@open-mercato/core 0.6.7 → 0.6.8-develop.6874.1.982d6097d8

package/dist/modules/dashboards/api/widgets/data/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../src/modules/dashboards/api/widgets/data/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport type { CacheStrategy } from '@open-mercato/cache'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport {\n  createWidgetDataService,\n  type WidgetDataRequest,\n  WidgetDataValidationError,\n} from '../../../services/widgetDataService'\nimport type { AnalyticsRegistry } from '../../../services/analyticsRegistry'\nimport { runApiInterceptorsBefore } from '@open-mercato/shared/lib/crud/interceptor-runner'\nimport type { OpenApiMethodDoc, OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { dashboardsTag, dashboardsErrorSchema } from '../../openapi'\nimport { widgetDataRequestSchema, widgetDataResponseSchema } from './schema'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('dashboards').child({ component: 'widgets-data' })\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: ['analytics.view'] },\n}\n\nexport async function POST(req: Request) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n\n  let body: unknown\n  try {\n    body = await req.json()\n  } catch {\n    return NextResponse.json({ error: 'Invalid JSON body' }, { status: 400 })\n  }\n\n  const parsed = widgetDataRequestSchema.safeParse(body)\n  if (!parsed.success) {\n    return NextResponse.json(\n      { error: 'Invalid request payload', issues: parsed.error.issues },\n      { status: 400 },\n    )\n  }\n\n  const container = await createRequestContainer()\n  const analyticsRegistry = container.resolve<AnalyticsRegistry>('analyticsRegistry')\n\n  const entityFeatures = analyticsRegistry.getRequiredFeatures(parsed.data.entityType)\n  if (entityFeatures && entityFeatures.length > 0) {\n    const rbacService = container.resolve<{\n      userHasAllFeatures: (\n        userId: string,\n        features: string[],\n        scope: { tenantId: string; organizationId?: string | null },\n      ) => Promise<boolean>\n    }>('rbacService')\n    const hasAccess = await rbacService.userHasAllFeatures(auth.sub, entityFeatures, {\n      tenantId: auth.tenantId!,\n      organizationId: auth.orgId,\n    })\n    if (!hasAccess) {\n      return NextResponse.json({ error: 'Forbidden' }, { status: 403 })\n    }\n  }\n\n  const em = (container.resolve('em') as EntityManager).fork({\n    clear: true,\n    freshEventManager: true,\n    useContext: true,\n  })\n\n  const tenantId = auth.tenantId ?? null\n  if (!tenantId) {\n    return NextResponse.json({ error: 'Tenant context is required' }, { status: 400 })\n  }\n\n  const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n\n  const organizationIds = (() => {\n    if (scope?.selectedId) return [scope.selectedId]\n    if (Array.isArray(scope?.filterIds) && scope.filterIds.length > 0) return scope.filterIds\n    if (scope?.allowedIds === null) return undefined\n    if (auth.orgId) return [auth.orgId]\n    return undefined\n  })()\n\n  const userFeatures = Array.isArray(auth.features)\n    ? auth.features.filter((value): value is string => typeof value === 'string')\n    : []\n\n  const headers: Record<string, string> = {}\n  req.headers.forEach((value, key) => {\n    headers[key] = value\n  })\n\n  const interceptorResult = await runApiInterceptorsBefore({\n    routePath: 'dashboards/widgets/data',\n    method: 'POST',\n    request: {\n      method: 'POST',\n      url: req.url,\n      headers,\n      body: parsed.data as unknown as Record<string, unknown>,\n    },\n    context: {\n      em,\n      container,\n      userId: auth.sub ?? '',\n      tenantId,\n      organizationId: organizationIds?.[0] ?? auth.orgId ?? '',\n      userFeatures,\n    },\n  })\n\n  if (!interceptorResult.ok) {\n    return NextResponse.json(interceptorResult.body, { status: interceptorResult.statusCode })\n  }\n\n  const requestData = (interceptorResult.request.body ?? parsed.data) as WidgetDataRequest\n\n  try {\n    const cache = container.resolve<CacheStrategy>('cache')\n    const service = createWidgetDataService(em, { tenantId, organizationIds }, analyticsRegistry, cache)\n    const result = await service.fetchWidgetData(requestData)\n    return NextResponse.json(result)\n  } catch (err) {\n    logger.error('Widget data request failed', { err })\n    if (err instanceof WidgetDataValidationError) {\n      return NextResponse.json({ error: err.message }, { status: 400 })\n    }\n    return NextResponse.json(\n      { error: 'An error occurred while processing your request' },\n      { status: 500 },\n    )\n  }\n}\n\nconst widgetDataPostDoc: OpenApiMethodDoc = {\n  summary: 'Fetch aggregated data for dashboard widgets',\n  description:\n    'Executes an aggregation query against the specified entity type and returns the result. Supports date range filtering, grouping, and period-over-period comparison.',\n  tags: [dashboardsTag],\n  requestBody: {\n    contentType: 'application/json',\n    schema: widgetDataRequestSchema,\n    description: 'Widget data request configuration specifying entity type, metric, filters, and grouping.',\n  },\n  responses: [\n    {\n      status: 200,\n      description: 'Aggregated data for the widget.',\n      schema: widgetDataResponseSchema,\n    },\n  ],\n  errors: [\n    { status: 400, description: 'Invalid request payload', schema: dashboardsErrorSchema },\n    { status: 401, description: 'Authentication required', schema: dashboardsErrorSchema },\n    { status: 403, description: 'Missing analytics.view feature', schema: dashboardsErrorSchema },\n    { status: 500, description: 'Internal server error', schema: dashboardsErrorSchema },\n  ],\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: dashboardsTag,\n  summary: 'Widget data aggregation endpoint',\n  methods: {\n    POST: widgetDataPostDoc,\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAG7B,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AACvC,SAAS,0CAA0C;AACnD;AAAA,EACE;AAAA,EAEA;AAAA,OACK;AAEP,SAAS,gCAAgC;AAEzC,SAAS,eAAe,6BAA6B;AACrD,SAAS,yBAAyB,gCAAgC;AAClE,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,YAAY,EAAE,MAAM,EAAE,WAAW,eAAe,CAAC;AAEtE,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,gBAAgB,EAAE;AACjE;AAEA,eAAsB,KAAK,KAAc;AACvC,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM;AACT,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAEA,MAAI;AACJ,MAAI;AACF,WAAO,MAAM,IAAI,KAAK;AAAA,EACxB,QAAQ;AACN,WAAO,aAAa,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC1E;AAEA,QAAM,SAAS,wBAAwB,UAAU,IAAI;AACrD,MAAI,CAAC,OAAO,SAAS;AACnB,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,2BAA2B,QAAQ,OAAO,MAAM,OAAO;AAAA,MAChE,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,oBAAoB,UAAU,QAA2B,mBAAmB;AAElF,QAAM,iBAAiB,kBAAkB,oBAAoB,OAAO,KAAK,UAAU;AACnF,MAAI,kBAAkB,eAAe,SAAS,GAAG;AAC/C,UAAM,cAAc,UAAU,QAM3B,aAAa;AAChB,UAAM,YAAY,MAAM,YAAY,mBAAmB,KAAK,KAAK,gBAAgB;AAAA,MAC/E,UAAU,KAAK;AAAA,MACf,gBAAgB,KAAK;AAAA,IACvB,CAAC;AACD,QAAI,CAAC,WAAW;AACd,aAAO,aAAa,KAAK,EAAE,OAAO,YAAY,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAClE;AAAA,EACF;AAEA,QAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAAA,IACzD,OAAO;AAAA,IACP,mBAAmB;AAAA,IACnB,YAAY;AAAA,EACd,CAAC;AAED,QAAM,WAAW,KAAK,YAAY;AAClC,MAAI,CAAC,UAAU;AACb,WAAO,aAAa,KAAK,EAAE,OAAO,6BAA6B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACnF;AAEA,QAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AAExF,QAAM,mBAAmB,MAAM;AAC7B,QAAI,OAAO,WAAY,QAAO,CAAC,MAAM,UAAU;AAC/C,QAAI,MAAM,QAAQ,OAAO,SAAS,KAAK,MAAM,UAAU,SAAS,EAAG,QAAO,MAAM;AAChF,QAAI,OAAO,eAAe,KAAM,QAAO;AACvC,QAAI,KAAK,MAAO,QAAO,CAAC,KAAK,KAAK;AAClC,WAAO;AAAA,EACT,GAAG;AAEH,QAAM,eAAe,MAAM,QAAQ,KAAK,QAAQ,IAC5C,KAAK,SAAS,OAAO,CAAC,UAA2B,OAAO,UAAU,QAAQ,IAC1E,CAAC;AAEL,QAAM,UAAkC,CAAC;AACzC,MAAI,QAAQ,QAAQ,CAAC,OAAO,QAAQ;AAClC,YAAQ,GAAG,IAAI;AAAA,EACjB,CAAC;AAED,QAAM,oBAAoB,MAAM,yBAAyB;AAAA,IACvD,WAAW;AAAA,IACX,QAAQ;AAAA,IACR,SAAS;AAAA,MACP,QAAQ;AAAA,MACR,KAAK,IAAI;AAAA,MACT;AAAA,MACA,MAAM,OAAO;AAAA,IACf;AAAA,IACA,SAAS;AAAA,MACP;AAAA,MACA;AAAA,MACA,QAAQ,KAAK,OAAO;AAAA,MACpB;AAAA,MACA,gBAAgB,kBAAkB,CAAC,KAAK,KAAK,SAAS;AAAA,MACtD;AAAA,IACF;AAAA,EACF,CAAC;AAED,MAAI,CAAC,kBAAkB,IAAI;AACzB,WAAO,aAAa,KAAK,kBAAkB,MAAM,EAAE,QAAQ,kBAAkB,WAAW,CAAC;AAAA,EAC3F;AAEA,QAAM,cAAe,kBAAkB,QAAQ,QAAQ,OAAO;AAE9D,MAAI;AACF,UAAM,QAAQ,UAAU,QAAuB,OAAO;AACtD,UAAM,UAAU,wBAAwB,IAAI,EAAE,UAAU,gBAAgB,GAAG,mBAAmB,KAAK;AACnG,UAAM,SAAS,MAAM,QAAQ,gBAAgB,WAAW;AACxD,WAAO,aAAa,KAAK,MAAM;AAAA,EACjC,SAAS,KAAK;AACZ,WAAO,MAAM,8BAA8B,EAAE,IAAI,CAAC;AAClD,QAAI,eAAe,2BAA2B;AAC5C,aAAO,aAAa,KAAK,EAAE,OAAO,IAAI,QAAQ,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAClE;AACA,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,kDAAkD;AAAA,MAC3D,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAEA,MAAM,oBAAsC;AAAA,EAC1C,SAAS;AAAA,EACT,aACE;AAAA,EACF,MAAM,CAAC,aAAa;AAAA,EACpB,aAAa;AAAA,IACX,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,aAAa;AAAA,EACf;AAAA,EACA,WAAW;AAAA,IACT;AAAA,MACE,QAAQ;AAAA,MACR,aAAa;AAAA,MACb,QAAQ;AAAA,IACV;AAAA,EACF;AAAA,EACA,QAAQ;AAAA,IACN,EAAE,QAAQ,KAAK,aAAa,2BAA2B,QAAQ,sBAAsB;AAAA,IACrF,EAAE,QAAQ,KAAK,aAAa,2BAA2B,QAAQ,sBAAsB;AAAA,IACrF,EAAE,QAAQ,KAAK,aAAa,kCAAkC,QAAQ,sBAAsB;AAAA,IAC5F,EAAE,QAAQ,KAAK,aAAa,yBAAyB,QAAQ,sBAAsB;AAAA,EACrF;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,EACR;AACF;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport type { CacheStrategy } from '@open-mercato/cache'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport {\n  createWidgetDataService,\n  type WidgetDataRequest,\n  WidgetDataValidationError,\n  WidgetDataScanLimitError,\n  WidgetDataEncryptionUnavailableError,\n} from '../../../services/widgetDataService'\nimport type { AnalyticsRegistry } from '../../../services/analyticsRegistry'\nimport { runApiInterceptorsBefore } from '@open-mercato/shared/lib/crud/interceptor-runner'\nimport type { OpenApiMethodDoc, OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { dashboardsTag, dashboardsErrorSchema } from '../../openapi'\nimport { widgetDataRequestSchema, widgetDataResponseSchema } from './schema'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport { resolveOptionalBaseCurrencyResolver } from '../../../lib/optionalBaseCurrency'\n\nconst logger = createLogger('dashboards').child({ component: 'widgets-data' })\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: ['analytics.view'] },\n}\n\nexport async function POST(req: Request) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n\n  let body: unknown\n  try {\n    body = await req.json()\n  } catch {\n    return NextResponse.json({ error: 'Invalid JSON body' }, { status: 400 })\n  }\n\n  const parsed = widgetDataRequestSchema.safeParse(body)\n  if (!parsed.success) {\n    return NextResponse.json(\n      { error: 'Invalid request payload', issues: parsed.error.issues },\n      { status: 400 },\n    )\n  }\n\n  const container = await createRequestContainer()\n  const analyticsRegistry = container.resolve<AnalyticsRegistry>('analyticsRegistry')\n\n  const entityFeatures = analyticsRegistry.getRequiredFeatures(parsed.data.entityType)\n  if (entityFeatures && entityFeatures.length > 0) {\n    const rbacService = container.resolve<{\n      userHasAllFeatures: (\n        userId: string,\n        features: string[],\n        scope: { tenantId: string; organizationId?: string | null },\n      ) => Promise<boolean>\n    }>('rbacService')\n    const hasAccess = await rbacService.userHasAllFeatures(auth.sub, entityFeatures, {\n      tenantId: auth.tenantId!,\n      organizationId: auth.orgId,\n    })\n    if (!hasAccess) {\n      return NextResponse.json({ error: 'Forbidden' }, { status: 403 })\n    }\n  }\n\n  const em = (container.resolve('em') as EntityManager).fork({\n    clear: true,\n    freshEventManager: true,\n    useContext: true,\n  })\n\n  const tenantId = auth.tenantId ?? null\n  if (!tenantId) {\n    return NextResponse.json({ error: 'Tenant context is required' }, { status: 400 })\n  }\n\n  const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n\n  const organizationIds = (() => {\n    if (scope?.selectedId) return [scope.selectedId]\n    if (Array.isArray(scope?.filterIds) && scope.filterIds.length > 0) return scope.filterIds\n    if (scope?.allowedIds === null) return undefined\n    if (auth.orgId) return [auth.orgId]\n    return undefined\n  })()\n\n  const userFeatures = Array.isArray(auth.features)\n    ? auth.features.filter((value): value is string => typeof value === 'string')\n    : []\n\n  const headers: Record<string, string> = {}\n  req.headers.forEach((value, key) => {\n    headers[key] = value\n  })\n\n  const interceptorResult = await runApiInterceptorsBefore({\n    routePath: 'dashboards/widgets/data',\n    method: 'POST',\n    request: {\n      method: 'POST',\n      url: req.url,\n      headers,\n      body: parsed.data as unknown as Record<string, unknown>,\n    },\n    context: {\n      em,\n      container,\n      userId: auth.sub ?? '',\n      tenantId,\n      organizationId: organizationIds?.[0] ?? auth.orgId ?? '',\n      userFeatures,\n    },\n  })\n\n  if (!interceptorResult.ok) {\n    return NextResponse.json(interceptorResult.body, { status: interceptorResult.statusCode })\n  }\n\n  const requestData = (interceptorResult.request.body ?? parsed.data) as WidgetDataRequest\n\n  try {\n    const cache = container.resolve<CacheStrategy>('cache')\n    const service = createWidgetDataService(\n      em,\n      { tenantId, organizationIds },\n      analyticsRegistry,\n      cache,\n      resolveOptionalBaseCurrencyResolver(container),\n    )\n    const result = await service.fetchWidgetData(requestData)\n    return NextResponse.json(result)\n  } catch (err) {\n    logger.error('Widget data request failed', { err })\n    if (err instanceof WidgetDataValidationError) {\n      return NextResponse.json({ error: err.message }, { status: 400 })\n    }\n    // The dataset is too large to group in application code; surface why rather than a masked 500.\n    if (err instanceof WidgetDataScanLimitError) {\n      return NextResponse.json({ error: err.message }, { status: 422 })\n    }\n    // Encryption is configured but currently unresolvable. Refusing the request keeps ciphertext and\n    // silently-wrong buckets out of the response, and 503 tells the client it is worth retrying.\n    if (err instanceof WidgetDataEncryptionUnavailableError) {\n      return NextResponse.json({ error: err.message }, { status: 503 })\n    }\n    return NextResponse.json(\n      { error: 'An error occurred while processing your request' },\n      { status: 500 },\n    )\n  }\n}\n\nconst widgetDataPostDoc: OpenApiMethodDoc = {\n  summary: 'Fetch aggregated data for dashboard widgets',\n  description:\n    'Executes an aggregation query against the specified entity type and returns the result. Supports date range filtering, grouping, and period-over-period comparison.',\n  tags: [dashboardsTag],\n  requestBody: {\n    contentType: 'application/json',\n    schema: widgetDataRequestSchema,\n    description: 'Widget data request configuration specifying entity type, metric, filters, and grouping.',\n  },\n  responses: [\n    {\n      status: 200,\n      description: 'Aggregated data for the widget.',\n      schema: widgetDataResponseSchema,\n    },\n  ],\n  errors: [\n    { status: 400, description: 'Invalid request payload', schema: dashboardsErrorSchema },\n    { status: 401, description: 'Authentication required', schema: dashboardsErrorSchema },\n    {\n      status: 422,\n      description: 'Too many rows to group an encrypted field in application code',\n      schema: dashboardsErrorSchema,\n    },\n    { status: 403, description: 'Missing analytics.view feature', schema: dashboardsErrorSchema },\n    { status: 500, description: 'Internal server error', schema: dashboardsErrorSchema },\n    {\n      status: 503,\n      description: 'Encryption is configured but the group source cannot currently be resolved',\n      schema: dashboardsErrorSchema,\n    },\n  ],\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: dashboardsTag,\n  summary: 'Widget data aggregation endpoint',\n  methods: {\n    POST: widgetDataPostDoc,\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAG7B,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AACvC,SAAS,0CAA0C;AACnD;AAAA,EACE;AAAA,EAEA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP,SAAS,gCAAgC;AAEzC,SAAS,eAAe,6BAA6B;AACrD,SAAS,yBAAyB,gCAAgC;AAClE,SAAS,oBAAoB;AAC7B,SAAS,2CAA2C;AAEpD,MAAM,SAAS,aAAa,YAAY,EAAE,MAAM,EAAE,WAAW,eAAe,CAAC;AAEtE,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,gBAAgB,EAAE;AACjE;AAEA,eAAsB,KAAK,KAAc;AACvC,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM;AACT,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAEA,MAAI;AACJ,MAAI;AACF,WAAO,MAAM,IAAI,KAAK;AAAA,EACxB,QAAQ;AACN,WAAO,aAAa,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC1E;AAEA,QAAM,SAAS,wBAAwB,UAAU,IAAI;AACrD,MAAI,CAAC,OAAO,SAAS;AACnB,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,2BAA2B,QAAQ,OAAO,MAAM,OAAO;AAAA,MAChE,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,oBAAoB,UAAU,QAA2B,mBAAmB;AAElF,QAAM,iBAAiB,kBAAkB,oBAAoB,OAAO,KAAK,UAAU;AACnF,MAAI,kBAAkB,eAAe,SAAS,GAAG;AAC/C,UAAM,cAAc,UAAU,QAM3B,aAAa;AAChB,UAAM,YAAY,MAAM,YAAY,mBAAmB,KAAK,KAAK,gBAAgB;AAAA,MAC/E,UAAU,KAAK;AAAA,MACf,gBAAgB,KAAK;AAAA,IACvB,CAAC;AACD,QAAI,CAAC,WAAW;AACd,aAAO,aAAa,KAAK,EAAE,OAAO,YAAY,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAClE;AAAA,EACF;AAEA,QAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAAA,IACzD,OAAO;AAAA,IACP,mBAAmB;AAAA,IACnB,YAAY;AAAA,EACd,CAAC;AAED,QAAM,WAAW,KAAK,YAAY;AAClC,MAAI,CAAC,UAAU;AACb,WAAO,aAAa,KAAK,EAAE,OAAO,6BAA6B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACnF;AAEA,QAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AAExF,QAAM,mBAAmB,MAAM;AAC7B,QAAI,OAAO,WAAY,QAAO,CAAC,MAAM,UAAU;AAC/C,QAAI,MAAM,QAAQ,OAAO,SAAS,KAAK,MAAM,UAAU,SAAS,EAAG,QAAO,MAAM;AAChF,QAAI,OAAO,eAAe,KAAM,QAAO;AACvC,QAAI,KAAK,MAAO,QAAO,CAAC,KAAK,KAAK;AAClC,WAAO;AAAA,EACT,GAAG;AAEH,QAAM,eAAe,MAAM,QAAQ,KAAK,QAAQ,IAC5C,KAAK,SAAS,OAAO,CAAC,UAA2B,OAAO,UAAU,QAAQ,IAC1E,CAAC;AAEL,QAAM,UAAkC,CAAC;AACzC,MAAI,QAAQ,QAAQ,CAAC,OAAO,QAAQ;AAClC,YAAQ,GAAG,IAAI;AAAA,EACjB,CAAC;AAED,QAAM,oBAAoB,MAAM,yBAAyB;AAAA,IACvD,WAAW;AAAA,IACX,QAAQ;AAAA,IACR,SAAS;AAAA,MACP,QAAQ;AAAA,MACR,KAAK,IAAI;AAAA,MACT;AAAA,MACA,MAAM,OAAO;AAAA,IACf;AAAA,IACA,SAAS;AAAA,MACP;AAAA,MACA;AAAA,MACA,QAAQ,KAAK,OAAO;AAAA,MACpB;AAAA,MACA,gBAAgB,kBAAkB,CAAC,KAAK,KAAK,SAAS;AAAA,MACtD;AAAA,IACF;AAAA,EACF,CAAC;AAED,MAAI,CAAC,kBAAkB,IAAI;AACzB,WAAO,aAAa,KAAK,kBAAkB,MAAM,EAAE,QAAQ,kBAAkB,WAAW,CAAC;AAAA,EAC3F;AAEA,QAAM,cAAe,kBAAkB,QAAQ,QAAQ,OAAO;AAE9D,MAAI;AACF,UAAM,QAAQ,UAAU,QAAuB,OAAO;AACtD,UAAM,UAAU;AAAA,MACd;AAAA,MACA,EAAE,UAAU,gBAAgB;AAAA,MAC5B;AAAA,MACA;AAAA,MACA,oCAAoC,SAAS;AAAA,IAC/C;AACA,UAAM,SAAS,MAAM,QAAQ,gBAAgB,WAAW;AACxD,WAAO,aAAa,KAAK,MAAM;AAAA,EACjC,SAAS,KAAK;AACZ,WAAO,MAAM,8BAA8B,EAAE,IAAI,CAAC;AAClD,QAAI,eAAe,2BAA2B;AAC5C,aAAO,aAAa,KAAK,EAAE,OAAO,IAAI,QAAQ,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAClE;AAEA,QAAI,eAAe,0BAA0B;AAC3C,aAAO,aAAa,KAAK,EAAE,OAAO,IAAI,QAAQ,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAClE;AAGA,QAAI,eAAe,sCAAsC;AACvD,aAAO,aAAa,KAAK,EAAE,OAAO,IAAI,QAAQ,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAClE;AACA,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,kDAAkD;AAAA,MAC3D,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAEA,MAAM,oBAAsC;AAAA,EAC1C,SAAS;AAAA,EACT,aACE;AAAA,EACF,MAAM,CAAC,aAAa;AAAA,EACpB,aAAa;AAAA,IACX,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,aAAa;AAAA,EACf;AAAA,EACA,WAAW;AAAA,IACT;AAAA,MACE,QAAQ;AAAA,MACR,aAAa;AAAA,MACb,QAAQ;AAAA,IACV;AAAA,EACF;AAAA,EACA,QAAQ;AAAA,IACN,EAAE,QAAQ,KAAK,aAAa,2BAA2B,QAAQ,sBAAsB;AAAA,IACrF,EAAE,QAAQ,KAAK,aAAa,2BAA2B,QAAQ,sBAAsB;AAAA,IACrF;AAAA,MACE,QAAQ;AAAA,MACR,aAAa;AAAA,MACb,QAAQ;AAAA,IACV;AAAA,IACA,EAAE,QAAQ,KAAK,aAAa,kCAAkC,QAAQ,sBAAsB;AAAA,IAC5F,EAAE,QAAQ,KAAK,aAAa,yBAAyB,QAAQ,sBAAsB;AAAA,IACnF;AAAA,MACE,QAAQ;AAAA,MACR,aAAa;AAAA,MACb,QAAQ;AAAA,IACV;AAAA,EACF;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,EACR;AACF;",
   "names": []
 }

