@open-mercato/core 0.7.1-develop.7178.1.ab93fbaf4e → 0.7.1-develop.7180.1.9717fbbb43

package/dist/modules/staff/notifications.handlers.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/modules/staff/notifications.handlers.ts"],
+  "sourcesContent": ["import type { NotificationHandler } from '@open-mercato/shared/modules/notifications/handler'\n\n/**\n * EP-48. Reactive browser handlers for the time-tracking notification types.\n *\n * A handler is the module's own reaction to one of its notifications arriving in\n * the browser: it re-broadcasts on the DOM Event Bridge so an open screen can\n * refetch, and toasts the ones a person needs to see even when the bell is\n * collapsed. Each `id` is the override key \u2014 `notifications.handlers.<id>` \u2014 so\n * an app can disable or replace one without patching this file.\n *\n * `features` is checked with the wildcard-aware policy before `handle` runs, so\n * a handler never fires for a caller who could not open the screen it points at.\n */\n\nexport const TIME_REPORT_APPROVED_EVENT = 'om:staff:time-report-approved'\nexport const TIME_REPORT_READY_FOR_APPROVAL_EVENT = 'om:staff:time-report-ready-for-approval'\nexport const TIMER_RUNNING_LONG_EVENT = 'om:staff:timer-running-long'\nexport const TIMESHEET_PERIOD_INCOMPLETE_EVENT = 'om:staff:timesheet-period-incomplete'\n\nexport const notificationHandlers: NotificationHandler[] = [\n  {\n    id: 'staff.time-report-approved-event',\n    notificationType: 'staff.timesheets.time_report.approved',\n    features: ['staff.timesheets.reports.view'],\n    priority: 100,\n    handle(notification, context) {\n      context.emitEvent(TIME_REPORT_APPROVED_EVENT, {\n        notificationId: notification.id,\n        reportId: notification.sourceEntityId ?? null,\n        reference: notification.bodyVariables?.reference ?? null,\n      })\n      context.refreshNotifications()\n    },\n  },\n  {\n    id: 'staff.time-report-ready-for-approval-event',\n    notificationType: 'staff.timesheets.time_report.ready_for_approval',\n    features: ['staff.timesheets.reports.view'],\n    priority: 100,\n    handle(notification, context) {\n      context.emitEvent(TIME_REPORT_READY_FOR_APPROVAL_EVENT, {\n        notificationId: notification.id,\n        reportId: notification.sourceEntityId ?? null,\n        reference: notification.bodyVariables?.reference ?? null,\n      })\n    },\n  },\n  {\n    /**\n     * A running timer keeps billing until somebody stops it, so this one toasts\n     * as well as broadcasting \u2014 the bell alone is too quiet for a notification\n     * whose whole point is that the person has forgotten something.\n     */\n    id: 'staff.timer-running-long-toast',\n    notificationType: 'staff.timesheets.time_entry.timer_running_long',\n    features: ['staff.timesheets.view'],\n    priority: 110,\n    debounceMs: 60_000,\n    handle(notification, context) {\n      context.toast({\n        title: notification.title,\n        body: notification.body ?? undefined,\n        severity: 'warning',\n      })\n      context.emitEvent(TIMER_RUNNING_LONG_EVENT, {\n        notificationId: notification.id,\n        timeEntryId: notification.sourceEntityId ?? null,\n      })\n    },\n  },\n  {\n    id: 'staff.timesheet-period-incomplete-event',\n    notificationType: 'staff.timesheets.timesheet.period_incomplete',\n    features: ['staff.timesheets.view'],\n    priority: 90,\n    handle(notification, context) {\n      context.emitEvent(TIMESHEET_PERIOD_INCOMPLETE_EVENT, {\n        notificationId: notification.id,\n        staffMemberId: notification.sourceEntityId ?? null,\n        periodFrom: notification.bodyVariables?.periodFrom ?? null,\n        periodTo: notification.bodyVariables?.periodTo ?? null,\n      })\n    },\n  },\n]\n\nexport default notificationHandlers\n"],
+  "mappings": "AAeO,MAAM,6BAA6B;AACnC,MAAM,uCAAuC;AAC7C,MAAM,2BAA2B;AACjC,MAAM,oCAAoC;AAE1C,MAAM,uBAA8C;AAAA,EACzD;AAAA,IACE,IAAI;AAAA,IACJ,kBAAkB;AAAA,IAClB,UAAU,CAAC,+BAA+B;AAAA,IAC1C,UAAU;AAAA,IACV,OAAO,cAAc,SAAS;AAC5B,cAAQ,UAAU,4BAA4B;AAAA,QAC5C,gBAAgB,aAAa;AAAA,QAC7B,UAAU,aAAa,kBAAkB;AAAA,QACzC,WAAW,aAAa,eAAe,aAAa;AAAA,MACtD,CAAC;AACD,cAAQ,qBAAqB;AAAA,IAC/B;AAAA,EACF;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,kBAAkB;AAAA,IAClB,UAAU,CAAC,+BAA+B;AAAA,IAC1C,UAAU;AAAA,IACV,OAAO,cAAc,SAAS;AAC5B,cAAQ,UAAU,sCAAsC;AAAA,QACtD,gBAAgB,aAAa;AAAA,QAC7B,UAAU,aAAa,kBAAkB;AAAA,QACzC,WAAW,aAAa,eAAe,aAAa;AAAA,MACtD,CAAC;AAAA,IACH;AAAA,EACF;AAAA,EACA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAME,IAAI;AAAA,IACJ,kBAAkB;AAAA,IAClB,UAAU,CAAC,uBAAuB;AAAA,IAClC,UAAU;AAAA,IACV,YAAY;AAAA,IACZ,OAAO,cAAc,SAAS;AAC5B,cAAQ,MAAM;AAAA,QACZ,OAAO,aAAa;AAAA,QACpB,MAAM,aAAa,QAAQ;AAAA,QAC3B,UAAU;AAAA,MACZ,CAAC;AACD,cAAQ,UAAU,0BAA0B;AAAA,QAC1C,gBAAgB,aAAa;AAAA,QAC7B,aAAa,aAAa,kBAAkB;AAAA,MAC9C,CAAC;AAAA,IACH;AAAA,EACF;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,kBAAkB;AAAA,IAClB,UAAU,CAAC,uBAAuB;AAAA,IAClC,UAAU;AAAA,IACV,OAAO,cAAc,SAAS;AAC5B,cAAQ,UAAU,mCAAmC;AAAA,QACnD,gBAAgB,aAAa;AAAA,QAC7B,eAAe,aAAa,kBAAkB;AAAA,QAC9C,YAAY,aAAa,eAAe,cAAc;AAAA,QACtD,UAAU,aAAa,eAAe,YAAY;AAAA,MACpD,CAAC;AAAA,IACH;AAAA,EACF;AACF;AAEA,IAAO,iCAAQ;",
+  "names": []
+}

package/dist/modules/staff/notifications.js

@@ -71,6 +71,174 @@ const notificationTypes = [
     linkHref: "/backend/staff/leave-requests/{sourceEntityId}",
     expiresAfterHours: 168
     // 7 days
+  },
+  {
+    // Spec D-6: the "Request access" button on screens 2 and 17 raises a real
+    // notification for every `staff.timesheets.projects.manage` holder. The
+    // subscriber overrides `linkHref` with the requester-specific deep link so
+    // the project team drawer opens with the requester pre-selected.
+    type: "staff.timesheets.project_access.requested",
+    channels: ["in_app", "email"],
+    module: "staff",
+    titleKey: "staff.notifications.timeProjectAccess.requested.title",
+    bodyKey: "staff.notifications.timeProjectAccess.requested.body",
+    icon: "user-plus",
+    severity: "info",
+    actions: [
+      {
+        id: "open-team",
+        labelKey: "staff.notifications.timeProjectAccess.actions.openTeam",
+        variant: "default",
+        icon: "users",
+        href: "/backend/staff/time-tracking/projects/{sourceEntityId}?panel=team"
+      }
+    ],
+    primaryActionId: "open-team",
+    linkHref: "/backend/staff/time-tracking/projects",
+    expiresAfterHours: 168
+    // 7 days
+  },
+  {
+    // Screen 4 budget card: "Ostrzezenie przy 80% i 100% wykorzystania". One type
+    // covers both thresholds — the subscriber raises the severity to `error` for the
+    // 100% crossing and carries the numbers in `bodyVariables`, so the two alerts
+    // read differently without splitting the notification id.
+    type: "staff.timesheets.time_project.budget_threshold_reached",
+    channels: ["in_app", "email"],
+    module: "staff",
+    titleKey: "staff.notifications.timeProjectBudget.thresholdReached.title",
+    bodyKey: "staff.notifications.timeProjectBudget.thresholdReached.body",
+    icon: "gauge",
+    severity: "warning",
+    actions: [
+      {
+        id: "open-project",
+        labelKey: "staff.notifications.timeProjectBudget.actions.openProject",
+        variant: "default",
+        icon: "external-link",
+        href: "/backend/staff/time-tracking/projects/{sourceEntityId}"
+      }
+    ],
+    primaryActionId: "open-project",
+    linkHref: "/backend/staff/time-tracking/projects/{sourceEntityId}",
+    expiresAfterHours: 168
+    // 7 days
+  },
+  {
+    /**
+     * EP-48. Raised by `subscribers/time-report-approved-notification.ts` when a
+     * report is closed — closing IS the approval in this module: it freezes every
+     * per-entry value and locks the entries, and `staff.timesheets.lock` is the
+     * feature that gates it. The recipient is the person who drafted the report,
+     * who otherwise learns about it only by reopening the screen.
+     */
+    type: "staff.timesheets.time_report.approved",
+    channels: ["in_app", "email"],
+    module: "staff",
+    titleKey: "staff.notifications.timeReport.approved.title",
+    bodyKey: "staff.notifications.timeReport.approved.body",
+    icon: "file-check",
+    severity: "success",
+    actions: [
+      {
+        id: "open-report",
+        labelKey: "staff.notifications.timeReport.actions.openReport",
+        variant: "default",
+        icon: "external-link",
+        href: "/backend/staff/time-tracking/reports/{sourceEntityId}"
+      }
+    ],
+    primaryActionId: "open-report",
+    linkHref: "/backend/staff/time-tracking/reports/{sourceEntityId}",
+    expiresAfterHours: 168
+    // 7 days
+  },
+  {
+    /**
+     * EP-48, contributable-only by design. The module has exactly one report
+     * transition — draft → closed — so there is no "submitted, awaiting a second
+     * pair of eyes" state for core to announce. This id exists so the multi-step
+     * approval a `registerReportApprovalPolicy` contribution (EP-41) implements
+     * has a published notification to raise instead of inventing its own, and so
+     * the renderer and delivery preferences are already in place when it does.
+     */
+    type: "staff.timesheets.time_report.ready_for_approval",
+    channels: ["in_app", "email"],
+    module: "staff",
+    titleKey: "staff.notifications.timeReport.readyForApproval.title",
+    bodyKey: "staff.notifications.timeReport.readyForApproval.body",
+    icon: "file-clock",
+    severity: "info",
+    actions: [
+      {
+        id: "review-report",
+        labelKey: "staff.notifications.timeReport.actions.reviewReport",
+        variant: "default",
+        icon: "external-link",
+        href: "/backend/staff/time-tracking/reports/{sourceEntityId}"
+      }
+    ],
+    primaryActionId: "review-report",
+    linkHref: "/backend/staff/time-tracking/reports/{sourceEntityId}",
+    expiresAfterHours: 168
+    // 7 days
+  },
+  {
+    /**
+     * EP-48, contributable-only by design. "This timer has been running for six
+     * hours" needs something that wakes up on a schedule and looks at open
+     * timers; the module ships no periodic job and inventing one to justify an id
+     * would be the tail wagging the dog. The id is the contract for a module that
+     * does ship one.
+     */
+    type: "staff.timesheets.time_entry.timer_running_long",
+    channels: ["in_app"],
+    module: "staff",
+    titleKey: "staff.notifications.timeEntryTimer.runningLong.title",
+    bodyKey: "staff.notifications.timeEntryTimer.runningLong.body",
+    icon: "timer",
+    severity: "warning",
+    actions: [
+      {
+        id: "open-timesheet",
+        labelKey: "staff.notifications.timesheet.actions.openTimesheet",
+        variant: "default",
+        icon: "external-link",
+        href: "/backend/staff/time-tracking/timesheet"
+      }
+    ],
+    primaryActionId: "open-timesheet",
+    linkHref: "/backend/staff/time-tracking/timesheet",
+    expiresAfterHours: 24
+  },
+  {
+    /**
+     * EP-48, contributable-only by design. Whether a period is "incomplete" is
+     * the capacity provider's question (EP-40), and the built-in provider spreads
+     * one flat daily number over the caller's working days on demand — it has no
+     * schedule and no opinion about when to complain. A contributed provider that
+     * knows contract hours and leave is the thing that can raise this honestly.
+     */
+    type: "staff.timesheets.timesheet.period_incomplete",
+    channels: ["in_app", "email"],
+    module: "staff",
+    titleKey: "staff.notifications.timesheet.periodIncomplete.title",
+    bodyKey: "staff.notifications.timesheet.periodIncomplete.body",
+    icon: "calendar-clock",
+    severity: "warning",
+    actions: [
+      {
+        id: "open-timesheet",
+        labelKey: "staff.notifications.timesheet.actions.openTimesheet",
+        variant: "default",
+        icon: "external-link",
+        href: "/backend/staff/time-tracking/timesheet"
+      }
+    ],
+    primaryActionId: "open-timesheet",
+    linkHref: "/backend/staff/time-tracking/timesheet",
+    expiresAfterHours: 168
+    // 7 days
   }
 ];
 var notifications_default = notificationTypes;

package/dist/modules/staff/notifications.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../src/modules/staff/notifications.ts"],
-  "sourcesContent": ["import type { NotificationTypeDefinition } from '@open-mercato/shared/modules/notifications/types'\n\nexport const notificationTypes: NotificationTypeDefinition[] = [\n  {\n    type: 'staff.leave_request.pending',\n    // Ships without push \u2014 operators re-enable it per type from the Notification Delivery settings.\n    channels: ['in_app', 'email'],\n    module: 'staff',\n    titleKey: 'staff.notifications.leaveRequest.pending.title',\n    bodyKey: 'staff.notifications.leaveRequest.pending.body',\n    icon: 'calendar-off',\n    severity: 'warning',\n    actions: [\n      {\n        id: 'approve',\n        labelKey: 'staff.notifications.leaveRequest.actions.approve',\n        variant: 'default',\n        icon: 'check',\n        commandId: 'staff.leave-requests.accept',\n      },\n      {\n        id: 'reject',\n        labelKey: 'staff.notifications.leaveRequest.actions.reject',\n        variant: 'destructive',\n        icon: 'x',\n        commandId: 'staff.leave-requests.reject',\n      },\n    ],\n    primaryActionId: 'approve',\n    linkHref: '/backend/staff/leave-requests/{sourceEntityId}',\n    expiresAfterHours: 168,\n  },\n  {\n    type: 'staff.leave_request.approved',\n    // Ships without push \u2014 operators re-enable it per type from the Notification Delivery settings.\n    channels: ['in_app', 'email'],\n    module: 'staff',\n    titleKey: 'staff.notifications.leaveRequest.approved.title',\n    bodyKey: 'staff.notifications.leaveRequest.approved.body',\n    icon: 'calendar-check',\n    severity: 'success',\n    actions: [\n      {\n        id: 'view',\n        labelKey: 'common.view',\n        variant: 'outline',\n        href: '/backend/staff/leave-requests/{sourceEntityId}',\n        icon: 'external-link',\n      },\n    ],\n    linkHref: '/backend/staff/leave-requests/{sourceEntityId}',\n    expiresAfterHours: 168, // 7 days\n  },\n  {\n    type: 'staff.leave_request.rejected',\n    // Ships without push \u2014 operators re-enable it per type from the Notification Delivery settings.\n    channels: ['in_app', 'email'],\n    module: 'staff',\n    titleKey: 'staff.notifications.leaveRequest.rejected.title',\n    bodyKey: 'staff.notifications.leaveRequest.rejected.body',\n    icon: 'calendar-x',\n    severity: 'warning',\n    actions: [\n      {\n        id: 'view',\n        labelKey: 'common.view',\n        variant: 'outline',\n        href: '/backend/staff/leave-requests/{sourceEntityId}',\n        icon: 'external-link',\n      },\n    ],\n    linkHref: '/backend/staff/leave-requests/{sourceEntityId}',\n    expiresAfterHours: 168, // 7 days\n  },\n]\n\nexport default notificationTypes\n"],
-  "mappings": "AAEO,MAAM,oBAAkD;AAAA,EAC7D;AAAA,IACE,MAAM;AAAA;AAAA,IAEN,UAAU,CAAC,UAAU,OAAO;AAAA,IAC5B,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,SAAS;AAAA,IACT,MAAM;AAAA,IACN,UAAU;AAAA,IACV,SAAS;AAAA,MACP;AAAA,QACE,IAAI;AAAA,QACJ,UAAU;AAAA,QACV,SAAS;AAAA,QACT,MAAM;AAAA,QACN,WAAW;AAAA,MACb;AAAA,MACA;AAAA,QACE,IAAI;AAAA,QACJ,UAAU;AAAA,QACV,SAAS;AAAA,QACT,MAAM;AAAA,QACN,WAAW;AAAA,MACb;AAAA,IACF;AAAA,IACA,iBAAiB;AAAA,IACjB,UAAU;AAAA,IACV,mBAAmB;AAAA,EACrB;AAAA,EACA;AAAA,IACE,MAAM;AAAA;AAAA,IAEN,UAAU,CAAC,UAAU,OAAO;AAAA,IAC5B,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,SAAS;AAAA,IACT,MAAM;AAAA,IACN,UAAU;AAAA,IACV,SAAS;AAAA,MACP;AAAA,QACE,IAAI;AAAA,QACJ,UAAU;AAAA,QACV,SAAS;AAAA,QACT,MAAM;AAAA,QACN,MAAM;AAAA,MACR;AAAA,IACF;AAAA,IACA,UAAU;AAAA,IACV,mBAAmB;AAAA;AAAA,EACrB;AAAA,EACA;AAAA,IACE,MAAM;AAAA;AAAA,IAEN,UAAU,CAAC,UAAU,OAAO;AAAA,IAC5B,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,SAAS;AAAA,IACT,MAAM;AAAA,IACN,UAAU;AAAA,IACV,SAAS;AAAA,MACP;AAAA,QACE,IAAI;AAAA,QACJ,UAAU;AAAA,QACV,SAAS;AAAA,QACT,MAAM;AAAA,QACN,MAAM;AAAA,MACR;AAAA,IACF;AAAA,IACA,UAAU;AAAA,IACV,mBAAmB;AAAA;AAAA,EACrB;AACF;AAEA,IAAO,wBAAQ;",
+  "sourcesContent": ["import type { NotificationTypeDefinition } from '@open-mercato/shared/modules/notifications/types'\n\nexport const notificationTypes: NotificationTypeDefinition[] = [\n  {\n    type: 'staff.leave_request.pending',\n    // Ships without push \u2014 operators re-enable it per type from the Notification Delivery settings.\n    channels: ['in_app', 'email'],\n    module: 'staff',\n    titleKey: 'staff.notifications.leaveRequest.pending.title',\n    bodyKey: 'staff.notifications.leaveRequest.pending.body',\n    icon: 'calendar-off',\n    severity: 'warning',\n    actions: [\n      {\n        id: 'approve',\n        labelKey: 'staff.notifications.leaveRequest.actions.approve',\n        variant: 'default',\n        icon: 'check',\n        commandId: 'staff.leave-requests.accept',\n      },\n      {\n        id: 'reject',\n        labelKey: 'staff.notifications.leaveRequest.actions.reject',\n        variant: 'destructive',\n        icon: 'x',\n        commandId: 'staff.leave-requests.reject',\n      },\n    ],\n    primaryActionId: 'approve',\n    linkHref: '/backend/staff/leave-requests/{sourceEntityId}',\n    expiresAfterHours: 168,\n  },\n  {\n    type: 'staff.leave_request.approved',\n    // Ships without push \u2014 operators re-enable it per type from the Notification Delivery settings.\n    channels: ['in_app', 'email'],\n    module: 'staff',\n    titleKey: 'staff.notifications.leaveRequest.approved.title',\n    bodyKey: 'staff.notifications.leaveRequest.approved.body',\n    icon: 'calendar-check',\n    severity: 'success',\n    actions: [\n      {\n        id: 'view',\n        labelKey: 'common.view',\n        variant: 'outline',\n        href: '/backend/staff/leave-requests/{sourceEntityId}',\n        icon: 'external-link',\n      },\n    ],\n    linkHref: '/backend/staff/leave-requests/{sourceEntityId}',\n    expiresAfterHours: 168, // 7 days\n  },\n  {\n    type: 'staff.leave_request.rejected',\n    // Ships without push \u2014 operators re-enable it per type from the Notification Delivery settings.\n    channels: ['in_app', 'email'],\n    module: 'staff',\n    titleKey: 'staff.notifications.leaveRequest.rejected.title',\n    bodyKey: 'staff.notifications.leaveRequest.rejected.body',\n    icon: 'calendar-x',\n    severity: 'warning',\n    actions: [\n      {\n        id: 'view',\n        labelKey: 'common.view',\n        variant: 'outline',\n        href: '/backend/staff/leave-requests/{sourceEntityId}',\n        icon: 'external-link',\n      },\n    ],\n    linkHref: '/backend/staff/leave-requests/{sourceEntityId}',\n    expiresAfterHours: 168, // 7 days\n  },\n  {\n    // Spec D-6: the \"Request access\" button on screens 2 and 17 raises a real\n    // notification for every `staff.timesheets.projects.manage` holder. The\n    // subscriber overrides `linkHref` with the requester-specific deep link so\n    // the project team drawer opens with the requester pre-selected.\n    type: 'staff.timesheets.project_access.requested',\n    channels: ['in_app', 'email'],\n    module: 'staff',\n    titleKey: 'staff.notifications.timeProjectAccess.requested.title',\n    bodyKey: 'staff.notifications.timeProjectAccess.requested.body',\n    icon: 'user-plus',\n    severity: 'info',\n    actions: [\n      {\n        id: 'open-team',\n        labelKey: 'staff.notifications.timeProjectAccess.actions.openTeam',\n        variant: 'default',\n        icon: 'users',\n        href: '/backend/staff/time-tracking/projects/{sourceEntityId}?panel=team',\n      },\n    ],\n    primaryActionId: 'open-team',\n    linkHref: '/backend/staff/time-tracking/projects',\n    expiresAfterHours: 168, // 7 days\n  },\n  {\n    // Screen 4 budget card: \"Ostrzezenie przy 80% i 100% wykorzystania\". One type\n    // covers both thresholds \u2014 the subscriber raises the severity to `error` for the\n    // 100% crossing and carries the numbers in `bodyVariables`, so the two alerts\n    // read differently without splitting the notification id.\n    type: 'staff.timesheets.time_project.budget_threshold_reached',\n    channels: ['in_app', 'email'],\n    module: 'staff',\n    titleKey: 'staff.notifications.timeProjectBudget.thresholdReached.title',\n    bodyKey: 'staff.notifications.timeProjectBudget.thresholdReached.body',\n    icon: 'gauge',\n    severity: 'warning',\n    actions: [\n      {\n        id: 'open-project',\n        labelKey: 'staff.notifications.timeProjectBudget.actions.openProject',\n        variant: 'default',\n        icon: 'external-link',\n        href: '/backend/staff/time-tracking/projects/{sourceEntityId}',\n      },\n    ],\n    primaryActionId: 'open-project',\n    linkHref: '/backend/staff/time-tracking/projects/{sourceEntityId}',\n    expiresAfterHours: 168, // 7 days\n  },\n  {\n    /**\n     * EP-48. Raised by `subscribers/time-report-approved-notification.ts` when a\n     * report is closed \u2014 closing IS the approval in this module: it freezes every\n     * per-entry value and locks the entries, and `staff.timesheets.lock` is the\n     * feature that gates it. The recipient is the person who drafted the report,\n     * who otherwise learns about it only by reopening the screen.\n     */\n    type: 'staff.timesheets.time_report.approved',\n    channels: ['in_app', 'email'],\n    module: 'staff',\n    titleKey: 'staff.notifications.timeReport.approved.title',\n    bodyKey: 'staff.notifications.timeReport.approved.body',\n    icon: 'file-check',\n    severity: 'success',\n    actions: [\n      {\n        id: 'open-report',\n        labelKey: 'staff.notifications.timeReport.actions.openReport',\n        variant: 'default',\n        icon: 'external-link',\n        href: '/backend/staff/time-tracking/reports/{sourceEntityId}',\n      },\n    ],\n    primaryActionId: 'open-report',\n    linkHref: '/backend/staff/time-tracking/reports/{sourceEntityId}',\n    expiresAfterHours: 168, // 7 days\n  },\n  {\n    /**\n     * EP-48, contributable-only by design. The module has exactly one report\n     * transition \u2014 draft \u2192 closed \u2014 so there is no \"submitted, awaiting a second\n     * pair of eyes\" state for core to announce. This id exists so the multi-step\n     * approval a `registerReportApprovalPolicy` contribution (EP-41) implements\n     * has a published notification to raise instead of inventing its own, and so\n     * the renderer and delivery preferences are already in place when it does.\n     */\n    type: 'staff.timesheets.time_report.ready_for_approval',\n    channels: ['in_app', 'email'],\n    module: 'staff',\n    titleKey: 'staff.notifications.timeReport.readyForApproval.title',\n    bodyKey: 'staff.notifications.timeReport.readyForApproval.body',\n    icon: 'file-clock',\n    severity: 'info',\n    actions: [\n      {\n        id: 'review-report',\n        labelKey: 'staff.notifications.timeReport.actions.reviewReport',\n        variant: 'default',\n        icon: 'external-link',\n        href: '/backend/staff/time-tracking/reports/{sourceEntityId}',\n      },\n    ],\n    primaryActionId: 'review-report',\n    linkHref: '/backend/staff/time-tracking/reports/{sourceEntityId}',\n    expiresAfterHours: 168, // 7 days\n  },\n  {\n    /**\n     * EP-48, contributable-only by design. \"This timer has been running for six\n     * hours\" needs something that wakes up on a schedule and looks at open\n     * timers; the module ships no periodic job and inventing one to justify an id\n     * would be the tail wagging the dog. The id is the contract for a module that\n     * does ship one.\n     */\n    type: 'staff.timesheets.time_entry.timer_running_long',\n    channels: ['in_app'],\n    module: 'staff',\n    titleKey: 'staff.notifications.timeEntryTimer.runningLong.title',\n    bodyKey: 'staff.notifications.timeEntryTimer.runningLong.body',\n    icon: 'timer',\n    severity: 'warning',\n    actions: [\n      {\n        id: 'open-timesheet',\n        labelKey: 'staff.notifications.timesheet.actions.openTimesheet',\n        variant: 'default',\n        icon: 'external-link',\n        href: '/backend/staff/time-tracking/timesheet',\n      },\n    ],\n    primaryActionId: 'open-timesheet',\n    linkHref: '/backend/staff/time-tracking/timesheet',\n    expiresAfterHours: 24,\n  },\n  {\n    /**\n     * EP-48, contributable-only by design. Whether a period is \"incomplete\" is\n     * the capacity provider's question (EP-40), and the built-in provider spreads\n     * one flat daily number over the caller's working days on demand \u2014 it has no\n     * schedule and no opinion about when to complain. A contributed provider that\n     * knows contract hours and leave is the thing that can raise this honestly.\n     */\n    type: 'staff.timesheets.timesheet.period_incomplete',\n    channels: ['in_app', 'email'],\n    module: 'staff',\n    titleKey: 'staff.notifications.timesheet.periodIncomplete.title',\n    bodyKey: 'staff.notifications.timesheet.periodIncomplete.body',\n    icon: 'calendar-clock',\n    severity: 'warning',\n    actions: [\n      {\n        id: 'open-timesheet',\n        labelKey: 'staff.notifications.timesheet.actions.openTimesheet',\n        variant: 'default',\n        icon: 'external-link',\n        href: '/backend/staff/time-tracking/timesheet',\n      },\n    ],\n    primaryActionId: 'open-timesheet',\n    linkHref: '/backend/staff/time-tracking/timesheet',\n    expiresAfterHours: 168, // 7 days\n  },\n]\n\nexport default notificationTypes\n"],
+  "mappings": "AAEO,MAAM,oBAAkD;AAAA,EAC7D;AAAA,IACE,MAAM;AAAA;AAAA,IAEN,UAAU,CAAC,UAAU,OAAO;AAAA,IAC5B,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,SAAS;AAAA,IACT,MAAM;AAAA,IACN,UAAU;AAAA,IACV,SAAS;AAAA,MACP;AAAA,QACE,IAAI;AAAA,QACJ,UAAU;AAAA,QACV,SAAS;AAAA,QACT,MAAM;AAAA,QACN,WAAW;AAAA,MACb;AAAA,MACA;AAAA,QACE,IAAI;AAAA,QACJ,UAAU;AAAA,QACV,SAAS;AAAA,QACT,MAAM;AAAA,QACN,WAAW;AAAA,MACb;AAAA,IACF;AAAA,IACA,iBAAiB;AAAA,IACjB,UAAU;AAAA,IACV,mBAAmB;AAAA,EACrB;AAAA,EACA;AAAA,IACE,MAAM;AAAA;AAAA,IAEN,UAAU,CAAC,UAAU,OAAO;AAAA,IAC5B,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,SAAS;AAAA,IACT,MAAM;AAAA,IACN,UAAU;AAAA,IACV,SAAS;AAAA,MACP;AAAA,QACE,IAAI;AAAA,QACJ,UAAU;AAAA,QACV,SAAS;AAAA,QACT,MAAM;AAAA,QACN,MAAM;AAAA,MACR;AAAA,IACF;AAAA,IACA,UAAU;AAAA,IACV,mBAAmB;AAAA;AAAA,EACrB;AAAA,EACA;AAAA,IACE,MAAM;AAAA;AAAA,IAEN,UAAU,CAAC,UAAU,OAAO;AAAA,IAC5B,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,SAAS;AAAA,IACT,MAAM;AAAA,IACN,UAAU;AAAA,IACV,SAAS;AAAA,MACP;AAAA,QACE,IAAI;AAAA,QACJ,UAAU;AAAA,QACV,SAAS;AAAA,QACT,MAAM;AAAA,QACN,MAAM;AAAA,MACR;AAAA,IACF;AAAA,IACA,UAAU;AAAA,IACV,mBAAmB;AAAA;AAAA,EACrB;AAAA,EACA;AAAA;AAAA;AAAA;AAAA;AAAA,IAKE,MAAM;AAAA,IACN,UAAU,CAAC,UAAU,OAAO;AAAA,IAC5B,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,SAAS;AAAA,IACT,MAAM;AAAA,IACN,UAAU;AAAA,IACV,SAAS;AAAA,MACP;AAAA,QACE,IAAI;AAAA,QACJ,UAAU;AAAA,QACV,SAAS;AAAA,QACT,MAAM;AAAA,QACN,MAAM;AAAA,MACR;AAAA,IACF;AAAA,IACA,iBAAiB;AAAA,IACjB,UAAU;AAAA,IACV,mBAAmB;AAAA;AAAA,EACrB;AAAA,EACA;AAAA;AAAA;AAAA;AAAA;AAAA,IAKE,MAAM;AAAA,IACN,UAAU,CAAC,UAAU,OAAO;AAAA,IAC5B,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,SAAS;AAAA,IACT,MAAM;AAAA,IACN,UAAU;AAAA,IACV,SAAS;AAAA,MACP;AAAA,QACE,IAAI;AAAA,QACJ,UAAU;AAAA,QACV,SAAS;AAAA,QACT,MAAM;AAAA,QACN,MAAM;AAAA,MACR;AAAA,IACF;AAAA,IACA,iBAAiB;AAAA,IACjB,UAAU;AAAA,IACV,mBAAmB;AAAA;AAAA,EACrB;AAAA,EACA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAQE,MAAM;AAAA,IACN,UAAU,CAAC,UAAU,OAAO;AAAA,IAC5B,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,SAAS;AAAA,IACT,MAAM;AAAA,IACN,UAAU;AAAA,IACV,SAAS;AAAA,MACP;AAAA,QACE,IAAI;AAAA,QACJ,UAAU;AAAA,QACV,SAAS;AAAA,QACT,MAAM;AAAA,QACN,MAAM;AAAA,MACR;AAAA,IACF;AAAA,IACA,iBAAiB;AAAA,IACjB,UAAU;AAAA,IACV,mBAAmB;AAAA;AAAA,EACrB;AAAA,EACA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IASE,MAAM;AAAA,IACN,UAAU,CAAC,UAAU,OAAO;AAAA,IAC5B,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,SAAS;AAAA,IACT,MAAM;AAAA,IACN,UAAU;AAAA,IACV,SAAS;AAAA,MACP;AAAA,QACE,IAAI;AAAA,QACJ,UAAU;AAAA,QACV,SAAS;AAAA,QACT,MAAM;AAAA,QACN,MAAM;AAAA,MACR;AAAA,IACF;AAAA,IACA,iBAAiB;AAAA,IACjB,UAAU;AAAA,IACV,mBAAmB;AAAA;AAAA,EACrB;AAAA,EACA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAQE,MAAM;AAAA,IACN,UAAU,CAAC,QAAQ;AAAA,IACnB,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,SAAS;AAAA,IACT,MAAM;AAAA,IACN,UAAU;AAAA,IACV,SAAS;AAAA,MACP;AAAA,QACE,IAAI;AAAA,QACJ,UAAU;AAAA,QACV,SAAS;AAAA,QACT,MAAM;AAAA,QACN,MAAM;AAAA,MACR;AAAA,IACF;AAAA,IACA,iBAAiB;AAAA,IACjB,UAAU;AAAA,IACV,mBAAmB;AAAA,EACrB;AAAA,EACA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAQE,MAAM;AAAA,IACN,UAAU,CAAC,UAAU,OAAO;AAAA,IAC5B,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,SAAS;AAAA,IACT,MAAM;AAAA,IACN,UAAU;AAAA,IACV,SAAS;AAAA,MACP;AAAA,QACE,IAAI;AAAA,QACJ,UAAU;AAAA,QACV,SAAS;AAAA,QACT,MAAM;AAAA,QACN,MAAM;AAAA,MACR;AAAA,IACF;AAAA,IACA,iBAAiB;AAAA,IACjB,UAAU;AAAA,IACV,mBAAmB;AAAA;AAAA,EACrB;AACF;AAEA,IAAO,wBAAQ;",
   "names": []
 }

package/dist/modules/staff/search.js

@@ -71,6 +71,43 @@ function buildIndexSource(ctx, presenter, lines) {
     checksumSource: { record: ctx.record, customFields: ctx.customFields }
   };
 }
+const UNRESTRICTED_PROJECT_ACCESS_FEATURE = "staff.timesheets.projects.manage";
+function buildTimeTaskPresenter(t, record) {
+  const title = pickString(record.title, record.reference) ?? record.id ?? t("staff.search.badge.timeTask", "Task");
+  return {
+    title: String(title),
+    subtitle: formatSubtitle(record.reference, snippet(record.description, 80)),
+    icon: "list-checks",
+    badge: t("staff.search.badge.timeTask", "Task")
+  };
+}
+function buildTimeReportPresenter(t, record) {
+  const title = pickString(record.title, record.reference) ?? record.id ?? t("staff.search.badge.timeReport", "Report");
+  return {
+    title: String(title),
+    subtitle: formatSubtitle(record.reference, record.period_from ?? record.periodFrom, record.period_to ?? record.periodTo),
+    icon: "file-text",
+    badge: t("staff.search.badge.timeReport", "Report")
+  };
+}
+function buildTimeTagPresenter(t, record) {
+  const title = pickString(record.label, record.slug) ?? record.id ?? t("staff.search.badge.timeTag", "Tag");
+  return {
+    title: String(title),
+    subtitle: formatSubtitle(record.slug),
+    icon: "tag",
+    badge: t("staff.search.badge.timeTag", "Tag")
+  };
+}
+function buildTimeEntryPresenter(t, record) {
+  const title = snippet(record.notes, 80) ?? t("staff.search.badge.timeEntry", "Time entry");
+  return {
+    title,
+    subtitle: formatSubtitle(record.date, record.duration_minutes ?? record.durationMinutes),
+    icon: "timer",
+    badge: t("staff.search.badge.timeEntry", "Time entry")
+  };
+}
 const searchConfig = {
   entities: [
     {
@@ -175,10 +212,131 @@ const searchConfig = {
           badge: t("staff.search.badge.timeProject", "Project")
         };
       },
-      resolveUrl: async (ctx) => `/backend/staff/timesheets/projects/${encodeURIComponent(String(ctx.record.id))}`,
+      resolveUrl: async (ctx) => `/backend/staff/time-tracking/projects/${encodeURIComponent(String(ctx.record.id))}`,
       fieldPolicy: {
         searchable: ["name", "code", "description", "project_type", "cost_center"]
       }
+    },
+    {
+      entityId: "staff:staff_time_task",
+      aclFeatures: ["staff.timesheets.tasks.view", UNRESTRICTED_PROJECT_ACCESS_FEATURE],
+      enabled: true,
+      priority: 7,
+      buildSource: async (ctx) => {
+        const { t } = await resolveTranslations();
+        const record = ctx.record;
+        const lines = [];
+        appendLine(lines, "Reference", record.reference);
+        appendLine(lines, "Title", record.title);
+        appendLine(lines, "Description", record.description);
+        return buildIndexSource(ctx, buildTimeTaskPresenter(t, record), lines);
+      },
+      formatResult: async (ctx) => {
+        const { t } = await resolveTranslations();
+        return buildTimeTaskPresenter(t, ctx.record);
+      },
+      resolveUrl: async (ctx) => {
+        const projectId = pickString(ctx.record.time_project_id, ctx.record.timeProjectId);
+        if (!projectId) return null;
+        return `/backend/staff/time-tracking/board?projectId=${encodeURIComponent(projectId)}&task=${encodeURIComponent(String(ctx.record.id))}`;
+      },
+      fieldPolicy: {
+        searchable: ["title", "description", "reference"]
+      }
+    },
+    {
+      entityId: "staff:staff_time_report",
+      aclFeatures: ["staff.timesheets.reports.view", UNRESTRICTED_PROJECT_ACCESS_FEATURE],
+      enabled: true,
+      priority: 7,
+      buildSource: async (ctx) => {
+        const { t } = await resolveTranslations();
+        const record = ctx.record;
+        const lines = [];
+        appendLine(lines, "Reference", record.reference);
+        appendLine(lines, "Title", record.title);
+        appendLine(lines, "Status", record.status);
+        return buildIndexSource(ctx, buildTimeReportPresenter(t, record), lines);
+      },
+      formatResult: async (ctx) => {
+        const { t } = await resolveTranslations();
+        return buildTimeReportPresenter(t, ctx.record);
+      },
+      resolveUrl: async (ctx) => `/backend/staff/time-tracking/reports/${encodeURIComponent(String(ctx.record.id))}`,
+      /**
+       * `total_amount` and the denormalised `customer_snapshot` are excluded, not
+       * merely left out of `searchable`: money in a time-tracking response is
+       * gated on `staff.timesheets.rates.view`, and the search pipeline has no way
+       * to apply a second feature to a subset of an indexed record's fields.
+       */
+      fieldPolicy: {
+        searchable: ["reference", "title"],
+        excluded: ["total_amount", "customer_snapshot"]
+      }
+    },
+    {
+      entityId: "staff:staff_time_tag",
+      aclFeatures: ["staff.timesheets.view"],
+      enabled: true,
+      priority: 5,
+      buildSource: async (ctx) => {
+        const { t } = await resolveTranslations();
+        const record = ctx.record;
+        const lines = [];
+        appendLine(lines, "Label", record.label);
+        appendLine(lines, "Slug", record.slug);
+        return buildIndexSource(ctx, buildTimeTagPresenter(t, record), lines);
+      },
+      formatResult: async (ctx) => {
+        const { t } = await resolveTranslations();
+        return buildTimeTagPresenter(t, ctx.record);
+      },
+      /**
+       * A tag has no detail screen and the entries list deep-links only `taskId`
+       * and `ids`, so there is no honest destination to send the caller to. The
+       * presenter still answers the question a tag search asks — "does this label
+       * exist, and what is it spelled" — and `url` is optional in the result
+       * contract, so an unlinked hit renders rather than pointing somewhere wrong.
+       */
+      resolveUrl: async () => null,
+      fieldPolicy: {
+        searchable: ["label", "slug"]
+      }
+    },
+    {
+      /**
+       * Entry notes are the most sensitive text time tracking holds — they are
+       * where a consultant writes what they did for a named client. The gate is
+       * therefore the strictest one the module has for entries: `staff.timesheets.view`
+       * AND `staff.timesheets.projects.manage`, the pair that makes
+       * `resolveProjectAccess` return `canManageAll`, which is the only state in
+       * which `/api/staff/timesheets/time-entries` stops narrowing to the caller's
+       * own entries plus their project memberships. A consultant with
+       * `staff.timesheets.manage_own` gets no entry hits at all — including their
+       * own — because the gate cannot express "own" and half a gate is worse than
+       * none.
+       */
+      entityId: "staff:staff_time_entry",
+      aclFeatures: ["staff.timesheets.view", UNRESTRICTED_PROJECT_ACCESS_FEATURE],
+      enabled: true,
+      priority: 4,
+      buildSource: async (ctx) => {
+        const { t } = await resolveTranslations();
+        const record = ctx.record;
+        const lines = [];
+        appendLine(lines, "Notes", record.notes);
+        appendLine(lines, "Date", record.date);
+        return buildIndexSource(ctx, buildTimeEntryPresenter(t, record), lines);
+      },
+      formatResult: async (ctx) => {
+        const { t } = await resolveTranslations();
+        return buildTimeEntryPresenter(t, ctx.record);
+      },
+      resolveUrl: async (ctx) => `/backend/staff/time-tracking/entries?ids=${encodeURIComponent(String(ctx.record.id))}`,
+      fieldPolicy: {
+        searchable: ["notes"],
+        excluded: ["rate_override_amount", "rate_currency_code"]
+      }
     }
   ]
 };

package/dist/modules/staff/search.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../src/modules/staff/search.ts"],
-  "sourcesContent": ["import type {\n  SearchModuleConfig,\n  SearchBuildContext,\n  SearchResultPresenter,\n  SearchIndexSource,\n} from '@open-mercato/shared/modules/search'\nimport type { TranslateFn } from '@open-mercato/shared/lib/i18n/context'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\n\nfunction pickString(...candidates: Array<unknown>): string | null {\n  for (const candidate of candidates) {\n    if (typeof candidate !== 'string') continue\n    const trimmed = candidate.trim()\n    if (trimmed.length > 0) return trimmed\n  }\n  return null\n}\n\nfunction snippet(value: unknown, max = 140): string | undefined {\n  if (typeof value !== 'string') return undefined\n  const trimmed = value.trim()\n  if (!trimmed.length) return undefined\n  if (trimmed.length <= max) return trimmed\n  return `${trimmed.slice(0, max - 3)}...`\n}\n\nfunction appendLine(lines: string[], label: string, value: unknown) {\n  if (value === null || value === undefined) return\n  const text = Array.isArray(value)\n    ? value.map((item) => (item === null || item === undefined ? '' : String(item))).filter(Boolean).join(', ')\n    : (typeof value === 'object' ? JSON.stringify(value) : String(value))\n  if (!text.trim()) return\n  lines.push(`${label}: ${text}`)\n}\n\nfunction appendCustomFieldLines(lines: string[], customFields: Record<string, unknown>) {\n  for (const [key, value] of Object.entries(customFields)) {\n    if (value === null || value === undefined) continue\n    appendLine(lines, key.replace(/^cf:/, ''), value)\n  }\n}\n\nfunction formatSubtitle(...parts: Array<unknown>): string | undefined {\n  const text = parts\n    .map((part) => (part === null || part === undefined ? '' : String(part)))\n    .map((part) => part.trim())\n    .filter(Boolean)\n  if (text.length === 0) return undefined\n  return text.join(' \u00B7 ')\n}\n\nfunction buildTeamPresenter(\n  t: TranslateFn,\n  record: Record<string, unknown>,\n  customFields: Record<string, unknown>,\n): SearchResultPresenter {\n  const title =\n    pickString(record.name, record.display_name, record.displayName, customFields.name, customFields.display_name) ??\n    (record.id as string | undefined) ??\n    t('staff.search.badge.team', 'Team')\n  const description = snippet(record.description ?? customFields.description)\n  return {\n    title: String(title),\n    subtitle: formatSubtitle(description),\n    icon: 'users',\n    badge: t('staff.search.badge.team', 'Team'),\n  }\n}\n\nfunction buildTeamMemberPresenter(\n  t: TranslateFn,\n  record: Record<string, unknown>,\n  customFields: Record<string, unknown>,\n): SearchResultPresenter {\n  const title =\n    pickString(record.display_name, record.displayName, record.name, customFields.display_name, customFields.name) ??\n    (record.id as string | undefined) ??\n    t('staff.search.badge.teamMember', 'Employee')\n  const description = snippet(record.description ?? customFields.description)\n  const tags = Array.isArray(record.tags) ? record.tags.join(', ') : undefined\n  return {\n    title: String(title),\n    subtitle: formatSubtitle(description, tags),\n    icon: 'user',\n    badge: t('staff.search.badge.teamMember', 'Employee'),\n  }\n}\n\nfunction buildTeamRolePresenter(\n  t: TranslateFn,\n  record: Record<string, unknown>,\n  customFields: Record<string, unknown>,\n): SearchResultPresenter {\n  const title =\n    pickString(record.name, record.display_name, record.displayName, customFields.name, customFields.display_name) ??\n    (record.id as string | undefined) ??\n    t('staff.search.badge.teamRole', 'Role')\n  const description = snippet(record.description ?? customFields.description)\n  return {\n    title: String(title),\n    subtitle: formatSubtitle(description),\n    icon: 'shield',\n    badge: t('staff.search.badge.teamRole', 'Role'),\n  }\n}\n\nfunction buildIndexSource(\n  ctx: SearchBuildContext,\n  presenter: SearchResultPresenter,\n  lines: string[],\n): SearchIndexSource | null {\n  appendCustomFieldLines(lines, ctx.customFields)\n  if (!lines.length) return null\n  return {\n    text: lines,\n    presenter,\n    checksumSource: { record: ctx.record, customFields: ctx.customFields },\n  }\n}\n\nexport const searchConfig: SearchModuleConfig = {\n  entities: [\n    {\n      entityId: 'staff:staff_team',\n      aclFeatures: ['staff.view'],\n      enabled: true,\n      priority: 7,\n      buildSource: async (ctx) => {\n        const { t } = await resolveTranslations()\n        const record = ctx.record\n        const lines: string[] = []\n        appendLine(lines, 'Name', record.name ?? record.display_name ?? ctx.customFields.name)\n        appendLine(lines, 'Description', record.description ?? ctx.customFields.description)\n        appendLine(lines, 'Active', record.is_active ?? record.isActive)\n        return buildIndexSource(ctx, buildTeamPresenter(t, record, ctx.customFields), lines)\n      },\n      formatResult: async (ctx) => {\n        const { t } = await resolveTranslations()\n        return buildTeamPresenter(t, ctx.record, ctx.customFields)\n      },\n      resolveUrl: async (ctx) => `/backend/staff/teams/${encodeURIComponent(String(ctx.record.id))}/edit`,\n      fieldPolicy: {\n        searchable: ['name', 'description'],\n      },\n    },\n    {\n      entityId: 'staff:staff_team_member',\n      aclFeatures: ['staff.view'],\n      enabled: true,\n      priority: 7,\n      buildSource: async (ctx) => {\n        const { t } = await resolveTranslations()\n        const record = ctx.record\n        const lines: string[] = []\n        appendLine(lines, 'Name', record.display_name ?? record.displayName ?? ctx.customFields.display_name)\n        appendLine(lines, 'Description', record.description ?? ctx.customFields.description)\n        appendLine(lines, 'Tags', record.tags)\n        appendLine(lines, 'Active', record.is_active ?? record.isActive)\n        return buildIndexSource(ctx, buildTeamMemberPresenter(t, record, ctx.customFields), lines)\n      },\n      formatResult: async (ctx) => {\n        const { t } = await resolveTranslations()\n        return buildTeamMemberPresenter(t, ctx.record, ctx.customFields)\n      },\n      resolveUrl: async (ctx) => `/backend/staff/team-members/${encodeURIComponent(String(ctx.record.id))}`,\n      fieldPolicy: {\n        searchable: ['display_name', 'description', 'tags'],\n      },\n    },\n    {\n      entityId: 'staff:staff_team_role',\n      aclFeatures: ['staff.view'],\n      enabled: true,\n      priority: 7,\n      buildSource: async (ctx) => {\n        const { t } = await resolveTranslations()\n        const record = ctx.record\n        const lines: string[] = []\n        appendLine(lines, 'Name', record.name ?? record.display_name ?? ctx.customFields.name)\n        appendLine(lines, 'Description', record.description ?? ctx.customFields.description)\n        appendLine(lines, 'Icon', record.appearance_icon ?? record.appearanceIcon)\n        appendLine(lines, 'Color', record.appearance_color ?? record.appearanceColor)\n        return buildIndexSource(ctx, buildTeamRolePresenter(t, record, ctx.customFields), lines)\n      },\n      formatResult: async (ctx) => {\n        const { t } = await resolveTranslations()\n        return buildTeamRolePresenter(t, ctx.record, ctx.customFields)\n      },\n      resolveUrl: async (ctx) => `/backend/staff/team-roles/${encodeURIComponent(String(ctx.record.id))}/edit`,\n      fieldPolicy: {\n        searchable: ['name', 'description', 'appearance_icon', 'appearance_color'],\n      },\n    },\n    {\n      entityId: 'staff:staff_time_project',\n      aclFeatures: ['staff.timesheets.projects.view'],\n      enabled: true,\n      priority: 7,\n      buildSource: async (ctx) => {\n        const { t } = await resolveTranslations()\n        const record = ctx.record\n        const lines: string[] = []\n        appendLine(lines, 'Name', record.name)\n        appendLine(lines, 'Code', record.code)\n        appendLine(lines, 'Description', record.description)\n        appendLine(lines, 'Type', record.project_type ?? record.projectType)\n        appendLine(lines, 'Cost Center', record.cost_center ?? record.costCenter)\n        const presenter: SearchResultPresenter = {\n          title: String(record.name ?? record.id ?? t('staff.search.badge.timeProject', 'Project')),\n          subtitle: formatSubtitle(record.code, record.project_type ?? record.projectType),\n          icon: 'clock',\n          badge: t('staff.search.badge.timeProject', 'Project'),\n        }\n        return buildIndexSource(ctx, presenter, lines)\n      },\n      formatResult: async (ctx) => {\n        const { t } = await resolveTranslations()\n        return {\n          title: String(ctx.record.name ?? ctx.record.id ?? ''),\n          subtitle: formatSubtitle(ctx.record.code, ctx.record.project_type ?? ctx.record.projectType),\n          icon: 'clock',\n          badge: t('staff.search.badge.timeProject', 'Project'),\n        }\n      },\n      resolveUrl: async (ctx) => `/backend/staff/timesheets/projects/${encodeURIComponent(String(ctx.record.id))}`,\n      fieldPolicy: {\n        searchable: ['name', 'code', 'description', 'project_type', 'cost_center'],\n      },\n    },\n  ],\n}\n\nexport default searchConfig\nexport const config = searchConfig\n"],
-  "mappings": "AAOA,SAAS,2BAA2B;AAEpC,SAAS,cAAc,YAA2C;AAChE,aAAW,aAAa,YAAY;AAClC,QAAI,OAAO,cAAc,SAAU;AACnC,UAAM,UAAU,UAAU,KAAK;AAC/B,QAAI,QAAQ,SAAS,EAAG,QAAO;AAAA,EACjC;AACA,SAAO;AACT;AAEA,SAAS,QAAQ,OAAgB,MAAM,KAAyB;AAC9D,MAAI,OAAO,UAAU,SAAU,QAAO;AACtC,QAAM,UAAU,MAAM,KAAK;AAC3B,MAAI,CAAC,QAAQ,OAAQ,QAAO;AAC5B,MAAI,QAAQ,UAAU,IAAK,QAAO;AAClC,SAAO,GAAG,QAAQ,MAAM,GAAG,MAAM,CAAC,CAAC;AACrC;AAEA,SAAS,WAAW,OAAiB,OAAe,OAAgB;AAClE,MAAI,UAAU,QAAQ,UAAU,OAAW;AAC3C,QAAM,OAAO,MAAM,QAAQ,KAAK,IAC5B,MAAM,IAAI,CAAC,SAAU,SAAS,QAAQ,SAAS,SAAY,KAAK,OAAO,IAAI,CAAE,EAAE,OAAO,OAAO,EAAE,KAAK,IAAI,IACvG,OAAO,UAAU,WAAW,KAAK,UAAU,KAAK,IAAI,OAAO,KAAK;AACrE,MAAI,CAAC,KAAK,KAAK,EAAG;AAClB,QAAM,KAAK,GAAG,KAAK,KAAK,IAAI,EAAE;AAChC;AAEA,SAAS,uBAAuB,OAAiB,cAAuC;AACtF,aAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,YAAY,GAAG;AACvD,QAAI,UAAU,QAAQ,UAAU,OAAW;AAC3C,eAAW,OAAO,IAAI,QAAQ,QAAQ,EAAE,GAAG,KAAK;AAAA,EAClD;AACF;AAEA,SAAS,kBAAkB,OAA2C;AACpE,QAAM,OAAO,MACV,IAAI,CAAC,SAAU,SAAS,QAAQ,SAAS,SAAY,KAAK,OAAO,IAAI,CAAE,EACvE,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC,EACzB,OAAO,OAAO;AACjB,MAAI,KAAK,WAAW,EAAG,QAAO;AAC9B,SAAO,KAAK,KAAK,QAAK;AACxB;AAEA,SAAS,mBACP,GACA,QACA,cACuB;AACvB,QAAM,QACJ,WAAW,OAAO,MAAM,OAAO,cAAc,OAAO,aAAa,aAAa,MAAM,aAAa,YAAY,KAC5G,OAAO,MACR,EAAE,2BAA2B,MAAM;AACrC,QAAM,cAAc,QAAQ,OAAO,eAAe,aAAa,WAAW;AAC1E,SAAO;AAAA,IACL,OAAO,OAAO,KAAK;AAAA,IACnB,UAAU,eAAe,WAAW;AAAA,IACpC,MAAM;AAAA,IACN,OAAO,EAAE,2BAA2B,MAAM;AAAA,EAC5C;AACF;AAEA,SAAS,yBACP,GACA,QACA,cACuB;AACvB,QAAM,QACJ,WAAW,OAAO,cAAc,OAAO,aAAa,OAAO,MAAM,aAAa,cAAc,aAAa,IAAI,KAC5G,OAAO,MACR,EAAE,iCAAiC,UAAU;AAC/C,QAAM,cAAc,QAAQ,OAAO,eAAe,aAAa,WAAW;AAC1E,QAAM,OAAO,MAAM,QAAQ,OAAO,IAAI,IAAI,OAAO,KAAK,KAAK,IAAI,IAAI;AACnE,SAAO;AAAA,IACL,OAAO,OAAO,KAAK;AAAA,IACnB,UAAU,eAAe,aAAa,IAAI;AAAA,IAC1C,MAAM;AAAA,IACN,OAAO,EAAE,iCAAiC,UAAU;AAAA,EACtD;AACF;AAEA,SAAS,uBACP,GACA,QACA,cACuB;AACvB,QAAM,QACJ,WAAW,OAAO,MAAM,OAAO,cAAc,OAAO,aAAa,aAAa,MAAM,aAAa,YAAY,KAC5G,OAAO,MACR,EAAE,+BAA+B,MAAM;AACzC,QAAM,cAAc,QAAQ,OAAO,eAAe,aAAa,WAAW;AAC1E,SAAO;AAAA,IACL,OAAO,OAAO,KAAK;AAAA,IACnB,UAAU,eAAe,WAAW;AAAA,IACpC,MAAM;AAAA,IACN,OAAO,EAAE,+BAA+B,MAAM;AAAA,EAChD;AACF;AAEA,SAAS,iBACP,KACA,WACA,OAC0B;AAC1B,yBAAuB,OAAO,IAAI,YAAY;AAC9C,MAAI,CAAC,MAAM,OAAQ,QAAO;AAC1B,SAAO;AAAA,IACL,MAAM;AAAA,IACN;AAAA,IACA,gBAAgB,EAAE,QAAQ,IAAI,QAAQ,cAAc,IAAI,aAAa;AAAA,EACvE;AACF;AAEO,MAAM,eAAmC;AAAA,EAC9C,UAAU;AAAA,IACR;AAAA,MACE,UAAU;AAAA,MACV,aAAa,CAAC,YAAY;AAAA,MAC1B,SAAS;AAAA,MACT,UAAU;AAAA,MACV,aAAa,OAAO,QAAQ;AAC1B,cAAM,EAAE,EAAE,IAAI,MAAM,oBAAoB;AACxC,cAAM,SAAS,IAAI;AACnB,cAAM,QAAkB,CAAC;AACzB,mBAAW,OAAO,QAAQ,OAAO,QAAQ,OAAO,gBAAgB,IAAI,aAAa,IAAI;AACrF,mBAAW,OAAO,eAAe,OAAO,eAAe,IAAI,aAAa,WAAW;AACnF,mBAAW,OAAO,UAAU,OAAO,aAAa,OAAO,QAAQ;AAC/D,eAAO,iBAAiB,KAAK,mBAAmB,GAAG,QAAQ,IAAI,YAAY,GAAG,KAAK;AAAA,MACrF;AAAA,MACA,cAAc,OAAO,QAAQ;AAC3B,cAAM,EAAE,EAAE,IAAI,MAAM,oBAAoB;AACxC,eAAO,mBAAmB,GAAG,IAAI,QAAQ,IAAI,YAAY;AAAA,MAC3D;AAAA,MACA,YAAY,OAAO,QAAQ,wBAAwB,mBAAmB,OAAO,IAAI,OAAO,EAAE,CAAC,CAAC;AAAA,MAC5F,aAAa;AAAA,QACX,YAAY,CAAC,QAAQ,aAAa;AAAA,MACpC;AAAA,IACF;AAAA,IACA;AAAA,MACE,UAAU;AAAA,MACV,aAAa,CAAC,YAAY;AAAA,MAC1B,SAAS;AAAA,MACT,UAAU;AAAA,MACV,aAAa,OAAO,QAAQ;AAC1B,cAAM,EAAE,EAAE,IAAI,MAAM,oBAAoB;AACxC,cAAM,SAAS,IAAI;AACnB,cAAM,QAAkB,CAAC;AACzB,mBAAW,OAAO,QAAQ,OAAO,gBAAgB,OAAO,eAAe,IAAI,aAAa,YAAY;AACpG,mBAAW,OAAO,eAAe,OAAO,eAAe,IAAI,aAAa,WAAW;AACnF,mBAAW,OAAO,QAAQ,OAAO,IAAI;AACrC,mBAAW,OAAO,UAAU,OAAO,aAAa,OAAO,QAAQ;AAC/D,eAAO,iBAAiB,KAAK,yBAAyB,GAAG,QAAQ,IAAI,YAAY,GAAG,KAAK;AAAA,MAC3F;AAAA,MACA,cAAc,OAAO,QAAQ;AAC3B,cAAM,EAAE,EAAE,IAAI,MAAM,oBAAoB;AACxC,eAAO,yBAAyB,GAAG,IAAI,QAAQ,IAAI,YAAY;AAAA,MACjE;AAAA,MACA,YAAY,OAAO,QAAQ,+BAA+B,mBAAmB,OAAO,IAAI,OAAO,EAAE,CAAC,CAAC;AAAA,MACnG,aAAa;AAAA,QACX,YAAY,CAAC,gBAAgB,eAAe,MAAM;AAAA,MACpD;AAAA,IACF;AAAA,IACA;AAAA,MACE,UAAU;AAAA,MACV,aAAa,CAAC,YAAY;AAAA,MAC1B,SAAS;AAAA,MACT,UAAU;AAAA,MACV,aAAa,OAAO,QAAQ;AAC1B,cAAM,EAAE,EAAE,IAAI,MAAM,oBAAoB;AACxC,cAAM,SAAS,IAAI;AACnB,cAAM,QAAkB,CAAC;AACzB,mBAAW,OAAO,QAAQ,OAAO,QAAQ,OAAO,gBAAgB,IAAI,aAAa,IAAI;AACrF,mBAAW,OAAO,eAAe,OAAO,eAAe,IAAI,aAAa,WAAW;AACnF,mBAAW,OAAO,QAAQ,OAAO,mBAAmB,OAAO,cAAc;AACzE,mBAAW,OAAO,SAAS,OAAO,oBAAoB,OAAO,eAAe;AAC5E,eAAO,iBAAiB,KAAK,uBAAuB,GAAG,QAAQ,IAAI,YAAY,GAAG,KAAK;AAAA,MACzF;AAAA,MACA,cAAc,OAAO,QAAQ;AAC3B,cAAM,EAAE,EAAE,IAAI,MAAM,oBAAoB;AACxC,eAAO,uBAAuB,GAAG,IAAI,QAAQ,IAAI,YAAY;AAAA,MAC/D;AAAA,MACA,YAAY,OAAO,QAAQ,6BAA6B,mBAAmB,OAAO,IAAI,OAAO,EAAE,CAAC,CAAC;AAAA,MACjG,aAAa;AAAA,QACX,YAAY,CAAC,QAAQ,eAAe,mBAAmB,kBAAkB;AAAA,MAC3E;AAAA,IACF;AAAA,IACA;AAAA,MACE,UAAU;AAAA,MACV,aAAa,CAAC,gCAAgC;AAAA,MAC9C,SAAS;AAAA,MACT,UAAU;AAAA,MACV,aAAa,OAAO,QAAQ;AAC1B,cAAM,EAAE,EAAE,IAAI,MAAM,oBAAoB;AACxC,cAAM,SAAS,IAAI;AACnB,cAAM,QAAkB,CAAC;AACzB,mBAAW,OAAO,QAAQ,OAAO,IAAI;AACrC,mBAAW,OAAO,QAAQ,OAAO,IAAI;AACrC,mBAAW,OAAO,eAAe,OAAO,WAAW;AACnD,mBAAW,OAAO,QAAQ,OAAO,gBAAgB,OAAO,WAAW;AACnE,mBAAW,OAAO,eAAe,OAAO,eAAe,OAAO,UAAU;AACxE,cAAM,YAAmC;AAAA,UACvC,OAAO,OAAO,OAAO,QAAQ,OAAO,MAAM,EAAE,kCAAkC,SAAS,CAAC;AAAA,UACxF,UAAU,eAAe,OAAO,MAAM,OAAO,gBAAgB,OAAO,WAAW;AAAA,UAC/E,MAAM;AAAA,UACN,OAAO,EAAE,kCAAkC,SAAS;AAAA,QACtD;AACA,eAAO,iBAAiB,KAAK,WAAW,KAAK;AAAA,MAC/C;AAAA,MACA,cAAc,OAAO,QAAQ;AAC3B,cAAM,EAAE,EAAE,IAAI,MAAM,oBAAoB;AACxC,eAAO;AAAA,UACL,OAAO,OAAO,IAAI,OAAO,QAAQ,IAAI,OAAO,MAAM,EAAE;AAAA,UACpD,UAAU,eAAe,IAAI,OAAO,MAAM,IAAI,OAAO,gBAAgB,IAAI,OAAO,WAAW;AAAA,UAC3F,MAAM;AAAA,UACN,OAAO,EAAE,kCAAkC,SAAS;AAAA,QACtD;AAAA,MACF;AAAA,MACA,YAAY,OAAO,QAAQ,sCAAsC,mBAAmB,OAAO,IAAI,OAAO,EAAE,CAAC,CAAC;AAAA,MAC1G,aAAa;AAAA,QACX,YAAY,CAAC,QAAQ,QAAQ,eAAe,gBAAgB,aAAa;AAAA,MAC3E;AAAA,IACF;AAAA,EACF;AACF;AAEA,IAAO,iBAAQ;AACR,MAAM,SAAS;",
+  "sourcesContent": ["import type {\n  SearchModuleConfig,\n  SearchBuildContext,\n  SearchResultPresenter,\n  SearchIndexSource,\n} from '@open-mercato/shared/modules/search'\nimport type { TranslateFn } from '@open-mercato/shared/lib/i18n/context'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\n\nfunction pickString(...candidates: Array<unknown>): string | null {\n  for (const candidate of candidates) {\n    if (typeof candidate !== 'string') continue\n    const trimmed = candidate.trim()\n    if (trimmed.length > 0) return trimmed\n  }\n  return null\n}\n\nfunction snippet(value: unknown, max = 140): string | undefined {\n  if (typeof value !== 'string') return undefined\n  const trimmed = value.trim()\n  if (!trimmed.length) return undefined\n  if (trimmed.length <= max) return trimmed\n  return `${trimmed.slice(0, max - 3)}...`\n}\n\nfunction appendLine(lines: string[], label: string, value: unknown) {\n  if (value === null || value === undefined) return\n  const text = Array.isArray(value)\n    ? value.map((item) => (item === null || item === undefined ? '' : String(item))).filter(Boolean).join(', ')\n    : (typeof value === 'object' ? JSON.stringify(value) : String(value))\n  if (!text.trim()) return\n  lines.push(`${label}: ${text}`)\n}\n\nfunction appendCustomFieldLines(lines: string[], customFields: Record<string, unknown>) {\n  for (const [key, value] of Object.entries(customFields)) {\n    if (value === null || value === undefined) continue\n    appendLine(lines, key.replace(/^cf:/, ''), value)\n  }\n}\n\nfunction formatSubtitle(...parts: Array<unknown>): string | undefined {\n  const text = parts\n    .map((part) => (part === null || part === undefined ? '' : String(part)))\n    .map((part) => part.trim())\n    .filter(Boolean)\n  if (text.length === 0) return undefined\n  return text.join(' \u00B7 ')\n}\n\nfunction buildTeamPresenter(\n  t: TranslateFn,\n  record: Record<string, unknown>,\n  customFields: Record<string, unknown>,\n): SearchResultPresenter {\n  const title =\n    pickString(record.name, record.display_name, record.displayName, customFields.name, customFields.display_name) ??\n    (record.id as string | undefined) ??\n    t('staff.search.badge.team', 'Team')\n  const description = snippet(record.description ?? customFields.description)\n  return {\n    title: String(title),\n    subtitle: formatSubtitle(description),\n    icon: 'users',\n    badge: t('staff.search.badge.team', 'Team'),\n  }\n}\n\nfunction buildTeamMemberPresenter(\n  t: TranslateFn,\n  record: Record<string, unknown>,\n  customFields: Record<string, unknown>,\n): SearchResultPresenter {\n  const title =\n    pickString(record.display_name, record.displayName, record.name, customFields.display_name, customFields.name) ??\n    (record.id as string | undefined) ??\n    t('staff.search.badge.teamMember', 'Employee')\n  const description = snippet(record.description ?? customFields.description)\n  const tags = Array.isArray(record.tags) ? record.tags.join(', ') : undefined\n  return {\n    title: String(title),\n    subtitle: formatSubtitle(description, tags),\n    icon: 'user',\n    badge: t('staff.search.badge.teamMember', 'Employee'),\n  }\n}\n\nfunction buildTeamRolePresenter(\n  t: TranslateFn,\n  record: Record<string, unknown>,\n  customFields: Record<string, unknown>,\n): SearchResultPresenter {\n  const title =\n    pickString(record.name, record.display_name, record.displayName, customFields.name, customFields.display_name) ??\n    (record.id as string | undefined) ??\n    t('staff.search.badge.teamRole', 'Role')\n  const description = snippet(record.description ?? customFields.description)\n  return {\n    title: String(title),\n    subtitle: formatSubtitle(description),\n    icon: 'shield',\n    badge: t('staff.search.badge.teamRole', 'Role'),\n  }\n}\n\nfunction buildIndexSource(\n  ctx: SearchBuildContext,\n  presenter: SearchResultPresenter,\n  lines: string[],\n): SearchIndexSource | null {\n  appendCustomFieldLines(lines, ctx.customFields)\n  if (!lines.length) return null\n  return {\n    text: lines,\n    presenter,\n    checksumSource: { record: ctx.record, customFields: ctx.customFields },\n  }\n}\n\n/**\n * EP-46. The four time-tracking entities below join `staff:staff_time_project`\n * in the index, and every one of them carries a gate that is deliberately\n * stricter than the feature its REST route declares.\n *\n * The reason is a property of the search layer, not of this module: an entity's\n * `aclFeatures` is the ONLY authorization the search pipeline applies. It is\n * enforced twice per query \u2014 `resolveReadableEntityTypes` narrows the entity\n * list before the query and `filterSearchResultsByEntityAccess` filters the\n * results after it \u2014 but both decide **per entity type**, never per record.\n * `SearchEntityConfig` has no row-level hook and `SearchOptions` has no record-id\n * allowlist, so a search gate cannot reproduce the per-project membership\n * intersection that `resolveProjectAccess` applies on every time-tracking route.\n *\n * So each gate below names the feature set whose holder already sees **every**\n * record of that entity through the API. `staff.timesheets.projects.manage` is\n * that feature for entries, tasks and reports: it is what makes\n * `resolveProjectAccess` answer `canManageAll: true`, which is the only state in\n * which those routes stop intersecting with the caller's project membership.\n * A project member without it gets no hits at all rather than hits for projects\n * they cannot open \u2014 the failure mode that costs a support ticket, not the one\n * that discloses a client's work.\n */\nconst UNRESTRICTED_PROJECT_ACCESS_FEATURE = 'staff.timesheets.projects.manage'\n\nfunction buildTimeTaskPresenter(t: TranslateFn, record: Record<string, unknown>): SearchResultPresenter {\n  const title =\n    pickString(record.title, record.reference) ?? (record.id as string | undefined) ?? t('staff.search.badge.timeTask', 'Task')\n  return {\n    title: String(title),\n    subtitle: formatSubtitle(record.reference, snippet(record.description, 80)),\n    icon: 'list-checks',\n    badge: t('staff.search.badge.timeTask', 'Task'),\n  }\n}\n\nfunction buildTimeReportPresenter(t: TranslateFn, record: Record<string, unknown>): SearchResultPresenter {\n  const title =\n    pickString(record.title, record.reference) ?? (record.id as string | undefined) ?? t('staff.search.badge.timeReport', 'Report')\n  return {\n    title: String(title),\n    subtitle: formatSubtitle(record.reference, record.period_from ?? record.periodFrom, record.period_to ?? record.periodTo),\n    icon: 'file-text',\n    badge: t('staff.search.badge.timeReport', 'Report'),\n  }\n}\n\nfunction buildTimeTagPresenter(t: TranslateFn, record: Record<string, unknown>): SearchResultPresenter {\n  const title =\n    pickString(record.label, record.slug) ?? (record.id as string | undefined) ?? t('staff.search.badge.timeTag', 'Tag')\n  return {\n    title: String(title),\n    subtitle: formatSubtitle(record.slug),\n    icon: 'tag',\n    badge: t('staff.search.badge.timeTag', 'Tag'),\n  }\n}\n\nfunction buildTimeEntryPresenter(t: TranslateFn, record: Record<string, unknown>): SearchResultPresenter {\n  const title = snippet(record.notes, 80) ?? t('staff.search.badge.timeEntry', 'Time entry')\n  return {\n    title,\n    subtitle: formatSubtitle(record.date, record.duration_minutes ?? record.durationMinutes),\n    icon: 'timer',\n    badge: t('staff.search.badge.timeEntry', 'Time entry'),\n  }\n}\n\nexport const searchConfig: SearchModuleConfig = {\n  entities: [\n    {\n      entityId: 'staff:staff_team',\n      aclFeatures: ['staff.view'],\n      enabled: true,\n      priority: 7,\n      buildSource: async (ctx) => {\n        const { t } = await resolveTranslations()\n        const record = ctx.record\n        const lines: string[] = []\n        appendLine(lines, 'Name', record.name ?? record.display_name ?? ctx.customFields.name)\n        appendLine(lines, 'Description', record.description ?? ctx.customFields.description)\n        appendLine(lines, 'Active', record.is_active ?? record.isActive)\n        return buildIndexSource(ctx, buildTeamPresenter(t, record, ctx.customFields), lines)\n      },\n      formatResult: async (ctx) => {\n        const { t } = await resolveTranslations()\n        return buildTeamPresenter(t, ctx.record, ctx.customFields)\n      },\n      resolveUrl: async (ctx) => `/backend/staff/teams/${encodeURIComponent(String(ctx.record.id))}/edit`,\n      fieldPolicy: {\n        searchable: ['name', 'description'],\n      },\n    },\n    {\n      entityId: 'staff:staff_team_member',\n      aclFeatures: ['staff.view'],\n      enabled: true,\n      priority: 7,\n      buildSource: async (ctx) => {\n        const { t } = await resolveTranslations()\n        const record = ctx.record\n        const lines: string[] = []\n        appendLine(lines, 'Name', record.display_name ?? record.displayName ?? ctx.customFields.display_name)\n        appendLine(lines, 'Description', record.description ?? ctx.customFields.description)\n        appendLine(lines, 'Tags', record.tags)\n        appendLine(lines, 'Active', record.is_active ?? record.isActive)\n        return buildIndexSource(ctx, buildTeamMemberPresenter(t, record, ctx.customFields), lines)\n      },\n      formatResult: async (ctx) => {\n        const { t } = await resolveTranslations()\n        return buildTeamMemberPresenter(t, ctx.record, ctx.customFields)\n      },\n      resolveUrl: async (ctx) => `/backend/staff/team-members/${encodeURIComponent(String(ctx.record.id))}`,\n      fieldPolicy: {\n        searchable: ['display_name', 'description', 'tags'],\n      },\n    },\n    {\n      entityId: 'staff:staff_team_role',\n      aclFeatures: ['staff.view'],\n      enabled: true,\n      priority: 7,\n      buildSource: async (ctx) => {\n        const { t } = await resolveTranslations()\n        const record = ctx.record\n        const lines: string[] = []\n        appendLine(lines, 'Name', record.name ?? record.display_name ?? ctx.customFields.name)\n        appendLine(lines, 'Description', record.description ?? ctx.customFields.description)\n        appendLine(lines, 'Icon', record.appearance_icon ?? record.appearanceIcon)\n        appendLine(lines, 'Color', record.appearance_color ?? record.appearanceColor)\n        return buildIndexSource(ctx, buildTeamRolePresenter(t, record, ctx.customFields), lines)\n      },\n      formatResult: async (ctx) => {\n        const { t } = await resolveTranslations()\n        return buildTeamRolePresenter(t, ctx.record, ctx.customFields)\n      },\n      resolveUrl: async (ctx) => `/backend/staff/team-roles/${encodeURIComponent(String(ctx.record.id))}/edit`,\n      fieldPolicy: {\n        searchable: ['name', 'description', 'appearance_icon', 'appearance_color'],\n      },\n    },\n    {\n      entityId: 'staff:staff_time_project',\n      aclFeatures: ['staff.timesheets.projects.view'],\n      enabled: true,\n      priority: 7,\n      buildSource: async (ctx) => {\n        const { t } = await resolveTranslations()\n        const record = ctx.record\n        const lines: string[] = []\n        appendLine(lines, 'Name', record.name)\n        appendLine(lines, 'Code', record.code)\n        appendLine(lines, 'Description', record.description)\n        appendLine(lines, 'Type', record.project_type ?? record.projectType)\n        appendLine(lines, 'Cost Center', record.cost_center ?? record.costCenter)\n        const presenter: SearchResultPresenter = {\n          title: String(record.name ?? record.id ?? t('staff.search.badge.timeProject', 'Project')),\n          subtitle: formatSubtitle(record.code, record.project_type ?? record.projectType),\n          icon: 'clock',\n          badge: t('staff.search.badge.timeProject', 'Project'),\n        }\n        return buildIndexSource(ctx, presenter, lines)\n      },\n      formatResult: async (ctx) => {\n        const { t } = await resolveTranslations()\n        return {\n          title: String(ctx.record.name ?? ctx.record.id ?? ''),\n          subtitle: formatSubtitle(ctx.record.code, ctx.record.project_type ?? ctx.record.projectType),\n          icon: 'clock',\n          badge: t('staff.search.badge.timeProject', 'Project'),\n        }\n      },\n      resolveUrl: async (ctx) => `/backend/staff/time-tracking/projects/${encodeURIComponent(String(ctx.record.id))}`,\n      fieldPolicy: {\n        searchable: ['name', 'code', 'description', 'project_type', 'cost_center'],\n      },\n    },\n    {\n      entityId: 'staff:staff_time_task',\n      aclFeatures: ['staff.timesheets.tasks.view', UNRESTRICTED_PROJECT_ACCESS_FEATURE],\n      enabled: true,\n      priority: 7,\n      buildSource: async (ctx) => {\n        const { t } = await resolveTranslations()\n        const record = ctx.record\n        const lines: string[] = []\n        appendLine(lines, 'Reference', record.reference)\n        appendLine(lines, 'Title', record.title)\n        appendLine(lines, 'Description', record.description)\n        return buildIndexSource(ctx, buildTimeTaskPresenter(t, record), lines)\n      },\n      formatResult: async (ctx) => {\n        const { t } = await resolveTranslations()\n        return buildTimeTaskPresenter(t, ctx.record)\n      },\n      resolveUrl: async (ctx) => {\n        const projectId = pickString(ctx.record.time_project_id, ctx.record.timeProjectId)\n        if (!projectId) return null\n        return `/backend/staff/time-tracking/board?projectId=${encodeURIComponent(projectId)}&task=${encodeURIComponent(String(ctx.record.id))}`\n      },\n      fieldPolicy: {\n        searchable: ['title', 'description', 'reference'],\n      },\n    },\n    {\n      entityId: 'staff:staff_time_report',\n      aclFeatures: ['staff.timesheets.reports.view', UNRESTRICTED_PROJECT_ACCESS_FEATURE],\n      enabled: true,\n      priority: 7,\n      buildSource: async (ctx) => {\n        const { t } = await resolveTranslations()\n        const record = ctx.record\n        const lines: string[] = []\n        appendLine(lines, 'Reference', record.reference)\n        appendLine(lines, 'Title', record.title)\n        appendLine(lines, 'Status', record.status)\n        return buildIndexSource(ctx, buildTimeReportPresenter(t, record), lines)\n      },\n      formatResult: async (ctx) => {\n        const { t } = await resolveTranslations()\n        return buildTimeReportPresenter(t, ctx.record)\n      },\n      resolveUrl: async (ctx) => `/backend/staff/time-tracking/reports/${encodeURIComponent(String(ctx.record.id))}`,\n      /**\n       * `total_amount` and the denormalised `customer_snapshot` are excluded, not\n       * merely left out of `searchable`: money in a time-tracking response is\n       * gated on `staff.timesheets.rates.view`, and the search pipeline has no way\n       * to apply a second feature to a subset of an indexed record's fields.\n       */\n      fieldPolicy: {\n        searchable: ['reference', 'title'],\n        excluded: ['total_amount', 'customer_snapshot'],\n      },\n    },\n    {\n      entityId: 'staff:staff_time_tag',\n      aclFeatures: ['staff.timesheets.view'],\n      enabled: true,\n      priority: 5,\n      buildSource: async (ctx) => {\n        const { t } = await resolveTranslations()\n        const record = ctx.record\n        const lines: string[] = []\n        appendLine(lines, 'Label', record.label)\n        appendLine(lines, 'Slug', record.slug)\n        return buildIndexSource(ctx, buildTimeTagPresenter(t, record), lines)\n      },\n      formatResult: async (ctx) => {\n        const { t } = await resolveTranslations()\n        return buildTimeTagPresenter(t, ctx.record)\n      },\n      /**\n       * A tag has no detail screen and the entries list deep-links only `taskId`\n       * and `ids`, so there is no honest destination to send the caller to. The\n       * presenter still answers the question a tag search asks \u2014 \"does this label\n       * exist, and what is it spelled\" \u2014 and `url` is optional in the result\n       * contract, so an unlinked hit renders rather than pointing somewhere wrong.\n       */\n      resolveUrl: async () => null,\n      fieldPolicy: {\n        searchable: ['label', 'slug'],\n      },\n    },\n    {\n      /**\n       * Entry notes are the most sensitive text time tracking holds \u2014 they are\n       * where a consultant writes what they did for a named client. The gate is\n       * therefore the strictest one the module has for entries: `staff.timesheets.view`\n       * AND `staff.timesheets.projects.manage`, the pair that makes\n       * `resolveProjectAccess` return `canManageAll`, which is the only state in\n       * which `/api/staff/timesheets/time-entries` stops narrowing to the caller's\n       * own entries plus their project memberships. A consultant with\n       * `staff.timesheets.manage_own` gets no entry hits at all \u2014 including their\n       * own \u2014 because the gate cannot express \"own\" and half a gate is worse than\n       * none.\n       */\n      entityId: 'staff:staff_time_entry',\n      aclFeatures: ['staff.timesheets.view', UNRESTRICTED_PROJECT_ACCESS_FEATURE],\n      enabled: true,\n      priority: 4,\n      buildSource: async (ctx) => {\n        const { t } = await resolveTranslations()\n        const record = ctx.record\n        const lines: string[] = []\n        appendLine(lines, 'Notes', record.notes)\n        appendLine(lines, 'Date', record.date)\n        return buildIndexSource(ctx, buildTimeEntryPresenter(t, record), lines)\n      },\n      formatResult: async (ctx) => {\n        const { t } = await resolveTranslations()\n        return buildTimeEntryPresenter(t, ctx.record)\n      },\n      resolveUrl: async (ctx) =>\n        `/backend/staff/time-tracking/entries?ids=${encodeURIComponent(String(ctx.record.id))}`,\n      fieldPolicy: {\n        searchable: ['notes'],\n        excluded: ['rate_override_amount', 'rate_currency_code'],\n      },\n    },\n  ],\n}\n\nexport default searchConfig\nexport const config = searchConfig\n"],
+  "mappings": "AAOA,SAAS,2BAA2B;AAEpC,SAAS,cAAc,YAA2C;AAChE,aAAW,aAAa,YAAY;AAClC,QAAI,OAAO,cAAc,SAAU;AACnC,UAAM,UAAU,UAAU,KAAK;AAC/B,QAAI,QAAQ,SAAS,EAAG,QAAO;AAAA,EACjC;AACA,SAAO;AACT;AAEA,SAAS,QAAQ,OAAgB,MAAM,KAAyB;AAC9D,MAAI,OAAO,UAAU,SAAU,QAAO;AACtC,QAAM,UAAU,MAAM,KAAK;AAC3B,MAAI,CAAC,QAAQ,OAAQ,QAAO;AAC5B,MAAI,QAAQ,UAAU,IAAK,QAAO;AAClC,SAAO,GAAG,QAAQ,MAAM,GAAG,MAAM,CAAC,CAAC;AACrC;AAEA,SAAS,WAAW,OAAiB,OAAe,OAAgB;AAClE,MAAI,UAAU,QAAQ,UAAU,OAAW;AAC3C,QAAM,OAAO,MAAM,QAAQ,KAAK,IAC5B,MAAM,IAAI,CAAC,SAAU,SAAS,QAAQ,SAAS,SAAY,KAAK,OAAO,IAAI,CAAE,EAAE,OAAO,OAAO,EAAE,KAAK,IAAI,IACvG,OAAO,UAAU,WAAW,KAAK,UAAU,KAAK,IAAI,OAAO,KAAK;AACrE,MAAI,CAAC,KAAK,KAAK,EAAG;AAClB,QAAM,KAAK,GAAG,KAAK,KAAK,IAAI,EAAE;AAChC;AAEA,SAAS,uBAAuB,OAAiB,cAAuC;AACtF,aAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,YAAY,GAAG;AACvD,QAAI,UAAU,QAAQ,UAAU,OAAW;AAC3C,eAAW,OAAO,IAAI,QAAQ,QAAQ,EAAE,GAAG,KAAK;AAAA,EAClD;AACF;AAEA,SAAS,kBAAkB,OAA2C;AACpE,QAAM,OAAO,MACV,IAAI,CAAC,SAAU,SAAS,QAAQ,SAAS,SAAY,KAAK,OAAO,IAAI,CAAE,EACvE,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC,EACzB,OAAO,OAAO;AACjB,MAAI,KAAK,WAAW,EAAG,QAAO;AAC9B,SAAO,KAAK,KAAK,QAAK;AACxB;AAEA,SAAS,mBACP,GACA,QACA,cACuB;AACvB,QAAM,QACJ,WAAW,OAAO,MAAM,OAAO,cAAc,OAAO,aAAa,aAAa,MAAM,aAAa,YAAY,KAC5G,OAAO,MACR,EAAE,2BAA2B,MAAM;AACrC,QAAM,cAAc,QAAQ,OAAO,eAAe,aAAa,WAAW;AAC1E,SAAO;AAAA,IACL,OAAO,OAAO,KAAK;AAAA,IACnB,UAAU,eAAe,WAAW;AAAA,IACpC,MAAM;AAAA,IACN,OAAO,EAAE,2BAA2B,MAAM;AAAA,EAC5C;AACF;AAEA,SAAS,yBACP,GACA,QACA,cACuB;AACvB,QAAM,QACJ,WAAW,OAAO,cAAc,OAAO,aAAa,OAAO,MAAM,aAAa,cAAc,aAAa,IAAI,KAC5G,OAAO,MACR,EAAE,iCAAiC,UAAU;AAC/C,QAAM,cAAc,QAAQ,OAAO,eAAe,aAAa,WAAW;AAC1E,QAAM,OAAO,MAAM,QAAQ,OAAO,IAAI,IAAI,OAAO,KAAK,KAAK,IAAI,IAAI;AACnE,SAAO;AAAA,IACL,OAAO,OAAO,KAAK;AAAA,IACnB,UAAU,eAAe,aAAa,IAAI;AAAA,IAC1C,MAAM;AAAA,IACN,OAAO,EAAE,iCAAiC,UAAU;AAAA,EACtD;AACF;AAEA,SAAS,uBACP,GACA,QACA,cACuB;AACvB,QAAM,QACJ,WAAW,OAAO,MAAM,OAAO,cAAc,OAAO,aAAa,aAAa,MAAM,aAAa,YAAY,KAC5G,OAAO,MACR,EAAE,+BAA+B,MAAM;AACzC,QAAM,cAAc,QAAQ,OAAO,eAAe,aAAa,WAAW;AAC1E,SAAO;AAAA,IACL,OAAO,OAAO,KAAK;AAAA,IACnB,UAAU,eAAe,WAAW;AAAA,IACpC,MAAM;AAAA,IACN,OAAO,EAAE,+BAA+B,MAAM;AAAA,EAChD;AACF;AAEA,SAAS,iBACP,KACA,WACA,OAC0B;AAC1B,yBAAuB,OAAO,IAAI,YAAY;AAC9C,MAAI,CAAC,MAAM,OAAQ,QAAO;AAC1B,SAAO;AAAA,IACL,MAAM;AAAA,IACN;AAAA,IACA,gBAAgB,EAAE,QAAQ,IAAI,QAAQ,cAAc,IAAI,aAAa;AAAA,EACvE;AACF;AAyBA,MAAM,sCAAsC;AAE5C,SAAS,uBAAuB,GAAgB,QAAwD;AACtG,QAAM,QACJ,WAAW,OAAO,OAAO,OAAO,SAAS,KAAM,OAAO,MAA6B,EAAE,+BAA+B,MAAM;AAC5H,SAAO;AAAA,IACL,OAAO,OAAO,KAAK;AAAA,IACnB,UAAU,eAAe,OAAO,WAAW,QAAQ,OAAO,aAAa,EAAE,CAAC;AAAA,IAC1E,MAAM;AAAA,IACN,OAAO,EAAE,+BAA+B,MAAM;AAAA,EAChD;AACF;AAEA,SAAS,yBAAyB,GAAgB,QAAwD;AACxG,QAAM,QACJ,WAAW,OAAO,OAAO,OAAO,SAAS,KAAM,OAAO,MAA6B,EAAE,iCAAiC,QAAQ;AAChI,SAAO;AAAA,IACL,OAAO,OAAO,KAAK;AAAA,IACnB,UAAU,eAAe,OAAO,WAAW,OAAO,eAAe,OAAO,YAAY,OAAO,aAAa,OAAO,QAAQ;AAAA,IACvH,MAAM;AAAA,IACN,OAAO,EAAE,iCAAiC,QAAQ;AAAA,EACpD;AACF;AAEA,SAAS,sBAAsB,GAAgB,QAAwD;AACrG,QAAM,QACJ,WAAW,OAAO,OAAO,OAAO,IAAI,KAAM,OAAO,MAA6B,EAAE,8BAA8B,KAAK;AACrH,SAAO;AAAA,IACL,OAAO,OAAO,KAAK;AAAA,IACnB,UAAU,eAAe,OAAO,IAAI;AAAA,IACpC,MAAM;AAAA,IACN,OAAO,EAAE,8BAA8B,KAAK;AAAA,EAC9C;AACF;AAEA,SAAS,wBAAwB,GAAgB,QAAwD;AACvG,QAAM,QAAQ,QAAQ,OAAO,OAAO,EAAE,KAAK,EAAE,gCAAgC,YAAY;AACzF,SAAO;AAAA,IACL;AAAA,IACA,UAAU,eAAe,OAAO,MAAM,OAAO,oBAAoB,OAAO,eAAe;AAAA,IACvF,MAAM;AAAA,IACN,OAAO,EAAE,gCAAgC,YAAY;AAAA,EACvD;AACF;AAEO,MAAM,eAAmC;AAAA,EAC9C,UAAU;AAAA,IACR;AAAA,MACE,UAAU;AAAA,MACV,aAAa,CAAC,YAAY;AAAA,MAC1B,SAAS;AAAA,MACT,UAAU;AAAA,MACV,aAAa,OAAO,QAAQ;AAC1B,cAAM,EAAE,EAAE,IAAI,MAAM,oBAAoB;AACxC,cAAM,SAAS,IAAI;AACnB,cAAM,QAAkB,CAAC;AACzB,mBAAW,OAAO,QAAQ,OAAO,QAAQ,OAAO,gBAAgB,IAAI,aAAa,IAAI;AACrF,mBAAW,OAAO,eAAe,OAAO,eAAe,IAAI,aAAa,WAAW;AACnF,mBAAW,OAAO,UAAU,OAAO,aAAa,OAAO,QAAQ;AAC/D,eAAO,iBAAiB,KAAK,mBAAmB,GAAG,QAAQ,IAAI,YAAY,GAAG,KAAK;AAAA,MACrF;AAAA,MACA,cAAc,OAAO,QAAQ;AAC3B,cAAM,EAAE,EAAE,IAAI,MAAM,oBAAoB;AACxC,eAAO,mBAAmB,GAAG,IAAI,QAAQ,IAAI,YAAY;AAAA,MAC3D;AAAA,MACA,YAAY,OAAO,QAAQ,wBAAwB,mBAAmB,OAAO,IAAI,OAAO,EAAE,CAAC,CAAC;AAAA,MAC5F,aAAa;AAAA,QACX,YAAY,CAAC,QAAQ,aAAa;AAAA,MACpC;AAAA,IACF;AAAA,IACA;AAAA,MACE,UAAU;AAAA,MACV,aAAa,CAAC,YAAY;AAAA,MAC1B,SAAS;AAAA,MACT,UAAU;AAAA,MACV,aAAa,OAAO,QAAQ;AAC1B,cAAM,EAAE,EAAE,IAAI,MAAM,oBAAoB;AACxC,cAAM,SAAS,IAAI;AACnB,cAAM,QAAkB,CAAC;AACzB,mBAAW,OAAO,QAAQ,OAAO,gBAAgB,OAAO,eAAe,IAAI,aAAa,YAAY;AACpG,mBAAW,OAAO,eAAe,OAAO,eAAe,IAAI,aAAa,WAAW;AACnF,mBAAW,OAAO,QAAQ,OAAO,IAAI;AACrC,mBAAW,OAAO,UAAU,OAAO,aAAa,OAAO,QAAQ;AAC/D,eAAO,iBAAiB,KAAK,yBAAyB,GAAG,QAAQ,IAAI,YAAY,GAAG,KAAK;AAAA,MAC3F;AAAA,MACA,cAAc,OAAO,QAAQ;AAC3B,cAAM,EAAE,EAAE,IAAI,MAAM,oBAAoB;AACxC,eAAO,yBAAyB,GAAG,IAAI,QAAQ,IAAI,YAAY;AAAA,MACjE;AAAA,MACA,YAAY,OAAO,QAAQ,+BAA+B,mBAAmB,OAAO,IAAI,OAAO,EAAE,CAAC,CAAC;AAAA,MACnG,aAAa;AAAA,QACX,YAAY,CAAC,gBAAgB,eAAe,MAAM;AAAA,MACpD;AAAA,IACF;AAAA,IACA;AAAA,MACE,UAAU;AAAA,MACV,aAAa,CAAC,YAAY;AAAA,MAC1B,SAAS;AAAA,MACT,UAAU;AAAA,MACV,aAAa,OAAO,QAAQ;AAC1B,cAAM,EAAE,EAAE,IAAI,MAAM,oBAAoB;AACxC,cAAM,SAAS,IAAI;AACnB,cAAM,QAAkB,CAAC;AACzB,mBAAW,OAAO,QAAQ,OAAO,QAAQ,OAAO,gBAAgB,IAAI,aAAa,IAAI;AACrF,mBAAW,OAAO,eAAe,OAAO,eAAe,IAAI,aAAa,WAAW;AACnF,mBAAW,OAAO,QAAQ,OAAO,mBAAmB,OAAO,cAAc;AACzE,mBAAW,OAAO,SAAS,OAAO,oBAAoB,OAAO,eAAe;AAC5E,eAAO,iBAAiB,KAAK,uBAAuB,GAAG,QAAQ,IAAI,YAAY,GAAG,KAAK;AAAA,MACzF;AAAA,MACA,cAAc,OAAO,QAAQ;AAC3B,cAAM,EAAE,EAAE,IAAI,MAAM,oBAAoB;AACxC,eAAO,uBAAuB,GAAG,IAAI,QAAQ,IAAI,YAAY;AAAA,MAC/D;AAAA,MACA,YAAY,OAAO,QAAQ,6BAA6B,mBAAmB,OAAO,IAAI,OAAO,EAAE,CAAC,CAAC;AAAA,MACjG,aAAa;AAAA,QACX,YAAY,CAAC,QAAQ,eAAe,mBAAmB,kBAAkB;AAAA,MAC3E;AAAA,IACF;AAAA,IACA;AAAA,MACE,UAAU;AAAA,MACV,aAAa,CAAC,gCAAgC;AAAA,MAC9C,SAAS;AAAA,MACT,UAAU;AAAA,MACV,aAAa,OAAO,QAAQ;AAC1B,cAAM,EAAE,EAAE,IAAI,MAAM,oBAAoB;AACxC,cAAM,SAAS,IAAI;AACnB,cAAM,QAAkB,CAAC;AACzB,mBAAW,OAAO,QAAQ,OAAO,IAAI;AACrC,mBAAW,OAAO,QAAQ,OAAO,IAAI;AACrC,mBAAW,OAAO,eAAe,OAAO,WAAW;AACnD,mBAAW,OAAO,QAAQ,OAAO,gBAAgB,OAAO,WAAW;AACnE,mBAAW,OAAO,eAAe,OAAO,eAAe,OAAO,UAAU;AACxE,cAAM,YAAmC;AAAA,UACvC,OAAO,OAAO,OAAO,QAAQ,OAAO,MAAM,EAAE,kCAAkC,SAAS,CAAC;AAAA,UACxF,UAAU,eAAe,OAAO,MAAM,OAAO,gBAAgB,OAAO,WAAW;AAAA,UAC/E,MAAM;AAAA,UACN,OAAO,EAAE,kCAAkC,SAAS;AAAA,QACtD;AACA,eAAO,iBAAiB,KAAK,WAAW,KAAK;AAAA,MAC/C;AAAA,MACA,cAAc,OAAO,QAAQ;AAC3B,cAAM,EAAE,EAAE,IAAI,MAAM,oBAAoB;AACxC,eAAO;AAAA,UACL,OAAO,OAAO,IAAI,OAAO,QAAQ,IAAI,OAAO,MAAM,EAAE;AAAA,UACpD,UAAU,eAAe,IAAI,OAAO,MAAM,IAAI,OAAO,gBAAgB,IAAI,OAAO,WAAW;AAAA,UAC3F,MAAM;AAAA,UACN,OAAO,EAAE,kCAAkC,SAAS;AAAA,QACtD;AAAA,MACF;AAAA,MACA,YAAY,OAAO,QAAQ,yCAAyC,mBAAmB,OAAO,IAAI,OAAO,EAAE,CAAC,CAAC;AAAA,MAC7G,aAAa;AAAA,QACX,YAAY,CAAC,QAAQ,QAAQ,eAAe,gBAAgB,aAAa;AAAA,MAC3E;AAAA,IACF;AAAA,IACA;AAAA,MACE,UAAU;AAAA,MACV,aAAa,CAAC,+BAA+B,mCAAmC;AAAA,MAChF,SAAS;AAAA,MACT,UAAU;AAAA,MACV,aAAa,OAAO,QAAQ;AAC1B,cAAM,EAAE,EAAE,IAAI,MAAM,oBAAoB;AACxC,cAAM,SAAS,IAAI;AACnB,cAAM,QAAkB,CAAC;AACzB,mBAAW,OAAO,aAAa,OAAO,SAAS;AAC/C,mBAAW,OAAO,SAAS,OAAO,KAAK;AACvC,mBAAW,OAAO,eAAe,OAAO,WAAW;AACnD,eAAO,iBAAiB,KAAK,uBAAuB,GAAG,MAAM,GAAG,KAAK;AAAA,MACvE;AAAA,MACA,cAAc,OAAO,QAAQ;AAC3B,cAAM,EAAE,EAAE,IAAI,MAAM,oBAAoB;AACxC,eAAO,uBAAuB,GAAG,IAAI,MAAM;AAAA,MAC7C;AAAA,MACA,YAAY,OAAO,QAAQ;AACzB,cAAM,YAAY,WAAW,IAAI,OAAO,iBAAiB,IAAI,OAAO,aAAa;AACjF,YAAI,CAAC,UAAW,QAAO;AACvB,eAAO,gDAAgD,mBAAmB,SAAS,CAAC,SAAS,mBAAmB,OAAO,IAAI,OAAO,EAAE,CAAC,CAAC;AAAA,MACxI;AAAA,MACA,aAAa;AAAA,QACX,YAAY,CAAC,SAAS,eAAe,WAAW;AAAA,MAClD;AAAA,IACF;AAAA,IACA;AAAA,MACE,UAAU;AAAA,MACV,aAAa,CAAC,iCAAiC,mCAAmC;AAAA,MAClF,SAAS;AAAA,MACT,UAAU;AAAA,MACV,aAAa,OAAO,QAAQ;AAC1B,cAAM,EAAE,EAAE,IAAI,MAAM,oBAAoB;AACxC,cAAM,SAAS,IAAI;AACnB,cAAM,QAAkB,CAAC;AACzB,mBAAW,OAAO,aAAa,OAAO,SAAS;AAC/C,mBAAW,OAAO,SAAS,OAAO,KAAK;AACvC,mBAAW,OAAO,UAAU,OAAO,MAAM;AACzC,eAAO,iBAAiB,KAAK,yBAAyB,GAAG,MAAM,GAAG,KAAK;AAAA,MACzE;AAAA,MACA,cAAc,OAAO,QAAQ;AAC3B,cAAM,EAAE,EAAE,IAAI,MAAM,oBAAoB;AACxC,eAAO,yBAAyB,GAAG,IAAI,MAAM;AAAA,MAC/C;AAAA,MACA,YAAY,OAAO,QAAQ,wCAAwC,mBAAmB,OAAO,IAAI,OAAO,EAAE,CAAC,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAO5G,aAAa;AAAA,QACX,YAAY,CAAC,aAAa,OAAO;AAAA,QACjC,UAAU,CAAC,gBAAgB,mBAAmB;AAAA,MAChD;AAAA,IACF;AAAA,IACA;AAAA,MACE,UAAU;AAAA,MACV,aAAa,CAAC,uBAAuB;AAAA,MACrC,SAAS;AAAA,MACT,UAAU;AAAA,MACV,aAAa,OAAO,QAAQ;AAC1B,cAAM,EAAE,EAAE,IAAI,MAAM,oBAAoB;AACxC,cAAM,SAAS,IAAI;AACnB,cAAM,QAAkB,CAAC;AACzB,mBAAW,OAAO,SAAS,OAAO,KAAK;AACvC,mBAAW,OAAO,QAAQ,OAAO,IAAI;AACrC,eAAO,iBAAiB,KAAK,sBAAsB,GAAG,MAAM,GAAG,KAAK;AAAA,MACtE;AAAA,MACA,cAAc,OAAO,QAAQ;AAC3B,cAAM,EAAE,EAAE,IAAI,MAAM,oBAAoB;AACxC,eAAO,sBAAsB,GAAG,IAAI,MAAM;AAAA,MAC5C;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAQA,YAAY,YAAY;AAAA,MACxB,aAAa;AAAA,QACX,YAAY,CAAC,SAAS,MAAM;AAAA,MAC9B;AAAA,IACF;AAAA,IACA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAaE,UAAU;AAAA,MACV,aAAa,CAAC,yBAAyB,mCAAmC;AAAA,MAC1E,SAAS;AAAA,MACT,UAAU;AAAA,MACV,aAAa,OAAO,QAAQ;AAC1B,cAAM,EAAE,EAAE,IAAI,MAAM,oBAAoB;AACxC,cAAM,SAAS,IAAI;AACnB,cAAM,QAAkB,CAAC;AACzB,mBAAW,OAAO,SAAS,OAAO,KAAK;AACvC,mBAAW,OAAO,QAAQ,OAAO,IAAI;AACrC,eAAO,iBAAiB,KAAK,wBAAwB,GAAG,MAAM,GAAG,KAAK;AAAA,MACxE;AAAA,MACA,cAAc,OAAO,QAAQ;AAC3B,cAAM,EAAE,EAAE,IAAI,MAAM,oBAAoB;AACxC,eAAO,wBAAwB,GAAG,IAAI,MAAM;AAAA,MAC9C;AAAA,MACA,YAAY,OAAO,QACjB,4CAA4C,mBAAmB,OAAO,IAAI,OAAO,EAAE,CAAC,CAAC;AAAA,MACvF,aAAa;AAAA,QACX,YAAY,CAAC,OAAO;AAAA,QACpB,UAAU,CAAC,wBAAwB,oBAAoB;AAAA,MACzD;AAAA,IACF;AAAA,EACF;AACF;AAEA,IAAO,iBAAQ;AACR,MAAM,SAAS;",
   "names": []
 }

package/dist/modules/staff/setup.js

@@ -1,5 +1,6 @@
 import { appendWidgetsToRoles } from "@open-mercato/core/modules/dashboards/lib/role-widgets";
 import { seedStaffAddressTypes, seedStaffTeamExamples } from "./lib/seeds.js";
+import { seedStaffTimeTrackingExamples } from "./lib/timeTrackingSeeds.js";
 const TIMESHEETS_DASHBOARD_WIDGET_IDS = [
   "staff.timesheets.timeReporting",
   "staff.timesheets.hoursByProject"
@@ -18,6 +19,7 @@ const setup = {
   seedExamples: async (ctx) => {
     const scope = { tenantId: ctx.tenantId, organizationId: ctx.organizationId };
     await seedStaffTeamExamples(ctx.em, scope);
+    await seedStaffTimeTrackingExamples(ctx.em, scope);
   },
   defaultRoleFeatures: {
     admin: ["staff.*", "staff.leave_requests.manage"],
@@ -29,8 +31,25 @@ const setup = {
       "staff.my_leave_requests.send",
       "staff.timesheets.view",
       "staff.timesheets.manage_own",
-      "staff.timesheets.projects.view"
+      "staff.timesheets.projects.view",
+      "staff.timesheets.tasks.view",
+      "staff.timesheets.tasks.manage",
+      "staff.timesheets.rates.view"
     ]
+  },
+  /**
+   * EP-50. `portal.time_reports.view` is a **customer** feature, granted through
+   * `CustomerRoleAcl`, and it is deliberately absent from `acl.ts` — that file is
+   * the staff feature catalog and the two namespaces are graded by different RBAC
+   * services.
+   *
+   * `viewer` gets it as well as `buyer`: reading the hours already delivered is a
+   * read, and a client who may see their invoices may see what they paid for.
+   * `portal_admin` holds `portal.*` and needs no entry.
+   */
+  defaultCustomerRoleFeatures: {
+    buyer: ["portal.time_reports.view"],
+    viewer: ["portal.time_reports.view"]
   }
 };
 var setup_default = setup;

package/dist/modules/staff/setup.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../src/modules/staff/setup.ts"],
-  "sourcesContent": ["import type { ModuleSetupConfig } from '@open-mercato/shared/modules/setup'\nimport { appendWidgetsToRoles } from '@open-mercato/core/modules/dashboards/lib/role-widgets'\nimport { seedStaffAddressTypes, seedStaffTeamExamples } from './lib/seeds'\n\nconst TIMESHEETS_DASHBOARD_WIDGET_IDS = [\n  'staff.timesheets.timeReporting',\n  'staff.timesheets.hoursByProject',\n]\n\nexport const setup: ModuleSetupConfig = {\n  seedDefaults: async (ctx) => {\n    const scope = { tenantId: ctx.tenantId, organizationId: ctx.organizationId }\n    await seedStaffAddressTypes(ctx.em, scope)\n    await appendWidgetsToRoles(ctx.em, {\n      tenantId: ctx.tenantId,\n      organizationId: ctx.organizationId,\n      roleNames: ['superadmin', 'admin', 'employee'],\n      widgetIds: TIMESHEETS_DASHBOARD_WIDGET_IDS,\n    })\n  },\n\n  seedExamples: async (ctx) => {\n    const scope = { tenantId: ctx.tenantId, organizationId: ctx.organizationId }\n    await seedStaffTeamExamples(ctx.em, scope)\n  },\n\n  defaultRoleFeatures: {\n    admin: ['staff.*', 'staff.leave_requests.manage'],\n    employee: [\n      'staff.leave_requests.send',\n      'staff.my_availability.view',\n      'staff.my_availability.manage',\n      'staff.my_leave_requests.view',\n      'staff.my_leave_requests.send',\n      'staff.timesheets.view',\n      'staff.timesheets.manage_own',\n      'staff.timesheets.projects.view',\n    ],\n  },\n}\n\nexport default setup\n"],
-  "mappings": "AACA,SAAS,4BAA4B;AACrC,SAAS,uBAAuB,6BAA6B;AAE7D,MAAM,kCAAkC;AAAA,EACtC;AAAA,EACA;AACF;AAEO,MAAM,QAA2B;AAAA,EACtC,cAAc,OAAO,QAAQ;AAC3B,UAAM,QAAQ,EAAE,UAAU,IAAI,UAAU,gBAAgB,IAAI,eAAe;AAC3E,UAAM,sBAAsB,IAAI,IAAI,KAAK;AACzC,UAAM,qBAAqB,IAAI,IAAI;AAAA,MACjC,UAAU,IAAI;AAAA,MACd,gBAAgB,IAAI;AAAA,MACpB,WAAW,CAAC,cAAc,SAAS,UAAU;AAAA,MAC7C,WAAW;AAAA,IACb,CAAC;AAAA,EACH;AAAA,EAEA,cAAc,OAAO,QAAQ;AAC3B,UAAM,QAAQ,EAAE,UAAU,IAAI,UAAU,gBAAgB,IAAI,eAAe;AAC3E,UAAM,sBAAsB,IAAI,IAAI,KAAK;AAAA,EAC3C;AAAA,EAEA,qBAAqB;AAAA,IACnB,OAAO,CAAC,WAAW,6BAA6B;AAAA,IAChD,UAAU;AAAA,MACR;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AACF;AAEA,IAAO,gBAAQ;",
+  "sourcesContent": ["import type { ModuleSetupConfig } from '@open-mercato/shared/modules/setup'\nimport { appendWidgetsToRoles } from '@open-mercato/core/modules/dashboards/lib/role-widgets'\nimport { seedStaffAddressTypes, seedStaffTeamExamples } from './lib/seeds'\nimport { seedStaffTimeTrackingExamples } from './lib/timeTrackingSeeds'\n\nconst TIMESHEETS_DASHBOARD_WIDGET_IDS = [\n  'staff.timesheets.timeReporting',\n  'staff.timesheets.hoursByProject',\n]\n\nexport const setup: ModuleSetupConfig = {\n  seedDefaults: async (ctx) => {\n    const scope = { tenantId: ctx.tenantId, organizationId: ctx.organizationId }\n    await seedStaffAddressTypes(ctx.em, scope)\n    await appendWidgetsToRoles(ctx.em, {\n      tenantId: ctx.tenantId,\n      organizationId: ctx.organizationId,\n      roleNames: ['superadmin', 'admin', 'employee'],\n      widgetIds: TIMESHEETS_DASHBOARD_WIDGET_IDS,\n    })\n  },\n\n  seedExamples: async (ctx) => {\n    const scope = { tenantId: ctx.tenantId, organizationId: ctx.organizationId }\n    await seedStaffTeamExamples(ctx.em, scope)\n    // Runs after the team examples because every project it staffs, every task it\n    // assigns and every hour it logs points at a staff member those seeds create.\n    await seedStaffTimeTrackingExamples(ctx.em, scope)\n  },\n\n  defaultRoleFeatures: {\n    admin: ['staff.*', 'staff.leave_requests.manage'],\n    employee: [\n      'staff.leave_requests.send',\n      'staff.my_availability.view',\n      'staff.my_availability.manage',\n      'staff.my_leave_requests.view',\n      'staff.my_leave_requests.send',\n      'staff.timesheets.view',\n      'staff.timesheets.manage_own',\n      'staff.timesheets.projects.view',\n      'staff.timesheets.tasks.view',\n      'staff.timesheets.tasks.manage',\n      'staff.timesheets.rates.view',\n    ],\n  },\n\n  /**\n   * EP-50. `portal.time_reports.view` is a **customer** feature, granted through\n   * `CustomerRoleAcl`, and it is deliberately absent from `acl.ts` \u2014 that file is\n   * the staff feature catalog and the two namespaces are graded by different RBAC\n   * services.\n   *\n   * `viewer` gets it as well as `buyer`: reading the hours already delivered is a\n   * read, and a client who may see their invoices may see what they paid for.\n   * `portal_admin` holds `portal.*` and needs no entry.\n   */\n  defaultCustomerRoleFeatures: {\n    buyer: ['portal.time_reports.view'],\n    viewer: ['portal.time_reports.view'],\n  },\n}\n\nexport default setup\n"],
+  "mappings": "AACA,SAAS,4BAA4B;AACrC,SAAS,uBAAuB,6BAA6B;AAC7D,SAAS,qCAAqC;AAE9C,MAAM,kCAAkC;AAAA,EACtC;AAAA,EACA;AACF;AAEO,MAAM,QAA2B;AAAA,EACtC,cAAc,OAAO,QAAQ;AAC3B,UAAM,QAAQ,EAAE,UAAU,IAAI,UAAU,gBAAgB,IAAI,eAAe;AAC3E,UAAM,sBAAsB,IAAI,IAAI,KAAK;AACzC,UAAM,qBAAqB,IAAI,IAAI;AAAA,MACjC,UAAU,IAAI;AAAA,MACd,gBAAgB,IAAI;AAAA,MACpB,WAAW,CAAC,cAAc,SAAS,UAAU;AAAA,MAC7C,WAAW;AAAA,IACb,CAAC;AAAA,EACH;AAAA,EAEA,cAAc,OAAO,QAAQ;AAC3B,UAAM,QAAQ,EAAE,UAAU,IAAI,UAAU,gBAAgB,IAAI,eAAe;AAC3E,UAAM,sBAAsB,IAAI,IAAI,KAAK;AAGzC,UAAM,8BAA8B,IAAI,IAAI,KAAK;AAAA,EACnD;AAAA,EAEA,qBAAqB;AAAA,IACnB,OAAO,CAAC,WAAW,6BAA6B;AAAA,IAChD,UAAU;AAAA,MACR;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAYA,6BAA6B;AAAA,IAC3B,OAAO,CAAC,0BAA0B;AAAA,IAClC,QAAQ,CAAC,0BAA0B;AAAA,EACrC;AACF;AAEA,IAAO,gBAAQ;",
   "names": []
 }