@open-mercato/core 0.7.1-develop.7178.1.ab93fbaf4e → 0.7.1-develop.7180.1.9717fbbb43

package/dist/modules/staff/events.js

@@ -25,17 +25,95 @@ const events = [
   { id: "staff.job_history.updated", label: "Job History Updated", entity: "job_history", category: "crud" },
   { id: "staff.job_history.deleted", label: "Job History Deleted", entity: "job_history", category: "crud" },
   // Timesheets (Phase 1)
-  { id: "staff.timesheets.time_entry.created", label: "Time Entry Created", entity: "time_entry", category: "crud" },
-  { id: "staff.timesheets.time_entry.updated", label: "Time Entry Updated", entity: "time_entry", category: "crud" },
-  { id: "staff.timesheets.time_entry.deleted", label: "Time Entry Deleted", entity: "time_entry", category: "crud" },
-  { id: "staff.timesheets.time_entry.timer_started", label: "Timer Started", entity: "time_entry", category: "lifecycle" },
-  { id: "staff.timesheets.time_entry.timer_stopped", label: "Timer Stopped", entity: "time_entry", category: "lifecycle" },
+  { id: "staff.timesheets.time_entry.created", label: "Time Entry Created", entity: "time_entry", category: "crud", clientBroadcast: true },
+  { id: "staff.timesheets.time_entry.updated", label: "Time Entry Updated", entity: "time_entry", category: "crud", clientBroadcast: true },
+  { id: "staff.timesheets.time_entry.deleted", label: "Time Entry Deleted", entity: "time_entry", category: "crud", clientBroadcast: true },
+  { id: "staff.timesheets.time_entry.timer_started", label: "Timer Started", entity: "time_entry", category: "lifecycle", clientBroadcast: true },
+  { id: "staff.timesheets.time_entry.timer_stopped", label: "Timer Stopped", entity: "time_entry", category: "lifecycle", clientBroadcast: true },
   { id: "staff.timesheets.time_project.created", label: "Time Project Created", entity: "time_project", category: "crud" },
   { id: "staff.timesheets.time_project.updated", label: "Time Project Updated", entity: "time_project", category: "crud" },
   { id: "staff.timesheets.time_project.deleted", label: "Time Project Deleted", entity: "time_project", category: "crud" },
   { id: "staff.timesheets.time_project_member.created", label: "Time Project Member Assigned", entity: "time_project_member", category: "crud" },
   { id: "staff.timesheets.time_project_member.updated", label: "Time Project Member Updated", entity: "time_project_member", category: "crud" },
-  { id: "staff.timesheets.time_project_member.deleted", label: "Time Project Member Unassigned", entity: "time_project_member", category: "crud" }
+  { id: "staff.timesheets.time_project_member.deleted", label: "Time Project Member Unassigned", entity: "time_project_member", category: "crud" },
+  // Time tracking (Phase 2)
+  { id: "staff.timesheets.time_task.created", label: "Time Task Created", entity: "time_task", category: "crud" },
+  { id: "staff.timesheets.time_task.updated", label: "Time Task Updated", entity: "time_task", category: "crud" },
+  { id: "staff.timesheets.time_task.deleted", label: "Time Task Deleted", entity: "time_task", category: "crud" },
+  { id: "staff.timesheets.time_task.status_changed", label: "Time Task Status Changed", entity: "time_task", category: "lifecycle", clientBroadcast: true },
+  { id: "staff.timesheets.time_task_status.created", label: "Time Task Status Created", entity: "time_task_status", category: "crud" },
+  { id: "staff.timesheets.time_task_status.updated", label: "Time Task Status Updated", entity: "time_task_status", category: "crud" },
+  { id: "staff.timesheets.time_task_status.deleted", label: "Time Task Status Deleted", entity: "time_task_status", category: "crud" },
+  { id: "staff.timesheets.time_tag.created", label: "Time Tag Created", entity: "time_tag", category: "crud" },
+  { id: "staff.timesheets.time_tag.updated", label: "Time Tag Updated", entity: "time_tag", category: "crud" },
+  { id: "staff.timesheets.time_tag.deleted", label: "Time Tag Deleted", entity: "time_tag", category: "crud" },
+  { id: "staff.timesheets.time_task_comment.created", label: "Time Task Comment Created", entity: "time_task_comment", category: "crud" },
+  { id: "staff.timesheets.time_task_comment.updated", label: "Time Task Comment Updated", entity: "time_task_comment", category: "crud" },
+  { id: "staff.timesheets.time_task_comment.deleted", label: "Time Task Comment Deleted", entity: "time_task_comment", category: "crud" },
+  { id: "staff.timesheets.time_report.created", label: "Time Report Created", entity: "time_report", category: "crud" },
+  { id: "staff.timesheets.time_report.updated", label: "Time Report Updated", entity: "time_report", category: "crud" },
+  { id: "staff.timesheets.time_report.deleted", label: "Time Report Deleted", entity: "time_report", category: "crud" },
+  { id: "staff.timesheets.time_report.closed", label: "Time Report Closed", entity: "time_report", category: "lifecycle", clientBroadcast: true },
+  { id: "staff.timesheets.time_report.unlocked", label: "Time Report Unlocked", entity: "time_report", category: "lifecycle", clientBroadcast: true },
+  { id: "staff.timesheets.time_project.budget_threshold_reached", label: "Time Project Budget Threshold Reached", entity: "time_project", category: "lifecycle", clientBroadcast: true },
+  { id: "staff.timesheets.project_access.requested", label: "Time Project Access Requested", entity: "time_project", category: "lifecycle" },
+  // `clientBroadcast: true` above puts the event on the DOM Event Bridge, whose only
+  // audience filter is tenant + organization (`events/api/stream/route.ts`): every
+  // signed-in user of the organization receives the payload, with no feature check.
+  // So a broadcast payload MUST NOT carry a rate, a cost or an amount — money is
+  // gated on `staff.timesheets.rates.view` (staff/AGENTS.md), a gate SSE cannot
+  // apply. `time_report.closed` and `time_project.budget_threshold_reached` emit
+  // their money fields conditionally for exactly this reason; see their emitters.
+  //
+  // Money is not the only thing that audience decides. The same absence of a feature
+  // check is why `time_report.unlocked` broadcasts no `reason` — the operator's
+  // mandatory, free-text unlock justification, which lives on the audit row instead —
+  // and why `time_report.closed` broadcasts no `customerId`.
+  // Time tracking (Phase 3) — transitions owned by the hand-rolled routes that sit
+  // beside the CRUD factory resources. Declared here so a third-party module can
+  // subscribe to a bulk grid save, a copy, a segment edit, an export or a settings
+  // change with the same contract the CRUD ids already offer.
+  { id: "staff.timesheets.time_entry.bulk_updated", label: "Time Entries Bulk Saved", entity: "time_entry", category: "lifecycle" },
+  { id: "staff.timesheets.time_entry.copied", label: "Time Entry Copied", entity: "time_entry", category: "lifecycle" },
+  { id: "staff.timesheets.time_entry.locked", label: "Time Entries Locked", entity: "time_entry", category: "lifecycle" },
+  { id: "staff.timesheets.time_entry.unlocked", label: "Time Entries Unlocked", entity: "time_entry", category: "lifecycle" },
+  { id: "staff.timesheets.time_entry_segment.created", label: "Time Entry Segment Created", entity: "time_entry_segment", category: "crud" },
+  { id: "staff.timesheets.time_entry_segment.updated", label: "Time Entry Segment Updated", entity: "time_entry_segment", category: "crud" },
+  { id: "staff.timesheets.time_entry_segment.deleted", label: "Time Entry Segment Deleted", entity: "time_entry_segment", category: "crud" },
+  { id: "staff.timesheets.time_report.exported", label: "Time Report Exported", entity: "time_report", category: "lifecycle" },
+  { id: "staff.timesheets.time_project.currency_changed", label: "Time Project Currency Changed", entity: "time_project", category: "lifecycle" },
+  { id: "staff.timesheets.time_project_access.granted", label: "Time Project Access Granted", entity: "time_project", category: "lifecycle" },
+  { id: "staff.timesheets.time_project_access.denied", label: "Time Project Access Denied", entity: "time_project", category: "lifecycle" },
+  { id: "staff.timesheets.time_tracking.settings_updated", label: "Time Tracking Settings Updated", entity: "time_tracking", category: "lifecycle" },
+  { id: "staff.timesheets.time_tracking.rounding_reapplied", label: "Time Tracking Rounding Reapplied", entity: "time_tracking", category: "lifecycle" },
+  // Time tracking (Phase 6) — the customer-portal bridge (EP-06 / EP-50).
+  //
+  // This is a SEPARATE id rather than `portalBroadcast: true` on
+  // `time_report.closed`, and the difference is a disclosure, not a style choice.
+  // The portal SSE stream (`customer_accounts/api/portal/events/stream.ts`)
+  // filters a broadcast by tenant + organization and narrows to specific people
+  // only when the payload carries `recipientUserId(s)`. One organization serves
+  // many customers, so flagging `time_report.closed` — which carries `reference`
+  // and the minute totals — would hand every client of the tenant a running feed
+  // of every other client's reports. `time_report.closed` also has
+  // `clientBroadcast: true` and a published webhook payload, so it cannot be
+  // narrowed without breaking its backoffice consumers.
+  //
+  // `subscribers/time-report-portal-broadcast.ts` is the only emitter: it pins
+  // `recipientUserIds` to the portal users of the report's own customer and does
+  // not emit at all when that list is empty — the rule
+  // `warranty_claims/AGENTS.md` states for its own portal event.
+  //
+  // Exports are deliberately not mirrored. An export changes nothing the portal
+  // renders; the portal reads the report, not the file.
