@open-mercato/core 0.6.8-develop.7100.1.fbf66fca35 → 0.7.0

package/dist/modules/communication_channels/lib/outbound-recipient.js

@@ -1,33 +0,0 @@
-import { z } from "zod";
-const MAX_OUTBOUND_RECIPIENT_LENGTH = 320;
-const emailRecipientSchema = z.string().email();
-const PROVIDER_NATIVE_ALLOWED = /^[A-Za-z0-9._:@+-]+$/;
-function validateOutboundRecipient(recipient, capabilities) {
-  if (typeof recipient !== "string" || recipient.length === 0) {
-    return { ok: false, error: "Recipient is required" };
-  }
-  if (recipient.length > MAX_OUTBOUND_RECIPIENT_LENGTH) {
-    return {
-      ok: false,
-      error: `Recipient must be at most ${MAX_OUTBOUND_RECIPIENT_LENGTH} characters`
-    };
-  }
-  if (capabilities?.recipientFormat !== "provider-native") {
-    return emailRecipientSchema.safeParse(recipient).success ? { ok: true } : { ok: false, error: "Recipient must be a valid email address" };
-  }
-  if (!PROVIDER_NATIVE_ALLOWED.test(recipient)) {
-    return {
-      ok: false,
-      error: "Recipient may only contain letters, digits, and the characters . _ : @ + -"
-    };
-  }
-  if (recipient.includes("..")) {
-    return { ok: false, error: 'Recipient must not contain ".."' };
-  }
-  return { ok: true };
-}
-export {
-  MAX_OUTBOUND_RECIPIENT_LENGTH,
-  validateOutboundRecipient
-};
-//# sourceMappingURL=outbound-recipient.js.map

package/dist/modules/communication_channels/lib/outbound-recipient.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../../../src/modules/communication_channels/lib/outbound-recipient.ts"],
-  "sourcesContent": ["import { z } from 'zod'\nimport type { ChannelCapabilities } from './adapter'\n\n/**\n * Upper bound shared by both recipient shapes. 320 is the RFC 5321 maximum for\n * an email address (64 local + `@` + 255 domain); provider-native identifiers\n * are far shorter, so one ceiling covers both.\n */\nexport const MAX_OUTBOUND_RECIPIENT_LENGTH = 320\n\nconst emailRecipientSchema = z.string().email()\n\n/**\n * Characters a provider-native recipient may contain. This is an allowlist, not a\n * denylist, because the recipient reaches adapters that interpolate it into a REST\n * path (Discord posts to `/channels/{recipient}/messages`), and a denylist fails\n * open on every character nobody thought of \u2014 percent-encoded separators\n * (`%2F`, `%2e%2e%2f`) and control bytes (NUL, DEL) all walked through the\n * previous `[\\r\\n\\s/\\\\?#]` class. An allowlist fails closed instead: the worst\n * case is a provider whose identifier alphabet needs widening, which is a\n * reviewable one-line change rather than a silent path-steering primitive.\n *\n * The set covers every provider-native identifier shape the hub has to carry\n * today \u2014 Discord snowflakes (digits), Slack-style ids (alphanumerics), and email\n * addresses, since `'provider-native'` must never narrow what `'email'` accepts.\n */\nconst PROVIDER_NATIVE_ALLOWED = /^[A-Za-z0-9._:@+-]+$/\n\nexport type OutboundRecipientCheck = { ok: true } | { ok: false; error: string }\n\n/**\n * Validate an outbound recipient against the provider's declared recipient\n * shape.\n *\n * The hub used to hard-wire `z.string().email()` on every outbound endpoint,\n * which left providers whose recipients are not email addresses with no product\n * path to send at all (#4976). Validation now follows the adapter's\n * `capabilities.recipientFormat`, defaulting to `'email'` so every existing\n * provider keeps byte-identical behavior.\n */\nexport function validateOutboundRecipient(\n  recipient: unknown,\n  capabilities: Pick<ChannelCapabilities, 'recipientFormat'> | null | undefined,\n): OutboundRecipientCheck {\n  if (typeof recipient !== 'string' || recipient.length === 0) {\n    return { ok: false, error: 'Recipient is required' }\n  }\n  if (recipient.length > MAX_OUTBOUND_RECIPIENT_LENGTH) {\n    return {\n      ok: false,\n      error: `Recipient must be at most ${MAX_OUTBOUND_RECIPIENT_LENGTH} characters`,\n    }\n  }\n  if (capabilities?.recipientFormat !== 'provider-native') {\n    return emailRecipientSchema.safeParse(recipient).success\n      ? { ok: true }\n      : { ok: false, error: 'Recipient must be a valid email address' }\n  }\n  if (!PROVIDER_NATIVE_ALLOWED.test(recipient)) {\n    return {\n      ok: false,\n      error: 'Recipient may only contain letters, digits, and the characters . _ : @ + -',\n    }\n  }\n  // `.` is allowed (email addresses need it), so traversal still has to be\n  // rejected explicitly even though the separators it would need are not.\n  if (recipient.includes('..')) {\n    return { ok: false, error: 'Recipient must not contain \"..\"' }\n  }\n  return { ok: true }\n}\n"],
-  "mappings": "AAAA,SAAS,SAAS;AAQX,MAAM,gCAAgC;AAE7C,MAAM,uBAAuB,EAAE,OAAO,EAAE,MAAM;AAgB9C,MAAM,0BAA0B;AAczB,SAAS,0BACd,WACA,cACwB;AACxB,MAAI,OAAO,cAAc,YAAY,UAAU,WAAW,GAAG;AAC3D,WAAO,EAAE,IAAI,OAAO,OAAO,wBAAwB;AAAA,EACrD;AACA,MAAI,UAAU,SAAS,+BAA+B;AACpD,WAAO;AAAA,MACL,IAAI;AAAA,MACJ,OAAO,6BAA6B,6BAA6B;AAAA,IACnE;AAAA,EACF;AACA,MAAI,cAAc,oBAAoB,mBAAmB;AACvD,WAAO,qBAAqB,UAAU,SAAS,EAAE,UAC7C,EAAE,IAAI,KAAK,IACX,EAAE,IAAI,OAAO,OAAO,0CAA0C;AAAA,EACpE;AACA,MAAI,CAAC,wBAAwB,KAAK,SAAS,GAAG;AAC5C,WAAO;AAAA,MACL,IAAI;AAAA,MACJ,OAAO;AAAA,IACT;AAAA,EACF;AAGA,MAAI,UAAU,SAAS,IAAI,GAAG;AAC5B,WAAO,EAAE,IAAI,OAAO,OAAO,kCAAkC;AAAA,EAC/D;AACA,SAAO,EAAE,IAAI,KAAK;AACpB;",
-  "names": []
-}

package/dist/modules/communication_channels/lib/resolve-channel-type.js

@@ -1,51 +0,0 @@
-import { findOneWithDecryption } from "@open-mercato/shared/lib/encryption/find";
-import { createLogger } from "@open-mercato/shared/lib/logger";
-import { CommunicationChannel, ExternalConversation, MessageChannelLink } from "../data/entities.js";
-const logger = createLogger("communication_channels").child({ component: "resolve-channel-type" });
-async function resolveChannelType(container, scope, reference) {
-  const em = container.resolve("em").fork();
-  const dscope = { tenantId: scope.tenantId, organizationId: scope.organizationId ?? null };
-  const baseFilter = { tenantId: scope.tenantId, organizationId: scope.organizationId ?? null };
-  let externalConversationId = reference.externalConversationId ?? null;
-  if (!externalConversationId && reference.messageId) {
-    const link = await findOneWithDecryption(
-      em,
-      MessageChannelLink,
-      { messageId: reference.messageId, ...baseFilter },
-      void 0,
-      dscope
-    );
-    if (link?.channelType) return link.channelType;
-    externalConversationId = link?.externalConversationId ?? null;
-  }
-  if (!externalConversationId) return null;
-  const conversation = await findOneWithDecryption(
-    em,
-    ExternalConversation,
-    { id: externalConversationId, ...baseFilter },
-    void 0,
-    dscope
-  );
-  if (!conversation?.channelId) return null;
-  const channel = await findOneWithDecryption(
-    em,
-    CommunicationChannel,
-    { id: conversation.channelId, ...baseFilter, deletedAt: null },
-    void 0,
-    dscope
-  );
-  return channel?.channelType ?? null;
-}
-async function resolveChannelTypeSafely(container, scope, reference) {
-  try {
-    return await resolveChannelType(container, scope, reference);
-  } catch (err) {
-    logger.warn("channel type resolution failed, treating the channel as unknown", { err });
-    return null;
-  }
-}
-export {
-  resolveChannelType,
-  resolveChannelTypeSafely
-};
-//# sourceMappingURL=resolve-channel-type.js.map

