@open-mercato/core 0.6.7-develop.6862.1.c11a64ce0a → 0.6.7

package/dist/modules/sales/lib/historyHelpers.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/sales/lib/historyHelpers.ts"],
-  "sourcesContent": ["import type { ActionLog } from '@open-mercato/core/modules/audit_logs/data/entities'\nimport { isRecord } from '@open-mercato/shared/lib/utils'\nimport type { SalesNote } from '../data/entities'\n\nexport type HistoryEntry = {\n  id: string\n  occurredAt: string\n  kind: 'status' | 'action' | 'comment'\n  action: string\n  actor: { id: string | null; label: string }\n  source: 'action_log' | 'note'\n  metadata?: {\n    statusFrom?: string | null\n    statusTo?: string | null\n    documentKind?: 'order' | 'quote'\n    commandId?: string\n    changedFields?: string[]\n  }\n}\n\nconst DOCUMENT_LINE_UPSERT_COMMANDS = new Set([\n  'sales.orders.lines.upsert',\n  'sales.quotes.lines.upsert',\n])\n\nconst USER_EDITABLE_LINE_FIELDS = [\n  'productId',\n  'productVariantId',\n  'name',\n  'description',\n  'comment',\n  'quantity',\n  'quantityUnit',\n  'currencyCode',\n  'unitPriceNet',\n  'unitPriceGross',\n  'discountAmount',\n  'discountPercent',\n  'taxRate',\n  'configuration',\n  'promotionCode',\n  'customFields',\n  'statusEntryId',\n] as const\n\nfunction readSnapshotLines(snapshot: unknown): Array<Record<string, unknown>> {\n  if (!isRecord(snapshot) || !Array.isArray(snapshot.lines)) return []\n  return snapshot.lines.filter(isRecord)\n}\n\nfunction historyValuesEqual(left: unknown, right: unknown): boolean {\n  if (Object.is(left, right)) return true\n  try {\n    return JSON.stringify(left) === JSON.stringify(right)\n  } catch {\n    return false\n  }\n}\n\n/**\n * Derives a concise, user-editable field list for document line updates.\n * Calculated totals and normalized UoM fields are intentionally excluded so\n * the timeline describes the user's edit rather than downstream recalculation.\n */\nfunction deriveDocumentLineChangedFields(log: ActionLog): string[] {\n  if (!DOCUMENT_LINE_UPSERT_COMMANDS.has(log.commandId)) return []\n\n  const beforeById = new Map(\n    readSnapshotLines(log.snapshotBefore)\n      .filter((line) => typeof line.id === 'string')\n      .map((line) => [line.id as string, line]),\n  )\n  const afterLines = readSnapshotLines(log.snapshotAfter)\n\n  const changedFields = new Set<string>()\n  for (const afterLine of afterLines) {\n    if (typeof afterLine.id !== 'string') continue\n    const beforeLine = beforeById.get(afterLine.id)\n    if (!beforeLine) continue\n\n    for (const field of USER_EDITABLE_LINE_FIELDS) {\n      if (!historyValuesEqual(beforeLine[field], afterLine[field])) {\n        changedFields.add(field)\n      }\n    }\n  }\n\n  return USER_EDITABLE_LINE_FIELDS.filter((field) => changedFields.has(field))\n}\n\nexport function deriveHistoryChangedFields(log: ActionLog): string[] {\n  if (DOCUMENT_LINE_UPSERT_COMMANDS.has(log.commandId)) {\n    return deriveDocumentLineChangedFields(log)\n  }\n  const persisted = Array.isArray(log.changedFields)\n    ? log.changedFields.filter((field): field is string => typeof field === 'string' && field.trim().length > 0)\n    : []\n  return Array.from(new Set(persisted))\n}\n\nfunction extractStatusFromSnapshot(snapshot: unknown): string | null {\n  if (!snapshot || typeof snapshot !== 'object') return null\n  const s = snapshot as Record<string, unknown>\n  // Dedicated logStatusChange entries: { status: \"value\" }\n  if (typeof s.status === 'string') return s.status\n  // Regular update snapshots: { order: { status, fulfillment_status, payment_status, ... } }\n  if (s.order && typeof s.order === 'object') {\n    const order = s.order as Record<string, unknown>\n    const orderStatus = typeof order.status === 'string' ? order.status : null\n    const fulfillmentStatus = typeof order.fulfillment_status === 'string' ? order.fulfillment_status : null\n    const paymentStatus = typeof order.payment_status === 'string' ? order.payment_status : null\n    return orderStatus ?? fulfillmentStatus ?? paymentStatus ?? null\n  }\n  // Regular update snapshots: { quote: { status: \"value\", ... } }\n  if (s.quote && typeof s.quote === 'object') {\n    const quote = s.quote as Record<string, unknown>\n    if (typeof quote.status === 'string') return quote.status\n  }\n  return null\n}\n\nexport function detectStatusChange(log: ActionLog): {\n  statusFrom: string | null\n  statusTo: string | null\n} | null {\n  const after = extractStatusFromSnapshot(log.snapshotAfter)\n  const before = log.snapshotBefore\n    ? extractStatusFromSnapshot(log.snapshotBefore)\n    : null\n  // Creation (no snapshotBefore): always one status entry (initial value or \"created\")\n  if (!log.snapshotBefore) {\n    return { statusFrom: null, statusTo: after ?? null }\n  }\n  if (before !== after && (before !== null || after !== null)) {\n    return { statusFrom: before, statusTo: after ?? null }\n  }\n  return null\n}\n\n/**\n * Normalizes ActionLog to HistoryEntry (status/action/comment).\n */\nexport function normalizeActionLogToHistoryEntry(\n  log: ActionLog,\n  kind: 'order' | 'quote',\n  displayUsers?: Record<string, string>,\n): HistoryEntry {\n  const statusChange = detectStatusChange(log)\n  const changedFields = deriveHistoryChangedFields(log)\n  let entryKind: 'status' | 'action' = 'action'\n  let action = log.actionLabel || log.commandId\n  let metadata: HistoryEntry['metadata'] = {\n    documentKind: kind,\n    commandId: log.commandId,\n    ...(changedFields.length > 0 ? { changedFields } : {}),\n  }\n  if (statusChange) {\n    const hasStatusValues = statusChange.statusFrom != null || statusChange.statusTo != null\n    if (hasStatusValues) {\n      entryKind = 'status'\n      action = statusChange.statusTo ?? 'unknown'\n      metadata = { ...metadata, statusFrom: statusChange.statusFrom, statusTo: statusChange.statusTo }\n    }\n    // When both are null (e.g. Create return/shipment/payment with non-document snapshot), keep as action and use actionLabel\n  }\n  const actorLabel = log.actorUserId\n    ? (displayUsers?.[log.actorUserId] ?? log.actorUserId)\n    : 'system'\n  return {\n    id: log.id,\n    occurredAt: log.createdAt.toISOString(),\n    kind: entryKind,\n    action,\n    actor: { id: log.actorUserId, label: actorLabel },\n    source: 'action_log',\n    metadata,\n  }\n}\n\nexport function normalizeNoteToHistoryEntry(\n  note: SalesNote,\n  kind: 'order' | 'quote',\n  displayUsers?: Record<string, string>,\n): HistoryEntry {\n  const actorLabel = note.authorUserId\n    ? (displayUsers?.[note.authorUserId] ?? note.authorUserId)\n    : 'system'\n  return {\n    id: note.id,\n    occurredAt: note.createdAt.toISOString(),\n    kind: 'comment',\n    action: note.body,\n    actor: { id: note.authorUserId ?? null, label: actorLabel },\n    source: 'note',\n    metadata: { documentKind: kind },\n  }\n}\n\nexport type HistoryBuilderInput = {\n  actionLogs: ActionLog[]\n  notes?: SalesNote[]\n  kind: 'order' | 'quote'\n  displayUsers?: Record<string, string>\n}\n\nexport function buildHistoryEntries(input: HistoryBuilderInput): HistoryEntry[] {\n  const logEntries = input.actionLogs.map((log) =>\n    normalizeActionLogToHistoryEntry(log, input.kind, input.displayUsers)\n  )\n  const noteEntries = (input.notes ?? []).map((note) =>\n    normalizeNoteToHistoryEntry(note, input.kind, input.displayUsers)\n  )\n  return [...logEntries, ...noteEntries].sort(\n    (a, b) => new Date(b.occurredAt).getTime() - new Date(a.occurredAt).getTime()\n  )\n}\n"],
-  "mappings": "AACA,SAAS,gBAAgB;AAmBzB,MAAM,gCAAgC,oBAAI,IAAI;AAAA,EAC5C;AAAA,EACA;AACF,CAAC;AAED,MAAM,4BAA4B;AAAA,EAChC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEA,SAAS,kBAAkB,UAAmD;AAC5E,MAAI,CAAC,SAAS,QAAQ,KAAK,CAAC,MAAM,QAAQ,SAAS,KAAK,EAAG,QAAO,CAAC;AACnE,SAAO,SAAS,MAAM,OAAO,QAAQ;AACvC;AAEA,SAAS,mBAAmB,MAAe,OAAyB;AAClE,MAAI,OAAO,GAAG,MAAM,KAAK,EAAG,QAAO;AACnC,MAAI;AACF,WAAO,KAAK,UAAU,IAAI,MAAM,KAAK,UAAU,KAAK;AAAA,EACtD,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAOA,SAAS,gCAAgC,KAA0B;AACjE,MAAI,CAAC,8BAA8B,IAAI,IAAI,SAAS,EAAG,QAAO,CAAC;AAE/D,QAAM,aAAa,IAAI;AAAA,IACrB,kBAAkB,IAAI,cAAc,EACjC,OAAO,CAAC,SAAS,OAAO,KAAK,OAAO,QAAQ,EAC5C,IAAI,CAAC,SAAS,CAAC,KAAK,IAAc,IAAI,CAAC;AAAA,EAC5C;AACA,QAAM,aAAa,kBAAkB,IAAI,aAAa;AAEtD,QAAM,gBAAgB,oBAAI,IAAY;AACtC,aAAW,aAAa,YAAY;AAClC,QAAI,OAAO,UAAU,OAAO,SAAU;AACtC,UAAM,aAAa,WAAW,IAAI,UAAU,EAAE;AAC9C,QAAI,CAAC,WAAY;AAEjB,eAAW,SAAS,2BAA2B;AAC7C,UAAI,CAAC,mBAAmB,WAAW,KAAK,GAAG,UAAU,KAAK,CAAC,GAAG;AAC5D,sBAAc,IAAI,KAAK;AAAA,MACzB;AAAA,IACF;AAAA,EACF;AAEA,SAAO,0BAA0B,OAAO,CAAC,UAAU,cAAc,IAAI,KAAK,CAAC;AAC7E;AAEO,SAAS,2BAA2B,KAA0B;AACnE,MAAI,8BAA8B,IAAI,IAAI,SAAS,GAAG;AACpD,WAAO,gCAAgC,GAAG;AAAA,EAC5C;AACA,QAAM,YAAY,MAAM,QAAQ,IAAI,aAAa,IAC7C,IAAI,cAAc,OAAO,CAAC,UAA2B,OAAO,UAAU,YAAY,MAAM,KAAK,EAAE,SAAS,CAAC,IACzG,CAAC;AACL,SAAO,MAAM,KAAK,IAAI,IAAI,SAAS,CAAC;AACtC;AAEA,SAAS,0BAA0B,UAAkC;AACnE,MAAI,CAAC,YAAY,OAAO,aAAa,SAAU,QAAO;AACtD,QAAM,IAAI;AAEV,MAAI,OAAO,EAAE,WAAW,SAAU,QAAO,EAAE;AAE3C,MAAI,EAAE,SAAS,OAAO,EAAE,UAAU,UAAU;AAC1C,UAAM,QAAQ,EAAE;AAChB,UAAM,cAAc,OAAO,MAAM,WAAW,WAAW,MAAM,SAAS;AACtE,UAAM,oBAAoB,OAAO,MAAM,uBAAuB,WAAW,MAAM,qBAAqB;AACpG,UAAM,gBAAgB,OAAO,MAAM,mBAAmB,WAAW,MAAM,iBAAiB;AACxF,WAAO,eAAe,qBAAqB,iBAAiB;AAAA,EAC9D;AAEA,MAAI,EAAE,SAAS,OAAO,EAAE,UAAU,UAAU;AAC1C,UAAM,QAAQ,EAAE;AAChB,QAAI,OAAO,MAAM,WAAW,SAAU,QAAO,MAAM;AAAA,EACrD;AACA,SAAO;AACT;AAEO,SAAS,mBAAmB,KAG1B;AACP,QAAM,QAAQ,0BAA0B,IAAI,aAAa;AACzD,QAAM,SAAS,IAAI,iBACf,0BAA0B,IAAI,cAAc,IAC5C;AAEJ,MAAI,CAAC,IAAI,gBAAgB;AACvB,WAAO,EAAE,YAAY,MAAM,UAAU,SAAS,KAAK;AAAA,EACrD;AACA,MAAI,WAAW,UAAU,WAAW,QAAQ,UAAU,OAAO;AAC3D,WAAO,EAAE,YAAY,QAAQ,UAAU,SAAS,KAAK;AAAA,EACvD;AACA,SAAO;AACT;AAKO,SAAS,iCACd,KACA,MACA,cACc;AACd,QAAM,eAAe,mBAAmB,GAAG;AAC3C,QAAM,gBAAgB,2BAA2B,GAAG;AACpD,MAAI,YAAiC;AACrC,MAAI,SAAS,IAAI,eAAe,IAAI;AACpC,MAAI,WAAqC;AAAA,IACvC,cAAc;AAAA,IACd,WAAW,IAAI;AAAA,IACf,GAAI,cAAc,SAAS,IAAI,EAAE,cAAc,IAAI,CAAC;AAAA,EACtD;AACA,MAAI,cAAc;AAChB,UAAM,kBAAkB,aAAa,cAAc,QAAQ,aAAa,YAAY;AACpF,QAAI,iBAAiB;AACnB,kBAAY;AACZ,eAAS,aAAa,YAAY;AAClC,iBAAW,EAAE,GAAG,UAAU,YAAY,aAAa,YAAY,UAAU,aAAa,SAAS;AAAA,IACjG;AAAA,EAEF;AACA,QAAM,aAAa,IAAI,cAClB,eAAe,IAAI,WAAW,KAAK,IAAI,cACxC;AACJ,SAAO;AAAA,IACL,IAAI,IAAI;AAAA,IACR,YAAY,IAAI,UAAU,YAAY;AAAA,IACtC,MAAM;AAAA,IACN;AAAA,IACA,OAAO,EAAE,IAAI,IAAI,aAAa,OAAO,WAAW;AAAA,IAChD,QAAQ;AAAA,IACR;AAAA,EACF;AACF;AAEO,SAAS,4BACd,MACA,MACA,cACc;AACd,QAAM,aAAa,KAAK,eACnB,eAAe,KAAK,YAAY,KAAK,KAAK,eAC3C;AACJ,SAAO;AAAA,IACL,IAAI,KAAK;AAAA,IACT,YAAY,KAAK,UAAU,YAAY;AAAA,IACvC,MAAM;AAAA,IACN,QAAQ,KAAK;AAAA,IACb,OAAO,EAAE,IAAI,KAAK,gBAAgB,MAAM,OAAO,WAAW;AAAA,IAC1D,QAAQ;AAAA,IACR,UAAU,EAAE,cAAc,KAAK;AAAA,EACjC;AACF;AASO,SAAS,oBAAoB,OAA4C;AAC9E,QAAM,aAAa,MAAM,WAAW;AAAA,IAAI,CAAC,QACvC,iCAAiC,KAAK,MAAM,MAAM,MAAM,YAAY;AAAA,EACtE;AACA,QAAM,eAAe,MAAM,SAAS,CAAC,GAAG;AAAA,IAAI,CAAC,SAC3C,4BAA4B,MAAM,MAAM,MAAM,MAAM,YAAY;AAAA,EAClE;AACA,SAAO,CAAC,GAAG,YAAY,GAAG,WAAW,EAAE;AAAA,IACrC,CAAC,GAAG,MAAM,IAAI,KAAK,EAAE,UAAU,EAAE,QAAQ,IAAI,IAAI,KAAK,EAAE,UAAU,EAAE,QAAQ;AAAA,EAC9E;AACF;",
+  "sourcesContent": ["import type { ActionLog } from '@open-mercato/core/modules/audit_logs/data/entities'\nimport type { SalesNote } from '../data/entities'\n\nexport type HistoryEntry = {\n  id: string\n  occurredAt: string\n  kind: 'status' | 'action' | 'comment'\n  action: string\n  actor: { id: string | null; label: string }\n  source: 'action_log' | 'note'\n  metadata?: {\n    statusFrom?: string | null\n    statusTo?: string | null\n    documentKind?: 'order' | 'quote'\n    commandId?: string\n  }\n}\n\nfunction extractStatusFromSnapshot(snapshot: unknown): string | null {\n  if (!snapshot || typeof snapshot !== 'object') return null\n  const s = snapshot as Record<string, unknown>\n  // Dedicated logStatusChange entries: { status: \"value\" }\n  if (typeof s.status === 'string') return s.status\n  // Regular update snapshots: { order: { status, fulfillment_status, payment_status, ... } }\n  if (s.order && typeof s.order === 'object') {\n    const order = s.order as Record<string, unknown>\n    const orderStatus = typeof order.status === 'string' ? order.status : null\n    const fulfillmentStatus = typeof order.fulfillment_status === 'string' ? order.fulfillment_status : null\n    const paymentStatus = typeof order.payment_status === 'string' ? order.payment_status : null\n    return orderStatus ?? fulfillmentStatus ?? paymentStatus ?? null\n  }\n  // Regular update snapshots: { quote: { status: \"value\", ... } }\n  if (s.quote && typeof s.quote === 'object') {\n    const quote = s.quote as Record<string, unknown>\n    if (typeof quote.status === 'string') return quote.status\n  }\n  return null\n}\n\nexport function detectStatusChange(log: ActionLog): {\n  statusFrom: string | null\n  statusTo: string | null\n} | null {\n  const after = extractStatusFromSnapshot(log.snapshotAfter)\n  const before = log.snapshotBefore\n    ? extractStatusFromSnapshot(log.snapshotBefore)\n    : null\n  // Creation (no snapshotBefore): always one status entry (initial value or \"created\")\n  if (!log.snapshotBefore) {\n    return { statusFrom: null, statusTo: after ?? null }\n  }\n  if (before !== after && (before !== null || after !== null)) {\n    return { statusFrom: before, statusTo: after ?? null }\n  }\n  return null\n}\n\n/**\n * Normalizes ActionLog to HistoryEntry (status/action/comment).\n */\nexport function normalizeActionLogToHistoryEntry(\n  log: ActionLog,\n  kind: 'order' | 'quote',\n  displayUsers?: Record<string, string>,\n): HistoryEntry {\n  const statusChange = detectStatusChange(log)\n  let entryKind: 'status' | 'action' = 'action'\n  let action = log.actionLabel || log.commandId\n  let metadata: HistoryEntry['metadata'] = { documentKind: kind, commandId: log.commandId }\n  if (statusChange) {\n    const hasStatusValues = statusChange.statusFrom != null || statusChange.statusTo != null\n    if (hasStatusValues) {\n      entryKind = 'status'\n      action = statusChange.statusTo ?? 'unknown'\n      metadata = { ...metadata, statusFrom: statusChange.statusFrom, statusTo: statusChange.statusTo }\n    }\n    // When both are null (e.g. Create return/shipment/payment with non-document snapshot), keep as action and use actionLabel\n  }\n  const actorLabel = log.actorUserId\n    ? (displayUsers?.[log.actorUserId] ?? log.actorUserId)\n    : 'system'\n  return {\n    id: log.id,\n    occurredAt: log.createdAt.toISOString(),\n    kind: entryKind,\n    action,\n    actor: { id: log.actorUserId, label: actorLabel },\n    source: 'action_log',\n    metadata,\n  }\n}\n\nexport function normalizeNoteToHistoryEntry(\n  note: SalesNote,\n  kind: 'order' | 'quote',\n  displayUsers?: Record<string, string>,\n): HistoryEntry {\n  const actorLabel = note.authorUserId\n    ? (displayUsers?.[note.authorUserId] ?? note.authorUserId)\n    : 'system'\n  return {\n    id: note.id,\n    occurredAt: note.createdAt.toISOString(),\n    kind: 'comment',\n    action: note.body,\n    actor: { id: note.authorUserId ?? null, label: actorLabel },\n    source: 'note',\n    metadata: { documentKind: kind },\n  }\n}\n\nexport type HistoryBuilderInput = {\n  actionLogs: ActionLog[]\n  notes?: SalesNote[]\n  kind: 'order' | 'quote'\n  displayUsers?: Record<string, string>\n}\n\nexport function buildHistoryEntries(input: HistoryBuilderInput): HistoryEntry[] {\n  const logEntries = input.actionLogs.map((log) =>\n    normalizeActionLogToHistoryEntry(log, input.kind, input.displayUsers)\n  )\n  const noteEntries = (input.notes ?? []).map((note) =>\n    normalizeNoteToHistoryEntry(note, input.kind, input.displayUsers)\n  )\n  return [...logEntries, ...noteEntries].sort(\n    (a, b) => new Date(b.occurredAt).getTime() - new Date(a.occurredAt).getTime()\n  )\n}\n"],
+  "mappings": "AAkBA,SAAS,0BAA0B,UAAkC;AACnE,MAAI,CAAC,YAAY,OAAO,aAAa,SAAU,QAAO;AACtD,QAAM,IAAI;AAEV,MAAI,OAAO,EAAE,WAAW,SAAU,QAAO,EAAE;AAE3C,MAAI,EAAE,SAAS,OAAO,EAAE,UAAU,UAAU;AAC1C,UAAM,QAAQ,EAAE;AAChB,UAAM,cAAc,OAAO,MAAM,WAAW,WAAW,MAAM,SAAS;AACtE,UAAM,oBAAoB,OAAO,MAAM,uBAAuB,WAAW,MAAM,qBAAqB;AACpG,UAAM,gBAAgB,OAAO,MAAM,mBAAmB,WAAW,MAAM,iBAAiB;AACxF,WAAO,eAAe,qBAAqB,iBAAiB;AAAA,EAC9D;AAEA,MAAI,EAAE,SAAS,OAAO,EAAE,UAAU,UAAU;AAC1C,UAAM,QAAQ,EAAE;AAChB,QAAI,OAAO,MAAM,WAAW,SAAU,QAAO,MAAM;AAAA,EACrD;AACA,SAAO;AACT;AAEO,SAAS,mBAAmB,KAG1B;AACP,QAAM,QAAQ,0BAA0B,IAAI,aAAa;AACzD,QAAM,SAAS,IAAI,iBACf,0BAA0B,IAAI,cAAc,IAC5C;AAEJ,MAAI,CAAC,IAAI,gBAAgB;AACvB,WAAO,EAAE,YAAY,MAAM,UAAU,SAAS,KAAK;AAAA,EACrD;AACA,MAAI,WAAW,UAAU,WAAW,QAAQ,UAAU,OAAO;AAC3D,WAAO,EAAE,YAAY,QAAQ,UAAU,SAAS,KAAK;AAAA,EACvD;AACA,SAAO;AACT;AAKO,SAAS,iCACd,KACA,MACA,cACc;AACd,QAAM,eAAe,mBAAmB,GAAG;AAC3C,MAAI,YAAiC;AACrC,MAAI,SAAS,IAAI,eAAe,IAAI;AACpC,MAAI,WAAqC,EAAE,cAAc,MAAM,WAAW,IAAI,UAAU;AACxF,MAAI,cAAc;AAChB,UAAM,kBAAkB,aAAa,cAAc,QAAQ,aAAa,YAAY;AACpF,QAAI,iBAAiB;AACnB,kBAAY;AACZ,eAAS,aAAa,YAAY;AAClC,iBAAW,EAAE,GAAG,UAAU,YAAY,aAAa,YAAY,UAAU,aAAa,SAAS;AAAA,IACjG;AAAA,EAEF;AACA,QAAM,aAAa,IAAI,cAClB,eAAe,IAAI,WAAW,KAAK,IAAI,cACxC;AACJ,SAAO;AAAA,IACL,IAAI,IAAI;AAAA,IACR,YAAY,IAAI,UAAU,YAAY;AAAA,IACtC,MAAM;AAAA,IACN;AAAA,IACA,OAAO,EAAE,IAAI,IAAI,aAAa,OAAO,WAAW;AAAA,IAChD,QAAQ;AAAA,IACR;AAAA,EACF;AACF;AAEO,SAAS,4BACd,MACA,MACA,cACc;AACd,QAAM,aAAa,KAAK,eACnB,eAAe,KAAK,YAAY,KAAK,KAAK,eAC3C;AACJ,SAAO;AAAA,IACL,IAAI,KAAK;AAAA,IACT,YAAY,KAAK,UAAU,YAAY;AAAA,IACvC,MAAM;AAAA,IACN,QAAQ,KAAK;AAAA,IACb,OAAO,EAAE,IAAI,KAAK,gBAAgB,MAAM,OAAO,WAAW;AAAA,IAC1D,QAAQ;AAAA,IACR,UAAU,EAAE,cAAc,KAAK;AAAA,EACjC;AACF;AASO,SAAS,oBAAoB,OAA4C;AAC9E,QAAM,aAAa,MAAM,WAAW;AAAA,IAAI,CAAC,QACvC,iCAAiC,KAAK,MAAM,MAAM,MAAM,YAAY;AAAA,EACtE;AACA,QAAM,eAAe,MAAM,SAAS,CAAC,GAAG;AAAA,IAAI,CAAC,SAC3C,4BAA4B,MAAM,MAAM,MAAM,MAAM,YAAY;AAAA,EAClE;AACA,SAAO,CAAC,GAAG,YAAY,GAAG,WAAW,EAAE;AAAA,IACrC,CAAC,GAAG,MAAM,IAAI,KAAK,EAAE,UAAU,EAAE,QAAQ,IAAI,IAAI,KAAK,EAAE,UAAU,EAAE,QAAQ;AAAA,EAC9E;AACF;",
   "names": []
 }

