npm - @open-mercato/core - Versions diffs - 0.6.7-develop.6661.1.0043ed1d03 → 0.6.7-develop.6670.1.4efa7961c6 - Mend

@open-mercato/core 0.6.7-develop.6661.1.0043ed1d03 → 0.6.7-develop.6670.1.4efa7961c6

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (494) hide show

package/dist/modules/sales/api/documents/factory.js CHANGED Viewed

@@ -308,6 +308,7 @@ function buildDocumentCrudOptions(binding) {
     indexer: {
       entityType: binding.entityId
     },
+    enrichers: binding.kind === "order" ? { entityId: binding.entityId } : void 0,
     list: {
       schema: listSchema,
       entityId: binding.entityId,

package/dist/modules/sales/api/documents/factory.js.map CHANGED Viewed

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../src/modules/sales/api/documents/factory.ts"],
-  "sourcesContent": ["import { z } from 'zod'\nimport { makeCrudRoute, type CrudCtx } from '@open-mercato/shared/lib/crud/factory'\nimport { splitCustomFieldPayload, extractAllCustomFieldEntries } from '@open-mercato/shared/lib/crud/custom-fields'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { CrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { E } from '#generated/entities.ids.generated'\nimport type { SalesOrder, SalesQuote } from '../../data/entities'\nimport { SalesDocumentTagAssignment } from '../../data/entities'\nimport {\n  orderCreateSchema,\n  quoteCreateSchema,\n} from '../../data/validators'\nimport {\n  createPagedListResponseSchema,\n  createSalesCrudOpenApi,\n  defaultDeleteRequestSchema,\n} from '../openapi'\nimport { parseScopedCommandInput, resolveCrudRecordId } from '../utils'\nimport { documentUpdateSchema } from '../../commands/documents'\nimport { buildIlikeTerm } from '@open-mercato/shared/lib/db/buildIlikeTerm'\nimport { parseBooleanToken } from '@open-mercato/shared/lib/boolean'\nimport type { RbacService } from '@open-mercato/core/modules/auth/services/rbacService'\nimport { recalculateOrderTotalsForDisplay } from '../../commands/returns'\nimport { parseDecryptedFieldValue } from '@open-mercato/shared/lib/encryption/tenantDataEncryptionService'\n\ntype DocumentKind = 'order' | 'quote'\n\ntype DocumentBinding = {\n  kind: DocumentKind\n  entity: typeof SalesOrder | typeof SalesQuote\n  entityId: (typeof E.sales)[keyof typeof E.sales]\n  numberField: 'orderNumber' | 'quoteNumber'\n  createCommandId: string\n  updateCommandId: string\n  deleteCommandId: string\n  manageFeature: string\n  viewFeature: string\n}\n\nconst rawBodySchema = z.object({}).passthrough()\n\nconst normalizeJsonRecord = (value: unknown): Record<string, unknown> | null => {\n  if (value && typeof value === 'object' && !Array.isArray(value)) {\n    return value as Record<string, unknown>\n  }\n  if (typeof value !== 'string') return null\n  const parsed = parseDecryptedFieldValue(value)\n  return parsed && typeof parsed === 'object' && !Array.isArray(parsed)\n    ? parsed as Record<string, unknown>\n    : null\n}\n\nconst resolveCustomerName = (snapshot: Record<string, unknown> | null, fallback?: string | null) => {\n  if (!snapshot) return fallback ?? null\n  const customer = snapshot.customer as Record<string, unknown> | undefined\n  const contact = snapshot.contact as Record<string, unknown> | undefined\n  const displayName = typeof customer?.displayName === 'string' ? customer.displayName : null\n  if (displayName) return displayName\n  const first = typeof contact?.firstName === 'string' ? contact.firstName : null\n  const last = typeof contact?.lastName === 'string' ? contact.lastName : null\n  const preferred = typeof contact?.preferredName === 'string' ? contact.preferredName : null\n  const parts = [preferred ?? first, last].filter((part) => part && part.trim().length)\n  if (parts.length) return parts.join(' ')\n  return fallback ?? null\n}\n\nconst resolveCustomerEmail = (snapshot: Record<string, unknown> | null) => {\n  if (!snapshot) return null\n  const customer = snapshot.customer as Record<string, unknown> | undefined\n  const primary = typeof customer?.primaryEmail === 'string' ? customer.primaryEmail : null\n  return primary ?? null\n}\n\nconst listSchema = z\n  .object({\n    page: z.coerce.number().min(1).default(1),\n    pageSize: z.coerce.number().min(1).max(100).default(50),\n    search: z.string().optional(),\n    id: z.string().uuid().optional(),\n    customerId: z.string().uuid().optional(),\n    channelId: z.string().uuid().optional(),\n    lineItemCountMin: z.coerce.number().min(0).optional(),\n    lineItemCountMax: z.coerce.number().min(0).optional(),\n    totalNetMin: z.coerce.number().optional(),\n    totalNetMax: z.coerce.number().optional(),\n    totalGrossMin: z.coerce.number().optional(),\n    totalGrossMax: z.coerce.number().optional(),\n    dateFrom: z.string().optional(),\n    dateTo: z.string().optional(),\n    tagIds: z.string().optional(),\n    tagIdsEmpty: z.string().optional(),\n    sortField: z.string().optional(),\n    sortDir: z.enum(['asc', 'desc']).optional(),\n    withDeleted: z.coerce.boolean().optional(),\n  })\n  .passthrough()\n\ntype ListQuery = z.infer<typeof listSchema>\n\nfunction buildFilters(query: ListQuery, numberColumn: string, kind: DocumentKind) {\n  const filters: Record<string, unknown> = {}\n  if (query.id) filters.id = { $eq: query.id }\n  if (query.search && query.search.trim().length > 0) {\n    const term = buildIlikeTerm(query.search.trim())\n    filters[numberColumn] = { $ilike: term }\n  }\n  if (query.customerId) {\n    filters.customer_entity_id = { $eq: query.customerId }\n  }\n  if (query.channelId) {\n    filters.channel_id = { $eq: query.channelId }\n  }\n  const lineRange: Record<string, number> = {}\n  if (typeof query.lineItemCountMin === 'number') lineRange.$gte = query.lineItemCountMin\n  if (typeof query.lineItemCountMax === 'number') lineRange.$lte = query.lineItemCountMax\n  if (Object.keys(lineRange).length) {\n    filters.line_item_count = lineRange\n  }\n  const netRange: Record<string, number> = {}\n  if (typeof query.totalNetMin === 'number') netRange.$gte = query.totalNetMin\n  if (typeof query.totalNetMax === 'number') netRange.$lte = query.totalNetMax\n  if (Object.keys(netRange).length) {\n    filters.grand_total_net_amount = netRange\n  }\n  const grossRange: Record<string, number> = {}\n  if (typeof query.totalGrossMin === 'number') grossRange.$gte = query.totalGrossMin\n  if (typeof query.totalGrossMax === 'number') grossRange.$lte = query.totalGrossMax\n  if (Object.keys(grossRange).length) {\n    filters.grand_total_gross_amount = grossRange\n  }\n  const dateRange: Record<string, Date> = {}\n  if (query.dateFrom) {\n    const from = new Date(query.dateFrom)\n    if (!Number.isNaN(from.getTime())) dateRange.$gte = from\n  }\n  if (query.dateTo) {\n    const to = new Date(query.dateTo)\n    if (!Number.isNaN(to.getTime())) dateRange.$lte = to\n  }\n  if (Object.keys(dateRange).length) {\n    filters.created_at = dateRange\n  }\n  const tagIdsRaw = typeof query.tagIds === 'string' ? query.tagIds : ''\n  const tagIds = tagIdsRaw\n    .split(',')\n    .map((value) => value.trim())\n    .filter((value) => value.length > 0)\n  if (parseBooleanToken(query.tagIdsEmpty) === true) {\n    filters.id = { $eq: '00000000-0000-0000-0000-000000000000' }\n  } else if (tagIds.length) {\n    filters['tag_assignments.tag_id'] = { $in: tagIds }\n    filters['tag_assignments.document_kind'] = { $eq: kind }\n  }\n  return filters\n}\n\nfunction buildSortMap(numberColumn: string) {\n  return {\n    id: 'id',\n    number: numberColumn,\n    placedAt: 'placed_at',\n    lineItemCount: 'line_item_count',\n    grandTotalNetAmount: 'grand_total_net_amount',\n    grandTotalGrossAmount: 'grand_total_gross_amount',\n    createdAt: 'created_at',\n    updatedAt: 'updated_at',\n  }\n}\n\nconst mapUpdateResponse = (entity: any) => {\n  const customerSnapshot = normalizeJsonRecord(entity?.customerSnapshot)\n  const metadata = normalizeJsonRecord(entity?.metadata)\n\n  return {\n    id: entity?.id ?? null,\n    orderNumber: entity?.orderNumber ?? null,\n    quoteNumber: entity?.quoteNumber ?? null,\n    customerEntityId: entity?.customerEntityId ?? null,\n    customerContactId: entity?.customerContactId ?? null,\n    customerSnapshot,\n    metadata,\n    externalReference: entity?.externalReference ?? null,\n    customerReference: entity?.customerReference ?? null,\n    comment: entity?.comments ?? null,\n    statusEntryId: (entity as any)?.statusEntryId ?? null,\n    status: (entity as any)?.status ?? null,\n    channelId: (entity as any)?.channelId ?? null,\n    customerName: resolveCustomerName(customerSnapshot, entity?.customerEntityId ?? null),\n    contactEmail:\n      resolveCustomerEmail(customerSnapshot) ??\n      (typeof metadata?.customerEmail === 'string' ? metadata.customerEmail : null),\n    currencyCode: entity?.currencyCode ?? null,\n    placedAt: entity?.placedAt ? entity.placedAt.toISOString() : null,\n    expectedDeliveryAt: entity?.expectedDeliveryAt ? entity.expectedDeliveryAt.toISOString() : null,\n    shippingAddressId: entity?.shippingAddressId ?? null,\n    billingAddressId: entity?.billingAddressId ?? null,\n    shippingAddressSnapshot: normalizeJsonRecord(entity?.shippingAddressSnapshot),\n    billingAddressSnapshot: normalizeJsonRecord(entity?.billingAddressSnapshot),\n    shippingMethodId: entity?.shippingMethodId ?? null,\n    shippingMethodCode: entity?.shippingMethodCode ?? null,\n    shippingMethodSnapshot: normalizeJsonRecord(entity?.shippingMethodSnapshot),\n    paymentMethodId: entity?.paymentMethodId ?? null,\n    paymentMethodCode: entity?.paymentMethodCode ?? null,\n    paymentMethodSnapshot: normalizeJsonRecord(entity?.paymentMethodSnapshot),\n    // Return the fresh version so the client can refresh its optimistic-lock\n    // token after a successful inline save \u2014 otherwise a second save on the same\n    // page sends the now-stale updatedAt and falsely 409s (#2055 QA).\n    updatedAt: entity?.updatedAt\n      ? (entity.updatedAt instanceof Date ? entity.updatedAt.toISOString() : entity.updatedAt)\n      : null,\n  }\n}\n\nconst attachTags = async (payload: any, ctx: any) => {\n  const items = Array.isArray(payload?.items) ? (payload.items as Array<Record<string, any>>) : []\n  if (!items.length) return\n  const ids = items\n    .map((item) => (item && typeof item.id === 'string' ? item.id : null))\n    .filter((id): id is string => !!id)\n  if (!ids.length) return\n  const em = ctx?.container?.resolve ? (ctx.container.resolve('em') as any) : null\n  if (!em) return\n  const where: Record<string, unknown> = {\n    documentId: { $in: ids },\n    documentKind: ctx?.bindingKind ?? null,\n  }\n  if (ctx?.auth?.tenantId) where.tenantId = ctx.auth.tenantId\n  const orgIds =\n    Array.isArray(ctx?.organizationIds) && ctx.organizationIds.length\n      ? ctx.organizationIds.filter((val: string | null) => !!val)\n      : ctx?.selectedOrganizationId\n        ? [ctx.selectedOrganizationId]\n        : []\n  if (orgIds.length) where.organizationId = { $in: orgIds }\n  const assignments = await em.find(\n    SalesDocumentTagAssignment,\n    where,\n    { populate: ['tag'] },\n  )\n  const grouped = new Map<string, Array<{ id: string; label: string; color: string | null }>>()\n  assignments.forEach((assignment: any) => {\n    const tag = assignment?.tag\n    const documentId = assignment?.documentId\n    if (!tag || typeof tag.id !== 'string' || typeof documentId !== 'string') return\n    const entry = {\n      id: tag.id,\n      label: typeof tag.label === 'string' && tag.label.trim().length ? tag.label : tag.slug ?? tag.id,\n      color: typeof tag.color === 'string' && tag.color.trim().length ? tag.color : null,\n    }\n    const list = grouped.get(documentId) ?? []\n    list.push(entry)\n    grouped.set(documentId, list)\n  })\n  items.forEach((item: Record<string, any>) => {\n    const id = item && typeof item.id === 'string' ? item.id : null\n    if (!id) return\n    const list = grouped.get(id)\n    if (list) item.tags = list\n  })\n}\n\nasync function ensureNumberEditPermission(\n  ctx: CrudCtx,\n  translate: (key: string, fallback?: string) => string\n) {\n  const rbac = ctx.container?.resolve?.('rbacService') as RbacService | null\n  const auth = ctx.auth\n  if (!rbac || !auth?.sub) return\n  const ok = await rbac.userHasAllFeatures(auth.sub, ['sales.documents.number.edit'], {\n    tenantId: auth.tenantId ?? null,\n    organizationId: ctx.selectedOrganizationId ?? auth.orgId ?? null,\n  })\n  if (!ok) {\n    throw new CrudHttpError(403, {\n      error: translate('sales.documents.errors.number_edit_forbidden', 'You cannot edit document numbers.'),\n    })\n  }\n}\n\nexport function buildDocumentCrudOptions(binding: DocumentBinding) {\n  const numberColumn = binding.numberField === 'orderNumber' ? 'order_number' : 'quote_number'\n  const createSchema = binding.kind === 'order' ? orderCreateSchema : quoteCreateSchema\n\n  const routeMetadata = {\n    GET: { requireAuth: true, requireFeatures: [binding.viewFeature] },\n    POST: { requireAuth: true, requireFeatures: [binding.manageFeature] },\n    PUT: { requireAuth: true, requireFeatures: [binding.manageFeature] },\n    DELETE: { requireAuth: true, requireFeatures: [binding.manageFeature] },\n  }\n\n  const commonFields = [\n    'id',\n    numberColumn,\n    'status',\n    'status_entry_id',\n    'customer_entity_id',\n    'customer_contact_id',\n    'billing_address_id',\n    'shipping_address_id',\n    'customer_snapshot',\n    'billing_address_snapshot',\n    'shipping_address_snapshot',\n    'shipping_method_id',\n    'shipping_method_code',\n    'shipping_method_snapshot',\n    'payment_method_id',\n    'payment_method_code',\n    'payment_method_snapshot',\n    'customer_reference',\n    'metadata',\n    'external_reference',\n    'currency_code',\n    'comments',\n    'channel_id',\n    'placed_at',\n    'line_item_count',\n    'subtotal_net_amount',\n    'subtotal_gross_amount',\n    'tax_total_amount',\n    'discount_total_amount',\n    'grand_total_net_amount',\n    'grand_total_gross_amount',\n    'totals_snapshot',\n    'organization_id',\n    'tenant_id',\n    'created_at',\n    'updated_at',\n  ]\n\n  const orderOnlyFields = [\n    'expected_delivery_at',\n    'shipping_net_amount',\n    'shipping_gross_amount',\n    'surcharge_total_amount',\n    'paid_total_amount',\n    'refunded_total_amount',\n    'outstanding_amount',\n  ]\n\n  const quoteOnlyFields = ['valid_from', 'valid_until']\n\n  const listFields = [\n    ...commonFields,\n    ...(binding.kind === 'order' ? orderOnlyFields : quoteOnlyFields),\n  ]\n\n  // Large JSONB snapshot/payload columns that only the detail page renders. The\n  // grid never reads them, so selecting them for list pages fetches and decrypts\n  // blobs over the wire for nothing (#2233). `customer_snapshot` is intentionally\n  // kept because the grid derives the customer name/email column from it.\n  const detailOnlyProjectionFields = new Set([\n    'billing_address_snapshot',\n    'shipping_address_snapshot',\n    'shipping_method_snapshot',\n    'payment_method_snapshot',\n    'totals_snapshot',\n    'metadata',\n  ])\n\n  const gridFields = listFields.filter((field) => !detailOnlyProjectionFields.has(field))\n\n  // The detail page fetches a single document through this same list route with an\n  // `?id=` filter (there is no separate detail endpoint), so it needs the full\n  // projection. Grid listings (no `id`) use the trimmed projection.