@open-mercato/core 0.7.1-develop.7178.1.ab93fbaf4e → 0.7.1-develop.7180.1.9717fbbb43

package/dist/modules/staff/api/timesheets/time-entries/bulk/route.js

@@ -8,17 +8,41 @@ import { resolveTranslations } from "@open-mercato/shared/lib/i18n/server";
 import { findOneWithDecryption, findWithDecryption } from "@open-mercato/shared/lib/encryption/find";
 import { readJsonSafe } from "@open-mercato/shared/lib/http/readJsonSafe";
 import { emitCrudSideEffects, flushCrudSideEffects } from "@open-mercato/shared/lib/commands/helpers";
-import { StaffTimeEntry, StaffTeamMember, StaffTimeProject } from "../../../../data/entities.js";
-import { staffTimeEntryBulkSaveSchema } from "../../../../data/validators.js";
+import { StaffTimeEntry, StaffTeamMember, StaffTimeProject, StaffTimeTask } from "../../../../data/entities.js";
+import {
+  staffTimeEntryBulkSaveSchema
+} from "../../../../data/validators.js";
+import {
+  buildTimeEntryLockedError,
+  rebaseTimeEntryIntervalToDate,
+  reconcileTimeEntryInterval,
+  resolveTimeEntryBillable,
+  resolveTimeEntryNotesInput,
+  resolveTimeEntryProjectId,
+  resolveTimeEntrySettings,
+  roundedMinutesFor,
+  timeEntryTaskMatchesProject,
+  toStoredTimeEntryRateOverride
+} from "../../../../commands/timesheets-entries.js";
 import { staffTimeEntryCrudEvents } from "../../../../lib/crud.js";
+import { emitStaffEvent } from "../../../../events.js";
 import { invalidateStaffTimeEntryCache } from "../../../../lib/timesheets/timeEntryCacheInvalidation.js";
 import {
-  resolveUserFeatures,
+  STAFF_TIME_TRACKING_RESOURCE_KINDS,
   runStaffMutationGuardAfterSuccess,
   runStaffMutationGuards
 } from "../../../guards.js";
+import { runTimesheetInterceptors } from "../../_shared/withTimesheetInterceptors.js";
 import { createLogger } from "@open-mercato/shared/lib/logger";
 const logger = createLogger("staff");
+function cellDateKey(value) {
+  if (!value) return "";
+  const date = value instanceof Date ? value : new Date(value);
+  return Number.isNaN(date.getTime()) ? String(value) : date.toISOString().slice(0, 10);
+}
+function bulkValidationError(errors) {
+  return NextResponse.json({ ok: false, errors }, { status: 422 });
+}
 const metadata = {
   POST: { requireAuth: true, requireFeatures: ["staff.timesheets.manage_own"] }
 };
@@ -34,8 +58,15 @@ async function POST(req) {
     if (!tenantId || !organizationId) {
       throw new CrudHttpError(400, { error: translate("staff.errors.missingScope", "Missing tenant or organization scope.") });
     }
-    const body = await readJsonSafe(req, {});
-    const parsed = staffTimeEntryBulkSaveSchema.safeParse(body);
+    const interceptors = await runTimesheetInterceptors({
+      request: req,
+      method: "POST",
+      scope: { container, userId: auth.sub, tenantId, organizationId },
+      body: await readJsonSafe(req, {})
+    });
+    if (!interceptors.ok) return interceptors.response;
+    const { session } = interceptors;
+    const parsed = staffTimeEntryBulkSaveSchema.safeParse(session.body);
     if (!parsed.success) {
       const errors = parsed.error.issues.map((issue) => ({
         path: issue.path.join("."),
@@ -44,6 +75,14 @@ async function POST(req) {
       return NextResponse.json({ ok: false, errors }, { status: 422 });
     }
     const { entries } = parsed.data;
+    const taggedRows = entries.filter((entry) => entry.tagIds !== void 0);
+    if (taggedRows.length > 0) {
+      const message = translate(
+        "staff.timesheets.errors.bulkTagsUnsupported",
+        "Tags cannot be changed from the timesheet grid. Open the time entry to edit its tags."
+      );
+      return bulkValidationError(taggedRows.map(() => ({ path: "entries[].tagIds", message })));
+    }
     const em = container.resolve("em").fork();
     const scopeCtx = { tenantId, organizationId };
     const staffMember = await findOneWithDecryption(
@@ -57,31 +96,77 @@ async function POST(req) {
       throw new CrudHttpError(403, { error: translate("staff.timesheets.errors.noStaffMember", "No staff member linked to your account.") });
     }
     const staffMemberId = staffMember.id;
-    const referencedProjectIds = [
+    const referencedTaskIds = [
       ...new Set(
-        entries.map((e) => e.timeProjectId).filter((id) => typeof id === "string" && id.length > 0)
+        entries.map((entry) => entry.taskId).filter((id) => typeof id === "string" && id.length > 0)
       )
     ];
+    const tasksById = /* @__PURE__ */ new Map();
+    if (referencedTaskIds.length > 0) {
+      const validTasks = await em.find(StaffTimeTask, {
+        id: { $in: referencedTaskIds },
+        tenantId,
+        organizationId,
+        deletedAt: null
+      }, { fields: ["id", "timeProjectId"] });
+      for (const task of validTasks) tasksById.set(task.id, { id: task.id, timeProjectId: task.timeProjectId });
+      const invalidTaskIds = referencedTaskIds.filter((id) => !tasksById.has(id));
+      if (invalidTaskIds.length > 0) {
+        const message = translate("staff.timesheets.errors.taskNotFound", "Task not found or not accessible.");
+        return bulkValidationError(
+          invalidTaskIds.map((id) => ({ path: "entries[].taskId", message, value: id }))
+        );
+      }
+    }
+    const resolvedRows = [];
+    const missingProjectErrors = [];
+    const taskProjectMismatchErrors = [];
+    for (const entry of entries) {
+      const task = entry.taskId ? tasksById.get(entry.taskId) ?? null : null;
+      const timeProjectId = resolveTimeEntryProjectId(entry.timeProjectId, task);
+      if (!timeProjectId) {
+        missingProjectErrors.push({
+          path: "entries[].timeProjectId",
+          message: translate("staff.timesheets.errors.projectRequired", "Time project id is required.")
+        });
+        continue;
+      }
+      if (!timeEntryTaskMatchesProject(task, timeProjectId)) {
+        taskProjectMismatchErrors.push({
+          path: "entries[].taskId",
+          message: translate("staff.timesheets.errors.taskNotFound", "Task not found or not accessible."),
+          value: entry.taskId
+        });
+        continue;
+      }
+      resolvedRows.push({ entry, task, timeProjectId });
+    }
+    if (missingProjectErrors.length > 0 || taskProjectMismatchErrors.length > 0) {
+      return bulkValidationError([...missingProjectErrors, ...taskProjectMismatchErrors]);
+    }
+    const referencedProjectIds = [...new Set(resolvedRows.map((row) => row.timeProjectId))];
+    const projectsById = /* @__PURE__ */ new Map();
     if (referencedProjectIds.length > 0) {
       const validProjects = await em.find(StaffTimeProject, {
         id: { $in: referencedProjectIds },
         tenantId,
         organizationId,
         deletedAt: null
-      }, { fields: ["id"] });
-      const validIds = new Set(validProjects.map((p) => p.id));
-      const invalidIds = referencedProjectIds.filter((id) => !validIds.has(id));
+      }, { fields: ["id", "currencyCode", "billableByDefault"] });
+      for (const project of validProjects) {
+        projectsById.set(project.id, {
+          currencyCode: project.currencyCode ?? null,
+          billableByDefault: project.billableByDefault ?? null
+        });
+      }
+      const invalidIds = referencedProjectIds.filter((id) => !projectsById.has(id));
       if (invalidIds.length > 0) {
-        return NextResponse.json(
-          {
-            ok: false,
-            errors: invalidIds.map((id) => ({
-              path: "entries[].timeProjectId",
-              message: translate("staff.timesheets.errors.projectNotFound", "Time project not found or not accessible."),
-              value: id
-            }))
-          },
-          { status: 422 }
+        const message = translate(
+          "staff.timesheets.errors.projectNotFound",
+          "Time project not found or not accessible."