+  {
+    id: "staff.timesheets.time_report.portal_published",
+    label: "Time Report Published To Portal",
+    entity: "time_report",
+    category: "lifecycle",
+    portalBroadcast: true,
+    excludeFromTriggers: true
+  }
 ];
 const eventsConfig = createModuleEvents({
   moduleId: "staff",

package/dist/modules/staff/events.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../src/modules/staff/events.ts"],
-  "sourcesContent": ["import { createModuleEvents } from '@open-mercato/shared/modules/events'\n\nconst events = [\n  { id: 'staff.team.created', label: 'Team Created', entity: 'team', category: 'crud' },\n  { id: 'staff.team.updated', label: 'Team Updated', entity: 'team', category: 'crud' },\n  { id: 'staff.team.deleted', label: 'Team Deleted', entity: 'team', category: 'crud' },\n  { id: 'staff.team_role.created', label: 'Team Role Created', entity: 'team_role', category: 'crud' },\n  { id: 'staff.team_role.updated', label: 'Team Role Updated', entity: 'team_role', category: 'crud' },\n  { id: 'staff.team_role.deleted', label: 'Team Role Deleted', entity: 'team_role', category: 'crud' },\n  { id: 'staff.team_member.created', label: 'Team Member Created', entity: 'team_member', category: 'crud' },\n  { id: 'staff.team_member.updated', label: 'Team Member Updated', entity: 'team_member', category: 'crud' },\n  { id: 'staff.team_member.deleted', label: 'Team Member Deleted', entity: 'team_member', category: 'crud' },\n  { id: 'staff.leave_request.created', label: 'Leave Request Created', entity: 'leave_request', category: 'crud' },\n  { id: 'staff.leave_request.updated', label: 'Leave Request Updated', entity: 'leave_request', category: 'crud' },\n  { id: 'staff.leave_request.deleted', label: 'Leave Request Deleted', entity: 'leave_request', category: 'crud' },\n  { id: 'staff.address.created', label: 'Staff Address Created', entity: 'address', category: 'crud' },\n  { id: 'staff.address.updated', label: 'Staff Address Updated', entity: 'address', category: 'crud' },\n  { id: 'staff.address.deleted', label: 'Staff Address Deleted', entity: 'address', category: 'crud' },\n  { id: 'staff.comment.created', label: 'Staff Comment Created', entity: 'comment', category: 'crud' },\n  { id: 'staff.comment.updated', label: 'Staff Comment Updated', entity: 'comment', category: 'crud' },\n  { id: 'staff.comment.deleted', label: 'Staff Comment Deleted', entity: 'comment', category: 'crud' },\n  { id: 'staff.activity.created', label: 'Staff Activity Created', entity: 'activity', category: 'crud' },\n  { id: 'staff.activity.updated', label: 'Staff Activity Updated', entity: 'activity', category: 'crud' },\n  { id: 'staff.activity.deleted', label: 'Staff Activity Deleted', entity: 'activity', category: 'crud' },\n  { id: 'staff.job_history.created', label: 'Job History Created', entity: 'job_history', category: 'crud' },\n  { id: 'staff.job_history.updated', label: 'Job History Updated', entity: 'job_history', category: 'crud' },\n  { id: 'staff.job_history.deleted', label: 'Job History Deleted', entity: 'job_history', category: 'crud' },\n\n  // Timesheets (Phase 1)\n  { id: 'staff.timesheets.time_entry.created', label: 'Time Entry Created', entity: 'time_entry', category: 'crud' },\n  { id: 'staff.timesheets.time_entry.updated', label: 'Time Entry Updated', entity: 'time_entry', category: 'crud' },\n  { id: 'staff.timesheets.time_entry.deleted', label: 'Time Entry Deleted', entity: 'time_entry', category: 'crud' },\n  { id: 'staff.timesheets.time_entry.timer_started', label: 'Timer Started', entity: 'time_entry', category: 'lifecycle' },\n  { id: 'staff.timesheets.time_entry.timer_stopped', label: 'Timer Stopped', entity: 'time_entry', category: 'lifecycle' },\n  { id: 'staff.timesheets.time_project.created', label: 'Time Project Created', entity: 'time_project', category: 'crud' },\n  { id: 'staff.timesheets.time_project.updated', label: 'Time Project Updated', entity: 'time_project', category: 'crud' },\n  { id: 'staff.timesheets.time_project.deleted', label: 'Time Project Deleted', entity: 'time_project', category: 'crud' },\n  { id: 'staff.timesheets.time_project_member.created', label: 'Time Project Member Assigned', entity: 'time_project_member', category: 'crud' },\n  { id: 'staff.timesheets.time_project_member.updated', label: 'Time Project Member Updated', entity: 'time_project_member', category: 'crud' },\n  { id: 'staff.timesheets.time_project_member.deleted', label: 'Time Project Member Unassigned', entity: 'time_project_member', category: 'crud' },\n] as const\n\nexport const eventsConfig = createModuleEvents({\n  moduleId: 'staff',\n  events,\n})\n\nexport const emitStaffEvent = eventsConfig.emit\n\nexport type StaffEventId = typeof events[number]['id']\n\nexport default eventsConfig\n"],
-  "mappings": "AAAA,SAAS,0BAA0B;AAEnC,MAAM,SAAS;AAAA,EACb,EAAE,IAAI,sBAAsB,OAAO,gBAAgB,QAAQ,QAAQ,UAAU,OAAO;AAAA,EACpF,EAAE,IAAI,sBAAsB,OAAO,gBAAgB,QAAQ,QAAQ,UAAU,OAAO;AAAA,EACpF,EAAE,IAAI,sBAAsB,OAAO,gBAAgB,QAAQ,QAAQ,UAAU,OAAO;AAAA,EACpF,EAAE,IAAI,2BAA2B,OAAO,qBAAqB,QAAQ,aAAa,UAAU,OAAO;AAAA,EACnG,EAAE,IAAI,2BAA2B,OAAO,qBAAqB,QAAQ,aAAa,UAAU,OAAO;AAAA,EACnG,EAAE,IAAI,2BAA2B,OAAO,qBAAqB,QAAQ,aAAa,UAAU,OAAO;AAAA,EACnG,EAAE,IAAI,6BAA6B,OAAO,uBAAuB,QAAQ,eAAe,UAAU,OAAO;AAAA,EACzG,EAAE,IAAI,6BAA6B,OAAO,uBAAuB,QAAQ,eAAe,UAAU,OAAO;AAAA,EACzG,EAAE,IAAI,6BAA6B,OAAO,uBAAuB,QAAQ,eAAe,UAAU,OAAO;AAAA,EACzG,EAAE,IAAI,+BAA+B,OAAO,yBAAyB,QAAQ,iBAAiB,UAAU,OAAO;AAAA,EAC/G,EAAE,IAAI,+BAA+B,OAAO,yBAAyB,QAAQ,iBAAiB,UAAU,OAAO;AAAA,EAC/G,EAAE,IAAI,+BAA+B,OAAO,yBAAyB,QAAQ,iBAAiB,UAAU,OAAO;AAAA,EAC/G,EAAE,IAAI,yBAAyB,OAAO,yBAAyB,QAAQ,WAAW,UAAU,OAAO;AAAA,EACnG,EAAE,IAAI,yBAAyB,OAAO,yBAAyB,QAAQ,WAAW,UAAU,OAAO;AAAA,EACnG,EAAE,IAAI,yBAAyB,OAAO,yBAAyB,QAAQ,WAAW,UAAU,OAAO;AAAA,EACnG,EAAE,IAAI,yBAAyB,OAAO,yBAAyB,QAAQ,WAAW,UAAU,OAAO;AAAA,EACnG,EAAE,IAAI,yBAAyB,OAAO,yBAAyB,QAAQ,WAAW,UAAU,OAAO;AAAA,EACnG,EAAE,IAAI,yBAAyB,OAAO,yBAAyB,QAAQ,WAAW,UAAU,OAAO;AAAA,EACnG,EAAE,IAAI,0BAA0B,OAAO,0BAA0B,QAAQ,YAAY,UAAU,OAAO;AAAA,EACtG,EAAE,IAAI,0BAA0B,OAAO,0BAA0B,QAAQ,YAAY,UAAU,OAAO;AAAA,EACtG,EAAE,IAAI,0BAA0B,OAAO,0BAA0B,QAAQ,YAAY,UAAU,OAAO;AAAA,EACtG,EAAE,IAAI,6BAA6B,OAAO,uBAAuB,QAAQ,eAAe,UAAU,OAAO;AAAA,EACzG,EAAE,IAAI,6BAA6B,OAAO,uBAAuB,QAAQ,eAAe,UAAU,OAAO;AAAA,EACzG,EAAE,IAAI,6BAA6B,OAAO,uBAAuB,QAAQ,eAAe,UAAU,OAAO;AAAA;AAAA,EAGzG,EAAE,IAAI,uCAAuC,OAAO,sBAAsB,QAAQ,cAAc,UAAU,OAAO;AAAA,EACjH,EAAE,IAAI,uCAAuC,OAAO,sBAAsB,QAAQ,cAAc,UAAU,OAAO;AAAA,EACjH,EAAE,IAAI,uCAAuC,OAAO,sBAAsB,QAAQ,cAAc,UAAU,OAAO;AAAA,EACjH,EAAE,IAAI,6CAA6C,OAAO,iBAAiB,QAAQ,cAAc,UAAU,YAAY;AAAA,EACvH,EAAE,IAAI,6CAA6C,OAAO,iBAAiB,QAAQ,cAAc,UAAU,YAAY;AAAA,EACvH,EAAE,IAAI,yCAAyC,OAAO,wBAAwB,QAAQ,gBAAgB,UAAU,OAAO;AAAA,EACvH,EAAE,IAAI,yCAAyC,OAAO,wBAAwB,QAAQ,gBAAgB,UAAU,OAAO;AAAA,EACvH,EAAE,IAAI,yCAAyC,OAAO,wBAAwB,QAAQ,gBAAgB,UAAU,OAAO;AAAA,EACvH,EAAE,IAAI,gDAAgD,OAAO,gCAAgC,QAAQ,uBAAuB,UAAU,OAAO;AAAA,EAC7I,EAAE,IAAI,gDAAgD,OAAO,+BAA+B,QAAQ,uBAAuB,UAAU,OAAO;AAAA,EAC5I,EAAE,IAAI,gDAAgD,OAAO,kCAAkC,QAAQ,uBAAuB,UAAU,OAAO;AACjJ;AAEO,MAAM,eAAe,mBAAmB;AAAA,EAC7C,UAAU;AAAA,EACV;AACF,CAAC;AAEM,MAAM,iBAAiB,aAAa;AAI3C,IAAO,iBAAQ;",
