({\n        id: tab.id as PersonTabId,\n        label: tab.label,\n      })),\n    ],\n    [builtInTabs, injectedTabs],\n  )\n\n  return (\n    <div>\n      {/* Tab navigation \u2014 full width above both zones */}\n      <div className=\"flex items-end justify-between gap-2 border-b\" role=\"tablist\" aria-label={t('customers.people.detail.tabs.label', 'Person detail sections')}>\n        <nav className=\"-mb-px flex flex-1 gap-1 overflow-x-auto px-1\">\n          {allTabs.map((tab) => {\n            const isActive = activeTab === tab.id\n            return (\n              <Button\n                key={tab.id}\n                type=\"button\"\n                variant=\"ghost\"\n                size=\"sm\"\n                role=\"tab\"\n                aria-selected={isActive}\n                onClick={() => onTabChange(tab.id)}\n                className={cn(\n                  'h-auto shrink-0 rounded-none border-b-2 px-3 py-2.5 hover:bg-transparent',\n                  isActive\n                    ? 'border-foreground text-foreground font-semibold'\n                    : 'border-transparent text-muted-foreground hover:text-foreground',\n                )}\n              >\n                {tab.icon && <span className=\"mr-1.5\">{tab.icon}</span>}\n                {tab.label}\n                {tab.badge}\n              </Button>\n            )\n          })}\n        </nav>\n        {sectionAction ? (\n          <Button\n            type=\"button\"\n            size=\"sm\"\n            onClick={sectionAction.onClick}\n            disabled={sectionAction.disabled}\n            className=\"mb-1.5 mr-1 shrink-0\"\n          >\n            <Plus className=\"mr-1.5 h-4 w-4\" />\n            {sectionAction.label}\n          </Button>\n        ) : null}\n      </div>\n\n      {/* Two-column content below tabs */}\n      <div className=\"pt-6\">\n        {children}\n      </div>\n    </div>\n  )\n}\n"],
-  "mappings": ";AA6DI,cAqGU,YArGV;AA3DJ,YAAY,WAAW;AACvB,SAAS,UAAU;AACnB,SAAS,YAAY;AACrB,SAAS,cAAc;AACvB;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAmCP,MAAM,oBAAoB,oBAAI,IAAiB,CAAC,cAAc,UAAU,SAAS,aAAa,aAAa,SAAS,aAAa,OAAO,CAAC;AAElI,SAAS,iBAAiB,KAA6C;AAC5E,MAAI,CAAC,IAAK,QAAO;AACjB,SAAO,kBAAkB,IAAI,GAAkB,IAAK,MAAsB;AAC5E;AAEA,SAAS,WAAW,EAAE,MAAM,GAAsB;AAChD,MAAI,SAAS,EAAG,QAAO;AACvB,SACE,oBAAC,UAAK,WAAU,mGACb,kBAAQ,MAAM,SAAS,OAC1B;AAEJ;AAEA,SAAS,WAAW;AAClB,SACE,oBAAC,UAAK,WAAU,uGAAsG,iBAEtH;AAEJ;AAEO,SAAS,iBAAiB;AAAA,EAC/B;AAAA,EACA;AAAA,EACA,eAAe,CAAC;AAAA,EAChB,kBAAkB;AAAA,EAClB,aAAa;AAAA,EACb,iBAAiB;AAAA,EACjB,iBAAiB;AAAA,EACjB,aAAa;AAAA,EACb,aAAa;AAAA,EACb,gBAAgB;AAAA,EAChB;AACF,GAA0B;AACxB,QAAM,IAAI,KAAK;AAEf,QAAM,cAAwB,MAAM;AAAA,IAClC,MAAM;AAAA,MACJ;AAAA,QACE,IAAI;AAAA,QACJ,OAAO,EAAE,2CAA2C,YAAY;AAAA,QAChE,MAAM,oBAAC,kBAAe,WAAU,UAAS;AAAA,QACzC,OAAO,oBAAC,cAAW,OAAO,iBAAiB;AAAA,MAC7C;AAAA,MACA;AAAA,QACE,IAAI;AAAA,QACJ,OAAO,EAAE,uCAAuC,QAAQ;AAAA,QACxD,MAAM,oBAAC,QAAK,WAAU,UAAS;AAAA,MACjC;AAAA,MACA;AAAA,QACE,IAAI;AAAA,QACJ,OAAO,EAAE,sCAAsC,OAAO;AAAA,QACtD,MAAM,oBAAC,aAAU,WAAU,UAAS;AAAA,QACpC,OAAO,oBAAC,cAAW,OAAO,YAAY;AAAA,MACxC;AAAA,MACA;AAAA,QACE,IAAI;AAAA,QACJ,OAAO,EAAE,0CAA0C,WAAW;AAAA,QAC9D,MAAM,oBAAC,aAAU,WAAU,UAAS;AAAA,QACpC,OAAO,oBAAC,cAAW,OAAO,gBAAgB;AAAA,MAC5C;AAAA,MACA;AAAA,QACE,IAAI;AAAA,QACJ,OAAO,EAAE,0CAA0C,WAAW;AAAA,QAC9D,MAAM,oBAAC,UAAO,WAAU,UAAS;AAAA,QACjC,OAAO,oBAAC,cAAW,OAAO,gBAAgB;AAAA,MAC5C;AAAA,MACA;AAAA,QACE,IAAI;AAAA,QACJ,OAAO,EAAE,sCAAsC,OAAO;AAAA,QACtD,MAAM,oBAAC,SAAM,WAAU,UAAS;AAAA,QAChC,OAAO,oBAAC,cAAW,OAAO,YAAY;AAAA,MACxC;AAAA,MACA;AAAA,QACE,IAAI;AAAA,QACJ,OAAO,EAAE,0CAA0C,YAAY;AAAA,QAC/D,MAAM,oBAAC,WAAQ,WAAU,UAAS;AAAA,QAClC,OAAO,oBAAC,YAAS;AAAA,MACnB;AAAA,MACA;AAAA,QACE,IAAI;AAAA,QACJ,OAAO,EAAE,sCAAsC,OAAO;AAAA,QACtD,MAAM,oBAAC,aAAU,WAAU,UAAS;AAAA,QACpC,OAAO,oBAAC,cAAW,OAAO,YAAY;AAAA,MACxC;AAAA,IACF;AAAA,IACA,CAAC,GAAG,iBAAiB,YAAY,gBAAgB,gBAAgB,YAAY,UAAU;AAAA,EACzF;AAEA,QAAM,UAAoB,MAAM;AAAA,IAC9B,MAAM;AAAA,MACJ,GAAG;AAAA,MACH,GAAG,aAAa,IAAI,CAAC,SAAS;AAAA,QAC5B,IAAI,IAAI;AAAA,QACR,OAAO,IAAI;AAAA,MACb,EAAE;AAAA,IACJ;AAAA,IACA,CAAC,aAAa,YAAY;AAAA,EAC5B;AAEA,SACE,qBAAC,SAEC;AAAA,yBAAC,SAAI,WAAU,iDAAgD,MAAK,WAAU,cAAY,EAAE,sCAAsC,wBAAwB,GACxJ;AAAA,0BAAC,SAAI,WAAU,iDACZ,kBAAQ,IAAI,CAAC,QAAQ;AACpB,cAAM,WAAW,cAAc,IAAI;AACnC,eACE;AAAA,UAAC;AAAA;AAAA,YAEC,MAAK;AAAA,YACL,SAAQ;AAAA,YACR,MAAK;AAAA,YACL,MAAK;AAAA,YACL,iBAAe;AAAA,YACf,SAAS,MAAM,YAAY,IAAI,EAAE;AAAA,YACjC,WAAW;AAAA,cACT;AAAA,cACA,WACI,oDACA;AAAA,YACN;AAAA,YAEC;AAAA,kBAAI,QAAQ,oBAAC,UAAK,WAAU,UAAU,cAAI,MAAK;AAAA,cAC/C,IAAI;AAAA,cACJ,IAAI;AAAA;AAAA;AAAA,UAhBA,IAAI;AAAA,QAiBX;AAAA,MAEJ,CAAC,GACH;AAAA,MACC,gBACC;AAAA,QAAC;AAAA;AAAA,UACC,MAAK;AAAA,UACL,MAAK;AAAA,UACL,SAAS,cAAc;AAAA,UACvB,UAAU,cAAc;AAAA,UACxB,WAAU;AAAA,UAEV;AAAA,gCAAC,QAAK,WAAU,kBAAiB;AAAA,YAChC,cAAc;AAAA;AAAA;AAAA,MACjB,IACE;AAAA,OACN;AAAA,IAGA,oBAAC,SAAI,WAAU,QACZ,UACH;AAAA,KACF;AAEJ;",
+  "sourcesContent": ["\"use client\"\n\nimport * as React from 'react'\nimport { useT } from '@open-mercato/shared/lib/i18n/context'\nimport { Button } from '@open-mercato/ui/primitives/button'\nimport { Tabs, TabsList, TabsTrigger } from '@open-mercato/ui/primitives/tabs'\nimport {\n  SquareCheckBig,\n  Mail,\n  Briefcase,\n  Building2,\n  Check,\n  History,\n  Paperclip,\n  Plus,\n  MapPin,\n} from 'lucide-react'\nimport type { SectionAction } from '@open-mercato/ui/backend/detail'\n\nexport type PersonTabId =\n  | 'activities'\n  | 'emails'\n  | 'deals'\n  | 'companies'\n  | 'addresses'\n  | 'tasks'\n  | 'changelog'\n  | 'files'\n  | string\n\ntype TabDef = {\n  id: PersonTabId\n  label: string\n  icon?: React.ReactNode\n  count?: React.ReactNode\n}\n\ntype PersonDetailTabsProps = {\n  activeTab: PersonTabId\n  onTabChange: (tab: PersonTabId) => void\n  injectedTabs?: Array<{ id: string; label: string }>\n  activitiesCount?: number\n  dealsCount?: number\n  companiesCount?: number\n  addressesCount?: number\n  tasksCount?: number\n  filesCount?: number\n  sectionAction?: SectionAction | null\n  children: React.ReactNode\n}\n\nconst SUPPORTED_TAB_IDS = new Set<PersonTabId>(['activities', 'emails', 'deals', 'companies', 'addresses', 'tasks', 'changelog', 'files'])\n\nexport function resolveLegacyTab(tab: string | null | undefined): PersonTabId {\n  if (!tab) return 'activities'\n  return SUPPORTED_TAB_IDS.has(tab as PersonTabId) ? (tab as PersonTabId) : 'activities'\n}\n\nfunction formatTabCount(count: number): string | number | undefined {\n  if (count <= 0) return undefined\n  return count > 999 ? '999+' : count\n}\n\nexport function PersonDetailTabs({\n  activeTab,\n  onTabChange,\n  injectedTabs = [],\n  activitiesCount = 0,\n  dealsCount = 0,\n  companiesCount = 0,\n  addressesCount = 0,\n  tasksCount = 0,\n  filesCount = 0,\n  sectionAction = null,\n  children,\n}: PersonDetailTabsProps) {\n  const t = useT()\n\n  const builtInTabs: TabDef[] = React.useMemo(\n    () => [\n      {\n        id: 'activities',\n        label: t('customers.people.detail.tabs.activities', 'Activities'),\n        icon: <SquareCheckBig className=\"size-4\" />,\n        count: formatTabCount(activitiesCount),\n      },\n      {\n        id: 'emails',\n        label: t('customers.people.detail.tabs.emails', 'Emails'),\n        icon: <Mail className=\"size-4\" />,\n      },\n      {\n        id: 'deals',\n        label: t('customers.people.detail.tabs.deals', 'Deals'),\n        icon: <Briefcase className=\"size-4\" />,\n        count: formatTabCount(dealsCount),\n      },\n      {\n        id: 'companies',\n        label: t('customers.people.detail.tabs.companies', 'Companies'),\n        icon: <Building2 className=\"size-4\" />,\n        count: formatTabCount(companiesCount),\n      },\n      {\n        id: 'addresses',\n        label: t('customers.people.detail.tabs.addresses', 'Addresses'),\n        icon: <MapPin className=\"size-4\" />,\n        count: formatTabCount(addressesCount),\n      },\n      {\n        id: 'tasks',\n        label: t('customers.people.detail.tabs.tasks', 'Tasks'),\n        icon: <Check className=\"size-4\" />,\n        count: formatTabCount(tasksCount),\n      },\n      {\n        id: 'changelog',\n        label: t('customers.people.detail.tabs.changelog', 'Change log'),\n        icon: <History className=\"size-4\" />,\n        count: 'NEW',\n      },\n      {\n        id: 'files',\n        label: t('customers.people.detail.tabs.files', 'Files'),\n        icon: <Paperclip className=\"size-4\" />,\n        count: formatTabCount(filesCount),\n      },\n    ],\n    [t, activitiesCount, dealsCount, companiesCount, addressesCount, tasksCount, filesCount],\n  )\n\n  const allTabs: TabDef[] = React.useMemo(\n    () => [\n      ...builtInTabs,\n      ...injectedTabs.map((tab) => ({\n        id: tab.id as PersonTabId,\n        label: tab.label,\n      })),\n    ],\n    [builtInTabs, injectedTabs],\n  )\n\n  return (\n    <div>\n      {/* Tab navigation \u2014 full width above both zones */}\n      <div className=\"flex items-end justify-between gap-2 border-b\">\n        <Tabs\n          value={activeTab}\n          onValueChange={(value) => onTabChange(value as PersonTabId)}\n          variant=\"underline\"\n          className=\"min-w-0 flex-1\"\n        >\n          <TabsList\n            aria-label={t('customers.people.detail.tabs.label', 'Person detail sections')}\n            className=\"-mb-px w-full overflow-x-auto border-b-0 px-1\"\n          >\n            {allTabs.map((tab) => (\n              <TabsTrigger key={tab.id} value={tab.id} leading={tab.icon} count={tab.count}>\n                {tab.label}\n              </TabsTrigger>\n            ))}\n          </TabsList>\n        </Tabs>\n        {sectionAction ? (\n          <Button\n            type=\"button\"\n            size=\"sm\"\n            onClick={sectionAction.onClick}\n            disabled={sectionAction.disabled}\n            className=\"mb-1.5 mr-1 shrink-0\"\n          >\n            <Plus className=\"mr-1.5 h-4 w-4\" />\n            {sectionAction.label}\n          </Button>\n        ) : null}\n      </div>\n\n      {/* Two-column content below tabs */}\n      <div className=\"pt-6\">\n        {children}\n      </div>\n    </div>\n  )\n}\n"],
+  "mappings": ";AAmFc,cAiFJ,YAjFI;AAjFd,YAAY,WAAW;AACvB,SAAS,YAAY;AACrB,SAAS,cAAc;AACvB,SAAS,MAAM,UAAU,mBAAmB;AAC5C;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAmCP,MAAM,oBAAoB,oBAAI,IAAiB,CAAC,cAAc,UAAU,SAAS,aAAa,aAAa,SAAS,aAAa,OAAO,CAAC;AAElI,SAAS,iBAAiB,KAA6C;AAC5E,MAAI,CAAC,IAAK,QAAO;AACjB,SAAO,kBAAkB,IAAI,GAAkB,IAAK,MAAsB;AAC5E;AAEA,SAAS,eAAe,OAA4C;AAClE,MAAI,SAAS,EAAG,QAAO;AACvB,SAAO,QAAQ,MAAM,SAAS;AAChC;AAEO,SAAS,iBAAiB;AAAA,EAC/B;AAAA,EACA;AAAA,EACA,eAAe,CAAC;AAAA,EAChB,kBAAkB;AAAA,EAClB,aAAa;AAAA,EACb,iBAAiB;AAAA,EACjB,iBAAiB;AAAA,EACjB,aAAa;AAAA,EACb,aAAa;AAAA,EACb,gBAAgB;AAAA,EAChB;AACF,GAA0B;AACxB,QAAM,IAAI,KAAK;AAEf,QAAM,cAAwB,MAAM;AAAA,IAClC,MAAM;AAAA,MACJ;AAAA,QACE,IAAI;AAAA,QACJ,OAAO,EAAE,2CAA2C,YAAY;AAAA,QAChE,MAAM,oBAAC,kBAAe,WAAU,UAAS;AAAA,QACzC,OAAO,eAAe,eAAe;AAAA,MACvC;AAAA,MACA;AAAA,QACE,IAAI;AAAA,QACJ,OAAO,EAAE,uCAAuC,QAAQ;AAAA,QACxD,MAAM,oBAAC,QAAK,WAAU,UAAS;AAAA,MACjC;AAAA,MACA;AAAA,QACE,IAAI;AAAA,QACJ,OAAO,EAAE,sCAAsC,OAAO;AAAA,QACtD,MAAM,oBAAC,aAAU,WAAU,UAAS;AAAA,QACpC,OAAO,eAAe,UAAU;AAAA,MAClC;AAAA,MACA;AAAA,QACE,IAAI;AAAA,QACJ,OAAO,EAAE,0CAA0C,WAAW;AAAA,QAC9D,MAAM,oBAAC,aAAU,WAAU,UAAS;AAAA,QACpC,OAAO,eAAe,cAAc;AAAA,MACtC;AAAA,MACA;AAAA,QACE,IAAI;AAAA,QACJ,OAAO,EAAE,0CAA0C,WAAW;AAAA,QAC9D,MAAM,oBAAC,UAAO,WAAU,UAAS;AAAA,QACjC,OAAO,eAAe,cAAc;AAAA,MACtC;AAAA,MACA;AAAA,QACE,IAAI;AAAA,QACJ,OAAO,EAAE,sCAAsC,OAAO;AAAA,QACtD,MAAM,oBAAC,SAAM,WAAU,UAAS;AAAA,QAChC,OAAO,eAAe,UAAU;AAAA,MAClC;AAAA,MACA;AAAA,QACE,IAAI;AAAA,QACJ,OAAO,EAAE,0CAA0C,YAAY;AAAA,QAC/D,MAAM,oBAAC,WAAQ,WAAU,UAAS;AAAA,QAClC,OAAO;AAAA,MACT;AAAA,MACA;AAAA,QACE,IAAI;AAAA,QACJ,OAAO,EAAE,sCAAsC,OAAO;AAAA,QACtD,MAAM,oBAAC,aAAU,WAAU,UAAS;AAAA,QACpC,OAAO,eAAe,UAAU;AAAA,MAClC;AAAA,IACF;AAAA,IACA,CAAC,GAAG,iBAAiB,YAAY,gBAAgB,gBAAgB,YAAY,UAAU;AAAA,EACzF;AAEA,QAAM,UAAoB,MAAM;AAAA,IAC9B,MAAM;AAAA,MACJ,GAAG;AAAA,MACH,GAAG,aAAa,IAAI,CAAC,SAAS;AAAA,QAC5B,IAAI,IAAI;AAAA,QACR,OAAO,IAAI;AAAA,MACb,EAAE;AAAA,IACJ;AAAA,IACA,CAAC,aAAa,YAAY;AAAA,EAC5B;AAEA,SACE,qBAAC,SAEC;AAAA,yBAAC,SAAI,WAAU,iDACb;AAAA;AAAA,QAAC;AAAA;AAAA,UACC,OAAO;AAAA,UACP,eAAe,CAAC,UAAU,YAAY,KAAoB;AAAA,UAC1D,SAAQ;AAAA,UACR,WAAU;AAAA,UAEV;AAAA,YAAC;AAAA;AAAA,cACC,cAAY,EAAE,sCAAsC,wBAAwB;AAAA,cAC5E,WAAU;AAAA,cAET,kBAAQ,IAAI,CAAC,QACZ,oBAAC,eAAyB,OAAO,IAAI,IAAI,SAAS,IAAI,MAAM,OAAO,IAAI,OACpE,cAAI,SADW,IAAI,EAEtB,CACD;AAAA;AAAA,UACH;AAAA;AAAA,MACF;AAAA,MACC,gBACC;AAAA,QAAC;AAAA;AAAA,UACC,MAAK;AAAA,UACL,MAAK;AAAA,UACL,SAAS,cAAc;AAAA,UACvB,UAAU,cAAc;AAAA,UACxB,WAAU;AAAA,UAEV;AAAA,gCAAC,QAAK,WAAU,kBAAiB;AAAA,YAChC,cAAc;AAAA;AAAA;AAAA,MACjB,IACE;AAAA,OACN;AAAA,IAGA,oBAAC,SAAI,WAAU,QACZ,UACH;AAAA,KACF;AAEJ;",
   "names": []
 }

package/dist/modules/customers/components/detail/useDealsAccess.js

@@ -0,0 +1,16 @@
+"use client";
+import * as React from "react";
+import { useBackendChrome } from "@open-mercato/ui/backend/BackendChromeProvider";
+import { hasFeature } from "@open-mercato/shared/security/features";
+function useDealsAccess() {
+  const { payload, isReady } = useBackendChrome();
+  const canViewDeals = React.useMemo(
+    () => hasFeature(payload?.grantedFeatures ?? [], "customers.deals.view"),
+    [payload?.grantedFeatures]
+  );
+  return { canViewDeals, isReady };
+}
+export {
+  useDealsAccess
+};
+//# sourceMappingURL=useDealsAccess.js.map

package/dist/modules/customers/components/detail/useDealsAccess.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../src/modules/customers/components/detail/useDealsAccess.ts"],
+  "sourcesContent": ["\"use client\"\n\nimport * as React from 'react'\nimport { useBackendChrome } from '@open-mercato/ui/backend/BackendChromeProvider'\nimport { hasFeature } from '@open-mercato/shared/security/features'\n\nexport type DealsAccess = {\n  canViewDeals: boolean\n  isReady: boolean\n}\n\nexport function useDealsAccess(): DealsAccess {\n  const { payload, isReady } = useBackendChrome()\n  const canViewDeals = React.useMemo(\n    () => hasFeature(payload?.grantedFeatures ?? [], 'customers.deals.view'),\n    [payload?.grantedFeatures],\n  )\n  return { canViewDeals, isReady }\n}\n"],
+  "mappings": ";AAEA,YAAY,WAAW;AACvB,SAAS,wBAAwB;AACjC,SAAS,kBAAkB;AAOpB,SAAS,iBAA8B;AAC5C,QAAM,EAAE,SAAS,QAAQ,IAAI,iBAAiB;AAC9C,QAAM,eAAe,MAAM;AAAA,IACzB,MAAM,WAAW,SAAS,mBAAmB,CAAC,GAAG,sBAAsB;AAAA,IACvE,CAAC,SAAS,eAAe;AAAA,EAC3B;AACA,SAAO,EAAE,cAAc,QAAQ;AACjC;",
+  "names": []
+}

package/dist/modules/dashboards/api/roles/widgets/route.js

@@ -6,7 +6,10 @@ import { DashboardRoleWidgets } from "@open-mercato/core/modules/dashboards/data
 import { Role } from "@open-mercato/core/modules/auth/data/entities";
 import { roleWidgetSettingsSchema } from "@open-mercato/core/modules/dashboards/data/validators";
