@open-mercato/core 0.6.8-develop.7048.1.b011912b63 → 0.6.8-develop.7049.1.b41427429a

package/dist/modules/customers/api/dashboard/widgets/customer-todos/route.js

@@ -29,7 +29,7 @@ async function resolveContext(req, translate) {
   if (!parsed.success) {
     throw new CrudHttpError(400, { error: translate("customers.errors.invalid_query", "Invalid query parameters") });
   }
-  const { container, em, tenantId, organizationIds } = await resolveWidgetScope(req, translate, {
+  const { container, em, tenantId, organizationIds, isUnrestrictedOrganizationScope } = await resolveWidgetScope(req, translate, {
     tenantId: parsed.data.tenantId ?? null,
     organizationId: parsed.data.organizationId ?? null
   });
@@ -38,13 +38,14 @@ async function resolveContext(req, translate) {
     em,
     tenantId,
     organizationIds,
+    isUnrestrictedOrganizationScope,
     limit: parsed.data.limit
   };
 }
 async function GET(req) {
   const { translate } = await resolveTranslations();
   try {
-    const { container, em, tenantId, organizationIds, limit } = await resolveContext(req, translate);
+    const { container, em, tenantId, organizationIds, isUnrestrictedOrganizationScope, limit } = await resolveContext(req, translate);
     const auth = {
       tenantId,
       orgId: organizationIds?.[0] ?? null,
@@ -52,13 +53,14 @@ async function GET(req) {
     };
     const flags = await resolveCustomerInteractionFeatureFlags(container, tenantId);
     const mergedWindow = Math.min(limit * 4, 50);
+    const isUnrestricted = isUnrestrictedOrganizationScope === true;
     const rows = flags.unified ? (await listCanonicalTodoRows(
       em,
       container,
       auth,
       organizationIds?.[0] ?? null,
       organizationIds ?? null,
-      { pagination: { page: 1, pageSize: limit } }
+      { pagination: { page: 1, pageSize: limit }, isUnrestricted }
     )).items : await Promise.all([
       listLegacyTodoRows(
         em,
@@ -66,7 +68,7 @@ async function GET(req) {
         tenantId,
         organizationIds ?? null,
         void 0,
-        { limit: mergedWindow }
+        { limit: mergedWindow, isUnrestricted }
       ),
       listCanonicalTodoRows(
         em,
@@ -76,7 +78,8 @@ async function GET(req) {
         organizationIds ?? null,
         {
           includeDeleted: true,
-          limit: mergedWindow
+          limit: mergedWindow,
+          isUnrestricted
         }
       )
     ]).then(

package/dist/modules/customers/api/dashboard/widgets/customer-todos/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../../src/modules/customers/api/dashboard/widgets/customer-todos/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { CrudHttpError, isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { resolveWidgetScope, type WidgetScopeContext } from '../utils'\nimport { resolveCustomerInteractionFeatureFlags } from '../../../../lib/interactionFeatureFlags'\nimport type { QueryEngine } from '@open-mercato/shared/lib/query/types'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport {\n  listLegacyTodoRows,\n  listCanonicalTodoRows,\n  sortTodoRows,\n  type CustomerTodoRow,\n} from '../../../../lib/todoCompatibility'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('customers')\n\nconst querySchema = z.object({\n  limit: z.coerce.number().min(1).max(20).default(5),\n  tenantId: z.string().uuid().optional(),\n  organizationId: z.string().uuid().optional(),\n})\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['dashboards.view', 'customers.widgets.todos'] },\n}\n\ntype WidgetContext = WidgetScopeContext & { limit: number }\n\nasync function resolveContext(req: Request, translate: (key: string, fallback?: string) => string): Promise<WidgetContext> {\n  const url = new URL(req.url)\n  const rawQuery: Record<string, string> = {}\n  for (const [key, value] of url.searchParams.entries()) {\n    rawQuery[key] = value\n  }\n  const parsed = querySchema.safeParse(rawQuery)\n  if (!parsed.success) {\n    throw new CrudHttpError(400, { error: translate('customers.errors.invalid_query', 'Invalid query parameters') })\n  }\n\n  const { container, em, tenantId, organizationIds } = await resolveWidgetScope(req, translate, {\n    tenantId: parsed.data.tenantId ?? null,\n    organizationId: parsed.data.organizationId ?? null,\n  })\n\n  return {\n    container,\n    em,\n    tenantId,\n    organizationIds,\n    limit: parsed.data.limit,\n  }\n}\n\nexport async function GET(req: Request) {\n  const { translate } = await resolveTranslations()\n  try {\n    const { container, em, tenantId, organizationIds, limit } = await resolveContext(req, translate)\n    const auth = {\n      tenantId,\n      orgId: organizationIds?.[0] ?? null,\n      sub: 'customers.dashboard.todos',\n    }\n    const flags = await resolveCustomerInteractionFeatureFlags(container, tenantId)\n    const mergedWindow = Math.min(limit * 4, 50)\n    const rows = flags.unified\n      ? (await listCanonicalTodoRows(\n          em,\n          container,\n          auth,\n          organizationIds?.[0] ?? null,\n          organizationIds ?? null,\n          { pagination: { page: 1, pageSize: limit } },\n        )).items\n      : await Promise.all([\n          listLegacyTodoRows(\n            em,\n            container.resolve('queryEngine') as QueryEngine,\n            tenantId,\n            organizationIds ?? null,\n            undefined,\n            { limit: mergedWindow },\n          ),\n          listCanonicalTodoRows(\n            em,\n            container,\n            auth,\n            organizationIds?.[0] ?? null,\n            organizationIds ?? null,\n            {\n              includeDeleted: true,\n              limit: mergedWindow,\n            },\n          ),\n        ]).then(([legacyRows, canonicalRows]) =>\n          sortTodoRows([\n            ...legacyRows.filter((row) => !canonicalRows.bridgeIds.has(row.todoId)),\n            ...canonicalRows.items,\n          ]),\n        )\n\n    const items = rows.slice(0, limit).map((row: CustomerTodoRow) => {\n      const entity = row.customer ?? null\n      return {\n        id: row.id,\n        todoId: row.todoId,\n        todoSource: row.todoSource,\n        todoTitle: row.todoTitle ?? null,\n        createdAt: row.createdAt,\n        organizationId: row.organizationId ?? null,\n        _integrations: row._integrations ?? undefined,\n        entity: entity?.id\n          ? {\n              id: entity.id,\n              displayName: entity.displayName ?? null,\n              kind: entity.kind ?? null,\n              ownerUserId: null,\n            }\n          : {\n            id: null,\n            displayName: null,\n            kind: null,\n            ownerUserId: null,\n          },\n      }\n    })\n\n    return NextResponse.json({ items })\n  } catch (err) {\n    if (isCrudHttpError(err)) {\n      return NextResponse.json(err.body, { status: err.status })\n    }\n    logger.error('customers.widgets.todos failed', { err })\n    return NextResponse.json(\n      { error: translate('customers.widgets.todos.error', 'Failed to load customer tasks') },\n      { status: 500 }\n    )\n  }\n}\n\nconst customerTodoWidgetItemSchema = z.object({\n  id: z.string().uuid(),\n  todoId: z.string().uuid(),\n  todoSource: z.string(),\n  todoTitle: z.string().nullable().optional(),\n  createdAt: z.string(),\n  _integrations: z.record(z.string(), z.unknown()).optional(),\n  organizationId: z.string().uuid().nullable().optional(),\n  entity: z\n    .object({\n      id: z.string().uuid().nullable(),\n      displayName: z.string().nullable(),\n      kind: z.string().nullable(),\n      ownerUserId: z.string().uuid().nullable().optional(),\n    })\n    .passthrough(),\n})\n\nconst customerTodoWidgetResponseSchema = z.object({\n  items: z.array(customerTodoWidgetItemSchema),\n})\n\nconst widgetErrorSchema = z.object({\n  error: z.string(),\n})\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Customers',\n  summary: 'Customer todos widget',\n  methods: {\n    GET: {\n      summary: 'Fetch recent customer tasks',\n      description: 'Returns the most recent customer tasks for display on dashboards, including legacy compatibility rows when needed.',\n      query: querySchema,\n      responses: [\n        { status: 200, description: 'Widget payload', schema: customerTodoWidgetResponseSchema },\n      ],\n      errors: [\n        { status: 400, description: 'Invalid query parameters', schema: widgetErrorSchema },\n        { status: 401, description: 'Unauthorized', schema: widgetErrorSchema },\n        { status: 403, description: 'Requested scope is not accessible', schema: widgetErrorSchema },\n        { status: 500, description: 'Widget failed to load', schema: widgetErrorSchema },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,2BAA2B;AACpC,SAAS,eAAe,uBAAuB;AAC/C,SAAS,0BAAmD;AAC5D,SAAS,8CAA8C;AAGvD;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OAEK;AACP,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,WAAW;AAEvC,MAAM,cAAc,EAAE,OAAO;AAAA,EAC3B,OAAO,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,QAAQ,CAAC;AAAA,EACjD,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACrC,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAC7C,CAAC;AAEM,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,mBAAmB,yBAAyB,EAAE;AAC5F;AAIA,eAAe,eAAe,KAAc,WAA+E;AACzH,QAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,QAAM,WAAmC,CAAC;AAC1C,aAAW,CAAC,KAAK,KAAK,KAAK,IAAI,aAAa,QAAQ,GAAG;AACrD,aAAS,GAAG,IAAI;AAAA,EAClB;AACA,QAAM,SAAS,YAAY,UAAU,QAAQ;AAC7C,MAAI,CAAC,OAAO,SAAS;AACnB,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,kCAAkC,0BAA0B,EAAE,CAAC;AAAA,EACjH;AAEA,QAAM,EAAE,WAAW,IAAI,UAAU,gBAAgB,IAAI,MAAM,mBAAmB,KAAK,WAAW;AAAA,IAC5F,UAAU,OAAO,KAAK,YAAY;AAAA,IAClC,gBAAgB,OAAO,KAAK,kBAAkB;AAAA,EAChD,CAAC;AAED,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,OAAO,OAAO,KAAK;AAAA,EACrB;AACF;AAEA,eAAsB,IAAI,KAAc;AACtC,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,MAAI;AACF,UAAM,EAAE,WAAW,IAAI,UAAU,iBAAiB,MAAM,IAAI,MAAM,eAAe,KAAK,SAAS;AAC/F,UAAM,OAAO;AAAA,MACX;AAAA,MACA,OAAO,kBAAkB,CAAC,KAAK;AAAA,MAC/B,KAAK;AAAA,IACP;AACA,UAAM,QAAQ,MAAM,uCAAuC,WAAW,QAAQ;AAC9E,UAAM,eAAe,KAAK,IAAI,QAAQ,GAAG,EAAE;AAC3C,UAAM,OAAO,MAAM,WACd,MAAM;AAAA,MACL;AAAA,MACA;AAAA,MACA;AAAA,MACA,kBAAkB,CAAC,KAAK;AAAA,MACxB,mBAAmB;AAAA,MACnB,EAAE,YAAY,EAAE,MAAM,GAAG,UAAU,MAAM,EAAE;AAAA,IAC7C,GAAG,QACH,MAAM,QAAQ,IAAI;AAAA,MAChB;AAAA,QACE;AAAA,QACA,UAAU,QAAQ,aAAa;AAAA,QAC/B;AAAA,QACA,mBAAmB;AAAA,QACnB;AAAA,QACA,EAAE,OAAO,aAAa;AAAA,MACxB;AAAA,MACA;AAAA,QACE;AAAA,QACA;AAAA,QACA;AAAA,QACA,kBAAkB,CAAC,KAAK;AAAA,QACxB,mBAAmB;AAAA,QACnB;AAAA,UACE,gBAAgB;AAAA,UAChB,OAAO;AAAA,QACT;AAAA,MACF;AAAA,IACF,CAAC,EAAE;AAAA,MAAK,CAAC,CAAC,YAAY,aAAa,MACjC,aAAa;AAAA,QACX,GAAG,WAAW,OAAO,CAAC,QAAQ,CAAC,cAAc,UAAU,IAAI,IAAI,MAAM,CAAC;AAAA,QACtE,GAAG,cAAc;AAAA,MACnB,CAAC;AAAA,IACH;AAEJ,UAAM,QAAQ,KAAK,MAAM,GAAG,KAAK,EAAE,IAAI,CAAC,QAAyB;AAC/D,YAAM,SAAS,IAAI,YAAY;AAC/B,aAAO;AAAA,QACL,IAAI,IAAI;AAAA,QACR,QAAQ,IAAI;AAAA,QACZ,YAAY,IAAI;AAAA,QAChB,WAAW,IAAI,aAAa;AAAA,QAC5B,WAAW,IAAI;AAAA,QACf,gBAAgB,IAAI,kBAAkB;AAAA,QACtC,eAAe,IAAI,iBAAiB;AAAA,QACpC,QAAQ,QAAQ,KACZ;AAAA,UACE,IAAI,OAAO;AAAA,UACX,aAAa,OAAO,eAAe;AAAA,UACnC,MAAM,OAAO,QAAQ;AAAA,UACrB,aAAa;AAAA,QACf,IACA;AAAA,UACA,IAAI;AAAA,UACJ,aAAa;AAAA,UACb,MAAM;AAAA,UACN,aAAa;AAAA,QACf;AAAA,MACJ;AAAA,IACF,CAAC;AAED,WAAO,aAAa,KAAK,EAAE,MAAM,CAAC;AAAA,EACpC,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,GAAG;AACxB,aAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,IAC3D;AACA,WAAO,MAAM,kCAAkC,EAAE,IAAI,CAAC;AACtD,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,UAAU,iCAAiC,+BAA+B,EAAE;AAAA,MACrF,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAEA,MAAM,+BAA+B,EAAE,OAAO;AAAA,EAC5C,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,QAAQ,EAAE,OAAO,EAAE,KAAK;AAAA,EACxB,YAAY,EAAE,OAAO;AAAA,EACrB,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC1C,WAAW,EAAE,OAAO;AAAA,EACpB,eAAe,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS;AAAA,EAC1D,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS;AAAA,EACtD,QAAQ,EACL,OAAO;AAAA,IACN,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,IAC/B,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,IACjC,MAAM,EAAE,OAAO,EAAE,SAAS;AAAA,IAC1B,aAAa,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS;AAAA,EACrD,CAAC,EACA,YAAY;AACjB,CAAC;AAED,MAAM,mCAAmC,EAAE,OAAO;AAAA,EAChD,OAAO,EAAE,MAAM,4BAA4B;AAC7C,CAAC;AAED,MAAM,oBAAoB,EAAE,OAAO;AAAA,EACjC,OAAO,EAAE,OAAO;AAClB,CAAC;AAEM,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aAAa;AAAA,MACb,OAAO;AAAA,MACP,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,kBAAkB,QAAQ,iCAAiC;AAAA,MACzF;AAAA,MACA,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,4BAA4B,QAAQ,kBAAkB;AAAA,QAClF,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,kBAAkB;AAAA,QACtE,EAAE,QAAQ,KAAK,aAAa,qCAAqC,QAAQ,kBAAkB;AAAA,QAC3F,EAAE,QAAQ,KAAK,aAAa,yBAAyB,QAAQ,kBAAkB;AAAA,MACjF;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { CrudHttpError, isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { resolveWidgetScope, type WidgetScopeContext } from '../utils'\nimport { resolveCustomerInteractionFeatureFlags } from '../../../../lib/interactionFeatureFlags'\nimport type { QueryEngine } from '@open-mercato/shared/lib/query/types'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport {\n  listLegacyTodoRows,\n  listCanonicalTodoRows,\n  sortTodoRows,\n  type CustomerTodoRow,\n} from '../../../../lib/todoCompatibility'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('customers')\n\nconst querySchema = z.object({\n  limit: z.coerce.number().min(1).max(20).default(5),\n  tenantId: z.string().uuid().optional(),\n  organizationId: z.string().uuid().optional(),\n})\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['dashboards.view', 'customers.widgets.todos'] },\n}\n\ntype WidgetContext = WidgetScopeContext & { limit: number }\n\nasync function resolveContext(\n  req: Request,\n  translate: (key: string, fallback?: string) => string,\n): Promise<WidgetContext> {\n  const url = new URL(req.url)\n  const rawQuery: Record<string, string> = {}\n  for (const [key, value] of url.searchParams.entries()) {\n    rawQuery[key] = value\n  }\n  const parsed = querySchema.safeParse(rawQuery)\n  if (!parsed.success) {\n    throw new CrudHttpError(400, { error: translate('customers.errors.invalid_query', 'Invalid query parameters') })\n  }\n\n  const { container, em, tenantId, organizationIds, isUnrestrictedOrganizationScope } =\n    await resolveWidgetScope(req, translate, {\n      tenantId: parsed.data.tenantId ?? null,\n      organizationId: parsed.data.organizationId ?? null,\n    })\n\n  return {\n    container,\n    em,\n    tenantId,\n    organizationIds,\n    isUnrestrictedOrganizationScope,\n    limit: parsed.data.limit,\n  }\n}\n\nexport async function GET(req: Request) {\n  const { translate } = await resolveTranslations()\n  try {\n    const { container, em, tenantId, organizationIds, isUnrestrictedOrganizationScope, limit } =\n      await resolveContext(req, translate)\n    const auth = {\n      tenantId,\n      orgId: organizationIds?.[0] ?? null,\n      sub: 'customers.dashboard.todos',\n    }\n    const flags = await resolveCustomerInteractionFeatureFlags(container, tenantId)\n    const mergedWindow = Math.min(limit * 4, 50)\n    const isUnrestricted = isUnrestrictedOrganizationScope === true\n    const rows = flags.unified\n      ? (await listCanonicalTodoRows(\n          em,\n          container,\n          auth,\n          organizationIds?.[0] ?? null,\n          organizationIds ?? null,\n          { pagination: { page: 1, pageSize: limit }, isUnrestricted },\n        )).items\n      : await Promise.all([\n          listLegacyTodoRows(\n            em,\n            container.resolve('queryEngine') as QueryEngine,\n            tenantId,\n            organizationIds ?? null,\n            undefined,\n            { limit: mergedWindow, isUnrestricted },\n          ),\n          listCanonicalTodoRows(\n            em,\n            container,\n            auth,\n            organizationIds?.[0] ?? null,\n            organizationIds ?? null,\n            {\n              includeDeleted: true,\n              limit: mergedWindow,\n              isUnrestricted,\n            },\n          ),\n        ]).then(([legacyRows, canonicalRows]) =>\n          sortTodoRows([\n            ...legacyRows.filter((row) => !canonicalRows.bridgeIds.has(row.todoId)),\n            ...canonicalRows.items,\n          ]),\n        )\n\n    const items = rows.slice(0, limit).map((row: CustomerTodoRow) => {\n      const entity = row.customer ?? null\n      return {\n        id: row.id,\n        todoId: row.todoId,\n        todoSource: row.todoSource,\n        todoTitle: row.todoTitle ?? null,\n        createdAt: row.createdAt,\n        organizationId: row.organizationId ?? null,\n        _integrations: row._integrations ?? undefined,\n        entity: entity?.id\n          ? {\n              id: entity.id,\n              displayName: entity.displayName ?? null,\n              kind: entity.kind ?? null,\n              ownerUserId: null,\n            }\n          : {\n            id: null,\n            displayName: null,\n            kind: null,\n            ownerUserId: null,\n          },\n      }\n    })\n\n    return NextResponse.json({ items })\n  } catch (err) {\n    if (isCrudHttpError(err)) {\n      return NextResponse.json(err.body, { status: err.status })\n    }\n    logger.error('customers.widgets.todos failed', { err })\n    return NextResponse.json(\n      { error: translate('customers.widgets.todos.error', 'Failed to load customer tasks') },\n      { status: 500 }\n    )\n  }\n}\n\nconst customerTodoWidgetItemSchema = z.object({\n  id: z.string().uuid(),\n  todoId: z.string().uuid(),\n  todoSource: z.string(),\n  todoTitle: z.string().nullable().optional(),\n  createdAt: z.string(),\n  _integrations: z.record(z.string(), z.unknown()).optional(),\n  organizationId: z.string().uuid().nullable().optional(),\n  entity: z\n    .object({\n      id: z.string().uuid().nullable(),\n      displayName: z.string().nullable(),\n      kind: z.string().nullable(),\n      ownerUserId: z.string().uuid().nullable().optional(),\n    })\n    .passthrough(),\n})\n\nconst customerTodoWidgetResponseSchema = z.object({\n  items: z.array(customerTodoWidgetItemSchema),\n})\n\nconst widgetErrorSchema = z.object({\n  error: z.string(),\n})\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Customers',\n  summary: 'Customer todos widget',\n  methods: {\n    GET: {\n      summary: 'Fetch recent customer tasks',\n      description: 'Returns the most recent customer tasks for display on dashboards, including legacy compatibility rows when needed.',\n      query: querySchema,\n      responses: [\n        { status: 200, description: 'Widget payload', schema: customerTodoWidgetResponseSchema },\n      ],\n      errors: [\n        { status: 400, description: 'Invalid query parameters', schema: widgetErrorSchema },\n        { status: 401, description: 'Unauthorized', schema: widgetErrorSchema },\n        { status: 403, description: 'Requested scope is not accessible', schema: widgetErrorSchema },\n        { status: 500, description: 'Widget failed to load', schema: widgetErrorSchema },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,2BAA2B;AACpC,SAAS,eAAe,uBAAuB;AAC/C,SAAS,0BAAmD;AAC5D,SAAS,8CAA8C;AAGvD;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OAEK;AACP,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,WAAW;AAEvC,MAAM,cAAc,EAAE,OAAO;AAAA,EAC3B,OAAO,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,QAAQ,CAAC;AAAA,EACjD,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACrC,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAC7C,CAAC;AAEM,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,mBAAmB,yBAAyB,EAAE;AAC5F;AAIA,eAAe,eACb,KACA,WACwB;AACxB,QAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,QAAM,WAAmC,CAAC;AAC1C,aAAW,CAAC,KAAK,KAAK,KAAK,IAAI,aAAa,QAAQ,GAAG;AACrD,aAAS,GAAG,IAAI;AAAA,EAClB;AACA,QAAM,SAAS,YAAY,UAAU,QAAQ;AAC7C,MAAI,CAAC,OAAO,SAAS;AACnB,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,kCAAkC,0BAA0B,EAAE,CAAC;AAAA,EACjH;AAEA,QAAM,EAAE,WAAW,IAAI,UAAU,iBAAiB,gCAAgC,IAChF,MAAM,mBAAmB,KAAK,WAAW;AAAA,IACvC,UAAU,OAAO,KAAK,YAAY;AAAA,IAClC,gBAAgB,OAAO,KAAK,kBAAkB;AAAA,EAChD,CAAC;AAEH,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,OAAO,OAAO,KAAK;AAAA,EACrB;AACF;AAEA,eAAsB,IAAI,KAAc;AACtC,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,MAAI;AACF,UAAM,EAAE,WAAW,IAAI,UAAU,iBAAiB,iCAAiC,MAAM,IACvF,MAAM,eAAe,KAAK,SAAS;AACrC,UAAM,OAAO;AAAA,MACX;AAAA,MACA,OAAO,kBAAkB,CAAC,KAAK;AAAA,MAC/B,KAAK;AAAA,IACP;AACA,UAAM,QAAQ,MAAM,uCAAuC,WAAW,QAAQ;AAC9E,UAAM,eAAe,KAAK,IAAI,QAAQ,GAAG,EAAE;AAC3C,UAAM,iBAAiB,oCAAoC;AAC3D,UAAM,OAAO,MAAM,WACd,MAAM;AAAA,MACL;AAAA,MACA;AAAA,MACA;AAAA,MACA,kBAAkB,CAAC,KAAK;AAAA,MACxB,mBAAmB;AAAA,MACnB,EAAE,YAAY,EAAE,MAAM,GAAG,UAAU,MAAM,GAAG,eAAe;AAAA,IAC7D,GAAG,QACH,MAAM,QAAQ,IAAI;AAAA,MAChB;AAAA,QACE;AAAA,QACA,UAAU,QAAQ,aAAa;AAAA,QAC/B;AAAA,QACA,mBAAmB;AAAA,QACnB;AAAA,QACA,EAAE,OAAO,cAAc,eAAe;AAAA,MACxC;AAAA,MACA;AAAA,QACE;AAAA,QACA;AAAA,QACA;AAAA,QACA,kBAAkB,CAAC,KAAK;AAAA,QACxB,mBAAmB;AAAA,QACnB;AAAA,UACE,gBAAgB;AAAA,UAChB,OAAO;AAAA,UACP;AAAA,QACF;AAAA,MACF;AAAA,IACF,CAAC,EAAE;AAAA,MAAK,CAAC,CAAC,YAAY,aAAa,MACjC,aAAa;AAAA,QACX,GAAG,WAAW,OAAO,CAAC,QAAQ,CAAC,cAAc,UAAU,IAAI,IAAI,MAAM,CAAC;AAAA,QACtE,GAAG,cAAc;AAAA,MACnB,CAAC;AAAA,IACH;AAEJ,UAAM,QAAQ,KAAK,MAAM,GAAG,KAAK,EAAE,IAAI,CAAC,QAAyB;AAC/D,YAAM,SAAS,IAAI,YAAY;AAC/B,aAAO;AAAA,QACL,IAAI,IAAI;AAAA,QACR,QAAQ,IAAI;AAAA,QACZ,YAAY,IAAI;AAAA,QAChB,WAAW,IAAI,aAAa;AAAA,QAC5B,WAAW,IAAI;AAAA,QACf,gBAAgB,IAAI,kBAAkB;AAAA,QACtC,eAAe,IAAI,iBAAiB;AAAA,QACpC,QAAQ,QAAQ,KACZ;AAAA,UACE,IAAI,OAAO;AAAA,UACX,aAAa,OAAO,eAAe;AAAA,UACnC,MAAM,OAAO,QAAQ;AAAA,UACrB,aAAa;AAAA,QACf,IACA;AAAA,UACA,IAAI;AAAA,UACJ,aAAa;AAAA,UACb,MAAM;AAAA,UACN,aAAa;AAAA,QACf;AAAA,MACJ;AAAA,IACF,CAAC;AAED,WAAO,aAAa,KAAK,EAAE,MAAM,CAAC;AAAA,EACpC,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,GAAG;AACxB,aAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,IAC3D;AACA,WAAO,MAAM,kCAAkC,EAAE,IAAI,CAAC;AACtD,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,UAAU,iCAAiC,+BAA+B,EAAE;AAAA,MACrF,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAEA,MAAM,+BAA+B,EAAE,OAAO;AAAA,EAC5C,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,QAAQ,EAAE,OAAO,EAAE,KAAK;AAAA,EACxB,YAAY,EAAE,OAAO;AAAA,EACrB,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC1C,WAAW,EAAE,OAAO;AAAA,EACpB,eAAe,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS;AAAA,EAC1D,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS;AAAA,EACtD,QAAQ,EACL,OAAO;AAAA,IACN,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,IAC/B,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,IACjC,MAAM,EAAE,OAAO,EAAE,SAAS;AAAA,IAC1B,aAAa,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS;AAAA,EACrD,CAAC,EACA,YAAY;AACjB,CAAC;AAED,MAAM,mCAAmC,EAAE,OAAO;AAAA,EAChD,OAAO,EAAE,MAAM,4BAA4B;AAC7C,CAAC;AAED,MAAM,oBAAoB,EAAE,OAAO;AAAA,EACjC,OAAO,EAAE,OAAO;AAClB,CAAC;AAEM,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aAAa;AAAA,MACb,OAAO;AAAA,MACP,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,kBAAkB,QAAQ,iCAAiC;AAAA,MACzF;AAAA,MACA,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,4BAA4B,QAAQ,kBAAkB;AAAA,QAClF,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,kBAAkB;AAAA,QACtE,EAAE,QAAQ,KAAK,aAAa,qCAAqC,QAAQ,kBAAkB;AAAA,QAC3F,EAAE,QAAQ,KAAK,aAAa,yBAAyB,QAAQ,kBAAkB;AAAA,MACjF;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/customers/api/interactions/tasks/route.js

@@ -2,6 +2,7 @@ import { NextResponse } from "next/server";
 import { z } from "zod";
 import { isCrudHttpError } from "@open-mercato/shared/lib/crud/errors";
 import { parseBooleanToken } from "@open-mercato/shared/lib/boolean";
+import { isUnrestrictedOrganizationScope } from "@open-mercato/shared/lib/auth/organizationAccess";
 import { resolveTranslations } from "@open-mercato/shared/lib/i18n/server";
 import { createCustomersCrudOpenApi, createPagedListResponseSchema } from "../../openapi.js";
 import { resolveCustomerInteractionFeatureFlags } from "../../../lib/interactionFeatureFlags.js";
@@ -30,10 +31,29 @@ const MERGED_TASK_FETCH_CAP = 2e3;
 async function GET(request) {
   const { translate } = await resolveTranslations();
   try {
-    const { auth, em, organizationIds, container, selectedOrganizationId } = await resolveCustomersRequestContext(request);
+    const { auth, em, organizationIds, container, selectedOrganizationId, scope } = await resolveCustomersRequestContext(request);
     const query = querySchema.parse(Object.fromEntries(new URL(request.url).searchParams));
     const flags = await resolveCustomerInteractionFeatureFlags(container, auth.tenantId);
     const exportAll = parseBooleanToken(query.all) === true;
+    const isUnrestricted = isUnrestrictedOrganizationScope({
+      isSuperAdmin: auth.isSuperAdmin === true,
+      allowedOrganizationIds: scope?.allowedIds
+    });
+    if (!isUnrestricted && (!organizationIds || organizationIds.length === 0)) {
+      logger.warn("customers.interactions.tasks.list collapsed organization scope", {
+        tenantId: auth.tenantId,
+        organizationIds,
+        selectedId: scope?.selectedId ?? null,
+        allowedIdsCount: scope?.allowedIds?.length ?? null
+      });
+      return NextResponse.json({
+        items: [],
+        total: 0,
+        page: exportAll ? 1 : query.page,
+        pageSize: exportAll ? 0 : query.pageSize,
+        totalPages: 1
+      });
+    }
     const search = normalizeTodoSearch(query.search);
     const queryEngine = container.resolve("queryEngine");
     if (flags.unified) {
@@ -46,7 +66,8 @@ async function GET(request) {
         {
           entityId: query.entityId,
           pagination: exportAll ? null : { page: query.page, pageSize: query.pageSize },
-          searchText: search
+          searchText: search,
+          isUnrestricted
         }
       );
       const total = canonical.total;
@@ -64,7 +85,8 @@ async function GET(request) {
     );
     const [legacyRows, canonicalRows] = await Promise.all([
       listLegacyTodoRows(em, queryEngine, auth.tenantId, organizationIds, query.entityId, {
-        limit: legacyWindow
+        limit: legacyWindow,
+        isUnrestricted
       }),
       listCanonicalTodoRows(
         em,
@@ -75,7 +97,8 @@ async function GET(request) {
         {
           entityId: query.entityId,
           includeDeleted: true,
-          limit: legacyWindow
+          limit: legacyWindow,
+          isUnrestricted
         }
       )
     ]);

