@open-mercato/core 0.7.0 → 0.7.1-develop.7103.1.41ff100d93

package/dist/modules/customers/lib/calendar/mapItem.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../src/modules/customers/lib/calendar/mapItem.ts"],
-  "sourcesContent": ["import { addMinutes } from 'date-fns/addMinutes'\nimport { endOfDay } from 'date-fns/endOfDay'\nimport { startOfDay } from 'date-fns/startOfDay'\nimport type {\n  CalendarInteractionPayload,\n  CalendarItem,\n  CalendarItemStatus,\n  CalendarLocationKind,\n  CalendarParticipant,\n  CalendarPlatform,\n} from '../../components/calendar/types'\nimport { categoryOf } from './categories'\n\nconst DEFAULT_DURATION_MINUTES = 30\n\nfunction narrowStatus(status: string): CalendarItemStatus {\n  if (status === 'done') return 'done'\n  if (status === 'canceled') return 'canceled'\n  return 'planned'\n}\n\nexport function detectPlatform(location: string | null): CalendarPlatform | null {\n  if (!location) return null\n  const normalized = location.toLowerCase()\n  if (normalized.includes('zoom.us') || normalized.includes('zoom')) return 'zoom'\n  if (normalized.includes('meet.google') || normalized.includes('on meet')) return 'meet'\n  if (normalized.includes('slack')) return 'slack'\n  if (normalized.includes('teams')) return 'teams'\n  return null\n}\n\nfunction detectLocationKind(location: string | null, platform: CalendarPlatform | null): CalendarLocationKind | null {\n  if (!location) return null\n  const normalized = location.trim().toLowerCase()\n  if (normalized.startsWith('http') || normalized.startsWith('www')) return 'url'\n  if (platform) return 'platform'\n  return 'venue'\n}\n\nfunction mapParticipants(payload: CalendarInteractionPayload): CalendarParticipant[] {\n  const participants = payload.participants\n  if (!Array.isArray(participants)) return []\n  const seen = new Set<string>()\n  const mapped: CalendarParticipant[] = []\n  for (const participant of participants) {\n    if (seen.has(participant.userId)) continue\n    seen.add(participant.userId)\n    const entry: CalendarParticipant = { userId: participant.userId }\n    if (typeof participant.name === 'string') entry.name = participant.name\n    if (typeof participant.email === 'string') entry.email = participant.email\n    mapped.push(entry)\n  }\n  return mapped\n}\n\nexport function mapInteractionToCalendarItem(\n  payload: CalendarInteractionPayload,\n  typeColorByType: Record<string, string | null>,\n): CalendarItem | null {\n  const effectiveStartRaw = payload.occurredAt ?? payload.scheduledAt ?? null\n  if (!effectiveStartRaw) return null\n  const parsedStart = new Date(effectiveStartRaw)\n  if (Number.isNaN(parsedStart.getTime())) return null\n\n  const allDay = payload.allDay === true\n  const durationMinutes = payload.durationMinutes ?? DEFAULT_DURATION_MINUTES\n  const start = allDay ? startOfDay(parsedStart) : parsedStart\n  const end = allDay ? endOfDay(parsedStart) : addMinutes(parsedStart, durationMinutes)\n\n  const location = payload.location ?? null\n  const platform = detectPlatform(location)\n\n  return {\n    id: payload.id,\n    title: payload.title ?? '',\n    interactionType: payload.interactionType,\n    category: categoryOf(payload.interactionType),\n    status: narrowStatus(payload.status),\n    start,\n    end,\n    allDay,\n    location,\n    platform,\n    locationKind: detectLocationKind(location, platform),\n    participants: mapParticipants(payload),\n    ownerUserId: payload.ownerUserId ?? null,\n    entityId: payload.entityId ?? null,\n    dealId: payload.dealId ?? null,\n    color: payload.appearanceColor ?? typeColorByType[payload.interactionType] ?? null,\n    isRecurringOccurrence: false,\n    updatedAt: payload.updatedAt ?? null,\n    raw: payload,\n  }\n}\n"],
-  "mappings": "AAAA,SAAS,kBAAkB;AAC3B,SAAS,gBAAgB;AACzB,SAAS,kBAAkB;AAS3B,SAAS,kBAAkB;AAE3B,MAAM,2BAA2B;AAEjC,SAAS,aAAa,QAAoC;AACxD,MAAI,WAAW,OAAQ,QAAO;AAC9B,MAAI,WAAW,WAAY,QAAO;AAClC,SAAO;AACT;AAEO,SAAS,eAAe,UAAkD;AAC/E,MAAI,CAAC,SAAU,QAAO;AACtB,QAAM,aAAa,SAAS,YAAY;AACxC,MAAI,WAAW,SAAS,SAAS,KAAK,WAAW,SAAS,MAAM,EAAG,QAAO;AAC1E,MAAI,WAAW,SAAS,aAAa,KAAK,WAAW,SAAS,SAAS,EAAG,QAAO;AACjF,MAAI,WAAW,SAAS,OAAO,EAAG,QAAO;AACzC,MAAI,WAAW,SAAS,OAAO,EAAG,QAAO;AACzC,SAAO;AACT;AAEA,SAAS,mBAAmB,UAAyB,UAAgE;AACnH,MAAI,CAAC,SAAU,QAAO;AACtB,QAAM,aAAa,SAAS,KAAK,EAAE,YAAY;AAC/C,MAAI,WAAW,WAAW,MAAM,KAAK,WAAW,WAAW,KAAK,EAAG,QAAO;AAC1E,MAAI,SAAU,QAAO;AACrB,SAAO;AACT;AAEA,SAAS,gBAAgB,SAA4D;AACnF,QAAM,eAAe,QAAQ;AAC7B,MAAI,CAAC,MAAM,QAAQ,YAAY,EAAG,QAAO,CAAC;AAC1C,QAAM,OAAO,oBAAI,IAAY;AAC7B,QAAM,SAAgC,CAAC;AACvC,aAAW,eAAe,cAAc;AACtC,QAAI,KAAK,IAAI,YAAY,MAAM,EAAG;AAClC,SAAK,IAAI,YAAY,MAAM;AAC3B,UAAM,QAA6B,EAAE,QAAQ,YAAY,OAAO;AAChE,QAAI,OAAO,YAAY,SAAS,SAAU,OAAM,OAAO,YAAY;AACnE,QAAI,OAAO,YAAY,UAAU,SAAU,OAAM,QAAQ,YAAY;AACrE,WAAO,KAAK,KAAK;AAAA,EACnB;AACA,SAAO;AACT;AAEO,SAAS,6BACd,SACA,iBACqB;AACrB,QAAM,oBAAoB,QAAQ,cAAc,QAAQ,eAAe;AACvE,MAAI,CAAC,kBAAmB,QAAO;AAC/B,QAAM,cAAc,IAAI,KAAK,iBAAiB;AAC9C,MAAI,OAAO,MAAM,YAAY,QAAQ,CAAC,EAAG,QAAO;AAEhD,QAAM,SAAS,QAAQ,WAAW;AAClC,QAAM,kBAAkB,QAAQ,mBAAmB;AACnD,QAAM,QAAQ,SAAS,WAAW,WAAW,IAAI;AACjD,QAAM,MAAM,SAAS,SAAS,WAAW,IAAI,WAAW,aAAa,eAAe;AAEpF,QAAM,WAAW,QAAQ,YAAY;AACrC,QAAM,WAAW,eAAe,QAAQ;AAExC,SAAO;AAAA,IACL,IAAI,QAAQ;AAAA,IACZ,OAAO,QAAQ,SAAS;AAAA,IACxB,iBAAiB,QAAQ;AAAA,IACzB,UAAU,WAAW,QAAQ,eAAe;AAAA,IAC5C,QAAQ,aAAa,QAAQ,MAAM;AAAA,IACnC;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,cAAc,mBAAmB,UAAU,QAAQ;AAAA,IACnD,cAAc,gBAAgB,OAAO;AAAA,IACrC,aAAa,QAAQ,eAAe;AAAA,IACpC,UAAU,QAAQ,YAAY;AAAA,IAC9B,QAAQ,QAAQ,UAAU;AAAA,IAC1B,OAAO,QAAQ,mBAAmB,gBAAgB,QAAQ,eAAe,KAAK;AAAA,IAC9E,uBAAuB;AAAA,IACvB,WAAW,QAAQ,aAAa;AAAA,IAChC,KAAK;AAAA,EACP;AACF;",
+  "sourcesContent": ["import { addMinutes } from 'date-fns/addMinutes'\nimport { endOfDay } from 'date-fns/endOfDay'\nimport { startOfDay } from 'date-fns/startOfDay'\nimport type {\n  CalendarInteractionPayload,\n  CalendarItem,\n  CalendarItemStatus,\n  CalendarLocationKind,\n  CalendarParticipant,\n  CalendarPlatform,\n} from '../../components/calendar/types'\nimport { categoryOf } from './categories'\nimport { participantActorKey } from './participantIdentity'\n\nconst DEFAULT_DURATION_MINUTES = 30\n\nfunction narrowStatus(status: string): CalendarItemStatus {\n  if (status === 'done') return 'done'\n  if (status === 'canceled') return 'canceled'\n  return 'planned'\n}\n\nexport function detectPlatform(location: string | null): CalendarPlatform | null {\n  if (!location) return null\n  const normalized = location.toLowerCase()\n  if (normalized.includes('zoom.us') || normalized.includes('zoom')) return 'zoom'\n  if (normalized.includes('meet.google') || normalized.includes('on meet')) return 'meet'\n  if (normalized.includes('slack')) return 'slack'\n  if (normalized.includes('teams')) return 'teams'\n  return null\n}\n\nfunction detectLocationKind(location: string | null, platform: CalendarPlatform | null): CalendarLocationKind | null {\n  if (!location) return null\n  const normalized = location.trim().toLowerCase()\n  if (normalized.startsWith('http') || normalized.startsWith('www')) return 'url'\n  if (platform) return 'platform'\n  return 'venue'\n}\n\nfunction mapParticipants(payload: CalendarInteractionPayload): CalendarParticipant[] {\n  const participants = payload.participants\n  if (!Array.isArray(participants)) return []\n  const seen = new Set<string>()\n  const mapped: CalendarParticipant[] = []\n  for (const participant of participants) {\n    const dedupeKey = participantActorKey(participant)\n    if (dedupeKey) {\n      if (seen.has(dedupeKey)) continue\n      seen.add(dedupeKey)\n    }\n    const entry: CalendarParticipant = {}\n    if (typeof participant.userId === 'string') entry.userId = participant.userId\n    if (typeof participant.name === 'string') entry.name = participant.name\n    if (typeof participant.email === 'string') entry.email = participant.email\n    mapped.push(entry)\n  }\n  return mapped\n}\n\nexport function mapInteractionToCalendarItem(\n  payload: CalendarInteractionPayload,\n  typeColorByType: Record<string, string | null>,\n): CalendarItem | null {\n  const effectiveStartRaw = payload.occurredAt ?? payload.scheduledAt ?? null\n  if (!effectiveStartRaw) return null\n  const parsedStart = new Date(effectiveStartRaw)\n  if (Number.isNaN(parsedStart.getTime())) return null\n\n  const allDay = payload.allDay === true\n  const durationMinutes = payload.durationMinutes ?? DEFAULT_DURATION_MINUTES\n  const start = allDay ? startOfDay(parsedStart) : parsedStart\n  const end = allDay ? endOfDay(parsedStart) : addMinutes(parsedStart, durationMinutes)\n\n  const location = payload.location ?? null\n  const platform = detectPlatform(location)\n\n  return {\n    id: payload.id,\n    title: payload.title ?? '',\n    interactionType: payload.interactionType,\n    category: categoryOf(payload.interactionType),\n    status: narrowStatus(payload.status),\n    start,\n    end,\n    allDay,\n    location,\n    platform,\n    locationKind: detectLocationKind(location, platform),\n    participants: mapParticipants(payload),\n    ownerUserId: payload.ownerUserId ?? null,\n    entityId: payload.entityId ?? null,\n    dealId: payload.dealId ?? null,\n    color: payload.appearanceColor ?? typeColorByType[payload.interactionType] ?? null,\n    isRecurringOccurrence: false,\n    updatedAt: payload.updatedAt ?? null,\n    raw: payload,\n  }\n}\n"],
+  "mappings": "AAAA,SAAS,kBAAkB;AAC3B,SAAS,gBAAgB;AACzB,SAAS,kBAAkB;AAS3B,SAAS,kBAAkB;AAC3B,SAAS,2BAA2B;AAEpC,MAAM,2BAA2B;AAEjC,SAAS,aAAa,QAAoC;AACxD,MAAI,WAAW,OAAQ,QAAO;AAC9B,MAAI,WAAW,WAAY,QAAO;AAClC,SAAO;AACT;AAEO,SAAS,eAAe,UAAkD;AAC/E,MAAI,CAAC,SAAU,QAAO;AACtB,QAAM,aAAa,SAAS,YAAY;AACxC,MAAI,WAAW,SAAS,SAAS,KAAK,WAAW,SAAS,MAAM,EAAG,QAAO;AAC1E,MAAI,WAAW,SAAS,aAAa,KAAK,WAAW,SAAS,SAAS,EAAG,QAAO;AACjF,MAAI,WAAW,SAAS,OAAO,EAAG,QAAO;AACzC,MAAI,WAAW,SAAS,OAAO,EAAG,QAAO;AACzC,SAAO;AACT;AAEA,SAAS,mBAAmB,UAAyB,UAAgE;AACnH,MAAI,CAAC,SAAU,QAAO;AACtB,QAAM,aAAa,SAAS,KAAK,EAAE,YAAY;AAC/C,MAAI,WAAW,WAAW,MAAM,KAAK,WAAW,WAAW,KAAK,EAAG,QAAO;AAC1E,MAAI,SAAU,QAAO;AACrB,SAAO;AACT;AAEA,SAAS,gBAAgB,SAA4D;AACnF,QAAM,eAAe,QAAQ;AAC7B,MAAI,CAAC,MAAM,QAAQ,YAAY,EAAG,QAAO,CAAC;AAC1C,QAAM,OAAO,oBAAI,IAAY;AAC7B,QAAM,SAAgC,CAAC;AACvC,aAAW,eAAe,cAAc;AACtC,UAAM,YAAY,oBAAoB,WAAW;AACjD,QAAI,WAAW;AACb,UAAI,KAAK,IAAI,SAAS,EAAG;AACzB,WAAK,IAAI,SAAS;AAAA,IACpB;AACA,UAAM,QAA6B,CAAC;AACpC,QAAI,OAAO,YAAY,WAAW,SAAU,OAAM,SAAS,YAAY;AACvE,QAAI,OAAO,YAAY,SAAS,SAAU,OAAM,OAAO,YAAY;AACnE,QAAI,OAAO,YAAY,UAAU,SAAU,OAAM,QAAQ,YAAY;AACrE,WAAO,KAAK,KAAK;AAAA,EACnB;AACA,SAAO;AACT;AAEO,SAAS,6BACd,SACA,iBACqB;AACrB,QAAM,oBAAoB,QAAQ,cAAc,QAAQ,eAAe;AACvE,MAAI,CAAC,kBAAmB,QAAO;AAC/B,QAAM,cAAc,IAAI,KAAK,iBAAiB;AAC9C,MAAI,OAAO,MAAM,YAAY,QAAQ,CAAC,EAAG,QAAO;AAEhD,QAAM,SAAS,QAAQ,WAAW;AAClC,QAAM,kBAAkB,QAAQ,mBAAmB;AACnD,QAAM,QAAQ,SAAS,WAAW,WAAW,IAAI;AACjD,QAAM,MAAM,SAAS,SAAS,WAAW,IAAI,WAAW,aAAa,eAAe;AAEpF,QAAM,WAAW,QAAQ,YAAY;AACrC,QAAM,WAAW,eAAe,QAAQ;AAExC,SAAO;AAAA,IACL,IAAI,QAAQ;AAAA,IACZ,OAAO,QAAQ,SAAS;AAAA,IACxB,iBAAiB,QAAQ;AAAA,IACzB,UAAU,WAAW,QAAQ,eAAe;AAAA,IAC5C,QAAQ,aAAa,QAAQ,MAAM;AAAA,IACnC;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,cAAc,mBAAmB,UAAU,QAAQ;AAAA,IACnD,cAAc,gBAAgB,OAAO;AAAA,IACrC,aAAa,QAAQ,eAAe;AAAA,IACpC,UAAU,QAAQ,YAAY;AAAA,IAC9B,QAAQ,QAAQ,UAAU;AAAA,IAC1B,OAAO,QAAQ,mBAAmB,gBAAgB,QAAQ,eAAe,KAAK;AAAA,IAC9E,uBAAuB;AAAA,IACvB,WAAW,QAAQ,aAAa;AAAA,IAChC,KAAK;AAAA,EACP;AACF;",
   "names": []
 }

package/dist/modules/customers/lib/calendar/participantIdentity.js

@@ -0,0 +1,9 @@
+function participantActorKey(participant) {
+  if (participant.userId) return `user:${participant.userId}`;
+  const email = participant.email?.trim().toLowerCase();
+  return email ? `email:${email}` : null;
+}
+export {
+  participantActorKey
+};
+//# sourceMappingURL=participantIdentity.js.map

package/dist/modules/customers/lib/calendar/participantIdentity.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../src/modules/customers/lib/calendar/participantIdentity.ts"],
+  "sourcesContent": ["/**\n * The one canonical actor key for a calendar participant.\n *\n * A staff/customer attendee is identified by `userId`. An external guest has no\n * record in the system, so the normalized email is the only stable identity it\n * carries. Mapping, dedupe, conflict detection and the editor's conflict-probe\n * dependency key all derive their key from here, so a guest is treated as the\n * same actor across events instead of dropping out of actor comparisons.\n *\n * Returns `null` for a participant with neither \u2014 such a participant cannot be\n * compared to any other and must never collide with one that can.\n */\nexport function participantActorKey(participant: { userId?: string; email?: string }): string | null {\n  if (participant.userId) return `user:${participant.userId}`\n  const email = participant.email?.trim().toLowerCase()\n  return email ? `email:${email}` : null\n}\n"],
+  "mappings": "AAYO,SAAS,oBAAoB,aAAiE;AACnG,MAAI,YAAY,OAAQ,QAAO,QAAQ,YAAY,MAAM;AACzD,QAAM,QAAQ,YAAY,OAAO,KAAK,EAAE,YAAY;AACpD,SAAO,QAAQ,SAAS,KAAK,KAAK;AACpC;",
+  "names": []
+}

package/dist/modules/customers/lib/closureStage.js

@@ -0,0 +1,45 @@
+import { findWithDecryption } from "@open-mercato/shared/lib/encryption/find";
+import { CustomerPipelineStage } from "../data/entities.js";
+const TERMINAL_PIPELINE_STAGE_LABELS = {
+  won: /* @__PURE__ */ new Set(["won", "win", "closed won", "closed win"]),
+  lost: /* @__PURE__ */ new Set(["lost", "loose", "closed lost", "closed loose"])
+};
+function dealClosureOutcomeFromStatus(status) {
+  const normalized = typeof status === "string" ? status.trim().toLowerCase() : status;
+  if (normalized === "win" || normalized === "won") return "won";
+  if (normalized === "loose" || normalized === "lost") return "lost";
+  return null;
+}
+function normalizePipelineStageLabel(value) {
+  return value.trim().toLowerCase().replace(/[^a-z0-9]+/g, " ").trim();
+}
+async function loadClosurePipelineStageSnapshot(em, input) {
+  if (!input.pipelineId) return null;
+  const stages = await findWithDecryption(
+    em,
+    CustomerPipelineStage,
+    {
+      pipelineId: input.pipelineId,
+      tenantId: input.tenantId,
+      organizationId: input.organizationId
+    },
+    { orderBy: { order: "ASC" } },
+    { tenantId: input.tenantId, organizationId: input.organizationId }
+  );
+  const aliases = TERMINAL_PIPELINE_STAGE_LABELS[input.closureOutcome];
+  const stage = stages.find((candidate) => aliases.has(normalizePipelineStageLabel(candidate.label)));
+  if (!stage) return null;
+  return {
+    id: stage.id,
+    pipelineId: stage.pipelineId,
+    label: stage.label,
+    order: stage.order
+  };
+}
+export {
+  TERMINAL_PIPELINE_STAGE_LABELS,
+  dealClosureOutcomeFromStatus,
+  loadClosurePipelineStageSnapshot,
+  normalizePipelineStageLabel
+};
+//# sourceMappingURL=closureStage.js.map

package/dist/modules/customers/lib/closureStage.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/customers/lib/closureStage.ts"],
+  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport { findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { CustomerPipelineStage } from '../data/entities'\n\nexport type DealClosureOutcome = 'won' | 'lost'\n\nexport type PipelineStageSnapshot = {\n  id: string\n  pipelineId: string\n  label: string\n  order: number\n}\n\n// Stage labels that mark a pipeline as terminal for a given closure outcome. Matching is\n// label-based because stages are tenant-configurable rows; see #5107.\nexport const TERMINAL_PIPELINE_STAGE_LABELS: Record<DealClosureOutcome, ReadonlySet<string>> = {\n  won: new Set(['won', 'win', 'closed won', 'closed win']),\n  lost: new Set(['lost', 'loose', 'closed lost', 'closed loose']),\n}\n\n/**\n * Map a deal status spelling (UI `win`/`loose` or AI `won`/`lost`) to its closure\n * outcome. Case-insensitive because callers such as the AI tool pass free-form model\n * text through, while every persisted status is lower-case.\n */\nexport function dealClosureOutcomeFromStatus(status: string | null | undefined): DealClosureOutcome | null {\n  const normalized = typeof status === 'string' ? status.trim().toLowerCase() : status\n  if (normalized === 'win' || normalized === 'won') return 'won'\n  if (normalized === 'loose' || normalized === 'lost') return 'lost'\n  return null\n}\n\nexport function normalizePipelineStageLabel(value: string): string {\n  return value\n    .trim()\n    .toLowerCase()\n    .replace(/[^a-z0-9]+/g, ' ')\n    .trim()\n}\n\n/**\n * Resolve the terminal stage of the deal's pipeline for a closure outcome, so every\n * writer (command, AI tool preview) agrees on where a closed deal lands (#5107).\n */\nexport async function loadClosurePipelineStageSnapshot(\n  em: EntityManager,\n  input: {\n    pipelineId: string | null\n    closureOutcome: DealClosureOutcome\n    tenantId: string\n    organizationId: string\n  },\n): Promise<PipelineStageSnapshot | null> {\n  if (!input.pipelineId) return null\n\n  const stages = await findWithDecryption(\n    em,\n    CustomerPipelineStage,\n    {\n      pipelineId: input.pipelineId,\n      tenantId: input.tenantId,\n      organizationId: input.organizationId,\n    },\n    { orderBy: { order: 'ASC' } },\n    { tenantId: input.tenantId, organizationId: input.organizationId },\n  )\n  const aliases = TERMINAL_PIPELINE_STAGE_LABELS[input.closureOutcome]\n  const stage = stages.find((candidate) => aliases.has(normalizePipelineStageLabel(candidate.label)))\n  if (!stage) return null\n  return {\n    id: stage.id,\n    pipelineId: stage.pipelineId,\n    label: stage.label,\n    order: stage.order,\n  }\n}\n"],
+  "mappings": "AACA,SAAS,0BAA0B;AACnC,SAAS,6BAA6B;AAa/B,MAAM,iCAAkF;AAAA,EAC7F,KAAK,oBAAI,IAAI,CAAC,OAAO,OAAO,cAAc,YAAY,CAAC;AAAA,EACvD,MAAM,oBAAI,IAAI,CAAC,QAAQ,SAAS,eAAe,cAAc,CAAC;AAChE;AAOO,SAAS,6BAA6B,QAA8D;AACzG,QAAM,aAAa,OAAO,WAAW,WAAW,OAAO,KAAK,EAAE,YAAY,IAAI;AAC9E,MAAI,eAAe,SAAS,eAAe,MAAO,QAAO;AACzD,MAAI,eAAe,WAAW,eAAe,OAAQ,QAAO;AAC5D,SAAO;AACT;AAEO,SAAS,4BAA4B,OAAuB;AACjE,SAAO,MACJ,KAAK,EACL,YAAY,EACZ,QAAQ,eAAe,GAAG,EAC1B,KAAK;AACV;AAMA,eAAsB,iCACpB,IACA,OAMuC;AACvC,MAAI,CAAC,MAAM,WAAY,QAAO;AAE9B,QAAM,SAAS,MAAM;AAAA,IACnB;AAAA,IACA;AAAA,IACA;AAAA,MACE,YAAY,MAAM;AAAA,MAClB,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM;AAAA,IACxB;AAAA,IACA,EAAE,SAAS,EAAE,OAAO,MAAM,EAAE;AAAA,IAC5B,EAAE,UAAU,MAAM,UAAU,gBAAgB,MAAM,eAAe;AAAA,EACnE;AACA,QAAM,UAAU,+BAA+B,MAAM,cAAc;AACnE,QAAM,QAAQ,OAAO,KAAK,CAAC,cAAc,QAAQ,IAAI,4BAA4B,UAAU,KAAK,CAAC,CAAC;AAClG,MAAI,CAAC,MAAO,QAAO;AACnB,SAAO;AAAA,IACL,IAAI,MAAM;AAAA,IACV,YAAY,MAAM;AAAA,IAClB,OAAO,MAAM;AAAA,IACb,OAAO,MAAM;AAAA,EACf;AACF;",
+  "names": []
+}

package/dist/modules/customers/lib/dealStatus.js

@@ -23,6 +23,34 @@ function isClosedDealStatus(value) {
 function isOpenDealStatus(value) {
   return !isClosedDealStatus(value);
 }
+function canonicalDealStatus(value) {
+  const lower = value.toLowerCase();
+  if (lower === "won") return DEAL_STATUS_WIN;
+  if (lower === "lost") return DEAL_STATUS_LOSE;
+  if (lower === "win" || lower === "loose" || lower === "open" || lower === "closed") return lower;
+  return value;
+}
+function expandDealStatusAliases(values) {
+  const out = /* @__PURE__ */ new Set();
+  for (const value of values) {
+    const trimmed = value.trim();
+    const lower = trimmed.toLowerCase();
+    if (lower === "win" || lower === "won") {
+      WON_DEAL_STATUS_LIST.forEach((entry) => out.add(entry));
+      out.add(trimmed);
+    } else if (lower === "loose" || lower === "lost") {
+      LOST_DEAL_STATUS_LIST.forEach((entry) => out.add(entry));
+      out.add(trimmed);
+    } else if (lower === "closed") {
+      CLOSED_DEAL_STATUS_LIST.forEach((entry) => out.add(entry));
+      out.add(trimmed);
+    } else {
+      out.add(trimmed);
+      out.add(lower);
+    }
+  }
+  return Array.from(out);
+}
 export {
   CLOSED_DEAL_STATUS_LIST,
   DEAL_STATUS_CLOSED,
@@ -30,6 +58,8 @@ export {
   DEAL_STATUS_WIN,
   LOST_DEAL_STATUS_LIST,
   WON_DEAL_STATUS_LIST,
+  canonicalDealStatus,
+  expandDealStatusAliases,
   isClosedDealStatus,
   isLostDealStatus,
   isOpenDealStatus,

package/dist/modules/customers/lib/dealStatus.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/customers/lib/dealStatus.ts"],
-  "sourcesContent": ["// Single source of truth for deal open/closed (terminal) semantics.\n//\n// `customer_deals.status` is a lenient text column and the supported writers do not agree on\n// one spelling: the closure hooks and the kanban board persist `win` / `loose`, the AI tool\n// `customers.update_deal_stage` persists `won` / `lost`, and the seeded vocabulary also carries\n// `closed`. The terminal set below therefore covers every spelling a status writer persists, so\n// status-based readers can share one classification. `closureOutcome` is a separate signal and\n// callers that combine both columns must handle it explicitly.\n//\n// A status not known to code counts as OPEN. Deal stages are configurable per tenant, so the\n// lenient column can hold values this module has never seen \u2014 treating them as open keeps them\n// visible in active-deal counts instead of silently reclassifying them as closed.\n\nexport const DEAL_STATUS_WIN = 'win' as const\nexport const DEAL_STATUS_LOSE = 'loose' as const\nexport const DEAL_STATUS_CLOSED = 'closed' as const\n\n// `won` / `lost` are the spellings the AI stage tool writes; `win` / `loose` are what the UI\n// closure flows persist. Both are accepted so neither writer produces an unreadable status.\nexport const WON_DEAL_STATUS_LIST: readonly string[] = [DEAL_STATUS_WIN, 'won']\n\nexport const LOST_DEAL_STATUS_LIST: readonly string[] = [DEAL_STATUS_LOSE, 'lost']\n\nexport const CLOSED_DEAL_STATUS_LIST: readonly string[] = [\n  ...WON_DEAL_STATUS_LIST,\n  ...LOST_DEAL_STATUS_LIST,\n  DEAL_STATUS_CLOSED,\n]\n\nconst WON_DEAL_STATUSES = new Set<string>(WON_DEAL_STATUS_LIST)\nconst LOST_DEAL_STATUSES = new Set<string>(LOST_DEAL_STATUS_LIST)\nconst CLOSED_DEAL_STATUSES = new Set<string>(CLOSED_DEAL_STATUS_LIST)\n\nexport function isWonDealStatus(value: string | null | undefined): boolean {\n  return value != null && WON_DEAL_STATUSES.has(value)\n}\n\nexport function isLostDealStatus(value: string | null | undefined): boolean {\n  return value != null && LOST_DEAL_STATUSES.has(value)\n}\n\nexport function isClosedDealStatus(value: string | null | undefined): boolean {\n  return value != null && CLOSED_DEAL_STATUSES.has(value)\n}\n\nexport function isOpenDealStatus(value: string | null | undefined): boolean {\n  return !isClosedDealStatus(value)\n}\n"],
-  "mappings": "AAaO,MAAM,kBAAkB;AACxB,MAAM,mBAAmB;AACzB,MAAM,qBAAqB;AAI3B,MAAM,uBAA0C,CAAC,iBAAiB,KAAK;AAEvE,MAAM,wBAA2C,CAAC,kBAAkB,MAAM;AAE1E,MAAM,0BAA6C;AAAA,EACxD,GAAG;AAAA,EACH,GAAG;AAAA,EACH;AACF;AAEA,MAAM,oBAAoB,IAAI,IAAY,oBAAoB;AAC9D,MAAM,qBAAqB,IAAI,IAAY,qBAAqB;AAChE,MAAM,uBAAuB,IAAI,IAAY,uBAAuB;AAE7D,SAAS,gBAAgB,OAA2C;AACzE,SAAO,SAAS,QAAQ,kBAAkB,IAAI,KAAK;AACrD;AAEO,SAAS,iBAAiB,OAA2C;AAC1E,SAAO,SAAS,QAAQ,mBAAmB,IAAI,KAAK;AACtD;AAEO,SAAS,mBAAmB,OAA2C;AAC5E,SAAO,SAAS,QAAQ,qBAAqB,IAAI,KAAK;AACxD;AAEO,SAAS,iBAAiB,OAA2C;AAC1E,SAAO,CAAC,mBAAmB,KAAK;AAClC;",
+  "sourcesContent": ["// Single source of truth for deal open/closed (terminal) semantics.\n//\n// `customer_deals.status` is a lenient text column and the supported writers do not agree on\n// one spelling: the closure hooks and the kanban board persist `win` / `loose`, the AI tool\n// `customers.update_deal_stage` persists `won` / `lost`, and the seeded vocabulary also carries\n// `closed`. The terminal set below therefore covers every spelling a status writer persists, so\n// status-based readers can share one classification. `closureOutcome` is a separate signal and\n// callers that combine both columns must handle it explicitly.\n//\n// A status not known to code counts as OPEN. Deal stages are configurable per tenant, so the\n// lenient column can hold values this module has never seen \u2014 treating them as open keeps them\n// visible in active-deal counts instead of silently reclassifying them as closed.\n\nexport const DEAL_STATUS_WIN = 'win' as const\nexport const DEAL_STATUS_LOSE = 'loose' as const\nexport const DEAL_STATUS_CLOSED = 'closed' as const\n\n// `won` / `lost` are the spellings the AI stage tool writes; `win` / `loose` are what the UI\n// closure flows persist. Both are accepted so neither writer produces an unreadable status.\nexport const WON_DEAL_STATUS_LIST: readonly string[] = [DEAL_STATUS_WIN, 'won']\n\nexport const LOST_DEAL_STATUS_LIST: readonly string[] = [DEAL_STATUS_LOSE, 'lost']\n\nexport const CLOSED_DEAL_STATUS_LIST: readonly string[] = [\n  ...WON_DEAL_STATUS_LIST,\n  ...LOST_DEAL_STATUS_LIST,\n  DEAL_STATUS_CLOSED,\n]\n\nconst WON_DEAL_STATUSES = new Set<string>(WON_DEAL_STATUS_LIST)\nconst LOST_DEAL_STATUSES = new Set<string>(LOST_DEAL_STATUS_LIST)\nconst CLOSED_DEAL_STATUSES = new Set<string>(CLOSED_DEAL_STATUS_LIST)\n\nexport function isWonDealStatus(value: string | null | undefined): boolean {\n  return value != null && WON_DEAL_STATUSES.has(value)\n}\n\nexport function isLostDealStatus(value: string | null | undefined): boolean {\n  return value != null && LOST_DEAL_STATUSES.has(value)\n}\n\nexport function isClosedDealStatus(value: string | null | undefined): boolean {\n  return value != null && CLOSED_DEAL_STATUSES.has(value)\n}\n\nexport function isOpenDealStatus(value: string | null | undefined): boolean {\n  return !isClosedDealStatus(value)\n}\n\nexport function canonicalDealStatus(value: string): string {\n  const lower = value.toLowerCase()\n  if (lower === 'won') return DEAL_STATUS_WIN\n  if (lower === 'lost') return DEAL_STATUS_LOSE\n  // Canonical spellings normalize to lower-case too, so an upper-case selection still\n  // matches the lower-case persisted values and dictionary options.\n  if (lower === 'win' || lower === 'loose' || lower === 'open' || lower === 'closed') return lower\n  return value\n}\n\n/**\n * Expand operator-selected status filter values into the canonical vocabulary so a\n * single selection matches every spelling the supported writers persist (#5107).\n *\n * Alias groups (`win`/`won`, `loose`/`lost`, `closed`) are matched case-insensitively,\n * expanded to their canonical spellings, and also keep the caller's original token so\n * the result is always a strict superset of a verbatim match. Unknown values emit both\n * the trimmed original and its lower-case form \u2014 mixed-case tenant dictionary statuses\n * match exactly while `?status=Open` still hits lower-case stored rows.\n */\nexport function expandDealStatusAliases(values: string[]): string[] {\n  const out = new Set<string>()\n  for (const value of values) {\n    const trimmed = value.trim()\n    const lower = trimmed.toLowerCase()\n    if (lower === 'win' || lower === 'won') {\n      WON_DEAL_STATUS_LIST.forEach((entry) => out.add(entry))\n      out.add(trimmed)\n    } else if (lower === 'loose' || lower === 'lost') {\n      LOST_DEAL_STATUS_LIST.forEach((entry) => out.add(entry))\n      out.add(trimmed)\n    } else if (lower === 'closed') {\n      CLOSED_DEAL_STATUS_LIST.forEach((entry) => out.add(entry))\n      out.add(trimmed)\n    } else {\n      out.add(trimmed)\n      out.add(lower)\n    }\n  }\n  return Array.from(out)\n}\n"],
+  "mappings": "AAaO,MAAM,kBAAkB;AACxB,MAAM,mBAAmB;AACzB,MAAM,qBAAqB;AAI3B,MAAM,uBAA0C,CAAC,iBAAiB,KAAK;AAEvE,MAAM,wBAA2C,CAAC,kBAAkB,MAAM;AAE1E,MAAM,0BAA6C;AAAA,EACxD,GAAG;AAAA,EACH,GAAG;AAAA,EACH;AACF;AAEA,MAAM,oBAAoB,IAAI,IAAY,oBAAoB;AAC9D,MAAM,qBAAqB,IAAI,IAAY,qBAAqB;AAChE,MAAM,uBAAuB,IAAI,IAAY,uBAAuB;AAE7D,SAAS,gBAAgB,OAA2C;AACzE,SAAO,SAAS,QAAQ,kBAAkB,IAAI,KAAK;AACrD;AAEO,SAAS,iBAAiB,OAA2C;AAC1E,SAAO,SAAS,QAAQ,mBAAmB,IAAI,KAAK;AACtD;AAEO,SAAS,mBAAmB,OAA2C;AAC5E,SAAO,SAAS,QAAQ,qBAAqB,IAAI,KAAK;AACxD;AAEO,SAAS,iBAAiB,OAA2C;AAC1E,SAAO,CAAC,mBAAmB,KAAK;AAClC;AAEO,SAAS,oBAAoB,OAAuB;AACzD,QAAM,QAAQ,MAAM,YAAY;AAChC,MAAI,UAAU,MAAO,QAAO;AAC5B,MAAI,UAAU,OAAQ,QAAO;AAG7B,MAAI,UAAU,SAAS,UAAU,WAAW,UAAU,UAAU,UAAU,SAAU,QAAO;AAC3F,SAAO;AACT;AAYO,SAAS,wBAAwB,QAA4B;AAClE,QAAM,MAAM,oBAAI,IAAY;AAC5B,aAAW,SAAS,QAAQ;AAC1B,UAAM,UAAU,MAAM,KAAK;AAC3B,UAAM,QAAQ,QAAQ,YAAY;AAClC,QAAI,UAAU,SAAS,UAAU,OAAO;AACtC,2BAAqB,QAAQ,CAAC,UAAU,IAAI,IAAI,KAAK,CAAC;AACtD,UAAI,IAAI,OAAO;AAAA,IACjB,WAAW,UAAU,WAAW,UAAU,QAAQ;AAChD,4BAAsB,QAAQ,CAAC,UAAU,IAAI,IAAI,KAAK,CAAC;AACvD,UAAI,IAAI,OAAO;AAAA,IACjB,WAAW,UAAU,UAAU;AAC7B,8BAAwB,QAAQ,CAAC,UAAU,IAAI,IAAI,KAAK,CAAC;AACzD,UAAI,IAAI,OAAO;AAAA,IACjB,OAAO;AACL,UAAI,IAAI,OAAO;AACf,UAAI,IAAI,KAAK;AAAA,IACf;AAAA,EACF;AACA,SAAO,MAAM,KAAK,GAAG;AACvB;",
   "names": []
 }

package/dist/modules/customers/lib/detailReadAccess.js

@@ -0,0 +1,12 @@
+import { NextResponse } from "next/server";
+import {
+  isOrganizationReadAccessAllowed
+} from "@open-mercato/core/modules/directory/utils/organizationScopeGuard";
+function denyCustomerDetailReadAsNotFound(input, notFoundMessage) {
+  if (isOrganizationReadAccessAllowed(input)) return null;
+  return NextResponse.json({ error: notFoundMessage }, { status: 404 });
+}
+export {
+  denyCustomerDetailReadAsNotFound
+};
+//# sourceMappingURL=detailReadAccess.js.map

package/dist/modules/customers/lib/detailReadAccess.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/customers/lib/detailReadAccess.ts"],
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport {\n  isOrganizationReadAccessAllowed,\n  type OrganizationReadAccessInput,\n} from '@open-mercato/core/modules/directory/utils/organizationScopeGuard'\n\n/**\n * Single-record customers detail routes (person / company / deal) must not leak\n * whether a record exists through the organization-scope check.\n *\n * The API dispatcher already enforces each route's `metadata.requireFeatures`\n * before the handler runs, returning a uniform `403` for callers who lack the\n * grant \u2014 so that path never distinguishes an existing id from a missing one.\n * The only remaining existence signal is the *post-load* organization guard: a\n * caller who holds the feature but whose scope excludes the record's\n * organization previously received `403` (record exists in another org) while a\n * non-existent id received `404`. That 403-vs-404 split is an existence oracle\n * (issue #5504).\n *\n * Collapse the organization-scope denial into the route's own not-found\n * response so an out-of-scope caller cannot tell \"exists in an organization you\n * cannot see\" from \"does not exist\" \u2014 the shape the api_keys hardening\n * (#4033 / PR-4051) established. Sharing this decision keeps the three customers\n * detail routes from drifting apart again.\n *\n * @returns the `404` response to return when read access is denied, or `null`\n * when the caller may read the record.\n */\nexport function denyCustomerDetailReadAsNotFound(\n  input: OrganizationReadAccessInput,\n  notFoundMessage: string,\n): NextResponse | null {\n  if (isOrganizationReadAccessAllowed(input)) return null\n  return NextResponse.json({ error: notFoundMessage }, { status: 404 })\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B;AAAA,EACE;AAAA,OAEK;AAwBA,SAAS,iCACd,OACA,iBACqB;AACrB,MAAI,gCAAgC,KAAK,EAAG,QAAO;AACnD,SAAO,aAAa,KAAK,EAAE,OAAO,gBAAgB,GAAG,EAAE,QAAQ,IAAI,CAAC;AACtE;",
+  "names": []
+}

package/dist/modules/customers/lib/findPeopleByAddresses.js

@@ -58,6 +58,7 @@ async function findPeopleByAddresses(em, addresses, tenantId, organizationId = n
   return out;
 }
 export {
+  MATCH_CANDIDATE_LIMIT,
   findPeopleByAddresses,
   normalizeAddresses
 };

package/dist/modules/customers/lib/findPeopleByAddresses.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/customers/lib/findPeopleByAddresses.ts"],
-  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport { findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { CustomerEntity } from '../data/entities'\n\n/**\n * Lower-cases, trims, and dedupes a list of email-shaped strings.\n * Rejects anything that doesn't look like `x@y` (single `@`, not at the start\n * or end, no consecutive `@`).\n */\nexport function normalizeAddresses(input: unknown): string[] {\n  if (!Array.isArray(input)) return []\n  const seen = new Set<string>()\n  const out: string[] = []\n  for (const value of input) {\n    if (typeof value !== 'string') continue\n    const trimmed = value.trim().toLowerCase()\n    if (!trimmed) continue\n    const at = trimmed.indexOf('@')\n    if (at <= 0 || at === trimmed.length - 1 || trimmed.lastIndexOf('@') !== at) continue\n    if (seen.has(trimmed)) continue\n    seen.add(trimmed)\n    out.push(trimmed)\n  }\n  return out\n}\n\nexport interface MatchedPerson {\n  /** customer_entities.id (the anchor for customer_interactions.entity_id). */\n  id: string\n  /** Lowercased email address. */\n  email: string\n}\n\n/**\n * Max person rows scanned by the in-memory fallback match. `primary_email` is\n * GDPR-encrypted with a random IV (see `customers/encryption.ts`), so it cannot\n * be filtered by value in SQL when tenant data encryption is on \u2014 recent rows are\n * decrypted and compared in memory instead. Bounded to keep the inbound path cheap;\n * a `primary_email` blind-index (hash) column is the follow-up if tenants outgrow it.\n */\nconst MATCH_CANDIDATE_LIMIT = 500\n\n/**\n * Batch lookup of CustomerEntity rows (kind='person') whose `primaryEmail`\n * matches any of the given addresses (case-insensitive), scoped to the tenant\n * and organization. Returns at most one MatchedPerson per resolved person.\n *\n * `primary_email` is encrypted with a non-deterministic IV, so a `WHERE\n * primary_email = ?` filter silently matches nothing when encryption is on. We\n * therefore try a direct equality match first (the fast path when encryption is\n * off) and, for any address it leaves unresolved, fall back to scanning recent\n * decrypted person rows and comparing in memory \u2014 the same dual-mode pattern as\n * `inbox-actions.ts`.\n */\nexport async function findPeopleByAddresses(\n  em: EntityManager,\n  addresses: string[],\n  tenantId: string,\n  organizationId: string | null = null,\n): Promise<MatchedPerson[]> {\n  const normalized = normalizeAddresses(addresses)\n  if (normalized.length === 0) return []\n  if (!organizationId) return []\n  const dscope = { tenantId, organizationId }\n  const resolved = new Map<string, string>()\n\n  // Fast path: direct equality match. Matches exactly when tenant data encryption\n  // is off; returns nothing against encrypted (random-IV) ciphertext, which the\n  // in-memory fallback below covers.\n  const direct = (await findWithDecryption(\n    em,\n    CustomerEntity,\n    { primaryEmail: { $in: normalized }, kind: 'person', tenantId, organizationId, deletedAt: null },\n    undefined,\n    dscope,\n  )) as Array<{ id: string; primaryEmail?: string | null }>\n  for (const row of direct) {\n    const rowEmail = row.primaryEmail?.trim().toLowerCase()\n    if (rowEmail && !resolved.has(rowEmail)) resolved.set(rowEmail, row.id)\n  }\n\n  // Fallback for unresolved addresses (the encryption-on path): scan recent person\n  // rows and compare decrypted emails in memory.\n  if (normalized.some((email) => !resolved.has(email))) {\n    const candidates = (await findWithDecryption(\n      em,\n      CustomerEntity,\n      { kind: 'person', tenantId, organizationId, deletedAt: null },\n      { limit: MATCH_CANDIDATE_LIMIT, orderBy: { createdAt: 'DESC' } },\n      dscope,\n    )) as Array<{ id: string; primaryEmail?: string | null }>\n    for (const row of candidates) {\n      const rowEmail = row.primaryEmail?.trim().toLowerCase()\n      if (rowEmail && !resolved.has(rowEmail)) resolved.set(rowEmail, row.id)\n    }\n  }\n\n  const seen = new Set<string>()\n  const out: MatchedPerson[] = []\n  for (const email of normalized) {\n    const id = resolved.get(email)\n    if (!id || seen.has(id)) continue\n    seen.add(id)\n    out.push({ id, email })\n  }\n  return out\n}\n"],
-  "mappings": "AACA,SAAS,0BAA0B;AACnC,SAAS,sBAAsB;AAOxB,SAAS,mBAAmB,OAA0B;AAC3D,MAAI,CAAC,MAAM,QAAQ,KAAK,EAAG,QAAO,CAAC;AACnC,QAAM,OAAO,oBAAI,IAAY;AAC7B,QAAM,MAAgB,CAAC;AACvB,aAAW,SAAS,OAAO;AACzB,QAAI,OAAO,UAAU,SAAU;AAC/B,UAAM,UAAU,MAAM,KAAK,EAAE,YAAY;AACzC,QAAI,CAAC,QAAS;AACd,UAAM,KAAK,QAAQ,QAAQ,GAAG;AAC9B,QAAI,MAAM,KAAK,OAAO,QAAQ,SAAS,KAAK,QAAQ,YAAY,GAAG,MAAM,GAAI;AAC7E,QAAI,KAAK,IAAI,OAAO,EAAG;AACvB,SAAK,IAAI,OAAO;AAChB,QAAI,KAAK,OAAO;AAAA,EAClB;AACA,SAAO;AACT;AAgBA,MAAM,wBAAwB;AAc9B,eAAsB,sBACpB,IACA,WACA,UACA,iBAAgC,MACN;AAC1B,QAAM,aAAa,mBAAmB,SAAS;AAC/C,MAAI,WAAW,WAAW,EAAG,QAAO,CAAC;AACrC,MAAI,CAAC,eAAgB,QAAO,CAAC;AAC7B,QAAM,SAAS,EAAE,UAAU,eAAe;AAC1C,QAAM,WAAW,oBAAI,IAAoB;AAKzC,QAAM,SAAU,MAAM;AAAA,IACpB;AAAA,IACA;AAAA,IACA,EAAE,cAAc,EAAE,KAAK,WAAW,GAAG,MAAM,UAAU,UAAU,gBAAgB,WAAW,KAAK;AAAA,IAC/F;AAAA,IACA;AAAA,EACF;AACA,aAAW,OAAO,QAAQ;AACxB,UAAM,WAAW,IAAI,cAAc,KAAK,EAAE,YAAY;AACtD,QAAI,YAAY,CAAC,SAAS,IAAI,QAAQ,EAAG,UAAS,IAAI,UAAU,IAAI,EAAE;AAAA,EACxE;AAIA,MAAI,WAAW,KAAK,CAAC,UAAU,CAAC,SAAS,IAAI,KAAK,CAAC,GAAG;AACpD,UAAM,aAAc,MAAM;AAAA,MACxB;AAAA,MACA;AAAA,MACA,EAAE,MAAM,UAAU,UAAU,gBAAgB,WAAW,KAAK;AAAA,MAC5D,EAAE,OAAO,uBAAuB,SAAS,EAAE,WAAW,OAAO,EAAE;AAAA,MAC/D;AAAA,IACF;AACA,eAAW,OAAO,YAAY;AAC5B,YAAM,WAAW,IAAI,cAAc,KAAK,EAAE,YAAY;AACtD,UAAI,YAAY,CAAC,SAAS,IAAI,QAAQ,EAAG,UAAS,IAAI,UAAU,IAAI,EAAE;AAAA,IACxE;AAAA,EACF;AAEA,QAAM,OAAO,oBAAI,IAAY;AAC7B,QAAM,MAAuB,CAAC;AAC9B,aAAW,SAAS,YAAY;AAC9B,UAAM,KAAK,SAAS,IAAI,KAAK;AAC7B,QAAI,CAAC,MAAM,KAAK,IAAI,EAAE,EAAG;AACzB,SAAK,IAAI,EAAE;AACX,QAAI,KAAK,EAAE,IAAI,MAAM,CAAC;AAAA,EACxB;AACA,SAAO;AACT;",
+  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport { findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { CustomerEntity } from '../data/entities'\n\n/**\n * Lower-cases, trims, and dedupes a list of email-shaped strings.\n * Rejects anything that doesn't look like `x@y` (single `@`, not at the start\n * or end, no consecutive `@`).\n */\nexport function normalizeAddresses(input: unknown): string[] {\n  if (!Array.isArray(input)) return []\n  const seen = new Set<string>()\n  const out: string[] = []\n  for (const value of input) {\n    if (typeof value !== 'string') continue\n    const trimmed = value.trim().toLowerCase()\n    if (!trimmed) continue\n    const at = trimmed.indexOf('@')\n    if (at <= 0 || at === trimmed.length - 1 || trimmed.lastIndexOf('@') !== at) continue\n    if (seen.has(trimmed)) continue\n    seen.add(trimmed)\n    out.push(trimmed)\n  }\n  return out\n}\n\nexport interface MatchedPerson {\n  /** customer_entities.id (the anchor for customer_interactions.entity_id). */\n  id: string\n  /** Lowercased email address. */\n  email: string\n}\n\n/**\n * Max rows scanned by in-memory fallback matches over encrypted contact\n * columns (`primary_email` here, `primary_phone` in the check-phone route).\n * These columns are GDPR-encrypted with a random IV (see\n * `customers/encryption.ts`), so they cannot be filtered by value in SQL when\n * tenant data encryption is on \u2014 fallbacks decrypt recent rows and compare in\n * memory instead. Bounded to keep interactive lookups cheap; a blind-index\n * (hash) column per field is the follow-up if tenants outgrow it (#5515).\n */\nexport const MATCH_CANDIDATE_LIMIT = 500\n\n/**\n * Batch lookup of CustomerEntity rows (kind='person') whose `primaryEmail`\n * matches any of the given addresses (case-insensitive), scoped to the tenant\n * and organization. Returns at most one MatchedPerson per resolved person.\n *\n * `primary_email` is encrypted with a non-deterministic IV, so a `WHERE\n * primary_email = ?` filter silently matches nothing when encryption is on. We\n * therefore try a direct equality match first (the fast path when encryption is\n * off) and, for any address it leaves unresolved, fall back to scanning recent\n * decrypted person rows and comparing in memory \u2014 the same dual-mode pattern as\n * `inbox-actions.ts`.\n */\nexport async function findPeopleByAddresses(\n  em: EntityManager,\n  addresses: string[],\n  tenantId: string,\n  organizationId: string | null = null,\n): Promise<MatchedPerson[]> {\n  const normalized = normalizeAddresses(addresses)\n  if (normalized.length === 0) return []\n  if (!organizationId) return []\n  const dscope = { tenantId, organizationId }\n  const resolved = new Map<string, string>()\n\n  // Fast path: direct equality match. Matches exactly when tenant data encryption\n  // is off; returns nothing against encrypted (random-IV) ciphertext, which the\n  // in-memory fallback below covers.\n  const direct = (await findWithDecryption(\n    em,\n    CustomerEntity,\n    { primaryEmail: { $in: normalized }, kind: 'person', tenantId, organizationId, deletedAt: null },\n    undefined,\n    dscope,\n  )) as Array<{ id: string; primaryEmail?: string | null }>\n  for (const row of direct) {\n    const rowEmail = row.primaryEmail?.trim().toLowerCase()\n    if (rowEmail && !resolved.has(rowEmail)) resolved.set(rowEmail, row.id)\n  }\n\n  // Fallback for unresolved addresses (the encryption-on path): scan recent person\n  // rows and compare decrypted emails in memory.\n  if (normalized.some((email) => !resolved.has(email))) {\n    const candidates = (await findWithDecryption(\n      em,\n      CustomerEntity,\n      { kind: 'person', tenantId, organizationId, deletedAt: null },\n      { limit: MATCH_CANDIDATE_LIMIT, orderBy: { createdAt: 'DESC' } },\n      dscope,\n    )) as Array<{ id: string; primaryEmail?: string | null }>\n    for (const row of candidates) {\n      const rowEmail = row.primaryEmail?.trim().toLowerCase()\n      if (rowEmail && !resolved.has(rowEmail)) resolved.set(rowEmail, row.id)\n    }\n  }\n\n  const seen = new Set<string>()\n  const out: MatchedPerson[] = []\n  for (const email of normalized) {\n    const id = resolved.get(email)\n    if (!id || seen.has(id)) continue\n    seen.add(id)\n    out.push({ id, email })\n  }\n  return out\n}\n"],
+  "mappings": "AACA,SAAS,0BAA0B;AACnC,SAAS,sBAAsB;AAOxB,SAAS,mBAAmB,OAA0B;AAC3D,MAAI,CAAC,MAAM,QAAQ,KAAK,EAAG,QAAO,CAAC;AACnC,QAAM,OAAO,oBAAI,IAAY;AAC7B,QAAM,MAAgB,CAAC;AACvB,aAAW,SAAS,OAAO;AACzB,QAAI,OAAO,UAAU,SAAU;AAC/B,UAAM,UAAU,MAAM,KAAK,EAAE,YAAY;AACzC,QAAI,CAAC,QAAS;AACd,UAAM,KAAK,QAAQ,QAAQ,GAAG;AAC9B,QAAI,MAAM,KAAK,OAAO,QAAQ,SAAS,KAAK,QAAQ,YAAY,GAAG,MAAM,GAAI;AAC7E,QAAI,KAAK,IAAI,OAAO,EAAG;AACvB,SAAK,IAAI,OAAO;AAChB,QAAI,KAAK,OAAO;AAAA,EAClB;AACA,SAAO;AACT;AAkBO,MAAM,wBAAwB;AAcrC,eAAsB,sBACpB,IACA,WACA,UACA,iBAAgC,MACN;AAC1B,QAAM,aAAa,mBAAmB,SAAS;AAC/C,MAAI,WAAW,WAAW,EAAG,QAAO,CAAC;AACrC,MAAI,CAAC,eAAgB,QAAO,CAAC;AAC7B,QAAM,SAAS,EAAE,UAAU,eAAe;AAC1C,QAAM,WAAW,oBAAI,IAAoB;AAKzC,QAAM,SAAU,MAAM;AAAA,IACpB;AAAA,IACA;AAAA,IACA,EAAE,cAAc,EAAE,KAAK,WAAW,GAAG,MAAM,UAAU,UAAU,gBAAgB,WAAW,KAAK;AAAA,IAC/F;AAAA,IACA;AAAA,EACF;AACA,aAAW,OAAO,QAAQ;AACxB,UAAM,WAAW,IAAI,cAAc,KAAK,EAAE,YAAY;AACtD,QAAI,YAAY,CAAC,SAAS,IAAI,QAAQ,EAAG,UAAS,IAAI,UAAU,IAAI,EAAE;AAAA,EACxE;AAIA,MAAI,WAAW,KAAK,CAAC,UAAU,CAAC,SAAS,IAAI,KAAK,CAAC,GAAG;AACpD,UAAM,aAAc,MAAM;AAAA,MACxB;AAAA,MACA;AAAA,MACA,EAAE,MAAM,UAAU,UAAU,gBAAgB,WAAW,KAAK;AAAA,MAC5D,EAAE,OAAO,uBAAuB,SAAS,EAAE,WAAW,OAAO,EAAE;AAAA,MAC/D;AAAA,IACF;AACA,eAAW,OAAO,YAAY;AAC5B,YAAM,WAAW,IAAI,cAAc,KAAK,EAAE,YAAY;AACtD,UAAI,YAAY,CAAC,SAAS,IAAI,QAAQ,EAAG,UAAS,IAAI,UAAU,IAAI,EAAE;AAAA,IACxE;AAAA,EACF;AAEA,QAAM,OAAO,oBAAI,IAAY;AAC7B,QAAM,MAAuB,CAAC;AAC9B,aAAW,SAAS,YAAY;AAC9B,UAAM,KAAK,SAAS,IAAI,KAAK;AAC7B,QAAI,CAAC,MAAM,KAAK,IAAI,EAAE,EAAG;AACzB,SAAK,IAAI,EAAE;AACX,QAAI,KAAK,EAAE,IAAI,MAAM,CAAC;AAAA,EACxB;AACA,SAAO;AACT;",
   "names": []
 }

package/dist/modules/customers/lib/personCompanies.js

@@ -2,7 +2,8 @@ import { CrudHttpError, notFound } from "@open-mercato/shared/lib/crud/errors";
 import { findWithDecryption, findOneWithDecryption } from "@open-mercato/shared/lib/encryption/find";
 import {
   CustomerEntity,
-  CustomerPersonCompanyLink
+  CustomerPersonCompanyLink,
+  CustomerPersonProfile
 } from "../data/entities.js";
 import {
   filterActivePersonCompanyLinks,
@@ -34,6 +35,99 @@ async function requireCompany(em, companyId, organizationId, tenantId) {
   }
   return company;
 }
+async function loadCompanyPeopleUnion(em, company, scope) {
+  const decryptionScope = {
+    tenantId: scope.tenantId ?? company.tenantId ?? null,
+    organizationId: scope.organizationId ?? company.organizationId ?? null
+  };
+  const relatedPeopleById = /* @__PURE__ */ new Map();
+  const companyLinkWhere = await withActiveCustomerPersonCompanyLinkFilter(
+    em,
+    { company: company.id, organizationId: company.organizationId, tenantId: company.tenantId },
+    "customers.companies.loadCompanyPeopleUnion"
+  );
+  const companyLinks = filterActivePersonCompanyLinks(
+    await findWithDecryption(
+      em,
+      CustomerPersonCompanyLink,
+      companyLinkWhere,
+      { populate: ["person", "person.personProfile"], orderBy: { isPrimary: "desc", createdAt: "asc" } },
+      decryptionScope
+    )
+  );
+  companyLinks.forEach((link) => {
+    const entity = typeof link.person === "string" ? null : link.person;
+    if (!entity || entity.kind !== "person" || entity.deletedAt) return;
+    const personProfile = entity.personProfile && typeof entity.personProfile !== "string" ? entity.personProfile : null;
+    relatedPeopleById.set(entity.id, {
+      entity,
+      profile: personProfile,
+      linkedAt: link.createdAt instanceof Date ? link.createdAt.toISOString() : null
+    });
+  });
+  const profiles = await findWithDecryption(
+    em,
+    CustomerPersonProfile,
+    {
+      company: company.id,
+      tenantId: company.tenantId,
+      organizationId: company.organizationId,
+      entity: { deletedAt: null }
+    },
+    { populate: ["entity"] },
+    decryptionScope
+  );
+  profiles.forEach((entry) => {
+    const entity = entry.entity;
+    if (!entity || entity.kind !== "person" || entity.deletedAt) return;
+    if (!relatedPeopleById.has(entity.id)) {
+      relatedPeopleById.set(entity.id, {
+        entity,
+        profile: entry ?? null,
+        linkedAt: entry.createdAt instanceof Date ? entry.createdAt.toISOString() : null
+      });
+    }
+  });
+  return Array.from(relatedPeopleById.values());
+}
+async function countCompanyPeopleUnion(em, company) {
+  const personIds = /* @__PURE__ */ new Set();
+  const companyLinkWhere = await withActiveCustomerPersonCompanyLinkFilter(
+    em,
+    {
+      company: company.id,
+      organizationId: company.organizationId,
+      tenantId: company.tenantId,
+      person: { kind: "person", deletedAt: null }
+    },
+    "customers.companies.countCompanyPeopleUnion"
+  );
+  const companyLinks = filterActivePersonCompanyLinks(
+    await em.find(CustomerPersonCompanyLink, companyLinkWhere, {
+      fields: ["person", "deletedAt"]
+    })
+  );
+  companyLinks.forEach((link) => {
+    const personId = typeof link.person === "string" ? link.person : link.person?.id;
+    if (personId) personIds.add(personId);
+  });
+  const profiles = await em.find(
+    CustomerPersonProfile,
+    {
+      company: company.id,
+      tenantId: company.tenantId,
+      organizationId: company.organizationId,
+      entity: { kind: "person", deletedAt: null }
+    },
+    { fields: ["entity"] }
+  );
+  profiles.forEach((entry) => {
+    const entity = entry.entity;
+    const entityId = typeof entity === "string" ? entity : entity?.id;
+    if (entityId) personIds.add(entityId);
+  });
+  return personIds.size;
+}
 async function loadPersonCompanyLinks(em, person) {
   const where = await withActiveCustomerPersonCompanyLinkFilter(
     em,
@@ -207,7 +301,9 @@ async function removePersonCompanyLink(em, person, profile, linkId) {
   const link = existingLinks.find((entry) => entry.id === linkId) ?? existingLinks.find((entry) => (typeof entry.company === "string" ? entry.company : entry.company.id) === linkId) ?? null;
   if (!link) {
     if (profile.company && typeof profile.company !== "string" && profile.company.id === linkId) {
-      profile.company = null;
+      const primary = existingLinks.find((entry) => entry.isPrimary) ?? null;
+      const primaryCompany = primary ? resolveLinkedCompany(primary) : null;
+      profile.company = primaryCompany ?? null;
       return;
     }
     throw notFound("Company link not found");
@@ -229,7 +325,9 @@ async function removePersonCompanyLink(em, person, profile, linkId) {
 }
 export {
   addPersonCompanyLink,
+  countCompanyPeopleUnion,
   findDeletedPersonCompanyLink,
+  loadCompanyPeopleUnion,
   loadPersonCompanyLinks,
   promoteFallbackPrimaryLink,
   removePersonCompanyLink,

package/dist/modules/customers/lib/personCompanies.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/customers/lib/personCompanies.ts"],
-  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport { CrudHttpError, notFound } from '@open-mercato/shared/lib/crud/errors'\nimport { findWithDecryption, findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport {\n  CustomerEntity,\n  CustomerPersonCompanyLink,\n  CustomerPersonProfile,\n} from '../data/entities'\nimport {\n  filterActivePersonCompanyLinks,\n  withActiveCustomerPersonCompanyLinkFilter,\n} from './personCompanyLinkTable'\n\nexport type PersonCompanySummary = {\n  linkId: string | null\n  companyId: string\n  displayName: string\n  isPrimary: boolean\n  synthetic?: boolean\n}\n\nexport async function findDeletedPersonCompanyLink(\n  em: EntityManager,\n  person: CustomerEntity,\n  company: CustomerEntity,\n): Promise<CustomerPersonCompanyLink | null> {\n  const link = await findOneWithDecryption(\n    em,\n    CustomerPersonCompanyLink,\n    {\n      person,\n      company,\n      organizationId: person.organizationId,\n      tenantId: person.tenantId,\n      deletedAt: { $ne: null },\n    } as any,\n    {},\n    { tenantId: person.tenantId, organizationId: person.organizationId },\n  )\n  return link ?? null\n}\n\nasync function requireCompany(\n  em: EntityManager,\n  companyId: string,\n  organizationId: string,\n  tenantId: string,\n): Promise<CustomerEntity> {\n  const company = await findOneWithDecryption(em, CustomerEntity, { id: companyId, kind: 'company', deletedAt: null }, {}, { tenantId, organizationId })\n  if (!company) {\n    throw notFound('Company not found')\n  }\n  if (company.organizationId !== organizationId || company.tenantId !== tenantId) {\n    throw new CrudHttpError(403, { error: 'Cannot link company outside current scope' })\n  }\n  return company\n}\n\nexport async function loadPersonCompanyLinks(\n  em: EntityManager,\n  person: CustomerEntity,\n): Promise<CustomerPersonCompanyLink[]> {\n  const where = await withActiveCustomerPersonCompanyLinkFilter(\n    em,\n    { person, organizationId: person.organizationId, tenantId: person.tenantId },\n    'customers.personCompanies.loadPersonCompanyLinks',\n  )\n  return filterActivePersonCompanyLinks(\n    await findWithDecryption(\n      em,\n      CustomerPersonCompanyLink,\n      where,\n      { populate: ['company'], orderBy: { isPrimary: 'desc', createdAt: 'asc' } },\n      { tenantId: person.tenantId, organizationId: person.organizationId },\n    ),\n  )\n}\n\nexport function summarizePersonCompanies(\n  profile: CustomerPersonProfile | null,\n  links: CustomerPersonCompanyLink[],\n): PersonCompanySummary[] {\n  if (links.length > 0) {\n    const items: PersonCompanySummary[] = []\n    links.forEach((link) => {\n      const company = typeof link.company === 'string' ? null : link.company\n      if (!company) return\n      items.push({\n        linkId: link.id,\n        companyId: company.id,\n        displayName: company.displayName,\n        isPrimary: Boolean(link.isPrimary),\n      })\n    })\n    return items\n  }\n\n  const fallbackCompany = profile?.company && typeof profile.company !== 'string' ? profile.company : null\n  if (!fallbackCompany) return []\n\n  return [\n    {\n      linkId: fallbackCompany.id,\n      companyId: fallbackCompany.id,\n      displayName: fallbackCompany.displayName,\n      isPrimary: true,\n      synthetic: true,\n    },\n  ]\n}\n\nasync function clearPrimaryFlags(em: EntityManager, person: CustomerEntity): Promise<void> {\n  await em.nativeUpdate(\n    CustomerPersonCompanyLink,\n    { person, organizationId: person.organizationId, tenantId: person.tenantId, isPrimary: true },\n    { isPrimary: false },\n  )\n}\n\nfunction resolveLinkedCompany(link: CustomerPersonCompanyLink): CustomerEntity | null {\n  return typeof link.company === 'string' ? null : link.company\n}\n\nexport async function promoteFallbackPrimaryLink(\n  em: EntityManager,\n  person: CustomerEntity,\n  profile: CustomerPersonProfile,\n  links: CustomerPersonCompanyLink[],\n  removedCompanyId?: string | null,\n): Promise<void> {\n  const nextPrimary = links[0] ?? null\n  if (!nextPrimary) {\n    if (\n      !removedCompanyId\n      || (profile.company && typeof profile.company !== 'string' && profile.company.id === removedCompanyId)\n      || profile.company == null\n    ) {\n      profile.company = null\n    }\n    return\n  }\n\n  await clearPrimaryFlags(em, person)\n  nextPrimary.isPrimary = true\n  const nextCompany = resolveLinkedCompany(nextPrimary)\n  if (nextCompany) {\n    profile.company = nextCompany\n  }\n}\n\nexport async function syncLegacyPrimaryCompanyLink(\n  em: EntityManager,\n  person: CustomerEntity,\n  profile: CustomerPersonProfile,\n  companyId: string | null | undefined,\n): Promise<void> {\n  const normalizedCompanyId = typeof companyId === 'string' && companyId.trim().length > 0 ? companyId.trim() : null\n  const existingLinks = await loadPersonCompanyLinks(em, person)\n\n  if (!normalizedCompanyId) {\n    if (existingLinks.some((link) => link.isPrimary)) {\n      await clearPrimaryFlags(em, person)\n    }\n    profile.company = null\n    return\n  }\n\n  const company = await requireCompany(em, normalizedCompanyId, person.organizationId, person.tenantId)\n  const currentLink =\n    existingLinks.find((link) => (typeof link.company === 'string' ? link.company : link.company.id) === company.id) ?? null\n\n  if (currentLink) {\n    if (!currentLink.isPrimary) {\n      await clearPrimaryFlags(em, person)\n      currentLink.isPrimary = true\n    } else if (existingLinks.some((link) => link.id !== currentLink.id && link.isPrimary)) {\n      await clearPrimaryFlags(em, person)\n      currentLink.isPrimary = true\n    }\n  } else {\n    await clearPrimaryFlags(em, person)\n    const link = em.create(CustomerPersonCompanyLink, {\n      organizationId: person.organizationId,\n      tenantId: person.tenantId,\n      person,\n      company,\n      isPrimary: true,\n    })\n    em.persist(link)\n  }\n\n  profile.company = company\n}\n\nexport async function addPersonCompanyLink(\n  em: EntityManager,\n  person: CustomerEntity,\n  profile: CustomerPersonProfile,\n  companyId: string,\n  options?: { isPrimary?: boolean },\n): Promise<CustomerPersonCompanyLink> {\n  const company = await requireCompany(em, companyId, person.organizationId, person.tenantId)\n  const existingLinks = await loadPersonCompanyLinks(em, person)\n  const makePrimary = Boolean(options?.isPrimary) || existingLinks.length === 0\n  const existing =\n    existingLinks.find((link) => (typeof link.company === 'string' ? link.company : link.company.id) === company.id) ?? null\n\n  if (existing) {\n    if (makePrimary && !existing.isPrimary) {\n      await clearPrimaryFlags(em, person)\n      existing.isPrimary = true\n      profile.company = company\n    }\n    return existing\n  }\n\n  if (makePrimary) {\n    await clearPrimaryFlags(em, person)\n  }\n\n  const deletedLink = await findDeletedPersonCompanyLink(em, person, company)\n  const link = deletedLink ?? em.create(CustomerPersonCompanyLink, {\n    organizationId: person.organizationId,\n    tenantId: person.tenantId,\n    person,\n    company,\n    isPrimary: makePrimary,\n  })\n  if (deletedLink) {\n    deletedLink.deletedAt = null\n    deletedLink.isPrimary = makePrimary\n  }\n  em.persist(link)\n\n  if (makePrimary) {\n    profile.company = company\n  } else if (!profile.company && existingLinks.length === 0) {\n    profile.company = company\n    link.isPrimary = true\n  }\n\n  return link\n}\n\nexport async function updatePersonCompanyLink(\n  em: EntityManager,\n  person: CustomerEntity,\n  profile: CustomerPersonProfile,\n  linkId: string,\n  patch: { isPrimary?: boolean },\n): Promise<CustomerPersonCompanyLink | null> {\n  const existingLinks = await loadPersonCompanyLinks(em, person)\n  const link = existingLinks.find((entry) => entry.id === linkId)\n    ?? existingLinks.find((entry) => (typeof entry.company === 'string' ? entry.company : entry.company.id) === linkId)\n    ?? null\n\n  if (!link && profile.company && typeof profile.company !== 'string' && profile.company.id === linkId && patch.isPrimary === false) {\n    profile.company = null\n    return null\n  }\n\n  if (!link) {\n    throw notFound('Company link not found')\n  }\n\n  if (patch.isPrimary === true) {\n    await clearPrimaryFlags(em, person)\n    link.isPrimary = true\n    const company = resolveLinkedCompany(link)\n    if (company) {\n      profile.company = company\n    }\n  } else if (patch.isPrimary === false) {\n    const linkWasPrimary = link.isPrimary\n    const removedCompanyId = typeof link.company === 'string' ? link.company : link.company.id\n    link.isPrimary = false\n    if (linkWasPrimary) {\n      const remainingLinks = existingLinks.filter((entry) => entry.id !== link.id)\n      await promoteFallbackPrimaryLink(em, person, profile, remainingLinks, removedCompanyId)\n    } else if (profile.company && typeof profile.company !== 'string' && profile.company.id === removedCompanyId) {\n      profile.company = null\n    }\n  }\n\n  return link\n}\n\nexport async function removePersonCompanyLink(\n  em: EntityManager,\n  person: CustomerEntity,\n  profile: CustomerPersonProfile,\n  linkId: string,\n): Promise<void> {\n  const existingLinks = await loadPersonCompanyLinks(em, person)\n  const link = existingLinks.find((entry) => entry.id === linkId)\n    ?? existingLinks.find((entry) => (typeof entry.company === 'string' ? entry.company : entry.company.id) === linkId)\n    ?? null\n\n  if (!link) {\n    if (profile.company && typeof profile.company !== 'string' && profile.company.id === linkId) {\n      profile.company = null\n      return\n    }\n    throw notFound('Company link not found')\n  }\n\n  const removedCompanyId = typeof link.company === 'string' ? link.company : link.company.id\n  const removedWasPrimary = link.isPrimary\n  link.isPrimary = false\n  link.deletedAt = new Date()\n  const remainingLinks = existingLinks.filter((entry) => entry.id !== link.id)\n\n  if (removedWasPrimary) {\n    await promoteFallbackPrimaryLink(em, person, profile, remainingLinks, removedCompanyId)\n  } else if (profile.company && typeof profile.company !== 'string' && profile.company.id === removedCompanyId) {\n    const primary = remainingLinks.find((entry) => entry.isPrimary) ?? null\n    const primaryCompany = primary ? resolveLinkedCompany(primary) : null\n    if (primaryCompany) {\n      profile.company = primaryCompany\n    }\n  }\n}\n"],
-  "mappings": "AACA,SAAS,eAAe,gBAAgB;AACxC,SAAS,oBAAoB,6BAA6B;AAC1D;AAAA,EACE;AAAA,EACA;AAAA,OAEK;AACP;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAUP,eAAsB,6BACpB,IACA,QACA,SAC2C;AAC3C,QAAM,OAAO,MAAM;AAAA,IACjB;AAAA,IACA;AAAA,IACA;AAAA,MACE;AAAA,MACA;AAAA,MACA,gBAAgB,OAAO;AAAA,MACvB,UAAU,OAAO;AAAA,MACjB,WAAW,EAAE,KAAK,KAAK;AAAA,IACzB;AAAA,IACA,CAAC;AAAA,IACD,EAAE,UAAU,OAAO,UAAU,gBAAgB,OAAO,eAAe;AAAA,EACrE;AACA,SAAO,QAAQ;AACjB;AAEA,eAAe,eACb,IACA,WACA,gBACA,UACyB;AACzB,QAAM,UAAU,MAAM,sBAAsB,IAAI,gBAAgB,EAAE,IAAI,WAAW,MAAM,WAAW,WAAW,KAAK,GAAG,CAAC,GAAG,EAAE,UAAU,eAAe,CAAC;AACrJ,MAAI,CAAC,SAAS;AACZ,UAAM,SAAS,mBAAmB;AAAA,EACpC;AACA,MAAI,QAAQ,mBAAmB,kBAAkB,QAAQ,aAAa,UAAU;AAC9E,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,4CAA4C,CAAC;AAAA,EACrF;AACA,SAAO;AACT;AAEA,eAAsB,uBACpB,IACA,QACsC;AACtC,QAAM,QAAQ,MAAM;AAAA,IAClB;AAAA,IACA,EAAE,QAAQ,gBAAgB,OAAO,gBAAgB,UAAU,OAAO,SAAS;AAAA,IAC3E;AAAA,EACF;AACA,SAAO;AAAA,IACL,MAAM;AAAA,MACJ;AAAA,MACA;AAAA,MACA;AAAA,MACA,EAAE,UAAU,CAAC,SAAS,GAAG,SAAS,EAAE,WAAW,QAAQ,WAAW,MAAM,EAAE;AAAA,MAC1E,EAAE,UAAU,OAAO,UAAU,gBAAgB,OAAO,eAAe;AAAA,IACrE;AAAA,EACF;AACF;AAEO,SAAS,yBACd,SACA,OACwB;AACxB,MAAI,MAAM,SAAS,GAAG;AACpB,UAAM,QAAgC,CAAC;AACvC,UAAM,QAAQ,CAAC,SAAS;AACtB,YAAM,UAAU,OAAO,KAAK,YAAY,WAAW,OAAO,KAAK;AAC/D,UAAI,CAAC,QAAS;AACd,YAAM,KAAK;AAAA,QACT,QAAQ,KAAK;AAAA,QACb,WAAW,QAAQ;AAAA,QACnB,aAAa,QAAQ;AAAA,QACrB,WAAW,QAAQ,KAAK,SAAS;AAAA,MACnC,CAAC;AAAA,IACH,CAAC;AACD,WAAO;AAAA,EACT;AAEA,QAAM,kBAAkB,SAAS,WAAW,OAAO,QAAQ,YAAY,WAAW,QAAQ,UAAU;AACpG,MAAI,CAAC,gBAAiB,QAAO,CAAC;AAE9B,SAAO;AAAA,IACL;AAAA,MACE,QAAQ,gBAAgB;AAAA,MACxB,WAAW,gBAAgB;AAAA,MAC3B,aAAa,gBAAgB;AAAA,MAC7B,WAAW;AAAA,MACX,WAAW;AAAA,IACb;AAAA,EACF;AACF;AAEA,eAAe,kBAAkB,IAAmB,QAAuC;AACzF,QAAM,GAAG;AAAA,IACP;AAAA,IACA,EAAE,QAAQ,gBAAgB,OAAO,gBAAgB,UAAU,OAAO,UAAU,WAAW,KAAK;AAAA,IAC5F,EAAE,WAAW,MAAM;AAAA,EACrB;AACF;AAEA,SAAS,qBAAqB,MAAwD;AACpF,SAAO,OAAO,KAAK,YAAY,WAAW,OAAO,KAAK;AACxD;AAEA,eAAsB,2BACpB,IACA,QACA,SACA,OACA,kBACe;AACf,QAAM,cAAc,MAAM,CAAC,KAAK;AAChC,MAAI,CAAC,aAAa;AAChB,QACE,CAAC,oBACG,QAAQ,WAAW,OAAO,QAAQ,YAAY,YAAY,QAAQ,QAAQ,OAAO,oBAClF,QAAQ,WAAW,MACtB;AACA,cAAQ,UAAU;AAAA,IACpB;AACA;AAAA,EACF;AAEA,QAAM,kBAAkB,IAAI,MAAM;AAClC,cAAY,YAAY;AACxB,QAAM,cAAc,qBAAqB,WAAW;AACpD,MAAI,aAAa;AACf,YAAQ,UAAU;AAAA,EACpB;AACF;AAEA,eAAsB,6BACpB,IACA,QACA,SACA,WACe;AACf,QAAM,sBAAsB,OAAO,cAAc,YAAY,UAAU,KAAK,EAAE,SAAS,IAAI,UAAU,KAAK,IAAI;AAC9G,QAAM,gBAAgB,MAAM,uBAAuB,IAAI,MAAM;AAE7D,MAAI,CAAC,qBAAqB;AACxB,QAAI,cAAc,KAAK,CAAC,SAAS,KAAK,SAAS,GAAG;AAChD,YAAM,kBAAkB,IAAI,MAAM;AAAA,IACpC;AACA,YAAQ,UAAU;AAClB;AAAA,EACF;AAEA,QAAM,UAAU,MAAM,eAAe,IAAI,qBAAqB,OAAO,gBAAgB,OAAO,QAAQ;AACpG,QAAM,cACJ,cAAc,KAAK,CAAC,UAAU,OAAO,KAAK,YAAY,WAAW,KAAK,UAAU,KAAK,QAAQ,QAAQ,QAAQ,EAAE,KAAK;AAEtH,MAAI,aAAa;AACf,QAAI,CAAC,YAAY,WAAW;AAC1B,YAAM,kBAAkB,IAAI,MAAM;AAClC,kBAAY,YAAY;AAAA,IAC1B,WAAW,cAAc,KAAK,CAAC,SAAS,KAAK,OAAO,YAAY,MAAM,KAAK,SAAS,GAAG;AACrF,YAAM,kBAAkB,IAAI,MAAM;AAClC,kBAAY,YAAY;AAAA,IAC1B;AAAA,EACF,OAAO;AACL,UAAM,kBAAkB,IAAI,MAAM;AAClC,UAAM,OAAO,GAAG,OAAO,2BAA2B;AAAA,MAChD,gBAAgB,OAAO;AAAA,MACvB,UAAU,OAAO;AAAA,MACjB;AAAA,MACA;AAAA,MACA,WAAW;AAAA,IACb,CAAC;AACD,OAAG,QAAQ,IAAI;AAAA,EACjB;AAEA,UAAQ,UAAU;AACpB;AAEA,eAAsB,qBACpB,IACA,QACA,SACA,WACA,SACoC;AACpC,QAAM,UAAU,MAAM,eAAe,IAAI,WAAW,OAAO,gBAAgB,OAAO,QAAQ;AAC1F,QAAM,gBAAgB,MAAM,uBAAuB,IAAI,MAAM;AAC7D,QAAM,cAAc,QAAQ,SAAS,SAAS,KAAK,cAAc,WAAW;AAC5E,QAAM,WACJ,cAAc,KAAK,CAACA,WAAU,OAAOA,MAAK,YAAY,WAAWA,MAAK,UAAUA,MAAK,QAAQ,QAAQ,QAAQ,EAAE,KAAK;AAEtH,MAAI,UAAU;AACZ,QAAI,eAAe,CAAC,SAAS,WAAW;AACtC,YAAM,kBAAkB,IAAI,MAAM;AAClC,eAAS,YAAY;AACrB,cAAQ,UAAU;AAAA,IACpB;AACA,WAAO;AAAA,EACT;AAEA,MAAI,aAAa;AACf,UAAM,kBAAkB,IAAI,MAAM;AAAA,EACpC;AAEA,QAAM,cAAc,MAAM,6BAA6B,IAAI,QAAQ,OAAO;AAC1E,QAAM,OAAO,eAAe,GAAG,OAAO,2BAA2B;AAAA,IAC/D,gBAAgB,OAAO;AAAA,IACvB,UAAU,OAAO;AAAA,IACjB;AAAA,IACA;AAAA,IACA,WAAW;AAAA,EACb,CAAC;AACD,MAAI,aAAa;AACf,gBAAY,YAAY;AACxB,gBAAY,YAAY;AAAA,EAC1B;AACA,KAAG,QAAQ,IAAI;AAEf,MAAI,aAAa;AACf,YAAQ,UAAU;AAAA,EACpB,WAAW,CAAC,QAAQ,WAAW,cAAc,WAAW,GAAG;AACzD,YAAQ,UAAU;AAClB,SAAK,YAAY;AAAA,EACnB;AAEA,SAAO;AACT;AAEA,eAAsB,wBACpB,IACA,QACA,SACA,QACA,OAC2C;AAC3C,QAAM,gBAAgB,MAAM,uBAAuB,IAAI,MAAM;AAC7D,QAAM,OAAO,cAAc,KAAK,CAAC,UAAU,MAAM,OAAO,MAAM,KACzD,cAAc,KAAK,CAAC,WAAW,OAAO,MAAM,YAAY,WAAW,MAAM,UAAU,MAAM,QAAQ,QAAQ,MAAM,KAC/G;AAEL,MAAI,CAAC,QAAQ,QAAQ,WAAW,OAAO,QAAQ,YAAY,YAAY,QAAQ,QAAQ,OAAO,UAAU,MAAM,cAAc,OAAO;AACjI,YAAQ,UAAU;AAClB,WAAO;AAAA,EACT;AAEA,MAAI,CAAC,MAAM;AACT,UAAM,SAAS,wBAAwB;AAAA,EACzC;AAEA,MAAI,MAAM,cAAc,MAAM;AAC5B,UAAM,kBAAkB,IAAI,MAAM;AAClC,SAAK,YAAY;AACjB,UAAM,UAAU,qBAAqB,IAAI;AACzC,QAAI,SAAS;AACX,cAAQ,UAAU;AAAA,IACpB;AAAA,EACF,WAAW,MAAM,cAAc,OAAO;AACpC,UAAM,iBAAiB,KAAK;AAC5B,UAAM,mBAAmB,OAAO,KAAK,YAAY,WAAW,KAAK,UAAU,KAAK,QAAQ;AACxF,SAAK,YAAY;AACjB,QAAI,gBAAgB;AAClB,YAAM,iBAAiB,cAAc,OAAO,CAAC,UAAU,MAAM,OAAO,KAAK,EAAE;AAC3E,YAAM,2BAA2B,IAAI,QAAQ,SAAS,gBAAgB,gBAAgB;AAAA,IACxF,WAAW,QAAQ,WAAW,OAAO,QAAQ,YAAY,YAAY,QAAQ,QAAQ,OAAO,kBAAkB;AAC5G,cAAQ,UAAU;AAAA,IACpB;AAAA,EACF;AAEA,SAAO;AACT;AAEA,eAAsB,wBACpB,IACA,QACA,SACA,QACe;AACf,QAAM,gBAAgB,MAAM,uBAAuB,IAAI,MAAM;AAC7D,QAAM,OAAO,cAAc,KAAK,CAAC,UAAU,MAAM,OAAO,MAAM,KACzD,cAAc,KAAK,CAAC,WAAW,OAAO,MAAM,YAAY,WAAW,MAAM,UAAU,MAAM,QAAQ,QAAQ,MAAM,KAC/G;AAEL,MAAI,CAAC,MAAM;AACT,QAAI,QAAQ,WAAW,OAAO,QAAQ,YAAY,YAAY,QAAQ,QAAQ,OAAO,QAAQ;AAC3F,cAAQ,UAAU;AAClB;AAAA,IACF;AACA,UAAM,SAAS,wBAAwB;AAAA,EACzC;AAEA,QAAM,mBAAmB,OAAO,KAAK,YAAY,WAAW,KAAK,UAAU,KAAK,QAAQ;AACxF,QAAM,oBAAoB,KAAK;AAC/B,OAAK,YAAY;AACjB,OAAK,YAAY,oBAAI,KAAK;AAC1B,QAAM,iBAAiB,cAAc,OAAO,CAAC,UAAU,MAAM,OAAO,KAAK,EAAE;AAE3E,MAAI,mBAAmB;AACrB,UAAM,2BAA2B,IAAI,QAAQ,SAAS,gBAAgB,gBAAgB;AAAA,EACxF,WAAW,QAAQ,WAAW,OAAO,QAAQ,YAAY,YAAY,QAAQ,QAAQ,OAAO,kBAAkB;AAC5G,UAAM,UAAU,eAAe,KAAK,CAAC,UAAU,MAAM,SAAS,KAAK;AACnE,UAAM,iBAAiB,UAAU,qBAAqB,OAAO,IAAI;AACjE,QAAI,gBAAgB;AAClB,cAAQ,UAAU;AAAA,IACpB;AAAA,EACF;AACF;",
+  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport { CrudHttpError, notFound } from '@open-mercato/shared/lib/crud/errors'\nimport { findWithDecryption, findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport {\n  CustomerEntity,\n  CustomerPersonCompanyLink,\n  CustomerPersonProfile,\n} from '../data/entities'\nimport {\n  filterActivePersonCompanyLinks,\n  withActiveCustomerPersonCompanyLinkFilter,\n} from './personCompanyLinkTable'\n\nexport type PersonCompanySummary = {\n  linkId: string | null\n  companyId: string\n  displayName: string\n  isPrimary: boolean\n  synthetic?: boolean\n}\n\nexport async function findDeletedPersonCompanyLink(\n  em: EntityManager,\n  person: CustomerEntity,\n  company: CustomerEntity,\n): Promise<CustomerPersonCompanyLink | null> {\n  const link = await findOneWithDecryption(\n    em,\n    CustomerPersonCompanyLink,\n    {\n      person,\n      company,\n      organizationId: person.organizationId,\n      tenantId: person.tenantId,\n      deletedAt: { $ne: null },\n    } as any,\n    {},\n    { tenantId: person.tenantId, organizationId: person.organizationId },\n  )\n  return link ?? null\n}\n\nasync function requireCompany(\n  em: EntityManager,\n  companyId: string,\n  organizationId: string,\n  tenantId: string,\n): Promise<CustomerEntity> {\n  const company = await findOneWithDecryption(em, CustomerEntity, { id: companyId, kind: 'company', deletedAt: null }, {}, { tenantId, organizationId })\n  if (!company) {\n    throw notFound('Company not found')\n  }\n  if (company.organizationId !== organizationId || company.tenantId !== tenantId) {\n    throw new CrudHttpError(403, { error: 'Cannot link company outside current scope' })\n  }\n  return company\n}\n\nexport type CompanyPersonUnionEntry = {\n  entity: CustomerEntity\n  profile: CustomerPersonProfile | null\n  linkedAt: string | null\n}\n\n/**\n * Resolve \"people belonging to this company\" as the union of active\n * `CustomerPersonCompanyLink` rows and `CustomerPersonProfile.company`\n * profile-only assignments (data that never got a link row, e.g. from\n * migrated CRM imports). This is the single source of truth for both the\n * company People tab list and its badge count \u2014 see #5114.\n */\nexport async function loadCompanyPeopleUnion(\n  em: EntityManager,\n  company: CustomerEntity,\n  scope: { tenantId?: string | null; organizationId?: string | null },\n): Promise<CompanyPersonUnionEntry[]> {\n  const decryptionScope = {\n    tenantId: scope.tenantId ?? company.tenantId ?? null,\n    organizationId: scope.organizationId ?? company.organizationId ?? null,\n  }\n  const relatedPeopleById = new Map<string, CompanyPersonUnionEntry>()\n\n  const companyLinkWhere = await withActiveCustomerPersonCompanyLinkFilter(\n    em,\n    { company: company.id, organizationId: company.organizationId, tenantId: company.tenantId },\n    'customers.companies.loadCompanyPeopleUnion',\n  )\n  const companyLinks = filterActivePersonCompanyLinks(\n    await findWithDecryption(\n      em,\n      CustomerPersonCompanyLink,\n      companyLinkWhere,\n      { populate: ['person', 'person.personProfile'], orderBy: { isPrimary: 'desc', createdAt: 'asc' } },\n      decryptionScope,\n    ),\n  )\n  companyLinks.forEach((link) => {\n    const entity = typeof link.person === 'string' ? null : link.person\n    if (!entity || entity.kind !== 'person' || entity.deletedAt) return\n    const personProfile =\n      entity.personProfile && typeof entity.personProfile !== 'string' ? entity.personProfile : null\n    relatedPeopleById.set(entity.id, {\n      entity,\n      profile: personProfile,\n      linkedAt: link.createdAt instanceof Date ? link.createdAt.toISOString() : null,\n    })\n  })\n\n  const profiles = await findWithDecryption(\n    em,\n    CustomerPersonProfile,\n    {\n      company: company.id,\n      tenantId: company.tenantId,\n      organizationId: company.organizationId,\n      entity: { deletedAt: null },\n    },\n    { populate: ['entity'] },\n    decryptionScope,\n  )\n  profiles.forEach((entry) => {\n    const entity = entry.entity as CustomerEntity | null\n    if (!entity || entity.kind !== 'person' || entity.deletedAt) return\n    if (!relatedPeopleById.has(entity.id)) {\n      relatedPeopleById.set(entity.id, {\n        entity,\n        profile: entry ?? null,\n        linkedAt: entry.createdAt instanceof Date ? entry.createdAt.toISOString() : null,\n      })\n    }\n  })\n\n  return Array.from(relatedPeopleById.values())\n}\n\n/**\n * Count-only sibling of `loadCompanyPeopleUnion` for the company People badge, which\n * needs the size of the union and nothing else. Both queries project just the foreign\n * key column and push the `kind: 'person'` / `deletedAt: null` predicates into the\n * WHERE clause, so no person row is hydrated and no PII is decrypted to produce a\n * number \u2014 `findWithDecryption` is deliberately not used here because the projections\n * select no encrypted column.\n */\nexport async function countCompanyPeopleUnion(\n  em: EntityManager,\n  company: CustomerEntity,\n): Promise<number> {\n  const personIds = new Set<string>()\n\n  const companyLinkWhere = await withActiveCustomerPersonCompanyLinkFilter(\n    em,\n    {\n      company: company.id,\n      organizationId: company.organizationId,\n      tenantId: company.tenantId,\n      person: { kind: 'person', deletedAt: null },\n    },\n    'customers.companies.countCompanyPeopleUnion',\n  )\n  const companyLinks = filterActivePersonCompanyLinks(\n    await em.find(CustomerPersonCompanyLink, companyLinkWhere as any, {\n      fields: ['person', 'deletedAt'],\n    } as any),\n  )\n  companyLinks.forEach((link) => {\n    const personId = typeof link.person === 'string' ? link.person : link.person?.id\n    if (personId) personIds.add(personId)\n  })\n\n  const profiles = await em.find(\n    CustomerPersonProfile,\n    {\n      company: company.id,\n      tenantId: company.tenantId,\n      organizationId: company.organizationId,\n      entity: { kind: 'person', deletedAt: null },\n    } as any,\n    { fields: ['entity'] } as any,\n  )\n  profiles.forEach((entry) => {\n    const entity = entry.entity as CustomerEntity | string | null\n    const entityId = typeof entity === 'string' ? entity : entity?.id\n    if (entityId) personIds.add(entityId)\n  })\n\n  return personIds.size\n}\n\nexport async function loadPersonCompanyLinks(\n  em: EntityManager,\n  person: CustomerEntity,\n): Promise<CustomerPersonCompanyLink[]> {\n  const where = await withActiveCustomerPersonCompanyLinkFilter(\n    em,\n    { person, organizationId: person.organizationId, tenantId: person.tenantId },\n    'customers.personCompanies.loadPersonCompanyLinks',\n  )\n  return filterActivePersonCompanyLinks(\n    await findWithDecryption(\n      em,\n      CustomerPersonCompanyLink,\n      where,\n      { populate: ['company'], orderBy: { isPrimary: 'desc', createdAt: 'asc' } },\n      { tenantId: person.tenantId, organizationId: person.organizationId },\n    ),\n  )\n}\n\nexport function summarizePersonCompanies(\n  profile: CustomerPersonProfile | null,\n  links: CustomerPersonCompanyLink[],\n): PersonCompanySummary[] {\n  if (links.length > 0) {\n    const items: PersonCompanySummary[] = []\n    links.forEach((link) => {\n      const company = typeof link.company === 'string' ? null : link.company\n      if (!company) return\n      items.push({\n        linkId: link.id,\n        companyId: company.id,\n        displayName: company.displayName,\n        isPrimary: Boolean(link.isPrimary),\n      })\n    })\n    return items\n  }\n\n  const fallbackCompany = profile?.company && typeof profile.company !== 'string' ? profile.company : null\n  if (!fallbackCompany) return []\n\n  return [\n    {\n      linkId: fallbackCompany.id,\n      companyId: fallbackCompany.id,\n      displayName: fallbackCompany.displayName,\n      isPrimary: true,\n      synthetic: true,\n    },\n  ]\n}\n\nasync function clearPrimaryFlags(em: EntityManager, person: CustomerEntity): Promise<void> {\n  await em.nativeUpdate(\n    CustomerPersonCompanyLink,\n    { person, organizationId: person.organizationId, tenantId: person.tenantId, isPrimary: true },\n    { isPrimary: false },\n  )\n}\n\nfunction resolveLinkedCompany(link: CustomerPersonCompanyLink): CustomerEntity | null {\n  return typeof link.company === 'string' ? null : link.company\n}\n\nexport async function promoteFallbackPrimaryLink(\n  em: EntityManager,\n  person: CustomerEntity,\n  profile: CustomerPersonProfile,\n  links: CustomerPersonCompanyLink[],\n  removedCompanyId?: string | null,\n): Promise<void> {\n  const nextPrimary = links[0] ?? null\n  if (!nextPrimary) {\n    if (\n      !removedCompanyId\n      || (profile.company && typeof profile.company !== 'string' && profile.company.id === removedCompanyId)\n      || profile.company == null\n    ) {\n      profile.company = null\n    }\n    return\n  }\n\n  await clearPrimaryFlags(em, person)\n  nextPrimary.isPrimary = true\n  const nextCompany = resolveLinkedCompany(nextPrimary)\n  if (nextCompany) {\n    profile.company = nextCompany\n  }\n}\n\nexport async function syncLegacyPrimaryCompanyLink(\n  em: EntityManager,\n  person: CustomerEntity,\n  profile: CustomerPersonProfile,\n  companyId: string | null | undefined,\n): Promise<void> {\n  const normalizedCompanyId = typeof companyId === 'string' && companyId.trim().length > 0 ? companyId.trim() : null\n  const existingLinks = await loadPersonCompanyLinks(em, person)\n\n  if (!normalizedCompanyId) {\n    if (existingLinks.some((link) => link.isPrimary)) {\n      await clearPrimaryFlags(em, person)\n    }\n    profile.company = null\n    return\n  }\n\n  const company = await requireCompany(em, normalizedCompanyId, person.organizationId, person.tenantId)\n  const currentLink =\n    existingLinks.find((link) => (typeof link.company === 'string' ? link.company : link.company.id) === company.id) ?? null\n\n  if (currentLink) {\n    if (!currentLink.isPrimary) {\n      await clearPrimaryFlags(em, person)\n      currentLink.isPrimary = true\n    } else if (existingLinks.some((link) => link.id !== currentLink.id && link.isPrimary)) {\n      await clearPrimaryFlags(em, person)\n      currentLink.isPrimary = true\n    }\n  } else {\n    await clearPrimaryFlags(em, person)\n    const link = em.create(CustomerPersonCompanyLink, {\n      organizationId: person.organizationId,\n      tenantId: person.tenantId,\n      person,\n      company,\n      isPrimary: true,\n    })\n    em.persist(link)\n  }\n\n  profile.company = company\n}\n\nexport async function addPersonCompanyLink(\n  em: EntityManager,\n  person: CustomerEntity,\n  profile: CustomerPersonProfile,\n  companyId: string,\n  options?: { isPrimary?: boolean },\n): Promise<CustomerPersonCompanyLink> {\n  const company = await requireCompany(em, companyId, person.organizationId, person.tenantId)\n  const existingLinks = await loadPersonCompanyLinks(em, person)\n  const makePrimary = Boolean(options?.isPrimary) || existingLinks.length === 0\n  const existing =\n    existingLinks.find((link) => (typeof link.company === 'string' ? link.company : link.company.id) === company.id) ?? null\n\n  if (existing) {\n    if (makePrimary && !existing.isPrimary) {\n      await clearPrimaryFlags(em, person)\n      existing.isPrimary = true\n      profile.company = company\n    }\n    return existing\n  }\n\n  if (makePrimary) {\n    await clearPrimaryFlags(em, person)\n  }\n\n  const deletedLink = await findDeletedPersonCompanyLink(em, person, company)\n  const link = deletedLink ?? em.create(CustomerPersonCompanyLink, {\n    organizationId: person.organizationId,\n    tenantId: person.tenantId,\n    person,\n    company,\n    isPrimary: makePrimary,\n  })\n  if (deletedLink) {\n    deletedLink.deletedAt = null\n    deletedLink.isPrimary = makePrimary\n  }\n  em.persist(link)\n\n  if (makePrimary) {\n    profile.company = company\n  } else if (!profile.company && existingLinks.length === 0) {\n    profile.company = company\n    link.isPrimary = true\n  }\n\n  return link\n}\n\nexport async function updatePersonCompanyLink(\n  em: EntityManager,\n  person: CustomerEntity,\n  profile: CustomerPersonProfile,\n  linkId: string,\n  patch: { isPrimary?: boolean },\n): Promise<CustomerPersonCompanyLink | null> {\n  const existingLinks = await loadPersonCompanyLinks(em, person)\n  const link = existingLinks.find((entry) => entry.id === linkId)\n    ?? existingLinks.find((entry) => (typeof entry.company === 'string' ? entry.company : entry.company.id) === linkId)\n    ?? null\n\n  if (!link && profile.company && typeof profile.company !== 'string' && profile.company.id === linkId && patch.isPrimary === false) {\n    profile.company = null\n    return null\n  }\n\n  if (!link) {\n    throw notFound('Company link not found')\n  }\n\n  if (patch.isPrimary === true) {\n    await clearPrimaryFlags(em, person)\n    link.isPrimary = true\n    const company = resolveLinkedCompany(link)\n    if (company) {\n      profile.company = company\n    }\n  } else if (patch.isPrimary === false) {\n    const linkWasPrimary = link.isPrimary\n    const removedCompanyId = typeof link.company === 'string' ? link.company : link.company.id\n    link.isPrimary = false\n    if (linkWasPrimary) {\n      const remainingLinks = existingLinks.filter((entry) => entry.id !== link.id)\n      await promoteFallbackPrimaryLink(em, person, profile, remainingLinks, removedCompanyId)\n    } else if (profile.company && typeof profile.company !== 'string' && profile.company.id === removedCompanyId) {\n      profile.company = null\n    }\n  }\n\n  return link\n}\n\nexport async function removePersonCompanyLink(\n  em: EntityManager,\n  person: CustomerEntity,\n  profile: CustomerPersonProfile,\n  linkId: string,\n): Promise<void> {\n  const existingLinks = await loadPersonCompanyLinks(em, person)\n  const link = existingLinks.find((entry) => entry.id === linkId)\n    ?? existingLinks.find((entry) => (typeof entry.company === 'string' ? entry.company : entry.company.id) === linkId)\n    ?? null\n\n  if (!link) {\n    if (profile.company && typeof profile.company !== 'string' && profile.company.id === linkId) {\n      // Profile-only assignment: no link row backs it, so only the legacy field is\n      // cleared. It must keep mirroring the primary link the way every other detach\n      // path leaves it, so promote a remaining primary link instead of nulling blindly.\n      const primary = existingLinks.find((entry) => entry.isPrimary) ?? null\n      const primaryCompany = primary ? resolveLinkedCompany(primary) : null\n      profile.company = primaryCompany ?? null\n      return\n    }\n    throw notFound('Company link not found')\n  }\n\n  const removedCompanyId = typeof link.company === 'string' ? link.company : link.company.id\n  const removedWasPrimary = link.isPrimary\n  link.isPrimary = false\n  link.deletedAt = new Date()\n  const remainingLinks = existingLinks.filter((entry) => entry.id !== link.id)\n\n  if (removedWasPrimary) {\n    await promoteFallbackPrimaryLink(em, person, profile, remainingLinks, removedCompanyId)\n  } else if (profile.company && typeof profile.company !== 'string' && profile.company.id === removedCompanyId) {\n    const primary = remainingLinks.find((entry) => entry.isPrimary) ?? null\n    const primaryCompany = primary ? resolveLinkedCompany(primary) : null\n    if (primaryCompany) {\n      profile.company = primaryCompany\n    }\n  }\n}\n"],
+  "mappings": "AACA,SAAS,eAAe,gBAAgB;AACxC,SAAS,oBAAoB,6BAA6B;AAC1D;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAUP,eAAsB,6BACpB,IACA,QACA,SAC2C;AAC3C,QAAM,OAAO,MAAM;AAAA,IACjB;AAAA,IACA;AAAA,IACA;AAAA,MACE;AAAA,MACA;AAAA,MACA,gBAAgB,OAAO;AAAA,MACvB,UAAU,OAAO;AAAA,MACjB,WAAW,EAAE,KAAK,KAAK;AAAA,IACzB;AAAA,IACA,CAAC;AAAA,IACD,EAAE,UAAU,OAAO,UAAU,gBAAgB,OAAO,eAAe;AAAA,EACrE;AACA,SAAO,QAAQ;AACjB;AAEA,eAAe,eACb,IACA,WACA,gBACA,UACyB;AACzB,QAAM,UAAU,MAAM,sBAAsB,IAAI,gBAAgB,EAAE,IAAI,WAAW,MAAM,WAAW,WAAW,KAAK,GAAG,CAAC,GAAG,EAAE,UAAU,eAAe,CAAC;AACrJ,MAAI,CAAC,SAAS;AACZ,UAAM,SAAS,mBAAmB;AAAA,EACpC;AACA,MAAI,QAAQ,mBAAmB,kBAAkB,QAAQ,aAAa,UAAU;AAC9E,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,4CAA4C,CAAC;AAAA,EACrF;AACA,SAAO;AACT;AAeA,eAAsB,uBACpB,IACA,SACA,OACoC;AACpC,QAAM,kBAAkB;AAAA,IACtB,UAAU,MAAM,YAAY,QAAQ,YAAY;AAAA,IAChD,gBAAgB,MAAM,kBAAkB,QAAQ,kBAAkB;AAAA,EACpE;AACA,QAAM,oBAAoB,oBAAI,IAAqC;AAEnE,QAAM,mBAAmB,MAAM;AAAA,IAC7B;AAAA,IACA,EAAE,SAAS,QAAQ,IAAI,gBAAgB,QAAQ,gBAAgB,UAAU,QAAQ,SAAS;AAAA,IAC1F;AAAA,EACF;AACA,QAAM,eAAe;AAAA,IACnB,MAAM;AAAA,MACJ;AAAA,MACA;AAAA,MACA;AAAA,MACA,EAAE,UAAU,CAAC,UAAU,sBAAsB,GAAG,SAAS,EAAE,WAAW,QAAQ,WAAW,MAAM,EAAE;AAAA,MACjG;AAAA,IACF;AAAA,EACF;AACA,eAAa,QAAQ,CAAC,SAAS;AAC7B,UAAM,SAAS,OAAO,KAAK,WAAW,WAAW,OAAO,KAAK;AAC7D,QAAI,CAAC,UAAU,OAAO,SAAS,YAAY,OAAO,UAAW;AAC7D,UAAM,gBACJ,OAAO,iBAAiB,OAAO,OAAO,kBAAkB,WAAW,OAAO,gBAAgB;AAC5F,sBAAkB,IAAI,OAAO,IAAI;AAAA,MAC/B;AAAA,MACA,SAAS;AAAA,MACT,UAAU,KAAK,qBAAqB,OAAO,KAAK,UAAU,YAAY,IAAI;AAAA,IAC5E,CAAC;AAAA,EACH,CAAC;AAED,QAAM,WAAW,MAAM;AAAA,IACrB;AAAA,IACA;AAAA,IACA;AAAA,MACE,SAAS,QAAQ;AAAA,MACjB,UAAU,QAAQ;AAAA,MAClB,gBAAgB,QAAQ;AAAA,MACxB,QAAQ,EAAE,WAAW,KAAK;AAAA,IAC5B;AAAA,IACA,EAAE,UAAU,CAAC,QAAQ,EAAE;AAAA,IACvB;AAAA,EACF;AACA,WAAS,QAAQ,CAAC,UAAU;AAC1B,UAAM,SAAS,MAAM;AACrB,QAAI,CAAC,UAAU,OAAO,SAAS,YAAY,OAAO,UAAW;AAC7D,QAAI,CAAC,kBAAkB,IAAI,OAAO,EAAE,GAAG;AACrC,wBAAkB,IAAI,OAAO,IAAI;AAAA,QAC/B;AAAA,QACA,SAAS,SAAS;AAAA,QAClB,UAAU,MAAM,qBAAqB,OAAO,MAAM,UAAU,YAAY,IAAI;AAAA,MAC9E,CAAC;AAAA,IACH;AAAA,EACF,CAAC;AAED,SAAO,MAAM,KAAK,kBAAkB,OAAO,CAAC;AAC9C;AAUA,eAAsB,wBACpB,IACA,SACiB;AACjB,QAAM,YAAY,oBAAI,IAAY;AAElC,QAAM,mBAAmB,MAAM;AAAA,IAC7B;AAAA,IACA;AAAA,MACE,SAAS,QAAQ;AAAA,MACjB,gBAAgB,QAAQ;AAAA,MACxB,UAAU,QAAQ;AAAA,MAClB,QAAQ,EAAE,MAAM,UAAU,WAAW,KAAK;AAAA,IAC5C;AAAA,IACA;AAAA,EACF;AACA,QAAM,eAAe;AAAA,IACnB,MAAM,GAAG,KAAK,2BAA2B,kBAAyB;AAAA,MAChE,QAAQ,CAAC,UAAU,WAAW;AAAA,IAChC,CAAQ;AAAA,EACV;AACA,eAAa,QAAQ,CAAC,SAAS;AAC7B,UAAM,WAAW,OAAO,KAAK,WAAW,WAAW,KAAK,SAAS,KAAK,QAAQ;AAC9E,QAAI,SAAU,WAAU,IAAI,QAAQ;AAAA,EACtC,CAAC;AAED,QAAM,WAAW,MAAM,GAAG;AAAA,IACxB;AAAA,IACA;AAAA,MACE,SAAS,QAAQ;AAAA,MACjB,UAAU,QAAQ;AAAA,MAClB,gBAAgB,QAAQ;AAAA,MACxB,QAAQ,EAAE,MAAM,UAAU,WAAW,KAAK;AAAA,IAC5C;AAAA,IACA,EAAE,QAAQ,CAAC,QAAQ,EAAE;AAAA,EACvB;AACA,WAAS,QAAQ,CAAC,UAAU;AAC1B,UAAM,SAAS,MAAM;AACrB,UAAM,WAAW,OAAO,WAAW,WAAW,SAAS,QAAQ;AAC/D,QAAI,SAAU,WAAU,IAAI,QAAQ;AAAA,EACtC,CAAC;AAED,SAAO,UAAU;AACnB;AAEA,eAAsB,uBACpB,IACA,QACsC;AACtC,QAAM,QAAQ,MAAM;AAAA,IAClB;AAAA,IACA,EAAE,QAAQ,gBAAgB,OAAO,gBAAgB,UAAU,OAAO,SAAS;AAAA,IAC3E;AAAA,EACF;AACA,SAAO;AAAA,IACL,MAAM;AAAA,MACJ;AAAA,MACA;AAAA,MACA;AAAA,MACA,EAAE,UAAU,CAAC,SAAS,GAAG,SAAS,EAAE,WAAW,QAAQ,WAAW,MAAM,EAAE;AAAA,MAC1E,EAAE,UAAU,OAAO,UAAU,gBAAgB,OAAO,eAAe;AAAA,IACrE;AAAA,EACF;AACF;AAEO,SAAS,yBACd,SACA,OACwB;AACxB,MAAI,MAAM,SAAS,GAAG;AACpB,UAAM,QAAgC,CAAC;AACvC,UAAM,QAAQ,CAAC,SAAS;AACtB,YAAM,UAAU,OAAO,KAAK,YAAY,WAAW,OAAO,KAAK;AAC/D,UAAI,CAAC,QAAS;AACd,YAAM,KAAK;AAAA,QACT,QAAQ,KAAK;AAAA,QACb,WAAW,QAAQ;AAAA,QACnB,aAAa,QAAQ;AAAA,QACrB,WAAW,QAAQ,KAAK,SAAS;AAAA,MACnC,CAAC;AAAA,IACH,CAAC;AACD,WAAO;AAAA,EACT;AAEA,QAAM,kBAAkB,SAAS,WAAW,OAAO,QAAQ,YAAY,WAAW,QAAQ,UAAU;AACpG,MAAI,CAAC,gBAAiB,QAAO,CAAC;AAE9B,SAAO;AAAA,IACL;AAAA,MACE,QAAQ,gBAAgB;AAAA,MACxB,WAAW,gBAAgB;AAAA,MAC3B,aAAa,gBAAgB;AAAA,MAC7B,WAAW;AAAA,MACX,WAAW;AAAA,IACb;AAAA,EACF;AACF;AAEA,eAAe,kBAAkB,IAAmB,QAAuC;AACzF,QAAM,GAAG;AAAA,IACP;AAAA,IACA,EAAE,QAAQ,gBAAgB,OAAO,gBAAgB,UAAU,OAAO,UAAU,WAAW,KAAK;AAAA,IAC5F,EAAE,WAAW,MAAM;AAAA,EACrB;AACF;AAEA,SAAS,qBAAqB,MAAwD;AACpF,SAAO,OAAO,KAAK,YAAY,WAAW,OAAO,KAAK;AACxD;AAEA,eAAsB,2BACpB,IACA,QACA,SACA,OACA,kBACe;AACf,QAAM,cAAc,MAAM,CAAC,KAAK;AAChC,MAAI,CAAC,aAAa;AAChB,QACE,CAAC,oBACG,QAAQ,WAAW,OAAO,QAAQ,YAAY,YAAY,QAAQ,QAAQ,OAAO,oBAClF,QAAQ,WAAW,MACtB;AACA,cAAQ,UAAU;AAAA,IACpB;AACA;AAAA,EACF;AAEA,QAAM,kBAAkB,IAAI,MAAM;AAClC,cAAY,YAAY;AACxB,QAAM,cAAc,qBAAqB,WAAW;AACpD,MAAI,aAAa;AACf,YAAQ,UAAU;AAAA,EACpB;AACF;AAEA,eAAsB,6BACpB,IACA,QACA,SACA,WACe;AACf,QAAM,sBAAsB,OAAO,cAAc,YAAY,UAAU,KAAK,EAAE,SAAS,IAAI,UAAU,KAAK,IAAI;AAC9G,QAAM,gBAAgB,MAAM,uBAAuB,IAAI,MAAM;AAE7D,MAAI,CAAC,qBAAqB;AACxB,QAAI,cAAc,KAAK,CAAC,SAAS,KAAK,SAAS,GAAG;AAChD,YAAM,kBAAkB,IAAI,MAAM;AAAA,IACpC;AACA,YAAQ,UAAU;AAClB;AAAA,EACF;AAEA,QAAM,UAAU,MAAM,eAAe,IAAI,qBAAqB,OAAO,gBAAgB,OAAO,QAAQ;AACpG,QAAM,cACJ,cAAc,KAAK,CAAC,UAAU,OAAO,KAAK,YAAY,WAAW,KAAK,UAAU,KAAK,QAAQ,QAAQ,QAAQ,EAAE,KAAK;AAEtH,MAAI,aAAa;AACf,QAAI,CAAC,YAAY,WAAW;AAC1B,YAAM,kBAAkB,IAAI,MAAM;AAClC,kBAAY,YAAY;AAAA,IAC1B,WAAW,cAAc,KAAK,CAAC,SAAS,KAAK,OAAO,YAAY,MAAM,KAAK,SAAS,GAAG;AACrF,YAAM,kBAAkB,IAAI,MAAM;AAClC,kBAAY,YAAY;AAAA,IAC1B;AAAA,EACF,OAAO;AACL,UAAM,kBAAkB,IAAI,MAAM;AAClC,UAAM,OAAO,GAAG,OAAO,2BAA2B;AAAA,MAChD,gBAAgB,OAAO;AAAA,MACvB,UAAU,OAAO;AAAA,MACjB;AAAA,MACA;AAAA,MACA,WAAW;AAAA,IACb,CAAC;AACD,OAAG,QAAQ,IAAI;AAAA,EACjB;AAEA,UAAQ,UAAU;AACpB;AAEA,eAAsB,qBACpB,IACA,QACA,SACA,WACA,SACoC;AACpC,QAAM,UAAU,MAAM,eAAe,IAAI,WAAW,OAAO,gBAAgB,OAAO,QAAQ;AAC1F,QAAM,gBAAgB,MAAM,uBAAuB,IAAI,MAAM;AAC7D,QAAM,cAAc,QAAQ,SAAS,SAAS,KAAK,cAAc,WAAW;AAC5E,QAAM,WACJ,cAAc,KAAK,CAACA,WAAU,OAAOA,MAAK,YAAY,WAAWA,MAAK,UAAUA,MAAK,QAAQ,QAAQ,QAAQ,EAAE,KAAK;AAEtH,MAAI,UAAU;AACZ,QAAI,eAAe,CAAC,SAAS,WAAW;AACtC,YAAM,kBAAkB,IAAI,MAAM;AAClC,eAAS,YAAY;AACrB,cAAQ,UAAU;AAAA,IACpB;AACA,WAAO;AAAA,EACT;AAEA,MAAI,aAAa;AACf,UAAM,kBAAkB,IAAI,MAAM;AAAA,EACpC;AAEA,QAAM,cAAc,MAAM,6BAA6B,IAAI,QAAQ,OAAO;AAC1E,QAAM,OAAO,eAAe,GAAG,OAAO,2BAA2B;AAAA,IAC/D,gBAAgB,OAAO;AAAA,IACvB,UAAU,OAAO;AAAA,IACjB;AAAA,IACA;AAAA,IACA,WAAW;AAAA,EACb,CAAC;AACD,MAAI,aAAa;AACf,gBAAY,YAAY;AACxB,gBAAY,YAAY;AAAA,EAC1B;AACA,KAAG,QAAQ,IAAI;AAEf,MAAI,aAAa;AACf,YAAQ,UAAU;AAAA,EACpB,WAAW,CAAC,QAAQ,WAAW,cAAc,WAAW,GAAG;AACzD,YAAQ,UAAU;AAClB,SAAK,YAAY;AAAA,EACnB;AAEA,SAAO;AACT;AAEA,eAAsB,wBACpB,IACA,QACA,SACA,QACA,OAC2C;AAC3C,QAAM,gBAAgB,MAAM,uBAAuB,IAAI,MAAM;AAC7D,QAAM,OAAO,cAAc,KAAK,CAAC,UAAU,MAAM,OAAO,MAAM,KACzD,cAAc,KAAK,CAAC,WAAW,OAAO,MAAM,YAAY,WAAW,MAAM,UAAU,MAAM,QAAQ,QAAQ,MAAM,KAC/G;AAEL,MAAI,CAAC,QAAQ,QAAQ,WAAW,OAAO,QAAQ,YAAY,YAAY,QAAQ,QAAQ,OAAO,UAAU,MAAM,cAAc,OAAO;AACjI,YAAQ,UAAU;AAClB,WAAO;AAAA,EACT;AAEA,MAAI,CAAC,MAAM;AACT,UAAM,SAAS,wBAAwB;AAAA,EACzC;AAEA,MAAI,MAAM,cAAc,MAAM;AAC5B,UAAM,kBAAkB,IAAI,MAAM;AAClC,SAAK,YAAY;AACjB,UAAM,UAAU,qBAAqB,IAAI;AACzC,QAAI,SAAS;AACX,cAAQ,UAAU;AAAA,IACpB;AAAA,EACF,WAAW,MAAM,cAAc,OAAO;AACpC,UAAM,iBAAiB,KAAK;AAC5B,UAAM,mBAAmB,OAAO,KAAK,YAAY,WAAW,KAAK,UAAU,KAAK,QAAQ;AACxF,SAAK,YAAY;AACjB,QAAI,gBAAgB;AAClB,YAAM,iBAAiB,cAAc,OAAO,CAAC,UAAU,MAAM,OAAO,KAAK,EAAE;AAC3E,YAAM,2BAA2B,IAAI,QAAQ,SAAS,gBAAgB,gBAAgB;AAAA,IACxF,WAAW,QAAQ,WAAW,OAAO,QAAQ,YAAY,YAAY,QAAQ,QAAQ,OAAO,kBAAkB;AAC5G,cAAQ,UAAU;AAAA,IACpB;AAAA,EACF;AAEA,SAAO;AACT;AAEA,eAAsB,wBACpB,IACA,QACA,SACA,QACe;AACf,QAAM,gBAAgB,MAAM,uBAAuB,IAAI,MAAM;AAC7D,QAAM,OAAO,cAAc,KAAK,CAAC,UAAU,MAAM,OAAO,MAAM,KACzD,cAAc,KAAK,CAAC,WAAW,OAAO,MAAM,YAAY,WAAW,MAAM,UAAU,MAAM,QAAQ,QAAQ,MAAM,KAC/G;AAEL,MAAI,CAAC,MAAM;AACT,QAAI,QAAQ,WAAW,OAAO,QAAQ,YAAY,YAAY,QAAQ,QAAQ,OAAO,QAAQ;AAI3F,YAAM,UAAU,cAAc,KAAK,CAAC,UAAU,MAAM,SAAS,KAAK;AAClE,YAAM,iBAAiB,UAAU,qBAAqB,OAAO,IAAI;AACjE,cAAQ,UAAU,kBAAkB;AACpC;AAAA,IACF;AACA,UAAM,SAAS,wBAAwB;AAAA,EACzC;AAEA,QAAM,mBAAmB,OAAO,KAAK,YAAY,WAAW,KAAK,UAAU,KAAK,QAAQ;AACxF,QAAM,oBAAoB,KAAK;AAC/B,OAAK,YAAY;AACjB,OAAK,YAAY,oBAAI,KAAK;AAC1B,QAAM,iBAAiB,cAAc,OAAO,CAAC,UAAU,MAAM,OAAO,KAAK,EAAE;AAE3E,MAAI,mBAAmB;AACrB,UAAM,2BAA2B,IAAI,QAAQ,SAAS,gBAAgB,gBAAgB;AAAA,EACxF,WAAW,QAAQ,WAAW,OAAO,QAAQ,YAAY,YAAY,QAAQ,QAAQ,OAAO,kBAAkB;AAC5G,UAAM,UAAU,eAAe,KAAK,CAAC,UAAU,MAAM,SAAS,KAAK;AACnE,UAAM,iBAAiB,UAAU,qBAAqB,OAAO,IAAI;AACjE,QAAI,gBAAgB;AAClB,cAAQ,UAAU;AAAA,IACpB;AAAA,EACF;AACF;",
   "names": ["link"]
 }

package/dist/modules/customers/lib/todoCompatibility.js

@@ -11,6 +11,12 @@ import {
 import { hydrateCanonicalInteractions, loadCustomerSummaries } from "./interactionReadModel.js";
 import { createLogger } from "@open-mercato/shared/lib/logger";
 const logger = createLogger("customers");
+function emptyCanonicalTodoList() {
+  return { items: [], bridgeIds: /* @__PURE__ */ new Set(), total: 0 };
+}
+function isCollapsedRestrictedOrganizationScope(organizationIds, isUnrestricted) {
+  return isUnrestricted !== true && (!organizationIds || organizationIds.length === 0);
+}
 function resolveLegacyTodoSource(source) {
   return typeof source === "string" && source.trim().length > 0 ? source : EXAMPLE_TODO_SOURCE;
 }
@@ -258,6 +264,9 @@ async function resolveLegacyTodoDetails(queryEngine, links, tenantId, organizati
   return details;
 }
 async function listLegacyTodoRows(em, queryEngine, tenantId, organizationIds, entityId, options) {
+  if (isCollapsedRestrictedOrganizationScope(organizationIds, options?.isUnrestricted)) {
+    return [];
+  }
   const where = { tenantId };
   if (organizationIds && organizationIds.length > 0) {
     where.organizationId = { $in: organizationIds };
@@ -288,6 +297,9 @@ async function listLegacyTodoRows(em, queryEngine, tenantId, organizationIds, en
   });
 }
 async function listCanonicalTodoRows(em, container, auth, selectedOrganizationId, organizationIds, options) {
+  if (isCollapsedRestrictedOrganizationScope(organizationIds, options?.isUnrestricted)) {
+    return emptyCanonicalTodoList();
+  }
   const where = {
     tenantId: auth.tenantId,
     interactionType: "task"