package/dist/modules/communication_channels/lib/resolve-channel-type.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../../../src/modules/communication_channels/lib/resolve-channel-type.ts"],
-  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport type { AppContainer } from '@open-mercato/shared/lib/di/container'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport { CommunicationChannel, ExternalConversation, MessageChannelLink } from '../data/entities'\n\nconst logger = createLogger('communication_channels').child({ component: 'resolve-channel-type' })\n\nexport type ChannelTypeScope = {\n  tenantId: string\n  organizationId: string | null\n}\n\nexport type ChannelTypeReference = {\n  /** `ExternalConversation.id`, as carried by a message's `sourceEntityId`. */\n  externalConversationId?: string | null\n  /** A platform `messages.message` id that may be linked to a channel. */\n  messageId?: string | null\n}\n\n/**\n * Resolve the channel type behind a platform message or conversation (#4975).\n *\n * Cross-module callers (the `messages` compose route) need to know whether an\n * external correspondent is reachable by email before validating a compose\n * payload, but `messages` may not reach into this module's entities. They\n * resolve this facade from DI instead \u2014 mirroring `communicationChannelsSendAsUser`\n * \u2014 and treat a `null` result as \"unknown\", which the messages validator\n * handles fail-closed.\n *\n * Always tenant/organization scoped: a reference that does not resolve inside\n * the caller's scope is reported as unknown rather than looked up globally.\n */\nexport async function resolveChannelType(\n  container: AppContainer,\n  scope: ChannelTypeScope,\n  reference: ChannelTypeReference,\n): Promise<string | null> {\n  const em = (container.resolve('em') as EntityManager).fork()\n  const dscope = { tenantId: scope.tenantId, organizationId: scope.organizationId ?? null }\n  const baseFilter = { tenantId: scope.tenantId, organizationId: scope.organizationId ?? null }\n\n  let externalConversationId = reference.externalConversationId ?? null\n\n  if (!externalConversationId && reference.messageId) {\n    // The message is linked to a channel directly \u2014 `MessageChannelLink` carries\n    // a denormalized channel type, so this is the cheapest hop when it exists.\n    const link = await findOneWithDecryption(\n      em,\n      MessageChannelLink,\n      { messageId: reference.messageId, ...baseFilter },\n      undefined,\n      dscope,\n    )\n    if (link?.channelType) return link.channelType\n    externalConversationId = link?.externalConversationId ?? null\n  }\n\n  if (!externalConversationId) return null\n\n  const conversation = await findOneWithDecryption(\n    em,\n    ExternalConversation,\n    { id: externalConversationId, ...baseFilter },\n    undefined,\n    dscope,\n  )\n  if (!conversation?.channelId) return null\n\n  const channel = await findOneWithDecryption(\n    em,\n    CommunicationChannel,\n    { id: conversation.channelId, ...baseFilter, deletedAt: null },\n    undefined,\n    dscope,\n  )\n  return channel?.channelType ?? null\n}\n\n/**\n * Same contract, but never throws: a lookup failure degrades to \"unknown\" so a\n * transient database error cannot turn into a 500 on an otherwise valid compose.\n * Unknown is the safe answer \u2014 the messages validator fails closed on it.\n */\nexport async function resolveChannelTypeSafely(\n  container: AppContainer,\n  scope: ChannelTypeScope,\n  reference: ChannelTypeReference,\n): Promise<string | null> {\n  try {\n    return await resolveChannelType(container, scope, reference)\n  } catch (err) {\n    logger.warn('channel type resolution failed, treating the channel as unknown', { err })\n    return null\n  }\n}\n\n/** DI service type for cross-module callers (resolve `communicationChannelsResolveChannelType`). */\nexport type ResolveChannelTypeService = typeof resolveChannelTypeSafely\n"],
-  "mappings": "AAEA,SAAS,6BAA6B;AACtC,SAAS,oBAAoB;AAC7B,SAAS,sBAAsB,sBAAsB,0BAA0B;AAE/E,MAAM,SAAS,aAAa,wBAAwB,EAAE,MAAM,EAAE,WAAW,uBAAuB,CAAC;AA2BjG,eAAsB,mBACpB,WACA,OACA,WACwB;AACxB,QAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC3D,QAAM,SAAS,EAAE,UAAU,MAAM,UAAU,gBAAgB,MAAM,kBAAkB,KAAK;AACxF,QAAM,aAAa,EAAE,UAAU,MAAM,UAAU,gBAAgB,MAAM,kBAAkB,KAAK;AAE5F,MAAI,yBAAyB,UAAU,0BAA0B;AAEjE,MAAI,CAAC,0BAA0B,UAAU,WAAW;AAGlD,UAAM,OAAO,MAAM;AAAA,MACjB;AAAA,MACA;AAAA,MACA,EAAE,WAAW,UAAU,WAAW,GAAG,WAAW;AAAA,MAChD;AAAA,MACA;AAAA,IACF;AACA,QAAI,MAAM,YAAa,QAAO,KAAK;AACnC,6BAAyB,MAAM,0BAA0B;AAAA,EAC3D;AAEA,MAAI,CAAC,uBAAwB,QAAO;AAEpC,QAAM,eAAe,MAAM;AAAA,IACzB;AAAA,IACA;AAAA,IACA,EAAE,IAAI,wBAAwB,GAAG,WAAW;AAAA,IAC5C;AAAA,IACA;AAAA,EACF;AACA,MAAI,CAAC,cAAc,UAAW,QAAO;AAErC,QAAM,UAAU,MAAM;AAAA,IACpB;AAAA,IACA;AAAA,IACA,EAAE,IAAI,aAAa,WAAW,GAAG,YAAY,WAAW,KAAK;AAAA,IAC7D;AAAA,IACA;AAAA,EACF;AACA,SAAO,SAAS,eAAe;AACjC;AAOA,eAAsB,yBACpB,WACA,OACA,WACwB;AACxB,MAAI;AACF,WAAO,MAAM,mBAAmB,WAAW,OAAO,SAAS;AAAA,EAC7D,SAAS,KAAK;AACZ,WAAO,KAAK,mEAAmE,EAAE,IAAI,CAAC;AACtF,WAAO;AAAA,EACT;AACF;",
-  "names": []
-}

package/dist/modules/customers/backend/customers/deals/pipeline/components/toneClasses.js

@@ -1,18 +0,0 @@
-const TONE_DOT_CLASS = {
-  success: "bg-status-success-icon",
-  error: "bg-status-error-icon",
-  warning: "bg-status-warning-icon",
-  info: "bg-status-info-icon",
-  neutral: "bg-status-neutral-icon",
-  brand: "bg-brand-violet",
-  pink: "bg-status-pink-icon"
-};
-function toneToDotClass(tone, fallback = "bg-status-neutral-icon") {
-  if (tone && tone in TONE_DOT_CLASS) return TONE_DOT_CLASS[tone];
-  return fallback;
-}
-export {
-  TONE_DOT_CLASS,
-  toneToDotClass
-};
-//# sourceMappingURL=toneClasses.js.map

package/dist/modules/customers/backend/customers/deals/pipeline/components/toneClasses.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../../../../../../../src/modules/customers/backend/customers/deals/pipeline/components/toneClasses.ts"],
-  "sourcesContent": ["import type { FilterOptionTone } from '@open-mercato/shared/lib/query/advanced-filter'\n\n// Saturated icon tokens shared by the kanban lane accent bar and the status filter\n// pills, so both surfaces render the same tone identically (#5107 review).\nexport const TONE_DOT_CLASS: Record<FilterOptionTone, string> = {\n  success: 'bg-status-success-icon',\n  error: 'bg-status-error-icon',\n  warning: 'bg-status-warning-icon',\n  info: 'bg-status-info-icon',\n  neutral: 'bg-status-neutral-icon',\n  brand: 'bg-brand-violet',\n  pink: 'bg-status-pink-icon',\n}\n\nexport function toneToDotClass(\n  tone: FilterOptionTone | null | undefined,\n  fallback = 'bg-status-neutral-icon',\n): string {\n  if (tone && tone in TONE_DOT_CLASS) return TONE_DOT_CLASS[tone]\n  return fallback\n}\n"],
-  "mappings": "AAIO,MAAM,iBAAmD;AAAA,EAC9D,SAAS;AAAA,EACT,OAAO;AAAA,EACP,SAAS;AAAA,EACT,MAAM;AAAA,EACN,SAAS;AAAA,EACT,OAAO;AAAA,EACP,MAAM;AACR;AAEO,SAAS,eACd,MACA,WAAW,0BACH;AACR,MAAI,QAAQ,QAAQ,eAAgB,QAAO,eAAe,IAAI;AAC9D,SAAO;AACT;",
-  "names": []
-}

package/dist/modules/customers/lib/calendar/participantIdentity.js

@@ -1,9 +0,0 @@
-function participantActorKey(participant) {
-  if (participant.userId) return `user:${participant.userId}`;
-  const email = participant.email?.trim().toLowerCase();
-  return email ? `email:${email}` : null;
-}
-export {
-  participantActorKey
-};
-//# sourceMappingURL=participantIdentity.js.map

