@open-mercato/core 0.7.1-develop.7178.1.ab93fbaf4e → 0.7.1-develop.7180.1.9717fbbb43

package/dist/modules/staff/api/timesheets/tags/entry-assignments/route.js

@@ -0,0 +1,235 @@
+import { NextResponse } from "next/server";
+import { z } from "zod";
+import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
+import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
+import { resolveOrganizationScopeForRequest } from "@open-mercato/core/modules/directory/utils/organizationScope";
+import { serializeOperationMetadata } from "@open-mercato/shared/lib/commands/operationMetadata";
+import { getCommandInterceptorHttpRejection } from "@open-mercato/shared/lib/commands/errors";
+import { CrudHttpError, isCrudHttpError } from "@open-mercato/shared/lib/crud/errors";
+import { resolveTranslations } from "@open-mercato/shared/lib/i18n/server";
+import { parseScopedCommandInput } from "@open-mercato/shared/lib/api/scoped";
+import { createLogger } from "@open-mercato/shared/lib/logger";
+import { emitStaffEvent } from "../../../../events.js";
+import { readJsonSafe } from "@open-mercato/shared/lib/http/readJsonSafe";
+import { runTimesheetInterceptors } from "../../_shared/withTimesheetInterceptors.js";
+import {
+  staffTimeEntryTagAssignmentSchema
+} from "../../../../data/validators.js";
+import { staffTimeTagCommandIds } from "../../../../commands/timesheets-tags.js";
+import {
+  STAFF_TIME_TRACKING_RESOURCE_KINDS,
+  runStaffMutationGuardAfterSuccess,
+  runStaffMutationGuards
+} from "../../../guards.js";
+import { loadTagProjectAccess, requireAccessibleTimeEntry } from "../access.js";
+const logger = createLogger("staff").child({ component: "api/timesheets/tags/entry-assignments" });
+const RESOURCE_KIND = STAFF_TIME_TRACKING_RESOURCE_KINDS.entryTag;
+const metadata = {
+  POST: { requireAuth: true, requireFeatures: ["staff.timesheets.tasks.manage"] },
+  DELETE: { requireAuth: true, requireFeatures: ["staff.timesheets.tasks.manage"] }
+};
+const assignResponseSchema = z.object({
+  timeEntryId: z.string().uuid(),
+  tagIds: z.array(z.string().uuid()),
+  assignedTagIds: z.array(z.string().uuid()),
+  alreadyAssignedTagIds: z.array(z.string().uuid())
+});
+const unassignResponseSchema = z.object({
+  timeEntryId: z.string().uuid(),
+  tagIds: z.array(z.string().uuid()),
+  removedTagIds: z.array(z.string().uuid()),
+  notAssignedTagIds: z.array(z.string().uuid())
+});
+async function buildContext(req) {
+  const container = await createRequestContainer();
+  const auth = await getAuthFromRequest(req);
+  const { translate } = await resolveTranslations();
+  if (!auth) throw new CrudHttpError(401, { error: translate("staff.errors.unauthorized", "Unauthorized") });
+  const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req });
+  const ctx = {
+    container,
+    auth,
+    organizationScope: scope,
+    selectedOrganizationId: scope?.selectedId ?? auth.orgId ?? null,
+    organizationIds: scope?.filterIds ?? (auth.orgId ? [auth.orgId] : null),
+    request: req
+  };
+  return { ctx, translate };
+}
+function requireAssignmentScope(ctx, translate) {
+  const tenantId = ctx.auth?.tenantId ?? null;
+  const organizationId = ctx.selectedOrganizationId ?? ctx.auth?.orgId ?? null;
+  const userId = ctx.auth?.sub ?? null;
+  if (!tenantId || !organizationId || !userId) {
+    throw new CrudHttpError(400, {
+      error: translate("staff.errors.missingScope", "Missing tenant or organization scope.")
+    });
+  }
+  return { tenantId, organizationId, userId };
+}
+async function handle(req, commandId, operation) {
+  const { ctx, translate } = await buildContext(req);
+  const scope = requireAssignmentScope(ctx, translate);
+  const interceptors = await runTimesheetInterceptors({
+    request: req,
+    method: operation === "create" ? "POST" : "DELETE",
+    scope: {
+      container: ctx.container,
+      userId: scope.userId,
+      tenantId: scope.tenantId,
+      organizationId: scope.organizationId
+    },
+    body: await readJsonSafe(req, {})
+  });
+  if (!interceptors.ok) return interceptors.response;
+  const { session } = interceptors;
+  const input = parseScopedCommandInput(staffTimeEntryTagAssignmentSchema, session.body, ctx, translate);
+  const access = await loadTagProjectAccess(ctx.container, scope);
+  const em = ctx.container.resolve("em").fork();
+  await requireAccessibleTimeEntry(em, input.timeEntryId, scope, access, translate);
+  const guardResult = await runStaffMutationGuards(
+    ctx.container,
+    {
+      tenantId: scope.tenantId,
+      organizationId: scope.organizationId,
+      userId: scope.userId,
+      resourceKind: RESOURCE_KIND,
+      resourceId: input.timeEntryId,
+      operation,
+      requestMethod: req.method,
+      requestHeaders: req.headers,
+      mutationPayload: input
+    }
+  );
+  if (!guardResult.ok) {
+    return NextResponse.json(guardResult.errorBody ?? { error: "Operation blocked by guard" }, {
+      status: guardResult.errorStatus ?? 422
+    });
+  }
+  const commandBus = ctx.container.resolve("commandBus");
+  const { result, logEntry } = await commandBus.execute(commandId, { input, ctx });
+  if (guardResult.afterSuccessCallbacks.length) {
+    await runStaffMutationGuardAfterSuccess(guardResult.afterSuccessCallbacks, {
+      tenantId: scope.tenantId,
+      organizationId: scope.organizationId,
+      userId: scope.userId,
+      resourceKind: RESOURCE_KIND,
+      resourceId: input.timeEntryId,
+      operation,
+      requestMethod: req.method,
+      requestHeaders: req.headers
+    });
+  }
+  void emitStaffEvent("staff.timesheets.time_entry.updated", {
+    id: input.timeEntryId,
+    tenantId: scope.tenantId,
+    organizationId: scope.organizationId