package/dist/modules/customers/api/interactions/tasks/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../src/modules/customers/api/interactions/tasks/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { CrudHttpError, isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { parseBooleanToken } from '@open-mercato/shared/lib/boolean'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport type { QueryEngine } from '@open-mercato/shared/lib/query/types'\nimport { createCustomersCrudOpenApi, createPagedListResponseSchema } from '../../openapi'\nimport { resolveCustomerInteractionFeatureFlags } from '../../../lib/interactionFeatureFlags'\nimport { resolveCustomersRequestContext } from '../../../lib/interactionRequestContext'\nimport {\n  filterTodoRows,\n  listCanonicalTodoRows,\n  listLegacyTodoRows,\n  normalizeTodoSearch,\n  paginateTodoRows,\n  sortTodoRows,\n} from '../../../lib/todoCompatibility'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('customers')\n\nconst querySchema = z.object({\n  page: z.coerce.number().min(1).default(1),\n  pageSize: z.coerce.number().min(1).max(100).default(50),\n  search: z.string().optional(),\n  all: z.string().optional(),\n  entityId: z.string().uuid().optional(),\n})\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['customers.interactions.view'] },\n}\n\n// Per-source fetch cap used when compatibility mode must merge legacy todo\n// links and canonical task rows without DB-side union. Bounds memory on\n// tenants with large task history.\nconst MERGED_TASK_FETCH_CAP = 2000\n\nexport async function GET(request: Request): Promise<Response> {\n  const { translate } = await resolveTranslations()\n  try {\n    const { auth, em, organizationIds, container, selectedOrganizationId } =\n      await resolveCustomersRequestContext(request)\n    const query = querySchema.parse(Object.fromEntries(new URL(request.url).searchParams))\n    const flags = await resolveCustomerInteractionFeatureFlags(container, auth.tenantId)\n    const exportAll = parseBooleanToken(query.all) === true\n    const search = normalizeTodoSearch(query.search)\n    const queryEngine = container.resolve('queryEngine') as QueryEngine\n\n    if (flags.unified) {\n      const canonical = await listCanonicalTodoRows(\n        em,\n        container,\n        auth,\n        selectedOrganizationId,\n        organizationIds,\n        {\n          entityId: query.entityId,\n          pagination: exportAll ? null : { page: query.page, pageSize: query.pageSize },\n          searchText: search,\n        },\n      )\n      const total = canonical.total\n      return NextResponse.json({\n        items: canonical.items,\n        total,\n        page: exportAll ? 1 : query.page,\n        pageSize: exportAll ? canonical.items.length : query.pageSize,\n        totalPages: exportAll ? 1 : Math.max(1, Math.ceil(total / query.pageSize)),\n      })\n    }\n\n    const legacyWindow = exportAll\n      ? null\n      : Math.min(\n          MERGED_TASK_FETCH_CAP,\n          Math.max(query.pageSize, query.page * query.pageSize + query.pageSize),\n        )\n    const [legacyRows, canonicalRows] = await Promise.all([\n      listLegacyTodoRows(em, queryEngine, auth.tenantId, organizationIds, query.entityId, {\n        limit: legacyWindow,\n      }),\n      listCanonicalTodoRows(\n        em,\n        container,\n        auth,\n        selectedOrganizationId,\n        organizationIds,\n        {\n          entityId: query.entityId,\n          includeDeleted: true,\n          limit: legacyWindow,\n        },\n      ),\n    ])\n    const mergedRows = [\n      ...legacyRows.filter((row) => !canonicalRows.bridgeIds.has(row.todoId)),\n      ...canonicalRows.items,\n    ]\n    const filteredRows = filterTodoRows(sortTodoRows(mergedRows), search)\n    const paged = paginateTodoRows(filteredRows, query.page, query.pageSize, exportAll)\n\n    return NextResponse.json({\n      items: paged.items,\n      total: paged.total,\n      page: paged.page,\n      pageSize: paged.pageSize,\n      totalPages: paged.totalPages,\n    })\n  } catch (err) {\n    if (isCrudHttpError(err)) {\n      return NextResponse.json(err.body, { status: err.status })\n    }\n    if (err instanceof z.ZodError) {\n      return NextResponse.json({ error: translate('customers.errors.validationFailed', 'Validation failed'), details: err.issues }, { status: 400 })\n    }\n    logger.error('customers.interactions.tasks.get failed', { err })\n    return NextResponse.json({ error: translate('customers.errors.internalError', 'Internal server error') }, { status: 500 })\n  }\n}\n\nconst todoItemSchema = z.object({\n  id: z.string(),\n  todoId: z.string(),\n  todoSource: z.string(),\n  todoTitle: z.string().nullable(),\n  todoIsDone: z.boolean().nullable(),\n  todoPriority: z.number().nullable().optional(),\n  todoSeverity: z.string().nullable().optional(),\n  todoDescription: z.string().nullable().optional(),\n  todoDueAt: z.string().nullable().optional(),\n  todoCustomValues: z.record(z.string(), z.unknown()).nullable().optional(),\n  todoOrganizationId: z.string().nullable(),\n  organizationId: z.string(),\n  tenantId: z.string(),\n  createdAt: z.string(),\n  externalHref: z.string().nullable().optional(),\n  _integrations: z.record(z.string(), z.unknown()).optional(),\n  customer: z.object({\n    id: z.string().nullable(),\n    displayName: z.string().nullable(),\n    kind: z.string().nullable(),\n  }),\n})\n\nexport const openApi: OpenApiRouteDoc = createCustomersCrudOpenApi({\n  resourceName: 'CustomerTask',\n  querySchema,\n  listResponseSchema: createPagedListResponseSchema(todoItemSchema),\n})\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAElB,SAAwB,uBAAuB;AAC/C,SAAS,yBAAyB;AAClC,SAAS,2BAA2B;AAEpC,SAAS,4BAA4B,qCAAqC;AAC1E,SAAS,8CAA8C;AACvD,SAAS,sCAAsC;AAC/C;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,WAAW;AAEvC,MAAM,cAAc,EAAE,OAAO;AAAA,EAC3B,MAAM,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,QAAQ,CAAC;AAAA,EACxC,UAAU,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,QAAQ,EAAE;AAAA,EACtD,QAAQ,EAAE,OAAO,EAAE,SAAS;AAAA,EAC5B,KAAK,EAAE,OAAO,EAAE,SAAS;AAAA,EACzB,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AACvC,CAAC;AAEM,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,6BAA6B,EAAE;AAC7E;AAKA,MAAM,wBAAwB;AAE9B,eAAsB,IAAI,SAAqC;AAC7D,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,MAAI;AACF,UAAM,EAAE,MAAM,IAAI,iBAAiB,WAAW,uBAAuB,IACnE,MAAM,+BAA+B,OAAO;AAC9C,UAAM,QAAQ,YAAY,MAAM,OAAO,YAAY,IAAI,IAAI,QAAQ,GAAG,EAAE,YAAY,CAAC;AACrF,UAAM,QAAQ,MAAM,uCAAuC,WAAW,KAAK,QAAQ;AACnF,UAAM,YAAY,kBAAkB,MAAM,GAAG,MAAM;AACnD,UAAM,SAAS,oBAAoB,MAAM,MAAM;AAC/C,UAAM,cAAc,UAAU,QAAQ,aAAa;AAEnD,QAAI,MAAM,SAAS;AACjB,YAAM,YAAY,MAAM;AAAA,QACtB;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,UACE,UAAU,MAAM;AAAA,UAChB,YAAY,YAAY,OAAO,EAAE,MAAM,MAAM,MAAM,UAAU,MAAM,SAAS;AAAA,UAC5E,YAAY;AAAA,QACd;AAAA,MACF;AACA,YAAM,QAAQ,UAAU;AACxB,aAAO,aAAa,KAAK;AAAA,QACvB,OAAO,UAAU;AAAA,QACjB;AAAA,QACA,MAAM,YAAY,IAAI,MAAM;AAAA,QAC5B,UAAU,YAAY,UAAU,MAAM,SAAS,MAAM;AAAA,QACrD,YAAY,YAAY,IAAI,KAAK,IAAI,GAAG,KAAK,KAAK,QAAQ,MAAM,QAAQ,CAAC;AAAA,MAC3E,CAAC;AAAA,IACH;AAEA,UAAM,eAAe,YACjB,OACA,KAAK;AAAA,MACH;AAAA,MACA,KAAK,IAAI,MAAM,UAAU,MAAM,OAAO,MAAM,WAAW,MAAM,QAAQ;AAAA,IACvE;AACJ,UAAM,CAAC,YAAY,aAAa,IAAI,MAAM,QAAQ,IAAI;AAAA,MACpD,mBAAmB,IAAI,aAAa,KAAK,UAAU,iBAAiB,MAAM,UAAU;AAAA,QAClF,OAAO;AAAA,MACT,CAAC;AAAA,MACD;AAAA,QACE;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,UACE,UAAU,MAAM;AAAA,UAChB,gBAAgB;AAAA,UAChB,OAAO;AAAA,QACT;AAAA,MACF;AAAA,IACF,CAAC;AACD,UAAM,aAAa;AAAA,MACjB,GAAG,WAAW,OAAO,CAAC,QAAQ,CAAC,cAAc,UAAU,IAAI,IAAI,MAAM,CAAC;AAAA,MACtE,GAAG,cAAc;AAAA,IACnB;AACA,UAAM,eAAe,eAAe,aAAa,UAAU,GAAG,MAAM;AACpE,UAAM,QAAQ,iBAAiB,cAAc,MAAM,MAAM,MAAM,UAAU,SAAS;AAElF,WAAO,aAAa,KAAK;AAAA,MACvB,OAAO,MAAM;AAAA,MACb,OAAO,MAAM;AAAA,MACb,MAAM,MAAM;AAAA,MACZ,UAAU,MAAM;AAAA,MAChB,YAAY,MAAM;AAAA,IACpB,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,GAAG;AACxB,aAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,IAC3D;AACA,QAAI,eAAe,EAAE,UAAU;AAC7B,aAAO,aAAa,KAAK,EAAE,OAAO,UAAU,qCAAqC,mBAAmB,GAAG,SAAS,IAAI,OAAO,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC/I;AACA,WAAO,MAAM,2CAA2C,EAAE,IAAI,CAAC;AAC/D,WAAO,aAAa,KAAK,EAAE,OAAO,UAAU,kCAAkC,uBAAuB,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC3H;AACF;AAEA,MAAM,iBAAiB,EAAE,OAAO;AAAA,EAC9B,IAAI,EAAE,OAAO;AAAA,EACb,QAAQ,EAAE,OAAO;AAAA,EACjB,YAAY,EAAE,OAAO;AAAA,EACrB,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,YAAY,EAAE,QAAQ,EAAE,SAAS;AAAA,EACjC,cAAc,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC7C,cAAc,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC7C,iBAAiB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAChD,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC1C,kBAAkB,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS,EAAE,SAAS;AAAA,EACxE,oBAAoB,EAAE,OAAO,EAAE,SAAS;AAAA,EACxC,gBAAgB,EAAE,OAAO;AAAA,EACzB,UAAU,EAAE,OAAO;AAAA,EACnB,WAAW,EAAE,OAAO;AAAA,EACpB,cAAc,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC7C,eAAe,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS;AAAA,EAC1D,UAAU,EAAE,OAAO;AAAA,IACjB,IAAI,EAAE,OAAO,EAAE,SAAS;AAAA,IACxB,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,IACjC,MAAM,EAAE,OAAO,EAAE,SAAS;AAAA,EAC5B,CAAC;AACH,CAAC;AAEM,MAAM,UAA2B,2BAA2B;AAAA,EACjE,cAAc;AAAA,EACd;AAAA,EACA,oBAAoB,8BAA8B,cAAc;AAClE,CAAC;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { CrudHttpError, isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { parseBooleanToken } from '@open-mercato/shared/lib/boolean'\nimport { isUnrestrictedOrganizationScope } from '@open-mercato/shared/lib/auth/organizationAccess'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport type { QueryEngine } from '@open-mercato/shared/lib/query/types'\nimport { createCustomersCrudOpenApi, createPagedListResponseSchema } from '../../openapi'\nimport { resolveCustomerInteractionFeatureFlags } from '../../../lib/interactionFeatureFlags'\nimport { resolveCustomersRequestContext } from '../../../lib/interactionRequestContext'\nimport {\n  filterTodoRows,\n  listCanonicalTodoRows,\n  listLegacyTodoRows,\n  normalizeTodoSearch,\n  paginateTodoRows,\n  sortTodoRows,\n} from '../../../lib/todoCompatibility'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('customers')\n\nconst querySchema = z.object({\n  page: z.coerce.number().min(1).default(1),\n  pageSize: z.coerce.number().min(1).max(100).default(50),\n  search: z.string().optional(),\n  all: z.string().optional(),\n  entityId: z.string().uuid().optional(),\n})\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['customers.interactions.view'] },\n}\n\n// Per-source fetch cap used when compatibility mode must merge legacy todo\n// links and canonical task rows without DB-side union. Bounds memory on\n// tenants with large task history.\nconst MERGED_TASK_FETCH_CAP = 2000\n\nexport async function GET(request: Request): Promise<Response> {\n  const { translate } = await resolveTranslations()\n  try {\n    const { auth, em, organizationIds, container, selectedOrganizationId, scope } =\n      await resolveCustomersRequestContext(request)\n    const query = querySchema.parse(Object.fromEntries(new URL(request.url).searchParams))\n    const flags = await resolveCustomerInteractionFeatureFlags(container, auth.tenantId)\n    const exportAll = parseBooleanToken(query.all) === true\n    const isUnrestricted = isUnrestrictedOrganizationScope({\n      isSuperAdmin: auth.isSuperAdmin === true,\n      allowedOrganizationIds: scope?.allowedIds,\n    })\n    if (!isUnrestricted && (!organizationIds || organizationIds.length === 0)) {\n      logger.warn('customers.interactions.tasks.list collapsed organization scope', {\n        tenantId: auth.tenantId,\n        organizationIds,\n        selectedId: scope?.selectedId ?? null,\n        allowedIdsCount: scope?.allowedIds?.length ?? null,\n      })\n      return NextResponse.json({\n        items: [],\n        total: 0,\n        page: exportAll ? 1 : query.page,\n        pageSize: exportAll ? 0 : query.pageSize,\n        totalPages: 1,\n      })\n    }\n    const search = normalizeTodoSearch(query.search)\n    const queryEngine = container.resolve('queryEngine') as QueryEngine\n\n    if (flags.unified) {\n      const canonical = await listCanonicalTodoRows(\n        em,\n        container,\n        auth,\n        selectedOrganizationId,\n        organizationIds,\n        {\n          entityId: query.entityId,\n          pagination: exportAll ? null : { page: query.page, pageSize: query.pageSize },\n          searchText: search,\n          isUnrestricted,\n        },\n      )\n      const total = canonical.total\n      return NextResponse.json({\n        items: canonical.items,\n        total,\n        page: exportAll ? 1 : query.page,\n        pageSize: exportAll ? canonical.items.length : query.pageSize,\n        totalPages: exportAll ? 1 : Math.max(1, Math.ceil(total / query.pageSize)),\n      })\n    }\n\n    const legacyWindow = exportAll\n      ? null\n      : Math.min(\n          MERGED_TASK_FETCH_CAP,\n          Math.max(query.pageSize, query.page * query.pageSize + query.pageSize),\n        )\n    const [legacyRows, canonicalRows] = await Promise.all([\n      listLegacyTodoRows(em, queryEngine, auth.tenantId, organizationIds, query.entityId, {\n        limit: legacyWindow,\n        isUnrestricted,\n      }),\n      listCanonicalTodoRows(\n        em,\n        container,\n        auth,\n        selectedOrganizationId,\n        organizationIds,\n        {\n          entityId: query.entityId,\n          includeDeleted: true,\n          limit: legacyWindow,\n          isUnrestricted,\n        },\n      ),\n    ])\n    const mergedRows = [\n      ...legacyRows.filter((row) => !canonicalRows.bridgeIds.has(row.todoId)),\n      ...canonicalRows.items,\n    ]\n    const filteredRows = filterTodoRows(sortTodoRows(mergedRows), search)\n    const paged = paginateTodoRows(filteredRows, query.page, query.pageSize, exportAll)\n\n    return NextResponse.json({\n      items: paged.items,\n      total: paged.total,\n      page: paged.page,\n      pageSize: paged.pageSize,\n      totalPages: paged.totalPages,\n    })\n  } catch (err) {\n    if (isCrudHttpError(err)) {\n      return NextResponse.json(err.body, { status: err.status })\n    }\n    if (err instanceof z.ZodError) {\n      return NextResponse.json({ error: translate('customers.errors.validationFailed', 'Validation failed'), details: err.issues }, { status: 400 })\n    }\n    logger.error('customers.interactions.tasks.get failed', { err })\n    return NextResponse.json({ error: translate('customers.errors.internalError', 'Internal server error') }, { status: 500 })\n  }\n}\n\nconst todoItemSchema = z.object({\n  id: z.string(),\n  todoId: z.string(),\n  todoSource: z.string(),\n  todoTitle: z.string().nullable(),\n  todoIsDone: z.boolean().nullable(),\n  todoPriority: z.number().nullable().optional(),\n  todoSeverity: z.string().nullable().optional(),\n  todoDescription: z.string().nullable().optional(),\n  todoDueAt: z.string().nullable().optional(),\n  todoCustomValues: z.record(z.string(), z.unknown()).nullable().optional(),\n  todoOrganizationId: z.string().nullable(),\n  organizationId: z.string(),\n  tenantId: z.string(),\n  createdAt: z.string(),\n  externalHref: z.string().nullable().optional(),\n  _integrations: z.record(z.string(), z.unknown()).optional(),\n  customer: z.object({\n    id: z.string().nullable(),\n    displayName: z.string().nullable(),\n    kind: z.string().nullable(),\n  }),\n})\n\nexport const openApi: OpenApiRouteDoc = createCustomersCrudOpenApi({\n  resourceName: 'CustomerTask',\n  querySchema,\n  listResponseSchema: createPagedListResponseSchema(todoItemSchema),\n})\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAElB,SAAwB,uBAAuB;AAC/C,SAAS,yBAAyB;AAClC,SAAS,uCAAuC;AAChD,SAAS,2BAA2B;AAEpC,SAAS,4BAA4B,qCAAqC;AAC1E,SAAS,8CAA8C;AACvD,SAAS,sCAAsC;AAC/C;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,WAAW;AAEvC,MAAM,cAAc,EAAE,OAAO;AAAA,EAC3B,MAAM,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,QAAQ,CAAC;AAAA,EACxC,UAAU,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,QAAQ,EAAE;AAAA,EACtD,QAAQ,EAAE,OAAO,EAAE,SAAS;AAAA,EAC5B,KAAK,EAAE,OAAO,EAAE,SAAS;AAAA,EACzB,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AACvC,CAAC;AAEM,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,6BAA6B,EAAE;AAC7E;AAKA,MAAM,wBAAwB;AAE9B,eAAsB,IAAI,SAAqC;AAC7D,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,MAAI;AACF,UAAM,EAAE,MAAM,IAAI,iBAAiB,WAAW,wBAAwB,MAAM,IAC1E,MAAM,+BAA+B,OAAO;AAC9C,UAAM,QAAQ,YAAY,MAAM,OAAO,YAAY,IAAI,IAAI,QAAQ,GAAG,EAAE,YAAY,CAAC;AACrF,UAAM,QAAQ,MAAM,uCAAuC,WAAW,KAAK,QAAQ;AACnF,UAAM,YAAY,kBAAkB,MAAM,GAAG,MAAM;AACnD,UAAM,iBAAiB,gCAAgC;AAAA,MACrD,cAAc,KAAK,iBAAiB;AAAA,MACpC,wBAAwB,OAAO;AAAA,IACjC,CAAC;AACD,QAAI,CAAC,mBAAmB,CAAC,mBAAmB,gBAAgB,WAAW,IAAI;AACzE,aAAO,KAAK,kEAAkE;AAAA,QAC5E,UAAU,KAAK;AAAA,QACf;AAAA,QACA,YAAY,OAAO,cAAc;AAAA,QACjC,iBAAiB,OAAO,YAAY,UAAU;AAAA,MAChD,CAAC;AACD,aAAO,aAAa,KAAK;AAAA,QACvB,OAAO,CAAC;AAAA,QACR,OAAO;AAAA,QACP,MAAM,YAAY,IAAI,MAAM;AAAA,QAC5B,UAAU,YAAY,IAAI,MAAM;AAAA,QAChC,YAAY;AAAA,MACd,CAAC;AAAA,IACH;AACA,UAAM,SAAS,oBAAoB,MAAM,MAAM;AAC/C,UAAM,cAAc,UAAU,QAAQ,aAAa;AAEnD,QAAI,MAAM,SAAS;AACjB,YAAM,YAAY,MAAM;AAAA,QACtB;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,UACE,UAAU,MAAM;AAAA,UAChB,YAAY,YAAY,OAAO,EAAE,MAAM,MAAM,MAAM,UAAU,MAAM,SAAS;AAAA,UAC5E,YAAY;AAAA,UACZ;AAAA,QACF;AAAA,MACF;AACA,YAAM,QAAQ,UAAU;AACxB,aAAO,aAAa,KAAK;AAAA,QACvB,OAAO,UAAU;AAAA,QACjB;AAAA,QACA,MAAM,YAAY,IAAI,MAAM;AAAA,QAC5B,UAAU,YAAY,UAAU,MAAM,SAAS,MAAM;AAAA,QACrD,YAAY,YAAY,IAAI,KAAK,IAAI,GAAG,KAAK,KAAK,QAAQ,MAAM,QAAQ,CAAC;AAAA,MAC3E,CAAC;AAAA,IACH;AAEA,UAAM,eAAe,YACjB,OACA,KAAK;AAAA,MACH;AAAA,MACA,KAAK,IAAI,MAAM,UAAU,MAAM,OAAO,MAAM,WAAW,MAAM,QAAQ;AAAA,IACvE;AACJ,UAAM,CAAC,YAAY,aAAa,IAAI,MAAM,QAAQ,IAAI;AAAA,MACpD,mBAAmB,IAAI,aAAa,KAAK,UAAU,iBAAiB,MAAM,UAAU;AAAA,QAClF,OAAO;AAAA,QACP;AAAA,MACF,CAAC;AAAA,MACD;AAAA,QACE;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,UACE,UAAU,MAAM;AAAA,UAChB,gBAAgB;AAAA,UAChB,OAAO;AAAA,UACP;AAAA,QACF;AAAA,MACF;AAAA,IACF,CAAC;AACD,UAAM,aAAa;AAAA,MACjB,GAAG,WAAW,OAAO,CAAC,QAAQ,CAAC,cAAc,UAAU,IAAI,IAAI,MAAM,CAAC;AAAA,MACtE,GAAG,cAAc;AAAA,IACnB;AACA,UAAM,eAAe,eAAe,aAAa,UAAU,GAAG,MAAM;AACpE,UAAM,QAAQ,iBAAiB,cAAc,MAAM,MAAM,MAAM,UAAU,SAAS;AAElF,WAAO,aAAa,KAAK;AAAA,MACvB,OAAO,MAAM;AAAA,MACb,OAAO,MAAM;AAAA,MACb,MAAM,MAAM;AAAA,MACZ,UAAU,MAAM;AAAA,MAChB,YAAY,MAAM;AAAA,IACpB,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,GAAG;AACxB,aAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,IAC3D;AACA,QAAI,eAAe,EAAE,UAAU;AAC7B,aAAO,aAAa,KAAK,EAAE,OAAO,UAAU,qCAAqC,mBAAmB,GAAG,SAAS,IAAI,OAAO,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC/I;AACA,WAAO,MAAM,2CAA2C,EAAE,IAAI,CAAC;AAC/D,WAAO,aAAa,KAAK,EAAE,OAAO,UAAU,kCAAkC,uBAAuB,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC3H;AACF;AAEA,MAAM,iBAAiB,EAAE,OAAO;AAAA,EAC9B,IAAI,EAAE,OAAO;AAAA,EACb,QAAQ,EAAE,OAAO;AAAA,EACjB,YAAY,EAAE,OAAO;AAAA,EACrB,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,YAAY,EAAE,QAAQ,EAAE,SAAS;AAAA,EACjC,cAAc,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC7C,cAAc,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC7C,iBAAiB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAChD,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC1C,kBAAkB,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS,EAAE,SAAS;AAAA,EACxE,oBAAoB,EAAE,OAAO,EAAE,SAAS;AAAA,EACxC,gBAAgB,EAAE,OAAO;AAAA,EACzB,UAAU,EAAE,OAAO;AAAA,EACnB,WAAW,EAAE,OAAO;AAAA,EACpB,cAAc,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC7C,eAAe,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS;AAAA,EAC1D,UAAU,EAAE,OAAO;AAAA,IACjB,IAAI,EAAE,OAAO,EAAE,SAAS;AAAA,IACxB,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,IACjC,MAAM,EAAE,OAAO,EAAE,SAAS;AAAA,EAC5B,CAAC;AACH,CAAC;AAEM,MAAM,UAA2B,2BAA2B;AAAA,EACjE,cAAc;AAAA,EACd;AAAA,EACA,oBAAoB,8BAA8B,cAAc;AAClE,CAAC;",
   "names": []
 }

package/dist/modules/customers/api/todos/route.js

@@ -2,6 +2,7 @@ import { NextResponse } from "next/server";
 import { z } from "zod";
 import { isCrudHttpError, notFound } from "@open-mercato/shared/lib/crud/errors";
 import { parseBooleanToken } from "@open-mercato/shared/lib/boolean";
+import { isUnrestrictedOrganizationScope } from "@open-mercato/shared/lib/auth/organizationAccess";
 import { resolveTranslations } from "@open-mercato/shared/lib/i18n/server";
 import {
   runCrudMutationGuardAfterSuccess,
@@ -168,14 +169,35 @@ async function resolveCanonicalTodoTargetId(em, queryEngine, commandBus, command
 }
 async function GET(request) {
   try {
-    const { auth, em, organizationIds, container, selectedOrganizationId } = await resolveCustomersRequestContext(request);
+    const { auth, em, organizationIds, container, selectedOrganizationId, scope } = await resolveCustomersRequestContext(request);
     const query = querySchema.parse(Object.fromEntries(new URL(request.url).searchParams));
     const flags = await resolveCustomerInteractionFeatureFlags(container, auth.tenantId);
     if (!flags.legacyAdapters) {
       return await legacyAdaptersDisabledResponse();
     }
-    const queryEngine = container.resolve("queryEngine");
     const exportAll = parseBooleanToken(query.all) === true;
+    const isUnrestricted = isUnrestrictedOrganizationScope({
+      isSuperAdmin: auth.isSuperAdmin === true,
+      allowedOrganizationIds: scope?.allowedIds
+    });
+    if (!isUnrestricted && (!organizationIds || organizationIds.length === 0)) {
+      logger.warn("customers.todos.list collapsed organization scope", {
+        tenantId: auth.tenantId,
+        organizationIds,
+        selectedId: scope?.selectedId ?? null,
+        allowedIdsCount: scope?.allowedIds?.length ?? null
+      });
+      return withAdapterHeaders(
+        NextResponse.json({
+          items: [],
+          total: 0,
+          page: exportAll ? 1 : query.page,
+          pageSize: exportAll ? 0 : query.pageSize,
+          totalPages: 1
+        })
+      );
+    }
+    const queryEngine = container.resolve("queryEngine");
     const search = normalizeTodoSearch(query.search);
     if (flags.unified) {
       const canonical = await listCanonicalTodoRows(
@@ -187,7 +209,8 @@ async function GET(request) {
         {
           entityId: query.entityId,
           pagination: exportAll ? null : { page: query.page, pageSize: query.pageSize },
-          searchText: search
+          searchText: search,
+          isUnrestricted
         }
       );
       const total = canonical.total;
@@ -204,7 +227,8 @@ async function GET(request) {
     const legacyWindow = exportAll ? null : Math.min(MERGED_TODO_FETCH_CAP, Math.max(query.pageSize, query.page * query.pageSize + query.pageSize));
     const [legacyRows, canonicalRows] = await Promise.all([
       listLegacyTodoRows(em, queryEngine, auth.tenantId, organizationIds, query.entityId, {
-        limit: legacyWindow
+        limit: legacyWindow,
+        isUnrestricted
       }),
       listCanonicalTodoRows(
         em,
@@ -216,7 +240,8 @@ async function GET(request) {
           entityId: query.entityId,
           includeDeleted: true,
           source: CUSTOMER_INTERACTION_TODO_ADAPTER_SOURCE,
-          limit: legacyWindow
+          limit: legacyWindow,
+          isUnrestricted
         }
       )
     ]);