package/dist/modules/dashboards/api/widgets/data/schema.js

@@ -16,17 +16,31 @@ const dateRangePresetSchema = z.enum([
   "last_30_days",
   "last_90_days"
 ]);
+const comparisonFilterOperators = ["eq", "neq", "gt", "gte", "lt", "lte"];
+const setFilterOperators = ["in", "not_in"];
+const nullFilterOperators = ["is_null", "is_not_null"];
+const scalarFilterOperators = [...comparisonFilterOperators, ...nullFilterOperators];
+const scalarFilterOperatorSchema = z.enum(scalarFilterOperators);
+const setFilterOperatorSchema = z.enum(setFilterOperators);
 const filterOperatorSchema = z.enum([
-  "eq",
-  "neq",
-  "gt",
-  "gte",
-  "lt",
-  "lte",
-  "in",
-  "not_in",
-  "is_null",
-  "is_not_null"
+  ...comparisonFilterOperators,
+  ...setFilterOperators,
+  ...nullFilterOperators
+]);
+const MAX_SET_FILTER_VALUES = 200;
+const setFilterMemberSchema = z.union([z.string(), z.number(), z.boolean()]);
+const setFilterValueSchema = z.array(setFilterMemberSchema).max(MAX_SET_FILTER_VALUES);
+const widgetDataFilterSchema = z.discriminatedUnion("operator", [
+  z.object({
+    field: z.string().min(1),
+    operator: setFilterOperatorSchema,
+    value: setFilterValueSchema
+  }),
+  z.object({
+    field: z.string().min(1),
+    operator: scalarFilterOperatorSchema,
+    value: z.unknown().optional()
+  })
 ]);
 const widgetDataRequestSchema = z.object({
   entityType: z.string().min(1),
@@ -40,13 +54,7 @@ const widgetDataRequestSchema = z.object({
     limit: z.number().int().min(1).max(100).optional(),
     resolveLabels: z.boolean().optional()
   }).optional(),
-  filters: z.array(
-    z.object({
-      field: z.string().min(1),
-      operator: filterOperatorSchema,
-      value: z.unknown().optional()
-    })
-  ).optional(),
+  filters: z.array(widgetDataFilterSchema).optional(),
   dateRange: z.object({
     field: z.string().min(1),
     preset: dateRangePresetSchema
@@ -70,10 +78,12 @@ const widgetDataResponseSchema = z.object({
   }).optional(),
   metadata: z.object({
     fetchedAt: z.string(),
-    recordCount: z.number()
+    recordCount: z.number(),
+    currency: z.string().nullable().optional()
   })
 });
 export {
+  MAX_SET_FILTER_VALUES,
   aggregateFunctionSchema,
   dateGranularitySchema,
   dateRangePresetSchema,

