@open-mercato/core 0.6.7-develop.6751.1.ac823a3d26 → 0.6.7-develop.6758.1.697eade236

package/src/modules/attachments/api/route.ts

@@ -37,7 +37,9 @@ import {
   sanitizeUploadedFileName,
 } from '../lib/security'
 import {
+  isMultipartUploadLimitError,
   isMultipartRequestWithinUploadLimit,
+  parseMultipartFormDataWithinUploadLimit,
   resolveAttachmentMaxBytes,
   willExceedAttachmentTenantQuota,
 } from '../lib/upload-limits'
@@ -283,10 +285,22 @@ export async function POST(req: Request) {
     return NextResponse.json({ error: 'Expected multipart/form-data' }, { status: 400 })
   }
   if (!isMultipartRequestWithinUploadLimit(req.headers.get('content-length'))) {
-    return NextResponse.json({ error: 'Attachment exceeds the maximum upload size.' }, { status: 413 })
+    return NextResponse.json({
+      error: t('attachments.errors.maxUploadSize', 'Attachment exceeds the maximum upload size.'),
+    }, { status: 413 })
   }
 
-  const form = await req.formData()
+  let form: FormData
+  try {
+    form = await parseMultipartFormDataWithinUploadLimit(req)
+  } catch (error) {
+    if (isMultipartUploadLimitError(error)) {
+      return NextResponse.json({
+        error: t('attachments.errors.maxUploadSize', 'Attachment exceeds the maximum upload size.'),
+      }, { status: 413 })
+    }
+    throw error
+  }
   const formPayload = buildFormPayload(form)
   const customFieldValues = splitCustomFieldPayload(formPayload).custom
   const entityId = String(form.get('entityId') || '')

package/src/modules/attachments/lib/upload-limits.ts

@@ -46,6 +46,41 @@ export function isMultipartRequestWithinUploadLimit(contentLengthHeader: string
   return contentLength <= (resolveDefaultAttachmentMaxUploadBytes() + MULTIPART_CONTENT_LENGTH_OVERHEAD_BYTES)
 }
 
+export class MultipartUploadLimitError extends Error {
+  constructor() {
+    super('Multipart request exceeds the maximum upload size.')
+    this.name = 'MultipartUploadLimitError'
+  }
+}
+
+export function isMultipartUploadLimitError(error: unknown): error is MultipartUploadLimitError {
+  return error instanceof MultipartUploadLimitError
+}
+
+export async function parseMultipartFormDataWithinUploadLimit(request: Request): Promise<FormData> {
+  if (!isMultipartRequestWithinUploadLimit(request.headers.get('content-length'))) {
+    throw new MultipartUploadLimitError()
+  }
+
+  if (!request.body) return request.formData()
+
+  const maxBytes = resolveDefaultAttachmentMaxUploadBytes() + MULTIPART_CONTENT_LENGTH_OVERHEAD_BYTES
+  let consumedBytes = 0
+  const boundedBody = request.body.pipeThrough(new TransformStream<Uint8Array, Uint8Array>({
+    transform(chunk, controller) {
+      consumedBytes += chunk.byteLength
+      if (consumedBytes > maxBytes) {
+        controller.error(new MultipartUploadLimitError())
+        return
+      }
+      controller.enqueue(chunk)
+    },
+  }))
+  const contentType = request.headers.get('content-type')
+  const headers = contentType ? { 'content-type': contentType } : undefined
+  return new Response(boundedBody, { headers }).formData()
+}
+
 export function willExceedAttachmentTenantQuota(currentUsageBytes: number, incomingFileBytes: number): boolean {
   return (currentUsageBytes + incomingFileBytes) > resolveAttachmentTenantQuotaBytes()
 }

