@open-mercato/core 0.6.7-develop.6553.1.2ec7246e04 → 0.6.7-develop.6566.1.15385fa179

package/.turbo/turbo-build.log

@@ -1,4 +1,4 @@
-[build:core] found 3489 entry points
+[build:core] found 3490 entry points
 [build:core] built successfully
 [build:core:generated] found 187 entry points
 [build:core:generated] built successfully

package/dist/modules/attachments/api/partitions/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../src/modules/attachments/api/partitions/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { findOneWithDecryption, findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { Attachment, AttachmentPartition } from '../../data/entities'\nimport { ensureDefaultPartitions, DEFAULT_ATTACHMENT_PARTITIONS, sanitizePartitionCode, isPartitionSettingsLocked } from '../../lib/partitions'\nimport { resolvePartitionEnvKey } from '../../lib/partitionEnv'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { resolveDefaultAttachmentOcrEnabled } from '../../lib/ocrConfig'\nimport {\n  attachmentsTag,\n  partitionCreateSchema,\n  partitionUpdateSchema,\n  partitionResponseSchema,\n  partitionListResponseSchema,\n  attachmentErrorSchema,\n} from '../openapi'\n\nconst deleteSchema = z.object({\n  id: z.string().uuid(),\n})\n\nconst DEFAULT_CODES = new Set(DEFAULT_ATTACHMENT_PARTITIONS.map((entry) => entry.code))\n\ntype AuthLike = { sub?: string; tenantId?: string | null; orgId?: string | null; isSuperAdmin?: boolean } | null | undefined\n\nfunction isSuperAdmin(auth: AuthLike): boolean {\n  return auth?.isSuperAdmin === true\n}\n\nfunction canManagePartition(auth: AuthLike, entry: AttachmentPartition): boolean {\n  if (!auth?.tenantId) return false\n  if (entry.tenantId && entry.tenantId === auth.tenantId) return true\n  if (entry.tenantId == null && isSuperAdmin(auth)) return true\n  return false\n}\n\nfunction partitionVisibilityFilter(auth: AuthLike) {\n  if (isSuperAdmin(auth)) return {}\n  return { $or: [{ tenantId: null }, { tenantId: auth?.tenantId ?? null }] }\n}\n\nfunction serializePartition(entry: AttachmentPartition) {\n  return {\n    id: entry.id,\n    code: entry.code,\n    title: entry.title,\n    description: entry.description ?? null,\n    isPublic: entry.isPublic ?? false,\n    requiresOcr: entry.requiresOcr ?? resolveDefaultAttachmentOcrEnabled(),\n    ocrModel: entry.ocrModel ?? null,\n    storageDriver: entry.storageDriver ?? 'local',\n    configJson: entry.configJson ?? null,\n    createdAt: entry.createdAt instanceof Date ? entry.createdAt.toISOString() : null,\n    updatedAt: entry.updatedAt instanceof Date ? entry.updatedAt.toISOString() : null,\n    envKey: resolvePartitionEnvKey(entry.code),\n  }\n}\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['attachments.manage'] },\n  POST: { requireAuth: true, requireFeatures: ['attachments.manage'] },\n  PUT: { requireAuth: true, requireFeatures: ['attachments.manage'] },\n  DELETE: { requireAuth: true, requireFeatures: ['attachments.manage'] },\n} as const\n\nasync function resolveEm() {\n  const { resolve } = await createRequestContainer()\n  return resolve('em') as EntityManager\n}\n\nexport async function GET(req: Request) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.sub || !auth.tenantId) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n  const em = await resolveEm()\n  await ensureDefaultPartitions(em)\n  const rows = await findWithDecryption(\n    em,\n    AttachmentPartition,\n    partitionVisibilityFilter(auth),\n    { orderBy: { createdAt: 'asc' } },\n    { tenantId: auth.tenantId, organizationId: auth.orgId ?? null },\n  )\n  return NextResponse.json({ items: rows.map((entry) => serializePartition(entry)) })\n}\n\nexport async function POST(req: Request) {\n  if (isPartitionSettingsLocked()) {\n    return NextResponse.json(\n      { error: 'Attachment partitions are managed by the environment in demo/onboarding mode.' },\n      { status: 403 },\n    )\n  }\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.sub || !auth.tenantId) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n  let json: unknown = null\n  try {\n    json = await req.json()\n  } catch {\n    json = null\n  }\n  const parsed = partitionCreateSchema.safeParse(json)\n  if (!parsed.success) {\n    return NextResponse.json({ error: 'Invalid payload' }, { status: 400 })\n  }\n  const code = sanitizePartitionCode(parsed.data.code)\n  if (!code) {\n    return NextResponse.json({ error: 'Partition code is required.' }, { status: 400 })\n  }\n  const em = await resolveEm()\n  await ensureDefaultPartitions(em)\n  const exists = await findOneWithDecryption(\n    em,\n    AttachmentPartition,\n    { code },\n    undefined,\n    { tenantId: auth.tenantId, organizationId: auth.orgId ?? null },\n  )\n  if (exists) {\n    return NextResponse.json({ error: 'Partition code already exists.' }, { status: 409 })\n  }\n  const entry = em.create(AttachmentPartition, {\n    code,\n    title: parsed.data.title.trim(),\n    description: parsed.data.description?.trim() ?? null,\n    storageDriver: parsed.data.storageDriver ?? 'local',\n    configJson: parsed.data.configJson ?? null,\n    isPublic: parsed.data.isPublic ?? false,\n    requiresOcr:\n      typeof parsed.data.requiresOcr === 'boolean'\n        ? parsed.data.requiresOcr\n        : resolveDefaultAttachmentOcrEnabled(),\n    ocrModel: parsed.data.ocrModel?.trim() || null,\n    tenantId: auth.tenantId,\n    organizationId: auth.orgId ?? null,\n  })\n  await em.persist(entry).flush()\n  return NextResponse.json({ item: serializePartition(entry) }, { status: 201 })\n}\n\nexport async function PUT(req: Request) {\n  if (isPartitionSettingsLocked()) {\n    return NextResponse.json(\n      { error: 'Attachment partitions are managed by the environment in demo/onboarding mode.' },\n      { status: 403 },\n    )\n  }\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.sub || !auth.tenantId) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n  let json: unknown = null\n  try {\n    json = await req.json()\n  } catch {\n    json = null\n  }\n  const parsed = partitionUpdateSchema.safeParse(json)\n  if (!parsed.success) {\n    return NextResponse.json({ error: 'Invalid payload' }, { status: 400 })\n  }\n  const em = await resolveEm()\n  const entry = await findOneWithDecryption(\n    em,\n    AttachmentPartition,\n    { id: parsed.data.id },\n    undefined,\n    { tenantId: auth.tenantId, organizationId: auth.orgId ?? null },\n  )\n  if (!entry || !canManagePartition(auth, entry)) {\n    return NextResponse.json({ error: 'Partition not found' }, { status: 404 })\n  }\n  if (sanitizePartitionCode(parsed.data.code) !== entry.code) {\n    return NextResponse.json({ error: 'Partition code cannot be changed.' }, { status: 400 })\n  }\n  entry.title = parsed.data.title.trim()\n  entry.description = parsed.data.description?.trim() ?? null\n  entry.isPublic = parsed.data.isPublic ?? false\n  if (typeof parsed.data.requiresOcr === 'boolean') {\n    entry.requiresOcr = parsed.data.requiresOcr\n  }\n  if (parsed.data.ocrModel !== undefined) {\n    entry.ocrModel = parsed.data.ocrModel?.trim() || null\n  }\n  if (parsed.data.storageDriver !== undefined) {\n    entry.storageDriver = parsed.data.storageDriver\n  }\n  if (parsed.data.configJson !== undefined) {\n    entry.configJson = parsed.data.configJson ?? null\n  }\n  await em.persist(entry).flush()\n  return NextResponse.json({ item: serializePartition(entry) })\n}\n\nexport async function DELETE(req: Request) {\n  if (isPartitionSettingsLocked()) {\n    return NextResponse.json(\n      { error: 'Attachment partitions are managed by the environment in demo/onboarding mode.' },\n      { status: 403 },\n    )\n  }\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.sub || !auth.tenantId) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n  const url = new URL(req.url)\n  const id = url.searchParams.get('id')\n  const parsed = deleteSchema.safeParse({ id })\n  if (!parsed.success) {\n    return NextResponse.json({ error: 'Partition id is required' }, { status: 400 })\n  }\n  const em = await resolveEm()\n  const entry = await findOneWithDecryption(\n    em,\n    AttachmentPartition,\n    { id: parsed.data.id },\n    undefined,\n    { tenantId: auth.tenantId, organizationId: auth.orgId ?? null },\n  )\n  if (!entry || !canManagePartition(auth, entry)) {\n    return NextResponse.json({ error: 'Partition not found' }, { status: 404 })\n  }\n  if (DEFAULT_CODES.has(entry.code)) {\n    return NextResponse.json({ error: 'Default partitions cannot be removed.' }, { status: 400 })\n  }\n  const usageFilter: Record<string, unknown> = { partitionCode: entry.code }\n  if (entry.tenantId) usageFilter.tenantId = entry.tenantId\n  const usage = await em.count(Attachment, usageFilter)\n  if (usage > 0) {\n    return NextResponse.json({ error: 'Partition is in use and cannot be removed.' }, { status: 409 })\n  }\n  await em.remove(entry).flush()\n  return NextResponse.json({ ok: true })\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: attachmentsTag,\n  summary: 'Attachment partition management',\n  methods: {\n    GET: {\n      summary: 'List all attachment partitions',\n      description: 'Returns all configured attachment partitions with storage settings, OCR configuration, and access control settings.',\n      responses: [\n        { status: 200, description: 'List of partitions', schema: partitionListResponseSchema },\n      ],\n      errors: [\n        { status: 401, description: 'Unauthorized', schema: attachmentErrorSchema },\n      ],\n    },\n    POST: {\n      summary: 'Create new partition',\n      description: 'Creates a new attachment partition with specified storage and OCR settings. Requires unique partition code.',\n      requestBody: {\n        contentType: 'application/json',\n        schema: partitionCreateSchema,\n      },\n      responses: [\n        { status: 201, description: 'Partition created successfully', schema: partitionResponseSchema },\n      ],\n      errors: [\n        { status: 400, description: 'Invalid payload or partition code', schema: attachmentErrorSchema },\n        { status: 401, description: 'Unauthorized', schema: attachmentErrorSchema },\n        { status: 403, description: 'Partitions locked in demo mode', schema: attachmentErrorSchema },\n        { status: 409, description: 'Partition code already exists', schema: attachmentErrorSchema },\n      ],\n    },\n    PUT: {\n      summary: 'Update partition',\n      description: 'Updates an existing partition. Partition code cannot be changed. Title, description, OCR settings, and access control can be modified.',\n      requestBody: {\n        contentType: 'application/json',\n        schema: partitionUpdateSchema,\n      },\n      responses: [\n        { status: 200, description: 'Partition updated successfully', schema: partitionResponseSchema },\n      ],\n      errors: [\n        { status: 400, description: 'Invalid payload or code change attempt', schema: attachmentErrorSchema },\n        { status: 401, description: 'Unauthorized', schema: attachmentErrorSchema },\n        { status: 403, description: 'Partitions locked in demo mode', schema: attachmentErrorSchema },\n        { status: 404, description: 'Partition not found', schema: attachmentErrorSchema },\n      ],\n    },\n    DELETE: {\n      summary: 'Delete partition',\n      description: 'Deletes a partition. Default partitions cannot be deleted. Partitions with existing attachments cannot be deleted.',\n      responses: [\n        { status: 200, description: 'Partition deleted successfully', schema: z.object({ ok: z.literal(true) }) },\n      ],\n      errors: [\n        { status: 400, description: 'Invalid ID or default partition deletion attempt', schema: attachmentErrorSchema },\n        { status: 401, description: 'Unauthorized', schema: attachmentErrorSchema },\n        { status: 403, description: 'Partitions locked in demo mode', schema: attachmentErrorSchema },\n        { status: 404, description: 'Partition not found', schema: attachmentErrorSchema },\n        { status: 409, description: 'Partition in use', schema: attachmentErrorSchema },\n      ],\n    },\n  },\n}\n"],
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { findOneWithDecryption, findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { Attachment, AttachmentPartition } from '../../data/entities'\nimport { ensureDefaultPartitions, DEFAULT_ATTACHMENT_PARTITIONS, sanitizePartitionCode, isPartitionSettingsLocked } from '../../lib/partitions'\nimport { resolvePartitionEnvKey } from '../../lib/partitionEnv'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { resolveDefaultAttachmentOcrEnabled } from '../../lib/ocrConfig'\nimport {\n  attachmentsTag,\n  partitionCreateSchema,\n  partitionUpdateSchema,\n  partitionResponseSchema,\n  partitionListResponseSchema,\n  attachmentErrorSchema,\n} from '../openapi'\n\nconst deleteSchema = z.object({\n  id: z.string().uuid(),\n})\n\nconst DEFAULT_CODES = new Set(DEFAULT_ATTACHMENT_PARTITIONS.map((entry) => entry.code))\n\ntype AuthLike = { sub?: string; tenantId?: string | null; orgId?: string | null; isSuperAdmin?: boolean } | null | undefined\n\nfunction isSuperAdmin(auth: AuthLike): boolean {\n  return auth?.isSuperAdmin === true\n}\n\nfunction canManagePartition(auth: AuthLike, entry: AttachmentPartition): boolean {\n  if (!auth?.tenantId) return false\n  if (entry.tenantId && entry.tenantId === auth.tenantId) return true\n  if (entry.tenantId == null && isSuperAdmin(auth)) return true\n  return false\n}\n\nfunction partitionVisibilityFilter(auth: AuthLike) {\n  if (isSuperAdmin(auth)) return {}\n  return { $or: [{ tenantId: null }, { tenantId: auth?.tenantId ?? null }] }\n}\n\nfunction serializePartition(entry: AttachmentPartition) {\n  return {\n    id: entry.id,\n    code: entry.code,\n    title: entry.title,\n    description: entry.description ?? null,\n    isPublic: entry.isPublic ?? false,\n    requiresOcr: entry.requiresOcr ?? resolveDefaultAttachmentOcrEnabled(),\n    ocrModel: entry.ocrModel ?? null,\n    storageDriver: entry.storageDriver ?? 'local',\n    configJson: entry.configJson ?? null,\n    createdAt: entry.createdAt instanceof Date ? entry.createdAt.toISOString() : null,\n    updatedAt: entry.updatedAt instanceof Date ? entry.updatedAt.toISOString() : null,\n    envKey: resolvePartitionEnvKey(entry.code),\n  }\n}\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['attachments.manage'] },\n  POST: { requireAuth: true, requireFeatures: ['attachments.manage'] },\n  PUT: { requireAuth: true, requireFeatures: ['attachments.manage'] },\n  DELETE: { requireAuth: true, requireFeatures: ['attachments.manage'] },\n} as const\n\nasync function resolveEm() {\n  const { resolve } = await createRequestContainer()\n  return resolve('em') as EntityManager\n}\n\nexport async function GET(req: Request) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.sub || !auth.tenantId) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n  const em = await resolveEm()\n  await ensureDefaultPartitions(em)\n  const rows = await findWithDecryption<AttachmentPartition>(\n    em,\n    AttachmentPartition,\n    partitionVisibilityFilter(auth),\n    { orderBy: { createdAt: 'asc' } },\n    { tenantId: auth.tenantId, organizationId: auth.orgId ?? null },\n  )\n  return NextResponse.json({ items: rows.map((entry) => serializePartition(entry)) })\n}\n\nexport async function POST(req: Request) {\n  if (isPartitionSettingsLocked()) {\n    return NextResponse.json(\n      { error: 'Attachment partitions are managed by the environment in demo/onboarding mode.' },\n      { status: 403 },\n    )\n  }\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.sub || !auth.tenantId) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n  let json: unknown = null\n  try {\n    json = await req.json()\n  } catch {\n    json = null\n  }\n  const parsed = partitionCreateSchema.safeParse(json)\n  if (!parsed.success) {\n    return NextResponse.json({ error: 'Invalid payload' }, { status: 400 })\n  }\n  const code = sanitizePartitionCode(parsed.data.code)\n  if (!code) {\n    return NextResponse.json({ error: 'Partition code is required.' }, { status: 400 })\n  }\n  const em = await resolveEm()\n  await ensureDefaultPartitions(em)\n  const exists = await findOneWithDecryption(\n    em,\n    AttachmentPartition,\n    { code },\n    undefined,\n    { tenantId: auth.tenantId, organizationId: auth.orgId ?? null },\n  )\n  if (exists) {\n    return NextResponse.json({ error: 'Partition code already exists.' }, { status: 409 })\n  }\n  const entry = em.create(AttachmentPartition, {\n    code,\n    title: parsed.data.title.trim(),\n    description: parsed.data.description?.trim() ?? null,\n    storageDriver: parsed.data.storageDriver ?? 'local',\n    configJson: parsed.data.configJson ?? null,\n    isPublic: parsed.data.isPublic ?? false,\n    requiresOcr:\n      typeof parsed.data.requiresOcr === 'boolean'\n        ? parsed.data.requiresOcr\n        : resolveDefaultAttachmentOcrEnabled(),\n    ocrModel: parsed.data.ocrModel?.trim() || null,\n    tenantId: auth.tenantId,\n    organizationId: auth.orgId ?? null,\n  })\n  await em.persist(entry).flush()\n  return NextResponse.json({ item: serializePartition(entry) }, { status: 201 })\n}\n\nexport async function PUT(req: Request) {\n  if (isPartitionSettingsLocked()) {\n    return NextResponse.json(\n      { error: 'Attachment partitions are managed by the environment in demo/onboarding mode.' },\n      { status: 403 },\n    )\n  }\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.sub || !auth.tenantId) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n  let json: unknown = null\n  try {\n    json = await req.json()\n  } catch {\n    json = null\n  }\n  const parsed = partitionUpdateSchema.safeParse(json)\n  if (!parsed.success) {\n    return NextResponse.json({ error: 'Invalid payload' }, { status: 400 })\n  }\n  const em = await resolveEm()\n  const entry = await findOneWithDecryption(\n    em,\n    AttachmentPartition,\n    { id: parsed.data.id },\n    undefined,\n    { tenantId: auth.tenantId, organizationId: auth.orgId ?? null },\n  )\n  if (!entry || !canManagePartition(auth, entry)) {\n    return NextResponse.json({ error: 'Partition not found' }, { status: 404 })\n  }\n  if (sanitizePartitionCode(parsed.data.code) !== entry.code) {\n    return NextResponse.json({ error: 'Partition code cannot be changed.' }, { status: 400 })\n  }\n  entry.title = parsed.data.title.trim()\n  entry.description = parsed.data.description?.trim() ?? null\n  entry.isPublic = parsed.data.isPublic ?? false\n  if (typeof parsed.data.requiresOcr === 'boolean') {\n    entry.requiresOcr = parsed.data.requiresOcr\n  }\n  if (parsed.data.ocrModel !== undefined) {\n    entry.ocrModel = parsed.data.ocrModel?.trim() || null\n  }\n  if (parsed.data.storageDriver !== undefined) {\n    entry.storageDriver = parsed.data.storageDriver\n  }\n  if (parsed.data.configJson !== undefined) {\n    entry.configJson = parsed.data.configJson ?? null\n  }\n  await em.persist(entry).flush()\n  return NextResponse.json({ item: serializePartition(entry) })\n}\n\nexport async function DELETE(req: Request) {\n  if (isPartitionSettingsLocked()) {\n    return NextResponse.json(\n      { error: 'Attachment partitions are managed by the environment in demo/onboarding mode.' },\n      { status: 403 },\n    )\n  }\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.sub || !auth.tenantId) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n  const url = new URL(req.url)\n  const id = url.searchParams.get('id')\n  const parsed = deleteSchema.safeParse({ id })\n  if (!parsed.success) {\n    return NextResponse.json({ error: 'Partition id is required' }, { status: 400 })\n  }\n  const em = await resolveEm()\n  const entry = await findOneWithDecryption(\n    em,\n    AttachmentPartition,\n    { id: parsed.data.id },\n    undefined,\n    { tenantId: auth.tenantId, organizationId: auth.orgId ?? null },\n  )\n  if (!entry || !canManagePartition(auth, entry)) {\n    return NextResponse.json({ error: 'Partition not found' }, { status: 404 })\n  }\n  if (DEFAULT_CODES.has(entry.code)) {\n    return NextResponse.json({ error: 'Default partitions cannot be removed.' }, { status: 400 })\n  }\n  const usageFilter: Record<string, unknown> = { partitionCode: entry.code }\n  if (entry.tenantId) usageFilter.tenantId = entry.tenantId\n  const usage = await em.count(Attachment, usageFilter)\n  if (usage > 0) {\n    return NextResponse.json({ error: 'Partition is in use and cannot be removed.' }, { status: 409 })\n  }\n  await em.remove(entry).flush()\n  return NextResponse.json({ ok: true })\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: attachmentsTag,\n  summary: 'Attachment partition management',\n  methods: {\n    GET: {\n      summary: 'List all attachment partitions',\n      description: 'Returns all configured attachment partitions with storage settings, OCR configuration, and access control settings.',\n      responses: [\n        { status: 200, description: 'List of partitions', schema: partitionListResponseSchema },\n      ],\n      errors: [\n        { status: 401, description: 'Unauthorized', schema: attachmentErrorSchema },\n      ],\n    },\n    POST: {\n      summary: 'Create new partition',\n      description: 'Creates a new attachment partition with specified storage and OCR settings. Requires unique partition code.',\n      requestBody: {\n        contentType: 'application/json',\n        schema: partitionCreateSchema,\n      },\n      responses: [\n        { status: 201, description: 'Partition created successfully', schema: partitionResponseSchema },\n      ],\n      errors: [\n        { status: 400, description: 'Invalid payload or partition code', schema: attachmentErrorSchema },\n        { status: 401, description: 'Unauthorized', schema: attachmentErrorSchema },\n        { status: 403, description: 'Partitions locked in demo mode', schema: attachmentErrorSchema },\n        { status: 409, description: 'Partition code already exists', schema: attachmentErrorSchema },\n      ],\n    },\n    PUT: {\n      summary: 'Update partition',\n      description: 'Updates an existing partition. Partition code cannot be changed. Title, description, OCR settings, and access control can be modified.',\n      requestBody: {\n        contentType: 'application/json',\n        schema: partitionUpdateSchema,\n      },\n      responses: [\n        { status: 200, description: 'Partition updated successfully', schema: partitionResponseSchema },\n      ],\n      errors: [\n        { status: 400, description: 'Invalid payload or code change attempt', schema: attachmentErrorSchema },\n        { status: 401, description: 'Unauthorized', schema: attachmentErrorSchema },\n        { status: 403, description: 'Partitions locked in demo mode', schema: attachmentErrorSchema },\n        { status: 404, description: 'Partition not found', schema: attachmentErrorSchema },\n      ],\n    },\n    DELETE: {\n      summary: 'Delete partition',\n      description: 'Deletes a partition. Default partitions cannot be deleted. Partitions with existing attachments cannot be deleted.',\n      responses: [\n        { status: 200, description: 'Partition deleted successfully', schema: z.object({ ok: z.literal(true) }) },\n      ],\n      errors: [\n        { status: 400, description: 'Invalid ID or default partition deletion attempt', schema: attachmentErrorSchema },\n        { status: 401, description: 'Unauthorized', schema: attachmentErrorSchema },\n        { status: 403, description: 'Partitions locked in demo mode', schema: attachmentErrorSchema },\n        { status: 404, description: 'Partition not found', schema: attachmentErrorSchema },\n        { status: 409, description: 'Partition in use', schema: attachmentErrorSchema },\n      ],\n    },\n  },\n}\n"],
