@open-mercato/core 0.7.1-develop.7178.1.ab93fbaf4e → 0.7.1-develop.7180.1.9717fbbb43

package/dist/modules/staff/lib/time-tracking/billability.js

@@ -0,0 +1,39 @@
+import { extensionPoints } from "@open-mercato/core/modules/staff/extension-points";
+import { createStrategyRegistry, BUILT_IN_STRATEGY_PRIORITY } from "./registries/registry.js";
+import { tryStrategy } from "./registries/invoke.js";
+import { hasResolverScope } from "./registries/scope.js";
+const BILLABILITY_REGISTRY_ID = extensionPoints.hosts.timeBillabilityRegistry.spotId;
+const BUILT_IN_BILLABILITY_RESOLVER_ID = "staff.time_tracking.billability.project_then_tenant";
+const registry = createStrategyRegistry(BILLABILITY_REGISTRY_ID);
+function registerBillabilityResolver(resolver) {
+  return registry.register(resolver);
+}
+function listBillabilityResolvers() {
+  return registry.list();
+}
+function getBillabilityResolver(id) {
+  return registry.get(id);
+}
+const builtInBillabilityResolver = registry.registerBuiltIn({
+  id: BUILT_IN_BILLABILITY_RESOLVER_ID,
+  priority: BUILT_IN_STRATEGY_PRIORITY,
+  resolve: (ctx) => ctx.requested ?? ctx.project?.billableByDefault ?? ctx.settings.defaults.billable
+});
+function resolveBillability(ctx) {
+  const scoped = hasResolverScope(ctx);
+  for (const resolver of registry.list()) {
+    if (!scoped && resolver.id !== BUILT_IN_BILLABILITY_RESOLVER_ID) continue;
+    const answer = tryStrategy(BILLABILITY_REGISTRY_ID, resolver.id, () => resolver.resolve(ctx));
+    if (typeof answer === "boolean") return answer;
+  }
+  return ctx.settings.defaults.billable;
+}
+export {
+  BILLABILITY_REGISTRY_ID,
+  BUILT_IN_BILLABILITY_RESOLVER_ID,
+  getBillabilityResolver,
+  listBillabilityResolvers,
+  registerBillabilityResolver,
+  resolveBillability
+};
+//# sourceMappingURL=billability.js.map

package/dist/modules/staff/lib/time-tracking/billability.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../src/modules/staff/lib/time-tracking/billability.ts"],
+  "sourcesContent": ["/**\n * EP-34 \u2014 the billability resolver chain.\n *\n * The rule `commands/timesheets-entries.ts` documented in prose \u2014 an explicit\n * value wins, then the project's own default, then the tenant setting \u2014 is now\n * the built-in resolver `staff.time_tracking.billability.project_then_tenant`.\n * Contributed resolvers are asked first, in descending priority, and the first\n * non-null answer wins; a resolver that returns `null` abstains and the chain\n * carries on, so an unopinionated contribution cannot change an entry.\n *\n * As everywhere else in this group, a contribution is consulted only when the\n * caller supplies a complete tenant + organization scope.\n */\n\nimport { extensionPoints } from '@open-mercato/core/modules/staff/extension-points'\nimport { createStrategyRegistry, BUILT_IN_STRATEGY_PRIORITY } from './registries/registry'\nimport { tryStrategy } from './registries/invoke'\nimport { hasResolverScope, type ScopedResolverContext } from './registries/scope'\nimport type { TimeTrackingSettings } from './settings'\n\nexport type BillabilityContext = ScopedResolverContext & {\n  requested?: boolean | null\n  project?: { id?: string | null; billableByDefault?: boolean | null } | null\n  task?: { id?: string | null } | null\n  staffMemberId?: string | null\n  date?: string | null\n  settings: TimeTrackingSettings\n}\n\nexport type BillabilityResolver = {\n  id: string\n  priority?: number\n  resolve(ctx: BillabilityContext): boolean | null\n}\n\nexport const BILLABILITY_REGISTRY_ID = extensionPoints.hosts.timeBillabilityRegistry.spotId\n\nexport const BUILT_IN_BILLABILITY_RESOLVER_ID = 'staff.time_tracking.billability.project_then_tenant'\n\nconst registry = createStrategyRegistry<BillabilityResolver>(BILLABILITY_REGISTRY_ID)\n\nexport function registerBillabilityResolver(resolver: BillabilityResolver): () => void {\n  return registry.register(resolver)\n}\n\nexport function listBillabilityResolvers(): BillabilityResolver[] {\n  return registry.list()\n}\n\nexport function getBillabilityResolver(id: string | null | undefined): BillabilityResolver | null {\n  return registry.get(id)\n}\n\nconst builtInBillabilityResolver: BillabilityResolver = registry.registerBuiltIn({\n  id: BUILT_IN_BILLABILITY_RESOLVER_ID,\n  priority: BUILT_IN_STRATEGY_PRIORITY,\n  resolve: (ctx) => ctx.requested ?? ctx.project?.billableByDefault ?? ctx.settings.defaults.billable,\n})\n\nexport function resolveBillability(ctx: BillabilityContext): boolean {\n  const scoped = hasResolverScope(ctx)\n  for (const resolver of registry.list()) {\n    if (!scoped && resolver.id !== BUILT_IN_BILLABILITY_RESOLVER_ID) continue\n    const answer = tryStrategy(BILLABILITY_REGISTRY_ID, resolver.id, () => resolver.resolve(ctx))\n    if (typeof answer === 'boolean') return answer\n  }\n  return ctx.settings.defaults.billable\n}\n"],
+  "mappings": "AAcA,SAAS,uBAAuB;AAChC,SAAS,wBAAwB,kCAAkC;AACnE,SAAS,mBAAmB;AAC5B,SAAS,wBAAoD;AAkBtD,MAAM,0BAA0B,gBAAgB,MAAM,wBAAwB;AAE9E,MAAM,mCAAmC;AAEhD,MAAM,WAAW,uBAA4C,uBAAuB;AAE7E,SAAS,4BAA4B,UAA2C;AACrF,SAAO,SAAS,SAAS,QAAQ;AACnC;AAEO,SAAS,2BAAkD;AAChE,SAAO,SAAS,KAAK;AACvB;AAEO,SAAS,uBAAuB,IAA2D;AAChG,SAAO,SAAS,IAAI,EAAE;AACxB;AAEA,MAAM,6BAAkD,SAAS,gBAAgB;AAAA,EAC/E,IAAI;AAAA,EACJ,UAAU;AAAA,EACV,SAAS,CAAC,QAAQ,IAAI,aAAa,IAAI,SAAS,qBAAqB,IAAI,SAAS,SAAS;AAC7F,CAAC;AAEM,SAAS,mBAAmB,KAAkC;AACnE,QAAM,SAAS,iBAAiB,GAAG;AACnC,aAAW,YAAY,SAAS,KAAK,GAAG;AACtC,QAAI,CAAC,UAAU,SAAS,OAAO,iCAAkC;AACjE,UAAM,SAAS,YAAY,yBAAyB,SAAS,IAAI,MAAM,SAAS,QAAQ,GAAG,CAAC;AAC5F,QAAI,OAAO,WAAW,UAAW,QAAO;AAAA,EAC1C;AACA,SAAO,IAAI,SAAS,SAAS;AAC/B;",
+  "names": []
+}

package/dist/modules/staff/lib/time-tracking/capacity.js

@@ -0,0 +1,68 @@
+import { extensionPoints } from "@open-mercato/core/modules/staff/extension-points";
+import { createStrategyRegistry, BUILT_IN_STRATEGY_PRIORITY } from "./registries/registry.js";
+import { selectScopedStrategy } from "./registries/scope.js";
+import { runStrategy } from "./registries/invoke.js";
+const CAPACITY_PROVIDER_REGISTRY_ID = extensionPoints.hosts.capacityProviderRegistry.spotId;
+const BUILT_IN_CAPACITY_PROVIDER_ID = "staff.time_tracking.capacity.flat_daily_hours";
+const registry = createStrategyRegistry(CAPACITY_PROVIDER_REGISTRY_ID);
+function registerCapacityProvider(provider) {
+  return registry.register(provider);
+}
+function listCapacityProviders() {
+  return registry.list();
+}
+function getCapacityProvider(id) {
+  return registry.get(id);
+}
+const builtInCapacityProvider = registry.registerBuiltIn({
+  id: BUILT_IN_CAPACITY_PROVIDER_ID,
+  priority: BUILT_IN_STRATEGY_PRIORITY,
+  resolve: (_staffMemberId, dateRange, ctx) => {
+    const dailyHours = ctx.dailyHours;
+    if (dailyHours === null || !Number.isFinite(dailyHours)) {
+      return { targetMinutesByDate: {}, totalTargetMinutes: null };
+    }
+    const dailyMinutes = Math.round(dailyHours * 60);
+    const targetMinutesByDate = {};
+    for (const date of dateRange.workingDays ?? []) targetMinutesByDate[date] = dailyMinutes;
+    return {
+      targetMinutesByDate,
+      totalTargetMinutes: dailyMinutes * (dateRange.workingDays?.length ?? 0)
+    };
+  }
+});
+function resolveCapacityProvider(ctx) {
+  return selectScopedStrategy(registry.list(), builtInCapacityProvider, ctx);
+}
+function isCapacityResult(value) {
+  if (!value || typeof value !== "object") return false;
+  const candidate = value;
+  if (!candidate.targetMinutesByDate || typeof candidate.targetMinutesByDate !== "object") return false;
+  const total = candidate.totalTargetMinutes;
+  if (total !== null && (typeof total !== "number" || !Number.isFinite(total))) return false;
+  return Object.values(candidate.targetMinutesByDate).every(
+    (minutes) => typeof minutes === "number" && Number.isFinite(minutes)
+  );
+}
+function resolveTimesheetCapacity(staffMemberId, dateRange, ctx) {
+  const provider = resolveCapacityProvider(ctx);
+  const builtIn = () => builtInCapacityProvider.resolve(staffMemberId, dateRange, ctx);
+  if (provider === builtInCapacityProvider) return builtIn();
+  const answer = runStrategy(
+    CAPACITY_PROVIDER_REGISTRY_ID,
+    provider.id,
+    () => provider.resolve(staffMemberId, dateRange, ctx),
+    () => null
+  );
+  return isCapacityResult(answer) ? answer : builtIn();
+}
+export {
+  BUILT_IN_CAPACITY_PROVIDER_ID,
+  CAPACITY_PROVIDER_REGISTRY_ID,
+  getCapacityProvider,
+  listCapacityProviders,
+  registerCapacityProvider,
+  resolveCapacityProvider,
+  resolveTimesheetCapacity
+};
+//# sourceMappingURL=capacity.js.map