package/dist/modules/dashboards/api/widgets/data/schema.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../src/modules/dashboards/api/widgets/data/schema.ts"],
-  "sourcesContent": ["import { z } from 'zod'\n\nexport const aggregateFunctionSchema = z.enum(['count', 'sum', 'avg', 'min', 'max'])\nexport const dateGranularitySchema = z.enum(['day', 'week', 'month', 'quarter', 'year'])\nexport const dateRangePresetSchema = z.enum([\n  'today',\n  'yesterday',\n  'this_week',\n  'last_week',\n  'this_month',\n  'last_month',\n  'this_quarter',\n  'last_quarter',\n  'this_year',\n  'last_year',\n  'last_7_days',\n  'last_30_days',\n  'last_90_days',\n])\n\nexport const filterOperatorSchema = z.enum([\n  'eq',\n  'neq',\n  'gt',\n  'gte',\n  'lt',\n  'lte',\n  'in',\n  'not_in',\n  'is_null',\n  'is_not_null',\n])\n\nexport const widgetDataRequestSchema = z.object({\n  entityType: z.string().min(1),\n  metric: z.object({\n    field: z.string().min(1),\n    aggregate: aggregateFunctionSchema,\n  }),\n  groupBy: z\n    .object({\n      field: z.string().min(1),\n      granularity: dateGranularitySchema.optional(),\n      limit: z.number().int().min(1).max(100).optional(),\n      resolveLabels: z.boolean().optional(),\n    })\n    .optional(),\n  filters: z\n    .array(\n      z.object({\n        field: z.string().min(1),\n        operator: filterOperatorSchema,\n        value: z.unknown().optional(),\n      }),\n    )\n    .optional(),\n  dateRange: z\n    .object({\n      field: z.string().min(1),\n      preset: dateRangePresetSchema,\n    })\n    .optional(),\n  comparison: z\n    .object({\n      type: z.enum(['previous_period', 'previous_year']),\n    })\n    .optional(),\n})\n\nexport const widgetDataItemSchema = z.object({\n  groupKey: z.unknown(),\n  groupLabel: z.string().optional(),\n  value: z.number().nullable(),\n})\n\nexport const widgetDataResponseSchema = z.object({\n  value: z.number().nullable(),\n  data: z.array(widgetDataItemSchema),\n  comparison: z\n    .object({\n      value: z.number().nullable(),\n      change: z.number(),\n      direction: z.enum(['up', 'down', 'unchanged']),\n    })\n    .optional(),\n  metadata: z.object({\n    fetchedAt: z.string(),\n    recordCount: z.number(),\n  }),\n})\n"],
-  "mappings": "AAAA,SAAS,SAAS;AAEX,MAAM,0BAA0B,EAAE,KAAK,CAAC,SAAS,OAAO,OAAO,OAAO,KAAK,CAAC;AAC5E,MAAM,wBAAwB,EAAE,KAAK,CAAC,OAAO,QAAQ,SAAS,WAAW,MAAM,CAAC;AAChF,MAAM,wBAAwB,EAAE,KAAK;AAAA,EAC1C;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAEM,MAAM,uBAAuB,EAAE,KAAK;AAAA,EACzC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAEM,MAAM,0BAA0B,EAAE,OAAO;AAAA,EAC9C,YAAY,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EAC5B,QAAQ,EAAE,OAAO;AAAA,IACf,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,IACvB,WAAW;AAAA,EACb,CAAC;AAAA,EACD,SAAS,EACN,OAAO;AAAA,IACN,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,IACvB,aAAa,sBAAsB,SAAS;AAAA,IAC5C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,IACjD,eAAe,EAAE,QAAQ,EAAE,SAAS;AAAA,EACtC,CAAC,EACA,SAAS;AAAA,EACZ,SAAS,EACN;AAAA,IACC,EAAE,OAAO;AAAA,MACP,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,MACvB,UAAU;AAAA,MACV,OAAO,EAAE,QAAQ,EAAE,SAAS;AAAA,IAC9B,CAAC;AAAA,EACH,EACC,SAAS;AAAA,EACZ,WAAW,EACR,OAAO;AAAA,IACN,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,IACvB,QAAQ;AAAA,EACV,CAAC,EACA,SAAS;AAAA,EACZ,YAAY,EACT,OAAO;AAAA,IACN,MAAM,EAAE,KAAK,CAAC,mBAAmB,eAAe,CAAC;AAAA,EACnD,CAAC,EACA,SAAS;AACd,CAAC;AAEM,MAAM,uBAAuB,EAAE,OAAO;AAAA,EAC3C,UAAU,EAAE,QAAQ;AAAA,EACpB,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,EAChC,OAAO,EAAE,OAAO,EAAE,SAAS;AAC7B,CAAC;AAEM,MAAM,2BAA2B,EAAE,OAAO;AAAA,EAC/C,OAAO,EAAE,OAAO,EAAE,SAAS;AAAA,EAC3B,MAAM,EAAE,MAAM,oBAAoB;AAAA,EAClC,YAAY,EACT,OAAO;AAAA,IACN,OAAO,EAAE,OAAO,EAAE,SAAS;AAAA,IAC3B,QAAQ,EAAE,OAAO;AAAA,IACjB,WAAW,EAAE,KAAK,CAAC,MAAM,QAAQ,WAAW,CAAC;AAAA,EAC/C,CAAC,EACA,SAAS;AAAA,EACZ,UAAU,EAAE,OAAO;AAAA,IACjB,WAAW,EAAE,OAAO;AAAA,IACpB,aAAa,EAAE,OAAO;AAAA,EACxB,CAAC;AACH,CAAC;",
+  "sourcesContent": ["import { z } from 'zod'\n\nexport const aggregateFunctionSchema = z.enum(['count', 'sum', 'avg', 'min', 'max'])\nexport const dateGranularitySchema = z.enum(['day', 'week', 'month', 'quarter', 'year'])\nexport const dateRangePresetSchema = z.enum([\n  'today',\n  'yesterday',\n  'this_week',\n  'last_week',\n  'this_month',\n  'last_month',\n  'this_quarter',\n  'last_quarter',\n  'this_year',\n  'last_year',\n  'last_7_days',\n  'last_30_days',\n  'last_90_days',\n])\n\nconst comparisonFilterOperators = ['eq', 'neq', 'gt', 'gte', 'lt', 'lte'] as const\nconst setFilterOperators = ['in', 'not_in'] as const\nconst nullFilterOperators = ['is_null', 'is_not_null'] as const\nconst scalarFilterOperators = [...comparisonFilterOperators, ...nullFilterOperators] as const\n\nconst scalarFilterOperatorSchema = z.enum(scalarFilterOperators)\nconst setFilterOperatorSchema = z.enum(setFilterOperators)\n\nexport const filterOperatorSchema = z.enum([\n  ...comparisonFilterOperators,\n  ...setFilterOperators,\n  ...nullFilterOperators,\n])\n\n/**\n * Upper bound on how many members an `in` / `not_in` widget-data filter may carry (#4852).\n *\n * Every member becomes one placeholder plus one bound parameter in the aggregation's WHERE\n * clause, so the cost of a set filter is proportional to its length. The bound lives here\n * rather than in the SQL builder because `buildWhereClause` can only truncate the list \u2014\n * silently returning an answer to a different question than the caller asked \u2014 or throw from\n * deep inside query construction; validating here yields a 400 that names the offending\n * filter and is published in the route's OpenAPI schema.\n *\n * 200 is deliberately generous for a dashboard filter: the widest grouping a widget can render\n * is capped at 100 buckets (`groupBy.limit`), and a batch carries at most 50 requests, so even\n * a fully saturated batch stays an order of magnitude below PostgreSQL's per-statement limit\n * of 65535 bound parameters. Raising it later is a one-line change to this constant.\n */\nexport const MAX_SET_FILTER_VALUES = 200\n\n// `IN` / `NOT IN` compare against literals; a null member never matches either way, which is\n// what the dedicated `is_null` / `is_not_null` operators are for.\nconst setFilterMemberSchema = z.union([z.string(), z.number(), z.boolean()])\n\nconst setFilterValueSchema = z.array(setFilterMemberSchema).max(MAX_SET_FILTER_VALUES)\n\nconst widgetDataFilterSchema = z.discriminatedUnion('operator', [\n  z.object({\n    field: z.string().min(1),\n    operator: setFilterOperatorSchema,\n    value: setFilterValueSchema,\n  }),\n  z.object({\n    field: z.string().min(1),\n    operator: scalarFilterOperatorSchema,\n    value: z.unknown().optional(),\n  }),\n])\n\nexport const widgetDataRequestSchema = z.object({\n  entityType: z.string().min(1),\n  metric: z.object({\n    field: z.string().min(1),\n    aggregate: aggregateFunctionSchema,\n  }),\n  groupBy: z\n    .object({\n      field: z.string().min(1),\n      granularity: dateGranularitySchema.optional(),\n      limit: z.number().int().min(1).max(100).optional(),\n      resolveLabels: z.boolean().optional(),\n    })\n    .optional(),\n  filters: z.array(widgetDataFilterSchema).optional(),\n  dateRange: z\n    .object({\n      field: z.string().min(1),\n      preset: dateRangePresetSchema,\n    })\n    .optional(),\n  comparison: z\n    .object({\n      type: z.enum(['previous_period', 'previous_year']),\n    })\n    .optional(),\n})\n\nexport const widgetDataItemSchema = z.object({\n  groupKey: z.unknown(),\n  groupLabel: z.string().optional(),\n  value: z.number().nullable(),\n})\n\nexport const widgetDataResponseSchema = z.object({\n  value: z.number().nullable(),\n  data: z.array(widgetDataItemSchema),\n  comparison: z\n    .object({\n      value: z.number().nullable(),\n      change: z.number(),\n      direction: z.enum(['up', 'down', 'unchanged']),\n    })\n    .optional(),\n  metadata: z.object({\n    fetchedAt: z.string(),\n    recordCount: z.number(),\n    currency: z.string().nullable().optional(),\n  }),\n})\n"],
+  "mappings": "AAAA,SAAS,SAAS;AAEX,MAAM,0BAA0B,EAAE,KAAK,CAAC,SAAS,OAAO,OAAO,OAAO,KAAK,CAAC;AAC5E,MAAM,wBAAwB,EAAE,KAAK,CAAC,OAAO,QAAQ,SAAS,WAAW,MAAM,CAAC;AAChF,MAAM,wBAAwB,EAAE,KAAK;AAAA,EAC1C;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAED,MAAM,4BAA4B,CAAC,MAAM,OAAO,MAAM,OAAO,MAAM,KAAK;AACxE,MAAM,qBAAqB,CAAC,MAAM,QAAQ;AAC1C,MAAM,sBAAsB,CAAC,WAAW,aAAa;AACrD,MAAM,wBAAwB,CAAC,GAAG,2BAA2B,GAAG,mBAAmB;AAEnF,MAAM,6BAA6B,EAAE,KAAK,qBAAqB;AAC/D,MAAM,0BAA0B,EAAE,KAAK,kBAAkB;AAElD,MAAM,uBAAuB,EAAE,KAAK;AAAA,EACzC,GAAG;AAAA,EACH,GAAG;AAAA,EACH,GAAG;AACL,CAAC;AAiBM,MAAM,wBAAwB;AAIrC,MAAM,wBAAwB,EAAE,MAAM,CAAC,EAAE,OAAO,GAAG,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,CAAC;AAE3E,MAAM,uBAAuB,EAAE,MAAM,qBAAqB,EAAE,IAAI,qBAAqB;AAErF,MAAM,yBAAyB,EAAE,mBAAmB,YAAY;AAAA,EAC9D,EAAE,OAAO;AAAA,IACP,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,IACvB,UAAU;AAAA,IACV,OAAO;AAAA,EACT,CAAC;AAAA,EACD,EAAE,OAAO;AAAA,IACP,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,IACvB,UAAU;AAAA,IACV,OAAO,EAAE,QAAQ,EAAE,SAAS;AAAA,EAC9B,CAAC;AACH,CAAC;AAEM,MAAM,0BAA0B,EAAE,OAAO;AAAA,EAC9C,YAAY,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EAC5B,QAAQ,EAAE,OAAO;AAAA,IACf,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,IACvB,WAAW;AAAA,EACb,CAAC;AAAA,EACD,SAAS,EACN,OAAO;AAAA,IACN,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,IACvB,aAAa,sBAAsB,SAAS;AAAA,IAC5C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,IACjD,eAAe,EAAE,QAAQ,EAAE,SAAS;AAAA,EACtC,CAAC,EACA,SAAS;AAAA,EACZ,SAAS,EAAE,MAAM,sBAAsB,EAAE,SAAS;AAAA,EAClD,WAAW,EACR,OAAO;AAAA,IACN,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,IACvB,QAAQ;AAAA,EACV,CAAC,EACA,SAAS;AAAA,EACZ,YAAY,EACT,OAAO;AAAA,IACN,MAAM,EAAE,KAAK,CAAC,mBAAmB,eAAe,CAAC;AAAA,EACnD,CAAC,EACA,SAAS;AACd,CAAC;AAEM,MAAM,uBAAuB,EAAE,OAAO;AAAA,EAC3C,UAAU,EAAE,QAAQ;AAAA,EACpB,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,EAChC,OAAO,EAAE,OAAO,EAAE,SAAS;AAC7B,CAAC;AAEM,MAAM,2BAA2B,EAAE,OAAO;AAAA,EAC/C,OAAO,EAAE,OAAO,EAAE,SAAS;AAAA,EAC3B,MAAM,EAAE,MAAM,oBAAoB;AAAA,EAClC,YAAY,EACT,OAAO;AAAA,IACN,OAAO,EAAE,OAAO,EAAE,SAAS;AAAA,IAC3B,QAAQ,EAAE,OAAO;AAAA,IACjB,WAAW,EAAE,KAAK,CAAC,MAAM,QAAQ,WAAW,CAAC;AAAA,EAC/C,CAAC,EACA,SAAS;AAAA,EACZ,UAAU,EAAE,OAAO;AAAA,IACjB,WAAW,EAAE,OAAO;AAAA,IACpB,aAAa,EAAE,OAAO;AAAA,IACtB,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC3C,CAAC;AACH,CAAC;",
   "names": []
 }

package/dist/modules/dashboards/components/UnlabelledAmountNotice.js

@@ -0,0 +1,33 @@
+"use client";
+import { jsx, jsxs } from "react/jsx-runtime";
+import { Info } from "lucide-react";
+import { useT } from "@open-mercato/shared/lib/i18n/context";
+const UnlabelledAmountNotice = ({
+  currency,
+  loading,
+  error,
+  className
+}) => {
+  const t = useT();
+  if (loading || error || currency) return null;
+  return /* @__PURE__ */ jsxs(
+    "p",
+    {
+      className: `mt-2 flex items-center gap-1 text-xs text-muted-foreground${className ? ` ${className}` : ""}`,
+      title: t(
+        "dashboards.analytics.currency.unlabelledHint",
+        "A reliable currency could not be determined, so the amount is shown without one."
+      ),
+      children: [
+        /* @__PURE__ */ jsx(Info, { className: "size-3 shrink-0", "aria-hidden": "true" }),
+        t("dashboards.analytics.currency.unlabelled", "Amounts shown without a currency")
+      ]
+    }
+  );
+};
+var UnlabelledAmountNotice_default = UnlabelledAmountNotice;
+export {
+  UnlabelledAmountNotice,
+  UnlabelledAmountNotice_default as default
+};
+//# sourceMappingURL=UnlabelledAmountNotice.js.map

package/dist/modules/dashboards/components/UnlabelledAmountNotice.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/dashboards/components/UnlabelledAmountNotice.tsx"],
+  "sourcesContent": ["\"use client\"\n\nimport * as React from 'react'\nimport { Info } from 'lucide-react'\nimport { useT } from '@open-mercato/shared/lib/i18n/context'\n\nexport type UnlabelledAmountNoticeProps = {\n  currency: string | null | undefined\n  loading?: boolean\n  error?: string | null\n  className?: string\n}\n\n/**\n * Explains why a money widget renders bare numbers. Without it a missing currency label\n * is indistinguishable from a broken widget, which is the gap #4676 closes: the amounts\n * are unlabelled on purpose because the service could not determine one reliably.\n */\nexport const UnlabelledAmountNotice: React.FC<UnlabelledAmountNoticeProps> = ({\n  currency,\n  loading,\n  error,\n  className,\n}) => {\n  const t = useT()\n\n  if (loading || error || currency) return null\n\n  return (\n    <p\n      className={`mt-2 flex items-center gap-1 text-xs text-muted-foreground${className ? ` ${className}` : ''}`}\n      title={t(\n        'dashboards.analytics.currency.unlabelledHint',\n        'A reliable currency could not be determined, so the amount is shown without one.',\n      )}\n    >\n      <Info className=\"size-3 shrink-0\" aria-hidden=\"true\" />\n      {t('dashboards.analytics.currency.unlabelled', 'Amounts shown without a currency')}\n    </p>\n  )\n}\n\nexport default UnlabelledAmountNotice\n"],
+  "mappings": ";AA6BI,SAOE,KAPF;AA1BJ,SAAS,YAAY;AACrB,SAAS,YAAY;AAcd,MAAM,yBAAgE,CAAC;AAAA,EAC5E;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,MAAM;AACJ,QAAM,IAAI,KAAK;AAEf,MAAI,WAAW,SAAS,SAAU,QAAO;AAEzC,SACE;AAAA,IAAC;AAAA;AAAA,MACC,WAAW,6DAA6D,YAAY,IAAI,SAAS,KAAK,EAAE;AAAA,MACxG,OAAO;AAAA,QACL;AAAA,QACA;AAAA,MACF;AAAA,MAEA;AAAA,4BAAC,QAAK,WAAU,mBAAkB,eAAY,QAAO;AAAA,QACpD,EAAE,4CAA4C,kCAAkC;AAAA;AAAA;AAAA,EACnF;AAEJ;AAEA,IAAO,iCAAQ;",
+  "names": []
+}