package/dist/modules/sales/widgets/injection/document-history/widget.client.js

@@ -23,44 +23,6 @@ const KIND_BG_COLORS = {
   action: "bg-muted",
   comment: "bg-muted"
 };
-const CHANGED_FIELD_LABELS = {
-  productId: { key: "sales.documents.history.fields.product", fallback: "Product" },
-  productVariantId: { key: "sales.documents.history.fields.variant", fallback: "Variant" },
-  name: { key: "sales.documents.history.fields.name", fallback: "Name" },
-  description: { key: "sales.documents.history.fields.description", fallback: "Description" },
-  comment: { key: "sales.documents.history.fields.comment", fallback: "Comment" },
-  quantity: { key: "sales.documents.history.fields.quantity", fallback: "Quantity" },
-  quantityUnit: { key: "sales.documents.history.fields.quantityUnit", fallback: "Quantity unit" },
-  currencyCode: { key: "sales.documents.history.fields.currency", fallback: "Currency" },
-  unitPriceNet: { key: "sales.documents.history.fields.unitPriceNet", fallback: "Net unit price" },
-  unitPriceGross: { key: "sales.documents.history.fields.unitPriceGross", fallback: "Gross unit price" },
-  discountAmount: { key: "sales.documents.history.fields.discountAmount", fallback: "Discount amount" },
-  discountPercent: { key: "sales.documents.history.fields.discountPercent", fallback: "Discount percent" },
-  taxRate: { key: "sales.documents.history.fields.taxRate", fallback: "Tax class" },
-  configuration: { key: "sales.documents.history.fields.configuration", fallback: "Configuration" },
-  promotionCode: { key: "sales.documents.history.fields.promotionCode", fallback: "Promotion code" },
-  customFields: { key: "sales.documents.history.fields.customFields", fallback: "Custom fields" },
-  statusEntryId: { key: "sales.documents.history.fields.status", fallback: "Status" }
-};
-function normalizeChangedField(field) {
-  const segment = field.split(".").pop() ?? field;
-  return segment.replace(/_([a-z])/g, (_, letter) => letter.toUpperCase());
-}
-function humanizeChangedField(field) {
-  const normalized = normalizeChangedField(field);
-  const spaced = normalized.replace(/([a-z0-9])([A-Z])/g, "$1 $2").trim();
-  return spaced.length > 0 ? `${spaced[0].toUpperCase()}${spaced.slice(1)}` : field;
-}
-function translateChangedField(t, field) {
-  const normalized = normalizeChangedField(field);
-  const translation = CHANGED_FIELD_LABELS[normalized];
-  return translation ? t(translation.key, translation.fallback) : humanizeChangedField(field);
-}
-function translateAction(t, entry) {
-  const commandId = entry.metadata?.commandId;
-  if (!commandId?.startsWith("sales.")) return entry.action;
-  return t(`sales.audit.${commandId.slice("sales.".length)}`, entry.action);
-}
 function StatusDot({ color, className }) {
   if (!color) return /* @__PURE__ */ jsx("span", { className: cn("h-2.5 w-2.5 rounded-full bg-muted-foreground/40 border border-border inline-flex", className) });
   return /* @__PURE__ */ jsx(
@@ -96,16 +58,10 @@ function TimelineItem({
   statusMap,
   isLast
 }) {
-  const t = useT();
   const KindIcon = KIND_ICONS[entry.kind];
   const relativeTime = formatRelativeTime(entry.occurredAt);
   const absoluteTime = formatDateTime(entry.occurredAt);
   const isStatusChange = entry.kind === "status" && entry.metadata?.statusTo;
-  const action = translateAction(t, entry);
-  const actorLabel = entry.actor.id ? entry.actor.label : t("sales.documents.history.actor.system", "System");
-  const changedFieldLabels = Array.from(
-    new Set((entry.metadata?.changedFields ?? []).map((field) => translateChangedField(t, field)))
-  );
   return /* @__PURE__ */ jsxs("div", { "data-testid": "timeline-entry", className: "relative flex gap-3", children: [
     !isLast && /* @__PURE__ */ jsx("div", { className: "absolute left-[11px] top-6 bottom-0 w-px bg-border", "aria-hidden": true }),
     /* @__PURE__ */ jsx(
@@ -122,7 +78,7 @@ function TimelineItem({
       /* @__PURE__ */ jsxs("div", { className: "flex items-center justify-between gap-2 flex-wrap", children: [
         /* @__PURE__ */ jsxs("span", { className: "inline-flex items-center gap-1.5 text-xs font-medium text-foreground", children: [
           /* @__PURE__ */ jsx(User, { className: "h-3 w-3 text-muted-foreground", "aria-hidden": true }),
-          actorLabel
+          entry.actor.label
         ] }),
         /* @__PURE__ */ jsx(
           "span",
@@ -140,12 +96,7 @@ function TimelineItem({
           statusTo: entry.metadata?.statusTo,
           statusMap
         }
-      ) : /* @__PURE__ */ jsxs("div", { className: "space-y-0.5", children: [
-        /* @__PURE__ */ jsx("div", { className: "text-sm text-foreground", children: action }),
-        entry.kind === "action" && changedFieldLabels.length > 0 ? /* @__PURE__ */ jsx("div", { className: "text-xs text-muted-foreground", children: t("sales.documents.history.changedFields", "Changed fields: {fields}", {
-          fields: changedFieldLabels.join(", ")
-        }) }) : null
-      ] })
+      ) : /* @__PURE__ */ jsx("div", { className: "text-sm text-foreground", children: entry.action })
     ] }) })
   ] });
 }

