@open-mercato/core 0.6.8-develop.6892.1.f179677788 → 0.6.8-develop.6897.1.586171ad21

package/.turbo/turbo-build.log

@@ -1,4 +1,4 @@
-[build:core] found 3799 entry points
+[build:core] found 3800 entry points
 [build:core] built successfully
 [build:core:generated] found 198 entry points
 [build:core:generated] built successfully

package/dist/modules/auth/api/users/route.js

@@ -83,6 +83,14 @@ const userListResponseSchema = z.object({
 });
 const okResponseSchema = z.object({ ok: z.literal(true) });
 const errorResponseSchema = z.object({ error: z.string() });
+function buildRoleLinkFilter(roleIdList, userScope, candidateUserIds) {
+  const scope = candidateUserIds ? [...userScope, { id: { $in: Array.from(candidateUserIds) } }] : userScope;
+  return {
+    role: { $in: roleIdList },
+    deletedAt: null,
+    user: scope.length > 1 ? { $and: scope } : scope[0]
+  };
+}
 const routeMetadata = {
   GET: { requireAuth: true, requireFeatures: ["auth.users.list"] },
   POST: { requireAuth: true, requireFeatures: ["auth.users.create"] },
@@ -236,13 +244,16 @@ async function GET(req) {
   let idFilter = id ? /* @__PURE__ */ new Set([id]) : null;
   if (Array.isArray(roleIds) && roleIds.length > 0) {
     const uniqueRoleIds = Array.from(new Set(roleIds));
-    const linksForRoles = await em.find(UserRole, { role: { $in: uniqueRoleIds } });
+    const linksForRoles = await em.find(
+      UserRole,
+      buildRoleLinkFilter(uniqueRoleIds, filters, idFilter)
+    );
     const roleUserIds = /* @__PURE__ */ new Set();
     for (const link of linksForRoles) {
       const uid = String(link.user?.id || link.user || "");
       if (uid) roleUserIds.add(uid);
     }
-    if (roleUserIds.size === 0) return NextResponse.json({ items: [], total: 0, totalPages: 1 });
+    if (roleUserIds.size === 0) return NextResponse.json({ items: [], total: 0, totalPages: 1, isSuperAdmin });
     if (idFilter) {
       for (const uid of Array.from(idFilter)) {
         if (!roleUserIds.has(uid)) idFilter.delete(uid);
@@ -250,7 +261,7 @@ async function GET(req) {
     } else {
       idFilter = roleUserIds;
     }
-    if (!idFilter || idFilter.size === 0) return NextResponse.json({ items: [], total: 0, totalPages: 1 });
+    if (!idFilter || idFilter.size === 0) return NextResponse.json({ items: [], total: 0, totalPages: 1, isSuperAdmin });
   }
   const trimmedSearch = typeof search === "string" ? search.trim() : "";
   if (trimmedSearch) {
@@ -291,7 +302,7 @@ async function GET(req) {
     if (matchingRoleIds.length) {
       const roleSearchLinks = await em.find(
         UserRole,
-        { role: { $in: matchingRoleIds } }
+        buildRoleLinkFilter(matchingRoleIds, filters, idFilter)
       );
       const matchingRoleUserIds = Array.from(new Set(
         roleSearchLinks.map((link) => {
@@ -320,7 +331,7 @@ async function GET(req) {
   const links = userIds.length ? await findWithDecryption(
     em,
     UserRole,
-    { user: { $in: userIds } },
+    { user: { $in: userIds }, deletedAt: null },
     { populate: ["role"] },
     {
       tenantId: effectiveTenantId ?? auth.tenantId ?? null,