+  "sourcesContent": ["import { createModuleEvents } from '@open-mercato/shared/modules/events'\n\nconst events = [\n  { id: 'staff.team.created', label: 'Team Created', entity: 'team', category: 'crud' },\n  { id: 'staff.team.updated', label: 'Team Updated', entity: 'team', category: 'crud' },\n  { id: 'staff.team.deleted', label: 'Team Deleted', entity: 'team', category: 'crud' },\n  { id: 'staff.team_role.created', label: 'Team Role Created', entity: 'team_role', category: 'crud' },\n  { id: 'staff.team_role.updated', label: 'Team Role Updated', entity: 'team_role', category: 'crud' },\n  { id: 'staff.team_role.deleted', label: 'Team Role Deleted', entity: 'team_role', category: 'crud' },\n  { id: 'staff.team_member.created', label: 'Team Member Created', entity: 'team_member', category: 'crud' },\n  { id: 'staff.team_member.updated', label: 'Team Member Updated', entity: 'team_member', category: 'crud' },\n  { id: 'staff.team_member.deleted', label: 'Team Member Deleted', entity: 'team_member', category: 'crud' },\n  { id: 'staff.leave_request.created', label: 'Leave Request Created', entity: 'leave_request', category: 'crud' },\n  { id: 'staff.leave_request.updated', label: 'Leave Request Updated', entity: 'leave_request', category: 'crud' },\n  { id: 'staff.leave_request.deleted', label: 'Leave Request Deleted', entity: 'leave_request', category: 'crud' },\n  { id: 'staff.address.created', label: 'Staff Address Created', entity: 'address', category: 'crud' },\n  { id: 'staff.address.updated', label: 'Staff Address Updated', entity: 'address', category: 'crud' },\n  { id: 'staff.address.deleted', label: 'Staff Address Deleted', entity: 'address', category: 'crud' },\n  { id: 'staff.comment.created', label: 'Staff Comment Created', entity: 'comment', category: 'crud' },\n  { id: 'staff.comment.updated', label: 'Staff Comment Updated', entity: 'comment', category: 'crud' },\n  { id: 'staff.comment.deleted', label: 'Staff Comment Deleted', entity: 'comment', category: 'crud' },\n  { id: 'staff.activity.created', label: 'Staff Activity Created', entity: 'activity', category: 'crud' },\n  { id: 'staff.activity.updated', label: 'Staff Activity Updated', entity: 'activity', category: 'crud' },\n  { id: 'staff.activity.deleted', label: 'Staff Activity Deleted', entity: 'activity', category: 'crud' },\n  { id: 'staff.job_history.created', label: 'Job History Created', entity: 'job_history', category: 'crud' },\n  { id: 'staff.job_history.updated', label: 'Job History Updated', entity: 'job_history', category: 'crud' },\n  { id: 'staff.job_history.deleted', label: 'Job History Deleted', entity: 'job_history', category: 'crud' },\n\n  // Timesheets (Phase 1)\n  { id: 'staff.timesheets.time_entry.created', label: 'Time Entry Created', entity: 'time_entry', category: 'crud', clientBroadcast: true },\n  { id: 'staff.timesheets.time_entry.updated', label: 'Time Entry Updated', entity: 'time_entry', category: 'crud', clientBroadcast: true },\n  { id: 'staff.timesheets.time_entry.deleted', label: 'Time Entry Deleted', entity: 'time_entry', category: 'crud', clientBroadcast: true },\n  { id: 'staff.timesheets.time_entry.timer_started', label: 'Timer Started', entity: 'time_entry', category: 'lifecycle', clientBroadcast: true },\n  { id: 'staff.timesheets.time_entry.timer_stopped', label: 'Timer Stopped', entity: 'time_entry', category: 'lifecycle', clientBroadcast: true },\n  { id: 'staff.timesheets.time_project.created', label: 'Time Project Created', entity: 'time_project', category: 'crud' },\n  { id: 'staff.timesheets.time_project.updated', label: 'Time Project Updated', entity: 'time_project', category: 'crud' },\n  { id: 'staff.timesheets.time_project.deleted', label: 'Time Project Deleted', entity: 'time_project', category: 'crud' },\n  { id: 'staff.timesheets.time_project_member.created', label: 'Time Project Member Assigned', entity: 'time_project_member', category: 'crud' },\n  { id: 'staff.timesheets.time_project_member.updated', label: 'Time Project Member Updated', entity: 'time_project_member', category: 'crud' },\n  { id: 'staff.timesheets.time_project_member.deleted', label: 'Time Project Member Unassigned', entity: 'time_project_member', category: 'crud' },\n\n  // Time tracking (Phase 2)\n  { id: 'staff.timesheets.time_task.created', label: 'Time Task Created', entity: 'time_task', category: 'crud' },\n  { id: 'staff.timesheets.time_task.updated', label: 'Time Task Updated', entity: 'time_task', category: 'crud' },\n  { id: 'staff.timesheets.time_task.deleted', label: 'Time Task Deleted', entity: 'time_task', category: 'crud' },\n  { id: 'staff.timesheets.time_task.status_changed', label: 'Time Task Status Changed', entity: 'time_task', category: 'lifecycle', clientBroadcast: true },\n  { id: 'staff.timesheets.time_task_status.created', label: 'Time Task Status Created', entity: 'time_task_status', category: 'crud' },\n  { id: 'staff.timesheets.time_task_status.updated', label: 'Time Task Status Updated', entity: 'time_task_status', category: 'crud' },\n  { id: 'staff.timesheets.time_task_status.deleted', label: 'Time Task Status Deleted', entity: 'time_task_status', category: 'crud' },\n  { id: 'staff.timesheets.time_tag.created', label: 'Time Tag Created', entity: 'time_tag', category: 'crud' },\n  { id: 'staff.timesheets.time_tag.updated', label: 'Time Tag Updated', entity: 'time_tag', category: 'crud' },\n  { id: 'staff.timesheets.time_tag.deleted', label: 'Time Tag Deleted', entity: 'time_tag', category: 'crud' },\n  { id: 'staff.timesheets.time_task_comment.created', label: 'Time Task Comment Created', entity: 'time_task_comment', category: 'crud' },\n  { id: 'staff.timesheets.time_task_comment.updated', label: 'Time Task Comment Updated', entity: 'time_task_comment', category: 'crud' },\n  { id: 'staff.timesheets.time_task_comment.deleted', label: 'Time Task Comment Deleted', entity: 'time_task_comment', category: 'crud' },\n  { id: 'staff.timesheets.time_report.created', label: 'Time Report Created', entity: 'time_report', category: 'crud' },\n  { id: 'staff.timesheets.time_report.updated', label: 'Time Report Updated', entity: 'time_report', category: 'crud' },\n  { id: 'staff.timesheets.time_report.deleted', label: 'Time Report Deleted', entity: 'time_report', category: 'crud' },\n  { id: 'staff.timesheets.time_report.closed', label: 'Time Report Closed', entity: 'time_report', category: 'lifecycle', clientBroadcast: true },\n  { id: 'staff.timesheets.time_report.unlocked', label: 'Time Report Unlocked', entity: 'time_report', category: 'lifecycle', clientBroadcast: true },\n  { id: 'staff.timesheets.time_project.budget_threshold_reached', label: 'Time Project Budget Threshold Reached', entity: 'time_project', category: 'lifecycle', clientBroadcast: true },\n  { id: 'staff.timesheets.project_access.requested', label: 'Time Project Access Requested', entity: 'time_project', category: 'lifecycle' },\n\n  // `clientBroadcast: true` above puts the event on the DOM Event Bridge, whose only\n  // audience filter is tenant + organization (`events/api/stream/route.ts`): every\n  // signed-in user of the organization receives the payload, with no feature check.\n  // So a broadcast payload MUST NOT carry a rate, a cost or an amount \u2014 money is\n  // gated on `staff.timesheets.rates.view` (staff/AGENTS.md), a gate SSE cannot\n  // apply. `time_report.closed` and `time_project.budget_threshold_reached` emit\n  // their money fields conditionally for exactly this reason; see their emitters.\n  //\n  // Money is not the only thing that audience decides. The same absence of a feature\n  // check is why `time_report.unlocked` broadcasts no `reason` \u2014 the operator's\n  // mandatory, free-text unlock justification, which lives on the audit row instead \u2014\n  // and why `time_report.closed` broadcasts no `customerId`.\n\n  // Time tracking (Phase 3) \u2014 transitions owned by the hand-rolled routes that sit\n  // beside the CRUD factory resources. Declared here so a third-party module can\n  // subscribe to a bulk grid save, a copy, a segment edit, an export or a settings\n  // change with the same contract the CRUD ids already offer.\n  { id: 'staff.timesheets.time_entry.bulk_updated', label: 'Time Entries Bulk Saved', entity: 'time_entry', category: 'lifecycle' },\n  { id: 'staff.timesheets.time_entry.copied', label: 'Time Entry Copied', entity: 'time_entry', category: 'lifecycle' },\n  { id: 'staff.timesheets.time_entry.locked', label: 'Time Entries Locked', entity: 'time_entry', category: 'lifecycle' },\n  { id: 'staff.timesheets.time_entry.unlocked', label: 'Time Entries Unlocked', entity: 'time_entry', category: 'lifecycle' },\n  { id: 'staff.timesheets.time_entry_segment.created', label: 'Time Entry Segment Created', entity: 'time_entry_segment', category: 'crud' },\n  { id: 'staff.timesheets.time_entry_segment.updated', label: 'Time Entry Segment Updated', entity: 'time_entry_segment', category: 'crud' },\n  { id: 'staff.timesheets.time_entry_segment.deleted', label: 'Time Entry Segment Deleted', entity: 'time_entry_segment', category: 'crud' },\n  { id: 'staff.timesheets.time_report.exported', label: 'Time Report Exported', entity: 'time_report', category: 'lifecycle' },\n  { id: 'staff.timesheets.time_project.currency_changed', label: 'Time Project Currency Changed', entity: 'time_project', category: 'lifecycle' },\n  { id: 'staff.timesheets.time_project_access.granted', label: 'Time Project Access Granted', entity: 'time_project', category: 'lifecycle' },\n  { id: 'staff.timesheets.time_project_access.denied', label: 'Time Project Access Denied', entity: 'time_project', category: 'lifecycle' },\n  { id: 'staff.timesheets.time_tracking.settings_updated', label: 'Time Tracking Settings Updated', entity: 'time_tracking', category: 'lifecycle' },\n  { id: 'staff.timesheets.time_tracking.rounding_reapplied', label: 'Time Tracking Rounding Reapplied', entity: 'time_tracking', category: 'lifecycle' },\n\n  // Time tracking (Phase 6) \u2014 the customer-portal bridge (EP-06 / EP-50).