package/dist/modules/sales/widgets/injection/document-history/widget.client.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../src/modules/sales/widgets/injection/document-history/widget.client.tsx"],
-  "sourcesContent": ["\"use client\"\n\nimport * as React from \"react\"\nimport { Spinner } from \"@open-mercato/ui/primitives/spinner\"\nimport { useT, type TranslateFn } from \"@open-mercato/shared/lib/i18n/context\"\nimport { apiCall } from \"@open-mercato/ui/backend/utils/apiCall\"\nimport { formatRelativeTime, formatDateTime } from \"@open-mercato/shared/lib/time\"\nimport { cn } from \"@open-mercato/shared/lib/utils\"\nimport type { InjectionWidgetComponentProps } from '@open-mercato/shared/modules/widgets/injection'\nimport { ArrowRightLeft, Zap, MessageSquare, User, Filter, ChevronDown, Check } from 'lucide-react'\n\nexport type TimelineEntry = {\n  id: string\n  occurredAt: string\n  kind: \"status\" | \"action\" | \"comment\"\n  action: string\n  actor: { id: string | null; label: string }\n  source: \"action_log\" | \"note\"\n  metadata?: {\n    statusFrom?: string | null\n    statusTo?: string | null\n    documentKind?: \"order\" | \"quote\"\n    commandId?: string\n    changedFields?: string[]\n  }\n}\n\ntype StatusOption = {\n  value: string\n  label: string\n  color: string | null\n  icon: string | null\n}\n\ntype TimelineContext = {\n  kind: \"order\" | \"quote\"\n  record: { id: string }\n}\n\nconst isValidContext = (ctx: unknown): ctx is TimelineContext =>\n  ctx !== null &&\n  typeof ctx === 'object' &&\n  'kind' in ctx &&\n  'record' in ctx &&\n  ((ctx as TimelineContext).kind === 'order' || (ctx as TimelineContext).kind === 'quote') &&\n  typeof (ctx as TimelineContext).record === 'object' &&\n  (ctx as TimelineContext).record !== null &&\n  'id' in (ctx as TimelineContext).record &&\n  typeof (ctx as TimelineContext).record.id === 'string'\n\nconst KIND_ICONS = {\n  status: ArrowRightLeft,\n  action: Zap,\n  comment: MessageSquare,\n}\n\nconst KIND_ICON_COLORS = {\n  status: 'text-foreground',\n  action: 'text-foreground',\n  comment: 'text-foreground',\n}\n\nconst KIND_BG_COLORS = {\n  status: 'bg-muted',\n  action: 'bg-muted',\n  comment: 'bg-muted',\n}\n\nconst CHANGED_FIELD_LABELS: Record<string, { key: string; fallback: string }> = {\n  productId: { key: 'sales.documents.history.fields.product', fallback: 'Product' },\n  productVariantId: { key: 'sales.documents.history.fields.variant', fallback: 'Variant' },\n  name: { key: 'sales.documents.history.fields.name', fallback: 'Name' },\n  description: { key: 'sales.documents.history.fields.description', fallback: 'Description' },\n  comment: { key: 'sales.documents.history.fields.comment', fallback: 'Comment' },\n  quantity: { key: 'sales.documents.history.fields.quantity', fallback: 'Quantity' },\n  quantityUnit: { key: 'sales.documents.history.fields.quantityUnit', fallback: 'Quantity unit' },\n  currencyCode: { key: 'sales.documents.history.fields.currency', fallback: 'Currency' },\n  unitPriceNet: { key: 'sales.documents.history.fields.unitPriceNet', fallback: 'Net unit price' },\n  unitPriceGross: { key: 'sales.documents.history.fields.unitPriceGross', fallback: 'Gross unit price' },\n  discountAmount: { key: 'sales.documents.history.fields.discountAmount', fallback: 'Discount amount' },\n  discountPercent: { key: 'sales.documents.history.fields.discountPercent', fallback: 'Discount percent' },\n  taxRate: { key: 'sales.documents.history.fields.taxRate', fallback: 'Tax class' },\n  configuration: { key: 'sales.documents.history.fields.configuration', fallback: 'Configuration' },\n  promotionCode: { key: 'sales.documents.history.fields.promotionCode', fallback: 'Promotion code' },\n  customFields: { key: 'sales.documents.history.fields.customFields', fallback: 'Custom fields' },\n  statusEntryId: { key: 'sales.documents.history.fields.status', fallback: 'Status' },\n}\n\nfunction normalizeChangedField(field: string): string {\n  const segment = field.split('.').pop() ?? field\n  return segment.replace(/_([a-z])/g, (_, letter: string) => letter.toUpperCase())\n}\n\nfunction humanizeChangedField(field: string): string {\n  const normalized = normalizeChangedField(field)\n  const spaced = normalized.replace(/([a-z0-9])([A-Z])/g, '$1 $2').trim()\n  return spaced.length > 0 ? `${spaced[0].toUpperCase()}${spaced.slice(1)}` : field\n}\n\nfunction translateChangedField(t: TranslateFn, field: string): string {\n  const normalized = normalizeChangedField(field)\n  const translation = CHANGED_FIELD_LABELS[normalized]\n  return translation ? t(translation.key, translation.fallback) : humanizeChangedField(field)\n}\n\nfunction translateAction(t: TranslateFn, entry: TimelineEntry): string {\n  const commandId = entry.metadata?.commandId\n  if (!commandId?.startsWith('sales.')) return entry.action\n  return t(`sales.audit.${commandId.slice('sales.'.length)}`, entry.action)\n}\n\nfunction StatusDot({ color, className }: { color: string | null | undefined; className?: string }) {\n  if (!color) return <span className={cn('h-2.5 w-2.5 rounded-full bg-muted-foreground/40 border border-border inline-flex', className)} />\n  return (\n    <span\n      className={cn('h-2.5 w-2.5 rounded-full border border-border/70 inline-flex', className)}\n      style={{ backgroundColor: color }}\n      aria-hidden\n    />\n  )\n}\n\nfunction StatusTransition({\n  statusFrom,\n  statusTo,\n  statusMap,\n}: {\n  statusFrom: string | null | undefined\n  statusTo: string | null | undefined\n  statusMap: Record<string, StatusOption>\n}) {\n  const from = statusFrom ? (statusMap[statusFrom] ?? { value: statusFrom, label: statusFrom, color: null, icon: null }) : null\n  const to = statusTo ? (statusMap[statusTo] ?? { value: statusTo, label: statusTo, color: null, icon: null }) : null\n\n  return (\n    <div className=\"flex items-center gap-1.5 flex-wrap\">\n      {from ? (\n        <span className=\"inline-flex items-center gap-1 text-xs text-muted-foreground\">\n          <StatusDot color={from.color} />\n          <span>{from.label}</span>\n        </span>\n      ) : null}\n      {from && to ? (\n        <ArrowRightLeft className=\"h-3 w-3 text-muted-foreground/60 shrink-0\" />\n      ) : null}\n      {to ? (\n        <span className=\"inline-flex items-center gap-1 text-xs font-medium text-foreground\">\n          <StatusDot color={to.color} />\n          <span>{to.label}</span>\n        </span>\n      ) : null}\n    </div>\n  )\n}\n\nfunction TimelineItem({\n  entry,\n  statusMap,\n  isLast,\n}: {\n  entry: TimelineEntry\n  statusMap: Record<string, StatusOption>\n  isLast: boolean\n}) {\n  const t = useT()\n  const KindIcon = KIND_ICONS[entry.kind]\n  const relativeTime = formatRelativeTime(entry.occurredAt)\n  const absoluteTime = formatDateTime(entry.occurredAt)\n\n  const isStatusChange = entry.kind === 'status' && entry.metadata?.statusTo\n  const action = translateAction(t, entry)\n  const actorLabel = entry.actor.id\n    ? entry.actor.label\n    : t('sales.documents.history.actor.system', 'System')\n  const changedFieldLabels = Array.from(\n    new Set((entry.metadata?.changedFields ?? []).map((field) => translateChangedField(t, field))),\n  )\n\n  return (\n    <div data-testid=\"timeline-entry\" className=\"relative flex gap-3\">\n      {/* Vertical connector line */}\n      {!isLast && (\n        <div className=\"absolute left-[11px] top-6 bottom-0 w-px bg-border\" aria-hidden />\n      )}\n\n      {/* Icon circle */}\n      <div\n        className={cn(\n          'relative z-10 flex h-6 w-6 shrink-0 items-center justify-center rounded-full border border-border',\n          KIND_BG_COLORS[entry.kind],\n        )}\n      >\n        <KindIcon className={cn('h-3 w-3', KIND_ICON_COLORS[entry.kind])} aria-hidden />\n      </div>\n\n      {/* Content card */}\n      <div className=\"flex-1 pb-4\">\n        <div className=\"group rounded-lg border bg-card p-3 space-y-1.5\">\n          {/* Header: actor + time */}\n          <div className=\"flex items-center justify-between gap-2 flex-wrap\">\n            <span className=\"inline-flex items-center gap-1.5 text-xs font-medium text-foreground\">\n              <User className=\"h-3 w-3 text-muted-foreground\" aria-hidden />\n              {actorLabel}\n            </span>\n            <span\n              className=\"text-xs text-muted-foreground\"\n              title={absoluteTime ?? undefined}\n            >\n              {relativeTime ?? absoluteTime}\n            </span>\n          </div>\n\n          {/* Body */}\n          {isStatusChange ? (\n            <StatusTransition\n              statusFrom={entry.metadata?.statusFrom}\n              statusTo={entry.metadata?.statusTo}\n              statusMap={statusMap}\n            />\n          ) : (\n            <div className=\"space-y-0.5\">\n              <div className=\"text-sm text-foreground\">{action}</div>\n              {entry.kind === 'action' && changedFieldLabels.length > 0 ? (\n                <div className=\"text-xs text-muted-foreground\">\n                  {t('sales.documents.history.changedFields', 'Changed fields: {fields}', {\n                    fields: changedFieldLabels.join(', '),\n                  })}\n                </div>\n              ) : null}\n            </div>\n          )}\n        </div>\n      </div>\n    </div>\n  )\n}\n\ntype FilterKind = 'all' | 'status' | 'action' | 'comment'\n\ntype FilterOption = { value: FilterKind; label: string }\n\nfunction FilterDropdown({ filter, onChange }: { filter: FilterKind; onChange: (kind: FilterKind) => void }) {\n  const t = useT()\n  const [open, setOpen] = React.useState(false)\n  const ref = React.useRef<HTMLDivElement>(null)\n\n  React.useEffect(() => {\n    if (!open) return\n    function onDocClick(e: MouseEvent) {\n      if (ref.current && !ref.current.contains(e.target as Node)) setOpen(false)\n    }\n    function onKey(e: KeyboardEvent) {\n      if (e.key === 'Escape') setOpen(false)\n    }\n    document.addEventListener('mousedown', onDocClick)\n    document.addEventListener('keydown', onKey)\n    return () => {\n      document.removeEventListener('mousedown', onDocClick)\n      document.removeEventListener('keydown', onKey)\n    }\n  }, [open])\n\n  const options: FilterOption[] = [\n    { value: 'all', label: t('sales.documents.history.filter.all', 'All') },\n    { value: 'status', label: t('sales.documents.history.filter.status', 'Status changes') },\n    { value: 'action', label: t('sales.documents.history.filter.actions', 'Actions') },\n    { value: 'comment', label: t('sales.documents.history.filter.comments', 'Comments') },\n  ]\n\n  const activeLabel = options.find(o => o.value === filter)?.label\n\n  return (\n    <div className=\"relative\" ref={ref}>\n      <button\n        type=\"button\"\n        aria-haspopup=\"listbox\"\n        aria-expanded={open}\n        onClick={() => setOpen(prev => !prev)}\n        className=\"inline-flex items-center gap-1.5 rounded-md border border-input bg-background px-2.5 py-1 text-xs font-medium shadow-sm hover:bg-accent hover:text-accent-foreground transition-colors select-none\"\n      >\n        <Filter className=\"h-3 w-3\" aria-hidden />\n        {t('sales.documents.history.filter.label', 'Filters')}\n        {filter !== 'all' && (\n          <span className=\"text-muted-foreground\">: {activeLabel}</span>\n        )}\n        <ChevronDown className={cn('h-3 w-3 transition-transform duration-150', open && 'rotate-180')} aria-hidden />\n      </button>\n      {open && (\n        <div\n          role=\"listbox\"\n          aria-label={t('sales.documents.history.filter.label', 'Filters')}\n          className=\"absolute left-0 top-full mt-1 z-dropdown w-48 rounded-md border bg-background p-1 shadow-md\"\n        >\n          {options.map(opt => (\n            <button\n              key={opt.value}\n              type=\"button\"\n              role=\"option\"\n              aria-selected={filter === opt.value}\n              onClick={() => { onChange(opt.value); setOpen(false) }}\n              className=\"flex w-full items-center gap-2 rounded px-2 py-1.5 text-sm hover:bg-accent\"\n            >\n              <Check className={cn('h-3.5 w-3.5 shrink-0', filter === opt.value ? 'opacity-100' : 'opacity-0')} aria-hidden />\n              {opt.label}\n            </button>\n          ))}\n        </div>\n      )}\n    </div>\n  )\n}\n\nexport const DocumentHistoryWidget: React.FC<InjectionWidgetComponentProps<unknown, unknown>> = ({ context }) => {\n  const t = useT()\n  const [entries, setEntries] = React.useState<TimelineEntry[]>([])\n  const [loading, setLoading] = React.useState(true)\n  const [error, setError] = React.useState<string | null>(null)\n  const [statusMap, setStatusMap] = React.useState<Record<string, StatusOption>>({})\n  const [filter, setFilter] = React.useState<FilterKind>('all')\n\n  React.useEffect(() => {\n    const urls = [\n      '/api/sales/order-statuses?pageSize=100',\n      '/api/sales/shipment-statuses?pageSize=100',\n      '/api/sales/payment-statuses?pageSize=100',\n    ]\n    const map: Record<string, StatusOption> = {}\n    const merge = (items: unknown[]) => {\n      if (!Array.isArray(items)) return\n      for (const item of items) {\n        if (!item || typeof item !== 'object') continue\n        const d = item as Record<string, unknown>\n        const value = typeof d.value === 'string' ? d.value : null\n        if (!value) continue\n        map[value] = {\n          value,\n          label: typeof d.label === 'string' && d.label.length ? d.label : value,\n          color: typeof d.color === 'string' && d.color.length ? d.color : null,\n          icon: typeof d.icon === 'string' && d.icon.length ? d.icon : null,\n        }\n      }\n    }\n    Promise.all(urls.map((url) => apiCall<{ items?: unknown[] }>(url)))\n      .then((responses) => {\n        for (const res of responses) {\n          if (res.ok && Array.isArray(res.result?.items)) merge(res.result.items)\n        }\n        setStatusMap(map)\n      })\n      .catch(() => {})\n  }, [])\n\n  React.useEffect(() => {\n    if (!isValidContext(context)) {\n      setLoading(false)\n      setError(t(\"sales.documents.history.error\", \"Failed to load history.\"))\n      return\n    }\n\n    setLoading(true)\n    setError(null)\n    apiCall<{ items: TimelineEntry[] }>(\n      `/api/sales/document-history?kind=${context.kind}&id=${context.record.id}`\n    )\n      .then((res) => {\n        if (res.ok && Array.isArray(res.result?.items)) {\n          setEntries(res.result.items)\n        } else {\n          setError(t(\"sales.documents.history.error\", \"Failed to load history.\"))\n        }\n      })\n      .catch(() => setError(t(\"sales.documents.history.error\", \"Failed to load history.\")))\n      .finally(() => setLoading(false))\n  }, [context, t])\n\n  const filtered = React.useMemo(\n    () => filter === 'all' ? entries : entries.filter(e => e.kind === filter),\n    [entries, filter]\n  )\n\n  return (\n    <div className=\"space-y-4\">\n      {/* Filter dropdown */}\n      <div>\n        <FilterDropdown filter={filter} onChange={setFilter} />\n      </div>\n\n      {/* Content */}\n      {loading ? (\n        <div className=\"flex items-center justify-center h-24\">\n          <Spinner />\n        </div>\n      ) : error ? (\n        <div className=\"text-destructive text-sm\">{error}</div>\n      ) : !filtered.length ? (\n        <div className=\"text-muted-foreground text-sm py-6 text-center\">\n          {t(\"sales.documents.history.empty\", \"No history entries yet.\")}\n        </div>\n      ) : (\n        <div className=\"relative\">\n          {filtered.map((entry, index) => (\n            <TimelineItem\n              key={entry.id}\n              entry={entry}\n              statusMap={statusMap}\n              isLast={index === filtered.length - 1}\n            />\n          ))}\n        </div>\n      )}\n    </div>\n  )\n}\n\nexport default DocumentHistoryWidget\n"],
-  "mappings": ";AAgHqB,cAyBb,YAzBa;AA9GrB,YAAY,WAAW;AACvB,SAAS,eAAe;AACxB,SAAS,YAA8B;AACvC,SAAS,eAAe;AACxB,SAAS,oBAAoB,sBAAsB;AACnD,SAAS,UAAU;AAEnB,SAAS,gBAAgB,KAAK,eAAe,MAAM,QAAQ,aAAa,aAAa;AA8BrF,MAAM,iBAAiB,CAAC,QACtB,QAAQ,QACR,OAAO,QAAQ,YACf,UAAU,OACV,YAAY,QACV,IAAwB,SAAS,WAAY,IAAwB,SAAS,YAChF,OAAQ,IAAwB,WAAW,YAC1C,IAAwB,WAAW,QACpC,QAAS,IAAwB,UACjC,OAAQ,IAAwB,OAAO,OAAO;AAEhD,MAAM,aAAa;AAAA,EACjB,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,SAAS;AACX;AAEA,MAAM,mBAAmB;AAAA,EACvB,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,SAAS;AACX;AAEA,MAAM,iBAAiB;AAAA,EACrB,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,SAAS;AACX;AAEA,MAAM,uBAA0E;AAAA,EAC9E,WAAW,EAAE,KAAK,0CAA0C,UAAU,UAAU;AAAA,EAChF,kBAAkB,EAAE,KAAK,0CAA0C,UAAU,UAAU;AAAA,EACvF,MAAM,EAAE,KAAK,uCAAuC,UAAU,OAAO;AAAA,EACrE,aAAa,EAAE,KAAK,8CAA8C,UAAU,cAAc;AAAA,EAC1F,SAAS,EAAE,KAAK,0CAA0C,UAAU,UAAU;AAAA,EAC9E,UAAU,EAAE,KAAK,2CAA2C,UAAU,WAAW;AAAA,EACjF,cAAc,EAAE,KAAK,+CAA+C,UAAU,gBAAgB;AAAA,EAC9F,cAAc,EAAE,KAAK,2CAA2C,UAAU,WAAW;AAAA,EACrF,cAAc,EAAE,KAAK,+CAA+C,UAAU,iBAAiB;AAAA,EAC/F,gBAAgB,EAAE,KAAK,iDAAiD,UAAU,mBAAmB;AAAA,EACrG,gBAAgB,EAAE,KAAK,iDAAiD,UAAU,kBAAkB;AAAA,EACpG,iBAAiB,EAAE,KAAK,kDAAkD,UAAU,mBAAmB;AAAA,EACvG,SAAS,EAAE,KAAK,0CAA0C,UAAU,YAAY;AAAA,EAChF,eAAe,EAAE,KAAK,gDAAgD,UAAU,gBAAgB;AAAA,EAChG,eAAe,EAAE,KAAK,gDAAgD,UAAU,iBAAiB;AAAA,EACjG,cAAc,EAAE,KAAK,+CAA+C,UAAU,gBAAgB;AAAA,EAC9F,eAAe,EAAE,KAAK,yCAAyC,UAAU,SAAS;AACpF;AAEA,SAAS,sBAAsB,OAAuB;AACpD,QAAM,UAAU,MAAM,MAAM,GAAG,EAAE,IAAI,KAAK;AAC1C,SAAO,QAAQ,QAAQ,aAAa,CAAC,GAAG,WAAmB,OAAO,YAAY,CAAC;AACjF;AAEA,SAAS,qBAAqB,OAAuB;AACnD,QAAM,aAAa,sBAAsB,KAAK;AAC9C,QAAM,SAAS,WAAW,QAAQ,sBAAsB,OAAO,EAAE,KAAK;AACtE,SAAO,OAAO,SAAS,IAAI,GAAG,OAAO,CAAC,EAAE,YAAY,CAAC,GAAG,OAAO,MAAM,CAAC,CAAC,KAAK;AAC9E;AAEA,SAAS,sBAAsB,GAAgB,OAAuB;AACpE,QAAM,aAAa,sBAAsB,KAAK;AAC9C,QAAM,cAAc,qBAAqB,UAAU;AACnD,SAAO,cAAc,EAAE,YAAY,KAAK,YAAY,QAAQ,IAAI,qBAAqB,KAAK;AAC5F;AAEA,SAAS,gBAAgB,GAAgB,OAA8B;AACrE,QAAM,YAAY,MAAM,UAAU;AAClC,MAAI,CAAC,WAAW,WAAW,QAAQ,EAAG,QAAO,MAAM;AACnD,SAAO,EAAE,eAAe,UAAU,MAAM,SAAS,MAAM,CAAC,IAAI,MAAM,MAAM;AAC1E;AAEA,SAAS,UAAU,EAAE,OAAO,UAAU,GAA6D;AACjG,MAAI,CAAC,MAAO,QAAO,oBAAC,UAAK,WAAW,GAAG,oFAAoF,SAAS,GAAG;AACvI,SACE;AAAA,IAAC;AAAA;AAAA,MACC,WAAW,GAAG,gEAAgE,SAAS;AAAA,MACvF,OAAO,EAAE,iBAAiB,MAAM;AAAA,MAChC,eAAW;AAAA;AAAA,EACb;AAEJ;AAEA,SAAS,iBAAiB;AAAA,EACxB;AAAA,EACA;AAAA,EACA;AACF,GAIG;AACD,QAAM,OAAO,aAAc,UAAU,UAAU,KAAK,EAAE,OAAO,YAAY,OAAO,YAAY,OAAO,MAAM,MAAM,KAAK,IAAK;AACzH,QAAM,KAAK,WAAY,UAAU,QAAQ,KAAK,EAAE,OAAO,UAAU,OAAO,UAAU,OAAO,MAAM,MAAM,KAAK,IAAK;AAE/G,SACE,qBAAC,SAAI,WAAU,uCACZ;AAAA,WACC,qBAAC,UAAK,WAAU,gEACd;AAAA,0BAAC,aAAU,OAAO,KAAK,OAAO;AAAA,MAC9B,oBAAC,UAAM,eAAK,OAAM;AAAA,OACpB,IACE;AAAA,IACH,QAAQ,KACP,oBAAC,kBAAe,WAAU,6CAA4C,IACpE;AAAA,IACH,KACC,qBAAC,UAAK,WAAU,sEACd;AAAA,0BAAC,aAAU,OAAO,GAAG,OAAO;AAAA,MAC5B,oBAAC,UAAM,aAAG,OAAM;AAAA,OAClB,IACE;AAAA,KACN;AAEJ;AAEA,SAAS,aAAa;AAAA,EACpB;AAAA,EACA;AAAA,EACA;AACF,GAIG;AACD,QAAM,IAAI,KAAK;AACf,QAAM,WAAW,WAAW,MAAM,IAAI;AACtC,QAAM,eAAe,mBAAmB,MAAM,UAAU;AACxD,QAAM,eAAe,eAAe,MAAM,UAAU;AAEpD,QAAM,iBAAiB,MAAM,SAAS,YAAY,MAAM,UAAU;AAClE,QAAM,SAAS,gBAAgB,GAAG,KAAK;AACvC,QAAM,aAAa,MAAM,MAAM,KAC3B,MAAM,MAAM,QACZ,EAAE,wCAAwC,QAAQ;AACtD,QAAM,qBAAqB,MAAM;AAAA,IAC/B,IAAI,KAAK,MAAM,UAAU,iBAAiB,CAAC,GAAG,IAAI,CAAC,UAAU,sBAAsB,GAAG,KAAK,CAAC,CAAC;AAAA,EAC/F;AAEA,SACE,qBAAC,SAAI,eAAY,kBAAiB,WAAU,uBAEzC;AAAA,KAAC,UACA,oBAAC,SAAI,WAAU,sDAAqD,eAAW,MAAC;AAAA,IAIlF;AAAA,MAAC;AAAA;AAAA,QACC,WAAW;AAAA,UACT;AAAA,UACA,eAAe,MAAM,IAAI;AAAA,QAC3B;AAAA,QAEA,8BAAC,YAAS,WAAW,GAAG,WAAW,iBAAiB,MAAM,IAAI,CAAC,GAAG,eAAW,MAAC;AAAA;AAAA,IAChF;AAAA,IAGA,oBAAC,SAAI,WAAU,eACb,+BAAC,SAAI,WAAU,mDAEb;AAAA,2BAAC,SAAI,WAAU,qDACb;AAAA,6BAAC,UAAK,WAAU,wEACd;AAAA,8BAAC,QAAK,WAAU,iCAAgC,eAAW,MAAC;AAAA,UAC3D;AAAA,WACH;AAAA,QACA;AAAA,UAAC;AAAA;AAAA,YACC,WAAU;AAAA,YACV,OAAO,gBAAgB;AAAA,YAEtB,0BAAgB;AAAA;AAAA,QACnB;AAAA,SACF;AAAA,MAGC,iBACC;AAAA,QAAC;AAAA;AAAA,UACC,YAAY,MAAM,UAAU;AAAA,UAC5B,UAAU,MAAM,UAAU;AAAA,UAC1B;AAAA;AAAA,MACF,IAEA,qBAAC,SAAI,WAAU,eACb;AAAA,4BAAC,SAAI,WAAU,2BAA2B,kBAAO;AAAA,QAChD,MAAM,SAAS,YAAY,mBAAmB,SAAS,IACtD,oBAAC,SAAI,WAAU,iCACZ,YAAE,yCAAyC,4BAA4B;AAAA,UACtE,QAAQ,mBAAmB,KAAK,IAAI;AAAA,QACtC,CAAC,GACH,IACE;AAAA,SACN;AAAA,OAEJ,GACF;AAAA,KACF;AAEJ;AAMA,SAAS,eAAe,EAAE,QAAQ,SAAS,GAAiE;AAC1G,QAAM,IAAI,KAAK;AACf,QAAM,CAAC,MAAM,OAAO,IAAI,MAAM,SAAS,KAAK;AAC5C,QAAM,MAAM,MAAM,OAAuB,IAAI;AAE7C,QAAM,UAAU,MAAM;AACpB,QAAI,CAAC,KAAM;AACX,aAAS,WAAW,GAAe;AACjC,UAAI,IAAI,WAAW,CAAC,IAAI,QAAQ,SAAS,EAAE,MAAc,EAAG,SAAQ,KAAK;AAAA,IAC3E;AACA,aAAS,MAAM,GAAkB;AAC/B,UAAI,EAAE,QAAQ,SAAU,SAAQ,KAAK;AAAA,IACvC;AACA,aAAS,iBAAiB,aAAa,UAAU;AACjD,aAAS,iBAAiB,WAAW,KAAK;AAC1C,WAAO,MAAM;AACX,eAAS,oBAAoB,aAAa,UAAU;AACpD,eAAS,oBAAoB,WAAW,KAAK;AAAA,IAC/C;AAAA,EACF,GAAG,CAAC,IAAI,CAAC;AAET,QAAM,UAA0B;AAAA,IAC9B,EAAE,OAAO,OAAO,OAAO,EAAE,sCAAsC,KAAK,EAAE;AAAA,IACtE,EAAE,OAAO,UAAU,OAAO,EAAE,yCAAyC,gBAAgB,EAAE;AAAA,IACvF,EAAE,OAAO,UAAU,OAAO,EAAE,0CAA0C,SAAS,EAAE;AAAA,IACjF,EAAE,OAAO,WAAW,OAAO,EAAE,2CAA2C,UAAU,EAAE;AAAA,EACtF;AAEA,QAAM,cAAc,QAAQ,KAAK,OAAK,EAAE,UAAU,MAAM,GAAG;AAE3D,SACE,qBAAC,SAAI,WAAU,YAAW,KACxB;AAAA;AAAA,MAAC;AAAA;AAAA,QACC,MAAK;AAAA,QACL,iBAAc;AAAA,QACd,iBAAe;AAAA,QACf,SAAS,MAAM,QAAQ,UAAQ,CAAC,IAAI;AAAA,QACpC,WAAU;AAAA,QAEV;AAAA,8BAAC,UAAO,WAAU,WAAU,eAAW,MAAC;AAAA,UACvC,EAAE,wCAAwC,SAAS;AAAA,UACnD,WAAW,SACV,qBAAC,UAAK,WAAU,yBAAwB;AAAA;AAAA,YAAG;AAAA,aAAY;AAAA,UAEzD,oBAAC,eAAY,WAAW,GAAG,6CAA6C,QAAQ,YAAY,GAAG,eAAW,MAAC;AAAA;AAAA;AAAA,IAC7G;AAAA,IACC,QACC;AAAA,MAAC;AAAA;AAAA,QACC,MAAK;AAAA,QACL,cAAY,EAAE,wCAAwC,SAAS;AAAA,QAC/D,WAAU;AAAA,QAET,kBAAQ,IAAI,SACX;AAAA,UAAC;AAAA;AAAA,YAEC,MAAK;AAAA,YACL,MAAK;AAAA,YACL,iBAAe,WAAW,IAAI;AAAA,YAC9B,SAAS,MAAM;AAAE,uBAAS,IAAI,KAAK;AAAG,sBAAQ,KAAK;AAAA,YAAE;AAAA,YACrD,WAAU;AAAA,YAEV;AAAA,kCAAC,SAAM,WAAW,GAAG,wBAAwB,WAAW,IAAI,QAAQ,gBAAgB,WAAW,GAAG,eAAW,MAAC;AAAA,cAC7G,IAAI;AAAA;AAAA;AAAA,UARA,IAAI;AAAA,QASX,CACD;AAAA;AAAA,IACH;AAAA,KAEJ;AAEJ;AAEO,MAAM,wBAAmF,CAAC,EAAE,QAAQ,MAAM;AAC/G,QAAM,IAAI,KAAK;AACf,QAAM,CAAC,SAAS,UAAU,IAAI,MAAM,SAA0B,CAAC,CAAC;AAChE,QAAM,CAAC,SAAS,UAAU,IAAI,MAAM,SAAS,IAAI;AACjD,QAAM,CAAC,OAAO,QAAQ,IAAI,MAAM,SAAwB,IAAI;AAC5D,QAAM,CAAC,WAAW,YAAY,IAAI,MAAM,SAAuC,CAAC,CAAC;AACjF,QAAM,CAAC,QAAQ,SAAS,IAAI,MAAM,SAAqB,KAAK;AAE5D,QAAM,UAAU,MAAM;AACpB,UAAM,OAAO;AAAA,MACX;AAAA,MACA;AAAA,MACA;AAAA,IACF;AACA,UAAM,MAAoC,CAAC;AAC3C,UAAM,QAAQ,CAAC,UAAqB;AAClC,UAAI,CAAC,MAAM,QAAQ,KAAK,EAAG;AAC3B,iBAAW,QAAQ,OAAO;AACxB,YAAI,CAAC,QAAQ,OAAO,SAAS,SAAU;AACvC,cAAM,IAAI;AACV,cAAM,QAAQ,OAAO,EAAE,UAAU,WAAW,EAAE,QAAQ;AACtD,YAAI,CAAC,MAAO;AACZ,YAAI,KAAK,IAAI;AAAA,UACX;AAAA,UACA,OAAO,OAAO,EAAE,UAAU,YAAY,EAAE,MAAM,SAAS,EAAE,QAAQ;AAAA,UACjE,OAAO,OAAO,EAAE,UAAU,YAAY,EAAE,MAAM,SAAS,EAAE,QAAQ;AAAA,UACjE,MAAM,OAAO,EAAE,SAAS,YAAY,EAAE,KAAK,SAAS,EAAE,OAAO;AAAA,QAC/D;AAAA,MACF;AAAA,IACF;AACA,YAAQ,IAAI,KAAK,IAAI,CAAC,QAAQ,QAA+B,GAAG,CAAC,CAAC,EAC/D,KAAK,CAAC,cAAc;AACnB,iBAAW,OAAO,WAAW;AAC3B,YAAI,IAAI,MAAM,MAAM,QAAQ,IAAI,QAAQ,KAAK,EAAG,OAAM,IAAI,OAAO,KAAK;AAAA,MACxE;AACA,mBAAa,GAAG;AAAA,IAClB,CAAC,EACA,MAAM,MAAM;AAAA,IAAC,CAAC;AAAA,EACnB,GAAG,CAAC,CAAC;AAEL,QAAM,UAAU,MAAM;AACpB,QAAI,CAAC,eAAe,OAAO,GAAG;AAC5B,iBAAW,KAAK;AAChB,eAAS,EAAE,iCAAiC,yBAAyB,CAAC;AACtE;AAAA,IACF;AAEA,eAAW,IAAI;AACf,aAAS,IAAI;AACb;AAAA,MACE,oCAAoC,QAAQ,IAAI,OAAO,QAAQ,OAAO,EAAE;AAAA,IAC1E,EACG,KAAK,CAAC,QAAQ;AACb,UAAI,IAAI,MAAM,MAAM,QAAQ,IAAI,QAAQ,KAAK,GAAG;AAC9C,mBAAW,IAAI,OAAO,KAAK;AAAA,MAC7B,OAAO;AACL,iBAAS,EAAE,iCAAiC,yBAAyB,CAAC;AAAA,MACxE;AAAA,IACF,CAAC,EACA,MAAM,MAAM,SAAS,EAAE,iCAAiC,yBAAyB,CAAC,CAAC,EACnF,QAAQ,MAAM,WAAW,KAAK,CAAC;AAAA,EACpC,GAAG,CAAC,SAAS,CAAC,CAAC;AAEf,QAAM,WAAW,MAAM;AAAA,IACrB,MAAM,WAAW,QAAQ,UAAU,QAAQ,OAAO,OAAK,EAAE,SAAS,MAAM;AAAA,IACxE,CAAC,SAAS,MAAM;AAAA,EAClB;AAEA,SACE,qBAAC,SAAI,WAAU,aAEb;AAAA,wBAAC,SACC,8BAAC,kBAAe,QAAgB,UAAU,WAAW,GACvD;AAAA,IAGC,UACC,oBAAC,SAAI,WAAU,yCACb,8BAAC,WAAQ,GACX,IACE,QACF,oBAAC,SAAI,WAAU,4BAA4B,iBAAM,IAC/C,CAAC,SAAS,SACZ,oBAAC,SAAI,WAAU,kDACZ,YAAE,iCAAiC,yBAAyB,GAC/D,IAEA,oBAAC,SAAI,WAAU,YACZ,mBAAS,IAAI,CAAC,OAAO,UACpB;AAAA,MAAC;AAAA;AAAA,QAEC;AAAA,QACA;AAAA,QACA,QAAQ,UAAU,SAAS,SAAS;AAAA;AAAA,MAH/B,MAAM;AAAA,IAIb,CACD,GACH;AAAA,KAEJ;AAEJ;AAEA,IAAO,wBAAQ;",
