@open-mercato/core 0.6.8-develop.6998.1.d2bc46c56c → 0.6.8-develop.7000.1.0ae682bad1

package/dist/modules/attachments/lib/scoped-upload-service.js

@@ -0,0 +1,202 @@
+import { randomUUID } from "node:crypto";
+import { emitCrudSideEffects } from "@open-mercato/shared/lib/commands/helpers";
+import { createLogger } from "@open-mercato/shared/lib/logger";
+import { Attachment, AttachmentPartition } from "../data/entities.js";
+import { attachmentCrudEvents, attachmentCrudIndexer } from "./crud.js";
+import { buildAttachmentFileUrl } from "./imageUrls.js";
+import { ensureDefaultPartitions, resolveDefaultPartitionCode } from "./partitions.js";
+import { extractAttachmentContent } from "./textExtraction.js";
+import { requestOcrProcessing } from "./ocrQueue.js";
+import { OcrService, shouldUseLlmOcr } from "./ocrService.js";
+import { assertAttachmentScopeInvariant } from "./access.js";
+import {
+  mergeAttachmentMetadata,
+  upsertAssignment
+} from "./metadata.js";
+import {
+  detectAttachmentMimeType,
+  hasDangerousExecutableExtension,
+  isActiveContentAttachment,
+  sanitizeUploadedFileName
+} from "./security.js";
+import { resolveAttachmentMaxBytes } from "./upload-limits.js";
+const logger = createLogger("attachments");
+class ScopedAttachmentUploadError extends Error {
+  constructor(code, status) {
+    super(code);
+    this.code = code;
+    this.status = status;
+    this.name = "ScopedAttachmentUploadError";
+  }
+}
+class ScopedAttachmentUploadService {
+  constructor(deps) {
+    this.deps = deps;
+  }
+  async upload(input) {
+    const safeName = sanitizeUploadedFileName(input.fileName);
+    if (hasDangerousExecutableExtension(safeName)) {
+      throw new ScopedAttachmentUploadError("dangerous_executable", 400);
+    }
+    if (input.buffer.length > (input.maxBytes ?? resolveAttachmentMaxBytes())) {
+      throw new ScopedAttachmentUploadError("max_upload_size", 413);
+    }
+    const mimeType = detectAttachmentMimeType(input.buffer, safeName, input.declaredMimeType ?? "");
+    if (isActiveContentAttachment(input.buffer, safeName, mimeType)) {
+      throw new ScopedAttachmentUploadError("active_content", 400);
+    }
+    const { em, storageDriverFactory, attachmentQuotaService, attachmentQuotaRecoveryScheduler } = this.deps;
+    await ensureDefaultPartitions(em);
+    const partitionCode = input.partitionCode ?? resolveDefaultPartitionCode(input.entityId);
+    const partition = await em.findOne(AttachmentPartition, {
+      code: partitionCode,
+      $or: [
+        { tenantId: null, organizationId: null },
+        { tenantId: input.tenantId, organizationId: input.organizationId }
+      ]
+    });
+    if (!partition) throw new ScopedAttachmentUploadError("partition_unavailable", 400);
+    const driver = await storageDriverFactory.resolveForPartition(partition.code, {
+      tenantId: input.tenantId,
+      organizationId: input.organizationId
+    });
+    const preparedStoragePath = driver.prepareStoragePath?.({
+      partitionCode: partition.code,
+      orgId: input.organizationId,
+      tenantId: input.tenantId,
+      fileName: safeName
+    });
+    if (!preparedStoragePath) {
+      throw new ScopedAttachmentUploadError("quota_recovery_unsupported", 500);
+    }
+    let reservation = null;
+    try {
+      reservation = await attachmentQuotaService.reserve({
+        tenantId: input.tenantId,
+        organizationId: input.organizationId,
+        bytes: input.buffer.length,
+        source: "attachment",
+        storageDriver: driver.key,
+        storagePath: preparedStoragePath,
+        partitionCode: partition.code
+      });
+      await attachmentQuotaRecoveryScheduler({
+        reservationId: reservation.id,
+        tenantId: input.tenantId,
+        organizationId: input.organizationId
+      }, Math.max(1e3, reservation.expiresAt.getTime() - Date.now()));
+      await attachmentQuotaService.beginStorage(reservation.id, reservation.leaseToken);
+    } catch (error) {
+      if (reservation) {
+        await attachmentQuotaService.release(reservation.id, reservation.leaseToken).catch(() => void 0);
+      }
+      const code = error?.code;
+      if (code === "quota_exceeded") throw new ScopedAttachmentUploadError("quota_exceeded", 413);
+      if (code === "quota_target_exists") throw new ScopedAttachmentUploadError("quota_target_exists", 409);
+      throw new ScopedAttachmentUploadError("quota_unavailable", 500);
+    }
+    if (!reservation) throw new ScopedAttachmentUploadError("quota_unavailable", 500);
+    let storedPath = preparedStoragePath;
+    try {
+      const stored = await driver.store({
+        partitionCode: partition.code,
+        orgId: input.organizationId,
+        tenantId: input.tenantId,
+        fileName: safeName,
+        buffer: input.buffer,
+        storagePath: preparedStoragePath
+      });
+      storedPath = stored.storagePath;
+      await attachmentQuotaService.markStored(reservation.id, reservation.leaseToken);
+    } catch (error) {
+      await this.compensateStorage(driver, partition.code, storedPath, reservation);
+      logger.error("Scoped attachment storage failed", { err: error });
+      throw new ScopedAttachmentUploadError("storage_failed", 500);
+    }
+    let extractedContent = null;
+    const wantsLlmOcr = partition.requiresOcr && shouldUseLlmOcr(mimeType, safeName);
+    const ocrService = wantsLlmOcr ? new OcrService() : null;
+    const useLlmOcr = Boolean(wantsLlmOcr && ocrService?.available);
+    if (partition.requiresOcr && !useLlmOcr) {
+      try {
+        const { filePath, cleanup } = await driver.toLocalPath(partition.code, storedPath);
+        try {
+          extractedContent = await extractAttachmentContent({ filePath, mimeType });
+        } finally {
+          await cleanup().catch(() => void 0);
+        }
+      } catch (error) {
+        logger.error("Scoped attachment text extraction failed", { err: error });
+      }
+    }
+    let assignments = input.assignments?.slice() ?? [];
+    assignments = upsertAssignment(assignments, { type: input.entityId, id: input.recordId });
+    const metadata = mergeAttachmentMetadata(null, {
+      assignments,
+      tags: input.tags ?? []
+    });
+    const attachmentId = randomUUID();
+    let attachment;
+    try {
+      await em.transactional(async (tx) => {
+        attachment = tx.create(Attachment, {
+          id: attachmentId,
+          entityId: input.entityId,
+          recordId: input.recordId,
+          organizationId: input.organizationId,
+          tenantId: input.tenantId,
+          fileName: safeName,
+          mimeType,
+          fileSize: input.buffer.length,
+          partitionCode: partition.code,
+          storageDriver: partition.storageDriver || "local",
+          storagePath: storedPath,
+          url: buildAttachmentFileUrl(attachmentId),
+          content: extractedContent,
+          storageMetadata: metadata
+        });
+        assertAttachmentScopeInvariant({ tenantId: attachment.tenantId, organizationId: attachment.organizationId });
+        await tx.persist(attachment).flush();
+        await attachmentQuotaService.completeAttachment(reservation.id, reservation.leaseToken, tx);
+      });
+    } catch (error) {
+      await this.compensateStorage(driver, partition.code, storedPath, reservation);
+      logger.error("Scoped attachment persistence failed", { err: error });
+      throw new ScopedAttachmentUploadError("persistence_failed", 500);
+    }
+    if (useLlmOcr) {
+      requestOcrProcessing(em, attachment, driver, storedPath).catch((error) => {
+        logger.error("Scoped attachment OCR scheduling failed", { err: error });
+      });
+    }
+    if (this.deps.dataEngine) {
+      await emitCrudSideEffects({
+        dataEngine: this.deps.dataEngine,
+        action: "created",
+        entity: attachment,
+        identifiers: {
+          id: attachment.id,
+          organizationId: attachment.organizationId ?? null,
+          tenantId: attachment.tenantId ?? null
+        },
+        events: attachmentCrudEvents,
+        indexer: attachmentCrudIndexer
+      });
+      await this.deps.dataEngine.flushOrmEntityChanges();
+    }
+    return attachment;
+  }
+  async compensateStorage(driver, partitionCode, storagePath, reservation) {
+    try {
+      await (driver.deleteStrict?.(partitionCode, storagePath) ?? driver.delete(partitionCode, storagePath));
+      await this.deps.attachmentQuotaService.release(reservation.id, reservation.leaseToken);
+    } catch (error) {
+      logger.error("Scoped attachment compensation failed", { err: error });
+    }
+  }
+}
+export {
+  ScopedAttachmentUploadError,
+  ScopedAttachmentUploadService
+};
+//# sourceMappingURL=scoped-upload-service.js.map

package/dist/modules/attachments/lib/scoped-upload-service.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/attachments/lib/scoped-upload-service.ts"],
+  "sourcesContent": ["import { randomUUID } from 'node:crypto'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport type { DataEngine } from '@open-mercato/shared/lib/data/engine'\nimport { emitCrudSideEffects } from '@open-mercato/shared/lib/commands/helpers'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport { Attachment, AttachmentPartition } from '../data/entities'\nimport { attachmentCrudEvents, attachmentCrudIndexer } from './crud'\nimport type { StorageDriverFactory } from './drivers'\nimport { buildAttachmentFileUrl } from './imageUrls'\nimport { ensureDefaultPartitions, resolveDefaultPartitionCode } from './partitions'\nimport { extractAttachmentContent } from './textExtraction'\nimport { requestOcrProcessing } from './ocrQueue'\nimport { OcrService, shouldUseLlmOcr } from './ocrService'\nimport { assertAttachmentScopeInvariant } from './access'\nimport {\n  mergeAttachmentMetadata,\n  upsertAssignment,\n  type AttachmentAssignment,\n} from './metadata'\nimport {\n  detectAttachmentMimeType,\n  hasDangerousExecutableExtension,\n  isActiveContentAttachment,\n  sanitizeUploadedFileName,\n} from './security'\nimport { resolveAttachmentMaxBytes } from './upload-limits'\nimport type { AttachmentQuotaService } from './quota-service'\n\nconst logger = createLogger('attachments')\n\nexport type ScopedAttachmentUploadErrorCode =\n  | 'dangerous_executable'\n  | 'max_upload_size'\n  | 'active_content'\n  | 'partition_unavailable'\n  | 'quota_exceeded'\n  | 'quota_target_exists'\n  | 'quota_unavailable'\n  | 'quota_recovery_unsupported'\n  | 'storage_failed'\n  | 'persistence_failed'\n\nexport class ScopedAttachmentUploadError extends Error {\n  constructor(\n    public readonly code: ScopedAttachmentUploadErrorCode,\n    public readonly status: number,\n  ) {\n    super(code)\n    this.name = 'ScopedAttachmentUploadError'\n  }\n}\n\nexport type ScopedAttachmentUploadInput = {\n  tenantId: string\n  organizationId: string\n  entityId: string\n  recordId: string\n  fileName: string\n  declaredMimeType?: string | null\n  buffer: Buffer\n  tags?: string[]\n  assignments?: AttachmentAssignment[]\n  partitionCode?: string | null\n  maxBytes?: number\n}\n\ntype QuotaRecoveryScheduler = (\n  payload: { reservationId: string; tenantId: string; organizationId: string },\n  delayMs: number,\n) => Promise<void>\n\nexport class ScopedAttachmentUploadService {\n  constructor(private readonly deps: {\n    em: EntityManager\n    dataEngine?: DataEngine | null\n    storageDriverFactory: StorageDriverFactory\n    attachmentQuotaService: AttachmentQuotaService\n    attachmentQuotaRecoveryScheduler: QuotaRecoveryScheduler\n  }) {}\n\n  async upload(input: ScopedAttachmentUploadInput): Promise<Attachment> {\n    const safeName = sanitizeUploadedFileName(input.fileName)\n    if (hasDangerousExecutableExtension(safeName)) {\n      throw new ScopedAttachmentUploadError('dangerous_executable', 400)\n    }\n    if (input.buffer.length > (input.maxBytes ?? resolveAttachmentMaxBytes())) {\n      throw new ScopedAttachmentUploadError('max_upload_size', 413)\n    }\n    const mimeType = detectAttachmentMimeType(input.buffer, safeName, input.declaredMimeType ?? '')\n    if (isActiveContentAttachment(input.buffer, safeName, mimeType)) {\n      throw new ScopedAttachmentUploadError('active_content', 400)\n    }\n\n    const { em, storageDriverFactory, attachmentQuotaService, attachmentQuotaRecoveryScheduler } = this.deps\n    await ensureDefaultPartitions(em)\n    const partitionCode = input.partitionCode ?? resolveDefaultPartitionCode(input.entityId)\n    const partition = await em.findOne(AttachmentPartition, {\n      code: partitionCode,\n      $or: [\n        { tenantId: null, organizationId: null },\n        { tenantId: input.tenantId, organizationId: input.organizationId },\n      ],\n    })\n    if (!partition) throw new ScopedAttachmentUploadError('partition_unavailable', 400)\n\n    const driver = await storageDriverFactory.resolveForPartition(partition.code, {\n      tenantId: input.tenantId,\n      organizationId: input.organizationId,\n    })\n    const preparedStoragePath = driver.prepareStoragePath?.