@open-mercato/core 0.7.0 → 0.7.1-develop.7102.1.b41f7e3e51

package/dist/modules/customers/api/people/[id]/companies/[linkId]/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../../../src/modules/customers/api/people/%5Bid%5D/companies/%5BlinkId%5D/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { CrudHttpError, isCrudHttpError, notFound } from '@open-mercato/shared/lib/crud/errors'\nimport {\n  runCrudMutationGuardAfterSuccess,\n  validateCrudMutationGuard,\n} from '@open-mercato/shared/lib/crud/mutation-guard'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport type { CommandBus } from '@open-mercato/shared/lib/commands'\nimport { serializeOperationMetadata } from '@open-mercato/shared/lib/commands/operationMetadata'\nimport { readJsonSafe } from '@open-mercato/shared/lib/http/readJsonSafe'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { resolveAuthActorId } from '@open-mercato/core/modules/customers/lib/interactionRequestContext'\nimport { CustomerPersonCompanyLink } from '@open-mercato/core/modules/customers/data/entities'\nimport {\n  personCompanyLinkDeleteSchema,\n  personCompanyLinkUpdateSchema,\n  type PersonCompanyLinkDeleteInput,\n  type PersonCompanyLinkUpdateInput,\n} from '@open-mercato/core/modules/customers/data/validators'\nimport { loadPersonContext } from '../context'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport type { EntityManager, FilterQuery } from '@mikro-orm/postgresql'\n\nconst paramsSchema = z.object({\n  id: z.string().uuid(),\n  linkId: z.string().uuid(),\n})\n\n/**\n * Resolve the second path segment to a concrete `customer_person_company_links` row id.\n * The UI on company/person detail pages calls this route with the company entity id as\n * the last segment (symmetric with the other company-centric endpoints); older callers\n * may pass the actual link row id. We try a direct id lookup first, then fall back to\n * resolving via `(person, company)` pair.\n */\nasync function resolveLinkId(\n  em: EntityManager,\n  rawLinkId: string,\n  personEntityId: string,\n  tenantId: string,\n  organizationId: string | null,\n): Promise<string | null> {\n  const decryptionScope = { tenantId, organizationId }\n  const directFilter: FilterQuery<CustomerPersonCompanyLink> = organizationId\n    ? { id: rawLinkId, tenantId, organizationId, deletedAt: null }\n    : { id: rawLinkId, tenantId, deletedAt: null }\n  const direct = await findOneWithDecryption(\n    em,\n    CustomerPersonCompanyLink,\n    directFilter,\n    undefined,\n    decryptionScope,\n  )\n  if (direct) return direct.id\n\n  const companyFilter: FilterQuery<CustomerPersonCompanyLink> = organizationId\n    ? {\n        person: personEntityId,\n        company: rawLinkId,\n        tenantId,\n        organizationId,\n        deletedAt: null,\n      }\n    : { person: personEntityId, company: rawLinkId, tenantId, deletedAt: null }\n  const viaCompany = await findOneWithDecryption(\n    em,\n    CustomerPersonCompanyLink,\n    companyFilter,\n    undefined,\n    decryptionScope,\n  )\n  return viaCompany?.id ?? null\n}\n\nconst updateSchema = z.object({\n  isPrimary: z.boolean().optional(),\n})\n\nconst updateResponseSchema = z.object({\n  ok: z.literal(true),\n  result: z\n    .object({\n      id: z.string().uuid(),\n      companyId: z.string().uuid(),\n      displayName: z.string(),\n      isPrimary: z.boolean(),\n    })\n    .nullable(),\n})\n\nexport const metadata = {\n  PATCH: { requireAuth: true, requireFeatures: ['customers.people.manage'] },\n  DELETE: { requireAuth: true, requireFeatures: ['customers.people.manage'] },\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Customers',\n  methods: {\n    PATCH: {\n      summary: 'Update a linked company for a person',\n      requestBody: { schema: updateSchema },\n      responses: [{ status: 200, description: 'Updated company link', schema: updateResponseSchema }],\n    },\n    DELETE: {\n      summary: 'Remove a linked company from a person',\n      responses: [{ status: 200, description: 'Deletion result', schema: z.object({ ok: z.literal(true) }) }],\n    },\n  },\n}\n\nexport async function PATCH(req: Request, ctx: { params?: { id?: string; linkId?: string } }) {\n  const { translate } = await resolveTranslations()\n  try {\n    const { id, linkId } = paramsSchema.parse({ id: ctx.params?.id, linkId: ctx.params?.linkId })\n    const payload = updateSchema.parse(await readJsonSafe(req, {}))\n    const { container, auth, selectedOrganizationId, person } = await loadPersonContext(req, id)\n    if (!selectedOrganizationId) {\n      throw new CrudHttpError(400, { error: translate('customers.errors.organization_required', 'Organization context is required') })\n    }\n    const guardUserId = resolveAuthActorId(auth)\n    const guardResult = await validateCrudMutationGuard(container, {\n      tenantId: auth.tenantId,\n      organizationId: selectedOrganizationId,\n      userId: guardUserId,\n      resourceKind: 'customers.person',\n      resourceId: person.id,\n      operation: 'custom',\n      requestMethod: req.method,\n      requestHeaders: req.headers,\n      mutationPayload: payload,\n    })\n    if (guardResult && !guardResult.ok) {\n      return NextResponse.json(guardResult.body, { status: guardResult.status })\n    }\n\n    if (payload.isPrimary === undefined) {\n      return NextResponse.json({ ok: true as const, result: null })\n    }\n\n    const resolveEm = (container.resolve('em') as EntityManager).fork()\n    const resolvedLinkId = await resolveLinkId(\n      resolveEm,\n      linkId,\n      person.id,\n      auth.tenantId,\n      selectedOrganizationId,\n    )\n    if (!resolvedLinkId) {\n      throw notFound(translate('customers.errors.person_company_link_not_found', 'Person-company link not found'))\n    }\n\n    const commandInput = personCompanyLinkUpdateSchema.parse({\n      linkId: resolvedLinkId,\n      isPrimary: payload.isPrimary,\n      tenantId: auth.tenantId,\n      organizationId: selectedOrganizationId,\n    } satisfies PersonCompanyLinkUpdateInput)\n\n    const commandBus = container.resolve('commandBus') as CommandBus\n    const { result, logEntry } = await commandBus.execute<PersonCompanyLinkUpdateInput, { linkId: string }>(\n      'customers.personCompanyLinks.update',\n      {\n        input: commandInput,\n        ctx: {\n          container,\n          auth,\n          organizationScope: null,\n          selectedOrganizationId,\n          organizationIds: [selectedOrganizationId],\n          request: req,\n        },\n      },\n    )\n\n    if (guardResult?.ok && guardResult.shouldRunAfterSuccess) {\n      await runCrudMutationGuardAfterSuccess(container, {\n        tenantId: auth.tenantId,\n        organizationId: selectedOrganizationId,\n        userId: guardUserId,\n        resourceKind: 'customers.person',\n        resourceId: person.id,\n        operation: 'custom',\n        requestMethod: req.method,\n        requestHeaders: req.headers,\n        metadata: guardResult.metadata ?? null,\n      })\n    }\n\n    const freshEm = (container.resolve('em') as EntityManager).fork()\n    const linkRecord = await findOneWithDecryption(\n      freshEm,\n      CustomerPersonCompanyLink,\n      { id: result.linkId, tenantId: auth.tenantId, organizationId: selectedOrganizationId },\n      { populate: ['company'] },\n      { tenantId: auth.tenantId, organizationId: selectedOrganizationId },\n    )\n    const company = linkRecord && typeof linkRecord.company !== 'string' ? linkRecord.company : null\n    const response = NextResponse.json({\n      ok: true as const,\n      result: linkRecord\n        ? {\n            id: linkRecord.id,\n            companyId: company?.id ?? '',\n            displayName: company?.displayName ?? '',\n            isPrimary: Boolean(linkRecord.isPrimary),\n          }\n        : null,\n    })\n    if (logEntry?.undoToken && logEntry.id && logEntry.commandId) {\n      response.headers.set(\n        'x-om-operation',\n        serializeOperationMetadata({\n          id: logEntry.id,\n          undoToken: logEntry.undoToken,\n          commandId: logEntry.commandId,\n          actionLabel: logEntry.actionLabel ?? null,\n          resourceKind: logEntry.resourceKind ?? 'customers.personCompanyLink',\n          resourceId: logEntry.resourceId ?? result.linkId,\n          executedAt: logEntry.createdAt instanceof Date ? logEntry.createdAt.toISOString() : new Date().toISOString(),\n        }),\n      )\n    }\n    return response\n  } catch (err) {\n    if (isCrudHttpError(err)) {\n      return NextResponse.json(err.body, { status: err.status })\n    }\n    return NextResponse.json({ error: translate('customers.errors.internal', 'Internal server error') }, { status: 500 })\n  }\n}\n\nexport async function DELETE(req: Request, ctx: { params?: { id?: string; linkId?: string } }) {\n  const { translate } = await resolveTranslations()\n  try {\n    const { id, linkId } = paramsSchema.parse({ id: ctx.params?.id, linkId: ctx.params?.linkId })\n    const { container, auth, selectedOrganizationId, person } = await loadPersonContext(req, id)\n    if (!selectedOrganizationId) {\n      throw new CrudHttpError(400, { error: translate('customers.errors.organization_required', 'Organization context is required') })\n    }\n    const guardUserId = resolveAuthActorId(auth)\n    const guardResult = await validateCrudMutationGuard(container, {\n      tenantId: auth.tenantId,\n      organizationId: selectedOrganizationId,\n      userId: guardUserId,\n      resourceKind: 'customers.person',\n      resourceId: person.id,\n      operation: 'custom',\n      requestMethod: req.method,\n      requestHeaders: req.headers,\n      mutationPayload: { id: linkId },\n    })\n    if (guardResult && !guardResult.ok) {\n      return NextResponse.json(guardResult.body, { status: guardResult.status })\n    }\n\n    const resolveEm = (container.resolve('em') as EntityManager).fork()\n    const resolvedLinkId = await resolveLinkId(\n      resolveEm,\n      linkId,\n      person.id,\n      auth.tenantId,\n      selectedOrganizationId,\n    )\n    if (!resolvedLinkId) {\n      throw notFound(translate('customers.errors.person_company_link_not_found', 'Person-company link not found'))\n    }\n\n    const commandInput = personCompanyLinkDeleteSchema.parse({\n      linkId: resolvedLinkId,\n      tenantId: auth.tenantId,\n      organizationId: selectedOrganizationId,\n    } satisfies PersonCompanyLinkDeleteInput)\n\n    const commandBus = container.resolve('commandBus') as CommandBus\n    const { result, logEntry } = await commandBus.execute<PersonCompanyLinkDeleteInput, { linkId: string }>(\n      'customers.personCompanyLinks.delete',\n      {\n        input: commandInput,\n        ctx: {\n          container,\n          auth,\n          organizationScope: null,\n          selectedOrganizationId,\n          organizationIds: [selectedOrganizationId],\n          request: req,\n        },\n      },\n    )\n\n    if (guardResult?.ok && guardResult.shouldRunAfterSuccess) {\n      await runCrudMutationGuardAfterSuccess(container, {\n        tenantId: auth.tenantId,\n        organizationId: selectedOrganizationId,\n        userId: guardUserId,\n        resourceKind: 'customers.person',\n        resourceId: person.id,\n        operation: 'custom',\n        requestMethod: req.method,\n        requestHeaders: req.headers,\n        metadata: guardResult.metadata ?? null,\n      })\n    }\n\n    const response = NextResponse.json({ ok: true as const })\n    if (logEntry?.undoToken && logEntry.id && logEntry.commandId) {\n      response.headers.set(\n        'x-om-operation',\n        serializeOperationMetadata({\n          id: logEntry.id,\n          undoToken: logEntry.undoToken,\n          commandId: logEntry.commandId,\n          actionLabel: logEntry.actionLabel ?? null,\n          resourceKind: logEntry.resourceKind ?? 