+  "sourcesContent": ["\"use client\"\n\nimport * as React from \"react\"\nimport { Spinner } from \"@open-mercato/ui/primitives/spinner\"\nimport { useT } from \"@open-mercato/shared/lib/i18n/context\"\nimport { apiCall } from \"@open-mercato/ui/backend/utils/apiCall\"\nimport { formatRelativeTime, formatDateTime } from \"@open-mercato/shared/lib/time\"\nimport { cn } from \"@open-mercato/shared/lib/utils\"\nimport type { InjectionWidgetComponentProps } from '@open-mercato/shared/modules/widgets/injection'\nimport { ArrowRightLeft, Zap, MessageSquare, User, Filter, ChevronDown, Check } from 'lucide-react'\n\nexport type TimelineEntry = {\n  id: string\n  occurredAt: string\n  kind: \"status\" | \"action\" | \"comment\"\n  action: string\n  actor: { id: string | null; label: string }\n  source: \"action_log\" | \"note\"\n  metadata?: {\n    statusFrom?: string | null\n    statusTo?: string | null\n    documentKind?: \"order\" | \"quote\"\n    commandId?: string\n  }\n}\n\ntype StatusOption = {\n  value: string\n  label: string\n  color: string | null\n  icon: string | null\n}\n\ntype TimelineContext = {\n  kind: \"order\" | \"quote\"\n  record: { id: string }\n}\n\nconst isValidContext = (ctx: unknown): ctx is TimelineContext =>\n  ctx !== null &&\n  typeof ctx === 'object' &&\n  'kind' in ctx &&\n  'record' in ctx &&\n  ((ctx as TimelineContext).kind === 'order' || (ctx as TimelineContext).kind === 'quote') &&\n  typeof (ctx as TimelineContext).record === 'object' &&\n  (ctx as TimelineContext).record !== null &&\n  'id' in (ctx as TimelineContext).record &&\n  typeof (ctx as TimelineContext).record.id === 'string'\n\nconst KIND_ICONS = {\n  status: ArrowRightLeft,\n  action: Zap,\n  comment: MessageSquare,\n}\n\nconst KIND_ICON_COLORS = {\n  status: 'text-foreground',\n  action: 'text-foreground',\n  comment: 'text-foreground',\n}\n\nconst KIND_BG_COLORS = {\n  status: 'bg-muted',\n  action: 'bg-muted',\n  comment: 'bg-muted',\n}\n\nfunction StatusDot({ color, className }: { color: string | null | undefined; className?: string }) {\n  if (!color) return <span className={cn('h-2.5 w-2.5 rounded-full bg-muted-foreground/40 border border-border inline-flex', className)} />\n  return (\n    <span\n      className={cn('h-2.5 w-2.5 rounded-full border border-border/70 inline-flex', className)}\n      style={{ backgroundColor: color }}\n      aria-hidden\n    />\n  )\n}\n\nfunction StatusTransition({\n  statusFrom,\n  statusTo,\n  statusMap,\n}: {\n  statusFrom: string | null | undefined\n  statusTo: string | null | undefined\n  statusMap: Record<string, StatusOption>\n}) {\n  const from = statusFrom ? (statusMap[statusFrom] ?? { value: statusFrom, label: statusFrom, color: null, icon: null }) : null\n  const to = statusTo ? (statusMap[statusTo] ?? { value: statusTo, label: statusTo, color: null, icon: null }) : null\n\n  return (\n    <div className=\"flex items-center gap-1.5 flex-wrap\">\n      {from ? (\n        <span className=\"inline-flex items-center gap-1 text-xs text-muted-foreground\">\n          <StatusDot color={from.color} />\n          <span>{from.label}</span>\n        </span>\n      ) : null}\n      {from && to ? (\n        <ArrowRightLeft className=\"h-3 w-3 text-muted-foreground/60 shrink-0\" />\n      ) : null}\n      {to ? (\n        <span className=\"inline-flex items-center gap-1 text-xs font-medium text-foreground\">\n          <StatusDot color={to.color} />\n          <span>{to.label}</span>\n        </span>\n      ) : null}\n    </div>\n  )\n}\n\nfunction TimelineItem({\n  entry,\n  statusMap,\n  isLast,\n}: {\n  entry: TimelineEntry\n  statusMap: Record<string, StatusOption>\n  isLast: boolean\n}) {\n  const KindIcon = KIND_ICONS[entry.kind]\n  const relativeTime = formatRelativeTime(entry.occurredAt)\n  const absoluteTime = formatDateTime(entry.occurredAt)\n\n  const isStatusChange = entry.kind === 'status' && entry.metadata?.statusTo\n\n  return (\n    <div data-testid=\"timeline-entry\" className=\"relative flex gap-3\">\n      {/* Vertical connector line */}\n      {!isLast && (\n        <div className=\"absolute left-[11px] top-6 bottom-0 w-px bg-border\" aria-hidden />\n      )}\n\n      {/* Icon circle */}\n      <div\n        className={cn(\n          'relative z-10 flex h-6 w-6 shrink-0 items-center justify-center rounded-full border border-border',\n          KIND_BG_COLORS[entry.kind],\n        )}\n      >\n        <KindIcon className={cn('h-3 w-3', KIND_ICON_COLORS[entry.kind])} aria-hidden />\n      </div>\n\n      {/* Content card */}\n      <div className=\"flex-1 pb-4\">\n        <div className=\"group rounded-lg border bg-card p-3 space-y-1.5\">\n          {/* Header: actor + time */}\n          <div className=\"flex items-center justify-between gap-2 flex-wrap\">\n            <span className=\"inline-flex items-center gap-1.5 text-xs font-medium text-foreground\">\n              <User className=\"h-3 w-3 text-muted-foreground\" aria-hidden />\n              {entry.actor.label}\n            </span>\n            <span\n              className=\"text-xs text-muted-foreground\"\n              title={absoluteTime ?? undefined}\n            >\n              {relativeTime ?? absoluteTime}\n            </span>\n          </div>\n\n          {/* Body */}\n          {isStatusChange ? (\n            <StatusTransition\n              statusFrom={entry.metadata?.statusFrom}\n              statusTo={entry.metadata?.statusTo}\n              statusMap={statusMap}\n            />\n          ) : (\n            <div className=\"text-sm text-foreground\">{entry.action}</div>\n          )}\n        </div>\n      </div>\n    </div>\n  )\n}\n\ntype FilterKind = 'all' | 'status' | 'action' | 'comment'\n\ntype FilterOption = { value: FilterKind; label: string }\n\nfunction FilterDropdown({ filter, onChange }: { filter: FilterKind; onChange: (kind: FilterKind) => void }) {\n  const t = useT()\n  const [open, setOpen] = React.useState(false)\n  const ref = React.useRef<HTMLDivElement>(null)\n\n  React.useEffect(() => {\n    if (!open) return\n    function onDocClick(e: MouseEvent) {\n      if (ref.current && !ref.current.contains(e.target as Node)) setOpen(false)\n    }\n    function onKey(e: KeyboardEvent) {\n      if (e.key === 'Escape') setOpen(false)\n    }\n    document.addEventListener('mousedown', onDocClick)\n    document.addEventListener('keydown', onKey)\n    return () => {\n      document.removeEventListener('mousedown', onDocClick)\n      document.removeEventListener('keydown', onKey)\n    }\n  }, [open])\n\n  const options: FilterOption[] = [\n    { value: 'all', label: t('sales.documents.history.filter.all', 'All') },\n    { value: 'status', label: t('sales.documents.history.filter.status', 'Status changes') },\n    { value: 'action', label: t('sales.documents.history.filter.actions', 'Actions') },\n    { value: 'comment', label: t('sales.documents.history.filter.comments', 'Comments') },\n  ]\n\n  const activeLabel = options.find(o => o.value === filter)?.label\n\n  return (\n    <div className=\"relative\" ref={ref}>\n      <button\n        type=\"button\"\n        aria-haspopup=\"listbox\"\n        aria-expanded={open}\n        onClick={() => setOpen(prev => !prev)}\n        className=\"inline-flex items-center gap-1.5 rounded-md border border-input bg-background px-2.5 py-1 text-xs font-medium shadow-sm hover:bg-accent hover:text-accent-foreground transition-colors select-none\"\n      >\n        <Filter className=\"h-3 w-3\" aria-hidden />\n        {t('sales.documents.history.filter.label', 'Filters')}\n        {filter !== 'all' && (\n          <span className=\"text-muted-foreground\">: {activeLabel}</span>\n        )}\n        <ChevronDown className={cn('h-3 w-3 transition-transform duration-150', open && 'rotate-180')} aria-hidden />\n      </button>\n      {open && (\n        <div\n          role=\"listbox\"\n          aria-label={t('sales.documents.history.filter.label', 'Filters')}\n          className=\"absolute left-0 top-full mt-1 z-dropdown w-48 rounded-md border bg-background p-1 shadow-md\"\n        >\n          {options.map(opt => (\n            <button\n              key={opt.value}\n              type=\"button\"\n              role=\"option\"\n              aria-selected={filter === opt.value}\n              onClick={() => { onChange(opt.value); setOpen(false) }}\n              className=\"flex w-full items-center gap-2 rounded px-2 py-1.5 text-sm hover:bg-accent\"\n            >\n              <Check className={cn('h-3.5 w-3.5 shrink-0', filter === opt.value ? 'opacity-100' : 'opacity-0')} aria-hidden />\n              {opt.label}\n            </button>\n          ))}\n        </div>\n      )}\n    </div>\n  )\n}\n\nexport const DocumentHistoryWidget: React.FC<InjectionWidgetComponentProps<unknown, unknown>> = ({ context }) => {\n  const t = useT()\n  const [entries, setEntries] = React.useState<TimelineEntry[]>([])\n  const [loading, setLoading] = React.useState(true)\n  const [error, setError] = React.useState<string | null>(null)\n  const [statusMap, setStatusMap] = React.useState<Record<string, StatusOption>>({})\n  const [filter, setFilter] = React.useState<FilterKind>('all')\n\n  React.useEffect(() => {\n    const urls = [\n      '/api/sales/order-statuses?pageSize=100',\n      '/api/sales/shipment-statuses?pageSize=100',\n      '/api/sales/payment-statuses?pageSize=100',\n    ]\n    const map: Record<string, StatusOption> = {}\n    const merge = (items: unknown[]) => {\n      if (!Array.isArray(items)) return\n      for (const item of items) {\n        if (!item || typeof item !== 'object') continue\n        const d = item as Record<string, unknown>\n        const value = typeof d.value === 'string' ? d.value : null\n        if (!value) continue\n        map[value] = {\n          value,\n          label: typeof d.label === 'string' && d.label.length ? d.label : value,\n          color: typeof d.color === 'string' && d.color.length ? d.color : null,\n          icon: typeof d.icon === 'string' && d.icon.length ? d.icon : null,\n        }\n      }\n    }\n    Promise.all(urls.map((url) => apiCall<{ items?: unknown[] }>(url)))\n      .then((responses) => {\n        for (const res of responses) {\n          if (res.ok && Array.isArray(res.result?.items)) merge(res.result.items)\n        }\n        setStatusMap(map)\n      })\n      .catch(() => {})\n  }, [])\n\n  React.useEffect(() => {\n    if (!isValidContext(context)) {\n      setLoading(false)\n      setError(t(\"sales.documents.history.error\", \"Failed to load history.\"))\n      return\n    }\n\n    setLoading(true)\n    setError(null)\n    apiCall<{ items: TimelineEntry[] }>(\n      `/api/sales/document-history?kind=${context.kind}&id=${context.record.id}`\n    )\n      .then((res) => {\n        if (res.ok && Array.isArray(res.result?.items)) {\n          setEntries(res.result.items)\n        } else {\n          setError(t(\"sales.documents.history.error\", \"Failed to load history.\"))\n        }\n      })\n      .catch(() => setError(t(\"sales.documents.history.error\", \"Failed to load history.\")))\n      .finally(() => setLoading(false))\n  }, [context, t])\n\n  const filtered = React.useMemo(\n    () => filter === 'all' ? entries : entries.filter(e => e.kind === filter),\n    [entries, filter]\n  )\n\n  return (\n    <div className=\"space-y-4\">\n      {/* Filter dropdown */}\n      <div>\n        <FilterDropdown filter={filter} onChange={setFilter} />\n      </div>\n\n      {/* Content */}\n      {loading ? (\n        <div className=\"flex items-center justify-center h-24\">\n          <Spinner />\n        </div>\n      ) : error ? (\n        <div className=\"text-destructive text-sm\">{error}</div>\n      ) : !filtered.length ? (\n        <div className=\"text-muted-foreground text-sm py-6 text-center\">\n          {t(\"sales.documents.history.empty\", \"No history entries yet.\")}\n        </div>\n      ) : (\n        <div className=\"relative\">\n          {filtered.map((entry, index) => (\n            <TimelineItem\n              key={entry.id}\n              entry={entry}\n              statusMap={statusMap}\n              isLast={index === filtered.length - 1}\n            />\n          ))}\n        </div>\n      )}\n    </div>\n  )\n}\n\nexport default DocumentHistoryWidget\n"],
+  "mappings": ";AAoEqB,cAyBb,YAzBa;AAlErB,YAAY,WAAW;AACvB,SAAS,eAAe;AACxB,SAAS,YAAY;AACrB,SAAS,eAAe;AACxB,SAAS,oBAAoB,sBAAsB;AACnD,SAAS,UAAU;AAEnB,SAAS,gBAAgB,KAAK,eAAe,MAAM,QAAQ,aAAa,aAAa;AA6BrF,MAAM,iBAAiB,CAAC,QACtB,QAAQ,QACR,OAAO,QAAQ,YACf,UAAU,OACV,YAAY,QACV,IAAwB,SAAS,WAAY,IAAwB,SAAS,YAChF,OAAQ,IAAwB,WAAW,YAC1C,IAAwB,WAAW,QACpC,QAAS,IAAwB,UACjC,OAAQ,IAAwB,OAAO,OAAO;AAEhD,MAAM,aAAa;AAAA,EACjB,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,SAAS;AACX;AAEA,MAAM,mBAAmB;AAAA,EACvB,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,SAAS;AACX;AAEA,MAAM,iBAAiB;AAAA,EACrB,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,SAAS;AACX;AAEA,SAAS,UAAU,EAAE,OAAO,UAAU,GAA6D;AACjG,MAAI,CAAC,MAAO,QAAO,oBAAC,UAAK,WAAW,GAAG,oFAAoF,SAAS,GAAG;AACvI,SACE;AAAA,IAAC;AAAA;AAAA,MACC,WAAW,GAAG,gEAAgE,SAAS;AAAA,MACvF,OAAO,EAAE,iBAAiB,MAAM;AAAA,MAChC,eAAW;AAAA;AAAA,EACb;AAEJ;AAEA,SAAS,iBAAiB;AAAA,EACxB;AAAA,EACA;AAAA,EACA;AACF,GAIG;AACD,QAAM,OAAO,aAAc,UAAU,UAAU,KAAK,EAAE,OAAO,YAAY,OAAO,YAAY,OAAO,MAAM,MAAM,KAAK,IAAK;AACzH,QAAM,KAAK,WAAY,UAAU,QAAQ,KAAK,EAAE,OAAO,UAAU,OAAO,UAAU,OAAO,MAAM,MAAM,KAAK,IAAK;AAE/G,SACE,qBAAC,SAAI,WAAU,uCACZ;AAAA,WACC,qBAAC,UAAK,WAAU,gEACd;AAAA,0BAAC,aAAU,OAAO,KAAK,OAAO;AAAA,MAC9B,oBAAC,UAAM,eAAK,OAAM;AAAA,OACpB,IACE;AAAA,IACH,QAAQ,KACP,oBAAC,kBAAe,WAAU,6CAA4C,IACpE;AAAA,IACH,KACC,qBAAC,UAAK,WAAU,sEACd;AAAA,0BAAC,aAAU,OAAO,GAAG,OAAO;AAAA,MAC5B,oBAAC,UAAM,aAAG,OAAM;AAAA,OAClB,IACE;AAAA,KACN;AAEJ;AAEA,SAAS,aAAa;AAAA,EACpB;AAAA,EACA;AAAA,EACA;AACF,GAIG;AACD,QAAM,WAAW,WAAW,MAAM,IAAI;AACtC,QAAM,eAAe,mBAAmB,MAAM,UAAU;AACxD,QAAM,eAAe,eAAe,MAAM,UAAU;AAEpD,QAAM,iBAAiB,MAAM,SAAS,YAAY,MAAM,UAAU;AAElE,SACE,qBAAC,SAAI,eAAY,kBAAiB,WAAU,uBAEzC;AAAA,KAAC,UACA,oBAAC,SAAI,WAAU,sDAAqD,eAAW,MAAC;AAAA,IAIlF;AAAA,MAAC;AAAA;AAAA,QACC,WAAW;AAAA,UACT;AAAA,UACA,eAAe,MAAM,IAAI;AAAA,QAC3B;AAAA,QAEA,8BAAC,YAAS,WAAW,GAAG,WAAW,iBAAiB,MAAM,IAAI,CAAC,GAAG,eAAW,MAAC;AAAA;AAAA,IAChF;AAAA,IAGA,oBAAC,SAAI,WAAU,eACb,+BAAC,SAAI,WAAU,mDAEb;AAAA,2BAAC,SAAI,WAAU,qDACb;AAAA,6BAAC,UAAK,WAAU,wEACd;AAAA,8BAAC,QAAK,WAAU,iCAAgC,eAAW,MAAC;AAAA,UAC3D,MAAM,MAAM;AAAA,WACf;AAAA,QACA;AAAA,UAAC;AAAA;AAAA,YACC,WAAU;AAAA,YACV,OAAO,gBAAgB;AAAA,YAEtB,0BAAgB;AAAA;AAAA,QACnB;AAAA,SACF;AAAA,MAGC,iBACC;AAAA,QAAC;AAAA;AAAA,UACC,YAAY,MAAM,UAAU;AAAA,UAC5B,UAAU,MAAM,UAAU;AAAA,UAC1B;AAAA;AAAA,MACF,IAEA,oBAAC,SAAI,WAAU,2BAA2B,gBAAM,QAAO;AAAA,OAE3D,GACF;AAAA,KACF;AAEJ;AAMA,SAAS,eAAe,EAAE,QAAQ,SAAS,GAAiE;AAC1G,QAAM,IAAI,KAAK;AACf,QAAM,CAAC,MAAM,OAAO,IAAI,MAAM,SAAS,KAAK;AAC5C,QAAM,MAAM,MAAM,OAAuB,IAAI;AAE7C,QAAM,UAAU,MAAM;AACpB,QAAI,CAAC,KAAM;AACX,aAAS,WAAW,GAAe;AACjC,UAAI,IAAI,WAAW,CAAC,IAAI,QAAQ,SAAS,EAAE,MAAc,EAAG,SAAQ,KAAK;AAAA,IAC3E;AACA,aAAS,MAAM,GAAkB;AAC/B,UAAI,EAAE,QAAQ,SAAU,SAAQ,KAAK;AAAA,IACvC;AACA,aAAS,iBAAiB,aAAa,UAAU;AACjD,aAAS,iBAAiB,WAAW,KAAK;AAC1C,WAAO,MAAM;AACX,eAAS,oBAAoB,aAAa,UAAU;AACpD,eAAS,oBAAoB,WAAW,KAAK;AAAA,IAC/C;AAAA,EACF,GAAG,CAAC,IAAI,CAAC;AAET,QAAM,UAA0B;AAAA,IAC9B,EAAE,OAAO,OAAO,OAAO,EAAE,sCAAsC,KAAK,EAAE;AAAA,IACtE,EAAE,OAAO,UAAU,OAAO,EAAE,yCAAyC,gBAAgB,EAAE;AAAA,IACvF,EAAE,OAAO,UAAU,OAAO,EAAE,0CAA0C,SAAS,EAAE;AAAA,IACjF,EAAE,OAAO,WAAW,OAAO,EAAE,2CAA2C,UAAU,EAAE;AAAA,EACtF;AAEA,QAAM,cAAc,QAAQ,KAAK,OAAK,EAAE,UAAU,MAAM,GAAG;AAE3D,SACE,qBAAC,SAAI,WAAU,YAAW,KACxB;AAAA;AAAA,MAAC;AAAA;AAAA,QACC,MAAK;AAAA,QACL,iBAAc;AAAA,QACd,iBAAe;AAAA,QACf,SAAS,MAAM,QAAQ,UAAQ,CAAC,IAAI;AAAA,QACpC,WAAU;AAAA,QAEV;AAAA,8BAAC,UAAO,WAAU,WAAU,eAAW,MAAC;AAAA,UACvC,EAAE,wCAAwC,SAAS;AAAA,UACnD,WAAW,SACV,qBAAC,UAAK,WAAU,yBAAwB;AAAA;AAAA,YAAG;AAAA,aAAY;AAAA,UAEzD,oBAAC,eAAY,WAAW,GAAG,6CAA6C,QAAQ,YAAY,GAAG,eAAW,MAAC;AAAA;AAAA;AAAA,IAC7G;AAAA,IACC,QACC;AAAA,MAAC;AAAA;AAAA,QACC,MAAK;AAAA,QACL,cAAY,EAAE,wCAAwC,SAAS;AAAA,QAC/D,WAAU;AAAA,QAET,kBAAQ,IAAI,SACX;AAAA,UAAC;AAAA;AAAA,YAEC,MAAK;AAAA,YACL,MAAK;AAAA,YACL,iBAAe,WAAW,IAAI;AAAA,YAC9B,SAAS,MAAM;AAAE,uBAAS,IAAI,KAAK;AAAG,sBAAQ,KAAK;AAAA,YAAE;AAAA,YACrD,WAAU;AAAA,YAEV;AAAA,kCAAC,SAAM,WAAW,GAAG,wBAAwB,WAAW,IAAI,QAAQ,gBAAgB,WAAW,GAAG,eAAW,MAAC;AAAA,cAC7G,IAAI;AAAA;AAAA;AAAA,UARA,IAAI;AAAA,QASX,CACD;AAAA;AAAA,IACH;AAAA,KAEJ;AAEJ;AAEO,MAAM,wBAAmF,CAAC,EAAE,QAAQ,MAAM;AAC/G,QAAM,IAAI,KAAK;AACf,QAAM,CAAC,SAAS,UAAU,IAAI,MAAM,SAA0B,CAAC,CAAC;AAChE,QAAM,CAAC,SAAS,UAAU,IAAI,MAAM,SAAS,IAAI;AACjD,QAAM,CAAC,OAAO,QAAQ,IAAI,MAAM,SAAwB,IAAI;AAC5D,QAAM,CAAC,WAAW,YAAY,IAAI,MAAM,SAAuC,CAAC,CAAC;AACjF,QAAM,CAAC,QAAQ,SAAS,IAAI,MAAM,SAAqB,KAAK;AAE5D,QAAM,UAAU,MAAM;AACpB,UAAM,OAAO;AAAA,MACX;AAAA,MACA;AAAA,MACA;AAAA,IACF;AACA,UAAM,MAAoC,CAAC;AAC3C,UAAM,QAAQ,CAAC,UAAqB;AAClC,UAAI,CAAC,MAAM,QAAQ,KAAK,EAAG;AAC3B,iBAAW,QAAQ,OAAO;AACxB,YAAI,CAAC,QAAQ,OAAO,SAAS,SAAU;AACvC,cAAM,IAAI;AACV,cAAM,QAAQ,OAAO,EAAE,UAAU,WAAW,EAAE,QAAQ;AACtD,YAAI,CAAC,MAAO;AACZ,YAAI,KAAK,IAAI;AAAA,UACX;AAAA,UACA,OAAO,OAAO,EAAE,UAAU,YAAY,EAAE,MAAM,SAAS,EAAE,QAAQ;AAAA,UACjE,OAAO,OAAO,EAAE,UAAU,YAAY,EAAE,MAAM,SAAS,EAAE,QAAQ;AAAA,UACjE,MAAM,OAAO,EAAE,SAAS,YAAY,EAAE,KAAK,SAAS,EAAE,OAAO;AAAA,QAC/D;AAAA,MACF;AAAA,IACF;AACA,YAAQ,IAAI,KAAK,IAAI,CAAC,QAAQ,QAA+B,GAAG,CAAC,CAAC,EAC/D,KAAK,CAAC,cAAc;AACnB,iBAAW,OAAO,WAAW;AAC3B,YAAI,IAAI,MAAM,MAAM,QAAQ,IAAI,QAAQ,KAAK,EAAG,OAAM,IAAI,OAAO,KAAK;AAAA,MACxE;AACA,mBAAa,GAAG;AAAA,IAClB,CAAC,EACA,MAAM,MAAM;AAAA,IAAC,CAAC;AAAA,EACnB,GAAG,CAAC,CAAC;AAEL,QAAM,UAAU,MAAM;AACpB,QAAI,CAAC,eAAe,OAAO,GAAG;AAC5B,iBAAW,KAAK;AAChB,eAAS,EAAE,iCAAiC,yBAAyB,CAAC;AACtE;AAAA,IACF;AAEA,eAAW,IAAI;AACf,aAAS,IAAI;AACb;AAAA,MACE,oCAAoC,QAAQ,IAAI,OAAO,QAAQ,OAAO,EAAE;AAAA,IAC1E,EACG,KAAK,CAAC,QAAQ;AACb,UAAI,IAAI,MAAM,MAAM,QAAQ,IAAI,QAAQ,KAAK,GAAG;AAC9C,mBAAW,IAAI,OAAO,KAAK;AAAA,MAC7B,OAAO;AACL,iBAAS,EAAE,iCAAiC,yBAAyB,CAAC;AAAA,MACxE;AAAA,IACF,CAAC,EACA,MAAM,MAAM,SAAS,EAAE,iCAAiC,yBAAyB,CAAC,CAAC,EACnF,QAAQ,MAAM,WAAW,KAAK,CAAC;AAAA,EACpC,GAAG,CAAC,SAAS,CAAC,CAAC;AAEf,QAAM,WAAW,MAAM;AAAA,IACrB,MAAM,WAAW,QAAQ,UAAU,QAAQ,OAAO,OAAK,EAAE,SAAS,MAAM;AAAA,IACxE,CAAC,SAAS,MAAM;AAAA,EAClB;AAEA,SACE,qBAAC,SAAI,WAAU,aAEb;AAAA,wBAAC,SACC,8BAAC,kBAAe,QAAgB,UAAU,WAAW,GACvD;AAAA,IAGC,UACC,oBAAC,SAAI,WAAU,yCACb,8BAAC,WAAQ,GACX,IACE,QACF,oBAAC,SAAI,WAAU,4BAA4B,iBAAM,IAC/C,CAAC,SAAS,SACZ,oBAAC,SAAI,WAAU,kDACZ,YAAE,iCAAiC,yBAAyB,GAC/D,IAEA,oBAAC,SAAI,WAAU,YACZ,mBAAS,IAAI,CAAC,OAAO,UACpB;AAAA,MAAC;AAAA;AAAA,QAEC;AAAA,QACA;AAAA,QACA,QAAQ,UAAU,SAAS,SAAS;AAAA;AAAA,MAH/B,MAAM;AAAA,IAIb,CACD,GACH;AAAA,KAEJ;AAEJ;AAEA,IAAO,wBAAQ;",
   "names": []
 }