   "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAElB,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AACvC,SAAS,uBAAuB,0BAA0B;AAC1D,SAAS,YAAY,2BAA2B;AAChD,SAAS,yBAAyB,+BAA+B,uBAAuB,iCAAiC;AACzH,SAAS,8BAA8B;AAEvC,SAAS,0CAA0C;AACnD;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP,MAAM,eAAe,EAAE,OAAO;AAAA,EAC5B,IAAI,EAAE,OAAO,EAAE,KAAK;AACtB,CAAC;AAED,MAAM,gBAAgB,IAAI,IAAI,8BAA8B,IAAI,CAAC,UAAU,MAAM,IAAI,CAAC;AAItF,SAAS,aAAa,MAAyB;AAC7C,SAAO,MAAM,iBAAiB;AAChC;AAEA,SAAS,mBAAmB,MAAgB,OAAqC;AAC/E,MAAI,CAAC,MAAM,SAAU,QAAO;AAC5B,MAAI,MAAM,YAAY,MAAM,aAAa,KAAK,SAAU,QAAO;AAC/D,MAAI,MAAM,YAAY,QAAQ,aAAa,IAAI,EAAG,QAAO;AACzD,SAAO;AACT;AAEA,SAAS,0BAA0B,MAAgB;AACjD,MAAI,aAAa,IAAI,EAAG,QAAO,CAAC;AAChC,SAAO,EAAE,KAAK,CAAC,EAAE,UAAU,KAAK,GAAG,EAAE,UAAU,MAAM,YAAY,KAAK,CAAC,EAAE;AAC3E;AAEA,SAAS,mBAAmB,OAA4B;AACtD,SAAO;AAAA,IACL,IAAI,MAAM;AAAA,IACV,MAAM,MAAM;AAAA,IACZ,OAAO,MAAM;AAAA,IACb,aAAa,MAAM,eAAe;AAAA,IAClC,UAAU,MAAM,YAAY;AAAA,IAC5B,aAAa,MAAM,eAAe,mCAAmC;AAAA,IACrE,UAAU,MAAM,YAAY;AAAA,IAC5B,eAAe,MAAM,iBAAiB;AAAA,IACtC,YAAY,MAAM,cAAc;AAAA,IAChC,WAAW,MAAM,qBAAqB,OAAO,MAAM,UAAU,YAAY,IAAI;AAAA,IAC7E,WAAW,MAAM,qBAAqB,OAAO,MAAM,UAAU,YAAY,IAAI;AAAA,IAC7E,QAAQ,uBAAuB,MAAM,IAAI;AAAA,EAC3C;AACF;AAEO,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,oBAAoB,EAAE;AAAA,EAClE,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,oBAAoB,EAAE;AAAA,EACnE,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,oBAAoB,EAAE;AAAA,EAClE,QAAQ,EAAE,aAAa,MAAM,iBAAiB,CAAC,oBAAoB,EAAE;AACvE;AAEA,eAAe,YAAY;AACzB,QAAM,EAAE,QAAQ,IAAI,MAAM,uBAAuB;AACjD,SAAO,QAAQ,IAAI;AACrB;AAEA,eAAsB,IAAI,KAAc;AACtC,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,OAAO,CAAC,KAAK,UAAU;AAChC,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AACA,QAAM,KAAK,MAAM,UAAU;AAC3B,QAAM,wBAAwB,EAAE;AAChC,QAAM,OAAO,MAAM;AAAA,IACjB;AAAA,IACA;AAAA,IACA,0BAA0B,IAAI;AAAA,IAC9B,EAAE,SAAS,EAAE,WAAW,MAAM,EAAE;AAAA,IAChC,EAAE,UAAU,KAAK,UAAU,gBAAgB,KAAK,SAAS,KAAK;AAAA,EAChE;AACA,SAAO,aAAa,KAAK,EAAE,OAAO,KAAK,IAAI,CAAC,UAAU,mBAAmB,KAAK,CAAC,EAAE,CAAC;AACpF;AAEA,eAAsB,KAAK,KAAc;AACvC,MAAI,0BAA0B,GAAG;AAC/B,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,gFAAgF;AAAA,MACzF,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACA,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,OAAO,CAAC,KAAK,UAAU;AAChC,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AACA,MAAI,OAAgB;AACpB,MAAI;AACF,WAAO,MAAM,IAAI,KAAK;AAAA,EACxB,QAAQ;AACN,WAAO;AAAA,EACT;AACA,QAAM,SAAS,sBAAsB,UAAU,IAAI;AACnD,MAAI,CAAC,OAAO,SAAS;AACnB,WAAO,aAAa,KAAK,EAAE,OAAO,kBAAkB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACxE;AACA,QAAM,OAAO,sBAAsB,OAAO,KAAK,IAAI;AACnD,MAAI,CAAC,MAAM;AACT,WAAO,aAAa,KAAK,EAAE,OAAO,8BAA8B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACpF;AACA,QAAM,KAAK,MAAM,UAAU;AAC3B,QAAM,wBAAwB,EAAE;AAChC,QAAM,SAAS,MAAM;AAAA,IACnB;AAAA,IACA;AAAA,IACA,EAAE,KAAK;AAAA,IACP;AAAA,IACA,EAAE,UAAU,KAAK,UAAU,gBAAgB,KAAK,SAAS,KAAK;AAAA,EAChE;AACA,MAAI,QAAQ;AACV,WAAO,aAAa,KAAK,EAAE,OAAO,iCAAiC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACvF;AACA,QAAM,QAAQ,GAAG,OAAO,qBAAqB;AAAA,IAC3C;AAAA,IACA,OAAO,OAAO,KAAK,MAAM,KAAK;AAAA,IAC9B,aAAa,OAAO,KAAK,aAAa,KAAK,KAAK;AAAA,IAChD,eAAe,OAAO,KAAK,iBAAiB;AAAA,IAC5C,YAAY,OAAO,KAAK,cAAc;AAAA,IACtC,UAAU,OAAO,KAAK,YAAY;AAAA,IAClC,aACE,OAAO,OAAO,KAAK,gBAAgB,YAC/B,OAAO,KAAK,cACZ,mCAAmC;AAAA,IACzC,UAAU,OAAO,KAAK,UAAU,KAAK,KAAK;AAAA,IAC1C,UAAU,KAAK;AAAA,IACf,gBAAgB,KAAK,SAAS;AAAA,EAChC,CAAC;AACD,QAAM,GAAG,QAAQ,KAAK,EAAE,MAAM;AAC9B,SAAO,aAAa,KAAK,EAAE,MAAM,mBAAmB,KAAK,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAC/E;AAEA,eAAsB,IAAI,KAAc;AACtC,MAAI,0BAA0B,GAAG;AAC/B,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,gFAAgF;AAAA,MACzF,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACA,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,OAAO,CAAC,KAAK,UAAU;AAChC,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AACA,MAAI,OAAgB;AACpB,MAAI;AACF,WAAO,MAAM,IAAI,KAAK;AAAA,EACxB,QAAQ;AACN,WAAO;AAAA,EACT;AACA,QAAM,SAAS,sBAAsB,UAAU,IAAI;AACnD,MAAI,CAAC,OAAO,SAAS;AACnB,WAAO,aAAa,KAAK,EAAE,OAAO,kBAAkB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACxE;AACA,QAAM,KAAK,MAAM,UAAU;AAC3B,QAAM,QAAQ,MAAM;AAAA,IAClB;AAAA,IACA;AAAA,IACA,EAAE,IAAI,OAAO,KAAK,GAAG;AAAA,IACrB;AAAA,IACA,EAAE,UAAU,KAAK,UAAU,gBAAgB,KAAK,SAAS,KAAK;AAAA,EAChE;AACA,MAAI,CAAC,SAAS,CAAC,mBAAmB,MAAM,KAAK,GAAG;AAC9C,WAAO,aAAa,KAAK,EAAE,OAAO,sBAAsB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC5E;AACA,MAAI,sBAAsB,OAAO,KAAK,IAAI,MAAM,MAAM,MAAM;AAC1D,WAAO,aAAa,KAAK,EAAE,OAAO,oCAAoC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC1F;AACA,QAAM,QAAQ,OAAO,KAAK,MAAM,KAAK;AACrC,QAAM,cAAc,OAAO,KAAK,aAAa,KAAK,KAAK;AACvD,QAAM,WAAW,OAAO,KAAK,YAAY;AACzC,MAAI,OAAO,OAAO,KAAK,gBAAgB,WAAW;AAChD,UAAM,cAAc,OAAO,KAAK;AAAA,EAClC;AACA,MAAI,OAAO,KAAK,aAAa,QAAW;AACtC,UAAM,WAAW,OAAO,KAAK,UAAU,KAAK,KAAK;AAAA,EACnD;AACA,MAAI,OAAO,KAAK,kBAAkB,QAAW;AAC3C,UAAM,gBAAgB,OAAO,KAAK;AAAA,EACpC;AACA,MAAI,OAAO,KAAK,eAAe,QAAW;AACxC,UAAM,aAAa,OAAO,KAAK,cAAc;AAAA,EAC/C;AACA,QAAM,GAAG,QAAQ,KAAK,EAAE,MAAM;AAC9B,SAAO,aAAa,KAAK,EAAE,MAAM,mBAAmB,KAAK,EAAE,CAAC;AAC9D;AAEA,eAAsB,OAAO,KAAc;AACzC,MAAI,0BAA0B,GAAG;AAC/B,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,gFAAgF;AAAA,MACzF,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACA,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,OAAO,CAAC,KAAK,UAAU;AAChC,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AACA,QAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,QAAM,KAAK,IAAI,aAAa,IAAI,IAAI;AACpC,QAAM,SAAS,aAAa,UAAU,EAAE,GAAG,CAAC;AAC5C,MAAI,CAAC,OAAO,SAAS;AACnB,WAAO,aAAa,KAAK,EAAE,OAAO,2BAA2B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACjF;AACA,QAAM,KAAK,MAAM,UAAU;AAC3B,QAAM,QAAQ,MAAM;AAAA,IAClB;AAAA,IACA;AAAA,IACA,EAAE,IAAI,OAAO,KAAK,GAAG;AAAA,IACrB;AAAA,IACA,EAAE,UAAU,KAAK,UAAU,gBAAgB,KAAK,SAAS,KAAK;AAAA,EAChE;AACA,MAAI,CAAC,SAAS,CAAC,mBAAmB,MAAM,KAAK,GAAG;AAC9C,WAAO,aAAa,KAAK,EAAE,OAAO,sBAAsB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC5E;AACA,MAAI,cAAc,IAAI,MAAM,IAAI,GAAG;AACjC,WAAO,aAAa,KAAK,EAAE,OAAO,wCAAwC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC9F;AACA,QAAM,cAAuC,EAAE,eAAe,MAAM,KAAK;AACzE,MAAI,MAAM,SAAU,aAAY,WAAW,MAAM;AACjD,QAAM,QAAQ,MAAM,GAAG,MAAM,YAAY,WAAW;AACpD,MAAI,QAAQ,GAAG;AACb,WAAO,aAAa,KAAK,EAAE,OAAO,6CAA6C,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACnG;AACA,QAAM,GAAG,OAAO,KAAK,EAAE,MAAM;AAC7B,SAAO,aAAa,KAAK,EAAE,IAAI,KAAK,CAAC;AACvC;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aAAa;AAAA,MACb,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,sBAAsB,QAAQ,4BAA4B;AAAA,MACxF;AAAA,MACA,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,sBAAsB;AAAA,MAC5E;AAAA,IACF;AAAA,IACA,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa;AAAA,MACb,aAAa;AAAA,QACX,aAAa;AAAA,QACb,QAAQ;AAAA,MACV;AAAA,MACA,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,kCAAkC,QAAQ,wBAAwB;AAAA,MAChG;AAAA,MACA,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,qCAAqC,QAAQ,sBAAsB;AAAA,QAC/F,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,sBAAsB;AAAA,QAC1E,EAAE,QAAQ,KAAK,aAAa,kCAAkC,QAAQ,sBAAsB;AAAA,QAC5F,EAAE,QAAQ,KAAK,aAAa,iCAAiC,QAAQ,sBAAsB;AAAA,MAC7F;AAAA,IACF;AAAA,IACA,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aAAa;AAAA,MACb,aAAa;AAAA,QACX,aAAa;AAAA,QACb,QAAQ;AAAA,MACV;AAAA,MACA,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,kCAAkC,QAAQ,wBAAwB;AAAA,MAChG;AAAA,MACA,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,0CAA0C,QAAQ,sBAAsB;AAAA,QACpG,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,sBAAsB;AAAA,QAC1E,EAAE,QAAQ,KAAK,aAAa,kCAAkC,QAAQ,sBAAsB;AAAA,QAC5F,EAAE,QAAQ,KAAK,aAAa,uBAAuB,QAAQ,sBAAsB;AAAA,MACnF;AAAA,IACF;AAAA,IACA,QAAQ;AAAA,MACN,SAAS;AAAA,MACT,aAAa;AAAA,MACb,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,kCAAkC,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,IAAI,EAAE,CAAC,EAAE;AAAA,MAC1G;AAAA,MACA,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,oDAAoD,QAAQ,sBAAsB;AAAA,QAC9G,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,sBAAsB;AAAA,QAC1E,EAAE,QAAQ,KAAK,aAAa,kCAAkC,QAAQ,sBAAsB;AAAA,QAC5F,EAAE,QAAQ,KAAK,aAAa,uBAAuB,QAAQ,sBAAsB;AAAA,QACjF,EAAE,QAAQ,KAAK,aAAa,oBAAoB,QAAQ,sBAAsB;AAAA,MAChF;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/attachments/lib/reconcileOrganization.js

@@ -54,13 +54,15 @@ async function reconcileAttachmentOrganizations(opts) {
     for (let index = 0; index < recordIds.length; index += batchSize) {
       const chunk = recordIds.slice(index, index + batchSize);
       try {
-        const result = await queryEngine.query(entityId, {
-          fields: ["id", "organization_id"],
-          filters: { id: chunk.length === 1 ? { $eq: chunk[0] } : { $in: chunk } },
-          tenantId,
-          withDeleted: true,
-          page: { pageSize: Math.max(chunk.length, 1) }
-        });
+        const result = await em.transactional(
+          async () => queryEngine.query(entityId, {
+            fields: ["id", "organization_id"],
+            filters: { id: chunk.length === 1 ? { $eq: chunk[0] } : { $in: chunk } },
+            tenantId,
+            withDeleted: true,
+            page: { pageSize: Math.max(chunk.length, 1) }
+          })
+        );
         for (const item of result.items ?? []) {
           const record = item;
           const recordId = record.id != null ? String(record.id) : null;

package/dist/modules/attachments/lib/reconcileOrganization.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/attachments/lib/reconcileOrganization.ts"],
-  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport type { QueryEngine } from '@open-mercato/shared/lib/query/types'\nimport { Attachment } from '../data/entities'\n\nconst logger = createLogger('attachments').child({ component: 'reconcileOrganization' })\n\n/**\n * Virtual entity id for library attachments \u2014 these are not attached to a\n * parent record that owns an organization, so there is nothing to reconcile\n * against. They are counted as skipped rather than unresolved.\n */\nconst LIBRARY_ENTITY_ID = 'attachments:library'\n\nconst DEFAULT_BATCH_SIZE = 500\n\nexport type AttachmentOrgReconcileEntityStat = {\n  scanned: number\n  updated: number\n  unresolved: number\n}\n\nexport type AttachmentOrgReconcileReport = {\n  scanned: number\n  updated: number\n  unresolved: number\n  skippedVirtual: number\n  byEntity: Record<string, AttachmentOrgReconcileEntityStat>\n}\n\ntype AttachmentScanRow = {\n  id: string\n  entity_id: string | null\n  record_id: string | null\n  organization_id: string | null\n}\n\nfunction readParentOrganizationId(record: Record<string, unknown>): string | null {\n  const raw = record['organization_id'] ?? record['organizationId']\n  if (typeof raw === 'string' && raw.trim().length) return raw.trim()\n  return null\n}\n\nfunction ensureBucket(\n  report: AttachmentOrgReconcileReport,\n  entityId: string,\n): AttachmentOrgReconcileEntityStat {\n  const existing = report.byEntity[entityId]\n  if (existing) return existing\n  const bucket: AttachmentOrgReconcileEntityStat = { scanned: 0, updated: 0, unresolved: 0 }\n  report.byEntity[entityId] = bucket\n  return bucket\n}\n\n/**\n * Reconcile the `organization_id` of existing attachments to the organization\n * of the record they are attached to.\n *\n * Background (#3765): before the upload route became selected-organization\n * aware, a multi-org admin who switched the header organization uploaded files\n * that were silently stored under their *home* organization instead of the\n * selected one (the organization of the parent record). Those rows are now\n * invisible to org-scoped reads and stay orphaned. This heals them forward.\n *\n * The parent record's organization is the ground truth: an attachment is not\n * distinguishable from a legitimately home-org one by looking at the attachment\n * alone. Parent organizations are resolved generically through the Query Engine\n * by `entityId` (works for both base and custom entities, tenant-scoped and\n * organization-agnostic so the parent's real org is returned regardless of\n * which org the caller sits in) \u2014 the same mechanism the attachments module\n * already uses to enrich assignment details.\n *\n * The reconciliation is:\n * - idempotent \u2014 rows already matching their parent are left untouched;\n * - conservative \u2014 when the parent org cannot be resolved (unregistered\n *   entity id, hard-deleted parent, parent without an org column) the row is\n *   counted as `unresolved` and left as-is rather than guessed at;\n * - tenant-scoped \u2014 it reconciles every attachment in the tenant across all\n *   organizations (the whole point is moving rows between orgs).\n *\n * Writes go through the passed `EntityManager` (which the caller runs inside a\n * transaction) so the whole reconciliation commits atomically.\n */\nexport async function reconcileAttachmentOrganizations(opts: {\n  em: EntityManager\n  queryEngine: QueryEngine\n  tenantId: string\n  batchSize?: number\n}): Promise<AttachmentOrgReconcileReport> {\n  const { em, queryEngine, tenantId } = opts\n  const batchSize = opts.batchSize && opts.batchSize > 0 ? opts.batchSize : DEFAULT_BATCH_SIZE\n  const report: AttachmentOrgReconcileReport = {\n    scanned: 0,\n    updated: 0,\n    unresolved: 0,\n    skippedVirtual: 0,\n    byEntity: {},\n  }\n\n  const rows = (await em.getConnection().execute(\n    'select id, entity_id, record_id, organization_id from attachments where tenant_id = ?',\n    [tenantId],\n  )) as AttachmentScanRow[]\n  report.scanned = rows.length\n  if (!rows.length) return report\n\n  const groups = new Map<string, AttachmentScanRow[]>()\n  for (const row of rows) {\n    if (!row.id || !row.entity_id || !row.record_id) continue\n    const list = groups.get(row.entity_id) ?? []\n    list.push(row)\n    groups.set(row.entity_id, list)\n  }\n\n  const pendingUpdates: Array<{ id: string; organizationId: string }> = []\n\n  for (const [entityId, group] of groups) {\n    const bucket = ensureBucket(report, entityId)\n    bucket.scanned += group.length\n\n    if (entityId === LIBRARY_ENTITY_ID) {\n      report.skippedVirtual += group.length\n      continue\n    }\n\n    const recordIds = Array.from(\n      new Set(group.map((row) => row.record_id).filter((value): value is string => !!value)),\n    )\n    const parentOrgByRecordId = new Map<string, string | null>()\n    let resolvable = true\n\n    for (let index = 0; index < recordIds.length; index += batchSize) {\n      const chunk = recordIds.slice(index, index + batchSize)\n      try {\n        const result = await queryEngine.query(entityId as any, {\n          fields: ['id', 'organization_id'],\n          filters: { id: chunk.length === 1 ? { $eq: chunk[0] } : { $in: chunk } },\n          tenantId,\n          withDeleted: true,\n          page: { pageSize: Math.max(chunk.length, 1) },\n        })\n        for (const item of result.items ?? []) {\n          const record = item as Record<string, unknown>\n          const recordId = record.id != null ? String(record.id) : null\n          if (!recordId) continue\n          parentOrgByRecordId.set(recordId, readParentOrganizationId(record))\n        }\n      } catch (error) {\n        resolvable = false\n        logger.warn('org reconcile: cannot resolve parent organization for entity', {\n          entityId,\n          error,\n        })\n        break\n      }\n    }\n\n    if (!resolvable) {\n      bucket.unresolved += group.length\n      report.unresolved += group.length\n      continue\n    }\n\n    for (const row of group) {\n      const target = row.record_id ? parentOrgByRecordId.get(row.record_id) : null\n      if (!target) {\n        bucket.unresolved += 1\n        report.unresolved += 1\n        continue\n      }\n      if ((row.organization_id ?? null) === target) continue\n      pendingUpdates.push({ id: row.id, organizationId: target })\n      bucket.updated += 1\n      report.updated += 1\n    }\n  }\n\n  for (let index = 0; index < pendingUpdates.length; index += batchSize) {\n    const chunk = pendingUpdates.slice(index, index + batchSize)\n    for (const update of chunk) {\n      const reference = em.getReference(Attachment, update.id)\n      reference.organizationId = update.organizationId\n    }\n    await em.flush()\n  }\n\n  return report\n}\n"],
-  "mappings": "AACA,SAAS,oBAAoB;AAE7B,SAAS,kBAAkB;AAE3B,MAAM,SAAS,aAAa,aAAa,EAAE,MAAM,EAAE,WAAW,wBAAwB,CAAC;AAOvF,MAAM,oBAAoB;AAE1B,MAAM,qBAAqB;AAuB3B,SAAS,yBAAyB,QAAgD;AAChF,QAAM,MAAM,OAAO,iBAAiB,KAAK,OAAO,gBAAgB;AAChE,MAAI,OAAO,QAAQ,YAAY,IAAI,KAAK,EAAE,OAAQ,QAAO,IAAI,KAAK;AAClE,SAAO;AACT;AAEA,SAAS,aACP,QACA,UACkC;AAClC,QAAM,WAAW,OAAO,SAAS,QAAQ;AACzC,MAAI,SAAU,QAAO;AACrB,QAAM,SAA2C,EAAE,SAAS,GAAG,SAAS,GAAG,YAAY,EAAE;AACzF,SAAO,SAAS,QAAQ,IAAI;AAC5B,SAAO;AACT;AA+BA,eAAsB,iCAAiC,MAKb;AACxC,QAAM,EAAE,IAAI,aAAa,SAAS,IAAI;AACtC,QAAM,YAAY,KAAK,aAAa,KAAK,YAAY,IAAI,KAAK,YAAY;AAC1E,QAAM,SAAuC;AAAA,IAC3C,SAAS;AAAA,IACT,SAAS;AAAA,IACT,YAAY;AAAA,IACZ,gBAAgB;AAAA,IAChB,UAAU,CAAC;AAAA,EACb;AAEA,QAAM,OAAQ,MAAM,GAAG,cAAc,EAAE;AAAA,IACrC;AAAA,IACA,CAAC,QAAQ;AAAA,EACX;AACA,SAAO,UAAU,KAAK;AACtB,MAAI,CAAC,KAAK,OAAQ,QAAO;AAEzB,QAAM,SAAS,oBAAI,IAAiC;AACpD,aAAW,OAAO,MAAM;AACtB,QAAI,CAAC,IAAI,MAAM,CAAC,IAAI,aAAa,CAAC,IAAI,UAAW;AACjD,UAAM,OAAO,OAAO,IAAI,IAAI,SAAS,KAAK,CAAC;AAC3C,SAAK,KAAK,GAAG;AACb,WAAO,IAAI,IAAI,WAAW,IAAI;AAAA,EAChC;AAEA,QAAM,iBAAgE,CAAC;AAEvE,aAAW,CAAC,UAAU,KAAK,KAAK,QAAQ;AACtC,UAAM,SAAS,aAAa,QAAQ,QAAQ;AAC5C,WAAO,WAAW,MAAM;AAExB,QAAI,aAAa,mBAAmB;AAClC,aAAO,kBAAkB,MAAM;AAC/B;AAAA,IACF;AAEA,UAAM,YAAY,MAAM;AAAA,MACtB,IAAI,IAAI,MAAM,IAAI,CAAC,QAAQ,IAAI,SAAS,EAAE,OAAO,CAAC,UAA2B,CAAC,CAAC,KAAK,CAAC;AAAA,IACvF;AACA,UAAM,sBAAsB,oBAAI,IAA2B;AAC3D,QAAI,aAAa;AAEjB,aAAS,QAAQ,GAAG,QAAQ,UAAU,QAAQ,SAAS,WAAW;AAChE,YAAM,QAAQ,UAAU,MAAM,OAAO,QAAQ,SAAS;AACtD,UAAI;AACF,cAAM,SAAS,MAAM,YAAY,MAAM,UAAiB;AAAA,UACtD,QAAQ,CAAC,MAAM,iBAAiB;AAAA,UAChC,SAAS,EAAE,IAAI,MAAM,WAAW,IAAI,EAAE,KAAK,MAAM,CAAC,EAAE,IAAI,EAAE,KAAK,MAAM,EAAE;AAAA,UACvE;AAAA,UACA,aAAa;AAAA,UACb,MAAM,EAAE,UAAU,KAAK,IAAI,MAAM,QAAQ,CAAC,EAAE;AAAA,QAC9C,CAAC;AACD,mBAAW,QAAQ,OAAO,SAAS,CAAC,GAAG;AACrC,gBAAM,SAAS;AACf,gBAAM,WAAW,OAAO,MAAM,OAAO,OAAO,OAAO,EAAE,IAAI;AACzD,cAAI,CAAC,SAAU;AACf,8BAAoB,IAAI,UAAU,yBAAyB,MAAM,CAAC;AAAA,QACpE;AAAA,MACF,SAAS,OAAO;AACd,qBAAa;AACb,eAAO,KAAK,gEAAgE;AAAA,UAC1E;AAAA,UACA;AAAA,QACF,CAAC;AACD;AAAA,MACF;AAAA,IACF;AAEA,QAAI,CAAC,YAAY;AACf,aAAO,cAAc,MAAM;AAC3B,aAAO,cAAc,MAAM;AAC3B;AAAA,IACF;AAEA,eAAW,OAAO,OAAO;AACvB,YAAM,SAAS,IAAI,YAAY,oBAAoB,IAAI,IAAI,SAAS,IAAI;AACxE,UAAI,CAAC,QAAQ;AACX,eAAO,cAAc;AACrB,eAAO,cAAc;AACrB;AAAA,MACF;AACA,WAAK,IAAI,mBAAmB,UAAU,OAAQ;AAC9C,qBAAe,KAAK,EAAE,IAAI,IAAI,IAAI,gBAAgB,OAAO,CAAC;AAC1D,aAAO,WAAW;AAClB,aAAO,WAAW;AAAA,IACpB;AAAA,EACF;AAEA,WAAS,QAAQ,GAAG,QAAQ,eAAe,QAAQ,SAAS,WAAW;AACrE,UAAM,QAAQ,eAAe,MAAM,OAAO,QAAQ,SAAS;AAC3D,eAAW,UAAU,OAAO;AAC1B,YAAM,YAAY,GAAG,aAAa,YAAY,OAAO,EAAE;AACvD,gBAAU,iBAAiB,OAAO;AAAA,IACpC;AACA,UAAM,GAAG,MAAM;AAAA,EACjB;AAEA,SAAO;AACT;",