\n  //\n  // This is a SEPARATE id rather than `portalBroadcast: true` on\n  // `time_report.closed`, and the difference is a disclosure, not a style choice.\n  // The portal SSE stream (`customer_accounts/api/portal/events/stream.ts`)\n  // filters a broadcast by tenant + organization and narrows to specific people\n  // only when the payload carries `recipientUserId(s)`. One organization serves\n  // many customers, so flagging `time_report.closed` \u2014 which carries `reference`\n  // and the minute totals \u2014 would hand every client of the tenant a running feed\n  // of every other client's reports. `time_report.closed` also has\n  // `clientBroadcast: true` and a published webhook payload, so it cannot be\n  // narrowed without breaking its backoffice consumers.\n  //\n  // `subscribers/time-report-portal-broadcast.ts` is the only emitter: it pins\n  // `recipientUserIds` to the portal users of the report's own customer and does\n  // not emit at all when that list is empty \u2014 the rule\n  // `warranty_claims/AGENTS.md` states for its own portal event.\n  //\n  // Exports are deliberately not mirrored. An export changes nothing the portal\n  // renders; the portal reads the report, not the file.\n  {\n    id: 'staff.timesheets.time_report.portal_published',\n    label: 'Time Report Published To Portal',\n    entity: 'time_report',\n    category: 'lifecycle',\n    portalBroadcast: true,\n    excludeFromTriggers: true,\n  },\n] as const\n\nexport const eventsConfig = createModuleEvents({\n  moduleId: 'staff',\n  events,\n})\n\nexport const emitStaffEvent = eventsConfig.emit\n\nexport type StaffEventId = typeof events[number]['id']\n\nexport default eventsConfig\n"],
+  "mappings": "AAAA,SAAS,0BAA0B;AAEnC,MAAM,SAAS;AAAA,EACb,EAAE,IAAI,sBAAsB,OAAO,gBAAgB,QAAQ,QAAQ,UAAU,OAAO;AAAA,EACpF,EAAE,IAAI,sBAAsB,OAAO,gBAAgB,QAAQ,QAAQ,UAAU,OAAO;AAAA,EACpF,EAAE,IAAI,sBAAsB,OAAO,gBAAgB,QAAQ,QAAQ,UAAU,OAAO;AAAA,EACpF,EAAE,IAAI,2BAA2B,OAAO,qBAAqB,QAAQ,aAAa,UAAU,OAAO;AAAA,EACnG,EAAE,IAAI,2BAA2B,OAAO,qBAAqB,QAAQ,aAAa,UAAU,OAAO;AAAA,EACnG,EAAE,IAAI,2BAA2B,OAAO,qBAAqB,QAAQ,aAAa,UAAU,OAAO;AAAA,EACnG,EAAE,IAAI,6BAA6B,OAAO,uBAAuB,QAAQ,eAAe,UAAU,OAAO;AAAA,EACzG,EAAE,IAAI,6BAA6B,OAAO,uBAAuB,QAAQ,eAAe,UAAU,OAAO;AAAA,EACzG,EAAE,IAAI,6BAA6B,OAAO,uBAAuB,QAAQ,eAAe,UAAU,OAAO;AAAA,EACzG,EAAE,IAAI,+BAA+B,OAAO,yBAAyB,QAAQ,iBAAiB,UAAU,OAAO;AAAA,EAC/G,EAAE,IAAI,+BAA+B,OAAO,yBAAyB,QAAQ,iBAAiB,UAAU,OAAO;AAAA,EAC/G,EAAE,IAAI,+BAA+B,OAAO,yBAAyB,QAAQ,iBAAiB,UAAU,OAAO;AAAA,EAC/G,EAAE,IAAI,yBAAyB,OAAO,yBAAyB,QAAQ,WAAW,UAAU,OAAO;AAAA,EACnG,EAAE,IAAI,yBAAyB,OAAO,yBAAyB,QAAQ,WAAW,UAAU,OAAO;AAAA,EACnG,EAAE,IAAI,yBAAyB,OAAO,yBAAyB,QAAQ,WAAW,UAAU,OAAO;AAAA,EACnG,EAAE,IAAI,yBAAyB,OAAO,yBAAyB,QAAQ,WAAW,UAAU,OAAO;AAAA,EACnG,EAAE,IAAI,yBAAyB,OAAO,yBAAyB,QAAQ,WAAW,UAAU,OAAO;AAAA,EACnG,EAAE,IAAI,yBAAyB,OAAO,yBAAyB,QAAQ,WAAW,UAAU,OAAO;AAAA,EACnG,EAAE,IAAI,0BAA0B,OAAO,0BAA0B,QAAQ,YAAY,UAAU,OAAO;AAAA,EACtG,EAAE,IAAI,0BAA0B,OAAO,0BAA0B,QAAQ,YAAY,UAAU,OAAO;AAAA,EACtG,EAAE,IAAI,0BAA0B,OAAO,0BAA0B,QAAQ,YAAY,UAAU,OAAO;AAAA,EACtG,EAAE,IAAI,6BAA6B,OAAO,uBAAuB,QAAQ,eAAe,UAAU,OAAO;AAAA,EACzG,EAAE,IAAI,6BAA6B,OAAO,uBAAuB,QAAQ,eAAe,UAAU,OAAO;AAAA,EACzG,EAAE,IAAI,6BAA6B,OAAO,uBAAuB,QAAQ,eAAe,UAAU,OAAO;AAAA;AAAA,EAGzG,EAAE,IAAI,uCAAuC,OAAO,sBAAsB,QAAQ,cAAc,UAAU,QAAQ,iBAAiB,KAAK;AAAA,EACxI,EAAE,IAAI,uCAAuC,OAAO,sBAAsB,QAAQ,cAAc,UAAU,QAAQ,iBAAiB,KAAK;AAAA,EACxI,EAAE,IAAI,uCAAuC,OAAO,sBAAsB,QAAQ,cAAc,UAAU,QAAQ,iBAAiB,KAAK;AAAA,EACxI,EAAE,IAAI,6CAA6C,OAAO,iBAAiB,QAAQ,cAAc,UAAU,aAAa,iBAAiB,KAAK;AAAA,EAC9I,EAAE,IAAI,6CAA6C,OAAO,iBAAiB,QAAQ,cAAc,UAAU,aAAa,iBAAiB,KAAK;AAAA,EAC9I,EAAE,IAAI,yCAAyC,OAAO,wBAAwB,QAAQ,gBAAgB,UAAU,OAAO;AAAA,EACvH,EAAE,IAAI,yCAAyC,OAAO,wBAAwB,QAAQ,gBAAgB,UAAU,OAAO;AAAA,EACvH,EAAE,IAAI,yCAAyC,OAAO,wBAAwB,QAAQ,gBAAgB,UAAU,OAAO;AAAA,EACvH,EAAE,IAAI,gDAAgD,OAAO,gCAAgC,QAAQ,uBAAuB,UAAU,OAAO;AAAA,EAC7I,EAAE,IAAI,gDAAgD,OAAO,+BAA+B,QAAQ,uBAAuB,UAAU,OAAO;AAAA,EAC5I,EAAE,IAAI,gDAAgD,OAAO,kCAAkC,QAAQ,uBAAuB,UAAU,OAAO;AAAA;AAAA,EAG/I,EAAE,IAAI,sCAAsC,OAAO,qBAAqB,QAAQ,aAAa,UAAU,OAAO;AAAA,EAC9G,EAAE,IAAI,sCAAsC,OAAO,qBAAqB,QAAQ,aAAa,UAAU,OAAO;AAAA,EAC9G,EAAE,IAAI,sCAAsC,OAAO,qBAAqB,QAAQ,aAAa,UAAU,OAAO;AAAA,EAC9G,EAAE,IAAI,6CAA6C,OAAO,4BAA4B,QAAQ,aAAa,UAAU,aAAa,iBAAiB,KAAK;AAAA,EACxJ,EAAE,IAAI,6CAA6C,OAAO,4BAA4B,QAAQ,oBAAoB,UAAU,OAAO;AAAA,EACnI,EAAE,IAAI,6CAA6C,OAAO,4BAA4B,QAAQ,oBAAoB,UAAU,OAAO;AAAA,EACnI,EAAE,IAAI,6CAA6C,OAAO,4BAA4B,QAAQ,oBAAoB,UAAU,OAAO;AAAA,EACnI,EAAE,IAAI,qCAAqC,OAAO,oBAAoB,QAAQ,YAAY,UAAU,OAAO;AAAA,EAC3G,EAAE,IAAI,qCAAqC,OAAO,oBAAoB,QAAQ,YAAY,UAAU,OAAO;AAAA,EAC3G,EAAE,IAAI,qCAAqC,OAAO,oBAAoB,QAAQ,YAAY,UAAU,OAAO;AAAA,EAC3G,EAAE,IAAI,8CAA8C,OAAO,6BAA6B,QAAQ,qBAAqB,UAAU,OAAO;AAAA,EACtI,EAAE,IAAI,8CAA8C,OAAO,6BAA6B,QAAQ,qBAAqB,UAAU,OAAO;AAAA,EACtI,EAAE,IAAI,8CAA8C,OAAO,6BAA6B,QAAQ,qBAAqB,UAAU,OAAO;AAAA,EACtI,EAAE,IAAI,wCAAwC,OAAO,uBAAuB,QAAQ,eAAe,UAAU,OAAO;AAAA,EACpH,EAAE,IAAI,wCAAwC,OAAO,uBAAuB,QAAQ,eAAe,UAAU,OAAO;AAAA,EACpH,EAAE,IAAI,wCAAwC,OAAO,uBAAuB,QAAQ,eAAe,UAAU,OAAO;AAAA,EACpH,EAAE,IAAI,uCAAuC,OAAO,sBAAsB,QAAQ,eAAe,UAAU,aAAa,iBAAiB,KAAK;AAAA,EAC9I,EAAE,IAAI,yCAAyC,OAAO,wBAAwB,QAAQ,eAAe,UAAU,aAAa,iBAAiB,KAAK;AAAA,EAClJ,EAAE,IAAI,0DAA0D,OAAO,yCAAyC,QAAQ,gBAAgB,UAAU,aAAa,iBAAiB,KAAK;AAAA,EACrL,EAAE,IAAI,6CAA6C,OAAO,iCAAiC,QAAQ,gBAAgB,UAAU,YAAY;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAmBzI,EAAE,IAAI,4CAA4C,OAAO,2BAA2B,QAAQ,cAAc,UAAU,YAAY;AAAA,EAChI,EAAE,IAAI,sCAAsC,OAAO,qBAAqB,QAAQ,cAAc,UAAU,YAAY;AAAA,EACpH,EAAE,IAAI,sCAAsC,OAAO,uBAAuB,QAAQ,cAAc,UAAU,YAAY;AAAA,EACtH,EAAE,IAAI,wCAAwC,OAAO,yBAAyB,QAAQ,cAAc,UAAU,YAAY;AAAA,EAC1H,EAAE,IAAI,+CAA+C,OAAO,8BAA8B,QAAQ,sBAAsB,UAAU,OAAO;AAAA,EACzI,EAAE,IAAI,+CAA+C,OAAO,8BAA8B,QAAQ,sBAAsB,UAAU,OAAO;AAAA,EACzI,EAAE,IAAI,+CAA+C,OAAO,8BAA8B,QAAQ,sBAAsB,UAAU,OAAO;AAAA,EACzI,EAAE,IAAI,yCAAyC,OAAO,wBAAwB,QAAQ,eAAe,UAAU,YAAY;AAAA,EAC3H,EAAE,IAAI,kDAAkD,OAAO,iCAAiC,QAAQ,gBAAgB,UAAU,YAAY;AAAA,EAC9I,EAAE,IAAI,gDAAgD,OAAO,+BAA+B,QAAQ,gBAAgB,UAAU,YAAY;AAAA,EAC1I,EAAE,IAAI,+CAA+C,OAAO,8BAA8B,QAAQ,gBAAgB,UAAU,YAAY;AAAA,EACxI,EAAE,IAAI,mDAAmD,OAAO,kCAAkC,QAAQ,iBAAiB,UAAU,YAAY;AAAA,EACjJ,EAAE,IAAI,qDAAqD,OAAO,oCAAoC,QAAQ,iBAAiB,UAAU,YAAY;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAsBrJ;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,iBAAiB;AAAA,IACjB,qBAAqB;AAAA,EACvB;AACF;AAEO,MAAM,eAAe,mBAAmB;AAAA,EAC7C,UAAU;AAAA,EACV;AACF,CAAC;AAEM,MAAM,iBAAiB,aAAa;AAI3C,IAAO,iBAAQ;",
   "names": []
 }

package/dist/modules/staff/events.payloads.js

@@ -0,0 +1,158 @@
+import { z } from "zod";
+const scope = z.object({
+  tenantId: z.string(),
+  organizationId: z.string().nullable().optional()
+});
+const crudPayload = scope.extend({ id: z.string() }).passthrough();
+const timerStarted = scope.extend({
+  id: z.string(),
+  staffMemberId: z.string().nullable(),
+  startedAt: z.string()
+}).passthrough();
+const timerStopped = scope.extend({
+  id: z.string(),
+  staffMemberId: z.string().nullable(),
+  stoppedAt: z.string(),
+  durationMinutes: z.number()
+}).passthrough();
+const entryBulkUpdated = scope.extend({
+  staffMemberId: z.string(),
+  created: z.number(),
+  updated: z.number(),
+  deleted: z.number(),
+  entryIds: z.array(z.string())
+}).passthrough();
+const entryCopied = scope.extend({
+  id: z.string(),
+  sourceId: z.string(),
+  staffMemberId: z.string().optional(),
+  date: z.string().optional()
+}).passthrough();
+const entryLockToggled = scope.extend({
+  reportId: z.string()
+}).passthrough();
+const segmentPayload = scope.extend({
+  id: z.string(),