package/dist/modules/sales/workflows.js

@@ -49,7 +49,7 @@ const orderApproval = defineWorkflow({
           config: {
             commandId: "sales.orders.update",
             statusDictionary: "sales.order_status",
-            input: { id: "{{context.orderId}}", statusValue: "pending_approval" }
+            input: { id: "{{context.id}}", statusValue: "pending_approval" }
           },
           retryPolicy: { maxAttempts: 3, initialIntervalMs: 1e3, backoffCoefficient: 2, maxIntervalMs: 1e4 }
         },
@@ -60,7 +60,7 @@ const orderApproval = defineWorkflow({
           async: true,
           config: {
             eventName: "sales.order.approval.requested",
-            payload: { orderId: "{{context.orderId}}", workflowInstanceId: "{{workflow.instanceId}}" }
+            payload: { orderId: "{{context.id}}", workflowInstanceId: "{{workflow.instanceId}}" }
           }
         }
       ]
@@ -83,7 +83,7 @@ const orderApproval = defineWorkflow({
           config: {
             commandId: "sales.orders.update",
             statusDictionary: "sales.order_status",
-            input: { id: "{{context.orderId}}", statusValue: "approved" }
+            input: { id: "{{context.id}}", statusValue: "approved" }
           },
           retryPolicy: { maxAttempts: 3, initialIntervalMs: 1e3, backoffCoefficient: 2, maxIntervalMs: 1e4 }
         },
@@ -95,7 +95,7 @@ const orderApproval = defineWorkflow({
           config: {
             eventName: "sales.order.approval.approved",
             payload: {
-              orderId: "{{context.orderId}}",
+              orderId: "{{context.id}}",
               workflowInstanceId: "{{workflow.instanceId}}",
               approvedBy: "{{context.completedBy}}",
               comments: "{{context.comments}}"
@@ -122,7 +122,7 @@ const orderApproval = defineWorkflow({
           config: {
             commandId: "sales.orders.update",
             statusDictionary: "sales.order_status",
-            input: { id: "{{context.orderId}}", statusValue: "rejected" }
+            input: { id: "{{context.id}}", statusValue: "rejected" }
           },
           retryPolicy: { maxAttempts: 3, initialIntervalMs: 1e3, backoffCoefficient: 2, maxIntervalMs: 1e4 }
         },
@@ -134,7 +134,7 @@ const orderApproval = defineWorkflow({
           config: {
             eventName: "sales.order.approval.rejected",
             payload: {
-              orderId: "{{context.orderId}}",
+              orderId: "{{context.id}}",
               workflowInstanceId: "{{workflow.instanceId}}",
               rejectedBy: "{{context.completedBy}}",
               comments: "{{context.comments}}"
@@ -167,10 +167,7 @@ const orderApproval = defineWorkflow({
     name: "Order Approval Trigger",
     description: "Triggers when a new sales order is created",
     eventPattern: "sales.order.created",
-    config: {
-      entityType: "SalesOrder",
-      contextMapping: [{ targetKey: "orderId", sourceExpression: "id" }]
-    },
+    config: { entityType: "SalesOrder" },
     enabled: true,
     priority: 0
   }]

package/dist/modules/sales/workflows.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../src/modules/sales/workflows.ts"],
-  "sourcesContent": ["/**\n * Sales Module \u2014 Code-Based Workflow Definitions\n *\n * Order approval workflow shipped with the sales module.\n */\n\nimport { defineWorkflow, createWorkflowsModuleConfig } from '@open-mercato/shared/modules/workflows'\nimport { registerWorkflowSafeCommands } from '@open-mercato/core/modules/workflows/lib/workflow-safe-commands'\n\nregisterWorkflowSafeCommands([\n  { commandId: 'sales.orders.update', requiredFeatures: ['sales.orders.manage'] },\n])\n\nconst orderApproval = defineWorkflow({\n  workflowId: 'sales.order-approval',\n  workflowName: 'Sales Order Approval Workflow',\n  description: 'Approval workflow for sales orders requiring authorization before processing',\n  metadata: { category: 'Sales', tags: ['sales', 'approval', 'order'], icon: 'check-circle' },\n  steps: [\n    { stepId: 'start', stepName: 'Start', stepType: 'START', description: 'Initialize order approval workflow' },\n    {\n      stepId: 'pending_approval',\n      stepName: 'Pending Approval',\n      stepType: 'USER_TASK',\n      description: 'Order awaiting approval decision',\n      userTaskConfig: {\n        formSchema: {\n          type: 'object',\n          required: ['decision'],\n          properties: {\n            comments: { type: 'string', title: 'Comments', description: 'Optional comments for the decision' },\n            decision: { enum: ['approve', 'reject'], type: 'string', title: 'Decision', description: 'Approve or reject the order' },\n          },\n        },\n        slaDuration: 'PT24H',\n      },\n    },\n    { stepId: 'approved', stepName: 'Approved', stepType: 'AUTOMATED', description: 'Order has been approved' },\n    { stepId: 'rejected', stepName: 'Rejected', stepType: 'AUTOMATED', description: 'Order has been rejected' },\n    { stepId: 'end', stepName: 'Complete', stepType: 'END', description: 'Workflow complete' },\n  ] as const,\n  transitions: [\n    {\n      transitionId: 'start_to_pending',\n      transitionName: 'Submit for Approval',\n      fromStepId: 'start',\n      toStepId: 'pending_approval',\n      trigger: 'auto',\n      priority: 100,\n      continueOnActivityFailure: true,\n      activities: [\n        {\n          activityId: 'set_pending_status',\n          activityName: 'Set Order to Pending Approval',\n          activityType: 'UPDATE_ENTITY',\n          async: false,\n          config: {\n            commandId: 'sales.orders.update',\n            statusDictionary: 'sales.order_status',\n            input: { id: '{{context.orderId}}', statusValue: 'pending_approval' },\n          },\n          retryPolicy: { maxAttempts: 3, initialIntervalMs: 1000, backoffCoefficient: 2, maxIntervalMs: 10000 },\n        },\n        {\n          activityId: 'emit_approval_requested',\n          activityName: 'Emit Approval Requested Event',\n          activityType: 'EMIT_EVENT',\n          async: true,\n          config: {\n            eventName: 'sales.order.approval.requested',\n            payload: { orderId: '{{context.orderId}}', workflowInstanceId: '{{workflow.instanceId}}' },\n          },\n        },\n      ],\n    },\n    {\n      transitionId: 'pending_approval_to_approved',\n      transitionName: 'Approve Order',\n      fromStepId: 'pending_approval',\n      toStepId: 'approved',\n      trigger: 'auto',\n      priority: 100,\n      preConditions: [{ ruleId: 'workflow_order_approval_check_approved', required: true }],\n      continueOnActivityFailure: true,\n      activities: [\n        {\n          activityId: 'set_approved_status',\n          activityName: 'Set Order to Approved',\n          activityType: 'UPDATE_ENTITY',\n          async: false,\n          config: {\n            commandId: 'sales.orders.update',\n            statusDictionary: 'sales.order_status',\n            input: { id: '{{context.orderId}}', statusValue: 'approved' },\n          },\n          retryPolicy: { maxAttempts: 3, initialIntervalMs: 1000, backoffCoefficient: 2, maxIntervalMs: 10000 },\n        },\n        {\n          activityId: 'emit_order_approved',\n          activityName: 'Emit Order Approved Event',\n          activityType: 'EMIT_EVENT',\n          async: true,\n          config: {\n            eventName: 'sales.order.approval.approved',\n            payload: {\n              orderId: '{{context.orderId}}',\n              workflowInstanceId: '{{workflow.instanceId}}',\n              approvedBy: '{{context.completedBy}}',\n              comments: '{{context.comments}}',\n            },\n          },\n        },\n      ],\n    },\n    {\n      transitionId: 'pending_approval_to_rejected',\n      transitionName: 'Reject Order',\n      fromStepId: 'pending_approval',\n      toStepId: 'rejected',\n      trigger: 'auto',\n      priority: 90,\n      preConditions: [{ ruleId: 'workflow_order_approval_check_rejected', required: true }],\n      continueOnActivityFailure: true,\n      activities: [\n        {\n          activityId: 'set_rejected_status',\n          activityName: 'Set Order to Rejected',\n          activityType: 'UPDATE_ENTITY',\n          async: false,\n          config: {\n            commandId: 'sales.orders.update',\n            statusDictionary: 'sales.order_status',\n            input: { id: '{{context.orderId}}', statusValue: 'rejected' },\n          },\n          retryPolicy: { maxAttempts: 3, initialIntervalMs: 1000, backoffCoefficient: 2, maxIntervalMs: 10000 },\n        },\n        {\n          activityId: 'emit_order_rejected',\n          activityName: 'Emit Order Rejected Event',\n          activityType: 'EMIT_EVENT',\n          async: true,\n          config: {\n            eventName: 'sales.order.approval.rejected',\n            payload: {\n              orderId: '{{context.orderId}}',\n              workflowInstanceId: '{{workflow.instanceId}}',\n              rejectedBy: '{{context.completedBy}}',\n              comments: '{{context.comments}}',\n            },\n          },\n        },\n      ],\n    },\n    {\n      transitionId: 'approved_to_end',\n      transitionName: 'Complete After Approval',\n      fromStepId: 'approved',\n      toStepId: 'end',\n      trigger: 'auto',\n      priority: 100,\n      continueOnActivityFailure: true,\n    },\n    {\n      transitionId: 'rejected_to_end',\n      transitionName: 'Complete After Rejection',\n      fromStepId: 'rejected',\n      toStepId: 'end',\n      trigger: 'auto',\n      priority: 100,\n      continueOnActivityFailure: true,\n    },\n  ],\n  triggers: [{\n    triggerId: 'order_approval_trigger',\n    name: 'Order Approval Trigger',\n    description: 'Triggers when a new sales order is created',\n    eventPattern: 'sales.order.created',\n    config: {\n      entityType: 'SalesOrder',\n      contextMapping: [{ targetKey: 'orderId', sourceExpression: 'id' }],\n    },\n    enabled: true,\n    priority: 0,\n  }],\n})\n\nexport const workflowsConfig = createWorkflowsModuleConfig({\n  moduleId: 'sales',\n  workflows: [orderApproval],\n})\n\nexport default workflowsConfig\n"],
-  "mappings": "AAMA,SAAS,gBAAgB,mCAAmC;AAC5D,SAAS,oCAAoC;AAE7C,6BAA6B;AAAA,EAC3B,EAAE,WAAW,uBAAuB,kBAAkB,CAAC,qBAAqB,EAAE;AAChF,CAAC;AAED,MAAM,gBAAgB,eAAe;AAAA,EACnC,YAAY;AAAA,EACZ,cAAc;AAAA,EACd,aAAa;AAAA,EACb,UAAU,EAAE,UAAU,SAAS,MAAM,CAAC,SAAS,YAAY,OAAO,GAAG,MAAM,eAAe;AAAA,EAC1F,OAAO;AAAA,IACL,EAAE,QAAQ,SAAS,UAAU,SAAS,UAAU,SAAS,aAAa,qCAAqC;AAAA,IAC3G;AAAA,MACE,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,UAAU;AAAA,MACV,aAAa;AAAA,MACb,gBAAgB;AAAA,QACd,YAAY;AAAA,UACV,MAAM;AAAA,UACN,UAAU,CAAC,UAAU;AAAA,UACrB,YAAY;AAAA,YACV,UAAU,EAAE,MAAM,UAAU,OAAO,YAAY,aAAa,qCAAqC;AAAA,YACjG,UAAU,EAAE,MAAM,CAAC,WAAW,QAAQ,GAAG,MAAM,UAAU,OAAO,YAAY,aAAa,8BAA8B;AAAA,UACzH;AAAA,QACF;AAAA,QACA,aAAa;AAAA,MACf;AAAA,IACF;AAAA,IACA,EAAE,QAAQ,YAAY,UAAU,YAAY,UAAU,aAAa,aAAa,0BAA0B;AAAA,IAC1G,EAAE,QAAQ,YAAY,UAAU,YAAY,UAAU,aAAa,aAAa,0BAA0B;AAAA,IAC1G,EAAE,QAAQ,OAAO,UAAU,YAAY,UAAU,OAAO,aAAa,oBAAoB;AAAA,EAC3F;AAAA,EACA,aAAa;AAAA,IACX;AAAA,MACE,cAAc;AAAA,MACd,gBAAgB;AAAA,MAChB,YAAY;AAAA,MACZ,UAAU;AAAA,MACV,SAAS;AAAA,MACT,UAAU;AAAA,MACV,2BAA2B;AAAA,MAC3B,YAAY;AAAA,QACV;AAAA,UACE,YAAY;AAAA,UACZ,cAAc;AAAA,UACd,cAAc;AAAA,UACd,OAAO;AAAA,UACP,QAAQ;AAAA,YACN,WAAW;AAAA,YACX,kBAAkB;AAAA,YAClB,OAAO,EAAE,IAAI,uBAAuB,aAAa,mBAAmB;AAAA,UACtE;AAAA,UACA,aAAa,EAAE,aAAa,GAAG,mBAAmB,KAAM,oBAAoB,GAAG,eAAe,IAAM;AAAA,QACtG;AAAA,QACA;AAAA,UACE,YAAY;AAAA,UACZ,cAAc;AAAA,UACd,cAAc;AAAA,UACd,OAAO;AAAA,UACP,QAAQ;AAAA,YACN,WAAW;AAAA,YACX,SAAS,EAAE,SAAS,uBAAuB,oBAAoB,0BAA0B;AAAA,UAC3F;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,cAAc;AAAA,MACd,gBAAgB;AAAA,MAChB,YAAY;AAAA,MACZ,UAAU;AAAA,MACV,SAAS;AAAA,MACT,UAAU;AAAA,MACV,eAAe,CAAC,EAAE,QAAQ,0CAA0C,UAAU,KAAK,CAAC;AAAA,MACpF,2BAA2B;AAAA,MAC3B,YAAY;AAAA,QACV;AAAA,UACE,YAAY;AAAA,UACZ,cAAc;AAAA,UACd,cAAc;AAAA,UACd,OAAO;AAAA,UACP,QAAQ;AAAA,YACN,WAAW;AAAA,YACX,kBAAkB;AAAA,YAClB,OAAO,EAAE,IAAI,uBAAuB,aAAa,WAAW;AAAA,UAC9D;AAAA,UACA,aAAa,EAAE,aAAa,GAAG,mBAAmB,KAAM,oBAAoB,GAAG,eAAe,IAAM;AAAA,QACtG;AAAA,QACA;AAAA,UACE,YAAY;AAAA,UACZ,cAAc;AAAA,UACd,cAAc;AAAA,UACd,OAAO;AAAA,UACP,QAAQ;AAAA,YACN,WAAW;AAAA,YACX,SAAS;AAAA,cACP,SAAS;AAAA,cACT,oBAAoB;AAAA,cACpB,YAAY;AAAA,cACZ,UAAU;AAAA,YACZ;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,cAAc;AAAA,MACd,gBAAgB;AAAA,MAChB,YAAY;AAAA,MACZ,UAAU;AAAA,MACV,SAAS;AAAA,MACT,UAAU;AAAA,MACV,eAAe,CAAC,EAAE,QAAQ,0CAA0C,UAAU,KAAK,CAAC;AAAA,MACpF,2BAA2B;AAAA,MAC3B,YAAY;AAAA,QACV;AAAA,UACE,YAAY;AAAA,UACZ,cAAc;AAAA,UACd,cAAc;AAAA,UACd,OAAO;AAAA,UACP,QAAQ;AAAA,YACN,WAAW;AAAA,YACX,kBAAkB;AAAA,YAClB,OAAO,EAAE,IAAI,uBAAuB,aAAa,WAAW;AAAA,UAC9D;AAAA,UACA,aAAa,EAAE,aAAa,GAAG,mBAAmB,KAAM,oBAAoB,GAAG,eAAe,IAAM;AAAA,QACtG;AAAA,QACA;AAAA,UACE,YAAY;AAAA,UACZ,cAAc;AAAA,UACd,cAAc;AAAA,UACd,OAAO;AAAA,UACP,QAAQ;AAAA,YACN,WAAW;AAAA,YACX,SAAS;AAAA,cACP,SAAS;AAAA,cACT,oBAAoB;AAAA,cACpB,YAAY;AAAA,cACZ,UAAU;AAAA,YACZ;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,cAAc;AAAA,MACd,gBAAgB;AAAA,MAChB,YAAY;AAAA,MACZ,UAAU;AAAA,MACV,SAAS;AAAA,MACT,UAAU;AAAA,MACV,2BAA2B;AAAA,IAC7B;AAAA,IACA;AAAA,MACE,cAAc;AAAA,MACd,gBAAgB;AAAA,MAChB,YAAY;AAAA,MACZ,UAAU;AAAA,MACV,SAAS;AAAA,MACT,UAAU;AAAA,MACV,2BAA2B;AAAA,IAC7B;AAAA,EACF;AAAA,EACA,UAAU,CAAC;AAAA,IACT,WAAW;AAAA,IACX,MAAM;AAAA,IACN,aAAa;AAAA,IACb,cAAc;AAAA,IACd,QAAQ;AAAA,MACN,YAAY;AAAA,MACZ,gBAAgB,CAAC,EAAE,WAAW,WAAW,kBAAkB,KAAK,CAAC;AAAA,IACnE;AAAA,IACA,SAAS;AAAA,IACT,UAAU;AAAA,EACZ,CAAC;AACH,CAAC;AAEM,MAAM,kBAAkB,4BAA4B;AAAA,EACzD,UAAU;AAAA,EACV,WAAW,CAAC,aAAa;AAC3B,CAAC;AAED,IAAO,oBAAQ;",
+  "sourcesContent": ["/**\n * Sales Module \u2014 Code-Based Workflow Definitions\n *\n * Order approval workflow shipped with the sales module.\n */\n\nimport { defineWorkflow, createWorkflowsModuleConfig } from '@open-mercato/shared/modules/workflows'\nimport { registerWorkflowSafeCommands } from '@open-mercato/core/modules/workflows/lib/workflow-safe-commands'\n\nregisterWorkflowSafeCommands([\n  { commandId: 'sales.orders.update', requiredFeatures: ['sales.orders.manage'] },\n])\n\nconst orderApproval = defineWorkflow({\n  workflowId: 'sales.order-approval',\n  workflowName: 'Sales Order Approval Workflow',\n  description: 'Approval workflow for sales orders requiring authorization before processing',\n  metadata: { category: 'Sales', tags: ['sales', 'approval', 'order'], icon: 'check-circle' },\n  steps: [\n    { stepId: 'start', stepName: 'Start', stepType: 'START', description: 'Initialize order approval workflow' },\n    {\n      stepId: 'pending_approval',\n      stepName: 'Pending Approval',\n      stepType: 'USER_TASK',\n      description: 'Order awaiting approval decision',\n      userTaskConfig: {\n        formSchema: {\n          type: 'object',\n          required: ['decision'],\n          properties: {\n            comments: { type: 'string', title: 'Comments', description: 'Optional comments for the decision' },\n            decision: { enum: ['approve', 'reject'], type: 'string', title: 'Decision', description: 'Approve or reject the order' },\n          },\n        },\n        slaDuration: 'PT24H',\n      },\n    },\n    { stepId: 'approved', stepName: 'Approved', stepType: 'AUTOMATED', description: 'Order has been approved' },\n    { stepId: 'rejected', stepName: 'Rejected', stepType: 'AUTOMATED', description: 'Order has been rejected' },\n    { stepId: 'end', stepName: 'Complete', stepType: 'END', description: 'Workflow complete' },\n  ] as const,\n  transitions: [\n    {\n      transitionId: 'start_to_pending',\n      transitionName: 'Submit for Approval',\n      fromStepId: 'start',\n      toStepId: 'pending_approval',\n      trigger: 'auto',\n      priority: 100,\n      continueOnActivityFailure: true,\n      activities: [\n        {\n          activityId: 'set_pending_status',\n          activityName: 'Set Order to Pending Approval',\n          activityType: 'UPDATE_ENTITY',\n          async: false,\n          config: {\n            commandId: 'sales.orders.update',\n            statusDictionary: 'sales.order_status',\n            input: { id: '{{context.id}}', statusValue: 'pending_approval' },\n          },\n          retryPolicy: { maxAttempts: 3, initialIntervalMs: 1000, backoffCoefficient: 2, maxIntervalMs: 10000 },\n        },\n        {\n          activityId: 'emit_approval_requested',\n          activityName: 'Emit Approval Requested Event',\n          activityType: 'EMIT_EVENT',\n          async: true,\n          config: {\n            eventName: 'sales.order.approval.requested',\n            payload: { orderId: '{{context.id}}', workflowInstanceId: '{{workflow.instanceId}}' },\n          },\n        },\n      ],\n    },\n    {\n      transitionId: 'pending_approval_to_approved',\n      transitionName: 'Approve Order',\n      fromStepId: 'pending_approval',\n      toStepId: 'approved',\n      trigger: 'auto',\n      priority: 100,\n      preConditions: [{ ruleId: 'workflow_order_approval_check_approved', required: true }],\n      continueOnActivityFailure: true,\n      activities: [\n        {\n          activityId: 'set_approved_status',\n          activityName: 'Set Order to Approved',\n          activityType: 'UPDATE_ENTITY',\n          async: false,\n          config: {\n            commandId: 'sales.orders.update',\n            statusDictionary: 'sales.order_status',\n            input: { id: '{{context.id}}', statusValue: 'approved' },\n          },\n          retryPolicy: { maxAttempts: 3, initialIntervalMs: 1000, backoffCoefficient: 2, maxIntervalMs: 10000 },\n        },\n        {\n          activityId: 'emit_order_approved',\n          activityName: 'Emit Order Approved Event',\n          activityType: 'EMIT_EVENT',\n          async: true,\n          config: {\n            eventName: 'sales.order.approval.approved',\n            payload: {\n              orderId: '{{context.id}}',\n              workflowInstanceId: '{{workflow.instanceId}}',\n              approvedBy: '{{context.completedBy}}',\n              comments: '{{context.comments}}',\n            },\n          },\n        },\n      ],\n    },\n    {\n      transitionId: 'pending_approval_to_rejected',\n      transitionName: 'Reject Order',\n      fromStepId: 'pending_approval',\n      toStepId: 'rejected',\n      trigger: 'auto',\n      priority: 90,\n      preConditions: [{ ruleId: 'workflow_order_approval_check_rejected', required: true }],\n      continueOnActivityFailure: true,\n      activities: [\n        {\n          activityId: 'set_rejected_status',\n          activityName: 'Set Order to Rejected',\n          activityType: 'UPDATE_ENTITY',\n          async: false,\n          config: {\n            commandId: 'sales.orders.update',\n            statusDictionary: 'sales.order_status',\n            input: { id: '{{context.id}}', statusValue: 'rejected' },\n          },\n          retryPolicy: { maxAttempts: 3, initialIntervalMs: 1000, backoffCoefficient: 2, maxIntervalMs: 10000 },\n        },\n        {\n          activityId: 'emit_order_rejected',\n          activityName: 'Emit Order Rejected Event',\n          activityType: 'EMIT_EVENT',\n          async: true,\n          config: {\n            eventName: 'sales.order.approval.rejected',\n            payload: {\n              orderId: '{{context.id}}',\n              workflowInstanceId: '{{workflow.instanceId}}',\n              rejectedBy: '{{context.completedBy}}',\n              comments: '{{context.comments}}',\n            },\n          },\n        },\n      ],\n    },\n    {\n      transitionId: 'approved_to_end',\n      transitionName: 'Complete After Approval',\n      fromStepId: 'approved',\n      toStepId: 'end',\n      trigger: 'auto',\n      priority: 100,\n      continueOnActivityFailure: true,\n    },\n    {\n      transitionId: 'rejected_to_end',\n      transitionName: 'Complete After Rejection',\n      fromStepId: 'rejected',\n      toStepId: 'end',\n      trigger: 'auto',\n      priority: 100,\n      continueOnActivityFailure: true,\n    },\n  ],\n  triggers: [{\n    triggerId: 'order_approval_trigger',\n    name: 'Order Approval Trigger',\n    description: 'Triggers when a new sales order is created',\n    eventPattern: 'sales.order.created',\n    config: { entityType: 'SalesOrder' },\n    enabled: true,\n    priority: 0,\n  }],\n})\n\nexport const workflowsConfig = createWorkflowsModuleConfig({\n  moduleId: 'sales',\n  workflows: [orderApproval],\n})\n\nexport default workflowsConfig\n"],
+  "mappings": "AAMA,SAAS,gBAAgB,mCAAmC;AAC5D,SAAS,oCAAoC;AAE7C,6BAA6B;AAAA,EAC3B,EAAE,WAAW,uBAAuB,kBAAkB,CAAC,qBAAqB,EAAE;AAChF,CAAC;AAED,MAAM,gBAAgB,eAAe;AAAA,EACnC,YAAY;AAAA,EACZ,cAAc;AAAA,EACd,aAAa;AAAA,EACb,UAAU,EAAE,UAAU,SAAS,MAAM,CAAC,SAAS,YAAY,OAAO,GAAG,MAAM,eAAe;AAAA,EAC1F,OAAO;AAAA,IACL,EAAE,QAAQ,SAAS,UAAU,SAAS,UAAU,SAAS,aAAa,qCAAqC;AAAA,IAC3G;AAAA,MACE,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,UAAU;AAAA,MACV,aAAa;AAAA,MACb,gBAAgB;AAAA,QACd,YAAY;AAAA,UACV,MAAM;AAAA,UACN,UAAU,CAAC,UAAU;AAAA,UACrB,YAAY;AAAA,YACV,UAAU,EAAE,MAAM,UAAU,OAAO,YAAY,aAAa,qCAAqC;AAAA,YACjG,UAAU,EAAE,MAAM,CAAC,WAAW,QAAQ,GAAG,MAAM,UAAU,OAAO,YAAY,aAAa,8BAA8B;AAAA,UACzH;AAAA,QACF;AAAA,QACA,aAAa;AAAA,MACf;AAAA,IACF;AAAA,IACA,EAAE,QAAQ,YAAY,UAAU,YAAY,UAAU,aAAa,aAAa,0BAA0B;AAAA,IAC1G,EAAE,QAAQ,YAAY,UAAU,YAAY,UAAU,aAAa,aAAa,0BAA0B;AAAA,IAC1G,EAAE,QAAQ,OAAO,UAAU,YAAY,UAAU,OAAO,aAAa,oBAAoB;AAAA,EAC3F;AAAA,EACA,aAAa;AAAA,IACX;AAAA,MACE,cAAc;AAAA,MACd,gBAAgB;AAAA,MAChB,YAAY;AAAA,MACZ,UAAU;AAAA,MACV,SAAS;AAAA,MACT,UAAU;AAAA,MACV,2BAA2B;AAAA,MAC3B,YAAY;AAAA,QACV;AAAA,UACE,YAAY;AAAA,UACZ,cAAc;AAAA,UACd,cAAc;AAAA,UACd,OAAO;AAAA,UACP,QAAQ;AAAA,YACN,WAAW;AAAA,YACX,kBAAkB;AAAA,YAClB,OAAO,EAAE,IAAI,kBAAkB,aAAa,mBAAmB;AAAA,UACjE;AAAA,UACA,aAAa,EAAE,aAAa,GAAG,mBAAmB,KAAM,oBAAoB,GAAG,eAAe,IAAM;AAAA,QACtG;AAAA,QACA;AAAA,UACE,YAAY;AAAA,UACZ,cAAc;AAAA,UACd,cAAc;AAAA,UACd,OAAO;AAAA,UACP,QAAQ;AAAA,YACN,WAAW;AAAA,YACX,SAAS,EAAE,SAAS,kBAAkB,oBAAoB,0BAA0B;AAAA,UACtF;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,cAAc;AAAA,MACd,gBAAgB;AAAA,MAChB,YAAY;AAAA,MACZ,UAAU;AAAA,MACV,SAAS;AAAA,MACT,UAAU;AAAA,MACV,eAAe,CAAC,EAAE,QAAQ,0CAA0C,UAAU,KAAK,CAAC;AAAA,MACpF,2BAA2B;AAAA,MAC3B,YAAY;AAAA,QACV;AAAA,UACE,YAAY;AAAA,UACZ,cAAc;AAAA,UACd,cAAc;AAAA,UACd,OAAO;AAAA,UACP,QAAQ;AAAA,YACN,WAAW;AAAA,YACX,kBAAkB;AAAA,YAClB,OAAO,EAAE,IAAI,kBAAkB,aAAa,WAAW;AAAA,UACzD;AAAA,UACA,aAAa,EAAE,aAAa,GAAG,mBAAmB,KAAM,oBAAoB,GAAG,eAAe,IAAM;AAAA,QACtG;AAAA,QACA;AAAA,UACE,YAAY;AAAA,UACZ,cAAc;AAAA,UACd,cAAc;AAAA,UACd,OAAO;AAAA,UACP,QAAQ;AAAA,YACN,WAAW;AAAA,YACX,SAAS;AAAA,cACP,SAAS;AAAA,cACT,oBAAoB;AAAA,cACpB,YAAY;AAAA,cACZ,UAAU;AAAA,YACZ;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,cAAc;AAAA,MACd,gBAAgB;AAAA,MAChB,YAAY;AAAA,MACZ,UAAU;AAAA,MACV,SAAS;AAAA,MACT,UAAU;AAAA,MACV,eAAe,CAAC,EAAE,QAAQ,0CAA0C,UAAU,KAAK,CAAC;AAAA,MACpF,2BAA2B;AAAA,MAC3B,YAAY;AAAA,QACV;AAAA,UACE,YAAY;AAAA,UACZ,cAAc;AAAA,UACd,cAAc;AAAA,UACd,OAAO;AAAA,UACP,QAAQ;AAAA,YACN,WAAW;AAAA,YACX,kBAAkB;AAAA,YAClB,OAAO,EAAE,IAAI,kBAAkB,aAAa,WAAW;AAAA,UACzD;AAAA,UACA,aAAa,EAAE,aAAa,GAAG,mBAAmB,KAAM,oBAAoB,GAAG,eAAe,IAAM;AAAA,QACtG;AAAA,QACA;AAAA,UACE,YAAY;AAAA,UACZ,cAAc;AAAA,UACd,cAAc;AAAA,UACd,OAAO;AAAA,UACP,QAAQ;AAAA,YACN,WAAW;AAAA,YACX,SAAS;AAAA,cACP,SAAS;AAAA,cACT,oBAAoB;AAAA,cACpB,YAAY;AAAA,cACZ,UAAU;AAAA,YACZ;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,cAAc;AAAA,MACd,gBAAgB;AAAA,MAChB,YAAY;AAAA,MACZ,UAAU;AAAA,MACV,SAAS;AAAA,MACT,UAAU;AAAA,MACV,2BAA2B;AAAA,IAC7B;AAAA,IACA;AAAA,MACE,cAAc;AAAA,MACd,gBAAgB;AAAA,MAChB,YAAY;AAAA,MACZ,UAAU;AAAA,MACV,SAAS;AAAA,MACT,UAAU;AAAA,MACV,2BAA2B;AAAA,IAC7B;AAAA,EACF;AAAA,EACA,UAAU,CAAC;AAAA,IACT,WAAW;AAAA,IACX,MAAM;AAAA,IACN,aAAa;AAAA,IACb,cAAc;AAAA,IACd,QAAQ,EAAE,YAAY,aAAa;AAAA,IACnC,SAAS;AAAA,IACT,UAAU;AAAA,EACZ,CAAC;AACH,CAAC;AAEM,MAAM,kBAAkB,4BAA4B;AAAA,EACzD,UAAU;AAAA,EACV,WAAW,CAAC,aAAa;AAC3B,CAAC;AAED,IAAO,oBAAQ;",
   "names": []
 }