+  }, { persistent: true }).catch((err) => {
+    logger.error("staff.timesheets emit time_entry.updated failed", { err });
+  });
+  const assignment = result;
+  const unassignment = result;
+  const payload = operation === "create" ? {
+    timeEntryId: input.timeEntryId,
+    tagIds: assignment?.tagIds ?? [],
+    assignedTagIds: assignment?.assignedTagIds ?? [],
+    alreadyAssignedTagIds: assignment?.alreadyAssignedTagIds ?? []
+  } : {
+    timeEntryId: input.timeEntryId,
+    tagIds: unassignment?.tagIds ?? [],
+    removedTagIds: unassignment?.removedTagIds ?? [],
+    notAssignedTagIds: unassignment?.notAssignedTagIds ?? []
+  };
+  const response = await session.respond(200, payload);
+  if (logEntry?.undoToken && logEntry?.id && logEntry?.commandId) {
+    response.headers.set(
+      "x-om-operation",
+      serializeOperationMetadata({
+        id: logEntry.id,
+        undoToken: logEntry.undoToken,
+        commandId: logEntry.commandId,
+        actionLabel: logEntry.actionLabel ?? null,
+        resourceKind: logEntry.resourceKind ?? RESOURCE_KIND,
+        resourceId: logEntry.resourceId ?? input.timeEntryId,
+        executedAt: logEntry.createdAt instanceof Date ? logEntry.createdAt.toISOString() : void 0
+      })
+    );
+  }
+  return response;
+}
+async function errorResponse(err, message) {
+  if (isCrudHttpError(err)) {
+    return NextResponse.json(err.body, { status: err.status });
+  }
+  const { translate } = await resolveTranslations();
+  if (err instanceof z.ZodError) {
+    return NextResponse.json(
+      { error: translate("staff.errors.invalid_request", "Invalid request"), details: err.issues },
+      { status: 400 }
+    );
+  }
+  logger.error(message, { err });
+  return NextResponse.json({ error: translate("staff.errors.internal", "Internal server error") }, { status: 500 });
+}
+async function POST(req) {
+  try {
+    return await handle(req, staffTimeTagCommandIds.assignEntry, "create");
+  } catch (err) {
+    const interceptorRejection = getCommandInterceptorHttpRejection(err);
+    if (interceptorRejection) {
+      return NextResponse.json(interceptorRejection.body, { status: interceptorRejection.status });
+    }
+    return errorResponse(err, "staff.timesheets.tags.entry-assignments.POST failed");
+  }
+}
+async function DELETE(req) {
+  try {
+    return await handle(req, staffTimeTagCommandIds.unassignEntry, "delete");
+  } catch (err) {
+    const interceptorRejection = getCommandInterceptorHttpRejection(err);
+    if (interceptorRejection) {
+      return NextResponse.json(interceptorRejection.body, { status: interceptorRejection.status });
+    }
+    return errorResponse(err, "staff.timesheets.tags.entry-assignments.DELETE failed");
+  }
+}
+const openApi = {
+  tag: "Staff",
+  summary: "Time entry tag assignments",
+  methods: {
+    POST: {
+      summary: "Assign tags to a time entry",
+      description: "Adds tags to a time entry. Idempotent \u2014 a tag the entry already carries comes back in alreadyAssignedTagIds. Refused with 404 when the entry is outside the caller's project access, and with 409 when it is locked in a closed report.",
+      requestBody: { contentType: "application/json", schema: staffTimeEntryTagAssignmentSchema },
+      responses: [{ status: 200, description: "Tags assigned", schema: assignResponseSchema }],
+      errors: [
+        { status: 400, description: "Invalid payload or missing organization scope" },
+        { status: 401, description: "Unauthorized" },
+        { status: 403, description: "Missing staff.timesheets.tasks.manage" },
+        { status: 404, description: "Time entry not found or not accessible" },
+        { status: 409, description: "Time entry locked in a closed report" },
+        { status: 422, description: "Unknown tag ids" }
+      ]
+    },
+    DELETE: {
+      summary: "Unassign tags from a time entry",
+      description: "Removes tags from a time entry. Idempotent \u2014 a tag the entry does not carry comes back in notAssignedTagIds.",
+      requestBody: { contentType: "application/json", schema: staffTimeEntryTagAssignmentSchema },
+      responses: [{ status: 200, description: "Tags unassigned", schema: unassignResponseSchema }],
+      errors: [
+        { status: 400, description: "Invalid payload or missing organization scope" },
+        { status: 401, description: "Unauthorized" },
+        { status: 403, description: "Missing staff.timesheets.tasks.manage" },
+        { status: 404, description: "Time entry not found or not accessible" },
+        { status: 409, description: "Time entry locked in a closed report" }
+      ]
+    }
+  }
+};
+export {
+  DELETE,
+  POST,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/staff/api/timesheets/tags/entry-assignments/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../../src/modules/staff/api/timesheets/tags/entry-assignments/route.ts"],
+  "sourcesContent": ["/**\n * Time entry tag assignment (T3.4) \u2014 the tag list of the entry form on screen 8\n * and the badges the entries list of screen 10 renders.\n *\n * Mirrors the task endpoint: `POST` adds, `DELETE` removes, both idempotent, and\n * both filter through `resolveProjectAccess` before the entry is even loaded. An\n * entry frozen in a closed report is refused by the command with `409`.\n */\nimport { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { serializeOperationMetadata } from '@open-mercato/shared/lib/commands/operationMetadata'\nimport type { CommandBus, CommandRuntimeContext } from '@open-mercato/shared/lib/commands'\nimport { getCommandInterceptorHttpRejection } from '@open-mercato/shared/lib/commands/errors'\nimport { CrudHttpError, isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { parseScopedCommandInput } from '@open-mercato/shared/lib/api/scoped'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport { emitStaffEvent } from '../../../../events'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { readJsonSafe } from '@open-mercato/shared/lib/http/readJsonSafe'\nimport { runTimesheetInterceptors } from '../../_shared/withTimesheetInterceptors'\nimport {\n  staffTimeEntryTagAssignmentSchema,\n  type StaffTimeEntryTagAssignmentInput,\n} from '../../../../data/validators'\nimport { staffTimeTagCommandIds } from '../../../../commands/timesheets-tags'\nimport {\n  STAFF_TIME_TRACKING_RESOURCE_KINDS,\n  runStaffMutationGuardAfterSuccess,\n  runStaffMutationGuards,\n} from '../../../guards'\nimport { loadTagProjectAccess, requireAccessibleTimeEntry, type TagAssignmentScope } from '../access'\n\nconst logger = createLogger('staff').child({ component: 'api/timesheets/tags/entry-assignments' })\n\nconst RESOURCE_KIND = STAFF_TIME_TRACKING_RESOURCE_KINDS.entryTag\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: ['staff.timesheets.tasks.manage'] },\n  DELETE: { requireAuth: true, requireFeatures: ['staff.timesheets.tasks.manage'] },\n}\n\nconst assignResponseSchema = z.object({\n  timeEntryId: z.string().uuid(),\n  tagIds: z.array(z.string().uuid()),\n  assignedTagIds: z.array(z.string().uuid()),\n  alreadyAssignedTagIds: z.array(z.string().uuid()),\n})\n\nconst unassignResponseSchema = z.object({\n  timeEntryId: z.string().uuid(),\n  tagIds: z.array(z.string().uuid()),\n  removedTagIds: z.array(z.string().uuid()),\n  notAssignedTagIds: z.array(z.string().uuid()),\n})\n\ntype AssignmentResult = {\n  targetId: string\n  assignedTagIds: string[]\n  alreadyAssignedTagIds: string[]\n  tagIds: string[]\n}\n\ntype UnassignmentResult = {\n  targetId: string\n  removedTagIds: string[]\n  notAssignedTagIds: string[]\n  tagIds: string[]\n}\n\nasync function buildContext(\n  req: Request,\n): Promise<{ ctx: CommandRuntimeContext; translate: (key: string, fallback?: string) => string }> {\n  const container = await createRequestContainer()\n  const auth = await getAuthFromRequest(req)\n  const { translate } = await resolveTranslations()\n  if (!auth) throw new CrudHttpError(401, { error: translate('staff.errors.unauthorized', 'Unauthorized') })\n  const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n  const ctx: CommandRuntimeContext = {\n    container,\n    auth,\n    organizationScope: scope,\n    selectedOrganizationId: scope?.selectedId ?? auth.orgId ?? null,\n    organizationIds: scope?.filterIds ?? (auth.orgId ? [auth.orgId] : null),\n    request: req,\n  }\n  return { ctx, translate }\n}\n\nfunction requireAssignmentScope(\n  ctx: CommandRuntimeContext,\n  translate: (key: string, fallback?: string) => string,\n): TagAssignmentScope {\n  const tenantId = ctx.auth?.tenantId ?? null\n  const organizationId = ctx.selectedOrganizationId ?? ctx.auth?.orgId ?? null\n  const userId = ctx.auth?.sub ?? null\n  if (!tenantId || !organizationId || !userId) {\n    throw new CrudHttpError(400, {\n      error: translate('staff.errors.missingScope', 'Missing tenant or organization scope.'),\n    })\n  }\n  return { tenantId, organizationId, userId }\n}\n\nasync function handle(req: Request, commandId: string, operation: 'create' | 'delete'): Promise<Response> {\n  const { ctx, translate } = await buildContext(req)\n  const scope = requireAssignmentScope(ctx, translate)\n\n  const interceptors = await runTimesheetInterceptors({\n    request: req,\n    method: operation === 'create' ? 'POST' : 'DELETE',\n    scope: {\n      container: ctx.container,\n      userId: scope.userId,\n      tenantId: scope.tenantId,\n      organizationId: scope.organizationId,\n    },\n    body: await readJsonSafe<Record<string, unknown>>(req, {}),\n  })\n  if (!interceptors.ok) return interceptors.response\n  const { session } = interceptors\n\n  const input = parseScopedCommandInput(staffTimeEntryTagAssignmentSchema, session.body, ctx, translate)\n\n  const access = await loadTagProjectAccess(ctx.container, scope)\n  const em = (ctx.container.resolve('em') as EntityManager).fork()\n  await requireAccessibleTimeEntry(em, input.timeEntryId, scope, access, translate)\n\n  const guardResult = await runStaffMutationGuards(\n    ctx.container,\n    {\n      tenantId: scope.tenantId,\n      organizationId: scope.organizationId,\n      userId: scope.userId,\n      resourceKind: RESOURCE_KIND,\n      resourceId: input.timeEntryId,\n      operation,\n      requestMethod: req.method,\n      requestHeaders: req.headers,\n      mutationPayload: input,\n    },\n  )\n  if (!guardResult.ok) {\n    return NextResponse.json(guardResult.errorBody ?? { error: 'Operation blocked by guard' }, {\n      status: guardResult.errorStatus ?? 422,\n    })\n  }\n\n  const commandBus = ctx.container.resolve('commandBus') as CommandBus\n  const { result, logEntry } = await commandBus.execute<\n    StaffTimeEntryTagAssignmentInput,\n    AssignmentResult | UnassignmentResult\n  >(commandId, { input, ctx })\n\n  if (guardResult.afterSuccessCallbacks.length) {\n    await runStaffMutationGuardAfterSuccess(guardResult.afterSuccessCallbacks, {\n      tenantId: scope.tenantId,\n      organizationId: scope.organizationId,\n      userId: scope.userId,\n      resourceKind: RESOURCE_KIND,\n      resourceId: input.timeEntryId,\n      operation,\n      requestMethod: req.method,\n      requestHeaders: req.headers,\n    })\n  }\n\n  // A tag write is a change to the entry itself, so it travels as the entry's own\n  // `updated` event rather than an assignment-shaped one no subscriber knows about.\n  void emitStaffEvent('staff.timesheets.time_entry.updated', {\n    id: input.timeEntryId,\n    tenantId: scope.tenantId,\n    organizationId: scope.organizationId,\n  }, { persistent: true }).catch((err) => {\n    logger.error('staff.timesheets emit time_entry.updated failed', { err })\n  })\n\n  const assignment = result as AssignmentResult | undefined\n  const unassignment = result as UnassignmentResult | undefined\n  const payload =\n    operation === 'create'\n      ? {\n          timeEntryId: input.timeEntryId,\n          tagIds: assignment?.tagIds ?? [],\n          assignedTagIds: assignment?.assignedTagIds ?? [],\n          alreadyAssignedTagIds: assignment?.alreadyAssignedTagIds ?? [],\n        }\n      : {\n          timeEntryId: input.timeEntryId,\n          tagIds: unassignment?.tagIds ?? [],\n          removedTagIds: unassignment?.removedTagIds ?? [],\n          notAssignedTagIds: unassignment?.notAssignedTagIds ?? [],\n        }\n\n  const response = await session.respond(200, payload)\n  if (logEntry?.undoToken && logEntry?.id && logEntry?.commandId) {\n    response.headers.set(\n      'x-om-operation',\n      serializeOperationMetadata({\n        id: logEntry.id,\n        undoToken: logEntry.undoToken,\n        commandId: logEntry.commandId,\n        actionLabel: logEntry.actionLabel ?? null,\n        resourceKind: logEntry.resourceKind ?? RESOURCE_KIND,\n        resourceId: logEntry.resourceId ?? input.timeEntryId,\n        executedAt: logEntry.createdAt instanceof Date ? logEntry.createdAt.toISOString() : undefined,\n      }),\n    )\n  }\n  return response\n}\n\nasync function errorResponse(err: unknown, message: string): Promise<Response> {\n  if (isCrudHttpError(err)) {\n    return NextResponse.json(err.body, { status: err.status })\n  }\n  const { translate } = await resolveTranslations()\n  if (err instanceof z.ZodError) {\n    return NextResponse.json(\n      { error: translate('staff.errors.invalid_request', 'Invalid request'), details: err.issues },\n      { status: 400 },\n    )\n  }\n  logger.error(message, { err })\n  return NextResponse.json({ error: translate('staff.errors.internal', 'Internal server error') }, { status: 500 })\n}\n\nexport async function POST(req: Request) {\n  try {\n    return await handle(req, staffTimeTagCommandIds.assignEntry, 'create')\n  } catch (err) {\n    const interceptorRejection = getCommandInterceptorHttpRejection(err)\n    if (interceptorRejection) {\n      return NextResponse.json(interceptorRejection.body, { status: interceptorRejection.status })\n    }\n    return errorResponse(err, 'staff.timesheets.tags.entry-assignments.POST failed')\n  }\n}\n\nexport async function DELETE(req: Request) {\n  try {\n    return await handle(req, staffTimeTagCommandIds.unassignEntry, 'delete')\n  } catch (err) {\n    const interceptorRejection = getCommandInterceptorHttpRejection(err)\n    if (interceptorRejection) {\n      return NextResponse.json(interceptorRejection.body, { status: interceptorRejection.status })\n    }\n    return errorResponse(err, 'staff.timesheets.tags.entry-assignments.DELETE failed')\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Staff',\n  summary: 'Time entry tag assignments',\n  methods: {\n    POST: {\n      summary: 'Assign tags to a time entry',\n      description:\n        'Adds tags to a time entry. Idempotent \u2014 a tag the entry already carries comes back in alreadyAssignedTagIds. Refused with 404 when the entry is outside the caller\\'s project access, and with 409 when it is locked in a closed report.',\n      requestBody: { contentType: 'application/json', schema: staffTimeEntryTagAssignmentSchema },\n      responses: [{ status: 200, description: 'Tags assigned', schema: assignResponseSchema }],\n      errors: [\n        { status: 400, description: 'Invalid payload or missing organization scope' },\n        { status: 401, description: 'Unauthorized' },\n        { status: 403, description: 'Missing staff.timesheets.tasks.manage' },\n        { status: 404, description: 'Time entry not found or not accessible' },\n        { status: 409, description: 'Time entry locked in a closed report' },\n        { status: 422, description: 'Unknown tag ids' },\n      ],\n    },\n    DELETE: {\n      summary: 'Unassign tags from a time entry',\n      description:\n        'Removes tags from a time entry. Idempotent \u2014 a tag the entry does not carry comes back in notAssignedTagIds.',\n      requestBody: { contentType: 'application/json', schema: staffTimeEntryTagAssignmentSchema },\n      responses: [{ status: 200, description: 'Tags unassigned', schema: unassignResponseSchema }],\n      errors: [\n        { status: 400, description: 'Invalid payload or missing organization scope' },\n        { status: 401, description: 'Unauthorized' },\n        { status: 403, description: 'Missing staff.timesheets.tasks.manage' },\n        { status: 404, description: 'Time entry not found or not accessible' },\n        { status: 409, description: 'Time entry locked in a closed report' },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAQA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAElB,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AACnD,SAAS,kCAAkC;AAE3C,SAAS,0CAA0C;AACnD,SAAS,eAAe,uBAAuB;AAC/C,SAAS,2BAA2B;AACpC,SAAS,+BAA+B;AACxC,SAAS,oBAAoB;AAC7B,SAAS,sBAAsB;AAE/B,SAAS,oBAAoB;AAC7B,SAAS,gCAAgC;AACzC;AAAA,EACE;AAAA,OAEK;AACP,SAAS,8BAA8B;AACvC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,sBAAsB,kCAA2D;AAE1F,MAAM,SAAS,aAAa,OAAO,EAAE,MAAM,EAAE,WAAW,wCAAwC,CAAC;AAEjG,MAAM,gBAAgB,mCAAmC;AAElD,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,+BAA+B,EAAE;AAAA,EAC9E,QAAQ,EAAE,aAAa,MAAM,iBAAiB,CAAC,+BAA+B,EAAE;AAClF;AAEA,MAAM,uBAAuB,EAAE,OAAO;AAAA,EACpC,aAAa,EAAE,OAAO,EAAE,KAAK;AAAA,EAC7B,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC;AAAA,EACjC,gBAAgB,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC;AAAA,EACzC,uBAAuB,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC;AAClD,CAAC;AAED,MAAM,yBAAyB,EAAE,OAAO;AAAA,EACtC,aAAa,EAAE,OAAO,EAAE,KAAK;AAAA,EAC7B,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC;AAAA,EACjC,eAAe,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC;AAAA,EACxC,mBAAmB,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC;AAC9C,CAAC;AAgBD,eAAe,aACb,KACgG;AAChG,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,MAAI,CAAC,KAAM,OAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,6BAA6B,cAAc,EAAE,CAAC;AACzG,QAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AACxF,QAAM,MAA6B;AAAA,IACjC;AAAA,IACA;AAAA,IACA,mBAAmB;AAAA,IACnB,wBAAwB,OAAO,cAAc,KAAK,SAAS;AAAA,IAC3D,iBAAiB,OAAO,cAAc,KAAK,QAAQ,CAAC,KAAK,KAAK,IAAI;AAAA,IAClE,SAAS;AAAA,EACX;AACA,SAAO,EAAE,KAAK,UAAU;AAC1B;AAEA,SAAS,uBACP,KACA,WACoB;AACpB,QAAM,WAAW,IAAI,MAAM,YAAY;AACvC,QAAM,iBAAiB,IAAI,0BAA0B,IAAI,MAAM,SAAS;AACxE,QAAM,SAAS,IAAI,MAAM,OAAO;AAChC,MAAI,CAAC,YAAY,CAAC,kBAAkB,CAAC,QAAQ;AAC3C,UAAM,IAAI,cAAc,KAAK;AAAA,MAC3B,OAAO,UAAU,6BAA6B,uCAAuC;AAAA,IACvF,CAAC;AAAA,EACH;AACA,SAAO,EAAE,UAAU,gBAAgB,OAAO;AAC5C;AAEA,eAAe,OAAO,KAAc,WAAmB,WAAmD;AACxG,QAAM,EAAE,KAAK,UAAU,IAAI,MAAM,aAAa,GAAG;AACjD,QAAM,QAAQ,uBAAuB,KAAK,SAAS;AAEnD,QAAM,eAAe,MAAM,yBAAyB;AAAA,IAClD,SAAS;AAAA,IACT,QAAQ,cAAc,WAAW,SAAS;AAAA,IAC1C,OAAO;AAAA,MACL,WAAW,IAAI;AAAA,MACf,QAAQ,MAAM;AAAA,MACd,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM;AAAA,IACxB;AAAA,IACA,MAAM,MAAM,aAAsC,KAAK,CAAC,CAAC;AAAA,EAC3D,CAAC;AACD,MAAI,CAAC,aAAa,GAAI,QAAO,aAAa;AAC1C,QAAM,EAAE,QAAQ,IAAI;AAEpB,QAAM,QAAQ,wBAAwB,mCAAmC,QAAQ,MAAM,KAAK,SAAS;AAErG,QAAM,SAAS,MAAM,qBAAqB,IAAI,WAAW,KAAK;AAC9D,QAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,QAAM,2BAA2B,IAAI,MAAM,aAAa,OAAO,QAAQ,SAAS;AAEhF,QAAM,cAAc,MAAM;AAAA,IACxB,IAAI;AAAA,IACJ;AAAA,MACE,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM;AAAA,MACtB,QAAQ,MAAM;AAAA,MACd,cAAc;AAAA,MACd,YAAY,MAAM;AAAA,MAClB;AAAA,MACA,eAAe,IAAI;AAAA,MACnB,gBAAgB,IAAI;AAAA,MACpB,iBAAiB;AAAA,IACnB;AAAA,EACF;AACA,MAAI,CAAC,YAAY,IAAI;AACnB,WAAO,aAAa,KAAK,YAAY,aAAa,EAAE,OAAO,6BAA6B,GAAG;AAAA,MACzF,QAAQ,YAAY,eAAe;AAAA,IACrC,CAAC;AAAA,EACH;AAEA,QAAM,aAAa,IAAI,UAAU,QAAQ,YAAY;AACrD,QAAM,EAAE,QAAQ,SAAS,IAAI,MAAM,WAAW,QAG5C,WAAW,EAAE,OAAO,IAAI,CAAC;AAE3B,MAAI,YAAY,sBAAsB,QAAQ;AAC5C,UAAM,kCAAkC,YAAY,uBAAuB;AAAA,MACzE,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM;AAAA,MACtB,QAAQ,MAAM;AAAA,MACd,cAAc;AAAA,MACd,YAAY,MAAM;AAAA,MAClB;AAAA,MACA,eAAe,IAAI;AAAA,MACnB,gBAAgB,IAAI;AAAA,IACtB,CAAC;AAAA,EACH;AAIA,OAAK,eAAe,uCAAuC;AAAA,IACzD,IAAI,MAAM;AAAA,IACV,UAAU,MAAM;AAAA,IAChB,gBAAgB,MAAM;AAAA,EACxB,GAAG,EAAE,YAAY,KAAK,CAAC,EAAE,MAAM,CAAC,QAAQ;AACtC,WAAO,MAAM,mDAAmD,EAAE,IAAI,CAAC;AAAA,EACzE,CAAC;AAED,QAAM,aAAa;AACnB,QAAM,eAAe;AACrB,QAAM,UACJ,cAAc,WACV;AAAA,IACE,aAAa,MAAM;AAAA,IACnB,QAAQ,YAAY,UAAU,CAAC;AAAA,IAC/B,gBAAgB,YAAY,kBAAkB,CAAC;AAAA,IAC/C,uBAAuB,YAAY,yBAAyB,CAAC;AAAA,EAC/D,IACA;AAAA,IACE,aAAa,MAAM;AAAA,IACnB,QAAQ,cAAc,UAAU,CAAC;AAAA,IACjC,eAAe,cAAc,iBAAiB,CAAC;AAAA,IAC/C,mBAAmB,cAAc,qBAAqB,CAAC;AAAA,EACzD;AAEN,QAAM,WAAW,MAAM,QAAQ,QAAQ,KAAK,OAAO;AACnD,MAAI,UAAU,aAAa,UAAU,MAAM,UAAU,WAAW;AAC9D,aAAS,QAAQ;AAAA,MACf;AAAA,MACA,2BAA2B;AAAA,QACzB,IAAI,SAAS;AAAA,QACb,WAAW,SAAS;AAAA,QACpB,WAAW,SAAS;AAAA,QACpB,aAAa,SAAS,eAAe;AAAA,QACrC,cAAc,SAAS,gBAAgB;AAAA,QACvC,YAAY,SAAS,cAAc,MAAM;AAAA,QACzC,YAAY,SAAS,qBAAqB,OAAO,SAAS,UAAU,YAAY,IAAI;AAAA,MACtF,CAAC;AAAA,IACH;AAAA,EACF;AACA,SAAO;AACT;AAEA,eAAe,cAAc,KAAc,SAAoC;AAC7E,MAAI,gBAAgB,GAAG,GAAG;AACxB,WAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,EAC3D;AACA,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,MAAI,eAAe,EAAE,UAAU;AAC7B,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,UAAU,gCAAgC,iBAAiB,GAAG,SAAS,IAAI,OAAO;AAAA,MAC3F,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACA,SAAO,MAAM,SAAS,EAAE,IAAI,CAAC;AAC7B,SAAO,aAAa,KAAK,EAAE,OAAO,UAAU,yBAAyB,uBAAuB,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAClH;AAEA,eAAsB,KAAK,KAAc;AACvC,MAAI;AACF,WAAO,MAAM,OAAO,KAAK,uBAAuB,aAAa,QAAQ;AAAA,EACvE,SAAS,KAAK;AACZ,UAAM,uBAAuB,mCAAmC,GAAG;AACnE,QAAI,sBAAsB;AACxB,aAAO,aAAa,KAAK,qBAAqB,MAAM,EAAE,QAAQ,qBAAqB,OAAO,CAAC;AAAA,IAC7F;AACA,WAAO,cAAc,KAAK,qDAAqD;AAAA,EACjF;AACF;AAEA,eAAsB,OAAO,KAAc;AACzC,MAAI;AACF,WAAO,MAAM,OAAO,KAAK,uBAAuB,eAAe,QAAQ;AAAA,EACzE,SAAS,KAAK;AACZ,UAAM,uBAAuB,mCAAmC,GAAG;AACnE,QAAI,sBAAsB;AACxB,aAAO,aAAa,KAAK,qBAAqB,MAAM,EAAE,QAAQ,qBAAqB,OAAO,CAAC;AAAA,IAC7F;AACA,WAAO,cAAc,KAAK,uDAAuD;AAAA,EACnF;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aACE;AAAA,MACF,aAAa,EAAE,aAAa,oBAAoB,QAAQ,kCAAkC;AAAA,MAC1F,WAAW,CAAC,EAAE,QAAQ,KAAK,aAAa,iBAAiB,QAAQ,qBAAqB,CAAC;AAAA,MACvF,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,gDAAgD;AAAA,QAC5E,EAAE,QAAQ,KAAK,aAAa,eAAe;AAAA,QAC3C,EAAE,QAAQ,KAAK,aAAa,wCAAwC;AAAA,QACpE,EAAE,QAAQ,KAAK,aAAa,yCAAyC;AAAA,QACrE,EAAE,QAAQ,KAAK,aAAa,uCAAuC;AAAA,QACnE,EAAE,QAAQ,KAAK,aAAa,kBAAkB;AAAA,MAChD;AAAA,IACF;AAAA,IACA,QAAQ;AAAA,MACN,SAAS;AAAA,MACT,aACE;AAAA,MACF,aAAa,EAAE,aAAa,oBAAoB,QAAQ,kCAAkC;AAAA,MAC1F,WAAW,CAAC,EAAE,QAAQ,KAAK,aAAa,mBAAmB,QAAQ,uBAAuB,CAAC;AAAA,MAC3F,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,gDAAgD;AAAA,QAC5E,EAAE,QAAQ,KAAK,aAAa,eAAe;AAAA,QAC3C,EAAE,QAAQ,KAAK,aAAa,wCAAwC;AAAA,QACpE,EAAE,QAAQ,KAAK,aAAa,yCAAyC;AAAA,QACrE,EAAE,QAAQ,KAAK,aAAa,uCAAuC;AAAA,MACrE;AAAA,IACF;AAAA,EACF;AACF;",
+  "names": []
+}

package/dist/modules/staff/api/timesheets/tags/route.js

@@ -0,0 +1,160 @@
+import { z } from "zod";
+import { makeCrudRoute } from "@open-mercato/shared/lib/crud/factory";
+import { staffTimeTagCrudEvents } from "../../../lib/crud.js";
+import { resolveTranslations } from "@open-mercato/shared/lib/i18n/server";
+import { resolveCrudRecordId, parseScopedCommandInput } from "@open-mercato/shared/lib/api/scoped";
+import { escapeLikePattern } from "@open-mercato/shared/lib/db/escapeLikePattern";
+import { StaffTimeTag } from "../../../data/entities.js";
+import { staffTimeTagCreateSchema } from "../../../data/validators.js";
+import { staffTimeTagCommandIds, staffTimeTagUpdateSchema } from "../../../commands/timesheets-tags.js";
+import { sanitizeSearchTerm } from "../../helpers.js";
+import { createStaffCrudOpenApi, createPagedListResponseSchema, defaultOkResponseSchema } from "../../openapi.js";
+const F = {
+  id: "id",
+  tenant_id: "tenant_id",
+  organization_id: "organization_id",
+  slug: "slug",
+  label: "label",
+  color: "color",
+  created_at: "created_at",
+  updated_at: "updated_at"
+};
+const routeMetadata = {
+  GET: { requireAuth: true, requireFeatures: ["staff.timesheets.view"] },
+  POST: { requireAuth: true, requireFeatures: ["staff.timesheets.tasks.manage"] },
+  PUT: { requireAuth: true, requireFeatures: ["staff.timesheets.tasks.manage"] },
+  DELETE: { requireAuth: true, requireFeatures: ["staff.timesheets.tasks.manage"] }
+};
+const metadata = routeMetadata;
+const rawBodySchema = z.object({}).passthrough();
+const listSchema = z.object({
+  page: z.coerce.number().min(1).default(1),
+  pageSize: z.coerce.number().min(1).max(100).default(50),
+  q: z.string().optional(),
+  ids: z.string().optional(),
+  sortField: z.string().optional(),
+  sortDir: z.enum(["asc", "desc"]).optional()
+}).passthrough();
+const crud = makeCrudRoute({
+  metadata: routeMetadata,
+  orm: {
+    entity: StaffTimeTag,
+    idField: "id",
+    orgField: "organizationId",
+    tenantField: "tenantId",
+    softDeleteField: "deletedAt"
+  },
+  events: staffTimeTagCrudEvents,
+  indexer: { entityType: "staff:staff_time_tag" },
+  list: {
+    schema: listSchema,
+    entityId: "staff:staff_time_tag",
+    fields: [F.id, F.organization_id, F.tenant_id, F.slug, F.label, F.color, F.created_at, F.updated_at],
+    // Tag pickers read alphabetically; a chip list has no other natural order.
+    defaultSort: { field: F.label, dir: "asc" },
+    sortFieldMap: {
+      label: F.label,
+      slug: F.slug,
+      createdAt: F.created_at,
+      updatedAt: F.updated_at
+    },
+    buildFilters: async (query) => {
+      const filters = {};
+      if (typeof query.ids === "string" && query.ids.trim().length > 0) {
+        const ids = query.ids.split(",").map((value) => value.trim()).filter((value) => value.length > 0);
+        if (ids.length > 0) filters[F.id] = { $in: ids };
+      }
+      const term = sanitizeSearchTerm(query.q);
+      if (term) {
+        filters[F.label] = { $ilike: `%${escapeLikePattern(term)}%` };
+      }
+      return filters;
+    }
+  },
+  actions: {
+    create: {
+      commandId: staffTimeTagCommandIds.create,
+      schema: rawBodySchema,
+      mapInput: async ({ raw, ctx }) => {
+        const { translate } = await resolveTranslations();
+        return parseScopedCommandInput(staffTimeTagCreateSchema, raw ?? {}, ctx, translate);
+      },
+      response: ({ result }) => ({ id: result?.tagId ?? null }),
+      status: 201
+    },
+    update: {
+      commandId: staffTimeTagCommandIds.update,
+      schema: rawBodySchema,
+      mapInput: async ({ raw, ctx }) => {
+        const { translate } = await resolveTranslations();
+        return parseScopedCommandInput(staffTimeTagUpdateSchema, raw ?? {}, ctx, translate);
+      },
+      response: () => ({ ok: true })
+    },
+    delete: {
+      commandId: staffTimeTagCommandIds.delete,
+      schema: rawBodySchema,
+      mapInput: async ({ parsed, ctx }) => {
+        const { translate } = await resolveTranslations();
+        const id = resolveCrudRecordId(parsed, ctx, translate);
+        return { id };
+      },
+      // Deleting a tag cascades to its assignments; the counts travel back so the
+      // caller sees how far the badge disappeared.
+      response: ({ result }) => ({
+        ok: true,
+        removedTaskAssignments: result?.removedTaskAssignments ?? 0,
+        removedEntryAssignments: result?.removedEntryAssignments ?? 0
+      })
+    }
+  }
+});
+const GET = crud.GET;
+const POST = crud.POST;
+const PUT = crud.PUT;
+const DELETE = crud.DELETE;
+const tagListItemSchema = z.object({
+  id: z.string().uuid().nullable().optional(),
+  organization_id: z.string().uuid().nullable().optional(),
+  tenant_id: z.string().uuid().nullable().optional(),
+  slug: z.string().nullable().optional(),
+  label: z.string().nullable().optional(),
+  color: z.string().nullable().optional(),
+  created_at: z.string().nullable().optional(),
+  updated_at: z.string().nullable().optional()
+});
+const tagDeleteResponseSchema = z.object({
+  ok: z.literal(true),
+  removedTaskAssignments: z.number().int(),
+  removedEntryAssignments: z.number().int()
+});
+const openApi = createStaffCrudOpenApi({
+  resourceName: "TimeTag",
+  pluralName: "Time Tags",
+  querySchema: listSchema,
+  listResponseSchema: createPagedListResponseSchema(tagListItemSchema),
+  create: {
+    schema: staffTimeTagCreateSchema,
+    description: "Creates a time tracking tag. The slug is unique per organization and tenant; a collision answers 409 with fieldErrors.slug."
+  },
+  update: {
+    schema: staffTimeTagUpdateSchema,
+    responseSchema: defaultOkResponseSchema,
+    description: "Renames, re-slugs or recolours a tag. A slug collision answers 409 with fieldErrors.slug."
+  },
+  del: {
+    schema: z.object({ id: z.string().uuid() }),
+    responseSchema: tagDeleteResponseSchema,
+    description: "Soft-deletes a tag and removes every task and time entry assignment it had, reporting how many of each were removed."
+  }
+});
+export {
+  DELETE,
+  GET,
+  POST,
+  PUT,
+  metadata,
+  openApi,
+  tagListItemSchema
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/staff/api/timesheets/tags/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../src/modules/staff/api/timesheets/tags/route.ts"],
+  "sourcesContent": ["import { z } from 'zod'\nimport { makeCrudRoute } from '@open-mercato/shared/lib/crud/factory'\nimport { staffTimeTagCrudEvents } from '../../../lib/crud'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { resolveCrudRecordId, parseScopedCommandInput } from '@open-mercato/shared/lib/api/scoped'\nimport { escapeLikePattern } from '@open-mercato/shared/lib/db/escapeLikePattern'\nimport { StaffTimeTag } from '../../../data/entities'\nimport { staffTimeTagCreateSchema } from '../../../data/validators'\nimport { staffTimeTagCommandIds, staffTimeTagUpdateSchema } from '../../../commands/timesheets-tags'\nimport { sanitizeSearchTerm } from '../../helpers'\nimport { createStaffCrudOpenApi, createPagedListResponseSchema, defaultOkResponseSchema } from '../../openapi'\n\nconst F = {\n  id: 'id',\n  tenant_id: 'tenant_id',\n  organization_id: 'organization_id',\n  slug: 'slug',\n  label: 'label',\n  color: 'color',\n  created_at: 'created_at',\n  updated_at: 'updated_at',\n} as const\n\n/**\n * Tags are org-wide vocabulary shared by the board (screen 6), the task drawer\n * (screen 7) and the time entry form (screens 8 and 10). Everyone who can open a\n * timesheet needs to read the list to render a badge, while maintaining the\n * vocabulary belongs with task management \u2014 hence `timesheets.view` to read and\n * `tasks.manage` to write.\n *\n * No `runRouteMutationGuards` here on purpose: every write goes through the\n * command bus via the factory's `actions`, which is already the guard wiring.\n */\nconst routeMetadata = {\n  GET: { requireAuth: true, requireFeatures: ['staff.timesheets.view'] },\n  POST: { requireAuth: true, requireFeatures: ['staff.timesheets.tasks.manage'] },\n  PUT: { requireAuth: true, requireFeatures: ['staff.timesheets.tasks.manage'] },\n  DELETE: { requireAuth: true, requireFeatures: ['staff.timesheets.tasks.manage'] },\n}\n\nexport const metadata = routeMetadata\n\nconst rawBodySchema = z.object({}).passthrough()\n\nconst listSchema = z\n  .object({\n    page: z.coerce.number().min(1).default(1),\n    pageSize: z.coerce.number().min(1).max(100).default(50),\n    q: z.string().optional(),\n    ids: z.string().optional(),\n    sortField: z.string().optional(),\n    sortDir: z.enum(['asc', 'desc']).optional(),\n  })\n  .passthrough()\n\nconst crud = makeCrudRoute({\n  metadata: routeMetadata,\n  orm: {\n    entity: StaffTimeTag,\n    idField: 'id',\n    orgField: 'organizationId',\n    tenantField: 'tenantId',\n    softDeleteField: 'deletedAt',\n  },\n  events: staffTimeTagCrudEvents,\n  indexer: { entityType: 'staff:staff_time_tag' },\n  list: {\n    schema: listSchema,\n    entityId: 'staff:staff_time_tag',\n    fields: [F.id, F.organization_id, F.tenant_id, F.slug, F.label, F.color, F.created_at, F.updated_at],\n    // Tag pickers read alphabetically; a chip list has no other natural order.\n    defaultSort: { field: F.label, dir: 'asc' },\n    sortFieldMap: {\n      label: F.label,\n      slug: F.slug,\n      createdAt: F.created_at,\n      updatedAt: F.updated_at,\n    },\n    buildFilters: async (query) => {\n      const filters: Record<string, unknown> = {}\n      if (typeof query.ids === 'string' && query.ids.trim().length > 0) {\n        const ids = query.ids\n          .split(',')\n          .map((value) => value.trim())\n          .filter((value) => value.length > 0)\n        if (ids.length > 0) filters[F.id] = { $in: ids }\n      }\n      const term = sanitizeSearchTerm(query.q)\n      if (term) {\n        filters[F.label] = { $ilike: `%${escapeLikePattern(term)}%` }\n      }\n      return filters\n    },\n  },\n  actions: {\n    create: {\n      commandId: staffTimeTagCommandIds.create,\n      schema: rawBodySchema,\n      mapInput: async ({ raw, ctx }) => {\n        const { translate } = await resolveTranslations()\n        return parseScopedCommandInput(staffTimeTagCreateSchema, raw ?? {}, ctx, translate)\n      },\n      response: ({ result }) => ({ id: result?.tagId ?? null }),\n      status: 201,\n    },\n    update: {\n      commandId: staffTimeTagCommandIds.update,\n      schema: rawBodySchema,\n      mapInput: async ({ raw, ctx }) => {\n        const { translate } = await resolveTranslations()\n        return parseScopedCommandInput(staffTimeTagUpdateSchema, raw ?? {}, ctx, translate)\n      },\n      response: () => ({ ok: true }),\n    },\n    delete: {\n      commandId: staffTimeTagCommandIds.delete,\n      schema: rawBodySchema,\n      mapInput: async ({ parsed, ctx }) => {\n        const { translate } = await resolveTranslations()\n        const id = resolveCrudRecordId(parsed, ctx, translate)\n        return { id }\n      },\n      // Deleting a tag cascades to its assignments; the counts travel back so the\n      // caller sees how far the badge disappeared.\n      response: ({ result }) => ({\n        ok: true,\n        removedTaskAssignments: result?.removedTaskAssignments ?? 0,\n        removedEntryAssignments: result?.removedEntryAssignments ?? 0,\n      }),\n    },\n  },\n})\n\nexport const GET = crud.GET\nexport const POST = crud.POST\nexport const PUT = crud.PUT\nexport const DELETE = crud.DELETE\n\nexport const tagListItemSchema = z.object({\n  id: z.string().uuid().nullable().optional(),\n  organization_id: z.string().uuid().nullable().optional(),\n  tenant_id: z.string().uuid().nullable().optional(),\n  slug: z.string().nullable().optional(),\n  label: z.string().nullable().optional(),\n  color: z.string().nullable().optional(),\n  created_at: z.string().nullable().optional(),\n  updated_at: z.string().nullable().optional(),\n})\n\nconst tagDeleteResponseSchema = z.object({\n  ok: z.literal(true),\n  removedTaskAssignments: z.number().int(),\n  removedEntryAssignments: z.number().int(),\n})\n\nexport const openApi = createStaffCrudOpenApi({\n  resourceName: 'TimeTag',\n  pluralName: 'Time Tags',\n  querySchema: listSchema,\n  listResponseSchema: createPagedListResponseSchema(tagListItemSchema),\n  create: {\n    schema: staffTimeTagCreateSchema,\n    description:\n      'Creates a time tracking tag. The slug is unique per organization and tenant; a collision answers 409 with fieldErrors.slug.',\n  },\n  update: {\n    schema: staffTimeTagUpdateSchema,\n    responseSchema: defaultOkResponseSchema,\n    description: 'Renames, re-slugs or recolours a tag. A slug collision answers 409 with fieldErrors.slug.',\n  },\n  del: {\n    schema: z.object({ id: z.string().uuid() }),\n    responseSchema: tagDeleteResponseSchema,\n    description:\n      'Soft-deletes a tag and removes every task and time entry assignment it had, reporting how many of each were removed.',\n  },\n})\n"],
+  "mappings": "AAAA,SAAS,SAAS;AAClB,SAAS,qBAAqB;AAC9B,SAAS,8BAA8B;AACvC,SAAS,2BAA2B;AACpC,SAAS,qBAAqB,+BAA+B;AAC7D,SAAS,yBAAyB;AAClC,SAAS,oBAAoB;AAC7B,SAAS,gCAAgC;AACzC,SAAS,wBAAwB,gCAAgC;AACjE,SAAS,0BAA0B;AACnC,SAAS,wBAAwB,+BAA+B,+BAA+B;AAE/F,MAAM,IAAI;AAAA,EACR,IAAI;AAAA,EACJ,WAAW;AAAA,EACX,iBAAiB;AAAA,EACjB,MAAM;AAAA,EACN,OAAO;AAAA,EACP,OAAO;AAAA,EACP,YAAY;AAAA,EACZ,YAAY;AACd;AAYA,MAAM,gBAAgB;AAAA,EACpB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,uBAAuB,EAAE;AAAA,EACrE,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,+BAA+B,EAAE;AAAA,EAC9E,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,+BAA+B,EAAE;AAAA,EAC7E,QAAQ,EAAE,aAAa,MAAM,iBAAiB,CAAC,+BAA+B,EAAE;AAClF;AAEO,MAAM,WAAW;AAExB,MAAM,gBAAgB,EAAE,OAAO,CAAC,CAAC,EAAE,YAAY;AAE/C,MAAM,aAAa,EAChB,OAAO;AAAA,EACN,MAAM,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,QAAQ,CAAC;AAAA,EACxC,UAAU,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,QAAQ,EAAE;AAAA,EACtD,GAAG,EAAE,OAAO,EAAE,SAAS;AAAA,EACvB,KAAK,EAAE,OAAO,EAAE,SAAS;AAAA,EACzB,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,SAAS,EAAE,KAAK,CAAC,OAAO,MAAM,CAAC,EAAE,SAAS;AAC5C,CAAC,EACA,YAAY;AAEf,MAAM,OAAO,cAAc;AAAA,EACzB,UAAU;AAAA,EACV,KAAK;AAAA,IACH,QAAQ;AAAA,IACR,SAAS;AAAA,IACT,UAAU;AAAA,IACV,aAAa;AAAA,IACb,iBAAiB;AAAA,EACnB;AAAA,EACA,QAAQ;AAAA,EACR,SAAS,EAAE,YAAY,uBAAuB;AAAA,EAC9C,MAAM;AAAA,IACJ,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,QAAQ,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,UAAU;AAAA;AAAA,IAEnG,aAAa,EAAE,OAAO,EAAE,OAAO,KAAK,MAAM;AAAA,IAC1C,cAAc;AAAA,MACZ,OAAO,EAAE;AAAA,MACT,MAAM,EAAE;AAAA,MACR,WAAW,EAAE;AAAA,MACb,WAAW,EAAE;AAAA,IACf;AAAA,IACA,cAAc,OAAO,UAAU;AAC7B,YAAM,UAAmC,CAAC;AAC1C,UAAI,OAAO,MAAM,QAAQ,YAAY,MAAM,IAAI,KAAK,EAAE,SAAS,GAAG;AAChE,cAAM,MAAM,MAAM,IACf,MAAM,GAAG,EACT,IAAI,CAAC,UAAU,MAAM,KAAK,CAAC,EAC3B,OAAO,CAAC,UAAU,MAAM,SAAS,CAAC;AACrC,YAAI,IAAI,SAAS,EAAG,SAAQ,EAAE,EAAE,IAAI,EAAE,KAAK,IAAI;AAAA,MACjD;AACA,YAAM,OAAO,mBAAmB,MAAM,CAAC;AACvC,UAAI,MAAM;AACR,gBAAQ,EAAE,KAAK,IAAI,EAAE,QAAQ,IAAI,kBAAkB,IAAI,CAAC,IAAI;AAAA,MAC9D;AACA,aAAO;AAAA,IACT;AAAA,EACF;AAAA,EACA,SAAS;AAAA,IACP,QAAQ;AAAA,MACN,WAAW,uBAAuB;AAAA,MAClC,QAAQ;AAAA,MACR,UAAU,OAAO,EAAE,KAAK,IAAI,MAAM;AAChC,cAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,eAAO,wBAAwB,0BAA0B,OAAO,CAAC,GAAG,KAAK,SAAS;AAAA,MACpF;AAAA,MACA,UAAU,CAAC,EAAE,OAAO,OAAO,EAAE,IAAI,QAAQ,SAAS,KAAK;AAAA,MACvD,QAAQ;AAAA,IACV;AAAA,IACA,QAAQ;AAAA,MACN,WAAW,uBAAuB;AAAA,MAClC,QAAQ;AAAA,MACR,UAAU,OAAO,EAAE,KAAK,IAAI,MAAM;AAChC,cAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,eAAO,wBAAwB,0BAA0B,OAAO,CAAC,GAAG,KAAK,SAAS;AAAA,MACpF;AAAA,MACA,UAAU,OAAO,EAAE,IAAI,KAAK;AAAA,IAC9B;AAAA,IACA,QAAQ;AAAA,MACN,WAAW,uBAAuB;AAAA,MAClC,QAAQ;AAAA,MACR,UAAU,OAAO,EAAE,QAAQ,IAAI,MAAM;AACnC,cAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,cAAM,KAAK,oBAAoB,QAAQ,KAAK,SAAS;AACrD,eAAO,EAAE,GAAG;AAAA,MACd;AAAA;AAAA;AAAA,MAGA,UAAU,CAAC,EAAE,OAAO,OAAO;AAAA,QACzB,IAAI;AAAA,QACJ,wBAAwB,QAAQ,0BAA0B;AAAA,QAC1D,yBAAyB,QAAQ,2BAA2B;AAAA,MAC9D;AAAA,IACF;AAAA,EACF;AACF,CAAC;AAEM,MAAM,MAAM,KAAK;AACjB,MAAM,OAAO,KAAK;AAClB,MAAM,MAAM,KAAK;AACjB,MAAM,SAAS,KAAK;AAEpB,MAAM,oBAAoB,EAAE,OAAO;AAAA,EACxC,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS;AAAA,EAC1C,iBAAiB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS;AAAA,EACvD,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS;AAAA,EACjD,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACrC,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACtC,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACtC,YAAY,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC3C,YAAY,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAC7C,CAAC;AAED,MAAM,0BAA0B,EAAE,OAAO;AAAA,EACvC,IAAI,EAAE,QAAQ,IAAI;AAAA,EAClB,wBAAwB,EAAE,OAAO,EAAE,IAAI;AAAA,EACvC,yBAAyB,EAAE,OAAO,EAAE,IAAI;AAC1C,CAAC;AAEM,MAAM,UAAU,uBAAuB;AAAA,EAC5C,cAAc;AAAA,EACd,YAAY;AAAA,EACZ,aAAa;AAAA,EACb,oBAAoB,8BAA8B,iBAAiB;AAAA,EACnE,QAAQ;AAAA,IACN,QAAQ;AAAA,IACR,aACE;AAAA,EACJ;AAAA,EACA,QAAQ;AAAA,IACN,QAAQ;AAAA,IACR,gBAAgB;AAAA,IAChB,aAAa;AAAA,EACf;AAAA,EACA,KAAK;AAAA,IACH,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAAA,IAC1C,gBAAgB;AAAA,IAChB,aACE;AAAA,EACJ;AACF,CAAC;",
+  "names": []
+}