@open-mercato/core 0.6.7-develop.6661.1.0043ed1d03 → 0.6.7-develop.6670.1.4efa7961c6

package/generated/entity-fields-registry.ts

@@ -1453,6 +1453,57 @@ export const entityFieldsRegistry: Record<string, Record<string, string>> = {
       "updated_at": "updated_at",
       "deleted_at": "deleted_at"
     },
+    "inventory_balance": {
+      "warehouse": "warehouse",
+      "location": "location",
+      "catalog_variant_id": "catalog_variant_id",
+      "lot": "lot",
+      "serial_number": "serial_number",
+      "quantity_on_hand": "quantity_on_hand",
+      "quantity_reserved": "quantity_reserved",
+      "quantity_allocated": "quantity_allocated",
+      "quantity_available": "quantity_available"
+    },
+    "inventory_lot": {
+      "catalog_variant_id": "catalog_variant_id",
+      "sku": "sku",
+      "lot_number": "lot_number",
+      "batch_number": "batch_number",
+      "manufactured_at": "manufactured_at",
+      "best_before_at": "best_before_at",
+      "expires_at": "expires_at",
+      "status": "status"
+    },
+    "inventory_movement": {
+      "warehouse": "warehouse",
+      "location_from": "location_from",
+      "location_to": "location_to",
+      "catalog_variant_id": "catalog_variant_id",
+      "lot": "lot",
+      "serial_number": "serial_number",
+      "quantity": "quantity",
+      "type": "type",
+      "reference_type": "reference_type",
+      "reference_id": "reference_id",
+      "performed_by": "performed_by",
+      "performed_at": "performed_at",
+      "received_at": "received_at",
+      "reason": "reason",
+      "reason_code": "reason_code",
+      "idempotency_key": "idempotency_key"
+    },
+    "inventory_reservation": {
+      "warehouse": "warehouse",
+      "catalog_variant_id": "catalog_variant_id",
+      "lot": "lot",
+      "serial_number": "serial_number",
+      "quantity": "quantity",
+      "source_type": "source_type",
+      "source_id": "source_id",
+      "expires_at": "expires_at",
+      "status": "status",
+      "idempotency_key": "idempotency_key"
+    },
     "message": {
       "id": "id",
       "type": "type",
@@ -1674,6 +1725,17 @@ export const entityFieldsRegistry: Record<string, Record<string, string>> = {
       "updated_at": "updated_at",
       "deleted_at": "deleted_at"
     },
+    "product_inventory_profile": {
+      "catalog_product_id": "catalog_product_id",
+      "catalog_variant_id": "catalog_variant_id",
+      "default_uom": "default_uom",
+      "track_lot": "track_lot",
+      "track_serial": "track_serial",
+      "track_expiration": "track_expiration",
+      "default_strategy": "default_strategy",
+      "reorder_point": "reorder_point",
+      "safety_stock": "safety_stock"
+    },
     "progress_job": {
       "id": "id",
       "job_type": "job_type",
@@ -2228,6 +2290,12 @@ export const entityFieldsRegistry: Record<string, Record<string, string>> = {
       "invoice_lines": "invoice_lines",
       "credit_memo_lines": "credit_memo_lines"
     },
+    "sales_order_warehouse_assignment": {
+      "sales_order_id": "sales_order_id",
+      "warehouse": "warehouse",
+      "assigned_by": "assigned_by",
+      "notes": "notes"
+    },
     "sales_payment": {
       "id": "id",
       "order": "order",
@@ -2956,6 +3024,36 @@ export const entityFieldsRegistry: Record<string, Record<string, string>> = {
       "created_at": "created_at",
       "updated_at": "updated_at"
     },
+    "warehouse": {
+      "name": "name",
+      "code": "code",
+      "is_active": "is_active",
+      "is_primary": "is_primary",
+      "address_line1": "address_line1",
+      "city": "city",
+      "postal_code": "postal_code",
+      "country": "country",
+      "timezone": "timezone",
+      "zones": "zones",
+      "locations": "locations"
+    },
+    "warehouse_location": {
+      "warehouse": "warehouse",
+      "code": "code",
+      "type": "type",
+      "parent": "parent",
+      "children": "children",
+      "is_active": "is_active",
+      "capacity_units": "capacity_units",
+      "capacity_weight": "capacity_weight",
+      "constraints": "constraints"
+    },
+    "warehouse_zone": {
+      "warehouse": "warehouse",
+      "code": "code",
+      "name": "name",
+      "priority": "priority"
+    },
     "webhook_processed_event": {
       "id": "id",
       "provider_key": "provider_key",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@open-mercato/core",
-  "version": "0.6.7-develop.6661.1.0043ed1d03",
+  "version": "0.6.7-develop.6670.1.4efa7961c6",
   "license": "MIT",
   "type": "module",
   "main": "./dist/index.js",
@@ -254,16 +254,16 @@
     "zod": "^4.4.3"
   },
   "peerDependencies": {
-    "@open-mercato/ai-assistant": "0.6.7-develop.6661.1.0043ed1d03",
-    "@open-mercato/shared": "0.6.7-develop.6661.1.0043ed1d03",
-    "@open-mercato/ui": "0.6.7-develop.6661.1.0043ed1d03",
+    "@open-mercato/ai-assistant": "0.6.7-develop.6670.1.4efa7961c6",
+    "@open-mercato/shared": "0.6.7-develop.6670.1.4efa7961c6",
+    "@open-mercato/ui": "0.6.7-develop.6670.1.4efa7961c6",
     "react": "^19.0.0",
     "react-dom": "^19.0.0"
   },
   "devDependencies": {
-    "@open-mercato/ai-assistant": "0.6.7-develop.6661.1.0043ed1d03",
-    "@open-mercato/shared": "0.6.7-develop.6661.1.0043ed1d03",
-    "@open-mercato/ui": "0.6.7-develop.6661.1.0043ed1d03",
+    "@open-mercato/ai-assistant": "0.6.7-develop.6670.1.4efa7961c6",
+    "@open-mercato/shared": "0.6.7-develop.6670.1.4efa7961c6",
+    "@open-mercato/ui": "0.6.7-develop.6670.1.4efa7961c6",
     "@testing-library/dom": "^10.4.1",
     "@testing-library/jest-dom": "^6.9.1",
     "@testing-library/react": "^16.3.1",