package/dist/modules/shipping_carriers/api/webhook/[provider]/route.js

@@ -8,7 +8,6 @@ import { getShippingAdapter } from "../../../lib/adapter-registry.js";
 import { getShippingCarrierQueue } from "../../../lib/queue.js";
 import { shippingCarriersTag } from "../../openapi.js";
 import { createLogger } from "@open-mercato/shared/lib/logger";
-import { readBoundedRequestBody, WebhookBodyTooLargeError } from "@open-mercato/shared/lib/webhooks";
 const logger = createLogger("shipping_carriers").child({ component: "webhook" });
 const metadata = {
   path: "/shipping-carriers/webhook/[provider]",
@@ -41,15 +40,7 @@ async function POST(req, { params }) {
   const container = await createRequestContainer();
   const rateLimitResponse = await checkProviderWebhookRateLimit(container, req, providerKey);
   if (rateLimitResponse) return rateLimitResponse;
-  let rawBody;
-  try {
-    rawBody = await readBoundedRequestBody(req);
-  } catch (error) {
-    if (error instanceof WebhookBodyTooLargeError) {
-      return NextResponse.json({ error: "Webhook payload too large" }, { status: 413 });
-    }
-    throw error;
-  }
+  const rawBody = await req.text();
   const headers = {};
   req.headers.forEach((value, key) => {
     headers[key] = value;
@@ -131,7 +122,6 @@ const openApi = {
       responses: [
         { status: 202, description: "Webhook accepted for async processing" },
         { status: 401, description: "Signature verification failed" },
-        { status: 413, description: "Webhook payload too large" },
         { status: 404, description: "Unknown provider" }
       ]
     }