+  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport type { QueryEngine } from '@open-mercato/shared/lib/query/types'\nimport { Attachment } from '../data/entities'\n\nconst logger = createLogger('attachments').child({ component: 'reconcileOrganization' })\n\n/**\n * Virtual entity id for library attachments \u2014 these are not attached to a\n * parent record that owns an organization, so there is nothing to reconcile\n * against. They are counted as skipped rather than unresolved.\n */\nconst LIBRARY_ENTITY_ID = 'attachments:library'\n\nconst DEFAULT_BATCH_SIZE = 500\n\nexport type AttachmentOrgReconcileEntityStat = {\n  scanned: number\n  updated: number\n  unresolved: number\n}\n\nexport type AttachmentOrgReconcileReport = {\n  scanned: number\n  updated: number\n  unresolved: number\n  skippedVirtual: number\n  byEntity: Record<string, AttachmentOrgReconcileEntityStat>\n}\n\ntype AttachmentScanRow = {\n  id: string\n  entity_id: string | null\n  record_id: string | null\n  organization_id: string | null\n}\n\nfunction readParentOrganizationId(record: Record<string, unknown>): string | null {\n  const raw = record['organization_id'] ?? record['organizationId']\n  if (typeof raw === 'string' && raw.trim().length) return raw.trim()\n  return null\n}\n\nfunction ensureBucket(\n  report: AttachmentOrgReconcileReport,\n  entityId: string,\n): AttachmentOrgReconcileEntityStat {\n  const existing = report.byEntity[entityId]\n  if (existing) return existing\n  const bucket: AttachmentOrgReconcileEntityStat = { scanned: 0, updated: 0, unresolved: 0 }\n  report.byEntity[entityId] = bucket\n  return bucket\n}\n\n/**\n * Reconcile the `organization_id` of existing attachments to the organization\n * of the record they are attached to.\n *\n * Background (#3765): before the upload route became selected-organization\n * aware, a multi-org admin who switched the header organization uploaded files\n * that were silently stored under their *home* organization instead of the\n * selected one (the organization of the parent record). Those rows are now\n * invisible to org-scoped reads and stay orphaned. This heals them forward.\n *\n * The parent record's organization is the ground truth: an attachment is not\n * distinguishable from a legitimately home-org one by looking at the attachment\n * alone. Parent organizations are resolved generically through the Query Engine\n * by `entityId` (works for both base and custom entities, tenant-scoped and\n * organization-agnostic so the parent's real org is returned regardless of\n * which org the caller sits in) \u2014 the same mechanism the attachments module\n * already uses to enrich assignment details.\n *\n * The reconciliation is:\n * - idempotent \u2014 rows already matching their parent are left untouched;\n * - conservative \u2014 when the parent org cannot be resolved (unregistered\n *   entity id, hard-deleted parent, parent without an org column) the row is\n *   counted as `unresolved` and left as-is rather than guessed at;\n * - tenant-scoped \u2014 it reconciles every attachment in the tenant across all\n *   organizations (the whole point is moving rows between orgs).\n *\n * Writes go through the passed `EntityManager` (which the caller runs inside a\n * transaction) so the whole reconciliation commits atomically.\n */\nexport async function reconcileAttachmentOrganizations(opts: {\n  em: EntityManager\n  queryEngine: QueryEngine\n  tenantId: string\n  batchSize?: number\n}): Promise<AttachmentOrgReconcileReport> {\n  const { em, queryEngine, tenantId } = opts\n  const batchSize = opts.batchSize && opts.batchSize > 0 ? opts.batchSize : DEFAULT_BATCH_SIZE\n  const report: AttachmentOrgReconcileReport = {\n    scanned: 0,\n    updated: 0,\n    unresolved: 0,\n    skippedVirtual: 0,\n    byEntity: {},\n  }\n\n  const rows = (await em.getConnection().execute(\n    'select id, entity_id, record_id, organization_id from attachments where tenant_id = ?',\n    [tenantId],\n  )) as AttachmentScanRow[]\n  report.scanned = rows.length\n  if (!rows.length) return report\n\n  const groups = new Map<string, AttachmentScanRow[]>()\n  for (const row of rows) {\n    if (!row.id || !row.entity_id || !row.record_id) continue\n    const list = groups.get(row.entity_id) ?? []\n    list.push(row)\n    groups.set(row.entity_id, list)\n  }\n\n  const pendingUpdates: Array<{ id: string; organizationId: string }> = []\n\n  for (const [entityId, group] of groups) {\n    const bucket = ensureBucket(report, entityId)\n    bucket.scanned += group.length\n\n    if (entityId === LIBRARY_ENTITY_ID) {\n      report.skippedVirtual += group.length\n      continue\n    }\n\n    const recordIds = Array.from(\n      new Set(group.map((row) => row.record_id).filter((value): value is string => !!value)),\n    )\n    const parentOrgByRecordId = new Map<string, string | null>()\n    let resolvable = true\n\n    for (let index = 0; index < recordIds.length; index += batchSize) {\n      const chunk = recordIds.slice(index, index + batchSize)\n      try {\n        // An unregistrable entity id makes the Query Engine emit SQL against a\n        // non-existent relation, and a failed statement aborts the surrounding\n        // Postgres transaction the caller runs this reconcile in \u2014 poisoning\n        // the whole backfill (#4145). Running each resolution query inside a\n        // nested transaction scopes the failure to a savepoint, so the catch\n        // below can mark just this group unresolved while every other group\n        // and the final flush keep working.\n        const result = await em.transactional(async () =>\n          queryEngine.query(entityId as any, {\n            fields: ['id', 'organization_id'],\n            filters: { id: chunk.length === 1 ? { $eq: chunk[0] } : { $in: chunk } },\n            tenantId,\n            withDeleted: true,\n            page: { pageSize: Math.max(chunk.length, 1) },\n          }),\n        )\n        for (const item of result.items ?? []) {\n          const record = item as Record<string, unknown>\n          const recordId = record.id != null ? String(record.id) : null\n          if (!recordId) continue\n          parentOrgByRecordId.set(recordId, readParentOrganizationId(record))\n        }\n      } catch (error) {\n        resolvable = false\n        logger.warn('org reconcile: cannot resolve parent organization for entity', {\n          entityId,\n          error,\n        })\n        break\n      }\n    }\n\n    if (!resolvable) {\n      bucket.unresolved += group.length\n      report.unresolved += group.length\n      continue\n    }\n\n    for (const row of group) {\n      const target = row.record_id ? parentOrgByRecordId.get(row.record_id) : null\n      if (!target) {\n        bucket.unresolved += 1\n        report.unresolved += 1\n        continue\n      }\n      if ((row.organization_id ?? null) === target) continue\n      pendingUpdates.push({ id: row.id, organizationId: target })\n      bucket.updated += 1\n      report.updated += 1\n    }\n  }\n\n  for (let index = 0; index < pendingUpdates.length; index += batchSize) {\n    const chunk = pendingUpdates.slice(index, index + batchSize)\n    for (const update of chunk) {\n      const reference = em.getReference(Attachment, update.id)\n      reference.organizationId = update.organizationId\n    }\n    await em.flush()\n  }\n\n  return report\n}\n"],
+  "mappings": "AACA,SAAS,oBAAoB;AAE7B,SAAS,kBAAkB;AAE3B,MAAM,SAAS,aAAa,aAAa,EAAE,MAAM,EAAE,WAAW,wBAAwB,CAAC;AAOvF,MAAM,oBAAoB;AAE1B,MAAM,qBAAqB;AAuB3B,SAAS,yBAAyB,QAAgD;AAChF,QAAM,MAAM,OAAO,iBAAiB,KAAK,OAAO,gBAAgB;AAChE,MAAI,OAAO,QAAQ,YAAY,IAAI,KAAK,EAAE,OAAQ,QAAO,IAAI,KAAK;AAClE,SAAO;AACT;AAEA,SAAS,aACP,QACA,UACkC;AAClC,QAAM,WAAW,OAAO,SAAS,QAAQ;AACzC,MAAI,SAAU,QAAO;AACrB,QAAM,SAA2C,EAAE,SAAS,GAAG,SAAS,GAAG,YAAY,EAAE;AACzF,SAAO,SAAS,QAAQ,IAAI;AAC5B,SAAO;AACT;AA+BA,eAAsB,iCAAiC,MAKb;AACxC,QAAM,EAAE,IAAI,aAAa,SAAS,IAAI;AACtC,QAAM,YAAY,KAAK,aAAa,KAAK,YAAY,IAAI,KAAK,YAAY;AAC1E,QAAM,SAAuC;AAAA,IAC3C,SAAS;AAAA,IACT,SAAS;AAAA,IACT,YAAY;AAAA,IACZ,gBAAgB;AAAA,IAChB,UAAU,CAAC;AAAA,EACb;AAEA,QAAM,OAAQ,MAAM,GAAG,cAAc,EAAE;AAAA,IACrC;AAAA,IACA,CAAC,QAAQ;AAAA,EACX;AACA,SAAO,UAAU,KAAK;AACtB,MAAI,CAAC,KAAK,OAAQ,QAAO;AAEzB,QAAM,SAAS,oBAAI,IAAiC;AACpD,aAAW,OAAO,MAAM;AACtB,QAAI,CAAC,IAAI,MAAM,CAAC,IAAI,aAAa,CAAC,IAAI,UAAW;AACjD,UAAM,OAAO,OAAO,IAAI,IAAI,SAAS,KAAK,CAAC;AAC3C,SAAK,KAAK,GAAG;AACb,WAAO,IAAI,IAAI,WAAW,IAAI;AAAA,EAChC;AAEA,QAAM,iBAAgE,CAAC;AAEvE,aAAW,CAAC,UAAU,KAAK,KAAK,QAAQ;AACtC,UAAM,SAAS,aAAa,QAAQ,QAAQ;AAC5C,WAAO,WAAW,MAAM;AAExB,QAAI,aAAa,mBAAmB;AAClC,aAAO,kBAAkB,MAAM;AAC/B;AAAA,IACF;AAEA,UAAM,YAAY,MAAM;AAAA,MACtB,IAAI,IAAI,MAAM,IAAI,CAAC,QAAQ,IAAI,SAAS,EAAE,OAAO,CAAC,UAA2B,CAAC,CAAC,KAAK,CAAC;AAAA,IACvF;AACA,UAAM,sBAAsB,oBAAI,IAA2B;AAC3D,QAAI,aAAa;AAEjB,aAAS,QAAQ,GAAG,QAAQ,UAAU,QAAQ,SAAS,WAAW;AAChE,YAAM,QAAQ,UAAU,MAAM,OAAO,QAAQ,SAAS;AACtD,UAAI;AAQF,cAAM,SAAS,MAAM,GAAG;AAAA,UAAc,YACpC,YAAY,MAAM,UAAiB;AAAA,YACjC,QAAQ,CAAC,MAAM,iBAAiB;AAAA,YAChC,SAAS,EAAE,IAAI,MAAM,WAAW,IAAI,EAAE,KAAK,MAAM,CAAC,EAAE,IAAI,EAAE,KAAK,MAAM,EAAE;AAAA,YACvE;AAAA,YACA,aAAa;AAAA,YACb,MAAM,EAAE,UAAU,KAAK,IAAI,MAAM,QAAQ,CAAC,EAAE;AAAA,UAC9C,CAAC;AAAA,QACH;AACA,mBAAW,QAAQ,OAAO,SAAS,CAAC,GAAG;AACrC,gBAAM,SAAS;AACf,gBAAM,WAAW,OAAO,MAAM,OAAO,OAAO,OAAO,EAAE,IAAI;AACzD,cAAI,CAAC,SAAU;AACf,8BAAoB,IAAI,UAAU,yBAAyB,MAAM,CAAC;AAAA,QACpE;AAAA,MACF,SAAS,OAAO;AACd,qBAAa;AACb,eAAO,KAAK,gEAAgE;AAAA,UAC1E;AAAA,UACA;AAAA,QACF,CAAC;AACD;AAAA,MACF;AAAA,IACF;AAEA,QAAI,CAAC,YAAY;AACf,aAAO,cAAc,MAAM;AAC3B,aAAO,cAAc,MAAM;AAC3B;AAAA,IACF;AAEA,eAAW,OAAO,OAAO;AACvB,YAAM,SAAS,IAAI,YAAY,oBAAoB,IAAI,IAAI,SAAS,IAAI;AACxE,UAAI,CAAC,QAAQ;AACX,eAAO,cAAc;AACrB,eAAO,cAAc;AACrB;AAAA,MACF;AACA,WAAK,IAAI,mBAAmB,UAAU,OAAQ;AAC9C,qBAAe,KAAK,EAAE,IAAI,IAAI,IAAI,gBAAgB,OAAO,CAAC;AAC1D,aAAO,WAAW;AAClB,aAAO,WAAW;AAAA,IACpB;AAAA,EACF;AAEA,WAAS,QAAQ,GAAG,QAAQ,eAAe,QAAQ,SAAS,WAAW;AACrE,UAAM,QAAQ,eAAe,MAAM,OAAO,QAAQ,SAAS;AAC3D,eAAW,UAAU,OAAO;AAC1B,YAAM,YAAY,GAAG,aAAa,YAAY,OAAO,EAAE;AACvD,gBAAU,iBAAiB,OAAO;AAAA,IACpC;AACA,UAAM,GAAG,MAAM;AAAA,EACjB;AAEA,SAAO;AACT;",
   "names": []
 }

package/dist/modules/catalog/api/products/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../src/modules/catalog/api/products/route.ts"],
-  "sourcesContent": ["import { z } from \"zod\";\nimport type { EntityManager } from \"@mikro-orm/postgresql\";\nimport { makeCrudRoute } from \"@open-mercato/shared/lib/crud/factory\";\nimport { CrudHttpError } from \"@open-mercato/shared/lib/crud/errors\";\nimport {\n  buildCustomFieldFiltersFromQuery,\n  extractAllCustomFieldEntries,\n} from \"@open-mercato/shared/lib/crud/custom-fields\";\nimport { resolveTranslations } from \"@open-mercato/shared/lib/i18n/server\";\nimport {\n  CatalogOffer,\n  CatalogProduct,\n  CatalogProductCategory,\n  CatalogProductCategoryAssignment,\n  CatalogProductPrice,\n  CatalogProductUnitConversion,\n  CatalogProductVariant,\n  CatalogProductTagAssignment,\n} from \"../../data/entities\";\nimport { CATALOG_PRODUCT_TYPES } from \"../../data/types\";\nimport type { CatalogProductType } from \"../../data/types\";\nimport {\n  productCreateSchema,\n  productUpdateSchema,\n} from \"../../data/validators\";\nimport { parseScopedCommandInput, resolveCrudRecordId } from \"../utils\";\nimport { splitCustomFieldPayload } from \"@open-mercato/shared/lib/crud/custom-fields\";\nimport { E } from \"#generated/entities.ids.generated\";\nimport * as F from \"#generated/entities/catalog_product\";\nimport { parseBooleanFlag, sanitizeSearchTerm } from \"../helpers\";\nimport { escapeLikePattern } from \"@open-mercato/shared/lib/db/escapeLikePattern\";\nimport type { CrudCtx } from \"@open-mercato/shared/lib/crud/factory\";\nimport { buildScopedWhere } from \"@open-mercato/shared/lib/api/crud\";\nimport {\n  resolvePriceChannelId,\n  resolvePriceOfferId,\n  resolvePriceVariantId,\n  resolvePriceKindCode,\n  type PricingContext,\n  type PriceRow,\n} from \"../../lib/pricing\";\nimport type { CatalogPricingService } from \"../../services/catalogPricingService\";\nimport { fieldsetCodeRegex } from \"@open-mercato/core/modules/entities/data/validators\";\nimport { SalesChannel } from \"@open-mercato/core/modules/sales/data/entities\";\nimport {\n  createCatalogCrudOpenApi,\n  createPagedListResponseSchema,\n  defaultOkResponseSchema,\n} from \"../openapi\";\nimport { findWithDecryption } from \"@open-mercato/shared/lib/encryption/find\";\nimport { canonicalizeUnitCode, toUnitLookupKey } from \"../../lib/unitCodes\";\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('catalog')\nconst rawBodySchema = z.object({}).passthrough();\n\nconst UUID_REGEX =\n  /^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-5][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}$/;\n\nconst listSchema = z\n  .object({\n    page: z.coerce.number().min(1).default(1),\n    pageSize: z.coerce.number().min(1).max(100).default(50),\n    id: z.string().uuid().optional(),\n    search: z.string().optional(),\n    status: z.string().optional(),\n    isActive: z.string().optional(),\n    configurable: z.string().optional(),\n    productType: z.enum(CATALOG_PRODUCT_TYPES).optional(),\n    channelIds: z.string().optional(),\n    channelId: z.string().uuid().optional(),\n    categoryIds: z.string().optional(),\n    tagIds: z.string().optional(),\n    offerId: z.string().uuid().optional(),\n    userId: z.string().uuid().optional(),\n    userGroupId: z.string().uuid().optional(),\n    customerId: z.string().uuid().optional(),\n    customerGroupId: z.string().uuid().optional(),\n    quantity: z.coerce.number().min(1).max(100000).optional(),\n    quantityUnit: z.string().trim().max(50).optional(),\n    priceDate: z.string().optional(),\n    sortField: z.string().optional(),\n    sortDir: z.enum([\"asc\", \"desc\"]).optional(),\n    withDeleted: z.coerce.boolean().optional(),\n    customFieldset: z.string().regex(fieldsetCodeRegex).optional(),\n  })\n  .passthrough();\n\ntype ProductsQuery = z.infer<typeof listSchema>;\n\nconst routeMetadata = {\n  GET: { requireAuth: true, requireFeatures: [\"catalog.products.view\"] },\n  POST: { requireAuth: true, requireFeatures: [\"catalog.products.manage\"] },\n  PUT: { requireAuth: true, requireFeatures: [\"catalog.products.manage\"] },\n  DELETE: { requireAuth: true, requireFeatures: [\"catalog.products.manage\"] },\n};\n\nexport const metadata = routeMetadata;\n\nexport function parseIdList(raw?: string): string[] {\n  if (!raw) return [];\n  return raw\n    .split(\",\")\n    .map((value) => value.trim())\n    .filter((value) => UUID_REGEX.test(value));\n}\n\nexport async function buildProductFilters(\n  query: ProductsQuery,\n  ctx: CrudCtx,\n): Promise<Record<string, unknown>> {\n  const filters: Record<string, unknown> = {};\n  const em = (ctx.container.resolve(\"em\") as EntityManager).fork();\n  const restrictedProductIds: { value: Set<string> | null } = { value: null };\n\n  const intersectProductIds = (ids: string[]) => {\n    const normalized = ids.filter(\n      (id): id is string => typeof id === \"string\" && id.trim().length > 0,\n    );\n    const current = new Set(normalized);\n    if (!current.size) {\n      restrictedProductIds.value = new Set();\n      return;\n    }\n    if (!restrictedProductIds.value) {\n      restrictedProductIds.value = current;\n      return;\n    }\n    restrictedProductIds.value = new Set(\n      Array.from(restrictedProductIds.value).filter((id) => current.has(id)),\n    );\n  };\n\n  const applyRestrictedProducts = () => {\n    if (!restrictedProductIds.value) return;\n    if (restrictedProductIds.value.size === 0) {\n      filters.id = { $eq: \"00000000-0000-0000-0000-000000000000\" };\n      return;\n    }\n    const ids = Array.from(restrictedProductIds.value);\n    const existing = filters.id as Record<string, unknown> | undefined;\n    if (existing && typeof existing === \"object\") {\n      if (\n        \"$eq\" in existing &&\n        typeof (existing as { $eq?: unknown }).$eq === \"string\"\n      ) {\n        const target = (existing as { $eq: string }).$eq;\n        if (!restrictedProductIds.value.has(target)) {\n          filters.id = { $eq: \"00000000-0000-0000-0000-000000000000\" };\n        }\n        return;\n      }\n      if (\n        \"$in\" in existing &&\n        Array.isArray((existing as { $in?: unknown }).$in)\n      ) {\n        const subset = (existing as { $in: string[] }).$in.filter((id) =>\n          restrictedProductIds.value!.has(id),\n        );\n        filters.id = subset.length\n          ? { $in: subset }\n          : { $eq: \"00000000-0000-0000-0000-000000000000\" };\n        return;\n      }\n    }\n    filters.id = ids.length === 1 ? { $eq: ids[0] } : { $in: ids };\n  };\n  if (query.id) {\n    filters.id = { $eq: query.id };\n  }\n  if (query.status && query.status.trim()) {\n    filters.status_entry_id = { $eq: query.status.trim() };\n  }\n  const active = parseBooleanFlag(query.isActive);\n  if (active !== undefined) {\n    filters.is_active = active;\n  }\n  const configurable = parseBooleanFlag(query.configurable);\n  if (configurable !== undefined) {\n    filters.is_configurable = configurable;\n  }\n  if (query.productType) {\n    filters.product_type = { $eq: query.productType };\n  }\n  const scope = {\n    organizationId: ctx.selectedOrganizationId ?? ctx.auth?.orgId ?? null,\n    tenantId: ctx.auth?.tenantId ?? null,\n  };\n  const term = sanitizeSearchTerm(query.search);\n  const channelFilterIds = parseIdList(query.channelIds);\n  const categoryFilterIds = parseIdList(query.categoryIds);\n  const tagFilterIds = parseIdList(query.tagIds);\n  const customFieldset =\n    typeof query.customFieldset === \"string\" &&\n    query.customFieldset.trim().length\n      ? query.customFieldset.trim()\n      : null;\n  const tenantId = ctx.auth?.tenantId ?? null;\n\n  // These prequeries are independent \u2014 each only feeds the final product-id\n  // intersection, none depends on another's result \u2014 so dispatch them together\n  // instead of awaiting one after another (#3179). A task returns null when its\n  // filter is inactive (intersection skipped) or the matched product-id list\n  // (possibly empty) when active, preserving the \"active filter with no matches\n  // => empty result\" behavior.\n  const searchTask = async (): Promise<string[] | null> => {\n    if (!term) return null;\n    const like = `%${escapeLikePattern(term)}%`;\n    const searchMatches = await findWithDecryption(\n      em,\n      CatalogProduct,\n      {\n        ...scope,\n        ...(query.withDeleted ? {} : { deletedAt: null }),\n        $or: [\n          { title: { $ilike: like } },\n          { subtitle: { $ilike: like } },\n          { description: { $ilike: like } },\n          { sku: { $ilike: like } },\n          { handle: { $ilike: like } },\n        ],\n      },\n      { fields: [\"id\"] },\n      scope,\n    );\n    return searchMatches\n      .map((product) => product.id)\n      .filter((id): id is string => typeof id === \"string\" && id.length > 0);\n  };\n\n  const channelTask = async (): Promise<string[] | null> => {\n    if (!channelFilterIds.length) return null;\n    const offerRows = await findWithDecryption(\n      em,\n      CatalogOffer,\n      {\n        channelId: { $in: channelFilterIds },\n        deletedAt: null,\n        ...scope,\n      },\n      { fields: [\"id\", \"product\"] },\n      scope,\n    );\n    return offerRows\n      .map((offer) =>\n        typeof offer.product === \"string\"\n          ? offer.product\n          : (offer.product?.id ?? null),\n      )\n      .filter((id): id is string => !!id);\n  };\n\n  const categoryTask = async (): Promise<string[] | null> => {\n    if (!categoryFilterIds.length) return null;\n    const assignments = await findWithDecryption(\n      em,\n      CatalogProductCategoryAssignment,\n      { category: { $in: categoryFilterIds }, ...scope },\n      { fields: [\"id\", \"product\"] },\n      scope,\n    );\n    return assignments\n      .map((assignment) =>\n        typeof assignment.product === \"string\"\n          ? assignment.product\n          : (assignment.product?.id ?? null),\n      )\n      .filter((id): id is string => !!id);\n  };\n\n  const tagTask = async (): Promise<string[] | null> => {\n    if (!tagFilterIds.length) return null;\n    const assignments = await findWithDecryption(\n      em,\n      CatalogProductTagAssignment,\n      { tag: { $in: tagFilterIds }, ...scope },\n      { fields: [\"id\", \"product\"] },\n      scope,\n    );\n    return assignments\n      .map((assignment) =>\n        typeof assignment.product === \"string\"\n          ? assignment.product\n          : (assignment.product?.id ?? null),\n      )\n      .filter((id): id is string => !!id);\n  };\n\n  const customFieldTask = async (): Promise<Record<string, unknown>> => {\n    try {\n      const scopedEm = ctx.container.resolve(\"em\") as EntityManager;\n      return await buildCustomFieldFiltersFromQuery({\n        entityIds: [E.catalog.catalog_product],\n        query,\n        em: scopedEm,\n        tenantId,\n        fieldset: customFieldset ?? undefined,\n      });\n    } catch (err) {\n      // Custom field filter parsing may fail for non-existent or misconfigured fields.\n      // Fall back to base filters to avoid blocking the product listing.\n      logger.debug('catalog.products custom field filter error', { err });\n      return {};\n    }\n  };\n\n  const [searchIds, channelIds, categoryIds, tagIds, cfFilters] =\n    await Promise.all([\n      searchTask(),\n      channelTask(),\n      categoryTask(),\n      tagTask(),\n      customFieldTask(),\n    ]);\n\n  // Apply intersections in the original order; intersection is commutative, so\n  // the result is identical to the previous sequential pass. An empty array is\n  // still intersected (active filter that matched nothing); null is skipped.\n  for (const productIds of [searchIds, channelIds, categoryIds, tagIds]) {\n    if (productIds) intersectProductIds(productIds);\n  }\n  Object.assign(filters, cfFilters);\n  applyRestrictedProducts();\n  return filters;\n}\n\nexport function buildPricingContext(\n  query: ProductsQuery,\n  channelFallback: string | null,\n): PricingContext {\n  const quantity = Number.isFinite(Number(query.quantity))\n    ? Number(query.quantity)\n    : 1;\n  const parsedDate = query.priceDate ? new Date(query.priceDate) : new Date();\n  const channelId = query.channelId ?? channelFallback ?? null;\n  return {\n    channelId,\n    offerId: query.offerId ?? null,\n    userId: query.userId ?? null,\n    userGroupId: query.userGroupId ?? null,\n    customerId: query.customerId ?? null,\n    customerGroupId: query.customerGroupId ?? null,\n    quantity: Number.isFinite(quantity) && quantity > 0 ? quantity : 1,\n    date: Number.isNaN(parsedDate.getTime()) ? new Date() : parsedDate,\n  };\n}\n\ntype ProductListItem = Record<string, unknown> & {\n  id?: string;\n  title?: string | null;\n  subtitle?: string | null;\n  description?: string | null;\n  sku?: string | null;\n  handle?: string | null;\n  product_type?: CatalogProductType | null;\n  primary_currency_code?: string | null;\n  default_unit?: string | null;\n  default_sales_unit?: string | null;\n  default_sales_unit_quantity?: number | null;\n  uom_rounding_scale?: number | null;\n  uom_rounding_mode?: \"half_up\" | \"down\" | \"up\" | null;\n  unit_price_enabled?: boolean | null;\n  unit_price_reference_unit?: \"kg\" | \"l\" | \"m2\" | \"m3\" | \"pc\" | null;\n  unit_price_base_quantity?: number | null;\n  default_media_id?: string | null;\n  default_media_url?: string | null;\n  weight_value?: string | null;\n  weightValue?: string | null;\n  weight_unit?: string | null;\n  weightUnit?: string | null;\n  dimensions?: Record<string, unknown> | null;\n  custom_fieldset_code?: string | null;\n  option_schema_id?: string | null;\n  offers?: Array<Record<string, unknown>>;\n  channelIds?: string[];\n  categories?: Array<Record<string, unknown>>;\n  categoryIds?: string[];\n  tags?: string[];\n};\n\nasync function decorateProductsAfterList(\n  payload: { items?: ProductListItem[] },\n  ctx: CrudCtx & { query: ProductsQuery },\n): Promise<void> {\n  const items = Array.isArray(payload?.items) ? payload.items : [];\n  if (!items.length) return;\n  const productIds = items\n    .map((item) => (typeof item.id === \"string\" ? item.id : null))\n    .filter((id): id is string => !!id);\n  if (!productIds.length) return;\n  try {\n    const em = (ctx.container.resolve(\"em\") as EntityManager).fork();\n    const scope = {\n      organizationId: ctx.selectedOrganizationId ?? ctx.auth?.orgId ?? null,\n      tenantId: ctx.auth?.tenantId ?? null,\n    };\n    const offers = await findWithDecryption(\n      em,\n      CatalogOffer,\n      { product: { $in: productIds }, deletedAt: null, ...scope },\n      { orderBy: { createdAt: \"asc\" } },\n      scope,\n    );\n    const channelIds = Array.from(\n      new Set(\n        offers\n          .map((offer) => offer.channelId)\n          .filter(\n            (id): id is string => typeof id === \"string\" && id.length > 0,\n          ),\n      ),\n    );\n    const channelLookup = new Map<\n      string,\n      { name?: string | null; code?: string | null }\n    >();\n    if (channelIds.length) {\n      const scopedChannelsWhere = buildScopedWhere(\n        { id: { $in: channelIds } },\n        {\n          organizationId: ctx.selectedOrganizationId ?? ctx.auth?.orgId ?? null,\n          organizationIds: Array.isArray(ctx.organizationIds)\n            ? ctx.organizationIds\n            : undefined,\n          tenantId: ctx.auth?.tenantId ?? null,\n        },\n      );\n      const channels = await findWithDecryption(em, SalesChannel, scopedChannelsWhere, {\n        fields: [\"id\", \"name\", \"code\"],\n      });\n      for (const channel of channels) {\n        channelLookup.set(channel.id, {\n          name: channel.name,\n          code: channel.code ?? null,\n        });\n      }\n    }\n    const offersByProduct = new Map<string, Array<Record<string, unknown>>>();\n    for (const offer of offers) {\n      const productId =\n        typeof