+  timeEntryId: z.string()
+}).passthrough();
+const taskStatusChanged = scope.extend({
+  id: z.string(),
+  taskId: z.string().optional(),
+  timeProjectId: z.string().optional(),
+  previousTaskStatusId: z.string().nullable().optional(),
+  taskStatusId: z.string().optional()
+}).passthrough();
+const reportClosed = scope.extend({
+  id: z.string(),
+  reportId: z.string(),
+  reference: z.string(),
+  lockedEntryCount: z.number(),
+  totalBillableMinutes: z.number(),
+  totalNonbillableMinutes: z.number()
+}).passthrough();
+const reportUnlocked = scope.extend({
+  id: z.string(),
+  reference: z.string(),
+  actorUserId: z.string().nullable(),
+  unlockedEntryCount: z.number()
+}).passthrough();
+const reportExported = scope.extend({
+  id: z.string(),
+  reference: z.string(),
+  format: z.string(),
+  grouping: z.string(),
+  rowCount: z.number()
+}).passthrough();
+const reportPortalPublished = scope.extend({
+  id: z.string(),
+  reference: z.string(),
+  periodFrom: z.string(),
+  periodTo: z.string(),
+  /**
+   * The portal SSE stream narrows a broadcast to these customer-user ids. The
+   * emitter never publishes this event with an empty list, so a report can only
+   * ever reach the portal users of its own customer.
+   */
+  recipientUserIds: z.array(z.string()).min(1)
+}).passthrough();
+const projectCurrencyChanged = scope.extend({
+  id: z.string(),
+  currencyCode: z.string(),
+  previousCurrencyCode: z.string().nullable(),
+  converted: z.boolean()
+}).passthrough();
+const budgetThresholdReached = scope.extend({
+  id: z.string(),
+  timeProjectId: z.string(),
+  thresholdPercent: z.number(),
+  percent: z.number().nullable(),
+  budgetKind: z.string(),
+  /** Present only for an `hours` budget — an `amount` budget states money. */
+  budgetValue: z.number().nullable().optional(),
+  /** Present only for an `hours` budget — see `budgetValue`. */
+  usedValue: z.number().nullable().optional()
+}).passthrough();
+const projectAccessRequested = scope.extend({
+  requesterUserId: z.string(),
+  requesterName: z.string(),
+  timeProjectId: z.string().nullable(),
+  timeProjectName: z.string().nullable(),
+  requestedAt: z.string()
+}).passthrough();
+const projectAccessDecision = scope.extend({ id: z.string() }).passthrough();
+const settingsUpdated = scope.extend({ settings: z.record(z.string(), z.unknown()) }).passthrough();
+const roundingReapplied = scope.extend({
+  progressJobId: z.string(),
+  candidateCount: z.number()
+}).passthrough();
+const staffTimeTrackingEventPayloadSchemas = {
+  "staff.timesheets.time_entry.created": crudPayload,
+  "staff.timesheets.time_entry.updated": crudPayload,
+  "staff.timesheets.time_entry.deleted": crudPayload,
+  "staff.timesheets.time_entry.timer_started": timerStarted,
+  "staff.timesheets.time_entry.timer_stopped": timerStopped,
+  "staff.timesheets.time_entry.bulk_updated": entryBulkUpdated,
+  "staff.timesheets.time_entry.copied": entryCopied,
+  "staff.timesheets.time_entry.locked": entryLockToggled,
+  "staff.timesheets.time_entry.unlocked": entryLockToggled,
+  "staff.timesheets.time_entry_segment.created": segmentPayload,
+  "staff.timesheets.time_entry_segment.updated": segmentPayload,
+  "staff.timesheets.time_entry_segment.deleted": segmentPayload,
+  "staff.timesheets.time_project.created": crudPayload,
+  "staff.timesheets.time_project.updated": crudPayload,
+  "staff.timesheets.time_project.deleted": crudPayload,
+  "staff.timesheets.time_project.currency_changed": projectCurrencyChanged,
+  "staff.timesheets.time_project.budget_threshold_reached": budgetThresholdReached,
+  "staff.timesheets.time_project_member.created": crudPayload,
+  "staff.timesheets.time_project_member.updated": crudPayload,
+  "staff.timesheets.time_project_member.deleted": crudPayload,
+  "staff.timesheets.time_project_access.granted": projectAccessDecision,
+  "staff.timesheets.time_project_access.denied": projectAccessDecision,
+  "staff.timesheets.project_access.requested": projectAccessRequested,
+  "staff.timesheets.time_task.created": crudPayload,
+  "staff.timesheets.time_task.updated": crudPayload,
+  "staff.timesheets.time_task.deleted": crudPayload,
+  "staff.timesheets.time_task.status_changed": taskStatusChanged,
+  "staff.timesheets.time_task_status.created": crudPayload,
+  "staff.timesheets.time_task_status.updated": crudPayload,
+  "staff.timesheets.time_task_status.deleted": crudPayload,
+  "staff.timesheets.time_tag.created": crudPayload,
+  "staff.timesheets.time_tag.updated": crudPayload,
+  "staff.timesheets.time_tag.deleted": crudPayload,
+  "staff.timesheets.time_task_comment.created": crudPayload,
+  "staff.timesheets.time_task_comment.updated": crudPayload,
+  "staff.timesheets.time_task_comment.deleted": crudPayload,
+  "staff.timesheets.time_report.created": crudPayload,
+  "staff.timesheets.time_report.updated": crudPayload,
+  "staff.timesheets.time_report.deleted": crudPayload,
+  "staff.timesheets.time_report.closed": reportClosed,
+  "staff.timesheets.time_report.unlocked": reportUnlocked,
+  "staff.timesheets.time_report.exported": reportExported,
+  "staff.timesheets.time_report.portal_published": reportPortalPublished,
+  "staff.timesheets.time_tracking.settings_updated": settingsUpdated,
+  "staff.timesheets.time_tracking.rounding_reapplied": roundingReapplied
+};
+export {
+  staffTimeTrackingEventPayloadSchemas
+};
+//# sourceMappingURL=events.payloads.js.map

package/dist/modules/staff/events.payloads.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/modules/staff/events.payloads.ts"],
+  "sourcesContent": ["/**\n * Payload contracts for the `staff.timesheets.*` event family.\n *\n * **Why this file exists.** Outbound webhooks in this platform are not registered\n * per event: `packages/webhooks` subscribes once with `event: '*'`\n * (`subscribers/outbound-dispatch.ts`) and matches each emitted id against the\n * patterns a webhook endpoint subscribed to, so declaring an event in `events.ts`\n * IS its registration \u2014 it appears in `GET /api/webhooks/events` and is deliverable\n * from that moment (`packages/webhooks/AGENTS.md` \u2192 \"When You Need Outbound\n * Webhooks\", step 1). Two properties decide whether a declared event actually\n * reaches an endpoint, and neither is checked anywhere else:\n *\n *  1. the dispatcher drops any payload without a `tenantId` \u2014 it cannot resolve a\n *     webhook without one, so an event emitted without tenant scope is silently\n *     undeliverable;\n *  2. the delivered body IS the event payload, verbatim, so the payload is the\n *     integration contract an external billing or PM system codes against.\n *\n * The webhooks package has no payload-schema registry to register with, so these\n * schemas are that contract, published here and pinned by\n * `__tests__/timeTrackingEventPayloads.test.ts`: every declared `staff.timesheets.*`\n * id must appear below, and every schema must require `tenantId`.\n *\n * Each schema is `passthrough()`: the listed keys are what a subscriber may rely on,\n * additional keys are allowed so a later emitter can add one without breaking a\n * consumer that validates against this schema.\n *\n * Money note: `time_report.closed` carries minute totals but no amount, and\n * `time_project.budget_threshold_reached` carries an `amount` budget's value only\n * when the budget is measured in hours. Both events are `clientBroadcast: true` and\n * the DOM Event Bridge has no feature gate, so the amounts are withheld from the\n * payload itself rather than from one of its two audiences.\n *\n * Money is not the only thing that audience decides. A `clientBroadcast: true`\n * payload must also carry no operator free text and no customer identity: SSE\n * reaches every signed-in user of the organization, so `time_report.unlocked` omits\n * its mandatory `reason` and `time_report.closed` omits `customerId`.\n * `__tests__/timeTrackingEventPayloads.test.ts` fails if either reappears.\n */\n\nimport { z } from 'zod'\n\nconst scope = z.object({\n  tenantId: z.string(),\n  organizationId: z.string().nullable().optional(),\n})\n\n/** The `{ id, tenantId, organizationId }` shape every CRUD lifecycle event carries. */\nconst crudPayload = scope.extend({ id: z.string() }).passthrough()\n\nconst timerStarted = scope\n  .extend({\n    id: z.string(),\n    staffMemberId: z.string().nullable(),\n    startedAt: z.string(),\n  })\n  .passthrough()\n\nconst timerStopped = scope\n  .extend({\n    id: z.string(),\n    staffMemberId: z.string().nullable(),\n    stoppedAt: z.string(),\n    durationMinutes: z.number(),\n  })\n  .passthrough()\n\nconst entryBulkUpdated = scope\n  .extend({\n    staffMemberId: z.string(),\n    created: z.number(),\n    updated: z.number(),\n    deleted: z.number(),\n    entryIds: z.array(z.string()),\n  })\n  .passthrough()\n\n/** `sourceId` is the entry the copy was made from; `date` only on the copy-day path. */\nconst entryCopied = scope\n  .extend({\n    id: z.string(),\n    sourceId: z.string(),\n    staffMemberId: z.string().optional(),\n    date: z.string().optional(),\n  })\n  .passthrough()\n\n/** Batch-level: a report freeze/unfreeze names the report, never one entry. */\nconst entryLockToggled = scope\n  .extend({\n    reportId: z.string(),\n  })\n  .passthrough()\n\nconst segmentPayload = scope\n  .extend({\n    id: z.string(),\n    timeEntryId: z.string(),\n  })\n  .passthrough()\n\nconst taskStatusChanged = scope\n  .extend({\n    id: z.string(),\n    taskId: z.string().optional(),\n    timeProjectId: z.string().optional(),\n    previousTaskStatusId: z.string().nullable().optional(),\n    taskStatusId: z.string().optional(),\n  })\n  .passthrough()\n\n/**\n * No `customerId`: the event is `clientBroadcast: true` and the DOM Event Bridge\n * applies no feature check, so the one field linking a report to a named client is\n * withheld from the payload rather than from one of its two audiences \u2014 the same\n * trade the amount already makes. The emitter documents the field-by-field call.\n */\nconst reportClosed = scope\n  .extend({\n    id: z.string(),\n    reportId: z.string(),\n    reference: z.string(),\n    lockedEntryCount: z.number(),\n    totalBillableMinutes: z.number(),\n    totalNonbillableMinutes: z.number(),\n  })\n  .passthrough()\n\n/**\n * No `reason`: unlocking demands a written justification of up to 2000 characters,\n * and this event reaches every browser in the organization with no feature check.\n * The prose lives on the `StaffTimeReportEvent` audit row, behind the ACL.\n */\nconst reportUnlocked = scope\n  .extend({\n    id: z.string(),\n    reference: z.string(),\n    actorUserId: z.string().nullable(),\n    unlockedEntryCount: z.number(),\n  })\n  .passthrough()\n\nconst reportExported = scope\n  .extend({\n    id: z.string(),\n    reference: z.string(),\n    format: z.string(),\n    grouping: z.string(),\n    rowCount: z.number(),\n  })\n  .passthrough()\n\nconst reportPortalPublished = scope\n  .extend({\n    id: z.string(),\n    reference: z.string(),\n    periodFrom: z.string(),\n    periodTo: z.string(),\n    /**\n     * The portal SSE stream narrows a broadcast to these customer-user ids. The\n     * emitter never publishes this event with an empty list, so a report can only\n     * ever reach the portal users of its own customer.\n     */\n    recipientUserIds: z.array(z.string()).min(1),\n  })\n  .passthrough()\n\nconst projectCurrencyChanged = scope\n  .extend({\n    id: z.string(),\n    currencyCode: z.string(),\n    previousCurrencyCode: z.string().nullable(),\n    converted: z.boolean(),\n  })\n  .passthrough()\n\nconst budgetThresholdReached = scope\n  .extend({\n    id: z.string(),\n    timeProjectId: z.string(),\n    thresholdPercent: z.number(),\n    percent: z.number().nullable(),\n    budgetKind: z.string(),\n    /** Present only for an `hours` budget \u2014 an `amount` budget states money. */\n    budgetValue: z.number().nullable().optional(),\n    /** Present only for an `hours` budget \u2014 see `budgetValue`. */\n    usedValue: z.number().nullable().optional(),\n  })\n  .passthrough()\n\nconst projectAccessRequested = scope\n  .extend({\n    requesterUserId: z.string(),\n    requesterName: z.string(),\n    timeProjectId: z.string().nullable(),\n    timeProjectName: z.string().nullable(),\n    requestedAt: z.string(),\n  })\n  .passthrough()\n\nconst projectAccessDecision = scope.extend({ id: z.string() }).passthrough()\n\nconst settingsUpdated = scope.extend({ settings: z.record(z.string(), z.unknown()) }).passthrough()\n\nconst roundingReapplied = scope\n  .extend({\n    progressJobId: z.string(),\n    candidateCount: z.number(),\n  })\n  .passthrough()\n\n/**\n * Every declared `staff.timesheets.*` event id and the payload a webhook endpoint\n * subscribed to it receives.\n */\nexport const staffTimeTrackingEventPayloadSchemas = {\n  'staff.timesheets.time_entry.created': crudPayload,\n  'staff.timesheets.time_entry.updated': crudPayload,\n  'staff.timesheets.time_entry.deleted': crudPayload,\n  'staff.timesheets.time_entry.timer_started': timerStarted,\n  'staff.timesheets.time_entry.timer_stopped': timerStopped,\n  'staff.timesheets.time_entry.bulk_updated': entryBulkUpdated,\n  'staff.timesheets.time_entry.copied': entryCopied,\n  'staff.timesheets.time_entry.locked': entryLockToggled,\n  'staff.timesheets.time_entry.unlocked': entryLockToggled,\n  'staff.timesheets.time_entry_segment.created': segmentPayload,\n  'staff.timesheets.time_entry_segment.updated': segmentPayload,\n  'staff.timesheets.time_entry_segment.deleted': segmentPayload,\n  'staff.timesheets.time_project.created': crudPayload,\n  'staff.timesheets.time_project.updated': crudPayload,\n  'staff.timesheets.time_project.deleted': crudPayload,\n  'staff.timesheets.time_project.currency_changed': projectCurrencyChanged,\n  'staff.timesheets.time_project.budget_threshold_reached': budgetThresholdReached,\n  'staff.timesheets.time_project_member.created': crudPayload,\n  'staff.timesheets.time_project_member.updated': crudPayload,\n  'staff.timesheets.time_project_member.deleted': crudPayload,\n  'staff.timesheets.time_project_access.granted': projectAccessDecision,\n  'staff.timesheets.time_project_access.denied': projectAccessDecision,\n  'staff.timesheets.project_access.requested': projectAccessRequested,\n  'staff.timesheets.time_task.created': crudPayload,\n  'staff.timesheets.time_task.updated': crudPayload,\n  'staff.timesheets.time_task.deleted': crudPayload,\n  'staff.timesheets.time_task.status_changed': taskStatusChanged,\n  'staff.timesheets.time_task_status.created': crudPayload,\n  'staff.timesheets.time_task_status.updated': crudPayload,\n  'staff.timesheets.time_task_status.deleted': crudPayload,\n  'staff.timesheets.time_tag.created': crudPayload,\n  'staff.timesheets.time_tag.updated': crudPayload,\n  'staff.timesheets.time_tag.deleted': crudPayload,\n  'staff.timesheets.time_task_comment.created': crudPayload,\n  'staff.timesheets.time_task_comment.updated': crudPayload,\n  'staff.timesheets.time_task_comment.deleted': crudPayload,\n  'staff.timesheets.time_report.created': crudPayload,\n  'staff.timesheets.time_report.updated': crudPayload,\n  'staff.timesheets.time_report.deleted': crudPayload,\n  'staff.timesheets.time_report.closed': reportClosed,\n  'staff.timesheets.time_report.unlocked': reportUnlocked,\n  'staff.timesheets.time_report.exported': reportExported,\n  'staff.timesheets.time_report.portal_published': reportPortalPublished,\n  'staff.timesheets.time_tracking.settings_updated': settingsUpdated,\n  'staff.timesheets.time_tracking.rounding_reapplied': roundingReapplied,\n} as const\n\nexport type StaffTimeTrackingEventId = keyof typeof staffTimeTrackingEventPayloadSchemas\n\nexport type StaffTimeTrackingEventPayload<TEventId extends StaffTimeTrackingEventId> = z.infer<\n  typeof staffTimeTrackingEventPayloadSchemas[TEventId]\n>\n"],
