@open-mercato/core 0.7.1-develop.7178.1.ab93fbaf4e → 0.7.1-develop.7180.1.9717fbbb43

package/dist/modules/staff/subscribers/time-project-access-requested-notification.js

@@ -0,0 +1,68 @@
+import { createLogger } from "@open-mercato/shared/lib/logger";
+import { resolveNotificationService } from "../../notifications/lib/notificationService.js";
+import { buildFeatureNotificationFromType } from "../../notifications/lib/notificationBuilder.js";
+import { notificationTypes } from "../notifications.js";
+import { MANAGE_PROJECTS_FEATURE } from "../lib/time-tracking/access.js";
+const logger = createLogger("staff").child({ component: "subscribers/time-project-access-requested" });
+const NOTIFICATION_TYPE = "staff.timesheets.project_access.requested";
+const PROJECTS_LIST_HREF = "/backend/staff/time-tracking/projects";
+const metadata = {
+  event: "staff.timesheets.project_access.requested",
+  persistent: true,
+  id: "staff:time-project-access-requested-notification"
+};
+function buildProjectAccessRequestLinkHref(input) {
+  if (!input.timeProjectId) return PROJECTS_LIST_HREF;
+  const projectSegment = encodeURIComponent(input.timeProjectId);
+  const requesterParam = encodeURIComponent(input.requesterUserId);
+  return `${PROJECTS_LIST_HREF}/${projectSegment}?panel=team&requesterUserId=${requesterParam}`;
+}
+function buildProjectAccessRequestGroupKey(input) {
+  return `staff:time-project-access:${input.requesterUserId}:${input.timeProjectId ?? "general"}`;
+}
+async function handle(payload, ctx) {
+  try {
+    if (!payload?.tenantId || !payload?.requesterUserId) return;
+    const typeDef = notificationTypes.find((type) => type.type === NOTIFICATION_TYPE);
+    if (!typeDef) return;
+    const notificationService = resolveNotificationService(ctx);
+    const requesterName = payload.requesterName?.trim() || payload.requesterUserId;
+    const timeProjectId = payload.timeProjectId ?? null;
+    const notificationInput = buildFeatureNotificationFromType(typeDef, {
+      requiredFeature: MANAGE_PROJECTS_FEATURE,
+      bodyVariables: {
+        requesterName,
+        ...payload.timeProjectName ? { projectName: payload.timeProjectName } : {}
+      },
+      sourceEntityType: "staff:time_project",
+      sourceEntityId: timeProjectId ?? void 0,
+      linkHref: buildProjectAccessRequestLinkHref({
+        requesterUserId: payload.requesterUserId,
+        timeProjectId
+      }),
+      groupKey: buildProjectAccessRequestGroupKey({
+        requesterUserId: payload.requesterUserId,
+        timeProjectId
+      })
+    });
+    await notificationService.createForFeature(
+      { ...notificationInput, restrictRecipientsToOrganization: true },
+      {
+        tenantId: payload.tenantId,
+        organizationId: payload.organizationId ?? null
+      }
+    );
+  } catch (err) {
+    logger.error("Failed to create the project access request notification", {
+      subscriber: metadata.id,
+      err
+    });
+  }
+}
+export {
+  buildProjectAccessRequestGroupKey,
+  buildProjectAccessRequestLinkHref,
+  handle as default,
+  metadata
+};
+//# sourceMappingURL=time-project-access-requested-notification.js.map

package/dist/modules/staff/subscribers/time-project-access-requested-notification.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/staff/subscribers/time-project-access-requested-notification.ts"],
+  "sourcesContent": ["import { createLogger } from '@open-mercato/shared/lib/logger'\nimport { resolveNotificationService } from '../../notifications/lib/notificationService'\nimport { buildFeatureNotificationFromType } from '../../notifications/lib/notificationBuilder'\nimport { notificationTypes } from '../notifications'\nimport { MANAGE_PROJECTS_FEATURE } from '../lib/time-tracking/access'\n\nconst logger = createLogger('staff').child({ component: 'subscribers/time-project-access-requested' })\n\nconst NOTIFICATION_TYPE = 'staff.timesheets.project_access.requested'\nconst PROJECTS_LIST_HREF = '/backend/staff/time-tracking/projects'\n\nexport const metadata = {\n  event: 'staff.timesheets.project_access.requested',\n  persistent: true,\n  id: 'staff:time-project-access-requested-notification',\n}\n\nexport type ProjectAccessRequestedPayload = {\n  tenantId: string\n  organizationId?: string | null\n  requesterUserId: string\n  requesterName?: string | null\n  timeProjectId?: string | null\n  timeProjectName?: string | null\n  requestedAt?: string\n}\n\ntype ResolverContext = {\n  resolve: <T = unknown>(name: string) => T\n}\n\n/**\n * Spec D-6: the notification action opens the project team drawer with the\n * requester pre-selected, so a Team Leader grants access without hunting for\n * the row. A general request carries no project, so it lands on the list.\n */\nexport function buildProjectAccessRequestLinkHref(input: {\n  requesterUserId: string\n  timeProjectId?: string | null\n}): string {\n  if (!input.timeProjectId) return PROJECTS_LIST_HREF\n  const projectSegment = encodeURIComponent(input.timeProjectId)\n  const requesterParam = encodeURIComponent(input.requesterUserId)\n  return `${PROJECTS_LIST_HREF}/${projectSegment}?panel=team&requesterUserId=${requesterParam}`\n}\n\nexport function buildProjectAccessRequestGroupKey(input: {\n  requesterUserId: string\n  timeProjectId?: string | null\n}): string {\n  return `staff:time-project-access:${input.requesterUserId}:${input.timeProjectId ?? 'general'}`\n}\n\nexport default async function handle(payload: ProjectAccessRequestedPayload, ctx: ResolverContext) {\n  try {\n    if (!payload?.tenantId || !payload?.requesterUserId) return\n    const typeDef = notificationTypes.find((type) => type.type === NOTIFICATION_TYPE)\n    if (!typeDef) return\n\n    const notificationService = resolveNotificationService(ctx)\n    const requesterName = payload.requesterName?.trim() || payload.requesterUserId\n    const timeProjectId = payload.timeProjectId ?? null\n\n    const notificationInput = buildFeatureNotificationFromType(typeDef, {\n      requiredFeature: MANAGE_PROJECTS_FEATURE,\n      bodyVariables: {\n        requesterName,\n        ...(payload.timeProjectName ? { projectName: payload.timeProjectName } : {}),\n      },\n      sourceEntityType: 'staff:time_project',\n      sourceEntityId: timeProjectId ?? undefined,\n      linkHref: buildProjectAccessRequestLinkHref({\n        requesterUserId: payload.requesterUserId,\n        timeProjectId,\n      }),\n      groupKey: buildProjectAccessRequestGroupKey({\n        requesterUserId: payload.requesterUserId,\n        timeProjectId,\n      }),\n    })\n\n    await notificationService.createForFeature(\n      { ...notificationInput, restrictRecipientsToOrganization: true },\n      {\n        tenantId: payload.tenantId,\n        organizationId: payload.organizationId ?? null,\n      },\n    )\n  } catch (err) {\n    logger.error('Failed to create the project access request notification', {\n      subscriber: metadata.id,\n      err,\n    })\n  }\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,kCAAkC;AAC3C,SAAS,wCAAwC;AACjD,SAAS,yBAAyB;AAClC,SAAS,+BAA+B;AAExC,MAAM,SAAS,aAAa,OAAO,EAAE,MAAM,EAAE,WAAW,4CAA4C,CAAC;AAErG,MAAM,oBAAoB;AAC1B,MAAM,qBAAqB;AAEpB,MAAM,WAAW;AAAA,EACtB,OAAO;AAAA,EACP,YAAY;AAAA,EACZ,IAAI;AACN;AAqBO,SAAS,kCAAkC,OAGvC;AACT,MAAI,CAAC,MAAM,cAAe,QAAO;AACjC,QAAM,iBAAiB,mBAAmB,MAAM,aAAa;AAC7D,QAAM,iBAAiB,mBAAmB,MAAM,eAAe;AAC/D,SAAO,GAAG,kBAAkB,IAAI,cAAc,+BAA+B,cAAc;AAC7F;AAEO,SAAS,kCAAkC,OAGvC;AACT,SAAO,6BAA6B,MAAM,eAAe,IAAI,MAAM,iBAAiB,SAAS;AAC/F;AAEA,eAAO,OAA8B,SAAwC,KAAsB;AACjG,MAAI;AACF,QAAI,CAAC,SAAS,YAAY,CAAC,SAAS,gBAAiB;AACrD,UAAM,UAAU,kBAAkB,KAAK,CAAC,SAAS,KAAK,SAAS,iBAAiB;AAChF,QAAI,CAAC,QAAS;AAEd,UAAM,sBAAsB,2BAA2B,GAAG;AAC1D,UAAM,gBAAgB,QAAQ,eAAe,KAAK,KAAK,QAAQ;AAC/D,UAAM,gBAAgB,QAAQ,iBAAiB;AAE/C,UAAM,oBAAoB,iCAAiC,SAAS;AAAA,MAClE,iBAAiB;AAAA,MACjB,eAAe;AAAA,QACb;AAAA,QACA,GAAI,QAAQ,kBAAkB,EAAE,aAAa,QAAQ,gBAAgB,IAAI,CAAC;AAAA,MAC5E;AAAA,MACA,kBAAkB;AAAA,MAClB,gBAAgB,iBAAiB;AAAA,MACjC,UAAU,kCAAkC;AAAA,QAC1C,iBAAiB,QAAQ;AAAA,QACzB;AAAA,MACF,CAAC;AAAA,MACD,UAAU,kCAAkC;AAAA,QAC1C,iBAAiB,QAAQ;AAAA,QACzB;AAAA,MACF,CAAC;AAAA,IACH,CAAC;AAED,UAAM,oBAAoB;AAAA,MACxB,EAAE,GAAG,mBAAmB,kCAAkC,KAAK;AAAA,MAC/D;AAAA,QACE,UAAU,QAAQ;AAAA,QAClB,gBAAgB,QAAQ,kBAAkB;AAAA,MAC5C;AAAA,IACF;AAAA,EACF,SAAS,KAAK;AACZ,WAAO,MAAM,4DAA4D;AAAA,MACvE,YAAY,SAAS;AAAA,MACrB;AAAA,IACF,CAAC;AAAA,EACH;AACF;",
+  "names": []
+}

package/dist/modules/staff/subscribers/time-project-budget-threshold-notification.js

@@ -0,0 +1,149 @@
+import { createLogger } from "@open-mercato/shared/lib/logger";
+import { resolveNotificationService } from "../../notifications/lib/notificationService.js";
+import {
+  buildFeatureNotificationFromType,
+  buildNotificationFromType
+} from "../../notifications/lib/notificationBuilder.js";
+import { notificationTypes } from "../notifications.js";
+import { emitStaffEvent } from "../events.js";
+import { MANAGE_PROJECTS_FEATURE } from "../lib/time-tracking/access.js";
+import { computeProjectFinancials } from "../lib/timesheets-projects/computeProjectFinancials.js";
+import { FULL_BUDGET_PERCENT, evaluateBudgetThreshold } from "../lib/timesheets-projects/budgetThreshold.js";
+import {
+  claimBudgetThresholdAlert,
+  loadTimeProjectBudgetStateForEntry
+} from "../lib/timesheets-projects/budgetThresholdState.js";
+const logger = createLogger("staff").child({ component: "subscribers/time-project-budget-threshold" });
+const NOTIFICATION_TYPE = "staff.timesheets.time_project.budget_threshold_reached";
+const PROJECTS_LIST_HREF = "/backend/staff/time-tracking/projects";
+const metadata = {
+  event: "staff.timesheets.time_entry.*",
+  persistent: true,
+  id: "staff:time-project-budget-threshold-notification"
+};
+function buildBudgetThresholdLinkHref(timeProjectId) {
+  return `${PROJECTS_LIST_HREF}/${encodeURIComponent(timeProjectId)}`;
+}
+function buildBudgetThresholdGroupKey(input) {
+  return `staff:time-project-budget:${input.timeProjectId}:${input.thresholdPercent}`;
+}
+function resolveBudgetThresholdSeverity(thresholdPercent) {
+  return thresholdPercent >= FULL_BUDGET_PERCENT ? "error" : "warning";
+}
+async function handle(payload, ctx) {
+  try {
+    const timeEntryId = payload?.id ?? null;
+    const tenantId = payload?.tenantId ?? null;
+    const organizationId = payload?.organizationId ?? null;
+    if (!timeEntryId || !tenantId || !organizationId) return;
+    const typeDef = notificationTypes.find((type) => type.type === NOTIFICATION_TYPE);
+    if (!typeDef) return;
+    const em = ctx.resolve("em").fork();
+    const project = await loadTimeProjectBudgetStateForEntry({ em, tenantId, organizationId, timeEntryId });
+    if (!project) return;
+    if (project.budgetKind === "none" && project.budgetAlertedAtPercent === null) return;
+    const financials = await computeProjectFinancials({
+      em,
+      tenantId,
+      organizationId,
+      projectIds: [project.timeProjectId],
+      hourlyRateByProjectId: /* @__PURE__ */ new Map([[project.timeProjectId, project.hourlyRate]])
+    });
+    const totals = financials.get(project.timeProjectId);
+    const evaluation = evaluateBudgetThreshold({
+      budgetKind: project.budgetKind,
+      budgetValue: project.budgetValue,
+      budgetWarnAtPercent: project.budgetWarnAtPercent,
+      budgetAlertedAtPercent: project.budgetAlertedAtPercent,
+      totalMinutes: totals?.totalMinutes ?? 0,
+      cost: totals?.cost ?? null,
+      currencyCode: project.currencyCode
+    });
+    if (!evaluation.shouldPersistAlertedAt) return;
+    const claimed = await claimBudgetThresholdAlert({
+      em,
+      tenantId,
+      organizationId,
+      timeProjectId: project.timeProjectId,
+      expectedAlertedAtPercent: project.budgetAlertedAtPercent,
+      nextAlertedAtPercent: evaluation.nextAlertedAtPercent
+    });
+    if (!claimed) return;
+    const thresholdPercent = evaluation.crossedThresholdPercent;
+    if (thresholdPercent === null) return;
+    const budgetIsMoney = evaluation.kind === "amount";
+    await emitStaffEvent(
+      "staff.timesheets.time_project.budget_threshold_reached",
+      {
+        id: project.timeProjectId,
+        timeProjectId: project.timeProjectId,
+        tenantId,
+        organizationId,
+        thresholdPercent,
+        percent: evaluation.percent,
+        budgetKind: evaluation.kind,
+        ...budgetIsMoney ? {} : { budgetValue: evaluation.budgetValue, usedValue: evaluation.usedValue }
+      },
+      { persistent: true }
+    );
+    const notificationService = resolveNotificationService(ctx);
+    const scope = { tenantId, organizationId };
+    const severity = resolveBudgetThresholdSeverity(thresholdPercent);
+    const commonOptions = {
+      bodyVariables: {
+        projectName: project.name || project.timeProjectId,
+        percent: String(evaluation.percent ?? 0),
+        thresholdPercent: String(thresholdPercent)
+      },
+      sourceEntityType: "staff:time_project",
+      sourceEntityId: project.timeProjectId,
+      linkHref: buildBudgetThresholdLinkHref(project.timeProjectId),
+      groupKey: buildBudgetThresholdGroupKey({ timeProjectId: project.timeProjectId, thresholdPercent })
+    };
+    const featureNotifications = await notificationService.createForFeature(
+      {
+        ...buildFeatureNotificationFromType(typeDef, {
+          ...commonOptions,
+          requiredFeature: MANAGE_PROJECTS_FEATURE
+        }),
+        severity,
+        restrictRecipientsToOrganization: true
+      },
+      scope
+    );
+    const ownerUserId = project.ownerUserId;
+    if (!ownerUserId) return;
+    const ownerAlreadyNotified = featureNotifications.some(
+      (notification) => notification?.recipientUserId === ownerUserId
+    );
+    if (ownerAlreadyNotified) return;
+    try {
+      await notificationService.create(
+        {
+          ...buildNotificationFromType(typeDef, { ...commonOptions, recipientUserId: ownerUserId }),
+          severity
+        },
+        scope
+      );
+    } catch (err) {
+      logger.warn("Skipped the budget threshold notification for an out-of-scope project owner", {
+        subscriber: metadata.id,
+        timeProjectId: project.timeProjectId,
+        err
+      });
+    }
+  } catch (err) {
+    logger.error("Failed to evaluate the time project budget threshold", {
+      subscriber: metadata.id,
+      err
+    });
+  }
+}
+export {
+  buildBudgetThresholdGroupKey,
+  buildBudgetThresholdLinkHref,
+  handle as default,
+  metadata,
+  resolveBudgetThresholdSeverity
+};
+//# sourceMappingURL=time-project-budget-threshold-notification.js.map

package/dist/modules/staff/subscribers/time-project-budget-threshold-notification.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/staff/subscribers/time-project-budget-threshold-notification.ts"],
+  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport type { NotificationSeverity } from '@open-mercato/shared/modules/notifications/types'\nimport { resolveNotificationService } from '../../notifications/lib/notificationService'\nimport {\n  buildFeatureNotificationFromType,\n  buildNotificationFromType,\n} from '../../notifications/lib/notificationBuilder'\nimport { notificationTypes } from '../notifications'\nimport { emitStaffEvent } from '../events'\nimport { MANAGE_PROJECTS_FEATURE } from '../lib/time-tracking/access'\nimport { computeProjectFinancials } from '../lib/timesheets-projects/computeProjectFinancials'\nimport { FULL_BUDGET_PERCENT, evaluateBudgetThreshold } from '../lib/timesheets-projects/budgetThreshold'\nimport {\n  claimBudgetThresholdAlert,\n  loadTimeProjectBudgetStateForEntry,\n} from '../lib/timesheets-projects/budgetThresholdState'\n\nconst logger = createLogger('staff').child({ component: 'subscribers/time-project-budget-threshold' })\n\nconst NOTIFICATION_TYPE = 'staff.timesheets.time_project.budget_threshold_reached'\nconst PROJECTS_LIST_HREF = '/backend/staff/time-tracking/projects'\n\n/**\n * Every write that can move a project's logged minutes or cost travels as a\n * `staff.timesheets.time_entry.*` event, but not all of them by the same route:\n *\n *  - create / update / delete (soft) are emitted by the time-entry **commands**\n *    through `staffTimeEntryCrudEvents` (`lib/crud.ts`), which the CRUD route and\n *    `/copy-day` and `/[id]/duplicate` all drive;\n *  - `/bulk` emits the same config itself, once per changed row, because it writes\n *    through the EntityManager instead of the command bus;\n *  - the timer transitions emit `\u2026timer_started` / `\u2026timer_stopped` explicitly.\n *\n * All of those carry the `{ id, tenantId, organizationId }` payload this handler\n * needs. The batch-level members of the family \u2014 `\u2026bulk_updated`, `\u2026locked`,\n * `\u2026unlocked` \u2014 deliberately carry no `id` and fall out at the guard below, because\n * the per-row events of the same write already covered every affected project.\n *\n * Subscribing to the family rather than three exact ids is what keeps a future write\n * path from silently skipping the budget check.\n *\n * `persistent: true`: this ends in a user-visible alert about money and hours\n * already spent. It has to survive a worker restart and be retried on failure \u2014 an\n * ephemeral subscription would drop the alert whenever the process handling the\n * entry write went away, and nothing would ever raise it again.\n */\nexport const metadata = {\n  event: 'staff.timesheets.time_entry.*',\n  persistent: true,\n  id: 'staff:time-project-budget-threshold-notification',\n}\n\nexport type TimeEntryWritePayload = {\n  id?: string | null\n  tenantId?: string | null\n  organizationId?: string | null\n}\n\ntype ResolverContext = {\n  resolve: <T = unknown>(name: string) => T\n}\n\nexport function buildBudgetThresholdLinkHref(timeProjectId: string): string {\n  return `${PROJECTS_LIST_HREF}/${encodeURIComponent(timeProjectId)}`\n}\n\n/**\n * One group key per project AND threshold, so the 80% alert and the 100% alert are\n * two separate items in the bell, while a retry of the same crossing refreshes the\n * existing item instead of stacking a duplicate.\n */\nexport function buildBudgetThresholdGroupKey(input: {\n  timeProjectId: string\n  thresholdPercent: number\n}): string {\n  return `staff:time-project-budget:${input.timeProjectId}:${input.thresholdPercent}`\n}\n\nexport function resolveBudgetThresholdSeverity(thresholdPercent: number): NotificationSeverity {\n  return thresholdPercent >= FULL_BUDGET_PERCENT ? 'error' : 'warning'\n}\n\nexport default async function handle(payload: TimeEntryWritePayload, ctx: ResolverContext) {\n  try {\n    const timeEntryId = payload?.id ?? null\n    const tenantId = payload?.tenantId ?? null\n    const organizationId = payload?.organizationId ?? null\n    if (!timeEntryId || !tenantId || !organizationId) return\n\n    const typeDef = notificationTypes.find((type) => type.type === NOTIFICATION_TYPE)\n    if (!typeDef) return\n\n    const em = (ctx.resolve('em') as EntityManager).fork()\n    const project = await loadTimeProjectBudgetStateForEntry({ em, tenantId, organizationId, timeEntryId })\n    if (!project) return\n    // A project without a budget never notifies. It is also the common case, so it\n    // exits before the aggregate query \u2014 unless a stale marker from a budget that\n    // has since been switched off still needs clearing.\n    if (project.budgetKind === 'none' && project.budgetAlertedAtPercent === null) return\n\n    const financials = await computeProjectFinancials({\n      em,\n      tenantId,\n      organizationId,\n      projectIds: [project.timeProjectId],\n      hourlyRateByProjectId: new Map([[project.timeProjectId, project.hourlyRate]]),\n    })\n    const totals = financials.get(project.timeProjectId)\n\n    const evaluation = evaluateBudgetThreshold({\n      budgetKind: project.budgetKind,\n      budgetValue: project.budgetValue,\n      budgetWarnAtPercent: project.budgetWarnAtPercent,\n      budgetAlertedAtPercent: project.budgetAlertedAtPercent,\n      totalMinutes: totals?.totalMinutes ?? 0,\n      cost: totals?.cost ?? null,\n      currencyCode: project.currencyCode,\n    })\n\n    if (!evaluation.shouldPersistAlertedAt) return\n\n    // Compare-and-swap on the marker: the loser of a race between two concurrent\n    // entry writes stops here, so a threshold is announced exactly once. The marker\n    // is written before the alert, which makes this at-most-once by design \u2014 a\n    // repeated alert about the same crossing is worse than a missed retry.\n    const claimed = await claimBudgetThresholdAlert({\n      em,\n      tenantId,\n      organizationId,\n      timeProjectId: project.timeProjectId,\n      expectedAlertedAtPercent: project.budgetAlertedAtPercent,\n      nextAlertedAtPercent: evaluation.nextAlertedAtPercent,\n    })\n    if (!claimed) return\n\n    const thresholdPercent = evaluation.crossedThresholdPercent\n    // The marker moved down (usage fell back under the band it was raised for) or\n    // the budget was switched off. Nothing to announce; the reset is the point.\n    if (thresholdPercent === null) return\n\n    // This event is `clientBroadcast: true`, and the DOM Event Bridge filters only by\n    // tenant and organization \u2014 every signed-in user of the organization receives the\n    // payload, whether or not they hold `staff.timesheets.rates.view`. An `amount`\n    // budget states money (`budgetValue` is the contract value, `usedValue` the cost\n    // burned against it), so those two are carried only for an `hours` budget, exactly\n    // as `/my-work` withholds an amount budget from a caller who may not see money.\n    // The percentages are not money and are what a live budget badge actually renders.\n    const budgetIsMoney = evaluation.kind === 'amount'\n    await emitStaffEvent(\n      'staff.timesheets.time_project.budget_threshold_reached',\n      {\n        id: project.timeProjectId,\n        timeProjectId: project.timeProjectId,\n        tenantId,\n        organizationId,\n        thresholdPercent,\n        percent: evaluation.percent,\n        budgetKind: evaluation.kind,\n        ...(budgetIsMoney ? {} : { budgetValue: evaluation.budgetValue, usedValue: evaluation.usedValue }),\n      },\n      { persistent: true },\n    )\n\n    const notificationService = resolveNotificationService(ctx)\n    const scope = { tenantId, organizationId }\n    const severity = resolveBudgetThresholdSeverity(thresholdPercent)\n    const commonOptions = {\n      bodyVariables: {\n        projectName: project.name || project.timeProjectId,\n        percent: String(evaluation.percent ?? 0),\n        thresholdPercent: String(thresholdPercent),\n      },\n      sourceEntityType: 'staff:time_project',\n      sourceEntityId: project.timeProjectId,\n      linkHref: buildBudgetThresholdLinkHref(project.timeProjectId),\n      groupKey: buildBudgetThresholdGroupKey({ timeProjectId: project.timeProjectId, thresholdPercent }),\n    }\n\n    // Manage-feature holders are resolved through the notification service's feature\n    // fan-out, which matches grants with the shared feature policy \u2014 a `staff.*`\n    // wildcard counts \u2014 and then re-checks each candidate against this organization\n    // through the RBAC service.\n    const featureNotifications = await notificationService.createForFeature(\n      {\n        ...buildFeatureNotificationFromType(typeDef, {\n          ...commonOptions,\n          requiredFeature: MANAGE_PROJECTS_FEATURE,\n        }),\n        severity,\n        restrictRecipientsToOrganization: true,\n      },\n      scope,\n    )\n\n    const ownerUserId = project.ownerUserId\n    if (!ownerUserId) return\n    const ownerAlreadyNotified = featureNotifications.some(\n      (notification) => notification?.recipientUserId === ownerUserId,\n    )\n    if (ownerAlreadyNotified) return\n\n    // The owner is notified even without the manage feature \u2014 it is their project's\n    // budget. An owner who has left the scope is not an error worth failing on.\n    try {\n      await notificationService.create(\n        {\n          ...buildNotificationFromType(typeDef, { ...commonOptions, recipientUserId: ownerUserId }),\n          severity,\n        },\n        scope,\n      )\n    } catch (err) {\n      logger.warn('Skipped the budget threshold notification for an out-of-scope project owner', {\n        subscriber: metadata.id,\n        timeProjectId: project.timeProjectId,\n        err,\n      })\n    }\n  } catch (err) {\n    logger.error('Failed to evaluate the time project budget threshold', {\n      subscriber: metadata.id,\n      err,\n    })\n  }\n}\n"],
+  "mappings": "AACA,SAAS,oBAAoB;AAE7B,SAAS,kCAAkC;AAC3C;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,yBAAyB;AAClC,SAAS,sBAAsB;AAC/B,SAAS,+BAA+B;AACxC,SAAS,gCAAgC;AACzC,SAAS,qBAAqB,+BAA+B;AAC7D;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAEP,MAAM,SAAS,aAAa,OAAO,EAAE,MAAM,EAAE,WAAW,4CAA4C,CAAC;AAErG,MAAM,oBAAoB;AAC1B,MAAM,qBAAqB;AA0BpB,MAAM,WAAW;AAAA,EACtB,OAAO;AAAA,EACP,YAAY;AAAA,EACZ,IAAI;AACN;AAYO,SAAS,6BAA6B,eAA+B;AAC1E,SAAO,GAAG,kBAAkB,IAAI,mBAAmB,aAAa,CAAC;AACnE;AAOO,SAAS,6BAA6B,OAGlC;AACT,SAAO,6BAA6B,MAAM,aAAa,IAAI,MAAM,gBAAgB;AACnF;AAEO,SAAS,+BAA+B,kBAAgD;AAC7F,SAAO,oBAAoB,sBAAsB,UAAU;AAC7D;AAEA,eAAO,OAA8B,SAAgC,KAAsB;AACzF,MAAI;AACF,UAAM,cAAc,SAAS,MAAM;AACnC,UAAM,WAAW,SAAS,YAAY;AACtC,UAAM,iBAAiB,SAAS,kBAAkB;AAClD,QAAI,CAAC,eAAe,CAAC,YAAY,CAAC,eAAgB;AAElD,UAAM,UAAU,kBAAkB,KAAK,CAAC,SAAS,KAAK,SAAS,iBAAiB;AAChF,QAAI,CAAC,QAAS;AAEd,UAAM,KAAM,IAAI,QAAQ,IAAI,EAAoB,KAAK;AACrD,UAAM,UAAU,MAAM,mCAAmC,EAAE,IAAI,UAAU,gBAAgB,YAAY,CAAC;AACtG,QAAI,CAAC,QAAS;AAId,QAAI,QAAQ,eAAe,UAAU,QAAQ,2BAA2B,KAAM;AAE9E,UAAM,aAAa,MAAM,yBAAyB;AAAA,MAChD;AAAA,MACA;AAAA,MACA;AAAA,MACA,YAAY,CAAC,QAAQ,aAAa;AAAA,MAClC,uBAAuB,oBAAI,IAAI,CAAC,CAAC,QAAQ,eAAe,QAAQ,UAAU,CAAC,CAAC;AAAA,IAC9E,CAAC;AACD,UAAM,SAAS,WAAW,IAAI,QAAQ,aAAa;AAEnD,UAAM,aAAa,wBAAwB;AAAA,MACzC,YAAY,QAAQ;AAAA,MACpB,aAAa,QAAQ;AAAA,MACrB,qBAAqB,QAAQ;AAAA,MAC7B,wBAAwB,QAAQ;AAAA,MAChC,cAAc,QAAQ,gBAAgB;AAAA,MACtC,MAAM,QAAQ,QAAQ;AAAA,MACtB,cAAc,QAAQ;AAAA,IACxB,CAAC;AAED,QAAI,CAAC,WAAW,uBAAwB;AAMxC,UAAM,UAAU,MAAM,0BAA0B;AAAA,MAC9C;AAAA,MACA;AAAA,MACA;AAAA,MACA,eAAe,QAAQ;AAAA,MACvB,0BAA0B,QAAQ;AAAA,MAClC,sBAAsB,WAAW;AAAA,IACnC,CAAC;AACD,QAAI,CAAC,QAAS;AAEd,UAAM,mBAAmB,WAAW;AAGpC,QAAI,qBAAqB,KAAM;AAS/B,UAAM,gBAAgB,WAAW,SAAS;AAC1C,UAAM;AAAA,MACJ;AAAA,MACA;AAAA,QACE,IAAI,QAAQ;AAAA,QACZ,eAAe,QAAQ;AAAA,QACvB;AAAA,QACA;AAAA,QACA;AAAA,QACA,SAAS,WAAW;AAAA,QACpB,YAAY,WAAW;AAAA,QACvB,GAAI,gBAAgB,CAAC,IAAI,EAAE,aAAa,WAAW,aAAa,WAAW,WAAW,UAAU;AAAA,MAClG;AAAA,MACA,EAAE,YAAY,KAAK;AAAA,IACrB;AAEA,UAAM,sBAAsB,2BAA2B,GAAG;AAC1D,UAAM,QAAQ,EAAE,UAAU,eAAe;AACzC,UAAM,WAAW,+BAA+B,gBAAgB;AAChE,UAAM,gBAAgB;AAAA,MACpB,eAAe;AAAA,QACb,aAAa,QAAQ,QAAQ,QAAQ;AAAA,QACrC,SAAS,OAAO,WAAW,WAAW,CAAC;AAAA,QACvC,kBAAkB,OAAO,gBAAgB;AAAA,MAC3C;AAAA,MACA,kBAAkB;AAAA,MAClB,gBAAgB,QAAQ;AAAA,MACxB,UAAU,6BAA6B,QAAQ,aAAa;AAAA,MAC5D,UAAU,6BAA6B,EAAE,eAAe,QAAQ,eAAe,iBAAiB,CAAC;AAAA,IACnG;AAMA,UAAM,uBAAuB,MAAM,oBAAoB;AAAA,MACrD;AAAA,QACE,GAAG,iCAAiC,SAAS;AAAA,UAC3C,GAAG;AAAA,UACH,iBAAiB;AAAA,QACnB,CAAC;AAAA,QACD;AAAA,QACA,kCAAkC;AAAA,MACpC;AAAA,MACA;AAAA,IACF;AAEA,UAAM,cAAc,QAAQ;AAC5B,QAAI,CAAC,YAAa;AAClB,UAAM,uBAAuB,qBAAqB;AAAA,MAChD,CAAC,iBAAiB,cAAc,oBAAoB;AAAA,IACtD;AACA,QAAI,qBAAsB;AAI1B,QAAI;AACF,YAAM,oBAAoB;AAAA,QACxB;AAAA,UACE,GAAG,0BAA0B,SAAS,EAAE,GAAG,eAAe,iBAAiB,YAAY,CAAC;AAAA,UACxF;AAAA,QACF;AAAA,QACA;AAAA,MACF;AAAA,IACF,SAAS,KAAK;AACZ,aAAO,KAAK,+EAA+E;AAAA,QACzF,YAAY,SAAS;AAAA,QACrB,eAAe,QAAQ;AAAA,QACvB;AAAA,MACF,CAAC;AAAA,IACH;AAAA,EACF,SAAS,KAAK;AACZ,WAAO,MAAM,wDAAwD;AAAA,MACnE,YAAY,SAAS;AAAA,MACrB;AAAA,IACF,CAAC;AAAA,EACH;AACF;",
+  "names": []
+}