package/dist/modules/shipping_carriers/api/webhook/[provider]/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../src/modules/shipping_carriers/api/webhook/%5Bprovider%5D/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { readJsonSafe } from '@open-mercato/shared/lib/http/readJsonSafe'\nimport { checkRateLimit, getClientIp, RATE_LIMIT_ERROR_FALLBACK } from '@open-mercato/shared/lib/ratelimit/helpers'\nimport type { RateLimiterService } from '@open-mercato/shared/lib/ratelimit/service'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport type { CredentialsService } from '../../../../integrations/lib/credentials-service'\nimport { CarrierShipment } from '../../../data/entities'\nimport { getShippingAdapter } from '../../../lib/adapter-registry'\nimport { getShippingCarrierQueue } from '../../../lib/queue'\nimport { shippingCarriersTag } from '../../openapi'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport { readBoundedRequestBody, WebhookBodyTooLargeError } from '@open-mercato/shared/lib/webhooks'\n\nconst logger = createLogger('shipping_carriers').child({ component: 'webhook' })\n\nexport const metadata = {\n  path: '/shipping-carriers/webhook/[provider]',\n  POST: { requireAuth: false },\n}\n\nconst WEBHOOK_VERIFICATION_FAILED = 'Webhook verification failed'\n\nconst shippingCarrierWebhookRateLimitConfig = {\n  points: 60,\n  duration: 60,\n  keyPrefix: 'shipping_carriers:webhook',\n}\n\nfunction readCarrierShipmentId(payload: Record<string, unknown> | null): string | null {\n  if (!payload) return null\n  const shipmentId = payload.shipmentId\n  if (typeof shipmentId === 'string' && shipmentId.trim().length > 0) return shipmentId.trim()\n  const data = payload.data\n  if (data && typeof data === 'object') {\n    const nested = (data as Record<string, unknown>).shipmentId\n    if (typeof nested === 'string' && nested.trim().length > 0) return nested.trim()\n  }\n  return null\n}\n\nexport async function POST(req: Request, { params }: { params: Promise<{ provider: string }> | { provider: string } }) {\n  const resolvedParams = await params\n  const providerKey = resolvedParams.provider\n  const adapter = getShippingAdapter(providerKey)\n  if (!adapter) {\n    return NextResponse.json({ error: `No shipping adapter for provider: ${providerKey}` }, { status: 404 })\n  }\n\n  const container = await createRequestContainer()\n  const rateLimitResponse = await checkProviderWebhookRateLimit(container, req, providerKey)\n  if (rateLimitResponse) return rateLimitResponse\n\n  let rawBody: string\n  try {\n    rawBody = await readBoundedRequestBody(req)\n  } catch (error) {\n    if (error instanceof WebhookBodyTooLargeError) {\n      return NextResponse.json({ error: 'Webhook payload too large' }, { status: 413 })\n    }\n    throw error\n  }\n  const headers: Record<string, string> = {}\n  req.headers.forEach((value, key) => {\n    headers[key] = value\n  })\n\n  const em = container.resolve('em') as EntityManager\n  const integrationCredentialsService = container.resolve('integrationCredentialsService') as CredentialsService\n  const queue = getShippingCarrierQueue('shipping-carriers-webhook')\n  const payload = await readJsonSafe<Record<string, unknown>>(rawBody)\n  const carrierShipmentId = readCarrierShipmentId(payload)\n\n  try {\n    // The webhook endpoint is unauthenticated. Tenant/organization scope MUST come from a\n    // CarrierShipment whose per-tenant credentials successfully verify the inbound\n    // signature \u2014 NEVER from attacker-controlled payload metadata or an unsigned retry.\n    // If no candidate shipment can be located by the provider-reported carrierShipmentId,\n    // or no candidate's credentials can verify the signature, we fail closed with 401.\n    // This mirrors the fix landed for payment_gateways in PR #1311.\n    const candidates = carrierShipmentId\n      ? await findWithDecryption(\n        em,\n        CarrierShipment,\n        {\n          providerKey,\n          carrierShipmentId,\n          deletedAt: null,\n        },\n        { limit: 10, orderBy: { createdAt: 'desc' } },\n      )\n      : []\n\n    let shipment: CarrierShipment | null = null\n    let matchedScope: { organizationId: string; tenantId: string } | null = null\n    let event: Awaited<ReturnType<typeof adapter.verifyWebhook>> | null = null\n    let lastVerificationError: unknown = null\n\n    for (const candidate of candidates) {\n      const candidateScope = { organizationId: candidate.organizationId, tenantId: candidate.tenantId }\n      const credentials = await integrationCredentialsService.resolve(`carrier_${providerKey}`, candidateScope) ?? {}\n      try {\n        event = await adapter.verifyWebhook({ rawBody, headers, credentials })\n        shipment = candidate\n        matchedScope = candidateScope\n        break\n      } catch (error: unknown) {\n        lastVerificationError = error\n      }\n    }\n\n    if (!event || !shipment || !matchedScope) {\n      throw lastVerificationError ?? new Error('Webhook verification failed: no matching shipment')\n    }\n\n    await queue.enqueue({\n      name: 'shipping-carrier-webhook',\n      payload: {\n        providerKey,\n        event,\n        shipmentId: shipment.id,\n        scope: matchedScope,\n      },\n    })\n\n    return NextResponse.json({ received: true, queued: true }, { status: 202 })\n  } catch (error: unknown) {\n    logger.warn('Webhook verification failed', { providerKey, err: error })\n    return NextResponse.json({ error: WEBHOOK_VERIFICATION_FAILED }, { status: 401 })\n  }\n}\n\nasync function checkProviderWebhookRateLimit(\n  container: { resolve: (name: string) => unknown },\n  req: Request,\n  providerKey: string,\n): Promise<NextResponse | null> {\n  const rateLimiterService = tryResolve<RateLimiterService>(container, 'rateLimiterService')\n  if (!rateLimiterService) return null\n\n  return checkRateLimit(\n    rateLimiterService,\n    shippingCarrierWebhookRateLimitConfig,\n    `${providerKey}:${getClientIp(req, rateLimiterService.trustProxyDepth) ?? 'unknown'}`,\n    RATE_LIMIT_ERROR_FALLBACK,\n  )\n}\n\nfunction tryResolve<T>(container: { resolve: (name: string) => unknown }, name: string): T | null {\n  try {\n    return container.resolve(name) as T\n  } catch {\n    return null\n  }\n}\n\nexport const openApi = {\n  tags: [shippingCarriersTag],\n  summary: 'Receive shipping carrier webhook',\n  methods: {\n    POST: {\n      summary: 'Process inbound carrier webhook',\n      tags: [shippingCarriersTag],\n      responses: [\n        { status: 202, description: 'Webhook accepted for async processing' },\n        { status: 401, description: 'Signature verification failed' },\n        { status: 413, description: 'Webhook payload too large' },\n        { status: 404, description: 'Unknown provider' },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,oBAAoB;AAC7B,SAAS,gBAAgB,aAAa,iCAAiC;AAIvE,SAAS,uBAAuB;AAChC,SAAS,0BAA0B;AACnC,SAAS,+BAA+B;AACxC,SAAS,2BAA2B;AACpC,SAAS,oBAAoB;AAC7B,SAAS,wBAAwB,gCAAgC;AAEjE,MAAM,SAAS,aAAa,mBAAmB,EAAE,MAAM,EAAE,WAAW,UAAU,CAAC;AAExE,MAAM,WAAW;AAAA,EACtB,MAAM;AAAA,EACN,MAAM,EAAE,aAAa,MAAM;AAC7B;AAEA,MAAM,8BAA8B;AAEpC,MAAM,wCAAwC;AAAA,EAC5C,QAAQ;AAAA,EACR,UAAU;AAAA,EACV,WAAW;AACb;AAEA,SAAS,sBAAsB,SAAwD;AACrF,MAAI,CAAC,QAAS,QAAO;AACrB,QAAM,aAAa,QAAQ;AAC3B,MAAI,OAAO,eAAe,YAAY,WAAW,KAAK,EAAE,SAAS,EAAG,QAAO,WAAW,KAAK;AAC3F,QAAM,OAAO,QAAQ;AACrB,MAAI,QAAQ,OAAO,SAAS,UAAU;AACpC,UAAM,SAAU,KAAiC;AACjD,QAAI,OAAO,WAAW,YAAY,OAAO,KAAK,EAAE,SAAS,EAAG,QAAO,OAAO,KAAK;AAAA,EACjF;AACA,SAAO;AACT;AAEA,eAAsB,KAAK,KAAc,EAAE,OAAO,GAAqE;AACrH,QAAM,iBAAiB,MAAM;AAC7B,QAAM,cAAc,eAAe;AACnC,QAAM,UAAU,mBAAmB,WAAW;AAC9C,MAAI,CAAC,SAAS;AACZ,WAAO,aAAa,KAAK,EAAE,OAAO,qCAAqC,WAAW,GAAG,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACzG;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,oBAAoB,MAAM,8BAA8B,WAAW,KAAK,WAAW;AACzF,MAAI,kBAAmB,QAAO;AAE9B,MAAI;AACJ,MAAI;AACF,cAAU,MAAM,uBAAuB,GAAG;AAAA,EAC5C,SAAS,OAAO;AACd,QAAI,iBAAiB,0BAA0B;AAC7C,aAAO,aAAa,KAAK,EAAE,OAAO,4BAA4B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAClF;AACA,UAAM;AAAA,EACR;AACA,QAAM,UAAkC,CAAC;AACzC,MAAI,QAAQ,QAAQ,CAAC,OAAO,QAAQ;AAClC,YAAQ,GAAG,IAAI;AAAA,EACjB,CAAC;AAED,QAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,QAAM,gCAAgC,UAAU,QAAQ,+BAA+B;AACvF,QAAM,QAAQ,wBAAwB,2BAA2B;AACjE,QAAM,UAAU,MAAM,aAAsC,OAAO;AACnE,QAAM,oBAAoB,sBAAsB,OAAO;AAEvD,MAAI;AAOF,UAAM,aAAa,oBACf,MAAM;AAAA,MACN;AAAA,MACA;AAAA,MACA;AAAA,QACE;AAAA,QACA;AAAA,QACA,WAAW;AAAA,MACb;AAAA,MACA,EAAE,OAAO,IAAI,SAAS,EAAE,WAAW,OAAO,EAAE;AAAA,IAC9C,IACE,CAAC;AAEL,QAAI,WAAmC;AACvC,QAAI,eAAoE;AACxE,QAAI,QAAkE;AACtE,QAAI,wBAAiC;AAErC,eAAW,aAAa,YAAY;AAClC,YAAM,iBAAiB,EAAE,gBAAgB,UAAU,gBAAgB,UAAU,UAAU,SAAS;AAChG,YAAM,cAAc,MAAM,8BAA8B,QAAQ,WAAW,WAAW,IAAI,cAAc,KAAK,CAAC;AAC9G,UAAI;AACF,gBAAQ,MAAM,QAAQ,cAAc,EAAE,SAAS,SAAS,YAAY,CAAC;AACrE,mBAAW;AACX,uBAAe;AACf;AAAA,MACF,SAAS,OAAgB;AACvB,gCAAwB;AAAA,MAC1B;AAAA,IACF;AAEA,QAAI,CAAC,SAAS,CAAC,YAAY,CAAC,cAAc;AACxC,YAAM,yBAAyB,IAAI,MAAM,mDAAmD;AAAA,IAC9F;AAEA,UAAM,MAAM,QAAQ;AAAA,MAClB,MAAM;AAAA,MACN,SAAS;AAAA,QACP;AAAA,QACA;AAAA,QACA,YAAY,SAAS;AAAA,QACrB,OAAO;AAAA,MACT;AAAA,IACF,CAAC;AAED,WAAO,aAAa,KAAK,EAAE,UAAU,MAAM,QAAQ,KAAK,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC5E,SAAS,OAAgB;AACvB,WAAO,KAAK,+BAA+B,EAAE,aAAa,KAAK,MAAM,CAAC;AACtE,WAAO,aAAa,KAAK,EAAE,OAAO,4BAA4B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAClF;AACF;AAEA,eAAe,8BACb,WACA,KACA,aAC8B;AAC9B,QAAM,qBAAqB,WAA+B,WAAW,oBAAoB;AACzF,MAAI,CAAC,mBAAoB,QAAO;AAEhC,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,GAAG,WAAW,IAAI,YAAY,KAAK,mBAAmB,eAAe,KAAK,SAAS;AAAA,IACnF;AAAA,EACF;AACF;AAEA,SAAS,WAAc,WAAmD,MAAwB;AAChG,MAAI;AACF,WAAO,UAAU,QAAQ,IAAI;AAAA,EAC/B,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEO,MAAM,UAAU;AAAA,EACrB,MAAM,CAAC,mBAAmB;AAAA,EAC1B,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,MAAM,CAAC,mBAAmB;AAAA,MAC1B,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,wCAAwC;AAAA,QACpE,EAAE,QAAQ,KAAK,aAAa,gCAAgC;AAAA,QAC5D,EAAE,QAAQ,KAAK,aAAa,4BAA4B;AAAA,QACxD,EAAE,QAAQ,KAAK,aAAa,mBAAmB;AAAA,MACjD;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { readJsonSafe } from '@open-mercato/shared/lib/http/readJsonSafe'\nimport { checkRateLimit, getClientIp, RATE_LIMIT_ERROR_FALLBACK } from '@open-mercato/shared/lib/ratelimit/helpers'\nimport type { RateLimiterService } from '@open-mercato/shared/lib/ratelimit/service'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport type { CredentialsService } from '../../../../integrations/lib/credentials-service'\nimport { CarrierShipment } from '../../../data/entities'\nimport { getShippingAdapter } from '../../../lib/adapter-registry'\nimport { getShippingCarrierQueue } from '../../../lib/queue'\nimport { shippingCarriersTag } from '../../openapi'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('shipping_carriers').child({ component: 'webhook' })\n\nexport const metadata = {\n  path: '/shipping-carriers/webhook/[provider]',\n  POST: { requireAuth: false },\n}\n\nconst WEBHOOK_VERIFICATION_FAILED = 'Webhook verification failed'\n\nconst shippingCarrierWebhookRateLimitConfig = {\n  points: 60,\n  duration: 60,\n  keyPrefix: 'shipping_carriers:webhook',\n}\n\nfunction readCarrierShipmentId(payload: Record<string, unknown> | null): string | null {\n  if (!payload) return null\n  const shipmentId = payload.shipmentId\n  if (typeof shipmentId === 'string' && shipmentId.trim().length > 0) return shipmentId.trim()\n  const data = payload.data\n  if (data && typeof data === 'object') {\n    const nested = (data as Record<string, unknown>).shipmentId\n    if (typeof nested === 'string' && nested.trim().length > 0) return nested.trim()\n  }\n  return null\n}\n\nexport async function POST(req: Request, { params }: { params: Promise<{ provider: string }> | { provider: string } }) {\n  const resolvedParams = await params\n  const providerKey = resolvedParams.provider\n  const adapter = getShippingAdapter(providerKey)\n  if (!adapter) {\n    return NextResponse.json({ error: `No shipping adapter for provider: ${providerKey}` }, { status: 404 })\n  }\n\n  const container = await createRequestContainer()\n  const rateLimitResponse = await checkProviderWebhookRateLimit(container, req, providerKey)\n  if (rateLimitResponse) return rateLimitResponse\n\n  const rawBody = await req.text()\n  const headers: Record<string, string> = {}\n  req.headers.forEach((value, key) => {\n    headers[key] = value\n  })\n\n  const em = container.resolve('em') as EntityManager\n  const integrationCredentialsService = container.resolve('integrationCredentialsService') as CredentialsService\n  const queue = getShippingCarrierQueue('shipping-carriers-webhook')\n  const payload = await readJsonSafe<Record<string, unknown>>(rawBody)\n  const carrierShipmentId = readCarrierShipmentId(payload)\n\n  try {\n    // The webhook endpoint is unauthenticated. Tenant/organization scope MUST come from a\n    // CarrierShipment whose per-tenant credentials successfully verify the inbound\n    // signature \u2014 NEVER from attacker-controlled payload metadata or an unsigned retry.\n    // If no candidate shipment can be located by the provider-reported carrierShipmentId,\n    // or no candidate's credentials can verify the signature, we fail closed with 401.\n    // This mirrors the fix landed for payment_gateways in PR #1311.\n    const candidates = carrierShipmentId\n      ? await findWithDecryption(\n        em,\n        CarrierShipment,\n        {\n          providerKey,\n          carrierShipmentId,\n          deletedAt: null,\n        },\n        { limit: 10, orderBy: { createdAt: 'desc' } },\n      )\n      : []\n\n    let shipment: CarrierShipment | null = null\n    let matchedScope: { organizationId: string; tenantId: string } | null = null\n    let event: Awaited<ReturnType<typeof adapter.verifyWebhook>> | null = null\n    let lastVerificationError: unknown = null\n\n    for (const candidate of candidates) {\n      const candidateScope = { organizationId: candidate.organizationId, tenantId: candidate.tenantId }\n      const credentials = await integrationCredentialsService.resolve(`carrier_${providerKey}`, candidateScope) ?? {}\n      try {\n        event = await adapter.verifyWebhook({ rawBody, headers, credentials })\n        shipment = candidate\n        matchedScope = candidateScope\n        break\n      } catch (error: unknown) {\n        lastVerificationError = error\n      }\n    }\n\n    if (!event || !shipment || !matchedScope) {\n      throw lastVerificationError ?? new Error('Webhook verification failed: no matching shipment')\n    }\n\n    await queue.enqueue({\n      name: 'shipping-carrier-webhook',\n      payload: {\n        providerKey,\n        event,\n        shipmentId: shipment.id,\n        scope: matchedScope,\n      },\n    })\n\n    return NextResponse.json({ received: true, queued: true }, { status: 202 })\n  } catch (error: unknown) {\n    logger.warn('Webhook verification failed', { providerKey, err: error })\n    return NextResponse.json({ error: WEBHOOK_VERIFICATION_FAILED }, { status: 401 })\n  }\n}\n\nasync function checkProviderWebhookRateLimit(\n  container: { resolve: (name: string) => unknown },\n  req: Request,\n  providerKey: string,\n): Promise<NextResponse | null> {\n  const rateLimiterService = tryResolve<RateLimiterService>(container, 'rateLimiterService')\n  if (!rateLimiterService) return null\n\n  return checkRateLimit(\n    rateLimiterService,\n    shippingCarrierWebhookRateLimitConfig,\n    `${providerKey}:${getClientIp(req, rateLimiterService.trustProxyDepth) ?? 'unknown'}`,\n    RATE_LIMIT_ERROR_FALLBACK,\n  )\n}\n\nfunction tryResolve<T>(container: { resolve: (name: string) => unknown }, name: string): T | null {\n  try {\n    return container.resolve(name) as T\n  } catch {\n    return null\n  }\n}\n\nexport const openApi = {\n  tags: [shippingCarriersTag],\n  summary: 'Receive shipping carrier webhook',\n  methods: {\n    POST: {\n      summary: 'Process inbound carrier webhook',\n      tags: [shippingCarriersTag],\n      responses: [\n        { status: 202, description: 'Webhook accepted for async processing' },\n        { status: 401, description: 'Signature verification failed' },\n        { status: 404, description: 'Unknown provider' },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,oBAAoB;AAC7B,SAAS,gBAAgB,aAAa,iCAAiC;AAIvE,SAAS,uBAAuB;AAChC,SAAS,0BAA0B;AACnC,SAAS,+BAA+B;AACxC,SAAS,2BAA2B;AACpC,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,mBAAmB,EAAE,MAAM,EAAE,WAAW,UAAU,CAAC;AAExE,MAAM,WAAW;AAAA,EACtB,MAAM;AAAA,EACN,MAAM,EAAE,aAAa,MAAM;AAC7B;AAEA,MAAM,8BAA8B;AAEpC,MAAM,wCAAwC;AAAA,EAC5C,QAAQ;AAAA,EACR,UAAU;AAAA,EACV,WAAW;AACb;AAEA,SAAS,sBAAsB,SAAwD;AACrF,MAAI,CAAC,QAAS,QAAO;AACrB,QAAM,aAAa,QAAQ;AAC3B,MAAI,OAAO,eAAe,YAAY,WAAW,KAAK,EAAE,SAAS,EAAG,QAAO,WAAW,KAAK;AAC3F,QAAM,OAAO,QAAQ;AACrB,MAAI,QAAQ,OAAO,SAAS,UAAU;AACpC,UAAM,SAAU,KAAiC;AACjD,QAAI,OAAO,WAAW,YAAY,OAAO,KAAK,EAAE,SAAS,EAAG,QAAO,OAAO,KAAK;AAAA,EACjF;AACA,SAAO;AACT;AAEA,eAAsB,KAAK,KAAc,EAAE,OAAO,GAAqE;AACrH,QAAM,iBAAiB,MAAM;AAC7B,QAAM,cAAc,eAAe;AACnC,QAAM,UAAU,mBAAmB,WAAW;AAC9C,MAAI,CAAC,SAAS;AACZ,WAAO,aAAa,KAAK,EAAE,OAAO,qCAAqC,WAAW,GAAG,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACzG;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,oBAAoB,MAAM,8BAA8B,WAAW,KAAK,WAAW;AACzF,MAAI,kBAAmB,QAAO;AAE9B,QAAM,UAAU,MAAM,IAAI,KAAK;AAC/B,QAAM,UAAkC,CAAC;AACzC,MAAI,QAAQ,QAAQ,CAAC,OAAO,QAAQ;AAClC,YAAQ,GAAG,IAAI;AAAA,EACjB,CAAC;AAED,QAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,QAAM,gCAAgC,UAAU,QAAQ,+BAA+B;AACvF,QAAM,QAAQ,wBAAwB,2BAA2B;AACjE,QAAM,UAAU,MAAM,aAAsC,OAAO;AACnE,QAAM,oBAAoB,sBAAsB,OAAO;AAEvD,MAAI;AAOF,UAAM,aAAa,oBACf,MAAM;AAAA,MACN;AAAA,MACA;AAAA,MACA;AAAA,QACE;AAAA,QACA;AAAA,QACA,WAAW;AAAA,MACb;AAAA,MACA,EAAE,OAAO,IAAI,SAAS,EAAE,WAAW,OAAO,EAAE;AAAA,IAC9C,IACE,CAAC;AAEL,QAAI,WAAmC;AACvC,QAAI,eAAoE;AACxE,QAAI,QAAkE;AACtE,QAAI,wBAAiC;AAErC,eAAW,aAAa,YAAY;AAClC,YAAM,iBAAiB,EAAE,gBAAgB,UAAU,gBAAgB,UAAU,UAAU,SAAS;AAChG,YAAM,cAAc,MAAM,8BAA8B,QAAQ,WAAW,WAAW,IAAI,cAAc,KAAK,CAAC;AAC9G,UAAI;AACF,gBAAQ,MAAM,QAAQ,cAAc,EAAE,SAAS,SAAS,YAAY,CAAC;AACrE,mBAAW;AACX,uBAAe;AACf;AAAA,MACF,SAAS,OAAgB;AACvB,gCAAwB;AAAA,MAC1B;AAAA,IACF;AAEA,QAAI,CAAC,SAAS,CAAC,YAAY,CAAC,cAAc;AACxC,YAAM,yBAAyB,IAAI,MAAM,mDAAmD;AAAA,IAC9F;AAEA,UAAM,MAAM,QAAQ;AAAA,MAClB,MAAM;AAAA,MACN,SAAS;AAAA,QACP;AAAA,QACA;AAAA,QACA,YAAY,SAAS;AAAA,QACrB,OAAO;AAAA,MACT;AAAA,IACF,CAAC;AAED,WAAO,aAAa,KAAK,EAAE,UAAU,MAAM,QAAQ,KAAK,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC5E,SAAS,OAAgB;AACvB,WAAO,KAAK,+BAA+B,EAAE,aAAa,KAAK,MAAM,CAAC;AACtE,WAAO,aAAa,KAAK,EAAE,OAAO,4BAA4B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAClF;AACF;AAEA,eAAe,8BACb,WACA,KACA,aAC8B;AAC9B,QAAM,qBAAqB,WAA+B,WAAW,oBAAoB;AACzF,MAAI,CAAC,mBAAoB,QAAO;AAEhC,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,GAAG,WAAW,IAAI,YAAY,KAAK,mBAAmB,eAAe,KAAK,SAAS;AAAA,IACnF;AAAA,EACF;AACF;AAEA,SAAS,WAAc,WAAmD,MAAwB;AAChG,MAAI;AACF,WAAO,UAAU,QAAQ,IAAI;AAAA,EAC/B,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEO,MAAM,UAAU;AAAA,EACrB,MAAM,CAAC,mBAAmB;AAAA,EAC1B,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,MAAM,CAAC,mBAAmB;AAAA,MAC1B,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,wCAAwC;AAAA,QACpE,EAAE,QAAQ,KAAK,aAAa,gCAAgC;AAAA,QAC5D,EAAE,QAAQ,KAAK,aAAa,mBAAmB;AAAA,MACjD;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/shipping_carriers/lib/shipment-wizard/components/PackageEditor.js

@@ -39,7 +39,7 @@ const PackageEditor = (props) => {
             type: "button",
             variant: "ghost",
             size: "sm",
-            className: "h-auto px-2 py-0.5 text-xs text-destructive hover:text-destructive/80",
+            className: "h-auto px-2 py-0.5 text-xs text-red-600 hover:text-red-700",
             onClick: () => removePackage(index),
             disabled,
             children: t("shipping_carriers.create.package.remove", "Remove")