\n  const resolveListFields = (query: ListQuery) =>\n    query && typeof query.id === 'string' && query.id.length ? listFields : gridFields\n\n  return {\n    metadata: routeMetadata,\n    orm: {\n      entity: binding.entity as any,\n      idField: 'id',\n      orgField: 'organizationId',\n      tenantField: 'tenantId',\n      softDeleteField: 'deletedAt',\n    },\n    indexer: {\n      entityType: binding.entityId,\n    },\n    list: {\n      schema: listSchema,\n      entityId: binding.entityId,\n      fields: (query: ListQuery) => resolveListFields(query),\n      sortFieldMap: buildSortMap(numberColumn),\n      buildFilters: async (query: any) => buildFilters(query, numberColumn, binding.kind),\n      decorateCustomFields: { entityIds: [binding.entityId] },\n      joins: [\n        {\n          alias: 'tag_assignments',\n          table: 'sales_document_tag_assignments',\n          from: { field: 'id' },\n          to: { field: 'document_id' },\n          type: 'left' as const,\n        },\n      ],\n      transformItem: (item: any) => {\n        const toNumber = (value: unknown): number | null => {\n          if (typeof value === 'number') return Number.isNaN(value) ? null : value\n          if (typeof value === 'string' && value.trim().length) {\n            const parsed = Number(value)\n            return Number.isNaN(parsed) ? null : parsed\n          }\n          return null\n        }\n        const base = {\n          id: item.id,\n          [binding.numberField]: item[numberColumn] ?? null,\n          status: item.status ?? null,\n          statusEntryId: item.status_entry_id ?? null,\n          customerEntityId: item.customer_entity_id ?? null,\n          customerContactId: item.customer_contact_id ?? null,\n          billingAddressId: item.billing_address_id ?? null,\n          shippingAddressId: item.shipping_address_id ?? null,\n          shippingMethodId: item.shipping_method_id ?? null,\n          shippingMethodCode: item.shipping_method_code ?? null,\n          shippingMethodSnapshot: normalizeJsonRecord(item.shipping_method_snapshot),\n          paymentMethodId: item.payment_method_id ?? null,\n          paymentMethodCode: item.payment_method_code ?? null,\n          paymentMethodSnapshot: normalizeJsonRecord(item.payment_method_snapshot),\n          currencyCode: item.currency_code ?? null,\n          channelId: item.channel_id ?? null,\n          externalReference: item.external_reference ?? null,\n          customerReference: item.customer_reference ?? null,\n          placedAt: item.placed_at ?? null,\n          expectedDeliveryAt: item.expected_delivery_at ?? null,\n          comment: item.comments ?? null,\n          validFrom: item.valid_from ?? null,\n          validUntil: item.valid_until ?? null,\n          lineItemCount: toNumber(item.line_item_count),\n          subtotalNetAmount: toNumber(item.subtotal_net_amount),\n          subtotalGrossAmount: toNumber(item.subtotal_gross_amount),\n          discountTotalAmount: toNumber(item.discount_total_amount),\n          taxTotalAmount: toNumber(item.tax_total_amount),\n          shippingNetAmount: toNumber(item.shipping_net_amount),\n          shippingGrossAmount: toNumber(item.shipping_gross_amount),\n          surchargeTotalAmount: toNumber(item.surcharge_total_amount),\n          grandTotalNetAmount: toNumber(item.grand_total_net_amount),\n          grandTotalGrossAmount: toNumber(item.grand_total_gross_amount),\n          paidTotalAmount: toNumber(item.paid_total_amount),\n          refundedTotalAmount: toNumber(item.refunded_total_amount),\n          outstandingAmount: toNumber(item.outstanding_amount),\n          customerSnapshot: normalizeJsonRecord(item.customer_snapshot),\n          billingAddressSnapshot: normalizeJsonRecord(item.billing_address_snapshot),\n          shippingAddressSnapshot: normalizeJsonRecord(item.shipping_address_snapshot),\n          metadata: normalizeJsonRecord(item.metadata),\n          organizationId: item.organization_id ?? null,\n          tenantId: item.tenant_id ?? null,\n          createdAt: item.created_at,\n          updatedAt: item.updated_at,\n        }\n        const cfEntries = extractAllCustomFieldEntries(item as Record<string, unknown>)\n        const normalized = { ...base }\n        Object.keys(normalized).forEach((key) => {\n          if (key.startsWith('cf:')) delete (normalized as any)[key]\n        })\n        return Object.keys(cfEntries).length ? { ...normalized, ...cfEntries } : normalized\n      },\n    },\n    actions: {\n      create: {\n        commandId: binding.createCommandId,\n        schema: rawBodySchema,\n        mapInput: async ({ raw, ctx }: { raw: unknown; ctx: CrudCtx }) => {\n          const { translate } = await resolveTranslations()\n          const { base, custom } = splitCustomFieldPayload(raw ?? {})\n          const parsed = parseScopedCommandInput(\n            createSchema,\n            Object.keys(custom).length ? { ...base, customFields: custom } : base,\n            ctx,\n            translate,\n          )\n          return parsed\n        },\n        response: ({ result }: { result: any }) => ({ id: result?.orderId ?? result?.quoteId ?? result?.id ?? null }),\n        status: 201,\n      },\n      update: {\n        commandId: binding.updateCommandId,\n        schema: rawBodySchema,\n        mapInput: async ({ raw, ctx }: { raw: unknown; ctx: CrudCtx }) => {\n          const { translate } = await resolveTranslations()\n          const { base, custom } = splitCustomFieldPayload(raw ?? {})\n          const numberValue =\n            binding.kind === 'order'\n              ? (base as Record<string, unknown>).orderNumber\n              : (base as Record<string, unknown>).quoteNumber\n          if (typeof numberValue === 'string') {\n            await ensureNumberEditPermission(ctx, translate)\n          }\n          const parsed = parseScopedCommandInput(\n            documentUpdateSchema,\n            Object.keys(custom).length ? { ...base, customFields: custom } : base,\n            ctx,\n            translate,\n          )\n          return parsed\n        },\n        response: ({ result }: { result: any }) =>\n          mapUpdateResponse((result as any)?.order ?? (result as any)?.quote ?? result),\n      },\n      delete: {\n        commandId: binding.deleteCommandId,\n        schema: rawBodySchema,\n        mapInput: async ({ parsed, ctx }: { parsed: any; ctx: CrudCtx }) => {\n          const { translate } = await resolveTranslations()\n          const id = resolveCrudRecordId(parsed, ctx, translate)\n          return { id }\n        },\n        response: () => ({ ok: true }),\n      },\n    },\n    hooks: {\n      afterList: async (payload: any, ctx: CrudCtx) => {\n        await attachTags(payload, { ...ctx, bindingKind: binding.kind })\n        if (binding.kind === 'order' && Array.isArray(payload?.items) && payload.items.length === 1) {\n          const item = payload.items[0] as Record<string, unknown>\n          const orderId = typeof item?.id === 'string' ? item.id : null\n          const tenantId = typeof item?.tenantId === 'string' ? item.tenantId : ctx?.auth?.tenantId ?? null\n          const organizationId =\n            typeof item?.organizationId === 'string' ? item.organizationId : ctx?.selectedOrganizationId ?? ctx?.auth?.orgId ?? null\n          if (orderId && tenantId && organizationId) {\n            const requestEm = ctx?.container?.resolve?.('em') as import('@mikro-orm/postgresql').EntityManager | undefined\n            // Display-only totals recalculation: run on a forked EntityManager so\n            // the order/line/adjustment entities loaded here never enter the\n            // request's Unit of Work. This guarantees a GET can never flush an\n            // UPDATE (and thus never advance `updated_at`), which would otherwise\n            // surface as a spurious optimistic-lock 409 in another tab.\n            const em = requestEm?.fork()\n            if (em) {\n              const totals = await recalculateOrderTotalsForDisplay(\n                em,\n                ctx.container,\n                orderId,\n                { tenantId, organizationId },\n              )\n              if (totals) {\n                Object.assign(item, {\n                  subtotalNetAmount: totals.subtotalNetAmount,\n                  subtotalGrossAmount: totals.subtotalGrossAmount,\n                  discountTotalAmount: totals.discountTotalAmount,\n                  taxTotalAmount: totals.taxTotalAmount,\n                  shippingNetAmount: totals.shippingNetAmount,\n                  shippingGrossAmount: totals.shippingGrossAmount,\n                  surchargeTotalAmount: totals.surchargeTotalAmount,\n                  grandTotalNetAmount: totals.grandTotalNetAmount,\n                  grandTotalGrossAmount: totals.grandTotalGrossAmount,\n                  paidTotalAmount: totals.paidTotalAmount,\n                  refundedTotalAmount: totals.refundedTotalAmount,\n                  outstandingAmount: totals.outstandingAmount,\n                })\n              }\n            }\n          }\n        }\n      },\n    },\n  }\n}\n\nexport function buildDocumentOpenApi(binding: DocumentBinding) {\n  const createSchema = binding.kind === 'order' ? orderCreateSchema : quoteCreateSchema\n  const itemSchema = z.object({\n    id: z.string().uuid(),\n    [binding.numberField]: z.string().nullable(),\n    status: z.string().nullable(),\n    statusEntryId: z.string().uuid().nullable().optional(),\n    customerEntityId: z.string().uuid().nullable(),\n    customerContactId: z.string().uuid().nullable(),\n    billingAddressId: z.string().uuid().nullable(),\n    shippingAddressId: z.string().uuid().nullable(),\n    customerReference: z.string().nullable().optional(),\n    externalReference: z.string().nullable().optional(),\n    comment: z.string().nullable().optional(),\n    placedAt: z.string().nullable().optional(),\n    expectedDeliveryAt: z.string().nullable().optional(),\n    customerSnapshot: z.record(z.string(), z.unknown()).nullable().optional(),\n    billingAddressSnapshot: z.record(z.string(), z.unknown()).nullable().optional(),\n    shippingAddressSnapshot: z.record(z.string(), z.unknown()).nullable().optional(),\n    shippingMethodId: z.string().uuid().nullable().optional(),\n    shippingMethodCode: z.string().nullable().optional(),\n    shippingMethodSnapshot: z.record(z.string(), z.unknown()).nullable().optional(),\n    paymentMethodId: z.string().uuid().nullable().optional(),\n    paymentMethodCode: z.string().nullable().optional(),\n    paymentMethodSnapshot: z.record(z.string(), z.unknown()).nullable().optional(),\n    currencyCode: z.string().nullable(),\n    channelId: z.string().uuid().nullable(),\n    organizationId: z.string().uuid().nullable(),\n    tenantId: z.string().uuid().nullable(),\n    validFrom: z.string().nullable().optional(),\n    validUntil: z.string().nullable().optional(),\n    lineItemCount: z.number().nullable().optional(),\n    subtotalNetAmount: z.number().nullable().optional(),\n    subtotalGrossAmount: z.number().nullable().optional(),\n    discountTotalAmount: z.number().nullable().optional(),\n    taxTotalAmount: z.number().nullable().optional(),\n    shippingNetAmount: z.number().nullable().optional(),\n    shippingGrossAmount: z.number().nullable().optional(),\n    surchargeTotalAmount: z.number().nullable().optional(),\n    grandTotalNetAmount: z.number().nullable().optional(),\n    grandTotalGrossAmount: z.number().nullable().optional(),\n    paidTotalAmount: z.number().nullable().optional(),\n    refundedTotalAmount: z.number().nullable().optional(),\n    outstandingAmount: z.number().nullable().optional(),\n    createdAt: z.string(),\n    updatedAt: z.string(),\n    customFields: z.record(z.string(), z.unknown()).optional(),\n    customValues: z.record(z.string(), z.unknown()).optional(),\n  })\n\n  const listResponseSchema = createPagedListResponseSchema(itemSchema)\n\n  return createSalesCrudOpenApi({\n    resourceName: binding.kind === 'order' ? 'Order' : 'Quote',\n    querySchema: listSchema,\n    listResponseSchema,\n    create: {\n      schema: createSchema,\n      responseSchema: z.object({ id: z.string().uuid().nullable() }),\n      description: `Creates a new sales ${binding.kind}.`,\n    },\n    del: {\n      schema: defaultDeleteRequestSchema,\n      responseSchema: z.object({ ok: z.boolean() }),\n      description: `Deletes a sales ${binding.kind}.`,\n    },\n  })\n}\n\n// Compatibility wrapper\nexport function createDocumentCrudRoute(binding: DocumentBinding) {\n  const crud = makeCrudRoute(buildDocumentCrudOptions(binding))\n  const { GET, POST, PUT, DELETE } = crud\n  return { GET, POST, PUT, DELETE, openApi: buildDocumentOpenApi(binding), metadata: crud.metadata }\n}\n"],
-  "mappings": "AAAA,SAAS,SAAS;AAClB,SAAS,qBAAmC;AAC5C,SAAS,yBAAyB,oCAAoC;AACtE,SAAS,2BAA2B;AACpC,SAAS,qBAAqB;AAG9B,SAAS,kCAAkC;AAC3C;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,yBAAyB,2BAA2B;AAC7D,SAAS,4BAA4B;AACrC,SAAS,sBAAsB;AAC/B,SAAS,yBAAyB;AAElC,SAAS,wCAAwC;AACjD,SAAS,gCAAgC;AAgBzC,MAAM,gBAAgB,EAAE,OAAO,CAAC,CAAC,EAAE,YAAY;AAE/C,MAAM,sBAAsB,CAAC,UAAmD;AAC9E,MAAI,SAAS,OAAO,UAAU,YAAY,CAAC,MAAM,QAAQ,KAAK,GAAG;AAC/D,WAAO;AAAA,EACT;AACA,MAAI,OAAO,UAAU,SAAU,QAAO;AACtC,QAAM,SAAS,yBAAyB,KAAK;AAC7C,SAAO,UAAU,OAAO,WAAW,YAAY,CAAC,MAAM,QAAQ,MAAM,IAChE,SACA;AACN;AAEA,MAAM,sBAAsB,CAAC,UAA0C,aAA6B;AAClG,MAAI,CAAC,SAAU,QAAO,YAAY;AAClC,QAAM,WAAW,SAAS;AAC1B,QAAM,UAAU,SAAS;AACzB,QAAM,cAAc,OAAO,UAAU,gBAAgB,WAAW,SAAS,cAAc;AACvF,MAAI,YAAa,QAAO;AACxB,QAAM,QAAQ,OAAO,SAAS,cAAc,WAAW,QAAQ,YAAY;AAC3E,QAAM,OAAO,OAAO,SAAS,aAAa,WAAW,QAAQ,WAAW;AACxE,QAAM,YAAY,OAAO,SAAS,kBAAkB,WAAW,QAAQ,gBAAgB;AACvF,QAAM,QAAQ,CAAC,aAAa,OAAO,IAAI,EAAE,OAAO,CAAC,SAAS,QAAQ,KAAK,KAAK,EAAE,MAAM;AACpF,MAAI,MAAM,OAAQ,QAAO,MAAM,KAAK,GAAG;AACvC,SAAO,YAAY;AACrB;AAEA,MAAM,uBAAuB,CAAC,aAA6C;AACzE,MAAI,CAAC,SAAU,QAAO;AACtB,QAAM,WAAW,SAAS;AAC1B,QAAM,UAAU,OAAO,UAAU,iBAAiB,WAAW,SAAS,eAAe;AACrF,SAAO,WAAW;AACpB;AAEA,MAAM,aAAa,EAChB,OAAO;AAAA,EACN,MAAM,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,QAAQ,CAAC;AAAA,EACxC,UAAU,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,QAAQ,EAAE;AAAA,EACtD,QAAQ,EAAE,OAAO,EAAE,SAAS;AAAA,EAC5B,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC/B,YAAY,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACvC,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACtC,kBAAkB,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,EACpD,kBAAkB,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,EACpD,aAAa,EAAE,OAAO,OAAO,EAAE,SAAS;AAAA,EACxC,aAAa,EAAE,OAAO,OAAO,EAAE,SAAS;AAAA,EACxC,eAAe,EAAE,OAAO,OAAO,EAAE,SAAS;AAAA,EAC1C,eAAe,EAAE,OAAO,OAAO,EAAE,SAAS;AAAA,EAC1C,UAAU,EAAE,OAAO,EAAE,SAAS;AAAA,EAC9B,QAAQ,EAAE,OAAO,EAAE,SAAS;AAAA,EAC5B,QAAQ,EAAE,OAAO,EAAE,SAAS;AAAA,EAC5B,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,EACjC,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,SAAS,EAAE,KAAK,CAAC,OAAO,MAAM,CAAC,EAAE,SAAS;AAAA,EAC1C,aAAa,EAAE,OAAO,QAAQ,EAAE,SAAS;AAC3C,CAAC,EACA,YAAY;AAIf,SAAS,aAAa,OAAkB,cAAsB,MAAoB;AAChF,QAAM,UAAmC,CAAC;AAC1C,MAAI,MAAM,GAAI,SAAQ,KAAK,EAAE,KAAK,MAAM,GAAG;AAC3C,MAAI,MAAM,UAAU,MAAM,OAAO,KAAK,EAAE,SAAS,GAAG;AAClD,UAAM,OAAO,eAAe,MAAM,OAAO,KAAK,CAAC;AAC/C,YAAQ,YAAY,IAAI,EAAE,QAAQ,KAAK;AAAA,EACzC;AACA,MAAI,MAAM,YAAY;AACpB,YAAQ,qBAAqB,EAAE,KAAK,MAAM,WAAW;AAAA,EACvD;AACA,MAAI,MAAM,WAAW;AACnB,YAAQ,aAAa,EAAE,KAAK,MAAM,UAAU;AAAA,EAC9C;AACA,QAAM,YAAoC,CAAC;AAC3C,MAAI,OAAO,MAAM,qBAAqB,SAAU,WAAU,OAAO,MAAM;AACvE,MAAI,OAAO,MAAM,qBAAqB,SAAU,WAAU,OAAO,MAAM;AACvE,MAAI,OAAO,KAAK,SAAS,EAAE,QAAQ;AACjC,YAAQ,kBAAkB;AAAA,EAC5B;AACA,QAAM,WAAmC,CAAC;AAC1C,MAAI,OAAO,MAAM,gBAAgB,SAAU,UAAS,OAAO,MAAM;AACjE,MAAI,OAAO,MAAM,gBAAgB,SAAU,UAAS,OAAO,MAAM;AACjE,MAAI,OAAO,KAAK,QAAQ,EAAE,QAAQ;AAChC,YAAQ,yBAAyB;AAAA,EACnC;AACA,QAAM,aAAqC,CAAC;AAC5C,MAAI,OAAO,MAAM,kBAAkB,SAAU,YAAW,OAAO,MAAM;AACrE,MAAI,OAAO,MAAM,kBAAkB,SAAU,YAAW,OAAO,MAAM;AACrE,MAAI,OAAO,KAAK,UAAU,EAAE,QAAQ;AAClC,YAAQ,2BAA2B;AAAA,EACrC;AACA,QAAM,YAAkC,CAAC;AACzC,MAAI,MAAM,UAAU;AAClB,UAAM,OAAO,IAAI,KAAK,MAAM,QAAQ;AACpC,QAAI,CAAC,OAAO,MAAM,KAAK,QAAQ,CAAC,EAAG,WAAU,OAAO;AAAA,EACtD;AACA,MAAI,MAAM,QAAQ;AAChB,UAAM,KAAK,IAAI,KAAK,MAAM,MAAM;AAChC,QAAI,CAAC,OAAO,MAAM,GAAG,QAAQ,CAAC,EAAG,WAAU,OAAO;AAAA,EACpD;AACA,MAAI,OAAO,KAAK,SAAS,EAAE,QAAQ;AACjC,YAAQ,aAAa;AAAA,EACvB;AACA,QAAM,YAAY,OAAO,MAAM,WAAW,WAAW,MAAM,SAAS;AACpE,QAAM,SAAS,UACZ,MAAM,GAAG,EACT,IAAI,CAAC,UAAU,MAAM,KAAK,CAAC,EAC3B,OAAO,CAAC,UAAU,MAAM,SAAS,CAAC;AACrC,MAAI,kBAAkB,MAAM,WAAW,MAAM,MAAM;AACjD,YAAQ,KAAK,EAAE,KAAK,uCAAuC;AAAA,EAC7D,WAAW,OAAO,QAAQ;AACxB,YAAQ,wBAAwB,IAAI,EAAE,KAAK,OAAO;AAClD,YAAQ,+BAA+B,IAAI,EAAE,KAAK,KAAK;AAAA,EACzD;AACA,SAAO;AACT;AAEA,SAAS,aAAa,cAAsB;AAC1C,SAAO;AAAA,IACL,IAAI;AAAA,IACJ,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,eAAe;AAAA,IACf,qBAAqB;AAAA,IACrB,uBAAuB;AAAA,IACvB,WAAW;AAAA,IACX,WAAW;AAAA,EACb;AACF;AAEA,MAAM,oBAAoB,CAAC,WAAgB;AACzC,QAAM,mBAAmB,oBAAoB,QAAQ,gBAAgB;AACrE,QAAM,WAAW,oBAAoB,QAAQ,QAAQ;AAErD,SAAO;AAAA,IACL,IAAI,QAAQ,MAAM;AAAA,IAClB,aAAa,QAAQ,eAAe;AAAA,IACpC,aAAa,QAAQ,eAAe;AAAA,IACpC,kBAAkB,QAAQ,oBAAoB;AAAA,IAC9C,mBAAmB,QAAQ,qBAAqB;AAAA,IAChD;AAAA,IACA;AAAA,IACA,mBAAmB,QAAQ,qBAAqB;AAAA,IAChD,mBAAmB,QAAQ,qBAAqB;AAAA,IAChD,SAAS,QAAQ,YAAY;AAAA,IAC7B,eAAgB,QAAgB,iBAAiB;AAAA,IACjD,QAAS,QAAgB,UAAU;AAAA,IACnC,WAAY,QAAgB,aAAa;AAAA,IACzC,cAAc,oBAAoB,kBAAkB,QAAQ,oBAAoB,IAAI;AAAA,IACpF,cACE,qBAAqB,gBAAgB,MACpC,OAAO,UAAU,kBAAkB,WAAW,SAAS,gBAAgB;AAAA,IAC1E,cAAc,QAAQ,gBAAgB;AAAA,IACtC,UAAU,QAAQ,WAAW,OAAO,SAAS,YAAY,IAAI;AAAA,IAC7D,oBAAoB,QAAQ,qBAAqB,OAAO,mBAAmB,YAAY,IAAI;AAAA,IAC3F,mBAAmB,QAAQ,qBAAqB;AAAA,IAChD,kBAAkB,QAAQ,oBAAoB;AAAA,IAC9C,yBAAyB,oBAAoB,QAAQ,uBAAuB;AAAA,IAC5E,wBAAwB,oBAAoB,QAAQ,sBAAsB;AAAA,IAC1E,kBAAkB,QAAQ,oBAAoB;AAAA,IAC9C,oBAAoB,QAAQ,sBAAsB;AAAA,IAClD,wBAAwB,oBAAoB,QAAQ,sBAAsB;AAAA,IAC1E,iBAAiB,QAAQ,mBAAmB;AAAA,IAC5C,mBAAmB,QAAQ,qBAAqB;AAAA,IAChD,uBAAuB,oBAAoB,QAAQ,qBAAqB;AAAA;AAAA;AAAA;AAAA,IAIxE,WAAW,QAAQ,YACd,OAAO,qBAAqB,OAAO,OAAO,UAAU,YAAY,IAAI,OAAO,YAC5E;AAAA,EACN;AACF;AAEA,MAAM,aAAa,OAAO,SAAc,QAAa;AACnD,QAAM,QAAQ,MAAM,QAAQ,SAAS,KAAK,IAAK,QAAQ,QAAuC,CAAC;AAC/F,MAAI,CAAC,MAAM,OAAQ;AACnB,QAAM,MAAM,MACT,IAAI,CAAC,SAAU,QAAQ,OAAO,KAAK,OAAO,WAAW,KAAK,KAAK,IAAK,EACpE,OAAO,CAAC,OAAqB,CAAC,CAAC,EAAE;AACpC,MAAI,CAAC,IAAI,OAAQ;AACjB,QAAM,KAAK,KAAK,WAAW,UAAW,IAAI,UAAU,QAAQ,IAAI,IAAY;AAC5E,MAAI,CAAC,GAAI;AACT,QAAM,QAAiC;AAAA,IACrC,YAAY,EAAE,KAAK,IAAI;AAAA,IACvB,cAAc,KAAK,eAAe;AAAA,EACpC;AACA,MAAI,KAAK,MAAM,SAAU,OAAM,WAAW,IAAI,KAAK;AACnD,QAAM,SACJ,MAAM,QAAQ,KAAK,eAAe,KAAK,IAAI,gBAAgB,SACvD,IAAI,gBAAgB,OAAO,CAAC,QAAuB,CAAC,CAAC,GAAG,IACxD,KAAK,yBACH,CAAC,IAAI,sBAAsB,IAC3B,CAAC;AACT,MAAI,OAAO,OAAQ,OAAM,iBAAiB,EAAE,KAAK,OAAO;AACxD,QAAM,cAAc,MAAM,GAAG;AAAA,IAC3B;AAAA,IACA;AAAA,IACA,EAAE,UAAU,CAAC,KAAK,EAAE;AAAA,EACtB;AACA,QAAM,UAAU,oBAAI,IAAwE;AAC5F,cAAY,QAAQ,CAAC,eAAoB;AACvC,UAAM,MAAM,YAAY;AACxB,UAAM,aAAa,YAAY;AAC/B,QAAI,CAAC,OAAO,OAAO,IAAI,OAAO,YAAY,OAAO,eAAe,SAAU;AAC1E,UAAM,QAAQ;AAAA,MACZ,IAAI,IAAI;AAAA,MACR,OAAO,OAAO,IAAI,UAAU,YAAY,IAAI,MAAM,KAAK,EAAE,SAAS,IAAI,QAAQ,IAAI,QAAQ,IAAI;AAAA,MAC9F,OAAO,OAAO,IAAI,UAAU,YAAY,IAAI,MAAM,KAAK,EAAE,SAAS,IAAI,QAAQ;AAAA,IAChF;AACA,UAAM,OAAO,QAAQ,IAAI,UAAU,KAAK,CAAC;AACzC,SAAK,KAAK,KAAK;AACf,YAAQ,IAAI,YAAY,IAAI;AAAA,EAC9B,CAAC;AACD,QAAM,QAAQ,CAAC,SAA8B;AAC3C,UAAM,KAAK,QAAQ,OAAO,KAAK,OAAO,WAAW,KAAK,KAAK;AAC3D,QAAI,CAAC,GAAI;AACT,UAAM,OAAO,QAAQ,IAAI,EAAE;AAC3B,QAAI,KAAM,MAAK,OAAO;AAAA,EACxB,CAAC;AACH;AAEA,eAAe,2BACb,KACA,WACA;AACA,QAAM,OAAO,IAAI,WAAW,UAAU,aAAa;AACnD,QAAM,OAAO,IAAI;AACjB,MAAI,CAAC,QAAQ,CAAC,MAAM,IAAK;AACzB,QAAM,KAAK,MAAM,KAAK,mBAAmB,KAAK,KAAK,CAAC,6BAA6B,GAAG;AAAA,IAClF,UAAU,KAAK,YAAY;AAAA,IAC3B,gBAAgB,IAAI,0BAA0B,KAAK,SAAS;AAAA,EAC9D,CAAC;AACD,MAAI,CAAC,IAAI;AACP,UAAM,IAAI,cAAc,KAAK;AAAA,MAC3B,OAAO,UAAU,gDAAgD,mCAAmC;AAAA,IACtG,CAAC;AAAA,EACH;AACF;AAEO,SAAS,yBAAyB,SAA0B;AACjE,QAAM,eAAe,QAAQ,gBAAgB,gBAAgB,iBAAiB;AAC9E,QAAM,eAAe,QAAQ,SAAS,UAAU,oBAAoB;AAEpE,QAAM,gBAAgB;AAAA,IACpB