package/dist/modules/customers/lib/calendar/participantIdentity.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../../../../src/modules/customers/lib/calendar/participantIdentity.ts"],
-  "sourcesContent": ["/**\n * The one canonical actor key for a calendar participant.\n *\n * A staff/customer attendee is identified by `userId`. An external guest has no\n * record in the system, so the normalized email is the only stable identity it\n * carries. Mapping, dedupe, conflict detection and the editor's conflict-probe\n * dependency key all derive their key from here, so a guest is treated as the\n * same actor across events instead of dropping out of actor comparisons.\n *\n * Returns `null` for a participant with neither \u2014 such a participant cannot be\n * compared to any other and must never collide with one that can.\n */\nexport function participantActorKey(participant: { userId?: string; email?: string }): string | null {\n  if (participant.userId) return `user:${participant.userId}`\n  const email = participant.email?.trim().toLowerCase()\n  return email ? `email:${email}` : null\n}\n"],
-  "mappings": "AAYO,SAAS,oBAAoB,aAAiE;AACnG,MAAI,YAAY,OAAQ,QAAO,QAAQ,YAAY,MAAM;AACzD,QAAM,QAAQ,YAAY,OAAO,KAAK,EAAE,YAAY;AACpD,SAAO,QAAQ,SAAS,KAAK,KAAK;AACpC;",
-  "names": []
-}

package/dist/modules/customers/lib/closureStage.js

@@ -1,45 +0,0 @@
-import { findWithDecryption } from "@open-mercato/shared/lib/encryption/find";
-import { CustomerPipelineStage } from "../data/entities.js";
-const TERMINAL_PIPELINE_STAGE_LABELS = {
-  won: /* @__PURE__ */ new Set(["won", "win", "closed won", "closed win"]),
-  lost: /* @__PURE__ */ new Set(["lost", "loose", "closed lost", "closed loose"])
-};
-function dealClosureOutcomeFromStatus(status) {
-  const normalized = typeof status === "string" ? status.trim().toLowerCase() : status;
-  if (normalized === "win" || normalized === "won") return "won";
-  if (normalized === "loose" || normalized === "lost") return "lost";
-  return null;
-}
-function normalizePipelineStageLabel(value) {
-  return value.trim().toLowerCase().replace(/[^a-z0-9]+/g, " ").trim();
-}
-async function loadClosurePipelineStageSnapshot(em, input) {
-  if (!input.pipelineId) return null;
-  const stages = await findWithDecryption(
-    em,
-    CustomerPipelineStage,
-    {
-      pipelineId: input.pipelineId,
-      tenantId: input.tenantId,
-      organizationId: input.organizationId
-    },
-    { orderBy: { order: "ASC" } },
-    { tenantId: input.tenantId, organizationId: input.organizationId }
-  );
-  const aliases = TERMINAL_PIPELINE_STAGE_LABELS[input.closureOutcome];
-  const stage = stages.find((candidate) => aliases.has(normalizePipelineStageLabel(candidate.label)));
-  if (!stage) return null;
-  return {
-    id: stage.id,
-    pipelineId: stage.pipelineId,
-    label: stage.label,
-    order: stage.order
-  };
-}
-export {
-  TERMINAL_PIPELINE_STAGE_LABELS,
-  dealClosureOutcomeFromStatus,
-  loadClosurePipelineStageSnapshot,
-  normalizePipelineStageLabel
-};
-//# sourceMappingURL=closureStage.js.map

package/dist/modules/customers/lib/closureStage.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../../../src/modules/customers/lib/closureStage.ts"],
-  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport { findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { CustomerPipelineStage } from '../data/entities'\n\nexport type DealClosureOutcome = 'won' | 'lost'\n\nexport type PipelineStageSnapshot = {\n  id: string\n  pipelineId: string\n  label: string\n  order: number\n}\n\n// Stage labels that mark a pipeline as terminal for a given closure outcome. Matching is\n// label-based because stages are tenant-configurable rows; see #5107.\nexport const TERMINAL_PIPELINE_STAGE_LABELS: Record<DealClosureOutcome, ReadonlySet<string>> = {\n  won: new Set(['won', 'win', 'closed won', 'closed win']),\n  lost: new Set(['lost', 'loose', 'closed lost', 'closed loose']),\n}\n\n/**\n * Map a deal status spelling (UI `win`/`loose` or AI `won`/`lost`) to its closure\n * outcome. Case-insensitive because callers such as the AI tool pass free-form model\n * text through, while every persisted status is lower-case.\n */\nexport function dealClosureOutcomeFromStatus(status: string | null | undefined): DealClosureOutcome | null {\n  const normalized = typeof status === 'string' ? status.trim().toLowerCase() : status\n  if (normalized === 'win' || normalized === 'won') return 'won'\n  if (normalized === 'loose' || normalized === 'lost') return 'lost'\n  return null\n}\n\nexport function normalizePipelineStageLabel(value: string): string {\n  return value\n    .trim()\n    .toLowerCase()\n    .replace(/[^a-z0-9]+/g, ' ')\n    .trim()\n}\n\n/**\n * Resolve the terminal stage of the deal's pipeline for a closure outcome, so every\n * writer (command, AI tool preview) agrees on where a closed deal lands (#5107).\n */\nexport async function loadClosurePipelineStageSnapshot(\n  em: EntityManager,\n  input: {\n    pipelineId: string | null\n    closureOutcome: DealClosureOutcome\n    tenantId: string\n    organizationId: string\n  },\n): Promise<PipelineStageSnapshot | null> {\n  if (!input.pipelineId) return null\n\n  const stages = await findWithDecryption(\n    em,\n    CustomerPipelineStage,\n    {\n      pipelineId: input.pipelineId,\n      tenantId: input.tenantId,\n      organizationId: input.organizationId,\n    },\n    { orderBy: { order: 'ASC' } },\n    { tenantId: input.tenantId, organizationId: input.organizationId },\n  )\n  const aliases = TERMINAL_PIPELINE_STAGE_LABELS[input.closureOutcome]\n  const stage = stages.find((candidate) => aliases.has(normalizePipelineStageLabel(candidate.label)))\n  if (!stage) return null\n  return {\n    id: stage.id,\n    pipelineId: stage.pipelineId,\n    label: stage.label,\n    order: stage.order,\n  }\n}\n"],
-  "mappings": "AACA,SAAS,0BAA0B;AACnC,SAAS,6BAA6B;AAa/B,MAAM,iCAAkF;AAAA,EAC7F,KAAK,oBAAI,IAAI,CAAC,OAAO,OAAO,cAAc,YAAY,CAAC;AAAA,EACvD,MAAM,oBAAI,IAAI,CAAC,QAAQ,SAAS,eAAe,cAAc,CAAC;AAChE;AAOO,SAAS,6BAA6B,QAA8D;AACzG,QAAM,aAAa,OAAO,WAAW,WAAW,OAAO,KAAK,EAAE,YAAY,IAAI;AAC9E,MAAI,eAAe,SAAS,eAAe,MAAO,QAAO;AACzD,MAAI,eAAe,WAAW,eAAe,OAAQ,QAAO;AAC5D,SAAO;AACT;AAEO,SAAS,4BAA4B,OAAuB;AACjE,SAAO,MACJ,KAAK,EACL,YAAY,EACZ,QAAQ,eAAe,GAAG,EAC1B,KAAK;AACV;AAMA,eAAsB,iCACpB,IACA,OAMuC;AACvC,MAAI,CAAC,MAAM,WAAY,QAAO;AAE9B,QAAM,SAAS,MAAM;AAAA,IACnB;AAAA,IACA;AAAA,IACA;AAAA,MACE,YAAY,MAAM;AAAA,MAClB,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM;AAAA,IACxB;AAAA,IACA,EAAE,SAAS,EAAE,OAAO,MAAM,EAAE;AAAA,IAC5B,EAAE,UAAU,MAAM,UAAU,gBAAgB,MAAM,eAAe;AAAA,EACnE;AACA,QAAM,UAAU,+BAA+B,MAAM,cAAc;AACnE,QAAM,QAAQ,OAAO,KAAK,CAAC,cAAc,QAAQ,IAAI,4BAA4B,UAAU,KAAK,CAAC,CAAC;AAClG,MAAI,CAAC,MAAO,QAAO;AACnB,SAAO;AAAA,IACL,IAAI,MAAM;AAAA,IACV,YAAY,MAAM;AAAA,IAClB,OAAO,MAAM;AAAA,IACb,OAAO,MAAM;AAAA,EACf;AACF;",
-  "names": []
-}

package/dist/modules/customers/lib/detailReadAccess.js

@@ -1,12 +0,0 @@
-import { NextResponse } from "next/server";
-import {
-  isOrganizationReadAccessAllowed
-} from "@open-mercato/core/modules/directory/utils/organizationScopeGuard";
-function denyCustomerDetailReadAsNotFound(input, notFoundMessage) {
-  if (isOrganizationReadAccessAllowed(input)) return null;
-  return NextResponse.json({ error: notFoundMessage }, { status: 404 });
-}
-export {
-  denyCustomerDetailReadAsNotFound
-};
-//# sourceMappingURL=detailReadAccess.js.map