package/dist/modules/customers/api/todos/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../src/modules/customers/api/todos/route.ts"],
-  "sourcesContent": ["/**\n * @deprecated Use /api/customers/interactions instead. This route is maintained\n * as a compatibility bridge per SPEC-046b. Will be removed in a future release.\n */\nimport { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport type { CommandBus } from '@open-mercato/shared/lib/commands'\nimport { isCrudHttpError, notFound } from '@open-mercato/shared/lib/crud/errors'\nimport { parseBooleanToken } from '@open-mercato/shared/lib/boolean'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport {\n  runCrudMutationGuardAfterSuccess,\n  validateCrudMutationGuard,\n} from '@open-mercato/shared/lib/crud/mutation-guard'\nimport { readJsonSafe } from '@open-mercato/shared/lib/http/readJsonSafe'\nimport type { QueryEngine } from '@open-mercato/shared/lib/query/types'\nimport { createCustomersCrudOpenApi, createPagedListResponseSchema, defaultOkResponseSchema } from '../openapi'\nimport { CustomerInteraction, CustomerTodoLink } from '../../data/entities'\nimport { todoLinkWithTodoCreateSchema } from '../../data/validators'\nimport { withOperationMetadata } from '../../lib/operationMetadata'\nimport { resolveCustomerInteractionFeatureFlags } from '../../lib/interactionFeatureFlags'\nimport { resolveCustomersRequestContext } from '../../lib/interactionRequestContext'\nimport {\n  EXAMPLE_TODO_SOURCE,\n  CUSTOMER_INTERACTION_TODO_ADAPTER_SOURCE,\n} from '../../lib/interactionCompatibility'\nimport {\n  filterTodoRows,\n  listCanonicalTodoRows,\n  listLegacyTodoRows,\n  normalizeTodoSearch,\n  paginateTodoRows,\n  sortTodoRows,\n  resolveLegacyTodoDetails,\n} from '../../lib/todoCompatibility'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('customers')\n\nconst querySchema = z.object({\n  page: z.coerce.number().min(1).default(1),\n  pageSize: z.coerce.number().min(1).max(100).default(50),\n  search: z.string().optional(),\n  all: z.string().optional(),\n  entityId: z.string().uuid().optional(),\n})\n\nconst todoCreateBodySchema = todoLinkWithTodoCreateSchema.omit({\n  tenantId: true,\n  organizationId: true,\n}).passthrough()\n\nconst todoUpdateBodySchema = z\n  .object({\n    id: z.string().uuid(),\n    linkId: z.string().uuid().optional(),\n    title: z.string().trim().min(1).max(200).optional(),\n    isDone: z.boolean().optional(),\n    is_done: z.boolean().optional(),\n    customFields: z.record(z.string(), z.unknown()).optional(),\n    customValues: z.record(z.string(), z.unknown()).optional(),\n  })\n  .passthrough()\n\nconst todoDeleteBodySchema = z.object({\n  id: z.string().uuid(),\n  todoId: z.string().uuid().optional(),\n})\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['customers.view'] },\n  POST: { requireAuth: true, requireFeatures: ['customers.interactions.manage'] },\n  PUT: { requireAuth: true, requireFeatures: ['customers.interactions.manage'] },\n  DELETE: { requireAuth: true, requireFeatures: ['customers.interactions.manage'] },\n}\n\nconst DEPRECATION_HEADERS = {\n  Deprecation: 'true',\n  Sunset: 'Tue, 30 Jun 2026 00:00:00 GMT',\n  Link: '</api/customers/interactions>; rel=\"successor-version\"',\n}\n\n// Caps the per-source fetch window used by the deprecated merged (legacy +\n// canonical bridge) read path. Keeps memory bounded on tenants with large\n// todo history; deep-pagination beyond this window is not supported here \u2014\n// use /api/customers/interactions instead.\nconst MERGED_TODO_FETCH_CAP = 2000\n\nfunction resolveGuardUserId(auth: {\n  sub?: string | null\n  userId?: string | null\n  keyId?: string | null\n}): string {\n  if (typeof auth.sub === 'string' && auth.sub.trim().length > 0) return auth.sub\n  if (typeof auth.userId === 'string' && auth.userId.trim().length > 0) return auth.userId\n  if (typeof auth.keyId === 'string' && auth.keyId.trim().length > 0) return auth.keyId\n  return 'system'\n}\n\nfunction withAdapterHeaders(response: Response): Response {\n  const headers = new Headers(response.headers)\n  Object.entries(DEPRECATION_HEADERS).forEach(([key, value]) => headers.set(key, value))\n  return new Response(response.body, {\n    status: response.status,\n    statusText: response.statusText,\n    headers,\n  })\n}\n\nasync function legacyAdaptersDisabledResponse(): Promise<Response> {\n  const { translate } = await resolveTranslations()\n  return withAdapterHeaders(NextResponse.json(\n    {\n      error: translate(\n        'customers.interactions.legacyAdapters.disabled',\n        'This legacy adapter has been disabled. Use /api/customers/interactions instead.',\n      ),\n    },\n    { status: 410 },\n  ))\n}\n\nfunction normalizeTodoStatusInput(body: z.infer<typeof todoUpdateBodySchema>): boolean | undefined {\n  if (typeof body.isDone === 'boolean') return body.isDone\n  if (typeof body.is_done === 'boolean') return body.is_done\n  return undefined\n}\n\nfunction collectTodoCustomValues(\n  body: Record<string, unknown>,\n): Record<string, unknown> | undefined {\n  const direct =\n    body.customValues && typeof body.customValues === 'object'\n      ? { ...(body.customValues as Record<string, unknown>) }\n      : {}\n  if (body.todoCustom && typeof body.todoCustom === 'object') {\n    Object.assign(direct, body.todoCustom as Record<string, unknown>)\n  }\n  if (body.customFields && typeof body.customFields === 'object') {\n    Object.assign(direct, body.customFields as Record<string, unknown>)\n  }\n  return Object.keys(direct).length > 0 ? direct : undefined\n}\n\nasync function findLegacyTodoLink(\n  em: EntityManager,\n  target: { linkId?: string; todoId?: string },\n  tenantId: string,\n): Promise<CustomerTodoLink | null> {\n  if (target.linkId) {\n    const byLinkId = await em.findOne(CustomerTodoLink, { id: target.linkId, tenantId }, { populate: ['entity'] })\n    if (byLinkId) return byLinkId\n  }\n  if (target.todoId) {\n    return await em.findOne(CustomerTodoLink, { todoId: target.todoId, tenantId }, { populate: ['entity'] })\n  }\n  return null\n}\n\nasync function ensureCanonicalTodoBridge(\n  em: EntityManager,\n  queryEngine: QueryEngine,\n  commandBus: CommandBus,\n  commandContext: Parameters<CommandBus['execute']>[1]['ctx'],\n  link: CustomerTodoLink,\n): Promise<string> {\n  const existing = await em.findOne(CustomerInteraction, { id: link.todoId, tenantId: link.tenantId })\n  if (existing) return existing.id\n\n  const detailMap = await resolveLegacyTodoDetails(\n    queryEngine,\n    [link],\n    link.tenantId,\n    [link.organizationId],\n  )\n  const source =\n    typeof link.todoSource === 'string' && link.todoSource.trim().length > 0\n      ? link.todoSource\n      : EXAMPLE_TODO_SOURCE\n  const detail = detailMap.get(`${source}:${link.todoId}`) ?? null\n  const entityId = typeof link.entity === 'string' ? link.entity : link.entity.id\n\n  await commandBus.execute('customers.interactions.create', {\n    input: {\n      id: link.todoId,\n      tenantId: link.tenantId,\n      organizationId: link.organizationId,\n      entityId,\n      interactionType: 'task',\n      title: detail?.title ?? null,\n      body: detail?.description ?? null,\n      status: detail?.isDone ? 'done' : 'planned',\n      scheduledAt: detail?.dueAt ?? null,\n      priority: detail?.priority ?? null,\n      source: CUSTOMER_INTERACTION_TODO_ADAPTER_SOURCE,\n      ...(detail?.customValues ? { customValues: detail.customValues } : {}),\n    },\n    ctx: commandContext,\n  })\n\n  return link.todoId\n}\n\nasync function resolveCanonicalTodoTargetId(\n  em: EntityManager,\n  queryEngine: QueryEngine,\n  commandBus: CommandBus,\n  commandContext: Parameters<CommandBus['execute']>[1]['ctx'],\n  target: { todoId?: string; linkId?: string },\n  tenantId: string,\n): Promise<string> {\n  if (target.todoId) {\n    const interaction = await em.findOne(CustomerInteraction, { id: target.todoId, tenantId })\n    if (interaction) return interaction.id\n  }\n\n  const legacyLink = await findLegacyTodoLink(em, target, tenantId)\n  if (!legacyLink) {\n    if (!target.todoId) throw notFound('Todo not found')\n    return target.todoId\n  }\n\n  return ensureCanonicalTodoBridge(\n    em,\n    queryEngine,\n    commandBus,\n    commandContext,\n    legacyLink,\n  )\n}\n\nexport async function GET(request: Request): Promise<Response> {\n  try {\n    const { auth, em, organizationIds, container, selectedOrganizationId } =\n      await resolveCustomersRequestContext(request)\n    const query = querySchema.parse(Object.fromEntries(new URL(request.url).searchParams))\n    const flags = await resolveCustomerInteractionFeatureFlags(container, auth.tenantId)\n    if (!flags.legacyAdapters) {\n      return await legacyAdaptersDisabledResponse()\n    }\n    const queryEngine = container.resolve('queryEngine') as QueryEngine\n    const exportAll = parseBooleanToken(query.all) === true\n    const search = normalizeTodoSearch(query.search)\n\n    if (flags.unified) {\n      const canonical = await listCanonicalTodoRows(\n        em,\n        container,\n        auth,\n        selectedOrganizationId,\n        organizationIds,\n        {\n          entityId: query.entityId,\n          pagination: exportAll ? null : { page: query.page, pageSize: query.pageSize },\n          searchText: search,\n        },\n      )\n      const total = canonical.total\n      return withAdapterHeaders(\n        NextResponse.json({\n          items: canonical.items,\n          total,\n          page: exportAll ? 1 : query.page,\n          pageSize: exportAll ? canonical.items.length : query.pageSize,\n          totalPages: exportAll ? 1 : Math.max(1, Math.ceil(total / query.pageSize)),\n        }),\n      )\n    }\n\n    const legacyWindow = exportAll\n      ? null\n      : Math.min(MERGED_TODO_FETCH_CAP, Math.max(query.pageSize, query.page * query.pageSize + query.pageSize))\n    const [legacyRows, canonicalRows] = await Promise.all([\n      listLegacyTodoRows(em, queryEngine, auth.tenantId, organizationIds, query.entityId, {\n        limit: legacyWindow,\n      }),\n      listCanonicalTodoRows(\n        em,\n        container,\n        auth,\n        selectedOrganizationId,\n        organizationIds,\n        {\n          entityId: query.entityId,\n          includeDeleted: true,\n          source: CUSTOMER_INTERACTION_TODO_ADAPTER_SOURCE,\n          limit: legacyWindow,\n        },\n      ),\n    ])\n    const mergedRows = [\n      ...legacyRows.filter((row) => !canonicalRows.bridgeIds.has(row.todoId)),\n      ...canonicalRows.items,\n    ]\n    const filteredRows = filterTodoRows(sortTodoRows(mergedRows), search)\n    const paged = paginateTodoRows(filteredRows, query.page, query.pageSize, exportAll)\n\n    return withAdapterHeaders(\n      NextResponse.json({\n        items: paged.items,\n        total: paged.total,\n        page: paged.page,\n        pageSize: paged.pageSize,\n        totalPages: paged.totalPages,\n      }),\n    )\n  } catch (err) {\n    if (isCrudHttpError(err)) {\n      return withAdapterHeaders(NextResponse.json(err.body, { status: err.status }))\n    }\n    if (err instanceof z.ZodError) {\n      return withAdapterHeaders(\n        NextResponse.json({ error: 'Validation failed', details: err.issues }, { status: 400 }),\n      )\n    }\n    logger.error('customers.todos.get failed', { err })\n    return withAdapterHeaders(\n      NextResponse.json({ error: 'Internal server error' }, { status: 500 }),\n    )\n  }\n}\n\nexport async function POST(request: Request): Promise<Response> {\n  try {\n    const { commandContext, container, auth, selectedOrganizationId } = await resolveCustomersRequestContext(request)\n    const flags = await resolveCustomerInteractionFeatureFlags(container, auth.tenantId)\n    if (!flags.legacyAdapters) {\n      return await legacyAdaptersDisabledResponse()\n    }\n    const commandBus = container.resolve('commandBus') as CommandBus\n    const body = todoCreateBodySchema.parse(await readJsonSafe<Record<string, unknown>>(request, {}))\n    const guardUserId = resolveGuardUserId(auth)\n    const guardResult = await validateCrudMutationGuard(container, {\n      tenantId: auth.tenantId,\n      organizationId: selectedOrganizationId,\n      userId: guardUserId,\n      resourceKind: 'customers.todoLink',\n      resourceId: body.entityId,\n      operation: 'create',\n      requestMethod: request.method,\n      requestHeaders: request.headers,\n      mutationPayload: body,\n    })\n    if (guardResult && !guardResult.ok) {\n      return withAdapterHeaders(NextResponse.json(guardResult.body, { status: guardResult.status }))\n    }\n    const customValues = collectTodoCustomValues(body as Record<string, unknown>)\n\n    const { result, logEntry } = await commandBus.execute('customers.interactions.create', {\n      input: {\n        tenantId: auth.tenantId,\n        organizationId: selectedOrganizationId ?? auth.orgId,\n        entityId: body.entityId,\n        interactionType: 'task',\n        title: body.title,\n        status: body.is_done === true || body.isDone === true ? 'done' : 'planned',\n        source: CUSTOMER_INTERACTION_TODO_ADAPTER_SOURCE,\n        ...(customValues ? {\n          customValues,\n          priority: typeof customValues.priority === 'number' ? customValues.priority : null,\n          body: typeof customValues.description === 'string' ? customValues.description : null,\n          scheduledAt:\n            typeof customValues.due_at === 'string'\n              ? customValues.due_at\n              : typeof customValues.dueAt === 'string'\n                ? customValues.dueAt\n                : null,\n        } : {}),\n      },\n      ctx: commandContext,\n    })\n    if (guardResult?.ok && guardResult.shouldRunAfterSuccess) {\n      await runCrudMutationGuardAfterSuccess(container, {\n        tenantId: auth.tenantId,\n        organizationId: selectedOrganizationId,\n        userId: guardUserId,\n        resourceKind: 'customers.todoLink',\n        resourceId: body.entityId,\n        operation: 'create',\n        requestMethod: request.method,\n        requestHeaders: request.headers,\n        metadata: guardResult.metadata ?? null,\n      })\n    }\n\n    const interactionId =\n      result &&\n      typeof result === 'object' &&\n      'interactionId' in result &&\n      typeof result.interactionId === 'string'\n        ? result.interactionId\n        : result &&\n            typeof result === 'object' &&\n            'id' in result &&\n            typeof result.id === 'string'\n          ? result.id\n          : null\n    return withAdapterHeaders(\n      withOperationMetadata(\n        NextResponse.json(\n          {\n            linkId: interactionId,\n            todoId: interactionId,\n          },\n          { status: 201 },\n        ),\n        logEntry,\n        { resourceKind: 'customers.todoLink', resourceId: interactionId },\n      ),\n    )\n  } catch (err) {\n    if (isCrudHttpError(err)) {\n      return withAdapterHeaders(NextResponse.json(err.body, { status: err.status }))\n    }\n    if (err instanceof z.ZodError) {\n      return withAdapterHeaders(\n        NextResponse.json({ error: 'Validation failed', details: err.issues }, { status: 400 }),\n      )\n    }\n    logger.error('customers.todos.post failed', { err })\n    return withAdapterHeaders(\n      NextResponse.json({ error: 'Internal server error' }, { status: 500 }),\n    )\n  }\n}\n\nexport async function PUT(request: Request): Promise<Response> {\n  try {\n    const { commandContext, container, em, auth, selectedOrganizationId } = await resolveCustomersRequestContext(request)\n    const flags = await resolveCustomerInteractionFeatureFlags(container, auth.tenantId)\n    if (!flags.legacyAdapters) {\n      return await legacyAdaptersDisabledResponse()\n    }\n    const commandBus = container.resolve('commandBus') as CommandBus\n    const queryEngine = container.resolve('queryEngine') as QueryEngine\n    const body = todoUpdateBodySchema.parse(await readJsonSafe<Record<string, unknown>>(request, {}))\n    const guardUserId = resolveGuardUserId(auth)\n    const guardResult = await validateCrudMutationGuard(container, {\n      tenantId: auth.tenantId,\n      organizationId: selectedOrganizationId,\n      userId: guardUserId,\n      resourceKind: 'customers.todoLink',\n      resourceId: body.linkId ?? body.id,\n      operation: 'update',\n      requestMethod: request.method,\n      requestHeaders: request.headers,\n      mutationPayload: body,\n    })\n    if (guardResult && !guardResult.ok) {\n      return withAdapterHeaders(NextResponse.json(guardResult.body, { status: guardResult.status }))\n    }\n    const interactionId = flags.unified\n      ? body.id\n      : await resolveCanonicalTodoTargetId(\n          em,\n          queryEngine,\n          commandBus,\n          commandContext,\n          {\n            todoId: body.id,\n            linkId: body.linkId,\n          },\n          auth.tenantId,\n        )\n    const customValues = collectTodoCustomValues(body as Record<string, unknown>)\n    const nextDone = normalizeTodoStatusInput(body)\n\n    const { logEntry } = await commandBus.execute('customers.interactions.update', {\n      input: {\n        id: interactionId,\n        ...(body.title !== undefined ? { title: body.title } : {}),\n        ...(nextDone !== undefined ? { status: nextDone ? 'done' : 'planned' } : {}),\n        ...(customValues ? {\n          customValues,\n          priority: typeof customValues.priority === 'number' ? customValues.priority : null,\n          body: typeof customValues.description === 'string' ? customValues.description : null,\n          scheduledAt:\n            typeof customValues.due_at === 'string'\n              ? customValues.due_at\n              : typeof customValues.dueAt === 'string'\n                ? customValues.dueAt\n                : null,\n        } : {}),\n      },\n      ctx: commandContext,\n    })\n    if (guardResult?.ok && guardResult.shouldRunAfterSuccess) {\n      await runCrudMutationGuardAfterSuccess(container, {\n        tenantId: auth.tenantId,\n        organizationId: selectedOrganizationId,\n        userId: guardUserId,\n        resourceKind: 'customers.todoLink',\n        resourceId: body.linkId ?? body.id,\n        operation: 'update',\n        requestMethod: request.method,\n        requestHeaders: request.headers,\n        metadata: guardResult.metadata ?? null,\n      })\n    }\n\n    return withAdapterHeaders(\n      withOperationMetadata(\n        NextResponse.json({ ok: true }),\n        logEntry,\n        { resourceKind: 'customers.todoLink', resourceId: body.linkId ?? body.id },\n      ),\n    )\n  } catch (err) {\n    if (isCrudHttpError(err)) {\n      return withAdapterHeaders(NextResponse.json(err.body, { status: err.status }))\n    }\n    if (err instanceof z.ZodError) {\n      return withAdapterHeaders(\n        NextResponse.json({ error: 'Validation failed', details: err.issues }, { status: 400 }),\n      )\n    }\n    logger.error('customers.todos.put failed', { err })\n    return withAdapterHeaders(\n      NextResponse.json({ error: 'Internal server error' }, { status: 500 }),\n    )\n  }\n}\n\nexport async function DELETE(request: Request): Promise<Response> {\n  try {\n    const { commandContext, container, em, auth, selectedOrganizationId } = await resolveCustomersRequestContext(request)\n    const flags = await resolveCustomerInteractionFeatureFlags(container, auth.tenantId)\n    if (!flags.legacyAdapters) {\n      return await legacyAdaptersDisabledResponse()\n    }\n    const commandBus = container.resolve('commandBus') as CommandBus\n    const queryEngine = container.resolve('queryEngine') as QueryEngine\n    const body = todoDeleteBodySchema.parse(await readJsonSafe<Record<string, unknown>>(request, {}))\n    const guardUserId = resolveGuardUserId(auth)\n    const guardResult = await validateCrudMutationGuard(container, {\n      tenantId: auth.tenantId,\n      organizationId: selectedOrganizationId,\n      userId: guardUserId,\n      resourceKind: 'customers.todoLink',\n      resourceId: body.id,\n      operation: 'delete',\n      requestMethod: request.method,\n      requestHeaders: request.headers,\n      mutationPayload: body,\n    })\n    if (guardResult && !guardResult.ok) {\n      return withAdapterHeaders(NextResponse.json(guardResult.body, { status: guardResult.status }))\n    }\n    const interactionId = flags.unified\n      ? body.todoId ?? body.id\n      : await resolveCanonicalTodoTargetId(\n          em,\n          queryEngine,\n          commandBus,\n          commandContext,\n          {\n            linkId: body.id,\n            todoId: body.todoId ?? body.id,\n          },\n          auth.tenantId,\n        )\n\n    const { logEntry } = await commandBus.execute('customers.interactions.delete', {\n      input: { id: interactionId },\n      ctx: commandContext,\n    })\n    if (guardResult?.ok && guardResult.shouldRunAfterSuccess) {\n      await runCrudMutationGuardAfterSuccess(container, {\n        tenantId: auth.tenantId,\n        organizationId: selectedOrganizationId,\n        userId: guardUserId,\n        resourceKind: 'customers.todoLink',\n        resourceId: body.id,\n        operation: 'delete',\n        requestMethod: request.method,\n        requestHeaders: request.headers,\n        metadata: guardResult.metadata ?? null,\n      })\n    }\n\n    return withAdapterHeaders(\n      withOperationMetadata(\n        NextResponse.json({ ok: true }),\n        logEntry,\n        { resourceKind: 'customers.todoLink', resourceId: body.id },\n      ),\n    )\n  } catch (err) {\n    if (isCrudHttpError(err)) {\n      return withAdapterHeaders(NextResponse.json(err.body, { status: err.status }))\n    }\n    if (err instanceof z.ZodError) {\n      return withAdapterHeaders(\n        NextResponse.json({ error: 'Validation failed', details: err.issues }, { status: 400 }),\n      )\n    }\n    logger.error('customers.todos.delete failed', { err })\n    return withAdapterHeaders(\n      NextResponse.json({ error: 'Internal server error' }, { status: 500 }),\n    )\n  }\n}\n\nconst todoItemSchema = z.object({\n  id: z.string(),\n  todoId: z.string(),\n  todoSource: z.string(),\n  todoTitle: z.string().nullable(),\n  todoIsDone: z.boolean().nullable(),\n  todoPriority: z.number().nullable().optional(),\n  todoSeverity: z.string().nullable().optional(),\n  todoDescription: z.string().nullable().optional(),\n  todoDueAt: z.string().nullable().optional(),\n  todoCustomValues: z.record(z.string(), z.unknown()).nullable().optional(),\n  todoOrganizationId: z.string().nullable(),\n  todoUpdatedAt: z.string().nullable().optional(),\n  organizationId: z.string(),\n  tenantId: z.string(),\n  createdAt: z.string(),\n  externalHref: z.string().nullable().optional(),\n  _integrations: z.record(z.string(), z.unknown()).optional(),\n  customer: z.object({\n    id: z.string().nullable(),\n    displayName: z.string().nullable(),\n    kind: z.string().nullable(),\n  }),\n})\n\nconst todoCreateResponseSchema = z.object({\n  linkId: z.string().uuid().nullable(),\n  todoId: z.string().uuid().nullable(),\n})\n\nexport const openApi: OpenApiRouteDoc = createCustomersCrudOpenApi({\n  resourceName: 'CustomerTodo',\n  querySchema,\n  listResponseSchema: createPagedListResponseSchema(todoItemSchema),\n  create: {\n    schema: todoCreateBodySchema,\n    responseSchema: todoCreateResponseSchema,\n    description: 'DEPRECATED (sunset 2026-06-30): Creates a customer task. Use POST /api/customers/interactions instead.',\n  },\n  update: {\n    schema: todoUpdateBodySchema,\n    responseSchema: defaultOkResponseSchema,\n    description: 'DEPRECATED (sunset 2026-06-30): Updates a customer task. Use PUT /api/customers/interactions instead.',\n  },\n  del: {\n    schema: todoDeleteBodySchema,\n    responseSchema: defaultOkResponseSchema,\n    description: 'DEPRECATED (sunset 2026-06-30): Deletes a customer task. Use DELETE /api/customers/interactions instead.',\n  },\n})\n"],
-  "mappings": "AAIA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAIlB,SAAS,iBAAiB,gBAAgB;AAC1C,SAAS,yBAAyB;AAClC,SAAS,2BAA2B;AACpC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,oBAAoB;AAE7B,SAAS,4BAA4B,+BAA+B,+BAA+B;AACnG,SAAS,qBAAqB,wBAAwB;AACtD,SAAS,oCAAoC;AAC7C,SAAS,6BAA6B;AACtC,SAAS,8CAA8C;AACvD,SAAS,sCAAsC;AAC/C;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,WAAW;AAEvC,MAAM,cAAc,EAAE,OAAO;AAAA,EAC3B,MAAM,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,QAAQ,CAAC;AAAA,EACxC,UAAU,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,QAAQ,EAAE;AAAA,EACtD,QAAQ,EAAE,OAAO,EAAE,SAAS;AAAA,EAC5B,KAAK,EAAE,OAAO,EAAE,SAAS;AAAA,EACzB,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AACvC,CAAC;AAED,MAAM,uBAAuB,6BAA6B,KAAK;AAAA,EAC7D,UAAU;AAAA,EACV,gBAAgB;AAClB,CAAC,EAAE,YAAY;AAEf,MAAM,uBAAuB,EAC1B,OAAO;AAAA,EACN,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACnC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EAClD,QAAQ,EAAE,QAAQ,EAAE,SAAS;AAAA,EAC7B,SAAS,EAAE,QAAQ,EAAE,SAAS;AAAA,EAC9B,cAAc,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS;AAAA,EACzD,cAAc,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS;AAC3D,CAAC,EACA,YAAY;AAEf,MAAM,uBAAuB,EAAE,OAAO;AAAA,EACpC,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AACrC,CAAC;AAEM,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,gBAAgB,EAAE;AAAA,EAC9D,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,+BAA+B,EAAE;AAAA,EAC9E,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,+BAA+B,EAAE;AAAA,EAC7E,QAAQ,EAAE,aAAa,MAAM,iBAAiB,CAAC,+BAA+B,EAAE;AAClF;AAEA,MAAM,sBAAsB;AAAA,EAC1B,aAAa;AAAA,EACb,QAAQ;AAAA,EACR,MAAM;AACR;AAMA,MAAM,wBAAwB;AAE9B,SAAS,mBAAmB,MAIjB;AACT,MAAI,OAAO,KAAK,QAAQ,YAAY,KAAK,IAAI,KAAK,EAAE,SAAS,EAAG,QAAO,KAAK;AAC5E,MAAI,OAAO,KAAK,WAAW,YAAY,KAAK,OAAO,KAAK,EAAE,SAAS,EAAG,QAAO,KAAK;AAClF,MAAI,OAAO,KAAK,UAAU,YAAY,KAAK,MAAM,KAAK,EAAE,SAAS,EAAG,QAAO,KAAK;AAChF,SAAO;AACT;AAEA,SAAS,mBAAmB,UAA8B;AACxD,QAAM,UAAU,IAAI,QAAQ,SAAS,OAAO;AAC5C,SAAO,QAAQ,mBAAmB,EAAE,QAAQ,CAAC,CAAC,KAAK,KAAK,MAAM,QAAQ,IAAI,KAAK,KAAK,CAAC;AACrF,SAAO,IAAI,SAAS,SAAS,MAAM;AAAA,IACjC,QAAQ,SAAS;AAAA,IACjB,YAAY,SAAS;AAAA,IACrB;AAAA,EACF,CAAC;AACH;AAEA,eAAe,iCAAoD;AACjE,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,SAAO,mBAAmB,aAAa;AAAA,IACrC;AAAA,MACE,OAAO;AAAA,QACL;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IACA,EAAE,QAAQ,IAAI;AAAA,EAChB,CAAC;AACH;AAEA,SAAS,yBAAyB,MAAiE;AACjG,MAAI,OAAO,KAAK,WAAW,UAAW,QAAO,KAAK;AAClD,MAAI,OAAO,KAAK,YAAY,UAAW,QAAO,KAAK;AACnD,SAAO;AACT;AAEA,SAAS,wBACP,MACqC;AACrC,QAAM,SACJ,KAAK,gBAAgB,OAAO,KAAK,iBAAiB,WAC9C,EAAE,GAAI,KAAK,aAAyC,IACpD,CAAC;AACP,MAAI,KAAK,cAAc,OAAO,KAAK,eAAe,UAAU;AAC1D,WAAO,OAAO,QAAQ,KAAK,UAAqC;AAAA,EAClE;AACA,MAAI,KAAK,gBAAgB,OAAO,KAAK,iBAAiB,UAAU;AAC9D,WAAO,OAAO,QAAQ,KAAK,YAAuC;AAAA,EACpE;AACA,SAAO,OAAO,KAAK,MAAM,EAAE,SAAS,IAAI,SAAS;AACnD;AAEA,eAAe,mBACb,IACA,QACA,UACkC;AAClC,MAAI,OAAO,QAAQ;AACjB,UAAM,WAAW,MAAM,GAAG,QAAQ,kBAAkB,EAAE,IAAI,OAAO,QAAQ,SAAS,GAAG,EAAE,UAAU,CAAC,QAAQ,EAAE,CAAC;AAC7G,QAAI,SAAU,QAAO;AAAA,EACvB;AACA,MAAI,OAAO,QAAQ;AACjB,WAAO,MAAM,GAAG,QAAQ,kBAAkB,EAAE,QAAQ,OAAO,QAAQ,SAAS,GAAG,EAAE,UAAU,CAAC,QAAQ,EAAE,CAAC;AAAA,EACzG;AACA,SAAO;AACT;AAEA,eAAe,0BACb,IACA,aACA,YACA,gBACA,MACiB;AACjB,QAAM,WAAW,MAAM,GAAG,QAAQ,qBAAqB,EAAE,IAAI,KAAK,QAAQ,UAAU,KAAK,SAAS,CAAC;AACnG,MAAI,SAAU,QAAO,SAAS;AAE9B,QAAM,YAAY,MAAM;AAAA,IACtB;AAAA,IACA,CAAC,IAAI;AAAA,IACL,KAAK;AAAA,IACL,CAAC,KAAK,cAAc;AAAA,EACtB;AACA,QAAM,SACJ,OAAO,KAAK,eAAe,YAAY,KAAK,WAAW,KAAK,EAAE,SAAS,IACnE,KAAK,aACL;AACN,QAAM,SAAS,UAAU,IAAI,GAAG,MAAM,IAAI,KAAK,MAAM,EAAE,KAAK;AAC5D,QAAM,WAAW,OAAO,KAAK,WAAW,WAAW,KAAK,SAAS,KAAK,OAAO;AAE7E,QAAM,WAAW,QAAQ,iCAAiC;AAAA,IACxD,OAAO;AAAA,MACL,IAAI,KAAK;AAAA,MACT,UAAU,KAAK;AAAA,MACf,gBAAgB,KAAK;AAAA,MACrB;AAAA,MACA,iBAAiB;AAAA,MACjB,OAAO,QAAQ,SAAS;AAAA,MACxB,MAAM,QAAQ,eAAe;AAAA,MAC7B,QAAQ,QAAQ,SAAS,SAAS;AAAA,MAClC,aAAa,QAAQ,SAAS;AAAA,MAC9B,UAAU,QAAQ,YAAY;AAAA,MAC9B,QAAQ;AAAA,MACR,GAAI,QAAQ,eAAe,EAAE,cAAc,OAAO,aAAa,IAAI,CAAC;AAAA,IACtE;AAAA,IACA,KAAK;AAAA,EACP,CAAC;AAED,SAAO,KAAK;AACd;AAEA,eAAe,6BACb,IACA,aACA,YACA,gBACA,QACA,UACiB;AACjB,MAAI,OAAO,QAAQ;AACjB,UAAM,cAAc,MAAM,GAAG,QAAQ,qBAAqB,EAAE,IAAI,OAAO,QAAQ,SAAS,CAAC;AACzF,QAAI,YAAa,QAAO,YAAY;AAAA,EACtC;AAEA,QAAM,aAAa,MAAM,mBAAmB,IAAI,QAAQ,QAAQ;AAChE,MAAI,CAAC,YAAY;AACf,QAAI,CAAC,OAAO,OAAQ,OAAM,SAAS,gBAAgB;AACnD,WAAO,OAAO;AAAA,EAChB;AAEA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;AAEA,eAAsB,IAAI,SAAqC;AAC7D,MAAI;AACF,UAAM,EAAE,MAAM,IAAI,iBAAiB,WAAW,uBAAuB,IACnE,MAAM,+BAA+B,OAAO;AAC9C,UAAM,QAAQ,YAAY,MAAM,OAAO,YAAY,IAAI,IAAI,QAAQ,GAAG,EAAE,YAAY,CAAC;AACrF,UAAM,QAAQ,MAAM,uCAAuC,WAAW,KAAK,QAAQ;AACnF,QAAI,CAAC,MAAM,gBAAgB;AACzB,aAAO,MAAM,+BAA+B;AAAA,IAC9C;AACA,UAAM,cAAc,UAAU,QAAQ,aAAa;AACnD,UAAM,YAAY,kBAAkB,MAAM,GAAG,MAAM;AACnD,UAAM,SAAS,oBAAoB,MAAM,MAAM;AAE/C,QAAI,MAAM,SAAS;AACjB,YAAM,YAAY,MAAM;AAAA,QACtB;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,UACE,UAAU,MAAM;AAAA,UAChB,YAAY,YAAY,OAAO,EAAE,MAAM,MAAM,MAAM,UAAU,MAAM,SAAS;AAAA,UAC5E,YAAY;AAAA,QACd;AAAA,MACF;AACA,YAAM,QAAQ,UAAU;AACxB,aAAO;AAAA,QACL,aAAa,KAAK;AAAA,UAChB,OAAO,UAAU;AAAA,UACjB;AAAA,UACA,MAAM,YAAY,IAAI,MAAM;AAAA,UAC5B,UAAU,YAAY,UAAU,MAAM,SAAS,MAAM;AAAA,UACrD,YAAY,YAAY,IAAI,KAAK,IAAI,GAAG,KAAK,KAAK,QAAQ,MAAM,QAAQ,CAAC;AAAA,QAC3E,CAAC;AAAA,MACH;AAAA,IACF;AAEA,UAAM,eAAe,YACjB,OACA,KAAK,IAAI,uBAAuB,KAAK,IAAI,MAAM,UAAU,MAAM,OAAO,MAAM,WAAW,MAAM,QAAQ,CAAC;AAC1G,UAAM,CAAC,YAAY,aAAa,IAAI,MAAM,QAAQ,IAAI;AAAA,MACpD,mBAAmB,IAAI,aAAa,KAAK,UAAU,iBAAiB,MAAM,UAAU;AAAA,QAClF,OAAO;AAAA,MACT,CAAC;AAAA,MACD;AAAA,QACE;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,UACE,UAAU,MAAM;AAAA,UAChB,gBAAgB;AAAA,UAChB,QAAQ;AAAA,UACR,OAAO;AAAA,QACT;AAAA,MACF;AAAA,IACF,CAAC;AACD,UAAM,aAAa;AAAA,MACjB,GAAG,WAAW,OAAO,CAAC,QAAQ,CAAC,cAAc,UAAU,IAAI,IAAI,MAAM,CAAC;AAAA,MACtE,GAAG,cAAc;AAAA,IACnB;AACA,UAAM,eAAe,eAAe,aAAa,UAAU,GAAG,MAAM;AACpE,UAAM,QAAQ,iBAAiB,cAAc,MAAM,MAAM,MAAM,UAAU,SAAS;AAElF,WAAO;AAAA,MACL,aAAa,KAAK;AAAA,QAChB,OAAO,MAAM;AAAA,QACb,OAAO,MAAM;AAAA,QACb,MAAM,MAAM;AAAA,QACZ,UAAU,MAAM;AAAA,QAChB,YAAY,MAAM;AAAA,MACpB,CAAC;AAAA,IACH;AAAA,EACF,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,GAAG;AACxB,aAAO,mBAAmB,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC,CAAC;AAAA,IAC/E;AACA,QAAI,eAAe,EAAE,UAAU;AAC7B,aAAO;AAAA,QACL,aAAa,KAAK,EAAE,OAAO,qBAAqB,SAAS,IAAI,OAAO,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,MACxF;AAAA,IACF;AACA,WAAO,MAAM,8BAA8B,EAAE,IAAI,CAAC;AAClD,WAAO;AAAA,MACL,aAAa,KAAK,EAAE,OAAO,wBAAwB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACvE;AAAA,EACF;AACF;AAEA,eAAsB,KAAK,SAAqC;AAC9D,MAAI;AACF,UAAM,EAAE,gBAAgB,WAAW,MAAM,uBAAuB,IAAI,MAAM,+BAA+B,OAAO;AAChH,UAAM,QAAQ,MAAM,uCAAuC,WAAW,KAAK,QAAQ;AACnF,QAAI,CAAC,MAAM,gBAAgB;AACzB,aAAO,MAAM,+BAA+B;AAAA,IAC9C;AACA,UAAM,aAAa,UAAU,QAAQ,YAAY;AACjD,UAAM,OAAO,qBAAqB,MAAM,MAAM,aAAsC,SAAS,CAAC,CAAC,CAAC;AAChG,UAAM,cAAc,mBAAmB,IAAI;AAC3C,UAAM,cAAc,MAAM,0BAA0B,WAAW;AAAA,MAC7D,UAAU,KAAK;AAAA,MACf,gBAAgB;AAAA,MAChB,QAAQ;AAAA,MACR,cAAc;AAAA,MACd,YAAY,KAAK;AAAA,MACjB,WAAW;AAAA,MACX,eAAe,QAAQ;AAAA,MACvB,gBAAgB,QAAQ;AAAA,MACxB,iBAAiB;AAAA,IACnB,CAAC;AACD,QAAI,eAAe,CAAC,YAAY,IAAI;AAClC,aAAO,mBAAmB,aAAa,KAAK,YAAY,MAAM,EAAE,QAAQ,YAAY,OAAO,CAAC,CAAC;AAAA,IAC/F;AACA,UAAM,eAAe,wBAAwB,IAA+B;AAE5E,UAAM,EAAE,QAAQ,SAAS,IAAI,MAAM,WAAW,QAAQ,iCAAiC;AAAA,MACrF,OAAO;AAAA,QACL,UAAU,KAAK;AAAA,QACf,gBAAgB,0BAA0B,KAAK;AAAA,QAC/C,UAAU,KAAK;AAAA,QACf,iBAAiB;AAAA,QACjB,OAAO,KAAK;AAAA,QACZ,QAAQ,KAAK,YAAY,QAAQ,KAAK,WAAW,OAAO,SAAS;AAAA,QACjE,QAAQ;AAAA,QACR,GAAI,eAAe;AAAA,UACjB;AAAA,UACA,UAAU,OAAO,aAAa,aAAa,WAAW,aAAa,WAAW;AAAA,UAC9E,MAAM,OAAO,aAAa,gBAAgB,WAAW,aAAa,cAAc;AAAA,UAChF,aACE,OAAO,aAAa,WAAW,WAC3B,aAAa,SACb,OAAO,aAAa,UAAU,WAC5B,aAAa,QACb;AAAA,QACV,IAAI,CAAC;AAAA,MACP;AAAA,MACA,KAAK;AAAA,IACP,CAAC;AACD,QAAI,aAAa,MAAM,YAAY,uBAAuB;AACxD,YAAM,iCAAiC,WAAW;AAAA,QAChD,UAAU,KAAK;AAAA,QACf,gBAAgB;AAAA,QAChB,QAAQ;AAAA,QACR,cAAc;AAAA,QACd,YAAY,KAAK;AAAA,QACjB,WAAW;AAAA,QACX,eAAe,QAAQ;AAAA,QACvB,gBAAgB,QAAQ;AAAA,QACxB,UAAU,YAAY,YAAY;AAAA,MACpC,CAAC;AAAA,IACH;AAEA,UAAM,gBACJ,UACA,OAAO,WAAW,YAClB,mBAAmB,UACnB,OAAO,OAAO,kBAAkB,WAC5B,OAAO,gBACP,UACE,OAAO,WAAW,YAClB,QAAQ,UACR,OAAO,OAAO,OAAO,WACrB,OAAO,KACP;AACR,WAAO;AAAA,MACL;AAAA,QACE,aAAa;AAAA,UACX;AAAA,YACE,QAAQ;AAAA,YACR,QAAQ;AAAA,UACV;AAAA,UACA,EAAE,QAAQ,IAAI;AAAA,QAChB;AAAA,QACA;AAAA,QACA,EAAE,cAAc,sBAAsB,YAAY,cAAc;AAAA,MAClE;AAAA,IACF;AAAA,EACF,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,GAAG;AACxB,aAAO,mBAAmB,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC,CAAC;AAAA,IAC/E;AACA,QAAI,eAAe,EAAE,UAAU;AAC7B,aAAO;AAAA,QACL,aAAa,KAAK,EAAE,OAAO,qBAAqB,SAAS,IAAI,OAAO,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,MACxF;AAAA,IACF;AACA,WAAO,MAAM,+BAA+B,EAAE,IAAI,CAAC;AACnD,WAAO;AAAA,MACL,aAAa,KAAK,EAAE,OAAO,wBAAwB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACvE;AAAA,EACF;AACF;AAEA,eAAsB,IAAI,SAAqC;AAC7D,MAAI;AACF,UAAM,EAAE,gBAAgB,WAAW,IAAI,MAAM,uBAAuB,IAAI,MAAM,+BAA+B,OAAO;AACpH,UAAM,QAAQ,MAAM,uCAAuC,WAAW,KAAK,QAAQ;AACnF,QAAI,CAAC,MAAM,gBAAgB;AACzB,aAAO,MAAM,+BAA+B;AAAA,IAC9C;AACA,UAAM,aAAa,UAAU,QAAQ,YAAY;AACjD,UAAM,cAAc,UAAU,QAAQ,aAAa;AACnD,UAAM,OAAO,qBAAqB,MAAM,MAAM,aAAsC,SAAS,CAAC,CAAC,CAAC;AAChG,UAAM,cAAc,mBAAmB,IAAI;AAC3C,UAAM,cAAc,MAAM,0BAA0B,WAAW;AAAA,MAC7D,UAAU,KAAK;AAAA,MACf,gBAAgB;AAAA,MAChB,QAAQ;AAAA,MACR,cAAc;AAAA,MACd,YAAY,KAAK,UAAU,KAAK;AAAA,MAChC,WAAW;AAAA,MACX,eAAe,QAAQ;AAAA,MACvB,gBAAgB,QAAQ;AAAA,MACxB,iBAAiB;AAAA,IACnB,CAAC;AACD,QAAI,eAAe,CAAC,YAAY,IAAI;AAClC,aAAO,mBAAmB,aAAa,KAAK,YAAY,MAAM,EAAE,QAAQ,YAAY,OAAO,CAAC,CAAC;AAAA,IAC/F;AACA,UAAM,gBAAgB,MAAM,UACxB,KAAK,KACL,MAAM;AAAA,MACJ;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,QACE,QAAQ,KAAK;AAAA,QACb,QAAQ,KAAK;AAAA,MACf;AAAA,MACA,KAAK;AAAA,IACP;AACJ,UAAM,eAAe,wBAAwB,IAA+B;AAC5E,UAAM,WAAW,yBAAyB,IAAI;AAE9C,UAAM,EAAE,SAAS,IAAI,MAAM,WAAW,QAAQ,iCAAiC;AAAA,MAC7E,OAAO;AAAA,QACL,IAAI;AAAA,QACJ,GAAI,KAAK,UAAU,SAAY,EAAE,OAAO,KAAK,MAAM,IAAI,CAAC;AAAA,QACxD,GAAI,aAAa,SAAY,EAAE,QAAQ,WAAW,SAAS,UAAU,IAAI,CAAC;AAAA,QAC1E,GAAI,eAAe;AAAA,UACjB;AAAA,UACA,UAAU,OAAO,aAAa,aAAa,WAAW,aAAa,WAAW;AAAA,UAC9E,MAAM,OAAO,aAAa,gBAAgB,WAAW,aAAa,cAAc;AAAA,UAChF,aACE,OAAO,aAAa,WAAW,WAC3B,aAAa,SACb,OAAO,aAAa,UAAU,WAC5B,aAAa,QACb;AAAA,QACV,IAAI,CAAC;AAAA,MACP;AAAA,MACA,KAAK;AAAA,IACP,CAAC;AACD,QAAI,aAAa,MAAM,YAAY,uBAAuB;AACxD,YAAM,iCAAiC,WAAW;AAAA,QAChD,UAAU,KAAK;AAAA,QACf,gBAAgB;AAAA,QAChB,QAAQ;AAAA,QACR,cAAc;AAAA,QACd,YAAY,KAAK,UAAU,KAAK;AAAA,QAChC,WAAW;AAAA,QACX,eAAe,QAAQ;AAAA,QACvB,gBAAgB,QAAQ;AAAA,QACxB,UAAU,YAAY,YAAY;AAAA,MACpC,CAAC;AAAA,IACH;AAEA,WAAO;AAAA,MACL;AAAA,QACE,aAAa,KAAK,EAAE,IAAI,KAAK,CAAC;AAAA,QAC9B;AAAA,QACA,EAAE,cAAc,sBAAsB,YAAY,KAAK,UAAU,KAAK,GAAG;AAAA,MAC3E;AAAA,IACF;AAAA,EACF,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,GAAG;AACxB,aAAO,mBAAmB,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC,CAAC;AAAA,IAC/E;AACA,QAAI,eAAe,EAAE,UAAU;AAC7B,aAAO;AAAA,QACL,aAAa,KAAK,EAAE,OAAO,qBAAqB,SAAS,IAAI,OAAO,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,MACxF;AAAA,IACF;AACA,WAAO,MAAM,8BAA8B,EAAE,IAAI,CAAC;AAClD,WAAO;AAAA,MACL,aAAa,KAAK,EAAE,OAAO,wBAAwB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACvE;AAAA,EACF;AACF;AAEA,eAAsB,OAAO,SAAqC;AAChE,MAAI;AACF,UAAM,EAAE,gBAAgB,WAAW,IAAI,MAAM,uBAAuB,IAAI,MAAM,+BAA+B,OAAO;AACpH,UAAM,QAAQ,MAAM,uCAAuC,WAAW,KAAK,QAAQ;AACnF,QAAI,CAAC,MAAM,gBAAgB;AACzB,aAAO,MAAM,+BAA+B;AAAA,IAC9C;AACA,UAAM,aAAa,UAAU,QAAQ,YAAY;AACjD,UAAM,cAAc,UAAU,QAAQ,aAAa;AACnD,UAAM,OAAO,qBAAqB,MAAM,MAAM,aAAsC,SAAS,CAAC,CAAC,CAAC;AAChG,UAAM,cAAc,mBAAmB,IAAI;AAC3C,UAAM,cAAc,MAAM,0BAA0B,WAAW;AAAA,MAC7D,UAAU,KAAK;AAAA,MACf,gBAAgB;AAAA,MAChB,QAAQ;AAAA,MACR,cAAc;AAAA,MACd,YAAY,KAAK;AAAA,MACjB,WAAW;AAAA,MACX,eAAe,QAAQ;AAAA,MACvB,gBAAgB,QAAQ;AAAA,MACxB,iBAAiB;AAAA,IACnB,CAAC;AACD,QAAI,eAAe,CAAC,YAAY,IAAI;AAClC,aAAO,mBAAmB,aAAa,KAAK,YAAY,MAAM,EAAE,QAAQ,YAAY,OAAO,CAAC,CAAC;AAAA,IAC/F;AACA,UAAM,gBAAgB,MAAM,UACxB,KAAK,UAAU,KAAK,KACpB,MAAM;AAAA,MACJ;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,QACE,QAAQ,KAAK;AAAA,QACb,QAAQ,KAAK,UAAU,KAAK;AAAA,MAC9B;AAAA,MACA,KAAK;AAAA,IACP;AAEJ,UAAM,EAAE,SAAS,IAAI,MAAM,WAAW,QAAQ,iCAAiC;AAAA,MAC7E,OAAO,EAAE,IAAI,cAAc;AAAA,MAC3B,KAAK;AAAA,IACP,CAAC;AACD,QAAI,aAAa,MAAM,YAAY,uBAAuB;AACxD,YAAM,iCAAiC,WAAW;AAAA,QAChD,UAAU,KAAK;AAAA,QACf,gBAAgB;AAAA,QAChB,QAAQ;AAAA,QACR,cAAc;AAAA,QACd,YAAY,KAAK;AAAA,QACjB,WAAW;AAAA,QACX,eAAe,QAAQ;AAAA,QACvB,gBAAgB,QAAQ;AAAA,QACxB,UAAU,YAAY,YAAY;AAAA,MACpC,CAAC;AAAA,IACH;AAEA,WAAO;AAAA,MACL;AAAA,QACE,aAAa,KAAK,EAAE,IAAI,KAAK,CAAC;AAAA,QAC9B;AAAA,QACA,EAAE,cAAc,sBAAsB,YAAY,KAAK,GAAG;AAAA,MAC5D;AAAA,IACF;AAAA,EACF,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,GAAG;AACxB,aAAO,mBAAmB,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC,CAAC;AAAA,IAC/E;AACA,QAAI,eAAe,EAAE,UAAU;AAC7B,aAAO;AAAA,QACL,aAAa,KAAK,EAAE,OAAO,qBAAqB,SAAS,IAAI,OAAO,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,MACxF;AAAA,IACF;AACA,WAAO,MAAM,iCAAiC,EAAE,IAAI,CAAC;AACrD,WAAO;AAAA,MACL,aAAa,KAAK,EAAE,OAAO,wBAAwB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACvE;AAAA,EACF;AACF;AAEA,MAAM,iBAAiB,EAAE,OAAO;AAAA,EAC9B,IAAI,EAAE,OAAO;AAAA,EACb,QAAQ,EAAE,OAAO;AAAA,EACjB,YAAY,EAAE,OAAO;AAAA,EACrB,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,YAAY,EAAE,QAAQ,EAAE,SAAS;AAAA,EACjC,cAAc,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC7C,cAAc,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC7C,iBAAiB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAChD,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC1C,kBAAkB,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS,EAAE,SAAS;AAAA,EACxE,oBAAoB,EAAE,OAAO,EAAE,SAAS;AAAA,EACxC,eAAe,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC9C,gBAAgB,EAAE,OAAO;AAAA,EACzB,UAAU,EAAE,OAAO;AAAA,EACnB,WAAW,EAAE,OAAO;AAAA,EACpB,cAAc,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC7C,eAAe,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS;AAAA,EAC1D,UAAU,EAAE,OAAO;AAAA,IACjB,IAAI,EAAE,OAAO,EAAE,SAAS;AAAA,IACxB,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,IACjC,MAAM,EAAE,OAAO,EAAE,SAAS;AAAA,EAC5B,CAAC;AACH,CAAC;AAED,MAAM,2BAA2B,EAAE,OAAO;AAAA,EACxC,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACnC,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AACrC,CAAC;AAEM,MAAM,UAA2B,2BAA2B;AAAA,EACjE,cAAc;AAAA,EACd;AAAA,EACA,oBAAoB,8BAA8B,cAAc;AAAA,EAChE,QAAQ;AAAA,IACN,QAAQ;AAAA,IACR,gBAAgB;AAAA,IAChB,aAAa;AAAA,EACf;AAAA,EACA,QAAQ;AAAA,IACN,QAAQ;AAAA,IACR,gBAAgB;AAAA,IAChB,aAAa;AAAA,EACf;AAAA,EACA,KAAK;AAAA,IACH,QAAQ;AAAA,IACR,gBAAgB;AAAA,IAChB,aAAa;AAAA,EACf;AACF,CAAC;",
