@open-mercato/core 0.7.1-develop.7178.1.ab93fbaf4e → 0.7.1-develop.7180.1.9717fbbb43

package/dist/modules/staff/api/timesheets/reports/[id]/close/route.js

@@ -0,0 +1,168 @@
+import { NextResponse } from "next/server";
+import { resolveFeatureAccess } from "../../../../../lib/time-tracking/featureAccess.js";
+import { z } from "zod";
+import { forbidden, isCrudHttpError } from "@open-mercato/shared/lib/crud/errors";
+import { runRouteMutationGuards } from "@open-mercato/shared/lib/crud/route-mutation-guard";
+import { resolveTranslations } from "@open-mercato/shared/lib/i18n/server";
+import { serializeOperationMetadata } from "@open-mercato/shared/lib/commands/operationMetadata";
+import { getCommandInterceptorHttpRejection } from "@open-mercato/shared/lib/commands/errors";
+import { createLogger } from "@open-mercato/shared/lib/logger";
+import { STAFF_TIME_TRACKING_RESOURCE_KINDS } from "../../../../guards.js";
+import { runTimesheetInterceptors } from "../../../_shared/withTimesheetInterceptors.js";
+import {
+  staffTimeReportCommandIds
+} from "../../../../../commands/timesheets-reports.js";
+import { resolveReportRequestContext } from "../../shared.js";
+import {
+  evaluateReportClosePolicies,
+  notifyReportClosed
+} from "../../../../../lib/timesheets-reports/reportApprovalPolicies.js";
+const logger = createLogger("staff").child({ component: "api/timesheets/reports/close" });
+const LOCK_FEATURE = "staff.timesheets.lock";
+const metadata = {
+  POST: { requireAuth: true, requireFeatures: [LOCK_FEATURE] }
+};
+async function POST(req) {
+  try {
+    const context = await resolveReportRequestContext(req, { segment: "close" });
+    const { container, auth, organizationScope, tenantId, organizationId, reportId, translate, grantedFeatures } = context;
+    if (!(await resolveFeatureAccess(container, auth.sub ?? null, [LOCK_FEATURE], { tenantId, organizationId })).allowed) {
+      throw forbidden(translate("staff.errors.forbidden", "Forbidden"));
+    }
+    const approvalContext = {
+      tenantId,
+      organizationId,
+      reportId,
+      actorUserId: typeof auth.sub === "string" ? auth.sub : null,
+      actorFeatures: grantedFeatures,
+      status: "draft"
+    };
+    const refusal = evaluateReportClosePolicies(approvalContext);
+    if (refusal) {
+      throw forbidden(translate(refusal.messageKey, translate("staff.errors.forbidden", "Forbidden")));
+    }
+    const interceptors = await runTimesheetInterceptors({
+      request: req,
+      method: "POST",
+      scope: { container, userId: auth.sub, tenantId, organizationId, userFeatures: grantedFeatures }
+    });
+    if (!interceptors.ok) return interceptors.response;
+    const { session } = interceptors;
+    const guardResult = await runRouteMutationGuards({
+      container,
+      req,
+      auth: {
+        userId: auth.sub ?? "",
+        tenantId,
+        organizationId,
+        userFeatures: grantedFeatures
+      },
+      input: {
+        resourceKind: STAFF_TIME_TRACKING_RESOURCE_KINDS.timeReport,
+        resourceId: reportId,
+        operation: "update",
+        mutationPayload: { id: reportId }
+      }
+    });
+    if (!guardResult.ok) return guardResult.response;
+    const ctx = {
+      container,
+      auth,
+      organizationScope,
+      selectedOrganizationId: organizationScope?.selectedId ?? auth.orgId ?? null,
+      organizationIds: organizationScope?.filterIds ?? (auth.orgId ? [auth.orgId] : null),
+      request: req
+    };
+    const commandBus = container.resolve("commandBus");
+    const { result, logEntry } = await commandBus.execute(
+      staffTimeReportCommandIds.close,
+      { input: { id: reportId }, ctx }
+    );
+    await guardResult.runAfterSuccess();
+    for (const failure of await notifyReportClosed({ ...approvalContext, status: "closed" })) {
+      logger.error("staff.timesheets.reports.close approval hook failed", {
+        policyId: failure.policyId,
+        err: failure.error
+      });
+    }
+    const response = await session.respond(200, {
+      id: result?.reportId ?? reportId,
+      status: "closed",
+      lockedEntryCount: result?.lockedEntryCount ?? 0,
+      totalAmount: result?.totalAmount ?? 0,
+      totalBillableMinutes: result?.totalBillableMinutes ?? 0,
+      totalNonbillableMinutes: result?.totalNonbillableMinutes ?? 0
+    });
+    if (logEntry?.id && logEntry?.commandId) {
+      response.headers.set(
+        "x-om-operation",
+        serializeOperationMetadata({
+          id: logEntry.id,
+          // Explicitly no undo token: unwinding a billing freeze is the unlock
+          // endpoint, which demands a reason and its own feature. A one-click
+          // undo bar over a closed invoice is exactly what US-G3 forbids.
+          undoToken: "",
+          commandId: logEntry.commandId,
+          actionLabel: logEntry.actionLabel ?? null,
+          resourceKind: logEntry.resourceKind ?? STAFF_TIME_TRACKING_RESOURCE_KINDS.timeReport,
+          resourceId: logEntry.resourceId ?? reportId,
+          executedAt: logEntry.createdAt instanceof Date ? logEntry.createdAt.toISOString() : void 0
+        })
+      );
+    }
+    return response;
+  } catch (err) {
+    if (isCrudHttpError(err)) {
+      return NextResponse.json(err.body, { status: err.status });
+    }
+    const interceptorRejection = getCommandInterceptorHttpRejection(err);
+    if (interceptorRejection) {
+      return NextResponse.json(interceptorRejection.body, { status: interceptorRejection.status });
+    }
+    const { translate } = await resolveTranslations();
+    if (err instanceof z.ZodError) {
+      return NextResponse.json(
+        { error: translate("staff.errors.invalid_request", "Invalid request"), details: err.issues },
+        { status: 400 }
+      );
+    }
+    logger.error("staff.timesheets.reports.close failed", { err });
+    return NextResponse.json(
+      { error: translate("staff.errors.internal", "Internal server error") },
+      { status: 500 }
+    );
+  }
+}
+const closeResponseSchema = z.object({
+  id: z.string().uuid(),
+  status: z.literal("closed"),
+  lockedEntryCount: z.number().int(),
+  totalAmount: z.number(),
+  totalBillableMinutes: z.number().int(),
+  totalNonbillableMinutes: z.number().int()
+});
+const openApi = {
+  tag: "Staff",
+  summary: "Close and lock a customer report",
+  methods: {
+    POST: {
+      summary: "Close and lock a customer report",
+      description: "Freezes the report: writes one staff_time_report_entries snapshot per covered entry (raw minutes, rounded minutes, rate, currency, amount, billable), stamps locked_report_id / locked_at on entries that are not already locked by an earlier report, freezes the report totals and appends a `closed` event \u2014 all in one transaction. Exporting never locks; this endpoint is the only thing that does.",
+      responses: [{ status: 200, description: "Report closed", schema: closeResponseSchema }],
+      errors: [
+        { status: 400, description: "Missing report id or scope" },
+        { status: 401, description: "Unauthorized" },
+        { status: 403, description: "Missing staff.timesheets.lock, or refused by a registered report approval policy" },
+        { status: 404, description: "Report not found or not accessible" },
+        { status: 409, description: "Report is already closed (report_closed)" },
+        { status: 422, description: "Report covers no entries (report_empty)" }
+      ]
+    }
+  }
+};
+export {
+  POST,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/staff/api/timesheets/reports/[id]/close/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../../../src/modules/staff/api/timesheets/reports/%5Bid%5D/close/route.ts"],
+  "sourcesContent": ["/**\n * `POST /api/staff/timesheets/reports/[id]/close` \u2014 US-G3, screen 14's primary\n * action.\n *\n * Gated on `staff.timesheets.lock`, the feature that already existed for exactly\n * this (\"Lock time periods\"), rather than on a new one. Exporting a PDF does NOT\n * come through here: screen 14 note 5 makes closing the only thing that freezes,\n * so a download can never silently lock a team's timesheet.\n *\n * The whole freeze is one transaction inside the command. This file's job is\n * auth, scope, the mutation guard and turning the command's refusals into the\n * bodies the screen can act on.\n */\n\nimport { NextResponse } from 'next/server'\nimport { resolveFeatureAccess } from '../../../../../lib/time-tracking/featureAccess'\nimport { z } from 'zod'\nimport { forbidden, isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { runRouteMutationGuards } from '@open-mercato/shared/lib/crud/route-mutation-guard'\nimport { authorizeFeatures } from '@open-mercato/shared/security/featurePolicy'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { serializeOperationMetadata } from '@open-mercato/shared/lib/commands/operationMetadata'\nimport type { CommandBus, CommandRuntimeContext } from '@open-mercato/shared/lib/commands'\nimport { getCommandInterceptorHttpRejection } from '@open-mercato/shared/lib/commands/errors'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { STAFF_TIME_TRACKING_RESOURCE_KINDS } from '../../../../guards'\nimport { runTimesheetInterceptors } from '../../../_shared/withTimesheetInterceptors'\nimport {\n  staffTimeReportCommandIds,\n  type StaffTimeReportCloseResult,\n} from '../../../../../commands/timesheets-reports'\nimport { resolveReportRequestContext } from '../../shared'\nimport {\n  evaluateReportClosePolicies,\n  notifyReportClosed,\n} from '../../../../../lib/timesheets-reports/reportApprovalPolicies'\n\nconst logger = createLogger('staff').child({ component: 'api/timesheets/reports/close' })\n\nconst LOCK_FEATURE = 'staff.timesheets.lock'\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: [LOCK_FEATURE] },\n}\n\nexport async function POST(req: Request) {\n  try {\n    const context = await resolveReportRequestContext(req, { segment: 'close' })\n    const { container, auth, organizationScope, tenantId, organizationId, reportId, translate, grantedFeatures } =\n      context\n\n    // Checked unconditionally. The `grantedFeatures &&` this replaces turned the\n    // check off whenever the grant read failed \u2014 harmless here only because the\n    // route metadata happens to require the same feature, which is exactly the\n    // shape that leaked rates on the report routes where no such backstop existed.\n    if (!(await resolveFeatureAccess(container, auth.sub ?? null, [LOCK_FEATURE], { tenantId, organizationId })).allowed) {\n      throw forbidden(translate('staff.errors.forbidden', 'Forbidden'))\n    }\n\n    // EP-41 runs strictly AFTER the ACL gate above and can only refuse. A policy\n    // never grants, so nothing here can open a report a caller has no feature for.\n    const approvalContext = {\n      tenantId,\n      organizationId,\n      reportId,\n      actorUserId: typeof auth.sub === 'string' ? auth.sub : null,\n      actorFeatures: grantedFeatures,\n      status: 'draft',\n    }\n    const refusal = evaluateReportClosePolicies(approvalContext)\n    if (refusal) {\n      throw forbidden(translate(refusal.messageKey, translate('staff.errors.forbidden', 'Forbidden')))\n    }\n\n    const interceptors = await runTimesheetInterceptors({\n      request: req,\n      method: 'POST',\n      scope: { container, userId: auth.sub, tenantId, organizationId, userFeatures: grantedFeatures },\n    })\n    if (!interceptors.ok) return interceptors.response\n    const { session } = interceptors\n\n    const guardResult = await runRouteMutationGuards({\n      container,\n      req,\n      auth: {\n        userId: auth.sub ?? '',\n        tenantId,\n        organizationId,\n        userFeatures: grantedFeatures,\n      },\n      input: {\n        resourceKind: STAFF_TIME_TRACKING_RESOURCE_KINDS.timeReport,\n        resourceId: reportId,\n        operation: 'update',\n        mutationPayload: { id: reportId },\n      },\n    })\n    if (!guardResult.ok) return guardResult.response\n\n    const ctx: CommandRuntimeContext = {\n      container,\n      auth,\n      organizationScope,\n      selectedOrganizationId: organizationScope?.selectedId ?? auth.orgId ?? null,\n      organizationIds: organizationScope?.filterIds ?? (auth.orgId ? [auth.orgId] : null),\n      request: req,\n    }\n\n    const commandBus = container.resolve('commandBus') as CommandBus\n    const { result, logEntry } = await commandBus.execute<{ id: string }, StaffTimeReportCloseResult>(\n      staffTimeReportCommandIds.close,\n      { input: { id: reportId }, ctx },\n    )\n\n    await guardResult.runAfterSuccess()\n\n    for (const failure of await notifyReportClosed({ ...approvalContext, status: 'closed' })) {\n      logger.error('staff.timesheets.reports.close approval hook failed', {\n        policyId: failure.policyId,\n        err: failure.error,\n      })\n    }\n\n    const response = await session.respond(200, {\n      id: result?.reportId ?? reportId,\n      status: 'closed',\n      lockedEntryCount: result?.lockedEntryCount ?? 0,\n      totalAmount: result?.totalAmount ?? 0,\n      totalBillableMinutes: result?.totalBillableMinutes ?? 0,\n      totalNonbillableMinutes: result?.totalNonbillableMinutes ?? 0,\n    })\n    if (logEntry?.id && logEntry?.commandId) {\n      response.headers.set(\n        'x-om-operation',\n        serializeOperationMetadata({\n          id: logEntry.id,\n          // Explicitly no undo token: unwinding a billing freeze is the unlock\n          // endpoint, which demands a reason and its own feature. A one-click\n          // undo bar over a closed invoice is exactly what US-G3 forbids.\n          undoToken: '',\n          commandId: logEntry.commandId,\n          actionLabel: logEntry.actionLabel ?? null,\n          resourceKind: logEntry.resourceKind ?? STAFF_TIME_TRACKING_RESOURCE_KINDS.timeReport,\n          resourceId: logEntry.resourceId ?? reportId,\n          executedAt: logEntry.createdAt instanceof Date ? logEntry.createdAt.toISOString() : undefined,\n        }),\n      )\n    }\n    return response\n  } catch (err) {\n    if (isCrudHttpError(err)) {\n      return NextResponse.json(err.body, { status: err.status })\n    }\n    const interceptorRejection = getCommandInterceptorHttpRejection(err)\n    if (interceptorRejection) {\n      return NextResponse.json(interceptorRejection.body, { status: interceptorRejection.status })\n    }\n    const { translate } = await resolveTranslations()\n    if (err instanceof z.ZodError) {\n      return NextResponse.json(\n        { error: translate('staff.errors.invalid_request', 'Invalid request'), details: err.issues },\n        { status: 400 },\n      )\n    }\n    logger.error('staff.timesheets.reports.close failed', { err })\n    return NextResponse.json(\n      { error: translate('staff.errors.internal', 'Internal server error') },\n      { status: 500 },\n    )\n  }\n}\n\nconst closeResponseSchema = z.object({\n  id: z.string().uuid(),\n  status: z.literal('closed'),\n  lockedEntryCount: z.number().int(),\n  totalAmount: z.number(),\n  totalBillableMinutes: z.number().int(),\n  totalNonbillableMinutes: z.number().int(),\n})\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Staff',\n  summary: 'Close and lock a customer report',\n  methods: {\n    POST: {\n      summary: 'Close and lock a customer report',\n      description:\n        'Freezes the report: writes one staff_time_report_entries snapshot per covered entry (raw minutes, rounded minutes, rate, currency, amount, billable), stamps locked_report_id / locked_at on entries that are not already locked by an earlier report, freezes the report totals and appends a `closed` event \u2014 all in one transaction. Exporting never locks; this endpoint is the only thing that does.',\n      responses: [{ status: 200, description: 'Report closed', schema: closeResponseSchema }],\n      errors: [\n        { status: 400, description: 'Missing report id or scope' },\n        { status: 401, description: 'Unauthorized' },\n        { status: 403, description: 'Missing staff.timesheets.lock, or refused by a registered report approval policy' },\n        { status: 404, description: 'Report not found or not accessible' },\n        { status: 409, description: 'Report is already closed (report_closed)' },\n        { status: 422, description: 'Report covers no entries (report_empty)' },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAcA,SAAS,oBAAoB;AAC7B,SAAS,4BAA4B;AACrC,SAAS,SAAS;AAClB,SAAS,WAAW,uBAAuB;AAC3C,SAAS,8BAA8B;AAEvC,SAAS,2BAA2B;AACpC,SAAS,kCAAkC;AAE3C,SAAS,0CAA0C;AACnD,SAAS,oBAAoB;AAE7B,SAAS,0CAA0C;AACnD,SAAS,gCAAgC;AACzC;AAAA,EACE;AAAA,OAEK;AACP,SAAS,mCAAmC;AAC5C;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAEP,MAAM,SAAS,aAAa,OAAO,EAAE,MAAM,EAAE,WAAW,+BAA+B,CAAC;AAExF,MAAM,eAAe;AAEd,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,YAAY,EAAE;AAC7D;AAEA,eAAsB,KAAK,KAAc;AACvC,MAAI;AACF,UAAM,UAAU,MAAM,4BAA4B,KAAK,EAAE,SAAS,QAAQ,CAAC;AAC3E,UAAM,EAAE,WAAW,MAAM,mBAAmB,UAAU,gBAAgB,UAAU,WAAW,gBAAgB,IACzG;AAMF,QAAI,EAAE,MAAM,qBAAqB,WAAW,KAAK,OAAO,MAAM,CAAC,YAAY,GAAG,EAAE,UAAU,eAAe,CAAC,GAAG,SAAS;AACpH,YAAM,UAAU,UAAU,0BAA0B,WAAW,CAAC;AAAA,IAClE;AAIA,UAAM,kBAAkB;AAAA,MACtB;AAAA,MACA;AAAA,MACA;AAAA,MACA,aAAa,OAAO,KAAK,QAAQ,WAAW,KAAK,MAAM;AAAA,MACvD,eAAe;AAAA,MACf,QAAQ;AAAA,IACV;AACA,UAAM,UAAU,4BAA4B,eAAe;AAC3D,QAAI,SAAS;AACX,YAAM,UAAU,UAAU,QAAQ,YAAY,UAAU,0BAA0B,WAAW,CAAC,CAAC;AAAA,IACjG;AAEA,UAAM,eAAe,MAAM,yBAAyB;AAAA,MAClD,SAAS;AAAA,MACT,QAAQ;AAAA,MACR,OAAO,EAAE,WAAW,QAAQ,KAAK,KAAK,UAAU,gBAAgB,cAAc,gBAAgB;AAAA,IAChG,CAAC;AACD,QAAI,CAAC,aAAa,GAAI,QAAO,aAAa;AAC1C,UAAM,EAAE,QAAQ,IAAI;AAEpB,UAAM,cAAc,MAAM,uBAAuB;AAAA,MAC/C;AAAA,MACA;AAAA,MACA,MAAM;AAAA,QACJ,QAAQ,KAAK,OAAO;AAAA,QACpB;AAAA,QACA;AAAA,QACA,cAAc;AAAA,MAChB;AAAA,MACA,OAAO;AAAA,QACL,cAAc,mCAAmC;AAAA,QACjD,YAAY;AAAA,QACZ,WAAW;AAAA,QACX,iBAAiB,EAAE,IAAI,SAAS;AAAA,MAClC;AAAA,IACF,CAAC;AACD,QAAI,CAAC,YAAY,GAAI,QAAO,YAAY;AAExC,UAAM,MAA6B;AAAA,MACjC;AAAA,MACA;AAAA,MACA;AAAA,MACA,wBAAwB,mBAAmB,cAAc,KAAK,SAAS;AAAA,MACvE,iBAAiB,mBAAmB,cAAc,KAAK,QAAQ,CAAC,KAAK,KAAK,IAAI;AAAA,MAC9E,SAAS;AAAA,IACX;AAEA,UAAM,aAAa,UAAU,QAAQ,YAAY;AACjD,UAAM,EAAE,QAAQ,SAAS,IAAI,MAAM,WAAW;AAAA,MAC5C,0BAA0B;AAAA,MAC1B,EAAE,OAAO,EAAE,IAAI,SAAS,GAAG,IAAI;AAAA,IACjC;AAEA,UAAM,YAAY,gBAAgB;AAElC,eAAW,WAAW,MAAM,mBAAmB,EAAE,GAAG,iBAAiB,QAAQ,SAAS,CAAC,GAAG;AACxF,aAAO,MAAM,uDAAuD;AAAA,QAClE,UAAU,QAAQ;AAAA,QAClB,KAAK,QAAQ;AAAA,MACf,CAAC;AAAA,IACH;AAEA,UAAM,WAAW,MAAM,QAAQ,QAAQ,KAAK;AAAA,MAC1C,IAAI,QAAQ,YAAY;AAAA,MACxB,QAAQ;AAAA,MACR,kBAAkB,QAAQ,oBAAoB;AAAA,MAC9C,aAAa,QAAQ,eAAe;AAAA,MACpC,sBAAsB,QAAQ,wBAAwB;AAAA,MACtD,yBAAyB,QAAQ,2BAA2B;AAAA,IAC9D,CAAC;AACD,QAAI,UAAU,MAAM,UAAU,WAAW;AACvC,eAAS,QAAQ;AAAA,QACf;AAAA,QACA,2BAA2B;AAAA,UACzB,IAAI,SAAS;AAAA;AAAA;AAAA;AAAA,UAIb,WAAW;AAAA,UACX,WAAW,SAAS;AAAA,UACpB,aAAa,SAAS,eAAe;AAAA,UACrC,cAAc,SAAS,gBAAgB,mCAAmC;AAAA,UAC1E,YAAY,SAAS,cAAc;AAAA,UACnC,YAAY,SAAS,qBAAqB,OAAO,SAAS,UAAU,YAAY,IAAI;AAAA,QACtF,CAAC;AAAA,MACH;AAAA,IACF;AACA,WAAO;AAAA,EACT,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,GAAG;AACxB,aAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,IAC3D;AACA,UAAM,uBAAuB,mCAAmC,GAAG;AACnE,QAAI,sBAAsB;AACxB,aAAO,aAAa,KAAK,qBAAqB,MAAM,EAAE,QAAQ,qBAAqB,OAAO,CAAC;AAAA,IAC7F;AACA,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,QAAI,eAAe,EAAE,UAAU;AAC7B,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,UAAU,gCAAgC,iBAAiB,GAAG,SAAS,IAAI,OAAO;AAAA,QAC3F,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AACA,WAAO,MAAM,yCAAyC,EAAE,IAAI,CAAC;AAC7D,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,UAAU,yBAAyB,uBAAuB,EAAE;AAAA,MACrE,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAEA,MAAM,sBAAsB,EAAE,OAAO;AAAA,EACnC,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,QAAQ,EAAE,QAAQ,QAAQ;AAAA,EAC1B,kBAAkB,EAAE,OAAO,EAAE,IAAI;AAAA,EACjC,aAAa,EAAE,OAAO;AAAA,EACtB,sBAAsB,EAAE,OAAO,EAAE,IAAI;AAAA,EACrC,yBAAyB,EAAE,OAAO,EAAE,IAAI;AAC1C,CAAC;AAEM,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aACE;AAAA,MACF,WAAW,CAAC,EAAE,QAAQ,KAAK,aAAa,iBAAiB,QAAQ,oBAAoB,CAAC;AAAA,MACtF,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,6BAA6B;AAAA,QACzD,EAAE,QAAQ,KAAK,aAAa,eAAe;AAAA,QAC3C,EAAE,QAAQ,KAAK,aAAa,mFAAmF;AAAA,QAC/G,EAAE,QAAQ,KAAK,aAAa,qCAAqC;AAAA,QACjE,EAAE,QAAQ,KAAK,aAAa,2CAA2C;AAAA,QACvE,EAAE,QAAQ,KAAK,aAAa,0CAA0C;AAAA,MACxE;AAAA,IACF;AAAA,EACF;AACF;",
+  "names": []
+}

package/dist/modules/staff/api/timesheets/reports/[id]/export/route.js

@@ -0,0 +1,246 @@
+import { NextResponse } from "next/server";
+import { CrudHttpError, isCrudHttpError } from "@open-mercato/shared/lib/crud/errors";
+import { resolveTranslations } from "@open-mercato/shared/lib/i18n/server";
+import { createLogger } from "@open-mercato/shared/lib/logger";
+import { emitStaffEvent } from "../../../../../events.js";
+import { StaffTimeReport, StaffTimeReportEvent } from "../../../../../data/entities.js";
+import { loadReportProjectIds } from "../../../../../commands/timesheets-reports.js";
+import { buildReportSheet } from "../../../../../lib/timesheets-reports/buildReportSheet.js";
+import { buildReportRows } from "../../../../../lib/timesheets-reports/reportRows.js";
+import {
+  normalizeReportExportFormat,
+  serializeReportExport,
+  supportedReportExportFormats
+} from "../../../../../lib/timesheets-reports/reportExport.js";
+import {
+  hasReportGrouping,
+  reportGroupingIds
+} from "../../../../../lib/timesheets-reports/reportGroupings.js";
+import { z } from "zod";
+import { resolveReportRequestContext, reportSheetLabels } from "../../shared.js";
+import {
+  readSearchParamsRecord,
+  runTimesheetInterceptors
+} from "../../../_shared/withTimesheetInterceptors.js";
+const logger = createLogger("staff").child({ component: "api/timesheets/reports/export" });
+const metadata = {
+  GET: { requireAuth: true, requireFeatures: ["staff.timesheets.reports.view"] }
+};
+function readQuery(params) {
+  const grouping = params.get("grouping");
+  return {
+    format: params.get("format"),
+    grouping: hasReportGrouping(grouping) ? grouping : void 0
+  };
+}
+function exportQuerySchema() {
+  return z.object({
+    format: z.enum(supportedReportExportFormats()),
+    grouping: z.enum(reportGroupingIds()).optional()
+  });
+}
+function exportLabels(translate) {
+  return {
+    documentTitle: translate("staff.time_tracking.reports.sheet.overline", "Time and cost statement"),
+    issuedBy: translate("staff.time_tracking.reports.sheet.issuedBy", "Issued by"),
+    reference: translate("staff.time_tracking.reports.sheet.reference", "Reference"),
+    period: translate("staff.time_tracking.reports.sheet.period", "Period"),
+    line: translate("staff.time_tracking.reports.sheet.lineLabel", "Line"),
+    time: translate("staff.time_tracking.reports.sheet.time", "Time"),
+    rate: translate("staff.time_tracking.reports.sheet.rate", "Rate"),
+    amount: translate("staff.time_tracking.reports.sheet.amount", "Amount"),
+    total: translate("staff.time_tracking.reports.sheet.total", "Total to invoice"),
+    totalHint: translate(
+      "staff.time_tracking.reports.sheet.totalHint",
+      "{billable} billable \xB7 {nonbillable} non-billable \xB7 {rounding}"
+    ),
+    nonbillable: translate("staff.time_tracking.reports.sheet.nonbillable", "Non-billable time"),
+    overrideBadge: translate("staff.time_tracking.reports.sheet.overrideBadge", "agreed rate"),
+    date: translate("staff.time_tracking.reports.export.date", "Date"),
+    project: translate("staff.time_tracking.reports.export.project", "Project"),
+    task: translate("staff.time_tracking.reports.export.task", "Task"),
+    person: translate("staff.time_tracking.reports.export.person", "Person"),
+    description: translate("staff.time_tracking.reports.export.description", "Description"),
+    billable: translate("staff.time_tracking.reports.export.billable", "Billable"),
+    yes: translate("staff.time_tracking.reports.export.yes", "Yes"),
+    no: translate("staff.time_tracking.reports.export.no", "No"),
+    rawMinutes: translate("staff.time_tracking.reports.export.rawMinutes", "Raw minutes"),
+    roundedMinutes: translate("staff.time_tracking.reports.export.roundedMinutes", "Rounded minutes")
+  };
+}
+function roundingLabel(translate, unitMinutes, direction) {
+  if (!unitMinutes) return translate("staff.time_tracking.reports.rounding.off", "no rounding");
+  const directionLabel = direction === "nearest" ? translate("staff.time_tracking.reports.rounding.nearest", "to the nearest") : translate("staff.time_tracking.reports.rounding.up", "always up");
+  return translate("staff.time_tracking.reports.rounding.rule", "rounding {minutes} min, {direction}").replace("{minutes}", String(unitMinutes)).replace("{direction}", directionLabel);
+}
+function readCustomerName(snapshot, fallback) {
+  if (!snapshot) return fallback;
+  for (const key of ["name", "displayName", "display_name", "legalName", "legal_name"]) {
+    const value = snapshot[key];
+    if (typeof value === "string" && value.trim().length > 0) return value.trim();
+  }
+  return fallback;
+}
+async function GET(req) {
+  try {
+    const context = await resolveReportRequestContext(req, { segment: "export" });
+    const { container, auth, tenantId, organizationId, reportId, translate, canSeeMoney, grantedFeatures } = context;
+    const interceptors = await runTimesheetInterceptors({
+      request: req,
+      method: "GET",
+      scope: { container, userId: auth.sub, tenantId, organizationId, userFeatures: grantedFeatures },
+      query: readSearchParamsRecord(req.url)
+    });
+    if (!interceptors.ok) return interceptors.response;
+    const { session } = interceptors;
+    const { format: rawFormat, grouping } = readQuery(session.searchParams);
+    const format = normalizeReportExportFormat(rawFormat);
+    if (!format) {
+      throw new CrudHttpError(400, {
+        error: translate(
+          "staff.time_tracking.reports.errors.unsupportedFormat",
+          "Supported export formats are pdf, csv and xlsx."
+        ),
+        supportedFormats: supportedReportExportFormats()
+      });
+    }
+    const em = container.resolve("em").fork();
+    const report = await em.findOne(StaffTimeReport, {
+      id: reportId,
+      tenantId,
+      organizationId,
+      deletedAt: null
+    });
+    if (!report) {
+      throw new CrudHttpError(404, {
+        error: translate("staff.time_tracking.reports.errors.notFound", "Report not found or not accessible.")
+      });
+    }
+    const timeProjectIds = await loadReportProjectIds(em, report.id, { tenantId, organizationId });
+    const labels = reportSheetLabels(translate);
+    const sheet = await buildReportSheet({
+      em,
+      scope: { tenantId, organizationId },
+      report,
+      timeProjectIds,
+      labels,
+      grouping
+    });
+    const rows = buildReportRows({
+      entries: sheet.entries,
+      projects: sheet.projects,
+      directory: sheet.directory,
+      labels
+    });
+    const periodFrom = report.periodFrom instanceof Date ? report.periodFrom.toISOString().slice(0, 10) : "";
+    const periodTo = report.periodTo instanceof Date ? report.periodTo.toISOString().slice(0, 10) : "";
+    const file = serializeReportExport(format, {
+      reference: report.reference,
+      title: report.title,
+      customerName: readCustomerName(report.customerSnapshot, report.title),
+      periodLabel: `${periodFrom} \u2013 ${periodTo}`,
+      issuedByLabel: null,
+      issuedAtLabel: report.closedAt ? report.closedAt.toISOString().slice(0, 10) : null,
+      currencyCode: sheet.currencyCode,
+      showRates: (report.showRates ?? true) && canSeeMoney,
+      groups: sheet.totals.groups,
+      rows: canSeeMoney ? rows : rows.map((row) => ({ ...row, rate: null, amount: null })),
+      totals: {
+        billableMinutes: sheet.totals.billableMinutes,
+        nonbillableMinutes: sheet.totals.nonbillableMinutes,
+        totalAmount: canSeeMoney ? sheet.totals.totalAmount : 0
+      },
+      roundingLabel: roundingLabel(
+        translate,
+        report.roundingUnitMinutes ?? 0,
+        report.roundingDirection ?? "up"
+      ),
+      labels: exportLabels(translate)
+    });
+    try {
+      const eventEm = container.resolve("em").fork();
+      eventEm.persist(
+        eventEm.create(StaffTimeReportEvent, {
+          tenantId,
+          organizationId,
+          reportId: report.id,
+          eventType: "exported",
+          reason: null,
+          actorUserId: typeof auth.sub === "string" ? auth.sub : null,
+          metadata: { format, grouping: sheet.grouping, rowCount: rows.length },
+          createdAt: /* @__PURE__ */ new Date()
+        })
+      );
+      await eventEm.flush();
+    } catch (err) {
+      logger.error("staff.timesheets.reports.export audit event failed", { err });
+    }
+    void emitStaffEvent("staff.timesheets.time_report.exported", {
+      id: report.id,
+      tenantId,
+      organizationId,
+      reference: report.reference,
+      format,
+      grouping: sheet.grouping,
+      rowCount: rows.length
+    }, { persistent: true }).catch((err) => {
+      logger.error("staff.timesheets emit time_report.exported failed", { err });
+    });
+    const intercepted = await session.respondWithDescriptor({
+      reportId: report.id,
+      reference: report.reference,
+      format,
+      grouping: sheet.grouping,
+      rowCount: rows.length,
+      filename: file.filename,
+      contentType: file.contentType
+    });
+    if (!intercepted.ok) return intercepted.response;
+    const filename = typeof intercepted.descriptor.filename === "string" && intercepted.descriptor.filename.trim().length > 0 ? intercepted.descriptor.filename.trim() : file.filename;
+    const contentType = typeof intercepted.descriptor.contentType === "string" && intercepted.descriptor.contentType.trim().length > 0 ? intercepted.descriptor.contentType.trim() : file.contentType;
+    return new NextResponse(new Uint8Array(file.body), {
+      status: 200,
+      headers: {
+        "content-type": contentType,
+        "content-disposition": `attachment; filename="${filename}"`,
+        "cache-control": "no-store"
+      }
+    });
+  } catch (err) {
+    if (isCrudHttpError(err)) {
+      return NextResponse.json(err.body, { status: err.status });
+    }
+    const { translate } = await resolveTranslations();
+    logger.error("staff.timesheets.reports.export failed", { err });
+    return NextResponse.json(
+      { error: translate("staff.errors.internal", "Internal server error") },
+      { status: 500 }
+    );
+  }
+}
+const openApi = {
+  tag: "Staff",
+  summary: "Export a customer report",
+  methods: {
+    GET: {
+      summary: "Export a customer report",
+      get query() {
+        return exportQuerySchema();
+      },
+      description: "Renders the report as `pdf` (mirrors the on-screen sheet, client-facing), `csv` or `xlsx` (raw accounting columns: date, project, task, person, description, raw and rounded minutes, billable, rate, amount). Honours the report grouping \u2014 overridable per request with `?grouping=` \u2014 plus its filters, rounding and currency. Appends an `exported` report event; exporting never locks entries. Rates and amounts are omitted for a caller without staff.timesheets.rates.view.",
+      responses: [{ status: 200, description: "The rendered report file" }],
+      errors: [
+        { status: 400, description: "Unsupported format" },
+        { status: 401, description: "Unauthorized" },
+        { status: 403, description: "Missing staff.timesheets.reports.view" },
+        { status: 404, description: "Report not found or not accessible" }
+      ]
+    }
+  }
+};
+export {
+  GET,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/staff/api/timesheets/reports/[id]/export/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../../../src/modules/staff/api/timesheets/reports/%5Bid%5D/export/route.ts"],
+  "sourcesContent": ["/**\n * `GET /api/staff/timesheets/reports/[id]/export?format=pdf|csv|xlsx` \u2014 US-G4.\n *\n * Two rules from screen 14:\n *\n *  - **Note 3.** The export inherits the current grouping, filters, rounding and\n *    currency, because it is produced from the same `buildReportSheet` the page\n *    rendered. PDF mirrors that sheet; CSV and XLSX add the raw accounting\n *    columns (date, person, description, raw vs rounded minutes).\n *  - **Note 5.** Exporting NEVER locks. The only write here is an append-only\n *    `exported` report event, which is what lets the unlock dialog say \"the PDF\n *    was downloaded on the 20th\" before someone restates a billed hour.\n *\n * The event is appended after the file is built, so a failed render leaves no\n * trace of an export that never happened; a failed event write is logged and\n * does not deny the caller their file.\n */\n\nimport { NextResponse } from 'next/server'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { CrudHttpError, isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport { emitStaffEvent } from '../../../../../events'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { StaffTimeReport, StaffTimeReportEvent } from '../../../../../data/entities'\nimport { loadReportProjectIds } from '../../../../../commands/timesheets-reports'\nimport { buildReportSheet } from '../../../../../lib/timesheets-reports/buildReportSheet'\nimport { buildReportRows } from '../../../../../lib/timesheets-reports/reportRows'\nimport {\n  normalizeReportExportFormat,\n  serializeReportExport,\n  supportedReportExportFormats,\n  type ReportExportLabels,\n} from '../../../../../lib/timesheets-reports/reportExport'\nimport {\n  hasReportGrouping,\n  reportGroupingIds,\n  type ReportGrouping,\n} from '../../../../../lib/timesheets-reports/reportGroupings'\nimport { z } from 'zod'\nimport { resolveReportRequestContext, reportSheetLabels, type Translate } from '../../shared'\nimport {\n  readSearchParamsRecord,\n  runTimesheetInterceptors,\n} from '../../../_shared/withTimesheetInterceptors'\n\nconst logger = createLogger('staff').child({ component: 'api/timesheets/reports/export' })\n\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['staff.timesheets.reports.view'] },\n}\n\n/**\n * EP-35 / EP-36: both accepted sets come from their registries, so a contributed\n * format or grouping is accepted here without this file being edited.\n */\nfunction readQuery(params: URLSearchParams): { format: string | null; grouping: ReportGrouping | undefined } {\n  const grouping = params.get('grouping')\n  return {\n    format: params.get('format'),\n    grouping: hasReportGrouping(grouping) ? (grouping as ReportGrouping) : undefined,\n  }\n}\n\n/**\n * Read lazily rather than frozen at module load: a module registering a format\n * after this route file is first imported must still appear in the published\n * schema.\n */\nfunction exportQuerySchema(): z.ZodTypeAny {\n  return z.object({\n    format: z.enum(supportedReportExportFormats() as [string, ...string[]]),\n    grouping: z.enum(reportGroupingIds() as [string, ...string[]]).optional(),\n  })\n}\n\nfunction exportLabels(translate: Translate): ReportExportLabels {\n  return {\n    documentTitle: translate('staff.time_tracking.reports.sheet.overline', 'Time and cost statement'),\n    issuedBy: translate('staff.time_tracking.reports.sheet.issuedBy', 'Issued by'),\n    reference: translate('staff.time_tracking.reports.sheet.reference', 'Reference'),\n    period: translate('staff.time_tracking.reports.sheet.period', 'Period'),\n    line: translate('staff.time_tracking.reports.sheet.lineLabel', 'Line'),\n    time: translate('staff.time_tracking.reports.sheet.time', 'Time'),\n    rate: translate('staff.time_tracking.reports.sheet.rate', 'Rate'),\n    amount: translate('staff.time_tracking.reports.sheet.amount', 'Amount'),\n    total: translate('staff.time_tracking.reports.sheet.total', 'Total to invoice'),\n    totalHint: translate(\n      'staff.time_tracking.reports.sheet.totalHint',\n      '{billable} billable \u00B7 {nonbillable} non-billable \u00B7 {rounding}',\n    ),\n    nonbillable: translate('staff.time_tracking.reports.sheet.nonbillable', 'Non-billable time'),\n    overrideBadge: translate('staff.time_tracking.reports.sheet.overrideBadge', 'agreed rate'),\n    date: translate('staff.time_tracking.reports.export.date', 'Date'),\n    project: translate('staff.time_tracking.reports.export.project', 'Project'),\n    task: translate('staff.time_tracking.reports.export.task', 'Task'),\n    person: translate('staff.time_tracking.reports.export.person', 'Person'),\n    description: translate('staff.time_tracking.reports.export.description', 'Description'),\n    billable: translate('staff.time_tracking.reports.export.billable', 'Billable'),\n    yes: translate('staff.time_tracking.reports.export.yes', 'Yes'),\n    no: translate('staff.time_tracking.reports.export.no', 'No'),\n    rawMinutes: translate('staff.time_tracking.reports.export.rawMinutes', 'Raw minutes'),\n    roundedMinutes: translate('staff.time_tracking.reports.export.roundedMinutes', 'Rounded minutes'),\n  }\n}\n\nfunction roundingLabel(translate: Translate, unitMinutes: number, direction: string): string {\n  if (!unitMinutes) return translate('staff.time_tracking.reports.rounding.off', 'no rounding')\n  const directionLabel =\n    direction === 'nearest'\n      ? translate('staff.time_tracking.reports.rounding.nearest', 'to the nearest')\n      : translate('staff.time_tracking.reports.rounding.up', 'always up')\n  return translate('staff.time_tracking.reports.rounding.rule', 'rounding {minutes} min, {direction}')\n    .replace('{minutes}', String(unitMinutes))\n    .replace('{direction}', directionLabel)\n}\n\nfunction readCustomerName(snapshot: Record<string, unknown> | null | undefined, fallback: string): string {\n  if (!snapshot) return fallback\n  for (const key of ['name', 'displayName', 'display_name', 'legalName', 'legal_name']) {\n    const value = snapshot[key]\n    if (typeof value === 'string' && value.trim().length > 0) return value.trim()\n  }\n  return fallback\n}\n\nexport async function GET(req: Request) {\n  try {\n    const context = await resolveReportRequestContext(req, { segment: 'export' })\n    // `canSeeMoney` comes from the shared context and is never re-derived here:\n    // the previous `grantedFeatures === null || authorize(...)` opened the money\n    // fields whenever the grant read failed, and this route requires only\n    // `reports.view`, so nothing else stood in the way.\n    const { container, auth, tenantId, organizationId, reportId, translate, canSeeMoney, grantedFeatures } =\n      context\n\n    const interceptors = await runTimesheetInterceptors({\n      request: req,\n      method: 'GET',\n      scope: { container, userId: auth.sub, tenantId, organizationId, userFeatures: grantedFeatures },\n      query: readSearchParamsRecord(req.url),\n    })\n    if (!interceptors.ok) return interceptors.response\n    const { session } = interceptors\n\n    const { format: rawFormat, grouping } = readQuery(session.searchParams)\n    const format = normalizeReportExportFormat(rawFormat)\n    if (!format) {\n      throw new CrudHttpError(400, {\n        error: translate(\n          'staff.time_tracking.reports.errors.unsupportedFormat',\n          'Supported export formats are pdf, csv and xlsx.',\n        ),\n        supportedFormats: supportedReportExportFormats(),\n      })\n    }\n\n    const em = (container.resolve('em') as EntityManager).fork()\n    const report = await em.findOne(StaffTimeReport, {\n      id: reportId,\n      tenantId,\n      organizationId,\n      deletedAt: null,\n    })\n    if (!report) {\n      throw new CrudHttpError(404, {\n        error: translate('staff.time_tracking.reports.errors.notFound', 'Report not found or not accessible.'),\n      })\n    }\n\n    const timeProjectIds = await loadReportProjectIds(em, report.id, { tenantId, organizationId })\n    const labels = reportSheetLabels(translate)\n    const sheet = await buildReportSheet({\n      em,\n      scope: { tenantId, organizationId },\n      report,\n      timeProjectIds,\n      labels,\n      grouping,\n    })\n    const rows = buildReportRows({\n      entries: sheet.entries,\n      projects: sheet.projects,\n      directory: sheet.directory,\n      labels,\n    })\n\n    const periodFrom = report.periodFrom instanceof Date ? report.periodFrom.toISOString().slice(0, 10) : ''\n    const periodTo = report.periodTo instanceof Date ? report.periodTo.toISOString().slice(0, 10) : ''\n\n    const file = serializeReportExport(format, {\n      reference: report.reference,\n      title: report.title,\n      customerName: readCustomerName(report.customerSnapshot, report.title),\n      periodLabel: `${periodFrom} \u2013 ${periodTo}`,\n      issuedByLabel: null,\n      issuedAtLabel: report.closedAt ? report.closedAt.toISOString().slice(0, 10) : null,\n      currencyCode: sheet.currencyCode,\n      showRates: (report.showRates ?? true) && canSeeMoney,\n      groups: sheet.totals.groups,\n      rows: canSeeMoney ? rows : rows.map((row) => ({ ...row, rate: null, amount: null })),\n      totals: {\n        billableMinutes: sheet.totals.billableMinutes,\n        nonbillableMinutes: sheet.totals.nonbillableMinutes,\n        totalAmount: canSeeMoney ? sheet.totals.totalAmount : 0,\n      },\n      roundingLabel: roundingLabel(\n        translate,\n        report.roundingUnitMinutes ?? 0,\n        report.roundingDirection ?? 'up',\n      ),\n      labels: exportLabels(translate),\n    })\n\n    // Append-only audit. Never a lock \u2014 screen 14 note 5.\n    try {\n      const eventEm = (container.resolve('em') as EntityManager).fork()\n      eventEm.persist(\n        eventEm.create(StaffTimeReportEvent, {\n          tenantId,\n          organizationId,\n          reportId: report.id,\n          eventType: 'exported',\n          reason: null,\n          actorUserId: typeof auth.sub === 'string' ? auth.sub : null,\n          metadata: { format, grouping: sheet.grouping, rowCount: rows.length },\n          createdAt: new Date(),\n        }),\n      )\n      await eventEm.flush()\n    } catch (err) {\n      // The caller already has a correct file; refusing it because the audit row\n      // failed would be the wrong trade.\n      logger.error('staff.timesheets.reports.export audit event failed', { err })\n    }\n\n    void emitStaffEvent('staff.timesheets.time_report.exported', {\n      id: report.id,\n      tenantId,\n      organizationId,\n      reference: report.reference,\n      format,\n      grouping: sheet.grouping,\n      rowCount: rows.length,\n    }, { persistent: true }).catch((err) => {\n      logger.error('staff.timesheets emit time_report.exported failed', { err })\n    })\n\n    // The after-pass cannot rewrite an export's bytes, so what it shapes is the\n    // file's descriptor: an interceptor may rename the download or restate its\n    // media type, and a failing one replaces the file with its own error.\n    const intercepted = await session.respondWithDescriptor({\n      reportId: report.id,\n      reference: report.reference,\n      format,\n      grouping: sheet.grouping,\n      rowCount: rows.length,\n      filename: file.filename,\n      contentType: file.contentType,\n    })\n    if (!intercepted.ok) return intercepted.response\n\n    const filename =\n      typeof intercepted.descriptor.filename === 'string' && intercepted.descriptor.filename.trim().length > 0\n        ? intercepted.descriptor.filename.trim()\n        : file.filename\n    const contentType =\n      typeof intercepted.descriptor.contentType === 'string' && intercepted.descriptor.contentType.trim().length > 0\n        ? intercepted.descriptor.contentType.trim()\n        : file.contentType\n\n    return new NextResponse(new Uint8Array(file.body), {\n      status: 200,\n      headers: {\n        'content-type': contentType,\n        'content-disposition': `attachment; filename=\"${filename}\"`,\n        'cache-control': 'no-store',\n      },\n    })\n  } catch (err) {\n    if (isCrudHttpError(err)) {\n      return NextResponse.json(err.body, { status: err.status })\n    }\n    const { translate } = await resolveTranslations()\n    logger.error('staff.timesheets.reports.export failed', { err })\n    return NextResponse.json(\n      { error: translate('staff.errors.internal', 'Internal server error') },\n      { status: 500 },\n    )\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Staff',\n  summary: 'Export a customer report',\n  methods: {\n    GET: {\n      summary: 'Export a customer report',\n      get query() {\n        return exportQuerySchema()\n      },\n      description:\n        'Renders the report as `pdf` (mirrors the on-screen sheet, client-facing), `csv` or `xlsx` (raw accounting columns: date, project, task, person, description, raw and rounded minutes, billable, rate, amount). Honours the report grouping \u2014 overridable per request with `?grouping=` \u2014 plus its filters, rounding and currency. Appends an `exported` report event; exporting never locks entries. Rates and amounts are omitted for a caller without staff.timesheets.rates.view.',\n      responses: [{ status: 200, description: 'The rendered report file' }],\n      errors: [\n        { status: 400, description: 'Unsupported format' },\n        { status: 401, description: 'Unauthorized' },\n        { status: 403, description: 'Missing staff.timesheets.reports.view' },\n        { status: 404, description: 'Report not found or not accessible' },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAkBA,SAAS,oBAAoB;AAE7B,SAAS,eAAe,uBAAuB;AAC/C,SAAS,2BAA2B;AACpC,SAAS,oBAAoB;AAC7B,SAAS,sBAAsB;AAE/B,SAAS,iBAAiB,4BAA4B;AACtD,SAAS,4BAA4B;AACrC,SAAS,wBAAwB;AACjC,SAAS,uBAAuB;AAChC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OAEK;AACP;AAAA,EACE;AAAA,EACA;AAAA,OAEK;AACP,SAAS,SAAS;AAClB,SAAS,6BAA6B,yBAAyC;AAC/E;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAEP,MAAM,SAAS,aAAa,OAAO,EAAE,MAAM,EAAE,WAAW,gCAAgC,CAAC;AAGlF,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,+BAA+B,EAAE;AAC/E;AAMA,SAAS,UAAU,QAA0F;AAC3G,QAAM,WAAW,OAAO,IAAI,UAAU;AACtC,SAAO;AAAA,IACL,QAAQ,OAAO,IAAI,QAAQ;AAAA,IAC3B,UAAU,kBAAkB,QAAQ,IAAK,WAA8B;AAAA,EACzE;AACF;AAOA,SAAS,oBAAkC;AACzC,SAAO,EAAE,OAAO;AAAA,IACd,QAAQ,EAAE,KAAK,6BAA6B,CAA0B;AAAA,IACtE,UAAU,EAAE,KAAK,kBAAkB,CAA0B,EAAE,SAAS;AAAA,EAC1E,CAAC;AACH;AAEA,SAAS,aAAa,WAA0C;AAC9D,SAAO;AAAA,IACL,eAAe,UAAU,8CAA8C,yBAAyB;AAAA,IAChG,UAAU,UAAU,8CAA8C,WAAW;AAAA,IAC7E,WAAW,UAAU,+CAA+C,WAAW;AAAA,IAC/E,QAAQ,UAAU,4CAA4C,QAAQ;AAAA,IACtE,MAAM,UAAU,+CAA+C,MAAM;AAAA,IACrE,MAAM,UAAU,0CAA0C,MAAM;AAAA,IAChE,MAAM,UAAU,0CAA0C,MAAM;AAAA,IAChE,QAAQ,UAAU,4CAA4C,QAAQ;AAAA,IACtE,OAAO,UAAU,2CAA2C,kBAAkB;AAAA,IAC9E,WAAW;AAAA,MACT;AAAA,MACA;AAAA,IACF;AAAA,IACA,aAAa,UAAU,iDAAiD,mBAAmB;AAAA,IAC3F,eAAe,UAAU,mDAAmD,aAAa;AAAA,IACzF,MAAM,UAAU,2CAA2C,MAAM;AAAA,IACjE,SAAS,UAAU,8CAA8C,SAAS;AAAA,IAC1E,MAAM,UAAU,2CAA2C,MAAM;AAAA,IACjE,QAAQ,UAAU,6CAA6C,QAAQ;AAAA,IACvE,aAAa,UAAU,kDAAkD,aAAa;AAAA,IACtF,UAAU,UAAU,+CAA+C,UAAU;AAAA,IAC7E,KAAK,UAAU,0CAA0C,KAAK;AAAA,IAC9D,IAAI,UAAU,yCAAyC,IAAI;AAAA,IAC3D,YAAY,UAAU,iDAAiD,aAAa;AAAA,IACpF,gBAAgB,UAAU,qDAAqD,iBAAiB;AAAA,EAClG;AACF;AAEA,SAAS,cAAc,WAAsB,aAAqB,WAA2B;AAC3F,MAAI,CAAC,YAAa,QAAO,UAAU,4CAA4C,aAAa;AAC5F,QAAM,iBACJ,cAAc,YACV,UAAU,gDAAgD,gBAAgB,IAC1E,UAAU,2CAA2C,WAAW;AACtE,SAAO,UAAU,6CAA6C,qCAAqC,EAChG,QAAQ,aAAa,OAAO,WAAW,CAAC,EACxC,QAAQ,eAAe,cAAc;AAC1C;AAEA,SAAS,iBAAiB,UAAsD,UAA0B;AACxG,MAAI,CAAC,SAAU,QAAO;AACtB,aAAW,OAAO,CAAC,QAAQ,eAAe,gBAAgB,aAAa,YAAY,GAAG;AACpF,UAAM,QAAQ,SAAS,GAAG;AAC1B,QAAI,OAAO,UAAU,YAAY,MAAM,KAAK,EAAE,SAAS,EAAG,QAAO,MAAM,KAAK;AAAA,EAC9E;AACA,SAAO;AACT;AAEA,eAAsB,IAAI,KAAc;AACtC,MAAI;AACF,UAAM,UAAU,MAAM,4BAA4B,KAAK,EAAE,SAAS,SAAS,CAAC;AAK5E,UAAM,EAAE,WAAW,MAAM,UAAU,gBAAgB,UAAU,WAAW,aAAa,gBAAgB,IACnG;AAEF,UAAM,eAAe,MAAM,yBAAyB;AAAA,MAClD,SAAS;AAAA,MACT,QAAQ;AAAA,MACR,OAAO,EAAE,WAAW,QAAQ,KAAK,KAAK,UAAU,gBAAgB,cAAc,gBAAgB;AAAA,MAC9F,OAAO,uBAAuB,IAAI,GAAG;AAAA,IACvC,CAAC;AACD,QAAI,CAAC,aAAa,GAAI,QAAO,aAAa;AAC1C,UAAM,EAAE,QAAQ,IAAI;AAEpB,UAAM,EAAE,QAAQ,WAAW,SAAS,IAAI,UAAU,QAAQ,YAAY;AACtE,UAAM,SAAS,4BAA4B,SAAS;AACpD,QAAI,CAAC,QAAQ;AACX,YAAM,IAAI,cAAc,KAAK;AAAA,QAC3B,OAAO;AAAA,UACL;AAAA,UACA;AAAA,QACF;AAAA,QACA,kBAAkB,6BAA6B;AAAA,MACjD,CAAC;AAAA,IACH;AAEA,UAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC3D,UAAM,SAAS,MAAM,GAAG,QAAQ,iBAAiB;AAAA,MAC/C,IAAI;AAAA,MACJ;AAAA,MACA;AAAA,MACA,WAAW;AAAA,IACb,CAAC;AACD,QAAI,CAAC,QAAQ;AACX,YAAM,IAAI,cAAc,KAAK;AAAA,QAC3B,OAAO,UAAU,+CAA+C,qCAAqC;AAAA,MACvG,CAAC;AAAA,IACH;AAEA,UAAM,iBAAiB,MAAM,qBAAqB,IAAI,OAAO,IAAI,EAAE,UAAU,eAAe,CAAC;AAC7F,UAAM,SAAS,kBAAkB,SAAS;AAC1C,UAAM,QAAQ,MAAM,iBAAiB;AAAA,MACnC;AAAA,MACA,OAAO,EAAE,UAAU,eAAe;AAAA,MAClC;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,CAAC;AACD,UAAM,OAAO,gBAAgB;AAAA,MAC3B,SAAS,MAAM;AAAA,MACf,UAAU,MAAM;AAAA,MAChB,WAAW,MAAM;AAAA,MACjB;AAAA,IACF,CAAC;AAED,UAAM,aAAa,OAAO,sBAAsB,OAAO,OAAO,WAAW,YAAY,EAAE,MAAM,GAAG,EAAE,IAAI;AACtG,UAAM,WAAW,OAAO,oBAAoB,OAAO,OAAO,SAAS,YAAY,EAAE,MAAM,GAAG,EAAE,IAAI;AAEhG,UAAM,OAAO,sBAAsB,QAAQ;AAAA,MACzC,WAAW,OAAO;AAAA,MAClB,OAAO,OAAO;AAAA,MACd,cAAc,iBAAiB,OAAO,kBAAkB,OAAO,KAAK;AAAA,MACpE,aAAa,GAAG,UAAU,WAAM,QAAQ;AAAA,MACxC,eAAe;AAAA,MACf,eAAe,OAAO,WAAW,OAAO,SAAS,YAAY,EAAE,MAAM,GAAG,EAAE,IAAI;AAAA,MAC9E,cAAc,MAAM;AAAA,MACpB,YAAY,OAAO,aAAa,SAAS;AAAA,MACzC,QAAQ,MAAM,OAAO;AAAA,MACrB,MAAM,cAAc,OAAO,KAAK,IAAI,CAAC,SAAS,EAAE,GAAG,KAAK,MAAM,MAAM,QAAQ,KAAK,EAAE;AAAA,MACnF,QAAQ;AAAA,QACN,iBAAiB,MAAM,OAAO;AAAA,QAC9B,oBAAoB,MAAM,OAAO;AAAA,QACjC,aAAa,cAAc,MAAM,OAAO,cAAc;AAAA,MACxD;AAAA,MACA,eAAe;AAAA,QACb;AAAA,QACA,OAAO,uBAAuB;AAAA,QAC9B,OAAO,qBAAqB;AAAA,MAC9B;AAAA,MACA,QAAQ,aAAa,SAAS;AAAA,IAChC,CAAC;AAGD,QAAI;AACF,YAAM,UAAW,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAChE,cAAQ;AAAA,QACN,QAAQ,OAAO,sBAAsB;AAAA,UACnC;AAAA,UACA;AAAA,UACA,UAAU,OAAO;AAAA,UACjB,WAAW;AAAA,UACX,QAAQ;AAAA,UACR,aAAa,OAAO,KAAK,QAAQ,WAAW,KAAK,MAAM;AAAA,UACvD,UAAU,EAAE,QAAQ,UAAU,MAAM,UAAU,UAAU,KAAK,OAAO;AAAA,UACpE,WAAW,oBAAI,KAAK;AAAA,QACtB,CAAC;AAAA,MACH;AACA,YAAM,QAAQ,MAAM;AAAA,IACtB,SAAS,KAAK;AAGZ,aAAO,MAAM,sDAAsD,EAAE,IAAI,CAAC;AAAA,IAC5E;AAEA,SAAK,eAAe,yCAAyC;AAAA,MAC3D,IAAI,OAAO;AAAA,MACX;AAAA,MACA;AAAA,MACA,WAAW,OAAO;AAAA,MAClB;AAAA,MACA,UAAU,MAAM;AAAA,MAChB,UAAU,KAAK;AAAA,IACjB,GAAG,EAAE,YAAY,KAAK,CAAC,EAAE,MAAM,CAAC,QAAQ;AACtC,aAAO,MAAM,qDAAqD,EAAE,IAAI,CAAC;AAAA,IAC3E,CAAC;AAKD,UAAM,cAAc,MAAM,QAAQ,sBAAsB;AAAA,MACtD,UAAU,OAAO;AAAA,MACjB,WAAW,OAAO;AAAA,MAClB;AAAA,MACA,UAAU,MAAM;AAAA,MAChB,UAAU,KAAK;AAAA,MACf,UAAU,KAAK;AAAA,MACf,aAAa,KAAK;AAAA,IACpB,CAAC;AACD,QAAI,CAAC,YAAY,GAAI,QAAO,YAAY;AAExC,UAAM,WACJ,OAAO,YAAY,WAAW,aAAa,YAAY,YAAY,WAAW,SAAS,KAAK,EAAE,SAAS,IACnG,YAAY,WAAW,SAAS,KAAK,IACrC,KAAK;AACX,UAAM,cACJ,OAAO,YAAY,WAAW,gBAAgB,YAAY,YAAY,WAAW,YAAY,KAAK,EAAE,SAAS,IACzG,YAAY,WAAW,YAAY,KAAK,IACxC,KAAK;AAEX,WAAO,IAAI,aAAa,IAAI,WAAW,KAAK,IAAI,GAAG;AAAA,MACjD,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,gBAAgB;AAAA,QAChB,uBAAuB,yBAAyB,QAAQ;AAAA,QACxD,iBAAiB;AAAA,MACnB;AAAA,IACF,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,GAAG;AACxB,aAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,IAC3D;AACA,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,WAAO,MAAM,0CAA0C,EAAE,IAAI,CAAC;AAC9D,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,UAAU,yBAAyB,uBAAuB,EAAE;AAAA,MACrE,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,IAAI,QAAQ;AACV,eAAO,kBAAkB;AAAA,MAC3B;AAAA,MACA,aACE;AAAA,MACF,WAAW,CAAC,EAAE,QAAQ,KAAK,aAAa,2BAA2B,CAAC;AAAA,MACpE,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,qBAAqB;AAAA,QACjD,EAAE,QAAQ,KAAK,aAAa,eAAe;AAAA,QAC3C,EAAE,QAAQ,KAAK,aAAa,wCAAwC;AAAA,QACpE,EAAE,QAAQ,KAAK,aAAa,qCAAqC;AAAA,MACnE;AAAA,IACF;AAAA,EACF;AACF;",
+  "names": []
+}