+  "mappings": "AAwCA,SAAS,SAAS;AAElB,MAAM,QAAQ,EAAE,OAAO;AAAA,EACrB,UAAU,EAAE,OAAO;AAAA,EACnB,gBAAgB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AACjD,CAAC;AAGD,MAAM,cAAc,MAAM,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,YAAY;AAEjE,MAAM,eAAe,MAClB,OAAO;AAAA,EACN,IAAI,EAAE,OAAO;AAAA,EACb,eAAe,EAAE,OAAO,EAAE,SAAS;AAAA,EACnC,WAAW,EAAE,OAAO;AACtB,CAAC,EACA,YAAY;AAEf,MAAM,eAAe,MAClB,OAAO;AAAA,EACN,IAAI,EAAE,OAAO;AAAA,EACb,eAAe,EAAE,OAAO,EAAE,SAAS;AAAA,EACnC,WAAW,EAAE,OAAO;AAAA,EACpB,iBAAiB,EAAE,OAAO;AAC5B,CAAC,EACA,YAAY;AAEf,MAAM,mBAAmB,MACtB,OAAO;AAAA,EACN,eAAe,EAAE,OAAO;AAAA,EACxB,SAAS,EAAE,OAAO;AAAA,EAClB,SAAS,EAAE,OAAO;AAAA,EAClB,SAAS,EAAE,OAAO;AAAA,EAClB,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC;AAC9B,CAAC,EACA,YAAY;AAGf,MAAM,cAAc,MACjB,OAAO;AAAA,EACN,IAAI,EAAE,OAAO;AAAA,EACb,UAAU,EAAE,OAAO;AAAA,EACnB,eAAe,EAAE,OAAO,EAAE,SAAS;AAAA,EACnC,MAAM,EAAE,OAAO,EAAE,SAAS;AAC5B,CAAC,EACA,YAAY;AAGf,MAAM,mBAAmB,MACtB,OAAO;AAAA,EACN,UAAU,EAAE,OAAO;AACrB,CAAC,EACA,YAAY;AAEf,MAAM,iBAAiB,MACpB,OAAO;AAAA,EACN,IAAI,EAAE,OAAO;AAAA,EACb,aAAa,EAAE,OAAO;AACxB,CAAC,EACA,YAAY;AAEf,MAAM,oBAAoB,MACvB,OAAO;AAAA,EACN,IAAI,EAAE,OAAO;AAAA,EACb,QAAQ,EAAE,OAAO,EAAE,SAAS;AAAA,EAC5B,eAAe,EAAE,OAAO,EAAE,SAAS;AAAA,EACnC,sBAAsB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACrD,cAAc,EAAE,OAAO,EAAE,SAAS;AACpC,CAAC,EACA,YAAY;AAQf,MAAM,eAAe,MAClB,OAAO;AAAA,EACN,IAAI,EAAE,OAAO;AAAA,EACb,UAAU,EAAE,OAAO;AAAA,EACnB,WAAW,EAAE,OAAO;AAAA,EACpB,kBAAkB,EAAE,OAAO;AAAA,EAC3B,sBAAsB,EAAE,OAAO;AAAA,EAC/B,yBAAyB,EAAE,OAAO;AACpC,CAAC,EACA,YAAY;AAOf,MAAM,iBAAiB,MACpB,OAAO;AAAA,EACN,IAAI,EAAE,OAAO;AAAA,EACb,WAAW,EAAE,OAAO;AAAA,EACpB,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,EACjC,oBAAoB,EAAE,OAAO;AAC/B,CAAC,EACA,YAAY;AAEf,MAAM,iBAAiB,MACpB,OAAO;AAAA,EACN,IAAI,EAAE,OAAO;AAAA,EACb,WAAW,EAAE,OAAO;AAAA,EACpB,QAAQ,EAAE,OAAO;AAAA,EACjB,UAAU,EAAE,OAAO;AAAA,EACnB,UAAU,EAAE,OAAO;AACrB,CAAC,EACA,YAAY;AAEf,MAAM,wBAAwB,MAC3B,OAAO;AAAA,EACN,IAAI,EAAE,OAAO;AAAA,EACb,WAAW,EAAE,OAAO;AAAA,EACpB,YAAY,EAAE,OAAO;AAAA,EACrB,UAAU,EAAE,OAAO;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMnB,kBAAkB,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,IAAI,CAAC;AAC7C,CAAC,EACA,YAAY;AAEf,MAAM,yBAAyB,MAC5B,OAAO;AAAA,EACN,IAAI,EAAE,OAAO;AAAA,EACb,cAAc,EAAE,OAAO;AAAA,EACvB,sBAAsB,EAAE,OAAO,EAAE,SAAS;AAAA,EAC1C,WAAW,EAAE,QAAQ;AACvB,CAAC,EACA,YAAY;AAEf,MAAM,yBAAyB,MAC5B,OAAO;AAAA,EACN,IAAI,EAAE,OAAO;AAAA,EACb,eAAe,EAAE,OAAO;AAAA,EACxB,kBAAkB,EAAE,OAAO;AAAA,EAC3B,SAAS,EAAE,OAAO,EAAE,SAAS;AAAA,EAC7B,YAAY,EAAE,OAAO;AAAA;AAAA,EAErB,aAAa,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA;AAAA,EAE5C,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAC5C,CAAC,EACA,YAAY;AAEf,MAAM,yBAAyB,MAC5B,OAAO;AAAA,EACN,iBAAiB,EAAE,OAAO;AAAA,EAC1B,eAAe,EAAE,OAAO;AAAA,EACxB,eAAe,EAAE,OAAO,EAAE,SAAS;AAAA,EACnC,iBAAiB,EAAE,OAAO,EAAE,SAAS;AAAA,EACrC,aAAa,EAAE,OAAO;AACxB,CAAC,EACA,YAAY;AAEf,MAAM,wBAAwB,MAAM,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,YAAY;AAE3E,MAAM,kBAAkB,MAAM,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,CAAC,EAAE,YAAY;AAElG,MAAM,oBAAoB,MACvB,OAAO;AAAA,EACN,eAAe,EAAE,OAAO;AAAA,EACxB,gBAAgB,EAAE,OAAO;AAC3B,CAAC,EACA,YAAY;AAMR,MAAM,uCAAuC;AAAA,EAClD,uCAAuC;AAAA,EACvC,uCAAuC;AAAA,EACvC,uCAAuC;AAAA,EACvC,6CAA6C;AAAA,EAC7C,6CAA6C;AAAA,EAC7C,4CAA4C;AAAA,EAC5C,sCAAsC;AAAA,EACtC,sCAAsC;AAAA,EACtC,wCAAwC;AAAA,EACxC,+CAA+C;AAAA,EAC/C,+CAA+C;AAAA,EAC/C,+CAA+C;AAAA,EAC/C,yCAAyC;AAAA,EACzC,yCAAyC;AAAA,EACzC,yCAAyC;AAAA,EACzC,kDAAkD;AAAA,EAClD,0DAA0D;AAAA,EAC1D,gDAAgD;AAAA,EAChD,gDAAgD;AAAA,EAChD,gDAAgD;AAAA,EAChD,gDAAgD;AAAA,EAChD,+CAA+C;AAAA,EAC/C,6CAA6C;AAAA,EAC7C,sCAAsC;AAAA,EACtC,sCAAsC;AAAA,EACtC,sCAAsC;AAAA,EACtC,6CAA6C;AAAA,EAC7C,6CAA6C;AAAA,EAC7C,6CAA6C;AAAA,EAC7C,6CAA6C;AAAA,EAC7C,qCAAqC;AAAA,EACrC,qCAAqC;AAAA,EACrC,qCAAqC;AAAA,EACrC,8CAA8C;AAAA,EAC9C,8CAA8C;AAAA,EAC9C,8CAA8C;AAAA,EAC9C,wCAAwC;AAAA,EACxC,wCAAwC;AAAA,EACxC,wCAAwC;AAAA,EACxC,uCAAuC;AAAA,EACvC,yCAAyC;AAAA,EACzC,yCAAyC;AAAA,EACzC,iDAAiD;AAAA,EACjD,mDAAmD;AAAA,EACnD,qDAAqD;AACvD;",
+  "names": []
+}

package/dist/modules/staff/extension-points.js

@@ -0,0 +1,261 @@
+import {
+  componentExtensionHost,
+  crudFormExtensionHost,
+  dataTableExtensionHost,
+  defineModuleExtensionPoints,
+  injectionExtensionHost
+} from "@open-mercato/shared/modules/widgets/extension-points";
+const detailHost = (spotId, source) => injectionExtensionHost({
+  family: "detail",
+  spotId,
+  supported: ["render-widget"],
+  contextContract: "staff.time_tracking.detail.v1",
+  scopeContract: "tenant+organization",
+  source
+});
+const pageHost = (spotId, source) => injectionExtensionHost({
+  family: "generic",
+  spotId,
+  supported: ["render-widget"],
+  contextContract: "staff.time_tracking.page.v1",
+  scopeContract: "tenant+organization",
+  source
+});
+const registryHost = (spotId, source, contextContract, builtInId) => injectionExtensionHost({
+  family: "specialized-registry",
+  spotId,
+  supported: ["registry-contribution"],
+  contextContract,
+  scopeContract: "tenant+organization",
+  runtimeContract: builtInId,
+  source
+});
+const extensionPoints = defineModuleExtensionPoints({
+  moduleId: "staff",
+  hosts: {
+    timeEntriesTable: dataTableExtensionHost({
+      tableId: "staff.time_entries.list",
+      source: "backend/staff/time-tracking/entries/page.tsx"
+    }),
+    timeProjectsTable: dataTableExtensionHost({
+      tableId: "staff.time_projects.list",
+      source: "backend/staff/time-tracking/projects/page.tsx"
+    }),
+    timeReportsTable: dataTableExtensionHost({
+      tableId: "staff.time_reports.list",
+      source: "backend/staff/time-tracking/reports/page.tsx"
+    }),
+    projectForm: crudFormExtensionHost({
+      entityId: "staff.staff_time_project",
+      spotId: "crud-form:staff.staff_time_project",
+      source: "backend/staff/time-tracking/projects/create/page.tsx"
+    }),
+    timeEntryForm: crudFormExtensionHost({
+      entityId: "staff.staff_time_entry",
+      spotId: "crud-form:staff.staff_time_entry",
+      source: "lib/time-tracking-ui/TimeEntryDialog.tsx"
+    }),
+    taskForm: crudFormExtensionHost({
+      entityId: "staff.staff_time_task",
+      spotId: "crud-form:staff.staff_time_task",
+      source: "lib/time-tracking-ui/NewTaskDialog.tsx"
+    }),
+    reportForm: crudFormExtensionHost({
+      entityId: "staff.staff_time_report",
+      spotId: "crud-form:staff.staff_time_report",
+      source: "backend/staff/time-tracking/reports/create/page.tsx"
+    }),
+    projectDetailHeader: detailHost("detail:staff:staff_time_project:header", "backend/staff/time-tracking/projects/[id]/page.tsx"),
+    projectDetailStatusBadges: detailHost("detail:staff:staff_time_project:status-badges", "backend/staff/time-tracking/projects/[id]/page.tsx"),
+    projectDetailTabs: detailHost("detail:staff:staff_time_project:tabs", "backend/staff/time-tracking/projects/[id]/page.tsx"),
+    projectDetailSidebar: detailHost("detail:staff:staff_time_project:sidebar", "backend/staff/time-tracking/projects/[id]/page.tsx"),
+    projectDetailFooter: detailHost("detail:staff:staff_time_project:footer", "backend/staff/time-tracking/projects/[id]/page.tsx"),
+    taskDetailHeader: detailHost("detail:staff:staff_time_task:header", "lib/time-tracking-ui/TaskDrawer.tsx"),
+    taskDetailStatusBadges: detailHost("detail:staff:staff_time_task:status-badges", "lib/time-tracking-ui/TaskDrawer.tsx"),
+    taskDetailTabs: detailHost("detail:staff:staff_time_task:tabs", "lib/time-tracking-ui/TaskDrawer.tsx"),
+    taskDetailSidebar: detailHost("detail:staff:staff_time_task:sidebar", "lib/time-tracking-ui/TaskDrawer.tsx"),
+    taskDetailFooter: detailHost("detail:staff:staff_time_task:footer", "lib/time-tracking-ui/TaskDrawer.tsx"),
+    reportDetailHeader: detailHost("detail:staff:staff_time_report:header", "backend/staff/time-tracking/reports/[id]/page.tsx"),
+    reportDetailStatusBadges: detailHost("detail:staff:staff_time_report:status-badges", "backend/staff/time-tracking/reports/[id]/page.tsx"),
+    reportDetailFooter: detailHost("detail:staff:staff_time_report:footer", "backend/staff/time-tracking/reports/[id]/page.tsx"),
+    reportSheetBeforeLines: pageHost("staff.time_report.sheet:before-lines", "lib/time-tracking-ui/ReportSheet.tsx"),
+    reportSheetAfterTotals: pageHost("staff.time_report.sheet:after-totals", "lib/time-tracking-ui/ReportSheet.tsx"),
+    timesheetToolbar: pageHost("staff.timesheet:toolbar", "backend/staff/time-tracking/timesheet/page.tsx"),
+    timesheetPeriodFooter: pageHost("staff.timesheet:period-footer", "lib/time-tracking-ui/TimesheetPeriodFooter.tsx"),