package/dist/modules/shipping_carriers/lib/shipment-wizard/components/PackageEditor.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../src/modules/shipping_carriers/lib/shipment-wizard/components/PackageEditor.tsx"],
-  "sourcesContent": ["\"use client\"\n\nimport { Button } from '@open-mercato/ui/primitives/button'\nimport { Input } from '@open-mercato/ui/primitives/input'\nimport { useT } from '@open-mercato/shared/lib/i18n/context'\nimport type { PackageDimension, PackageEditorProps } from '../types'\n\nconst PACKAGE_FIELDS = ['weightKg', 'lengthCm', 'widthCm', 'heightCm'] as const\n\nconst DEFAULT_PACKAGE: PackageDimension = { weightKg: 1, lengthCm: 20, widthCm: 15, heightCm: 10 }\n\nexport const PackageEditor = (props: PackageEditorProps) => {\n  const { packages, onChange, disabled } = props\n  const t = useT()\n\n  const fieldLabel = (field: keyof PackageDimension) => {\n    const labels: Record<keyof PackageDimension, string> = {\n      weightKg: t('shipping_carriers.create.package.weightKg', 'Weight (kg)'),\n      lengthCm: t('shipping_carriers.create.package.lengthCm', 'Length (cm)'),\n      widthCm: t('shipping_carriers.create.package.widthCm', 'Width (cm)'),\n      heightCm: t('shipping_carriers.create.package.heightCm', 'Height (cm)'),\n    }\n    return labels[field]\n  }\n\n  const updatePackage = (index: number, field: keyof PackageDimension, raw: string) => {\n    const value = parseFloat(raw)\n    onChange(packages.map((pkg, idx) =>\n      idx === index ? { ...pkg, [field]: Number.isNaN(value) ? 0 : value } : pkg,\n    ))\n  }\n\n  const addPackage = () => onChange([...packages, DEFAULT_PACKAGE])\n\n  const removePackage = (index: number) => onChange(packages.filter((_, idx) => idx !== index))\n\n  return (\n    <div className=\"space-y-3\">\n      {packages.map((pkg, index) => (\n        <div key={index} className=\"rounded-lg border bg-muted/30 p-3\">\n          <div className=\"mb-2 flex items-center justify-between\">\n            <span className=\"text-xs font-medium text-muted-foreground\">\n              {t('shipping_carriers.create.package.label', 'Package')} {index + 1}\n            </span>\n            {packages.length > 1 ? (\n              <Button\n                type=\"button\"\n                variant=\"ghost\"\n                size=\"sm\"\n                className=\"h-auto px-2 py-0.5 text-xs text-destructive hover:text-destructive/80\"\n                onClick={() => removePackage(index)}\n                disabled={disabled}\n              >\n                {t('shipping_carriers.create.package.remove', 'Remove')}\n              </Button>\n            ) : null}\n          </div>\n          <div className=\"grid gap-3 sm:grid-cols-4\">\n            {PACKAGE_FIELDS.map((field) => (\n              <div key={field}>\n                <label className=\"mb-1 block text-xs font-medium text-muted-foreground\">\n                  {fieldLabel(field)}\n                </label>\n                <Input\n                  type=\"number\"\n                  min=\"0.01\"\n                  step=\"0.01\"\n                  value={pkg[field]}\n                  onChange={(event) => updatePackage(index, field, event.target.value)}\n                  disabled={disabled}\n                />\n              </div>\n            ))}\n          </div>\n        </div>\n      ))}\n      <Button type=\"button\" variant=\"outline\" size=\"sm\" onClick={addPackage} disabled={disabled}>\n        {t('shipping_carriers.create.package.add', '+ Add package')}\n      </Button>\n    </div>\n  )\n}\n"],
+  "sourcesContent": ["\"use client\"\n\nimport { Button } from '@open-mercato/ui/primitives/button'\nimport { Input } from '@open-mercato/ui/primitives/input'\nimport { useT } from '@open-mercato/shared/lib/i18n/context'\nimport type { PackageDimension, PackageEditorProps } from '../types'\n\nconst PACKAGE_FIELDS = ['weightKg', 'lengthCm', 'widthCm', 'heightCm'] as const\n\nconst DEFAULT_PACKAGE: PackageDimension = { weightKg: 1, lengthCm: 20, widthCm: 15, heightCm: 10 }\n\nexport const PackageEditor = (props: PackageEditorProps) => {\n  const { packages, onChange, disabled } = props\n  const t = useT()\n\n  const fieldLabel = (field: keyof PackageDimension) => {\n    const labels: Record<keyof PackageDimension, string> = {\n      weightKg: t('shipping_carriers.create.package.weightKg', 'Weight (kg)'),\n      lengthCm: t('shipping_carriers.create.package.lengthCm', 'Length (cm)'),\n      widthCm: t('shipping_carriers.create.package.widthCm', 'Width (cm)'),\n      heightCm: t('shipping_carriers.create.package.heightCm', 'Height (cm)'),\n    }\n    return labels[field]\n  }\n\n  const updatePackage = (index: number, field: keyof PackageDimension, raw: string) => {\n    const value = parseFloat(raw)\n    onChange(packages.map((pkg, idx) =>\n      idx === index ? { ...pkg, [field]: Number.isNaN(value) ? 0 : value } : pkg,\n    ))\n  }\n\n  const addPackage = () => onChange([...packages, DEFAULT_PACKAGE])\n\n  const removePackage = (index: number) => onChange(packages.filter((_, idx) => idx !== index))\n\n  return (\n    <div className=\"space-y-3\">\n      {packages.map((pkg, index) => (\n        <div key={index} className=\"rounded-lg border bg-muted/30 p-3\">\n          <div className=\"mb-2 flex items-center justify-between\">\n            <span className=\"text-xs font-medium text-muted-foreground\">\n              {t('shipping_carriers.create.package.label', 'Package')} {index + 1}\n            </span>\n            {packages.length > 1 ? (\n              <Button\n                type=\"button\"\n                variant=\"ghost\"\n                size=\"sm\"\n                className=\"h-auto px-2 py-0.5 text-xs text-red-600 hover:text-red-700\"\n                onClick={() => removePackage(index)}\n                disabled={disabled}\n              >\n                {t('shipping_carriers.create.package.remove', 'Remove')}\n              </Button>\n            ) : null}\n          </div>\n          <div className=\"grid gap-3 sm:grid-cols-4\">\n            {PACKAGE_FIELDS.map((field) => (\n              <div key={field}>\n                <label className=\"mb-1 block text-xs font-medium text-muted-foreground\">\n                  {fieldLabel(field)}\n                </label>\n                <Input\n                  type=\"number\"\n                  min=\"0.01\"\n                  step=\"0.01\"\n                  value={pkg[field]}\n                  onChange={(event) => updatePackage(index, field, event.target.value)}\n                  disabled={disabled}\n                />\n              </div>\n            ))}\n          </div>\n        </div>\n      ))}\n      <Button type=\"button\" variant=\"outline\" size=\"sm\" onClick={addPackage} disabled={disabled}>\n        {t('shipping_carriers.create.package.add', '+ Add package')}\n      </Button>\n    </div>\n  )\n}\n"],
   "mappings": ";AAyCY,SAIE,KAJF;AAvCZ,SAAS,cAAc;AACvB,SAAS,aAAa;AACtB,SAAS,YAAY;AAGrB,MAAM,iBAAiB,CAAC,YAAY,YAAY,WAAW,UAAU;AAErE,MAAM,kBAAoC,EAAE,UAAU,GAAG,UAAU,IAAI,SAAS,IAAI,UAAU,GAAG;AAE1F,MAAM,gBAAgB,CAAC,UAA8B;AAC1D,QAAM,EAAE,UAAU,UAAU,SAAS,IAAI;AACzC,QAAM,IAAI,KAAK;AAEf,QAAM,aAAa,CAAC,UAAkC;AACpD,UAAM,SAAiD;AAAA,MACrD,UAAU,EAAE,6CAA6C,aAAa;AAAA,MACtE,UAAU,EAAE,6CAA6C,aAAa;AAAA,MACtE,SAAS,EAAE,4CAA4C,YAAY;AAAA,MACnE,UAAU,EAAE,6CAA6C,aAAa;AAAA,IACxE;AACA,WAAO,OAAO,KAAK;AAAA,EACrB;AAEA,QAAM,gBAAgB,CAAC,OAAe,OAA+B,QAAgB;AACnF,UAAM,QAAQ,WAAW,GAAG;AAC5B,aAAS,SAAS;AAAA,MAAI,CAAC,KAAK,QAC1B,QAAQ,QAAQ,EAAE,GAAG,KAAK,CAAC,KAAK,GAAG,OAAO,MAAM,KAAK,IAAI,IAAI,MAAM,IAAI;AAAA,IACzE,CAAC;AAAA,EACH;AAEA,QAAM,aAAa,MAAM,SAAS,CAAC,GAAG,UAAU,eAAe,CAAC;AAEhE,QAAM,gBAAgB,CAAC,UAAkB,SAAS,SAAS,OAAO,CAAC,GAAG,QAAQ,QAAQ,KAAK,CAAC;AAE5F,SACE,qBAAC,SAAI,WAAU,aACZ;AAAA,aAAS,IAAI,CAAC,KAAK,UAClB,qBAAC,SAAgB,WAAU,qCACzB;AAAA,2BAAC,SAAI,WAAU,0CACb;AAAA,6BAAC,UAAK,WAAU,6CACb;AAAA,YAAE,0CAA0C,SAAS;AAAA,UAAE;AAAA,UAAE,QAAQ;AAAA,WACpE;AAAA,QACC,SAAS,SAAS,IACjB;AAAA,UAAC;AAAA;AAAA,YACC,MAAK;AAAA,YACL,SAAQ;AAAA,YACR,MAAK;AAAA,YACL,WAAU;AAAA,YACV,SAAS,MAAM,cAAc,KAAK;AAAA,YAClC;AAAA,YAEC,YAAE,2CAA2C,QAAQ;AAAA;AAAA,QACxD,IACE;AAAA,SACN;AAAA,MACA,oBAAC,SAAI,WAAU,6BACZ,yBAAe,IAAI,CAAC,UACnB,qBAAC,SACC;AAAA,4BAAC,WAAM,WAAU,wDACd,qBAAW,KAAK,GACnB;AAAA,QACA;AAAA,UAAC;AAAA;AAAA,YACC,MAAK;AAAA,YACL,KAAI;AAAA,YACJ,MAAK;AAAA,YACL,OAAO,IAAI,KAAK;AAAA,YAChB,UAAU,CAAC,UAAU,cAAc,OAAO,OAAO,MAAM,OAAO,KAAK;AAAA,YACnE;AAAA;AAAA,QACF;AAAA,WAXQ,KAYV,CACD,GACH;AAAA,SAlCQ,KAmCV,CACD;AAAA,IACD,oBAAC,UAAO,MAAK,UAAS,SAAQ,WAAU,MAAK,MAAK,SAAS,YAAY,UACpE,YAAE,wCAAwC,eAAe,GAC5D;AAAA,KACF;AAEJ;",
   "names": []
 }

package/dist/modules/staff/api/interceptors.js

@@ -1,6 +1,7 @@
-import { authorizeFeatures } from "@open-mercato/shared/security/featurePolicy";
+import { hasFeature } from "@open-mercato/shared/security/features";
 import { getStaffMemberByUserId } from "../lib/staffMemberResolver.js";
 async function hasManageAllFeature(context) {
+  if (hasFeature(context.userFeatures, "staff.timesheets.manage_all")) return true;
   try {
     const rbac = context.container.resolve("rbacService");
     if (rbac?.userHasAllFeatures) {
@@ -12,10 +13,7 @@ async function hasManageAllFeature(context) {
     }
   } catch {
   }
-  return authorizeFeatures(
-    ["staff.timesheets.manage_all"],
-    { grantedFeatures: context.userFeatures ?? [] }
-  );
+  return false;
 }
 const interceptors = [
   {

package/dist/modules/staff/api/interceptors.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/staff/api/interceptors.ts"],
-  "sourcesContent": ["import type { ApiInterceptor, InterceptorContext } from '@open-mercato/shared/lib/crud/api-interceptor'\nimport { authorizeFeatures } from '@open-mercato/shared/security/featurePolicy'\nimport { getStaffMemberByUserId } from '../lib/staffMemberResolver'\n\ntype RbacServiceLike = {\n  userHasAllFeatures: (\n    userId: string,\n    required: string[],\n    scope: { tenantId: string | null; organizationId: string | null },\n  ) => Promise<boolean>\n}\n\n/**\n * Checks whether the caller has manage_all rights, honoring wildcard ACL grants\n * (`staff.*`, `*`) and the super-admin flag.\n *\n * `context.userFeatures` is populated only on CRUD-factory routes (factory.ts\n * calls `rbacService.getGrantedFeatures`). Custom routes that wire interceptors\n * manually (like `dashboards/widgets/data`) pass `auth.features` directly, and\n * the JWT does NOT include features \u2014 so we must fall back to loading the ACL\n * from `rbacService.userHasAllFeatures`, which is cached and wildcard-aware.\n */\nasync function hasManageAllFeature(context: InterceptorContext): Promise<boolean> {\n  try {\n    const rbac = context.container.resolve('rbacService') as RbacServiceLike | undefined\n    if (rbac?.userHasAllFeatures) {\n      return await rbac.userHasAllFeatures(\n        context.userId,\n        ['staff.timesheets.manage_all'],\n        { tenantId: context.tenantId ?? null, organizationId: context.organizationId ?? null },\n      )\n    }\n  } catch {\n    // Fall back to the already-loaded snapshot below.\n  }\n  return authorizeFeatures(\n    ['staff.timesheets.manage_all'],\n    { grantedFeatures: context.userFeatures ?? [] },\n  )\n}\n\nexport const interceptors: ApiInterceptor[] = [\n  {\n    id: 'staff.timesheets.self-scope-widget-data',\n    targetRoute: 'dashboards/widgets/data',\n    methods: ['POST'],\n    priority: 70,\n    async before(request, context) {\n      const entityType = request.body?.entityType\n      if (entityType !== 'staff:staff_time_entries') {\n        return { ok: true }\n      }\n\n      if (await hasManageAllFeature(context)) {\n        return { ok: true }\n      }\n\n      const staffMember = await getStaffMemberByUserId(\n        context.em,\n        context.userId,\n        context.tenantId ?? null,\n        context.organizationId ?? null,\n      )\n\n      if (!staffMember) {\n        return {\n          ok: false,\n          statusCode: 403,\n          message: 'User is not a staff member.',\n        }\n      }\n\n      const existingFilters = Array.isArray(request.body?.filters) ? request.body.filters : []\n      const otherFilters = existingFilters.filter(\n        (f: Record<string, unknown>) => f.field !== 'staffMemberId',\n      )\n\n      return {\n        ok: true,\n        body: {\n          ...request.body,\n          filters: [\n            ...otherFilters,\n            { field: 'staffMemberId', operator: 'eq', value: staffMember.id },\n          ],\n        },\n      }\n    },\n  },\n  {\n    id: 'staff.timesheets.self-scope-time-entries',\n    targetRoute: 'staff/timesheets/time-entries',\n    methods: ['GET'],\n    priority: 70,\n    async before(request, context) {\n      if (await hasManageAllFeature(context)) {\n        return { ok: true }\n      }\n\n      const staffMember = await getStaffMemberByUserId(\n        context.em,\n        context.userId,\n        context.tenantId ?? null,\n        context.organizationId ?? null,\n      )\n\n      if (!staffMember) {\n        return {\n          ok: false,\n          statusCode: 403,\n          message: 'User is not a staff member.',\n        }\n      }\n\n      return {\n        ok: true,\n        query: {\n          ...(request.query ?? {}),\n          staffMemberId: staffMember.id,\n        },\n      }\n    },\n  },\n]\n"],
-  "mappings": "AACA,SAAS,yBAAyB;AAClC,SAAS,8BAA8B;AAoBvC,eAAe,oBAAoB,SAA+C;AAChF,MAAI;AACF,UAAM,OAAO,QAAQ,UAAU,QAAQ,aAAa;AACpD,QAAI,MAAM,oBAAoB;AAC5B,aAAO,MAAM,KAAK;AAAA,QAChB,QAAQ;AAAA,QACR,CAAC,6BAA6B;AAAA,QAC9B,EAAE,UAAU,QAAQ,YAAY,MAAM,gBAAgB,QAAQ,kBAAkB,KAAK;AAAA,MACvF;AAAA,IACF;AAAA,EACF,QAAQ;AAAA,EAER;AACA,SAAO;AAAA,IACL,CAAC,6BAA6B;AAAA,IAC9B,EAAE,iBAAiB,QAAQ,gBAAgB,CAAC,EAAE;AAAA,EAChD;AACF;AAEO,MAAM,eAAiC;AAAA,EAC5C;AAAA,IACE,IAAI;AAAA,IACJ,aAAa;AAAA,IACb,SAAS,CAAC,MAAM;AAAA,IAChB,UAAU;AAAA,IACV,MAAM,OAAO,SAAS,SAAS;AAC7B,YAAM,aAAa,QAAQ,MAAM;AACjC,UAAI,eAAe,4BAA4B;AAC7C,eAAO,EAAE,IAAI,KAAK;AAAA,MACpB;AAEA,UAAI,MAAM,oBAAoB,OAAO,GAAG;AACtC,eAAO,EAAE,IAAI,KAAK;AAAA,MACpB;AAEA,YAAM,cAAc,MAAM;AAAA,QACxB,QAAQ;AAAA,QACR,QAAQ;AAAA,QACR,QAAQ,YAAY;AAAA,QACpB,QAAQ,kBAAkB;AAAA,MAC5B;AAEA,UAAI,CAAC,aAAa;AAChB,eAAO;AAAA,UACL,IAAI;AAAA,UACJ,YAAY;AAAA,UACZ,SAAS;AAAA,QACX;AAAA,MACF;AAEA,YAAM,kBAAkB,MAAM,QAAQ,QAAQ,MAAM,OAAO,IAAI,QAAQ,KAAK,UAAU,CAAC;AACvF,YAAM,eAAe,gBAAgB;AAAA,QACnC,CAAC,MAA+B,EAAE,UAAU;AAAA,MAC9C;AAEA,aAAO;AAAA,QACL,IAAI;AAAA,QACJ,MAAM;AAAA,UACJ,GAAG,QAAQ;AAAA,UACX,SAAS;AAAA,YACP,GAAG;AAAA,YACH,EAAE,OAAO,iBAAiB,UAAU,MAAM,OAAO,YAAY,GAAG;AAAA,UAClE;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,aAAa;AAAA,IACb,SAAS,CAAC,KAAK;AAAA,IACf,UAAU;AAAA,IACV,MAAM,OAAO,SAAS,SAAS;AAC7B,UAAI,MAAM,oBAAoB,OAAO,GAAG;AACtC,eAAO,EAAE,IAAI,KAAK;AAAA,MACpB;AAEA,YAAM,cAAc,MAAM;AAAA,QACxB,QAAQ;AAAA,QACR,QAAQ;AAAA,QACR,QAAQ,YAAY;AAAA,QACpB,QAAQ,kBAAkB;AAAA,MAC5B;AAEA,UAAI,CAAC,aAAa;AAChB,eAAO;AAAA,UACL,IAAI;AAAA,UACJ,YAAY;AAAA,UACZ,SAAS;AAAA,QACX;AAAA,MACF;AAEA,aAAO;AAAA,QACL,IAAI;AAAA,QACJ,OAAO;AAAA,UACL,GAAI,QAAQ,SAAS,CAAC;AAAA,UACtB,eAAe,YAAY;AAAA,QAC7B;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import type { ApiInterceptor, InterceptorContext } from '@open-mercato/shared/lib/crud/api-interceptor'\nimport { hasFeature } from '@open-mercato/shared/security/features'\nimport { getStaffMemberByUserId } from '../lib/staffMemberResolver'\n\ntype RbacServiceLike = {\n  userHasAllFeatures: (\n    userId: string,\n    required: string[],\n    scope: { tenantId: string | null; organizationId: string | null },\n  ) => Promise<boolean>\n}\n\n/**\n * Checks whether the caller has manage_all rights, honoring wildcard ACL grants\n * (`staff.*`, `*`) and the super-admin flag.\n *\n * `context.userFeatures` is populated only on CRUD-factory routes (factory.ts\n * calls `rbacService.getGrantedFeatures`). Custom routes that wire interceptors\n * manually (like `dashboards/widgets/data`) pass `auth.features` directly, and\n * the JWT does NOT include features \u2014 so we must fall back to loading the ACL\n * from `rbacService.userHasAllFeatures`, which is cached and wildcard-aware.\n */\nasync function hasManageAllFeature(context: InterceptorContext): Promise<boolean> {\n  if (hasFeature(context.userFeatures, 'staff.timesheets.manage_all')) return true\n  try {\n    const rbac = context.container.resolve('rbacService') as RbacServiceLike | undefined\n    if (rbac?.userHasAllFeatures) {\n      return await rbac.userHasAllFeatures(\n        context.userId,\n        ['staff.timesheets.manage_all'],\n        { tenantId: context.tenantId ?? null, organizationId: context.organizationId ?? null },\n      )\n    }\n  } catch {\n    // rbacService not available \u2014 fall through to deny\n  }\n  return false\n}\n\nexport const interceptors: ApiInterceptor[] = [\n  {\n    id: 'staff.timesheets.self-scope-widget-data',\n    targetRoute: 'dashboards/widgets/data',\n    methods: ['POST'],\n    priority: 70,\n    async before(request, context) {\n      const entityType = request.body?.entityType\n      if (entityType !== 'staff:staff_time_entries') {\n        return { ok: true }\n      }\n\n      if (await hasManageAllFeature(context)) {\n        return { ok: true }\n      }\n\n      const staffMember = await getStaffMemberByUserId(\n        context.em,\n        context.userId,\n        context.tenantId ?? null,\n        context.organizationId ?? null,\n      )\n\n      if (!staffMember) {\n        return {\n          ok: false,\n          statusCode: 403,\n          message: 'User is not a staff member.',\n        }\n      }\n\n      const existingFilters = Array.isArray(request.body?.filters) ? request.body.filters : []\n      const otherFilters = existingFilters.filter(\n        (f: Record<string, unknown>) => f.field !== 'staffMemberId',\n      )\n\n      return {\n        ok: true,\n        body: {\n          ...request.body,\n          filters: [\n            ...otherFilters,\n            { field: 'staffMemberId', operator: 'eq', value: staffMember.id },\n          ],\n        },\n      }\n    },\n  },\n  {\n    id: 'staff.timesheets.self-scope-time-entries',\n    targetRoute: 'staff/timesheets/time-entries',\n    methods: ['GET'],\n    priority: 70,\n    async before(request, context) {\n      if (await hasManageAllFeature(context)) {\n        return { ok: true }\n      }\n\n      const staffMember = await getStaffMemberByUserId(\n        context.em,\n        context.userId,\n        context.tenantId ?? null,\n        context.organizationId ?? null,\n      )\n\n      if (!staffMember) {\n        return {\n          ok: false,\n          statusCode: 403,\n          message: 'User is not a staff member.',\n        }\n      }\n\n      return {\n        ok: true,\n        query: {\n          ...(request.query ?? {}),\n          staffMemberId: staffMember.id,\n        },\n      }\n    },\n  },\n]\n"],
+  "mappings": "AACA,SAAS,kBAAkB;AAC3B,SAAS,8BAA8B;AAoBvC,eAAe,oBAAoB,SAA+C;AAChF,MAAI,WAAW,QAAQ,cAAc,6BAA6B,EAAG,QAAO;AAC5E,MAAI;AACF,UAAM,OAAO,QAAQ,UAAU,QAAQ,aAAa;AACpD,QAAI,MAAM,oBAAoB;AAC5B,aAAO,MAAM,KAAK;AAAA,QAChB,QAAQ;AAAA,QACR,CAAC,6BAA6B;AAAA,QAC9B,EAAE,UAAU,QAAQ,YAAY,MAAM,gBAAgB,QAAQ,kBAAkB,KAAK;AAAA,MACvF;AAAA,IACF;AAAA,EACF,QAAQ;AAAA,EAER;AACA,SAAO;AACT;AAEO,MAAM,eAAiC;AAAA,EAC5C;AAAA,IACE,IAAI;AAAA,IACJ,aAAa;AAAA,IACb,SAAS,CAAC,MAAM;AAAA,IAChB,UAAU;AAAA,IACV,MAAM,OAAO,SAAS,SAAS;AAC7B,YAAM,aAAa,QAAQ,MAAM;AACjC,UAAI,eAAe,4BAA4B;AAC7C,eAAO,EAAE,IAAI,KAAK;AAAA,MACpB;AAEA,UAAI,MAAM,oBAAoB,OAAO,GAAG;AACtC,eAAO,EAAE,IAAI,KAAK;AAAA,MACpB;AAEA,YAAM,cAAc,MAAM;AAAA,QACxB,QAAQ;AAAA,QACR,QAAQ;AAAA,QACR,QAAQ,YAAY;AAAA,QACpB,QAAQ,kBAAkB;AAAA,MAC5B;AAEA,UAAI,CAAC,aAAa;AAChB,eAAO;AAAA,UACL,IAAI;AAAA,UACJ,YAAY;AAAA,UACZ,SAAS;AAAA,QACX;AAAA,MACF;AAEA,YAAM,kBAAkB,MAAM,QAAQ,QAAQ,MAAM,OAAO,IAAI,QAAQ,KAAK,UAAU,CAAC;AACvF,YAAM,eAAe,gBAAgB;AAAA,QACnC,CAAC,MAA+B,EAAE,UAAU;AAAA,MAC9C;AAEA,aAAO;AAAA,QACL,IAAI;AAAA,QACJ,MAAM;AAAA,UACJ,GAAG,QAAQ;AAAA,UACX,SAAS;AAAA,YACP,GAAG;AAAA,YACH,EAAE,OAAO,iBAAiB,UAAU,MAAM,OAAO,YAAY,GAAG;AAAA,UAClE;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,aAAa;AAAA,IACb,SAAS,CAAC,KAAK;AAAA,IACf,UAAU;AAAA,IACV,MAAM,OAAO,SAAS,SAAS;AAC7B,UAAI,MAAM,oBAAoB,OAAO,GAAG;AACtC,eAAO,EAAE,IAAI,KAAK;AAAA,MACpB;AAEA,YAAM,cAAc,MAAM;AAAA,QACxB,QAAQ;AAAA,QACR,QAAQ;AAAA,QACR,QAAQ,YAAY;AAAA,QACpB,QAAQ,kBAAkB;AAAA,MAC5B;AAEA,UAAI,CAAC,aAAa;AAChB,eAAO;AAAA,UACL,IAAI;AAAA,UACJ,YAAY;AAAA,UACZ,SAAS;AAAA,QACX;AAAA,MACF;AAEA,aAAO;AAAA,QACL,IAAI;AAAA,QACJ,OAAO;AAAA,UACL,GAAI,QAAQ,SAAS,CAAC;AAAA,UACtB,eAAe,YAAY;AAAA,QAC7B;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }