@open-mercato/core 0.7.1-develop.7178.1.ab93fbaf4e → 0.7.1-develop.7180.1.9717fbbb43

package/dist/modules/staff/api/timesheets/time-projects/[id]/change-currency/route.js

@@ -0,0 +1,209 @@
+import { NextResponse } from "next/server";
+import { resolveFeatureAccess } from "../../../../../lib/time-tracking/featureAccess.js";
+import { z } from "zod";
+import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
+import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
+import { resolveOrganizationScopeForRequest } from "@open-mercato/core/modules/directory/utils/organizationScope";
+import { CrudHttpError, forbidden, isCrudHttpError } from "@open-mercato/shared/lib/crud/errors";
+import { runRouteMutationGuards } from "@open-mercato/shared/lib/crud/route-mutation-guard";
+import { resolveTranslations } from "@open-mercato/shared/lib/i18n/server";
+import { serializeOperationMetadata } from "@open-mercato/shared/lib/commands/operationMetadata";
+import { getCommandInterceptorHttpRejection } from "@open-mercato/shared/lib/commands/errors";
+import { createLogger } from "@open-mercato/shared/lib/logger";
+import { emitStaffEvent } from "../../../../../events.js";
+import { staffTimeProjectChangeCurrencySchema } from "../../../../../data/validators.js";
+import { readJsonSafe } from "@open-mercato/shared/lib/http/readJsonSafe";
+import { STAFF_TIME_TRACKING_RESOURCE_KINDS } from "../../../../guards.js";
+import { runTimesheetInterceptors } from "../../../_shared/withTimesheetInterceptors.js";
+import {
+  staffTimeProjectChangeCurrencyCommandId
+} from "../../../../../commands/timesheets-projects.js";
+const logger = createLogger("staff").child({ component: "api/timesheets/time-projects/change-currency" });
+const MANAGE_FEATURE = "staff.timesheets.projects.manage";
+const RESOURCE_KIND = STAFF_TIME_TRACKING_RESOURCE_KINDS.timeProject;
+const metadata = {
+  POST: { requireAuth: true, requireFeatures: [MANAGE_FEATURE] }
+};
+function extractProjectIdFromUrl(request) {
+  if (!request?.url) return null;
+  try {
+    const url = new URL(request.url);
+    const match = url.pathname.match(/\/time-projects\/([^/]+)\/change-currency/);
+    return match?.[1] ?? null;
+  } catch {
+    return null;
+  }
+}
+async function POST(req) {
+  try {
+    const container = await createRequestContainer();
+    const auth = await getAuthFromRequest(req);
+    const { translate } = await resolveTranslations();
+    if (!auth) {
+      throw new CrudHttpError(401, { error: translate("staff.errors.unauthorized", "Unauthorized") });
+    }
+    const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req });
+    const tenantId = scope?.tenantId ?? auth.tenantId ?? null;
+    const organizationId = scope?.selectedId ?? auth.orgId ?? null;
+    if (!tenantId || !organizationId) {
+      throw new CrudHttpError(400, {
+        error: translate("staff.errors.missingScope", "Missing tenant or organization scope.")
+      });
+    }
+    const timeProjectId = extractProjectIdFromUrl(req);
+    if (!timeProjectId) {
+      throw new CrudHttpError(400, {
+        error: translate("staff.timesheets.errors.projectRequired", "Time project id is required.")
+      });
+    }
+    const actorId = auth.sub ?? "";
+    const access = await resolveFeatureAccess(container, actorId, [MANAGE_FEATURE], { tenantId, organizationId });
+    if (!access.allowed) {
+      throw forbidden(translate("staff.errors.forbidden", "Forbidden"));
+    }
+    const grantedFeatures = access.grantedFeatures;
+    const interceptors = await runTimesheetInterceptors({
+      request: req,
+      method: "POST",
+      scope: { container, userId: actorId, tenantId, organizationId, userFeatures: grantedFeatures },
+      body: await readJsonSafe(req, {})
+    });
+    if (!interceptors.ok) return interceptors.response;
+    const { session } = interceptors;
+    const parsed = staffTimeProjectChangeCurrencySchema.parse(session.body);
+    const guardResult = await runRouteMutationGuards({
+      container,
+      req,
+      auth: {
+        userId: actorId,
+        tenantId,
+        organizationId,
+        userFeatures: grantedFeatures
+      },
+      input: {
+        resourceKind: RESOURCE_KIND,
+        resourceId: timeProjectId,
+        operation: "update",
+        mutationPayload: parsed
+      }
+    });
+    if (!guardResult.ok) return guardResult.response;
+    const effective = guardResult.modifiedPayload ? staffTimeProjectChangeCurrencySchema.parse({ ...parsed, ...guardResult.modifiedPayload }) : parsed;
+    const ctx = {
+      container,
+      auth,
+      organizationScope: scope,
+      selectedOrganizationId: scope?.selectedId ?? auth.orgId ?? null,
+      organizationIds: scope?.filterIds ?? (auth.orgId ? [auth.orgId] : null),
+      request: req
+    };
+    const commandBus = container.resolve("commandBus");
+    const { result, logEntry } = await commandBus.execute(staffTimeProjectChangeCurrencyCommandId, {
+      input: { ...effective, id: timeProjectId },
+      ctx
+    });
+    await guardResult.runAfterSuccess();
+    void emitStaffEvent("staff.timesheets.time_project.currency_changed", {
+      id: result?.timeProjectId ?? timeProjectId,
+      tenantId,
+      organizationId,
+      currencyCode: result?.currencyCode ?? effective.currencyCode,
+      previousCurrencyCode: result?.previousCurrencyCode ?? null,
+      converted: false
+    }, { persistent: true }).catch((err) => {
+      logger.error("staff.timesheets emit time_project.currency_changed failed", { err });
+    });
+    const response = await session.respond(200, {
+      id: result?.timeProjectId ?? timeProjectId,
+      currencyCode: result?.currencyCode ?? effective.currencyCode,
+      previousCurrencyCode: result?.previousCurrencyCode ?? null,
+      converted: false
+    });
+    if (logEntry?.undoToken && logEntry?.id && logEntry?.commandId) {
+      response.headers.set(
+        "x-om-operation",
+        serializeOperationMetadata({
+          id: logEntry.id,
+          undoToken: logEntry.undoToken,
+          commandId: logEntry.commandId,
+          actionLabel: logEntry.actionLabel ?? null,
+          resourceKind: logEntry.resourceKind ?? RESOURCE_KIND,
+          resourceId: logEntry.resourceId ?? timeProjectId,
+          executedAt: logEntry.createdAt instanceof Date ? logEntry.createdAt.toISOString() : void 0
+        })
+      );
+    }
+    return response;
+  } catch (err) {
+    if (isCrudHttpError(err)) {
+      return NextResponse.json(err.body, { status: err.status });
+    }
+    const interceptorRejection = getCommandInterceptorHttpRejection(err);
+    if (interceptorRejection) {
+      return NextResponse.json(interceptorRejection.body, { status: interceptorRejection.status });
+    }
+    const { translate } = await resolveTranslations();
+    if (err instanceof z.ZodError) {
+      return NextResponse.json(
+        { error: translate("staff.errors.invalid_request", "Invalid request"), details: err.issues },
+        { status: 400 }
+      );
+    }
+    logger.error("staff.timesheets.time-projects.change-currency failed", { err });
+    return NextResponse.json(
+      { error: translate("staff.errors.internal", "Internal server error") },
+      { status: 500 }
+    );
+  }
+}
+const blockingReportSchema = z.object({
+  id: z.string().uuid(),
+  reference: z.string().nullable(),
+  title: z.string().nullable()
+});
+const changeCurrencyResponseSchema = z.object({
+  id: z.string().uuid(),
+  currencyCode: z.string(),
+  previousCurrencyCode: z.string().nullable(),
+  converted: z.literal(false)
+});
+const lockedConflictSchema = z.object({
+  code: z.literal("project_has_locked_entries"),
+  error: z.string(),
+  lockedEntryCount: z.number().int(),
+  lockedReports: z.array(blockingReportSchema)
+});
+const openApi = {
+  tag: "Staff",
+  summary: "Change a time project currency",
+  methods: {
+    POST: {
+      summary: "Change a time project currency",
+      description: "Relabels the project currency without converting any historical amount. Requires an explicit `acknowledged: true` and is refused while any of the project entries is locked into a closed report.",
+      requestBody: {
+        contentType: "application/json",
+        schema: staffTimeProjectChangeCurrencySchema
+      },
+      responses: [
+        { status: 200, description: "Currency relabelled", schema: changeCurrencyResponseSchema }
+      ],
+      errors: [
+        { status: 400, description: "Invalid body, or the change was not acknowledged" },
+        { status: 401, description: "Unauthorized" },
+        { status: 403, description: "Missing staff.timesheets.projects.manage" },
+        { status: 404, description: "Time project not found" },
+        {
+          status: 409,
+          description: "Project has entries locked into a closed report",
+          schema: lockedConflictSchema
+        }
+      ]
+    }
+  }
+};
+export {
+  POST,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/staff/api/timesheets/time-projects/[id]/change-currency/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../../../src/modules/staff/api/timesheets/time-projects/%5Bid%5D/change-currency/route.ts"],
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { resolveFeatureAccess } from '../../../../../lib/time-tracking/featureAccess'\nimport { z } from 'zod'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { CrudHttpError, forbidden, isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { runRouteMutationGuards } from '@open-mercato/shared/lib/crud/route-mutation-guard'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { serializeOperationMetadata } from '@open-mercato/shared/lib/commands/operationMetadata'\nimport type { CommandBus, CommandRuntimeContext } from '@open-mercato/shared/lib/commands'\nimport { getCommandInterceptorHttpRejection } from '@open-mercato/shared/lib/commands/errors'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport { emitStaffEvent } from '../../../../../events'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { staffTimeProjectChangeCurrencySchema } from '../../../../../data/validators'\nimport { readJsonSafe } from '@open-mercato/shared/lib/http/readJsonSafe'\nimport { STAFF_TIME_TRACKING_RESOURCE_KINDS } from '../../../../guards'\nimport { runTimesheetInterceptors } from '../../../_shared/withTimesheetInterceptors'\nimport {\n  staffTimeProjectChangeCurrencyCommandId,\n  type StaffTimeProjectChangeCurrencyCommandInput,\n  type StaffTimeProjectChangeCurrencyResult,\n} from '../../../../../commands/timesheets-projects'\n\nconst logger = createLogger('staff').child({ component: 'api/timesheets/time-projects/change-currency' })\n\nconst MANAGE_FEATURE = 'staff.timesheets.projects.manage'\nconst RESOURCE_KIND = STAFF_TIME_TRACKING_RESOURCE_KINDS.timeProject\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: [MANAGE_FEATURE] },\n}\n\nfunction extractProjectIdFromUrl(request?: Request): string | null {\n  if (!request?.url) return null\n  try {\n    const url = new URL(request.url)\n    const match = url.pathname.match(/\\/time-projects\\/([^/]+)\\/change-currency/)\n    return match?.[1] ?? null\n  } catch {\n    return null\n  }\n}\n\n/**\n * D-3: relabels a project's currency without converting a single historical\n * amount. The `acknowledged: true` literal in the body is deliberate friction \u2014\n * the client must have shown the non-conversion warning \u2014 and the request is\n * refused with `409 project_has_locked_entries` while any of the project's\n * entries is frozen inside a closed report.\n */\nexport async function POST(req: Request) {\n  try {\n    const container = await createRequestContainer()\n    const auth = await getAuthFromRequest(req)\n    const { translate } = await resolveTranslations()\n    if (!auth) {\n      throw new CrudHttpError(401, { error: translate('staff.errors.unauthorized', 'Unauthorized') })\n    }\n\n    const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n    const tenantId = scope?.tenantId ?? auth.tenantId ?? null\n    const organizationId = scope?.selectedId ?? auth.orgId ?? null\n    if (!tenantId || !organizationId) {\n      throw new CrudHttpError(400, {\n        error: translate('staff.errors.missingScope', 'Missing tenant or organization scope.'),\n      })\n    }\n\n    const timeProjectId = extractProjectIdFromUrl(req)\n    if (!timeProjectId) {\n      throw new CrudHttpError(400, {\n        error: translate('staff.timesheets.errors.projectRequired', 'Time project id is required.'),\n      })\n    }\n\n    const actorId = auth.sub ?? ''\n    // One lookup through the module's single RBAC authority, answering both\n    // questions this route asks: may the caller manage projects, and what grant\n    // list do the interceptors and the mutation-guard registry gate on. The\n    // decision is checked unconditionally and fails closed; the list is plumbing\n    // and is empty \u2014 never absent \u2014 when RBAC could not produce it.\n    const access = await resolveFeatureAccess(container, actorId, [MANAGE_FEATURE], { tenantId, organizationId })\n    if (!access.allowed) {\n      throw forbidden(translate('staff.errors.forbidden', 'Forbidden'))\n    }\n    const grantedFeatures = access.grantedFeatures\n\n    const interceptors = await runTimesheetInterceptors({\n      request: req,\n      method: 'POST',\n      scope: { container, userId: actorId, tenantId, organizationId, userFeatures: grantedFeatures },\n      body: await readJsonSafe<Record<string, unknown>>(req, {}),\n    })\n    if (!interceptors.ok) return interceptors.response\n    const { session } = interceptors\n\n    const parsed = staffTimeProjectChangeCurrencySchema.parse(session.body)\n\n    const guardResult = await runRouteMutationGuards({\n      container,\n      req,\n      auth: {\n        userId: actorId,\n        tenantId,\n        organizationId,\n        userFeatures: grantedFeatures,\n      },\n      input: {\n        resourceKind: RESOURCE_KIND,\n        resourceId: timeProjectId,\n        operation: 'update',\n        mutationPayload: parsed,\n      },\n    })\n    if (!guardResult.ok) return guardResult.response\n\n    const effective = guardResult.modifiedPayload\n      ? staffTimeProjectChangeCurrencySchema.parse({ ...parsed, ...guardResult.modifiedPayload })\n      : parsed\n\n    const ctx: CommandRuntimeContext = {\n      container,\n      auth,\n      organizationScope: scope,\n      selectedOrganizationId: scope?.selectedId ?? auth.orgId ?? null,\n      organizationIds: scope?.filterIds ?? (auth.orgId ? [auth.orgId] : null),\n      request: req,\n    }\n\n    const commandBus = container.resolve('commandBus') as CommandBus\n    const { result, logEntry } = await commandBus.execute<\n      StaffTimeProjectChangeCurrencyCommandInput,\n      StaffTimeProjectChangeCurrencyResult\n    >(staffTimeProjectChangeCurrencyCommandId, {\n      input: { ...effective, id: timeProjectId },\n      ctx,\n    })\n\n    await guardResult.runAfterSuccess()\n\n    void emitStaffEvent('staff.timesheets.time_project.currency_changed', {\n      id: result?.timeProjectId ?? timeProjectId,\n      tenantId,\n      organizationId,\n      currencyCode: result?.currencyCode ?? effective.currencyCode,\n      previousCurrencyCode: result?.previousCurrencyCode ?? null,\n      converted: false,\n    }, { persistent: true }).catch((err) => {\n      logger.error('staff.timesheets emit time_project.currency_changed failed', { err })\n    })\n\n    const response = await session.respond(200, {\n      id: result?.timeProjectId ?? timeProjectId,\n      currencyCode: result?.currencyCode ?? effective.currencyCode,\n      previousCurrencyCode: result?.previousCurrencyCode ?? null,\n      converted: false,\n    })\n    if (logEntry?.undoToken && logEntry?.id && logEntry?.commandId) {\n      response.headers.set(\n        'x-om-operation',\n        serializeOperationMetadata({\n          id: logEntry.id,\n          undoToken: logEntry.undoToken,\n          commandId: logEntry.commandId,\n          actionLabel: logEntry.actionLabel ?? null,\n          resourceKind: logEntry.resourceKind ?? RESOURCE_KIND,\n          resourceId: logEntry.resourceId ?? timeProjectId,\n          executedAt: logEntry.createdAt instanceof Date ? logEntry.createdAt.toISOString() : undefined,\n        }),\n      )\n    }\n    return response\n  } catch (err) {\n    if (isCrudHttpError(err)) {\n      return NextResponse.json(err.body, { status: err.status })\n    }\n    const interceptorRejection = getCommandInterceptorHttpRejection(err)\n    if (interceptorRejection) {\n      return NextResponse.json(interceptorRejection.body, { status: interceptorRejection.status })\n    }\n    const { translate } = await resolveTranslations()\n    if (err instanceof z.ZodError) {\n      return NextResponse.json(\n        { error: translate('staff.errors.invalid_request', 'Invalid request'), details: err.issues },\n        { status: 400 },\n      )\n    }\n    logger.error('staff.timesheets.time-projects.change-currency failed', { err })\n    return NextResponse.json(\n      { error: translate('staff.errors.internal', 'Internal server error') },\n      { status: 500 },\n    )\n  }\n}\n\nconst blockingReportSchema = z.object({\n  id: z.string().uuid(),\n  reference: z.string().nullable(),\n  title: z.string().nullable(),\n})\n\nconst changeCurrencyResponseSchema = z.object({\n  id: z.string().uuid(),\n  currencyCode: z.string(),\n  previousCurrencyCode: z.string().nullable(),\n  converted: z.literal(false),\n})\n\nconst lockedConflictSchema = z.object({\n  code: z.literal('project_has_locked_entries'),\n  error: z.string(),\n  lockedEntryCount: z.number().int(),\n  lockedReports: z.array(blockingReportSchema),\n})\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Staff',\n  summary: 'Change a time project currency',\n  methods: {\n    POST: {\n      summary: 'Change a time project currency',\n      description:\n        'Relabels the project currency without converting any historical amount. Requires an explicit `acknowledged: true` and is refused while any of the project entries is locked into a closed report.',\n      requestBody: {\n        contentType: 'application/json',\n        schema: staffTimeProjectChangeCurrencySchema,\n      },\n      responses: [\n        { status: 200, description: 'Currency relabelled', schema: changeCurrencyResponseSchema },\n      ],\n      errors: [\n        { status: 400, description: 'Invalid body, or the change was not acknowledged' },\n        { status: 401, description: 'Unauthorized' },\n        { status: 403, description: 'Missing staff.timesheets.projects.manage' },\n        { status: 404, description: 'Time project not found' },\n        {\n          status: 409,\n          description: 'Project has entries locked into a closed report',\n          schema: lockedConflictSchema,\n        },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,4BAA4B;AACrC,SAAS,SAAS;AAClB,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AACnD,SAAS,eAAe,WAAW,uBAAuB;AAC1D,SAAS,8BAA8B;AACvC,SAAS,2BAA2B;AACpC,SAAS,kCAAkC;AAE3C,SAAS,0CAA0C;AACnD,SAAS,oBAAoB;AAC7B,SAAS,sBAAsB;AAE/B,SAAS,4CAA4C;AACrD,SAAS,oBAAoB;AAC7B,SAAS,0CAA0C;AACnD,SAAS,gCAAgC;AACzC;AAAA,EACE;AAAA,OAGK;AAEP,MAAM,SAAS,aAAa,OAAO,EAAE,MAAM,EAAE,WAAW,+CAA+C,CAAC;AAExG,MAAM,iBAAiB;AACvB,MAAM,gBAAgB,mCAAmC;AAElD,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,cAAc,EAAE;AAC/D;AAEA,SAAS,wBAAwB,SAAkC;AACjE,MAAI,CAAC,SAAS,IAAK,QAAO;AAC1B,MAAI;AACF,UAAM,MAAM,IAAI,IAAI,QAAQ,GAAG;AAC/B,UAAM,QAAQ,IAAI,SAAS,MAAM,2CAA2C;AAC5E,WAAO,QAAQ,CAAC,KAAK;AAAA,EACvB,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AASA,eAAsB,KAAK,KAAc;AACvC,MAAI;AACF,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,QAAI,CAAC,MAAM;AACT,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,6BAA6B,cAAc,EAAE,CAAC;AAAA,IAChG;AAEA,UAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AACxF,UAAM,WAAW,OAAO,YAAY,KAAK,YAAY;AACrD,UAAM,iBAAiB,OAAO,cAAc,KAAK,SAAS;AAC1D,QAAI,CAAC,YAAY,CAAC,gBAAgB;AAChC,YAAM,IAAI,cAAc,KAAK;AAAA,QAC3B,OAAO,UAAU,6BAA6B,uCAAuC;AAAA,MACvF,CAAC;AAAA,IACH;AAEA,UAAM,gBAAgB,wBAAwB,GAAG;AACjD,QAAI,CAAC,eAAe;AAClB,YAAM,IAAI,cAAc,KAAK;AAAA,QAC3B,OAAO,UAAU,2CAA2C,8BAA8B;AAAA,MAC5F,CAAC;AAAA,IACH;AAEA,UAAM,UAAU,KAAK,OAAO;AAM5B,UAAM,SAAS,MAAM,qBAAqB,WAAW,SAAS,CAAC,cAAc,GAAG,EAAE,UAAU,eAAe,CAAC;AAC5G,QAAI,CAAC,OAAO,SAAS;AACnB,YAAM,UAAU,UAAU,0BAA0B,WAAW,CAAC;AAAA,IAClE;AACA,UAAM,kBAAkB,OAAO;AAE/B,UAAM,eAAe,MAAM,yBAAyB;AAAA,MAClD,SAAS;AAAA,MACT,QAAQ;AAAA,MACR,OAAO,EAAE,WAAW,QAAQ,SAAS,UAAU,gBAAgB,cAAc,gBAAgB;AAAA,MAC7F,MAAM,MAAM,aAAsC,KAAK,CAAC,CAAC;AAAA,IAC3D,CAAC;AACD,QAAI,CAAC,aAAa,GAAI,QAAO,aAAa;AAC1C,UAAM,EAAE,QAAQ,IAAI;AAEpB,UAAM,SAAS,qCAAqC,MAAM,QAAQ,IAAI;AAEtE,UAAM,cAAc,MAAM,uBAAuB;AAAA,MAC/C;AAAA,MACA;AAAA,MACA,MAAM;AAAA,QACJ,QAAQ;AAAA,QACR;AAAA,QACA;AAAA,QACA,cAAc;AAAA,MAChB;AAAA,MACA,OAAO;AAAA,QACL,cAAc;AAAA,QACd,YAAY;AAAA,QACZ,WAAW;AAAA,QACX,iBAAiB;AAAA,MACnB;AAAA,IACF,CAAC;AACD,QAAI,CAAC,YAAY,GAAI,QAAO,YAAY;AAExC,UAAM,YAAY,YAAY,kBAC1B,qCAAqC,MAAM,EAAE,GAAG,QAAQ,GAAG,YAAY,gBAAgB,CAAC,IACxF;AAEJ,UAAM,MAA6B;AAAA,MACjC;AAAA,MACA;AAAA,MACA,mBAAmB;AAAA,MACnB,wBAAwB,OAAO,cAAc,KAAK,SAAS;AAAA,MAC3D,iBAAiB,OAAO,cAAc,KAAK,QAAQ,CAAC,KAAK,KAAK,IAAI;AAAA,MAClE,SAAS;AAAA,IACX;AAEA,UAAM,aAAa,UAAU,QAAQ,YAAY;AACjD,UAAM,EAAE,QAAQ,SAAS,IAAI,MAAM,WAAW,QAG5C,yCAAyC;AAAA,MACzC,OAAO,EAAE,GAAG,WAAW,IAAI,cAAc;AAAA,MACzC;AAAA,IACF,CAAC;AAED,UAAM,YAAY,gBAAgB;AAElC,SAAK,eAAe,kDAAkD;AAAA,MACpE,IAAI,QAAQ,iBAAiB;AAAA,MAC7B;AAAA,MACA;AAAA,MACA,cAAc,QAAQ,gBAAgB,UAAU;AAAA,MAChD,sBAAsB,QAAQ,wBAAwB;AAAA,MACtD,WAAW;AAAA,IACb,GAAG,EAAE,YAAY,KAAK,CAAC,EAAE,MAAM,CAAC,QAAQ;AACtC,aAAO,MAAM,8DAA8D,EAAE,IAAI,CAAC;AAAA,IACpF,CAAC;AAED,UAAM,WAAW,MAAM,QAAQ,QAAQ,KAAK;AAAA,MAC1C,IAAI,QAAQ,iBAAiB;AAAA,MAC7B,cAAc,QAAQ,gBAAgB,UAAU;AAAA,MAChD,sBAAsB,QAAQ,wBAAwB;AAAA,MACtD,WAAW;AAAA,IACb,CAAC;AACD,QAAI,UAAU,aAAa,UAAU,MAAM,UAAU,WAAW;AAC9D,eAAS,QAAQ;AAAA,QACf;AAAA,QACA,2BAA2B;AAAA,UACzB,IAAI,SAAS;AAAA,UACb,WAAW,SAAS;AAAA,UACpB,WAAW,SAAS;AAAA,UACpB,aAAa,SAAS,eAAe;AAAA,UACrC,cAAc,SAAS,gBAAgB;AAAA,UACvC,YAAY,SAAS,cAAc;AAAA,UACnC,YAAY,SAAS,qBAAqB,OAAO,SAAS,UAAU,YAAY,IAAI;AAAA,QACtF,CAAC;AAAA,MACH;AAAA,IACF;AACA,WAAO;AAAA,EACT,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,GAAG;AACxB,aAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,IAC3D;AACA,UAAM,uBAAuB,mCAAmC,GAAG;AACnE,QAAI,sBAAsB;AACxB,aAAO,aAAa,KAAK,qBAAqB,MAAM,EAAE,QAAQ,qBAAqB,OAAO,CAAC;AAAA,IAC7F;AACA,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,QAAI,eAAe,EAAE,UAAU;AAC7B,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,UAAU,gCAAgC,iBAAiB,GAAG,SAAS,IAAI,OAAO;AAAA,QAC3F,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AACA,WAAO,MAAM,yDAAyD,EAAE,IAAI,CAAC;AAC7E,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,UAAU,yBAAyB,uBAAuB,EAAE;AAAA,MACrE,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAEA,MAAM,uBAAuB,EAAE,OAAO;AAAA,EACpC,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,OAAO,EAAE,OAAO,EAAE,SAAS;AAC7B,CAAC;AAED,MAAM,+BAA+B,EAAE,OAAO;AAAA,EAC5C,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,cAAc,EAAE,OAAO;AAAA,EACvB,sBAAsB,EAAE,OAAO,EAAE,SAAS;AAAA,EAC1C,WAAW,EAAE,QAAQ,KAAK;AAC5B,CAAC;AAED,MAAM,uBAAuB,EAAE,OAAO;AAAA,EACpC,MAAM,EAAE,QAAQ,4BAA4B;AAAA,EAC5C,OAAO,EAAE,OAAO;AAAA,EAChB,kBAAkB,EAAE,OAAO,EAAE,IAAI;AAAA,EACjC,eAAe,EAAE,MAAM,oBAAoB;AAC7C,CAAC;AAEM,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aACE;AAAA,MACF,aAAa;AAAA,QACX,aAAa;AAAA,QACb,QAAQ;AAAA,MACV;AAAA,MACA,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,uBAAuB,QAAQ,6BAA6B;AAAA,MAC1F;AAAA,MACA,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,mDAAmD;AAAA,QAC/E,EAAE,QAAQ,KAAK,aAAa,eAAe;AAAA,QAC3C,EAAE,QAAQ,KAAK,aAAa,2CAA2C;AAAA,QACvE,EAAE,QAAQ,KAAK,aAAa,yBAAyB;AAAA,QACrD;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;",
+  "names": []
+}

package/dist/modules/staff/api/timesheets/time-projects/[id]/employees/route.js

@@ -1,10 +1,13 @@
 import { z } from "zod";
 import { makeCrudRoute } from "@open-mercato/shared/lib/crud/factory";
+import { staffTimeProjectMemberCrudEvents } from "../../../../../lib/crud.js";
+import { emitStaffEvent } from "../../../../../events.js";
+import { createLogger } from "@open-mercato/shared/lib/logger";
 import { resolveTranslations } from "@open-mercato/shared/lib/i18n/server";
 import { parseScopedCommandInput } from "@open-mercato/shared/lib/api/scoped";
 import { CrudHttpError } from "@open-mercato/shared/lib/crud/errors";
 import { StaffTimeProjectMember } from "../../../../../data/entities.js";
-import { staffTimeProjectMemberAssignSchema } from "../../../../../data/validators.js";
+import { staffTimeProjectMemberAssignSchema, staffTimeProjectMemberUpdateSchema } from "../../../../../data/validators.js";
 import { createStaffCrudOpenApi, createPagedListResponseSchema, defaultOkResponseSchema } from "../../../../openapi.js";
 function extractProjectIdFromUrl(request) {
   if (!request?.url) return null;
@@ -33,6 +36,7 @@ const F = {
 const routeMetadata = {
   GET: { requireAuth: true, requireFeatures: ["staff.timesheets.projects.view"] },
   POST: { requireAuth: true, requireFeatures: ["staff.timesheets.projects.manage"] },
+  PUT: { requireAuth: true, requireFeatures: ["staff.timesheets.projects.manage"] },
   DELETE: { requireAuth: true, requireFeatures: ["staff.timesheets.projects.manage"] }
 };
 const metadata = routeMetadata;
@@ -45,6 +49,12 @@ const listSchema = z.object({
   sortField: z.string().optional(),
   sortDir: z.enum(["asc", "desc"]).optional()
 }).passthrough();
+const logger = createLogger("staff").child({ component: "api/timesheets/time-projects/employees" });
+function readMemberId(result) {
+  if (!result || typeof result !== "object") return null;
+  const value = result.timeProjectMemberId;
+  return typeof value === "string" && value.length > 0 ? value : null;
+}
 const crud = makeCrudRoute({
   metadata: routeMetadata,
   orm: {
@@ -54,6 +64,7 @@ const crud = makeCrudRoute({
     tenantField: "tenantId",
     softDeleteField: "deletedAt"
   },
+  events: staffTimeProjectMemberCrudEvents,
   indexer: { entityType: "staff:staff_time_project_member" },
   list: {
     schema: listSchema,
@@ -98,9 +109,48 @@ const crud = makeCrudRoute({
         const body = { ...raw, timeProjectId: raw?.timeProjectId ?? projectId };
         return parseScopedCommandInput(staffTimeProjectMemberAssignSchema, body, ctx, translate);
       },
-      response: ({ result }) => ({ id: result?.timeProjectMemberId ?? null }),
+      // The assignment IS the grant: `timeTrackingAccessResolver` reads exactly this
+      // table, so a module wiring an approval workflow onto `access-requests` learns
+      // the outcome here rather than by polling the membership list.
+      response: ({ result, ctx }) => {
+        const timeProjectMemberId = readMemberId(result);
+        if (timeProjectMemberId) {
+          void emitStaffEvent("staff.timesheets.time_project_access.granted", {
+            id: timeProjectMemberId,
+            tenantId: ctx.auth?.tenantId ?? null,
+            organizationId: ctx.selectedOrganizationId ?? ctx.auth?.orgId ?? null
+          }, { persistent: true }).catch((err) => {
+            logger.error("staff.timesheets emit time_project_access.granted failed", { err });
+          });
+        }
+        return { id: timeProjectMemberId };
+      },
       status: 201
     },
+    // Re-dating an assignment (D-12) is an update of the existing row, not a
+    // replacement pair, so the audit trail reads as a change to
+    // `assignedEndDate`. `timeProjectId` comes from the URL, never from the
+    // body: the command uses it to refuse a membership id belonging to another
+    // project. Guard wiring, tenant/org scoping and the optimistic-lock header
+    // come from `makeCrudRoute`'s command path — this route MUST NOT hand-roll
+    // them (see `runRouteMutationGuards` for the non-factory equivalent).
+    update: {
+      commandId: "staff.timesheets.time_project_members.update",
+      schema: rawBodySchema,
+      mapInput: async ({ raw, ctx }) => {
+        const { translate } = await resolveTranslations();
+        const id = raw?.id ?? (ctx.request ? new URL(ctx.request.url).searchParams.get("id") : null);
+        if (!id) {
+          throw new CrudHttpError(400, {
+            error: translate("staff.timesheets.errors.memberRequired", "Time project member id is required.")
+          });
+        }
+        const parsed = staffTimeProjectMemberUpdateSchema.parse({ ...raw, id });
+        const projectId = extractProjectIdFromUrl(ctx?.request);
+        return projectId ? { ...parsed, timeProjectId: projectId } : parsed;
+      },
+      response: ({ result }) => ({ id: result?.timeProjectMemberId ?? null })
+    },
     delete: {
       commandId: "staff.timesheets.time_project_members.unassign",
       schema: rawBodySchema,
@@ -120,6 +170,7 @@ const crud = makeCrudRoute({
 });
 const GET = crud.GET;
 const POST = crud.POST;
+const PUT = crud.PUT;
 const DELETE = crud.DELETE;
 const projectMemberListItemSchema = z.object({
   id: z.string().uuid().nullable().optional(),
@@ -143,6 +194,11 @@ const openApi = createStaffCrudOpenApi({
     schema: staffTimeProjectMemberAssignSchema,
     description: "Assigns an employee to a time project."
   },
+  update: {
+    schema: staffTimeProjectMemberUpdateSchema,
+    responseSchema: z.object({ id: z.string().uuid().nullable() }),
+    description: "Updates an existing assignment (role, status, assignment end date) without unassigning the employee."
+  },
   del: {
     schema: z.object({ id: z.string().uuid() }),
     responseSchema: defaultOkResponseSchema,
@@ -153,6 +209,7 @@ export {
   DELETE,
   GET,
   POST,
+  PUT,
   metadata,
   openApi
 };

package/dist/modules/staff/api/timesheets/time-projects/[id]/employees/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../../../src/modules/staff/api/timesheets/time-projects/%5Bid%5D/employees/route.ts"],
-  "sourcesContent": ["import { z } from 'zod'\nimport { makeCrudRoute } from '@open-mercato/shared/lib/crud/factory'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { parseScopedCommandInput } from '@open-mercato/shared/lib/api/scoped'\nimport { CrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { StaffTimeProjectMember } from '../../../../../data/entities'\nimport { staffTimeProjectMemberAssignSchema } from '../../../../../data/validators'\nimport { createStaffCrudOpenApi, createPagedListResponseSchema, defaultOkResponseSchema } from '../../../../openapi'\n\nfunction extractProjectIdFromUrl(request?: Request): string | null {\n  if (!request?.url) return null\n  try {\n    const url = new URL(request.url)\n    const match = url.pathname.match(/\\/time-projects\\/([^/]+)\\/employees/)\n    return match?.[1] ?? null\n  } catch {\n    return null\n  }\n}\n\nconst F = {\n  id: 'id',\n  tenant_id: 'tenant_id',\n  organization_id: 'organization_id',\n  time_project_id: 'time_project_id',\n  staff_member_id: 'staff_member_id',\n  role: 'role',\n  status: 'status',\n  assigned_start_date: 'assigned_start_date',\n  assigned_end_date: 'assigned_end_date',\n  created_at: 'created_at',\n  updated_at: 'updated_at',\n  deleted_at: 'deleted_at',\n} as const\n\nconst routeMetadata = {\n  GET: { requireAuth: true, requireFeatures: ['staff.timesheets.projects.view'] },\n  POST: { requireAuth: true, requireFeatures: ['staff.timesheets.projects.manage'] },\n  DELETE: { requireAuth: true, requireFeatures: ['staff.timesheets.projects.manage'] },\n}\n\nexport const metadata = routeMetadata\n\nconst rawBodySchema = z.object({}).passthrough()\n\nconst listSchema = z\n  .object({\n    page: z.coerce.number().min(1).default(1),\n    pageSize: z.coerce.number().min(1).max(100).default(50),\n    timeProjectId: z.string().uuid().optional(),\n    status: z.string().optional(),\n    sortField: z.string().optional(),\n    sortDir: z.enum(['asc', 'desc']).optional(),\n  })\n  .passthrough()\n\nconst crud = makeCrudRoute({\n  metadata: routeMetadata,\n  orm: {\n    entity: StaffTimeProjectMember,\n    idField: 'id',\n    orgField: 'organizationId',\n    tenantField: 'tenantId',\n    softDeleteField: 'deletedAt',\n  },\n  indexer: { entityType: 'staff:staff_time_project_member' },\n  list: {\n    schema: listSchema,\n    entityId: 'staff:staff_time_project_member',\n    fields: [\n      F.id,\n      F.organization_id,\n      F.tenant_id,\n      F.time_project_id,\n      F.staff_member_id,\n      F.role,\n      F.status,\n      F.assigned_start_date,\n      F.assigned_end_date,\n      F.created_at,\n      F.updated_at,\n    ],\n    sortFieldMap: {\n      createdAt: F.created_at,\n      updatedAt: F.updated_at,\n      assignedStartDate: F.assigned_start_date,\n    },\n    buildFilters: async (query, ctx) => {\n      const filters: Record<string, unknown> = {}\n      const projectId = query.timeProjectId ?? extractProjectIdFromUrl(ctx?.request) ?? null\n      if (typeof projectId === 'string' && projectId.trim().length > 0) {\n        filters[F.time_project_id] = projectId.trim()\n      }\n      if (typeof query.status === 'string' && query.status.trim().length > 0) {\n        filters[F.status] = query.status.trim()\n      }\n      return filters\n    },\n  },\n  actions: {\n    create: {\n      commandId: 'staff.timesheets.time_project_members.assign',\n      schema: rawBodySchema,\n      mapInput: async ({ raw, ctx }) => {\n        const { translate } = await resolveTranslations()\n        const projectId = extractProjectIdFromUrl(ctx?.request) ?? null\n        const body = { ...raw, timeProjectId: raw?.timeProjectId ?? projectId }\n        return parseScopedCommandInput(staffTimeProjectMemberAssignSchema, body, ctx, translate)\n      },\n      response: ({ result }) => ({ id: result?.timeProjectMemberId ?? null }),\n      status: 201,\n    },\n    delete: {\n      commandId: 'staff.timesheets.time_project_members.unassign',\n      schema: rawBodySchema,\n      mapInput: async ({ parsed, ctx }) => {\n        const { translate } = await resolveTranslations()\n        const id =\n          parsed?.body?.id ??\n          parsed?.id ??\n          parsed?.query?.id ??\n          (ctx.request ? new URL(ctx.request.url).searchParams.get('id') : null)\n        if (!id) {\n          throw new CrudHttpError(400, {\n            error: translate('staff.timesheets.errors.memberRequired', 'Time project member id is required.'),\n          })\n        }\n        return { id }\n      },\n      response: () => ({ ok: true }),\n    },\n  },\n})\n\nexport const GET = crud.GET\nexport const POST = crud.POST\nexport const DELETE = crud.DELETE\n\nconst projectMemberListItemSchema = z.object({\n  id: z.string().uuid().nullable().optional(),\n  organization_id: z.string().uuid().nullable().optional(),\n  tenant_id: z.string().uuid().nullable().optional(),\n  time_project_id: z.string().uuid().nullable().optional(),\n  staff_member_id: z.string().uuid().nullable().optional(),\n  role: z.string().nullable().optional(),\n  status: z.string().nullable().optional(),\n  assigned_start_date: z.string().nullable().optional(),\n  assigned_end_date: z.string().nullable().optional(),\n  created_at: z.string().nullable().optional(),\n  updated_at: z.string().nullable().optional(),\n})\n\nexport const openApi = createStaffCrudOpenApi({\n  resourceName: 'TimeProjectMember',\n  pluralName: 'Time Project Members',\n  querySchema: listSchema,\n  listResponseSchema: createPagedListResponseSchema(projectMemberListItemSchema),\n  create: {\n    schema: staffTimeProjectMemberAssignSchema,\n    description: 'Assigns an employee to a time project.',\n  },\n  del: {\n    schema: z.object({ id: z.string().uuid() }),\n    responseSchema: defaultOkResponseSchema,\n    description: 'Unassigns an employee from a time project.',\n  },\n})\n"],
-  "mappings": "AAAA,SAAS,SAAS;AAClB,SAAS,qBAAqB;AAC9B,SAAS,2BAA2B;AACpC,SAAS,+BAA+B;AACxC,SAAS,qBAAqB;AAC9B,SAAS,8BAA8B;AACvC,SAAS,0CAA0C;AACnD,SAAS,wBAAwB,+BAA+B,+BAA+B;AAE/F,SAAS,wBAAwB,SAAkC;AACjE,MAAI,CAAC,SAAS,IAAK,QAAO;AAC1B,MAAI;AACF,UAAM,MAAM,IAAI,IAAI,QAAQ,GAAG;AAC/B,UAAM,QAAQ,IAAI,SAAS,MAAM,qCAAqC;AACtE,WAAO,QAAQ,CAAC,KAAK;AAAA,EACvB,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,MAAM,IAAI;AAAA,EACR,IAAI;AAAA,EACJ,WAAW;AAAA,EACX,iBAAiB;AAAA,EACjB,iBAAiB;AAAA,EACjB,iBAAiB;AAAA,EACjB,MAAM;AAAA,EACN,QAAQ;AAAA,EACR,qBAAqB;AAAA,EACrB,mBAAmB;AAAA,EACnB,YAAY;AAAA,EACZ,YAAY;AAAA,EACZ,YAAY;AACd;AAEA,MAAM,gBAAgB;AAAA,EACpB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,gCAAgC,EAAE;AAAA,EAC9E,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,kCAAkC,EAAE;AAAA,EACjF,QAAQ,EAAE,aAAa,MAAM,iBAAiB,CAAC,kCAAkC,EAAE;AACrF;AAEO,MAAM,WAAW;AAExB,MAAM,gBAAgB,EAAE,OAAO,CAAC,CAAC,EAAE,YAAY;AAE/C,MAAM,aAAa,EAChB,OAAO;AAAA,EACN,MAAM,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,QAAQ,CAAC;AAAA,EACxC,UAAU,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,QAAQ,EAAE;AAAA,EACtD,eAAe,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC1C,QAAQ,EAAE,OAAO,EAAE,SAAS;AAAA,EAC5B,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,SAAS,EAAE,KAAK,CAAC,OAAO,MAAM,CAAC,EAAE,SAAS;AAC5C,CAAC,EACA,YAAY;AAEf,MAAM,OAAO,cAAc;AAAA,EACzB,UAAU;AAAA,EACV,KAAK;AAAA,IACH,QAAQ;AAAA,IACR,SAAS;AAAA,IACT,UAAU;AAAA,IACV,aAAa;AAAA,IACb,iBAAiB;AAAA,EACnB;AAAA,EACA,SAAS,EAAE,YAAY,kCAAkC;AAAA,EACzD,MAAM;AAAA,IACJ,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,QAAQ;AAAA,MACN,EAAE;AAAA,MACF,EAAE;AAAA,MACF,EAAE;AAAA,MACF,EAAE;AAAA,MACF,EAAE;AAAA,MACF,EAAE;AAAA,MACF,EAAE;AAAA,MACF,EAAE;AAAA,MACF,EAAE;AAAA,MACF,EAAE;AAAA,MACF,EAAE;AAAA,IACJ;AAAA,IACA,cAAc;AAAA,MACZ,WAAW,EAAE;AAAA,MACb,WAAW,EAAE;AAAA,MACb,mBAAmB,EAAE;AAAA,IACvB;AAAA,IACA,cAAc,OAAO,OAAO,QAAQ;AAClC,YAAM,UAAmC,CAAC;AAC1C,YAAM,YAAY,MAAM,iBAAiB,wBAAwB,KAAK,OAAO,KAAK;AAClF,UAAI,OAAO,cAAc,YAAY,UAAU,KAAK,EAAE,SAAS,GAAG;AAChE,gBAAQ,EAAE,eAAe,IAAI,UAAU,KAAK;AAAA,MAC9C;AACA,UAAI,OAAO,MAAM,WAAW,YAAY,MAAM,OAAO,KAAK,EAAE,SAAS,GAAG;AACtE,gBAAQ,EAAE,MAAM,IAAI,MAAM,OAAO,KAAK;AAAA,MACxC;AACA,aAAO;AAAA,IACT;AAAA,EACF;AAAA,EACA,SAAS;AAAA,IACP,QAAQ;AAAA,MACN,WAAW;AAAA,MACX,QAAQ;AAAA,MACR,UAAU,OAAO,EAAE,KAAK,IAAI,MAAM;AAChC,cAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,cAAM,YAAY,wBAAwB,KAAK,OAAO,KAAK;AAC3D,cAAM,OAAO,EAAE,GAAG,KAAK,eAAe,KAAK,iBAAiB,UAAU;AACtE,eAAO,wBAAwB,oCAAoC,MAAM,KAAK,SAAS;AAAA,MACzF;AAAA,MACA,UAAU,CAAC,EAAE,OAAO,OAAO,EAAE,IAAI,QAAQ,uBAAuB,KAAK;AAAA,MACrE,QAAQ;AAAA,IACV;AAAA,IACA,QAAQ;AAAA,MACN,WAAW;AAAA,MACX,QAAQ;AAAA,MACR,UAAU,OAAO,EAAE,QAAQ,IAAI,MAAM;AACnC,cAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,cAAM,KACJ,QAAQ,MAAM,MACd,QAAQ,MACR,QAAQ,OAAO,OACd,IAAI,UAAU,IAAI,IAAI,IAAI,QAAQ,GAAG,EAAE,aAAa,IAAI,IAAI,IAAI;AACnE,YAAI,CAAC,IAAI;AACP,gBAAM,IAAI,cAAc,KAAK;AAAA,YAC3B,OAAO,UAAU,0CAA0C,qCAAqC;AAAA,UAClG,CAAC;AAAA,QACH;AACA,eAAO,EAAE,GAAG;AAAA,MACd;AAAA,MACA,UAAU,OAAO,EAAE,IAAI,KAAK;AAAA,IAC9B;AAAA,EACF;AACF,CAAC;AAEM,MAAM,MAAM,KAAK;AACjB,MAAM,OAAO,KAAK;AAClB,MAAM,SAAS,KAAK;AAE3B,MAAM,8BAA8B,EAAE,OAAO;AAAA,EAC3C,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS;AAAA,EAC1C,iBAAiB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS;AAAA,EACvD,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS;AAAA,EACjD,iBAAiB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS;AAAA,EACvD,iBAAiB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS;AAAA,EACvD,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACrC,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACvC,qBAAqB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACpD,mBAAmB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAClD,YAAY,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC3C,YAAY,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAC7C,CAAC;AAEM,MAAM,UAAU,uBAAuB;AAAA,EAC5C,cAAc;AAAA,EACd,YAAY;AAAA,EACZ,aAAa;AAAA,EACb,oBAAoB,8BAA8B,2BAA2B;AAAA,EAC7E,QAAQ;AAAA,IACN,QAAQ;AAAA,IACR,aAAa;AAAA,EACf;AAAA,EACA,KAAK;AAAA,IACH,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAAA,IAC1C,gBAAgB;AAAA,IAChB,aAAa;AAAA,EACf;AACF,CAAC;",
+  "sourcesContent": ["import { z } from 'zod'\nimport { makeCrudRoute } from '@open-mercato/shared/lib/crud/factory'\nimport { staffTimeProjectMemberCrudEvents } from '../../../../../lib/crud'\nimport { emitStaffEvent } from '../../../../../events'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { parseScopedCommandInput } from '@open-mercato/shared/lib/api/scoped'\nimport { CrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { StaffTimeProjectMember } from '../../../../../data/entities'\nimport { staffTimeProjectMemberAssignSchema, staffTimeProjectMemberUpdateSchema } from '../../../../../data/validators'\nimport { createStaffCrudOpenApi, createPagedListResponseSchema, defaultOkResponseSchema } from '../../../../openapi'\n\nfunction extractProjectIdFromUrl(request?: Request): string | null {\n  if (!request?.url) return null\n  try {\n    const url = new URL(request.url)\n    const match = url.pathname.match(/\\/time-projects\\/([^/]+)\\/employees/)\n    return match?.[1] ?? null\n  } catch {\n    return null\n  }\n}\n\nconst F = {\n  id: 'id',\n  tenant_id: 'tenant_id',\n  organization_id: 'organization_id',\n  time_project_id: 'time_project_id',\n  staff_member_id: 'staff_member_id',\n  role: 'role',\n  status: 'status',\n  assigned_start_date: 'assigned_start_date',\n  assigned_end_date: 'assigned_end_date',\n  created_at: 'created_at',\n  updated_at: 'updated_at',\n  deleted_at: 'deleted_at',\n} as const\n\nconst routeMetadata = {\n  GET: { requireAuth: true, requireFeatures: ['staff.timesheets.projects.view'] },\n  POST: { requireAuth: true, requireFeatures: ['staff.timesheets.projects.manage'] },\n  PUT: { requireAuth: true, requireFeatures: ['staff.timesheets.projects.manage'] },\n  DELETE: { requireAuth: true, requireFeatures: ['staff.timesheets.projects.manage'] },\n}\n\nexport const metadata = routeMetadata\n\nconst rawBodySchema = z.object({}).passthrough()\n\nconst listSchema = z\n  .object({\n    page: z.coerce.number().min(1).default(1),\n    pageSize: z.coerce.number().min(1).max(100).default(50),\n    timeProjectId: z.string().uuid().optional(),\n    status: z.string().optional(),\n    sortField: z.string().optional(),\n    sortDir: z.enum(['asc', 'desc']).optional(),\n  })\n  .passthrough()\n\nconst logger = createLogger('staff').child({ component: 'api/timesheets/time-projects/employees' })\n\nfunction readMemberId(result: unknown): string | null {\n  if (!result || typeof result !== 'object') return null\n  const value = (result as { timeProjectMemberId?: unknown }).timeProjectMemberId\n  return typeof value === 'string' && value.length > 0 ? value : null\n}\n\nconst crud = makeCrudRoute({\n  metadata: routeMetadata,\n  orm: {\n    entity: StaffTimeProjectMember,\n    idField: 'id',\n    orgField: 'organizationId',\n    tenantField: 'tenantId',\n    softDeleteField: 'deletedAt',\n  },\n  events: staffTimeProjectMemberCrudEvents,\n  indexer: { entityType: 'staff:staff_time_project_member' },\n  list: {\n    schema: listSchema,\n    entityId: 'staff:staff_time_project_member',\n    fields: [\n      F.id,\n      F.organization_id,\n      F.tenant_id,\n      F.time_project_id,\n      F.staff_member_id,\n      F.role,\n      F.status,\n      F.assigned_start_date,\n      F.assigned_end_date,\n      F.created_at,\n      F.updated_at,\n    ],\n    sortFieldMap: {\n      createdAt: F.created_at,\n      updatedAt: F.updated_at,\n      assignedStartDate: F.assigned_start_date,\n    },\n    buildFilters: async (query, ctx) => {\n      const filters: Record<string, unknown> = {}\n      const projectId = query.timeProjectId ?? extractProjectIdFromUrl(ctx?.request) ?? null\n      if (typeof projectId === 'string' && projectId.trim().length > 0) {\n        filters[F.time_project_id] = projectId.trim()\n      }\n      if (typeof query.status === 'string' && query.status.trim().length > 0) {\n        filters[F.status] = query.status.trim()\n      }\n      return filters\n    },\n  },\n  actions: {\n    create: {\n      commandId: 'staff.timesheets.time_project_members.assign',\n      schema: rawBodySchema,\n      mapInput: async ({ raw, ctx }) => {\n        const { translate } = await resolveTranslations()\n        const projectId = extractProjectIdFromUrl(ctx?.request) ?? null\n        const body = { ...raw, timeProjectId: raw?.timeProjectId ?? projectId }\n        return parseScopedCommandInput(staffTimeProjectMemberAssignSchema, body, ctx, translate)\n      },\n      // The assignment IS the grant: `timeTrackingAccessResolver` reads exactly this\n      // table, so a module wiring an approval workflow onto `access-requests` learns\n      // the outcome here rather than by polling the membership list.\n      response: ({ result, ctx }) => {\n        const timeProjectMemberId = readMemberId(result)\n        if (timeProjectMemberId) {\n          void emitStaffEvent('staff.timesheets.time_project_access.granted', {\n            id: timeProjectMemberId,\n            tenantId: ctx.auth?.tenantId ?? null,\n            organizationId: ctx.selectedOrganizationId ?? ctx.auth?.orgId ?? null,\n          }, { persistent: true }).catch((err) => {\n            logger.error('staff.timesheets emit time_project_access.granted failed', { err })\n          })\n        }\n        return { id: timeProjectMemberId }\n      },\n      status: 201,\n    },\n    // Re-dating an assignment (D-12) is an update of the existing row, not a\n    // replacement pair, so the audit trail reads as a change to\n    // `assignedEndDate`. `timeProjectId` comes from the URL, never from the\n    // body: the command uses it to refuse a membership id belonging to another\n    // project. Guard wiring, tenant/org scoping and the optimistic-lock header\n    // come from `makeCrudRoute`'s command path \u2014 this route MUST NOT hand-roll\n    // them (see `runRouteMutationGuards` for the non-factory equivalent).\n    update: {\n      commandId: 'staff.timesheets.time_project_members.update',\n      schema: rawBodySchema,\n      mapInput: async ({ raw, ctx }) => {\n        const { translate } = await resolveTranslations()\n        const id =\n          raw?.id ??\n          (ctx.request ? new URL(ctx.request.url).searchParams.get('id') : null)\n        if (!id) {\n          throw new CrudHttpError(400, {\n            error: translate('staff.timesheets.errors.memberRequired', 'Time project member id is required.'),\n          })\n        }\n        const parsed = staffTimeProjectMemberUpdateSchema.parse({ ...raw, id })\n        const projectId = extractProjectIdFromUrl(ctx?.request)\n        return projectId ? { ...parsed, timeProjectId: projectId } : parsed\n      },\n      response: ({ result }) => ({ id: result?.timeProjectMemberId ?? null }),\n    },\n    delete: {\n      commandId: 'staff.timesheets.time_project_members.unassign',\n      schema: rawBodySchema,\n      mapInput: async ({ parsed, ctx }) => {\n        const { translate } = await resolveTranslations()\n        const id =\n          parsed?.body?.id ??\n          parsed?.id ??\n          parsed?.query?.id ??\n          (ctx.request ? new URL(ctx.request.url).searchParams.get('id') : null)\n        if (!id) {\n          throw new CrudHttpError(400, {\n            error: translate('staff.timesheets.errors.memberRequired', 'Time project member id is required.'),\n          })\n        }\n        return { id }\n      },\n      response: () => ({ ok: true }),\n    },\n  },\n})\n\nexport const GET = crud.GET\nexport const POST = crud.POST\nexport const PUT = crud.PUT\nexport const DELETE = crud.DELETE\n\nconst projectMemberListItemSchema = z.object({\n  id: z.string().uuid().nullable().optional(),\n  organization_id: z.string().uuid().nullable().optional(),\n  tenant_id: z.string().uuid().nullable().optional(),\n  time_project_id: z.string().uuid().nullable().optional(),\n  staff_member_id: z.string().uuid().nullable().optional(),\n  role: z.string().nullable().optional(),\n  status: z.string().nullable().optional(),\n  assigned_start_date: z.string().nullable().optional(),\n  assigned_end_date: z.string().nullable().optional(),\n  created_at: z.string().nullable().optional(),\n  updated_at: z.string().nullable().optional(),\n})\n\nexport const openApi = createStaffCrudOpenApi({\n  resourceName: 'TimeProjectMember',\n  pluralName: 'Time Project Members',\n  querySchema: listSchema,\n  listResponseSchema: createPagedListResponseSchema(projectMemberListItemSchema),\n  create: {\n    schema: staffTimeProjectMemberAssignSchema,\n    description: 'Assigns an employee to a time project.',\n  },\n  update: {\n    schema: staffTimeProjectMemberUpdateSchema,\n    responseSchema: z.object({ id: z.string().uuid().nullable() }),\n    description: 'Updates an existing assignment (role, status, assignment end date) without unassigning the employee.',\n  },\n  del: {\n    schema: z.object({ id: z.string().uuid() }),\n    responseSchema: defaultOkResponseSchema,\n    description: 'Unassigns an employee from a time project.',\n  },\n})\n"],
+  "mappings": "AAAA,SAAS,SAAS;AAClB,SAAS,qBAAqB;AAC9B,SAAS,wCAAwC;AACjD,SAAS,sBAAsB;AAC/B,SAAS,oBAAoB;AAC7B,SAAS,2BAA2B;AACpC,SAAS,+BAA+B;AACxC,SAAS,qBAAqB;AAC9B,SAAS,8BAA8B;AACvC,SAAS,oCAAoC,0CAA0C;AACvF,SAAS,wBAAwB,+BAA+B,+BAA+B;AAE/F,SAAS,wBAAwB,SAAkC;AACjE,MAAI,CAAC,SAAS,IAAK,QAAO;AAC1B,MAAI;AACF,UAAM,MAAM,IAAI,IAAI,QAAQ,GAAG;AAC/B,UAAM,QAAQ,IAAI,SAAS,MAAM,qCAAqC;AACtE,WAAO,QAAQ,CAAC,KAAK;AAAA,EACvB,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,MAAM,IAAI;AAAA,EACR,IAAI;AAAA,EACJ,WAAW;AAAA,EACX,iBAAiB;AAAA,EACjB,iBAAiB;AAAA,EACjB,iBAAiB;AAAA,EACjB,MAAM;AAAA,EACN,QAAQ;AAAA,EACR,qBAAqB;AAAA,EACrB,mBAAmB;AAAA,EACnB,YAAY;AAAA,EACZ,YAAY;AAAA,EACZ,YAAY;AACd;AAEA,MAAM,gBAAgB;AAAA,EACpB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,gCAAgC,EAAE;AAAA,EAC9E,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,kCAAkC,EAAE;AAAA,EACjF,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,kCAAkC,EAAE;AAAA,EAChF,QAAQ,EAAE,aAAa,MAAM,iBAAiB,CAAC,kCAAkC,EAAE;AACrF;AAEO,MAAM,WAAW;AAExB,MAAM,gBAAgB,EAAE,OAAO,CAAC,CAAC,EAAE,YAAY;AAE/C,MAAM,aAAa,EAChB,OAAO;AAAA,EACN,MAAM,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,QAAQ,CAAC;AAAA,EACxC,UAAU,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,QAAQ,EAAE;AAAA,EACtD,eAAe,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC1C,QAAQ,EAAE,OAAO,EAAE,SAAS;AAAA,EAC5B,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,SAAS,EAAE,KAAK,CAAC,OAAO,MAAM,CAAC,EAAE,SAAS;AAC5C,CAAC,EACA,YAAY;AAEf,MAAM,SAAS,aAAa,OAAO,EAAE,MAAM,EAAE,WAAW,yCAAyC,CAAC;AAElG,SAAS,aAAa,QAAgC;AACpD,MAAI,CAAC,UAAU,OAAO,WAAW,SAAU,QAAO;AAClD,QAAM,QAAS,OAA6C;AAC5D,SAAO,OAAO,UAAU,YAAY,MAAM,SAAS,IAAI,QAAQ;AACjE;AAEA,MAAM,OAAO,cAAc;AAAA,EACzB,UAAU;AAAA,EACV,KAAK;AAAA,IACH,QAAQ;AAAA,IACR,SAAS;AAAA,IACT,UAAU;AAAA,IACV,aAAa;AAAA,IACb,iBAAiB;AAAA,EACnB;AAAA,EACA,QAAQ;AAAA,EACR,SAAS,EAAE,YAAY,kCAAkC;AAAA,EACzD,MAAM;AAAA,IACJ,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,QAAQ;AAAA,MACN,EAAE;AAAA,MACF,EAAE;AAAA,MACF,EAAE;AAAA,MACF,EAAE;AAAA,MACF,EAAE;AAAA,MACF,EAAE;AAAA,MACF,EAAE;AAAA,MACF,EAAE;AAAA,MACF,EAAE;AAAA,MACF,EAAE;AAAA,MACF,EAAE;AAAA,IACJ;AAAA,IACA,cAAc;AAAA,MACZ,WAAW,EAAE;AAAA,MACb,WAAW,EAAE;AAAA,MACb,mBAAmB,EAAE;AAAA,IACvB;AAAA,IACA,cAAc,OAAO,OAAO,QAAQ;AAClC,YAAM,UAAmC,CAAC;AAC1C,YAAM,YAAY,MAAM,iBAAiB,wBAAwB,KAAK,OAAO,KAAK;AAClF,UAAI,OAAO,cAAc,YAAY,UAAU,KAAK,EAAE,SAAS,GAAG;AAChE,gBAAQ,EAAE,eAAe,IAAI,UAAU,KAAK;AAAA,MAC9C;AACA,UAAI,OAAO,MAAM,WAAW,YAAY,MAAM,OAAO,KAAK,EAAE,SAAS,GAAG;AACtE,gBAAQ,EAAE,MAAM,IAAI,MAAM,OAAO,KAAK;AAAA,MACxC;AACA,aAAO;AAAA,IACT;AAAA,EACF;AAAA,EACA,SAAS;AAAA,IACP,QAAQ;AAAA,MACN,WAAW;AAAA,MACX,QAAQ;AAAA,MACR,UAAU,OAAO,EAAE,KAAK,IAAI,MAAM;AAChC,cAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,cAAM,YAAY,wBAAwB,KAAK,OAAO,KAAK;AAC3D,cAAM,OAAO,EAAE,GAAG,KAAK,eAAe,KAAK,iBAAiB,UAAU;AACtE,eAAO,wBAAwB,oCAAoC,MAAM,KAAK,SAAS;AAAA,MACzF;AAAA;AAAA;AAAA;AAAA,MAIA,UAAU,CAAC,EAAE,QAAQ,IAAI,MAAM;AAC7B,cAAM,sBAAsB,aAAa,MAAM;AAC/C,YAAI,qBAAqB;AACvB,eAAK,eAAe,gDAAgD;AAAA,YAClE,IAAI;AAAA,YACJ,UAAU,IAAI,MAAM,YAAY;AAAA,YAChC,gBAAgB,IAAI,0BAA0B,IAAI,MAAM,SAAS;AAAA,UACnE,GAAG,EAAE,YAAY,KAAK,CAAC,EAAE,MAAM,CAAC,QAAQ;AACtC,mBAAO,MAAM,4DAA4D,EAAE,IAAI,CAAC;AAAA,UAClF,CAAC;AAAA,QACH;AACA,eAAO,EAAE,IAAI,oBAAoB;AAAA,MACnC;AAAA,MACA,QAAQ;AAAA,IACV;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAQA,QAAQ;AAAA,MACN,WAAW;AAAA,MACX,QAAQ;AAAA,MACR,UAAU,OAAO,EAAE,KAAK,IAAI,MAAM;AAChC,cAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,cAAM,KACJ,KAAK,OACJ,IAAI,UAAU,IAAI,IAAI,IAAI,QAAQ,GAAG,EAAE,aAAa,IAAI,IAAI,IAAI;AACnE,YAAI,CAAC,IAAI;AACP,gBAAM,IAAI,cAAc,KAAK;AAAA,YAC3B,OAAO,UAAU,0CAA0C,qCAAqC;AAAA,UAClG,CAAC;AAAA,QACH;AACA,cAAM,SAAS,mCAAmC,MAAM,EAAE,GAAG,KAAK,GAAG,CAAC;AACtE,cAAM,YAAY,wBAAwB,KAAK,OAAO;AACtD,eAAO,YAAY,EAAE,GAAG,QAAQ,eAAe,UAAU,IAAI;AAAA,MAC/D;AAAA,MACA,UAAU,CAAC,EAAE,OAAO,OAAO,EAAE,IAAI,QAAQ,uBAAuB,KAAK;AAAA,IACvE;AAAA,IACA,QAAQ;AAAA,MACN,WAAW;AAAA,MACX,QAAQ;AAAA,MACR,UAAU,OAAO,EAAE,QAAQ,IAAI,MAAM;AACnC,cAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,cAAM,KACJ,QAAQ,MAAM,MACd,QAAQ,MACR,QAAQ,OAAO,OACd,IAAI,UAAU,IAAI,IAAI,IAAI,QAAQ,GAAG,EAAE,aAAa,IAAI,IAAI,IAAI;AACnE,YAAI,CAAC,IAAI;AACP,gBAAM,IAAI,cAAc,KAAK;AAAA,YAC3B,OAAO,UAAU,0CAA0C,qCAAqC;AAAA,UAClG,CAAC;AAAA,QACH;AACA,eAAO,EAAE,GAAG;AAAA,MACd;AAAA,MACA,UAAU,OAAO,EAAE,IAAI,KAAK;AAAA,IAC9B;AAAA,EACF;AACF,CAAC;AAEM,MAAM,MAAM,KAAK;AACjB,MAAM,OAAO,KAAK;AAClB,MAAM,MAAM,KAAK;AACjB,MAAM,SAAS,KAAK;AAE3B,MAAM,8BAA8B,EAAE,OAAO;AAAA,EAC3C,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS;AAAA,EAC1C,iBAAiB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS;AAAA,EACvD,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS;AAAA,EACjD,iBAAiB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS;AAAA,EACvD,iBAAiB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS;AAAA,EACvD,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACrC,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACvC,qBAAqB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACpD,mBAAmB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAClD,YAAY,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC3C,YAAY,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAC7C,CAAC;AAEM,MAAM,UAAU,uBAAuB;AAAA,EAC5C,cAAc;AAAA,EACd,YAAY;AAAA,EACZ,aAAa;AAAA,EACb,oBAAoB,8BAA8B,2BAA2B;AAAA,EAC7E,QAAQ;AAAA,IACN,QAAQ;AAAA,IACR,aAAa;AAAA,EACf;AAAA,EACA,QAAQ;AAAA,IACN,QAAQ;AAAA,IACR,gBAAgB,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;AAAA,IAC7D,aAAa;AAAA,EACf;AAAA,EACA,KAAK;AAAA,IACH,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAAA,IAC1C,gBAAgB;AAAA,IAChB,aAAa;AAAA,EACf;AACF,CAAC;",
   "names": []
 }