({\n      partitionCode: partition.code,\n      orgId: input.organizationId,\n      tenantId: input.tenantId,\n      fileName: safeName,\n    })\n    if (!preparedStoragePath) {\n      throw new ScopedAttachmentUploadError('quota_recovery_unsupported', 500)\n    }\n\n    let reservation: { id: string; leaseToken: string; expiresAt: Date } | null = null\n    try {\n      reservation = await attachmentQuotaService.reserve({\n        tenantId: input.tenantId,\n        organizationId: input.organizationId,\n        bytes: input.buffer.length,\n        source: 'attachment',\n        storageDriver: driver.key,\n        storagePath: preparedStoragePath,\n        partitionCode: partition.code,\n      })\n      await attachmentQuotaRecoveryScheduler({\n        reservationId: reservation.id,\n        tenantId: input.tenantId,\n        organizationId: input.organizationId,\n      }, Math.max(1_000, reservation.expiresAt.getTime() - Date.now()))\n      await attachmentQuotaService.beginStorage(reservation.id, reservation.leaseToken)\n    } catch (error) {\n      if (reservation) {\n        await attachmentQuotaService.release(reservation.id, reservation.leaseToken).catch(() => undefined)\n      }\n      const code = (error as { code?: unknown })?.code\n      if (code === 'quota_exceeded') throw new ScopedAttachmentUploadError('quota_exceeded', 413)\n      if (code === 'quota_target_exists') throw new ScopedAttachmentUploadError('quota_target_exists', 409)\n      throw new ScopedAttachmentUploadError('quota_unavailable', 500)\n    }\n\n    if (!reservation) throw new ScopedAttachmentUploadError('quota_unavailable', 500)\n\n    let storedPath = preparedStoragePath\n    try {\n      const stored = await driver.store({\n        partitionCode: partition.code,\n        orgId: input.organizationId,\n        tenantId: input.tenantId,\n        fileName: safeName,\n        buffer: input.buffer,\n        storagePath: preparedStoragePath,\n      })\n      storedPath = stored.storagePath\n      await attachmentQuotaService.markStored(reservation.id, reservation.leaseToken)\n    } catch (error) {\n      await this.compensateStorage(driver, partition.code, storedPath, reservation)\n      logger.error('Scoped attachment storage failed', { err: error })\n      throw new ScopedAttachmentUploadError('storage_failed', 500)\n    }\n\n    let extractedContent: string | null = null\n    const wantsLlmOcr = partition.requiresOcr && shouldUseLlmOcr(mimeType, safeName)\n    const ocrService = wantsLlmOcr ? new OcrService() : null\n    const useLlmOcr = Boolean(wantsLlmOcr && ocrService?.available)\n    if (partition.requiresOcr && !useLlmOcr) {\n      try {\n        const { filePath, cleanup } = await driver.toLocalPath(partition.code, storedPath)\n        try {\n          extractedContent = await extractAttachmentContent({ filePath, mimeType })\n        } finally {\n          await cleanup().catch(() => undefined)\n        }\n      } catch (error) {\n        logger.error('Scoped attachment text extraction failed', { err: error })\n      }\n    }\n\n    let assignments = input.assignments?.slice() ?? []\n    assignments = upsertAssignment(assignments, { type: input.entityId, id: input.recordId })\n    const metadata = mergeAttachmentMetadata(null, {\n      assignments,\n      tags: input.tags ?? [],\n    })\n    const attachmentId = randomUUID()\n    let attachment!: Attachment\n\n    try {\n      await em.transactional(async (tx) => {\n        attachment = tx.create(Attachment, {\n          id: attachmentId,\n          entityId: input.entityId,\n          recordId: input.recordId,\n          organizationId: input.organizationId,\n          tenantId: input.tenantId,\n          fileName: safeName,\n          mimeType,\n          fileSize: input.buffer.length,\n          partitionCode: partition.code,\n          storageDriver: partition.storageDriver || 'local',\n          storagePath: storedPath,\n          url: buildAttachmentFileUrl(attachmentId),\n          content: extractedContent,\n          storageMetadata: metadata,\n        })\n        assertAttachmentScopeInvariant({ tenantId: attachment.tenantId, organizationId: attachment.organizationId })\n        await tx.persist(attachment).flush()\n        await attachmentQuotaService.completeAttachment(reservation.id, reservation.leaseToken, tx)\n      })\n    } catch (error) {\n      await this.compensateStorage(driver, partition.code, storedPath, reservation)\n      logger.error('Scoped attachment persistence failed', { err: error })\n      throw new ScopedAttachmentUploadError('persistence_failed', 500)\n    }\n\n    if (useLlmOcr) {\n      requestOcrProcessing(em, attachment, driver, storedPath).catch((error) => {\n        logger.error('Scoped attachment OCR scheduling failed', { err: error })\n      })\n    }\n    if (this.deps.dataEngine) {\n      await emitCrudSideEffects({\n        dataEngine: this.deps.dataEngine,\n        action: 'created',\n        entity: attachment,\n        identifiers: {\n          id: attachment.id,\n          organizationId: attachment.organizationId ?? null,\n          tenantId: attachment.tenantId ?? null,\n        },\n        events: attachmentCrudEvents,\n        indexer: attachmentCrudIndexer,\n      })\n      await this.deps.dataEngine.flushOrmEntityChanges()\n    }\n    return attachment\n  }\n\n  private async compensateStorage(\n    driver: Awaited<ReturnType<StorageDriverFactory['resolveForPartition']>>,\n    partitionCode: string,\n    storagePath: string,\n    reservation: { id: string; leaseToken: string },\n  ): Promise<void> {\n    try {\n      await (driver.deleteStrict?.(partitionCode, storagePath) ?? driver.delete(partitionCode, storagePath))\n      await this.deps.attachmentQuotaService.release(reservation.id, reservation.leaseToken)\n    } catch (error) {\n      logger.error('Scoped attachment compensation failed', { err: error })\n    }\n  }\n}\n"],
+  "mappings": "AAAA,SAAS,kBAAkB;AAG3B,SAAS,2BAA2B;AACpC,SAAS,oBAAoB;AAC7B,SAAS,YAAY,2BAA2B;AAChD,SAAS,sBAAsB,6BAA6B;AAE5D,SAAS,8BAA8B;AACvC,SAAS,yBAAyB,mCAAmC;AACrE,SAAS,gCAAgC;AACzC,SAAS,4BAA4B;AACrC,SAAS,YAAY,uBAAuB;AAC5C,SAAS,sCAAsC;AAC/C;AAAA,EACE;AAAA,EACA;AAAA,OAEK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,iCAAiC;AAG1C,MAAM,SAAS,aAAa,aAAa;AAclC,MAAM,oCAAoC,MAAM;AAAA,EACrD,YACkB,MACA,QAChB;AACA,UAAM,IAAI;AAHM;AACA;AAGhB,SAAK,OAAO;AAAA,EACd;AACF;AAqBO,MAAM,8BAA8B;AAAA,EACzC,YAA6B,MAM1B;AAN0B;AAAA,EAMzB;AAAA,EAEJ,MAAM,OAAO,OAAyD;AACpE,UAAM,WAAW,yBAAyB,MAAM,QAAQ;AACxD,QAAI,gCAAgC,QAAQ,GAAG;AAC7C,YAAM,IAAI,4BAA4B,wBAAwB,GAAG;AAAA,IACnE;AACA,QAAI,MAAM,OAAO,UAAU,MAAM,YAAY,0BAA0B,IAAI;AACzE,YAAM,IAAI,4BAA4B,mBAAmB,GAAG;AAAA,IAC9D;AACA,UAAM,WAAW,yBAAyB,MAAM,QAAQ,UAAU,MAAM,oBAAoB,EAAE;AAC9F,QAAI,0BAA0B,MAAM,QAAQ,UAAU,QAAQ,GAAG;AAC/D,YAAM,IAAI,4BAA4B,kBAAkB,GAAG;AAAA,IAC7D;AAEA,UAAM,EAAE,IAAI,sBAAsB,wBAAwB,iCAAiC,IAAI,KAAK;AACpG,UAAM,wBAAwB,EAAE;AAChC,UAAM,gBAAgB,MAAM,iBAAiB,4BAA4B,MAAM,QAAQ;AACvF,UAAM,YAAY,MAAM,GAAG,QAAQ,qBAAqB;AAAA,MACtD,MAAM;AAAA,MACN,KAAK;AAAA,QACH,EAAE,UAAU,MAAM,gBAAgB,KAAK;AAAA,QACvC,EAAE,UAAU,MAAM,UAAU,gBAAgB,MAAM,eAAe;AAAA,MACnE;AAAA,IACF,CAAC;AACD,QAAI,CAAC,UAAW,OAAM,IAAI,4BAA4B,yBAAyB,GAAG;AAElF,UAAM,SAAS,MAAM,qBAAqB,oBAAoB,UAAU,MAAM;AAAA,MAC5E,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM;AAAA,IACxB,CAAC;AACD,UAAM,sBAAsB,OAAO,qBAAqB;AAAA,MACtD,eAAe,UAAU;AAAA,MACzB,OAAO,MAAM;AAAA,MACb,UAAU,MAAM;AAAA,MAChB,UAAU;AAAA,IACZ,CAAC;AACD,QAAI,CAAC,qBAAqB;AACxB,YAAM,IAAI,4BAA4B,8BAA8B,GAAG;AAAA,IACzE;AAEA,QAAI,cAA0E;AAC9E,QAAI;AACF,oBAAc,MAAM,uBAAuB,QAAQ;AAAA,QACjD,UAAU,MAAM;AAAA,QAChB,gBAAgB,MAAM;AAAA,QACtB,OAAO,MAAM,OAAO;AAAA,QACpB,QAAQ;AAAA,QACR,eAAe,OAAO;AAAA,QACtB,aAAa;AAAA,QACb,eAAe,UAAU;AAAA,MAC3B,CAAC;AACD,YAAM,iCAAiC;AAAA,QACrC,eAAe,YAAY;AAAA,QAC3B,UAAU,MAAM;AAAA,QAChB,gBAAgB,MAAM;AAAA,MACxB,GAAG,KAAK,IAAI,KAAO,YAAY,UAAU,QAAQ,IAAI,KAAK,IAAI,CAAC,CAAC;AAChE,YAAM,uBAAuB,aAAa,YAAY,IAAI,YAAY,UAAU;AAAA,IAClF,SAAS,OAAO;AACd,UAAI,aAAa;AACf,cAAM,uBAAuB,QAAQ,YAAY,IAAI,YAAY,UAAU,EAAE,MAAM,MAAM,MAAS;AAAA,MACpG;AACA,YAAM,OAAQ,OAA8B;AAC5C,UAAI,SAAS,iBAAkB,OAAM,IAAI,4BAA4B,kBAAkB,GAAG;AAC1F,UAAI,SAAS,sBAAuB,OAAM,IAAI,4BAA4B,uBAAuB,GAAG;AACpG,YAAM,IAAI,4BAA4B,qBAAqB,GAAG;AAAA,IAChE;AAEA,QAAI,CAAC,YAAa,OAAM,IAAI,4BAA4B,qBAAqB,GAAG;AAEhF,QAAI,aAAa;AACjB,QAAI;AACF,YAAM,SAAS,MAAM,OAAO,MAAM;AAAA,QAChC,eAAe,UAAU;AAAA,QACzB,OAAO,MAAM;AAAA,QACb,UAAU,MAAM;AAAA,QAChB,UAAU;AAAA,QACV,QAAQ,MAAM;AAAA,QACd,aAAa;AAAA,MACf,CAAC;AACD,mBAAa,OAAO;AACpB,YAAM,uBAAuB,WAAW,YAAY,IAAI,YAAY,UAAU;AAAA,IAChF,SAAS,OAAO;AACd,YAAM,KAAK,kBAAkB,QAAQ,UAAU,MAAM,YAAY,WAAW;AAC5E,aAAO,MAAM,oCAAoC,EAAE,KAAK,MAAM,CAAC;AAC/D,YAAM,IAAI,4BAA4B,kBAAkB,GAAG;AAAA,IAC7D;AAEA,QAAI,mBAAkC;AACtC,UAAM,cAAc,UAAU,eAAe,gBAAgB,UAAU,QAAQ;AAC/E,UAAM,aAAa,cAAc,IAAI,WAAW,IAAI;AACpD,UAAM,YAAY,QAAQ,eAAe,YAAY,SAAS;AAC9D,QAAI,UAAU,eAAe,CAAC,WAAW;AACvC,UAAI;AACF,cAAM,EAAE,UAAU,QAAQ,IAAI,MAAM,OAAO,YAAY,UAAU,MAAM,UAAU;AACjF,YAAI;AACF,6BAAmB,MAAM,yBAAyB,EAAE,UAAU,SAAS,CAAC;AAAA,QAC1E,UAAE;AACA,gBAAM,QAAQ,EAAE,MAAM,MAAM,MAAS;AAAA,QACvC;AAAA,MACF,SAAS,OAAO;AACd,eAAO,MAAM,4CAA4C,EAAE,KAAK,MAAM,CAAC;AAAA,MACzE;AAAA,IACF;AAEA,QAAI,cAAc,MAAM,aAAa,MAAM,KAAK,CAAC;AACjD,kBAAc,iBAAiB,aAAa,EAAE,MAAM,MAAM,UAAU,IAAI,MAAM,SAAS,CAAC;AACxF,UAAM,WAAW,wBAAwB,MAAM;AAAA,MAC7C;AAAA,MACA,MAAM,MAAM,QAAQ,CAAC;AAAA,IACvB,CAAC;AACD,UAAM,eAAe,WAAW;AAChC,QAAI;AAEJ,QAAI;AACF,YAAM,GAAG,cAAc,OAAO,OAAO;AACnC,qBAAa,GAAG,OAAO,YAAY;AAAA,UACjC,IAAI;AAAA,UACJ,UAAU,MAAM;AAAA,UAChB,UAAU,MAAM;AAAA,UAChB,gBAAgB,MAAM;AAAA,UACtB,UAAU,MAAM;AAAA,UAChB,UAAU;AAAA,UACV;AAAA,UACA,UAAU,MAAM,OAAO;AAAA,UACvB,eAAe,UAAU;AAAA,UACzB,eAAe,UAAU,iBAAiB;AAAA,UAC1C,aAAa;AAAA,UACb,KAAK,uBAAuB,YAAY;AAAA,UACxC,SAAS;AAAA,UACT,iBAAiB;AAAA,QACnB,CAAC;AACD,uCAA+B,EAAE,UAAU,WAAW,UAAU,gBAAgB,WAAW,eAAe,CAAC;AAC3G,cAAM,GAAG,QAAQ,UAAU,EAAE,MAAM;AACnC,cAAM,uBAAuB,mBAAmB,YAAY,IAAI,YAAY,YAAY,EAAE;AAAA,MAC5F,CAAC;AAAA,IACH,SAAS,OAAO;AACd,YAAM,KAAK,kBAAkB,QAAQ,UAAU,MAAM,YAAY,WAAW;AAC5E,aAAO,MAAM,wCAAwC,EAAE,KAAK,MAAM,CAAC;AACnE,YAAM,IAAI,4BAA4B,sBAAsB,GAAG;AAAA,IACjE;AAEA,QAAI,WAAW;AACb,2BAAqB,IAAI,YAAY,QAAQ,UAAU,EAAE,MAAM,CAAC,UAAU;AACxE,eAAO,MAAM,2CAA2C,EAAE,KAAK,MAAM,CAAC;AAAA,MACxE,CAAC;AAAA,IACH;AACA,QAAI,KAAK,KAAK,YAAY;AACxB,YAAM,oBAAoB;AAAA,QACxB,YAAY,KAAK,KAAK;AAAA,QACtB,QAAQ;AAAA,QACR,QAAQ;AAAA,QACR,aAAa;AAAA,UACX,IAAI,WAAW;AAAA,UACf,gBAAgB,WAAW,kBAAkB;AAAA,UAC7C,UAAU,WAAW,YAAY;AAAA,QACnC;AAAA,QACA,QAAQ;AAAA,QACR,SAAS;AAAA,MACX,CAAC;AACD,YAAM,KAAK,KAAK,WAAW,sBAAsB;AAAA,IACnD;AACA,WAAO;AAAA,EACT;AAAA,EAEA,MAAc,kBACZ,QACA,eACA,aACA,aACe;AACf,QAAI;AACF,aAAO,OAAO,eAAe,eAAe,WAAW,KAAK,OAAO,OAAO,eAAe,WAAW;AACpG,YAAM,KAAK,KAAK,uBAAuB,QAAQ,YAAY,IAAI,YAAY,UAAU;AAAA,IACvF,SAAS,OAAO;AACd,aAAO,MAAM,yCAAyC,EAAE,KAAK,MAAM,CAAC;AAAA,IACtE;AAAA,EACF;AACF;",
+  "names": []
+}

package/dist/modules/attachments/lib/target-access-service.js

@@ -0,0 +1,39 @@
+import { findOneWithDecryption } from "@open-mercato/shared/lib/encryption/find";
+import { Attachment, AttachmentPartition } from "../data/entities.js";
+import { checkAttachmentAccess } from "./access.js";
+import { readAttachmentMetadata } from "./metadata.js";
+class AttachmentTargetAccessService {
+  constructor(em) {
+    this.em = em;
+  }
+  async canAccessLinkedTarget(input) {
+    if (!input.targets.length) return false;
+    const attachment = await findOneWithDecryption(
+      this.em,
+      Attachment,
+      {
+        id: input.attachmentId,
+        tenantId: input.tenantId,
+        organizationId: input.organizationId
+      },
+      {},
+      { tenantId: input.tenantId, organizationId: input.organizationId }
+    );
+    if (!attachment) return false;
+    const partition = await this.em.findOne(AttachmentPartition, {
+      code: attachment.partitionCode,
+      $or: [
+        { tenantId: null, organizationId: null },