offer.product === \"string\"\n          ? offer.product\n          : (offer.product?.id ?? null);\n      if (!productId) continue;\n      const channelInfo = channelLookup.get(offer.channelId);\n      const entry = offersByProduct.get(productId) ?? [];\n      entry.push({\n        id: offer.id,\n        channelId: offer.channelId,\n        channelName: channelInfo?.name ?? null,\n        channelCode: channelInfo?.code ?? null,\n        title: offer.title,\n        description: offer.description ?? null,\n        isActive: offer.isActive,\n        defaultMediaId: offer.defaultMediaId ?? null,\n        defaultMediaUrl: offer.defaultMediaUrl ?? null,\n        metadata: offer.metadata ?? null,\n        updatedAt:\n          offer.updatedAt instanceof Date\n            ? offer.updatedAt.toISOString()\n            : (typeof offer.updatedAt === \"string\" ? offer.updatedAt : null),\n      });\n      offersByProduct.set(productId, entry);\n    }\n\n    const categoryAssignments = await findWithDecryption(\n      em,\n      CatalogProductCategoryAssignment,\n      { product: { $in: productIds }, ...scope },\n      { populate: [\"category\"], orderBy: { position: \"asc\" } },\n      scope,\n    );\n    const parentIds = new Set<string>();\n    for (const assignment of categoryAssignments) {\n      const category =\n        typeof assignment.category === \"string\"\n          ? null\n          : (assignment.category ?? null);\n      if (!category) continue;\n      const parentId = category.parentId ?? null;\n      if (parentId) parentIds.add(parentId);\n    }\n    const parentCategories = parentIds.size\n      ? await findWithDecryption(\n          em,\n          CatalogProductCategory,\n          { id: { $in: Array.from(parentIds) }, ...scope },\n          { fields: [\"id\", \"name\"] },\n          scope,\n        )\n      : [];\n    const parentNameById = new Map<string, string | null>();\n    for (const parent of parentCategories) {\n      parentNameById.set(parent.id, parent.name ?? null);\n    }\n    const categoriesByProduct = new Map<\n      string,\n      Array<{\n        id: string;\n        name: string | null;\n        treePath: string | null;\n        parentId: string | null;\n        parentName: string | null;\n      }>\n    >();\n    for (const assignment of categoryAssignments) {\n      const productId =\n        typeof assignment.product === \"string\"\n          ? assignment.product\n          : (assignment.product?.id ?? null);\n      if (!productId) continue;\n      const category =\n        typeof assignment.category === \"string\"\n          ? null\n          : (assignment.category ?? null);\n      if (!category) continue;\n      const parentId = category.parentId ?? null;\n      const parentName = parentId\n        ? (parentNameById.get(parentId) ?? null)\n        : null;\n      const bucket = categoriesByProduct.get(productId) ?? [];\n      bucket.push({\n        id: category.id,\n        name: category.name ?? null,\n        treePath: category.treePath ?? null,\n        parentId,\n        parentName,\n      });\n      categoriesByProduct.set(productId, bucket);\n    }\n\n    const tagAssignments = await findWithDecryption(\n      em,\n      CatalogProductTagAssignment,\n      { product: { $in: productIds } },\n      { populate: [\"tag\"] },\n      {\n        tenantId: ctx.auth?.tenantId ?? null,\n        organizationId: ctx.auth?.orgId ?? null,\n      },\n    );\n    const tagsByProduct = new Map<string, string[]>();\n    for (const assignment of tagAssignments) {\n      const productId =\n        typeof assignment.product === \"string\"\n          ? assignment.product\n          : (assignment.product?.id ?? null);\n      if (!productId) continue;\n      const tag =\n        typeof assignment.tag === \"string\" ? null : (assignment.tag ?? null);\n      if (!tag) continue;\n      const label =\n        typeof tag.label === \"string\" && tag.label.trim().length\n          ? tag.label\n          : null;\n      if (!label) continue;\n      const bucket = tagsByProduct.get(productId) ?? [];\n      bucket.push(label);\n      tagsByProduct.set(productId, bucket);\n    }\n\n    const variants = await findWithDecryption(\n      em,\n      CatalogProductVariant,\n      { product: { $in: productIds }, deletedAt: null, ...scope },\n      { fields: [\"id\", \"product\"] },\n      scope,\n    );\n    const variantToProduct = new Map<string, string>();\n    for (const variant of variants) {\n      const productId =\n        typeof variant.product === \"string\"\n          ? variant.product\n          : (variant.product?.id ?? null);\n      if (!productId) continue;\n      variantToProduct.set(variant.id, productId);\n    }\n    const variantIds = Array.from(variantToProduct.keys());\n    const priceWhere =\n      variantIds.length > 0\n        ? {\n            $or: [\n              { product: { $in: productIds } },\n              { variant: { $in: variantIds } },\n            ],\n          }\n        : { product: { $in: productIds } };\n    const priceRows = await findWithDecryption(\n      em,\n      CatalogProductPrice,\n      { ...priceWhere, ...scope },\n      { populate: [\"offer\", \"variant\", \"product\", \"priceKind\"] },\n      scope,\n    );\n    const pricesByProduct = new Map<string, PriceRow[]>();\n    for (const price of priceRows) {\n      let productId: string | null = null;\n      if (price.product) {\n        productId =\n          typeof price.product === \"string\"\n            ? price.product\n            : (price.product?.id ?? null);\n      } else if (price.variant) {\n        const variantId =\n          typeof price.variant === \"string\" ? price.variant : price.variant.id;\n        productId = variantToProduct.get(variantId) ?? null;\n      }\n      if (!productId) continue;\n      const entry = pricesByProduct.get(productId) ?? [];\n      entry.push(price);\n      pricesByProduct.set(productId, entry);\n    }\n\n    const requestQuantityUnitKey = toUnitLookupKey(\n      ctx.query.quantityUnit,\n    );\n    const conversionsByProduct = new Map<string, Map<string, number>>();\n    const conversionOrganizationId =\n      ctx.selectedOrganizationId ?? ctx.auth?.orgId ?? null;\n    const conversionTenantId = ctx.auth?.tenantId ?? null;\n    if (\n      requestQuantityUnitKey &&\n      productIds.length &&\n      conversionOrganizationId &&\n      conversionTenantId\n    ) {\n      const conversionRows = await findWithDecryption(\n        em,\n        CatalogProductUnitConversion,\n        {\n          product: { $in: productIds },\n          organizationId: conversionOrganizationId,\n          tenantId: conversionTenantId,\n          deletedAt: null,\n          isActive: true,\n        },\n        { fields: [\"id\", \"product\", \"unitCode\", \"toBaseFactor\"] },\n        { organizationId: conversionOrganizationId, tenantId: conversionTenantId },\n      );\n      for (const row of conversionRows) {\n        const productId =\n          typeof row.product === \"string\"\n            ? row.product\n            : (row.product?.id ?? null);\n        const unitKey = toUnitLookupKey(row.unitCode);\n        const factor = Number(row.toBaseFactor);\n        if (!productId || !unitKey || !Number.isFinite(factor) || factor <= 0)\n          continue;\n        const bucket =\n          conversionsByProduct.get(productId) ?? new Map<string, number>();\n        bucket.set(unitKey, factor);\n        conversionsByProduct.set(productId, bucket);\n      }\n    }\n\n    const channelFilterIds = parseIdList(ctx.query.channelIds);\n    const channelContext =\n      ctx.query.channelId ??\n      (channelFilterIds.length === 1 ? channelFilterIds[0] : null);\n    const pricingContext = buildPricingContext(ctx.query, channelContext);\n    const pricingService = ctx.container.resolve<CatalogPricingService>(\n      \"catalogPricingService\",\n    );\n\n    const pricingEntries: Array<{ rows: PriceRow[]; context: PricingContext } | null> = [];\n    for (const item of items) {\n      const id = typeof item.id === \"string\" ? item.id : null;\n      if (!id) {\n        pricingEntries.push(null);\n        continue;\n      }\n      const offerEntries = offersByProduct.get(id) ?? [];\n      item.offers = offerEntries;\n      const channelIds = Array.from(\n        new Set(\n          offerEntries\n            .map((offer) =>\n              typeof offer.channelId === \"string\" ? offer.channelId : null,\n            )\n            .filter((channelId): channelId is string => !!channelId),\n        ),\n      );\n      item.channelIds = channelIds;\n      const categories = categoriesByProduct.get(id) ?? [];\n      item.categories = categories;\n      item.categoryIds = categories.map((category) => category.id);\n      item.tags = tagsByProduct.get(id) ?? [];\n      if (item.is_quote_only === true) {\n        item.pricing = null;\n        pricingEntries.push(null);\n        continue;\n      }\n      const priceCandidates = pricesByProduct.get(id) ?? [];\n      const normalizedQuantityForPricing = (() => {\n        if (!requestQuantityUnitKey) return pricingContext.quantity;\n        const baseUnit = toUnitLookupKey(item.default_unit);\n        if (!baseUnit || requestQuantityUnitKey === baseUnit)\n          return pricingContext.quantity;\n        const productConversions = conversionsByProduct.get(id);\n        const factor = productConversions?.get(requestQuantityUnitKey) ?? null;\n        if (!factor || !Number.isFinite(factor) || factor <= 0) {\n          logger.debug('catalog.products invalid conversion factor', { productId: id, unit: requestQuantityUnitKey, factor });\n          return pricingContext.quantity;\n        }\n        const normalized = pricingContext.quantity * factor;\n        return Number.isFinite(normalized) && normalized > 0\n          ? normalized\n          : pricingContext.quantity;\n      })();\n      const channelScopedContext =\n        pricingContext.channelId || channelIds.length !== 1\n          ? pricingContext\n          : { ...pricingContext, channelId: channelIds[0] };\n      pricingEntries.push({\n        rows: priceCandidates,\n        context: { ...channelScopedContext, quantity: normalizedQuantityForPricing },\n      });\n    }\n\n    const resolveInputs: Array<{ rows: PriceRow[]; context: PricingContext }> = [];\n    const resolveIndices: number[] = [];\n    for (let i = 0; i < pricingEntries.length; i++) {\n      if (pricingEntries[i] !== null) {\n        resolveInputs.push(pricingEntries[i]!);\n        resolveIndices.push(i);\n      }\n    }\n    const priceResults = await pricingService.resolvePriceMany(resolveInputs);\n\n    for (let i = 0; i < resolveIndices.length; i++) {\n      const item = items[resolveIndices[i]];\n      const best = priceResults[i];\n      if (best) {\n        item.pricing = {\n          kind: resolvePriceKindCode(best),\n          price_kind_id:\n            typeof best.priceKind === \"string\"\n              ? best.priceKind\n              : (best.priceKind?.id ?? null),\n          price_kind_code: resolvePriceKindCode(best),\n          currency_code: best.currencyCode,\n          unit_price_net: best.unitPriceNet,\n          unit_price_gross: best.unitPriceGross,\n          min_quantity: best.minQuantity,\n          max_quantity: best.maxQuantity ?? null,\n          tax_rate: best.taxRate ?? null,\n          tax_amount: best.taxAmount ?? null,\n          scope: {\n            variant_id: resolvePriceVariantId(best),\n            offer_id: resolvePriceOfferId(best),\n            channel_id: resolvePriceChannelId(best),\n            user_id: best.userId ?? null,\n            user_group_id: best.userGroupId ?? null,\n            customer_id: best.customerId ?? null,\n            customer_group_id: best.customerGroupId ?? null,\n          },\n        };\n      } else {\n        item.pricing = null;\n      }\n    }\n  } catch (error) {\n    logger.error('decorateProductsAfterList Failed to load unit conversions', { err: error });\n  }\n\n  const searchTerm = ctx.query.search ? sanitizeSearchTerm(ctx.query.search) : null;\n  if (searchTerm && !ctx.query.sortField && Array.isArray(payload.items)) {\n    const needle = searchTerm.toLowerCase();\n    payload.items.sort((a, b) => {\n      const scoreA = scoreProductSearchRelevance(needle, a.title, a.sku);\n      const scoreB = scoreProductSearchRelevance(needle, b.title, b.sku);\n      if (scoreA !== scoreB) return scoreA - scoreB;\n      return (a.title ?? \"\").localeCompare(b.title ?? \"\");\n    });\n  }\n}\n\nexport function scoreProductSearchRelevance(\n  needle: string,\n  title: string | null | undefined,\n  sku: string | null | undefined,\n): number {\n  const t = (title ?? \"\").toLowerCase();\n  const s = (sku ?? \"\").toLowerCase();\n  if (t === needle) return 0;\n  if (s === needle) return 1;\n  if (t.startsWith(needle)) return 2;\n  if (s.startsWith(needle)) return 3;\n  if (t.includes(needle)) return 4;\n  if (s.includes(needle)) return 5;\n  return 6;\n}\n\nconst crud = makeCrudRoute({\n  metadata: routeMetadata,\n  orm: {\n    entity: CatalogProduct,\n    idField: \"id\",\n    orgField: \"organizationId\",\n    tenantField: \"tenantId\",\n    softDeleteField: \"deletedAt\",\n  },\n  indexer: {\n    entityType: E.catalog.catalog_product,\n  },\n  list: {\n    schema: listSchema,\n    entityId: E.catalog.catalog_product,\n    fields: [\n      F.id,\n      F.title,\n      F.subtitle,\n      F.description,\n      F.sku,\n      F.handle,\n      \"tax_rate_id\",\n      \"tax_rate\",\n      F.product_type,\n      F.status_entry_id,\n      F.primary_currency_code,\n      F.default_unit,\n      \"default_sales_unit\",\n      \"default_sales_unit_quantity\",\n      \"uom_rounding_scale\",\n      \"uom_rounding_mode\",\n      \"unit_price_enabled\",\n      \"unit_price_reference_unit\",\n      \"unit_price_base_quantity\",\n      F.default_media_id,\n      F.default_media_url,\n      F.weight_value,\n      F.weight_unit,\n      F.dimensions,\n      F.is_configurable,\n      F.is_active,\n      \"country_of_origin_code\",\n      \"pkwiu_code\",\n      \"cn_code\",\n      \"hs_code\",\n      \"tax_classification_code\",\n      \"gtu_codes\",\n      \"age_min\",\n      \"is_excise_good\",\n      \"excise_category\",\n      \"requires_prescription\",\n      \"hazmat_class\",\n      \"un_number\",\n      \"hazmat_packing_group\",\n      \"contains_lithium_battery\",\n      \"launch_at\",\n      \"end_of_life_at\",\n      \"available_from\",\n      \"available_until\",\n      \"min_order_qty\",\n      \"max_order_qty\",\n      \"order_qty_increment\",\n      \"requires_shipping\",\n      \"is_quote_only\",\n      \"seo_title\",\n      \"seo_description\",\n      \"canonical_url\",\n      F.metadata,\n      \"custom_fieldset_code\",\n      \"option_schema_id\",\n      F.created_at,\n      F.updated_at,\n    ],\n    decorateCustomFields: { entityIds: [E.catalog.catalog_product] },\n    sortFieldMap: {\n      title: F.title,\n      sku: F.sku,\n      createdAt: F.created_at,\n      updatedAt: F.updated_at,\n    },\n    buildFilters: buildProductFilters,\n    transformItem: (item: ProductListItem | null | undefined) => {\n      if (!item) return item;\n      const normalized = { ...item };\n      const cfEntries = extractAllCustomFieldEntries(item);\n      for (const key of Object.keys(normalized)) {\n        if (key.startsWith(\"cf:\")) {\n          delete normalized[key];\n        }\n      }\n      const defaultUnit = canonicalizeUnitCode(normalized.default_unit) ?? null;\n      const defaultSalesUnit =\n        canonicalizeUnitCode(normalized.default_sales_unit) ?? null;\n      const unitPriceReferenceUnit =\n        canonicalizeUnitCode(normalized.unit_price_reference_unit) ?? null;\n      return {\n        ...normalized,\n        default_unit: defaultUnit,\n        default_sales_unit: defaultSalesUnit,\n        unit_price_reference_unit: unitPriceReferenceUnit,\n        ...cfEntries,\n        unit_price: {\n          enabled: Boolean(normalized.unit_price_enabled),\n          reference_unit: unitPriceReferenceUnit,\n          base_quantity: normalized.unit_price_base_quantity ?? null,\n        },\n      };\n    },\n  },\n  hooks: {\n    afterList: decorateProductsAfterList,\n  },\n  actions: {\n    create: {\n      commandId: \"catalog.products.create\",\n      schema: rawBodySchema,\n      mapInput: async ({ raw, ctx }) => {\n        const { translate } = await resolveTranslations();\n        const parsed = parseScopedCommandInput(\n          productCreateSchema,\n          raw ?? {},\n          ctx,\n          translate,\n        );\n        const { base, custom } = splitCustomFieldPayload(parsed);\n        return Object.keys(custom).length\n          ? { ...base, customFields: custom }\n          : base;\n      },\n      response: ({ result }) => ({\n        id: result?.productId ?? result?.id ?? null,\n      }),\n      status: 201,\n    },\n    update: {\n      commandId: \"catalog.products.update\",\n      schema: rawBodySchema,\n      mapInput: async ({ raw, ctx }) => {\n        const { translate } = await resolveTranslations();\n        const parsed = parseScopedCommandInput(\n          productUpdateSchema,\n          raw ?? {},\n          ctx,\n          translate,\n        );\n        const { base, custom } = splitCustomFieldPayload(parsed);\n        return Object.keys(custom).length\n          ? { ...base, customFields: custom }\n          : base;\n      },\n      response: () => ({ ok: true }),\n    },\n    delete: {\n      commandId: \"catalog.products.delete\",\n      schema: rawBodySchema,\n      mapInput: async ({ parsed, ctx }) => {\n        const { translate } = await resolveTranslations();\n        const id = resolveCrudRecordId(parsed, ctx, translate);\n        if (!id)\n          throw new CrudHttpError(400, {\n            error: translate(\n              \"catalog.errors.id_required\",\n              \"Product id is required.\",\n            ),\n          });\n        return { id };\n      },\n      response: () => ({ ok: true }),\n    },\n  },\n});\n\nexport const GET = crud.GET;\nexport const POST = crud.POST;\nexport const PUT = crud.PUT;\nexport const DELETE = crud.DELETE;\n\nconst productListItemSchema = z.object({\n  id: z.string().uuid(),\n  title: z.string().nullable().optional(),\n  subtitle: z.string().nullable().optional(),\n  description: z.string().nullable().optional(),\n  sku: z.string().nullable().optional(),\n  handle: z.string().nullable().optional(),\n  product_type: z.string().nullable().optional(),\n  status_entry_id: z.string().uuid().nullable().optional(),\n  primary_currency_code: z.string().nullable().optional(),\n  default_unit: z.string().nullable().optional(),\n  default_sales_unit: z.string().nullable().optional(),\n  default_sales_unit_quantity: z.number().nullable().optional(),\n  uom_rounding_scale: z.number().nullable().optional(),\n  uom_rounding_mode: z.enum([\"half_up\", \"down\", \"up\"]).nullable().optional(),\n  unit_price_enabled: z.boolean().nullable().optional(),\n  unit_price_reference_unit: z\n    .enum([\"kg\", \"l\", \"m2\", \"m3\", \"pc\"])\n    .nullable()\n    .optional(),\n  unit_price_base_quantity: z.number().nullable().optional(),\n  unit_price: z\n    .object({\n      enabled: z.boolean(),\n      reference_unit: z.enum([\"kg\", \"l\", \"m2\", \"m3\", \"pc\"]).nullable(),\n      base_quantity: z.number().nullable(),\n    })\n    .optional(),\n  default_media_id: z.string().uuid().nullable().optional(),\n  default_media_url: z.string().nullable().optional(),\n  weight_value: z.number().nullable().optional(),\n  weight_unit: z.string().nullable().optional(),\n  dimensions: z.record(z.string(), z.unknown()).nullable().optional(),\n  is_configurable: z.boolean().nullable().optional(),\n  is_active: z.boolean().nullable().optional(),\n  country_of_origin_code: z.string().nullable().optional(),\n  pkwiu_code: z.string().nullable().optional(),\n  cn_code: z.string().nullable().optional(),\n  hs_code: z.string().nullable().optional(),\n  tax_classification_code: z.string().nullable().optional(),\n  gtu_codes: z.array(z.string()).nullable().optional(),\n  age_min: z.number().nullable().optional(),\n  is_excise_good: z.boolean().nullable().optional(),\n  excise_category: z.string().nullable().optional(),\n  requires_prescription: z.boolean().nullable().optional(),\n  hazmat_class: z.string().nullable().optional(),\n  un_number: z.string().nullable().optional(),\n  hazmat_packing_group: z.string().nullable().optional(),\n  contains_lithium_battery: z.boolean().nullable().optional(),\n  launch_at: z.string().nullable().optional(),\n  end_of_life_at: z.string().nullable().optional(),\n  available_from: z.string().nullable().optional(),\n  available_until: z.string().nullable().optional(),\n  min_order_qty: z.number().nullable().optional(),\n  max_order_qty: z.number().nullable().optional(),\n  order_qty_increment: z.number().nullable().optional(),\n  requires_shipping: z.boolean().nullable().optional(),\n  is_quote_only: z.boolean().nullable().optional(),\n  seo_title: z.string().nullable().optional(),\n  seo_description: z.string().nullable().optional(),\n  canonical_url: z.string().nullable().optional(),\n  metadata: z.record(z.string(), z.unknown()).nullable().optional(),\n  custom_fieldset_code: z.string().nullable().optional(),\n  option_schema_id: z.string().uuid().nullable().optional(),\n  created_at: z.string().nullable().optional(),\n  updated_at: z.string().nullable().optional(),\n  offers: z.array(z.record(z.string(), z.unknown())).optional(),\n  channelIds: z.array(z.string()).optional(),\n  categories: z.array(z.record(z.string(), z.unknown())).optional(),\n  categoryIds: z.array(z.string()).optional(),\n  tags: z.array(z.string()).optional(),\n  pricing: z.record(z.string(), z.unknown()).nullable().optional(),\n});\n\nexport const openApi = createCatalogCrudOpenApi({\n  resourceName: \"Product\",\n  pluralName: \"Products\",\n  querySchema: listSchema,\n  listResponseSchema: createPagedListResponseSchema(productListItemSchema),\n  create: {\n    schema: productCreateSchema,\n    description: \"Creates a new product in the catalog.\",\n  },\n  update: {\n    schema: productUpdateSchema,\n    responseSchema: defaultOkResponseSchema,\n    description: \"Updates an existing product by id.\",\n  },\n  del: {\n    schema: z.object({ id: z.string().uuid() }),\n    responseSchema: defaultOkResponseSchema,\n    description: \"Deletes a product by id.\",\n  },\n});\n"],