package/dist/modules/dashboards/lib/access.js

@@ -1,6 +1,6 @@
 import { DashboardRoleWidgets, DashboardUserWidgets } from "../data/entities.js";
 import { UserRole } from "@open-mercato/core/modules/auth/data/entities";
-import { hasAllFeatures as userHasAllFeatures } from "@open-mercato/shared/security/features";
+import { authorizeFeatures } from "@open-mercato/shared/security/featurePolicy";
 import { findWithDecryption } from "@open-mercato/shared/lib/encryption/find";
 function specificity(record) {
   let score = 0;
@@ -62,8 +62,10 @@ async function resolveAllowedWidgetIds(em, ctx, widgets) {
   if (baseSet.size === 0) return [];
   const filtered = widgets.filter((widget) => {
     if (!baseSet.has(widget.metadata.id)) return false;
-    if (ctx.isSuperAdmin) return true;
-    return userHasAllFeatures(ctx.features, widget.metadata.features ?? []);
+    return authorizeFeatures(widget.metadata.features ?? [], {
+      grantedFeatures: ctx.features,
+      unrestricted: ctx.isSuperAdmin
+    });
   });
   return filtered.map((widget) => widget.metadata.id);
 }

package/dist/modules/dashboards/lib/access.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/dashboards/lib/access.ts"],
-  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport { DashboardRoleWidgets, DashboardUserWidgets } from '../data/entities'\nimport { UserRole } from '@open-mercato/core/modules/auth/data/entities'\nimport { hasAllFeatures as userHasAllFeatures } from '@open-mercato/shared/security/features'\nimport { findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\n\ntype LoadedWidget = {\n  metadata: {\n    id: string\n    features?: string[]\n  }\n}\n\ntype AccessContext = {\n  userId: string\n  tenantId: string | null\n  organizationId: string | null\n  features: string[]\n  isSuperAdmin: boolean\n}\n\nfunction specificity(record: DashboardRoleWidgets): number {\n  let score = 0\n  if (record.tenantId) score += 1\n  if (record.organizationId) score += 2\n  return score\n}\n\nexport async function resolveAllowedWidgetIds(\n  em: EntityManager,\n  ctx: AccessContext,\n  widgets: LoadedWidget[],\n): Promise<string[]> {\n  const allWidgetIds = widgets.map((w) => w.metadata.id)\n\n  // Load user override (if any)\n  const userRecord = await em.findOne(DashboardUserWidgets, {\n    userId: ctx.userId,\n    tenantId: ctx.tenantId,\n    organizationId: ctx.organizationId,\n    deletedAt: null,\n  })\n\n  let allowedByUser: Set<string> | null = null\n  if (userRecord) {\n    if (userRecord.mode === 'override') {\n      allowedByUser = new Set(userRecord.widgetIdsJson.filter((id) => allWidgetIds.includes(id)))\n    } else {\n      allowedByUser = null\n    }\n  }\n\n  let baseSet: Set<string>\n  if (allowedByUser) {\n    // A user override fully determines visibility, so role-level lookups would\n    // be discarded \u2014 skip them entirely. An empty override is handled by the\n    // shared `baseSet.size === 0` guard below.\n    baseSet = allowedByUser\n  } else {\n    // No user override: aggregate role-level settings.\n    const userRoles = await findWithDecryption(\n      em,\n      UserRole,\n      { user: ctx.userId as any, deletedAt: null },\n      { populate: ['role'] },\n      { tenantId: ctx.tenantId, organizationId: ctx.organizationId },\n    )\n    const roleRecords = await em.find(DashboardRoleWidgets, {\n      roleId: { $in: userRoles.map((ur) => String(ur.role?.id || ur.role)) },\n      deletedAt: null,\n    })\n\n    const byRole = new Map<string, DashboardRoleWidgets>()\n    for (const record of roleRecords) {\n      const role = String(record.roleId)\n      if (record.tenantId && ctx.tenantId && record.tenantId !== ctx.tenantId) continue\n      if (record.tenantId && !ctx.tenantId) continue\n      if (record.organizationId && ctx.organizationId && record.organizationId !== ctx.organizationId) continue\n      if (record.organizationId && !ctx.organizationId) continue\n      const current = byRole.get(role)\n      if (!current || specificity(record) > specificity(current)) {\n        byRole.set(role, record)\n      }\n    }\n\n    const allowedByRole = new Set<string>()\n    for (const record of byRole.values()) {\n      for (const id of record.widgetIdsJson) {\n        if (allWidgetIds.includes(id)) allowedByRole.add(id)\n      }\n    }\n\n    baseSet = allowedByRole.size > 0 ? allowedByRole : new Set(allWidgetIds)\n  }\n\n  if (baseSet.size === 0) return []\n\n  const filtered = widgets.filter((widget) => {\n    if (!baseSet.has(widget.metadata.id)) return false\n    if (ctx.isSuperAdmin) return true\n    return userHasAllFeatures(ctx.features, widget.metadata.features ?? [])\n  })\n\n  return filtered.map((widget) => widget.metadata.id)\n}\n"],
-  "mappings": "AACA,SAAS,sBAAsB,4BAA4B;AAC3D,SAAS,gBAAgB;AACzB,SAAS,kBAAkB,0BAA0B;AACrD,SAAS,0BAA0B;AAiBnC,SAAS,YAAY,QAAsC;AACzD,MAAI,QAAQ;AACZ,MAAI,OAAO,SAAU,UAAS;AAC9B,MAAI,OAAO,eAAgB,UAAS;AACpC,SAAO;AACT;AAEA,eAAsB,wBACpB,IACA,KACA,SACmB;AACnB,QAAM,eAAe,QAAQ,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE;AAGrD,QAAM,aAAa,MAAM,GAAG,QAAQ,sBAAsB;AAAA,IACxD,QAAQ,IAAI;AAAA,IACZ,UAAU,IAAI;AAAA,IACd,gBAAgB,IAAI;AAAA,IACpB,WAAW;AAAA,EACb,CAAC;AAED,MAAI,gBAAoC;AACxC,MAAI,YAAY;AACd,QAAI,WAAW,SAAS,YAAY;AAClC,sBAAgB,IAAI,IAAI,WAAW,cAAc,OAAO,CAAC,OAAO,aAAa,SAAS,EAAE,CAAC,CAAC;AAAA,IAC5F,OAAO;AACL,sBAAgB;AAAA,IAClB;AAAA,EACF;AAEA,MAAI;AACJ,MAAI,eAAe;AAIjB,cAAU;AAAA,EACZ,OAAO;AAEL,UAAM,YAAY,MAAM;AAAA,MACtB;AAAA,MACA;AAAA,MACA,EAAE,MAAM,IAAI,QAAe,WAAW,KAAK;AAAA,MAC3C,EAAE,UAAU,CAAC,MAAM,EAAE;AAAA,MACrB,EAAE,UAAU,IAAI,UAAU,gBAAgB,IAAI,eAAe;AAAA,IAC/D;AACA,UAAM,cAAc,MAAM,GAAG,KAAK,sBAAsB;AAAA,MACtD,QAAQ,EAAE,KAAK,UAAU,IAAI,CAAC,OAAO,OAAO,GAAG,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE;AAAA,MACrE,WAAW;AAAA,IACb,CAAC;AAED,UAAM,SAAS,oBAAI,IAAkC;AACrD,eAAW,UAAU,aAAa;AAChC,YAAM,OAAO,OAAO,OAAO,MAAM;AACjC,UAAI,OAAO,YAAY,IAAI,YAAY,OAAO,aAAa,IAAI,SAAU;AACzE,UAAI,OAAO,YAAY,CAAC,IAAI,SAAU;AACtC,UAAI,OAAO,kBAAkB,IAAI,kBAAkB,OAAO,mBAAmB,IAAI,eAAgB;AACjG,UAAI,OAAO,kBAAkB,CAAC,IAAI,eAAgB;AAClD,YAAM,UAAU,OAAO,IAAI,IAAI;AAC/B,UAAI,CAAC,WAAW,YAAY,MAAM,IAAI,YAAY,OAAO,GAAG;AAC1D,eAAO,IAAI,MAAM,MAAM;AAAA,MACzB;AAAA,IACF;AAEA,UAAM,gBAAgB,oBAAI,IAAY;AACtC,eAAW,UAAU,OAAO,OAAO,GAAG;AACpC,iBAAW,MAAM,OAAO,eAAe;AACrC,YAAI,aAAa,SAAS,EAAE,EAAG,eAAc,IAAI,EAAE;AAAA,MACrD;AAAA,IACF;AAEA,cAAU,cAAc,OAAO,IAAI,gBAAgB,IAAI,IAAI,YAAY;AAAA,EACzE;AAEA,MAAI,QAAQ,SAAS,EAAG,QAAO,CAAC;AAEhC,QAAM,WAAW,QAAQ,OAAO,CAAC,WAAW;AAC1C,QAAI,CAAC,QAAQ,IAAI,OAAO,SAAS,EAAE,EAAG,QAAO;AAC7C,QAAI,IAAI,aAAc,QAAO;AAC7B,WAAO,mBAAmB,IAAI,UAAU,OAAO,SAAS,YAAY,CAAC,CAAC;AAAA,EACxE,CAAC;AAED,SAAO,SAAS,IAAI,CAAC,WAAW,OAAO,SAAS,EAAE;AACpD;",
+  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport { DashboardRoleWidgets, DashboardUserWidgets } from '../data/entities'\nimport { UserRole } from '@open-mercato/core/modules/auth/data/entities'\nimport { authorizeFeatures } from '@open-mercato/shared/security/featurePolicy'\nimport { findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\n\ntype LoadedWidget = {\n  metadata: {\n    id: string\n    features?: string[]\n  }\n}\n\ntype AccessContext = {\n  userId: string\n  tenantId: string | null\n  organizationId: string | null\n  features: string[]\n  isSuperAdmin: boolean\n}\n\nfunction specificity(record: DashboardRoleWidgets): number {\n  let score = 0\n  if (record.tenantId) score += 1\n  if (record.organizationId) score += 2\n  return score\n}\n\nexport async function resolveAllowedWidgetIds(\n  em: EntityManager,\n  ctx: AccessContext,\n  widgets: LoadedWidget[],\n): Promise<string[]> {\n  const allWidgetIds = widgets.map((w) => w.metadata.id)\n\n  // Load user override (if any)\n  const userRecord = await em.findOne(DashboardUserWidgets, {\n    userId: ctx.userId,\n    tenantId: ctx.tenantId,\n    organizationId: ctx.organizationId,\n    deletedAt: null,\n  })\n\n  let allowedByUser: Set<string> | null = null\n  if (userRecord) {\n    if (userRecord.mode === 'override') {\n      allowedByUser = new Set(userRecord.widgetIdsJson.filter((id) => allWidgetIds.includes(id)))\n    } else {\n      allowedByUser = null\n    }\n  }\n\n  let baseSet: Set<string>\n  if (allowedByUser) {\n    // A user override fully determines visibility, so role-level lookups would\n    // be discarded \u2014 skip them entirely. An empty override is handled by the\n    // shared `baseSet.size === 0` guard below.\n    baseSet = allowedByUser\n  } else {\n    // No user override: aggregate role-level settings.\n    const userRoles = await findWithDecryption(\n      em,\n      UserRole,\n      { user: ctx.userId as any, deletedAt: null },\n      { populate: ['role'] },\n      { tenantId: ctx.tenantId, organizationId: ctx.organizationId },\n    )\n    const roleRecords = await em.find(DashboardRoleWidgets, {\n      roleId: { $in: userRoles.map((ur) => String(ur.role?.id || ur.role)) },\n      deletedAt: null,\n    })\n\n    const byRole = new Map<string, DashboardRoleWidgets>()\n    for (const record of roleRecords) {\n      const role = String(record.roleId)\n      if (record.tenantId && ctx.tenantId && record.tenantId !== ctx.tenantId) continue\n      if (record.tenantId && !ctx.tenantId) continue\n      if (record.organizationId && ctx.organizationId && record.organizationId !== ctx.organizationId) continue\n      if (record.organizationId && !ctx.organizationId) continue\n      const current = byRole.get(role)\n      if (!current || specificity(record) > specificity(current)) {\n        byRole.set(role, record)\n      }\n    }\n\n    const allowedByRole = new Set<string>()\n    for (const record of byRole.values()) {\n      for (const id of record.widgetIdsJson) {\n        if (allWidgetIds.includes(id)) allowedByRole.add(id)\n      }\n    }\n\n    baseSet = allowedByRole.size > 0 ? allowedByRole : new Set(allWidgetIds)\n  }\n\n  if (baseSet.size === 0) return []\n\n  const filtered = widgets.filter((widget) => {\n    if (!baseSet.has(widget.metadata.id)) return false\n    return authorizeFeatures(widget.metadata.features ?? [], {\n      grantedFeatures: ctx.features,\n      unrestricted: ctx.isSuperAdmin,\n    })\n  })\n\n  return filtered.map((widget) => widget.metadata.id)\n}\n"],
+  "mappings": "AACA,SAAS,sBAAsB,4BAA4B;AAC3D,SAAS,gBAAgB;AACzB,SAAS,yBAAyB;AAClC,SAAS,0BAA0B;AAiBnC,SAAS,YAAY,QAAsC;AACzD,MAAI,QAAQ;AACZ,MAAI,OAAO,SAAU,UAAS;AAC9B,MAAI,OAAO,eAAgB,UAAS;AACpC,SAAO;AACT;AAEA,eAAsB,wBACpB,IACA,KACA,SACmB;AACnB,QAAM,eAAe,QAAQ,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE;AAGrD,QAAM,aAAa,MAAM,GAAG,QAAQ,sBAAsB;AAAA,IACxD,QAAQ,IAAI;AAAA,IACZ,UAAU,IAAI;AAAA,IACd,gBAAgB,IAAI;AAAA,IACpB,WAAW;AAAA,EACb,CAAC;AAED,MAAI,gBAAoC;AACxC,MAAI,YAAY;AACd,QAAI,WAAW,SAAS,YAAY;AAClC,sBAAgB,IAAI,IAAI,WAAW,cAAc,OAAO,CAAC,OAAO,aAAa,SAAS,EAAE,CAAC,CAAC;AAAA,IAC5F,OAAO;AACL,sBAAgB;AAAA,IAClB;AAAA,EACF;AAEA,MAAI;AACJ,MAAI,eAAe;AAIjB,cAAU;AAAA,EACZ,OAAO;AAEL,UAAM,YAAY,MAAM;AAAA,MACtB;AAAA,MACA;AAAA,MACA,EAAE,MAAM,IAAI,QAAe,WAAW,KAAK;AAAA,MAC3C,EAAE,UAAU,CAAC,MAAM,EAAE;AAAA,MACrB,EAAE,UAAU,IAAI,UAAU,gBAAgB,IAAI,eAAe;AAAA,IAC/D;AACA,UAAM,cAAc,MAAM,GAAG,KAAK,sBAAsB;AAAA,MACtD,QAAQ,EAAE,KAAK,UAAU,IAAI,CAAC,OAAO,OAAO,GAAG,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE;AAAA,MACrE,WAAW;AAAA,IACb,CAAC;AAED,UAAM,SAAS,oBAAI,IAAkC;AACrD,eAAW,UAAU,aAAa;AAChC,YAAM,OAAO,OAAO,OAAO,MAAM;AACjC,UAAI,OAAO,YAAY,IAAI,YAAY,OAAO,aAAa,IAAI,SAAU;AACzE,UAAI,OAAO,YAAY,CAAC,IAAI,SAAU;AACtC,UAAI,OAAO,kBAAkB,IAAI,kBAAkB,OAAO,mBAAmB,IAAI,eAAgB;AACjG,UAAI,OAAO,kBAAkB,CAAC,IAAI,eAAgB;AAClD,YAAM,UAAU,OAAO,IAAI,IAAI;AAC/B,UAAI,CAAC,WAAW,YAAY,MAAM,IAAI,YAAY,OAAO,GAAG;AAC1D,eAAO,IAAI,MAAM,MAAM;AAAA,MACzB;AAAA,IACF;AAEA,UAAM,gBAAgB,oBAAI,IAAY;AACtC,eAAW,UAAU,OAAO,OAAO,GAAG;AACpC,iBAAW,MAAM,OAAO,eAAe;AACrC,YAAI,aAAa,SAAS,EAAE,EAAG,eAAc,IAAI,EAAE;AAAA,MACrD;AAAA,IACF;AAEA,cAAU,cAAc,OAAO,IAAI,gBAAgB,IAAI,IAAI,YAAY;AAAA,EACzE;AAEA,MAAI,QAAQ,SAAS,EAAG,QAAO,CAAC;AAEhC,QAAM,WAAW,QAAQ,OAAO,CAAC,WAAW;AAC1C,QAAI,CAAC,QAAQ,IAAI,OAAO,SAAS,EAAE,EAAG,QAAO;AAC7C,WAAO,kBAAkB,OAAO,SAAS,YAAY,CAAC,GAAG;AAAA,MACvD,iBAAiB,IAAI;AAAA,MACrB,cAAc,IAAI;AAAA,IACpB,CAAC;AAAA,EACH,CAAC;AAED,SAAO,SAAS,IAAI,CAAC,WAAW,OAAO,SAAS,EAAE;AACpD;",
   "names": []
 }