+        );
+        return bulkValidationError(
+          invalidIds.map((id) => ({ path: "entries[].timeProjectId", message, value: id }))
         );
       }
     }
@@ -89,21 +174,21 @@ async function POST(req) {
       tenantId,
       organizationId,
       userId: auth.sub ?? "",
-      resourceKind: "staff.timesheets.time_entry",
+      resourceKind: STAFF_TIME_TRACKING_RESOURCE_KINDS.timeEntry,
       resourceId: staffMemberId,
       operation: "update",
       requestMethod: req.method,
       requestHeaders: req.headers,
       mutationPayload: parsed.data
     };
-    const guardResult = await runStaffMutationGuards(container, guardInput, resolveUserFeatures(auth));
+    const guardResult = await runStaffMutationGuards(container, guardInput);
     if (!guardResult.ok) {
       return NextResponse.json(
         guardResult.errorBody ?? { error: "Operation blocked by guard" },
         { status: guardResult.errorStatus ?? 422 }
       );
     }
-    const existingIds = entries.map((entry) => entry.id).filter((id) => typeof id === "string" && id.length > 0);
+    const existingIds = resolvedRows.map((row) => row.entry.id).filter((id) => typeof id === "string" && id.length > 0);
     if (existingIds.length > 0) {
       const resolvedExisting = await em.find(
         StaffTimeEntry,
@@ -129,6 +214,42 @@ async function POST(req) {
         );
       }
     }
+    const idlessRows = resolvedRows.filter((row) => !row.entry.id);
+    const idlessCells = idlessRows.map((row) => `${cellDateKey(row.entry.date)}|${row.timeProjectId}`);
+    const lockConditions = [];
+    if (existingIds.length > 0) lockConditions.push({ id: { $in: existingIds } });
+    if (idlessCells.length > 0) {
+      lockConditions.push({
+        date: { $in: idlessRows.map((row) => row.entry.date) },
+        timeProjectId: { $in: [...new Set(idlessRows.map((row) => row.timeProjectId))] }
+      });
+    }
+    if (lockConditions.length > 0) {
+      const existingIdSet = new Set(existingIds);
+      const idlessCellSet = new Set(idlessCells);
+      const lockedCandidates = await em.find(
+        StaffTimeEntry,
+        {
+          tenantId,
+          organizationId,
+          staffMemberId,
+          deletedAt: null,
+          lockedReportId: { $ne: null },
+          $or: lockConditions
+        },
+        { fields: ["id", "lockedReportId", "date", "timeProjectId"] }
+      );
+      const blocked = lockedCandidates.filter(
+        (row) => existingIdSet.has(row.id) || idlessCellSet.has(`${cellDateKey(row.date)}|${row.timeProjectId ?? ""}`)
+      );
+      if (blocked.length > 0) {
+        throw buildTimeEntryLockedError(
+          blocked.map((row) => ({ id: row.id, lockedReportId: row.lockedReportId })),
+          translate
+        );
+      }
+    }
+    const settings = await resolveTimeEntrySettings(container, tenantId);
     const { counts, pendingChanges } = await em.transactional(async (trx) => {
       let created = 0;
       let updated = 0;
@@ -142,7 +263,9 @@ async function POST(req) {
         scopeCtx
       ) : [];
       const existingMap = new Map(existingEntries.map((entry) => [entry.id, entry]));
-      for (const entry of entries) {
+      for (const { entry, task, timeProjectId } of resolvedRows) {
+        const project = projectsById.get(timeProjectId) ?? null;
+        const notes = resolveTimeEntryNotesInput(entry);
         if (entry.id && existingMap.has(entry.id)) {
           const existing = existingMap.get(entry.id);
           if (entry.durationMinutes === 0) {
@@ -150,10 +273,37 @@ async function POST(req) {
             deleted++;
             changes.push({ action: "deleted", entity: existing });
           } else {
+            const interval = reconcileTimeEntryInterval({
+              stored: rebaseTimeEntryIntervalToDate({
+                stored: {
+                  startedAt: existing.startedAt ?? null,
+                  endedAt: existing.endedAt ?? null,
+                  durationMinutes: existing.durationMinutes
+                },
+                fromDate: existing.date,
+                toDate: entry.date
+              }),
+              startedAt: void 0,
+              endedAt: void 0,
+              durationMinutes: entry.durationMinutes
+            });
+            const projectChanged = timeProjectId !== (existing.timeProjectId ?? null);
             existing.date = entry.date;
-            existing.timeProjectId = entry.timeProjectId;
-            existing.durationMinutes = entry.durationMinutes;
-            existing.notes = entry.notes ?? existing.notes;
+            existing.timeProjectId = timeProjectId;
+            if (projectChanged) existing.rateCurrencyCode = project?.currencyCode ?? null;
+            existing.startedAt = interval.startedAt;
+            existing.endedAt = interval.endedAt;
+            existing.durationMinutes = interval.durationMinutes;
+            existing.roundedMinutes = roundedMinutesFor(interval.durationMinutes, settings, {
+              tenantId,
+              organizationId
+            });
+            if (entry.taskId !== void 0) existing.taskId = task?.id ?? null;
+            if (entry.isBillable !== void 0) existing.isBillable = entry.isBillable;
+            if (entry.rateOverrideAmount !== void 0) {
+              existing.rateOverrideAmount = toStoredTimeEntryRateOverride(entry.rateOverrideAmount);
+            }
+            if (notes !== void 0) existing.notes = notes;
             existing.updatedAt = /* @__PURE__ */ new Date();
             updated++;
             changes.push({ action: "updated", entity: existing });
@@ -165,9 +315,22 @@ async function POST(req) {
             organizationId,
             staffMemberId,
             date: entry.date,
-            timeProjectId: entry.timeProjectId,
+            timeProjectId,
+            taskId: task?.id ?? null,
             durationMinutes: entry.durationMinutes,
-            notes: entry.notes ?? null,
+            roundedMinutes: roundedMinutesFor(entry.durationMinutes, settings, {
+              tenantId,
+              organizationId
+            }),
+            notes: notes ?? null,
+            isBillable: resolveTimeEntryBillable({
+              requested: entry.isBillable,
+              project,
+              settings,
+              scope: { tenantId, organizationId }
+            }),
+            rateOverrideAmount: toStoredTimeEntryRateOverride(entry.rateOverrideAmount),
+            rateCurrencyCode: project?.currencyCode ?? null,
             source: "manual",
             createdAt: now,
             updatedAt: now
@@ -214,14 +377,23 @@ async function POST(req) {
         tenantId,
         organizationId,
         userId: auth.sub ?? "",
-        resourceKind: "staff.timesheets.time_entry",
+        resourceKind: STAFF_TIME_TRACKING_RESOURCE_KINDS.timeEntry,
         resourceId: staffMemberId,
         operation: "update",
         requestMethod: req.method,
         requestHeaders: req.headers
       });
     }
-    return NextResponse.json({ ok: true, ...counts }, { status: 200 });
+    void emitStaffEvent("staff.timesheets.time_entry.bulk_updated", {
+      tenantId,
+      organizationId,
+      staffMemberId,
+      ...counts,
+      entryIds: pendingChanges.map((change) => change.entity.id)
+    }, { persistent: true }).catch((err) => {
+      logger.error("staff.timesheets emit time_entry.bulk_updated failed", { err });
+    });
+    return session.respond(200, { ok: true, ...counts });
   } catch (err) {
     if (err instanceof CrudHttpError) {
       return NextResponse.json(err.body, { status: err.status });
@@ -240,7 +412,7 @@ const openApi = {
   methods: {
     POST: {
       summary: "Bulk save time entries",
-      description: "Creates, updates, or soft-deletes multiple time entries in a single request. Entries with durationMinutes=0 and an existing id are soft-deleted.",
+      description: "Creates, updates, or soft-deletes multiple time entries in a single request. Entries with durationMinutes=0 and an existing id are soft-deleted. A row may name a taskId and let timeProjectId follow from it; task, description/notes precedence, isBillable defaulting, the rate override and the project currency snapshot follow the single-entry path exactly. tagIds is rejected with 422 \u2014 tags are edited from the time entry itself so their audit trail and undo stay intact. The whole batch is rejected with 409 time_entry_locked when any row targets \u2014 by id, or by landing on its (project, date) cell \u2014 an entry frozen in a closed report.",
       requestBody: {
         contentType: "application/json",
         schema: staffTimeEntryBulkSaveSchema
@@ -264,6 +436,17 @@ const openApi = {
             errors: z.array(z.object({ path: z.string(), message: z.string() }))
           })
         },
+        {
+          status: 409,
+          description: "One or more rows target a time entry locked in a closed report; nothing was saved",
+          schema: z.object({
+            code: z.literal("time_entry_locked"),
+            error: z.string(),
+            lockedReportId: z.string().uuid().nullable(),
+            lockedEntryIds: z.array(z.string().uuid()),
+            lockedReportIds: z.array(z.string().uuid())
+          })