package/dist/modules/customers/lib/detailReadAccess.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../../../src/modules/customers/lib/detailReadAccess.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport {\n  isOrganizationReadAccessAllowed,\n  type OrganizationReadAccessInput,\n} from '@open-mercato/core/modules/directory/utils/organizationScopeGuard'\n\n/**\n * Single-record customers detail routes (person / company / deal) must not leak\n * whether a record exists through the organization-scope check.\n *\n * The API dispatcher already enforces each route's `metadata.requireFeatures`\n * before the handler runs, returning a uniform `403` for callers who lack the\n * grant \u2014 so that path never distinguishes an existing id from a missing one.\n * The only remaining existence signal is the *post-load* organization guard: a\n * caller who holds the feature but whose scope excludes the record's\n * organization previously received `403` (record exists in another org) while a\n * non-existent id received `404`. That 403-vs-404 split is an existence oracle\n * (issue #5504).\n *\n * Collapse the organization-scope denial into the route's own not-found\n * response so an out-of-scope caller cannot tell \"exists in an organization you\n * cannot see\" from \"does not exist\" \u2014 the shape the api_keys hardening\n * (#4033 / PR-4051) established. Sharing this decision keeps the three customers\n * detail routes from drifting apart again.\n *\n * @returns the `404` response to return when read access is denied, or `null`\n * when the caller may read the record.\n */\nexport function denyCustomerDetailReadAsNotFound(\n  input: OrganizationReadAccessInput,\n  notFoundMessage: string,\n): NextResponse | null {\n  if (isOrganizationReadAccessAllowed(input)) return null\n  return NextResponse.json({ error: notFoundMessage }, { status: 404 })\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B;AAAA,EACE;AAAA,OAEK;AAwBA,SAAS,iCACd,OACA,iBACqB;AACrB,MAAI,gCAAgC,KAAK,EAAG,QAAO;AACnD,SAAO,aAAa,KAAK,EAAE,OAAO,gBAAgB,GAAG,EAAE,QAAQ,IAAI,CAAC;AACtE;",
-  "names": []
-}

package/dist/modules/data_sync/lib/abandoned-run.js

@@ -1,19 +0,0 @@
-async function failAbandonedRun(payload, info) {
-  const data = payload;
-  const runId = data?.payload?.runId;
-  const scope = data?.payload?.scope;
-  if (typeof runId !== "string" || typeof scope?.organizationId !== "string" || typeof scope?.tenantId !== "string") return;
-  const runScope = { organizationId: scope.organizationId, tenantId: scope.tenantId };
-  const errorMessage = `the queue abandoned this run's job without running it: ${info.reason}`;
-  const { createRequestContainer } = await import("@open-mercato/shared/lib/di/container");
-  const container = await createRequestContainer();
-  const runService = container.resolve("dataSyncRunService");
-  const run = await runService.markStatus(runId, "failed", runScope, errorMessage);
-  if (!run?.progressJobId) return;
-  const progressService = container.resolve("progressService");
-  await progressService.failJob(run.progressJobId, { errorMessage }, runScope);
-}
-export {
-  failAbandonedRun
-};
-//# sourceMappingURL=abandoned-run.js.map

package/dist/modules/data_sync/lib/abandoned-run.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../../../src/modules/data_sync/lib/abandoned-run.ts"],
-  "sourcesContent": ["import type { AbandonedJobInfo } from '@open-mercato/queue'\n\n/**\n * Fail the run behind a job the queue gave up on.\n *\n * A resumable data_sync job is ONE long-lived job for a whole run \u2014 `runImport` is entered once and\n * stays there for the duration, which for a full backfill is days. Every worker death (a deploy, an\n * OOM) therefore stalls that job, and BullMQ's stalled counter is cumulative for the job's life:\n * past `DATA_SYNC_MAX_STALLED_COUNT` it writes a deferred failure and the next worker fails the job\n * BEFORE calling the processor.\n *\n * So `runImport` never runs, never throws, and never finalizes \u2014 and `sync_runs` is left saying\n * `running` for a run nothing is running, forever. That is the residual state `queue-policy.ts`\n * describes as what remains after a job exhausts its stall budget; this repairs it.\n *\n * It only ever moves a non-terminal run: `markStatus` refuses to overwrite `completed` / `failed` /\n * `cancelled`, so a job abandoned after its run has ended is a no-op. `onJobAbandoned` may deliver\n * the same job more than once, which for the same reason is also a no-op.\n *\n * The run's progress job is failed alongside it, the way the worker's own catch path does in\n * `workers/sync-import.ts`. Without that the two halves disagree \u2014 the run reads `failed` while the\n * operation still shows as in flight in the top bar \u2014 until the progress staleness sweep eventually\n * fails it with a generic no-heartbeat message instead of the reason the queue recorded.\n */\nexport async function failAbandonedRun(payload: unknown, info: AbandonedJobInfo): Promise<void> {\n  const data = payload as { payload?: { runId?: unknown; scope?: { organizationId?: unknown; tenantId?: unknown } } } | undefined\n  const runId = data?.payload?.runId\n  const scope = data?.payload?.scope\n  // Nothing to repair without both: the run row is keyed by id AND tenant scope.\n  if (typeof runId !== 'string' || typeof scope?.organizationId !== 'string' || typeof scope?.tenantId !== 'string') return\n\n  const runScope = { organizationId: scope.organizationId, tenantId: scope.tenantId }\n  const errorMessage = `the queue abandoned this run's job without running it: ${info.reason}`\n\n  const { createRequestContainer } = await import('@open-mercato/shared/lib/di/container')\n  const container = await createRequestContainer()\n  const runService = container.resolve('dataSyncRunService') as {\n    markStatus(\n      runId: string,\n      status: string,\n      scope: { organizationId: string; tenantId: string },\n      error?: string,\n    ): Promise<{ progressJobId?: string | null } | null>\n  }\n  const run = await runService.markStatus(runId, 'failed', runScope, errorMessage)\n  if (!run?.progressJobId) return\n\n  const progressService = container.resolve('progressService') as {\n    failJob(\n      jobId: string,\n      input: { errorMessage: string },\n      ctx: { organizationId: string; tenantId: string },\n    ): Promise<unknown>\n  }\n  await progressService.failJob(run.progressJobId, { errorMessage }, runScope)\n}\n"],
-  "mappings": "AAwBA,eAAsB,iBAAiB,SAAkB,MAAuC;AAC9F,QAAM,OAAO;AACb,QAAM,QAAQ,MAAM,SAAS;AAC7B,QAAM,QAAQ,MAAM,SAAS;AAE7B,MAAI,OAAO,UAAU,YAAY,OAAO,OAAO,mBAAmB,YAAY,OAAO,OAAO,aAAa,SAAU;AAEnH,QAAM,WAAW,EAAE,gBAAgB,MAAM,gBAAgB,UAAU,MAAM,SAAS;AAClF,QAAM,eAAe,0DAA0D,KAAK,MAAM;AAE1F,QAAM,EAAE,uBAAuB,IAAI,MAAM,OAAO,uCAAuC;AACvF,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,aAAa,UAAU,QAAQ,oBAAoB;AAQzD,QAAM,MAAM,MAAM,WAAW,WAAW,OAAO,UAAU,UAAU,YAAY;AAC/E,MAAI,CAAC,KAAK,cAAe;AAEzB,QAAM,kBAAkB,UAAU,QAAQ,iBAAiB;AAO3D,QAAM,gBAAgB,QAAQ,IAAI,eAAe,EAAE,aAAa,GAAG,QAAQ;AAC7E;",
-  "names": []
-}

package/dist/modules/devices/api/deviceSerialization.js

@@ -1,46 +0,0 @@
-import { z } from "zod";
-import { toDeprecatedSnakeCaseAliases, toIso } from "./deviceList.js";
-function serializeDeviceDetail(device) {
-  const camel = {
-    id: device.id,
-    userId: device.userId,
-    deviceId: device.deviceId,
-    platform: device.platform,
-    clientAppVersion: device.clientAppVersion ?? null,
-    osVersion: device.osVersion ?? null,
-    pushProvider: device.pushProvider ?? null,
-    pushTokenUpdatedAt: toIso(device.pushTokenUpdatedAt),
-    lastSeenAt: toIso(device.lastSeenAt),
-    createdAt: toIso(device.createdAt),
-    updatedAt: toIso(device.updatedAt)
-  };
-  return { ...camel, ...toDeprecatedSnakeCaseAliases(camel) };
-}
-const deprecatedAlias = (of) => `Deprecated alias for \`${of}\`; removed in the next minor release.`;
-const deviceDetailItemSchema = z.object({
-  id: z.string().uuid(),
-  userId: z.string().uuid(),
-  deviceId: z.string(),
-  platform: z.enum(["ios", "android", "web"]),
-  clientAppVersion: z.string().nullable(),
-  osVersion: z.string().nullable(),
-  pushProvider: z.string().nullable(),
-  pushTokenUpdatedAt: z.string().nullable(),
-  lastSeenAt: z.string().nullable(),
-  createdAt: z.string().nullable(),
-  updatedAt: z.string().nullable(),
-  user_id: z.string().uuid().describe(deprecatedAlias("userId")),
-  device_id: z.string().describe(deprecatedAlias("deviceId")),
-  client_app_version: z.string().nullable().describe(deprecatedAlias("clientAppVersion")),
-  os_version: z.string().nullable().describe(deprecatedAlias("osVersion")),
-  push_provider: z.string().nullable().describe(deprecatedAlias("pushProvider")),
-  push_token_updated_at: z.string().nullable().describe(deprecatedAlias("pushTokenUpdatedAt")),
-  last_seen_at: z.string().nullable().describe(deprecatedAlias("lastSeenAt")),
-  created_at: z.string().nullable().describe(deprecatedAlias("createdAt")),
-  updated_at: z.string().nullable().describe(deprecatedAlias("updatedAt"))
-});
-export {
-  deviceDetailItemSchema,
-  serializeDeviceDetail
-};
-//# sourceMappingURL=deviceSerialization.js.map