'customers.personCompanyLink',\n          resourceId: logEntry.resourceId ?? result.linkId,\n          executedAt: logEntry.createdAt instanceof Date ? logEntry.createdAt.toISOString() : new Date().toISOString(),\n        }),\n      )\n    }\n    return response\n  } catch (err) {\n    if (isCrudHttpError(err)) {\n      return NextResponse.json(err.body, { status: err.status })\n    }\n    return NextResponse.json({ error: translate('customers.errors.internal', 'Internal server error') }, { status: 500 })\n  }\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,eAAe,iBAAiB,gBAAgB;AACzD;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAGP,SAAS,kCAAkC;AAC3C,SAAS,oBAAoB;AAC7B,SAAS,6BAA6B;AACtC,SAAS,0BAA0B;AACnC,SAAS,iCAAiC;AAC1C;AAAA,EACE;AAAA,EACA;AAAA,OAGK;AACP,SAAS,yBAAyB;AAClC,SAAS,2BAA2B;AAGpC,MAAM,eAAe,EAAE,OAAO;AAAA,EAC5B,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,QAAQ,EAAE,OAAO,EAAE,KAAK;AAC1B,CAAC;AASD,eAAe,cACb,IACA,WACA,gBACA,UACA,gBACwB;AACxB,QAAM,kBAAkB,EAAE,UAAU,eAAe;AACnD,QAAM,eAAuD,iBACzD,EAAE,IAAI,WAAW,UAAU,gBAAgB,WAAW,KAAK,IAC3D,EAAE,IAAI,WAAW,UAAU,WAAW,KAAK;AAC/C,QAAM,SAAS,MAAM;AAAA,IACnB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACA,MAAI,OAAQ,QAAO,OAAO;AAE1B,QAAM,gBAAwD,iBAC1D;AAAA,IACE,QAAQ;AAAA,IACR,SAAS;AAAA,IACT;AAAA,IACA;AAAA,IACA,WAAW;AAAA,EACb,IACA,EAAE,QAAQ,gBAAgB,SAAS,WAAW,UAAU,WAAW,KAAK;AAC5E,QAAM,aAAa,MAAM;AAAA,IACvB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACA,SAAO,YAAY,MAAM;AAC3B;AAEA,MAAM,eAAe,EAAE,OAAO;AAAA,EAC5B,WAAW,EAAE,QAAQ,EAAE,SAAS;AAClC,CAAC;AAED,MAAM,uBAAuB,EAAE,OAAO;AAAA,EACpC,IAAI,EAAE,QAAQ,IAAI;AAAA,EAClB,QAAQ,EACL,OAAO;AAAA,IACN,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,IACpB,WAAW,EAAE,OAAO,EAAE,KAAK;AAAA,IAC3B,aAAa,EAAE,OAAO;AAAA,IACtB,WAAW,EAAE,QAAQ;AAAA,EACvB,CAAC,EACA,SAAS;AACd,CAAC;AAEM,MAAM,WAAW;AAAA,EACtB,OAAO,EAAE,aAAa,MAAM,iBAAiB,CAAC,yBAAyB,EAAE;AAAA,EACzE,QAAQ,EAAE,aAAa,MAAM,iBAAiB,CAAC,yBAAyB,EAAE;AAC5E;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,IACP,OAAO;AAAA,MACL,SAAS;AAAA,MACT,aAAa,EAAE,QAAQ,aAAa;AAAA,MACpC,WAAW,CAAC,EAAE,QAAQ,KAAK,aAAa,wBAAwB,QAAQ,qBAAqB,CAAC;AAAA,IAChG;AAAA,IACA,QAAQ;AAAA,MACN,SAAS;AAAA,MACT,WAAW,CAAC,EAAE,QAAQ,KAAK,aAAa,mBAAmB,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,IAAI,EAAE,CAAC,EAAE,CAAC;AAAA,IACxG;AAAA,EACF;AACF;AAEA,eAAsB,MAAM,KAAc,KAAoD;AAC5F,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,MAAI;AACF,UAAM,EAAE,IAAI,OAAO,IAAI,aAAa,MAAM,EAAE,IAAI,IAAI,QAAQ,IAAI,QAAQ,IAAI,QAAQ,OAAO,CAAC;AAC5F,UAAM,UAAU,aAAa,MAAM,MAAM,aAAa,KAAK,CAAC,CAAC,CAAC;AAC9D,UAAM,EAAE,WAAW,MAAM,wBAAwB,OAAO,IAAI,MAAM,kBAAkB,KAAK,EAAE;AAC3F,QAAI,CAAC,wBAAwB;AAC3B,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,0CAA0C,kCAAkC,EAAE,CAAC;AAAA,IACjI;AACA,UAAM,cAAc,mBAAmB,IAAI;AAC3C,UAAM,cAAc,MAAM,0BAA0B,WAAW;AAAA,MAC7D,UAAU,KAAK;AAAA,MACf,gBAAgB;AAAA,MAChB,QAAQ;AAAA,MACR,cAAc;AAAA,MACd,YAAY,OAAO;AAAA,MACnB,WAAW;AAAA,MACX,eAAe,IAAI;AAAA,MACnB,gBAAgB,IAAI;AAAA,MACpB,iBAAiB;AAAA,IACnB,CAAC;AACD,QAAI,eAAe,CAAC,YAAY,IAAI;AAClC,aAAO,aAAa,KAAK,YAAY,MAAM,EAAE,QAAQ,YAAY,OAAO,CAAC;AAAA,IAC3E;AAEA,QAAI,QAAQ,cAAc,QAAW;AACnC,aAAO,aAAa,KAAK,EAAE,IAAI,MAAe,QAAQ,KAAK,CAAC;AAAA,IAC9D;AAEA,UAAM,YAAa,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAClE,UAAM,iBAAiB,MAAM;AAAA,MAC3B;AAAA,MACA;AAAA,MACA,OAAO;AAAA,MACP,KAAK;AAAA,MACL;AAAA,IACF;AACA,QAAI,CAAC,gBAAgB;AACnB,YAAM,SAAS,UAAU,kDAAkD,+BAA+B,CAAC;AAAA,IAC7G;AAEA,UAAM,eAAe,8BAA8B,MAAM;AAAA,MACvD,QAAQ;AAAA,MACR,WAAW,QAAQ;AAAA,MACnB,UAAU,KAAK;AAAA,MACf,gBAAgB;AAAA,IAClB,CAAwC;AAExC,UAAM,aAAa,UAAU,QAAQ,YAAY;AACjD,UAAM,EAAE,QAAQ,SAAS,IAAI,MAAM,WAAW;AAAA,MAC5C;AAAA,MACA;AAAA,QACE,OAAO;AAAA,QACP,KAAK;AAAA,UACH;AAAA,UACA;AAAA,UACA,mBAAmB;AAAA,UACnB;AAAA,UACA,iBAAiB,CAAC,sBAAsB;AAAA,UACxC,SAAS;AAAA,QACX;AAAA,MACF;AAAA,IACF;AAEA,QAAI,aAAa,MAAM,YAAY,uBAAuB;AACxD,YAAM,iCAAiC,WAAW;AAAA,QAChD,UAAU,KAAK;AAAA,QACf,gBAAgB;AAAA,QAChB,QAAQ;AAAA,QACR,cAAc;AAAA,QACd,YAAY,OAAO;AAAA,QACnB,WAAW;AAAA,QACX,eAAe,IAAI;AAAA,QACnB,gBAAgB,IAAI;AAAA,QACpB,UAAU,YAAY,YAAY;AAAA,MACpC,CAAC;AAAA,IACH;AAEA,UAAM,UAAW,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAChE,UAAM,aAAa,MAAM;AAAA,MACvB;AAAA,MACA;AAAA,MACA,EAAE,IAAI,OAAO,QAAQ,UAAU,KAAK,UAAU,gBAAgB,uBAAuB;AAAA,MACrF,EAAE,UAAU,CAAC,SAAS,EAAE;AAAA,MACxB,EAAE,UAAU,KAAK,UAAU,gBAAgB,uBAAuB;AAAA,IACpE;AACA,UAAM,UAAU,cAAc,OAAO,WAAW,YAAY,WAAW,WAAW,UAAU;AAC5F,UAAM,WAAW,aAAa,KAAK;AAAA,MACjC,IAAI;AAAA,MACJ,QAAQ,aACJ;AAAA,QACE,IAAI,WAAW;AAAA,QACf,WAAW,SAAS,MAAM;AAAA,QAC1B,aAAa,SAAS,eAAe;AAAA,QACrC,WAAW,QAAQ,WAAW,SAAS;AAAA,MACzC,IACA;AAAA,IACN,CAAC;AACD,QAAI,UAAU,aAAa,SAAS,MAAM,SAAS,WAAW;AAC5D,eAAS,QAAQ;AAAA,QACf;AAAA,QACA,2BAA2B;AAAA,UACzB,IAAI,SAAS;AAAA,UACb,WAAW,SAAS;AAAA,UACpB,WAAW,SAAS;AAAA,UACpB,aAAa,SAAS,eAAe;AAAA,UACrC,cAAc,SAAS,gBAAgB;AAAA,UACvC,YAAY,SAAS,cAAc,OAAO;AAAA,UAC1C,YAAY,SAAS,qBAAqB,OAAO,SAAS,UAAU,YAAY,KAAI,oBAAI,KAAK,GAAE,YAAY;AAAA,QAC7G,CAAC;AAAA,MACH;AAAA,IACF;AACA,WAAO;AAAA,EACT,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,GAAG;AACxB,aAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,IAC3D;AACA,WAAO,aAAa,KAAK,EAAE,OAAO,UAAU,6BAA6B,uBAAuB,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACtH;AACF;AAEA,eAAsB,OAAO,KAAc,KAAoD;AAC7F,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,MAAI;AACF,UAAM,EAAE,IAAI,OAAO,IAAI,aAAa,MAAM,EAAE,IAAI,IAAI,QAAQ,IAAI,QAAQ,IAAI,QAAQ,OAAO,CAAC;AAC5F,UAAM,EAAE,WAAW,MAAM,wBAAwB,OAAO,IAAI,MAAM,kBAAkB,KAAK,EAAE;AAC3F,QAAI,CAAC,wBAAwB;AAC3B,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,0CAA0C,kCAAkC,EAAE,CAAC;AAAA,IACjI;AACA,UAAM,cAAc,mBAAmB,IAAI;AAC3C,UAAM,cAAc,MAAM,0BAA0B,WAAW;AAAA,MAC7D,UAAU,KAAK;AAAA,MACf,gBAAgB;AAAA,MAChB,QAAQ;AAAA,MACR,cAAc;AAAA,MACd,YAAY,OAAO;AAAA,MACnB,WAAW;AAAA,MACX,eAAe,IAAI;AAAA,MACnB,gBAAgB,IAAI;AAAA,MACpB,iBAAiB,EAAE,IAAI,OAAO;AAAA,IAChC,CAAC;AACD,QAAI,eAAe,CAAC,YAAY,IAAI;AAClC,aAAO,aAAa,KAAK,YAAY,MAAM,EAAE,QAAQ,YAAY,OAAO,CAAC;AAAA,IAC3E;AAEA,UAAM,YAAa,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAClE,UAAM,iBAAiB,MAAM;AAAA,MAC3B;AAAA,MACA;AAAA,MACA,OAAO;AAAA,MACP,KAAK;AAAA,MACL;AAAA,IACF;AACA,QAAI,CAAC,gBAAgB;AACnB,YAAM,SAAS,UAAU,kDAAkD,+BAA+B,CAAC;AAAA,IAC7G;AAEA,UAAM,eAAe,8BAA8B,MAAM;AAAA,MACvD,QAAQ;AAAA,MACR,UAAU,KAAK;AAAA,MACf,gBAAgB;AAAA,IAClB,CAAwC;AAExC,UAAM,aAAa,UAAU,QAAQ,YAAY;AACjD,UAAM,EAAE,QAAQ,SAAS,IAAI,MAAM,WAAW;AAAA,MAC5C;AAAA,MACA;AAAA,QACE,OAAO;AAAA,QACP,KAAK;AAAA,UACH;AAAA,UACA;AAAA,UACA,mBAAmB;AAAA,UACnB;AAAA,UACA,iBAAiB,CAAC,sBAAsB;AAAA,UACxC,SAAS;AAAA,QACX;AAAA,MACF;AAAA,IACF;AAEA,QAAI,aAAa,MAAM,YAAY,uBAAuB;AACxD,YAAM,iCAAiC,WAAW;AAAA,QAChD,UAAU,KAAK;AAAA,QACf,gBAAgB;AAAA,QAChB,QAAQ;AAAA,QACR,cAAc;AAAA,QACd,YAAY,OAAO;AAAA,QACnB,WAAW;AAAA,QACX,eAAe,IAAI;AAAA,QACnB,gBAAgB,IAAI;AAAA,QACpB,UAAU,YAAY,YAAY;AAAA,MACpC,CAAC;AAAA,IACH;AAEA,UAAM,WAAW,aAAa,KAAK,EAAE,IAAI,KAAc,CAAC;AACxD,QAAI,UAAU,aAAa,SAAS,MAAM,SAAS,WAAW;AAC5D,eAAS,QAAQ;AAAA,QACf;AAAA,QACA,2BAA2B;AAAA,UACzB,IAAI,SAAS;AAAA,UACb,WAAW,SAAS;AAAA,UACpB,WAAW,SAAS;AAAA,UACpB,aAAa,SAAS,eAAe;AAAA,UACrC,cAAc,SAAS,gBAAgB;AAAA,UACvC,YAAY,SAAS,cAAc,OAAO;AAAA,UAC1C,YAAY,SAAS,qBAAqB,OAAO,SAAS,UAAU,YAAY,KAAI,oBAAI,KAAK,GAAE,YAAY;AAAA,QAC7G,CAAC;AAAA,MACH;AAAA,IACF;AACA,WAAO;AAAA,EACT,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,GAAG;AACxB,aAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,IAC3D;AACA,WAAO,aAAa,KAAK,EAAE,OAAO,UAAU,6BAA6B,uBAAuB,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACtH;AACF;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { CrudHttpError, isCrudHttpError, notFound } from '@open-mercato/shared/lib/crud/errors'\nimport {\n  runCrudMutationGuardAfterSuccess,\n  validateCrudMutationGuard,\n} from '@open-mercato/shared/lib/crud/mutation-guard'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport type { CommandBus } from '@open-mercato/shared/lib/commands'\nimport { serializeOperationMetadata } from '@open-mercato/shared/lib/commands/operationMetadata'\nimport { readJsonSafe } from '@open-mercato/shared/lib/http/readJsonSafe'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { resolveAuthActorId } from '@open-mercato/core/modules/customers/lib/interactionRequestContext'\nimport { CustomerPersonCompanyLink } from '@open-mercato/core/modules/customers/data/entities'\nimport {\n  personCompanyLinkDeleteSchema,\n  personCompanyLinkUpdateSchema,\n  type PersonCompanyLinkDeleteInput,\n  type PersonCompanyLinkUpdateInput,\n} from '@open-mercato/core/modules/customers/data/validators'\nimport { loadPersonContext } from '../context'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport type { EntityManager, FilterQuery } from '@mikro-orm/postgresql'\n\nconst paramsSchema = z.object({\n  id: z.string().uuid(),\n  linkId: z.string().uuid(),\n})\n\n/**\n * Resolve the second path segment to a concrete `customer_person_company_links` row id.\n * The UI on company/person detail pages calls this route with the company entity id as\n * the last segment (symmetric with the other company-centric endpoints); older callers\n * may pass the actual link row id. We try a direct id lookup first, then fall back to\n * resolving via `(person, company)` pair.\n */\nasync function resolveLinkId(\n  em: EntityManager,\n  rawLinkId: string,\n  personEntityId: string,\n  tenantId: string,\n  organizationId: string | null,\n): Promise<string | null> {\n  const decryptionScope = { tenantId, organizationId }\n  const directFilter: FilterQuery<CustomerPersonCompanyLink> = organizationId\n    ? { id: rawLinkId, tenantId, organizationId, deletedAt: null }\n    : { id: rawLinkId, tenantId, deletedAt: null }\n  const direct = await findOneWithDecryption(\n    em,\n    CustomerPersonCompanyLink,\n    directFilter,\n    undefined,\n    decryptionScope,\n  )\n  if (direct) return direct.id\n\n  const companyFilter: FilterQuery<CustomerPersonCompanyLink> = organizationId\n    ? {\n        person: personEntityId,\n        company: rawLinkId,\n        tenantId,\n        organizationId,\n        deletedAt: null,\n      }\n    : { person: personEntityId, company: rawLinkId, tenantId, deletedAt: null }\n  const viaCompany = await findOneWithDecryption(\n    em,\n    CustomerPersonCompanyLink,\n    companyFilter,\n    undefined,\n    decryptionScope,\n  )\n  return viaCompany?.id ?? null\n}\n\nconst updateSchema = z.object({\n  isPrimary: z.boolean().optional(),\n})\n\nconst updateResponseSchema = z.object({\n  ok: z.literal(true),\n  result: z\n    .object({\n      id: z.string().uuid(),\n      companyId: z.string().uuid(),\n      displayName: z.string(),\n      isPrimary: z.boolean(),\n    })\n    .nullable(),\n})\n\nexport const metadata = {\n  PATCH: { requireAuth: true, requireFeatures: ['customers.people.manage'] },\n  DELETE: { requireAuth: true, requireFeatures: ['customers.people.manage'] },\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Customers',\n  methods: {\n    PATCH: {\n      summary: 'Update a linked company for a person',\n      requestBody: { schema: updateSchema },\n      responses: [{ status: 200, description: 'Updated company link', schema: updateResponseSchema }],\n    },\n    DELETE: {\n      summary: 'Remove a linked company from a person',\n      responses: [{ status: 200, description: 'Deletion result', schema: z.object({ ok: z.literal(true) }) }],\n    },\n  },\n}\n\nexport async function PATCH(req: Request, ctx: { params?: { id?: string; linkId?: string } }) {\n  const { translate } = await resolveTranslations()\n  try {\n    const { id, linkId } = paramsSchema.parse({ id: ctx.params?.id, linkId: ctx.params?.linkId })\n    const payload = updateSchema.parse(await readJsonSafe(req, {}))\n    const { container, auth, selectedOrganizationId, person } = await loadPersonContext(req, id)\n    if (!selectedOrganizationId) {\n      throw new CrudHttpError(400, { error: translate('customers.errors.organization_required', 'Organization context is required') })\n    }\n    const guardUserId = resolveAuthActorId(auth)\n    const guardResult = await validateCrudMutationGuard(container, {\n      tenantId: auth.tenantId,\n      organizationId: selectedOrganizationId,\n      userId: guardUserId,\n      resourceKind: 'customers.person',\n      resourceId: person.id,\n      operation: 'custom',\n      requestMethod: req.method,\n      requestHeaders: req.headers,\n      mutationPayload: payload,\n    })\n    if (guardResult && !guardResult.ok) {\n      return NextResponse.json(guardResult.body, { status: guardResult.status })\n    }\n\n    if (payload.isPrimary === undefined) {\n      return NextResponse.json({ ok: true as const, result: null })\n    }\n\n    const resolveEm = (container.resolve('em') as EntityManager).fork()\n    const resolvedLinkId = await resolveLinkId(\n      resolveEm,\n      linkId,\n      person.id,\n      auth.tenantId,\n      selectedOrganizationId,\n    )\n    if (!resolvedLinkId) {\n      throw notFound(translate('customers.errors.person_company_link_not_found', 'Person-company link not found'))\n    }\n\n    const commandInput = personCompanyLinkUpdateSchema.parse({\n      linkId: resolvedLinkId,\n      isPrimary: payload.isPrimary,\n      tenantId: auth.tenantId,\n      organizationId: selectedOrganizationId,\n    } satisfies PersonCompanyLinkUpdateInput)\n\n    const commandBus = container.resolve('commandBus') as CommandBus\n    const { result, logEntry } = await commandBus.execute<PersonCompanyLinkUpdateInput, { linkId: string }>(\n      'customers.personCompanyLinks.update',\n      {\n        input: commandInput,\n        ctx: {\n          container,\n          auth,\n          organizationScope: null,\n          selectedOrganizationId,\n          organizationIds: [selectedOrganizationId],\n          request: req,\n        },\n      },\n    )\n\n    if (guardResult?.ok && guardResult.shouldRunAfterSuccess) {\n      await runCrudMutationGuardAfterSuccess(container, {\n        tenantId: auth.tenantId,\n        organizationId: selectedOrganizationId,\n        userId: guardUserId,\n        resourceKind: 'customers.person',\n        resourceId: person.id,\n        operation: 'custom',\n        requestMethod: req.method,\n        requestHeaders: req.headers,\n        metadata: guardResult.metadata ?? null,\n      })\n    }\n\n    const freshEm = (container.resolve('em') as EntityManager).fork()\n    const linkRecord = await findOneWithDecryption(\n      freshEm,\n      CustomerPersonCompanyLink,\n      { id: result.linkId, tenantId: auth.tenantId, organizationId: selectedOrganizationId },\n      { populate: ['company'] },\n      { tenantId: auth.tenantId, organizationId: selectedOrganizationId },\n    )\n    const company = linkRecord && typeof linkRecord.company !