+    timesheetDayCellActions: pageHost("staff.timesheet:day-cell-actions", "lib/time-tracking-ui/TimesheetCalendar.tsx"),
+    taskBoardToolbar: pageHost("staff.time_task.board:toolbar", "lib/time-tracking-ui/KanbanBoard.tsx"),
+    taskBoardColumnHeader: pageHost("staff.time_task.board:column-header", "lib/time-tracking-ui/KanbanColumn.tsx"),
+    taskBoardCardBadges: pageHost("staff.time_task.board:card-badges", "lib/time-tracking-ui/KanbanCard.tsx"),
+    taskBoardCardFooter: pageHost("staff.time_task.board:card-footer", "lib/time-tracking-ui/KanbanCard.tsx"),
+    myWorkBeforeSections: pageHost("staff.my_work:before-sections", "backend/staff/time-tracking/page.tsx"),
+    myWorkAfterSections: pageHost("staff.my_work:after-sections", "backend/staff/time-tracking/page.tsx"),
+    timeTrackingSettingsSections: pageHost("staff.time_tracking.settings:sections", "backend/staff/time-tracking/settings/page.tsx"),
+    timerBarActions: pageHost("staff.timesheets.timer-bar:actions", "lib/timesheets-ui/TimerBar.tsx"),
+    /**
+     * EP-50. The two customer-portal spots. `scopeContract` names the third
+     * dimension the backoffice spots do not have: a portal context is scoped by
+     * the signed-in **customer** as well as the tenant and organization, and the
+     * host passes no money and no staff identity into either spot.
+     */
+    portalTimeReportBefore: injectionExtensionHost({
+      family: "portal-page",
+      spotId: "portal:staff.time_report:before",
+      supported: ["render-widget"],
+      contextContract: "staff.time_tracking.portal.report.v1",
+      scopeContract: "tenant.organization.customer-session",
+      source: "frontend/[orgSlug]/portal/time-reports/[id]/page.tsx"
+    }),
+    portalTimeReportAfter: injectionExtensionHost({
+      family: "portal-page",
+      spotId: "portal:staff.time_report:after",
+      supported: ["render-widget"],
+      contextContract: "staff.time_tracking.portal.report.v1",
+      scopeContract: "tenant.organization.customer-session",
+      source: "frontend/[orgSlug]/portal/time-reports/[id]/page.tsx"
+    }),
+    timeRoundingRegistry: registryHost(
+      "staff.time_tracking.rounding",
+      "lib/time-tracking/rounding.ts",
+      "staff.time_tracking.rounding.v1",
+      "staff.time_tracking.rounding.unit"
+    ),
+    timeRateRegistry: registryHost(
+      "staff.time_tracking.rate",
+      "lib/time-tracking/cost.ts",
+      "staff.time_tracking.rate.v1",
+      "staff.time_tracking.rate.entry_override_then_project"
+    ),
+    timeBillabilityRegistry: registryHost(
+      "staff.time_tracking.billability",
+      "lib/time-tracking/billability.ts",
+      "staff.time_tracking.billability.v1",
+      "staff.time_tracking.billability.project_then_tenant"
+    ),
+    reportExportFormatRegistry: registryHost(
+      "staff.time_tracking.report_export_format",
+      "lib/timesheets-reports/reportExportFormats.ts",
+      "staff.time_tracking.report_export_format.v1",
+      "pdf"
+    ),
+    reportGroupingRegistry: registryHost(
+      "staff.time_tracking.report_grouping",
+      "lib/timesheets-reports/reportGroupings.ts",
+      "staff.time_tracking.report_grouping.v1",
+      "project_task"
+    ),
+    timeEntrySourceRegistry: registryHost(
+      "staff.time_tracking.time_entry_source",
+      "lib/time-tracking/timeEntrySources.ts",
+      "staff.time_tracking.time_entry_source.v1",
+      "manual"
+    ),
+    overlapPolicyRegistry: registryHost(
+      "staff.time_tracking.overlap_policy",
+      "lib/time-tracking/overlap.ts",
+      "staff.time_tracking.overlap_policy.v1",
+      "staff.time_tracking.overlap.warn_when_enabled"
+    ),
+    projectCodeGeneratorRegistry: registryHost(
+      "staff.time_tracking.project_code_generator",
+      "lib/time-tracking/projectCode.ts",
+      "staff.time_tracking.project_code_generator.v1",
+      "staff.time_tracking.project_code.initials"
+    ),
+    capacityProviderRegistry: registryHost(
+      "staff.time_tracking.capacity_provider",
+      "lib/time-tracking/capacity.ts",
+      "staff.time_tracking.capacity_provider.v1",
+      "staff.time_tracking.capacity.flat_daily_hours"
+    ),
+    reportApprovalPolicyRegistry: registryHost(
+      "staff.time_tracking.report_approval_policy",
+      "lib/timesheets-reports/reportApprovalPolicies.ts",
+      "staff.time_tracking.report_approval_policy.v1",
+      "staff.time_tracking.report_approval.acl_only"
+    ),
+    /**
+     * EP-51. The recalculation registry: a hook is a tenant-wide restatement of
+     * derived time-tracking values, run by the existing queue worker under the
+     * existing `ProgressJob`. The built-in is the retro-rounding pass the module
+     * already shipped, so a deployment with no contribution runs exactly what it
+     * ran before.
+     */
+    recalculationRegistry: registryHost(
+      "staff.time_tracking.recalculation",
+      "lib/time-tracking/recalculations.ts",
+      "staff.time_tracking.recalculation.v1",
+      "staff.time_tracking.recalculation.rounding"
+    ),
+    /**
+     * EP-42. The one registry whose scope contract is `tenant` rather than
+     * `tenant+organization`: time-tracking settings are tenant-global by spec §10,
+     * stored through `ModuleConfigService` with `organization_id` null, and a
+     * contributed key inherits that scope rather than choosing its own.
+     */
+    settingKeyRegistry: injectionExtensionHost({
+      family: "specialized-registry",
+      spotId: "staff.time_tracking.setting_key",
+      supported: ["registry-contribution"],
+      contextContract: "staff.time_tracking.setting_key.v1",
+      scopeContract: "tenant",
+      runtimeContract: "rounding.unitMinutes",
+      source: "lib/time-tracking/settingKeys.ts"
+    }),
+    timeEntryDialogComponent: componentExtensionHost({
+      componentId: "staff.time_entry_dialog",
+      propsContract: "staff.time_entry_dialog.props.v1",
+      source: "lib/time-tracking-ui/TimeEntryDialog.tsx"
+    }),
+    timerBarComponent: componentExtensionHost({
+      componentId: "staff.timer_bar",
+      propsContract: "staff.timer_bar.props.v1",
+      source: "lib/timesheets-ui/TimerBar.tsx"
+    }),
+    kanbanCardComponent: componentExtensionHost({
+      componentId: "staff.kanban_card",
+      propsContract: "staff.kanban_card.props.v1",
+      source: "lib/time-tracking-ui/KanbanCard.tsx"
+    }),
+    kanbanColumnComponent: componentExtensionHost({
+      componentId: "staff.kanban_column",
+      propsContract: "staff.kanban_column.props.v1",
+      source: "lib/time-tracking-ui/KanbanColumn.tsx"
+    }),
+    timesheetGridComponent: componentExtensionHost({
+      componentId: "staff.timesheet_grid",
+      propsContract: "staff.timesheet_grid.props.v1",
+      source: "backend/staff/time-tracking/timesheet/GridView.tsx"
+    }),
+    timesheetListComponent: componentExtensionHost({
+      componentId: "staff.timesheet_list",
+      propsContract: "staff.timesheet_list.props.v1",
+      source: "lib/timesheets-ui/ListView.tsx"
+    }),
+    timesheetCalendarComponent: componentExtensionHost({
+      componentId: "staff.timesheet_calendar",
+      propsContract: "staff.timesheet_calendar.props.v1",
+      source: "lib/time-tracking-ui/TimesheetCalendar.tsx"
+    }),
+    reportSheetComponent: componentExtensionHost({
+      componentId: "staff.report_sheet",
+      propsContract: "staff.report_sheet.props.v1",
+      source: "lib/time-tracking-ui/ReportSheet.tsx"
+    }),
+    projectCardComponent: componentExtensionHost({
+      componentId: "staff.project_card",
+      propsContract: "staff.project_card.props.v1",
+      source: "lib/timesheets-projects-ui/ProjectCard.tsx"
+    }),
+    entriesSummaryFooterComponent: componentExtensionHost({
+      componentId: "staff.entries_summary_footer",
+      propsContract: "staff.entries_summary_footer.props.v1",
+      source: "lib/time-tracking-ui/TimeEntriesSummaryFooter.tsx"
+    })
+  }
+});
+var extension_points_default = extensionPoints;
+export {
+  extension_points_default as default,
+  extensionPoints
+};
+//# sourceMappingURL=extension-points.js.map