+        { tenantId: input.tenantId, organizationId: input.organizationId }
+      ]
+    });
+    if (!partition) return false;
+    if (!checkAttachmentAccess(input.auth, attachment, partition, { requireAuthForPublic: true }).ok) return false;
+    const metadata = readAttachmentMetadata(attachment.storageMetadata);
+    return input.targets.some((target) => attachment.entityId === target.entityId && attachment.recordId === target.recordId || metadata.assignments?.some((assignment) => assignment.type === target.entityId && assignment.id === target.recordId) === true);
+  }
+}
+export {
+  AttachmentTargetAccessService
+};
+//# sourceMappingURL=target-access-service.js.map

package/dist/modules/attachments/lib/target-access-service.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/attachments/lib/target-access-service.ts"],
+  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport type { AuthContext } from '@open-mercato/shared/lib/auth/server'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { Attachment, AttachmentPartition } from '../data/entities'\nimport { checkAttachmentAccess } from './access'\nimport { readAttachmentMetadata } from './metadata'\n\nexport type AttachmentRecordTarget = {\n  entityId: string\n  recordId: string\n}\n\nexport type AttachmentTargetAccessInput = {\n  attachmentId: string\n  tenantId: string\n  organizationId: string\n  auth: Exclude<AuthContext, null>\n  targets: AttachmentRecordTarget[]\n}\n\nexport class AttachmentTargetAccessService {\n  constructor(private readonly em: EntityManager) {}\n\n  async canAccessLinkedTarget(input: AttachmentTargetAccessInput): Promise<boolean> {\n    if (!input.targets.length) return false\n    const attachment = await findOneWithDecryption(\n      this.em,\n      Attachment,\n      {\n        id: input.attachmentId,\n        tenantId: input.tenantId,\n        organizationId: input.organizationId,\n      },\n      {},\n      { tenantId: input.tenantId, organizationId: input.organizationId },\n    )\n    if (!attachment) return false\n\n    const partition = await this.em.findOne(AttachmentPartition, {\n      code: attachment.partitionCode,\n      $or: [\n        { tenantId: null, organizationId: null },\n        { tenantId: input.tenantId, organizationId: input.organizationId },\n      ],\n    })\n    if (!partition) return false\n    if (!checkAttachmentAccess(input.auth, attachment, partition, { requireAuthForPublic: true }).ok) return false\n\n    const metadata = readAttachmentMetadata(attachment.storageMetadata)\n    return input.targets.some((target) => (\n      (attachment.entityId === target.entityId && attachment.recordId === target.recordId)\n      || metadata.assignments?.some((assignment) => (\n        assignment.type === target.entityId && assignment.id === target.recordId\n      )) === true\n    ))\n  }\n}\n"],
+  "mappings": "AAEA,SAAS,6BAA6B;AACtC,SAAS,YAAY,2BAA2B;AAChD,SAAS,6BAA6B;AACtC,SAAS,8BAA8B;AAehC,MAAM,8BAA8B;AAAA,EACzC,YAA6B,IAAmB;AAAnB;AAAA,EAAoB;AAAA,EAEjD,MAAM,sBAAsB,OAAsD;AAChF,QAAI,CAAC,MAAM,QAAQ,OAAQ,QAAO;AAClC,UAAM,aAAa,MAAM;AAAA,MACvB,KAAK;AAAA,MACL;AAAA,MACA;AAAA,QACE,IAAI,MAAM;AAAA,QACV,UAAU,MAAM;AAAA,QAChB,gBAAgB,MAAM;AAAA,MACxB;AAAA,MACA,CAAC;AAAA,MACD,EAAE,UAAU,MAAM,UAAU,gBAAgB,MAAM,eAAe;AAAA,IACnE;AACA,QAAI,CAAC,WAAY,QAAO;AAExB,UAAM,YAAY,MAAM,KAAK,GAAG,QAAQ,qBAAqB;AAAA,MAC3D,MAAM,WAAW;AAAA,MACjB,KAAK;AAAA,QACH,EAAE,UAAU,MAAM,gBAAgB,KAAK;AAAA,QACvC,EAAE,UAAU,MAAM,UAAU,gBAAgB,MAAM,eAAe;AAAA,MACnE;AAAA,IACF,CAAC;AACD,QAAI,CAAC,UAAW,QAAO;AACvB,QAAI,CAAC,sBAAsB,MAAM,MAAM,YAAY,WAAW,EAAE,sBAAsB,KAAK,CAAC,EAAE,GAAI,QAAO;AAEzG,UAAM,WAAW,uBAAuB,WAAW,eAAe;AAClE,WAAO,MAAM,QAAQ,KAAK,CAAC,WACxB,WAAW,aAAa,OAAO,YAAY,WAAW,aAAa,OAAO,YACxE,SAAS,aAAa,KAAK,CAAC,eAC7B,WAAW,SAAS,OAAO,YAAY,WAAW,OAAO,OAAO,QACjE,MAAM,IACR;AAAA,EACH;AACF;",
+  "names": []
+}

package/dist/modules/customers/api/companies/route.js

@@ -82,6 +82,7 @@ const crud = makeCrudRoute({
     tenantField: "tenantId",
     softDeleteField: "deletedAt"
   },
+  enrichers: { entityId: "customers.company" },
   indexer: {
     entityType: E.customers.customer_entity
   },

package/dist/modules/customers/api/companies/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../src/modules/customers/api/companies/route.ts"],
-  "sourcesContent": ["import type { EntityManager, FilterQuery } from '@mikro-orm/postgresql'\nimport { z } from 'zod'\nimport { makeCrudRoute } from '@open-mercato/shared/lib/crud/factory'\nimport { CrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport {\n  CustomerCompanyProfile,\n  CustomerDealCompanyLink,\n  CustomerEntity,\n  CustomerPersonCompanyLink,\n} from '../../data/entities'\nimport { E } from '#generated/entities.ids.generated'\nimport { companyCreateSchema, companyUpdateSchema } from '../../data/validators'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport {\n  applyEntityIdExclusion,\n  applyEntityIdRestriction,\n  findMatchingEntityIdsWithQueryEngine,\n  findMatchingEntityIdsBySearchTokensAcrossSources,\n  withScopedPayload,\n} from '../utils'\nimport {\n  buildCustomFieldFiltersFromQuery,\n  extractAllCustomFieldEntries,\n  splitCustomFieldPayload,\n} from '@open-mercato/shared/lib/crud/custom-fields'\nimport { buildIlikeTerm } from '@open-mercato/shared/lib/db/buildIlikeTerm'\nimport { parseBooleanToken } from '@open-mercato/shared/lib/boolean'\nimport { findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { consumeAdvancedFilterState, mergeAdvancedFilterTree } from '@open-mercato/shared/lib/crud/advanced-filter-integration'\nimport {\n  createCustomersCrudOpenApi,\n  createPagedListResponseSchema,\n  defaultOkResponseSchema,\n} from '../openapi'\nimport {\n  filterActivePersonCompanyLinks,\n  withActiveCustomerPersonCompanyLinkFilter,\n  withCustomerPersonCompanyLinkScope,\n  withScopedCustomerDealLinkWhere,\n} from '../../lib/personCompanyLinkTable'\nimport { normalizeCompanyProfilePayload } from './payload'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('customers')\n\nconst rawBodySchema = z.object({}).passthrough()\n\nconst listSchema = z\n  .object({\n    page: z.coerce.number().min(1).default(1),\n    pageSize: z.coerce.number().min(1).max(100).default(50),\n    search: z.string().optional(),\n    email: z.string().optional(),\n    emailStartsWith: z.string().optional(),\n    emailContains: z.string().optional(),\n    sortField: z.string().optional(),\n    sortDir: z.enum(['asc', 'desc']).optional(),\n    status: z.string().optional(),\n    lifecycleStage: z.string().optional(),\n    source: z.string().optional(),\n    hasEmail: z.string().optional(),\n    hasPhone: z.string().optional(),\n    hasNextInteraction: z.string().optional(),\n    createdFrom: z.string().optional(),\n    createdTo: z.string().optional(),\n    id: z.string().uuid().optional(),\n    tagIds: z.string().optional(),\n    tagIdsEmpty: z.string().optional(),\n    excludeIds: z.string().optional(),\n    excludeLinkedPersonId: z.string().uuid().optional(),\n    excludeLinkedCompanyId: z.string().uuid().optional(),\n    excludeLinkedDealId: z.string().uuid().optional(),\n  })\n  .passthrough()\n\nconst routeMetadata = {\n  GET: { requireAuth: true, requireFeatures: ['customers.companies.view'] },\n  POST: { requireAuth: true, requireFeatures: ['customers.companies.manage'] },\n  PUT: { requireAuth: true, requireFeatures: ['customers.companies.manage'] },\n  DELETE: { requireAuth: true, requireFeatures: ['customers.companies.manage'] },\n}\n\nexport const metadata = routeMetadata\n\nconst crud = makeCrudRoute({\n  metadata: routeMetadata,\n  orm: {\n    entity: CustomerEntity,\n    idField: 'id',\n    orgField: 'organizationId',\n    tenantField: 'tenantId',\n    softDeleteField: 'deletedAt',\n  },\n  indexer: {\n    entityType: E.customers.customer_entity,\n  },\n  list: {\n    schema: listSchema,\n    entityId: E.customers.customer_entity,\n    fields: [\n      'id',\n      'display_name',\n      'description',\n      'owner_user_id',\n      'primary_email',\n      'primary_phone',\n      'status',\n      'lifecycle_stage',\n      'source',\n      'next_interaction_at',\n      'next_interaction_name',\n      'next_interaction_ref_id',\n      'next_interaction_icon',\n      'next_interaction_color',\n      'organization_id',\n      'tenant_id',\n      'kind',\n      'created_at',\n      'updated_at',\n    ],\n    sortFieldMap: {\n      name: 'display_name',\n      email: 'primary_email',\n      primaryEmail: 'primary_email',\n      status: 'status',\n      lifecycleStage: 'lifecycle_stage',\n      source: 'source',\n      nextInteractionAt: 'next_interaction_at',\n      createdAt: 'created_at',\n      updatedAt: 'updated_at',\n    },\n    buildFilters: async (query, ctx) => {\n      const advancedFilterTree = consumeAdvancedFilterState(query)\n      const filters: Record<string, unknown> = { kind: { $eq: 'company' } }\n      if (query.id) filters.id = { $eq: query.id }\n      if (query.search) {\n        const matchingIds = ctx\n          ? await findMatchingEntityIdsBySearchTokensAcrossSources({\n              ctx,\n              query: query.search,\n              sources: [\n                {\n                  entityType: E.customers.customer_entity,\n                  fields: [\n                    'display_name',\n                    'primary_email',\n                    'primary_phone',\n                    'description',\n                    'status',\n                    'lifecycle_stage',\n                    'source',\n                    'next_interaction_name',\n                  ],\n                },\n                {\n                  entityType: E.customers.customer_company_profile,\n                  fields: [\n                    'display_name',\n                    'primary_email',\n                    'primary_phone',\n                    'description',\n                    'status',\n                    'lifecycle_stage',\n                    'source',\n                    'legal_name',\n                    'brand_name',\n                    'domain',\n                    'website_url',\n                    'industry',\n                    'size_bucket',\n                    'annual_revenue',\n                  ],\n                  mapToEntityIds: {\n                    table: 'customer_companies',\n                    targetColumn: 'entity_id',\n                  },\n                },\n              ],\n            })\n          : null\n        if (matchingIds !== null && matchingIds.length > 0) {\n          applyEntityIdRestriction(filters, matchingIds)\n        } else {\n          const searchPattern = buildIlikeTerm(query.search)\n          filters.