== 'string' ? linkRecord.company : null\n    const response = NextResponse.json({\n      ok: true as const,\n      result: linkRecord\n        ? {\n            id: linkRecord.id,\n            companyId: company?.id ?? '',\n            displayName: company?.displayName ?? '',\n            isPrimary: Boolean(linkRecord.isPrimary),\n          }\n        : null,\n    })\n    if (logEntry?.undoToken && logEntry.id && logEntry.commandId) {\n      response.headers.set(\n        'x-om-operation',\n        serializeOperationMetadata({\n          id: logEntry.id,\n          undoToken: logEntry.undoToken,\n          commandId: logEntry.commandId,\n          actionLabel: logEntry.actionLabel ?? null,\n          resourceKind: logEntry.resourceKind ?? 'customers.personCompanyLink',\n          resourceId: logEntry.resourceId ?? result.linkId,\n          executedAt: logEntry.createdAt instanceof Date ? logEntry.createdAt.toISOString() : new Date().toISOString(),\n        }),\n      )\n    }\n    return response\n  } catch (err) {\n    if (isCrudHttpError(err)) {\n      return NextResponse.json(err.body, { status: err.status })\n    }\n    return NextResponse.json({ error: translate('customers.errors.internal', 'Internal server error') }, { status: 500 })\n  }\n}\n\nexport async function DELETE(req: Request, ctx: { params?: { id?: string; linkId?: string } }) {\n  const { translate } = await resolveTranslations()\n  try {\n    const { id, linkId } = paramsSchema.parse({ id: ctx.params?.id, linkId: ctx.params?.linkId })\n    const { container, auth, selectedOrganizationId, person, profile } = await loadPersonContext(req, id)\n    if (!selectedOrganizationId) {\n      throw new CrudHttpError(400, { error: translate('customers.errors.organization_required', 'Organization context is required') })\n    }\n    const guardUserId = resolveAuthActorId(auth)\n    const guardResult = await validateCrudMutationGuard(container, {\n      tenantId: auth.tenantId,\n      organizationId: selectedOrganizationId,\n      userId: guardUserId,\n      resourceKind: 'customers.person',\n      resourceId: person.id,\n      operation: 'custom',\n      requestMethod: req.method,\n      requestHeaders: req.headers,\n      mutationPayload: { id: linkId },\n    })\n    if (guardResult && !guardResult.ok) {\n      return NextResponse.json(guardResult.body, { status: guardResult.status })\n    }\n\n    const resolveEm = (container.resolve('em') as EntityManager).fork()\n    const resolvedLinkId = await resolveLinkId(\n      resolveEm,\n      linkId,\n      person.id,\n      auth.tenantId,\n      selectedOrganizationId,\n    )\n    // No `CustomerPersonCompanyLink` row resolves for the profile-only association case\n    // (`CustomerPersonProfile.company` set without a link row, e.g. from a CRM migration).\n    // The delete command accepts that shape too, so it is dispatched instead of 404ing and\n    // the detach keeps its audit entry, undo token and cache invalidation (#5114).\n    const isProfileOnlyMatch =\n      profile.company && typeof profile.company !== 'string' && profile.company.id === linkId\n    if (!resolvedLinkId && !isProfileOnlyMatch) {\n      throw notFound(translate('customers.errors.person_company_link_not_found', 'Person-company link not found'))\n    }\n\n    const commandInput = personCompanyLinkDeleteSchema.parse({\n      ...(resolvedLinkId\n        ? { linkId: resolvedLinkId }\n        : { personEntityId: person.id, companyEntityId: linkId }),\n      tenantId: auth.tenantId,\n      organizationId: selectedOrganizationId,\n    } satisfies PersonCompanyLinkDeleteInput)\n\n    const commandBus = container.resolve('commandBus') as CommandBus\n    const { result, logEntry } = await commandBus.execute<PersonCompanyLinkDeleteInput, { linkId: string | null }>(\n      'customers.personCompanyLinks.delete',\n      {\n        input: commandInput,\n        ctx: {\n          container,\n          auth,\n          organizationScope: null,\n          selectedOrganizationId,\n          organizationIds: [selectedOrganizationId],\n          request: req,\n        },\n      },\n    )\n\n    if (guardResult?.ok && guardResult.shouldRunAfterSuccess) {\n      await runCrudMutationGuardAfterSuccess(container, {\n        tenantId: auth.tenantId,\n        organizationId: selectedOrganizationId,\n        userId: guardUserId,\n        resourceKind: 'customers.person',\n        resourceId: person.id,\n        operation: 'custom',\n        requestMethod: req.method,\n        requestHeaders: req.headers,\n        metadata: guardResult.metadata ?? null,\n      })\n    }\n\n    const response = NextResponse.json({ ok: true as const })\n    if (logEntry?.undoToken && logEntry.id && logEntry.commandId) {\n      response.headers.set(\n        'x-om-operation',\n        serializeOperationMetadata({\n          id: logEntry.id,\n          undoToken: logEntry.undoToken,\n          commandId: logEntry.commandId,\n          actionLabel: logEntry.actionLabel ?? null,\n          resourceKind: logEntry.resourceKind ?? 'customers.personCompanyLink',\n          resourceId: logEntry.resourceId ?? result.linkId,\n          executedAt: logEntry.createdAt instanceof Date ? logEntry.createdAt.toISOString() : new Date().toISOString(),\n        }),\n      )\n    }\n    return response\n  } catch (err) {\n    if (isCrudHttpError(err)) {\n      return NextResponse.json(err.body, { status: err.status })\n    }\n    return NextResponse.json({ error: translate('customers.errors.internal', 'Internal server error') }, { status: 500 })\n  }\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,eAAe,iBAAiB,gBAAgB;AACzD;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAGP,SAAS,kCAAkC;AAC3C,SAAS,oBAAoB;AAC7B,SAAS,6BAA6B;AACtC,SAAS,0BAA0B;AACnC,SAAS,iCAAiC;AAC1C;AAAA,EACE;AAAA,EACA;AAAA,OAGK;AACP,SAAS,yBAAyB;AAClC,SAAS,2BAA2B;AAGpC,MAAM,eAAe,EAAE,OAAO;AAAA,EAC5B,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,QAAQ,EAAE,OAAO,EAAE,KAAK;AAC1B,CAAC;AASD,eAAe,cACb,IACA,WACA,gBACA,UACA,gBACwB;AACxB,QAAM,kBAAkB,EAAE,UAAU,eAAe;AACnD,QAAM,eAAuD,iBACzD,EAAE,IAAI,WAAW,UAAU,gBAAgB,WAAW,KAAK,IAC3D,EAAE,IAAI,WAAW,UAAU,WAAW,KAAK;AAC/C,QAAM,SAAS,MAAM;AAAA,IACnB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACA,MAAI,OAAQ,QAAO,OAAO;AAE1B,QAAM,gBAAwD,iBAC1D;AAAA,IACE,QAAQ;AAAA,IACR,SAAS;AAAA,IACT;AAAA,IACA;AAAA,IACA,WAAW;AAAA,EACb,IACA,EAAE,QAAQ,gBAAgB,SAAS,WAAW,UAAU,WAAW,KAAK;AAC5E,QAAM,aAAa,MAAM;AAAA,IACvB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACA,SAAO,YAAY,MAAM;AAC3B;AAEA,MAAM,eAAe,EAAE,OAAO;AAAA,EAC5B,WAAW,EAAE,QAAQ,EAAE,SAAS;AAClC,CAAC;AAED,MAAM,uBAAuB,EAAE,OAAO;AAAA,EACpC,IAAI,EAAE,QAAQ,IAAI;AAAA,EAClB,QAAQ,EACL,OAAO;AAAA,IACN,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,IACpB,WAAW,EAAE,OAAO,EAAE,KAAK;AAAA,IAC3B,aAAa,EAAE,OAAO;AAAA,IACtB,WAAW,EAAE,QAAQ;AAAA,EACvB,CAAC,EACA,SAAS;AACd,CAAC;AAEM,MAAM,WAAW;AAAA,EACtB,OAAO,EAAE,aAAa,MAAM,iBAAiB,CAAC,yBAAyB,EAAE;AAAA,EACzE,QAAQ,EAAE,aAAa,MAAM,iBAAiB,CAAC,yBAAyB,EAAE;AAC5E;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,IACP,OAAO;AAAA,MACL,SAAS;AAAA,MACT,aAAa,EAAE,QAAQ,aAAa;AAAA,MACpC,WAAW,CAAC,EAAE,QAAQ,KAAK,aAAa,wBAAwB,QAAQ,qBAAqB,CAAC;AAAA,IAChG;AAAA,IACA,QAAQ;AAAA,MACN,SAAS;AAAA,MACT,WAAW,CAAC,EAAE,QAAQ,KAAK,aAAa,mBAAmB,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,IAAI,EAAE,CAAC,EAAE,CAAC;AAAA,IACxG;AAAA,EACF;AACF;AAEA,eAAsB,MAAM,KAAc,KAAoD;AAC5F,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,MAAI;AACF,UAAM,EAAE,IAAI,OAAO,IAAI,aAAa,MAAM,EAAE,IAAI,IAAI,QAAQ,IAAI,QAAQ,IAAI,QAAQ,OAAO,CAAC;AAC5F,UAAM,UAAU,aAAa,MAAM,MAAM,aAAa,KAAK,CAAC,CAAC,CAAC;AAC9D,UAAM,EAAE,WAAW,MAAM,wBAAwB,OAAO,IAAI,MAAM,kBAAkB,KAAK,EAAE;AAC3F,QAAI,CAAC,wBAAwB;AAC3B,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,0CAA0C,kCAAkC,EAAE,CAAC;AAAA,IACjI;AACA,UAAM,cAAc,mBAAmB,IAAI;AAC3C,UAAM,cAAc,MAAM,0BAA0B,WAAW;AAAA,MAC7D,UAAU,KAAK;AAAA,MACf,gBAAgB;AAAA,MAChB,QAAQ;AAAA,MACR,cAAc;AAAA,MACd,YAAY,OAAO;AAAA,MACnB,WAAW;AAAA,MACX,eAAe,IAAI;AAAA,MACnB,gBAAgB,IAAI;AAAA,MACpB,iBAAiB;AAAA,IACnB,CAAC;AACD,QAAI,eAAe,CAAC,YAAY,IAAI;AAClC,aAAO,aAAa,KAAK,YAAY,MAAM,EAAE,QAAQ,YAAY,OAAO,CAAC;AAAA,IAC3E;AAEA,QAAI,QAAQ,cAAc,QAAW;AACnC,aAAO,aAAa,KAAK,EAAE,IAAI,MAAe,QAAQ,KAAK,CAAC;AAAA,IAC9D;AAEA,UAAM,YAAa,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAClE,UAAM,iBAAiB,MAAM;AAAA,MAC3B;AAAA,MACA;AAAA,MACA,OAAO;AAAA,MACP,KAAK;AAAA,MACL;AAAA,IACF;AACA,QAAI,CAAC,gBAAgB;AACnB,YAAM,SAAS,UAAU,kDAAkD,+BAA+B,CAAC;AAAA,IAC7G;AAEA,UAAM,eAAe,8BAA8B,MAAM;AAAA,MACvD,QAAQ;AAAA,MACR,WAAW,QAAQ;AAAA,MACnB,UAAU,KAAK;AAAA,MACf,gBAAgB;AAAA,IAClB,CAAwC;AAExC,UAAM,aAAa,UAAU,QAAQ,YAAY;AACjD,UAAM,EAAE,QAAQ,SAAS,IAAI,MAAM,WAAW;AAAA,MAC5C;AAAA,MACA;AAAA,QACE,OAAO;AAAA,QACP,KAAK;AAAA,UACH;AAAA,UACA;AAAA,UACA,mBAAmB;AAAA,UACnB;AAAA,UACA,iBAAiB,CAAC,sBAAsB;AAAA,UACxC,SAAS;AAAA,QACX;AAAA,MACF;AAAA,IACF;AAEA,QAAI,aAAa,MAAM,YAAY,uBAAuB;AACxD,YAAM,iCAAiC,WAAW;AAAA,QAChD,UAAU,KAAK;AAAA,QACf,gBAAgB;AAAA,QAChB,QAAQ;AAAA,QACR,cAAc;AAAA,QACd,YAAY,OAAO;AAAA,QACnB,WAAW;AAAA,QACX,eAAe,IAAI;AAAA,QACnB,gBAAgB,IAAI;AAAA,QACpB,UAAU,YAAY,YAAY;AAAA,MACpC,CAAC;AAAA,IACH;AAEA,UAAM,UAAW,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAChE,UAAM,aAAa,MAAM;AAAA,MACvB;AAAA,MACA;AAAA,MACA,EAAE,IAAI,OAAO,QAAQ,UAAU,KAAK,UAAU,gBAAgB,uBAAuB;AAAA,MACrF,EAAE,UAAU,CAAC,SAAS,EAAE;AAAA,MACxB,EAAE,UAAU,KAAK,UAAU,gBAAgB,uBAAuB;AAAA,IACpE;AACA,UAAM,UAAU,cAAc,OAAO,WAAW,YAAY,WAAW,WAAW,UAAU;AAC5F,UAAM,WAAW,aAAa,KAAK;AAAA,MACjC,IAAI;AAAA,MACJ,QAAQ,aACJ;AAAA,QACE,IAAI,WAAW;AAAA,QACf,WAAW,SAAS,MAAM;AAAA,QAC1B,aAAa,SAAS,eAAe;AAAA,QACrC,WAAW,QAAQ,WAAW,SAAS;AAAA,MACzC,IACA;AAAA,IACN,CAAC;AACD,QAAI,UAAU,aAAa,SAAS,MAAM,SAAS,WAAW;AAC5D,eAAS,QAAQ;AAAA,QACf;AAAA,QACA,2BAA2B;AAAA,UACzB,IAAI,SAAS;AAAA,UACb,WAAW,SAAS;AAAA,UACpB,WAAW,SAAS;AAAA,UACpB,aAAa,SAAS,eAAe;AAAA,UACrC,cAAc,SAAS,gBAAgB;AAAA,UACvC,YAAY,SAAS,cAAc,OAAO;AAAA,UAC1C,YAAY,SAAS,qBAAqB,OAAO,SAAS,UAAU,YAAY,KAAI,oBAAI,KAAK,GAAE,YAAY;AAAA,QAC7G,CAAC;AAAA,MACH;AAAA,IACF;AACA,WAAO;AAAA,EACT,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,GAAG;AACxB,aAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,IAC3D;AACA,WAAO,aAAa,KAAK,EAAE,OAAO,UAAU,6BAA6B,uBAAuB,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACtH;AACF;AAEA,eAAsB,OAAO,KAAc,KAAoD;AAC7F,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,MAAI;AACF,UAAM,EAAE,IAAI,OAAO,IAAI,aAAa,MAAM,EAAE,IAAI,IAAI,QAAQ,IAAI,QAAQ,IAAI,QAAQ,OAAO,CAAC;AAC5F,UAAM,EAAE,WAAW,MAAM,wBAAwB,QAAQ,QAAQ,IAAI,MAAM,kBAAkB,KAAK,EAAE;AACpG,QAAI,CAAC,wBAAwB;AAC3B,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,0CAA0C,kCAAkC,EAAE,CAAC;AAAA,IACjI;AACA,UAAM,cAAc,mBAAmB,IAAI;AAC3C,UAAM,cAAc,MAAM,0BAA0B,WAAW;AAAA,MAC7D,UAAU,KAAK;AAAA,MACf,gBAAgB;AAAA,MAChB,QAAQ;AAAA,MACR,cAAc;AAAA,MACd,YAAY,OAAO;AAAA,MACnB,WAAW;AAAA,MACX,eAAe,IAAI;AAAA,MACnB,gBAAgB,IAAI;AAAA,MACpB,iBAAiB,EAAE,IAAI,OAAO;AAAA,IAChC,CAAC;AACD,QAAI,eAAe,CAAC,YAAY,IAAI;AAClC,aAAO,aAAa,KAAK,YAAY,MAAM,EAAE,QAAQ,YAAY,OAAO,CAAC;AAAA,IAC3E;AAEA,UAAM,YAAa,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAClE,UAAM,iBAAiB,MAAM;AAAA,MAC3B;AAAA,MACA;AAAA,MACA,OAAO;AAAA,MACP,KAAK;AAAA,MACL;AAAA,IACF;AAKA,UAAM,qBACJ,QAAQ,WAAW,OAAO,QAAQ,YAAY,YAAY,QAAQ,QAAQ,OAAO;AACnF,QAAI,CAAC,kBAAkB,CAAC,oBAAoB;AAC1C,YAAM,SAAS,UAAU,kDAAkD,+BAA+B,CAAC;AAAA,IAC7G;AAEA,UAAM,eAAe,8BAA8B,MAAM;AAAA,MACvD,GAAI,iBACA,EAAE,QAAQ,eAAe,IACzB,EAAE,gBAAgB,OAAO,IAAI,iBAAiB,OAAO;AAAA,MACzD,UAAU,KAAK;AAAA,MACf,gBAAgB;AAAA,IAClB,CAAwC;AAExC,UAAM,aAAa,UAAU,QAAQ,YAAY;AACjD,UAAM,EAAE,QAAQ,SAAS,IAAI,MAAM,WAAW;AAAA,MAC5C;AAAA,MACA;AAAA,QACE,OAAO;AAAA,QACP,KAAK;AAAA,UACH;AAAA,UACA;AAAA,UACA,mBAAmB;AAAA,UACnB;AAAA,UACA,iBAAiB,CAAC,sBAAsB;AAAA,UACxC,SAAS;AAAA,QACX;AAAA,MACF;AAAA,IACF;AAEA,QAAI,aAAa,MAAM,YAAY,uBAAuB;AACxD,YAAM,iCAAiC,WAAW;AAAA,QAChD,UAAU,KAAK;AAAA,QACf,gBAAgB;AAAA,QAChB,QAAQ;AAAA,QACR,cAAc;AAAA,QACd,YAAY,OAAO;AAAA,QACnB,WAAW;AAAA,QACX,eAAe,IAAI;AAAA,QACnB,gBAAgB,IAAI;AAAA,QACpB,UAAU,YAAY,YAAY;AAAA,MACpC,CAAC;AAAA,IACH;AAEA,UAAM,WAAW,aAAa,KAAK,EAAE,IAAI,KAAc,CAAC;AACxD,QAAI,UAAU,aAAa,SAAS,MAAM,SAAS,WAAW;AAC5D,eAAS,QAAQ;AAAA,QACf;AAAA,QACA,2BAA2B;AAAA,UACzB,IAAI,SAAS;AAAA,UACb,WAAW,SAAS;AAAA,UACpB,WAAW,SAAS;AAAA,UACpB,aAAa,SAAS,eAAe;AAAA,UACrC,cAAc,SAAS,gBAAgB;AAAA,UACvC,YAAY,SAAS,cAAc,OAAO;AAAA,UAC1C,YAAY,SAAS,qBAAqB,OAAO,SAAS,UAAU,YAAY,KAAI,oBAAI,KAAK,GAAE,YAAY;AAAA,QAC7G,CAAC;AAAA,MACH;AAAA,IACF;AACA,WAAO;AAAA,EACT,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,GAAG;AACxB,aAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,IAC3D;AACA,WAAO,aAAa,KAAK,EAAE,OAAO,UAAU,6BAA6B,uBAAuB,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACtH;AACF;",
   "names": []
 }

package/dist/modules/customers/api/people/[id]/companies/context.js

@@ -34,7 +34,7 @@ async function loadPersonContext(req, personId) {
     throw notFound(translate("customers.errors.person_not_found", "Person not found"));
   }