package/dist/modules/auth/api/users/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../src/modules/auth/api/users/route.ts"],
-  "sourcesContent": ["/* eslint-disable @typescript-eslint/no-explicit-any */\nimport { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { logCrudAccess, makeCrudRoute } from '@open-mercato/shared/lib/crud/factory'\nimport { CrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { User, Role, UserRole } from '@open-mercato/core/modules/auth/data/entities'\nimport type { RbacService } from '@open-mercato/core/modules/auth/services/rbacService'\nimport { Organization, Tenant } from '@open-mercato/core/modules/directory/data/entities'\nimport { E } from '#generated/entities.ids.generated'\nimport { loadCustomFieldValues } from '@open-mercato/shared/lib/crud/custom-fields'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { userCrudEvents, userCrudIndexer } from '@open-mercato/core/modules/auth/commands/users'\nimport {\n  assertActorCanAccessUserTarget,\n  assertActorCanGrantRoleTokens,\n  assertActorCanModifySuperAdminUserTarget,\n  listSuperAdminUserIds,\n} from '@open-mercato/core/modules/auth/lib/grantChecks'\nimport { findOneWithDecryption, findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { buildPasswordSchema } from '@open-mercato/shared/lib/auth/passwordPolicy'\nimport { escapeLikePattern } from '@open-mercato/shared/lib/db/escapeLikePattern'\nimport { parseBooleanFlag } from '@open-mercato/shared/lib/boolean'\nimport { findEntityIdsBySearchTokensCompat, type SearchTokenDatabase } from '@open-mercato/shared/lib/search/tokenLookup'\nimport { normalizeDisplayNameInput } from '@open-mercato/core/modules/auth/lib/displayName'\nimport {\n  getSelectedTenantFromRequest,\n  resolveOrganizationScopeForRequest,\n} from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('auth').child({ component: 'users' })\n\nconst querySchema = z.object({\n  id: z.string().uuid().optional(),\n  page: z.coerce.number().min(1).default(1),\n  pageSize: z.coerce.number().min(1).max(100).default(50),\n  search: z.string().optional(),\n  name: z.string().optional(),\n  organizationId: z.string().uuid().optional(),\n  scopeToActiveOrganization: z.boolean().optional(),\n  roleIds: z.array(z.string().uuid()).optional(),\n}).passthrough()\n\nconst rawBodySchema = z.object({}).passthrough()\n\nconst passwordSchema = buildPasswordSchema()\n\nconst displayNameSchema = z.preprocess(\n  normalizeDisplayNameInput,\n  z.string().trim().min(1).max(120).nullable().optional(),\n)\n\nconst userCreateSchema = z.object({\n  email: z.string().email(),\n  name: displayNameSchema,\n  password: passwordSchema.optional(),\n  sendInviteEmail: z.boolean().optional(),\n  organizationId: z.string().uuid(),\n  roles: z.array(z.string()).optional(),\n}).refine(\n  (data) => data.password || data.sendInviteEmail,\n  { message: 'Either password or sendInviteEmail is required', path: ['password'] },\n)\n\nconst userUpdateSchema = z.object({\n  id: z.string().uuid(),\n  email: z.string().email().optional(),\n  name: displayNameSchema,\n  password: passwordSchema.optional(),\n  organizationId: z.string().uuid().optional(),\n  roles: z.array(z.string()).optional(),\n})\n\nconst userListItemSchema = z.object({\n  id: z.string().uuid(),\n  email: z.string().email(),\n  name: z.string().nullable(),\n  organizationId: z.string().uuid().nullable(),\n  organizationName: z.string().nullable(),\n  tenantId: z.string().uuid().nullable(),\n  tenantName: z.string().nullable(),\n  roles: z.array(z.string()),\n  roleIds: z.array(z.string().uuid()).optional(),\n  hasPassword: z.boolean().optional(),\n  updatedAt: z.string().nullable().optional(),\n})\n\nconst userListResponseSchema = z.object({\n  items: z.array(userListItemSchema),\n  total: z.number().int().nonnegative(),\n  totalPages: z.number().int().positive(),\n  isSuperAdmin: z.boolean().optional(),\n})\n\nconst okResponseSchema = z.object({ ok: z.literal(true) })\n\nconst errorResponseSchema = z.object({ error: z.string() })\n\ntype CrudInput = Record<string, unknown>\ntype UserListFilter = Record<string, unknown>\n\nconst routeMetadata = {\n  GET: { requireAuth: true, requireFeatures: ['auth.users.list'] },\n  POST: { requireAuth: true, requireFeatures: ['auth.users.create'] },\n  PUT: { requireAuth: true, requireFeatures: ['auth.users.edit'] },\n  DELETE: { requireAuth: true, requireFeatures: ['auth.users.delete'] },\n}\n\nexport const metadata = routeMetadata\n\nconst crud = makeCrudRoute<CrudInput, CrudInput, Record<string, unknown>>({\n  metadata: routeMetadata,\n  orm: {\n    entity: User,\n    idField: 'id',\n    orgField: null,\n    tenantField: null,\n    softDeleteField: 'deletedAt',\n  },\n  events: userCrudEvents,\n  indexer: userCrudIndexer,\n  actions: {\n    create: {\n      commandId: 'auth.users.create',\n      schema: rawBodySchema,\n      mapInput: async ({ parsed, ctx }) => {\n        if (ctx.request) {\n          await assertCanAssignRoles(ctx.request, parsed.roles, parsed)\n        }\n        return parsed\n      },\n      response: ({ result }) => ({\n        id: String(result.user.id),\n        ...(result.warning ? { _warning: result.warning } : {}),\n      }),\n      status: 201,\n    },\n    update: {\n      commandId: 'auth.users.update',\n      schema: rawBodySchema,\n      mapInput: async ({ parsed, ctx }) => {\n        if (ctx.request) {\n          if (typeof parsed.id === 'string' && parsed.id.length) {\n            await assertCanModifySuperAdminTarget(ctx.request, parsed.id)\n            await assertCanAccessUserTarget(ctx.request, parsed.id)\n          }\n          await assertCanAssignRoles(ctx.request, parsed.roles, parsed)\n        }\n        return parsed\n      },\n      response: () => ({ ok: true }),\n    },\n    delete: {\n      commandId: 'auth.users.delete',\n      mapInput: async ({ parsed, raw, ctx }) => {\n        const targetId = resolveDeleteTargetId(parsed, raw)\n        if (ctx.request && targetId) {\n          await assertCanModifySuperAdminTarget(ctx.request, targetId)\n          await assertCanAccessUserTarget(ctx.request, targetId)\n        }\n        return parsed\n      },\n      response: () => ({ ok: true }),\n    },\n  },\n})\n\nexport async function GET(req: Request) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth) return NextResponse.json({ items: [], total: 0, totalPages: 1 })\n  const url = new URL(req.url)\n  const rawRoleIds = url.searchParams.getAll('roleId').filter((id): id is string => typeof id === 'string' && id.trim().length > 0)\n  const parsed = querySchema.safeParse({\n    id: url.searchParams.get('id') || undefined,\n    page: url.searchParams.get('page') || undefined,\n    pageSize: url.searchParams.get('pageSize') || undefined,\n    search: url.searchParams.get('search') || undefined,\n    name: url.searchParams.get('name') || undefined,\n    organizationId: url.searchParams.get('organizationId') || undefined,\n    scopeToActiveOrganization: parseBooleanFlag(url.searchParams.get('scopeToActiveOrganization') || undefined),\n    roleIds: rawRoleIds.length ? rawRoleIds : undefined,\n  })\n  if (!parsed.success) return NextResponse.json({ items: [], total: 0, totalPages: 1 })\n  const container = await createRequestContainer()\n  const em = (container.resolve('em') as EntityManager)\n  let isSuperAdmin = auth.isSuperAdmin === true\n  try {\n    if (auth.sub) {\n      const rbacService = container.resolve('rbacService') as any\n      const acl = await rbacService.loadAcl(auth.sub, { tenantId: auth.tenantId ?? null, organizationId: auth.orgId ?? null })\n      isSuperAdmin = isSuperAdmin || !!acl?.isSuperAdmin\n    }\n  } catch (err) {\n    logger.error('Failed to resolve rbac', { err })\n  }\n  const { id, page, pageSize, search, name, organizationId, scopeToActiveOrganization, roleIds } = parsed.data\n  const filters: any[] = [{ deletedAt: null }]\n  const actorTenantId = auth.tenantId ? String(auth.tenantId) : null\n  let effectiveTenantId: string | null = null\n  let effectiveOrganizationIds: string[] | null = null\n  let effectiveSelectedOrganizationId: string | null = null\n  let usesSelectedTenantScope = false\n  if (!isSuperAdmin) {\n    if (!actorTenantId) {\n      return NextResponse.json({ items: [], total: 0, totalPages: 1, isSuperAdmin })\n    }\n    effectiveTenantId = actorTenantId\n    const superAdminUserIds = await listSuperAdminUserIds(em, actorTenantId)\n    if (superAdminUserIds.size) {\n      filters.push({ id: { $nin: Array.from(superAdminUserIds) as any } })\n    }\n  } else {\n    const selectedTenantId = getSelectedTenantFromRequest(req)\n    if (typeof selectedTenantId === 'string' && selectedTenantId.trim().length > 0) {\n      const scope = await resolveOrganizationScopeForRequest({\n        container,\n        auth,\n        request: req,\n        tenantId: selectedTenantId.trim(),\n      })\n      if (!scope.tenantId) {\n        return NextResponse.json({ items: [], total: 0, totalPages: 1, isSuperAdmin })\n      }\n      effectiveTenantId = scope.tenantId\n      effectiveSelectedOrganizationId = scope.selectedId\n      usesSelectedTenantScope = true\n      if (Array.isArray(scope.filterIds)) {\n        if (scope.filterIds.length === 0) {\n          return NextResponse.json({ items: [], total: 0, totalPages: 1, isSuperAdmin })\n        }\n        effectiveOrganizationIds = scope.filterIds\n      }\n    }\n  }\n  if (effectiveTenantId) {\n    filters.push({ tenantId: effectiveTenantId })\n  }\n  if (effectiveOrganizationIds) {\n    filters.push({ organizationId: { $in: effectiveOrganizationIds as any } })\n  }\n  const scopeOrganizationId = usesSelectedTenantScope\n    ? effectiveSelectedOrganizationId\n    : auth.orgId ?? null\n  if (organizationId) filters.push({ organizationId })\n  // Recipient/assignee pickers scope to the caller's active organization so they never\n  // suggest users outside it. A message composed here is stamped with the caller's\n  // active org (auth.orgId), and the message detail endpoint enforces\n  // hasOrganizationAccess(scope.organizationId, message.organizationId); scoping the\n  // suggestions to the same org keeps a picked recipient able to open what they were sent.\n  if (scopeToActiveOrganization) filters.push({ organizationId: auth.orgId ?? null })\n  const trimmedName = typeof name === 'string' ? name.trim() : ''\n  if (trimmedName) {\n    const searchPattern = `%${escapeLikePattern(trimmedName)}%`\n    const displayNameFilters: UserListFilter[] = [{ name: { $ilike: searchPattern } }]\n    const nameTokenScope: string | null | undefined = isSuperAdmin ? (effectiveTenantId ?? undefined) : auth.tenantId ?? null\n    const matchedDisplayNameIds = await findUserIdsBySearchTokens(em, E.auth.user, trimmedName, nameTokenScope, 'name')\n    if (matchedDisplayNameIds && matchedDisplayNameIds.length) {\n      displayNameFilters.push({ id: { $in: matchedDisplayNameIds } })\n    }\n    filters.push(displayNameFilters.length > 1 ? { $or: displayNameFilters } : displayNameFilters[0])\n  }\n  let idFilter: Set<string> | null = id ? new Set([id]) : null\n  if (Array.isArray(roleIds) && roleIds.length > 0) {\n    const uniqueRoleIds = Array.from(new Set(roleIds))\n    const linksForRoles = await em.find(UserRole, { role: { $in: uniqueRoleIds as any } } as any)\n    const roleUserIds = new Set<string>()\n    for (const link of linksForRoles) {\n      const uid = String((link as any).user?.id || (link as any).user || '')\n      if (uid) roleUserIds.add(uid)\n    }\n    if (roleUserIds.size === 0) return NextResponse.json({ items: [], total: 0, totalPages: 1 })\n    if (idFilter) {\n      for (const uid of Array.from(idFilter)) {\n        if (!roleUserIds.has(uid)) idFilter.delete(uid)\n      }\n    } else {\n      idFilter = roleUserIds\n    }\n    if (!idFilter || idFilter.size === 0) return NextResponse.json({ items: [], total: 0, totalPages: 1 })\n  }\n  const trimmedSearch = typeof search === 'string' ? search.trim() : ''\n  if (trimmedSearch) {\n    // Email is encrypted at rest, so plaintext search must go through search_tokens.\n    const tenantScope: string | null | undefined = isSuperAdmin ? (effectiveTenantId ?? undefined) : auth.tenantId ?? null\n    const searchFilters: any[] = []\n\n    const matchedIds = await findUserIdsBySearchTokens(em, E.auth.user, trimmedSearch, tenantScope)\n    if (matchedIds && matchedIds.length) {\n      searchFilters.push({ id: { $in: matchedIds as any } })\n    }\n\n    const searchPattern = `%${escapeLikePattern(trimmedSearch)}%`\n    const organizationSearchFilters: any[] = [\n      { deletedAt: null },\n      { name: { $ilike: searchPattern } },\n    ]\n    if (tenantScope) {\n      organizationSearchFilters.push({ tenant: tenantScope })\n    }\n    const matchingOrganizations = await em.find(\n      Organization,\n      organizationSearchFilters.length > 1 ? { $and: organizationSearchFilters } : organizationSearchFilters[0],\n    )\n    const matchingOrganizationIds = matchingOrganizations\n      .map((org) => (org?.id ? String(org.id) : null))\n      .filter((orgId): orgId is string => typeof orgId === 'string' && orgId.length > 0)\n    if (matchingOrganizationIds.length) {\n      searchFilters.push({ organizationId: { $in: matchingOrganizationIds as any } })\n    }\n\n    const roleSearchFilters: any[] = [\n      { deletedAt: null },\n      { name: { $ilike: searchPattern } },\n    ]\n    if (tenantScope) {\n      roleSearchFilters.push({ $or: [{ tenantId: tenantScope }, { tenantId: null }] })\n    }\n    const matchingRoles = await em.find(\n      Role,\n      roleSearchFilters.length > 1 ? { $and: roleSearchFilters } : roleSearchFilters[0],\n    )\n    const matchingRoleIds = matchingRoles\n      .map((role) => (role?.id ? String(role.id) : null))\n      .filter((roleId): roleId is string => typeof roleId === 'string' && roleId.length > 0)\n    if (matchingRoleIds.length) {\n      const roleSearchLinks = await em.find(\n        UserRole,\n        { role: { $in: matchingRoleIds as any } } as any,\n      )\n      const matchingRoleUserIds = Array.from(new Set(\n        roleSearchLinks\n          .map((link) => {\n            const userRef = (link as any).user\n            const userId = userRef?.id ?? userRef\n            return userId ? String(userId) : null\n          })\n          .filter((userId): userId is string => typeof userId === 'string' && userId.length > 0),\n      ))\n      if (matchingRoleUserIds.length) {\n        searchFilters.push({ id: { $in: matchingRoleUserIds as any } })\n      }\n    }\n\n    if (!searchFilters.length) {\n      return NextResponse.json({ items: [], total: 0, totalPages: 1, isSuperAdmin })\n    }\n\n    filters.push(searchFilters.length > 1 ? { $or: searchFilters } : searchFilters[0])\n  }\n  if (idFilter && idFilter.size) {\n    filters.push({ id: { $in: Array.from(idFilter) as any } })\n  } else if (id) {\n    filters.push({ id })\n  }\n  const where = filters.length > 1 ? { $and: filters } : filters[0]\n  const [rows, count] = await em.findAndCount(User, where, { limit: pageSize, offset: (page - 1) * pageSize })\n  const userIds = rows.map((u: any) => u.id)\n  const links = userIds.length\n    ? await findWithDecryption(\n        em,\n        UserRole,\n        { user: { $in: userIds as any } } as any,\n        { populate: ['role'] },\n        {\n          tenantId: effectiveTenantId ?? auth.tenantId ?? null,\n          organizationId: scopeOrganizationId,\n        },\n      )\n    : []\n  const roleMap: Record<string, string[]> = {}\n  const roleIdMap: Record<string, string[]> = {}\n  for (const l of links) {\n    const uid = String((l as any).user?.id || (l as any).user)\n    const rname = String((l as any).role?.name || '')\n    const rid = String((l as any).role?.id ?? '')\n    if (!roleMap[uid]) roleMap[uid] = []\n    if (!roleIdMap[uid]) roleIdMap[uid] = []\n    if (rname) roleMap[uid].push(rname)\n    if (rid) roleIdMap[uid].push(rid)\n  }\n  const orgIds = rows\n    .map((u: any) => (u.organizationId ? String(u.organizationId) : null))\n    .filter((id): id is string => !!id)\n  const uniqueOrgIds = Array.from(new Set(orgIds))\n  let orgMap: Record<string, string> = {}\n  if (uniqueOrgIds.length) {\n    const organizations = await em.find(\n      Organization,\n      { id: { $in: uniqueOrgIds as any }, deletedAt: null },\n    )\n    orgMap = organizations.reduce<Record<string, string>>((acc, org) => {\n      const orgId = org?.id ? String(org.id) : null\n      if (!orgId) return acc\n      const rawName = (org as any)?.name\n      const orgName = typeof rawName === 'string' && rawName.length > 0 ? rawName : orgId\n      acc[orgId] = orgName\n      return acc\n    }, {})\n  }\n  const tenantIds = rows\n    .map((u: any) => (u.tenantId ? String(u.tenantId) : null))\n    .filter((id): id is string => !!id)\n  const uniqueTenantIds = Array.from(new Set(tenantIds))\n  let tenantMap: Record<string, string> = {}\n  if (uniqueTenantIds.length) {\n    const tenants = await em.find(\n      Tenant,\n      { id: { $in: uniqueTenantIds as any }, deletedAt: null },\n    )\n    tenantMap = tenants.reduce<Record<string, string>>((acc, tenant) => {\n      const tenantId = tenant?.id ? String(tenant.id) : null\n      if (!tenantId) return acc\n      const rawName = (tenant as any)?.name\n      const tenantName = typeof rawName === 'string' && rawName.length > 0 ? rawName : tenantId\n      acc[tenantId] = tenantName\n      return acc\n    }, {})\n  }\n  const tenantByUser: Record<string, string | null> = {}\n  const organizationByUser: Record<string, string | null> = {}\n  for (const u of rows) {\n    const uid = String(u.id)\n    tenantByUser[uid] = u.tenantId ? String(u.tenantId) : null\n    organizationByUser[uid] = u.organizationId ? String(u.organizationId) : null\n  }\n  const cfByUser = userIds.length\n    ? await loadCustomFieldValues({\n        em,\n        entityId: E.auth.user,\n        recordIds: userIds.map(String),\n        tenantIdByRecord: tenantByUser,\n        organizationIdByRecord: organizationByUser,\n        tenantFallbacks: effectiveTenantId ? [effectiveTenantId] : auth.tenantId ? [auth.tenantId] : [],\n      })\n    : {}\n\n  const items = rows.map((u: any) => {\n    const uid = String(u.id)\n    const orgId = u.organizationId ? String(u.organizationId) : null\n    return {\n      id: uid,\n      email: String(u.email),\n      name: u.name ? String(u.name) : null,\n      organizationId: orgId,\n      organizationName: orgId ? orgMap[orgId] ?? orgId : null,\n      tenantId: u.tenantId ? String(u.tenantId) : null,\n      tenantName: u.tenantId ? tenantMap[String(u.tenantId)] ?? String(u.tenantId) : null,\n      roles: roleMap[uid] || [],\n      roleIds: roleIdMap[uid] || [],\n      ...(id ? { hasPassword: !!u.passwordHash } : {}),\n      updatedAt: u.updatedAt instanceof Date ? u.updatedAt.toISOString() : null,\n      ...(cfByUser[uid] || {}),\n    }\n  })\n  const totalPages = Math.max(1, Math.ceil(count / pageSize))\n  await logCrudAccess({\n    container,\n    auth,\n    request: req,\n    items,\n    idField: 'id',\n    resourceKind: 'auth.user',\n    organizationId: effectiveSelectedOrganizationId,\n    tenantId: effectiveTenantId ?? auth.tenantId ?? null,\n    query: parsed.data,\n    accessType: id ? 'read:item' : undefined,\n  })\n  return NextResponse.json({ items, total: count, totalPages, isSuperAdmin })\n}\n\nexport const POST = async (req: Request) => {\n  return crud.POST(req)\n}\n\nexport const PUT = async (req: Request) => {\n  return crud.PUT(req)\n}\n\nexport const DELETE = async (req: Request) => {\n  const targetId = new URL(req.url).searchParams.get('id')\n  if (targetId) {\n    try {\n      await assertCanModifySuperAdminTarget(req, targetId)\n      await assertCanAccessUserTarget(req, targetId)\n    } catch (err) {\n      if (err instanceof CrudHttpError) {\n        return NextResponse.json(err.body, { status: err.status })\n      }\n      throw err\n    }\n  }\n  return crud.DELETE(req)\n}\n\nasync function findUserIdsBySearchTokens(\n  em: EntityManager,\n  entityType: string,\n  search: string,\n  tenantScope: string | null | undefined,\n  field?: string,\n): Promise<string[] | null> {\n  return findEntityIdsBySearchTokensCompat({\n    db: em.getKysely<SearchTokenDatabase>(),\n    entityType,\n    query: search,\n    fields: field ? [field] : undefined,\n    scope: { tenantId: tenantScope },\n  })\n}\n\nasync function assertCanModifySuperAdminTarget(req: Request, targetUserId: string) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.sub) throw new CrudHttpError(401, { error: 'Unauthorized' })\n  const container = await createRequestContainer()\n  const em = container.resolve('em') as EntityManager\n  await assertActorCanModifySuperAdminUserTarget({\n    em,\n    rbacService: container.resolve('rbacService') as RbacService,\n    actorUserId: auth.sub,\n    tenantId: auth.tenantId ?? null,\n    organizationId: auth.orgId ?? null,\n    targetUserId,\n  })\n}\n\nasync function assertCanAccessUserTarget(req: Request, targetUserId: string) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.sub) throw new CrudHttpError(401, { error: 'Unauthorized' })\n  const container = await createRequestContainer()\n  const em = container.resolve('em') as EntityManager\n  await assertActorCanAccessUserTarget({\n    em,\n    rbacService: container.resolve('rbacService') as RbacService,\n    actorUserId: auth.sub,\n    tenantId: auth.tenantId ?? null,\n    organizationId: auth.orgId ?? null,\n    targetUserId,\n  })\n}\n\nfunction resolveDeleteTargetId(parsed: unknown, raw: unknown): string | null {\n  const fromParsed = readId((parsed as Record<string, unknown> | null | undefined))\n  if (fromParsed) return fromParsed\n  const rawRecord = raw as { body?: Record<string, unknown>; query?: Record<string, unknown> } | null | undefined\n  return readId(rawRecord?.query) ?? readId(rawRecord?.body)\n}\n\nfunction readId(record: Record<string, unknown> | null | undefined): string | null {\n  const value = record?.id\n  return typeof value === 'string' && value.length > 0 ? value : null\n}\n\nasync function assertCanAssignRoles(req: Request, roles: unknown, payload: Record<string, unknown>) {\n  if (!Array.isArray(roles)) return\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.sub) throw new CrudHttpError(401, { error: 'Unauthorized' })\n  const container = await createRequestContainer()\n  const em = container.resolve('em') as EntityManager\n  const tenantId = await resolveTargetTenantIdForRoleGrant(em, payload, auth.tenantId ?? null)\n  await assertActorCanGrantRoleTokens({\n    em,\n    rbacService: container.resolve('rbacService') as RbacService,\n    actorUserId: auth.sub,\n    tenantId,\n    organizationId: auth.orgId ?? null,\n    roleTokens: roles,\n  })\n}\n\nasync function resolveTargetTenantIdForRoleGrant(\n  em: EntityManager,\n  payload: Record<string, unknown>,\n  fallbackTenantId: string | null,\n): Promise<string | null> {\n  const organizationId = typeof payload.organizationId === 'string' ? payload.organizationId : null\n  if (organizationId) {\n    const organization = await findOneWithDecryption(\n      em,\n      Organization,\n      { id: organizationId },\n      { populate: ['tenant'] },\n      { tenantId: null, organizationId },\n    )\n    return organization?.tenant?.id ? String(organization.tenant.id) : fallbackTenantId\n  }\n\n  const userId = typeof payload.id === 'string' ? payload.id : null\n  if (userId) {\n    const user = await findOneWithDecryption(\n      em,\n      User,\n      { id: userId, deletedAt: null },\n      {},\n      { tenantId: null, organizationId: null },\n    )\n    return user?.tenantId ? String(user.tenantId) : fallbackTenantId\n  }\n\n  return fallbackTenantId\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Authentication & Accounts',\n  summary: 'User management',\n  methods: {\n    GET: {\n      summary: 'List users',\n      description:\n        'Returns users for the effective selected tenant and organization scope. Search matches email, organization name, and role name. Super administrators may scope the response via the topbar context, organization filters, or role filters. Pass scopeToActiveOrganization=1 to restrict results to the caller\\'s active organization (used by recipient/assignee pickers so suggestions stay within the org that owns the resulting record).',\n      query: querySchema,\n      responses: [\n        { status: 200, description: 'User collection', schema: userListResponseSchema },\n      ],\n    },\n    POST: {\n      summary: 'Create user',\n      description: 'Creates a new confirmed user within the specified organization, optional display name, and optional roles.',\n      requestBody: {\n        contentType: 'application/json',\n        schema: userCreateSchema,\n      },\n      responses: [\n        {\n          status: 201,\n          description: 'User created',\n          schema: z.object({ id: z.string().uuid() }),\n        },\n      ],\n      errors: [\n        { status: 400, description: 'Invalid payload or duplicate email', schema: errorResponseSchema },\n        { status: 401, description: 'Unauthorized', schema: errorResponseSchema },\n        { status: 403, description: 'Attempted to assign privileged roles', schema: errorResponseSchema },\n      ],\n    },\n    PUT: {\n      summary: 'Update user',\n      description: 'Updates profile fields including display name, organization assignment, credentials, or role memberships.',\n      requestBody: {\n        contentType: 'application/json',\n        schema: userUpdateSchema,\n      },\n      responses: [\n        { status: 200, description: 'User updated', schema: okResponseSchema },\n      ],\n      errors: [\n        { status: 400, description: 'Invalid payload', schema: errorResponseSchema },\n        { status: 401, description: 'Unauthorized', schema: errorResponseSchema },\n        { status: 403, description: 'Attempted to assign privileged roles', schema: errorResponseSchema },\n        { status: 404, description: 'User not found', schema: errorResponseSchema },\n      ],\n    },\n    DELETE: {\n      summary: 'Delete user',\n      description: 'Deletes a user by identifier. Undo support is provided via the command bus.',\n      query: z.object({ id: z.string().uuid().describe('User identifier') }),\n      responses: [\n        { status: 200, description: 'User deleted', schema: okResponseSchema },\n      ],\n      errors: [\n        { status: 400, description: 'User cannot be deleted', schema: errorResponseSchema },\n        { status: 401, description: 'Unauthorized', schema: errorResponseSchema },\n        { status: 404, description: 'User not found', schema: errorResponseSchema },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AACA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAElB,SAAS,eAAe,qBAAqB;AAC7C,SAAS,qBAAqB;AAC9B,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AACvC,SAAS,MAAM,MAAM,gBAAgB;AAErC,SAAS,cAAc,cAAc;AACrC,SAAS,SAAS;AAClB,SAAS,6BAA6B;AAEtC,SAAS,gBAAgB,uBAAuB;AAChD;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,uBAAuB,0BAA0B;AAC1D,SAAS,2BAA2B;AACpC,SAAS,yBAAyB;AAClC,SAAS,wBAAwB;AACjC,SAAS,yCAAmE;AAC5E,SAAS,iCAAiC;AAC1C;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,MAAM,EAAE,MAAM,EAAE,WAAW,QAAQ,CAAC;AAEhE,MAAM,cAAc,EAAE,OAAO;AAAA,EAC3B,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC/B,MAAM,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,QAAQ,CAAC;AAAA,EACxC,UAAU,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,QAAQ,EAAE;AAAA,EACtD,QAAQ,EAAE,OAAO,EAAE,SAAS;AAAA,EAC5B,MAAM,EAAE,OAAO,EAAE,SAAS;AAAA,EAC1B,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC3C,2BAA2B,EAAE,QAAQ,EAAE,SAAS;AAAA,EAChD,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,SAAS;AAC/C,CAAC,EAAE,YAAY;AAEf,MAAM,gBAAgB,EAAE,OAAO,CAAC,CAAC,EAAE,YAAY;AAE/C,MAAM,iBAAiB,oBAAoB;AAE3C,MAAM,oBAAoB,EAAE;AAAA,EAC1B;AAAA,EACA,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,SAAS,EAAE,SAAS;AACxD;AAEA,MAAM,mBAAmB,EAAE,OAAO;AAAA,EAChC,OAAO,EAAE,OAAO,EAAE,MAAM;AAAA,EACxB,MAAM;AAAA,EACN,UAAU,eAAe,SAAS;AAAA,EAClC,iBAAiB,EAAE,QAAQ,EAAE,SAAS;AAAA,EACtC,gBAAgB,EAAE,OAAO,EAAE,KAAK;AAAA,EAChC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,SAAS;AACtC,CAAC,EAAE;AAAA,EACD,CAAC,SAAS,KAAK,YAAY,KAAK;AAAA,EAChC,EAAE,SAAS,kDAAkD,MAAM,CAAC,UAAU,EAAE;AAClF;AAEA,MAAM,mBAAmB,EAAE,OAAO;AAAA,EAChC,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS;AAAA,EACnC,MAAM;AAAA,EACN,UAAU,eAAe,SAAS;AAAA,EAClC,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC3C,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,SAAS;AACtC,CAAC;AAED,MAAM,qBAAqB,EAAE,OAAO;AAAA,EAClC,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,OAAO,EAAE,OAAO,EAAE,MAAM;AAAA,EACxB,MAAM,EAAE,OAAO,EAAE,SAAS;AAAA,EAC1B,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC3C,kBAAkB,EAAE,OAAO,EAAE,SAAS;AAAA,EACtC,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACrC,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,EAChC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC;AAAA,EACzB,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,SAAS;AAAA,EAC7C,aAAa,EAAE,QAAQ,EAAE,SAAS;AAAA,EAClC,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAC5C,CAAC;AAED,MAAM,yBAAyB,EAAE,OAAO;AAAA,EACtC,OAAO,EAAE,MAAM,kBAAkB;AAAA,EACjC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY;AAAA,EACpC,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS;AAAA,EACtC,cAAc,EAAE,QAAQ,EAAE,SAAS;AACrC,CAAC;AAED,MAAM,mBAAmB,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,IAAI,EAAE,CAAC;AAEzD,MAAM,sBAAsB,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAK1D,MAAM,gBAAgB;AAAA,EACpB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,iBAAiB,EAAE;AAAA,EAC/D,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,mBAAmB,EAAE;AAAA,EAClE,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,iBAAiB,EAAE;AAAA,EAC/D,QAAQ,EAAE,aAAa,MAAM,iBAAiB,CAAC,mBAAmB,EAAE;AACtE;AAEO,MAAM,WAAW;AAExB,MAAM,OAAO,cAA6D;AAAA,EACxE,UAAU;AAAA,EACV,KAAK;AAAA,IACH,QAAQ;AAAA,IACR,SAAS;AAAA,IACT,UAAU;AAAA,IACV,aAAa;AAAA,IACb,iBAAiB;AAAA,EACnB;AAAA,EACA,QAAQ;AAAA,EACR,SAAS;AAAA,EACT,SAAS;AAAA,IACP,QAAQ;AAAA,MACN,WAAW;AAAA,MACX,QAAQ;AAAA,MACR,UAAU,OAAO,EAAE,QAAQ,IAAI,MAAM;AACnC,YAAI,IAAI,SAAS;AACf,gBAAM,qBAAqB,IAAI,SAAS,OAAO,OAAO,MAAM;AAAA,QAC9D;AACA,eAAO;AAAA,MACT;AAAA,MACA,UAAU,CAAC,EAAE,OAAO,OAAO;AAAA,QACzB,IAAI,OAAO,OAAO,KAAK,EAAE;AAAA,QACzB,GAAI,OAAO,UAAU,EAAE,UAAU,OAAO,QAAQ,IAAI,CAAC;AAAA,MACvD;AAAA,MACA,QAAQ;AAAA,IACV;AAAA,IACA,QAAQ;AAAA,MACN,WAAW;AAAA,MACX,QAAQ;AAAA,MACR,UAAU,OAAO,EAAE,QAAQ,IAAI,MAAM;AACnC,YAAI,IAAI,SAAS;AACf,cAAI,OAAO,OAAO,OAAO,YAAY,OAAO,GAAG,QAAQ;AACrD,kBAAM,gCAAgC,IAAI,SAAS,OAAO,EAAE;AAC5D,kBAAM,0BAA0B,IAAI,SAAS,OAAO,EAAE;AAAA,UACxD;AACA,gBAAM,qBAAqB,IAAI,SAAS,OAAO,OAAO,MAAM;AAAA,QAC9D;AACA,eAAO;AAAA,MACT;AAAA,MACA,UAAU,OAAO,EAAE,IAAI,KAAK;AAAA,IAC9B;AAAA,IACA,QAAQ;AAAA,MACN,WAAW;AAAA,MACX,UAAU,OAAO,EAAE,QAAQ,KAAK,IAAI,MAAM;AACxC,cAAM,WAAW,sBAAsB,QAAQ,GAAG;AAClD,YAAI,IAAI,WAAW,UAAU;AAC3B,gBAAM,gCAAgC,IAAI,SAAS,QAAQ;AAC3D,gBAAM,0BAA0B,IAAI,SAAS,QAAQ;AAAA,QACvD;AACA,eAAO;AAAA,MACT;AAAA,MACA,UAAU,OAAO,EAAE,IAAI,KAAK;AAAA,IAC9B;AAAA,EACF;AACF,CAAC;AAED,eAAsB,IAAI,KAAc;AACtC,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,KAAM,QAAO,aAAa,KAAK,EAAE,OAAO,CAAC,GAAG,OAAO,GAAG,YAAY,EAAE,CAAC;AAC1E,QAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,QAAM,aAAa,IAAI,aAAa,OAAO,QAAQ,EAAE,OAAO,CAACA,QAAqB,OAAOA,QAAO,YAAYA,IAAG,KAAK,EAAE,SAAS,CAAC;AAChI,QAAM,SAAS,YAAY,UAAU;AAAA,IACnC,IAAI,IAAI,aAAa,IAAI,IAAI,KAAK;AAAA,IAClC,MAAM,IAAI,aAAa,IAAI,MAAM,KAAK;AAAA,IACtC,UAAU,IAAI,aAAa,IAAI,UAAU,KAAK;AAAA,IAC9C,QAAQ,IAAI,aAAa,IAAI,QAAQ,KAAK;AAAA,IAC1C,MAAM,IAAI,aAAa,IAAI,MAAM,KAAK;AAAA,IACtC,gBAAgB,IAAI,aAAa,IAAI,gBAAgB,KAAK;AAAA,IAC1D,2BAA2B,iBAAiB,IAAI,aAAa,IAAI,2BAA2B,KAAK,MAAS;AAAA,IAC1G,SAAS,WAAW,SAAS,aAAa;AAAA,EAC5C,CAAC;AACD,MAAI,CAAC,OAAO,QAAS,QAAO,aAAa,KAAK,EAAE,OAAO,CAAC,GAAG,OAAO,GAAG,YAAY,EAAE,CAAC;AACpF,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,KAAM,UAAU,QAAQ,IAAI;AAClC,MAAI,eAAe,KAAK,iBAAiB;AACzC,MAAI;AACF,QAAI,KAAK,KAAK;AACZ,YAAM,cAAc,UAAU,QAAQ,aAAa;AACnD,YAAM,MAAM,MAAM,YAAY,QAAQ,KAAK,KAAK,EAAE,UAAU,KAAK,YAAY,MAAM,gBAAgB,KAAK,SAAS,KAAK,CAAC;AACvH,qBAAe,gBAAgB,CAAC,CAAC,KAAK;AAAA,IACxC;AAAA,EACF,SAAS,KAAK;AACZ,WAAO,MAAM,0BAA0B,EAAE,IAAI,CAAC;AAAA,EAChD;AACA,QAAM,EAAE,IAAI,MAAM,UAAU,QAAQ,MAAM,gBAAgB,2BAA2B,QAAQ,IAAI,OAAO;AACxG,QAAM,UAAiB,CAAC,EAAE,WAAW,KAAK,CAAC;AAC3C,QAAM,gBAAgB,KAAK,WAAW,OAAO,KAAK,QAAQ,IAAI;AAC9D,MAAI,oBAAmC;AACvC,MAAI,2BAA4C;AAChD,MAAI,kCAAiD;AACrD,MAAI,0BAA0B;AAC9B,MAAI,CAAC,cAAc;AACjB,QAAI,CAAC,eAAe;AAClB,aAAO,aAAa,KAAK,EAAE,OAAO,CAAC,GAAG,OAAO,GAAG,YAAY,GAAG,aAAa,CAAC;AAAA,IAC/E;AACA,wBAAoB;AACpB,UAAM,oBAAoB,MAAM,sBAAsB,IAAI,aAAa;AACvE,QAAI,kBAAkB,MAAM;AAC1B,cAAQ,KAAK,EAAE,IAAI,EAAE,MAAM,MAAM,KAAK,iBAAiB,EAAS,EAAE,CAAC;AAAA,IACrE;AAAA,EACF,OAAO;AACL,UAAM,mBAAmB,6BAA6B,GAAG;AACzD,QAAI,OAAO,qBAAqB,YAAY,iBAAiB,KAAK,EAAE,SAAS,GAAG;AAC9E,YAAM,QAAQ,MAAM,mCAAmC;AAAA,QACrD;AAAA,QACA;AAAA,QACA,SAAS;AAAA,QACT,UAAU,iBAAiB,KAAK;AAAA,MAClC,CAAC;AACD,UAAI,CAAC,MAAM,UAAU;AACnB,eAAO,aAAa,KAAK,EAAE,OAAO,CAAC,GAAG,OAAO,GAAG,YAAY,GAAG,aAAa,CAAC;AAAA,MAC/E;AACA,0BAAoB,MAAM;AAC1B,wCAAkC,MAAM;AACxC,gCAA0B;AAC1B,UAAI,MAAM,QAAQ,MAAM,SAAS,GAAG;AAClC,YAAI,MAAM,UAAU,WAAW,GAAG;AAChC,iBAAO,aAAa,KAAK,EAAE,OAAO,CAAC,GAAG,OAAO,GAAG,YAAY,GAAG,aAAa,CAAC;AAAA,QAC/E;AACA,mCAA2B,MAAM;AAAA,MACnC;AAAA,IACF;AAAA,EACF;AACA,MAAI,mBAAmB;AACrB,YAAQ,KAAK,EAAE,UAAU,kBAAkB,CAAC;AAAA,EAC9C;AACA,MAAI,0BAA0B;AAC5B,YAAQ,KAAK,EAAE,gBAAgB,EAAE,KAAK,yBAAgC,EAAE,CAAC;AAAA,EAC3E;AACA,QAAM,sBAAsB,0BACxB,kCACA,KAAK,SAAS;AAClB,MAAI,eAAgB,SAAQ,KAAK,EAAE,eAAe,CAAC;AAMnD,MAAI,0BAA2B,SAAQ,KAAK,EAAE,gBAAgB,KAAK,SAAS,KAAK,CAAC;AAClF,QAAM,cAAc,OAAO,SAAS,WAAW,KAAK,KAAK,IAAI;AAC7D,MAAI,aAAa;AACf,UAAM,gBAAgB,IAAI,kBAAkB,WAAW,CAAC;AACxD,UAAM,qBAAuC,CAAC,EAAE,MAAM,EAAE,QAAQ,cAAc,EAAE,CAAC;AACjF,UAAM,iBAA4C,eAAgB,qBAAqB,SAAa,KAAK,YAAY;AACrH,UAAM,wBAAwB,MAAM,0BAA0B,IAAI,EAAE,KAAK,MAAM,aAAa,gBAAgB,MAAM;AAClH,QAAI,yBAAyB,sBAAsB,QAAQ;AACzD,yBAAmB,KAAK,EAAE,IAAI,EAAE,KAAK,sBAAsB,EAAE,CAAC;AAAA,IAChE;AACA,YAAQ,KAAK,mBAAmB,SAAS,IAAI,EAAE,KAAK,mBAAmB,IAAI,mBAAmB,CAAC,CAAC;AAAA,EAClG;AACA,MAAI,WAA+B,KAAK,oBAAI,IAAI,CAAC,EAAE,CAAC,IAAI;AACxD,MAAI,MAAM,QAAQ,OAAO,KAAK,QAAQ,SAAS,GAAG;AAChD,UAAM,gBAAgB,MAAM,KAAK,IAAI,IAAI,OAAO,CAAC;AACjD,UAAM,gBAAgB,MAAM,GAAG,KAAK,UAAU,EAAE,MAAM,EAAE,KAAK,cAAqB,EAAE,CAAQ;AAC5F,UAAM,cAAc,oBAAI,IAAY;AACpC,eAAW,QAAQ,eAAe;AAChC,YAAM,MAAM,OAAQ,KAAa,MAAM,MAAO,KAAa,QAAQ,EAAE;AACrE,UAAI,IAAK,aAAY,IAAI,GAAG;AAAA,IAC9B;AACA,QAAI,YAAY,SAAS,EAAG,QAAO,aAAa,KAAK,EAAE,OAAO,CAAC,GAAG,OAAO,GAAG,YAAY,EAAE,CAAC;AAC3F,QAAI,UAAU;AACZ,iBAAW,OAAO,MAAM,KAAK,QAAQ,GAAG;AACtC,YAAI,CAAC,YAAY,IAAI,GAAG,EAAG,UAAS,OAAO,GAAG;AAAA,MAChD;AAAA,IACF,OAAO;AACL,iBAAW;AAAA,IACb;AACA,QAAI,CAAC,YAAY,SAAS,SAAS,EAAG,QAAO,aAAa,KAAK,EAAE,OAAO,CAAC,GAAG,OAAO,GAAG,YAAY,EAAE,CAAC;AAAA,EACvG;AACA,QAAM,gBAAgB,OAAO,WAAW,WAAW,OAAO,KAAK,IAAI;AACnE,MAAI,eAAe;AAEjB,UAAM,cAAyC,eAAgB,qBAAqB,SAAa,KAAK,YAAY;AAClH,UAAM,gBAAuB,CAAC;AAE9B,UAAM,aAAa,MAAM,0BAA0B,IAAI,EAAE,KAAK,MAAM,eAAe,WAAW;AAC9F,QAAI,cAAc,WAAW,QAAQ;AACnC,oBAAc,KAAK,EAAE,IAAI,EAAE,KAAK,WAAkB,EAAE,CAAC;AAAA,IACvD;AAEA,UAAM,gBAAgB,IAAI,kBAAkB,aAAa,CAAC;AAC1D,UAAM,4BAAmC;AAAA,MACvC,EAAE,WAAW,KAAK;AAAA,MAClB,EAAE,MAAM,EAAE,QAAQ,cAAc,EAAE;AAAA,IACpC;AACA,QAAI,aAAa;AACf,gCAA0B,KAAK,EAAE,QAAQ,YAAY,CAAC;AAAA,IACxD;AACA,UAAM,wBAAwB,MAAM,GAAG;AAAA,MACrC;AAAA,MACA,0BAA0B,SAAS,IAAI,EAAE,MAAM,0BAA0B,IAAI,0BAA0B,CAAC;AAAA,IAC1G;AACA,UAAM,0BAA0B,sBAC7B,IAAI,CAAC,QAAS,KAAK,KAAK,OAAO,IAAI,EAAE,IAAI,IAAK,EAC9C,OAAO,CAAC,UAA2B,OAAO,UAAU,YAAY,MAAM,SAAS,CAAC;AACnF,QAAI,wBAAwB,QAAQ;AAClC,oBAAc,KAAK,EAAE,gBAAgB,EAAE,KAAK,wBAA+B,EAAE,CAAC;AAAA,IAChF;AAEA,UAAM,oBAA2B;AAAA,MAC/B,EAAE,WAAW,KAAK;AAAA,MAClB,EAAE,MAAM,EAAE,QAAQ,cAAc,EAAE;AAAA,IACpC;AACA,QAAI,aAAa;AACf,wBAAkB,KAAK,EAAE,KAAK,CAAC,EAAE,UAAU,YAAY,GAAG,EAAE,UAAU,KAAK,CAAC,EAAE,CAAC;AAAA,IACjF;AACA,UAAM,gBAAgB,MAAM,GAAG;AAAA,MAC7B;AAAA,MACA,kBAAkB,SAAS,IAAI,EAAE,MAAM,kBAAkB,IAAI,kBAAkB,CAAC;AAAA,IAClF;AACA,UAAM,kBAAkB,cACrB,IAAI,CAAC,SAAU,MAAM,KAAK,OAAO,KAAK,EAAE,IAAI,IAAK,EACjD,OAAO,CAAC,WAA6B,OAAO,WAAW,YAAY,OAAO,SAAS,CAAC;AACvF,QAAI,gBAAgB,QAAQ;AAC1B,YAAM,kBAAkB,MAAM,GAAG;AAAA,QAC/B;AAAA,QACA,EAAE,MAAM,EAAE,KAAK,gBAAuB,EAAE;AAAA,MAC1C;AACA,YAAM,sBAAsB,MAAM,KAAK,IAAI;AAAA,QACzC,gBACG,IAAI,CAAC,SAAS;AACb,gBAAM,UAAW,KAAa;AAC9B,gBAAM,SAAS,SAAS,MAAM;AAC9B,iBAAO,SAAS,OAAO,MAAM,IAAI;AAAA,QACnC,CAAC,EACA,OAAO,CAAC,WAA6B,OAAO,WAAW,YAAY,OAAO,SAAS,CAAC;AAAA,MACzF,CAAC;AACD,UAAI,oBAAoB,QAAQ;AAC9B,sBAAc,KAAK,EAAE,IAAI,EAAE,KAAK,oBAA2B,EAAE,CAAC;AAAA,MAChE;AAAA,IACF;AAEA,QAAI,CAAC,cAAc,QAAQ;AACzB,aAAO,aAAa,KAAK,EAAE,OAAO,CAAC,GAAG,OAAO,GAAG,YAAY,GAAG,aAAa,CAAC;AAAA,IAC/E;AAEA,YAAQ,KAAK,cAAc,SAAS,IAAI,EAAE,KAAK,cAAc,IAAI,cAAc,CAAC,CAAC;AAAA,EACnF;AACA,MAAI,YAAY,SAAS,MAAM;AAC7B,YAAQ,KAAK,EAAE,IAAI,EAAE,KAAK,MAAM,KAAK,QAAQ,EAAS,EAAE,CAAC;AAAA,EAC3D,WAAW,IAAI;AACb,YAAQ,KAAK,EAAE,GAAG,CAAC;AAAA,EACrB;AACA,QAAM,QAAQ,QAAQ,SAAS,IAAI,EAAE,MAAM,QAAQ,IAAI,QAAQ,CAAC;AAChE,QAAM,CAAC,MAAM,KAAK,IAAI,MAAM,GAAG,aAAa,MAAM,OAAO,EAAE,OAAO,UAAU,SAAS,OAAO,KAAK,SAAS,CAAC;AAC3G,QAAM,UAAU,KAAK,IAAI,CAAC,MAAW,EAAE,EAAE;AACzC,QAAM,QAAQ,QAAQ,SAClB,MAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA,EAAE,MAAM,EAAE,KAAK,QAAe,EAAE;AAAA,IAChC,EAAE,UAAU,CAAC,MAAM,EAAE;AAAA,IACrB;AAAA,MACE,UAAU,qBAAqB,KAAK,YAAY;AAAA,MAChD,gBAAgB;AAAA,IAClB;AAAA,EACF,IACA,CAAC;AACL,QAAM,UAAoC,CAAC;AAC3C,QAAM,YAAsC,CAAC;AAC7C,aAAW,KAAK,OAAO;AACrB,UAAM,MAAM,OAAQ,EAAU,MAAM,MAAO,EAAU,IAAI;AACzD,UAAM,QAAQ,OAAQ,EAAU,MAAM,QAAQ,EAAE;AAChD,UAAM,MAAM,OAAQ,EAAU,MAAM,MAAM,EAAE;AAC5C,QAAI,CAAC,QAAQ,GAAG,EAAG,SAAQ,GAAG,IAAI,CAAC;AACnC,QAAI,CAAC,UAAU,GAAG,EAAG,WAAU,GAAG,IAAI,CAAC;AACvC,QAAI,MAAO,SAAQ,GAAG,EAAE,KAAK,KAAK;AAClC,QAAI,IAAK,WAAU,GAAG,EAAE,KAAK,GAAG;AAAA,EAClC;AACA,QAAM,SAAS,KACZ,IAAI,CAAC,MAAY,EAAE,iBAAiB,OAAO,EAAE,cAAc,IAAI,IAAK,EACpE,OAAO,CAACA,QAAqB,CAAC,CAACA,GAAE;AACpC,QAAM,eAAe,MAAM,KAAK,IAAI,IAAI,MAAM,CAAC;AAC/C,MAAI,SAAiC,CAAC;AACtC,MAAI,aAAa,QAAQ;AACvB,UAAM,gBAAgB,MAAM,GAAG;AAAA,MAC7B;AAAA,MACA,EAAE,IAAI,EAAE,KAAK,aAAoB,GAAG,WAAW,KAAK;AAAA,IACtD;AACA,aAAS,cAAc,OAA+B,CAAC,KAAK,QAAQ;AAClE,YAAM,QAAQ,KAAK,KAAK,OAAO,IAAI,EAAE,IAAI;AACzC,UAAI,CAAC,MAAO,QAAO;AACnB,YAAM,UAAW,KAAa;AAC9B,YAAM,UAAU,OAAO,YAAY,YAAY,QAAQ,SAAS,IAAI,UAAU;AAC9E,UAAI,KAAK,IAAI;AACb,aAAO;AAAA,IACT,GAAG,CAAC,CAAC;AAAA,EACP;AACA,QAAM,YAAY,KACf,IAAI,CAAC,MAAY,EAAE,WAAW,OAAO,EAAE,QAAQ,IAAI,IAAK,EACxD,OAAO,CAACA,QAAqB,CAAC,CAACA,GAAE;AACpC,QAAM,kBAAkB,MAAM,KAAK,IAAI,IAAI,SAAS,CAAC;AACrD,MAAI,YAAoC,CAAC;AACzC,MAAI,gBAAgB,QAAQ;AAC1B,UAAM,UAAU,MAAM,GAAG;AAAA,MACvB;AAAA,MACA,EAAE,IAAI,EAAE,KAAK,gBAAuB,GAAG,WAAW,KAAK;AAAA,IACzD;AACA,gBAAY,QAAQ,OAA+B,CAAC,KAAK,WAAW;AAClE,YAAM,WAAW,QAAQ,KAAK,OAAO,OAAO,EAAE,IAAI;AAClD,UAAI,CAAC,SAAU,QAAO;AACtB,YAAM,UAAW,QAAgB;AACjC,YAAM,aAAa,OAAO,YAAY,YAAY,QAAQ,SAAS,IAAI,UAAU;AACjF,UAAI,QAAQ,IAAI;AAChB,aAAO;AAAA,IACT,GAAG,CAAC,CAAC;AAAA,EACP;AACA,QAAM,eAA8C,CAAC;AACrD,QAAM,qBAAoD,CAAC;AAC3D,aAAW,KAAK,MAAM;AACpB,UAAM,MAAM,OAAO,EAAE,EAAE;AACvB,iBAAa,GAAG,IAAI,EAAE,WAAW,OAAO,EAAE,QAAQ,IAAI;AACtD,uBAAmB,GAAG,IAAI,EAAE,iBAAiB,OAAO,EAAE,cAAc,IAAI;AAAA,EAC1E;AACA,QAAM,WAAW,QAAQ,SACrB,MAAM,sBAAsB;AAAA,IAC1B;AAAA,IACA,UAAU,EAAE,KAAK;AAAA,IACjB,WAAW,QAAQ,IAAI,MAAM;AAAA,IAC7B,kBAAkB;AAAA,IAClB,wBAAwB;AAAA,IACxB,iBAAiB,oBAAoB,CAAC,iBAAiB,IAAI,KAAK,WAAW,CAAC,KAAK,QAAQ,IAAI,CAAC;AAAA,EAChG,CAAC,IACD,CAAC;AAEL,QAAM,QAAQ,KAAK,IAAI,CAAC,MAAW;AACjC,UAAM,MAAM,OAAO,EAAE,EAAE;AACvB,UAAM,QAAQ,EAAE,iBAAiB,OAAO,EAAE,cAAc,IAAI;AAC5D,WAAO;AAAA,MACL,IAAI;AAAA,MACJ,OAAO,OAAO,EAAE,KAAK;AAAA,MACrB,MAAM,EAAE,OAAO,OAAO,EAAE,IAAI,IAAI;AAAA,MAChC,gBAAgB;AAAA,MAChB,kBAAkB,QAAQ,OAAO,KAAK,KAAK,QAAQ;AAAA,MACnD,UAAU,EAAE,WAAW,OAAO,EAAE,QAAQ,IAAI;AAAA,MAC5C,YAAY,EAAE,WAAW,UAAU,OAAO,EAAE,QAAQ,CAAC,KAAK,OAAO,EAAE,QAAQ,IAAI;AAAA,MAC/E,OAAO,QAAQ,GAAG,KAAK,CAAC;AAAA,MACxB,SAAS,UAAU,GAAG,KAAK,CAAC;AAAA,MAC5B,GAAI,KAAK,EAAE,aAAa,CAAC,CAAC,EAAE,aAAa,IAAI,CAAC;AAAA,MAC9C,WAAW,EAAE,qBAAqB,OAAO,EAAE,UAAU,YAAY,IAAI;AAAA,MACrE,GAAI,SAAS,GAAG,KAAK,CAAC;AAAA,IACxB;AAAA,EACF,CAAC;AACD,QAAM,aAAa,KAAK,IAAI,GAAG,KAAK,KAAK,QAAQ,QAAQ,CAAC;AAC1D,QAAM,cAAc;AAAA,IAClB;AAAA,IACA;AAAA,IACA,SAAS;AAAA,IACT;AAAA,IACA,SAAS;AAAA,IACT,cAAc;AAAA,IACd,gBAAgB;AAAA,IAChB,UAAU,qBAAqB,KAAK,YAAY;AAAA,IAChD,OAAO,OAAO;AAAA,IACd,YAAY,KAAK,cAAc;AAAA,EACjC,CAAC;AACD,SAAO,aAAa,KAAK,EAAE,OAAO,OAAO,OAAO,YAAY,aAAa,CAAC;AAC5E;AAEO,MAAM,OAAO,OAAO,QAAiB;AAC1C,SAAO,KAAK,KAAK,GAAG;AACtB;AAEO,MAAM,MAAM,OAAO,QAAiB;AACzC,SAAO,KAAK,IAAI,GAAG;AACrB;AAEO,MAAM,SAAS,OAAO,QAAiB;AAC5C,QAAM,WAAW,IAAI,IAAI,IAAI,GAAG,EAAE,aAAa,IAAI,IAAI;AACvD,MAAI,UAAU;AACZ,QAAI;AACF,YAAM,gCAAgC,KAAK,QAAQ;AACnD,YAAM,0BAA0B,KAAK,QAAQ;AAAA,IAC/C,SAAS,KAAK;AACZ,UAAI,eAAe,eAAe;AAChC,eAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,MAC3D;AACA,YAAM;AAAA,IACR;AAAA,EACF;AACA,SAAO,KAAK,OAAO,GAAG;AACxB;AAEA,eAAe,0BACb,IACA,YACA,QACA,aACA,OAC0B;AAC1B,SAAO,kCAAkC;AAAA,IACvC,IAAI,GAAG,UAA+B;AAAA,IACtC;AAAA,IACA,OAAO;AAAA,IACP,QAAQ,QAAQ,CAAC,KAAK,IAAI;AAAA,IAC1B,OAAO,EAAE,UAAU,YAAY;AAAA,EACjC,CAAC;AACH;AAEA,eAAe,gCAAgC,KAAc,cAAsB;AACjF,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,IAAK,OAAM,IAAI,cAAc,KAAK,EAAE,OAAO,eAAe,CAAC;AACtE,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,QAAM,yCAAyC;AAAA,IAC7C;AAAA,IACA,aAAa,UAAU,QAAQ,aAAa;AAAA,IAC5C,aAAa,KAAK;AAAA,IAClB,UAAU,KAAK,YAAY;AAAA,IAC3B,gBAAgB,KAAK,SAAS;AAAA,IAC9B;AAAA,EACF,CAAC;AACH;AAEA,eAAe,0BAA0B,KAAc,cAAsB;AAC3E,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,IAAK,OAAM,IAAI,cAAc,KAAK,EAAE,OAAO,eAAe,CAAC;AACtE,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,QAAM,+BAA+B;AAAA,IACnC;AAAA,IACA,aAAa,UAAU,QAAQ,aAAa;AAAA,IAC5C,aAAa,KAAK;AAAA,IAClB,UAAU,KAAK,YAAY;AAAA,IAC3B,gBAAgB,KAAK,SAAS;AAAA,IAC9B;AAAA,EACF,CAAC;AACH;AAEA,SAAS,sBAAsB,QAAiB,KAA6B;AAC3E,QAAM,aAAa,OAAQ,MAAqD;AAChF,MAAI,WAAY,QAAO;AACvB,QAAM,YAAY;AAClB,SAAO,OAAO,WAAW,KAAK,KAAK,OAAO,WAAW,IAAI;AAC3D;AAEA,SAAS,OAAO,QAAmE;AACjF,QAAM,QAAQ,QAAQ;AACtB,SAAO,OAAO,UAAU,YAAY,MAAM,SAAS,IAAI,QAAQ;AACjE;AAEA,eAAe,qBAAqB,KAAc,OAAgB,SAAkC;AAClG,MAAI,CAAC,MAAM,QAAQ,KAAK,EAAG;AAC3B,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,IAAK,OAAM,IAAI,cAAc,KAAK,EAAE,OAAO,eAAe,CAAC;AACtE,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,QAAM,WAAW,MAAM,kCAAkC,IAAI,SAAS,KAAK,YAAY,IAAI;AAC3F,QAAM,8BAA8B;AAAA,IAClC;AAAA,IACA,aAAa,UAAU,QAAQ,aAAa;AAAA,IAC5C,aAAa,KAAK;AAAA,IAClB;AAAA,IACA,gBAAgB,KAAK,SAAS;AAAA,IAC9B,YAAY;AAAA,EACd,CAAC;AACH;AAEA,eAAe,kCACb,IACA,SACA,kBACwB;AACxB,QAAM,iBAAiB,OAAO,QAAQ,mBAAmB,WAAW,QAAQ,iBAAiB;AAC7F,MAAI,gBAAgB;AAClB,UAAM,eAAe,MAAM;AAAA,MACzB;AAAA,MACA;AAAA,MACA,EAAE,IAAI,eAAe;AAAA,MACrB,EAAE,UAAU,CAAC,QAAQ,EAAE;AAAA,MACvB,EAAE,UAAU,MAAM,eAAe;AAAA,IACnC;AACA,WAAO,cAAc,QAAQ,KAAK,OAAO,aAAa,OAAO,EAAE,IAAI;AAAA,EACrE;AAEA,QAAM,SAAS,OAAO,QAAQ,OAAO,WAAW,QAAQ,KAAK;AAC7D,MAAI,QAAQ;AACV,UAAM,OAAO,MAAM;AAAA,MACjB;AAAA,MACA;AAAA,MACA,EAAE,IAAI,QAAQ,WAAW,KAAK;AAAA,MAC9B,CAAC;AAAA,MACD,EAAE,UAAU,MAAM,gBAAgB,KAAK;AAAA,IACzC;AACA,WAAO,MAAM,WAAW,OAAO,KAAK,QAAQ,IAAI;AAAA,EAClD;AAEA,SAAO;AACT;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aACE;AAAA,MACF,OAAO;AAAA,MACP,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,mBAAmB,QAAQ,uBAAuB;AAAA,MAChF;AAAA,IACF;AAAA,IACA,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa;AAAA,MACb,aAAa;AAAA,QACX,aAAa;AAAA,QACb,QAAQ;AAAA,MACV;AAAA,MACA,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAAA,QAC5C;AAAA,MACF;AAAA,MACA,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,sCAAsC,QAAQ,oBAAoB;AAAA,QAC9F,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,oBAAoB;AAAA,QACxE,EAAE,QAAQ,KAAK,aAAa,wCAAwC,QAAQ,oBAAoB;AAAA,MAClG;AAAA,IACF;AAAA,IACA,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aAAa;AAAA,MACb,aAAa;AAAA,QACX,aAAa;AAAA,QACb,QAAQ;AAAA,MACV;AAAA,MACA,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,iBAAiB;AAAA,MACvE;AAAA,MACA,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,mBAAmB,QAAQ,oBAAoB;AAAA,QAC3E,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,oBAAoB;AAAA,QACxE,EAAE,QAAQ,KAAK,aAAa,wCAAwC,QAAQ,oBAAoB;AAAA,QAChG,EAAE,QAAQ,KAAK,aAAa,kBAAkB,QAAQ,oBAAoB;AAAA,MAC5E;AAAA,IACF;AAAA,IACA,QAAQ;AAAA,MACN,SAAS;AAAA,MACT,aAAa;AAAA,MACb,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,iBAAiB,EAAE,CAAC;AAAA,MACrE,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,iBAAiB;AAAA,MACvE;AAAA,MACA,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,0BAA0B,QAAQ,oBAAoB;AAAA,QAClF,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,oBAAoB;AAAA,QACxE,EAAE,QAAQ,KAAK,aAAa,kBAAkB,QAAQ,oBAAoB;AAAA,MAC5E;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["/* eslint-disable @typescript-eslint/no-explicit-any */\nimport { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { logCrudAccess, makeCrudRoute } from '@open-mercato/shared/lib/crud/factory'\nimport { CrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { User, Role, UserRole } from '@open-mercato/core/modules/auth/data/entities'\nimport type { RbacService } from '@open-mercato/core/modules/auth/services/rbacService'\nimport { Organization, Tenant } from '@open-mercato/core/modules/directory/data/entities'\nimport { E } from '#generated/entities.ids.generated'\nimport { loadCustomFieldValues } from '@open-mercato/shared/lib/crud/custom-fields'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { userCrudEvents, userCrudIndexer } from '@open-mercato/core/modules/auth/commands/users'\nimport {\n  assertActorCanAccessUserTarget,\n  assertActorCanGrantRoleTokens,\n  assertActorCanModifySuperAdminUserTarget,\n  listSuperAdminUserIds,\n} from '@open-mercato/core/modules/auth/lib/grantChecks'\nimport { findOneWithDecryption, findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { buildPasswordSchema } from '@open-mercato/shared/lib/auth/passwordPolicy'\nimport { escapeLikePattern } from '@open-mercato/shared/lib/db/escapeLikePattern'\nimport { parseBooleanFlag } from '@open-mercato/shared/lib/boolean'\nimport { findEntityIdsBySearchTokensCompat, type SearchTokenDatabase } from '@open-mercato/shared/lib/search/tokenLookup'\nimport { normalizeDisplayNameInput } from '@open-mercato/core/modules/auth/lib/displayName'\nimport {\n  getSelectedTenantFromRequest,\n  resolveOrganizationScopeForRequest,\n} from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('auth').child({ component: 'users' })\n\nconst querySchema = z.object({\n  id: z.string().uuid().optional(),\n  page: z.coerce.number().min(1).default(1),\n  pageSize: z.coerce.number().min(1).max(100).default(50),\n  search: z.string().optional(),\n  name: z.string().optional(),\n  organizationId: z.string().uuid().optional(),\n  scopeToActiveOrganization: z.boolean().optional(),\n  roleIds: z.array(z.string().uuid()).optional(),\n}).passthrough()\n\nconst rawBodySchema = z.object({}).passthrough()\n\nconst passwordSchema = buildPasswordSchema()\n\nconst displayNameSchema = z.preprocess(\n  normalizeDisplayNameInput,\n  z.string().trim().min(1).max(120).nullable().optional(),\n)\n\nconst userCreateSchema = z.object({\n  email: z.string().email(),\n  name: displayNameSchema,\n  password: passwordSchema.optional(),\n  sendInviteEmail: z.boolean().optional(),\n  organizationId: z.string().uuid(),\n  roles: z.array(z.string()).optional(),\n}).refine(\n  (data) => data.password || data.sendInviteEmail,\n  { message: 'Either password or sendInviteEmail is required', path: ['password'] },\n)\n\nconst userUpdateSchema = z.object({\n  id: z.string().uuid(),\n  email: z.string().email().optional(),\n  name: displayNameSchema,\n  password: passwordSchema.optional(),\n  organizationId: z.string().uuid().optional(),\n  roles: z.array(z.string()).optional(),\n})\n\nconst userListItemSchema = z.object({\n  id: z.string().uuid(),\n  email: z.string().email(),\n  name: z.string().nullable(),\n  organizationId: z.string().uuid().nullable(),\n  organizationName: z.string().nullable(),\n  tenantId: z.string().uuid().nullable(),\n  tenantName: z.string().nullable(),\n  roles: z.array(z.string()),\n  roleIds: z.array(z.string().uuid()).optional(),\n  hasPassword: z.boolean().optional(),\n  updatedAt: z.string().nullable().optional(),\n})\n\nconst userListResponseSchema = z.object({\n  items: z.array(userListItemSchema),\n  total: z.number().int().nonnegative(),\n  totalPages: z.number().int().positive(),\n  isSuperAdmin: z.boolean().optional(),\n})\n\nconst okResponseSchema = z.object({ ok: z.literal(true) })\n\nconst errorResponseSchema = z.object({ error: z.string() })\n\ntype CrudInput = Record<string, unknown>\ntype UserListFilter = Record<string, unknown>\n\n// UserRole carries no tenant/organization columns of its own, so the caller's scope has to be\n// expressed as a predicate on the `user` relation \u2014 MikroORM compiles that into a database-side\n// join against `users` with the scope predicates in the WHERE clause, keeping the link lookup\n// bounded to the scope instead of every tenant holding the role.\nfunction buildRoleLinkFilter(\n  roleIdList: string[],\n  userScope: UserListFilter[],\n  candidateUserIds: Set<string> | null,\n): UserListFilter {\n  const scope = candidateUserIds\n    ? [...userScope, { id: { $in: Array.from(candidateUserIds) } }]\n    : userScope\n  return {\n    role: { $in: roleIdList },\n    deletedAt: null,\n    user: scope.length > 1 ? { $and: scope } : scope[0],\n  }\n}\n\nconst routeMetadata = {\n  GET: { requireAuth: true, requireFeatures: ['auth.users.list'] },\n  POST: { requireAuth: true, requireFeatures: ['auth.users.create'] },\n  PUT: { requireAuth: true, requireFeatures: ['auth.users.edit'] },\n  DELETE: { requireAuth: true, requireFeatures: ['auth.users.delete'] },\n}\n\nexport const metadata = routeMetadata\n\nconst crud = makeCrudRoute<CrudInput, CrudInput, Record<string, unknown>>({\n  metadata: routeMetadata,\n  orm: {\n    entity: User,\n    idField: 'id',\n    orgField: null,\n    tenantField: null,\n    softDeleteField: 'deletedAt',\n  },\n  events: userCrudEvents,\n  indexer: userCrudIndexer,\n  actions: {\n    create: {\n      commandId: 'auth.users.create',\n      schema: rawBodySchema,\n      mapInput: async ({ parsed, ctx }) => {\n        if (ctx.request) {\n          await assertCanAssignRoles(ctx.request, parsed.roles, parsed)\n        }\n        return parsed\n      },\n      response: ({ result }) => ({\n        id: String(result.user.id),\n        ...(result.warning ? { _warning: result.warning } : {}),\n      }),\n      status: 201,\n    },\n    update: {\n      commandId: 'auth.users.update',\n      schema: rawBodySchema,\n      mapInput: async ({ parsed, ctx }) => {\n        if (ctx.request) {\n          if (typeof parsed.id === 'string' && parsed.id.length) {\n            await assertCanModifySuperAdminTarget(ctx.request, parsed.id)\n            await assertCanAccessUserTarget(ctx.request, parsed.id)\n          }\n          await assertCanAssignRoles(ctx.request, parsed.roles, parsed)\n        }\n        return parsed\n      },\n      response: () => ({ ok: true }),\n    },\n    delete: {\n      commandId: 'auth.users.delete',\n      mapInput: async ({ parsed, raw, ctx }) => {\n        const targetId = resolveDeleteTargetId(parsed, raw)\n        if (ctx.request && targetId) {\n          await assertCanModifySuperAdminTarget(ctx.request, targetId)\n          await assertCanAccessUserTarget(ctx.request, targetId)\n        }\n        return parsed\n      },\n      response: () => ({ ok: true }),\n    },\n  },\n})\n\nexport async function GET(req: Request) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth) return NextResponse.json({ items: [], total: 0, totalPages: 1 })\n  const url = new URL(req.url)\n  const rawRoleIds = url.searchParams.getAll('roleId').filter((id): id is string => typeof id === 'string' && id.trim().length > 0)\n  const parsed = querySchema.safeParse({\n    id: url.searchParams.get('id') || undefined,\n    page: url.searchParams.get('page') || undefined,\n    pageSize: url.searchParams.get('pageSize') || undefined,\n    search: url.searchParams.get('search') || undefined,\n    name: url.searchParams.get('name') || undefined,\n    organizationId: url.searchParams.get('organizationId') || undefined,\n    scopeToActiveOrganization: parseBooleanFlag(url.searchParams.get('scopeToActiveOrganization') || undefined),\n    roleIds: rawRoleIds.length ? rawRoleIds : undefined,\n  })\n  if (!parsed.success) return NextResponse.json({ items: [], total: 0, totalPages: 1 })\n  const container = await createRequestContainer()\n  const em = (container.resolve('em') as EntityManager)\n  let isSuperAdmin = auth.isSuperAdmin === true\n  try {\n    if (auth.sub) {\n      const rbacService = container.resolve('rbacService') as any\n      const acl = await rbacService.loadAcl(auth.sub, { tenantId: auth.tenantId ?? null, organizationId: auth.orgId ?? null })\n      isSuperAdmin = isSuperAdmin || !!acl?.isSuperAdmin\n    }\n  } catch (err) {\n    logger.error('Failed to resolve rbac', { err })\n  }\n  const { id, page, pageSize, search, name, organizationId, scopeToActiveOrganization, roleIds } = parsed.data\n  const filters: any[] = [{ deletedAt: null }]\n  const actorTenantId = auth.tenantId ? String(auth.tenantId) : null\n  let effectiveTenantId: string | null = null\n  let effectiveOrganizationIds: string[] | null = null\n  let effectiveSelectedOrganizationId: string | null = null\n  let usesSelectedTenantScope = false\n  if (!isSuperAdmin) {\n    if (!actorTenantId) {\n      return NextResponse.json({ items: [], total: 0, totalPages: 1, isSuperAdmin })\n    }\n    effectiveTenantId = actorTenantId\n    const superAdminUserIds = await listSuperAdminUserIds(em, actorTenantId)\n    if (superAdminUserIds.size) {\n      filters.push({ id: { $nin: Array.from(superAdminUserIds) as any } })\n    }\n  } else {\n    const selectedTenantId = getSelectedTenantFromRequest(req)\n    if (typeof selectedTenantId === 'string' && selectedTenantId.trim().length > 0) {\n      const scope = await resolveOrganizationScopeForRequest({\n        container,\n        auth,\n        request: req,\n        tenantId: selectedTenantId.trim(),\n      })\n      if (!scope.tenantId) {\n        return NextResponse.json({ items: [], total: 0, totalPages: 1, isSuperAdmin })\n      }\n      effectiveTenantId = scope.tenantId\n      effectiveSelectedOrganizationId = scope.selectedId\n      usesSelectedTenantScope = true\n      if (Array.isArray(scope.filterIds)) {\n        if (scope.filterIds.length === 0) {\n          return NextResponse.json({ items: [], total: 0, totalPages: 1, isSuperAdmin })\n        }\n        effectiveOrganizationIds = scope.filterIds\n      }\n    }\n  }\n  if (effectiveTenantId) {\n    filters.push({ tenantId: effectiveTenantId })\n  }\n  if (effectiveOrganizationIds) {\n    filters.push({ organizationId: { $in: effectiveOrganizationIds as any } })\n  }\n  const scopeOrganizationId = usesSelectedTenantScope\n    ? effectiveSelectedOrganizationId\n    : auth.orgId ?? null\n  if (organizationId) filters.push({ organizationId })\n  // Recipient/assignee pickers scope to the caller's active organization so they never\n  // suggest users outside it. A message composed here is stamped with the caller's\n  // active org (auth.orgId), and the message detail endpoint enforces\n  // hasOrganizationAccess(scope.organizationId, message.organizationId); scoping the\n  // suggestions to the same org keeps a picked recipient able to open what they were sent.\n  if (scopeToActiveOrganization) filters.push({ organizationId: auth.orgId ?? null })\n  const trimmedName = typeof name === 'string' ? name.trim() : ''\n  if (trimmedName) {\n    const searchPattern = `%${escapeLikePattern(trimmedName)}%`\n    const displayNameFilters: UserListFilter[] = [{ name: { $ilike: searchPattern } }]\n    const nameTokenScope: string | null | undefined = isSuperAdmin ? (effectiveTenantId ?? undefined) : auth.tenantId ?? null\n    const matchedDisplayNameIds = await findUserIdsBySearchTokens(em, E.auth.user, trimmedName, nameTokenScope, 'name')\n    if (matchedDisplayNameIds && matchedDisplayNameIds.length) {\n      displayNameFilters.push({ id: { $in: matchedDisplayNameIds } })\n    }\n    filters.push(displayNameFilters.length > 1 ? { $or: displayNameFilters } : displayNameFilters[0])\n  }\n  let idFilter: Set<string> | null = id ? new Set([id]) : null\n  if (Array.isArray(roleIds) && roleIds.length > 0) {\n    const uniqueRoleIds = Array.from(new Set(roleIds))\n    const linksForRoles = await em.find(\n      UserRole,\n      buildRoleLinkFilter(uniqueRoleIds, filters, idFilter) as any,\n    )\n    const roleUserIds = new Set<string>()\n    for (const link of linksForRoles) {\n      const uid = String((link as any).user?.id || (link as any).user || '')\n      if (uid) roleUserIds.add(uid)\n    }\n    if (roleUserIds.size === 0) return NextResponse.json({ items: [], total: 0, totalPages: 1, isSuperAdmin })\n    if (idFilter) {\n      // buildRoleLinkFilter already constrains the lookup to `user.id IN idFilter`, so this\n      // intersection is enforced database-side; the loop stays as an application-level backstop\n      // so the `?id=` + `?roleId=` contract does not depend on that predicate alone.\n      for (const uid of Array.from(idFilter)) {\n        if (!roleUserIds.has(uid)) idFilter.delete(uid)\n      }\n    } else {\n      idFilter = roleUserIds\n    }\n    if (!idFilter || idFilter.size === 0) return NextResponse.json({ items: [], total: 0, totalPages: 1, isSuperAdmin })\n  }\n  const trimmedSearch = typeof search === 'string' ? search.trim() : ''\n  if (trimmedSearch) {\n    // Email is encrypted at rest, so plaintext search must go through search_tokens.\n    const tenantScope: string | null | undefined = isSuperAdmin ? (effectiveTenantId ?? undefined) : auth.tenantId ?? null\n    const searchFilters: any[] = []\n\n    const matchedIds = await findUserIdsBySearchTokens(em, E.auth.user, trimmedSearch, tenantScope)\n    if (matchedIds && matchedIds.length) {\n      searchFilters.push({ id: { $in: matchedIds as any } })\n    }\n\n    const searchPattern = `%${escapeLikePattern(trimmedSearch)}%`\n    const organizationSearchFilters: any[] = [\n      { deletedAt: null },\n      { name: { $ilike: searchPattern } },\n    ]\n    if (tenantScope) {\n      organizationSearchFilters.push({ tenant: tenantScope })\n    }\n    const matchingOrganizations = await em.find(\n      Organization,\n      organizationSearchFilters.length > 1 ? { $and: organizationSearchFilters } : organizationSearchFilters[0],\n    )\n    const matchingOrganizationIds = matchingOrganizations\n      .map((org) => (org?.id ? String(org.id) : null))\n      .filter((orgId): orgId is string => typeof orgId === 'string' && orgId.length > 0)\n    if (matchingOrganizationIds.length) {\n      searchFilters.push({ organizationId: { $in: matchingOrganizationIds as any } })\n    }\n\n    const roleSearchFilters: any[] = [\n      { deletedAt: null },\n      { name: { $ilike: searchPattern } },\n    ]\n    if (tenantScope) {\n      roleSearchFilters.push({ $or: [{ tenantId: tenantScope }, { tenantId: null }] })\n    }\n    const matchingRoles = await em.find(\n      Role,\n      roleSearchFilters.length > 1 ? { $and: roleSearchFilters } : roleSearchFilters[0],\n    )\n    const matchingRoleIds = matchingRoles\n      .map((role) => (role?.id ? String(role.id) : null))\n      .filter((roleId): roleId is string => typeof roleId === 'string' && roleId.length > 0)\n    if (matchingRoleIds.length) {\n      const roleSearchLinks = await em.find(\n        UserRole,\n        buildRoleLinkFilter(matchingRoleIds, filters, idFilter) as any,\n      )\n      const matchingRoleUserIds = Array.from(new Set(\n        roleSearchLinks\n          .map((link) => {\n            const userRef = (link as any).user\n            const userId = userRef?.id ?? userRef\n            return userId ? String(userId) : null\n          })\n          .filter((userId): userId is string => typeof userId === 'string' && userId.length > 0),\n      ))\n      if (matchingRoleUserIds.length) {\n        searchFilters.push({ id: { $in: matchingRoleUserIds as any } })\n      }\n    }\n\n    if (!searchFilters.length) {\n      return NextResponse.json({ items: [], total: 0, totalPages: 1, isSuperAdmin })\n    }\n\n    filters.push(searchFilters.length > 1 ? { $or: searchFilters } : searchFilters[0])\n  }\n  if (idFilter && idFilter.size) {\n    filters.push({ id: { $in: Array.from(idFilter) as any } })\n  } else if (id) {\n    filters.push({ id })\n  }\n  const where = filters.length > 1 ? { $and: filters } : filters[0]\n  const [rows, count] = await em.findAndCount(User, where, { limit: pageSize, offset: (page - 1) * pageSize })\n  const userIds = rows.map((u: any) => u.id)\n  const links = userIds.length\n    ? await findWithDecryption(\n        em,\n        UserRole,\n        { user: { $in: userIds as any }, deletedAt: null } as any,\n        { populate: ['role'] },\n        {\n          tenantId: effectiveTenantId ?? auth.tenantId ?? null,\n          organizationId: scopeOrganizationId,\n        },\n      )\n    : []\n  const roleMap: Record<string, string[]> = {}\n  const roleIdMap: Record<string, string[]> = {}\n  for (const l of links) {\n    const uid = String((l as any).user?.id || (l as any).user)\n    const rname = String((l as any).role?.name || '')\n    const rid = String((l as any).role?.id ?? '')\n    if (!roleMap[uid]) roleMap[uid] = []\n    if (!roleIdMap[uid]) roleIdMap[uid] = []\n    if (rname) roleMap[uid].push(rname)\n    if (rid) roleIdMap[uid].push(rid)\n  }\n  const orgIds = rows\n    .map((u: any) => (u.organizationId ? String(u.organizationId) : null))\n    .filter((id): id is string => !!id)\n  const uniqueOrgIds = Array.from(new Set(orgIds))\n  let orgMap: Record<string, string> = {}\n  if (uniqueOrgIds.length) {\n    const organizations = await em.find(\n      Organization,\n      { id: { $in: uniqueOrgIds as any }, deletedAt: null },\n    )\n    orgMap = organizations.reduce<Record<string, string>>((acc, org) => {\n      const orgId = org?.id ? String(org.id) : null\n      if (!orgId) return acc\n      const rawName = (org as any)?.name\n      const orgName = typeof rawName === 'string' && rawName.length > 0 ? rawName : orgId\n      acc[orgId] = orgName\n      return acc\n    }, {})\n  }\n  const tenantIds = rows\n    .map((u: any) => (u.tenantId ? String(u.tenantId) : null))\n    .filter((id): id is string => !!id)\n  const uniqueTenantIds = Array.from(new Set(tenantIds))\n  let tenantMap: Record<string, string> = {}\n  if (uniqueTenantIds.length) {\n    const tenants = await em.find(\n      Tenant,\n      { id: { $in: uniqueTenantIds as any }, deletedAt: null },\n    )\n    tenantMap = tenants.reduce<Record<string, string>>((acc, tenant) => {\n      const tenantId = tenant?.id ? String(tenant.id) : null\n      if (!tenantId) return acc\n      const rawName = (tenant as any)?.name\n      const tenantName = typeof rawName === 'string' && rawName.length > 0 ? rawName : tenantId\n      acc[tenantId] = tenantName\n      return acc\n    }, {})\n  }\n  const tenantByUser: Record<string, string | null> = {}\n  const organizationByUser: Record<string, string | null> = {}\n  for (const u of rows) {\n    const uid = String(u.id)\n    tenantByUser[uid] = u.tenantId ? String(u.tenantId) : null\n    organizationByUser[uid] = u.organizationId ? String(u.organizationId) : null\n  }\n  const cfByUser = userIds.length\n    ? await loadCustomFieldValues({\n        em,\n        entityId: E.auth.user,\n        recordIds: userIds.map(String),\n        tenantIdByRecord: tenantByUser,\n        organizationIdByRecord: organizationByUser,\n        tenantFallbacks: effectiveTenantId ? [effectiveTenantId] : auth.tenantId ? [auth.tenantId] : [],\n      })\n    : {}\n\n  const items = rows.map((u: any) => {\n    const uid = String(u.id)\n    const orgId = u.organizationId ? String(u.organizationId) : null\n    return {\n      id: uid,\n      email: String(u.email),\n      name: u.name ? String(u.name) : null,\n      organizationId: orgId,\n      organizationName: orgId ? orgMap[orgId] ?? orgId : null,\n      tenantId: u.tenantId ? String(u.tenantId) : null,\n      tenantName: u.tenantId ? tenantMap[String(u.tenantId)] ?? String(u.tenantId) : null,\n      roles: roleMap[uid] || [],\n      roleIds: roleIdMap[uid] || [],\n      ...(id ? { hasPassword: !!u.passwordHash } : {}),\n      updatedAt: u.updatedAt instanceof Date ? u.updatedAt.toISOString() : null,\n      ...(cfByUser[uid] || {}),\n    }\n  })\n  const totalPages = Math.max(1, Math.ceil(count / pageSize))\n  await logCrudAccess({\n    container,\n    auth,\n    request: req,\n    items,\n    idField: 'id',\n    resourceKind: 'auth.user',\n    organizationId: effectiveSelectedOrganizationId,\n    tenantId: effectiveTenantId ?? auth.tenantId ?? null,\n    query: parsed.data,\n    accessType: id ? 'read:item' : undefined,\n  })\n  return NextResponse.json({ items, total: count, totalPages, isSuperAdmin })\n}\n\nexport const POST = async (req: Request) => {\n  return crud.POST(req)\n}\n\nexport const PUT = async (req: Request) => {\n  return crud.PUT(req)\n}\n\nexport const DELETE = async (req: Request) => {\n  const targetId = new URL(req.url).searchParams.get('id')\n  if (targetId) {\n    try {\n      await assertCanModifySuperAdminTarget(req, targetId)\n      await assertCanAccessUserTarget(req, targetId)\n    } catch (err) {\n      if (err instanceof CrudHttpError) {\n        return NextResponse.json(err.body, { status: err.status })\n      }\n      throw err\n    }\n  }\n  return crud.DELETE(req)\n}\n\nasync function findUserIdsBySearchTokens(\n  em: EntityManager,\n  entityType: string,\n  search: string,\n  tenantScope: string | null | undefined,\n  field?: string,\n): Promise<string[] | null> {\n  return findEntityIdsBySearchTokensCompat({\n    db: em.getKysely<SearchTokenDatabase>(),\n    entityType,\n    query: search,\n    fields: field ? [field] : undefined,\n    scope: { tenantId: tenantScope },\n  })\n}\n\nasync function assertCanModifySuperAdminTarget(req: Request, targetUserId: string) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.sub) throw new CrudHttpError(401, { error: 'Unauthorized' })\n  const container = await createRequestContainer()\n  const em = container.resolve('em') as EntityManager\n  await assertActorCanModifySuperAdminUserTarget({\n    em,\n    rbacService: container.resolve('rbacService') as RbacService,\n    actorUserId: auth.sub,\n    tenantId: auth.tenantId ?? null,\n    organizationId: auth.orgId ?? null,\n    targetUserId,\n  })\n}\n\nasync function assertCanAccessUserTarget(req: Request, targetUserId: string) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.sub) throw new CrudHttpError(401, { error: 'Unauthorized' })\n  const container = await createRequestContainer()\n  const em = container.resolve('em') as EntityManager\n  await assertActorCanAccessUserTarget({\n    em,\n    rbacService: container.resolve('rbacService') as RbacService,\n    actorUserId: auth.sub,\n    tenantId: auth.tenantId ?? null,\n    organizationId: auth.orgId ?? null,\n    targetUserId,\n  })\n}\n\nfunction resolveDeleteTargetId(parsed: unknown, raw: unknown): string | null {\n  const fromParsed = readId((parsed as Record<string, unknown> | null | undefined))\n  if (fromParsed) return fromParsed\n  const rawRecord = raw as { body?: Record<string, unknown>; query?: Record<string, unknown> } | null | undefined\n  return readId(rawRecord?.query) ?? readId(rawRecord?.body)\n}\n\nfunction readId(record: Record<string, unknown> | null | undefined): string | null {\n  const value = record?.id\n  return typeof value === 'string' && value.length > 0 ? value : null\n}\n\nasync function assertCanAssignRoles(req: Request, roles: unknown, payload: Record<string, unknown>) {\n  if (!Array.isArray(roles)) return\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.sub) throw new CrudHttpError(401, { error: 'Unauthorized' })\n  const container = await createRequestContainer()\n  const em = container.resolve('em') as EntityManager\n  const tenantId = await resolveTargetTenantIdForRoleGrant(em, payload, auth.tenantId ?? null)\n  await assertActorCanGrantRoleTokens({\n    em,\n    rbacService: container.resolve('rbacService') as RbacService,\n    actorUserId: auth.sub,\n    tenantId,\n    organizationId: auth.orgId ?? null,\n    roleTokens: roles,\n  })\n}\n\nasync function resolveTargetTenantIdForRoleGrant(\n  em: EntityManager,\n  payload: Record<string, unknown>,\n  fallbackTenantId: string | null,\n): Promise<string | null> {\n  const organizationId = typeof payload.organizationId === 'string' ? payload.organizationId : null\n  if (organizationId) {\n    const organization = await findOneWithDecryption(\n      em,\n      Organization,\n      { id: organizationId },\n      { populate: ['tenant'] },\n      { tenantId: null, organizationId },\n    )\n    return organization?.tenant?.id ? String(organization.tenant.id) : fallbackTenantId\n  }\n\n  const userId = typeof payload.id === 'string' ? payload.id : null\n  if (userId) {\n    const user = await findOneWithDecryption(\n      em,\n      User,\n      { id: userId, deletedAt: null },\n      {},\n      { tenantId: null, organizationId: null },\n    )\n    return user?.tenantId ? String(user.tenantId) : fallbackTenantId\n  }\n\n  return fallbackTenantId\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Authentication & Accounts',\n  summary: 'User management',\n  methods: {\n    GET: {\n      summary: 'List users',\n      description:\n        'Returns users for the effective selected tenant and organization scope. Search matches email, organization name, and role name. Super administrators may scope the response via the topbar context, organization filters, or role filters. Pass scopeToActiveOrganization=1 to restrict results to the caller\\'s active organization (used by recipient/assignee pickers so suggestions stay within the org that owns the resulting record).',\n      query: querySchema,\n      responses: [\n        { status: 200, description: 'User collection', schema: userListResponseSchema },\n      ],\n    },\n    POST: {\n      summary: 'Create user',\n      description: 'Creates a new confirmed user within the specified organization, optional display name, and optional roles.',\n      requestBody: {\n        contentType: 'application/json',\n        schema: userCreateSchema,\n      },\n      responses: [\n        {\n          status: 201,\n          description: 'User created',\n          schema: z.object({ id: z.string().uuid() }),\n        },\n      ],\n      errors: [\n        { status: 400, description: 'Invalid payload or duplicate email', schema: errorResponseSchema },\n        { status: 401, description: 'Unauthorized', schema: errorResponseSchema },\n        { status: 403, description: 'Attempted to assign privileged roles', schema: errorResponseSchema },\n      ],\n    },\n    PUT: {\n      summary: 'Update user',\n      description: 'Updates profile fields including display name, organization assignment, credentials, or role memberships.',\n      requestBody: {\n        contentType: 'application/json',\n        schema: userUpdateSchema,\n      },\n      responses: [\n        { status: 200, description: 'User updated', schema: okResponseSchema },\n      ],\n      errors: [\n        { status: 400, description: 'Invalid payload', schema: errorResponseSchema },\n        { status: 401, description: 'Unauthorized', schema: errorResponseSchema },\n        { status: 403, description: 'Attempted to assign privileged roles', schema: errorResponseSchema },\n        { status: 404, description: 'User not found', schema: errorResponseSchema },\n      ],\n    },\n    DELETE: {\n      summary: 'Delete user',\n      description: 'Deletes a user by identifier. Undo support is provided via the command bus.',\n      query: z.object({ id: z.string().uuid().describe('User identifier') }),\n      responses: [\n        { status: 200, description: 'User deleted', schema: okResponseSchema },\n      ],\n      errors: [\n        { status: 400, description: 'User cannot be deleted', schema: errorResponseSchema },\n        { status: 401, description: 'Unauthorized', schema: errorResponseSchema },\n        { status: 404, description: 'User not found', schema: errorResponseSchema },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AACA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAElB,SAAS,eAAe,qBAAqB;AAC7C,SAAS,qBAAqB;AAC9B,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AACvC,SAAS,MAAM,MAAM,gBAAgB;AAErC,SAAS,cAAc,cAAc;AACrC,SAAS,SAAS;AAClB,SAAS,6BAA6B;AAEtC,SAAS,gBAAgB,uBAAuB;AAChD;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,uBAAuB,0BAA0B;AAC1D,SAAS,2BAA2B;AACpC,SAAS,yBAAyB;AAClC,SAAS,wBAAwB;AACjC,SAAS,yCAAmE;AAC5E,SAAS,iCAAiC;AAC1C;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,MAAM,EAAE,MAAM,EAAE,WAAW,QAAQ,CAAC;AAEhE,MAAM,cAAc,EAAE,OAAO;AAAA,EAC3B,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC/B,MAAM,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,QAAQ,CAAC;AAAA,EACxC,UAAU,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,QAAQ,EAAE;AAAA,EACtD,QAAQ,EAAE,OAAO,EAAE,SAAS;AAAA,EAC5B,MAAM,EAAE,OAAO,EAAE,SAAS;AAAA,EAC1B,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC3C,2BAA2B,EAAE,QAAQ,EAAE,SAAS;AAAA,EAChD,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,SAAS;AAC/C,CAAC,EAAE,YAAY;AAEf,MAAM,gBAAgB,EAAE,OAAO,CAAC,CAAC,EAAE,YAAY;AAE/C,MAAM,iBAAiB,oBAAoB;AAE3C,MAAM,oBAAoB,EAAE;AAAA,EAC1B;AAAA,EACA,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,SAAS,EAAE,SAAS;AACxD;AAEA,MAAM,mBAAmB,EAAE,OAAO;AAAA,EAChC,OAAO,EAAE,OAAO,EAAE,MAAM;AAAA,EACxB,MAAM;AAAA,EACN,UAAU,eAAe,SAAS;AAAA,EAClC,iBAAiB,EAAE,QAAQ,EAAE,SAAS;AAAA,EACtC,gBAAgB,EAAE,OAAO,EAAE,KAAK;AAAA,EAChC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,SAAS;AACtC,CAAC,EAAE;AAAA,EACD,CAAC,SAAS,KAAK,YAAY,KAAK;AAAA,EAChC,EAAE,SAAS,kDAAkD,MAAM,CAAC,UAAU,EAAE;AAClF;AAEA,MAAM,mBAAmB,EAAE,OAAO;AAAA,EAChC,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS;AAAA,EACnC,MAAM;AAAA,EACN,UAAU,eAAe,SAAS;AAAA,EAClC,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC3C,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,SAAS;AACtC,CAAC;AAED,MAAM,qBAAqB,EAAE,OAAO;AAAA,EAClC,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,OAAO,EAAE,OAAO,EAAE,MAAM;AAAA,EACxB,MAAM,EAAE,OAAO,EAAE,SAAS;AAAA,EAC1B,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC3C,kBAAkB,EAAE,OAAO,EAAE,SAAS;AAAA,EACtC,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACrC,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,EAChC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC;AAAA,EACzB,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,SAAS;AAAA,EAC7C,aAAa,EAAE,QAAQ,EAAE,SAAS;AAAA,EAClC,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAC5C,CAAC;AAED,MAAM,yBAAyB,EAAE,OAAO;AAAA,EACtC,OAAO,EAAE,MAAM,kBAAkB;AAAA,EACjC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY;AAAA,EACpC,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS;AAAA,EACtC,cAAc,EAAE,QAAQ,EAAE,SAAS;AACrC,CAAC;AAED,MAAM,mBAAmB,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,IAAI,EAAE,CAAC;AAEzD,MAAM,sBAAsB,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAS1D,SAAS,oBACP,YACA,WACA,kBACgB;AAChB,QAAM,QAAQ,mBACV,CAAC,GAAG,WAAW,EAAE,IAAI,EAAE,KAAK,MAAM,KAAK,gBAAgB,EAAE,EAAE,CAAC,IAC5D;AACJ,SAAO;AAAA,IACL,MAAM,EAAE,KAAK,WAAW;AAAA,IACxB,WAAW;AAAA,IACX,MAAM,MAAM,SAAS,IAAI,EAAE,MAAM,MAAM,IAAI,MAAM,CAAC;AAAA,EACpD;AACF;AAEA,MAAM,gBAAgB;AAAA,EACpB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,iBAAiB,EAAE;AAAA,EAC/D,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,mBAAmB,EAAE;AAAA,EAClE,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,iBAAiB,EAAE;AAAA,EAC/D,QAAQ,EAAE,aAAa,MAAM,iBAAiB,CAAC,mBAAmB,EAAE;AACtE;AAEO,MAAM,WAAW;AAExB,MAAM,OAAO,cAA6D;AAAA,EACxE,UAAU;AAAA,EACV,KAAK;AAAA,IACH,QAAQ;AAAA,IACR,SAAS;AAAA,IACT,UAAU;AAAA,IACV,aAAa;AAAA,IACb,iBAAiB;AAAA,EACnB;AAAA,EACA,QAAQ;AAAA,EACR,SAAS;AAAA,EACT,SAAS;AAAA,IACP,QAAQ;AAAA,MACN,WAAW;AAAA,MACX,QAAQ;AAAA,MACR,UAAU,OAAO,EAAE,QAAQ,IAAI,MAAM;AACnC,YAAI,IAAI,SAAS;AACf,gBAAM,qBAAqB,IAAI,SAAS,OAAO,OAAO,MAAM;AAAA,QAC9D;AACA,eAAO;AAAA,MACT;AAAA,MACA,UAAU,CAAC,EAAE,OAAO,OAAO;AAAA,QACzB,IAAI,OAAO,OAAO,KAAK,EAAE;AAAA,QACzB,GAAI,OAAO,UAAU,EAAE,UAAU,OAAO,QAAQ,IAAI,CAAC;AAAA,MACvD;AAAA,MACA,QAAQ;AAAA,IACV;AAAA,IACA,QAAQ;AAAA,MACN,WAAW;AAAA,MACX,QAAQ;AAAA,MACR,UAAU,OAAO,EAAE,QAAQ,IAAI,MAAM;AACnC,YAAI,IAAI,SAAS;AACf,cAAI,OAAO,OAAO,OAAO,YAAY,OAAO,GAAG,QAAQ;AACrD,kBAAM,gCAAgC,IAAI,SAAS,OAAO,EAAE;AAC5D,kBAAM,0BAA0B,IAAI,SAAS,OAAO,EAAE;AAAA,UACxD;AACA,gBAAM,qBAAqB,IAAI,SAAS,OAAO,OAAO,MAAM;AAAA,QAC9D;AACA,eAAO;AAAA,MACT;AAAA,MACA,UAAU,OAAO,EAAE,IAAI,KAAK;AAAA,IAC9B;AAAA,IACA,QAAQ;AAAA,MACN,WAAW;AAAA,MACX,UAAU,OAAO,EAAE,QAAQ,KAAK,IAAI,MAAM;AACxC,cAAM,WAAW,sBAAsB,QAAQ,GAAG;AAClD,YAAI,IAAI,WAAW,UAAU;AAC3B,gBAAM,gCAAgC,IAAI,SAAS,QAAQ;AAC3D,gBAAM,0BAA0B,IAAI,SAAS,QAAQ;AAAA,QACvD;AACA,eAAO;AAAA,MACT;AAAA,MACA,UAAU,OAAO,EAAE,IAAI,KAAK;AAAA,IAC9B;AAAA,EACF;AACF,CAAC;AAED,eAAsB,IAAI,KAAc;AACtC,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,KAAM,QAAO,aAAa,KAAK,EAAE,OAAO,CAAC,GAAG,OAAO,GAAG,YAAY,EAAE,CAAC;AAC1E,QAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,QAAM,aAAa,IAAI,aAAa,OAAO,QAAQ,EAAE,OAAO,CAACA,QAAqB,OAAOA,QAAO,YAAYA,IAAG,KAAK,EAAE,SAAS,CAAC;AAChI,QAAM,SAAS,YAAY,UAAU;AAAA,IACnC,IAAI,IAAI,aAAa,IAAI,IAAI,KAAK;AAAA,IAClC,MAAM,IAAI,aAAa,IAAI,MAAM,KAAK;AAAA,IACtC,UAAU,IAAI,aAAa,IAAI,UAAU,KAAK;AAAA,IAC9C,QAAQ,IAAI,aAAa,IAAI,QAAQ,KAAK;AAAA,IAC1C,MAAM,IAAI,aAAa,IAAI,MAAM,KAAK;AAAA,IACtC,gBAAgB,IAAI,aAAa,IAAI,gBAAgB,KAAK;AAAA,IAC1D,2BAA2B,iBAAiB,IAAI,aAAa,IAAI,2BAA2B,KAAK,MAAS;AAAA,IAC1G,SAAS,WAAW,SAAS,aAAa;AAAA,EAC5C,CAAC;AACD,MAAI,CAAC,OAAO,QAAS,QAAO,aAAa,KAAK,EAAE,OAAO,CAAC,GAAG,OAAO,GAAG,YAAY,EAAE,CAAC;AACpF,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,KAAM,UAAU,QAAQ,IAAI;AAClC,MAAI,eAAe,KAAK,iBAAiB;AACzC,MAAI;AACF,QAAI,KAAK,KAAK;AACZ,YAAM,cAAc,UAAU,QAAQ,aAAa;AACnD,YAAM,MAAM,MAAM,YAAY,QAAQ,KAAK,KAAK,EAAE,UAAU,KAAK,YAAY,MAAM,gBAAgB,KAAK,SAAS,KAAK,CAAC;AACvH,qBAAe,gBAAgB,CAAC,CAAC,KAAK;AAAA,IACxC;AAAA,EACF,SAAS,KAAK;AACZ,WAAO,MAAM,0BAA0B,EAAE,IAAI,CAAC;AAAA,EAChD;AACA,QAAM,EAAE,IAAI,MAAM,UAAU,QAAQ,MAAM,gBAAgB,2BAA2B,QAAQ,IAAI,OAAO;AACxG,QAAM,UAAiB,CAAC,EAAE,WAAW,KAAK,CAAC;AAC3C,QAAM,gBAAgB,KAAK,WAAW,OAAO,KAAK,QAAQ,IAAI;AAC9D,MAAI,oBAAmC;AACvC,MAAI,2BAA4C;AAChD,MAAI,kCAAiD;AACrD,MAAI,0BAA0B;AAC9B,MAAI,CAAC,cAAc;AACjB,QAAI,CAAC,eAAe;AAClB,aAAO,aAAa,KAAK,EAAE,OAAO,CAAC,GAAG,OAAO,GAAG,YAAY,GAAG,aAAa,CAAC;AAAA,IAC/E;AACA,wBAAoB;AACpB,UAAM,oBAAoB,MAAM,sBAAsB,IAAI,aAAa;AACvE,QAAI,kBAAkB,MAAM;AAC1B,cAAQ,KAAK,EAAE,IAAI,EAAE,MAAM,MAAM,KAAK,iBAAiB,EAAS,EAAE,CAAC;AAAA,IACrE;AAAA,EACF,OAAO;AACL,UAAM,mBAAmB,6BAA6B,GAAG;AACzD,QAAI,OAAO,qBAAqB,YAAY,iBAAiB,KAAK,EAAE,SAAS,GAAG;AAC9E,YAAM,QAAQ,MAAM,mCAAmC;AAAA,QACrD;AAAA,QACA;AAAA,QACA,SAAS;AAAA,QACT,UAAU,iBAAiB,KAAK;AAAA,MAClC,CAAC;AACD,UAAI,CAAC,MAAM,UAAU;AACnB,eAAO,aAAa,KAAK,EAAE,OAAO,CAAC,GAAG,OAAO,GAAG,YAAY,GAAG,aAAa,CAAC;AAAA,MAC/E;AACA,0BAAoB,MAAM;AAC1B,wCAAkC,MAAM;AACxC,gCAA0B;AAC1B,UAAI,MAAM,QAAQ,MAAM,SAAS,GAAG;AAClC,YAAI,MAAM,UAAU,WAAW,GAAG;AAChC,iBAAO,aAAa,KAAK,EAAE,OAAO,CAAC,GAAG,OAAO,GAAG,YAAY,GAAG,aAAa,CAAC;AAAA,QAC/E;AACA,mCAA2B,MAAM;AAAA,MACnC;AAAA,IACF;AAAA,EACF;AACA,MAAI,mBAAmB;AACrB,YAAQ,KAAK,EAAE,UAAU,kBAAkB,CAAC;AAAA,EAC9C;AACA,MAAI,0BAA0B;AAC5B,YAAQ,KAAK,EAAE,gBAAgB,EAAE,KAAK,yBAAgC,EAAE,CAAC;AAAA,EAC3E;AACA,QAAM,sBAAsB,0BACxB,kCACA,KAAK,SAAS;AAClB,MAAI,eAAgB,SAAQ,KAAK,EAAE,eAAe,CAAC;AAMnD,MAAI,0BAA2B,SAAQ,KAAK,EAAE,gBAAgB,KAAK,SAAS,KAAK,CAAC;AAClF,QAAM,cAAc,OAAO,SAAS,WAAW,KAAK,KAAK,IAAI;AAC7D,MAAI,aAAa;AACf,UAAM,gBAAgB,IAAI,kBAAkB,WAAW,CAAC;AACxD,UAAM,qBAAuC,CAAC,EAAE,MAAM,EAAE,QAAQ,cAAc,EAAE,CAAC;AACjF,UAAM,iBAA4C,eAAgB,qBAAqB,SAAa,KAAK,YAAY;AACrH,UAAM,wBAAwB,MAAM,0BAA0B,IAAI,EAAE,KAAK,MAAM,aAAa,gBAAgB,MAAM;AAClH,QAAI,yBAAyB,sBAAsB,QAAQ;AACzD,yBAAmB,KAAK,EAAE,IAAI,EAAE,KAAK,sBAAsB,EAAE,CAAC;AAAA,IAChE;AACA,YAAQ,KAAK,mBAAmB,SAAS,IAAI,EAAE,KAAK,mBAAmB,IAAI,mBAAmB,CAAC,CAAC;AAAA,EAClG;AACA,MAAI,WAA+B,KAAK,oBAAI,IAAI,CAAC,EAAE,CAAC,IAAI;AACxD,MAAI,MAAM,QAAQ,OAAO,KAAK,QAAQ,SAAS,GAAG;AAChD,UAAM,gBAAgB,MAAM,KAAK,IAAI,IAAI,OAAO,CAAC;AACjD,UAAM,gBAAgB,MAAM,GAAG;AAAA,MAC7B;AAAA,MACA,oBAAoB,eAAe,SAAS,QAAQ;AAAA,IACtD;AACA,UAAM,cAAc,oBAAI,IAAY;AACpC,eAAW,QAAQ,eAAe;AAChC,YAAM,MAAM,OAAQ,KAAa,MAAM,MAAO,KAAa,QAAQ,EAAE;AACrE,UAAI,IAAK,aAAY,IAAI,GAAG;AAAA,IAC9B;AACA,QAAI,YAAY,SAAS,EAAG,QAAO,aAAa,KAAK,EAAE,OAAO,CAAC,GAAG,OAAO,GAAG,YAAY,GAAG,aAAa,CAAC;AACzG,QAAI,UAAU;AAIZ,iBAAW,OAAO,MAAM,KAAK,QAAQ,GAAG;AACtC,YAAI,CAAC,YAAY,IAAI,GAAG,EAAG,UAAS,OAAO,GAAG;AAAA,MAChD;AAAA,IACF,OAAO;AACL,iBAAW;AAAA,IACb;AACA,QAAI,CAAC,YAAY,SAAS,SAAS,EAAG,QAAO,aAAa,KAAK,EAAE,OAAO,CAAC,GAAG,OAAO,GAAG,YAAY,GAAG,aAAa,CAAC;AAAA,EACrH;AACA,QAAM,gBAAgB,OAAO,WAAW,WAAW,OAAO,KAAK,IAAI;AACnE,MAAI,eAAe;AAEjB,UAAM,cAAyC,eAAgB,qBAAqB,SAAa,KAAK,YAAY;AAClH,UAAM,gBAAuB,CAAC;AAE9B,UAAM,aAAa,MAAM,0BAA0B,IAAI,EAAE,KAAK,MAAM,eAAe,WAAW;AAC9F,QAAI,cAAc,WAAW,QAAQ;AACnC,oBAAc,KAAK,EAAE,IAAI,EAAE,KAAK,WAAkB,EAAE,CAAC;AAAA,IACvD;AAEA,UAAM,gBAAgB,IAAI,kBAAkB,aAAa,CAAC;AAC1D,UAAM,4BAAmC;AAAA,MACvC,EAAE,WAAW,KAAK;AAAA,MAClB,EAAE,MAAM,EAAE,QAAQ,cAAc,EAAE;AAAA,IACpC;AACA,QAAI,aAAa;AACf,gCAA0B,KAAK,EAAE,QAAQ,YAAY,CAAC;AAAA,IACxD;AACA,UAAM,wBAAwB,MAAM,GAAG;AAAA,MACrC;AAAA,MACA,0BAA0B,SAAS,IAAI,EAAE,MAAM,0BAA0B,IAAI,0BAA0B,CAAC;AAAA,IAC1G;AACA,UAAM,0BAA0B,sBAC7B,IAAI,CAAC,QAAS,KAAK,KAAK,OAAO,IAAI,EAAE,IAAI,IAAK,EAC9C,OAAO,CAAC,UAA2B,OAAO,UAAU,YAAY,MAAM,SAAS,CAAC;AACnF,QAAI,wBAAwB,QAAQ;AAClC,oBAAc,KAAK,EAAE,gBAAgB,EAAE,KAAK,wBAA+B,EAAE,CAAC;AAAA,IAChF;AAEA,UAAM,oBAA2B;AAAA,MAC/B,EAAE,WAAW,KAAK;AAAA,MAClB,EAAE,MAAM,EAAE,QAAQ,cAAc,EAAE;AAAA,IACpC;AACA,QAAI,aAAa;AACf,wBAAkB,KAAK,EAAE,KAAK,CAAC,EAAE,UAAU,YAAY,GAAG,EAAE,UAAU,KAAK,CAAC,EAAE,CAAC;AAAA,IACjF;AACA,UAAM,gBAAgB,MAAM,GAAG;AAAA,MAC7B;AAAA,MACA,kBAAkB,SAAS,IAAI,EAAE,MAAM,kBAAkB,IAAI,kBAAkB,CAAC;AAAA,IAClF;AACA,UAAM,kBAAkB,cACrB,IAAI,CAAC,SAAU,MAAM,KAAK,OAAO,KAAK,EAAE,IAAI,IAAK,EACjD,OAAO,CAAC,WAA6B,OAAO,WAAW,YAAY,OAAO,SAAS,CAAC;AACvF,QAAI,gBAAgB,QAAQ;AAC1B,YAAM,kBAAkB,MAAM,GAAG;AAAA,QAC/B;AAAA,QACA,oBAAoB,iBAAiB,SAAS,QAAQ;AAAA,MACxD;AACA,YAAM,sBAAsB,MAAM,KAAK,IAAI;AAAA,QACzC,gBACG,IAAI,CAAC,SAAS;AACb,gBAAM,UAAW,KAAa;AAC9B,gBAAM,SAAS,SAAS,MAAM;AAC9B,iBAAO,SAAS,OAAO,MAAM,IAAI;AAAA,QACnC,CAAC,EACA,OAAO,CAAC,WAA6B,OAAO,WAAW,YAAY,OAAO,SAAS,CAAC;AAAA,MACzF,CAAC;AACD,UAAI,oBAAoB,QAAQ;AAC9B,sBAAc,KAAK,EAAE,IAAI,EAAE,KAAK,oBAA2B,EAAE,CAAC;AAAA,MAChE;AAAA,IACF;AAEA,QAAI,CAAC,cAAc,QAAQ;AACzB,aAAO,aAAa,KAAK,EAAE,OAAO,CAAC,GAAG,OAAO,GAAG,YAAY,GAAG,aAAa,CAAC;AAAA,IAC/E;AAEA,YAAQ,KAAK,cAAc,SAAS,IAAI,EAAE,KAAK,cAAc,IAAI,cAAc,CAAC,CAAC;AAAA,EACnF;AACA,MAAI,YAAY,SAAS,MAAM;AAC7B,YAAQ,KAAK,EAAE,IAAI,EAAE,KAAK,MAAM,KAAK,QAAQ,EAAS,EAAE,CAAC;AAAA,EAC3D,WAAW,IAAI;AACb,YAAQ,KAAK,EAAE,GAAG,CAAC;AAAA,EACrB;AACA,QAAM,QAAQ,QAAQ,SAAS,IAAI,EAAE,MAAM,QAAQ,IAAI,QAAQ,CAAC;AAChE,QAAM,CAAC,MAAM,KAAK,IAAI,MAAM,GAAG,aAAa,MAAM,OAAO,EAAE,OAAO,UAAU,SAAS,OAAO,KAAK,SAAS,CAAC;AAC3G,QAAM,UAAU,KAAK,IAAI,CAAC,MAAW,EAAE,EAAE;AACzC,QAAM,QAAQ,QAAQ,SAClB,MAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA,EAAE,MAAM,EAAE,KAAK,QAAe,GAAG,WAAW,KAAK;AAAA,IACjD,EAAE,UAAU,CAAC,MAAM,EAAE;AAAA,IACrB;AAAA,MACE,UAAU,qBAAqB,KAAK,YAAY;AAAA,MAChD,gBAAgB;AAAA,IAClB;AAAA,EACF,IACA,CAAC;AACL,QAAM,UAAoC,CAAC;AAC3C,QAAM,YAAsC,CAAC;AAC7C,aAAW,KAAK,OAAO;AACrB,UAAM,MAAM,OAAQ,EAAU,MAAM,MAAO,EAAU,IAAI;AACzD,UAAM,QAAQ,OAAQ,EAAU,MAAM,QAAQ,EAAE;AAChD,UAAM,MAAM,OAAQ,EAAU,MAAM,MAAM,EAAE;AAC5C,QAAI,CAAC,QAAQ,GAAG,EAAG,SAAQ,GAAG,IAAI,CAAC;AACnC,QAAI,CAAC,UAAU,GAAG,EAAG,WAAU,GAAG,IAAI,CAAC;AACvC,QAAI,MAAO,SAAQ,GAAG,EAAE,KAAK,KAAK;AAClC,QAAI,IAAK,WAAU,GAAG,EAAE,KAAK,GAAG;AAAA,EAClC;AACA,QAAM,SAAS,KACZ,IAAI,CAAC,MAAY,EAAE,iBAAiB,OAAO,EAAE,cAAc,IAAI,IAAK,EACpE,OAAO,CAACA,QAAqB,CAAC,CAACA,GAAE;AACpC,QAAM,eAAe,MAAM,KAAK,IAAI,IAAI,MAAM,CAAC;AAC/C,MAAI,SAAiC,CAAC;AACtC,MAAI,aAAa,QAAQ;AACvB,UAAM,gBAAgB,MAAM,GAAG;AAAA,MAC7B;AAAA,MACA,EAAE,IAAI,EAAE,KAAK,aAAoB,GAAG,WAAW,KAAK;AAAA,IACtD;AACA,aAAS,cAAc,OAA+B,CAAC,KAAK,QAAQ;AAClE,YAAM,QAAQ,KAAK,KAAK,OAAO,IAAI,EAAE,IAAI;AACzC,UAAI,CAAC,MAAO,QAAO;AACnB,YAAM,UAAW,KAAa;AAC9B,YAAM,UAAU,OAAO,YAAY,YAAY,QAAQ,SAAS,IAAI,UAAU;AAC9E,UAAI,KAAK,IAAI;AACb,aAAO;AAAA,IACT,GAAG,CAAC,CAAC;AAAA,EACP;AACA,QAAM,YAAY,KACf,IAAI,CAAC,MAAY,EAAE,WAAW,OAAO,EAAE,QAAQ,IAAI,IAAK,EACxD,OAAO,CAACA,QAAqB,CAAC,CAACA,GAAE;AACpC,QAAM,kBAAkB,MAAM,KAAK,IAAI,IAAI,SAAS,CAAC;AACrD,MAAI,YAAoC,CAAC;AACzC,MAAI,gBAAgB,QAAQ;AAC1B,UAAM,UAAU,MAAM,GAAG;AAAA,MACvB;AAAA,MACA,EAAE,IAAI,EAAE,KAAK,gBAAuB,GAAG,WAAW,KAAK;AAAA,IACzD;AACA,gBAAY,QAAQ,OAA+B,CAAC,KAAK,WAAW;AAClE,YAAM,WAAW,QAAQ,KAAK,OAAO,OAAO,EAAE,IAAI;AAClD,UAAI,CAAC,SAAU,QAAO;AACtB,YAAM,UAAW,QAAgB;AACjC,YAAM,aAAa,OAAO,YAAY,YAAY,QAAQ,SAAS,IAAI,UAAU;AACjF,UAAI,QAAQ,IAAI;AAChB,aAAO;AAAA,IACT,GAAG,CAAC,CAAC;AAAA,EACP;AACA,QAAM,eAA8C,CAAC;AACrD,QAAM,qBAAoD,CAAC;AAC3D,aAAW,KAAK,MAAM;AACpB,UAAM,MAAM,OAAO,EAAE,EAAE;AACvB,iBAAa,GAAG,IAAI,EAAE,WAAW,OAAO,EAAE,QAAQ,IAAI;AACtD,uBAAmB,GAAG,IAAI,EAAE,iBAAiB,OAAO,EAAE,cAAc,IAAI;AAAA,EAC1E;AACA,QAAM,WAAW,QAAQ,SACrB,MAAM,sBAAsB;AAAA,IAC1B;AAAA,IACA,UAAU,EAAE,KAAK;AAAA,IACjB,WAAW,QAAQ,IAAI,MAAM;AAAA,IAC7B,kBAAkB;AAAA,IAClB,wBAAwB;AAAA,IACxB,iBAAiB,oBAAoB,CAAC,iBAAiB,IAAI,KAAK,WAAW,CAAC,KAAK,QAAQ,IAAI,CAAC;AAAA,EAChG,CAAC,IACD,CAAC;AAEL,QAAM,QAAQ,KAAK,IAAI,CAAC,MAAW;AACjC,UAAM,MAAM,OAAO,EAAE,EAAE;AACvB,UAAM,QAAQ,EAAE,iBAAiB,OAAO,EAAE,cAAc,IAAI;AAC5D,WAAO;AAAA,MACL,IAAI;AAAA,MACJ,OAAO,OAAO,EAAE,KAAK;AAAA,MACrB,MAAM,EAAE,OAAO,OAAO,EAAE,IAAI,IAAI;AAAA,MAChC,gBAAgB;AAAA,MAChB,kBAAkB,QAAQ,OAAO,KAAK,KAAK,QAAQ;AAAA,MACnD,UAAU,EAAE,WAAW,OAAO,EAAE,QAAQ,IAAI;AAAA,MAC5C,YAAY,EAAE,WAAW,UAAU,OAAO,EAAE,QAAQ,CAAC,KAAK,OAAO,EAAE,QAAQ,IAAI;AAAA,MAC/E,OAAO,QAAQ,GAAG,KAAK,CAAC;AAAA,MACxB,SAAS,UAAU,GAAG,KAAK,CAAC;AAAA,MAC5B,GAAI,KAAK,EAAE,aAAa,CAAC,CAAC,EAAE,aAAa,IAAI,CAAC;AAAA,MAC9C,WAAW,EAAE,qBAAqB,OAAO,EAAE,UAAU,YAAY,IAAI;AAAA,MACrE,GAAI,SAAS,GAAG,KAAK,CAAC;AAAA,IACxB;AAAA,EACF,CAAC;AACD,QAAM,aAAa,KAAK,IAAI,GAAG,KAAK,KAAK,QAAQ,QAAQ,CAAC;AAC1D,QAAM,cAAc;AAAA,IAClB;AAAA,IACA;AAAA,IACA,SAAS;AAAA,IACT;AAAA,IACA,SAAS;AAAA,IACT,cAAc;AAAA,IACd,gBAAgB;AAAA,IAChB,UAAU,qBAAqB,KAAK,YAAY;AAAA,IAChD,OAAO,OAAO;AAAA,IACd,YAAY,KAAK,cAAc;AAAA,EACjC,CAAC;AACD,SAAO,aAAa,KAAK,EAAE,OAAO,OAAO,OAAO,YAAY,aAAa,CAAC;AAC5E;AAEO,MAAM,OAAO,OAAO,QAAiB;AAC1C,SAAO,KAAK,KAAK,GAAG;AACtB;AAEO,MAAM,MAAM,OAAO,QAAiB;AACzC,SAAO,KAAK,IAAI,GAAG;AACrB;AAEO,MAAM,SAAS,OAAO,QAAiB;AAC5C,QAAM,WAAW,IAAI,IAAI,IAAI,GAAG,EAAE,aAAa,IAAI,IAAI;AACvD,MAAI,UAAU;AACZ,QAAI;AACF,YAAM,gCAAgC,KAAK,QAAQ;AACnD,YAAM,0BAA0B,KAAK,QAAQ;AAAA,IAC/C,SAAS,KAAK;AACZ,UAAI,eAAe,eAAe;AAChC,eAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,MAC3D;AACA,YAAM;AAAA,IACR;AAAA,EACF;AACA,SAAO,KAAK,OAAO,GAAG;AACxB;AAEA,eAAe,0BACb,IACA,YACA,QACA,aACA,OAC0B;AAC1B,SAAO,kCAAkC;AAAA,IACvC,IAAI,GAAG,UAA+B;AAAA,IACtC;AAAA,IACA,OAAO;AAAA,IACP,QAAQ,QAAQ,CAAC,KAAK,IAAI;AAAA,IAC1B,OAAO,EAAE,UAAU,YAAY;AAAA,EACjC,CAAC;AACH;AAEA,eAAe,gCAAgC,KAAc,cAAsB;AACjF,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,IAAK,OAAM,IAAI,cAAc,KAAK,EAAE,OAAO,eAAe,CAAC;AACtE,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,QAAM,yCAAyC;AAAA,IAC7C;AAAA,IACA,aAAa,UAAU,QAAQ,aAAa;AAAA,IAC5C,aAAa,KAAK;AAAA,IAClB,UAAU,KAAK,YAAY;AAAA,IAC3B,gBAAgB,KAAK,SAAS;AAAA,IAC9B;AAAA,EACF,CAAC;AACH;AAEA,eAAe,0BAA0B,KAAc,cAAsB;AAC3E,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,IAAK,OAAM,IAAI,cAAc,KAAK,EAAE,OAAO,eAAe,CAAC;AACtE,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,QAAM,+BAA+B;AAAA,IACnC;AAAA,IACA,aAAa,UAAU,QAAQ,aAAa;AAAA,IAC5C,aAAa,KAAK;AAAA,IAClB,UAAU,KAAK,YAAY;AAAA,IAC3B,gBAAgB,KAAK,SAAS;AAAA,IAC9B;AAAA,EACF,CAAC;AACH;AAEA,SAAS,sBAAsB,QAAiB,KAA6B;AAC3E,QAAM,aAAa,OAAQ,MAAqD;AAChF,MAAI,WAAY,QAAO;AACvB,QAAM,YAAY;AAClB,SAAO,OAAO,WAAW,KAAK,KAAK,OAAO,WAAW,IAAI;AAC3D;AAEA,SAAS,OAAO,QAAmE;AACjF,QAAM,QAAQ,QAAQ;AACtB,SAAO,OAAO,UAAU,YAAY,MAAM,SAAS,IAAI,QAAQ;AACjE;AAEA,eAAe,qBAAqB,KAAc,OAAgB,SAAkC;AAClG,MAAI,CAAC,MAAM,QAAQ,KAAK,EAAG;AAC3B,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,IAAK,OAAM,IAAI,cAAc,KAAK,EAAE,OAAO,eAAe,CAAC;AACtE,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,QAAM,WAAW,MAAM,kCAAkC,IAAI,SAAS,KAAK,YAAY,IAAI;AAC3F,QAAM,8BAA8B;AAAA,IAClC;AAAA,IACA,aAAa,UAAU,QAAQ,aAAa;AAAA,IAC5C,aAAa,KAAK;AAAA,IAClB;AAAA,IACA,gBAAgB,KAAK,SAAS;AAAA,IAC9B,YAAY;AAAA,EACd,CAAC;AACH;AAEA,eAAe,kCACb,IACA,SACA,kBACwB;AACxB,QAAM,iBAAiB,OAAO,QAAQ,mBAAmB,WAAW,QAAQ,iBAAiB;AAC7F,MAAI,gBAAgB;AAClB,UAAM,eAAe,MAAM;AAAA,MACzB;AAAA,MACA;AAAA,MACA,EAAE,IAAI,eAAe;AAAA,MACrB,EAAE,UAAU,CAAC,QAAQ,EAAE;AAAA,MACvB,EAAE,UAAU,MAAM,eAAe;AAAA,IACnC;AACA,WAAO,cAAc,QAAQ,KAAK,OAAO,aAAa,OAAO,EAAE,IAAI;AAAA,EACrE;AAEA,QAAM,SAAS,OAAO,QAAQ,OAAO,WAAW,QAAQ,KAAK;AAC7D,MAAI,QAAQ;AACV,UAAM,OAAO,MAAM;AAAA,MACjB;AAAA,MACA;AAAA,MACA,EAAE,IAAI,QAAQ,WAAW,KAAK;AAAA,MAC9B,CAAC;AAAA,MACD,EAAE,UAAU,MAAM,gBAAgB,KAAK;AAAA,IACzC;AACA,WAAO,MAAM,WAAW,OAAO,KAAK,QAAQ,IAAI;AAAA,EAClD;AAEA,SAAO;AACT;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aACE;AAAA,MACF,OAAO;AAAA,MACP,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,mBAAmB,QAAQ,uBAAuB;AAAA,MAChF;AAAA,IACF;AAAA,IACA,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa;AAAA,MACb,aAAa;AAAA,QACX,aAAa;AAAA,QACb,QAAQ;AAAA,MACV;AAAA,MACA,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAAA,QAC5C;AAAA,MACF;AAAA,MACA,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,sCAAsC,QAAQ,oBAAoB;AAAA,QAC9F,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,oBAAoB;AAAA,QACxE,EAAE,QAAQ,KAAK,aAAa,wCAAwC,QAAQ,oBAAoB;AAAA,MAClG;AAAA,IACF;AAAA,IACA,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aAAa;AAAA,MACb,aAAa;AAAA,QACX,aAAa;AAAA,QACb,QAAQ;AAAA,MACV;AAAA,MACA,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,iBAAiB;AAAA,MACvE;AAAA,MACA,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,mBAAmB,QAAQ,oBAAoB;AAAA,QAC3E,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,oBAAoB;AAAA,QACxE,EAAE,QAAQ,KAAK,aAAa,wCAAwC,QAAQ,oBAAoB;AAAA,QAChG,EAAE,QAAQ,KAAK,aAAa,kBAAkB,QAAQ,oBAAoB;AAAA,MAC5E;AAAA,IACF;AAAA,IACA,QAAQ;AAAA,MACN,SAAS;AAAA,MACT,aAAa;AAAA,MACb,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,iBAAiB,EAAE,CAAC;AAAA,MACrE,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,iBAAiB;AAAA,MACvE;AAAA,MACA,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,0BAA0B,QAAQ,oBAAoB;AAAA,QAClF,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,oBAAoB;AAAA,QACxE,EAAE,QAAQ,KAAK,aAAa,kBAAkB,QAAQ,oBAAoB;AAAA,MAC5E;AAAA,IACF;AAAA,EACF;AACF;",
   "names": ["id"]
 }