$or = [\n            { display_name: { $ilike: searchPattern } },\n            { primary_email: { $ilike: searchPattern } },\n            { primary_phone: { $ilike: searchPattern } },\n            { description: { $ilike: searchPattern } },\n            { next_interaction_name: { $ilike: searchPattern } },\n          ]\n        }\n      }\n      if (query.status) {\n        filters.status = { $eq: query.status }\n      }\n      if (query.lifecycleStage) {\n        filters.lifecycle_stage = { $eq: query.lifecycleStage }\n      }\n      if (query.source) {\n        filters.source = { $eq: query.source }\n      }\n      const tagIdsRaw = typeof query.tagIds === 'string' ? query.tagIds : ''\n      const tagIds = tagIdsRaw\n        .split(',')\n        .map((value: string) => value.trim())\n        .filter((value: string) => value.length > 0)\n      const tagIdsEmpty = parseBooleanToken(query.tagIdsEmpty) === true\n      if (tagIdsEmpty) {\n        filters.id = { $eq: '00000000-0000-0000-0000-000000000000' }\n      } else if (tagIds.length > 0) {\n        filters['tag_assignments.tag_id'] = { $in: tagIds }\n      }\n      const excludedIds = new Set<string>()\n      const excludeIdsRaw = typeof query.excludeIds === 'string' ? query.excludeIds : ''\n      excludeIdsRaw\n        .split(',')\n        .map((value: string) => value.trim())\n        .filter((value: string) => value.length > 0)\n        .forEach((value: string) => excludedIds.add(value))\n      if (ctx && query.excludeLinkedPersonId) {\n        try {\n          const em = ctx.container.resolve('em') as EntityManager\n          const decryptionScope = {\n            tenantId: ctx.auth?.tenantId ?? null,\n            organizationId: ctx.selectedOrganizationId ?? ctx.auth?.orgId ?? null,\n          }\n          const linkWhere = await withActiveCustomerPersonCompanyLinkFilter(\n            em,\n            withCustomerPersonCompanyLinkScope({ person: query.excludeLinkedPersonId }, decryptionScope),\n            'customers.companies.GET',\n          )\n          const links = filterActivePersonCompanyLinks(\n            await findWithDecryption(\n              em,\n              CustomerPersonCompanyLink,\n              linkWhere,\n              { populate: ['company'] },\n              decryptionScope,\n            ),\n          )\n          links.forEach((link) => {\n            const companyId = link.company?.id\n            if (typeof companyId === 'string' && companyId.length > 0) excludedIds.add(companyId)\n          })\n        } catch (err) {\n          logger.warn('exclusion lookup failed; falling back to base result set', { component: 'companies.list', err })\n        }\n      }\n      if (typeof query.excludeLinkedCompanyId === 'string' && query.excludeLinkedCompanyId.length > 0) {\n        excludedIds.add(query.excludeLinkedCompanyId)\n      }\n      if (ctx && query.excludeLinkedDealId) {\n        try {\n          const em = ctx.container.resolve('em') as EntityManager\n          const decryptionScope = {\n            tenantId: ctx.auth?.tenantId ?? null,\n            organizationId: ctx.selectedOrganizationId ?? ctx.auth?.orgId ?? null,\n          }\n          const links = await findWithDecryption(\n            em,\n            CustomerDealCompanyLink,\n            withScopedCustomerDealLinkWhere(query.excludeLinkedDealId, decryptionScope),\n            { populate: ['company'] },\n            decryptionScope,\n          )\n          links.forEach((link) => {\n            const companyId = link.company?.id\n            if (typeof companyId === 'string' && companyId.length > 0) excludedIds.add(companyId)\n          })\n        } catch (err) {\n          logger.warn('exclusion lookup failed; falling back to base result set', { component: 'companies.list', err })\n        }\n      }\n      applyEntityIdExclusion(filters, Array.from(excludedIds))\n      const email = typeof query.email === 'string' ? query.email.trim().toLowerCase() : ''\n      const emailStartsWith = typeof query.emailStartsWith === 'string' ? query.emailStartsWith.trim().toLowerCase() : ''\n      const emailContains = typeof query.emailContains === 'string' ? query.emailContains.trim().toLowerCase() : ''\n      if (email) {\n        filters.primary_email = { $eq: email }\n      } else if (emailStartsWith) {\n        filters.primary_email = { $ilike: buildIlikeTerm(emailStartsWith, 'startsWith') }\n      } else if (emailContains) {\n        filters.primary_email = { $ilike: buildIlikeTerm(emailContains) }\n      }\n      const hasEmail = parseBooleanToken(query.hasEmail)\n      if (!email && !emailStartsWith && !emailContains && hasEmail !== null) {\n        filters.primary_email = { $exists: hasEmail }\n      }\n      const hasPhone = parseBooleanToken(query.hasPhone)\n      if (hasPhone !== null) {\n        filters.primary_phone = { $exists: hasPhone }\n      }\n      const hasNextInteraction = parseBooleanToken(query.hasNextInteraction)\n      if (hasNextInteraction !== null) {\n        filters.next_interaction_at = { $exists: hasNextInteraction }\n      }\n      const createdRange: Record<string, Date> = {}\n      if (query.createdFrom) {\n        const from = new Date(query.createdFrom)\n        if (!Number.isNaN(from.getTime())) createdRange.$gte = from\n      }\n      if (query.createdTo) {\n        const to = new Date(query.createdTo)\n        if (!Number.isNaN(to.getTime())) createdRange.$lte = to\n      }\n      if (Object.keys(createdRange).length) {\n        filters.created_at = createdRange\n      }\n      if (ctx) {\n        try {\n          const em = ctx.container.resolve('em') as EntityManager\n          const cfFilters = await buildCustomFieldFiltersFromQuery({\n            entityIds: [E.customers.customer_entity, E.customers.customer_company_profile],\n            query,\n            em,\n            tenantId: ctx.auth?.tenantId ?? null,\n          })\n          Object.assign(filters, cfFilters)\n        } catch (err) {\n          logger.warn('custom field filter resolution failed; falling back to base filters', { component: 'companies.list', err })\n        }\n      }\n      if (ctx && advancedFilterTree) {\n        const advancedFilters = mergeAdvancedFilterTree({ ...filters }, advancedFilterTree)\n        const matchedIds = await findMatchingEntityIdsWithQueryEngine({\n          ctx,\n          entityId: E.customers.customer_entity,\n          filters: advancedFilters,\n          customFieldSources: [\n            {\n              entityId: E.customers.customer_company_profile,\n              table: 'customer_companies',\n              alias: 'company_profile',\n              recordIdColumn: 'id',\n              join: { fromField: 'id', toField: 'entity_id' },\n            },\n          ],\n          joins: [\n            {\n              alias: 'tag_assignments',\n              table: 'customer_tag_assignments',\n              from: { field: 'id' },\n              to: { field: 'entity_id' },\n              type: 'left',\n            },\n          ],\n        })\n        applyEntityIdRestriction(filters, matchedIds)\n      }\n      return filters\n    },\n    customFieldSources: [\n      {\n        entityId: E.customers.customer_company_profile,\n        table: 'customer_companies',\n        alias: 'company_profile',\n        recordIdColumn: 'id',\n        join: { fromField: 'id', toField: 'entity_id' },\n      },\n    ],\n    joins: [\n      {\n        alias: 'tag_assignments',\n        table: 'customer_tag_assignments',\n        from: { field: 'id' },\n        to: { field: 'entity_id' },\n        type: 'left',\n      },\n    ],\n    transformItem: (item) => {\n      if (!item || typeof item !== 'object') return item\n      const record = item as Record<string, unknown>\n      const normalized: Record<string, unknown> = { ...record }\n      delete normalized.kind\n      const cfEntries = extractAllCustomFieldEntries(record)\n      for (const key of Object.keys(normalized)) {\n        if (key.startsWith('cf:')) {\n          delete normalized[key]\n        }\n      }\n      return { ...normalized, ...cfEntries }\n    },\n  },\n  actions: {\n    create: {\n      commandId: 'customers.companies.create',\n      schema: rawBodySchema,\n      mapInput: async ({ raw, ctx }) => {\n        const { translate } = await resolveTranslations()\n        const scoped = withScopedPayload(raw ?? {}, ctx, translate)\n        const { base, custom } = splitCustomFieldPayload(scoped)\n        const parsed = companyCreateSchema.parse(base)\n        return Object.keys(custom).length ? { ...parsed, customFields: custom } : parsed\n      },\n      response: ({ result }) => ({\n        id: result?.entityId ?? result?.id ?? null,\n        companyId: result?.companyId ?? null,\n      }),\n      status: 201,\n    },\n    update: {\n      commandId: 'customers.companies.update',\n      schema: rawBodySchema,\n      mapInput: async ({ raw, ctx }) => {\n        const { translate } = await resolveTranslations()\n        const scoped = withScopedPayload(raw ?? {}, ctx, translate)\n        const normalized = normalizeCompanyProfilePayload(scoped, translate)\n        const { base, custom } = splitCustomFieldPayload(normalized)\n        const parsed = companyUpdateSchema.parse(base)\n        return Object.keys(custom).length ? { ...parsed, customFields: custom } : parsed\n      },\n      // Return the freshly-bumped updatedAt so inline-edit detail pages can refresh\n      // their optimistic-lock token between sequential saves (avoids a false 409 on\n      // the 2nd inline edit now that locking is default-ON). #2055. The factory hands\n      // the updated entity here; read defensively in case a `{ result }` wrapper arrives.\n      response: (arg: { result?: unknown; updatedAt?: Date | string | null }) => {\n        const raw = arg?.updatedAt\n          ?? (arg?.result as { updatedAt?: Date | string | null } | null | undefined)?.updatedAt\n          ?? null\n        return {\n          ok: true,\n          updatedAt: raw instanceof Date ? raw.toISOString() : (typeof raw === 'string' ? raw : null),\n        }\n      },\n    },\n    delete: {\n      commandId: 'customers.companies.delete',\n      schema: rawBodySchema,\n      mapInput: async ({ parsed, ctx }) => {\n        const { translate } = await resolveTranslations()\n        const id =\n          parsed?.body?.id ??\n          parsed?.id ??\n          parsed?.query?.id ??\n          (ctx.request ? new URL(ctx.request.url).searchParams.get('id') : null)\n        if (!id) throw new CrudHttpError(400, { error: translate('customers.errors.company_required', 'Company id is required') })\n        return { id }\n      },\n      response: () => ({ ok: true }),\n    },\n  },\n  hooks: {\n    afterList: async (payload, ctx) => {\n      const items = Array.isArray(payload?.items) ? payload.items : []\n      const ids = items\n        .map((item: unknown) => (item && typeof item === 'object' && typeof (item as Record<string, unknown>).id === 'string'\n          ? (item as Record<string, unknown>).id as string\n          : null))\n        .filter((id: string | null): id is string => typeof id === 'string' && id.length > 0)\n      if (!ids.length) return\n\n      const where: Record<string, unknown> = {\n        entity: { $in: ids },\n        tenantId: ctx.auth?.tenantId ?? null,\n      }\n      if (ctx.selectedOrganizationId) {\n        where.organizationId = ctx.selectedOrganizationId\n      }\n\n      const profiles = await findWithDecryption(\n        ctx.container.resolve('em') as EntityManager,\n        CustomerCompanyProfile,\n        where as FilterQuery<CustomerCompanyProfile>,\n        { populate: ['entity'] },\n        {\n          tenantId: ctx.auth?.tenantId ?? null,\n          organizationId: ctx.selectedOrganizationId ?? ctx.auth?.orgId ?? null,\n        },\n      )\n\n      const profilesByEntityId = new Map<string, CustomerCompanyProfile>()\n      for (const profile of profiles) {\n        const profileEntity = (profile as { entity?: { id?: unknown } }).entity\n        const entityId = typeof profileEntity?.id === 'string' ? profileEntity.id : null\n        if (entityId) profilesByEntityId.set(entityId, profile)\n      }\n\n      payload.items = items.map((item: unknown) => {\n        if (!item || typeof item !== 'object') return item\n        const record = item as Record<string, unknown>\n        const profile = typeof record.id === 'string' ? profilesByEntityId.get(record.id) : undefined\n        if (!profile) return item\n        return {\n          ...record,\n          legal_name: profile.legalName ?? null,\n          brand_name: profile.brandName ?? null,\n          domain: profile.domain ?? null,\n          website_url: profile.websiteUrl ?? null,\n          industry: profile.industry ?? null,\n          size_bucket: profile.sizeBucket ?? null,\n          annual_revenue: profile.annualRevenue ?? null,\n        }\n      })\n    },\n  },\n})\n\nconst { POST, PUT, DELETE } = crud\n\nexport { POST, PUT, DELETE }\nexport const GET = crud.GET\n\nconst companyListItemSchema = z.object({\n  id: z.string().uuid(),\n  display_name: z.string().optional(),\n  description: z.string().nullable().optional(),\n  owner_user_id: z.string().uuid().nullable().optional(),\n  primary_email: z.string().nullable().optional(),\n  primary_phone: z.string().nullable().optional(),\n  status: z.string().nullable().optional(),\n  lifecycle_stage: z.string().nullable().optional(),\n  source: z.string().nullable().optional(),\n  next_interaction_at: z.string().nullable().optional(),\n  next_interaction_name: z.string().nullable().optional(),\n  next_interaction_ref_id: z.string().nullable().optional(),\n  next_interaction_icon: z.string().nullable().optional(),\n  next_interaction_color: z.string().nullable().optional(),\n  organization_id: z.string().uuid().nullable().optional(),\n  tenant_id: z.string().uuid().nullable().optional(),\n  created_at: z.string().nullable().optional(),\n})\n\nconst companyCreateResponseSchema = z.object({\n  id: z.string().uuid().nullable(),\n  companyId: z.string().uuid().nullable(),\n})\n\nexport const openApi = createCustomersCrudOpenApi({\n  resourceName: 'Company',\n  pluralName: 'Companies',\n  querySchema: listSchema,\n  listResponseSchema: createPagedListResponseSchema(companyListItemSchema),\n  create: {\n    schema: companyCreateSchema,\n    responseSchema: companyCreateResponseSchema,\n    description: 'Creates a company record and associated profile data.',\n  },\n  update: {\n    schema: companyUpdateSchema,\n    responseSchema: defaultOkResponseSchema,\n    description: 'Updates company profile fields, tags, or custom attributes.',\n  },\n  del: {\n    schema: z.object({ id: z.string().uuid() }),\n    responseSchema: defaultOkResponseSchema,\n    description: 'Deletes a company by id. The identifier can be provided via body or query.',\n    errors: [\n      {\n        status: 422,\n        description: 'Company has dependent records (people, deals, or direct staff); unlink or reassign before delete.',\n        schema: z.object({\n          error: z.string(),\n          code: z.literal('COMPANY_HAS_DEPENDENTS'),\n        }),\n      },\n    ],\n  },\n})\n"],