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,QAAQ,WAAW,EAAE;AAAA,IACjE,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,QAAQ,aAAa,EAAE;AAAA,IACpE,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,QAAQ,aAAa,EAAE;AAAA,IACnE,QAAQ,EAAE,aAAa,MAAM,iBAAiB,CAAC,QAAQ,aAAa,EAAE;AAAA,EACxE;AAEA,QAAM,eAAe;AAAA,IACnB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAEA,QAAM,kBAAkB;AAAA,IACtB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAEA,QAAM,kBAAkB,CAAC,cAAc,aAAa;AAEpD,QAAM,aAAa;AAAA,IACjB,GAAG;AAAA,IACH,GAAI,QAAQ,SAAS,UAAU,kBAAkB;AAAA,EACnD;AAMA,QAAM,6BAA6B,oBAAI,IAAI;AAAA,IACzC;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,CAAC;AAED,QAAM,aAAa,WAAW,OAAO,CAAC,UAAU,CAAC,2BAA2B,IAAI,KAAK,CAAC;AAKtF,QAAM,oBAAoB,CAAC,UACzB,SAAS,OAAO,MAAM,OAAO,YAAY,MAAM,GAAG,SAAS,aAAa;AAE1E,SAAO;AAAA,IACL,UAAU;AAAA,IACV,KAAK;AAAA,MACH,QAAQ,QAAQ;AAAA,MAChB,SAAS;AAAA,MACT,UAAU;AAAA,MACV,aAAa;AAAA,MACb,iBAAiB;AAAA,IACnB;AAAA,IACA,SAAS;AAAA,MACP,YAAY,QAAQ;AAAA,IACtB;AAAA,IACA,MAAM;AAAA,MACJ,QAAQ;AAAA,MACR,UAAU,QAAQ;AAAA,MAClB,QAAQ,CAAC,UAAqB,kBAAkB,KAAK;AAAA,MACrD,cAAc,aAAa,YAAY;AAAA,MACvC,cAAc,OAAO,UAAe,aAAa,OAAO,cAAc,QAAQ,IAAI;AAAA,MAClF,sBAAsB,EAAE,WAAW,CAAC,QAAQ,QAAQ,EAAE;AAAA,MACtD,OAAO;AAAA,QACL;AAAA,UACE,OAAO;AAAA,UACP,OAAO;AAAA,UACP,MAAM,EAAE,OAAO,KAAK;AAAA,UACpB,IAAI,EAAE,OAAO,cAAc;AAAA,UAC3B,MAAM;AAAA,QACR;AAAA,MACF;AAAA,MACA,eAAe,CAAC,SAAc;AAC5B,cAAM,WAAW,CAAC,UAAkC;AAClD,cAAI,OAAO,UAAU,SAAU,QAAO,OAAO,MAAM,KAAK,IAAI,OAAO;AACnE,cAAI,OAAO,UAAU,YAAY,MAAM,KAAK,EAAE,QAAQ;AACpD,kBAAM,SAAS,OAAO,KAAK;AAC3B,mBAAO,OAAO,MAAM,MAAM,IAAI,OAAO;AAAA,UACvC;AACA,iBAAO;AAAA,QACT;AACA,cAAM,OAAO;AAAA,UACX,IAAI,KAAK;AAAA,UACT,CAAC,QAAQ,WAAW,GAAG,KAAK,YAAY,KAAK;AAAA,UAC7C,QAAQ,KAAK,UAAU;AAAA,UACvB,eAAe,KAAK,mBAAmB;AAAA,UACvC,kBAAkB,KAAK,sBAAsB;AAAA,UAC7C,mBAAmB,KAAK,uBAAuB;AAAA,UAC/C,kBAAkB,KAAK,sBAAsB;AAAA,UAC7C,mBAAmB,KAAK,uBAAuB;AAAA,UAC/C,kBAAkB,KAAK,sBAAsB;AAAA,UAC7C,oBAAoB,KAAK,wBAAwB;AAAA,UACjD,wBAAwB,oBAAoB,KAAK,wBAAwB;AAAA,UACzE,iBAAiB,KAAK,qBAAqB;AAAA,UAC3C,mBAAmB,KAAK,uBAAuB;AAAA,UAC/C,uBAAuB,oBAAoB,KAAK,uBAAuB;AAAA,UACvE,cAAc,KAAK,iBAAiB;AAAA,UACpC,WAAW,KAAK,cAAc;AAAA,UAC9B,mBAAmB,KAAK,sBAAsB;AAAA,UAC9C,mBAAmB,KAAK,sBAAsB;AAAA,UAC9C,UAAU,KAAK,aAAa;AAAA,UAC5B,oBAAoB,KAAK,wBAAwB;AAAA,UACjD,SAAS,KAAK,YAAY;AAAA,UAC1B,WAAW,KAAK,cAAc;AAAA,UAC9B,YAAY,KAAK,eAAe;AAAA,UAChC,eAAe,SAAS,KAAK,eAAe;AAAA,UAC5C,mBAAmB,SAAS,KAAK,mBAAmB;AAAA,UACpD,qBAAqB,SAAS,KAAK,qBAAqB;AAAA,UACxD,qBAAqB,SAAS,KAAK,qBAAqB;AAAA,UACxD,gBAAgB,SAAS,KAAK,gBAAgB;AAAA,UAC9C,mBAAmB,SAAS,KAAK,mBAAmB;AAAA,UACpD,qBAAqB,SAAS,KAAK,qBAAqB;AAAA,UACxD,sBAAsB,SAAS,KAAK,sBAAsB;AAAA,UAC1D,qBAAqB,SAAS,KAAK,sBAAsB;AAAA,UACzD,uBAAuB,SAAS,KAAK,wBAAwB;AAAA,UAC7D,iBAAiB,SAAS,KAAK,iBAAiB;AAAA,UAChD,qBAAqB,SAAS,KAAK,qBAAqB;AAAA,UACxD,mBAAmB,SAAS,KAAK,kBAAkB;AAAA,UACnD,kBAAkB,oBAAoB,KAAK,iBAAiB;AAAA,UAC5D,wBAAwB,oBAAoB,KAAK,wBAAwB;AAAA,UACzE,yBAAyB,oBAAoB,KAAK,yBAAyB;AAAA,UAC3E,UAAU,oBAAoB,KAAK,QAAQ;AAAA,UAC3C,gBAAgB,KAAK,mBAAmB;AAAA,UACxC,UAAU,KAAK,aAAa;AAAA,UAC5B,WAAW,KAAK;AAAA,UAChB,WAAW,KAAK;AAAA,QAClB;AACA,cAAM,YAAY,6BAA6B,IAA+B;AAC9E,cAAM,aAAa,EAAE,GAAG,KAAK;AAC7B,eAAO,KAAK,UAAU,EAAE,QAAQ,CAAC,QAAQ;AACvC,cAAI,IAAI,WAAW,KAAK,EAAG,QAAQ,WAAmB,GAAG;AAAA,QAC3D,CAAC;AACD,eAAO,OAAO,KAAK,SAAS,EAAE,SAAS,EAAE,GAAG,YAAY,GAAG,UAAU,IAAI;AAAA,MAC3E;AAAA,IACF;AAAA,IACA,SAAS;AAAA,MACP,QAAQ;AAAA,QACN,WAAW,QAAQ;AAAA,QACnB,QAAQ;AAAA,QACR,UAAU,OAAO,EAAE,KAAK,IAAI,MAAsC;AAChE,gBAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,gBAAM,EAAE,MAAM,OAAO,IAAI,wBAAwB,OAAO,CAAC,CAAC;AAC1D,gBAAM,SAAS;AAAA,YACb;AAAA,YACA,OAAO,KAAK,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,cAAc,OAAO,IAAI;AAAA,YACjE;AAAA,YACA;AAAA,UACF;AACA,iBAAO;AAAA,QACT;AAAA,QACA,UAAU,CAAC,EAAE,OAAO,OAAwB,EAAE,IAAI,QAAQ,WAAW,QAAQ,WAAW,QAAQ,MAAM,KAAK;AAAA,QAC3G,QAAQ;AAAA,MACV;AAAA,MACA,QAAQ;AAAA,QACN,WAAW,QAAQ;AAAA,QACnB,QAAQ;AAAA,QACR,UAAU,OAAO,EAAE,KAAK,IAAI,MAAsC;AAChE,gBAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,gBAAM,EAAE,MAAM,OAAO,IAAI,wBAAwB,OAAO,CAAC,CAAC;AAC1D,gBAAM,cACJ,QAAQ,SAAS,UACZ,KAAiC,cACjC,KAAiC;AACxC,cAAI,OAAO,gBAAgB,UAAU;AACnC,kBAAM,2BAA2B,KAAK,SAAS;AAAA,UACjD;AACA,gBAAM,SAAS;AAAA,YACb;AAAA,YACA,OAAO,KAAK,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,cAAc,OAAO,IAAI;AAAA,YACjE;AAAA,YACA;AAAA,UACF;AACA,iBAAO;AAAA,QACT;AAAA,QACA,UAAU,CAAC,EAAE,OAAO,MAClB,kBAAmB,QAAgB,SAAU,QAAgB,SAAS,MAAM;AAAA,MAChF;AAAA,MACA,QAAQ;AAAA,QACN,WAAW,QAAQ;AAAA,QACnB,QAAQ;AAAA,QACR,UAAU,OAAO,EAAE,QAAQ,IAAI,MAAqC;AAClE,gBAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,gBAAM,KAAK,oBAAoB,QAAQ,KAAK,SAAS;AACrD,iBAAO,EAAE,GAAG;AAAA,QACd;AAAA,QACA,UAAU,OAAO,EAAE,IAAI,KAAK;AAAA,MAC9B;AAAA,IACF;AAAA,IACA,OAAO;AAAA,MACL,WAAW,OAAO,SAAc,QAAiB;AAC/C,cAAM,WAAW,SAAS,EAAE,GAAG,KAAK,aAAa,QAAQ,KAAK,CAAC;AAC/D,YAAI,QAAQ,SAAS,WAAW,MAAM,QAAQ,SAAS,KAAK,KAAK,QAAQ,MAAM,WAAW,GAAG;AAC3F,gBAAM,OAAO,QAAQ,MAAM,CAAC;AAC5B,gBAAM,UAAU,OAAO,MAAM,OAAO,WAAW,KAAK,KAAK;AACzD,gBAAM,WAAW,OAAO,MAAM,aAAa,WAAW,KAAK,WAAW,KAAK,MAAM,YAAY;AAC7F,gBAAM,iBACJ,OAAO,MAAM,mBAAmB,WAAW,KAAK,iBAAiB,KAAK,0BAA0B,KAAK,MAAM,SAAS;AACtH,cAAI,WAAW,YAAY,gBAAgB;AACzC,kBAAM,YAAY,KAAK,WAAW,UAAU,IAAI;AAMhD,kBAAM,KAAK,WAAW,KAAK;AAC3B,gBAAI,IAAI;AACN,oBAAM,SAAS,MAAM;AAAA,gBACnB;AAAA,gBACA,IAAI;AAAA,gBACJ;AAAA,gBACA,EAAE,UAAU,eAAe;AAAA,cAC7B;AACA,kBAAI,QAAQ;AACV,uBAAO,OAAO,MAAM;AAAA,kBAClB,mBAAmB,OAAO;AAAA,kBAC1B,qBAAqB,OAAO;AAAA,kBAC5B,qBAAqB,OAAO;AAAA,kBAC5B,gBAAgB,OAAO;AAAA,kBACvB,mBAAmB,OAAO;AAAA,kBAC1B,qBAAqB,OAAO;AAAA,kBAC5B,sBAAsB,OAAO;AAAA,kBAC7B,qBAAqB,OAAO;AAAA,kBAC5B,uBAAuB,OAAO;AAAA,kBAC9B,iBAAiB,OAAO;AAAA,kBACxB,qBAAqB,OAAO;AAAA,kBAC5B,mBAAmB,OAAO;AAAA,gBAC5B,CAAC;AAAA,cACH;AAAA,YACF;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;AAEO,SAAS,qBAAqB,SAA0B;AAC7D,QAAM,eAAe,QAAQ,SAAS,UAAU,oBAAoB;AACpE,QAAM,aAAa,EAAE,OAAO;AAAA,IAC1B,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,IACpB,CAAC,QAAQ,WAAW,GAAG,EAAE,OAAO,EAAE,SAAS;AAAA,IAC3C,QAAQ,EAAE,OAAO,EAAE,SAAS;AAAA,IAC5B,eAAe,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS;AAAA,IACrD,kBAAkB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,IAC7C,mBAAmB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,IAC9C,kBAAkB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,IAC7C,mBAAmB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,IAC9C,mBAAmB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,IAClD,mBAAmB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,IAClD,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,IACxC,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,IACzC,oBAAoB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,IACnD,kBAAkB,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS,EAAE,SAAS;AAAA,IACxE,wBAAwB,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS,EAAE,SAAS;AAAA,IAC9E,yBAAyB,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS,EAAE,SAAS;AAAA,IAC/E,kBAAkB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS;AAAA,IACxD,oBAAoB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,IACnD,wBAAwB,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS,EAAE,SAAS;AAAA,IAC9E,iBAAiB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS;AAAA,IACvD,mBAAmB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,IAClD,uBAAuB,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS,EAAE,SAAS;AAAA,IAC7E,cAAc,EAAE,OAAO,EAAE,SAAS;AAAA,IAClC,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,IACtC,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,IAC3C,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,IACrC,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,IAC1C,YAAY,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,IAC3C,eAAe,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,IAC9C,mBAAmB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,IAClD,qBAAqB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,IACpD,qBAAqB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,IACpD,gBAAgB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,IAC/C,mBAAmB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,IAClD,qBAAqB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,IACpD,sBAAsB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,IACrD,qBAAqB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,IACpD,uBAAuB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,IACtD,iBAAiB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,IAChD,qBAAqB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,IACpD,mBAAmB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,IAClD,WAAW,EAAE,OAAO;AAAA,IACpB,WAAW,EAAE,OAAO;AAAA,IACpB,cAAc,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS;AAAA,IACzD,cAAc,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS;AAAA,EAC3D,CAAC;AAED,QAAM,qBAAqB,8BAA8B,UAAU;AAEnE,SAAO,uBAAuB;AAAA,IAC5B,cAAc,QAAQ,SAAS,UAAU,UAAU;AAAA,IACnD,aAAa;AAAA,IACb;AAAA,IACA,QAAQ;AAAA,MACN,QAAQ;AAAA,MACR,gBAAgB,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;AAAA,MAC7D,aAAa,uBAAuB,QAAQ,IAAI;AAAA,IAClD;AAAA,IACA,KAAK;AAAA,MACH,QAAQ;AAAA,MACR,gBAAgB,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;AAAA,MAC5C,aAAa,mBAAmB,QAAQ,IAAI;AAAA,IAC9C;AAAA,EACF,CAAC;AACH;AAGO,SAAS,wBAAwB,SAA0B;AAChE,QAAM,OAAO,cAAc,yBAAyB,OAAO,CAAC;AAC5D,QAAM,EAAE,KAAK,MAAM,KAAK,OAAO,IAAI;AACnC,SAAO,EAAE,KAAK,MAAM,KAAK,QAAQ,SAAS,qBAAqB,OAAO,GAAG,UAAU,KAAK,SAAS;AACnG;",
+  "sourcesContent": ["import { z } from 'zod'\nimport { makeCrudRoute, type CrudCtx } from '@open-mercato/shared/lib/crud/factory'\nimport { splitCustomFieldPayload, extractAllCustomFieldEntries } from '@open-mercato/shared/lib/crud/custom-fields'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { CrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { E } from '#generated/entities.ids.generated'\nimport type { SalesOrder, SalesQuote } from '../../data/entities'\nimport { SalesDocumentTagAssignment } from '../../data/entities'\nimport {\n  orderCreateSchema,\n  quoteCreateSchema,\n} from '../../data/validators'\nimport {\n  createPagedListResponseSchema,\n  createSalesCrudOpenApi,\n  defaultDeleteRequestSchema,\n} from '../openapi'\nimport { parseScopedCommandInput, resolveCrudRecordId } from '../utils'\nimport { documentUpdateSchema } from '../../commands/documents'\nimport { buildIlikeTerm } from '@open-mercato/shared/lib/db/buildIlikeTerm'\nimport { parseBooleanToken } from '@open-mercato/shared/lib/boolean'\nimport type { RbacService } from '@open-mercato/core/modules/auth/services/rbacService'\nimport { recalculateOrderTotalsForDisplay } from '../../commands/returns'\nimport { parseDecryptedFieldValue } from '@open-mercato/shared/lib/encryption/tenantDataEncryptionService'\n\ntype DocumentKind = 'order' | 'quote'\n\ntype DocumentBinding = {\n  kind: DocumentKind\n  entity: typeof SalesOrder | typeof SalesQuote\n  entityId: (typeof E.sales)[keyof typeof E.sales]\n  numberField: 'orderNumber' | 'quoteNumber'\n  createCommandId: string\n  updateCommandId: string\n  deleteCommandId: string\n  manageFeature: string\n  viewFeature: string\n}\n\nconst rawBodySchema = z.object({}).passthrough()\n\nconst normalizeJsonRecord = (value: unknown): Record<string, unknown> | null => {\n  if (value && typeof value === 'object' && !Array.isArray(value)) {\n    return value as Record<string, unknown>\n  }\n  if (typeof value !== 'string') return null\n  const parsed = parseDecryptedFieldValue(value)\n  return parsed && typeof parsed === 'object' && !Array.isArray(parsed)\n    ? parsed as Record<string, unknown>\n    : null\n}\n\nconst resolveCustomerName = (snapshot: Record<string, unknown> | null, fallback?: string | null) => {\n  if (!snapshot) return fallback ?? null\n  const customer = snapshot.customer as Record<string, unknown> | undefined\n  const contact = snapshot.contact as Record<string, unknown> | undefined\n  const displayName = typeof customer?.displayName === 'string' ? customer.displayName : null\n  if (displayName) return displayName\n  const first = typeof contact?.firstName === 'string' ? contact.firstName : null\n  const last = typeof contact?.lastName === 'string' ? contact.lastName : null\n  const preferred = typeof contact?.preferredName === 'string' ? contact.preferredName : null\n  const parts = [preferred ?? first, last].filter((part) => part && part.trim().length)\n  if (parts.length) return parts.join(' ')\n  return fallback ?? null\n}\n\nconst resolveCustomerEmail = (snapshot: Record<string, unknown> | null) => {\n  if (!snapshot) return null\n  const customer = snapshot.customer as Record<string, unknown> | undefined\n  const primary = typeof customer?.primaryEmail === 'string' ? customer.primaryEmail : null\n  return primary ?? null\n}\n\nconst listSchema = z\n  .object({\n    page: z.coerce.number().min(1).default(1),\n    pageSize: z.coerce.number().min(1).max(100).default(50),\n    search: z.string().optional(),\n    id: z.string().uuid().optional(),\n    customerId: z.string().uuid().optional(),\n    channelId: z.string().uuid().optional(),\n    lineItemCountMin: z.coerce.number().min(0).optional(),\n    lineItemCountMax: z.coerce.number().min(0).optional(),\n    totalNetMin: z.coerce.number().optional(),\n    totalNetMax: z.coerce.number().optional(),\n    totalGrossMin: z.coerce.number().optional(),\n    totalGrossMax: z.coerce.number().optional(),\n    dateFrom: z.string().optional(),\n    dateTo: z.string().optional(),\n    tagIds: z.string().optional(),\n    tagIdsEmpty: z.string().optional(),\n    sortField: z.string().optional(),\n    sortDir: z.enum(['asc', 'desc']).optional(),\n    withDeleted: z.coerce.boolean().optional(),\n  })\n  .passthrough()\n\ntype ListQuery = z.infer<typeof listSchema>\n\nfunction buildFilters(query: ListQuery, numberColumn: string, kind: DocumentKind) {\n  const filters: Record<string, unknown> = {}\n  if (query.id) filters.id = { $eq: query.id }\n  if (query.search && query.search.trim().length > 0) {\n    const term = buildIlikeTerm(query.search.trim())\n    filters[numberColumn] = { $ilike: term }\n  }\n  if (query.customerId) {\n    filters.customer_entity_id = { $eq: query.customerId }\n  }\n  if (query.channelId) {\n    filters.channel_id = { $eq: query.channelId }\n  }\n  const lineRange: Record<string, number> = {}\n  if (typeof query.lineItemCountMin === 'number') lineRange.$gte = query.lineItemCountMin\n  if (typeof query.lineItemCountMax === 'number') lineRange.$lte = query.lineItemCountMax\n  if (Object.keys(lineRange).length) {\n    filters.line_item_count = lineRange\n  }\n  const netRange: Record<string, number> = {}\n  if (typeof query.totalNetMin === 'number') netRange.$gte = query.totalNetMin\n  if (typeof query.totalNetMax === 'number') netRange.$lte = query.totalNetMax\n  if (Object.keys(netRange).length) {\n    filters.grand_total_net_amount = netRange\n  }\n  const grossRange: Record<string, number> = {}\n  if (typeof query.totalGrossMin === 'number') grossRange.$gte = query.totalGrossMin\n  if (typeof query.totalGrossMax === 'number') grossRange.$lte = query.totalGrossMax\n  if (Object.keys(grossRange).length) {\n    filters.grand_total_gross_amount = grossRange\n  }\n  const dateRange: Record<string, Date> = {}\n  if (query.dateFrom) {\n    const from = new Date(query.dateFrom)\n    if (!Number.isNaN(from.getTime())) dateRange.$gte = from\n  }\n  if (query.dateTo) {\n    const to = new Date(query.dateTo)\n    if (!Number.isNaN(to.getTime())) dateRange.$lte = to\n  }\n  if (Object.keys(dateRange).length) {\n    filters.created_at = dateRange\n  }\n  const tagIdsRaw = typeof query.tagIds === 'string' ? query.tagIds : ''\n  const tagIds = tagIdsRaw\n    .split(',')\n    .map((value) => value.trim())\n    .filter((value) => value.length > 0)\n  if (parseBooleanToken(query.tagIdsEmpty) === true) {\n    filters.id = { $eq: '00000000-0000-0000-0000-000000000000' }\n  } else if (tagIds.length) {\n    filters['tag_assignments.tag_id'] = { $in: tagIds }\n    filters['tag_assignments.document_kind'] = { $eq: kind }\n  }\n  return filters\n}\n\nfunction buildSortMap(numberColumn: string) {\n  return {\n    id: 'id',\n    number: numberColumn,\n    placedAt: 'placed_at',\n    lineItemCount: 'line_item_count',\n    grandTotalNetAmount: 'grand_total_net_amount',\n    grandTotalGrossAmount: 'grand_total_gross_amount',\n    createdAt: 'created_at',\n    updatedAt: 'updated_at',\n  }\n}\n\nconst mapUpdateResponse = (entity: any) => {\n  const customerSnapshot = normalizeJsonRecord(entity?.customerSnapshot)\n  const metadata = normalizeJsonRecord(entity?.metadata)\n\n  return {\n    id: entity?.id ?? null,\n    orderNumber: entity?.orderNumber ?? null,\n    quoteNumber: entity?.quoteNumber ?? null,\n    customerEntityId: entity?.customerEntityId ?? null,\n    customerContactId: entity?.customerContactId ?? null,\n    customerSnapshot,\n    metadata,\n    externalReference: entity?.externalReference ?? null,\n    customerReference: entity?.customerReference ?? null,\n    comment: entity?.comments ?? null,\n    statusEntryId: (entity as any)?.statusEntryId ?? null,\n    status: (entity as any)?.status ?? null,\n    channelId: (entity as any)?.channelId ?? null,\n    customerName: resolveCustomerName(customerSnapshot, entity?.customerEntityId ?? null),\n    contactEmail:\n      resolveCustomerEmail(customerSnapshot) ??