package/src/modules/communication_channels/api/post/test-seed/route.ts

@@ -5,7 +5,14 @@ import { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'
 import { createRequestContainer } from '@open-mercato/shared/lib/di/container'
 import type { CommandBus } from '@open-mercato/shared/lib/commands'
 import { readJsonSafe } from '@open-mercato/shared/lib/http/readJsonSafe'
-import { ChannelThreadMapping, ExternalConversation, MessageChannelLink } from '../../../data/entities'
+import { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'
+import {
+  ChannelThreadMapping,
+  CommunicationChannel,
+  ExternalConversation,
+  MessageChannelLink,
+} from '../../../data/entities'
+import { ChannelAccessDeniedError, assertCanManageChannel } from '../../../lib/access-control'
 import {
   COMMUNICATION_CHANNELS_CONNECT_CREDENTIAL_CHANNEL_COMMAND_ID,
   type ConnectCredentialChannelInput,
@@ -35,6 +42,13 @@ import {
  *     customers link-channel-message subscriber runs against real Postgres. Enables
  *     the inbound auto-link tests (TC-CRM-EMAIL-002..005).
  */
+type RbacServiceLike = {
+  loadAcl: (
+    userId: string,
+    scope: { tenantId: string | null; organizationId: string | null },
+  ) => Promise<{ isSuperAdmin: boolean; features: string[]; organizations: string[] | null }>
+}
+
 export const metadata = {
   path: '/communication_channels/test-seed',
   POST: {
@@ -164,6 +178,55 @@ export async function POST(req: Request): Promise<Response> {
   const em = (container.resolve('em') as EntityManager).fork()
   const providerKey = body.providerKey ?? TEST_SEED_PROVIDER_KEY
 
+  // `channelId` is caller-supplied, so confirm it names a channel this tenant/org
+  // actually owns before seeding rows that reference it. Mirrors the ownership
+  // lookup every other per-channel route performs (see channels/[id]/test-send).
+  const ownedChannel = await findOneWithDecryption(
+    em,
+    CommunicationChannel,
+    {
+      id: body.channelId,
+      tenantId,
+      organizationId,
+      deletedAt: null,
+    },
+    undefined,
+    { tenantId, organizationId },
+  )
+  if (!ownedChannel) {
+    return NextResponse.json({ error: 'Channel not found' }, { status: 404 })
+  }
+
+  // Tenant/org scope alone does not authorize: `connect_user_channel` is granted
+  // broadly, so a same-tenant caller could otherwise seed against a colleague's
+  // personal mailbox. Enforce the module's owner-only contract — personal
+  // channels are owner-restricted, shared channels need `manage`.
+  let userFeatures: string[] = []
+  try {
+    const rbac = container.resolve('rbacService') as RbacServiceLike
+    const acl = await rbac.loadAcl(userId, { tenantId, organizationId })
+    userFeatures = acl?.isSuperAdmin ? ['*'] : Array.isArray(acl?.features) ? acl.features : []
+  } catch {
+    userFeatures = []
+  }
+  try {
+    assertCanManageChannel(
+      { userId: ownedChannel.userId },
+      userId,
+      userFeatures,
+      'communication_channels.manage',
+    )
+  } catch (err) {
+    if (err instanceof ChannelAccessDeniedError) {
+      return NextResponse.json({ error: 'Channel not found' }, { status: 404 })
+    }
+    const status = (err as { statusCode?: number }).statusCode ?? 403
+    return NextResponse.json(
+      { error: err instanceof Error ? err.message : 'Access denied' },
+      { status },
+    )
+  }
+
   // A MessageChannelLink requires a non-null external_conversation_id (FK) and
   // message_id. Create a synthetic conversation + (optionally threaded) message
   // so the link is shaped like a real inbound row the subscriber can consume.
@@ -283,7 +346,11 @@ export const openApi = {
       responses: [
         { status: 201, description: 'Channel seeded / inbound message emitted' },
         { status: 401, description: 'Unauthorized' },
-        { status: 404, description: 'Test channel seeding disabled (production default)' },
+        {
+          status: 404,
+          description:
+            'Test channel seeding disabled (production default), or the requested channel does not belong to the caller',
+        },
         { status: 422, description: 'Invalid request body' },
         { status: 500, description: 'Seed failed' },
       ],

package/src/modules/currencies/di.ts

@@ -4,6 +4,7 @@ import { RateFetchingService } from './services/rateFetchingService'
 import { ExchangeRateService } from './services/exchangeRateService'
 import { NBPProvider } from './services/providers/nbp'
 import { RaiffeisenPolandProvider } from './services/providers/raiffeisen'
+import { BaseCurrencyService } from './services/baseCurrencyService'
 
 export function register(container: AppContainer) {
   container.register({
@@ -26,6 +27,8 @@ export function register(container: AppContainer) {
         return new ExchangeRateService(em, rateFetchingService)
       },
     },
+    baseCurrencyService: {
+      resolve: (c) => new BaseCurrencyService(c.resolve<EntityManager>('em')),
+    },
   })
 }
-