+  "sourcesContent": ["import { z } from \"zod\";\nimport type { EntityManager } from \"@mikro-orm/postgresql\";\nimport { makeCrudRoute } from \"@open-mercato/shared/lib/crud/factory\";\nimport { CrudHttpError } from \"@open-mercato/shared/lib/crud/errors\";\nimport {\n  buildCustomFieldFiltersFromQuery,\n  extractAllCustomFieldEntries,\n} from \"@open-mercato/shared/lib/crud/custom-fields\";\nimport { resolveTranslations } from \"@open-mercato/shared/lib/i18n/server\";\nimport {\n  CatalogOffer,\n  CatalogProduct,\n  CatalogProductCategory,\n  CatalogProductCategoryAssignment,\n  CatalogProductPrice,\n  CatalogProductUnitConversion,\n  CatalogProductVariant,\n  CatalogProductTagAssignment,\n} from \"../../data/entities\";\nimport { CATALOG_PRODUCT_TYPES } from \"../../data/types\";\nimport type { CatalogProductType } from \"../../data/types\";\nimport {\n  productCreateSchema,\n  productUpdateSchema,\n} from \"../../data/validators\";\nimport { parseScopedCommandInput, resolveCrudRecordId } from \"../utils\";\nimport { splitCustomFieldPayload } from \"@open-mercato/shared/lib/crud/custom-fields\";\nimport { E } from \"#generated/entities.ids.generated\";\nimport * as F from \"#generated/entities/catalog_product\";\nimport { parseBooleanFlag, sanitizeSearchTerm } from \"../helpers\";\nimport { escapeLikePattern } from \"@open-mercato/shared/lib/db/escapeLikePattern\";\nimport type { CrudCtx } from \"@open-mercato/shared/lib/crud/factory\";\nimport { buildScopedWhere } from \"@open-mercato/shared/lib/api/crud\";\nimport {\n  resolvePriceChannelId,\n  resolvePriceOfferId,\n  resolvePriceVariantId,\n  resolvePriceKindCode,\n  type PricingContext,\n  type PriceRow,\n} from \"../../lib/pricing\";\nimport type { CatalogPricingService } from \"../../services/catalogPricingService\";\nimport { fieldsetCodeRegex } from \"@open-mercato/core/modules/entities/data/validators\";\nimport { SalesChannel } from \"@open-mercato/core/modules/sales/data/entities\";\nimport {\n  createCatalogCrudOpenApi,\n  createPagedListResponseSchema,\n  defaultOkResponseSchema,\n} from \"../openapi\";\nimport { findWithDecryption } from \"@open-mercato/shared/lib/encryption/find\";\nimport { canonicalizeUnitCode, toUnitLookupKey } from \"../../lib/unitCodes\";\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('catalog')\nconst rawBodySchema = z.object({}).passthrough();\n\nconst UUID_REGEX =\n  /^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-5][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}$/;\n\nconst listSchema = z\n  .object({\n    page: z.coerce.number().min(1).default(1),\n    pageSize: z.coerce.number().min(1).max(100).default(50),\n    id: z.string().uuid().optional(),\n    search: z.string().optional(),\n    status: z.string().optional(),\n    isActive: z.string().optional(),\n    configurable: z.string().optional(),\n    productType: z.enum(CATALOG_PRODUCT_TYPES).optional(),\n    channelIds: z.string().optional(),\n    channelId: z.string().uuid().optional(),\n    categoryIds: z.string().optional(),\n    tagIds: z.string().optional(),\n    offerId: z.string().uuid().optional(),\n    userId: z.string().uuid().optional(),\n    userGroupId: z.string().uuid().optional(),\n    customerId: z.string().uuid().optional(),\n    customerGroupId: z.string().uuid().optional(),\n    quantity: z.coerce.number().min(1).max(100000).optional(),\n    quantityUnit: z.string().trim().max(50).optional(),\n    priceDate: z.string().optional(),\n    sortField: z.string().optional(),\n    sortDir: z.enum([\"asc\", \"desc\"]).optional(),\n    withDeleted: z.coerce.boolean().optional(),\n    customFieldset: z.string().regex(fieldsetCodeRegex).optional(),\n  })\n  .passthrough();\n\ntype ProductsQuery = z.infer<typeof listSchema>;\n\nconst routeMetadata = {\n  GET: { requireAuth: true, requireFeatures: [\"catalog.products.view\"] },\n  POST: { requireAuth: true, requireFeatures: [\"catalog.products.manage\"] },\n  PUT: { requireAuth: true, requireFeatures: [\"catalog.products.manage\"] },\n  DELETE: { requireAuth: true, requireFeatures: [\"catalog.products.manage\"] },\n};\n\nexport const metadata = routeMetadata;\n\nexport function parseIdList(raw?: string): string[] {\n  if (!raw) return [];\n  return raw\n    .split(\",\")\n    .map((value) => value.trim())\n    .filter((value) => UUID_REGEX.test(value));\n}\n\nexport async function buildProductFilters(\n  query: ProductsQuery,\n  ctx: CrudCtx,\n): Promise<Record<string, unknown>> {\n  const filters: Record<string, unknown> = {};\n  const em = (ctx.container.resolve(\"em\") as EntityManager).fork();\n  const restrictedProductIds: { value: Set<string> | null } = { value: null };\n\n  const intersectProductIds = (ids: string[]) => {\n    const normalized = ids.filter(\n      (id): id is string => typeof id === \"string\" && id.trim().length > 0,\n    );\n    const current = new Set(normalized);\n    if (!current.size) {\n      restrictedProductIds.value = new Set();\n      return;\n    }\n    if (!restrictedProductIds.value) {\n      restrictedProductIds.value = current;\n      return;\n    }\n    restrictedProductIds.value = new Set(\n      Array.from(restrictedProductIds.value).filter((id) => current.has(id)),\n    );\n  };\n\n  const applyRestrictedProducts = () => {\n    if (!restrictedProductIds.value) return;\n    if (restrictedProductIds.value.size === 0) {\n      filters.id = { $eq: \"00000000-0000-0000-0000-000000000000\" };\n      return;\n    }\n    const ids = Array.from(restrictedProductIds.value);\n    const existing = filters.id as Record<string, unknown> | undefined;\n    if (existing && typeof existing === \"object\") {\n      if (\n        \"$eq\" in existing &&\n        typeof (existing as { $eq?: unknown }).$eq === \"string\"\n      ) {\n        const target = (existing as { $eq: string }).$eq;\n        if (!restrictedProductIds.value.has(target)) {\n          filters.id = { $eq: \"00000000-0000-0000-0000-000000000000\" };\n        }\n        return;\n      }\n      if (\n        \"$in\" in existing &&\n        Array.isArray((existing as { $in?: unknown }).$in)\n      ) {\n        const subset = (existing as { $in: string[] }).$in.filter((id) =>\n          restrictedProductIds.value!.has(id),\n        );\n        filters.id = subset.length\n          ? { $in: subset }\n          : { $eq: \"00000000-0000-0000-0000-000000000000\" };\n        return;\n      }\n    }\n    filters.id = ids.length === 1 ? { $eq: ids[0] } : { $in: ids };\n  };\n  if (query.id) {\n    filters.id = { $eq: query.id };\n  }\n  if (query.status && query.status.trim()) {\n    filters.status_entry_id = { $eq: query.status.trim() };\n  }\n  const active = parseBooleanFlag(query.isActive);\n  if (active !== undefined) {\n    filters.is_active = active;\n  }\n  const configurable = parseBooleanFlag(query.configurable);\n  if (configurable !== undefined) {\n    filters.is_configurable = configurable;\n  }\n  if (query.productType) {\n    filters.product_type = { $eq: query.productType };\n  }\n  const scope = {\n    organizationId: ctx.selectedOrganizationId ?? ctx.auth?.orgId ?? null,\n    tenantId: ctx.auth?.tenantId ?? null,\n  };\n  const term = sanitizeSearchTerm(query.search);\n  const channelFilterIds = parseIdList(query.channelIds);\n  const categoryFilterIds = parseIdList(query.categoryIds);\n  const tagFilterIds = parseIdList(query.tagIds);\n  const customFieldset =\n    typeof query.customFieldset === \"string\" &&\n    query.customFieldset.trim().length\n      ? query.customFieldset.trim()\n      : null;\n  const tenantId = ctx.auth?.tenantId ?? null;\n\n  // These prequeries are independent \u2014 each only feeds the final product-id\n  // intersection, none depends on another's result \u2014 so dispatch them together\n  // instead of awaiting one after another (#3179). A task returns null when its\n  // filter is inactive (intersection skipped) or the matched product-id list\n  // (possibly empty) when active, preserving the \"active filter with no matches\n  // => empty result\" behavior.\n  const searchTask = async (): Promise<string[] | null> => {\n    if (!term) return null;\n    const like = `%${escapeLikePattern(term)}%`;\n    const searchMatches = await findWithDecryption(\n      em,\n      CatalogProduct,\n      {\n        ...scope,\n        ...(query.withDeleted ? {} : { deletedAt: null }),\n        $or: [\n          { title: { $ilike: like } },\n          { subtitle: { $ilike: like } },\n          { description: { $ilike: like } },\n          { sku: { $ilike: like } },\n          { handle: { $ilike: like } },\n        ],\n      },\n      { fields: [\"id\"] },\n      scope,\n    );\n    return searchMatches\n      .map((product) => product.id)\n      .filter((id): id is string => typeof id === \"string\" && id.length > 0);\n  };\n\n  const channelTask = async (): Promise<string[] | null> => {\n    if (!channelFilterIds.length) return null;\n    const offerRows = await findWithDecryption(\n      em,\n      CatalogOffer,\n      {\n        channelId: { $in: channelFilterIds },\n        deletedAt: null,\n        ...scope,\n      },\n      { fields: [\"id\", \"product\"] },\n      scope,\n    );\n    return offerRows\n      .map((offer) =>\n        typeof offer.product === \"string\"\n          ? offer.product\n          : (offer.product?.id ?? null),\n      )\n      .filter((id): id is string => !!id);\n  };\n\n  const categoryTask = async (): Promise<string[] | null> => {\n    if (!categoryFilterIds.length) return null;\n    const assignments = await findWithDecryption(\n      em,\n      CatalogProductCategoryAssignment,\n      { category: { $in: categoryFilterIds }, ...scope },\n      { fields: [\"id\", \"product\"] },\n      scope,\n    );\n    return assignments\n      .map((assignment) =>\n        typeof assignment.product === \"string\"\n          ? assignment.product\n          : (assignment.product?.id ?? null),\n      )\n      .filter((id): id is string => !!id);\n  };\n\n  const tagTask = async (): Promise<string[] | null> => {\n    if (!tagFilterIds.length) return null;\n    const assignments = await findWithDecryption(\n      em,\n      CatalogProductTagAssignment,\n      { tag: { $in: tagFilterIds }, ...scope },\n      { fields: [\"id\", \"product\"] },\n      scope,\n    );\n    return assignments\n      .map((assignment) =>\n        typeof assignment.product === \"string\"\n          ? assignment.product\n          : (assignment.product?.id ?? null),\n      )\n      .filter((id): id is string => !!id);\n  };\n\n  const customFieldTask = async (): Promise<Record<string, unknown>> => {\n    try {\n      const scopedEm = ctx.container.resolve(\"em\") as EntityManager;\n      return await buildCustomFieldFiltersFromQuery({\n        entityIds: [E.catalog.catalog_product],\n        query,\n        em: scopedEm,\n        tenantId,\n        fieldset: customFieldset ?? undefined,\n      });\n    } catch (err) {\n      // Custom field filter parsing may fail for non-existent or misconfigured fields.\n      // Fall back to base filters to avoid blocking the product listing.\n      logger.debug('catalog.products custom field filter error', { err });\n      return {};\n    }\n  };\n\n  const [searchIds, channelIds, categoryIds, tagIds, cfFilters] =\n    await Promise.all([\n      searchTask(),\n      channelTask(),\n      categoryTask(),\n      tagTask(),\n      customFieldTask(),\n    ]);\n\n  // Apply intersections in the original order; intersection is commutative, so\n  // the result is identical to the previous sequential pass. An empty array is\n  // still intersected (active filter that matched nothing); null is skipped.\n  for (const productIds of [searchIds, channelIds, categoryIds, tagIds]) {\n    if (productIds) intersectProductIds(productIds);\n  }\n  Object.assign(filters, cfFilters);\n  applyRestrictedProducts();\n  return filters;\n}\n\nexport function buildPricingContext(\n  query: ProductsQuery,\n  channelFallback: string | null,\n): PricingContext {\n  const quantity = Number.isFinite(Number(query.quantity))\n    ? Number(query.quantity)\n    : 1;\n  const parsedDate = query.priceDate ? new Date(query.priceDate) : new Date();\n  const channelId = query.channelId ?? channelFallback ?? null;\n  return {\n    channelId,\n    offerId: query.offerId ?? null,\n    userId: query.userId ?? null,\n    userGroupId: query.userGroupId ?? null,\n    customerId: query.customerId ?? null,\n    customerGroupId: query.customerGroupId ?? null,\n    quantity: Number.isFinite(quantity) && quantity > 0 ? quantity : 1,\n    date: Number.isNaN(parsedDate.getTime()) ? new Date() : parsedDate,\n  };\n}\n\ntype ProductListItem = Record<string, unknown> & {\n  id?: string;\n  title?: string | null;\n  subtitle?: string | null;\n  description?: string | null;\n  sku?: string | null;\n  handle?: string | null;\n  product_type?: CatalogProductType | null;\n  primary_currency_code?: string | null;\n  default_unit?: string | null;\n  default_sales_unit?: string | null;\n  default_sales_unit_quantity?: number | null;\n  uom_rounding_scale?: number | null;\n  uom_rounding_mode?: \"half_up\" | \"down\" | \"up\" | null;\n  unit_price_enabled?: boolean | null;\n  unit_price_reference_unit?: \"kg\" | \"l\" | \"m2\" | \"m3\" | \"pc\" | null;\n  unit_price_base_quantity?: number | null;\n  default_media_id?: string | null;\n  default_media_url?: string | null;\n  weight_value?: string | null;\n  weightValue?: string | null;\n  weight_unit?: string | null;\n  weightUnit?: string | null;\n  dimensions?: Record<string, unknown> | null;\n  custom_fieldset_code?: string | null;\n  option_schema_id?: string | null;\n  offers?: Array<Record<string, unknown>>;\n  channelIds?: string[];\n  categories?: Array<Record<string, unknown>>;\n  categoryIds?: string[];\n  tags?: string[];\n};\n\nasync function decorateProductsAfterList(\n  payload: { items?: ProductListItem[] },\n  ctx: CrudCtx & { query: ProductsQuery },\n): Promise<void> {\n  const items = Array.isArray(payload?.items) ? payload.items : [];\n  if (!items.length) return;\n  const productIds = items\n    .map((item) => (typeof item.id === \"string\" ? item.id : null))\n    .filter((id): id is string => !!id);\n  if (!productIds.length) return;\n  try {\n    const em = (ctx.container.resolve(\"em\") as EntityManager).fork();\n    const scope = {\n      organizationId: ctx.selectedOrganizationId ?? ctx.auth?.orgId ?? null,\n      tenantId: ctx.auth?.tenantId ?? null,\n    };\n    const offers = await findWithDecryption(\n      em,\n      CatalogOffer,\n      { product: { $in: productIds }, deletedAt: null, ...scope },\n      { orderBy: { createdAt: \"asc\" } },\n      scope,\n    );\n    const channelIds = Array.from(\n      new Set(\n        offers\n          .map((offer) => offer.channelId)\n          .filter(\n            (id): id is string => typeof id === \"string\" && id.length > 0,\n          ),\n      ),\n    );\n    const channelLookup = new Map<\n      string,\n      { name?: string | null; code?: string | null }\n    >();\n    if (channelIds.length) {\n      const scopedChannelsWhere = buildScopedWhere(\n        { id: { $in: channelIds } },\n        {\n          organizationId: ctx.selectedOrganizationId ?? ctx.auth?.orgId ?? null,\n          organizationIds: Array.isArray(ctx.organizationIds)\n            ? ctx.organizationIds\n            : undefined,\n          tenantId: ctx.auth?.tenantId ?? null,\n        },\n      );\n      const channels = await findWithDecryption(em, SalesChannel, scopedChannelsWhere, {\n        fields: [\"id\", \"name\", \"code\"],\n      });\n      for (const channel of channels) {\n        channelLookup.set(channel.id, {\n          name: channel.name,\n          code: channel.code ?? null,\n        });\n      }\n    }\n    const offersByProduct = new Map<string, Array<Record<string, unknown>>>();\n    for (const offer of offers) {\n      const productId =\n        typeof offer.product === \"string\"\n          ? offer.product\n          : (offer.product?.id ?? null);\n      if (!productId) continue;\n      const channelInfo = channelLookup.get(offer.channelId);\n      const entry = offersByProduct.get(productId) ?? [];\n      entry.push({\n        id: offer.id,\n        channelId: offer.channelId,\n        channelName: channelInfo?.name ?? null,\n        channelCode: channelInfo?.code ?? null,\n        title: offer.title,\n        description: offer.description ?? null,\n        isActive: offer.isActive,\n        defaultMediaId: offer.defaultMediaId ?? null,\n        defaultMediaUrl: offer.defaultMediaUrl ?? null,\n        metadata: offer.metadata ?? null,\n        updatedAt:\n          offer.updatedAt instanceof Date\n            ? offer.updatedAt.toISOString()\n            : (typeof offer.updatedAt === \"string\" ? offer.updatedAt : null),\n      });\n      offersByProduct.set(productId, entry);\n    }\n\n    const categoryAssignments = await findWithDecryption(\n      em,\n      CatalogProductCategoryAssignment,\n      { product: { $in: productIds }, ...scope },\n      { populate: [\"category\"], orderBy: { position: \"asc\" } },\n      scope,\n    );\n    const parentIds = new Set<string>();\n    for (const assignment of categoryAssignments) {\n      const category =\n        typeof assignment.category === \"string\"\n          ? null\n          : (assignment.category ?? null);\n      if (!category) continue;\n      const parentId = category.parentId ?? null;\n      if (parentId) parentIds.add(parentId);\n    }\n    const parentCategories = parentIds.size\n      ? await findWithDecryption(\n          em,\n          CatalogProductCategory,\n          { id: { $in: Array.from(parentIds) }, ...scope },\n          { fields: [\"id\", \"name\"] },\n          scope,\n        )\n      : [];\n    const parentNameById = new Map<string, string | null>();\n    for (const parent of parentCategories) {\n      parentNameById.set(parent.id, parent.name ?? null);\n    }\n    const categoriesByProduct = new Map<\n      string,\n      Array<{\n        id: string;\n        name: string | null;\n        treePath: string | null;\n        parentId: string | null;\n        parentName: string | null;\n      }>\n    >();\n    for (const assignment of categoryAssignments) {\n      const productId =\n        typeof assignment.product === \"string\"\n          ? assignment.product\n          : (assignment.product?.id ?? null);\n      if (!productId) continue;\n      const category =\n        typeof assignment.category === \"string\"\n          ? null\n          : (assignment.category ?? null);\n      if (!category) continue;\n      const parentId = category.parentId ?? null;\n      const parentName = parentId\n        ? (parentNameById.get(parentId) ?? null)\n        : null;\n      const bucket = categoriesByProduct.get(productId) ?? [];\n      bucket.push({\n        id: category.id,\n        name: category.name ?? null,\n        treePath: category.treePath ?? null,\n        parentId,\n        parentName,\n      });\n      categoriesByProduct.set(productId, bucket);\n    }\n\n    const tagAssignments = await findWithDecryption(\n      em,\n      CatalogProductTagAssignment,\n      { product: { $in: productIds } },\n      { populate: [\"tag\"] },\n      {\n        tenantId: ctx.auth?.tenantId ?? null,\n        organizationId: ctx.auth?.orgId ?? null,\n      },\n    );\n    const tagsByProduct = new Map<string, string[]>();\n    for (const assignment of tagAssignments) {\n      const productId =\n        typeof assignment.product === \"string\"\n          ? assignment.product\n          : (assignment.product?.id ?? null);\n      if (!productId) continue;\n      const tag =\n        typeof assignment.tag === \"string\" ? null : (assignment.tag ?? null);\n      if (!tag) continue;\n      const label =\n        typeof tag.label === \"string\" && tag.label.trim().length\n          ? tag.label\n          : null;\n      if (!label) continue;\n      const bucket = tagsByProduct.get(productId) ?? [];\n      bucket.push(label);\n      tagsByProduct.set(productId, bucket);\n    }\n\n    const variants = await findWithDecryption(\n      em,\n      CatalogProductVariant,\n      { product: { $in: productIds }, deletedAt: null, ...scope },\n      { fields: [\"id\", \"product\"] },\n      scope,\n    );\n    const variantToProduct = new Map<string, string>();\n    for (const variant of variants) {\n      const productId =\n        typeof variant.product === \"string\"\n          ? variant.product\n          : (variant.product?.id ?? null);\n      if (!productId) continue;\n      variantToProduct.set(variant.id, productId);\n    }\n    const variantIds = Array.from(variantToProduct.keys());\n    const priceWhere =\n      variantIds.length > 0\n        ? {\n            $or: [\n              { product: { $in: productIds } },\n              { variant: { $in: variantIds } },\n            ],\n          }\n        : { product: { $in: productIds } };\n    const priceRows = await findWithDecryption<CatalogProductPrice>(\n      em,\n      CatalogProductPrice,\n      { ...priceWhere, ...scope },\n      { populate: [\"offer\", \"variant\", \"product\", \"priceKind\"] },\n      scope,\n    );\n    const pricesByProduct = new Map<string, PriceRow[]>();\n    for (const price of priceRows) {\n      let productId: string | null = null;\n      if (price.product) {\n        productId =\n          typeof price.product === \"string\"\n            ? price.product\n            : (price.product?.id ?? null);\n      } else if (price.variant) {\n        const variantId =\n          typeof price.variant === \"string\" ? price.variant : price.variant.id;\n        productId = variantToProduct.get(variantId) ?? null;\n      }\n      if (!productId) continue;\n      const entry = pricesByProduct.get(productId) ?? [];\n      entry.push(price);\n      pricesByProduct.set(productId, entry);\n    }\n\n    const requestQuantityUnitKey = toUnitLookupKey(\n      ctx.query.quantityUnit,\n    );\n    const conversionsByProduct = new Map<string, Map<string, number>>();\n    const conversionOrganizationId =\n      ctx.selectedOrganizationId ?? ctx.auth?.orgId ?? null;\n    const conversionTenantId = ctx.auth?.tenantId ?? null;\n    if (\n      requestQuantityUnitKey &&\n      productIds.length &&\n      conversionOrganizationId &&\n      conversionTenantId\n    ) {\n      const conversionRows = await findWithDecryption(\n        em,\n        CatalogProductUnitConversion,\n        {\n          product: { $in: productIds },\n          organizationId: conversionOrganizationId,\n          tenantId: conversionTenantId,\n          deletedAt: null,\n          isActive: true,\n        },\n        { fields: [\"id\", \"product\", \"unitCode\", \"toBaseFactor\"] },\n        { organizationId: conversionOrganizationId, tenantId: conversionTenantId },\n      );\n      for (const row of conversionRows) {\n        const productId =\n          typeof row.product === \"string\"\n            ? row.product\n            : (row.product?.id ?? null);\n        const unitKey = toUnitLookupKey(row.unitCode);\n        const factor = Number(row.toBaseFactor);\n        if (!productId || !unitKey || !Number.isFinite(factor) || factor <= 0)\n          continue;\n        const bucket =\n          conversionsByProduct.get(productId) ?? new Map<string, number>();\n        bucket.set(unitKey, factor);\n        conversionsByProduct.set(productId, bucket);\n      }\n    }\n\n    const channelFilterIds = parseIdList(ctx.query.channelIds);\n    const channelContext =\n      ctx.query.channelId ??