\n      (typeof metadata?.customerEmail === 'string' ? metadata.customerEmail : null),\n    currencyCode: entity?.currencyCode ?? null,\n    placedAt: entity?.placedAt ? entity.placedAt.toISOString() : null,\n    expectedDeliveryAt: entity?.expectedDeliveryAt ? entity.expectedDeliveryAt.toISOString() : null,\n    shippingAddressId: entity?.shippingAddressId ?? null,\n    billingAddressId: entity?.billingAddressId ?? null,\n    shippingAddressSnapshot: normalizeJsonRecord(entity?.shippingAddressSnapshot),\n    billingAddressSnapshot: normalizeJsonRecord(entity?.billingAddressSnapshot),\n    shippingMethodId: entity?.shippingMethodId ?? null,\n    shippingMethodCode: entity?.shippingMethodCode ?? null,\n    shippingMethodSnapshot: normalizeJsonRecord(entity?.shippingMethodSnapshot),\n    paymentMethodId: entity?.paymentMethodId ?? null,\n    paymentMethodCode: entity?.paymentMethodCode ?? null,\n    paymentMethodSnapshot: normalizeJsonRecord(entity?.paymentMethodSnapshot),\n    // Return the fresh version so the client can refresh its optimistic-lock\n    // token after a successful inline save \u2014 otherwise a second save on the same\n    // page sends the now-stale updatedAt and falsely 409s (#2055 QA).\n    updatedAt: entity?.updatedAt\n      ? (entity.updatedAt instanceof Date ? entity.updatedAt.toISOString() : entity.updatedAt)\n      : null,\n  }\n}\n\nconst attachTags = async (payload: any, ctx: any) => {\n  const items = Array.isArray(payload?.items) ? (payload.items as Array<Record<string, any>>) : []\n  if (!items.length) return\n  const ids = items\n    .map((item) => (item && typeof item.id === 'string' ? item.id : null))\n    .filter((id): id is string => !!id)\n  if (!ids.length) return\n  const em = ctx?.container?.resolve ? (ctx.container.resolve('em') as any) : null\n  if (!em) return\n  const where: Record<string, unknown> = {\n    documentId: { $in: ids },\n    documentKind: ctx?.bindingKind ?? null,\n  }\n  if (ctx?.auth?.tenantId) where.tenantId = ctx.auth.tenantId\n  const orgIds =\n    Array.isArray(ctx?.organizationIds) && ctx.organizationIds.length\n      ? ctx.organizationIds.filter((val: string | null) => !!val)\n      : ctx?.selectedOrganizationId\n        ? [ctx.selectedOrganizationId]\n        : []\n  if (orgIds.length) where.organizationId = { $in: orgIds }\n  const assignments = await em.find(\n    SalesDocumentTagAssignment,\n    where,\n    { populate: ['tag'] },\n  )\n  const grouped = new Map<string, Array<{ id: string; label: string; color: string | null }>>()\n  assignments.forEach((assignment: any) => {\n    const tag = assignment?.tag\n    const documentId = assignment?.documentId\n    if (!tag || typeof tag.id !== 'string' || typeof documentId !== 'string') return\n    const entry = {\n      id: tag.id,\n      label: typeof tag.label === 'string' && tag.label.trim().length ? tag.label : tag.slug ?? tag.id,\n      color: typeof tag.color === 'string' && tag.color.trim().length ? tag.color : null,\n    }\n    const list = grouped.get(documentId) ?? []\n    list.push(entry)\n    grouped.set(documentId, list)\n  })\n  items.forEach((item: Record<string, any>) => {\n    const id = item && typeof item.id === 'string' ? item.id : null\n    if (!id) return\n    const list = grouped.get(id)\n    if (list) item.tags = list\n  })\n}\n\nasync function ensureNumberEditPermission(\n  ctx: CrudCtx,\n  translate: (key: string, fallback?: string) => string\n) {\n  const rbac = ctx.container?.resolve?.('rbacService') as RbacService | null\n  const auth = ctx.auth\n  if (!rbac || !auth?.sub) return\n  const ok = await rbac.userHasAllFeatures(auth.sub, ['sales.documents.number.edit'], {\n    tenantId: auth.tenantId ?? null,\n    organizationId: ctx.selectedOrganizationId ?? auth.orgId ?? null,\n  })\n  if (!ok) {\n    throw new CrudHttpError(403, {\n      error: translate('sales.documents.errors.number_edit_forbidden', 'You cannot edit document numbers.'),\n    })\n  }\n}\n\nexport function buildDocumentCrudOptions(binding: DocumentBinding) {\n  const numberColumn = binding.numberField === 'orderNumber' ? 'order_number' : 'quote_number'\n  const createSchema = binding.kind === 'order' ? orderCreateSchema : quoteCreateSchema\n\n  const routeMetadata = {\n    GET: { requireAuth: true, requireFeatures: [binding.viewFeature] },\n    POST: { requireAuth: true, requireFeatures: [binding.manageFeature] },\n    PUT: { requireAuth: true, requireFeatures: [binding.manageFeature] },\n    DELETE: { requireAuth: true, requireFeatures: [binding.manageFeature] },\n  }\n\n  const commonFields = [\n    'id',\n    numberColumn,\n    'status',\n    'status_entry_id',\n    'customer_entity_id',\n    'customer_contact_id',\n    'billing_address_id',\n    'shipping_address_id',\n    'customer_snapshot',\n    'billing_address_snapshot',\n    'shipping_address_snapshot',\n    'shipping_method_id',\n    'shipping_method_code',\n    'shipping_method_snapshot',\n    'payment_method_id',\n    'payment_method_code',\n    'payment_method_snapshot',\n    'customer_reference',\n    'metadata',\n    'external_reference',\n    'currency_code',\n    'comments',\n    'channel_id',\n    'placed_at',\n    'line_item_count',\n    'subtotal_net_amount',\n    'subtotal_gross_amount',\n    'tax_total_amount',\n    'discount_total_amount',\n    'grand_total_net_amount',\n    'grand_total_gross_amount',\n    'totals_snapshot',\n    'organization_id',\n    'tenant_id',\n    'created_at',\n    'updated_at',\n  ]\n\n  const orderOnlyFields = [\n    'expected_delivery_at',\n    'shipping_net_amount',\n    'shipping_gross_amount',\n    'surcharge_total_amount',\n    'paid_total_amount',\n    'refunded_total_amount',\n    'outstanding_amount',\n  ]\n\n  const quoteOnlyFields = ['valid_from', 'valid_until']\n\n  const listFields = [\n    ...commonFields,\n    ...(binding.kind === 'order' ? orderOnlyFields : quoteOnlyFields),\n  ]\n\n  // Large JSONB snapshot/payload columns that only the detail page renders. The\n  // grid never reads them, so selecting them for list pages fetches and decrypts\n  // blobs over the wire for nothing (#2233). `customer_snapshot` is intentionally\n  // kept because the grid derives the customer name/email column from it.\n  const detailOnlyProjectionFields = new Set([\n    'billing_address_snapshot',\n    'shipping_address_snapshot',\n    'shipping_method_snapshot',\n    'payment_method_snapshot',\n    'totals_snapshot',\n    'metadata',\n  ])\n\n  const gridFields = listFields.filter((field) => !detailOnlyProjectionFields.has(field))\n\n  // The detail page fetches a single document through this same list route with an\n  // `?id=` filter (there is no separate detail endpoint), so it needs the full\n  // projection. Grid listings (no `id`) use the trimmed projection.\n  const resolveListFields = (query: ListQuery) =>\n    query && typeof query.id === 'string' && query.id.length ? listFields : gridFields\n\n  return {\n    metadata: routeMetadata,\n    orm: {\n      entity: binding.entity as any,\n      idField: 'id',\n      orgField: 'organizationId',\n      tenantField: 'tenantId',\n      softDeleteField: 'deletedAt',\n    },\n    indexer: {\n      entityType: binding.entityId,\n    },\n    enrichers: binding.kind === 'order' ? { entityId: binding.entityId } : undefined,\n    list: {\n      schema: listSchema,\n      entityId: binding.entityId,\n      fields: (query: ListQuery) => resolveListFields(query),\n      sortFieldMap: buildSortMap(numberColumn),\n      buildFilters: async (query: any) => buildFilters(query, numberColumn, binding.kind),\n      decorateCustomFields: { entityIds: [binding.entityId] },\n      joins: [\n        {\n          alias: 'tag_assignments',\n          table: 'sales_document_tag_assignments',\n          from: { field: 'id' },\n          to: { field: 'document_id' },\n          type: 'left' as const,\n        },\n      ],\n      transformItem: (item: any) => {\n        const toNumber = (value: unknown): number | null => {\n          if (typeof value === 'number') return Number.isNaN(value) ? null : value\n          if (typeof value === 'string' && value.trim().length) {\n            const parsed = Number(value)\n            return Number.isNaN(parsed) ? null : parsed\n          }\n          return null\n        }\n        const base = {\n          id: item.id,\n          [binding.numberField]: item[numberColumn] ?? null,\n          status: item.status ?? null,\n          statusEntryId: item.status_entry_id ?? null,\n          customerEntityId: item.customer_entity_id ?? null,\n          customerContactId: item.customer_contact_id ?? null,\n          billingAddressId: item.billing_address_id ?? null,\n          shippingAddressId: item.shipping_address_id ?? null,\n          shippingMethodId: item.shipping_method_id ?? null,\n          shippingMethodCode: item.shipping_method_code ?? null,\n          shippingMethodSnapshot: normalizeJsonRecord(item.shipping_method_snapshot),\n          paymentMethodId: item.payment_method_id ?? null,\n          paymentMethodCode: item.payment_method_code ?? null,\n          paymentMethodSnapshot: normalizeJsonRecord(item.payment_method_snapshot),\n          currencyCode: item.currency_code ?? null,\n          channelId: item.channel_id ?? null,\n          externalReference: item.external_reference ?? null,\n          customerReference: item.customer_reference ?? null,\n          placedAt: item.placed_at ?? null,\n          expectedDeliveryAt: item.expected_delivery_at ?? null,\n          comment: item.comments ?? null,\n          validFrom: item.valid_from ?? null,\n          validUntil: item.valid_until ?? null,\n          lineItemCount: toNumber(item.line_item_count),\n          subtotalNetAmount: toNumber(item.subtotal_net_amount),\n          subtotalGrossAmount: toNumber(item.subtotal_gross_amount),\n          discountTotalAmount: toNumber(item.discount_total_amount),\n          taxTotalAmount: toNumber(item.tax_total_amount),\n          shippingNetAmount: toNumber(item.shipping_net_amount),\n          shippingGrossAmount: toNumber(item.shipping_gross_amount),\n          surchargeTotalAmount: toNumber(item.surcharge_total_amount),\n          grandTotalNetAmount: toNumber(item.grand_total_net_amount),\n          grandTotalGrossAmount: toNumber(item.grand_total_gross_amount),\n          paidTotalAmount: toNumber(item.paid_total_amount),\n          refundedTotalAmount: toNumber(item.refunded_total_amount),\n          outstandingAmount: toNumber(item.outstanding_amount),\n          customerSnapshot: normalizeJsonRecord(item.customer_snapshot),\n          billingAddressSnapshot: normalizeJsonRecord(item.billing_address_snapshot),\n          shippingAddressSnapshot: normalizeJsonRecord(item.shipping_address_snapshot),\n          metadata: normalizeJsonRecord(item.metadata),\n          organizationId: item.organization_id ?? null,\n          tenantId: item.tenant_id ?? null,\n          createdAt: item.created_at,\n          updatedAt: item.updated_at,\n        }\n        const cfEntries = extractAllCustomFieldEntries(item as Record<string, unknown>)\n        const normalized = { ...base }\n        Object.keys(normalized).forEach((key) => {\n          if (key.startsWith('cf:')) delete (normalized as any)[key]\n        })\n        return Object.keys(cfEntries).length ? { ...normalized, ...cfEntries } : normalized\n      },\n    },\n    actions: {\n      create: {\n        commandId: binding.createCommandId,\n        schema: rawBodySchema,\n        mapInput: async ({ raw, ctx }: { raw: unknown; ctx: CrudCtx }) => {\n          const { translate } = await resolveTranslations()\n          const { base, custom } = splitCustomFieldPayload(raw ?? {})\n          const parsed = parseScopedCommandInput(\n            createSchema,\n            Object.keys(custom).length ? { ...base, customFields: custom } : base,\n            ctx,\n            translate,\n          )\n          return parsed\n        },\n        response: ({ result }: { result: any }) => ({ id: result?.orderId ?? result?.quoteId ?? result?.id ?? null }),\n        status: 201,\n      },\n      update: {\n        commandId: binding.updateCommandId,\n        schema: rawBodySchema,\n        mapInput: async ({ raw, ctx }: { raw: unknown; ctx: CrudCtx }) => {\n          const { translate } = await resolveTranslations()\n          const { base, custom } = splitCustomFieldPayload(raw ?? {})\n          const numberValue =\n            binding.kind === 'order'\n              ? (base as Record<string, unknown>).orderNumber\n              : (base as Record<string, unknown>).quoteNumber\n          if (typeof numberValue === 'string') {\n            await ensureNumberEditPermission(ctx, translate)\n          }\n          const parsed = parseScopedCommandInput(\n            documentUpdateSchema,\n            Object.keys(custom).length ? { ...base, customFields: custom } : base,\n            ctx,\n            translate,\n          )\n          return parsed\n        },\n        response: ({ result }: { result: any }) =>\n          mapUpdateResponse((result as any)?.order ?? (result as any)?.quote ?? result),\n      },\n      delete: {\n        commandId: binding.deleteCommandId,\n        schema: rawBodySchema,\n        mapInput: async ({ parsed, ctx }: { parsed: any; ctx: CrudCtx }) => {\n          const { translate } = await resolveTranslations()\n          const id = resolveCrudRecordId(parsed, ctx, translate)\n          return { id }\n        },\n        response: () => ({ ok: true }),\n      },\n    },\n    hooks: {\n      afterList: async (payload: any, ctx: CrudCtx) => {\n        await attachTags(payload, { ...ctx, bindingKind: binding.kind })\n        if (binding.kind === 'order' && Array.isArray(payload?.items) && payload.items.length === 1) {\n          const item = payload.items[0] as Record<string, unknown>\n          const orderId = typeof item?.id === 'string' ? item.id : null\n          const tenantId = typeof item?.tenantId === 'string' ? item.tenantId : ctx?.auth?.tenantId ?? null\n          const organizationId =\n            typeof item?.organizationId === 'string' ? item.organizationId : ctx?.selectedOrganizationId ?? ctx?.auth?.orgId ?? null\n          if (orderId && tenantId && organizationId) {\n            const requestEm = ctx?.container?.resolve?.('em') as import('@mikro-orm/postgresql').EntityManager | undefined\n            // Display-only totals recalculation: run on a forked EntityManager so\n            // the order/line/adjustment entities loaded here never enter the\n            // request's Unit of Work. This guarantees a GET can never flush an\n            // UPDATE (and thus never advance `updated_at`), which would otherwise\n            // surface as a spurious optimistic-lock 409 in another tab.\n            const em = requestEm?.fork()\n            if (em) {\n              const totals = await recalculateOrderTotalsForDisplay(\n                em,\n                ctx.container,\n                orderId,\n                { tenantId, organizationId },\n              )\n              if (totals) {\n                Object.assign(item, {\n                  subtotalNetAmount: totals.subtotalNetAmount,\n                  subtotalGrossAmount: totals.subtotalGrossAmount,\n                  discountTotalAmount: totals.discountTotalAmount,\n                  taxTotalAmount: totals.taxTotalAmount,\n                  shippingNetAmount: totals.shippingNetAmount,\n                  shippingGrossAmount: totals.shippingGrossAmount,\n                  surchargeTotalAmount: totals.surchargeTotalAmount,\n                  grandTotalNetAmount: totals.grandTotalNetAmount,\n                  grandTotalGrossAmount: totals.grandTotalGrossAmount,\n                  paidTotalAmount: totals.paidTotalAmount,\n                  refundedTotalAmount: totals.refundedTotalAmount,\n                  outstandingAmount: totals.outstandingAmount,\n                })\n              }\n            }\n          }\n        }\n      },\n    },\n  }\n}\n\nexport function buildDocumentOpenApi(binding: DocumentBinding) {\n  const createSchema = binding.kind === 'order' ? orderCreateSchema : quoteCreateSchema\n  const itemSchema = z.object({\n    id: z.string().uuid(),\n    [binding.numberField]: z.string().nullable(),\n    status: z.string().nullable(),\n    statusEntryId: z.string().uuid().nullable().optional(),\n    customerEntityId: z.string().uuid().nullable(),\n    customerContactId: z.string().uuid().nullable(),\n    billingAddressId: z.string().uuid().nullable(),\n    shippingAddressId: z.string().uuid().nullable(),\n    customerReference: z.string().nullable().optional(),\n    externalReference: z.string().nullable().optional(),\n    comment: z.string().nullable().optional(),\n    placedAt: z.string().nullable().optional(),\n    expectedDeliveryAt: z.string().nullable().optional(),\n    customerSnapshot: z.record(z.string(), z.unknown()).nullable().optional(),\n    billingAddressSnapshot: z.record(z.string(), z.unknown()).nullable().optional(),\n    shippingAddressSnapshot: z.record(z.string(), z.unknown()).nullable().optional(),\n    shippingMethodId: z.string().uuid().nullable().optional(),\n    shippingMethodCode: z.string().nullable().optional(),\n    shippingMethodSnapshot: z.record(z.string(), z.unknown()).nullable().optional(),\n    paymentMethodId: z.string().uuid().nullable().optional(),\n    paymentMethodCode: z.string().nullable().optional(),\n    paymentMethodSnapshot: z.record(z.string(), z.unknown()).nullable().optional(),\n    currencyCode: z.string().nullable(),\n    channelId: z.string().uuid().nullable(),\n    organizationId: z.string().uuid().nullable(),\n    tenantId: z.string().uuid().nullable(),\n    validFrom: z.string().nullable().optional(),\n    validUntil: z.string().nullable().optional(),\n    lineItemCount: z.number().nullable().optional(),\n    subtotalNetAmount: z.number().nullable().optional(),\n    subtotalGrossAmount: z.number().nullable().optional(),\n    discountTotalAmount: z.number().nullable().optional(),\n    taxTotalAmount: z.number().nullable().optional(),\n    shippingNetAmount: z.number().nullable().optional(),\n    shippingGrossAmount: z.number().nullable().optional(),\n    surchargeTotalAmount: z.number().nullable().optional(),\n    grandTotalNetAmount: z.number().nullable().optional(),\n    grandTotalGrossAmount: z.number().nullable().optional(),\n    paidTotalAmount: z.number().nullable().optional(),\n    refundedTotalAmount: z.number().nullable().optional(),\n    outstandingAmount: z.number().nullable().optional(),\n    createdAt: z.string(),\n    updatedAt: z.string(),\n    customFields: z.record(z.string(), z.unknown()).optional(),\n    customValues: z.record(z.string(), z.unknown()).optional(),\n  })\n\n  const listResponseSchema = createPagedListResponseSchema(itemSchema)\n\n  return createSalesCrudOpenApi({\n    resourceName: binding.kind === 'order' ? 'Order' : 'Quote',\n    querySchema: listSchema,\n    listResponseSchema,\n    create: {\n      schema: createSchema,\n      responseSchema: z.object({ id: z.string().uuid().nullable() }),\n      description: `Creates a new sales ${binding.kind}.`,\n    },\n    del: {\n      schema: defaultDeleteRequestSchema,\n      responseSchema: z.object({ ok: z.boolean() }),\n      description: `Deletes a sales ${binding.kind}.`,\n    },\n  })\n}\n\n// Compatibility wrapper\nexport function createDocumentCrudRoute(binding: DocumentBinding) {\n  const crud = makeCrudRoute(buildDocumentCrudOptions(binding))\n  const { GET, POST, PUT, DELETE } = crud\n  return { GET, POST, PUT, DELETE, openApi: buildDocumentOpenApi(binding), metadata: crud.metadata }\n}\n"],