package/dist/modules/dashboards/lib/aggregations.js

@@ -46,44 +46,41 @@ function buildJsonbFieldExpression(column, path) {
   const lastPart = parts[parts.length - 1];
   return `${column}->${intermediate}->>'${lastPart}'`;
 }
-function buildAggregationQuery(options) {
+function resolveGroupExpression(registry, entityType, groupBy) {
+  const groupMapping = registry.getFieldMapping(entityType, groupBy.field);
+  if (!groupMapping && groupBy.field.includes(".")) {
+    const [baseField, ...pathParts] = groupBy.field.split(".");
+    const baseMapping = registry.getFieldMapping(entityType, baseField);
+    if (baseMapping?.type !== "jsonb") return null;
+    const jsonPath = pathParts.join(".");
+    return {
+      expression: buildJsonbFieldExpression(baseMapping.dbColumn, jsonPath),
+      dbColumn: baseMapping.dbColumn,
+      jsonPath
+    };
+  }
+  if (!groupMapping) return null;
+  if (groupMapping.type === "timestamp" && groupBy.granularity) {
+    return {
+      expression: buildDateTruncExpression(groupMapping.dbColumn, groupBy.granularity),
+      dbColumn: groupMapping.dbColumn,
+      jsonPath: null
+    };
+  }
+  return { expression: groupMapping.dbColumn, dbColumn: groupMapping.dbColumn, jsonPath: null };
+}
+function normalizeSetFilterValues(value) {
+  const values = Array.isArray(value) ? value : value === void 0 ? [] : [value];
+  if (values.some((member) => member === null || member === void 0)) {
+    throw new Error(
+      "[internal] Set filter members must not be null or undefined \u2014 use the is_null / is_not_null operators to filter on nullness"
+    );
+  }
+  return values;
+}
+function buildWhereClause(options) {
   const { registry } = options;
-  const config = registry.getEntityTypeConfig(options.entityType);
-  if (!config) return null;
-  const metricMapping = registry.getFieldMapping(options.entityType, options.metric.field);
-  if (!metricMapping) return null;
   const params = [];
-  const tableName = config.schema ? `"${config.schema}"."${config.tableName}"` : `"${config.tableName}"`;
-  const aggregateExpr = buildAggregateExpression(options.metric.aggregate, metricMapping.dbColumn);
-  let selectClause = `SELECT ${aggregateExpr} AS value`;
-  let groupByClause = "";
-  let orderByClause = "";
-  let limitClause = "";
-  if (options.groupBy) {
-    let groupMapping = registry.getFieldMapping(options.entityType, options.groupBy.field);
-    let groupExpr = null;
-    if (!groupMapping && options.groupBy.field.includes(".")) {
-      const [baseField, ...pathParts] = options.groupBy.field.split(".");
-      const baseMapping = registry.getFieldMapping(options.entityType, baseField);
-      if (baseMapping?.type === "jsonb") {
-        groupExpr = buildJsonbFieldExpression(baseMapping.dbColumn, pathParts.join("."));
-      }
-    } else if (groupMapping) {
-      if (groupMapping.type === "timestamp" && options.groupBy.granularity) {
-        groupExpr = buildDateTruncExpression(groupMapping.dbColumn, options.groupBy.granularity);
-      } else {
-        groupExpr = groupMapping.dbColumn;
-      }
-    }
-    if (groupExpr) {
-      selectClause = `SELECT ${groupExpr} AS group_key, ${aggregateExpr} AS value`;
-      groupByClause = `GROUP BY ${groupExpr}`;
-      orderByClause = `ORDER BY value DESC`;
-      if (options.groupBy.limit && options.groupBy.limit > 0) {
-        limitClause = `LIMIT ${Math.min(options.groupBy.limit, 100)}`;
-      }
-    }
-  }
   const whereClauses = [];
   whereClauses.push(`tenant_id = ?`);
   params.push(options.scope.tenantId);
@@ -131,13 +128,18 @@ function buildAggregationQuery(options) {
           params.push(filter.value);
           break;
         case "in":
-          whereClauses.push(`${filterMapping.dbColumn} = ANY(?)`);
-          params.push(filter.value);
-          break;
-        case "not_in":
-          whereClauses.push(`${filterMapping.dbColumn} != ALL(?)`);
-          params.push(filter.value);
+        case "not_in": {
+          const values = normalizeSetFilterValues(filter.value);
+          if (values.length === 0) {
+            whereClauses.push(filter.operator === "in" ? "FALSE" : "TRUE");
+            break;
+          }
+          const keyword = filter.operator === "in" ? "IN" : "NOT IN";
+          const placeholders = values.map(() => "?").join(", ");
+          whereClauses.push(`${filterMapping.dbColumn} ${keyword} (${placeholders})`);
+          params.push(...values);
           break;
+        }
         case "is_null":
           whereClauses.push(`${filterMapping.dbColumn} IS NULL`);
           break;
@@ -147,16 +149,81 @@ function buildAggregationQuery(options) {
       }
     }
   }
-  const whereClause = whereClauses.length > 0 ? `WHERE ${whereClauses.join(" AND ")}` : "";
-  const sql = [selectClause, `FROM ${tableName}`, whereClause, groupByClause, orderByClause, limitClause].filter(Boolean).join(" ");
-  return { sql, params };
+  return { clause: whereClauses.length > 0 ? `WHERE ${whereClauses.join(" AND ")}` : "", params };
+}
+function resolveTableName(config) {
+  return config.schema ? `"${config.schema}"."${config.tableName}"` : `"${config.tableName}"`;
+}
+function buildDistinctCurrencyQuery(options) {
+  const { registry } = options;
+  const config = registry.getEntityTypeConfig(options.entityType);
+  if (!config?.currencyField) return null;
+  const currencyMapping = registry.getFieldMapping(options.entityType, config.currencyField);
+  if (!currencyMapping || !isSafeIdentifier(currencyMapping.dbColumn)) return null;
+  const where = buildWhereClause(options);
+  const normalizedCurrencyExpression = `UPPER(NULLIF(BTRIM(${currencyMapping.dbColumn}), ''))`;
+  const sql = [
+    `SELECT DISTINCT ${normalizedCurrencyExpression} AS code`,
+    `FROM ${resolveTableName(config)}`,
+    where.clause,
+    "LIMIT 2"
+  ].filter(Boolean).join(" ");
+  return { sql, params: where.params };
+}
+function buildAggregationQuery(options) {
+  const { registry } = options;
+  const config = registry.getEntityTypeConfig(options.entityType);
+  if (!config) return null;
+  const metricMapping = registry.getFieldMapping(options.entityType, options.metric.field);
+  if (!metricMapping) return null;
+  const tableName = resolveTableName(config);
+  const aggregateExpr = buildAggregateExpression(options.metric.aggregate, metricMapping.dbColumn);
+  let selectClause = `SELECT ${aggregateExpr} AS value`;
+  let groupByClause = "";
+  let orderByClause = "";
+  let limitClause = "";
+  if (options.groupBy) {
+    const resolved = resolveGroupExpression(registry, options.entityType, options.groupBy);
+    if (resolved) {
+      selectClause = `SELECT ${resolved.expression} AS group_key, ${aggregateExpr} AS value`;
+      groupByClause = `GROUP BY ${resolved.expression}`;
+      orderByClause = `ORDER BY value DESC NULLS LAST`;
+      if (options.groupBy.limit && options.groupBy.limit > 0) {
+        limitClause = `LIMIT ${Math.min(options.groupBy.limit, 100)}`;
+      }
+    }
+  }
+  const where = buildWhereClause(options);
+  const sql = [selectClause, `FROM ${tableName}`, where.clause, groupByClause, orderByClause, limitClause].filter(Boolean).join(" ");
+  return { sql, params: where.params };
+}
+function buildGroupSourceRowsQuery(options) {
+  const { registry } = options;
+  const config = registry.getEntityTypeConfig(options.entityType);
+  if (!config) return null;
+  const metricMapping = registry.getFieldMapping(options.entityType, options.metric.field);
+  if (!metricMapping) return null;
+  if (!isSafeIdentifier(options.groupColumn)) {
+    throw new Error(`Invalid group column: ${options.groupColumn}`);
+  }
+  const where = buildWhereClause(options);
+  const sql = [
+    `SELECT ${options.groupColumn} AS group_source, ${metricMapping.dbColumn} AS metric_value`,
+    `FROM ${resolveTableName(config)}`,
+    where.clause,
+    `LIMIT ${Math.max(1, Math.floor(options.rowLimit)) + 1}`
+  ].filter(Boolean).join(" ");
+  return { sql, params: where.params };
 }
 export {
   buildAggregateExpression,
   buildAggregationQuery,
   buildDateTruncExpression,
+  buildDistinctCurrencyQuery,
+  buildGroupSourceRowsQuery,
   buildJsonbFieldExpression,
   isValidAggregate,
-  isValidGranularity
+  isValidGranularity,
+  resolveGroupExpression
 };
 //# sourceMappingURL=aggregations.js.map

