@open-mercato/core 0.6.8-develop.7100.1.fbf66fca35 → 0.7.0

package/dist/modules/customers/api/deals/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../src/modules/customers/api/deals/route.ts"],
-  "sourcesContent": ["import { z } from 'zod'\nimport { makeCrudRoute } from '@open-mercato/shared/lib/crud/factory'\nimport { CrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { CustomerDeal, CustomerDealPersonLink, CustomerDealCompanyLink } from '../../data/entities'\nimport { dealCreateSchema, dealUpdateSchema } from '../../data/validators'\nimport { E } from '#generated/entities.ids.generated'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { parseBooleanFromUnknown } from '@open-mercato/shared/lib/boolean'\nimport {\n  applyEntityIdRestriction,\n  findMatchingEntityIdsWithQueryEngine,\n  findMatchingEntityIdsBySearchTokensAcrossSources,\n  parseScopedCommandInput,\n} from '../utils'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport {\n  createCustomersCrudOpenApi,\n  createPagedListResponseSchema,\n  defaultOkResponseSchema,\n} from '../openapi'\nimport { findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { isTenantDataEncryptionEnabled } from '@open-mercato/shared/lib/encryption/toggles'\nimport { escapeLikePattern } from '@open-mercato/shared/lib/db/escapeLikePattern'\nimport { consumeAdvancedFilterState, mergeAdvancedFilterTree } from '@open-mercato/shared/lib/crud/advanced-filter-integration'\nimport type { FilterGroup, FilterRule } from '@open-mercato/shared/lib/query/advanced-filter-tree'\nimport { fetchStuckDealIds } from '../../lib/stuckDeals'\nimport { expandDealStatusAliases } from '../../lib/dealStatus'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('customers')\n\nconst rawBodySchema = z.object({}).passthrough()\n\nconst stringOrStringArray = z.union([z.string(), z.array(z.string())])\nconst OPEN_DEAL_STATUSES = ['open', 'in_progress'] as const\n// Tree operators whose `status` values are rewritten through the canonical vocabulary.\n// Text (`contains`/`starts_with`/\u2026) and range (`between`) operators are left untouched\n// so a URL-supplied rule keeps its scalar semantics.\nconst STATUS_TREE_OPERATORS = new Set([\n  'is',\n  'equals',\n  'is_not',\n  'not_equals',\n  'is_any_of',\n  'has_any_of',\n  'is_none_of',\n  'has_none_of',\n])\nconst booleanQueryParam = z.preprocess((value) => {\n  const parsed = parseBooleanFromUnknown(value)\n  return parsed === null ? value : parsed\n}, z.boolean()).optional()\n\nexport const dealListQuerySchema = z\n  .object({\n    page: z.coerce.number().min(1).default(1),\n    pageSize: z.coerce.number().min(1).max(100).default(50),\n    id: z.string().uuid().optional(),\n    search: z.string().optional(),\n    status: stringOrStringArray.optional(),\n    pipelineStage: z.string().optional(),\n    pipelineId: stringOrStringArray.optional(),\n    pipelineStageId: z.union([z.string().uuid(), z.literal('__unassigned')]).optional(),\n    ownerUserId: stringOrStringArray.optional(),\n    expectedCloseAtFrom: z.string().optional(),\n    expectedCloseAtTo: z.string().optional(),\n    isStuck: booleanQueryParam,\n    isOverdue: booleanQueryParam,\n    needsAttention: booleanQueryParam,\n    valueCurrency: stringOrStringArray.optional(),\n    sortField: z.string().optional(),\n    sortDir: z.enum(['asc', 'desc']).optional(),\n    /**\n     * @deprecated Use `personId` instead. The `personEntityId` alias is kept for backward\n     * compatibility with older clients and will be removed in a future minor release.\n     */\n    personEntityId: z.string().uuid().optional().describe('Deprecated; use personId'),\n    /**\n     * @deprecated Use `companyId` instead. The `companyEntityId` alias is kept for backward\n     * compatibility with older clients and will be removed in a future minor release.\n     */\n    companyEntityId: z.string().uuid().optional().describe('Deprecated; use companyId'),\n    personId: stringOrStringArray.optional(),\n    companyId: stringOrStringArray.optional(),\n  })\n  .passthrough()\n\nconst routeMetadata = {\n  GET: { requireAuth: true, requireFeatures: ['customers.deals.view'] },\n  POST: { requireAuth: true, requireFeatures: ['customers.deals.manage'] },\n  PUT: { requireAuth: true, requireFeatures: ['customers.deals.manage'] },\n  DELETE: { requireAuth: true, requireFeatures: ['customers.deals.manage'] },\n}\n\nexport const metadata = routeMetadata\n\nexport type DealListQuery = z.infer<typeof dealListQuerySchema>\n\nfunction parseUuid(value: unknown): string | null {\n  if (typeof value !== 'string') return null\n  const trimmed = value.trim()\n  if (!trimmed.length) return null\n  const result = z.string().uuid().safeParse(trimmed)\n  return result.success ? trimmed : null\n}\n\nfunction normalizeStringList(value: unknown): string[] {\n  const set = new Set<string>()\n  const visit = (entry: unknown) => {\n    if (entry == null) return\n    if (Array.isArray(entry)) {\n      entry.forEach(visit)\n      return\n    }\n    if (typeof entry !== 'string') return\n    entry\n      .split(',')\n      .map((token) => token.trim())\n      .filter((token) => token.length > 0)\n      .forEach((token) => set.add(token))\n  }\n  visit(value)\n  return Array.from(set)\n}\n\nfunction parseDateInput(value: unknown): Date | null {\n  if (!(typeof value === 'string') || value.trim().length === 0) return null\n  const date = new Date(value)\n  return Number.isNaN(date.getTime()) ? null : date\n}\n\n/**\n * Pre-pagination ID narrowing for person/company filters.\n *\n * Mirrors the SQL the aggregate route uses (`EXISTS ... IN (...)`) so the list endpoint\n * and the lane-header aggregate return a consistent set of deals for the same filters.\n * Semantics: OR within a category (any selected person/company matches), AND across\n * categories (deal must match at least one person AND at least one company when both\n * filter lists are provided).\n *\n * Returns the matched deal IDs (UUIDs). An empty array means \"no deals match\" \u2014 callers\n * must intersect with `restrictedIds` (which will collapse the list to zero).\n */\nasync function fetchDealIdsMatchingAssociations(\n  em: EntityManager,\n  organizationId: string,\n  tenantId: string,\n  personIds: string[],\n  companyIds: string[],\n): Promise<string[]> {\n  if (!personIds.length && !companyIds.length) return []\n  const where: string[] = [\n    'organization_id = ?',\n    'tenant_id = ?',\n    'deleted_at IS NULL',\n  ]\n  const values: Array<string | number> = [organizationId, tenantId]\n  if (personIds.length) {\n    const placeholders = personIds.map(() => '?').join(',')\n    where.push(\n      `EXISTS (SELECT 1 FROM customer_deal_people dp WHERE dp.deal_id = customer_deals.id AND dp.person_entity_id IN (${placeholders}))`,\n    )\n    values.push(...personIds)\n  }\n  if (companyIds.length) {\n    const placeholders = companyIds.map(() => '?').join(',')\n    where.push(\n      `EXISTS (SELECT 1 FROM customer_deal_companies dc WHERE dc.deal_id = customer_deals.id AND dc.company_entity_id IN (${placeholders}))`,\n    )\n    values.push(...companyIds)\n  }\n  const rows = await em.getConnection().execute<Array<{ id: string }>>(\n    `SELECT id FROM customer_deals WHERE ${where.join(' AND ')}`,\n    values,\n  )\n  return rows.map((row) => row.id)\n}\n\nasync function fetchNeedAttentionDealIds(\n  em: EntityManager,\n  organizationId: string,\n  tenantId: string,\n): Promise<string[]> {\n  const connection = em.getConnection()\n  const overdueRows = await connection.execute<Array<{ id: string }>>(\n    `SELECT id FROM customer_deals\n      WHERE organization_id = ?\n        AND tenant_id = ?\n        AND deleted_at IS NULL\n        AND status = 'open'\n        AND expected_close_at IS NOT NULL\n        AND expected_close_at < CURRENT_DATE`,\n    [organizationId, tenantId],\n  )\n\n  const attentionIds = new Set(overdueRows.map((row) => row.id))\n  const stuckIds = await fetchStuckDealIds(em, organizationId, tenantId)\n  if (stuckIds.length > 0) {\n    const idPlaceholders = stuckIds.map(() => '?').join(',')\n    const statusPlaceholders = OPEN_DEAL_STATUSES.map(() => '?').join(',')\n    const openStuckRows = await connection.execute<Array<{ id: string }>>(\n      `SELECT id FROM customer_deals\n        WHERE organization_id = ?\n          AND tenant_id = ?\n          AND deleted_at IS NULL\n          AND status IN (${statusPlaceholders})\n          AND id IN (${idPlaceholders})`,\n      [organizationId, tenantId, ...OPEN_DEAL_STATUSES, ...stuckIds],\n    )\n    for (const row of openStuckRows) attentionIds.add(row.id)\n  }\n\n  return Array.from(attentionIds)\n}\n\nfunction normalizeCurrencyList(value: unknown): string[] {\n  const set = new Set<string>()\n  const visit = (entry: unknown) => {\n    if (entry == null) return\n    if (Array.isArray(entry)) {\n      entry.forEach(visit)\n      return\n    }\n    if (typeof entry !== 'string') return\n    entry\n      .split(',')\n      .map((token) => token.trim().toUpperCase())\n      .filter((token) => /^[A-Z]{3}$/.test(token))\n      .forEach((token) => set.add(token))\n  }\n  visit(value)\n  return Array.from(set)\n}\n\nfunction normalizeUuidList(values: Array<unknown>): string[] {\n  const set = new Set<string>()\n  values.forEach((candidate) => {\n    if (Array.isArray(candidate)) {\n      candidate.forEach((entry) => {\n        const parsed = parseUuid(entry)\n        if (parsed) set.add(parsed)\n      })\n      return\n    }\n    if (typeof candidate === 'string' && candidate.includes(',')) {\n      candidate\n        .split(',')\n        .map((entry) => entry.trim())\n        .forEach((entry) => {\n          const parsed = parseUuid(entry)\n          if (parsed) set.add(parsed)\n        })\n      return\n    }\n    const parsed = parseUuid(candidate)\n    if (parsed) set.add(parsed)\n  })\n  return Array.from(set)\n}\n\nexport async function buildDealListFilters(query: DealListQuery, ctx?: import('@open-mercato/shared/lib/crud/factory').CrudCtx) {\n  const advancedFilterTree = consumeAdvancedFilterState(query)\n  if (advancedFilterTree) {\n    // Expand status aliases in the advanced-filter tree so List (tree path) and\n    // Kanban (plain ?status=) share the same canonical vocabulary (#5107). Only\n    // set-membership operators are rewritten \u2014 text/range operators on `status`\n    // keep their pre-existing scalar semantics instead of being corrupted.\n    const walk = (node: FilterGroup | FilterRule): void => {\n      if (node.type === 'rule' && node.field === 'status' && STATUS_TREE_OPERATORS.has(node.operator)) {\n        const listOperators = new Set(['is_any_of', 'has_any_of', 'is_none_of', 'has_none_of'])\n        const rawValues: string[] = Array.isArray(node.value)\n          ? (node.value as unknown[]).filter((v): v is string => typeof v === 'string')\n          : typeof node.value === 'string'\n            ? [node.value]\n            : []\n        if (rawValues.length === 0) return\n        const expanded = expandDealStatusAliases(rawValues)\n        if (listOperators.has(node.operator)) {\n          node.value = expanded\n        } else if (expanded.length === 1) {\n          node.value = expanded[0]\n        } else {\n          node.value = expanded\n          if (node.operator === 'is' || node.operator === 'equals') {\n            node.operator = 'is_any_of'\n          } else if (node.operator === 'is_not' || node.operator === 'not_equals') {\n            node.operator = 'is_none_of'\n          }\n        }\n      } else if (node.type === 'group') {\n        for (const child of node.children) walk(child)\n      }\n    }\n    walk(advancedFilterTree.root)\n  }\n  const filters: Record<string, unknown> = {}\n  let restrictedIds: string[] | null = null\n\n  const intersectIds = (ids: string[]) => {\n    if (restrictedIds === null) {\n      restrictedIds = ids\n      return\n    }\n    const lookup = new Set(ids)\n    restrictedIds = restrictedIds.filter((id) => lookup.has(id))\n  }\n\n  if (query.id) filters.id = { $eq: query.id }\n\n  if (query.search) {\n    const matchingIds = ctx\n      ? await findMatchingEntityIdsBySearchTokensAcrossSources({\n          ctx,\n          query: query.search,\n          sources: [\n            {\n              entityType: E.customers.customer_deal,\n              fields: [\n                'title',\n                'description',\n                'status',\n                'pipeline_stage',\n                'source',\n                'value_amount',\n                'value_currency',\n                'cf:competitive_risk',\n                'cf:implementation_complexity',\n              ],\n            },\n          ],\n        })\n      : null\n    if (matchingIds !== null && matchingIds.length > 0) {\n      intersectIds(matchingIds)\n    } else if (isTenantDataEncryptionEnabled()) {\n      // `customers:customer_deal.title` and `.description` are encrypted at rest\n      // (see `encryption.ts`). The `$ilike` fallback below would silently match\n      // nothing on the ciphertext and produce empty pages without disclosing why \u2014\n      // collapse the result to \"no matches\" instead so the kanban + list views\n      // agree, and lane aggregates stay consistent with the list endpoint.\n      intersectIds([])\n    } else {\n      const searchPattern = `%${escapeLikePattern(query.search)}%`\n      filters.$or = [\n        { title: { $ilike: searchPattern } },\n        { description: { $ilike: searchPattern } },\n      ]\n    }\n  }\n\n  const rawStatusList = query.status ? normalizeStringList(query.status) : []\n  const statusList = expandDealStatusAliases(rawStatusList)\n  if (statusList.length > 0) {\n    filters.status = statusList.length === 1 ? { $eq: statusList[0] } : { $in: statusList }\n  }\n\n  if (query.pipelineStage) {\n    filters.pipeline_stage = { $eq: query.pipelineStage }\n  }\n\n  const pipelineIds = query.pipelineId ? normalizeUuidList([query.pipelineId]) : []\n  if (pipelineIds.length > 0) {\n    filters.pipeline_id = pipelineIds.length === 1 ? { $eq: pipelineIds[0] } : { $in: pipelineIds }\n  }\n\n  if (query.pipelineStageId === '__unassigned') {\n    filters.pipeline_stage_id = { $eq: null }\n  } else if (query.pipelineStageId) {\n    filters.pipeline_stage_id = { $eq: query.pipelineStageId }\n  }\n\n  const ownerUserIds = query.ownerUserId ? normalizeUuidList([query.ownerUserId]) : []\n  if (ownerUserIds.length > 0) {\n    filters.owner_user_id =\n      ownerUserIds.length === 1 ? { $eq: ownerUserIds[0] } : { $in: ownerUserIds }\n  }\n\n  // Currency filter (additive; sourced by the kanban Currency popover). Codes are\n  // normalised to upper-case so `usd` / `USD` / mixed-case query params all hit the same\n  // stored value (the deals API persists `value_currency` upper-case already).\n  const currencyCodes = query.valueCurrency ? normalizeCurrencyList(query.valueCurrency) : []\n  if (currencyCodes.length > 0) {\n    filters.value_currency =\n      currencyCodes.length === 1 ? { $eq: currencyCodes[0] } : { $in: currencyCodes }\n  }\n\n  const expectedCloseFrom = parseDateInput(query.expectedCloseAtFrom)\n  const expectedCloseTo = parseDateInput(query.expectedCloseAtTo)\n  if (expectedCloseFrom || expectedCloseTo) {\n    const range: Record<string, Date> = {}\n    if (expectedCloseFrom) range.$gte = expectedCloseFrom\n    if (expectedCloseTo) range.$lte = expectedCloseTo\n    filters.expected_close_at = range\n  }\n\n  if (query.isOverdue && !query.needsAttention) {\n    const today = new Date()\n    today.setHours(0, 0, 0, 0)\n    if (statusList.length === 0) {\n      filters.status = { $eq: 'open' }\n    }\n    const existingRange =\n      filters.expected_close_at && typeof filters.expected_close_at === 'object'\n        ? (filters.expected_close_at as Record<string, Date>)\n        : {}\n    existingRange.$lt = today\n    filters.expected_close_at = existingRange\n  }\n\n  if (query.isStuck && !query.needsAttention && ctx) {\n    const tenantId = ctx.auth?.tenantId\n    // CrudCtx.auth carries `orgId` (not `organizationId`). The previous code referenced\n    // `organizationId` which is always `undefined`, so the typeof check below silently\n    // skipped the entire isStuck branch \u2014 `?isStuck=true` was a no-op on this endpoint.\n    const organizationId = ctx.auth?.orgId\n    if (typeof tenantId === 'string' && typeof organizationId === 'string') {\n      const em = ctx.container.resolve<EntityManager>('em')\n      const stuckIds = await fetchStuckDealIds(em, organizationId, tenantId)\n      intersectIds(stuckIds)\n    }\n  }\n\n  if (query.needsAttention && ctx) {\n    const tenantId = ctx.auth?.tenantId\n    const organizationId = ctx.auth?.orgId\n    if (typeof tenantId === 'string' && typeof organizationId === 'string') {\n      const em = ctx.container.resolve<EntityManager>('em')\n      const attentionIds = await fetchNeedAttentionDealIds(em, organizationId, tenantId)\n      intersectIds(attentionIds)\n    }\n  }\n\n  // Pre-pagination association filter. Must run on the FULL dataset (before pagination),\n  // otherwise matching deals on later pages disappear and `total` would be wrong. Read the\n  // raw URL too so legacy `?personEntityId=` / `?companyEntityId=` keep working alongside the\n  // canonical `?personId=` / `?companyId=`.\n  const url = ctx?.request ? new URL(ctx.request.url) : null\n  const personCandidates: unknown[] = [query.personId, query.personEntityId]\n  const companyCandidates: unknown[] = [query.companyId, query.companyEntityId]\n  if (url) {\n    personCandidates.push(url.searchParams.getAll('personId'))\n    personCandidates.push(url.searchParams.getAll('personEntityId'))\n    companyCandidates.push(url.searchParams.getAll('companyId'))\n    companyCandidates.push(url.searchParams.getAll('companyEntityId'))\n  }\n  const selectedPersonIds = normalizeUuidList(personCandidates)\n  const selectedCompanyIds = normalizeUuidList(companyCandidates)\n  if ((selectedPersonIds.length > 0 || selectedCompanyIds.length > 0) && ctx) {\n    const tenantId = ctx.auth?.tenantId\n    // `ctx.auth` exposes `orgId` (see AuthContext in @open-mercato/shared/lib/auth/server).\n    // Read it under the correct key \u2014 the previous code's `organizationId` would always be\n    // `undefined`, silently disabling association filtering on the deals list endpoint.\n    const organizationId = ctx.auth?.orgId\n    if (typeof tenantId === 'string' && typeof organizationId === 'string') {\n      const em = ctx.container.resolve<EntityManager>('em')\n      const matchedIds = await fetchDealIdsMatchingAssociations(\n        em,\n        organizationId,\n        tenantId,\n        selectedPersonIds,\n        selectedCompanyIds,\n      )\n      // intersectIds with empty array \u2192 no rows; collapses the page to zero, total stays correct.\n      intersectIds(matchedIds)\n    }\n  }\n\n  if (ctx && advancedFilterTree) {\n    const advancedFilters = mergeAdvancedFilterTree({ ...filters }, advancedFilterTree)\n    const matchedIds = await findMatchingEntityIdsWithQueryEngine({\n      ctx,\n      entityId: E.customers.customer_deal,\n      filters: advancedFilters,\n    })\n    if (matchedIds !== null) {\n      intersectIds(matchedIds)\n    }\n  }\n\n  if (restrictedIds !== null) {\n    applyEntityIdRestriction(filters, restrictedIds)\n  }\n\n  return filters\n}\n\nconst crud = makeCrudRoute<unknown, unknown, DealListQuery>({\n  metadata: routeMetadata,\n  orm: {\n    entity: CustomerDeal,\n    idField: 'id',\n    orgField: 'organizationId',\n    tenantField: 'tenantId',\n    softDeleteField: 'deletedAt',\n  },\n  indexer: {\n    entityType: E.customers.customer_deal,\n  },\n  enrichers: { entityId: 'customers.deal' },\n  list: {\n    schema: dealListQuerySchema,\n    entityId: E.customers.customer_deal,\n    fields: [\n      'id',\n      'title',\n      'description',\n      'status',\n      'pipeline_stage',\n      'pipeline_id',\n      'pipeline_stage_id',\n      'value_amount',\n      'value_currency',\n      'probability',\n      'expected_close_at',\n      'owner_user_id',\n      'source',\n      'closure_outcome',\n      'loss_reason_id',\n      'loss_notes',\n      'organization_id',\n      'tenant_id',\n      'created_at',\n      'updated_at',\n    ],\n    decorateCustomFields: {\n      entityIds: E.customers.customer_deal,\n    },\n    sortFieldMap: {\n      createdAt: 'created_at',\n      updatedAt: 'updated_at',\n      title: 'title',\n      value: 'value_amount',\n      probability: 'probability',\n      expectedCloseAt: 'expected_close_at',\n    },\n    buildFilters: buildDealListFilters,\n  },\n  actions: {\n    create: {\n      commandId: 'customers.deals.create',\n      schema: rawBodySchema,\n      mapInput: async ({ raw, ctx }) => {\n        const { translate } = await resolveTranslations()\n        return parseScopedCommandInput(dealCreateSchema, raw ?? {}, ctx, translate)\n      },\n      response: ({ result }) => ({ id: result?.dealId ?? result?.id ?? null }),\n      status: 201,\n    },\n    update: {\n      commandId: 'customers.deals.update',\n      schema: rawBodySchema,\n      mapInput: async ({ raw, ctx }) => {\n        const { translate } = await resolveTranslations()\n        return parseScopedCommandInput(dealUpdateSchema, raw ?? {}, ctx, translate)\n      },\n      response: () => ({ ok: true }),\n    },\n    delete: {\n      commandId: 'customers.deals.delete',\n      schema: rawBodySchema,\n      mapInput: async ({ parsed, ctx }) => {\n        const { translate } = await resolveTranslations()\n        const id =\n          parsed?.body?.id ??