+  "mappings": "AAAA,SAAS,SAAS;AAClB,SAAS,qBAAmC;AAC5C,SAAS,yBAAyB,oCAAoC;AACtE,SAAS,2BAA2B;AACpC,SAAS,qBAAqB;AAG9B,SAAS,kCAAkC;AAC3C;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,yBAAyB,2BAA2B;AAC7D,SAAS,4BAA4B;AACrC,SAAS,sBAAsB;AAC/B,SAAS,yBAAyB;AAElC,SAAS,wCAAwC;AACjD,SAAS,gCAAgC;AAgBzC,MAAM,gBAAgB,EAAE,OAAO,CAAC,CAAC,EAAE,YAAY;AAE/C,MAAM,sBAAsB,CAAC,UAAmD;AAC9E,MAAI,SAAS,OAAO,UAAU,YAAY,CAAC,MAAM,QAAQ,KAAK,GAAG;AAC/D,WAAO;AAAA,EACT;AACA,MAAI,OAAO,UAAU,SAAU,QAAO;AACtC,QAAM,SAAS,yBAAyB,KAAK;AAC7C,SAAO,UAAU,OAAO,WAAW,YAAY,CAAC,MAAM,QAAQ,MAAM,IAChE,SACA;AACN;AAEA,MAAM,sBAAsB,CAAC,UAA0C,aAA6B;AAClG,MAAI,CAAC,SAAU,QAAO,YAAY;AAClC,QAAM,WAAW,SAAS;AAC1B,QAAM,UAAU,SAAS;AACzB,QAAM,cAAc,OAAO,UAAU,gBAAgB,WAAW,SAAS,cAAc;AACvF,MAAI,YAAa,QAAO;AACxB,QAAM,QAAQ,OAAO,SAAS,cAAc,WAAW,QAAQ,YAAY;AAC3E,QAAM,OAAO,OAAO,SAAS,aAAa,WAAW,QAAQ,WAAW;AACxE,QAAM,YAAY,OAAO,SAAS,kBAAkB,WAAW,QAAQ,gBAAgB;AACvF,QAAM,QAAQ,CAAC,aAAa,OAAO,IAAI,EAAE,OAAO,CAAC,SAAS,QAAQ,KAAK,KAAK,EAAE,MAAM;AACpF,MAAI,MAAM,OAAQ,QAAO,MAAM,KAAK,GAAG;AACvC,SAAO,YAAY;AACrB;AAEA,MAAM,uBAAuB,CAAC,aAA6C;AACzE,MAAI,CAAC,SAAU,QAAO;AACtB,QAAM,WAAW,SAAS;AAC1B,QAAM,UAAU,OAAO,UAAU,iBAAiB,WAAW,SAAS,eAAe;AACrF,SAAO,WAAW;AACpB;AAEA,MAAM,aAAa,EAChB,OAAO;AAAA,EACN,MAAM,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,QAAQ,CAAC;AAAA,EACxC,UAAU,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,QAAQ,EAAE;AAAA,EACtD,QAAQ,EAAE,OAAO,EAAE,SAAS;AAAA,EAC5B,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC/B,YAAY,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACvC,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACtC,kBAAkB,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,EACpD,kBAAkB,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,EACpD,aAAa,EAAE,OAAO,OAAO,EAAE,SAAS;AAAA,EACxC,aAAa,EAAE,OAAO,OAAO,EAAE,SAAS;AAAA,EACxC,eAAe,EAAE,OAAO,OAAO,EAAE,SAAS;AAAA,EAC1C,eAAe,EAAE,OAAO,OAAO,EAAE,SAAS;AAAA,EAC1C,UAAU,EAAE,OAAO,EAAE,SAAS;AAAA,EAC9B,QAAQ,EAAE,OAAO,EAAE,SAAS;AAAA,EAC5B,QAAQ,EAAE,OAAO,EAAE,SAAS;AAAA,EAC5B,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,EACjC,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,SAAS,EAAE,KAAK,CAAC,OAAO,MAAM,CAAC,EAAE,SAAS;AAAA,EAC1C,aAAa,EAAE,OAAO,QAAQ,EAAE,SAAS;AAC3C,CAAC,EACA,YAAY;AAIf,SAAS,aAAa,OAAkB,cAAsB,MAAoB;AAChF,QAAM,UAAmC,CAAC;AAC1C,MAAI,MAAM,GAAI,SAAQ,KAAK,EAAE,KAAK,MAAM,GAAG;AAC3C,MAAI,MAAM,UAAU,MAAM,OAAO,KAAK,EAAE,SAAS,GAAG;AAClD,UAAM,OAAO,eAAe,MAAM,OAAO,KAAK,CAAC;AAC/C,YAAQ,YAAY,IAAI,EAAE,QAAQ,KAAK;AAAA,EACzC;AACA,MAAI,MAAM,YAAY;AACpB,YAAQ,qBAAqB,EAAE,KAAK,MAAM,WAAW;AAAA,EACvD;AACA,MAAI,MAAM,WAAW;AACnB,YAAQ,aAAa,EAAE,KAAK,MAAM,UAAU;AAAA,EAC9C;AACA,QAAM,YAAoC,CAAC;AAC3C,MAAI,OAAO,MAAM,qBAAqB,SAAU,WAAU,OAAO,MAAM;AACvE,MAAI,OAAO,MAAM,qBAAqB,SAAU,WAAU,OAAO,MAAM;AACvE,MAAI,OAAO,KAAK,SAAS,EAAE,QAAQ;AACjC,YAAQ,kBAAkB;AAAA,EAC5B;AACA,QAAM,WAAmC,CAAC;AAC1C,MAAI,OAAO,MAAM,gBAAgB,SAAU,UAAS,OAAO,MAAM;AACjE,MAAI,OAAO,MAAM,gBAAgB,SAAU,UAAS,OAAO,MAAM;AACjE,MAAI,OAAO,KAAK,QAAQ,EAAE,QAAQ;AAChC,YAAQ,yBAAyB;AAAA,EACnC;AACA,QAAM,aAAqC,CAAC;AAC5C,MAAI,OAAO,MAAM,kBAAkB,SAAU,YAAW,OAAO,MAAM;AACrE,MAAI,OAAO,MAAM,kBAAkB,SAAU,YAAW,OAAO,MAAM;AACrE,MAAI,OAAO,KAAK,UAAU,EAAE,QAAQ;AAClC,YAAQ,2BAA2B;AAAA,EACrC;AACA,QAAM,YAAkC,CAAC;AACzC,MAAI,MAAM,UAAU;AAClB,UAAM,OAAO,IAAI,KAAK,MAAM,QAAQ;AACpC,QAAI,CAAC,OAAO,MAAM,KAAK,QAAQ,CAAC,EAAG,WAAU,OAAO;AAAA,EACtD;AACA,MAAI,MAAM,QAAQ;AAChB,UAAM,KAAK,IAAI,KAAK,MAAM,MAAM;AAChC,QAAI,CAAC,OAAO,MAAM,GAAG,QAAQ,CAAC,EAAG,WAAU,OAAO;AAAA,EACpD;AACA,MAAI,OAAO,KAAK,SAAS,EAAE,QAAQ;AACjC,YAAQ,aAAa;AAAA,EACvB;AACA,QAAM,YAAY,OAAO,MAAM,WAAW,WAAW,MAAM,SAAS;AACpE,QAAM,SAAS,UACZ,MAAM,GAAG,EACT,IAAI,CAAC,UAAU,MAAM,KAAK,CAAC,EAC3B,OAAO,CAAC,UAAU,MAAM,SAAS,CAAC;AACrC,MAAI,kBAAkB,MAAM,WAAW,MAAM,MAAM;AACjD,YAAQ,KAAK,EAAE,KAAK,uCAAuC;AAAA,EAC7D,WAAW,OAAO,QAAQ;AACxB,YAAQ,wBAAwB,IAAI,EAAE,KAAK,OAAO;AAClD,YAAQ,+BAA+B,IAAI,EAAE,KAAK,KAAK;AAAA,EACzD;AACA,SAAO;AACT;AAEA,SAAS,aAAa,cAAsB;AAC1C,SAAO;AAAA,IACL,IAAI;AAAA,IACJ,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,eAAe;AAAA,IACf,qBAAqB;AAAA,IACrB,uBAAuB;AAAA,IACvB,WAAW;AAAA,IACX,WAAW;AAAA,EACb;AACF;AAEA,MAAM,oBAAoB,CAAC,WAAgB;AACzC,QAAM,mBAAmB,oBAAoB,QAAQ,gBAAgB;AACrE,QAAM,WAAW,oBAAoB,QAAQ,QAAQ;AAErD,SAAO;AAAA,IACL,IAAI,QAAQ,MAAM;AAAA,IAClB,aAAa,QAAQ,eAAe;AAAA,IACpC,aAAa,QAAQ,eAAe;AAAA,IACpC,kBAAkB,QAAQ,oBAAoB;AAAA,IAC9C,mBAAmB,QAAQ,qBAAqB;AAAA,IAChD;AAAA,IACA;AAAA,IACA,mBAAmB,QAAQ,qBAAqB;AAAA,IAChD,mBAAmB,QAAQ,qBAAqB;AAAA,IAChD,SAAS,QAAQ,YAAY;AAAA,IAC7B,eAAgB,QAAgB,iBAAiB;AAAA,IACjD,QAAS,QAAgB,UAAU;AAAA,IACnC,WAAY,QAAgB,aAAa;AAAA,IACzC,cAAc,oBAAoB,kBAAkB,QAAQ,oBAAoB,IAAI;AAAA,IACpF,cACE,qBAAqB,gBAAgB,MACpC,OAAO,UAAU,kBAAkB,WAAW,SAAS,gBAAgB;AAAA,IAC1E,cAAc,QAAQ,gBAAgB;AAAA,IACtC,UAAU,QAAQ,WAAW,OAAO,SAAS,YAAY,IAAI;AAAA,IAC7D,oBAAoB,QAAQ,qBAAqB,OAAO,mBAAmB,YAAY,IAAI;AAAA,IAC3F,mBAAmB,QAAQ,qBAAqB;AAAA,IAChD,kBAAkB,QAAQ,oBAAoB;AAAA,IAC9C,yBAAyB,oBAAoB,QAAQ,uBAAuB;AAAA,IAC5E,wBAAwB,oBAAoB,QAAQ,sBAAsB;AAAA,IAC1E,kBAAkB,QAAQ,oBAAoB;AAAA,IAC9C,oBAAoB,QAAQ,sBAAsB;AAAA,IAClD,wBAAwB,oBAAoB,QAAQ,sBAAsB;AAAA,IAC1E,iBAAiB,QAAQ,mBAAmB;AAAA,IAC5C,mBAAmB,QAAQ,qBAAqB;AAAA,IAChD,uBAAuB,oBAAoB,QAAQ,qBAAqB;AAAA;AAAA;AAAA;AAAA,IAIxE,WAAW,QAAQ,YACd,OAAO,qBAAqB,OAAO,OAAO,UAAU,YAAY,IAAI,OAAO,YAC5E;AAAA,EACN;AACF;AAEA,MAAM,aAAa,OAAO,SAAc,QAAa;AACnD,QAAM,QAAQ,MAAM,QAAQ,SAAS,KAAK,IAAK,QAAQ,QAAuC,CAAC;AAC/F,MAAI,CAAC,MAAM,OAAQ;AACnB,QAAM,MAAM,MACT,IAAI,CAAC,SAAU,QAAQ,OAAO,KAAK,OAAO,WAAW,KAAK,KAAK,IAAK,EACpE,OAAO,CAAC,OAAqB,CAAC,CAAC,EAAE;AACpC,MAAI,CAAC,IAAI,OAAQ;AACjB,QAAM,KAAK,KAAK,WAAW,UAAW,IAAI,UAAU,QAAQ,IAAI,IAAY;AAC5E,MAAI,CAAC,GAAI;AACT,QAAM,QAAiC;AAAA,IACrC,YAAY,EAAE,KAAK,IAAI;AAAA,IACvB,cAAc,KAAK,eAAe;AAAA,EACpC;AACA,MAAI,KAAK,MAAM,SAAU,OAAM,WAAW,IAAI,KAAK;AACnD,QAAM,SACJ,MAAM,QAAQ,KAAK,eAAe,KAAK,IAAI,gBAAgB,SACvD,IAAI,gBAAgB,OAAO,CAAC,QAAuB,CAAC,CAAC,GAAG,IACxD,KAAK,yBACH,CAAC,IAAI,sBAAsB,IAC3B,CAAC;AACT,MAAI,OAAO,OAAQ,OAAM,iBAAiB,EAAE,KAAK,OAAO;AACxD,QAAM,cAAc,MAAM,GAAG;AAAA,IAC3B;AAAA,IACA;AAAA,IACA,EAAE,UAAU,CAAC,KAAK,EAAE;AAAA,EACtB;AACA,QAAM,UAAU,oBAAI,IAAwE;AAC5F,cAAY,QAAQ,CAAC,eAAoB;AACvC,UAAM,MAAM,YAAY;AACxB,UAAM,aAAa,YAAY;AAC/B,QAAI,CAAC,OAAO,OAAO,IAAI,OAAO,YAAY,OAAO,eAAe,SAAU;AAC1E,UAAM,QAAQ;AAAA,MACZ,IAAI,IAAI;AAAA,MACR,OAAO,OAAO,IAAI,UAAU,YAAY,IAAI,MAAM,KAAK,EAAE,SAAS,IAAI,QAAQ,IAAI,QAAQ,IAAI;AAAA,MAC9F,OAAO,OAAO,IAAI,UAAU,YAAY,IAAI,MAAM,KAAK,EAAE,SAAS,IAAI,QAAQ;AAAA,IAChF;AACA,UAAM,OAAO,QAAQ,IAAI,UAAU,KAAK,CAAC;AACzC,SAAK,KAAK,KAAK;AACf,YAAQ,IAAI,YAAY,IAAI;AAAA,EAC9B,CAAC;AACD,QAAM,QAAQ,CAAC,SAA8B;AAC3C,UAAM,KAAK,QAAQ,OAAO,KAAK,OAAO,WAAW,KAAK,KAAK;AAC3D,QAAI,CAAC,GAAI;AACT,UAAM,OAAO,QAAQ,IAAI,EAAE;AAC3B,QAAI,KAAM,MAAK,OAAO;AAAA,EACxB,CAAC;AACH;AAEA,eAAe,2BACb,KACA,WACA;AACA,QAAM,OAAO,IAAI,WAAW,UAAU,aAAa;AACnD,QAAM,OAAO,IAAI;AACjB,MAAI,CAAC,QAAQ,CAAC,MAAM,IAAK;AACzB,QAAM,KAAK,MAAM,KAAK,mBAAmB,KAAK,KAAK,CAAC,6BAA6B,GAAG;AAAA,IAClF,UAAU,KAAK,YAAY;AAAA,IAC3B,gBAAgB,IAAI,0BAA0B,KAAK,SAAS;AAAA,EAC9D,CAAC;AACD,MAAI,CAAC,IAAI;AACP,UAAM,IAAI,cAAc,KAAK;AAAA,MAC3B,OAAO,UAAU,gDAAgD,mCAAmC;AAAA,IACtG,CAAC;AAAA,EACH;AACF;AAEO,SAAS,yBAAyB,SAA0B;AACjE,QAAM,eAAe,QAAQ,gBAAgB,gBAAgB,iBAAiB;AAC9E,QAAM,eAAe,QAAQ,SAAS,UAAU,oBAAoB;AAEpE,QAAM,gBAAgB;AAAA,IACpB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,QAAQ,WAAW,EAAE;AAAA,IACjE,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,QAAQ,aAAa,EAAE;AAAA,IACpE,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,QAAQ,aAAa,EAAE;AAAA,IACnE,QAAQ,EAAE,aAAa,MAAM,iBAAiB,CAAC,QAAQ,aAAa,EAAE;AAAA,EACxE;AAEA,QAAM,eAAe;AAAA,IACnB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAEA,QAAM,kBAAkB;AAAA,IACtB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAEA,QAAM,kBAAkB,CAAC,cAAc,aAAa;AAEpD,QAAM,aAAa;AAAA,IACjB,GAAG;AAAA,IACH,GAAI,QAAQ,SAAS,UAAU,kBAAkB;AAAA,EACnD;AAMA,QAAM,6BAA6B,oBAAI,IAAI;AAAA,IACzC;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,CAAC;AAED,QAAM,aAAa,WAAW,OAAO,CAAC,UAAU,CAAC,2BAA2B,IAAI,KAAK,CAAC;AAKtF,QAAM,oBAAoB,CAAC,UACzB,SAAS,OAAO,MAAM,OAAO,YAAY,MAAM,GAAG,SAAS,aAAa;AAE1E,SAAO;AAAA,IACL,UAAU;AAAA,IACV,KAAK;AAAA,MACH,QAAQ,QAAQ;AAAA,MAChB,SAAS;AAAA,MACT,UAAU;AAAA,MACV,aAAa;AAAA,MACb,iBAAiB;AAAA,IACnB;AAAA,IACA,SAAS;AAAA,MACP,YAAY,QAAQ;AAAA,IACtB;AAAA,IACA,WAAW,QAAQ,SAAS,UAAU,EAAE,UAAU,QAAQ,SAAS,IAAI;AAAA,IACvE,MAAM;AAAA,MACJ,QAAQ;AAAA,MACR,UAAU,QAAQ;AAAA,MAClB,QAAQ,CAAC,UAAqB,kBAAkB,KAAK;AAAA,MACrD,cAAc,aAAa,YAAY;AAAA,MACvC,cAAc,OAAO,UAAe,aAAa,OAAO,cAAc,QAAQ,IAAI;AAAA,MAClF,sBAAsB,EAAE,WAAW,CAAC,QAAQ,QAAQ,EAAE;AAAA,MACtD,OAAO;AAAA,QACL;AAAA,UACE,OAAO;AAAA,UACP,OAAO;AAAA,UACP,MAAM,EAAE,OAAO,KAAK;AAAA,UACpB,IAAI,EAAE,OAAO,cAAc;AAAA,UAC3B,MAAM;AAAA,QACR;AAAA,MACF;AAAA,MACA,eAAe,CAAC,SAAc;AAC5B,cAAM,WAAW,CAAC,UAAkC;AAClD,cAAI,OAAO,UAAU,SAAU,QAAO,OAAO,MAAM,KAAK,IAAI,OAAO;AACnE,cAAI,OAAO,UAAU,YAAY,MAAM,KAAK,EAAE,QAAQ;AACpD,kBAAM,SAAS,OAAO,KAAK;AAC3B,mBAAO,OAAO,MAAM,MAAM,IAAI,OAAO;AAAA,UACvC;AACA,iBAAO;AAAA,QACT;AACA,cAAM,OAAO;AAAA,UACX,IAAI,KAAK;AAAA,UACT,CAAC,QAAQ,WAAW,GAAG,KAAK,YAAY,KAAK;AAAA,UAC7C,QAAQ,KAAK,UAAU;AAAA,UACvB,eAAe,KAAK,mBAAmB;AAAA,UACvC,kBAAkB,KAAK,sBAAsB;AAAA,UAC7C,mBAAmB,KAAK,uBAAuB;AAAA,UAC/C,kBAAkB,KAAK,sBAAsB;AAAA,UAC7C,mBAAmB,KAAK,uBAAuB;AAAA,UAC/C,kBAAkB,KAAK,sBAAsB;AAAA,UAC7C,oBAAoB,KAAK,wBAAwB;AAAA,UACjD,wBAAwB,oBAAoB,KAAK,wBAAwB;AAAA,UACzE,iBAAiB,KAAK,qBAAqB;AAAA,UAC3C,mBAAmB,KAAK,uBAAuB;AAAA,UAC/C,uBAAuB,oBAAoB,KAAK,uBAAuB;AAAA,UACvE,cAAc,KAAK,iBAAiB;AAAA,UACpC,WAAW,KAAK,cAAc;AAAA,UAC9B,mBAAmB,KAAK,sBAAsB;AAAA,UAC9C,mBAAmB,KAAK,sBAAsB;AAAA,UAC9C,UAAU,KAAK,aAAa;AAAA,UAC5B,oBAAoB,KAAK,wBAAwB;AAAA,UACjD,SAAS,KAAK,YAAY;AAAA,UAC1B,WAAW,KAAK,cAAc;AAAA,UAC9B,YAAY,KAAK,eAAe;AAAA,UAChC,eAAe,SAAS,KAAK,eAAe;AAAA,UAC5C,mBAAmB,SAAS,KAAK,mBAAmB;AAAA,UACpD,qBAAqB,SAAS,KAAK,qBAAqB;AAAA,UACxD,qBAAqB,SAAS,KAAK,qBAAqB;AAAA,UACxD,gBAAgB,SAAS,KAAK,gBAAgB;AAAA,UAC9C,mBAAmB,SAAS,KAAK,mBAAmB;AAAA,UACpD,qBAAqB,SAAS,KAAK,qBAAqB;AAAA,UACxD,sBAAsB,SAAS,KAAK,sBAAsB;AAAA,UAC1D,qBAAqB,SAAS,KAAK,sBAAsB;AAAA,UACzD,uBAAuB,SAAS,KAAK,wBAAwB;AAAA,UAC7D,iBAAiB,SAAS,KAAK,iBAAiB;AAAA,UAChD,qBAAqB,SAAS,KAAK,qBAAqB;AAAA,UACxD,mBAAmB,SAAS,KAAK,kBAAkB;AAAA,UACnD,kBAAkB,oBAAoB,KAAK,iBAAiB;AAAA,UAC5D,wBAAwB,oBAAoB,KAAK,wBAAwB;AAAA,UACzE,yBAAyB,oBAAoB,KAAK,yBAAyB;AAAA,UAC3E,UAAU,oBAAoB,KAAK,QAAQ;AAAA,UAC3C,gBAAgB,KAAK,mBAAmB;AAAA,UACxC,UAAU,KAAK,aAAa;AAAA,UAC5B,WAAW,KAAK;AAAA,UAChB,WAAW,KAAK;AAAA,QAClB;AACA,cAAM,YAAY,6BAA6B,IAA+B;AAC9E,cAAM,aAAa,EAAE,GAAG,KAAK;AAC7B,eAAO,KAAK,UAAU,EAAE,QAAQ,CAAC,QAAQ;AACvC,cAAI,IAAI,WAAW,KAAK,EAAG,QAAQ,WAAmB,GAAG;AAAA,QAC3D,CAAC;AACD,eAAO,OAAO,KAAK,SAAS,EAAE,SAAS,EAAE,GAAG,YAAY,GAAG,UAAU,IAAI;AAAA,MAC3E;AAAA,IACF;AAAA,IACA,SAAS;AAAA,MACP,QAAQ;AAAA,QACN,WAAW,QAAQ;AAAA,QACnB,QAAQ;AAAA,QACR,UAAU,OAAO,EAAE,KAAK,IAAI,MAAsC;AAChE,gBAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,gBAAM,EAAE,MAAM,OAAO,IAAI,wBAAwB,OAAO,CAAC,CAAC;AAC1D,gBAAM,SAAS;AAAA,YACb;AAAA,YACA,OAAO,KAAK,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,cAAc,OAAO,IAAI;AAAA,YACjE;AAAA,YACA;AAAA,UACF;AACA,iBAAO;AAAA,QACT;AAAA,QACA,UAAU,CAAC,EAAE,OAAO,OAAwB,EAAE,IAAI,QAAQ,WAAW,QAAQ,WAAW,QAAQ,MAAM,KAAK;AAAA,QAC3G,QAAQ;AAAA,MACV;AAAA,MACA,QAAQ;AAAA,QACN,WAAW,QAAQ;AAAA,QACnB,QAAQ;AAAA,QACR,UAAU,OAAO,EAAE,KAAK,IAAI,MAAsC;AAChE,gBAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,gBAAM,EAAE,MAAM,OAAO,IAAI,wBAAwB,OAAO,CAAC,CAAC;AAC1D,gBAAM,cACJ,QAAQ,SAAS,UACZ,KAAiC,cACjC,KAAiC;AACxC,cAAI,OAAO,gBAAgB,UAAU;AACnC,kBAAM,2BAA2B,KAAK,SAAS;AAAA,UACjD;AACA,gBAAM,SAAS;AAAA,YACb;AAAA,YACA,OAAO,KAAK,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,cAAc,OAAO,IAAI;AAAA,YACjE;AAAA,YACA;AAAA,UACF;AACA,iBAAO;AAAA,QACT;AAAA,QACA,UAAU,CAAC,EAAE,OAAO,MAClB,kBAAmB,QAAgB,SAAU,QAAgB,SAAS,MAAM;AAAA,MAChF;AAAA,MACA,QAAQ;AAAA,QACN,WAAW,QAAQ;AAAA,QACnB,QAAQ;AAAA,QACR,UAAU,OAAO,EAAE,QAAQ,IAAI,MAAqC;AAClE,gBAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,gBAAM,KAAK,oBAAoB,QAAQ,KAAK,SAAS;AACrD,iBAAO,EAAE,GAAG;AAAA,QACd;AAAA,QACA,UAAU,OAAO,EAAE,IAAI,KAAK;AAAA,MAC9B;AAAA,IACF;AAAA,IACA,OAAO;AAAA,MACL,WAAW,OAAO,SAAc,QAAiB;AAC/C,cAAM,WAAW,SAAS,EAAE,GAAG,KAAK,aAAa,QAAQ,KAAK,CAAC;AAC/D,YAAI,QAAQ,SAAS,WAAW,MAAM,QAAQ,SAAS,KAAK,KAAK,QAAQ,MAAM,WAAW,GAAG;AAC3F,gBAAM,OAAO,QAAQ,MAAM,CAAC;AAC5B,gBAAM,UAAU,OAAO,MAAM,OAAO,WAAW,KAAK,KAAK;AACzD,gBAAM,WAAW,OAAO,MAAM,aAAa,WAAW,KAAK,WAAW,KAAK,MAAM,YAAY;AAC7F,gBAAM,iBACJ,OAAO,MAAM,mBAAmB,WAAW,KAAK,iBAAiB,KAAK,0BAA0B,KAAK,MAAM,SAAS;AACtH,cAAI,WAAW,YAAY,gBAAgB;AACzC,kBAAM,YAAY,KAAK,WAAW,UAAU,IAAI;AAMhD,kBAAM,KAAK,WAAW,KAAK;AAC3B,gBAAI,IAAI;AACN,oBAAM,SAAS,MAAM;AAAA,gBACnB;AAAA,gBACA,IAAI;AAAA,gBACJ;AAAA,gBACA,EAAE,UAAU,eAAe;AAAA,cAC7B;AACA,kBAAI,QAAQ;AACV,uBAAO,OAAO,MAAM;AAAA,kBAClB,mBAAmB,OAAO;AAAA,kBAC1B,qBAAqB,OAAO;AAAA,kBAC5B,qBAAqB,OAAO;AAAA,kBAC5B,gBAAgB,OAAO;AAAA,kBACvB,mBAAmB,OAAO;AAAA,kBAC1B,qBAAqB,OAAO;AAAA,kBAC5B,sBAAsB,OAAO;AAAA,kBAC7B,qBAAqB,OAAO;AAAA,kBAC5B,uBAAuB,OAAO;AAAA,kBAC9B,iBAAiB,OAAO;AAAA,kBACxB,qBAAqB,OAAO;AAAA,kBAC5B,mBAAmB,OAAO;AAAA,gBAC5B,CAAC;AAAA,cACH;AAAA,YACF;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;AAEO,SAAS,qBAAqB,SAA0B;AAC7D,QAAM,eAAe,QAAQ,SAAS,UAAU,oBAAoB;AACpE,QAAM,aAAa,EAAE,OAAO;AAAA,IAC1B,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,IACpB,CAAC,QAAQ,WAAW,GAAG,EAAE,OAAO,EAAE,SAAS;AAAA,IAC3C,QAAQ,EAAE,OAAO,EAAE,SAAS;AAAA,IAC5B,eAAe,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS;AAAA,IACrD,kBAAkB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,IAC7C,mBAAmB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,IAC9C,kBAAkB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,IAC7C,mBAAmB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,IAC9C,mBAAmB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,IAClD,mBAAmB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,IAClD,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,IACxC,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,IACzC,oBAAoB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,IACnD,kBAAkB,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS,EAAE,SAAS;AAAA,IACxE,wBAAwB,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS,EAAE,SAAS;AAAA,IAC9E,yBAAyB,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS,EAAE,SAAS;AAAA,IAC/E,kBAAkB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS;AAAA,IACxD,oBAAoB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,IACnD,wBAAwB,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS,EAAE,SAAS;AAAA,IAC9E,iBAAiB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS;AAAA,IACvD,mBAAmB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,IAClD,uBAAuB,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS,EAAE,SAAS;AAAA,IAC7E,cAAc,EAAE,OAAO,EAAE,SAAS;AAAA,IAClC,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,IACtC,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,IAC3C,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,IACrC,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,IAC1C,YAAY,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,IAC3C,eAAe,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,IAC9C,mBAAmB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,IAClD,qBAAqB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,IACpD,qBAAqB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,IACpD,gBAAgB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,IAC/C,mBAAmB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,IAClD,qBAAqB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,IACpD,sBAAsB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,IACrD,qBAAqB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,IACpD,uBAAuB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,IACtD,iBAAiB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,IAChD,qBAAqB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,IACpD,mBAAmB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,IAClD,WAAW,EAAE,OAAO;AAAA,IACpB,WAAW,EAAE,OAAO;AAAA,IACpB,cAAc,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS;AAAA,IACzD,cAAc,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS;AAAA,EAC3D,CAAC;AAED,QAAM,qBAAqB,8BAA8B,UAAU;AAEnE,SAAO,uBAAuB;AAAA,IAC5B,cAAc,QAAQ,SAAS,UAAU,UAAU;AAAA,IACnD,aAAa;AAAA,IACb;AAAA,IACA,QAAQ;AAAA,MACN,QAAQ;AAAA,MACR,gBAAgB,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;AAAA,MAC7D,aAAa,uBAAuB,QAAQ,IAAI;AAAA,IAClD;AAAA,IACA,KAAK;AAAA,MACH,QAAQ;AAAA,MACR,gBAAgB,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;AAAA,MAC5C,aAAa,mBAAmB,QAAQ,IAAI;AAAA,IAC9C;AAAA,EACF,CAAC;AACH;AAGO,SAAS,wBAAwB,SAA0B;AAChE,QAAM,OAAO,cAAc,yBAAyB,OAAO,CAAC;AAC5D,QAAM,EAAE,KAAK,MAAM,KAAK,OAAO,IAAI;AACnC,SAAO,EAAE,KAAK,MAAM,KAAK,QAAQ,SAAS,qBAAqB,OAAO,GAAG,UAAU,KAAK,SAAS;AACnG;",
   "names": []
 }

package/dist/modules/sales/api/quotes/accept/route.js CHANGED Viewed

@@ -15,6 +15,7 @@ import { SalesOrder, SalesQuote } from "../../../data/entities.js";
 import { quoteAcceptSchema } from "../../../data/validators.js";
 import { sendEmail } from "@open-mercato/shared/lib/email/send";
 import { resolveStatusEntryIdByValue } from "../../../lib/statusHelpers.js";
+import { resolveEffectiveTenantId } from "../../../lib/publicQuoteTenantScope.js";
 import { QuoteAcceptedAdminEmail } from "../../../emails/QuoteAcceptedAdminEmail.js";
 import { createLogger } from "@open-mercato/shared/lib/logger";
 const logger = createLogger("sales");
@@ -53,7 +54,11 @@ async function POST(req) {
     const container = await createRequestContainer();
     const em = container.resolve("em").fork();
     const hashedToken = hashAuthToken(token);
-    const tenantScope = auth?.tenantId ? { tenantId: auth.tenantId } : void 0;
+    const effectiveTenantId = resolveEffectiveTenantId(auth);
+    if (auth && effectiveTenantId === null && auth.isApiKey !== true) {
+      throw new CrudHttpError(404, { error: translate("sales.quotes.accept.notFound", "Quote not found.") });
+    }
+    const tenantScope = effectiveTenantId ? { tenantId: effectiveTenantId } : void 0;
     const commandBus = container.resolve("commandBus");
     const { quote, orderId } = await em.transactional(async (trx) => {
       const findQuoteByToken = (acceptanceToken) => findOneWithDecryption(
@@ -61,7 +66,7 @@ async function POST(req) {
         SalesQuote,
         {
           acceptanceToken,
-          ...auth?.tenantId ? { tenantId: auth.tenantId } : {},
+          ...effectiveTenantId ? { tenantId: effectiveTenantId } : {},
           deletedAt: null
         },
         { lockMode: LockMode.PESSIMISTIC_WRITE },

package/dist/modules/sales/api/quotes/accept/route.js.map CHANGED Viewed

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../src/modules/sales/api/quotes/accept/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport type { CommandBus, CommandRuntimeContext } from '@open-mercato/shared/lib/commands'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { CrudHttpError, isCrudHttpError, notFound } from '@open-mercato/shared/lib/crud/errors'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { LockMode } from '@mikro-orm/core'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { getCachedRateLimiterService } from '@open-mercato/core/bootstrap'\nimport { readEndpointRateLimitConfig } from '@open-mercato/shared/lib/ratelimit/config'\nimport { checkRateLimit, getClientIp, RATE_LIMIT_FALLBACK_KEY, rateLimitErrorSchema } from '@open-mercato/shared/lib/ratelimit/helpers'\nimport { validateSameOriginMutationRequest } from './originGuard'\nimport { hashAuthToken } from '../../../../auth/lib/tokenHash'\nimport { SalesOrder, SalesQuote } from '../../../data/entities'\nimport { quoteAcceptSchema } from '../../../data/validators'\nimport { sendEmail } from '@open-mercato/shared/lib/email/send'\nimport { resolveStatusEntryIdByValue } from '../../../lib/statusHelpers'\nimport { QuoteAcceptedAdminEmail } from '../../../emails/QuoteAcceptedAdminEmail'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('sales')\n\ntype ConvertToOrderResult = {\n  result?: { orderId?: string } | null\n  orderId?: string\n}\n\nexport const metadata = {\n  POST: { requireAuth: false },\n}\n\nconst quoteAcceptRateLimitConfig = readEndpointRateLimitConfig('SALES_QUOTES_ACCEPT', {\n  points: 10,\n  duration: 60,\n  blockDuration: 300,\n  keyPrefix: 'sales_quote_accept',\n})\n\nexport async function POST(req: Request) {\n  try {\n    const { translate } = await resolveTranslations()\n    const sameOriginViolation = validateSameOriginMutationRequest(req)\n    if (sameOriginViolation) {\n      return NextResponse.json(\n        { error: translate('sales.quotes.accept.forbidden', 'Cross-site quote acceptance is not allowed.') },\n        { status: 403 },\n      )\n    }\n\n    const rateLimiterService = getCachedRateLimiterService()\n    const clientIp = rateLimiterService ? getClientIp(req, rateLimiterService.trustProxyDepth) : null\n    if (rateLimiterService) {\n      const rateLimitResponse = await checkRateLimit(\n        rateLimiterService,\n        quoteAcceptRateLimitConfig,\n        clientIp ?? RATE_LIMIT_FALLBACK_KEY,\n        translate('api.errors.rateLimit', 'Too many requests. Please try again later.'),\n      )\n      if (rateLimitResponse) return rateLimitResponse\n    }\n\n    const { token } = quoteAcceptSchema.parse(await req.json().catch(() => ({})))\n    const auth = await getAuthFromRequest(req)\n    const container = await createRequestContainer()\n    const em = (container.resolve('em') as EntityManager).fork()\n\n    const hashedToken = hashAuthToken(token)\n    const tenantScope = auth?.tenantId ? { tenantId: auth.tenantId } : undefined\n\n    const commandBus = container.resolve('commandBus') as CommandBus\n\n    // Lock the quote, flip it to confirmed, and convert it to an order inside a\n    // single transaction. The conversion command reuses this transaction (and its\n    // PESSIMISTIC_WRITE lock) via ctx.transactionalEm, so the status flip and the\n    // order creation are atomic: if conversion fails the whole transaction rolls\n    // back, leaving the quote in its prior 'sent' state with no partial order and\n    // no need for an out-of-band compensating write.\n    const { quote, orderId } = await em.transactional(async (trx) => {\n      const findQuoteByToken = (acceptanceToken: string) =>\n        findOneWithDecryption(\n          trx,\n          SalesQuote,\n          {\n            acceptanceToken,\n            ...(auth?.tenantId ? { tenantId: auth.tenantId } : {}),\n            deletedAt: null,\n          },\n          { lockMode: LockMode.PESSIMISTIC_WRITE },\n          tenantScope,\n        )\n      const quote = await findQuoteByToken(hashedToken)\n      if (!quote) {\n        throw notFound(translate('sales.quotes.accept.notFound', 'Quote not found.'))\n      }\n\n      const now = new Date()\n      if (quote.validUntil && quote.validUntil.getTime() < now.getTime()) {\n        throw new CrudHttpError(400, { error: translate('sales.quotes.accept.expired', 'This quote has expired.') })\n      }\n\n      if ((quote.status ?? null) !== 'sent') {\n        throw new CrudHttpError(400, {\n          error: translate('sales.quotes.accept.invalidStatus', 'This quote cannot be accepted in its current status.'),\n        })\n      }\n\n      quote.status = 'confirmed'\n      quote.statusEntryId = await resolveStatusEntryIdByValue(trx, {\n        tenantId: quote.tenantId,\n        organizationId: quote.organizationId,\n        value: 'confirmed',\n      })\n      quote.updatedAt = now\n      trx.persist(quote)\n      await trx.flush()\n\n      const ctx: CommandRuntimeContext = {\n        container,\n        auth: null,\n        organizationScope: null,\n        selectedOrganizationId: quote.organizationId,\n        organizationIds: [quote.organizationId],\n        request: req,\n        transactionalEm: trx,\n      }\n\n      const result = (await commandBus.execute('sales.quotes.convert_to_order', { input: { quoteId: quote.id }, ctx })) as ConvertToOrderResult | null\n      const orderId = result?.result?.orderId ?? result?.orderId ?? quote.id\n\n      return { quote, orderId }\n    })\n\n    const order = await findOneWithDecryption(em, SalesOrder, { id: orderId, deletedAt: null }, {}, tenantScope)\n    const orderNumber = order?.orderNumber ?? orderId\n\n    // Admin notification should not block acceptance.\n    const adminEmail = process.env.ADMIN_EMAIL || ''\n    if (adminEmail) {\n      try {\n        const appUrl = process.env.APP_URL || ''\n        const orderUrl = appUrl ? `${appUrl.replace(/\\/$/, '')}/backend/sales/orders/${orderId}` : `/backend/sales/orders/${orderId}`\n\n        const copy = {\n          preview: translate('sales.quotes.accept.adminEmail.preview', 'Quote {quoteNumber} accepted', { quoteNumber: quote.quoteNumber }),\n          heading: translate('sales.quotes.accept.adminEmail.heading', 'Quote {quoteNumber} accepted', { quoteNumber: quote.quoteNumber }),\n          body: translate('sales.quotes.accept.adminEmail.body', 'The customer accepted quote {quoteNumber}. An order has been created: {orderNumber}.', {\n            quoteNumber: quote.quoteNumber,\n            orderNumber,\n          }),\n          cta: translate('sales.quotes.accept.adminEmail.cta', 'View order'),\n          footer: translate('sales.quotes.accept.adminEmail.footer', 'Open Mercato'),\n        }\n\n        await sendEmail({\n          to: adminEmail,\n          subject: translate('sales.quotes.accept.adminSubject', 'Quote {quoteNumber} accepted \u2192 Order {orderNumber}', {\n            quoteNumber: quote.quoteNumber,\n            orderNumber,\n          }),\n          react: QuoteAcceptedAdminEmail({ orderUrl, copy }),\n        })\n      } catch (err) {\n        logger.error('sales.quotes.accept.adminEmail failed', { err })\n      }\n    }\n\n    return NextResponse.json({ orderId, orderNumber })\n  } catch (err) {\n    if (isCrudHttpError(err)) {\n      return NextResponse.json(err.body, { status: err.status })\n    }\n    const { translate } = await resolveTranslations()\n    logger.error('sales.quotes.accept failed', { err })\n    return NextResponse.json({ error: translate('sales.quotes.accept.failed', 'Failed to accept quote.') }, { status: 400 })\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Sales',\n  summary: 'Accept a quote (public)',\n  methods: {\n    POST: {\n      summary: 'Accept quote and convert to order',\n      requestBody: {\n        contentType: 'application/json',\n        schema: quoteAcceptSchema,\n      },\n      responses: [\n        {\n          status: 200,\n          description: 'Quote accepted and order created',\n          schema: z.object({ orderId: z.string().uuid(), orderNumber: z.string() }),\n        },\n        { status: 400, description: 'Invalid or expired quote', schema: z.object({ error: z.string() }) },\n        { status: 403, description: 'Cross-site request rejected', schema: z.object({ error: z.string() }) },\n        { status: 404, description: 'Quote not found', schema: z.object({ error: z.string() }) },\n        { status: 429, description: 'Too many requests', schema: rateLimitErrorSchema },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,8BAA8B;AAEvC,SAAS,2BAA2B;AACpC,SAAS,eAAe,iBAAiB,gBAAgB;AAGzD,SAAS,gBAAgB;AACzB,SAAS,0BAA0B;AACnC,SAAS,6BAA6B;AACtC,SAAS,mCAAmC;AAC5C,SAAS,mCAAmC;AAC5C,SAAS,gBAAgB,aAAa,yBAAyB,4BAA4B;AAC3F,SAAS,yCAAyC;AAClD,SAAS,qBAAqB;AAC9B,SAAS,YAAY,kBAAkB;AACvC,SAAS,yBAAyB;AAClC,SAAS,iBAAiB;AAC1B,SAAS,mCAAmC;AAC5C,SAAS,+BAA+B;AACxC,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,OAAO;AAO5B,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM;AAC7B;AAEA,MAAM,6BAA6B,4BAA4B,uBAAuB;AAAA,EACpF,QAAQ;AAAA,EACR,UAAU;AAAA,EACV,eAAe;AAAA,EACf,WAAW;AACb,CAAC;AAED,eAAsB,KAAK,KAAc;AACvC,MAAI;AACF,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,UAAM,sBAAsB,kCAAkC,GAAG;AACjE,QAAI,qBAAqB;AACvB,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,UAAU,iCAAiC,6CAA6C,EAAE;AAAA,QACnG,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,UAAM,qBAAqB,4BAA4B;AACvD,UAAM,WAAW,qBAAqB,YAAY,KAAK,mBAAmB,eAAe,IAAI;AAC7F,QAAI,oBAAoB;AACtB,YAAM,oBAAoB,MAAM;AAAA,QAC9B;AAAA,QACA;AAAA,QACA,YAAY;AAAA,QACZ,UAAU,wBAAwB,4CAA4C;AAAA,MAChF;AACA,UAAI,kBAAmB,QAAO;AAAA,IAChC;AAEA,UAAM,EAAE,MAAM,IAAI,kBAAkB,MAAM,MAAM,IAAI,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE,CAAC;AAC5E,UAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAE3D,UAAM,cAAc,cAAc,KAAK;AACvC,UAAM,cAAc,MAAM,WAAW,EAAE,UAAU,KAAK,SAAS,IAAI;AAEnE,UAAM,aAAa,UAAU,QAAQ,YAAY;AAQjD,UAAM,EAAE,OAAO,QAAQ,IAAI,MAAM,GAAG,cAAc,OAAO,QAAQ;AAC/D,YAAM,mBAAmB,CAAC,oBACxB;AAAA,QACE;AAAA,QACA;AAAA,QACA;AAAA,UACE;AAAA,UACA,GAAI,MAAM,WAAW,EAAE,UAAU,KAAK,SAAS,IAAI,CAAC;AAAA,UACpD,WAAW;AAAA,QACb;AAAA,QACA,EAAE,UAAU,SAAS,kBAAkB;AAAA,QACvC;AAAA,MACF;AACF,YAAMA,SAAQ,MAAM,iBAAiB,WAAW;AAChD,UAAI,CAACA,QAAO;AACV,cAAM,SAAS,UAAU,gCAAgC,kBAAkB,CAAC;AAAA,MAC9E;AAEA,YAAM,MAAM,oBAAI,KAAK;AACrB,UAAIA,OAAM,cAAcA,OAAM,WAAW,QAAQ,IAAI,IAAI,QAAQ,GAAG;AAClE,cAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,+BAA+B,yBAAyB,EAAE,CAAC;AAAA,MAC7G;AAEA,WAAKA,OAAM,UAAU,UAAU,QAAQ;AACrC,cAAM,IAAI,cAAc,KAAK;AAAA,UAC3B,OAAO,UAAU,qCAAqC,sDAAsD;AAAA,QAC9G,CAAC;AAAA,MACH;AAEA,MAAAA,OAAM,SAAS;AACf,MAAAA,OAAM,gBAAgB,MAAM,4BAA4B,KAAK;AAAA,QAC3D,UAAUA,OAAM;AAAA,QAChB,gBAAgBA,OAAM;AAAA,QACtB,OAAO;AAAA,MACT,CAAC;AACD,MAAAA,OAAM,YAAY;AAClB,UAAI,QAAQA,MAAK;AACjB,YAAM,IAAI,MAAM;AAEhB,YAAM,MAA6B;AAAA,QACjC;AAAA,QACA,MAAM;AAAA,QACN,mBAAmB;AAAA,QACnB,wBAAwBA,OAAM;AAAA,QAC9B,iBAAiB,CAACA,OAAM,cAAc;AAAA,QACtC,SAAS;AAAA,QACT,iBAAiB;AAAA,MACnB;AAEA,YAAM,SAAU,MAAM,WAAW,QAAQ,iCAAiC,EAAE,OAAO,EAAE,SAASA,OAAM,GAAG,GAAG,IAAI,CAAC;AAC/G,YAAMC,WAAU,QAAQ,QAAQ,WAAW,QAAQ,WAAWD,OAAM;AAEpE,aAAO,EAAE,OAAAA,QAAO,SAAAC,SAAQ;AAAA,IAC1B,CAAC;AAED,UAAM,QAAQ,MAAM,sBAAsB,IAAI,YAAY,EAAE,IAAI,SAAS,WAAW,KAAK,GAAG,CAAC,GAAG,WAAW;AAC3G,UAAM,cAAc,OAAO,eAAe;AAG1C,UAAM,aAAa,QAAQ,IAAI,eAAe;AAC9C,QAAI,YAAY;AACd,UAAI;AACF,cAAM,SAAS,QAAQ,IAAI,WAAW;AACtC,cAAM,WAAW,SAAS,GAAG,OAAO,QAAQ,OAAO,EAAE,CAAC,yBAAyB,OAAO,KAAK,yBAAyB,OAAO;AAE3H,cAAM,OAAO;AAAA,UACX,SAAS,UAAU,0CAA0C,gCAAgC,EAAE,aAAa,MAAM,YAAY,CAAC;AAAA,UAC/H,SAAS,UAAU,0CAA0C,gCAAgC,EAAE,aAAa,MAAM,YAAY,CAAC;AAAA,UAC/H,MAAM,UAAU,uCAAuC,wFAAwF;AAAA,YAC7I,aAAa,MAAM;AAAA,YACnB;AAAA,UACF,CAAC;AAAA,UACD,KAAK,UAAU,sCAAsC,YAAY;AAAA,UACjE,QAAQ,UAAU,yCAAyC,cAAc;AAAA,QAC3E;AAEA,cAAM,UAAU;AAAA,UACd,IAAI;AAAA,UACJ,SAAS,UAAU,oCAAoC,2DAAsD;AAAA,YAC3G,aAAa,MAAM;AAAA,YACnB;AAAA,UACF,CAAC;AAAA,UACD,OAAO,wBAAwB,EAAE,UAAU,KAAK,CAAC;AAAA,QACnD,CAAC;AAAA,MACH,SAAS,KAAK;AACZ,eAAO,MAAM,yCAAyC,EAAE,IAAI,CAAC;AAAA,MAC/D;AAAA,IACF;AAEA,WAAO,aAAa,KAAK,EAAE,SAAS,YAAY,CAAC;AAAA,EACnD,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,GAAG;AACxB,aAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,IAC3D;AACA,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,WAAO,MAAM,8BAA8B,EAAE,IAAI,CAAC;AAClD,WAAO,aAAa,KAAK,EAAE,OAAO,UAAU,8BAA8B,yBAAyB,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACzH;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa;AAAA,QACX,aAAa;AAAA,QACb,QAAQ;AAAA,MACV;AAAA,MACA,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,GAAG,aAAa,EAAE,OAAO,EAAE,CAAC;AAAA,QAC1E;AAAA,QACA,EAAE,QAAQ,KAAK,aAAa,4BAA4B,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,QAChG,EAAE,QAAQ,KAAK,aAAa,+BAA+B,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,QACnG,EAAE,QAAQ,KAAK,aAAa,mBAAmB,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,QACvF,EAAE,QAAQ,KAAK,aAAa,qBAAqB,QAAQ,qBAAqB;AAAA,MAChF;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport type { CommandBus, CommandRuntimeContext } from '@open-mercato/shared/lib/commands'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { CrudHttpError, isCrudHttpError, notFound } from '@open-mercato/shared/lib/crud/errors'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { LockMode } from '@mikro-orm/core'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { getCachedRateLimiterService } from '@open-mercato/core/bootstrap'\nimport { readEndpointRateLimitConfig } from '@open-mercato/shared/lib/ratelimit/config'\nimport { checkRateLimit, getClientIp, RATE_LIMIT_FALLBACK_KEY, rateLimitErrorSchema } from '@open-mercato/shared/lib/ratelimit/helpers'\nimport { validateSameOriginMutationRequest } from './originGuard'\nimport { hashAuthToken } from '../../../../auth/lib/tokenHash'\nimport { SalesOrder, SalesQuote } from '../../../data/entities'\nimport { quoteAcceptSchema } from '../../../data/validators'\nimport { sendEmail } from '@open-mercato/shared/lib/email/send'\nimport { resolveStatusEntryIdByValue } from '../../../lib/statusHelpers'\nimport { resolveEffectiveTenantId } from '../../../lib/publicQuoteTenantScope'\nimport { QuoteAcceptedAdminEmail } from '../../../emails/QuoteAcceptedAdminEmail'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('sales')\n\ntype ConvertToOrderResult = {\n  result?: { orderId?: string } | null\n  orderId?: string\n}\n\nexport const metadata = {\n  POST: { requireAuth: false },\n}\n\nconst quoteAcceptRateLimitConfig = readEndpointRateLimitConfig('SALES_QUOTES_ACCEPT', {\n  points: 10,\n  duration: 60,\n  blockDuration: 300,\n  keyPrefix: 'sales_quote_accept',\n})\n\nexport async function POST(req: Request) {\n  try {\n    const { translate } = await resolveTranslations()\n    const sameOriginViolation = validateSameOriginMutationRequest(req)\n    if (sameOriginViolation) {\n      return NextResponse.json(\n        { error: translate('sales.quotes.accept.forbidden', 'Cross-site quote acceptance is not allowed.') },\n        { status: 403 },\n      )\n    }\n\n    const rateLimiterService = getCachedRateLimiterService()\n    const clientIp = rateLimiterService ? getClientIp(req, rateLimiterService.trustProxyDepth) : null\n    if (rateLimiterService) {\n      const rateLimitResponse = await checkRateLimit(\n        rateLimiterService,\n        quoteAcceptRateLimitConfig,\n        clientIp ?? RATE_LIMIT_FALLBACK_KEY,\n        translate('api.errors.rateLimit', 'Too many requests. Please try again later.'),\n      )\n      if (rateLimitResponse) return rateLimitResponse\n    }\n\n    const { token } = quoteAcceptSchema.parse(await req.json().catch(() => ({})))\n    const auth = await getAuthFromRequest(req)\n    const container = await createRequestContainer()\n    const em = (container.resolve('em') as EntityManager).fork()\n\n    const hashedToken = hashAuthToken(token)\n    const effectiveTenantId = resolveEffectiveTenantId(auth)\n    // A session whose tenant cannot be resolved must not fall through to an unscoped lookup.\n    // Anonymous callers (no auth) and tenant-less API keys stay unscoped by design.\n    if (auth && effectiveTenantId === null && auth.isApiKey !== true) {\n      throw new CrudHttpError(404, { error: translate('sales.quotes.accept.notFound', 'Quote not found.') })\n    }\n    const tenantScope = effectiveTenantId ? { tenantId: effectiveTenantId } : undefined\n\n    const commandBus = container.resolve('commandBus') as CommandBus\n\n    // Lock the quote, flip it to confirmed, and convert it to an order inside a\n    // single transaction. The conversion command reuses this transaction (and its\n    // PESSIMISTIC_WRITE lock) via ctx.transactionalEm, so the status flip and the\n    // order creation are atomic: if conversion fails the whole transaction rolls\n    // back, leaving the quote in its prior 'sent' state with no partial order and\n    // no need for an out-of-band compensating write.\n    const { quote, orderId } = await em.transactional(async (trx) => {\n      const findQuoteByToken = (acceptanceToken: string) =>\n        findOneWithDecryption(\n          trx,\n          SalesQuote,\n          {\n            acceptanceToken,\n            ...(effectiveTenantId ? { tenantId: effectiveTenantId } : {}),\n            deletedAt: null,\n          },\n          { lockMode: LockMode.PESSIMISTIC_WRITE },\n          tenantScope,\n        )\n      const quote = await findQuoteByToken(hashedToken)\n      if (!quote) {\n        throw notFound(translate('sales.quotes.accept.notFound', 'Quote not found.'))\n      }\n\n      const now = new Date()\n      if (quote.validUntil && quote.validUntil.getTime() < now.getTime()) {\n        throw new CrudHttpError(400, { error: translate('sales.quotes.accept.expired', 'This quote has expired.') })\n      }\n\n      if ((quote.status ?? null) !== 'sent') {\n        throw new CrudHttpError(400, {\n          error: translate('sales.quotes.accept.invalidStatus', 'This quote cannot be accepted in its current status.'),\n        })\n      }\n\n      quote.status = 'confirmed'\n      quote.statusEntryId = await resolveStatusEntryIdByValue(trx, {\n        tenantId: quote.tenantId,\n        organizationId: quote.organizationId,\n        value: 'confirmed',\n      })\n      quote.updatedAt = now\n      trx.persist(quote)\n      await trx.flush()\n\n      const ctx: CommandRuntimeContext = {\n        container,\n        auth: null,\n        organizationScope: null,\n        selectedOrganizationId: quote.organizationId,\n        organizationIds: [quote.organizationId],\n        request: req,\n        transactionalEm: trx,\n      }\n\n      const result = (await commandBus.execute('sales.quotes.convert_to_order', { input: { quoteId: quote.id }, ctx })) as ConvertToOrderResult | null\n      const orderId = result?.result?.orderId ?? result?.orderId ?? quote.id\n\n      return { quote, orderId }\n    })\n\n    const order = await findOneWithDecryption(em, SalesOrder, { id: orderId, deletedAt: null }, {}, tenantScope)\n    const orderNumber = order?.orderNumber ?? orderId\n\n    // Admin notification should not block acceptance.\n    const adminEmail = process.env.ADMIN_EMAIL || ''\n    if (adminEmail) {\n      try {\n        const appUrl = process.env.APP_URL || ''\n        const orderUrl = appUrl ? `${appUrl.replace(/\\/$/, '')}/backend/sales/orders/${orderId}` : `/backend/sales/orders/${orderId}`\n\n        const copy = {\n          preview: translate('sales.quotes.accept.adminEmail.preview', 'Quote {quoteNumber} accepted', { quoteNumber: quote.quoteNumber }),\n          heading: translate('sales.quotes.accept.adminEmail.heading', 'Quote {quoteNumber} accepted', { quoteNumber: quote.quoteNumber }),\n          body: translate('sales.quotes.accept.adminEmail.body', 'The customer accepted quote {quoteNumber}. An order has been created: {orderNumber}.', {\n            quoteNumber: quote.quoteNumber,\n            orderNumber,\n          }),\n          cta: translate('sales.quotes.accept.adminEmail.cta', 'View order'),\n          footer: translate('sales.quotes.accept.adminEmail.footer', 'Open Mercato'),\n        }\n\n        await sendEmail({\n          to: adminEmail,\n          subject: translate('sales.quotes.accept.adminSubject', 'Quote {quoteNumber} accepted \u2192 Order {orderNumber}', {\n            quoteNumber: quote.quoteNumber,\n            orderNumber,\n          }),\n          react: QuoteAcceptedAdminEmail({ orderUrl, copy }),\n        })\n      } catch (err) {\n        logger.error('sales.quotes.accept.adminEmail failed', { err })\n      }\n    }\n\n    return NextResponse.json({ orderId, orderNumber })\n  } catch (err) {\n    if (isCrudHttpError(err)) {\n      return NextResponse.json(err.body, { status: err.status })\n    }\n    const { translate } = await resolveTranslations()\n    logger.error('sales.quotes.accept failed', { err })\n    return NextResponse.json({ error: translate('sales.quotes.accept.failed', 'Failed to accept quote.') }, { status: 400 })\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Sales',\n  summary: 'Accept a quote (public)',\n  methods: {\n    POST: {\n      summary: 'Accept quote and convert to order',\n      requestBody: {\n        contentType: 'application/json',\n        schema: quoteAcceptSchema,\n      },\n      responses: [\n        {\n          status: 200,\n          description: 'Quote accepted and order created',\n          schema: z.object({ orderId: z.string().uuid(), orderNumber: z.string() }),\n        },\n        { status: 400, description: 'Invalid or expired quote', schema: z.object({ error: z.string() }) },\n        { status: 403, description: 'Cross-site request rejected', schema: z.object({ error: z.string() }) },\n        { status: 404, description: 'Quote not found', schema: z.object({ error: z.string() }) },\n        { status: 429, description: 'Too many requests', schema: rateLimitErrorSchema },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,8BAA8B;AAEvC,SAAS,2BAA2B;AACpC,SAAS,eAAe,iBAAiB,gBAAgB;AAGzD,SAAS,gBAAgB;AACzB,SAAS,0BAA0B;AACnC,SAAS,6BAA6B;AACtC,SAAS,mCAAmC;AAC5C,SAAS,mCAAmC;AAC5C,SAAS,gBAAgB,aAAa,yBAAyB,4BAA4B;AAC3F,SAAS,yCAAyC;AAClD,SAAS,qBAAqB;AAC9B,SAAS,YAAY,kBAAkB;AACvC,SAAS,yBAAyB;AAClC,SAAS,iBAAiB;AAC1B,SAAS,mCAAmC;AAC5C,SAAS,gCAAgC;AACzC,SAAS,+BAA+B;AACxC,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,OAAO;AAO5B,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM;AAC7B;AAEA,MAAM,6BAA6B,4BAA4B,uBAAuB;AAAA,EACpF,QAAQ;AAAA,EACR,UAAU;AAAA,EACV,eAAe;AAAA,EACf,WAAW;AACb,CAAC;AAED,eAAsB,KAAK,KAAc;AACvC,MAAI;AACF,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,UAAM,sBAAsB,kCAAkC,GAAG;AACjE,QAAI,qBAAqB;AACvB,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,UAAU,iCAAiC,6CAA6C,EAAE;AAAA,QACnG,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,UAAM,qBAAqB,4BAA4B;AACvD,UAAM,WAAW,qBAAqB,YAAY,KAAK,mBAAmB,eAAe,IAAI;AAC7F,QAAI,oBAAoB;AACtB,YAAM,oBAAoB,MAAM;AAAA,QAC9B;AAAA,QACA;AAAA,QACA,YAAY;AAAA,QACZ,UAAU,wBAAwB,4CAA4C;AAAA,MAChF;AACA,UAAI,kBAAmB,QAAO;AAAA,IAChC;AAEA,UAAM,EAAE,MAAM,IAAI,kBAAkB,MAAM,MAAM,IAAI,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE,CAAC;AAC5E,UAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAE3D,UAAM,cAAc,cAAc,KAAK;AACvC,UAAM,oBAAoB,yBAAyB,IAAI;AAGvD,QAAI,QAAQ,sBAAsB,QAAQ,KAAK,aAAa,MAAM;AAChE,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,gCAAgC,kBAAkB,EAAE,CAAC;AAAA,IACvG;AACA,UAAM,cAAc,oBAAoB,EAAE,UAAU,kBAAkB,IAAI;AAE1E,UAAM,aAAa,UAAU,QAAQ,YAAY;AAQjD,UAAM,EAAE,OAAO,QAAQ,IAAI,MAAM,GAAG,cAAc,OAAO,QAAQ;AAC/D,YAAM,mBAAmB,CAAC,oBACxB;AAAA,QACE;AAAA,QACA;AAAA,QACA;AAAA,UACE;AAAA,UACA,GAAI,oBAAoB,EAAE,UAAU,kBAAkB,IAAI,CAAC;AAAA,UAC3D,WAAW;AAAA,QACb;AAAA,QACA,EAAE,UAAU,SAAS,kBAAkB;AAAA,QACvC;AAAA,MACF;AACF,YAAMA,SAAQ,MAAM,iBAAiB,WAAW;AAChD,UAAI,CAACA,QAAO;AACV,cAAM,SAAS,UAAU,gCAAgC,kBAAkB,CAAC;AAAA,MAC9E;AAEA,YAAM,MAAM,oBAAI,KAAK;AACrB,UAAIA,OAAM,cAAcA,OAAM,WAAW,QAAQ,IAAI,IAAI,QAAQ,GAAG;AAClE,cAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,+BAA+B,yBAAyB,EAAE,CAAC;AAAA,MAC7G;AAEA,WAAKA,OAAM,UAAU,UAAU,QAAQ;AACrC,cAAM,IAAI,cAAc,KAAK;AAAA,UAC3B,OAAO,UAAU,qCAAqC,sDAAsD;AAAA,QAC9G,CAAC;AAAA,MACH;AAEA,MAAAA,OAAM,SAAS;AACf,MAAAA,OAAM,gBAAgB,MAAM,4BAA4B,KAAK;AAAA,QAC3D,UAAUA,OAAM;AAAA,QAChB,gBAAgBA,OAAM;AAAA,QACtB,OAAO;AAAA,MACT,CAAC;AACD,MAAAA,OAAM,YAAY;AAClB,UAAI,QAAQA,MAAK;AACjB,YAAM,IAAI,MAAM;AAEhB,YAAM,MAA6B;AAAA,QACjC;AAAA,QACA,MAAM;AAAA,QACN,mBAAmB;AAAA,QACnB,wBAAwBA,OAAM;AAAA,QAC9B,iBAAiB,CAACA,OAAM,cAAc;AAAA,QACtC,SAAS;AAAA,QACT,iBAAiB;AAAA,MACnB;AAEA,YAAM,SAAU,MAAM,WAAW,QAAQ,iCAAiC,EAAE,OAAO,EAAE,SAASA,OAAM,GAAG,GAAG,IAAI,CAAC;AAC/G,YAAMC,WAAU,QAAQ,QAAQ,WAAW,QAAQ,WAAWD,OAAM;AAEpE,aAAO,EAAE,OAAAA,QAAO,SAAAC,SAAQ;AAAA,IAC1B,CAAC;AAED,UAAM,QAAQ,MAAM,sBAAsB,IAAI,YAAY,EAAE,IAAI,SAAS,WAAW,KAAK,GAAG,CAAC,GAAG,WAAW;AAC3G,UAAM,cAAc,OAAO,eAAe;AAG1C,UAAM,aAAa,QAAQ,IAAI,eAAe;AAC9C,QAAI,YAAY;AACd,UAAI;AACF,cAAM,SAAS,QAAQ,IAAI,WAAW;AACtC,cAAM,WAAW,SAAS,GAAG,OAAO,QAAQ,OAAO,EAAE,CAAC,yBAAyB,OAAO,KAAK,yBAAyB,OAAO;AAE3H,cAAM,OAAO;AAAA,UACX,SAAS,UAAU,0CAA0C,gCAAgC,EAAE,aAAa,MAAM,YAAY,CAAC;AAAA,UAC/H,SAAS,UAAU,0CAA0C,gCAAgC,EAAE,aAAa,MAAM,YAAY,CAAC;AAAA,UAC/H,MAAM,UAAU,uCAAuC,wFAAwF;AAAA,YAC7I,aAAa,MAAM;AAAA,YACnB;AAAA,UACF,CAAC;AAAA,UACD,KAAK,UAAU,sCAAsC,YAAY;AAAA,UACjE,QAAQ,UAAU,yCAAyC,cAAc;AAAA,QAC3E;AAEA,cAAM,UAAU;AAAA,UACd,IAAI;AAAA,UACJ,SAAS,UAAU,oCAAoC,2DAAsD;AAAA,YAC3G,aAAa,MAAM;AAAA,YACnB;AAAA,UACF,CAAC;AAAA,UACD,OAAO,wBAAwB,EAAE,UAAU,KAAK,CAAC;AAAA,QACnD,CAAC;AAAA,MACH,SAAS,KAAK;AACZ,eAAO,MAAM,yCAAyC,EAAE,IAAI,CAAC;AAAA,MAC/D;AAAA,IACF;AAEA,WAAO,aAAa,KAAK,EAAE,SAAS,YAAY,CAAC;AAAA,EACnD,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,GAAG;AACxB,aAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,IAC3D;AACA,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,WAAO,MAAM,8BAA8B,EAAE,IAAI,CAAC;AAClD,WAAO,aAAa,KAAK,EAAE,OAAO,UAAU,8BAA8B,yBAAyB,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACzH;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa;AAAA,QACX,aAAa;AAAA,QACb,QAAQ;AAAA,MACV;AAAA,MACA,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,GAAG,aAAa,EAAE,OAAO,EAAE,CAAC;AAAA,QAC1E;AAAA,QACA,EAAE,QAAQ,KAAK,aAAa,4BAA4B,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,QAChG,EAAE,QAAQ,KAAK,aAAa,+BAA+B,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,QACnG,EAAE,QAAQ,KAAK,aAAa,mBAAmB,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,QACvF,EAAE,QAAQ,KAAK,aAAa,qBAAqB,QAAQ,qBAAqB;AAAA,MAChF;AAAA,IACF;AAAA,EACF;AACF;",
   "names": ["quote", "orderId"]
 }

package/dist/modules/sales/api/quotes/public/[token]/route.js CHANGED Viewed

@@ -12,6 +12,7 @@ import {
 } from "../../../../data/entities.js";
 import { canonicalizeUnitCode } from "@open-mercato/shared/lib/units/unitCodes";
 import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
+import { isForeignTenantActor } from "../../../../lib/publicQuoteTenantScope.js";
 import { createLogger } from "@open-mercato/shared/lib/logger";
 const logger = createLogger("sales");
 const paramsSchema = z.object({
@@ -35,7 +36,7 @@ async function GET(req, ctx) {
       throw notFound(translate("sales.quotes.public.notFound", "Quote not found."));
     }
     const auth = await getAuthFromRequest(req);
-    if (auth?.tenantId && quote.tenantId !== auth.tenantId) {
+    if (isForeignTenantActor(auth, quote.tenantId)) {
       throw notFound(translate("sales.quotes.public.notFound", "Quote not found."));
     }
     const now = /* @__PURE__ */ new Date();

package/dist/modules/sales/api/quotes/public/[token]/route.js.map CHANGED Viewed

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../../src/modules/sales/api/quotes/public/%5Btoken%5D/route.ts"],
-  "sourcesContent": ["import { NextResponse } from \"next/server\";\nimport { z } from \"zod\";\nimport { createRequestContainer } from \"@open-mercato/shared/lib/di/container\";\nimport { resolveTranslations } from \"@open-mercato/shared/lib/i18n/server\";\nimport { isCrudHttpError, notFound } from \"@open-mercato/shared/lib/crud/errors\";\nimport type { OpenApiRouteDoc } from \"@open-mercato/shared/lib/openapi\";\nimport type { EntityManager } from \"@mikro-orm/postgresql\";\nimport { findOneWithDecryption, findWithDecryption } from \"@open-mercato/shared/lib/encryption/find\";\nimport { hashAuthToken } from \"../../../../../auth/lib/tokenHash\";\nimport {\n  SalesQuote,\n  SalesQuoteLine,\n  SalesQuoteAdjustment,\n} from \"../../../../data/entities\";\nimport { canonicalizeUnitCode } from \"@open-mercato/shared/lib/units/unitCodes\";\nimport { getAuthFromRequest } from \"@open-mercato/shared/lib/auth/server\";\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('sales')\n\nconst paramsSchema = z.object({\n  token: z.string().uuid(),\n});\n\nexport const metadata = {\n  GET: { requireAuth: false },\n};\n\nexport async function GET(req: Request, ctx: { params: { token: string } }) {\n  try {\n    const { token } = paramsSchema.parse(ctx.params ?? {});\n    const container = await createRequestContainer();\n    const em = container.resolve(\"em\") as EntityManager;\n    const hashedToken = hashAuthToken(token);\n    const quote = await findOneWithDecryption(em, SalesQuote, {\n      acceptanceToken: hashedToken,\n      deletedAt: null,\n    });\n    const { translate } = await resolveTranslations();\n    if (!quote) {\n      throw notFound(translate(\"sales.quotes.public.notFound\", \"Quote not found.\"));\n    }\n\n    const auth = await getAuthFromRequest(req);\n    if (auth?.tenantId && quote.tenantId !== auth.tenantId) {\n      throw notFound(translate(\"sales.quotes.public.notFound\", \"Quote not found.\"));\n    }\n\n    const now = new Date();\n    const isExpired =\n      !!quote.validUntil && quote.validUntil.getTime() < now.getTime();\n\n    const [lines, adjustments] = await Promise.all([\n      findWithDecryption(\n        em,\n        SalesQuoteLine,\n        { quote: quote.id, organizationId: quote.organizationId, tenantId: quote.tenantId, deletedAt: null },\n        { orderBy: { lineNumber: \"asc\" } },\n      ),\n      findWithDecryption(\n        em,\n        SalesQuoteAdjustment,\n        { quote: quote.id, organizationId: quote.organizationId, tenantId: quote.tenantId },\n        { orderBy: { position: \"asc\" } },\n      ),\n    ]);\n\n    return NextResponse.json({\n      quote: {\n        quoteNumber: quote.quoteNumber,\n        currencyCode: quote.currencyCode,\n        validFrom: quote.validFrom?.toISOString() ?? null,\n        validUntil: quote.validUntil?.toISOString() ?? null,\n        status: quote.status ?? null,\n        subtotalNetAmount: quote.subtotalNetAmount,\n        subtotalGrossAmount: quote.subtotalGrossAmount,\n        discountTotalAmount: quote.discountTotalAmount,\n        taxTotalAmount: quote.taxTotalAmount,\n        grandTotalNetAmount: quote.grandTotalNetAmount,\n        grandTotalGrossAmount: quote.grandTotalGrossAmount,\n      },\n      lines: lines.map((line) => ({\n        lineNumber: line.lineNumber ?? null,\n        kind: line.kind,\n        name: line.name ?? null,\n        description: line.description ?? null,\n        quantity: line.quantity,\n        quantityUnit: canonicalizeUnitCode(line.quantityUnit) ?? null,\n        normalizedQuantity: line.normalizedQuantity ?? line.quantity,\n        normalizedUnit:\n          canonicalizeUnitCode(line.normalizedUnit ?? line.quantityUnit) ??\n          null,\n        uomSnapshot: line.uomSnapshot\n          ? {\n              baseUnitCode: line.uomSnapshot.baseUnitCode ?? null,\n              enteredUnitCode: line.uomSnapshot.enteredUnitCode ?? null,\n            }\n          : null,\n        currencyCode: line.currencyCode,\n        unitPriceNet: line.unitPriceNet,\n        unitPriceGross: line.unitPriceGross,\n        discountAmount: line.discountAmount,\n        discountPercent: line.discountPercent,\n        taxRate: line.taxRate,\n        taxAmount: line.taxAmount,\n        totalNetAmount: line.totalNetAmount,\n        totalGrossAmount: line.totalGrossAmount,\n        unitPriceReference: (() => {\n          if (!line.uomSnapshot) return null;\n          const ref = line.uomSnapshot.unitPriceReference;\n          if (!ref) return null;\n          return {\n            enabled: ref.enabled ?? null,\n            referenceUnitCode: ref.referenceUnitCode ?? null,\n            baseQuantity: ref.baseQuantity ?? null,\n            grossPerReference: ref.grossPerReference ?? null,\n            netPerReference: ref.netPerReference ?? null,\n          };\n        })(),\n      })),\n      adjustments: adjustments.map((adj) => ({\n        scope: adj.scope,\n        kind: adj.kind,\n        label: adj.label ?? adj.code ?? null,\n        rate: adj.rate,\n        amountNet: adj.amountNet,\n        amountGross: adj.amountGross,\n        currencyCode: adj.currencyCode ?? null,\n        position: adj.position ?? null,\n        quoteLineId: adj.quoteLine?.id ?? null,\n      })),\n      isExpired,\n    });\n  } catch (err) {\n    if (isCrudHttpError(err)) {\n      return NextResponse.json(err.body, { status: err.status });\n    }\n    const { translate } = await resolveTranslations();\n    logger.error('sales.quotes.public failed', { err });\n    return NextResponse.json(\n      {\n        error: translate(\"sales.quotes.public.failed\", \"Failed to load quote.\"),\n      },\n      { status: 400 },\n    );\n  }\n}\n\nconst publicQuoteResponseSchema = z.object({\n  quote: z.object({\n    quoteNumber: z.string(),\n    currencyCode: z.string(),\n    validFrom: z.string().nullable(),\n    validUntil: z.string().nullable(),\n    status: z.string().nullable(),\n    subtotalNetAmount: z.string(),\n    subtotalGrossAmount: z.string(),\n    discountTotalAmount: z.string(),\n    taxTotalAmount: z.string(),\n    grandTotalNetAmount: z.string(),\n    grandTotalGrossAmount: z.string(),\n  }),\n  lines: z.array(\n    z.object({\n      lineNumber: z.number().nullable(),\n      kind: z.string(),\n      name: z.string().nullable(),\n      description: z.string().nullable(),\n      quantity: z.string(),\n      quantityUnit: z.string().nullable(),\n      normalizedQuantity: z.string(),\n      normalizedUnit: z.string().nullable(),\n      uomSnapshot: z\n        .object({\n          baseUnitCode: z.string().nullable(),\n          enteredUnitCode: z.string().nullable(),\n        })\n        .nullable()\n        .optional(),\n      currencyCode: z.string(),\n      unitPriceNet: z.string(),\n      unitPriceGross: z.string(),\n      discountAmount: z.string(),\n      discountPercent: z.string(),\n      taxRate: z.string(),\n      taxAmount: z.string(),\n      totalNetAmount: z.string(),\n      totalGrossAmount: z.string(),\n      unitPriceReference: z\n        .object({\n          enabled: z.boolean().nullable().optional(),\n          referenceUnitCode: z.string().nullable().optional(),\n          baseQuantity: z.string().nullable().optional(),\n          grossPerReference: z.string().nullable().optional(),\n          netPerReference: z.string().nullable().optional(),\n        })\n        .nullable()\n        .optional(),\n    }),\n  ),\n  adjustments: z.array(\n    z.object({\n      scope: z.string().nullable(),\n      kind: z.string().nullable(),\n      label: z.string().nullable(),\n      rate: z.string().nullable(),\n      amountNet: z.string().nullable(),\n      amountGross: z.string().nullable(),\n      currencyCode: z.string().nullable(),\n      position: z.number().nullable(),\n      quoteLineId: z.string().uuid().nullable(),\n    }),\n  ),\n  isExpired: z.boolean(),\n});\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: \"Sales\",\n  summary: \"View a quote (public)\",\n  pathParams: z.object({ token: z.string().uuid() }),\n  methods: {\n    GET: {\n      summary: \"Get quote details by acceptance token\",\n      responses: [\n        {\n          status: 200,\n          description: \"Quote details\",\n          schema: publicQuoteResponseSchema,\n        },\n        {\n          status: 404,\n          description: \"Quote not found\",\n          schema: z.object({ error: z.string() }),\n        },\n      ],\n    },\n  },\n};\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,8BAA8B;AACvC,SAAS,2BAA2B;AACpC,SAAS,iBAAiB,gBAAgB;AAG1C,SAAS,uBAAuB,0BAA0B;AAC1D,SAAS,qBAAqB;AAC9B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,4BAA4B;AACrC,SAAS,0BAA0B;AACnC,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,OAAO;AAEnC,MAAM,eAAe,EAAE,OAAO;AAAA,EAC5B,OAAO,EAAE,OAAO,EAAE,KAAK;AACzB,CAAC;AAEM,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM;AAC5B;AAEA,eAAsB,IAAI,KAAc,KAAoC;AAC1E,MAAI;AACF,UAAM,EAAE,MAAM,IAAI,aAAa,MAAM,IAAI,UAAU,CAAC,CAAC;AACrD,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,UAAM,cAAc,cAAc,KAAK;AACvC,UAAM,QAAQ,MAAM,sBAAsB,IAAI,YAAY;AAAA,MACxD,iBAAiB;AAAA,MACjB,WAAW;AAAA,IACb,CAAC;AACD,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,QAAI,CAAC,OAAO;AACV,YAAM,SAAS,UAAU,gCAAgC,kBAAkB,CAAC;AAAA,IAC9E;AAEA,UAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,QAAI,MAAM,YAAY,MAAM,aAAa,KAAK,UAAU;AACtD,YAAM,SAAS,UAAU,gCAAgC,kBAAkB,CAAC;AAAA,IAC9E;AAEA,UAAM,MAAM,oBAAI,KAAK;AACrB,UAAM,YACJ,CAAC,CAAC,MAAM,cAAc,MAAM,WAAW,QAAQ,IAAI,IAAI,QAAQ;AAEjE,UAAM,CAAC,OAAO,WAAW,IAAI,MAAM,QAAQ,IAAI;AAAA,MAC7C;AAAA,QACE;AAAA,QACA;AAAA,QACA,EAAE,OAAO,MAAM,IAAI,gBAAgB,MAAM,gBAAgB,UAAU,MAAM,UAAU,WAAW,KAAK;AAAA,QACnG,EAAE,SAAS,EAAE,YAAY,MAAM,EAAE;AAAA,MACnC;AAAA,MACA;AAAA,QACE;AAAA,QACA;AAAA,QACA,EAAE,OAAO,MAAM,IAAI,gBAAgB,MAAM,gBAAgB,UAAU,MAAM,SAAS;AAAA,QAClF,EAAE,SAAS,EAAE,UAAU,MAAM,EAAE;AAAA,MACjC;AAAA,IACF,CAAC;AAED,WAAO,aAAa,KAAK;AAAA,MACvB,OAAO;AAAA,QACL,aAAa,MAAM;AAAA,QACnB,cAAc,MAAM;AAAA,QACpB,WAAW,MAAM,WAAW,YAAY,KAAK;AAAA,QAC7C,YAAY,MAAM,YAAY,YAAY,KAAK;AAAA,QAC/C,QAAQ,MAAM,UAAU;AAAA,QACxB,mBAAmB,MAAM;AAAA,QACzB,qBAAqB,MAAM;AAAA,QAC3B,qBAAqB,MAAM;AAAA,QAC3B,gBAAgB,MAAM;AAAA,QACtB,qBAAqB,MAAM;AAAA,QAC3B,uBAAuB,MAAM;AAAA,MAC/B;AAAA,MACA,OAAO,MAAM,IAAI,CAAC,UAAU;AAAA,QAC1B,YAAY,KAAK,cAAc;AAAA,QAC/B,MAAM,KAAK;AAAA,QACX,MAAM,KAAK,QAAQ;AAAA,QACnB,aAAa,KAAK,eAAe;AAAA,QACjC,UAAU,KAAK;AAAA,QACf,cAAc,qBAAqB,KAAK,YAAY,KAAK;AAAA,QACzD,oBAAoB,KAAK,sBAAsB,KAAK;AAAA,QACpD,gBACE,qBAAqB,KAAK,kBAAkB,KAAK,YAAY,KAC7D;AAAA,QACF,aAAa,KAAK,cACd;AAAA,UACE,cAAc,KAAK,YAAY,gBAAgB;AAAA,UAC/C,iBAAiB,KAAK,YAAY,mBAAmB;AAAA,QACvD,IACA;AAAA,QACJ,cAAc,KAAK;AAAA,QACnB,cAAc,KAAK;AAAA,QACnB,gBAAgB,KAAK;AAAA,QACrB,gBAAgB,KAAK;AAAA,QACrB,iBAAiB,KAAK;AAAA,QACtB,SAAS,KAAK;AAAA,QACd,WAAW,KAAK;AAAA,QAChB,gBAAgB,KAAK;AAAA,QACrB,kBAAkB,KAAK;AAAA,QACvB,qBAAqB,MAAM;AACzB,cAAI,CAAC,KAAK,YAAa,QAAO;AAC9B,gBAAM,MAAM,KAAK,YAAY;AAC7B,cAAI,CAAC,IAAK,QAAO;AACjB,iBAAO;AAAA,YACL,SAAS,IAAI,WAAW;AAAA,YACxB,mBAAmB,IAAI,qBAAqB;AAAA,YAC5C,cAAc,IAAI,gBAAgB;AAAA,YAClC,mBAAmB,IAAI,qBAAqB;AAAA,YAC5C,iBAAiB,IAAI,mBAAmB;AAAA,UAC1C;AAAA,QACF,GAAG;AAAA,MACL,EAAE;AAAA,MACF,aAAa,YAAY,IAAI,CAAC,SAAS;AAAA,QACrC,OAAO,IAAI;AAAA,QACX,MAAM,IAAI;AAAA,QACV,OAAO,IAAI,SAAS,IAAI,QAAQ;AAAA,QAChC,MAAM,IAAI;AAAA,QACV,WAAW,IAAI;AAAA,QACf,aAAa,IAAI;AAAA,QACjB,cAAc,IAAI,gBAAgB;AAAA,QAClC,UAAU,IAAI,YAAY;AAAA,QAC1B,aAAa,IAAI,WAAW,MAAM;AAAA,MACpC,EAAE;AAAA,MACF;AAAA,IACF,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,GAAG;AACxB,aAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,IAC3D;AACA,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,WAAO,MAAM,8BAA8B,EAAE,IAAI,CAAC;AAClD,WAAO,aAAa;AAAA,MAClB;AAAA,QACE,OAAO,UAAU,8BAA8B,uBAAuB;AAAA,MACxE;AAAA,MACA,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAEA,MAAM,4BAA4B,EAAE,OAAO;AAAA,EACzC,OAAO,EAAE,OAAO;AAAA,IACd,aAAa,EAAE,OAAO;AAAA,IACtB,cAAc,EAAE,OAAO;AAAA,IACvB,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,IAC/B,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,IAChC,QAAQ,EAAE,OAAO,EAAE,SAAS;AAAA,IAC5B,mBAAmB,EAAE,OAAO;AAAA,IAC5B,qBAAqB,EAAE,OAAO;AAAA,IAC9B,qBAAqB,EAAE,OAAO;AAAA,IAC9B,gBAAgB,EAAE,OAAO;AAAA,IACzB,qBAAqB,EAAE,OAAO;AAAA,IAC9B,uBAAuB,EAAE,OAAO;AAAA,EAClC,CAAC;AAAA,EACD,OAAO,EAAE;AAAA,IACP,EAAE,OAAO;AAAA,MACP,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,MAChC,MAAM,EAAE,OAAO;AAAA,MACf,MAAM,EAAE,OAAO,EAAE,SAAS;AAAA,MAC1B,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,MACjC,UAAU,EAAE,OAAO;AAAA,MACnB,cAAc,EAAE,OAAO,EAAE,SAAS;AAAA,MAClC,oBAAoB,EAAE,OAAO;AAAA,MAC7B,gBAAgB,EAAE,OAAO,EAAE,SAAS;AAAA,MACpC,aAAa,EACV,OAAO;AAAA,QACN,cAAc,EAAE,OAAO,EAAE,SAAS;AAAA,QAClC,iBAAiB,EAAE,OAAO,EAAE,SAAS;AAAA,MACvC,CAAC,EACA,SAAS,EACT,SAAS;AAAA,MACZ,cAAc,EAAE,OAAO;AAAA,MACvB,cAAc,EAAE,OAAO;AAAA,MACvB,gBAAgB,EAAE,OAAO;AAAA,MACzB,gBAAgB,EAAE,OAAO;AAAA,MACzB,iBAAiB,EAAE,OAAO;AAAA,MAC1B,SAAS,EAAE,OAAO;AAAA,MAClB,WAAW,EAAE,OAAO;AAAA,MACpB,gBAAgB,EAAE,OAAO;AAAA,MACzB,kBAAkB,EAAE,OAAO;AAAA,MAC3B,oBAAoB,EACjB,OAAO;AAAA,QACN,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS;AAAA,QACzC,mBAAmB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,QAClD,cAAc,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,QAC7C,mBAAmB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,QAClD,iBAAiB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,MAClD,CAAC,EACA,SAAS,EACT,SAAS;AAAA,IACd,CAAC;AAAA,EACH;AAAA,EACA,aAAa,EAAE;AAAA,IACb,EAAE,OAAO;AAAA,MACP,OAAO,EAAE,OAAO,EAAE,SAAS;AAAA,MAC3B,MAAM,EAAE,OAAO,EAAE,SAAS;AAAA,MAC1B,OAAO,EAAE,OAAO,EAAE,SAAS;AAAA,MAC3B,MAAM,EAAE,OAAO,EAAE,SAAS;AAAA,MAC1B,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,MAC/B,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,MACjC,cAAc,EAAE,OAAO,EAAE,SAAS;AAAA,MAClC,UAAU,EAAE,OAAO,EAAE,SAAS;AAAA,MAC9B,aAAa,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,IAC1C,CAAC;AAAA,EACH;AAAA,EACA,WAAW,EAAE,QAAQ;AACvB,CAAC;AAEM,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,YAAY,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAAA,EACjD,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ;AAAA,QACV;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAAA,QACxC;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { NextResponse } from \"next/server\";\nimport { z } from \"zod\";\nimport { createRequestContainer } from \"@open-mercato/shared/lib/di/container\";\nimport { resolveTranslations } from \"@open-mercato/shared/lib/i18n/server\";\nimport { isCrudHttpError, notFound } from \"@open-mercato/shared/lib/crud/errors\";\nimport type { OpenApiRouteDoc } from \"@open-mercato/shared/lib/openapi\";\nimport type { EntityManager } from \"@mikro-orm/postgresql\";\nimport { findOneWithDecryption, findWithDecryption } from \"@open-mercato/shared/lib/encryption/find\";\nimport { hashAuthToken } from \"../../../../../auth/lib/tokenHash\";\nimport {\n  SalesQuote,\n  SalesQuoteLine,\n  SalesQuoteAdjustment,\n} from \"../../../../data/entities\";\nimport { canonicalizeUnitCode } from \"@open-mercato/shared/lib/units/unitCodes\";\nimport { getAuthFromRequest } from \"@open-mercato/shared/lib/auth/server\";\nimport { isForeignTenantActor } from \"../../../../lib/publicQuoteTenantScope\";\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('sales')\n\nconst paramsSchema = z.object({\n  token: z.string().uuid(),\n});\n\nexport const metadata = {\n  GET: { requireAuth: false },\n};\n\nexport async function GET(req: Request, ctx: { params: { token: string } }) {\n  try {\n    const { token } = paramsSchema.parse(ctx.params ?? {});\n    const container = await createRequestContainer();\n    const em = container.resolve(\"em\") as EntityManager;\n    const hashedToken = hashAuthToken(token);\n    const quote = await findOneWithDecryption(em, SalesQuote, {\n      acceptanceToken: hashedToken,\n      deletedAt: null,\n    });\n    const { translate } = await resolveTranslations();\n    if (!quote) {\n      throw notFound(translate(\"sales.quotes.public.notFound\", \"Quote not found.\"));\n    }\n\n    const auth = await getAuthFromRequest(req);\n    if (isForeignTenantActor(auth, quote.tenantId)) {\n      throw notFound(translate(\"sales.quotes.public.notFound\", \"Quote not found.\"));\n    }\n\n    const now = new Date();\n    const isExpired =\n      !!quote.validUntil && quote.validUntil.getTime() < now.getTime();\n\n    const [lines, adjustments] = await Promise.all([\n      findWithDecryption(\n        em,\n        SalesQuoteLine,\n        { quote: quote.id, organizationId: quote.organizationId, tenantId: quote.tenantId, deletedAt: null },\n        { orderBy: { lineNumber: \"asc\" } },\n      ),\n      findWithDecryption(\n        em,\n        SalesQuoteAdjustment,\n        { quote: quote.id, organizationId: quote.organizationId, tenantId: quote.tenantId },\n        { orderBy: { position: \"asc\" } },\n      ),\n    ]);\n\n    return NextResponse.json({\n      quote: {\n        quoteNumber: quote.quoteNumber,\n        currencyCode: quote.currencyCode,\n        validFrom: quote.validFrom?.toISOString() ?? null,\n        validUntil: quote.validUntil?.toISOString() ?? null,\n        status: quote.status ?? null,\n        subtotalNetAmount: quote.subtotalNetAmount,\n        subtotalGrossAmount: quote.subtotalGrossAmount,\n        discountTotalAmount: quote.discountTotalAmount,\n        taxTotalAmount: quote.taxTotalAmount,\n        grandTotalNetAmount: quote.grandTotalNetAmount,\n        grandTotalGrossAmount: quote.grandTotalGrossAmount,\n      },\n      lines: lines.map((line) => ({\n        lineNumber: line.lineNumber ?? null,\n        kind: line.kind,\n        name: line.name ?? null,\n        description: line.description ?? null,\n        quantity: line.quantity,\n        quantityUnit: canonicalizeUnitCode(line.quantityUnit) ?? null,\n        normalizedQuantity: line.normalizedQuantity ?? line.quantity,\n        normalizedUnit:\n          canonicalizeUnitCode(line.normalizedUnit ?? line.quantityUnit) ??\n          null,\n        uomSnapshot: line.uomSnapshot\n          ? {\n              baseUnitCode: line.uomSnapshot.baseUnitCode ?? null,\n              enteredUnitCode: line.uomSnapshot.enteredUnitCode ?? null,\n            }\n          : null,\n        currencyCode: line.currencyCode,\n        unitPriceNet: line.unitPriceNet,\n        unitPriceGross: line.unitPriceGross,\n        discountAmount: line.discountAmount,\n        discountPercent: line.discountPercent,\n        taxRate: line.taxRate,\n        taxAmount: line.taxAmount,\n        totalNetAmount: line.totalNetAmount,\n        totalGrossAmount: line.totalGrossAmount,\n        unitPriceReference: (() => {\n          if (!line.uomSnapshot) return null;\n          const ref = line.uomSnapshot.unitPriceReference;\n          if (!ref) return null;\n          return {\n            enabled: ref.enabled ?? null,\n            referenceUnitCode: ref.referenceUnitCode ?? null,\n            baseQuantity: ref.baseQuantity ?? null,\n            grossPerReference: ref.grossPerReference ?? null,\n            netPerReference: ref.netPerReference ?? null,\n          };\n        })(),\n      })),\n      adjustments: adjustments.map((adj) => ({\n        scope: adj.scope,\n        kind: adj.kind,\n        label: adj.label ?? adj.code ?? null,\n        rate: adj.rate,\n        amountNet: adj.amountNet,\n        amountGross: adj.amountGross,\n        currencyCode: adj.currencyCode ?? null,\n        position: adj.position ?? null,\n        quoteLineId: adj.quoteLine?.id ?? null,\n      })),\n      isExpired,\n    });\n  } catch (err) {\n    if (isCrudHttpError(err)) {\n      return NextResponse.json(err.body, { status: err.status });\n    }\n    const { translate } = await resolveTranslations();\n    logger.error('sales.quotes.public failed', { err });\n    return NextResponse.json(\n      {\n        error: translate(\"sales.quotes.public.failed\", \"Failed to load quote.\"),\n      },\n      { status: 400 },\n    );\n  }\n}\n\nconst publicQuoteResponseSchema = z.object({\n  quote: z.object({\n    quoteNumber: z.string(),\n    currencyCode: z.string(),\n    validFrom: z.string().nullable(),\n    validUntil: z.string().nullable(),\n    status: z.string().nullable(),\n    subtotalNetAmount: z.string(),\n    subtotalGrossAmount: z.string(),\n    discountTotalAmount: z.string(),\n    taxTotalAmount: z.string(),\n    grandTotalNetAmount: z.string(),\n    grandTotalGrossAmount: z.string(),\n  }),\n  lines: z.array(\n    z.object({\n      lineNumber: z.number().nullable(),\n      kind: z.string(),\n      name: z.string().nullable(),\n      description: z.string().nullable(),\n      quantity: z.string(),\n      quantityUnit: z.string().nullable(),\n      normalizedQuantity: z.string(),\n      normalizedUnit: z.string().nullable(),\n      uomSnapshot: z\n        .object({\n          baseUnitCode: z.string().nullable(),\n          enteredUnitCode: z.string().nullable(),\n        })\n        .nullable()\n        .optional(),\n      currencyCode: z.string(),\n      unitPriceNet: z.string(),\n      unitPriceGross: z.string(),\n      discountAmount: z.string(),\n      discountPercent: z.string(),\n      taxRate: z.string(),\n      taxAmount: z.string(),\n      totalNetAmount: z.string(),\n      totalGrossAmount: z.string(),\n      unitPriceReference: z\n        .object({\n          enabled: z.boolean().nullable().optional(),\n          referenceUnitCode: z.string().nullable().optional(),\n          baseQuantity: z.string().nullable().optional(),\n          grossPerReference: z.string().nullable().optional(),\n          netPerReference: z.string().nullable().optional(),\n        })\n        .nullable()\n        .optional(),\n    }),\n  ),\n  adjustments: z.array(\n    z.object({\n      scope: z.string().nullable(),\n      kind: z.string().nullable(),\n      label: z.string().nullable(),\n      rate: z.string().nullable(),\n      amountNet: z.string().nullable(),\n      amountGross: z.string().nullable(),\n      currencyCode: z.string().nullable(),\n      position: z.number().nullable(),\n      quoteLineId: z.string().uuid().nullable(),\n    }),\n  ),\n  isExpired: z.boolean(),\n});\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: \"Sales\",\n  summary: \"View a quote (public)\",\n  pathParams: z.object({ token: z.string().uuid() }),\n  methods: {\n    GET: {\n      summary: \"Get quote details by acceptance token\",\n      responses: [\n        {\n          status: 200,\n          description: \"Quote details\",\n          schema: publicQuoteResponseSchema,\n        },\n        {\n          status: 404,\n          description: \"Quote not found\",\n          schema: z.object({ error: z.string() }),\n        },\n      ],\n    },\n  },\n};\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,8BAA8B;AACvC,SAAS,2BAA2B;AACpC,SAAS,iBAAiB,gBAAgB;AAG1C,SAAS,uBAAuB,0BAA0B;AAC1D,SAAS,qBAAqB;AAC9B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,4BAA4B;AACrC,SAAS,0BAA0B;AACnC,SAAS,4BAA4B;AACrC,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,OAAO;AAEnC,MAAM,eAAe,EAAE,OAAO;AAAA,EAC5B,OAAO,EAAE,OAAO,EAAE,KAAK;AACzB,CAAC;AAEM,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM;AAC5B;AAEA,eAAsB,IAAI,KAAc,KAAoC;AAC1E,MAAI;AACF,UAAM,EAAE,MAAM,IAAI,aAAa,MAAM,IAAI,UAAU,CAAC,CAAC;AACrD,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,UAAM,cAAc,cAAc,KAAK;AACvC,UAAM,QAAQ,MAAM,sBAAsB,IAAI,YAAY;AAAA,MACxD,iBAAiB;AAAA,MACjB,WAAW;AAAA,IACb,CAAC;AACD,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,QAAI,CAAC,OAAO;AACV,YAAM,SAAS,UAAU,gCAAgC,kBAAkB,CAAC;AAAA,IAC9E;AAEA,UAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,QAAI,qBAAqB,MAAM,MAAM,QAAQ,GAAG;AAC9C,YAAM,SAAS,UAAU,gCAAgC,kBAAkB,CAAC;AAAA,IAC9E;AAEA,UAAM,MAAM,oBAAI,KAAK;AACrB,UAAM,YACJ,CAAC,CAAC,MAAM,cAAc,MAAM,WAAW,QAAQ,IAAI,IAAI,QAAQ;AAEjE,UAAM,CAAC,OAAO,WAAW,IAAI,MAAM,QAAQ,IAAI;AAAA,MAC7C;AAAA,QACE;AAAA,QACA;AAAA,QACA,EAAE,OAAO,MAAM,IAAI,gBAAgB,MAAM,gBAAgB,UAAU,MAAM,UAAU,WAAW,KAAK;AAAA,QACnG,EAAE,SAAS,EAAE,YAAY,MAAM,EAAE;AAAA,MACnC;AAAA,MACA;AAAA,QACE;AAAA,QACA;AAAA,QACA,EAAE,OAAO,MAAM,IAAI,gBAAgB,MAAM,gBAAgB,UAAU,MAAM,SAAS;AAAA,QAClF,EAAE,SAAS,EAAE,UAAU,MAAM,EAAE;AAAA,MACjC;AAAA,IACF,CAAC;AAED,WAAO,aAAa,KAAK;AAAA,MACvB,OAAO;AAAA,QACL,aAAa,MAAM;AAAA,QACnB,cAAc,MAAM;AAAA,QACpB,WAAW,MAAM,WAAW,YAAY,KAAK;AAAA,QAC7C,YAAY,MAAM,YAAY,YAAY,KAAK;AAAA,QAC/C,QAAQ,MAAM,UAAU;AAAA,QACxB,mBAAmB,MAAM;AAAA,QACzB,qBAAqB,MAAM;AAAA,QAC3B,qBAAqB,MAAM;AAAA,QAC3B,gBAAgB,MAAM;AAAA,QACtB,qBAAqB,MAAM;AAAA,QAC3B,uBAAuB,MAAM;AAAA,MAC/B;AAAA,MACA,OAAO,MAAM,IAAI,CAAC,UAAU;AAAA,QAC1B,YAAY,KAAK,cAAc;AAAA,QAC/B,MAAM,KAAK;AAAA,QACX,MAAM,KAAK,QAAQ;AAAA,QACnB,aAAa,KAAK,eAAe;AAAA,QACjC,UAAU,KAAK;AAAA,QACf,cAAc,qBAAqB,KAAK,YAAY,KAAK;AAAA,QACzD,oBAAoB,KAAK,sBAAsB,KAAK;AAAA,QACpD,gBACE,qBAAqB,KAAK,kBAAkB,KAAK,YAAY,KAC7D;AAAA,QACF,aAAa,KAAK,cACd;AAAA,UACE,cAAc,KAAK,YAAY,gBAAgB;AAAA,UAC/C,iBAAiB,KAAK,YAAY,mBAAmB;AAAA,QACvD,IACA;AAAA,QACJ,cAAc,KAAK;AAAA,QACnB,cAAc,KAAK;AAAA,QACnB,gBAAgB,KAAK;AAAA,QACrB,gBAAgB,KAAK;AAAA,QACrB,iBAAiB,KAAK;AAAA,QACtB,SAAS,KAAK;AAAA,QACd,WAAW,KAAK;AAAA,QAChB,gBAAgB,KAAK;AAAA,QACrB,kBAAkB,KAAK;AAAA,QACvB,qBAAqB,MAAM;AACzB,cAAI,CAAC,KAAK,YAAa,QAAO;AAC9B,gBAAM,MAAM,KAAK,YAAY;AAC7B,cAAI,CAAC,IAAK,QAAO;AACjB,iBAAO;AAAA,YACL,SAAS,IAAI,WAAW;AAAA,YACxB,mBAAmB,IAAI,qBAAqB;AAAA,YAC5C,cAAc,IAAI,gBAAgB;AAAA,YAClC,mBAAmB,IAAI,qBAAqB;AAAA,YAC5C,iBAAiB,IAAI,mBAAmB;AAAA,UAC1C;AAAA,QACF,GAAG;AAAA,MACL,EAAE;AAAA,MACF,aAAa,YAAY,IAAI,CAAC,SAAS;AAAA,QACrC,OAAO,IAAI;AAAA,QACX,MAAM,IAAI;AAAA,QACV,OAAO,IAAI,SAAS,IAAI,QAAQ;AAAA,QAChC,MAAM,IAAI;AAAA,QACV,WAAW,IAAI;AAAA,QACf,aAAa,IAAI;AAAA,QACjB,cAAc,IAAI,gBAAgB;AAAA,QAClC,UAAU,IAAI,YAAY;AAAA,QAC1B,aAAa,IAAI,WAAW,MAAM;AAAA,MACpC,EAAE;AAAA,MACF;AAAA,IACF,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,GAAG;AACxB,aAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,IAC3D;AACA,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,WAAO,MAAM,8BAA8B,EAAE,IAAI,CAAC;AAClD,WAAO,aAAa;AAAA,MAClB;AAAA,QACE,OAAO,UAAU,8BAA8B,uBAAuB;AAAA,MACxE;AAAA,MACA,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAEA,MAAM,4BAA4B,EAAE,OAAO;AAAA,EACzC,OAAO,EAAE,OAAO;AAAA,IACd,aAAa,EAAE,OAAO;AAAA,IACtB,cAAc,EAAE,OAAO;AAAA,IACvB,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,IAC/B,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,IAChC,QAAQ,EAAE,OAAO,EAAE,SAAS;AAAA,IAC5B,mBAAmB,EAAE,OAAO;AAAA,IAC5B,qBAAqB,EAAE,OAAO;AAAA,IAC9B,qBAAqB,EAAE,OAAO;AAAA,IAC9B,gBAAgB,EAAE,OAAO;AAAA,IACzB,qBAAqB,EAAE,OAAO;AAAA,IAC9B,uBAAuB,EAAE,OAAO;AAAA,EAClC,CAAC;AAAA,EACD,OAAO,EAAE;AAAA,IACP,EAAE,OAAO;AAAA,MACP,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,MAChC,MAAM,EAAE,OAAO;AAAA,MACf,MAAM,EAAE,OAAO,EAAE,SAAS;AAAA,MAC1B,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,MACjC,UAAU,EAAE,OAAO;AAAA,MACnB,cAAc,EAAE,OAAO,EAAE,SAAS;AAAA,MAClC,oBAAoB,EAAE,OAAO;AAAA,MAC7B,gBAAgB,EAAE,OAAO,EAAE,SAAS;AAAA,MACpC,aAAa,EACV,OAAO;AAAA,QACN,cAAc,EAAE,OAAO,EAAE,SAAS;AAAA,QAClC,iBAAiB,EAAE,OAAO,EAAE,SAAS;AAAA,MACvC,CAAC,EACA,SAAS,EACT,SAAS;AAAA,MACZ,cAAc,EAAE,OAAO;AAAA,MACvB,cAAc,EAAE,OAAO;AAAA,MACvB,gBAAgB,EAAE,OAAO;AAAA,MACzB,gBAAgB,EAAE,OAAO;AAAA,MACzB,iBAAiB,EAAE,OAAO;AAAA,MAC1B,SAAS,EAAE,OAAO;AAAA,MAClB,WAAW,EAAE,OAAO;AAAA,MACpB,gBAAgB,EAAE,OAAO;AAAA,MACzB,kBAAkB,EAAE,OAAO;AAAA,MAC3B,oBAAoB,EACjB,OAAO;AAAA,QACN,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS;AAAA,QACzC,mBAAmB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,QAClD,cAAc,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,QAC7C,mBAAmB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,QAClD,iBAAiB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,MAClD,CAAC,EACA,SAAS,EACT,SAAS;AAAA,IACd,CAAC;AAAA,EACH;AAAA,EACA,aAAa,EAAE;AAAA,IACb,EAAE,OAAO;AAAA,MACP,OAAO,EAAE,OAAO,EAAE,SAAS;AAAA,MAC3B,MAAM,EAAE,OAAO,EAAE,SAAS;AAAA,MAC1B,OAAO,EAAE,OAAO,EAAE,SAAS;AAAA,MAC3B,MAAM,EAAE,OAAO,EAAE,SAAS;AAAA,MAC1B,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,MAC/B,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,MACjC,cAAc,EAAE,OAAO,EAAE,SAAS;AAAA,MAClC,UAAU,EAAE,OAAO,EAAE,SAAS;AAAA,MAC9B,aAAa,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,IAC1C,CAAC;AAAA,EACH;AAAA,EACA,WAAW,EAAE,QAAQ;AACvB,CAAC;AAEM,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,YAAY,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAAA,EACjD,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ;AAAA,QACV;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAAA,QACxC;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/sales/commands/documents.js CHANGED Viewed

@@ -16,6 +16,7 @@ import {
 import { resolveTranslations } from "@open-mercato/shared/lib/i18n/server";
 import { resolveNotificationService } from "../../notifications/lib/notificationService.js";
 import { buildFeatureNotificationFromType } from "../../notifications/lib/notificationBuilder.js";
+import { emitSalesEvent } from "../events.js";
 import { setRecordCustomFields } from "@open-mercato/core/modules/entities/lib/helpers";
 import { loadCustomFieldValues } from "@open-mercato/shared/lib/crud/custom-fields";
 import { normalizeCustomFieldValues } from "@open-mercato/shared/lib/custom-fields/normalize";
@@ -298,6 +299,53 @@ function normalizeStatusValue(raw) {
   const trimmed = raw.trim();
   return trimmed.length ? trimmed : null;
 }
+function isConfirmedOrderStatus(status) {
+  return status === "confirmed";
+}
+function isCancelledOrderStatus(status) {
+  return status === "canceled" || status === "cancelled";
+}
+async function emitOrderLifecycleEvent(input) {
+  await emitSalesEvent(input.eventId, {
+    id: input.order.id,
+    orderId: input.order.id,
+    orderNumber: input.order.orderNumber,
+    previousStatus: input.previousStatus,
+    status: normalizeStatusValue(input.order.status),
+    tenantId: input.order.tenantId,
+    organizationId: input.order.organizationId
+  });
+}
+function emitOrderLifecycleEventsForTransition(input) {
+  const nextStatus = normalizeStatusValue(input.order.status);
+  if (input.previousStatus === nextStatus) return;
+  if (isConfirmedOrderStatus(nextStatus)) {
+    void emitOrderLifecycleEvent({
+      eventId: "sales.order.confirmed",
+      order: input.order,
+      previousStatus: input.previousStatus
+    }).catch((err) => {
+      logger.warn("order lifecycle event emit failed", {
+        eventId: "sales.order.confirmed",
+        orderId: input.order.id,
+        err
+      });
+    });
+  }
+  if (isCancelledOrderStatus(nextStatus)) {
+    void emitOrderLifecycleEvent({
+      eventId: "sales.order.cancelled",
+      order: input.order,
+      previousStatus: input.previousStatus
+    }).catch((err) => {
+      logger.warn("order lifecycle event emit failed", {
+        eventId: "sales.order.cancelled",
+        orderId: input.order.id,
+        err
+      });
+    });
+  }
+}
 function resolveNoteAuthorFromAuth(auth) {
   if (!auth || auth.isApiKey) return null;
   const sub = typeof auth.sub === "string" ? auth.sub.trim() : "";
@@ -3886,6 +3934,7 @@ const updateOrderCommand = {
       ],
       { transaction: true }
     );
+    emitOrderLifecycleEventsForTransition({ order, previousStatus });
     if (statusChangeNote) {
       const dataEngine = ctx.container.resolve("dataEngine");
       await emitCrudSideEffects({
@@ -4244,6 +4293,10 @@ const createOrderCommand = {
       ctx.auth?.tenantId ?? null,
       "created"
     );
+    emitOrderLifecycleEventsForTransition({
+      order,
+      previousStatus: null
+    });
     return { orderId: order.id };
   },
   captureAfter: async (_input, result, ctx) => {