package/dist/modules/communication_channels/api/get/channels/[id]/health/route.js

@@ -4,6 +4,8 @@ import { sql } from "kysely";
 import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
 import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
 import { findOneWithDecryption, findWithDecryption } from "@open-mercato/shared/lib/encryption/find";
+import { resolveOrganizationScopeForRequest } from "@open-mercato/core/modules/directory/utils/organizationScope";
+import { resolveOrganizationScopeFilter } from "@open-mercato/core/modules/directory/utils/organizationScopeFilter";
 import { CommunicationChannel, ExternalConversation, MessageChannelLink } from "../../../../../data/entities.js";
 import { ChannelAccessDeniedError, assertCanAccessChannel } from "../../../../../lib/access-control.js";
 const metadata = {
@@ -23,14 +25,16 @@ async function GET(req, context) {
   }
   const container = await createRequestContainer();
   const em = container.resolve("em").fork();
+  const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req });
+  const orgFilter = resolveOrganizationScopeFilter(scope, auth);
   const dscope = {
     tenantId: auth.tenantId,
-    organizationId: auth.orgId ?? null
+    organizationId: orgFilter.rbacOrganizationId
   };
   const channel = await findOneWithDecryption(
     em,
     CommunicationChannel,
-    { id, tenantId: auth.tenantId, organizationId: dscope.organizationId, deletedAt: null },
+    { id, tenantId: auth.tenantId, ...orgFilter.where, deletedAt: null },
     void 0,
     dscope
   );

package/dist/modules/communication_channels/api/get/channels/[id]/health/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../../../src/modules/communication_channels/api/get/channels/%5Bid%5D/health/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { sql } from 'kysely'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { findOneWithDecryption, findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { CommunicationChannel, ExternalConversation, MessageChannelLink } from '../../../../../data/entities'\nimport { ChannelAccessDeniedError, assertCanAccessChannel } from '../../../../../lib/access-control'\n\ntype RbacServiceLike = {\n  loadAcl: (\n    userId: string,\n    scope: { tenantId: string | null; organizationId: string | null },\n  ) => Promise<{ isSuperAdmin: boolean; features: string[]; organizations: string[] | null }>\n}\n\nexport const metadata = {\n  path: '/communication_channels/channels/[id]/health',\n  GET: { requireAuth: true, requireFeatures: ['communication_channels.view'] },\n}\n\ntype RouteContext = {\n  params: Promise<{ id: string }> | { id: string }\n}\n\nconst WINDOW_HOURS = 24\nconst RECENT_FAILURES_LIMIT = 10\n\n/**\n * Channel health snapshot \u2014 live aggregates from `message_channel_links` rather\n * than a dedicated `HealthLog` table.\n *\n * Returns counts of `sent` / `failed` / `pending` deliveries in the trailing\n * 24-hour window, plus the most recent failed links with last-error context.\n *\n * Per-user isolation: aggregates are scoped to **this channel only** via the\n * `external_conversations.channelId` join (a MessageChannelLink does not have a\n * direct channelId column \u2014 the link goes through ExternalConversation). Before\n * any DB read for aggregates, the channel must pass `assertCanAccessChannel`\n * so a non-admin caller cannot inspect another user's channel telemetry.\n */\nexport async function GET(req: Request, context: RouteContext): Promise<Response> {\n  const { id } = await context.params\n  if (!z.string().uuid().safeParse(id).success) {\n    return NextResponse.json({ error: 'Invalid channel id' }, { status: 400 })\n  }\n\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.tenantId) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n\n  const container = await createRequestContainer()\n  const em = (container.resolve('em') as EntityManager).fork()\n\n  const dscope = {\n    tenantId: auth.tenantId as string,\n    organizationId: (auth as { orgId?: string | null }).orgId ?? null,\n  }\n  const channel = await findOneWithDecryption(\n    em,\n    CommunicationChannel,\n    { id, tenantId: auth.tenantId, organizationId: dscope.organizationId, deletedAt: null },\n    undefined,\n    dscope,\n  )\n  if (!channel) {\n    return NextResponse.json({ error: 'Channel not found' }, { status: 404 })\n  }\n\n  let userFeatures: string[] = []\n  try {\n    const rbac = container.resolve('rbacService') as RbacServiceLike\n    const acl = await rbac.loadAcl(auth.sub as string, {\n      tenantId: auth.tenantId as string,\n      organizationId: dscope.organizationId,\n    })\n    userFeatures = acl?.isSuperAdmin ? ['*'] : Array.isArray(acl?.features) ? acl.features : []\n  } catch {\n    userFeatures = []\n  }\n  try {\n    assertCanAccessChannel(channel, auth.sub as string, userFeatures)\n  } catch (err) {\n    if (err instanceof ChannelAccessDeniedError) {\n      return NextResponse.json({ error: 'Channel not found' }, { status: 404 })\n    }\n    throw err\n  }\n\n  // ExternalConversation is append-only on the hub side \u2014 no soft-delete column.\n  // Scope by channel + tenant so aggregates stay isolated even when the same\n  // provider is connected by multiple users in the same tenant.\n  const conversations = await findWithDecryption(\n    em,\n    ExternalConversation,\n    { channelId: channel.id, tenantId: auth.tenantId },\n    undefined,\n    dscope,\n  )\n  const conversationIds = conversations.map((c) => c.id).filter(Boolean) as string[]\n\n  const counts = { sent: 0, delivered: 0, read: 0, failed: 0, pending: 0, queued: 0, other: 0 }\n  let totalsLast24h = 0\n  let recentFailures: MessageChannelLink[] = []\n  if (conversationIds.length > 0) {\n    const since = new Date(Date.now() - WINDOW_HOURS * 60 * 60 * 1000)\n\n    // Aggregate the delivery-status counts in the database so the response stays\n    // a small fixed shape regardless of how much traffic the channel saw in the\n    // window. `delivery_status`, `external_conversation_id`, `tenant_id` and\n    // `created_at` are plaintext columns (see encryption.ts \u2014 only\n    // `channel_ingest_dead_letter.raw_body` is encrypted on this module), so a\n    // grouped count is safe without the decryption helpers.\n    const db = em.getKysely<any>() as any\n    const statusRows = (await db\n      .selectFrom('message_channel_links')\n      .select(['delivery_status', sql<string>`count(*)`.as('count')])\n      .where('external_conversation_id', 'in', conversationIds)\n      .where('tenant_id', '=', auth.tenantId)\n      .where('created_at', '>=', since)\n      .groupBy('delivery_status')\n      .execute()) as Array<{ delivery_status: string | null; count: string | number }>\n\n    for (const row of statusRows) {\n      const value = Number(row.count) || 0\n      totalsLast24h += value\n      const key = row.delivery_status as keyof typeof counts\n      if (key && key in counts) counts[key] += value\n      else counts.other += value\n    }\n\n    recentFailures = await findWithDecryption(\n      em,\n      MessageChannelLink,\n      {\n        externalConversationId: { $in: conversationIds },\n        tenantId: auth.tenantId,\n        deliveryStatus: 'failed',\n      },\n      { limit: RECENT_FAILURES_LIMIT, orderBy: { createdAt: 'desc' } },\n      dscope,\n    )\n  }\n\n  return NextResponse.json({\n    channelId: channel.id,\n    providerKey: channel.providerKey,\n    channelType: channel.channelType,\n    windowHours: WINDOW_HOURS,\n    counts,\n    totalsLast24h,\n    recentFailures: recentFailures.map((link) => ({\n      id: link.id,\n      messageId: link.messageId,\n      direction: link.direction,\n      createdAt: link.createdAt?.toISOString?.() ?? null,\n      lastError:\n        (link.channelMetadata as Record<string, unknown> | null)?.lastError ?? null,\n      transient:\n        (link.channelMetadata as Record<string, unknown> | null)?.transient ?? null,\n    })),\n  })\n}\n\nexport const openApi = {\n  tags: ['CommunicationChannels'],\n  methods: {\n    GET: {\n      summary: 'Snapshot of channel delivery health (last 24h)',\n      tags: ['CommunicationChannels'],\n      responses: [\n        { status: 200, description: 'Health snapshot' },\n        { status: 400, description: 'Invalid channel id' },\n        { status: 401, description: 'Unauthorized' },\n        { status: 404, description: 'Channel not found' },\n      ],\n    },\n  },\n}\nexport default GET\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,WAAW;AACpB,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AAEvC,SAAS,uBAAuB,0BAA0B;AAC1D,SAAS,sBAAsB,sBAAsB,0BAA0B;AAC/E,SAAS,0BAA0B,8BAA8B;AAS1D,MAAM,WAAW;AAAA,EACtB,MAAM;AAAA,EACN,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,6BAA6B,EAAE;AAC7E;AAMA,MAAM,eAAe;AACrB,MAAM,wBAAwB;AAe9B,eAAsB,IAAI,KAAc,SAA0C;AAChF,QAAM,EAAE,GAAG,IAAI,MAAM,QAAQ;AAC7B,MAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,SAAS;AAC5C,WAAO,aAAa,KAAK,EAAE,OAAO,qBAAqB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC3E;AAEA,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,UAAU;AACnB,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAE3D,QAAM,SAAS;AAAA,IACb,UAAU,KAAK;AAAA,IACf,gBAAiB,KAAmC,SAAS;AAAA,EAC/D;AACA,QAAM,UAAU,MAAM;AAAA,IACpB;AAAA,IACA;AAAA,IACA,EAAE,IAAI,UAAU,KAAK,UAAU,gBAAgB,OAAO,gBAAgB,WAAW,KAAK;AAAA,IACtF;AAAA,IACA;AAAA,EACF;AACA,MAAI,CAAC,SAAS;AACZ,WAAO,aAAa,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC1E;AAEA,MAAI,eAAyB,CAAC;AAC9B,MAAI;AACF,UAAM,OAAO,UAAU,QAAQ,aAAa;AAC5C,UAAM,MAAM,MAAM,KAAK,QAAQ,KAAK,KAAe;AAAA,MACjD,UAAU,KAAK;AAAA,MACf,gBAAgB,OAAO;AAAA,IACzB,CAAC;AACD,mBAAe,KAAK,eAAe,CAAC,GAAG,IAAI,MAAM,QAAQ,KAAK,QAAQ,IAAI,IAAI,WAAW,CAAC;AAAA,EAC5F,QAAQ;AACN,mBAAe,CAAC;AAAA,EAClB;AACA,MAAI;AACF,2BAAuB,SAAS,KAAK,KAAe,YAAY;AAAA,EAClE,SAAS,KAAK;AACZ,QAAI,eAAe,0BAA0B;AAC3C,aAAO,aAAa,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC1E;AACA,UAAM;AAAA,EACR;AAKA,QAAM,gBAAgB,MAAM;AAAA,IAC1B;AAAA,IACA;AAAA,IACA,EAAE,WAAW,QAAQ,IAAI,UAAU,KAAK,SAAS;AAAA,IACjD;AAAA,IACA;AAAA,EACF;AACA,QAAM,kBAAkB,cAAc,IAAI,CAAC,MAAM,EAAE,EAAE,EAAE,OAAO,OAAO;AAErE,QAAM,SAAS,EAAE,MAAM,GAAG,WAAW,GAAG,MAAM,GAAG,QAAQ,GAAG,SAAS,GAAG,QAAQ,GAAG,OAAO,EAAE;AAC5F,MAAI,gBAAgB;AACpB,MAAI,iBAAuC,CAAC;AAC5C,MAAI,gBAAgB,SAAS,GAAG;AAC9B,UAAM,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,eAAe,KAAK,KAAK,GAAI;AAQjE,UAAM,KAAK,GAAG,UAAe;AAC7B,UAAM,aAAc,MAAM,GACvB,WAAW,uBAAuB,EAClC,OAAO,CAAC,mBAAmB,cAAsB,GAAG,OAAO,CAAC,CAAC,EAC7D,MAAM,4BAA4B,MAAM,eAAe,EACvD,MAAM,aAAa,KAAK,KAAK,QAAQ,EACrC,MAAM,cAAc,MAAM,KAAK,EAC/B,QAAQ,iBAAiB,EACzB,QAAQ;AAEX,eAAW,OAAO,YAAY;AAC5B,YAAM,QAAQ,OAAO,IAAI,KAAK,KAAK;AACnC,uBAAiB;AACjB,YAAM,MAAM,IAAI;AAChB,UAAI,OAAO,OAAO,OAAQ,QAAO,GAAG,KAAK;AAAA,UACpC,QAAO,SAAS;AAAA,IACvB;AAEA,qBAAiB,MAAM;AAAA,MACrB;AAAA,MACA;AAAA,MACA;AAAA,QACE,wBAAwB,EAAE,KAAK,gBAAgB;AAAA,QAC/C,UAAU,KAAK;AAAA,QACf,gBAAgB;AAAA,MAClB;AAAA,MACA,EAAE,OAAO,uBAAuB,SAAS,EAAE,WAAW,OAAO,EAAE;AAAA,MAC/D;AAAA,IACF;AAAA,EACF;AAEA,SAAO,aAAa,KAAK;AAAA,IACvB,WAAW,QAAQ;AAAA,IACnB,aAAa,QAAQ;AAAA,IACrB,aAAa,QAAQ;AAAA,IACrB,aAAa;AAAA,IACb;AAAA,IACA;AAAA,IACA,gBAAgB,eAAe,IAAI,CAAC,UAAU;AAAA,MAC5C,IAAI,KAAK;AAAA,MACT,WAAW,KAAK;AAAA,MAChB,WAAW,KAAK;AAAA,MAChB,WAAW,KAAK,WAAW,cAAc,KAAK;AAAA,MAC9C,WACG,KAAK,iBAAoD,aAAa;AAAA,MACzE,WACG,KAAK,iBAAoD,aAAa;AAAA,IAC3E,EAAE;AAAA,EACJ,CAAC;AACH;AAEO,MAAM,UAAU;AAAA,EACrB,MAAM,CAAC,uBAAuB;AAAA,EAC9B,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,MAAM,CAAC,uBAAuB;AAAA,MAC9B,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,kBAAkB;AAAA,QAC9C,EAAE,QAAQ,KAAK,aAAa,qBAAqB;AAAA,QACjD,EAAE,QAAQ,KAAK,aAAa,eAAe;AAAA,QAC3C,EAAE,QAAQ,KAAK,aAAa,oBAAoB;AAAA,MAClD;AAAA,IACF;AAAA,EACF;AACF;AACA,IAAO,gBAAQ;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { sql } from 'kysely'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { findOneWithDecryption, findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { resolveOrganizationScopeFilter } from '@open-mercato/core/modules/directory/utils/organizationScopeFilter'\nimport { CommunicationChannel, ExternalConversation, MessageChannelLink } from '../../../../../data/entities'\nimport { ChannelAccessDeniedError, assertCanAccessChannel } from '../../../../../lib/access-control'\n\ntype RbacServiceLike = {\n  loadAcl: (\n    userId: string,\n    scope: { tenantId: string | null; organizationId: string | null },\n  ) => Promise<{ isSuperAdmin: boolean; features: string[]; organizations: string[] | null }>\n}\n\nexport const metadata = {\n  path: '/communication_channels/channels/[id]/health',\n  GET: { requireAuth: true, requireFeatures: ['communication_channels.view'] },\n}\n\ntype RouteContext = {\n  params: Promise<{ id: string }> | { id: string }\n}\n\nconst WINDOW_HOURS = 24\nconst RECENT_FAILURES_LIMIT = 10\n\n/**\n * Channel health snapshot \u2014 live aggregates from `message_channel_links` rather\n * than a dedicated `HealthLog` table.\n *\n * Returns counts of `sent` / `failed` / `pending` deliveries in the trailing\n * 24-hour window, plus the most recent failed links with last-error context.\n *\n * Per-user isolation: aggregates are scoped to **this channel only** via the\n * `external_conversations.channelId` join (a MessageChannelLink does not have a\n * direct channelId column \u2014 the link goes through ExternalConversation). Before\n * any DB read for aggregates, the channel must pass `assertCanAccessChannel`\n * so a non-admin caller cannot inspect another user's channel telemetry.\n */\nexport async function GET(req: Request, context: RouteContext): Promise<Response> {\n  const { id } = await context.params\n  if (!z.string().uuid().safeParse(id).success) {\n    return NextResponse.json({ error: 'Invalid channel id' }, { status: 400 })\n  }\n\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.tenantId) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n\n  const container = await createRequestContainer()\n  const em = (container.resolve('em') as EntityManager).fork()\n\n  // Same selected-organization scoping as the list and detail routes (#5012).\n  const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n  const orgFilter = resolveOrganizationScopeFilter(scope, auth)\n\n  const dscope = {\n    tenantId: auth.tenantId as string,\n    organizationId: orgFilter.rbacOrganizationId,\n  }\n  const channel = await findOneWithDecryption(\n    em,\n    CommunicationChannel,\n    { id, tenantId: auth.tenantId, ...orgFilter.where, deletedAt: null },\n    undefined,\n    dscope,\n  )\n  if (!channel) {\n    return NextResponse.json({ error: 'Channel not found' }, { status: 404 })\n  }\n\n  let userFeatures: string[] = []\n  try {\n    const rbac = container.resolve('rbacService') as RbacServiceLike\n    const acl = await rbac.loadAcl(auth.sub as string, {\n      tenantId: auth.tenantId as string,\n      organizationId: dscope.organizationId,\n    })\n    userFeatures = acl?.isSuperAdmin ? ['*'] : Array.isArray(acl?.features) ? acl.features : []\n  } catch {\n    userFeatures = []\n  }\n  try {\n    assertCanAccessChannel(channel, auth.sub as string, userFeatures)\n  } catch (err) {\n    if (err instanceof ChannelAccessDeniedError) {\n      return NextResponse.json({ error: 'Channel not found' }, { status: 404 })\n    }\n    throw err\n  }\n\n  // ExternalConversation is append-only on the hub side \u2014 no soft-delete column.\n  // Scope by channel + tenant so aggregates stay isolated even when the same\n  // provider is connected by multiple users in the same tenant.\n  const conversations = await findWithDecryption(\n    em,\n    ExternalConversation,\n    { channelId: channel.id, tenantId: auth.tenantId },\n    undefined,\n    dscope,\n  )\n  const conversationIds = conversations.map((c) => c.id).filter(Boolean) as string[]\n\n  const counts = { sent: 0, delivered: 0, read: 0, failed: 0, pending: 0, queued: 0, other: 0 }\n  let totalsLast24h = 0\n  let recentFailures: MessageChannelLink[] = []\n  if (conversationIds.length > 0) {\n    const since = new Date(Date.now() - WINDOW_HOURS * 60 * 60 * 1000)\n\n    // Aggregate the delivery-status counts in the database so the response stays\n    // a small fixed shape regardless of how much traffic the channel saw in the\n    // window. `delivery_status`, `external_conversation_id`, `tenant_id` and\n    // `created_at` are plaintext columns (see encryption.ts \u2014 only\n    // `channel_ingest_dead_letter.raw_body` is encrypted on this module), so a\n    // grouped count is safe without the decryption helpers.\n    const db = em.getKysely<any>() as any\n    const statusRows = (await db\n      .selectFrom('message_channel_links')\n      .select(['delivery_status', sql<string>`count(*)`.as('count')])\n      .where('external_conversation_id', 'in', conversationIds)\n      .where('tenant_id', '=', auth.tenantId)\n      .where('created_at', '>=', since)\n      .groupBy('delivery_status')\n      .execute()) as Array<{ delivery_status: string | null; count: string | number }>\n\n    for (const row of statusRows) {\n      const value = Number(row.count) || 0\n      totalsLast24h += value\n      const key = row.delivery_status as keyof typeof counts\n      if (key && key in counts) counts[key] += value\n      else counts.other += value\n    }\n\n    recentFailures = await findWithDecryption(\n      em,\n      MessageChannelLink,\n      {\n        externalConversationId: { $in: conversationIds },\n        tenantId: auth.tenantId,\n        deliveryStatus: 'failed',\n      },\n      { limit: RECENT_FAILURES_LIMIT, orderBy: { createdAt: 'desc' } },\n      dscope,\n    )\n  }\n\n  return NextResponse.json({\n    channelId: channel.id,\n    providerKey: channel.providerKey,\n    channelType: channel.channelType,\n    windowHours: WINDOW_HOURS,\n    counts,\n    totalsLast24h,\n    recentFailures: recentFailures.map((link) => ({\n      id: link.id,\n      messageId: link.messageId,\n      direction: link.direction,\n      createdAt: link.createdAt?.toISOString?.() ?? null,\n      lastError:\n        (link.channelMetadata as Record<string, unknown> | null)?.lastError ?? null,\n      transient:\n        (link.channelMetadata as Record<string, unknown> | null)?.transient ?? null,\n    })),\n  })\n}\n\nexport const openApi = {\n  tags: ['CommunicationChannels'],\n  methods: {\n    GET: {\n      summary: 'Snapshot of channel delivery health (last 24h)',\n      tags: ['CommunicationChannels'],\n      responses: [\n        { status: 200, description: 'Health snapshot' },\n        { status: 400, description: 'Invalid channel id' },\n        { status: 401, description: 'Unauthorized' },\n        { status: 404, description: 'Channel not found' },\n      ],\n    },\n  },\n}\nexport default GET\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,WAAW;AACpB,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AAEvC,SAAS,uBAAuB,0BAA0B;AAC1D,SAAS,0CAA0C;AACnD,SAAS,sCAAsC;AAC/C,SAAS,sBAAsB,sBAAsB,0BAA0B;AAC/E,SAAS,0BAA0B,8BAA8B;AAS1D,MAAM,WAAW;AAAA,EACtB,MAAM;AAAA,EACN,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,6BAA6B,EAAE;AAC7E;AAMA,MAAM,eAAe;AACrB,MAAM,wBAAwB;AAe9B,eAAsB,IAAI,KAAc,SAA0C;AAChF,QAAM,EAAE,GAAG,IAAI,MAAM,QAAQ;AAC7B,MAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,SAAS;AAC5C,WAAO,aAAa,KAAK,EAAE,OAAO,qBAAqB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC3E;AAEA,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,UAAU;AACnB,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAG3D,QAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AACxF,QAAM,YAAY,+BAA+B,OAAO,IAAI;AAE5D,QAAM,SAAS;AAAA,IACb,UAAU,KAAK;AAAA,IACf,gBAAgB,UAAU;AAAA,EAC5B;AACA,QAAM,UAAU,MAAM;AAAA,IACpB;AAAA,IACA;AAAA,IACA,EAAE,IAAI,UAAU,KAAK,UAAU,GAAG,UAAU,OAAO,WAAW,KAAK;AAAA,IACnE;AAAA,IACA;AAAA,EACF;AACA,MAAI,CAAC,SAAS;AACZ,WAAO,aAAa,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC1E;AAEA,MAAI,eAAyB,CAAC;AAC9B,MAAI;AACF,UAAM,OAAO,UAAU,QAAQ,aAAa;AAC5C,UAAM,MAAM,MAAM,KAAK,QAAQ,KAAK,KAAe;AAAA,MACjD,UAAU,KAAK;AAAA,MACf,gBAAgB,OAAO;AAAA,IACzB,CAAC;AACD,mBAAe,KAAK,eAAe,CAAC,GAAG,IAAI,MAAM,QAAQ,KAAK,QAAQ,IAAI,IAAI,WAAW,CAAC;AAAA,EAC5F,QAAQ;AACN,mBAAe,CAAC;AAAA,EAClB;AACA,MAAI;AACF,2BAAuB,SAAS,KAAK,KAAe,YAAY;AAAA,EAClE,SAAS,KAAK;AACZ,QAAI,eAAe,0BAA0B;AAC3C,aAAO,aAAa,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC1E;AACA,UAAM;AAAA,EACR;AAKA,QAAM,gBAAgB,MAAM;AAAA,IAC1B;AAAA,IACA;AAAA,IACA,EAAE,WAAW,QAAQ,IAAI,UAAU,KAAK,SAAS;AAAA,IACjD;AAAA,IACA;AAAA,EACF;AACA,QAAM,kBAAkB,cAAc,IAAI,CAAC,MAAM,EAAE,EAAE,EAAE,OAAO,OAAO;AAErE,QAAM,SAAS,EAAE,MAAM,GAAG,WAAW,GAAG,MAAM,GAAG,QAAQ,GAAG,SAAS,GAAG,QAAQ,GAAG,OAAO,EAAE;AAC5F,MAAI,gBAAgB;AACpB,MAAI,iBAAuC,CAAC;AAC5C,MAAI,gBAAgB,SAAS,GAAG;AAC9B,UAAM,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,eAAe,KAAK,KAAK,GAAI;AAQjE,UAAM,KAAK,GAAG,UAAe;AAC7B,UAAM,aAAc,MAAM,GACvB,WAAW,uBAAuB,EAClC,OAAO,CAAC,mBAAmB,cAAsB,GAAG,OAAO,CAAC,CAAC,EAC7D,MAAM,4BAA4B,MAAM,eAAe,EACvD,MAAM,aAAa,KAAK,KAAK,QAAQ,EACrC,MAAM,cAAc,MAAM,KAAK,EAC/B,QAAQ,iBAAiB,EACzB,QAAQ;AAEX,eAAW,OAAO,YAAY;AAC5B,YAAM,QAAQ,OAAO,IAAI,KAAK,KAAK;AACnC,uBAAiB;AACjB,YAAM,MAAM,IAAI;AAChB,UAAI,OAAO,OAAO,OAAQ,QAAO,GAAG,KAAK;AAAA,UACpC,QAAO,SAAS;AAAA,IACvB;AAEA,qBAAiB,MAAM;AAAA,MACrB;AAAA,MACA;AAAA,MACA;AAAA,QACE,wBAAwB,EAAE,KAAK,gBAAgB;AAAA,QAC/C,UAAU,KAAK;AAAA,QACf,gBAAgB;AAAA,MAClB;AAAA,MACA,EAAE,OAAO,uBAAuB,SAAS,EAAE,WAAW,OAAO,EAAE;AAAA,MAC/D;AAAA,IACF;AAAA,EACF;AAEA,SAAO,aAAa,KAAK;AAAA,IACvB,WAAW,QAAQ;AAAA,IACnB,aAAa,QAAQ;AAAA,IACrB,aAAa,QAAQ;AAAA,IACrB,aAAa;AAAA,IACb;AAAA,IACA;AAAA,IACA,gBAAgB,eAAe,IAAI,CAAC,UAAU;AAAA,MAC5C,IAAI,KAAK;AAAA,MACT,WAAW,KAAK;AAAA,MAChB,WAAW,KAAK;AAAA,MAChB,WAAW,KAAK,WAAW,cAAc,KAAK;AAAA,MAC9C,WACG,KAAK,iBAAoD,aAAa;AAAA,MACzE,WACG,KAAK,iBAAoD,aAAa;AAAA,IAC3E,EAAE;AAAA,EACJ,CAAC;AACH;AAEO,MAAM,UAAU;AAAA,EACrB,MAAM,CAAC,uBAAuB;AAAA,EAC9B,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,MAAM,CAAC,uBAAuB;AAAA,MAC9B,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,kBAAkB;AAAA,QAC9C,EAAE,QAAQ,KAAK,aAAa,qBAAqB;AAAA,QACjD,EAAE,QAAQ,KAAK,aAAa,eAAe;AAAA,QAC3C,EAAE,QAAQ,KAAK,aAAa,oBAAoB;AAAA,MAClD;AAAA,IACF;AAAA,EACF;AACF;AACA,IAAO,gBAAQ;",
   "names": []
 }