package/src/modules/auth/backend/roles/page.tsx

@@ -73,9 +73,14 @@ export default function RolesListPage() {
     return () => { cancelled = true }
   }, [page, search, reloadToken, scopeVersion, t])
 
+  const formatRoleName = React.useCallback(
+    (name: string) => t(`auth.roles.${name}`, name),
+    [t],
+  )
+
   const handleDelete = React.useCallback(async (row: Row) => {
     const confirmed = await confirm({
-      title: t('auth.roles.list.confirmDelete', 'Delete role "{{name}}"?').replace('{{name}}', row.name),
+      title: t('auth.roles.list.confirmDelete', 'Delete role "{{name}}"?').replace('{{name}}', formatRoleName(row.name)),
       variant: 'destructive',
     })
     if (!confirmed) return
@@ -96,7 +101,7 @@ export default function RolesListPage() {
       const message = error instanceof Error ? error.message : t('auth.roles.list.error.delete', 'Failed to delete role')
       flash(message, 'error')
     }
-  }, [confirm, t])
+  }, [confirm, formatRoleName, t])
 
   const showTenantColumn = React.useMemo(
     () => isSuperAdmin && rows.some((row) => row.tenantName),
@@ -104,14 +109,18 @@ export default function RolesListPage() {
   )
   const columns = React.useMemo<ColumnDef<Row>[]>(() => {
     const base: ColumnDef<Row>[] = [
-      { accessorKey: 'name', header: t('auth.roles.list.columns.role', 'Role') },
+      {
+        accessorKey: 'name',
+        header: t('auth.roles.list.columns.role', 'Role'),
+        cell: ({ row }) => formatRoleName(row.original.name),
+      },
       { accessorKey: 'usersCount', header: t('auth.roles.list.columns.users', 'Users') },
     ]
     if (showTenantColumn) {
       base.splice(1, 0, { accessorKey: 'tenantName', header: t('auth.roles.list.columns.tenant', 'Tenant') })
     }
     return base
-  }, [showTenantColumn, t])
+  }, [formatRoleName, showTenantColumn, t])
 