\n          parsed?.id ??\n          parsed?.query?.id ??\n          (ctx.request ? new URL(ctx.request.url).searchParams.get('id') : null)\n        if (!id) throw new CrudHttpError(400, { error: translate('customers.errors.deal_required', 'Deal id is required') })\n        return { id }\n      },\n      response: () => ({ ok: true }),\n    },\n  },\n  hooks: {\n    // afterList only DECORATES results with `people`/`companies` arrays \u2014 it must not filter,\n    // because filtering after pagination would drop deals on later pages and rewrite `total`\n    // to a misleading value. Association filtering happens pre-pagination in `buildFilters`\n    // via `fetchDealIdsMatchingAssociations`.\n    afterList: async (payload, ctx) => {\n      const items = Array.isArray(payload.items) ? payload.items : []\n      if (!items.length) return\n      const scopeSource = (items[0] ?? {}) as Record<string, unknown>\n      const tenantIdRaw = scopeSource.tenantId ?? scopeSource.tenant_id\n      const fallbackTenantId = (typeof tenantIdRaw === 'string' && tenantIdRaw.trim().length ? tenantIdRaw : null) ?? ctx.auth?.tenantId ?? null\n      const orgIdRaw = scopeSource.organizationId ?? scopeSource.organization_id\n      const fallbackOrganizationId = (typeof orgIdRaw === 'string' && orgIdRaw.trim().length ? orgIdRaw : null) ?? ctx.auth?.orgId ?? null\n      const ids = items\n        .map((item: unknown) => {\n          if (!item || typeof item !== 'object') return null\n          const candidate = (item as Record<string, unknown>).id\n          return typeof candidate === 'string' && candidate.trim().length ? candidate : null\n        })\n        .filter((value: string | null): value is string => typeof value === 'string' && value.length > 0)\n      if (!ids.length) {\n        payload.items = []\n        payload.total = 0\n        return\n      }\n      try {\n        const em = (ctx.container.resolve('em') as EntityManager)\n        const [allPersonLinks, allCompanyLinks] = await Promise.all([\n          findWithDecryption(\n            em,\n            CustomerDealPersonLink,\n            { deal: { $in: ids } },\n            { populate: ['person'] },\n            { tenantId: fallbackTenantId, organizationId: fallbackOrganizationId },\n          ),\n          findWithDecryption(\n            em,\n            CustomerDealCompanyLink,\n            { deal: { $in: ids } },\n            { populate: ['company'] },\n            { tenantId: fallbackTenantId, organizationId: fallbackOrganizationId },\n          ),\n        ])\n\n        const personAssignments = new Map<string, { id: string; label: string }[]>()\n        allPersonLinks.forEach((link) => {\n          const deal = link.deal\n          const dealRecord = deal && typeof deal === 'object' ? deal as unknown as Record<string, unknown> : null\n          const dealId = typeof deal === 'string' ? deal\n            : dealRecord && typeof dealRecord.id === 'string' ? dealRecord.id\n            : null\n          if (!dealId) return\n          const personRef = link.person\n          const personRecord = personRef && typeof personRef === 'object' ? personRef as unknown as Record<string, unknown> : null\n          const personId = typeof personRef === 'string' ? personRef\n            : personRecord && typeof personRecord.id === 'string' ? personRecord.id\n            : null\n          if (!personId) return\n          const label = personRecord && typeof personRecord.displayName === 'string'\n            ? personRecord.displayName\n            : ''\n          const bucket = personAssignments.get(dealId) ?? []\n          if (!bucket.some((entry) => entry.id === personId)) {\n            bucket.push({ id: personId, label })\n            personAssignments.set(dealId, bucket)\n          }\n        })\n\n        const companyAssignments = new Map<string, { id: string; label: string }[]>()\n        allCompanyLinks.forEach((link) => {\n          const deal = link.deal\n          const dealRecord = deal && typeof deal === 'object' ? deal as unknown as Record<string, unknown> : null\n          const dealId = typeof deal === 'string' ? deal\n            : dealRecord && typeof dealRecord.id === 'string' ? dealRecord.id\n            : null\n          if (!dealId) return\n          const companyRef = link.company\n          const companyRecord = companyRef && typeof companyRef === 'object' ? companyRef as unknown as Record<string, unknown> : null\n          const companyId = typeof companyRef === 'string' ? companyRef\n            : companyRecord && typeof companyRecord.id === 'string' ? companyRecord.id\n            : null\n          if (!companyId) return\n          const label = companyRecord && typeof companyRecord.displayName === 'string'\n            ? companyRecord.displayName\n            : ''\n          const bucket = companyAssignments.get(dealId) ?? []\n          if (!bucket.some((entry) => entry.id === companyId)) {\n            bucket.push({ id: companyId, label })\n            companyAssignments.set(dealId, bucket)\n          }\n        })\n\n        const enhancedItems = items\n          .map((item: unknown) => {\n            if (!item || typeof item !== 'object') return null\n            const data = item as Record<string, unknown>\n            const candidate = typeof data.id === 'string' ? data.id : null\n            if (!candidate || !candidate.trim().length) return null\n            const people = personAssignments.get(candidate) ?? []\n            const companies = companyAssignments.get(candidate) ?? []\n            const tenantIdRaw =\n              typeof data.tenantId === 'string'\n                ? data.tenantId\n                : typeof data.tenant_id === 'string'\n                  ? data.tenant_id\n                  : null\n            const organizationIdRaw =\n              typeof data.organizationId === 'string'\n                ? data.organizationId\n                : typeof data.organization_id === 'string'\n                  ? data.organization_id\n                  : null\n            const tenantId = tenantIdRaw && tenantIdRaw.trim().length ? tenantIdRaw.trim() : null\n            const organizationId = organizationIdRaw && organizationIdRaw.trim().length ? organizationIdRaw.trim() : null\n            return {\n              ...data,\n              personIds: people.map((entry) => entry.id),\n              people,\n              companyIds: companies.map((entry) => entry.id),\n              companies,\n              tenantId,\n              organizationId,\n            }\n          })\n          .filter(\n            (item: Record<string, unknown> | null): item is Record<string, unknown> => item !== null,\n          )\n\n        payload.items = enhancedItems\n      } catch (err) {\n        // We swallow rather than fail the request because the kanban is still useful without\n        // people/companies labels (cards just lose their company pill). Tag every item with\n        // `_associations: { ok: false }` so a future surface can render a degraded-state hint\n        // instead of silently showing cards without company badges.\n        logger.warn('failed to decorate items with person/company links', { component: 'deals', err })\n        payload.items = items.map((item: unknown) => {\n          if (!item || typeof item !== 'object') return item\n          return {\n            ...(item as Record<string, unknown>),\n            _associations: {\n              ok: false,\n              reason: err instanceof Error ? err.message : 'unknown',\n            },\n          }\n        })\n      }\n    },\n  },\n})\n\nconst { POST, PUT, DELETE } = crud\n\nexport { POST, PUT, DELETE }\nexport const GET = crud.GET\n\nconst dealAssociationSchema = z.object({\n  id: z.string().uuid(),\n  label: z.string().nullable(),\n})\n\nconst dealListItemSchema = z\n  .object({\n    id: z.string().uuid(),\n    title: z.string().nullable(),\n    description: z.string().nullable().optional(),\n    status: z.string().nullable().optional(),\n    pipeline_stage: z.string().nullable().optional(),\n    pipeline_id: z.string().uuid().nullable().optional(),\n    pipeline_stage_id: z.string().uuid().nullable().optional(),\n    value_amount: z.number().nullable().optional(),\n    value_currency: z.string().nullable().optional(),\n    probability: z.number().nullable().optional(),\n    expected_close_at: z.string().nullable().optional(),\n    owner_user_id: z.string().uuid().nullable().optional(),\n    source: z.string().nullable().optional(),\n    organization_id: z.string().uuid().nullable().optional(),\n    tenant_id: z.string().uuid().nullable().optional(),\n    created_at: z.string().nullable().optional(),\n    updated_at: z.string().nullable().optional(),\n    personIds: z.array(z.string().uuid()).optional(),\n    people: z.array(dealAssociationSchema).optional(),\n    companyIds: z.array(z.string().uuid()).optional(),\n    companies: z.array(dealAssociationSchema).optional(),\n    organizationId: z.string().uuid().nullable().optional(),\n    tenantId: z.string().uuid().nullable().optional(),\n  })\n  .passthrough()\n\nconst dealCreateResponseSchema = z.object({\n  id: z.string().uuid().nullable(),\n})\n\nexport const openApi = createCustomersCrudOpenApi({\n  resourceName: 'Deal',\n  querySchema: dealListQuerySchema,\n  listResponseSchema: createPagedListResponseSchema(dealListItemSchema),\n  create: {\n    schema: dealCreateSchema,\n    responseSchema: dealCreateResponseSchema,\n    description: 'Creates a sales deal, optionally associating people and companies.',\n  },\n  update: {\n    schema: dealUpdateSchema,\n    responseSchema: defaultOkResponseSchema,\n    description: 'Updates pipeline position, metadata, or associations for an existing deal.',\n  },\n  del: {\n    schema: z.object({ id: z.string().uuid() }),\n    responseSchema: defaultOkResponseSchema,\n    description: 'Deletes a deal by `id`. The identifier may be provided in the body or query parameters.',\n  },\n})\n"],
-  "mappings": "AAAA,SAAS,SAAS;AAClB,SAAS,qBAAqB;AAC9B,SAAS,qBAAqB;AAC9B,SAAS,cAAc,wBAAwB,+BAA+B;AAC9E,SAAS,kBAAkB,wBAAwB;AACnD,SAAS,SAAS;AAClB,SAAS,2BAA2B;AACpC,SAAS,+BAA+B;AACxC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,0BAA0B;AACnC,SAAS,qCAAqC;AAC9C,SAAS,yBAAyB;AAClC,SAAS,4BAA4B,+BAA+B;AAEpE,SAAS,yBAAyB;AAClC,SAAS,+BAA+B;AACxC,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,WAAW;AAEvC,MAAM,gBAAgB,EAAE,OAAO,CAAC,CAAC,EAAE,YAAY;AAE/C,MAAM,sBAAsB,EAAE,MAAM,CAAC,EAAE,OAAO,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;AACrE,MAAM,qBAAqB,CAAC,QAAQ,aAAa;AAIjD,MAAM,wBAAwB,oBAAI,IAAI;AAAA,EACpC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AACD,MAAM,oBAAoB,EAAE,WAAW,CAAC,UAAU;AAChD,QAAM,SAAS,wBAAwB,KAAK;AAC5C,SAAO,WAAW,OAAO,QAAQ;AACnC,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS;AAElB,MAAM,sBAAsB,EAChC,OAAO;AAAA,EACN,MAAM,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,QAAQ,CAAC;AAAA,EACxC,UAAU,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,QAAQ,EAAE;AAAA,EACtD,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC/B,QAAQ,EAAE,OAAO,EAAE,SAAS;AAAA,EAC5B,QAAQ,oBAAoB,SAAS;AAAA,EACrC,eAAe,EAAE,OAAO,EAAE,SAAS;AAAA,EACnC,YAAY,oBAAoB,SAAS;AAAA,EACzC,iBAAiB,EAAE,MAAM,CAAC,EAAE,OAAO,EAAE,KAAK,GAAG,EAAE,QAAQ,cAAc,CAAC,CAAC,EAAE,SAAS;AAAA,EAClF,aAAa,oBAAoB,SAAS;AAAA,EAC1C,qBAAqB,EAAE,OAAO,EAAE,SAAS;AAAA,EACzC,mBAAmB,EAAE,OAAO,EAAE,SAAS;AAAA,EACvC,SAAS;AAAA,EACT,WAAW;AAAA,EACX,gBAAgB;AAAA,EAChB,eAAe,oBAAoB,SAAS;AAAA,EAC5C,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,SAAS,EAAE,KAAK,CAAC,OAAO,MAAM,CAAC,EAAE,SAAS;AAAA;AAAA;AAAA;AAAA;AAAA,EAK1C,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,0BAA0B;AAAA;AAAA;AAAA;AAAA;AAAA,EAKhF,iBAAiB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,2BAA2B;AAAA,EAClF,UAAU,oBAAoB,SAAS;AAAA,EACvC,WAAW,oBAAoB,SAAS;AAC1C,CAAC,EACA,YAAY;AAEf,MAAM,gBAAgB;AAAA,EACpB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,sBAAsB,EAAE;AAAA,EACpE,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,wBAAwB,EAAE;AAAA,EACvE,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,wBAAwB,EAAE;AAAA,EACtE,QAAQ,EAAE,aAAa,MAAM,iBAAiB,CAAC,wBAAwB,EAAE;AAC3E;AAEO,MAAM,WAAW;AAIxB,SAAS,UAAU,OAA+B;AAChD,MAAI,OAAO,UAAU,SAAU,QAAO;AACtC,QAAM,UAAU,MAAM,KAAK;AAC3B,MAAI,CAAC,QAAQ,OAAQ,QAAO;AAC5B,QAAM,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,OAAO;AAClD,SAAO,OAAO,UAAU,UAAU;AACpC;AAEA,SAAS,oBAAoB,OAA0B;AACrD,QAAM,MAAM,oBAAI,IAAY;AAC5B,QAAM,QAAQ,CAAC,UAAmB;AAChC,QAAI,SAAS,KAAM;AACnB,QAAI,MAAM,QAAQ,KAAK,GAAG;AACxB,YAAM,QAAQ,KAAK;AACnB;AAAA,IACF;AACA,QAAI,OAAO,UAAU,SAAU;AAC/B,UACG,MAAM,GAAG,EACT,IAAI,CAAC,UAAU,MAAM,KAAK,CAAC,EAC3B,OAAO,CAAC,UAAU,MAAM,SAAS,CAAC,EAClC,QAAQ,CAAC,UAAU,IAAI,IAAI,KAAK,CAAC;AAAA,EACtC;AACA,QAAM,KAAK;AACX,SAAO,MAAM,KAAK,GAAG;AACvB;AAEA,SAAS,eAAe,OAA6B;AACnD,MAAI,EAAE,OAAO,UAAU,aAAa,MAAM,KAAK,EAAE,WAAW,EAAG,QAAO;AACtE,QAAM,OAAO,IAAI,KAAK,KAAK;AAC3B,SAAO,OAAO,MAAM,KAAK,QAAQ,CAAC,IAAI,OAAO;AAC/C;AAcA,eAAe,iCACb,IACA,gBACA,UACA,WACA,YACmB;AACnB,MAAI,CAAC,UAAU,UAAU,CAAC,WAAW,OAAQ,QAAO,CAAC;AACrD,QAAM,QAAkB;AAAA,IACtB;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACA,QAAM,SAAiC,CAAC,gBAAgB,QAAQ;AAChE,MAAI,UAAU,QAAQ;AACpB,UAAM,eAAe,UAAU,IAAI,MAAM,GAAG,EAAE,KAAK,GAAG;AACtD,UAAM;AAAA,MACJ,kHAAkH,YAAY;AAAA,IAChI;AACA,WAAO,KAAK,GAAG,SAAS;AAAA,EAC1B;AACA,MAAI,WAAW,QAAQ;AACrB,UAAM,eAAe,WAAW,IAAI,MAAM,GAAG,EAAE,KAAK,GAAG;AACvD,UAAM;AAAA,MACJ,sHAAsH,YAAY;AAAA,IACpI;AACA,WAAO,KAAK,GAAG,UAAU;AAAA,EAC3B;AACA,QAAM,OAAO,MAAM,GAAG,cAAc,EAAE;AAAA,IACpC,uCAAuC,MAAM,KAAK,OAAO,CAAC;AAAA,IAC1D;AAAA,EACF;AACA,SAAO,KAAK,IAAI,CAAC,QAAQ,IAAI,EAAE;AACjC;AAEA,eAAe,0BACb,IACA,gBACA,UACmB;AACnB,QAAM,aAAa,GAAG,cAAc;AACpC,QAAM,cAAc,MAAM,WAAW;AAAA,IACnC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAOA,CAAC,gBAAgB,QAAQ;AAAA,EAC3B;AAEA,QAAM,eAAe,IAAI,IAAI,YAAY,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC;AAC7D,QAAM,WAAW,MAAM,kBAAkB,IAAI,gBAAgB,QAAQ;AACrE,MAAI,SAAS,SAAS,GAAG;AACvB,UAAM,iBAAiB,SAAS,IAAI,MAAM,GAAG,EAAE,KAAK,GAAG;AACvD,UAAM,qBAAqB,mBAAmB,IAAI,MAAM,GAAG,EAAE,KAAK,GAAG;AACrE,UAAM,gBAAgB,MAAM,WAAW;AAAA,MACrC;AAAA;AAAA;AAAA;AAAA,2BAIqB,kBAAkB;AAAA,uBACtB,cAAc;AAAA,MAC/B,CAAC,gBAAgB,UAAU,GAAG,oBAAoB,GAAG,QAAQ;AAAA,IAC/D;AACA,eAAW,OAAO,cAAe,cAAa,IAAI,IAAI,EAAE;AAAA,EAC1D;AAEA,SAAO,MAAM,KAAK,YAAY;AAChC;AAEA,SAAS,sBAAsB,OAA0B;AACvD,QAAM,MAAM,oBAAI,IAAY;AAC5B,QAAM,QAAQ,CAAC,UAAmB;AAChC,QAAI,SAAS,KAAM;AACnB,QAAI,MAAM,QAAQ,KAAK,GAAG;AACxB,YAAM,QAAQ,KAAK;AACnB;AAAA,IACF;AACA,QAAI,OAAO,UAAU,SAAU;AAC/B,UACG,MAAM,GAAG,EACT,IAAI,CAAC,UAAU,MAAM,KAAK,EAAE,YAAY,CAAC,EACzC,OAAO,CAAC,UAAU,aAAa,KAAK,KAAK,CAAC,EAC1C,QAAQ,CAAC,UAAU,IAAI,IAAI,KAAK,CAAC;AAAA,EACtC;AACA,QAAM,KAAK;AACX,SAAO,MAAM,KAAK,GAAG;AACvB;AAEA,SAAS,kBAAkB,QAAkC;AAC3D,QAAM,MAAM,oBAAI,IAAY;AAC5B,SAAO,QAAQ,CAAC,cAAc;AAC5B,QAAI,MAAM,QAAQ,SAAS,GAAG;AAC5B,gBAAU,QAAQ,CAAC,UAAU;AAC3B,cAAMA,UAAS,UAAU,KAAK;AAC9B,YAAIA,QAAQ,KAAI,IAAIA,OAAM;AAAA,MAC5B,CAAC;AACD;AAAA,IACF;AACA,QAAI,OAAO,cAAc,YAAY,UAAU,SAAS,GAAG,GAAG;AAC5D,gBACG,MAAM,GAAG,EACT,IAAI,CAAC,UAAU,MAAM,KAAK,CAAC,EAC3B,QAAQ,CAAC,UAAU;AAClB,cAAMA,UAAS,UAAU,KAAK;AAC9B,YAAIA,QAAQ,KAAI,IAAIA,OAAM;AAAA,MAC5B,CAAC;AACH;AAAA,IACF;AACA,UAAM,SAAS,UAAU,SAAS;AAClC,QAAI,OAAQ,KAAI,IAAI,MAAM;AAAA,EAC5B,CAAC;AACD,SAAO,MAAM,KAAK,GAAG;AACvB;AAEA,eAAsB,qBAAqB,OAAsB,KAA+D;AAC9H,QAAM,qBAAqB,2BAA2B,KAAK;AAC3D,MAAI,oBAAoB;AAKtB,UAAM,OAAO,CAAC,SAAyC;AACrD,UAAI,KAAK,SAAS,UAAU,KAAK,UAAU,YAAY,sBAAsB,IAAI,KAAK,QAAQ,GAAG;AAC/F,cAAM,gBAAgB,oBAAI,IAAI,CAAC,aAAa,cAAc,cAAc,aAAa,CAAC;AACtF,cAAM,YAAsB,MAAM,QAAQ,KAAK,KAAK,IAC/C,KAAK,MAAoB,OAAO,CAAC,MAAmB,OAAO,MAAM,QAAQ,IAC1E,OAAO,KAAK,UAAU,WACpB,CAAC,KAAK,KAAK,IACX,CAAC;AACP,YAAI,UAAU,WAAW,EAAG;AAC5B,cAAM,WAAW,wBAAwB,SAAS;AAClD,YAAI,cAAc,IAAI,KAAK,QAAQ,GAAG;AACpC,eAAK,QAAQ;AAAA,QACf,WAAW,SAAS,WAAW,GAAG;AAChC,eAAK,QAAQ,SAAS,CAAC;AAAA,QACzB,OAAO;AACL,eAAK,QAAQ;AACb,cAAI,KAAK,aAAa,QAAQ,KAAK,aAAa,UAAU;AACxD,iBAAK,WAAW;AAAA,UAClB,WAAW,KAAK,aAAa,YAAY,KAAK,aAAa,cAAc;AACvE,iBAAK,WAAW;AAAA,UAClB;AAAA,QACF;AAAA,MACF,WAAW,KAAK,SAAS,SAAS;AAChC,mBAAW,SAAS,KAAK,SAAU,MAAK,KAAK;AAAA,MAC/C;AAAA,IACF;AACA,SAAK,mBAAmB,IAAI;AAAA,EAC9B;AACA,QAAM,UAAmC,CAAC;AAC1C,MAAI,gBAAiC;AAErC,QAAM,eAAe,CAAC,QAAkB;AACtC,QAAI,kBAAkB,MAAM;AAC1B,sBAAgB;AAChB;AAAA,IACF;AACA,UAAM,SAAS,IAAI,IAAI,GAAG;AAC1B,oBAAgB,cAAc,OAAO,CAAC,OAAO,OAAO,IAAI,EAAE,CAAC;AAAA,EAC7D;AAEA,MAAI,MAAM,GAAI,SAAQ,KAAK,EAAE,KAAK,MAAM,GAAG;AAE3C,MAAI,MAAM,QAAQ;AAChB,UAAM,cAAc,MAChB,MAAM,iDAAiD;AAAA,MACrD;AAAA,MACA,OAAO,MAAM;AAAA,MACb,SAAS;AAAA,QACP;AAAA,UACE,YAAY,EAAE,UAAU;AAAA,UACxB,QAAQ;AAAA,YACN;AAAA,YACA;AAAA,YACA;AAAA,YACA;AAAA,YACA;AAAA,YACA;AAAA,YACA;AAAA,YACA;AAAA,YACA;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,IACF,CAAC,IACD;AACJ,QAAI,gBAAgB,QAAQ,YAAY,SAAS,GAAG;AAClD,mBAAa,WAAW;AAAA,IAC1B,WAAW,8BAA8B,GAAG;AAM1C,mBAAa,CAAC,CAAC;AAAA,IACjB,OAAO;AACL,YAAM,gBAAgB,IAAI,kBAAkB,MAAM,MAAM,CAAC;AACzD,cAAQ,MAAM;AAAA,QACZ,EAAE,OAAO,EAAE,QAAQ,cAAc,EAAE;AAAA,QACnC,EAAE,aAAa,EAAE,QAAQ,cAAc,EAAE;AAAA,MAC3C;AAAA,IACF;AAAA,EACF;AAEA,QAAM,gBAAgB,MAAM,SAAS,oBAAoB,MAAM,MAAM,IAAI,CAAC;AAC1E,QAAM,aAAa,wBAAwB,aAAa;AACxD,MAAI,WAAW,SAAS,GAAG;AACzB,YAAQ,SAAS,WAAW,WAAW,IAAI,EAAE,KAAK,WAAW,CAAC,EAAE,IAAI,EAAE,KAAK,WAAW;AAAA,EACxF;AAEA,MAAI,MAAM,eAAe;AACvB,YAAQ,iBAAiB,EAAE,KAAK,MAAM,cAAc;AAAA,EACtD;AAEA,QAAM,cAAc,MAAM,aAAa,kBAAkB,CAAC,MAAM,UAAU,CAAC,IAAI,CAAC;AAChF,MAAI,YAAY,SAAS,GAAG;AAC1B,YAAQ,cAAc,YAAY,WAAW,IAAI,EAAE,KAAK,YAAY,CAAC,EAAE,IAAI,EAAE,KAAK,YAAY;AAAA,EAChG;AAEA,MAAI,MAAM,oBAAoB,gBAAgB;AAC5C,YAAQ,oBAAoB,EAAE,KAAK,KAAK;AAAA,EAC1C,WAAW,MAAM,iBAAiB;AAChC,YAAQ,oBAAoB,EAAE,KAAK,MAAM,gBAAgB;AAAA,EAC3D;AAEA,QAAM,eAAe,MAAM,cAAc,kBAAkB,CAAC,MAAM,WAAW,CAAC,IAAI,CAAC;AACnF,MAAI,aAAa,SAAS,GAAG;AAC3B,YAAQ,gBACN,aAAa,WAAW,IAAI,EAAE,KAAK,aAAa,CAAC,EAAE,IAAI,EAAE,KAAK,aAAa;AAAA,EAC/E;AAKA,QAAM,gBAAgB,MAAM,gBAAgB,sBAAsB,MAAM,aAAa,IAAI,CAAC;AAC1F,MAAI,cAAc,SAAS,GAAG;AAC5B,YAAQ,iBACN,cAAc,WAAW,IAAI,EAAE,KAAK,cAAc,CAAC,EAAE,IAAI,EAAE,KAAK,cAAc;AAAA,EAClF;AAEA,QAAM,oBAAoB,eAAe,MAAM,mBAAmB;AAClE,QAAM,kBAAkB,eAAe,MAAM,iBAAiB;AAC9D,MAAI,qBAAqB,iBAAiB;AACxC,UAAM,QAA8B,CAAC;AACrC,QAAI,kBAAmB,OAAM,OAAO;AACpC,QAAI,gBAAiB,OAAM,OAAO;AAClC,YAAQ,oBAAoB;AAAA,EAC9B;AAEA,MAAI,MAAM,aAAa,CAAC,MAAM,gBAAgB;AAC5C,UAAM,QAAQ,oBAAI,KAAK;AACvB,UAAM,SAAS,GAAG,GAAG,GAAG,CAAC;AACzB,QAAI,WAAW,WAAW,GAAG;AAC3B,cAAQ,SAAS,EAAE,KAAK,OAAO;AAAA,IACjC;AACA,UAAM,gBACJ,QAAQ,qBAAqB,OAAO,QAAQ,sBAAsB,WAC7D,QAAQ,oBACT,CAAC;AACP,kBAAc,MAAM;AACpB,YAAQ,oBAAoB;AAAA,EAC9B;AAEA,MAAI,MAAM,WAAW,CAAC,MAAM,kBAAkB,KAAK;AACjD,UAAM,WAAW,IAAI,MAAM;AAI3B,UAAM,iBAAiB,IAAI,MAAM;AACjC,QAAI,OAAO,aAAa,YAAY,OAAO,mBAAmB,UAAU;AACtE,YAAM,KAAK,IAAI,UAAU,QAAuB,IAAI;AACpD,YAAM,WAAW,MAAM,kBAAkB,IAAI,gBAAgB,QAAQ;AACrE,mBAAa,QAAQ;AAAA,IACvB;AAAA,EACF;AAEA,MAAI,MAAM,kBAAkB,KAAK;AAC/B,UAAM,WAAW,IAAI,MAAM;AAC3B,UAAM,iBAAiB,IAAI,MAAM;AACjC,QAAI,OAAO,aAAa,YAAY,OAAO,mBAAmB,UAAU;AACtE,YAAM,KAAK,IAAI,UAAU,QAAuB,IAAI;AACpD,YAAM,eAAe,MAAM,0BAA0B,IAAI,gBAAgB,QAAQ;AACjF,mBAAa,YAAY;AAAA,IAC3B;AAAA,EACF;AAMA,QAAM,MAAM,KAAK,UAAU,IAAI,IAAI,IAAI,QAAQ,GAAG,IAAI;AACtD,QAAM,mBAA8B,CAAC,MAAM,UAAU,MAAM,cAAc;AACzE,QAAM,oBAA+B,CAAC,MAAM,WAAW,MAAM,eAAe;AAC5E,MAAI,KAAK;AACP,qBAAiB,KAAK,IAAI,aAAa,OAAO,UAAU,CAAC;AACzD,qBAAiB,KAAK,IAAI,aAAa,OAAO,gBAAgB,CAAC;AAC/D,sBAAkB,KAAK,IAAI,aAAa,OAAO,WAAW,CAAC;AAC3D,sBAAkB,KAAK,IAAI,aAAa,OAAO,iBAAiB,CAAC;AAAA,EACnE;AACA,QAAM,oBAAoB,kBAAkB,gBAAgB;AAC5D,QAAM,qBAAqB,kBAAkB,iBAAiB;AAC9D,OAAK,kBAAkB,SAAS,KAAK,mBAAmB,SAAS,MAAM,KAAK;AAC1E,UAAM,WAAW,IAAI,MAAM;AAI3B,UAAM,iBAAiB,IAAI,MAAM;AACjC,QAAI,OAAO,aAAa,YAAY,OAAO,mBAAmB,UAAU;AACtE,YAAM,KAAK,IAAI,UAAU,QAAuB,IAAI;AACpD,YAAM,aAAa,MAAM;AAAA,QACvB;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAEA,mBAAa,UAAU;AAAA,IACzB;AAAA,EACF;AAEA,MAAI,OAAO,oBAAoB;AAC7B,UAAM,kBAAkB,wBAAwB,EAAE,GAAG,QAAQ,GAAG,kBAAkB;AAClF,UAAM,aAAa,MAAM,qCAAqC;AAAA,MAC5D;AAAA,MACA,UAAU,EAAE,UAAU;AAAA,MACtB,SAAS;AAAA,IACX,CAAC;AACD,QAAI,eAAe,MAAM;AACvB,mBAAa,UAAU;AAAA,IACzB;AAAA,EACF;AAEA,MAAI,kBAAkB,MAAM;AAC1B,6BAAyB,SAAS,aAAa;AAAA,EACjD;AAEA,SAAO;AACT;AAEA,MAAM,OAAO,cAA+C;AAAA,EAC1D,UAAU;AAAA,EACV,KAAK;AAAA,IACH,QAAQ;AAAA,IACR,SAAS;AAAA,IACT,UAAU;AAAA,IACV,aAAa;AAAA,IACb,iBAAiB;AAAA,EACnB;AAAA,EACA,SAAS;AAAA,IACP,YAAY,EAAE,UAAU;AAAA,EAC1B;AAAA,EACA,WAAW,EAAE,UAAU,iBAAiB;AAAA,EACxC,MAAM;AAAA,IACJ,QAAQ;AAAA,IACR,UAAU,EAAE,UAAU;AAAA,IACtB,QAAQ;AAAA,MACN;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,IACA,sBAAsB;AAAA,MACpB,WAAW,EAAE,UAAU;AAAA,IACzB;AAAA,IACA,cAAc;AAAA,MACZ,WAAW;AAAA,MACX,WAAW;AAAA,MACX,OAAO;AAAA,MACP,OAAO;AAAA,MACP,aAAa;AAAA,MACb,iBAAiB;AAAA,IACnB;AAAA,IACA,cAAc;AAAA,EAChB;AAAA,EACA,SAAS;AAAA,IACP,QAAQ;AAAA,MACN,WAAW;AAAA,MACX,QAAQ;AAAA,MACR,UAAU,OAAO,EAAE,KAAK,IAAI,MAAM;AAChC,cAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,eAAO,wBAAwB,kBAAkB,OAAO,CAAC,GAAG,KAAK,SAAS;AAAA,MAC5E;AAAA,MACA,UAAU,CAAC,EAAE,OAAO,OAAO,EAAE,IAAI,QAAQ,UAAU,QAAQ,MAAM,KAAK;AAAA,MACtE,QAAQ;AAAA,IACV;AAAA,IACA,QAAQ;AAAA,MACN,WAAW;AAAA,MACX,QAAQ;AAAA,MACR,UAAU,OAAO,EAAE,KAAK,IAAI,MAAM;AAChC,cAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,eAAO,wBAAwB,kBAAkB,OAAO,CAAC,GAAG,KAAK,SAAS;AAAA,MAC5E;AAAA,MACA,UAAU,OAAO,EAAE,IAAI,KAAK;AAAA,IAC9B;AAAA,IACA,QAAQ;AAAA,MACN,WAAW;AAAA,MACX,QAAQ;AAAA,MACR,UAAU,OAAO,EAAE,QAAQ,IAAI,MAAM;AACnC,cAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,cAAM,KACJ,QAAQ,MAAM,MACd,QAAQ,MACR,QAAQ,OAAO,OACd,IAAI,UAAU,IAAI,IAAI,IAAI,QAAQ,GAAG,EAAE,aAAa,IAAI,IAAI,IAAI;AACnE,YAAI,CAAC,GAAI,OAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,kCAAkC,qBAAqB,EAAE,CAAC;AACnH,eAAO,EAAE,GAAG;AAAA,MACd;AAAA,MACA,UAAU,OAAO,EAAE,IAAI,KAAK;AAAA,IAC9B;AAAA,EACF;AAAA,EACA,OAAO;AAAA;AAAA;AAAA;AAAA;AAAA,IAKL,WAAW,OAAO,SAAS,QAAQ;AACjC,YAAM,QAAQ,MAAM,QAAQ,QAAQ,KAAK,IAAI,QAAQ,QAAQ,CAAC;AAC9D,UAAI,CAAC,MAAM,OAAQ;AACnB,YAAM,cAAe,MAAM,CAAC,KAAK,CAAC;AAClC,YAAM,cAAc,YAAY,YAAY,YAAY;AACxD,YAAM,oBAAoB,OAAO,gBAAgB,YAAY,YAAY,KAAK,EAAE,SAAS,cAAc,SAAS,IAAI,MAAM,YAAY;AACtI,YAAM,WAAW,YAAY,kBAAkB,YAAY;AAC3D,YAAM,0BAA0B,OAAO,aAAa,YAAY,SAAS,KAAK,EAAE,SAAS,WAAW,SAAS,IAAI,MAAM,SAAS;AAChI,YAAM,MAAM,MACT,IAAI,CAAC,SAAkB;AACtB,YAAI,CAAC,QAAQ,OAAO,SAAS,SAAU,QAAO;AAC9C,cAAM,YAAa,KAAiC;AACpD,eAAO,OAAO,cAAc,YAAY,UAAU,KAAK,EAAE,SAAS,YAAY;AAAA,MAChF,CAAC,EACA,OAAO,CAAC,UAA0C,OAAO,UAAU,YAAY,MAAM,SAAS,CAAC;AAClG,UAAI,CAAC,IAAI,QAAQ;AACf,gBAAQ,QAAQ,CAAC;AACjB,gBAAQ,QAAQ;AAChB;AAAA,MACF;AACA,UAAI;AACF,cAAM,KAAM,IAAI,UAAU,QAAQ,IAAI;AACtC,cAAM,CAAC,gBAAgB,eAAe,IAAI,MAAM,QAAQ,IAAI;AAAA,UAC1D;AAAA,YACE;AAAA,YACA;AAAA,YACA,EAAE,MAAM,EAAE,KAAK,IAAI,EAAE;AAAA,YACrB,EAAE,UAAU,CAAC,QAAQ,EAAE;AAAA,YACvB,EAAE,UAAU,kBAAkB,gBAAgB,uBAAuB;AAAA,UACvE;AAAA,UACA;AAAA,YACE;AAAA,YACA;AAAA,YACA,EAAE,MAAM,EAAE,KAAK,IAAI,EAAE;AAAA,YACrB,EAAE,UAAU,CAAC,SAAS,EAAE;AAAA,YACxB,EAAE,UAAU,kBAAkB,gBAAgB,uBAAuB;AAAA,UACvE;AAAA,QACF,CAAC;AAED,cAAM,oBAAoB,oBAAI,IAA6C;AAC3E,uBAAe,QAAQ,CAAC,SAAS;AAC/B,gBAAM,OAAO,KAAK;AAClB,gBAAM,aAAa,QAAQ,OAAO,SAAS,WAAW,OAA6C;AACnG,gBAAM,SAAS,OAAO,SAAS,WAAW,OACtC,cAAc,OAAO,WAAW,OAAO,WAAW,WAAW,KAC7D;AACJ,cAAI,CAAC,OAAQ;AACb,gBAAM,YAAY,KAAK;AACvB,gBAAM,eAAe,aAAa,OAAO,cAAc,WAAW,YAAkD;AACpH,gBAAM,WAAW,OAAO,cAAc,WAAW,YAC7C,gBAAgB,OAAO,aAAa,OAAO,WAAW,aAAa,KACnE;AACJ,cAAI,CAAC,SAAU;AACf,gBAAM,QAAQ,gBAAgB,OAAO,aAAa,gBAAgB,WAC9D,aAAa,cACb;AACJ,gBAAM,SAAS,kBAAkB,IAAI,MAAM,KAAK,CAAC;AACjD,cAAI,CAAC,OAAO,KAAK,CAAC,UAAU,MAAM,OAAO,QAAQ,GAAG;AAClD,mBAAO,KAAK,EAAE,IAAI,UAAU,MAAM,CAAC;AACnC,8BAAkB,IAAI,QAAQ,MAAM;AAAA,UACtC;AAAA,QACF,CAAC;AAED,cAAM,qBAAqB,oBAAI,IAA6C;AAC5E,wBAAgB,QAAQ,CAAC,SAAS;AAChC,gBAAM,OAAO,KAAK;AAClB,gBAAM,aAAa,QAAQ,OAAO,SAAS,WAAW,OAA6C;AACnG,gBAAM,SAAS,OAAO,SAAS,WAAW,OACtC,cAAc,OAAO,WAAW,OAAO,WAAW,WAAW,KAC7D;AACJ,cAAI,CAAC,OAAQ;AACb,gBAAM,aAAa,KAAK;AACxB,gBAAM,gBAAgB,cAAc,OAAO,eAAe,WAAW,aAAmD;AACxH,gBAAM,YAAY,OAAO,eAAe,WAAW,aAC/C,iBAAiB,OAAO,cAAc,OAAO,WAAW,cAAc,KACtE;AACJ,cAAI,CAAC,UAAW;AAChB,gBAAM,QAAQ,iBAAiB,OAAO,cAAc,gBAAgB,WAChE,cAAc,cACd;AACJ,gBAAM,SAAS,mBAAmB,IAAI,MAAM,KAAK,CAAC;AAClD,cAAI,CAAC,OAAO,KAAK,CAAC,UAAU,MAAM,OAAO,SAAS,GAAG;AACnD,mBAAO,KAAK,EAAE,IAAI,WAAW,MAAM,CAAC;AACpC,+BAAmB,IAAI,QAAQ,MAAM;AAAA,UACvC;AAAA,QACF,CAAC;AAED,cAAM,gBAAgB,MACnB,IAAI,CAAC,SAAkB;AACtB,cAAI,CAAC,QAAQ,OAAO,SAAS,SAAU,QAAO;AAC9C,gBAAM,OAAO;AACb,gBAAM,YAAY,OAAO,KAAK,OAAO,WAAW,KAAK,KAAK;AAC1D,cAAI,CAAC,aAAa,CAAC,UAAU,KAAK,EAAE,OAAQ,QAAO;AACnD,gBAAM,SAAS,kBAAkB,IAAI,SAAS,KAAK,CAAC;AACpD,gBAAM,YAAY,mBAAmB,IAAI,SAAS,KAAK,CAAC;AACxD,gBAAMC,eACJ,OAAO,KAAK,aAAa,WACrB,KAAK,WACL,OAAO,KAAK,cAAc,WACxB,KAAK,YACL;AACR,gBAAM,oBACJ,OAAO,KAAK,mBAAmB,WAC3B,KAAK,iBACL,OAAO,KAAK,oBAAoB,WAC9B,KAAK,kBACL;AACR,gBAAM,WAAWA,gBAAeA,aAAY,KAAK,EAAE,SAASA,aAAY,KAAK,IAAI;AACjF,gBAAM,iBAAiB,qBAAqB,kBAAkB,KAAK,EAAE,SAAS,kBAAkB,KAAK,IAAI;AACzG,iBAAO;AAAA,YACL,GAAG;AAAA,YACH,WAAW,OAAO,IAAI,CAAC,UAAU,MAAM,EAAE;AAAA,YACzC;AAAA,YACA,YAAY,UAAU,IAAI,CAAC,UAAU,MAAM,EAAE;AAAA,YAC7C;AAAA,YACA;AAAA,YACA;AAAA,UACF;AAAA,QACF,CAAC,EACA;AAAA,UACC,CAAC,SAA0E,SAAS;AAAA,QACtF;AAEF,gBAAQ,QAAQ;AAAA,MAClB,SAAS,KAAK;AAKZ,eAAO,KAAK,sDAAsD,EAAE,WAAW,SAAS,IAAI,CAAC;AAC7F,gBAAQ,QAAQ,MAAM,IAAI,CAAC,SAAkB;AAC3C,cAAI,CAAC,QAAQ,OAAO,SAAS,SAAU,QAAO;AAC9C,iBAAO;AAAA,YACL,GAAI;AAAA,YACJ,eAAe;AAAA,cACb,IAAI;AAAA,cACJ,QAAQ,eAAe,QAAQ,IAAI,UAAU;AAAA,YAC/C;AAAA,UACF;AAAA,QACF,CAAC;AAAA,MACH;AAAA,IACF;AAAA,EACF;AACF,CAAC;AAED,MAAM,EAAE,MAAM,KAAK,OAAO,IAAI;AAGvB,MAAM,MAAM,KAAK;AAExB,MAAM,wBAAwB,EAAE,OAAO;AAAA,EACrC,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,OAAO,EAAE,OAAO,EAAE,SAAS;AAC7B,CAAC;AAED,MAAM,qBAAqB,EACxB,OAAO;AAAA,EACN,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,OAAO,EAAE,OAAO,EAAE,SAAS;AAAA,EAC3B,aAAa,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC5C,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACvC,gBAAgB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC/C,aAAa,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS;AAAA,EACnD,mBAAmB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS;AAAA,EACzD,cAAc,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC7C,gBAAgB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC/C,aAAa,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC5C,mBAAmB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAClD,eAAe,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS;AAAA,EACrD,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACvC,iBAAiB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS;AAAA,EACvD,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS;AAAA,EACjD,YAAY,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC3C,YAAY,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC3C,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,SAAS;AAAA,EAC/C,QAAQ,EAAE,MAAM,qBAAqB,EAAE,SAAS;AAAA,EAChD,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,SAAS;AAAA,EAChD,WAAW,EAAE,MAAM,qBAAqB,EAAE,SAAS;AAAA,EACnD,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS;AAAA,EACtD,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS;AAClD,CAAC,EACA,YAAY;AAEf,MAAM,2BAA2B,EAAE,OAAO;AAAA,EACxC,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AACjC,CAAC;AAEM,MAAM,UAAU,2BAA2B;AAAA,EAChD,cAAc;AAAA,EACd,aAAa;AAAA,EACb,oBAAoB,8BAA8B,kBAAkB;AAAA,EACpE,QAAQ;AAAA,IACN,QAAQ;AAAA,IACR,gBAAgB;AAAA,IAChB,aAAa;AAAA,EACf;AAAA,EACA,QAAQ;AAAA,IACN,QAAQ;AAAA,IACR,gBAAgB;AAAA,IAChB,aAAa;AAAA,EACf;AAAA,EACA,KAAK;AAAA,IACH,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAAA,IAC1C,gBAAgB;AAAA,IAChB,aAAa;AAAA,EACf;AACF,CAAC;",
+  "sourcesContent": ["import { z } from 'zod'\nimport { makeCrudRoute } from '@open-mercato/shared/lib/crud/factory'\nimport { CrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { CustomerDeal, CustomerDealPersonLink, CustomerDealCompanyLink } from '../../data/entities'\nimport { dealCreateSchema, dealUpdateSchema } from '../../data/validators'\nimport { E } from '#generated/entities.ids.generated'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { parseBooleanFromUnknown } from '@open-mercato/shared/lib/boolean'\nimport {\n  applyEntityIdRestriction,\n  findMatchingEntityIdsWithQueryEngine,\n  findMatchingEntityIdsBySearchTokensAcrossSources,\n  parseScopedCommandInput,\n} from '../utils'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport {\n  createCustomersCrudOpenApi,\n  createPagedListResponseSchema,\n  defaultOkResponseSchema,\n} from '../openapi'\nimport { findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { isTenantDataEncryptionEnabled } from '@open-mercato/shared/lib/encryption/toggles'\nimport { escapeLikePattern } from '@open-mercato/shared/lib/db/escapeLikePattern'\nimport { consumeAdvancedFilterState, mergeAdvancedFilterTree } from '@open-mercato/shared/lib/crud/advanced-filter-integration'\nimport { fetchStuckDealIds } from '../../lib/stuckDeals'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('customers')\n\nconst rawBodySchema = z.object({}).passthrough()\n\nconst stringOrStringArray = z.union([z.string(), z.array(z.string())])\nconst OPEN_DEAL_STATUSES = ['open', 'in_progress'] as const\nconst booleanQueryParam = z.preprocess((value) => {\n  const parsed = parseBooleanFromUnknown(value)\n  return parsed === null ? value : parsed\n}, z.boolean()).optional()\n\nexport const dealListQuerySchema = z\n  .object({\n    page: z.coerce.number().min(1).default(1),\n    pageSize: z.coerce.number().min(1).max(100).default(50),\n    id: z.string().uuid().optional(),\n    search: z.string().optional(),\n    status: stringOrStringArray.optional(),\n    pipelineStage: z.string().optional(),\n    pipelineId: stringOrStringArray.optional(),\n    pipelineStageId: z.union([z.string().uuid(), z.literal('__unassigned')]).optional(),\n    ownerUserId: stringOrStringArray.optional(),\n    expectedCloseAtFrom: z.string().optional(),\n    expectedCloseAtTo: z.string().optional(),\n    isStuck: booleanQueryParam,\n    isOverdue: booleanQueryParam,\n    needsAttention: booleanQueryParam,\n    valueCurrency: stringOrStringArray.optional(),\n    sortField: z.string().optional(),\n    sortDir: z.enum(['asc', 'desc']).optional(),\n    /**\n     * @deprecated Use `personId` instead. The `personEntityId` alias is kept for backward\n     * compatibility with older clients and will be removed in a future minor release.\n     */\n    personEntityId: z.string().uuid().optional().describe('Deprecated; use personId'),\n    /**\n     * @deprecated Use `companyId` instead. The `companyEntityId` alias is kept for backward\n     * compatibility with older clients and will be removed in a future minor release.\n     */\n    companyEntityId: z.string().uuid().optional().describe('Deprecated; use companyId'),\n    personId: stringOrStringArray.optional(),\n    companyId: stringOrStringArray.optional(),\n  })\n  .passthrough()\n\nconst routeMetadata = {\n  GET: { requireAuth: true, requireFeatures: ['customers.deals.view'] },\n  POST: { requireAuth: true, requireFeatures: ['customers.deals.manage'] },\n  PUT: { requireAuth: true, requireFeatures: ['customers.deals.manage'] },\n  DELETE: { requireAuth: true, requireFeatures: ['customers.deals.manage'] },\n}\n\nexport const metadata = routeMetadata\n\nexport type DealListQuery = z.infer<typeof dealListQuerySchema>\n\nfunction parseUuid(value: unknown): string | null {\n  if (typeof value !== 'string') return null\n  const trimmed = value.trim()\n  if (!trimmed.length) return null\n  const result = z.string().uuid().safeParse(trimmed)\n  return result.success ? trimmed : null\n}\n\nfunction normalizeStringList(value: unknown): string[] {\n  const set = new Set<string>()\n  const visit = (entry: unknown) => {\n    if (entry == null) return\n    if (Array.isArray(entry)) {\n      entry.forEach(visit)\n      return\n    }\n    if (typeof entry !== 'string') return\n    entry\n      .split(',')\n      .map((token) => token.trim())\n      .filter((token) => token.length > 0)\n      .forEach((token) => set.add(token))\n  }\n  visit(value)\n  return Array.from(set)\n}\n\nfunction parseDateInput(value: unknown): Date | null {\n  if (!(typeof value === 'string') || value.trim().length === 0) return null\n  const date = new Date(value)\n  return Number.isNaN(date.getTime()) ? null : date\n}\n\n/**\n * Pre-pagination ID narrowing for person/company filters.\n *\n * Mirrors the SQL the aggregate route uses (`EXISTS ... IN (...)`) so the list endpoint\n * and the lane-header aggregate return a consistent set of deals for the same filters.\n * Semantics: OR within a category (any selected person/company matches), AND across\n * categories (deal must match at least one person AND at least one company when both\n * filter lists are provided).\n *\n * Returns the matched deal IDs (UUIDs). An empty array means \"no deals match\" \u2014 callers\n * must intersect with `restrictedIds` (which will collapse the list to zero).\n */\nasync function fetchDealIdsMatchingAssociations(\n  em: EntityManager,\n  organizationId: string,\n  tenantId: string,\n  personIds: string[],\n  companyIds: string[],\n): Promise<string[]> {\n  if (!personIds.length && !companyIds.length) return []\n  const where: string[] = [\n    'organization_id = ?',\n    'tenant_id = ?',\n    'deleted_at IS NULL',\n  ]\n  const values: Array<string | number> = [organizationId, tenantId]\n  if (personIds.length) {\n    const placeholders = personIds.map(() => '?').join(',')\n    where.push(\n      `EXISTS (SELECT 1 FROM customer_deal_people dp WHERE dp.deal_id = customer_deals.id AND dp.person_entity_id IN (${placeholders}))`,\n    )\n    values.push(...personIds)\n  }\n  if (companyIds.length) {\n    const placeholders = companyIds.map(() => '?').join(',')\n    where.push(\n      `EXISTS (SELECT 1 FROM customer_deal_companies dc WHERE dc.deal_id = customer_deals.id AND dc.company_entity_id IN (${placeholders}))`,\n    )\n    values.push(...companyIds)\n  }\n  const rows = await em.getConnection().execute<Array<{ id: string }>>(\n    `SELECT id FROM customer_deals WHERE ${where.join(' AND ')}`,\n    values,\n  )\n  return rows.map((row) => row.id)\n}\n\nasync function fetchNeedAttentionDealIds(\n  em: EntityManager,\n  organizationId: string,\n  tenantId: string,\n): Promise<string[]> {\n  const connection = em.getConnection()\n  const overdueRows = await connection.execute<Array<{ id: string }>>(\n    `SELECT id FROM customer_deals\n      WHERE organization_id = ?\n        AND tenant_id = ?\n        AND deleted_at IS NULL\n        AND status = 'open'\n        AND expected_close_at IS NOT NULL\n        AND expected_close_at < CURRENT_DATE`,\n    [organizationId, tenantId],\n  )\n\n  const attentionIds = new Set(overdueRows.map((row) => row.id))\n  const stuckIds = await fetchStuckDealIds(em, organizationId, tenantId)\n  if (stuckIds.length > 0) {\n    const idPlaceholders = stuckIds.map(() => '?').join(',')\n    const statusPlaceholders = OPEN_DEAL_STATUSES.map(() => '?').join(',')\n    const openStuckRows = await connection.execute<Array<{ id: string }>>(\n      `SELECT id FROM customer_deals\n        WHERE organization_id = ?\n          AND tenant_id = ?\n          AND deleted_at IS NULL\n          AND status IN (${statusPlaceholders})\n          AND id IN (${idPlaceholders})`,\n      [organizationId, tenantId, ...OPEN_DEAL_STATUSES, ...stuckIds],\n    )\n    for (const row of openStuckRows) attentionIds.add(row.id)\n  }\n\n  return Array.from(attentionIds)\n}\n\nfunction normalizeCurrencyList(value: unknown): string[] {\n  const set = new Set<string>()\n  const visit = (entry: unknown) => {\n    if (entry == null) return\n    if (Array.isArray(entry)) {\n      entry.forEach(visit)\n      return\n    }\n    if (typeof entry !== 'string') return\n    entry\n      .split(',')\n      .map((token) => token.trim().toUpperCase())\n      .filter((token) => /^[A-Z]{3}$/.test(token))\n      .forEach((token) => set.add(token))\n  }\n  visit(value)\n  return Array.from(set)\n}\n\nfunction normalizeUuidList(values: Array<unknown>): string[] {\n  const set = new Set<string>()\n  values.forEach((candidate) => {\n    if (Array.isArray(candidate)) {\n      candidate.forEach((entry) => {\n        const parsed = parseUuid(entry)\n        if (parsed) set.add(parsed)\n      })\n      return\n    }\n    if (typeof candidate === 'string' && candidate.includes(',')) {\n      candidate\n        .split(',')\n        .map((entry) => entry.trim())\n        .forEach((entry) => {\n          const parsed = parseUuid(entry)\n          if (parsed) set.add(parsed)\n        })\n      return\n    }\n    const parsed = parseUuid(candidate)\n    if (parsed) set.add(parsed)\n  })\n  return Array.from(set)\n}\n\nexport async function buildDealListFilters(query: DealListQuery, ctx?: import('@open-mercato/shared/lib/crud/factory').CrudCtx) {\n  const advancedFilterTree = consumeAdvancedFilterState(query)\n  const filters: Record<string, unknown> = {}\n  let restrictedIds: string[] | null = null\n\n  const intersectIds = (ids: string[]) => {\n    if (restrictedIds === null) {\n      restrictedIds = ids\n      return\n    }\n    const lookup = new Set(ids)\n    restrictedIds = restrictedIds.filter((id) => lookup.has(id))\n  }\n\n  if (query.id) filters.id = { $eq: query.id }\n\n  if (query.search) {\n    const matchingIds = ctx\n      ? await findMatchingEntityIdsBySearchTokensAcrossSources({\n          ctx,\n          query: query.search,\n          sources: [\n            {\n              entityType: E.customers.customer_deal,\n              fields: [\n                'title',\n                'description',\n                'status',\n                'pipeline_stage',\n                'source',\n                'value_amount',\n                'value_currency',\n                'cf:competitive_risk',\n                'cf:implementation_complexity',\n              ],\n            },\n          ],\n        })\n      : null\n    if (matchingIds !== null && matchingIds.length > 0) {\n      intersectIds(matchingIds)\n    } else if (isTenantDataEncryptionEnabled()) {\n      // `customers:customer_deal.title` and `.description` are encrypted at rest\n      // (see `encryption.ts`). The `$ilike` fallback below would silently match\n      // nothing on the ciphertext and produce empty pages without disclosing why \u2014\n      // collapse the result to \"no matches\" instead so the kanban + list views\n      // agree, and lane aggregates stay consistent with the list endpoint.\n      intersectIds([])\n    } else {\n      const searchPattern = `%${escapeLikePattern(query.search)}%`\n      filters.$or = [\n        { title: { $ilike: searchPattern } },\n        { description: { $ilike: searchPattern } },\n      ]\n    }\n  }\n\n  const statusList = query.status ? normalizeStringList(query.status) : []\n  if (statusList.length > 0) {\n    filters.status = statusList.length === 1 ? { $eq: statusList[0] } : { $in: statusList }\n  }\n\n  if (query.pipelineStage) {\n    filters.pipeline_stage = { $eq: query.pipelineStage }\n  }\n\n  const pipelineIds = query.pipelineId ? normalizeUuidList([query.pipelineId]) : []\n  if (pipelineIds.length > 0) {\n    filters.pipeline_id = pipelineIds.length === 1 ? { $eq: pipelineIds[0] } : { $in: pipelineIds }\n  }\n\n  if (query.pipelineStageId === '__unassigned') {\n    filters.pipeline_stage_id = { $eq: null }\n  } else if (query.pipelineStageId) {\n    filters.pipeline_stage_id = { $eq: query.pipelineStageId }\n  }\n\n  const ownerUserIds = query.ownerUserId ? normalizeUuidList([query.ownerUserId]) : []\n  if (ownerUserIds.length > 0) {\n    filters.owner_user_id =\n      ownerUserIds.length === 1 ? { $eq: ownerUserIds[0] } : { $in: ownerUserIds }\n  }\n\n  // Currency filter (additive; sourced by the kanban Currency popover). Codes are\n  // normalised to upper-case so `usd` / `USD` / mixed-case query params all hit the same\n  // stored value (the deals API persists `value_currency` upper-case already).\n  const currencyCodes = query.valueCurrency ? normalizeCurrencyList(query.valueCurrency) : []\n  if (currencyCodes.length > 0) {\n    filters.value_currency =\n      currencyCodes.length === 1 ? { $eq: currencyCodes[0] } : { $in: currencyCodes }\n  }\n\n  const expectedCloseFrom = parseDateInput(query.expectedCloseAtFrom)\n  const expectedCloseTo = parseDateInput(query.expectedCloseAtTo)\n  if (expectedCloseFrom || expectedCloseTo) {\n    const range: Record<string, Date> = {}\n    if (expectedCloseFrom) range.$gte = expectedCloseFrom\n    if (expectedCloseTo) range.$lte = expectedCloseTo\n    filters.expected_close_at = range\n  }\n\n  if (query.isOverdue && !query.needsAttention) {\n    const today = new Date()\n    today.setHours(0, 0, 0, 0)\n    if (statusList.length === 0) {\n      filters.status = { $eq: 'open' }\n    }\n    const existingRange =\n      filters.expected_close_at && typeof filters.expected_close_at === 'object'\n        ? (filters.expected_close_at as Record<string, Date>)\n        : {}\n    existingRange.$lt = today\n    filters.expected_close_at = existingRange\n  }\n\n  if (query.isStuck && !query.needsAttention && ctx) {\n    const tenantId = ctx.auth?.tenantId\n    // CrudCtx.auth carries `orgId` (not `organizationId`). The previous code referenced\n    // `organizationId` which is always `undefined`, so the typeof check below silently\n    // skipped the entire isStuck branch \u2014 `?isStuck=true` was a no-op on this endpoint.\n    const organizationId = ctx.auth?.orgId\n    if (typeof tenantId === 'string' && typeof organizationId === 'string') {\n      const em = ctx.container.resolve<EntityManager>('em')\n      const stuckIds = await fetchStuckDealIds(em, organizationId, tenantId)\n      intersectIds(stuckIds)\n    }\n  }\n\n  if (query.needsAttention && ctx) {\n    const tenantId = ctx.auth?.tenantId\n    const organizationId = ctx.auth?.orgId\n    if (typeof tenantId === 'string' && typeof organizationId === 'string') {\n      const em = ctx.container.resolve<EntityManager>('em')\n      const attentionIds = await fetchNeedAttentionDealIds(em, organizationId, tenantId)\n      intersectIds(attentionIds)\n    }\n  }\n\n  // Pre-pagination association filter. Must run on the FULL dataset (before pagination),\n  // otherwise matching deals on later pages disappear and `total` would be wrong. Read the\n  // raw URL too so legacy `?personEntityId=` / `?companyEntityId=` keep working alongside the\n  // canonical `?personId=` / `?companyId=`.\n  const url = ctx?.request ? new URL(ctx.request.url) : null\n  const personCandidates: unknown[] = [query.personId, query.personEntityId]\n  const companyCandidates: unknown[] = [query.companyId, query.companyEntityId]\n  if (url) {\n    personCandidates.push(url.searchParams.getAll('personId'))\n    personCandidates.push(url.searchParams.getAll('personEntityId'))\n    companyCandidates.push(url.searchParams.getAll('companyId'))\n    companyCandidates.push(url.searchParams.getAll('companyEntityId'))\n  }\n  const selectedPersonIds = normalizeUuidList(personCandidates)\n  const selectedCompanyIds = normalizeUuidList(companyCandidates)\n  if ((selectedPersonIds.length > 0 || selectedCompanyIds.length > 0) && ctx) {\n    const tenantId = ctx.auth?.tenantId\n    // `ctx.auth` exposes `orgId` (see AuthContext in @open-mercato/shared/lib/auth/server).\n    // Read it under the correct key \u2014 the previous code's `organizationId` would always be\n    // `undefined`, silently disabling association filtering on the deals list endpoint.\n    const organizationId = ctx.auth?.orgId\n    if (typeof tenantId === 'string' && typeof organizationId === 'string') {\n      const em = ctx.container.resolve<EntityManager>('em')\n      const matchedIds = await fetchDealIdsMatchingAssociations(\n        em,\n        organizationId,\n        tenantId,\n        selectedPersonIds,\n        selectedCompanyIds,\n      )\n      // intersectIds with empty array \u2192 no rows; collapses the page to zero, total stays correct.\n      intersectIds(matchedIds)\n    }\n  }\n\n  if (ctx && advancedFilterTree) {\n    const advancedFilters = mergeAdvancedFilterTree({ ...filters }, advancedFilterTree)\n    const matchedIds = await findMatchingEntityIdsWithQueryEngine({\n      ctx,\n      entityId: E.customers.customer_deal,\n      filters: advancedFilters,\n    })\n    if (matchedIds !== null) {\n      intersectIds(matchedIds)\n    }\n  }\n\n  if (restrictedIds !== null) {\n    applyEntityIdRestriction(filters, restrictedIds)\n  }\n\n  return filters\n}\n\nconst crud = makeCrudRoute<unknown, unknown, DealListQuery>({\n  metadata: routeMetadata,\n  orm: {\n    entity: CustomerDeal,\n    idField: 'id',\n    orgField: 'organizationId',\n    tenantField: 'tenantId',\n    softDeleteField: 'deletedAt',\n  },\n  indexer: {\n    entityType: E.customers.customer_deal,\n  },\n  enrichers: { entityId: 'customers.deal' },\n  list: {\n    schema: dealListQuerySchema,\n    entityId: E.customers.customer_deal,\n    fields: [\n      'id',\n      'title',\n      'description',\n      'status',\n      'pipeline_stage',\n      'pipeline_id',\n      'pipeline_stage_id',\n      'value_amount',\n      'value_currency',\n      'probability',\n      'expected_close_at',\n      'owner_user_id',\n      'source',\n      'closure_outcome',\n      'loss_reason_id',\n      'loss_notes',\n      'organization_id',\n      'tenant_id',\n      'created_at',\n      'updated_at',\n    ],\n    decorateCustomFields: {\n      entityIds: E.customers.customer_deal,\n    },\n    sortFieldMap: {\n      createdAt: 'created_at',\n      updatedAt: 'updated_at',\n      title: 'title',\n      value: 'value_amount',\n      probability: 'probability',\n      expectedCloseAt: 'expected_close_at',\n    },\n    buildFilters: buildDealListFilters,\n  },\n  actions: {\n    create: {\n      commandId: 'customers.deals.create',\n      schema: rawBodySchema,\n      mapInput: async ({ raw, ctx }) => {\n        const { translate } = await resolveTranslations()\n        return parseScopedCommandInput(dealCreateSchema, raw ?? {}, ctx, translate)\n      },\n      response: ({ result }) => ({ id: result?.dealId ?? result?.id ?? null }),\n      status: 201,\n    },\n    update: {\n      commandId: 'customers.deals.update',\n      schema: rawBodySchema,\n      mapInput: async ({ raw, ctx }) => {\n        const { translate } = await resolveTranslations()\n        return parseScopedCommandInput(dealUpdateSchema, raw ?? {}, ctx, translate)\n      },\n      response: () => ({ ok: true }),\n    },\n    delete: {\n      commandId: 'customers.deals.delete',\n      schema: rawBodySchema,\n      mapInput: async ({ parsed, ctx }) => {\n        const { translate } = await resolveTranslations()\n        const id =\n          parsed?.body?.id ??\n          parsed?.id ??\n          parsed?.query?.id ??\n          (ctx.request ? new URL(ctx.request.url).searchParams.get('id') : null)\n        if (!id) throw new CrudHttpError(400, { error: translate('customers.errors.deal_required', 'Deal id is required') })\n        return { id }\n      },\n      response: () => ({ ok: true }),\n    },\n  },\n  hooks: {\n    // afterList only DECORATES results with `people`/`companies` arrays \u2014 it must not filter,\n    // because filtering after pagination would drop deals on later pages and rewrite `total`\n    // to a misleading value. Association filtering happens pre-pagination in `buildFilters`\n    // via `fetchDealIdsMatchingAssociations`.\n    afterList: async (payload, ctx) => {\n      const items = Array.isArray(payload.items) ? payload.items : []\n      if (!items.length) return\n      const scopeSource = (items[0] ?? {}) as Record<string, unknown>\n      const tenantIdRaw = scopeSource.tenantId ?? scopeSource.tenant_id\n      const fallbackTenantId = (typeof tenantIdRaw === 'string' && tenantIdRaw.trim().length ? tenantIdRaw : null) ?? ctx.auth?.tenantId ?? null\n      const orgIdRaw = scopeSource.organizationId ?? scopeSource.organization_id\n      const fallbackOrganizationId = (typeof orgIdRaw === 'string' && orgIdRaw.trim().length ? orgIdRaw : null) ?? ctx.auth?.orgId ?? null\n      const ids = items\n        .map((item: unknown) => {\n          if (!item || typeof item !== 'object') return null\n          const candidate = (item as Record<string, unknown>).id\n          return typeof candidate === 'string' && candidate.trim().length ? candidate : null\n        })\n        .filter((value: string | null): value is string => typeof value === 'string' && value.length > 0)\n      if (!ids.length) {\n        payload.items = []\n        payload.total = 0\n        return\n      }\n      try {\n        const em = (ctx.container.resolve('em') as EntityManager)\n        const [allPersonLinks, allCompanyLinks] = await Promise.all([\n          findWithDecryption(\n            em,\n            CustomerDealPersonLink,\n            { deal: { $in: ids } },\n            { populate: ['person'] },\n            { tenantId: fallbackTenantId, organizationId: fallbackOrganizationId },\n          ),\n          findWithDecryption(\n            em,\n            CustomerDealCompanyLink,\n            { deal: { $in: ids } },\n            { populate: ['company'] },\n            { tenantId: fallbackTenantId, organizationId: fallbackOrganizationId },\n          ),\n        ])\n\n        const personAssignments = new Map<string, { id: string; label: string }[]>()\n        allPersonLinks.forEach((link) => {\n          const deal = link.deal\n          const dealRecord = deal && typeof deal === 'object' ? deal as unknown as Record<string, unknown> : null\n          const dealId = typeof deal === 'string' ? deal\n            : dealRecord && typeof dealRecord.id === 'string' ? dealRecord.id\n            : null\n          if (!dealId) return\n          const personRef = link.person\n          const personRecord = personRef && typeof personRef === 'object' ? personRef as unknown as Record<string, unknown> : null\n          const personId = typeof personRef === 'string' ? personRef\n            : personRecord && typeof personRecord.id === 'string' ? personRecord.id\n            : null\n          if (!personId) return\n          const label = personRecord && typeof personRecord.displayName === 'string'\n            ? personRecord.displayName\n            : ''\n          const bucket = personAssignments.get(dealId) ?? []\n          if (!bucket.some((entry) => entry.id === personId)) {\n            bucket.push({ id: personId, label })\n            personAssignments.set(dealId, bucket)\n          }\n        })\n\n        const companyAssignments = new Map<string, { id: string; label: string }[]>()\n        allCompanyLinks.forEach((link) => {\n          const deal = link.deal\n          const dealRecord = deal && typeof deal === 'object' ? deal as unknown as Record<string, unknown> : null\n          const dealId = typeof deal === 'string' ? deal\n            : dealRecord && typeof dealRecord.id === 'string' ? dealRecord.id\n            : null\n          if (!dealId) return\n          const companyRef = link.company\n          const companyRecord = companyRef && typeof companyRef === 'object' ? companyRef as unknown as Record<string, unknown> : null\n          const companyId = typeof companyRef === 'string' ? companyRef\n            : companyRecord && typeof companyRecord.id === 'string' ? companyRecord.id\n            : null\n          if (!companyId) return\n          const label = companyRecord && typeof companyRecord.displayName === 'string'\n            ? companyRecord.displayName\n            : ''\n          const bucket = companyAssignments.get(dealId) ?? []\n          if (!bucket.some((entry) => entry.id === companyId)) {\n            bucket.push({ id: companyId, label })\n            companyAssignments.set(dealId, bucket)\n          }\n        })\n\n        const enhancedItems = items\n          .map((item: unknown) => {\n            if (!item || typeof item !== 'object') return null\n            const data = item as Record<string, unknown>\n            const candidate = typeof data.id === 'string' ? data.id : null\n            if (!candidate || !candidate.trim().length) return null\n            const people = personAssignments.get(candidate) ?? []\n            const companies = companyAssignments.get(candidate) ?? []\n            const tenantIdRaw =\n              typeof data.tenantId === 'string'\n                ? data.tenantId\n                : typeof data.tenant_id === 'string'\n                  ? data.tenant_id\n                  : null\n            const organizationIdRaw =\n              typeof data.organizationId === 'string'\n                ? data.organizationId\n                : typeof data.organization_id === 'string'\n                  ? data.organization_id\n                  : null\n            const tenantId = tenantIdRaw && tenantIdRaw.trim().length ? tenantIdRaw.trim() : null\n            const organizationId = organizationIdRaw && organizationIdRaw.trim().length ? organizationIdRaw.trim() : null\n            return {\n              ...data,\n              personIds: people.map((entry) => entry.id),\n              people,\n              companyIds: companies.map((entry) => entry.id),\n              companies,\n              tenantId,\n              organizationId,\n            }\n          })\n          .filter(\n            (item: Record<string, unknown> | null): item is Record<string, unknown> => item !== null,\n          )\n\n        payload.items = enhancedItems\n      } catch (err) {\n        // We swallow rather than fail the request because the kanban is still useful without\n        // people/companies labels (cards just lose their company pill). Tag every item with\n        // `_associations: { ok: false }` so a future surface can render a degraded-state hint\n        // instead of silently showing cards without company badges.\n        logger.warn('failed to decorate items with person/company links', { component: 'deals', err })\n        payload.items = items.map((item: unknown) => {\n          if (!item || typeof item !== 'object') return item\n          return {\n            ...(item as Record<string, unknown>),\n            _associations: {\n              ok: false,\n              reason: err instanceof Error ? err.message : 'unknown',\n            },\n          }\n        })\n      }\n    },\n  },\n})\n\nconst { POST, PUT, DELETE } = crud\n\nexport { POST, PUT, DELETE }\nexport const GET = crud.GET\n\nconst dealAssociationSchema = z.object({\n  id: z.string().uuid(),\n  label: z.string().nullable(),\n})\n\nconst dealListItemSchema = z\n  .object({\n    id: z.string().uuid(),\n    title: z.string().nullable(),\n    description: z.string().nullable().optional(),\n    status: z.string().nullable().optional(),\n    pipeline_stage: z.string().nullable().optional(),\n    pipeline_id: z.string().uuid().nullable().optional(),\n    pipeline_stage_id: z.string().uuid().nullable().optional(),\n    value_amount: z.number().nullable().optional(),\n    value_currency: z.string().nullable().optional(),\n    probability: z.number().nullable().optional(),\n    expected_close_at: z.string().nullable().optional(),\n    owner_user_id: z.string().uuid().nullable().optional(),\n    source: z.string().nullable().optional(),\n    organization_id: z.string().uuid().nullable().optional(),\n    tenant_id: z.string().uuid().nullable().optional(),\n    created_at: z.string().nullable().optional(),\n    updated_at: z.string().nullable().optional(),\n    personIds: z.array(z.string().uuid()).optional(),\n    people: z.array(dealAssociationSchema).optional(),\n    companyIds: z.array(z.string().uuid()).optional(),\n    companies: z.array(dealAssociationSchema).optional(),\n    organizationId: z.string().uuid().nullable().optional(),\n    tenantId: z.string().uuid().nullable().optional(),\n  })\n  .passthrough()\n\nconst dealCreateResponseSchema = z.object({\n  id: z.string().uuid().nullable(),\n})\n\nexport const openApi = createCustomersCrudOpenApi({\n  resourceName: 'Deal',\n  querySchema: dealListQuerySchema,\n  listResponseSchema: createPagedListResponseSchema(dealListItemSchema),\n  create: {\n    schema: dealCreateSchema,\n    responseSchema: dealCreateResponseSchema,\n    description: 'Creates a sales deal, optionally associating people and companies.',\n  },\n  update: {\n    schema: dealUpdateSchema,\n    responseSchema: defaultOkResponseSchema,\n    description: 'Updates pipeline position, metadata, or associations for an existing deal.',\n  },\n  del: {\n    schema: z.object({ id: z.string().uuid() }),\n    responseSchema: defaultOkResponseSchema,\n    description: 'Deletes a deal by `id`. The identifier may be provided in the body or query parameters.',\n  },\n})\n"],
+  "mappings": "AAAA,SAAS,SAAS;AAClB,SAAS,qBAAqB;AAC9B,SAAS,qBAAqB;AAC9B,SAAS,cAAc,wBAAwB,+BAA+B;AAC9E,SAAS,kBAAkB,wBAAwB;AACnD,SAAS,SAAS;AAClB,SAAS,2BAA2B;AACpC,SAAS,+BAA+B;AACxC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,0BAA0B;AACnC,SAAS,qCAAqC;AAC9C,SAAS,yBAAyB;AAClC,SAAS,4BAA4B,+BAA+B;AACpE,SAAS,yBAAyB;AAClC,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,WAAW;AAEvC,MAAM,gBAAgB,EAAE,OAAO,CAAC,CAAC,EAAE,YAAY;AAE/C,MAAM,sBAAsB,EAAE,MAAM,CAAC,EAAE,OAAO,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;AACrE,MAAM,qBAAqB,CAAC,QAAQ,aAAa;AACjD,MAAM,oBAAoB,EAAE,WAAW,CAAC,UAAU;AAChD,QAAM,SAAS,wBAAwB,KAAK;AAC5C,SAAO,WAAW,OAAO,QAAQ;AACnC,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS;AAElB,MAAM,sBAAsB,EAChC,OAAO;AAAA,EACN,MAAM,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,QAAQ,CAAC;AAAA,EACxC,UAAU,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,QAAQ,EAAE;AAAA,EACtD,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC/B,QAAQ,EAAE,OAAO,EAAE,SAAS;AAAA,EAC5B,QAAQ,oBAAoB,SAAS;AAAA,EACrC,eAAe,EAAE,OAAO,EAAE,SAAS;AAAA,EACnC,YAAY,oBAAoB,SAAS;AAAA,EACzC,iBAAiB,EAAE,MAAM,CAAC,EAAE,OAAO,EAAE,KAAK,GAAG,EAAE,QAAQ,cAAc,CAAC,CAAC,EAAE,SAAS;AAAA,EAClF,aAAa,oBAAoB,SAAS;AAAA,EAC1C,qBAAqB,EAAE,OAAO,EAAE,SAAS;AAAA,EACzC,mBAAmB,EAAE,OAAO,EAAE,SAAS;AAAA,EACvC,SAAS;AAAA,EACT,WAAW;AAAA,EACX,gBAAgB;AAAA,EAChB,eAAe,oBAAoB,SAAS;AAAA,EAC5C,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,SAAS,EAAE,KAAK,CAAC,OAAO,MAAM,CAAC,EAAE,SAAS;AAAA;AAAA;AAAA;AAAA;AAAA,EAK1C,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,0BAA0B;AAAA;AAAA;AAAA;AAAA;AAAA,EAKhF,iBAAiB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,2BAA2B;AAAA,EAClF,UAAU,oBAAoB,SAAS;AAAA,EACvC,WAAW,oBAAoB,SAAS;AAC1C,CAAC,EACA,YAAY;AAEf,MAAM,gBAAgB;AAAA,EACpB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,sBAAsB,EAAE;AAAA,EACpE,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,wBAAwB,EAAE;AAAA,EACvE,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,wBAAwB,EAAE;AAAA,EACtE,QAAQ,EAAE,aAAa,MAAM,iBAAiB,CAAC,wBAAwB,EAAE;AAC3E;AAEO,MAAM,WAAW;AAIxB,SAAS,UAAU,OAA+B;AAChD,MAAI,OAAO,UAAU,SAAU,QAAO;AACtC,QAAM,UAAU,MAAM,KAAK;AAC3B,MAAI,CAAC,QAAQ,OAAQ,QAAO;AAC5B,QAAM,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,OAAO;AAClD,SAAO,OAAO,UAAU,UAAU;AACpC;AAEA,SAAS,oBAAoB,OAA0B;AACrD,QAAM,MAAM,oBAAI,IAAY;AAC5B,QAAM,QAAQ,CAAC,UAAmB;AAChC,QAAI,SAAS,KAAM;AACnB,QAAI,MAAM,QAAQ,KAAK,GAAG;AACxB,YAAM,QAAQ,KAAK;AACnB;AAAA,IACF;AACA,QAAI,OAAO,UAAU,SAAU;AAC/B,UACG,MAAM,GAAG,EACT,IAAI,CAAC,UAAU,MAAM,KAAK,CAAC,EAC3B,OAAO,CAAC,UAAU,MAAM,SAAS,CAAC,EAClC,QAAQ,CAAC,UAAU,IAAI,IAAI,KAAK,CAAC;AAAA,EACtC;AACA,QAAM,KAAK;AACX,SAAO,MAAM,KAAK,GAAG;AACvB;AAEA,SAAS,eAAe,OAA6B;AACnD,MAAI,EAAE,OAAO,UAAU,aAAa,MAAM,KAAK,EAAE,WAAW,EAAG,QAAO;AACtE,QAAM,OAAO,IAAI,KAAK,KAAK;AAC3B,SAAO,OAAO,MAAM,KAAK,QAAQ,CAAC,IAAI,OAAO;AAC/C;AAcA,eAAe,iCACb,IACA,gBACA,UACA,WACA,YACmB;AACnB,MAAI,CAAC,UAAU,UAAU,CAAC,WAAW,OAAQ,QAAO,CAAC;AACrD,QAAM,QAAkB;AAAA,IACtB;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACA,QAAM,SAAiC,CAAC,gBAAgB,QAAQ;AAChE,MAAI,UAAU,QAAQ;AACpB,UAAM,eAAe,UAAU,IAAI,MAAM,GAAG,EAAE,KAAK,GAAG;AACtD,UAAM;AAAA,MACJ,kHAAkH,YAAY;AAAA,IAChI;AACA,WAAO,KAAK,GAAG,SAAS;AAAA,EAC1B;AACA,MAAI,WAAW,QAAQ;AACrB,UAAM,eAAe,WAAW,IAAI,MAAM,GAAG,EAAE,KAAK,GAAG;AACvD,UAAM;AAAA,MACJ,sHAAsH,YAAY;AAAA,IACpI;AACA,WAAO,KAAK,GAAG,UAAU;AAAA,EAC3B;AACA,QAAM,OAAO,MAAM,GAAG,cAAc,EAAE;AAAA,IACpC,uCAAuC,MAAM,KAAK,OAAO,CAAC;AAAA,IAC1D;AAAA,EACF;AACA,SAAO,KAAK,IAAI,CAAC,QAAQ,IAAI,EAAE;AACjC;AAEA,eAAe,0BACb,IACA,gBACA,UACmB;AACnB,QAAM,aAAa,GAAG,cAAc;AACpC,QAAM,cAAc,MAAM,WAAW;AAAA,IACnC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAOA,CAAC,gBAAgB,QAAQ;AAAA,EAC3B;AAEA,QAAM,eAAe,IAAI,IAAI,YAAY,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC;AAC7D,QAAM,WAAW,MAAM,kBAAkB,IAAI,gBAAgB,QAAQ;AACrE,MAAI,SAAS,SAAS,GAAG;AACvB,UAAM,iBAAiB,SAAS,IAAI,MAAM,GAAG,EAAE,KAAK,GAAG;AACvD,UAAM,qBAAqB,mBAAmB,IAAI,MAAM,GAAG,EAAE,KAAK,GAAG;AACrE,UAAM,gBAAgB,MAAM,WAAW;AAAA,MACrC;AAAA;AAAA;AAAA;AAAA,2BAIqB,kBAAkB;AAAA,uBACtB,cAAc;AAAA,MAC/B,CAAC,gBAAgB,UAAU,GAAG,oBAAoB,GAAG,QAAQ;AAAA,IAC/D;AACA,eAAW,OAAO,cAAe,cAAa,IAAI,IAAI,EAAE;AAAA,EAC1D;AAEA,SAAO,MAAM,KAAK,YAAY;AAChC;AAEA,SAAS,sBAAsB,OAA0B;AACvD,QAAM,MAAM,oBAAI,IAAY;AAC5B,QAAM,QAAQ,CAAC,UAAmB;AAChC,QAAI,SAAS,KAAM;AACnB,QAAI,MAAM,QAAQ,KAAK,GAAG;AACxB,YAAM,QAAQ,KAAK;AACnB;AAAA,IACF;AACA,QAAI,OAAO,UAAU,SAAU;AAC/B,UACG,MAAM,GAAG,EACT,IAAI,CAAC,UAAU,MAAM,KAAK,EAAE,YAAY,CAAC,EACzC,OAAO,CAAC,UAAU,aAAa,KAAK,KAAK,CAAC,EAC1C,QAAQ,CAAC,UAAU,IAAI,IAAI,KAAK,CAAC;AAAA,EACtC;AACA,QAAM,KAAK;AACX,SAAO,MAAM,KAAK,GAAG;AACvB;AAEA,SAAS,kBAAkB,QAAkC;AAC3D,QAAM,MAAM,oBAAI,IAAY;AAC5B,SAAO,QAAQ,CAAC,cAAc;AAC5B,QAAI,MAAM,QAAQ,SAAS,GAAG;AAC5B,gBAAU,QAAQ,CAAC,UAAU;AAC3B,cAAMA,UAAS,UAAU,KAAK;AAC9B,YAAIA,QAAQ,KAAI,IAAIA,OAAM;AAAA,MAC5B,CAAC;AACD;AAAA,IACF;AACA,QAAI,OAAO,cAAc,YAAY,UAAU,SAAS,GAAG,GAAG;AAC5D,gBACG,MAAM,GAAG,EACT,IAAI,CAAC,UAAU,MAAM,KAAK,CAAC,EAC3B,QAAQ,CAAC,UAAU;AAClB,cAAMA,UAAS,UAAU,KAAK;AAC9B,YAAIA,QAAQ,KAAI,IAAIA,OAAM;AAAA,MAC5B,CAAC;AACH;AAAA,IACF;AACA,UAAM,SAAS,UAAU,SAAS;AAClC,QAAI,OAAQ,KAAI,IAAI,MAAM;AAAA,EAC5B,CAAC;AACD,SAAO,MAAM,KAAK,GAAG;AACvB;AAEA,eAAsB,qBAAqB,OAAsB,KAA+D;AAC9H,QAAM,qBAAqB,2BAA2B,KAAK;AAC3D,QAAM,UAAmC,CAAC;AAC1C,MAAI,gBAAiC;AAErC,QAAM,eAAe,CAAC,QAAkB;AACtC,QAAI,kBAAkB,MAAM;AAC1B,sBAAgB;AAChB;AAAA,IACF;AACA,UAAM,SAAS,IAAI,IAAI,GAAG;AAC1B,oBAAgB,cAAc,OAAO,CAAC,OAAO,OAAO,IAAI,EAAE,CAAC;AAAA,EAC7D;AAEA,MAAI,MAAM,GAAI,SAAQ,KAAK,EAAE,KAAK,MAAM,GAAG;AAE3C,MAAI,MAAM,QAAQ;AAChB,UAAM,cAAc,MAChB,MAAM,iDAAiD;AAAA,MACrD;AAAA,MACA,OAAO,MAAM;AAAA,MACb,SAAS;AAAA,QACP;AAAA,UACE,YAAY,EAAE,UAAU;AAAA,UACxB,QAAQ;AAAA,YACN;AAAA,YACA;AAAA,YACA;AAAA,YACA;AAAA,YACA;AAAA,YACA;AAAA,YACA;AAAA,YACA;AAAA,YACA;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,IACF,CAAC,IACD;AACJ,QAAI,gBAAgB,QAAQ,YAAY,SAAS,GAAG;AAClD,mBAAa,WAAW;AAAA,IAC1B,WAAW,8BAA8B,GAAG;AAM1C,mBAAa,CAAC,CAAC;AAAA,IACjB,OAAO;AACL,YAAM,gBAAgB,IAAI,kBAAkB,MAAM,MAAM,CAAC;AACzD,cAAQ,MAAM;AAAA,QACZ,EAAE,OAAO,EAAE,QAAQ,cAAc,EAAE;AAAA,QACnC,EAAE,aAAa,EAAE,QAAQ,cAAc,EAAE;AAAA,MAC3C;AAAA,IACF;AAAA,EACF;AAEA,QAAM,aAAa,MAAM,SAAS,oBAAoB,MAAM,MAAM,IAAI,CAAC;AACvE,MAAI,WAAW,SAAS,GAAG;AACzB,YAAQ,SAAS,WAAW,WAAW,IAAI,EAAE,KAAK,WAAW,CAAC,EAAE,IAAI,EAAE,KAAK,WAAW;AAAA,EACxF;AAEA,MAAI,MAAM,eAAe;AACvB,YAAQ,iBAAiB,EAAE,KAAK,MAAM,cAAc;AAAA,EACtD;AAEA,QAAM,cAAc,MAAM,aAAa,kBAAkB,CAAC,MAAM,UAAU,CAAC,IAAI,CAAC;AAChF,MAAI,YAAY,SAAS,GAAG;AAC1B,YAAQ,cAAc,YAAY,WAAW,IAAI,EAAE,KAAK,YAAY,CAAC,EAAE,IAAI,EAAE,KAAK,YAAY;AAAA,EAChG;AAEA,MAAI,MAAM,oBAAoB,gBAAgB;AAC5C,YAAQ,oBAAoB,EAAE,KAAK,KAAK;AAAA,EAC1C,WAAW,MAAM,iBAAiB;AAChC,YAAQ,oBAAoB,EAAE,KAAK,MAAM,gBAAgB;AAAA,EAC3D;AAEA,QAAM,eAAe,MAAM,cAAc,kBAAkB,CAAC,MAAM,WAAW,CAAC,IAAI,CAAC;AACnF,MAAI,aAAa,SAAS,GAAG;AAC3B,YAAQ,gBACN,aAAa,WAAW,IAAI,EAAE,KAAK,aAAa,CAAC,EAAE,IAAI,EAAE,KAAK,aAAa;AAAA,EAC/E;AAKA,QAAM,gBAAgB,MAAM,gBAAgB,sBAAsB,MAAM,aAAa,IAAI,CAAC;AAC1F,MAAI,cAAc,SAAS,GAAG;AAC5B,YAAQ,iBACN,cAAc,WAAW,IAAI,EAAE,KAAK,cAAc,CAAC,EAAE,IAAI,EAAE,KAAK,cAAc;AAAA,EAClF;AAEA,QAAM,oBAAoB,eAAe,MAAM,mBAAmB;AAClE,QAAM,kBAAkB,eAAe,MAAM,iBAAiB;AAC9D,MAAI,qBAAqB,iBAAiB;AACxC,UAAM,QAA8B,CAAC;AACrC,QAAI,kBAAmB,OAAM,OAAO;AACpC,QAAI,gBAAiB,OAAM,OAAO;AAClC,YAAQ,oBAAoB;AAAA,EAC9B;AAEA,MAAI,MAAM,aAAa,CAAC,MAAM,gBAAgB;AAC5C,UAAM,QAAQ,oBAAI,KAAK;AACvB,UAAM,SAAS,GAAG,GAAG,GAAG,CAAC;AACzB,QAAI,WAAW,WAAW,GAAG;AAC3B,cAAQ,SAAS,EAAE,KAAK,OAAO;AAAA,IACjC;AACA,UAAM,gBACJ,QAAQ,qBAAqB,OAAO,QAAQ,sBAAsB,WAC7D,QAAQ,oBACT,CAAC;AACP,kBAAc,MAAM;AACpB,YAAQ,oBAAoB;AAAA,EAC9B;AAEA,MAAI,MAAM,WAAW,CAAC,MAAM,kBAAkB,KAAK;AACjD,UAAM,WAAW,IAAI,MAAM;AAI3B,UAAM,iBAAiB,IAAI,MAAM;AACjC,QAAI,OAAO,aAAa,YAAY,OAAO,mBAAmB,UAAU;AACtE,YAAM,KAAK,IAAI,UAAU,QAAuB,IAAI;AACpD,YAAM,WAAW,MAAM,kBAAkB,IAAI,gBAAgB,QAAQ;AACrE,mBAAa,QAAQ;AAAA,IACvB;AAAA,EACF;AAEA,MAAI,MAAM,kBAAkB,KAAK;AAC/B,UAAM,WAAW,IAAI,MAAM;AAC3B,UAAM,iBAAiB,IAAI,MAAM;AACjC,QAAI,OAAO,aAAa,YAAY,OAAO,mBAAmB,UAAU;AACtE,YAAM,KAAK,IAAI,UAAU,QAAuB,IAAI;AACpD,YAAM,eAAe,MAAM,0BAA0B,IAAI,gBAAgB,QAAQ;AACjF,mBAAa,YAAY;AAAA,IAC3B;AAAA,EACF;AAMA,QAAM,MAAM,KAAK,UAAU,IAAI,IAAI,IAAI,QAAQ,GAAG,IAAI;AACtD,QAAM,mBAA8B,CAAC,MAAM,UAAU,MAAM,cAAc;AACzE,QAAM,oBAA+B,CAAC,MAAM,WAAW,MAAM,eAAe;AAC5E,MAAI,KAAK;AACP,qBAAiB,KAAK,IAAI,aAAa,OAAO,UAAU,CAAC;AACzD,qBAAiB,KAAK,IAAI,aAAa,OAAO,gBAAgB,CAAC;AAC/D,sBAAkB,KAAK,IAAI,aAAa,OAAO,WAAW,CAAC;AAC3D,sBAAkB,KAAK,IAAI,aAAa,OAAO,iBAAiB,CAAC;AAAA,EACnE;AACA,QAAM,oBAAoB,kBAAkB,gBAAgB;AAC5D,QAAM,qBAAqB,kBAAkB,iBAAiB;AAC9D,OAAK,kBAAkB,SAAS,KAAK,mBAAmB,SAAS,MAAM,KAAK;AAC1E,UAAM,WAAW,IAAI,MAAM;AAI3B,UAAM,iBAAiB,IAAI,MAAM;AACjC,QAAI,OAAO,aAAa,YAAY,OAAO,mBAAmB,UAAU;AACtE,YAAM,KAAK,IAAI,UAAU,QAAuB,IAAI;AACpD,YAAM,aAAa,MAAM;AAAA,QACvB;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAEA,mBAAa,UAAU;AAAA,IACzB;AAAA,EACF;AAEA,MAAI,OAAO,oBAAoB;AAC7B,UAAM,kBAAkB,wBAAwB,EAAE,GAAG,QAAQ,GAAG,kBAAkB;AAClF,UAAM,aAAa,MAAM,qCAAqC;AAAA,MAC5D;AAAA,MACA,UAAU,EAAE,UAAU;AAAA,MACtB,SAAS;AAAA,IACX,CAAC;AACD,QAAI,eAAe,MAAM;AACvB,mBAAa,UAAU;AAAA,IACzB;AAAA,EACF;AAEA,MAAI,kBAAkB,MAAM;AAC1B,6BAAyB,SAAS,aAAa;AAAA,EACjD;AAEA,SAAO;AACT;AAEA,MAAM,OAAO,cAA+C;AAAA,EAC1D,UAAU;AAAA,EACV,KAAK;AAAA,IACH,QAAQ;AAAA,IACR,SAAS;AAAA,IACT,UAAU;AAAA,IACV,aAAa;AAAA,IACb,iBAAiB;AAAA,EACnB;AAAA,EACA,SAAS;AAAA,IACP,YAAY,EAAE,UAAU;AAAA,EAC1B;AAAA,EACA,WAAW,EAAE,UAAU,iBAAiB;AAAA,EACxC,MAAM;AAAA,IACJ,QAAQ;AAAA,IACR,UAAU,EAAE,UAAU;AAAA,IACtB,QAAQ;AAAA,MACN;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,IACA,sBAAsB;AAAA,MACpB,WAAW,EAAE,UAAU;AAAA,IACzB;AAAA,IACA,cAAc;AAAA,MACZ,WAAW;AAAA,MACX,WAAW;AAAA,MACX,OAAO;AAAA,MACP,OAAO;AAAA,MACP,aAAa;AAAA,MACb,iBAAiB;AAAA,IACnB;AAAA,IACA,cAAc;AAAA,EAChB;AAAA,EACA,SAAS;AAAA,IACP,QAAQ;AAAA,MACN,WAAW;AAAA,MACX,QAAQ;AAAA,MACR,UAAU,OAAO,EAAE,KAAK,IAAI,MAAM;AAChC,cAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,eAAO,wBAAwB,kBAAkB,OAAO,CAAC,GAAG,KAAK,SAAS;AAAA,MAC5E;AAAA,MACA,UAAU,CAAC,EAAE,OAAO,OAAO,EAAE,IAAI,QAAQ,UAAU,QAAQ,MAAM,KAAK;AAAA,MACtE,QAAQ;AAAA,IACV;AAAA,IACA,QAAQ;AAAA,MACN,WAAW;AAAA,MACX,QAAQ;AAAA,MACR,UAAU,OAAO,EAAE,KAAK,IAAI,MAAM;AAChC,cAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,eAAO,wBAAwB,kBAAkB,OAAO,CAAC,GAAG,KAAK,SAAS;AAAA,MAC5E;AAAA,MACA,UAAU,OAAO,EAAE,IAAI,KAAK;AAAA,IAC9B;AAAA,IACA,QAAQ;AAAA,MACN,WAAW;AAAA,MACX,QAAQ;AAAA,MACR,UAAU,OAAO,EAAE,QAAQ,IAAI,MAAM;AACnC,cAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,cAAM,KACJ,QAAQ,MAAM,MACd,QAAQ,MACR,QAAQ,OAAO,OACd,IAAI,UAAU,IAAI,IAAI,IAAI,QAAQ,GAAG,EAAE,aAAa,IAAI,IAAI,IAAI;AACnE,YAAI,CAAC,GAAI,OAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,kCAAkC,qBAAqB,EAAE,CAAC;AACnH,eAAO,EAAE,GAAG;AAAA,MACd;AAAA,MACA,UAAU,OAAO,EAAE,IAAI,KAAK;AAAA,IAC9B;AAAA,EACF;AAAA,EACA,OAAO;AAAA;AAAA;AAAA;AAAA;AAAA,IAKL,WAAW,OAAO,SAAS,QAAQ;AACjC,YAAM,QAAQ,MAAM,QAAQ,QAAQ,KAAK,IAAI,QAAQ,QAAQ,CAAC;AAC9D,UAAI,CAAC,MAAM,OAAQ;AACnB,YAAM,cAAe,MAAM,CAAC,KAAK,CAAC;AAClC,YAAM,cAAc,YAAY,YAAY,YAAY;AACxD,YAAM,oBAAoB,OAAO,gBAAgB,YAAY,YAAY,KAAK,EAAE,SAAS,cAAc,SAAS,IAAI,MAAM,YAAY;AACtI,YAAM,WAAW,YAAY,kBAAkB,YAAY;AAC3D,YAAM,0BAA0B,OAAO,aAAa,YAAY,SAAS,KAAK,EAAE,SAAS,WAAW,SAAS,IAAI,MAAM,SAAS;AAChI,YAAM,MAAM,MACT,IAAI,CAAC,SAAkB;AACtB,YAAI,CAAC,QAAQ,OAAO,SAAS,SAAU,QAAO;AAC9C,cAAM,YAAa,KAAiC;AACpD,eAAO,OAAO,cAAc,YAAY,UAAU,KAAK,EAAE,SAAS,YAAY;AAAA,MAChF,CAAC,EACA,OAAO,CAAC,UAA0C,OAAO,UAAU,YAAY,MAAM,SAAS,CAAC;AAClG,UAAI,CAAC,IAAI,QAAQ;AACf,gBAAQ,QAAQ,CAAC;AACjB,gBAAQ,QAAQ;AAChB;AAAA,MACF;AACA,UAAI;AACF,cAAM,KAAM,IAAI,UAAU,QAAQ,IAAI;AACtC,cAAM,CAAC,gBAAgB,eAAe,IAAI,MAAM,QAAQ,IAAI;AAAA,UAC1D;AAAA,YACE;AAAA,YACA;AAAA,YACA,EAAE,MAAM,EAAE,KAAK,IAAI,EAAE;AAAA,YACrB,EAAE,UAAU,CAAC,QAAQ,EAAE;AAAA,YACvB,EAAE,UAAU,kBAAkB,gBAAgB,uBAAuB;AAAA,UACvE;AAAA,UACA;AAAA,YACE;AAAA,YACA;AAAA,YACA,EAAE,MAAM,EAAE,KAAK,IAAI,EAAE;AAAA,YACrB,EAAE,UAAU,CAAC,SAAS,EAAE;AAAA,YACxB,EAAE,UAAU,kBAAkB,gBAAgB,uBAAuB;AAAA,UACvE;AAAA,QACF,CAAC;AAED,cAAM,oBAAoB,oBAAI,IAA6C;AAC3E,uBAAe,QAAQ,CAAC,SAAS;AAC/B,gBAAM,OAAO,KAAK;AAClB,gBAAM,aAAa,QAAQ,OAAO,SAAS,WAAW,OAA6C;AACnG,gBAAM,SAAS,OAAO,SAAS,WAAW,OACtC,cAAc,OAAO,WAAW,OAAO,WAAW,WAAW,KAC7D;AACJ,cAAI,CAAC,OAAQ;AACb,gBAAM,YAAY,KAAK;AACvB,gBAAM,eAAe,aAAa,OAAO,cAAc,WAAW,YAAkD;AACpH,gBAAM,WAAW,OAAO,cAAc,WAAW,YAC7C,gBAAgB,OAAO,aAAa,OAAO,WAAW,aAAa,KACnE;AACJ,cAAI,CAAC,SAAU;AACf,gBAAM,QAAQ,gBAAgB,OAAO,aAAa,gBAAgB,WAC9D,aAAa,cACb;AACJ,gBAAM,SAAS,kBAAkB,IAAI,MAAM,KAAK,CAAC;AACjD,cAAI,CAAC,OAAO,KAAK,CAAC,UAAU,MAAM,OAAO,QAAQ,GAAG;AAClD,mBAAO,KAAK,EAAE,IAAI,UAAU,MAAM,CAAC;AACnC,8BAAkB,IAAI,QAAQ,MAAM;AAAA,UACtC;AAAA,QACF,CAAC;AAED,cAAM,qBAAqB,oBAAI,IAA6C;AAC5E,wBAAgB,QAAQ,CAAC,SAAS;AAChC,gBAAM,OAAO,KAAK;AAClB,gBAAM,aAAa,QAAQ,OAAO,SAAS,WAAW,OAA6C;AACnG,gBAAM,SAAS,OAAO,SAAS,WAAW,OACtC,cAAc,OAAO,WAAW,OAAO,WAAW,WAAW,KAC7D;AACJ,cAAI,CAAC,OAAQ;AACb,gBAAM,aAAa,KAAK;AACxB,gBAAM,gBAAgB,cAAc,OAAO,eAAe,WAAW,aAAmD;AACxH,gBAAM,YAAY,OAAO,eAAe,WAAW,aAC/C,iBAAiB,OAAO,cAAc,OAAO,WAAW,cAAc,KACtE;AACJ,cAAI,CAAC,UAAW;AAChB,gBAAM,QAAQ,iBAAiB,OAAO,cAAc,gBAAgB,WAChE,cAAc,cACd;AACJ,gBAAM,SAAS,mBAAmB,IAAI,MAAM,KAAK,CAAC;AAClD,cAAI,CAAC,OAAO,KAAK,CAAC,UAAU,MAAM,OAAO,SAAS,GAAG;AACnD,mBAAO,KAAK,EAAE,IAAI,WAAW,MAAM,CAAC;AACpC,+BAAmB,IAAI,QAAQ,MAAM;AAAA,UACvC;AAAA,QACF,CAAC;AAED,cAAM,gBAAgB,MACnB,IAAI,CAAC,SAAkB;AACtB,cAAI,CAAC,QAAQ,OAAO,SAAS,SAAU,QAAO;AAC9C,gBAAM,OAAO;AACb,gBAAM,YAAY,OAAO,KAAK,OAAO,WAAW,KAAK,KAAK;AAC1D,cAAI,CAAC,aAAa,CAAC,UAAU,KAAK,EAAE,OAAQ,QAAO;AACnD,gBAAM,SAAS,kBAAkB,IAAI,SAAS,KAAK,CAAC;AACpD,gBAAM,YAAY,mBAAmB,IAAI,SAAS,KAAK,CAAC;AACxD,gBAAMC,eACJ,OAAO,KAAK,aAAa,WACrB,KAAK,WACL,OAAO,KAAK,cAAc,WACxB,KAAK,YACL;AACR,gBAAM,oBACJ,OAAO,KAAK,mBAAmB,WAC3B,KAAK,iBACL,OAAO,KAAK,oBAAoB,WAC9B,KAAK,kBACL;AACR,gBAAM,WAAWA,gBAAeA,aAAY,KAAK,EAAE,SAASA,aAAY,KAAK,IAAI;AACjF,gBAAM,iBAAiB,qBAAqB,kBAAkB,KAAK,EAAE,SAAS,kBAAkB,KAAK,IAAI;AACzG,iBAAO;AAAA,YACL,GAAG;AAAA,YACH,WAAW,OAAO,IAAI,CAAC,UAAU,MAAM,EAAE;AAAA,YACzC;AAAA,YACA,YAAY,UAAU,IAAI,CAAC,UAAU,MAAM,EAAE;AAAA,YAC7C;AAAA,YACA;AAAA,YACA;AAAA,UACF;AAAA,QACF,CAAC,EACA;AAAA,UACC,CAAC,SAA0E,SAAS;AAAA,QACtF;AAEF,gBAAQ,QAAQ;AAAA,MAClB,SAAS,KAAK;AAKZ,eAAO,KAAK,sDAAsD,EAAE,WAAW,SAAS,IAAI,CAAC;AAC7F,gBAAQ,QAAQ,MAAM,IAAI,CAAC,SAAkB;AAC3C,cAAI,CAAC,QAAQ,OAAO,SAAS,SAAU,QAAO;AAC9C,iBAAO;AAAA,YACL,GAAI;AAAA,YACJ,eAAe;AAAA,cACb,IAAI;AAAA,cACJ,QAAQ,eAAe,QAAQ,IAAI,UAAU;AAAA,YAC/C;AAAA,UACF;AAAA,QACF,CAAC;AAAA,MACH;AAAA,IACF;AAAA,EACF;AACF,CAAC;AAED,MAAM,EAAE,MAAM,KAAK,OAAO,IAAI;AAGvB,MAAM,MAAM,KAAK;AAExB,MAAM,wBAAwB,EAAE,OAAO;AAAA,EACrC,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,OAAO,EAAE,OAAO,EAAE,SAAS;AAC7B,CAAC;AAED,MAAM,qBAAqB,EACxB,OAAO;AAAA,EACN,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,OAAO,EAAE,OAAO,EAAE,SAAS;AAAA,EAC3B,aAAa,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC5C,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACvC,gBAAgB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC/C,aAAa,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS;AAAA,EACnD,mBAAmB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS;AAAA,EACzD,cAAc,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC7C,gBAAgB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC/C,aAAa,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC5C,mBAAmB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAClD,eAAe,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS;AAAA,EACrD,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACvC,iBAAiB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS;AAAA,EACvD,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS;AAAA,EACjD,YAAY,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC3C,YAAY,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC3C,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,SAAS;AAAA,EAC/C,QAAQ,EAAE,MAAM,qBAAqB,EAAE,SAAS;AAAA,EAChD,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,SAAS;AAAA,EAChD,WAAW,EAAE,MAAM,qBAAqB,EAAE,SAAS;AAAA,EACnD,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS;AAAA,EACtD,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS;AAClD,CAAC,EACA,YAAY;AAEf,MAAM,2BAA2B,EAAE,OAAO;AAAA,EACxC,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AACjC,CAAC;AAEM,MAAM,UAAU,2BAA2B;AAAA,EAChD,cAAc;AAAA,EACd,aAAa;AAAA,EACb,oBAAoB,8BAA8B,kBAAkB;AAAA,EACpE,QAAQ;AAAA,IACN,QAAQ;AAAA,IACR,gBAAgB;AAAA,IAChB,aAAa;AAAA,EACf;AAAA,EACA,QAAQ;AAAA,IACN,QAAQ;AAAA,IACR,gBAAgB;AAAA,IAChB,aAAa;AAAA,EACf;AAAA,EACA,KAAK;AAAA,IACH,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAAA,IAC1C,gBAAgB;AAAA,IAChB,aAAa;AAAA,EACf;AACF,CAAC;",
   "names": ["parsed", "tenantIdRaw"]
 }

package/dist/modules/customers/api/entity-roles-factory.js

@@ -57,9 +57,9 @@ async function buildContext(request) {
     ctx: context.commandContext
   };
 }
-function ensureRouteOrganizationAccess(organizationId, scope, auth, notFoundMessage) {
+function ensureRouteOrganizationAccess(organizationId, scope, auth, translate) {
   if (!isOrganizationReadAccessAllowed({ scope, auth, organizationId })) {
-    throw notFound(notFoundMessage);
+    throw new CrudHttpError(403, { error: translate("customers.errors.access_denied", "Access denied") });
   }
 }
 async function ensureFeatureOnOrganization(container, auth, feature, organizationId, translate) {
@@ -96,7 +96,7 @@ async function resolveEntityRouteScope(em, auth, scope, entityType, entityId, tr
   if (!entity || entity.tenantId !== auth.tenantId) {
     throw notFound(translate("customers.errors.customer_not_found", "Customer not found"));
   }
-  ensureRouteOrganizationAccess(entity.organizationId, scope, auth, translate("customers.errors.customer_not_found", "Customer not found"));
+  ensureRouteOrganizationAccess(entity.organizationId, scope, auth, translate);
   return {
     entity,
     organizationId: entity.organizationId,
@@ -114,7 +114,7 @@ async function resolveRoleRouteScope(em, auth, scope, entityType, entityId, role
   if (!role || role.tenantId !== auth.tenantId || role.entityType !== entityType || role.entityId !== entityId) {
     throw notFound(translate("customers.errors.role_not_found", "Role not found"));
   }
-  ensureRouteOrganizationAccess(role.organizationId, scope, auth, translate("customers.errors.role_not_found", "Role not found"));
+  ensureRouteOrganizationAccess(role.organizationId, scope, auth, translate);
   return {
     role,
     organizationId: role.organizationId,

package/dist/modules/customers/api/entity-roles-factory.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/customers/api/entity-roles-factory.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { CommandBus } from '@open-mercato/shared/lib/commands'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { readJsonSafe } from '@open-mercato/shared/lib/http/readJsonSafe'\nimport { validateCrudMutationGuard, runCrudMutationGuardAfterSuccess } from '@open-mercato/shared/lib/crud/mutation-guard'\nimport { CrudHttpError, isCrudHttpError, notFound } from '@open-mercato/shared/lib/crud/errors'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { findOneWithDecryption, findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { isOrganizationReadAccessAllowed } from '@open-mercato/core/modules/directory/utils/organizationScopeGuard'\nimport { User } from '@open-mercato/core/modules/auth/data/entities'\nimport type { RbacService } from '@open-mercato/core/modules/auth/services/rbacService'\nimport { CustomerEntity, CustomerEntityRole } from '../data/entities'\nimport { entityRoleCreateSchema, entityRoleUpdateSchema, entityRoleDeleteSchema, type EntityRoleCreateInput, type EntityRoleUpdateInput, type EntityRoleDeleteInput } from '../data/validators'\nimport { withScopedPayload } from './utils'\nimport { resolveCustomersRequestContext, resolveAuthActorId } from '../lib/interactionRequestContext'\nimport { deriveDisplayNameFromEmail } from '../lib/displayName'\nimport { withOperationMetadata } from '../lib/operationMetadata'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('customers')\n\nconst paramsSchema = z.object({ id: z.string().uuid() })\nconst roleIdQuerySchema = z.object({ roleId: z.string().uuid() })\n\nconst createBodySchema = z.object({\n  roleType: z.string().trim().min(1).max(100),\n  userId: z.string().uuid(),\n})\nconst updateBodySchema = z.object({\n  userId: z.string().uuid(),\n})\n\nconst listItemSchema = z.object({\n  id: z.string().uuid(),\n  entityType: z.enum(['company', 'person']),\n  entityId: z.string().uuid(),\n  userId: z.string().uuid(),\n  userName: z.string().nullable().optional(),\n  userEmail: z.string().nullable().optional(),\n  userPhone: z.string().nullable().optional(),\n  roleType: z.string(),\n  createdAt: z.string(),\n  updatedAt: z.string(),\n})\n\nconst listResponseSchema = z.object({ items: z.array(listItemSchema) })\nconst okResponseSchema = z.object({ ok: z.boolean() })\nconst createResponseSchema = z.object({ id: z.string().uuid() })\nconst errorSchema = z.object({ error: z.string() })\n\ntype EntityType = 'company' | 'person'\n\ntype Translator = Awaited<ReturnType<typeof resolveTranslations>>['translate']\n\nfunction getRoleContext(entityType: EntityType, entityId: string) {\n  const resourceKind = entityType === 'company' ? 'customers.company' : 'customers.person'\n  return { entityType, entityId, resourceKind, resourceId: entityId }\n}\n\nfunction buildValidationErrorResponse(error: z.ZodError, translate: Translator) {\n  return NextResponse.json(\n    { error: translate('customers.errors.validationFailed', 'Validation failed'), fieldErrors: error.flatten().fieldErrors },\n    { status: 400 },\n  )\n}\n\nasync function buildContext(request: Request) {\n  const context = await resolveCustomersRequestContext(request)\n  return {\n    ...context,\n    ctx: context.commandContext,\n  }\n}\n\nfunction ensureRouteOrganizationAccess(\n  organizationId: string,\n  scope: Awaited<ReturnType<typeof resolveCustomersRequestContext>>['scope'],\n  auth: Awaited<ReturnType<typeof resolveCustomersRequestContext>>['auth'],\n  notFoundMessage: string,\n) {\n  // Existence oracle (#5504): a caller who holds the feature but whose scope\n  // excludes the record's organization is denied as not-found (the same response\n  // the caller gets for a missing record), so this cannot reveal that the record\n  // exists in an organization they cannot see.\n  if (!isOrganizationReadAccessAllowed({ scope, auth, organizationId })) {\n    throw notFound(notFoundMessage)\n  }\n}\n\nasync function ensureFeatureOnOrganization(\n  container: Awaited<ReturnType<typeof resolveCustomersRequestContext>>['container'],\n  auth: Awaited<ReturnType<typeof resolveCustomersRequestContext>>['auth'],\n  feature: string,\n  organizationId: string,\n  translate: Translator,\n) {\n  const actorId = resolveAuthActorId(auth)\n  if (!actorId) {\n    throw new CrudHttpError(401, { error: translate('customers.errors.unauthorized', 'Unauthorized') })\n  }\n  let rbac: RbacService | undefined\n  try {\n    rbac = container.resolve('rbacService') as RbacService | undefined\n  } catch (err) {\n    logger.error('rbacService resolve failed', { component: 'entity-roles-factory', err })\n    rbac = undefined\n  }\n  if (!rbac) {\n    throw new CrudHttpError(500, { error: translate('customers.errors.internal', 'Internal error') })\n  }\n  const hasFeature = await rbac.userHasAllFeatures(actorId, [feature], {\n    tenantId: auth.tenantId,\n    organizationId,\n  })\n  if (!hasFeature) {\n    throw new CrudHttpError(403, { error: translate('customers.errors.access_denied', 'Access denied') })\n  }\n}\n\nasync function resolveEntityRouteScope(\n  em: Awaited<ReturnType<typeof resolveCustomersRequestContext>>['em'],\n  auth: Awaited<ReturnType<typeof resolveCustomersRequestContext>>['auth'],\n  scope: Awaited<ReturnType<typeof resolveCustomersRequestContext>>['scope'],\n  entityType: EntityType,\n  entityId: string,\n  translate: Translator,\n) {\n  const entity = await findOneWithDecryption(\n    em,\n    CustomerEntity,\n    { id: entityId, kind: entityType, tenantId: auth.tenantId, deletedAt: null },\n    undefined,\n    { tenantId: auth.tenantId, organizationId: scope?.selectedId ?? auth.orgId ?? null },\n  )\n  if (!entity || entity.tenantId !== auth.tenantId) {\n    throw notFound(translate('customers.errors.customer_not_found', 'Customer not found'))\n  }\n  ensureRouteOrganizationAccess(entity.organizationId, scope, auth, translate('customers.errors.customer_not_found', 'Customer not found'))\n  return {\n    entity,\n    organizationId: entity.organizationId,\n    tenantId: entity.tenantId,\n  }\n}\n\nasync function resolveRoleRouteScope(\n  em: Awaited<ReturnType<typeof resolveCustomersRequestContext>>['em'],\n  auth: Awaited<ReturnType<typeof resolveCustomersRequestContext>>['auth'],\n  scope: Awaited<ReturnType<typeof resolveCustomersRequestContext>>['scope'],\n  entityType: EntityType,\n  entityId: string,\n  roleId: string,\n  translate: Translator,\n) {\n  const role = await findOneWithDecryption(\n    em,\n    CustomerEntityRole,\n    { id: roleId, tenantId: auth.tenantId, entityType, entityId, deletedAt: null },\n    undefined,\n    { tenantId: auth.tenantId, organizationId: scope?.selectedId ?? auth.orgId ?? null },\n  )\n  if (\n    !role ||\n    role.tenantId !== auth.tenantId ||\n    role.entityType !== entityType ||\n    role.entityId !== entityId\n  ) {\n    throw notFound(translate('customers.errors.role_not_found', 'Role not found'))\n  }\n  ensureRouteOrganizationAccess(role.organizationId, scope, auth, translate('customers.errors.role_not_found', 'Role not found'))\n  return {\n    role,\n    organizationId: role.organizationId,\n    tenantId: role.tenantId,\n  }\n}\n\nfunction createScopedCommandContext(\n  ctx: Awaited<ReturnType<typeof buildContext>>['ctx'],\n  organizationId: string,\n) {\n  return {\n    ...ctx,\n    selectedOrganizationId: organizationId,\n    organizationIds: [organizationId],\n  }\n}\n\nexport const entityRolesMetadata = {\n  GET: { requireAuth: true, requireFeatures: ['customers.roles.view'] },\n  POST: { requireAuth: true, requireFeatures: ['customers.roles.manage'] },\n  PUT: { requireAuth: true, requireFeatures: ['customers.roles.manage'] },\n  DELETE: { requireAuth: true, requireFeatures: ['customers.roles.manage'] },\n}\n\nexport function buildEntityRolesOpenApi(entityType: EntityType): OpenApiRouteDoc {\n  const label = entityType === 'company' ? 'company' : 'person'\n  return {\n    tag: 'Customers',\n    summary: `${label.charAt(0).toUpperCase() + label.slice(1)} role assignments`,\n    pathParams: paramsSchema,\n    methods: {\n      GET: {\n        summary: `List roles for a ${label}`,\n        responses: [{ status: 200, description: 'Role assignments', schema: listResponseSchema }],\n        errors: [\n          { status: 400, description: 'Invalid request', schema: errorSchema },\n          { status: 401, description: 'Unauthorized', schema: errorSchema },\n        ],\n      },\n      POST: {\n        summary: `Assign a role to a ${label}`,\n        requestBody: { contentType: 'application/json', schema: createBodySchema },\n        responses: [{ status: 201, description: 'Role created', schema: createResponseSchema }],\n        errors: [\n          { status: 400, description: 'Invalid request', schema: errorSchema },\n          { status: 401, description: 'Unauthorized', schema: errorSchema },\n          { status: 409, description: 'Role already assigned', schema: errorSchema },\n        ],\n      },\n      PUT: {\n        summary: `Update a ${label} role assignment`,\n        query: roleIdQuerySchema,\n        requestBody: { contentType: 'application/json', schema: updateBodySchema },\n        responses: [{ status: 200, description: 'Role updated', schema: okResponseSchema }],\n        errors: [\n          { status: 400, description: 'Invalid request', schema: errorSchema },\n          { status: 401, description: 'Unauthorized', schema: errorSchema },\n          { status: 404, description: 'Role not found', schema: errorSchema },\n        ],\n      },\n      DELETE: {\n        summary: `Remove a ${label} role assignment`,\n        query: roleIdQuerySchema,\n        responses: [{ status: 200, description: 'Role deleted', schema: okResponseSchema }],\n        errors: [\n          { status: 400, description: 'Invalid request', schema: errorSchema },\n          { status: 401, description: 'Unauthorized', schema: errorSchema },\n          { status: 404, description: 'Role not found', schema: errorSchema },\n        ],\n      },\n    },\n  }\n}\n\nexport function createEntityRolesHandlers(entityType: EntityType) {\n  const resourceKind = entityType === 'company' ? 'customers.company' : 'customers.person'\n  const logPrefix = entityType === 'company' ? 'customers.company.roles' : 'customers.person.roles'\n\n  async function GET(request: Request, { params }: { params: { id: string } }) {\n    const { translate } = await resolveTranslations()\n    try {\n      const { id: entityId } = paramsSchema.parse(params)\n      const { container, em, auth, scope } = await buildContext(request)\n      const targetScope = await resolveEntityRouteScope(em, auth, scope, entityType, entityId, translate)\n      await ensureFeatureOnOrganization(container, auth, 'customers.roles.view', targetScope.organizationId, translate)\n\n      const roles = await findWithDecryption(\n        em,\n        CustomerEntityRole,\n        {\n          entityType,\n          entityId,\n          organizationId: targetScope.organizationId,\n          tenantId: targetScope.tenantId,\n          deletedAt: null,\n        },\n        { orderBy: { roleType: 'asc' } },\n        {\n          tenantId: targetScope.tenantId,\n          organizationId: targetScope.organizationId,\n        },\n      )\n\n      const userIds = Array.from(new Set(roles.map((role) => role.userId).filter((value): value is string => typeof value === 'string' && value.length > 0)))\n      const users = userIds.length\n        ? await findWithDecryption(\n            em,\n            User,\n            {\n              id: { $in: userIds },\n              deletedAt: null,\n              ...(targetScope.tenantId ? { tenantId: targetScope.tenantId } : {}),\n            },\n            undefined,\n            {\n              tenantId: targetScope.tenantId,\n              organizationId: targetScope.organizationId,\n            },\n          )\n        : []\n      const userMap = new Map(users.map((user) => [user.id, {\n        name: user.name ?? deriveDisplayNameFromEmail(user.email) ?? null,\n        email: user.email ?? null,\n        phone: null,\n      }]))\n\n      return NextResponse.json({\n        items: roles.map((role) => ({\n          ...(userMap.has(role.userId)\n            ? {\n                userName: userMap.get(role.userId)?.name ?? null,\n                userEmail: userMap.get(role.userId)?.email ?? null,\n                userPhone: userMap.get(role.userId)?.phone ?? null,\n              }\n            : {}),\n          id: role.id,\n          entityType: role.entityType,\n          entityId: role.entityId,\n          userId: role.userId,\n          roleType: role.roleType,\n          createdAt: role.createdAt.toISOString(),\n          updatedAt: role.updatedAt.toISOString(),\n        })),\n      })\n    } catch (err) {\n      if (isCrudHttpError(err)) return NextResponse.json(err.body, { status: err.status })\n      if (err instanceof z.ZodError) return buildValidationErrorResponse(err, translate)\n      logger.error('Entity roles GET failed', { component: logPrefix, err })\n      return NextResponse.json({ error: translate('customers.errors.failed_to_load_roles', 'Failed to load roles') }, { status: 500 })\n    }\n  }\n\n  async function POST(request: Request, { params }: { params: { id: string } }) {\n    const { translate } = await resolveTranslations()\n    try {\n      const { id: entityId } = paramsSchema.parse(params)\n      const { container, em, auth, scope, ctx } = await buildContext(request)\n      const targetScope = await resolveEntityRouteScope(em, auth, scope, entityType, entityId, translate)\n      await ensureFeatureOnOrganization(container, auth, 'customers.roles.manage', targetScope.organizationId, translate)\n      const commandCtx = createScopedCommandContext(ctx, targetScope.organizationId)\n\n      const rawBody = await readJsonSafe<Record<string, unknown>>(request, {})\n      const scoped = withScopedPayload(\n        {\n          ...rawBody,\n          organizationId: targetScope.organizationId,\n          tenantId: targetScope.tenantId,\n          ...getRoleContext(entityType, entityId),\n        },\n        commandCtx,\n        translate,\n      )\n      const parsed = entityRoleCreateSchema.parse(scoped)\n\n      const guardUserId = resolveAuthActorId(auth)\n      const guardResult = await validateCrudMutationGuard(container, {\n        tenantId: targetScope.tenantId, organizationId: targetScope.organizationId, userId: guardUserId,\n        resourceKind, resourceId: entityId, operation: 'custom',\n        requestMethod: request.method, requestHeaders: request.headers, mutationPayload: rawBody,\n      })\n      if (guardResult && !guardResult.ok) return NextResponse.json(guardResult.body, { status: guardResult.status })\n\n      const commandBus = container.resolve('commandBus') as CommandBus\n      const { result, logEntry } = await commandBus.execute<EntityRoleCreateInput, { roleId: string }>(\n        'customers.entityRoles.create',\n        { input: parsed, ctx: commandCtx },\n      )\n\n      if (guardResult?.ok && guardResult.shouldRunAfterSuccess) {\n        await runCrudMutationGuardAfterSuccess(container, {\n          tenantId: targetScope.tenantId, organizationId: targetScope.organizationId, userId: guardUserId,\n          resourceKind, resourceId: entityId, operation: 'custom',\n          requestMethod: request.method, requestHeaders: request.headers, metadata: guardResult.metadata ?? null,\n        })\n      }\n\n      return withOperationMetadata(\n        NextResponse.json({ id: result?.roleId ?? null }, { status: 201 }),\n        logEntry,\n        { resourceKind, resourceId: entityId },\n      )\n    } catch (err) {\n      if (isCrudHttpError(err)) return NextResponse.json(err.body, { status: err.status })\n      if (err instanceof z.ZodError) return buildValidationErrorResponse(err, translate)\n      logger.error('Entity roles POST failed', { component: logPrefix, err })\n      return NextResponse.json({ error: translate('customers.errors.failed_to_assign_role', 'Failed to assign role') }, { status: 500 })\n    }\n  }\n\n  async function PUT(request: Request, { params }: { params: { id: string } }) {\n    const { translate } = await resolveTranslations()\n    try {\n      const { id: entityId } = paramsSchema.parse(params)\n      const { roleId } = roleIdQuerySchema.parse(Object.fromEntries(new URL(request.url).searchParams))\n      const { container, em, auth, scope, ctx } = await buildContext(request)\n      const targetScope = await resolveRoleRouteScope(em, auth, scope, entityType, entityId, roleId, translate)\n      await ensureFeatureOnOrganization(container, auth, 'customers.roles.manage', targetScope.organizationId, translate)\n      const commandCtx = createScopedCommandContext(ctx, targetScope.organizationId)\n\n      const rawBody = await readJsonSafe<Record<string, unknown>>(request, {})\n      const scoped = withScopedPayload(\n        {\n          ...rawBody,\n          id: roleId,\n          organizationId: targetScope.organizationId,\n          tenantId: targetScope.tenantId,\n        },\n        commandCtx,\n        translate,\n      )\n      const parsed = entityRoleUpdateSchema.parse(scoped)\n\n      const guardUserId = resolveAuthActorId(auth)\n      const guardResult = await validateCrudMutationGuard(container, {\n        tenantId: targetScope.tenantId, organizationId: targetScope.organizationId, userId: guardUserId,\n        resourceKind, resourceId: entityId, operation: 'custom',\n        requestMethod: request.method, requestHeaders: request.headers, mutationPayload: { roleId, ...rawBody },\n      })\n      if (guardResult && !guardResult.ok) return NextResponse.json(guardResult.body, { status: guardResult.status })\n\n      const commandBus = container.resolve('commandBus') as CommandBus\n      const { logEntry } = await commandBus.execute<EntityRoleUpdateInput, { roleId: string }>(\n        'customers.entityRoles.update',\n        { input: parsed, ctx: commandCtx },\n      )\n\n      if (guardResult?.ok && guardResult.shouldRunAfterSuccess) {\n        await runCrudMutationGuardAfterSuccess(container, {\n          tenantId: targetScope.tenantId, organizationId: targetScope.organizationId, userId: guardUserId,\n          resourceKind, resourceId: entityId, operation: 'custom',\n          requestMethod: request.method, requestHeaders: request.headers, metadata: guardResult.metadata ?? null,\n        })\n      }\n\n      return withOperationMetadata(\n        NextResponse.json({ ok: true }),\n        logEntry,\n        { resourceKind, resourceId: entityId },\n      )\n    } catch (err) {\n      if (isCrudHttpError(err)) return NextResponse.json(err.body, { status: err.status })\n      if (err instanceof z.ZodError) return buildValidationErrorResponse(err, translate)\n      logger.error('Entity roles PUT failed', { component: logPrefix, err })\n      return NextResponse.json({ error: translate('customers.errors.failed_to_update_role', 'Failed to update role') }, { status: 500 })\n    }\n  }\n\n  async function DELETE(request: Request, { params }: { params: { id: string } }) {\n    const { translate } = await resolveTranslations()\n    try {\n      const { id: entityId } = paramsSchema.parse(params)\n      const { roleId } = roleIdQuerySchema.parse(Object.fromEntries(new URL(request.url).searchParams))\n      const { container, em, auth, scope, ctx } = await buildContext(request)\n      const targetScope = await resolveRoleRouteScope(em, auth, scope, entityType, entityId, roleId, translate)\n      await ensureFeatureOnOrganization(container, auth, 'customers.roles.manage', targetScope.organizationId, translate)\n      const commandCtx = createScopedCommandContext(ctx, targetScope.organizationId)\n\n      const parsed = entityRoleDeleteSchema.parse(\n        withScopedPayload(\n          {\n            id: roleId,\n            organizationId: targetScope.organizationId,\n            tenantId: targetScope.tenantId,\n          },\n          commandCtx,\n          translate,\n        ),\n      )\n      const guardUserId = resolveAuthActorId(auth)\n      const guardResult = await validateCrudMutationGuard(container, {\n        tenantId: targetScope.tenantId, organizationId: targetScope.organizationId, userId: guardUserId,\n        resourceKind, resourceId: entityId, operation: 'custom',\n        requestMethod: request.method, requestHeaders: request.headers, mutationPayload: { roleId },\n      })\n      if (guardResult && !guardResult.ok) return NextResponse.json(guardResult.body, { status: guardResult.status })\n\n      const commandBus = container.resolve('commandBus') as CommandBus\n      const { logEntry } = await commandBus.execute<EntityRoleDeleteInput, { roleId: string }>(\n        'customers.entityRoles.delete',\n        { input: parsed, ctx: commandCtx },\n      )\n\n      if (guardResult?.ok && guardResult.shouldRunAfterSuccess) {\n        await runCrudMutationGuardAfterSuccess(container, {\n          tenantId: targetScope.tenantId, organizationId: targetScope.organizationId, userId: guardUserId,\n          resourceKind, resourceId: entityId, operation: 'custom',\n          requestMethod: request.method, requestHeaders: request.headers, metadata: guardResult.metadata ?? null,\n        })\n      }\n\n      return withOperationMetadata(\n        NextResponse.json({ ok: true }),\n        logEntry,\n        { resourceKind, resourceId: entityId },\n      )\n    } catch (err) {\n      if (isCrudHttpError(err)) return NextResponse.json(err.body, { status: err.status })\n      if (err instanceof z.ZodError) return buildValidationErrorResponse(err, translate)\n      logger.error('Entity roles DELETE failed', { component: logPrefix, err })\n      return NextResponse.json({ error: translate('customers.errors.failed_to_delete_role', 'Failed to delete role') }, { status: 500 })\n    }\n  }\n\n  return { GET, POST, PUT, DELETE }\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAGlB,SAAS,oBAAoB;AAC7B,SAAS,2BAA2B,wCAAwC;AAC5E,SAAS,eAAe,iBAAiB,gBAAgB;AACzD,SAAS,2BAA2B;AACpC,SAAS,uBAAuB,0BAA0B;AAC1D,SAAS,uCAAuC;AAChD,SAAS,YAAY;AAErB,SAAS,gBAAgB,0BAA0B;AACnD,SAAS,wBAAwB,wBAAwB,8BAAkH;AAC3K,SAAS,yBAAyB;AAClC,SAAS,gCAAgC,0BAA0B;AACnE,SAAS,kCAAkC;AAC3C,SAAS,6BAA6B;AACtC,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,WAAW;AAEvC,MAAM,eAAe,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AACvD,MAAM,oBAAoB,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAEhE,MAAM,mBAAmB,EAAE,OAAO;AAAA,EAChC,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EAC1C,QAAQ,EAAE,OAAO,EAAE,KAAK;AAC1B,CAAC;AACD,MAAM,mBAAmB,EAAE,OAAO;AAAA,EAChC,QAAQ,EAAE,OAAO,EAAE,KAAK;AAC1B,CAAC;AAED,MAAM,iBAAiB,EAAE,OAAO;AAAA,EAC9B,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,YAAY,EAAE,KAAK,CAAC,WAAW,QAAQ,CAAC;AAAA,EACxC,UAAU,EAAE,OAAO,EAAE,KAAK;AAAA,EAC1B,QAAQ,EAAE,OAAO,EAAE,KAAK;AAAA,EACxB,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACzC,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC1C,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC1C,UAAU,EAAE,OAAO;AAAA,EACnB,WAAW,EAAE,OAAO;AAAA,EACpB,WAAW,EAAE,OAAO;AACtB,CAAC;AAED,MAAM,qBAAqB,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,EAAE,CAAC;AACtE,MAAM,mBAAmB,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;AACrD,MAAM,uBAAuB,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAC/D,MAAM,cAAc,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAMlD,SAAS,eAAe,YAAwB,UAAkB;AAChE,QAAM,eAAe,eAAe,YAAY,sBAAsB;AACtE,SAAO,EAAE,YAAY,UAAU,cAAc,YAAY,SAAS;AACpE;AAEA,SAAS,6BAA6B,OAAmB,WAAuB;AAC9E,SAAO,aAAa;AAAA,IAClB,EAAE,OAAO,UAAU,qCAAqC,mBAAmB,GAAG,aAAa,MAAM,QAAQ,EAAE,YAAY;AAAA,IACvH,EAAE,QAAQ,IAAI;AAAA,EAChB;AACF;AAEA,eAAe,aAAa,SAAkB;AAC5C,QAAM,UAAU,MAAM,+BAA+B,OAAO;AAC5D,SAAO;AAAA,IACL,GAAG;AAAA,IACH,KAAK,QAAQ;AAAA,EACf;AACF;AAEA,SAAS,8BACP,gBACA,OACA,MACA,iBACA;AAKA,MAAI,CAAC,gCAAgC,EAAE,OAAO,MAAM,eAAe,CAAC,GAAG;AACrE,UAAM,SAAS,eAAe;AAAA,EAChC;AACF;AAEA,eAAe,4BACb,WACA,MACA,SACA,gBACA,WACA;AACA,QAAM,UAAU,mBAAmB,IAAI;AACvC,MAAI,CAAC,SAAS;AACZ,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,iCAAiC,cAAc,EAAE,CAAC;AAAA,EACpG;AACA,MAAI;AACJ,MAAI;AACF,WAAO,UAAU,QAAQ,aAAa;AAAA,EACxC,SAAS,KAAK;AACZ,WAAO,MAAM,8BAA8B,EAAE,WAAW,wBAAwB,IAAI,CAAC;AACrF,WAAO;AAAA,EACT;AACA,MAAI,CAAC,MAAM;AACT,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,6BAA6B,gBAAgB,EAAE,CAAC;AAAA,EAClG;AACA,QAAM,aAAa,MAAM,KAAK,mBAAmB,SAAS,CAAC,OAAO,GAAG;AAAA,IACnE,UAAU,KAAK;AAAA,IACf;AAAA,EACF,CAAC;AACD,MAAI,CAAC,YAAY;AACf,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,kCAAkC,eAAe,EAAE,CAAC;AAAA,EACtG;AACF;AAEA,eAAe,wBACb,IACA,MACA,OACA,YACA,UACA,WACA;AACA,QAAM,SAAS,MAAM;AAAA,IACnB;AAAA,IACA;AAAA,IACA,EAAE,IAAI,UAAU,MAAM,YAAY,UAAU,KAAK,UAAU,WAAW,KAAK;AAAA,IAC3E;AAAA,IACA,EAAE,UAAU,KAAK,UAAU,gBAAgB,OAAO,cAAc,KAAK,SAAS,KAAK;AAAA,EACrF;AACA,MAAI,CAAC,UAAU,OAAO,aAAa,KAAK,UAAU;AAChD,UAAM,SAAS,UAAU,uCAAuC,oBAAoB,CAAC;AAAA,EACvF;AACA,gCAA8B,OAAO,gBAAgB,OAAO,MAAM,UAAU,uCAAuC,oBAAoB,CAAC;AACxI,SAAO;AAAA,IACL;AAAA,IACA,gBAAgB,OAAO;AAAA,IACvB,UAAU,OAAO;AAAA,EACnB;AACF;AAEA,eAAe,sBACb,IACA,MACA,OACA,YACA,UACA,QACA,WACA;AACA,QAAM,OAAO,MAAM;AAAA,IACjB;AAAA,IACA;AAAA,IACA,EAAE,IAAI,QAAQ,UAAU,KAAK,UAAU,YAAY,UAAU,WAAW,KAAK;AAAA,IAC7E;AAAA,IACA,EAAE,UAAU,KAAK,UAAU,gBAAgB,OAAO,cAAc,KAAK,SAAS,KAAK;AAAA,EACrF;AACA,MACE,CAAC,QACD,KAAK,aAAa,KAAK,YACvB,KAAK,eAAe,cACpB,KAAK,aAAa,UAClB;AACA,UAAM,SAAS,UAAU,mCAAmC,gBAAgB,CAAC;AAAA,EAC/E;AACA,gCAA8B,KAAK,gBAAgB,OAAO,MAAM,UAAU,mCAAmC,gBAAgB,CAAC;AAC9H,SAAO;AAAA,IACL;AAAA,IACA,gBAAgB,KAAK;AAAA,IACrB,UAAU,KAAK;AAAA,EACjB;AACF;AAEA,SAAS,2BACP,KACA,gBACA;AACA,SAAO;AAAA,IACL,GAAG;AAAA,IACH,wBAAwB;AAAA,IACxB,iBAAiB,CAAC,cAAc;AAAA,EAClC;AACF;AAEO,MAAM,sBAAsB;AAAA,EACjC,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,sBAAsB,EAAE;AAAA,EACpE,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,wBAAwB,EAAE;AAAA,EACvE,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,wBAAwB,EAAE;AAAA,EACtE,QAAQ,EAAE,aAAa,MAAM,iBAAiB,CAAC,wBAAwB,EAAE;AAC3E;AAEO,SAAS,wBAAwB,YAAyC;AAC/E,QAAM,QAAQ,eAAe,YAAY,YAAY;AACrD,SAAO;AAAA,IACL,KAAK;AAAA,IACL,SAAS,GAAG,MAAM,OAAO,CAAC,EAAE,YAAY,IAAI,MAAM,MAAM,CAAC,CAAC;AAAA,IAC1D,YAAY;AAAA,IACZ,SAAS;AAAA,MACP,KAAK;AAAA,QACH,SAAS,oBAAoB,KAAK;AAAA,QAClC,WAAW,CAAC,EAAE,QAAQ,KAAK,aAAa,oBAAoB,QAAQ,mBAAmB,CAAC;AAAA,QACxF,QAAQ;AAAA,UACN,EAAE,QAAQ,KAAK,aAAa,mBAAmB,QAAQ,YAAY;AAAA,UACnE,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,YAAY;AAAA,QAClE;AAAA,MACF;AAAA,MACA,MAAM;AAAA,QACJ,SAAS,sBAAsB,KAAK;AAAA,QACpC,aAAa,EAAE,aAAa,oBAAoB,QAAQ,iBAAiB;AAAA,QACzE,WAAW,CAAC,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,qBAAqB,CAAC;AAAA,QACtF,QAAQ;AAAA,UACN,EAAE,QAAQ,KAAK,aAAa,mBAAmB,QAAQ,YAAY;AAAA,UACnE,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,YAAY;AAAA,UAChE,EAAE,QAAQ,KAAK,aAAa,yBAAyB,QAAQ,YAAY;AAAA,QAC3E;AAAA,MACF;AAAA,MACA,KAAK;AAAA,QACH,SAAS,YAAY,KAAK;AAAA,QAC1B,OAAO;AAAA,QACP,aAAa,EAAE,aAAa,oBAAoB,QAAQ,iBAAiB;AAAA,QACzE,WAAW,CAAC,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,iBAAiB,CAAC;AAAA,QAClF,QAAQ;AAAA,UACN,EAAE,QAAQ,KAAK,aAAa,mBAAmB,QAAQ,YAAY;AAAA,UACnE,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,YAAY;AAAA,UAChE,EAAE,QAAQ,KAAK,aAAa,kBAAkB,QAAQ,YAAY;AAAA,QACpE;AAAA,MACF;AAAA,MACA,QAAQ;AAAA,QACN,SAAS,YAAY,KAAK;AAAA,QAC1B,OAAO;AAAA,QACP,WAAW,CAAC,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,iBAAiB,CAAC;AAAA,QAClF,QAAQ;AAAA,UACN,EAAE,QAAQ,KAAK,aAAa,mBAAmB,QAAQ,YAAY;AAAA,UACnE,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,YAAY;AAAA,UAChE,EAAE,QAAQ,KAAK,aAAa,kBAAkB,QAAQ,YAAY;AAAA,QACpE;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;AAEO,SAAS,0BAA0B,YAAwB;AAChE,QAAM,eAAe,eAAe,YAAY,sBAAsB;AACtE,QAAM,YAAY,eAAe,YAAY,4BAA4B;AAEzE,iBAAe,IAAI,SAAkB,EAAE,OAAO,GAA+B;AAC3E,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,QAAI;AACF,YAAM,EAAE,IAAI,SAAS,IAAI,aAAa,MAAM,MAAM;AAClD,YAAM,EAAE,WAAW,IAAI,MAAM,MAAM,IAAI,MAAM,aAAa,OAAO;AACjE,YAAM,cAAc,MAAM,wBAAwB,IAAI,MAAM,OAAO,YAAY,UAAU,SAAS;AAClG,YAAM,4BAA4B,WAAW,MAAM,wBAAwB,YAAY,gBAAgB,SAAS;AAEhH,YAAM,QAAQ,MAAM;AAAA,QAClB;AAAA,QACA;AAAA,QACA;AAAA,UACE;AAAA,UACA;AAAA,UACA,gBAAgB,YAAY;AAAA,UAC5B,UAAU,YAAY;AAAA,UACtB,WAAW;AAAA,QACb;AAAA,QACA,EAAE,SAAS,EAAE,UAAU,MAAM,EAAE;AAAA,QAC/B;AAAA,UACE,UAAU,YAAY;AAAA,UACtB,gBAAgB,YAAY;AAAA,QAC9B;AAAA,MACF;AAEA,YAAM,UAAU,MAAM,KAAK,IAAI,IAAI,MAAM,IAAI,CAAC,SAAS,KAAK,MAAM,EAAE,OAAO,CAAC,UAA2B,OAAO,UAAU,YAAY,MAAM,SAAS,CAAC,CAAC,CAAC;AACtJ,YAAM,QAAQ,QAAQ,SAClB,MAAM;AAAA,QACJ;AAAA,QACA;AAAA,QACA;AAAA,UACE,IAAI,EAAE,KAAK,QAAQ;AAAA,UACnB,WAAW;AAAA,UACX,GAAI,YAAY,WAAW,EAAE,UAAU,YAAY,SAAS,IAAI,CAAC;AAAA,QACnE;AAAA,QACA;AAAA,QACA;AAAA,UACE,UAAU,YAAY;AAAA,UACtB,gBAAgB,YAAY;AAAA,QAC9B;AAAA,MACF,IACA,CAAC;AACL,YAAM,UAAU,IAAI,IAAI,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,IAAI;AAAA,QACpD,MAAM,KAAK,QAAQ,2BAA2B,KAAK,KAAK,KAAK;AAAA,QAC7D,OAAO,KAAK,SAAS;AAAA,QACrB,OAAO;AAAA,MACT,CAAC,CAAC,CAAC;AAEH,aAAO,aAAa,KAAK;AAAA,QACvB,OAAO,MAAM,IAAI,CAAC,UAAU;AAAA,UAC1B,GAAI,QAAQ,IAAI,KAAK,MAAM,IACvB;AAAA,YACE,UAAU,QAAQ,IAAI,KAAK,MAAM,GAAG,QAAQ;AAAA,YAC5C,WAAW,QAAQ,IAAI,KAAK,MAAM,GAAG,SAAS;AAAA,YAC9C,WAAW,QAAQ,IAAI,KAAK,MAAM,GAAG,SAAS;AAAA,UAChD,IACA,CAAC;AAAA,UACL,IAAI,KAAK;AAAA,UACT,YAAY,KAAK;AAAA,UACjB,UAAU,KAAK;AAAA,UACf,QAAQ,KAAK;AAAA,UACb,UAAU,KAAK;AAAA,UACf,WAAW,KAAK,UAAU,YAAY;AAAA,UACtC,WAAW,KAAK,UAAU,YAAY;AAAA,QACxC,EAAE;AAAA,MACJ,CAAC;AAAA,IACH,SAAS,KAAK;AACZ,UAAI,gBAAgB,GAAG,EAAG,QAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AACnF,UAAI,eAAe,EAAE,SAAU,QAAO,6BAA6B,KAAK,SAAS;AACjF,aAAO,MAAM,2BAA2B,EAAE,WAAW,WAAW,IAAI,CAAC;AACrE,aAAO,aAAa,KAAK,EAAE,OAAO,UAAU,yCAAyC,sBAAsB,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACjI;AAAA,EACF;AAEA,iBAAe,KAAK,SAAkB,EAAE,OAAO,GAA+B;AAC5E,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,QAAI;AACF,YAAM,EAAE,IAAI,SAAS,IAAI,aAAa,MAAM,MAAM;AAClD,YAAM,EAAE,WAAW,IAAI,MAAM,OAAO,IAAI,IAAI,MAAM,aAAa,OAAO;AACtE,YAAM,cAAc,MAAM,wBAAwB,IAAI,MAAM,OAAO,YAAY,UAAU,SAAS;AAClG,YAAM,4BAA4B,WAAW,MAAM,0BAA0B,YAAY,gBAAgB,SAAS;AAClH,YAAM,aAAa,2BAA2B,KAAK,YAAY,cAAc;AAE7E,YAAM,UAAU,MAAM,aAAsC,SAAS,CAAC,CAAC;AACvE,YAAM,SAAS;AAAA,QACb;AAAA,UACE,GAAG;AAAA,UACH,gBAAgB,YAAY;AAAA,UAC5B,UAAU,YAAY;AAAA,UACtB,GAAG,eAAe,YAAY,QAAQ;AAAA,QACxC;AAAA,QACA;AAAA,QACA;AAAA,MACF;AACA,YAAM,SAAS,uBAAuB,MAAM,MAAM;AAElD,YAAM,cAAc,mBAAmB,IAAI;AAC3C,YAAM,cAAc,MAAM,0BAA0B,WAAW;AAAA,QAC7D,UAAU,YAAY;AAAA,QAAU,gBAAgB,YAAY;AAAA,QAAgB,QAAQ;AAAA,QACpF;AAAA,QAAc,YAAY;AAAA,QAAU,WAAW;AAAA,QAC/C,eAAe,QAAQ;AAAA,QAAQ,gBAAgB,QAAQ;AAAA,QAAS,iBAAiB;AAAA,MACnF,CAAC;AACD,UAAI,eAAe,CAAC,YAAY,GAAI,QAAO,aAAa,KAAK,YAAY,MAAM,EAAE,QAAQ,YAAY,OAAO,CAAC;AAE7G,YAAM,aAAa,UAAU,QAAQ,YAAY;AACjD,YAAM,EAAE,QAAQ,SAAS,IAAI,MAAM,WAAW;AAAA,QAC5C;AAAA,QACA,EAAE,OAAO,QAAQ,KAAK,WAAW;AAAA,MACnC;AAEA,UAAI,aAAa,MAAM,YAAY,uBAAuB;AACxD,cAAM,iCAAiC,WAAW;AAAA,UAChD,UAAU,YAAY;AAAA,UAAU,gBAAgB,YAAY;AAAA,UAAgB,QAAQ;AAAA,UACpF;AAAA,UAAc,YAAY;AAAA,UAAU,WAAW;AAAA,UAC/C,eAAe,QAAQ;AAAA,UAAQ,gBAAgB,QAAQ;AAAA,UAAS,UAAU,YAAY,YAAY;AAAA,QACpG,CAAC;AAAA,MACH;AAEA,aAAO;AAAA,QACL,aAAa,KAAK,EAAE,IAAI,QAAQ,UAAU,KAAK,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,QACjE;AAAA,QACA,EAAE,cAAc,YAAY,SAAS;AAAA,MACvC;AAAA,IACF,SAAS,KAAK;AACZ,UAAI,gBAAgB,GAAG,EAAG,QAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AACnF,UAAI,eAAe,EAAE,SAAU,QAAO,6BAA6B,KAAK,SAAS;AACjF,aAAO,MAAM,4BAA4B,EAAE,WAAW,WAAW,IAAI,CAAC;AACtE,aAAO,aAAa,KAAK,EAAE,OAAO,UAAU,0CAA0C,uBAAuB,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACnI;AAAA,EACF;AAEA,iBAAe,IAAI,SAAkB,EAAE,OAAO,GAA+B;AAC3E,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,QAAI;AACF,YAAM,EAAE,IAAI,SAAS,IAAI,aAAa,MAAM,MAAM;AAClD,YAAM,EAAE,OAAO,IAAI,kBAAkB,MAAM,OAAO,YAAY,IAAI,IAAI,QAAQ,GAAG,EAAE,YAAY,CAAC;AAChG,YAAM,EAAE,WAAW,IAAI,MAAM,OAAO,IAAI,IAAI,MAAM,aAAa,OAAO;AACtE,YAAM,cAAc,MAAM,sBAAsB,IAAI,MAAM,OAAO,YAAY,UAAU,QAAQ,SAAS;AACxG,YAAM,4BAA4B,WAAW,MAAM,0BAA0B,YAAY,gBAAgB,SAAS;AAClH,YAAM,aAAa,2BAA2B,KAAK,YAAY,cAAc;AAE7E,YAAM,UAAU,MAAM,aAAsC,SAAS,CAAC,CAAC;AACvE,YAAM,SAAS;AAAA,QACb;AAAA,UACE,GAAG;AAAA,UACH,IAAI;AAAA,UACJ,gBAAgB,YAAY;AAAA,UAC5B,UAAU,YAAY;AAAA,QACxB;AAAA,QACA;AAAA,QACA;AAAA,MACF;AACA,YAAM,SAAS,uBAAuB,MAAM,MAAM;AAElD,YAAM,cAAc,mBAAmB,IAAI;AAC3C,YAAM,cAAc,MAAM,0BAA0B,WAAW;AAAA,QAC7D,UAAU,YAAY;AAAA,QAAU,gBAAgB,YAAY;AAAA,QAAgB,QAAQ;AAAA,QACpF;AAAA,QAAc,YAAY;AAAA,QAAU,WAAW;AAAA,QAC/C,eAAe,QAAQ;AAAA,QAAQ,gBAAgB,QAAQ;AAAA,QAAS,iBAAiB,EAAE,QAAQ,GAAG,QAAQ;AAAA,MACxG,CAAC;AACD,UAAI,eAAe,CAAC,YAAY,GAAI,QAAO,aAAa,KAAK,YAAY,MAAM,EAAE,QAAQ,YAAY,OAAO,CAAC;AAE7G,YAAM,aAAa,UAAU,QAAQ,YAAY;AACjD,YAAM,EAAE,SAAS,IAAI,MAAM,WAAW;AAAA,QACpC;AAAA,QACA,EAAE,OAAO,QAAQ,KAAK,WAAW;AAAA,MACnC;AAEA,UAAI,aAAa,MAAM,YAAY,uBAAuB;AACxD,cAAM,iCAAiC,WAAW;AAAA,UAChD,UAAU,YAAY;AAAA,UAAU,gBAAgB,YAAY;AAAA,UAAgB,QAAQ;AAAA,UACpF;AAAA,UAAc,YAAY;AAAA,UAAU,WAAW;AAAA,UAC/C,eAAe,QAAQ;AAAA,UAAQ,gBAAgB,QAAQ;AAAA,UAAS,UAAU,YAAY,YAAY;AAAA,QACpG,CAAC;AAAA,MACH;AAEA,aAAO;AAAA,QACL,aAAa,KAAK,EAAE,IAAI,KAAK,CAAC;AAAA,QAC9B;AAAA,QACA,EAAE,cAAc,YAAY,SAAS;AAAA,MACvC;AAAA,IACF,SAAS,KAAK;AACZ,UAAI,gBAAgB,GAAG,EAAG,QAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AACnF,UAAI,eAAe,EAAE,SAAU,QAAO,6BAA6B,KAAK,SAAS;AACjF,aAAO,MAAM,2BAA2B,EAAE,WAAW,WAAW,IAAI,CAAC;AACrE,aAAO,aAAa,KAAK,EAAE,OAAO,UAAU,0CAA0C,uBAAuB,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACnI;AAAA,EACF;AAEA,iBAAe,OAAO,SAAkB,EAAE,OAAO,GAA+B;AAC9E,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,QAAI;AACF,YAAM,EAAE,IAAI,SAAS,IAAI,aAAa,MAAM,MAAM;AAClD,YAAM,EAAE,OAAO,IAAI,kBAAkB,MAAM,OAAO,YAAY,IAAI,IAAI,QAAQ,GAAG,EAAE,YAAY,CAAC;AAChG,YAAM,EAAE,WAAW,IAAI,MAAM,OAAO,IAAI,IAAI,MAAM,aAAa,OAAO;AACtE,YAAM,cAAc,MAAM,sBAAsB,IAAI,MAAM,OAAO,YAAY,UAAU,QAAQ,SAAS;AACxG,YAAM,4BAA4B,WAAW,MAAM,0BAA0B,YAAY,gBAAgB,SAAS;AAClH,YAAM,aAAa,2BAA2B,KAAK,YAAY,cAAc;AAE7E,YAAM,SAAS,uBAAuB;AAAA,QACpC;AAAA,UACE;AAAA,YACE,IAAI;AAAA,YACJ,gBAAgB,YAAY;AAAA,YAC5B,UAAU,YAAY;AAAA,UACxB;AAAA,UACA;AAAA,UACA;AAAA,QACF;AAAA,MACF;AACA,YAAM,cAAc,mBAAmB,IAAI;AAC3C,YAAM,cAAc,MAAM,0BAA0B,WAAW;AAAA,QAC7D,UAAU,YAAY;AAAA,QAAU,gBAAgB,YAAY;AAAA,QAAgB,QAAQ;AAAA,QACpF;AAAA,QAAc,YAAY;AAAA,QAAU,WAAW;AAAA,QAC/C,eAAe,QAAQ;AAAA,QAAQ,gBAAgB,QAAQ;AAAA,QAAS,iBAAiB,EAAE,OAAO;AAAA,MAC5F,CAAC;AACD,UAAI,eAAe,CAAC,YAAY,GAAI,QAAO,aAAa,KAAK,YAAY,MAAM,EAAE,QAAQ,YAAY,OAAO,CAAC;AAE7G,YAAM,aAAa,UAAU,QAAQ,YAAY;AACjD,YAAM,EAAE,SAAS,IAAI,MAAM,WAAW;AAAA,QACpC;AAAA,QACA,EAAE,OAAO,QAAQ,KAAK,WAAW;AAAA,MACnC;AAEA,UAAI,aAAa,MAAM,YAAY,uBAAuB;AACxD,cAAM,iCAAiC,WAAW;AAAA,UAChD,UAAU,YAAY;AAAA,UAAU,gBAAgB,YAAY;AAAA,UAAgB,QAAQ;AAAA,UACpF;AAAA,UAAc,YAAY;AAAA,UAAU,WAAW;AAAA,UAC/C,eAAe,QAAQ;AAAA,UAAQ,gBAAgB,QAAQ;AAAA,UAAS,UAAU,YAAY,YAAY;AAAA,QACpG,CAAC;AAAA,MACH;AAEA,aAAO;AAAA,QACL,aAAa,KAAK,EAAE,IAAI,KAAK,CAAC;AAAA,QAC9B;AAAA,QACA,EAAE,cAAc,YAAY,SAAS;AAAA,MACvC;AAAA,IACF,SAAS,KAAK;AACZ,UAAI,gBAAgB,GAAG,EAAG,QAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AACnF,UAAI,eAAe,EAAE,SAAU,QAAO,6BAA6B,KAAK,SAAS;AACjF,aAAO,MAAM,8BAA8B,EAAE,WAAW,WAAW,IAAI,CAAC;AACxE,aAAO,aAAa,KAAK,EAAE,OAAO,UAAU,0CAA0C,uBAAuB,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACnI;AAAA,EACF;AAEA,SAAO,EAAE,KAAK,MAAM,KAAK,OAAO;AAClC;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { CommandBus } from '@open-mercato/shared/lib/commands'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { readJsonSafe } from '@open-mercato/shared/lib/http/readJsonSafe'\nimport { validateCrudMutationGuard, runCrudMutationGuardAfterSuccess } from '@open-mercato/shared/lib/crud/mutation-guard'\nimport { CrudHttpError, isCrudHttpError, notFound } from '@open-mercato/shared/lib/crud/errors'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { findOneWithDecryption, findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { isOrganizationReadAccessAllowed } from '@open-mercato/core/modules/directory/utils/organizationScopeGuard'\nimport { User } from '@open-mercato/core/modules/auth/data/entities'\nimport type { RbacService } from '@open-mercato/core/modules/auth/services/rbacService'\nimport { CustomerEntity, CustomerEntityRole } from '../data/entities'\nimport { entityRoleCreateSchema, entityRoleUpdateSchema, entityRoleDeleteSchema, type EntityRoleCreateInput, type EntityRoleUpdateInput, type EntityRoleDeleteInput } from '../data/validators'\nimport { withScopedPayload } from './utils'\nimport { resolveCustomersRequestContext, resolveAuthActorId } from '../lib/interactionRequestContext'\nimport { deriveDisplayNameFromEmail } from '../lib/displayName'\nimport { withOperationMetadata } from '../lib/operationMetadata'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('customers')\n\nconst paramsSchema = z.object({ id: z.string().uuid() })\nconst roleIdQuerySchema = z.object({ roleId: z.string().uuid() })\n\nconst createBodySchema = z.object({\n  roleType: z.string().trim().min(1).max(100),\n  userId: z.string().uuid(),\n})\nconst updateBodySchema = z.object({\n  userId: z.string().uuid(),\n})\n\nconst listItemSchema = z.object({\n  id: z.string().uuid(),\n  entityType: z.enum(['company', 'person']),\n  entityId: z.string().uuid(),\n  userId: z.string().uuid(),\n  userName: z.string().nullable().optional(),\n  userEmail: z.string().nullable().optional(),\n  userPhone: z.string().nullable().optional(),\n  roleType: z.string(),\n  createdAt: z.string(),\n  updatedAt: z.string(),\n})\n\nconst listResponseSchema = z.object({ items: z.array(listItemSchema) })\nconst okResponseSchema = z.object({ ok: z.boolean() })\nconst createResponseSchema = z.object({ id: z.string().uuid() })\nconst errorSchema = z.object({ error: z.string() })\n\ntype EntityType = 'company' | 'person'\n\ntype Translator = Awaited<ReturnType<typeof resolveTranslations>>['translate']\n\nfunction getRoleContext(entityType: EntityType, entityId: string) {\n  const resourceKind = entityType === 'company' ? 'customers.company' : 'customers.person'\n  return { entityType, entityId, resourceKind, resourceId: entityId }\n}\n\nfunction buildValidationErrorResponse(error: z.ZodError, translate: Translator) {\n  return NextResponse.json(\n    { error: translate('customers.errors.validationFailed', 'Validation failed'), fieldErrors: error.flatten().fieldErrors },\n    { status: 400 },\n  )\n}\n\nasync function buildContext(request: Request) {\n  const context = await resolveCustomersRequestContext(request)\n  return {\n    ...context,\n    ctx: context.commandContext,\n  }\n}\n\nfunction ensureRouteOrganizationAccess(\n  organizationId: string,\n  scope: Awaited<ReturnType<typeof resolveCustomersRequestContext>>['scope'],\n  auth: Awaited<ReturnType<typeof resolveCustomersRequestContext>>['auth'],\n  translate: Translator,\n) {\n  if (!isOrganizationReadAccessAllowed({ scope, auth, organizationId })) {\n    throw new CrudHttpError(403, { error: translate('customers.errors.access_denied', 'Access denied') })\n  }\n}\n\nasync function ensureFeatureOnOrganization(\n  container: Awaited<ReturnType<typeof resolveCustomersRequestContext>>['container'],\n  auth: Awaited<ReturnType<typeof resolveCustomersRequestContext>>['auth'],\n  feature: string,\n  organizationId: string,\n  translate: Translator,\n) {\n  const actorId = resolveAuthActorId(auth)\n  if (!actorId) {\n    throw new CrudHttpError(401, { error: translate('customers.errors.unauthorized', 'Unauthorized') })\n  }\n  let rbac: RbacService | undefined\n  try {\n    rbac = container.resolve('rbacService') as RbacService | undefined\n  } catch (err) {\n    logger.error('rbacService resolve failed', { component: 'entity-roles-factory', err })\n    rbac = undefined\n  }\n  if (!rbac) {\n    throw new CrudHttpError(500, { error: translate('customers.errors.internal', 'Internal error') })\n  }\n  const hasFeature = await rbac.userHasAllFeatures(actorId, [feature], {\n    tenantId: auth.tenantId,\n    organizationId,\n  })\n  if (!hasFeature) {\n    throw new CrudHttpError(403, { error: translate('customers.errors.access_denied', 'Access denied') })\n  }\n}\n\nasync function resolveEntityRouteScope(\n  em: Awaited<ReturnType<typeof resolveCustomersRequestContext>>['em'],\n  auth: Awaited<ReturnType<typeof resolveCustomersRequestContext>>['auth'],\n  scope: Awaited<ReturnType<typeof resolveCustomersRequestContext>>['scope'],\n  entityType: EntityType,\n  entityId: string,\n  translate: Translator,\n) {\n  const entity = await findOneWithDecryption(\n    em,\n    CustomerEntity,\n    { id: entityId, kind: entityType, tenantId: auth.tenantId, deletedAt: null },\n    undefined,\n    { tenantId: auth.tenantId, organizationId: scope?.selectedId ?? auth.orgId ?? null },\n  )\n  if (!entity || entity.tenantId !== auth.tenantId) {\n    throw notFound(translate('customers.errors.customer_not_found', 'Customer not found'))\n  }\n  ensureRouteOrganizationAccess(entity.organizationId, scope, auth, translate)\n  return {\n    entity,\n    organizationId: entity.organizationId,\n    tenantId: entity.tenantId,\n  }\n}\n\nasync function resolveRoleRouteScope(\n  em: Awaited<ReturnType<typeof resolveCustomersRequestContext>>['em'],\n  auth: Awaited<ReturnType<typeof resolveCustomersRequestContext>>['auth'],\n  scope: Awaited<ReturnType<typeof resolveCustomersRequestContext>>['scope'],\n  entityType: EntityType,\n  entityId: string,\n  roleId: string,\n  translate: Translator,\n) {\n  const role = await findOneWithDecryption(\n    em,\n    CustomerEntityRole,\n    { id: roleId, tenantId: auth.tenantId, entityType, entityId, deletedAt: null },\n    undefined,\n    { tenantId: auth.tenantId, organizationId: scope?.selectedId ?? auth.orgId ?? null },\n  )\n  if (\n    !role ||\n    role.tenantId !== auth.tenantId ||\n    role.entityType !== entityType ||\n    role.entityId !== entityId\n  ) {\n    throw notFound(translate('customers.errors.role_not_found', 'Role not found'))\n  }\n  ensureRouteOrganizationAccess(role.organizationId, scope, auth, translate)\n  return {\n    role,\n    organizationId: role.organizationId,\n    tenantId: role.tenantId,\n  }\n}\n\nfunction createScopedCommandContext(\n  ctx: Awaited<ReturnType<typeof buildContext>>['ctx'],\n  organizationId: string,\n) {\n  return {\n    ...ctx,\n    selectedOrganizationId: organizationId,\n    organizationIds: [organizationId],\n  }\n}\n\nexport const entityRolesMetadata = {\n  GET: { requireAuth: true, requireFeatures: ['customers.roles.view'] },\n  POST: { requireAuth: true, requireFeatures: ['customers.roles.manage'] },\n  PUT: { requireAuth: true, requireFeatures: ['customers.roles.manage'] },\n  DELETE: { requireAuth: true, requireFeatures: ['customers.roles.manage'] },\n}\n\nexport function buildEntityRolesOpenApi(entityType: EntityType): OpenApiRouteDoc {\n  const label = entityType === 'company' ? 'company' : 'person'\n  return {\n    tag: 'Customers',\n    summary: `${label.charAt(0).toUpperCase() + label.slice(1)} role assignments`,\n    pathParams: paramsSchema,\n    methods: {\n      GET: {\n        summary: `List roles for a ${label}`,\n        responses: [{ status: 200, description: 'Role assignments', schema: listResponseSchema }],\n        errors: [\n          { status: 400, description: 'Invalid request', schema: errorSchema },\n          { status: 401, description: 'Unauthorized', schema: errorSchema },\n        ],\n      },\n      POST: {\n        summary: `Assign a role to a ${label}`,\n        requestBody: { contentType: 'application/json', schema: createBodySchema },\n        responses: [{ status: 201, description: 'Role created', schema: createResponseSchema }],\n        errors: [\n          { status: 400, description: 'Invalid request', schema: errorSchema },\n          { status: 401, description: 'Unauthorized', schema: errorSchema },\n          { status: 409, description: 'Role already assigned', schema: errorSchema },\n        ],\n      },\n      PUT: {\n        summary: `Update a ${label} role assignment`,\n        query: roleIdQuerySchema,\n        requestBody: { contentType: 'application/json', schema: updateBodySchema },\n        responses: [{ status: 200, description: 'Role updated', schema: okResponseSchema }],\n        errors: [\n          { status: 400, description: 'Invalid request', schema: errorSchema },\n          { status: 401, description: 'Unauthorized', schema: errorSchema },\n          { status: 404, description: 'Role not found', schema: errorSchema },\n        ],\n      },\n      DELETE: {\n        summary: `Remove a ${label} role assignment`,\n        query: roleIdQuerySchema,\n        responses: [{ status: 200, description: 'Role deleted', schema: okResponseSchema }],\n        errors: [\n          { status: 400, description: 'Invalid request', schema: errorSchema },\n          { status: 401, description: 'Unauthorized', schema: errorSchema },\n          { status: 404, description: 'Role not found', schema: errorSchema },\n        ],\n      },\n    },\n  }\n}\n\nexport function createEntityRolesHandlers(entityType: EntityType) {\n  const resourceKind = entityType === 'company' ? 'customers.company' : 'customers.person'\n  const logPrefix = entityType === 'company' ? 'customers.company.roles' : 'customers.person.roles'\n\n  async function GET(request: Request, { params }: { params: { id: string } }) {\n    const { translate } = await resolveTranslations()\n    try {\n      const { id: entityId } = paramsSchema.parse(params)\n      const { container, em, auth, scope } = await buildContext(request)\n      const targetScope = await resolveEntityRouteScope(em, auth, scope, entityType, entityId, translate)\n      await ensureFeatureOnOrganization(container, auth, 'customers.roles.view', targetScope.organizationId, translate)\n\n      const roles = await findWithDecryption(\n        em,\n        CustomerEntityRole,\n        {\n          entityType,\n          entityId,\n          organizationId: targetScope.organizationId,\n          tenantId: targetScope.tenantId,\n          deletedAt: null,\n        },\n        { orderBy: { roleType: 'asc' } },\n        {\n          tenantId: targetScope.tenantId,\n          organizationId: targetScope.organizationId,\n        },\n      )\n\n      const userIds = Array.from(new Set(roles.map((role) => role.userId).filter((value): value is string => typeof value === 'string' && value.length > 0)))\n      const users = userIds.length\n        ? await findWithDecryption(\n            em,\n            User,\n            {\n              id: { $in: userIds },\n              deletedAt: null,\n              ...(targetScope.tenantId ? { tenantId: targetScope.tenantId } : {}),\n            },\n            undefined,\n            {\n              tenantId: targetScope.tenantId,\n              organizationId: targetScope.organizationId,\n            },\n          )\n        : []\n      const userMap = new Map(users.map((user) => [user.id, {\n        name: user.name ?? deriveDisplayNameFromEmail(user.email) ?? null,\n        email: user.email ?? null,\n        phone: null,\n      }]))\n\n      return NextResponse.json({\n        items: roles.map((role) => ({\n          ...(userMap.has(role.userId)\n            ? {\n                userName: userMap.get(role.userId)?.name ?? null,\n                userEmail: userMap.get(role.userId)?.email ?? null,\n                userPhone: userMap.get(role.userId)?.phone ?? null,\n              }\n            : {}),\n          id: role.id,\n          entityType: role.entityType,\n          entityId: role.entityId,\n          userId: role.userId,\n          roleType: role.roleType,\n          createdAt: role.createdAt.toISOString(),\n          updatedAt: role.updatedAt.toISOString(),\n        })),\n      })\n    } catch (err) {\n      if (isCrudHttpError(err)) return NextResponse.json(err.body, { status: err.status })\n      if (err instanceof z.ZodError) return buildValidationErrorResponse(err, translate)\n      logger.error('Entity roles GET failed', { component: logPrefix, err })\n      return NextResponse.json({ error: translate('customers.errors.failed_to_load_roles', 'Failed to load roles') }, { status: 500 })\n    }\n  }\n\n  async function POST(request: Request, { params }: { params: { id: string } }) {\n    const { translate } = await resolveTranslations()\n    try {\n      const { id: entityId } = paramsSchema.parse(params)\n      const { container, em, auth, scope, ctx } = await buildContext(request)\n      const targetScope = await resolveEntityRouteScope(em, auth, scope, entityType, entityId, translate)\n      await ensureFeatureOnOrganization(container, auth, 'customers.roles.manage', targetScope.organizationId, translate)\n      const commandCtx = createScopedCommandContext(ctx, targetScope.organizationId)\n\n      const rawBody = await readJsonSafe<Record<string, unknown>>(request, {})\n      const scoped = withScopedPayload(\n        {\n          ...rawBody,\n          organizationId: targetScope.organizationId,\n          tenantId: targetScope.tenantId,\n          ...getRoleContext(entityType, entityId),\n        },\n        commandCtx,\n        translate,\n      )\n      const parsed = entityRoleCreateSchema.parse(scoped)\n\n      const guardUserId = resolveAuthActorId(auth)\n      const guardResult = await validateCrudMutationGuard(container, {\n        tenantId: targetScope.tenantId, organizationId: targetScope.organizationId, userId: guardUserId,\n        resourceKind, resourceId: entityId, operation: 'custom',\n        requestMethod: request.method, requestHeaders: request.headers, mutationPayload: rawBody,\n      })\n      if (guardResult && !guardResult.ok) return NextResponse.json(guardResult.body, { status: guardResult.status })\n\n      const commandBus = container.resolve('commandBus') as CommandBus\n      const { result, logEntry } = await commandBus.execute<EntityRoleCreateInput, { roleId: string }>(\n        'customers.entityRoles.create',\n        { input: parsed, ctx: commandCtx },\n      )\n\n      if (guardResult?.ok && guardResult.shouldRunAfterSuccess) {\n        await runCrudMutationGuardAfterSuccess(container, {\n          tenantId: targetScope.tenantId, organizationId: targetScope.organizationId, userId: guardUserId,\n          resourceKind, resourceId: entityId, operation: 'custom',\n          requestMethod: request.method, requestHeaders: request.headers, metadata: guardResult.metadata ?? null,\n        })\n      }\n\n      return withOperationMetadata(\n        NextResponse.json({ id: result?.roleId ?? null }, { status: 201 }),\n        logEntry,\n        { resourceKind, resourceId: entityId },\n      )\n    } catch (err) {\n      if (isCrudHttpError(err)) return NextResponse.json(err.body, { status: err.status })\n      if (err instanceof z.ZodError) return buildValidationErrorResponse(err, translate)\n      logger.error('Entity roles POST failed', { component: logPrefix, err })\n      return NextResponse.json({ error: translate('customers.errors.failed_to_assign_role', 'Failed to assign role') }, { status: 500 })\n    }\n  }\n\n  async function PUT(request: Request, { params }: { params: { id: string } }) {\n    const { translate } = await resolveTranslations()\n    try {\n      const { id: entityId } = paramsSchema.parse(params)\n      const { roleId } = roleIdQuerySchema.parse(Object.fromEntries(new URL(request.url).searchParams))\n      const { container, em, auth, scope, ctx } = await buildContext(request)\n      const targetScope = await resolveRoleRouteScope(em, auth, scope, entityType, entityId, roleId, translate)\n      await ensureFeatureOnOrganization(container, auth, 'customers.roles.manage', targetScope.organizationId, translate)\n      const commandCtx = createScopedCommandContext(ctx, targetScope.organizationId)\n\n      const rawBody = await readJsonSafe<Record<string, unknown>>(request, {})\n      const scoped = withScopedPayload(\n        {\n          ...rawBody,\n          id: roleId,\n          organizationId: targetScope.organizationId,\n          tenantId: targetScope.tenantId,\n        },\n        commandCtx,\n        translate,\n      )\n      const parsed = entityRoleUpdateSchema.parse(scoped)\n\n      const guardUserId = resolveAuthActorId(auth)\n      const guardResult = await validateCrudMutationGuard(container, {\n        tenantId: targetScope.tenantId, organizationId: targetScope.organizationId, userId: guardUserId,\n        resourceKind, resourceId: entityId, operation: 'custom',\n        requestMethod: request.method, requestHeaders: request.headers, mutationPayload: { roleId, ...rawBody },\n      })\n      if (guardResult && !guardResult.ok) return NextResponse.json(guardResult.body, { status: guardResult.status })\n\n      const commandBus = container.resolve('commandBus') as CommandBus\n      const { logEntry } = await commandBus.execute<EntityRoleUpdateInput, { roleId: string }>(\n        'customers.entityRoles.update',\n        { input: parsed, ctx: commandCtx },\n      )\n\n      if (guardResult?.ok && guardResult.shouldRunAfterSuccess) {\n        await runCrudMutationGuardAfterSuccess(container, {\n          tenantId: targetScope.tenantId, organizationId: targetScope.organizationId, userId: guardUserId,\n          resourceKind, resourceId: entityId, operation: 'custom',\n          requestMethod: request.method, requestHeaders: request.headers, metadata: guardResult.metadata ?? null,\n        })\n      }\n\n      return withOperationMetadata(\n        NextResponse.json({ ok: true }),\n        logEntry,\n        { resourceKind, resourceId: entityId },\n      )\n    } catch (err) {\n      if (isCrudHttpError(err)) return NextResponse.json(err.body, { status: err.status })\n      if (err instanceof z.ZodError) return buildValidationErrorResponse(err, translate)\n      logger.error('Entity roles PUT failed', { component: logPrefix, err })\n      return NextResponse.json({ error: translate('customers.errors.failed_to_update_role', 'Failed to update role') }, { status: 500 })\n    }\n  }\n\n  async function DELETE(request: Request, { params }: { params: { id: string } }) {\n    const { translate } = await resolveTranslations()\n    try {\n      const { id: entityId } = paramsSchema.parse(params)\n      const { roleId } = roleIdQuerySchema.parse(Object.fromEntries(new URL(request.url).searchParams))\n      const { container, em, auth, scope, ctx } = await buildContext(request)\n      const targetScope = await resolveRoleRouteScope(em, auth, scope, entityType, entityId, roleId, translate)\n      await ensureFeatureOnOrganization(container, auth, 'customers.roles.manage', targetScope.organizationId, translate)\n      const commandCtx = createScopedCommandContext(ctx, targetScope.organizationId)\n\n      const parsed = entityRoleDeleteSchema.parse(\n        withScopedPayload(\n          {\n            id: roleId,\n            organizationId: targetScope.organizationId,\n            tenantId: targetScope.tenantId,\n          },\n          commandCtx,\n          translate,\n        ),\n      )\n      const guardUserId = resolveAuthActorId(auth)\n      const guardResult = await validateCrudMutationGuard(container, {\n        tenantId: targetScope.tenantId, organizationId: targetScope.organizationId, userId: guardUserId,\n        resourceKind, resourceId: entityId, operation: 'custom',\n        requestMethod: request.method, requestHeaders: request.headers, mutationPayload: { roleId },\n      })\n      if (guardResult && !guardResult.ok) return NextResponse.json(guardResult.body, { status: guardResult.status })\n\n      const commandBus = container.resolve('commandBus') as CommandBus\n      const { logEntry } = await commandBus.execute<EntityRoleDeleteInput, { roleId: string }>(\n        'customers.entityRoles.delete',\n        { input: parsed, ctx: commandCtx },\n      )\n\n      if (guardResult?.ok && guardResult.shouldRunAfterSuccess) {\n        await runCrudMutationGuardAfterSuccess(container, {\n          tenantId: targetScope.tenantId, organizationId: targetScope.organizationId, userId: guardUserId,\n          resourceKind, resourceId: entityId, operation: 'custom',\n          requestMethod: request.method, requestHeaders: request.headers, metadata: guardResult.metadata ?? null,\n        })\n      }\n\n      return withOperationMetadata(\n        NextResponse.json({ ok: true }),\n        logEntry,\n        { resourceKind, resourceId: entityId },\n      )\n    } catch (err) {\n      if (isCrudHttpError(err)) return NextResponse.json(err.body, { status: err.status })\n      if (err instanceof z.ZodError) return buildValidationErrorResponse(err, translate)\n      logger.error('Entity roles DELETE failed', { component: logPrefix, err })\n      return NextResponse.json({ error: translate('customers.errors.failed_to_delete_role', 'Failed to delete role') }, { status: 500 })\n    }\n  }\n\n  return { GET, POST, PUT, DELETE }\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAGlB,SAAS,oBAAoB;AAC7B,SAAS,2BAA2B,wCAAwC;AAC5E,SAAS,eAAe,iBAAiB,gBAAgB;AACzD,SAAS,2BAA2B;AACpC,SAAS,uBAAuB,0BAA0B;AAC1D,SAAS,uCAAuC;AAChD,SAAS,YAAY;AAErB,SAAS,gBAAgB,0BAA0B;AACnD,SAAS,wBAAwB,wBAAwB,8BAAkH;AAC3K,SAAS,yBAAyB;AAClC,SAAS,gCAAgC,0BAA0B;AACnE,SAAS,kCAAkC;AAC3C,SAAS,6BAA6B;AACtC,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,WAAW;AAEvC,MAAM,eAAe,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AACvD,MAAM,oBAAoB,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAEhE,MAAM,mBAAmB,EAAE,OAAO;AAAA,EAChC,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EAC1C,QAAQ,EAAE,OAAO,EAAE,KAAK;AAC1B,CAAC;AACD,MAAM,mBAAmB,EAAE,OAAO;AAAA,EAChC,QAAQ,EAAE,OAAO,EAAE,KAAK;AAC1B,CAAC;AAED,MAAM,iBAAiB,EAAE,OAAO;AAAA,EAC9B,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,YAAY,EAAE,KAAK,CAAC,WAAW,QAAQ,CAAC;AAAA,EACxC,UAAU,EAAE,OAAO,EAAE,KAAK;AAAA,EAC1B,QAAQ,EAAE,OAAO,EAAE,KAAK;AAAA,EACxB,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACzC,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC1C,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC1C,UAAU,EAAE,OAAO;AAAA,EACnB,WAAW,EAAE,OAAO;AAAA,EACpB,WAAW,EAAE,OAAO;AACtB,CAAC;AAED,MAAM,qBAAqB,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,EAAE,CAAC;AACtE,MAAM,mBAAmB,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;AACrD,MAAM,uBAAuB,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAC/D,MAAM,cAAc,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAMlD,SAAS,eAAe,YAAwB,UAAkB;AAChE,QAAM,eAAe,eAAe,YAAY,sBAAsB;AACtE,SAAO,EAAE,YAAY,UAAU,cAAc,YAAY,SAAS;AACpE;AAEA,SAAS,6BAA6B,OAAmB,WAAuB;AAC9E,SAAO,aAAa;AAAA,IAClB,EAAE,OAAO,UAAU,qCAAqC,mBAAmB,GAAG,aAAa,MAAM,QAAQ,EAAE,YAAY;AAAA,IACvH,EAAE,QAAQ,IAAI;AAAA,EAChB;AACF;AAEA,eAAe,aAAa,SAAkB;AAC5C,QAAM,UAAU,MAAM,+BAA+B,OAAO;AAC5D,SAAO;AAAA,IACL,GAAG;AAAA,IACH,KAAK,QAAQ;AAAA,EACf;AACF;AAEA,SAAS,8BACP,gBACA,OACA,MACA,WACA;AACA,MAAI,CAAC,gCAAgC,EAAE,OAAO,MAAM,eAAe,CAAC,GAAG;AACrE,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,kCAAkC,eAAe,EAAE,CAAC;AAAA,EACtG;AACF;AAEA,eAAe,4BACb,WACA,MACA,SACA,gBACA,WACA;AACA,QAAM,UAAU,mBAAmB,IAAI;AACvC,MAAI,CAAC,SAAS;AACZ,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,iCAAiC,cAAc,EAAE,CAAC;AAAA,EACpG;AACA,MAAI;AACJ,MAAI;AACF,WAAO,UAAU,QAAQ,aAAa;AAAA,EACxC,SAAS,KAAK;AACZ,WAAO,MAAM,8BAA8B,EAAE,WAAW,wBAAwB,IAAI,CAAC;AACrF,WAAO;AAAA,EACT;AACA,MAAI,CAAC,MAAM;AACT,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,6BAA6B,gBAAgB,EAAE,CAAC;AAAA,EAClG;AACA,QAAM,aAAa,MAAM,KAAK,mBAAmB,SAAS,CAAC,OAAO,GAAG;AAAA,IACnE,UAAU,KAAK;AAAA,IACf;AAAA,EACF,CAAC;AACD,MAAI,CAAC,YAAY;AACf,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,kCAAkC,eAAe,EAAE,CAAC;AAAA,EACtG;AACF;AAEA,eAAe,wBACb,IACA,MACA,OACA,YACA,UACA,WACA;AACA,QAAM,SAAS,MAAM;AAAA,IACnB;AAAA,IACA;AAAA,IACA,EAAE,IAAI,UAAU,MAAM,YAAY,UAAU,KAAK,UAAU,WAAW,KAAK;AAAA,IAC3E;AAAA,IACA,EAAE,UAAU,KAAK,UAAU,gBAAgB,OAAO,cAAc,KAAK,SAAS,KAAK;AAAA,EACrF;AACA,MAAI,CAAC,UAAU,OAAO,aAAa,KAAK,UAAU;AAChD,UAAM,SAAS,UAAU,uCAAuC,oBAAoB,CAAC;AAAA,EACvF;AACA,gCAA8B,OAAO,gBAAgB,OAAO,MAAM,SAAS;AAC3E,SAAO;AAAA,IACL;AAAA,IACA,gBAAgB,OAAO;AAAA,IACvB,UAAU,OAAO;AAAA,EACnB;AACF;AAEA,eAAe,sBACb,IACA,MACA,OACA,YACA,UACA,QACA,WACA;AACA,QAAM,OAAO,MAAM;AAAA,IACjB;AAAA,IACA;AAAA,IACA,EAAE,IAAI,QAAQ,UAAU,KAAK,UAAU,YAAY,UAAU,WAAW,KAAK;AAAA,IAC7E;AAAA,IACA,EAAE,UAAU,KAAK,UAAU,gBAAgB,OAAO,cAAc,KAAK,SAAS,KAAK;AAAA,EACrF;AACA,MACE,CAAC,QACD,KAAK,aAAa,KAAK,YACvB,KAAK,eAAe,cACpB,KAAK,aAAa,UAClB;AACA,UAAM,SAAS,UAAU,mCAAmC,gBAAgB,CAAC;AAAA,EAC/E;AACA,gCAA8B,KAAK,gBAAgB,OAAO,MAAM,SAAS;AACzE,SAAO;AAAA,IACL;AAAA,IACA,gBAAgB,KAAK;AAAA,IACrB,UAAU,KAAK;AAAA,EACjB;AACF;AAEA,SAAS,2BACP,KACA,gBACA;AACA,SAAO;AAAA,IACL,GAAG;AAAA,IACH,wBAAwB;AAAA,IACxB,iBAAiB,CAAC,cAAc;AAAA,EAClC;AACF;AAEO,MAAM,sBAAsB;AAAA,EACjC,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,sBAAsB,EAAE;AAAA,EACpE,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,wBAAwB,EAAE;AAAA,EACvE,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,wBAAwB,EAAE;AAAA,EACtE,QAAQ,EAAE,aAAa,MAAM,iBAAiB,CAAC,wBAAwB,EAAE;AAC3E;AAEO,SAAS,wBAAwB,YAAyC;AAC/E,QAAM,QAAQ,eAAe,YAAY,YAAY;AACrD,SAAO;AAAA,IACL,KAAK;AAAA,IACL,SAAS,GAAG,MAAM,OAAO,CAAC,EAAE,YAAY,IAAI,MAAM,MAAM,CAAC,CAAC;AAAA,IAC1D,YAAY;AAAA,IACZ,SAAS;AAAA,MACP,KAAK;AAAA,QACH,SAAS,oBAAoB,KAAK;AAAA,QAClC,WAAW,CAAC,EAAE,QAAQ,KAAK,aAAa,oBAAoB,QAAQ,mBAAmB,CAAC;AAAA,QACxF,QAAQ;AAAA,UACN,EAAE,QAAQ,KAAK,aAAa,mBAAmB,QAAQ,YAAY;AAAA,UACnE,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,YAAY;AAAA,QAClE;AAAA,MACF;AAAA,MACA,MAAM;AAAA,QACJ,SAAS,sBAAsB,KAAK;AAAA,QACpC,aAAa,EAAE,aAAa,oBAAoB,QAAQ,iBAAiB;AAAA,QACzE,WAAW,CAAC,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,qBAAqB,CAAC;AAAA,QACtF,QAAQ;AAAA,UACN,EAAE,QAAQ,KAAK,aAAa,mBAAmB,QAAQ,YAAY;AAAA,UACnE,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,YAAY;AAAA,UAChE,EAAE,QAAQ,KAAK,aAAa,yBAAyB,QAAQ,YAAY;AAAA,QAC3E;AAAA,MACF;AAAA,MACA,KAAK;AAAA,QACH,SAAS,YAAY,KAAK;AAAA,QAC1B,OAAO;AAAA,QACP,aAAa,EAAE,aAAa,oBAAoB,QAAQ,iBAAiB;AAAA,QACzE,WAAW,CAAC,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,iBAAiB,CAAC;AAAA,QAClF,QAAQ;AAAA,UACN,EAAE,QAAQ,KAAK,aAAa,mBAAmB,QAAQ,YAAY;AAAA,UACnE,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,YAAY;AAAA,UAChE,EAAE,QAAQ,KAAK,aAAa,kBAAkB,QAAQ,YAAY;AAAA,QACpE;AAAA,MACF;AAAA,MACA,QAAQ;AAAA,QACN,SAAS,YAAY,KAAK;AAAA,QAC1B,OAAO;AAAA,QACP,WAAW,CAAC,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,iBAAiB,CAAC;AAAA,QAClF,QAAQ;AAAA,UACN,EAAE,QAAQ,KAAK,aAAa,mBAAmB,QAAQ,YAAY;AAAA,UACnE,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,YAAY;AAAA,UAChE,EAAE,QAAQ,KAAK,aAAa,kBAAkB,QAAQ,YAAY;AAAA,QACpE;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;AAEO,SAAS,0BAA0B,YAAwB;AAChE,QAAM,eAAe,eAAe,YAAY,sBAAsB;AACtE,QAAM,YAAY,eAAe,YAAY,4BAA4B;AAEzE,iBAAe,IAAI,SAAkB,EAAE,OAAO,GAA+B;AAC3E,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,QAAI;AACF,YAAM,EAAE,IAAI,SAAS,IAAI,aAAa,MAAM,MAAM;AAClD,YAAM,EAAE,WAAW,IAAI,MAAM,MAAM,IAAI,MAAM,aAAa,OAAO;AACjE,YAAM,cAAc,MAAM,wBAAwB,IAAI,MAAM,OAAO,YAAY,UAAU,SAAS;AAClG,YAAM,4BAA4B,WAAW,MAAM,wBAAwB,YAAY,gBAAgB,SAAS;AAEhH,YAAM,QAAQ,MAAM;AAAA,QAClB;AAAA,QACA;AAAA,QACA;AAAA,UACE;AAAA,UACA;AAAA,UACA,gBAAgB,YAAY;AAAA,UAC5B,UAAU,YAAY;AAAA,UACtB,WAAW;AAAA,QACb;AAAA,QACA,EAAE,SAAS,EAAE,UAAU,MAAM,EAAE;AAAA,QAC/B;AAAA,UACE,UAAU,YAAY;AAAA,UACtB,gBAAgB,YAAY;AAAA,QAC9B;AAAA,MACF;AAEA,YAAM,UAAU,MAAM,KAAK,IAAI,IAAI,MAAM,IAAI,CAAC,SAAS,KAAK,MAAM,EAAE,OAAO,CAAC,UAA2B,OAAO,UAAU,YAAY,MAAM,SAAS,CAAC,CAAC,CAAC;AACtJ,YAAM,QAAQ,QAAQ,SAClB,MAAM;AAAA,QACJ;AAAA,QACA;AAAA,QACA;AAAA,UACE,IAAI,EAAE,KAAK,QAAQ;AAAA,UACnB,WAAW;AAAA,UACX,GAAI,YAAY,WAAW,EAAE,UAAU,YAAY,SAAS,IAAI,CAAC;AAAA,QACnE;AAAA,QACA;AAAA,QACA;AAAA,UACE,UAAU,YAAY;AAAA,UACtB,gBAAgB,YAAY;AAAA,QAC9B;AAAA,MACF,IACA,CAAC;AACL,YAAM,UAAU,IAAI,IAAI,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,IAAI;AAAA,QACpD,MAAM,KAAK,QAAQ,2BAA2B,KAAK,KAAK,KAAK;AAAA,QAC7D,OAAO,KAAK,SAAS;AAAA,QACrB,OAAO;AAAA,MACT,CAAC,CAAC,CAAC;AAEH,aAAO,aAAa,KAAK;AAAA,QACvB,OAAO,MAAM,IAAI,CAAC,UAAU;AAAA,UAC1B,GAAI,QAAQ,IAAI,KAAK,MAAM,IACvB;AAAA,YACE,UAAU,QAAQ,IAAI,KAAK,MAAM,GAAG,QAAQ;AAAA,YAC5C,WAAW,QAAQ,IAAI,KAAK,MAAM,GAAG,SAAS;AAAA,YAC9C,WAAW,QAAQ,IAAI,KAAK,MAAM,GAAG,SAAS;AAAA,UAChD,IACA,CAAC;AAAA,UACL,IAAI,KAAK;AAAA,UACT,YAAY,KAAK;AAAA,UACjB,UAAU,KAAK;AAAA,UACf,QAAQ,KAAK;AAAA,UACb,UAAU,KAAK;AAAA,UACf,WAAW,KAAK,UAAU,YAAY;AAAA,UACtC,WAAW,KAAK,UAAU,YAAY;AAAA,QACxC,EAAE;AAAA,MACJ,CAAC;AAAA,IACH,SAAS,KAAK;AACZ,UAAI,gBAAgB,GAAG,EAAG,QAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AACnF,UAAI,eAAe,EAAE,SAAU,QAAO,6BAA6B,KAAK,SAAS;AACjF,aAAO,MAAM,2BAA2B,EAAE,WAAW,WAAW,IAAI,CAAC;AACrE,aAAO,aAAa,KAAK,EAAE,OAAO,UAAU,yCAAyC,sBAAsB,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACjI;AAAA,EACF;AAEA,iBAAe,KAAK,SAAkB,EAAE,OAAO,GAA+B;AAC5E,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,QAAI;AACF,YAAM,EAAE,IAAI,SAAS,IAAI,aAAa,MAAM,MAAM;AAClD,YAAM,EAAE,WAAW,IAAI,MAAM,OAAO,IAAI,IAAI,MAAM,aAAa,OAAO;AACtE,YAAM,cAAc,MAAM,wBAAwB,IAAI,MAAM,OAAO,YAAY,UAAU,SAAS;AAClG,YAAM,4BAA4B,WAAW,MAAM,0BAA0B,YAAY,gBAAgB,SAAS;AAClH,YAAM,aAAa,2BAA2B,KAAK,YAAY,cAAc;AAE7E,YAAM,UAAU,MAAM,aAAsC,SAAS,CAAC,CAAC;AACvE,YAAM,SAAS;AAAA,QACb;AAAA,UACE,GAAG;AAAA,UACH,gBAAgB,YAAY;AAAA,UAC5B,UAAU,YAAY;AAAA,UACtB,GAAG,eAAe,YAAY,QAAQ;AAAA,QACxC;AAAA,QACA;AAAA,QACA;AAAA,MACF;AACA,YAAM,SAAS,uBAAuB,MAAM,MAAM;AAElD,YAAM,cAAc,mBAAmB,IAAI;AAC3C,YAAM,cAAc,MAAM,0BAA0B,WAAW;AAAA,QAC7D,UAAU,YAAY;AAAA,QAAU,gBAAgB,YAAY;AAAA,QAAgB,QAAQ;AAAA,QACpF;AAAA,QAAc,YAAY;AAAA,QAAU,WAAW;AAAA,QAC/C,eAAe,QAAQ;AAAA,QAAQ,gBAAgB,QAAQ;AAAA,QAAS,iBAAiB;AAAA,MACnF,CAAC;AACD,UAAI,eAAe,CAAC,YAAY,GAAI,QAAO,aAAa,KAAK,YAAY,MAAM,EAAE,QAAQ,YAAY,OAAO,CAAC;AAE7G,YAAM,aAAa,UAAU,QAAQ,YAAY;AACjD,YAAM,EAAE,QAAQ,SAAS,IAAI,MAAM,WAAW;AAAA,QAC5C;AAAA,QACA,EAAE,OAAO,QAAQ,KAAK,WAAW;AAAA,MACnC;AAEA,UAAI,aAAa,MAAM,YAAY,uBAAuB;AACxD,cAAM,iCAAiC,WAAW;AAAA,UAChD,UAAU,YAAY;AAAA,UAAU,gBAAgB,YAAY;AAAA,UAAgB,QAAQ;AAAA,UACpF;AAAA,UAAc,YAAY;AAAA,UAAU,WAAW;AAAA,UAC/C,eAAe,QAAQ;AAAA,UAAQ,gBAAgB,QAAQ;AAAA,UAAS,UAAU,YAAY,YAAY;AAAA,QACpG,CAAC;AAAA,MACH;AAEA,aAAO;AAAA,QACL,aAAa,KAAK,EAAE,IAAI,QAAQ,UAAU,KAAK,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,QACjE;AAAA,QACA,EAAE,cAAc,YAAY,SAAS;AAAA,MACvC;AAAA,IACF,SAAS,KAAK;AACZ,UAAI,gBAAgB,GAAG,EAAG,QAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AACnF,UAAI,eAAe,EAAE,SAAU,QAAO,6BAA6B,KAAK,SAAS;AACjF,aAAO,MAAM,4BAA4B,EAAE,WAAW,WAAW,IAAI,CAAC;AACtE,aAAO,aAAa,KAAK,EAAE,OAAO,UAAU,0CAA0C,uBAAuB,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACnI;AAAA,EACF;AAEA,iBAAe,IAAI,SAAkB,EAAE,OAAO,GAA+B;AAC3E,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,QAAI;AACF,YAAM,EAAE,IAAI,SAAS,IAAI,aAAa,MAAM,MAAM;AAClD,YAAM,EAAE,OAAO,IAAI,kBAAkB,MAAM,OAAO,YAAY,IAAI,IAAI,QAAQ,GAAG,EAAE,YAAY,CAAC;AAChG,YAAM,EAAE,WAAW,IAAI,MAAM,OAAO,IAAI,IAAI,MAAM,aAAa,OAAO;AACtE,YAAM,cAAc,MAAM,sBAAsB,IAAI,MAAM,OAAO,YAAY,UAAU,QAAQ,SAAS;AACxG,YAAM,4BAA4B,WAAW,MAAM,0BAA0B,YAAY,gBAAgB,SAAS;AAClH,YAAM,aAAa,2BAA2B,KAAK,YAAY,cAAc;AAE7E,YAAM,UAAU,MAAM,aAAsC,SAAS,CAAC,CAAC;AACvE,YAAM,SAAS;AAAA,QACb;AAAA,UACE,GAAG;AAAA,UACH,IAAI;AAAA,UACJ,gBAAgB,YAAY;AAAA,UAC5B,UAAU,YAAY;AAAA,QACxB;AAAA,QACA;AAAA,QACA;AAAA,MACF;AACA,YAAM,SAAS,uBAAuB,MAAM,MAAM;AAElD,YAAM,cAAc,mBAAmB,IAAI;AAC3C,YAAM,cAAc,MAAM,0BAA0B,WAAW;AAAA,QAC7D,UAAU,YAAY;AAAA,QAAU,gBAAgB,YAAY;AAAA,QAAgB,QAAQ;AAAA,QACpF;AAAA,QAAc,YAAY;AAAA,QAAU,WAAW;AAAA,QAC/C,eAAe,QAAQ;AAAA,QAAQ,gBAAgB,QAAQ;AAAA,QAAS,iBAAiB,EAAE,QAAQ,GAAG,QAAQ;AAAA,MACxG,CAAC;AACD,UAAI,eAAe,CAAC,YAAY,GAAI,QAAO,aAAa,KAAK,YAAY,MAAM,EAAE,QAAQ,YAAY,OAAO,CAAC;AAE7G,YAAM,aAAa,UAAU,QAAQ,YAAY;AACjD,YAAM,EAAE,SAAS,IAAI,MAAM,WAAW;AAAA,QACpC;AAAA,QACA,EAAE,OAAO,QAAQ,KAAK,WAAW;AAAA,MACnC;AAEA,UAAI,aAAa,MAAM,YAAY,uBAAuB;AACxD,cAAM,iCAAiC,WAAW;AAAA,UAChD,UAAU,YAAY;AAAA,UAAU,gBAAgB,YAAY;AAAA,UAAgB,QAAQ;AAAA,UACpF;AAAA,UAAc,YAAY;AAAA,UAAU,WAAW;AAAA,UAC/C,eAAe,QAAQ;AAAA,UAAQ,gBAAgB,QAAQ;AAAA,UAAS,UAAU,YAAY,YAAY;AAAA,QACpG,CAAC;AAAA,MACH;AAEA,aAAO;AAAA,QACL,aAAa,KAAK,EAAE,IAAI,KAAK,CAAC;AAAA,QAC9B;AAAA,QACA,EAAE,cAAc,YAAY,SAAS;AAAA,MACvC;AAAA,IACF,SAAS,KAAK;AACZ,UAAI,gBAAgB,GAAG,EAAG,QAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AACnF,UAAI,eAAe,EAAE,SAAU,QAAO,6BAA6B,KAAK,SAAS;AACjF,aAAO,MAAM,2BAA2B,EAAE,WAAW,WAAW,IAAI,CAAC;AACrE,aAAO,aAAa,KAAK,EAAE,OAAO,UAAU,0CAA0C,uBAAuB,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACnI;AAAA,EACF;AAEA,iBAAe,OAAO,SAAkB,EAAE,OAAO,GAA+B;AAC9E,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,QAAI;AACF,YAAM,EAAE,IAAI,SAAS,IAAI,aAAa,MAAM,MAAM;AAClD,YAAM,EAAE,OAAO,IAAI,kBAAkB,MAAM,OAAO,YAAY,IAAI,IAAI,QAAQ,GAAG,EAAE,YAAY,CAAC;AAChG,YAAM,EAAE,WAAW,IAAI,MAAM,OAAO,IAAI,IAAI,MAAM,aAAa,OAAO;AACtE,YAAM,cAAc,MAAM,sBAAsB,IAAI,MAAM,OAAO,YAAY,UAAU,QAAQ,SAAS;AACxG,YAAM,4BAA4B,WAAW,MAAM,0BAA0B,YAAY,gBAAgB,SAAS;AAClH,YAAM,aAAa,2BAA2B,KAAK,YAAY,cAAc;AAE7E,YAAM,SAAS,uBAAuB;AAAA,QACpC;AAAA,UACE;AAAA,YACE,IAAI;AAAA,YACJ,gBAAgB,YAAY;AAAA,YAC5B,UAAU,YAAY;AAAA,UACxB;AAAA,UACA;AAAA,UACA;AAAA,QACF;AAAA,MACF;AACA,YAAM,cAAc,mBAAmB,IAAI;AAC3C,YAAM,cAAc,MAAM,0BAA0B,WAAW;AAAA,QAC7D,UAAU,YAAY;AAAA,QAAU,gBAAgB,YAAY;AAAA,QAAgB,QAAQ;AAAA,QACpF;AAAA,QAAc,YAAY;AAAA,QAAU,WAAW;AAAA,QAC/C,eAAe,QAAQ;AAAA,QAAQ,gBAAgB,QAAQ;AAAA,QAAS,iBAAiB,EAAE,OAAO;AAAA,MAC5F,CAAC;AACD,UAAI,eAAe,CAAC,YAAY,GAAI,QAAO,aAAa,KAAK,YAAY,MAAM,EAAE,QAAQ,YAAY,OAAO,CAAC;AAE7G,YAAM,aAAa,UAAU,QAAQ,YAAY;AACjD,YAAM,EAAE,SAAS,IAAI,MAAM,WAAW;AAAA,QACpC;AAAA,QACA,EAAE,OAAO,QAAQ,KAAK,WAAW;AAAA,MACnC;AAEA,UAAI,aAAa,MAAM,YAAY,uBAAuB;AACxD,cAAM,iCAAiC,WAAW;AAAA,UAChD,UAAU,YAAY;AAAA,UAAU,gBAAgB,YAAY;AAAA,UAAgB,QAAQ;AAAA,UACpF;AAAA,UAAc,YAAY;AAAA,UAAU,WAAW;AAAA,UAC/C,eAAe,QAAQ;AAAA,UAAQ,gBAAgB,QAAQ;AAAA,UAAS,UAAU,YAAY,YAAY;AAAA,QACpG,CAAC;AAAA,MACH;AAEA,aAAO;AAAA,QACL,aAAa,KAAK,EAAE,IAAI,KAAK,CAAC;AAAA,QAC9B;AAAA,QACA,EAAE,cAAc,YAAY,SAAS;AAAA,MACvC;AAAA,IACF,SAAS,KAAK;AACZ,UAAI,gBAAgB,GAAG,EAAG,QAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AACnF,UAAI,eAAe,EAAE,SAAU,QAAO,6BAA6B,KAAK,SAAS;AACjF,aAAO,MAAM,8BAA8B,EAAE,WAAW,WAAW,IAAI,CAAC;AACxE,aAAO,aAAa,KAAK,EAAE,OAAO,UAAU,0CAA0C,uBAAuB,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACnI;AAAA,EACF;AAEA,SAAO,EAAE,KAAK,MAAM,KAAK,OAAO;AAClC;",
   "names": []
 }

package/dist/modules/customers/api/interactions/route.js

@@ -563,9 +563,7 @@ const interactionListItemSchema = z.object({
   recurrenceEnd: z.string().nullable().optional(),
   participants: z.array(
     z.object({
-      userId: z.string().uuid().optional().describe(
-        "Absent for an external guest, who has no person/customer/staff record and is identified by email instead. Identify a participant by userId when present, otherwise by its normalized email."
-      ),
+      userId: z.string().uuid(),
       name: z.string().optional(),
       email: z.string().optional(),
       status: z.string().optional()