package/dist/modules/devices/api/deviceSerialization.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../../../src/modules/devices/api/deviceSerialization.ts"],
-  "sourcesContent": ["import { z } from 'zod'\nimport type { UserDevice } from '../data/entities'\nimport { toDeprecatedSnakeCaseAliases, toIso } from './deviceList'\n\n// Detail contract for `GET /api/devices/admin/devices/:id`. Keys are camelCase like every other\n// module's responses (#5513); the snake_case keys stay alongside as deprecated aliases for one minor\n// version, per the deprecation protocol in BACKWARD_COMPATIBILITY.md \u00A7 7.\n// push_token is a secret and is never returned.\nexport function serializeDeviceDetail(device: UserDevice): Record<string, unknown> {\n  const camel = {\n    id: device.id,\n    userId: device.userId,\n    deviceId: device.deviceId,\n    platform: device.platform,\n    clientAppVersion: device.clientAppVersion ?? null,\n    osVersion: device.osVersion ?? null,\n    pushProvider: device.pushProvider ?? null,\n    pushTokenUpdatedAt: toIso(device.pushTokenUpdatedAt),\n    lastSeenAt: toIso(device.lastSeenAt),\n    createdAt: toIso(device.createdAt),\n    updatedAt: toIso(device.updatedAt),\n  }\n  return { ...camel, ...toDeprecatedSnakeCaseAliases(camel) }\n}\n\n// See the note in ./deviceList \u2014 the rendered deprecation notice lives on the endpoint description.\nconst deprecatedAlias = (of: string) => `Deprecated alias for \\`${of}\\`; removed in the next minor release.`\n\nexport const deviceDetailItemSchema = z.object({\n  id: z.string().uuid(),\n  userId: z.string().uuid(),\n  deviceId: z.string(),\n  platform: z.enum(['ios', 'android', 'web']),\n  clientAppVersion: z.string().nullable(),\n  osVersion: z.string().nullable(),\n  pushProvider: z.string().nullable(),\n  pushTokenUpdatedAt: z.string().nullable(),\n  lastSeenAt: z.string().nullable(),\n  createdAt: z.string().nullable(),\n  updatedAt: z.string().nullable(),\n  user_id: z.string().uuid().describe(deprecatedAlias('userId')),\n  device_id: z.string().describe(deprecatedAlias('deviceId')),\n  client_app_version: z.string().nullable().describe(deprecatedAlias('clientAppVersion')),\n  os_version: z.string().nullable().describe(deprecatedAlias('osVersion')),\n  push_provider: z.string().nullable().describe(deprecatedAlias('pushProvider')),\n  push_token_updated_at: z.string().nullable().describe(deprecatedAlias('pushTokenUpdatedAt')),\n  last_seen_at: z.string().nullable().describe(deprecatedAlias('lastSeenAt')),\n  created_at: z.string().nullable().describe(deprecatedAlias('createdAt')),\n  updated_at: z.string().nullable().describe(deprecatedAlias('updatedAt')),\n})\n"],
-  "mappings": "AAAA,SAAS,SAAS;AAElB,SAAS,8BAA8B,aAAa;AAM7C,SAAS,sBAAsB,QAA6C;AACjF,QAAM,QAAQ;AAAA,IACZ,IAAI,OAAO;AAAA,IACX,QAAQ,OAAO;AAAA,IACf,UAAU,OAAO;AAAA,IACjB,UAAU,OAAO;AAAA,IACjB,kBAAkB,OAAO,oBAAoB;AAAA,IAC7C,WAAW,OAAO,aAAa;AAAA,IAC/B,cAAc,OAAO,gBAAgB;AAAA,IACrC,oBAAoB,MAAM,OAAO,kBAAkB;AAAA,IACnD,YAAY,MAAM,OAAO,UAAU;AAAA,IACnC,WAAW,MAAM,OAAO,SAAS;AAAA,IACjC,WAAW,MAAM,OAAO,SAAS;AAAA,EACnC;AACA,SAAO,EAAE,GAAG,OAAO,GAAG,6BAA6B,KAAK,EAAE;AAC5D;AAGA,MAAM,kBAAkB,CAAC,OAAe,0BAA0B,EAAE;AAE7D,MAAM,yBAAyB,EAAE,OAAO;AAAA,EAC7C,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,QAAQ,EAAE,OAAO,EAAE,KAAK;AAAA,EACxB,UAAU,EAAE,OAAO;AAAA,EACnB,UAAU,EAAE,KAAK,CAAC,OAAO,WAAW,KAAK,CAAC;AAAA,EAC1C,kBAAkB,EAAE,OAAO,EAAE,SAAS;AAAA,EACtC,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,cAAc,EAAE,OAAO,EAAE,SAAS;AAAA,EAClC,oBAAoB,EAAE,OAAO,EAAE,SAAS;AAAA,EACxC,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,EAChC,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,gBAAgB,QAAQ,CAAC;AAAA,EAC7D,WAAW,EAAE,OAAO,EAAE,SAAS,gBAAgB,UAAU,CAAC;AAAA,EAC1D,oBAAoB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,gBAAgB,kBAAkB,CAAC;AAAA,EACtF,YAAY,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,gBAAgB,WAAW,CAAC;AAAA,EACvE,eAAe,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,gBAAgB,cAAc,CAAC;AAAA,EAC7E,uBAAuB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,gBAAgB,oBAAoB,CAAC;AAAA,EAC3F,cAAc,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,gBAAgB,YAAY,CAAC;AAAA,EAC1E,YAAY,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,gBAAgB,WAAW,CAAC;AAAA,EACvE,YAAY,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,gBAAgB,WAAW,CAAC;AACzE,CAAC;",
-  "names": []
-}

package/dist/modules/devices/backend/devices/useDeviceUserLabels.js

@@ -1,34 +0,0 @@
-"use client";
-import * as React from "react";
-import { resolveDeviceUserOptions } from "./userOptions.js";
-function useDeviceUserLabels(userIds) {
-  const [labels, setLabels] = React.useState({});
-  const resolvedIdsRef = React.useRef(/* @__PURE__ */ new Set());
-  const idsKey = React.useMemo(() => {
-    const normalized = /* @__PURE__ */ new Set();
-    for (const userId of userIds) {
-      if (typeof userId === "string" && userId.trim()) normalized.add(userId.trim());
-    }
-    return Array.from(normalized).sort((left, right) => left < right ? -1 : left > right ? 1 : 0).join(",");
-  }, [userIds]);
-  React.useEffect(() => {
-    if (!idsKey) return;
-    const unresolved = idsKey.split(",").filter((userId) => !resolvedIdsRef.current.has(userId));
-    if (unresolved.length === 0) return;
-    const controller = new AbortController();
-    void resolveDeviceUserOptions(unresolved, controller.signal).then(({ options, resolvedIds }) => {
-      if (controller.signal.aborted) return;
-      for (const userId of resolvedIds) resolvedIdsRef.current.add(userId);
-      const next = {};
-      for (const option of options) next[option.value] = option.label;
-      if (Object.keys(next).length) setLabels((current) => ({ ...current, ...next }));
-    }).catch(() => {
-    });
-    return () => controller.abort();
-  }, [idsKey]);
-  return labels;
-}
-export {
-  useDeviceUserLabels
-};
-//# sourceMappingURL=useDeviceUserLabels.js.map