package/dist/modules/staff/lib/time-tracking/capacity.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../src/modules/staff/lib/time-tracking/capacity.ts"],
+  "sourcesContent": ["/**\n * EP-40 \u2014 the capacity / target provider.\n *\n * The timesheet's \"target\" is one flat number today: `targets.dailyHours` from\n * the tenant settings, applied to every working day of every person. The\n * built-in `staff.time_tracking.capacity.flat_daily_hours` reproduces exactly\n * that, including its two edge cases \u2014 a `null` setting means \"no target\", and a\n * day the caller did not mark as working contributes nothing.\n *\n * A contributed provider answers per day instead, which is what a contract-hours\n * or leave-aware capacity model needs. It is consulted only when the caller\n * supplies a complete tenant + organization scope.\n */\n\nimport { extensionPoints } from '@open-mercato/core/modules/staff/extension-points'\nimport { createStrategyRegistry, BUILT_IN_STRATEGY_PRIORITY } from './registries/registry'\nimport { selectScopedStrategy, type ScopedResolverContext } from './registries/scope'\nimport { runStrategy } from './registries/invoke'\n\nexport type CapacityDateRange = {\n  /** `yyyy-mm-dd`, inclusive. */\n  from: string\n  /** `yyyy-mm-dd`, inclusive. */\n  to: string\n  /** The days the caller counts as working; the built-in targets only these. */\n  workingDays: readonly string[]\n}\n\nexport type CapacityContext = ScopedResolverContext & {\n  /** The tenant's `targets.dailyHours`; `null` means the tenant set no target. */\n  dailyHours: number | null\n}\n\nexport type CapacityResult = {\n  /** Target minutes per `yyyy-mm-dd`, for the working days that carry one. */\n  targetMinutesByDate: Record<string, number>\n  /** Sum of `targetMinutesByDate`, or `null` when the tenant set no target. */\n  totalTargetMinutes: number | null\n}\n\nexport type CapacityProvider = {\n  id: string\n  priority?: number\n  resolve(\n    staffMemberId: string | null,\n    dateRange: CapacityDateRange,\n    ctx: CapacityContext,\n  ): CapacityResult\n}\n\nexport const CAPACITY_PROVIDER_REGISTRY_ID = extensionPoints.hosts.capacityProviderRegistry.spotId\n\nexport const BUILT_IN_CAPACITY_PROVIDER_ID = 'staff.time_tracking.capacity.flat_daily_hours'\n\nconst registry = createStrategyRegistry<CapacityProvider>(CAPACITY_PROVIDER_REGISTRY_ID)\n\nexport function registerCapacityProvider(provider: CapacityProvider): () => void {\n  return registry.register(provider)\n}\n\nexport function listCapacityProviders(): CapacityProvider[] {\n  return registry.list()\n}\n\nexport function getCapacityProvider(id: string | null | undefined): CapacityProvider | null {\n  return registry.get(id)\n}\n\nconst builtInCapacityProvider: CapacityProvider = registry.registerBuiltIn({\n  id: BUILT_IN_CAPACITY_PROVIDER_ID,\n  priority: BUILT_IN_STRATEGY_PRIORITY,\n  resolve: (_staffMemberId, dateRange, ctx) => {\n    const dailyHours = ctx.dailyHours\n    if (dailyHours === null || !Number.isFinite(dailyHours)) {\n      return { targetMinutesByDate: {}, totalTargetMinutes: null }\n    }\n    const dailyMinutes = Math.round(dailyHours * 60)\n    const targetMinutesByDate: Record<string, number> = {}\n    for (const date of dateRange.workingDays ?? []) targetMinutesByDate[date] = dailyMinutes\n    return {\n      targetMinutesByDate,\n      totalTargetMinutes: dailyMinutes * (dateRange.workingDays?.length ?? 0),\n    }\n  },\n})\n\nexport function resolveCapacityProvider(ctx?: ScopedResolverContext | null): CapacityProvider {\n  return selectScopedStrategy(registry.list(), builtInCapacityProvider, ctx)\n}\n\nfunction isCapacityResult(value: unknown): value is CapacityResult {\n  if (!value || typeof value !== 'object') return false\n  const candidate = value as { targetMinutesByDate?: unknown; totalTargetMinutes?: unknown }\n  if (!candidate.targetMinutesByDate || typeof candidate.targetMinutesByDate !== 'object') return false\n  const total = candidate.totalTargetMinutes\n  if (total !== null && (typeof total !== 'number' || !Number.isFinite(total))) return false\n  return Object.values(candidate.targetMinutesByDate as Record<string, unknown>).every(\n    (minutes) => typeof minutes === 'number' && Number.isFinite(minutes),\n  )\n}\n\n/**\n * The targets the timesheet renders and compares logged minutes against. A provider\n * that throws, or that answers with something the caller cannot subtract from, falls\n * back to the flat daily target the module shipped \u2014 a timesheet showing the wrong\n * target reads as the person being behind, which is worse than showing the default.\n */\nexport function resolveTimesheetCapacity(\n  staffMemberId: string | null,\n  dateRange: CapacityDateRange,\n  ctx: CapacityContext,\n): CapacityResult {\n  const provider = resolveCapacityProvider(ctx)\n  const builtIn = () => builtInCapacityProvider.resolve(staffMemberId, dateRange, ctx)\n  if (provider === builtInCapacityProvider) return builtIn()\n\n  const answer = runStrategy(\n    CAPACITY_PROVIDER_REGISTRY_ID,\n    provider.id,\n    () => provider.resolve(staffMemberId, dateRange, ctx) as unknown,\n    () => null,\n  )\n  return isCapacityResult(answer) ? answer : builtIn()\n}\n"],
+  "mappings": "AAcA,SAAS,uBAAuB;AAChC,SAAS,wBAAwB,kCAAkC;AACnE,SAAS,4BAAwD;AACjE,SAAS,mBAAmB;AAiCrB,MAAM,gCAAgC,gBAAgB,MAAM,yBAAyB;AAErF,MAAM,gCAAgC;AAE7C,MAAM,WAAW,uBAAyC,6BAA6B;AAEhF,SAAS,yBAAyB,UAAwC;AAC/E,SAAO,SAAS,SAAS,QAAQ;AACnC;AAEO,SAAS,wBAA4C;AAC1D,SAAO,SAAS,KAAK;AACvB;AAEO,SAAS,oBAAoB,IAAwD;AAC1F,SAAO,SAAS,IAAI,EAAE;AACxB;AAEA,MAAM,0BAA4C,SAAS,gBAAgB;AAAA,EACzE,IAAI;AAAA,EACJ,UAAU;AAAA,EACV,SAAS,CAAC,gBAAgB,WAAW,QAAQ;AAC3C,UAAM,aAAa,IAAI;AACvB,QAAI,eAAe,QAAQ,CAAC,OAAO,SAAS,UAAU,GAAG;AACvD,aAAO,EAAE,qBAAqB,CAAC,GAAG,oBAAoB,KAAK;AAAA,IAC7D;AACA,UAAM,eAAe,KAAK,MAAM,aAAa,EAAE;AAC/C,UAAM,sBAA8C,CAAC;AACrD,eAAW,QAAQ,UAAU,eAAe,CAAC,EAAG,qBAAoB,IAAI,IAAI;AAC5E,WAAO;AAAA,MACL;AAAA,MACA,oBAAoB,gBAAgB,UAAU,aAAa,UAAU;AAAA,IACvE;AAAA,EACF;AACF,CAAC;AAEM,SAAS,wBAAwB,KAAsD;AAC5F,SAAO,qBAAqB,SAAS,KAAK,GAAG,yBAAyB,GAAG;AAC3E;AAEA,SAAS,iBAAiB,OAAyC;AACjE,MAAI,CAAC,SAAS,OAAO,UAAU,SAAU,QAAO;AAChD,QAAM,YAAY;AAClB,MAAI,CAAC,UAAU,uBAAuB,OAAO,UAAU,wBAAwB,SAAU,QAAO;AAChG,QAAM,QAAQ,UAAU;AACxB,MAAI,UAAU,SAAS,OAAO,UAAU,YAAY,CAAC,OAAO,SAAS,KAAK,GAAI,QAAO;AACrF,SAAO,OAAO,OAAO,UAAU,mBAA8C,EAAE;AAAA,IAC7E,CAAC,YAAY,OAAO,YAAY,YAAY,OAAO,SAAS,OAAO;AAAA,EACrE;AACF;AAQO,SAAS,yBACd,eACA,WACA,KACgB;AAChB,QAAM,WAAW,wBAAwB,GAAG;AAC5C,QAAM,UAAU,MAAM,wBAAwB,QAAQ,eAAe,WAAW,GAAG;AACnF,MAAI,aAAa,wBAAyB,QAAO,QAAQ;AAEzD,QAAM,SAAS;AAAA,IACb;AAAA,IACA,SAAS;AAAA,IACT,MAAM,SAAS,QAAQ,eAAe,WAAW,GAAG;AAAA,IACpD,MAAM;AAAA,EACR;AACA,SAAO,iBAAiB,MAAM,IAAI,SAAS,QAAQ;AACrD;",
+  "names": []
+}

package/dist/modules/staff/lib/time-tracking/componentContracts.js

@@ -0,0 +1,15 @@
+import { z } from "zod";
+const callbackProp = () => z.custom((value) => typeof value === "function", {
+  message: "[internal] expected a function prop"
+});
+const optionalCallbackProp = () => z.custom(
+  (value) => value === void 0 || typeof value === "function",
+  { message: "[internal] expected a function prop or undefined" }
+);
+const opaqueProp = () => z.custom(() => true);
+export {
+  callbackProp,
+  opaqueProp,
+  optionalCallbackProp
+};
+//# sourceMappingURL=componentContracts.js.map