+  "sourcesContent": ["/**\n * @deprecated Use /api/customers/interactions instead. This route is maintained\n * as a compatibility bridge per SPEC-046b. Will be removed in a future release.\n */\nimport { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport type { CommandBus } from '@open-mercato/shared/lib/commands'\nimport { isCrudHttpError, notFound } from '@open-mercato/shared/lib/crud/errors'\nimport { parseBooleanToken } from '@open-mercato/shared/lib/boolean'\nimport { isUnrestrictedOrganizationScope } from '@open-mercato/shared/lib/auth/organizationAccess'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport {\n  runCrudMutationGuardAfterSuccess,\n  validateCrudMutationGuard,\n} from '@open-mercato/shared/lib/crud/mutation-guard'\nimport { readJsonSafe } from '@open-mercato/shared/lib/http/readJsonSafe'\nimport type { QueryEngine } from '@open-mercato/shared/lib/query/types'\nimport { createCustomersCrudOpenApi, createPagedListResponseSchema, defaultOkResponseSchema } from '../openapi'\nimport { CustomerInteraction, CustomerTodoLink } from '../../data/entities'\nimport { todoLinkWithTodoCreateSchema } from '../../data/validators'\nimport { withOperationMetadata } from '../../lib/operationMetadata'\nimport { resolveCustomerInteractionFeatureFlags } from '../../lib/interactionFeatureFlags'\nimport { resolveCustomersRequestContext } from '../../lib/interactionRequestContext'\nimport {\n  EXAMPLE_TODO_SOURCE,\n  CUSTOMER_INTERACTION_TODO_ADAPTER_SOURCE,\n} from '../../lib/interactionCompatibility'\nimport {\n  filterTodoRows,\n  listCanonicalTodoRows,\n  listLegacyTodoRows,\n  normalizeTodoSearch,\n  paginateTodoRows,\n  sortTodoRows,\n  resolveLegacyTodoDetails,\n} from '../../lib/todoCompatibility'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('customers')\n\nconst querySchema = z.object({\n  page: z.coerce.number().min(1).default(1),\n  pageSize: z.coerce.number().min(1).max(100).default(50),\n  search: z.string().optional(),\n  all: z.string().optional(),\n  entityId: z.string().uuid().optional(),\n})\n\nconst todoCreateBodySchema = todoLinkWithTodoCreateSchema.omit({\n  tenantId: true,\n  organizationId: true,\n}).passthrough()\n\nconst todoUpdateBodySchema = z\n  .object({\n    id: z.string().uuid(),\n    linkId: z.string().uuid().optional(),\n    title: z.string().trim().min(1).max(200).optional(),\n    isDone: z.boolean().optional(),\n    is_done: z.boolean().optional(),\n    customFields: z.record(z.string(), z.unknown()).optional(),\n    customValues: z.record(z.string(), z.unknown()).optional(),\n  })\n  .passthrough()\n\nconst todoDeleteBodySchema = z.object({\n  id: z.string().uuid(),\n  todoId: z.string().uuid().optional(),\n})\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['customers.view'] },\n  POST: { requireAuth: true, requireFeatures: ['customers.interactions.manage'] },\n  PUT: { requireAuth: true, requireFeatures: ['customers.interactions.manage'] },\n  DELETE: { requireAuth: true, requireFeatures: ['customers.interactions.manage'] },\n}\n\nconst DEPRECATION_HEADERS = {\n  Deprecation: 'true',\n  Sunset: 'Tue, 30 Jun 2026 00:00:00 GMT',\n  Link: '</api/customers/interactions>; rel=\"successor-version\"',\n}\n\n// Caps the per-source fetch window used by the deprecated merged (legacy +\n// canonical bridge) read path. Keeps memory bounded on tenants with large\n// todo history; deep-pagination beyond this window is not supported here \u2014\n// use /api/customers/interactions instead.\nconst MERGED_TODO_FETCH_CAP = 2000\n\nfunction resolveGuardUserId(auth: {\n  sub?: string | null\n  userId?: string | null\n  keyId?: string | null\n}): string {\n  if (typeof auth.sub === 'string' && auth.sub.trim().length > 0) return auth.sub\n  if (typeof auth.userId === 'string' && auth.userId.trim().length > 0) return auth.userId\n  if (typeof auth.keyId === 'string' && auth.keyId.trim().length > 0) return auth.keyId\n  return 'system'\n}\n\nfunction withAdapterHeaders(response: Response): Response {\n  const headers = new Headers(response.headers)\n  Object.entries(DEPRECATION_HEADERS).forEach(([key, value]) => headers.set(key, value))\n  return new Response(response.body, {\n    status: response.status,\n    statusText: response.statusText,\n    headers,\n  })\n}\n\nasync function legacyAdaptersDisabledResponse(): Promise<Response> {\n  const { translate } = await resolveTranslations()\n  return withAdapterHeaders(NextResponse.json(\n    {\n      error: translate(\n        'customers.interactions.legacyAdapters.disabled',\n        'This legacy adapter has been disabled. Use /api/customers/interactions instead.',\n      ),\n    },\n    { status: 410 },\n  ))\n}\n\nfunction normalizeTodoStatusInput(body: z.infer<typeof todoUpdateBodySchema>): boolean | undefined {\n  if (typeof body.isDone === 'boolean') return body.isDone\n  if (typeof body.is_done === 'boolean') return body.is_done\n  return undefined\n}\n\nfunction collectTodoCustomValues(\n  body: Record<string, unknown>,\n): Record<string, unknown> | undefined {\n  const direct =\n    body.customValues && typeof body.customValues === 'object'\n      ? { ...(body.customValues as Record<string, unknown>) }\n      : {}\n  if (body.todoCustom && typeof body.todoCustom === 'object') {\n    Object.assign(direct, body.todoCustom as Record<string, unknown>)\n  }\n  if (body.customFields && typeof body.customFields === 'object') {\n    Object.assign(direct, body.customFields as Record<string, unknown>)\n  }\n  return Object.keys(direct).length > 0 ? direct : undefined\n}\n\nasync function findLegacyTodoLink(\n  em: EntityManager,\n  target: { linkId?: string; todoId?: string },\n  tenantId: string,\n): Promise<CustomerTodoLink | null> {\n  if (target.linkId) {\n    const byLinkId = await em.findOne(CustomerTodoLink, { id: target.linkId, tenantId }, { populate: ['entity'] })\n    if (byLinkId) return byLinkId\n  }\n  if (target.todoId) {\n    return await em.findOne(CustomerTodoLink, { todoId: target.todoId, tenantId }, { populate: ['entity'] })\n  }\n  return null\n}\n\nasync function ensureCanonicalTodoBridge(\n  em: EntityManager,\n  queryEngine: QueryEngine,\n  commandBus: CommandBus,\n  commandContext: Parameters<CommandBus['execute']>[1]['ctx'],\n  link: CustomerTodoLink,\n): Promise<string> {\n  const existing = await em.findOne(CustomerInteraction, { id: link.todoId, tenantId: link.tenantId })\n  if (existing) return existing.id\n\n  const detailMap = await resolveLegacyTodoDetails(\n    queryEngine,\n    [link],\n    link.tenantId,\n    [link.organizationId],\n  )\n  const source =\n    typeof link.todoSource === 'string' && link.todoSource.trim().length > 0\n      ? link.todoSource\n      : EXAMPLE_TODO_SOURCE\n  const detail = detailMap.get(`${source}:${link.todoId}`) ?? null\n  const entityId = typeof link.entity === 'string' ? link.entity : link.entity.id\n\n  await commandBus.execute('customers.interactions.create', {\n    input: {\n      id: link.todoId,\n      tenantId: link.tenantId,\n      organizationId: link.organizationId,\n      entityId,\n      interactionType: 'task',\n      title: detail?.title ?? null,\n      body: detail?.description ?? null,\n      status: detail?.isDone ? 'done' : 'planned',\n      scheduledAt: detail?.dueAt ?? null,\n      priority: detail?.priority ?? null,\n      source: CUSTOMER_INTERACTION_TODO_ADAPTER_SOURCE,\n      ...(detail?.customValues ? { customValues: detail.customValues } : {}),\n    },\n    ctx: commandContext,\n  })\n\n  return link.todoId\n}\n\nasync function resolveCanonicalTodoTargetId(\n  em: EntityManager,\n  queryEngine: QueryEngine,\n  commandBus: CommandBus,\n  commandContext: Parameters<CommandBus['execute']>[1]['ctx'],\n  target: { todoId?: string; linkId?: string },\n  tenantId: string,\n): Promise<string> {\n  if (target.todoId) {\n    const interaction = await em.findOne(CustomerInteraction, { id: target.todoId, tenantId })\n    if (interaction) return interaction.id\n  }\n\n  const legacyLink = await findLegacyTodoLink(em, target, tenantId)\n  if (!legacyLink) {\n    if (!target.todoId) throw notFound('Todo not found')\n    return target.todoId\n  }\n\n  return ensureCanonicalTodoBridge(\n    em,\n    queryEngine,\n    commandBus,\n    commandContext,\n    legacyLink,\n  )\n}\n\nexport async function GET(request: Request): Promise<Response> {\n  try {\n    const { auth, em, organizationIds, container, selectedOrganizationId, scope } =\n      await resolveCustomersRequestContext(request)\n    const query = querySchema.parse(Object.fromEntries(new URL(request.url).searchParams))\n    const flags = await resolveCustomerInteractionFeatureFlags(container, auth.tenantId)\n    if (!flags.legacyAdapters) {\n      return await legacyAdaptersDisabledResponse()\n    }\n    const exportAll = parseBooleanToken(query.all) === true\n    const isUnrestricted = isUnrestrictedOrganizationScope({\n      isSuperAdmin: auth.isSuperAdmin === true,\n      allowedOrganizationIds: scope?.allowedIds,\n    })\n    if (!isUnrestricted && (!organizationIds || organizationIds.length === 0)) {\n      logger.warn('customers.todos.list collapsed organization scope', {\n        tenantId: auth.tenantId,\n        organizationIds,\n        selectedId: scope?.selectedId ?? null,\n        allowedIdsCount: scope?.allowedIds?.length ?? null,\n      })\n      return withAdapterHeaders(\n        NextResponse.json({\n          items: [],\n          total: 0,\n          page: exportAll ? 1 : query.page,\n          pageSize: exportAll ? 0 : query.pageSize,\n          totalPages: 1,\n        }),\n      )\n    }\n    const queryEngine = container.resolve('queryEngine') as QueryEngine\n    const search = normalizeTodoSearch(query.search)\n\n    if (flags.unified) {\n      const canonical = await listCanonicalTodoRows(\n        em,\n        container,\n        auth,\n        selectedOrganizationId,\n        organizationIds,\n        {\n          entityId: query.entityId,\n          pagination: exportAll ? null : { page: query.page, pageSize: query.pageSize },\n          searchText: search,\n          isUnrestricted,\n        },\n      )\n      const total = canonical.total\n      return withAdapterHeaders(\n        NextResponse.json({\n          items: canonical.items,\n          total,\n          page: exportAll ? 1 : query.page,\n          pageSize: exportAll ? canonical.items.length : query.pageSize,\n          totalPages: exportAll ? 1 : Math.max(1, Math.ceil(total / query.pageSize)),\n        }),\n      )\n    }\n\n    const legacyWindow = exportAll\n      ? null\n      : Math.min(MERGED_TODO_FETCH_CAP, Math.max(query.pageSize, query.page * query.pageSize + query.pageSize))\n    const [legacyRows, canonicalRows] = await Promise.all([\n      listLegacyTodoRows(em, queryEngine, auth.tenantId, organizationIds, query.entityId, {\n        limit: legacyWindow,\n        isUnrestricted,\n      }),\n      listCanonicalTodoRows(\n        em,\n        container,\n        auth,\n        selectedOrganizationId,\n        organizationIds,\n        {\n          entityId: query.entityId,\n          includeDeleted: true,\n          source: CUSTOMER_INTERACTION_TODO_ADAPTER_SOURCE,\n          limit: legacyWindow,\n          isUnrestricted,\n        },\n      ),\n    ])\n    const mergedRows = [\n      ...legacyRows.filter((row) => !canonicalRows.bridgeIds.has(row.todoId)),\n      ...canonicalRows.items,\n    ]\n    const filteredRows = filterTodoRows(sortTodoRows(mergedRows), search)\n    const paged = paginateTodoRows(filteredRows, query.page, query.pageSize, exportAll)\n\n    return withAdapterHeaders(\n      NextResponse.json({\n        items: paged.items,\n        total: paged.total,\n        page: paged.page,\n        pageSize: paged.pageSize,\n        totalPages: paged.totalPages,\n      }),\n    )\n  } catch (err) {\n    if (isCrudHttpError(err)) {\n      return withAdapterHeaders(NextResponse.json(err.body, { status: err.status }))\n    }\n    if (err instanceof z.ZodError) {\n      return withAdapterHeaders(\n        NextResponse.json({ error: 'Validation failed', details: err.issues }, { status: 400 }),\n      )\n    }\n    logger.error('customers.todos.get failed', { err })\n    return withAdapterHeaders(\n      NextResponse.json({ error: 'Internal server error' }, { status: 500 }),\n    )\n  }\n}\n\nexport async function POST(request: Request): Promise<Response> {\n  try {\n    const { commandContext, container, auth, selectedOrganizationId } = await resolveCustomersRequestContext(request)\n    const flags = await resolveCustomerInteractionFeatureFlags(container, auth.tenantId)\n    if (!flags.legacyAdapters) {\n      return await legacyAdaptersDisabledResponse()\n    }\n    const commandBus = container.resolve('commandBus') as CommandBus\n    const body = todoCreateBodySchema.parse(await readJsonSafe<Record<string, unknown>>(request, {}))\n    const guardUserId = resolveGuardUserId(auth)\n    const guardResult = await validateCrudMutationGuard(container, {\n      tenantId: auth.tenantId,\n      organizationId: selectedOrganizationId,\n      userId: guardUserId,\n      resourceKind: 'customers.todoLink',\n      resourceId: body.entityId,\n      operation: 'create',\n      requestMethod: request.method,\n      requestHeaders: request.headers,\n      mutationPayload: body,\n    })\n    if (guardResult && !guardResult.ok) {\n      return withAdapterHeaders(NextResponse.json(guardResult.body, { status: guardResult.status }))\n    }\n    const customValues = collectTodoCustomValues(body as Record<string, unknown>)\n\n    const { result, logEntry } = await commandBus.execute('customers.interactions.create', {\n      input: {\n        tenantId: auth.tenantId,\n        organizationId: selectedOrganizationId ?? auth.orgId,\n        entityId: body.entityId,\n        interactionType: 'task',\n        title: body.title,\n        status: body.is_done === true || body.isDone === true ? 'done' : 'planned',\n        source: CUSTOMER_INTERACTION_TODO_ADAPTER_SOURCE,\n        ...(customValues ? {\n          customValues,\n          priority: typeof customValues.priority === 'number' ? customValues.priority : null,\n          body: typeof customValues.description === 'string' ? customValues.description : null,\n          scheduledAt:\n            typeof customValues.due_at === 'string'\n              ? customValues.due_at\n              : typeof customValues.dueAt === 'string'\n                ? customValues.dueAt\n                : null,\n        } : {}),\n      },\n      ctx: commandContext,\n    })\n    if (guardResult?.ok && guardResult.shouldRunAfterSuccess) {\n      await runCrudMutationGuardAfterSuccess(container, {\n        tenantId: auth.tenantId,\n        organizationId: selectedOrganizationId,\n        userId: guardUserId,\n        resourceKind: 'customers.todoLink',\n        resourceId: body.entityId,\n        operation: 'create',\n        requestMethod: request.method,\n        requestHeaders: request.headers,\n        metadata: guardResult.metadata ?? null,\n      })\n    }\n\n    const interactionId =\n      result &&\n      typeof result === 'object' &&\n      'interactionId' in result &&\n      typeof result.interactionId === 'string'\n        ? result.interactionId\n        : result &&\n            typeof result === 'object' &&\n            'id' in result &&\n            typeof result.id === 'string'\n          ? result.id\n          : null\n    return withAdapterHeaders(\n      withOperationMetadata(\n        NextResponse.json(\n          {\n            linkId: interactionId,\n            todoId: interactionId,\n          },\n          { status: 201 },\n        ),\n        logEntry,\n        { resourceKind: 'customers.todoLink', resourceId: interactionId },\n      ),\n    )\n  } catch (err) {\n    if (isCrudHttpError(err)) {\n      return withAdapterHeaders(NextResponse.json(err.body, { status: err.status }))\n    }\n    if (err instanceof z.ZodError) {\n      return withAdapterHeaders(\n        NextResponse.json({ error: 'Validation failed', details: err.issues }, { status: 400 }),\n      )\n    }\n    logger.error('customers.todos.post failed', { err })\n    return withAdapterHeaders(\n      NextResponse.json({ error: 'Internal server error' }, { status: 500 }),\n    )\n  }\n}\n\nexport async function PUT(request: Request): Promise<Response> {\n  try {\n    const { commandContext, container, em, auth, selectedOrganizationId } = await resolveCustomersRequestContext(request)\n    const flags = await resolveCustomerInteractionFeatureFlags(container, auth.tenantId)\n    if (!flags.legacyAdapters) {\n      return await legacyAdaptersDisabledResponse()\n    }\n    const commandBus = container.resolve('commandBus') as CommandBus\n    const queryEngine = container.resolve('queryEngine') as QueryEngine\n    const body = todoUpdateBodySchema.parse(await readJsonSafe<Record<string, unknown>>(request, {}))\n    const guardUserId = resolveGuardUserId(auth)\n    const guardResult = await validateCrudMutationGuard(container, {\n      tenantId: auth.tenantId,\n      organizationId: selectedOrganizationId,\n      userId: guardUserId,\n      resourceKind: 'customers.todoLink',\n      resourceId: body.linkId ?? body.id,\n      operation: 'update',\n      requestMethod: request.method,\n      requestHeaders: request.headers,\n      mutationPayload: body,\n    })\n    if (guardResult && !guardResult.ok) {\n      return withAdapterHeaders(NextResponse.json(guardResult.body, { status: guardResult.status }))\n    }\n    const interactionId = flags.unified\n      ? body.id\n      : await resolveCanonicalTodoTargetId(\n          em,\n          queryEngine,\n          commandBus,\n          commandContext,\n          {\n            todoId: body.id,\n            linkId: body.linkId,\n          },\n          auth.tenantId,\n        )\n    const customValues = collectTodoCustomValues(body as Record<string, unknown>)\n    const nextDone = normalizeTodoStatusInput(body)\n\n    const { logEntry } = await commandBus.execute('customers.interactions.update', {\n      input: {\n        id: interactionId,\n        ...(body.title !== undefined ? { title: body.title } : {}),\n        ...(nextDone !== undefined ? { status: nextDone ? 'done' : 'planned' } : {}),\n        ...(customValues ? {\n          customValues,\n          priority: typeof customValues.priority === 'number' ? customValues.priority : null,\n          body: typeof customValues.description === 'string' ? customValues.description : null,\n          scheduledAt:\n            typeof customValues.due_at === 'string'\n              ? customValues.due_at\n              : typeof customValues.dueAt === 'string'\n                ? customValues.dueAt\n                : null,\n        } : {}),\n      },\n      ctx: commandContext,\n    })\n    if (guardResult?.ok && guardResult.shouldRunAfterSuccess) {\n      await runCrudMutationGuardAfterSuccess(container, {\n        tenantId: auth.tenantId,\n        organizationId: selectedOrganizationId,\n        userId: guardUserId,\n        resourceKind: 'customers.todoLink',\n        resourceId: body.linkId ?? body.id,\n        operation: 'update',\n        requestMethod: request.method,\n        requestHeaders: request.headers,\n        metadata: guardResult.metadata ?? null,\n      })\n    }\n\n    return withAdapterHeaders(\n      withOperationMetadata(\n        NextResponse.json({ ok: true }),\n        logEntry,\n        { resourceKind: 'customers.todoLink', resourceId: body.linkId ?? body.id },\n      ),\n    )\n  } catch (err) {\n    if (isCrudHttpError(err)) {\n      return withAdapterHeaders(NextResponse.json(err.body, { status: err.status }))\n    }\n    if (err instanceof z.ZodError) {\n      return withAdapterHeaders(\n        NextResponse.json({ error: 'Validation failed', details: err.issues }, { status: 400 }),\n      )\n    }\n    logger.error('customers.todos.put failed', { err })\n    return withAdapterHeaders(\n      NextResponse.json({ error: 'Internal server error' }, { status: 500 }),\n    )\n  }\n}\n\nexport async function DELETE(request: Request): Promise<Response> {\n  try {\n    const { commandContext, container, em, auth, selectedOrganizationId } = await resolveCustomersRequestContext(request)\n    const flags = await resolveCustomerInteractionFeatureFlags(container, auth.tenantId)\n    if (!flags.legacyAdapters) {\n      return await legacyAdaptersDisabledResponse()\n    }\n    const commandBus = container.resolve('commandBus') as CommandBus\n    const queryEngine = container.resolve('queryEngine') as QueryEngine\n    const body = todoDeleteBodySchema.parse(await readJsonSafe<Record<string, unknown>>(request, {}))\n    const guardUserId = resolveGuardUserId(auth)\n    const guardResult = await validateCrudMutationGuard(container, {\n      tenantId: auth.tenantId,\n      organizationId: selectedOrganizationId,\n      userId: guardUserId,\n      resourceKind: 'customers.todoLink',\n      resourceId: body.id,\n      operation: 'delete',\n      requestMethod: request.method,\n      requestHeaders: request.headers,\n      mutationPayload: body,\n    })\n    if (guardResult && !guardResult.ok) {\n      return withAdapterHeaders(NextResponse.json(guardResult.body, { status: guardResult.status }))\n    }\n    const interactionId = flags.unified\n      ? body.todoId ?? body.id\n      : await resolveCanonicalTodoTargetId(\n          em,\n          queryEngine,\n          commandBus,\n          commandContext,\n          {\n            linkId: body.id,\n            todoId: body.todoId ?? body.id,\n          },\n          auth.tenantId,\n        )\n\n    const { logEntry } = await commandBus.execute('customers.interactions.delete', {\n      input: { id: interactionId },\n      ctx: commandContext,\n    })\n    if (guardResult?.ok && guardResult.shouldRunAfterSuccess) {\n      await runCrudMutationGuardAfterSuccess(container, {\n        tenantId: auth.tenantId,\n        organizationId: selectedOrganizationId,\n        userId: guardUserId,\n        resourceKind: 'customers.todoLink',\n        resourceId: body.id,\n        operation: 'delete',\n        requestMethod: request.method,\n        requestHeaders: request.headers,\n        metadata: guardResult.metadata ?? null,\n      })\n    }\n\n    return withAdapterHeaders(\n      withOperationMetadata(\n        NextResponse.json({ ok: true }),\n        logEntry,\n        { resourceKind: 'customers.todoLink', resourceId: body.id },\n      ),\n    )\n  } catch (err) {\n    if (isCrudHttpError(err)) {\n      return withAdapterHeaders(NextResponse.json(err.body, { status: err.status }))\n    }\n    if (err instanceof z.ZodError) {\n      return withAdapterHeaders(\n        NextResponse.json({ error: 'Validation failed', details: err.issues }, { status: 400 }),\n      )\n    }\n    logger.error('customers.todos.delete failed', { err })\n    return withAdapterHeaders(\n      NextResponse.json({ error: 'Internal server error' }, { status: 500 }),\n    )\n  }\n}\n\nconst todoItemSchema = z.object({\n  id: z.string(),\n  todoId: z.string(),\n  todoSource: z.string(),\n  todoTitle: z.string().nullable(),\n  todoIsDone: z.boolean().nullable(),\n  todoPriority: z.number().nullable().optional(),\n  todoSeverity: z.string().nullable().optional(),\n  todoDescription: z.string().nullable().optional(),\n  todoDueAt: z.string().nullable().optional(),\n  todoCustomValues: z.record(z.string(), z.unknown()).nullable().optional(),\n  todoOrganizationId: z.string().nullable(),\n  todoUpdatedAt: z.string().nullable().optional(),\n  organizationId: z.string(),\n  tenantId: z.string(),\n  createdAt: z.string(),\n  externalHref: z.string().nullable().optional(),\n  _integrations: z.record(z.string(), z.unknown()).optional(),\n  customer: z.object({\n    id: z.string().nullable(),\n    displayName: z.string().nullable(),\n    kind: z.string().nullable(),\n  }),\n})\n\nconst todoCreateResponseSchema = z.object({\n  linkId: z.string().uuid().nullable(),\n  todoId: z.string().uuid().nullable(),\n})\n\nexport const openApi: OpenApiRouteDoc = createCustomersCrudOpenApi({\n  resourceName: 'CustomerTodo',\n  querySchema,\n  listResponseSchema: createPagedListResponseSchema(todoItemSchema),\n  create: {\n    schema: todoCreateBodySchema,\n    responseSchema: todoCreateResponseSchema,\n    description: 'DEPRECATED (sunset 2026-06-30): Creates a customer task. Use POST /api/customers/interactions instead.',\n  },\n  update: {\n    schema: todoUpdateBodySchema,\n    responseSchema: defaultOkResponseSchema,\n    description: 'DEPRECATED (sunset 2026-06-30): Updates a customer task. Use PUT /api/customers/interactions instead.',\n  },\n  del: {\n    schema: todoDeleteBodySchema,\n    responseSchema: defaultOkResponseSchema,\n    description: 'DEPRECATED (sunset 2026-06-30): Deletes a customer task. Use DELETE /api/customers/interactions instead.',\n  },\n})\n"],
+  "mappings": "AAIA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAIlB,SAAS,iBAAiB,gBAAgB;AAC1C,SAAS,yBAAyB;AAClC,SAAS,uCAAuC;AAChD,SAAS,2BAA2B;AACpC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,oBAAoB;AAE7B,SAAS,4BAA4B,+BAA+B,+BAA+B;AACnG,SAAS,qBAAqB,wBAAwB;AACtD,SAAS,oCAAoC;AAC7C,SAAS,6BAA6B;AACtC,SAAS,8CAA8C;AACvD,SAAS,sCAAsC;AAC/C;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,WAAW;AAEvC,MAAM,cAAc,EAAE,OAAO;AAAA,EAC3B,MAAM,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,QAAQ,CAAC;AAAA,EACxC,UAAU,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,QAAQ,EAAE;AAAA,EACtD,QAAQ,EAAE,OAAO,EAAE,SAAS;AAAA,EAC5B,KAAK,EAAE,OAAO,EAAE,SAAS;AAAA,EACzB,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AACvC,CAAC;AAED,MAAM,uBAAuB,6BAA6B,KAAK;AAAA,EAC7D,UAAU;AAAA,EACV,gBAAgB;AAClB,CAAC,EAAE,YAAY;AAEf,MAAM,uBAAuB,EAC1B,OAAO;AAAA,EACN,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACnC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EAClD,QAAQ,EAAE,QAAQ,EAAE,SAAS;AAAA,EAC7B,SAAS,EAAE,QAAQ,EAAE,SAAS;AAAA,EAC9B,cAAc,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS;AAAA,EACzD,cAAc,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS;AAC3D,CAAC,EACA,YAAY;AAEf,MAAM,uBAAuB,EAAE,OAAO;AAAA,EACpC,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AACrC,CAAC;AAEM,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,gBAAgB,EAAE;AAAA,EAC9D,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,+BAA+B,EAAE;AAAA,EAC9E,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,+BAA+B,EAAE;AAAA,EAC7E,QAAQ,EAAE,aAAa,MAAM,iBAAiB,CAAC,+BAA+B,EAAE;AAClF;AAEA,MAAM,sBAAsB;AAAA,EAC1B,aAAa;AAAA,EACb,QAAQ;AAAA,EACR,MAAM;AACR;AAMA,MAAM,wBAAwB;AAE9B,SAAS,mBAAmB,MAIjB;AACT,MAAI,OAAO,KAAK,QAAQ,YAAY,KAAK,IAAI,KAAK,EAAE,SAAS,EAAG,QAAO,KAAK;AAC5E,MAAI,OAAO,KAAK,WAAW,YAAY,KAAK,OAAO,KAAK,EAAE,SAAS,EAAG,QAAO,KAAK;AAClF,MAAI,OAAO,KAAK,UAAU,YAAY,KAAK,MAAM,KAAK,EAAE,SAAS,EAAG,QAAO,KAAK;AAChF,SAAO;AACT;AAEA,SAAS,mBAAmB,UAA8B;AACxD,QAAM,UAAU,IAAI,QAAQ,SAAS,OAAO;AAC5C,SAAO,QAAQ,mBAAmB,EAAE,QAAQ,CAAC,CAAC,KAAK,KAAK,MAAM,QAAQ,IAAI,KAAK,KAAK,CAAC;AACrF,SAAO,IAAI,SAAS,SAAS,MAAM;AAAA,IACjC,QAAQ,SAAS;AAAA,IACjB,YAAY,SAAS;AAAA,IACrB;AAAA,EACF,CAAC;AACH;AAEA,eAAe,iCAAoD;AACjE,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,SAAO,mBAAmB,aAAa;AAAA,IACrC;AAAA,MACE,OAAO;AAAA,QACL;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IACA,EAAE,QAAQ,IAAI;AAAA,EAChB,CAAC;AACH;AAEA,SAAS,yBAAyB,MAAiE;AACjG,MAAI,OAAO,KAAK,WAAW,UAAW,QAAO,KAAK;AAClD,MAAI,OAAO,KAAK,YAAY,UAAW,QAAO,KAAK;AACnD,SAAO;AACT;AAEA,SAAS,wBACP,MACqC;AACrC,QAAM,SACJ,KAAK,gBAAgB,OAAO,KAAK,iBAAiB,WAC9C,EAAE,GAAI,KAAK,aAAyC,IACpD,CAAC;AACP,MAAI,KAAK,cAAc,OAAO,KAAK,eAAe,UAAU;AAC1D,WAAO,OAAO,QAAQ,KAAK,UAAqC;AAAA,EAClE;AACA,MAAI,KAAK,gBAAgB,OAAO,KAAK,iBAAiB,UAAU;AAC9D,WAAO,OAAO,QAAQ,KAAK,YAAuC;AAAA,EACpE;AACA,SAAO,OAAO,KAAK,MAAM,EAAE,SAAS,IAAI,SAAS;AACnD;AAEA,eAAe,mBACb,IACA,QACA,UACkC;AAClC,MAAI,OAAO,QAAQ;AACjB,UAAM,WAAW,MAAM,GAAG,QAAQ,kBAAkB,EAAE,IAAI,OAAO,QAAQ,SAAS,GAAG,EAAE,UAAU,CAAC,QAAQ,EAAE,CAAC;AAC7G,QAAI,SAAU,QAAO;AAAA,EACvB;AACA,MAAI,OAAO,QAAQ;AACjB,WAAO,MAAM,GAAG,QAAQ,kBAAkB,EAAE,QAAQ,OAAO,QAAQ,SAAS,GAAG,EAAE,UAAU,CAAC,QAAQ,EAAE,CAAC;AAAA,EACzG;AACA,SAAO;AACT;AAEA,eAAe,0BACb,IACA,aACA,YACA,gBACA,MACiB;AACjB,QAAM,WAAW,MAAM,GAAG,QAAQ,qBAAqB,EAAE,IAAI,KAAK,QAAQ,UAAU,KAAK,SAAS,CAAC;AACnG,MAAI,SAAU,QAAO,SAAS;AAE9B,QAAM,YAAY,MAAM;AAAA,IACtB;AAAA,IACA,CAAC,IAAI;AAAA,IACL,KAAK;AAAA,IACL,CAAC,KAAK,cAAc;AAAA,EACtB;AACA,QAAM,SACJ,OAAO,KAAK,eAAe,YAAY,KAAK,WAAW,KAAK,EAAE,SAAS,IACnE,KAAK,aACL;AACN,QAAM,SAAS,UAAU,IAAI,GAAG,MAAM,IAAI,KAAK,MAAM,EAAE,KAAK;AAC5D,QAAM,WAAW,OAAO,KAAK,WAAW,WAAW,KAAK,SAAS,KAAK,OAAO;AAE7E,QAAM,WAAW,QAAQ,iCAAiC;AAAA,IACxD,OAAO;AAAA,MACL,IAAI,KAAK;AAAA,MACT,UAAU,KAAK;AAAA,MACf,gBAAgB,KAAK;AAAA,MACrB;AAAA,MACA,iBAAiB;AAAA,MACjB,OAAO,QAAQ,SAAS;AAAA,MACxB,MAAM,QAAQ,eAAe;AAAA,MAC7B,QAAQ,QAAQ,SAAS,SAAS;AAAA,MAClC,aAAa,QAAQ,SAAS;AAAA,MAC9B,UAAU,QAAQ,YAAY;AAAA,MAC9B,QAAQ;AAAA,MACR,GAAI,QAAQ,eAAe,EAAE,cAAc,OAAO,aAAa,IAAI,CAAC;AAAA,IACtE;AAAA,IACA,KAAK;AAAA,EACP,CAAC;AAED,SAAO,KAAK;AACd;AAEA,eAAe,6BACb,IACA,aACA,YACA,gBACA,QACA,UACiB;AACjB,MAAI,OAAO,QAAQ;AACjB,UAAM,cAAc,MAAM,GAAG,QAAQ,qBAAqB,EAAE,IAAI,OAAO,QAAQ,SAAS,CAAC;AACzF,QAAI,YAAa,QAAO,YAAY;AAAA,EACtC;AAEA,QAAM,aAAa,MAAM,mBAAmB,IAAI,QAAQ,QAAQ;AAChE,MAAI,CAAC,YAAY;AACf,QAAI,CAAC,OAAO,OAAQ,OAAM,SAAS,gBAAgB;AACnD,WAAO,OAAO;AAAA,EAChB;AAEA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;AAEA,eAAsB,IAAI,SAAqC;AAC7D,MAAI;AACF,UAAM,EAAE,MAAM,IAAI,iBAAiB,WAAW,wBAAwB,MAAM,IAC1E,MAAM,+BAA+B,OAAO;AAC9C,UAAM,QAAQ,YAAY,MAAM,OAAO,YAAY,IAAI,IAAI,QAAQ,GAAG,EAAE,YAAY,CAAC;AACrF,UAAM,QAAQ,MAAM,uCAAuC,WAAW,KAAK,QAAQ;AACnF,QAAI,CAAC,MAAM,gBAAgB;AACzB,aAAO,MAAM,+BAA+B;AAAA,IAC9C;AACA,UAAM,YAAY,kBAAkB,MAAM,GAAG,MAAM;AACnD,UAAM,iBAAiB,gCAAgC;AAAA,MACrD,cAAc,KAAK,iBAAiB;AAAA,MACpC,wBAAwB,OAAO;AAAA,IACjC,CAAC;AACD,QAAI,CAAC,mBAAmB,CAAC,mBAAmB,gBAAgB,WAAW,IAAI;AACzE,aAAO,KAAK,qDAAqD;AAAA,QAC/D,UAAU,KAAK;AAAA,QACf;AAAA,QACA,YAAY,OAAO,cAAc;AAAA,QACjC,iBAAiB,OAAO,YAAY,UAAU;AAAA,MAChD,CAAC;AACD,aAAO;AAAA,QACL,aAAa,KAAK;AAAA,UAChB,OAAO,CAAC;AAAA,UACR,OAAO;AAAA,UACP,MAAM,YAAY,IAAI,MAAM;AAAA,UAC5B,UAAU,YAAY,IAAI,MAAM;AAAA,UAChC,YAAY;AAAA,QACd,CAAC;AAAA,MACH;AAAA,IACF;AACA,UAAM,cAAc,UAAU,QAAQ,aAAa;AACnD,UAAM,SAAS,oBAAoB,MAAM,MAAM;AAE/C,QAAI,MAAM,SAAS;AACjB,YAAM,YAAY,MAAM;AAAA,QACtB;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,UACE,UAAU,MAAM;AAAA,UAChB,YAAY,YAAY,OAAO,EAAE,MAAM,MAAM,MAAM,UAAU,MAAM,SAAS;AAAA,UAC5E,YAAY;AAAA,UACZ;AAAA,QACF;AAAA,MACF;AACA,YAAM,QAAQ,UAAU;AACxB,aAAO;AAAA,QACL,aAAa,KAAK;AAAA,UAChB,OAAO,UAAU;AAAA,UACjB;AAAA,UACA,MAAM,YAAY,IAAI,MAAM;AAAA,UAC5B,UAAU,YAAY,UAAU,MAAM,SAAS,MAAM;AAAA,UACrD,YAAY,YAAY,IAAI,KAAK,IAAI,GAAG,KAAK,KAAK,QAAQ,MAAM,QAAQ,CAAC;AAAA,QAC3E,CAAC;AAAA,MACH;AAAA,IACF;AAEA,UAAM,eAAe,YACjB,OACA,KAAK,IAAI,uBAAuB,KAAK,IAAI,MAAM,UAAU,MAAM,OAAO,MAAM,WAAW,MAAM,QAAQ,CAAC;AAC1G,UAAM,CAAC,YAAY,aAAa,IAAI,MAAM,QAAQ,IAAI;AAAA,MACpD,mBAAmB,IAAI,aAAa,KAAK,UAAU,iBAAiB,MAAM,UAAU;AAAA,QAClF,OAAO;AAAA,QACP;AAAA,MACF,CAAC;AAAA,MACD;AAAA,QACE;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,UACE,UAAU,MAAM;AAAA,UAChB,gBAAgB;AAAA,UAChB,QAAQ;AAAA,UACR,OAAO;AAAA,UACP;AAAA,QACF;AAAA,MACF;AAAA,IACF,CAAC;AACD,UAAM,aAAa;AAAA,MACjB,GAAG,WAAW,OAAO,CAAC,QAAQ,CAAC,cAAc,UAAU,IAAI,IAAI,MAAM,CAAC;AAAA,MACtE,GAAG,cAAc;AAAA,IACnB;AACA,UAAM,eAAe,eAAe,aAAa,UAAU,GAAG,MAAM;AACpE,UAAM,QAAQ,iBAAiB,cAAc,MAAM,MAAM,MAAM,UAAU,SAAS;AAElF,WAAO;AAAA,MACL,aAAa,KAAK;AAAA,QAChB,OAAO,MAAM;AAAA,QACb,OAAO,MAAM;AAAA,QACb,MAAM,MAAM;AAAA,QACZ,UAAU,MAAM;AAAA,QAChB,YAAY,MAAM;AAAA,MACpB,CAAC;AAAA,IACH;AAAA,EACF,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,GAAG;AACxB,aAAO,mBAAmB,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC,CAAC;AAAA,IAC/E;AACA,QAAI,eAAe,EAAE,UAAU;AAC7B,aAAO;AAAA,QACL,aAAa,KAAK,EAAE,OAAO,qBAAqB,SAAS,IAAI,OAAO,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,MACxF;AAAA,IACF;AACA,WAAO,MAAM,8BAA8B,EAAE,IAAI,CAAC;AAClD,WAAO;AAAA,MACL,aAAa,KAAK,EAAE,OAAO,wBAAwB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACvE;AAAA,EACF;AACF;AAEA,eAAsB,KAAK,SAAqC;AAC9D,MAAI;AACF,UAAM,EAAE,gBAAgB,WAAW,MAAM,uBAAuB,IAAI,MAAM,+BAA+B,OAAO;AAChH,UAAM,QAAQ,MAAM,uCAAuC,WAAW,KAAK,QAAQ;AACnF,QAAI,CAAC,MAAM,gBAAgB;AACzB,aAAO,MAAM,+BAA+B;AAAA,IAC9C;AACA,UAAM,aAAa,UAAU,QAAQ,YAAY;AACjD,UAAM,OAAO,qBAAqB,MAAM,MAAM,aAAsC,SAAS,CAAC,CAAC,CAAC;AAChG,UAAM,cAAc,mBAAmB,IAAI;AAC3C,UAAM,cAAc,MAAM,0BAA0B,WAAW;AAAA,MAC7D,UAAU,KAAK;AAAA,MACf,gBAAgB;AAAA,MAChB,QAAQ;AAAA,MACR,cAAc;AAAA,MACd,YAAY,KAAK;AAAA,MACjB,WAAW;AAAA,MACX,eAAe,QAAQ;AAAA,MACvB,gBAAgB,QAAQ;AAAA,MACxB,iBAAiB;AAAA,IACnB,CAAC;AACD,QAAI,eAAe,CAAC,YAAY,IAAI;AAClC,aAAO,mBAAmB,aAAa,KAAK,YAAY,MAAM,EAAE,QAAQ,YAAY,OAAO,CAAC,CAAC;AAAA,IAC/F;AACA,UAAM,eAAe,wBAAwB,IAA+B;AAE5E,UAAM,EAAE,QAAQ,SAAS,IAAI,MAAM,WAAW,QAAQ,iCAAiC;AAAA,MACrF,OAAO;AAAA,QACL,UAAU,KAAK;AAAA,QACf,gBAAgB,0BAA0B,KAAK;AAAA,QAC/C,UAAU,KAAK;AAAA,QACf,iBAAiB;AAAA,QACjB,OAAO,KAAK;AAAA,QACZ,QAAQ,KAAK,YAAY,QAAQ,KAAK,WAAW,OAAO,SAAS;AAAA,QACjE,QAAQ;AAAA,QACR,GAAI,eAAe;AAAA,UACjB;AAAA,UACA,UAAU,OAAO,aAAa,aAAa,WAAW,aAAa,WAAW;AAAA,UAC9E,MAAM,OAAO,aAAa,gBAAgB,WAAW,aAAa,cAAc;AAAA,UAChF,aACE,OAAO,aAAa,WAAW,WAC3B,aAAa,SACb,OAAO,aAAa,UAAU,WAC5B,aAAa,QACb;AAAA,QACV,IAAI,CAAC;AAAA,MACP;AAAA,MACA,KAAK;AAAA,IACP,CAAC;AACD,QAAI,aAAa,MAAM,YAAY,uBAAuB;AACxD,YAAM,iCAAiC,WAAW;AAAA,QAChD,UAAU,KAAK;AAAA,QACf,gBAAgB;AAAA,QAChB,QAAQ;AAAA,QACR,cAAc;AAAA,QACd,YAAY,KAAK;AAAA,QACjB,WAAW;AAAA,QACX,eAAe,QAAQ;AAAA,QACvB,gBAAgB,QAAQ;AAAA,QACxB,UAAU,YAAY,YAAY;AAAA,MACpC,CAAC;AAAA,IACH;AAEA,UAAM,gBACJ,UACA,OAAO,WAAW,YAClB,mBAAmB,UACnB,OAAO,OAAO,kBAAkB,WAC5B,OAAO,gBACP,UACE,OAAO,WAAW,YAClB,QAAQ,UACR,OAAO,OAAO,OAAO,WACrB,OAAO,KACP;AACR,WAAO;AAAA,MACL;AAAA,QACE,aAAa;AAAA,UACX;AAAA,YACE,QAAQ;AAAA,YACR,QAAQ;AAAA,UACV;AAAA,UACA,EAAE,QAAQ,IAAI;AAAA,QAChB;AAAA,QACA;AAAA,QACA,EAAE,cAAc,sBAAsB,YAAY,cAAc;AAAA,MAClE;AAAA,IACF;AAAA,EACF,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,GAAG;AACxB,aAAO,mBAAmB,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC,CAAC;AAAA,IAC/E;AACA,QAAI,eAAe,EAAE,UAAU;AAC7B,aAAO;AAAA,QACL,aAAa,KAAK,EAAE,OAAO,qBAAqB,SAAS,IAAI,OAAO,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,MACxF;AAAA,IACF;AACA,WAAO,MAAM,+BAA+B,EAAE,IAAI,CAAC;AACnD,WAAO;AAAA,MACL,aAAa,KAAK,EAAE,OAAO,wBAAwB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACvE;AAAA,EACF;AACF;AAEA,eAAsB,IAAI,SAAqC;AAC7D,MAAI;AACF,UAAM,EAAE,gBAAgB,WAAW,IAAI,MAAM,uBAAuB,IAAI,MAAM,+BAA+B,OAAO;AACpH,UAAM,QAAQ,MAAM,uCAAuC,WAAW,KAAK,QAAQ;AACnF,QAAI,CAAC,MAAM,gBAAgB;AACzB,aAAO,MAAM,+BAA+B;AAAA,IAC9C;AACA,UAAM,aAAa,UAAU,QAAQ,YAAY;AACjD,UAAM,cAAc,UAAU,QAAQ,aAAa;AACnD,UAAM,OAAO,qBAAqB,MAAM,MAAM,aAAsC,SAAS,CAAC,CAAC,CAAC;AAChG,UAAM,cAAc,mBAAmB,IAAI;AAC3C,UAAM,cAAc,MAAM,0BAA0B,WAAW;AAAA,MAC7D,UAAU,KAAK;AAAA,MACf,gBAAgB;AAAA,MAChB,QAAQ;AAAA,MACR,cAAc;AAAA,MACd,YAAY,KAAK,UAAU,KAAK;AAAA,MAChC,WAAW;AAAA,MACX,eAAe,QAAQ;AAAA,MACvB,gBAAgB,QAAQ;AAAA,MACxB,iBAAiB;AAAA,IACnB,CAAC;AACD,QAAI,eAAe,CAAC,YAAY,IAAI;AAClC,aAAO,mBAAmB,aAAa,KAAK,YAAY,MAAM,EAAE,QAAQ,YAAY,OAAO,CAAC,CAAC;AAAA,IAC/F;AACA,UAAM,gBAAgB,MAAM,UACxB,KAAK,KACL,MAAM;AAAA,MACJ;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,QACE,QAAQ,KAAK;AAAA,QACb,QAAQ,KAAK;AAAA,MACf;AAAA,MACA,KAAK;AAAA,IACP;AACJ,UAAM,eAAe,wBAAwB,IAA+B;AAC5E,UAAM,WAAW,yBAAyB,IAAI;AAE9C,UAAM,EAAE,SAAS,IAAI,MAAM,WAAW,QAAQ,iCAAiC;AAAA,MAC7E,OAAO;AAAA,QACL,IAAI;AAAA,QACJ,GAAI,KAAK,UAAU,SAAY,EAAE,OAAO,KAAK,MAAM,IAAI,CAAC;AAAA,QACxD,GAAI,aAAa,SAAY,EAAE,QAAQ,WAAW,SAAS,UAAU,IAAI,CAAC;AAAA,QAC1E,GAAI,eAAe;AAAA,UACjB;AAAA,UACA,UAAU,OAAO,aAAa,aAAa,WAAW,aAAa,WAAW;AAAA,UAC9E,MAAM,OAAO,aAAa,gBAAgB,WAAW,aAAa,cAAc;AAAA,UAChF,aACE,OAAO,aAAa,WAAW,WAC3B,aAAa,SACb,OAAO,aAAa,UAAU,WAC5B,aAAa,QACb;AAAA,QACV,IAAI,CAAC;AAAA,MACP;AAAA,MACA,KAAK;AAAA,IACP,CAAC;AACD,QAAI,aAAa,MAAM,YAAY,uBAAuB;AACxD,YAAM,iCAAiC,WAAW;AAAA,QAChD,UAAU,KAAK;AAAA,QACf,gBAAgB;AAAA,QAChB,QAAQ;AAAA,QACR,cAAc;AAAA,QACd,YAAY,KAAK,UAAU,KAAK;AAAA,QAChC,WAAW;AAAA,QACX,eAAe,QAAQ;AAAA,QACvB,gBAAgB,QAAQ;AAAA,QACxB,UAAU,YAAY,YAAY;AAAA,MACpC,CAAC;AAAA,IACH;AAEA,WAAO;AAAA,MACL;AAAA,QACE,aAAa,KAAK,EAAE,IAAI,KAAK,CAAC;AAAA,QAC9B;AAAA,QACA,EAAE,cAAc,sBAAsB,YAAY,KAAK,UAAU,KAAK,GAAG;AAAA,MAC3E;AAAA,IACF;AAAA,EACF,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,GAAG;AACxB,aAAO,mBAAmB,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC,CAAC;AAAA,IAC/E;AACA,QAAI,eAAe,EAAE,UAAU;AAC7B,aAAO;AAAA,QACL,aAAa,KAAK,EAAE,OAAO,qBAAqB,SAAS,IAAI,OAAO,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,MACxF;AAAA,IACF;AACA,WAAO,MAAM,8BAA8B,EAAE,IAAI,CAAC;AAClD,WAAO;AAAA,MACL,aAAa,KAAK,EAAE,OAAO,wBAAwB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACvE;AAAA,EACF;AACF;AAEA,eAAsB,OAAO,SAAqC;AAChE,MAAI;AACF,UAAM,EAAE,gBAAgB,WAAW,IAAI,MAAM,uBAAuB,IAAI,MAAM,+BAA+B,OAAO;AACpH,UAAM,QAAQ,MAAM,uCAAuC,WAAW,KAAK,QAAQ;AACnF,QAAI,CAAC,MAAM,gBAAgB;AACzB,aAAO,MAAM,+BAA+B;AAAA,IAC9C;AACA,UAAM,aAAa,UAAU,QAAQ,YAAY;AACjD,UAAM,cAAc,UAAU,QAAQ,aAAa;AACnD,UAAM,OAAO,qBAAqB,MAAM,MAAM,aAAsC,SAAS,CAAC,CAAC,CAAC;AAChG,UAAM,cAAc,mBAAmB,IAAI;AAC3C,UAAM,cAAc,MAAM,0BAA0B,WAAW;AAAA,MAC7D,UAAU,KAAK;AAAA,MACf,gBAAgB;AAAA,MAChB,QAAQ;AAAA,MACR,cAAc;AAAA,MACd,YAAY,KAAK;AAAA,MACjB,WAAW;AAAA,MACX,eAAe,QAAQ;AAAA,MACvB,gBAAgB,QAAQ;AAAA,MACxB,iBAAiB;AAAA,IACnB,CAAC;AACD,QAAI,eAAe,CAAC,YAAY,IAAI;AAClC,aAAO,mBAAmB,aAAa,KAAK,YAAY,MAAM,EAAE,QAAQ,YAAY,OAAO,CAAC,CAAC;AAAA,IAC/F;AACA,UAAM,gBAAgB,MAAM,UACxB,KAAK,UAAU,KAAK,KACpB,MAAM;AAAA,MACJ;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,QACE,QAAQ,KAAK;AAAA,QACb,QAAQ,KAAK,UAAU,KAAK;AAAA,MAC9B;AAAA,MACA,KAAK;AAAA,IACP;AAEJ,UAAM,EAAE,SAAS,IAAI,MAAM,WAAW,QAAQ,iCAAiC;AAAA,MAC7E,OAAO,EAAE,IAAI,cAAc;AAAA,MAC3B,KAAK;AAAA,IACP,CAAC;AACD,QAAI,aAAa,MAAM,YAAY,uBAAuB;AACxD,YAAM,iCAAiC,WAAW;AAAA,QAChD,UAAU,KAAK;AAAA,QACf,gBAAgB;AAAA,QAChB,QAAQ;AAAA,QACR,cAAc;AAAA,QACd,YAAY,KAAK;AAAA,QACjB,WAAW;AAAA,QACX,eAAe,QAAQ;AAAA,QACvB,gBAAgB,QAAQ;AAAA,QACxB,UAAU,YAAY,YAAY;AAAA,MACpC,CAAC;AAAA,IACH;AAEA,WAAO;AAAA,MACL;AAAA,QACE,aAAa,KAAK,EAAE,IAAI,KAAK,CAAC;AAAA,QAC9B;AAAA,QACA,EAAE,cAAc,sBAAsB,YAAY,KAAK,GAAG;AAAA,MAC5D;AAAA,IACF;AAAA,EACF,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,GAAG;AACxB,aAAO,mBAAmB,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC,CAAC;AAAA,IAC/E;AACA,QAAI,eAAe,EAAE,UAAU;AAC7B,aAAO;AAAA,QACL,aAAa,KAAK,EAAE,OAAO,qBAAqB,SAAS,IAAI,OAAO,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,MACxF;AAAA,IACF;AACA,WAAO,MAAM,iCAAiC,EAAE,IAAI,CAAC;AACrD,WAAO;AAAA,MACL,aAAa,KAAK,EAAE,OAAO,wBAAwB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACvE;AAAA,EACF;AACF;AAEA,MAAM,iBAAiB,EAAE,OAAO;AAAA,EAC9B,IAAI,EAAE,OAAO;AAAA,EACb,QAAQ,EAAE,OAAO;AAAA,EACjB,YAAY,EAAE,OAAO;AAAA,EACrB,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,YAAY,EAAE,QAAQ,EAAE,SAAS;AAAA,EACjC,cAAc,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC7C,cAAc,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC7C,iBAAiB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAChD,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC1C,kBAAkB,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS,EAAE,SAAS;AAAA,EACxE,oBAAoB,EAAE,OAAO,EAAE,SAAS;AAAA,EACxC,eAAe,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC9C,gBAAgB,EAAE,OAAO;AAAA,EACzB,UAAU,EAAE,OAAO;AAAA,EACnB,WAAW,EAAE,OAAO;AAAA,EACpB,cAAc,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC7C,eAAe,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS;AAAA,EAC1D,UAAU,EAAE,OAAO;AAAA,IACjB,IAAI,EAAE,OAAO,EAAE,SAAS;AAAA,IACxB,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,IACjC,MAAM,EAAE,OAAO,EAAE,SAAS;AAAA,EAC5B,CAAC;AACH,CAAC;AAED,MAAM,2BAA2B,EAAE,OAAO;AAAA,EACxC,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACnC,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AACrC,CAAC;AAEM,MAAM,UAA2B,2BAA2B;AAAA,EACjE,cAAc;AAAA,EACd;AAAA,EACA,oBAAoB,8BAA8B,cAAc;AAAA,EAChE,QAAQ;AAAA,IACN,QAAQ;AAAA,IACR,gBAAgB;AAAA,IAChB,aAAa;AAAA,EACf;AAAA,EACA,QAAQ;AAAA,IACN,QAAQ;AAAA,IACR,gBAAgB;AAAA,IAChB,aAAa;AAAA,EACf;AAAA,EACA,KAAK;AAAA,IACH,QAAQ;AAAA,IACR,gBAAgB;AAAA,IAChB,aAAa;AAAA,EACf;AACF,CAAC;",
   "names": []
 }