package/dist/modules/communication_channels/api/get/channels/[id]/route.js

@@ -3,6 +3,8 @@ import { z } from "zod";
 import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
 import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
 import { findOneWithDecryption } from "@open-mercato/shared/lib/encryption/find";
+import { resolveOrganizationScopeForRequest } from "@open-mercato/core/modules/directory/utils/organizationScope";
+import { resolveOrganizationScopeFilter } from "@open-mercato/core/modules/directory/utils/organizationScopeFilter";
 import { CommunicationChannel } from "../../../../data/entities.js";
 import { ChannelAccessDeniedError, assertCanAccessChannel } from "../../../../lib/access-control.js";
 const metadata = {
@@ -20,17 +22,19 @@ async function GET(req, context) {
   }
   const container = await createRequestContainer();
   const em = container.resolve("em").fork();
+  const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req });
+  const orgFilter = resolveOrganizationScopeFilter(scope, auth);
   const channel = await findOneWithDecryption(
     em,
     CommunicationChannel,
     {
       id,
       tenantId: auth.tenantId,
-      organizationId: auth.orgId ?? null,
+      ...orgFilter.where,
       deletedAt: null
     },
     void 0,
-    { tenantId: auth.tenantId, organizationId: auth.orgId ?? null }
+    { tenantId: auth.tenantId, organizationId: orgFilter.rbacOrganizationId }
   );
   if (!channel) {
     return NextResponse.json({ error: "Channel not found" }, { status: 404 });
@@ -40,7 +44,7 @@ async function GET(req, context) {
     const rbac = container.resolve("rbacService");
     const acl = await rbac.loadAcl(auth.sub, {
       tenantId: auth.tenantId,
-      organizationId: auth.orgId ?? null
+      organizationId: orgFilter.rbacOrganizationId
     });
     userFeatures = acl?.isSuperAdmin ? ["*"] : Array.isArray(acl?.features) ? acl.features : [];
   } catch {

package/dist/modules/communication_channels/api/get/channels/[id]/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../../src/modules/communication_channels/api/get/channels/%5Bid%5D/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { CommunicationChannel } from '../../../../data/entities'\nimport { ChannelAccessDeniedError, assertCanAccessChannel } from '../../../../lib/access-control'\n\ntype RbacServiceLike = {\n  loadAcl: (\n    userId: string,\n    scope: { tenantId: string | null; organizationId: string | null },\n  ) => Promise<{ isSuperAdmin: boolean; features: string[]; organizations: string[] | null }>\n}\n\nexport const metadata = {\n  path: '/communication_channels/channels/[id]',\n  GET: { requireAuth: true, requireFeatures: ['communication_channels.view'] },\n}\n\ntype RouteContext = {\n  params: Promise<{ id: string }> | { id: string }\n}\n\nexport async function GET(req: Request, context: RouteContext): Promise<Response> {\n  const { id } = await context.params\n  if (!z.string().uuid().safeParse(id).success) {\n    return NextResponse.json({ error: 'Invalid channel id' }, { status: 400 })\n  }\n\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.tenantId) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n\n  const container = await createRequestContainer()\n  const em = (container.resolve('em') as EntityManager).fork()\n\n  const channel = await findOneWithDecryption(\n    em,\n    CommunicationChannel,\n    {\n      id,\n      tenantId: auth.tenantId,\n      organizationId: (auth as { orgId?: string | null }).orgId ?? null,\n      deletedAt: null,\n    },\n    undefined,\n    { tenantId: auth.tenantId as string, organizationId: (auth as { orgId?: string | null }).orgId ?? null },\n  )\n  if (!channel) {\n    return NextResponse.json({ error: 'Channel not found' }, { status: 404 })\n  }\n\n  // Per-user access guard: callers without `communication_channels.admin` can\n  // only see tenant-wide channels (userId IS NULL) or channels they own.\n  let userFeatures: string[] = []\n  try {\n    const rbac = container.resolve('rbacService') as RbacServiceLike\n    const acl = await rbac.loadAcl(auth.sub as string, {\n      tenantId: auth.tenantId as string,\n      organizationId: (auth as { orgId?: string | null }).orgId ?? null,\n    })\n    userFeatures = acl?.isSuperAdmin\n      ? ['*']\n      : (Array.isArray(acl?.features) ? acl.features : [])\n  } catch {\n    userFeatures = []\n  }\n  try {\n    assertCanAccessChannel(channel, auth.sub as string, userFeatures)\n  } catch (err) {\n    if (err instanceof ChannelAccessDeniedError) {\n      // 404 (not 403) \u2014 don't leak existence of other users' channels.\n      return NextResponse.json({ error: 'Channel not found' }, { status: 404 })\n    }\n    throw err\n  }\n\n  return NextResponse.json({\n    id: channel.id,\n    providerKey: channel.providerKey,\n    channelType: channel.channelType,\n    displayName: channel.displayName,\n    externalIdentifier: channel.externalIdentifier ?? null,\n    credentialsRef: channel.credentialsRef ?? null,\n    capabilities: channel.capabilities ?? null,\n    isActive: channel.isActive,\n    organizationId: channel.organizationId ?? null,\n    createdAt: channel.createdAt?.toISOString?.() ?? null,\n    updatedAt: channel.updatedAt?.toISOString?.() ?? null,\n  })\n}\n\nexport const openApi = {\n  tags: ['CommunicationChannels'],\n  methods: {\n    GET: {\n      summary: 'Get a single communication channel by id',\n      tags: ['CommunicationChannels'],\n      responses: [\n        { status: 200, description: 'Channel detail' },\n        { status: 400, description: 'Invalid channel id' },\n        { status: 401, description: 'Unauthorized' },\n        { status: 404, description: 'Channel not found' },\n      ],\n    },\n  },\n}\nexport default GET\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AAEvC,SAAS,6BAA6B;AACtC,SAAS,4BAA4B;AACrC,SAAS,0BAA0B,8BAA8B;AAS1D,MAAM,WAAW;AAAA,EACtB,MAAM;AAAA,EACN,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,6BAA6B,EAAE;AAC7E;AAMA,eAAsB,IAAI,KAAc,SAA0C;AAChF,QAAM,EAAE,GAAG,IAAI,MAAM,QAAQ;AAC7B,MAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,SAAS;AAC5C,WAAO,aAAa,KAAK,EAAE,OAAO,qBAAqB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC3E;AAEA,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,UAAU;AACnB,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAE3D,QAAM,UAAU,MAAM;AAAA,IACpB;AAAA,IACA;AAAA,IACA;AAAA,MACE;AAAA,MACA,UAAU,KAAK;AAAA,MACf,gBAAiB,KAAmC,SAAS;AAAA,MAC7D,WAAW;AAAA,IACb;AAAA,IACA;AAAA,IACA,EAAE,UAAU,KAAK,UAAoB,gBAAiB,KAAmC,SAAS,KAAK;AAAA,EACzG;AACA,MAAI,CAAC,SAAS;AACZ,WAAO,aAAa,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC1E;AAIA,MAAI,eAAyB,CAAC;AAC9B,MAAI;AACF,UAAM,OAAO,UAAU,QAAQ,aAAa;AAC5C,UAAM,MAAM,MAAM,KAAK,QAAQ,KAAK,KAAe;AAAA,MACjD,UAAU,KAAK;AAAA,MACf,gBAAiB,KAAmC,SAAS;AAAA,IAC/D,CAAC;AACD,mBAAe,KAAK,eAChB,CAAC,GAAG,IACH,MAAM,QAAQ,KAAK,QAAQ,IAAI,IAAI,WAAW,CAAC;AAAA,EACtD,QAAQ;AACN,mBAAe,CAAC;AAAA,EAClB;AACA,MAAI;AACF,2BAAuB,SAAS,KAAK,KAAe,YAAY;AAAA,EAClE,SAAS,KAAK;AACZ,QAAI,eAAe,0BAA0B;AAE3C,aAAO,aAAa,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC1E;AACA,UAAM;AAAA,EACR;AAEA,SAAO,aAAa,KAAK;AAAA,IACvB,IAAI,QAAQ;AAAA,IACZ,aAAa,QAAQ;AAAA,IACrB,aAAa,QAAQ;AAAA,IACrB,aAAa,QAAQ;AAAA,IACrB,oBAAoB,QAAQ,sBAAsB;AAAA,IAClD,gBAAgB,QAAQ,kBAAkB;AAAA,IAC1C,cAAc,QAAQ,gBAAgB;AAAA,IACtC,UAAU,QAAQ;AAAA,IAClB,gBAAgB,QAAQ,kBAAkB;AAAA,IAC1C,WAAW,QAAQ,WAAW,cAAc,KAAK;AAAA,IACjD,WAAW,QAAQ,WAAW,cAAc,KAAK;AAAA,EACnD,CAAC;AACH;AAEO,MAAM,UAAU;AAAA,EACrB,MAAM,CAAC,uBAAuB;AAAA,EAC9B,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,MAAM,CAAC,uBAAuB;AAAA,MAC9B,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,iBAAiB;AAAA,QAC7C,EAAE,QAAQ,KAAK,aAAa,qBAAqB;AAAA,QACjD,EAAE,QAAQ,KAAK,aAAa,eAAe;AAAA,QAC3C,EAAE,QAAQ,KAAK,aAAa,oBAAoB;AAAA,MAClD;AAAA,IACF;AAAA,EACF;AACF;AACA,IAAO,gBAAQ;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { resolveOrganizationScopeFilter } from '@open-mercato/core/modules/directory/utils/organizationScopeFilter'\nimport { CommunicationChannel } from '../../../../data/entities'\nimport { ChannelAccessDeniedError, assertCanAccessChannel } from '../../../../lib/access-control'\n\ntype RbacServiceLike = {\n  loadAcl: (\n    userId: string,\n    scope: { tenantId: string | null; organizationId: string | null },\n  ) => Promise<{ isSuperAdmin: boolean; features: string[]; organizations: string[] | null }>\n}\n\nexport const metadata = {\n  path: '/communication_channels/channels/[id]',\n  GET: { requireAuth: true, requireFeatures: ['communication_channels.view'] },\n}\n\ntype RouteContext = {\n  params: Promise<{ id: string }> | { id: string }\n}\n\nexport async function GET(req: Request, context: RouteContext): Promise<Response> {\n  const { id } = await context.params\n  if (!z.string().uuid().safeParse(id).success) {\n    return NextResponse.json({ error: 'Invalid channel id' }, { status: 400 })\n  }\n\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.tenantId) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n\n  const container = await createRequestContainer()\n  const em = (container.resolve('em') as EntityManager).fork()\n\n  // Same selected-organization scoping as the list route (#5012) so a channel\n  // the list shows under the switched organization stays openable here.\n  const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n  const orgFilter = resolveOrganizationScopeFilter(scope, auth)\n\n  const channel = await findOneWithDecryption(\n    em,\n    CommunicationChannel,\n    {\n      id,\n      tenantId: auth.tenantId,\n      ...orgFilter.where,\n      deletedAt: null,\n    },\n    undefined,\n    { tenantId: auth.tenantId as string, organizationId: orgFilter.rbacOrganizationId },\n  )\n  if (!channel) {\n    return NextResponse.json({ error: 'Channel not found' }, { status: 404 })\n  }\n\n  // Per-user access guard: callers without `communication_channels.admin` can\n  // only see tenant-wide channels (userId IS NULL) or channels they own.\n  let userFeatures: string[] = []\n  try {\n    const rbac = container.resolve('rbacService') as RbacServiceLike\n    const acl = await rbac.loadAcl(auth.sub as string, {\n      tenantId: auth.tenantId as string,\n      organizationId: orgFilter.rbacOrganizationId,\n    })\n    userFeatures = acl?.isSuperAdmin\n      ? ['*']\n      : (Array.isArray(acl?.features) ? acl.features : [])\n  } catch {\n    userFeatures = []\n  }\n  try {\n    assertCanAccessChannel(channel, auth.sub as string, userFeatures)\n  } catch (err) {\n    if (err instanceof ChannelAccessDeniedError) {\n      // 404 (not 403) \u2014 don't leak existence of other users' channels.\n      return NextResponse.json({ error: 'Channel not found' }, { status: 404 })\n    }\n    throw err\n  }\n\n  return NextResponse.json({\n    id: channel.id,\n    providerKey: channel.providerKey,\n    channelType: channel.channelType,\n    displayName: channel.displayName,\n    externalIdentifier: channel.externalIdentifier ?? null,\n    credentialsRef: channel.credentialsRef ?? null,\n    capabilities: channel.capabilities ?? null,\n    isActive: channel.isActive,\n    organizationId: channel.organizationId ?? null,\n    createdAt: channel.createdAt?.toISOString?.() ?? null,\n    updatedAt: channel.updatedAt?.toISOString?.() ?? null,\n  })\n}\n\nexport const openApi = {\n  tags: ['CommunicationChannels'],\n  methods: {\n    GET: {\n      summary: 'Get a single communication channel by id',\n      tags: ['CommunicationChannels'],\n      responses: [\n        { status: 200, description: 'Channel detail' },\n        { status: 400, description: 'Invalid channel id' },\n        { status: 401, description: 'Unauthorized' },\n        { status: 404, description: 'Channel not found' },\n      ],\n    },\n  },\n}\nexport default GET\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AAEvC,SAAS,6BAA6B;AACtC,SAAS,0CAA0C;AACnD,SAAS,sCAAsC;AAC/C,SAAS,4BAA4B;AACrC,SAAS,0BAA0B,8BAA8B;AAS1D,MAAM,WAAW;AAAA,EACtB,MAAM;AAAA,EACN,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,6BAA6B,EAAE;AAC7E;AAMA,eAAsB,IAAI,KAAc,SAA0C;AAChF,QAAM,EAAE,GAAG,IAAI,MAAM,QAAQ;AAC7B,MAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,SAAS;AAC5C,WAAO,aAAa,KAAK,EAAE,OAAO,qBAAqB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC3E;AAEA,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,UAAU;AACnB,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAI3D,QAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AACxF,QAAM,YAAY,+BAA+B,OAAO,IAAI;AAE5D,QAAM,UAAU,MAAM;AAAA,IACpB;AAAA,IACA;AAAA,IACA;AAAA,MACE;AAAA,MACA,UAAU,KAAK;AAAA,MACf,GAAG,UAAU;AAAA,MACb,WAAW;AAAA,IACb;AAAA,IACA;AAAA,IACA,EAAE,UAAU,KAAK,UAAoB,gBAAgB,UAAU,mBAAmB;AAAA,EACpF;AACA,MAAI,CAAC,SAAS;AACZ,WAAO,aAAa,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC1E;AAIA,MAAI,eAAyB,CAAC;AAC9B,MAAI;AACF,UAAM,OAAO,UAAU,QAAQ,aAAa;AAC5C,UAAM,MAAM,MAAM,KAAK,QAAQ,KAAK,KAAe;AAAA,MACjD,UAAU,KAAK;AAAA,MACf,gBAAgB,UAAU;AAAA,IAC5B,CAAC;AACD,mBAAe,KAAK,eAChB,CAAC,GAAG,IACH,MAAM,QAAQ,KAAK,QAAQ,IAAI,IAAI,WAAW,CAAC;AAAA,EACtD,QAAQ;AACN,mBAAe,CAAC;AAAA,EAClB;AACA,MAAI;AACF,2BAAuB,SAAS,KAAK,KAAe,YAAY;AAAA,EAClE,SAAS,KAAK;AACZ,QAAI,eAAe,0BAA0B;AAE3C,aAAO,aAAa,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC1E;AACA,UAAM;AAAA,EACR;AAEA,SAAO,aAAa,KAAK;AAAA,IACvB,IAAI,QAAQ;AAAA,IACZ,aAAa,QAAQ;AAAA,IACrB,aAAa,QAAQ;AAAA,IACrB,aAAa,QAAQ;AAAA,IACrB,oBAAoB,QAAQ,sBAAsB;AAAA,IAClD,gBAAgB,QAAQ,kBAAkB;AAAA,IAC1C,cAAc,QAAQ,gBAAgB;AAAA,IACtC,UAAU,QAAQ;AAAA,IAClB,gBAAgB,QAAQ,kBAAkB;AAAA,IAC1C,WAAW,QAAQ,WAAW,cAAc,KAAK;AAAA,IACjD,WAAW,QAAQ,WAAW,cAAc,KAAK;AAAA,EACnD,CAAC;AACH;AAEO,MAAM,UAAU;AAAA,EACrB,MAAM,CAAC,uBAAuB;AAAA,EAC9B,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,MAAM,CAAC,uBAAuB;AAAA,MAC9B,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,iBAAiB;AAAA,QAC7C,EAAE,QAAQ,KAAK,aAAa,qBAAqB;AAAA,QACjD,EAAE,QAAQ,KAAK,aAAa,eAAe;AAAA,QAC3C,EAAE,QAAQ,KAAK,aAAa,oBAAoB;AAAA,MAClD;AAAA,IACF;AAAA,EACF;AACF;AACA,IAAO,gBAAQ;",
   "names": []
 }

package/dist/modules/communication_channels/api/get/channels/route.js

@@ -3,6 +3,8 @@ import { z } from "zod";
 import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
 import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
 import { findAndCountWithDecryption } from "@open-mercato/shared/lib/encryption/find";
+import { resolveOrganizationScopeForRequest } from "@open-mercato/core/modules/directory/utils/organizationScope";
+import { resolveOrganizationScopeFilter } from "@open-mercato/core/modules/directory/utils/organizationScopeFilter";
 import { CommunicationChannel } from "../../../data/entities.js";
 const metadata = {
   path: "/communication_channels/channels",
@@ -31,9 +33,11 @@ async function GET(req) {
   const { page, pageSize, providerKey, channelType, isActive } = parsed.data;
   const container = await createRequestContainer();
   const em = container.resolve("em").fork();
+  const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req });
+  const orgFilter = resolveOrganizationScopeFilter(scope, auth);
   const where = {
     tenantId: auth.tenantId,
-    organizationId: auth.orgId ?? null,
+    ...orgFilter.where,
     deletedAt: null,
     userId: null
   };
@@ -49,7 +53,7 @@ async function GET(req) {
       offset: (page - 1) * pageSize,
       orderBy: { createdAt: "desc" }
     },
-    { tenantId: auth.tenantId, organizationId: auth.orgId ?? null }
+    { tenantId: auth.tenantId, organizationId: orgFilter.rbacOrganizationId }
   );
   return NextResponse.json({
     items: items.map(serializeChannel),

package/dist/modules/communication_channels/api/get/channels/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../src/modules/communication_channels/api/get/channels/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { findAndCountWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { CommunicationChannel } from '../../../data/entities'\n\nexport const metadata = {\n  path: '/communication_channels/channels',\n  GET: { requireAuth: true, requireFeatures: ['communication_channels.view'] },\n}\n\nconst listQuerySchema = z.object({\n  page: z.coerce.number().int().min(1).default(1),\n  pageSize: z.coerce.number().int().min(1).max(100).default(50),\n  providerKey: z.string().optional(),\n  channelType: z.string().optional(),\n  isActive: z\n    .union([z.literal('true'), z.literal('false')])\n    .optional()\n    .transform((value) => (value === undefined ? undefined : value === 'true')),\n})\n\nexport async function GET(req: Request): Promise<Response> {\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.tenantId) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n\n  const url = new URL(req.url)\n  const parsed = listQuerySchema.safeParse(Object.fromEntries(url.searchParams.entries()))\n  if (!parsed.success) {\n    return NextResponse.json(\n      { error: 'Invalid query', details: parsed.error.flatten() },\n      { status: 400 },\n    )\n  }\n  const { page, pageSize, providerKey, channelType, isActive } = parsed.data\n\n  const container = await createRequestContainer()\n  const em = (container.resolve('em') as EntityManager).fork()\n\n  // Personal mailbox privacy (v1: strict owner-only). The admin Channels page\n  // lists ONLY shared / tenant-wide channels (WhatsApp Business, shared inboxes,\n  // Slack workspaces) \u2014 rows where `user_id IS NULL`. Per-user email mailboxes\n  // (`user_id` set) are private to their owner and surface exclusively on the\n  // profile page (`/api/communication_channels/me/channels`), never here, so no\n  // one \u2014 admins included \u2014 can see another user's connected personal account.\n  const where: Record<string, unknown> = {\n    tenantId: auth.tenantId,\n    organizationId: (auth as { orgId?: string | null }).orgId ?? null,\n    deletedAt: null,\n    userId: null,\n  }\n  if (providerKey) where.providerKey = providerKey\n  if (channelType) where.channelType = channelType\n  if (isActive !== undefined) where.isActive = isActive\n\n  const [items, total] = await findAndCountWithDecryption(\n    em,\n    CommunicationChannel,\n    where,\n    {\n      limit: pageSize,\n      offset: (page - 1) * pageSize,\n      orderBy: { createdAt: 'desc' },\n    },\n    { tenantId: auth.tenantId as string, organizationId: (auth as { orgId?: string | null }).orgId ?? null },\n  )\n\n  return NextResponse.json({\n    items: items.map(serializeChannel),\n    total,\n    page,\n    pageSize,\n    totalPages: Math.max(1, Math.ceil(total / pageSize)),\n  })\n}\n\nfunction serializeChannel(channel: CommunicationChannel) {\n  return {\n    id: channel.id,\n    providerKey: channel.providerKey,\n    channelType: channel.channelType,\n    displayName: channel.displayName,\n    externalIdentifier: channel.externalIdentifier ?? null,\n    isActive: channel.isActive,\n    capabilities: channel.capabilities ?? null,\n    createdAt: channel.createdAt?.toISOString?.() ?? null,\n    updatedAt: channel.updatedAt?.toISOString?.() ?? null,\n  }\n}\n\nexport const openApi = {\n  tags: ['CommunicationChannels'],\n  methods: {\n    GET: {\n      summary: 'List communication channels for the current tenant',\n      tags: ['CommunicationChannels'],\n      responses: [\n        { status: 200, description: 'Channel list (paginated)' },\n        { status: 400, description: 'Invalid query parameters' },\n        { status: 401, description: 'Unauthorized' },\n      ],\n    },\n  },\n}\nexport default GET\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AAEvC,SAAS,kCAAkC;AAC3C,SAAS,4BAA4B;AAE9B,MAAM,WAAW;AAAA,EACtB,MAAM;AAAA,EACN,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,6BAA6B,EAAE;AAC7E;AAEA,MAAM,kBAAkB,EAAE,OAAO;AAAA,EAC/B,MAAM,EAAE,OAAO,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,QAAQ,CAAC;AAAA,EAC9C,UAAU,EAAE,OAAO,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,QAAQ,EAAE;AAAA,EAC5D,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,EACjC,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,EACjC,UAAU,EACP,MAAM,CAAC,EAAE,QAAQ,MAAM,GAAG,EAAE,QAAQ,OAAO,CAAC,CAAC,EAC7C,SAAS,EACT,UAAU,CAAC,UAAW,UAAU,SAAY,SAAY,UAAU,MAAO;AAC9E,CAAC;AAED,eAAsB,IAAI,KAAiC;AACzD,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,UAAU;AACnB,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAEA,QAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,QAAM,SAAS,gBAAgB,UAAU,OAAO,YAAY,IAAI,aAAa,QAAQ,CAAC,CAAC;AACvF,MAAI,CAAC,OAAO,SAAS;AACnB,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,iBAAiB,SAAS,OAAO,MAAM,QAAQ,EAAE;AAAA,MAC1D,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACA,QAAM,EAAE,MAAM,UAAU,aAAa,aAAa,SAAS,IAAI,OAAO;AAEtE,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAQ3D,QAAM,QAAiC;AAAA,IACrC,UAAU,KAAK;AAAA,IACf,gBAAiB,KAAmC,SAAS;AAAA,IAC7D,WAAW;AAAA,IACX,QAAQ;AAAA,EACV;AACA,MAAI,YAAa,OAAM,cAAc;AACrC,MAAI,YAAa,OAAM,cAAc;AACrC,MAAI,aAAa,OAAW,OAAM,WAAW;AAE7C,QAAM,CAAC,OAAO,KAAK,IAAI,MAAM;AAAA,IAC3B;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,MACE,OAAO;AAAA,MACP,SAAS,OAAO,KAAK;AAAA,MACrB,SAAS,EAAE,WAAW,OAAO;AAAA,IAC/B;AAAA,IACA,EAAE,UAAU,KAAK,UAAoB,gBAAiB,KAAmC,SAAS,KAAK;AAAA,EACzG;AAEA,SAAO,aAAa,KAAK;AAAA,IACvB,OAAO,MAAM,IAAI,gBAAgB;AAAA,IACjC;AAAA,IACA;AAAA,IACA;AAAA,IACA,YAAY,KAAK,IAAI,GAAG,KAAK,KAAK,QAAQ,QAAQ,CAAC;AAAA,EACrD,CAAC;AACH;AAEA,SAAS,iBAAiB,SAA+B;AACvD,SAAO;AAAA,IACL,IAAI,QAAQ;AAAA,IACZ,aAAa,QAAQ;AAAA,IACrB,aAAa,QAAQ;AAAA,IACrB,aAAa,QAAQ;AAAA,IACrB,oBAAoB,QAAQ,sBAAsB;AAAA,IAClD,UAAU,QAAQ;AAAA,IAClB,cAAc,QAAQ,gBAAgB;AAAA,IACtC,WAAW,QAAQ,WAAW,cAAc,KAAK;AAAA,IACjD,WAAW,QAAQ,WAAW,cAAc,KAAK;AAAA,EACnD;AACF;AAEO,MAAM,UAAU;AAAA,EACrB,MAAM,CAAC,uBAAuB;AAAA,EAC9B,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,MAAM,CAAC,uBAAuB;AAAA,MAC9B,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,2BAA2B;AAAA,QACvD,EAAE,QAAQ,KAAK,aAAa,2BAA2B;AAAA,QACvD,EAAE,QAAQ,KAAK,aAAa,eAAe;AAAA,MAC7C;AAAA,IACF;AAAA,EACF;AACF;AACA,IAAO,gBAAQ;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { findAndCountWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { resolveOrganizationScopeFilter } from '@open-mercato/core/modules/directory/utils/organizationScopeFilter'\nimport { CommunicationChannel } from '../../../data/entities'\n\nexport const metadata = {\n  path: '/communication_channels/channels',\n  GET: { requireAuth: true, requireFeatures: ['communication_channels.view'] },\n}\n\nconst listQuerySchema = z.object({\n  page: z.coerce.number().int().min(1).default(1),\n  pageSize: z.coerce.number().int().min(1).max(100).default(50),\n  providerKey: z.string().optional(),\n  channelType: z.string().optional(),\n  isActive: z\n    .union([z.literal('true'), z.literal('false')])\n    .optional()\n    .transform((value) => (value === undefined ? undefined : value === 'true')),\n})\n\nexport async function GET(req: Request): Promise<Response> {\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.tenantId) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n\n  const url = new URL(req.url)\n  const parsed = listQuerySchema.safeParse(Object.fromEntries(url.searchParams.entries()))\n  if (!parsed.success) {\n    return NextResponse.json(\n      { error: 'Invalid query', details: parsed.error.flatten() },\n      { status: 400 },\n    )\n  }\n  const { page, pageSize, providerKey, channelType, isActive } = parsed.data\n\n  const container = await createRequestContainer()\n  const em = (container.resolve('em') as EntityManager).fork()\n\n  // Organization scoping follows the caller's *selected* organization (the\n  // `om_selected_org` cookie the top-bar switcher writes), not the org baked\n  // into the session token \u2014 `auth.orgId` only tracks the switcher for\n  // super-admins, so filtering on it made the list ignore every switch (#5012).\n  const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n  const orgFilter = resolveOrganizationScopeFilter(scope, auth)\n\n  // Personal mailbox privacy (v1: strict owner-only). The admin Channels page\n  // lists ONLY shared / tenant-wide channels (WhatsApp Business, shared inboxes,\n  // Slack workspaces) \u2014 rows where `user_id IS NULL`. Per-user email mailboxes\n  // (`user_id` set) are private to their owner and surface exclusively on the\n  // profile page (`/api/communication_channels/me/channels`), never here, so no\n  // one \u2014 admins included \u2014 can see another user's connected personal account.\n  const where: Record<string, unknown> = {\n    tenantId: auth.tenantId,\n    ...orgFilter.where,\n    deletedAt: null,\n    userId: null,\n  }\n  if (providerKey) where.providerKey = providerKey\n  if (channelType) where.channelType = channelType\n  if (isActive !== undefined) where.isActive = isActive\n\n  const [items, total] = await findAndCountWithDecryption(\n    em,\n    CommunicationChannel,\n    where,\n    {\n      limit: pageSize,\n      offset: (page - 1) * pageSize,\n      orderBy: { createdAt: 'desc' },\n    },\n    { tenantId: auth.tenantId as string, organizationId: orgFilter.rbacOrganizationId },\n  )\n\n  return NextResponse.json({\n    items: items.map(serializeChannel),\n    total,\n    page,\n    pageSize,\n    totalPages: Math.max(1, Math.ceil(total / pageSize)),\n  })\n}\n\nfunction serializeChannel(channel: CommunicationChannel) {\n  return {\n    id: channel.id,\n    providerKey: channel.providerKey,\n    channelType: channel.channelType,\n    displayName: channel.displayName,\n    externalIdentifier: channel.externalIdentifier ?? null,\n    isActive: channel.isActive,\n    capabilities: channel.capabilities ?? null,\n    createdAt: channel.createdAt?.toISOString?.() ?? null,\n    updatedAt: channel.updatedAt?.toISOString?.() ?? null,\n  }\n}\n\nexport const openApi = {\n  tags: ['CommunicationChannels'],\n  methods: {\n    GET: {\n      summary: 'List communication channels for the current tenant',\n      tags: ['CommunicationChannels'],\n      responses: [\n        { status: 200, description: 'Channel list (paginated)' },\n        { status: 400, description: 'Invalid query parameters' },\n        { status: 401, description: 'Unauthorized' },\n      ],\n    },\n  },\n}\nexport default GET\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AAEvC,SAAS,kCAAkC;AAC3C,SAAS,0CAA0C;AACnD,SAAS,sCAAsC;AAC/C,SAAS,4BAA4B;AAE9B,MAAM,WAAW;AAAA,EACtB,MAAM;AAAA,EACN,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,6BAA6B,EAAE;AAC7E;AAEA,MAAM,kBAAkB,EAAE,OAAO;AAAA,EAC/B,MAAM,EAAE,OAAO,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,QAAQ,CAAC;AAAA,EAC9C,UAAU,EAAE,OAAO,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,QAAQ,EAAE;AAAA,EAC5D,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,EACjC,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,EACjC,UAAU,EACP,MAAM,CAAC,EAAE,QAAQ,MAAM,GAAG,EAAE,QAAQ,OAAO,CAAC,CAAC,EAC7C,SAAS,EACT,UAAU,CAAC,UAAW,UAAU,SAAY,SAAY,UAAU,MAAO;AAC9E,CAAC;AAED,eAAsB,IAAI,KAAiC;AACzD,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,UAAU;AACnB,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAEA,QAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,QAAM,SAAS,gBAAgB,UAAU,OAAO,YAAY,IAAI,aAAa,QAAQ,CAAC,CAAC;AACvF,MAAI,CAAC,OAAO,SAAS;AACnB,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,iBAAiB,SAAS,OAAO,MAAM,QAAQ,EAAE;AAAA,MAC1D,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACA,QAAM,EAAE,MAAM,UAAU,aAAa,aAAa,SAAS,IAAI,OAAO;AAEtE,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAM3D,QAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AACxF,QAAM,YAAY,+BAA+B,OAAO,IAAI;AAQ5D,QAAM,QAAiC;AAAA,IACrC,UAAU,KAAK;AAAA,IACf,GAAG,UAAU;AAAA,IACb,WAAW;AAAA,IACX,QAAQ;AAAA,EACV;AACA,MAAI,YAAa,OAAM,cAAc;AACrC,MAAI,YAAa,OAAM,cAAc;AACrC,MAAI,aAAa,OAAW,OAAM,WAAW;AAE7C,QAAM,CAAC,OAAO,KAAK,IAAI,MAAM;AAAA,IAC3B;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,MACE,OAAO;AAAA,MACP,SAAS,OAAO,KAAK;AAAA,MACrB,SAAS,EAAE,WAAW,OAAO;AAAA,IAC/B;AAAA,IACA,EAAE,UAAU,KAAK,UAAoB,gBAAgB,UAAU,mBAAmB;AAAA,EACpF;AAEA,SAAO,aAAa,KAAK;AAAA,IACvB,OAAO,MAAM,IAAI,gBAAgB;AAAA,IACjC;AAAA,IACA;AAAA,IACA;AAAA,IACA,YAAY,KAAK,IAAI,GAAG,KAAK,KAAK,QAAQ,QAAQ,CAAC;AAAA,EACrD,CAAC;AACH;AAEA,SAAS,iBAAiB,SAA+B;AACvD,SAAO;AAAA,IACL,IAAI,QAAQ;AAAA,IACZ,aAAa,QAAQ;AAAA,IACrB,aAAa,QAAQ;AAAA,IACrB,aAAa,QAAQ;AAAA,IACrB,oBAAoB,QAAQ,sBAAsB;AAAA,IAClD,UAAU,QAAQ;AAAA,IAClB,cAAc,QAAQ,gBAAgB;AAAA,IACtC,WAAW,QAAQ,WAAW,cAAc,KAAK;AAAA,IACjD,WAAW,QAAQ,WAAW,cAAc,KAAK;AAAA,EACnD;AACF;AAEO,MAAM,UAAU;AAAA,EACrB,MAAM,CAAC,uBAAuB;AAAA,EAC9B,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,MAAM,CAAC,uBAAuB;AAAA,MAC9B,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,2BAA2B;AAAA,QACvD,EAAE,QAAQ,KAAK,aAAa,2BAA2B;AAAA,QACvD,EAAE,QAAQ,KAAK,aAAa,eAAe;AAAA,MAC7C;AAAA,IACF;AAAA,EACF;AACF;AACA,IAAO,gBAAQ;",
   "names": []
 }

package/dist/modules/customers/commands/deals.js

@@ -644,7 +644,11 @@ const updateDealCommand = {
               valueAmount: record.valueAmount ?? null,
               valueCurrency: record.valueCurrency ?? null
             },
-            { persistent: true }
+            {
+              persistent: true,
+              tenantId: record.tenantId,
+              organizationId: record.organizationId
+            }
           );
         }
       } catch (err) {