package/src/modules/currencies/services/baseCurrencyService.ts

@@ -0,0 +1,59 @@
+import type { EntityManager } from '@mikro-orm/core'
+import { createLogger } from '@open-mercato/shared/lib/logger'
+
+const logger = createLogger('currencies').child({ component: 'base-currency-service' })
+
+export type BaseCurrencyResolution =
+  | { status: 'resolved'; code: string }
+  | { status: 'missing' }
+  | { status: 'ambiguous' }
+  | { status: 'unavailable' }
+
+export type BaseCurrencyScope = {
+  tenantId: string
+  organizationIds: string[]
+}
+
+export class BaseCurrencyService {
+  constructor(private readonly em: EntityManager) {}
+
+  async resolveBaseCurrency(scope: BaseCurrencyScope): Promise<BaseCurrencyResolution> {
+    const organizationIds = [...new Set(scope.organizationIds)]
+    if (organizationIds.length === 0) return { status: 'ambiguous' }
+
+    let rows: Array<Record<string, unknown>>
+    try {
+      const result = await this.em.getConnection().execute(
+        'SELECT organization_id, code FROM currencies WHERE tenant_id = ? AND organization_id = ANY(?::uuid[]) AND is_base = true AND deleted_at IS NULL',
+        [scope.tenantId, `{${organizationIds.join(',')}}`],
+      )
+      rows = (Array.isArray(result) ? result : []) as Array<Record<string, unknown>>
+    } catch (err) {
+      logger.warn('Base currency lookup unavailable', { err })
+      return { status: 'unavailable' }
+    }
+
+    const expectedOrganizations = new Set(organizationIds)
+    const resolvedOrganizations = new Set<string>()
+    const codes = new Set<string>()
+
+    for (const row of rows) {
+      const organizationId = typeof row.organization_id === 'string' ? row.organization_id : ''
+      const code = typeof row.code === 'string' ? row.code.trim().toUpperCase() : ''
+      if (
+        !expectedOrganizations.has(organizationId)
+        || resolvedOrganizations.has(organizationId)
+        || !code
+      ) {
+        return { status: 'ambiguous' }
+      }
+      resolvedOrganizations.add(organizationId)
+      codes.add(code)
+    }
+
+    if (resolvedOrganizations.size !== expectedOrganizations.size) return { status: 'missing' }
+    if (codes.size !== 1) return { status: 'ambiguous' }
+    const [code] = codes
+    return code ? { status: 'resolved', code } : { status: 'ambiguous' }
+  }
+}

package/src/modules/customers/analytics.ts

@@ -26,10 +26,12 @@ export const analyticsConfig: AnalyticsModuleConfig = {
         tableName: 'customer_deals',
         dateField: 'created_at',
         defaultScopeFields: ['tenant_id', 'organization_id'],
+        currencyField: 'valueCurrency',
       },
       fieldMappings: {
         id: { dbColumn: 'id', type: 'uuid' },
         valueAmount: { dbColumn: 'value_amount', type: 'numeric' },
+        valueCurrency: { dbColumn: 'value_currency', type: 'text' },
         status: { dbColumn: 'status', type: 'text' },
         closureOutcome: { dbColumn: 'closure_outcome', type: 'text' },
         pipelineStage: { dbColumn: 'pipeline_stage', type: 'text' },

package/src/modules/customers/api/deals/aggregate/route.ts

@@ -6,6 +6,7 @@ import { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'
 import { createRequestContainer } from '@open-mercato/shared/lib/di/container'
 import { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'
 import { resolveDealsOrganizationIds } from '../../../lib/dealsOrganizationScope'
+import { resolveOptionalBaseCurrencyCode } from '../../../lib/optionalBaseCurrency'
 import type { ExchangeRateService } from '@open-mercato/core/modules/currencies/services/exchangeRateService'
 import { parseBooleanFromUnknown } from '@open-mercato/shared/lib/boolean'
 import { escapeLikePattern } from '@open-mercato/shared/lib/db/escapeLikePattern'
@@ -181,11 +182,11 @@ export async function GET(req: Request) {
   // avoids the per-row decryption cost that would be paid by `findWithDecryption` for an
   // aggregate that never reads `title`/`description`. The search path still relies on
   // the token index above to find matching deals when encrypted columns are involved.
-  const baseCurrency = await em.getConnection().execute<Array<{ code: string }>>(
-    `SELECT code FROM currencies WHERE tenant_id = ? AND organization_id = ? AND is_base = true AND deleted_at IS NULL LIMIT 1`,
-    [effectiveTenantId, orgFilterIds[0]],
+  const baseCurrencyCode = await resolveOptionalBaseCurrencyCode(
+    container,
+    effectiveTenantId,
+    orgFilterIds[0],
   )
-  const baseCurrencyCode = baseCurrency[0]?.code ?? null
 