\n      (channelFilterIds.length === 1 ? channelFilterIds[0] : null);\n    const pricingContext = buildPricingContext(ctx.query, channelContext);\n    const pricingService = ctx.container.resolve<CatalogPricingService>(\n      \"catalogPricingService\",\n    );\n\n    const pricingEntries: Array<{ rows: PriceRow[]; context: PricingContext } | null> = [];\n    for (const item of items) {\n      const id = typeof item.id === \"string\" ? item.id : null;\n      if (!id) {\n        pricingEntries.push(null);\n        continue;\n      }\n      const offerEntries = offersByProduct.get(id) ?? [];\n      item.offers = offerEntries;\n      const channelIds = Array.from(\n        new Set(\n          offerEntries\n            .map((offer) =>\n              typeof offer.channelId === \"string\" ? offer.channelId : null,\n            )\n            .filter((channelId): channelId is string => !!channelId),\n        ),\n      );\n      item.channelIds = channelIds;\n      const categories = categoriesByProduct.get(id) ?? [];\n      item.categories = categories;\n      item.categoryIds = categories.map((category) => category.id);\n      item.tags = tagsByProduct.get(id) ?? [];\n      if (item.is_quote_only === true) {\n        item.pricing = null;\n        pricingEntries.push(null);\n        continue;\n      }\n      const priceCandidates = pricesByProduct.get(id) ?? [];\n      const normalizedQuantityForPricing = (() => {\n        if (!requestQuantityUnitKey) return pricingContext.quantity;\n        const baseUnit = toUnitLookupKey(item.default_unit);\n        if (!baseUnit || requestQuantityUnitKey === baseUnit)\n          return pricingContext.quantity;\n        const productConversions = conversionsByProduct.get(id);\n        const factor = productConversions?.get(requestQuantityUnitKey) ?? null;\n        if (!factor || !Number.isFinite(factor) || factor <= 0) {\n          logger.debug('catalog.products invalid conversion factor', { productId: id, unit: requestQuantityUnitKey, factor });\n          return pricingContext.quantity;\n        }\n        const normalized = pricingContext.quantity * factor;\n        return Number.isFinite(normalized) && normalized > 0\n          ? normalized\n          : pricingContext.quantity;\n      })();\n      const channelScopedContext =\n        pricingContext.channelId || channelIds.length !== 1\n          ? pricingContext\n          : { ...pricingContext, channelId: channelIds[0] };\n      pricingEntries.push({\n        rows: priceCandidates,\n        context: { ...channelScopedContext, quantity: normalizedQuantityForPricing },\n      });\n    }\n\n    const resolveInputs: Array<{ rows: PriceRow[]; context: PricingContext }> = [];\n    const resolveIndices: number[] = [];\n    for (let i = 0; i < pricingEntries.length; i++) {\n      if (pricingEntries[i] !== null) {\n        resolveInputs.push(pricingEntries[i]!);\n        resolveIndices.push(i);\n      }\n    }\n    const priceResults = await pricingService.resolvePriceMany(resolveInputs);\n\n    for (let i = 0; i < resolveIndices.length; i++) {\n      const item = items[resolveIndices[i]];\n      const best = priceResults[i];\n      if (best) {\n        item.pricing = {\n          kind: resolvePriceKindCode(best),\n          price_kind_id:\n            typeof best.priceKind === \"string\"\n              ? best.priceKind\n              : (best.priceKind?.id ?? null),\n          price_kind_code: resolvePriceKindCode(best),\n          currency_code: best.currencyCode,\n          unit_price_net: best.unitPriceNet,\n          unit_price_gross: best.unitPriceGross,\n          min_quantity: best.minQuantity,\n          max_quantity: best.maxQuantity ?? null,\n          tax_rate: best.taxRate ?? null,\n          tax_amount: best.taxAmount ?? null,\n          scope: {\n            variant_id: resolvePriceVariantId(best),\n            offer_id: resolvePriceOfferId(best),\n            channel_id: resolvePriceChannelId(best),\n            user_id: best.userId ?? null,\n            user_group_id: best.userGroupId ?? null,\n            customer_id: best.customerId ?? null,\n            customer_group_id: best.customerGroupId ?? null,\n          },\n        };\n      } else {\n        item.pricing = null;\n      }\n    }\n  } catch (error) {\n    logger.error('decorateProductsAfterList Failed to load unit conversions', { err: error });\n  }\n\n  const searchTerm = ctx.query.search ? sanitizeSearchTerm(ctx.query.search) : null;\n  if (searchTerm && !ctx.query.sortField && Array.isArray(payload.items)) {\n    const needle = searchTerm.toLowerCase();\n    payload.items.sort((a, b) => {\n      const scoreA = scoreProductSearchRelevance(needle, a.title, a.sku);\n      const scoreB = scoreProductSearchRelevance(needle, b.title, b.sku);\n      if (scoreA !== scoreB) return scoreA - scoreB;\n      return (a.title ?? \"\").localeCompare(b.title ?? \"\");\n    });\n  }\n}\n\nexport function scoreProductSearchRelevance(\n  needle: string,\n  title: string | null | undefined,\n  sku: string | null | undefined,\n): number {\n  const t = (title ?? \"\").toLowerCase();\n  const s = (sku ?? \"\").toLowerCase();\n  if (t === needle) return 0;\n  if (s === needle) return 1;\n  if (t.startsWith(needle)) return 2;\n  if (s.startsWith(needle)) return 3;\n  if (t.includes(needle)) return 4;\n  if (s.includes(needle)) return 5;\n  return 6;\n}\n\nconst crud = makeCrudRoute({\n  metadata: routeMetadata,\n  orm: {\n    entity: CatalogProduct,\n    idField: \"id\",\n    orgField: \"organizationId\",\n    tenantField: \"tenantId\",\n    softDeleteField: \"deletedAt\",\n  },\n  indexer: {\n    entityType: E.catalog.catalog_product,\n  },\n  list: {\n    schema: listSchema,\n    entityId: E.catalog.catalog_product,\n    fields: [\n      F.id,\n      F.title,\n      F.subtitle,\n      F.description,\n      F.sku,\n      F.handle,\n      \"tax_rate_id\",\n      \"tax_rate\",\n      F.product_type,\n      F.status_entry_id,\n      F.primary_currency_code,\n      F.default_unit,\n      \"default_sales_unit\",\n      \"default_sales_unit_quantity\",\n      \"uom_rounding_scale\",\n      \"uom_rounding_mode\",\n      \"unit_price_enabled\",\n      \"unit_price_reference_unit\",\n      \"unit_price_base_quantity\",\n      F.default_media_id,\n      F.default_media_url,\n      F.weight_value,\n      F.weight_unit,\n      F.dimensions,\n      F.is_configurable,\n      F.is_active,\n      \"country_of_origin_code\",\n      \"pkwiu_code\",\n      \"cn_code\",\n      \"hs_code\",\n      \"tax_classification_code\",\n      \"gtu_codes\",\n      \"age_min\",\n      \"is_excise_good\",\n      \"excise_category\",\n      \"requires_prescription\",\n      \"hazmat_class\",\n      \"un_number\",\n      \"hazmat_packing_group\",\n      \"contains_lithium_battery\",\n      \"launch_at\",\n      \"end_of_life_at\",\n      \"available_from\",\n      \"available_until\",\n      \"min_order_qty\",\n      \"max_order_qty\",\n      \"order_qty_increment\",\n      \"requires_shipping\",\n      \"is_quote_only\",\n      \"seo_title\",\n      \"seo_description\",\n      \"canonical_url\",\n      F.metadata,\n      \"custom_fieldset_code\",\n      \"option_schema_id\",\n      F.created_at,\n      F.updated_at,\n    ],\n    decorateCustomFields: { entityIds: [E.catalog.catalog_product] },\n    sortFieldMap: {\n      title: F.title,\n      sku: F.sku,\n      createdAt: F.created_at,\n      updatedAt: F.updated_at,\n    },\n    buildFilters: buildProductFilters,\n    transformItem: (item: ProductListItem | null | undefined) => {\n      if (!item) return item;\n      const normalized = { ...item };\n      const cfEntries = extractAllCustomFieldEntries(item);\n      for (const key of Object.keys(normalized)) {\n        if (key.startsWith(\"cf:\")) {\n          delete normalized[key];\n        }\n      }\n      const defaultUnit = canonicalizeUnitCode(normalized.default_unit) ?? null;\n      const defaultSalesUnit =\n        canonicalizeUnitCode(normalized.default_sales_unit) ?? null;\n      const unitPriceReferenceUnit =\n        canonicalizeUnitCode(normalized.unit_price_reference_unit) ?? null;\n      return {\n        ...normalized,\n        default_unit: defaultUnit,\n        default_sales_unit: defaultSalesUnit,\n        unit_price_reference_unit: unitPriceReferenceUnit,\n        ...cfEntries,\n        unit_price: {\n          enabled: Boolean(normalized.unit_price_enabled),\n          reference_unit: unitPriceReferenceUnit,\n          base_quantity: normalized.unit_price_base_quantity ?? null,\n        },\n      };\n    },\n  },\n  hooks: {\n    afterList: decorateProductsAfterList,\n  },\n  actions: {\n    create: {\n      commandId: \"catalog.products.create\",\n      schema: rawBodySchema,\n      mapInput: async ({ raw, ctx }) => {\n        const { translate } = await resolveTranslations();\n        const parsed = parseScopedCommandInput(\n          productCreateSchema,\n          raw ?? {},\n          ctx,\n          translate,\n        );\n        const { base, custom } = splitCustomFieldPayload(parsed);\n        return Object.keys(custom).length\n          ? { ...base, customFields: custom }\n          : base;\n      },\n      response: ({ result }) => ({\n        id: result?.productId ?? result?.id ?? null,\n      }),\n      status: 201,\n    },\n    update: {\n      commandId: \"catalog.products.update\",\n      schema: rawBodySchema,\n      mapInput: async ({ raw, ctx }) => {\n        const { translate } = await resolveTranslations();\n        const parsed = parseScopedCommandInput(\n          productUpdateSchema,\n          raw ?? {},\n          ctx,\n          translate,\n        );\n        const { base, custom } = splitCustomFieldPayload(parsed);\n        return Object.keys(custom).length\n          ? { ...base, customFields: custom }\n          : base;\n      },\n      response: () => ({ ok: true }),\n    },\n    delete: {\n      commandId: \"catalog.products.delete\",\n      schema: rawBodySchema,\n      mapInput: async ({ parsed, ctx }) => {\n        const { translate } = await resolveTranslations();\n        const id = resolveCrudRecordId(parsed, ctx, translate);\n        if (!id)\n          throw new CrudHttpError(400, {\n            error: translate(\n              \"catalog.errors.id_required\",\n              \"Product id is required.\",\n            ),\n          });\n        return { id };\n      },\n      response: () => ({ ok: true }),\n    },\n  },\n});\n\nexport const GET = crud.GET;\nexport const POST = crud.POST;\nexport const PUT = crud.PUT;\nexport const DELETE = crud.DELETE;\n\nconst productListItemSchema = z.object({\n  id: z.string().uuid(),\n  title: z.string().nullable().optional(),\n  subtitle: z.string().nullable().optional(),\n  description: z.string().nullable().optional(),\n  sku: z.string().nullable().optional(),\n  handle: z.string().nullable().optional(),\n  product_type: z.string().nullable().optional(),\n  status_entry_id: z.string().uuid().nullable().optional(),\n  primary_currency_code: z.string().nullable().optional(),\n  default_unit: z.string().nullable().optional(),\n  default_sales_unit: z.string().nullable().optional(),\n  default_sales_unit_quantity: z.number().nullable().optional(),\n  uom_rounding_scale: z.number().nullable().optional(),\n  uom_rounding_mode: z.enum([\"half_up\", \"down\", \"up\"]).nullable().optional(),\n  unit_price_enabled: z.boolean().nullable().optional(),\n  unit_price_reference_unit: z\n    .enum([\"kg\", \"l\", \"m2\", \"m3\", \"pc\"])\n    .nullable()\n    .optional(),\n  unit_price_base_quantity: z.number().nullable().optional(),\n  unit_price: z\n    .object({\n      enabled: z.boolean(),\n      reference_unit: z.enum([\"kg\", \"l\", \"m2\", \"m3\", \"pc\"]).nullable(),\n      base_quantity: z.number().nullable(),\n    })\n    .optional(),\n  default_media_id: z.string().uuid().nullable().optional(),\n  default_media_url: z.string().nullable().optional(),\n  weight_value: z.number().nullable().optional(),\n  weight_unit: z.string().nullable().optional(),\n  dimensions: z.record(z.string(), z.unknown()).nullable().optional(),\n  is_configurable: z.boolean().nullable().optional(),\n  is_active: z.boolean().nullable().optional(),\n  country_of_origin_code: z.string().nullable().optional(),\n  pkwiu_code: z.string().nullable().optional(),\n  cn_code: z.string().nullable().optional(),\n  hs_code: z.string().nullable().optional(),\n  tax_classification_code: z.string().nullable().optional(),\n  gtu_codes: z.array(z.string()).nullable().optional(),\n  age_min: z.number().nullable().optional(),\n  is_excise_good: z.boolean().nullable().optional(),\n  excise_category: z.string().nullable().optional(),\n  requires_prescription: z.boolean().nullable().optional(),\n  hazmat_class: z.string().nullable().optional(),\n  un_number: z.string().nullable().optional(),\n  hazmat_packing_group: z.string().nullable().optional(),\n  contains_lithium_battery: z.boolean().nullable().optional(),\n  launch_at: z.string().nullable().optional(),\n  end_of_life_at: z.string().nullable().optional(),\n  available_from: z.string().nullable().optional(),\n  available_until: z.string().nullable().optional(),\n  min_order_qty: z.number().nullable().optional(),\n  max_order_qty: z.number().nullable().optional(),\n  order_qty_increment: z.number().nullable().optional(),\n  requires_shipping: z.boolean().nullable().optional(),\n  is_quote_only: z.boolean().nullable().optional(),\n  seo_title: z.string().nullable().optional(),\n  seo_description: z.string().nullable().optional(),\n  canonical_url: z.string().nullable().optional(),\n  metadata: z.record(z.string(), z.unknown()).nullable().optional(),\n  custom_fieldset_code: z.string().nullable().optional(),\n  option_schema_id: z.string().uuid().nullable().optional(),\n  created_at: z.string().nullable().optional(),\n  updated_at: z.string().nullable().optional(),\n  offers: z.array(z.record(z.string(), z.unknown())).optional(),\n  channelIds: z.array(z.string()).optional(),\n  categories: z.array(z.record(z.string(), z.unknown())).optional(),\n  categoryIds: z.array(z.string()).optional(),\n  tags: z.array(z.string()).optional(),\n  pricing: z.record(z.string(), z.unknown()).nullable().optional(),\n});\n\nexport const openApi = createCatalogCrudOpenApi({\n  resourceName: \"Product\",\n  pluralName: \"Products\",\n  querySchema: listSchema,\n  listResponseSchema: createPagedListResponseSchema(productListItemSchema),\n  create: {\n    schema: productCreateSchema,\n    description: \"Creates a new product in the catalog.\",\n  },\n  update: {\n    schema: productUpdateSchema,\n    responseSchema: defaultOkResponseSchema,\n    description: \"Updates an existing product by id.\",\n  },\n  del: {\n    schema: z.object({ id: z.string().uuid() }),\n    responseSchema: defaultOkResponseSchema,\n    description: \"Deletes a product by id.\",\n  },\n});\n"],
   "mappings": "AAAA,SAAS,SAAS;AAElB,SAAS,qBAAqB;AAC9B,SAAS,qBAAqB;AAC9B;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,2BAA2B;AACpC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,6BAA6B;AAEtC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,yBAAyB,2BAA2B;AAC7D,SAAS,+BAA+B;AACxC,SAAS,SAAS;AAClB,YAAY,OAAO;AACnB,SAAS,kBAAkB,0BAA0B;AACrD,SAAS,yBAAyB;AAElC,SAAS,wBAAwB;AACjC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAGK;AAEP,SAAS,yBAAyB;AAClC,SAAS,oBAAoB;AAC7B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,0BAA0B;AACnC,SAAS,sBAAsB,uBAAuB;AACtD,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,SAAS;AACrC,MAAM,gBAAgB,EAAE,OAAO,CAAC,CAAC,EAAE,YAAY;AAE/C,MAAM,aACJ;AAEF,MAAM,aAAa,EAChB,OAAO;AAAA,EACN,MAAM,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,QAAQ,CAAC;AAAA,EACxC,UAAU,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,QAAQ,EAAE;AAAA,EACtD,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC/B,QAAQ,EAAE,OAAO,EAAE,SAAS;AAAA,EAC5B,QAAQ,EAAE,OAAO,EAAE,SAAS;AAAA,EAC5B,UAAU,EAAE,OAAO,EAAE,SAAS;AAAA,EAC9B,cAAc,EAAE,OAAO,EAAE,SAAS;AAAA,EAClC,aAAa,EAAE,KAAK,qBAAqB,EAAE,SAAS;AAAA,EACpD,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,EAChC,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACtC,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,EACjC,QAAQ,EAAE,OAAO,EAAE,SAAS;AAAA,EAC5B,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACpC,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACnC,aAAa,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACxC,YAAY,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACvC,iBAAiB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC5C,UAAU,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAM,EAAE,SAAS;AAAA,EACxD,cAAc,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,SAAS;AAAA,EACjD,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,SAAS,EAAE,KAAK,CAAC,OAAO,MAAM,CAAC,EAAE,SAAS;AAAA,EAC1C,aAAa,EAAE,OAAO,QAAQ,EAAE,SAAS;AAAA,EACzC,gBAAgB,EAAE,OAAO,EAAE,MAAM,iBAAiB,EAAE,SAAS;AAC/D,CAAC,EACA,YAAY;AAIf,MAAM,gBAAgB;AAAA,EACpB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,uBAAuB,EAAE;AAAA,EACrE,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,yBAAyB,EAAE;AAAA,EACxE,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,yBAAyB,EAAE;AAAA,EACvE,QAAQ,EAAE,aAAa,MAAM,iBAAiB,CAAC,yBAAyB,EAAE;AAC5E;AAEO,MAAM,WAAW;AAEjB,SAAS,YAAY,KAAwB;AAClD,MAAI,CAAC,IAAK,QAAO,CAAC;AAClB,SAAO,IACJ,MAAM,GAAG,EACT,IAAI,CAAC,UAAU,MAAM,KAAK,CAAC,EAC3B,OAAO,CAAC,UAAU,WAAW,KAAK,KAAK,CAAC;AAC7C;AAEA,eAAsB,oBACpB,OACA,KACkC;AAClC,QAAM,UAAmC,CAAC;AAC1C,QAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,QAAM,uBAAsD,EAAE,OAAO,KAAK;AAE1E,QAAM,sBAAsB,CAAC,QAAkB;AAC7C,UAAM,aAAa,IAAI;AAAA,MACrB,CAAC,OAAqB,OAAO,OAAO,YAAY,GAAG,KAAK,EAAE,SAAS;AAAA,IACrE;AACA,UAAM,UAAU,IAAI,IAAI,UAAU;AAClC,QAAI,CAAC,QAAQ,MAAM;AACjB,2BAAqB,QAAQ,oBAAI,IAAI;AACrC;AAAA,IACF;AACA,QAAI,CAAC,qBAAqB,OAAO;AAC/B,2BAAqB,QAAQ;AAC7B;AAAA,IACF;AACA,yBAAqB,QAAQ,IAAI;AAAA,MAC/B,MAAM,KAAK,qBAAqB,KAAK,EAAE,OAAO,CAAC,OAAO,QAAQ,IAAI,EAAE,CAAC;AAAA,IACvE;AAAA,EACF;AAEA,QAAM,0BAA0B,MAAM;AACpC,QAAI,CAAC,qBAAqB,MAAO;AACjC,QAAI,qBAAqB,MAAM,SAAS,GAAG;AACzC,cAAQ,KAAK,EAAE,KAAK,uCAAuC;AAC3D;AAAA,IACF;AACA,UAAM,MAAM,MAAM,KAAK,qBAAqB,KAAK;AACjD,UAAM,WAAW,QAAQ;AACzB,QAAI,YAAY,OAAO,aAAa,UAAU;AAC5C,UACE,SAAS,YACT,OAAQ,SAA+B,QAAQ,UAC/C;AACA,cAAM,SAAU,SAA6B;AAC7C,YAAI,CAAC,qBAAqB,MAAM,IAAI,MAAM,GAAG;AAC3C,kBAAQ,KAAK,EAAE,KAAK,uCAAuC;AAAA,QAC7D;AACA;AAAA,MACF;AACA,UACE,SAAS,YACT,MAAM,QAAS,SAA+B,GAAG,GACjD;AACA,cAAM,SAAU,SAA+B,IAAI;AAAA,UAAO,CAAC,OACzD,qBAAqB,MAAO,IAAI,EAAE;AAAA,QACpC;AACA,gBAAQ,KAAK,OAAO,SAChB,EAAE,KAAK,OAAO,IACd,EAAE,KAAK,uCAAuC;AAClD;AAAA,MACF;AAAA,IACF;AACA,YAAQ,KAAK,IAAI,WAAW,IAAI,EAAE,KAAK,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,IAAI;AAAA,EAC/D;AACA,MAAI,MAAM,IAAI;AACZ,YAAQ,KAAK,EAAE,KAAK,MAAM,GAAG;AAAA,EAC/B;AACA,MAAI,MAAM,UAAU,MAAM,OAAO,KAAK,GAAG;AACvC,YAAQ,kBAAkB,EAAE,KAAK,MAAM,OAAO,KAAK,EAAE;AAAA,EACvD;AACA,QAAM,SAAS,iBAAiB,MAAM,QAAQ;AAC9C,MAAI,WAAW,QAAW;AACxB,YAAQ,YAAY;AAAA,EACtB;AACA,QAAM,eAAe,iBAAiB,MAAM,YAAY;AACxD,MAAI,iBAAiB,QAAW;AAC9B,YAAQ,kBAAkB;AAAA,EAC5B;AACA,MAAI,MAAM,aAAa;AACrB,YAAQ,eAAe,EAAE,KAAK,MAAM,YAAY;AAAA,EAClD;AACA,QAAM,QAAQ;AAAA,IACZ,gBAAgB,IAAI,0BAA0B,IAAI,MAAM,SAAS;AAAA,IACjE,UAAU,IAAI,MAAM,YAAY;AAAA,EAClC;AACA,QAAM,OAAO,mBAAmB,MAAM,MAAM;AAC5C,QAAM,mBAAmB,YAAY,MAAM,UAAU;AACrD,QAAM,oBAAoB,YAAY,MAAM,WAAW;AACvD,QAAM,eAAe,YAAY,MAAM,MAAM;AAC7C,QAAM,iBACJ,OAAO,MAAM,mBAAmB,YAChC,MAAM,eAAe,KAAK,EAAE,SACxB,MAAM,eAAe,KAAK,IAC1B;AACN,QAAM,WAAW,IAAI,MAAM,YAAY;AAQvC,QAAM,aAAa,YAAsC;AACvD,QAAI,CAAC,KAAM,QAAO;AAClB,UAAM,OAAO,IAAI,kBAAkB,IAAI,CAAC;AACxC,UAAM,gBAAgB,MAAM;AAAA,MAC1B;AAAA,MACA;AAAA,MACA;AAAA,QACE,GAAG;AAAA,QACH,GAAI,MAAM,cAAc,CAAC,IAAI,EAAE,WAAW,KAAK;AAAA,QAC/C,KAAK;AAAA,UACH,EAAE,OAAO,EAAE,QAAQ,KAAK,EAAE;AAAA,UAC1B,EAAE,UAAU,EAAE,QAAQ,KAAK,EAAE;AAAA,UAC7B,EAAE,aAAa,EAAE,QAAQ,KAAK,EAAE;AAAA,UAChC,EAAE,KAAK,EAAE,QAAQ,KAAK,EAAE;AAAA,UACxB,EAAE,QAAQ,EAAE,QAAQ,KAAK,EAAE;AAAA,QAC7B;AAAA,MACF;AAAA,MACA,EAAE,QAAQ,CAAC,IAAI,EAAE;AAAA,MACjB;AAAA,IACF;AACA,WAAO,cACJ,IAAI,CAAC,YAAY,QAAQ,EAAE,EAC3B,OAAO,CAAC,OAAqB,OAAO,OAAO,YAAY,GAAG,SAAS,CAAC;AAAA,EACzE;AAEA,QAAM,cAAc,YAAsC;AACxD,QAAI,CAAC,iBAAiB,OAAQ,QAAO;AACrC,UAAM,YAAY,MAAM;AAAA,MACtB;AAAA,MACA;AAAA,MACA;AAAA,QACE,WAAW,EAAE,KAAK,iBAAiB;AAAA,QACnC,WAAW;AAAA,QACX,GAAG;AAAA,MACL;AAAA,MACA,EAAE,QAAQ,CAAC,MAAM,SAAS,EAAE;AAAA,MAC5B;AAAA,IACF;AACA,WAAO,UACJ;AAAA,MAAI,CAAC,UACJ,OAAO,MAAM,YAAY,WACrB,MAAM,UACL,MAAM,SAAS,MAAM;AAAA,IAC5B,EACC,OAAO,CAAC,OAAqB,CAAC,CAAC,EAAE;AAAA,EACtC;AAEA,QAAM,eAAe,YAAsC;AACzD,QAAI,CAAC,kBAAkB,OAAQ,QAAO;AACtC,UAAM,cAAc,MAAM;AAAA,MACxB;AAAA,MACA;AAAA,MACA,EAAE,UAAU,EAAE,KAAK,kBAAkB,GAAG,GAAG,MAAM;AAAA,MACjD,EAAE,QAAQ,CAAC,MAAM,SAAS,EAAE;AAAA,MAC5B;AAAA,IACF;AACA,WAAO,YACJ;AAAA,MAAI,CAAC,eACJ,OAAO,WAAW,YAAY,WAC1B,WAAW,UACV,WAAW,SAAS,MAAM;AAAA,IACjC,EACC,OAAO,CAAC,OAAqB,CAAC,CAAC,EAAE;AAAA,EACtC;AAEA,QAAM,UAAU,YAAsC;AACpD,QAAI,CAAC,aAAa,OAAQ,QAAO;AACjC,UAAM,cAAc,MAAM;AAAA,MACxB;AAAA,MACA;AAAA,MACA,EAAE,KAAK,EAAE,KAAK,aAAa,GAAG,GAAG,MAAM;AAAA,MACvC,EAAE,QAAQ,CAAC,MAAM,SAAS,EAAE;AAAA,MAC5B;AAAA,IACF;AACA,WAAO,YACJ;AAAA,MAAI,CAAC,eACJ,OAAO,WAAW,YAAY,WAC1B,WAAW,UACV,WAAW,SAAS,MAAM;AAAA,IACjC,EACC,OAAO,CAAC,OAAqB,CAAC,CAAC,EAAE;AAAA,EACtC;AAEA,QAAM,kBAAkB,YAA8C;AACpE,QAAI;AACF,YAAM,WAAW,IAAI,UAAU,QAAQ,IAAI;AAC3C,aAAO,MAAM,iCAAiC;AAAA,QAC5C,WAAW,CAAC,EAAE,QAAQ,eAAe;AAAA,QACrC;AAAA,QACA,IAAI;AAAA,QACJ;AAAA,QACA,UAAU,kBAAkB;AAAA,MAC9B,CAAC;AAAA,IACH,SAAS,KAAK;AAGZ,aAAO,MAAM,8CAA8C,EAAE,IAAI,CAAC;AAClE,aAAO,CAAC;AAAA,IACV;AAAA,EACF;AAEA,QAAM,CAAC,WAAW,YAAY,aAAa,QAAQ,SAAS,IAC1D,MAAM,QAAQ,IAAI;AAAA,IAChB,WAAW;AAAA,IACX,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,gBAAgB;AAAA,EAClB,CAAC;AAKH,aAAW,cAAc,CAAC,WAAW,YAAY,aAAa,MAAM,GAAG;AACrE,QAAI,WAAY,qBAAoB,UAAU;AAAA,EAChD;AACA,SAAO,OAAO,SAAS,SAAS;AAChC,0BAAwB;AACxB,SAAO;AACT;AAEO,SAAS,oBACd,OACA,iBACgB;AAChB,QAAM,WAAW,OAAO,SAAS,OAAO,MAAM,QAAQ,CAAC,IACnD,OAAO,MAAM,QAAQ,IACrB;AACJ,QAAM,aAAa,MAAM,YAAY,IAAI,KAAK,MAAM,SAAS,IAAI,oBAAI,KAAK;AAC1E,QAAM,YAAY,MAAM,aAAa,mBAAmB;AACxD,SAAO;AAAA,IACL;AAAA,IACA,SAAS,MAAM,WAAW;AAAA,IAC1B,QAAQ,MAAM,UAAU;AAAA,IACxB,aAAa,MAAM,eAAe;AAAA,IAClC,YAAY,MAAM,cAAc;AAAA,IAChC,iBAAiB,MAAM,mBAAmB;AAAA,IAC1C,UAAU,OAAO,SAAS,QAAQ,KAAK,WAAW,IAAI,WAAW;AAAA,IACjE,MAAM,OAAO,MAAM,WAAW,QAAQ,CAAC,IAAI,oBAAI,KAAK,IAAI;AAAA,EAC1D;AACF;AAmCA,eAAe,0BACb,SACA,KACe;AACf,QAAM,QAAQ,MAAM,QAAQ,SAAS,KAAK,IAAI,QAAQ,QAAQ,CAAC;AAC/D,MAAI,CAAC,MAAM,OAAQ;AACnB,QAAM,aAAa,MAChB,IAAI,CAAC,SAAU,OAAO,KAAK,OAAO,WAAW,KAAK,KAAK,IAAK,EAC5D,OAAO,CAAC,OAAqB,CAAC,CAAC,EAAE;AACpC,MAAI,CAAC,WAAW,OAAQ;AACxB,MAAI;AACF,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,UAAM,QAAQ;AAAA,MACZ,gBAAgB,IAAI,0BAA0B,IAAI,MAAM,SAAS;AAAA,MACjE,UAAU,IAAI,MAAM,YAAY;AAAA,IAClC;AACA,UAAM,SAAS,MAAM;AAAA,MACnB;AAAA,MACA;AAAA,MACA,EAAE,SAAS,EAAE,KAAK,WAAW,GAAG,WAAW,MAAM,GAAG,MAAM;AAAA,MAC1D,EAAE,SAAS,EAAE,WAAW,MAAM,EAAE;AAAA,MAChC;AAAA,IACF;AACA,UAAM,aAAa,MAAM;AAAA,MACvB,IAAI;AAAA,QACF,OACG