package/dist/modules/customers/commands/deals.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/customers/commands/deals.ts"],
-  "sourcesContent": ["import { registerCommand } from '@open-mercato/shared/lib/commands'\nimport type { CommandHandler } from '@open-mercato/shared/lib/commands'\nimport {\n  parseWithCustomFields,\n  setCustomFieldsIfAny,\n  emitCrudSideEffects,\n  emitCrudUndoSideEffects,\n  requireId,\n  normalizeAuthorUserId,\n} from '@open-mercato/shared/lib/commands/helpers'\nimport { withAtomicFlush } from '@open-mercato/shared/lib/commands/flush'\nimport { resolveRedoSnapshot } from '@open-mercato/shared/lib/commands/redo'\nimport { runCrudCommandWrite } from '@open-mercato/shared/lib/commands/runCrudCommandWrite'\nimport type { DataEngine } from '@open-mercato/shared/lib/data/engine'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport {\n  CustomerDeal,\n  CustomerDealPersonLink,\n  CustomerDealCompanyLink,\n  CustomerDealStageTransition,\n  CustomerPipelineStage,\n} from '../data/entities'\nimport {\n  dealCreateSchema,\n  dealUpdateSchema,\n  type DealCreateInput,\n  type DealUpdateInput,\n} from '../data/validators'\nimport {\n  ensureOrganizationScope,\n  ensureTenantScope,\n  requireCustomerEntity,\n  ensureSameScope,\n  extractUndoPayload,\n  ensureDictionaryEntry,\n} from './shared'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport {\n  loadCustomFieldSnapshot,\n  buildCustomFieldResetMap,\n  type CustomFieldChangeSet,\n} from '@open-mercato/shared/lib/commands/customFieldSnapshots'\nimport { CrudHttpError, notFound } from '@open-mercato/shared/lib/crud/errors'\nimport type { CrudIndexerConfig, CrudEventsConfig } from '@open-mercato/shared/lib/crud/types'\nimport { E } from '#generated/entities.ids.generated'\nimport { findWithDecryption, findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { isMissingDealStageTransitionTable, warnMissingDealStageTransitionTable } from '../lib/dealStageTransitionTable'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('customers')\n\nconst DEAL_ENTITY_ID = 'customers:customer_deal'\nconst dealCrudIndexer: CrudIndexerConfig<CustomerDeal> = {\n  entityType: E.customers.customer_deal,\n}\n\nconst dealCrudEvents: CrudEventsConfig = {\n  module: 'customers',\n  entity: 'deal',\n  persistent: true,\n  buildPayload: (ctx) => ({\n    id: ctx.identifiers.id,\n    organizationId: ctx.identifiers.organizationId,\n    tenantId: ctx.identifiers.tenantId,\n  }),\n}\n\ntype PipelineStageSnapshot = {\n  id: string\n  pipelineId: string\n  label: string\n  order: number\n}\n\ntype DealStageTransitionSnapshot = {\n  id: string\n  pipelineId: string\n  stageId: string\n  stageLabel: string\n  stageOrder: number\n  transitionedAt: Date | string\n  transitionedByUserId: string | null\n}\n\nfunction coerceSnapshotDate(value: Date | string | null | undefined, fieldName: string): Date | null {\n  if (value === undefined || value === null) return null\n  if (value instanceof Date) return value\n  const date = new Date(value)\n  if (Number.isNaN(date.getTime())) {\n    throw new Error(`[internal] Invalid ${fieldName} undo snapshot date: ${value}`)\n  }\n  return date\n}\n\nfunction coerceRequiredSnapshotDate(value: Date | string, fieldName: string): Date {\n  const date = coerceSnapshotDate(value, fieldName)\n  if (!date) {\n    throw new Error(`[internal] Missing ${fieldName} undo snapshot date`)\n  }\n  return date\n}\n\nasync function loadPipelineStageSnapshot(\n  em: EntityManager,\n  pipelineStageId: string,\n  tenantId: string,\n  organizationId: string,\n): Promise<PipelineStageSnapshot | null> {\n  const stage = await findOneWithDecryption(em, CustomerPipelineStage, { id: pipelineStageId }, {}, { tenantId, organizationId })\n  if (!stage) return null\n  return {\n    id: stage.id,\n    pipelineId: stage.pipelineId,\n    label: stage.label,\n    order: stage.order,\n  }\n}\n\nasync function resolvePipelineStageValue(\n  em: EntityManager,\n  pipelineStageId: string,\n  tenantId: string,\n  organizationId: string,\n): Promise<string | null> {\n  const stage = await loadPipelineStageSnapshot(em, pipelineStageId, tenantId, organizationId)\n  if (!stage) return null\n  const entry = await ensureDictionaryEntry(em, {\n    tenantId,\n    organizationId,\n    kind: 'pipeline_stage',\n    value: stage.label,\n  })\n  return entry?.value ?? stage.label\n}\n\nfunction resolvePipelineAssignment(input: {\n  pipelineId?: string | null\n  pipelineStageId?: string | null\n  stageSnapshot: PipelineStageSnapshot | null\n}): { pipelineId: string | null; pipelineStageId: string | null } {\n  const requestedPipelineId = input.pipelineId ?? null\n  const requestedPipelineStageId = input.pipelineStageId ?? null\n\n  if (requestedPipelineStageId && !input.stageSnapshot) {\n    throw new CrudHttpError(400, { error: 'Pipeline stage not found' })\n  }\n\n  if (\n    requestedPipelineId &&\n    input.stageSnapshot &&\n    input.stageSnapshot.pipelineId !== requestedPipelineId\n  ) {\n    throw new CrudHttpError(400, {\n      error: 'Pipeline stage does not belong to the selected pipeline',\n    })\n  }\n\n  return {\n    pipelineId: requestedPipelineId ?? input.stageSnapshot?.pipelineId ?? null,\n    pipelineStageId: requestedPipelineStageId,\n  }\n}\n\nasync function upsertDealStageTransition(\n  em: EntityManager,\n  input: {\n    deal: CustomerDeal\n    pipelineId: string\n    stageId: string\n    stageLabel: string\n    stageOrder: number\n    transitionedByUserId: string | null\n    transitionedAt?: Date\n  },\n): Promise<void> {\n  let existing: CustomerDealStageTransition | null = null\n  try {\n    existing = await findOneWithDecryption(\n      em,\n      CustomerDealStageTransition,\n      { deal: input.deal.id, stageId: input.stageId, deletedAt: null },\n      {},\n      { tenantId: input.deal.tenantId, organizationId: input.deal.organizationId },\n    )\n  } catch (error) {\n    if (!isMissingDealStageTransitionTable(error)) {\n      throw error\n    }\n    warnMissingDealStageTransitionTable('customers.commands.deals.upsertTransition')\n    return\n  }\n  const transitionedAt = input.transitionedAt ?? new Date()\n  if (existing) {\n    existing.pipelineId = input.pipelineId\n    existing.stageLabel = input.stageLabel\n    existing.stageOrder = input.stageOrder\n    existing.transitionedAt = transitionedAt\n    existing.transitionedByUserId = input.transitionedByUserId\n    existing.deletedAt = null\n    existing.isActive = true\n    return\n  }\n\n  const transition = em.create(CustomerDealStageTransition, {\n    organizationId: input.deal.organizationId,\n    tenantId: input.deal.tenantId,\n    deal: input.deal,\n    pipelineId: input.pipelineId,\n    stageId: input.stageId,\n    stageLabel: input.stageLabel,\n    stageOrder: input.stageOrder,\n    transitionedAt,\n    transitionedByUserId: input.transitionedByUserId,\n    isActive: true,\n  })\n  em.persist(transition)\n}\n\nasync function deleteDealStageTransitions(em: EntityManager, deal: CustomerDeal): Promise<void> {\n  try {\n    await em.nativeDelete(CustomerDealStageTransition, { deal: deal.id })\n  } catch (error) {\n    if (!isMissingDealStageTransitionTable(error)) {\n      throw error\n    }\n    warnMissingDealStageTransitionTable('customers.commands.deals.deleteTransitions')\n  }\n}\n\nasync function restoreDealStageTransitions(\n  em: EntityManager,\n  deal: CustomerDeal,\n  transitions: DealStageTransitionSnapshot[],\n): Promise<void> {\n  if (!transitions.length) return\n  for (const transitionSnapshot of transitions) {\n    const transition = em.create(CustomerDealStageTransition, {\n      id: transitionSnapshot.id,\n      organizationId: deal.organizationId,\n      tenantId: deal.tenantId,\n      deal,\n      pipelineId: transitionSnapshot.pipelineId,\n      stageId: transitionSnapshot.stageId,\n      stageLabel: transitionSnapshot.stageLabel,\n      stageOrder: transitionSnapshot.stageOrder,\n      transitionedAt: coerceRequiredSnapshotDate(transitionSnapshot.transitionedAt, 'transitionedAt'),\n      transitionedByUserId: transitionSnapshot.transitionedByUserId,\n      isActive: true,\n    })\n    em.persist(transition)\n  }\n}\n\ntype DealSnapshot = {\n  deal: {\n    id: string\n    organizationId: string\n    tenantId: string\n    title: string\n    description: string | null\n    status: string\n    pipelineStage: string | null\n    pipelineId: string | null\n    pipelineStageId: string | null\n    valueAmount: string | null\n    valueCurrency: string | null\n    probability: number | null\n    expectedCloseAt: Date | string | null\n    ownerUserId: string | null\n    source: string | null\n    closureOutcome: string | null\n    lossReasonId: string | null\n    lossNotes: string | null\n  }\n  people: string[]\n  primaryPersonEntityId?: string | null\n  companies: string[]\n  transitions: DealStageTransitionSnapshot[]\n  custom?: Record<string, unknown>\n}\n\ntype DealUndoPayload = {\n  before?: DealSnapshot | null\n  after?: DealSnapshot | null\n}\n\ntype DealChangeMap = Record<string, { from: unknown; to: unknown }> & {\n  custom?: CustomFieldChangeSet\n}\n\nasync function loadDealSnapshot(em: EntityManager, id: string): Promise<DealSnapshot | null> {\n  const deal = await findOneWithDecryption(em, CustomerDeal, { id, deletedAt: null })\n  if (!deal) return null\n  const decryptionScope = { tenantId: deal.tenantId ?? null, organizationId: deal.organizationId ?? null }\n  const peopleLinks = await findWithDecryption(\n    em,\n    CustomerDealPersonLink,\n    { deal: deal },\n    { populate: ['person'] },\n    decryptionScope,\n  )\n  const companyLinks = await findWithDecryption(\n    em,\n    CustomerDealCompanyLink,\n    { deal: deal },\n    { populate: ['company'] },\n    decryptionScope,\n  )\n  const transitions = await findWithDecryption(\n    em,\n    CustomerDealStageTransition,\n    { deal: deal.id, deletedAt: null },\n    { orderBy: { stageOrder: 'ASC', transitionedAt: 'ASC' } },\n    decryptionScope,\n  ).catch((error: unknown) => {\n    if (!isMissingDealStageTransitionTable(error)) {\n      throw error\n    }\n    warnMissingDealStageTransitionTable('customers.commands.deals.loadSnapshot')\n    return [] as CustomerDealStageTransition[]\n  })\n  const custom = await loadCustomFieldSnapshot(em, {\n    entityId: DEAL_ENTITY_ID,\n    recordId: deal.id,\n    tenantId: deal.tenantId,\n    organizationId: deal.organizationId,\n  })\n  const primaryPerson = peopleLinks.find((link) => link.isPrimary)?.person\n  return {\n    deal: {\n      id: deal.id,\n      organizationId: deal.organizationId,\n      tenantId: deal.tenantId,\n      title: deal.title,\n      description: deal.description ?? null,\n      status: deal.status,\n      pipelineStage: deal.pipelineStage ?? null,\n      pipelineId: deal.pipelineId ?? null,\n      pipelineStageId: deal.pipelineStageId ?? null,\n      valueAmount: deal.valueAmount ?? null,\n      valueCurrency: deal.valueCurrency ?? null,\n      probability: deal.probability ?? null,\n      expectedCloseAt: deal.expectedCloseAt ?? null,\n      ownerUserId: deal.ownerUserId ?? null,\n      source: deal.source ?? null,\n      closureOutcome: deal.closureOutcome ?? null,\n      lossReasonId: deal.lossReasonId ?? null,\n      lossNotes: deal.lossNotes ?? null,\n    },\n    people: peopleLinks.map((link) =>\n      typeof link.person === 'string' ? link.person : link.person.id\n    ),\n    primaryPersonEntityId:\n      typeof primaryPerson === 'string' ? primaryPerson : primaryPerson?.id ?? null,\n    companies: companyLinks.map((link) =>\n      typeof link.company === 'string' ? link.company : link.company.id\n    ),\n    transitions: transitions.map((transition) => ({\n      id: transition.id,\n      pipelineId: transition.pipelineId,\n      stageId: transition.stageId,\n      stageLabel: transition.stageLabel,\n      stageOrder: transition.stageOrder,\n      transitionedAt: transition.transitionedAt,\n      transitionedByUserId: transition.transitionedByUserId ?? null,\n    })),\n    custom,\n  }\n}\n\nfunction toNumericString(value: number | null | undefined): string | null {\n  if (value === undefined || value === null) return null\n  return value.toString()\n}\n\nasync function syncDealPeople(\n  em: EntityManager,\n  deal: CustomerDeal,\n  personIds: string[] | undefined | null,\n  primaryPersonEntityId?: string | null\n): Promise<void> {\n  if (personIds === undefined) {\n    if (primaryPersonEntityId === undefined) return\n    const links = await em.find(CustomerDealPersonLink, { deal })\n    if (primaryPersonEntityId !== null && !links.some((link) => link.person.id === primaryPersonEntityId)) {\n      const { translate } = await resolveTranslations()\n      throw new CrudHttpError(400, {\n        error: translate(\n          'customers.errors.primaryPersonMustBeLinked',\n          'Primary person must be linked to the deal',\n        ),\n      })\n    }\n    for (const link of links) {\n      link.isPrimary = false\n    }\n    await em.flush()\n    if (primaryPersonEntityId !== null) {\n      const primaryLink = links.find((link) => link.person.id === primaryPersonEntityId)\n      if (primaryLink) primaryLink.isPrimary = true\n    }\n    return\n  }\n  const unique = Array.from(new Set(personIds ?? []))\n  if (primaryPersonEntityId !== undefined && primaryPersonEntityId !== null && !unique.includes(primaryPersonEntityId)) {\n    const { translate } = await resolveTranslations()\n    throw new CrudHttpError(400, {\n      error: translate(\n        'customers.errors.primaryPersonMustBeLinked',\n        'Primary person must be linked to the deal',\n      ),\n    })\n  }\n  let effectivePrimaryId = primaryPersonEntityId\n  if (effectivePrimaryId === undefined) {\n    const existingPrimary = await em.findOne(CustomerDealPersonLink, { deal, isPrimary: true })\n    effectivePrimaryId = existingPrimary?.person?.id ?? null\n  }\n  await em.nativeDelete(CustomerDealPersonLink, { deal })\n  if (!unique.length) return\n  for (const personId of unique) {\n    const person = await requireCustomerEntity(em, personId, { tenantId: deal.tenantId, organizationId: deal.organizationId }, 'person', 'Person not found')\n    ensureSameScope(person, deal.organizationId, deal.tenantId)\n    const link = em.create(CustomerDealPersonLink, {\n      deal,\n      person,\n      isPrimary: personId === effectivePrimaryId,\n    })\n    em.persist(link)\n  }\n}\n\nasync function syncDealCompanies(\n  em: EntityManager,\n  deal: CustomerDeal,\n  companyIds: string[] | undefined | null\n): Promise<void> {\n  if (companyIds === undefined) return\n  await em.nativeDelete(CustomerDealCompanyLink, { deal })\n  if (!companyIds || !companyIds.length) return\n  const unique = Array.from(new Set(companyIds))\n  for (const companyId of unique) {\n    const company = await requireCustomerEntity(em, companyId, { tenantId: deal.tenantId, organizationId: deal.organizationId }, 'company', 'Company not found')\n    ensureSameScope(company, deal.organizationId, deal.tenantId)\n    const link = em.create(CustomerDealCompanyLink, {\n      deal,\n      company,\n    })\n    em.persist(link)\n  }\n}\n\nconst createDealCommand: CommandHandler<DealCreateInput, { dealId: string }> = {\n  id: 'customers.deals.create',\n  async execute(rawInput, ctx) {\n    const { parsed, custom } = parseWithCustomFields(dealCreateSchema, rawInput)\n    ensureTenantScope(ctx, parsed.tenantId)\n    ensureOrganizationScope(ctx, parsed.organizationId)\n\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n    const normalizedTransitionAuthorUserId = normalizeAuthorUserId(null, ctx.auth)\n    let deal!: CustomerDeal\n    let stageSnapshot: PipelineStageSnapshot | null = null\n    let pipelineAssignment: { pipelineId: string | null; pipelineStageId: string | null } = {\n      pipelineId: null,\n      pipelineStageId: null,\n    }\n    let resolvedPipelineStageLabel: string | null = null\n    await withAtomicFlush(em, [\n      async () => {\n        stageSnapshot = parsed.pipelineStageId\n          ? await loadPipelineStageSnapshot(em, parsed.pipelineStageId, parsed.tenantId, parsed.organizationId)\n          : null\n        pipelineAssignment = resolvePipelineAssignment({\n          pipelineId: parsed.pipelineId,\n          pipelineStageId: parsed.pipelineStageId,\n          stageSnapshot,\n        })\n        resolvedPipelineStageLabel = stageSnapshot\n          ? (await ensureDictionaryEntry(em, {\n            tenantId: parsed.tenantId,\n            organizationId: parsed.organizationId,\n            kind: 'pipeline_stage',\n            value: stageSnapshot.label,\n          }))?.value ?? stageSnapshot.label\n          : parsed.pipelineStage ?? null\n      },\n      async () => {\n        deal = em.create(CustomerDeal, {\n          organizationId: parsed.organizationId,\n          tenantId: parsed.tenantId,\n          title: parsed.title,\n          description: parsed.description ?? null,\n          status: parsed.status ?? 'open',\n          pipelineStage: resolvedPipelineStageLabel,\n          pipelineId: pipelineAssignment.pipelineId,\n          pipelineStageId: pipelineAssignment.pipelineStageId,\n          valueAmount: toNumericString(parsed.valueAmount),\n          valueCurrency: parsed.valueCurrency ?? null,\n          probability: parsed.probability ?? null,\n          expectedCloseAt: parsed.expectedCloseAt ?? null,\n          ownerUserId: parsed.ownerUserId ?? null,\n          source: parsed.source ?? null,\n          closureOutcome: parsed.closureOutcome ?? null,\n          lossReasonId: parsed.lossReasonId ?? null,\n          lossNotes: parsed.lossNotes ?? null,\n        })\n        em.persist(deal)\n        await em.flush()\n      },\n      async () => {\n        const snapshot = stageSnapshot\n        if (!snapshot) return\n        await upsertDealStageTransition(em, {\n          deal,\n          pipelineId: snapshot.pipelineId,\n          stageId: snapshot.id,\n          stageLabel: snapshot.label,\n          stageOrder: snapshot.order,\n          transitionedByUserId: normalizedTransitionAuthorUserId,\n        })\n      },\n      () => syncDealPeople(em, deal, parsed.personIds ?? [], parsed.primaryPersonEntityId),\n      () => syncDealCompanies(em, deal, parsed.companyIds ?? []),\n    ], { transaction: true })\n\n    const de = (ctx.container.resolve('dataEngine') as DataEngine)\n    await setCustomFieldsIfAny({\n      dataEngine: de,\n      entityId: DEAL_ENTITY_ID,\n      recordId: deal.id,\n      organizationId: deal.organizationId,\n      tenantId: deal.tenantId,\n      values: custom,\n      notify: false,\n    })\n\n    await emitCrudSideEffects({\n      dataEngine: de,\n      action: 'created',\n      entity: deal,\n      identifiers: {\n        id: deal.id,\n        organizationId: deal.organizationId,\n        tenantId: deal.tenantId,\n      },\n      indexer: dealCrudIndexer,\n      events: dealCrudEvents,\n    })\n\n    return { dealId: deal.id }\n  },\n  captureAfter: async (_input, result, ctx) => {\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n    return await loadDealSnapshot(em, result.dealId)\n  },\n  buildLog: async ({ result, ctx }) => {\n    const { translate } = await resolveTranslations()\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n    const snapshot = await loadDealSnapshot(em, result.dealId)\n    return {\n      actionLabel: translate('customers.audit.deals.create', 'Create deal'),\n      resourceKind: 'customers.deal',\n      resourceId: result.dealId,\n      tenantId: snapshot?.deal.tenantId ?? null,\n      organizationId: snapshot?.deal.organizationId ?? null,\n      snapshotAfter: snapshot ?? null,\n      payload: {\n        undo: {\n          after: snapshot,\n        } satisfies DealUndoPayload,\n      },\n    }\n  },\n  undo: async ({ logEntry, ctx }) => {\n    const dealId = logEntry?.resourceId\n    if (!dealId) return\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n    const deal = await findOneWithDecryption(em, CustomerDeal, { id: dealId })\n    if (!deal) return\n    await deleteDealStageTransitions(em, deal)\n    await em.nativeDelete(CustomerDealPersonLink, { deal })\n    await em.nativeDelete(CustomerDealCompanyLink, { deal })\n    em.remove(deal)\n    await em.flush()\n  },\n  redo: async ({ logEntry, ctx }) => {\n    const after = resolveRedoSnapshot<DealSnapshot>(logEntry)\n    if (!after) {\n      throw new CrudHttpError(400, { error: '[internal] redo snapshot unavailable for deal create' })\n    }\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n    let deal = await findOneWithDecryption(em, CustomerDeal, { id: after.deal.id })\n    if (!deal) {\n      deal = em.create(CustomerDeal, {\n        id: after.deal.id,\n        organizationId: after.deal.organizationId,\n        tenantId: after.deal.tenantId,\n        title: after.deal.title,\n        description: after.deal.description,\n        status: after.deal.status,\n        pipelineStage: after.deal.pipelineStage,\n        pipelineId: after.deal.pipelineId,\n        pipelineStageId: after.deal.pipelineStageId,\n        valueAmount: after.deal.valueAmount,\n        valueCurrency: after.deal.valueCurrency,\n        probability: after.deal.probability,\n        expectedCloseAt: after.deal.expectedCloseAt,\n        ownerUserId: after.deal.ownerUserId,\n        source: after.deal.source,\n        closureOutcome: after.deal.closureOutcome,\n        lossReasonId: after.deal.lossReasonId,\n        lossNotes: after.deal.lossNotes,\n      })\n      em.persist(deal)\n    }\n    const restoredDeal = deal\n    await withAtomicFlush(em, [\n      () => syncDealPeople(em, restoredDeal, after.people, after.primaryPersonEntityId),\n      () => syncDealCompanies(em, restoredDeal, after.companies),\n      () => deleteDealStageTransitions(em, restoredDeal),\n      () => restoreDealStageTransitions(em, restoredDeal, after.transitions),\n    ], { transaction: true })\n\n    const de = (ctx.container.resolve('dataEngine') as DataEngine)\n    await emitCrudSideEffects({\n      dataEngine: de,\n      action: 'created',\n      entity: restoredDeal,\n      identifiers: {\n        id: restoredDeal.id,\n        organizationId: restoredDeal.organizationId,\n        tenantId: restoredDeal.tenantId,\n      },\n      indexer: dealCrudIndexer,\n      events: dealCrudEvents,\n    })\n\n    const restoreValues = buildCustomFieldResetMap(after.custom, undefined)\n    if (Object.keys(restoreValues).length) {\n      await setCustomFieldsIfAny({\n        dataEngine: de,\n        entityId: DEAL_ENTITY_ID,\n        recordId: restoredDeal.id,\n        organizationId: restoredDeal.organizationId,\n        tenantId: restoredDeal.tenantId,\n        values: restoreValues,\n        notify: false,\n      })\n    }\n\n    return { dealId: restoredDeal.id }\n  },\n}\n\nconst updateDealCommand: CommandHandler<DealUpdateInput, { dealId: string }> = {\n  id: 'customers.deals.update',\n  async prepare(rawInput, ctx) {\n    const { parsed } = parseWithCustomFields(dealUpdateSchema, rawInput)\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n    const snapshot = await loadDealSnapshot(em, parsed.id)\n    return snapshot ? { before: snapshot } : {}\n  },\n  async execute(rawInput, ctx) {\n    const { parsed, custom } = parseWithCustomFields(dealUpdateSchema, rawInput)\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n    const deal = await findOneWithDecryption(em, CustomerDeal, { id: parsed.id, deletedAt: null })\n    const record = deal ?? null\n    if (!record) throw notFound('Deal not found')\n    ensureTenantScope(ctx, record.tenantId)\n    ensureOrganizationScope(ctx, record.organizationId)\n\n    const previousStatus = record.status\n    const previousPipelineStageId = record.pipelineStageId ?? null\n    const normalizedTransitionAuthorUserId = normalizeAuthorUserId(null, ctx.auth)\n\n    let nextStageSnapshot: PipelineStageSnapshot | null = null\n    let nextPipelineAssignment: { pipelineId: string | null; pipelineStageId: string | null } = {\n      pipelineId: record.pipelineId ?? null,\n      pipelineStageId: record.pipelineStageId ?? null,\n    }\n    let nextPipelineStageLabel: string | null = null\n    let resolvedCurrentPipelineStageLabel: string | null = null\n\n    await runCrudCommandWrite({\n      ctx,\n      em,\n      entityId: DEAL_ENTITY_ID,\n      action: 'updated',\n      scope: { tenantId: record.tenantId, organizationId: record.organizationId },\n      customFields: custom,\n      events: dealCrudEvents,\n      indexer: dealCrudIndexer,\n      sideEffect: () => ({\n        entity: record,\n        identifiers: {\n          id: record.id,\n          organizationId: record.organizationId,\n          tenantId: record.tenantId,\n        },\n      }),\n      phases: [\n        async () => {\n          const pipelineAssignmentChanged =\n            parsed.pipelineId !== undefined || parsed.pipelineStageId !== undefined\n          const requestedPipelineStageId =\n            parsed.pipelineStageId !== undefined\n              ? parsed.pipelineStageId ?? null\n              : record.pipelineStageId ?? null\n          const requestedPipelineId =\n            parsed.pipelineId !== undefined ? parsed.pipelineId ?? null : record.pipelineId ?? null\n\n          nextStageSnapshot = requestedPipelineStageId && (pipelineAssignmentChanged || !record.pipelineStage)\n            ? await loadPipelineStageSnapshot(em, requestedPipelineStageId, record.tenantId, record.organizationId)\n            : null\n          if (pipelineAssignmentChanged) {\n            nextPipelineAssignment = resolvePipelineAssignment({\n              pipelineId: requestedPipelineId,\n              pipelineStageId: requestedPipelineStageId,\n              stageSnapshot: nextStageSnapshot,\n            })\n          }\n          nextPipelineStageLabel = nextStageSnapshot\n            ? (await ensureDictionaryEntry(em, {\n              tenantId: record.tenantId,\n              organizationId: record.organizationId,\n              kind: 'pipeline_stage',\n              value: nextStageSnapshot.label,\n            }))?.value ?? nextStageSnapshot.label\n            : null\n          resolvedCurrentPipelineStageLabel =\n            !nextStageSnapshot && record.pipelineStageId && (parsed.pipelineStageId !== undefined || !record.pipelineStage)\n              ? await resolvePipelineStageValue(em, record.pipelineStageId, record.tenantId, record.organizationId)\n              : null\n        },\n        () => {\n          if (parsed.title !== undefined) record.title = parsed.title\n          if (parsed.description !== undefined) record.description = parsed.description ?? null\n          if (parsed.status !== undefined) record.status = parsed.status ?? record.status\n          if (parsed.pipelineStage !== undefined) record.pipelineStage = parsed.pipelineStage ?? null\n          if (parsed.pipelineId !== undefined || (parsed.pipelineStageId !== undefined && nextStageSnapshot)) {\n            record.pipelineId = nextPipelineAssignment.pipelineId\n          }\n          if (parsed.pipelineStageId !== undefined) record.pipelineStageId = nextPipelineAssignment.pipelineStageId\n\n          if (nextPipelineStageLabel && (parsed.pipelineStageId !== undefined || !record.pipelineStage)) {\n            record.pipelineStage = nextPipelineStageLabel\n          } else if (resolvedCurrentPipelineStageLabel && (parsed.pipelineStageId !== undefined || !record.pipelineStage)) {\n            record.pipelineStage = resolvedCurrentPipelineStageLabel\n          }\n\n          if (parsed.valueAmount !== undefined) record.valueAmount = toNumericString(parsed.valueAmount)\n          if (parsed.valueCurrency !== undefined) record.valueCurrency = parsed.valueCurrency ?? null\n          if (parsed.probability !== undefined) record.probability = parsed.probability ?? null\n          if (parsed.expectedCloseAt !== undefined) record.expectedCloseAt = parsed.expectedCloseAt ?? null\n          if (parsed.ownerUserId !== undefined) record.ownerUserId = parsed.ownerUserId ?? null\n          if (parsed.source !== undefined) record.source = parsed.source ?? null\n          if (parsed.closureOutcome !== undefined) record.closureOutcome = parsed.closureOutcome ?? null\n          if (parsed.lossReasonId !== undefined) record.lossReasonId = parsed.lossReasonId ?? null\n          if (parsed.lossNotes !== undefined) record.lossNotes = parsed.lossNotes ?? null\n        },\n        async () => {\n          // CRITICAL: persist the scalar mutations above before any further `em.findOne` / sync\n          // helpers run inside this transaction. MikroORM v7's identity-map silently discards\n          // pending scalar changes on `record` if a query (such as the stage-transition lookup\n          // inside `upsertDealStageTransition`, or the linked-entity finds inside\n          // `syncDealPeople` / `syncDealCompanies`) executes on the same `EntityManager`\n          // before we explicitly flush. Without this flush, the entire kanban drag-and-drop\n          // returns 200 OK but never actually updates `customer_deals` rows \u2014 the card\n          // snaps back to its source lane on the next refetch (see SPEC-018).\n          await em.flush()\n        },\n        async () => {\n          const snapshot = nextStageSnapshot\n          if (!snapshot) return\n          const shouldRecord =\n            parsed.pipelineStageId !== undefined &&\n            parsed.pipelineStageId !== null &&\n            parsed.pipelineStageId !== previousPipelineStageId\n          if (!shouldRecord) return\n          await upsertDealStageTransition(em, {\n            deal: record,\n            pipelineId: snapshot.pipelineId,\n            stageId: snapshot.id,\n            stageLabel: nextPipelineStageLabel ?? snapshot.label,\n            stageOrder: snapshot.order,\n            transitionedByUserId: normalizedTransitionAuthorUserId,\n          })\n        },\n        () => syncDealPeople(em, record, parsed.personIds, parsed.primaryPersonEntityId),\n        () => syncDealCompanies(em, record, parsed.companyIds),\n      ],\n    })\n\n    // Emit a lifecycle event for deal won/lost status changes; the notifications\n    // subscriber translates these into recipient notifications.\n    const newStatus = record.status\n    const normalizedStatus = newStatus === 'win' ? 'won' : newStatus === 'loose' ? 'lost' : newStatus\n    if (previousStatus !== newStatus && (normalizedStatus === 'won' || normalizedStatus === 'lost')) {\n      const closureEvent = normalizedStatus === 'won' ? 'customers.deal.won' : 'customers.deal.lost'\n      try {\n        const eventBus = ctx.container.resolve('eventBus') as { emitEvent(event: string, payload: unknown, options?: unknown): Promise<void> } | undefined\n        if (eventBus) {\n          await eventBus.emitEvent(\n            closureEvent,\n            {\n              id: record.id,\n              tenantId: record.tenantId,\n              organizationId: record.organizationId,\n              ownerUserId: record.ownerUserId ?? null,\n              title: record.title,\n              valueAmount: record.valueAmount ?? null,\n              valueCurrency: record.valueCurrency ?? null,\n            },\n            { persistent: true },\n          )\n        }\n      } catch (err) {\n        logger.warn('Deal closure event emit failed', { component: 'deals.update', closureEvent, err })\n      }\n    }\n\n    return { dealId: record.id }\n  },\n  captureAfter: async (_input, result, ctx) => {\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n    return await loadDealSnapshot(em, result.dealId)\n  },\n  buildLog: async ({ result, snapshots, ctx }) => {\n    const { translate } = await resolveTranslations()\n    const before = snapshots.before as DealSnapshot | undefined\n    if (!before) return null\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n    const afterSnapshot = await loadDealSnapshot(em, result.dealId)\n    return {\n      actionLabel: translate('customers.audit.deals.update', 'Update deal'),\n      resourceKind: 'customers.deal',\n      resourceId: before.deal.id,\n      tenantId: before.deal.tenantId,\n      organizationId: before.deal.organizationId,\n      snapshotBefore: before,\n      snapshotAfter: afterSnapshot ?? null,\n      payload: {\n        undo: {\n          before,\n          after: afterSnapshot ?? null,\n        } satisfies DealUndoPayload,\n      },\n    }\n  },\n  undo: async ({ logEntry, ctx }) => {\n    const payload = extractUndoPayload<DealUndoPayload>(logEntry)\n    const before = payload?.before\n    if (!before) return\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n    const normalizedTransitionAuthorUserId = normalizeAuthorUserId(null, ctx.auth)\n    let deal = await findOneWithDecryption(em, CustomerDeal, { id: before.deal.id })\n    if (!deal) {\n      deal = em.create(CustomerDeal, {\n        id: before.deal.id,\n        organizationId: before.deal.organizationId,\n        tenantId: before.deal.tenantId,\n        title: before.deal.title,\n        description: before.deal.description,\n        status: before.deal.status,\n        pipelineStage: before.deal.pipelineStage,\n        pipelineId: before.deal.pipelineId,\n        pipelineStageId: before.deal.pipelineStageId,\n        valueAmount: before.deal.valueAmount,\n        valueCurrency: before.deal.valueCurrency,\n        probability: before.deal.probability,\n        expectedCloseAt: coerceSnapshotDate(before.deal.expectedCloseAt, 'expectedCloseAt'),\n        ownerUserId: before.deal.ownerUserId,\n        source: before.deal.source,\n        closureOutcome: before.deal.closureOutcome,\n        lossReasonId: before.deal.lossReasonId,\n        lossNotes: before.deal.lossNotes,\n      })\n      em.persist(deal)\n    }\n    const revertedStageSnapshot = before.deal.pipelineStageId\n      ? await loadPipelineStageSnapshot(em, before.deal.pipelineStageId, before.deal.tenantId, before.deal.organizationId)\n      : null\n    const existingTransition = before.deal.pipelineStageId\n      ? before.transitions.find((transition) => transition.stageId === before.deal.pipelineStageId) ?? null\n      : null\n    const shouldRecordRevertTransition =\n      before.deal.pipelineStageId !== (payload?.after?.deal.pipelineStageId ?? null) &&\n      !!before.deal.pipelineStageId &&\n      !!(revertedStageSnapshot?.pipelineId ?? before.deal.pipelineId ?? existingTransition?.pipelineId) &&\n      !!(revertedStageSnapshot?.label ?? before.deal.pipelineStage ?? existingTransition?.stageLabel)\n\n    await withAtomicFlush(em, [\n      () => {\n        deal.title = before.deal.title\n        deal.description = before.deal.description\n        deal.status = before.deal.status\n        deal.pipelineStage = before.deal.pipelineStage\n        deal.pipelineId = before.deal.pipelineId\n        deal.pipelineStageId = before.deal.pipelineStageId\n        deal.valueAmount = before.deal.valueAmount\n        deal.valueCurrency = before.deal.valueCurrency\n        deal.probability = before.deal.probability\n        deal.expectedCloseAt = coerceSnapshotDate(before.deal.expectedCloseAt, 'expectedCloseAt')\n        deal.ownerUserId = before.deal.ownerUserId\n        deal.source = before.deal.source\n        deal.closureOutcome = before.deal.closureOutcome\n        deal.lossReasonId = before.deal.lossReasonId\n        deal.lossNotes = before.deal.lossNotes\n      },\n      async () => {\n        // Mirror of the fix applied to the forward `execute` path: persist the scalar\n        // mutations on `deal` before any further `em.findOne` (the transition lookup\n        // inside `upsertDealStageTransition`) or sync-helper queries run on the same EM.\n        // MikroORM v7 silently discards the pending scalar changes if we don't flush here\n        // (see SPEC-018), which would make an undo of a kanban stage move silently no-op.\n        await em.flush()\n      },\n      async () => {\n        if (!shouldRecordRevertTransition || !before.deal.pipelineStageId) return\n        const pipelineId = revertedStageSnapshot?.pipelineId ?? before.deal.pipelineId ?? existingTransition?.pipelineId\n        const stageLabel = revertedStageSnapshot?.label ?? before.deal.pipelineStage ?? existingTransition?.stageLabel\n        if (!pipelineId || !stageLabel) return\n        await upsertDealStageTransition(em, {\n          deal,\n          pipelineId,\n          stageId: before.deal.pipelineStageId,\n          stageLabel,\n          stageOrder: revertedStageSnapshot?.order ?? existingTransition?.stageOrder ?? 0,\n          transitionedByUserId: normalizedTransitionAuthorUserId,\n        })\n      },\n      () => syncDealPeople(em, deal, before.people, before.primaryPersonEntityId),\n      () => syncDealCompanies(em, deal, before.companies),\n    ], { transaction: true })\n\n    const de = (ctx.container.resolve('dataEngine') as DataEngine)\n    await emitCrudUndoSideEffects({\n      dataEngine: de,\n      action: 'updated',\n      entity: deal,\n      identifiers: {\n        id: deal.id,\n        organizationId: deal.organizationId,\n        tenantId: deal.tenantId,\n      },\n      indexer: dealCrudIndexer,\n      events: dealCrudEvents,\n    })\n\n    const resetValues = buildCustomFieldResetMap(before.custom, payload?.after?.custom)\n    if (Object.keys(resetValues).length) {\n      await setCustomFieldsIfAny({\n        dataEngine: de,\n        entityId: DEAL_ENTITY_ID,\n        recordId: deal.id,\n        organizationId: deal.organizationId,\n        tenantId: deal.tenantId,\n        values: resetValues,\n        notify: false,\n      })\n    }\n  },\n}\n\nconst deleteDealCommand: CommandHandler<{ body?: Record<string, unknown>; query?: Record<string, unknown> }, { dealId: string }> =\n  {\n    id: 'customers.deals.delete',\n    async prepare(input, ctx) {\n      const id = requireId(input, 'Deal id required')\n      const em = (ctx.container.resolve('em') as EntityManager).fork()\n      const snapshot = await loadDealSnapshot(em, id)\n      return snapshot ? { before: snapshot } : {}\n    },\n    async execute(input, ctx) {\n      const id = requireId(input, 'Deal id required')\n      const em = (ctx.container.resolve('em') as EntityManager).fork()\n      const deal = await findOneWithDecryption(em, CustomerDeal, { id, deletedAt: null })\n      const record = deal ?? null\n      if (!record) throw notFound('Deal not found')\n      ensureTenantScope(ctx, record.tenantId)\n      ensureOrganizationScope(ctx, record.organizationId)\n      await deleteDealStageTransitions(em, record)\n      await em.nativeDelete(CustomerDealPersonLink, { deal: record })\n      await em.nativeDelete(CustomerDealCompanyLink, { deal: record })\n      em.remove(record)\n      await em.flush()\n\n      const de = (ctx.container.resolve('dataEngine') as DataEngine)\n      await emitCrudSideEffects({\n        dataEngine: de,\n        action: 'deleted',\n        entity: record,\n        identifiers: {\n          id: record.id,\n          organizationId: record.organizationId,\n          tenantId: record.tenantId,\n        },\n        indexer: dealCrudIndexer,\n        events: dealCrudEvents,\n      })\n      return { dealId: record.id }\n    },\n    buildLog: async ({ snapshots }) => {\n      const before = snapshots.before as DealSnapshot | undefined\n      if (!before) return null\n      const { translate } = await resolveTranslations()\n      return {\n        actionLabel: translate('customers.audit.deals.delete', 'Delete deal'),\n        resourceKind: 'customers.deal',\n        resourceId: before.deal.id,\n        tenantId: before.deal.tenantId,\n        organizationId: before.deal.organizationId,\n        snapshotBefore: before,\n        payload: {\n          undo: {\n            before,\n          } satisfies DealUndoPayload,\n        },\n      }\n    },\n    undo: async ({ logEntry, ctx }) => {\n      const payload = extractUndoPayload<DealUndoPayload>(logEntry)\n      const before = payload?.before\n      if (!before) return\n      const em = (ctx.container.resolve('em') as EntityManager).fork()\n      let deal = await findOneWithDecryption(em, CustomerDeal, { id: before.deal.id })\n      if (!deal) {\n        deal = em.create(CustomerDeal, {\n          id: before.deal.id,\n          organizationId: before.deal.organizationId,\n          tenantId: before.deal.tenantId,\n          title: before.deal.title,\n          description: before.deal.description,\n          status: before.deal.status,\n          pipelineStage: before.deal.pipelineStage,\n          pipelineId: before.deal.pipelineId,\n          pipelineStageId: before.deal.pipelineStageId,\n          valueAmount: before.deal.valueAmount,\n          valueCurrency: before.deal.valueCurrency,\n          probability: before.deal.probability,\n          expectedCloseAt: coerceSnapshotDate(before.deal.expectedCloseAt, 'expectedCloseAt'),\n          ownerUserId: before.deal.ownerUserId,\n          source: before.deal.source,\n          closureOutcome: before.deal.closureOutcome,\n          lossReasonId: before.deal.lossReasonId,\n          lossNotes: before.deal.lossNotes,\n        })\n        em.persist(deal)\n      }\n      await withAtomicFlush(em, [\n        () => syncDealPeople(em, deal, before.people, before.primaryPersonEntityId),\n        () => syncDealCompanies(em, deal, before.companies),\n        () => deleteDealStageTransitions(em, deal),\n        () => restoreDealStageTransitions(em, deal, before.transitions),\n      ], { transaction: true })\n\n      const de = (ctx.container.resolve('dataEngine') as DataEngine)\n      await emitCrudUndoSideEffects({\n        dataEngine: de,\n        action: 'created',\n        entity: deal,\n        identifiers: {\n          id: deal.id,\n          organizationId: deal.organizationId,\n          tenantId: deal.tenantId,\n        },\n        indexer: dealCrudIndexer,\n        events: dealCrudEvents,\n      })\n\n      const resetValues = buildCustomFieldResetMap(before.custom, undefined)\n      if (Object.keys(resetValues).length) {\n        await setCustomFieldsIfAny({\n          dataEngine: de,\n          entityId: DEAL_ENTITY_ID,\n          recordId: deal.id,\n          organizationId: deal.organizationId,\n          tenantId: deal.tenantId,\n          values: resetValues,\n          notify: false,\n        })\n      }\n    },\n  }\n\nregisterCommand(createDealCommand)\nregisterCommand(updateDealCommand)\nregisterCommand(deleteDealCommand)\n"],