-  "mappings": "AACA,SAAS,SAAS;AAClB,SAAS,qBAAqB;AAC9B,SAAS,qBAAqB;AAC9B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,SAAS;AAClB,SAAS,qBAAqB,2BAA2B;AACzD,SAAS,2BAA2B;AACpC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,sBAAsB;AAC/B,SAAS,yBAAyB;AAClC,SAAS,0BAA0B;AACnC,SAAS,4BAA4B,+BAA+B;AACpE;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,sCAAsC;AAC/C,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,WAAW;AAEvC,MAAM,gBAAgB,EAAE,OAAO,CAAC,CAAC,EAAE,YAAY;AAE/C,MAAM,aAAa,EAChB,OAAO;AAAA,EACN,MAAM,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,QAAQ,CAAC;AAAA,EACxC,UAAU,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,QAAQ,EAAE;AAAA,EACtD,QAAQ,EAAE,OAAO,EAAE,SAAS;AAAA,EAC5B,OAAO,EAAE,OAAO,EAAE,SAAS;AAAA,EAC3B,iBAAiB,EAAE,OAAO,EAAE,SAAS;AAAA,EACrC,eAAe,EAAE,OAAO,EAAE,SAAS;AAAA,EACnC,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,SAAS,EAAE,KAAK,CAAC,OAAO,MAAM,CAAC,EAAE,SAAS;AAAA,EAC1C,QAAQ,EAAE,OAAO,EAAE,SAAS;AAAA,EAC5B,gBAAgB,EAAE,OAAO,EAAE,SAAS;AAAA,EACpC,QAAQ,EAAE,OAAO,EAAE,SAAS;AAAA,EAC5B,UAAU,EAAE,OAAO,EAAE,SAAS;AAAA,EAC9B,UAAU,EAAE,OAAO,EAAE,SAAS;AAAA,EAC9B,oBAAoB,EAAE,OAAO,EAAE,SAAS;AAAA,EACxC,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,EACjC,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC/B,QAAQ,EAAE,OAAO,EAAE,SAAS;AAAA,EAC5B,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,EACjC,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,EAChC,uBAAuB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAClD,wBAAwB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACnD,qBAAqB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAClD,CAAC,EACA,YAAY;AAEf,MAAM,gBAAgB;AAAA,EACpB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,0BAA0B,EAAE;AAAA,EACxE,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,4BAA4B,EAAE;AAAA,EAC3E,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,4BAA4B,EAAE;AAAA,EAC1E,QAAQ,EAAE,aAAa,MAAM,iBAAiB,CAAC,4BAA4B,EAAE;AAC/E;AAEO,MAAM,WAAW;AAExB,MAAM,OAAO,cAAc;AAAA,EACzB,UAAU;AAAA,EACV,KAAK;AAAA,IACH,QAAQ;AAAA,IACR,SAAS;AAAA,IACT,UAAU;AAAA,IACV,aAAa;AAAA,IACb,iBAAiB;AAAA,EACnB;AAAA,EACA,SAAS;AAAA,IACP,YAAY,EAAE,UAAU;AAAA,EAC1B;AAAA,EACA,MAAM;AAAA,IACJ,QAAQ;AAAA,IACR,UAAU,EAAE,UAAU;AAAA,IACtB,QAAQ;AAAA,MACN;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,IACA,cAAc;AAAA,MACZ,MAAM;AAAA,MACN,OAAO;AAAA,MACP,cAAc;AAAA,MACd,QAAQ;AAAA,MACR,gBAAgB;AAAA,MAChB,QAAQ;AAAA,MACR,mBAAmB;AAAA,MACnB,WAAW;AAAA,MACX,WAAW;AAAA,IACb;AAAA,IACA,cAAc,OAAO,OAAO,QAAQ;AAClC,YAAM,qBAAqB,2BAA2B,KAAK;AAC3D,YAAM,UAAmC,EAAE,MAAM,EAAE,KAAK,UAAU,EAAE;AACpE,UAAI,MAAM,GAAI,SAAQ,KAAK,EAAE,KAAK,MAAM,GAAG;AAC3C,UAAI,MAAM,QAAQ;AAChB,cAAM,cAAc,MAChB,MAAM,iDAAiD;AAAA,UACrD;AAAA,UACA,OAAO,MAAM;AAAA,UACb,SAAS;AAAA,YACP;AAAA,cACE,YAAY,EAAE,UAAU;AAAA,cACxB,QAAQ;AAAA,gBACN;AAAA,gBACA;AAAA,gBACA;AAAA,gBACA;AAAA,gBACA;AAAA,gBACA;AAAA,gBACA;AAAA,gBACA;AAAA,cACF;AAAA,YACF;AAAA,YACA;AAAA,cACE,YAAY,EAAE,UAAU;AAAA,cACxB,QAAQ;AAAA,gBACN;AAAA,gBACA;AAAA,gBACA;AAAA,gBACA;AAAA,gBACA;AAAA,gBACA;AAAA,gBACA;AAAA,gBACA;AAAA,gBACA;AAAA,gBACA;AAAA,gBACA;AAAA,gBACA;AAAA,gBACA;AAAA,gBACA;AAAA,cACF;AAAA,cACA,gBAAgB;AAAA,gBACd,OAAO;AAAA,gBACP,cAAc;AAAA,cAChB;AAAA,YACF;AAAA,UACF;AAAA,QACF,CAAC,IACD;AACJ,YAAI,gBAAgB,QAAQ,YAAY,SAAS,GAAG;AAClD,mCAAyB,SAAS,WAAW;AAAA,QAC/C,OAAO;AACL,gBAAM,gBAAgB,eAAe,MAAM,MAAM;AACjD,kBAAQ,MAAM;AAAA,YACZ,EAAE,cAAc,EAAE,QAAQ,cAAc,EAAE;AAAA,YAC1C,EAAE,eAAe,EAAE,QAAQ,cAAc,EAAE;AAAA,YAC3C,EAAE,eAAe,EAAE,QAAQ,cAAc,EAAE;AAAA,YAC3C,EAAE,aAAa,EAAE,QAAQ,cAAc,EAAE;AAAA,YACzC,EAAE,uBAAuB,EAAE,QAAQ,cAAc,EAAE;AAAA,UACrD;AAAA,QACF;AAAA,MACF;AACA,UAAI,MAAM,QAAQ;AAChB,gBAAQ,SAAS,EAAE,KAAK,MAAM,OAAO;AAAA,MACvC;AACA,UAAI,MAAM,gBAAgB;AACxB,gBAAQ,kBAAkB,EAAE,KAAK,MAAM,eAAe;AAAA,MACxD;AACA,UAAI,MAAM,QAAQ;AAChB,gBAAQ,SAAS,EAAE,KAAK,MAAM,OAAO;AAAA,MACvC;AACA,YAAM,YAAY,OAAO,MAAM,WAAW,WAAW,MAAM,SAAS;AACpE,YAAM,SAAS,UACZ,MAAM,GAAG,EACT,IAAI,CAAC,UAAkB,MAAM,KAAK,CAAC,EACnC,OAAO,CAAC,UAAkB,MAAM,SAAS,CAAC;AAC7C,YAAM,cAAc,kBAAkB,MAAM,WAAW,MAAM;AAC7D,UAAI,aAAa;AACf,gBAAQ,KAAK,EAAE,KAAK,uCAAuC;AAAA,MAC7D,WAAW,OAAO,SAAS,GAAG;AAC5B,gBAAQ,wBAAwB,IAAI,EAAE,KAAK,OAAO;AAAA,MACpD;AACA,YAAM,cAAc,oBAAI,IAAY;AACpC,YAAM,gBAAgB,OAAO,MAAM,eAAe,WAAW,MAAM,aAAa;AAChF,oBACG,MAAM,GAAG,EACT,IAAI,CAAC,UAAkB,MAAM,KAAK,CAAC,EACnC,OAAO,CAAC,UAAkB,MAAM,SAAS,CAAC,EAC1C,QAAQ,CAAC,UAAkB,YAAY,IAAI,KAAK,CAAC;AACpD,UAAI,OAAO,MAAM,uBAAuB;AACtC,YAAI;AACF,gBAAM,KAAK,IAAI,UAAU,QAAQ,IAAI;AACrC,gBAAM,kBAAkB;AAAA,YACtB,UAAU,IAAI,MAAM,YAAY;AAAA,YAChC,gBAAgB,IAAI,0BAA0B,IAAI,MAAM,SAAS;AAAA,UACnE;AACA,gBAAM,YAAY,MAAM;AAAA,YACtB;AAAA,YACA,mCAAmC,EAAE,QAAQ,MAAM,sBAAsB,GAAG,eAAe;AAAA,YAC3F;AAAA,UACF;AACA,gBAAM,QAAQ;AAAA,YACZ,MAAM;AAAA,cACJ;AAAA,cACA;AAAA,cACA;AAAA,cACA,EAAE,UAAU,CAAC,SAAS,EAAE;AAAA,cACxB;AAAA,YACF;AAAA,UACF;AACA,gBAAM,QAAQ,CAAC,SAAS;AACtB,kBAAM,YAAY,KAAK,SAAS;AAChC,gBAAI,OAAO,cAAc,YAAY,UAAU,SAAS,EAAG,aAAY,IAAI,SAAS;AAAA,UACtF,CAAC;AAAA,QACH,SAAS,KAAK;AACZ,iBAAO,KAAK,4DAA4D,EAAE,WAAW,kBAAkB,IAAI,CAAC;AAAA,QAC9G;AAAA,MACF;AACA,UAAI,OAAO,MAAM,2BAA2B,YAAY,MAAM,uBAAuB,SAAS,GAAG;AAC/F,oBAAY,IAAI,MAAM,sBAAsB;AAAA,MAC9C;AACA,UAAI,OAAO,MAAM,qBAAqB;AACpC,YAAI;AACF,gBAAM,KAAK,IAAI,UAAU,QAAQ,IAAI;AACrC,gBAAM,kBAAkB;AAAA,YACtB,UAAU,IAAI,MAAM,YAAY;AAAA,YAChC,gBAAgB,IAAI,0BAA0B,IAAI,MAAM,SAAS;AAAA,UACnE;AACA,gBAAM,QAAQ,MAAM;AAAA,YAClB;AAAA,YACA;AAAA,YACA,gCAAgC,MAAM,qBAAqB,eAAe;AAAA,YAC1E,EAAE,UAAU,CAAC,SAAS,EAAE;AAAA,YACxB;AAAA,UACF;AACA,gBAAM,QAAQ,CAAC,SAAS;AACtB,kBAAM,YAAY,KAAK,SAAS;AAChC,gBAAI,OAAO,cAAc,YAAY,UAAU,SAAS,EAAG,aAAY,IAAI,SAAS;AAAA,UACtF,CAAC;AAAA,QACH,SAAS,KAAK;AACZ,iBAAO,KAAK,4DAA4D,EAAE,WAAW,kBAAkB,IAAI,CAAC;AAAA,QAC9G;AAAA,MACF;AACA,6BAAuB,SAAS,MAAM,KAAK,WAAW,CAAC;AACvD,YAAM,QAAQ,OAAO,MAAM,UAAU,WAAW,MAAM,MAAM,KAAK,EAAE,YAAY,IAAI;AACnF,YAAM,kBAAkB,OAAO,MAAM,oBAAoB,WAAW,MAAM,gBAAgB,KAAK,EAAE,YAAY,IAAI;AACjH,YAAM,gBAAgB,OAAO,MAAM,kBAAkB,WAAW,MAAM,cAAc,KAAK,EAAE,YAAY,IAAI;AAC3G,UAAI,OAAO;AACT,gBAAQ,gBAAgB,EAAE,KAAK,MAAM;AAAA,MACvC,WAAW,iBAAiB;AAC1B,gBAAQ,gBAAgB,EAAE,QAAQ,eAAe,iBAAiB,YAAY,EAAE;AAAA,MAClF,WAAW,eAAe;AACxB,gBAAQ,gBAAgB,EAAE,QAAQ,eAAe,aAAa,EAAE;AAAA,MAClE;AACA,YAAM,WAAW,kBAAkB,MAAM,QAAQ;AACjD,UAAI,CAAC,SAAS,CAAC,mBAAmB,CAAC,iBAAiB,aAAa,MAAM;AACrE,gBAAQ,gBAAgB,EAAE,SAAS,SAAS;AAAA,MAC9C;AACA,YAAM,WAAW,kBAAkB,MAAM,QAAQ;AACjD,UAAI,aAAa,MAAM;AACrB,gBAAQ,gBAAgB,EAAE,SAAS,SAAS;AAAA,MAC9C;AACA,YAAM,qBAAqB,kBAAkB,MAAM,kBAAkB;AACrE,UAAI,uBAAuB,MAAM;AAC/B,gBAAQ,sBAAsB,EAAE,SAAS,mBAAmB;AAAA,MAC9D;AACA,YAAM,eAAqC,CAAC;AAC5C,UAAI,MAAM,aAAa;AACrB,cAAM,OAAO,IAAI,KAAK,MAAM,WAAW;AACvC,YAAI,CAAC,OAAO,MAAM,KAAK,QAAQ,CAAC,EAAG,cAAa,OAAO;AAAA,MACzD;AACA,UAAI,MAAM,WAAW;AACnB,cAAM,KAAK,IAAI,KAAK,MAAM,SAAS;AACnC,YAAI,CAAC,OAAO,MAAM,GAAG,QAAQ,CAAC,EAAG,cAAa,OAAO;AAAA,MACvD;AACA,UAAI,OAAO,KAAK,YAAY,EAAE,QAAQ;AACpC,gBAAQ,aAAa;AAAA,MACvB;AACA,UAAI,KAAK;AACP,YAAI;AACF,gBAAM,KAAK,IAAI,UAAU,QAAQ,IAAI;AACrC,gBAAM,YAAY,MAAM,iCAAiC;AAAA,YACvD,WAAW,CAAC,EAAE,UAAU,iBAAiB,EAAE,UAAU,wBAAwB;AAAA,YAC7E;AAAA,YACA;AAAA,YACA,UAAU,IAAI,MAAM,YAAY;AAAA,UAClC,CAAC;AACD,iBAAO,OAAO,SAAS,SAAS;AAAA,QAClC,SAAS,KAAK;AACZ,iBAAO,KAAK,uEAAuE,EAAE,WAAW,kBAAkB,IAAI,CAAC;AAAA,QACzH;AAAA,MACF;AACA,UAAI,OAAO,oBAAoB;AAC7B,cAAM,kBAAkB,wBAAwB,EAAE,GAAG,QAAQ,GAAG,kBAAkB;AAClF,cAAM,aAAa,MAAM,qCAAqC;AAAA,UAC5D;AAAA,UACA,UAAU,EAAE,UAAU;AAAA,UACtB,SAAS;AAAA,UACT,oBAAoB;AAAA,YAClB;AAAA,cACE,UAAU,EAAE,UAAU;AAAA,cACtB,OAAO;AAAA,cACP,OAAO;AAAA,cACP,gBAAgB;AAAA,cAChB,MAAM,EAAE,WAAW,MAAM,SAAS,YAAY;AAAA,YAChD;AAAA,UACF;AAAA,UACA,OAAO;AAAA,YACL;AAAA,cACE,OAAO;AAAA,cACP,OAAO;AAAA,cACP,MAAM,EAAE,OAAO,KAAK;AAAA,cACpB,IAAI,EAAE,OAAO,YAAY;AAAA,cACzB,MAAM;AAAA,YACR;AAAA,UACF;AAAA,QACF,CAAC;AACD,iCAAyB,SAAS,UAAU;AAAA,MAC9C;AACA,aAAO;AAAA,IACT;AAAA,IACA,oBAAoB;AAAA,MAClB;AAAA,QACE,UAAU,EAAE,UAAU;AAAA,QACtB,OAAO;AAAA,QACP,OAAO;AAAA,QACP,gBAAgB;AAAA,QAChB,MAAM,EAAE,WAAW,MAAM,SAAS,YAAY;AAAA,MAChD;AAAA,IACF;AAAA,IACA,OAAO;AAAA,MACL;AAAA,QACE,OAAO;AAAA,QACP,OAAO;AAAA,QACP,MAAM,EAAE,OAAO,KAAK;AAAA,QACpB,IAAI,EAAE,OAAO,YAAY;AAAA,QACzB,MAAM;AAAA,MACR;AAAA,IACF;AAAA,IACA,eAAe,CAAC,SAAS;AACvB,UAAI,CAAC,QAAQ,OAAO,SAAS,SAAU,QAAO;AAC9C,YAAM,SAAS;AACf,YAAM,aAAsC,EAAE,GAAG,OAAO;AACxD,aAAO,WAAW;AAClB,YAAM,YAAY,6BAA6B,MAAM;AACrD,iBAAW,OAAO,OAAO,KAAK,UAAU,GAAG;AACzC,YAAI,IAAI,WAAW,KAAK,GAAG;AACzB,iBAAO,WAAW,GAAG;AAAA,QACvB;AAAA,MACF;AACA,aAAO,EAAE,GAAG,YAAY,GAAG,UAAU;AAAA,IACvC;AAAA,EACF;AAAA,EACA,SAAS;AAAA,IACP,QAAQ;AAAA,MACN,WAAW;AAAA,MACX,QAAQ;AAAA,MACR,UAAU,OAAO,EAAE,KAAK,IAAI,MAAM;AAChC,cAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,cAAM,SAAS,kBAAkB,OAAO,CAAC,GAAG,KAAK,SAAS;AAC1D,cAAM,EAAE,MAAM,OAAO,IAAI,wBAAwB,MAAM;AACvD,cAAM,SAAS,oBAAoB,MAAM,IAAI;AAC7C,eAAO,OAAO,KAAK,MAAM,EAAE,SAAS,EAAE,GAAG,QAAQ,cAAc,OAAO,IAAI;AAAA,MAC5E;AAAA,MACA,UAAU,CAAC,EAAE,OAAO,OAAO;AAAA,QACzB,IAAI,QAAQ,YAAY,QAAQ,MAAM;AAAA,QACtC,WAAW,QAAQ,aAAa;AAAA,MAClC;AAAA,MACA,QAAQ;AAAA,IACV;AAAA,IACA,QAAQ;AAAA,MACN,WAAW;AAAA,MACX,QAAQ;AAAA,MACR,UAAU,OAAO,EAAE,KAAK,IAAI,MAAM;AAChC,cAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,cAAM,SAAS,kBAAkB,OAAO,CAAC,GAAG,KAAK,SAAS;AAC1D,cAAM,aAAa,+BAA+B,QAAQ,SAAS;AACnE,cAAM,EAAE,MAAM,OAAO,IAAI,wBAAwB,UAAU;AAC3D,cAAM,SAAS,oBAAoB,MAAM,IAAI;AAC7C,eAAO,OAAO,KAAK,MAAM,EAAE,SAAS,EAAE,GAAG,QAAQ,cAAc,OAAO,IAAI;AAAA,MAC5E;AAAA;AAAA;AAAA;AAAA;AAAA,MAKA,UAAU,CAAC,QAAgE;AACzE,cAAM,MAAM,KAAK,aACX,KAAK,QAAoE,aAC1E;AACL,eAAO;AAAA,UACL,IAAI;AAAA,UACJ,WAAW,eAAe,OAAO,IAAI,YAAY,IAAK,OAAO,QAAQ,WAAW,MAAM;AAAA,QACxF;AAAA,MACF;AAAA,IACF;AAAA,IACA,QAAQ;AAAA,MACN,WAAW;AAAA,MACX,QAAQ;AAAA,MACR,UAAU,OAAO,EAAE,QAAQ,IAAI,MAAM;AACnC,cAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,cAAM,KACJ,QAAQ,MAAM,MACd,QAAQ,MACR,QAAQ,OAAO,OACd,IAAI,UAAU,IAAI,IAAI,IAAI,QAAQ,GAAG,EAAE,aAAa,IAAI,IAAI,IAAI;AACnE,YAAI,CAAC,GAAI,OAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,qCAAqC,wBAAwB,EAAE,CAAC;AACzH,eAAO,EAAE,GAAG;AAAA,MACd;AAAA,MACA,UAAU,OAAO,EAAE,IAAI,KAAK;AAAA,IAC9B;AAAA,EACF;AAAA,EACA,OAAO;AAAA,IACL,WAAW,OAAO,SAAS,QAAQ;AACjC,YAAM,QAAQ,MAAM,QAAQ,SAAS,KAAK,IAAI,QAAQ,QAAQ,CAAC;AAC/D,YAAM,MAAM,MACT,IAAI,CAAC,SAAmB,QAAQ,OAAO,SAAS,YAAY,OAAQ,KAAiC,OAAO,WACxG,KAAiC,KAClC,IAAK,EACR,OAAO,CAAC,OAAoC,OAAO,OAAO,YAAY,GAAG,SAAS,CAAC;AACtF,UAAI,CAAC,IAAI,OAAQ;AAEjB,YAAM,QAAiC;AAAA,QACrC,QAAQ,EAAE,KAAK,IAAI;AAAA,QACnB,UAAU,IAAI,MAAM,YAAY;AAAA,MAClC;AACA,UAAI,IAAI,wBAAwB;AAC9B,cAAM,iBAAiB,IAAI;AAAA,MAC7B;AAEA,YAAM,WAAW,MAAM;AAAA,QACrB,IAAI,UAAU,QAAQ,IAAI;AAAA,QAC1B;AAAA,QACA;AAAA,QACA,EAAE,UAAU,CAAC,QAAQ,EAAE;AAAA,QACvB;AAAA,UACE,UAAU,IAAI,MAAM,YAAY;AAAA,UAChC,gBAAgB,IAAI,0BAA0B,IAAI,MAAM,SAAS;AAAA,QACnE;AAAA,MACF;AAEA,YAAM,qBAAqB,oBAAI,IAAoC;AACnE,iBAAW,WAAW,UAAU;AAC9B,cAAM,gBAAiB,QAA0C;AACjE,cAAM,WAAW,OAAO,eAAe,OAAO,WAAW,cAAc,KAAK;AAC5E,YAAI,SAAU,oBAAmB,IAAI,UAAU,OAAO;AAAA,MACxD;AAEA,cAAQ,QAAQ,MAAM,IAAI,CAAC,SAAkB;AAC3C,YAAI,CAAC,QAAQ,OAAO,SAAS,SAAU,QAAO;AAC9C,cAAM,SAAS;AACf,cAAM,UAAU,OAAO,OAAO,OAAO,WAAW,mBAAmB,IAAI,OAAO,EAAE,IAAI;AACpF,YAAI,CAAC,QAAS,QAAO;AACrB,eAAO;AAAA,UACL,GAAG;AAAA,UACH,YAAY,QAAQ,aAAa;AAAA,UACjC,YAAY,QAAQ,aAAa;AAAA,UACjC,QAAQ,QAAQ,UAAU;AAAA,UAC1B,aAAa,QAAQ,cAAc;AAAA,UACnC,UAAU,QAAQ,YAAY;AAAA,UAC9B,aAAa,QAAQ,cAAc;AAAA,UACnC,gBAAgB,QAAQ,iBAAiB;AAAA,QAC3C;AAAA,MACF,CAAC;AAAA,IACH;AAAA,EACF;AACF,CAAC;AAED,MAAM,EAAE,MAAM,KAAK,OAAO,IAAI;AAGvB,MAAM,MAAM,KAAK;AAExB,MAAM,wBAAwB,EAAE,OAAO;AAAA,EACrC,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,cAAc,EAAE,OAAO,EAAE,SAAS;AAAA,EAClC,aAAa,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC5C,eAAe,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS;AAAA,EACrD,eAAe,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC9C,eAAe,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC9C,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACvC,iBAAiB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAChD,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACvC,qBAAqB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACpD,uBAAuB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACtD,yBAAyB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACxD,uBAAuB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACtD,wBAAwB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACvD,iBAAiB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS;AAAA,EACvD,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS;AAAA,EACjD,YAAY,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAC7C,CAAC;AAED,MAAM,8BAA8B,EAAE,OAAO;AAAA,EAC3C,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC/B,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AACxC,CAAC;AAEM,MAAM,UAAU,2BAA2B;AAAA,EAChD,cAAc;AAAA,EACd,YAAY;AAAA,EACZ,aAAa;AAAA,EACb,oBAAoB,8BAA8B,qBAAqB;AAAA,EACvE,QAAQ;AAAA,IACN,QAAQ;AAAA,IACR,gBAAgB;AAAA,IAChB,aAAa;AAAA,EACf;AAAA,EACA,QAAQ;AAAA,IACN,QAAQ;AAAA,IACR,gBAAgB;AAAA,IAChB,aAAa;AAAA,EACf;AAAA,EACA,KAAK;AAAA,IACH,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAAA,IAC1C,gBAAgB;AAAA,IAChB,aAAa;AAAA,IACb,QAAQ;AAAA,MACN;AAAA,QACE,QAAQ;AAAA,QACR,aAAa;AAAA,QACb,QAAQ,EAAE,OAAO;AAAA,UACf,OAAO,EAAE,OAAO;AAAA,UAChB,MAAM,EAAE,QAAQ,wBAAwB;AAAA,QAC1C,CAAC;AAAA,MACH;AAAA,IACF;AAAA,EACF;AACF,CAAC;",