   // Build WHERE clause shared between count + sum queries
   const orgPlaceholders = orgFilterIds.map(() => '?').join(',')

package/src/modules/customers/api/deals/summary/route.ts

@@ -9,6 +9,7 @@ import type { ExchangeRateService, RateResult } from '@open-mercato/core/modules
 import type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'
 import { fetchStuckDealIds } from '../../../lib/stuckDeals'
 import { resolveDealsOrganizationIds } from '../../../lib/dealsOrganizationScope'
+import { resolveOptionalBaseCurrencyCode } from '../../../lib/optionalBaseCurrency'
 import {
   computeDelta,
   convertSumsToBase,
@@ -186,11 +187,11 @@ export async function GET(req: Request) {
 
   const connection = em.getConnection()
 
-  const baseCurrency: Array<{ code: string }> = await connection.execute<Array<{ code: string }>>(
-    `SELECT code FROM currencies WHERE tenant_id = ? AND organization_id = ? AND is_base = true AND deleted_at IS NULL LIMIT 1`,
-    [effectiveTenantId, orgFilterIds[0]],
+  const baseCurrencyCode = await resolveOptionalBaseCurrencyCode(
+    container,
+    effectiveTenantId,
+    orgFilterIds[0],
   )
-  const baseCurrencyCode = baseCurrency[0]?.code ?? null
 
   const orgPlaceholders = orgFilterIds.map(() => '?').join(',')
   const scopeWhere = `tenant_id = ? AND organization_id IN (${orgPlaceholders}) AND deleted_at IS NULL`

package/src/modules/customers/lib/optionalBaseCurrency.ts

@@ -0,0 +1,34 @@
+import type { AppContainer } from '@open-mercato/shared/lib/di/container'
+
+type BaseCurrencyResolution =
+  | { status: 'resolved'; code: string }
+  | { status: 'missing' | 'ambiguous' | 'unavailable' }
+
+type BaseCurrencyResolver = {
+  resolveBaseCurrency(scope: {
+    tenantId: string
+    organizationIds: string[]
+  }): Promise<BaseCurrencyResolution>
+}
+
+export async function resolveOptionalBaseCurrencyCode(
+  container: AppContainer,
+  tenantId: string,
+  organizationId: string | undefined,
+): Promise<string | null> {
+  if (!organizationId) return null
+
+  let resolver: BaseCurrencyResolver
+  try {
+    resolver = container.resolve<BaseCurrencyResolver>('baseCurrencyService')
+  } catch {
+    return null
+  }
+
+  try {
+    const result = await resolver.resolveBaseCurrency({ tenantId, organizationIds: [organizationId] })
+    return result.status === 'resolved' ? result.code : null
+  } catch {
+    return null
+  }
+}

package/src/modules/dashboards/api/widgets/data/batch/route.ts

@@ -18,6 +18,7 @@ import type { OpenApiMethodDoc, OpenApiRouteDoc } from '@open-mercato/shared/lib
 import { dashboardsTag, dashboardsErrorSchema } from '../../../openapi'
 import { widgetDataRequestSchema, widgetDataResponseSchema } from '../schema'
 import { createLogger } from '@open-mercato/shared/lib/logger'
+import { resolveOptionalBaseCurrencyResolver } from '../../../../lib/optionalBaseCurrency'
 
 const logger = createLogger('dashboards').child({ component: 'widgets-data-batch' })
 