-  "mappings": "AAAA,SAAS,uBAAuB;AAEhC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,uBAAuB;AAChC,SAAS,2BAA2B;AACpC,SAAS,2BAA2B;AAGpC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,OAGK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,2BAA2B;AACpC;AAAA,EACE;AAAA,EACA;AAAA,OAEK;AACP,SAAS,eAAe,gBAAgB;AAExC,SAAS,SAAS;AAClB,SAAS,oBAAoB,6BAA6B;AAC1D,SAAS,mCAAmC,2CAA2C;AACvF,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,WAAW;AAEvC,MAAM,iBAAiB;AACvB,MAAM,kBAAmD;AAAA,EACvD,YAAY,EAAE,UAAU;AAC1B;AAEA,MAAM,iBAAmC;AAAA,EACvC,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,YAAY;AAAA,EACZ,cAAc,CAAC,SAAS;AAAA,IACtB,IAAI,IAAI,YAAY;AAAA,IACpB,gBAAgB,IAAI,YAAY;AAAA,IAChC,UAAU,IAAI,YAAY;AAAA,EAC5B;AACF;AAmBA,SAAS,mBAAmB,OAAyC,WAAgC;AACnG,MAAI,UAAU,UAAa,UAAU,KAAM,QAAO;AAClD,MAAI,iBAAiB,KAAM,QAAO;AAClC,QAAM,OAAO,IAAI,KAAK,KAAK;AAC3B,MAAI,OAAO,MAAM,KAAK,QAAQ,CAAC,GAAG;AAChC,UAAM,IAAI,MAAM,sBAAsB,SAAS,wBAAwB,KAAK,EAAE;AAAA,EAChF;AACA,SAAO;AACT;AAEA,SAAS,2BAA2B,OAAsB,WAAyB;AACjF,QAAM,OAAO,mBAAmB,OAAO,SAAS;AAChD,MAAI,CAAC,MAAM;AACT,UAAM,IAAI,MAAM,sBAAsB,SAAS,qBAAqB;AAAA,EACtE;AACA,SAAO;AACT;AAEA,eAAe,0BACb,IACA,iBACA,UACA,gBACuC;AACvC,QAAM,QAAQ,MAAM,sBAAsB,IAAI,uBAAuB,EAAE,IAAI,gBAAgB,GAAG,CAAC,GAAG,EAAE,UAAU,eAAe,CAAC;AAC9H,MAAI,CAAC,MAAO,QAAO;AACnB,SAAO;AAAA,IACL,IAAI,MAAM;AAAA,IACV,YAAY,MAAM;AAAA,IAClB,OAAO,MAAM;AAAA,IACb,OAAO,MAAM;AAAA,EACf;AACF;AAEA,eAAe,0BACb,IACA,iBACA,UACA,gBACwB;AACxB,QAAM,QAAQ,MAAM,0BAA0B,IAAI,iBAAiB,UAAU,cAAc;AAC3F,MAAI,CAAC,MAAO,QAAO;AACnB,QAAM,QAAQ,MAAM,sBAAsB,IAAI;AAAA,IAC5C;AAAA,IACA;AAAA,IACA,MAAM;AAAA,IACN,OAAO,MAAM;AAAA,EACf,CAAC;AACD,SAAO,OAAO,SAAS,MAAM;AAC/B;AAEA,SAAS,0BAA0B,OAI+B;AAChE,QAAM,sBAAsB,MAAM,cAAc;AAChD,QAAM,2BAA2B,MAAM,mBAAmB;AAE1D,MAAI,4BAA4B,CAAC,MAAM,eAAe;AACpD,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,2BAA2B,CAAC;AAAA,EACpE;AAEA,MACE,uBACA,MAAM,iBACN,MAAM,cAAc,eAAe,qBACnC;AACA,UAAM,IAAI,cAAc,KAAK;AAAA,MAC3B,OAAO;AAAA,IACT,CAAC;AAAA,EACH;AAEA,SAAO;AAAA,IACL,YAAY,uBAAuB,MAAM,eAAe,cAAc;AAAA,IACtE,iBAAiB;AAAA,EACnB;AACF;AAEA,eAAe,0BACb,IACA,OASe;AACf,MAAI,WAA+C;AACnD,MAAI;AACF,eAAW,MAAM;AAAA,MACf;AAAA,MACA;AAAA,MACA,EAAE,MAAM,MAAM,KAAK,IAAI,SAAS,MAAM,SAAS,WAAW,KAAK;AAAA,MAC/D,CAAC;AAAA,MACD,EAAE,UAAU,MAAM,KAAK,UAAU,gBAAgB,MAAM,KAAK,eAAe;AAAA,IAC7E;AAAA,EACF,SAAS,OAAO;AACd,QAAI,CAAC,kCAAkC,KAAK,GAAG;AAC7C,YAAM;AAAA,IACR;AACA,wCAAoC,2CAA2C;AAC/E;AAAA,EACF;AACA,QAAM,iBAAiB,MAAM,kBAAkB,oBAAI,KAAK;AACxD,MAAI,UAAU;AACZ,aAAS,aAAa,MAAM;AAC5B,aAAS,aAAa,MAAM;AAC5B,aAAS,aAAa,MAAM;AAC5B,aAAS,iBAAiB;AAC1B,aAAS,uBAAuB,MAAM;AACtC,aAAS,YAAY;AACrB,aAAS,WAAW;AACpB;AAAA,EACF;AAEA,QAAM,aAAa,GAAG,OAAO,6BAA6B;AAAA,IACxD,gBAAgB,MAAM,KAAK;AAAA,IAC3B,UAAU,MAAM,KAAK;AAAA,IACrB,MAAM,MAAM;AAAA,IACZ,YAAY,MAAM;AAAA,IAClB,SAAS,MAAM;AAAA,IACf,YAAY,MAAM;AAAA,IAClB,YAAY,MAAM;AAAA,IAClB;AAAA,IACA,sBAAsB,MAAM;AAAA,IAC5B,UAAU;AAAA,EACZ,CAAC;AACD,KAAG,QAAQ,UAAU;AACvB;AAEA,eAAe,2BAA2B,IAAmB,MAAmC;AAC9F,MAAI;AACF,UAAM,GAAG,aAAa,6BAA6B,EAAE,MAAM,KAAK,GAAG,CAAC;AAAA,EACtE,SAAS,OAAO;AACd,QAAI,CAAC,kCAAkC,KAAK,GAAG;AAC7C,YAAM;AAAA,IACR;AACA,wCAAoC,4CAA4C;AAAA,EAClF;AACF;AAEA,eAAe,4BACb,IACA,MACA,aACe;AACf,MAAI,CAAC,YAAY,OAAQ;AACzB,aAAW,sBAAsB,aAAa;AAC5C,UAAM,aAAa,GAAG,OAAO,6BAA6B;AAAA,MACxD,IAAI,mBAAmB;AAAA,MACvB,gBAAgB,KAAK;AAAA,MACrB,UAAU,KAAK;AAAA,MACf;AAAA,MACA,YAAY,mBAAmB;AAAA,MAC/B,SAAS,mBAAmB;AAAA,MAC5B,YAAY,mBAAmB;AAAA,MAC/B,YAAY,mBAAmB;AAAA,MAC/B,gBAAgB,2BAA2B,mBAAmB,gBAAgB,gBAAgB;AAAA,MAC9F,sBAAsB,mBAAmB;AAAA,MACzC,UAAU;AAAA,IACZ,CAAC;AACD,OAAG,QAAQ,UAAU;AAAA,EACvB;AACF;AAuCA,eAAe,iBAAiB,IAAmB,IAA0C;AAC3F,QAAM,OAAO,MAAM,sBAAsB,IAAI,cAAc,EAAE,IAAI,WAAW,KAAK,CAAC;AAClF,MAAI,CAAC,KAAM,QAAO;AAClB,QAAM,kBAAkB,EAAE,UAAU,KAAK,YAAY,MAAM,gBAAgB,KAAK,kBAAkB,KAAK;AACvG,QAAM,cAAc,MAAM;AAAA,IACxB;AAAA,IACA;AAAA,IACA,EAAE,KAAW;AAAA,IACb,EAAE,UAAU,CAAC,QAAQ,EAAE;AAAA,IACvB;AAAA,EACF;AACA,QAAM,eAAe,MAAM;AAAA,IACzB;AAAA,IACA;AAAA,IACA,EAAE,KAAW;AAAA,IACb,EAAE,UAAU,CAAC,SAAS,EAAE;AAAA,IACxB;AAAA,EACF;AACA,QAAM,cAAc,MAAM;AAAA,IACxB;AAAA,IACA;AAAA,IACA,EAAE,MAAM,KAAK,IAAI,WAAW,KAAK;AAAA,IACjC,EAAE,SAAS,EAAE,YAAY,OAAO,gBAAgB,MAAM,EAAE;AAAA,IACxD;AAAA,EACF,EAAE,MAAM,CAAC,UAAmB;AAC1B,QAAI,CAAC,kCAAkC,KAAK,GAAG;AAC7C,YAAM;AAAA,IACR;AACA,wCAAoC,uCAAuC;AAC3E,WAAO,CAAC;AAAA,EACV,CAAC;AACD,QAAM,SAAS,MAAM,wBAAwB,IAAI;AAAA,IAC/C,UAAU;AAAA,IACV,UAAU,KAAK;AAAA,IACf,UAAU,KAAK;AAAA,IACf,gBAAgB,KAAK;AAAA,EACvB,CAAC;AACD,QAAM,gBAAgB,YAAY,KAAK,CAAC,SAAS,KAAK,SAAS,GAAG;AAClE,SAAO;AAAA,IACL,MAAM;AAAA,MACJ,IAAI,KAAK;AAAA,MACT,gBAAgB,KAAK;AAAA,MACrB,UAAU,KAAK;AAAA,MACf,OAAO,KAAK;AAAA,MACZ,aAAa,KAAK,eAAe;AAAA,MACjC,QAAQ,KAAK;AAAA,MACb,eAAe,KAAK,iBAAiB;AAAA,MACrC,YAAY,KAAK,cAAc;AAAA,MAC/B,iBAAiB,KAAK,mBAAmB;AAAA,MACzC,aAAa,KAAK,eAAe;AAAA,MACjC,eAAe,KAAK,iBAAiB;AAAA,MACrC,aAAa,KAAK,eAAe;AAAA,MACjC,iBAAiB,KAAK,mBAAmB;AAAA,MACzC,aAAa,KAAK,eAAe;AAAA,MACjC,QAAQ,KAAK,UAAU;AAAA,MACvB,gBAAgB,KAAK,kBAAkB;AAAA,MACvC,cAAc,KAAK,gBAAgB;AAAA,MACnC,WAAW,KAAK,aAAa;AAAA,IAC/B;AAAA,IACA,QAAQ,YAAY;AAAA,MAAI,CAAC,SACvB,OAAO,KAAK,WAAW,WAAW,KAAK,SAAS,KAAK,OAAO;AAAA,IAC9D;AAAA,IACA,uBACE,OAAO,kBAAkB,WAAW,gBAAgB,eAAe,MAAM;AAAA,IAC3E,WAAW,aAAa;AAAA,MAAI,CAAC,SAC3B,OAAO,KAAK,YAAY,WAAW,KAAK,UAAU,KAAK,QAAQ;AAAA,IACjE;AAAA,IACA,aAAa,YAAY,IAAI,CAAC,gBAAgB;AAAA,MAC5C,IAAI,WAAW;AAAA,MACf,YAAY,WAAW;AAAA,MACvB,SAAS,WAAW;AAAA,MACpB,YAAY,WAAW;AAAA,MACvB,YAAY,WAAW;AAAA,MACvB,gBAAgB,WAAW;AAAA,MAC3B,sBAAsB,WAAW,wBAAwB;AAAA,IAC3D,EAAE;AAAA,IACF;AAAA,EACF;AACF;AAEA,SAAS,gBAAgB,OAAiD;AACxE,MAAI,UAAU,UAAa,UAAU,KAAM,QAAO;AAClD,SAAO,MAAM,SAAS;AACxB;AAEA,eAAe,eACb,IACA,MACA,WACA,uBACe;AACf,MAAI,cAAc,QAAW;AAC3B,QAAI,0BAA0B,OAAW;AACzC,UAAM,QAAQ,MAAM,GAAG,KAAK,wBAAwB,EAAE,KAAK,CAAC;AAC5D,QAAI,0BAA0B,QAAQ,CAAC,MAAM,KAAK,CAAC,SAAS,KAAK,OAAO,OAAO,qBAAqB,GAAG;AACrG,YAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,YAAM,IAAI,cAAc,KAAK;AAAA,QAC3B,OAAO;AAAA,UACL;AAAA,UACA;AAAA,QACF;AAAA,MACF,CAAC;AAAA,IACH;AACA,eAAW,QAAQ,OAAO;AACxB,WAAK,YAAY;AAAA,IACnB;AACA,UAAM,GAAG,MAAM;AACf,QAAI,0BAA0B,MAAM;AAClC,YAAM,cAAc,MAAM,KAAK,CAAC,SAAS,KAAK,OAAO,OAAO,qBAAqB;AACjF,UAAI,YAAa,aAAY,YAAY;AAAA,IAC3C;AACA;AAAA,EACF;AACA,QAAM,SAAS,MAAM,KAAK,IAAI,IAAI,aAAa,CAAC,CAAC,CAAC;AAClD,MAAI,0BAA0B,UAAa,0BAA0B,QAAQ,CAAC,OAAO,SAAS,qBAAqB,GAAG;AACpH,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,UAAM,IAAI,cAAc,KAAK;AAAA,MAC3B,OAAO;AAAA,QACL;AAAA,QACA;AAAA,MACF;AAAA,IACF,CAAC;AAAA,EACH;AACA,MAAI,qBAAqB;AACzB,MAAI,uBAAuB,QAAW;AACpC,UAAM,kBAAkB,MAAM,GAAG,QAAQ,wBAAwB,EAAE,MAAM,WAAW,KAAK,CAAC;AAC1F,yBAAqB,iBAAiB,QAAQ,MAAM;AAAA,EACtD;AACA,QAAM,GAAG,aAAa,wBAAwB,EAAE,KAAK,CAAC;AACtD,MAAI,CAAC,OAAO,OAAQ;AACpB,aAAW,YAAY,QAAQ;AAC7B,UAAM,SAAS,MAAM,sBAAsB,IAAI,UAAU,EAAE,UAAU,KAAK,UAAU,gBAAgB,KAAK,eAAe,GAAG,UAAU,kBAAkB;AACvJ,oBAAgB,QAAQ,KAAK,gBAAgB,KAAK,QAAQ;AAC1D,UAAM,OAAO,GAAG,OAAO,wBAAwB;AAAA,MAC7C;AAAA,MACA;AAAA,MACA,WAAW,aAAa;AAAA,IAC1B,CAAC;AACD,OAAG,QAAQ,IAAI;AAAA,EACjB;AACF;AAEA,eAAe,kBACb,IACA,MACA,YACe;AACf,MAAI,eAAe,OAAW;AAC9B,QAAM,GAAG,aAAa,yBAAyB,EAAE,KAAK,CAAC;AACvD,MAAI,CAAC,cAAc,CAAC,WAAW,OAAQ;AACvC,QAAM,SAAS,MAAM,KAAK,IAAI,IAAI,UAAU,CAAC;AAC7C,aAAW,aAAa,QAAQ;AAC9B,UAAM,UAAU,MAAM,sBAAsB,IAAI,WAAW,EAAE,UAAU,KAAK,UAAU,gBAAgB,KAAK,eAAe,GAAG,WAAW,mBAAmB;AAC3J,oBAAgB,SAAS,KAAK,gBAAgB,KAAK,QAAQ;AAC3D,UAAM,OAAO,GAAG,OAAO,yBAAyB;AAAA,MAC9C;AAAA,MACA;AAAA,IACF,CAAC;AACD,OAAG,QAAQ,IAAI;AAAA,EACjB;AACF;AAEA,MAAM,oBAAyE;AAAA,EAC7E,IAAI;AAAA,EACJ,MAAM,QAAQ,UAAU,KAAK;AAC3B,UAAM,EAAE,QAAQ,OAAO,IAAI,sBAAsB,kBAAkB,QAAQ;AAC3E,sBAAkB,KAAK,OAAO,QAAQ;AACtC,4BAAwB,KAAK,OAAO,cAAc;AAElD,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,UAAM,mCAAmC,sBAAsB,MAAM,IAAI,IAAI;AAC7E,QAAI;AACJ,QAAI,gBAA8C;AAClD,QAAI,qBAAoF;AAAA,MACtF,YAAY;AAAA,MACZ,iBAAiB;AAAA,IACnB;AACA,QAAI,6BAA4C;AAChD,UAAM,gBAAgB,IAAI;AAAA,MACxB,YAAY;AACV,wBAAgB,OAAO,kBACnB,MAAM,0BAA0B,IAAI,OAAO,iBAAiB,OAAO,UAAU,OAAO,cAAc,IAClG;AACJ,6BAAqB,0BAA0B;AAAA,UAC7C,YAAY,OAAO;AAAA,UACnB,iBAAiB,OAAO;AAAA,UACxB;AAAA,QACF,CAAC;AACD,qCAA6B,iBACxB,MAAM,sBAAsB,IAAI;AAAA,UACjC,UAAU,OAAO;AAAA,UACjB,gBAAgB,OAAO;AAAA,UACvB,MAAM;AAAA,UACN,OAAO,cAAc;AAAA,QACvB,CAAC,IAAI,SAAS,cAAc,QAC1B,OAAO,iBAAiB;AAAA,MAC9B;AAAA,MACA,YAAY;AACV,eAAO,GAAG,OAAO,cAAc;AAAA,UAC7B,gBAAgB,OAAO;AAAA,UACvB,UAAU,OAAO;AAAA,UACjB,OAAO,OAAO;AAAA,UACd,aAAa,OAAO,eAAe;AAAA,UACnC,QAAQ,OAAO,UAAU;AAAA,UACzB,eAAe;AAAA,UACf,YAAY,mBAAmB;AAAA,UAC/B,iBAAiB,mBAAmB;AAAA,UACpC,aAAa,gBAAgB,OAAO,WAAW;AAAA,UAC/C,eAAe,OAAO,iBAAiB;AAAA,UACvC,aAAa,OAAO,eAAe;AAAA,UACnC,iBAAiB,OAAO,mBAAmB;AAAA,UAC3C,aAAa,OAAO,eAAe;AAAA,UACnC,QAAQ,OAAO,UAAU;AAAA,UACzB,gBAAgB,OAAO,kBAAkB;AAAA,UACzC,cAAc,OAAO,gBAAgB;AAAA,UACrC,WAAW,OAAO,aAAa;AAAA,QACjC,CAAC;AACD,WAAG,QAAQ,IAAI;AACf,cAAM,GAAG,MAAM;AAAA,MACjB;AAAA,MACA,YAAY;AACV,cAAM,WAAW;AACjB,YAAI,CAAC,SAAU;AACf,cAAM,0BAA0B,IAAI;AAAA,UAClC;AAAA,UACA,YAAY,SAAS;AAAA,UACrB,SAAS,SAAS;AAAA,UAClB,YAAY,SAAS;AAAA,UACrB,YAAY,SAAS;AAAA,UACrB,sBAAsB;AAAA,QACxB,CAAC;AAAA,MACH;AAAA,MACA,MAAM,eAAe,IAAI,MAAM,OAAO,aAAa,CAAC,GAAG,OAAO,qBAAqB;AAAA,MACnF,MAAM,kBAAkB,IAAI,MAAM,OAAO,cAAc,CAAC,CAAC;AAAA,IAC3D,GAAG,EAAE,aAAa,KAAK,CAAC;AAExB,UAAM,KAAM,IAAI,UAAU,QAAQ,YAAY;AAC9C,UAAM,qBAAqB;AAAA,MACzB,YAAY;AAAA,MACZ,UAAU;AAAA,MACV,UAAU,KAAK;AAAA,MACf,gBAAgB,KAAK;AAAA,MACrB,UAAU,KAAK;AAAA,MACf,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV,CAAC;AAED,UAAM,oBAAoB;AAAA,MACxB,YAAY;AAAA,MACZ,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,aAAa;AAAA,QACX,IAAI,KAAK;AAAA,QACT,gBAAgB,KAAK;AAAA,QACrB,UAAU,KAAK;AAAA,MACjB;AAAA,MACA,SAAS;AAAA,MACT,QAAQ;AAAA,IACV,CAAC;AAED,WAAO,EAAE,QAAQ,KAAK,GAAG;AAAA,EAC3B;AAAA,EACA,cAAc,OAAO,QAAQ,QAAQ,QAAQ;AAC3C,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,WAAO,MAAM,iBAAiB,IAAI,OAAO,MAAM;AAAA,EACjD;AAAA,EACA,UAAU,OAAO,EAAE,QAAQ,IAAI,MAAM;AACnC,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,UAAM,WAAW,MAAM,iBAAiB,IAAI,OAAO,MAAM;AACzD,WAAO;AAAA,MACL,aAAa,UAAU,gCAAgC,aAAa;AAAA,MACpE,cAAc;AAAA,MACd,YAAY,OAAO;AAAA,MACnB,UAAU,UAAU,KAAK,YAAY;AAAA,MACrC,gBAAgB,UAAU,KAAK,kBAAkB;AAAA,MACjD,eAAe,YAAY;AAAA,MAC3B,SAAS;AAAA,QACP,MAAM;AAAA,UACJ,OAAO;AAAA,QACT;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA,MAAM,OAAO,EAAE,UAAU,IAAI,MAAM;AACjC,UAAM,SAAS,UAAU;AACzB,QAAI,CAAC,OAAQ;AACb,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,UAAM,OAAO,MAAM,sBAAsB,IAAI,cAAc,EAAE,IAAI,OAAO,CAAC;AACzE,QAAI,CAAC,KAAM;AACX,UAAM,2BAA2B,IAAI,IAAI;AACzC,UAAM,GAAG,aAAa,wBAAwB,EAAE,KAAK,CAAC;AACtD,UAAM,GAAG,aAAa,yBAAyB,EAAE,KAAK,CAAC;AACvD,OAAG,OAAO,IAAI;AACd,UAAM,GAAG,MAAM;AAAA,EACjB;AAAA,EACA,MAAM,OAAO,EAAE,UAAU,IAAI,MAAM;AACjC,UAAM,QAAQ,oBAAkC,QAAQ;AACxD,QAAI,CAAC,OAAO;AACV,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,uDAAuD,CAAC;AAAA,IAChG;AACA,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,QAAI,OAAO,MAAM,sBAAsB,IAAI,cAAc,EAAE,IAAI,MAAM,KAAK,GAAG,CAAC;AAC9E,QAAI,CAAC,MAAM;AACT,aAAO,GAAG,OAAO,cAAc;AAAA,QAC7B,IAAI,MAAM,KAAK;AAAA,QACf,gBAAgB,MAAM,KAAK;AAAA,QAC3B,UAAU,MAAM,KAAK;AAAA,QACrB,OAAO,MAAM,KAAK;AAAA,QAClB,aAAa,MAAM,KAAK;AAAA,QACxB,QAAQ,MAAM,KAAK;AAAA,QACnB,eAAe,MAAM,KAAK;AAAA,QAC1B,YAAY,MAAM,KAAK;AAAA,QACvB,iBAAiB,MAAM,KAAK;AAAA,QAC5B,aAAa,MAAM,KAAK;AAAA,QACxB,eAAe,MAAM,KAAK;AAAA,QAC1B,aAAa,MAAM,KAAK;AAAA,QACxB,iBAAiB,MAAM,KAAK;AAAA,QAC5B,aAAa,MAAM,KAAK;AAAA,QACxB,QAAQ,MAAM,KAAK;AAAA,QACnB,gBAAgB,MAAM,KAAK;AAAA,QAC3B,cAAc,MAAM,KAAK;AAAA,QACzB,WAAW,MAAM,KAAK;AAAA,MACxB,CAAC;AACD,SAAG,QAAQ,IAAI;AAAA,IACjB;AACA,UAAM,eAAe;AACrB,UAAM,gBAAgB,IAAI;AAAA,MACxB,MAAM,eAAe,IAAI,cAAc,MAAM,QAAQ,MAAM,qBAAqB;AAAA,MAChF,MAAM,kBAAkB,IAAI,cAAc,MAAM,SAAS;AAAA,MACzD,MAAM,2BAA2B,IAAI,YAAY;AAAA,MACjD,MAAM,4BAA4B,IAAI,cAAc,MAAM,WAAW;AAAA,IACvE,GAAG,EAAE,aAAa,KAAK,CAAC;AAExB,UAAM,KAAM,IAAI,UAAU,QAAQ,YAAY;AAC9C,UAAM,oBAAoB;AAAA,MACxB,YAAY;AAAA,MACZ,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,aAAa;AAAA,QACX,IAAI,aAAa;AAAA,QACjB,gBAAgB,aAAa;AAAA,QAC7B,UAAU,aAAa;AAAA,MACzB;AAAA,MACA,SAAS;AAAA,MACT,QAAQ;AAAA,IACV,CAAC;AAED,UAAM,gBAAgB,yBAAyB,MAAM,QAAQ,MAAS;AACtE,QAAI,OAAO,KAAK,aAAa,EAAE,QAAQ;AACrC,YAAM,qBAAqB;AAAA,QACzB,YAAY;AAAA,QACZ,UAAU;AAAA,QACV,UAAU,aAAa;AAAA,QACvB,gBAAgB,aAAa;AAAA,QAC7B,UAAU,aAAa;AAAA,QACvB,QAAQ;AAAA,QACR,QAAQ;AAAA,MACV,CAAC;AAAA,IACH;AAEA,WAAO,EAAE,QAAQ,aAAa,GAAG;AAAA,EACnC;AACF;AAEA,MAAM,oBAAyE;AAAA,EAC7E,IAAI;AAAA,EACJ,MAAM,QAAQ,UAAU,KAAK;AAC3B,UAAM,EAAE,OAAO,IAAI,sBAAsB,kBAAkB,QAAQ;AACnE,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,UAAM,WAAW,MAAM,iBAAiB,IAAI,OAAO,EAAE;AACrD,WAAO,WAAW,EAAE,QAAQ,SAAS,IAAI,CAAC;AAAA,EAC5C;AAAA,EACA,MAAM,QAAQ,UAAU,KAAK;AAC3B,UAAM,EAAE,QAAQ,OAAO,IAAI,sBAAsB,kBAAkB,QAAQ;AAC3E,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,UAAM,OAAO,MAAM,sBAAsB,IAAI,cAAc,EAAE,IAAI,OAAO,IAAI,WAAW,KAAK,CAAC;AAC7F,UAAM,SAAS,QAAQ;AACvB,QAAI,CAAC,OAAQ,OAAM,SAAS,gBAAgB;AAC5C,sBAAkB,KAAK,OAAO,QAAQ;AACtC,4BAAwB,KAAK,OAAO,cAAc;AAElD,UAAM,iBAAiB,OAAO;AAC9B,UAAM,0BAA0B,OAAO,mBAAmB;AAC1D,UAAM,mCAAmC,sBAAsB,MAAM,IAAI,IAAI;AAE7E,QAAI,oBAAkD;AACtD,QAAI,yBAAwF;AAAA,MAC1F,YAAY,OAAO,cAAc;AAAA,MACjC,iBAAiB,OAAO,mBAAmB;AAAA,IAC7C;AACA,QAAI,yBAAwC;AAC5C,QAAI,oCAAmD;AAEvD,UAAM,oBAAoB;AAAA,MACxB;AAAA,MACA;AAAA,MACA,UAAU;AAAA,MACV,QAAQ;AAAA,MACR,OAAO,EAAE,UAAU,OAAO,UAAU,gBAAgB,OAAO,eAAe;AAAA,MAC1E,cAAc;AAAA,MACd,QAAQ;AAAA,MACR,SAAS;AAAA,MACT,YAAY,OAAO;AAAA,QACjB,QAAQ;AAAA,QACR,aAAa;AAAA,UACX,IAAI,OAAO;AAAA,UACX,gBAAgB,OAAO;AAAA,UACvB,UAAU,OAAO;AAAA,QACnB;AAAA,MACF;AAAA,MACA,QAAQ;AAAA,QACN,YAAY;AACV,gBAAM,4BACJ,OAAO,eAAe,UAAa,OAAO,oBAAoB;AAChE,gBAAM,2BACJ,OAAO,oBAAoB,SACvB,OAAO,mBAAmB,OAC1B,OAAO,mBAAmB;AAChC,gBAAM,sBACJ,OAAO,eAAe,SAAY,OAAO,cAAc,OAAO,OAAO,cAAc;AAErF,8BAAoB,6BAA6B,6BAA6B,CAAC,OAAO,iBAClF,MAAM,0BAA0B,IAAI,0BAA0B,OAAO,UAAU,OAAO,cAAc,IACpG;AACJ,cAAI,2BAA2B;AAC7B,qCAAyB,0BAA0B;AAAA,cACjD,YAAY;AAAA,cACZ,iBAAiB;AAAA,cACjB,eAAe;AAAA,YACjB,CAAC;AAAA,UACH;AACA,mCAAyB,qBACpB,MAAM,sBAAsB,IAAI;AAAA,YACjC,UAAU,OAAO;AAAA,YACjB,gBAAgB,OAAO;AAAA,YACvB,MAAM;AAAA,YACN,OAAO,kBAAkB;AAAA,UAC3B,CAAC,IAAI,SAAS,kBAAkB,QAC9B;AACJ,8CACE,CAAC,qBAAqB,OAAO,oBAAoB,OAAO,oBAAoB,UAAa,CAAC,OAAO,iBAC7F,MAAM,0BAA0B,IAAI,OAAO,iBAAiB,OAAO,UAAU,OAAO,cAAc,IAClG;AAAA,QACR;AAAA,QACA,MAAM;AACJ,cAAI,OAAO,UAAU,OAAW,QAAO,QAAQ,OAAO;AACtD,cAAI,OAAO,gBAAgB,OAAW,QAAO,cAAc,OAAO,eAAe;AACjF,cAAI,OAAO,WAAW,OAAW,QAAO,SAAS,OAAO,UAAU,OAAO;AACzE,cAAI,OAAO,kBAAkB,OAAW,QAAO,gBAAgB,OAAO,iBAAiB;AACvF,cAAI,OAAO,eAAe,UAAc,OAAO,oBAAoB,UAAa,mBAAoB;AAClG,mBAAO,aAAa,uBAAuB;AAAA,UAC7C;AACA,cAAI,OAAO,oBAAoB,OAAW,QAAO,kBAAkB,uBAAuB;AAE1F,cAAI,2BAA2B,OAAO,oBAAoB,UAAa,CAAC,OAAO,gBAAgB;AAC7F,mBAAO,gBAAgB;AAAA,UACzB,WAAW,sCAAsC,OAAO,oBAAoB,UAAa,CAAC,OAAO,gBAAgB;AAC/G,mBAAO,gBAAgB;AAAA,UACzB;AAEA,cAAI,OAAO,gBAAgB,OAAW,QAAO,cAAc,gBAAgB,OAAO,WAAW;AAC7F,cAAI,OAAO,kBAAkB,OAAW,QAAO,gBAAgB,OAAO,iBAAiB;AACvF,cAAI,OAAO,gBAAgB,OAAW,QAAO,cAAc,OAAO,eAAe;AACjF,cAAI,OAAO,oBAAoB,OAAW,QAAO,kBAAkB,OAAO,mBAAmB;AAC7F,cAAI,OAAO,gBAAgB,OAAW,QAAO,cAAc,OAAO,eAAe;AACjF,cAAI,OAAO,WAAW,OAAW,QAAO,SAAS,OAAO,UAAU;AAClE,cAAI,OAAO,mBAAmB,OAAW,QAAO,iBAAiB,OAAO,kBAAkB;AAC1F,cAAI,OAAO,iBAAiB,OAAW,QAAO,eAAe,OAAO,gBAAgB;AACpF,cAAI,OAAO,cAAc,OAAW,QAAO,YAAY,OAAO,aAAa;AAAA,QAC7E;AAAA,QACA,YAAY;AASV,gBAAM,GAAG,MAAM;AAAA,QACjB;AAAA,QACA,YAAY;AACV,gBAAM,WAAW;AACjB,cAAI,CAAC,SAAU;AACf,gBAAM,eACJ,OAAO,oBAAoB,UAC3B,OAAO,oBAAoB,QAC3B,OAAO,oBAAoB;AAC7B,cAAI,CAAC,aAAc;AACnB,gBAAM,0BAA0B,IAAI;AAAA,YAClC,MAAM;AAAA,YACN,YAAY,SAAS;AAAA,YACrB,SAAS,SAAS;AAAA,YAClB,YAAY,0BAA0B,SAAS;AAAA,YAC/C,YAAY,SAAS;AAAA,YACrB,sBAAsB;AAAA,UACxB,CAAC;AAAA,QACH;AAAA,QACA,MAAM,eAAe,IAAI,QAAQ,OAAO,WAAW,OAAO,qBAAqB;AAAA,QAC/E,MAAM,kBAAkB,IAAI,QAAQ,OAAO,UAAU;AAAA,MACvD;AAAA,IACF,CAAC;AAID,UAAM,YAAY,OAAO;AACzB,UAAM,mBAAmB,cAAc,QAAQ,QAAQ,cAAc,UAAU,SAAS;AACxF,QAAI,mBAAmB,cAAc,qBAAqB,SAAS,qBAAqB,SAAS;AAC/F,YAAM,eAAe,qBAAqB,QAAQ,uBAAuB;AACzE,UAAI;AACF,cAAM,WAAW,IAAI,UAAU,QAAQ,UAAU;AACjD,YAAI,UAAU;AACZ,gBAAM,SAAS;AAAA,YACb;AAAA,YACA;AAAA,cACE,IAAI,OAAO;AAAA,cACX,UAAU,OAAO;AAAA,cACjB,gBAAgB,OAAO;AAAA,cACvB,aAAa,OAAO,eAAe;AAAA,cACnC,OAAO,OAAO;AAAA,cACd,aAAa,OAAO,eAAe;AAAA,cACnC,eAAe,OAAO,iBAAiB;AAAA,YACzC;AAAA,YACA,EAAE,YAAY,KAAK;AAAA,UACrB;AAAA,QACF;AAAA,MACF,SAAS,KAAK;AACZ,eAAO,KAAK,kCAAkC,EAAE,WAAW,gBAAgB,cAAc,IAAI,CAAC;AAAA,MAChG;AAAA,IACF;AAEA,WAAO,EAAE,QAAQ,OAAO,GAAG;AAAA,EAC7B;AAAA,EACA,cAAc,OAAO,QAAQ,QAAQ,QAAQ;AAC3C,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,WAAO,MAAM,iBAAiB,IAAI,OAAO,MAAM;AAAA,EACjD;AAAA,EACA,UAAU,OAAO,EAAE,QAAQ,WAAW,IAAI,MAAM;AAC9C,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,UAAM,SAAS,UAAU;AACzB,QAAI,CAAC,OAAQ,QAAO;AACpB,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,UAAM,gBAAgB,MAAM,iBAAiB,IAAI,OAAO,MAAM;AAC9D,WAAO;AAAA,MACL,aAAa,UAAU,gCAAgC,aAAa;AAAA,MACpE,cAAc;AAAA,MACd,YAAY,OAAO,KAAK;AAAA,MACxB,UAAU,OAAO,KAAK;AAAA,MACtB,gBAAgB,OAAO,KAAK;AAAA,MAC5B,gBAAgB;AAAA,MAChB,eAAe,iBAAiB;AAAA,MAChC,SAAS;AAAA,QACP,MAAM;AAAA,UACJ;AAAA,UACA,OAAO,iBAAiB;AAAA,QAC1B;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA,MAAM,OAAO,EAAE,UAAU,IAAI,MAAM;AACjC,UAAM,UAAU,mBAAoC,QAAQ;AAC5D,UAAM,SAAS,SAAS;AACxB,QAAI,CAAC,OAAQ;AACb,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,UAAM,mCAAmC,sBAAsB,MAAM,IAAI,IAAI;AAC7E,QAAI,OAAO,MAAM,sBAAsB,IAAI,cAAc,EAAE,IAAI,OAAO,KAAK,GAAG,CAAC;AAC/E,QAAI,CAAC,MAAM;AACT,aAAO,GAAG,OAAO,cAAc;AAAA,QAC7B,IAAI,OAAO,KAAK;AAAA,QAChB,gBAAgB,OAAO,KAAK;AAAA,QAC5B,UAAU,OAAO,KAAK;AAAA,QACtB,OAAO,OAAO,KAAK;AAAA,QACnB,aAAa,OAAO,KAAK;AAAA,QACzB,QAAQ,OAAO,KAAK;AAAA,QACpB,eAAe,OAAO,KAAK;AAAA,QAC3B,YAAY,OAAO,KAAK;AAAA,QACxB,iBAAiB,OAAO,KAAK;AAAA,QAC7B,aAAa,OAAO,KAAK;AAAA,QACzB,eAAe,OAAO,KAAK;AAAA,QAC3B,aAAa,OAAO,KAAK;AAAA,QACzB,iBAAiB,mBAAmB,OAAO,KAAK,iBAAiB,iBAAiB;AAAA,QAClF,aAAa,OAAO,KAAK;AAAA,QACzB,QAAQ,OAAO,KAAK;AAAA,QACpB,gBAAgB,OAAO,KAAK;AAAA,QAC5B,cAAc,OAAO,KAAK;AAAA,QAC1B,WAAW,OAAO,KAAK;AAAA,MACzB,CAAC;AACD,SAAG,QAAQ,IAAI;AAAA,IACjB;AACA,UAAM,wBAAwB,OAAO,KAAK,kBACtC,MAAM,0BAA0B,IAAI,OAAO,KAAK,iBAAiB,OAAO,KAAK,UAAU,OAAO,KAAK,cAAc,IACjH;AACJ,UAAM,qBAAqB,OAAO,KAAK,kBACnC,OAAO,YAAY,KAAK,CAAC,eAAe,WAAW,YAAY,OAAO,KAAK,eAAe,KAAK,OAC/F;AACJ,UAAM,+BACJ,OAAO,KAAK,qBAAqB,SAAS,OAAO,KAAK,mBAAmB,SACzE,CAAC,CAAC,OAAO,KAAK,mBACd,CAAC,EAAE,uBAAuB,cAAc,OAAO,KAAK,cAAc,oBAAoB,eACtF,CAAC,EAAE,uBAAuB,SAAS,OAAO,KAAK,iBAAiB,oBAAoB;AAEtF,UAAM,gBAAgB,IAAI;AAAA,MACxB,MAAM;AACJ,aAAK,QAAQ,OAAO,KAAK;AACzB,aAAK,cAAc,OAAO,KAAK;AAC/B,aAAK,SAAS,OAAO,KAAK;AAC1B,aAAK,gBAAgB,OAAO,KAAK;AACjC,aAAK,aAAa,OAAO,KAAK;AAC9B,aAAK,kBAAkB,OAAO,KAAK;AACnC,aAAK,cAAc,OAAO,KAAK;AAC/B,aAAK,gBAAgB,OAAO,KAAK;AACjC,aAAK,cAAc,OAAO,KAAK;AAC/B,aAAK,kBAAkB,mBAAmB,OAAO,KAAK,iBAAiB,iBAAiB;AACxF,aAAK,cAAc,OAAO,KAAK;AAC/B,aAAK,SAAS,OAAO,KAAK;AAC1B,aAAK,iBAAiB,OAAO,KAAK;AAClC,aAAK,eAAe,OAAO,KAAK;AAChC,aAAK,YAAY,OAAO,KAAK;AAAA,MAC/B;AAAA,MACA,YAAY;AAMV,cAAM,GAAG,MAAM;AAAA,MACjB;AAAA,MACA,YAAY;AACV,YAAI,CAAC,gCAAgC,CAAC,OAAO,KAAK,gBAAiB;AACnE,cAAM,aAAa,uBAAuB,cAAc,OAAO,KAAK,cAAc,oBAAoB;AACtG,cAAM,aAAa,uBAAuB,SAAS,OAAO,KAAK,iBAAiB,oBAAoB;AACpG,YAAI,CAAC,cAAc,CAAC,WAAY;AAChC,cAAM,0BAA0B,IAAI;AAAA,UAClC;AAAA,UACA;AAAA,UACA,SAAS,OAAO,KAAK;AAAA,UACrB;AAAA,UACA,YAAY,uBAAuB,SAAS,oBAAoB,cAAc;AAAA,UAC9E,sBAAsB;AAAA,QACxB,CAAC;AAAA,MACH;AAAA,MACA,MAAM,eAAe,IAAI,MAAM,OAAO,QAAQ,OAAO,qBAAqB;AAAA,MAC1E,MAAM,kBAAkB,IAAI,MAAM,OAAO,SAAS;AAAA,IACpD,GAAG,EAAE,aAAa,KAAK,CAAC;AAExB,UAAM,KAAM,IAAI,UAAU,QAAQ,YAAY;AAC9C,UAAM,wBAAwB;AAAA,MAC5B,YAAY;AAAA,MACZ,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,aAAa;AAAA,QACX,IAAI,KAAK;AAAA,QACT,gBAAgB,KAAK;AAAA,QACrB,UAAU,KAAK;AAAA,MACjB;AAAA,MACA,SAAS;AAAA,MACT,QAAQ;AAAA,IACV,CAAC;AAED,UAAM,cAAc,yBAAyB,OAAO,QAAQ,SAAS,OAAO,MAAM;AAClF,QAAI,OAAO,KAAK,WAAW,EAAE,QAAQ;AACnC,YAAM,qBAAqB;AAAA,QACzB,YAAY;AAAA,QACZ,UAAU;AAAA,QACV,UAAU,KAAK;AAAA,QACf,gBAAgB,KAAK;AAAA,QACrB,UAAU,KAAK;AAAA,QACf,QAAQ;AAAA,QACR,QAAQ;AAAA,MACV,CAAC;AAAA,IACH;AAAA,EACF;AACF;AAEA,MAAM,oBACJ;AAAA,EACE,IAAI;AAAA,EACJ,MAAM,QAAQ,OAAO,KAAK;AACxB,UAAM,KAAK,UAAU,OAAO,kBAAkB;AAC9C,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,UAAM,WAAW,MAAM,iBAAiB,IAAI,EAAE;AAC9C,WAAO,WAAW,EAAE,QAAQ,SAAS,IAAI,CAAC;AAAA,EAC5C;AAAA,EACA,MAAM,QAAQ,OAAO,KAAK;AACxB,UAAM,KAAK,UAAU,OAAO,kBAAkB;AAC9C,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,UAAM,OAAO,MAAM,sBAAsB,IAAI,cAAc,EAAE,IAAI,WAAW,KAAK,CAAC;AAClF,UAAM,SAAS,QAAQ;AACvB,QAAI,CAAC,OAAQ,OAAM,SAAS,gBAAgB;AAC5C,sBAAkB,KAAK,OAAO,QAAQ;AACtC,4BAAwB,KAAK,OAAO,cAAc;AAClD,UAAM,2BAA2B,IAAI,MAAM;AAC3C,UAAM,GAAG,aAAa,wBAAwB,EAAE,MAAM,OAAO,CAAC;AAC9D,UAAM,GAAG,aAAa,yBAAyB,EAAE,MAAM,OAAO,CAAC;AAC/D,OAAG,OAAO,MAAM;AAChB,UAAM,GAAG,MAAM;AAEf,UAAM,KAAM,IAAI,UAAU,QAAQ,YAAY;AAC9C,UAAM,oBAAoB;AAAA,MACxB,YAAY;AAAA,MACZ,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,aAAa;AAAA,QACX,IAAI,OAAO;AAAA,QACX,gBAAgB,OAAO;AAAA,QACvB,UAAU,OAAO;AAAA,MACnB;AAAA,MACA,SAAS;AAAA,MACT,QAAQ;AAAA,IACV,CAAC;AACD,WAAO,EAAE,QAAQ,OAAO,GAAG;AAAA,EAC7B;AAAA,EACA,UAAU,OAAO,EAAE,UAAU,MAAM;AACjC,UAAM,SAAS,UAAU;AACzB,QAAI,CAAC,OAAQ,QAAO;AACpB,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,WAAO;AAAA,MACL,aAAa,UAAU,gCAAgC,aAAa;AAAA,MACpE,cAAc;AAAA,MACd,YAAY,OAAO,KAAK;AAAA,MACxB,UAAU,OAAO,KAAK;AAAA,MACtB,gBAAgB,OAAO,KAAK;AAAA,MAC5B,gBAAgB;AAAA,MAChB,SAAS;AAAA,QACP,MAAM;AAAA,UACJ;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA,MAAM,OAAO,EAAE,UAAU,IAAI,MAAM;AACjC,UAAM,UAAU,mBAAoC,QAAQ;AAC5D,UAAM,SAAS,SAAS;AACxB,QAAI,CAAC,OAAQ;AACb,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,QAAI,OAAO,MAAM,sBAAsB,IAAI,cAAc,EAAE,IAAI,OAAO,KAAK,GAAG,CAAC;AAC/E,QAAI,CAAC,MAAM;AACT,aAAO,GAAG,OAAO,cAAc;AAAA,QAC7B,IAAI,OAAO,KAAK;AAAA,QAChB,gBAAgB,OAAO,KAAK;AAAA,QAC5B,UAAU,OAAO,KAAK;AAAA,QACtB,OAAO,OAAO,KAAK;AAAA,QACnB,aAAa,OAAO,KAAK;AAAA,QACzB,QAAQ,OAAO,KAAK;AAAA,QACpB,eAAe,OAAO,KAAK;AAAA,QAC3B,YAAY,OAAO,KAAK;AAAA,QACxB,iBAAiB,OAAO,KAAK;AAAA,QAC7B,aAAa,OAAO,KAAK;AAAA,QACzB,eAAe,OAAO,KAAK;AAAA,QAC3B,aAAa,OAAO,KAAK;AAAA,QACzB,iBAAiB,mBAAmB,OAAO,KAAK,iBAAiB,iBAAiB;AAAA,QAClF,aAAa,OAAO,KAAK;AAAA,QACzB,QAAQ,OAAO,KAAK;AAAA,QACpB,gBAAgB,OAAO,KAAK;AAAA,QAC5B,cAAc,OAAO,KAAK;AAAA,QAC1B,WAAW,OAAO,KAAK;AAAA,MACzB,CAAC;AACD,SAAG,QAAQ,IAAI;AAAA,IACjB;AACA,UAAM,gBAAgB,IAAI;AAAA,MACxB,MAAM,eAAe,IAAI,MAAM,OAAO,QAAQ,OAAO,qBAAqB;AAAA,MAC1E,MAAM,kBAAkB,IAAI,MAAM,OAAO,SAAS;AAAA,MAClD,MAAM,2BAA2B,IAAI,IAAI;AAAA,MACzC,MAAM,4BAA4B,IAAI,MAAM,OAAO,WAAW;AAAA,IAChE,GAAG,EAAE,aAAa,KAAK,CAAC;AAExB,UAAM,KAAM,IAAI,UAAU,QAAQ,YAAY;AAC9C,UAAM,wBAAwB;AAAA,MAC5B,YAAY;AAAA,MACZ,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,aAAa;AAAA,QACX,IAAI,KAAK;AAAA,QACT,gBAAgB,KAAK;AAAA,QACrB,UAAU,KAAK;AAAA,MACjB;AAAA,MACA,SAAS;AAAA,MACT,QAAQ;AAAA,IACV,CAAC;AAED,UAAM,cAAc,yBAAyB,OAAO,QAAQ,MAAS;AACrE,QAAI,OAAO,KAAK,WAAW,EAAE,QAAQ;AACnC,YAAM,qBAAqB;AAAA,QACzB,YAAY;AAAA,QACZ,UAAU;AAAA,QACV,UAAU,KAAK;AAAA,QACf,gBAAgB,KAAK;AAAA,QACrB,UAAU,KAAK;AAAA,QACf,QAAQ;AAAA,QACR,QAAQ;AAAA,MACV,CAAC;AAAA,IACH;AAAA,EACF;AACF;AAEF,gBAAgB,iBAAiB;AACjC,gBAAgB,iBAAiB;AACjC,gBAAgB,iBAAiB;",
+  "sourcesContent": ["import { registerCommand } from '@open-mercato/shared/lib/commands'\nimport type { CommandHandler } from '@open-mercato/shared/lib/commands'\nimport {\n  parseWithCustomFields,\n  setCustomFieldsIfAny,\n  emitCrudSideEffects,\n  emitCrudUndoSideEffects,\n  requireId,\n  normalizeAuthorUserId,\n} from '@open-mercato/shared/lib/commands/helpers'\nimport { withAtomicFlush } from '@open-mercato/shared/lib/commands/flush'\nimport { resolveRedoSnapshot } from '@open-mercato/shared/lib/commands/redo'\nimport { runCrudCommandWrite } from '@open-mercato/shared/lib/commands/runCrudCommandWrite'\nimport type { DataEngine } from '@open-mercato/shared/lib/data/engine'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport {\n  CustomerDeal,\n  CustomerDealPersonLink,\n  CustomerDealCompanyLink,\n  CustomerDealStageTransition,\n  CustomerPipelineStage,\n} from '../data/entities'\nimport {\n  dealCreateSchema,\n  dealUpdateSchema,\n  type DealCreateInput,\n  type DealUpdateInput,\n} from '../data/validators'\nimport {\n  ensureOrganizationScope,\n  ensureTenantScope,\n  requireCustomerEntity,\n  ensureSameScope,\n  extractUndoPayload,\n  ensureDictionaryEntry,\n} from './shared'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport {\n  loadCustomFieldSnapshot,\n  buildCustomFieldResetMap,\n  type CustomFieldChangeSet,\n} from '@open-mercato/shared/lib/commands/customFieldSnapshots'\nimport { CrudHttpError, notFound } from '@open-mercato/shared/lib/crud/errors'\nimport type { CrudIndexerConfig, CrudEventsConfig } from '@open-mercato/shared/lib/crud/types'\nimport { E } from '#generated/entities.ids.generated'\nimport { findWithDecryption, findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { isMissingDealStageTransitionTable, warnMissingDealStageTransitionTable } from '../lib/dealStageTransitionTable'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('customers')\n\nconst DEAL_ENTITY_ID = 'customers:customer_deal'\nconst dealCrudIndexer: CrudIndexerConfig<CustomerDeal> = {\n  entityType: E.customers.customer_deal,\n}\n\nconst dealCrudEvents: CrudEventsConfig = {\n  module: 'customers',\n  entity: 'deal',\n  persistent: true,\n  buildPayload: (ctx) => ({\n    id: ctx.identifiers.id,\n    organizationId: ctx.identifiers.organizationId,\n    tenantId: ctx.identifiers.tenantId,\n  }),\n}\n\ntype PipelineStageSnapshot = {\n  id: string\n  pipelineId: string\n  label: string\n  order: number\n}\n\ntype DealStageTransitionSnapshot = {\n  id: string\n  pipelineId: string\n  stageId: string\n  stageLabel: string\n  stageOrder: number\n  transitionedAt: Date | string\n  transitionedByUserId: string | null\n}\n\nfunction coerceSnapshotDate(value: Date | string | null | undefined, fieldName: string): Date | null {\n  if (value === undefined || value === null) return null\n  if (value instanceof Date) return value\n  const date = new Date(value)\n  if (Number.isNaN(date.getTime())) {\n    throw new Error(`[internal] Invalid ${fieldName} undo snapshot date: ${value}`)\n  }\n  return date\n}\n\nfunction coerceRequiredSnapshotDate(value: Date | string, fieldName: string): Date {\n  const date = coerceSnapshotDate(value, fieldName)\n  if (!date) {\n    throw new Error(`[internal] Missing ${fieldName} undo snapshot date`)\n  }\n  return date\n}\n\nasync function loadPipelineStageSnapshot(\n  em: EntityManager,\n  pipelineStageId: string,\n  tenantId: string,\n  organizationId: string,\n): Promise<PipelineStageSnapshot | null> {\n  const stage = await findOneWithDecryption(em, CustomerPipelineStage, { id: pipelineStageId }, {}, { tenantId, organizationId })\n  if (!stage) return null\n  return {\n    id: stage.id,\n    pipelineId: stage.pipelineId,\n    label: stage.label,\n    order: stage.order,\n  }\n}\n\nasync function resolvePipelineStageValue(\n  em: EntityManager,\n  pipelineStageId: string,\n  tenantId: string,\n  organizationId: string,\n): Promise<string | null> {\n  const stage = await loadPipelineStageSnapshot(em, pipelineStageId, tenantId, organizationId)\n  if (!stage) return null\n  const entry = await ensureDictionaryEntry(em, {\n    tenantId,\n    organizationId,\n    kind: 'pipeline_stage',\n    value: stage.label,\n  })\n  return entry?.value ?? stage.label\n}\n\nfunction resolvePipelineAssignment(input: {\n  pipelineId?: string | null\n  pipelineStageId?: string | null\n  stageSnapshot: PipelineStageSnapshot | null\n}): { pipelineId: string | null; pipelineStageId: string | null } {\n  const requestedPipelineId = input.pipelineId ?? null\n  const requestedPipelineStageId = input.pipelineStageId ?? null\n\n  if (requestedPipelineStageId && !input.stageSnapshot) {\n    throw new CrudHttpError(400, { error: 'Pipeline stage not found' })\n  }\n\n  if (\n    requestedPipelineId &&\n    input.stageSnapshot &&\n    input.stageSnapshot.pipelineId !== requestedPipelineId\n  ) {\n    throw new CrudHttpError(400, {\n      error: 'Pipeline stage does not belong to the selected pipeline',\n    })\n  }\n\n  return {\n    pipelineId: requestedPipelineId ?? input.stageSnapshot?.pipelineId ?? null,\n    pipelineStageId: requestedPipelineStageId,\n  }\n}\n\nasync function upsertDealStageTransition(\n  em: EntityManager,\n  input: {\n    deal: CustomerDeal\n    pipelineId: string\n    stageId: string\n    stageLabel: string\n    stageOrder: number\n    transitionedByUserId: string | null\n    transitionedAt?: Date\n  },\n): Promise<void> {\n  let existing: CustomerDealStageTransition | null = null\n  try {\n    existing = await findOneWithDecryption(\n      em,\n      CustomerDealStageTransition,\n      { deal: input.deal.id, stageId: input.stageId, deletedAt: null },\n      {},\n      { tenantId: input.deal.tenantId, organizationId: input.deal.organizationId },\n    )\n  } catch (error) {\n    if (!isMissingDealStageTransitionTable(error)) {\n      throw error\n    }\n    warnMissingDealStageTransitionTable('customers.commands.deals.upsertTransition')\n    return\n  }\n  const transitionedAt = input.transitionedAt ?? new Date()\n  if (existing) {\n    existing.pipelineId = input.pipelineId\n    existing.stageLabel = input.stageLabel\n    existing.stageOrder = input.stageOrder\n    existing.transitionedAt = transitionedAt\n    existing.transitionedByUserId = input.transitionedByUserId\n    existing.deletedAt = null\n    existing.isActive = true\n    return\n  }\n\n  const transition = em.create(CustomerDealStageTransition, {\n    organizationId: input.deal.organizationId,\n    tenantId: input.deal.tenantId,\n    deal: input.deal,\n    pipelineId: input.pipelineId,\n    stageId: input.stageId,\n    stageLabel: input.stageLabel,\n    stageOrder: input.stageOrder,\n    transitionedAt,\n    transitionedByUserId: input.transitionedByUserId,\n    isActive: true,\n  })\n  em.persist(transition)\n}\n\nasync function deleteDealStageTransitions(em: EntityManager, deal: CustomerDeal): Promise<void> {\n  try {\n    await em.nativeDelete(CustomerDealStageTransition, { deal: deal.id })\n  } catch (error) {\n    if (!isMissingDealStageTransitionTable(error)) {\n      throw error\n    }\n    warnMissingDealStageTransitionTable('customers.commands.deals.deleteTransitions')\n  }\n}\n\nasync function restoreDealStageTransitions(\n  em: EntityManager,\n  deal: CustomerDeal,\n  transitions: DealStageTransitionSnapshot[],\n): Promise<void> {\n  if (!transitions.length) return\n  for (const transitionSnapshot of transitions) {\n    const transition = em.create(CustomerDealStageTransition, {\n      id: transitionSnapshot.id,\n      organizationId: deal.organizationId,\n      tenantId: deal.tenantId,\n      deal,\n      pipelineId: transitionSnapshot.pipelineId,\n      stageId: transitionSnapshot.stageId,\n      stageLabel: transitionSnapshot.stageLabel,\n      stageOrder: transitionSnapshot.stageOrder,\n      transitionedAt: coerceRequiredSnapshotDate(transitionSnapshot.transitionedAt, 'transitionedAt'),\n      transitionedByUserId: transitionSnapshot.transitionedByUserId,\n      isActive: true,\n    })\n    em.persist(transition)\n  }\n}\n\ntype DealSnapshot = {\n  deal: {\n    id: string\n    organizationId: string\n    tenantId: string\n    title: string\n    description: string | null\n    status: string\n    pipelineStage: string | null\n    pipelineId: string | null\n    pipelineStageId: string | null\n    valueAmount: string | null\n    valueCurrency: string | null\n    probability: number | null\n    expectedCloseAt: Date | string | null\n    ownerUserId: string | null\n    source: string | null\n    closureOutcome: string | null\n    lossReasonId: string | null\n    lossNotes: string | null\n  }\n  people: string[]\n  primaryPersonEntityId?: string | null\n  companies: string[]\n  transitions: DealStageTransitionSnapshot[]\n  custom?: Record<string, unknown>\n}\n\ntype DealUndoPayload = {\n  before?: DealSnapshot | null\n  after?: DealSnapshot | null\n}\n\ntype DealChangeMap = Record<string, { from: unknown; to: unknown }> & {\n  custom?: CustomFieldChangeSet\n}\n\nasync function loadDealSnapshot(em: EntityManager, id: string): Promise<DealSnapshot | null> {\n  const deal = await findOneWithDecryption(em, CustomerDeal, { id, deletedAt: null })\n  if (!deal) return null\n  const decryptionScope = { tenantId: deal.tenantId ?? null, organizationId: deal.organizationId ?? null }\n  const peopleLinks = await findWithDecryption(\n    em,\n    CustomerDealPersonLink,\n    { deal: deal },\n    { populate: ['person'] },\n    decryptionScope,\n  )\n  const companyLinks = await findWithDecryption(\n    em,\n    CustomerDealCompanyLink,\n    { deal: deal },\n    { populate: ['company'] },\n    decryptionScope,\n  )\n  const transitions = await findWithDecryption(\n    em,\n    CustomerDealStageTransition,\n    { deal: deal.id, deletedAt: null },\n    { orderBy: { stageOrder: 'ASC', transitionedAt: 'ASC' } },\n    decryptionScope,\n  ).catch((error: unknown) => {\n    if (!isMissingDealStageTransitionTable(error)) {\n      throw error\n    }\n    warnMissingDealStageTransitionTable('customers.commands.deals.loadSnapshot')\n    return [] as CustomerDealStageTransition[]\n  })\n  const custom = await loadCustomFieldSnapshot(em, {\n    entityId: DEAL_ENTITY_ID,\n    recordId: deal.id,\n    tenantId: deal.tenantId,\n    organizationId: deal.organizationId,\n  })\n  const primaryPerson = peopleLinks.find((link) => link.isPrimary)?.person\n  return {\n    deal: {\n      id: deal.id,\n      organizationId: deal.organizationId,\n      tenantId: deal.tenantId,\n      title: deal.title,\n      description: deal.description ?? null,\n      status: deal.status,\n      pipelineStage: deal.pipelineStage ?? null,\n      pipelineId: deal.pipelineId ?? null,\n      pipelineStageId: deal.pipelineStageId ?? null,\n      valueAmount: deal.valueAmount ?? null,\n      valueCurrency: deal.valueCurrency ?? null,\n      probability: deal.probability ?? null,\n      expectedCloseAt: deal.expectedCloseAt ?? null,\n      ownerUserId: deal.ownerUserId ?? null,\n      source: deal.source ?? null,\n      closureOutcome: deal.closureOutcome ?? null,\n      lossReasonId: deal.lossReasonId ?? null,\n      lossNotes: deal.lossNotes ?? null,\n    },\n    people: peopleLinks.map((link) =>\n      typeof link.person === 'string' ? link.person : link.person.id\n    ),\n    primaryPersonEntityId:\n      typeof primaryPerson === 'string' ? primaryPerson : primaryPerson?.id ?? null,\n    companies: companyLinks.map((link) =>\n      typeof link.company === 'string' ? link.company : link.company.id\n    ),\n    transitions: transitions.map((transition) => ({\n      id: transition.id,\n      pipelineId: transition.pipelineId,\n      stageId: transition.stageId,\n      stageLabel: transition.stageLabel,\n      stageOrder: transition.stageOrder,\n      transitionedAt: transition.transitionedAt,\n      transitionedByUserId: transition.transitionedByUserId ?? null,\n    })),\n    custom,\n  }\n}\n\nfunction toNumericString(value: number | null | undefined): string | null {\n  if (value === undefined || value === null) return null\n  return value.toString()\n}\n\nasync function syncDealPeople(\n  em: EntityManager,\n  deal: CustomerDeal,\n  personIds: string[] | undefined | null,\n  primaryPersonEntityId?: string | null\n): Promise<void> {\n  if (personIds === undefined) {\n    if (primaryPersonEntityId === undefined) return\n    const links = await em.find(CustomerDealPersonLink, { deal })\n    if (primaryPersonEntityId !== null && !links.some((link) => link.person.id === primaryPersonEntityId)) {\n      const { translate } = await resolveTranslations()\n      throw new CrudHttpError(400, {\n        error: translate(\n          'customers.errors.primaryPersonMustBeLinked',\n          'Primary person must be linked to the deal',\n        ),\n      })\n    }\n    for (const link of links) {\n      link.isPrimary = false\n    }\n    await em.flush()\n    if (primaryPersonEntityId !== null) {\n      const primaryLink = links.find((link) => link.person.id === primaryPersonEntityId)\n      if (primaryLink) primaryLink.isPrimary = true\n    }\n    return\n  }\n  const unique = Array.from(new Set(personIds ?? []))\n  if (primaryPersonEntityId !== undefined && primaryPersonEntityId !== null && !unique.includes(primaryPersonEntityId)) {\n    const { translate } = await resolveTranslations()\n    throw new CrudHttpError(400, {\n      error: translate(\n        'customers.errors.primaryPersonMustBeLinked',\n        'Primary person must be linked to the deal',\n      ),\n    })\n  }\n  let effectivePrimaryId = primaryPersonEntityId\n  if (effectivePrimaryId === undefined) {\n    const existingPrimary = await em.findOne(CustomerDealPersonLink, { deal, isPrimary: true })\n    effectivePrimaryId = existingPrimary?.person?.id ?? null\n  }\n  await em.nativeDelete(CustomerDealPersonLink, { deal })\n  if (!unique.length) return\n  for (const personId of unique) {\n    const person = await requireCustomerEntity(em, personId, { tenantId: deal.tenantId, organizationId: deal.organizationId }, 'person', 'Person not found')\n    ensureSameScope(person, deal.organizationId, deal.tenantId)\n    const link = em.create(CustomerDealPersonLink, {\n      deal,\n      person,\n      isPrimary: personId === effectivePrimaryId,\n    })\n    em.persist(link)\n  }\n}\n\nasync function syncDealCompanies(\n  em: EntityManager,\n  deal: CustomerDeal,\n  companyIds: string[] | undefined | null\n): Promise<void> {\n  if (companyIds === undefined) return\n  await em.nativeDelete(CustomerDealCompanyLink, { deal })\n  if (!companyIds || !companyIds.length) return\n  const unique = Array.from(new Set(companyIds))\n  for (const companyId of unique) {\n    const company = await requireCustomerEntity(em, companyId, { tenantId: deal.tenantId, organizationId: deal.organizationId }, 'company', 'Company not found')\n    ensureSameScope(company, deal.organizationId, deal.tenantId)\n    const link = em.create(CustomerDealCompanyLink, {\n      deal,\n      company,\n    })\n    em.persist(link)\n  }\n}\n\nconst createDealCommand: CommandHandler<DealCreateInput, { dealId: string }> = {\n  id: 'customers.deals.create',\n  async execute(rawInput, ctx) {\n    const { parsed, custom } = parseWithCustomFields(dealCreateSchema, rawInput)\n    ensureTenantScope(ctx, parsed.tenantId)\n    ensureOrganizationScope(ctx, parsed.organizationId)\n\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n    const normalizedTransitionAuthorUserId = normalizeAuthorUserId(null, ctx.auth)\n    let deal!: CustomerDeal\n    let stageSnapshot: PipelineStageSnapshot | null = null\n    let pipelineAssignment: { pipelineId: string | null; pipelineStageId: string | null } = {\n      pipelineId: null,\n      pipelineStageId: null,\n    }\n    let resolvedPipelineStageLabel: string | null = null\n    await withAtomicFlush(em, [\n      async () => {\n        stageSnapshot = parsed.pipelineStageId\n          ? await loadPipelineStageSnapshot(em, parsed.pipelineStageId, parsed.tenantId, parsed.organizationId)\n          : null\n        pipelineAssignment = resolvePipelineAssignment({\n          pipelineId: parsed.pipelineId,\n          pipelineStageId: parsed.pipelineStageId,\n          stageSnapshot,\n        })\n        resolvedPipelineStageLabel = stageSnapshot\n          ? (await ensureDictionaryEntry(em, {\n            tenantId: parsed.tenantId,\n            organizationId: parsed.organizationId,\n            kind: 'pipeline_stage',\n            value: stageSnapshot.label,\n          }))?.value ?? stageSnapshot.label\n          : parsed.pipelineStage ?? null\n      },\n      async () => {\n        deal = em.create(CustomerDeal, {\n          organizationId: parsed.organizationId,\n          tenantId: parsed.tenantId,\n          title: parsed.title,\n          description: parsed.description ?? null,\n          status: parsed.status ?? 'open',\n          pipelineStage: resolvedPipelineStageLabel,\n          pipelineId: pipelineAssignment.pipelineId,\n          pipelineStageId: pipelineAssignment.pipelineStageId,\n          valueAmount: toNumericString(parsed.valueAmount),\n          valueCurrency: parsed.valueCurrency ?? null,\n          probability: parsed.probability ?? null,\n          expectedCloseAt: parsed.expectedCloseAt ?? null,\n          ownerUserId: parsed.ownerUserId ?? null,\n          source: parsed.source ?? null,\n          closureOutcome: parsed.closureOutcome ?? null,\n          lossReasonId: parsed.lossReasonId ?? null,\n          lossNotes: parsed.lossNotes ?? null,\n        })\n        em.persist(deal)\n        await em.flush()\n      },\n      async () => {\n        const snapshot = stageSnapshot\n        if (!snapshot) return\n        await upsertDealStageTransition(em, {\n          deal,\n          pipelineId: snapshot.pipelineId,\n          stageId: snapshot.id,\n          stageLabel: snapshot.label,\n          stageOrder: snapshot.order,\n          transitionedByUserId: normalizedTransitionAuthorUserId,\n        })\n      },\n      () => syncDealPeople(em, deal, parsed.personIds ?? [], parsed.primaryPersonEntityId),\n      () => syncDealCompanies(em, deal, parsed.companyIds ?? []),\n    ], { transaction: true })\n\n    const de = (ctx.container.resolve('dataEngine') as DataEngine)\n    await setCustomFieldsIfAny({\n      dataEngine: de,\n      entityId: DEAL_ENTITY_ID,\n      recordId: deal.id,\n      organizationId: deal.organizationId,\n      tenantId: deal.tenantId,\n      values: custom,\n      notify: false,\n    })\n\n    await emitCrudSideEffects({\n      dataEngine: de,\n      action: 'created',\n      entity: deal,\n      identifiers: {\n        id: deal.id,\n        organizationId: deal.organizationId,\n        tenantId: deal.tenantId,\n      },\n      indexer: dealCrudIndexer,\n      events: dealCrudEvents,\n    })\n\n    return { dealId: deal.id }\n  },\n  captureAfter: async (_input, result, ctx) => {\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n    return await loadDealSnapshot(em, result.dealId)\n  },\n  buildLog: async ({ result, ctx }) => {\n    const { translate } = await resolveTranslations()\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n    const snapshot = await loadDealSnapshot(em, result.dealId)\n    return {\n      actionLabel: translate('customers.audit.deals.create', 'Create deal'),\n      resourceKind: 'customers.deal',\n      resourceId: result.dealId,\n      tenantId: snapshot?.deal.tenantId ?? null,\n      organizationId: snapshot?.deal.organizationId ?? null,\n      snapshotAfter: snapshot ?? null,\n      payload: {\n        undo: {\n          after: snapshot,\n        } satisfies DealUndoPayload,\n      },\n    }\n  },\n  undo: async ({ logEntry, ctx }) => {\n    const dealId = logEntry?.resourceId\n    if (!dealId) return\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n    const deal = await findOneWithDecryption(em, CustomerDeal, { id: dealId })\n    if (!deal) return\n    await deleteDealStageTransitions(em, deal)\n    await em.nativeDelete(CustomerDealPersonLink, { deal })\n    await em.nativeDelete(CustomerDealCompanyLink, { deal })\n    em.remove(deal)\n    await em.flush()\n  },\n  redo: async ({ logEntry, ctx }) => {\n    const after = resolveRedoSnapshot<DealSnapshot>(logEntry)\n    if (!after) {\n      throw new CrudHttpError(400, { error: '[internal] redo snapshot unavailable for deal create' })\n    }\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n    let deal = await findOneWithDecryption(em, CustomerDeal, { id: after.deal.id })\n    if (!deal) {\n      deal = em.create(CustomerDeal, {\n        id: after.deal.id,\n        organizationId: after.deal.organizationId,\n        tenantId: after.deal.tenantId,\n        title: after.deal.title,\n        description: after.deal.description,\n        status: after.deal.status,\n        pipelineStage: after.deal.pipelineStage,\n        pipelineId: after.deal.pipelineId,\n        pipelineStageId: after.deal.pipelineStageId,\n        valueAmount: after.deal.valueAmount,\n        valueCurrency: after.deal.valueCurrency,\n        probability: after.deal.probability,\n        expectedCloseAt: after.deal.expectedCloseAt,\n        ownerUserId: after.deal.ownerUserId,\n        source: after.deal.source,\n        closureOutcome: after.deal.closureOutcome,\n        lossReasonId: after.deal.lossReasonId,\n        lossNotes: after.deal.lossNotes,\n      })\n      em.persist(deal)\n    }\n    const restoredDeal = deal\n    await withAtomicFlush(em, [\n      () => syncDealPeople(em, restoredDeal, after.people, after.primaryPersonEntityId),\n      () => syncDealCompanies(em, restoredDeal, after.companies),\n      () => deleteDealStageTransitions(em, restoredDeal),\n      () => restoreDealStageTransitions(em, restoredDeal, after.transitions),\n    ], { transaction: true })\n\n    const de = (ctx.container.resolve('dataEngine') as DataEngine)\n    await emitCrudSideEffects({\n      dataEngine: de,\n      action: 'created',\n      entity: restoredDeal,\n      identifiers: {\n        id: restoredDeal.id,\n        organizationId: restoredDeal.organizationId,\n        tenantId: restoredDeal.tenantId,\n      },\n      indexer: dealCrudIndexer,\n      events: dealCrudEvents,\n    })\n\n    const restoreValues = buildCustomFieldResetMap(after.custom, undefined)\n    if (Object.keys(restoreValues).length) {\n      await setCustomFieldsIfAny({\n        dataEngine: de,\n        entityId: DEAL_ENTITY_ID,\n        recordId: restoredDeal.id,\n        organizationId: restoredDeal.organizationId,\n        tenantId: restoredDeal.tenantId,\n        values: restoreValues,\n        notify: false,\n      })\n    }\n\n    return { dealId: restoredDeal.id }\n  },\n}\n\nconst updateDealCommand: CommandHandler<DealUpdateInput, { dealId: string }> = {\n  id: 'customers.deals.update',\n  async prepare(rawInput, ctx) {\n    const { parsed } = parseWithCustomFields(dealUpdateSchema, rawInput)\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n    const snapshot = await loadDealSnapshot(em, parsed.id)\n    return snapshot ? { before: snapshot } : {}\n  },\n  async execute(rawInput, ctx) {\n    const { parsed, custom } = parseWithCustomFields(dealUpdateSchema, rawInput)\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n    const deal = await findOneWithDecryption(em, CustomerDeal, { id: parsed.id, deletedAt: null })\n    const record = deal ?? null\n    if (!record) throw notFound('Deal not found')\n    ensureTenantScope(ctx, record.tenantId)\n    ensureOrganizationScope(ctx, record.organizationId)\n\n    const previousStatus = record.status\n    const previousPipelineStageId = record.pipelineStageId ?? null\n    const normalizedTransitionAuthorUserId = normalizeAuthorUserId(null, ctx.auth)\n\n    let nextStageSnapshot: PipelineStageSnapshot | null = null\n    let nextPipelineAssignment: { pipelineId: string | null; pipelineStageId: string | null } = {\n      pipelineId: record.pipelineId ?? null,\n      pipelineStageId: record.pipelineStageId ?? null,\n    }\n    let nextPipelineStageLabel: string | null = null\n    let resolvedCurrentPipelineStageLabel: string | null = null\n\n    await runCrudCommandWrite({\n      ctx,\n      em,\n      entityId: DEAL_ENTITY_ID,\n      action: 'updated',\n      scope: { tenantId: record.tenantId, organizationId: record.organizationId },\n      customFields: custom,\n      events: dealCrudEvents,\n      indexer: dealCrudIndexer,\n      sideEffect: () => ({\n        entity: record,\n        identifiers: {\n          id: record.id,\n          organizationId: record.organizationId,\n          tenantId: record.tenantId,\n        },\n      }),\n      phases: [\n        async () => {\n          const pipelineAssignmentChanged =\n            parsed.pipelineId !