package/dist/modules/dashboards/lib/aggregations.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/dashboards/lib/aggregations.ts"],
-  "sourcesContent": ["import type { AnalyticsRegistry } from '../services/analyticsRegistry'\nimport type { AnalyticsEntityTypeConfig, AnalyticsFieldMapping } from '@open-mercato/shared/modules/analytics'\n\nexport type AggregateFunction = 'count' | 'sum' | 'avg' | 'min' | 'max'\nexport type DateGranularity = 'day' | 'week' | 'month' | 'quarter' | 'year'\n\nconst VALID_GRANULARITIES: readonly DateGranularity[] = ['day', 'week', 'month', 'quarter', 'year']\nconst VALID_AGGREGATES: readonly AggregateFunction[] = ['count', 'sum', 'avg', 'min', 'max']\nconst SAFE_IDENTIFIER_PATTERN = /^[a-zA-Z_][a-zA-Z0-9_]*$/\n\nexport function isValidGranularity(value: unknown): value is DateGranularity {\n  return typeof value === 'string' && VALID_GRANULARITIES.includes(value as DateGranularity)\n}\n\nexport function isValidAggregate(value: unknown): value is AggregateFunction {\n  return typeof value === 'string' && VALID_AGGREGATES.includes(value as AggregateFunction)\n}\n\nfunction isSafeIdentifier(value: string): boolean {\n  return SAFE_IDENTIFIER_PATTERN.test(value)\n}\n\n// Re-export types from shared module for convenience\nexport type EntityTypeConfig = AnalyticsEntityTypeConfig\nexport type FieldMapping = AnalyticsFieldMapping\n\nexport function buildAggregateExpression(aggregate: AggregateFunction, column: string): string {\n  switch (aggregate) {\n    case 'count':\n      return column === 'id' ? 'COUNT(*)' : `COUNT(${column})`\n    case 'sum':\n      return `COALESCE(SUM(${column}::numeric), 0)`\n    case 'avg':\n      return `COALESCE(AVG(${column}::numeric), 0)`\n    case 'min':\n      return `MIN(${column}::numeric)`\n    case 'max':\n      return `MAX(${column}::numeric)`\n    default:\n      return `COUNT(*)`\n  }\n}\n\nexport function buildDateTruncExpression(column: string, granularity: DateGranularity): string {\n  if (!isValidGranularity(granularity)) {\n    throw new Error(`Invalid granularity: ${granularity}`)\n  }\n  return `DATE_TRUNC('${granularity}', ${column})`\n}\n\nexport function buildJsonbFieldExpression(column: string, path: string): string {\n  const parts = path.split('.')\n  for (const part of parts) {\n    if (!isSafeIdentifier(part)) {\n      throw new Error(`Invalid JSONB path part: ${part}`)\n    }\n  }\n  if (parts.length === 1) {\n    return `${column}->>'${parts[0]}'`\n  }\n  const intermediate = parts.slice(0, -1).map((p) => `'${p}'`).join('->')\n  const lastPart = parts[parts.length - 1]\n  return `${column}->${intermediate}->>'${lastPart}'`\n}\n\nexport type AggregationQuery = {\n  sql: string\n  params: unknown[]\n}\n\nexport type BuildAggregationQueryOptions = {\n  entityType: string\n  metric: {\n    field: string\n    aggregate: AggregateFunction\n  }\n  groupBy?: {\n    field: string\n    granularity?: DateGranularity\n    limit?: number\n  }\n  dateRange?: {\n    field: string\n    start: Date\n    end: Date\n  }\n  filters?: Array<{\n    field: string\n    operator: 'eq' | 'neq' | 'gt' | 'gte' | 'lt' | 'lte' | 'in' | 'not_in' | 'is_null' | 'is_not_null'\n    value?: unknown\n  }>\n  scope: {\n    tenantId: string\n    organizationIds?: string[]\n  }\n  /** Analytics registry for resolving entity and field configurations */\n  registry: AnalyticsRegistry\n}\n\nexport function buildAggregationQuery(options: BuildAggregationQueryOptions): AggregationQuery | null {\n  const { registry } = options\n  const config = registry.getEntityTypeConfig(options.entityType)\n  if (!config) return null\n\n  const metricMapping = registry.getFieldMapping(options.entityType, options.metric.field)\n  if (!metricMapping) return null\n\n  const params: unknown[] = []\n\n  const tableName = config.schema ? `\"${config.schema}\".\"${config.tableName}\"` : `\"${config.tableName}\"`\n  const aggregateExpr = buildAggregateExpression(options.metric.aggregate, metricMapping.dbColumn)\n\n  let selectClause = `SELECT ${aggregateExpr} AS value`\n  let groupByClause = ''\n  let orderByClause = ''\n  let limitClause = ''\n\n  if (options.groupBy) {\n    let groupMapping = registry.getFieldMapping(options.entityType, options.groupBy.field)\n    let groupExpr: string | null = null\n\n    // Handle JSONB path notation (e.g., shippingAddressSnapshot.region)\n    if (!groupMapping && options.groupBy.field.includes('.')) {\n      const [baseField, ...pathParts] = options.groupBy.field.split('.')\n      const baseMapping = registry.getFieldMapping(options.entityType, baseField)\n      if (baseMapping?.type === 'jsonb') {\n        groupExpr = buildJsonbFieldExpression(baseMapping.dbColumn, pathParts.join('.'))\n      }\n    } else if (groupMapping) {\n      if (groupMapping.type === 'timestamp' && options.groupBy.granularity) {\n        groupExpr = buildDateTruncExpression(groupMapping.dbColumn, options.groupBy.granularity)\n      } else {\n        groupExpr = groupMapping.dbColumn\n      }\n    }\n\n    if (groupExpr) {\n      selectClause = `SELECT ${groupExpr} AS group_key, ${aggregateExpr} AS value`\n      groupByClause = `GROUP BY ${groupExpr}`\n      orderByClause = `ORDER BY value DESC`\n\n      if (options.groupBy.limit && options.groupBy.limit > 0) {\n        limitClause = `LIMIT ${Math.min(options.groupBy.limit, 100)}`\n      }\n    }\n  }\n\n  const whereClauses: string[] = []\n\n  whereClauses.push(`tenant_id = ?`)\n  params.push(options.scope.tenantId)\n\n  if (options.scope.organizationIds && options.scope.organizationIds.length > 0) {\n    whereClauses.push(`organization_id = ANY(?::uuid[])`)\n    params.push(`{${options.scope.organizationIds.join(',')}}`)\n  }\n\n  whereClauses.push(`deleted_at IS NULL`)\n\n  if (options.dateRange) {\n    const dateMapping = registry.getFieldMapping(options.entityType, options.dateRange.field)\n    if (dateMapping) {\n      whereClauses.push(`${dateMapping.dbColumn} >= ?`)\n      params.push(options.dateRange.start)\n      whereClauses.push(`${dateMapping.dbColumn} <= ?`)\n      params.push(options.dateRange.end)\n    }\n  }\n\n  if (options.filters) {\n    for (const filter of options.filters) {\n      const filterMapping = registry.getFieldMapping(options.entityType, filter.field)\n      if (!filterMapping) continue\n\n      switch (filter.operator) {\n        case 'eq':\n          whereClauses.push(`${filterMapping.dbColumn} = ?`)\n          params.push(filter.value)\n          break\n        case 'neq':\n          whereClauses.push(`${filterMapping.dbColumn} != ?`)\n          params.push(filter.value)\n          break\n        case 'gt':\n          whereClauses.push(`${filterMapping.dbColumn} > ?`)\n          params.push(filter.value)\n          break\n        case 'gte':\n          whereClauses.push(`${filterMapping.dbColumn} >= ?`)\n          params.push(filter.value)\n          break\n        case 'lt':\n          whereClauses.push(`${filterMapping.dbColumn} < ?`)\n          params.push(filter.value)\n          break\n        case 'lte':\n          whereClauses.push(`${filterMapping.dbColumn} <= ?`)\n          params.push(filter.value)\n          break\n        case 'in':\n          whereClauses.push(`${filterMapping.dbColumn} = ANY(?)`)\n          params.push(filter.value)\n          break\n        case 'not_in':\n          whereClauses.push(`${filterMapping.dbColumn} != ALL(?)`)\n          params.push(filter.value)\n          break\n        case 'is_null':\n          whereClauses.push(`${filterMapping.dbColumn} IS NULL`)\n          break\n        case 'is_not_null':\n          whereClauses.push(`${filterMapping.dbColumn} IS NOT NULL`)\n          break\n      }\n    }\n  }\n\n  const whereClause = whereClauses.length > 0 ? `WHERE ${whereClauses.join(' AND ')}` : ''\n\n  const sql = [selectClause, `FROM ${tableName}`, whereClause, groupByClause, orderByClause, limitClause]\n    .filter(Boolean)\n    .join(' ')\n\n  return { sql, params }\n}\n"],
-  "mappings": "AAMA,MAAM,sBAAkD,CAAC,OAAO,QAAQ,SAAS,WAAW,MAAM;AAClG,MAAM,mBAAiD,CAAC,SAAS,OAAO,OAAO,OAAO,KAAK;AAC3F,MAAM,0BAA0B;AAEzB,SAAS,mBAAmB,OAA0C;AAC3E,SAAO,OAAO,UAAU,YAAY,oBAAoB,SAAS,KAAwB;AAC3F;AAEO,SAAS,iBAAiB,OAA4C;AAC3E,SAAO,OAAO,UAAU,YAAY,iBAAiB,SAAS,KAA0B;AAC1F;AAEA,SAAS,iBAAiB,OAAwB;AAChD,SAAO,wBAAwB,KAAK,KAAK;AAC3C;AAMO,SAAS,yBAAyB,WAA8B,QAAwB;AAC7F,UAAQ,WAAW;AAAA,IACjB,KAAK;AACH,aAAO,WAAW,OAAO,aAAa,SAAS,MAAM;AAAA,IACvD,KAAK;AACH,aAAO,gBAAgB,MAAM;AAAA,IAC/B,KAAK;AACH,aAAO,gBAAgB,MAAM;AAAA,IAC/B,KAAK;AACH,aAAO,OAAO,MAAM;AAAA,IACtB,KAAK;AACH,aAAO,OAAO,MAAM;AAAA,IACtB;AACE,aAAO;AAAA,EACX;AACF;AAEO,SAAS,yBAAyB,QAAgB,aAAsC;AAC7F,MAAI,CAAC,mBAAmB,WAAW,GAAG;AACpC,UAAM,IAAI,MAAM,wBAAwB,WAAW,EAAE;AAAA,EACvD;AACA,SAAO,eAAe,WAAW,MAAM,MAAM;AAC/C;AAEO,SAAS,0BAA0B,QAAgB,MAAsB;AAC9E,QAAM,QAAQ,KAAK,MAAM,GAAG;AAC5B,aAAW,QAAQ,OAAO;AACxB,QAAI,CAAC,iBAAiB,IAAI,GAAG;AAC3B,YAAM,IAAI,MAAM,4BAA4B,IAAI,EAAE;AAAA,IACpD;AAAA,EACF;AACA,MAAI,MAAM,WAAW,GAAG;AACtB,WAAO,GAAG,MAAM,OAAO,MAAM,CAAC,CAAC;AAAA,EACjC;AACA,QAAM,eAAe,MAAM,MAAM,GAAG,EAAE,EAAE,IAAI,CAAC,MAAM,IAAI,CAAC,GAAG,EAAE,KAAK,IAAI;AACtE,QAAM,WAAW,MAAM,MAAM,SAAS,CAAC;AACvC,SAAO,GAAG,MAAM,KAAK,YAAY,OAAO,QAAQ;AAClD;AAoCO,SAAS,sBAAsB,SAAgE;AACpG,QAAM,EAAE,SAAS,IAAI;AACrB,QAAM,SAAS,SAAS,oBAAoB,QAAQ,UAAU;AAC9D,MAAI,CAAC,OAAQ,QAAO;AAEpB,QAAM,gBAAgB,SAAS,gBAAgB,QAAQ,YAAY,QAAQ,OAAO,KAAK;AACvF,MAAI,CAAC,cAAe,QAAO;AAE3B,QAAM,SAAoB,CAAC;AAE3B,QAAM,YAAY,OAAO,SAAS,IAAI,OAAO,MAAM,MAAM,OAAO,SAAS,MAAM,IAAI,OAAO,SAAS;AACnG,QAAM,gBAAgB,yBAAyB,QAAQ,OAAO,WAAW,cAAc,QAAQ;AAE/F,MAAI,eAAe,UAAU,aAAa;AAC1C,MAAI,gBAAgB;AACpB,MAAI,gBAAgB;AACpB,MAAI,cAAc;AAElB,MAAI,QAAQ,SAAS;AACnB,QAAI,eAAe,SAAS,gBAAgB,QAAQ,YAAY,QAAQ,QAAQ,KAAK;AACrF,QAAI,YAA2B;AAG/B,QAAI,CAAC,gBAAgB,QAAQ,QAAQ,MAAM,SAAS,GAAG,GAAG;AACxD,YAAM,CAAC,WAAW,GAAG,SAAS,IAAI,QAAQ,QAAQ,MAAM,MAAM,GAAG;AACjE,YAAM,cAAc,SAAS,gBAAgB,QAAQ,YAAY,SAAS;AAC1E,UAAI,aAAa,SAAS,SAAS;AACjC,oBAAY,0BAA0B,YAAY,UAAU,UAAU,KAAK,GAAG,CAAC;AAAA,MACjF;AAAA,IACF,WAAW,cAAc;AACvB,UAAI,aAAa,SAAS,eAAe,QAAQ,QAAQ,aAAa;AACpE,oBAAY,yBAAyB,aAAa,UAAU,QAAQ,QAAQ,WAAW;AAAA,MACzF,OAAO;AACL,oBAAY,aAAa;AAAA,MAC3B;AAAA,IACF;AAEA,QAAI,WAAW;AACb,qBAAe,UAAU,SAAS,kBAAkB,aAAa;AACjE,sBAAgB,YAAY,SAAS;AACrC,sBAAgB;AAEhB,UAAI,QAAQ,QAAQ,SAAS,QAAQ,QAAQ,QAAQ,GAAG;AACtD,sBAAc,SAAS,KAAK,IAAI,QAAQ,QAAQ,OAAO,GAAG,CAAC;AAAA,MAC7D;AAAA,IACF;AAAA,EACF;AAEA,QAAM,eAAyB,CAAC;AAEhC,eAAa,KAAK,eAAe;AACjC,SAAO,KAAK,QAAQ,MAAM,QAAQ;AAElC,MAAI,QAAQ,MAAM,mBAAmB,QAAQ,MAAM,gBAAgB,SAAS,GAAG;AAC7E,iBAAa,KAAK,kCAAkC;AACpD,WAAO,KAAK,IAAI,QAAQ,MAAM,gBAAgB,KAAK,GAAG,CAAC,GAAG;AAAA,EAC5D;AAEA,eAAa,KAAK,oBAAoB;AAEtC,MAAI,QAAQ,WAAW;AACrB,UAAM,cAAc,SAAS,gBAAgB,QAAQ,YAAY,QAAQ,UAAU,KAAK;AACxF,QAAI,aAAa;AACf,mBAAa,KAAK,GAAG,YAAY,QAAQ,OAAO;AAChD,aAAO,KAAK,QAAQ,UAAU,KAAK;AACnC,mBAAa,KAAK,GAAG,YAAY,QAAQ,OAAO;AAChD,aAAO,KAAK,QAAQ,UAAU,GAAG;AAAA,IACnC;AAAA,EACF;AAEA,MAAI,QAAQ,SAAS;AACnB,eAAW,UAAU,QAAQ,SAAS;AACpC,YAAM,gBAAgB,SAAS,gBAAgB,QAAQ,YAAY,OAAO,KAAK;AAC/E,UAAI,CAAC,cAAe;AAEpB,cAAQ,OAAO,UAAU;AAAA,QACvB,KAAK;AACH,uBAAa,KAAK,GAAG,cAAc,QAAQ,MAAM;AACjD,iBAAO,KAAK,OAAO,KAAK;AACxB;AAAA,QACF,KAAK;AACH,uBAAa,KAAK,GAAG,cAAc,QAAQ,OAAO;AAClD,iBAAO,KAAK,OAAO,KAAK;AACxB;AAAA,QACF,KAAK;AACH,uBAAa,KAAK,GAAG,cAAc,QAAQ,MAAM;AACjD,iBAAO,KAAK,OAAO,KAAK;AACxB;AAAA,QACF,KAAK;AACH,uBAAa,KAAK,GAAG,cAAc,QAAQ,OAAO;AAClD,iBAAO,KAAK,OAAO,KAAK;AACxB;AAAA,QACF,KAAK;AACH,uBAAa,KAAK,GAAG,cAAc,QAAQ,MAAM;AACjD,iBAAO,KAAK,OAAO,KAAK;AACxB;AAAA,QACF,KAAK;AACH,uBAAa,KAAK,GAAG,cAAc,QAAQ,OAAO;AAClD,iBAAO,KAAK,OAAO,KAAK;AACxB;AAAA,QACF,KAAK;AACH,uBAAa,KAAK,GAAG,cAAc,QAAQ,WAAW;AACtD,iBAAO,KAAK,OAAO,KAAK;AACxB;AAAA,QACF,KAAK;AACH,uBAAa,KAAK,GAAG,cAAc,QAAQ,YAAY;AACvD,iBAAO,KAAK,OAAO,KAAK;AACxB;AAAA,QACF,KAAK;AACH,uBAAa,KAAK,GAAG,cAAc,QAAQ,UAAU;AACrD;AAAA,QACF,KAAK;AACH,uBAAa,KAAK,GAAG,cAAc,QAAQ,cAAc;AACzD;AAAA,MACJ;AAAA,IACF;AAAA,EACF;AAEA,QAAM,cAAc,aAAa,SAAS,IAAI,SAAS,aAAa,KAAK,OAAO,CAAC,KAAK;AAEtF,QAAM,MAAM,CAAC,cAAc,QAAQ,SAAS,IAAI,aAAa,eAAe,eAAe,WAAW,EACnG,OAAO,OAAO,EACd,KAAK,GAAG;AAEX,SAAO,EAAE,KAAK,OAAO;AACvB;",
+  "sourcesContent": ["import type { AnalyticsRegistry } from '../services/analyticsRegistry'\nimport type { AnalyticsEntityTypeConfig, AnalyticsFieldMapping } from '@open-mercato/shared/modules/analytics'\n\nexport type AggregateFunction = 'count' | 'sum' | 'avg' | 'min' | 'max'\nexport type DateGranularity = 'day' | 'week' | 'month' | 'quarter' | 'year'\n\nconst VALID_GRANULARITIES: readonly DateGranularity[] = ['day', 'week', 'month', 'quarter', 'year']\nconst VALID_AGGREGATES: readonly AggregateFunction[] = ['count', 'sum', 'avg', 'min', 'max']\nconst SAFE_IDENTIFIER_PATTERN = /^[a-zA-Z_][a-zA-Z0-9_]*$/\n\nexport function isValidGranularity(value: unknown): value is DateGranularity {\n  return typeof value === 'string' && VALID_GRANULARITIES.includes(value as DateGranularity)\n}\n\nexport function isValidAggregate(value: unknown): value is AggregateFunction {\n  return typeof value === 'string' && VALID_AGGREGATES.includes(value as AggregateFunction)\n}\n\nfunction isSafeIdentifier(value: string): boolean {\n  return SAFE_IDENTIFIER_PATTERN.test(value)\n}\n\n// Re-export types from shared module for convenience\nexport type EntityTypeConfig = AnalyticsEntityTypeConfig\nexport type FieldMapping = AnalyticsFieldMapping\n\nexport function buildAggregateExpression(aggregate: AggregateFunction, column: string): string {\n  switch (aggregate) {\n    case 'count':\n      return column === 'id' ? 'COUNT(*)' : `COUNT(${column})`\n    case 'sum':\n      return `COALESCE(SUM(${column}::numeric), 0)`\n    case 'avg':\n      return `COALESCE(AVG(${column}::numeric), 0)`\n    case 'min':\n      return `MIN(${column}::numeric)`\n    case 'max':\n      return `MAX(${column}::numeric)`\n    default:\n      return `COUNT(*)`\n  }\n}\n\nexport function buildDateTruncExpression(column: string, granularity: DateGranularity): string {\n  if (!isValidGranularity(granularity)) {\n    throw new Error(`Invalid granularity: ${granularity}`)\n  }\n  return `DATE_TRUNC('${granularity}', ${column})`\n}\n\nexport function buildJsonbFieldExpression(column: string, path: string): string {\n  const parts = path.split('.')\n  for (const part of parts) {\n    if (!isSafeIdentifier(part)) {\n      throw new Error(`Invalid JSONB path part: ${part}`)\n    }\n  }\n  if (parts.length === 1) {\n    return `${column}->>'${parts[0]}'`\n  }\n  const intermediate = parts.slice(0, -1).map((p) => `'${p}'`).join('->')\n  const lastPart = parts[parts.length - 1]\n  return `${column}->${intermediate}->>'${lastPart}'`\n}\n\nexport type AggregationQuery = {\n  sql: string\n  params: unknown[]\n}\n\nexport type BuildAggregationQueryOptions = {\n  entityType: string\n  metric: {\n    field: string\n    aggregate: AggregateFunction\n  }\n  groupBy?: {\n    field: string\n    granularity?: DateGranularity\n    limit?: number\n  }\n  dateRange?: {\n    field: string\n    start: Date\n    end: Date\n  }\n  filters?: Array<{\n    field: string\n    operator: 'eq' | 'neq' | 'gt' | 'gte' | 'lt' | 'lte' | 'in' | 'not_in' | 'is_null' | 'is_not_null'\n    value?: unknown\n  }>\n  scope: {\n    tenantId: string\n    organizationIds?: string[]\n  }\n  /** Analytics registry for resolving entity and field configurations */\n  registry: AnalyticsRegistry\n}\n\nexport type ResolvedGroupExpression = {\n  expression: string\n  /** Column the group expression reads from \u2014 the encryption map is keyed by this. */\n  dbColumn: string\n  /** JSONB path below `dbColumn`, when the groupBy field used path notation. */\n  jsonPath: string | null\n}\n\n/**\n * Resolves the SQL expression a groupBy field maps to, together with the underlying column so\n * callers can decide whether the source is encrypted at rest before grouping over it (#4622).\n */\nexport function resolveGroupExpression(\n  registry: AnalyticsRegistry,\n  entityType: string,\n  groupBy: { field: string; granularity?: DateGranularity },\n): ResolvedGroupExpression | null {\n  const groupMapping = registry.getFieldMapping(entityType, groupBy.field)\n\n  // Handle JSONB path notation (e.g., shippingAddressSnapshot.region)\n  if (!groupMapping && groupBy.field.includes('.')) {\n    const [baseField, ...pathParts] = groupBy.field.split('.')\n    const baseMapping = registry.getFieldMapping(entityType, baseField)\n    if (baseMapping?.type !== 'jsonb') return null\n    const jsonPath = pathParts.join('.')\n    return {\n      expression: buildJsonbFieldExpression(baseMapping.dbColumn, jsonPath),\n      dbColumn: baseMapping.dbColumn,\n      jsonPath,\n    }\n  }\n\n  if (!groupMapping) return null\n\n  if (groupMapping.type === 'timestamp' && groupBy.granularity) {\n    return {\n      expression: buildDateTruncExpression(groupMapping.dbColumn, groupBy.granularity),\n      dbColumn: groupMapping.dbColumn,\n      jsonPath: null,\n    }\n  }\n\n  return { expression: groupMapping.dbColumn, dbColumn: groupMapping.dbColumn, jsonPath: null }\n}\n\n/**\n * Normalizes the value of a set filter (`in` / `not_in`) into the list of members it selects.\n *\n * The list is rendered as one placeholder per member rather than as a single array parameter:\n * MikroORM does not bind parameters at the driver level \u2014 `AbstractSqlConnection.execute` calls\n * `platform.formatQuery`, which interpolates each value through `BasePostgreSqlPlatform.escape`,\n * and that renders a JavaScript array as a bare comma-separated list. The previous\n * `= ANY(?)` / `!= ALL(?)` form therefore produced `= ANY('a', 'b')`, which PostgreSQL rejects\n * for every shape of value (#4669).\n *\n * A missing value yields an empty set rather than a dropped filter, so an `in` filter the caller\n * failed to populate selects nothing instead of silently widening the result.\n *\n * A null or undefined *member* is refused instead of rendered. `column IN (NULL)` matches no row\n * and `column NOT IN ('a', NULL)` is NULL for every row, so such a member would return an empty\n * aggregation with no error \u2014 a silent zero on a reporting surface, which is worse than a loud\n * failure. Requests are already rejected at the API boundary by `widgetDataFilterSchema` in\n * `api/widgets/data/schema.ts`; this throw keeps in-process callers, whose filter values are\n * typed as `unknown`, from reaching the same silent path. Nullness is queried with the dedicated\n * `is_null` / `is_not_null` operators.\n */\nfunction normalizeSetFilterValues(value: unknown): unknown[] {\n  const values = Array.isArray(value) ? value : value === undefined ? [] : [value]\n  if (values.some((member) => member === null || member === undefined)) {\n    throw new Error(\n      '[internal] Set filter members must not be null or undefined \u2014 use the is_null / is_not_null operators to filter on nullness',\n    )\n  }\n  return values\n}\n\nfunction buildWhereClause(\n  options: Pick<BuildAggregationQueryOptions, 'entityType' | 'dateRange' | 'filters' | 'scope' | 'registry'>,\n): { clause: string; params: unknown[] } {\n  const { registry } = options\n  const params: unknown[] = []\n  const whereClauses: string[] = []\n\n  whereClauses.push(`tenant_id = ?`)\n  params.push(options.scope.tenantId)\n\n  if (options.scope.organizationIds && options.scope.organizationIds.length > 0) {\n    whereClauses.push(`organization_id = ANY(?::uuid[])`)\n    params.push(`{${options.scope.organizationIds.join(',')}}`)\n  }\n\n  whereClauses.push(`deleted_at IS NULL`)\n\n  if (options.dateRange) {\n    const dateMapping = registry.getFieldMapping(options.entityType, options.dateRange.field)\n    if (dateMapping) {\n      whereClauses.push(`${dateMapping.dbColumn} >= ?`)\n      params.push(options.dateRange.start)\n      whereClauses.push(`${dateMapping.dbColumn} <= ?`)\n      params.push(options.dateRange.end)\n    }\n  }\n\n  if (options.filters) {\n    for (const filter of options.filters) {\n      const filterMapping = registry.getFieldMapping(options.entityType, filter.field)\n      if (!filterMapping) continue\n\n      switch (filter.operator) {\n        case 'eq':\n          whereClauses.push(`${filterMapping.dbColumn} = ?`)\n          params.push(filter.value)\n          break\n        case 'neq':\n          whereClauses.push(`${filterMapping.dbColumn} != ?`)\n          params.push(filter.value)\n          break\n        case 'gt':\n          whereClauses.push(`${filterMapping.dbColumn} > ?`)\n          params.push(filter.value)\n          break\n        case 'gte':\n          whereClauses.push(`${filterMapping.dbColumn} >= ?`)\n          params.push(filter.value)\n          break\n        case 'lt':\n          whereClauses.push(`${filterMapping.dbColumn} < ?`)\n          params.push(filter.value)\n          break\n        case 'lte':\n          whereClauses.push(`${filterMapping.dbColumn} <= ?`)\n          params.push(filter.value)\n          break\n        case 'in':\n        case 'not_in': {\n          const values = normalizeSetFilterValues(filter.value)\n          if (values.length === 0) {\n            whereClauses.push(filter.operator === 'in' ? 'FALSE' : 'TRUE')\n            break\n          }\n          const keyword = filter.operator === 'in' ? 'IN' : 'NOT IN'\n          const placeholders = values.map(() => '?').join(', ')\n          whereClauses.push(`${filterMapping.dbColumn} ${keyword} (${placeholders})`)\n          params.push(...values)\n          break\n        }\n        case 'is_null':\n          whereClauses.push(`${filterMapping.dbColumn} IS NULL`)\n          break\n        case 'is_not_null':\n          whereClauses.push(`${filterMapping.dbColumn} IS NOT NULL`)\n          break\n      }\n    }\n  }\n\n  return { clause: whereClauses.length > 0 ? `WHERE ${whereClauses.join(' AND ')}` : '', params }\n}\n\nfunction resolveTableName(config: EntityTypeConfig): string {\n  return config.schema ? `\"${config.schema}\".\"${config.tableName}\"` : `\"${config.tableName}\"`\n}\n\nexport type BuildDistinctCurrencyQueryOptions = Pick<\n  BuildAggregationQueryOptions,\n  'entityType' | 'dateRange' | 'filters' | 'scope' | 'registry'\n>\n\n/**\n * Builds the query that reads the distinct per-row currencies of the rows an aggregation\n * would sum, over exactly the same tenant/organization scope, date range and filters.\n * Returns `null` when the entity declares no `currencyField`, which means its amounts are\n * not per-row denominated and there is nothing to verify (#4676).\n */\nexport function buildDistinctCurrencyQuery(\n  options: BuildDistinctCurrencyQueryOptions,\n): AggregationQuery | null {\n  const { registry } = options\n  const config = registry.getEntityTypeConfig(options.entityType)\n  if (!config?.currencyField) return null\n\n  const currencyMapping = registry.getFieldMapping(options.entityType, config.currencyField)\n  if (!currencyMapping || !isSafeIdentifier(currencyMapping.dbColumn)) return null\n\n  const where = buildWhereClause(options)\n  const normalizedCurrencyExpression = `UPPER(NULLIF(BTRIM(${currencyMapping.dbColumn}), ''))`\n  const sql = [\n    `SELECT DISTINCT ${normalizedCurrencyExpression} AS code`,\n    `FROM ${resolveTableName(config)}`,\n    where.clause,\n    'LIMIT 2',\n  ]\n    .filter(Boolean)\n    .join(' ')\n\n  return { sql, params: where.params }\n}\n\nexport function buildAggregationQuery(options: BuildAggregationQueryOptions): AggregationQuery | null {\n  const { registry } = options\n  const config = registry.getEntityTypeConfig(options.entityType)\n  if (!config) return null\n\n  const metricMapping = registry.getFieldMapping(options.entityType, options.metric.field)\n  if (!metricMapping) return null\n\n  const tableName = resolveTableName(config)\n  const aggregateExpr = buildAggregateExpression(options.metric.aggregate, metricMapping.dbColumn)\n\n  let selectClause = `SELECT ${aggregateExpr} AS value`\n  let groupByClause = ''\n  let orderByClause = ''\n  let limitClause = ''\n\n  if (options.groupBy) {\n    const resolved = resolveGroupExpression(registry, options.entityType, options.groupBy)\n\n    if (resolved) {\n      selectClause = `SELECT ${resolved.expression} AS group_key, ${aggregateExpr} AS value`\n      groupByClause = `GROUP BY ${resolved.expression}`\n      // NULLS LAST is stated explicitly (PostgreSQL defaults DESC to NULLS FIRST) so a group limit\n      // keeps the highest-value buckets instead of the empty ones, and so the application-side\n      // encrypted path can mirror the same ordering (#4622).\n      orderByClause = `ORDER BY value DESC NULLS LAST`\n\n      if (options.groupBy.limit && options.groupBy.limit > 0) {\n        limitClause = `LIMIT ${Math.min(options.groupBy.limit, 100)}`\n      }\n    }\n  }\n\n  const where = buildWhereClause(options)\n\n  const sql = [selectClause, `FROM ${tableName}`, where.clause, groupByClause, orderByClause, limitClause]\n    .filter(Boolean)\n    .join(' ')\n\n  return { sql, params: where.params }\n}\n\nexport type BuildGroupSourceRowsQueryOptions = Omit<BuildAggregationQueryOptions, 'groupBy'> & {\n  /** Column holding the (encrypted) group source, resolved via `resolveGroupExpression`. */\n  groupColumn: string\n  /** Hard cap on scanned rows; callers fetch `rowLimit + 1` to detect overflow. */\n  rowLimit: number\n}\n\n/**\n * Builds a per-row query for group sources that cannot be grouped in SQL because the column is\n * encrypted at rest. Returns the raw group source alongside the metric value so the caller can\n * decrypt, then aggregate in application code (#4622).\n */\nexport function buildGroupSourceRowsQuery(options: BuildGroupSourceRowsQueryOptions): AggregationQuery | null {\n  const { registry } = options\n  const config = registry.getEntityTypeConfig(options.entityType)\n  if (!config) return null\n\n  const metricMapping = registry.getFieldMapping(options.entityType, options.metric.field)\n  if (!metricMapping) return null\n\n  if (!isSafeIdentifier(options.groupColumn)) {\n    throw new Error(`Invalid group column: ${options.groupColumn}`)\n  }\n\n  const where = buildWhereClause(options)\n  const sql = [\n    `SELECT ${options.groupColumn} AS group_source, ${metricMapping.dbColumn} AS metric_value`,\n    `FROM ${resolveTableName(config)}`,\n    where.clause,\n    `LIMIT ${Math.max(1, Math.floor(options.rowLimit)) + 1}`,\n  ]\n    .filter(Boolean)\n    .join(' ')\n\n  return { sql, params: where.params }\n}\n"],
+  "mappings": "AAMA,MAAM,sBAAkD,CAAC,OAAO,QAAQ,SAAS,WAAW,MAAM;AAClG,MAAM,mBAAiD,CAAC,SAAS,OAAO,OAAO,OAAO,KAAK;AAC3F,MAAM,0BAA0B;AAEzB,SAAS,mBAAmB,OAA0C;AAC3E,SAAO,OAAO,UAAU,YAAY,oBAAoB,SAAS,KAAwB;AAC3F;AAEO,SAAS,iBAAiB,OAA4C;AAC3E,SAAO,OAAO,UAAU,YAAY,iBAAiB,SAAS,KAA0B;AAC1F;AAEA,SAAS,iBAAiB,OAAwB;AAChD,SAAO,wBAAwB,KAAK,KAAK;AAC3C;AAMO,SAAS,yBAAyB,WAA8B,QAAwB;AAC7F,UAAQ,WAAW;AAAA,IACjB,KAAK;AACH,aAAO,WAAW,OAAO,aAAa,SAAS,MAAM;AAAA,IACvD,KAAK;AACH,aAAO,gBAAgB,MAAM;AAAA,IAC/B,KAAK;AACH,aAAO,gBAAgB,MAAM;AAAA,IAC/B,KAAK;AACH,aAAO,OAAO,MAAM;AAAA,IACtB,KAAK;AACH,aAAO,OAAO,MAAM;AAAA,IACtB;AACE,aAAO;AAAA,EACX;AACF;AAEO,SAAS,yBAAyB,QAAgB,aAAsC;AAC7F,MAAI,CAAC,mBAAmB,WAAW,GAAG;AACpC,UAAM,IAAI,MAAM,wBAAwB,WAAW,EAAE;AAAA,EACvD;AACA,SAAO,eAAe,WAAW,MAAM,MAAM;AAC/C;AAEO,SAAS,0BAA0B,QAAgB,MAAsB;AAC9E,QAAM,QAAQ,KAAK,MAAM,GAAG;AAC5B,aAAW,QAAQ,OAAO;AACxB,QAAI,CAAC,iBAAiB,IAAI,GAAG;AAC3B,YAAM,IAAI,MAAM,4BAA4B,IAAI,EAAE;AAAA,IACpD;AAAA,EACF;AACA,MAAI,MAAM,WAAW,GAAG;AACtB,WAAO,GAAG,MAAM,OAAO,MAAM,CAAC,CAAC;AAAA,EACjC;AACA,QAAM,eAAe,MAAM,MAAM,GAAG,EAAE,EAAE,IAAI,CAAC,MAAM,IAAI,CAAC,GAAG,EAAE,KAAK,IAAI;AACtE,QAAM,WAAW,MAAM,MAAM,SAAS,CAAC;AACvC,SAAO,GAAG,MAAM,KAAK,YAAY,OAAO,QAAQ;AAClD;AAgDO,SAAS,uBACd,UACA,YACA,SACgC;AAChC,QAAM,eAAe,SAAS,gBAAgB,YAAY,QAAQ,KAAK;AAGvE,MAAI,CAAC,gBAAgB,QAAQ,MAAM,SAAS,GAAG,GAAG;AAChD,UAAM,CAAC,WAAW,GAAG,SAAS,IAAI,QAAQ,MAAM,MAAM,GAAG;AACzD,UAAM,cAAc,SAAS,gBAAgB,YAAY,SAAS;AAClE,QAAI,aAAa,SAAS,QAAS,QAAO;AAC1C,UAAM,WAAW,UAAU,KAAK,GAAG;AACnC,WAAO;AAAA,MACL,YAAY,0BAA0B,YAAY,UAAU,QAAQ;AAAA,MACpE,UAAU,YAAY;AAAA,MACtB;AAAA,IACF;AAAA,EACF;AAEA,MAAI,CAAC,aAAc,QAAO;AAE1B,MAAI,aAAa,SAAS,eAAe,QAAQ,aAAa;AAC5D,WAAO;AAAA,MACL,YAAY,yBAAyB,aAAa,UAAU,QAAQ,WAAW;AAAA,MAC/E,UAAU,aAAa;AAAA,MACvB,UAAU;AAAA,IACZ;AAAA,EACF;AAEA,SAAO,EAAE,YAAY,aAAa,UAAU,UAAU,aAAa,UAAU,UAAU,KAAK;AAC9F;AAuBA,SAAS,yBAAyB,OAA2B;AAC3D,QAAM,SAAS,MAAM,QAAQ,KAAK,IAAI,QAAQ,UAAU,SAAY,CAAC,IAAI,CAAC,KAAK;AAC/E,MAAI,OAAO,KAAK,CAAC,WAAW,WAAW,QAAQ,WAAW,MAAS,GAAG;AACpE,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,iBACP,SACuC;AACvC,QAAM,EAAE,SAAS,IAAI;AACrB,QAAM,SAAoB,CAAC;AAC3B,QAAM,eAAyB,CAAC;AAEhC,eAAa,KAAK,eAAe;AACjC,SAAO,KAAK,QAAQ,MAAM,QAAQ;AAElC,MAAI,QAAQ,MAAM,mBAAmB,QAAQ,MAAM,gBAAgB,SAAS,GAAG;AAC7E,iBAAa,KAAK,kCAAkC;AACpD,WAAO,KAAK,IAAI,QAAQ,MAAM,gBAAgB,KAAK,GAAG,CAAC,GAAG;AAAA,EAC5D;AAEA,eAAa,KAAK,oBAAoB;AAEtC,MAAI,QAAQ,WAAW;AACrB,UAAM,cAAc,SAAS,gBAAgB,QAAQ,YAAY,QAAQ,UAAU,KAAK;AACxF,QAAI,aAAa;AACf,mBAAa,KAAK,GAAG,YAAY,QAAQ,OAAO;AAChD,aAAO,KAAK,QAAQ,UAAU,KAAK;AACnC,mBAAa,KAAK,GAAG,YAAY,QAAQ,OAAO;AAChD,aAAO,KAAK,QAAQ,UAAU,GAAG;AAAA,IACnC;AAAA,EACF;AAEA,MAAI,QAAQ,SAAS;AACnB,eAAW,UAAU,QAAQ,SAAS;AACpC,YAAM,gBAAgB,SAAS,gBAAgB,QAAQ,YAAY,OAAO,KAAK;AAC/E,UAAI,CAAC,cAAe;AAEpB,cAAQ,OAAO,UAAU;AAAA,QACvB,KAAK;AACH,uBAAa,KAAK,GAAG,cAAc,QAAQ,MAAM;AACjD,iBAAO,KAAK,OAAO,KAAK;AACxB;AAAA,QACF,KAAK;AACH,uBAAa,KAAK,GAAG,cAAc,QAAQ,OAAO;AAClD,iBAAO,KAAK,OAAO,KAAK;AACxB;AAAA,QACF,KAAK;AACH,uBAAa,KAAK,GAAG,cAAc,QAAQ,MAAM;AACjD,iBAAO,KAAK,OAAO,KAAK;AACxB;AAAA,QACF,KAAK;AACH,uBAAa,KAAK,GAAG,cAAc,QAAQ,OAAO;AAClD,iBAAO,KAAK,OAAO,KAAK;AACxB;AAAA,QACF,KAAK;AACH,uBAAa,KAAK,GAAG,cAAc,QAAQ,MAAM;AACjD,iBAAO,KAAK,OAAO,KAAK;AACxB;AAAA,QACF,KAAK;AACH,uBAAa,KAAK,GAAG,cAAc,QAAQ,OAAO;AAClD,iBAAO,KAAK,OAAO,KAAK;AACxB;AAAA,QACF,KAAK;AAAA,QACL,KAAK,UAAU;AACb,gBAAM,SAAS,yBAAyB,OAAO,KAAK;AACpD,cAAI,OAAO,WAAW,GAAG;AACvB,yBAAa,KAAK,OAAO,aAAa,OAAO,UAAU,MAAM;AAC7D;AAAA,UACF;AACA,gBAAM,UAAU,OAAO,aAAa,OAAO,OAAO;AAClD,gBAAM,eAAe,OAAO,IAAI,MAAM,GAAG,EAAE,KAAK,IAAI;AACpD,uBAAa,KAAK,GAAG,cAAc,QAAQ,IAAI,OAAO,KAAK,YAAY,GAAG;AAC1E,iBAAO,KAAK,GAAG,MAAM;AACrB;AAAA,QACF;AAAA,QACA,KAAK;AACH,uBAAa,KAAK,GAAG,cAAc,QAAQ,UAAU;AACrD;AAAA,QACF,KAAK;AACH,uBAAa,KAAK,GAAG,cAAc,QAAQ,cAAc;AACzD;AAAA,MACJ;AAAA,IACF;AAAA,EACF;AAEA,SAAO,EAAE,QAAQ,aAAa,SAAS,IAAI,SAAS,aAAa,KAAK,OAAO,CAAC,KAAK,IAAI,OAAO;AAChG;AAEA,SAAS,iBAAiB,QAAkC;AAC1D,SAAO,OAAO,SAAS,IAAI,OAAO,MAAM,MAAM,OAAO,SAAS,MAAM,IAAI,OAAO,SAAS;AAC1F;AAaO,SAAS,2BACd,SACyB;AACzB,QAAM,EAAE,SAAS,IAAI;AACrB,QAAM,SAAS,SAAS,oBAAoB,QAAQ,UAAU;AAC9D,MAAI,CAAC,QAAQ,cAAe,QAAO;AAEnC,QAAM,kBAAkB,SAAS,gBAAgB,QAAQ,YAAY,OAAO,aAAa;AACzF,MAAI,CAAC,mBAAmB,CAAC,iBAAiB,gBAAgB,QAAQ,EAAG,QAAO;AAE5E,QAAM,QAAQ,iBAAiB,OAAO;AACtC,QAAM,+BAA+B,sBAAsB,gBAAgB,QAAQ;AACnF,QAAM,MAAM;AAAA,IACV,mBAAmB,4BAA4B;AAAA,IAC/C,QAAQ,iBAAiB,MAAM,CAAC;AAAA,IAChC,MAAM;AAAA,IACN;AAAA,EACF,EACG,OAAO,OAAO,EACd,KAAK,GAAG;AAEX,SAAO,EAAE,KAAK,QAAQ,MAAM,OAAO;AACrC;AAEO,SAAS,sBAAsB,SAAgE;AACpG,QAAM,EAAE,SAAS,IAAI;AACrB,QAAM,SAAS,SAAS,oBAAoB,QAAQ,UAAU;AAC9D,MAAI,CAAC,OAAQ,QAAO;AAEpB,QAAM,gBAAgB,SAAS,gBAAgB,QAAQ,YAAY,QAAQ,OAAO,KAAK;AACvF,MAAI,CAAC,cAAe,QAAO;AAE3B,QAAM,YAAY,iBAAiB,MAAM;AACzC,QAAM,gBAAgB,yBAAyB,QAAQ,OAAO,WAAW,cAAc,QAAQ;AAE/F,MAAI,eAAe,UAAU,aAAa;AAC1C,MAAI,gBAAgB;AACpB,MAAI,gBAAgB;AACpB,MAAI,cAAc;AAElB,MAAI,QAAQ,SAAS;AACnB,UAAM,WAAW,uBAAuB,UAAU,QAAQ,YAAY,QAAQ,OAAO;AAErF,QAAI,UAAU;AACZ,qBAAe,UAAU,SAAS,UAAU,kBAAkB,aAAa;AAC3E,sBAAgB,YAAY,SAAS,UAAU;AAI/C,sBAAgB;AAEhB,UAAI,QAAQ,QAAQ,SAAS,QAAQ,QAAQ,QAAQ,GAAG;AACtD,sBAAc,SAAS,KAAK,IAAI,QAAQ,QAAQ,OAAO,GAAG,CAAC;AAAA,MAC7D;AAAA,IACF;AAAA,EACF;AAEA,QAAM,QAAQ,iBAAiB,OAAO;AAEtC,QAAM,MAAM,CAAC,cAAc,QAAQ,SAAS,IAAI,MAAM,QAAQ,eAAe,eAAe,WAAW,EACpG,OAAO,OAAO,EACd,KAAK,GAAG;AAEX,SAAO,EAAE,KAAK,QAAQ,MAAM,OAAO;AACrC;AAcO,SAAS,0BAA0B,SAAoE;AAC5G,QAAM,EAAE,SAAS,IAAI;AACrB,QAAM,SAAS,SAAS,oBAAoB,QAAQ,UAAU;AAC9D,MAAI,CAAC,OAAQ,QAAO;AAEpB,QAAM,gBAAgB,SAAS,gBAAgB,QAAQ,YAAY,QAAQ,OAAO,KAAK;AACvF,MAAI,CAAC,cAAe,QAAO;AAE3B,MAAI,CAAC,iBAAiB,QAAQ,WAAW,GAAG;AAC1C,UAAM,IAAI,MAAM,yBAAyB,QAAQ,WAAW,EAAE;AAAA,EAChE;AAEA,QAAM,QAAQ,iBAAiB,OAAO;AACtC,QAAM,MAAM;AAAA,IACV,UAAU,QAAQ,WAAW,qBAAqB,cAAc,QAAQ;AAAA,IACxE,QAAQ,iBAAiB,MAAM,CAAC;AAAA,IAChC,MAAM;AAAA,IACN,SAAS,KAAK,IAAI,GAAG,KAAK,MAAM,QAAQ,QAAQ,CAAC,IAAI,CAAC;AAAA,EACxD,EACG,OAAO,OAAO,EACd,KAAK,GAAG;AAEX,SAAO,EAAE,KAAK,QAAQ,MAAM,OAAO;AACrC;",
   "names": []
 }