package/dist/modules/staff/subscribers/time-report-approved-notification.js

@@ -0,0 +1,78 @@
+import { createLogger } from "@open-mercato/shared/lib/logger";
+import { findOneWithDecryption } from "@open-mercato/shared/lib/encryption/find";
+import { resolveNotificationService } from "../../notifications/lib/notificationService.js";
+import { buildNotificationFromType } from "../../notifications/lib/notificationBuilder.js";
+import { notificationTypes } from "../notifications.js";
+import { StaffTimeReport } from "../data/entities.js";
+const logger = createLogger("staff").child({ component: "subscribers/time-report-approved" });
+const NOTIFICATION_TYPE = "staff.timesheets.time_report.approved";
+const REPORTS_LIST_HREF = "/backend/staff/time-tracking/reports";
+const metadata = {
+  event: "staff.timesheets.time_report.closed",
+  persistent: true,
+  id: "staff:time-report-approved-notification"
+};
+function buildTimeReportLinkHref(reportId) {
+  return `${REPORTS_LIST_HREF}/${encodeURIComponent(reportId)}`;
+}
+function buildTimeReportApprovedGroupKey(reportId) {
+  return `staff:time-report-approved:${reportId}`;
+}
+function readId(...candidates) {
+  for (const candidate of candidates) {
+    if (typeof candidate !== "string") continue;
+    const trimmed = candidate.trim();
+    if (trimmed.length > 0) return trimmed;
+  }
+  return null;
+}
+async function handle(payload, ctx) {
+  try {
+    const reportId = readId(payload?.reportId, payload?.id);
+    const tenantId = readId(payload?.tenantId);
+    const organizationId = readId(payload?.organizationId);
+    if (!reportId || !tenantId || !organizationId) return;
+    const typeDef = notificationTypes.find((entry) => entry.type === NOTIFICATION_TYPE);
+    if (!typeDef) return;
+    const em = ctx.resolve("em").fork();
+    const scope = { tenantId, organizationId };
+    const report = await findOneWithDecryption(
+      em,
+      StaffTimeReport,
+      { id: reportId, tenantId, organizationId, deletedAt: null },
+      {},
+      scope
+    );
+    if (!report) return;
+    const recipientUserId = readId(report.createdByUserId);
+    if (!recipientUserId) return;
+    if (recipientUserId === readId(report.closedByUserId, payload?.closedByUserId)) return;
+    const notificationService = resolveNotificationService(ctx);
+    await notificationService.create(
+      buildNotificationFromType(typeDef, {
+        recipientUserId,
+        bodyVariables: {
+          reference: report.reference,
+          title: report.title
+        },
+        sourceEntityType: "staff:time_report",
+        sourceEntityId: report.id,
+        linkHref: buildTimeReportLinkHref(report.id),
+        groupKey: buildTimeReportApprovedGroupKey(report.id)
+      }),
+      scope
+    );
+  } catch (err) {
+    logger.error("Failed to raise the time report approved notification", {
+      subscriber: metadata.id,
+      err
+    });
+  }
+}
+export {
+  buildTimeReportApprovedGroupKey,
+  buildTimeReportLinkHref,
+  handle as default,
+  metadata
+};
+//# sourceMappingURL=time-report-approved-notification.js.map

package/dist/modules/staff/subscribers/time-report-approved-notification.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/staff/subscribers/time-report-approved-notification.ts"],
+  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { resolveNotificationService } from '../../notifications/lib/notificationService'\nimport { buildNotificationFromType } from '../../notifications/lib/notificationBuilder'\nimport { notificationTypes } from '../notifications'\nimport { StaffTimeReport } from '../data/entities'\n\nconst logger = createLogger('staff').child({ component: 'subscribers/time-report-approved' })\n\nconst NOTIFICATION_TYPE = 'staff.timesheets.time_report.approved'\nconst REPORTS_LIST_HREF = '/backend/staff/time-tracking/reports'\n\n/**\n * EP-48. Closing a report IS its approval in this module: the close freezes every\n * per-entry rate and amount, locks the entries against further edits, and is\n * gated on `staff.timesheets.lock`. There is no separate \"approved\" transition to\n * subscribe to, and adding one would be a behaviour change, not an extension\n * point \u2014 so this subscribes to the close and announces it to the one person who\n * otherwise finds out by reopening the screen: whoever drafted the report.\n *\n * The closer is deliberately not notified about their own action, and a report\n * with no recorded author is a normal outcome (a seeded or imported report), not\n * an error.\n *\n * `persistent: true` \u2014 a report closing is a billing milestone; the alert has to\n * survive a worker restart and be retried, the same reasoning as the budget\n * threshold subscriber next to it.\n */\nexport const metadata = {\n  event: 'staff.timesheets.time_report.closed',\n  persistent: true,\n  id: 'staff:time-report-approved-notification',\n}\n\nexport type TimeReportClosedPayload = {\n  id?: string | null\n  reportId?: string | null\n  reference?: string | null\n  tenantId?: string | null\n  organizationId?: string | null\n  closedByUserId?: string | null\n}\n\ntype ResolverContext = {\n  resolve: <T = unknown>(name: string) => T\n}\n\nexport function buildTimeReportLinkHref(reportId: string): string {\n  return `${REPORTS_LIST_HREF}/${encodeURIComponent(reportId)}`\n}\n\n/** One item per report, so a re-close after an unlock refreshes rather than stacks. */\nexport function buildTimeReportApprovedGroupKey(reportId: string): string {\n  return `staff:time-report-approved:${reportId}`\n}\n\nfunction readId(...candidates: Array<unknown>): string | null {\n  for (const candidate of candidates) {\n    if (typeof candidate !== 'string') continue\n    const trimmed = candidate.trim()\n    if (trimmed.length > 0) return trimmed\n  }\n  return null\n}\n\nexport default async function handle(\n  payload: TimeReportClosedPayload,\n  ctx: ResolverContext,\n): Promise<void> {\n  try {\n    const reportId = readId(payload?.reportId, payload?.id)\n    const tenantId = readId(payload?.tenantId)\n    const organizationId = readId(payload?.organizationId)\n    if (!reportId || !tenantId || !organizationId) return\n\n    const typeDef = notificationTypes.find((entry) => entry.type === NOTIFICATION_TYPE)\n    if (!typeDef) return\n\n    const em = ctx.resolve<EntityManager>('em').fork()\n    const scope = { tenantId, organizationId }\n    const report = await findOneWithDecryption(\n      em,\n      StaffTimeReport,\n      { id: reportId, tenantId, organizationId, deletedAt: null },\n      {},\n      scope,\n    )\n    if (!report) return\n\n    const recipientUserId = readId(report.createdByUserId)\n    if (!recipientUserId) return\n    if (recipientUserId === readId(report.closedByUserId, payload?.closedByUserId)) return\n\n    const notificationService = resolveNotificationService(ctx)\n    await notificationService.create(\n      buildNotificationFromType(typeDef, {\n        recipientUserId,\n        bodyVariables: {\n          reference: report.reference,\n          title: report.title,\n        },\n        sourceEntityType: 'staff:time_report',\n        sourceEntityId: report.id,\n        linkHref: buildTimeReportLinkHref(report.id),\n        groupKey: buildTimeReportApprovedGroupKey(report.id),\n      }),\n      scope,\n    )\n  } catch (err) {\n    logger.error('Failed to raise the time report approved notification', {\n      subscriber: metadata.id,\n      err,\n    })\n  }\n}\n"],
+  "mappings": "AACA,SAAS,oBAAoB;AAC7B,SAAS,6BAA6B;AACtC,SAAS,kCAAkC;AAC3C,SAAS,iCAAiC;AAC1C,SAAS,yBAAyB;AAClC,SAAS,uBAAuB;AAEhC,MAAM,SAAS,aAAa,OAAO,EAAE,MAAM,EAAE,WAAW,mCAAmC,CAAC;AAE5F,MAAM,oBAAoB;AAC1B,MAAM,oBAAoB;AAkBnB,MAAM,WAAW;AAAA,EACtB,OAAO;AAAA,EACP,YAAY;AAAA,EACZ,IAAI;AACN;AAeO,SAAS,wBAAwB,UAA0B;AAChE,SAAO,GAAG,iBAAiB,IAAI,mBAAmB,QAAQ,CAAC;AAC7D;AAGO,SAAS,gCAAgC,UAA0B;AACxE,SAAO,8BAA8B,QAAQ;AAC/C;AAEA,SAAS,UAAU,YAA2C;AAC5D,aAAW,aAAa,YAAY;AAClC,QAAI,OAAO,cAAc,SAAU;AACnC,UAAM,UAAU,UAAU,KAAK;AAC/B,QAAI,QAAQ,SAAS,EAAG,QAAO;AAAA,EACjC;AACA,SAAO;AACT;AAEA,eAAO,OACL,SACA,KACe;AACf,MAAI;AACF,UAAM,WAAW,OAAO,SAAS,UAAU,SAAS,EAAE;AACtD,UAAM,WAAW,OAAO,SAAS,QAAQ;AACzC,UAAM,iBAAiB,OAAO,SAAS,cAAc;AACrD,QAAI,CAAC,YAAY,CAAC,YAAY,CAAC,eAAgB;AAE/C,UAAM,UAAU,kBAAkB,KAAK,CAAC,UAAU,MAAM,SAAS,iBAAiB;AAClF,QAAI,CAAC,QAAS;AAEd,UAAM,KAAK,IAAI,QAAuB,IAAI,EAAE,KAAK;AACjD,UAAM,QAAQ,EAAE,UAAU,eAAe;AACzC,UAAM,SAAS,MAAM;AAAA,MACnB;AAAA,MACA;AAAA,MACA,EAAE,IAAI,UAAU,UAAU,gBAAgB,WAAW,KAAK;AAAA,MAC1D,CAAC;AAAA,MACD;AAAA,IACF;AACA,QAAI,CAAC,OAAQ;AAEb,UAAM,kBAAkB,OAAO,OAAO,eAAe;AACrD,QAAI,CAAC,gBAAiB;AACtB,QAAI,oBAAoB,OAAO,OAAO,gBAAgB,SAAS,cAAc,EAAG;AAEhF,UAAM,sBAAsB,2BAA2B,GAAG;AAC1D,UAAM,oBAAoB;AAAA,MACxB,0BAA0B,SAAS;AAAA,QACjC;AAAA,QACA,eAAe;AAAA,UACb,WAAW,OAAO;AAAA,UAClB,OAAO,OAAO;AAAA,QAChB;AAAA,QACA,kBAAkB;AAAA,QAClB,gBAAgB,OAAO;AAAA,QACvB,UAAU,wBAAwB,OAAO,EAAE;AAAA,QAC3C,UAAU,gCAAgC,OAAO,EAAE;AAAA,MACrD,CAAC;AAAA,MACD;AAAA,IACF;AAAA,EACF,SAAS,KAAK;AACZ,WAAO,MAAM,yDAAyD;AAAA,MACpE,YAAY,SAAS;AAAA,MACrB;AAAA,IACF,CAAC;AAAA,EACH;AACF;",
+  "names": []
+}

package/dist/modules/staff/subscribers/time-report-portal-broadcast.js

@@ -0,0 +1,78 @@
+import { createLogger } from "@open-mercato/shared/lib/logger";
+import { findOneWithDecryption } from "@open-mercato/shared/lib/encryption/find";
+import { emitStaffEvent } from "../events.js";
+import { StaffTimeReport } from "../data/entities.js";
+import { resolvePortalRecipientUserIds } from "../lib/time-tracking/portalRecipients.js";
+const logger = createLogger("staff").child({ component: "subscribers/time-report-portal-broadcast" });
+const metadata = {
+  event: "staff.timesheets.time_report.closed",
+  persistent: true,
+  id: "staff:time-report-portal-broadcast"
+};
+function readId(...candidates) {
+  for (const candidate of candidates) {
+    if (typeof candidate !== "string") continue;
+    const trimmed = candidate.trim();
+    if (trimmed.length > 0) return trimmed;
+  }
+  return null;
+}
+function toIsoDate(value) {
+  if (value instanceof Date) {
+    if (Number.isNaN(value.getTime())) return null;
+    return value.toISOString().slice(0, 10);
+  }
+  if (typeof value === "string" && value.trim().length > 0) return value.trim().slice(0, 10);
+  return null;
+}
+async function handle(payload, ctx) {
+  try {
+    const reportId = readId(payload?.reportId, payload?.id);
+    const tenantId = readId(payload?.tenantId);
+    const organizationId = readId(payload?.organizationId);
+    if (!reportId || !tenantId || !organizationId) return;
+    const em = ctx.resolve("em").fork();
+    const report = await findOneWithDecryption(
+      em,
+      StaffTimeReport,
+      { id: reportId, tenantId, organizationId, deletedAt: null },
+      {},
+      { tenantId, organizationId }
+    );
+    if (!report || report.status !== "closed") return;
+    const customerId = readId(report.customerId);
+    if (!customerId) return;
+    const recipientUserIds = await resolvePortalRecipientUserIds(em, {
+      tenantId,
+      organizationId,
+      customerId
+    });
+    if (recipientUserIds.length === 0) return;
+    const periodFrom = toIsoDate(report.periodFrom);
+    const periodTo = toIsoDate(report.periodTo);
+    if (!periodFrom || !periodTo) return;
+    await emitStaffEvent(
+      "staff.timesheets.time_report.portal_published",
+      {
+        id: report.id,
+        tenantId,
+        organizationId,
+        reference: report.reference,
+        periodFrom,
+        periodTo,
+        recipientUserIds
+      },
+      { persistent: true }
+    );
+  } catch (err) {
+    logger.error("Failed to publish a closed time report to the customer portal", {
+      subscriber: metadata.id,
+      err
+    });
+  }
+}
+export {
+  handle as default,
+  metadata
+};
+//# sourceMappingURL=time-report-portal-broadcast.js.map

package/dist/modules/staff/subscribers/time-report-portal-broadcast.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/staff/subscribers/time-report-portal-broadcast.ts"],
+  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { emitStaffEvent } from '../events'\nimport { StaffTimeReport } from '../data/entities'\nimport { resolvePortalRecipientUserIds } from '../lib/time-tracking/portalRecipients'\n\nconst logger = createLogger('staff').child({ component: 'subscribers/time-report-portal-broadcast' })\n\n/**\n * EP-06 / EP-50. Mirrors a closed report to the customer portal \u2014 and is the only\n * emitter of `staff.timesheets.time_report.portal_published`.\n *\n * The glue lives here, in an optional consumer, rather than in the close command,\n * because resolving \"which portal users belong to this customer\" reads a\n * `customer_accounts` table. As a subscriber it is skippable: if the query fails\n * the recipient list is empty and nothing is emitted, so a deployment without the\n * portal installed behaves exactly as it did before.\n *\n * Two invariants this file exists to hold:\n *\n *  1. **No recipients, no event.** The portal SSE stream falls back to an\n *     organization-wide audience for a payload with no `recipientUserIds`, and one\n *     organization serves many customers. Emitting an unpinned report event would\n *     be a cross-customer disclosure.\n *  2. **No money on the wire.** The payload carries the reference and the period\n *     only. Amounts are gated on `staff.timesheets.rates.view`, which SSE cannot\n *     apply, and a portal user never holds it in any case.\n *\n * `persistent: true`: a client-visible publication should survive a worker restart.\n */\nexport const metadata = {\n  event: 'staff.timesheets.time_report.closed',\n  persistent: true,\n  id: 'staff:time-report-portal-broadcast',\n}\n\nexport type TimeReportClosedPayload = {\n  id?: string | null\n  reportId?: string | null\n  tenantId?: string | null\n  organizationId?: string | null\n}\n\ntype ResolverContext = {\n  resolve: <T = unknown>(name: string) => T\n}\n\nfunction readId(...candidates: Array<unknown>): string | null {\n  for (const candidate of candidates) {\n    if (typeof candidate !== 'string') continue\n    const trimmed = candidate.trim()\n    if (trimmed.length > 0) return trimmed\n  }\n  return null\n}\n\nfunction toIsoDate(value: unknown): string | null {\n  if (value instanceof Date) {\n    if (Number.isNaN(value.getTime())) return null\n    return value.toISOString().slice(0, 10)\n  }\n  if (typeof value === 'string' && value.trim().length > 0) return value.trim().slice(0, 10)\n  return null\n}\n\nexport default async function handle(\n  payload: TimeReportClosedPayload,\n  ctx: ResolverContext,\n): Promise<void> {\n  try {\n    const reportId = readId(payload?.reportId, payload?.id)\n    const tenantId = readId(payload?.tenantId)\n    const organizationId = readId(payload?.organizationId)\n    if (!reportId || !tenantId || !organizationId) return\n\n    const em = ctx.resolve<EntityManager>('em').fork()\n    const report = await findOneWithDecryption(\n      em,\n      StaffTimeReport,\n      { id: reportId, tenantId, organizationId, deletedAt: null },\n      {},\n      { tenantId, organizationId },\n    )\n    if (!report || report.status !== 'closed') return\n\n    const customerId = readId(report.customerId)\n    if (!customerId) return\n\n    const recipientUserIds = await resolvePortalRecipientUserIds(em, {\n      tenantId,\n      organizationId,\n      customerId,\n    })\n    if (recipientUserIds.length === 0) return\n\n    const periodFrom = toIsoDate(report.periodFrom)\n    const periodTo = toIsoDate(report.periodTo)\n    if (!periodFrom || !periodTo) return\n\n    await emitStaffEvent(\n      'staff.timesheets.time_report.portal_published',\n      {\n        id: report.id,\n        tenantId,\n        organizationId,\n        reference: report.reference,\n        periodFrom,\n        periodTo,\n        recipientUserIds,\n      },\n      { persistent: true },\n    )\n  } catch (err) {\n    logger.error('Failed to publish a closed time report to the customer portal', {\n      subscriber: metadata.id,\n      err,\n    })\n  }\n}\n"],
+  "mappings": "AACA,SAAS,oBAAoB;AAC7B,SAAS,6BAA6B;AACtC,SAAS,sBAAsB;AAC/B,SAAS,uBAAuB;AAChC,SAAS,qCAAqC;AAE9C,MAAM,SAAS,aAAa,OAAO,EAAE,MAAM,EAAE,WAAW,2CAA2C,CAAC;AAwB7F,MAAM,WAAW;AAAA,EACtB,OAAO;AAAA,EACP,YAAY;AAAA,EACZ,IAAI;AACN;AAaA,SAAS,UAAU,YAA2C;AAC5D,aAAW,aAAa,YAAY;AAClC,QAAI,OAAO,cAAc,SAAU;AACnC,UAAM,UAAU,UAAU,KAAK;AAC/B,QAAI,QAAQ,SAAS,EAAG,QAAO;AAAA,EACjC;AACA,SAAO;AACT;AAEA,SAAS,UAAU,OAA+B;AAChD,MAAI,iBAAiB,MAAM;AACzB,QAAI,OAAO,MAAM,MAAM,QAAQ,CAAC,EAAG,QAAO;AAC1C,WAAO,MAAM,YAAY,EAAE,MAAM,GAAG,EAAE;AAAA,EACxC;AACA,MAAI,OAAO,UAAU,YAAY,MAAM,KAAK,EAAE,SAAS,EAAG,QAAO,MAAM,KAAK,EAAE,MAAM,GAAG,EAAE;AACzF,SAAO;AACT;AAEA,eAAO,OACL,SACA,KACe;AACf,MAAI;AACF,UAAM,WAAW,OAAO,SAAS,UAAU,SAAS,EAAE;AACtD,UAAM,WAAW,OAAO,SAAS,QAAQ;AACzC,UAAM,iBAAiB,OAAO,SAAS,cAAc;AACrD,QAAI,CAAC,YAAY,CAAC,YAAY,CAAC,eAAgB;AAE/C,UAAM,KAAK,IAAI,QAAuB,IAAI,EAAE,KAAK;AACjD,UAAM,SAAS,MAAM;AAAA,MACnB;AAAA,MACA;AAAA,MACA,EAAE,IAAI,UAAU,UAAU,gBAAgB,WAAW,KAAK;AAAA,MAC1D,CAAC;AAAA,MACD,EAAE,UAAU,eAAe;AAAA,IAC7B;AACA,QAAI,CAAC,UAAU,OAAO,WAAW,SAAU;AAE3C,UAAM,aAAa,OAAO,OAAO,UAAU;AAC3C,QAAI,CAAC,WAAY;AAEjB,UAAM,mBAAmB,MAAM,8BAA8B,IAAI;AAAA,MAC/D;AAAA,MACA;AAAA,MACA;AAAA,IACF,CAAC;AACD,QAAI,iBAAiB,WAAW,EAAG;AAEnC,UAAM,aAAa,UAAU,OAAO,UAAU;AAC9C,UAAM,WAAW,UAAU,OAAO,QAAQ;AAC1C,QAAI,CAAC,cAAc,CAAC,SAAU;AAE9B,UAAM;AAAA,MACJ;AAAA,MACA;AAAA,QACE,IAAI,OAAO;AAAA,QACX;AAAA,QACA;AAAA,QACA,WAAW,OAAO;AAAA,QAClB;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,MACA,EAAE,YAAY,KAAK;AAAA,IACrB;AAAA,EACF,SAAS,KAAK;AACZ,WAAO,MAAM,iEAAiE;AAAA,MAC5E,YAAY,SAAS;AAAA,MACrB;AAAA,IACF,CAAC;AAAA,EACH;AACF;",
+  "names": []
+}

package/dist/modules/staff/translations.js

@@ -1,5 +1,8 @@
 const translatableFields = {
-  "staff:staff_team_member": ["display_name", "description"]
+  "staff:staff_team_member": ["display_name", "description"],
+  "staff:staff_time_project": ["name", "description"],
+  "staff:staff_time_task_status": ["name"],
+  "staff:staff_time_tag": ["label"]
 };
 var translations_default = translatableFields;
 export {

package/dist/modules/staff/translations.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../src/modules/staff/translations.ts"],
-  "sourcesContent": ["export const translatableFields: Record<string, string[]> = {\n  'staff:staff_team_member': ['display_name', 'description'],\n}\n\nexport default translatableFields\n"],
-  "mappings": "AAAO,MAAM,qBAA+C;AAAA,EAC1D,2BAA2B,CAAC,gBAAgB,aAAa;AAC3D;AAEA,IAAO,uBAAQ;",
+  "sourcesContent": ["/**\n * EP-45 \u2014 entity fields a tenant may translate per locale.\n *\n * Keys are entity ids, values are **database column** names (snake_case), matching the\n * `staff_team_member` entry this file shipped with. Adding a field here does not change\n * any rendered output on its own: the translation overlay only substitutes a value when\n * a translation row exists for the request locale, and there are none until a tenant\n * writes one.\n *\n * Only columns that actually exist are listed. `staff_time_task_statuses` has no\n * description column and `staff_time_tags` names its label `label`, so the spec's\n * \"name / description\" reads as \"the human-readable columns of each\" rather than two\n * literal column names.\n */\nexport const translatableFields: Record<string, string[]> = {\n  'staff:staff_team_member': ['display_name', 'description'],\n  'staff:staff_time_project': ['name', 'description'],\n  'staff:staff_time_task_status': ['name'],\n  'staff:staff_time_tag': ['label'],\n}\n\nexport default translatableFields\n"],
+  "mappings": "AAcO,MAAM,qBAA+C;AAAA,EAC1D,2BAA2B,CAAC,gBAAgB,aAAa;AAAA,EACzD,4BAA4B,CAAC,QAAQ,aAAa;AAAA,EAClD,gCAAgC,CAAC,MAAM;AAAA,EACvC,wBAAwB,CAAC,OAAO;AAClC;AAEA,IAAO,uBAAQ;",
   "names": []
 }

package/dist/modules/staff/widgets/components.js

@@ -0,0 +1,7 @@
+const componentOverrides = [];
+var components_default = componentOverrides;
+export {
+  componentOverrides,
+  components_default as default
+};
+//# sourceMappingURL=components.js.map

package/dist/modules/staff/widgets/components.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/staff/widgets/components.ts"],
+  "sourcesContent": ["import type { ComponentOverride } from '@open-mercato/shared/modules/widgets/component-registry'\n\n/**\n * Component replacement handles the staff module publishes (EP-31 of\n * `.ai/specs/2026-08-24-time-tracking-umes-extension-points.md`).\n *\n * Each handle is registered by the component's own module through\n * `registerComponent`, and the shipping component resolves itself through\n * `useRegisteredComponent`, so another module can `replace`, `wrapper` or\n * `props`-transform it without forking the screen that renders it. Every entry\n * publishes a zod `propsSchema` \u2014 in development `useRegisteredComponent` parses\n * the resolved props against it and falls back to the original component when a\n * replacement does not satisfy it, so the schema is the contract, not a comment.\n *\n * | Handle | Registered by | Props |\n * |---|---|---|\n * | `staff.time_entry_dialog`      | `lib/time-tracking-ui/TimeEntryDialog.tsx`           | `TimeEntryDialogProps` |\n * | `staff.timer_bar`              | `lib/timesheets-ui/TimerBar.tsx`                    | `TimerBarProps` |\n * | `staff.kanban_card`            | `lib/time-tracking-ui/KanbanCard.tsx`               | `KanbanCardProps` |\n * | `staff.kanban_column`          | `lib/time-tracking-ui/KanbanColumn.tsx`             | `KanbanColumnProps` |\n * | `staff.timesheet_grid`         | `backend/staff/time-tracking/timesheet/GridView.tsx`| `GridViewProps` |\n * | `staff.timesheet_list`         | `lib/timesheets-ui/ListView.tsx`                    | `ListViewProps` |\n * | `staff.timesheet_calendar`     | `lib/time-tracking-ui/TimesheetCalendar.tsx`        | `TimesheetCalendarProps` |\n * | `staff.report_sheet`           | `lib/time-tracking-ui/ReportSheet.tsx`              | `ReportSheetProps` |\n * | `staff.project_card`           | `lib/timesheets-projects-ui/ProjectCard.tsx`        | `ProjectCardProps` |\n * | `staff.entries_summary_footer` | `lib/time-tracking-ui/TimeEntriesSummaryFooter.tsx` | `TimeEntriesSummaryFooterProps` |\n *\n * The array below is the staff module's own *outgoing* overrides \u2014 it targets no\n * other module's components today, so it is empty. Adding an entry here would\n * override somebody else's component, not one of the handles above.\n */\nexport const componentOverrides: ComponentOverride[] = []\n\nexport default componentOverrides\n"],
+  "mappings": "AA+BO,MAAM,qBAA0C,CAAC;AAExD,IAAO,qBAAQ;",
+  "names": []
+}

package/dist/modules/staff/widgets/injection/timer-sidebar-indicator/widget.js

@@ -1,6 +1,7 @@
 "use client";
 import { jsx, jsxs } from "react/jsx-runtime";
 import * as React from "react";
+import Link from "next/link";
 import { useT } from "@open-mercato/shared/lib/i18n/context";
 import { ProjectColorDot } from "../../../lib/timesheets-ui/ProjectColorDot.js";
 import { useActiveTimesheetTimer } from "../../../lib/timesheets-ui/useActiveTimesheetTimer.js";
@@ -37,15 +38,15 @@ function TimerSidebarIndicator() {
   }, [timer.running, timer.startedAt]);
   if (!timer.running || !timer.entryId) return null;
   return /* @__PURE__ */ jsxs(
-    "a",
+    Link,
     {
-      href: "/backend/staff/timesheets",
+      href: "/backend/staff/time-tracking/timesheet",
       className: "flex items-center gap-2 rounded-md px-2 py-1.5 text-xs hover:bg-muted transition-colors cursor-pointer",
       title: t("staff.timesheets.sidebar.timerRunning", "Timer running \u2014 click to view"),
       children: [
         /* @__PURE__ */ jsxs("span", { className: "relative flex h-2.5 w-2.5 shrink-0", children: [
-          /* @__PURE__ */ jsx("span", { className: "absolute inline-flex h-full w-full animate-ping rounded-full bg-red-400 opacity-75" }),
-          /* @__PURE__ */ jsx("span", { className: "relative inline-flex h-2.5 w-2.5 rounded-full bg-red-500" })
+          /* @__PURE__ */ jsx("span", { className: "absolute inline-flex h-full w-full animate-ping rounded-full bg-status-error-icon opacity-75" }),
+          /* @__PURE__ */ jsx("span", { className: "relative inline-flex h-2.5 w-2.5 rounded-full bg-status-error-icon" })
         ] }),
         timer.projectName ? /* @__PURE__ */ jsxs("span", { className: "inline-flex items-center gap-1 truncate", children: [
           /* @__PURE__ */ jsx(ProjectColorDot, { colorKey: timer.projectColor, projectName: timer.projectName, size: "xs" }),

package/dist/modules/staff/widgets/injection/timer-sidebar-indicator/widget.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../src/modules/staff/widgets/injection/timer-sidebar-indicator/widget.tsx"],
-  "sourcesContent": ["\"use client\"\n\nimport * as React from 'react'\nimport { useT } from '@open-mercato/shared/lib/i18n/context'\nimport type { InjectionWidgetModule } from '@open-mercato/shared/modules/widgets/injection'\nimport { ProjectColorDot } from '../../../lib/timesheets-ui/ProjectColorDot'\nimport { useActiveTimesheetTimer } from '../../../lib/timesheets-ui/useActiveTimesheetTimer'\n\nfunction formatElapsed(seconds: number): string {\n  const h = Math.floor(seconds / 3600)\n  const m = Math.floor((seconds % 3600) / 60)\n  const s = seconds % 60\n  return `${h}:${String(m).padStart(2, '0')}:${String(s).padStart(2, '0')}`\n}\n\nfunction TimerSidebarIndicator() {\n  const t = useT()\n  const timer = useActiveTimesheetTimer()\n  const [elapsed, setElapsed] = React.useState(0)\n  const intervalRef = React.useRef<ReturnType<typeof setInterval> | null>(null)\n\n  // Tick the elapsed counter locally every second\n  React.useEffect(() => {\n    if (!timer.running || !timer.startedAt) {\n      if (intervalRef.current) { clearInterval(intervalRef.current); intervalRef.current = null }\n      setElapsed(0)\n      return\n    }\n\n    const startTime = new Date(timer.startedAt).getTime()\n    const calcElapsed = () => Math.max(0, Math.floor((Date.now() - startTime) / 1000))\n    setElapsed(calcElapsed())\n\n    intervalRef.current = setInterval(() => setElapsed(calcElapsed()), 1000)\n    return () => {\n      if (intervalRef.current) { clearInterval(intervalRef.current); intervalRef.current = null }\n    }\n  }, [timer.running, timer.startedAt])\n\n  if (!timer.running || !timer.entryId) return null\n\n  return (\n    <a\n      href=\"/backend/staff/timesheets\"\n      className=\"flex items-center gap-2 rounded-md px-2 py-1.5 text-xs hover:bg-muted transition-colors cursor-pointer\"\n      title={t('staff.timesheets.sidebar.timerRunning', 'Timer running \u2014 click to view')}\n    >\n      <span className=\"relative flex h-2.5 w-2.5 shrink-0\">\n        <span className=\"absolute inline-flex h-full w-full animate-ping rounded-full bg-red-400 opacity-75\" />\n        <span className=\"relative inline-flex h-2.5 w-2.5 rounded-full bg-red-500\" />\n      </span>\n      {timer.projectName ? (\n        <span className=\"inline-flex items-center gap-1 truncate\">\n          <ProjectColorDot colorKey={timer.projectColor} projectName={timer.projectName} size=\"xs\" />\n          <span className=\"truncate\">{timer.projectName}</span>\n        </span>\n      ) : null}\n      <span className=\"ml-auto font-mono tabular-nums shrink-0\">{formatElapsed(elapsed)}</span>\n    </a>\n  )\n}\n\nconst widget: InjectionWidgetModule = {\n  metadata: {\n    id: 'staff.injection.timer-sidebar-indicator',\n    title: 'Active timer indicator',\n    description: 'Shows a pulsing indicator in the sidebar when a timesheet timer is running.',\n    features: ['staff.timesheets.manage_own'],\n  },\n  Widget: TimerSidebarIndicator,\n}\n\nexport default widget\n"],
-  "mappings": ";AA+CM,SACE,KADF;AA7CN,YAAY,WAAW;AACvB,SAAS,YAAY;AAErB,SAAS,uBAAuB;AAChC,SAAS,+BAA+B;AAExC,SAAS,cAAc,SAAyB;AAC9C,QAAM,IAAI,KAAK,MAAM,UAAU,IAAI;AACnC,QAAM,IAAI,KAAK,MAAO,UAAU,OAAQ,EAAE;AAC1C,QAAM,IAAI,UAAU;AACpB,SAAO,GAAG,CAAC,IAAI,OAAO,CAAC,EAAE,SAAS,GAAG,GAAG,CAAC,IAAI,OAAO,CAAC,EAAE,SAAS,GAAG,GAAG,CAAC;AACzE;AAEA,SAAS,wBAAwB;AAC/B,QAAM,IAAI,KAAK;AACf,QAAM,QAAQ,wBAAwB;AACtC,QAAM,CAAC,SAAS,UAAU,IAAI,MAAM,SAAS,CAAC;AAC9C,QAAM,cAAc,MAAM,OAA8C,IAAI;AAG5E,QAAM,UAAU,MAAM;AACpB,QAAI,CAAC,MAAM,WAAW,CAAC,MAAM,WAAW;AACtC,UAAI,YAAY,SAAS;AAAE,sBAAc,YAAY,OAAO;AAAG,oBAAY,UAAU;AAAA,MAAK;AAC1F,iBAAW,CAAC;AACZ;AAAA,IACF;AAEA,UAAM,YAAY,IAAI,KAAK,MAAM,SAAS,EAAE,QAAQ;AACpD,UAAM,cAAc,MAAM,KAAK,IAAI,GAAG,KAAK,OAAO,KAAK,IAAI,IAAI,aAAa,GAAI,CAAC;AACjF,eAAW,YAAY,CAAC;AAExB,gBAAY,UAAU,YAAY,MAAM,WAAW,YAAY,CAAC,GAAG,GAAI;AACvE,WAAO,MAAM;AACX,UAAI,YAAY,SAAS;AAAE,sBAAc,YAAY,OAAO;AAAG,oBAAY,UAAU;AAAA,MAAK;AAAA,IAC5F;AAAA,EACF,GAAG,CAAC,MAAM,SAAS,MAAM,SAAS,CAAC;AAEnC,MAAI,CAAC,MAAM,WAAW,CAAC,MAAM,QAAS,QAAO;AAE7C,SACE;AAAA,IAAC;AAAA;AAAA,MACC,MAAK;AAAA,MACL,WAAU;AAAA,MACV,OAAO,EAAE,yCAAyC,oCAA+B;AAAA,MAEjF;AAAA,6BAAC,UAAK,WAAU,sCACd;AAAA,8BAAC,UAAK,WAAU,sFAAqF;AAAA,UACrG,oBAAC,UAAK,WAAU,4DAA2D;AAAA,WAC7E;AAAA,QACC,MAAM,cACL,qBAAC,UAAK,WAAU,2CACd;AAAA,8BAAC,mBAAgB,UAAU,MAAM,cAAc,aAAa,MAAM,aAAa,MAAK,MAAK;AAAA,UACzF,oBAAC,UAAK,WAAU,YAAY,gBAAM,aAAY;AAAA,WAChD,IACE;AAAA,QACJ,oBAAC,UAAK,WAAU,2CAA2C,wBAAc,OAAO,GAAE;AAAA;AAAA;AAAA,EACpF;AAEJ;AAEA,MAAM,SAAgC;AAAA,EACpC,UAAU;AAAA,IACR,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,aAAa;AAAA,IACb,UAAU,CAAC,6BAA6B;AAAA,EAC1C;AAAA,EACA,QAAQ;AACV;AAEA,IAAO,iBAAQ;",
+  "sourcesContent": ["\"use client\"\n\nimport * as React from 'react'\nimport Link from 'next/link'\nimport { useT } from '@open-mercato/shared/lib/i18n/context'\nimport type { InjectionWidgetModule } from '@open-mercato/shared/modules/widgets/injection'\nimport { ProjectColorDot } from '../../../lib/timesheets-ui/ProjectColorDot'\nimport { useActiveTimesheetTimer } from '../../../lib/timesheets-ui/useActiveTimesheetTimer'\n\nfunction formatElapsed(seconds: number): string {\n  const h = Math.floor(seconds / 3600)\n  const m = Math.floor((seconds % 3600) / 60)\n  const s = seconds % 60\n  return `${h}:${String(m).padStart(2, '0')}:${String(s).padStart(2, '0')}`\n}\n\nfunction TimerSidebarIndicator() {\n  const t = useT()\n  const timer = useActiveTimesheetTimer()\n  const [elapsed, setElapsed] = React.useState(0)\n  const intervalRef = React.useRef<ReturnType<typeof setInterval> | null>(null)\n\n  // Tick the elapsed counter locally every second\n  React.useEffect(() => {\n    if (!timer.running || !timer.startedAt) {\n      if (intervalRef.current) { clearInterval(intervalRef.current); intervalRef.current = null }\n      setElapsed(0)\n      return\n    }\n\n    const startTime = new Date(timer.startedAt).getTime()\n    const calcElapsed = () => Math.max(0, Math.floor((Date.now() - startTime) / 1000))\n    setElapsed(calcElapsed())\n\n    intervalRef.current = setInterval(() => setElapsed(calcElapsed()), 1000)\n    return () => {\n      if (intervalRef.current) { clearInterval(intervalRef.current); intervalRef.current = null }\n    }\n  }, [timer.running, timer.startedAt])\n\n  if (!timer.running || !timer.entryId) return null\n\n  return (\n    <Link\n      href=\"/backend/staff/time-tracking/timesheet\"\n      className=\"flex items-center gap-2 rounded-md px-2 py-1.5 text-xs hover:bg-muted transition-colors cursor-pointer\"\n      title={t('staff.timesheets.sidebar.timerRunning', 'Timer running \u2014 click to view')}\n    >\n      <span className=\"relative flex h-2.5 w-2.5 shrink-0\">\n        <span className=\"absolute inline-flex h-full w-full animate-ping rounded-full bg-status-error-icon opacity-75\" />\n        <span className=\"relative inline-flex h-2.5 w-2.5 rounded-full bg-status-error-icon\" />\n      </span>\n      {timer.projectName ? (\n        <span className=\"inline-flex items-center gap-1 truncate\">\n          <ProjectColorDot colorKey={timer.projectColor} projectName={timer.projectName} size=\"xs\" />\n          <span className=\"truncate\">{timer.projectName}</span>\n        </span>\n      ) : null}\n      <span className=\"ml-auto font-mono tabular-nums shrink-0\">{formatElapsed(elapsed)}</span>\n    </Link>\n  )\n}\n\nconst widget: InjectionWidgetModule = {\n  metadata: {\n    id: 'staff.injection.timer-sidebar-indicator',\n    title: 'Active timer indicator',\n    description: 'Shows a pulsing indicator in the sidebar when a timesheet timer is running.',\n    features: ['staff.timesheets.manage_own'],\n  },\n  Widget: TimerSidebarIndicator,\n}\n\nexport default widget\n"],
+  "mappings": ";AAgDM,SACE,KADF;AA9CN,YAAY,WAAW;AACvB,OAAO,UAAU;AACjB,SAAS,YAAY;AAErB,SAAS,uBAAuB;AAChC,SAAS,+BAA+B;AAExC,SAAS,cAAc,SAAyB;AAC9C,QAAM,IAAI,KAAK,MAAM,UAAU,IAAI;AACnC,QAAM,IAAI,KAAK,MAAO,UAAU,OAAQ,EAAE;AAC1C,QAAM,IAAI,UAAU;AACpB,SAAO,GAAG,CAAC,IAAI,OAAO,CAAC,EAAE,SAAS,GAAG,GAAG,CAAC,IAAI,OAAO,CAAC,EAAE,SAAS,GAAG,GAAG,CAAC;AACzE;AAEA,SAAS,wBAAwB;AAC/B,QAAM,IAAI,KAAK;AACf,QAAM,QAAQ,wBAAwB;AACtC,QAAM,CAAC,SAAS,UAAU,IAAI,MAAM,SAAS,CAAC;AAC9C,QAAM,cAAc,MAAM,OAA8C,IAAI;AAG5E,QAAM,UAAU,MAAM;AACpB,QAAI,CAAC,MAAM,WAAW,CAAC,MAAM,WAAW;AACtC,UAAI,YAAY,SAAS;AAAE,sBAAc,YAAY,OAAO;AAAG,oBAAY,UAAU;AAAA,MAAK;AAC1F,iBAAW,CAAC;AACZ;AAAA,IACF;AAEA,UAAM,YAAY,IAAI,KAAK,MAAM,SAAS,EAAE,QAAQ;AACpD,UAAM,cAAc,MAAM,KAAK,IAAI,GAAG,KAAK,OAAO,KAAK,IAAI,IAAI,aAAa,GAAI,CAAC;AACjF,eAAW,YAAY,CAAC;AAExB,gBAAY,UAAU,YAAY,MAAM,WAAW,YAAY,CAAC,GAAG,GAAI;AACvE,WAAO,MAAM;AACX,UAAI,YAAY,SAAS;AAAE,sBAAc,YAAY,OAAO;AAAG,oBAAY,UAAU;AAAA,MAAK;AAAA,IAC5F;AAAA,EACF,GAAG,CAAC,MAAM,SAAS,MAAM,SAAS,CAAC;AAEnC,MAAI,CAAC,MAAM,WAAW,CAAC,MAAM,QAAS,QAAO;AAE7C,SACE;AAAA,IAAC;AAAA;AAAA,MACC,MAAK;AAAA,MACL,WAAU;AAAA,MACV,OAAO,EAAE,yCAAyC,oCAA+B;AAAA,MAEjF;AAAA,6BAAC,UAAK,WAAU,sCACd;AAAA,8BAAC,UAAK,WAAU,gGAA+F;AAAA,UAC/G,oBAAC,UAAK,WAAU,sEAAqE;AAAA,WACvF;AAAA,QACC,MAAM,cACL,qBAAC,UAAK,WAAU,2CACd;AAAA,8BAAC,mBAAgB,UAAU,MAAM,cAAc,aAAa,MAAM,aAAa,MAAK,MAAK;AAAA,UACzF,oBAAC,UAAK,WAAU,YAAY,gBAAM,aAAY;AAAA,WAChD,IACE;AAAA,QACJ,oBAAC,UAAK,WAAU,2CAA2C,wBAAc,OAAO,GAAE;AAAA;AAAA;AAAA,EACpF;AAEJ;AAEA,MAAM,SAAgC;AAAA,EACpC,UAAU;AAAA,IACR,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,aAAa;AAAA,IACb,UAAU,CAAC,6BAA6B;AAAA,EAC1C;AAAA,EACA,QAAQ;AACV;AAEA,IAAO,iBAAQ;",
   "names": []
 }