 import { loadAllWidgets } from "@open-mercato/core/modules/dashboards/lib/widgets";
-import { resolveWidgetAssignmentReadScope } from "@open-mercato/core/modules/dashboards/lib/widgetAssignmentScope";
+import {
+  resolveWidgetAssignmentReadScope,
+  resolveWidgetAssignmentTargetAccess
+} from "@open-mercato/core/modules/dashboards/lib/widgetAssignmentScope";
 import { hasFeature } from "@open-mercato/shared/security/features";
 import {
   runCrudMutationGuardAfterSuccess,
@@ -61,7 +64,15 @@ async function GET(req) {
     queryOrganizationId: url.searchParams.get("organizationId")
   });
   const role = await em.findOne(Role, { id: roleId, deletedAt: null });
-  if (!role || tenantId && role.tenantId !== tenantId) {
+  const access = resolveWidgetAssignmentTargetAccess({
+    isSuperAdmin: !!acl.isSuperAdmin,
+    scopeTenantId: tenantId,
+    target: role
+  });
+  if (access === "forbidden") {
+    return NextResponse.json({ error: "Forbidden" }, { status: 403 });
+  }
+  if (access === "not-found") {
     return NextResponse.json({ error: "Role not found" }, { status: 404 });
   }
   const records = await em.find(DashboardRoleWidgets, { roleId, deletedAt: null });
@@ -103,7 +114,15 @@ async function PUT(req) {
   const tenantId = auth.tenantId ?? null;
   const organizationId = auth.orgId ?? null;
   const role = await em.findOne(Role, { id: parsed.data.roleId, deletedAt: null });
-  if (!role || tenantId && role.tenantId !== tenantId) {
+  const access = resolveWidgetAssignmentTargetAccess({
+    isSuperAdmin: !!acl.isSuperAdmin,
+    scopeTenantId: tenantId,
+    target: role
+  });
+  if (access === "forbidden") {
+    return NextResponse.json({ error: "Forbidden" }, { status: 403 });
+  }
+  if (access === "not-found") {
     return NextResponse.json({ error: "Role not found" }, { status: 404 });
   }
   const guardResult = await validateCrudMutationGuard(container, {

package/dist/modules/dashboards/api/roles/widgets/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../src/modules/dashboards/api/roles/widgets/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { DashboardRoleWidgets } from '@open-mercato/core/modules/dashboards/data/entities'\nimport { Role } from '@open-mercato/core/modules/auth/data/entities'\nimport { roleWidgetSettingsSchema } from '@open-mercato/core/modules/dashboards/data/validators'\nimport { loadAllWidgets } from '@open-mercato/core/modules/dashboards/lib/widgets'\nimport { resolveWidgetAssignmentReadScope } from '@open-mercato/core/modules/dashboards/lib/widgetAssignmentScope'\nimport { hasFeature } from '@open-mercato/shared/security/features'\nimport {\n  runCrudMutationGuardAfterSuccess,\n  validateCrudMutationGuard,\n} from '@open-mercato/shared/lib/crud/mutation-guard'\nimport type { OpenApiMethodDoc, OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport {\n  dashboardsTag,\n  dashboardsErrorSchema,\n  dashboardRoleWidgetsResponseSchema,\n  dashboardRoleWidgetsUpdateResponseSchema,\n} from '../../openapi'\n\nconst FEATURE = 'dashboards.admin.assign-widgets'\nconst RESOURCE_KIND = 'dashboards.roleWidgets'\n\nfunction pickBestRecord(records: DashboardRoleWidgets[], tenantId: string | null, organizationId: string | null): DashboardRoleWidgets | null {\n  let best: DashboardRoleWidgets | null = null\n  let bestScore = -1\n  for (const record of records) {\n    if (record.deletedAt) continue\n    if (record.tenantId && tenantId && record.tenantId !== tenantId) continue\n    if (record.tenantId && !tenantId) continue\n    if (record.organizationId && organizationId && record.organizationId !== organizationId) continue\n    if (record.organizationId && !organizationId) continue\n    const score = (record.tenantId ? 1 : 0) + (record.organizationId ? 2 : 0)\n    if (score > bestScore) {\n      best = record\n      bestScore = score\n    }\n  }\n  return best\n}\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: [FEATURE] },\n  PUT: { requireAuth: true, requireFeatures: [FEATURE] },\n}\n\nexport async function GET(req: Request) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth) return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n\n  const url = new URL(req.url)\n  const roleId = url.searchParams.get('roleId')\n  if (!roleId) return NextResponse.json({ error: 'roleId is required' }, { status: 400 })\n\n  const container = await createRequestContainer()\n  const em = container.resolve('em') as any\n  const rbac = container.resolve('rbacService') as any\n  const acl = await rbac.loadAcl(auth.sub, { tenantId: auth.tenantId ?? null, organizationId: auth.orgId ?? null })\n  if (!acl.isSuperAdmin && !hasFeature(acl.features, FEATURE)) {\n    return NextResponse.json({ error: 'Forbidden' }, { status: 403 })\n  }\n\n  const { tenantId, organizationId } = resolveWidgetAssignmentReadScope({\n    auth: { tenantId: auth.tenantId ?? null, orgId: auth.orgId ?? null },\n    isSuperAdmin: !!acl.isSuperAdmin,\n    queryTenantId: url.searchParams.get('tenantId'),\n    queryOrganizationId: url.searchParams.get('organizationId'),\n  })\n\n  const role = await em.findOne(Role, { id: roleId, deletedAt: null })\n  if (!role || (tenantId && role.tenantId !== tenantId)) {\n    return NextResponse.json({ error: 'Role not found' }, { status: 404 })\n  }\n\n  const records = await em.find(DashboardRoleWidgets, { roleId, deletedAt: null })\n  const best = pickBestRecord(records, tenantId, organizationId)\n\n  const response = {\n    widgetIds: best ? best.widgetIdsJson : [],\n    hasCustom: !!best,\n    scope: {\n      tenantId,\n      organizationId,\n    },\n  }\n\n  return NextResponse.json(response)\n}\n\nexport async function PUT(req: Request) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth) return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n\n  let payload: unknown\n  try {\n    payload = await req.json()\n  } catch {\n    return NextResponse.json({ error: 'Invalid JSON body' }, { status: 400 })\n  }\n  const parsed = roleWidgetSettingsSchema.safeParse(payload)\n  if (!parsed.success) {\n    return NextResponse.json({ error: 'Invalid payload', issues: parsed.error.issues }, { status: 400 })\n  }\n\n  const container = await createRequestContainer()\n  const { resolve } = container\n  const em = resolve('em') as any\n  const rbac = resolve('rbacService') as any\n  const acl = await rbac.loadAcl(auth.sub, { tenantId: auth.tenantId ?? null, organizationId: auth.orgId ?? null })\n  if (!acl.isSuperAdmin && !hasFeature(acl.features, FEATURE)) {\n    return NextResponse.json({ error: 'Forbidden' }, { status: 403 })\n  }\n\n  const widgets = await loadAllWidgets()\n  const validWidgetIds = new Set(widgets.map((w) => w.metadata.id))\n  const widgetIds = parsed.data.widgetIds.filter((id) => validWidgetIds.has(id))\n\n  const tenantId = auth.tenantId ?? null\n  const organizationId = auth.orgId ?? null\n\n  const role = await em.findOne(Role, { id: parsed.data.roleId, deletedAt: null })\n  if (!role || (tenantId && role.tenantId !== tenantId)) {\n    return NextResponse.json({ error: 'Role not found' }, { status: 404 })\n  }\n\n  const guardResult = await validateCrudMutationGuard(container, {\n    tenantId: tenantId ?? '',\n    organizationId,\n    userId: String(auth.sub),\n    resourceKind: RESOURCE_KIND,\n    resourceId: parsed.data.roleId,\n    operation: 'update',\n    requestMethod: req.method,\n    requestHeaders: req.headers,\n    mutationPayload: { roleId: parsed.data.roleId, widgetIds },\n  })\n  if (guardResult && !guardResult.ok) {\n    return NextResponse.json(guardResult.body, { status: guardResult.status })\n  }\n\n  let record = await em.findOne(DashboardRoleWidgets, {\n    roleId: parsed.data.roleId,\n    tenantId,\n    organizationId,\n    deletedAt: null,\n  })\n\n  if (!widgetIds.length) {\n    if (record) {\n      await em.remove(record).flush()\n    }\n    if (guardResult?.ok && guardResult.shouldRunAfterSuccess) {\n      await runCrudMutationGuardAfterSuccess(container, {\n        tenantId: tenantId ?? '',\n        organizationId,\n        userId: String(auth.sub),\n        resourceKind: RESOURCE_KIND,\n        resourceId: parsed.data.roleId,\n        operation: 'update',\n        requestMethod: req.method,\n        requestHeaders: req.headers,\n        metadata: guardResult.metadata ?? null,\n      })\n    }\n    return NextResponse.json({ ok: true, widgetIds: [] })\n  }\n\n  if (!record) {\n    record = em.create(DashboardRoleWidgets, {\n      roleId: parsed.data.roleId,\n      tenantId,\n      organizationId,\n      widgetIdsJson: widgetIds,\n    })\n    em.persist(record)\n  } else {\n    record.widgetIdsJson = widgetIds\n  }\n  await em.flush()\n\n  if (guardResult?.ok && guardResult.shouldRunAfterSuccess) {\n    await runCrudMutationGuardAfterSuccess(container, {\n      tenantId: tenantId ?? '',\n      organizationId,\n      userId: String(auth.sub),\n      resourceKind: RESOURCE_KIND,\n      resourceId: parsed.data.roleId,\n      operation: 'update',\n      requestMethod: req.method,\n      requestHeaders: req.headers,\n      metadata: guardResult.metadata ?? null,\n    })\n  }\n\n  return NextResponse.json({ ok: true, widgetIds })\n}\n\nconst roleWidgetsQuerySchema = z.object({\n  roleId: z.string().uuid(),\n  tenantId: z.string().uuid().optional(),\n  organizationId: z.string().uuid().optional(),\n})\n\nconst roleWidgetsGetDoc: OpenApiMethodDoc = {\n  summary: 'Fetch widget assignments for a role',\n  description: 'Returns the widgets explicitly assigned to the given role together with the evaluation scope.',\n  tags: [dashboardsTag],\n  query: roleWidgetsQuerySchema,\n  responses: [\n    { status: 200, description: 'Current widget configuration for the role.', schema: dashboardRoleWidgetsResponseSchema },\n  ],\n  errors: [\n    { status: 400, description: 'Missing role identifier', schema: dashboardsErrorSchema },\n    { status: 401, description: 'Authentication required', schema: dashboardsErrorSchema },\n    { status: 403, description: 'Insufficient permissions to manage role widgets', schema: dashboardsErrorSchema },\n  ],\n}\n\nconst roleWidgetsPutDoc: OpenApiMethodDoc = {\n  summary: 'Update widgets assigned to a role',\n  description: 'Persists the widget list for a role within the provided tenant and organization scope.',\n  tags: [dashboardsTag],\n  requestBody: {\n    contentType: 'application/json',\n    schema: roleWidgetSettingsSchema,\n    description: 'Role identifier and the widget ids that should remain assigned. Scope is derived from the authenticated session.',\n  },\n  responses: [\n    { status: 200, description: 'Widgets updated successfully.', schema: dashboardRoleWidgetsUpdateResponseSchema },\n  ],\n  errors: [\n    { status: 400, description: 'Invalid payload or unknown widgets', schema: dashboardsErrorSchema },\n    { status: 401, description: 'Authentication required', schema: dashboardsErrorSchema },\n    { status: 403, description: 'Insufficient permissions to manage role widgets', schema: dashboardsErrorSchema },\n  ],\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: dashboardsTag,\n  summary: 'Manage dashboard widgets assigned to a role',\n  methods: {\n    GET: roleWidgetsGetDoc,\n    PUT: roleWidgetsPutDoc,\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AACvC,SAAS,4BAA4B;AACrC,SAAS,YAAY;AACrB,SAAS,gCAAgC;AACzC,SAAS,sBAAsB;AAC/B,SAAS,wCAAwC;AACjD,SAAS,kBAAkB;AAC3B;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAEP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP,MAAM,UAAU;AAChB,MAAM,gBAAgB;AAEtB,SAAS,eAAe,SAAiC,UAAyB,gBAA4D;AAC5I,MAAI,OAAoC;AACxC,MAAI,YAAY;AAChB,aAAW,UAAU,SAAS;AAC5B,QAAI,OAAO,UAAW;AACtB,QAAI,OAAO,YAAY,YAAY,OAAO,aAAa,SAAU;AACjE,QAAI,OAAO,YAAY,CAAC,SAAU;AAClC,QAAI,OAAO,kBAAkB,kBAAkB,OAAO,mBAAmB,eAAgB;AACzF,QAAI,OAAO,kBAAkB,CAAC,eAAgB;AAC9C,UAAM,SAAS,OAAO,WAAW,IAAI,MAAM,OAAO,iBAAiB,IAAI;AACvE,QAAI,QAAQ,WAAW;AACrB,aAAO;AACP,kBAAY;AAAA,IACd;AAAA,EACF;AACA,SAAO;AACT;AAEO,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,OAAO,EAAE;AAAA,EACrD,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,OAAO,EAAE;AACvD;AAEA,eAAsB,IAAI,KAAc;AACtC,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,KAAM,QAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAE9E,QAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,QAAM,SAAS,IAAI,aAAa,IAAI,QAAQ;AAC5C,MAAI,CAAC,OAAQ,QAAO,aAAa,KAAK,EAAE,OAAO,qBAAqB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAEtF,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,QAAM,OAAO,UAAU,QAAQ,aAAa;AAC5C,QAAM,MAAM,MAAM,KAAK,QAAQ,KAAK,KAAK,EAAE,UAAU,KAAK,YAAY,MAAM,gBAAgB,KAAK,SAAS,KAAK,CAAC;AAChH,MAAI,CAAC,IAAI,gBAAgB,CAAC,WAAW,IAAI,UAAU,OAAO,GAAG;AAC3D,WAAO,aAAa,KAAK,EAAE,OAAO,YAAY,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAClE;AAEA,QAAM,EAAE,UAAU,eAAe,IAAI,iCAAiC;AAAA,IACpE,MAAM,EAAE,UAAU,KAAK,YAAY,MAAM,OAAO,KAAK,SAAS,KAAK;AAAA,IACnE,cAAc,CAAC,CAAC,IAAI;AAAA,IACpB,eAAe,IAAI,aAAa,IAAI,UAAU;AAAA,IAC9C,qBAAqB,IAAI,aAAa,IAAI,gBAAgB;AAAA,EAC5D,CAAC;AAED,QAAM,OAAO,MAAM,GAAG,QAAQ,MAAM,EAAE,IAAI,QAAQ,WAAW,KAAK,CAAC;AACnE,MAAI,CAAC,QAAS,YAAY,KAAK,aAAa,UAAW;AACrD,WAAO,aAAa,KAAK,EAAE,OAAO,iBAAiB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACvE;AAEA,QAAM,UAAU,MAAM,GAAG,KAAK,sBAAsB,EAAE,QAAQ,WAAW,KAAK,CAAC;AAC/E,QAAM,OAAO,eAAe,SAAS,UAAU,cAAc;AAE7D,QAAM,WAAW;AAAA,IACf,WAAW,OAAO,KAAK,gBAAgB,CAAC;AAAA,IACxC,WAAW,CAAC,CAAC;AAAA,IACb,OAAO;AAAA,MACL;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAEA,SAAO,aAAa,KAAK,QAAQ;AACnC;AAEA,eAAsB,IAAI,KAAc;AACtC,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,KAAM,QAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAE9E,MAAI;AACJ,MAAI;AACF,cAAU,MAAM,IAAI,KAAK;AAAA,EAC3B,QAAQ;AACN,WAAO,aAAa,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC1E;AACA,QAAM,SAAS,yBAAyB,UAAU,OAAO;AACzD,MAAI,CAAC,OAAO,SAAS;AACnB,WAAO,aAAa,KAAK,EAAE,OAAO,mBAAmB,QAAQ,OAAO,MAAM,OAAO,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrG;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,EAAE,QAAQ,IAAI;AACpB,QAAM,KAAK,QAAQ,IAAI;AACvB,QAAM,OAAO,QAAQ,aAAa;AAClC,QAAM,MAAM,MAAM,KAAK,QAAQ,KAAK,KAAK,EAAE,UAAU,KAAK,YAAY,MAAM,gBAAgB,KAAK,SAAS,KAAK,CAAC;AAChH,MAAI,CAAC,IAAI,gBAAgB,CAAC,WAAW,IAAI,UAAU,OAAO,GAAG;AAC3D,WAAO,aAAa,KAAK,EAAE,OAAO,YAAY,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAClE;AAEA,QAAM,UAAU,MAAM,eAAe;AACrC,QAAM,iBAAiB,IAAI,IAAI,QAAQ,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC;AAChE,QAAM,YAAY,OAAO,KAAK,UAAU,OAAO,CAAC,OAAO,eAAe,IAAI,EAAE,CAAC;AAE7E,QAAM,WAAW,KAAK,YAAY;AAClC,QAAM,iBAAiB,KAAK,SAAS;AAErC,QAAM,OAAO,MAAM,GAAG,QAAQ,MAAM,EAAE,IAAI,OAAO,KAAK,QAAQ,WAAW,KAAK,CAAC;AAC/E,MAAI,CAAC,QAAS,YAAY,KAAK,aAAa,UAAW;AACrD,WAAO,aAAa,KAAK,EAAE,OAAO,iBAAiB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACvE;AAEA,QAAM,cAAc,MAAM,0BAA0B,WAAW;AAAA,IAC7D,UAAU,YAAY;AAAA,IACtB;AAAA,IACA,QAAQ,OAAO,KAAK,GAAG;AAAA,IACvB,cAAc;AAAA,IACd,YAAY,OAAO,KAAK;AAAA,IACxB,WAAW;AAAA,IACX,eAAe,IAAI;AAAA,IACnB,gBAAgB,IAAI;AAAA,IACpB,iBAAiB,EAAE,QAAQ,OAAO,KAAK,QAAQ,UAAU;AAAA,EAC3D,CAAC;AACD,MAAI,eAAe,CAAC,YAAY,IAAI;AAClC,WAAO,aAAa,KAAK,YAAY,MAAM,EAAE,QAAQ,YAAY,OAAO,CAAC;AAAA,EAC3E;AAEA,MAAI,SAAS,MAAM,GAAG,QAAQ,sBAAsB;AAAA,IAClD,QAAQ,OAAO,KAAK;AAAA,IACpB;AAAA,IACA;AAAA,IACA,WAAW;AAAA,EACb,CAAC;AAED,MAAI,CAAC,UAAU,QAAQ;AACrB,QAAI,QAAQ;AACV,YAAM,GAAG,OAAO,MAAM,EAAE,MAAM;AAAA,IAChC;AACA,QAAI,aAAa,MAAM,YAAY,uBAAuB;AACxD,YAAM,iCAAiC,WAAW;AAAA,QAChD,UAAU,YAAY;AAAA,QACtB;AAAA,QACA,QAAQ,OAAO,KAAK,GAAG;AAAA,QACvB,cAAc;AAAA,QACd,YAAY,OAAO,KAAK;AAAA,QACxB,WAAW;AAAA,QACX,eAAe,IAAI;AAAA,QACnB,gBAAgB,IAAI;AAAA,QACpB,UAAU,YAAY,YAAY;AAAA,MACpC,CAAC;AAAA,IACH;AACA,WAAO,aAAa,KAAK,EAAE,IAAI,MAAM,WAAW,CAAC,EAAE,CAAC;AAAA,EACtD;AAEA,MAAI,CAAC,QAAQ;AACX,aAAS,GAAG,OAAO,sBAAsB;AAAA,MACvC,QAAQ,OAAO,KAAK;AAAA,MACpB;AAAA,MACA;AAAA,MACA,eAAe;AAAA,IACjB,CAAC;AACD,OAAG,QAAQ,MAAM;AAAA,EACnB,OAAO;AACL,WAAO,gBAAgB;AAAA,EACzB;AACA,QAAM,GAAG,MAAM;AAEf,MAAI,aAAa,MAAM,YAAY,uBAAuB;AACxD,UAAM,iCAAiC,WAAW;AAAA,MAChD,UAAU,YAAY;AAAA,MACtB;AAAA,MACA,QAAQ,OAAO,KAAK,GAAG;AAAA,MACvB,cAAc;AAAA,MACd,YAAY,OAAO,KAAK;AAAA,MACxB,WAAW;AAAA,MACX,eAAe,IAAI;AAAA,MACnB,gBAAgB,IAAI;AAAA,MACpB,UAAU,YAAY,YAAY;AAAA,IACpC,CAAC;AAAA,EACH;AAEA,SAAO,aAAa,KAAK,EAAE,IAAI,MAAM,UAAU,CAAC;AAClD;AAEA,MAAM,yBAAyB,EAAE,OAAO;AAAA,EACtC,QAAQ,EAAE,OAAO,EAAE,KAAK;AAAA,EACxB,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACrC,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAC7C,CAAC;AAED,MAAM,oBAAsC;AAAA,EAC1C,SAAS;AAAA,EACT,aAAa;AAAA,EACb,MAAM,CAAC,aAAa;AAAA,EACpB,OAAO;AAAA,EACP,WAAW;AAAA,IACT,EAAE,QAAQ,KAAK,aAAa,8CAA8C,QAAQ,mCAAmC;AAAA,EACvH;AAAA,EACA,QAAQ;AAAA,IACN,EAAE,QAAQ,KAAK,aAAa,2BAA2B,QAAQ,sBAAsB;AAAA,IACrF,EAAE,QAAQ,KAAK,aAAa,2BAA2B,QAAQ,sBAAsB;AAAA,IACrF,EAAE,QAAQ,KAAK,aAAa,mDAAmD,QAAQ,sBAAsB;AAAA,EAC/G;AACF;AAEA,MAAM,oBAAsC;AAAA,EAC1C,SAAS;AAAA,EACT,aAAa;AAAA,EACb,MAAM,CAAC,aAAa;AAAA,EACpB,aAAa;AAAA,IACX,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,aAAa;AAAA,EACf;AAAA,EACA,WAAW;AAAA,IACT,EAAE,QAAQ,KAAK,aAAa,iCAAiC,QAAQ,yCAAyC;AAAA,EAChH;AAAA,EACA,QAAQ;AAAA,IACN,EAAE,QAAQ,KAAK,aAAa,sCAAsC,QAAQ,sBAAsB;AAAA,IAChG,EAAE,QAAQ,KAAK,aAAa,2BAA2B,QAAQ,sBAAsB;AAAA,IACrF,EAAE,QAAQ,KAAK,aAAa,mDAAmD,QAAQ,sBAAsB;AAAA,EAC/G;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,IACL,KAAK;AAAA,EACP;AACF;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { DashboardRoleWidgets } from '@open-mercato/core/modules/dashboards/data/entities'\nimport { Role } from '@open-mercato/core/modules/auth/data/entities'\nimport { roleWidgetSettingsSchema } from '@open-mercato/core/modules/dashboards/data/validators'\nimport { loadAllWidgets } from '@open-mercato/core/modules/dashboards/lib/widgets'\nimport {\n  resolveWidgetAssignmentReadScope,\n  resolveWidgetAssignmentTargetAccess,\n} from '@open-mercato/core/modules/dashboards/lib/widgetAssignmentScope'\nimport { hasFeature } from '@open-mercato/shared/security/features'\nimport {\n  runCrudMutationGuardAfterSuccess,\n  validateCrudMutationGuard,\n} from '@open-mercato/shared/lib/crud/mutation-guard'\nimport type { OpenApiMethodDoc, OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport {\n  dashboardsTag,\n  dashboardsErrorSchema,\n  dashboardRoleWidgetsResponseSchema,\n  dashboardRoleWidgetsUpdateResponseSchema,\n} from '../../openapi'\n\nconst FEATURE = 'dashboards.admin.assign-widgets'\nconst RESOURCE_KIND = 'dashboards.roleWidgets'\n\nfunction pickBestRecord(records: DashboardRoleWidgets[], tenantId: string | null, organizationId: string | null): DashboardRoleWidgets | null {\n  let best: DashboardRoleWidgets | null = null\n  let bestScore = -1\n  for (const record of records) {\n    if (record.deletedAt) continue\n    if (record.tenantId && tenantId && record.tenantId !== tenantId) continue\n    if (record.tenantId && !tenantId) continue\n    if (record.organizationId && organizationId && record.organizationId !== organizationId) continue\n    if (record.organizationId && !organizationId) continue\n    const score = (record.tenantId ? 1 : 0) + (record.organizationId ? 2 : 0)\n    if (score > bestScore) {\n      best = record\n      bestScore = score\n    }\n  }\n  return best\n}\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: [FEATURE] },\n  PUT: { requireAuth: true, requireFeatures: [FEATURE] },\n}\n\nexport async function GET(req: Request) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth) return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n\n  const url = new URL(req.url)\n  const roleId = url.searchParams.get('roleId')\n  if (!roleId) return NextResponse.json({ error: 'roleId is required' }, { status: 400 })\n\n  const container = await createRequestContainer()\n  const em = container.resolve('em') as any\n  const rbac = container.resolve('rbacService') as any\n  const acl = await rbac.loadAcl(auth.sub, { tenantId: auth.tenantId ?? null, organizationId: auth.orgId ?? null })\n  if (!acl.isSuperAdmin && !hasFeature(acl.features, FEATURE)) {\n    return NextResponse.json({ error: 'Forbidden' }, { status: 403 })\n  }\n\n  const { tenantId, organizationId } = resolveWidgetAssignmentReadScope({\n    auth: { tenantId: auth.tenantId ?? null, orgId: auth.orgId ?? null },\n    isSuperAdmin: !!acl.isSuperAdmin,\n    queryTenantId: url.searchParams.get('tenantId'),\n    queryOrganizationId: url.searchParams.get('organizationId'),\n  })\n\n  const role = await em.findOne(Role, { id: roleId, deletedAt: null })\n  const access = resolveWidgetAssignmentTargetAccess({\n    isSuperAdmin: !!acl.isSuperAdmin,\n    scopeTenantId: tenantId,\n    target: role,\n  })\n  if (access === 'forbidden') {\n    return NextResponse.json({ error: 'Forbidden' }, { status: 403 })\n  }\n  if (access === 'not-found') {\n    return NextResponse.json({ error: 'Role not found' }, { status: 404 })\n  }\n\n  const records = await em.find(DashboardRoleWidgets, { roleId, deletedAt: null })\n  const best = pickBestRecord(records, tenantId, organizationId)\n\n  const response = {\n    widgetIds: best ? best.widgetIdsJson : [],\n    hasCustom: !!best,\n    scope: {\n      tenantId,\n      organizationId,\n    },\n  }\n\n  return NextResponse.json(response)\n}\n\nexport async function PUT(req: Request) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth) return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n\n  let payload: unknown\n  try {\n    payload = await req.json()\n  } catch {\n    return NextResponse.json({ error: 'Invalid JSON body' }, { status: 400 })\n  }\n  const parsed = roleWidgetSettingsSchema.safeParse(payload)\n  if (!parsed.success) {\n    return NextResponse.json({ error: 'Invalid payload', issues: parsed.error.issues }, { status: 400 })\n  }\n\n  const container = await createRequestContainer()\n  const { resolve } = container\n  const em = resolve('em') as any\n  const rbac = resolve('rbacService') as any\n  const acl = await rbac.loadAcl(auth.sub, { tenantId: auth.tenantId ?? null, organizationId: auth.orgId ?? null })\n  if (!acl.isSuperAdmin && !hasFeature(acl.features, FEATURE)) {\n    return NextResponse.json({ error: 'Forbidden' }, { status: 403 })\n  }\n\n  const widgets = await loadAllWidgets()\n  const validWidgetIds = new Set(widgets.map((w) => w.metadata.id))\n  const widgetIds = parsed.data.widgetIds.filter((id) => validWidgetIds.has(id))\n\n  const tenantId = auth.tenantId ?? null\n  const organizationId = auth.orgId ?? null\n\n  const role = await em.findOne(Role, { id: parsed.data.roleId, deletedAt: null })\n  const access = resolveWidgetAssignmentTargetAccess({\n    isSuperAdmin: !!acl.isSuperAdmin,\n    scopeTenantId: tenantId,\n    target: role,\n  })\n  if (access === 'forbidden') {\n    return NextResponse.json({ error: 'Forbidden' }, { status: 403 })\n  }\n  if (access === 'not-found') {\n    return NextResponse.json({ error: 'Role not found' }, { status: 404 })\n  }\n\n  const guardResult = await validateCrudMutationGuard(container, {\n    tenantId: tenantId ?? '',\n    organizationId,\n    userId: String(auth.sub),\n    resourceKind: RESOURCE_KIND,\n    resourceId: parsed.data.roleId,\n    operation: 'update',\n    requestMethod: req.method,\n    requestHeaders: req.headers,\n    mutationPayload: { roleId: parsed.data.roleId, widgetIds },\n  })\n  if (guardResult && !guardResult.ok) {\n    return NextResponse.json(guardResult.body, { status: guardResult.status })\n  }\n\n  let record = await em.findOne(DashboardRoleWidgets, {\n    roleId: parsed.data.roleId,\n    tenantId,\n    organizationId,\n    deletedAt: null,\n  })\n\n  if (!widgetIds.length) {\n    if (record) {\n      await em.remove(record).flush()\n    }\n    if (guardResult?.ok && guardResult.shouldRunAfterSuccess) {\n      await runCrudMutationGuardAfterSuccess(container, {\n        tenantId: tenantId ?? '',\n        organizationId,\n        userId: String(auth.sub),\n        resourceKind: RESOURCE_KIND,\n        resourceId: parsed.data.roleId,\n        operation: 'update',\n        requestMethod: req.method,\n        requestHeaders: req.headers,\n        metadata: guardResult.metadata ?? null,\n      })\n    }\n    return NextResponse.json({ ok: true, widgetIds: [] })\n  }\n\n  if (!record) {\n    record = em.create(DashboardRoleWidgets, {\n      roleId: parsed.data.roleId,\n      tenantId,\n      organizationId,\n      widgetIdsJson: widgetIds,\n    })\n    em.persist(record)\n  } else {\n    record.widgetIdsJson = widgetIds\n  }\n  await em.flush()\n\n  if (guardResult?.ok && guardResult.shouldRunAfterSuccess) {\n    await runCrudMutationGuardAfterSuccess(container, {\n      tenantId: tenantId ?? '',\n      organizationId,\n      userId: String(auth.sub),\n      resourceKind: RESOURCE_KIND,\n      resourceId: parsed.data.roleId,\n      operation: 'update',\n      requestMethod: req.method,\n      requestHeaders: req.headers,\n      metadata: guardResult.metadata ?? null,\n    })\n  }\n\n  return NextResponse.json({ ok: true, widgetIds })\n}\n\nconst roleWidgetsQuerySchema = z.object({\n  roleId: z.string().uuid(),\n  tenantId: z.string().uuid().optional(),\n  organizationId: z.string().uuid().optional(),\n})\n\nconst roleWidgetsGetDoc: OpenApiMethodDoc = {\n  summary: 'Fetch widget assignments for a role',\n  description: 'Returns the widgets explicitly assigned to the given role together with the evaluation scope.',\n  tags: [dashboardsTag],\n  query: roleWidgetsQuerySchema,\n  responses: [\n    { status: 200, description: 'Current widget configuration for the role.', schema: dashboardRoleWidgetsResponseSchema },\n  ],\n  errors: [\n    { status: 400, description: 'Missing role identifier', schema: dashboardsErrorSchema },\n    { status: 401, description: 'Authentication required', schema: dashboardsErrorSchema },\n    { status: 403, description: 'Insufficient permissions to manage role widgets', schema: dashboardsErrorSchema },\n  ],\n}\n\nconst roleWidgetsPutDoc: OpenApiMethodDoc = {\n  summary: 'Update widgets assigned to a role',\n  description: 'Persists the widget list for a role within the provided tenant and organization scope.',\n  tags: [dashboardsTag],\n  requestBody: {\n    contentType: 'application/json',\n    schema: roleWidgetSettingsSchema,\n    description: 'Role identifier and the widget ids that should remain assigned. Scope is derived from the authenticated session.',\n  },\n  responses: [\n    { status: 200, description: 'Widgets updated successfully.', schema: dashboardRoleWidgetsUpdateResponseSchema },\n  ],\n  errors: [\n    { status: 400, description: 'Invalid payload or unknown widgets', schema: dashboardsErrorSchema },\n    { status: 401, description: 'Authentication required', schema: dashboardsErrorSchema },\n    { status: 403, description: 'Insufficient permissions to manage role widgets', schema: dashboardsErrorSchema },\n  ],\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: dashboardsTag,\n  summary: 'Manage dashboard widgets assigned to a role',\n  methods: {\n    GET: roleWidgetsGetDoc,\n    PUT: roleWidgetsPutDoc,\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AACvC,SAAS,4BAA4B;AACrC,SAAS,YAAY;AACrB,SAAS,gCAAgC;AACzC,SAAS,sBAAsB;AAC/B;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,kBAAkB;AAC3B;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAEP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP,MAAM,UAAU;AAChB,MAAM,gBAAgB;AAEtB,SAAS,eAAe,SAAiC,UAAyB,gBAA4D;AAC5I,MAAI,OAAoC;AACxC,MAAI,YAAY;AAChB,aAAW,UAAU,SAAS;AAC5B,QAAI,OAAO,UAAW;AACtB,QAAI,OAAO,YAAY,YAAY,OAAO,aAAa,SAAU;AACjE,QAAI,OAAO,YAAY,CAAC,SAAU;AAClC,QAAI,OAAO,kBAAkB,kBAAkB,OAAO,mBAAmB,eAAgB;AACzF,QAAI,OAAO,kBAAkB,CAAC,eAAgB;AAC9C,UAAM,SAAS,OAAO,WAAW,IAAI,MAAM,OAAO,iBAAiB,IAAI;AACvE,QAAI,QAAQ,WAAW;AACrB,aAAO;AACP,kBAAY;AAAA,IACd;AAAA,EACF;AACA,SAAO;AACT;AAEO,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,OAAO,EAAE;AAAA,EACrD,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,OAAO,EAAE;AACvD;AAEA,eAAsB,IAAI,KAAc;AACtC,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,KAAM,QAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAE9E,QAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,QAAM,SAAS,IAAI,aAAa,IAAI,QAAQ;AAC5C,MAAI,CAAC,OAAQ,QAAO,aAAa,KAAK,EAAE,OAAO,qBAAqB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAEtF,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,QAAM,OAAO,UAAU,QAAQ,aAAa;AAC5C,QAAM,MAAM,MAAM,KAAK,QAAQ,KAAK,KAAK,EAAE,UAAU,KAAK,YAAY,MAAM,gBAAgB,KAAK,SAAS,KAAK,CAAC;AAChH,MAAI,CAAC,IAAI,gBAAgB,CAAC,WAAW,IAAI,UAAU,OAAO,GAAG;AAC3D,WAAO,aAAa,KAAK,EAAE,OAAO,YAAY,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAClE;AAEA,QAAM,EAAE,UAAU,eAAe,IAAI,iCAAiC;AAAA,IACpE,MAAM,EAAE,UAAU,KAAK,YAAY,MAAM,OAAO,KAAK,SAAS,KAAK;AAAA,IACnE,cAAc,CAAC,CAAC,IAAI;AAAA,IACpB,eAAe,IAAI,aAAa,IAAI,UAAU;AAAA,IAC9C,qBAAqB,IAAI,aAAa,IAAI,gBAAgB;AAAA,EAC5D,CAAC;AAED,QAAM,OAAO,MAAM,GAAG,QAAQ,MAAM,EAAE,IAAI,QAAQ,WAAW,KAAK,CAAC;AACnE,QAAM,SAAS,oCAAoC;AAAA,IACjD,cAAc,CAAC,CAAC,IAAI;AAAA,IACpB,eAAe;AAAA,IACf,QAAQ;AAAA,EACV,CAAC;AACD,MAAI,WAAW,aAAa;AAC1B,WAAO,aAAa,KAAK,EAAE,OAAO,YAAY,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAClE;AACA,MAAI,WAAW,aAAa;AAC1B,WAAO,aAAa,KAAK,EAAE,OAAO,iBAAiB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACvE;AAEA,QAAM,UAAU,MAAM,GAAG,KAAK,sBAAsB,EAAE,QAAQ,WAAW,KAAK,CAAC;AAC/E,QAAM,OAAO,eAAe,SAAS,UAAU,cAAc;AAE7D,QAAM,WAAW;AAAA,IACf,WAAW,OAAO,KAAK,gBAAgB,CAAC;AAAA,IACxC,WAAW,CAAC,CAAC;AAAA,IACb,OAAO;AAAA,MACL;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAEA,SAAO,aAAa,KAAK,QAAQ;AACnC;AAEA,eAAsB,IAAI,KAAc;AACtC,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,KAAM,QAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAE9E,MAAI;AACJ,MAAI;AACF,cAAU,MAAM,IAAI,KAAK;AAAA,EAC3B,QAAQ;AACN,WAAO,aAAa,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC1E;AACA,QAAM,SAAS,yBAAyB,UAAU,OAAO;AACzD,MAAI,CAAC,OAAO,SAAS;AACnB,WAAO,aAAa,KAAK,EAAE,OAAO,mBAAmB,QAAQ,OAAO,MAAM,OAAO,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrG;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,EAAE,QAAQ,IAAI;AACpB,QAAM,KAAK,QAAQ,IAAI;AACvB,QAAM,OAAO,QAAQ,aAAa;AAClC,QAAM,MAAM,MAAM,KAAK,QAAQ,KAAK,KAAK,EAAE,UAAU,KAAK,YAAY,MAAM,gBAAgB,KAAK,SAAS,KAAK,CAAC;AAChH,MAAI,CAAC,IAAI,gBAAgB,CAAC,WAAW,IAAI,UAAU,OAAO,GAAG;AAC3D,WAAO,aAAa,KAAK,EAAE,OAAO,YAAY,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAClE;AAEA,QAAM,UAAU,MAAM,eAAe;AACrC,QAAM,iBAAiB,IAAI,IAAI,QAAQ,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC;AAChE,QAAM,YAAY,OAAO,KAAK,UAAU,OAAO,CAAC,OAAO,eAAe,IAAI,EAAE,CAAC;AAE7E,QAAM,WAAW,KAAK,YAAY;AAClC,QAAM,iBAAiB,KAAK,SAAS;AAErC,QAAM,OAAO,MAAM,GAAG,QAAQ,MAAM,EAAE,IAAI,OAAO,KAAK,QAAQ,WAAW,KAAK,CAAC;AAC/E,QAAM,SAAS,oCAAoC;AAAA,IACjD,cAAc,CAAC,CAAC,IAAI;AAAA,IACpB,eAAe;AAAA,IACf,QAAQ;AAAA,EACV,CAAC;AACD,MAAI,WAAW,aAAa;AAC1B,WAAO,aAAa,KAAK,EAAE,OAAO,YAAY,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAClE;AACA,MAAI,WAAW,aAAa;AAC1B,WAAO,aAAa,KAAK,EAAE,OAAO,iBAAiB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACvE;AAEA,QAAM,cAAc,MAAM,0BAA0B,WAAW;AAAA,IAC7D,UAAU,YAAY;AAAA,IACtB;AAAA,IACA,QAAQ,OAAO,KAAK,GAAG;AAAA,IACvB,cAAc;AAAA,IACd,YAAY,OAAO,KAAK;AAAA,IACxB,WAAW;AAAA,IACX,eAAe,IAAI;AAAA,IACnB,gBAAgB,IAAI;AAAA,IACpB,iBAAiB,EAAE,QAAQ,OAAO,KAAK,QAAQ,UAAU;AAAA,EAC3D,CAAC;AACD,MAAI,eAAe,CAAC,YAAY,IAAI;AAClC,WAAO,aAAa,KAAK,YAAY,MAAM,EAAE,QAAQ,YAAY,OAAO,CAAC;AAAA,EAC3E;AAEA,MAAI,SAAS,MAAM,GAAG,QAAQ,sBAAsB;AAAA,IAClD,QAAQ,OAAO,KAAK;AAAA,IACpB;AAAA,IACA;AAAA,IACA,WAAW;AAAA,EACb,CAAC;AAED,MAAI,CAAC,UAAU,QAAQ;AACrB,QAAI,QAAQ;AACV,YAAM,GAAG,OAAO,MAAM,EAAE,MAAM;AAAA,IAChC;AACA,QAAI,aAAa,MAAM,YAAY,uBAAuB;AACxD,YAAM,iCAAiC,WAAW;AAAA,QAChD,UAAU,YAAY;AAAA,QACtB;AAAA,QACA,QAAQ,OAAO,KAAK,GAAG;AAAA,QACvB,cAAc;AAAA,QACd,YAAY,OAAO,KAAK;AAAA,QACxB,WAAW;AAAA,QACX,eAAe,IAAI;AAAA,QACnB,gBAAgB,IAAI;AAAA,QACpB,UAAU,YAAY,YAAY;AAAA,MACpC,CAAC;AAAA,IACH;AACA,WAAO,aAAa,KAAK,EAAE,IAAI,MAAM,WAAW,CAAC,EAAE,CAAC;AAAA,EACtD;AAEA,MAAI,CAAC,QAAQ;AACX,aAAS,GAAG,OAAO,sBAAsB;AAAA,MACvC,QAAQ,OAAO,KAAK;AAAA,MACpB;AAAA,MACA;AAAA,MACA,eAAe;AAAA,IACjB,CAAC;AACD,OAAG,QAAQ,MAAM;AAAA,EACnB,OAAO;AACL,WAAO,gBAAgB;AAAA,EACzB;AACA,QAAM,GAAG,MAAM;AAEf,MAAI,aAAa,MAAM,YAAY,uBAAuB;AACxD,UAAM,iCAAiC,WAAW;AAAA,MAChD,UAAU,YAAY;AAAA,MACtB;AAAA,MACA,QAAQ,OAAO,KAAK,GAAG;AAAA,MACvB,cAAc;AAAA,MACd,YAAY,OAAO,KAAK;AAAA,MACxB,WAAW;AAAA,MACX,eAAe,IAAI;AAAA,MACnB,gBAAgB,IAAI;AAAA,MACpB,UAAU,YAAY,YAAY;AAAA,IACpC,CAAC;AAAA,EACH;AAEA,SAAO,aAAa,KAAK,EAAE,IAAI,MAAM,UAAU,CAAC;AAClD;AAEA,MAAM,yBAAyB,EAAE,OAAO;AAAA,EACtC,QAAQ,EAAE,OAAO,EAAE,KAAK;AAAA,EACxB,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACrC,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAC7C,CAAC;AAED,MAAM,oBAAsC;AAAA,EAC1C,SAAS;AAAA,EACT,aAAa;AAAA,EACb,MAAM,CAAC,aAAa;AAAA,EACpB,OAAO;AAAA,EACP,WAAW;AAAA,IACT,EAAE,QAAQ,KAAK,aAAa,8CAA8C,QAAQ,mCAAmC;AAAA,EACvH;AAAA,EACA,QAAQ;AAAA,IACN,EAAE,QAAQ,KAAK,aAAa,2BAA2B,QAAQ,sBAAsB;AAAA,IACrF,EAAE,QAAQ,KAAK,aAAa,2BAA2B,QAAQ,sBAAsB;AAAA,IACrF,EAAE,QAAQ,KAAK,aAAa,mDAAmD,QAAQ,sBAAsB;AAAA,EAC/G;AACF;AAEA,MAAM,oBAAsC;AAAA,EAC1C,SAAS;AAAA,EACT,aAAa;AAAA,EACb,MAAM,CAAC,aAAa;AAAA,EACpB,aAAa;AAAA,IACX,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,aAAa;AAAA,EACf;AAAA,EACA,WAAW;AAAA,IACT,EAAE,QAAQ,KAAK,aAAa,iCAAiC,QAAQ,yCAAyC;AAAA,EAChH;AAAA,EACA,QAAQ;AAAA,IACN,EAAE,QAAQ,KAAK,aAAa,sCAAsC,QAAQ,sBAAsB;AAAA,IAChG,EAAE,QAAQ,KAAK,aAAa,2BAA2B,QAAQ,sBAAsB;AAAA,IACrF,EAAE,QAAQ,KAAK,aAAa,mDAAmD,QAAQ,sBAAsB;AAAA,EAC/G;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,IACL,KAAK;AAAA,EACP;AACF;",
   "names": []
 }

package/dist/modules/dashboards/api/users/widgets/route.js

@@ -7,7 +7,10 @@ import { User } from "@open-mercato/core/modules/auth/data/entities";
 import { userWidgetSettingsSchema } from "@open-mercato/core/modules/dashboards/data/validators";
 import { loadAllWidgets } from "@open-mercato/core/modules/dashboards/lib/widgets";
 import { resolveAllowedWidgetIds } from "@open-mercato/core/modules/dashboards/lib/access";
-import { resolveWidgetAssignmentReadScope } from "@open-mercato/core/modules/dashboards/lib/widgetAssignmentScope";
+import {
+  resolveWidgetAssignmentReadScope,
+  resolveWidgetAssignmentTargetAccess
+} from "@open-mercato/core/modules/dashboards/lib/widgetAssignmentScope";
 import { hasFeature } from "@open-mercato/shared/security/features";
 import {
   runCrudMutationGuardAfterSuccess,
@@ -45,7 +48,15 @@ async function GET(req) {
     queryOrganizationId: url.searchParams.get("organizationId")
   });
   const targetUserForRead = await em.findOne(User, { id: userId, deletedAt: null });
-  if (!targetUserForRead || tenantId && (targetUserForRead.tenantId ?? null) !== tenantId) {
+  const readAccess = resolveWidgetAssignmentTargetAccess({
+    isSuperAdmin: !!acl.isSuperAdmin,
+    scopeTenantId: tenantId,
+    target: targetUserForRead
+  });
+  if (readAccess === "forbidden") {
+    return NextResponse.json({ error: "Forbidden" }, { status: 403 });
+  }
+  if (readAccess === "not-found") {
     return NextResponse.json({ error: "User not found" }, { status: 404 });
   }
   const widgets = await loadAllWidgets();
@@ -103,7 +114,15 @@ async function PUT(req) {
   const tenantId = auth.tenantId ?? null;
   const organizationId = auth.orgId ?? null;
   const targetUser = await em.findOne(User, { id: parsed.data.userId, deletedAt: null });
-  if (!targetUser || tenantId && (targetUser.tenantId ?? null) !== tenantId) {
+  const writeAccess = resolveWidgetAssignmentTargetAccess({
+    isSuperAdmin: !!acl.isSuperAdmin,
+    scopeTenantId: tenantId,
+    target: targetUser
+  });
+  if (writeAccess === "forbidden") {
+    return NextResponse.json({ error: "Forbidden" }, { status: 403 });
+  }
+  if (writeAccess === "not-found") {
     return NextResponse.json({ error: "User not found" }, { status: 404 });
   }
   const guardResult = await validateCrudMutationGuard(container, {

package/dist/modules/dashboards/api/users/widgets/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../src/modules/dashboards/api/users/widgets/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { DashboardUserWidgets } from '@open-mercato/core/modules/dashboards/data/entities'\nimport { User } from '@open-mercato/core/modules/auth/data/entities'\nimport { userWidgetSettingsSchema } from '@open-mercato/core/modules/dashboards/data/validators'\nimport { loadAllWidgets } from '@open-mercato/core/modules/dashboards/lib/widgets'\nimport { resolveAllowedWidgetIds } from '@open-mercato/core/modules/dashboards/lib/access'\nimport { resolveWidgetAssignmentReadScope } from '@open-mercato/core/modules/dashboards/lib/widgetAssignmentScope'\nimport { hasFeature } from '@open-mercato/shared/security/features'\nimport {\n  runCrudMutationGuardAfterSuccess,\n  validateCrudMutationGuard,\n} from '@open-mercato/shared/lib/crud/mutation-guard'\nimport type { OpenApiMethodDoc, OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport {\n  dashboardsTag,\n  dashboardsErrorSchema,\n  dashboardUserWidgetsResponseSchema,\n  dashboardUserWidgetsUpdateResponseSchema,\n} from '../../openapi'\n\nconst FEATURE = 'dashboards.admin.assign-widgets'\nconst RESOURCE_KIND = 'dashboards.userWidgets'\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: [FEATURE] },\n  PUT: { requireAuth: true, requireFeatures: [FEATURE] },\n}\n\nexport async function GET(req: Request) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth) return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n\n  const url = new URL(req.url)\n  const userId = url.searchParams.get('userId')\n  if (!userId) return NextResponse.json({ error: 'userId is required' }, { status: 400 })\n\n  const container = await createRequestContainer()\n  const em = container.resolve('em') as any\n  const rbac = container.resolve('rbacService') as any\n  const acl = await rbac.loadAcl(auth.sub, { tenantId: auth.tenantId ?? null, organizationId: auth.orgId ?? null })\n  if (!acl.isSuperAdmin && !hasFeature(acl.features, FEATURE)) {\n    return NextResponse.json({ error: 'Forbidden' }, { status: 403 })\n  }\n\n  const { tenantId, organizationId } = resolveWidgetAssignmentReadScope({\n    auth: { tenantId: auth.tenantId ?? null, orgId: auth.orgId ?? null },\n    isSuperAdmin: !!acl.isSuperAdmin,\n    queryTenantId: url.searchParams.get('tenantId'),\n    queryOrganizationId: url.searchParams.get('organizationId'),\n  })\n\n  const targetUserForRead = await em.findOne(User, { id: userId, deletedAt: null })\n  if (!targetUserForRead || (tenantId && (targetUserForRead.tenantId ?? null) !== tenantId)) {\n    return NextResponse.json({ error: 'User not found' }, { status: 404 })\n  }\n\n  const widgets = await loadAllWidgets()\n  const targetAcl = await rbac.loadAcl(userId, { tenantId, organizationId })\n  const allowed = await resolveAllowedWidgetIds(\n    em,\n    {\n      userId,\n      tenantId,\n      organizationId,\n      features: targetAcl.features ?? [],\n      isSuperAdmin: !!targetAcl.isSuperAdmin,\n    },\n    widgets,\n  )\n\n  const record = await em.findOne(DashboardUserWidgets, {\n    userId,\n    tenantId,\n    organizationId,\n    deletedAt: null,\n  })\n\n  const response = {\n    mode: record ? record.mode : 'inherit',\n    widgetIds: record && record.mode === 'override' ? record.widgetIdsJson : [],\n    hasCustom: !!record && record.mode === 'override',\n    effectiveWidgetIds: allowed,\n    scope: { tenantId, organizationId },\n  }\n\n  return NextResponse.json(response)\n}\n\nexport async function PUT(req: Request) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth) return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n\n  let payload: unknown\n  try {\n    payload = await req.json()\n  } catch {\n    return NextResponse.json({ error: 'Invalid JSON body' }, { status: 400 })\n  }\n  const parsed = userWidgetSettingsSchema.safeParse(payload)\n  if (!parsed.success) {\n    return NextResponse.json({ error: 'Invalid payload', issues: parsed.error.issues }, { status: 400 })\n  }\n\n  const container = await createRequestContainer()\n  const { resolve } = container\n  const em = resolve('em') as any\n  const rbac = resolve('rbacService') as any\n  const acl = await rbac.loadAcl(auth.sub, { tenantId: auth.tenantId ?? null, organizationId: auth.orgId ?? null })\n  if (!acl.isSuperAdmin && !hasFeature(acl.features, FEATURE)) {\n    return NextResponse.json({ error: 'Forbidden' }, { status: 403 })\n  }\n\n  const widgets = await loadAllWidgets()\n  const validWidgetIds = new Set(widgets.map((w) => w.metadata.id))\n  const widgetIds = parsed.data.widgetIds.filter((id) => validWidgetIds.has(id))\n\n  const tenantId = auth.tenantId ?? null\n  const organizationId = auth.orgId ?? null\n\n  const targetUser = await em.findOne(User, { id: parsed.data.userId, deletedAt: null })\n  if (!targetUser || (tenantId && (targetUser.tenantId ?? null) !== tenantId)) {\n    return NextResponse.json({ error: 'User not found' }, { status: 404 })\n  }\n\n  const guardResult = await validateCrudMutationGuard(container, {\n    tenantId: tenantId ?? '',\n    organizationId,\n    userId: String(auth.sub),\n    resourceKind: RESOURCE_KIND,\n    resourceId: parsed.data.userId,\n    operation: 'update',\n    requestMethod: req.method,\n    requestHeaders: req.headers,\n    mutationPayload: { userId: parsed.data.userId, mode: parsed.data.mode, widgetIds },\n  })\n  if (guardResult && !guardResult.ok) {\n    return NextResponse.json(guardResult.body, { status: guardResult.status })\n  }\n\n  let record = await em.findOne(DashboardUserWidgets, {\n    userId: parsed.data.userId,\n    tenantId,\n    organizationId,\n    deletedAt: null,\n  })\n\n  if (parsed.data.mode === 'inherit') {\n    if (record) {\n      await em.remove(record).flush()\n    }\n    if (guardResult?.ok && guardResult.shouldRunAfterSuccess) {\n      await runCrudMutationGuardAfterSuccess(container, {\n        tenantId: tenantId ?? '',\n        organizationId,\n        userId: String(auth.sub),\n        resourceKind: RESOURCE_KIND,\n        resourceId: parsed.data.userId,\n        operation: 'update',\n        requestMethod: req.method,\n        requestHeaders: req.headers,\n        metadata: guardResult.metadata ?? null,\n      })\n    }\n    return NextResponse.json({ ok: true, mode: 'inherit', widgetIds: [] })\n  }\n\n  if (!record) {\n    record = em.create(DashboardUserWidgets, {\n      userId: parsed.data.userId,\n      tenantId,\n      organizationId,\n      mode: 'override',\n      widgetIdsJson: widgetIds,\n    })\n    em.persist(record)\n  } else {\n    record.mode = 'override'\n    record.widgetIdsJson = widgetIds\n  }\n  await em.flush()\n\n  if (guardResult?.ok && guardResult.shouldRunAfterSuccess) {\n    await runCrudMutationGuardAfterSuccess(container, {\n      tenantId: tenantId ?? '',\n      organizationId,\n      userId: String(auth.sub),\n      resourceKind: RESOURCE_KIND,\n      resourceId: parsed.data.userId,\n      operation: 'update',\n      requestMethod: req.method,\n      requestHeaders: req.headers,\n      metadata: guardResult.metadata ?? null,\n    })\n  }\n\n  return NextResponse.json({ ok: true, mode: 'override', widgetIds })\n}\n\nconst userWidgetsQuerySchema = z.object({\n  userId: z.string().uuid(),\n  tenantId: z.string().uuid().optional(),\n  organizationId: z.string().uuid().optional(),\n})\n\nconst userWidgetsGetDoc: OpenApiMethodDoc = {\n  summary: 'Read widget overrides for a user',\n  description: 'Returns the widgets inherited and explicitly configured for the requested user within the current scope.',\n  tags: [dashboardsTag],\n  query: userWidgetsQuerySchema,\n  responses: [\n    { status: 200, description: 'Widget settings for the user.', schema: dashboardUserWidgetsResponseSchema },\n  ],\n  errors: [\n    { status: 400, description: 'Missing user identifier', schema: dashboardsErrorSchema },\n    { status: 401, description: 'Authentication required', schema: dashboardsErrorSchema },\n    { status: 403, description: 'Insufficient permissions to manage user widgets', schema: dashboardsErrorSchema },\n  ],\n}\n\nconst userWidgetsPutDoc: OpenApiMethodDoc = {\n  summary: 'Update user-specific dashboard widgets',\n  description: 'Sets the widget override mode and allowed widgets for a user. Passing `mode: inherit` clears overrides.',\n  tags: [dashboardsTag],\n  requestBody: {\n    contentType: 'application/json',\n    schema: userWidgetSettingsSchema,\n    description: 'User identifier, override mode, and widget ids. Scope is derived from the authenticated session.',\n  },\n  responses: [\n    { status: 200, description: 'Overrides saved.', schema: dashboardUserWidgetsUpdateResponseSchema },\n  ],\n  errors: [\n    { status: 400, description: 'Invalid payload or unknown widgets', schema: dashboardsErrorSchema },\n    { status: 401, description: 'Authentication required', schema: dashboardsErrorSchema },\n    { status: 403, description: 'Insufficient permissions to manage user widgets', schema: dashboardsErrorSchema },\n  ],\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: dashboardsTag,\n  summary: 'Manage user-level dashboard widgets',\n  methods: {\n    GET: userWidgetsGetDoc,\n    PUT: userWidgetsPutDoc,\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AACvC,SAAS,4BAA4B;AACrC,SAAS,YAAY;AACrB,SAAS,gCAAgC;AACzC,SAAS,sBAAsB;AAC/B,SAAS,+BAA+B;AACxC,SAAS,wCAAwC;AACjD,SAAS,kBAAkB;AAC3B;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAEP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP,MAAM,UAAU;AAChB,MAAM,gBAAgB;AAEf,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,OAAO,EAAE;AAAA,EACrD,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,OAAO,EAAE;AACvD;AAEA,eAAsB,IAAI,KAAc;AACtC,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,KAAM,QAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAE9E,QAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,QAAM,SAAS,IAAI,aAAa,IAAI,QAAQ;AAC5C,MAAI,CAAC,OAAQ,QAAO,aAAa,KAAK,EAAE,OAAO,qBAAqB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAEtF,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,QAAM,OAAO,UAAU,QAAQ,aAAa;AAC5C,QAAM,MAAM,MAAM,KAAK,QAAQ,KAAK,KAAK,EAAE,UAAU,KAAK,YAAY,MAAM,gBAAgB,KAAK,SAAS,KAAK,CAAC;AAChH,MAAI,CAAC,IAAI,gBAAgB,CAAC,WAAW,IAAI,UAAU,OAAO,GAAG;AAC3D,WAAO,aAAa,KAAK,EAAE,OAAO,YAAY,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAClE;AAEA,QAAM,EAAE,UAAU,eAAe,IAAI,iCAAiC;AAAA,IACpE,MAAM,EAAE,UAAU,KAAK,YAAY,MAAM,OAAO,KAAK,SAAS,KAAK;AAAA,IACnE,cAAc,CAAC,CAAC,IAAI;AAAA,IACpB,eAAe,IAAI,aAAa,IAAI,UAAU;AAAA,IAC9C,qBAAqB,IAAI,aAAa,IAAI,gBAAgB;AAAA,EAC5D,CAAC;AAED,QAAM,oBAAoB,MAAM,GAAG,QAAQ,MAAM,EAAE,IAAI,QAAQ,WAAW,KAAK,CAAC;AAChF,MAAI,CAAC,qBAAsB,aAAa,kBAAkB,YAAY,UAAU,UAAW;AACzF,WAAO,aAAa,KAAK,EAAE,OAAO,iBAAiB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACvE;AAEA,QAAM,UAAU,MAAM,eAAe;AACrC,QAAM,YAAY,MAAM,KAAK,QAAQ,QAAQ,EAAE,UAAU,eAAe,CAAC;AACzE,QAAM,UAAU,MAAM;AAAA,IACpB;AAAA,IACA;AAAA,MACE;AAAA,MACA;AAAA,MACA;AAAA,MACA,UAAU,UAAU,YAAY,CAAC;AAAA,MACjC,cAAc,CAAC,CAAC,UAAU;AAAA,IAC5B;AAAA,IACA;AAAA,EACF;AAEA,QAAM,SAAS,MAAM,GAAG,QAAQ,sBAAsB;AAAA,IACpD;AAAA,IACA;AAAA,IACA;AAAA,IACA,WAAW;AAAA,EACb,CAAC;AAED,QAAM,WAAW;AAAA,IACf,MAAM,SAAS,OAAO,OAAO;AAAA,IAC7B,WAAW,UAAU,OAAO,SAAS,aAAa,OAAO,gBAAgB,CAAC;AAAA,IAC1E,WAAW,CAAC,CAAC,UAAU,OAAO,SAAS;AAAA,IACvC,oBAAoB;AAAA,IACpB,OAAO,EAAE,UAAU,eAAe;AAAA,EACpC;AAEA,SAAO,aAAa,KAAK,QAAQ;AACnC;AAEA,eAAsB,IAAI,KAAc;AACtC,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,KAAM,QAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAE9E,MAAI;AACJ,MAAI;AACF,cAAU,MAAM,IAAI,KAAK;AAAA,EAC3B,QAAQ;AACN,WAAO,aAAa,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC1E;AACA,QAAM,SAAS,yBAAyB,UAAU,OAAO;AACzD,MAAI,CAAC,OAAO,SAAS;AACnB,WAAO,aAAa,KAAK,EAAE,OAAO,mBAAmB,QAAQ,OAAO,MAAM,OAAO,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrG;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,EAAE,QAAQ,IAAI;AACpB,QAAM,KAAK,QAAQ,IAAI;AACvB,QAAM,OAAO,QAAQ,aAAa;AAClC,QAAM,MAAM,MAAM,KAAK,QAAQ,KAAK,KAAK,EAAE,UAAU,KAAK,YAAY,MAAM,gBAAgB,KAAK,SAAS,KAAK,CAAC;AAChH,MAAI,CAAC,IAAI,gBAAgB,CAAC,WAAW,IAAI,UAAU,OAAO,GAAG;AAC3D,WAAO,aAAa,KAAK,EAAE,OAAO,YAAY,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAClE;AAEA,QAAM,UAAU,MAAM,eAAe;AACrC,QAAM,iBAAiB,IAAI,IAAI,QAAQ,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC;AAChE,QAAM,YAAY,OAAO,KAAK,UAAU,OAAO,CAAC,OAAO,eAAe,IAAI,EAAE,CAAC;AAE7E,QAAM,WAAW,KAAK,YAAY;AAClC,QAAM,iBAAiB,KAAK,SAAS;AAErC,QAAM,aAAa,MAAM,GAAG,QAAQ,MAAM,EAAE,IAAI,OAAO,KAAK,QAAQ,WAAW,KAAK,CAAC;AACrF,MAAI,CAAC,cAAe,aAAa,WAAW,YAAY,UAAU,UAAW;AAC3E,WAAO,aAAa,KAAK,EAAE,OAAO,iBAAiB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACvE;AAEA,QAAM,cAAc,MAAM,0BAA0B,WAAW;AAAA,IAC7D,UAAU,YAAY;AAAA,IACtB;AAAA,IACA,QAAQ,OAAO,KAAK,GAAG;AAAA,IACvB,cAAc;AAAA,IACd,YAAY,OAAO,KAAK;AAAA,IACxB,WAAW;AAAA,IACX,eAAe,IAAI;AAAA,IACnB,gBAAgB,IAAI;AAAA,IACpB,iBAAiB,EAAE,QAAQ,OAAO,KAAK,QAAQ,MAAM,OAAO,KAAK,MAAM,UAAU;AAAA,EACnF,CAAC;AACD,MAAI,eAAe,CAAC,YAAY,IAAI;AAClC,WAAO,aAAa,KAAK,YAAY,MAAM,EAAE,QAAQ,YAAY,OAAO,CAAC;AAAA,EAC3E;AAEA,MAAI,SAAS,MAAM,GAAG,QAAQ,sBAAsB;AAAA,IAClD,QAAQ,OAAO,KAAK;AAAA,IACpB;AAAA,IACA;AAAA,IACA,WAAW;AAAA,EACb,CAAC;AAED,MAAI,OAAO,KAAK,SAAS,WAAW;AAClC,QAAI,QAAQ;AACV,YAAM,GAAG,OAAO,MAAM,EAAE,MAAM;AAAA,IAChC;AACA,QAAI,aAAa,MAAM,YAAY,uBAAuB;AACxD,YAAM,iCAAiC,WAAW;AAAA,QAChD,UAAU,YAAY;AAAA,QACtB;AAAA,QACA,QAAQ,OAAO,KAAK,GAAG;AAAA,QACvB,cAAc;AAAA,QACd,YAAY,OAAO,KAAK;AAAA,QACxB,WAAW;AAAA,QACX,eAAe,IAAI;AAAA,QACnB,gBAAgB,IAAI;AAAA,QACpB,UAAU,YAAY,YAAY;AAAA,MACpC,CAAC;AAAA,IACH;AACA,WAAO,aAAa,KAAK,EAAE,IAAI,MAAM,MAAM,WAAW,WAAW,CAAC,EAAE,CAAC;AAAA,EACvE;AAEA,MAAI,CAAC,QAAQ;AACX,aAAS,GAAG,OAAO,sBAAsB;AAAA,MACvC,QAAQ,OAAO,KAAK;AAAA,MACpB;AAAA,MACA;AAAA,MACA,MAAM;AAAA,MACN,eAAe;AAAA,IACjB,CAAC;AACD,OAAG,QAAQ,MAAM;AAAA,EACnB,OAAO;AACL,WAAO,OAAO;AACd,WAAO,gBAAgB;AAAA,EACzB;AACA,QAAM,GAAG,MAAM;AAEf,MAAI,aAAa,MAAM,YAAY,uBAAuB;AACxD,UAAM,iCAAiC,WAAW;AAAA,MAChD,UAAU,YAAY;AAAA,MACtB;AAAA,MACA,QAAQ,OAAO,KAAK,GAAG;AAAA,MACvB,cAAc;AAAA,MACd,YAAY,OAAO,KAAK;AAAA,MACxB,WAAW;AAAA,MACX,eAAe,IAAI;AAAA,MACnB,gBAAgB,IAAI;AAAA,MACpB,UAAU,YAAY,YAAY;AAAA,IACpC,CAAC;AAAA,EACH;AAEA,SAAO,aAAa,KAAK,EAAE,IAAI,MAAM,MAAM,YAAY,UAAU,CAAC;AACpE;AAEA,MAAM,yBAAyB,EAAE,OAAO;AAAA,EACtC,QAAQ,EAAE,OAAO,EAAE,KAAK;AAAA,EACxB,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACrC,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAC7C,CAAC;AAED,MAAM,oBAAsC;AAAA,EAC1C,SAAS;AAAA,EACT,aAAa;AAAA,EACb,MAAM,CAAC,aAAa;AAAA,EACpB,OAAO;AAAA,EACP,WAAW;AAAA,IACT,EAAE,QAAQ,KAAK,aAAa,iCAAiC,QAAQ,mCAAmC;AAAA,EAC1G;AAAA,EACA,QAAQ;AAAA,IACN,EAAE,QAAQ,KAAK,aAAa,2BAA2B,QAAQ,sBAAsB;AAAA,IACrF,EAAE,QAAQ,KAAK,aAAa,2BAA2B,QAAQ,sBAAsB;AAAA,IACrF,EAAE,QAAQ,KAAK,aAAa,mDAAmD,QAAQ,sBAAsB;AAAA,EAC/G;AACF;AAEA,MAAM,oBAAsC;AAAA,EAC1C,SAAS;AAAA,EACT,aAAa;AAAA,EACb,MAAM,CAAC,aAAa;AAAA,EACpB,aAAa;AAAA,IACX,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,aAAa;AAAA,EACf;AAAA,EACA,WAAW;AAAA,IACT,EAAE,QAAQ,KAAK,aAAa,oBAAoB,QAAQ,yCAAyC;AAAA,EACnG;AAAA,EACA,QAAQ;AAAA,IACN,EAAE,QAAQ,KAAK,aAAa,sCAAsC,QAAQ,sBAAsB;AAAA,IAChG,EAAE,QAAQ,KAAK,aAAa,2BAA2B,QAAQ,sBAAsB;AAAA,IACrF,EAAE,QAAQ,KAAK,aAAa,mDAAmD,QAAQ,sBAAsB;AAAA,EAC/G;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,IACL,KAAK;AAAA,EACP;AACF;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { DashboardUserWidgets } from '@open-mercato/core/modules/dashboards/data/entities'\nimport { User } from '@open-mercato/core/modules/auth/data/entities'\nimport { userWidgetSettingsSchema } from '@open-mercato/core/modules/dashboards/data/validators'\nimport { loadAllWidgets } from '@open-mercato/core/modules/dashboards/lib/widgets'\nimport { resolveAllowedWidgetIds } from '@open-mercato/core/modules/dashboards/lib/access'\nimport {\n  resolveWidgetAssignmentReadScope,\n  resolveWidgetAssignmentTargetAccess,\n} from '@open-mercato/core/modules/dashboards/lib/widgetAssignmentScope'\nimport { hasFeature } from '@open-mercato/shared/security/features'\nimport {\n  runCrudMutationGuardAfterSuccess,\n  validateCrudMutationGuard,\n} from '@open-mercato/shared/lib/crud/mutation-guard'\nimport type { OpenApiMethodDoc, OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport {\n  dashboardsTag,\n  dashboardsErrorSchema,\n  dashboardUserWidgetsResponseSchema,\n  dashboardUserWidgetsUpdateResponseSchema,\n} from '../../openapi'\n\nconst FEATURE = 'dashboards.admin.assign-widgets'\nconst RESOURCE_KIND = 'dashboards.userWidgets'\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: [FEATURE] },\n  PUT: { requireAuth: true, requireFeatures: [FEATURE] },\n}\n\nexport async function GET(req: Request) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth) return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n\n  const url = new URL(req.url)\n  const userId = url.searchParams.get('userId')\n  if (!userId) return NextResponse.json({ error: 'userId is required' }, { status: 400 })\n\n  const container = await createRequestContainer()\n  const em = container.resolve('em') as any\n  const rbac = container.resolve('rbacService') as any\n  const acl = await rbac.loadAcl(auth.sub, { tenantId: auth.tenantId ?? null, organizationId: auth.orgId ?? null })\n  if (!acl.isSuperAdmin && !hasFeature(acl.features, FEATURE)) {\n    return NextResponse.json({ error: 'Forbidden' }, { status: 403 })\n  }\n\n  const { tenantId, organizationId } = resolveWidgetAssignmentReadScope({\n    auth: { tenantId: auth.tenantId ?? null, orgId: auth.orgId ?? null },\n    isSuperAdmin: !!acl.isSuperAdmin,\n    queryTenantId: url.searchParams.get('tenantId'),\n    queryOrganizationId: url.searchParams.get('organizationId'),\n  })\n\n  const targetUserForRead = await em.findOne(User, { id: userId, deletedAt: null })\n  const readAccess = resolveWidgetAssignmentTargetAccess({\n    isSuperAdmin: !!acl.isSuperAdmin,\n    scopeTenantId: tenantId,\n    target: targetUserForRead,\n  })\n  if (readAccess === 'forbidden') {\n    return NextResponse.json({ error: 'Forbidden' }, { status: 403 })\n  }\n  if (readAccess === 'not-found') {\n    return NextResponse.json({ error: 'User not found' }, { status: 404 })\n  }\n\n  const widgets = await loadAllWidgets()\n  const targetAcl = await rbac.loadAcl(userId, { tenantId, organizationId })\n  const allowed = await resolveAllowedWidgetIds(\n    em,\n    {\n      userId,\n      tenantId,\n      organizationId,\n      features: targetAcl.features ?? [],\n      isSuperAdmin: !!targetAcl.isSuperAdmin,\n    },\n    widgets,\n  )\n\n  const record = await em.findOne(DashboardUserWidgets, {\n    userId,\n    tenantId,\n    organizationId,\n    deletedAt: null,\n  })\n\n  const response = {\n    mode: record ? record.mode : 'inherit',\n    widgetIds: record && record.mode === 'override' ? record.widgetIdsJson : [],\n    hasCustom: !!record && record.mode === 'override',\n    effectiveWidgetIds: allowed,\n    scope: { tenantId, organizationId },\n  }\n\n  return NextResponse.json(response)\n}\n\nexport async function PUT(req: Request) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth) return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n\n  let payload: unknown\n  try {\n    payload = await req.json()\n  } catch {\n    return NextResponse.json({ error: 'Invalid JSON body' }, { status: 400 })\n  }\n  const parsed = userWidgetSettingsSchema.safeParse(payload)\n  if (!parsed.success) {\n    return NextResponse.json({ error: 'Invalid payload', issues: parsed.error.issues }, { status: 400 })\n  }\n\n  const container = await createRequestContainer()\n  const { resolve } = container\n  const em = resolve('em') as any\n  const rbac = resolve('rbacService') as any\n  const acl = await rbac.loadAcl(auth.sub, { tenantId: auth.tenantId ?? null, organizationId: auth.orgId ?? null })\n  if (!acl.isSuperAdmin && !hasFeature(acl.features, FEATURE)) {\n    return NextResponse.json({ error: 'Forbidden' }, { status: 403 })\n  }\n\n  const widgets = await loadAllWidgets()\n  const validWidgetIds = new Set(widgets.map((w) => w.metadata.id))\n  const widgetIds = parsed.data.widgetIds.filter((id) => validWidgetIds.has(id))\n\n  const tenantId = auth.tenantId ?? null\n  const organizationId = auth.orgId ?? null\n\n  const targetUser = await em.findOne(User, { id: parsed.data.userId, deletedAt: null })\n  const writeAccess = resolveWidgetAssignmentTargetAccess({\n    isSuperAdmin: !!acl.isSuperAdmin,\n    scopeTenantId: tenantId,\n    target: targetUser,\n  })\n  if (writeAccess === 'forbidden') {\n    return NextResponse.json({ error: 'Forbidden' }, { status: 403 })\n  }\n  if (writeAccess === 'not-found') {\n    return NextResponse.json({ error: 'User not found' }, { status: 404 })\n  }\n\n  const guardResult = await validateCrudMutationGuard(container, {\n    tenantId: tenantId ?? '',\n    organizationId,\n    userId: String(auth.sub),\n    resourceKind: RESOURCE_KIND,\n    resourceId: parsed.data.userId,\n    operation: 'update',\n    requestMethod: req.method,\n    requestHeaders: req.headers,\n    mutationPayload: { userId: parsed.data.userId, mode: parsed.data.mode, widgetIds },\n  })\n  if (guardResult && !guardResult.ok) {\n    return NextResponse.json(guardResult.body, { status: guardResult.status })\n  }\n\n  let record = await em.findOne(DashboardUserWidgets, {\n    userId: parsed.data.userId,\n    tenantId,\n    organizationId,\n    deletedAt: null,\n  })\n\n  if (parsed.data.mode === 'inherit') {\n    if (record) {\n      await em.remove(record).flush()\n    }\n    if (guardResult?.ok && guardResult.shouldRunAfterSuccess) {\n      await runCrudMutationGuardAfterSuccess(container, {\n        tenantId: tenantId ?? '',\n        organizationId,\n        userId: String(auth.sub),\n        resourceKind: RESOURCE_KIND,\n        resourceId: parsed.data.userId,\n        operation: 'update',\n        requestMethod: req.method,\n        requestHeaders: req.headers,\n        metadata: guardResult.metadata ?? null,\n      })\n    }\n    return NextResponse.json({ ok: true, mode: 'inherit', widgetIds: [] })\n  }\n\n  if (!record) {\n    record = em.create(DashboardUserWidgets, {\n      userId: parsed.data.userId,\n      tenantId,\n      organizationId,\n      mode: 'override',\n      widgetIdsJson: widgetIds,\n    })\n    em.persist(record)\n  } else {\n    record.mode = 'override'\n    record.widgetIdsJson = widgetIds\n  }\n  await em.flush()\n\n  if (guardResult?.ok && guardResult.shouldRunAfterSuccess) {\n    await runCrudMutationGuardAfterSuccess(container, {\n      tenantId: tenantId ?? '',\n      organizationId,\n      userId: String(auth.sub),\n      resourceKind: RESOURCE_KIND,\n      resourceId: parsed.data.userId,\n      operation: 'update',\n      requestMethod: req.method,\n      requestHeaders: req.headers,\n      metadata: guardResult.metadata ?? null,\n    })\n  }\n\n  return NextResponse.json({ ok: true, mode: 'override', widgetIds })\n}\n\nconst userWidgetsQuerySchema = z.object({\n  userId: z.string().uuid(),\n  tenantId: z.string().uuid().optional(),\n  organizationId: z.string().uuid().optional(),\n})\n\nconst userWidgetsGetDoc: OpenApiMethodDoc = {\n  summary: 'Read widget overrides for a user',\n  description: 'Returns the widgets inherited and explicitly configured for the requested user within the current scope.',\n  tags: [dashboardsTag],\n  query: userWidgetsQuerySchema,\n  responses: [\n    { status: 200, description: 'Widget settings for the user.', schema: dashboardUserWidgetsResponseSchema },\n  ],\n  errors: [\n    { status: 400, description: 'Missing user identifier', schema: dashboardsErrorSchema },\n    { status: 401, description: 'Authentication required', schema: dashboardsErrorSchema },\n    { status: 403, description: 'Insufficient permissions to manage user widgets', schema: dashboardsErrorSchema },\n  ],\n}\n\nconst userWidgetsPutDoc: OpenApiMethodDoc = {\n  summary: 'Update user-specific dashboard widgets',\n  description: 'Sets the widget override mode and allowed widgets for a user. Passing `mode: inherit` clears overrides.',\n  tags: [dashboardsTag],\n  requestBody: {\n    contentType: 'application/json',\n    schema: userWidgetSettingsSchema,\n    description: 'User identifier, override mode, and widget ids. Scope is derived from the authenticated session.',\n  },\n  responses: [\n    { status: 200, description: 'Overrides saved.', schema: dashboardUserWidgetsUpdateResponseSchema },\n  ],\n  errors: [\n    { status: 400, description: 'Invalid payload or unknown widgets', schema: dashboardsErrorSchema },\n    { status: 401, description: 'Authentication required', schema: dashboardsErrorSchema },\n    { status: 403, description: 'Insufficient permissions to manage user widgets', schema: dashboardsErrorSchema },\n  ],\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: dashboardsTag,\n  summary: 'Manage user-level dashboard widgets',\n  methods: {\n    GET: userWidgetsGetDoc,\n    PUT: userWidgetsPutDoc,\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AACvC,SAAS,4BAA4B;AACrC,SAAS,YAAY;AACrB,SAAS,gCAAgC;AACzC,SAAS,sBAAsB;AAC/B,SAAS,+BAA+B;AACxC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,kBAAkB;AAC3B;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAEP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP,MAAM,UAAU;AAChB,MAAM,gBAAgB;AAEf,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,OAAO,EAAE;AAAA,EACrD,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,OAAO,EAAE;AACvD;AAEA,eAAsB,IAAI,KAAc;AACtC,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,KAAM,QAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAE9E,QAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,QAAM,SAAS,IAAI,aAAa,IAAI,QAAQ;AAC5C,MAAI,CAAC,OAAQ,QAAO,aAAa,KAAK,EAAE,OAAO,qBAAqB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAEtF,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,QAAM,OAAO,UAAU,QAAQ,aAAa;AAC5C,QAAM,MAAM,MAAM,KAAK,QAAQ,KAAK,KAAK,EAAE,UAAU,KAAK,YAAY,MAAM,gBAAgB,KAAK,SAAS,KAAK,CAAC;AAChH,MAAI,CAAC,IAAI,gBAAgB,CAAC,WAAW,IAAI,UAAU,OAAO,GAAG;AAC3D,WAAO,aAAa,KAAK,EAAE,OAAO,YAAY,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAClE;AAEA,QAAM,EAAE,UAAU,eAAe,IAAI,iCAAiC;AAAA,IACpE,MAAM,EAAE,UAAU,KAAK,YAAY,MAAM,OAAO,KAAK,SAAS,KAAK;AAAA,IACnE,cAAc,CAAC,CAAC,IAAI;AAAA,IACpB,eAAe,IAAI,aAAa,IAAI,UAAU;AAAA,IAC9C,qBAAqB,IAAI,aAAa,IAAI,gBAAgB;AAAA,EAC5D,CAAC;AAED,QAAM,oBAAoB,MAAM,GAAG,QAAQ,MAAM,EAAE,IAAI,QAAQ,WAAW,KAAK,CAAC;AAChF,QAAM,aAAa,oCAAoC;AAAA,IACrD,cAAc,CAAC,CAAC,IAAI;AAAA,IACpB,eAAe;AAAA,IACf,QAAQ;AAAA,EACV,CAAC;AACD,MAAI,eAAe,aAAa;AAC9B,WAAO,aAAa,KAAK,EAAE,OAAO,YAAY,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAClE;AACA,MAAI,eAAe,aAAa;AAC9B,WAAO,aAAa,KAAK,EAAE,OAAO,iBAAiB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACvE;AAEA,QAAM,UAAU,MAAM,eAAe;AACrC,QAAM,YAAY,MAAM,KAAK,QAAQ,QAAQ,EAAE,UAAU,eAAe,CAAC;AACzE,QAAM,UAAU,MAAM;AAAA,IACpB;AAAA,IACA;AAAA,MACE;AAAA,MACA;AAAA,MACA;AAAA,MACA,UAAU,UAAU,YAAY,CAAC;AAAA,MACjC,cAAc,CAAC,CAAC,UAAU;AAAA,IAC5B;AAAA,IACA;AAAA,EACF;AAEA,QAAM,SAAS,MAAM,GAAG,QAAQ,sBAAsB;AAAA,IACpD;AAAA,IACA;AAAA,IACA;AAAA,IACA,WAAW;AAAA,EACb,CAAC;AAED,QAAM,WAAW;AAAA,IACf,MAAM,SAAS,OAAO,OAAO;AAAA,IAC7B,WAAW,UAAU,OAAO,SAAS,aAAa,OAAO,gBAAgB,CAAC;AAAA,IAC1E,WAAW,CAAC,CAAC,UAAU,OAAO,SAAS;AAAA,IACvC,oBAAoB;AAAA,IACpB,OAAO,EAAE,UAAU,eAAe;AAAA,EACpC;AAEA,SAAO,aAAa,KAAK,QAAQ;AACnC;AAEA,eAAsB,IAAI,KAAc;AACtC,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,KAAM,QAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAE9E,MAAI;AACJ,MAAI;AACF,cAAU,MAAM,IAAI,KAAK;AAAA,EAC3B,QAAQ;AACN,WAAO,aAAa,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC1E;AACA,QAAM,SAAS,yBAAyB,UAAU,OAAO;AACzD,MAAI,CAAC,OAAO,SAAS;AACnB,WAAO,aAAa,KAAK,EAAE,OAAO,mBAAmB,QAAQ,OAAO,MAAM,OAAO,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrG;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,EAAE,QAAQ,IAAI;AACpB,QAAM,KAAK,QAAQ,IAAI;AACvB,QAAM,OAAO,QAAQ,aAAa;AAClC,QAAM,MAAM,MAAM,KAAK,QAAQ,KAAK,KAAK,EAAE,UAAU,KAAK,YAAY,MAAM,gBAAgB,KAAK,SAAS,KAAK,CAAC;AAChH,MAAI,CAAC,IAAI,gBAAgB,CAAC,WAAW,IAAI,UAAU,OAAO,GAAG;AAC3D,WAAO,aAAa,KAAK,EAAE,OAAO,YAAY,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAClE;AAEA,QAAM,UAAU,MAAM,eAAe;AACrC,QAAM,iBAAiB,IAAI,IAAI,QAAQ,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC;AAChE,QAAM,YAAY,OAAO,KAAK,UAAU,OAAO,CAAC,OAAO,eAAe,IAAI,EAAE,CAAC;AAE7E,QAAM,WAAW,KAAK,YAAY;AAClC,QAAM,iBAAiB,KAAK,SAAS;AAErC,QAAM,aAAa,MAAM,GAAG,QAAQ,MAAM,EAAE,IAAI,OAAO,KAAK,QAAQ,WAAW,KAAK,CAAC;AACrF,QAAM,cAAc,oCAAoC;AAAA,IACtD,cAAc,CAAC,CAAC,IAAI;AAAA,IACpB,eAAe;AAAA,IACf,QAAQ;AAAA,EACV,CAAC;AACD,MAAI,gBAAgB,aAAa;AAC/B,WAAO,aAAa,KAAK,EAAE,OAAO,YAAY,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAClE;AACA,MAAI,gBAAgB,aAAa;AAC/B,WAAO,aAAa,KAAK,EAAE,OAAO,iBAAiB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACvE;AAEA,QAAM,cAAc,MAAM,0BAA0B,WAAW;AAAA,IAC7D,UAAU,YAAY;AAAA,IACtB;AAAA,IACA,QAAQ,OAAO,KAAK,GAAG;AAAA,IACvB,cAAc;AAAA,IACd,YAAY,OAAO,KAAK;AAAA,IACxB,WAAW;AAAA,IACX,eAAe,IAAI;AAAA,IACnB,gBAAgB,IAAI;AAAA,IACpB,iBAAiB,EAAE,QAAQ,OAAO,KAAK,QAAQ,MAAM,OAAO,KAAK,MAAM,UAAU;AAAA,EACnF,CAAC;AACD,MAAI,eAAe,CAAC,YAAY,IAAI;AAClC,WAAO,aAAa,KAAK,YAAY,MAAM,EAAE,QAAQ,YAAY,OAAO,CAAC;AAAA,EAC3E;AAEA,MAAI,SAAS,MAAM,GAAG,QAAQ,sBAAsB;AAAA,IAClD,QAAQ,OAAO,KAAK;AAAA,IACpB;AAAA,IACA;AAAA,IACA,WAAW;AAAA,EACb,CAAC;AAED,MAAI,OAAO,KAAK,SAAS,WAAW;AAClC,QAAI,QAAQ;AACV,YAAM,GAAG,OAAO,MAAM,EAAE,MAAM;AAAA,IAChC;AACA,QAAI,aAAa,MAAM,YAAY,uBAAuB;AACxD,YAAM,iCAAiC,WAAW;AAAA,QAChD,UAAU,YAAY;AAAA,QACtB;AAAA,QACA,QAAQ,OAAO,KAAK,GAAG;AAAA,QACvB,cAAc;AAAA,QACd,YAAY,OAAO,KAAK;AAAA,QACxB,WAAW;AAAA,QACX,eAAe,IAAI;AAAA,QACnB,gBAAgB,IAAI;AAAA,QACpB,UAAU,YAAY,YAAY;AAAA,MACpC,CAAC;AAAA,IACH;AACA,WAAO,aAAa,KAAK,EAAE,IAAI,MAAM,MAAM,WAAW,WAAW,CAAC,EAAE,CAAC;AAAA,EACvE;AAEA,MAAI,CAAC,QAAQ;AACX,aAAS,GAAG,OAAO,sBAAsB;AAAA,MACvC,QAAQ,OAAO,KAAK;AAAA,MACpB;AAAA,MACA;AAAA,MACA,MAAM;AAAA,MACN,eAAe;AAAA,IACjB,CAAC;AACD,OAAG,QAAQ,MAAM;AAAA,EACnB,OAAO;AACL,WAAO,OAAO;AACd,WAAO,gBAAgB;AAAA,EACzB;AACA,QAAM,GAAG,MAAM;AAEf,MAAI,aAAa,MAAM,YAAY,uBAAuB;AACxD,UAAM,iCAAiC,WAAW;AAAA,MAChD,UAAU,YAAY;AAAA,MACtB;AAAA,MACA,QAAQ,OAAO,KAAK,GAAG;AAAA,MACvB,cAAc;AAAA,MACd,YAAY,OAAO,KAAK;AAAA,MACxB,WAAW;AAAA,MACX,eAAe,IAAI;AAAA,MACnB,gBAAgB,IAAI;AAAA,MACpB,UAAU,YAAY,YAAY;AAAA,IACpC,CAAC;AAAA,EACH;AAEA,SAAO,aAAa,KAAK,EAAE,IAAI,MAAM,MAAM,YAAY,UAAU,CAAC;AACpE;AAEA,MAAM,yBAAyB,EAAE,OAAO;AAAA,EACtC,QAAQ,EAAE,OAAO,EAAE,KAAK;AAAA,EACxB,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACrC,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAC7C,CAAC;AAED,MAAM,oBAAsC;AAAA,EAC1C,SAAS;AAAA,EACT,aAAa;AAAA,EACb,MAAM,CAAC,aAAa;AAAA,EACpB,OAAO;AAAA,EACP,WAAW;AAAA,IACT,EAAE,QAAQ,KAAK,aAAa,iCAAiC,QAAQ,mCAAmC;AAAA,EAC1G;AAAA,EACA,QAAQ;AAAA,IACN,EAAE,QAAQ,KAAK,aAAa,2BAA2B,QAAQ,sBAAsB;AAAA,IACrF,EAAE,QAAQ,KAAK,aAAa,2BAA2B,QAAQ,sBAAsB;AAAA,IACrF,EAAE,QAAQ,KAAK,aAAa,mDAAmD,QAAQ,sBAAsB;AAAA,EAC/G;AACF;AAEA,MAAM,oBAAsC;AAAA,EAC1C,SAAS;AAAA,EACT,aAAa;AAAA,EACb,MAAM,CAAC,aAAa;AAAA,EACpB,aAAa;AAAA,IACX,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,aAAa;AAAA,EACf;AAAA,EACA,WAAW;AAAA,IACT,EAAE,QAAQ,KAAK,aAAa,oBAAoB,QAAQ,yCAAyC;AAAA,EACnG;AAAA,EACA,QAAQ;AAAA,IACN,EAAE,QAAQ,KAAK,aAAa,sCAAsC,QAAQ,sBAAsB;AAAA,IAChG,EAAE,QAAQ,KAAK,aAAa,2BAA2B,QAAQ,sBAAsB;AAAA,IACrF,EAAE,QAAQ,KAAK,aAAa,mDAAmD,QAAQ,sBAAsB;AAAA,EAC/G;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,IACL,KAAK;AAAA,EACP;AACF;",
   "names": []
 }

package/dist/modules/dashboards/cli.js

@@ -4,6 +4,7 @@ import { Role } from "@open-mercato/core/modules/auth/data/entities";
 import { loadAllWidgets } from "@open-mercato/core/modules/dashboards/lib/widgets";
 import { appendWidgetsToRoles, resolveAnalyticsWidgetIds } from "@open-mercato/core/modules/dashboards/lib/role-widgets";
 import { seedAnalyticsData } from "./seed/analytics.js";
+import { parseCommaSeparatedList } from "@open-mercato/shared/lib/string";
 function parseArgs(rest) {
   const args = {};
   for (let i = 0; i < rest.length; i += 2) {
@@ -84,7 +85,7 @@ const seedDefaults = {
       console.error("Usage: mercato dashboards seed-defaults --tenant <tenantId> [--roles superadmin,admin,employee] [--widgets id1,id2]");
       return;
     }
-    const roleNames = roleCsv.split(",").map((name) => name.trim()).filter(Boolean);
+    const roleNames = parseCommaSeparatedList(roleCsv);
     if (!roleNames.length) {
       console.log("No roles provided, nothing to seed.");
       return;
@@ -95,7 +96,7 @@ const seedDefaults = {
       tenantId,
       organizationId,
       roleNames,
-      widgetIds: widgetCsv ? widgetCsv.split(",").map((id) => id.trim()).filter(Boolean) : void 0,
+      widgetIds: widgetCsv ? parseCommaSeparatedList(widgetCsv) : void 0,
       logger: (message) => console.log(message)
     });
   }
@@ -111,7 +112,7 @@ const enableAnalyticsWidgets = {
       console.error("Usage: mercato dashboards enable-analytics-widgets --tenant <tenantId> [--org <orgId>] [--roles admin,employee]");
       return;
     }
-    const roleNames = roleCsv.split(",").map((name) => name.trim()).filter(Boolean);
+    const roleNames = parseCommaSeparatedList(roleCsv);
     if (!roleNames.length) {
       console.log("No roles provided, nothing to update.");
       return;

package/dist/modules/dashboards/cli.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../src/modules/dashboards/cli.ts"],
-  "sourcesContent": ["import type { ModuleCli } from '@open-mercato/shared/modules/registry'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { DashboardRoleWidgets } from '@open-mercato/core/modules/dashboards/data/entities'\nimport { Role } from '@open-mercato/core/modules/auth/data/entities'\nimport { loadAllWidgets } from '@open-mercato/core/modules/dashboards/lib/widgets'\nimport { appendWidgetsToRoles, resolveAnalyticsWidgetIds } from '@open-mercato/core/modules/dashboards/lib/role-widgets'\nimport { seedAnalyticsData } from './seed/analytics'\n\ntype Args = Record<string, string>\n\nfunction parseArgs(rest: string[]): Args {\n  const args: Args = {}\n  for (let i = 0; i < rest.length; i += 2) {\n    const key = rest[i]?.replace(/^--/, '')\n    const value = rest[i + 1]\n    if (key) args[key] = value ?? ''\n  }\n  return args\n}\n\nexport async function seedDashboardDefaultsForTenant(\n  em: EntityManager,\n  {\n    tenantId,\n    organizationId = null,\n    roleNames = ['superadmin', 'admin', 'employee'],\n    widgetIds,\n    logger,\n  }: {\n    tenantId: string\n    organizationId?: string | null\n    roleNames?: string[]\n    widgetIds?: string[]\n    logger?: (message: string) => void\n  },\n): Promise<boolean> {\n  if (!tenantId) throw new Error('tenantId is required')\n  const log = logger ?? (() => {})\n\n  const widgets = await loadAllWidgets()\n  const widgetMap = new Map(widgets.map((widget) => [widget.metadata.id, widget]))\n  const resolvedWidgetIds = widgetIds && widgetIds.length\n    ? widgetIds.filter((id) => widgetMap.has(id))\n    : null\n  const defaultWidgetIds = widgets\n    .filter((widget) => widget.metadata.defaultEnabled)\n    .map((widget) => widget.metadata.id)\n  const allWidgetIds = widgets.map((widget) => widget.metadata.id)\n\n  if (resolvedWidgetIds && resolvedWidgetIds.length === 0) {\n    log('No widgets resolved for dashboard seeding.')\n    return false\n  }\n\n  await em.transactional(async (tem) => {\n    for (const roleName of roleNames) {\n      const isAdminRole = roleName === 'admin' || roleName === 'superadmin'\n      const roleWidgetIds = resolvedWidgetIds ?? (isAdminRole ? allWidgetIds : defaultWidgetIds)\n      if (!roleWidgetIds.length) {\n        log(`No widgets resolved for role \"${roleName}\".`)\n        continue\n      }\n      const role = await tem.findOne(Role, { name: roleName })\n      if (!role) {\n        log(`Skipping role \"${roleName}\" (not found)`)\n        continue\n      }\n      const existing = await tem.findOne(DashboardRoleWidgets, {\n        roleId: String(role.id),\n        tenantId,\n        organizationId,\n        deletedAt: null,\n      })\n      if (existing) {\n        existing.widgetIdsJson = roleWidgetIds\n        tem.persist(existing)\n        log(`Updated dashboard widgets for role \"${roleName}\"`)\n      } else {\n        const record = tem.create(DashboardRoleWidgets, {\n          roleId: String(role.id),\n          tenantId,\n          organizationId,\n          widgetIdsJson: roleWidgetIds,\n          createdAt: new Date(),\n          updatedAt: null,\n          deletedAt: null,\n        })\n        tem.persist(record)\n        log(`Created dashboard widgets for role \"${roleName}\"`)\n      }\n    }\n  })\n\n  return true\n}\n\nconst seedDefaults: ModuleCli = {\n  command: 'seed-defaults',\n  async run(rest) {\n    const args = parseArgs(rest)\n    const tenantId = args.tenant || args.tenantId || null\n    const organizationId = args.organization || args.organizationId || null\n    const roleCsv = args.roles || 'superadmin,admin,employee'\n    const widgetCsv = args.widgets || ''\n    if (!tenantId) {\n      console.error('Usage: mercato dashboards seed-defaults --tenant <tenantId> [--roles superadmin,admin,employee] [--widgets id1,id2]')\n      return\n    }\n\n    const roleNames = roleCsv\n      .split(',')\n      .map((name) => name.trim())\n      .filter(Boolean)\n\n    if (!roleNames.length) {\n      console.log('No roles provided, nothing to seed.')\n      return\n    }\n\n    const { resolve } = await createRequestContainer()\n    const em = resolve('em') as any\n\n    await seedDashboardDefaultsForTenant(em as EntityManager, {\n      tenantId,\n      organizationId,\n      roleNames,\n      widgetIds: widgetCsv ? widgetCsv.split(',').map((id) => id.trim()).filter(Boolean) : undefined,\n      logger: (message) => console.log(message),\n    })\n  },\n}\n\nconst enableAnalyticsWidgets: ModuleCli = {\n  command: 'enable-analytics-widgets',\n  async run(rest) {\n    const args = parseArgs(rest)\n    const tenantId = args.tenant || args.tenantId || null\n    const organizationId = args.organization || args.organizationId || args.org || null\n    const roleCsv = args.roles || 'admin,employee'\n    if (!tenantId) {\n      console.error('Usage: mercato dashboards enable-analytics-widgets --tenant <tenantId> [--org <orgId>] [--roles admin,employee]')\n      return\n    }\n\n    const roleNames = roleCsv\n      .split(',')\n      .map((name) => name.trim())\n      .filter(Boolean)\n\n    if (!roleNames.length) {\n      console.log('No roles provided, nothing to update.')\n      return\n    }\n\n    const { resolve } = await createRequestContainer()\n    const em = resolve('em') as EntityManager\n    const widgetIds = await resolveAnalyticsWidgetIds()\n\n    const updated = await appendWidgetsToRoles(em, {\n      tenantId,\n      organizationId,\n      roleNames,\n      widgetIds,\n    })\n\n    if (!updated) {\n      console.log('No dashboard role widgets updated.')\n    }\n  },\n}\n\nconst seedAnalytics: ModuleCli = {\n  command: 'seed-analytics',\n  async run(rest) {\n    const args = parseArgs(rest)\n    const tenantId = args.tenant || args.tenantId || null\n    const organizationId = args.organization || args.organizationId || args.org || null\n    const months = args.months ? parseInt(args.months, 10) : 6\n    const ordersPerMonth = args.ordersPerMonth ? parseInt(args.ordersPerMonth, 10) : 50\n\n    if (!tenantId || !organizationId) {\n      console.error('Usage: mercato dashboards seed-analytics --tenant <tenantId> --organization <organizationId> [--months 6] [--ordersPerMonth 50]')\n      return\n    }\n\n    const { resolve } = await createRequestContainer()\n    const em = resolve('em') as EntityManager\n\n    console.log(`Seeding analytics data for ${months} months with ~${ordersPerMonth} orders/month...`)\n\n    try {\n      const result = await em.transactional(async (tem) =>\n        seedAnalyticsData(tem, { tenantId, organizationId }, { months, ordersPerMonth })\n      )\n\n      if (result.orders === 0) {\n        console.log('Analytics data already exists. Skipping seed.')\n      } else {\n        console.log(`Seeded analytics data:`)\n        console.log(`  - Orders: ${result.orders}`)\n        console.log(`  - Customers: ${result.customers}`)\n        console.log(`  - Products: ${result.products}`)\n        console.log(`  - Deals: ${result.deals}`)\n      }\n    } catch (error) {\n      console.error('Failed to seed analytics data:', error)\n    }\n  },\n}\n\nconst debugAnalytics: ModuleCli = {\n  command: 'debug-analytics',\n  async run(rest) {\n    const args = parseArgs(rest)\n    const tenantId = args.tenant || args.tenantId || null\n    const organizationId = args.organization || args.organizationId || args.org || null\n\n    if (!tenantId) {\n      console.error('Usage: mercato dashboards debug-analytics --tenant <tenantId> [--organization <organizationId>]')\n      return\n    }\n\n    const { resolve } = await createRequestContainer()\n    const em = resolve('em') as EntityManager\n    const conn = em.getConnection()\n\n    console.log('Checking analytics data...\\n')\n\n    const ordersResult = await conn.execute(\n      `SELECT COUNT(*) as total, MIN(placed_at) as earliest, MAX(placed_at) as latest\n       FROM sales_orders\n       WHERE tenant_id = ? AND order_number LIKE 'SO-ANALYTICS-%'`,\n      [tenantId]\n    )\n    console.log('Orders summary:', ordersResult[0])\n\n    const recentOrders = await conn.execute(\n      `SELECT order_number, placed_at, status, grand_total_gross_amount::numeric as total\n       FROM sales_orders\n       WHERE tenant_id = ? AND order_number LIKE 'SO-ANALYTICS-%'\n       ORDER BY placed_at DESC LIMIT 5`,\n      [tenantId]\n    )\n    console.log('\\nRecent orders:', recentOrders)\n\n    const januaryOrders = await conn.execute(\n      `SELECT COUNT(*) as count, SUM(grand_total_gross_amount::numeric) as total\n       FROM sales_orders\n       WHERE tenant_id = ?\n         AND order_number LIKE 'SO-ANALYTICS-%'\n         AND placed_at >= '2026-01-01'\n         AND placed_at <= '2026-01-31 23:59:59'`,\n      [tenantId]\n    )\n    console.log('\\nJanuary 2026 orders:', januaryOrders[0])\n\n    const allOrders = await conn.execute(\n      `SELECT COUNT(*) as count\n       FROM sales_orders\n       WHERE tenant_id = ?`,\n      [tenantId]\n    )\n    console.log('\\nTotal orders in tenant:', allOrders[0])\n\n    const orgCheck = await conn.execute(\n      `SELECT organization_id, COUNT(*) as count\n       FROM sales_orders\n       WHERE tenant_id = ? AND order_number LIKE 'SO-ANALYTICS-%'\n       GROUP BY organization_id`,\n      [tenantId]\n    )\n    console.log('\\nOrders by organization:', orgCheck)\n\n    if (organizationId) {\n      const orgOrders = await conn.execute(\n        `SELECT COUNT(*) as count, SUM(grand_total_gross_amount::numeric) as total\n         FROM sales_orders\n         WHERE tenant_id = ?\n           AND organization_id = ?\n           AND placed_at >= '2026-01-01'\n           AND placed_at <= '2026-01-31 23:59:59'`,\n        [tenantId, organizationId]\n      )\n      console.log(`\\nJanuary orders for org ${organizationId}:`, orgOrders[0])\n    }\n\n    // Check for NULL placed_at\n    const nullPlacedAt = await conn.execute(\n      `SELECT COUNT(*) as count\n       FROM sales_orders\n       WHERE tenant_id = ? AND placed_at IS NULL`,\n      [tenantId]\n    )\n    console.log('\\nOrders with NULL placed_at:', nullPlacedAt[0])\n\n    // Check non-analytics orders\n    const nonAnalytics = await conn.execute(\n      `SELECT order_number, placed_at, status, organization_id, grand_total_gross_amount::numeric as total\n       FROM sales_orders\n       WHERE tenant_id = ? AND order_number NOT LIKE 'SO-ANALYTICS-%'\n       ORDER BY placed_at DESC NULLS LAST LIMIT 10`,\n      [tenantId]\n    )\n    console.log('\\nNon-analytics orders:', nonAnalytics)\n\n    // Simulate widget query\n    console.log('\\n--- Simulating widget query for this_month ---')\n    const widgetQuery = await conn.execute(\n      `SELECT COALESCE(SUM(grand_total_gross_amount::numeric), 0) AS value\n       FROM sales_orders\n       WHERE tenant_id = ?\n         AND organization_id = ANY(?::uuid[])\n         AND deleted_at IS NULL\n         AND placed_at >= '2026-01-01'\n         AND placed_at <= '2026-01-31 23:59:59'`,\n      [tenantId, `{${organizationId}}`]\n    )\n    console.log('Widget query result (revenue sum):', widgetQuery[0])\n\n    const widgetCountQuery = await conn.execute(\n      `SELECT COUNT(*) AS value\n       FROM sales_orders\n       WHERE tenant_id = ?\n         AND organization_id = ANY(?::uuid[])\n         AND deleted_at IS NULL\n         AND placed_at >= '2026-01-01'\n         AND placed_at <= '2026-01-31 23:59:59'`,\n      [tenantId, `{${organizationId}}`]\n    )\n    console.log('Widget query result (order count):', widgetCountQuery[0])\n  },\n}\n\nexport default [seedDefaults, enableAnalyticsWidgets, seedAnalytics, debugAnalytics]\n"],
-  "mappings": "AACA,SAAS,8BAA8B;AAEvC,SAAS,4BAA4B;AACrC,SAAS,YAAY;AACrB,SAAS,sBAAsB;AAC/B,SAAS,sBAAsB,iCAAiC;AAChE,SAAS,yBAAyB;AAIlC,SAAS,UAAU,MAAsB;AACvC,QAAM,OAAa,CAAC;AACpB,WAAS,IAAI,GAAG,IAAI,KAAK,QAAQ,KAAK,GAAG;AACvC,UAAM,MAAM,KAAK,CAAC,GAAG,QAAQ,OAAO,EAAE;AACtC,UAAM,QAAQ,KAAK,IAAI,CAAC;AACxB,QAAI,IAAK,MAAK,GAAG,IAAI,SAAS;AAAA,EAChC;AACA,SAAO;AACT;AAEA,eAAsB,+BACpB,IACA;AAAA,EACE;AAAA,EACA,iBAAiB;AAAA,EACjB,YAAY,CAAC,cAAc,SAAS,UAAU;AAAA,EAC9C;AAAA,EACA;AACF,GAOkB;AAClB,MAAI,CAAC,SAAU,OAAM,IAAI,MAAM,sBAAsB;AACrD,QAAM,MAAM,WAAW,MAAM;AAAA,EAAC;AAE9B,QAAM,UAAU,MAAM,eAAe;AACrC,QAAM,YAAY,IAAI,IAAI,QAAQ,IAAI,CAAC,WAAW,CAAC,OAAO,SAAS,IAAI,MAAM,CAAC,CAAC;AAC/E,QAAM,oBAAoB,aAAa,UAAU,SAC7C,UAAU,OAAO,CAAC,OAAO,UAAU,IAAI,EAAE,CAAC,IAC1C;AACJ,QAAM,mBAAmB,QACtB,OAAO,CAAC,WAAW,OAAO,SAAS,cAAc,EACjD,IAAI,CAAC,WAAW,OAAO,SAAS,EAAE;AACrC,QAAM,eAAe,QAAQ,IAAI,CAAC,WAAW,OAAO,SAAS,EAAE;AAE/D,MAAI,qBAAqB,kBAAkB,WAAW,GAAG;AACvD,QAAI,4CAA4C;AAChD,WAAO;AAAA,EACT;AAEA,QAAM,GAAG,cAAc,OAAO,QAAQ;AACpC,eAAW,YAAY,WAAW;AAChC,YAAM,cAAc,aAAa,WAAW,aAAa;AACzD,YAAM,gBAAgB,sBAAsB,cAAc,eAAe;AACzE,UAAI,CAAC,cAAc,QAAQ;AACzB,YAAI,iCAAiC,QAAQ,IAAI;AACjD;AAAA,MACF;AACA,YAAM,OAAO,MAAM,IAAI,QAAQ,MAAM,EAAE,MAAM,SAAS,CAAC;AACvD,UAAI,CAAC,MAAM;AACT,YAAI,kBAAkB,QAAQ,eAAe;AAC7C;AAAA,MACF;AACA,YAAM,WAAW,MAAM,IAAI,QAAQ,sBAAsB;AAAA,QACvD,QAAQ,OAAO,KAAK,EAAE;AAAA,QACtB;AAAA,QACA;AAAA,QACA,WAAW;AAAA,MACb,CAAC;AACD,UAAI,UAAU;AACZ,iBAAS,gBAAgB;AACzB,YAAI,QAAQ,QAAQ;AACpB,YAAI,uCAAuC,QAAQ,GAAG;AAAA,MACxD,OAAO;AACL,cAAM,SAAS,IAAI,OAAO,sBAAsB;AAAA,UAC9C,QAAQ,OAAO,KAAK,EAAE;AAAA,UACtB;AAAA,UACA;AAAA,UACA,eAAe;AAAA,UACf,WAAW,oBAAI,KAAK;AAAA,UACpB,WAAW;AAAA,UACX,WAAW;AAAA,QACb,CAAC;AACD,YAAI,QAAQ,MAAM;AAClB,YAAI,uCAAuC,QAAQ,GAAG;AAAA,MACxD;AAAA,IACF;AAAA,EACF,CAAC;AAED,SAAO;AACT;AAEA,MAAM,eAA0B;AAAA,EAC9B,SAAS;AAAA,EACT,MAAM,IAAI,MAAM;AACd,UAAM,OAAO,UAAU,IAAI;AAC3B,UAAM,WAAW,KAAK,UAAU,KAAK,YAAY;AACjD,UAAM,iBAAiB,KAAK,gBAAgB,KAAK,kBAAkB;AACnE,UAAM,UAAU,KAAK,SAAS;AAC9B,UAAM,YAAY,KAAK,WAAW;AAClC,QAAI,CAAC,UAAU;AACb,cAAQ,MAAM,qHAAqH;AACnI;AAAA,IACF;AAEA,UAAM,YAAY,QACf,MAAM,GAAG,EACT,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC,EACzB,OAAO,OAAO;AAEjB,QAAI,CAAC,UAAU,QAAQ;AACrB,cAAQ,IAAI,qCAAqC;AACjD;AAAA,IACF;AAEA,UAAM,EAAE,QAAQ,IAAI,MAAM,uBAAuB;AACjD,UAAM,KAAK,QAAQ,IAAI;AAEvB,UAAM,+BAA+B,IAAqB;AAAA,MACxD;AAAA,MACA;AAAA,MACA;AAAA,MACA,WAAW,YAAY,UAAU,MAAM,GAAG,EAAE,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC,EAAE,OAAO,OAAO,IAAI;AAAA,MACrF,QAAQ,CAAC,YAAY,QAAQ,IAAI,OAAO;AAAA,IAC1C,CAAC;AAAA,EACH;AACF;AAEA,MAAM,yBAAoC;AAAA,EACxC,SAAS;AAAA,EACT,MAAM,IAAI,MAAM;AACd,UAAM,OAAO,UAAU,IAAI;AAC3B,UAAM,WAAW,KAAK,UAAU,KAAK,YAAY;AACjD,UAAM,iBAAiB,KAAK,gBAAgB,KAAK,kBAAkB,KAAK,OAAO;AAC/E,UAAM,UAAU,KAAK,SAAS;AAC9B,QAAI,CAAC,UAAU;AACb,cAAQ,MAAM,iHAAiH;AAC/H;AAAA,IACF;AAEA,UAAM,YAAY,QACf,MAAM,GAAG,EACT,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC,EACzB,OAAO,OAAO;AAEjB,QAAI,CAAC,UAAU,QAAQ;AACrB,cAAQ,IAAI,uCAAuC;AACnD;AAAA,IACF;AAEA,UAAM,EAAE,QAAQ,IAAI,MAAM,uBAAuB;AACjD,UAAM,KAAK,QAAQ,IAAI;AACvB,UAAM,YAAY,MAAM,0BAA0B;AAElD,UAAM,UAAU,MAAM,qBAAqB,IAAI;AAAA,MAC7C;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,CAAC;AAED,QAAI,CAAC,SAAS;AACZ,cAAQ,IAAI,oCAAoC;AAAA,IAClD;AAAA,EACF;AACF;AAEA,MAAM,gBAA2B;AAAA,EAC/B,SAAS;AAAA,EACT,MAAM,IAAI,MAAM;AACd,UAAM,OAAO,UAAU,IAAI;AAC3B,UAAM,WAAW,KAAK,UAAU,KAAK,YAAY;AACjD,UAAM,iBAAiB,KAAK,gBAAgB,KAAK,kBAAkB,KAAK,OAAO;AAC/E,UAAM,SAAS,KAAK,SAAS,SAAS,KAAK,QAAQ,EAAE,IAAI;AACzD,UAAM,iBAAiB,KAAK,iBAAiB,SAAS,KAAK,gBAAgB,EAAE,IAAI;AAEjF,QAAI,CAAC,YAAY,CAAC,gBAAgB;AAChC,cAAQ,MAAM,iIAAiI;AAC/I;AAAA,IACF;AAEA,UAAM,EAAE,QAAQ,IAAI,MAAM,uBAAuB;AACjD,UAAM,KAAK,QAAQ,IAAI;AAEvB,YAAQ,IAAI,8BAA8B,MAAM,iBAAiB,cAAc,kBAAkB;AAEjG,QAAI;AACF,YAAM,SAAS,MAAM,GAAG;AAAA,QAAc,OAAO,QAC3C,kBAAkB,KAAK,EAAE,UAAU,eAAe,GAAG,EAAE,QAAQ,eAAe,CAAC;AAAA,MACjF;AAEA,UAAI,OAAO,WAAW,GAAG;AACvB,gBAAQ,IAAI,+CAA+C;AAAA,MAC7D,OAAO;AACL,gBAAQ,IAAI,wBAAwB;AACpC,gBAAQ,IAAI,eAAe,OAAO,MAAM,EAAE;AAC1C,gBAAQ,IAAI,kBAAkB,OAAO,SAAS,EAAE;AAChD,gBAAQ,IAAI,iBAAiB,OAAO,QAAQ,EAAE;AAC9C,gBAAQ,IAAI,cAAc,OAAO,KAAK,EAAE;AAAA,MAC1C;AAAA,IACF,SAAS,OAAO;AACd,cAAQ,MAAM,kCAAkC,KAAK;AAAA,IACvD;AAAA,EACF;AACF;AAEA,MAAM,iBAA4B;AAAA,EAChC,SAAS;AAAA,EACT,MAAM,IAAI,MAAM;AACd,UAAM,OAAO,UAAU,IAAI;AAC3B,UAAM,WAAW,KAAK,UAAU,KAAK,YAAY;AACjD,UAAM,iBAAiB,KAAK,gBAAgB,KAAK,kBAAkB,KAAK,OAAO;AAE/E,QAAI,CAAC,UAAU;AACb,cAAQ,MAAM,iGAAiG;AAC/G;AAAA,IACF;AAEA,UAAM,EAAE,QAAQ,IAAI,MAAM,uBAAuB;AACjD,UAAM,KAAK,QAAQ,IAAI;AACvB,UAAM,OAAO,GAAG,cAAc;AAE9B,YAAQ,IAAI,8BAA8B;AAE1C,UAAM,eAAe,MAAM,KAAK;AAAA,MAC9B;AAAA;AAAA;AAAA,MAGA,CAAC,QAAQ;AAAA,IACX;AACA,YAAQ,IAAI,mBAAmB,aAAa,CAAC,CAAC;AAE9C,UAAM,eAAe,MAAM,KAAK;AAAA,MAC9B;AAAA;AAAA;AAAA;AAAA,MAIA,CAAC,QAAQ;AAAA,IACX;AACA,YAAQ,IAAI,oBAAoB,YAAY;AAE5C,UAAM,gBAAgB,MAAM,KAAK;AAAA,MAC/B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAMA,CAAC,QAAQ;AAAA,IACX;AACA,YAAQ,IAAI,0BAA0B,cAAc,CAAC,CAAC;AAEtD,UAAM,YAAY,MAAM,KAAK;AAAA,MAC3B;AAAA;AAAA;AAAA,MAGA,CAAC,QAAQ;AAAA,IACX;AACA,YAAQ,IAAI,6BAA6B,UAAU,CAAC,CAAC;AAErD,UAAM,WAAW,MAAM,KAAK;AAAA,MAC1B;AAAA;AAAA;AAAA;AAAA,MAIA,CAAC,QAAQ;AAAA,IACX;AACA,YAAQ,IAAI,6BAA6B,QAAQ;AAEjD,QAAI,gBAAgB;AAClB,YAAM,YAAY,MAAM,KAAK;AAAA,QAC3B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,QAMA,CAAC,UAAU,cAAc;AAAA,MAC3B;AACA,cAAQ,IAAI;AAAA,yBAA4B,cAAc,KAAK,UAAU,CAAC,CAAC;AAAA,IACzE;AAGA,UAAM,eAAe,MAAM,KAAK;AAAA,MAC9B;AAAA;AAAA;AAAA,MAGA,CAAC,QAAQ;AAAA,IACX;AACA,YAAQ,IAAI,iCAAiC,aAAa,CAAC,CAAC;AAG5D,UAAM,eAAe,MAAM,KAAK;AAAA,MAC9B;AAAA;AAAA;AAAA;AAAA,MAIA,CAAC,QAAQ;AAAA,IACX;AACA,YAAQ,IAAI,2BAA2B,YAAY;AAGnD,YAAQ,IAAI,kDAAkD;AAC9D,UAAM,cAAc,MAAM,KAAK;AAAA,MAC7B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAOA,CAAC,UAAU,IAAI,cAAc,GAAG;AAAA,IAClC;AACA,YAAQ,IAAI,sCAAsC,YAAY,CAAC,CAAC;AAEhE,UAAM,mBAAmB,MAAM,KAAK;AAAA,MAClC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAOA,CAAC,UAAU,IAAI,cAAc,GAAG;AAAA,IAClC;AACA,YAAQ,IAAI,sCAAsC,iBAAiB,CAAC,CAAC;AAAA,EACvE;AACF;AAEA,IAAO,cAAQ,CAAC,cAAc,wBAAwB,eAAe,cAAc;",
+  "sourcesContent": ["import type { ModuleCli } from '@open-mercato/shared/modules/registry'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { DashboardRoleWidgets } from '@open-mercato/core/modules/dashboards/data/entities'\nimport { Role } from '@open-mercato/core/modules/auth/data/entities'\nimport { loadAllWidgets } from '@open-mercato/core/modules/dashboards/lib/widgets'\nimport { appendWidgetsToRoles, resolveAnalyticsWidgetIds } from '@open-mercato/core/modules/dashboards/lib/role-widgets'\nimport { seedAnalyticsData } from './seed/analytics'\nimport { parseCommaSeparatedList } from '@open-mercato/shared/lib/string'\n\ntype Args = Record<string, string>\n\nfunction parseArgs(rest: string[]): Args {\n  const args: Args = {}\n  for (let i = 0; i < rest.length; i += 2) {\n    const key = rest[i]?.replace(/^--/, '')\n    const value = rest[i + 1]\n    if (key) args[key] = value ?? ''\n  }\n  return args\n}\n\nexport async function seedDashboardDefaultsForTenant(\n  em: EntityManager,\n  {\n    tenantId,\n    organizationId = null,\n    roleNames = ['superadmin', 'admin', 'employee'],\n    widgetIds,\n    logger,\n  }: {\n    tenantId: string\n    organizationId?: string | null\n    roleNames?: string[]\n    widgetIds?: string[]\n    logger?: (message: string) => void\n  },\n): Promise<boolean> {\n  if (!tenantId) throw new Error('tenantId is required')\n  const log = logger ?? (() => {})\n\n  const widgets = await loadAllWidgets()\n  const widgetMap = new Map(widgets.map((widget) => [widget.metadata.id, widget]))\n  const resolvedWidgetIds = widgetIds && widgetIds.length\n    ? widgetIds.filter((id) => widgetMap.has(id))\n    : null\n  const defaultWidgetIds = widgets\n    .filter((widget) => widget.metadata.defaultEnabled)\n    .map((widget) => widget.metadata.id)\n  const allWidgetIds = widgets.map((widget) => widget.metadata.id)\n\n  if (resolvedWidgetIds && resolvedWidgetIds.length === 0) {\n    log('No widgets resolved for dashboard seeding.')\n    return false\n  }\n\n  await em.transactional(async (tem) => {\n    for (const roleName of roleNames) {\n      const isAdminRole = roleName === 'admin' || roleName === 'superadmin'\n      const roleWidgetIds = resolvedWidgetIds ?? (isAdminRole ? allWidgetIds : defaultWidgetIds)\n      if (!roleWidgetIds.length) {\n        log(`No widgets resolved for role \"${roleName}\".`)\n        continue\n      }\n      const role = await tem.findOne(Role, { name: roleName })\n      if (!role) {\n        log(`Skipping role \"${roleName}\" (not found)`)\n        continue\n      }\n      const existing = await tem.findOne(DashboardRoleWidgets, {\n        roleId: String(role.id),\n        tenantId,\n        organizationId,\n        deletedAt: null,\n      })\n      if (existing) {\n        existing.widgetIdsJson = roleWidgetIds\n        tem.persist(existing)\n        log(`Updated dashboard widgets for role \"${roleName}\"`)\n      } else {\n        const record = tem.create(DashboardRoleWidgets, {\n          roleId: String(role.id),\n          tenantId,\n          organizationId,\n          widgetIdsJson: roleWidgetIds,\n          createdAt: new Date(),\n          updatedAt: null,\n          deletedAt: null,\n        })\n        tem.persist(record)\n        log(`Created dashboard widgets for role \"${roleName}\"`)\n      }\n    }\n  })\n\n  return true\n}\n\nconst seedDefaults: ModuleCli = {\n  command: 'seed-defaults',\n  async run(rest) {\n    const args = parseArgs(rest)\n    const tenantId = args.tenant || args.tenantId || null\n    const organizationId = args.organization || args.organizationId || null\n    const roleCsv = args.roles || 'superadmin,admin,employee'\n    const widgetCsv = args.widgets || ''\n    if (!tenantId) {\n      console.error('Usage: mercato dashboards seed-defaults --tenant <tenantId> [--roles superadmin,admin,employee] [--widgets id1,id2]')\n      return\n    }\n\n    const roleNames = parseCommaSeparatedList(roleCsv)\n\n    if (!roleNames.length) {\n      console.log('No roles provided, nothing to seed.')\n      return\n    }\n\n    const { resolve } = await createRequestContainer()\n    const em = resolve('em') as any\n\n    await seedDashboardDefaultsForTenant(em as EntityManager, {\n      tenantId,\n      organizationId,\n      roleNames,\n      widgetIds: widgetCsv ? parseCommaSeparatedList(widgetCsv) : undefined,\n      logger: (message) => console.log(message),\n    })\n  },\n}\n\nconst enableAnalyticsWidgets: ModuleCli = {\n  command: 'enable-analytics-widgets',\n  async run(rest) {\n    const args = parseArgs(rest)\n    const tenantId = args.tenant || args.tenantId || null\n    const organizationId = args.organization || args.organizationId || args.org || null\n    const roleCsv = args.roles || 'admin,employee'\n    if (!tenantId) {\n      console.error('Usage: mercato dashboards enable-analytics-widgets --tenant <tenantId> [--org <orgId>] [--roles admin,employee]')\n      return\n    }\n\n    const roleNames = parseCommaSeparatedList(roleCsv)\n\n    if (!roleNames.length) {\n      console.log('No roles provided, nothing to update.')\n      return\n    }\n\n    const { resolve } = await createRequestContainer()\n    const em = resolve('em') as EntityManager\n    const widgetIds = await resolveAnalyticsWidgetIds()\n\n    const updated = await appendWidgetsToRoles(em, {\n      tenantId,\n      organizationId,\n      roleNames,\n      widgetIds,\n    })\n\n    if (!updated) {\n      console.log('No dashboard role widgets updated.')\n    }\n  },\n}\n\nconst seedAnalytics: ModuleCli = {\n  command: 'seed-analytics',\n  async run(rest) {\n    const args = parseArgs(rest)\n    const tenantId = args.tenant || args.tenantId || null\n    const organizationId = args.organization || args.organizationId || args.org || null\n    const months = args.months ? parseInt(args.months, 10) : 6\n    const ordersPerMonth = args.ordersPerMonth ? parseInt(args.ordersPerMonth, 10) : 50\n\n    if (!tenantId || !organizationId) {\n      console.error('Usage: mercato dashboards seed-analytics --tenant <tenantId> --organization <organizationId> [--months 6] [--ordersPerMonth 50]')\n      return\n    }\n\n    const { resolve } = await createRequestContainer()\n    const em = resolve('em') as EntityManager\n\n    console.log(`Seeding analytics data for ${months} months with ~${ordersPerMonth} orders/month...`)\n\n    try {\n      const result = await em.transactional(async (tem) =>\n        seedAnalyticsData(tem, { tenantId, organizationId }, { months, ordersPerMonth })\n      )\n\n      if (result.orders === 0) {\n        console.log('Analytics data already exists. Skipping seed.')\n      } else {\n        console.log(`Seeded analytics data:`)\n        console.log(`  - Orders: ${result.orders}`)\n        console.log(`  - Customers: ${result.customers}`)\n        console.log(`  - Products: ${result.products}`)\n        console.log(`  - Deals: ${result.deals}`)\n      }\n    } catch (error) {\n      console.error('Failed to seed analytics data:', error)\n    }\n  },\n}\n\nconst debugAnalytics: ModuleCli = {\n  command: 'debug-analytics',\n  async run(rest) {\n    const args = parseArgs(rest)\n    const tenantId = args.tenant || args.tenantId || null\n    const organizationId = args.organization || args.organizationId || args.org || null\n\n    if (!tenantId) {\n      console.error('Usage: mercato dashboards debug-analytics --tenant <tenantId> [--organization <organizationId>]')\n      return\n    }\n\n    const { resolve } = await createRequestContainer()\n    const em = resolve('em') as EntityManager\n    const conn = em.getConnection()\n\n    console.log('Checking analytics data...\\n')\n\n    const ordersResult = await conn.execute(\n      `SELECT COUNT(*) as total, MIN(placed_at) as earliest, MAX(placed_at) as latest\n       FROM sales_orders\n       WHERE tenant_id = ? AND order_number LIKE 'SO-ANALYTICS-%'`,\n      [tenantId]\n    )\n    console.log('Orders summary:', ordersResult[0])\n\n    const recentOrders = await conn.execute(\n      `SELECT order_number, placed_at, status, grand_total_gross_amount::numeric as total\n       FROM sales_orders\n       WHERE tenant_id = ? AND order_number LIKE 'SO-ANALYTICS-%'\n       ORDER BY placed_at DESC LIMIT 5`,\n      [tenantId]\n    )\n    console.log('\\nRecent orders:', recentOrders)\n\n    const januaryOrders = await conn.execute(\n      `SELECT COUNT(*) as count, SUM(grand_total_gross_amount::numeric) as total\n       FROM sales_orders\n       WHERE tenant_id = ?\n         AND order_number LIKE 'SO-ANALYTICS-%'\n         AND placed_at >= '2026-01-01'\n         AND placed_at <= '2026-01-31 23:59:59'`,\n      [tenantId]\n    )\n    console.log('\\nJanuary 2026 orders:', januaryOrders[0])\n\n    const allOrders = await conn.execute(\n      `SELECT COUNT(*) as count\n       FROM sales_orders\n       WHERE tenant_id = ?`,\n      [tenantId]\n    )\n    console.log('\\nTotal orders in tenant:', allOrders[0])\n\n    const orgCheck = await conn.execute(\n      `SELECT organization_id, COUNT(*) as count\n       FROM sales_orders\n       WHERE tenant_id = ? AND order_number LIKE 'SO-ANALYTICS-%'\n       GROUP BY organization_id`,\n      [tenantId]\n    )\n    console.log('\\nOrders by organization:', orgCheck)\n\n    if (organizationId) {\n      const orgOrders = await conn.execute(\n        `SELECT COUNT(*) as count, SUM(grand_total_gross_amount::numeric) as total\n         FROM sales_orders\n         WHERE tenant_id = ?\n           AND organization_id = ?\n           AND placed_at >= '2026-01-01'\n           AND placed_at <= '2026-01-31 23:59:59'`,\n        [tenantId, organizationId]\n      )\n      console.log(`\\nJanuary orders for org ${organizationId}:`, orgOrders[0])\n    }\n\n    // Check for NULL placed_at\n    const nullPlacedAt = await conn.execute(\n      `SELECT COUNT(*) as count\n       FROM sales_orders\n       WHERE tenant_id = ? AND placed_at IS NULL`,\n      [tenantId]\n    )\n    console.log('\\nOrders with NULL placed_at:', nullPlacedAt[0])\n\n    // Check non-analytics orders\n    const nonAnalytics = await conn.execute(\n      `SELECT order_number, placed_at, status, organization_id, grand_total_gross_amount::numeric as total\n       FROM sales_orders\n       WHERE tenant_id = ? AND order_number NOT LIKE 'SO-ANALYTICS-%'\n       ORDER BY placed_at DESC NULLS LAST LIMIT 10`,\n      [tenantId]\n    )\n    console.log('\\nNon-analytics orders:', nonAnalytics)\n\n    // Simulate widget query\n    console.log('\\n--- Simulating widget query for this_month ---')\n    const widgetQuery = await conn.execute(\n      `SELECT COALESCE(SUM(grand_total_gross_amount::numeric), 0) AS value\n       FROM sales_orders\n       WHERE tenant_id = ?\n         AND organization_id = ANY(?::uuid[])\n         AND deleted_at IS NULL\n         AND placed_at >= '2026-01-01'\n         AND placed_at <= '2026-01-31 23:59:59'`,\n      [tenantId, `{${organizationId}}`]\n    )\n    console.log('Widget query result (revenue sum):', widgetQuery[0])\n\n    const widgetCountQuery = await conn.execute(\n      `SELECT COUNT(*) AS value\n       FROM sales_orders\n       WHERE tenant_id = ?\n         AND organization_id = ANY(?::uuid[])\n         AND deleted_at IS NULL\n         AND placed_at >= '2026-01-01'\n         AND placed_at <= '2026-01-31 23:59:59'`,\n      [tenantId, `{${organizationId}}`]\n    )\n    console.log('Widget query result (order count):', widgetCountQuery[0])\n  },\n}\n\nexport default [seedDefaults, enableAnalyticsWidgets, seedAnalytics, debugAnalytics]\n"],
+  "mappings": "AACA,SAAS,8BAA8B;AAEvC,SAAS,4BAA4B;AACrC,SAAS,YAAY;AACrB,SAAS,sBAAsB;AAC/B,SAAS,sBAAsB,iCAAiC;AAChE,SAAS,yBAAyB;AAClC,SAAS,+BAA+B;AAIxC,SAAS,UAAU,MAAsB;AACvC,QAAM,OAAa,CAAC;AACpB,WAAS,IAAI,GAAG,IAAI,KAAK,QAAQ,KAAK,GAAG;AACvC,UAAM,MAAM,KAAK,CAAC,GAAG,QAAQ,OAAO,EAAE;AACtC,UAAM,QAAQ,KAAK,IAAI,CAAC;AACxB,QAAI,IAAK,MAAK,GAAG,IAAI,SAAS;AAAA,EAChC;AACA,SAAO;AACT;AAEA,eAAsB,+BACpB,IACA;AAAA,EACE;AAAA,EACA,iBAAiB;AAAA,EACjB,YAAY,CAAC,cAAc,SAAS,UAAU;AAAA,EAC9C;AAAA,EACA;AACF,GAOkB;AAClB,MAAI,CAAC,SAAU,OAAM,IAAI,MAAM,sBAAsB;AACrD,QAAM,MAAM,WAAW,MAAM;AAAA,EAAC;AAE9B,QAAM,UAAU,MAAM,eAAe;AACrC,QAAM,YAAY,IAAI,IAAI,QAAQ,IAAI,CAAC,WAAW,CAAC,OAAO,SAAS,IAAI,MAAM,CAAC,CAAC;AAC/E,QAAM,oBAAoB,aAAa,UAAU,SAC7C,UAAU,OAAO,CAAC,OAAO,UAAU,IAAI,EAAE,CAAC,IAC1C;AACJ,QAAM,mBAAmB,QACtB,OAAO,CAAC,WAAW,OAAO,SAAS,cAAc,EACjD,IAAI,CAAC,WAAW,OAAO,SAAS,EAAE;AACrC,QAAM,eAAe,QAAQ,IAAI,CAAC,WAAW,OAAO,SAAS,EAAE;AAE/D,MAAI,qBAAqB,kBAAkB,WAAW,GAAG;AACvD,QAAI,4CAA4C;AAChD,WAAO;AAAA,EACT;AAEA,QAAM,GAAG,cAAc,OAAO,QAAQ;AACpC,eAAW,YAAY,WAAW;AAChC,YAAM,cAAc,aAAa,WAAW,aAAa;AACzD,YAAM,gBAAgB,sBAAsB,cAAc,eAAe;AACzE,UAAI,CAAC,cAAc,QAAQ;AACzB,YAAI,iCAAiC,QAAQ,IAAI;AACjD;AAAA,MACF;AACA,YAAM,OAAO,MAAM,IAAI,QAAQ,MAAM,EAAE,MAAM,SAAS,CAAC;AACvD,UAAI,CAAC,MAAM;AACT,YAAI,kBAAkB,QAAQ,eAAe;AAC7C;AAAA,MACF;AACA,YAAM,WAAW,MAAM,IAAI,QAAQ,sBAAsB;AAAA,QACvD,QAAQ,OAAO,KAAK,EAAE;AAAA,QACtB;AAAA,QACA;AAAA,QACA,WAAW;AAAA,MACb,CAAC;AACD,UAAI,UAAU;AACZ,iBAAS,gBAAgB;AACzB,YAAI,QAAQ,QAAQ;AACpB,YAAI,uCAAuC,QAAQ,GAAG;AAAA,MACxD,OAAO;AACL,cAAM,SAAS,IAAI,OAAO,sBAAsB;AAAA,UAC9C,QAAQ,OAAO,KAAK,EAAE;AAAA,UACtB;AAAA,UACA;AAAA,UACA,eAAe;AAAA,UACf,WAAW,oBAAI,KAAK;AAAA,UACpB,WAAW;AAAA,UACX,WAAW;AAAA,QACb,CAAC;AACD,YAAI,QAAQ,MAAM;AAClB,YAAI,uCAAuC,QAAQ,GAAG;AAAA,MACxD;AAAA,IACF;AAAA,EACF,CAAC;AAED,SAAO;AACT;AAEA,MAAM,eAA0B;AAAA,EAC9B,SAAS;AAAA,EACT,MAAM,IAAI,MAAM;AACd,UAAM,OAAO,UAAU,IAAI;AAC3B,UAAM,WAAW,KAAK,UAAU,KAAK,YAAY;AACjD,UAAM,iBAAiB,KAAK,gBAAgB,KAAK,kBAAkB;AACnE,UAAM,UAAU,KAAK,SAAS;AAC9B,UAAM,YAAY,KAAK,WAAW;AAClC,QAAI,CAAC,UAAU;AACb,cAAQ,MAAM,qHAAqH;AACnI;AAAA,IACF;AAEA,UAAM,YAAY,wBAAwB,OAAO;AAEjD,QAAI,CAAC,UAAU,QAAQ;AACrB,cAAQ,IAAI,qCAAqC;AACjD;AAAA,IACF;AAEA,UAAM,EAAE,QAAQ,IAAI,MAAM,uBAAuB;AACjD,UAAM,KAAK,QAAQ,IAAI;AAEvB,UAAM,+BAA+B,IAAqB;AAAA,MACxD;AAAA,MACA;AAAA,MACA;AAAA,MACA,WAAW,YAAY,wBAAwB,SAAS,IAAI;AAAA,MAC5D,QAAQ,CAAC,YAAY,QAAQ,IAAI,OAAO;AAAA,IAC1C,CAAC;AAAA,EACH;AACF;AAEA,MAAM,yBAAoC;AAAA,EACxC,SAAS;AAAA,EACT,MAAM,IAAI,MAAM;AACd,UAAM,OAAO,UAAU,IAAI;AAC3B,UAAM,WAAW,KAAK,UAAU,KAAK,YAAY;AACjD,UAAM,iBAAiB,KAAK,gBAAgB,KAAK,kBAAkB,KAAK,OAAO;AAC/E,UAAM,UAAU,KAAK,SAAS;AAC9B,QAAI,CAAC,UAAU;AACb,cAAQ,MAAM,iHAAiH;AAC/H;AAAA,IACF;AAEA,UAAM,YAAY,wBAAwB,OAAO;AAEjD,QAAI,CAAC,UAAU,QAAQ;AACrB,cAAQ,IAAI,uCAAuC;AACnD;AAAA,IACF;AAEA,UAAM,EAAE,QAAQ,IAAI,MAAM,uBAAuB;AACjD,UAAM,KAAK,QAAQ,IAAI;AACvB,UAAM,YAAY,MAAM,0BAA0B;AAElD,UAAM,UAAU,MAAM,qBAAqB,IAAI;AAAA,MAC7C;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,CAAC;AAED,QAAI,CAAC,SAAS;AACZ,cAAQ,IAAI,oCAAoC;AAAA,IAClD;AAAA,EACF;AACF;AAEA,MAAM,gBAA2B;AAAA,EAC/B,SAAS;AAAA,EACT,MAAM,IAAI,MAAM;AACd,UAAM,OAAO,UAAU,IAAI;AAC3B,UAAM,WAAW,KAAK,UAAU,KAAK,YAAY;AACjD,UAAM,iBAAiB,KAAK,gBAAgB,KAAK,kBAAkB,KAAK,OAAO;AAC/E,UAAM,SAAS,KAAK,SAAS,SAAS,KAAK,QAAQ,EAAE,IAAI;AACzD,UAAM,iBAAiB,KAAK,iBAAiB,SAAS,KAAK,gBAAgB,EAAE,IAAI;AAEjF,QAAI,CAAC,YAAY,CAAC,gBAAgB;AAChC,cAAQ,MAAM,iIAAiI;AAC/I;AAAA,IACF;AAEA,UAAM,EAAE,QAAQ,IAAI,MAAM,uBAAuB;AACjD,UAAM,KAAK,QAAQ,IAAI;AAEvB,YAAQ,IAAI,8BAA8B,MAAM,iBAAiB,cAAc,kBAAkB;AAEjG,QAAI;AACF,YAAM,SAAS,MAAM,GAAG;AAAA,QAAc,OAAO,QAC3C,kBAAkB,KAAK,EAAE,UAAU,eAAe,GAAG,EAAE,QAAQ,eAAe,CAAC;AAAA,MACjF;AAEA,UAAI,OAAO,WAAW,GAAG;AACvB,gBAAQ,IAAI,+CAA+C;AAAA,MAC7D,OAAO;AACL,gBAAQ,IAAI,wBAAwB;AACpC,gBAAQ,IAAI,eAAe,OAAO,MAAM,EAAE;AAC1C,gBAAQ,IAAI,kBAAkB,OAAO,SAAS,EAAE;AAChD,gBAAQ,IAAI,iBAAiB,OAAO,QAAQ,EAAE;AAC9C,gBAAQ,IAAI,cAAc,OAAO,KAAK,EAAE;AAAA,MAC1C;AAAA,IACF,SAAS,OAAO;AACd,cAAQ,MAAM,kCAAkC,KAAK;AAAA,IACvD;AAAA,EACF;AACF;AAEA,MAAM,iBAA4B;AAAA,EAChC,SAAS;AAAA,EACT,MAAM,IAAI,MAAM;AACd,UAAM,OAAO,UAAU,IAAI;AAC3B,UAAM,WAAW,KAAK,UAAU,KAAK,YAAY;AACjD,UAAM,iBAAiB,KAAK,gBAAgB,KAAK,kBAAkB,KAAK,OAAO;AAE/E,QAAI,CAAC,UAAU;AACb,cAAQ,MAAM,iGAAiG;AAC/G;AAAA,IACF;AAEA,UAAM,EAAE,QAAQ,IAAI,MAAM,uBAAuB;AACjD,UAAM,KAAK,QAAQ,IAAI;AACvB,UAAM,OAAO,GAAG,cAAc;AAE9B,YAAQ,IAAI,8BAA8B;AAE1C,UAAM,eAAe,MAAM,KAAK;AAAA,MAC9B;AAAA;AAAA;AAAA,MAGA,CAAC,QAAQ;AAAA,IACX;AACA,YAAQ,IAAI,mBAAmB,aAAa,CAAC,CAAC;AAE9C,UAAM,eAAe,MAAM,KAAK;AAAA,MAC9B;AAAA;AAAA;AAAA;AAAA,MAIA,CAAC,QAAQ;AAAA,IACX;AACA,YAAQ,IAAI,oBAAoB,YAAY;AAE5C,UAAM,gBAAgB,MAAM,KAAK;AAAA,MAC/B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAMA,CAAC,QAAQ;AAAA,IACX;AACA,YAAQ,IAAI,0BAA0B,cAAc,CAAC,CAAC;AAEtD,UAAM,YAAY,MAAM,KAAK;AAAA,MAC3B;AAAA;AAAA;AAAA,MAGA,CAAC,QAAQ;AAAA,IACX;AACA,YAAQ,IAAI,6BAA6B,UAAU,CAAC,CAAC;AAErD,UAAM,WAAW,MAAM,KAAK;AAAA,MAC1B;AAAA;AAAA;AAAA;AAAA,MAIA,CAAC,QAAQ;AAAA,IACX;AACA,YAAQ,IAAI,6BAA6B,QAAQ;AAEjD,QAAI,gBAAgB;AAClB,YAAM,YAAY,MAAM,KAAK;AAAA,QAC3B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,QAMA,CAAC,UAAU,cAAc;AAAA,MAC3B;AACA,cAAQ,IAAI;AAAA,yBAA4B,cAAc,KAAK,UAAU,CAAC,CAAC;AAAA,IACzE;AAGA,UAAM,eAAe,MAAM,KAAK;AAAA,MAC9B;AAAA;AAAA;AAAA,MAGA,CAAC,QAAQ;AAAA,IACX;AACA,YAAQ,IAAI,iCAAiC,aAAa,CAAC,CAAC;AAG5D,UAAM,eAAe,MAAM,KAAK;AAAA,MAC9B;AAAA;AAAA;AAAA;AAAA,MAIA,CAAC,QAAQ;AAAA,IACX;AACA,YAAQ,IAAI,2BAA2B,YAAY;AAGnD,YAAQ,IAAI,kDAAkD;AAC9D,UAAM,cAAc,MAAM,KAAK;AAAA,MAC7B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAOA,CAAC,UAAU,IAAI,cAAc,GAAG;AAAA,IAClC;AACA,YAAQ,IAAI,sCAAsC,YAAY,CAAC,CAAC;AAEhE,UAAM,mBAAmB,MAAM,KAAK;AAAA,MAClC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAOA,CAAC,UAAU,IAAI,cAAc,GAAG;AAAA,IAClC;AACA,YAAQ,IAAI,sCAAsC,iBAAiB,CAAC,CAAC;AAAA,EACvE;AACF;AAEA,IAAO,cAAQ,CAAC,cAAc,wBAAwB,eAAe,cAAc;",
   "names": []
 }