+        },
         { status: 401, description: "Unauthorized", schema: z.object({ error: z.string() }) },
         { status: 403, description: "Forbidden", schema: z.object({ error: z.string() }) }
       ]

package/dist/modules/staff/api/timesheets/time-entries/bulk/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../../src/modules/staff/api/timesheets/time-entries/bulk/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { CrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { findOneWithDecryption, findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { readJsonSafe } from '@open-mercato/shared/lib/http/readJsonSafe'\nimport { emitCrudSideEffects, flushCrudSideEffects } from '@open-mercato/shared/lib/commands/helpers'\nimport type { DataEngine } from '@open-mercato/shared/lib/data/engine'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { StaffTimeEntry, StaffTeamMember, StaffTimeProject } from '../../../../data/entities'\nimport { staffTimeEntryBulkSaveSchema } from '../../../../data/validators'\nimport { staffTimeEntryCrudEvents } from '../../../../lib/crud'\nimport { invalidateStaffTimeEntryCache } from '../../../../lib/timesheets/timeEntryCacheInvalidation'\nimport {\n  resolveUserFeatures,\n  runStaffMutationGuardAfterSuccess,\n  runStaffMutationGuards,\n} from '../../../guards'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('staff')\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: ['staff.timesheets.manage_own'] },\n}\n\nexport async function POST(req: Request) {\n  try {\n    const container = await createRequestContainer()\n    const auth = await getAuthFromRequest(req)\n    const { translate } = await resolveTranslations()\n    if (!auth) throw new CrudHttpError(401, { error: translate('staff.errors.unauthorized', 'Unauthorized') })\n\n    const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n    const tenantId = scope?.tenantId ?? auth.tenantId ?? null\n    const organizationId = scope?.selectedId ?? auth.orgId ?? null\n    if (!tenantId || !organizationId) {\n      throw new CrudHttpError(400, { error: translate('staff.errors.missingScope', 'Missing tenant or organization scope.') })\n    }\n\n    const body = await readJsonSafe(req, {})\n    const parsed = staffTimeEntryBulkSaveSchema.safeParse(body)\n    if (!parsed.success) {\n      const errors = parsed.error.issues.map((issue) => ({\n        path: issue.path.join('.'),\n        message: issue.message,\n      }))\n      return NextResponse.json({ ok: false, errors }, { status: 422 })\n    }\n\n    const { entries } = parsed.data\n\n    const em = (container.resolve('em') as EntityManager).fork()\n    const scopeCtx = { tenantId, organizationId }\n\n    const staffMember = await findOneWithDecryption(\n      em,\n      StaffTeamMember,\n      { userId: auth.sub, tenantId, organizationId, deletedAt: null },\n      {},\n      scopeCtx,\n    )\n    if (!staffMember) {\n      throw new CrudHttpError(403, { error: translate('staff.timesheets.errors.noStaffMember', 'No staff member linked to your account.') })\n    }\n    const staffMemberId = staffMember.id\n\n    // Validate that all referenced timeProjectIds exist and are in-scope\n    const referencedProjectIds = [\n      ...new Set(\n        entries\n          .map((e) => e.timeProjectId)\n          .filter((id): id is string => typeof id === 'string' && id.length > 0),\n      ),\n    ]\n    if (referencedProjectIds.length > 0) {\n      const validProjects = await em.find(StaffTimeProject, {\n        id: { $in: referencedProjectIds },\n        tenantId,\n        organizationId,\n        deletedAt: null,\n      }, { fields: ['id'] })\n      const validIds = new Set(validProjects.map((p) => p.id))\n      const invalidIds = referencedProjectIds.filter((id) => !validIds.has(id))\n      if (invalidIds.length > 0) {\n        return NextResponse.json(\n          {\n            ok: false,\n            errors: invalidIds.map((id) => ({\n              path: 'entries[].timeProjectId',\n              message: translate('staff.timesheets.errors.projectNotFound', 'Time project not found or not accessible.'),\n              value: id,\n            })),\n          },\n          { status: 422 },\n        )\n      }\n    }\n\n    const guardInput = {\n      tenantId,\n      organizationId,\n      userId: auth.sub ?? '',\n      resourceKind: 'staff.timesheets.time_entry',\n      resourceId: staffMemberId,\n      operation: 'update' as const,\n      requestMethod: req.method,\n      requestHeaders: req.headers,\n      mutationPayload: parsed.data as unknown as Record<string, unknown>,\n    }\n    const guardResult = await runStaffMutationGuards(container, guardInput, resolveUserFeatures(auth))\n    if (!guardResult.ok) {\n      return NextResponse.json(\n        guardResult.errorBody ?? { error: 'Operation blocked by guard' },\n        { status: guardResult.errorStatus ?? 422 },\n      )\n    }\n\n    const existingIds = entries\n      .map((entry) => entry.id)\n      .filter((id): id is string => typeof id === 'string' && id.length > 0)\n\n    // Validate referenced entry IDs upfront: a stale or foreign UUID would\n    // otherwise fall through to the create branch in the loop below and insert\n    // a duplicate row with that ID-less new identity. Reject as 422 instead.\n    if (existingIds.length > 0) {\n      const resolvedExisting = await em.find(\n        StaffTimeEntry,\n        { id: { $in: existingIds }, tenantId, organizationId, staffMemberId, deletedAt: null },\n        { fields: ['id'] },\n      )\n      const resolvedIdSet = new Set(resolvedExisting.map((entry) => entry.id))\n      const invalidIds = existingIds.filter((id) => !resolvedIdSet.has(id))\n      if (invalidIds.length > 0) {\n        return NextResponse.json(\n          {\n            ok: false,\n            errors: invalidIds.map((id) => ({\n              path: 'entries[].id',\n              message: translate(\n                'staff.timesheets.errors.entryNotFound',\n                'Time entry not found, deleted, or not owned by you.',\n              ),\n              value: id,\n            })),\n          },\n          { status: 422 },\n        )\n      }\n    }\n\n    type PendingChange = {\n      action: 'created' | 'updated' | 'deleted'\n      entity: StaffTimeEntry\n    }\n\n    const { counts, pendingChanges } = await em.transactional(async (trx) => {\n      let created = 0\n      let updated = 0\n      let deleted = 0\n      const changes: PendingChange[] = []\n\n      const existingEntries = existingIds.length > 0\n        ? await findWithDecryption(\n            trx,\n            StaffTimeEntry,\n            { id: { $in: existingIds }, tenantId, organizationId, staffMemberId, deletedAt: null },\n            {},\n            scopeCtx,\n          )\n        : []\n\n      const existingMap = new Map(existingEntries.map((entry) => [entry.id, entry]))\n\n      for (const entry of entries) {\n        if (entry.id && existingMap.has(entry.id)) {\n          const existing = existingMap.get(entry.id)!\n          if (entry.durationMinutes === 0) {\n            existing.deletedAt = new Date()\n            deleted++\n            changes.push({ action: 'deleted', entity: existing })\n          } else {\n            existing.date = entry.date\n            existing.timeProjectId = entry.timeProjectId\n            existing.durationMinutes = entry.durationMinutes\n            existing.notes = entry.notes ?? existing.notes\n            existing.updatedAt = new Date()\n            updated++\n            changes.push({ action: 'updated', entity: existing })\n          }\n        } else {\n          const now = new Date()\n          const newEntry = trx.create(StaffTimeEntry, {\n            tenantId,\n            organizationId,\n            staffMemberId,\n            date: entry.date,\n            timeProjectId: entry.timeProjectId,\n            durationMinutes: entry.durationMinutes,\n            notes: entry.notes ?? null,\n            source: 'manual',\n            createdAt: now,\n            updatedAt: now,\n          })\n          created++\n          changes.push({ action: 'created', entity: newEntry })\n        }\n      }\n\n      await trx.flush()\n      return { counts: { created, updated, deleted }, pendingChanges: changes }\n    })\n\n    const dataEngine = container.resolve<DataEngine>('dataEngine')\n    for (const change of pendingChanges) {\n      await emitCrudSideEffects({\n        dataEngine,\n        action: change.action,\n        entity: change.entity,\n        identifiers: {\n          id: change.entity.id,\n          organizationId: change.entity.organizationId,\n          tenantId: change.entity.tenantId,\n        },\n        events: staffTimeEntryCrudEvents,\n      })\n    }\n    await flushCrudSideEffects(dataEngine)\n\n    const invalidatedRecordIds = new Set<string>()\n    for (const change of pendingChanges) {\n      if (invalidatedRecordIds.has(change.entity.id)) continue\n      invalidatedRecordIds.add(change.entity.id)\n      await invalidateStaffTimeEntryCache(\n        container,\n        {\n          id: change.entity.id,\n          organizationId: change.entity.organizationId,\n          tenantId: change.entity.tenantId,\n        },\n        tenantId,\n        `bulk:${change.action}`,\n      )\n    }\n\n    if (guardResult.afterSuccessCallbacks.length) {\n      await runStaffMutationGuardAfterSuccess(guardResult.afterSuccessCallbacks, {\n        tenantId,\n        organizationId,\n        userId: auth.sub ?? '',\n        resourceKind: 'staff.timesheets.time_entry',\n        resourceId: staffMemberId,\n        operation: 'update',\n        requestMethod: req.method,\n        requestHeaders: req.headers,\n      })\n    }\n\n    return NextResponse.json({ ok: true, ...counts }, { status: 200 })\n  } catch (err) {\n    if (err instanceof CrudHttpError) {\n      return NextResponse.json(err.body, { status: err.status })\n    }\n    const { translate } = await resolveTranslations()\n    logger.error('staff.timesheets.time-entries.bulk failed', { err })\n    return NextResponse.json(\n      { error: translate('staff.timesheets.errors.bulkSave', 'Failed to bulk save time entries.') },\n      { status: 400 },\n    )\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Staff',\n  summary: 'Bulk save time entries',\n  methods: {\n    POST: {\n      summary: 'Bulk save time entries',\n      description: 'Creates, updates, or soft-deletes multiple time entries in a single request. Entries with durationMinutes=0 and an existing id are soft-deleted.',\n      requestBody: {\n        contentType: 'application/json',\n        schema: staffTimeEntryBulkSaveSchema,\n      },\n      responses: [\n        {\n          status: 200,\n          description: 'Bulk save completed',\n          schema: z.object({\n            ok: z.literal(true),\n            created: z.number(),\n            updated: z.number(),\n            deleted: z.number(),\n          }),\n        },\n        {\n          status: 422,\n          description: 'Validation error',\n          schema: z.object({\n            ok: z.literal(false),\n            errors: z.array(z.object({ path: z.string(), message: z.string() })),\n          }),\n        },\n        { status: 401, description: 'Unauthorized', schema: z.object({ error: z.string() }) },\n        { status: 403, description: 'Forbidden', schema: z.object({ error: z.string() }) },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AACnD,SAAS,qBAAqB;AAC9B,SAAS,2BAA2B;AACpC,SAAS,uBAAuB,0BAA0B;AAC1D,SAAS,oBAAoB;AAC7B,SAAS,qBAAqB,4BAA4B;AAI1D,SAAS,gBAAgB,iBAAiB,wBAAwB;AAClE,SAAS,oCAAoC;AAC7C,SAAS,gCAAgC;AACzC,SAAS,qCAAqC;AAC9C;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,OAAO;AAE5B,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,6BAA6B,EAAE;AAC9E;AAEA,eAAsB,KAAK,KAAc;AACvC,MAAI;AACF,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,QAAI,CAAC,KAAM,OAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,6BAA6B,cAAc,EAAE,CAAC;AAEzG,UAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AACxF,UAAM,WAAW,OAAO,YAAY,KAAK,YAAY;AACrD,UAAM,iBAAiB,OAAO,cAAc,KAAK,SAAS;AAC1D,QAAI,CAAC,YAAY,CAAC,gBAAgB;AAChC,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,6BAA6B,uCAAuC,EAAE,CAAC;AAAA,IACzH;AAEA,UAAM,OAAO,MAAM,aAAa,KAAK,CAAC,CAAC;AACvC,UAAM,SAAS,6BAA6B,UAAU,IAAI;AAC1D,QAAI,CAAC,OAAO,SAAS;AACnB,YAAM,SAAS,OAAO,MAAM,OAAO,IAAI,CAAC,WAAW;AAAA,QACjD,MAAM,MAAM,KAAK,KAAK,GAAG;AAAA,QACzB,SAAS,MAAM;AAAA,MACjB,EAAE;AACF,aAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACjE;AAEA,UAAM,EAAE,QAAQ,IAAI,OAAO;AAE3B,UAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC3D,UAAM,WAAW,EAAE,UAAU,eAAe;AAE5C,UAAM,cAAc,MAAM;AAAA,MACxB;AAAA,MACA;AAAA,MACA,EAAE,QAAQ,KAAK,KAAK,UAAU,gBAAgB,WAAW,KAAK;AAAA,MAC9D,CAAC;AAAA,MACD;AAAA,IACF;AACA,QAAI,CAAC,aAAa;AAChB,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,yCAAyC,yCAAyC,EAAE,CAAC;AAAA,IACvI;AACA,UAAM,gBAAgB,YAAY;AAGlC,UAAM,uBAAuB;AAAA,MAC3B,GAAG,IAAI;AAAA,QACL,QACG,IAAI,CAAC,MAAM,EAAE,aAAa,EAC1B,OAAO,CAAC,OAAqB,OAAO,OAAO,YAAY,GAAG,SAAS,CAAC;AAAA,MACzE;AAAA,IACF;AACA,QAAI,qBAAqB,SAAS,GAAG;AACnC,YAAM,gBAAgB,MAAM,GAAG,KAAK,kBAAkB;AAAA,QACpD,IAAI,EAAE,KAAK,qBAAqB;AAAA,QAChC;AAAA,QACA;AAAA,QACA,WAAW;AAAA,MACb,GAAG,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC;AACrB,YAAM,WAAW,IAAI,IAAI,cAAc,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;AACvD,YAAM,aAAa,qBAAqB,OAAO,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC;AACxE,UAAI,WAAW,SAAS,GAAG;AACzB,eAAO,aAAa;AAAA,UAClB;AAAA,YACE,IAAI;AAAA,YACJ,QAAQ,WAAW,IAAI,CAAC,QAAQ;AAAA,cAC9B,MAAM;AAAA,cACN,SAAS,UAAU,2CAA2C,2CAA2C;AAAA,cACzG,OAAO;AAAA,YACT,EAAE;AAAA,UACJ;AAAA,UACA,EAAE,QAAQ,IAAI;AAAA,QAChB;AAAA,MACF;AAAA,IACF;AAEA,UAAM,aAAa;AAAA,MACjB;AAAA,MACA;AAAA,MACA,QAAQ,KAAK,OAAO;AAAA,MACpB,cAAc;AAAA,MACd,YAAY;AAAA,MACZ,WAAW;AAAA,MACX,eAAe,IAAI;AAAA,MACnB,gBAAgB,IAAI;AAAA,MACpB,iBAAiB,OAAO;AAAA,IAC1B;AACA,UAAM,cAAc,MAAM,uBAAuB,WAAW,YAAY,oBAAoB,IAAI,CAAC;AACjG,QAAI,CAAC,YAAY,IAAI;AACnB,aAAO,aAAa;AAAA,QAClB,YAAY,aAAa,EAAE,OAAO,6BAA6B;AAAA,QAC/D,EAAE,QAAQ,YAAY,eAAe,IAAI;AAAA,MAC3C;AAAA,IACF;AAEA,UAAM,cAAc,QACjB,IAAI,CAAC,UAAU,MAAM,EAAE,EACvB,OAAO,CAAC,OAAqB,OAAO,OAAO,YAAY,GAAG,SAAS,CAAC;AAKvE,QAAI,YAAY,SAAS,GAAG;AAC1B,YAAM,mBAAmB,MAAM,GAAG;AAAA,QAChC;AAAA,QACA,EAAE,IAAI,EAAE,KAAK,YAAY,GAAG,UAAU,gBAAgB,eAAe,WAAW,KAAK;AAAA,QACrF,EAAE,QAAQ,CAAC,IAAI,EAAE;AAAA,MACnB;AACA,YAAM,gBAAgB,IAAI,IAAI,iBAAiB,IAAI,CAAC,UAAU,MAAM,EAAE,CAAC;AACvE,YAAM,aAAa,YAAY,OAAO,CAAC,OAAO,CAAC,cAAc,IAAI,EAAE,CAAC;AACpE,UAAI,WAAW,SAAS,GAAG;AACzB,eAAO,aAAa;AAAA,UAClB;AAAA,YACE,IAAI;AAAA,YACJ,QAAQ,WAAW,IAAI,CAAC,QAAQ;AAAA,cAC9B,MAAM;AAAA,cACN,SAAS;AAAA,gBACP;AAAA,gBACA;AAAA,cACF;AAAA,cACA,OAAO;AAAA,YACT,EAAE;AAAA,UACJ;AAAA,UACA,EAAE,QAAQ,IAAI;AAAA,QAChB;AAAA,MACF;AAAA,IACF;AAOA,UAAM,EAAE,QAAQ,eAAe,IAAI,MAAM,GAAG,cAAc,OAAO,QAAQ;AACvE,UAAI,UAAU;AACd,UAAI,UAAU;AACd,UAAI,UAAU;AACd,YAAM,UAA2B,CAAC;AAElC,YAAM,kBAAkB,YAAY,SAAS,IACzC,MAAM;AAAA,QACJ;AAAA,QACA;AAAA,QACA,EAAE,IAAI,EAAE,KAAK,YAAY,GAAG,UAAU,gBAAgB,eAAe,WAAW,KAAK;AAAA,QACrF,CAAC;AAAA,QACD;AAAA,MACF,IACA,CAAC;AAEL,YAAM,cAAc,IAAI,IAAI,gBAAgB,IAAI,CAAC,UAAU,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC;AAE7E,iBAAW,SAAS,SAAS;AAC3B,YAAI,MAAM,MAAM,YAAY,IAAI,MAAM,EAAE,GAAG;AACzC,gBAAM,WAAW,YAAY,IAAI,MAAM,EAAE;AACzC,cAAI,MAAM,oBAAoB,GAAG;AAC/B,qBAAS,YAAY,oBAAI,KAAK;AAC9B;AACA,oBAAQ,KAAK,EAAE,QAAQ,WAAW,QAAQ,SAAS,CAAC;AAAA,UACtD,OAAO;AACL,qBAAS,OAAO,MAAM;AACtB,qBAAS,gBAAgB,MAAM;AAC/B,qBAAS,kBAAkB,MAAM;AACjC,qBAAS,QAAQ,MAAM,SAAS,SAAS;AACzC,qBAAS,YAAY,oBAAI,KAAK;AAC9B;AACA,oBAAQ,KAAK,EAAE,QAAQ,WAAW,QAAQ,SAAS,CAAC;AAAA,UACtD;AAAA,QACF,OAAO;AACL,gBAAM,MAAM,oBAAI,KAAK;AACrB,gBAAM,WAAW,IAAI,OAAO,gBAAgB;AAAA,YAC1C;AAAA,YACA;AAAA,YACA;AAAA,YACA,MAAM,MAAM;AAAA,YACZ,eAAe,MAAM;AAAA,YACrB,iBAAiB,MAAM;AAAA,YACvB,OAAO,MAAM,SAAS;AAAA,YACtB,QAAQ;AAAA,YACR,WAAW;AAAA,YACX,WAAW;AAAA,UACb,CAAC;AACD;AACA,kBAAQ,KAAK,EAAE,QAAQ,WAAW,QAAQ,SAAS,CAAC;AAAA,QACtD;AAAA,MACF;AAEA,YAAM,IAAI,MAAM;AAChB,aAAO,EAAE,QAAQ,EAAE,SAAS,SAAS,QAAQ,GAAG,gBAAgB,QAAQ;AAAA,IAC1E,CAAC;AAED,UAAM,aAAa,UAAU,QAAoB,YAAY;AAC7D,eAAW,UAAU,gBAAgB;AACnC,YAAM,oBAAoB;AAAA,QACxB;AAAA,QACA,QAAQ,OAAO;AAAA,QACf,QAAQ,OAAO;AAAA,QACf,aAAa;AAAA,UACX,IAAI,OAAO,OAAO;AAAA,UAClB,gBAAgB,OAAO,OAAO;AAAA,UAC9B,UAAU,OAAO,OAAO;AAAA,QAC1B;AAAA,QACA,QAAQ;AAAA,MACV,CAAC;AAAA,IACH;AACA,UAAM,qBAAqB,UAAU;AAErC,UAAM,uBAAuB,oBAAI,IAAY;AAC7C,eAAW,UAAU,gBAAgB;AACnC,UAAI,qBAAqB,IAAI,OAAO,OAAO,EAAE,EAAG;AAChD,2BAAqB,IAAI,OAAO,OAAO,EAAE;AACzC,YAAM;AAAA,QACJ;AAAA,QACA;AAAA,UACE,IAAI,OAAO,OAAO;AAAA,UAClB,gBAAgB,OAAO,OAAO;AAAA,UAC9B,UAAU,OAAO,OAAO;AAAA,QAC1B;AAAA,QACA;AAAA,QACA,QAAQ,OAAO,MAAM;AAAA,MACvB;AAAA,IACF;AAEA,QAAI,YAAY,sBAAsB,QAAQ;AAC5C,YAAM,kCAAkC,YAAY,uBAAuB;AAAA,QACzE;AAAA,QACA;AAAA,QACA,QAAQ,KAAK,OAAO;AAAA,QACpB,cAAc;AAAA,QACd,YAAY;AAAA,QACZ,WAAW;AAAA,QACX,eAAe,IAAI;AAAA,QACnB,gBAAgB,IAAI;AAAA,MACtB,CAAC;AAAA,IACH;AAEA,WAAO,aAAa,KAAK,EAAE,IAAI,MAAM,GAAG,OAAO,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACnE,SAAS,KAAK;AACZ,QAAI,eAAe,eAAe;AAChC,aAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,IAC3D;AACA,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,WAAO,MAAM,6CAA6C,EAAE,IAAI,CAAC;AACjE,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,UAAU,oCAAoC,mCAAmC,EAAE;AAAA,MAC5F,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa;AAAA,MACb,aAAa;AAAA,QACX,aAAa;AAAA,QACb,QAAQ;AAAA,MACV;AAAA,MACA,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO;AAAA,YACf,IAAI,EAAE,QAAQ,IAAI;AAAA,YAClB,SAAS,EAAE,OAAO;AAAA,YAClB,SAAS,EAAE,OAAO;AAAA,YAClB,SAAS,EAAE,OAAO;AAAA,UACpB,CAAC;AAAA,QACH;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO;AAAA,YACf,IAAI,EAAE,QAAQ,KAAK;AAAA,YACnB,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,GAAG,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC;AAAA,UACrE,CAAC;AAAA,QACH;AAAA,QACA,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,QACpF,EAAE,QAAQ,KAAK,aAAa,aAAa,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,MACnF;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { CrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { findOneWithDecryption, findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { readJsonSafe } from '@open-mercato/shared/lib/http/readJsonSafe'\nimport { emitCrudSideEffects, flushCrudSideEffects } from '@open-mercato/shared/lib/commands/helpers'\nimport type { DataEngine } from '@open-mercato/shared/lib/data/engine'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { StaffTimeEntry, StaffTeamMember, StaffTimeProject, StaffTimeTask } from '../../../../data/entities'\nimport {\n  staffTimeEntryBulkSaveSchema,\n  type StaffTimeEntryBulkSaveInput,\n} from '../../../../data/validators'\nimport {\n  buildTimeEntryLockedError,\n  rebaseTimeEntryIntervalToDate,\n  reconcileTimeEntryInterval,\n  resolveTimeEntryBillable,\n  resolveTimeEntryNotesInput,\n  resolveTimeEntryProjectId,\n  resolveTimeEntrySettings,\n  roundedMinutesFor,\n  timeEntryTaskMatchesProject,\n  toStoredTimeEntryRateOverride,\n  type LockedTimeEntryRef,\n} from '../../../../commands/timesheets-entries'\nimport { staffTimeEntryCrudEvents } from '../../../../lib/crud'\nimport { emitStaffEvent } from '../../../../events'\nimport { invalidateStaffTimeEntryCache } from '../../../../lib/timesheets/timeEntryCacheInvalidation'\nimport {\n  STAFF_TIME_TRACKING_RESOURCE_KINDS,\n  runStaffMutationGuardAfterSuccess,\n  runStaffMutationGuards,\n} from '../../../guards'\nimport { runTimesheetInterceptors } from '../../_shared/withTimesheetInterceptors'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('staff')\n\n/**\n * A grid cell is addressed by the day the work started, never by the timestamp,\n * so both sides of the comparison collapse to `YYYY-MM-DD` (D-8).