package/dist/modules/customers/lib/todoCompatibility.js

@@ -11,6 +11,12 @@ import {
 import { hydrateCanonicalInteractions, loadCustomerSummaries } from "./interactionReadModel.js";
 import { createLogger } from "@open-mercato/shared/lib/logger";
 const logger = createLogger("customers");
+function emptyCanonicalTodoList() {
+  return { items: [], bridgeIds: /* @__PURE__ */ new Set(), total: 0 };
+}
+function isCollapsedRestrictedOrganizationScope(organizationIds, isUnrestricted) {
+  return isUnrestricted !== true && (!organizationIds || organizationIds.length === 0);
+}
 function resolveLegacyTodoSource(source) {
   return typeof source === "string" && source.trim().length > 0 ? source : EXAMPLE_TODO_SOURCE;
 }
@@ -258,6 +264,9 @@ async function resolveLegacyTodoDetails(queryEngine, links, tenantId, organizati
   return details;
 }
 async function listLegacyTodoRows(em, queryEngine, tenantId, organizationIds, entityId, options) {
+  if (isCollapsedRestrictedOrganizationScope(organizationIds, options?.isUnrestricted)) {
+    return [];
+  }
   const where = { tenantId };
   if (organizationIds && organizationIds.length > 0) {
     where.organizationId = { $in: organizationIds };
@@ -288,6 +297,9 @@ async function listLegacyTodoRows(em, queryEngine, tenantId, organizationIds, en
   });
 }
 async function listCanonicalTodoRows(em, container, auth, selectedOrganizationId, organizationIds, options) {
+  if (isCollapsedRestrictedOrganizationScope(organizationIds, options?.isUnrestricted)) {
+    return emptyCanonicalTodoList();
+  }
   const where = {
     tenantId: auth.tenantId,
     interactionType: "task"

package/dist/modules/customers/lib/todoCompatibility.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/customers/lib/todoCompatibility.ts"],
-  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport type { QueryEngine } from '@open-mercato/shared/lib/query/types'\nimport type { EntityId } from '@open-mercato/shared/modules/entities'\nimport { parseBooleanFromUnknown } from '@open-mercato/shared/lib/boolean'\nimport {\n  CustomerInteraction,\n  CustomerTodoLink,\n} from '../data/entities'\nimport type { InteractionRecord } from './interactionCompatibility'\nimport {\n  CUSTOMER_INTERACTION_TASK_SOURCE,\n  EXAMPLE_TODO_SOURCE,\n  resolveExampleIntegrationHref,\n} from './interactionCompatibility'\nimport { hydrateCanonicalInteractions, loadCustomerSummaries } from './interactionReadModel'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('customers')\n\nexport type CustomerTodoRow = {\n  id: string\n  todoId: string\n  todoSource: string\n  todoTitle: string | null\n  todoIsDone: boolean | null\n  todoPriority?: number | null\n  todoSeverity?: string | null\n  todoDescription?: string | null\n  todoDueAt?: string | null\n  todoCustomValues?: Record<string, unknown> | null\n  todoOrganizationId: string | null\n  todoUpdatedAt?: string | null\n  organizationId: string\n  tenantId: string\n  createdAt: string\n  externalHref?: string | null\n  _integrations?: Record<string, unknown>\n  customer: {\n    id: string | null\n    displayName: string | null\n    kind: string | null\n  }\n}\n\nexport type LegacyTodoDetail = {\n  title: string | null\n  isDone: boolean | null\n  priority: number | null\n  severity: string | null\n  description: string | null\n  dueAt: string | null\n  organizationId: string | null\n  updatedAt: string | null\n  customValues: Record<string, unknown> | null\n}\n\ntype CustomerSummary = {\n  id: string | null\n  displayName: string | null\n  kind: string | null\n}\n\ntype CustomersAuthLike = {\n  tenantId: string | null\n  orgId?: string | null\n  sub?: string | null\n  userId?: string | null\n  keyId?: string | null\n}\n\ntype CustomersContainerLike = {\n  resolve: (name: string) => unknown\n}\n\nexport type CanonicalTodoListResult = {\n  items: CustomerTodoRow[]\n  bridgeIds: Set<string>\n  total: number\n}\n\nexport type ListTodosPagination = { page: number; pageSize: number }\n\nfunction resolveLegacyTodoSource(source: string | null | undefined): string {\n  return typeof source === 'string' && source.trim().length > 0\n    ? source\n    : EXAMPLE_TODO_SOURCE\n}\n\nfunction extractTodoTitle(record: Record<string, unknown>): string | null {\n  const candidates = ['title', 'subject', 'name', 'summary', 'text', 'description']\n  for (const key of candidates) {\n    const value = record[key]\n    if (typeof value === 'string' && value.trim().length > 0) {\n      return value.trim()\n    }\n  }\n  return null\n}\n\nfunction parseNumber(value: unknown): number | null {\n  if (typeof value === 'number' && Number.isFinite(value)) return value\n  if (typeof value === 'string') {\n    const trimmed = value.trim()\n    if (!trimmed.length) return null\n    const parsed = Number(trimmed)\n    if (!Number.isNaN(parsed)) return parsed\n  }\n  return null\n}\n\nfunction parseDateValue(value: unknown): string | null {\n  if (value instanceof Date) {\n    return Number.isNaN(value.getTime()) ? null : value.toISOString()\n  }\n  if (typeof value === 'string') {\n    const trimmed = value.trim()\n    if (!trimmed.length) return null\n    const parsed = new Date(trimmed)\n    return Number.isNaN(parsed.getTime()) ? null : parsed.toISOString()\n  }\n  return null\n}\n\nfunction readCustomField(record: Record<string, unknown>, key: string): unknown {\n  const custom = record.custom ?? record.customFields ?? record.cf\n  if (custom && typeof custom === 'object') {\n    const bucket = custom as Record<string, unknown>\n    if (key in bucket) return bucket[key]\n  }\n  return undefined\n}\n\nexport function normalizeTodoSearch(value: string | undefined): string | null {\n  if (typeof value !== 'string') return null\n  const trimmed = value.trim().toLowerCase()\n  return trimmed.length > 0 ? trimmed : null\n}\n\nexport function sortTodoRows(rows: CustomerTodoRow[]): CustomerTodoRow[] {\n  return [...rows].sort((left, right) => {\n    const leftTime = new Date(left.createdAt).getTime()\n    const rightTime = new Date(right.createdAt).getTime()\n    if (leftTime === rightTime) {\n      return right.id.localeCompare(left.id)\n    }\n    return rightTime - leftTime\n  })\n}\n\nexport function filterTodoRows(rows: CustomerTodoRow[], search: string | null): CustomerTodoRow[] {\n  if (!search) return rows\n  return rows.filter((row) => {\n    const haystack = [\n      row.customer.displayName,\n      row.todoTitle,\n      row.todoDescription,\n    ]\n      .filter((value): value is string => typeof value === 'string' && value.trim().length > 0)\n      .join(' ')\n      .toLowerCase()\n    return haystack.includes(search)\n  })\n}\n\nexport function paginateTodoRows(\n  rows: CustomerTodoRow[],\n  page: number,\n  pageSize: number,\n  exportAll: boolean,\n): { items: CustomerTodoRow[]; total: number; page: number; pageSize: number; totalPages: number } {\n  const total = rows.length\n  if (exportAll) {\n    return {\n      items: rows,\n      total,\n      page: 1,\n      pageSize: total,\n      totalPages: 1,\n    }\n  }\n  const start = (page - 1) * pageSize\n  return {\n    items: rows.slice(start, start + pageSize),\n    total,\n    page,\n    pageSize,\n    totalPages: Math.max(1, Math.ceil(total / pageSize)),\n  }\n}\n\nexport async function resolveLegacyTodoDetails(\n  queryEngine: QueryEngine,\n  links: CustomerTodoLink[],\n  tenantId: string | null,\n  organizationIds: Array<string | null>,\n): Promise<Map<string, LegacyTodoDetail>> {\n  const details = new Map<string, LegacyTodoDetail>()\n  if (!links.length || !tenantId) return details\n\n  const scopedOrganizationIds = organizationIds.filter(\n    (value): value is string => typeof value === 'string' && value.trim().length > 0,\n  )\n\n  const idsBySource = new Map<string, Set<string>>()\n  for (const link of links) {\n    const source = resolveLegacyTodoSource(link.todoSource)\n    const id =\n      typeof link.todoId === 'string' && link.todoId.trim().length > 0\n        ? link.todoId\n        : String(link.todoId ?? '')\n    if (!id) continue\n    if (!idsBySource.has(source)) idsBySource.set(source, new Set<string>())\n    idsBySource.get(source)!.add(id)\n  }\n\n  for (const [source, idSet] of idsBySource.entries()) {\n    const ids = Array.from(idSet)\n    if (!ids.length) continue\n    try {\n      const result = await queryEngine.query<Record<string, unknown>>(source as EntityId, {\n        tenantId,\n        organizationIds: scopedOrganizationIds.length > 0 ? scopedOrganizationIds : undefined,\n        filters: { id: { $in: ids } },\n        includeCustomFields: ['priority', 'due_at', 'severity', 'description'],\n        page: { page: 1, pageSize: Math.max(ids.length, 1) },\n      })\n\n      for (const item of result.items ?? []) {\n        if (!item || typeof item !== 'object') continue\n        const record = item as Record<string, unknown>\n        const rawId =\n          typeof record.id === 'string' && record.id.trim().length > 0\n            ? record.id\n            : String(record.id ?? '')\n        if (!rawId) continue\n\n        const isDone = (() => {\n          const direct = parseBooleanFromUnknown(record.is_done)\n          if (direct !== null) return direct\n          const custom = parseBooleanFromUnknown(readCustomField(record, 'is_done'))\n          if (custom !== null) return custom\n          const generic = parseBooleanFromUnknown(record.isDone)\n          if (generic !== null) return generic\n          return parseBooleanFromUnknown(readCustomField(record, 'isDone'))\n        })()\n\n        const priority = (() => {\n          const candidates = [\n            record['cf:priority'],\n            record['cf_priority'],\n            record.priority,\n            readCustomField(record, 'priority'),\n          ]\n          for (const candidate of candidates) {\n            const parsed = parseNumber(candidate)\n            if (parsed !== null) return parsed\n          }\n          return null\n        })()\n\n        const severity = (() => {\n          const candidates = [\n            record['cf:severity'],\n            record['cf_severity'],\n            record.severity,\n            readCustomField(record, 'severity'),\n          ]\n          for (const candidate of candidates) {\n            if (typeof candidate === 'string' && candidate.trim().length > 0) {\n              return candidate.trim()\n            }\n          }\n          return null\n        })()\n\n        const description = (() => {\n          const candidates = [\n            record.description,\n            record['cf:description'],\n            record['cf_description'],\n            readCustomField(record, 'description'),\n          ]\n          for (const candidate of candidates) {\n            if (typeof candidate === 'string' && candidate.trim().length > 0) {\n              return candidate.trim()\n            }\n          }\n          return null\n        })()\n\n        const dueAt = (() => {\n          const candidates = [\n            record.due_at,\n            record.dueAt,\n            record['cf:due_at'],\n            record['cf_due_at'],\n            readCustomField(record, 'due_at'),\n            readCustomField(record, 'dueAt'),\n          ]\n          for (const candidate of candidates) {\n            const parsed = parseDateValue(candidate)\n            if (parsed) return parsed\n          }\n          return null\n        })()\n\n        const organizationId = (() => {\n          const candidates = [\n            record.organization_id,\n            record.organizationId,\n            record['cf:organization_id'],\n            record['cf_organization_id'],\n            readCustomField(record, 'organization_id'),\n            readCustomField(record, 'organizationId'),\n          ]\n          for (const candidate of candidates) {\n            if (typeof candidate === 'string' && candidate.trim().length > 0) {\n              return candidate.trim()\n            }\n          }\n          return null\n        })()\n\n        const customValues: Record<string, unknown> = {}\n        const assignCustomValue = (key: string, value: unknown) => {\n          const trimmedKey = key.trim()\n          if (!trimmedKey.length) return\n          customValues[trimmedKey] = value === undefined ? null : value\n        }\n        for (const [rawKey, rawValue] of Object.entries(record)) {\n          if (rawKey.startsWith('cf:')) {\n            assignCustomValue(rawKey.slice(3), rawValue)\n          } else if (rawKey.startsWith('cf_')) {\n            assignCustomValue(rawKey.slice(3), rawValue)\n          }\n        }\n        const nestedCustom = record.custom ?? record.customFields ?? record.cf\n        if (nestedCustom && typeof nestedCustom === 'object') {\n          for (const [key, value] of Object.entries(nestedCustom as Record<string, unknown>)) {\n            assignCustomValue(key, value)\n          }\n        }\n\n        const updatedAt = (() => {\n          const candidates = [record.updated_at, record.updatedAt]\n          for (const candidate of candidates) {\n            const parsed = parseDateValue(candidate)\n            if (parsed) return parsed\n          }\n          return null\n        })()\n\n        details.set(`${source}:${rawId}`, {\n          title: extractTodoTitle(record),\n          isDone,\n          priority,\n          severity,\n          description,\n          dueAt,\n          organizationId,\n          updatedAt,\n          customValues: Object.keys(customValues).length > 0 ? customValues : null,\n        })\n      }\n    } catch (err) {\n      logger.warn('Failed to resolve todo details', { component: 'todoCompatibility', source, err })\n      continue\n    }\n  }\n\n  return details\n}\n\nexport async function listLegacyTodoRows(\n  em: EntityManager,\n  queryEngine: QueryEngine,\n  tenantId: string,\n  organizationIds: string[] | null,\n  entityId: string | undefined,\n  options?: { limit?: number | null },\n): Promise<CustomerTodoRow[]> {\n  const where: Record<string, unknown> = { tenantId }\n  if (organizationIds && organizationIds.length > 0) {\n    where.organizationId = { $in: organizationIds }\n  }\n  if (entityId) {\n    where.entity = entityId\n  }\n\n  const findOptions: Record<string, unknown> = {\n    populate: ['entity'],\n    orderBy: { createdAt: 'desc' },\n  }\n  if (typeof options?.limit === 'number' && Number.isFinite(options.limit) && options.limit > 0) {\n    findOptions.limit = options.limit\n  }\n\n  const links = await em.find(CustomerTodoLink, where, findOptions as any)\n  const details = await resolveLegacyTodoDetails(\n    queryEngine,\n    links,\n    tenantId,\n    organizationIds ?? [],\n  )\n\n  return links.map((link) => {\n    const source = resolveLegacyTodoSource(link.todoSource)\n    return mapLegacyTodoLinkToRow(\n      link,\n      details.get(`${source}:${link.todoId}`) ?? null,\n    )\n  })\n}\n\nexport async function listCanonicalTodoRows(\n  em: EntityManager,\n  container: CustomersContainerLike,\n  auth: CustomersAuthLike,\n  selectedOrganizationId: string | null,\n  organizationIds: string[] | null,\n  options?: {\n    entityId?: string\n    includeDeleted?: boolean\n    source?: string | string[] | null\n    pagination?: ListTodosPagination | null\n    searchText?: string | null\n    limit?: number | null\n  },\n): Promise<CanonicalTodoListResult> {\n  const where: Record<string, unknown> = {\n    tenantId: auth.tenantId,\n    interactionType: 'task',\n  }\n  if (!options?.includeDeleted) {\n    where.deletedAt = null\n  }\n  if (organizationIds && organizationIds.length > 0) {\n    where.organizationId = { $in: organizationIds }\n  }\n  if (options?.entityId) {\n    where.entity = options.entityId\n  }\n  if (options?.source) {\n    where.source = Array.isArray(options.source) ? { $in: options.source } : options.source\n  }\n  const trimmedSearch =\n    typeof options?.searchText === 'string' ? options.searchText.trim() : ''\n  if (trimmedSearch.length > 0) {\n    const pattern = `%${trimmedSearch}%`\n    where.$or = [\n      { title: { $ilike: pattern } },\n      { body: { $ilike: pattern } },\n    ]\n  }\n\n  const findOptions: Record<string, unknown> = {\n    orderBy: { createdAt: 'desc' },\n  }\n  const pagination = options?.pagination ?? null\n  if (pagination) {\n    findOptions.offset = Math.max(0, (pagination.page - 1) * pagination.pageSize)\n    findOptions.limit = pagination.pageSize\n  } else if (\n    typeof options?.limit === 'number' &&\n    Number.isFinite(options.limit) &&\n    options.limit > 0\n  ) {\n    findOptions.limit = options.limit\n  }\n\n  let interactions: CustomerInteraction[]\n  let total: number\n  if (pagination) {\n    const [rows, count] = await em.findAndCount(CustomerInteraction, where, findOptions as any)\n    interactions = rows\n    total = count\n  } else {\n    interactions = await em.find(CustomerInteraction, where, findOptions as any)\n    total = interactions.filter((interaction) => !interaction.deletedAt).length\n  }\n  const activeInteractions = interactions.filter((interaction) => !interaction.deletedAt)\n  const groups = new Map<string, CustomerInteraction[]>()\n\n  for (const interaction of activeInteractions) {\n    const organizationId =\n      typeof interaction.organizationId === 'string' && interaction.organizationId.trim().length > 0\n        ? interaction.organizationId\n        : selectedOrganizationId ?? ''\n    const bucket = groups.get(organizationId)\n    if (bucket) {\n      bucket.push(interaction)\n    } else {\n      groups.set(organizationId, [interaction])\n    }\n  }\n\n  const rowByInteractionId = new Map<string, CustomerTodoRow>()\n\n  for (const [groupOrganizationId, groupedInteractions] of groups.entries()) {\n    const scopedOrganizationId = groupOrganizationId.length > 0 ? groupOrganizationId : null\n    const hydrated = await hydrateCanonicalInteractions({\n      em,\n      container,\n      auth: {\n        ...auth,\n        orgId: auth.orgId ?? null,\n      },\n      selectedOrganizationId: scopedOrganizationId,\n      interactions: groupedInteractions,\n    })\n    const customerIds = Array.from(\n      new Set(\n        hydrated\n          .map((interaction) => interaction.entityId ?? null)\n          .filter((value): value is string => !!value),\n      ),\n    )\n    const customerSummaries = await loadCustomerSummaries(\n      em,\n      customerIds,\n      auth.tenantId,\n      scopedOrganizationId,\n    )\n\n    for (const interaction of hydrated) {\n      rowByInteractionId.set(\n        interaction.id,\n        mapInteractionRecordToTodoRow(\n          interaction,\n          interaction.entityId ? customerSummaries.get(interaction.entityId) ?? null : null,\n        ),\n      )\n    }\n  }\n\n  return {\n    items: activeInteractions\n      .map((interaction) => rowByInteractionId.get(interaction.id) ?? null)\n      .filter((row): row is CustomerTodoRow => !!row),\n    bridgeIds: new Set(interactions.map((interaction) => interaction.id)),\n    total,\n  }\n}\n\nexport function mapLegacyTodoLinkToRow(\n  link: CustomerTodoLink,\n  detail: LegacyTodoDetail | null,\n  customerOverride?: CustomerSummary | null,\n): CustomerTodoRow {\n  const entity = customerOverride ?? {\n    id: typeof link.entity === 'string' ? null : link.entity.id,\n    displayName: typeof link.entity === 'string' ? null : link.entity.displayName ?? null,\n    kind: typeof link.entity === 'string' ? null : link.entity.kind ?? null,\n  }\n\n  return {\n    id: link.id,\n    todoId: link.todoId,\n    todoSource: resolveLegacyTodoSource(link.todoSource),\n    todoTitle: detail?.title ?? null,\n    todoIsDone: detail?.isDone ?? null,\n    todoPriority: detail?.priority ?? null,\n    todoSeverity: detail?.severity ?? null,\n    todoDescription: detail?.description ?? null,\n    todoDueAt: detail?.dueAt ?? null,\n    todoCustomValues: detail?.customValues ?? null,\n    todoOrganizationId: detail?.organizationId ?? link.organizationId ?? null,\n    todoUpdatedAt: detail?.updatedAt ?? null,\n    organizationId: link.organizationId,\n    tenantId: link.tenantId,\n    createdAt: link.createdAt.toISOString(),\n    _integrations: undefined,\n    customer: entity,\n  }\n}\n\nexport function mapInteractionRecordToTodoRow(\n  interaction: InteractionRecord,\n  customer: CustomerSummary | null,\n  options?: { rowId?: string | null; todoSource?: string | null },\n): CustomerTodoRow {\n  const customValues: Record<string, unknown> = { ...(interaction.customValues ?? {}) }\n  if (interaction.priority !== undefined && customValues.priority === undefined) {\n    customValues.priority = interaction.priority ?? null\n  }\n  if (interaction.body !== undefined && customValues.description === undefined) {\n    customValues.description = interaction.body ?? null\n  }\n  if (interaction.scheduledAt !== undefined && customValues.due_at === undefined) {\n    customValues.due_at = interaction.scheduledAt ?? null\n  }\n\n  return {\n    id:\n      typeof options?.rowId === 'string' && options.rowId.trim().length > 0\n        ? options.rowId\n        : interaction.id,\n    todoId: interaction.id,\n    todoSource:\n      typeof options?.todoSource === 'string' && options.todoSource.trim().length > 0\n        ? options.todoSource\n        : CUSTOMER_INTERACTION_TASK_SOURCE,\n    todoTitle: interaction.title ?? null,\n    todoIsDone: interaction.status === 'done',\n    todoPriority: interaction.priority ?? null,\n    todoSeverity:\n      typeof customValues.severity === 'string' && customValues.severity.trim().length > 0\n        ? customValues.severity.trim()\n        : null,\n    todoDescription: interaction.body ?? null,\n    todoDueAt: interaction.scheduledAt ?? null,\n    todoCustomValues: Object.keys(customValues).length > 0 ? customValues : null,\n    todoOrganizationId: interaction.organizationId ?? null,\n    todoUpdatedAt: interaction.updatedAt ?? null,\n    organizationId: interaction.organizationId ?? '',\n    tenantId: interaction.tenantId ?? '',\n    createdAt: interaction.createdAt,\n    externalHref: resolveExampleIntegrationHref(interaction),\n    _integrations: interaction._integrations ?? undefined,\n    customer: customer ?? {\n      id: interaction.entityId ?? null,\n      displayName: null,\n      kind: null,\n    },\n  }\n}\n"],
-  "mappings": "AAGA,SAAS,+BAA+B;AACxC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAEP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,8BAA8B,6BAA6B;AACpE,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,WAAW;AAiEvC,SAAS,wBAAwB,QAA2C;AAC1E,SAAO,OAAO,WAAW,YAAY,OAAO,KAAK,EAAE,SAAS,IACxD,SACA;AACN;AAEA,SAAS,iBAAiB,QAAgD;AACxE,QAAM,aAAa,CAAC,SAAS,WAAW,QAAQ,WAAW,QAAQ,aAAa;AAChF,aAAW,OAAO,YAAY;AAC5B,UAAM,QAAQ,OAAO,GAAG;AACxB,QAAI,OAAO,UAAU,YAAY,MAAM,KAAK,EAAE,SAAS,GAAG;AACxD,aAAO,MAAM,KAAK;AAAA,IACpB;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,YAAY,OAA+B;AAClD,MAAI,OAAO,UAAU,YAAY,OAAO,SAAS,KAAK,EAAG,QAAO;AAChE,MAAI,OAAO,UAAU,UAAU;AAC7B,UAAM,UAAU,MAAM,KAAK;AAC3B,QAAI,CAAC,QAAQ,OAAQ,QAAO;AAC5B,UAAM,SAAS,OAAO,OAAO;AAC7B,QAAI,CAAC,OAAO,MAAM,MAAM,EAAG,QAAO;AAAA,EACpC;AACA,SAAO;AACT;AAEA,SAAS,eAAe,OAA+B;AACrD,MAAI,iBAAiB,MAAM;AACzB,WAAO,OAAO,MAAM,MAAM,QAAQ,CAAC,IAAI,OAAO,MAAM,YAAY;AAAA,EAClE;AACA,MAAI,OAAO,UAAU,UAAU;AAC7B,UAAM,UAAU,MAAM,KAAK;AAC3B,QAAI,CAAC,QAAQ,OAAQ,QAAO;AAC5B,UAAM,SAAS,IAAI,KAAK,OAAO;AAC/B,WAAO,OAAO,MAAM,OAAO,QAAQ,CAAC,IAAI,OAAO,OAAO,YAAY;AAAA,EACpE;AACA,SAAO;AACT;AAEA,SAAS,gBAAgB,QAAiC,KAAsB;AAC9E,QAAM,SAAS,OAAO,UAAU,OAAO,gBAAgB,OAAO;AAC9D,MAAI,UAAU,OAAO,WAAW,UAAU;AACxC,UAAM,SAAS;AACf,QAAI,OAAO,OAAQ,QAAO,OAAO,GAAG;AAAA,EACtC;AACA,SAAO;AACT;AAEO,SAAS,oBAAoB,OAA0C;AAC5E,MAAI,OAAO,UAAU,SAAU,QAAO;AACtC,QAAM,UAAU,MAAM,KAAK,EAAE,YAAY;AACzC,SAAO,QAAQ,SAAS,IAAI,UAAU;AACxC;AAEO,SAAS,aAAa,MAA4C;AACvE,SAAO,CAAC,GAAG,IAAI,EAAE,KAAK,CAAC,MAAM,UAAU;AACrC,UAAM,WAAW,IAAI,KAAK,KAAK,SAAS,EAAE,QAAQ;AAClD,UAAM,YAAY,IAAI,KAAK,MAAM,SAAS,EAAE,QAAQ;AACpD,QAAI,aAAa,WAAW;AAC1B,aAAO,MAAM,GAAG,cAAc,KAAK,EAAE;AAAA,IACvC;AACA,WAAO,YAAY;AAAA,EACrB,CAAC;AACH;AAEO,SAAS,eAAe,MAAyB,QAA0C;AAChG,MAAI,CAAC,OAAQ,QAAO;AACpB,SAAO,KAAK,OAAO,CAAC,QAAQ;AAC1B,UAAM,WAAW;AAAA,MACf,IAAI,SAAS;AAAA,MACb,IAAI;AAAA,MACJ,IAAI;AAAA,IACN,EACG,OAAO,CAAC,UAA2B,OAAO,UAAU,YAAY,MAAM,KAAK,EAAE,SAAS,CAAC,EACvF,KAAK,GAAG,EACR,YAAY;AACf,WAAO,SAAS,SAAS,MAAM;AAAA,EACjC,CAAC;AACH;AAEO,SAAS,iBACd,MACA,MACA,UACA,WACiG;AACjG,QAAM,QAAQ,KAAK;AACnB,MAAI,WAAW;AACb,WAAO;AAAA,MACL,OAAO;AAAA,MACP;AAAA,MACA,MAAM;AAAA,MACN,UAAU;AAAA,MACV,YAAY;AAAA,IACd;AAAA,EACF;AACA,QAAM,SAAS,OAAO,KAAK;AAC3B,SAAO;AAAA,IACL,OAAO,KAAK,MAAM,OAAO,QAAQ,QAAQ;AAAA,IACzC;AAAA,IACA;AAAA,IACA;AAAA,IACA,YAAY,KAAK,IAAI,GAAG,KAAK,KAAK,QAAQ,QAAQ,CAAC;AAAA,EACrD;AACF;AAEA,eAAsB,yBACpB,aACA,OACA,UACA,iBACwC;AACxC,QAAM,UAAU,oBAAI,IAA8B;AAClD,MAAI,CAAC,MAAM,UAAU,CAAC,SAAU,QAAO;AAEvC,QAAM,wBAAwB,gBAAgB;AAAA,IAC5C,CAAC,UAA2B,OAAO,UAAU,YAAY,MAAM,KAAK,EAAE,SAAS;AAAA,EACjF;AAEA,QAAM,cAAc,oBAAI,IAAyB;AACjD,aAAW,QAAQ,OAAO;AACxB,UAAM,SAAS,wBAAwB,KAAK,UAAU;AACtD,UAAM,KACJ,OAAO,KAAK,WAAW,YAAY,KAAK,OAAO,KAAK,EAAE,SAAS,IAC3D,KAAK,SACL,OAAO,KAAK,UAAU,EAAE;AAC9B,QAAI,CAAC,GAAI;AACT,QAAI,CAAC,YAAY,IAAI,MAAM,EAAG,aAAY,IAAI,QAAQ,oBAAI,IAAY,CAAC;AACvE,gBAAY,IAAI,MAAM,EAAG,IAAI,EAAE;AAAA,EACjC;AAEA,aAAW,CAAC,QAAQ,KAAK,KAAK,YAAY,QAAQ,GAAG;AACnD,UAAM,MAAM,MAAM,KAAK,KAAK;AAC5B,QAAI,CAAC,IAAI,OAAQ;AACjB,QAAI;AACF,YAAM,SAAS,MAAM,YAAY,MAA+B,QAAoB;AAAA,QAClF;AAAA,QACA,iBAAiB,sBAAsB,SAAS,IAAI,wBAAwB;AAAA,QAC5E,SAAS,EAAE,IAAI,EAAE,KAAK,IAAI,EAAE;AAAA,QAC5B,qBAAqB,CAAC,YAAY,UAAU,YAAY,aAAa;AAAA,QACrE,MAAM,EAAE,MAAM,GAAG,UAAU,KAAK,IAAI,IAAI,QAAQ,CAAC,EAAE;AAAA,MACrD,CAAC;AAED,iBAAW,QAAQ,OAAO,SAAS,CAAC,GAAG;AACrC,YAAI,CAAC,QAAQ,OAAO,SAAS,SAAU;AACvC,cAAM,SAAS;AACf,cAAM,QACJ,OAAO,OAAO,OAAO,YAAY,OAAO,GAAG,KAAK,EAAE,SAAS,IACvD,OAAO,KACP,OAAO,OAAO,MAAM,EAAE;AAC5B,YAAI,CAAC,MAAO;AAEZ,cAAM,UAAU,MAAM;AACpB,gBAAM,SAAS,wBAAwB,OAAO,OAAO;AACrD,cAAI,WAAW,KAAM,QAAO;AAC5B,gBAAM,SAAS,wBAAwB,gBAAgB,QAAQ,SAAS,CAAC;AACzE,cAAI,WAAW,KAAM,QAAO;AAC5B,gBAAM,UAAU,wBAAwB,OAAO,MAAM;AACrD,cAAI,YAAY,KAAM,QAAO;AAC7B,iBAAO,wBAAwB,gBAAgB,QAAQ,QAAQ,CAAC;AAAA,QAClE,GAAG;AAEH,cAAM,YAAY,MAAM;AACtB,gBAAM,aAAa;AAAA,YACjB,OAAO,aAAa;AAAA,YACpB,OAAO,aAAa;AAAA,YACpB,OAAO;AAAA,YACP,gBAAgB,QAAQ,UAAU;AAAA,UACpC;AACA,qBAAW,aAAa,YAAY;AAClC,kBAAM,SAAS,YAAY,SAAS;AACpC,gBAAI,WAAW,KAAM,QAAO;AAAA,UAC9B;AACA,iBAAO;AAAA,QACT,GAAG;AAEH,cAAM,YAAY,MAAM;AACtB,gBAAM,aAAa;AAAA,YACjB,OAAO,aAAa;AAAA,YACpB,OAAO,aAAa;AAAA,YACpB,OAAO;AAAA,YACP,gBAAgB,QAAQ,UAAU;AAAA,UACpC;AACA,qBAAW,aAAa,YAAY;AAClC,gBAAI,OAAO,cAAc,YAAY,UAAU,KAAK,EAAE,SAAS,GAAG;AAChE,qBAAO,UAAU,KAAK;AAAA,YACxB;AAAA,UACF;AACA,iBAAO;AAAA,QACT,GAAG;AAEH,cAAM,eAAe,MAAM;AACzB,gBAAM,aAAa;AAAA,YACjB,OAAO;AAAA,YACP,OAAO,gBAAgB;AAAA,YACvB,OAAO,gBAAgB;AAAA,YACvB,gBAAgB,QAAQ,aAAa;AAAA,UACvC;AACA,qBAAW,aAAa,YAAY;AAClC,gBAAI,OAAO,cAAc,YAAY,UAAU,KAAK,EAAE,SAAS,GAAG;AAChE,qBAAO,UAAU,KAAK;AAAA,YACxB;AAAA,UACF;AACA,iBAAO;AAAA,QACT,GAAG;AAEH,cAAM,SAAS,MAAM;AACnB,gBAAM,aAAa;AAAA,YACjB,OAAO;AAAA,YACP,OAAO;AAAA,YACP,OAAO,WAAW;AAAA,YAClB,OAAO,WAAW;AAAA,YAClB,gBAAgB,QAAQ,QAAQ;AAAA,YAChC,gBAAgB,QAAQ,OAAO;AAAA,UACjC;AACA,qBAAW,aAAa,YAAY;AAClC,kBAAM,SAAS,eAAe,SAAS;AACvC,gBAAI,OAAQ,QAAO;AAAA,UACrB;AACA,iBAAO;AAAA,QACT,GAAG;AAEH,cAAM,kBAAkB,MAAM;AAC5B,gBAAM,aAAa;AAAA,YACjB,OAAO;AAAA,YACP,OAAO;AAAA,YACP,OAAO,oBAAoB;AAAA,YAC3B,OAAO,oBAAoB;AAAA,YAC3B,gBAAgB,QAAQ,iBAAiB;AAAA,YACzC,gBAAgB,QAAQ,gBAAgB;AAAA,UAC1C;AACA,qBAAW,aAAa,YAAY;AAClC,gBAAI,OAAO,cAAc,YAAY,UAAU,KAAK,EAAE,SAAS,GAAG;AAChE,qBAAO,UAAU,KAAK;AAAA,YACxB;AAAA,UACF;AACA,iBAAO;AAAA,QACT,GAAG;AAEH,cAAM,eAAwC,CAAC;AAC/C,cAAM,oBAAoB,CAAC,KAAa,UAAmB;AACzD,gBAAM,aAAa,IAAI,KAAK;AAC5B,cAAI,CAAC,WAAW,OAAQ;AACxB,uBAAa,UAAU,IAAI,UAAU,SAAY,OAAO;AAAA,QAC1D;AACA,mBAAW,CAAC,QAAQ,QAAQ,KAAK,OAAO,QAAQ,MAAM,GAAG;AACvD,cAAI,OAAO,WAAW,KAAK,GAAG;AAC5B,8BAAkB,OAAO,MAAM,CAAC,GAAG,QAAQ;AAAA,UAC7C,WAAW,OAAO,WAAW,KAAK,GAAG;AACnC,8BAAkB,OAAO,MAAM,CAAC,GAAG,QAAQ;AAAA,UAC7C;AAAA,QACF;AACA,cAAM,eAAe,OAAO,UAAU,OAAO,gBAAgB,OAAO;AACpE,YAAI,gBAAgB,OAAO,iBAAiB,UAAU;AACpD,qBAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,YAAuC,GAAG;AAClF,8BAAkB,KAAK,KAAK;AAAA,UAC9B;AAAA,QACF;AAEA,cAAM,aAAa,MAAM;AACvB,gBAAM,aAAa,CAAC,OAAO,YAAY,OAAO,SAAS;AACvD,qBAAW,aAAa,YAAY;AAClC,kBAAM,SAAS,eAAe,SAAS;AACvC,gBAAI,OAAQ,QAAO;AAAA,UACrB;AACA,iBAAO;AAAA,QACT,GAAG;AAEH,gBAAQ,IAAI,GAAG,MAAM,IAAI,KAAK,IAAI;AAAA,UAChC,OAAO,iBAAiB,MAAM;AAAA,UAC9B;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA,cAAc,OAAO,KAAK,YAAY,EAAE,SAAS,IAAI,eAAe;AAAA,QACtE,CAAC;AAAA,MACH;AAAA,IACF,SAAS,KAAK;AACZ,aAAO,KAAK,kCAAkC,EAAE,WAAW,qBAAqB,QAAQ,IAAI,CAAC;AAC7F;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AACT;AAEA,eAAsB,mBACpB,IACA,aACA,UACA,iBACA,UACA,SAC4B;AAC5B,QAAM,QAAiC,EAAE,SAAS;AAClD,MAAI,mBAAmB,gBAAgB,SAAS,GAAG;AACjD,UAAM,iBAAiB,EAAE,KAAK,gBAAgB;AAAA,EAChD;AACA,MAAI,UAAU;AACZ,UAAM,SAAS;AAAA,EACjB;AAEA,QAAM,cAAuC;AAAA,IAC3C,UAAU,CAAC,QAAQ;AAAA,IACnB,SAAS,EAAE,WAAW,OAAO;AAAA,EAC/B;AACA,MAAI,OAAO,SAAS,UAAU,YAAY,OAAO,SAAS,QAAQ,KAAK,KAAK,QAAQ,QAAQ,GAAG;AAC7F,gBAAY,QAAQ,QAAQ;AAAA,EAC9B;AAEA,QAAM,QAAQ,MAAM,GAAG,KAAK,kBAAkB,OAAO,WAAkB;AACvE,QAAM,UAAU,MAAM;AAAA,IACpB;AAAA,IACA;AAAA,IACA;AAAA,IACA,mBAAmB,CAAC;AAAA,EACtB;AAEA,SAAO,MAAM,IAAI,CAAC,SAAS;AACzB,UAAM,SAAS,wBAAwB,KAAK,UAAU;AACtD,WAAO;AAAA,MACL;AAAA,MACA,QAAQ,IAAI,GAAG,MAAM,IAAI,KAAK,MAAM,EAAE,KAAK;AAAA,IAC7C;AAAA,EACF,CAAC;AACH;AAEA,eAAsB,sBACpB,IACA,WACA,MACA,wBACA,iBACA,SAQkC;AAClC,QAAM,QAAiC;AAAA,IACrC,UAAU,KAAK;AAAA,IACf,iBAAiB;AAAA,EACnB;AACA,MAAI,CAAC,SAAS,gBAAgB;AAC5B,UAAM,YAAY;AAAA,EACpB;AACA,MAAI,mBAAmB,gBAAgB,SAAS,GAAG;AACjD,UAAM,iBAAiB,EAAE,KAAK,gBAAgB;AAAA,EAChD;AACA,MAAI,SAAS,UAAU;AACrB,UAAM,SAAS,QAAQ;AAAA,EACzB;AACA,MAAI,SAAS,QAAQ;AACnB,UAAM,SAAS,MAAM,QAAQ,QAAQ,MAAM,IAAI,EAAE,KAAK,QAAQ,OAAO,IAAI,QAAQ;AAAA,EACnF;AACA,QAAM,gBACJ,OAAO,SAAS,eAAe,WAAW,QAAQ,WAAW,KAAK,IAAI;AACxE,MAAI,cAAc,SAAS,GAAG;AAC5B,UAAM,UAAU,IAAI,aAAa;AACjC,UAAM,MAAM;AAAA,MACV,EAAE,OAAO,EAAE,QAAQ,QAAQ,EAAE;AAAA,MAC7B,EAAE,MAAM,EAAE,QAAQ,QAAQ,EAAE;AAAA,IAC9B;AAAA,EACF;AAEA,QAAM,cAAuC;AAAA,IAC3C,SAAS,EAAE,WAAW,OAAO;AAAA,EAC/B;AACA,QAAM,aAAa,SAAS,cAAc;AAC1C,MAAI,YAAY;AACd,gBAAY,SAAS,KAAK,IAAI,IAAI,WAAW,OAAO,KAAK,WAAW,QAAQ;AAC5E,gBAAY,QAAQ,WAAW;AAAA,EACjC,WACE,OAAO,SAAS,UAAU,YAC1B,OAAO,SAAS,QAAQ,KAAK,KAC7B,QAAQ,QAAQ,GAChB;AACA,gBAAY,QAAQ,QAAQ;AAAA,EAC9B;AAEA,MAAI;AACJ,MAAI;AACJ,MAAI,YAAY;AACd,UAAM,CAAC,MAAM,KAAK,IAAI,MAAM,GAAG,aAAa,qBAAqB,OAAO,WAAkB;AAC1F,mBAAe;AACf,YAAQ;AAAA,EACV,OAAO;AACL,mBAAe,MAAM,GAAG,KAAK,qBAAqB,OAAO,WAAkB;AAC3E,YAAQ,aAAa,OAAO,CAAC,gBAAgB,CAAC,YAAY,SAAS,EAAE;AAAA,EACvE;AACA,QAAM,qBAAqB,aAAa,OAAO,CAAC,gBAAgB,CAAC,YAAY,SAAS;AACtF,QAAM,SAAS,oBAAI,IAAmC;AAEtD,aAAW,eAAe,oBAAoB;AAC5C,UAAM,iBACJ,OAAO,YAAY,mBAAmB,YAAY,YAAY,eAAe,KAAK,EAAE,SAAS,IACzF,YAAY,iBACZ,0BAA0B;AAChC,UAAM,SAAS,OAAO,IAAI,cAAc;AACxC,QAAI,QAAQ;AACV,aAAO,KAAK,WAAW;AAAA,IACzB,OAAO;AACL,aAAO,IAAI,gBAAgB,CAAC,WAAW,CAAC;AAAA,IAC1C;AAAA,EACF;AAEA,QAAM,qBAAqB,oBAAI,IAA6B;AAE5D,aAAW,CAAC,qBAAqB,mBAAmB,KAAK,OAAO,QAAQ,GAAG;AACzE,UAAM,uBAAuB,oBAAoB,SAAS,IAAI,sBAAsB;AACpF,UAAM,WAAW,MAAM,6BAA6B;AAAA,MAClD;AAAA,MACA;AAAA,MACA,MAAM;AAAA,QACJ,GAAG;AAAA,QACH,OAAO,KAAK,SAAS;AAAA,MACvB;AAAA,MACA,wBAAwB;AAAA,MACxB,cAAc;AAAA,IAChB,CAAC;AACD,UAAM,cAAc,MAAM;AAAA,MACxB,IAAI;AAAA,QACF,SACG,IAAI,CAAC,gBAAgB,YAAY,YAAY,IAAI,EACjD,OAAO,CAAC,UAA2B,CAAC,CAAC,KAAK;AAAA,MAC/C;AAAA,IACF;AACA,UAAM,oBAAoB,MAAM;AAAA,MAC9B;AAAA,MACA;AAAA,MACA,KAAK;AAAA,MACL;AAAA,IACF;AAEA,eAAW,eAAe,UAAU;AAClC,yBAAmB;AAAA,QACjB,YAAY;AAAA,QACZ;AAAA,UACE;AAAA,UACA,YAAY,WAAW,kBAAkB,IAAI,YAAY,QAAQ,KAAK,OAAO;AAAA,QAC/E;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AAAA,IACL,OAAO,mBACJ,IAAI,CAAC,gBAAgB,mBAAmB,IAAI,YAAY,EAAE,KAAK,IAAI,EACnE,OAAO,CAAC,QAAgC,CAAC,CAAC,GAAG;AAAA,IAChD,WAAW,IAAI,IAAI,aAAa,IAAI,CAAC,gBAAgB,YAAY,EAAE,CAAC;AAAA,IACpE;AAAA,EACF;AACF;AAEO,SAAS,uBACd,MACA,QACA,kBACiB;AACjB,QAAM,SAAS,oBAAoB;AAAA,IACjC,IAAI,OAAO,KAAK,WAAW,WAAW,OAAO,KAAK,OAAO;AAAA,IACzD,aAAa,OAAO,KAAK,WAAW,WAAW,OAAO,KAAK,OAAO,eAAe;AAAA,IACjF,MAAM,OAAO,KAAK,WAAW,WAAW,OAAO,KAAK,OAAO,QAAQ;AAAA,EACrE;AAEA,SAAO;AAAA,IACL,IAAI,KAAK;AAAA,IACT,QAAQ,KAAK;AAAA,IACb,YAAY,wBAAwB,KAAK,UAAU;AAAA,IACnD,WAAW,QAAQ,SAAS;AAAA,IAC5B,YAAY,QAAQ,UAAU;AAAA,IAC9B,cAAc,QAAQ,YAAY;AAAA,IAClC,cAAc,QAAQ,YAAY;AAAA,IAClC,iBAAiB,QAAQ,eAAe;AAAA,IACxC,WAAW,QAAQ,SAAS;AAAA,IAC5B,kBAAkB,QAAQ,gBAAgB;AAAA,IAC1C,oBAAoB,QAAQ,kBAAkB,KAAK,kBAAkB;AAAA,IACrE,eAAe,QAAQ,aAAa;AAAA,IACpC,gBAAgB,KAAK;AAAA,IACrB,UAAU,KAAK;AAAA,IACf,WAAW,KAAK,UAAU,YAAY;AAAA,IACtC,eAAe;AAAA,IACf,UAAU;AAAA,EACZ;AACF;AAEO,SAAS,8BACd,aACA,UACA,SACiB;AACjB,QAAM,eAAwC,EAAE,GAAI,YAAY,gBAAgB,CAAC,EAAG;AACpF,MAAI,YAAY,aAAa,UAAa,aAAa,aAAa,QAAW;AAC7E,iBAAa,WAAW,YAAY,YAAY;AAAA,EAClD;AACA,MAAI,YAAY,SAAS,UAAa,aAAa,gBAAgB,QAAW;AAC5E,iBAAa,cAAc,YAAY,QAAQ;AAAA,EACjD;AACA,MAAI,YAAY,gBAAgB,UAAa,aAAa,WAAW,QAAW;AAC9E,iBAAa,SAAS,YAAY,eAAe;AAAA,EACnD;AAEA,SAAO;AAAA,IACL,IACE,OAAO,SAAS,UAAU,YAAY,QAAQ,MAAM,KAAK,EAAE,SAAS,IAChE,QAAQ,QACR,YAAY;AAAA,IAClB,QAAQ,YAAY;AAAA,IACpB,YACE,OAAO,SAAS,eAAe,YAAY,QAAQ,WAAW,KAAK,EAAE,SAAS,IAC1E,QAAQ,aACR;AAAA,IACN,WAAW,YAAY,SAAS;AAAA,IAChC,YAAY,YAAY,WAAW;AAAA,IACnC,cAAc,YAAY,YAAY;AAAA,IACtC,cACE,OAAO,aAAa,aAAa,YAAY,aAAa,SAAS,KAAK,EAAE,SAAS,IAC/E,aAAa,SAAS,KAAK,IAC3B;AAAA,IACN,iBAAiB,YAAY,QAAQ;AAAA,IACrC,WAAW,YAAY,eAAe;AAAA,IACtC,kBAAkB,OAAO,KAAK,YAAY,EAAE,SAAS,IAAI,eAAe;AAAA,IACxE,oBAAoB,YAAY,kBAAkB;AAAA,IAClD,eAAe,YAAY,aAAa;AAAA,IACxC,gBAAgB,YAAY,kBAAkB;AAAA,IAC9C,UAAU,YAAY,YAAY;AAAA,IAClC,WAAW,YAAY;AAAA,IACvB,cAAc,8BAA8B,WAAW;AAAA,IACvD,eAAe,YAAY,iBAAiB;AAAA,IAC5C,UAAU,YAAY;AAAA,MACpB,IAAI,YAAY,YAAY;AAAA,MAC5B,aAAa;AAAA,MACb,MAAM;AAAA,IACR;AAAA,EACF;AACF;",
+  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport type { QueryEngine } from '@open-mercato/shared/lib/query/types'\nimport type { EntityId } from '@open-mercato/shared/modules/entities'\nimport { parseBooleanFromUnknown } from '@open-mercato/shared/lib/boolean'\nimport {\n  CustomerInteraction,\n  CustomerTodoLink,\n} from '../data/entities'\nimport type { InteractionRecord } from './interactionCompatibility'\nimport {\n  CUSTOMER_INTERACTION_TASK_SOURCE,\n  EXAMPLE_TODO_SOURCE,\n  resolveExampleIntegrationHref,\n} from './interactionCompatibility'\nimport { hydrateCanonicalInteractions, loadCustomerSummaries } from './interactionReadModel'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('customers')\n\nexport type CustomerTodoRow = {\n  id: string\n  todoId: string\n  todoSource: string\n  todoTitle: string | null\n  todoIsDone: boolean | null\n  todoPriority?: number | null\n  todoSeverity?: string | null\n  todoDescription?: string | null\n  todoDueAt?: string | null\n  todoCustomValues?: Record<string, unknown> | null\n  todoOrganizationId: string | null\n  todoUpdatedAt?: string | null\n  organizationId: string\n  tenantId: string\n  createdAt: string\n  externalHref?: string | null\n  _integrations?: Record<string, unknown>\n  customer: {\n    id: string | null\n    displayName: string | null\n    kind: string | null\n  }\n}\n\nexport type LegacyTodoDetail = {\n  title: string | null\n  isDone: boolean | null\n  priority: number | null\n  severity: string | null\n  description: string | null\n  dueAt: string | null\n  organizationId: string | null\n  updatedAt: string | null\n  customValues: Record<string, unknown> | null\n}\n\ntype CustomerSummary = {\n  id: string | null\n  displayName: string | null\n  kind: string | null\n}\n\ntype CustomersAuthLike = {\n  tenantId: string | null\n  orgId?: string | null\n  sub?: string | null\n  userId?: string | null\n  keyId?: string | null\n}\n\ntype CustomersContainerLike = {\n  resolve: (name: string) => unknown\n}\n\nexport type CanonicalTodoListResult = {\n  items: CustomerTodoRow[]\n  bridgeIds: Set<string>\n  total: number\n}\n\nfunction emptyCanonicalTodoList(): CanonicalTodoListResult {\n  return { items: [], bridgeIds: new Set(), total: 0 }\n}\n\nfunction isCollapsedRestrictedOrganizationScope(\n  organizationIds: string[] | null | undefined,\n  isUnrestricted: boolean | undefined,\n): boolean {\n  return isUnrestricted !== true && (!organizationIds || organizationIds.length === 0)\n}\n\nexport type ListTodosPagination = { page: number; pageSize: number }\n\nfunction resolveLegacyTodoSource(source: string | null | undefined): string {\n  return typeof source === 'string' && source.trim().length > 0\n    ? source\n    : EXAMPLE_TODO_SOURCE\n}\n\nfunction extractTodoTitle(record: Record<string, unknown>): string | null {\n  const candidates = ['title', 'subject', 'name', 'summary', 'text', 'description']\n  for (const key of candidates) {\n    const value = record[key]\n    if (typeof value === 'string' && value.trim().length > 0) {\n      return value.trim()\n    }\n  }\n  return null\n}\n\nfunction parseNumber(value: unknown): number | null {\n  if (typeof value === 'number' && Number.isFinite(value)) return value\n  if (typeof value === 'string') {\n    const trimmed = value.trim()\n    if (!trimmed.length) return null\n    const parsed = Number(trimmed)\n    if (!Number.isNaN(parsed)) return parsed\n  }\n  return null\n}\n\nfunction parseDateValue(value: unknown): string | null {\n  if (value instanceof Date) {\n    return Number.isNaN(value.getTime()) ? null : value.toISOString()\n  }\n  if (typeof value === 'string') {\n    const trimmed = value.trim()\n    if (!trimmed.length) return null\n    const parsed = new Date(trimmed)\n    return Number.isNaN(parsed.getTime()) ? null : parsed.toISOString()\n  }\n  return null\n}\n\nfunction readCustomField(record: Record<string, unknown>, key: string): unknown {\n  const custom = record.custom ?? record.customFields ?? record.cf\n  if (custom && typeof custom === 'object') {\n    const bucket = custom as Record<string, unknown>\n    if (key in bucket) return bucket[key]\n  }\n  return undefined\n}\n\nexport function normalizeTodoSearch(value: string | undefined): string | null {\n  if (typeof value !== 'string') return null\n  const trimmed = value.trim().toLowerCase()\n  return trimmed.length > 0 ? trimmed : null\n}\n\nexport function sortTodoRows(rows: CustomerTodoRow[]): CustomerTodoRow[] {\n  return [...rows].sort((left, right) => {\n    const leftTime = new Date(left.createdAt).getTime()\n    const rightTime = new Date(right.createdAt).getTime()\n    if (leftTime === rightTime) {\n      return right.id.localeCompare(left.id)\n    }\n    return rightTime - leftTime\n  })\n}\n\nexport function filterTodoRows(rows: CustomerTodoRow[], search: string | null): CustomerTodoRow[] {\n  if (!search) return rows\n  return rows.filter((row) => {\n    const haystack = [\n      row.customer.displayName,\n      row.todoTitle,\n      row.todoDescription,\n    ]\n      .filter((value): value is string => typeof value === 'string' && value.trim().length > 0)\n      .join(' ')\n      .toLowerCase()\n    return haystack.includes(search)\n  })\n}\n\nexport function paginateTodoRows(\n  rows: CustomerTodoRow[],\n  page: number,\n  pageSize: number,\n  exportAll: boolean,\n): { items: CustomerTodoRow[]; total: number; page: number; pageSize: number; totalPages: number } {\n  const total = rows.length\n  if (exportAll) {\n    return {\n      items: rows,\n      total,\n      page: 1,\n      pageSize: total,\n      totalPages: 1,\n    }\n  }\n  const start = (page - 1) * pageSize\n  return {\n    items: rows.slice(start, start + pageSize),\n    total,\n    page,\n    pageSize,\n    totalPages: Math.max(1, Math.ceil(total / pageSize)),\n  }\n}\n\nexport async function resolveLegacyTodoDetails(\n  queryEngine: QueryEngine,\n  links: CustomerTodoLink[],\n  tenantId: string | null,\n  organizationIds: Array<string | null>,\n): Promise<Map<string, LegacyTodoDetail>> {\n  const details = new Map<string, LegacyTodoDetail>()\n  if (!links.length || !tenantId) return details\n\n  const scopedOrganizationIds = organizationIds.filter(\n    (value): value is string => typeof value === 'string' && value.trim().length > 0,\n  )\n\n  const idsBySource = new Map<string, Set<string>>()\n  for (const link of links) {\n    const source = resolveLegacyTodoSource(link.todoSource)\n    const id =\n      typeof link.todoId === 'string' && link.todoId.trim().length > 0\n        ? link.todoId\n        : String(link.todoId ?? '')\n    if (!id) continue\n    if (!idsBySource.has(source)) idsBySource.set(source, new Set<string>())\n    idsBySource.get(source)!.add(id)\n  }\n\n  for (const [source, idSet] of idsBySource.entries()) {\n    const ids = Array.from(idSet)\n    if (!ids.length) continue\n    try {\n      const result = await queryEngine.query<Record<string, unknown>>(source as EntityId, {\n        tenantId,\n        organizationIds: scopedOrganizationIds.length > 0 ? scopedOrganizationIds : undefined,\n        filters: { id: { $in: ids } },\n        includeCustomFields: ['priority', 'due_at', 'severity', 'description'],\n        page: { page: 1, pageSize: Math.max(ids.length, 1) },\n      })\n\n      for (const item of result.items ?? []) {\n        if (!item || typeof item !== 'object') continue\n        const record = item as Record<string, unknown>\n        const rawId =\n          typeof record.id === 'string' && record.id.trim().length > 0\n            ? record.id\n            : String(record.id ?? '')\n        if (!rawId) continue\n\n        const isDone = (() => {\n          const direct = parseBooleanFromUnknown(record.is_done)\n          if (direct !== null) return direct\n          const custom = parseBooleanFromUnknown(readCustomField(record, 'is_done'))\n          if (custom !== null) return custom\n          const generic = parseBooleanFromUnknown(record.isDone)\n          if (generic !== null) return generic\n          return parseBooleanFromUnknown(readCustomField(record, 'isDone'))\n        })()\n\n        const priority = (() => {\n          const candidates = [\n            record['cf:priority'],\n            record['cf_priority'],\n            record.priority,\n            readCustomField(record, 'priority'),\n          ]\n          for (const candidate of candidates) {\n            const parsed = parseNumber(candidate)\n            if (parsed !== null) return parsed\n          }\n          return null\n        })()\n\n        const severity = (() => {\n          const candidates = [\n            record['cf:severity'],\n            record['cf_severity'],\n            record.severity,\n            readCustomField(record, 'severity'),\n          ]\n          for (const candidate of candidates) {\n            if (typeof candidate === 'string' && candidate.trim().length > 0) {\n              return candidate.trim()\n            }\n          }\n          return null\n        })()\n\n        const description = (() => {\n          const candidates = [\n            record.description,\n            record['cf:description'],\n            record['cf_description'],\n            readCustomField(record, 'description'),\n          ]\n          for (const candidate of candidates) {\n            if (typeof candidate === 'string' && candidate.trim().length > 0) {\n              return candidate.trim()\n            }\n          }\n          return null\n        })()\n\n        const dueAt = (() => {\n          const candidates = [\n            record.due_at,\n            record.dueAt,\n            record['cf:due_at'],\n            record['cf_due_at'],\n            readCustomField(record, 'due_at'),\n            readCustomField(record, 'dueAt'),\n          ]\n          for (const candidate of candidates) {\n            const parsed = parseDateValue(candidate)\n            if (parsed) return parsed\n          }\n          return null\n        })()\n\n        const organizationId = (() => {\n          const candidates = [\n            record.organization_id,\n            record.organizationId,\n            record['cf:organization_id'],\n            record['cf_organization_id'],\n            readCustomField(record, 'organization_id'),\n            readCustomField(record, 'organizationId'),\n          ]\n          for (const candidate of candidates) {\n            if (typeof candidate === 'string' && candidate.trim().length > 0) {\n              return candidate.trim()\n            }\n          }\n          return null\n        })()\n\n        const customValues: Record<string, unknown> = {}\n        const assignCustomValue = (key: string, value: unknown) => {\n          const trimmedKey = key.trim()\n          if (!trimmedKey.length) return\n          customValues[trimmedKey] = value === undefined ? null : value\n        }\n        for (const [rawKey, rawValue] of Object.entries(record)) {\n          if (rawKey.startsWith('cf:')) {\n            assignCustomValue(rawKey.slice(3), rawValue)\n          } else if (rawKey.startsWith('cf_')) {\n            assignCustomValue(rawKey.slice(3), rawValue)\n          }\n        }\n        const nestedCustom = record.custom ?? record.customFields ?? record.cf\n        if (nestedCustom && typeof nestedCustom === 'object') {\n          for (const [key, value] of Object.entries(nestedCustom as Record<string, unknown>)) {\n            assignCustomValue(key, value)\n          }\n        }\n\n        const updatedAt = (() => {\n          const candidates = [record.updated_at, record.updatedAt]\n          for (const candidate of candidates) {\n            const parsed = parseDateValue(candidate)\n            if (parsed) return parsed\n          }\n          return null\n        })()\n\n        details.set(`${source}:${rawId}`, {\n          title: extractTodoTitle(record),\n          isDone,\n          priority,\n          severity,\n          description,\n          dueAt,\n          organizationId,\n          updatedAt,\n          customValues: Object.keys(customValues).length > 0 ? customValues : null,\n        })\n      }\n    } catch (err) {\n      logger.warn('Failed to resolve todo details', { component: 'todoCompatibility', source, err })\n      continue\n    }\n  }\n\n  return details\n}\n\nexport async function listLegacyTodoRows(\n  em: EntityManager,\n  queryEngine: QueryEngine,\n  tenantId: string,\n  organizationIds: string[] | null,\n  entityId: string | undefined,\n  options?: { limit?: number | null; isUnrestricted?: boolean },\n): Promise<CustomerTodoRow[]> {\n  if (isCollapsedRestrictedOrganizationScope(organizationIds, options?.isUnrestricted)) {\n    return []\n  }\n  const where: Record<string, unknown> = { tenantId }\n  if (organizationIds && organizationIds.length > 0) {\n    where.organizationId = { $in: organizationIds }\n  }\n  if (entityId) {\n    where.entity = entityId\n  }\n\n  const findOptions: Record<string, unknown> = {\n    populate: ['entity'],\n    orderBy: { createdAt: 'desc' },\n  }\n  if (typeof options?.limit === 'number' && Number.isFinite(options.limit) && options.limit > 0) {\n    findOptions.limit = options.limit\n  }\n\n  const links = await em.find(CustomerTodoLink, where, findOptions as any)\n  const details = await resolveLegacyTodoDetails(\n    queryEngine,\n    links,\n    tenantId,\n    organizationIds ?? [],\n  )\n\n  return links.map((link) => {\n    const source = resolveLegacyTodoSource(link.todoSource)\n    return mapLegacyTodoLinkToRow(\n      link,\n      details.get(`${source}:${link.todoId}`) ?? null,\n    )\n  })\n}\n\nexport async function listCanonicalTodoRows(\n  em: EntityManager,\n  container: CustomersContainerLike,\n  auth: CustomersAuthLike,\n  selectedOrganizationId: string | null,\n  organizationIds: string[] | null,\n  options?: {\n    entityId?: string\n    includeDeleted?: boolean\n    source?: string | string[] | null\n    pagination?: ListTodosPagination | null\n    searchText?: string | null\n    limit?: number | null\n    isUnrestricted?: boolean\n  },\n): Promise<CanonicalTodoListResult> {\n  if (isCollapsedRestrictedOrganizationScope(organizationIds, options?.isUnrestricted)) {\n    return emptyCanonicalTodoList()\n  }\n  const where: Record<string, unknown> = {\n    tenantId: auth.tenantId,\n    interactionType: 'task',\n  }\n  if (!options?.includeDeleted) {\n    where.deletedAt = null\n  }\n  if (organizationIds && organizationIds.length > 0) {\n    where.organizationId = { $in: organizationIds }\n  }\n  if (options?.entityId) {\n    where.entity = options.entityId\n  }\n  if (options?.source) {\n    where.source = Array.isArray(options.source) ? { $in: options.source } : options.source\n  }\n  const trimmedSearch =\n    typeof options?.searchText === 'string' ? options.searchText.trim() : ''\n  if (trimmedSearch.length > 0) {\n    const pattern = `%${trimmedSearch}%`\n    where.$or = [\n      { title: { $ilike: pattern } },\n      { body: { $ilike: pattern } },\n    ]\n  }\n\n  const findOptions: Record<string, unknown> = {\n    orderBy: { createdAt: 'desc' },\n  }\n  const pagination = options?.pagination ?? null\n  if (pagination) {\n    findOptions.offset = Math.max(0, (pagination.page - 1) * pagination.pageSize)\n    findOptions.limit = pagination.pageSize\n  } else if (\n    typeof options?.limit === 'number' &&\n    Number.isFinite(options.limit) &&\n    options.limit > 0\n  ) {\n    findOptions.limit = options.limit\n  }\n\n  let interactions: CustomerInteraction[]\n  let total: number\n  if (pagination) {\n    const [rows, count] = await em.findAndCount(CustomerInteraction, where, findOptions as any)\n    interactions = rows\n    total = count\n  } else {\n    interactions = await em.find(CustomerInteraction, where, findOptions as any)\n    total = interactions.filter((interaction) => !interaction.deletedAt).length\n  }\n  const activeInteractions = interactions.filter((interaction) => !interaction.deletedAt)\n  const groups = new Map<string, CustomerInteraction[]>()\n\n  for (const interaction of activeInteractions) {\n    const organizationId =\n      typeof interaction.organizationId === 'string' && interaction.organizationId.trim().length > 0\n        ? interaction.organizationId\n        : selectedOrganizationId ?? ''\n    const bucket = groups.get(organizationId)\n    if (bucket) {\n      bucket.push(interaction)\n    } else {\n      groups.set(organizationId, [interaction])\n    }\n  }\n\n  const rowByInteractionId = new Map<string, CustomerTodoRow>()\n\n  for (const [groupOrganizationId, groupedInteractions] of groups.entries()) {\n    const scopedOrganizationId = groupOrganizationId.length > 0 ? groupOrganizationId : null\n    const hydrated = await hydrateCanonicalInteractions({\n      em,\n      container,\n      auth: {\n        ...auth,\n        orgId: auth.orgId ?? null,\n      },\n      selectedOrganizationId: scopedOrganizationId,\n      interactions: groupedInteractions,\n    })\n    const customerIds = Array.from(\n      new Set(\n        hydrated\n          .map((interaction) => interaction.entityId ?? null)\n          .filter((value): value is string => !!value),\n      ),\n    )\n    const customerSummaries = await loadCustomerSummaries(\n      em,\n      customerIds,\n      auth.tenantId,\n      scopedOrganizationId,\n    )\n\n    for (const interaction of hydrated) {\n      rowByInteractionId.set(\n        interaction.id,\n        mapInteractionRecordToTodoRow(\n          interaction,\n          interaction.entityId ? customerSummaries.get(interaction.entityId) ?? null : null,\n        ),\n      )\n    }\n  }\n\n  return {\n    items: activeInteractions\n      .map((interaction) => rowByInteractionId.get(interaction.id) ?? null)\n      .filter((row): row is CustomerTodoRow => !!row),\n    bridgeIds: new Set(interactions.map((interaction) => interaction.id)),\n    total,\n  }\n}\n\nexport function mapLegacyTodoLinkToRow(\n  link: CustomerTodoLink,\n  detail: LegacyTodoDetail | null,\n  customerOverride?: CustomerSummary | null,\n): CustomerTodoRow {\n  const entity = customerOverride ?? {\n    id: typeof link.entity === 'string' ? null : link.entity.id,\n    displayName: typeof link.entity === 'string' ? null : link.entity.displayName ?? null,\n    kind: typeof link.entity === 'string' ? null : link.entity.kind ?? null,\n  }\n\n  return {\n    id: link.id,\n    todoId: link.todoId,\n    todoSource: resolveLegacyTodoSource(link.todoSource),\n    todoTitle: detail?.title ?? null,\n    todoIsDone: detail?.isDone ?? null,\n    todoPriority: detail?.priority ?? null,\n    todoSeverity: detail?.severity ?? null,\n    todoDescription: detail?.description ?? null,\n    todoDueAt: detail?.dueAt ?? null,\n    todoCustomValues: detail?.customValues ?? null,\n    todoOrganizationId: detail?.organizationId ?? link.organizationId ?? null,\n    todoUpdatedAt: detail?.updatedAt ?? null,\n    organizationId: link.organizationId,\n    tenantId: link.tenantId,\n    createdAt: link.createdAt.toISOString(),\n    _integrations: undefined,\n    customer: entity,\n  }\n}\n\nexport function mapInteractionRecordToTodoRow(\n  interaction: InteractionRecord,\n  customer: CustomerSummary | null,\n  options?: { rowId?: string | null; todoSource?: string | null },\n): CustomerTodoRow {\n  const customValues: Record<string, unknown> = { ...(interaction.customValues ?? {}) }\n  if (interaction.priority !== undefined && customValues.priority === undefined) {\n    customValues.priority = interaction.priority ?? null\n  }\n  if (interaction.body !== undefined && customValues.description === undefined) {\n    customValues.description = interaction.body ?? null\n  }\n  if (interaction.scheduledAt !== undefined && customValues.due_at === undefined) {\n    customValues.due_at = interaction.scheduledAt ?? null\n  }\n\n  return {\n    id:\n      typeof options?.rowId === 'string' && options.rowId.trim().length > 0\n        ? options.rowId\n        : interaction.id,\n    todoId: interaction.id,\n    todoSource:\n      typeof options?.todoSource === 'string' && options.todoSource.trim().length > 0\n        ? options.todoSource\n        : CUSTOMER_INTERACTION_TASK_SOURCE,\n    todoTitle: interaction.title ?? null,\n    todoIsDone: interaction.status === 'done',\n    todoPriority: interaction.priority ?? null,\n    todoSeverity:\n      typeof customValues.severity === 'string' && customValues.severity.trim().length > 0\n        ? customValues.severity.trim()\n        : null,\n    todoDescription: interaction.body ?? null,\n    todoDueAt: interaction.scheduledAt ?? null,\n    todoCustomValues: Object.keys(customValues).length > 0 ? customValues : null,\n    todoOrganizationId: interaction.organizationId ?? null,\n    todoUpdatedAt: interaction.updatedAt ?? null,\n    organizationId: interaction.organizationId ?? '',\n    tenantId: interaction.tenantId ?? '',\n    createdAt: interaction.createdAt,\n    externalHref: resolveExampleIntegrationHref(interaction),\n    _integrations: interaction._integrations ?? undefined,\n    customer: customer ?? {\n      id: interaction.entityId ?? null,\n      displayName: null,\n      kind: null,\n    },\n  }\n}\n"],
+  "mappings": "AAGA,SAAS,+BAA+B;AACxC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAEP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,8BAA8B,6BAA6B;AACpE,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,WAAW;AA+DvC,SAAS,yBAAkD;AACzD,SAAO,EAAE,OAAO,CAAC,GAAG,WAAW,oBAAI,IAAI,GAAG,OAAO,EAAE;AACrD;AAEA,SAAS,uCACP,iBACA,gBACS;AACT,SAAO,mBAAmB,SAAS,CAAC,mBAAmB,gBAAgB,WAAW;AACpF;AAIA,SAAS,wBAAwB,QAA2C;AAC1E,SAAO,OAAO,WAAW,YAAY,OAAO,KAAK,EAAE,SAAS,IACxD,SACA;AACN;AAEA,SAAS,iBAAiB,QAAgD;AACxE,QAAM,aAAa,CAAC,SAAS,WAAW,QAAQ,WAAW,QAAQ,aAAa;AAChF,aAAW,OAAO,YAAY;AAC5B,UAAM,QAAQ,OAAO,GAAG;AACxB,QAAI,OAAO,UAAU,YAAY,MAAM,KAAK,EAAE,SAAS,GAAG;AACxD,aAAO,MAAM,KAAK;AAAA,IACpB;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,YAAY,OAA+B;AAClD,MAAI,OAAO,UAAU,YAAY,OAAO,SAAS,KAAK,EAAG,QAAO;AAChE,MAAI,OAAO,UAAU,UAAU;AAC7B,UAAM,UAAU,MAAM,KAAK;AAC3B,QAAI,CAAC,QAAQ,OAAQ,QAAO;AAC5B,UAAM,SAAS,OAAO,OAAO;AAC7B,QAAI,CAAC,OAAO,MAAM,MAAM,EAAG,QAAO;AAAA,EACpC;AACA,SAAO;AACT;AAEA,SAAS,eAAe,OAA+B;AACrD,MAAI,iBAAiB,MAAM;AACzB,WAAO,OAAO,MAAM,MAAM,QAAQ,CAAC,IAAI,OAAO,MAAM,YAAY;AAAA,EAClE;AACA,MAAI,OAAO,UAAU,UAAU;AAC7B,UAAM,UAAU,MAAM,KAAK;AAC3B,QAAI,CAAC,QAAQ,OAAQ,QAAO;AAC5B,UAAM,SAAS,IAAI,KAAK,OAAO;AAC/B,WAAO,OAAO,MAAM,OAAO,QAAQ,CAAC,IAAI,OAAO,OAAO,YAAY;AAAA,EACpE;AACA,SAAO;AACT;AAEA,SAAS,gBAAgB,QAAiC,KAAsB;AAC9E,QAAM,SAAS,OAAO,UAAU,OAAO,gBAAgB,OAAO;AAC9D,MAAI,UAAU,OAAO,WAAW,UAAU;AACxC,UAAM,SAAS;AACf,QAAI,OAAO,OAAQ,QAAO,OAAO,GAAG;AAAA,EACtC;AACA,SAAO;AACT;AAEO,SAAS,oBAAoB,OAA0C;AAC5E,MAAI,OAAO,UAAU,SAAU,QAAO;AACtC,QAAM,UAAU,MAAM,KAAK,EAAE,YAAY;AACzC,SAAO,QAAQ,SAAS,IAAI,UAAU;AACxC;AAEO,SAAS,aAAa,MAA4C;AACvE,SAAO,CAAC,GAAG,IAAI,EAAE,KAAK,CAAC,MAAM,UAAU;AACrC,UAAM,WAAW,IAAI,KAAK,KAAK,SAAS,EAAE,QAAQ;AAClD,UAAM,YAAY,IAAI,KAAK,MAAM,SAAS,EAAE,QAAQ;AACpD,QAAI,aAAa,WAAW;AAC1B,aAAO,MAAM,GAAG,cAAc,KAAK,EAAE;AAAA,IACvC;AACA,WAAO,YAAY;AAAA,EACrB,CAAC;AACH;AAEO,SAAS,eAAe,MAAyB,QAA0C;AAChG,MAAI,CAAC,OAAQ,QAAO;AACpB,SAAO,KAAK,OAAO,CAAC,QAAQ;AAC1B,UAAM,WAAW;AAAA,MACf,IAAI,SAAS;AAAA,MACb,IAAI;AAAA,MACJ,IAAI;AAAA,IACN,EACG,OAAO,CAAC,UAA2B,OAAO,UAAU,YAAY,MAAM,KAAK,EAAE,SAAS,CAAC,EACvF,KAAK,GAAG,EACR,YAAY;AACf,WAAO,SAAS,SAAS,MAAM;AAAA,EACjC,CAAC;AACH;AAEO,SAAS,iBACd,MACA,MACA,UACA,WACiG;AACjG,QAAM,QAAQ,KAAK;AACnB,MAAI,WAAW;AACb,WAAO;AAAA,MACL,OAAO;AAAA,MACP;AAAA,MACA,MAAM;AAAA,MACN,UAAU;AAAA,MACV,YAAY;AAAA,IACd;AAAA,EACF;AACA,QAAM,SAAS,OAAO,KAAK;AAC3B,SAAO;AAAA,IACL,OAAO,KAAK,MAAM,OAAO,QAAQ,QAAQ;AAAA,IACzC;AAAA,IACA;AAAA,IACA;AAAA,IACA,YAAY,KAAK,IAAI,GAAG,KAAK,KAAK,QAAQ,QAAQ,CAAC;AAAA,EACrD;AACF;AAEA,eAAsB,yBACpB,aACA,OACA,UACA,iBACwC;AACxC,QAAM,UAAU,oBAAI,IAA8B;AAClD,MAAI,CAAC,MAAM,UAAU,CAAC,SAAU,QAAO;AAEvC,QAAM,wBAAwB,gBAAgB;AAAA,IAC5C,CAAC,UAA2B,OAAO,UAAU,YAAY,MAAM,KAAK,EAAE,SAAS;AAAA,EACjF;AAEA,QAAM,cAAc,oBAAI,IAAyB;AACjD,aAAW,QAAQ,OAAO;AACxB,UAAM,SAAS,wBAAwB,KAAK,UAAU;AACtD,UAAM,KACJ,OAAO,KAAK,WAAW,YAAY,KAAK,OAAO,KAAK,EAAE,SAAS,IAC3D,KAAK,SACL,OAAO,KAAK,UAAU,EAAE;AAC9B,QAAI,CAAC,GAAI;AACT,QAAI,CAAC,YAAY,IAAI,MAAM,EAAG,aAAY,IAAI,QAAQ,oBAAI,IAAY,CAAC;AACvE,gBAAY,IAAI,MAAM,EAAG,IAAI,EAAE;AAAA,EACjC;AAEA,aAAW,CAAC,QAAQ,KAAK,KAAK,YAAY,QAAQ,GAAG;AACnD,UAAM,MAAM,MAAM,KAAK,KAAK;AAC5B,QAAI,CAAC,IAAI,OAAQ;AACjB,QAAI;AACF,YAAM,SAAS,MAAM,YAAY,MAA+B,QAAoB;AAAA,QAClF;AAAA,QACA,iBAAiB,sBAAsB,SAAS,IAAI,wBAAwB;AAAA,QAC5E,SAAS,EAAE,IAAI,EAAE,KAAK,IAAI,EAAE;AAAA,QAC5B,qBAAqB,CAAC,YAAY,UAAU,YAAY,aAAa;AAAA,QACrE,MAAM,EAAE,MAAM,GAAG,UAAU,KAAK,IAAI,IAAI,QAAQ,CAAC,EAAE;AAAA,MACrD,CAAC;AAED,iBAAW,QAAQ,OAAO,SAAS,CAAC,GAAG;AACrC,YAAI,CAAC,QAAQ,OAAO,SAAS,SAAU;AACvC,cAAM,SAAS;AACf,cAAM,QACJ,OAAO,OAAO,OAAO,YAAY,OAAO,GAAG,KAAK,EAAE,SAAS,IACvD,OAAO,KACP,OAAO,OAAO,MAAM,EAAE;AAC5B,YAAI,CAAC,MAAO;AAEZ,cAAM,UAAU,MAAM;AACpB,gBAAM,SAAS,wBAAwB,OAAO,OAAO;AACrD,cAAI,WAAW,KAAM,QAAO;AAC5B,gBAAM,SAAS,wBAAwB,gBAAgB,QAAQ,SAAS,CAAC;AACzE,cAAI,WAAW,KAAM,QAAO;AAC5B,gBAAM,UAAU,wBAAwB,OAAO,MAAM;AACrD,cAAI,YAAY,KAAM,QAAO;AAC7B,iBAAO,wBAAwB,gBAAgB,QAAQ,QAAQ,CAAC;AAAA,QAClE,GAAG;AAEH,cAAM,YAAY,MAAM;AACtB,gBAAM,aAAa;AAAA,YACjB,OAAO,aAAa;AAAA,YACpB,OAAO,aAAa;AAAA,YACpB,OAAO;AAAA,YACP,gBAAgB,QAAQ,UAAU;AAAA,UACpC;AACA,qBAAW,aAAa,YAAY;AAClC,kBAAM,SAAS,YAAY,SAAS;AACpC,gBAAI,WAAW,KAAM,QAAO;AAAA,UAC9B;AACA,iBAAO;AAAA,QACT,GAAG;AAEH,cAAM,YAAY,MAAM;AACtB,gBAAM,aAAa;AAAA,YACjB,OAAO,aAAa;AAAA,YACpB,OAAO,aAAa;AAAA,YACpB,OAAO;AAAA,YACP,gBAAgB,QAAQ,UAAU;AAAA,UACpC;AACA,qBAAW,aAAa,YAAY;AAClC,gBAAI,OAAO,cAAc,YAAY,UAAU,KAAK,EAAE,SAAS,GAAG;AAChE,qBAAO,UAAU,KAAK;AAAA,YACxB;AAAA,UACF;AACA,iBAAO;AAAA,QACT,GAAG;AAEH,cAAM,eAAe,MAAM;AACzB,gBAAM,aAAa;AAAA,YACjB,OAAO;AAAA,YACP,OAAO,gBAAgB;AAAA,YACvB,OAAO,gBAAgB;AAAA,YACvB,gBAAgB,QAAQ,aAAa;AAAA,UACvC;AACA,qBAAW,aAAa,YAAY;AAClC,gBAAI,OAAO,cAAc,YAAY,UAAU,KAAK,EAAE,SAAS,GAAG;AAChE,qBAAO,UAAU,KAAK;AAAA,YACxB;AAAA,UACF;AACA,iBAAO;AAAA,QACT,GAAG;AAEH,cAAM,SAAS,MAAM;AACnB,gBAAM,aAAa;AAAA,YACjB,OAAO;AAAA,YACP,OAAO;AAAA,YACP,OAAO,WAAW;AAAA,YAClB,OAAO,WAAW;AAAA,YAClB,gBAAgB,QAAQ,QAAQ;AAAA,YAChC,gBAAgB,QAAQ,OAAO;AAAA,UACjC;AACA,qBAAW,aAAa,YAAY;AAClC,kBAAM,SAAS,eAAe,SAAS;AACvC,gBAAI,OAAQ,QAAO;AAAA,UACrB;AACA,iBAAO;AAAA,QACT,GAAG;AAEH,cAAM,kBAAkB,MAAM;AAC5B,gBAAM,aAAa;AAAA,YACjB,OAAO;AAAA,YACP,OAAO;AAAA,YACP,OAAO,oBAAoB;AAAA,YAC3B,OAAO,oBAAoB;AAAA,YAC3B,gBAAgB,QAAQ,iBAAiB;AAAA,YACzC,gBAAgB,QAAQ,gBAAgB;AAAA,UAC1C;AACA,qBAAW,aAAa,YAAY;AAClC,gBAAI,OAAO,cAAc,YAAY,UAAU,KAAK,EAAE,SAAS,GAAG;AAChE,qBAAO,UAAU,KAAK;AAAA,YACxB;AAAA,UACF;AACA,iBAAO;AAAA,QACT,GAAG;AAEH,cAAM,eAAwC,CAAC;AAC/C,cAAM,oBAAoB,CAAC,KAAa,UAAmB;AACzD,gBAAM,aAAa,IAAI,KAAK;AAC5B,cAAI,CAAC,WAAW,OAAQ;AACxB,uBAAa,UAAU,IAAI,UAAU,SAAY,OAAO;AAAA,QAC1D;AACA,mBAAW,CAAC,QAAQ,QAAQ,KAAK,OAAO,QAAQ,MAAM,GAAG;AACvD,cAAI,OAAO,WAAW,KAAK,GAAG;AAC5B,8BAAkB,OAAO,MAAM,CAAC,GAAG,QAAQ;AAAA,UAC7C,WAAW,OAAO,WAAW,KAAK,GAAG;AACnC,8BAAkB,OAAO,MAAM,CAAC,GAAG,QAAQ;AAAA,UAC7C;AAAA,QACF;AACA,cAAM,eAAe,OAAO,UAAU,OAAO,gBAAgB,OAAO;AACpE,YAAI,gBAAgB,OAAO,iBAAiB,UAAU;AACpD,qBAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,YAAuC,GAAG;AAClF,8BAAkB,KAAK,KAAK;AAAA,UAC9B;AAAA,QACF;AAEA,cAAM,aAAa,MAAM;AACvB,gBAAM,aAAa,CAAC,OAAO,YAAY,OAAO,SAAS;AACvD,qBAAW,aAAa,YAAY;AAClC,kBAAM,SAAS,eAAe,SAAS;AACvC,gBAAI,OAAQ,QAAO;AAAA,UACrB;AACA,iBAAO;AAAA,QACT,GAAG;AAEH,gBAAQ,IAAI,GAAG,MAAM,IAAI,KAAK,IAAI;AAAA,UAChC,OAAO,iBAAiB,MAAM;AAAA,UAC9B;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA,cAAc,OAAO,KAAK,YAAY,EAAE,SAAS,IAAI,eAAe;AAAA,QACtE,CAAC;AAAA,MACH;AAAA,IACF,SAAS,KAAK;AACZ,aAAO,KAAK,kCAAkC,EAAE,WAAW,qBAAqB,QAAQ,IAAI,CAAC;AAC7F;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AACT;AAEA,eAAsB,mBACpB,IACA,aACA,UACA,iBACA,UACA,SAC4B;AAC5B,MAAI,uCAAuC,iBAAiB,SAAS,cAAc,GAAG;AACpF,WAAO,CAAC;AAAA,EACV;AACA,QAAM,QAAiC,EAAE,SAAS;AAClD,MAAI,mBAAmB,gBAAgB,SAAS,GAAG;AACjD,UAAM,iBAAiB,EAAE,KAAK,gBAAgB;AAAA,EAChD;AACA,MAAI,UAAU;AACZ,UAAM,SAAS;AAAA,EACjB;AAEA,QAAM,cAAuC;AAAA,IAC3C,UAAU,CAAC,QAAQ;AAAA,IACnB,SAAS,EAAE,WAAW,OAAO;AAAA,EAC/B;AACA,MAAI,OAAO,SAAS,UAAU,YAAY,OAAO,SAAS,QAAQ,KAAK,KAAK,QAAQ,QAAQ,GAAG;AAC7F,gBAAY,QAAQ,QAAQ;AAAA,EAC9B;AAEA,QAAM,QAAQ,MAAM,GAAG,KAAK,kBAAkB,OAAO,WAAkB;AACvE,QAAM,UAAU,MAAM;AAAA,IACpB;AAAA,IACA;AAAA,IACA;AAAA,IACA,mBAAmB,CAAC;AAAA,EACtB;AAEA,SAAO,MAAM,IAAI,CAAC,SAAS;AACzB,UAAM,SAAS,wBAAwB,KAAK,UAAU;AACtD,WAAO;AAAA,MACL;AAAA,MACA,QAAQ,IAAI,GAAG,MAAM,IAAI,KAAK,MAAM,EAAE,KAAK;AAAA,IAC7C;AAAA,EACF,CAAC;AACH;AAEA,eAAsB,sBACpB,IACA,WACA,MACA,wBACA,iBACA,SASkC;AAClC,MAAI,uCAAuC,iBAAiB,SAAS,cAAc,GAAG;AACpF,WAAO,uBAAuB;AAAA,EAChC;AACA,QAAM,QAAiC;AAAA,IACrC,UAAU,KAAK;AAAA,IACf,iBAAiB;AAAA,EACnB;AACA,MAAI,CAAC,SAAS,gBAAgB;AAC5B,UAAM,YAAY;AAAA,EACpB;AACA,MAAI,mBAAmB,gBAAgB,SAAS,GAAG;AACjD,UAAM,iBAAiB,EAAE,KAAK,gBAAgB;AAAA,EAChD;AACA,MAAI,SAAS,UAAU;AACrB,UAAM,SAAS,QAAQ;AAAA,EACzB;AACA,MAAI,SAAS,QAAQ;AACnB,UAAM,SAAS,MAAM,QAAQ,QAAQ,MAAM,IAAI,EAAE,KAAK,QAAQ,OAAO,IAAI,QAAQ;AAAA,EACnF;AACA,QAAM,gBACJ,OAAO,SAAS,eAAe,WAAW,QAAQ,WAAW,KAAK,IAAI;AACxE,MAAI,cAAc,SAAS,GAAG;AAC5B,UAAM,UAAU,IAAI,aAAa;AACjC,UAAM,MAAM;AAAA,MACV,EAAE,OAAO,EAAE,QAAQ,QAAQ,EAAE;AAAA,MAC7B,EAAE,MAAM,EAAE,QAAQ,QAAQ,EAAE;AAAA,IAC9B;AAAA,EACF;AAEA,QAAM,cAAuC;AAAA,IAC3C,SAAS,EAAE,WAAW,OAAO;AAAA,EAC/B;AACA,QAAM,aAAa,SAAS,cAAc;AAC1C,MAAI,YAAY;AACd,gBAAY,SAAS,KAAK,IAAI,IAAI,WAAW,OAAO,KAAK,WAAW,QAAQ;AAC5E,gBAAY,QAAQ,WAAW;AAAA,EACjC,WACE,OAAO,SAAS,UAAU,YAC1B,OAAO,SAAS,QAAQ,KAAK,KAC7B,QAAQ,QAAQ,GAChB;AACA,gBAAY,QAAQ,QAAQ;AAAA,EAC9B;AAEA,MAAI;AACJ,MAAI;AACJ,MAAI,YAAY;AACd,UAAM,CAAC,MAAM,KAAK,IAAI,MAAM,GAAG,aAAa,qBAAqB,OAAO,WAAkB;AAC1F,mBAAe;AACf,YAAQ;AAAA,EACV,OAAO;AACL,mBAAe,MAAM,GAAG,KAAK,qBAAqB,OAAO,WAAkB;AAC3E,YAAQ,aAAa,OAAO,CAAC,gBAAgB,CAAC,YAAY,SAAS,EAAE;AAAA,EACvE;AACA,QAAM,qBAAqB,aAAa,OAAO,CAAC,gBAAgB,CAAC,YAAY,SAAS;AACtF,QAAM,SAAS,oBAAI,IAAmC;AAEtD,aAAW,eAAe,oBAAoB;AAC5C,UAAM,iBACJ,OAAO,YAAY,mBAAmB,YAAY,YAAY,eAAe,KAAK,EAAE,SAAS,IACzF,YAAY,iBACZ,0BAA0B;AAChC,UAAM,SAAS,OAAO,IAAI,cAAc;AACxC,QAAI,QAAQ;AACV,aAAO,KAAK,WAAW;AAAA,IACzB,OAAO;AACL,aAAO,IAAI,gBAAgB,CAAC,WAAW,CAAC;AAAA,IAC1C;AAAA,EACF;AAEA,QAAM,qBAAqB,oBAAI,IAA6B;AAE5D,aAAW,CAAC,qBAAqB,mBAAmB,KAAK,OAAO,QAAQ,GAAG;AACzE,UAAM,uBAAuB,oBAAoB,SAAS,IAAI,sBAAsB;AACpF,UAAM,WAAW,MAAM,6BAA6B;AAAA,MAClD;AAAA,MACA;AAAA,MACA,MAAM;AAAA,QACJ,GAAG;AAAA,QACH,OAAO,KAAK,SAAS;AAAA,MACvB;AAAA,MACA,wBAAwB;AAAA,MACxB,cAAc;AAAA,IAChB,CAAC;AACD,UAAM,cAAc,MAAM;AAAA,MACxB,IAAI;AAAA,QACF,SACG,IAAI,CAAC,gBAAgB,YAAY,YAAY,IAAI,EACjD,OAAO,CAAC,UAA2B,CAAC,CAAC,KAAK;AAAA,MAC/C;AAAA,IACF;AACA,UAAM,oBAAoB,MAAM;AAAA,MAC9B;AAAA,MACA;AAAA,MACA,KAAK;AAAA,MACL;AAAA,IACF;AAEA,eAAW,eAAe,UAAU;AAClC,yBAAmB;AAAA,QACjB,YAAY;AAAA,QACZ;AAAA,UACE;AAAA,UACA,YAAY,WAAW,kBAAkB,IAAI,YAAY,QAAQ,KAAK,OAAO;AAAA,QAC/E;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AAAA,IACL,OAAO,mBACJ,IAAI,CAAC,gBAAgB,mBAAmB,IAAI,YAAY,EAAE,KAAK,IAAI,EACnE,OAAO,CAAC,QAAgC,CAAC,CAAC,GAAG;AAAA,IAChD,WAAW,IAAI,IAAI,aAAa,IAAI,CAAC,gBAAgB,YAAY,EAAE,CAAC;AAAA,IACpE;AAAA,EACF;AACF;AAEO,SAAS,uBACd,MACA,QACA,kBACiB;AACjB,QAAM,SAAS,oBAAoB;AAAA,IACjC,IAAI,OAAO,KAAK,WAAW,WAAW,OAAO,KAAK,OAAO;AAAA,IACzD,aAAa,OAAO,KAAK,WAAW,WAAW,OAAO,KAAK,OAAO,eAAe;AAAA,IACjF,MAAM,OAAO,KAAK,WAAW,WAAW,OAAO,KAAK,OAAO,QAAQ;AAAA,EACrE;AAEA,SAAO;AAAA,IACL,IAAI,KAAK;AAAA,IACT,QAAQ,KAAK;AAAA,IACb,YAAY,wBAAwB,KAAK,UAAU;AAAA,IACnD,WAAW,QAAQ,SAAS;AAAA,IAC5B,YAAY,QAAQ,UAAU;AAAA,IAC9B,cAAc,QAAQ,YAAY;AAAA,IAClC,cAAc,QAAQ,YAAY;AAAA,IAClC,iBAAiB,QAAQ,eAAe;AAAA,IACxC,WAAW,QAAQ,SAAS;AAAA,IAC5B,kBAAkB,QAAQ,gBAAgB;AAAA,IAC1C,oBAAoB,QAAQ,kBAAkB,KAAK,kBAAkB;AAAA,IACrE,eAAe,QAAQ,aAAa;AAAA,IACpC,gBAAgB,KAAK;AAAA,IACrB,UAAU,KAAK;AAAA,IACf,WAAW,KAAK,UAAU,YAAY;AAAA,IACtC,eAAe;AAAA,IACf,UAAU;AAAA,EACZ;AACF;AAEO,SAAS,8BACd,aACA,UACA,SACiB;AACjB,QAAM,eAAwC,EAAE,GAAI,YAAY,gBAAgB,CAAC,EAAG;AACpF,MAAI,YAAY,aAAa,UAAa,aAAa,aAAa,QAAW;AAC7E,iBAAa,WAAW,YAAY,YAAY;AAAA,EAClD;AACA,MAAI,YAAY,SAAS,UAAa,aAAa,gBAAgB,QAAW;AAC5E,iBAAa,cAAc,YAAY,QAAQ;AAAA,EACjD;AACA,MAAI,YAAY,gBAAgB,UAAa,aAAa,WAAW,QAAW;AAC9E,iBAAa,SAAS,YAAY,eAAe;AAAA,EACnD;AAEA,SAAO;AAAA,IACL,IACE,OAAO,SAAS,UAAU,YAAY,QAAQ,MAAM,KAAK,EAAE,SAAS,IAChE,QAAQ,QACR,YAAY;AAAA,IAClB,QAAQ,YAAY;AAAA,IACpB,YACE,OAAO,SAAS,eAAe,YAAY,QAAQ,WAAW,KAAK,EAAE,SAAS,IAC1E,QAAQ,aACR;AAAA,IACN,WAAW,YAAY,SAAS;AAAA,IAChC,YAAY,YAAY,WAAW;AAAA,IACnC,cAAc,YAAY,YAAY;AAAA,IACtC,cACE,OAAO,aAAa,aAAa,YAAY,aAAa,SAAS,KAAK,EAAE,SAAS,IAC/E,aAAa,SAAS,KAAK,IAC3B;AAAA,IACN,iBAAiB,YAAY,QAAQ;AAAA,IACrC,WAAW,YAAY,eAAe;AAAA,IACtC,kBAAkB,OAAO,KAAK,YAAY,EAAE,SAAS,IAAI,eAAe;AAAA,IACxE,oBAAoB,YAAY,kBAAkB;AAAA,IAClD,eAAe,YAAY,aAAa;AAAA,IACxC,gBAAgB,YAAY,kBAAkB;AAAA,IAC9C,UAAU,YAAY,YAAY;AAAA,IAClC,WAAW,YAAY;AAAA,IACvB,cAAc,8BAA8B,WAAW;AAAA,IACvD,eAAe,YAAY,iBAAiB;AAAA,IAC5C,UAAU,YAAY;AAAA,MACpB,IAAI,YAAY,YAAY;AAAA,MAC5B,aAAa;AAAA,MACb,MAAM;AAAA,IACR;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/dashboards/lib/widgetScope.js

@@ -1,5 +1,6 @@
 import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
 import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
+import { isUnrestrictedOrganizationScope } from "@open-mercato/shared/lib/auth/organizationAccess";
 import { CrudHttpError } from "@open-mercato/shared/lib/crud/errors";
 import { resolveOrganizationScopeForRequest } from "@open-mercato/core/modules/directory/utils/organizationScope";
 function normalizeScopeId(value) {
@@ -55,7 +56,11 @@ async function resolveWidgetScope(req, translate, overrides) {
     container,
     em,
     tenantId,
-    organizationIds
+    organizationIds,
+    isUnrestrictedOrganizationScope: isUnrestrictedOrganizationScope({
+      isSuperAdmin,
+      allowedOrganizationIds: scope?.allowedIds
+    })
   };
 }
 export {

package/dist/modules/dashboards/lib/widgetScope.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/dashboards/lib/widgetScope.ts"],
-  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport { createRequestContainer, type AppContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { CrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\n\nexport type WidgetScopeContext = {\n  container: AppContainer\n  em: EntityManager\n  tenantId: string\n  organizationIds: string[] | null\n}\n\nfunction normalizeScopeId(value: string | null | undefined): string | null {\n  if (typeof value !== 'string') return null\n  const trimmed = value.trim()\n  return trimmed.length > 0 ? trimmed : null\n}\n\nexport async function resolveWidgetScope(\n  req: Request,\n  translate: (key: string, fallback?: string) => string,\n  overrides?: { tenantId?: string | null; organizationId?: string | null }\n): Promise<WidgetScopeContext> {\n  const auth = await getAuthFromRequest(req)\n  if (!auth) {\n    throw new CrudHttpError(401, { error: translate('dashboards.errors.unauthorized', 'Unauthorized') })\n  }\n\n  const forbiddenScope = () => new CrudHttpError(403, {\n    error: translate('dashboards.errors.forbidden_scope', 'Requested scope is not accessible'),\n  })\n\n  const requestedTenantId = normalizeScopeId(overrides?.tenantId)\n  const requestedOrganizationId = normalizeScopeId(overrides?.organizationId)\n  const authTenantId = normalizeScopeId(auth.tenantId)\n  const isSuperAdmin = auth.isSuperAdmin === true\n\n  // Cross-tenant inspection is a superadmin-only branch. Everyone else is pinned to\n  // the authenticated tenant, so a request-supplied tenant can only ever restate it.\n  if (requestedTenantId && !isSuperAdmin && requestedTenantId !== authTenantId) {\n    throw forbiddenScope()\n  }\n\n  const container = await createRequestContainer()\n  // Request-supplied scope is passed to the resolver as a *request*, never trusted\n  // directly: it pins a non-superadmin back to their authenticated tenant and only\n  // honors an organization selection the caller's ACL actually grants. Each key is\n  // omitted when no override was supplied so the caller's own scope cookies still apply.\n  const scope = await resolveOrganizationScopeForRequest({\n    container,\n    auth,\n    request: req,\n    ...(requestedTenantId ? { tenantId: requestedTenantId } : {}),\n    ...(requestedOrganizationId ? { selectedId: requestedOrganizationId } : {}),\n  })\n\n  const tenantId = normalizeScopeId(scope?.tenantId) ?? authTenantId\n  if (!tenantId) {\n    throw new CrudHttpError(400, { error: translate('dashboards.errors.tenant_required', 'Tenant context is required') })\n  }\n  // Defense in depth: the resolver already pins the tenant, so a surviving mismatch\n  // means the requested tenant was not the one authorized \u2014 fail closed rather than\n  // serve another tenant's rows.\n  if (requestedTenantId && requestedTenantId !== tenantId) {\n    throw forbiddenScope()\n  }\n\n  // An organization override is only accepted when the resolver honored it against the\n  // caller's allowed set; `selectionRejected` marks a selection it refused to grant.\n  if (requestedOrganizationId && (scope?.selectionRejected || scope?.selectedId !== requestedOrganizationId)) {\n    throw forbiddenScope()\n  }\n\n  const organizationIds = (() => {\n    if (scope?.selectedId) return [scope.selectedId]\n    if (Array.isArray(scope?.filterIds) && scope.filterIds.length > 0) return scope.filterIds\n    if (scope?.allowedIds === null) return null\n    if (auth.orgId) return [auth.orgId]\n    return [] as string[]\n  })()\n\n  if (organizationIds !== null && organizationIds.length === 0) {\n    throw new CrudHttpError(400, { error: translate('dashboards.errors.organization_required', 'Organization context is required') })\n  }\n\n  const em = (container.resolve('em') as EntityManager)\n\n  return {\n    container,\n    em,\n    tenantId,\n    organizationIds,\n  }\n}\n"],
-  "mappings": "AACA,SAAS,8BAAiD;AAC1D,SAAS,0BAA0B;AACnC,SAAS,qBAAqB;AAC9B,SAAS,0CAA0C;AASnD,SAAS,iBAAiB,OAAiD;AACzE,MAAI,OAAO,UAAU,SAAU,QAAO;AACtC,QAAM,UAAU,MAAM,KAAK;AAC3B,SAAO,QAAQ,SAAS,IAAI,UAAU;AACxC;AAEA,eAAsB,mBACpB,KACA,WACA,WAC6B;AAC7B,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM;AACT,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,kCAAkC,cAAc,EAAE,CAAC;AAAA,EACrG;AAEA,QAAM,iBAAiB,MAAM,IAAI,cAAc,KAAK;AAAA,IAClD,OAAO,UAAU,qCAAqC,mCAAmC;AAAA,EAC3F,CAAC;AAED,QAAM,oBAAoB,iBAAiB,WAAW,QAAQ;AAC9D,QAAM,0BAA0B,iBAAiB,WAAW,cAAc;AAC1E,QAAM,eAAe,iBAAiB,KAAK,QAAQ;AACnD,QAAM,eAAe,KAAK,iBAAiB;AAI3C,MAAI,qBAAqB,CAAC,gBAAgB,sBAAsB,cAAc;AAC5E,UAAM,eAAe;AAAA,EACvB;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAK/C,QAAM,QAAQ,MAAM,mCAAmC;AAAA,IACrD;AAAA,IACA;AAAA,IACA,SAAS;AAAA,IACT,GAAI,oBAAoB,EAAE,UAAU,kBAAkB,IAAI,CAAC;AAAA,IAC3D,GAAI,0BAA0B,EAAE,YAAY,wBAAwB,IAAI,CAAC;AAAA,EAC3E,CAAC;AAED,QAAM,WAAW,iBAAiB,OAAO,QAAQ,KAAK;AACtD,MAAI,CAAC,UAAU;AACb,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,qCAAqC,4BAA4B,EAAE,CAAC;AAAA,EACtH;AAIA,MAAI,qBAAqB,sBAAsB,UAAU;AACvD,UAAM,eAAe;AAAA,EACvB;AAIA,MAAI,4BAA4B,OAAO,qBAAqB,OAAO,eAAe,0BAA0B;AAC1G,UAAM,eAAe;AAAA,EACvB;AAEA,QAAM,mBAAmB,MAAM;AAC7B,QAAI,OAAO,WAAY,QAAO,CAAC,MAAM,UAAU;AAC/C,QAAI,MAAM,QAAQ,OAAO,SAAS,KAAK,MAAM,UAAU,SAAS,EAAG,QAAO,MAAM;AAChF,QAAI,OAAO,eAAe,KAAM,QAAO;AACvC,QAAI,KAAK,MAAO,QAAO,CAAC,KAAK,KAAK;AAClC,WAAO,CAAC;AAAA,EACV,GAAG;AAEH,MAAI,oBAAoB,QAAQ,gBAAgB,WAAW,GAAG;AAC5D,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,2CAA2C,kCAAkC,EAAE,CAAC;AAAA,EAClI;AAEA,QAAM,KAAM,UAAU,QAAQ,IAAI;AAElC,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;",
+  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport { createRequestContainer, type AppContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { isUnrestrictedOrganizationScope } from '@open-mercato/shared/lib/auth/organizationAccess'\nimport { CrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\n\nexport type WidgetScopeContext = {\n  container: AppContainer\n  em: EntityManager\n  tenantId: string\n  organizationIds: string[] | null\n  isUnrestrictedOrganizationScope?: boolean\n}\n\nfunction normalizeScopeId(value: string | null | undefined): string | null {\n  if (typeof value !== 'string') return null\n  const trimmed = value.trim()\n  return trimmed.length > 0 ? trimmed : null\n}\n\nexport async function resolveWidgetScope(\n  req: Request,\n  translate: (key: string, fallback?: string) => string,\n  overrides?: { tenantId?: string | null; organizationId?: string | null }\n): Promise<WidgetScopeContext> {\n  const auth = await getAuthFromRequest(req)\n  if (!auth) {\n    throw new CrudHttpError(401, { error: translate('dashboards.errors.unauthorized', 'Unauthorized') })\n  }\n\n  const forbiddenScope = () => new CrudHttpError(403, {\n    error: translate('dashboards.errors.forbidden_scope', 'Requested scope is not accessible'),\n  })\n\n  const requestedTenantId = normalizeScopeId(overrides?.tenantId)\n  const requestedOrganizationId = normalizeScopeId(overrides?.organizationId)\n  const authTenantId = normalizeScopeId(auth.tenantId)\n  const isSuperAdmin = auth.isSuperAdmin === true\n\n  // Cross-tenant inspection is a superadmin-only branch. Everyone else is pinned to\n  // the authenticated tenant, so a request-supplied tenant can only ever restate it.\n  if (requestedTenantId && !isSuperAdmin && requestedTenantId !== authTenantId) {\n    throw forbiddenScope()\n  }\n\n  const container = await createRequestContainer()\n  // Request-supplied scope is passed to the resolver as a *request*, never trusted\n  // directly: it pins a non-superadmin back to their authenticated tenant and only\n  // honors an organization selection the caller's ACL actually grants. Each key is\n  // omitted when no override was supplied so the caller's own scope cookies still apply.\n  const scope = await resolveOrganizationScopeForRequest({\n    container,\n    auth,\n    request: req,\n    ...(requestedTenantId ? { tenantId: requestedTenantId } : {}),\n    ...(requestedOrganizationId ? { selectedId: requestedOrganizationId } : {}),\n  })\n\n  const tenantId = normalizeScopeId(scope?.tenantId) ?? authTenantId\n  if (!tenantId) {\n    throw new CrudHttpError(400, { error: translate('dashboards.errors.tenant_required', 'Tenant context is required') })\n  }\n  // Defense in depth: the resolver already pins the tenant, so a surviving mismatch\n  // means the requested tenant was not the one authorized \u2014 fail closed rather than\n  // serve another tenant's rows.\n  if (requestedTenantId && requestedTenantId !== tenantId) {\n    throw forbiddenScope()\n  }\n\n  // An organization override is only accepted when the resolver honored it against the\n  // caller's allowed set; `selectionRejected` marks a selection it refused to grant.\n  if (requestedOrganizationId && (scope?.selectionRejected || scope?.selectedId !== requestedOrganizationId)) {\n    throw forbiddenScope()\n  }\n\n  const organizationIds = (() => {\n    if (scope?.selectedId) return [scope.selectedId]\n    if (Array.isArray(scope?.filterIds) && scope.filterIds.length > 0) return scope.filterIds\n    if (scope?.allowedIds === null) return null\n    if (auth.orgId) return [auth.orgId]\n    return [] as string[]\n  })()\n\n  if (organizationIds !== null && organizationIds.length === 0) {\n    throw new CrudHttpError(400, { error: translate('dashboards.errors.organization_required', 'Organization context is required') })\n  }\n\n  const em = (container.resolve('em') as EntityManager)\n\n  return {\n    container,\n    em,\n    tenantId,\n    organizationIds,\n    isUnrestrictedOrganizationScope: isUnrestrictedOrganizationScope({\n      isSuperAdmin,\n      allowedOrganizationIds: scope?.allowedIds,\n    }),\n  }\n}\n"],
+  "mappings": "AACA,SAAS,8BAAiD;AAC1D,SAAS,0BAA0B;AACnC,SAAS,uCAAuC;AAChD,SAAS,qBAAqB;AAC9B,SAAS,0CAA0C;AAUnD,SAAS,iBAAiB,OAAiD;AACzE,MAAI,OAAO,UAAU,SAAU,QAAO;AACtC,QAAM,UAAU,MAAM,KAAK;AAC3B,SAAO,QAAQ,SAAS,IAAI,UAAU;AACxC;AAEA,eAAsB,mBACpB,KACA,WACA,WAC6B;AAC7B,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM;AACT,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,kCAAkC,cAAc,EAAE,CAAC;AAAA,EACrG;AAEA,QAAM,iBAAiB,MAAM,IAAI,cAAc,KAAK;AAAA,IAClD,OAAO,UAAU,qCAAqC,mCAAmC;AAAA,EAC3F,CAAC;AAED,QAAM,oBAAoB,iBAAiB,WAAW,QAAQ;AAC9D,QAAM,0BAA0B,iBAAiB,WAAW,cAAc;AAC1E,QAAM,eAAe,iBAAiB,KAAK,QAAQ;AACnD,QAAM,eAAe,KAAK,iBAAiB;AAI3C,MAAI,qBAAqB,CAAC,gBAAgB,sBAAsB,cAAc;AAC5E,UAAM,eAAe;AAAA,EACvB;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAK/C,QAAM,QAAQ,MAAM,mCAAmC;AAAA,IACrD;AAAA,IACA;AAAA,IACA,SAAS;AAAA,IACT,GAAI,oBAAoB,EAAE,UAAU,kBAAkB,IAAI,CAAC;AAAA,IAC3D,GAAI,0BAA0B,EAAE,YAAY,wBAAwB,IAAI,CAAC;AAAA,EAC3E,CAAC;AAED,QAAM,WAAW,iBAAiB,OAAO,QAAQ,KAAK;AACtD,MAAI,CAAC,UAAU;AACb,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,qCAAqC,4BAA4B,EAAE,CAAC;AAAA,EACtH;AAIA,MAAI,qBAAqB,sBAAsB,UAAU;AACvD,UAAM,eAAe;AAAA,EACvB;AAIA,MAAI,4BAA4B,OAAO,qBAAqB,OAAO,eAAe,0BAA0B;AAC1G,UAAM,eAAe;AAAA,EACvB;AAEA,QAAM,mBAAmB,MAAM;AAC7B,QAAI,OAAO,WAAY,QAAO,CAAC,MAAM,UAAU;AAC/C,QAAI,MAAM,QAAQ,OAAO,SAAS,KAAK,MAAM,UAAU,SAAS,EAAG,QAAO,MAAM;AAChF,QAAI,OAAO,eAAe,KAAM,QAAO;AACvC,QAAI,KAAK,MAAO,QAAO,CAAC,KAAK,KAAK;AAClC,WAAO,CAAC;AAAA,EACV,GAAG;AAEH,MAAI,oBAAoB,QAAQ,gBAAgB,WAAW,GAAG;AAC5D,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,2CAA2C,kCAAkC,EAAE,CAAC;AAAA,EAClI;AAEA,QAAM,KAAM,UAAU,QAAQ,IAAI;AAElC,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,iCAAiC,gCAAgC;AAAA,MAC/D;AAAA,MACA,wBAAwB,OAAO;AAAA,IACjC,CAAC;AAAA,EACH;AACF;",
   "names": []
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@open-mercato/core",
-  "version": "0.6.8-develop.7048.1.b011912b63",
+  "version": "0.6.8-develop.7049.1.b41427429a",
   "license": "MIT",
   "type": "module",
   "main": "./dist/index.js",
@@ -252,16 +252,16 @@
     "zod": "^4.4.3"
   },
   "peerDependencies": {
-    "@open-mercato/ai-assistant": "0.6.8-develop.7048.1.b011912b63",
-    "@open-mercato/shared": "0.6.8-develop.7048.1.b011912b63",
-    "@open-mercato/ui": "0.6.8-develop.7048.1.b011912b63",
+    "@open-mercato/ai-assistant": "0.6.8-develop.7049.1.b41427429a",
+    "@open-mercato/shared": "0.6.8-develop.7049.1.b41427429a",
+    "@open-mercato/ui": "0.6.8-develop.7049.1.b41427429a",
     "react": "^19.0.0",
     "react-dom": "^19.0.0"
   },
   "devDependencies": {
-    "@open-mercato/ai-assistant": "0.6.8-develop.7048.1.b011912b63",
-    "@open-mercato/shared": "0.6.8-develop.7048.1.b011912b63",
-    "@open-mercato/ui": "0.6.8-develop.7048.1.b011912b63",
+    "@open-mercato/ai-assistant": "0.6.8-develop.7049.1.b41427429a",
+    "@open-mercato/shared": "0.6.8-develop.7049.1.b41427429a",
+    "@open-mercato/ui": "0.6.8-develop.7049.1.b41427429a",
     "@testing-library/dom": "^10.4.1",
     "@testing-library/jest-dom": "^7.0.0",
     "@testing-library/react": "^16.3.1",

package/src/modules/customers/api/dashboard/widgets/customer-todos/route.ts

@@ -28,7 +28,10 @@ export const metadata = {
 
 type WidgetContext = WidgetScopeContext & { limit: number }
 
-async function resolveContext(req: Request, translate: (key: string, fallback?: string) => string): Promise<WidgetContext> {
+async function resolveContext(
+  req: Request,
+  translate: (key: string, fallback?: string) => string,
+): Promise<WidgetContext> {
   const url = new URL(req.url)
   const rawQuery: Record<string, string> = {}
   for (const [key, value] of url.searchParams.entries()) {
@@ -39,16 +42,18 @@ async function resolveContext(req: Request, translate: (key: string, fallback?:
     throw new CrudHttpError(400, { error: translate('customers.errors.invalid_query', 'Invalid query parameters') })
   }
 
-  const { container, em, tenantId, organizationIds } = await resolveWidgetScope(req, translate, {
-    tenantId: parsed.data.tenantId ?? null,
-    organizationId: parsed.data.organizationId ?? null,
-  })
+  const { container, em, tenantId, organizationIds, isUnrestrictedOrganizationScope } =
+    await resolveWidgetScope(req, translate, {
+      tenantId: parsed.data.tenantId ?? null,
+      organizationId: parsed.data.organizationId ?? null,
+    })
 
   return {
     container,
     em,
     tenantId,
     organizationIds,
+    isUnrestrictedOrganizationScope,
     limit: parsed.data.limit,
   }
 }
@@ -56,7 +61,8 @@ async function resolveContext(req: Request, translate: (key: string, fallback?:
 export async function GET(req: Request) {
   const { translate } = await resolveTranslations()
   try {
-    const { container, em, tenantId, organizationIds, limit } = await resolveContext(req, translate)
+    const { container, em, tenantId, organizationIds, isUnrestrictedOrganizationScope, limit } =
+      await resolveContext(req, translate)
     const auth = {
       tenantId,
       orgId: organizationIds?.[0] ?? null,
@@ -64,6 +70,7 @@ export async function GET(req: Request) {
     }
     const flags = await resolveCustomerInteractionFeatureFlags(container, tenantId)
     const mergedWindow = Math.min(limit * 4, 50)
+    const isUnrestricted = isUnrestrictedOrganizationScope === true
     const rows = flags.unified
       ? (await listCanonicalTodoRows(
           em,
@@ -71,7 +78,7 @@ export async function GET(req: Request) {
           auth,
           organizationIds?.[0] ?? null,
           organizationIds ?? null,
-          { pagination: { page: 1, pageSize: limit } },
+          { pagination: { page: 1, pageSize: limit }, isUnrestricted },
         )).items
       : await Promise.all([
           listLegacyTodoRows(
@@ -80,7 +87,7 @@ export async function GET(req: Request) {
             tenantId,
             organizationIds ?? null,
             undefined,
-            { limit: mergedWindow },
+            { limit: mergedWindow, isUnrestricted },
           ),
           listCanonicalTodoRows(
             em,
@@ -91,6 +98,7 @@ export async function GET(req: Request) {
             {
               includeDeleted: true,
               limit: mergedWindow,
+              isUnrestricted,
             },
           ),
         ]).then(([legacyRows, canonicalRows]) =>

package/src/modules/customers/api/interactions/tasks/route.ts

@@ -3,6 +3,7 @@ import { z } from 'zod'
 import type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'
 import { CrudHttpError, isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'
 import { parseBooleanToken } from '@open-mercato/shared/lib/boolean'
+import { isUnrestrictedOrganizationScope } from '@open-mercato/shared/lib/auth/organizationAccess'
 import { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'
 import type { QueryEngine } from '@open-mercato/shared/lib/query/types'
 import { createCustomersCrudOpenApi, createPagedListResponseSchema } from '../../openapi'
@@ -40,11 +41,30 @@ const MERGED_TASK_FETCH_CAP = 2000
 export async function GET(request: Request): Promise<Response> {
   const { translate } = await resolveTranslations()
   try {
-    const { auth, em, organizationIds, container, selectedOrganizationId } =
+    const { auth, em, organizationIds, container, selectedOrganizationId, scope } =
       await resolveCustomersRequestContext(request)
     const query = querySchema.parse(Object.fromEntries(new URL(request.url).searchParams))
     const flags = await resolveCustomerInteractionFeatureFlags(container, auth.tenantId)
     const exportAll = parseBooleanToken(query.all) === true
+    const isUnrestricted = isUnrestrictedOrganizationScope({
+      isSuperAdmin: auth.isSuperAdmin === true,
+      allowedOrganizationIds: scope?.allowedIds,
+    })
+    if (!isUnrestricted && (!organizationIds || organizationIds.length === 0)) {
+      logger.warn('customers.interactions.tasks.list collapsed organization scope', {
+        tenantId: auth.tenantId,
+        organizationIds,
+        selectedId: scope?.selectedId ?? null,
+        allowedIdsCount: scope?.allowedIds?.length ?? null,
+      })
+      return NextResponse.json({
+        items: [],
+        total: 0,
+        page: exportAll ? 1 : query.page,
+        pageSize: exportAll ? 0 : query.pageSize,
+        totalPages: 1,
+      })
+    }
     const search = normalizeTodoSearch(query.search)
     const queryEngine = container.resolve('queryEngine') as QueryEngine
 
@@ -59,6 +79,7 @@ export async function GET(request: Request): Promise<Response> {
           entityId: query.entityId,
           pagination: exportAll ? null : { page: query.page, pageSize: query.pageSize },
           searchText: search,
+          isUnrestricted,
         },
       )
       const total = canonical.total
@@ -80,6 +101,7 @@ export async function GET(request: Request): Promise<Response> {
     const [legacyRows, canonicalRows] = await Promise.all([
       listLegacyTodoRows(em, queryEngine, auth.tenantId, organizationIds, query.entityId, {
         limit: legacyWindow,
+        isUnrestricted,
       }),
       listCanonicalTodoRows(
         em,
@@ -91,6 +113,7 @@ export async function GET(request: Request): Promise<Response> {
           entityId: query.entityId,
           includeDeleted: true,
           limit: legacyWindow,
+          isUnrestricted,
         },
       ),
     ])

package/src/modules/customers/api/todos/route.ts

@@ -9,6 +9,7 @@ import type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'
 import type { CommandBus } from '@open-mercato/shared/lib/commands'
 import { isCrudHttpError, notFound } from '@open-mercato/shared/lib/crud/errors'
 import { parseBooleanToken } from '@open-mercato/shared/lib/boolean'
+import { isUnrestrictedOrganizationScope } from '@open-mercato/shared/lib/auth/organizationAccess'
 import { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'
 import {
   runCrudMutationGuardAfterSuccess,
@@ -233,15 +234,36 @@ async function resolveCanonicalTodoTargetId(
 
 export async function GET(request: Request): Promise<Response> {
   try {
-    const { auth, em, organizationIds, container, selectedOrganizationId } =
+    const { auth, em, organizationIds, container, selectedOrganizationId, scope } =
       await resolveCustomersRequestContext(request)
     const query = querySchema.parse(Object.fromEntries(new URL(request.url).searchParams))
     const flags = await resolveCustomerInteractionFeatureFlags(container, auth.tenantId)
     if (!flags.legacyAdapters) {
       return await legacyAdaptersDisabledResponse()
     }
-    const queryEngine = container.resolve('queryEngine') as QueryEngine
     const exportAll = parseBooleanToken(query.all) === true
+    const isUnrestricted = isUnrestrictedOrganizationScope({
+      isSuperAdmin: auth.isSuperAdmin === true,
+      allowedOrganizationIds: scope?.allowedIds,
+    })
+    if (!isUnrestricted && (!organizationIds || organizationIds.length === 0)) {
+      logger.warn('customers.todos.list collapsed organization scope', {
+        tenantId: auth.tenantId,
+        organizationIds,
+        selectedId: scope?.selectedId ?? null,
+        allowedIdsCount: scope?.allowedIds?.length ?? null,
+      })
+      return withAdapterHeaders(
+        NextResponse.json({
+          items: [],
+          total: 0,
+          page: exportAll ? 1 : query.page,
+          pageSize: exportAll ? 0 : query.pageSize,
+          totalPages: 1,
+        }),
+      )
+    }
+    const queryEngine = container.resolve('queryEngine') as QueryEngine
     const search = normalizeTodoSearch(query.search)
 
     if (flags.unified) {
@@ -255,6 +277,7 @@ export async function GET(request: Request): Promise<Response> {
           entityId: query.entityId,
           pagination: exportAll ? null : { page: query.page, pageSize: query.pageSize },
           searchText: search,
+          isUnrestricted,
         },
       )
       const total = canonical.total
@@ -275,6 +298,7 @@ export async function GET(request: Request): Promise<Response> {
     const [legacyRows, canonicalRows] = await Promise.all([
       listLegacyTodoRows(em, queryEngine, auth.tenantId, organizationIds, query.entityId, {
         limit: legacyWindow,
+        isUnrestricted,
       }),
       listCanonicalTodoRows(
         em,
@@ -287,6 +311,7 @@ export async function GET(request: Request): Promise<Response> {
           includeDeleted: true,
           source: CUSTOMER_INTERACTION_TODO_ADAPTER_SOURCE,
           limit: legacyWindow,
+          isUnrestricted,
         },
       ),
     ])

package/src/modules/customers/lib/todoCompatibility.ts

@@ -78,6 +78,17 @@ export type CanonicalTodoListResult = {
   total: number
 }
 
+function emptyCanonicalTodoList(): CanonicalTodoListResult {
+  return { items: [], bridgeIds: new Set(), total: 0 }
+}
+
+function isCollapsedRestrictedOrganizationScope(
+  organizationIds: string[] | null | undefined,
+  isUnrestricted: boolean | undefined,
+): boolean {
+  return isUnrestricted !== true && (!organizationIds || organizationIds.length === 0)
+}
+
 export type ListTodosPagination = { page: number; pageSize: number }
 
 function resolveLegacyTodoSource(source: string | null | undefined): string {
@@ -377,8 +388,11 @@ export async function listLegacyTodoRows(
   tenantId: string,
   organizationIds: string[] | null,
   entityId: string | undefined,
-  options?: { limit?: number | null },
+  options?: { limit?: number | null; isUnrestricted?: boolean },
 ): Promise<CustomerTodoRow[]> {
+  if (isCollapsedRestrictedOrganizationScope(organizationIds, options?.isUnrestricted)) {
+    return []
+  }
   const where: Record<string, unknown> = { tenantId }
   if (organizationIds && organizationIds.length > 0) {
     where.organizationId = { $in: organizationIds }
@@ -425,8 +439,12 @@ export async function listCanonicalTodoRows(
     pagination?: ListTodosPagination | null
     searchText?: string | null
     limit?: number | null
+    isUnrestricted?: boolean
   },
 ): Promise<CanonicalTodoListResult> {
+  if (isCollapsedRestrictedOrganizationScope(organizationIds, options?.isUnrestricted)) {
+    return emptyCanonicalTodoList()
+  }
   const where: Record<string, unknown> = {
     tenantId: auth.tenantId,
     interactionType: 'task',

package/src/modules/dashboards/lib/widgetScope.ts

@@ -1,6 +1,7 @@
 import type { EntityManager } from '@mikro-orm/postgresql'
 import { createRequestContainer, type AppContainer } from '@open-mercato/shared/lib/di/container'
 import { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'
+import { isUnrestrictedOrganizationScope } from '@open-mercato/shared/lib/auth/organizationAccess'
 import { CrudHttpError } from '@open-mercato/shared/lib/crud/errors'
 import { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'
 
@@ -9,6 +10,7 @@ export type WidgetScopeContext = {
   em: EntityManager
   tenantId: string
   organizationIds: string[] | null
+  isUnrestrictedOrganizationScope?: boolean
 }
 
 function normalizeScopeId(value: string | null | undefined): string | null {
@@ -91,5 +93,9 @@ export async function resolveWidgetScope(
     em,
     tenantId,
     organizationIds,
+    isUnrestrictedOrganizationScope: isUnrestrictedOrganizationScope({
+      isSuperAdmin,
+      allowedOrganizationIds: scope?.allowedIds,
+    }),
   }
 }