package/dist/modules/dashboards/lib/exactDecimal.js

@@ -0,0 +1,69 @@
+const DECIMAL_PATTERN = /^([+-]?)(\d*)(?:\.(\d*))?(?:[eE]([+-]?\d+))?$/;
+const EXACT_DECIMAL_ZERO = { units: 0n, scale: 0 };
+function pow10(exponent) {
+  return 10n ** BigInt(exponent);
+}
+function parseExactDecimal(raw) {
+  if (raw === null || raw === void 0) return null;
+  if (typeof raw === "bigint") return { units: raw, scale: 0 };
+  let text;
+  if (typeof raw === "number") {
+    if (!Number.isFinite(raw)) return null;
+    text = String(raw);
+  } else if (typeof raw === "string") {
+    text = raw.trim();
+  } else {
+    return null;
+  }
+  if (!text) return null;
+  const match = DECIMAL_PATTERN.exec(text);
+  if (!match) return null;
+  const [, sign, intPart = "", fracPart = "", exponentPart] = match;
+  if (!intPart && !fracPart) return null;
+  const digits = `${intPart}${fracPart}`;
+  let units = BigInt(digits);
+  let scale = fracPart.length;
+  if (exponentPart) {
+    scale -= Number(exponentPart);
+    if (scale < 0) {
+      units *= pow10(-scale);
+      scale = 0;
+    }
+  }
+  if (sign === "-") units = -units;
+  return { units, scale };
+}
+function rescale(value, scale) {
+  return scale === value.scale ? value.units : value.units * pow10(scale - value.scale);
+}
+function addExactDecimal(left, right) {
+  const scale = Math.max(left.scale, right.scale);
+  return { units: rescale(left, scale) + rescale(right, scale), scale };
+}
+function compareExactDecimal(left, right) {
+  const scale = Math.max(left.scale, right.scale);
+  const leftUnits = rescale(left, scale);
+  const rightUnits = rescale(right, scale);
+  if (leftUnits === rightUnits) return 0;
+  return leftUnits < rightUnits ? -1 : 1;
+}
+function exactDecimalToString(value) {
+  const negative = value.units < 0n;
+  const digits = (negative ? -value.units : value.units).toString().padStart(value.scale + 1, "0");
+  const boundary = digits.length - value.scale;
+  const integerPart = digits.slice(0, boundary);
+  const fractionPart = value.scale > 0 ? digits.slice(boundary) : "";
+  return `${negative ? "-" : ""}${integerPart}${fractionPart ? `.${fractionPart}` : ""}`;
+}
+function exactDecimalToNumber(value) {
+  return Number(exactDecimalToString(value));
+}
+export {
+  EXACT_DECIMAL_ZERO,
+  addExactDecimal,
+  compareExactDecimal,
+  exactDecimalToNumber,
+  exactDecimalToString,
+  parseExactDecimal
+};
+//# sourceMappingURL=exactDecimal.js.map