== undefined || parsed.pipelineStageId !== undefined\n          const requestedPipelineStageId =\n            parsed.pipelineStageId !== undefined\n              ? parsed.pipelineStageId ?? null\n              : record.pipelineStageId ?? null\n          const requestedPipelineId =\n            parsed.pipelineId !== undefined ? parsed.pipelineId ?? null : record.pipelineId ?? null\n\n          nextStageSnapshot = requestedPipelineStageId && (pipelineAssignmentChanged || !record.pipelineStage)\n            ? await loadPipelineStageSnapshot(em, requestedPipelineStageId, record.tenantId, record.organizationId)\n            : null\n          if (pipelineAssignmentChanged) {\n            nextPipelineAssignment = resolvePipelineAssignment({\n              pipelineId: requestedPipelineId,\n              pipelineStageId: requestedPipelineStageId,\n              stageSnapshot: nextStageSnapshot,\n            })\n          }\n          nextPipelineStageLabel = nextStageSnapshot\n            ? (await ensureDictionaryEntry(em, {\n              tenantId: record.tenantId,\n              organizationId: record.organizationId,\n              kind: 'pipeline_stage',\n              value: nextStageSnapshot.label,\n            }))?.value ?? nextStageSnapshot.label\n            : null\n          resolvedCurrentPipelineStageLabel =\n            !nextStageSnapshot && record.pipelineStageId && (parsed.pipelineStageId !== undefined || !record.pipelineStage)\n              ? await resolvePipelineStageValue(em, record.pipelineStageId, record.tenantId, record.organizationId)\n              : null\n        },\n        () => {\n          if (parsed.title !== undefined) record.title = parsed.title\n          if (parsed.description !== undefined) record.description = parsed.description ?? null\n          if (parsed.status !== undefined) record.status = parsed.status ?? record.status\n          if (parsed.pipelineStage !== undefined) record.pipelineStage = parsed.pipelineStage ?? null\n          if (parsed.pipelineId !== undefined || (parsed.pipelineStageId !== undefined && nextStageSnapshot)) {\n            record.pipelineId = nextPipelineAssignment.pipelineId\n          }\n          if (parsed.pipelineStageId !== undefined) record.pipelineStageId = nextPipelineAssignment.pipelineStageId\n\n          if (nextPipelineStageLabel && (parsed.pipelineStageId !== undefined || !record.pipelineStage)) {\n            record.pipelineStage = nextPipelineStageLabel\n          } else if (resolvedCurrentPipelineStageLabel && (parsed.pipelineStageId !== undefined || !record.pipelineStage)) {\n            record.pipelineStage = resolvedCurrentPipelineStageLabel\n          }\n\n          if (parsed.valueAmount !== undefined) record.valueAmount = toNumericString(parsed.valueAmount)\n          if (parsed.valueCurrency !== undefined) record.valueCurrency = parsed.valueCurrency ?? null\n          if (parsed.probability !== undefined) record.probability = parsed.probability ?? null\n          if (parsed.expectedCloseAt !== undefined) record.expectedCloseAt = parsed.expectedCloseAt ?? null\n          if (parsed.ownerUserId !== undefined) record.ownerUserId = parsed.ownerUserId ?? null\n          if (parsed.source !== undefined) record.source = parsed.source ?? null\n          if (parsed.closureOutcome !== undefined) record.closureOutcome = parsed.closureOutcome ?? null\n          if (parsed.lossReasonId !== undefined) record.lossReasonId = parsed.lossReasonId ?? null\n          if (parsed.lossNotes !== undefined) record.lossNotes = parsed.lossNotes ?? null\n        },\n        async () => {\n          // CRITICAL: persist the scalar mutations above before any further `em.findOne` / sync\n          // helpers run inside this transaction. MikroORM v7's identity-map silently discards\n          // pending scalar changes on `record` if a query (such as the stage-transition lookup\n          // inside `upsertDealStageTransition`, or the linked-entity finds inside\n          // `syncDealPeople` / `syncDealCompanies`) executes on the same `EntityManager`\n          // before we explicitly flush. Without this flush, the entire kanban drag-and-drop\n          // returns 200 OK but never actually updates `customer_deals` rows \u2014 the card\n          // snaps back to its source lane on the next refetch (see SPEC-018).\n          await em.flush()\n        },\n        async () => {\n          const snapshot = nextStageSnapshot\n          if (!snapshot) return\n          const shouldRecord =\n            parsed.pipelineStageId !== undefined &&\n            parsed.pipelineStageId !== null &&\n            parsed.pipelineStageId !== previousPipelineStageId\n          if (!shouldRecord) return\n          await upsertDealStageTransition(em, {\n            deal: record,\n            pipelineId: snapshot.pipelineId,\n            stageId: snapshot.id,\n            stageLabel: nextPipelineStageLabel ?? snapshot.label,\n            stageOrder: snapshot.order,\n            transitionedByUserId: normalizedTransitionAuthorUserId,\n          })\n        },\n        () => syncDealPeople(em, record, parsed.personIds, parsed.primaryPersonEntityId),\n        () => syncDealCompanies(em, record, parsed.companyIds),\n      ],\n    })\n\n    // Emit a lifecycle event for deal won/lost status changes; the notifications\n    // subscriber translates these into recipient notifications. Tenant/organization\n    // scope MUST travel in the emit options, not only in the payload: both delivery\n    // paths build the subscriber context from `options` alone, so wildcard\n    // subscribers (workflow event triggers, business-rules triggers) drop a\n    // null-scoped event before trigger matching.\n    const newStatus = record.status\n    const normalizedStatus = newStatus === 'win' ? 'won' : newStatus === 'loose' ? 'lost' : newStatus\n    if (previousStatus !== newStatus && (normalizedStatus === 'won' || normalizedStatus === 'lost')) {\n      const closureEvent = normalizedStatus === 'won' ? 'customers.deal.won' : 'customers.deal.lost'\n      try {\n        const eventBus = ctx.container.resolve('eventBus') as { emitEvent(event: string, payload: unknown, options?: unknown): Promise<void> } | undefined\n        if (eventBus) {\n          await eventBus.emitEvent(\n            closureEvent,\n            {\n              id: record.id,\n              tenantId: record.tenantId,\n              organizationId: record.organizationId,\n              ownerUserId: record.ownerUserId ?? null,\n              title: record.title,\n              valueAmount: record.valueAmount ?? null,\n              valueCurrency: record.valueCurrency ?? null,\n            },\n            {\n              persistent: true,\n              tenantId: record.tenantId,\n              organizationId: record.organizationId,\n            },\n          )\n        }\n      } catch (err) {\n        logger.warn('Deal closure event emit failed', { component: 'deals.update', closureEvent, err })\n      }\n    }\n\n    return { dealId: record.id }\n  },\n  captureAfter: async (_input, result, ctx) => {\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n    return await loadDealSnapshot(em, result.dealId)\n  },\n  buildLog: async ({ result, snapshots, ctx }) => {\n    const { translate } = await resolveTranslations()\n    const before = snapshots.before as DealSnapshot | undefined\n    if (!before) return null\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n    const afterSnapshot = await loadDealSnapshot(em, result.dealId)\n    return {\n      actionLabel: translate('customers.audit.deals.update', 'Update deal'),\n      resourceKind: 'customers.deal',\n      resourceId: before.deal.id,\n      tenantId: before.deal.tenantId,\n      organizationId: before.deal.organizationId,\n      snapshotBefore: before,\n      snapshotAfter: afterSnapshot ?? null,\n      payload: {\n        undo: {\n          before,\n          after: afterSnapshot ?? null,\n        } satisfies DealUndoPayload,\n      },\n    }\n  },\n  undo: async ({ logEntry, ctx }) => {\n    const payload = extractUndoPayload<DealUndoPayload>(logEntry)\n    const before = payload?.before\n    if (!before) return\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n    const normalizedTransitionAuthorUserId = normalizeAuthorUserId(null, ctx.auth)\n    let deal = await findOneWithDecryption(em, CustomerDeal, { id: before.deal.id })\n    if (!deal) {\n      deal = em.create(CustomerDeal, {\n        id: before.deal.id,\n        organizationId: before.deal.organizationId,\n        tenantId: before.deal.tenantId,\n        title: before.deal.title,\n        description: before.deal.description,\n        status: before.deal.status,\n        pipelineStage: before.deal.pipelineStage,\n        pipelineId: before.deal.pipelineId,\n        pipelineStageId: before.deal.pipelineStageId,\n        valueAmount: before.deal.valueAmount,\n        valueCurrency: before.deal.valueCurrency,\n        probability: before.deal.probability,\n        expectedCloseAt: coerceSnapshotDate(before.deal.expectedCloseAt, 'expectedCloseAt'),\n        ownerUserId: before.deal.ownerUserId,\n        source: before.deal.source,\n        closureOutcome: before.deal.closureOutcome,\n        lossReasonId: before.deal.lossReasonId,\n        lossNotes: before.deal.lossNotes,\n      })\n      em.persist(deal)\n    }\n    const revertedStageSnapshot = before.deal.pipelineStageId\n      ? await loadPipelineStageSnapshot(em, before.deal.pipelineStageId, before.deal.tenantId, before.deal.organizationId)\n      : null\n    const existingTransition = before.deal.pipelineStageId\n      ? before.transitions.find((transition) => transition.stageId === before.deal.pipelineStageId) ?? null\n      : null\n    const shouldRecordRevertTransition =\n      before.deal.pipelineStageId !== (payload?.after?.deal.pipelineStageId ?? null) &&\n      !!before.deal.pipelineStageId &&\n      !!(revertedStageSnapshot?.pipelineId ?? before.deal.pipelineId ?? existingTransition?.pipelineId) &&\n      !!(revertedStageSnapshot?.label ?? before.deal.pipelineStage ?? existingTransition?.stageLabel)\n\n    await withAtomicFlush(em, [\n      () => {\n        deal.title = before.deal.title\n        deal.description = before.deal.description\n        deal.status = before.deal.status\n        deal.pipelineStage = before.deal.pipelineStage\n        deal.pipelineId = before.deal.pipelineId\n        deal.pipelineStageId = before.deal.pipelineStageId\n        deal.valueAmount = before.deal.valueAmount\n        deal.valueCurrency = before.deal.valueCurrency\n        deal.probability = before.deal.probability\n        deal.expectedCloseAt = coerceSnapshotDate(before.deal.expectedCloseAt, 'expectedCloseAt')\n        deal.ownerUserId = before.deal.ownerUserId\n        deal.source = before.deal.source\n        deal.closureOutcome = before.deal.closureOutcome\n        deal.lossReasonId = before.deal.lossReasonId\n        deal.lossNotes = before.deal.lossNotes\n      },\n      async () => {\n        // Mirror of the fix applied to the forward `execute` path: persist the scalar\n        // mutations on `deal` before any further `em.findOne` (the transition lookup\n        // inside `upsertDealStageTransition`) or sync-helper queries run on the same EM.\n        // MikroORM v7 silently discards the pending scalar changes if we don't flush here\n        // (see SPEC-018), which would make an undo of a kanban stage move silently no-op.\n        await em.flush()\n      },\n      async () => {\n        if (!shouldRecordRevertTransition || !before.deal.pipelineStageId) return\n        const pipelineId = revertedStageSnapshot?.pipelineId ?? before.deal.pipelineId ?? existingTransition?.pipelineId\n        const stageLabel = revertedStageSnapshot?.label ?? before.deal.pipelineStage ?? existingTransition?.stageLabel\n        if (!pipelineId || !stageLabel) return\n        await upsertDealStageTransition(em, {\n          deal,\n          pipelineId,\n          stageId: before.deal.pipelineStageId,\n          stageLabel,\n          stageOrder: revertedStageSnapshot?.order ?? existingTransition?.stageOrder ?? 0,\n          transitionedByUserId: normalizedTransitionAuthorUserId,\n        })\n      },\n      () => syncDealPeople(em, deal, before.people, before.primaryPersonEntityId),\n      () => syncDealCompanies(em, deal, before.companies),\n    ], { transaction: true })\n\n    const de = (ctx.container.resolve('dataEngine') as DataEngine)\n    await emitCrudUndoSideEffects({\n      dataEngine: de,\n      action: 'updated',\n      entity: deal,\n      identifiers: {\n        id: deal.id,\n        organizationId: deal.organizationId,\n        tenantId: deal.tenantId,\n      },\n      indexer: dealCrudIndexer,\n      events: dealCrudEvents,\n    })\n\n    const resetValues = buildCustomFieldResetMap(before.custom, payload?.after?.custom)\n    if (Object.keys(resetValues).length) {\n      await setCustomFieldsIfAny({\n        dataEngine: de,\n        entityId: DEAL_ENTITY_ID,\n        recordId: deal.id,\n        organizationId: deal.organizationId,\n        tenantId: deal.tenantId,\n        values: resetValues,\n        notify: false,\n      })\n    }\n  },\n}\n\nconst deleteDealCommand: CommandHandler<{ body?: Record<string, unknown>; query?: Record<string, unknown> }, { dealId: string }> =\n  {\n    id: 'customers.deals.delete',\n    async prepare(input, ctx) {\n      const id = requireId(input, 'Deal id required')\n      const em = (ctx.container.resolve('em') as EntityManager).fork()\n      const snapshot = await loadDealSnapshot(em, id)\n      return snapshot ? { before: snapshot } : {}\n    },\n    async execute(input, ctx) {\n      const id = requireId(input, 'Deal id required')\n      const em = (ctx.container.resolve('em') as EntityManager).fork()\n      const deal = await findOneWithDecryption(em, CustomerDeal, { id, deletedAt: null })\n      const record = deal ?? null\n      if (!record) throw notFound('Deal not found')\n      ensureTenantScope(ctx, record.tenantId)\n      ensureOrganizationScope(ctx, record.organizationId)\n      await deleteDealStageTransitions(em, record)\n      await em.nativeDelete(CustomerDealPersonLink, { deal: record })\n      await em.nativeDelete(CustomerDealCompanyLink, { deal: record })\n      em.remove(record)\n      await em.flush()\n\n      const de = (ctx.container.resolve('dataEngine') as DataEngine)\n      await emitCrudSideEffects({\n        dataEngine: de,\n        action: 'deleted',\n        entity: record,\n        identifiers: {\n          id: record.id,\n          organizationId: record.organizationId,\n          tenantId: record.tenantId,\n        },\n        indexer: dealCrudIndexer,\n        events: dealCrudEvents,\n      })\n      return { dealId: record.id }\n    },\n    buildLog: async ({ snapshots }) => {\n      const before = snapshots.before as DealSnapshot | undefined\n      if (!before) return null\n      const { translate } = await resolveTranslations()\n      return {\n        actionLabel: translate('customers.audit.deals.delete', 'Delete deal'),\n        resourceKind: 'customers.deal',\n        resourceId: before.deal.id,\n        tenantId: before.deal.tenantId,\n        organizationId: before.deal.organizationId,\n        snapshotBefore: before,\n        payload: {\n          undo: {\n            before,\n          } satisfies DealUndoPayload,\n        },\n      }\n    },\n    undo: async ({ logEntry, ctx }) => {\n      const payload = extractUndoPayload<DealUndoPayload>(logEntry)\n      const before = payload?.before\n      if (!before) return\n      const em = (ctx.container.resolve('em') as EntityManager).fork()\n      let deal = await findOneWithDecryption(em, CustomerDeal, { id: before.deal.id })\n      if (!deal) {\n        deal = em.create(CustomerDeal, {\n          id: before.deal.id,\n          organizationId: before.deal.organizationId,\n          tenantId: before.deal.tenantId,\n          title: before.deal.title,\n          description: before.deal.description,\n          status: before.deal.status,\n          pipelineStage: before.deal.pipelineStage,\n          pipelineId: before.deal.pipelineId,\n          pipelineStageId: before.deal.pipelineStageId,\n          valueAmount: before.deal.valueAmount,\n          valueCurrency: before.deal.valueCurrency,\n          probability: before.deal.probability,\n          expectedCloseAt: coerceSnapshotDate(before.deal.expectedCloseAt, 'expectedCloseAt'),\n          ownerUserId: before.deal.ownerUserId,\n          source: before.deal.source,\n          closureOutcome: before.deal.closureOutcome,\n          lossReasonId: before.deal.lossReasonId,\n          lossNotes: before.deal.lossNotes,\n        })\n        em.persist(deal)\n      }\n      await withAtomicFlush(em, [\n        () => syncDealPeople(em, deal, before.people, before.primaryPersonEntityId),\n        () => syncDealCompanies(em, deal, before.companies),\n        () => deleteDealStageTransitions(em, deal),\n        () => restoreDealStageTransitions(em, deal, before.transitions),\n      ], { transaction: true })\n\n      const de = (ctx.container.resolve('dataEngine') as DataEngine)\n      await emitCrudUndoSideEffects({\n        dataEngine: de,\n        action: 'created',\n        entity: deal,\n        identifiers: {\n          id: deal.id,\n          organizationId: deal.organizationId,\n          tenantId: deal.tenantId,\n        },\n        indexer: dealCrudIndexer,\n        events: dealCrudEvents,\n      })\n\n      const resetValues = buildCustomFieldResetMap(before.custom, undefined)\n      if (Object.keys(resetValues).length) {\n        await setCustomFieldsIfAny({\n          dataEngine: de,\n          entityId: DEAL_ENTITY_ID,\n          recordId: deal.id,\n          organizationId: deal.organizationId,\n          tenantId: deal.tenantId,\n          values: resetValues,\n          notify: false,\n        })\n      }\n    },\n  }\n\nregisterCommand(createDealCommand)\nregisterCommand(updateDealCommand)\nregisterCommand(deleteDealCommand)\n"],
+  "mappings": "AAAA,SAAS,uBAAuB;AAEhC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,uBAAuB;AAChC,SAAS,2BAA2B;AACpC,SAAS,2BAA2B;AAGpC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,OAGK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,2BAA2B;AACpC;AAAA,EACE;AAAA,EACA;AAAA,OAEK;AACP,SAAS,eAAe,gBAAgB;AAExC,SAAS,SAAS;AAClB,SAAS,oBAAoB,6BAA6B;AAC1D,SAAS,mCAAmC,2CAA2C;AACvF,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,WAAW;AAEvC,MAAM,iBAAiB;AACvB,MAAM,kBAAmD;AAAA,EACvD,YAAY,EAAE,UAAU;AAC1B;AAEA,MAAM,iBAAmC;AAAA,EACvC,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,YAAY;AAAA,EACZ,cAAc,CAAC,SAAS;AAAA,IACtB,IAAI,IAAI,YAAY;AAAA,IACpB,gBAAgB,IAAI,YAAY;AAAA,IAChC,UAAU,IAAI,YAAY;AAAA,EAC5B;AACF;AAmBA,SAAS,mBAAmB,OAAyC,WAAgC;AACnG,MAAI,UAAU,UAAa,UAAU,KAAM,QAAO;AAClD,MAAI,iBAAiB,KAAM,QAAO;AAClC,QAAM,OAAO,IAAI,KAAK,KAAK;AAC3B,MAAI,OAAO,MAAM,KAAK,QAAQ,CAAC,GAAG;AAChC,UAAM,IAAI,MAAM,sBAAsB,SAAS,wBAAwB,KAAK,EAAE;AAAA,EAChF;AACA,SAAO;AACT;AAEA,SAAS,2BAA2B,OAAsB,WAAyB;AACjF,QAAM,OAAO,mBAAmB,OAAO,SAAS;AAChD,MAAI,CAAC,MAAM;AACT,UAAM,IAAI,MAAM,sBAAsB,SAAS,qBAAqB;AAAA,EACtE;AACA,SAAO;AACT;AAEA,eAAe,0BACb,IACA,iBACA,UACA,gBACuC;AACvC,QAAM,QAAQ,MAAM,sBAAsB,IAAI,uBAAuB,EAAE,IAAI,gBAAgB,GAAG,CAAC,GAAG,EAAE,UAAU,eAAe,CAAC;AAC9H,MAAI,CAAC,MAAO,QAAO;AACnB,SAAO;AAAA,IACL,IAAI,MAAM;AAAA,IACV,YAAY,MAAM;AAAA,IAClB,OAAO,MAAM;AAAA,IACb,OAAO,MAAM;AAAA,EACf;AACF;AAEA,eAAe,0BACb,IACA,iBACA,UACA,gBACwB;AACxB,QAAM,QAAQ,MAAM,0BAA0B,IAAI,iBAAiB,UAAU,cAAc;AAC3F,MAAI,CAAC,MAAO,QAAO;AACnB,QAAM,QAAQ,MAAM,sBAAsB,IAAI;AAAA,IAC5C;AAAA,IACA;AAAA,IACA,MAAM;AAAA,IACN,OAAO,MAAM;AAAA,EACf,CAAC;AACD,SAAO,OAAO,SAAS,MAAM;AAC/B;AAEA,SAAS,0BAA0B,OAI+B;AAChE,QAAM,sBAAsB,MAAM,cAAc;AAChD,QAAM,2BAA2B,MAAM,mBAAmB;AAE1D,MAAI,4BAA4B,CAAC,MAAM,eAAe;AACpD,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,2BAA2B,CAAC;AAAA,EACpE;AAEA,MACE,uBACA,MAAM,iBACN,MAAM,cAAc,eAAe,qBACnC;AACA,UAAM,IAAI,cAAc,KAAK;AAAA,MAC3B,OAAO;AAAA,IACT,CAAC;AAAA,EACH;AAEA,SAAO;AAAA,IACL,YAAY,uBAAuB,MAAM,eAAe,cAAc;AAAA,IACtE,iBAAiB;AAAA,EACnB;AACF;AAEA,eAAe,0BACb,IACA,OASe;AACf,MAAI,WAA+C;AACnD,MAAI;AACF,eAAW,MAAM;AAAA,MACf;AAAA,MACA;AAAA,MACA,EAAE,MAAM,MAAM,KAAK,IAAI,SAAS,MAAM,SAAS,WAAW,KAAK;AAAA,MAC/D,CAAC;AAAA,MACD,EAAE,UAAU,MAAM,KAAK,UAAU,gBAAgB,MAAM,KAAK,eAAe;AAAA,IAC7E;AAAA,EACF,SAAS,OAAO;AACd,QAAI,CAAC,kCAAkC,KAAK,GAAG;AAC7C,YAAM;AAAA,IACR;AACA,wCAAoC,2CAA2C;AAC/E;AAAA,EACF;AACA,QAAM,iBAAiB,MAAM,kBAAkB,oBAAI,KAAK;AACxD,MAAI,UAAU;AACZ,aAAS,aAAa,MAAM;AAC5B,aAAS,aAAa,MAAM;AAC5B,aAAS,aAAa,MAAM;AAC5B,aAAS,iBAAiB;AAC1B,aAAS,uBAAuB,MAAM;AACtC,aAAS,YAAY;AACrB,aAAS,WAAW;AACpB;AAAA,EACF;AAEA,QAAM,aAAa,GAAG,OAAO,6BAA6B;AAAA,IACxD,gBAAgB,MAAM,KAAK;AAAA,IAC3B,UAAU,MAAM,KAAK;AAAA,IACrB,MAAM,MAAM;AAAA,IACZ,YAAY,MAAM;AAAA,IAClB,SAAS,MAAM;AAAA,IACf,YAAY,MAAM;AAAA,IAClB,YAAY,MAAM;AAAA,IAClB;AAAA,IACA,sBAAsB,MAAM;AAAA,IAC5B,UAAU;AAAA,EACZ,CAAC;AACD,KAAG,QAAQ,UAAU;AACvB;AAEA,eAAe,2BAA2B,IAAmB,MAAmC;AAC9F,MAAI;AACF,UAAM,GAAG,aAAa,6BAA6B,EAAE,MAAM,KAAK,GAAG,CAAC;AAAA,EACtE,SAAS,OAAO;AACd,QAAI,CAAC,kCAAkC,KAAK,GAAG;AAC7C,YAAM;AAAA,IACR;AACA,wCAAoC,4CAA4C;AAAA,EAClF;AACF;AAEA,eAAe,4BACb,IACA,MACA,aACe;AACf,MAAI,CAAC,YAAY,OAAQ;AACzB,aAAW,sBAAsB,aAAa;AAC5C,UAAM,aAAa,GAAG,OAAO,6BAA6B;AAAA,MACxD,IAAI,mBAAmB;AAAA,MACvB,gBAAgB,KAAK;AAAA,MACrB,UAAU,KAAK;AAAA,MACf;AAAA,MACA,YAAY,mBAAmB;AAAA,MAC/B,SAAS,mBAAmB;AAAA,MAC5B,YAAY,mBAAmB;AAAA,MAC/B,YAAY,mBAAmB;AAAA,MAC/B,gBAAgB,2BAA2B,mBAAmB,gBAAgB,gBAAgB;AAAA,MAC9F,sBAAsB,mBAAmB;AAAA,MACzC,UAAU;AAAA,IACZ,CAAC;AACD,OAAG,QAAQ,UAAU;AAAA,EACvB;AACF;AAuCA,eAAe,iBAAiB,IAAmB,IAA0C;AAC3F,QAAM,OAAO,MAAM,sBAAsB,IAAI,cAAc,EAAE,IAAI,WAAW,KAAK,CAAC;AAClF,MAAI,CAAC,KAAM,QAAO;AAClB,QAAM,kBAAkB,EAAE,UAAU,KAAK,YAAY,MAAM,gBAAgB,KAAK,kBAAkB,KAAK;AACvG,QAAM,cAAc,MAAM;AAAA,IACxB;AAAA,IACA;AAAA,IACA,EAAE,KAAW;AAAA,IACb,EAAE,UAAU,CAAC,QAAQ,EAAE;AAAA,IACvB;AAAA,EACF;AACA,QAAM,eAAe,MAAM;AAAA,IACzB;AAAA,IACA;AAAA,IACA,EAAE,KAAW;AAAA,IACb,EAAE,UAAU,CAAC,SAAS,EAAE;AAAA,IACxB;AAAA,EACF;AACA,QAAM,cAAc,MAAM;AAAA,IACxB;AAAA,IACA;AAAA,IACA,EAAE,MAAM,KAAK,IAAI,WAAW,KAAK;AAAA,IACjC,EAAE,SAAS,EAAE,YAAY,OAAO,gBAAgB,MAAM,EAAE;AAAA,IACxD;AAAA,EACF,EAAE,MAAM,CAAC,UAAmB;AAC1B,QAAI,CAAC,kCAAkC,KAAK,GAAG;AAC7C,YAAM;AAAA,IACR;AACA,wCAAoC,uCAAuC;AAC3E,WAAO,CAAC;AAAA,EACV,CAAC;AACD,QAAM,SAAS,MAAM,wBAAwB,IAAI;AAAA,IAC/C,UAAU;AAAA,IACV,UAAU,KAAK;AAAA,IACf,UAAU,KAAK;AAAA,IACf,gBAAgB,KAAK;AAAA,EACvB,CAAC;AACD,QAAM,gBAAgB,YAAY,KAAK,CAAC,SAAS,KAAK,SAAS,GAAG;AAClE,SAAO;AAAA,IACL,MAAM;AAAA,MACJ,IAAI,KAAK;AAAA,MACT,gBAAgB,KAAK;AAAA,MACrB,UAAU,KAAK;AAAA,MACf,OAAO,KAAK;AAAA,MACZ,aAAa,KAAK,eAAe;AAAA,MACjC,QAAQ,KAAK;AAAA,MACb,eAAe,KAAK,iBAAiB;AAAA,MACrC,YAAY,KAAK,cAAc;AAAA,MAC/B,iBAAiB,KAAK,mBAAmB;AAAA,MACzC,aAAa,KAAK,eAAe;AAAA,MACjC,eAAe,KAAK,iBAAiB;AAAA,MACrC,aAAa,KAAK,eAAe;AAAA,MACjC,iBAAiB,KAAK,mBAAmB;AAAA,MACzC,aAAa,KAAK,eAAe;AAAA,MACjC,QAAQ,KAAK,UAAU;AAAA,MACvB,gBAAgB,KAAK,kBAAkB;AAAA,MACvC,cAAc,KAAK,gBAAgB;AAAA,MACnC,WAAW,KAAK,aAAa;AAAA,IAC/B;AAAA,IACA,QAAQ,YAAY;AAAA,MAAI,CAAC,SACvB,OAAO,KAAK,WAAW,WAAW,KAAK,SAAS,KAAK,OAAO;AAAA,IAC9D;AAAA,IACA,uBACE,OAAO,kBAAkB,WAAW,gBAAgB,eAAe,MAAM;AAAA,IAC3E,WAAW,aAAa;AAAA,MAAI,CAAC,SAC3B,OAAO,KAAK,YAAY,WAAW,KAAK,UAAU,KAAK,QAAQ;AAAA,IACjE;AAAA,IACA,aAAa,YAAY,IAAI,CAAC,gBAAgB;AAAA,MAC5C,IAAI,WAAW;AAAA,MACf,YAAY,WAAW;AAAA,MACvB,SAAS,WAAW;AAAA,MACpB,YAAY,WAAW;AAAA,MACvB,YAAY,WAAW;AAAA,MACvB,gBAAgB,WAAW;AAAA,MAC3B,sBAAsB,WAAW,wBAAwB;AAAA,IAC3D,EAAE;AAAA,IACF;AAAA,EACF;AACF;AAEA,SAAS,gBAAgB,OAAiD;AACxE,MAAI,UAAU,UAAa,UAAU,KAAM,QAAO;AAClD,SAAO,MAAM,SAAS;AACxB;AAEA,eAAe,eACb,IACA,MACA,WACA,uBACe;AACf,MAAI,cAAc,QAAW;AAC3B,QAAI,0BAA0B,OAAW;AACzC,UAAM,QAAQ,MAAM,GAAG,KAAK,wBAAwB,EAAE,KAAK,CAAC;AAC5D,QAAI,0BAA0B,QAAQ,CAAC,MAAM,KAAK,CAAC,SAAS,KAAK,OAAO,OAAO,qBAAqB,GAAG;AACrG,YAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,YAAM,IAAI,cAAc,KAAK;AAAA,QAC3B,OAAO;AAAA,UACL;AAAA,UACA;AAAA,QACF;AAAA,MACF,CAAC;AAAA,IACH;AACA,eAAW,QAAQ,OAAO;AACxB,WAAK,YAAY;AAAA,IACnB;AACA,UAAM,GAAG,MAAM;AACf,QAAI,0BAA0B,MAAM;AAClC,YAAM,cAAc,MAAM,KAAK,CAAC,SAAS,KAAK,OAAO,OAAO,qBAAqB;AACjF,UAAI,YAAa,aAAY,YAAY;AAAA,IAC3C;AACA;AAAA,EACF;AACA,QAAM,SAAS,MAAM,KAAK,IAAI,IAAI,aAAa,CAAC,CAAC,CAAC;AAClD,MAAI,0BAA0B,UAAa,0BAA0B,QAAQ,CAAC,OAAO,SAAS,qBAAqB,GAAG;AACpH,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,UAAM,IAAI,cAAc,KAAK;AAAA,MAC3B,OAAO;AAAA,QACL;AAAA,QACA;AAAA,MACF;AAAA,IACF,CAAC;AAAA,EACH;AACA,MAAI,qBAAqB;AACzB,MAAI,uBAAuB,QAAW;AACpC,UAAM,kBAAkB,MAAM,GAAG,QAAQ,wBAAwB,EAAE,MAAM,WAAW,KAAK,CAAC;AAC1F,yBAAqB,iBAAiB,QAAQ,MAAM;AAAA,EACtD;AACA,QAAM,GAAG,aAAa,wBAAwB,EAAE,KAAK,CAAC;AACtD,MAAI,CAAC,OAAO,OAAQ;AACpB,aAAW,YAAY,QAAQ;AAC7B,UAAM,SAAS,MAAM,sBAAsB,IAAI,UAAU,EAAE,UAAU,KAAK,UAAU,gBAAgB,KAAK,eAAe,GAAG,UAAU,kBAAkB;AACvJ,oBAAgB,QAAQ,KAAK,gBAAgB,KAAK,QAAQ;AAC1D,UAAM,OAAO,GAAG,OAAO,wBAAwB;AAAA,MAC7C;AAAA,MACA;AAAA,MACA,WAAW,aAAa;AAAA,IAC1B,CAAC;AACD,OAAG,QAAQ,IAAI;AAAA,EACjB;AACF;AAEA,eAAe,kBACb,IACA,MACA,YACe;AACf,MAAI,eAAe,OAAW;AAC9B,QAAM,GAAG,aAAa,yBAAyB,EAAE,KAAK,CAAC;AACvD,MAAI,CAAC,cAAc,CAAC,WAAW,OAAQ;AACvC,QAAM,SAAS,MAAM,KAAK,IAAI,IAAI,UAAU,CAAC;AAC7C,aAAW,aAAa,QAAQ;AAC9B,UAAM,UAAU,MAAM,sBAAsB,IAAI,WAAW,EAAE,UAAU,KAAK,UAAU,gBAAgB,KAAK,eAAe,GAAG,WAAW,mBAAmB;AAC3J,oBAAgB,SAAS,KAAK,gBAAgB,KAAK,QAAQ;AAC3D,UAAM,OAAO,GAAG,OAAO,yBAAyB;AAAA,MAC9C;AAAA,MACA;AAAA,IACF,CAAC;AACD,OAAG,QAAQ,IAAI;AAAA,EACjB;AACF;AAEA,MAAM,oBAAyE;AAAA,EAC7E,IAAI;AAAA,EACJ,MAAM,QAAQ,UAAU,KAAK;AAC3B,UAAM,EAAE,QAAQ,OAAO,IAAI,sBAAsB,kBAAkB,QAAQ;AAC3E,sBAAkB,KAAK,OAAO,QAAQ;AACtC,4BAAwB,KAAK,OAAO,cAAc;AAElD,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,UAAM,mCAAmC,sBAAsB,MAAM,IAAI,IAAI;AAC7E,QAAI;AACJ,QAAI,gBAA8C;AAClD,QAAI,qBAAoF;AAAA,MACtF,YAAY;AAAA,MACZ,iBAAiB;AAAA,IACnB;AACA,QAAI,6BAA4C;AAChD,UAAM,gBAAgB,IAAI;AAAA,MACxB,YAAY;AACV,wBAAgB,OAAO,kBACnB,MAAM,0BAA0B,IAAI,OAAO,iBAAiB,OAAO,UAAU,OAAO,cAAc,IAClG;AACJ,6BAAqB,0BAA0B;AAAA,UAC7C,YAAY,OAAO;AAAA,UACnB,iBAAiB,OAAO;AAAA,UACxB;AAAA,QACF,CAAC;AACD,qCAA6B,iBACxB,MAAM,sBAAsB,IAAI;AAAA,UACjC,UAAU,OAAO;AAAA,UACjB,gBAAgB,OAAO;AAAA,UACvB,MAAM;AAAA,UACN,OAAO,cAAc;AAAA,QACvB,CAAC,IAAI,SAAS,cAAc,QAC1B,OAAO,iBAAiB;AAAA,MAC9B;AAAA,MACA,YAAY;AACV,eAAO,GAAG,OAAO,cAAc;AAAA,UAC7B,gBAAgB,OAAO;AAAA,UACvB,UAAU,OAAO;AAAA,UACjB,OAAO,OAAO;AAAA,UACd,aAAa,OAAO,eAAe;AAAA,UACnC,QAAQ,OAAO,UAAU;AAAA,UACzB,eAAe;AAAA,UACf,YAAY,mBAAmB;AAAA,UAC/B,iBAAiB,mBAAmB;AAAA,UACpC,aAAa,gBAAgB,OAAO,WAAW;AAAA,UAC/C,eAAe,OAAO,iBAAiB;AAAA,UACvC,aAAa,OAAO,eAAe;AAAA,UACnC,iBAAiB,OAAO,mBAAmB;AAAA,UAC3C,aAAa,OAAO,eAAe;AAAA,UACnC,QAAQ,OAAO,UAAU;AAAA,UACzB,gBAAgB,OAAO,kBAAkB;AAAA,UACzC,cAAc,OAAO,gBAAgB;AAAA,UACrC,WAAW,OAAO,aAAa;AAAA,QACjC,CAAC;AACD,WAAG,QAAQ,IAAI;AACf,cAAM,GAAG,MAAM;AAAA,MACjB;AAAA,MACA,YAAY;AACV,cAAM,WAAW;AACjB,YAAI,CAAC,SAAU;AACf,cAAM,0BAA0B,IAAI;AAAA,UAClC;AAAA,UACA,YAAY,SAAS;AAAA,UACrB,SAAS,SAAS;AAAA,UAClB,YAAY,SAAS;AAAA,UACrB,YAAY,SAAS;AAAA,UACrB,sBAAsB;AAAA,QACxB,CAAC;AAAA,MACH;AAAA,MACA,MAAM,eAAe,IAAI,MAAM,OAAO,aAAa,CAAC,GAAG,OAAO,qBAAqB;AAAA,MACnF,MAAM,kBAAkB,IAAI,MAAM,OAAO,cAAc,CAAC,CAAC;AAAA,IAC3D,GAAG,EAAE,aAAa,KAAK,CAAC;AAExB,UAAM,KAAM,IAAI,UAAU,QAAQ,YAAY;AAC9C,UAAM,qBAAqB;AAAA,MACzB,YAAY;AAAA,MACZ,UAAU;AAAA,MACV,UAAU,KAAK;AAAA,MACf,gBAAgB,KAAK;AAAA,MACrB,UAAU,KAAK;AAAA,MACf,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV,CAAC;AAED,UAAM,oBAAoB;AAAA,MACxB,YAAY;AAAA,MACZ,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,aAAa;AAAA,QACX,IAAI,KAAK;AAAA,QACT,gBAAgB,KAAK;AAAA,QACrB,UAAU,KAAK;AAAA,MACjB;AAAA,MACA,SAAS;AAAA,MACT,QAAQ;AAAA,IACV,CAAC;AAED,WAAO,EAAE,QAAQ,KAAK,GAAG;AAAA,EAC3B;AAAA,EACA,cAAc,OAAO,QAAQ,QAAQ,QAAQ;AAC3C,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,WAAO,MAAM,iBAAiB,IAAI,OAAO,MAAM;AAAA,EACjD;AAAA,EACA,UAAU,OAAO,EAAE,QAAQ,IAAI,MAAM;AACnC,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,UAAM,WAAW,MAAM,iBAAiB,IAAI,OAAO,MAAM;AACzD,WAAO;AAAA,MACL,aAAa,UAAU,gCAAgC,aAAa;AAAA,MACpE,cAAc;AAAA,MACd,YAAY,OAAO;AAAA,MACnB,UAAU,UAAU,KAAK,YAAY;AAAA,MACrC,gBAAgB,UAAU,KAAK,kBAAkB;AAAA,MACjD,eAAe,YAAY;AAAA,MAC3B,SAAS;AAAA,QACP,MAAM;AAAA,UACJ,OAAO;AAAA,QACT;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA,MAAM,OAAO,EAAE,UAAU,IAAI,MAAM;AACjC,UAAM,SAAS,UAAU;AACzB,QAAI,CAAC,OAAQ;AACb,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,UAAM,OAAO,MAAM,sBAAsB,IAAI,cAAc,EAAE,IAAI,OAAO,CAAC;AACzE,QAAI,CAAC,KAAM;AACX,UAAM,2BAA2B,IAAI,IAAI;AACzC,UAAM,GAAG,aAAa,wBAAwB,EAAE,KAAK,CAAC;AACtD,UAAM,GAAG,aAAa,yBAAyB,EAAE,KAAK,CAAC;AACvD,OAAG,OAAO,IAAI;AACd,UAAM,GAAG,MAAM;AAAA,EACjB;AAAA,EACA,MAAM,OAAO,EAAE,UAAU,IAAI,MAAM;AACjC,UAAM,QAAQ,oBAAkC,QAAQ;AACxD,QAAI,CAAC,OAAO;AACV,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,uDAAuD,CAAC;AAAA,IAChG;AACA,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,QAAI,OAAO,MAAM,sBAAsB,IAAI,cAAc,EAAE,IAAI,MAAM,KAAK,GAAG,CAAC;AAC9E,QAAI,CAAC,MAAM;AACT,aAAO,GAAG,OAAO,cAAc;AAAA,QAC7B,IAAI,MAAM,KAAK;AAAA,QACf,gBAAgB,MAAM,KAAK;AAAA,QAC3B,UAAU,MAAM,KAAK;AAAA,QACrB,OAAO,MAAM,KAAK;AAAA,QAClB,aAAa,MAAM,KAAK;AAAA,QACxB,QAAQ,MAAM,KAAK;AAAA,QACnB,eAAe,MAAM,KAAK;AAAA,QAC1B,YAAY,MAAM,KAAK;AAAA,QACvB,iBAAiB,MAAM,KAAK;AAAA,QAC5B,aAAa,MAAM,KAAK;AAAA,QACxB,eAAe,MAAM,KAAK;AAAA,QAC1B,aAAa,MAAM,KAAK;AAAA,QACxB,iBAAiB,MAAM,KAAK;AAAA,QAC5B,aAAa,MAAM,KAAK;AAAA,QACxB,QAAQ,MAAM,KAAK;AAAA,QACnB,gBAAgB,MAAM,KAAK;AAAA,QAC3B,cAAc,MAAM,KAAK;AAAA,QACzB,WAAW,MAAM,KAAK;AAAA,MACxB,CAAC;AACD,SAAG,QAAQ,IAAI;AAAA,IACjB;AACA,UAAM,eAAe;AACrB,UAAM,gBAAgB,IAAI;AAAA,MACxB,MAAM,eAAe,IAAI,cAAc,MAAM,QAAQ,MAAM,qBAAqB;AAAA,MAChF,MAAM,kBAAkB,IAAI,cAAc,MAAM,SAAS;AAAA,MACzD,MAAM,2BAA2B,IAAI,YAAY;AAAA,MACjD,MAAM,4BAA4B,IAAI,cAAc,MAAM,WAAW;AAAA,IACvE,GAAG,EAAE,aAAa,KAAK,CAAC;AAExB,UAAM,KAAM,IAAI,UAAU,QAAQ,YAAY;AAC9C,UAAM,oBAAoB;AAAA,MACxB,YAAY;AAAA,MACZ,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,aAAa;AAAA,QACX,IAAI,aAAa;AAAA,QACjB,gBAAgB,aAAa;AAAA,QAC7B,UAAU,aAAa;AAAA,MACzB;AAAA,MACA,SAAS;AAAA,MACT,QAAQ;AAAA,IACV,CAAC;AAED,UAAM,gBAAgB,yBAAyB,MAAM,QAAQ,MAAS;AACtE,QAAI,OAAO,KAAK,aAAa,EAAE,QAAQ;AACrC,YAAM,qBAAqB;AAAA,QACzB,YAAY;AAAA,QACZ,UAAU;AAAA,QACV,UAAU,aAAa;AAAA,QACvB,gBAAgB,aAAa;AAAA,QAC7B,UAAU,aAAa;AAAA,QACvB,QAAQ;AAAA,QACR,QAAQ;AAAA,MACV,CAAC;AAAA,IACH;AAEA,WAAO,EAAE,QAAQ,aAAa,GAAG;AAAA,EACnC;AACF;AAEA,MAAM,oBAAyE;AAAA,EAC7E,IAAI;AAAA,EACJ,MAAM,QAAQ,UAAU,KAAK;AAC3B,UAAM,EAAE,OAAO,IAAI,sBAAsB,kBAAkB,QAAQ;AACnE,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,UAAM,WAAW,MAAM,iBAAiB,IAAI,OAAO,EAAE;AACrD,WAAO,WAAW,EAAE,QAAQ,SAAS,IAAI,CAAC;AAAA,EAC5C;AAAA,EACA,MAAM,QAAQ,UAAU,KAAK;AAC3B,UAAM,EAAE,QAAQ,OAAO,IAAI,sBAAsB,kBAAkB,QAAQ;AAC3E,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,UAAM,OAAO,MAAM,sBAAsB,IAAI,cAAc,EAAE,IAAI,OAAO,IAAI,WAAW,KAAK,CAAC;AAC7F,UAAM,SAAS,QAAQ;AACvB,QAAI,CAAC,OAAQ,OAAM,SAAS,gBAAgB;AAC5C,sBAAkB,KAAK,OAAO,QAAQ;AACtC,4BAAwB,KAAK,OAAO,cAAc;AAElD,UAAM,iBAAiB,OAAO;AAC9B,UAAM,0BAA0B,OAAO,mBAAmB;AAC1D,UAAM,mCAAmC,sBAAsB,MAAM,IAAI,IAAI;AAE7E,QAAI,oBAAkD;AACtD,QAAI,yBAAwF;AAAA,MAC1F,YAAY,OAAO,cAAc;AAAA,MACjC,iBAAiB,OAAO,mBAAmB;AAAA,IAC7C;AACA,QAAI,yBAAwC;AAC5C,QAAI,oCAAmD;AAEvD,UAAM,oBAAoB;AAAA,MACxB;AAAA,MACA;AAAA,MACA,UAAU;AAAA,MACV,QAAQ;AAAA,MACR,OAAO,EAAE,UAAU,OAAO,UAAU,gBAAgB,OAAO,eAAe;AAAA,MAC1E,cAAc;AAAA,MACd,QAAQ;AAAA,MACR,SAAS;AAAA,MACT,YAAY,OAAO;AAAA,QACjB,QAAQ;AAAA,QACR,aAAa;AAAA,UACX,IAAI,OAAO;AAAA,UACX,gBAAgB,OAAO;AAAA,UACvB,UAAU,OAAO;AAAA,QACnB;AAAA,MACF;AAAA,MACA,QAAQ;AAAA,QACN,YAAY;AACV,gBAAM,4BACJ,OAAO,eAAe,UAAa,OAAO,oBAAoB;AAChE,gBAAM,2BACJ,OAAO,oBAAoB,SACvB,OAAO,mBAAmB,OAC1B,OAAO,mBAAmB;AAChC,gBAAM,sBACJ,OAAO,eAAe,SAAY,OAAO,cAAc,OAAO,OAAO,cAAc;AAErF,8BAAoB,6BAA6B,6BAA6B,CAAC,OAAO,iBAClF,MAAM,0BAA0B,IAAI,0BAA0B,OAAO,UAAU,OAAO,cAAc,IACpG;AACJ,cAAI,2BAA2B;AAC7B,qCAAyB,0BAA0B;AAAA,cACjD,YAAY;AAAA,cACZ,iBAAiB;AAAA,cACjB,eAAe;AAAA,YACjB,CAAC;AAAA,UACH;AACA,mCAAyB,qBACpB,MAAM,sBAAsB,IAAI;AAAA,YACjC,UAAU,OAAO;AAAA,YACjB,gBAAgB,OAAO;AAAA,YACvB,MAAM;AAAA,YACN,OAAO,kBAAkB;AAAA,UAC3B,CAAC,IAAI,SAAS,kBAAkB,QAC9B;AACJ,8CACE,CAAC,qBAAqB,OAAO,oBAAoB,OAAO,oBAAoB,UAAa,CAAC,OAAO,iBAC7F,MAAM,0BAA0B,IAAI,OAAO,iBAAiB,OAAO,UAAU,OAAO,cAAc,IAClG;AAAA,QACR;AAAA,QACA,MAAM;AACJ,cAAI,OAAO,UAAU,OAAW,QAAO,QAAQ,OAAO;AACtD,cAAI,OAAO,gBAAgB,OAAW,QAAO,cAAc,OAAO,eAAe;AACjF,cAAI,OAAO,WAAW,OAAW,QAAO,SAAS,OAAO,UAAU,OAAO;AACzE,cAAI,OAAO,kBAAkB,OAAW,QAAO,gBAAgB,OAAO,iBAAiB;AACvF,cAAI,OAAO,eAAe,UAAc,OAAO,oBAAoB,UAAa,mBAAoB;AAClG,mBAAO,aAAa,uBAAuB;AAAA,UAC7C;AACA,cAAI,OAAO,oBAAoB,OAAW,QAAO,kBAAkB,uBAAuB;AAE1F,cAAI,2BAA2B,OAAO,oBAAoB,UAAa,CAAC,OAAO,gBAAgB;AAC7F,mBAAO,gBAAgB;AAAA,UACzB,WAAW,sCAAsC,OAAO,oBAAoB,UAAa,CAAC,OAAO,gBAAgB;AAC/G,mBAAO,gBAAgB;AAAA,UACzB;AAEA,cAAI,OAAO,gBAAgB,OAAW,QAAO,cAAc,gBAAgB,OAAO,WAAW;AAC7F,cAAI,OAAO,kBAAkB,OAAW,QAAO,gBAAgB,OAAO,iBAAiB;AACvF,cAAI,OAAO,gBAAgB,OAAW,QAAO,cAAc,OAAO,eAAe;AACjF,cAAI,OAAO,oBAAoB,OAAW,QAAO,kBAAkB,OAAO,mBAAmB;AAC7F,cAAI,OAAO,gBAAgB,OAAW,QAAO,cAAc,OAAO,eAAe;AACjF,cAAI,OAAO,WAAW,OAAW,QAAO,SAAS,OAAO,UAAU;AAClE,cAAI,OAAO,mBAAmB,OAAW,QAAO,iBAAiB,OAAO,kBAAkB;AAC1F,cAAI,OAAO,iBAAiB,OAAW,QAAO,eAAe,OAAO,gBAAgB;AACpF,cAAI,OAAO,cAAc,OAAW,QAAO,YAAY,OAAO,aAAa;AAAA,QAC7E;AAAA,QACA,YAAY;AASV,gBAAM,GAAG,MAAM;AAAA,QACjB;AAAA,QACA,YAAY;AACV,gBAAM,WAAW;AACjB,cAAI,CAAC,SAAU;AACf,gBAAM,eACJ,OAAO,oBAAoB,UAC3B,OAAO,oBAAoB,QAC3B,OAAO,oBAAoB;AAC7B,cAAI,CAAC,aAAc;AACnB,gBAAM,0BAA0B,IAAI;AAAA,YAClC,MAAM;AAAA,YACN,YAAY,SAAS;AAAA,YACrB,SAAS,SAAS;AAAA,YAClB,YAAY,0BAA0B,SAAS;AAAA,YAC/C,YAAY,SAAS;AAAA,YACrB,sBAAsB;AAAA,UACxB,CAAC;AAAA,QACH;AAAA,QACA,MAAM,eAAe,IAAI,QAAQ,OAAO,WAAW,OAAO,qBAAqB;AAAA,QAC/E,MAAM,kBAAkB,IAAI,QAAQ,OAAO,UAAU;AAAA,MACvD;AAAA,IACF,CAAC;AAQD,UAAM,YAAY,OAAO;AACzB,UAAM,mBAAmB,cAAc,QAAQ,QAAQ,cAAc,UAAU,SAAS;AACxF,QAAI,mBAAmB,cAAc,qBAAqB,SAAS,qBAAqB,SAAS;AAC/F,YAAM,eAAe,qBAAqB,QAAQ,uBAAuB;AACzE,UAAI;AACF,cAAM,WAAW,IAAI,UAAU,QAAQ,UAAU;AACjD,YAAI,UAAU;AACZ,gBAAM,SAAS;AAAA,YACb;AAAA,YACA;AAAA,cACE,IAAI,OAAO;AAAA,cACX,UAAU,OAAO;AAAA,cACjB,gBAAgB,OAAO;AAAA,cACvB,aAAa,OAAO,eAAe;AAAA,cACnC,OAAO,OAAO;AAAA,cACd,aAAa,OAAO,eAAe;AAAA,cACnC,eAAe,OAAO,iBAAiB;AAAA,YACzC;AAAA,YACA;AAAA,cACE,YAAY;AAAA,cACZ,UAAU,OAAO;AAAA,cACjB,gBAAgB,OAAO;AAAA,YACzB;AAAA,UACF;AAAA,QACF;AAAA,MACF,SAAS,KAAK;AACZ,eAAO,KAAK,kCAAkC,EAAE,WAAW,gBAAgB,cAAc,IAAI,CAAC;AAAA,MAChG;AAAA,IACF;AAEA,WAAO,EAAE,QAAQ,OAAO,GAAG;AAAA,EAC7B;AAAA,EACA,cAAc,OAAO,QAAQ,QAAQ,QAAQ;AAC3C,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,WAAO,MAAM,iBAAiB,IAAI,OAAO,MAAM;AAAA,EACjD;AAAA,EACA,UAAU,OAAO,EAAE,QAAQ,WAAW,IAAI,MAAM;AAC9C,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,UAAM,SAAS,UAAU;AACzB,QAAI,CAAC,OAAQ,QAAO;AACpB,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,UAAM,gBAAgB,MAAM,iBAAiB,IAAI,OAAO,MAAM;AAC9D,WAAO;AAAA,MACL,aAAa,UAAU,gCAAgC,aAAa;AAAA,MACpE,cAAc;AAAA,MACd,YAAY,OAAO,KAAK;AAAA,MACxB,UAAU,OAAO,KAAK;AAAA,MACtB,gBAAgB,OAAO,KAAK;AAAA,MAC5B,gBAAgB;AAAA,MAChB,eAAe,iBAAiB;AAAA,MAChC,SAAS;AAAA,QACP,MAAM;AAAA,UACJ;AAAA,UACA,OAAO,iBAAiB;AAAA,QAC1B;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA,MAAM,OAAO,EAAE,UAAU,IAAI,MAAM;AACjC,UAAM,UAAU,mBAAoC,QAAQ;AAC5D,UAAM,SAAS,SAAS;AACxB,QAAI,CAAC,OAAQ;AACb,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,UAAM,mCAAmC,sBAAsB,MAAM,IAAI,IAAI;AAC7E,QAAI,OAAO,MAAM,sBAAsB,IAAI,cAAc,EAAE,IAAI,OAAO,KAAK,GAAG,CAAC;AAC/E,QAAI,CAAC,MAAM;AACT,aAAO,GAAG,OAAO,cAAc;AAAA,QAC7B,IAAI,OAAO,KAAK;AAAA,QAChB,gBAAgB,OAAO,KAAK;AAAA,QAC5B,UAAU,OAAO,KAAK;AAAA,QACtB,OAAO,OAAO,KAAK;AAAA,QACnB,aAAa,OAAO,KAAK;AAAA,QACzB,QAAQ,OAAO,KAAK;AAAA,QACpB,eAAe,OAAO,KAAK;AAAA,QAC3B,YAAY,OAAO,KAAK;AAAA,QACxB,iBAAiB,OAAO,KAAK;AAAA,QAC7B,aAAa,OAAO,KAAK;AAAA,QACzB,eAAe,OAAO,KAAK;AAAA,QAC3B,aAAa,OAAO,KAAK;AAAA,QACzB,iBAAiB,mBAAmB,OAAO,KAAK,iBAAiB,iBAAiB;AAAA,QAClF,aAAa,OAAO,KAAK;AAAA,QACzB,QAAQ,OAAO,KAAK;AAAA,QACpB,gBAAgB,OAAO,KAAK;AAAA,QAC5B,cAAc,OAAO,KAAK;AAAA,QAC1B,WAAW,OAAO,KAAK;AAAA,MACzB,CAAC;AACD,SAAG,QAAQ,IAAI;AAAA,IACjB;AACA,UAAM,wBAAwB,OAAO,KAAK,kBACtC,MAAM,0BAA0B,IAAI,OAAO,KAAK,iBAAiB,OAAO,KAAK,UAAU,OAAO,KAAK,cAAc,IACjH;AACJ,UAAM,qBAAqB,OAAO,KAAK,kBACnC,OAAO,YAAY,KAAK,CAAC,eAAe,WAAW,YAAY,OAAO,KAAK,eAAe,KAAK,OAC/F;AACJ,UAAM,+BACJ,OAAO,KAAK,qBAAqB,SAAS,OAAO,KAAK,mBAAmB,SACzE,CAAC,CAAC,OAAO,KAAK,mBACd,CAAC,EAAE,uBAAuB,cAAc,OAAO,KAAK,cAAc,oBAAoB,eACtF,CAAC,EAAE,uBAAuB,SAAS,OAAO,KAAK,iBAAiB,oBAAoB;AAEtF,UAAM,gBAAgB,IAAI;AAAA,MACxB,MAAM;AACJ,aAAK,QAAQ,OAAO,KAAK;AACzB,aAAK,cAAc,OAAO,KAAK;AAC/B,aAAK,SAAS,OAAO,KAAK;AAC1B,aAAK,gBAAgB,OAAO,KAAK;AACjC,aAAK,aAAa,OAAO,KAAK;AAC9B,aAAK,kBAAkB,OAAO,KAAK;AACnC,aAAK,cAAc,OAAO,KAAK;AAC/B,aAAK,gBAAgB,OAAO,KAAK;AACjC,aAAK,cAAc,OAAO,KAAK;AAC/B,aAAK,kBAAkB,mBAAmB,OAAO,KAAK,iBAAiB,iBAAiB;AACxF,aAAK,cAAc,OAAO,KAAK;AAC/B,aAAK,SAAS,OAAO,KAAK;AAC1B,aAAK,iBAAiB,OAAO,KAAK;AAClC,aAAK,eAAe,OAAO,KAAK;AAChC,aAAK,YAAY,OAAO,KAAK;AAAA,MAC/B;AAAA,MACA,YAAY;AAMV,cAAM,GAAG,MAAM;AAAA,MACjB;AAAA,MACA,YAAY;AACV,YAAI,CAAC,gCAAgC,CAAC,OAAO,KAAK,gBAAiB;AACnE,cAAM,aAAa,uBAAuB,cAAc,OAAO,KAAK,cAAc,oBAAoB;AACtG,cAAM,aAAa,uBAAuB,SAAS,OAAO,KAAK,iBAAiB,oBAAoB;AACpG,YAAI,CAAC,cAAc,CAAC,WAAY;AAChC,cAAM,0BAA0B,IAAI;AAAA,UAClC;AAAA,UACA;AAAA,UACA,SAAS,OAAO,KAAK;AAAA,UACrB;AAAA,UACA,YAAY,uBAAuB,SAAS,oBAAoB,cAAc;AAAA,UAC9E,sBAAsB;AAAA,QACxB,CAAC;AAAA,MACH;AAAA,MACA,MAAM,eAAe,IAAI,MAAM,OAAO,QAAQ,OAAO,qBAAqB;AAAA,MAC1E,MAAM,kBAAkB,IAAI,MAAM,OAAO,SAAS;AAAA,IACpD,GAAG,EAAE,aAAa,KAAK,CAAC;AAExB,UAAM,KAAM,IAAI,UAAU,QAAQ,YAAY;AAC9C,UAAM,wBAAwB;AAAA,MAC5B,YAAY;AAAA,MACZ,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,aAAa;AAAA,QACX,IAAI,KAAK;AAAA,QACT,gBAAgB,KAAK;AAAA,QACrB,UAAU,KAAK;AAAA,MACjB;AAAA,MACA,SAAS;AAAA,MACT,QAAQ;AAAA,IACV,CAAC;AAED,UAAM,cAAc,yBAAyB,OAAO,QAAQ,SAAS,OAAO,MAAM;AAClF,QAAI,OAAO,KAAK,WAAW,EAAE,QAAQ;AACnC,YAAM,qBAAqB;AAAA,QACzB,YAAY;AAAA,QACZ,UAAU;AAAA,QACV,UAAU,KAAK;AAAA,QACf,gBAAgB,KAAK;AAAA,QACrB,UAAU,KAAK;AAAA,QACf,QAAQ;AAAA,QACR,QAAQ;AAAA,MACV,CAAC;AAAA,IACH;AAAA,EACF;AACF;AAEA,MAAM,oBACJ;AAAA,EACE,IAAI;AAAA,EACJ,MAAM,QAAQ,OAAO,KAAK;AACxB,UAAM,KAAK,UAAU,OAAO,kBAAkB;AAC9C,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,UAAM,WAAW,MAAM,iBAAiB,IAAI,EAAE;AAC9C,WAAO,WAAW,EAAE,QAAQ,SAAS,IAAI,CAAC;AAAA,EAC5C;AAAA,EACA,MAAM,QAAQ,OAAO,KAAK;AACxB,UAAM,KAAK,UAAU,OAAO,kBAAkB;AAC9C,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,UAAM,OAAO,MAAM,sBAAsB,IAAI,cAAc,EAAE,IAAI,WAAW,KAAK,CAAC;AAClF,UAAM,SAAS,QAAQ;AACvB,QAAI,CAAC,OAAQ,OAAM,SAAS,gBAAgB;AAC5C,sBAAkB,KAAK,OAAO,QAAQ;AACtC,4BAAwB,KAAK,OAAO,cAAc;AAClD,UAAM,2BAA2B,IAAI,MAAM;AAC3C,UAAM,GAAG,aAAa,wBAAwB,EAAE,MAAM,OAAO,CAAC;AAC9D,UAAM,GAAG,aAAa,yBAAyB,EAAE,MAAM,OAAO,CAAC;AAC/D,OAAG,OAAO,MAAM;AAChB,UAAM,GAAG,MAAM;AAEf,UAAM,KAAM,IAAI,UAAU,QAAQ,YAAY;AAC9C,UAAM,oBAAoB;AAAA,MACxB,YAAY;AAAA,MACZ,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,aAAa;AAAA,QACX,IAAI,OAAO;AAAA,QACX,gBAAgB,OAAO;AAAA,QACvB,UAAU,OAAO;AAAA,MACnB;AAAA,MACA,SAAS;AAAA,MACT,QAAQ;AAAA,IACV,CAAC;AACD,WAAO,EAAE,QAAQ,OAAO,GAAG;AAAA,EAC7B;AAAA,EACA,UAAU,OAAO,EAAE,UAAU,MAAM;AACjC,UAAM,SAAS,UAAU;AACzB,QAAI,CAAC,OAAQ,QAAO;AACpB,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,WAAO;AAAA,MACL,aAAa,UAAU,gCAAgC,aAAa;AAAA,MACpE,cAAc;AAAA,MACd,YAAY,OAAO,KAAK;AAAA,MACxB,UAAU,OAAO,KAAK;AAAA,MACtB,gBAAgB,OAAO,KAAK;AAAA,MAC5B,gBAAgB;AAAA,MAChB,SAAS;AAAA,QACP,MAAM;AAAA,UACJ;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA,MAAM,OAAO,EAAE,UAAU,IAAI,MAAM;AACjC,UAAM,UAAU,mBAAoC,QAAQ;AAC5D,UAAM,SAAS,SAAS;AACxB,QAAI,CAAC,OAAQ;AACb,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,QAAI,OAAO,MAAM,sBAAsB,IAAI,cAAc,EAAE,IAAI,OAAO,KAAK,GAAG,CAAC;AAC/E,QAAI,CAAC,MAAM;AACT,aAAO,GAAG,OAAO,cAAc;AAAA,QAC7B,IAAI,OAAO,KAAK;AAAA,QAChB,gBAAgB,OAAO,KAAK;AAAA,QAC5B,UAAU,OAAO,KAAK;AAAA,QACtB,OAAO,OAAO,KAAK;AAAA,QACnB,aAAa,OAAO,KAAK;AAAA,QACzB,QAAQ,OAAO,KAAK;AAAA,QACpB,eAAe,OAAO,KAAK;AAAA,QAC3B,YAAY,OAAO,KAAK;AAAA,QACxB,iBAAiB,OAAO,KAAK;AAAA,QAC7B,aAAa,OAAO,KAAK;AAAA,QACzB,eAAe,OAAO,KAAK;AAAA,QAC3B,aAAa,OAAO,KAAK;AAAA,QACzB,iBAAiB,mBAAmB,OAAO,KAAK,iBAAiB,iBAAiB;AAAA,QAClF,aAAa,OAAO,KAAK;AAAA,QACzB,QAAQ,OAAO,KAAK;AAAA,QACpB,gBAAgB,OAAO,KAAK;AAAA,QAC5B,cAAc,OAAO,KAAK;AAAA,QAC1B,WAAW,OAAO,KAAK;AAAA,MACzB,CAAC;AACD,SAAG,QAAQ,IAAI;AAAA,IACjB;AACA,UAAM,gBAAgB,IAAI;AAAA,MACxB,MAAM,eAAe,IAAI,MAAM,OAAO,QAAQ,OAAO,qBAAqB;AAAA,MAC1E,MAAM,kBAAkB,IAAI,MAAM,OAAO,SAAS;AAAA,MAClD,MAAM,2BAA2B,IAAI,IAAI;AAAA,MACzC,MAAM,4BAA4B,IAAI,MAAM,OAAO,WAAW;AAAA,IAChE,GAAG,EAAE,aAAa,KAAK,CAAC;AAExB,UAAM,KAAM,IAAI,UAAU,QAAQ,YAAY;AAC9C,UAAM,wBAAwB;AAAA,MAC5B,YAAY;AAAA,MACZ,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,aAAa;AAAA,QACX,IAAI,KAAK;AAAA,QACT,gBAAgB,KAAK;AAAA,QACrB,UAAU,KAAK;AAAA,MACjB;AAAA,MACA,SAAS;AAAA,MACT,QAAQ;AAAA,IACV,CAAC;AAED,UAAM,cAAc,yBAAyB,OAAO,QAAQ,MAAS;AACrE,QAAI,OAAO,KAAK,WAAW,EAAE,QAAQ;AACnC,YAAM,qBAAqB;AAAA,QACzB,YAAY;AAAA,QACZ,UAAU;AAAA,QACV,UAAU,KAAK;AAAA,QACf,gBAAgB,KAAK;AAAA,QACrB,UAAU,KAAK;AAAA,QACf,QAAQ;AAAA,QACR,QAAQ;AAAA,MACV,CAAC;AAAA,IACH;AAAA,EACF;AACF;AAEF,gBAAgB,iBAAiB;AACjC,gBAAgB,iBAAiB;AACjC,gBAAgB,iBAAiB;",
   "names": []
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@open-mercato/core",
-  "version": "0.6.8-develop.6892.1.f179677788",
+  "version": "0.6.8-develop.6897.1.586171ad21",
   "license": "MIT",
   "type": "module",
   "main": "./dist/index.js",
@@ -244,7 +244,7 @@
     "leaflet": "^1.9.4",
     "leaflet.markercluster": "^1.5.3",
     "mammoth": "^1.9.0",
-    "pdfjs-dist": "^6.1.200",
+    "pdfjs-dist": "^6.2.108",
     "resend": "^6.18.1",
     "sanitize-html": "2.17.5",
     "semver": "^7.8.5",
@@ -254,16 +254,16 @@
     "zod": "^4.4.3"
   },
   "peerDependencies": {
-    "@open-mercato/ai-assistant": "0.6.8-develop.6892.1.f179677788",
-    "@open-mercato/shared": "0.6.8-develop.6892.1.f179677788",
-    "@open-mercato/ui": "0.6.8-develop.6892.1.f179677788",
+    "@open-mercato/ai-assistant": "0.6.8-develop.6897.1.586171ad21",
+    "@open-mercato/shared": "0.6.8-develop.6897.1.586171ad21",
+    "@open-mercato/ui": "0.6.8-develop.6897.1.586171ad21",
     "react": "^19.0.0",
     "react-dom": "^19.0.0"
   },
   "devDependencies": {
-    "@open-mercato/ai-assistant": "0.6.8-develop.6892.1.f179677788",
-    "@open-mercato/shared": "0.6.8-develop.6892.1.f179677788",
-    "@open-mercato/ui": "0.6.8-develop.6892.1.f179677788",
+    "@open-mercato/ai-assistant": "0.6.8-develop.6897.1.586171ad21",
+    "@open-mercato/shared": "0.6.8-develop.6897.1.586171ad21",
+    "@open-mercato/ui": "0.6.8-develop.6897.1.586171ad21",
     "@testing-library/dom": "^10.4.1",
     "@testing-library/jest-dom": "^7.0.0",
     "@testing-library/react": "^16.3.1",