+  "sourcesContent": ["import type { EntityManager, FilterQuery } from '@mikro-orm/postgresql'\nimport { z } from 'zod'\nimport { makeCrudRoute } from '@open-mercato/shared/lib/crud/factory'\nimport { CrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport {\n  CustomerCompanyProfile,\n  CustomerDealCompanyLink,\n  CustomerEntity,\n  CustomerPersonCompanyLink,\n} from '../../data/entities'\nimport { E } from '#generated/entities.ids.generated'\nimport { companyCreateSchema, companyUpdateSchema } from '../../data/validators'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport {\n  applyEntityIdExclusion,\n  applyEntityIdRestriction,\n  findMatchingEntityIdsWithQueryEngine,\n  findMatchingEntityIdsBySearchTokensAcrossSources,\n  withScopedPayload,\n} from '../utils'\nimport {\n  buildCustomFieldFiltersFromQuery,\n  extractAllCustomFieldEntries,\n  splitCustomFieldPayload,\n} from '@open-mercato/shared/lib/crud/custom-fields'\nimport { buildIlikeTerm } from '@open-mercato/shared/lib/db/buildIlikeTerm'\nimport { parseBooleanToken } from '@open-mercato/shared/lib/boolean'\nimport { findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { consumeAdvancedFilterState, mergeAdvancedFilterTree } from '@open-mercato/shared/lib/crud/advanced-filter-integration'\nimport {\n  createCustomersCrudOpenApi,\n  createPagedListResponseSchema,\n  defaultOkResponseSchema,\n} from '../openapi'\nimport {\n  filterActivePersonCompanyLinks,\n  withActiveCustomerPersonCompanyLinkFilter,\n  withCustomerPersonCompanyLinkScope,\n  withScopedCustomerDealLinkWhere,\n} from '../../lib/personCompanyLinkTable'\nimport { normalizeCompanyProfilePayload } from './payload'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('customers')\n\nconst rawBodySchema = z.object({}).passthrough()\n\nconst listSchema = z\n  .object({\n    page: z.coerce.number().min(1).default(1),\n    pageSize: z.coerce.number().min(1).max(100).default(50),\n    search: z.string().optional(),\n    email: z.string().optional(),\n    emailStartsWith: z.string().optional(),\n    emailContains: z.string().optional(),\n    sortField: z.string().optional(),\n    sortDir: z.enum(['asc', 'desc']).optional(),\n    status: z.string().optional(),\n    lifecycleStage: z.string().optional(),\n    source: z.string().optional(),\n    hasEmail: z.string().optional(),\n    hasPhone: z.string().optional(),\n    hasNextInteraction: z.string().optional(),\n    createdFrom: z.string().optional(),\n    createdTo: z.string().optional(),\n    id: z.string().uuid().optional(),\n    tagIds: z.string().optional(),\n    tagIdsEmpty: z.string().optional(),\n    excludeIds: z.string().optional(),\n    excludeLinkedPersonId: z.string().uuid().optional(),\n    excludeLinkedCompanyId: z.string().uuid().optional(),\n    excludeLinkedDealId: z.string().uuid().optional(),\n  })\n  .passthrough()\n\nconst routeMetadata = {\n  GET: { requireAuth: true, requireFeatures: ['customers.companies.view'] },\n  POST: { requireAuth: true, requireFeatures: ['customers.companies.manage'] },\n  PUT: { requireAuth: true, requireFeatures: ['customers.companies.manage'] },\n  DELETE: { requireAuth: true, requireFeatures: ['customers.companies.manage'] },\n}\n\nexport const metadata = routeMetadata\n\nconst crud = makeCrudRoute({\n  metadata: routeMetadata,\n  orm: {\n    entity: CustomerEntity,\n    idField: 'id',\n    orgField: 'organizationId',\n    tenantField: 'tenantId',\n    softDeleteField: 'deletedAt',\n  },\n  enrichers: { entityId: 'customers.company' },\n  indexer: {\n    entityType: E.customers.customer_entity,\n  },\n  list: {\n    schema: listSchema,\n    entityId: E.customers.customer_entity,\n    fields: [\n      'id',\n      'display_name',\n      'description',\n      'owner_user_id',\n      'primary_email',\n      'primary_phone',\n      'status',\n      'lifecycle_stage',\n      'source',\n      'next_interaction_at',\n      'next_interaction_name',\n      'next_interaction_ref_id',\n      'next_interaction_icon',\n      'next_interaction_color',\n      'organization_id',\n      'tenant_id',\n      'kind',\n      'created_at',\n      'updated_at',\n    ],\n    sortFieldMap: {\n      name: 'display_name',\n      email: 'primary_email',\n      primaryEmail: 'primary_email',\n      status: 'status',\n      lifecycleStage: 'lifecycle_stage',\n      source: 'source',\n      nextInteractionAt: 'next_interaction_at',\n      createdAt: 'created_at',\n      updatedAt: 'updated_at',\n    },\n    buildFilters: async (query, ctx) => {\n      const advancedFilterTree = consumeAdvancedFilterState(query)\n      const filters: Record<string, unknown> = { kind: { $eq: 'company' } }\n      if (query.id) filters.id = { $eq: query.id }\n      if (query.search) {\n        const matchingIds = ctx\n          ? await findMatchingEntityIdsBySearchTokensAcrossSources({\n              ctx,\n              query: query.search,\n              sources: [\n                {\n                  entityType: E.customers.customer_entity,\n                  fields: [\n                    'display_name',\n                    'primary_email',\n                    'primary_phone',\n                    'description',\n                    'status',\n                    'lifecycle_stage',\n                    'source',\n                    'next_interaction_name',\n                  ],\n                },\n                {\n                  entityType: E.customers.customer_company_profile,\n                  fields: [\n                    'display_name',\n                    'primary_email',\n                    'primary_phone',\n                    'description',\n                    'status',\n                    'lifecycle_stage',\n                    'source',\n                    'legal_name',\n                    'brand_name',\n                    'domain',\n                    'website_url',\n                    'industry',\n                    'size_bucket',\n                    'annual_revenue',\n                  ],\n                  mapToEntityIds: {\n                    table: 'customer_companies',\n                    targetColumn: 'entity_id',\n                  },\n                },\n              ],\n            })\n          : null\n        if (matchingIds !== null && matchingIds.length > 0) {\n          applyEntityIdRestriction(filters, matchingIds)\n        } else {\n          const searchPattern = buildIlikeTerm(query.search)\n          filters.$or = [\n            { display_name: { $ilike: searchPattern } },\n            { primary_email: { $ilike: searchPattern } },\n            { primary_phone: { $ilike: searchPattern } },\n            { description: { $ilike: searchPattern } },\n            { next_interaction_name: { $ilike: searchPattern } },\n          ]\n        }\n      }\n      if (query.status) {\n        filters.status = { $eq: query.status }\n      }\n      if (query.lifecycleStage) {\n        filters.lifecycle_stage = { $eq: query.lifecycleStage }\n      }\n      if (query.source) {\n        filters.source = { $eq: query.source }\n      }\n      const tagIdsRaw = typeof query.tagIds === 'string' ? query.tagIds : ''\n      const tagIds = tagIdsRaw\n        .split(',')\n        .map((value: string) => value.trim())\n        .filter((value: string) => value.length > 0)\n      const tagIdsEmpty = parseBooleanToken(query.tagIdsEmpty) === true\n      if (tagIdsEmpty) {\n        filters.id = { $eq: '00000000-0000-0000-0000-000000000000' }\n      } else if (tagIds.length > 0) {\n        filters['tag_assignments.tag_id'] = { $in: tagIds }\n      }\n      const excludedIds = new Set<string>()\n      const excludeIdsRaw = typeof query.excludeIds === 'string' ? query.excludeIds : ''\n      excludeIdsRaw\n        .split(',')\n        .map((value: string) => value.trim())\n        .filter((value: string) => value.length > 0)\n        .forEach((value: string) => excludedIds.add(value))\n      if (ctx && query.excludeLinkedPersonId) {\n        try {\n          const em = ctx.container.resolve('em') as EntityManager\n          const decryptionScope = {\n            tenantId: ctx.auth?.tenantId ?? null,\n            organizationId: ctx.selectedOrganizationId ?? ctx.auth?.orgId ?? null,\n          }\n          const linkWhere = await withActiveCustomerPersonCompanyLinkFilter(\n            em,\n            withCustomerPersonCompanyLinkScope({ person: query.excludeLinkedPersonId }, decryptionScope),\n            'customers.companies.GET',\n          )\n          const links = filterActivePersonCompanyLinks(\n            await findWithDecryption(\n              em,\n              CustomerPersonCompanyLink,\n              linkWhere,\n              { populate: ['company'] },\n              decryptionScope,\n            ),\n          )\n          links.forEach((link) => {\n            const companyId = link.company?.id\n            if (typeof companyId === 'string' && companyId.length > 0) excludedIds.add(companyId)\n          })\n        } catch (err) {\n          logger.warn('exclusion lookup failed; falling back to base result set', { component: 'companies.list', err })\n        }\n      }\n      if (typeof query.excludeLinkedCompanyId === 'string' && query.excludeLinkedCompanyId.length > 0) {\n        excludedIds.add(query.excludeLinkedCompanyId)\n      }\n      if (ctx && query.excludeLinkedDealId) {\n        try {\n          const em = ctx.container.resolve('em') as EntityManager\n          const decryptionScope = {\n            tenantId: ctx.auth?.tenantId ?? null,\n            organizationId: ctx.selectedOrganizationId ?? ctx.auth?.orgId ?? null,\n          }\n          const links = await findWithDecryption(\n            em,\n            CustomerDealCompanyLink,\n            withScopedCustomerDealLinkWhere(query.excludeLinkedDealId, decryptionScope),\n            { populate: ['company'] },\n            decryptionScope,\n          )\n          links.forEach((link) => {\n            const companyId = link.company?.id\n            if (typeof companyId === 'string' && companyId.length > 0) excludedIds.add(companyId)\n          })\n        } catch (err) {\n          logger.warn('exclusion lookup failed; falling back to base result set', { component: 'companies.list', err })\n        }\n      }\n      applyEntityIdExclusion(filters, Array.from(excludedIds))\n      const email = typeof query.email === 'string' ? query.email.trim().toLowerCase() : ''\n      const emailStartsWith = typeof query.emailStartsWith === 'string' ? query.emailStartsWith.trim().toLowerCase() : ''\n      const emailContains = typeof query.emailContains === 'string' ? query.emailContains.trim().toLowerCase() : ''\n      if (email) {\n        filters.primary_email = { $eq: email }\n      } else if (emailStartsWith) {\n        filters.primary_email = { $ilike: buildIlikeTerm(emailStartsWith, 'startsWith') }\n      } else if (emailContains) {\n        filters.primary_email = { $ilike: buildIlikeTerm(emailContains) }\n      }\n      const hasEmail = parseBooleanToken(query.hasEmail)\n      if (!email && !emailStartsWith && !emailContains && hasEmail !