   if (!isOrganizationReadAccessAllowed({ scope, auth: authenticatedAuth, organizationId: person.organizationId })) {
-    throw new CrudHttpError(403, { error: translate("customers.errors.access_denied", "Access denied") });
+    throw notFound(translate("customers.errors.person_not_found", "Person not found"));
   }
   const profile = await findOneWithDecryption(
     em,

package/dist/modules/customers/api/people/[id]/companies/context.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../../src/modules/customers/api/people/%5Bid%5D/companies/context.ts"],
-  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport { CrudHttpError, notFound } from '@open-mercato/shared/lib/crud/errors'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport {\n  CustomerEntity,\n  CustomerPersonProfile,\n} from '@open-mercato/core/modules/customers/data/entities'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { isOrganizationReadAccessAllowed } from '@open-mercato/core/modules/directory/utils/organizationScopeGuard'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\n\nexport async function loadPersonContext(req: Request, personId: string) {\n  const { translate } = await resolveTranslations()\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.tenantId) {\n    throw new CrudHttpError(401, { error: translate('customers.errors.unauthorized', 'Unauthorized') })\n  }\n  const authenticatedAuth = auth as typeof auth & { tenantId: string }\n\n  const container = await createRequestContainer()\n  const scope = await resolveOrganizationScopeForRequest({ container, auth: authenticatedAuth, request: req })\n  const em = (container.resolve('em') as EntityManager).fork()\n  const decryptionScope = {\n    tenantId: authenticatedAuth.tenantId,\n    organizationId: scope?.selectedId ?? authenticatedAuth.orgId ?? null,\n  }\n  const person = await findOneWithDecryption(\n    em,\n    CustomerEntity,\n    { id: personId, kind: 'person', tenantId: authenticatedAuth.tenantId, deletedAt: null },\n    {},\n    decryptionScope,\n  )\n\n  if (!person) {\n    throw notFound(translate('customers.errors.person_not_found', 'Person not found'))\n  }\n\n  if (!isOrganizationReadAccessAllowed({ scope, auth: authenticatedAuth, organizationId: person.organizationId })) {\n    throw new CrudHttpError(403, { error: translate('customers.errors.access_denied', 'Access denied') })\n  }\n\n  const profile = await findOneWithDecryption(\n    em,\n    CustomerPersonProfile,\n    { entity: person, tenantId: person.tenantId, organizationId: person.organizationId },\n    { populate: ['company'] },\n    {\n      tenantId: person.tenantId,\n      organizationId: person.organizationId,\n    },\n  )\n  if (!profile) {\n    throw notFound(translate('customers.errors.person_profile_not_found', 'Person profile not found'))\n  }\n\n  return {\n    container,\n    auth: authenticatedAuth,\n    selectedOrganizationId: scope?.selectedId ?? authenticatedAuth.orgId ?? null,\n    em,\n    person,\n    profile,\n  }\n}\n"],
-  "mappings": "AACA,SAAS,eAAe,gBAAgB;AACxC,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,0CAA0C;AACnD,SAAS,uCAAuC;AAChD,SAAS,2BAA2B;AACpC,SAAS,6BAA6B;AAEtC,eAAsB,kBAAkB,KAAc,UAAkB;AACtE,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,UAAU;AACnB,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,iCAAiC,cAAc,EAAE,CAAC;AAAA,EACpG;AACA,QAAM,oBAAoB;AAE1B,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,mBAAmB,SAAS,IAAI,CAAC;AAC3G,QAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC3D,QAAM,kBAAkB;AAAA,IACtB,UAAU,kBAAkB;AAAA,IAC5B,gBAAgB,OAAO,cAAc,kBAAkB,SAAS;AAAA,EAClE;AACA,QAAM,SAAS,MAAM;AAAA,IACnB;AAAA,IACA;AAAA,IACA,EAAE,IAAI,UAAU,MAAM,UAAU,UAAU,kBAAkB,UAAU,WAAW,KAAK;AAAA,IACtF,CAAC;AAAA,IACD;AAAA,EACF;AAEA,MAAI,CAAC,QAAQ;AACX,UAAM,SAAS,UAAU,qCAAqC,kBAAkB,CAAC;AAAA,EACnF;AAEA,MAAI,CAAC,gCAAgC,EAAE,OAAO,MAAM,mBAAmB,gBAAgB,OAAO,eAAe,CAAC,GAAG;AAC/G,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,kCAAkC,eAAe,EAAE,CAAC;AAAA,EACtG;AAEA,QAAM,UAAU,MAAM;AAAA,IACpB;AAAA,IACA;AAAA,IACA,EAAE,QAAQ,QAAQ,UAAU,OAAO,UAAU,gBAAgB,OAAO,eAAe;AAAA,IACnF,EAAE,UAAU,CAAC,SAAS,EAAE;AAAA,IACxB;AAAA,MACE,UAAU,OAAO;AAAA,MACjB,gBAAgB,OAAO;AAAA,IACzB;AAAA,EACF;AACA,MAAI,CAAC,SAAS;AACZ,UAAM,SAAS,UAAU,6CAA6C,0BAA0B,CAAC;AAAA,EACnG;AAEA,SAAO;AAAA,IACL;AAAA,IACA,MAAM;AAAA,IACN,wBAAwB,OAAO,cAAc,kBAAkB,SAAS;AAAA,IACxE;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;",
+  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport { CrudHttpError, notFound } from '@open-mercato/shared/lib/crud/errors'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport {\n  CustomerEntity,\n  CustomerPersonProfile,\n} from '@open-mercato/core/modules/customers/data/entities'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { isOrganizationReadAccessAllowed } from '@open-mercato/core/modules/directory/utils/organizationScopeGuard'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\n\nexport async function loadPersonContext(req: Request, personId: string) {\n  const { translate } = await resolveTranslations()\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.tenantId) {\n    throw new CrudHttpError(401, { error: translate('customers.errors.unauthorized', 'Unauthorized') })\n  }\n  const authenticatedAuth = auth as typeof auth & { tenantId: string }\n\n  const container = await createRequestContainer()\n  const scope = await resolveOrganizationScopeForRequest({ container, auth: authenticatedAuth, request: req })\n  const em = (container.resolve('em') as EntityManager).fork()\n  const decryptionScope = {\n    tenantId: authenticatedAuth.tenantId,\n    organizationId: scope?.selectedId ?? authenticatedAuth.orgId ?? null,\n  }\n  const person = await findOneWithDecryption(\n    em,\n    CustomerEntity,\n    { id: personId, kind: 'person', tenantId: authenticatedAuth.tenantId, deletedAt: null },\n    {},\n    decryptionScope,\n  )\n\n  if (!person) {\n    throw notFound(translate('customers.errors.person_not_found', 'Person not found'))\n  }\n\n  // Existence oracle (#5504): deny a cross-org read as not-found \u2014 identical to\n  // the parent-not-found above \u2014 so it cannot reveal that a person exists in an\n  // organization the caller cannot see.\n  if (!isOrganizationReadAccessAllowed({ scope, auth: authenticatedAuth, organizationId: person.organizationId })) {\n    throw notFound(translate('customers.errors.person_not_found', 'Person not found'))\n  }\n\n  const profile = await findOneWithDecryption(\n    em,\n    CustomerPersonProfile,\n    { entity: person, tenantId: person.tenantId, organizationId: person.organizationId },\n    { populate: ['company'] },\n    {\n      tenantId: person.tenantId,\n      organizationId: person.organizationId,\n    },\n  )\n  if (!profile) {\n    throw notFound(translate('customers.errors.person_profile_not_found', 'Person profile not found'))\n  }\n\n  return {\n    container,\n    auth: authenticatedAuth,\n    selectedOrganizationId: scope?.selectedId ?? authenticatedAuth.orgId ?? null,\n    em,\n    person,\n    profile,\n  }\n}\n"],
+  "mappings": "AACA,SAAS,eAAe,gBAAgB;AACxC,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,0CAA0C;AACnD,SAAS,uCAAuC;AAChD,SAAS,2BAA2B;AACpC,SAAS,6BAA6B;AAEtC,eAAsB,kBAAkB,KAAc,UAAkB;AACtE,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,UAAU;AACnB,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,iCAAiC,cAAc,EAAE,CAAC;AAAA,EACpG;AACA,QAAM,oBAAoB;AAE1B,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,mBAAmB,SAAS,IAAI,CAAC;AAC3G,QAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC3D,QAAM,kBAAkB;AAAA,IACtB,UAAU,kBAAkB;AAAA,IAC5B,gBAAgB,OAAO,cAAc,kBAAkB,SAAS;AAAA,EAClE;AACA,QAAM,SAAS,MAAM;AAAA,IACnB;AAAA,IACA;AAAA,IACA,EAAE,IAAI,UAAU,MAAM,UAAU,UAAU,kBAAkB,UAAU,WAAW,KAAK;AAAA,IACtF,CAAC;AAAA,IACD;AAAA,EACF;AAEA,MAAI,CAAC,QAAQ;AACX,UAAM,SAAS,UAAU,qCAAqC,kBAAkB,CAAC;AAAA,EACnF;AAKA,MAAI,CAAC,gCAAgC,EAAE,OAAO,MAAM,mBAAmB,gBAAgB,OAAO,eAAe,CAAC,GAAG;AAC/G,UAAM,SAAS,UAAU,qCAAqC,kBAAkB,CAAC;AAAA,EACnF;AAEA,QAAM,UAAU,MAAM;AAAA,IACpB;AAAA,IACA;AAAA,IACA,EAAE,QAAQ,QAAQ,UAAU,OAAO,UAAU,gBAAgB,OAAO,eAAe;AAAA,IACnF,EAAE,UAAU,CAAC,SAAS,EAAE;AAAA,IACxB;AAAA,MACE,UAAU,OAAO;AAAA,MACjB,gBAAgB,OAAO;AAAA,IACzB;AAAA,EACF;AACA,MAAI,CAAC,SAAS;AACZ,UAAM,SAAS,UAAU,6CAA6C,0BAA0B,CAAC;AAAA,EACnG;AAEA,SAAO;AAAA,IACL;AAAA,IACA,MAAM;AAAA,IACN,wBAAwB,OAAO,cAAc,kBAAkB,SAAS;AAAA,IACxE;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/customers/api/people/[id]/companies/enriched/route.js

@@ -153,7 +153,7 @@ async function GET(req, ctx) {
       throw notFound(translate("customers.errors.person_not_found", "Person not found"));
     }
     if (!isOrganizationReadAccessAllowed({ scope, auth, organizationId: person.organizationId })) {
-      throw new CrudHttpError(403, { error: translate("customers.errors.access_denied", "Access denied") });
+      throw notFound(translate("customers.errors.person_not_found", "Person not found"));
     }
     const entityScope = { tenantId: auth.tenantId, organizationId: person.organizationId };
     const linkWhere = await withActiveCustomerPersonCompanyLinkFilter(

package/dist/modules/customers/api/people/[id]/companies/enriched/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../../../src/modules/customers/api/people/%5Bid%5D/companies/enriched/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { CrudHttpError, isCrudHttpError, notFound } from '@open-mercato/shared/lib/crud/errors'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { findWithDecryption, findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { isOrganizationReadAccessAllowed } from '@open-mercato/core/modules/directory/utils/organizationScopeGuard'\nimport {\n  CustomerEntity,\n  CustomerCompanyProfile,\n  CustomerPersonCompanyLink,\n  CustomerAddress,\n  CustomerCompanyBilling,\n  CustomerPersonCompanyRole,\n  CustomerTagAssignment,\n  CustomerDealCompanyLink,\n  CustomerDeal,\n  CustomerInteraction,\n} from '../../../../../data/entities'\nimport {\n  filterActivePersonCompanyLinks,\n  withActiveCustomerPersonCompanyLinkFilter,\n} from '../../../../../lib/personCompanyLinkTable'\nimport { isOpenDealStatus, isWonDealStatus } from '../../../../../lib/dealStatus'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('customers')\n\nconst paramsSchema = z.object({\n  id: z.string().uuid(),\n})\n\nconst querySchema = z.object({\n  page: z.coerce.number().min(1).default(1),\n  pageSize: z.coerce.number().min(1).max(100).default(20),\n  search: z.string().optional(),\n  sort: z.enum(['name-asc', 'name-desc', 'recent']).default('name-asc'),\n})\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['customers.people.view'] },\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Customers',\n  methods: {\n    GET: {\n      summary: 'Get enriched company data for a person\\'s linked companies',\n      query: querySchema,\n      responses: [\n        {\n          status: 200,\n          description: 'Enriched company rows with profile, billing, tags, deals and more',\n          schema: z.object({\n            items: z.array(\n              z.object({\n                linkId: z.string().uuid(),\n                companyId: z.string().uuid(),\n                displayName: z.string(),\n                isPrimary: z.boolean(),\n                subtitle: z.string().nullable(),\n                profile: z\n                  .object({\n                    industry: z.string().nullable(),\n                    sizeBucket: z.string().nullable(),\n                    legalName: z.string().nullable(),\n                    domain: z.string().nullable(),\n                    websiteUrl: z.string().nullable(),\n                  })\n                  .nullable(),\n                billing: z\n                  .object({\n                    bankName: z.string().nullable(),\n                    bankAccountMasked: z.string().nullable(),\n                    paymentTerms: z.string().nullable(),\n                    preferredCurrency: z.string().nullable(),\n                  })\n                  .nullable(),\n                primaryAddress: z.object({ formatted: z.string() }).nullable(),\n                tags: z.array(\n                  z.object({\n                    id: z.string().uuid(),\n                    label: z.string(),\n                    color: z.string().nullable(),\n                  }),\n                ),\n                roles: z.array(\n                  z.object({\n                    id: z.string().uuid(),\n                    roleValue: z.string(),\n                  }),\n                ),\n                activeDeal: z\n                  .object({\n                    title: z.string(),\n                    valueAmount: z.string().nullable(),\n                    valueCurrency: z.string().nullable(),\n                  })\n                  .nullable(),\n                lastContactAt: z.string().nullable(),\n                clv: z.object({ amount: z.number(), currency: z.string() }).nullable(),\n                status: z.string().nullable(),\n                lifecycleStage: z.string().nullable(),\n                temperature: z.string().nullable(),\n                renewalQuarter: z.string().nullable(),\n              }),\n            ),\n            total: z.number().int().nonnegative(),\n            page: z.number().int().min(1),\n            pageSize: z.number().int().min(1),\n            totalPages: z.number().int().min(1),\n          }),\n        },\n      ],\n    },\n  },\n}\n\nfunction formatAddress(address: CustomerAddress): string {\n  return [address.addressLine1, address.city, address.region, address.postalCode]\n    .filter(Boolean)\n    .join(', ')\n}\n\nfunction buildSubtitle(industry: string | null | undefined, address: CustomerAddress | null): string | null {\n  const parts: string[] = []\n  if (industry) parts.push(industry)\n  if (address) {\n    const locationParts = [address.city, address.region].filter(Boolean)\n    if (locationParts.length > 0) parts.push(locationParts.join(', '))\n  }\n  return parts.length > 0 ? parts.join(' \u00B7 ') : null\n}\n\nfunction matchesSearch(item: Record<string, unknown>, query: string): boolean {\n  const normalized = query.trim().toLowerCase()\n  if (!normalized.length) return true\n  return [\n    typeof item.displayName === 'string' ? item.displayName : null,\n    typeof item.subtitle === 'string' ? item.subtitle : null,\n    typeof item.status === 'string' ? item.status : null,\n    typeof item.lifecycleStage === 'string' ? item.lifecycleStage : null,\n    typeof item.temperature === 'string' ? item.temperature : null,\n    typeof item.renewalQuarter === 'string' ? item.renewalQuarter : null,\n  ]\n    .filter((value): value is string => typeof value === 'string' && value.length > 0)\n    .some((value) => value.toLowerCase().includes(normalized))\n}\n\nexport async function GET(req: Request, ctx: { params?: { id?: string } }) {\n  const { translate } = await resolveTranslations()\n  try {\n    const { id } = paramsSchema.parse({ id: ctx.params?.id })\n\n    const auth = await getAuthFromRequest(req)\n    if (!auth?.tenantId) {\n      throw new CrudHttpError(401, { error: translate('customers.errors.unauthorized', 'Unauthorized') })\n    }\n    const url = new URL(req.url)\n    const query = querySchema.parse({\n      page: url.searchParams.get('page') ?? undefined,\n      pageSize: url.searchParams.get('pageSize') ?? undefined,\n      search: url.searchParams.get('search') ?? undefined,\n      sort: url.searchParams.get('sort') ?? undefined,\n    })\n\n    const container = await createRequestContainer()\n    const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n    const em = (container.resolve('em') as EntityManager).fork()\n\n    const decryptionScope = { tenantId: auth.tenantId, organizationId: auth.orgId ?? null }\n    const person = await findOneWithDecryption(em, CustomerEntity, { id, kind: 'person', tenantId: auth.tenantId, deletedAt: null }, {}, decryptionScope)\n    if (!person) {\n      throw notFound(translate('customers.errors.person_not_found', 'Person not found'))\n    }\n\n    if (!isOrganizationReadAccessAllowed({ scope, auth, organizationId: person.organizationId })) {\n      throw new CrudHttpError(403, { error: translate('customers.errors.access_denied', 'Access denied') })\n    }\n\n    const entityScope = { tenantId: auth.tenantId, organizationId: person.organizationId }\n    const linkWhere = await withActiveCustomerPersonCompanyLinkFilter(\n      em,\n      {\n        person,\n        tenantId: auth.tenantId,\n      },\n      'customers.people.companiesEnriched.GET',\n    )\n    const links = filterActivePersonCompanyLinks(\n      await findWithDecryption(\n        em,\n        CustomerPersonCompanyLink,\n        linkWhere,\n        { populate: ['company'] },\n        entityScope,\n      ),\n    )\n\n    const companyIds = links.map((link) => (link.company as CustomerEntity).id)\n\n    if (companyIds.length === 0) {\n      return NextResponse.json({\n        items: [],\n        total: 0,\n        page: 1,\n        pageSize: query.pageSize,\n        totalPages: 1,\n      })\n    }\n\n    const tenantScope = { tenantId: auth.tenantId, organizationId: person.organizationId }\n    const [allProfiles, allAddresses, allBillings, allTagAssignments, allRoles, allDealLinks, allInteractions] =\n      await Promise.all([\n        findWithDecryption(em, CustomerCompanyProfile, { entity: { $in: companyIds }, ...tenantScope }, {}, entityScope),\n        findWithDecryption(em, CustomerAddress, { entity: { $in: companyIds }, isPrimary: true, ...tenantScope }, {}, entityScope),\n        findWithDecryption(em, CustomerCompanyBilling, { entity: { $in: companyIds }, ...tenantScope }, {}, entityScope),\n        findWithDecryption(em, CustomerTagAssignment, { entity: { $in: companyIds }, ...tenantScope }, { populate: ['tag'] }, entityScope),\n        findWithDecryption(em, CustomerPersonCompanyRole, { personEntity: person, companyEntity: { $in: companyIds }, ...tenantScope }, {}, entityScope),\n        // CustomerDealCompanyLink is a pure junction table without tenantId/organizationId columns;\n        // scoping flows transitively through the already-tenant-scoped `company` filter.\n        findWithDecryption(em, CustomerDealCompanyLink, { company: { $in: companyIds } }, { populate: ['deal'] }, entityScope),\n        findWithDecryption(em, CustomerInteraction, {\n          entity: { $in: companyIds },\n          occurredAt: { $ne: null },\n          deletedAt: null,\n          ...tenantScope,\n        }, { orderBy: { occurredAt: 'DESC' } }, entityScope),\n      ])\n\n    const profileByCompany = new Map(allProfiles.map((p) => [(p.entity as { id: string }).id, p]))\n    const addressByCompany = new Map(allAddresses.map((a) => [(a.entity as { id: string }).id, a]))\n    const billingByCompany = new Map(allBillings.map((b) => [(b.entity as { id: string }).id, b]))\n\n    const tagsByCompany = new Map<string, typeof allTagAssignments>()\n    for (const ta of allTagAssignments) {\n      const entityId = (ta.entity as { id: string }).id\n      const existing = tagsByCompany.get(entityId) ?? []\n      existing.push(ta)\n      tagsByCompany.set(entityId, existing)\n    }\n\n    const rolesByCompany = new Map<string, typeof allRoles>()\n    for (const role of allRoles) {\n      const entityId = (role.companyEntity as { id: string }).id\n      const existing = rolesByCompany.get(entityId) ?? []\n      existing.push(role)\n      rolesByCompany.set(entityId, existing)\n    }\n\n    const dealLinksByCompany = new Map<string, typeof allDealLinks>()\n    for (const dcl of allDealLinks) {\n      const entityId = (dcl.company as { id: string }).id\n      const existing = dealLinksByCompany.get(entityId) ?? []\n      existing.push(dcl)\n      dealLinksByCompany.set(entityId, existing)\n    }\n\n    const lastInteractionByCompany = new Map<string, CustomerInteraction>()\n    for (const interaction of allInteractions) {\n      const entityId = (interaction.entity as { id: string }).id\n      if (!lastInteractionByCompany.has(entityId)) {\n        lastInteractionByCompany.set(entityId, interaction)\n      }\n    }\n\n    const items = links.map((link) => {\n      const company = link.company as CustomerEntity\n      const companyId = company.id\n      const profile = profileByCompany.get(companyId) ?? null\n      const primaryAddress = addressByCompany.get(companyId) ?? null\n      const billing = billingByCompany.get(companyId) ?? null\n      const tagAssignments = tagsByCompany.get(companyId) ?? []\n      const roles = rolesByCompany.get(companyId) ?? []\n      const companyDealLinks = dealLinksByCompany.get(companyId) ?? []\n      const lastInteraction = lastInteractionByCompany.get(companyId) ?? null\n\n      const activeDeals = companyDealLinks\n        .map((dcl) => dcl.deal as CustomerDeal)\n        .filter((deal) => isOpenDealStatus(deal.status) && !deal.deletedAt)\n        .sort((a, b) => b.createdAt.getTime() - a.createdAt.getTime())\n      const activeDeal = activeDeals.length > 0 ? activeDeals[0] : null\n\n      const wonDeals = companyDealLinks\n        .map((dcl) => dcl.deal as CustomerDeal)\n        .filter((deal) => isWonDealStatus(deal.status) && !deal.deletedAt)\n      let clv: { amount: number; currency: string } | null = null\n      if (wonDeals.length > 0) {\n        const currencies = new Map<string, number>()\n        for (const deal of wonDeals) {\n          if (deal.valueAmount) {\n            const currency = deal.valueCurrency ?? 'USD'\n            currencies.set(currency, (currencies.get(currency) ?? 0) + parseFloat(deal.valueAmount))\n          }\n        }\n        if (currencies.size > 0) {\n          const [currency, amount] = currencies.entries().next().value!\n          clv = { amount, currency }\n        }\n      }\n\n      return {\n        linkId: link.id,\n        companyId,\n        displayName: company.displayName,\n        isPrimary: Boolean(link.isPrimary),\n        subtitle: buildSubtitle(profile?.industry, primaryAddress),\n        profile: profile\n          ? {\n              industry: profile.industry ?? null,\n              sizeBucket: profile.sizeBucket ?? null,\n              legalName: profile.legalName ?? null,\n              domain: profile.domain ?? null,\n              websiteUrl: profile.websiteUrl ?? null,\n            }\n          : null,\n        billing: billing\n          ? {\n              bankName: billing.bankName ?? null,\n              bankAccountMasked: billing.bankAccountMasked ?? null,\n              paymentTerms: billing.paymentTerms ?? null,\n              preferredCurrency: billing.preferredCurrency ?? null,\n            }\n          : null,\n        primaryAddress: primaryAddress ? { formatted: formatAddress(primaryAddress) } : null,\n        tags: tagAssignments.map((ta) => {\n          const tag = ta.tag as { id: string; label: string; color?: string | null }\n          return {\n            id: tag.id,\n            label: tag.label,\n            color: tag.color ?? null,\n          }\n        }),\n        roles: roles.map((r) => ({ id: r.id, roleValue: r.roleValue })),\n        activeDeal: activeDeal\n          ? {\n              title: activeDeal.title,\n              valueAmount: activeDeal.valueAmount ?? null,\n              valueCurrency: activeDeal.valueCurrency ?? null,\n            }\n          : null,\n        lastContactAt: lastInteraction?.occurredAt?.toISOString() ?? null,\n        clv,\n        status: company.status ?? null,\n        lifecycleStage: company.lifecycleStage ?? null,\n        temperature: company.temperature ?? null,\n        renewalQuarter: company.renewalQuarter ?? null,\n      }\n    })\n\n    const filteredItems = query.search?.trim().length\n      ? items.filter((item) => matchesSearch(item as Record<string, unknown>, query.search ?? ''))\n      : items\n    const sortedItems = [...filteredItems].sort((left, right) => {\n      if (query.sort === 'recent') {\n        const leftTimestamp = left.lastContactAt ? new Date(left.lastContactAt).getTime() : 0\n        const rightTimestamp = right.lastContactAt ? new Date(right.lastContactAt).getTime() : 0\n        if (leftTimestamp === rightTimestamp) {\n          return left.displayName.localeCompare(right.displayName, undefined, { sensitivity: 'base' })\n        }\n        return rightTimestamp - leftTimestamp\n      }\n      const compare = left.displayName.localeCompare(right.displayName, undefined, { sensitivity: 'base' })\n      return query.sort === 'name-asc' ? compare : -compare\n    })\n\n    const total = sortedItems.length\n    const totalPages = Math.max(1, Math.ceil(total / query.pageSize))\n    const page = Math.min(query.page, totalPages)\n    const start = (page - 1) * query.pageSize\n\n    return NextResponse.json({\n      items: sortedItems.slice(start, start + query.pageSize),\n      total,\n      page,\n      pageSize: query.pageSize,\n      totalPages,\n    })\n  } catch (err) {\n    if (isCrudHttpError(err)) {\n      return NextResponse.json(err.body, { status: err.status })\n    }\n    logger.error('/companies/enriched] GET failed', { component: 'people/[id', err })\n    return NextResponse.json({ error: translate('customers.errors.internal', 'Internal server error') }, { status: 500 })\n  }\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAElB,SAAS,eAAe,iBAAiB,gBAAgB;AACzD,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AACnD,SAAS,2BAA2B;AAEpC,SAAS,oBAAoB,6BAA6B;AAC1D,SAAS,uCAAuC;AAChD;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAEA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,kBAAkB,uBAAuB;AAClD,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,WAAW;AAEvC,MAAM,eAAe,EAAE,OAAO;AAAA,EAC5B,IAAI,EAAE,OAAO,EAAE,KAAK;AACtB,CAAC;AAED,MAAM,cAAc,EAAE,OAAO;AAAA,EAC3B,MAAM,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,QAAQ,CAAC;AAAA,EACxC,UAAU,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,QAAQ,EAAE;AAAA,EACtD,QAAQ,EAAE,OAAO,EAAE,SAAS;AAAA,EAC5B,MAAM,EAAE,KAAK,CAAC,YAAY,aAAa,QAAQ,CAAC,EAAE,QAAQ,UAAU;AACtE,CAAC;AAEM,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,uBAAuB,EAAE;AACvE;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,OAAO;AAAA,MACP,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO;AAAA,YACf,OAAO,EAAE;AAAA,cACP,EAAE,OAAO;AAAA,gBACP,QAAQ,EAAE,OAAO,EAAE,KAAK;AAAA,gBACxB,WAAW,EAAE,OAAO,EAAE,KAAK;AAAA,gBAC3B,aAAa,EAAE,OAAO;AAAA,gBACtB,WAAW,EAAE,QAAQ;AAAA,gBACrB,UAAU,EAAE,OAAO,EAAE,SAAS;AAAA,gBAC9B,SAAS,EACN,OAAO;AAAA,kBACN,UAAU,EAAE,OAAO,EAAE,SAAS;AAAA,kBAC9B,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,kBAChC,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,kBAC/B,QAAQ,EAAE,OAAO,EAAE,SAAS;AAAA,kBAC5B,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,gBAClC,CAAC,EACA,SAAS;AAAA,gBACZ,SAAS,EACN,OAAO;AAAA,kBACN,UAAU,EAAE,OAAO,EAAE,SAAS;AAAA,kBAC9B,mBAAmB,EAAE,OAAO,EAAE,SAAS;AAAA,kBACvC,cAAc,EAAE,OAAO,EAAE,SAAS;AAAA,kBAClC,mBAAmB,EAAE,OAAO,EAAE,SAAS;AAAA,gBACzC,CAAC,EACA,SAAS;AAAA,gBACZ,gBAAgB,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,EAAE,SAAS;AAAA,gBAC7D,MAAM,EAAE;AAAA,kBACN,EAAE,OAAO;AAAA,oBACP,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,oBACpB,OAAO,EAAE,OAAO;AAAA,oBAChB,OAAO,EAAE,OAAO,EAAE,SAAS;AAAA,kBAC7B,CAAC;AAAA,gBACH;AAAA,gBACA,OAAO,EAAE;AAAA,kBACP,EAAE,OAAO;AAAA,oBACP,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,oBACpB,WAAW,EAAE,OAAO;AAAA,kBACtB,CAAC;AAAA,gBACH;AAAA,gBACA,YAAY,EACT,OAAO;AAAA,kBACN,OAAO,EAAE,OAAO;AAAA,kBAChB,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,kBACjC,eAAe,EAAE,OAAO,EAAE,SAAS;AAAA,gBACrC,CAAC,EACA,SAAS;AAAA,gBACZ,eAAe,EAAE,OAAO,EAAE,SAAS;AAAA,gBACnC,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,GAAG,UAAU,EAAE,OAAO,EAAE,CAAC,EAAE,SAAS;AAAA,gBACrE,QAAQ,EAAE,OAAO,EAAE,SAAS;AAAA,gBAC5B,gBAAgB,EAAE,OAAO,EAAE,SAAS;AAAA,gBACpC,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,gBACjC,gBAAgB,EAAE,OAAO,EAAE,SAAS;AAAA,cACtC,CAAC;AAAA,YACH;AAAA,YACA,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY;AAAA,YACpC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC;AAAA,YAC5B,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC;AAAA,YAChC,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC;AAAA,UACpC,CAAC;AAAA,QACH;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;AAEA,SAAS,cAAc,SAAkC;AACvD,SAAO,CAAC,QAAQ,cAAc,QAAQ,MAAM,QAAQ,QAAQ,QAAQ,UAAU,EAC3E,OAAO,OAAO,EACd,KAAK,IAAI;AACd;AAEA,SAAS,cAAc,UAAqC,SAAgD;AAC1G,QAAM,QAAkB,CAAC;AACzB,MAAI,SAAU,OAAM,KAAK,QAAQ;AACjC,MAAI,SAAS;AACX,UAAM,gBAAgB,CAAC,QAAQ,MAAM,QAAQ,MAAM,EAAE,OAAO,OAAO;AACnE,QAAI,cAAc,SAAS,EAAG,OAAM,KAAK,cAAc,KAAK,IAAI,CAAC;AAAA,EACnE;AACA,SAAO,MAAM,SAAS,IAAI,MAAM,KAAK,QAAK,IAAI;AAChD;AAEA,SAAS,cAAc,MAA+B,OAAwB;AAC5E,QAAM,aAAa,MAAM,KAAK,EAAE,YAAY;AAC5C,MAAI,CAAC,WAAW,OAAQ,QAAO;AAC/B,SAAO;AAAA,IACL,OAAO,KAAK,gBAAgB,WAAW,KAAK,cAAc;AAAA,IAC1D,OAAO,KAAK,aAAa,WAAW,KAAK,WAAW;AAAA,IACpD,OAAO,KAAK,WAAW,WAAW,KAAK,SAAS;AAAA,IAChD,OAAO,KAAK,mBAAmB,WAAW,KAAK,iBAAiB;AAAA,IAChE,OAAO,KAAK,gBAAgB,WAAW,KAAK,cAAc;AAAA,IAC1D,OAAO,KAAK,mBAAmB,WAAW,KAAK,iBAAiB;AAAA,EAClE,EACG,OAAO,CAAC,UAA2B,OAAO,UAAU,YAAY,MAAM,SAAS,CAAC,EAChF,KAAK,CAAC,UAAU,MAAM,YAAY,EAAE,SAAS,UAAU,CAAC;AAC7D;AAEA,eAAsB,IAAI,KAAc,KAAmC;AACzE,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,MAAI;AACF,UAAM,EAAE,GAAG,IAAI,aAAa,MAAM,EAAE,IAAI,IAAI,QAAQ,GAAG,CAAC;AAExD,UAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,QAAI,CAAC,MAAM,UAAU;AACnB,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,iCAAiC,cAAc,EAAE,CAAC;AAAA,IACpG;AACA,UAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,UAAM,QAAQ,YAAY,MAAM;AAAA,MAC9B,MAAM,IAAI,aAAa,IAAI,MAAM,KAAK;AAAA,MACtC,UAAU,IAAI,aAAa,IAAI,UAAU,KAAK;AAAA,MAC9C,QAAQ,IAAI,aAAa,IAAI,QAAQ,KAAK;AAAA,MAC1C,MAAM,IAAI,aAAa,IAAI,MAAM,KAAK;AAAA,IACxC,CAAC;AAED,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AACxF,UAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAE3D,UAAM,kBAAkB,EAAE,UAAU,KAAK,UAAU,gBAAgB,KAAK,SAAS,KAAK;AACtF,UAAM,SAAS,MAAM,sBAAsB,IAAI,gBAAgB,EAAE,IAAI,MAAM,UAAU,UAAU,KAAK,UAAU,WAAW,KAAK,GAAG,CAAC,GAAG,eAAe;AACpJ,QAAI,CAAC,QAAQ;AACX,YAAM,SAAS,UAAU,qCAAqC,kBAAkB,CAAC;AAAA,IACnF;AAEA,QAAI,CAAC,gCAAgC,EAAE,OAAO,MAAM,gBAAgB,OAAO,eAAe,CAAC,GAAG;AAC5F,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,kCAAkC,eAAe,EAAE,CAAC;AAAA,IACtG;AAEA,UAAM,cAAc,EAAE,UAAU,KAAK,UAAU,gBAAgB,OAAO,eAAe;AACrF,UAAM,YAAY,MAAM;AAAA,MACtB;AAAA,MACA;AAAA,QACE;AAAA,QACA,UAAU,KAAK;AAAA,MACjB;AAAA,MACA;AAAA,IACF;AACA,UAAM,QAAQ;AAAA,MACZ,MAAM;AAAA,QACJ;AAAA,QACA;AAAA,QACA;AAAA,QACA,EAAE,UAAU,CAAC,SAAS,EAAE;AAAA,QACxB;AAAA,MACF;AAAA,IACF;AAEA,UAAM,aAAa,MAAM,IAAI,CAAC,SAAU,KAAK,QAA2B,EAAE;AAE1E,QAAI,WAAW,WAAW,GAAG;AAC3B,aAAO,aAAa,KAAK;AAAA,QACvB,OAAO,CAAC;AAAA,QACR,OAAO;AAAA,QACP,MAAM;AAAA,QACN,UAAU,MAAM;AAAA,QAChB,YAAY;AAAA,MACd,CAAC;AAAA,IACH;AAEA,UAAM,cAAc,EAAE,UAAU,KAAK,UAAU,gBAAgB,OAAO,eAAe;AACrF,UAAM,CAAC,aAAa,cAAc,aAAa,mBAAmB,UAAU,cAAc,eAAe,IACvG,MAAM,QAAQ,IAAI;AAAA,MAChB,mBAAmB,IAAI,wBAAwB,EAAE,QAAQ,EAAE,KAAK,WAAW,GAAG,GAAG,YAAY,GAAG,CAAC,GAAG,WAAW;AAAA,MAC/G,mBAAmB,IAAI,iBAAiB,EAAE,QAAQ,EAAE,KAAK,WAAW,GAAG,WAAW,MAAM,GAAG,YAAY,GAAG,CAAC,GAAG,WAAW;AAAA,MACzH,mBAAmB,IAAI,wBAAwB,EAAE,QAAQ,EAAE,KAAK,WAAW,GAAG,GAAG,YAAY,GAAG,CAAC,GAAG,WAAW;AAAA,MAC/G,mBAAmB,IAAI,uBAAuB,EAAE,QAAQ,EAAE,KAAK,WAAW,GAAG,GAAG,YAAY,GAAG,EAAE,UAAU,CAAC,KAAK,EAAE,GAAG,WAAW;AAAA,MACjI,mBAAmB,IAAI,2BAA2B,EAAE,cAAc,QAAQ,eAAe,EAAE,KAAK,WAAW,GAAG,GAAG,YAAY,GAAG,CAAC,GAAG,WAAW;AAAA;AAAA;AAAA,MAG/I,mBAAmB,IAAI,yBAAyB,EAAE,SAAS,EAAE,KAAK,WAAW,EAAE,GAAG,EAAE,UAAU,CAAC,MAAM,EAAE,GAAG,WAAW;AAAA,MACrH,mBAAmB,IAAI,qBAAqB;AAAA,QAC1C,QAAQ,EAAE,KAAK,WAAW;AAAA,QAC1B,YAAY,EAAE,KAAK,KAAK;AAAA,QACxB,WAAW;AAAA,QACX,GAAG;AAAA,MACL,GAAG,EAAE,SAAS,EAAE,YAAY,OAAO,EAAE,GAAG,WAAW;AAAA,IACrD,CAAC;AAEH,UAAM,mBAAmB,IAAI,IAAI,YAAY,IAAI,CAAC,MAAM,CAAE,EAAE,OAA0B,IAAI,CAAC,CAAC,CAAC;AAC7F,UAAM,mBAAmB,IAAI,IAAI,aAAa,IAAI,CAAC,MAAM,CAAE,EAAE,OAA0B,IAAI,CAAC,CAAC,CAAC;AAC9F,UAAM,mBAAmB,IAAI,IAAI,YAAY,IAAI,CAAC,MAAM,CAAE,EAAE,OAA0B,IAAI,CAAC,CAAC,CAAC;AAE7F,UAAM,gBAAgB,oBAAI,IAAsC;AAChE,eAAW,MAAM,mBAAmB;AAClC,YAAM,WAAY,GAAG,OAA0B;AAC/C,YAAM,WAAW,cAAc,IAAI,QAAQ,KAAK,CAAC;AACjD,eAAS,KAAK,EAAE;AAChB,oBAAc,IAAI,UAAU,QAAQ;AAAA,IACtC;AAEA,UAAM,iBAAiB,oBAAI,IAA6B;AACxD,eAAW,QAAQ,UAAU;AAC3B,YAAM,WAAY,KAAK,cAAiC;AACxD,YAAM,WAAW,eAAe,IAAI,QAAQ,KAAK,CAAC;AAClD,eAAS,KAAK,IAAI;AAClB,qBAAe,IAAI,UAAU,QAAQ;AAAA,IACvC;AAEA,UAAM,qBAAqB,oBAAI,IAAiC;AAChE,eAAW,OAAO,cAAc;AAC9B,YAAM,WAAY,IAAI,QAA2B;AACjD,YAAM,WAAW,mBAAmB,IAAI,QAAQ,KAAK,CAAC;AACtD,eAAS,KAAK,GAAG;AACjB,yBAAmB,IAAI,UAAU,QAAQ;AAAA,IAC3C;AAEA,UAAM,2BAA2B,oBAAI,IAAiC;AACtE,eAAW,eAAe,iBAAiB;AACzC,YAAM,WAAY,YAAY,OAA0B;AACxD,UAAI,CAAC,yBAAyB,IAAI,QAAQ,GAAG;AAC3C,iCAAyB,IAAI,UAAU,WAAW;AAAA,MACpD;AAAA,IACF;AAEA,UAAM,QAAQ,MAAM,IAAI,CAAC,SAAS;AAChC,YAAM,UAAU,KAAK;AACrB,YAAM,YAAY,QAAQ;AAC1B,YAAM,UAAU,iBAAiB,IAAI,SAAS,KAAK;AACnD,YAAM,iBAAiB,iBAAiB,IAAI,SAAS,KAAK;AAC1D,YAAM,UAAU,iBAAiB,IAAI,SAAS,KAAK;AACnD,YAAM,iBAAiB,cAAc,IAAI,SAAS,KAAK,CAAC;AACxD,YAAM,QAAQ,eAAe,IAAI,SAAS,KAAK,CAAC;AAChD,YAAM,mBAAmB,mBAAmB,IAAI,SAAS,KAAK,CAAC;AAC/D,YAAM,kBAAkB,yBAAyB,IAAI,SAAS,KAAK;AAEnE,YAAM,cAAc,iBACjB,IAAI,CAAC,QAAQ,IAAI,IAAoB,EACrC,OAAO,CAAC,SAAS,iBAAiB,KAAK,MAAM,KAAK,CAAC,KAAK,SAAS,EACjE,KAAK,CAAC,GAAG,MAAM,EAAE,UAAU,QAAQ,IAAI,EAAE,UAAU,QAAQ,CAAC;AAC/D,YAAM,aAAa,YAAY,SAAS,IAAI,YAAY,CAAC,IAAI;AAE7D,YAAM,WAAW,iBACd,IAAI,CAAC,QAAQ,IAAI,IAAoB,EACrC,OAAO,CAAC,SAAS,gBAAgB,KAAK,MAAM,KAAK,CAAC,KAAK,SAAS;AACnE,UAAI,MAAmD;AACvD,UAAI,SAAS,SAAS,GAAG;AACvB,cAAM,aAAa,oBAAI,IAAoB;AAC3C,mBAAW,QAAQ,UAAU;AAC3B,cAAI,KAAK,aAAa;AACpB,kBAAM,WAAW,KAAK,iBAAiB;AACvC,uBAAW,IAAI,WAAW,WAAW,IAAI,QAAQ,KAAK,KAAK,WAAW,KAAK,WAAW,CAAC;AAAA,UACzF;AAAA,QACF;AACA,YAAI,WAAW,OAAO,GAAG;AACvB,gBAAM,CAAC,UAAU,MAAM,IAAI,WAAW,QAAQ,EAAE,KAAK,EAAE;AACvD,gBAAM,EAAE,QAAQ,SAAS;AAAA,QAC3B;AAAA,MACF;AAEA,aAAO;AAAA,QACL,QAAQ,KAAK;AAAA,QACb;AAAA,QACA,aAAa,QAAQ;AAAA,QACrB,WAAW,QAAQ,KAAK,SAAS;AAAA,QACjC,UAAU,cAAc,SAAS,UAAU,cAAc;AAAA,QACzD,SAAS,UACL;AAAA,UACE,UAAU,QAAQ,YAAY;AAAA,UAC9B,YAAY,QAAQ,cAAc;AAAA,UAClC,WAAW,QAAQ,aAAa;AAAA,UAChC,QAAQ,QAAQ,UAAU;AAAA,UAC1B,YAAY,QAAQ,cAAc;AAAA,QACpC,IACA;AAAA,QACJ,SAAS,UACL;AAAA,UACE,UAAU,QAAQ,YAAY;AAAA,UAC9B,mBAAmB,QAAQ,qBAAqB;AAAA,UAChD,cAAc,QAAQ,gBAAgB;AAAA,UACtC,mBAAmB,QAAQ,qBAAqB;AAAA,QAClD,IACA;AAAA,QACJ,gBAAgB,iBAAiB,EAAE,WAAW,cAAc,cAAc,EAAE,IAAI;AAAA,QAChF,MAAM,eAAe,IAAI,CAAC,OAAO;AAC/B,gBAAM,MAAM,GAAG;AACf,iBAAO;AAAA,YACL,IAAI,IAAI;AAAA,YACR,OAAO,IAAI;AAAA,YACX,OAAO,IAAI,SAAS;AAAA,UACtB;AAAA,QACF,CAAC;AAAA,QACD,OAAO,MAAM,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,WAAW,EAAE,UAAU,EAAE;AAAA,QAC9D,YAAY,aACR;AAAA,UACE,OAAO,WAAW;AAAA,UAClB,aAAa,WAAW,eAAe;AAAA,UACvC,eAAe,WAAW,iBAAiB;AAAA,QAC7C,IACA;AAAA,QACJ,eAAe,iBAAiB,YAAY,YAAY,KAAK;AAAA,QAC7D;AAAA,QACA,QAAQ,QAAQ,UAAU;AAAA,QAC1B,gBAAgB,QAAQ,kBAAkB;AAAA,QAC1C,aAAa,QAAQ,eAAe;AAAA,QACpC,gBAAgB,QAAQ,kBAAkB;AAAA,MAC5C;AAAA,IACF,CAAC;AAED,UAAM,gBAAgB,MAAM,QAAQ,KAAK,EAAE,SACvC,MAAM,OAAO,CAAC,SAAS,cAAc,MAAiC,MAAM,UAAU,EAAE,CAAC,IACzF;AACJ,UAAM,cAAc,CAAC,GAAG,aAAa,EAAE,KAAK,CAAC,MAAM,UAAU;AAC3D,UAAI,MAAM,SAAS,UAAU;AAC3B,cAAM,gBAAgB,KAAK,gBAAgB,IAAI,KAAK,KAAK,aAAa,EAAE,QAAQ,IAAI;AACpF,cAAM,iBAAiB,MAAM,gBAAgB,IAAI,KAAK,MAAM,aAAa,EAAE,QAAQ,IAAI;AACvF,YAAI,kBAAkB,gBAAgB;AACpC,iBAAO,KAAK,YAAY,cAAc,MAAM,aAAa,QAAW,EAAE,aAAa,OAAO,CAAC;AAAA,QAC7F;AACA,eAAO,iBAAiB;AAAA,MAC1B;AACA,YAAM,UAAU,KAAK,YAAY,cAAc,MAAM,aAAa,QAAW,EAAE,aAAa,OAAO,CAAC;AACpG,aAAO,MAAM,SAAS,aAAa,UAAU,CAAC;AAAA,IAChD,CAAC;AAED,UAAM,QAAQ,YAAY;AAC1B,UAAM,aAAa,KAAK,IAAI,GAAG,KAAK,KAAK,QAAQ,MAAM,QAAQ,CAAC;AAChE,UAAM,OAAO,KAAK,IAAI,MAAM,MAAM,UAAU;AAC5C,UAAM,SAAS,OAAO,KAAK,MAAM;AAEjC,WAAO,aAAa,KAAK;AAAA,MACvB,OAAO,YAAY,MAAM,OAAO,QAAQ,MAAM,QAAQ;AAAA,MACtD;AAAA,MACA;AAAA,MACA,UAAU,MAAM;AAAA,MAChB;AAAA,IACF,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,GAAG;AACxB,aAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,IAC3D;AACA,WAAO,MAAM,mCAAmC,EAAE,WAAW,cAAc,IAAI,CAAC;AAChF,WAAO,aAAa,KAAK,EAAE,OAAO,UAAU,6BAA6B,uBAAuB,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACtH;AACF;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { CrudHttpError, isCrudHttpError, notFound } from '@open-mercato/shared/lib/crud/errors'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { findWithDecryption, findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { isOrganizationReadAccessAllowed } from '@open-mercato/core/modules/directory/utils/organizationScopeGuard'\nimport {\n  CustomerEntity,\n  CustomerCompanyProfile,\n  CustomerPersonCompanyLink,\n  CustomerAddress,\n  CustomerCompanyBilling,\n  CustomerPersonCompanyRole,\n  CustomerTagAssignment,\n  CustomerDealCompanyLink,\n  CustomerDeal,\n  CustomerInteraction,\n} from '../../../../../data/entities'\nimport {\n  filterActivePersonCompanyLinks,\n  withActiveCustomerPersonCompanyLinkFilter,\n} from '../../../../../lib/personCompanyLinkTable'\nimport { isOpenDealStatus, isWonDealStatus } from '../../../../../lib/dealStatus'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('customers')\n\nconst paramsSchema = z.object({\n  id: z.string().uuid(),\n})\n\nconst querySchema = z.object({\n  page: z.coerce.number().min(1).default(1),\n  pageSize: z.coerce.number().min(1).max(100).default(20),\n  search: z.string().optional(),\n  sort: z.enum(['name-asc', 'name-desc', 'recent']).default('name-asc'),\n})\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['customers.people.view'] },\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Customers',\n  methods: {\n    GET: {\n      summary: 'Get enriched company data for a person\\'s linked companies',\n      query: querySchema,\n      responses: [\n        {\n          status: 200,\n          description: 'Enriched company rows with profile, billing, tags, deals and more',\n          schema: z.object({\n            items: z.array(\n              z.object({\n                linkId: z.string().uuid(),\n                companyId: z.string().uuid(),\n                displayName: z.string(),\n                isPrimary: z.boolean(),\n                subtitle: z.string().nullable(),\n                profile: z\n                  .object({\n                    industry: z.string().nullable(),\n                    sizeBucket: z.string().nullable(),\n                    legalName: z.string().nullable(),\n                    domain: z.string().nullable(),\n                    websiteUrl: z.string().nullable(),\n                  })\n                  .nullable(),\n                billing: z\n                  .object({\n                    bankName: z.string().nullable(),\n                    bankAccountMasked: z.string().nullable(),\n                    paymentTerms: z.string().nullable(),\n                    preferredCurrency: z.string().nullable(),\n                  })\n                  .nullable(),\n                primaryAddress: z.object({ formatted: z.string() }).nullable(),\n                tags: z.array(\n                  z.object({\n                    id: z.string().uuid(),\n                    label: z.string(),\n                    color: z.string().nullable(),\n                  }),\n                ),\n                roles: z.array(\n                  z.object({\n                    id: z.string().uuid(),\n                    roleValue: z.string(),\n                  }),\n                ),\n                activeDeal: z\n                  .object({\n                    title: z.string(),\n                    valueAmount: z.string().nullable(),\n                    valueCurrency: z.string().nullable(),\n                  })\n                  .nullable(),\n                lastContactAt: z.string().nullable(),\n                clv: z.object({ amount: z.number(), currency: z.string() }).nullable(),\n                status: z.string().nullable(),\n                lifecycleStage: z.string().nullable(),\n                temperature: z.string().nullable(),\n                renewalQuarter: z.string().nullable(),\n              }),\n            ),\n            total: z.number().int().nonnegative(),\n            page: z.number().int().min(1),\n            pageSize: z.number().int().min(1),\n            totalPages: z.number().int().min(1),\n          }),\n        },\n      ],\n    },\n  },\n}\n\nfunction formatAddress(address: CustomerAddress): string {\n  return [address.addressLine1, address.city, address.region, address.postalCode]\n    .filter(Boolean)\n    .join(', ')\n}\n\nfunction buildSubtitle(industry: string | null | undefined, address: CustomerAddress | null): string | null {\n  const parts: string[] = []\n  if (industry) parts.push(industry)\n  if (address) {\n    const locationParts = [address.city, address.region].filter(Boolean)\n    if (locationParts.length > 0) parts.push(locationParts.join(', '))\n  }\n  return parts.length > 0 ? parts.join(' \u00B7 ') : null\n}\n\nfunction matchesSearch(item: Record<string, unknown>, query: string): boolean {\n  const normalized = query.trim().toLowerCase()\n  if (!normalized.length) return true\n  return [\n    typeof item.displayName === 'string' ? item.displayName : null,\n    typeof item.subtitle === 'string' ? item.subtitle : null,\n    typeof item.status === 'string' ? item.status : null,\n    typeof item.lifecycleStage === 'string' ? item.lifecycleStage : null,\n    typeof item.temperature === 'string' ? item.temperature : null,\n    typeof item.renewalQuarter === 'string' ? item.renewalQuarter : null,\n  ]\n    .filter((value): value is string => typeof value === 'string' && value.length > 0)\n    .some((value) => value.toLowerCase().includes(normalized))\n}\n\nexport async function GET(req: Request, ctx: { params?: { id?: string } }) {\n  const { translate } = await resolveTranslations()\n  try {\n    const { id } = paramsSchema.parse({ id: ctx.params?.id })\n\n    const auth = await getAuthFromRequest(req)\n    if (!auth?.tenantId) {\n      throw new CrudHttpError(401, { error: translate('customers.errors.unauthorized', 'Unauthorized') })\n    }\n    const url = new URL(req.url)\n    const query = querySchema.parse({\n      page: url.searchParams.get('page') ?? undefined,\n      pageSize: url.searchParams.get('pageSize') ?? undefined,\n      search: url.searchParams.get('search') ?? undefined,\n      sort: url.searchParams.get('sort') ?? undefined,\n    })\n\n    const container = await createRequestContainer()\n    const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n    const em = (container.resolve('em') as EntityManager).fork()\n\n    const decryptionScope = { tenantId: auth.tenantId, organizationId: auth.orgId ?? null }\n    const person = await findOneWithDecryption(em, CustomerEntity, { id, kind: 'person', tenantId: auth.tenantId, deletedAt: null }, {}, decryptionScope)\n    if (!person) {\n      throw notFound(translate('customers.errors.person_not_found', 'Person not found'))\n    }\n\n    // Existence oracle (#5504): deny a cross-org read as not-found \u2014 identical to\n    // the parent-not-found above \u2014 so it cannot reveal that a person exists in an\n    // organization the caller cannot see.\n    if (!isOrganizationReadAccessAllowed({ scope, auth, organizationId: person.organizationId })) {\n      throw notFound(translate('customers.errors.person_not_found', 'Person not found'))\n    }\n\n    const entityScope = { tenantId: auth.tenantId, organizationId: person.organizationId }\n    const linkWhere = await withActiveCustomerPersonCompanyLinkFilter(\n      em,\n      {\n        person,\n        tenantId: auth.tenantId,\n      },\n      'customers.people.companiesEnriched.GET',\n    )\n    const links = filterActivePersonCompanyLinks(\n      await findWithDecryption(\n        em,\n        CustomerPersonCompanyLink,\n        linkWhere,\n        { populate: ['company'] },\n        entityScope,\n      ),\n    )\n\n    const companyIds = links.map((link) => (link.company as CustomerEntity).id)\n\n    if (companyIds.length === 0) {\n      return NextResponse.json({\n        items: [],\n        total: 0,\n        page: 1,\n        pageSize: query.pageSize,\n        totalPages: 1,\n      })\n    }\n\n    const tenantScope = { tenantId: auth.tenantId, organizationId: person.organizationId }\n    const [allProfiles, allAddresses, allBillings, allTagAssignments, allRoles, allDealLinks, allInteractions] =\n      await Promise.all([\n        findWithDecryption(em, CustomerCompanyProfile, { entity: { $in: companyIds }, ...tenantScope }, {}, entityScope),\n        findWithDecryption(em, CustomerAddress, { entity: { $in: companyIds }, isPrimary: true, ...tenantScope }, {}, entityScope),\n        findWithDecryption(em, CustomerCompanyBilling, { entity: { $in: companyIds }, ...tenantScope }, {}, entityScope),\n        findWithDecryption(em, CustomerTagAssignment, { entity: { $in: companyIds }, ...tenantScope }, { populate: ['tag'] }, entityScope),\n        findWithDecryption(em, CustomerPersonCompanyRole, { personEntity: person, companyEntity: { $in: companyIds }, ...tenantScope }, {}, entityScope),\n        // CustomerDealCompanyLink is a pure junction table without tenantId/organizationId columns;\n        // scoping flows transitively through the already-tenant-scoped `company` filter.\n        findWithDecryption(em, CustomerDealCompanyLink, { company: { $in: companyIds } }, { populate: ['deal'] }, entityScope),\n        findWithDecryption(em, CustomerInteraction, {\n          entity: { $in: companyIds },\n          occurredAt: { $ne: null },\n          deletedAt: null,\n          ...tenantScope,\n        }, { orderBy: { occurredAt: 'DESC' } }, entityScope),\n      ])\n\n    const profileByCompany = new Map(allProfiles.map((p) => [(p.entity as { id: string }).id, p]))\n    const addressByCompany = new Map(allAddresses.map((a) => [(a.entity as { id: string }).id, a]))\n    const billingByCompany = new Map(allBillings.map((b) => [(b.entity as { id: string }).id, b]))\n\n    const tagsByCompany = new Map<string, typeof allTagAssignments>()\n    for (const ta of allTagAssignments) {\n      const entityId = (ta.entity as { id: string }).id\n      const existing = tagsByCompany.get(entityId) ?? []\n      existing.push(ta)\n      tagsByCompany.set(entityId, existing)\n    }\n\n    const rolesByCompany = new Map<string, typeof allRoles>()\n    for (const role of allRoles) {\n      const entityId = (role.companyEntity as { id: string }).id\n      const existing = rolesByCompany.get(entityId) ?? []\n      existing.push(role)\n      rolesByCompany.set(entityId, existing)\n    }\n\n    const dealLinksByCompany = new Map<string, typeof allDealLinks>()\n    for (const dcl of allDealLinks) {\n      const entityId = (dcl.company as { id: string }).id\n      const existing = dealLinksByCompany.get(entityId) ?? []\n      existing.push(dcl)\n      dealLinksByCompany.set(entityId, existing)\n    }\n\n    const lastInteractionByCompany = new Map<string, CustomerInteraction>()\n    for (const interaction of allInteractions) {\n      const entityId = (interaction.entity as { id: string }).id\n      if (!lastInteractionByCompany.has(entityId)) {\n        lastInteractionByCompany.set(entityId, interaction)\n      }\n    }\n\n    const items = links.map((link) => {\n      const company = link.company as CustomerEntity\n      const companyId = company.id\n      const profile = profileByCompany.get(companyId) ?? null\n      const primaryAddress = addressByCompany.get(companyId) ?? null\n      const billing = billingByCompany.get(companyId) ?? null\n      const tagAssignments = tagsByCompany.get(companyId) ?? []\n      const roles = rolesByCompany.get(companyId) ?? []\n      const companyDealLinks = dealLinksByCompany.get(companyId) ?? []\n      const lastInteraction = lastInteractionByCompany.get(companyId) ?? null\n\n      const activeDeals = companyDealLinks\n        .map((dcl) => dcl.deal as CustomerDeal)\n        .filter((deal) => isOpenDealStatus(deal.status) && !deal.deletedAt)\n        .sort((a, b) => b.createdAt.getTime() - a.createdAt.getTime())\n      const activeDeal = activeDeals.length > 0 ? activeDeals[0] : null\n\n      const wonDeals = companyDealLinks\n        .map((dcl) => dcl.deal as CustomerDeal)\n        .filter((deal) => isWonDealStatus(deal.status) && !deal.deletedAt)\n      let clv: { amount: number; currency: string } | null = null\n      if (wonDeals.length > 0) {\n        const currencies = new Map<string, number>()\n        for (const deal of wonDeals) {\n          if (deal.valueAmount) {\n            const currency = deal.valueCurrency ?? 'USD'\n            currencies.set(currency, (currencies.get(currency) ?? 0) + parseFloat(deal.valueAmount))\n          }\n        }\n        if (currencies.size > 0) {\n          const [currency, amount] = currencies.entries().next().value!\n          clv = { amount, currency }\n        }\n      }\n\n      return {\n        linkId: link.id,\n        companyId,\n        displayName: company.displayName,\n        isPrimary: Boolean(link.isPrimary),\n        subtitle: buildSubtitle(profile?.industry, primaryAddress),\n        profile: profile\n          ? {\n              industry: profile.industry ?? null,\n              sizeBucket: profile.sizeBucket ?? null,\n              legalName: profile.legalName ?? null,\n              domain: profile.domain ?? null,\n              websiteUrl: profile.websiteUrl ?? null,\n            }\n          : null,\n        billing: billing\n          ? {\n              bankName: billing.bankName ?? null,\n              bankAccountMasked: billing.bankAccountMasked ?? null,\n              paymentTerms: billing.paymentTerms ?? null,\n              preferredCurrency: billing.preferredCurrency ?? null,\n            }\n          : null,\n        primaryAddress: primaryAddress ? { formatted: formatAddress(primaryAddress) } : null,\n        tags: tagAssignments.map((ta) => {\n          const tag = ta.tag as { id: string; label: string; color?: string | null }\n          return {\n            id: tag.id,\n            label: tag.label,\n            color: tag.color ?? null,\n          }\n        }),\n        roles: roles.map((r) => ({ id: r.id, roleValue: r.roleValue })),\n        activeDeal: activeDeal\n          ? {\n              title: activeDeal.title,\n              valueAmount: activeDeal.valueAmount ?? null,\n              valueCurrency: activeDeal.valueCurrency ?? null,\n            }\n          : null,\n        lastContactAt: lastInteraction?.occurredAt?.toISOString() ?? null,\n        clv,\n        status: company.status ?? null,\n        lifecycleStage: company.lifecycleStage ?? null,\n        temperature: company.temperature ?? null,\n        renewalQuarter: company.renewalQuarter ?? null,\n      }\n    })\n\n    const filteredItems = query.search?.trim().length\n      ? items.filter((item) => matchesSearch(item as Record<string, unknown>, query.search ?? ''))\n      : items\n    const sortedItems = [...filteredItems].sort((left, right) => {\n      if (query.sort === 'recent') {\n        const leftTimestamp = left.lastContactAt ? new Date(left.lastContactAt).getTime() : 0\n        const rightTimestamp = right.lastContactAt ? new Date(right.lastContactAt).getTime() : 0\n        if (leftTimestamp === rightTimestamp) {\n          return left.displayName.localeCompare(right.displayName, undefined, { sensitivity: 'base' })\n        }\n        return rightTimestamp - leftTimestamp\n      }\n      const compare = left.displayName.localeCompare(right.displayName, undefined, { sensitivity: 'base' })\n      return query.sort === 'name-asc' ? compare : -compare\n    })\n\n    const total = sortedItems.length\n    const totalPages = Math.max(1, Math.ceil(total / query.pageSize))\n    const page = Math.min(query.page, totalPages)\n    const start = (page - 1) * query.pageSize\n\n    return NextResponse.json({\n      items: sortedItems.slice(start, start + query.pageSize),\n      total,\n      page,\n      pageSize: query.pageSize,\n      totalPages,\n    })\n  } catch (err) {\n    if (isCrudHttpError(err)) {\n      return NextResponse.json(err.body, { status: err.status })\n    }\n    logger.error('/companies/enriched] GET failed', { component: 'people/[id', err })\n    return NextResponse.json({ error: translate('customers.errors.internal', 'Internal server error') }, { status: 500 })\n  }\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAElB,SAAS,eAAe,iBAAiB,gBAAgB;AACzD,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AACnD,SAAS,2BAA2B;AAEpC,SAAS,oBAAoB,6BAA6B;AAC1D,SAAS,uCAAuC;AAChD;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAEA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,kBAAkB,uBAAuB;AAClD,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,WAAW;AAEvC,MAAM,eAAe,EAAE,OAAO;AAAA,EAC5B,IAAI,EAAE,OAAO,EAAE,KAAK;AACtB,CAAC;AAED,MAAM,cAAc,EAAE,OAAO;AAAA,EAC3B,MAAM,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,QAAQ,CAAC;AAAA,EACxC,UAAU,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,QAAQ,EAAE;AAAA,EACtD,QAAQ,EAAE,OAAO,EAAE,SAAS;AAAA,EAC5B,MAAM,EAAE,KAAK,CAAC,YAAY,aAAa,QAAQ,CAAC,EAAE,QAAQ,UAAU;AACtE,CAAC;AAEM,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,uBAAuB,EAAE;AACvE;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,OAAO;AAAA,MACP,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO;AAAA,YACf,OAAO,EAAE;AAAA,cACP,EAAE,OAAO;AAAA,gBACP,QAAQ,EAAE,OAAO,EAAE,KAAK;AAAA,gBACxB,WAAW,EAAE,OAAO,EAAE,KAAK;AAAA,gBAC3B,aAAa,EAAE,OAAO;AAAA,gBACtB,WAAW,EAAE,QAAQ;AAAA,gBACrB,UAAU,EAAE,OAAO,EAAE,SAAS;AAAA,gBAC9B,SAAS,EACN,OAAO;AAAA,kBACN,UAAU,EAAE,OAAO,EAAE,SAAS;AAAA,kBAC9B,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,kBAChC,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,kBAC/B,QAAQ,EAAE,OAAO,EAAE,SAAS;AAAA,kBAC5B,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,gBAClC,CAAC,EACA,SAAS;AAAA,gBACZ,SAAS,EACN,OAAO;AAAA,kBACN,UAAU,EAAE,OAAO,EAAE,SAAS;AAAA,kBAC9B,mBAAmB,EAAE,OAAO,EAAE,SAAS;AAAA,kBACvC,cAAc,EAAE,OAAO,EAAE,SAAS;AAAA,kBAClC,mBAAmB,EAAE,OAAO,EAAE,SAAS;AAAA,gBACzC,CAAC,EACA,SAAS;AAAA,gBACZ,gBAAgB,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,EAAE,SAAS;AAAA,gBAC7D,MAAM,EAAE;AAAA,kBACN,EAAE,OAAO;AAAA,oBACP,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,oBACpB,OAAO,EAAE,OAAO;AAAA,oBAChB,OAAO,EAAE,OAAO,EAAE,SAAS;AAAA,kBAC7B,CAAC;AAAA,gBACH;AAAA,gBACA,OAAO,EAAE;AAAA,kBACP,EAAE,OAAO;AAAA,oBACP,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,oBACpB,WAAW,EAAE,OAAO;AAAA,kBACtB,CAAC;AAAA,gBACH;AAAA,gBACA,YAAY,EACT,OAAO;AAAA,kBACN,OAAO,EAAE,OAAO;AAAA,kBAChB,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,kBACjC,eAAe,EAAE,OAAO,EAAE,SAAS;AAAA,gBACrC,CAAC,EACA,SAAS;AAAA,gBACZ,eAAe,EAAE,OAAO,EAAE,SAAS;AAAA,gBACnC,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,GAAG,UAAU,EAAE,OAAO,EAAE,CAAC,EAAE,SAAS;AAAA,gBACrE,QAAQ,EAAE,OAAO,EAAE,SAAS;AAAA,gBAC5B,gBAAgB,EAAE,OAAO,EAAE,SAAS;AAAA,gBACpC,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,gBACjC,gBAAgB,EAAE,OAAO,EAAE,SAAS;AAAA,cACtC,CAAC;AAAA,YACH;AAAA,YACA,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY;AAAA,YACpC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC;AAAA,YAC5B,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC;AAAA,YAChC,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC;AAAA,UACpC,CAAC;AAAA,QACH;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;AAEA,SAAS,cAAc,SAAkC;AACvD,SAAO,CAAC,QAAQ,cAAc,QAAQ,MAAM,QAAQ,QAAQ,QAAQ,UAAU,EAC3E,OAAO,OAAO,EACd,KAAK,IAAI;AACd;AAEA,SAAS,cAAc,UAAqC,SAAgD;AAC1G,QAAM,QAAkB,CAAC;AACzB,MAAI,SAAU,OAAM,KAAK,QAAQ;AACjC,MAAI,SAAS;AACX,UAAM,gBAAgB,CAAC,QAAQ,MAAM,QAAQ,MAAM,EAAE,OAAO,OAAO;AACnE,QAAI,cAAc,SAAS,EAAG,OAAM,KAAK,cAAc,KAAK,IAAI,CAAC;AAAA,EACnE;AACA,SAAO,MAAM,SAAS,IAAI,MAAM,KAAK,QAAK,IAAI;AAChD;AAEA,SAAS,cAAc,MAA+B,OAAwB;AAC5E,QAAM,aAAa,MAAM,KAAK,EAAE,YAAY;AAC5C,MAAI,CAAC,WAAW,OAAQ,QAAO;AAC/B,SAAO;AAAA,IACL,OAAO,KAAK,gBAAgB,WAAW,KAAK,cAAc;AAAA,IAC1D,OAAO,KAAK,aAAa,WAAW,KAAK,WAAW;AAAA,IACpD,OAAO,KAAK,WAAW,WAAW,KAAK,SAAS;AAAA,IAChD,OAAO,KAAK,mBAAmB,WAAW,KAAK,iBAAiB;AAAA,IAChE,OAAO,KAAK,gBAAgB,WAAW,KAAK,cAAc;AAAA,IAC1D,OAAO,KAAK,mBAAmB,WAAW,KAAK,iBAAiB;AAAA,EAClE,EACG,OAAO,CAAC,UAA2B,OAAO,UAAU,YAAY,MAAM,SAAS,CAAC,EAChF,KAAK,CAAC,UAAU,MAAM,YAAY,EAAE,SAAS,UAAU,CAAC;AAC7D;AAEA,eAAsB,IAAI,KAAc,KAAmC;AACzE,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,MAAI;AACF,UAAM,EAAE,GAAG,IAAI,aAAa,MAAM,EAAE,IAAI,IAAI,QAAQ,GAAG,CAAC;AAExD,UAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,QAAI,CAAC,MAAM,UAAU;AACnB,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,iCAAiC,cAAc,EAAE,CAAC;AAAA,IACpG;AACA,UAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,UAAM,QAAQ,YAAY,MAAM;AAAA,MAC9B,MAAM,IAAI,aAAa,IAAI,MAAM,KAAK;AAAA,MACtC,UAAU,IAAI,aAAa,IAAI,UAAU,KAAK;AAAA,MAC9C,QAAQ,IAAI,aAAa,IAAI,QAAQ,KAAK;AAAA,MAC1C,MAAM,IAAI,aAAa,IAAI,MAAM,KAAK;AAAA,IACxC,CAAC;AAED,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AACxF,UAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAE3D,UAAM,kBAAkB,EAAE,UAAU,KAAK,UAAU,gBAAgB,KAAK,SAAS,KAAK;AACtF,UAAM,SAAS,MAAM,sBAAsB,IAAI,gBAAgB,EAAE,IAAI,MAAM,UAAU,UAAU,KAAK,UAAU,WAAW,KAAK,GAAG,CAAC,GAAG,eAAe;AACpJ,QAAI,CAAC,QAAQ;AACX,YAAM,SAAS,UAAU,qCAAqC,kBAAkB,CAAC;AAAA,IACnF;AAKA,QAAI,CAAC,gCAAgC,EAAE,OAAO,MAAM,gBAAgB,OAAO,eAAe,CAAC,GAAG;AAC5F,YAAM,SAAS,UAAU,qCAAqC,kBAAkB,CAAC;AAAA,IACnF;AAEA,UAAM,cAAc,EAAE,UAAU,KAAK,UAAU,gBAAgB,OAAO,eAAe;AACrF,UAAM,YAAY,MAAM;AAAA,MACtB;AAAA,MACA;AAAA,QACE;AAAA,QACA,UAAU,KAAK;AAAA,MACjB;AAAA,MACA;AAAA,IACF;AACA,UAAM,QAAQ;AAAA,MACZ,MAAM;AAAA,QACJ;AAAA,QACA;AAAA,QACA;AAAA,QACA,EAAE,UAAU,CAAC,SAAS,EAAE;AAAA,QACxB;AAAA,MACF;AAAA,IACF;AAEA,UAAM,aAAa,MAAM,IAAI,CAAC,SAAU,KAAK,QAA2B,EAAE;AAE1E,QAAI,WAAW,WAAW,GAAG;AAC3B,aAAO,aAAa,KAAK;AAAA,QACvB,OAAO,CAAC;AAAA,QACR,OAAO;AAAA,QACP,MAAM;AAAA,QACN,UAAU,MAAM;AAAA,QAChB,YAAY;AAAA,MACd,CAAC;AAAA,IACH;AAEA,UAAM,cAAc,EAAE,UAAU,KAAK,UAAU,gBAAgB,OAAO,eAAe;AACrF,UAAM,CAAC,aAAa,cAAc,aAAa,mBAAmB,UAAU,cAAc,eAAe,IACvG,MAAM,QAAQ,IAAI;AAAA,MAChB,mBAAmB,IAAI,wBAAwB,EAAE,QAAQ,EAAE,KAAK,WAAW,GAAG,GAAG,YAAY,GAAG,CAAC,GAAG,WAAW;AAAA,MAC/G,mBAAmB,IAAI,iBAAiB,EAAE,QAAQ,EAAE,KAAK,WAAW,GAAG,WAAW,MAAM,GAAG,YAAY,GAAG,CAAC,GAAG,WAAW;AAAA,MACzH,mBAAmB,IAAI,wBAAwB,EAAE,QAAQ,EAAE,KAAK,WAAW,GAAG,GAAG,YAAY,GAAG,CAAC,GAAG,WAAW;AAAA,MAC/G,mBAAmB,IAAI,uBAAuB,EAAE,QAAQ,EAAE,KAAK,WAAW,GAAG,GAAG,YAAY,GAAG,EAAE,UAAU,CAAC,KAAK,EAAE,GAAG,WAAW;AAAA,MACjI,mBAAmB,IAAI,2BAA2B,EAAE,cAAc,QAAQ,eAAe,EAAE,KAAK,WAAW,GAAG,GAAG,YAAY,GAAG,CAAC,GAAG,WAAW;AAAA;AAAA;AAAA,MAG/I,mBAAmB,IAAI,yBAAyB,EAAE,SAAS,EAAE,KAAK,WAAW,EAAE,GAAG,EAAE,UAAU,CAAC,MAAM,EAAE,GAAG,WAAW;AAAA,MACrH,mBAAmB,IAAI,qBAAqB;AAAA,QAC1C,QAAQ,EAAE,KAAK,WAAW;AAAA,QAC1B,YAAY,EAAE,KAAK,KAAK;AAAA,QACxB,WAAW;AAAA,QACX,GAAG;AAAA,MACL,GAAG,EAAE,SAAS,EAAE,YAAY,OAAO,EAAE,GAAG,WAAW;AAAA,IACrD,CAAC;AAEH,UAAM,mBAAmB,IAAI,IAAI,YAAY,IAAI,CAAC,MAAM,CAAE,EAAE,OAA0B,IAAI,CAAC,CAAC,CAAC;AAC7F,UAAM,mBAAmB,IAAI,IAAI,aAAa,IAAI,CAAC,MAAM,CAAE,EAAE,OAA0B,IAAI,CAAC,CAAC,CAAC;AAC9F,UAAM,mBAAmB,IAAI,IAAI,YAAY,IAAI,CAAC,MAAM,CAAE,EAAE,OAA0B,IAAI,CAAC,CAAC,CAAC;AAE7F,UAAM,gBAAgB,oBAAI,IAAsC;AAChE,eAAW,MAAM,mBAAmB;AAClC,YAAM,WAAY,GAAG,OAA0B;AAC/C,YAAM,WAAW,cAAc,IAAI,QAAQ,KAAK,CAAC;AACjD,eAAS,KAAK,EAAE;AAChB,oBAAc,IAAI,UAAU,QAAQ;AAAA,IACtC;AAEA,UAAM,iBAAiB,oBAAI,IAA6B;AACxD,eAAW,QAAQ,UAAU;AAC3B,YAAM,WAAY,KAAK,cAAiC;AACxD,YAAM,WAAW,eAAe,IAAI,QAAQ,KAAK,CAAC;AAClD,eAAS,KAAK,IAAI;AAClB,qBAAe,IAAI,UAAU,QAAQ;AAAA,IACvC;AAEA,UAAM,qBAAqB,oBAAI,IAAiC;AAChE,eAAW,OAAO,cAAc;AAC9B,YAAM,WAAY,IAAI,QAA2B;AACjD,YAAM,WAAW,mBAAmB,IAAI,QAAQ,KAAK,CAAC;AACtD,eAAS,KAAK,GAAG;AACjB,yBAAmB,IAAI,UAAU,QAAQ;AAAA,IAC3C;AAEA,UAAM,2BAA2B,oBAAI,IAAiC;AACtE,eAAW,eAAe,iBAAiB;AACzC,YAAM,WAAY,YAAY,OAA0B;AACxD,UAAI,CAAC,yBAAyB,IAAI,QAAQ,GAAG;AAC3C,iCAAyB,IAAI,UAAU,WAAW;AAAA,MACpD;AAAA,IACF;AAEA,UAAM,QAAQ,MAAM,IAAI,CAAC,SAAS;AAChC,YAAM,UAAU,KAAK;AACrB,YAAM,YAAY,QAAQ;AAC1B,YAAM,UAAU,iBAAiB,IAAI,SAAS,KAAK;AACnD,YAAM,iBAAiB,iBAAiB,IAAI,SAAS,KAAK;AAC1D,YAAM,UAAU,iBAAiB,IAAI,SAAS,KAAK;AACnD,YAAM,iBAAiB,cAAc,IAAI,SAAS,KAAK,CAAC;AACxD,YAAM,QAAQ,eAAe,IAAI,SAAS,KAAK,CAAC;AAChD,YAAM,mBAAmB,mBAAmB,IAAI,SAAS,KAAK,CAAC;AAC/D,YAAM,kBAAkB,yBAAyB,IAAI,SAAS,KAAK;AAEnE,YAAM,cAAc,iBACjB,IAAI,CAAC,QAAQ,IAAI,IAAoB,EACrC,OAAO,CAAC,SAAS,iBAAiB,KAAK,MAAM,KAAK,CAAC,KAAK,SAAS,EACjE,KAAK,CAAC,GAAG,MAAM,EAAE,UAAU,QAAQ,IAAI,EAAE,UAAU,QAAQ,CAAC;AAC/D,YAAM,aAAa,YAAY,SAAS,IAAI,YAAY,CAAC,IAAI;AAE7D,YAAM,WAAW,iBACd,IAAI,CAAC,QAAQ,IAAI,IAAoB,EACrC,OAAO,CAAC,SAAS,gBAAgB,KAAK,MAAM,KAAK,CAAC,KAAK,SAAS;AACnE,UAAI,MAAmD;AACvD,UAAI,SAAS,SAAS,GAAG;AACvB,cAAM,aAAa,oBAAI,IAAoB;AAC3C,mBAAW,QAAQ,UAAU;AAC3B,cAAI,KAAK,aAAa;AACpB,kBAAM,WAAW,KAAK,iBAAiB;AACvC,uBAAW,IAAI,WAAW,WAAW,IAAI,QAAQ,KAAK,KAAK,WAAW,KAAK,WAAW,CAAC;AAAA,UACzF;AAAA,QACF;AACA,YAAI,WAAW,OAAO,GAAG;AACvB,gBAAM,CAAC,UAAU,MAAM,IAAI,WAAW,QAAQ,EAAE,KAAK,EAAE;AACvD,gBAAM,EAAE,QAAQ,SAAS;AAAA,QAC3B;AAAA,MACF;AAEA,aAAO;AAAA,QACL,QAAQ,KAAK;AAAA,QACb;AAAA,QACA,aAAa,QAAQ;AAAA,QACrB,WAAW,QAAQ,KAAK,SAAS;AAAA,QACjC,UAAU,cAAc,SAAS,UAAU,cAAc;AAAA,QACzD,SAAS,UACL;AAAA,UACE,UAAU,QAAQ,YAAY;AAAA,UAC9B,YAAY,QAAQ,cAAc;AAAA,UAClC,WAAW,QAAQ,aAAa;AAAA,UAChC,QAAQ,QAAQ,UAAU;AAAA,UAC1B,YAAY,QAAQ,cAAc;AAAA,QACpC,IACA;AAAA,QACJ,SAAS,UACL;AAAA,UACE,UAAU,QAAQ,YAAY;AAAA,UAC9B,mBAAmB,QAAQ,qBAAqB;AAAA,UAChD,cAAc,QAAQ,gBAAgB;AAAA,UACtC,mBAAmB,QAAQ,qBAAqB;AAAA,QAClD,IACA;AAAA,QACJ,gBAAgB,iBAAiB,EAAE,WAAW,cAAc,cAAc,EAAE,IAAI;AAAA,QAChF,MAAM,eAAe,IAAI,CAAC,OAAO;AAC/B,gBAAM,MAAM,GAAG;AACf,iBAAO;AAAA,YACL,IAAI,IAAI;AAAA,YACR,OAAO,IAAI;AAAA,YACX,OAAO,IAAI,SAAS;AAAA,UACtB;AAAA,QACF,CAAC;AAAA,QACD,OAAO,MAAM,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,WAAW,EAAE,UAAU,EAAE;AAAA,QAC9D,YAAY,aACR;AAAA,UACE,OAAO,WAAW;AAAA,UAClB,aAAa,WAAW,eAAe;AAAA,UACvC,eAAe,WAAW,iBAAiB;AAAA,QAC7C,IACA;AAAA,QACJ,eAAe,iBAAiB,YAAY,YAAY,KAAK;AAAA,QAC7D;AAAA,QACA,QAAQ,QAAQ,UAAU;AAAA,QAC1B,gBAAgB,QAAQ,kBAAkB;AAAA,QAC1C,aAAa,QAAQ,eAAe;AAAA,QACpC,gBAAgB,QAAQ,kBAAkB;AAAA,MAC5C;AAAA,IACF,CAAC;AAED,UAAM,gBAAgB,MAAM,QAAQ,KAAK,EAAE,SACvC,MAAM,OAAO,CAAC,SAAS,cAAc,MAAiC,MAAM,UAAU,EAAE,CAAC,IACzF;AACJ,UAAM,cAAc,CAAC,GAAG,aAAa,EAAE,KAAK,CAAC,MAAM,UAAU;AAC3D,UAAI,MAAM,SAAS,UAAU;AAC3B,cAAM,gBAAgB,KAAK,gBAAgB,IAAI,KAAK,KAAK,aAAa,EAAE,QAAQ,IAAI;AACpF,cAAM,iBAAiB,MAAM,gBAAgB,IAAI,KAAK,MAAM,aAAa,EAAE,QAAQ,IAAI;AACvF,YAAI,kBAAkB,gBAAgB;AACpC,iBAAO,KAAK,YAAY,cAAc,MAAM,aAAa,QAAW,EAAE,aAAa,OAAO,CAAC;AAAA,QAC7F;AACA,eAAO,iBAAiB;AAAA,MAC1B;AACA,YAAM,UAAU,KAAK,YAAY,cAAc,MAAM,aAAa,QAAW,EAAE,aAAa,OAAO,CAAC;AACpG,aAAO,MAAM,SAAS,aAAa,UAAU,CAAC;AAAA,IAChD,CAAC;AAED,UAAM,QAAQ,YAAY;AAC1B,UAAM,aAAa,KAAK,IAAI,GAAG,KAAK,KAAK,QAAQ,MAAM,QAAQ,CAAC;AAChE,UAAM,OAAO,KAAK,IAAI,MAAM,MAAM,UAAU;AAC5C,UAAM,SAAS,OAAO,KAAK,MAAM;AAEjC,WAAO,aAAa,KAAK;AAAA,MACvB,OAAO,YAAY,MAAM,OAAO,QAAQ,MAAM,QAAQ;AAAA,MACtD;AAAA,MACA;AAAA,MACA,UAAU,MAAM;AAAA,MAChB;AAAA,IACF,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,GAAG;AACxB,aAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,IAC3D;AACA,WAAO,MAAM,mCAAmC,EAAE,WAAW,cAAc,IAAI,CAAC;AAChF,WAAO,aAAa,KAAK,EAAE,OAAO,UAAU,6BAA6B,uBAAuB,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACtH;AACF;",
   "names": []
 }

package/dist/modules/customers/api/people/[id]/route.js

@@ -31,7 +31,7 @@ import { resolveCustomerInteractionFeatureFlags } from "../../../lib/interaction
 import { hydrateCanonicalInteractions } from "../../../lib/interactionReadModel.js";
 import { findWithDecryption, findOneWithDecryption } from "@open-mercato/shared/lib/encryption/find";
 import { parseBooleanFromUnknown, parseBooleanToken } from "@open-mercato/shared/lib/boolean";
-import { isOrganizationReadAccessAllowed } from "@open-mercato/core/modules/directory/utils/organizationScopeGuard";
+import { denyCustomerDetailReadAsNotFound } from "../../../lib/detailReadAccess.js";
 import { loadPersonCompanyLinks, summarizePersonCompanies } from "../../../lib/personCompanies.js";
 import { normalizeCustomerDetailCustomFields } from "../../detailCustomFields.js";
 import { buildEmailVisibilityMikroFilter } from "../../../lib/visibilityFilter.js";
@@ -89,9 +89,6 @@ function parseIncludeParams(request) {
   });
   return tokens;
 }
-function forbidden(message) {
-  return NextResponse.json({ error: message }, { status: 403 });
-}
 function notFound(message) {
   return NextResponse.json({ error: message }, { status: 404 });
 }
@@ -443,10 +440,14 @@ async function GET(_req, ctx) {
       profileMeta = { reason: "person_not_found" };
       return notFound("Person not found");
     }
-    if (!isOrganizationReadAccessAllowed({ scope, auth, organizationId: person.organizationId })) {
-      statusCode = 403;
-      profileMeta = { reason: "organization_forbidden" };
-      return forbidden("Access denied");
+    const organizationReadDenied = denyCustomerDetailReadAsNotFound(
+      { scope, auth, organizationId: person.organizationId },
+      "Person not found"
+    );
+    if (organizationReadDenied) {
+      statusCode = 404;
+      profileMeta = { reason: "organization_not_in_scope" };
+      return organizationReadDenied;
     }
     const personDetailTenantId = person.tenantId ?? auth.tenantId ?? null;
     const personDetailOrganizationId = person.organizationId ?? null;
@@ -1113,8 +1114,8 @@ const openApi = {
       errors: [
         { status: 400, description: "Invalid identifier", schema: personDetailErrorSchema },
         { status: 401, description: "Unauthorized", schema: personDetailErrorSchema },
-        { status: 403, description: "Forbidden for tenant/organization scope", schema: personDetailErrorSchema },
-        { status: 404, description: "Person not found", schema: personDetailErrorSchema }
+        { status: 403, description: "Forbidden \u2014 caller lacks the required feature", schema: personDetailErrorSchema },
+        { status: 404, description: "Person not found, or its organization is not in the caller\u2019s scope", schema: personDetailErrorSchema }
       ]
     }
   }