package/src/modules/auth/api/users/route.ts

@@ -102,6 +102,25 @@ const errorResponseSchema = z.object({ error: z.string() })
 type CrudInput = Record<string, unknown>
 type UserListFilter = Record<string, unknown>
 
+// UserRole carries no tenant/organization columns of its own, so the caller's scope has to be
+// expressed as a predicate on the `user` relation — MikroORM compiles that into a database-side
+// join against `users` with the scope predicates in the WHERE clause, keeping the link lookup
+// bounded to the scope instead of every tenant holding the role.
+function buildRoleLinkFilter(
+  roleIdList: string[],
+  userScope: UserListFilter[],
+  candidateUserIds: Set<string> | null,
+): UserListFilter {
+  const scope = candidateUserIds
+    ? [...userScope, { id: { $in: Array.from(candidateUserIds) } }]
+    : userScope
+  return {
+    role: { $in: roleIdList },
+    deletedAt: null,
+    user: scope.length > 1 ? { $and: scope } : scope[0],
+  }
+}
+
 const routeMetadata = {
   GET: { requireAuth: true, requireFeatures: ['auth.users.list'] },
   POST: { requireAuth: true, requireFeatures: ['auth.users.create'] },
@@ -265,21 +284,27 @@ export async function GET(req: Request) {
   let idFilter: Set<string> | null = id ? new Set([id]) : null
   if (Array.isArray(roleIds) && roleIds.length > 0) {
     const uniqueRoleIds = Array.from(new Set(roleIds))
-    const linksForRoles = await em.find(UserRole, { role: { $in: uniqueRoleIds as any } } as any)
+    const linksForRoles = await em.find(
+      UserRole,
+      buildRoleLinkFilter(uniqueRoleIds, filters, idFilter) as any,
+    )
     const roleUserIds = new Set<string>()
     for (const link of linksForRoles) {
       const uid = String((link as any).user?.id || (link as any).user || '')
       if (uid) roleUserIds.add(uid)
     }
-    if (roleUserIds.size === 0) return NextResponse.json({ items: [], total: 0, totalPages: 1 })
+    if (roleUserIds.size === 0) return NextResponse.json({ items: [], total: 0, totalPages: 1, isSuperAdmin })
     if (idFilter) {
+      // buildRoleLinkFilter already constrains the lookup to `user.id IN idFilter`, so this
+      // intersection is enforced database-side; the loop stays as an application-level backstop
+      // so the `?id=` + `?roleId=` contract does not depend on that predicate alone.
       for (const uid of Array.from(idFilter)) {
         if (!roleUserIds.has(uid)) idFilter.delete(uid)
       }
     } else {
       idFilter = roleUserIds
     }
-    if (!idFilter || idFilter.size === 0) return NextResponse.json({ items: [], total: 0, totalPages: 1 })
+    if (!idFilter || idFilter.size === 0) return NextResponse.json({ items: [], total: 0, totalPages: 1, isSuperAdmin })
   }
   const trimmedSearch = typeof search === 'string' ? search.trim() : ''
   if (trimmedSearch) {
@@ -328,7 +353,7 @@ export async function GET(req: Request) {
     if (matchingRoleIds.length) {
       const roleSearchLinks = await em.find(
         UserRole,
-        { role: { $in: matchingRoleIds as any } } as any,
+        buildRoleLinkFilter(matchingRoleIds, filters, idFilter) as any,
       )
       const matchingRoleUserIds = Array.from(new Set(
         roleSearchLinks
@@ -362,7 +387,7 @@ export async function GET(req: Request) {
     ? await findWithDecryption(
         em,
         UserRole,
-        { user: { $in: userIds as any } } as any,
+        { user: { $in: userIds as any }, deletedAt: null } as any,
         { populate: ['role'] },
         {
           tenantId: effectiveTenantId ?? auth.tenantId ?? null,

package/src/modules/communication_channels/api/get/channels/[id]/health/route.ts

@@ -5,6 +5,8 @@ import { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'
 import { createRequestContainer } from '@open-mercato/shared/lib/di/container'
 import type { EntityManager } from '@mikro-orm/postgresql'
 import { findOneWithDecryption, findWithDecryption } from '@open-mercato/shared/lib/encryption/find'
+import { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'
+import { resolveOrganizationScopeFilter } from '@open-mercato/core/modules/directory/utils/organizationScopeFilter'
 import { CommunicationChannel, ExternalConversation, MessageChannelLink } from '../../../../../data/entities'
 import { ChannelAccessDeniedError, assertCanAccessChannel } from '../../../../../lib/access-control'
 
@@ -54,14 +56,18 @@ export async function GET(req: Request, context: RouteContext): Promise<Response
   const container = await createRequestContainer()
   const em = (container.resolve('em') as EntityManager).fork()
 
+  // Same selected-organization scoping as the list and detail routes (#5012).
+  const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })
+  const orgFilter = resolveOrganizationScopeFilter(scope, auth)
+
   const dscope = {
     tenantId: auth.tenantId as string,
-    organizationId: (auth as { orgId?: string | null }).orgId ?? null,
+    organizationId: orgFilter.rbacOrganizationId,
   }
   const channel = await findOneWithDecryption(
     em,
     CommunicationChannel,
-    { id, tenantId: auth.tenantId, organizationId: dscope.organizationId, deletedAt: null },
+    { id, tenantId: auth.tenantId, ...orgFilter.where, deletedAt: null },
     undefined,
     dscope,
   )

package/src/modules/communication_channels/api/get/channels/[id]/route.ts

@@ -4,6 +4,8 @@ import { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'
 import { createRequestContainer } from '@open-mercato/shared/lib/di/container'
 import type { EntityManager } from '@mikro-orm/postgresql'
 import { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'
+import { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'
+import { resolveOrganizationScopeFilter } from '@open-mercato/core/modules/directory/utils/organizationScopeFilter'
 import { CommunicationChannel } from '../../../../data/entities'
 import { ChannelAccessDeniedError, assertCanAccessChannel } from '../../../../lib/access-control'
 
@@ -37,17 +39,22 @@ export async function GET(req: Request, context: RouteContext): Promise<Response
   const container = await createRequestContainer()
   const em = (container.resolve('em') as EntityManager).fork()
 
+  // Same selected-organization scoping as the list route (#5012) so a channel
+  // the list shows under the switched organization stays openable here.
+  const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })
+  const orgFilter = resolveOrganizationScopeFilter(scope, auth)
+
   const channel = await findOneWithDecryption(
     em,
     CommunicationChannel,
     {
       id,
       tenantId: auth.tenantId,
-      organizationId: (auth as { orgId?: string | null }).orgId ?? null,
+      ...orgFilter.where,
       deletedAt: null,
     },
     undefined,
-    { tenantId: auth.tenantId as string, organizationId: (auth as { orgId?: string | null }).orgId ?? null },
+    { tenantId: auth.tenantId as string, organizationId: orgFilter.rbacOrganizationId },
   )
   if (!channel) {
     return NextResponse.json({ error: 'Channel not found' }, { status: 404 })
@@ -60,7 +67,7 @@ export async function GET(req: Request, context: RouteContext): Promise<Response
     const rbac = container.resolve('rbacService') as RbacServiceLike
     const acl = await rbac.loadAcl(auth.sub as string, {
       tenantId: auth.tenantId as string,
-      organizationId: (auth as { orgId?: string | null }).orgId ?? null,
+      organizationId: orgFilter.rbacOrganizationId,
     })
     userFeatures = acl?.isSuperAdmin
       ? ['*']

package/src/modules/communication_channels/api/get/channels/route.ts

@@ -4,6 +4,8 @@ import { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'
 import { createRequestContainer } from '@open-mercato/shared/lib/di/container'
 import type { EntityManager } from '@mikro-orm/postgresql'
 import { findAndCountWithDecryption } from '@open-mercato/shared/lib/encryption/find'
+import { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'
+import { resolveOrganizationScopeFilter } from '@open-mercato/core/modules/directory/utils/organizationScopeFilter'
 import { CommunicationChannel } from '../../../data/entities'
 
 export const metadata = {
@@ -41,6 +43,13 @@ export async function GET(req: Request): Promise<Response> {
   const container = await createRequestContainer()
   const em = (container.resolve('em') as EntityManager).fork()
 
+  // Organization scoping follows the caller's *selected* organization (the
+  // `om_selected_org` cookie the top-bar switcher writes), not the org baked
+  // into the session token — `auth.orgId` only tracks the switcher for
+  // super-admins, so filtering on it made the list ignore every switch (#5012).
+  const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })
+  const orgFilter = resolveOrganizationScopeFilter(scope, auth)
+
   // Personal mailbox privacy (v1: strict owner-only). The admin Channels page
   // lists ONLY shared / tenant-wide channels (WhatsApp Business, shared inboxes,
   // Slack workspaces) — rows where `user_id IS NULL`. Per-user email mailboxes
@@ -49,7 +58,7 @@ export async function GET(req: Request): Promise<Response> {
   // one — admins included — can see another user's connected personal account.
   const where: Record<string, unknown> = {
     tenantId: auth.tenantId,
-    organizationId: (auth as { orgId?: string | null }).orgId ?? null,
+    ...orgFilter.where,
     deletedAt: null,
     userId: null,
   }
@@ -66,7 +75,7 @@ export async function GET(req: Request): Promise<Response> {
       offset: (page - 1) * pageSize,
       orderBy: { createdAt: 'desc' },
     },
-    { tenantId: auth.tenantId as string, organizationId: (auth as { orgId?: string | null }).orgId ?? null },
+    { tenantId: auth.tenantId as string, organizationId: orgFilter.rbacOrganizationId },
   )
 
   return NextResponse.json({

package/src/modules/customers/commands/deals.ts

@@ -793,7 +793,11 @@ const updateDealCommand: CommandHandler<DealUpdateInput, { dealId: string }> = {
     })
 
     // Emit a lifecycle event for deal won/lost status changes; the notifications
-    // subscriber translates these into recipient notifications.
+    // subscriber translates these into recipient notifications. Tenant/organization
+    // scope MUST travel in the emit options, not only in the payload: both delivery
+    // paths build the subscriber context from `options` alone, so wildcard
+    // subscribers (workflow event triggers, business-rules triggers) drop a
+    // null-scoped event before trigger matching.
     const newStatus = record.status
     const normalizedStatus = newStatus === 'win' ? 'won' : newStatus === 'loose' ? 'lost' : newStatus
     if (previousStatus !== newStatus && (normalizedStatus === 'won' || normalizedStatus === 'lost')) {
@@ -812,7 +816,11 @@ const updateDealCommand: CommandHandler<DealUpdateInput, { dealId: string }> = {
               valueAmount: record.valueAmount ?? null,
               valueCurrency: record.valueCurrency ?? null,
             },
-            { persistent: true },
+            {
+              persistent: true,
+              tenantId: record.tenantId,
+              organizationId: record.organizationId,
+            },
           )
         }
       } catch (err) {