package/dist/modules/staff/lib/time-tracking/componentContracts.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../src/modules/staff/lib/time-tracking/componentContracts.ts"],
+  "sourcesContent": ["import { z } from 'zod'\n\n/**\n * Shared building blocks for the `propsSchema` every replaceable time-tracking\n * component publishes (EP-31).\n *\n * The schema is the contract a replacement must satisfy: `useRegisteredComponent`\n * parses the resolved props against it in development and falls back to the\n * original component when they do not match, so a schema that accepts anything\n * would let a broken replacement render instead of being caught. Scalars are\n * therefore described exactly; callbacks and React nodes, which zod cannot\n * describe structurally, are narrowed to the one runtime check that matters.\n */\n\nexport const callbackProp = <TCallback>() =>\n  z.custom<TCallback>((value) => typeof value === 'function', {\n    message: '[internal] expected a function prop',\n  })\n\nexport const optionalCallbackProp = <TCallback>() =>\n  z.custom<TCallback | undefined>(\n    (value) => value === undefined || typeof value === 'function',\n    { message: '[internal] expected a function prop or undefined' },\n  )\n\nexport const opaqueProp = <TValue>() => z.custom<TValue>(() => true)\n"],
+  "mappings": "AAAA,SAAS,SAAS;AAcX,MAAM,eAAe,MAC1B,EAAE,OAAkB,CAAC,UAAU,OAAO,UAAU,YAAY;AAAA,EAC1D,SAAS;AACX,CAAC;AAEI,MAAM,uBAAuB,MAClC,EAAE;AAAA,EACA,CAAC,UAAU,UAAU,UAAa,OAAO,UAAU;AAAA,EACnD,EAAE,SAAS,mDAAmD;AAChE;AAEK,MAAM,aAAa,MAAc,EAAE,OAAe,MAAM,IAAI;",
+  "names": []
+}

package/dist/modules/staff/lib/time-tracking/cost.js

@@ -0,0 +1,82 @@
+import { extensionPoints } from "@open-mercato/core/modules/staff/extension-points";
+import { createStrategyRegistry, BUILT_IN_STRATEGY_PRIORITY } from "./registries/registry.js";
+import { tryStrategy } from "./registries/invoke.js";
+import { hasResolverScope } from "./registries/scope.js";
+const TIME_RATE_REGISTRY_ID = extensionPoints.hosts.timeRateRegistry.spotId;
+const BUILT_IN_TIME_RATE_RESOLVER_ID = "staff.time_tracking.rate.entry_override_then_project";
+const registry = createStrategyRegistry(TIME_RATE_REGISTRY_ID);
+function registerTimeRateResolver(resolver) {
+  return registry.register(resolver);
+}
+function listTimeRateResolvers() {
+  return registry.list();
+}
+function getTimeRateResolver(id) {
+  return registry.get(id);
+}
+function round2(value) {
+  if (!Number.isFinite(value)) return 0;
+  const sign = value < 0 ? -1 : 1;
+  const magnitude = Math.abs(value);
+  const shifted = Number(`${magnitude}e2`);
+  if (!Number.isFinite(shifted)) return sign * (Math.round(magnitude * 100) / 100);
+  const rounded = Math.round(shifted);
+  const restored = Number(`${rounded}e-2`);
+  if (!Number.isFinite(restored)) return sign * (rounded / 100);
+  return sign * restored;
+}
+function toCents(amount) {
+  return Math.round(round2(amount) * 100);
+}
+function builtInRate(ctx) {
+  const override = ctx.entry?.rateOverrideAmount;
+  if (override !== null && override !== void 0 && Number.isFinite(override)) return override;
+  const projectRate = ctx.project?.hourlyRate;
+  if (projectRate !== null && projectRate !== void 0 && Number.isFinite(projectRate)) return projectRate;
+  return null;
+}
+const builtInRateResolver = registry.registerBuiltIn({
+  id: BUILT_IN_TIME_RATE_RESOLVER_ID,
+  priority: BUILT_IN_STRATEGY_PRIORITY,
+  resolve: builtInRate
+});
+function resolveTimeRate(ctx) {
+  const scoped = hasResolverScope(ctx);
+  for (const resolver of registry.list()) {
+    if (!scoped && resolver.id !== BUILT_IN_TIME_RATE_RESOLVER_ID) continue;
+    const rate = tryStrategy(TIME_RATE_REGISTRY_ID, resolver.id, () => resolver.resolve(ctx));
+    if (rate !== null && rate !== void 0 && Number.isFinite(rate)) return rate;
+  }
+  return null;
+}
+function applicableRate(entry, project, ctx) {
+  return resolveTimeRate({ ...ctx ?? {}, entry: entry ?? null, project: project ?? null });
+}
+function entryAmount(entry, project, ctx) {
+  if (!entry?.isBillable) return null;
+  const rate = applicableRate(entry, project, ctx);
+  if (rate === null) return null;
+  const minutes = Number.isFinite(entry.roundedMinutes) ? entry.roundedMinutes : 0;
+  return round2(minutes / 60 * rate);
+}
+function sumAmounts(amounts) {
+  let cents = 0;
+  for (const amount of amounts) {
+    if (amount === null || amount === void 0 || !Number.isFinite(amount)) continue;
+    cents += toCents(amount);
+  }
+  return round2(cents / 100);
+}
+export {
+  BUILT_IN_TIME_RATE_RESOLVER_ID,
+  TIME_RATE_REGISTRY_ID,
+  applicableRate,
+  entryAmount,
+  getTimeRateResolver,
+  listTimeRateResolvers,
+  registerTimeRateResolver,
+  resolveTimeRate,
+  round2,
+  sumAmounts
+};
+//# sourceMappingURL=cost.js.map