,IAAI,CAAC,UAAU,MAAM,SAAS,EAC9B;AAAA,UACC,CAAC,OAAqB,OAAO,OAAO,YAAY,GAAG,SAAS;AAAA,QAC9D;AAAA,MACJ;AAAA,IACF;AACA,UAAM,gBAAgB,oBAAI,IAGxB;AACF,QAAI,WAAW,QAAQ;AACrB,YAAM,sBAAsB;AAAA,QAC1B,EAAE,IAAI,EAAE,KAAK,WAAW,EAAE;AAAA,QAC1B;AAAA,UACE,gBAAgB,IAAI,0BAA0B,IAAI,MAAM,SAAS;AAAA,UACjE,iBAAiB,MAAM,QAAQ,IAAI,eAAe,IAC9C,IAAI,kBACJ;AAAA,UACJ,UAAU,IAAI,MAAM,YAAY;AAAA,QAClC;AAAA,MACF;AACA,YAAM,WAAW,MAAM,mBAAmB,IAAI,cAAc,qBAAqB;AAAA,QAC/E,QAAQ,CAAC,MAAM,QAAQ,MAAM;AAAA,MAC/B,CAAC;AACD,iBAAW,WAAW,UAAU;AAC9B,sBAAc,IAAI,QAAQ,IAAI;AAAA,UAC5B,MAAM,QAAQ;AAAA,UACd,MAAM,QAAQ,QAAQ;AAAA,QACxB,CAAC;AAAA,MACH;AAAA,IACF;AACA,UAAM,kBAAkB,oBAAI,IAA4C;AACxE,eAAW,SAAS,QAAQ;AAC1B,YAAM,YACJ,OAAO,MAAM,YAAY,WACrB,MAAM,UACL,MAAM,SAAS,MAAM;AAC5B,UAAI,CAAC,UAAW;AAChB,YAAM,cAAc,cAAc,IAAI,MAAM,SAAS;AACrD,YAAM,QAAQ,gBAAgB,IAAI,SAAS,KAAK,CAAC;AACjD,YAAM,KAAK;AAAA,QACT,IAAI,MAAM;AAAA,QACV,WAAW,MAAM;AAAA,QACjB,aAAa,aAAa,QAAQ;AAAA,QAClC,aAAa,aAAa,QAAQ;AAAA,QAClC,OAAO,MAAM;AAAA,QACb,aAAa,MAAM,eAAe;AAAA,QAClC,UAAU,MAAM;AAAA,QAChB,gBAAgB,MAAM,kBAAkB;AAAA,QACxC,iBAAiB,MAAM,mBAAmB;AAAA,QAC1C,UAAU,MAAM,YAAY;AAAA,QAC5B,WACE,MAAM,qBAAqB,OACvB,MAAM,UAAU,YAAY,IAC3B,OAAO,MAAM,cAAc,WAAW,MAAM,YAAY;AAAA,MACjE,CAAC;AACD,sBAAgB,IAAI,WAAW,KAAK;AAAA,IACtC;AAEA,UAAM,sBAAsB,MAAM;AAAA,MAChC;AAAA,MACA;AAAA,MACA,EAAE,SAAS,EAAE,KAAK,WAAW,GAAG,GAAG,MAAM;AAAA,MACzC,EAAE,UAAU,CAAC,UAAU,GAAG,SAAS,EAAE,UAAU,MAAM,EAAE;AAAA,MACvD;AAAA,IACF;AACA,UAAM,YAAY,oBAAI,IAAY;AAClC,eAAW,cAAc,qBAAqB;AAC5C,YAAM,WACJ,OAAO,WAAW,aAAa,WAC3B,OACC,WAAW,YAAY;AAC9B,UAAI,CAAC,SAAU;AACf,YAAM,WAAW,SAAS,YAAY;AACtC,UAAI,SAAU,WAAU,IAAI,QAAQ;AAAA,IACtC;AACA,UAAM,mBAAmB,UAAU,OAC/B,MAAM;AAAA,MACJ;AAAA,MACA;AAAA,MACA,EAAE,IAAI,EAAE,KAAK,MAAM,KAAK,SAAS,EAAE,GAAG,GAAG,MAAM;AAAA,MAC/C,EAAE,QAAQ,CAAC,MAAM,MAAM,EAAE;AAAA,MACzB;AAAA,IACF,IACA,CAAC;AACL,UAAM,iBAAiB,oBAAI,IAA2B;AACtD,eAAW,UAAU,kBAAkB;AACrC,qBAAe,IAAI,OAAO,IAAI,OAAO,QAAQ,IAAI;AAAA,IACnD;AACA,UAAM,sBAAsB,oBAAI,IAS9B;AACF,eAAW,cAAc,qBAAqB;AAC5C,YAAM,YACJ,OAAO,WAAW,YAAY,WAC1B,WAAW,UACV,WAAW,SAAS,MAAM;AACjC,UAAI,CAAC,UAAW;AAChB,YAAM,WACJ,OAAO,WAAW,aAAa,WAC3B,OACC,WAAW,YAAY;AAC9B,UAAI,CAAC,SAAU;AACf,YAAM,WAAW,SAAS,YAAY;AACtC,YAAM,aAAa,WACd,eAAe,IAAI,QAAQ,KAAK,OACjC;AACJ,YAAM,SAAS,oBAAoB,IAAI,SAAS,KAAK,CAAC;AACtD,aAAO,KAAK;AAAA,QACV,IAAI,SAAS;AAAA,QACb,MAAM,SAAS,QAAQ;AAAA,QACvB,UAAU,SAAS,YAAY;AAAA,QAC/B;AAAA,QACA;AAAA,MACF,CAAC;AACD,0BAAoB,IAAI,WAAW,MAAM;AAAA,IAC3C;AAEA,UAAM,iBAAiB,MAAM;AAAA,MAC3B;AAAA,MACA;AAAA,MACA,EAAE,SAAS,EAAE,KAAK,WAAW,EAAE;AAAA,MAC/B,EAAE,UAAU,CAAC,KAAK,EAAE;AAAA,MACpB;AAAA,QACE,UAAU,IAAI,MAAM,YAAY;AAAA,QAChC,gBAAgB,IAAI,MAAM,SAAS;AAAA,MACrC;AAAA,IACF;AACA,UAAM,gBAAgB,oBAAI,IAAsB;AAChD,eAAW,cAAc,gBAAgB;AACvC,YAAM,YACJ,OAAO,WAAW,YAAY,WAC1B,WAAW,UACV,WAAW,SAAS,MAAM;AACjC,UAAI,CAAC,UAAW;AAChB,YAAM,MACJ,OAAO,WAAW,QAAQ,WAAW,OAAQ,WAAW,OAAO;AACjE,UAAI,CAAC,IAAK;AACV,YAAM,QACJ,OAAO,IAAI,UAAU,YAAY,IAAI,MAAM,KAAK,EAAE,SAC9C,IAAI,QACJ;AACN,UAAI,CAAC,MAAO;AACZ,YAAM,SAAS,cAAc,IAAI,SAAS,KAAK,CAAC;AAChD,aAAO,KAAK,KAAK;AACjB,oBAAc,IAAI,WAAW,MAAM;AAAA,IACrC;AAEA,UAAM,WAAW,MAAM;AAAA,MACrB;AAAA,MACA;AAAA,MACA,EAAE,SAAS,EAAE,KAAK,WAAW,GAAG,WAAW,MAAM,GAAG,MAAM;AAAA,MAC1D,EAAE,QAAQ,CAAC,MAAM,SAAS,EAAE;AAAA,MAC5B;AAAA,IACF;AACA,UAAM,mBAAmB,oBAAI,IAAoB;AACjD,eAAW,WAAW,UAAU;AAC9B,YAAM,YACJ,OAAO,QAAQ,YAAY,WACvB,QAAQ,UACP,QAAQ,SAAS,MAAM;AAC9B,UAAI,CAAC,UAAW;AAChB,uBAAiB,IAAI,QAAQ,IAAI,SAAS;AAAA,IAC5C;AACA,UAAM,aAAa,MAAM,KAAK,iBAAiB,KAAK,CAAC;AACrD,UAAM,aACJ,WAAW,SAAS,IAChB;AAAA,MACE,KAAK;AAAA,QACH,EAAE,SAAS,EAAE,KAAK,WAAW,EAAE;AAAA,QAC/B,EAAE,SAAS,EAAE,KAAK,WAAW,EAAE;AAAA,MACjC;AAAA,IACF,IACA,EAAE,SAAS,EAAE,KAAK,WAAW,EAAE;AACrC,UAAM,YAAY,MAAM;AAAA,MACtB;AAAA,MACA;AAAA,MACA,EAAE,GAAG,YAAY,GAAG,MAAM;AAAA,MAC1B,EAAE,UAAU,CAAC,SAAS,WAAW,WAAW,WAAW,EAAE;AAAA,MACzD;AAAA,IACF;AACA,UAAM,kBAAkB,oBAAI,IAAwB;AACpD,eAAW,SAAS,WAAW;AAC7B,UAAI,YAA2B;AAC/B,UAAI,MAAM,SAAS;AACjB,oBACE,OAAO,MAAM,YAAY,WACrB,MAAM,UACL,MAAM,SAAS,MAAM;AAAA,MAC9B,WAAW,MAAM,SAAS;AACxB,cAAM,YACJ,OAAO,MAAM,YAAY,WAAW,MAAM,UAAU,MAAM,QAAQ;AACpE,oBAAY,iBAAiB,IAAI,SAAS,KAAK;AAAA,MACjD;AACA,UAAI,CAAC,UAAW;AAChB,YAAM,QAAQ,gBAAgB,IAAI,SAAS,KAAK,CAAC;AACjD,YAAM,KAAK,KAAK;AAChB,sBAAgB,IAAI,WAAW,KAAK;AAAA,IACtC;AAEA,UAAM,yBAAyB;AAAA,MAC7B,IAAI,MAAM;AAAA,IACZ;AACA,UAAM,uBAAuB,oBAAI,IAAiC;AAClE,UAAM,2BACJ,IAAI,0BAA0B,IAAI,MAAM,SAAS;AACnD,UAAM,qBAAqB,IAAI,MAAM,YAAY;AACjD,QACE,0BACA,WAAW,UACX,4BACA,oBACA;AACA,YAAM,iBAAiB,MAAM;AAAA,QAC3B;AAAA,QACA;AAAA,QACA;AAAA,UACE,SAAS,EAAE,KAAK,WAAW;AAAA,UAC3B,gBAAgB;AAAA,UAChB,UAAU;AAAA,UACV,WAAW;AAAA,UACX,UAAU;AAAA,QACZ;AAAA,QACA,EAAE,QAAQ,CAAC,MAAM,WAAW,YAAY,cAAc,EAAE;AAAA,QACxD,EAAE,gBAAgB,0BAA0B,UAAU,mBAAmB;AAAA,MAC3E;AACA,iBAAW,OAAO,gBAAgB;AAChC,cAAM,YACJ,OAAO,IAAI,YAAY,WACnB,IAAI,UACH,IAAI,SAAS,MAAM;AAC1B,cAAM,UAAU,gBAAgB,IAAI,QAAQ;AAC5C,cAAM,SAAS,OAAO,IAAI,YAAY;AACtC,YAAI,CAAC,aAAa,CAAC,WAAW,CAAC,OAAO,SAAS,MAAM,KAAK,UAAU;AAClE;AACF,cAAM,SACJ,qBAAqB,IAAI,SAAS,KAAK,oBAAI,IAAoB;AACjE,eAAO,IAAI,SAAS,MAAM;AAC1B,6BAAqB,IAAI,WAAW,MAAM;AAAA,MAC5C;AAAA,IACF;AAEA,UAAM,mBAAmB,YAAY,IAAI,MAAM,UAAU;AACzD,UAAM,iBACJ,IAAI,MAAM,cACT,iBAAiB,WAAW,IAAI,iBAAiB,CAAC,IAAI;AACzD,UAAM,iBAAiB,oBAAoB,IAAI,OAAO,cAAc;AACpE,UAAM,iBAAiB,IAAI,UAAU;AAAA,MACnC;AAAA,IACF;AAEA,UAAM,iBAA8E,CAAC;AACrF,eAAW,QAAQ,OAAO;AACxB,YAAM,KAAK,OAAO,KAAK,OAAO,WAAW,KAAK,KAAK;AACnD,UAAI,CAAC,IAAI;AACP,uBAAe,KAAK,IAAI;AACxB;AAAA,MACF;AACA,YAAM,eAAe,gBAAgB,IAAI,EAAE,KAAK,CAAC;AACjD,WAAK,SAAS;AACd,YAAMA,cAAa,MAAM;AAAA,QACvB,IAAI;AAAA,UACF,aACG;AAAA,YAAI,CAAC,UACJ,OAAO,MAAM,cAAc,WAAW,MAAM,YAAY;AAAA,UAC1D,EACC,OAAO,CAAC,cAAmC,CAAC,CAAC,SAAS;AAAA,QAC3D;AAAA,MACF;AACA,WAAK,aAAaA;AAClB,YAAM,aAAa,oBAAoB,IAAI,EAAE,KAAK,CAAC;AACnD,WAAK,aAAa;AAClB,WAAK,cAAc,WAAW,IAAI,CAAC,aAAa,SAAS,EAAE;AAC3D,WAAK,OAAO,cAAc,IAAI,EAAE,KAAK,CAAC;AACtC,UAAI,KAAK,kBAAkB,MAAM;AAC/B,aAAK,UAAU;AACf,uBAAe,KAAK,IAAI;AACxB;AAAA,MACF;AACA,YAAM,kBAAkB,gBAAgB,IAAI,EAAE,KAAK,CAAC;AACpD,YAAM,gCAAgC,MAAM;AAC1C,YAAI,CAAC,uBAAwB,QAAO,eAAe;AACnD,cAAM,WAAW,gBAAgB,KAAK,YAAY;AAClD,YAAI,CAAC,YAAY,2BAA2B;AAC1C,iBAAO,eAAe;AACxB,cAAM,qBAAqB,qBAAqB,IAAI,EAAE;AACtD,cAAM,SAAS,oBAAoB,IAAI,sBAAsB,KAAK;AAClE,YAAI,CAAC,UAAU,CAAC,OAAO,SAAS,MAAM,KAAK,UAAU,GAAG;AACtD,iBAAO,MAAM,8CAA8C,EAAE,WAAW,IAAI,MAAM,wBAAwB,OAAO,CAAC;AAClH,iBAAO,eAAe;AAAA,QACxB;AACA,cAAM,aAAa,eAAe,WAAW;AAC7C,eAAO,OAAO,SAAS,UAAU,KAAK,aAAa,IAC/C,aACA,eAAe;AAAA,MACrB,GAAG;AACH,YAAM,uBACJ,eAAe,aAAaA,YAAW,WAAW,IAC9C,iBACA,EAAE,GAAG,gBAAgB,WAAWA,YAAW,CAAC,EAAE;AACpD,qBAAe,KAAK;AAAA,QAClB,MAAM;AAAA,QACN,SAAS,EAAE,GAAG,sBAAsB,UAAU,6BAA6B;AAAA,MAC7E,CAAC;AAAA,IACH;AAEA,UAAM,gBAAsE,CAAC;AAC7E,UAAM,iBAA2B,CAAC;AAClC,aAAS,IAAI,GAAG,IAAI,eAAe,QAAQ,KAAK;AAC9C,UAAI,eAAe,CAAC,MAAM,MAAM;AAC9B,sBAAc,KAAK,eAAe,CAAC,CAAE;AACrC,uBAAe,KAAK,CAAC;AAAA,MACvB;AAAA,IACF;AACA,UAAM,eAAe,MAAM,eAAe,iBAAiB,aAAa;AAExE,aAAS,IAAI,GAAG,IAAI,eAAe,QAAQ,KAAK;AAC9C,YAAM,OAAO,MAAM,eAAe,CAAC,CAAC;AACpC,YAAM,OAAO,aAAa,CAAC;AAC3B,UAAI,MAAM;AACR,aAAK,UAAU;AAAA,UACb,MAAM,qBAAqB,IAAI;AAAA,UAC/B,eACE,OAAO,KAAK,cAAc,WACtB,KAAK,YACJ,KAAK,WAAW,MAAM;AAAA,UAC7B,iBAAiB,qBAAqB,IAAI;AAAA,UAC1C,eAAe,KAAK;AAAA,UACpB,gBAAgB,KAAK;AAAA,UACrB,kBAAkB,KAAK;AAAA,UACvB,cAAc,KAAK;AAAA,UACnB,cAAc,KAAK,eAAe;AAAA,UAClC,UAAU,KAAK,WAAW;AAAA,UAC1B,YAAY,KAAK,aAAa;AAAA,UAC9B,OAAO;AAAA,YACL,YAAY,sBAAsB,IAAI;AAAA,YACtC,UAAU,oBAAoB,IAAI;AAAA,YAClC,YAAY,sBAAsB,IAAI;AAAA,YACtC,SAAS,KAAK,UAAU;AAAA,YACxB,eAAe,KAAK,eAAe;AAAA,YACnC,aAAa,KAAK,cAAc;AAAA,YAChC,mBAAmB,KAAK,mBAAmB;AAAA,UAC7C;AAAA,QACF;AAAA,MACF,OAAO;AACL,aAAK,UAAU;AAAA,MACjB;AAAA,IACF;AAAA,EACF,SAAS,OAAO;AACd,WAAO,MAAM,6DAA6D,EAAE,KAAK,MAAM,CAAC;AAAA,EAC1F;AAEA,QAAM,aAAa,IAAI,MAAM,SAAS,mBAAmB,IAAI,MAAM,MAAM,IAAI;AAC7E,MAAI,cAAc,CAAC,IAAI,MAAM,aAAa,MAAM,QAAQ,QAAQ,KAAK,GAAG;AACtE,UAAM,SAAS,WAAW,YAAY;AACtC,YAAQ,MAAM,KAAK,CAAC,GAAG,MAAM;AAC3B,YAAM,SAAS,4BAA4B,QAAQ,EAAE,OAAO,EAAE,GAAG;AACjE,YAAM,SAAS,4BAA4B,QAAQ,EAAE,OAAO,EAAE,GAAG;AACjE,UAAI,WAAW,OAAQ,QAAO,SAAS;AACvC,cAAQ,EAAE,SAAS,IAAI,cAAc,EAAE,SAAS,EAAE;AAAA,IACpD,CAAC;AAAA,EACH;AACF;AAEO,SAAS,4BACd,QACA,OACA,KACQ;AACR,QAAM,KAAK,SAAS,IAAI,YAAY;AACpC,QAAM,KAAK,OAAO,IAAI,YAAY;AAClC,MAAI,MAAM,OAAQ,QAAO;AACzB,MAAI,MAAM,OAAQ,QAAO;AACzB,MAAI,EAAE,WAAW,MAAM,EAAG,QAAO;AACjC,MAAI,EAAE,WAAW,MAAM,EAAG,QAAO;AACjC,MAAI,EAAE,SAAS,MAAM,EAAG,QAAO;AAC/B,MAAI,EAAE,SAAS,MAAM,EAAG,QAAO;AAC/B,SAAO;AACT;AAEA,MAAM,OAAO,cAAc;AAAA,EACzB,UAAU;AAAA,EACV,KAAK;AAAA,IACH,QAAQ;AAAA,IACR,SAAS;AAAA,IACT,UAAU;AAAA,IACV,aAAa;AAAA,IACb,iBAAiB;AAAA,EACnB;AAAA,EACA,SAAS;AAAA,IACP,YAAY,EAAE,QAAQ;AAAA,EACxB;AAAA,EACA,MAAM;AAAA,IACJ,QAAQ;AAAA,IACR,UAAU,EAAE,QAAQ;AAAA,IACp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sBAAsB,EAAE,WAAW,CAAC,EAAE,QAAQ,eAAe,EAAE;AAAA,IAC/D,cAAc;AAAA,MACZ,OAAO,EAAE;AAAA,MACT,KAAK,EAAE;AAAA,MACP,WAAW,EAAE;AAAA,MACb,WAAW,EAAE;AAAA,IACf;AAAA,IACA,cAAc;AAAA,IACd,eAAe,CAAC,SAA6C;AAC3D,UAAI,CAAC,KAAM,QAAO;AAClB,YAAM,aAAa,EAAE,GAAG,KAAK;AAC7B,YAAM,YAAY,6BAA6B,IAAI;AACnD,iBAAW,OAAO,OAAO,KAAK,UAAU,GAAG;AACzC,YAAI,IAAI,WAAW,KAAK,GAAG;AACzB,iBAAO,WAAW,GAAG;AAAA,QACvB;AAAA,MACF;AACA,YAAM,cAAc,qBAAqB,WAAW,YAAY,KAAK;AACrE,YAAM,mBACJ,qBAAqB,WAAW,kBAAkB,KAAK;AACzD,YAAM,yBACJ,qBAAqB,WAAW,yBAAyB,KAAK;AAChE,aAAO;AAAA,QACL,GAAG;AAAA,QACH,cAAc;AAAA,QACd,oBAAoB;AAAA,QACpB,2BAA2B;AAAA,QAC3B,GAAG;AAAA,QACH,YAAY;AAAA,UACV,SAAS,QAAQ,WAAW,kBAAkB;AAAA,UAC9C,gBAAgB;AAAA,UAChB,eAAe,WAAW,4BAA4B;AAAA,QACxD;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA,OAAO;AAAA,IACL,WAAW;AAAA,EACb;AAAA,EACA,SAAS;AAAA,IACP,QAAQ;AAAA,MACN,WAAW;AAAA,MACX,QAAQ;AAAA,MACR,UAAU,OAAO,EAAE,KAAK,IAAI,MAAM;AAChC,cAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,cAAM,SAAS;AAAA,UACb;AAAA,UACA,OAAO,CAAC;AAAA,UACR;AAAA,UACA;AAAA,QACF;AACA,cAAM,EAAE,MAAM,OAAO,IAAI,wBAAwB,MAAM;AACvD,eAAO,OAAO,KAAK,MAAM,EAAE,SACvB,EAAE,GAAG,MAAM,cAAc,OAAO,IAChC;AAAA,MACN;AAAA,MACA,UAAU,CAAC,EAAE,OAAO,OAAO;AAAA,QACzB,IAAI,QAAQ,aAAa,QAAQ,MAAM;AAAA,MACzC;AAAA,MACA,QAAQ;AAAA,IACV;AAAA,IACA,QAAQ;AAAA,MACN,WAAW;AAAA,MACX,QAAQ;AAAA,MACR,UAAU,OAAO,EAAE,KAAK,IAAI,MAAM;AAChC,cAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,cAAM,SAAS;AAAA,UACb;AAAA,UACA,OAAO,CAAC;AAAA,UACR;AAAA,UACA;AAAA,QACF;AACA,cAAM,EAAE,MAAM,OAAO,IAAI,wBAAwB,MAAM;AACvD,eAAO,OAAO,KAAK,MAAM,EAAE,SACvB,EAAE,GAAG,MAAM,cAAc,OAAO,IAChC;AAAA,MACN;AAAA,MACA,UAAU,OAAO,EAAE,IAAI,KAAK;AAAA,IAC9B;AAAA,IACA,QAAQ;AAAA,MACN,WAAW;AAAA,MACX,QAAQ;AAAA,MACR,UAAU,OAAO,EAAE,QAAQ,IAAI,MAAM;AACnC,cAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,cAAM,KAAK,oBAAoB,QAAQ,KAAK,SAAS;AACrD,YAAI,CAAC;AACH,gBAAM,IAAI,cAAc,KAAK;AAAA,YAC3B,OAAO;AAAA,cACL;AAAA,cACA;AAAA,YACF;AAAA,UACF,CAAC;AACH,eAAO,EAAE,GAAG;AAAA,MACd;AAAA,MACA,UAAU,OAAO,EAAE,IAAI,KAAK;AAAA,IAC9B;AAAA,EACF;AACF,CAAC;AAEM,MAAM,MAAM,KAAK;AACjB,MAAM,OAAO,KAAK;AAClB,MAAM,MAAM,KAAK;AACjB,MAAM,SAAS,KAAK;AAE3B,MAAM,wBAAwB,EAAE,OAAO;AAAA,EACrC,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACtC,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACzC,aAAa,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC5C,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACpC,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACvC,cAAc,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC7C,iBAAiB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS;AAAA,EACvD,uBAAuB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACtD,cAAc,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC7C,oBAAoB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACnD,6BAA6B,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC5D,oBAAoB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACnD,mBAAmB,EAAE,KAAK,CAAC,WAAW,QAAQ,IAAI,CAAC,EAAE,SAAS,EAAE,SAAS;AAAA,EACzE,oBAAoB,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS;AAAA,EACpD,2BAA2B,EACxB,KAAK,CAAC,MAAM,KAAK,MAAM,MAAM,IAAI,CAAC,EAClC,SAAS,EACT,SAAS;AAAA,EACZ,0BAA0B,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACzD,YAAY,EACT,OAAO;AAAA,IACN,SAAS,EAAE,QAAQ;AAAA,IACnB,gBAAgB,EAAE,KAAK,CAAC,MAAM,KAAK,MAAM,MAAM,IAAI,CAAC,EAAE,SAAS;AAAA,IAC/D,eAAe,EAAE,OAAO,EAAE,SAAS;AAAA,EACrC,CAAC,EACA,SAAS;AAAA,EACZ,kBAAkB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS;AAAA,EACxD,mBAAmB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAClD,cAAc,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC7C,aAAa,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC5C,YAAY,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS,EAAE,SAAS;AAAA,EAClE,iBAAiB,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS;AAAA,EACjD,WAAW,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS;AAAA,EAC3C,wBAAwB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACvD,YAAY,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC3C,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACxC,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACxC,yBAAyB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACxD,WAAW,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,SAAS,EAAE,SAAS;AAAA,EACnD,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACxC,gBAAgB,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS;AAAA,EAChD,iBAAiB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAChD,uBAAuB,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS;AAAA,EACvD,cAAc,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC7C,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC1C,sBAAsB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACrD,0BAA0B,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS;AAAA,EAC1D,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC1C,gBAAgB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC/C,gBAAgB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC/C,iBAAiB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAChD,eAAe,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC9C,eAAe,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC9C,qBAAqB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACpD,mBAAmB,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS;AAAA,EACnD,eAAe,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS;AAAA,EAC/C,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC1C,iBAAiB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAChD,eAAe,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC9C,UAAU,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS,EAAE,SAAS;AAAA,EAChE,sBAAsB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACrD,kBAAkB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS;AAAA,EACxD,YAAY,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC3C,YAAY,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC3C,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,CAAC,EAAE,SAAS;AAAA,EAC5D,YAAY,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,SAAS;AAAA,EACzC,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,CAAC,EAAE,SAAS;AAAA,EAChE,aAAa,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,SAAS;AAAA,EAC1C,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,SAAS;AAAA,EACnC,SAAS,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS,EAAE,SAAS;AACjE,CAAC;AAEM,MAAM,UAAU,yBAAyB;AAAA,EAC9C,cAAc;AAAA,EACd,YAAY;AAAA,EACZ,aAAa;AAAA,EACb,oBAAoB,8BAA8B,qBAAqB;AAAA,EACvE,QAAQ;AAAA,IACN,QAAQ;AAAA,IACR,aAAa;AAAA,EACf;AAAA,EACA,QAAQ;AAAA,IACN,QAAQ;AAAA,IACR,gBAAgB;AAAA,IAChB,aAAa;AAAA,EACf;AAAA,EACA,KAAK;AAAA,IACH,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAAA,IAC1C,gBAAgB;AAAA,IAChB,aAAa;AAAA,EACf;AACF,CAAC;",
   "names": ["channelIds"]
 }

package/dist/modules/customers/api/companies/[id]/people/route.js

@@ -1,6 +1,6 @@
 import { NextResponse } from "next/server";
 import { z } from "zod";
-import { CrudHttpError, isCrudHttpError } from "@open-mercato/shared/lib/crud/errors";
+import { CrudHttpError, isCrudHttpError, notFound } from "@open-mercato/shared/lib/crud/errors";
 import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
 import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
 import { resolveOrganizationScopeForRequest } from "@open-mercato/core/modules/directory/utils/organizationScope";
@@ -85,7 +85,7 @@ async function GET(req, ctx) {
       decryptionScope
     );
     if (!company) {
-      throw new CrudHttpError(404, { error: translate("customers.errors.company_not_found", "Company not found") });
+      throw notFound(translate("customers.errors.company_not_found", "Company not found"));
     }
     if (!isOrganizationReadAccessAllowed({ scope, auth, organizationId: company.organizationId })) {
       throw new CrudHttpError(403, { error: translate("customers.errors.access_denied", "Access denied") });

package/dist/modules/customers/api/companies/[id]/people/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../../src/modules/customers/api/companies/%5Bid%5D/people/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { CrudHttpError, isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { findOneWithDecryption, findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { isOrganizationReadAccessAllowed } from '@open-mercato/core/modules/directory/utils/organizationScopeGuard'\nimport {\n  CustomerEntity,\n  CustomerPersonCompanyLink,\n  CustomerPersonProfile,\n} from '../../../../data/entities'\nimport {\n  filterActivePersonCompanyLinks,\n  withActiveCustomerPersonCompanyLinkFilter,\n} from '../../../../lib/personCompanyLinkTable'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('customers')\n\nconst paramsSchema = z.object({\n  id: z.string().uuid(),\n})\n\nconst querySchema = z.object({\n  page: z.coerce.number().min(1).default(1),\n  pageSize: z.coerce.number().min(1).max(100).default(20),\n  search: z.string().optional(),\n  sort: z.enum(['name-asc', 'name-desc', 'recent']).default('name-asc'),\n})\n\ntype CompanyPersonItem = {\n  id: string\n  displayName: string\n  primaryEmail: string | null\n  primaryPhone: string | null\n  status: string | null\n  lifecycleStage: string | null\n  jobTitle: string | null\n  department: string | null\n  createdAt: string\n  organizationId: string\n  temperature: string | null\n  source: string | null\n  linkedAt: string | null\n}\n\nfunction matchesSearch(item: CompanyPersonItem, query: string): boolean {\n  const normalized = query.trim().toLowerCase()\n  if (!normalized.length) return true\n  return [\n    item.displayName,\n    item.primaryEmail,\n    item.primaryPhone,\n    item.jobTitle,\n    item.department,\n    item.status,\n    item.lifecycleStage,\n    item.source,\n  ]\n    .filter((value): value is string => typeof value === 'string' && value.length > 0)\n    .some((value) => value.toLowerCase().includes(normalized))\n}\n\nfunction sortItems(items: CompanyPersonItem[], sort: 'name-asc' | 'name-desc' | 'recent'): CompanyPersonItem[] {\n  if (sort === 'recent') {\n    return [...items].sort((left, right) => {\n      const leftTimestamp = left.linkedAt ? new Date(left.linkedAt).getTime() : new Date(left.createdAt).getTime()\n      const rightTimestamp = right.linkedAt ? new Date(right.linkedAt).getTime() : new Date(right.createdAt).getTime()\n      if (leftTimestamp === rightTimestamp) return left.displayName.localeCompare(right.displayName)\n      return rightTimestamp - leftTimestamp\n    })\n  }\n\n  return [...items].sort((left, right) => {\n    const compare = left.displayName.localeCompare(right.displayName, undefined, { sensitivity: 'base' })\n    return sort === 'name-asc' ? compare : -compare\n  })\n}\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['customers.companies.view'] },\n}\n\nexport async function GET(req: Request, ctx: { params?: { id?: string } }) {\n  const { translate } = await resolveTranslations()\n  try {\n    const { id } = paramsSchema.parse({ id: ctx.params?.id })\n    const auth = await getAuthFromRequest(req)\n    if (!auth?.tenantId) throw new CrudHttpError(401, { error: 'Unauthorized' })\n\n    const query = querySchema.parse({\n      page: new URL(req.url).searchParams.get('page') ?? undefined,\n      pageSize: new URL(req.url).searchParams.get('pageSize') ?? undefined,\n      search: new URL(req.url).searchParams.get('search') ?? undefined,\n      sort: new URL(req.url).searchParams.get('sort') ?? undefined,\n    })\n\n    const container = await createRequestContainer()\n    const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n    const em = (container.resolve('em') as EntityManager).fork()\n    const decryptionScope = {\n      tenantId: auth.tenantId,\n      organizationId: scope?.selectedId ?? auth.orgId ?? null,\n    }\n\n    const company = await findOneWithDecryption(\n      em,\n      CustomerEntity,\n      { id, kind: 'company', tenantId: auth.tenantId, deletedAt: null },\n      {},\n      decryptionScope,\n    )\n    if (!company) {\n      throw new CrudHttpError(404, { error: translate('customers.errors.company_not_found', 'Company not found') })\n    }\n\n    if (!isOrganizationReadAccessAllowed({ scope, auth, organizationId: company.organizationId })) {\n      throw new CrudHttpError(403, { error: translate('customers.errors.access_denied', 'Access denied') })\n    }\n\n    const entityScope = { tenantId: auth.tenantId, organizationId: company.organizationId }\n    const linkWhere = await withActiveCustomerPersonCompanyLinkFilter(\n      em,\n      {\n        company: company.id,\n        tenantId: company.tenantId,\n        organizationId: company.organizationId,\n      },\n      'customers.companies.people.GET',\n    )\n    const links = filterActivePersonCompanyLinks(\n      await findWithDecryption(\n        em,\n        CustomerPersonCompanyLink,\n        linkWhere,\n        { populate: ['person'] },\n        entityScope,\n      ),\n    )\n\n    const personIds = links\n      .map((link) => link.person?.id)\n      .filter((personId): personId is string => typeof personId === 'string' && personId.length > 0)\n\n    const profiles = personIds.length > 0\n      ? await findWithDecryption(\n          em,\n          CustomerPersonProfile,\n          {\n            entity: { $in: personIds },\n            tenantId: company.tenantId,\n            organizationId: company.organizationId,\n          },\n          {},\n          entityScope,\n        )\n      : []\n    const profileByPersonId = new Map(\n      profiles.map((profile) => [(profile.entity as { id: string }).id, profile]),\n    )\n\n    const items = links\n      .map((link) => {\n        const person = link.person\n        if (!person?.id) return null\n        const profile = profileByPersonId.get(person.id) ?? null\n        return {\n          id: person.id,\n          displayName: person.displayName ?? person.primaryEmail ?? person.id,\n          primaryEmail: person.primaryEmail ?? null,\n          primaryPhone: person.primaryPhone ?? null,\n          status: person.status ?? null,\n          lifecycleStage: person.lifecycleStage ?? null,\n          jobTitle: profile?.jobTitle ?? null,\n          department: profile?.department ?? null,\n          createdAt: person.createdAt.toISOString(),\n          organizationId: person.organizationId,\n          temperature: person.temperature ?? null,\n          source: person.source ?? null,\n          linkedAt: link.createdAt ? link.createdAt.toISOString() : null,\n        } satisfies CompanyPersonItem\n      })\n      .filter((item): item is CompanyPersonItem => item !== null)\n\n    const filtered = query.search?.trim().length ? items.filter((item) => matchesSearch(item, query.search ?? '')) : items\n    const sorted = sortItems(filtered, query.sort)\n    const total = sorted.length\n    const totalPages = Math.max(1, Math.ceil(total / query.pageSize))\n    const page = Math.min(query.page, totalPages)\n    const start = (page - 1) * query.pageSize\n\n    return NextResponse.json({\n      items: sorted.slice(start, start + query.pageSize),\n      total,\n      page,\n      pageSize: query.pageSize,\n      totalPages,\n    })\n  } catch (error) {\n    if (isCrudHttpError(error)) {\n      return NextResponse.json(error.body, { status: error.status })\n    }\n    logger.error('customers.companies.people.GET', { err: error })\n    return NextResponse.json({ error: translate('customers.errors.company_people_load_failed', 'Failed to load linked people') }, { status: 500 })\n  }\n}\n\nconst companyPeopleItemSchema = z.object({\n  id: z.string().uuid(),\n  displayName: z.string(),\n  primaryEmail: z.string().nullable(),\n  primaryPhone: z.string().nullable(),\n  status: z.string().nullable(),\n  lifecycleStage: z.string().nullable(),\n  jobTitle: z.string().nullable(),\n  department: z.string().nullable(),\n  createdAt: z.string(),\n  organizationId: z.string().uuid().nullable(),\n  temperature: z.string().nullable(),\n  source: z.string().nullable(),\n  linkedAt: z.string().nullable(),\n})\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Customers',\n  methods: {\n    GET: {\n      summary: 'List linked people for a company',\n      query: querySchema,\n      responses: [\n        {\n          status: 200,\n          description: 'Paginated linked people',\n          schema: z.object({\n            items: z.array(companyPeopleItemSchema),\n            total: z.number().int().nonnegative(),\n            page: z.number().int().min(1),\n            pageSize: z.number().int().min(1),\n            totalPages: z.number().int().min(1),\n          }),\n        },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAElB,SAAS,eAAe,uBAAuB;AAC/C,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AACnD,SAAS,2BAA2B;AAEpC,SAAS,uBAAuB,0BAA0B;AAC1D,SAAS,uCAAuC;AAChD;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,WAAW;AAEvC,MAAM,eAAe,EAAE,OAAO;AAAA,EAC5B,IAAI,EAAE,OAAO,EAAE,KAAK;AACtB,CAAC;AAED,MAAM,cAAc,EAAE,OAAO;AAAA,EAC3B,MAAM,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,QAAQ,CAAC;AAAA,EACxC,UAAU,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,QAAQ,EAAE;AAAA,EACtD,QAAQ,EAAE,OAAO,EAAE,SAAS;AAAA,EAC5B,MAAM,EAAE,KAAK,CAAC,YAAY,aAAa,QAAQ,CAAC,EAAE,QAAQ,UAAU;AACtE,CAAC;AAkBD,SAAS,cAAc,MAAyB,OAAwB;AACtE,QAAM,aAAa,MAAM,KAAK,EAAE,YAAY;AAC5C,MAAI,CAAC,WAAW,OAAQ,QAAO;AAC/B,SAAO;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,EACP,EACG,OAAO,CAAC,UAA2B,OAAO,UAAU,YAAY,MAAM,SAAS,CAAC,EAChF,KAAK,CAAC,UAAU,MAAM,YAAY,EAAE,SAAS,UAAU,CAAC;AAC7D;AAEA,SAAS,UAAU,OAA4B,MAAgE;AAC7G,MAAI,SAAS,UAAU;AACrB,WAAO,CAAC,GAAG,KAAK,EAAE,KAAK,CAAC,MAAM,UAAU;AACtC,YAAM,gBAAgB,KAAK,WAAW,IAAI,KAAK,KAAK,QAAQ,EAAE,QAAQ,IAAI,IAAI,KAAK,KAAK,SAAS,EAAE,QAAQ;AAC3G,YAAM,iBAAiB,MAAM,WAAW,IAAI,KAAK,MAAM,QAAQ,EAAE,QAAQ,IAAI,IAAI,KAAK,MAAM,SAAS,EAAE,QAAQ;AAC/G,UAAI,kBAAkB,eAAgB,QAAO,KAAK,YAAY,cAAc,MAAM,WAAW;AAC7F,aAAO,iBAAiB;AAAA,IAC1B,CAAC;AAAA,EACH;AAEA,SAAO,CAAC,GAAG,KAAK,EAAE,KAAK,CAAC,MAAM,UAAU;AACtC,UAAM,UAAU,KAAK,YAAY,cAAc,MAAM,aAAa,QAAW,EAAE,aAAa,OAAO,CAAC;AACpG,WAAO,SAAS,aAAa,UAAU,CAAC;AAAA,EAC1C,CAAC;AACH;AAEO,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,0BAA0B,EAAE;AAC1E;AAEA,eAAsB,IAAI,KAAc,KAAmC;AACzE,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,MAAI;AACF,UAAM,EAAE,GAAG,IAAI,aAAa,MAAM,EAAE,IAAI,IAAI,QAAQ,GAAG,CAAC;AACxD,UAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,QAAI,CAAC,MAAM,SAAU,OAAM,IAAI,cAAc,KAAK,EAAE,OAAO,eAAe,CAAC;AAE3E,UAAM,QAAQ,YAAY,MAAM;AAAA,MAC9B,MAAM,IAAI,IAAI,IAAI,GAAG,EAAE,aAAa,IAAI,MAAM,KAAK;AAAA,MACnD,UAAU,IAAI,IAAI,IAAI,GAAG,EAAE,aAAa,IAAI,UAAU,KAAK;AAAA,MAC3D,QAAQ,IAAI,IAAI,IAAI,GAAG,EAAE,aAAa,IAAI,QAAQ,KAAK;AAAA,MACvD,MAAM,IAAI,IAAI,IAAI,GAAG,EAAE,aAAa,IAAI,MAAM,KAAK;AAAA,IACrD,CAAC;AAED,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AACxF,UAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC3D,UAAM,kBAAkB;AAAA,MACtB,UAAU,KAAK;AAAA,MACf,gBAAgB,OAAO,cAAc,KAAK,SAAS;AAAA,IACrD;AAEA,UAAM,UAAU,MAAM;AAAA,MACpB;AAAA,MACA;AAAA,MACA,EAAE,IAAI,MAAM,WAAW,UAAU,KAAK,UAAU,WAAW,KAAK;AAAA,MAChE,CAAC;AAAA,MACD;AAAA,IACF;AACA,QAAI,CAAC,SAAS;AACZ,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,sCAAsC,mBAAmB,EAAE,CAAC;AAAA,IAC9G;AAEA,QAAI,CAAC,gCAAgC,EAAE,OAAO,MAAM,gBAAgB,QAAQ,eAAe,CAAC,GAAG;AAC7F,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,kCAAkC,eAAe,EAAE,CAAC;AAAA,IACtG;AAEA,UAAM,cAAc,EAAE,UAAU,KAAK,UAAU,gBAAgB,QAAQ,eAAe;AACtF,UAAM,YAAY,MAAM;AAAA,MACtB;AAAA,MACA;AAAA,QACE,SAAS,QAAQ;AAAA,QACjB,UAAU,QAAQ;AAAA,QAClB,gBAAgB,QAAQ;AAAA,MAC1B;AAAA,MACA;AAAA,IACF;AACA,UAAM,QAAQ;AAAA,MACZ,MAAM;AAAA,QACJ;AAAA,QACA;AAAA,QACA;AAAA,QACA,EAAE,UAAU,CAAC,QAAQ,EAAE;AAAA,QACvB;AAAA,MACF;AAAA,IACF;AAEA,UAAM,YAAY,MACf,IAAI,CAAC,SAAS,KAAK,QAAQ,EAAE,EAC7B,OAAO,CAAC,aAAiC,OAAO,aAAa,YAAY,SAAS,SAAS,CAAC;AAE/F,UAAM,WAAW,UAAU,SAAS,IAChC,MAAM;AAAA,MACJ;AAAA,MACA;AAAA,MACA;AAAA,QACE,QAAQ,EAAE,KAAK,UAAU;AAAA,QACzB,UAAU,QAAQ;AAAA,QAClB,gBAAgB,QAAQ;AAAA,MAC1B;AAAA,MACA,CAAC;AAAA,MACD;AAAA,IACF,IACA,CAAC;AACL,UAAM,oBAAoB,IAAI;AAAA,MAC5B,SAAS,IAAI,CAAC,YAAY,CAAE,QAAQ,OAA0B,IAAI,OAAO,CAAC;AAAA,IAC5E;AAEA,UAAM,QAAQ,MACX,IAAI,CAAC,SAAS;AACb,YAAM,SAAS,KAAK;AACpB,UAAI,CAAC,QAAQ,GAAI,QAAO;AACxB,YAAM,UAAU,kBAAkB,IAAI,OAAO,EAAE,KAAK;AACpD,aAAO;AAAA,QACL,IAAI,OAAO;AAAA,QACX,aAAa,OAAO,eAAe,OAAO,gBAAgB,OAAO;AAAA,QACjE,cAAc,OAAO,gBAAgB;AAAA,QACrC,cAAc,OAAO,gBAAgB;AAAA,QACrC,QAAQ,OAAO,UAAU;AAAA,QACzB,gBAAgB,OAAO,kBAAkB;AAAA,QACzC,UAAU,SAAS,YAAY;AAAA,QAC/B,YAAY,SAAS,cAAc;AAAA,QACnC,WAAW,OAAO,UAAU,YAAY;AAAA,QACxC,gBAAgB,OAAO;AAAA,QACvB,aAAa,OAAO,eAAe;AAAA,QACnC,QAAQ,OAAO,UAAU;AAAA,QACzB,UAAU,KAAK,YAAY,KAAK,UAAU,YAAY,IAAI;AAAA,MAC5D;AAAA,IACF,CAAC,EACA,OAAO,CAAC,SAAoC,SAAS,IAAI;AAE5D,UAAM,WAAW,MAAM,QAAQ,KAAK,EAAE,SAAS,MAAM,OAAO,CAAC,SAAS,cAAc,MAAM,MAAM,UAAU,EAAE,CAAC,IAAI;AACjH,UAAM,SAAS,UAAU,UAAU,MAAM,IAAI;AAC7C,UAAM,QAAQ,OAAO;AACrB,UAAM,aAAa,KAAK,IAAI,GAAG,KAAK,KAAK,QAAQ,MAAM,QAAQ,CAAC;AAChE,UAAM,OAAO,KAAK,IAAI,MAAM,MAAM,UAAU;AAC5C,UAAM,SAAS,OAAO,KAAK,MAAM;AAEjC,WAAO,aAAa,KAAK;AAAA,MACvB,OAAO,OAAO,MAAM,OAAO,QAAQ,MAAM,QAAQ;AAAA,MACjD;AAAA,MACA;AAAA,MACA,UAAU,MAAM;AAAA,MAChB;AAAA,IACF,CAAC;AAAA,EACH,SAAS,OAAO;AACd,QAAI,gBAAgB,KAAK,GAAG;AAC1B,aAAO,aAAa,KAAK,MAAM,MAAM,EAAE,QAAQ,MAAM,OAAO,CAAC;AAAA,IAC/D;AACA,WAAO,MAAM,kCAAkC,EAAE,KAAK,MAAM,CAAC;AAC7D,WAAO,aAAa,KAAK,EAAE,OAAO,UAAU,+CAA+C,8BAA8B,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC/I;AACF;AAEA,MAAM,0BAA0B,EAAE,OAAO;AAAA,EACvC,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,aAAa,EAAE,OAAO;AAAA,EACtB,cAAc,EAAE,OAAO,EAAE,SAAS;AAAA,EAClC,cAAc,EAAE,OAAO,EAAE,SAAS;AAAA,EAClC,QAAQ,EAAE,OAAO,EAAE,SAAS;AAAA,EAC5B,gBAAgB,EAAE,OAAO,EAAE,SAAS;AAAA,EACpC,UAAU,EAAE,OAAO,EAAE,SAAS;AAAA,EAC9B,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,EAChC,WAAW,EAAE,OAAO;AAAA,EACpB,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC3C,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,EACjC,QAAQ,EAAE,OAAO,EAAE,SAAS;AAAA,EAC5B,UAAU,EAAE,OAAO,EAAE,SAAS;AAChC,CAAC;AAEM,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,OAAO;AAAA,MACP,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO;AAAA,YACf,OAAO,EAAE,MAAM,uBAAuB;AAAA,YACtC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY;AAAA,YACpC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC;AAAA,YAC5B,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC;AAAA,YAChC,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC;AAAA,UACpC,CAAC;AAAA,QACH;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { CrudHttpError, isCrudHttpError, notFound } from '@open-mercato/shared/lib/crud/errors'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { findOneWithDecryption, findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { isOrganizationReadAccessAllowed } from '@open-mercato/core/modules/directory/utils/organizationScopeGuard'\nimport {\n  CustomerEntity,\n  CustomerPersonCompanyLink,\n  CustomerPersonProfile,\n} from '../../../../data/entities'\nimport {\n  filterActivePersonCompanyLinks,\n  withActiveCustomerPersonCompanyLinkFilter,\n} from '../../../../lib/personCompanyLinkTable'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('customers')\n\nconst paramsSchema = z.object({\n  id: z.string().uuid(),\n})\n\nconst querySchema = z.object({\n  page: z.coerce.number().min(1).default(1),\n  pageSize: z.coerce.number().min(1).max(100).default(20),\n  search: z.string().optional(),\n  sort: z.enum(['name-asc', 'name-desc', 'recent']).default('name-asc'),\n})\n\ntype CompanyPersonItem = {\n  id: string\n  displayName: string\n  primaryEmail: string | null\n  primaryPhone: string | null\n  status: string | null\n  lifecycleStage: string | null\n  jobTitle: string | null\n  department: string | null\n  createdAt: string\n  organizationId: string\n  temperature: string | null\n  source: string | null\n  linkedAt: string | null\n}\n\nfunction matchesSearch(item: CompanyPersonItem, query: string): boolean {\n  const normalized = query.trim().toLowerCase()\n  if (!normalized.length) return true\n  return [\n    item.displayName,\n    item.primaryEmail,\n    item.primaryPhone,\n    item.jobTitle,\n    item.department,\n    item.status,\n    item.lifecycleStage,\n    item.source,\n  ]\n    .filter((value): value is string => typeof value === 'string' && value.length > 0)\n    .some((value) => value.toLowerCase().includes(normalized))\n}\n\nfunction sortItems(items: CompanyPersonItem[], sort: 'name-asc' | 'name-desc' | 'recent'): CompanyPersonItem[] {\n  if (sort === 'recent') {\n    return [...items].sort((left, right) => {\n      const leftTimestamp = left.linkedAt ? new Date(left.linkedAt).getTime() : new Date(left.createdAt).getTime()\n      const rightTimestamp = right.linkedAt ? new Date(right.linkedAt).getTime() : new Date(right.createdAt).getTime()\n      if (leftTimestamp === rightTimestamp) return left.displayName.localeCompare(right.displayName)\n      return rightTimestamp - leftTimestamp\n    })\n  }\n\n  return [...items].sort((left, right) => {\n    const compare = left.displayName.localeCompare(right.displayName, undefined, { sensitivity: 'base' })\n    return sort === 'name-asc' ? compare : -compare\n  })\n}\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['customers.companies.view'] },\n}\n\nexport async function GET(req: Request, ctx: { params?: { id?: string } }) {\n  const { translate } = await resolveTranslations()\n  try {\n    const { id } = paramsSchema.parse({ id: ctx.params?.id })\n    const auth = await getAuthFromRequest(req)\n    if (!auth?.tenantId) throw new CrudHttpError(401, { error: 'Unauthorized' })\n\n    const query = querySchema.parse({\n      page: new URL(req.url).searchParams.get('page') ?? undefined,\n      pageSize: new URL(req.url).searchParams.get('pageSize') ?? undefined,\n      search: new URL(req.url).searchParams.get('search') ?? undefined,\n      sort: new URL(req.url).searchParams.get('sort') ?? undefined,\n    })\n\n    const container = await createRequestContainer()\n    const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n    const em = (container.resolve('em') as EntityManager).fork()\n    const decryptionScope = {\n      tenantId: auth.tenantId,\n      organizationId: scope?.selectedId ?? auth.orgId ?? null,\n    }\n\n    const company = await findOneWithDecryption(\n      em,\n      CustomerEntity,\n      { id, kind: 'company', tenantId: auth.tenantId, deletedAt: null },\n      {},\n      decryptionScope,\n    )\n    if (!company) {\n      throw notFound(translate('customers.errors.company_not_found', 'Company not found'))\n    }\n\n    if (!isOrganizationReadAccessAllowed({ scope, auth, organizationId: company.organizationId })) {\n      throw new CrudHttpError(403, { error: translate('customers.errors.access_denied', 'Access denied') })\n    }\n\n    const entityScope = { tenantId: auth.tenantId, organizationId: company.organizationId }\n    const linkWhere = await withActiveCustomerPersonCompanyLinkFilter(\n      em,\n      {\n        company: company.id,\n        tenantId: company.tenantId,\n        organizationId: company.organizationId,\n      },\n      'customers.companies.people.GET',\n    )\n    const links = filterActivePersonCompanyLinks(\n      await findWithDecryption(\n        em,\n        CustomerPersonCompanyLink,\n        linkWhere,\n        { populate: ['person'] },\n        entityScope,\n      ),\n    )\n\n    const personIds = links\n      .map((link) => link.person?.id)\n      .filter((personId): personId is string => typeof personId === 'string' && personId.length > 0)\n\n    const profiles = personIds.length > 0\n      ? await findWithDecryption(\n          em,\n          CustomerPersonProfile,\n          {\n            entity: { $in: personIds },\n            tenantId: company.tenantId,\n            organizationId: company.organizationId,\n          },\n          {},\n          entityScope,\n        )\n      : []\n    const profileByPersonId = new Map(\n      profiles.map((profile) => [(profile.entity as { id: string }).id, profile]),\n    )\n\n    const items = links\n      .map((link) => {\n        const person = link.person\n        if (!person?.id) return null\n        const profile = profileByPersonId.get(person.id) ?? null\n        return {\n          id: person.id,\n          displayName: person.displayName ?? person.primaryEmail ?? person.id,\n          primaryEmail: person.primaryEmail ?? null,\n          primaryPhone: person.primaryPhone ?? null,\n          status: person.status ?? null,\n          lifecycleStage: person.lifecycleStage ?? null,\n          jobTitle: profile?.jobTitle ?? null,\n          department: profile?.department ?? null,\n          createdAt: person.createdAt.toISOString(),\n          organizationId: person.organizationId,\n          temperature: person.temperature ?? null,\n          source: person.source ?? null,\n          linkedAt: link.createdAt ? link.createdAt.toISOString() : null,\n        } satisfies CompanyPersonItem\n      })\n      .filter((item): item is CompanyPersonItem => item !== null)\n\n    const filtered = query.search?.trim().length ? items.filter((item) => matchesSearch(item, query.search ?? '')) : items\n    const sorted = sortItems(filtered, query.sort)\n    const total = sorted.length\n    const totalPages = Math.max(1, Math.ceil(total / query.pageSize))\n    const page = Math.min(query.page, totalPages)\n    const start = (page - 1) * query.pageSize\n\n    return NextResponse.json({\n      items: sorted.slice(start, start + query.pageSize),\n      total,\n      page,\n      pageSize: query.pageSize,\n      totalPages,\n    })\n  } catch (error) {\n    if (isCrudHttpError(error)) {\n      return NextResponse.json(error.body, { status: error.status })\n    }\n    logger.error('customers.companies.people.GET', { err: error })\n    return NextResponse.json({ error: translate('customers.errors.company_people_load_failed', 'Failed to load linked people') }, { status: 500 })\n  }\n}\n\nconst companyPeopleItemSchema = z.object({\n  id: z.string().uuid(),\n  displayName: z.string(),\n  primaryEmail: z.string().nullable(),\n  primaryPhone: z.string().nullable(),\n  status: z.string().nullable(),\n  lifecycleStage: z.string().nullable(),\n  jobTitle: z.string().nullable(),\n  department: z.string().nullable(),\n  createdAt: z.string(),\n  organizationId: z.string().uuid().nullable(),\n  temperature: z.string().nullable(),\n  source: z.string().nullable(),\n  linkedAt: z.string().nullable(),\n})\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Customers',\n  methods: {\n    GET: {\n      summary: 'List linked people for a company',\n      query: querySchema,\n      responses: [\n        {\n          status: 200,\n          description: 'Paginated linked people',\n          schema: z.object({\n            items: z.array(companyPeopleItemSchema),\n            total: z.number().int().nonnegative(),\n            page: z.number().int().min(1),\n            pageSize: z.number().int().min(1),\n            totalPages: z.number().int().min(1),\n          }),\n        },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAElB,SAAS,eAAe,iBAAiB,gBAAgB;AACzD,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AACnD,SAAS,2BAA2B;AAEpC,SAAS,uBAAuB,0BAA0B;AAC1D,SAAS,uCAAuC;AAChD;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,WAAW;AAEvC,MAAM,eAAe,EAAE,OAAO;AAAA,EAC5B,IAAI,EAAE,OAAO,EAAE,KAAK;AACtB,CAAC;AAED,MAAM,cAAc,EAAE,OAAO;AAAA,EAC3B,MAAM,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,QAAQ,CAAC;AAAA,EACxC,UAAU,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,QAAQ,EAAE;AAAA,EACtD,QAAQ,EAAE,OAAO,EAAE,SAAS;AAAA,EAC5B,MAAM,EAAE,KAAK,CAAC,YAAY,aAAa,QAAQ,CAAC,EAAE,QAAQ,UAAU;AACtE,CAAC;AAkBD,SAAS,cAAc,MAAyB,OAAwB;AACtE,QAAM,aAAa,MAAM,KAAK,EAAE,YAAY;AAC5C,MAAI,CAAC,WAAW,OAAQ,QAAO;AAC/B,SAAO;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,EACP,EACG,OAAO,CAAC,UAA2B,OAAO,UAAU,YAAY,MAAM,SAAS,CAAC,EAChF,KAAK,CAAC,UAAU,MAAM,YAAY,EAAE,SAAS,UAAU,CAAC;AAC7D;AAEA,SAAS,UAAU,OAA4B,MAAgE;AAC7G,MAAI,SAAS,UAAU;AACrB,WAAO,CAAC,GAAG,KAAK,EAAE,KAAK,CAAC,MAAM,UAAU;AACtC,YAAM,gBAAgB,KAAK,WAAW,IAAI,KAAK,KAAK,QAAQ,EAAE,QAAQ,IAAI,IAAI,KAAK,KAAK,SAAS,EAAE,QAAQ;AAC3G,YAAM,iBAAiB,MAAM,WAAW,IAAI,KAAK,MAAM,QAAQ,EAAE,QAAQ,IAAI,IAAI,KAAK,MAAM,SAAS,EAAE,QAAQ;AAC/G,UAAI,kBAAkB,eAAgB,QAAO,KAAK,YAAY,cAAc,MAAM,WAAW;AAC7F,aAAO,iBAAiB;AAAA,IAC1B,CAAC;AAAA,EACH;AAEA,SAAO,CAAC,GAAG,KAAK,EAAE,KAAK,CAAC,MAAM,UAAU;AACtC,UAAM,UAAU,KAAK,YAAY,cAAc,MAAM,aAAa,QAAW,EAAE,aAAa,OAAO,CAAC;AACpG,WAAO,SAAS,aAAa,UAAU,CAAC;AAAA,EAC1C,CAAC;AACH;AAEO,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,0BAA0B,EAAE;AAC1E;AAEA,eAAsB,IAAI,KAAc,KAAmC;AACzE,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,MAAI;AACF,UAAM,EAAE,GAAG,IAAI,aAAa,MAAM,EAAE,IAAI,IAAI,QAAQ,GAAG,CAAC;AACxD,UAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,QAAI,CAAC,MAAM,SAAU,OAAM,IAAI,cAAc,KAAK,EAAE,OAAO,eAAe,CAAC;AAE3E,UAAM,QAAQ,YAAY,MAAM;AAAA,MAC9B,MAAM,IAAI,IAAI,IAAI,GAAG,EAAE,aAAa,IAAI,MAAM,KAAK;AAAA,MACnD,UAAU,IAAI,IAAI,IAAI,GAAG,EAAE,aAAa,IAAI,UAAU,KAAK;AAAA,MAC3D,QAAQ,IAAI,IAAI,IAAI,GAAG,EAAE,aAAa,IAAI,QAAQ,KAAK;AAAA,MACvD,MAAM,IAAI,IAAI,IAAI,GAAG,EAAE,aAAa,IAAI,MAAM,KAAK;AAAA,IACrD,CAAC;AAED,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AACxF,UAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC3D,UAAM,kBAAkB;AAAA,MACtB,UAAU,KAAK;AAAA,MACf,gBAAgB,OAAO,cAAc,KAAK,SAAS;AAAA,IACrD;AAEA,UAAM,UAAU,MAAM;AAAA,MACpB;AAAA,MACA;AAAA,MACA,EAAE,IAAI,MAAM,WAAW,UAAU,KAAK,UAAU,WAAW,KAAK;AAAA,MAChE,CAAC;AAAA,MACD;AAAA,IACF;AACA,QAAI,CAAC,SAAS;AACZ,YAAM,SAAS,UAAU,sCAAsC,mBAAmB,CAAC;AAAA,IACrF;AAEA,QAAI,CAAC,gCAAgC,EAAE,OAAO,MAAM,gBAAgB,QAAQ,eAAe,CAAC,GAAG;AAC7F,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,kCAAkC,eAAe,EAAE,CAAC;AAAA,IACtG;AAEA,UAAM,cAAc,EAAE,UAAU,KAAK,UAAU,gBAAgB,QAAQ,eAAe;AACtF,UAAM,YAAY,MAAM;AAAA,MACtB;AAAA,MACA;AAAA,QACE,SAAS,QAAQ;AAAA,QACjB,UAAU,QAAQ;AAAA,QAClB,gBAAgB,QAAQ;AAAA,MAC1B;AAAA,MACA;AAAA,IACF;AACA,UAAM,QAAQ;AAAA,MACZ,MAAM;AAAA,QACJ;AAAA,QACA;AAAA,QACA;AAAA,QACA,EAAE,UAAU,CAAC,QAAQ,EAAE;AAAA,QACvB;AAAA,MACF;AAAA,IACF;AAEA,UAAM,YAAY,MACf,IAAI,CAAC,SAAS,KAAK,QAAQ,EAAE,EAC7B,OAAO,CAAC,aAAiC,OAAO,aAAa,YAAY,SAAS,SAAS,CAAC;AAE/F,UAAM,WAAW,UAAU,SAAS,IAChC,MAAM;AAAA,MACJ;AAAA,MACA;AAAA,MACA;AAAA,QACE,QAAQ,EAAE,KAAK,UAAU;AAAA,QACzB,UAAU,QAAQ;AAAA,QAClB,gBAAgB,QAAQ;AAAA,MAC1B;AAAA,MACA,CAAC;AAAA,MACD;AAAA,IACF,IACA,CAAC;AACL,UAAM,oBAAoB,IAAI;AAAA,MAC5B,SAAS,IAAI,CAAC,YAAY,CAAE,QAAQ,OAA0B,IAAI,OAAO,CAAC;AAAA,IAC5E;AAEA,UAAM,QAAQ,MACX,IAAI,CAAC,SAAS;AACb,YAAM,SAAS,KAAK;AACpB,UAAI,CAAC,QAAQ,GAAI,QAAO;AACxB,YAAM,UAAU,kBAAkB,IAAI,OAAO,EAAE,KAAK;AACpD,aAAO;AAAA,QACL,IAAI,OAAO;AAAA,QACX,aAAa,OAAO,eAAe,OAAO,gBAAgB,OAAO;AAAA,QACjE,cAAc,OAAO,gBAAgB;AAAA,QACrC,cAAc,OAAO,gBAAgB;AAAA,QACrC,QAAQ,OAAO,UAAU;AAAA,QACzB,gBAAgB,OAAO,kBAAkB;AAAA,QACzC,UAAU,SAAS,YAAY;AAAA,QAC/B,YAAY,SAAS,cAAc;AAAA,QACnC,WAAW,OAAO,UAAU,YAAY;AAAA,QACxC,gBAAgB,OAAO;AAAA,QACvB,aAAa,OAAO,eAAe;AAAA,QACnC,QAAQ,OAAO,UAAU;AAAA,QACzB,UAAU,KAAK,YAAY,KAAK,UAAU,YAAY,IAAI;AAAA,MAC5D;AAAA,IACF,CAAC,EACA,OAAO,CAAC,SAAoC,SAAS,IAAI;AAE5D,UAAM,WAAW,MAAM,QAAQ,KAAK,EAAE,SAAS,MAAM,OAAO,CAAC,SAAS,cAAc,MAAM,MAAM,UAAU,EAAE,CAAC,IAAI;AACjH,UAAM,SAAS,UAAU,UAAU,MAAM,IAAI;AAC7C,UAAM,QAAQ,OAAO;AACrB,UAAM,aAAa,KAAK,IAAI,GAAG,KAAK,KAAK,QAAQ,MAAM,QAAQ,CAAC;AAChE,UAAM,OAAO,KAAK,IAAI,MAAM,MAAM,UAAU;AAC5C,UAAM,SAAS,OAAO,KAAK,MAAM;AAEjC,WAAO,aAAa,KAAK;AAAA,MACvB,OAAO,OAAO,MAAM,OAAO,QAAQ,MAAM,QAAQ;AAAA,MACjD;AAAA,MACA;AAAA,MACA,UAAU,MAAM;AAAA,MAChB;AAAA,IACF,CAAC;AAAA,EACH,SAAS,OAAO;AACd,QAAI,gBAAgB,KAAK,GAAG;AAC1B,aAAO,aAAa,KAAK,MAAM,MAAM,EAAE,QAAQ,MAAM,OAAO,CAAC;AAAA,IAC/D;AACA,WAAO,MAAM,kCAAkC,EAAE,KAAK,MAAM,CAAC;AAC7D,WAAO,aAAa,KAAK,EAAE,OAAO,UAAU,+CAA+C,8BAA8B,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC/I;AACF;AAEA,MAAM,0BAA0B,EAAE,OAAO;AAAA,EACvC,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,aAAa,EAAE,OAAO;AAAA,EACtB,cAAc,EAAE,OAAO,EAAE,SAAS;AAAA,EAClC,cAAc,EAAE,OAAO,EAAE,SAAS;AAAA,EAClC,QAAQ,EAAE,OAAO,EAAE,SAAS;AAAA,EAC5B,gBAAgB,EAAE,OAAO,EAAE,SAAS;AAAA,EACpC,UAAU,EAAE,OAAO,EAAE,SAAS;AAAA,EAC9B,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,EAChC,WAAW,EAAE,OAAO;AAAA,EACpB,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC3C,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,EACjC,QAAQ,EAAE,OAAO,EAAE,SAAS;AAAA,EAC5B,UAAU,EAAE,OAAO,EAAE,SAAS;AAChC,CAAC;AAEM,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,OAAO;AAAA,MACP,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO;AAAA,YACf,OAAO,EAAE,MAAM,uBAAuB;AAAA,YACtC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY;AAAA,YACpC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC;AAAA,YAC5B,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC;AAAA,YAChC,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC;AAAA,UACpC,CAAC;AAAA,QACH;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/customers/api/deals/[id]/companies/route.js

@@ -1,6 +1,6 @@
 import { NextResponse } from "next/server";
 import { z } from "zod";
-import { CrudHttpError, isCrudHttpError } from "@open-mercato/shared/lib/crud/errors";
+import { CrudHttpError, isCrudHttpError, notFound } from "@open-mercato/shared/lib/crud/errors";
 import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
 import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
 import { resolveOrganizationScopeForRequest } from "@open-mercato/core/modules/directory/utils/organizationScope";
@@ -73,7 +73,7 @@ async function GET(req, ctx) {
       decryptionScope
     );
     if (!deal) {
-      throw new CrudHttpError(404, { error: translate("customers.errors.deal_not_found", "Deal not found") });
+      throw notFound(translate("customers.errors.deal_not_found", "Deal not found"));
     }
     if (!isOrganizationReadAccessAllowed({ scope, auth, organizationId: deal.organizationId })) {
       throw new CrudHttpError(403, { error: translate("customers.errors.access_denied", "Access denied") });