@@ -104,7 +105,13 @@ export async function POST(req: Request) {
   })()
 
   const cache = container.resolve<CacheStrategy>('cache')
-  const service = createWidgetDataService(em, { tenantId, organizationIds }, analyticsRegistry, cache)
+  const service = createWidgetDataService(
+    em,
+    { tenantId, organizationIds },
+    analyticsRegistry,
+    cache,
+    resolveOptionalBaseCurrencyResolver(container),
+  )
 
   const rbacService = container.resolve<{
     userHasAllFeatures: (

package/src/modules/dashboards/api/widgets/data/route.ts

@@ -17,6 +17,7 @@ import type { OpenApiMethodDoc, OpenApiRouteDoc } from '@open-mercato/shared/lib
 import { dashboardsTag, dashboardsErrorSchema } from '../../openapi'
 import { widgetDataRequestSchema, widgetDataResponseSchema } from './schema'
 import { createLogger } from '@open-mercato/shared/lib/logger'
+import { resolveOptionalBaseCurrencyResolver } from '../../../lib/optionalBaseCurrency'
 
 const logger = createLogger('dashboards').child({ component: 'widgets-data' })
 
@@ -123,7 +124,13 @@ export async function POST(req: Request) {
 
   try {
     const cache = container.resolve<CacheStrategy>('cache')
-    const service = createWidgetDataService(em, { tenantId, organizationIds }, analyticsRegistry, cache)
+    const service = createWidgetDataService(
+      em,
+      { tenantId, organizationIds },
+      analyticsRegistry,
+      cache,
+      resolveOptionalBaseCurrencyResolver(container),
+    )
     const result = await service.fetchWidgetData(requestData)
     return NextResponse.json(result)
   } catch (err) {

package/src/modules/dashboards/api/widgets/data/schema.ts

@@ -86,5 +86,6 @@ export const widgetDataResponseSchema = z.object({
   metadata: z.object({
     fetchedAt: z.string(),
     recordCount: z.number(),
+    currency: z.string().nullable().optional(),
   }),
 })

package/src/modules/dashboards/components/UnlabelledAmountNotice.tsx

@@ -0,0 +1,43 @@
+"use client"
+
+import * as React from 'react'
+import { Info } from 'lucide-react'
+import { useT } from '@open-mercato/shared/lib/i18n/context'
+
+export type UnlabelledAmountNoticeProps = {
+  currency: string | null | undefined
+  loading?: boolean
+  error?: string | null
+  className?: string
+}
+
+/**
+ * Explains why a money widget renders bare numbers. Without it a missing currency label
+ * is indistinguishable from a broken widget, which is the gap #4676 closes: the amounts
+ * are unlabelled on purpose because the service could not determine one reliably.
+ */
+export const UnlabelledAmountNotice: React.FC<UnlabelledAmountNoticeProps> = ({
+  currency,
+  loading,
+  error,
+  className,
+}) => {
+  const t = useT()
+
+  if (loading || error || currency) return null
+
+  return (
+    <p
+      className={`mt-2 flex items-center gap-1 text-xs text-muted-foreground${className ? ` ${className}` : ''}`}
+      title={t(
+        'dashboards.analytics.currency.unlabelledHint',
+        'A reliable currency could not be determined, so the amount is shown without one.',
+      )}
+    >
+      <Info className="size-3 shrink-0" aria-hidden="true" />
+      {t('dashboards.analytics.currency.unlabelled', 'Amounts shown without a currency')}
+    </p>
+  )
+}
+
+export default UnlabelledAmountNotice

package/src/modules/dashboards/i18n/de.json

@@ -15,6 +15,8 @@
   "dashboards.analytics.comparison.vsWeekBefore": "vs Woche davor",
   "dashboards.analytics.comparison.vsYearBefore": "vs Jahr davor",
   "dashboards.analytics.comparison.vsYesterday": "vs gestern",
+  "dashboards.analytics.currency.unlabelled": "Beträge ohne Währungsangabe",
+  "dashboards.analytics.currency.unlabelledHint": "Eine verlässliche Währung konnte nicht ermittelt werden, daher wird der Betrag ohne Währungsangabe angezeigt.",
   "dashboards.analytics.dateRange.last30Days": "Letzte 30 Tage",
   "dashboards.analytics.dateRange.last7Days": "Letzte 7 Tage",
   "dashboards.analytics.dateRange.last90Days": "Letzte 90 Tage",

package/src/modules/dashboards/i18n/en.json

@@ -15,6 +15,8 @@
   "dashboards.analytics.comparison.vsWeekBefore": "vs week before",
   "dashboards.analytics.comparison.vsYearBefore": "vs year before",
   "dashboards.analytics.comparison.vsYesterday": "vs yesterday",
+  "dashboards.analytics.currency.unlabelled": "Amounts shown without a currency",
+  "dashboards.analytics.currency.unlabelledHint": "A reliable currency could not be determined, so the amount is shown without one.",
   "dashboards.analytics.dateRange.last30Days": "Last 30 Days",
   "dashboards.analytics.dateRange.last7Days": "Last 7 Days",
   "dashboards.analytics.dateRange.last90Days": "Last 90 Days",

package/src/modules/dashboards/i18n/es.json

@@ -15,6 +15,8 @@
   "dashboards.analytics.comparison.vsWeekBefore": "vs semana anterior",
   "dashboards.analytics.comparison.vsYearBefore": "vs año anterior",
   "dashboards.analytics.comparison.vsYesterday": "vs ayer",
+  "dashboards.analytics.currency.unlabelled": "Importes mostrados sin moneda",
+  "dashboards.analytics.currency.unlabelledHint": "No se pudo determinar una moneda fiable, por lo que el importe se muestra sin moneda.",
   "dashboards.analytics.dateRange.last30Days": "Últimos 30 días",
   "dashboards.analytics.dateRange.last7Days": "Últimos 7 días",
   "dashboards.analytics.dateRange.last90Days": "Últimos 90 días",

package/src/modules/dashboards/i18n/pl.json

@@ -15,6 +15,8 @@
   "dashboards.analytics.comparison.vsWeekBefore": "vs tydzien wczesniej",
   "dashboards.analytics.comparison.vsYearBefore": "vs rok wczesniej",
   "dashboards.analytics.comparison.vsYesterday": "vs wczoraj",
+  "dashboards.analytics.currency.unlabelled": "Kwoty pokazane bez waluty",
+  "dashboards.analytics.currency.unlabelledHint": "Nie udało się wiarygodnie ustalić waluty, dlatego kwota jest wyświetlana bez jej oznaczenia.",
   "dashboards.analytics.dateRange.last30Days": "Ostatnie 30 dni",
   "dashboards.analytics.dateRange.last7Days": "Ostatnie 7 dni",
   "dashboards.analytics.dateRange.last90Days": "Ostatnie 90 dni",

package/src/modules/dashboards/lib/aggregations.ts

@@ -224,6 +224,41 @@ function resolveTableName(config: EntityTypeConfig): string {
   return config.schema ? `"${config.schema}"."${config.tableName}"` : `"${config.tableName}"`
 }
 
+export type BuildDistinctCurrencyQueryOptions = Pick<
+  BuildAggregationQueryOptions,
+  'entityType' | 'dateRange' | 'filters' | 'scope' | 'registry'
+>
+
+/**
+ * Builds the query that reads the distinct per-row currencies of the rows an aggregation
+ * would sum, over exactly the same tenant/organization scope, date range and filters.
+ * Returns `null` when the entity declares no `currencyField`, which means its amounts are
+ * not per-row denominated and there is nothing to verify (#4676).
+ */
+export function buildDistinctCurrencyQuery(
+  options: BuildDistinctCurrencyQueryOptions,
+): AggregationQuery | null {
+  const { registry } = options
+  const config = registry.getEntityTypeConfig(options.entityType)
+  if (!config?.currencyField) return null
+
+  const currencyMapping = registry.getFieldMapping(options.entityType, config.currencyField)
+  if (!currencyMapping || !isSafeIdentifier(currencyMapping.dbColumn)) return null
+
+  const where = buildWhereClause(options)
+  const normalizedCurrencyExpression = `UPPER(NULLIF(BTRIM(${currencyMapping.dbColumn}), ''))`
+  const sql = [
+    `SELECT DISTINCT ${normalizedCurrencyExpression} AS code`,
+    `FROM ${resolveTableName(config)}`,
+    where.clause,
+    'LIMIT 2',
+  ]
+    .filter(Boolean)
+    .join(' ')
+
+  return { sql, params: where.params }
+}
+
 export function buildAggregationQuery(options: BuildAggregationQueryOptions): AggregationQuery | null {
   const { registry } = options
   const config = registry.getEntityTypeConfig(options.entityType)