package/dist/modules/staff/lib/time-tracking/cost.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../src/modules/staff/lib/time-tracking/cost.ts"],
+  "sourcesContent": ["/**\n * EP-33 \u2014 the rate resolver chain.\n *\n * `applicableRate` is still the single place an hourly rate is chosen, and\n * `entryAmount` still the single place an amount is produced (D-7). What changed\n * is that the override \u2192 project-rate chain now lives in the built-in resolver\n * `staff.time_tracking.rate.entry_override_then_project`, registered at module\n * load, instead of being spelled inline. Contributed resolvers are consulted in\n * descending priority ahead of it, but only when the caller supplies a complete\n * tenant + organization scope; with no contribution \u2014 or with none of them\n * answering \u2014 the built-in decides, so the number is the one this file always\n * produced.\n */\n\nimport { extensionPoints } from '@open-mercato/core/modules/staff/extension-points'\nimport { createStrategyRegistry, BUILT_IN_STRATEGY_PRIORITY } from './registries/registry'\nimport { tryStrategy } from './registries/invoke'\nimport { hasResolverScope, type ScopedResolverContext } from './registries/scope'\n\nexport type CostEntry = {\n  isBillable: boolean\n  roundedMinutes: number\n  rateOverrideAmount?: number | null\n}\n\nexport type CostProject = {\n  hourlyRate?: number | null\n}\n\n/**\n * Everything a rate resolver may reason about. Only `entry` and `project` are\n * populated by the module's own call sites; the remaining fields exist so a\n * contributed resolver can key off seniority, task type, customer contract or an\n * effective date without the call site having to invent its own context shape.\n */\nexport type TimeRateContext = ScopedResolverContext & {\n  entry?: Pick<CostEntry, 'rateOverrideAmount'> | null\n  project?: CostProject | null\n  task?: { id?: string | null; timeProjectId?: string | null } | null\n  staffMember?: { id?: string | null } | null\n  role?: { id?: string | null; name?: string | null } | null\n  customer?: { id?: string | null } | null\n  date?: string | null\n}\n\nexport type TimeRateResolver = {\n  id: string\n  priority?: number\n  resolve(ctx: TimeRateContext): number | null\n}\n\nexport const TIME_RATE_REGISTRY_ID = extensionPoints.hosts.timeRateRegistry.spotId\n\nexport const BUILT_IN_TIME_RATE_RESOLVER_ID = 'staff.time_tracking.rate.entry_override_then_project'\n\nconst registry = createStrategyRegistry<TimeRateResolver>(TIME_RATE_REGISTRY_ID)\n\nexport function registerTimeRateResolver(resolver: TimeRateResolver): () => void {\n  return registry.register(resolver)\n}\n\nexport function listTimeRateResolvers(): TimeRateResolver[] {\n  return registry.list()\n}\n\nexport function getTimeRateResolver(id: string | null | undefined): TimeRateResolver | null {\n  return registry.get(id)\n}\n\nexport function round2(value: number): number {\n  if (!Number.isFinite(value)) return 0\n  const sign = value < 0 ? -1 : 1\n  const magnitude = Math.abs(value)\n  const shifted = Number(`${magnitude}e2`)\n  if (!Number.isFinite(shifted)) return sign * (Math.round(magnitude * 100) / 100)\n  const rounded = Math.round(shifted)\n  const restored = Number(`${rounded}e-2`)\n  if (!Number.isFinite(restored)) return sign * (rounded / 100)\n  return sign * restored\n}\n\nfunction toCents(amount: number): number {\n  return Math.round(round2(amount) * 100)\n}\n\nfunction builtInRate(ctx: TimeRateContext): number | null {\n  const override = ctx.entry?.rateOverrideAmount\n  if (override !== null && override !== undefined && Number.isFinite(override)) return override\n  const projectRate = ctx.project?.hourlyRate\n  if (projectRate !== null && projectRate !== undefined && Number.isFinite(projectRate)) return projectRate\n  return null\n}\n\nconst builtInRateResolver: TimeRateResolver = registry.registerBuiltIn({\n  id: BUILT_IN_TIME_RATE_RESOLVER_ID,\n  priority: BUILT_IN_STRATEGY_PRIORITY,\n  resolve: builtInRate,\n})\n\n/**\n * Walks the registry in priority order and takes the first non-null answer.\n * Contributed resolvers are skipped entirely when the context carries no\n * complete scope, which leaves the built-in as the only candidate.\n */\nexport function resolveTimeRate(ctx: TimeRateContext): number | null {\n  const scoped = hasResolverScope(ctx)\n  for (const resolver of registry.list()) {\n    if (!scoped && resolver.id !== BUILT_IN_TIME_RATE_RESOLVER_ID) continue\n    // A chain asks the next candidate anyway, so a thrower is skipped rather than\n    // replaced \u2014 and the built-in is always the last candidate.\n    const rate = tryStrategy(TIME_RATE_REGISTRY_ID, resolver.id, () => resolver.resolve(ctx))\n    if (rate !== null && rate !== undefined && Number.isFinite(rate)) return rate\n  }\n  return null\n}\n\nexport function applicableRate(\n  entry: Pick<CostEntry, 'rateOverrideAmount'> | null | undefined,\n  project: CostProject | null | undefined,\n  ctx?: Omit<TimeRateContext, 'entry' | 'project'> | null,\n): number | null {\n  return resolveTimeRate({ ...(ctx ?? {}), entry: entry ?? null, project: project ?? null })\n}\n\nexport function entryAmount(\n  entry: CostEntry,\n  project: CostProject | null | undefined,\n  ctx?: Omit<TimeRateContext, 'entry' | 'project'> | null,\n): number | null {\n  if (!entry?.isBillable) return null\n  const rate = applicableRate(entry, project, ctx)\n  if (rate === null) return null\n  const minutes = Number.isFinite(entry.roundedMinutes) ? entry.roundedMinutes : 0\n  return round2((minutes / 60) * rate)\n}\n\nexport function sumAmounts(amounts: readonly (number | null | undefined)[]): number {\n  let cents = 0\n  for (const amount of amounts) {\n    if (amount === null || amount === undefined || !Number.isFinite(amount)) continue\n    cents += toCents(amount)\n  }\n  return round2(cents / 100)\n}\n"],
+  "mappings": "AAcA,SAAS,uBAAuB;AAChC,SAAS,wBAAwB,kCAAkC;AACnE,SAAS,mBAAmB;AAC5B,SAAS,wBAAoD;AAkCtD,MAAM,wBAAwB,gBAAgB,MAAM,iBAAiB;AAErE,MAAM,iCAAiC;AAE9C,MAAM,WAAW,uBAAyC,qBAAqB;AAExE,SAAS,yBAAyB,UAAwC;AAC/E,SAAO,SAAS,SAAS,QAAQ;AACnC;AAEO,SAAS,wBAA4C;AAC1D,SAAO,SAAS,KAAK;AACvB;AAEO,SAAS,oBAAoB,IAAwD;AAC1F,SAAO,SAAS,IAAI,EAAE;AACxB;AAEO,SAAS,OAAO,OAAuB;AAC5C,MAAI,CAAC,OAAO,SAAS,KAAK,EAAG,QAAO;AACpC,QAAM,OAAO,QAAQ,IAAI,KAAK;AAC9B,QAAM,YAAY,KAAK,IAAI,KAAK;AAChC,QAAM,UAAU,OAAO,GAAG,SAAS,IAAI;AACvC,MAAI,CAAC,OAAO,SAAS,OAAO,EAAG,QAAO,QAAQ,KAAK,MAAM,YAAY,GAAG,IAAI;AAC5E,QAAM,UAAU,KAAK,MAAM,OAAO;AAClC,QAAM,WAAW,OAAO,GAAG,OAAO,KAAK;AACvC,MAAI,CAAC,OAAO,SAAS,QAAQ,EAAG,QAAO,QAAQ,UAAU;AACzD,SAAO,OAAO;AAChB;AAEA,SAAS,QAAQ,QAAwB;AACvC,SAAO,KAAK,MAAM,OAAO,MAAM,IAAI,GAAG;AACxC;AAEA,SAAS,YAAY,KAAqC;AACxD,QAAM,WAAW,IAAI,OAAO;AAC5B,MAAI,aAAa,QAAQ,aAAa,UAAa,OAAO,SAAS,QAAQ,EAAG,QAAO;AACrF,QAAM,cAAc,IAAI,SAAS;AACjC,MAAI,gBAAgB,QAAQ,gBAAgB,UAAa,OAAO,SAAS,WAAW,EAAG,QAAO;AAC9F,SAAO;AACT;AAEA,MAAM,sBAAwC,SAAS,gBAAgB;AAAA,EACrE,IAAI;AAAA,EACJ,UAAU;AAAA,EACV,SAAS;AACX,CAAC;AAOM,SAAS,gBAAgB,KAAqC;AACnE,QAAM,SAAS,iBAAiB,GAAG;AACnC,aAAW,YAAY,SAAS,KAAK,GAAG;AACtC,QAAI,CAAC,UAAU,SAAS,OAAO,+BAAgC;AAG/D,UAAM,OAAO,YAAY,uBAAuB,SAAS,IAAI,MAAM,SAAS,QAAQ,GAAG,CAAC;AACxF,QAAI,SAAS,QAAQ,SAAS,UAAa,OAAO,SAAS,IAAI,EAAG,QAAO;AAAA,EAC3E;AACA,SAAO;AACT;AAEO,SAAS,eACd,OACA,SACA,KACe;AACf,SAAO,gBAAgB,EAAE,GAAI,OAAO,CAAC,GAAI,OAAO,SAAS,MAAM,SAAS,WAAW,KAAK,CAAC;AAC3F;AAEO,SAAS,YACd,OACA,SACA,KACe;AACf,MAAI,CAAC,OAAO,WAAY,QAAO;AAC/B,QAAM,OAAO,eAAe,OAAO,SAAS,GAAG;AAC/C,MAAI,SAAS,KAAM,QAAO;AAC1B,QAAM,UAAU,OAAO,SAAS,MAAM,cAAc,IAAI,MAAM,iBAAiB;AAC/E,SAAO,OAAQ,UAAU,KAAM,IAAI;AACrC;AAEO,SAAS,WAAW,SAAyD;AAClF,MAAI,QAAQ;AACZ,aAAW,UAAU,SAAS;AAC5B,QAAI,WAAW,QAAQ,WAAW,UAAa,CAAC,OAAO,SAAS,MAAM,EAAG;AACzE,aAAS,QAAQ,MAAM;AAAA,EACzB;AACA,SAAO,OAAO,QAAQ,GAAG;AAC3B;",
+  "names": []
+}

package/dist/modules/staff/lib/time-tracking/duration.js

@@ -0,0 +1,55 @@
+const MAX_DURATION_MINUTES = 1440;
+const CLOCK_PATTERN = /^(\d{1,3}):([0-5]\d)$/;
+const UNIT_PATTERN = /^(?:(\d+(?:[.,]\d+)?)h)?(?:(\d+(?:[.,]\d+)?)m(?:in)?)?$/;
+const BARE_NUMBER_PATTERN = /^\d+(?:[.,]\d+)?$/;
+function toNumber(value) {
+  return Number.parseFloat(value.replace(",", "."));
+}
+function clampMinutes(minutes) {
+  if (!Number.isFinite(minutes)) return 0;
+  if (minutes < 0) return 0;
+  if (minutes > MAX_DURATION_MINUTES) return MAX_DURATION_MINUTES;
+  return Math.round(minutes);
+}
+function parseDuration(input) {
+  if (typeof input !== "string") return { ok: false, reason: "unparseable" };
+  const trimmed = input.trim();
+  if (!trimmed) return { ok: false, reason: "empty" };
+  const compact = trimmed.replace(/\s+/g, "").toLowerCase();
+  if (compact.startsWith("-")) return { ok: false, reason: "unparseable" };
+  const clock = CLOCK_PATTERN.exec(compact);
+  if (clock) {
+    const hours = Number.parseInt(clock[1], 10);
+    const minutes = Number.parseInt(clock[2], 10);
+    return { ok: true, minutes: clampMinutes(hours * 60 + minutes) };
+  }
+  const units = UNIT_PATTERN.exec(compact);
+  if (units && (units[1] !== void 0 || units[2] !== void 0)) {
+    const hours = units[1] !== void 0 ? toNumber(units[1]) : 0;
+    const minutes = units[2] !== void 0 ? toNumber(units[2]) : 0;
+    if (!Number.isFinite(hours) || !Number.isFinite(minutes)) return { ok: false, reason: "unparseable" };
+    return { ok: true, minutes: clampMinutes(hours * 60 + minutes) };
+  }
+  if (BARE_NUMBER_PATTERN.test(compact)) {
+    const hours = toNumber(compact);
+    if (!Number.isFinite(hours)) return { ok: false, reason: "unparseable" };
+    return { ok: true, minutes: clampMinutes(hours * 60) };
+  }
+  return { ok: false, reason: "unparseable" };
+}
+function formatDuration(minutes, style) {
+  const safe = Number.isFinite(minutes) && minutes > 0 ? Math.round(minutes) : 0;
+  const hours = Math.floor(safe / 60);
+  const rest = safe % 60;
+  if (style === "clock") return `${hours}:${String(rest).padStart(2, "0")}`;
+  if (style === "decimal") return (safe / 60).toFixed(2);
+  if (hours === 0) return `${rest}m`;
+  if (rest === 0) return `${hours}h`;
+  return `${hours}h ${rest}m`;
+}
+export {
+  MAX_DURATION_MINUTES,
+  formatDuration,
+  parseDuration
+};
+//# sourceMappingURL=duration.js.map

package/dist/modules/staff/lib/time-tracking/duration.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../src/modules/staff/lib/time-tracking/duration.ts"],
+  "sourcesContent": ["export const MAX_DURATION_MINUTES = 1440\n\nexport type DurationParseFailureReason = 'empty' | 'unparseable'\n\nexport type ParseDurationResult =\n  | { ok: true; minutes: number }\n  | { ok: false; reason: DurationParseFailureReason }\n\nexport type DurationFormatStyle = 'hm' | 'clock' | 'decimal'\n\nconst CLOCK_PATTERN = /^(\\d{1,3}):([0-5]\\d)$/\nconst UNIT_PATTERN = /^(?:(\\d+(?:[.,]\\d+)?)h)?(?:(\\d+(?:[.,]\\d+)?)m(?:in)?)?$/\nconst BARE_NUMBER_PATTERN = /^\\d+(?:[.,]\\d+)?$/\n\nfunction toNumber(value: string): number {\n  return Number.parseFloat(value.replace(',', '.'))\n}\n\nfunction clampMinutes(minutes: number): number {\n  if (!Number.isFinite(minutes)) return 0\n  if (minutes < 0) return 0\n  if (minutes > MAX_DURATION_MINUTES) return MAX_DURATION_MINUTES\n  return Math.round(minutes)\n}\n\nexport function parseDuration(input: string): ParseDurationResult {\n  if (typeof input !== 'string') return { ok: false, reason: 'unparseable' }\n  const trimmed = input.trim()\n  if (!trimmed) return { ok: false, reason: 'empty' }\n\n  const compact = trimmed.replace(/\\s+/g, '').toLowerCase()\n  if (compact.startsWith('-')) return { ok: false, reason: 'unparseable' }\n\n  const clock = CLOCK_PATTERN.exec(compact)\n  if (clock) {\n    const hours = Number.parseInt(clock[1], 10)\n    const minutes = Number.parseInt(clock[2], 10)\n    return { ok: true, minutes: clampMinutes(hours * 60 + minutes) }\n  }\n\n  const units = UNIT_PATTERN.exec(compact)\n  if (units && (units[1] !== undefined || units[2] !== undefined)) {\n    const hours = units[1] !== undefined ? toNumber(units[1]) : 0\n    const minutes = units[2] !== undefined ? toNumber(units[2]) : 0\n    if (!Number.isFinite(hours) || !Number.isFinite(minutes)) return { ok: false, reason: 'unparseable' }\n    return { ok: true, minutes: clampMinutes(hours * 60 + minutes) }\n  }\n\n  if (BARE_NUMBER_PATTERN.test(compact)) {\n    const hours = toNumber(compact)\n    if (!Number.isFinite(hours)) return { ok: false, reason: 'unparseable' }\n    return { ok: true, minutes: clampMinutes(hours * 60) }\n  }\n\n  return { ok: false, reason: 'unparseable' }\n}\n\nexport function formatDuration(minutes: number, style: DurationFormatStyle): string {\n  const safe = Number.isFinite(minutes) && minutes > 0 ? Math.round(minutes) : 0\n  const hours = Math.floor(safe / 60)\n  const rest = safe % 60\n\n  if (style === 'clock') return `${hours}:${String(rest).padStart(2, '0')}`\n  if (style === 'decimal') return (safe / 60).toFixed(2)\n  if (hours === 0) return `${rest}m`\n  if (rest === 0) return `${hours}h`\n  return `${hours}h ${rest}m`\n}\n"],
+  "mappings": "AAAO,MAAM,uBAAuB;AAUpC,MAAM,gBAAgB;AACtB,MAAM,eAAe;AACrB,MAAM,sBAAsB;AAE5B,SAAS,SAAS,OAAuB;AACvC,SAAO,OAAO,WAAW,MAAM,QAAQ,KAAK,GAAG,CAAC;AAClD;AAEA,SAAS,aAAa,SAAyB;AAC7C,MAAI,CAAC,OAAO,SAAS,OAAO,EAAG,QAAO;AACtC,MAAI,UAAU,EAAG,QAAO;AACxB,MAAI,UAAU,qBAAsB,QAAO;AAC3C,SAAO,KAAK,MAAM,OAAO;AAC3B;AAEO,SAAS,cAAc,OAAoC;AAChE,MAAI,OAAO,UAAU,SAAU,QAAO,EAAE,IAAI,OAAO,QAAQ,cAAc;AACzE,QAAM,UAAU,MAAM,KAAK;AAC3B,MAAI,CAAC,QAAS,QAAO,EAAE,IAAI,OAAO,QAAQ,QAAQ;AAElD,QAAM,UAAU,QAAQ,QAAQ,QAAQ,EAAE,EAAE,YAAY;AACxD,MAAI,QAAQ,WAAW,GAAG,EAAG,QAAO,EAAE,IAAI,OAAO,QAAQ,cAAc;AAEvE,QAAM,QAAQ,cAAc,KAAK,OAAO;AACxC,MAAI,OAAO;AACT,UAAM,QAAQ,OAAO,SAAS,MAAM,CAAC,GAAG,EAAE;AAC1C,UAAM,UAAU,OAAO,SAAS,MAAM,CAAC,GAAG,EAAE;AAC5C,WAAO,EAAE,IAAI,MAAM,SAAS,aAAa,QAAQ,KAAK,OAAO,EAAE;AAAA,EACjE;AAEA,QAAM,QAAQ,aAAa,KAAK,OAAO;AACvC,MAAI,UAAU,MAAM,CAAC,MAAM,UAAa,MAAM,CAAC,MAAM,SAAY;AAC/D,UAAM,QAAQ,MAAM,CAAC,MAAM,SAAY,SAAS,MAAM,CAAC,CAAC,IAAI;AAC5D,UAAM,UAAU,MAAM,CAAC,MAAM,SAAY,SAAS,MAAM,CAAC,CAAC,IAAI;AAC9D,QAAI,CAAC,OAAO,SAAS,KAAK,KAAK,CAAC,OAAO,SAAS,OAAO,EAAG,QAAO,EAAE,IAAI,OAAO,QAAQ,cAAc;AACpG,WAAO,EAAE,IAAI,MAAM,SAAS,aAAa,QAAQ,KAAK,OAAO,EAAE;AAAA,EACjE;AAEA,MAAI,oBAAoB,KAAK,OAAO,GAAG;AACrC,UAAM,QAAQ,SAAS,OAAO;AAC9B,QAAI,CAAC,OAAO,SAAS,KAAK,EAAG,QAAO,EAAE,IAAI,OAAO,QAAQ,cAAc;AACvE,WAAO,EAAE,IAAI,MAAM,SAAS,aAAa,QAAQ,EAAE,EAAE;AAAA,EACvD;AAEA,SAAO,EAAE,IAAI,OAAO,QAAQ,cAAc;AAC5C;AAEO,SAAS,eAAe,SAAiB,OAAoC;AAClF,QAAM,OAAO,OAAO,SAAS,OAAO,KAAK,UAAU,IAAI,KAAK,MAAM,OAAO,IAAI;AAC7E,QAAM,QAAQ,KAAK,MAAM,OAAO,EAAE;AAClC,QAAM,OAAO,OAAO;AAEpB,MAAI,UAAU,QAAS,QAAO,GAAG,KAAK,IAAI,OAAO,IAAI,EAAE,SAAS,GAAG,GAAG,CAAC;AACvE,MAAI,UAAU,UAAW,SAAQ,OAAO,IAAI,QAAQ,CAAC;AACrD,MAAI,UAAU,EAAG,QAAO,GAAG,IAAI;AAC/B,MAAI,SAAS,EAAG,QAAO,GAAG,KAAK;AAC/B,SAAO,GAAG,KAAK,KAAK,IAAI;AAC1B;",
+  "names": []
+}

package/dist/modules/staff/lib/time-tracking/featureAccess.js

@@ -0,0 +1,41 @@
+import { createLogger } from "@open-mercato/shared/lib/logger";
+const logger = createLogger("staff").child({ component: "time-tracking/featureAccess" });
+const DENIED = { allowed: false, grantedFeatures: [], resolved: false };
+async function resolveFeatureAccess(container, userId, required, scope) {
+  if (!userId) return { ...DENIED, resolved: true };
+  let rbac;
+  try {
+    rbac = container.resolve("rbacService");
+  } catch (err) {
+    logger.warn("rbacService could not be resolved; denying", { err, userId, required });
+    return { ...DENIED };
+  }
+  if (!rbac?.userHasAllFeatures) {
+    logger.warn("rbacService cannot answer feature checks; denying", { userId, required });
+    return { ...DENIED };
+  }
+  let allowed = false;
+  try {
+    allowed = await rbac.userHasAllFeatures(userId, [...required], scope) === true;
+  } catch (err) {
+    logger.warn("feature check failed; denying", { err, userId, required });
+    return { ...DENIED };
+  }
+  let grantedFeatures = [];
+  let resolved = false;
+  if (!rbac.getGrantedFeatures) {
+    logger.warn("rbacService cannot list grants; feature decision still stands", { userId, required });
+  } else {
+    try {
+      grantedFeatures = await rbac.getGrantedFeatures(userId, scope) ?? [];
+      resolved = true;
+    } catch (err) {
+      logger.warn("grant list could not be read; feature decision still stands", { err, userId });
+    }
+  }
+  return { allowed, grantedFeatures, resolved };
+}
+export {
+  resolveFeatureAccess
+};
+//# sourceMappingURL=featureAccess.js.map

package/dist/modules/staff/lib/time-tracking/featureAccess.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../src/modules/staff/lib/time-tracking/featureAccess.ts"],
+  "sourcesContent": ["import { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('staff').child({ component: 'time-tracking/featureAccess' })\n\ntype RbacServiceLike = {\n  getGrantedFeatures?: (\n    userId: string,\n    scope: { tenantId: string | null; organizationId: string | null },\n  ) => Promise<string[]>\n  userHasAllFeatures?: (\n    userId: string,\n    required: string[],\n    scope: { tenantId: string | null; organizationId: string | null },\n  ) => Promise<boolean>\n}\n\ntype ContainerLike = { resolve: (name: string) => unknown }\n\nexport type FeatureAccess = {\n  /** The decision. Fail-closed: `false` whenever it could not be established. */\n  allowed: boolean\n  /**\n   * The caller's grants, for the plumbing that genuinely needs a list (mutation\n   * guards, enrichers). Empty when unresolved \u2014 check `resolved` before reading\n   * anything into an empty array.\n   */\n  grantedFeatures: string[]\n  /**\n   * `false` when RBAC could not be consulted \u2014 the service was unresolvable, it\n   * exposes no way to answer, or the call threw. An unresolved lookup is not the\n   * same as \"no permission\", and a caller that treats it as one silently\n   * downgrades somebody's access.\n   *\n   * `true` therefore means the answer is definite: RBAC produced the grant list,\n   * or there was no one to ask about (no user). An empty `grantedFeatures` is\n   * only ever a real answer under `resolved`.\n   */\n  resolved: boolean\n}\n\nconst DENIED: FeatureAccess = { allowed: false, grantedFeatures: [], resolved: false }\n\n/**\n * One question, one authority, one failure direction.\n *\n * The module previously carried twelve hand-rolled copies of this lookup, each\n * choosing its own semantics: nine returned `[]` on failure (fail-closed, but\n * silently \u2014 a manager was demoted to their own project memberships and nothing\n * said why), six returned `null` and were then read as `granted === null || \u2026`\n * (fail-open \u2014 which is how an RBAC outage handed hourly rates to plain report\n * viewers), and the rest were somewhere in between. The same\n * `staff.timesheets.rates.view` flag ended up failing closed on two surfaces and\n * open on three.\n *\n * The decision comes from `userHasAllFeatures` rather than from matching the\n * grant array locally. Both paths agree in a healthy runtime \u2014 `getGrantedFeatures`\n * expands a super-admin's `'*'` into per-module wildcards that `authorizeFeatures`\n * understands \u2014 but only the service call carries `isSuperAdmin` explicitly, and\n * asking one question in one way is what stops two surfaces disagreeing about the\n * same person.\n *\n * The array is returned alongside it because guards and enrichers legitimately\n * need a list. It is deliberately *not* the thing to authorize on.\n *\n * A failed lookup logs. That is the point: the previous silence meant an RBAC\n * outage presented to users as missing data and to operators as nothing at all.\n */\nexport async function resolveFeatureAccess(\n  container: ContainerLike,\n  userId: string | null,\n  required: readonly string[],\n  scope: { tenantId: string | null; organizationId: string | null },\n): Promise<FeatureAccess> {\n  if (!userId) return { ...DENIED, resolved: true }\n\n  let rbac: RbacServiceLike | undefined\n  try {\n    rbac = container.resolve('rbacService') as RbacServiceLike | undefined\n  } catch (err) {\n    logger.warn('rbacService could not be resolved; denying', { err, userId, required })\n    return { ...DENIED }\n  }\n  if (!rbac?.userHasAllFeatures) {\n    logger.warn('rbacService cannot answer feature checks; denying', { userId, required })\n    return { ...DENIED }\n  }\n\n  let allowed = false\n  try {\n    allowed = (await rbac.userHasAllFeatures(userId, [...required], scope)) === true\n  } catch (err) {\n    logger.warn('feature check failed; denying', { err, userId, required })\n    return { ...DENIED }\n  }\n\n  // The grant list is a convenience, not the decision, so a failure to read it\n  // downgrades the plumbing that wants a list without touching `allowed`.\n  // A service that cannot produce a list at all is the same kind of failure as\n  // one whose call throws: the empty array is a fallback, not RBAC's answer, and\n  // saying otherwise is how an empty list gets read as authoritative.\n  let grantedFeatures: string[] = []\n  let resolved = false\n  if (!rbac.getGrantedFeatures) {\n    logger.warn('rbacService cannot list grants; feature decision still stands', { userId, required })\n  } else {\n    try {\n      grantedFeatures = (await rbac.getGrantedFeatures(userId, scope)) ?? []\n      resolved = true\n    } catch (err) {\n      logger.warn('grant list could not be read; feature decision still stands', { err, userId })\n    }\n  }\n\n  return { allowed, grantedFeatures, resolved }\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,OAAO,EAAE,MAAM,EAAE,WAAW,8BAA8B,CAAC;AAsCvF,MAAM,SAAwB,EAAE,SAAS,OAAO,iBAAiB,CAAC,GAAG,UAAU,MAAM;AA2BrF,eAAsB,qBACpB,WACA,QACA,UACA,OACwB;AACxB,MAAI,CAAC,OAAQ,QAAO,EAAE,GAAG,QAAQ,UAAU,KAAK;AAEhD,MAAI;AACJ,MAAI;AACF,WAAO,UAAU,QAAQ,aAAa;AAAA,EACxC,SAAS,KAAK;AACZ,WAAO,KAAK,8CAA8C,EAAE,KAAK,QAAQ,SAAS,CAAC;AACnF,WAAO,EAAE,GAAG,OAAO;AAAA,EACrB;AACA,MAAI,CAAC,MAAM,oBAAoB;AAC7B,WAAO,KAAK,qDAAqD,EAAE,QAAQ,SAAS,CAAC;AACrF,WAAO,EAAE,GAAG,OAAO;AAAA,EACrB;AAEA,MAAI,UAAU;AACd,MAAI;AACF,cAAW,MAAM,KAAK,mBAAmB,QAAQ,CAAC,GAAG,QAAQ,GAAG,KAAK,MAAO;AAAA,EAC9E,SAAS,KAAK;AACZ,WAAO,KAAK,iCAAiC,EAAE,KAAK,QAAQ,SAAS,CAAC;AACtE,WAAO,EAAE,GAAG,OAAO;AAAA,EACrB;AAOA,MAAI,kBAA4B,CAAC;AACjC,MAAI,WAAW;AACf,MAAI,CAAC,KAAK,oBAAoB;AAC5B,WAAO,KAAK,iEAAiE,EAAE,QAAQ,SAAS,CAAC;AAAA,EACnG,OAAO;AACL,QAAI;AACF,wBAAmB,MAAM,KAAK,mBAAmB,QAAQ,KAAK,KAAM,CAAC;AACrE,iBAAW;AAAA,IACb,SAAS,KAAK;AACZ,aAAO,KAAK,+DAA+D,EAAE,KAAK,OAAO,CAAC;AAAA,IAC5F;AAAA,EACF;AAEA,SAAO,EAAE,SAAS,iBAAiB,SAAS;AAC9C;",
+  "names": []
+}

package/dist/modules/staff/lib/time-tracking/interval.js

@@ -0,0 +1,72 @@
+const MINUTES_PER_DAY = 1440;
+const CLOCK_PATTERN = /^(\d{1,2}):(\d{2})$/;
+function parseClock(value) {
+  if (typeof value !== "string") return null;
+  const match = CLOCK_PATTERN.exec(value.trim());
+  if (!match) return null;
+  const hours = Number.parseInt(match[1], 10);
+  const minutes = Number.parseInt(match[2], 10);
+  if (hours > 23 || minutes > 59) return null;
+  return hours * 60 + minutes;
+}
+function formatClock(minutesOfDay) {
+  const normalized = (Math.round(minutesOfDay) % MINUTES_PER_DAY + MINUTES_PER_DAY) % MINUTES_PER_DAY;
+  const hours = Math.floor(normalized / 60);
+  const minutes = normalized % 60;
+  return `${String(hours).padStart(2, "0")}:${String(minutes).padStart(2, "0")}`;
+}
+function normalizeDuration(value) {
+  if (value === null || value === void 0) return null;
+  if (!Number.isFinite(value) || value < 0) return null;
+  return Math.round(value);
+}
+function deriveInterval(input) {
+  const start = parseClock(input.start);
+  const end = parseClock(input.end);
+  const duration = normalizeDuration(input.durationMinutes);
+  if (start !== null && end !== null) {
+    const crossesMidnight = end < start;
+    const computedDuration = crossesMidnight ? MINUTES_PER_DAY - start + end : end - start;
+    return {
+      start: formatClock(start),
+      end: formatClock(end),
+      durationMinutes: computedDuration,
+      computed: duration === computedDuration ? null : "duration",
+      crossesMidnight
+    };
+  }
+  if (start !== null && duration !== null) {
+    const absoluteEnd = start + duration;
+    return {
+      start: formatClock(start),
+      end: formatClock(absoluteEnd),
+      durationMinutes: duration,
+      computed: "end",
+      crossesMidnight: absoluteEnd >= MINUTES_PER_DAY
+    };
+  }
+  if (end !== null && duration !== null) {
+    const absoluteStart = end - duration;
+    return {
+      start: formatClock(absoluteStart),
+      end: formatClock(end),
+      durationMinutes: duration,
+      computed: "start",
+      crossesMidnight: absoluteStart < 0
+    };
+  }
+  return {
+    start: start === null ? null : formatClock(start),
+    end: end === null ? null : formatClock(end),
+    durationMinutes: duration,
+    computed: null,
+    crossesMidnight: false
+  };
+}
+export {
+  MINUTES_PER_DAY,
+  deriveInterval,
+  formatClock,
+  parseClock
+};
+//# sourceMappingURL=interval.js.map

package/dist/modules/staff/lib/time-tracking/interval.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../src/modules/staff/lib/time-tracking/interval.ts"],
+  "sourcesContent": ["export const MINUTES_PER_DAY = 1440\n\nexport type IntervalInput = {\n  start?: string | null\n  end?: string | null\n  durationMinutes?: number | null\n}\n\nexport type ComputedIntervalField = 'start' | 'end' | 'duration' | null\n\nexport type DerivedInterval = {\n  start: string | null\n  end: string | null\n  durationMinutes: number | null\n  computed: ComputedIntervalField\n  crossesMidnight: boolean\n}\n\nconst CLOCK_PATTERN = /^(\\d{1,2}):(\\d{2})$/\n\nexport function parseClock(value: string | null | undefined): number | null {\n  if (typeof value !== 'string') return null\n  const match = CLOCK_PATTERN.exec(value.trim())\n  if (!match) return null\n  const hours = Number.parseInt(match[1], 10)\n  const minutes = Number.parseInt(match[2], 10)\n  if (hours > 23 || minutes > 59) return null\n  return hours * 60 + minutes\n}\n\nexport function formatClock(minutesOfDay: number): string {\n  const normalized = ((Math.round(minutesOfDay) % MINUTES_PER_DAY) + MINUTES_PER_DAY) % MINUTES_PER_DAY\n  const hours = Math.floor(normalized / 60)\n  const minutes = normalized % 60\n  return `${String(hours).padStart(2, '0')}:${String(minutes).padStart(2, '0')}`\n}\n\nfunction normalizeDuration(value: number | null | undefined): number | null {\n  if (value === null || value === undefined) return null\n  if (!Number.isFinite(value) || value < 0) return null\n  return Math.round(value)\n}\n\nexport function deriveInterval(input: IntervalInput): DerivedInterval {\n  const start = parseClock(input.start)\n  const end = parseClock(input.end)\n  const duration = normalizeDuration(input.durationMinutes)\n\n  if (start !== null && end !== null) {\n    const crossesMidnight = end < start\n    const computedDuration = crossesMidnight ? MINUTES_PER_DAY - start + end : end - start\n    return {\n      start: formatClock(start),\n      end: formatClock(end),\n      durationMinutes: computedDuration,\n      computed: duration === computedDuration ? null : 'duration',\n      crossesMidnight,\n    }\n  }\n\n  if (start !== null && duration !== null) {\n    const absoluteEnd = start + duration\n    return {\n      start: formatClock(start),\n      end: formatClock(absoluteEnd),\n      durationMinutes: duration,\n      computed: 'end',\n      crossesMidnight: absoluteEnd >= MINUTES_PER_DAY,\n    }\n  }\n\n  if (end !== null && duration !== null) {\n    const absoluteStart = end - duration\n    return {\n      start: formatClock(absoluteStart),\n      end: formatClock(end),\n      durationMinutes: duration,\n      computed: 'start',\n      crossesMidnight: absoluteStart < 0,\n    }\n  }\n\n  return {\n    start: start === null ? null : formatClock(start),\n    end: end === null ? null : formatClock(end),\n    durationMinutes: duration,\n    computed: null,\n    crossesMidnight: false,\n  }\n}\n"],
+  "mappings": "AAAO,MAAM,kBAAkB;AAkB/B,MAAM,gBAAgB;AAEf,SAAS,WAAW,OAAiD;AAC1E,MAAI,OAAO,UAAU,SAAU,QAAO;AACtC,QAAM,QAAQ,cAAc,KAAK,MAAM,KAAK,CAAC;AAC7C,MAAI,CAAC,MAAO,QAAO;AACnB,QAAM,QAAQ,OAAO,SAAS,MAAM,CAAC,GAAG,EAAE;AAC1C,QAAM,UAAU,OAAO,SAAS,MAAM,CAAC,GAAG,EAAE;AAC5C,MAAI,QAAQ,MAAM,UAAU,GAAI,QAAO;AACvC,SAAO,QAAQ,KAAK;AACtB;AAEO,SAAS,YAAY,cAA8B;AACxD,QAAM,cAAe,KAAK,MAAM,YAAY,IAAI,kBAAmB,mBAAmB;AACtF,QAAM,QAAQ,KAAK,MAAM,aAAa,EAAE;AACxC,QAAM,UAAU,aAAa;AAC7B,SAAO,GAAG,OAAO,KAAK,EAAE,SAAS,GAAG,GAAG,CAAC,IAAI,OAAO,OAAO,EAAE,SAAS,GAAG,GAAG,CAAC;AAC9E;AAEA,SAAS,kBAAkB,OAAiD;AAC1E,MAAI,UAAU,QAAQ,UAAU,OAAW,QAAO;AAClD,MAAI,CAAC,OAAO,SAAS,KAAK,KAAK,QAAQ,EAAG,QAAO;AACjD,SAAO,KAAK,MAAM,KAAK;AACzB;AAEO,SAAS,eAAe,OAAuC;AACpE,QAAM,QAAQ,WAAW,MAAM,KAAK;AACpC,QAAM,MAAM,WAAW,MAAM,GAAG;AAChC,QAAM,WAAW,kBAAkB,MAAM,eAAe;AAExD,MAAI,UAAU,QAAQ,QAAQ,MAAM;AAClC,UAAM,kBAAkB,MAAM;AAC9B,UAAM,mBAAmB,kBAAkB,kBAAkB,QAAQ,MAAM,MAAM;AACjF,WAAO;AAAA,MACL,OAAO,YAAY,KAAK;AAAA,MACxB,KAAK,YAAY,GAAG;AAAA,MACpB,iBAAiB;AAAA,MACjB,UAAU,aAAa,mBAAmB,OAAO;AAAA,MACjD;AAAA,IACF;AAAA,EACF;AAEA,MAAI,UAAU,QAAQ,aAAa,MAAM;AACvC,UAAM,cAAc,QAAQ;AAC5B,WAAO;AAAA,MACL,OAAO,YAAY,KAAK;AAAA,MACxB,KAAK,YAAY,WAAW;AAAA,MAC5B,iBAAiB;AAAA,MACjB,UAAU;AAAA,MACV,iBAAiB,eAAe;AAAA,IAClC;AAAA,EACF;AAEA,MAAI,QAAQ,QAAQ,aAAa,MAAM;AACrC,UAAM,gBAAgB,MAAM;AAC5B,WAAO;AAAA,MACL,OAAO,YAAY,aAAa;AAAA,MAChC,KAAK,YAAY,GAAG;AAAA,MACpB,iBAAiB;AAAA,MACjB,UAAU;AAAA,MACV,iBAAiB,gBAAgB;AAAA,IACnC;AAAA,EACF;AAEA,SAAO;AAAA,IACL,OAAO,UAAU,OAAO,OAAO,YAAY,KAAK;AAAA,IAChD,KAAK,QAAQ,OAAO,OAAO,YAAY,GAAG;AAAA,IAC1C,iBAAiB;AAAA,IACjB,UAAU;AAAA,IACV,iBAAiB;AAAA,EACnB;AACF;",
+  "names": []
+}

package/dist/modules/staff/lib/time-tracking/migrateProjectCodes.js

@@ -0,0 +1,88 @@
+import { StaffTimeProject, StaffTimeTask } from "../../data/entities.js";
+import { PROJECT_CODE_TARGET_LENGTH, deriveProjectCodeBase } from "./projectCode.js";
+import { formatTaskReference } from "../timesheets-tasks/taskReference.js";
+function planProjectCodeMigration(projects, taskCountByProjectId) {
+  const taken = /* @__PURE__ */ new Set();
+  const shortening = [];
+  let skipped = 0;
+  for (const project of projects) {
+    const code = (project.code ?? "").trim();
+    if (code.length > 0 && code.length <= PROJECT_CODE_TARGET_LENGTH) {
+      taken.add(code.toUpperCase());
+      skipped += 1;
+      continue;
+    }
+    shortening.push(project);
+  }
+  const ordered = [...shortening].sort((left, right) => left.id.localeCompare(right.id));
+  const changes = [];
+  for (const project of ordered) {
+    const base = deriveProjectCodeBase(project.name ?? "");
+    let candidate = base;
+    for (let counter = 2; taken.has(candidate.toUpperCase()); counter += 1) {
+      candidate = `${base}${counter}`;
+    }
+    taken.add(candidate.toUpperCase());
+    changes.push({
+      projectId: project.id,
+      projectName: project.name ?? "",
+      fromCode: project.code ?? "",
+      toCode: candidate,
+      taskCount: taskCountByProjectId.get(project.id) ?? 0
+    });
+  }
+  return { changes, skipped };
+}
+async function migrateProjectCodes(em, scope, options = {}) {
+  const projects = await em.find(StaffTimeProject, {
+    tenantId: scope.tenantId,
+    organizationId: scope.organizationId,
+    deletedAt: null
+  });
+  const tasks = await em.find(StaffTimeTask, {
+    tenantId: scope.tenantId,
+    organizationId: scope.organizationId,
+    deletedAt: null
+  });
+  const tasksByProjectId = /* @__PURE__ */ new Map();
+  for (const task of tasks) {
+    const bucket = tasksByProjectId.get(task.timeProjectId) ?? [];
+    bucket.push(task);
+    tasksByProjectId.set(task.timeProjectId, bucket);
+  }
+  const counts = new Map([...tasksByProjectId].map(([id, list]) => [id, list.length]));
+  const { changes, skipped } = planProjectCodeMigration(projects, counts);
+  if (options.dryRun) {
+    return {
+      changes,
+      skipped,
+      tasksRenumbered: changes.reduce((total, change) => total + change.taskCount, 0)
+    };
+  }
+  const projectById = new Map(projects.map((project) => [project.id, project]));
+  const now = /* @__PURE__ */ new Date();
+  let tasksRenumbered = 0;
+  await em.transactional(async (tem) => {
+    for (const change of changes) {
+      const project = projectById.get(change.projectId);
+      if (!project) continue;
+      const managed = tem.getReference(StaffTimeProject, project.id);
+      managed.code = change.toCode;
+      managed.updatedAt = now;
+      tem.persist(managed);
+      for (const task of tasksByProjectId.get(change.projectId) ?? []) {
+        const managedTask = tem.getReference(StaffTimeTask, task.id);
+        managedTask.reference = formatTaskReference(change.toCode, task.sequenceNumber);
+        managedTask.updatedAt = now;
+        tem.persist(managedTask);
+        tasksRenumbered += 1;
+      }
+    }
+  });
+  return { changes, skipped, tasksRenumbered };
+}
+export {
+  migrateProjectCodes,
+  planProjectCodeMigration
+};
+//# sourceMappingURL=migrateProjectCodes.js.map

package/dist/modules/staff/lib/time-tracking/migrateProjectCodes.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../src/modules/staff/lib/time-tracking/migrateProjectCodes.ts"],
+  "sourcesContent": ["/**\n * Rewrites existing project codes to the short form and re-derives every task\n * reference to match.\n *\n * `staff_time_tasks.reference` is denormalised (`<project code>-<sequence>`) and\n * frozen at creation, because it is quoted where the task row is no longer\n * joined. That freeze is what makes this a migration rather than a settings\n * change: shortening a project's code does not retro-number its tasks, so\n * without this the tenant ends up with `EHK` projects whose tasks still say\n * `ERGO-HESTIA-KORPO-4`.\n *\n * What this deliberately preserves:\n *\n *  * **Sequence numbers.** `APOLLO-14` becomes `APO-14`, never `APO-1`. The\n *    number is the task's identity to the people who use it; only the prefix\n *    changes.\n *  * **Hand-picked codes.** A code that is already at or under the target length\n *    was chosen, not derived, so it is left exactly as it is.\n *\n * What it cannot preserve: a reference somebody wrote down outside the system.\n * Reports do not quote task references \u2014 report lines are labelled by task title\n * and `staff_time_report_entries` freezes minutes and money, never the reference\n * \u2014 so nothing already exported changes meaning. Anything a person memorised\n * does.\n */\n\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { StaffTimeProject, StaffTimeTask } from '../../data/entities'\nimport { PROJECT_CODE_TARGET_LENGTH, deriveProjectCodeBase } from './projectCode'\nimport { formatTaskReference } from '../timesheets-tasks/taskReference'\n\nexport type MigrateProjectCodesScope = { tenantId: string; organizationId: string }\n\nexport type ProjectCodeChange = {\n  projectId: string\n  projectName: string\n  fromCode: string\n  toCode: string\n  taskCount: number\n}\n\nexport type MigrateProjectCodesResult = {\n  changes: ProjectCodeChange[]\n  /** Projects left alone because their code was already short. */\n  skipped: number\n  tasksRenumbered: number\n}\n\n/**\n * Plans the rename without writing anything. Exported so the CLI can offer a dry\n * run: a rewrite of every code in a tenant is not something to discover the\n * shape of by executing it.\n */\nexport function planProjectCodeMigration(\n  projects: readonly Pick<StaffTimeProject, 'id' | 'name' | 'code'>[],\n  taskCountByProjectId: ReadonlyMap<string, number>,\n): { changes: ProjectCodeChange[]; skipped: number } {\n  // Codes that survive untouched are reserved first, so a project keeping `HBH`\n  // cannot have it taken from under it by a project being shortened to `HBH`.\n  const taken = new Set<string>()\n  const shortening: typeof projects[number][] = []\n  let skipped = 0\n\n  for (const project of projects) {\n    const code = (project.code ?? '').trim()\n    if (code.length > 0 && code.length <= PROJECT_CODE_TARGET_LENGTH) {\n      taken.add(code.toUpperCase())\n      skipped += 1\n      continue\n    }\n    shortening.push(project)\n  }\n\n  // Oldest first, so a re-run is stable and the same project keeps the same code\n  // rather than the order of a query deciding who gets the unsuffixed one.\n  const ordered = [...shortening].sort((left, right) => left.id.localeCompare(right.id))\n\n  const changes: ProjectCodeChange[] = []\n  for (const project of ordered) {\n    const base = deriveProjectCodeBase(project.name ?? '')\n    let candidate = base\n    for (let counter = 2; taken.has(candidate.toUpperCase()); counter += 1) {\n      candidate = `${base}${counter}`\n    }\n    taken.add(candidate.toUpperCase())\n    changes.push({\n      projectId: project.id,\n      projectName: project.name ?? '',\n      fromCode: project.code ?? '',\n      toCode: candidate,\n      taskCount: taskCountByProjectId.get(project.id) ?? 0,\n    })\n  }\n\n  return { changes, skipped }\n}\n\nexport async function migrateProjectCodes(\n  em: EntityManager,\n  scope: MigrateProjectCodesScope,\n  options: { dryRun?: boolean } = {},\n): Promise<MigrateProjectCodesResult> {\n  const projects = await em.find(StaffTimeProject, {\n    tenantId: scope.tenantId,\n    organizationId: scope.organizationId,\n    deletedAt: null,\n  })\n\n  const tasks = await em.find(StaffTimeTask, {\n    tenantId: scope.tenantId,\n    organizationId: scope.organizationId,\n    deletedAt: null,\n  })\n\n  const tasksByProjectId = new Map<string, StaffTimeTask[]>()\n  for (const task of tasks) {\n    const bucket = tasksByProjectId.get(task.timeProjectId) ?? []\n    bucket.push(task)\n    tasksByProjectId.set(task.timeProjectId, bucket)\n  }\n  const counts = new Map([...tasksByProjectId].map(([id, list]) => [id, list.length]))\n\n  const { changes, skipped } = planProjectCodeMigration(projects, counts)\n  if (options.dryRun) {\n    return {\n      changes,\n      skipped,\n      tasksRenumbered: changes.reduce((total, change) => total + change.taskCount, 0),\n    }\n  }\n\n  const projectById = new Map(projects.map((project) => [project.id, project]))\n  const now = new Date()\n  let tasksRenumbered = 0\n\n  // One transaction: a half-applied rename leaves tasks quoting a prefix their\n  // project no longer carries, which is the exact inconsistency this exists to\n  // remove.\n  await em.transactional(async (tem) => {\n    for (const change of changes) {\n      const project = projectById.get(change.projectId)\n      if (!project) continue\n      const managed = tem.getReference(StaffTimeProject, project.id)\n      managed.code = change.toCode\n      managed.updatedAt = now\n      tem.persist(managed)\n\n      for (const task of tasksByProjectId.get(change.projectId) ?? []) {\n        const managedTask = tem.getReference(StaffTimeTask, task.id)\n        // The sequence number is the task's identity to the people who use it;\n        // only the prefix moves.\n        managedTask.reference = formatTaskReference(change.toCode, task.sequenceNumber)\n        managedTask.updatedAt = now\n        tem.persist(managedTask)\n        tasksRenumbered += 1\n      }\n    }\n  })\n\n  return { changes, skipped, tasksRenumbered }\n}\n"],
+  "mappings": "AA2BA,SAAS,kBAAkB,qBAAqB;AAChD,SAAS,4BAA4B,6BAA6B;AAClE,SAAS,2BAA2B;AAwB7B,SAAS,yBACd,UACA,sBACmD;AAGnD,QAAM,QAAQ,oBAAI,IAAY;AAC9B,QAAM,aAAwC,CAAC;AAC/C,MAAI,UAAU;AAEd,aAAW,WAAW,UAAU;AAC9B,UAAM,QAAQ,QAAQ,QAAQ,IAAI,KAAK;AACvC,QAAI,KAAK,SAAS,KAAK,KAAK,UAAU,4BAA4B;AAChE,YAAM,IAAI,KAAK,YAAY,CAAC;AAC5B,iBAAW;AACX;AAAA,IACF;AACA,eAAW,KAAK,OAAO;AAAA,EACzB;AAIA,QAAM,UAAU,CAAC,GAAG,UAAU,EAAE,KAAK,CAAC,MAAM,UAAU,KAAK,GAAG,cAAc,MAAM,EAAE,CAAC;AAErF,QAAM,UAA+B,CAAC;AACtC,aAAW,WAAW,SAAS;AAC7B,UAAM,OAAO,sBAAsB,QAAQ,QAAQ,EAAE;AACrD,QAAI,YAAY;AAChB,aAAS,UAAU,GAAG,MAAM,IAAI,UAAU,YAAY,CAAC,GAAG,WAAW,GAAG;AACtE,kBAAY,GAAG,IAAI,GAAG,OAAO;AAAA,IAC/B;AACA,UAAM,IAAI,UAAU,YAAY,CAAC;AACjC,YAAQ,KAAK;AAAA,MACX,WAAW,QAAQ;AAAA,MACnB,aAAa,QAAQ,QAAQ;AAAA,MAC7B,UAAU,QAAQ,QAAQ;AAAA,MAC1B,QAAQ;AAAA,MACR,WAAW,qBAAqB,IAAI,QAAQ,EAAE,KAAK;AAAA,IACrD,CAAC;AAAA,EACH;AAEA,SAAO,EAAE,SAAS,QAAQ;AAC5B;AAEA,eAAsB,oBACpB,IACA,OACA,UAAgC,CAAC,GACG;AACpC,QAAM,WAAW,MAAM,GAAG,KAAK,kBAAkB;AAAA,IAC/C,UAAU,MAAM;AAAA,IAChB,gBAAgB,MAAM;AAAA,IACtB,WAAW;AAAA,EACb,CAAC;AAED,QAAM,QAAQ,MAAM,GAAG,KAAK,eAAe;AAAA,IACzC,UAAU,MAAM;AAAA,IAChB,gBAAgB,MAAM;AAAA,IACtB,WAAW;AAAA,EACb,CAAC;AAED,QAAM,mBAAmB,oBAAI,IAA6B;AAC1D,aAAW,QAAQ,OAAO;AACxB,UAAM,SAAS,iBAAiB,IAAI,KAAK,aAAa,KAAK,CAAC;AAC5D,WAAO,KAAK,IAAI;AAChB,qBAAiB,IAAI,KAAK,eAAe,MAAM;AAAA,EACjD;AACA,QAAM,SAAS,IAAI,IAAI,CAAC,GAAG,gBAAgB,EAAE,IAAI,CAAC,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC;AAEnF,QAAM,EAAE,SAAS,QAAQ,IAAI,yBAAyB,UAAU,MAAM;AACtE,MAAI,QAAQ,QAAQ;AAClB,WAAO;AAAA,MACL;AAAA,MACA;AAAA,MACA,iBAAiB,QAAQ,OAAO,CAAC,OAAO,WAAW,QAAQ,OAAO,WAAW,CAAC;AAAA,IAChF;AAAA,EACF;AAEA,QAAM,cAAc,IAAI,IAAI,SAAS,IAAI,CAAC,YAAY,CAAC,QAAQ,IAAI,OAAO,CAAC,CAAC;AAC5E,QAAM,MAAM,oBAAI,KAAK;AACrB,MAAI,kBAAkB;AAKtB,QAAM,GAAG,cAAc,OAAO,QAAQ;AACpC,eAAW,UAAU,SAAS;AAC5B,YAAM,UAAU,YAAY,IAAI,OAAO,SAAS;AAChD,UAAI,CAAC,QAAS;AACd,YAAM,UAAU,IAAI,aAAa,kBAAkB,QAAQ,EAAE;AAC7D,cAAQ,OAAO,OAAO;AACtB,cAAQ,YAAY;AACpB,UAAI,QAAQ,OAAO;AAEnB,iBAAW,QAAQ,iBAAiB,IAAI,OAAO,SAAS,KAAK,CAAC,GAAG;AAC/D,cAAM,cAAc,IAAI,aAAa,eAAe,KAAK,EAAE;AAG3D,oBAAY,YAAY,oBAAoB,OAAO,QAAQ,KAAK,cAAc;AAC9E,oBAAY,YAAY;AACxB,YAAI,QAAQ,WAAW;AACvB,2BAAmB;AAAA,MACrB;AAAA,IACF;AAAA,EACF,CAAC;AAED,SAAO,EAAE,SAAS,SAAS,gBAAgB;AAC7C;",
+  "names": []
+}

package/dist/modules/staff/lib/time-tracking/moneyVisibility.js

@@ -0,0 +1,10 @@
+import { resolveFeatureAccess } from "./featureAccess.js";
+const RATES_FEATURE = "staff.timesheets.rates.view";
+async function resolveMoneyVisibility(container, userId, scope) {
+  return (await resolveFeatureAccess(container, userId, [RATES_FEATURE], scope)).allowed;
+}
+export {
+  RATES_FEATURE,
+  resolveMoneyVisibility
+};
+//# sourceMappingURL=moneyVisibility.js.map