== null) {\n        filters.primary_email = { $exists: hasEmail }\n      }\n      const hasPhone = parseBooleanToken(query.hasPhone)\n      if (hasPhone !== null) {\n        filters.primary_phone = { $exists: hasPhone }\n      }\n      const hasNextInteraction = parseBooleanToken(query.hasNextInteraction)\n      if (hasNextInteraction !== null) {\n        filters.next_interaction_at = { $exists: hasNextInteraction }\n      }\n      const createdRange: Record<string, Date> = {}\n      if (query.createdFrom) {\n        const from = new Date(query.createdFrom)\n        if (!Number.isNaN(from.getTime())) createdRange.$gte = from\n      }\n      if (query.createdTo) {\n        const to = new Date(query.createdTo)\n        if (!Number.isNaN(to.getTime())) createdRange.$lte = to\n      }\n      if (Object.keys(createdRange).length) {\n        filters.created_at = createdRange\n      }\n      if (ctx) {\n        try {\n          const em = ctx.container.resolve('em') as EntityManager\n          const cfFilters = await buildCustomFieldFiltersFromQuery({\n            entityIds: [E.customers.customer_entity, E.customers.customer_company_profile],\n            query,\n            em,\n            tenantId: ctx.auth?.tenantId ?? null,\n          })\n          Object.assign(filters, cfFilters)\n        } catch (err) {\n          logger.warn('custom field filter resolution failed; falling back to base filters', { component: 'companies.list', err })\n        }\n      }\n      if (ctx && advancedFilterTree) {\n        const advancedFilters = mergeAdvancedFilterTree({ ...filters }, advancedFilterTree)\n        const matchedIds = await findMatchingEntityIdsWithQueryEngine({\n          ctx,\n          entityId: E.customers.customer_entity,\n          filters: advancedFilters,\n          customFieldSources: [\n            {\n              entityId: E.customers.customer_company_profile,\n              table: 'customer_companies',\n              alias: 'company_profile',\n              recordIdColumn: 'id',\n              join: { fromField: 'id', toField: 'entity_id' },\n            },\n          ],\n          joins: [\n            {\n              alias: 'tag_assignments',\n              table: 'customer_tag_assignments',\n              from: { field: 'id' },\n              to: { field: 'entity_id' },\n              type: 'left',\n            },\n          ],\n        })\n        applyEntityIdRestriction(filters, matchedIds)\n      }\n      return filters\n    },\n    customFieldSources: [\n      {\n        entityId: E.customers.customer_company_profile,\n        table: 'customer_companies',\n        alias: 'company_profile',\n        recordIdColumn: 'id',\n        join: { fromField: 'id', toField: 'entity_id' },\n      },\n    ],\n    joins: [\n      {\n        alias: 'tag_assignments',\n        table: 'customer_tag_assignments',\n        from: { field: 'id' },\n        to: { field: 'entity_id' },\n        type: 'left',\n      },\n    ],\n    transformItem: (item) => {\n      if (!item || typeof item !== 'object') return item\n      const record = item as Record<string, unknown>\n      const normalized: Record<string, unknown> = { ...record }\n      delete normalized.kind\n      const cfEntries = extractAllCustomFieldEntries(record)\n      for (const key of Object.keys(normalized)) {\n        if (key.startsWith('cf:')) {\n          delete normalized[key]\n        }\n      }\n      return { ...normalized, ...cfEntries }\n    },\n  },\n  actions: {\n    create: {\n      commandId: 'customers.companies.create',\n      schema: rawBodySchema,\n      mapInput: async ({ raw, ctx }) => {\n        const { translate } = await resolveTranslations()\n        const scoped = withScopedPayload(raw ?? {}, ctx, translate)\n        const { base, custom } = splitCustomFieldPayload(scoped)\n        const parsed = companyCreateSchema.parse(base)\n        return Object.keys(custom).length ? { ...parsed, customFields: custom } : parsed\n      },\n      response: ({ result }) => ({\n        id: result?.entityId ?? result?.id ?? null,\n        companyId: result?.companyId ?? null,\n      }),\n      status: 201,\n    },\n    update: {\n      commandId: 'customers.companies.update',\n      schema: rawBodySchema,\n      mapInput: async ({ raw, ctx }) => {\n        const { translate } = await resolveTranslations()\n        const scoped = withScopedPayload(raw ?? {}, ctx, translate)\n        const normalized = normalizeCompanyProfilePayload(scoped, translate)\n        const { base, custom } = splitCustomFieldPayload(normalized)\n        const parsed = companyUpdateSchema.parse(base)\n        return Object.keys(custom).length ? { ...parsed, customFields: custom } : parsed\n      },\n      // Return the freshly-bumped updatedAt so inline-edit detail pages can refresh\n      // their optimistic-lock token between sequential saves (avoids a false 409 on\n      // the 2nd inline edit now that locking is default-ON). #2055. The factory hands\n      // the updated entity here; read defensively in case a `{ result }` wrapper arrives.\n      response: (arg: { result?: unknown; updatedAt?: Date | string | null }) => {\n        const raw = arg?.updatedAt\n          ?? (arg?.result as { updatedAt?: Date | string | null } | null | undefined)?.updatedAt\n          ?? null\n        return {\n          ok: true,\n          updatedAt: raw instanceof Date ? raw.toISOString() : (typeof raw === 'string' ? raw : null),\n        }\n      },\n    },\n    delete: {\n      commandId: 'customers.companies.delete',\n      schema: rawBodySchema,\n      mapInput: async ({ parsed, ctx }) => {\n        const { translate } = await resolveTranslations()\n        const id =\n          parsed?.body?.id ??\n          parsed?.id ??\n          parsed?.query?.id ??\n          (ctx.request ? new URL(ctx.request.url).searchParams.get('id') : null)\n        if (!id) throw new CrudHttpError(400, { error: translate('customers.errors.company_required', 'Company id is required') })\n        return { id }\n      },\n      response: () => ({ ok: true }),\n    },\n  },\n  hooks: {\n    afterList: async (payload, ctx) => {\n      const items = Array.isArray(payload?.items) ? payload.items : []\n      const ids = items\n        .map((item: unknown) => (item && typeof item === 'object' && typeof (item as Record<string, unknown>).id === 'string'\n          ? (item as Record<string, unknown>).id as string\n          : null))\n        .filter((id: string | null): id is string => typeof id === 'string' && id.length > 0)\n      if (!ids.length) return\n\n      const where: Record<string, unknown> = {\n        entity: { $in: ids },\n        tenantId: ctx.auth?.tenantId ?? null,\n      }\n      if (ctx.selectedOrganizationId) {\n        where.organizationId = ctx.selectedOrganizationId\n      }\n\n      const profiles = await findWithDecryption(\n        ctx.container.resolve('em') as EntityManager,\n        CustomerCompanyProfile,\n        where as FilterQuery<CustomerCompanyProfile>,\n        { populate: ['entity'] },\n        {\n          tenantId: ctx.auth?.tenantId ?? null,\n          organizationId: ctx.selectedOrganizationId ?? ctx.auth?.orgId ?? null,\n        },\n      )\n\n      const profilesByEntityId = new Map<string, CustomerCompanyProfile>()\n      for (const profile of profiles) {\n        const profileEntity = (profile as { entity?: { id?: unknown } }).entity\n        const entityId = typeof profileEntity?.id === 'string' ? profileEntity.id : null\n        if (entityId) profilesByEntityId.set(entityId, profile)\n      }\n\n      payload.items = items.map((item: unknown) => {\n        if (!item || typeof item !== 'object') return item\n        const record = item as Record<string, unknown>\n        const profile = typeof record.id === 'string' ? profilesByEntityId.get(record.id) : undefined\n        if (!profile) return item\n        return {\n          ...record,\n          legal_name: profile.legalName ?? null,\n          brand_name: profile.brandName ?? null,\n          domain: profile.domain ?? null,\n          website_url: profile.websiteUrl ?? null,\n          industry: profile.industry ?? null,\n          size_bucket: profile.sizeBucket ?? null,\n          annual_revenue: profile.annualRevenue ?? null,\n        }\n      })\n    },\n  },\n})\n\nconst { POST, PUT, DELETE } = crud\n\nexport { POST, PUT, DELETE }\nexport const GET = crud.GET\n\nconst companyListItemSchema = z.object({\n  id: z.string().uuid(),\n  display_name: z.string().optional(),\n  description: z.string().nullable().optional(),\n  owner_user_id: z.string().uuid().nullable().optional(),\n  primary_email: z.string().nullable().optional(),\n  primary_phone: z.string().nullable().optional(),\n  status: z.string().nullable().optional(),\n  lifecycle_stage: z.string().nullable().optional(),\n  source: z.string().nullable().optional(),\n  next_interaction_at: z.string().nullable().optional(),\n  next_interaction_name: z.string().nullable().optional(),\n  next_interaction_ref_id: z.string().nullable().optional(),\n  next_interaction_icon: z.string().nullable().optional(),\n  next_interaction_color: z.string().nullable().optional(),\n  organization_id: z.string().uuid().nullable().optional(),\n  tenant_id: z.string().uuid().nullable().optional(),\n  created_at: z.string().nullable().optional(),\n})\n\nconst companyCreateResponseSchema = z.object({\n  id: z.string().uuid().nullable(),\n  companyId: z.string().uuid().nullable(),\n})\n\nexport const openApi = createCustomersCrudOpenApi({\n  resourceName: 'Company',\n  pluralName: 'Companies',\n  querySchema: listSchema,\n  listResponseSchema: createPagedListResponseSchema(companyListItemSchema),\n  create: {\n    schema: companyCreateSchema,\n    responseSchema: companyCreateResponseSchema,\n    description: 'Creates a company record and associated profile data.',\n  },\n  update: {\n    schema: companyUpdateSchema,\n    responseSchema: defaultOkResponseSchema,\n    description: 'Updates company profile fields, tags, or custom attributes.',\n  },\n  del: {\n    schema: z.object({ id: z.string().uuid() }),\n    responseSchema: defaultOkResponseSchema,\n    description: 'Deletes a company by id. The identifier can be provided via body or query.',\n    errors: [\n      {\n        status: 422,\n        description: 'Company has dependent records (people, deals, or direct staff); unlink or reassign before delete.',\n        schema: z.object({\n          error: z.string(),\n          code: z.literal('COMPANY_HAS_DEPENDENTS'),\n        }),\n      },\n    ],\n  },\n})\n"],
+  "mappings": "AACA,SAAS,SAAS;AAClB,SAAS,qBAAqB;AAC9B,SAAS,qBAAqB;AAC9B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,SAAS;AAClB,SAAS,qBAAqB,2BAA2B;AACzD,SAAS,2BAA2B;AACpC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,sBAAsB;AAC/B,SAAS,yBAAyB;AAClC,SAAS,0BAA0B;AACnC,SAAS,4BAA4B,+BAA+B;AACpE;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,sCAAsC;AAC/C,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,WAAW;AAEvC,MAAM,gBAAgB,EAAE,OAAO,CAAC,CAAC,EAAE,YAAY;AAE/C,MAAM,aAAa,EAChB,OAAO;AAAA,EACN,MAAM,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,QAAQ,CAAC;AAAA,EACxC,UAAU,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,QAAQ,EAAE;AAAA,EACtD,QAAQ,EAAE,OAAO,EAAE,SAAS;AAAA,EAC5B,OAAO,EAAE,OAAO,EAAE,SAAS;AAAA,EAC3B,iBAAiB,EAAE,OAAO,EAAE,SAAS;AAAA,EACrC,eAAe,EAAE,OAAO,EAAE,SAAS;AAAA,EACnC,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,SAAS,EAAE,KAAK,CAAC,OAAO,MAAM,CAAC,EAAE,SAAS;AAAA,EAC1C,QAAQ,EAAE,OAAO,EAAE,SAAS;AAAA,EAC5B,gBAAgB,EAAE,OAAO,EAAE,SAAS;AAAA,EACpC,QAAQ,EAAE,OAAO,EAAE,SAAS;AAAA,EAC5B,UAAU,EAAE,OAAO,EAAE,SAAS;AAAA,EAC9B,UAAU,EAAE,OAAO,EAAE,SAAS;AAAA,EAC9B,oBAAoB,EAAE,OAAO,EAAE,SAAS;AAAA,EACxC,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,EACjC,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC/B,QAAQ,EAAE,OAAO,EAAE,SAAS;AAAA,EAC5B,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,EACjC,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,EAChC,uBAAuB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAClD,wBAAwB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACnD,qBAAqB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAClD,CAAC,EACA,YAAY;AAEf,MAAM,gBAAgB;AAAA,EACpB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,0BAA0B,EAAE;AAAA,EACxE,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,4BAA4B,EAAE;AAAA,EAC3E,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,4BAA4B,EAAE;AAAA,EAC1E,QAAQ,EAAE,aAAa,MAAM,iBAAiB,CAAC,4BAA4B,EAAE;AAC/E;AAEO,MAAM,WAAW;AAExB,MAAM,OAAO,cAAc;AAAA,EACzB,UAAU;AAAA,EACV,KAAK;AAAA,IACH,QAAQ;AAAA,IACR,SAAS;AAAA,IACT,UAAU;AAAA,IACV,aAAa;AAAA,IACb,iBAAiB;AAAA,EACnB;AAAA,EACA,WAAW,EAAE,UAAU,oBAAoB;AAAA,EAC3C,SAAS;AAAA,IACP,YAAY,EAAE,UAAU;AAAA,EAC1B;AAAA,EACA,MAAM;AAAA,IACJ,QAAQ;AAAA,IACR,UAAU,EAAE,UAAU;AAAA,IACtB,QAAQ;AAAA,MACN;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,IACA,cAAc;AAAA,MACZ,MAAM;AAAA,MACN,OAAO;AAAA,MACP,cAAc;AAAA,MACd,QAAQ;AAAA,MACR,gBAAgB;AAAA,MAChB,QAAQ;AAAA,MACR,mBAAmB;AAAA,MACnB,WAAW;AAAA,MACX,WAAW;AAAA,IACb;AAAA,IACA,cAAc,OAAO,OAAO,QAAQ;AAClC,YAAM,qBAAqB,2BAA2B,KAAK;AAC3D,YAAM,UAAmC,EAAE,MAAM,EAAE,KAAK,UAAU,EAAE;AACpE,UAAI,MAAM,GAAI,SAAQ,KAAK,EAAE,KAAK,MAAM,GAAG;AAC3C,UAAI,MAAM,QAAQ;AAChB,cAAM,cAAc,MAChB,MAAM,iDAAiD;AAAA,UACrD;AAAA,UACA,OAAO,MAAM;AAAA,UACb,SAAS;AAAA,YACP;AAAA,cACE,YAAY,EAAE,UAAU;AAAA,cACxB,QAAQ;AAAA,gBACN;AAAA,gBACA;AAAA,gBACA;AAAA,gBACA;AAAA,gBACA;AAAA,gBACA;AAAA,gBACA;AAAA,gBACA;AAAA,cACF;AAAA,YACF;AAAA,YACA;AAAA,cACE,YAAY,EAAE,UAAU;AAAA,cACxB,QAAQ;AAAA,gBACN;AAAA,gBACA;AAAA,gBACA;AAAA,gBACA;AAAA,gBACA;AAAA,gBACA;AAAA,gBACA;AAAA,gBACA;AAAA,gBACA;AAAA,gBACA;AAAA,gBACA;AAAA,gBACA;AAAA,gBACA;AAAA,gBACA;AAAA,cACF;AAAA,cACA,gBAAgB;AAAA,gBACd,OAAO;AAAA,gBACP,cAAc;AAAA,cAChB;AAAA,YACF;AAAA,UACF;AAAA,QACF,CAAC,IACD;AACJ,YAAI,gBAAgB,QAAQ,YAAY,SAAS,GAAG;AAClD,mCAAyB,SAAS,WAAW;AAAA,QAC/C,OAAO;AACL,gBAAM,gBAAgB,eAAe,MAAM,MAAM;AACjD,kBAAQ,MAAM;AAAA,YACZ,EAAE,cAAc,EAAE,QAAQ,cAAc,EAAE;AAAA,YAC1C,EAAE,eAAe,EAAE,QAAQ,cAAc,EAAE;AAAA,YAC3C,EAAE,eAAe,EAAE,QAAQ,cAAc,EAAE;AAAA,YAC3C,EAAE,aAAa,EAAE,QAAQ,cAAc,EAAE;AAAA,YACzC,EAAE,uBAAuB,EAAE,QAAQ,cAAc,EAAE;AAAA,UACrD;AAAA,QACF;AAAA,MACF;AACA,UAAI,MAAM,QAAQ;AAChB,gBAAQ,SAAS,EAAE,KAAK,MAAM,OAAO;AAAA,MACvC;AACA,UAAI,MAAM,gBAAgB;AACxB,gBAAQ,kBAAkB,EAAE,KAAK,MAAM,eAAe;AAAA,MACxD;AACA,UAAI,MAAM,QAAQ;AAChB,gBAAQ,SAAS,EAAE,KAAK,MAAM,OAAO;AAAA,MACvC;AACA,YAAM,YAAY,OAAO,MAAM,WAAW,WAAW,MAAM,SAAS;AACpE,YAAM,SAAS,UACZ,MAAM,GAAG,EACT,IAAI,CAAC,UAAkB,MAAM,KAAK,CAAC,EACnC,OAAO,CAAC,UAAkB,MAAM,SAAS,CAAC;AAC7C,YAAM,cAAc,kBAAkB,MAAM,WAAW,MAAM;AAC7D,UAAI,aAAa;AACf,gBAAQ,KAAK,EAAE,KAAK,uCAAuC;AAAA,MAC7D,WAAW,OAAO,SAAS,GAAG;AAC5B,gBAAQ,wBAAwB,IAAI,EAAE,KAAK,OAAO;AAAA,MACpD;AACA,YAAM,cAAc,oBAAI,IAAY;AACpC,YAAM,gBAAgB,OAAO,MAAM,eAAe,WAAW,MAAM,aAAa;AAChF,oBACG,MAAM,GAAG,EACT,IAAI,CAAC,UAAkB,MAAM,KAAK,CAAC,EACnC,OAAO,CAAC,UAAkB,MAAM,SAAS,CAAC,EAC1C,QAAQ,CAAC,UAAkB,YAAY,IAAI,KAAK,CAAC;AACpD,UAAI,OAAO,MAAM,uBAAuB;AACtC,YAAI;AACF,gBAAM,KAAK,IAAI,UAAU,QAAQ,IAAI;AACrC,gBAAM,kBAAkB;AAAA,YACtB,UAAU,IAAI,MAAM,YAAY;AAAA,YAChC,gBAAgB,IAAI,0BAA0B,IAAI,MAAM,SAAS;AAAA,UACnE;AACA,gBAAM,YAAY,MAAM;AAAA,YACtB;AAAA,YACA,mCAAmC,EAAE,QAAQ,MAAM,sBAAsB,GAAG,eAAe;AAAA,YAC3F;AAAA,UACF;AACA,gBAAM,QAAQ;AAAA,YACZ,MAAM;AAAA,cACJ;AAAA,cACA;AAAA,cACA;AAAA,cACA,EAAE,UAAU,CAAC,SAAS,EAAE;AAAA,cACxB;AAAA,YACF;AAAA,UACF;AACA,gBAAM,QAAQ,CAAC,SAAS;AACtB,kBAAM,YAAY,KAAK,SAAS;AAChC,gBAAI,OAAO,cAAc,YAAY,UAAU,SAAS,EAAG,aAAY,IAAI,SAAS;AAAA,UACtF,CAAC;AAAA,QACH,SAAS,KAAK;AACZ,iBAAO,KAAK,4DAA4D,EAAE,WAAW,kBAAkB,IAAI,CAAC;AAAA,QAC9G;AAAA,MACF;AACA,UAAI,OAAO,MAAM,2BAA2B,YAAY,MAAM,uBAAuB,SAAS,GAAG;AAC/F,oBAAY,IAAI,MAAM,sBAAsB;AAAA,MAC9C;AACA,UAAI,OAAO,MAAM,qBAAqB;AACpC,YAAI;AACF,gBAAM,KAAK,IAAI,UAAU,QAAQ,IAAI;AACrC,gBAAM,kBAAkB;AAAA,YACtB,UAAU,IAAI,MAAM,YAAY;AAAA,YAChC,gBAAgB,IAAI,0BAA0B,IAAI,MAAM,SAAS;AAAA,UACnE;AACA,gBAAM,QAAQ,MAAM;AAAA,YAClB;AAAA,YACA;AAAA,YACA,gCAAgC,MAAM,qBAAqB,eAAe;AAAA,YAC1E,EAAE,UAAU,CAAC,SAAS,EAAE;AAAA,YACxB;AAAA,UACF;AACA,gBAAM,QAAQ,CAAC,SAAS;AACtB,kBAAM,YAAY,KAAK,SAAS;AAChC,gBAAI,OAAO,cAAc,YAAY,UAAU,SAAS,EAAG,aAAY,IAAI,SAAS;AAAA,UACtF,CAAC;AAAA,QACH,SAAS,KAAK;AACZ,iBAAO,KAAK,4DAA4D,EAAE,WAAW,kBAAkB,IAAI,CAAC;AAAA,QAC9G;AAAA,MACF;AACA,6BAAuB,SAAS,MAAM,KAAK,WAAW,CAAC;AACvD,YAAM,QAAQ,OAAO,MAAM,UAAU,WAAW,MAAM,MAAM,KAAK,EAAE,YAAY,IAAI;AACnF,YAAM,kBAAkB,OAAO,MAAM,oBAAoB,WAAW,MAAM,gBAAgB,KAAK,EAAE,YAAY,IAAI;AACjH,YAAM,gBAAgB,OAAO,MAAM,kBAAkB,WAAW,MAAM,cAAc,KAAK,EAAE,YAAY,IAAI;AAC3G,UAAI,OAAO;AACT,gBAAQ,gBAAgB,EAAE,KAAK,MAAM;AAAA,MACvC,WAAW,iBAAiB;AAC1B,gBAAQ,gBAAgB,EAAE,QAAQ,eAAe,iBAAiB,YAAY,EAAE;AAAA,MAClF,WAAW,eAAe;AACxB,gBAAQ,gBAAgB,EAAE,QAAQ,eAAe,aAAa,EAAE;AAAA,MAClE;AACA,YAAM,WAAW,kBAAkB,MAAM,QAAQ;AACjD,UAAI,CAAC,SAAS,CAAC,mBAAmB,CAAC,iBAAiB,aAAa,MAAM;AACrE,gBAAQ,gBAAgB,EAAE,SAAS,SAAS;AAAA,MAC9C;AACA,YAAM,WAAW,kBAAkB,MAAM,QAAQ;AACjD,UAAI,aAAa,MAAM;AACrB,gBAAQ,gBAAgB,EAAE,SAAS,SAAS;AAAA,MAC9C;AACA,YAAM,qBAAqB,kBAAkB,MAAM,kBAAkB;AACrE,UAAI,uBAAuB,MAAM;AAC/B,gBAAQ,sBAAsB,EAAE,SAAS,mBAAmB;AAAA,MAC9D;AACA,YAAM,eAAqC,CAAC;AAC5C,UAAI,MAAM,aAAa;AACrB,cAAM,OAAO,IAAI,KAAK,MAAM,WAAW;AACvC,YAAI,CAAC,OAAO,MAAM,KAAK,QAAQ,CAAC,EAAG,cAAa,OAAO;AAAA,MACzD;AACA,UAAI,MAAM,WAAW;AACnB,cAAM,KAAK,IAAI,KAAK,MAAM,SAAS;AACnC,YAAI,CAAC,OAAO,MAAM,GAAG,QAAQ,CAAC,EAAG,cAAa,OAAO;AAAA,MACvD;AACA,UAAI,OAAO,KAAK,YAAY,EAAE,QAAQ;AACpC,gBAAQ,aAAa;AAAA,MACvB;AACA,UAAI,KAAK;AACP,YAAI;AACF,gBAAM,KAAK,IAAI,UAAU,QAAQ,IAAI;AACrC,gBAAM,YAAY,MAAM,iCAAiC;AAAA,YACvD,WAAW,CAAC,EAAE,UAAU,iBAAiB,EAAE,UAAU,wBAAwB;AAAA,YAC7E;AAAA,YACA;AAAA,YACA,UAAU,IAAI,MAAM,YAAY;AAAA,UAClC,CAAC;AACD,iBAAO,OAAO,SAAS,SAAS;AAAA,QAClC,SAAS,KAAK;AACZ,iBAAO,KAAK,uEAAuE,EAAE,WAAW,kBAAkB,IAAI,CAAC;AAAA,QACzH;AAAA,MACF;AACA,UAAI,OAAO,oBAAoB;AAC7B,cAAM,kBAAkB,wBAAwB,EAAE,GAAG,QAAQ,GAAG,kBAAkB;AAClF,cAAM,aAAa,MAAM,qCAAqC;AAAA,UAC5D;AAAA,UACA,UAAU,EAAE,UAAU;AAAA,UACtB,SAAS;AAAA,UACT,oBAAoB;AAAA,YAClB;AAAA,cACE,UAAU,EAAE,UAAU;AAAA,cACtB,OAAO;AAAA,cACP,OAAO;AAAA,cACP,gBAAgB;AAAA,cAChB,MAAM,EAAE,WAAW,MAAM,SAAS,YAAY;AAAA,YAChD;AAAA,UACF;AAAA,UACA,OAAO;AAAA,YACL;AAAA,cACE,OAAO;AAAA,cACP,OAAO;AAAA,cACP,MAAM,EAAE,OAAO,KAAK;AAAA,cACpB,IAAI,EAAE,OAAO,YAAY;AAAA,cACzB,MAAM;AAAA,YACR;AAAA,UACF;AAAA,QACF,CAAC;AACD,iCAAyB,SAAS,UAAU;AAAA,MAC9C;AACA,aAAO;AAAA,IACT;AAAA,IACA,oBAAoB;AAAA,MAClB;AAAA,QACE,UAAU,EAAE,UAAU;AAAA,QACtB,OAAO;AAAA,QACP,OAAO;AAAA,QACP,gBAAgB;AAAA,QAChB,MAAM,EAAE,WAAW,MAAM,SAAS,YAAY;AAAA,MAChD;AAAA,IACF;AAAA,IACA,OAAO;AAAA,MACL;AAAA,QACE,OAAO;AAAA,QACP,OAAO;AAAA,QACP,MAAM,EAAE,OAAO,KAAK;AAAA,QACpB,IAAI,EAAE,OAAO,YAAY;AAAA,QACzB,MAAM;AAAA,MACR;AAAA,IACF;AAAA,IACA,eAAe,CAAC,SAAS;AACvB,UAAI,CAAC,QAAQ,OAAO,SAAS,SAAU,QAAO;AAC9C,YAAM,SAAS;AACf,YAAM,aAAsC,EAAE,GAAG,OAAO;AACxD,aAAO,WAAW;AAClB,YAAM,YAAY,6BAA6B,MAAM;AACrD,iBAAW,OAAO,OAAO,KAAK,UAAU,GAAG;AACzC,YAAI,IAAI,WAAW,KAAK,GAAG;AACzB,iBAAO,WAAW,GAAG;AAAA,QACvB;AAAA,MACF;AACA,aAAO,EAAE,GAAG,YAAY,GAAG,UAAU;AAAA,IACvC;AAAA,EACF;AAAA,EACA,SAAS;AAAA,IACP,QAAQ;AAAA,MACN,WAAW;AAAA,MACX,QAAQ;AAAA,MACR,UAAU,OAAO,EAAE,KAAK,IAAI,MAAM;AAChC,cAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,cAAM,SAAS,kBAAkB,OAAO,CAAC,GAAG,KAAK,SAAS;AAC1D,cAAM,EAAE,MAAM,OAAO,IAAI,wBAAwB,MAAM;AACvD,cAAM,SAAS,oBAAoB,MAAM,IAAI;AAC7C,eAAO,OAAO,KAAK,MAAM,EAAE,SAAS,EAAE,GAAG,QAAQ,cAAc,OAAO,IAAI;AAAA,MAC5E;AAAA,MACA,UAAU,CAAC,EAAE,OAAO,OAAO;AAAA,QACzB,IAAI,QAAQ,YAAY,QAAQ,MAAM;AAAA,QACtC,WAAW,QAAQ,aAAa;AAAA,MAClC;AAAA,MACA,QAAQ;AAAA,IACV;AAAA,IACA,QAAQ;AAAA,MACN,WAAW;AAAA,MACX,QAAQ;AAAA,MACR,UAAU,OAAO,EAAE,KAAK,IAAI,MAAM;AAChC,cAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,cAAM,SAAS,kBAAkB,OAAO,CAAC,GAAG,KAAK,SAAS;AAC1D,cAAM,aAAa,+BAA+B,QAAQ,SAAS;AACnE,cAAM,EAAE,MAAM,OAAO,IAAI,wBAAwB,UAAU;AAC3D,cAAM,SAAS,oBAAoB,MAAM,IAAI;AAC7C,eAAO,OAAO,KAAK,MAAM,EAAE,SAAS,EAAE,GAAG,QAAQ,cAAc,OAAO,IAAI;AAAA,MAC5E;AAAA;AAAA;AAAA;AAAA;AAAA,MAKA,UAAU,CAAC,QAAgE;AACzE,cAAM,MAAM,KAAK,aACX,KAAK,QAAoE,aAC1E;AACL,eAAO;AAAA,UACL,IAAI;AAAA,UACJ,WAAW,eAAe,OAAO,IAAI,YAAY,IAAK,OAAO,QAAQ,WAAW,MAAM;AAAA,QACxF;AAAA,MACF;AAAA,IACF;AAAA,IACA,QAAQ;AAAA,MACN,WAAW;AAAA,MACX,QAAQ;AAAA,MACR,UAAU,OAAO,EAAE,QAAQ,IAAI,MAAM;AACnC,cAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,cAAM,KACJ,QAAQ,MAAM,MACd,QAAQ,MACR,QAAQ,OAAO,OACd,IAAI,UAAU,IAAI,IAAI,IAAI,QAAQ,GAAG,EAAE,aAAa,IAAI,IAAI,IAAI;AACnE,YAAI,CAAC,GAAI,OAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,qCAAqC,wBAAwB,EAAE,CAAC;AACzH,eAAO,EAAE,GAAG;AAAA,MACd;AAAA,MACA,UAAU,OAAO,EAAE,IAAI,KAAK;AAAA,IAC9B;AAAA,EACF;AAAA,EACA,OAAO;AAAA,IACL,WAAW,OAAO,SAAS,QAAQ;AACjC,YAAM,QAAQ,MAAM,QAAQ,SAAS,KAAK,IAAI,QAAQ,QAAQ,CAAC;AAC/D,YAAM,MAAM,MACT,IAAI,CAAC,SAAmB,QAAQ,OAAO,SAAS,YAAY,OAAQ,KAAiC,OAAO,WACxG,KAAiC,KAClC,IAAK,EACR,OAAO,CAAC,OAAoC,OAAO,OAAO,YAAY,GAAG,SAAS,CAAC;AACtF,UAAI,CAAC,IAAI,OAAQ;AAEjB,YAAM,QAAiC;AAAA,QACrC,QAAQ,EAAE,KAAK,IAAI;AAAA,QACnB,UAAU,IAAI,MAAM,YAAY;AAAA,MAClC;AACA,UAAI,IAAI,wBAAwB;AAC9B,cAAM,iBAAiB,IAAI;AAAA,MAC7B;AAEA,YAAM,WAAW,MAAM;AAAA,QACrB,IAAI,UAAU,QAAQ,IAAI;AAAA,QAC1B;AAAA,QACA;AAAA,QACA,EAAE,UAAU,CAAC,QAAQ,EAAE;AAAA,QACvB;AAAA,UACE,UAAU,IAAI,MAAM,YAAY;AAAA,UAChC,gBAAgB,IAAI,0BAA0B,IAAI,MAAM,SAAS;AAAA,QACnE;AAAA,MACF;AAEA,YAAM,qBAAqB,oBAAI,IAAoC;AACnE,iBAAW,WAAW,UAAU;AAC9B,cAAM,gBAAiB,QAA0C;AACjE,cAAM,WAAW,OAAO,eAAe,OAAO,WAAW,cAAc,KAAK;AAC5E,YAAI,SAAU,oBAAmB,IAAI,UAAU,OAAO;AAAA,MACxD;AAEA,cAAQ,QAAQ,MAAM,IAAI,CAAC,SAAkB;AAC3C,YAAI,CAAC,QAAQ,OAAO,SAAS,SAAU,QAAO;AAC9C,cAAM,SAAS;AACf,cAAM,UAAU,OAAO,OAAO,OAAO,WAAW,mBAAmB,IAAI,OAAO,EAAE,IAAI;AACpF,YAAI,CAAC,QAAS,QAAO;AACrB,eAAO;AAAA,UACL,GAAG;AAAA,UACH,YAAY,QAAQ,aAAa;AAAA,UACjC,YAAY,QAAQ,aAAa;AAAA,UACjC,QAAQ,QAAQ,UAAU;AAAA,UAC1B,aAAa,QAAQ,cAAc;AAAA,UACnC,UAAU,QAAQ,YAAY;AAAA,UAC9B,aAAa,QAAQ,cAAc;AAAA,UACnC,gBAAgB,QAAQ,iBAAiB;AAAA,QAC3C;AAAA,MACF,CAAC;AAAA,IACH;AAAA,EACF;AACF,CAAC;AAED,MAAM,EAAE,MAAM,KAAK,OAAO,IAAI;AAGvB,MAAM,MAAM,KAAK;AAExB,MAAM,wBAAwB,EAAE,OAAO;AAAA,EACrC,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,cAAc,EAAE,OAAO,EAAE,SAAS;AAAA,EAClC,aAAa,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC5C,eAAe,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS;AAAA,EACrD,eAAe,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC9C,eAAe,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC9C,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACvC,iBAAiB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAChD,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACvC,qBAAqB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACpD,uBAAuB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACtD,yBAAyB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACxD,uBAAuB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACtD,wBAAwB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACvD,iBAAiB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS;AAAA,EACvD,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS;AAAA,EACjD,YAAY,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAC7C,CAAC;AAED,MAAM,8BAA8B,EAAE,OAAO;AAAA,EAC3C,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC/B,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AACxC,CAAC;AAEM,MAAM,UAAU,2BAA2B;AAAA,EAChD,cAAc;AAAA,EACd,YAAY;AAAA,EACZ,aAAa;AAAA,EACb,oBAAoB,8BAA8B,qBAAqB;AAAA,EACvE,QAAQ;AAAA,IACN,QAAQ;AAAA,IACR,gBAAgB;AAAA,IAChB,aAAa;AAAA,EACf;AAAA,EACA,QAAQ;AAAA,IACN,QAAQ;AAAA,IACR,gBAAgB;AAAA,IAChB,aAAa;AAAA,EACf;AAAA,EACA,KAAK;AAAA,IACH,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAAA,IAC1C,gBAAgB;AAAA,IAChB,aAAa;AAAA,IACb,QAAQ;AAAA,MACN;AAAA,QACE,QAAQ;AAAA,QACR,aAAa;AAAA,QACb,QAAQ,EAAE,OAAO;AAAA,UACf,OAAO,EAAE,OAAO;AAAA,UAChB,MAAM,EAAE,QAAQ,wBAAwB;AAAA,QAC1C,CAAC;AAAA,MACH;AAAA,IACF;AAAA,EACF;AACF,CAAC;",
   "names": []
 }

package/dist/modules/customers/backend/customers/companies-v2/[id]/page.js

@@ -244,7 +244,7 @@ function CompanyDetailV2Page({ params }) {
   const injectedTabs = React.useMemo(
     () => (injectedTabWidgets ?? []).filter((widget) => (widget.placement?.kind ?? "tab") === "tab").map((widget) => {
       const tabId = widget.placement?.groupId ?? widget.widgetId;
-      const label = widget.placement?.groupLabel ?? widget.module.metadata.title ?? tabId;
+      const label = widget.placement?.groupLabel ? t(widget.placement.groupLabel, widget.placement.groupLabel) : widget.module.metadata.title ?? tabId;
       const priority = typeof widget.placement?.priority === "number" ? widget.placement.priority : 0;
       const render = () => /* @__PURE__ */ jsx(
         widget.module.Widget,
@@ -256,7 +256,7 @@ function CompanyDetailV2Page({ params }) {
       );
       return { id: tabId, label, priority, render };
     }).sort((a, b) => b.priority - a.priority),
-    [data, injectedTabWidgets, injectionContext]
+    [data, injectedTabWidgets, injectionContext, t]
   );
   const injectedTabMap = React.useMemo(() => new Map(injectedTabs.map((tab) => [tab.id, tab.render])), [injectedTabs]);
   const handleTagsChange = React.useCallback((nextTags) => {