\n */\nfunction cellDateKey(value: Date | string | null | undefined): string {\n  if (!value) return ''\n  const date = value instanceof Date ? value : new Date(value)\n  return Number.isNaN(date.getTime()) ? String(value) : date.toISOString().slice(0, 10)\n}\n\ntype BulkRowError = { path: string; message: string; value?: unknown }\n\n/**\n * The batch answers with a per-row error list rather than a thrown 422: one grid\n * save spans a week of cells, so the client needs to know WHICH row it must fix.\n * The single-entry command raises the same refusals as `CrudHttpError` field\n * errors \u2014 same rule, different reporting shape.\n */\nfunction bulkValidationError(errors: BulkRowError[]): NextResponse {\n  return NextResponse.json({ ok: false, errors }, { status: 422 })\n}\n\n/**\n * A row as the write loop needs it: the payload plus the two things that must be\n * settled before the lock gate can address a cell \u2014 the task it names (validated\n * in scope) and the project the entry actually lands on, which a task-only row\n * inherits from its task exactly as the single-entry path does.\n */\ntype BulkEntryInput = StaffTimeEntryBulkSaveInput['entries'][number]\n\ntype ResolvedBulkRow = {\n  entry: BulkEntryInput\n  task: { id: string; timeProjectId: string } | null\n  timeProjectId: string\n}\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: ['staff.timesheets.manage_own'] },\n}\n\nexport async function POST(req: Request) {\n  try {\n    const container = await createRequestContainer()\n    const auth = await getAuthFromRequest(req)\n    const { translate } = await resolveTranslations()\n    if (!auth) throw new CrudHttpError(401, { error: translate('staff.errors.unauthorized', 'Unauthorized') })\n\n    const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n    const tenantId = scope?.tenantId ?? auth.tenantId ?? null\n    const organizationId = scope?.selectedId ?? auth.orgId ?? null\n    if (!tenantId || !organizationId) {\n      throw new CrudHttpError(400, { error: translate('staff.errors.missingScope', 'Missing tenant or organization scope.') })\n    }\n\n    const interceptors = await runTimesheetInterceptors({\n      request: req,\n      method: 'POST',\n      scope: { container, userId: auth.sub, tenantId, organizationId },\n      body: await readJsonSafe<Record<string, unknown>>(req, {}),\n    })\n    if (!interceptors.ok) return interceptors.response\n    const { session } = interceptors\n\n    const parsed = staffTimeEntryBulkSaveSchema.safeParse(session.body)\n    if (!parsed.success) {\n      const errors = parsed.error.issues.map((issue) => ({\n        path: issue.path.join('.'),\n        message: issue.message,\n      }))\n      return NextResponse.json({ ok: false, errors }, { status: 422 })\n    }\n\n    const { entries } = parsed.data\n\n    // Tags are REFUSED here rather than accepted and dropped.\n    //\n    // The single-entry path assigns tags by dispatching the tag commands, which\n    // fork their own EntityManager so they can carry their own audit entry, undo\n    // and lock check. Inside this route's `em.transactional` that fork would not\n    // see the rows the transaction has not committed yet, and dispatching AFTER\n    // the commit would answer `{ ok: true, created: n }` for a batch whose tags\n    // silently failed \u2014 a response carrying only counts cannot say which cell\n    // lost them, which is the very silent-success class this route is being\n    // fixed for. So the row is rejected and the user is pointed at the entry\n    // dialog, which writes tags through the commands with all of their\n    // guarantees intact.\n    const taggedRows = entries.filter((entry) => entry.tagIds !== undefined)\n    if (taggedRows.length > 0) {\n      const message = translate(\n        'staff.timesheets.errors.bulkTagsUnsupported',\n        'Tags cannot be changed from the timesheet grid. Open the time entry to edit its tags.',\n      )\n      return bulkValidationError(taggedRows.map(() => ({ path: 'entries[].tagIds', message })))\n    }\n\n    const em = (container.resolve('em') as EntityManager).fork()\n    const scopeCtx = { tenantId, organizationId }\n\n    const staffMember = await findOneWithDecryption(\n      em,\n      StaffTeamMember,\n      { userId: auth.sub, tenantId, organizationId, deletedAt: null },\n      {},\n      scopeCtx,\n    )\n    if (!staffMember) {\n      throw new CrudHttpError(403, { error: translate('staff.timesheets.errors.noStaffMember', 'No staff member linked to your account.') })\n    }\n    const staffMemberId = staffMember.id\n\n    // Validate that all referenced taskIds exist and are in-scope, in one query\n    // for the whole batch. Same rule the single-entry path applies through\n    // `requireTaskInScope`: a dangling task reference is refused rather than\n    // stored, because the task rollups aggregate entries by `task_id` and a stale\n    // or foreign UUID would silently move hours onto another project's card.\n    const referencedTaskIds = [\n      ...new Set(\n        entries\n          .map((entry) => entry.taskId)\n          .filter((id): id is string => typeof id === 'string' && id.length > 0),\n      ),\n    ]\n    const tasksById = new Map<string, { id: string; timeProjectId: string }>()\n    if (referencedTaskIds.length > 0) {\n      const validTasks = await em.find(StaffTimeTask, {\n        id: { $in: referencedTaskIds },\n        tenantId,\n        organizationId,\n        deletedAt: null,\n      }, { fields: ['id', 'timeProjectId'] })\n      for (const task of validTasks) tasksById.set(task.id, { id: task.id, timeProjectId: task.timeProjectId })\n      const invalidTaskIds = referencedTaskIds.filter((id) => !tasksById.has(id))\n      if (invalidTaskIds.length > 0) {\n        const message = translate('staff.timesheets.errors.taskNotFound', 'Task not found or not accessible.')\n        return bulkValidationError(\n          invalidTaskIds.map((id) => ({ path: 'entries[].taskId', message, value: id })),\n        )\n      }\n    }\n\n    // Every row is pinned to the project it will actually land on BEFORE the lock\n    // gate runs, because the gate addresses a cell by (project, date) \u2014 a task row\n    // that inherited its project must be checked against that inherited cell, not\n    // against a blank one.\n    const resolvedRows: ResolvedBulkRow[] = []\n    const missingProjectErrors: BulkRowError[] = []\n    const taskProjectMismatchErrors: BulkRowError[] = []\n    for (const entry of entries) {\n      const task = entry.taskId ? tasksById.get(entry.taskId) ?? null : null\n      const timeProjectId = resolveTimeEntryProjectId(entry.timeProjectId, task)\n      if (!timeProjectId) {\n        missingProjectErrors.push({\n          path: 'entries[].timeProjectId',\n          message: translate('staff.timesheets.errors.projectRequired', 'Time project id is required.'),\n        })\n        continue\n      }\n      if (!timeEntryTaskMatchesProject(task, timeProjectId)) {\n        taskProjectMismatchErrors.push({\n          path: 'entries[].taskId',\n          message: translate('staff.timesheets.errors.taskNotFound', 'Task not found or not accessible.'),\n          value: entry.taskId,\n        })\n        continue\n      }\n      resolvedRows.push({ entry, task, timeProjectId })\n    }\n    if (missingProjectErrors.length > 0 || taskProjectMismatchErrors.length > 0) {\n      return bulkValidationError([...missingProjectErrors, ...taskProjectMismatchErrors])\n    }\n\n    // Validate that all referenced timeProjectIds exist and are in-scope. The\n    // project rows are kept, not just their ids: a created entry snapshots the\n    // project's currency and inherits its billable default (D-3), so one query\n    // serves validation and both defaults.