package/dist/modules/devices/backend/devices/useDeviceUserLabels.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../../../../src/modules/devices/backend/devices/useDeviceUserLabels.ts"],
-  "sourcesContent": ["'use client'\n\nimport * as React from 'react'\nimport { resolveDeviceUserOptions } from './userOptions'\n\n// Resolves owner ids that are on screen into display labels. Modelled on\n// warranty_claims/backend/components/useUserDisplayNames, but every failure degrades to an empty\n// map instead of throwing: a devices admin without `auth.users.list` must still see the page.\nexport function useDeviceUserLabels(userIds: readonly (string | null | undefined)[]): Record<string, string> {\n  const [labels, setLabels] = React.useState<Record<string, string>>({})\n  const resolvedIdsRef = React.useRef<Set<string>>(new Set())\n\n  const idsKey = React.useMemo(() => {\n    const normalized = new Set<string>()\n    for (const userId of userIds) {\n      if (typeof userId === 'string' && userId.trim()) normalized.add(userId.trim())\n    }\n    return Array.from(normalized)\n      .sort((left, right) => (left < right ? -1 : left > right ? 1 : 0))\n      .join(',')\n  }, [userIds])\n\n  React.useEffect(() => {\n    if (!idsKey) return\n    const unresolved = idsKey.split(',').filter((userId) => !resolvedIdsRef.current.has(userId))\n    if (unresolved.length === 0) return\n\n    const controller = new AbortController()\n    void resolveDeviceUserOptions(unresolved, controller.signal)\n      .then(({ options, resolvedIds }) => {\n        if (controller.signal.aborted) return\n        // Only ids the server actually answered for are remembered. Marking an id whose request\n        // failed would keep its row showing a bare UUID for the life of the component, even though\n        // the next attempt would have worked.\n        for (const userId of resolvedIds) resolvedIdsRef.current.add(userId)\n        const next: Record<string, string> = {}\n        for (const option of options) next[option.value] = option.label\n        if (Object.keys(next).length) setLabels((current) => ({ ...current, ...next }))\n      })\n      .catch(() => {})\n    return () => controller.abort()\n  }, [idsKey])\n\n  return labels\n}\n"],
-  "mappings": ";AAEA,YAAY,WAAW;AACvB,SAAS,gCAAgC;AAKlC,SAAS,oBAAoB,SAAyE;AAC3G,QAAM,CAAC,QAAQ,SAAS,IAAI,MAAM,SAAiC,CAAC,CAAC;AACrE,QAAM,iBAAiB,MAAM,OAAoB,oBAAI,IAAI,CAAC;AAE1D,QAAM,SAAS,MAAM,QAAQ,MAAM;AACjC,UAAM,aAAa,oBAAI,IAAY;AACnC,eAAW,UAAU,SAAS;AAC5B,UAAI,OAAO,WAAW,YAAY,OAAO,KAAK,EAAG,YAAW,IAAI,OAAO,KAAK,CAAC;AAAA,IAC/E;AACA,WAAO,MAAM,KAAK,UAAU,EACzB,KAAK,CAAC,MAAM,UAAW,OAAO,QAAQ,KAAK,OAAO,QAAQ,IAAI,CAAE,EAChE,KAAK,GAAG;AAAA,EACb,GAAG,CAAC,OAAO,CAAC;AAEZ,QAAM,UAAU,MAAM;AACpB,QAAI,CAAC,OAAQ;AACb,UAAM,aAAa,OAAO,MAAM,GAAG,EAAE,OAAO,CAAC,WAAW,CAAC,eAAe,QAAQ,IAAI,MAAM,CAAC;AAC3F,QAAI,WAAW,WAAW,EAAG;AAE7B,UAAM,aAAa,IAAI,gBAAgB;AACvC,SAAK,yBAAyB,YAAY,WAAW,MAAM,EACxD,KAAK,CAAC,EAAE,SAAS,YAAY,MAAM;AAClC,UAAI,WAAW,OAAO,QAAS;AAI/B,iBAAW,UAAU,YAAa,gBAAe,QAAQ,IAAI,MAAM;AACnE,YAAM,OAA+B,CAAC;AACtC,iBAAW,UAAU,QAAS,MAAK,OAAO,KAAK,IAAI,OAAO;AAC1D,UAAI,OAAO,KAAK,IAAI,EAAE,OAAQ,WAAU,CAAC,aAAa,EAAE,GAAG,SAAS,GAAG,KAAK,EAAE;AAAA,IAChF,CAAC,EACA,MAAM,MAAM;AAAA,IAAC,CAAC;AACjB,WAAO,MAAM,WAAW,MAAM;AAAA,EAChC,GAAG,CAAC,MAAM,CAAC;AAEX,SAAO;AACT;",
-  "names": []
-}

package/dist/modules/devices/backend/devices/userOptions.js

@@ -1,52 +0,0 @@
-import { apiCall } from "@open-mercato/ui/backend/utils/apiCall";
-import { MAX_USER_LOOKUP_IDS } from "@open-mercato/core/modules/auth/lib/userIdFilter";
-const SEARCH_PAGE_SIZE = 20;
-const MAX_IDS_PER_LOOKUP = MAX_USER_LOOKUP_IDS;
-function toOption(item, style) {
-  if (!item || typeof item.id !== "string" || !item.id.trim()) return [];
-  const id = item.id.trim();
-  const name = typeof item.name === "string" && item.name.trim() ? item.name.trim() : null;
-  const email = typeof item.email === "string" && item.email.trim() ? item.email.trim() : null;
-  const label = style === "search" && name && email ? `${name} \u2014 ${email}` : name ?? email ?? id;
-  return [{ value: id, label }];
-}
-async function fetchUsers(params, style, signal) {
-  const call = await apiCall(
-    `/api/auth/users?${params.toString()}`,
-    { headers: { "x-om-forbidden-redirect": "0" }, signal },
-    { fallback: null }
-  ).catch(() => null);
-  if (!call || !call.ok) return null;
-  return (call.result?.items ?? []).flatMap((item) => toOption(item, style));
-}
-async function loadDeviceUserOptions(query) {
-  const params = new URLSearchParams();
-  params.set("page", "1");
-  params.set("pageSize", String(SEARCH_PAGE_SIZE));
-  const trimmed = query?.trim();
-  if (trimmed) params.set("search", trimmed);
-  return await fetchUsers(params, "search") ?? [];
-}
-async function resolveDeviceUserOptions(ids, signal) {
-  const unique = Array.from(new Set(ids.map((id) => id.trim()).filter(Boolean)));
-  if (unique.length === 0) return { options: [], resolvedIds: [] };
-  const options = [];
-  const resolvedIds = [];
-  for (let offset = 0; offset < unique.length; offset += MAX_IDS_PER_LOOKUP) {
-    const batch = unique.slice(offset, offset + MAX_IDS_PER_LOOKUP);
-    const params = new URLSearchParams();
-    params.set("page", "1");
-    params.set("pageSize", String(batch.length));
-    params.set("ids", batch.join(","));
-    const batchOptions = await fetchUsers(params, "compact", signal);
-    if (batchOptions === null) continue;
-    options.push(...batchOptions);
-    resolvedIds.push(...batch);
-  }
-  return { options, resolvedIds };
-}
-export {
-  loadDeviceUserOptions,
-  resolveDeviceUserOptions
-};
-//# sourceMappingURL=userOptions.js.map

package/dist/modules/devices/backend/devices/userOptions.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../../../../src/modules/devices/backend/devices/userOptions.ts"],
-  "sourcesContent": ["import { apiCall } from '@open-mercato/ui/backend/utils/apiCall'\nimport { MAX_USER_LOOKUP_IDS } from '@open-mercato/core/modules/auth/lib/userIdFilter'\n\nexport type DeviceUserOption = {\n  value: string\n  label: string\n}\n\ntype AuthUserItem = {\n  id?: unknown\n  name?: unknown\n  email?: unknown\n}\n\nconst SEARCH_PAGE_SIZE = 20\n// Imported rather than restated: `parseIdsParam` slices past the route's cap without complaining,\n// so a client batch larger than the server accepts loses the overflow ids silently.\nconst MAX_IDS_PER_LOOKUP = MAX_USER_LOOKUP_IDS\n\n/**\n * Two label styles on purpose. A picker suggestion has to disambiguate two people with the same\n * display name, and neither `CrudForm`'s combobox nor `FilterBar` renders anything but the label \u2014\n * so the email has to live in the label there. A resolved column label is read next to a device,\n * where the email is noise.\n */\ntype LabelStyle = 'search' | 'compact'\n\nfunction toOption(item: AuthUserItem | null | undefined, style: LabelStyle): DeviceUserOption[] {\n  if (!item || typeof item.id !== 'string' || !item.id.trim()) return []\n  const id = item.id.trim()\n  const name = typeof item.name === 'string' && item.name.trim() ? item.name.trim() : null\n  const email = typeof item.email === 'string' && item.email.trim() ? item.email.trim() : null\n  const label = style === 'search' && name && email ? `${name} \u2014 ${email}` : name ?? email ?? id\n  return [{ value: id, label }]\n}\n\n// `devices.admin` declares `dependsOn: ['auth.users.list']`, but dependsOn only diagnoses \u2014 a\n// hand-built role can still reach these screens without it until the ACL editor or\n// `sync-role-acls` fixes it. `x-om-forbidden-redirect: 0` keeps that 403 from bouncing the whole\n// page to /login. `null` means the call itself failed, which callers must not\n// confuse with a successful call that matched nobody \u2014 a caller caching \"already resolved\" would\n// otherwise remember a transient network error forever.\nasync function fetchUsers(\n  params: URLSearchParams,\n  style: LabelStyle,\n  signal?: AbortSignal,\n): Promise<DeviceUserOption[] | null> {\n  const call = await apiCall<{ items?: AuthUserItem[] }>(\n    `/api/auth/users?${params.toString()}`,\n    { headers: { 'x-om-forbidden-redirect': '0' }, signal },\n    { fallback: null },\n  ).catch(() => null)\n  if (!call || !call.ok) return null\n  return (call.result?.items ?? []).flatMap((item) => toOption(item, style))\n}\n\nexport async function loadDeviceUserOptions(query?: string): Promise<DeviceUserOption[]> {\n  const params = new URLSearchParams()\n  params.set('page', '1')\n  params.set('pageSize', String(SEARCH_PAGE_SIZE))\n  const trimmed = query?.trim()\n  if (trimmed) params.set('search', trimmed)\n  // A picker has nothing to cache, so a failed lookup is just an empty suggestion list.\n  return (await fetchUsers(params, 'search')) ?? []\n}\n\n/**\n * The outcome of a batch lookup. `resolvedIds` lists the ids the server actually answered for \u2014\n * an id that came back without a row (deleted user) still counts as resolved, an id whose request\n * failed does not. Callers cache on `resolvedIds`, so a transient failure is retried rather than\n * remembered as a permanent blank.\n */\nexport type DeviceUserLookup = {\n  options: DeviceUserOption[]\n  resolvedIds: string[]\n}\n\n// Batch id \u2192 label resolution for rows already on screen, so a device whose owner never appeared in\n// a search result still renders a name instead of a bare UUID.\nexport async function resolveDeviceUserOptions(ids: string[], signal?: AbortSignal): Promise<DeviceUserLookup> {\n  const unique = Array.from(new Set(ids.map((id) => id.trim()).filter(Boolean)))\n  if (unique.length === 0) return { options: [], resolvedIds: [] }\n  const options: DeviceUserOption[] = []\n  const resolvedIds: string[] = []\n  for (let offset = 0; offset < unique.length; offset += MAX_IDS_PER_LOOKUP) {\n    const batch = unique.slice(offset, offset + MAX_IDS_PER_LOOKUP)\n    const params = new URLSearchParams()\n    params.set('page', '1')\n    params.set('pageSize', String(batch.length))\n    // URLSearchParams encodes on toString(); pre-encoding here would double-escape the commas.\n    params.set('ids', batch.join(','))\n    const batchOptions = await fetchUsers(params, 'compact', signal)\n    // One failed batch must not cost the batches that did answer.\n    if (batchOptions === null) continue\n    options.push(...batchOptions)\n    resolvedIds.push(...batch)\n  }\n  return { options, resolvedIds }\n}\n"],
-  "mappings": "AAAA,SAAS,eAAe;AACxB,SAAS,2BAA2B;AAapC,MAAM,mBAAmB;AAGzB,MAAM,qBAAqB;AAU3B,SAAS,SAAS,MAAuC,OAAuC;AAC9F,MAAI,CAAC,QAAQ,OAAO,KAAK,OAAO,YAAY,CAAC,KAAK,GAAG,KAAK,EAAG,QAAO,CAAC;AACrE,QAAM,KAAK,KAAK,GAAG,KAAK;AACxB,QAAM,OAAO,OAAO,KAAK,SAAS,YAAY,KAAK,KAAK,KAAK,IAAI,KAAK,KAAK,KAAK,IAAI;AACpF,QAAM,QAAQ,OAAO,KAAK,UAAU,YAAY,KAAK,MAAM,KAAK,IAAI,KAAK,MAAM,KAAK,IAAI;AACxF,QAAM,QAAQ,UAAU,YAAY,QAAQ,QAAQ,GAAG,IAAI,WAAM,KAAK,KAAK,QAAQ,SAAS;AAC5F,SAAO,CAAC,EAAE,OAAO,IAAI,MAAM,CAAC;AAC9B;AAQA,eAAe,WACb,QACA,OACA,QACoC;AACpC,QAAM,OAAO,MAAM;AAAA,IACjB,mBAAmB,OAAO,SAAS,CAAC;AAAA,IACpC,EAAE,SAAS,EAAE,2BAA2B,IAAI,GAAG,OAAO;AAAA,IACtD,EAAE,UAAU,KAAK;AAAA,EACnB,EAAE,MAAM,MAAM,IAAI;AAClB,MAAI,CAAC,QAAQ,CAAC,KAAK,GAAI,QAAO;AAC9B,UAAQ,KAAK,QAAQ,SAAS,CAAC,GAAG,QAAQ,CAAC,SAAS,SAAS,MAAM,KAAK,CAAC;AAC3E;AAEA,eAAsB,sBAAsB,OAA6C;AACvF,QAAM,SAAS,IAAI,gBAAgB;AACnC,SAAO,IAAI,QAAQ,GAAG;AACtB,SAAO,IAAI,YAAY,OAAO,gBAAgB,CAAC;AAC/C,QAAM,UAAU,OAAO,KAAK;AAC5B,MAAI,QAAS,QAAO,IAAI,UAAU,OAAO;AAEzC,SAAQ,MAAM,WAAW,QAAQ,QAAQ,KAAM,CAAC;AAClD;AAeA,eAAsB,yBAAyB,KAAe,QAAiD;AAC7G,QAAM,SAAS,MAAM,KAAK,IAAI,IAAI,IAAI,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC,EAAE,OAAO,OAAO,CAAC,CAAC;AAC7E,MAAI,OAAO,WAAW,EAAG,QAAO,EAAE,SAAS,CAAC,GAAG,aAAa,CAAC,EAAE;AAC/D,QAAM,UAA8B,CAAC;AACrC,QAAM,cAAwB,CAAC;AAC/B,WAAS,SAAS,GAAG,SAAS,OAAO,QAAQ,UAAU,oBAAoB;AACzE,UAAM,QAAQ,OAAO,MAAM,QAAQ,SAAS,kBAAkB;AAC9D,UAAM,SAAS,IAAI,gBAAgB;AACnC,WAAO,IAAI,QAAQ,GAAG;AACtB,WAAO,IAAI,YAAY,OAAO,MAAM,MAAM,CAAC;AAE3C,WAAO,IAAI,OAAO,MAAM,KAAK,GAAG,CAAC;AACjC,UAAM,eAAe,MAAM,WAAW,QAAQ,WAAW,MAAM;AAE/D,QAAI,iBAAiB,KAAM;AAC3B,YAAQ,KAAK,GAAG,YAAY;AAC5B,gBAAY,KAAK,GAAG,KAAK;AAAA,EAC3B;AACA,SAAO,EAAE,SAAS,YAAY;AAChC;",
-  "names": []
-}

package/dist/modules/directory/services/organizationHierarchyService.js

@@ -1,29 +0,0 @@
-import { findOneWithDecryption } from "@open-mercato/shared/lib/encryption/find";
-import { Organization } from "../data/entities.js";
-function normalizeIds(values) {
-  if (!Array.isArray(values)) return [];
-  return Array.from(new Set(values.map((value) => typeof value === "string" ? value.trim() : "").filter(Boolean)));
-}
-class DefaultOrganizationHierarchyService {
-  constructor(em) {
-    this.em = em;
-  }
-  async resolveAncestorIds(input) {
-    const organization = await findOneWithDecryption(
-      this.em,
-      Organization,
-      {
-        id: input.organizationId,
-        tenant: input.tenantId,
-        deletedAt: null
-      },
-      { fields: ["id", "ancestorIds"] },
-      { tenantId: input.tenantId, organizationId: input.organizationId }
-    );
-    return organization ? normalizeIds(organization.ancestorIds) : null;
-  }
-}
-export {
-  DefaultOrganizationHierarchyService
-};
-//# sourceMappingURL=organizationHierarchyService.js.map

package/dist/modules/directory/services/organizationHierarchyService.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../../../src/modules/directory/services/organizationHierarchyService.ts"],
-  "sourcesContent": ["import type { FilterQuery } from '@mikro-orm/core'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport type { OrganizationHierarchyService } from '@open-mercato/shared/lib/auth/principal-service'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { Organization } from '../data/entities'\n\nfunction normalizeIds(values: unknown): string[] {\n  if (!Array.isArray(values)) return []\n  return Array.from(new Set(values\n    .map((value) => typeof value === 'string' ? value.trim() : '')\n    .filter(Boolean)))\n}\n\nexport class DefaultOrganizationHierarchyService implements OrganizationHierarchyService {\n  constructor(private readonly em: EntityManager) {}\n\n  async resolveAncestorIds(input: {\n    tenantId: string\n    organizationId: string\n  }): Promise<string[] | null> {\n    const organization = await findOneWithDecryption(\n      this.em,\n      Organization,\n      {\n        id: input.organizationId,\n        tenant: input.tenantId,\n        deletedAt: null,\n      } as FilterQuery<Organization>,\n      { fields: ['id', 'ancestorIds'] },\n      { tenantId: input.tenantId, organizationId: input.organizationId },\n    )\n    return organization ? normalizeIds(organization.ancestorIds) : null\n  }\n}\n"],
-  "mappings": "AAGA,SAAS,6BAA6B;AACtC,SAAS,oBAAoB;AAE7B,SAAS,aAAa,QAA2B;AAC/C,MAAI,CAAC,MAAM,QAAQ,MAAM,EAAG,QAAO,CAAC;AACpC,SAAO,MAAM,KAAK,IAAI,IAAI,OACvB,IAAI,CAAC,UAAU,OAAO,UAAU,WAAW,MAAM,KAAK,IAAI,EAAE,EAC5D,OAAO,OAAO,CAAC,CAAC;AACrB;AAEO,MAAM,oCAA4E;AAAA,EACvF,YAA6B,IAAmB;AAAnB;AAAA,EAAoB;AAAA,EAEjD,MAAM,mBAAmB,OAGI;AAC3B,UAAM,eAAe,MAAM;AAAA,MACzB,KAAK;AAAA,MACL;AAAA,MACA;AAAA,QACE,IAAI,MAAM;AAAA,QACV,QAAQ,MAAM;AAAA,QACd,WAAW;AAAA,MACb;AAAA,MACA,EAAE,QAAQ,CAAC,MAAM,aAAa,EAAE;AAAA,MAChC,EAAE,UAAU,MAAM,UAAU,gBAAgB,MAAM,eAAe;AAAA,IACnE;AACA,WAAO,eAAe,aAAa,aAAa,WAAW,IAAI;AAAA,EACjE;AACF;",
-  "names": []
-}

package/dist/modules/directory/services/organizationScopeService.js

@@ -1,56 +0,0 @@
-import { resolveOrganizationScope, resolveOrganizationScopeForRequest } from "../utils/organizationScope.js";
-class DefaultOrganizationScopeService {
-  constructor(em, rbac, container) {
-    this.em = em;
-    this.rbac = rbac;
-    this.container = container;
-  }
-  resolve(input) {
-    const auth = input.auth;
-    if (input.freshAcl && auth?.sub) {
-      return this.resolveFresh({
-        auth,
-        selectedId: input.selectedId,
-        tenantId: input.tenantId
-      }).then((result) => result.scope);
-    }
-    return resolveOrganizationScope({
-      em: this.em,
-      rbac: this.rbac,
-      auth: input.auth,
-      selectedId: input.selectedId,
-      tenantId: input.tenantId
-    });
-  }
-  async resolveFresh(input) {
-    await this.rbac.invalidateUserCache(input.auth.sub);
-    const acl = await this.rbac.loadAcl(input.auth.sub, {
-      tenantId: input.tenantId ?? input.auth.tenantId ?? null,
-      organizationId: input.selectedId ?? input.auth.orgId ?? null
-    });
-    const freshRbac = {
-      loadAcl: async () => acl
-    };
-    const scope = await resolveOrganizationScope({
-      em: this.em,
-      rbac: freshRbac,
-      auth: input.auth,
-      selectedId: input.selectedId,
-      tenantId: input.tenantId
-    });
-    return { scope, acl };
-  }
-  resolveForRequest(input) {
-    return resolveOrganizationScopeForRequest({
-      container: this.container,
-      auth: input.auth,
-      request: input.request,
-      selectedId: input.selectedId,
-      tenantId: input.tenantId
-    });
-  }
-}
-export {
-  DefaultOrganizationScopeService
-};
-//# sourceMappingURL=organizationScopeService.js.map

package/dist/modules/directory/services/organizationScopeService.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../../../src/modules/directory/services/organizationScopeService.ts"],
-  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport type { AwilixContainer } from 'awilix'\nimport type {\n  OrganizationScopeService,\n  OrganizationScopeRequest,\n} from '@open-mercato/shared/lib/auth/principal-service'\nimport type { AuthContext } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScope, resolveOrganizationScopeForRequest } from '../utils/organizationScope'\n\ntype OrganizationScopeRbac = {\n  invalidateUserCache(userId: string): Promise<void>\n  loadAcl(\n    userId: string,\n    scope: { tenantId: string | null; organizationId: string | null },\n  ): Promise<{ isSuperAdmin: boolean; features: string[]; organizations: string[] | null }>\n}\n\nexport class DefaultOrganizationScopeService implements OrganizationScopeService {\n  constructor(\n    private readonly em: EntityManager,\n    private readonly rbac: OrganizationScopeRbac,\n    private readonly container: AwilixContainer,\n  ) {}\n\n  resolve(input: {\n    auth: AuthContext | null | undefined\n    selectedId?: string | null\n    tenantId?: string | null\n    freshAcl?: boolean\n  }) {\n    const auth = input.auth\n    if (input.freshAcl && auth?.sub) {\n      return this.resolveFresh({\n        auth,\n        selectedId: input.selectedId,\n        tenantId: input.tenantId,\n      }).then((result) => result.scope)\n    }\n    return resolveOrganizationScope({\n      em: this.em,\n      rbac: this.rbac as Parameters<typeof resolveOrganizationScope>[0]['rbac'],\n      auth: input.auth,\n      selectedId: input.selectedId,\n      tenantId: input.tenantId,\n    })\n  }\n\n  async resolveFresh(input: {\n    auth: NonNullable<AuthContext>\n    selectedId?: string | null\n    tenantId?: string | null\n  }) {\n    await this.rbac.invalidateUserCache(input.auth.sub)\n    const acl = await this.rbac.loadAcl(input.auth.sub, {\n      tenantId: input.tenantId ?? input.auth.tenantId ?? null,\n      organizationId: input.selectedId ?? input.auth.orgId ?? null,\n    })\n    const freshRbac: Parameters<typeof resolveOrganizationScope>[0]['rbac'] = {\n      loadAcl: async () => acl,\n    }\n    const scope = await resolveOrganizationScope({\n      em: this.em,\n      rbac: freshRbac,\n      auth: input.auth,\n      selectedId: input.selectedId,\n      tenantId: input.tenantId,\n    })\n    return { scope, acl }\n  }\n\n  resolveForRequest(input: {\n    auth: AuthContext | null | undefined\n    request?: OrganizationScopeRequest\n    selectedId?: string | null\n    tenantId?: string | null\n  }) {\n    return resolveOrganizationScopeForRequest({\n      container: this.container,\n      auth: input.auth,\n      request: input.request,\n      selectedId: input.selectedId,\n      tenantId: input.tenantId,\n    })\n  }\n}\n"],
-  "mappings": "AAOA,SAAS,0BAA0B,0CAA0C;AAUtE,MAAM,gCAAoE;AAAA,EAC/E,YACmB,IACA,MACA,WACjB;AAHiB;AACA;AACA;AAAA,EAChB;AAAA,EAEH,QAAQ,OAKL;AACD,UAAM,OAAO,MAAM;AACnB,QAAI,MAAM,YAAY,MAAM,KAAK;AAC/B,aAAO,KAAK,aAAa;AAAA,QACvB;AAAA,QACA,YAAY,MAAM;AAAA,QAClB,UAAU,MAAM;AAAA,MAClB,CAAC,EAAE,KAAK,CAAC,WAAW,OAAO,KAAK;AAAA,IAClC;AACA,WAAO,yBAAyB;AAAA,MAC9B,IAAI,KAAK;AAAA,MACT,MAAM,KAAK;AAAA,MACX,MAAM,MAAM;AAAA,MACZ,YAAY,MAAM;AAAA,MAClB,UAAU,MAAM;AAAA,IAClB,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,aAAa,OAIhB;AACD,UAAM,KAAK,KAAK,oBAAoB,MAAM,KAAK,GAAG;AAClD,UAAM,MAAM,MAAM,KAAK,KAAK,QAAQ,MAAM,KAAK,KAAK;AAAA,MAClD,UAAU,MAAM,YAAY,MAAM,KAAK,YAAY;AAAA,MACnD,gBAAgB,MAAM,cAAc,MAAM,KAAK,SAAS;AAAA,IAC1D,CAAC;AACD,UAAM,YAAoE;AAAA,MACxE,SAAS,YAAY;AAAA,IACvB;AACA,UAAM,QAAQ,MAAM,yBAAyB;AAAA,MAC3C,IAAI,KAAK;AAAA,MACT,MAAM;AAAA,MACN,MAAM,MAAM;AAAA,MACZ,YAAY,MAAM;AAAA,MAClB,UAAU,MAAM;AAAA,IAClB,CAAC;AACD,WAAO,EAAE,OAAO,IAAI;AAAA,EACtB;AAAA,EAEA,kBAAkB,OAKf;AACD,WAAO,mCAAmC;AAAA,MACxC,WAAW,KAAK;AAAA,MAChB,MAAM,MAAM;AAAA,MACZ,SAAS,MAAM;AAAA,MACf,YAAY,MAAM;AAAA,MAClB,UAAU,MAAM;AAAA,IAClB,CAAC;AAAA,EACH;AACF;",
-  "names": []
-}