   return (
     <Page>

package/src/modules/auth/i18n/de.json

@@ -140,7 +140,9 @@
   "auth.roles.list.error.load": "Rollen konnten nicht geladen werden",
   "auth.roles.list.success.delete": "Rolle gelöscht",
   "auth.roles.list.title": "Rollen",
+  "auth.roles.operator": "Lageroperator",
   "auth.roles.superadmin": "Superadministrator",
+  "auth.roles.supervisor": "Lagerleiter",
   "auth.sendResetLink": "Link zum Zurücksetzen senden",
   "auth.session.refresh.errors.invalidPayload": "Fehlendes oder ungültiges Refresh-Token",
   "auth.session.refresh.errors.invalidToken": "Ungültiges oder abgelaufenes Refresh-Token",

package/src/modules/auth/i18n/en.json

@@ -140,7 +140,9 @@
   "auth.roles.list.error.load": "Failed to load roles",
   "auth.roles.list.success.delete": "Role deleted",
   "auth.roles.list.title": "Roles",
+  "auth.roles.operator": "Warehouse Operator",
   "auth.roles.superadmin": "Super Admin",
+  "auth.roles.supervisor": "Warehouse Supervisor",
   "auth.sendResetLink": "Send reset link",
   "auth.session.refresh.errors.invalidPayload": "Missing or invalid refresh token",
   "auth.session.refresh.errors.invalidToken": "Invalid or expired refresh token",

package/src/modules/auth/i18n/es.json

@@ -140,7 +140,9 @@
   "auth.roles.list.error.load": "No se pudieron cargar los roles",
   "auth.roles.list.success.delete": "Rol eliminado",
   "auth.roles.list.title": "Roles",
+  "auth.roles.operator": "Operador de almacén",
   "auth.roles.superadmin": "Superadministrador",
+  "auth.roles.supervisor": "Supervisor de almacén",
   "auth.sendResetLink": "Enviar enlace de restablecimiento",
   "auth.session.refresh.errors.invalidPayload": "Falta el token de actualización o no es válido",
   "auth.session.refresh.errors.invalidToken": "El token de actualización no es válido o ha expirado",

package/src/modules/auth/i18n/pl.json

@@ -140,7 +140,9 @@
   "auth.roles.list.error.load": "Nie udało się wczytać ról",
   "auth.roles.list.success.delete": "Rola usunięta",
   "auth.roles.list.title": "Role",
+  "auth.roles.operator": "Operator magazynowy",
   "auth.roles.superadmin": "Superadministrator",
+  "auth.roles.supervisor": "Kierownik magazynu",
   "auth.sendResetLink": "Wyślij link resetujący",
   "auth.session.refresh.errors.invalidPayload": "Brak tokenu odświeżania lub token jest nieprawidłowy",
   "auth.session.refresh.errors.invalidToken": "Token odświeżania jest nieprawidłowy lub wygasł",

package/src/modules/auth/lib/backendChrome.tsx

@@ -152,6 +152,7 @@ function normalizeGroupWeights(groups: NavGroupWithWeight[]): NavGroupWithWeight
     'customers.nav.group',
     'catalog.nav.group',
     'customers~sales.nav.group',
+    'wms.nav.group',
     'resources.nav.group',
     'staff.nav.group',
     'entities.nav.group',

package/src/modules/auth/services/rbacService.ts

@@ -367,27 +367,6 @@ export class RbacService {
     return result
   }
 
-  /**
-   * Returns the user's granted feature strings for a given scope.
-   *
-   * Used by infrastructure that needs the raw grant list rather than a yes/no
-   * authorization check (for example response enrichers gating themselves with
-   * `features: [...]`). Callers MUST apply wildcard-aware matching against the
-   * returned array — grants like `module.*` or `*` are part of the ACL contract.
-   *
-   * @param userId - The ID of the user
-   * @param scope - The tenant and organization context for ACL evaluation
-   * @returns Array of feature strings (may include wildcards); empty array when
-   *          the user has no grants in scope
-   */
-  async getGrantedFeatures(
-    userId: string,
-    scope: { tenantId: string | null; organizationId: string | null },
-  ): Promise<string[]> {
-    const acl = await this.loadAcl(userId, scope)
-    return Array.isArray(acl.features) ? acl.features : []
-  }
-
   /**
    * Checks whether any tenant role grants a feature.
    *
@@ -466,4 +445,29 @@ export class RbacService {
     if (acl.organizations && scope.organizationId && !acl.organizations.includes(scope.organizationId) && !acl.organizations.includes('__all__')) return false
     return this.hasAllFeatures(required, filterGrantsByEnabledModules(acl.features))
   }
+
+  /**
+   * Returns the effective feature grant list for a user within a scope,
+   * filtered to enabled modules only. Super admins receive `['*']` expanded
+   * to per-module wildcards via `filterGrantsByEnabledModules` — consistent
+   * with `userHasAllFeatures` which also enforces disabled-module boundaries
+   * for super admins. Returns `[]` when the requested organization is outside
+   * the user's visibility list, or when the user does not exist.
+   */
+  async getGrantedFeatures(
+    userId: string,
+    scope: { tenantId: string | null; organizationId: string | null },
+  ): Promise<string[]> {
+    const acl = await this.loadAcl(userId, scope)
+    if (acl.isSuperAdmin) return filterGrantsByEnabledModules(['*'])
+    if (
+      acl.organizations &&
+      scope.organizationId &&
+      !acl.organizations.includes(scope.organizationId) &&
+      !acl.organizations.includes('__all__')
+    ) {
+      return []
+    }
+    return filterGrantsByEnabledModules(acl.features)
+  }
 }

package/src/modules/catalog/api/products/route.ts

@@ -803,6 +803,9 @@ const crud = makeCrudRoute({
   indexer: {
     entityType: E.catalog.catalog_product,
   },
+  enrichers: {
+    entityId: E.catalog.catalog_product,
+  },
   list: {
     schema: listSchema,
     entityId: E.catalog.catalog_product,

package/src/modules/catalog/api/variants/route.ts

@@ -104,6 +104,9 @@ const crud = makeCrudRoute({
     softDeleteField: 'deletedAt',
   },
   indexer: { entityType: E.catalog.catalog_product_variant },
+  enrichers: {
+    entityId: E.catalog.catalog_product_variant,
+  },
   list: {
     schema: listSchema,
     entityId: E.catalog.catalog_product_variant,

package/src/modules/customer_accounts/migrations/Migration20260724120000_customer_accounts.ts

@@ -0,0 +1,96 @@
+import { Migration } from '@mikro-orm/migrations';
+
+/**
+ * Builds the one-off repair for `customer_users.customer_entity_id` (#4473).
+ *
+ * `customerEntityId` is the CRM *company* FK and the portal company scope key —
+ * the portal Users page, portal invitations, and the company detail "Portal
+ * users" group all filter on it. Earlier invite flows (#4362) could store a
+ * person entity id, or an entity from another organization, in that column.
+ * The `autoLinkCrm` subscriber normalizes it (#4457), but it only runs on
+ * `customer_accounts.user.created`, which is never re-emitted for a row that
+ * already exists — so users created before that fix keep the bad FK forever.
+ * They stay scoped to the wrong company and every admin edit that resubmits the
+ * pre-filled value fails with "Company not found".
+ *
+ * The repair mirrors the subscriber's normalization exactly: touch only rows
+ * whose FK does NOT resolve to an in-org, non-deleted `company` entity, and for
+ * those either recover the real company from the person's profile (when the FK
+ * points at an in-org person whose company is itself in-org) or clear it.
+ *
+ * `updated_at` is bumped on every repaired row on purpose: it is the optimistic
+ * lock version. Without the bump a client holding the pre-repair version could
+ * resubmit the poisoned value and silently undo the fix instead of getting a
+ * 409 conflict.
+ *
+ * The whole statement is wrapped in a `to_regclass` guard because the `customers`
+ * tables it reads belong to a different module. `dbMigrate` walks enabled modules
+ * in alphabetical order, so `customer_accounts` migrations run BEFORE `customers`
+ * ones — on a fresh database these tables do not exist yet. A database in that
+ * state has no poisoned rows to repair either, so skipping is the correct no-op.
+ * `catalog/Migration20251116191744` already ships the same guarded `do $$` idiom.
+ *
+ * This SQL is hand-written rather than produced by `yarn db:generate`, which the
+ * review checklist otherwise requires. The generator only diffs entities against
+ * the schema snapshot, so it cannot emit a data repair, and there is no schema
+ * change here to diff: no column, index, or constraint is touched, which is why
+ * `.snapshot-open-mercato.json` is deliberately left untouched by this migration.
+ *
+ * @public Exported for testing
+ */
+export function buildRepairPoisonedCustomerEntityLinksSql(): string {
+  return `do $$
+begin
+  if to_regclass('customer_entities') is null or to_regclass('customer_people') is null then
+    return;
+  end if;
+
+  update "customer_users" cu
+     set "customer_entity_id" = (
+           select company."id"
+             from "customer_entities" person
+             join "customer_people" profile
+               on profile."entity_id" = person."id"
+              and profile."tenant_id" = person."tenant_id"
+              and profile."organization_id" = person."organization_id"
+             join "customer_entities" company
+               on company."id" = profile."company_entity_id"
+              and company."tenant_id" = person."tenant_id"
+              and company."organization_id" = person."organization_id"
+              and company."kind" = 'company'
+              and company."deleted_at" is null
+            where person."id" = cu."customer_entity_id"
+              and person."tenant_id" = cu."tenant_id"
+              and person."organization_id" = cu."organization_id"
+              and person."kind" = 'person'
+              and person."deleted_at" is null
+            order by profile."created_at", profile."id"
+            limit 1
+         ),
+         "updated_at" = now()
+   where cu."customer_entity_id" is not null
+     and not exists (
+           select 1
+             from "customer_entities" company
+            where company."id" = cu."customer_entity_id"
+              and company."tenant_id" = cu."tenant_id"
+              and company."organization_id" = cu."organization_id"
+              and company."kind" = 'company'
+              and company."deleted_at" is null
+         );
+end
+$$;`;
+}
+
+export class Migration20260724120000_customer_accounts extends Migration {
+
+  override up(): void | Promise<void> {
+    this.addSql(buildRepairPoisonedCustomerEntityLinksSql());
+  }
+
+  override down(): void | Promise<void> {
+    // Forward-only: the poisoned values are not recorded anywhere, so there is
+    // nothing to restore. Re-poisoning the column would reintroduce the bug.
+  }
+
+}

package/src/modules/directory/api/organizations/route.ts

@@ -52,7 +52,7 @@ type TreeNode = {
 
 const viewSchema = z.object({
   page: z.coerce.number().min(1).default(1),
-  pageSize: z.coerce.number().min(1).max(200).default(50),
+  pageSize: z.coerce.number().min(1).max(100).default(50),
   search: z.string().optional(),
   view: z.enum(['options', 'manage', 'tree']).default('options'),
   ids: z.string().optional(),

package/src/modules/entities/api/definitions.ts

@@ -421,6 +421,8 @@ export async function GET(req: Request) {
         // attachments config passthrough
         maxAttachmentSizeMb: typeof d.configJson?.maxAttachmentSizeMb === 'number' ? d.configJson.maxAttachmentSizeMb : undefined,
         acceptExtensions: Array.isArray(d.configJson?.acceptExtensions) ? d.configJson.acceptExtensions : undefined,
+        // phone config passthrough
+        defaultCountryIso2: typeof d.configJson?.defaultCountryIso2 === 'string' ? d.configJson.defaultCountryIso2 : undefined,
         entityId,
         fieldset: normalizedFieldset ?? effectiveFieldsets[0],
         fieldsets: effectiveFieldsets.length > 0 ? effectiveFieldsets : undefined,

package/src/modules/entities/lib/helpers.ts

@@ -30,6 +30,7 @@ function columnFromKind(kind: string): keyof CustomFieldValue {
     case 'select':
     case 'currency':
     case 'dictionary':
+    case 'phone':
       return 'valueText'
     case 'multiline':
       return 'valueMultiline'

package/src/modules/query_index/lib/engine.ts

@@ -707,8 +707,14 @@ export class HybridQueryEngine implements QueryEngine {
 
       const applyJoinFilterOpFn = (target: AnyBuilder, column: string, op: FilterOp, value?: unknown): AnyBuilder => {
         switch (op) {
-          case 'eq': return target.where(column, '=', value as any)
-          case 'ne': return target.where(column, '!=', value as any)
+          case 'eq':
+            return value === null
+              ? target.where(column, 'is', null)
+              : target.where(column, '=', value as any)
+          case 'ne':
+            return value === null
+              ? target.where(column, 'is not', null)
+              : target.where(column, '!=', value as any)
           case 'gt': return target.where(column, '>', value as any)
           case 'gte': return target.where(column, '>=', value as any)
           case 'lt': return target.where(column, '<', value as any)
@@ -1570,8 +1576,8 @@ export class HybridQueryEngine implements QueryEngine {
     value: unknown,
   ): any {
     switch (op) {
-      case 'eq': return eb(column, '=', value)
-      case 'ne': return eb(column, '!=', value)
+      case 'eq': return value === null ? eb(column, 'is', null) : eb(column, '=', value)
+      case 'ne': return value === null ? eb(column, 'is not', null) : eb(column, '!=', value)
       case 'gt': return eb(column, '>', value)
       case 'gte': return eb(column, '>=', value)
       case 'lt': return eb(column, '<', value)
@@ -2235,8 +2241,14 @@ export class HybridQueryEngine implements QueryEngine {
     }
     const col: any = column
     switch (filter.op) {
-      case 'eq': return q.where(col, '=', filter.value as any)
-      case 'ne': return q.where(col, '!=', filter.value as any)
+      case 'eq':
+        return filter.value === null
+          ? q.where(col, 'is', null)
+          : q.where(col, '=', filter.value as any)
+      case 'ne':
+        return filter.value === null
+          ? q.where(col, 'is not', null)
+          : q.where(col, '!=', filter.value as any)
       case 'gt':
       case 'gte':
       case 'lt':

package/src/modules/sales/api/documents/factory.ts

@@ -377,6 +377,7 @@ export function buildDocumentCrudOptions(binding: DocumentBinding) {
     indexer: {
       entityType: binding.entityId,
     },
+    enrichers: binding.kind === 'order' ? { entityId: binding.entityId } : undefined,
     list: {
       schema: listSchema,
       entityId: binding.entityId,

package/src/modules/sales/api/quotes/accept/route.ts

@@ -18,6 +18,7 @@ import { SalesOrder, SalesQuote } from '../../../data/entities'
 import { quoteAcceptSchema } from '../../../data/validators'
 import { sendEmail } from '@open-mercato/shared/lib/email/send'
 import { resolveStatusEntryIdByValue } from '../../../lib/statusHelpers'
+import { resolveEffectiveTenantId } from '../../../lib/publicQuoteTenantScope'
 import { QuoteAcceptedAdminEmail } from '../../../emails/QuoteAcceptedAdminEmail'
 import { createLogger } from '@open-mercato/shared/lib/logger'
 
@@ -68,7 +69,13 @@ export async function POST(req: Request) {
     const em = (container.resolve('em') as EntityManager).fork()
 
     const hashedToken = hashAuthToken(token)
-    const tenantScope = auth?.tenantId ? { tenantId: auth.tenantId } : undefined
+    const effectiveTenantId = resolveEffectiveTenantId(auth)
+    // A session whose tenant cannot be resolved must not fall through to an unscoped lookup.
+    // Anonymous callers (no auth) and tenant-less API keys stay unscoped by design.
+    if (auth && effectiveTenantId === null && auth.isApiKey !== true) {
+      throw new CrudHttpError(404, { error: translate('sales.quotes.accept.notFound', 'Quote not found.') })
+    }
+    const tenantScope = effectiveTenantId ? { tenantId: effectiveTenantId } : undefined
 
     const commandBus = container.resolve('commandBus') as CommandBus
 
@@ -85,7 +92,7 @@ export async function POST(req: Request) {
           SalesQuote,
           {
             acceptanceToken,
-            ...(auth?.tenantId ? { tenantId: auth.tenantId } : {}),
+            ...(effectiveTenantId ? { tenantId: effectiveTenantId } : {}),
             deletedAt: null,
           },
           { lockMode: LockMode.PESSIMISTIC_WRITE },

package/src/modules/sales/api/quotes/public/[token]/route.ts

@@ -14,6 +14,7 @@ import {
 } from "../../../../data/entities";
 import { canonicalizeUnitCode } from "@open-mercato/shared/lib/units/unitCodes";
 import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
+import { isForeignTenantActor } from "../../../../lib/publicQuoteTenantScope";
 import { createLogger } from '@open-mercato/shared/lib/logger'
 
 const logger = createLogger('sales')
@@ -42,7 +43,7 @@ export async function GET(req: Request, ctx: { params: { token: string } }) {
     }
 
     const auth = await getAuthFromRequest(req);
-    if (auth?.tenantId && quote.tenantId !== auth.tenantId) {
+    if (isForeignTenantActor(auth, quote.tenantId)) {
       throw notFound(translate("sales.quotes.public.notFound", "Quote not found."));
     }