\n    const referencedProjectIds = [...new Set(resolvedRows.map((row) => row.timeProjectId))]\n    const projectsById = new Map<string, { currencyCode?: string | null; billableByDefault?: boolean | null }>()\n    if (referencedProjectIds.length > 0) {\n      const validProjects = await em.find(StaffTimeProject, {\n        id: { $in: referencedProjectIds },\n        tenantId,\n        organizationId,\n        deletedAt: null,\n      }, { fields: ['id', 'currencyCode', 'billableByDefault'] })\n      for (const project of validProjects) {\n        projectsById.set(project.id, {\n          currencyCode: project.currencyCode ?? null,\n          billableByDefault: project.billableByDefault ?? null,\n        })\n      }\n      const invalidIds = referencedProjectIds.filter((id) => !projectsById.has(id))\n      if (invalidIds.length > 0) {\n        const message = translate(\n          'staff.timesheets.errors.projectNotFound',\n          'Time project not found or not accessible.',\n        )\n        return bulkValidationError(\n          invalidIds.map((id) => ({ path: 'entries[].timeProjectId', message, value: id })),\n        )\n      }\n    }\n\n    const guardInput = {\n      tenantId,\n      organizationId,\n      userId: auth.sub ?? '',\n      resourceKind: STAFF_TIME_TRACKING_RESOURCE_KINDS.timeEntry,\n      resourceId: staffMemberId,\n      operation: 'update' as const,\n      requestMethod: req.method,\n      requestHeaders: req.headers,\n      mutationPayload: parsed.data as unknown as Record<string, unknown>,\n    }\n    const guardResult = await runStaffMutationGuards(container, guardInput)\n    if (!guardResult.ok) {\n      return NextResponse.json(\n        guardResult.errorBody ?? { error: 'Operation blocked by guard' },\n        { status: guardResult.errorStatus ?? 422 },\n      )\n    }\n\n    const existingIds = resolvedRows\n      .map((row) => row.entry.id)\n      .filter((id): id is string => typeof id === 'string' && id.length > 0)\n\n    // Validate referenced entry IDs upfront: a stale or foreign UUID would\n    // otherwise fall through to the create branch in the loop below and insert\n    // a duplicate row with that ID-less new identity. Reject as 422 instead.\n    if (existingIds.length > 0) {\n      const resolvedExisting = await em.find(\n        StaffTimeEntry,\n        { id: { $in: existingIds }, tenantId, organizationId, staffMemberId, deletedAt: null },\n        { fields: ['id'] },\n      )\n      const resolvedIdSet = new Set(resolvedExisting.map((entry) => entry.id))\n      const invalidIds = existingIds.filter((id) => !resolvedIdSet.has(id))\n      if (invalidIds.length > 0) {\n        return NextResponse.json(\n          {\n            ok: false,\n            errors: invalidIds.map((id) => ({\n              path: 'entries[].id',\n              message: translate(\n                'staff.timesheets.errors.entryNotFound',\n                'Time entry not found, deleted, or not owned by you.',\n              ),\n              value: id,\n            })),\n          },\n          { status: 422 },\n        )\n      }\n    }\n\n    // --- Lock gate (risk R3) -------------------------------------------------\n    //\n    // This is the endpoint the lock is most likely to leak through, because the\n    // grid addresses a cell by (project, date) and only carries an id when the\n    // client happened to have one loaded. So both shapes are checked:\n    //\n    //  * a row naming an id that resolves to a frozen entry, and\n    //  * an id-less row landing on a (project, date) cell a frozen entry already\n    //    occupies \u2014 the grid renders one summed value per cell, so creating a\n    //    second row there silently restates hours a closed report has billed.\n    //\n    // The batch fails WHOLESALE, before the transaction opens. A grid save is one\n    // user gesture spanning a week of cells and the response carries only counts,\n    // so applying the unlocked rows would leave the client unable to tell which\n    // cells landed \u2014 and the route already rejects the whole payload for an\n    // unknown project or a stale entry id, so a partial 409 would be the odd one\n    // out. The 409 names every offending id and the reports that froze them, so\n    // the grid can mark exactly those cells read-only and the user retries the\n    // rest after reloading (which is also what makes the lock badge appear).\n    //\n    // The cell is addressed by the RESOLVED project, so a task row that inherited\n    // its project is checked against the cell it will really occupy.\n    const idlessRows = resolvedRows.filter((row) => !row.entry.id)\n    const idlessCells = idlessRows.map((row) => `${cellDateKey(row.entry.date)}|${row.timeProjectId}`)\n    const lockConditions: Record<string, unknown>[] = []\n    if (existingIds.length > 0) lockConditions.push({ id: { $in: existingIds } })\n    if (idlessCells.length > 0) {\n      lockConditions.push({\n        date: { $in: idlessRows.map((row) => row.entry.date) },\n        timeProjectId: { $in: [...new Set(idlessRows.map((row) => row.timeProjectId))] },\n      })\n    }\n    if (lockConditions.length > 0) {\n      const existingIdSet = new Set(existingIds)\n      const idlessCellSet = new Set(idlessCells)\n      const lockedCandidates = await em.find(\n        StaffTimeEntry,\n        {\n          tenantId,\n          organizationId,\n          staffMemberId,\n          deletedAt: null,\n          lockedReportId: { $ne: null },\n          $or: lockConditions,\n        },\n        { fields: ['id', 'lockedReportId', 'date', 'timeProjectId'] },\n      )\n      // The (date \u00D7 project) condition above is a cross product, so it can match a\n      // locked entry on a cell the payload never touches \u2014 narrowed here.\n      const blocked: LockedTimeEntryRef[] = lockedCandidates.filter(\n        (row) =>\n          existingIdSet.has(row.id) ||\n          idlessCellSet.has(`${cellDateKey(row.date)}|${row.timeProjectId ?? ''}`),\n      )\n      if (blocked.length > 0) {\n        throw buildTimeEntryLockedError(\n          blocked.map((row) => ({ id: row.id, lockedReportId: row.lockedReportId })),\n          translate,\n        )\n      }\n    }\n\n    type PendingChange = {\n      action: 'created' | 'updated' | 'deleted'\n      entity: StaffTimeEntry\n    }\n\n    // D-7 makes `rounded_minutes` the only input to cost, and this route writes\n    // durations outside the entries command \u2014 so every row it touches is rounded\n    // with the same tenant rule the command uses. The settings read is hoisted out\n    // of the loop because it is tenant-scoped and identical for every row; the\n    // billable default a created row falls back to comes from the same snapshot.\n    const settings = await resolveTimeEntrySettings(container, tenantId)\n\n    const { counts, pendingChanges } = await em.transactional(async (trx) => {\n      let created = 0\n      let updated = 0\n      let deleted = 0\n      const changes: PendingChange[] = []\n\n      const existingEntries = existingIds.length > 0\n        ? await findWithDecryption(\n            trx,\n            StaffTimeEntry,\n            { id: { $in: existingIds }, tenantId, organizationId, staffMemberId, deletedAt: null },\n            {},\n            scopeCtx,\n          )\n        : []\n\n      const existingMap = new Map(existingEntries.map((entry) => [entry.id, entry]))\n\n      for (const { entry, task, timeProjectId } of resolvedRows) {\n        const project = projectsById.get(timeProjectId) ?? null\n        // Both branches read the five fields the schema has always accepted\n        // through the SAME helpers the single-entry command uses, so a grid write\n        // and a dialog write cannot settle them differently (#silent-no-op).\n        const notes = resolveTimeEntryNotesInput(entry)\n        if (entry.id && existingMap.has(entry.id)) {\n          const existing = existingMap.get(entry.id)!\n          if (entry.durationMinutes === 0) {\n            existing.deletedAt = new Date()\n            deleted++\n            changes.push({ action: 'deleted', entity: existing })\n          } else {\n            // T4.10(a). A grid cell carries a duration and nothing else, so writing\n            // it straight onto an entry that has clocks would store a two-hour\n            // duration against a 09:00\u201310:00 span \u2014 exactly the contradiction the\n            // single-entry path already refuses to store. The same reconciliation\n            // is called here rather than re-derived: only-a-duration means\n            // `started_at` anchors and `ended_at` shifts to match, a clock that\n            // does not exist is never manufactured (so a cell whose entry has no\n            // clocks keeps having none, and a running timer is not stopped), and a\n            // re-dated row takes its clocks with it.\n            const interval = reconcileTimeEntryInterval({\n              stored: rebaseTimeEntryIntervalToDate({\n                stored: {\n                  startedAt: existing.startedAt ?? null,\n                  endedAt: existing.endedAt ?? null,\n                  durationMinutes: existing.durationMinutes,\n                },\n                fromDate: existing.date,\n                toDate: entry.date,\n              }),\n              startedAt: undefined,\n              endedAt: undefined,\n              durationMinutes: entry.durationMinutes,\n            })\n            const projectChanged = timeProjectId !== (existing.timeProjectId ?? null)\n            existing.date = entry.date\n            existing.timeProjectId = timeProjectId\n            // Snapshotted, never joined at read time, so a later project currency\n            // change cannot re-denominate money already reported (D-3) \u2014 and only\n            // restated when the entry actually moves between projects, exactly as\n            // the single-entry update command does it.\n            if (projectChanged) existing.rateCurrencyCode = project?.currencyCode ?? null\n            existing.startedAt = interval.startedAt\n            existing.endedAt = interval.endedAt\n            existing.durationMinutes = interval.durationMinutes\n            // D-7 keeps `rounded_minutes` the only input to cost, so it is restated\n            // from the effective duration the reconciliation settled on.\n            existing.roundedMinutes = roundedMinutesFor(interval.durationMinutes, settings, {\n              tenantId,\n              organizationId,\n            })\n            if (entry.taskId !== undefined) existing.taskId = task?.id ?? null\n            if (entry.isBillable !== undefined) existing.isBillable = entry.isBillable\n            if (entry.rateOverrideAmount !== undefined) {\n              existing.rateOverrideAmount = toStoredTimeEntryRateOverride(entry.rateOverrideAmount)\n            }\n            if (notes !== undefined) existing.notes = notes\n            existing.updatedAt = new Date()\n            updated++\n            changes.push({ action: 'updated', entity: existing })\n          }\n        } else {\n          const now = new Date()\n          const newEntry = trx.create(StaffTimeEntry, {\n            tenantId,\n            organizationId,\n            staffMemberId,\n            date: entry.date,\n            timeProjectId,\n            taskId: task?.id ?? null,\n            durationMinutes: entry.durationMinutes,\n            roundedMinutes: roundedMinutesFor(entry.durationMinutes, settings, {\n              tenantId,\n              organizationId,\n            }),\n            notes: notes ?? null,\n            isBillable: resolveTimeEntryBillable({\n              requested: entry.isBillable,\n              project,\n              settings,\n              scope: { tenantId, organizationId },\n            }),\n            rateOverrideAmount: toStoredTimeEntryRateOverride(entry.rateOverrideAmount),\n            rateCurrencyCode: project?.currencyCode ?? null,\n            source: 'manual',\n            createdAt: now,\n            updatedAt: now,\n          })\n          created++\n          changes.push({ action: 'created', entity: newEntry })\n        }\n      }\n\n      await trx.flush()\n      return { counts: { created, updated, deleted }, pendingChanges: changes }\n    })\n\n    const dataEngine = container.resolve<DataEngine>('dataEngine')\n    for (const change of pendingChanges) {\n      await emitCrudSideEffects({\n        dataEngine,\n        action: change.action,\n        entity: change.entity,\n        identifiers: {\n          id: change.entity.id,\n          organizationId: change.entity.organizationId,\n          tenantId: change.entity.tenantId,\n        },\n        events: staffTimeEntryCrudEvents,\n      })\n    }\n    await flushCrudSideEffects(dataEngine)\n\n    const invalidatedRecordIds = new Set<string>()\n    for (const change of pendingChanges) {\n      if (invalidatedRecordIds.has(change.entity.id)) continue\n      invalidatedRecordIds.add(change.entity.id)\n      await invalidateStaffTimeEntryCache(\n        container,\n        {\n          id: change.entity.id,\n          organizationId: change.entity.organizationId,\n          tenantId: change.entity.tenantId,\n        },\n        tenantId,\n        `bulk:${change.action}`,\n      )\n    }\n\n    if (guardResult.afterSuccessCallbacks.length) {\n      await runStaffMutationGuardAfterSuccess(guardResult.afterSuccessCallbacks, {\n        tenantId,\n        organizationId,\n        userId: auth.sub ?? '',\n        resourceKind: STAFF_TIME_TRACKING_RESOURCE_KINDS.timeEntry,\n        resourceId: staffMemberId,\n        operation: 'update',\n        requestMethod: req.method,\n        requestHeaders: req.headers,\n      })\n    }\n\n    // One batch-level event beside the per-row CRUD events already flushed above.\n    // It carries no `id`, so the entry-scoped subscribers that key off one record\n    // skip it and only the batch-aware ones (payroll exports, audit mirrors) react.\n    void emitStaffEvent('staff.timesheets.time_entry.bulk_updated', {\n      tenantId,\n      organizationId,\n      staffMemberId,\n      ...counts,\n      entryIds: pendingChanges.map((change) => change.entity.id),\n    }, { persistent: true }).catch((err) => {\n      logger.error('staff.timesheets emit time_entry.bulk_updated failed', { err })\n    })\n\n    return session.respond(200, { ok: true, ...counts })\n  } catch (err) {\n    if (err instanceof CrudHttpError) {\n      return NextResponse.json(err.body, { status: err.status })\n    }\n    const { translate } = await resolveTranslations()\n    logger.error('staff.timesheets.time-entries.bulk failed', { err })\n    return NextResponse.json(\n      { error: translate('staff.timesheets.errors.bulkSave', 'Failed to bulk save time entries.') },\n      { status: 400 },\n    )\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Staff',\n  summary: 'Bulk save time entries',\n  methods: {\n    POST: {\n      summary: 'Bulk save time entries',\n      description:\n        'Creates, updates, or soft-deletes multiple time entries in a single request. Entries with durationMinutes=0 and an existing id are soft-deleted. A row may name a taskId and let timeProjectId follow from it; task, description/notes precedence, isBillable defaulting, the rate override and the project currency snapshot follow the single-entry path exactly. tagIds is rejected with 422 \u2014 tags are edited from the time entry itself so their audit trail and undo stay intact. The whole batch is rejected with 409 time_entry_locked when any row targets \u2014 by id, or by landing on its (project, date) cell \u2014 an entry frozen in a closed report.',\n      requestBody: {\n        contentType: 'application/json',\n        schema: staffTimeEntryBulkSaveSchema,\n      },\n      responses: [\n        {\n          status: 200,\n          description: 'Bulk save completed',\n          schema: z.object({\n            ok: z.literal(true),\n            created: z.number(),\n            updated: z.number(),\n            deleted: z.number(),\n          }),\n        },\n        {\n          status: 422,\n          description: 'Validation error',\n          schema: z.object({\n            ok: z.literal(false),\n            errors: z.array(z.object({ path: z.string(), message: z.string() })),\n          }),\n        },\n        {\n          status: 409,\n          description: 'One or more rows target a time entry locked in a closed report; nothing was saved',\n          schema: z.object({\n            code: z.literal('time_entry_locked'),\n            error: z.string(),\n            lockedReportId: z.string().uuid().nullable(),\n            lockedEntryIds: z.array(z.string().uuid()),\n            lockedReportIds: z.array(z.string().uuid()),\n          }),\n        },\n        { status: 401, description: 'Unauthorized', schema: z.object({ error: z.string() }) },\n        { status: 403, description: 'Forbidden', schema: z.object({ error: z.string() }) },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AACnD,SAAS,qBAAqB;AAC9B,SAAS,2BAA2B;AACpC,SAAS,uBAAuB,0BAA0B;AAC1D,SAAS,oBAAoB;AAC7B,SAAS,qBAAqB,4BAA4B;AAI1D,SAAS,gBAAgB,iBAAiB,kBAAkB,qBAAqB;AACjF;AAAA,EACE;AAAA,OAEK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAEK;AACP,SAAS,gCAAgC;AACzC,SAAS,sBAAsB;AAC/B,SAAS,qCAAqC;AAC9C;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,gCAAgC;AACzC,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,OAAO;AAMnC,SAAS,YAAY,OAAiD;AACpE,MAAI,CAAC,MAAO,QAAO;AACnB,QAAM,OAAO,iBAAiB,OAAO,QAAQ,IAAI,KAAK,KAAK;AAC3D,SAAO,OAAO,MAAM,KAAK,QAAQ,CAAC,IAAI,OAAO,KAAK,IAAI,KAAK,YAAY,EAAE,MAAM,GAAG,EAAE;AACtF;AAUA,SAAS,oBAAoB,QAAsC;AACjE,SAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,GAAG,EAAE,QAAQ,IAAI,CAAC;AACjE;AAgBO,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,6BAA6B,EAAE;AAC9E;AAEA,eAAsB,KAAK,KAAc;AACvC,MAAI;AACF,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,QAAI,CAAC,KAAM,OAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,6BAA6B,cAAc,EAAE,CAAC;AAEzG,UAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AACxF,UAAM,WAAW,OAAO,YAAY,KAAK,YAAY;AACrD,UAAM,iBAAiB,OAAO,cAAc,KAAK,SAAS;AAC1D,QAAI,CAAC,YAAY,CAAC,gBAAgB;AAChC,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,6BAA6B,uCAAuC,EAAE,CAAC;AAAA,IACzH;AAEA,UAAM,eAAe,MAAM,yBAAyB;AAAA,MAClD,SAAS;AAAA,MACT,QAAQ;AAAA,MACR,OAAO,EAAE,WAAW,QAAQ,KAAK,KAAK,UAAU,eAAe;AAAA,MAC/D,MAAM,MAAM,aAAsC,KAAK,CAAC,CAAC;AAAA,IAC3D,CAAC;AACD,QAAI,CAAC,aAAa,GAAI,QAAO,aAAa;AAC1C,UAAM,EAAE,QAAQ,IAAI;AAEpB,UAAM,SAAS,6BAA6B,UAAU,QAAQ,IAAI;AAClE,QAAI,CAAC,OAAO,SAAS;AACnB,YAAM,SAAS,OAAO,MAAM,OAAO,IAAI,CAAC,WAAW;AAAA,QACjD,MAAM,MAAM,KAAK,KAAK,GAAG;AAAA,QACzB,SAAS,MAAM;AAAA,MACjB,EAAE;AACF,aAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACjE;AAEA,UAAM,EAAE,QAAQ,IAAI,OAAO;AAc3B,UAAM,aAAa,QAAQ,OAAO,CAAC,UAAU,MAAM,WAAW,MAAS;AACvE,QAAI,WAAW,SAAS,GAAG;AACzB,YAAM,UAAU;AAAA,QACd;AAAA,QACA;AAAA,MACF;AACA,aAAO,oBAAoB,WAAW,IAAI,OAAO,EAAE,MAAM,oBAAoB,QAAQ,EAAE,CAAC;AAAA,IAC1F;AAEA,UAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC3D,UAAM,WAAW,EAAE,UAAU,eAAe;AAE5C,UAAM,cAAc,MAAM;AAAA,MACxB;AAAA,MACA;AAAA,MACA,EAAE,QAAQ,KAAK,KAAK,UAAU,gBAAgB,WAAW,KAAK;AAAA,MAC9D,CAAC;AAAA,MACD;AAAA,IACF;AACA,QAAI,CAAC,aAAa;AAChB,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,yCAAyC,yCAAyC,EAAE,CAAC;AAAA,IACvI;AACA,UAAM,gBAAgB,YAAY;AAOlC,UAAM,oBAAoB;AAAA,MACxB,GAAG,IAAI;AAAA,QACL,QACG,IAAI,CAAC,UAAU,MAAM,MAAM,EAC3B,OAAO,CAAC,OAAqB,OAAO,OAAO,YAAY,GAAG,SAAS,CAAC;AAAA,MACzE;AAAA,IACF;AACA,UAAM,YAAY,oBAAI,IAAmD;AACzE,QAAI,kBAAkB,SAAS,GAAG;AAChC,YAAM,aAAa,MAAM,GAAG,KAAK,eAAe;AAAA,QAC9C,IAAI,EAAE,KAAK,kBAAkB;AAAA,QAC7B;AAAA,QACA;AAAA,QACA,WAAW;AAAA,MACb,GAAG,EAAE,QAAQ,CAAC,MAAM,eAAe,EAAE,CAAC;AACtC,iBAAW,QAAQ,WAAY,WAAU,IAAI,KAAK,IAAI,EAAE,IAAI,KAAK,IAAI,eAAe,KAAK,cAAc,CAAC;AACxG,YAAM,iBAAiB,kBAAkB,OAAO,CAAC,OAAO,CAAC,UAAU,IAAI,EAAE,CAAC;AAC1E,UAAI,eAAe,SAAS,GAAG;AAC7B,cAAM,UAAU,UAAU,wCAAwC,mCAAmC;AACrG,eAAO;AAAA,UACL,eAAe,IAAI,CAAC,QAAQ,EAAE,MAAM,oBAAoB,SAAS,OAAO,GAAG,EAAE;AAAA,QAC/E;AAAA,MACF;AAAA,IACF;AAMA,UAAM,eAAkC,CAAC;AACzC,UAAM,uBAAuC,CAAC;AAC9C,UAAM,4BAA4C,CAAC;AACnD,eAAW,SAAS,SAAS;AAC3B,YAAM,OAAO,MAAM,SAAS,UAAU,IAAI,MAAM,MAAM,KAAK,OAAO;AAClE,YAAM,gBAAgB,0BAA0B,MAAM,eAAe,IAAI;AACzE,UAAI,CAAC,eAAe;AAClB,6BAAqB,KAAK;AAAA,UACxB,MAAM;AAAA,UACN,SAAS,UAAU,2CAA2C,8BAA8B;AAAA,QAC9F,CAAC;AACD;AAAA,MACF;AACA,UAAI,CAAC,4BAA4B,MAAM,aAAa,GAAG;AACrD,kCAA0B,KAAK;AAAA,UAC7B,MAAM;AAAA,UACN,SAAS,UAAU,wCAAwC,mCAAmC;AAAA,UAC9F,OAAO,MAAM;AAAA,QACf,CAAC;AACD;AAAA,MACF;AACA,mBAAa,KAAK,EAAE,OAAO,MAAM,cAAc,CAAC;AAAA,IAClD;AACA,QAAI,qBAAqB,SAAS,KAAK,0BAA0B,SAAS,GAAG;AAC3E,aAAO,oBAAoB,CAAC,GAAG,sBAAsB,GAAG,yBAAyB,CAAC;AAAA,IACpF;AAMA,UAAM,uBAAuB,CAAC,GAAG,IAAI,IAAI,aAAa,IAAI,CAAC,QAAQ,IAAI,aAAa,CAAC,CAAC;AACtF,UAAM,eAAe,oBAAI,IAAkF;AAC3G,QAAI,qBAAqB,SAAS,GAAG;AACnC,YAAM,gBAAgB,MAAM,GAAG,KAAK,kBAAkB;AAAA,QACpD,IAAI,EAAE,KAAK,qBAAqB;AAAA,QAChC;AAAA,QACA;AAAA,QACA,WAAW;AAAA,MACb,GAAG,EAAE,QAAQ,CAAC,MAAM,gBAAgB,mBAAmB,EAAE,CAAC;AAC1D,iBAAW,WAAW,eAAe;AACnC,qBAAa,IAAI,QAAQ,IAAI;AAAA,UAC3B,cAAc,QAAQ,gBAAgB;AAAA,UACtC,mBAAmB,QAAQ,qBAAqB;AAAA,QAClD,CAAC;AAAA,MACH;AACA,YAAM,aAAa,qBAAqB,OAAO,CAAC,OAAO,CAAC,aAAa,IAAI,EAAE,CAAC;AAC5E,UAAI,WAAW,SAAS,GAAG;AACzB,cAAM,UAAU;AAAA,UACd;AAAA,UACA;AAAA,QACF;AACA,eAAO;AAAA,UACL,WAAW,IAAI,CAAC,QAAQ,EAAE,MAAM,2BAA2B,SAAS,OAAO,GAAG,EAAE;AAAA,QAClF;AAAA,MACF;AAAA,IACF;AAEA,UAAM,aAAa;AAAA,MACjB;AAAA,MACA;AAAA,MACA,QAAQ,KAAK,OAAO;AAAA,MACpB,cAAc,mCAAmC;AAAA,MACjD,YAAY;AAAA,MACZ,WAAW;AAAA,MACX,eAAe,IAAI;AAAA,MACnB,gBAAgB,IAAI;AAAA,MACpB,iBAAiB,OAAO;AAAA,IAC1B;AACA,UAAM,cAAc,MAAM,uBAAuB,WAAW,UAAU;AACtE,QAAI,CAAC,YAAY,IAAI;AACnB,aAAO,aAAa;AAAA,QAClB,YAAY,aAAa,EAAE,OAAO,6BAA6B;AAAA,QAC/D,EAAE,QAAQ,YAAY,eAAe,IAAI;AAAA,MAC3C;AAAA,IACF;AAEA,UAAM,cAAc,aACjB,IAAI,CAAC,QAAQ,IAAI,MAAM,EAAE,EACzB,OAAO,CAAC,OAAqB,OAAO,OAAO,YAAY,GAAG,SAAS,CAAC;AAKvE,QAAI,YAAY,SAAS,GAAG;AAC1B,YAAM,mBAAmB,MAAM,GAAG;AAAA,QAChC;AAAA,QACA,EAAE,IAAI,EAAE,KAAK,YAAY,GAAG,UAAU,gBAAgB,eAAe,WAAW,KAAK;AAAA,QACrF,EAAE,QAAQ,CAAC,IAAI,EAAE;AAAA,MACnB;AACA,YAAM,gBAAgB,IAAI,IAAI,iBAAiB,IAAI,CAAC,UAAU,MAAM,EAAE,CAAC;AACvE,YAAM,aAAa,YAAY,OAAO,CAAC,OAAO,CAAC,cAAc,IAAI,EAAE,CAAC;AACpE,UAAI,WAAW,SAAS,GAAG;AACzB,eAAO,aAAa;AAAA,UAClB;AAAA,YACE,IAAI;AAAA,YACJ,QAAQ,WAAW,IAAI,CAAC,QAAQ;AAAA,cAC9B,MAAM;AAAA,cACN,SAAS;AAAA,gBACP;AAAA,gBACA;AAAA,cACF;AAAA,cACA,OAAO;AAAA,YACT,EAAE;AAAA,UACJ;AAAA,UACA,EAAE,QAAQ,IAAI;AAAA,QAChB;AAAA,MACF;AAAA,IACF;AAwBA,UAAM,aAAa,aAAa,OAAO,CAAC,QAAQ,CAAC,IAAI,MAAM,EAAE;AAC7D,UAAM,cAAc,WAAW,IAAI,CAAC,QAAQ,GAAG,YAAY,IAAI,MAAM,IAAI,CAAC,IAAI,IAAI,aAAa,EAAE;AACjG,UAAM,iBAA4C,CAAC;AACnD,QAAI,YAAY,SAAS,EAAG,gBAAe,KAAK,EAAE,IAAI,EAAE,KAAK,YAAY,EAAE,CAAC;AAC5E,QAAI,YAAY,SAAS,GAAG;AAC1B,qBAAe,KAAK;AAAA,QAClB,MAAM,EAAE,KAAK,WAAW,IAAI,CAAC,QAAQ,IAAI,MAAM,IAAI,EAAE;AAAA,QACrD,eAAe,EAAE,KAAK,CAAC,GAAG,IAAI,IAAI,WAAW,IAAI,CAAC,QAAQ,IAAI,aAAa,CAAC,CAAC,EAAE;AAAA,MACjF,CAAC;AAAA,IACH;AACA,QAAI,eAAe,SAAS,GAAG;AAC7B,YAAM,gBAAgB,IAAI,IAAI,WAAW;AACzC,YAAM,gBAAgB,IAAI,IAAI,WAAW;AACzC,YAAM,mBAAmB,MAAM,GAAG;AAAA,QAChC;AAAA,QACA;AAAA,UACE;AAAA,UACA;AAAA,UACA;AAAA,UACA,WAAW;AAAA,UACX,gBAAgB,EAAE,KAAK,KAAK;AAAA,UAC5B,KAAK;AAAA,QACP;AAAA,QACA,EAAE,QAAQ,CAAC,MAAM,kBAAkB,QAAQ,eAAe,EAAE;AAAA,MAC9D;AAGA,YAAM,UAAgC,iBAAiB;AAAA,QACrD,CAAC,QACC,cAAc,IAAI,IAAI,EAAE,KACxB,cAAc,IAAI,GAAG,YAAY,IAAI,IAAI,CAAC,IAAI,IAAI,iBAAiB,EAAE,EAAE;AAAA,MAC3E;AACA,UAAI,QAAQ,SAAS,GAAG;AACtB,cAAM;AAAA,UACJ,QAAQ,IAAI,CAAC,SAAS,EAAE,IAAI,IAAI,IAAI,gBAAgB,IAAI,eAAe,EAAE;AAAA,UACzE;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAYA,UAAM,WAAW,MAAM,yBAAyB,WAAW,QAAQ;AAEnE,UAAM,EAAE,QAAQ,eAAe,IAAI,MAAM,GAAG,cAAc,OAAO,QAAQ;AACvE,UAAI,UAAU;AACd,UAAI,UAAU;AACd,UAAI,UAAU;AACd,YAAM,UAA2B,CAAC;AAElC,YAAM,kBAAkB,YAAY,SAAS,IACzC,MAAM;AAAA,QACJ;AAAA,QACA;AAAA,QACA,EAAE,IAAI,EAAE,KAAK,YAAY,GAAG,UAAU,gBAAgB,eAAe,WAAW,KAAK;AAAA,QACrF,CAAC;AAAA,QACD;AAAA,MACF,IACA,CAAC;AAEL,YAAM,cAAc,IAAI,IAAI,gBAAgB,IAAI,CAAC,UAAU,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC;AAE7E,iBAAW,EAAE,OAAO,MAAM,cAAc,KAAK,cAAc;AACzD,cAAM,UAAU,aAAa,IAAI,aAAa,KAAK;AAInD,cAAM,QAAQ,2BAA2B,KAAK;AAC9C,YAAI,MAAM,MAAM,YAAY,IAAI,MAAM,EAAE,GAAG;AACzC,gBAAM,WAAW,YAAY,IAAI,MAAM,EAAE;AACzC,cAAI,MAAM,oBAAoB,GAAG;AAC/B,qBAAS,YAAY,oBAAI,KAAK;AAC9B;AACA,oBAAQ,KAAK,EAAE,QAAQ,WAAW,QAAQ,SAAS,CAAC;AAAA,UACtD,OAAO;AAUL,kBAAM,WAAW,2BAA2B;AAAA,cAC1C,QAAQ,8BAA8B;AAAA,gBACpC,QAAQ;AAAA,kBACN,WAAW,SAAS,aAAa;AAAA,kBACjC,SAAS,SAAS,WAAW;AAAA,kBAC7B,iBAAiB,SAAS;AAAA,gBAC5B;AAAA,gBACA,UAAU,SAAS;AAAA,gBACnB,QAAQ,MAAM;AAAA,cAChB,CAAC;AAAA,cACD,WAAW;AAAA,cACX,SAAS;AAAA,cACT,iBAAiB,MAAM;AAAA,YACzB,CAAC;AACD,kBAAM,iBAAiB,mBAAmB,SAAS,iBAAiB;AACpE,qBAAS,OAAO,MAAM;AACtB,qBAAS,gBAAgB;AAKzB,gBAAI,eAAgB,UAAS,mBAAmB,SAAS,gBAAgB;AACzE,qBAAS,YAAY,SAAS;AAC9B,qBAAS,UAAU,SAAS;AAC5B,qBAAS,kBAAkB,SAAS;AAGpC,qBAAS,iBAAiB,kBAAkB,SAAS,iBAAiB,UAAU;AAAA,cAC9E;AAAA,cACA;AAAA,YACF,CAAC;AACD,gBAAI,MAAM,WAAW,OAAW,UAAS,SAAS,MAAM,MAAM;AAC9D,gBAAI,MAAM,eAAe,OAAW,UAAS,aAAa,MAAM;AAChE,gBAAI,MAAM,uBAAuB,QAAW;AAC1C,uBAAS,qBAAqB,8BAA8B,MAAM,kBAAkB;AAAA,YACtF;AACA,gBAAI,UAAU,OAAW,UAAS,QAAQ;AAC1C,qBAAS,YAAY,oBAAI,KAAK;AAC9B;AACA,oBAAQ,KAAK,EAAE,QAAQ,WAAW,QAAQ,SAAS,CAAC;AAAA,UACtD;AAAA,QACF,OAAO;AACL,gBAAM,MAAM,oBAAI,KAAK;AACrB,gBAAM,WAAW,IAAI,OAAO,gBAAgB;AAAA,YAC1C;AAAA,YACA;AAAA,YACA;AAAA,YACA,MAAM,MAAM;AAAA,YACZ;AAAA,YACA,QAAQ,MAAM,MAAM;AAAA,YACpB,iBAAiB,MAAM;AAAA,YACvB,gBAAgB,kBAAkB,MAAM,iBAAiB,UAAU;AAAA,cACjE;AAAA,cACA;AAAA,YACF,CAAC;AAAA,YACD,OAAO,SAAS;AAAA,YAChB,YAAY,yBAAyB;AAAA,cACnC,WAAW,MAAM;AAAA,cACjB;AAAA,cACA;AAAA,cACA,OAAO,EAAE,UAAU,eAAe;AAAA,YACpC,CAAC;AAAA,YACD,oBAAoB,8BAA8B,MAAM,kBAAkB;AAAA,YAC1E,kBAAkB,SAAS,gBAAgB;AAAA,YAC3C,QAAQ;AAAA,YACR,WAAW;AAAA,YACX,WAAW;AAAA,UACb,CAAC;AACD;AACA,kBAAQ,KAAK,EAAE,QAAQ,WAAW,QAAQ,SAAS,CAAC;AAAA,QACtD;AAAA,MACF;AAEA,YAAM,IAAI,MAAM;AAChB,aAAO,EAAE,QAAQ,EAAE,SAAS,SAAS,QAAQ,GAAG,gBAAgB,QAAQ;AAAA,IAC1E,CAAC;AAED,UAAM,aAAa,UAAU,QAAoB,YAAY;AAC7D,eAAW,UAAU,gBAAgB;AACnC,YAAM,oBAAoB;AAAA,QACxB;AAAA,QACA,QAAQ,OAAO;AAAA,QACf,QAAQ,OAAO;AAAA,QACf,aAAa;AAAA,UACX,IAAI,OAAO,OAAO;AAAA,UAClB,gBAAgB,OAAO,OAAO;AAAA,UAC9B,UAAU,OAAO,OAAO;AAAA,QAC1B;AAAA,QACA,QAAQ;AAAA,MACV,CAAC;AAAA,IACH;AACA,UAAM,qBAAqB,UAAU;AAErC,UAAM,uBAAuB,oBAAI,IAAY;AAC7C,eAAW,UAAU,gBAAgB;AACnC,UAAI,qBAAqB,IAAI,OAAO,OAAO,EAAE,EAAG;AAChD,2BAAqB,IAAI,OAAO,OAAO,EAAE;AACzC,YAAM;AAAA,QACJ;AAAA,QACA;AAAA,UACE,IAAI,OAAO,OAAO;AAAA,UAClB,gBAAgB,OAAO,OAAO;AAAA,UAC9B,UAAU,OAAO,OAAO;AAAA,QAC1B;AAAA,QACA;AAAA,QACA,QAAQ,OAAO,MAAM;AAAA,MACvB;AAAA,IACF;AAEA,QAAI,YAAY,sBAAsB,QAAQ;AAC5C,YAAM,kCAAkC,YAAY,uBAAuB;AAAA,QACzE;AAAA,QACA;AAAA,QACA,QAAQ,KAAK,OAAO;AAAA,QACpB,cAAc,mCAAmC;AAAA,QACjD,YAAY;AAAA,QACZ,WAAW;AAAA,QACX,eAAe,IAAI;AAAA,QACnB,gBAAgB,IAAI;AAAA,MACtB,CAAC;AAAA,IACH;AAKA,SAAK,eAAe,4CAA4C;AAAA,MAC9D;AAAA,MACA;AAAA,MACA;AAAA,MACA,GAAG;AAAA,MACH,UAAU,eAAe,IAAI,CAAC,WAAW,OAAO,OAAO,EAAE;AAAA,IAC3D,GAAG,EAAE,YAAY,KAAK,CAAC,EAAE,MAAM,CAAC,QAAQ;AACtC,aAAO,MAAM,wDAAwD,EAAE,IAAI,CAAC;AAAA,IAC9E,CAAC;AAED,WAAO,QAAQ,QAAQ,KAAK,EAAE,IAAI,MAAM,GAAG,OAAO,CAAC;AAAA,EACrD,SAAS,KAAK;AACZ,QAAI,eAAe,eAAe;AAChC,aAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,IAC3D;AACA,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,WAAO,MAAM,6CAA6C,EAAE,IAAI,CAAC;AACjE,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,UAAU,oCAAoC,mCAAmC,EAAE;AAAA,MAC5F,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aACE;AAAA,MACF,aAAa;AAAA,QACX,aAAa;AAAA,QACb,QAAQ;AAAA,MACV;AAAA,MACA,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO;AAAA,YACf,IAAI,EAAE,QAAQ,IAAI;AAAA,YAClB,SAAS,EAAE,OAAO;AAAA,YAClB,SAAS,EAAE,OAAO;AAAA,YAClB,SAAS,EAAE,OAAO;AAAA,UACpB,CAAC;AAAA,QACH;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO;AAAA,YACf,IAAI,EAAE,QAAQ,KAAK;AAAA,YACnB,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,GAAG,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC;AAAA,UACrE,CAAC;AAAA,QACH;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO;AAAA,YACf,MAAM,EAAE,QAAQ,mBAAmB;AAAA,YACnC,OAAO,EAAE,OAAO;AAAA,YAChB,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,YAC3C,gBAAgB,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC;AAAA,YACzC,iBAAiB,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC;AAAA,UAC5C,CAAC;AAAA,QACH;AAAA,QACA,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,QACpF,EAAE,QAAQ,KAAK,aAAa,aAAa,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,MACnF;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }