@open-mercato/core 0.8.1-develop.7296.1.2111d779db → 0.8.1-develop.7441.1.b42958b98c

package/dist/modules/staff/api/timesheets/time-entries/bulk/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../../src/modules/staff/api/timesheets/time-entries/bulk/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { CrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { findOneWithDecryption, findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { readJsonSafe } from '@open-mercato/shared/lib/http/readJsonSafe'\nimport { emitCrudSideEffects, flushCrudSideEffects } from '@open-mercato/shared/lib/commands/helpers'\nimport type { DataEngine } from '@open-mercato/shared/lib/data/engine'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { StaffTimeEntry, StaffTeamMember, StaffTimeProject, StaffTimeTask } from '../../../../data/entities'\nimport {\n  staffTimeEntryBulkSaveSchema,\n  type StaffTimeEntryBulkSaveInput,\n} from '../../../../data/validators'\nimport {\n  buildTimeEntryLockedError,\n  rebaseTimeEntryIntervalToDate,\n  reconcileTimeEntryInterval,\n  resolveTimeEntryBillable,\n  resolveTimeEntryNotesInput,\n  resolveTimeEntryProjectId,\n  resolveTimeEntrySettings,\n  roundedMinutesFor,\n  timeEntryTaskMatchesProject,\n  toStoredTimeEntryRateOverride,\n  type LockedTimeEntryRef,\n} from '../../../../commands/timesheets-entries'\nimport { staffTimeEntryCrudEvents } from '../../../../lib/crud'\nimport { emitStaffEvent } from '../../../../events'\nimport { invalidateStaffTimeEntryCache } from '../../../../lib/timesheets/timeEntryCacheInvalidation'\nimport {\n  STAFF_TIME_TRACKING_RESOURCE_KINDS,\n  runStaffMutationGuardAfterSuccess,\n  runStaffMutationGuards,\n} from '../../../guards'\nimport { runTimesheetInterceptors } from '../../_shared/withTimesheetInterceptors'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('staff')\n\n/**\n * A grid cell is addressed by the day the work started, never by the timestamp,\n * so both sides of the comparison collapse to `YYYY-MM-DD` (D-8).\n */\nfunction cellDateKey(value: Date | string | null | undefined): string {\n  if (!value) return ''\n  const date = value instanceof Date ? value : new Date(value)\n  return Number.isNaN(date.getTime()) ? String(value) : date.toISOString().slice(0, 10)\n}\n\ntype BulkRowError = { path: string; message: string; value?: unknown }\n\n/**\n * The batch answers with a per-row error list rather than a thrown 422: one grid\n * save spans a week of cells, so the client needs to know WHICH row it must fix.\n * The single-entry command raises the same refusals as `CrudHttpError` field\n * errors \u2014 same rule, different reporting shape.\n */\nfunction bulkValidationError(errors: BulkRowError[]): NextResponse {\n  return NextResponse.json({ ok: false, errors }, { status: 422 })\n}\n\n/**\n * A row as the write loop needs it: the payload plus the two things that must be\n * settled before the lock gate can address a cell \u2014 the task it names (validated\n * in scope) and the project the entry actually lands on, which a task-only row\n * inherits from its task exactly as the single-entry path does.\n */\ntype BulkEntryInput = StaffTimeEntryBulkSaveInput['entries'][number]\n\ntype ResolvedBulkRow = {\n  entry: BulkEntryInput\n  task: { id: string; timeProjectId: string } | null\n  timeProjectId: string\n}\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: ['staff.timesheets.manage_own'] },\n}\n\nexport async function POST(req: Request) {\n  try {\n    const container = await createRequestContainer()\n    const auth = await getAuthFromRequest(req)\n    const { translate } = await resolveTranslations()\n    if (!auth) throw new CrudHttpError(401, { error: translate('staff.errors.unauthorized', 'Unauthorized') })\n\n    const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n    const tenantId = scope?.tenantId ?? auth.tenantId ?? null\n    const organizationId = scope?.selectedId ?? auth.orgId ?? null\n    if (!tenantId || !organizationId) {\n      throw new CrudHttpError(400, { error: translate('staff.errors.missingScope', 'Missing tenant or organization scope.') })\n    }\n\n    const interceptors = await runTimesheetInterceptors({\n      request: req,\n      method: 'POST',\n      scope: { container, userId: auth.sub, tenantId, organizationId },\n      body: await readJsonSafe<Record<string, unknown>>(req, {}),\n    })\n    if (!interceptors.ok) return interceptors.response\n    const { session } = interceptors\n\n    const parsed = staffTimeEntryBulkSaveSchema.safeParse(session.body)\n    if (!parsed.success) {\n      const errors = parsed.error.issues.map((issue) => ({\n        path: issue.path.join('.'),\n        message: issue.message,\n      }))\n      return NextResponse.json({ ok: false, errors }, { status: 422 })\n    }\n\n    const { entries } = parsed.data\n\n    // Tags are REFUSED here rather than accepted and dropped.\n    //\n    // The single-entry path assigns tags by dispatching the tag commands, which\n    // fork their own EntityManager so they can carry their own audit entry, undo\n    // and lock check. Inside this route's `em.transactional` that fork would not\n    // see the rows the transaction has not committed yet, and dispatching AFTER\n    // the commit would answer `{ ok: true, created: n }` for a batch whose tags\n    // silently failed \u2014 a response carrying only counts cannot say which cell\n    // lost them, which is the very silent-success class this route is being\n    // fixed for. So the row is rejected and the user is pointed at the entry\n    // dialog, which writes tags through the commands with all of their\n    // guarantees intact.\n    const taggedRows = entries.filter((entry) => entry.tagIds !== undefined)\n    if (taggedRows.length > 0) {\n      const message = translate(\n        'staff.timesheets.errors.bulkTagsUnsupported',\n        'Tags cannot be changed from the timesheet grid. Open the time entry to edit its tags.',\n      )\n      return bulkValidationError(taggedRows.map(() => ({ path: 'entries[].tagIds', message })))\n    }\n\n    const em = (container.resolve('em') as EntityManager).fork()\n    const scopeCtx = { tenantId, organizationId }\n\n    const staffMember = await findOneWithDecryption(\n      em,\n      StaffTeamMember,\n      { userId: auth.sub, tenantId, organizationId, deletedAt: null },\n      {},\n      scopeCtx,\n    )\n    if (!staffMember) {\n      throw new CrudHttpError(403, { error: translate('staff.timesheets.errors.noStaffMember', 'No staff member linked to your account.') })\n    }\n    const staffMemberId = staffMember.id\n\n    // Validate that all referenced taskIds exist and are in-scope, in one query\n    // for the whole batch. Same rule the single-entry path applies through\n    // `requireTaskInScope`: a dangling task reference is refused rather than\n    // stored, because the task rollups aggregate entries by `task_id` and a stale\n    // or foreign UUID would silently move hours onto another project's card.\n    const referencedTaskIds = [\n      ...new Set(\n        entries\n          .map((entry) => entry.taskId)\n          .filter((id): id is string => typeof id === 'string' && id.length > 0),\n      ),\n    ]\n    const tasksById = new Map<string, { id: string; timeProjectId: string }>()\n    if (referencedTaskIds.length > 0) {\n      const validTasks = await em.find(StaffTimeTask, {\n        id: { $in: referencedTaskIds },\n        tenantId,\n        organizationId,\n        deletedAt: null,\n      }, { fields: ['id', 'timeProjectId'] })\n      for (const task of validTasks) tasksById.set(task.id, { id: task.id, timeProjectId: task.timeProjectId })\n      const invalidTaskIds = referencedTaskIds.filter((id) => !tasksById.has(id))\n      if (invalidTaskIds.length > 0) {\n        const message = translate('staff.timesheets.errors.taskNotFound', 'Task not found or not accessible.')\n        return bulkValidationError(\n          invalidTaskIds.map((id) => ({ path: 'entries[].taskId', message, value: id })),\n        )\n      }\n    }\n\n    // Every row is pinned to the project it will actually land on BEFORE the lock\n    // gate runs, because the gate addresses a cell by (project, date) \u2014 a task row\n    // that inherited its project must be checked against that inherited cell, not\n    // against a blank one.\n    const resolvedRows: ResolvedBulkRow[] = []\n    const missingProjectErrors: BulkRowError[] = []\n    const taskProjectMismatchErrors: BulkRowError[] = []\n    for (const entry of entries) {\n      const task = entry.taskId ? tasksById.get(entry.taskId) ?? null : null\n      const timeProjectId = resolveTimeEntryProjectId(entry.timeProjectId, task)\n      if (!timeProjectId) {\n        missingProjectErrors.push({\n          path: 'entries[].timeProjectId',\n          message: translate('staff.timesheets.errors.projectRequired', 'Time project id is required.'),\n        })\n        continue\n      }\n      if (!timeEntryTaskMatchesProject(task, timeProjectId)) {\n        taskProjectMismatchErrors.push({\n          path: 'entries[].taskId',\n          message: translate('staff.timesheets.errors.taskNotFound', 'Task not found or not accessible.'),\n          value: entry.taskId,\n        })\n        continue\n      }\n      resolvedRows.push({ entry, task, timeProjectId })\n    }\n    if (missingProjectErrors.length > 0 || taskProjectMismatchErrors.length > 0) {\n      return bulkValidationError([...missingProjectErrors, ...taskProjectMismatchErrors])\n    }\n\n    // Validate that all referenced timeProjectIds exist and are in-scope. The\n    // project rows are kept, not just their ids: a created entry snapshots the\n    // project's currency and inherits its billable default (D-3), so one query\n    // serves validation and both defaults.\n    const referencedProjectIds = [...new Set(resolvedRows.map((row) => row.timeProjectId))]\n    const projectsById = new Map<string, { currencyCode?: string | null; billableByDefault?: boolean | null }>()\n    if (referencedProjectIds.length > 0) {\n      const validProjects = await em.find(StaffTimeProject, {\n        id: { $in: referencedProjectIds },\n        tenantId,\n        organizationId,\n        deletedAt: null,\n      }, { fields: ['id', 'currencyCode', 'billableByDefault'] })\n      for (const project of validProjects) {\n        projectsById.set(project.id, {\n          currencyCode: project.currencyCode ?? null,\n          billableByDefault: project.billableByDefault ?? null,\n        })\n      }\n      const invalidIds = referencedProjectIds.filter((id) => !projectsById.has(id))\n      if (invalidIds.length > 0) {\n        const message = translate(\n          'staff.timesheets.errors.projectNotFound',\n          'Time project not found or not accessible.',\n        )\n        return bulkValidationError(\n          invalidIds.map((id) => ({ path: 'entries[].timeProjectId', message, value: id })),\n        )\n      }\n    }\n\n    const guardInput = {\n      tenantId,\n      organizationId,\n      userId: auth.sub ?? '',\n      resourceKind: STAFF_TIME_TRACKING_RESOURCE_KINDS.timeEntry,\n      resourceId: staffMemberId,\n      operation: 'update' as const,\n      requestMethod: req.method,\n      requestHeaders: req.headers,\n      mutationPayload: parsed.data as unknown as Record<string, unknown>,\n    }\n    const guardResult = await runStaffMutationGuards(container, guardInput)\n    if (!guardResult.ok) {\n      return NextResponse.json(\n        guardResult.errorBody ?? { error: 'Operation blocked by guard' },\n        { status: guardResult.errorStatus ?? 422 },\n      )\n    }\n\n    const existingIds = resolvedRows\n      .map((row) => row.entry.id)\n      .filter((id): id is string => typeof id === 'string' && id.length > 0)\n\n    // Validate referenced entry IDs upfront: a stale or foreign UUID would\n    // otherwise fall through to the create branch in the loop below and insert\n    // a duplicate row with that ID-less new identity. Reject as 422 instead.\n    if (existingIds.length > 0) {\n      const resolvedExisting = await em.find(\n        StaffTimeEntry,\n        { id: { $in: existingIds }, tenantId, organizationId, staffMemberId, deletedAt: null },\n        { fields: ['id'] },\n      )\n      const resolvedIdSet = new Set(resolvedExisting.map((entry) => entry.id))\n      const invalidIds = existingIds.filter((id) => !resolvedIdSet.has(id))\n      if (invalidIds.length > 0) {\n        return NextResponse.json(\n          {\n            ok: false,\n            errors: invalidIds.map((id) => ({\n              path: 'entries[].id',\n              message: translate(\n                'staff.timesheets.errors.entryNotFound',\n                'Time entry not found, deleted, or not owned by you.',\n              ),\n              value: id,\n            })),\n          },\n          { status: 422 },\n        )\n      }\n    }\n\n    // --- Lock gate (risk R3) -------------------------------------------------\n    //\n    // This is the endpoint the lock is most likely to leak through, because the\n    // grid addresses a cell by (project, date) and only carries an id when the\n    // client happened to have one loaded. So both shapes are checked:\n    //\n    //  * a row naming an id that resolves to a frozen entry, and\n    //  * an id-less row landing on a (project, date) cell a frozen entry already\n    //    occupies \u2014 the grid renders one summed value per cell, so creating a\n    //    second row there silently restates hours a closed report has billed.\n    //\n    // The batch fails WHOLESALE, before the transaction opens. A grid save is one\n    // user gesture spanning a week of cells and the response carries only counts,\n    // so applying the unlocked rows would leave the client unable to tell which\n    // cells landed \u2014 and the route already rejects the whole payload for an\n    // unknown project or a stale entry id, so a partial 409 would be the odd one\n    // out. The 409 names every offending id and the reports that froze them, so\n    // the grid can mark exactly those cells read-only and the user retries the\n    // rest after reloading (which is also what makes the lock badge appear).\n    //\n    // The cell is addressed by the RESOLVED project, so a task row that inherited\n    // its project is checked against the cell it will really occupy.\n    const idlessRows = resolvedRows.filter((row) => !row.entry.id)\n    const idlessCells = idlessRows.map((row) => `${cellDateKey(row.entry.date)}|${row.timeProjectId}`)\n    const lockConditions: Record<string, unknown>[] = []\n    if (existingIds.length > 0) lockConditions.push({ id: { $in: existingIds } })\n    if (idlessCells.length > 0) {\n      lockConditions.push({\n        date: { $in: idlessRows.map((row) => row.entry.date) },\n        timeProjectId: { $in: [...new Set(idlessRows.map((row) => row.timeProjectId))] },\n      })\n    }\n    if (lockConditions.length > 0) {\n      const existingIdSet = new Set(existingIds)\n      const idlessCellSet = new Set(idlessCells)\n      const lockedCandidates = await em.find(\n        StaffTimeEntry,\n        {\n          tenantId,\n          organizationId,\n          staffMemberId,\n          deletedAt: null,\n          lockedReportId: { $ne: null },\n          $or: lockConditions,\n        },\n        { fields: ['id', 'lockedReportId', 'date', 'timeProjectId'] },\n      )\n      // The (date \u00D7 project) condition above is a cross product, so it can match a\n      // locked entry on a cell the payload never touches \u2014 narrowed here.\n      const blocked: LockedTimeEntryRef[] = lockedCandidates.filter(\n        (row) =>\n          existingIdSet.has(row.id) ||\n          idlessCellSet.has(`${cellDateKey(row.date)}|${row.timeProjectId ?? ''}`),\n      )\n      if (blocked.length > 0) {\n        throw buildTimeEntryLockedError(\n          blocked.map((row) => ({ id: row.id, lockedReportId: row.lockedReportId })),\n          translate,\n        )\n      }\n    }\n\n    type PendingChange = {\n      action: 'created' | 'updated' | 'deleted'\n      entity: StaffTimeEntry\n    }\n\n    // D-7 makes `rounded_minutes` the only input to cost, and this route writes\n    // durations outside the entries command \u2014 so every row it touches is rounded\n    // with the same tenant rule the command uses. The settings read is hoisted out\n    // of the loop because it is tenant-scoped and identical for every row; the\n    // billable default a created row falls back to comes from the same snapshot.\n    const settings = await resolveTimeEntrySettings(container, tenantId)\n\n    const { counts, pendingChanges } = await em.transactional(async (trx) => {\n      let created = 0\n      let updated = 0\n      let deleted = 0\n      const changes: PendingChange[] = []\n\n      const existingEntries = existingIds.length > 0\n        ? await findWithDecryption(\n            trx,\n            StaffTimeEntry,\n            { id: { $in: existingIds }, tenantId, organizationId, staffMemberId, deletedAt: null },\n            {},\n            scopeCtx,\n          )\n        : []\n\n      const existingMap = new Map(existingEntries.map((entry) => [entry.id, entry]))\n\n      for (const { entry, task, timeProjectId } of resolvedRows) {\n        const project = projectsById.get(timeProjectId) ?? null\n        // Both branches read the five fields the schema has always accepted\n        // through the SAME helpers the single-entry command uses, so a grid write\n        // and a dialog write cannot settle them differently (#silent-no-op).\n        const notes = resolveTimeEntryNotesInput(entry)\n        if (entry.id && existingMap.has(entry.id)) {\n          const existing = existingMap.get(entry.id)!\n          if (entry.durationMinutes === 0) {\n            existing.deletedAt = new Date()\n            deleted++\n            changes.push({ action: 'deleted', entity: existing })\n          } else {\n            // T4.10(a). A grid cell carries a duration and nothing else, so writing\n            // it straight onto an entry that has clocks would store a two-hour\n            // duration against a 09:00\u201310:00 span \u2014 exactly the contradiction the\n            // single-entry path already refuses to store. The same reconciliation\n            // is called here rather than re-derived: only-a-duration means\n            // `started_at` anchors and `ended_at` shifts to match, a clock that\n            // does not exist is never manufactured (so a cell whose entry has no\n            // clocks keeps having none, and a running timer is not stopped), and a\n            // re-dated row takes its clocks with it.\n            const interval = reconcileTimeEntryInterval({\n              stored: rebaseTimeEntryIntervalToDate({\n                stored: {\n                  startedAt: existing.startedAt ?? null,\n                  endedAt: existing.endedAt ?? null,\n                  durationMinutes: existing.durationMinutes,\n                },\n                fromDate: existing.date,\n                toDate: entry.date,\n              }),\n              startedAt: undefined,\n              endedAt: undefined,\n              durationMinutes: entry.durationMinutes,\n            })\n            const projectChanged = timeProjectId !== (existing.timeProjectId ?? null)\n            existing.date = entry.date\n            existing.timeProjectId = timeProjectId\n            // Snapshotted, never joined at read time, so a later project currency\n            // change cannot re-denominate money already reported (D-3) \u2014 and only\n            // restated when the entry actually moves between projects, exactly as\n            // the single-entry update command does it.\n            if (projectChanged) existing.rateCurrencyCode = project?.currencyCode ?? null\n            existing.startedAt = interval.startedAt\n            existing.endedAt = interval.endedAt\n            existing.durationMinutes = interval.durationMinutes\n            // D-7 keeps `rounded_minutes` the only input to cost, so it is restated\n            // from the effective duration the reconciliation settled on.\n            existing.roundedMinutes = roundedMinutesFor(interval.durationMinutes, settings, {\n              tenantId,\n              organizationId,\n            })\n            if (entry.taskId !== undefined) existing.taskId = task?.id ?? null\n            if (entry.isBillable !== undefined) existing.isBillable = entry.isBillable\n            if (entry.rateOverrideAmount !== undefined) {\n              existing.rateOverrideAmount = toStoredTimeEntryRateOverride(entry.rateOverrideAmount)\n            }\n            if (notes !== undefined) existing.notes = notes\n            existing.updatedAt = new Date()\n            updated++\n            changes.push({ action: 'updated', entity: existing })\n          }\n        } else {\n          const now = new Date()\n          const newEntry = trx.create(StaffTimeEntry, {\n            tenantId,\n            organizationId,\n            staffMemberId,\n            date: entry.date,\n            timeProjectId,\n            taskId: task?.id ?? null,\n            durationMinutes: entry.durationMinutes,\n            roundedMinutes: roundedMinutesFor(entry.durationMinutes, settings, {\n              tenantId,\n              organizationId,\n            }),\n            notes: notes ?? null,\n            isBillable: resolveTimeEntryBillable({\n              requested: entry.isBillable,\n              project,\n              settings,\n              scope: { tenantId, organizationId },\n            }),\n            rateOverrideAmount: toStoredTimeEntryRateOverride(entry.rateOverrideAmount),\n            rateCurrencyCode: project?.currencyCode ?? null,\n            source: 'manual',\n            createdAt: now,\n            updatedAt: now,\n          })\n          created++\n          changes.push({ action: 'created', entity: newEntry })\n        }\n      }\n\n      await trx.flush()\n      return { counts: { created, updated, deleted }, pendingChanges: changes }\n    })\n\n    const dataEngine = container.resolve<DataEngine>('dataEngine')\n    for (const change of pendingChanges) {\n      await emitCrudSideEffects({\n        dataEngine,\n        action: change.action,\n        entity: change.entity,\n        identifiers: {\n          id: change.entity.id,\n          organizationId: change.entity.organizationId,\n          tenantId: change.entity.tenantId,\n        },\n        events: staffTimeEntryCrudEvents,\n      })\n    }\n    await flushCrudSideEffects(dataEngine)\n\n    const invalidatedRecordIds = new Set<string>()\n    for (const change of pendingChanges) {\n      if (invalidatedRecordIds.has(change.entity.id)) continue\n      invalidatedRecordIds.add(change.entity.id)\n      await invalidateStaffTimeEntryCache(\n        container,\n        {\n          id: change.entity.id,\n          organizationId: change.entity.organizationId,\n          tenantId: change.entity.tenantId,\n        },\n        tenantId,\n        `bulk:${change.action}`,\n      )\n    }\n\n    if (guardResult.afterSuccessCallbacks.length) {\n      await runStaffMutationGuardAfterSuccess(guardResult.afterSuccessCallbacks, {\n        tenantId,\n        organizationId,\n        userId: auth.sub ?? '',\n        resourceKind: STAFF_TIME_TRACKING_RESOURCE_KINDS.timeEntry,\n        resourceId: staffMemberId,\n        operation: 'update',\n        requestMethod: req.method,\n        requestHeaders: req.headers,\n      })\n    }\n\n    // One batch-level event beside the per-row CRUD events already flushed above.\n    // It carries no `id`, so the entry-scoped subscribers that key off one record\n    // skip it and only the batch-aware ones (payroll exports, audit mirrors) react.\n    void emitStaffEvent('staff.timesheets.time_entry.bulk_updated', {\n      tenantId,\n      organizationId,\n      staffMemberId,\n      ...counts,\n      entryIds: pendingChanges.map((change) => change.entity.id),\n    }, { persistent: true }).catch((err) => {\n      logger.error('staff.timesheets emit time_entry.bulk_updated failed', { err })\n    })\n\n    return session.respond(200, { ok: true, ...counts })\n  } catch (err) {\n    if (err instanceof CrudHttpError) {\n      return NextResponse.json(err.body, { status: err.status })\n    }\n    const { translate } = await resolveTranslations()\n    logger.error('staff.timesheets.time-entries.bulk failed', { err })\n    return NextResponse.json(\n      { error: translate('staff.timesheets.errors.bulkSave', 'Failed to bulk save time entries.') },\n      { status: 400 },\n    )\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Staff',\n  summary: 'Bulk save time entries',\n  methods: {\n    POST: {\n      summary: 'Bulk save time entries',\n      description:\n        'Creates, updates, or soft-deletes multiple time entries in a single request. Entries with durationMinutes=0 and an existing id are soft-deleted. A row may name a taskId and let timeProjectId follow from it; task, description/notes precedence, isBillable defaulting, the rate override and the project currency snapshot follow the single-entry path exactly. tagIds is rejected with 422 \u2014 tags are edited from the time entry itself so their audit trail and undo stay intact. The whole batch is rejected with 409 time_entry_locked when any row targets \u2014 by id, or by landing on its (project, date) cell \u2014 an entry frozen in a closed report.',\n      requestBody: {\n        contentType: 'application/json',\n        schema: staffTimeEntryBulkSaveSchema,\n      },\n      responses: [\n        {\n          status: 200,\n          description: 'Bulk save completed',\n          schema: z.object({\n            ok: z.literal(true),\n            created: z.number(),\n            updated: z.number(),\n            deleted: z.number(),\n          }),\n        },\n        {\n          status: 422,\n          description: 'Validation error',\n          schema: z.object({\n            ok: z.literal(false),\n            errors: z.array(z.object({ path: z.string(), message: z.string() })),\n          }),\n        },\n        {\n          status: 409,\n          description: 'One or more rows target a time entry locked in a closed report; nothing was saved',\n          schema: z.object({\n            code: z.literal('time_entry_locked'),\n            error: z.string(),\n            lockedReportId: z.string().uuid().nullable(),\n            lockedEntryIds: z.array(z.string().uuid()),\n            lockedReportIds: z.array(z.string().uuid()),\n          }),\n        },\n        { status: 401, description: 'Unauthorized', schema: z.object({ error: z.string() }) },\n        { status: 403, description: 'Forbidden', schema: z.object({ error: z.string() }) },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AACnD,SAAS,qBAAqB;AAC9B,SAAS,2BAA2B;AACpC,SAAS,uBAAuB,0BAA0B;AAC1D,SAAS,oBAAoB;AAC7B,SAAS,qBAAqB,4BAA4B;AAI1D,SAAS,gBAAgB,iBAAiB,kBAAkB,qBAAqB;AACjF;AAAA,EACE;AAAA,OAEK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAEK;AACP,SAAS,gCAAgC;AACzC,SAAS,sBAAsB;AAC/B,SAAS,qCAAqC;AAC9C;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,gCAAgC;AACzC,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,OAAO;AAMnC,SAAS,YAAY,OAAiD;AACpE,MAAI,CAAC,MAAO,QAAO;AACnB,QAAM,OAAO,iBAAiB,OAAO,QAAQ,IAAI,KAAK,KAAK;AAC3D,SAAO,OAAO,MAAM,KAAK,QAAQ,CAAC,IAAI,OAAO,KAAK,IAAI,KAAK,YAAY,EAAE,MAAM,GAAG,EAAE;AACtF;AAUA,SAAS,oBAAoB,QAAsC;AACjE,SAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,GAAG,EAAE,QAAQ,IAAI,CAAC;AACjE;AAgBO,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,6BAA6B,EAAE;AAC9E;AAEA,eAAsB,KAAK,KAAc;AACvC,MAAI;AACF,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,QAAI,CAAC,KAAM,OAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,6BAA6B,cAAc,EAAE,CAAC;AAEzG,UAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AACxF,UAAM,WAAW,OAAO,YAAY,KAAK,YAAY;AACrD,UAAM,iBAAiB,OAAO,cAAc,KAAK,SAAS;AAC1D,QAAI,CAAC,YAAY,CAAC,gBAAgB;AAChC,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,6BAA6B,uCAAuC,EAAE,CAAC;AAAA,IACzH;AAEA,UAAM,eAAe,MAAM,yBAAyB;AAAA,MAClD,SAAS;AAAA,MACT,QAAQ;AAAA,MACR,OAAO,EAAE,WAAW,QAAQ,KAAK,KAAK,UAAU,eAAe;AAAA,MAC/D,MAAM,MAAM,aAAsC,KAAK,CAAC,CAAC;AAAA,IAC3D,CAAC;AACD,QAAI,CAAC,aAAa,GAAI,QAAO,aAAa;AAC1C,UAAM,EAAE,QAAQ,IAAI;AAEpB,UAAM,SAAS,6BAA6B,UAAU,QAAQ,IAAI;AAClE,QAAI,CAAC,OAAO,SAAS;AACnB,YAAM,SAAS,OAAO,MAAM,OAAO,IAAI,CAAC,WAAW;AAAA,QACjD,MAAM,MAAM,KAAK,KAAK,GAAG;AAAA,QACzB,SAAS,MAAM;AAAA,MACjB,EAAE;AACF,aAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACjE;AAEA,UAAM,EAAE,QAAQ,IAAI,OAAO;AAc3B,UAAM,aAAa,QAAQ,OAAO,CAAC,UAAU,MAAM,WAAW,MAAS;AACvE,QAAI,WAAW,SAAS,GAAG;AACzB,YAAM,UAAU;AAAA,QACd;AAAA,QACA;AAAA,MACF;AACA,aAAO,oBAAoB,WAAW,IAAI,OAAO,EAAE,MAAM,oBAAoB,QAAQ,EAAE,CAAC;AAAA,IAC1F;AAEA,UAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC3D,UAAM,WAAW,EAAE,UAAU,eAAe;AAE5C,UAAM,cAAc,MAAM;AAAA,MACxB;AAAA,MACA;AAAA,MACA,EAAE,QAAQ,KAAK,KAAK,UAAU,gBAAgB,WAAW,KAAK;AAAA,MAC9D,CAAC;AAAA,MACD;AAAA,IACF;AACA,QAAI,CAAC,aAAa;AAChB,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,yCAAyC,yCAAyC,EAAE,CAAC;AAAA,IACvI;AACA,UAAM,gBAAgB,YAAY;AAOlC,UAAM,oBAAoB;AAAA,MACxB,GAAG,IAAI;AAAA,QACL,QACG,IAAI,CAAC,UAAU,MAAM,MAAM,EAC3B,OAAO,CAAC,OAAqB,OAAO,OAAO,YAAY,GAAG,SAAS,CAAC;AAAA,MACzE;AAAA,IACF;AACA,UAAM,YAAY,oBAAI,IAAmD;AACzE,QAAI,kBAAkB,SAAS,GAAG;AAChC,YAAM,aAAa,MAAM,GAAG,KAAK,eAAe;AAAA,QAC9C,IAAI,EAAE,KAAK,kBAAkB;AAAA,QAC7B;AAAA,QACA;AAAA,QACA,WAAW;AAAA,MACb,GAAG,EAAE,QAAQ,CAAC,MAAM,eAAe,EAAE,CAAC;AACtC,iBAAW,QAAQ,WAAY,WAAU,IAAI,KAAK,IAAI,EAAE,IAAI,KAAK,IAAI,eAAe,KAAK,cAAc,CAAC;AACxG,YAAM,iBAAiB,kBAAkB,OAAO,CAAC,OAAO,CAAC,UAAU,IAAI,EAAE,CAAC;AAC1E,UAAI,eAAe,SAAS,GAAG;AAC7B,cAAM,UAAU,UAAU,wCAAwC,mCAAmC;AACrG,eAAO;AAAA,UACL,eAAe,IAAI,CAAC,QAAQ,EAAE,MAAM,oBAAoB,SAAS,OAAO,GAAG,EAAE;AAAA,QAC/E;AAAA,MACF;AAAA,IACF;AAMA,UAAM,eAAkC,CAAC;AACzC,UAAM,uBAAuC,CAAC;AAC9C,UAAM,4BAA4C,CAAC;AACnD,eAAW,SAAS,SAAS;AAC3B,YAAM,OAAO,MAAM,SAAS,UAAU,IAAI,MAAM,MAAM,KAAK,OAAO;AAClE,YAAM,gBAAgB,0BAA0B,MAAM,eAAe,IAAI;AACzE,UAAI,CAAC,eAAe;AAClB,6BAAqB,KAAK;AAAA,UACxB,MAAM;AAAA,UACN,SAAS,UAAU,2CAA2C,8BAA8B;AAAA,QAC9F,CAAC;AACD;AAAA,MACF;AACA,UAAI,CAAC,4BAA4B,MAAM,aAAa,GAAG;AACrD,kCAA0B,KAAK;AAAA,UAC7B,MAAM;AAAA,UACN,SAAS,UAAU,wCAAwC,mCAAmC;AAAA,UAC9F,OAAO,MAAM;AAAA,QACf,CAAC;AACD;AAAA,MACF;AACA,mBAAa,KAAK,EAAE,OAAO,MAAM,cAAc,CAAC;AAAA,IAClD;AACA,QAAI,qBAAqB,SAAS,KAAK,0BAA0B,SAAS,GAAG;AAC3E,aAAO,oBAAoB,CAAC,GAAG,sBAAsB,GAAG,yBAAyB,CAAC;AAAA,IACpF;AAMA,UAAM,uBAAuB,CAAC,GAAG,IAAI,IAAI,aAAa,IAAI,CAAC,QAAQ,IAAI,aAAa,CAAC,CAAC;AACtF,UAAM,eAAe,oBAAI,IAAkF;AAC3G,QAAI,qBAAqB,SAAS,GAAG;AACnC,YAAM,gBAAgB,MAAM,GAAG,KAAK,kBAAkB;AAAA,QACpD,IAAI,EAAE,KAAK,qBAAqB;AAAA,QAChC;AAAA,QACA;AAAA,QACA,WAAW;AAAA,MACb,GAAG,EAAE,QAAQ,CAAC,MAAM,gBAAgB,mBAAmB,EAAE,CAAC;AAC1D,iBAAW,WAAW,eAAe;AACnC,qBAAa,IAAI,QAAQ,IAAI;AAAA,UAC3B,cAAc,QAAQ,gBAAgB;AAAA,UACtC,mBAAmB,QAAQ,qBAAqB;AAAA,QAClD,CAAC;AAAA,MACH;AACA,YAAM,aAAa,qBAAqB,OAAO,CAAC,OAAO,CAAC,aAAa,IAAI,EAAE,CAAC;AAC5E,UAAI,WAAW,SAAS,GAAG;AACzB,cAAM,UAAU;AAAA,UACd;AAAA,UACA;AAAA,QACF;AACA,eAAO;AAAA,UACL,WAAW,IAAI,CAAC,QAAQ,EAAE,MAAM,2BAA2B,SAAS,OAAO,GAAG,EAAE;AAAA,QAClF;AAAA,MACF;AAAA,IACF;AAEA,UAAM,aAAa;AAAA,MACjB;AAAA,MACA;AAAA,MACA,QAAQ,KAAK,OAAO;AAAA,MACpB,cAAc,mCAAmC;AAAA,MACjD,YAAY;AAAA,MACZ,WAAW;AAAA,MACX,eAAe,IAAI;AAAA,MACnB,gBAAgB,IAAI;AAAA,MACpB,iBAAiB,OAAO;AAAA,IAC1B;AACA,UAAM,cAAc,MAAM,uBAAuB,WAAW,UAAU;AACtE,QAAI,CAAC,YAAY,IAAI;AACnB,aAAO,aAAa;AAAA,QAClB,YAAY,aAAa,EAAE,OAAO,6BAA6B;AAAA,QAC/D,EAAE,QAAQ,YAAY,eAAe,IAAI;AAAA,MAC3C;AAAA,IACF;AAEA,UAAM,cAAc,aACjB,IAAI,CAAC,QAAQ,IAAI,MAAM,EAAE,EACzB,OAAO,CAAC,OAAqB,OAAO,OAAO,YAAY,GAAG,SAAS,CAAC;AAKvE,QAAI,YAAY,SAAS,GAAG;AAC1B,YAAM,mBAAmB,MAAM,GAAG;AAAA,QAChC;AAAA,QACA,EAAE,IAAI,EAAE,KAAK,YAAY,GAAG,UAAU,gBAAgB,eAAe,WAAW,KAAK;AAAA,QACrF,EAAE,QAAQ,CAAC,IAAI,EAAE;AAAA,MACnB;AACA,YAAM,gBAAgB,IAAI,IAAI,iBAAiB,IAAI,CAAC,UAAU,MAAM,EAAE,CAAC;AACvE,YAAM,aAAa,YAAY,OAAO,CAAC,OAAO,CAAC,cAAc,IAAI,EAAE,CAAC;AACpE,UAAI,WAAW,SAAS,GAAG;AACzB,eAAO,aAAa;AAAA,UAClB;AAAA,YACE,IAAI;AAAA,YACJ,QAAQ,WAAW,IAAI,CAAC,QAAQ;AAAA,cAC9B,MAAM;AAAA,cACN,SAAS;AAAA,gBACP;AAAA,gBACA;AAAA,cACF;AAAA,cACA,OAAO;AAAA,YACT,EAAE;AAAA,UACJ;AAAA,UACA,EAAE,QAAQ,IAAI;AAAA,QAChB;AAAA,MACF;AAAA,IACF;AAwBA,UAAM,aAAa,aAAa,OAAO,CAAC,QAAQ,CAAC,IAAI,MAAM,EAAE;AAC7D,UAAM,cAAc,WAAW,IAAI,CAAC,QAAQ,GAAG,YAAY,IAAI,MAAM,IAAI,CAAC,IAAI,IAAI,aAAa,EAAE;AACjG,UAAM,iBAA4C,CAAC;AACnD,QAAI,YAAY,SAAS,EAAG,gBAAe,KAAK,EAAE,IAAI,EAAE,KAAK,YAAY,EAAE,CAAC;AAC5E,QAAI,YAAY,SAAS,GAAG;AAC1B,qBAAe,KAAK;AAAA,QAClB,MAAM,EAAE,KAAK,WAAW,IAAI,CAAC,QAAQ,IAAI,MAAM,IAAI,EAAE;AAAA,QACrD,eAAe,EAAE,KAAK,CAAC,GAAG,IAAI,IAAI,WAAW,IAAI,CAAC,QAAQ,IAAI,aAAa,CAAC,CAAC,EAAE;AAAA,MACjF,CAAC;AAAA,IACH;AACA,QAAI,eAAe,SAAS,GAAG;AAC7B,YAAM,gBAAgB,IAAI,IAAI,WAAW;AACzC,YAAM,gBAAgB,IAAI,IAAI,WAAW;AACzC,YAAM,mBAAmB,MAAM,GAAG;AAAA,QAChC;AAAA,QACA;AAAA,UACE;AAAA,UACA;AAAA,UACA;AAAA,UACA,WAAW;AAAA,UACX,gBAAgB,EAAE,KAAK,KAAK;AAAA,UAC5B,KAAK;AAAA,QACP;AAAA,QACA,EAAE,QAAQ,CAAC,MAAM,kBAAkB,QAAQ,eAAe,EAAE;AAAA,MAC9D;AAGA,YAAM,UAAgC,iBAAiB;AAAA,QACrD,CAAC,QACC,cAAc,IAAI,IAAI,EAAE,KACxB,cAAc,IAAI,GAAG,YAAY,IAAI,IAAI,CAAC,IAAI,IAAI,iBAAiB,EAAE,EAAE;AAAA,MAC3E;AACA,UAAI,QAAQ,SAAS,GAAG;AACtB,cAAM;AAAA,UACJ,QAAQ,IAAI,CAAC,SAAS,EAAE,IAAI,IAAI,IAAI,gBAAgB,IAAI,eAAe,EAAE;AAAA,UACzE;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAYA,UAAM,WAAW,MAAM,yBAAyB,WAAW,QAAQ;AAEnE,UAAM,EAAE,QAAQ,eAAe,IAAI,MAAM,GAAG,cAAc,OAAO,QAAQ;AACvE,UAAI,UAAU;AACd,UAAI,UAAU;AACd,UAAI,UAAU;AACd,YAAM,UAA2B,CAAC;AAElC,YAAM,kBAAkB,YAAY,SAAS,IACzC,MAAM;AAAA,QACJ;AAAA,QACA;AAAA,QACA,EAAE,IAAI,EAAE,KAAK,YAAY,GAAG,UAAU,gBAAgB,eAAe,WAAW,KAAK;AAAA,QACrF,CAAC;AAAA,QACD;AAAA,MACF,IACA,CAAC;AAEL,YAAM,cAAc,IAAI,IAAI,gBAAgB,IAAI,CAAC,UAAU,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC;AAE7E,iBAAW,EAAE,OAAO,MAAM,cAAc,KAAK,cAAc;AACzD,cAAM,UAAU,aAAa,IAAI,aAAa,KAAK;AAInD,cAAM,QAAQ,2BAA2B,KAAK;AAC9C,YAAI,MAAM,MAAM,YAAY,IAAI,MAAM,EAAE,GAAG;AACzC,gBAAM,WAAW,YAAY,IAAI,MAAM,EAAE;AACzC,cAAI,MAAM,oBAAoB,GAAG;AAC/B,qBAAS,YAAY,oBAAI,KAAK;AAC9B;AACA,oBAAQ,KAAK,EAAE,QAAQ,WAAW,QAAQ,SAAS,CAAC;AAAA,UACtD,OAAO;AAUL,kBAAM,WAAW,2BAA2B;AAAA,cAC1C,QAAQ,8BAA8B;AAAA,gBACpC,QAAQ;AAAA,kBACN,WAAW,SAAS,aAAa;AAAA,kBACjC,SAAS,SAAS,WAAW;AAAA,kBAC7B,iBAAiB,SAAS;AAAA,gBAC5B;AAAA,gBACA,UAAU,SAAS;AAAA,gBACnB,QAAQ,MAAM;AAAA,cAChB,CAAC;AAAA,cACD,WAAW;AAAA,cACX,SAAS;AAAA,cACT,iBAAiB,MAAM;AAAA,YACzB,CAAC;AACD,kBAAM,iBAAiB,mBAAmB,SAAS,iBAAiB;AACpE,qBAAS,OAAO,MAAM;AACtB,qBAAS,gBAAgB;AAKzB,gBAAI,eAAgB,UAAS,mBAAmB,SAAS,gBAAgB;AACzE,qBAAS,YAAY,SAAS;AAC9B,qBAAS,UAAU,SAAS;AAC5B,qBAAS,kBAAkB,SAAS;AAGpC,qBAAS,iBAAiB,kBAAkB,SAAS,iBAAiB,UAAU;AAAA,cAC9E;AAAA,cACA;AAAA,YACF,CAAC;AACD,gBAAI,MAAM,WAAW,OAAW,UAAS,SAAS,MAAM,MAAM;AAC9D,gBAAI,MAAM,eAAe,OAAW,UAAS,aAAa,MAAM;AAChE,gBAAI,MAAM,uBAAuB,QAAW;AAC1C,uBAAS,qBAAqB,8BAA8B,MAAM,kBAAkB;AAAA,YACtF;AACA,gBAAI,UAAU,OAAW,UAAS,QAAQ;AAC1C,qBAAS,YAAY,oBAAI,KAAK;AAC9B;AACA,oBAAQ,KAAK,EAAE,QAAQ,WAAW,QAAQ,SAAS,CAAC;AAAA,UACtD;AAAA,QACF,OAAO;AACL,gBAAM,MAAM,oBAAI,KAAK;AACrB,gBAAM,WAAW,IAAI,OAAO,gBAAgB;AAAA,YAC1C;AAAA,YACA;AAAA,YACA;AAAA,YACA,MAAM,MAAM;AAAA,YACZ;AAAA,YACA,QAAQ,MAAM,MAAM;AAAA,YACpB,iBAAiB,MAAM;AAAA,YACvB,gBAAgB,kBAAkB,MAAM,iBAAiB,UAAU;AAAA,cACjE;AAAA,cACA;AAAA,YACF,CAAC;AAAA,YACD,OAAO,SAAS;AAAA,YAChB,YAAY,yBAAyB;AAAA,cACnC,WAAW,MAAM;AAAA,cACjB;AAAA,cACA;AAAA,cACA,OAAO,EAAE,UAAU,eAAe;AAAA,YACpC,CAAC;AAAA,YACD,oBAAoB,8BAA8B,MAAM,kBAAkB;AAAA,YAC1E,kBAAkB,SAAS,gBAAgB;AAAA,YAC3C,QAAQ;AAAA,YACR,WAAW;AAAA,YACX,WAAW;AAAA,UACb,CAAC;AACD;AACA,kBAAQ,KAAK,EAAE,QAAQ,WAAW,QAAQ,SAAS,CAAC;AAAA,QACtD;AAAA,MACF;AAEA,YAAM,IAAI,MAAM;AAChB,aAAO,EAAE,QAAQ,EAAE,SAAS,SAAS,QAAQ,GAAG,gBAAgB,QAAQ;AAAA,IAC1E,CAAC;AAED,UAAM,aAAa,UAAU,QAAoB,YAAY;AAC7D,eAAW,UAAU,gBAAgB;AACnC,YAAM,oBAAoB;AAAA,QACxB;AAAA,QACA,QAAQ,OAAO;AAAA,QACf,QAAQ,OAAO;AAAA,QACf,aAAa;AAAA,UACX,IAAI,OAAO,OAAO;AAAA,UAClB,gBAAgB,OAAO,OAAO;AAAA,UAC9B,UAAU,OAAO,OAAO;AAAA,QAC1B;AAAA,QACA,QAAQ;AAAA,MACV,CAAC;AAAA,IACH;AACA,UAAM,qBAAqB,UAAU;AAErC,UAAM,uBAAuB,oBAAI,IAAY;AAC7C,eAAW,UAAU,gBAAgB;AACnC,UAAI,qBAAqB,IAAI,OAAO,OAAO,EAAE,EAAG;AAChD,2BAAqB,IAAI,OAAO,OAAO,EAAE;AACzC,YAAM;AAAA,QACJ;AAAA,QACA;AAAA,UACE,IAAI,OAAO,OAAO;AAAA,UAClB,gBAAgB,OAAO,OAAO;AAAA,UAC9B,UAAU,OAAO,OAAO;AAAA,QAC1B;AAAA,QACA;AAAA,QACA,QAAQ,OAAO,MAAM;AAAA,MACvB;AAAA,IACF;AAEA,QAAI,YAAY,sBAAsB,QAAQ;AAC5C,YAAM,kCAAkC,YAAY,uBAAuB;AAAA,QACzE;AAAA,QACA;AAAA,QACA,QAAQ,KAAK,OAAO;AAAA,QACpB,cAAc,mCAAmC;AAAA,QACjD,YAAY;AAAA,QACZ,WAAW;AAAA,QACX,eAAe,IAAI;AAAA,QACnB,gBAAgB,IAAI;AAAA,MACtB,CAAC;AAAA,IACH;AAKA,SAAK,eAAe,4CAA4C;AAAA,MAC9D;AAAA,MACA;AAAA,MACA;AAAA,MACA,GAAG;AAAA,MACH,UAAU,eAAe,IAAI,CAAC,WAAW,OAAO,OAAO,EAAE;AAAA,IAC3D,GAAG,EAAE,YAAY,KAAK,CAAC,EAAE,MAAM,CAAC,QAAQ;AACtC,aAAO,MAAM,wDAAwD,EAAE,IAAI,CAAC;AAAA,IAC9E,CAAC;AAED,WAAO,QAAQ,QAAQ,KAAK,EAAE,IAAI,MAAM,GAAG,OAAO,CAAC;AAAA,EACrD,SAAS,KAAK;AACZ,QAAI,eAAe,eAAe;AAChC,aAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,IAC3D;AACA,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,WAAO,MAAM,6CAA6C,EAAE,IAAI,CAAC;AACjE,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,UAAU,oCAAoC,mCAAmC,EAAE;AAAA,MAC5F,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aACE;AAAA,MACF,aAAa;AAAA,QACX,aAAa;AAAA,QACb,QAAQ;AAAA,MACV;AAAA,MACA,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO;AAAA,YACf,IAAI,EAAE,QAAQ,IAAI;AAAA,YAClB,SAAS,EAAE,OAAO;AAAA,YAClB,SAAS,EAAE,OAAO;AAAA,YAClB,SAAS,EAAE,OAAO;AAAA,UACpB,CAAC;AAAA,QACH;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO;AAAA,YACf,IAAI,EAAE,QAAQ,KAAK;AAAA,YACnB,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,GAAG,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC;AAAA,UACrE,CAAC;AAAA,QACH;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO;AAAA,YACf,MAAM,EAAE,QAAQ,mBAAmB;AAAA,YACnC,OAAO,EAAE,OAAO;AAAA,YAChB,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,YAC3C,gBAAgB,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC;AAAA,YACzC,iBAAiB,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC;AAAA,UAC5C,CAAC;AAAA,QACH;AAAA,QACA,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,QACpF,EAAE,QAAQ,KAAK,aAAa,aAAa,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,MACnF;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { resolveSingleOrganizationIdOrDeny } from '@open-mercato/core/modules/directory/utils/organizationScopeFilter'\nimport { CrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { findOneWithDecryption, findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { readJsonSafe } from '@open-mercato/shared/lib/http/readJsonSafe'\nimport { emitCrudSideEffects, flushCrudSideEffects } from '@open-mercato/shared/lib/commands/helpers'\nimport type { DataEngine } from '@open-mercato/shared/lib/data/engine'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { StaffTimeEntry, StaffTeamMember, StaffTimeProject, StaffTimeTask } from '../../../../data/entities'\nimport {\n  staffTimeEntryBulkSaveSchema,\n  type StaffTimeEntryBulkSaveInput,\n} from '../../../../data/validators'\nimport {\n  buildTimeEntryLockedError,\n  rebaseTimeEntryIntervalToDate,\n  reconcileTimeEntryInterval,\n  resolveTimeEntryBillable,\n  resolveTimeEntryNotesInput,\n  resolveTimeEntryProjectId,\n  resolveTimeEntrySettings,\n  roundedMinutesFor,\n  timeEntryTaskMatchesProject,\n  toStoredTimeEntryRateOverride,\n  type LockedTimeEntryRef,\n} from '../../../../commands/timesheets-entries'\nimport { staffTimeEntryCrudEvents } from '../../../../lib/crud'\nimport { emitStaffEvent } from '../../../../events'\nimport { invalidateStaffTimeEntryCache } from '../../../../lib/timesheets/timeEntryCacheInvalidation'\nimport {\n  STAFF_TIME_TRACKING_RESOURCE_KINDS,\n  runStaffMutationGuardAfterSuccess,\n  runStaffMutationGuards,\n} from '../../../guards'\nimport { runTimesheetInterceptors } from '../../_shared/withTimesheetInterceptors'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('staff')\n\n/**\n * A grid cell is addressed by the day the work started, never by the timestamp,\n * so both sides of the comparison collapse to `YYYY-MM-DD` (D-8).\n */\nfunction cellDateKey(value: Date | string | null | undefined): string {\n  if (!value) return ''\n  const date = value instanceof Date ? value : new Date(value)\n  return Number.isNaN(date.getTime()) ? String(value) : date.toISOString().slice(0, 10)\n}\n\ntype BulkRowError = { path: string; message: string; value?: unknown }\n\n/**\n * The batch answers with a per-row error list rather than a thrown 422: one grid\n * save spans a week of cells, so the client needs to know WHICH row it must fix.\n * The single-entry command raises the same refusals as `CrudHttpError` field\n * errors \u2014 same rule, different reporting shape.\n */\nfunction bulkValidationError(errors: BulkRowError[]): NextResponse {\n  return NextResponse.json({ ok: false, errors }, { status: 422 })\n}\n\n/**\n * A row as the write loop needs it: the payload plus the two things that must be\n * settled before the lock gate can address a cell \u2014 the task it names (validated\n * in scope) and the project the entry actually lands on, which a task-only row\n * inherits from its task exactly as the single-entry path does.\n */\ntype BulkEntryInput = StaffTimeEntryBulkSaveInput['entries'][number]\n\ntype ResolvedBulkRow = {\n  entry: BulkEntryInput\n  task: { id: string; timeProjectId: string } | null\n  timeProjectId: string\n}\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: ['staff.timesheets.manage_own'] },\n}\n\nexport async function POST(req: Request) {\n  try {\n    const container = await createRequestContainer()\n    const auth = await getAuthFromRequest(req)\n    const { translate } = await resolveTranslations()\n    if (!auth) throw new CrudHttpError(401, { error: translate('staff.errors.unauthorized', 'Unauthorized') })\n\n    const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n    const tenantId = scope?.tenantId ?? auth.tenantId ?? null\n    const organizationId = resolveSingleOrganizationIdOrDeny(scope, auth) ?? null\n    if (!tenantId || !organizationId) {\n      throw new CrudHttpError(400, { error: translate('staff.errors.missingScope', 'Missing tenant or organization scope.') })\n    }\n\n    const interceptors = await runTimesheetInterceptors({\n      request: req,\n      method: 'POST',\n      scope: { container, userId: auth.sub, tenantId, organizationId },\n      body: await readJsonSafe<Record<string, unknown>>(req, {}),\n    })\n    if (!interceptors.ok) return interceptors.response\n    const { session } = interceptors\n\n    const parsed = staffTimeEntryBulkSaveSchema.safeParse(session.body)\n    if (!parsed.success) {\n      const errors = parsed.error.issues.map((issue) => ({\n        path: issue.path.join('.'),\n        message: issue.message,\n      }))\n      return NextResponse.json({ ok: false, errors }, { status: 422 })\n    }\n\n    const { entries } = parsed.data\n\n    // Tags are REFUSED here rather than accepted and dropped.\n    //\n    // The single-entry path assigns tags by dispatching the tag commands, which\n    // fork their own EntityManager so they can carry their own audit entry, undo\n    // and lock check. Inside this route's `em.transactional` that fork would not\n    // see the rows the transaction has not committed yet, and dispatching AFTER\n    // the commit would answer `{ ok: true, created: n }` for a batch whose tags\n    // silently failed \u2014 a response carrying only counts cannot say which cell\n    // lost them, which is the very silent-success class this route is being\n    // fixed for. So the row is rejected and the user is pointed at the entry\n    // dialog, which writes tags through the commands with all of their\n    // guarantees intact.\n    const taggedRows = entries.filter((entry) => entry.tagIds !== undefined)\n    if (taggedRows.length > 0) {\n      const message = translate(\n        'staff.timesheets.errors.bulkTagsUnsupported',\n        'Tags cannot be changed from the timesheet grid. Open the time entry to edit its tags.',\n      )\n      return bulkValidationError(taggedRows.map(() => ({ path: 'entries[].tagIds', message })))\n    }\n\n    const em = (container.resolve('em') as EntityManager).fork()\n    const scopeCtx = { tenantId, organizationId }\n\n    const staffMember = await findOneWithDecryption(\n      em,\n      StaffTeamMember,\n      { userId: auth.sub, tenantId, organizationId, deletedAt: null },\n      {},\n      scopeCtx,\n    )\n    if (!staffMember) {\n      throw new CrudHttpError(403, { error: translate('staff.timesheets.errors.noStaffMember', 'No staff member linked to your account.') })\n    }\n    const staffMemberId = staffMember.id\n\n    // Validate that all referenced taskIds exist and are in-scope, in one query\n    // for the whole batch. Same rule the single-entry path applies through\n    // `requireTaskInScope`: a dangling task reference is refused rather than\n    // stored, because the task rollups aggregate entries by `task_id` and a stale\n    // or foreign UUID would silently move hours onto another project's card.\n    const referencedTaskIds = [\n      ...new Set(\n        entries\n          .map((entry) => entry.taskId)\n          .filter((id): id is string => typeof id === 'string' && id.length > 0),\n      ),\n    ]\n    const tasksById = new Map<string, { id: string; timeProjectId: string }>()\n    if (referencedTaskIds.length > 0) {\n      const validTasks = await em.find(StaffTimeTask, {\n        id: { $in: referencedTaskIds },\n        tenantId,\n        organizationId,\n        deletedAt: null,\n      }, { fields: ['id', 'timeProjectId'] })\n      for (const task of validTasks) tasksById.set(task.id, { id: task.id, timeProjectId: task.timeProjectId })\n      const invalidTaskIds = referencedTaskIds.filter((id) => !tasksById.has(id))\n      if (invalidTaskIds.length > 0) {\n        const message = translate('staff.timesheets.errors.taskNotFound', 'Task not found or not accessible.')\n        return bulkValidationError(\n          invalidTaskIds.map((id) => ({ path: 'entries[].taskId', message, value: id })),\n        )\n      }\n    }\n\n    // Every row is pinned to the project it will actually land on BEFORE the lock\n    // gate runs, because the gate addresses a cell by (project, date) \u2014 a task row\n    // that inherited its project must be checked against that inherited cell, not\n    // against a blank one.\n    const resolvedRows: ResolvedBulkRow[] = []\n    const missingProjectErrors: BulkRowError[] = []\n    const taskProjectMismatchErrors: BulkRowError[] = []\n    for (const entry of entries) {\n      const task = entry.taskId ? tasksById.get(entry.taskId) ?? null : null\n      const timeProjectId = resolveTimeEntryProjectId(entry.timeProjectId, task)\n      if (!timeProjectId) {\n        missingProjectErrors.push({\n          path: 'entries[].timeProjectId',\n          message: translate('staff.timesheets.errors.projectRequired', 'Time project id is required.'),\n        })\n        continue\n      }\n      if (!timeEntryTaskMatchesProject(task, timeProjectId)) {\n        taskProjectMismatchErrors.push({\n          path: 'entries[].taskId',\n          message: translate('staff.timesheets.errors.taskNotFound', 'Task not found or not accessible.'),\n          value: entry.taskId,\n        })\n        continue\n      }\n      resolvedRows.push({ entry, task, timeProjectId })\n    }\n    if (missingProjectErrors.length > 0 || taskProjectMismatchErrors.length > 0) {\n      return bulkValidationError([...missingProjectErrors, ...taskProjectMismatchErrors])\n    }\n\n    // Validate that all referenced timeProjectIds exist and are in-scope. The\n    // project rows are kept, not just their ids: a created entry snapshots the\n    // project's currency and inherits its billable default (D-3), so one query\n    // serves validation and both defaults.\n    const referencedProjectIds = [...new Set(resolvedRows.map((row) => row.timeProjectId))]\n    const projectsById = new Map<string, { currencyCode?: string | null; billableByDefault?: boolean | null }>()\n    if (referencedProjectIds.length > 0) {\n      const validProjects = await em.find(StaffTimeProject, {\n        id: { $in: referencedProjectIds },\n        tenantId,\n        organizationId,\n        deletedAt: null,\n      }, { fields: ['id', 'currencyCode', 'billableByDefault'] })\n      for (const project of validProjects) {\n        projectsById.set(project.id, {\n          currencyCode: project.currencyCode ?? null,\n          billableByDefault: project.billableByDefault ?? null,\n        })\n      }\n      const invalidIds = referencedProjectIds.filter((id) => !projectsById.has(id))\n      if (invalidIds.length > 0) {\n        const message = translate(\n          'staff.timesheets.errors.projectNotFound',\n          'Time project not found or not accessible.',\n        )\n        return bulkValidationError(\n          invalidIds.map((id) => ({ path: 'entries[].timeProjectId', message, value: id })),\n        )\n      }\n    }\n\n    const guardInput = {\n      tenantId,\n      organizationId,\n      userId: auth.sub ?? '',\n      resourceKind: STAFF_TIME_TRACKING_RESOURCE_KINDS.timeEntry,\n      resourceId: staffMemberId,\n      operation: 'update' as const,\n      requestMethod: req.method,\n      requestHeaders: req.headers,\n      mutationPayload: parsed.data as unknown as Record<string, unknown>,\n    }\n    const guardResult = await runStaffMutationGuards(container, guardInput)\n    if (!guardResult.ok) {\n      return NextResponse.json(\n        guardResult.errorBody ?? { error: 'Operation blocked by guard' },\n        { status: guardResult.errorStatus ?? 422 },\n      )\n    }\n\n    const existingIds = resolvedRows\n      .map((row) => row.entry.id)\n      .filter((id): id is string => typeof id === 'string' && id.length > 0)\n\n    // Validate referenced entry IDs upfront: a stale or foreign UUID would\n    // otherwise fall through to the create branch in the loop below and insert\n    // a duplicate row with that ID-less new identity. Reject as 422 instead.\n    if (existingIds.length > 0) {\n      const resolvedExisting = await em.find(\n        StaffTimeEntry,\n        { id: { $in: existingIds }, tenantId, organizationId, staffMemberId, deletedAt: null },\n        { fields: ['id'] },\n      )\n      const resolvedIdSet = new Set(resolvedExisting.map((entry) => entry.id))\n      const invalidIds = existingIds.filter((id) => !resolvedIdSet.has(id))\n      if (invalidIds.length > 0) {\n        return NextResponse.json(\n          {\n            ok: false,\n            errors: invalidIds.map((id) => ({\n              path: 'entries[].id',\n              message: translate(\n                'staff.timesheets.errors.entryNotFound',\n                'Time entry not found, deleted, or not owned by you.',\n              ),\n              value: id,\n            })),\n          },\n          { status: 422 },\n        )\n      }\n    }\n\n    // --- Lock gate (risk R3) -------------------------------------------------\n    //\n    // This is the endpoint the lock is most likely to leak through, because the\n    // grid addresses a cell by (project, date) and only carries an id when the\n    // client happened to have one loaded. So both shapes are checked:\n    //\n    //  * a row naming an id that resolves to a frozen entry, and\n    //  * an id-less row landing on a (project, date) cell a frozen entry already\n    //    occupies \u2014 the grid renders one summed value per cell, so creating a\n    //    second row there silently restates hours a closed report has billed.\n    //\n    // The batch fails WHOLESALE, before the transaction opens. A grid save is one\n    // user gesture spanning a week of cells and the response carries only counts,\n    // so applying the unlocked rows would leave the client unable to tell which\n    // cells landed \u2014 and the route already rejects the whole payload for an\n    // unknown project or a stale entry id, so a partial 409 would be the odd one\n    // out. The 409 names every offending id and the reports that froze them, so\n    // the grid can mark exactly those cells read-only and the user retries the\n    // rest after reloading (which is also what makes the lock badge appear).\n    //\n    // The cell is addressed by the RESOLVED project, so a task row that inherited\n    // its project is checked against the cell it will really occupy.\n    const idlessRows = resolvedRows.filter((row) => !row.entry.id)\n    const idlessCells = idlessRows.map((row) => `${cellDateKey(row.entry.date)}|${row.timeProjectId}`)\n    const lockConditions: Record<string, unknown>[] = []\n    if (existingIds.length > 0) lockConditions.push({ id: { $in: existingIds } })\n    if (idlessCells.length > 0) {\n      lockConditions.push({\n        date: { $in: idlessRows.map((row) => row.entry.date) },\n        timeProjectId: { $in: [...new Set(idlessRows.map((row) => row.timeProjectId))] },\n      })\n    }\n    if (lockConditions.length > 0) {\n      const existingIdSet = new Set(existingIds)\n      const idlessCellSet = new Set(idlessCells)\n      const lockedCandidates = await em.find(\n        StaffTimeEntry,\n        {\n          tenantId,\n          organizationId,\n          staffMemberId,\n          deletedAt: null,\n          lockedReportId: { $ne: null },\n          $or: lockConditions,\n        },\n        { fields: ['id', 'lockedReportId', 'date', 'timeProjectId'] },\n      )\n      // The (date \u00D7 project) condition above is a cross product, so it can match a\n      // locked entry on a cell the payload never touches \u2014 narrowed here.\n      const blocked: LockedTimeEntryRef[] = lockedCandidates.filter(\n        (row) =>\n          existingIdSet.has(row.id) ||\n          idlessCellSet.has(`${cellDateKey(row.date)}|${row.timeProjectId ?? ''}`),\n      )\n      if (blocked.length > 0) {\n        throw buildTimeEntryLockedError(\n          blocked.map((row) => ({ id: row.id, lockedReportId: row.lockedReportId })),\n          translate,\n        )\n      }\n    }\n\n    type PendingChange = {\n      action: 'created' | 'updated' | 'deleted'\n      entity: StaffTimeEntry\n    }\n\n    // D-7 makes `rounded_minutes` the only input to cost, and this route writes\n    // durations outside the entries command \u2014 so every row it touches is rounded\n    // with the same tenant rule the command uses. The settings read is hoisted out\n    // of the loop because it is tenant-scoped and identical for every row; the\n    // billable default a created row falls back to comes from the same snapshot.\n    const settings = await resolveTimeEntrySettings(container, tenantId)\n\n    const { counts, pendingChanges } = await em.transactional(async (trx) => {\n      let created = 0\n      let updated = 0\n      let deleted = 0\n      const changes: PendingChange[] = []\n\n      const existingEntries = existingIds.length > 0\n        ? await findWithDecryption(\n            trx,\n            StaffTimeEntry,\n            { id: { $in: existingIds }, tenantId, organizationId, staffMemberId, deletedAt: null },\n            {},\n            scopeCtx,\n          )\n        : []\n\n      const existingMap = new Map(existingEntries.map((entry) => [entry.id, entry]))\n\n      for (const { entry, task, timeProjectId } of resolvedRows) {\n        const project = projectsById.get(timeProjectId) ?? null\n        // Both branches read the five fields the schema has always accepted\n        // through the SAME helpers the single-entry command uses, so a grid write\n        // and a dialog write cannot settle them differently (#silent-no-op).\n        const notes = resolveTimeEntryNotesInput(entry)\n        if (entry.id && existingMap.has(entry.id)) {\n          const existing = existingMap.get(entry.id)!\n          if (entry.durationMinutes === 0) {\n            existing.deletedAt = new Date()\n            deleted++\n            changes.push({ action: 'deleted', entity: existing })\n          } else {\n            // T4.10(a). A grid cell carries a duration and nothing else, so writing\n            // it straight onto an entry that has clocks would store a two-hour\n            // duration against a 09:00\u201310:00 span \u2014 exactly the contradiction the\n            // single-entry path already refuses to store. The same reconciliation\n            // is called here rather than re-derived: only-a-duration means\n            // `started_at` anchors and `ended_at` shifts to match, a clock that\n            // does not exist is never manufactured (so a cell whose entry has no\n            // clocks keeps having none, and a running timer is not stopped), and a\n            // re-dated row takes its clocks with it.\n            const interval = reconcileTimeEntryInterval({\n              stored: rebaseTimeEntryIntervalToDate({\n                stored: {\n                  startedAt: existing.startedAt ?? null,\n                  endedAt: existing.endedAt ?? null,\n                  durationMinutes: existing.durationMinutes,\n                },\n                fromDate: existing.date,\n                toDate: entry.date,\n              }),\n              startedAt: undefined,\n              endedAt: undefined,\n              durationMinutes: entry.durationMinutes,\n            })\n            const projectChanged = timeProjectId !== (existing.timeProjectId ?? null)\n            existing.date = entry.date\n            existing.timeProjectId = timeProjectId\n            // Snapshotted, never joined at read time, so a later project currency\n            // change cannot re-denominate money already reported (D-3) \u2014 and only\n            // restated when the entry actually moves between projects, exactly as\n            // the single-entry update command does it.\n            if (projectChanged) existing.rateCurrencyCode = project?.currencyCode ?? null\n            existing.startedAt = interval.startedAt\n            existing.endedAt = interval.endedAt\n            existing.durationMinutes = interval.durationMinutes\n            // D-7 keeps `rounded_minutes` the only input to cost, so it is restated\n            // from the effective duration the reconciliation settled on.\n            existing.roundedMinutes = roundedMinutesFor(interval.durationMinutes, settings, {\n              tenantId,\n              organizationId,\n            })\n            if (entry.taskId !== undefined) existing.taskId = task?.id ?? null\n            if (entry.isBillable !== undefined) existing.isBillable = entry.isBillable\n            if (entry.rateOverrideAmount !== undefined) {\n              existing.rateOverrideAmount = toStoredTimeEntryRateOverride(entry.rateOverrideAmount)\n            }\n            if (notes !== undefined) existing.notes = notes\n            existing.updatedAt = new Date()\n            updated++\n            changes.push({ action: 'updated', entity: existing })\n          }\n        } else {\n          const now = new Date()\n          const newEntry = trx.create(StaffTimeEntry, {\n            tenantId,\n            organizationId,\n            staffMemberId,\n            date: entry.date,\n            timeProjectId,\n            taskId: task?.id ?? null,\n            durationMinutes: entry.durationMinutes,\n            roundedMinutes: roundedMinutesFor(entry.durationMinutes, settings, {\n              tenantId,\n              organizationId,\n            }),\n            notes: notes ?? null,\n            isBillable: resolveTimeEntryBillable({\n              requested: entry.isBillable,\n              project,\n              settings,\n              scope: { tenantId, organizationId },\n            }),\n            rateOverrideAmount: toStoredTimeEntryRateOverride(entry.rateOverrideAmount),\n            rateCurrencyCode: project?.currencyCode ?? null,\n            source: 'manual',\n            createdAt: now,\n            updatedAt: now,\n          })\n          created++\n          changes.push({ action: 'created', entity: newEntry })\n        }\n      }\n\n      await trx.flush()\n      return { counts: { created, updated, deleted }, pendingChanges: changes }\n    })\n\n    const dataEngine = container.resolve<DataEngine>('dataEngine')\n    for (const change of pendingChanges) {\n      await emitCrudSideEffects({\n        dataEngine,\n        action: change.action,\n        entity: change.entity,\n        identifiers: {\n          id: change.entity.id,\n          organizationId: change.entity.organizationId,\n          tenantId: change.entity.tenantId,\n        },\n        events: staffTimeEntryCrudEvents,\n      })\n    }\n    await flushCrudSideEffects(dataEngine)\n\n    const invalidatedRecordIds = new Set<string>()\n    for (const change of pendingChanges) {\n      if (invalidatedRecordIds.has(change.entity.id)) continue\n      invalidatedRecordIds.add(change.entity.id)\n      await invalidateStaffTimeEntryCache(\n        container,\n        {\n          id: change.entity.id,\n          organizationId: change.entity.organizationId,\n          tenantId: change.entity.tenantId,\n        },\n        tenantId,\n        `bulk:${change.action}`,\n      )\n    }\n\n    if (guardResult.afterSuccessCallbacks.length) {\n      await runStaffMutationGuardAfterSuccess(guardResult.afterSuccessCallbacks, {\n        tenantId,\n        organizationId,\n        userId: auth.sub ?? '',\n        resourceKind: STAFF_TIME_TRACKING_RESOURCE_KINDS.timeEntry,\n        resourceId: staffMemberId,\n        operation: 'update',\n        requestMethod: req.method,\n        requestHeaders: req.headers,\n      })\n    }\n\n    // One batch-level event beside the per-row CRUD events already flushed above.\n    // It carries no `id`, so the entry-scoped subscribers that key off one record\n    // skip it and only the batch-aware ones (payroll exports, audit mirrors) react.\n    void emitStaffEvent('staff.timesheets.time_entry.bulk_updated', {\n      tenantId,\n      organizationId,\n      staffMemberId,\n      ...counts,\n      entryIds: pendingChanges.map((change) => change.entity.id),\n    }, { persistent: true }).catch((err) => {\n      logger.error('staff.timesheets emit time_entry.bulk_updated failed', { err })\n    })\n\n    return session.respond(200, { ok: true, ...counts })\n  } catch (err) {\n    if (err instanceof CrudHttpError) {\n      return NextResponse.json(err.body, { status: err.status })\n    }\n    const { translate } = await resolveTranslations()\n    logger.error('staff.timesheets.time-entries.bulk failed', { err })\n    return NextResponse.json(\n      { error: translate('staff.timesheets.errors.bulkSave', 'Failed to bulk save time entries.') },\n      { status: 400 },\n    )\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Staff',\n  summary: 'Bulk save time entries',\n  methods: {\n    POST: {\n      summary: 'Bulk save time entries',\n      description:\n        'Creates, updates, or soft-deletes multiple time entries in a single request. Entries with durationMinutes=0 and an existing id are soft-deleted. A row may name a taskId and let timeProjectId follow from it; task, description/notes precedence, isBillable defaulting, the rate override and the project currency snapshot follow the single-entry path exactly. tagIds is rejected with 422 \u2014 tags are edited from the time entry itself so their audit trail and undo stay intact. The whole batch is rejected with 409 time_entry_locked when any row targets \u2014 by id, or by landing on its (project, date) cell \u2014 an entry frozen in a closed report.',\n      requestBody: {\n        contentType: 'application/json',\n        schema: staffTimeEntryBulkSaveSchema,\n      },\n      responses: [\n        {\n          status: 200,\n          description: 'Bulk save completed',\n          schema: z.object({\n            ok: z.literal(true),\n            created: z.number(),\n            updated: z.number(),\n            deleted: z.number(),\n          }),\n        },\n        {\n          status: 422,\n          description: 'Validation error',\n          schema: z.object({\n            ok: z.literal(false),\n            errors: z.array(z.object({ path: z.string(), message: z.string() })),\n          }),\n        },\n        {\n          status: 409,\n          description: 'One or more rows target a time entry locked in a closed report; nothing was saved',\n          schema: z.object({\n            code: z.literal('time_entry_locked'),\n            error: z.string(),\n            lockedReportId: z.string().uuid().nullable(),\n            lockedEntryIds: z.array(z.string().uuid()),\n            lockedReportIds: z.array(z.string().uuid()),\n          }),\n        },\n        { status: 401, description: 'Unauthorized', schema: z.object({ error: z.string() }) },\n        { status: 403, description: 'Forbidden', schema: z.object({ error: z.string() }) },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AACnD,SAAS,yCAAyC;AAClD,SAAS,qBAAqB;AAC9B,SAAS,2BAA2B;AACpC,SAAS,uBAAuB,0BAA0B;AAC1D,SAAS,oBAAoB;AAC7B,SAAS,qBAAqB,4BAA4B;AAI1D,SAAS,gBAAgB,iBAAiB,kBAAkB,qBAAqB;AACjF;AAAA,EACE;AAAA,OAEK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAEK;AACP,SAAS,gCAAgC;AACzC,SAAS,sBAAsB;AAC/B,SAAS,qCAAqC;AAC9C;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,gCAAgC;AACzC,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,OAAO;AAMnC,SAAS,YAAY,OAAiD;AACpE,MAAI,CAAC,MAAO,QAAO;AACnB,QAAM,OAAO,iBAAiB,OAAO,QAAQ,IAAI,KAAK,KAAK;AAC3D,SAAO,OAAO,MAAM,KAAK,QAAQ,CAAC,IAAI,OAAO,KAAK,IAAI,KAAK,YAAY,EAAE,MAAM,GAAG,EAAE;AACtF;AAUA,SAAS,oBAAoB,QAAsC;AACjE,SAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,GAAG,EAAE,QAAQ,IAAI,CAAC;AACjE;AAgBO,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,6BAA6B,EAAE;AAC9E;AAEA,eAAsB,KAAK,KAAc;AACvC,MAAI;AACF,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,QAAI,CAAC,KAAM,OAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,6BAA6B,cAAc,EAAE,CAAC;AAEzG,UAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AACxF,UAAM,WAAW,OAAO,YAAY,KAAK,YAAY;AACrD,UAAM,iBAAiB,kCAAkC,OAAO,IAAI,KAAK;AACzE,QAAI,CAAC,YAAY,CAAC,gBAAgB;AAChC,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,6BAA6B,uCAAuC,EAAE,CAAC;AAAA,IACzH;AAEA,UAAM,eAAe,MAAM,yBAAyB;AAAA,MAClD,SAAS;AAAA,MACT,QAAQ;AAAA,MACR,OAAO,EAAE,WAAW,QAAQ,KAAK,KAAK,UAAU,eAAe;AAAA,MAC/D,MAAM,MAAM,aAAsC,KAAK,CAAC,CAAC;AAAA,IAC3D,CAAC;AACD,QAAI,CAAC,aAAa,GAAI,QAAO,aAAa;AAC1C,UAAM,EAAE,QAAQ,IAAI;AAEpB,UAAM,SAAS,6BAA6B,UAAU,QAAQ,IAAI;AAClE,QAAI,CAAC,OAAO,SAAS;AACnB,YAAM,SAAS,OAAO,MAAM,OAAO,IAAI,CAAC,WAAW;AAAA,QACjD,MAAM,MAAM,KAAK,KAAK,GAAG;AAAA,QACzB,SAAS,MAAM;AAAA,MACjB,EAAE;AACF,aAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACjE;AAEA,UAAM,EAAE,QAAQ,IAAI,OAAO;AAc3B,UAAM,aAAa,QAAQ,OAAO,CAAC,UAAU,MAAM,WAAW,MAAS;AACvE,QAAI,WAAW,SAAS,GAAG;AACzB,YAAM,UAAU;AAAA,QACd;AAAA,QACA;AAAA,MACF;AACA,aAAO,oBAAoB,WAAW,IAAI,OAAO,EAAE,MAAM,oBAAoB,QAAQ,EAAE,CAAC;AAAA,IAC1F;AAEA,UAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC3D,UAAM,WAAW,EAAE,UAAU,eAAe;AAE5C,UAAM,cAAc,MAAM;AAAA,MACxB;AAAA,MACA;AAAA,MACA,EAAE,QAAQ,KAAK,KAAK,UAAU,gBAAgB,WAAW,KAAK;AAAA,MAC9D,CAAC;AAAA,MACD;AAAA,IACF;AACA,QAAI,CAAC,aAAa;AAChB,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,yCAAyC,yCAAyC,EAAE,CAAC;AAAA,IACvI;AACA,UAAM,gBAAgB,YAAY;AAOlC,UAAM,oBAAoB;AAAA,MACxB,GAAG,IAAI;AAAA,QACL,QACG,IAAI,CAAC,UAAU,MAAM,MAAM,EAC3B,OAAO,CAAC,OAAqB,OAAO,OAAO,YAAY,GAAG,SAAS,CAAC;AAAA,MACzE;AAAA,IACF;AACA,UAAM,YAAY,oBAAI,IAAmD;AACzE,QAAI,kBAAkB,SAAS,GAAG;AAChC,YAAM,aAAa,MAAM,GAAG,KAAK,eAAe;AAAA,QAC9C,IAAI,EAAE,KAAK,kBAAkB;AAAA,QAC7B;AAAA,QACA;AAAA,QACA,WAAW;AAAA,MACb,GAAG,EAAE,QAAQ,CAAC,MAAM,eAAe,EAAE,CAAC;AACtC,iBAAW,QAAQ,WAAY,WAAU,IAAI,KAAK,IAAI,EAAE,IAAI,KAAK,IAAI,eAAe,KAAK,cAAc,CAAC;AACxG,YAAM,iBAAiB,kBAAkB,OAAO,CAAC,OAAO,CAAC,UAAU,IAAI,EAAE,CAAC;AAC1E,UAAI,eAAe,SAAS,GAAG;AAC7B,cAAM,UAAU,UAAU,wCAAwC,mCAAmC;AACrG,eAAO;AAAA,UACL,eAAe,IAAI,CAAC,QAAQ,EAAE,MAAM,oBAAoB,SAAS,OAAO,GAAG,EAAE;AAAA,QAC/E;AAAA,MACF;AAAA,IACF;AAMA,UAAM,eAAkC,CAAC;AACzC,UAAM,uBAAuC,CAAC;AAC9C,UAAM,4BAA4C,CAAC;AACnD,eAAW,SAAS,SAAS;AAC3B,YAAM,OAAO,MAAM,SAAS,UAAU,IAAI,MAAM,MAAM,KAAK,OAAO;AAClE,YAAM,gBAAgB,0BAA0B,MAAM,eAAe,IAAI;AACzE,UAAI,CAAC,eAAe;AAClB,6BAAqB,KAAK;AAAA,UACxB,MAAM;AAAA,UACN,SAAS,UAAU,2CAA2C,8BAA8B;AAAA,QAC9F,CAAC;AACD;AAAA,MACF;AACA,UAAI,CAAC,4BAA4B,MAAM,aAAa,GAAG;AACrD,kCAA0B,KAAK;AAAA,UAC7B,MAAM;AAAA,UACN,SAAS,UAAU,wCAAwC,mCAAmC;AAAA,UAC9F,OAAO,MAAM;AAAA,QACf,CAAC;AACD;AAAA,MACF;AACA,mBAAa,KAAK,EAAE,OAAO,MAAM,cAAc,CAAC;AAAA,IAClD;AACA,QAAI,qBAAqB,SAAS,KAAK,0BAA0B,SAAS,GAAG;AAC3E,aAAO,oBAAoB,CAAC,GAAG,sBAAsB,GAAG,yBAAyB,CAAC;AAAA,IACpF;AAMA,UAAM,uBAAuB,CAAC,GAAG,IAAI,IAAI,aAAa,IAAI,CAAC,QAAQ,IAAI,aAAa,CAAC,CAAC;AACtF,UAAM,eAAe,oBAAI,IAAkF;AAC3G,QAAI,qBAAqB,SAAS,GAAG;AACnC,YAAM,gBAAgB,MAAM,GAAG,KAAK,kBAAkB;AAAA,QACpD,IAAI,EAAE,KAAK,qBAAqB;AAAA,QAChC;AAAA,QACA;AAAA,QACA,WAAW;AAAA,MACb,GAAG,EAAE,QAAQ,CAAC,MAAM,gBAAgB,mBAAmB,EAAE,CAAC;AAC1D,iBAAW,WAAW,eAAe;AACnC,qBAAa,IAAI,QAAQ,IAAI;AAAA,UAC3B,cAAc,QAAQ,gBAAgB;AAAA,UACtC,mBAAmB,QAAQ,qBAAqB;AAAA,QAClD,CAAC;AAAA,MACH;AACA,YAAM,aAAa,qBAAqB,OAAO,CAAC,OAAO,CAAC,aAAa,IAAI,EAAE,CAAC;AAC5E,UAAI,WAAW,SAAS,GAAG;AACzB,cAAM,UAAU;AAAA,UACd;AAAA,UACA;AAAA,QACF;AACA,eAAO;AAAA,UACL,WAAW,IAAI,CAAC,QAAQ,EAAE,MAAM,2BAA2B,SAAS,OAAO,GAAG,EAAE;AAAA,QAClF;AAAA,MACF;AAAA,IACF;AAEA,UAAM,aAAa;AAAA,MACjB;AAAA,MACA;AAAA,MACA,QAAQ,KAAK,OAAO;AAAA,MACpB,cAAc,mCAAmC;AAAA,MACjD,YAAY;AAAA,MACZ,WAAW;AAAA,MACX,eAAe,IAAI;AAAA,MACnB,gBAAgB,IAAI;AAAA,MACpB,iBAAiB,OAAO;AAAA,IAC1B;AACA,UAAM,cAAc,MAAM,uBAAuB,WAAW,UAAU;AACtE,QAAI,CAAC,YAAY,IAAI;AACnB,aAAO,aAAa;AAAA,QAClB,YAAY,aAAa,EAAE,OAAO,6BAA6B;AAAA,QAC/D,EAAE,QAAQ,YAAY,eAAe,IAAI;AAAA,MAC3C;AAAA,IACF;AAEA,UAAM,cAAc,aACjB,IAAI,CAAC,QAAQ,IAAI,MAAM,EAAE,EACzB,OAAO,CAAC,OAAqB,OAAO,OAAO,YAAY,GAAG,SAAS,CAAC;AAKvE,QAAI,YAAY,SAAS,GAAG;AAC1B,YAAM,mBAAmB,MAAM,GAAG;AAAA,QAChC;AAAA,QACA,EAAE,IAAI,EAAE,KAAK,YAAY,GAAG,UAAU,gBAAgB,eAAe,WAAW,KAAK;AAAA,QACrF,EAAE,QAAQ,CAAC,IAAI,EAAE;AAAA,MACnB;AACA,YAAM,gBAAgB,IAAI,IAAI,iBAAiB,IAAI,CAAC,UAAU,MAAM,EAAE,CAAC;AACvE,YAAM,aAAa,YAAY,OAAO,CAAC,OAAO,CAAC,cAAc,IAAI,EAAE,CAAC;AACpE,UAAI,WAAW,SAAS,GAAG;AACzB,eAAO,aAAa;AAAA,UAClB;AAAA,YACE,IAAI;AAAA,YACJ,QAAQ,WAAW,IAAI,CAAC,QAAQ;AAAA,cAC9B,MAAM;AAAA,cACN,SAAS;AAAA,gBACP;AAAA,gBACA;AAAA,cACF;AAAA,cACA,OAAO;AAAA,YACT,EAAE;AAAA,UACJ;AAAA,UACA,EAAE,QAAQ,IAAI;AAAA,QAChB;AAAA,MACF;AAAA,IACF;AAwBA,UAAM,aAAa,aAAa,OAAO,CAAC,QAAQ,CAAC,IAAI,MAAM,EAAE;AAC7D,UAAM,cAAc,WAAW,IAAI,CAAC,QAAQ,GAAG,YAAY,IAAI,MAAM,IAAI,CAAC,IAAI,IAAI,aAAa,EAAE;AACjG,UAAM,iBAA4C,CAAC;AACnD,QAAI,YAAY,SAAS,EAAG,gBAAe,KAAK,EAAE,IAAI,EAAE,KAAK,YAAY,EAAE,CAAC;AAC5E,QAAI,YAAY,SAAS,GAAG;AAC1B,qBAAe,KAAK;AAAA,QAClB,MAAM,EAAE,KAAK,WAAW,IAAI,CAAC,QAAQ,IAAI,MAAM,IAAI,EAAE;AAAA,QACrD,eAAe,EAAE,KAAK,CAAC,GAAG,IAAI,IAAI,WAAW,IAAI,CAAC,QAAQ,IAAI,aAAa,CAAC,CAAC,EAAE;AAAA,MACjF,CAAC;AAAA,IACH;AACA,QAAI,eAAe,SAAS,GAAG;AAC7B,YAAM,gBAAgB,IAAI,IAAI,WAAW;AACzC,YAAM,gBAAgB,IAAI,IAAI,WAAW;AACzC,YAAM,mBAAmB,MAAM,GAAG;AAAA,QAChC;AAAA,QACA;AAAA,UACE;AAAA,UACA;AAAA,UACA;AAAA,UACA,WAAW;AAAA,UACX,gBAAgB,EAAE,KAAK,KAAK;AAAA,UAC5B,KAAK;AAAA,QACP;AAAA,QACA,EAAE,QAAQ,CAAC,MAAM,kBAAkB,QAAQ,eAAe,EAAE;AAAA,MAC9D;AAGA,YAAM,UAAgC,iBAAiB;AAAA,QACrD,CAAC,QACC,cAAc,IAAI,IAAI,EAAE,KACxB,cAAc,IAAI,GAAG,YAAY,IAAI,IAAI,CAAC,IAAI,IAAI,iBAAiB,EAAE,EAAE;AAAA,MAC3E;AACA,UAAI,QAAQ,SAAS,GAAG;AACtB,cAAM;AAAA,UACJ,QAAQ,IAAI,CAAC,SAAS,EAAE,IAAI,IAAI,IAAI,gBAAgB,IAAI,eAAe,EAAE;AAAA,UACzE;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAYA,UAAM,WAAW,MAAM,yBAAyB,WAAW,QAAQ;AAEnE,UAAM,EAAE,QAAQ,eAAe,IAAI,MAAM,GAAG,cAAc,OAAO,QAAQ;AACvE,UAAI,UAAU;AACd,UAAI,UAAU;AACd,UAAI,UAAU;AACd,YAAM,UAA2B,CAAC;AAElC,YAAM,kBAAkB,YAAY,SAAS,IACzC,MAAM;AAAA,QACJ;AAAA,QACA;AAAA,QACA,EAAE,IAAI,EAAE,KAAK,YAAY,GAAG,UAAU,gBAAgB,eAAe,WAAW,KAAK;AAAA,QACrF,CAAC;AAAA,QACD;AAAA,MACF,IACA,CAAC;AAEL,YAAM,cAAc,IAAI,IAAI,gBAAgB,IAAI,CAAC,UAAU,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC;AAE7E,iBAAW,EAAE,OAAO,MAAM,cAAc,KAAK,cAAc;AACzD,cAAM,UAAU,aAAa,IAAI,aAAa,KAAK;AAInD,cAAM,QAAQ,2BAA2B,KAAK;AAC9C,YAAI,MAAM,MAAM,YAAY,IAAI,MAAM,EAAE,GAAG;AACzC,gBAAM,WAAW,YAAY,IAAI,MAAM,EAAE;AACzC,cAAI,MAAM,oBAAoB,GAAG;AAC/B,qBAAS,YAAY,oBAAI,KAAK;AAC9B;AACA,oBAAQ,KAAK,EAAE,QAAQ,WAAW,QAAQ,SAAS,CAAC;AAAA,UACtD,OAAO;AAUL,kBAAM,WAAW,2BAA2B;AAAA,cAC1C,QAAQ,8BAA8B;AAAA,gBACpC,QAAQ;AAAA,kBACN,WAAW,SAAS,aAAa;AAAA,kBACjC,SAAS,SAAS,WAAW;AAAA,kBAC7B,iBAAiB,SAAS;AAAA,gBAC5B;AAAA,gBACA,UAAU,SAAS;AAAA,gBACnB,QAAQ,MAAM;AAAA,cAChB,CAAC;AAAA,cACD,WAAW;AAAA,cACX,SAAS;AAAA,cACT,iBAAiB,MAAM;AAAA,YACzB,CAAC;AACD,kBAAM,iBAAiB,mBAAmB,SAAS,iBAAiB;AACpE,qBAAS,OAAO,MAAM;AACtB,qBAAS,gBAAgB;AAKzB,gBAAI,eAAgB,UAAS,mBAAmB,SAAS,gBAAgB;AACzE,qBAAS,YAAY,SAAS;AAC9B,qBAAS,UAAU,SAAS;AAC5B,qBAAS,kBAAkB,SAAS;AAGpC,qBAAS,iBAAiB,kBAAkB,SAAS,iBAAiB,UAAU;AAAA,cAC9E;AAAA,cACA;AAAA,YACF,CAAC;AACD,gBAAI,MAAM,WAAW,OAAW,UAAS,SAAS,MAAM,MAAM;AAC9D,gBAAI,MAAM,eAAe,OAAW,UAAS,aAAa,MAAM;AAChE,gBAAI,MAAM,uBAAuB,QAAW;AAC1C,uBAAS,qBAAqB,8BAA8B,MAAM,kBAAkB;AAAA,YACtF;AACA,gBAAI,UAAU,OAAW,UAAS,QAAQ;AAC1C,qBAAS,YAAY,oBAAI,KAAK;AAC9B;AACA,oBAAQ,KAAK,EAAE,QAAQ,WAAW,QAAQ,SAAS,CAAC;AAAA,UACtD;AAAA,QACF,OAAO;AACL,gBAAM,MAAM,oBAAI,KAAK;AACrB,gBAAM,WAAW,IAAI,OAAO,gBAAgB;AAAA,YAC1C;AAAA,YACA;AAAA,YACA;AAAA,YACA,MAAM,MAAM;AAAA,YACZ;AAAA,YACA,QAAQ,MAAM,MAAM;AAAA,YACpB,iBAAiB,MAAM;AAAA,YACvB,gBAAgB,kBAAkB,MAAM,iBAAiB,UAAU;AAAA,cACjE;AAAA,cACA;AAAA,YACF,CAAC;AAAA,YACD,OAAO,SAAS;AAAA,YAChB,YAAY,yBAAyB;AAAA,cACnC,WAAW,MAAM;AAAA,cACjB;AAAA,cACA;AAAA,cACA,OAAO,EAAE,UAAU,eAAe;AAAA,YACpC,CAAC;AAAA,YACD,oBAAoB,8BAA8B,MAAM,kBAAkB;AAAA,YAC1E,kBAAkB,SAAS,gBAAgB;AAAA,YAC3C,QAAQ;AAAA,YACR,WAAW;AAAA,YACX,WAAW;AAAA,UACb,CAAC;AACD;AACA,kBAAQ,KAAK,EAAE,QAAQ,WAAW,QAAQ,SAAS,CAAC;AAAA,QACtD;AAAA,MACF;AAEA,YAAM,IAAI,MAAM;AAChB,aAAO,EAAE,QAAQ,EAAE,SAAS,SAAS,QAAQ,GAAG,gBAAgB,QAAQ;AAAA,IAC1E,CAAC;AAED,UAAM,aAAa,UAAU,QAAoB,YAAY;AAC7D,eAAW,UAAU,gBAAgB;AACnC,YAAM,oBAAoB;AAAA,QACxB;AAAA,QACA,QAAQ,OAAO;AAAA,QACf,QAAQ,OAAO;AAAA,QACf,aAAa;AAAA,UACX,IAAI,OAAO,OAAO;AAAA,UAClB,gBAAgB,OAAO,OAAO;AAAA,UAC9B,UAAU,OAAO,OAAO;AAAA,QAC1B;AAAA,QACA,QAAQ;AAAA,MACV,CAAC;AAAA,IACH;AACA,UAAM,qBAAqB,UAAU;AAErC,UAAM,uBAAuB,oBAAI,IAAY;AAC7C,eAAW,UAAU,gBAAgB;AACnC,UAAI,qBAAqB,IAAI,OAAO,OAAO,EAAE,EAAG;AAChD,2BAAqB,IAAI,OAAO,OAAO,EAAE;AACzC,YAAM;AAAA,QACJ;AAAA,QACA;AAAA,UACE,IAAI,OAAO,OAAO;AAAA,UAClB,gBAAgB,OAAO,OAAO;AAAA,UAC9B,UAAU,OAAO,OAAO;AAAA,QAC1B;AAAA,QACA;AAAA,QACA,QAAQ,OAAO,MAAM;AAAA,MACvB;AAAA,IACF;AAEA,QAAI,YAAY,sBAAsB,QAAQ;AAC5C,YAAM,kCAAkC,YAAY,uBAAuB;AAAA,QACzE;AAAA,QACA;AAAA,QACA,QAAQ,KAAK,OAAO;AAAA,QACpB,cAAc,mCAAmC;AAAA,QACjD,YAAY;AAAA,QACZ,WAAW;AAAA,QACX,eAAe,IAAI;AAAA,QACnB,gBAAgB,IAAI;AAAA,MACtB,CAAC;AAAA,IACH;AAKA,SAAK,eAAe,4CAA4C;AAAA,MAC9D;AAAA,MACA;AAAA,MACA;AAAA,MACA,GAAG;AAAA,MACH,UAAU,eAAe,IAAI,CAAC,WAAW,OAAO,OAAO,EAAE;AAAA,IAC3D,GAAG,EAAE,YAAY,KAAK,CAAC,EAAE,MAAM,CAAC,QAAQ;AACtC,aAAO,MAAM,wDAAwD,EAAE,IAAI,CAAC;AAAA,IAC9E,CAAC;AAED,WAAO,QAAQ,QAAQ,KAAK,EAAE,IAAI,MAAM,GAAG,OAAO,CAAC;AAAA,EACrD,SAAS,KAAK;AACZ,QAAI,eAAe,eAAe;AAChC,aAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,IAC3D;AACA,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,WAAO,MAAM,6CAA6C,EAAE,IAAI,CAAC;AACjE,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,UAAU,oCAAoC,mCAAmC,EAAE;AAAA,MAC5F,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aACE;AAAA,MACF,aAAa;AAAA,QACX,aAAa;AAAA,QACb,QAAQ;AAAA,MACV;AAAA,MACA,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO;AAAA,YACf,IAAI,EAAE,QAAQ,IAAI;AAAA,YAClB,SAAS,EAAE,OAAO;AAAA,YAClB,SAAS,EAAE,OAAO;AAAA,YAClB,SAAS,EAAE,OAAO;AAAA,UACpB,CAAC;AAAA,QACH;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO;AAAA,YACf,IAAI,EAAE,QAAQ,KAAK;AAAA,YACnB,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,GAAG,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC;AAAA,UACrE,CAAC;AAAA,QACH;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO;AAAA,YACf,MAAM,EAAE,QAAQ,mBAAmB;AAAA,YACnC,OAAO,EAAE,OAAO;AAAA,YAChB,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,YAC3C,gBAAgB,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC;AAAA,YACzC,iBAAiB,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC;AAAA,UAC5C,CAAC;AAAA,QACH;AAAA,QACA,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,QACpF,EAAE,QAAQ,KAAK,aAAa,aAAa,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,MACnF;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/staff/api/timesheets/time-entries/copy-day/route.js

@@ -4,6 +4,7 @@ import { z } from "zod";
 import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
 import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
 import { resolveOrganizationScopeForRequest } from "@open-mercato/core/modules/directory/utils/organizationScope";
+import { resolveSingleOrganizationIdOrDeny } from "@open-mercato/core/modules/directory/utils/organizationScopeFilter";
 import { CrudHttpError, forbidden, isCrudHttpError } from "@open-mercato/shared/lib/crud/errors";
 import { runRouteMutationGuards } from "@open-mercato/shared/lib/crud/route-mutation-guard";
 import { resolveTranslations } from "@open-mercato/shared/lib/i18n/server";
@@ -124,7 +125,7 @@ async function POST(req) {
     }
     const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req });
     const tenantId = scope?.tenantId ?? auth.tenantId ?? null;
-    const organizationId = scope?.selectedId ?? auth.orgId ?? null;
+    const organizationId = resolveSingleOrganizationIdOrDeny(scope, auth) ?? null;
     if (!tenantId || !organizationId) {
       throw new CrudHttpError(400, {
         error: translate("staff.errors.missingScope", "Missing tenant or organization scope.")
@@ -243,7 +244,7 @@ async function POST(req) {
       container,
       auth,
       organizationScope: scope,
-      selectedOrganizationId: scope?.selectedId ?? auth.orgId ?? null,
+      selectedOrganizationId: resolveSingleOrganizationIdOrDeny(scope, auth) ?? null,
       organizationIds: scope?.filterIds ?? (auth.orgId ? [auth.orgId] : null),
       request: req
     };

package/dist/modules/staff/api/timesheets/time-entries/copy-day/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../../src/modules/staff/api/timesheets/time-entries/copy-day/route.ts"],
-  "sourcesContent": ["/**\n * US-D6 \u2014 \"Kopiuj wczorajszy dzie\u0144\" (screen 1, note 5).\n *\n * The note is the design constraint: the button \"duplicates the previous working\n * day's entries **as versions to correct**\". So this endpoint is not a silent\n * commit \u2014 it answers with the entries it created, in full, so the caller can put\n * them straight in front of the user for review and adjustment rather than\n * reporting a count and leaving them to hunt for what landed.\n *\n * What \"the previous working day\" means is the CALLER's business. Weekends,\n * holidays and four-day weeks are calendar questions this module has no data for,\n * and a server-side weekend rule would be wrong for every tenant that does not\n * work Monday-to-Friday. The endpoint therefore takes two explicit days.\n *\n * Three decisions worth their reasoning:\n *\n *  1. **A locked SOURCE is skipped and reported, not fatal.** The lock protects\n *     the numbers a closed report has already billed (D-7), and a copy never\n *     writes to its source \u2014 the target day is a fresh, unlocked draft. This is\n *     what makes it different from the grid bulk save, where the rows being\n *     WRITTEN are the locked ones and the whole batch must fail. Here the caller\n *     did not hand-pick rows: they asked for a day. Failing the whole day because\n *     one of its entries sits in a closed report would break the button for\n *     exactly the people who report most regularly. Every skipped source comes\n *     back in `skipped[]` carrying the shared `time_entry_locked` code and the\n *     report that froze it, so the UI can say what was left behind.\n *  2. **Idempotency: a non-empty target day is refused.** A day of entries has no\n *     natural key to deduplicate on \u2014 two identical 30-minute stand-ups on one day\n *     are legitimate data \u2014 so a second call cannot tell a re-run from a genuine\n *     repeat, and would silently double the day into something the user cannot\n *     untangle from the grid. So the default is to refuse with `409\n *     copy_day_target_not_empty`, naming what is already there. `allowDuplicates:\n *     true` is the deliberate opt-in for the real case the refusal would\n *     otherwise block: the user already logged something today and still wants\n *     yesterday's set on top. Refusing is also what makes a partially completed\n *     run visible instead of compounding it.\n *  3. **The copy itself is the existing duplicate command, once per source.** It\n *     already resolves the source, runs the lock gate and delegates the write to\n *     the create command, so every copy inherits ownership, project access, the\n *     billable and currency defaults, rounding (D-7), tags and audit unchanged.\n *     The loop is NOT wrapped in a route-level transaction: the command bus forks\n *     its own EntityManager per command, so an outer `em.transactional` would\n *     enclose nothing and the atomicity would be a fiction. Each copy is atomic in\n *     itself; a copy that fails is reported in `skipped[]` and the rest still\n *     land, which is the behaviour a day of drafts wants.\n */\n\nimport { NextResponse } from 'next/server'\nimport { resolveFeatureAccess } from '../../../../lib/time-tracking/featureAccess'\nimport { z } from 'zod'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { CrudHttpError, forbidden, isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { runRouteMutationGuards } from '@open-mercato/shared/lib/crud/route-mutation-guard'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { readJsonSafe } from '@open-mercato/shared/lib/http/readJsonSafe'\nimport { findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport { emitStaffEvent } from '../../../../events'\nimport type { CommandBus, CommandRuntimeContext } from '@open-mercato/shared/lib/commands'\nimport { getCommandInterceptorHttpRejection } from '@open-mercato/shared/lib/commands/errors'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport type { ModuleConfigService } from '@open-mercato/core/modules/configs/lib/module-config-service'\nimport { StaffTimeEntry, StaffTimeEntryTag } from '../../../../data/entities'\nimport { staffTimeEntryCommandIds, TIME_ENTRY_LOCKED_CODE } from '../../../../commands/timesheets-entries'\nimport { resolveProjectAccess, type ProjectAccess } from '../../../../lib/time-tracking/access'\nimport { readTimeTrackingSettings } from '../../../../lib/time-tracking/settings'\nimport { STAFF_TIME_TRACKING_RESOURCE_KINDS } from '../../../guards'\nimport { runTimesheetInterceptors } from '../../_shared/withTimesheetInterceptors'\n\nconst logger = createLogger('staff').child({ component: 'api/timesheets/time-entries/copy-day' })\n\nconst MANAGE_OWN_FEATURE = 'staff.timesheets.manage_own'\nconst MANAGE_ALL_FEATURE = 'staff.timesheets.manage_all'\nconst RESOURCE_KIND = STAFF_TIME_TRACKING_RESOURCE_KINDS.timeEntry\n\n/** The 409 a second \"copy yesterday\" click gets, rather than a doubled day. */\nexport const COPY_DAY_TARGET_NOT_EMPTY_CODE = 'copy_day_target_not_empty'\n\n/** Reason codes on `skipped[]`. The locked one is the shared code, not a second spelling of it. */\nconst COPY_FAILED_REASON = 'copy_failed'\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: [MANAGE_OWN_FEATURE] },\n}\n\nconst copyDayRequestSchema = z.object({\n  fromDate: z.coerce.date(),\n  toDate: z.coerce.date(),\n  /** Only a `staff.timesheets.manage_all` holder may copy somebody else's day. */\n  staffMemberId: z.string().uuid().optional(),\n  allowDuplicates: z.boolean().optional().default(false),\n})\n\nconst copiedEntrySchema = z.object({\n  id: z.string().uuid(),\n  sourceId: z.string().uuid(),\n  date: z.string(),\n  durationMinutes: z.number(),\n  roundedMinutes: z.number().nullable(),\n  timeProjectId: z.string().uuid().nullable(),\n  taskId: z.string().uuid().nullable(),\n  isBillable: z.boolean(),\n  description: z.string().nullable(),\n  tagIds: z.array(z.string().uuid()),\n})\n\nconst skippedEntrySchema = z.object({\n  id: z.string().uuid(),\n  reason: z.string(),\n  lockedReportId: z.string().uuid().nullable(),\n  error: z.string().nullable(),\n})\n\nconst copyDayResponseSchema = z.object({\n  ok: z.literal(true),\n  fromDate: z.string(),\n  toDate: z.string(),\n  staffMemberId: z.string().uuid(),\n  copied: z.number(),\n  created: z.array(copiedEntrySchema),\n  skipped: z.array(skippedEntrySchema),\n})\n\nconst targetNotEmptySchema = z.object({\n  code: z.literal(COPY_DAY_TARGET_NOT_EMPTY_CODE),\n  error: z.string(),\n  toDate: z.string(),\n  existingEntryCount: z.number(),\n  existingEntryIds: z.array(z.string().uuid()),\n})\n\ntype ContainerLike = { resolve: (name: string) => unknown }\n\ntype SkippedSource = {\n  id: string\n  reason: string\n  lockedReportId: string | null\n  error: string | null\n}\n\n/**\n * A day is addressed by its calendar day, never by a timestamp (D-8), so both the\n * request echo and the copied rows collapse to `YYYY-MM-DD`.\n */\nfunction dayKey(value: Date | string | null | undefined): string {\n  if (!value) return ''\n  const date = value instanceof Date ? value : new Date(value)\n  return Number.isNaN(date.getTime()) ? String(value) : date.toISOString().slice(0, 10)\n}\n\nasync function resolveAssignmentGraceDays(container: ContainerLike, tenantId: string): Promise<number | null> {\n  try {\n    const configService = container.resolve('moduleConfigService') as ModuleConfigService\n    const settings = await readTimeTrackingSettings(configService, { tenantId })\n    return settings.access.assignmentGraceDays\n  } catch {\n    // Fail safe to the documented default rather than widening the window.\n    return null\n  }\n}\n\nasync function loadProjectAccess(\n  container: ContainerLike,\n  userId: string | null,\n  tenantId: string,\n  organizationId: string,\n  grantedFeatures: readonly string[],\n): Promise<ProjectAccess> {\n  const em = container.resolve('em') as EntityManager\n  return resolveProjectAccess({\n    em: em.fork(),\n    userId,\n    tenantId,\n    organizationId,\n    userFeatures: grantedFeatures,\n    assignmentGraceDays: await resolveAssignmentGraceDays(container, tenantId),\n  })\n}\n\n/**\n * The per-row form of the list route's `$or` intersection: an entry on a project\n * is visible to the members of that project, and a project-less entry is visible\n * only to the member who logged it. A manager copying somebody else's day still\n * only copies the part of it their own project access covers.\n */\nfunction isTimeEntryVisible(\n  entry: { staffMemberId: string; timeProjectId?: string | null },\n  access: ProjectAccess,\n): boolean {\n  if (access.canManageAll) return true\n  const projectId = entry.timeProjectId ?? null\n  if (projectId) return access.projectIds.includes(projectId)\n  return access.staffMemberId !== null && access.staffMemberId === entry.staffMemberId\n}\n\nasync function loadTagIdsByEntry(\n  em: EntityManager,\n  entryIds: string[],\n  tenantId: string,\n  organizationId: string,\n): Promise<Map<string, string[]>> {\n  const byEntryId = new Map<string, string[]>()\n  if (entryIds.length === 0) return byEntryId\n  const assignments = await em.find(StaffTimeEntryTag, {\n    timeEntryId: { $in: entryIds },\n    tenantId,\n    organizationId,\n  })\n  for (const assignment of assignments) {\n    const list = byEntryId.get(assignment.timeEntryId) ?? []\n    list.push(assignment.tagId)\n    byEntryId.set(assignment.timeEntryId, list)\n  }\n  return byEntryId\n}\n\nexport async function POST(req: Request) {\n  try {\n    const container = await createRequestContainer()\n    const auth = await getAuthFromRequest(req)\n    const { translate } = await resolveTranslations()\n    if (!auth) {\n      throw new CrudHttpError(401, { error: translate('staff.errors.unauthorized', 'Unauthorized') })\n    }\n\n    const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n    const tenantId = scope?.tenantId ?? auth.tenantId ?? null\n    const organizationId = scope?.selectedId ?? auth.orgId ?? null\n    if (!tenantId || !organizationId) {\n      throw new CrudHttpError(400, {\n        error: translate('staff.errors.missingScope', 'Missing tenant or organization scope.'),\n      })\n    }\n\n    const actorId = auth.sub ?? ''\n    // Both decisions come from the module's single RBAC authority, which asks the\n    // service and fails closed on every path. The nullable grant array they were\n    // matched against could not say whether an empty answer meant \"no grants\" or\n    // \"could not ask\", and `grantedFeatures ? \u2026 : false` silently answered the\n    // second as the first.\n    const manageOwn = await resolveFeatureAccess(container, actorId, [MANAGE_OWN_FEATURE], { tenantId, organizationId })\n    if (!manageOwn.allowed) {\n      throw forbidden(translate('staff.errors.forbidden', 'Forbidden'))\n    }\n    const grantedFeatures = manageOwn.grantedFeatures\n    const hasManageAll = (\n      await resolveFeatureAccess(container, actorId, [MANAGE_ALL_FEATURE], { tenantId, organizationId })\n    ).allowed\n\n    const interceptors = await runTimesheetInterceptors({\n      request: req,\n      method: 'POST',\n      scope: { container, userId: actorId, tenantId, organizationId, userFeatures: grantedFeatures },\n      body: await readJsonSafe<Record<string, unknown>>(req, {}),\n    })\n    if (!interceptors.ok) return interceptors.response\n    const { session } = interceptors\n\n    const parsed = copyDayRequestSchema.parse(session.body)\n    const fromDay = dayKey(parsed.fromDate)\n    const toDay = dayKey(parsed.toDate)\n    if (fromDay === toDay) {\n      // Copying a day onto itself is always a mistake, never intent, and\n      // `allowDuplicates` would turn it into a silent doubling.\n      throw new CrudHttpError(400, {\n        error: translate(\n          'staff.timesheets.errors.copyDaySameDate',\n          'The source and target day must be different.',\n        ),\n      })\n    }\n\n    const access = await loadProjectAccess(container, actorId || null, tenantId, organizationId, grantedFeatures)\n    // Ownership: the copies are attributed by the create command, which silently\n    // files them under the caller unless they hold `staff.timesheets.manage_all`.\n    // Refusing here rather than letting that happen keeps a projects-manager from\n    // asking for a colleague's day and quietly receiving it under their own name.\n    if (parsed.staffMemberId && parsed.staffMemberId !== access.staffMemberId && !hasManageAll) {\n      throw forbidden(\n        translate('staff.timesheets.errors.notOwner', 'You can only manage your own time entries.'),\n      )\n    }\n    const staffMemberId = parsed.staffMemberId ?? access.staffMemberId\n    if (!staffMemberId) {\n      throw new CrudHttpError(403, {\n        error: translate('staff.timesheets.errors.noStaffMember', 'No staff member linked to your account.'),\n      })\n    }\n\n    const em = (container.resolve('em') as EntityManager).fork()\n    const scopeCtx = { tenantId, organizationId }\n\n    const sources = (\n      await findWithDecryption(\n        em,\n        StaffTimeEntry,\n        { tenantId, organizationId, staffMemberId, date: parsed.fromDate, deletedAt: null },\n        {},\n        scopeCtx,\n      )\n    ).filter((entry) => isTimeEntryVisible(entry, access))\n\n    if (sources.length === 0) {\n      return session.respond(200, {\n        ok: true,\n        fromDate: fromDay,\n        toDate: toDay,\n        staffMemberId,\n        copied: 0,\n        created: [],\n        skipped: [],\n      })\n    }\n\n    if (!parsed.allowDuplicates) {\n      const existing = await em.find(\n        StaffTimeEntry,\n        { tenantId, organizationId, staffMemberId, date: parsed.toDate, deletedAt: null },\n        { fields: ['id'] },\n      )\n      if (existing.length > 0) {\n        throw new CrudHttpError(409, {\n          code: COPY_DAY_TARGET_NOT_EMPTY_CODE,\n          error: translate(\n            'staff.timesheets.errors.copyDayTargetNotEmpty',\n            'The target day already has time entries. Review them first, or confirm to add these copies anyway.',\n          ),\n          toDate: toDay,\n          existingEntryCount: existing.length,\n          existingEntryIds: existing.map((entry) => entry.id),\n        })\n      }\n    }\n\n    const guardResult = await runRouteMutationGuards({\n      container,\n      req,\n      auth: {\n        userId: actorId,\n        tenantId,\n        organizationId,\n        userFeatures: grantedFeatures,\n      },\n      input: {\n        resourceKind: RESOURCE_KIND,\n        resourceId: staffMemberId,\n        operation: 'create',\n        mutationPayload: parsed,\n      },\n    })\n    if (!guardResult.ok) return guardResult.response\n\n    const skipped: SkippedSource[] = []\n    const copyable: StaffTimeEntry[] = []\n    for (const entry of sources) {\n      if (entry.lockedReportId) {\n        skipped.push({\n          id: entry.id,\n          reason: TIME_ENTRY_LOCKED_CODE,\n          lockedReportId: entry.lockedReportId,\n          error: null,\n        })\n        continue\n      }\n      copyable.push(entry)\n    }\n\n    // Tags are read here rather than inside the command: the command writes tags\n    // only through the tag commands and never touches `staff_time_entry_tags`, so\n    // \u2014 exactly as with the single-entry duplicate, where the client supplies the\n    // `tags[]` it already holds \u2014 the caller of the command supplies them.\n    const tagIdsByEntry = await loadTagIdsByEntry(em, copyable.map((entry) => entry.id), tenantId, organizationId)\n\n    const ctx: CommandRuntimeContext = {\n      container,\n      auth,\n      organizationScope: scope,\n      selectedOrganizationId: scope?.selectedId ?? auth.orgId ?? null,\n      organizationIds: scope?.filterIds ?? (auth.orgId ? [auth.orgId] : null),\n      request: req,\n    }\n    const commandBus = container.resolve('commandBus') as CommandBus\n\n    const copiedIdBySource = new Map<string, string>()\n    for (const entry of copyable) {\n      try {\n        const { result } = await commandBus.execute<unknown, { timeEntryId: string }>(\n          staffTimeEntryCommandIds.duplicate,\n          {\n            input: {\n              id: entry.id,\n              date: parsed.toDate,\n              tagIds: tagIdsByEntry.get(entry.id) ?? [],\n            },\n            ctx,\n          },\n        )\n        if (result?.timeEntryId) copiedIdBySource.set(entry.id, result.timeEntryId)\n      } catch (err) {\n        // A source can stop being copyable between the read and the write \u2014 its\n        // project soft-deleted, say. The day is a set of drafts, so one source\n        // that cannot be copied is reported beside the locked ones instead of\n        // discarding the copies that already landed.\n        //\n        // A command interceptor that refuses one source with an explicit status is\n        // that same per-source refusal, so it is reported here rather than in the\n        // route-level catch: this is the clause the rejection actually reaches, and\n        // aborting the day from it would strand the copies already committed. The\n        // batch contract carries no per-item status, so the interceptor's message\n        // travels on the skipped row instead of degrading to `null`.\n        const interceptorRejection = getCommandInterceptorHttpRejection(err)\n        const skippedError = interceptorRejection\n          ? String(interceptorRejection.body.error ?? '') || null\n          : isCrudHttpError(err)\n            ? String((err.body as { error?: unknown })?.error ?? '') || null\n            : null\n        logger.warn('staff.timesheets.time-entries.copy-day source copy failed', { err, sourceId: entry.id })\n        skipped.push({\n          id: entry.id,\n          reason: COPY_FAILED_REASON,\n          lockedReportId: null,\n          error: skippedError,\n        })\n      }\n    }\n\n    await guardResult.runAfterSuccess()\n\n    for (const [sourceId, createdId] of copiedIdBySource) {\n      void emitStaffEvent('staff.timesheets.time_entry.copied', {\n        id: createdId,\n        sourceId,\n        tenantId,\n        organizationId,\n        staffMemberId,\n        date: toDay,\n      }, { persistent: true }).catch((err) => {\n        logger.error('staff.timesheets emit time_entry.copied failed', { err, sourceId })\n      })\n    }\n\n    // Screen 1 note 5: these are drafts to correct, so the response carries the\n    // rows themselves rather than a count the UI would have to go and re-fetch.\n    const createdIds = Array.from(copiedIdBySource.values())\n    const createdRows = createdIds.length\n      ? await findWithDecryption(\n          em.fork(),\n          StaffTimeEntry,\n          { id: { $in: createdIds }, tenantId, organizationId, deletedAt: null },\n          {},\n          scopeCtx,\n        )\n      : []\n    const createdRowById = new Map(createdRows.map((row) => [row.id, row]))\n\n    const created = Array.from(copiedIdBySource.entries()).flatMap(([sourceId, createdId]) => {\n      const row = createdRowById.get(createdId)\n      if (!row) return []\n      return [\n        {\n          id: row.id,\n          sourceId,\n          date: dayKey(row.date),\n          durationMinutes: row.durationMinutes,\n          roundedMinutes: row.roundedMinutes ?? null,\n          timeProjectId: row.timeProjectId ?? null,\n          taskId: row.taskId ?? null,\n          isBillable: row.isBillable,\n          description: row.notes ?? null,\n          tagIds: tagIdsByEntry.get(sourceId) ?? [],\n        },\n      ]\n    })\n\n    return session.respond(200, {\n      ok: true,\n      fromDate: fromDay,\n      toDate: toDay,\n      staffMemberId,\n      copied: created.length,\n      created,\n      skipped,\n    })\n  } catch (err) {\n    if (isCrudHttpError(err)) {\n      return NextResponse.json(err.body, { status: err.status })\n    }\n    const { translate } = await resolveTranslations()\n    if (err instanceof z.ZodError) {\n      return NextResponse.json(\n        { error: translate('staff.errors.invalid_request', 'Invalid request'), details: err.issues },\n        { status: 400 },\n      )\n    }\n    logger.error('staff.timesheets.time-entries.copy-day failed', { err })\n    return NextResponse.json(\n      { error: translate('staff.errors.internal', 'Internal server error') },\n      { status: 500 },\n    )\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Staff',\n  summary: 'Copy a day of time entries',\n  methods: {\n    POST: {\n      summary: 'Copy a day of time entries',\n      description:\n        'US-D6, screen 1 note 5. Copies every unlocked time entry the caller owns on `fromDate` onto `toDate` as editable drafts, and returns the created rows so they can be reviewed and corrected. Which day is \"the previous working day\" is the caller decision \u2014 this endpoint takes explicit dates and applies no weekend or holiday rule. A source entry locked into a closed report is skipped and reported in `skipped[]` with the shared `time_entry_locked` code (nothing is written to it, so the batch is not failed). The request is refused with 409 `copy_day_target_not_empty` when the target day already holds entries, so a repeated call cannot silently double a day; pass `allowDuplicates: true` to add the copies anyway. `staffMemberId` targets another member and requires `staff.timesheets.manage_all`. Every copy is written through the duplicate command and therefore through the create command, so ownership, project access, the billable and currency defaults and the tenant rounding rule apply to it exactly as they do to a hand-made entry.',\n      requestBody: {\n        contentType: 'application/json',\n        schema: copyDayRequestSchema,\n      },\n      responses: [\n        { status: 200, description: 'Copies created, with the skipped sources reported', schema: copyDayResponseSchema },\n      ],\n      errors: [\n        { status: 400, description: 'Invalid body, missing scope, or fromDate equal to toDate' },\n        { status: 401, description: 'Unauthorized' },\n        { status: 403, description: 'Missing staff.timesheets.manage_own, no linked staff member, or another member day without staff.timesheets.manage_all' },\n        {\n          status: 409,\n          description: 'The target day already has entries; nothing was copied',\n          schema: targetNotEmptySchema,\n        },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AA+CA,SAAS,oBAAoB;AAC7B,SAAS,4BAA4B;AACrC,SAAS,SAAS;AAElB,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AACnD,SAAS,eAAe,WAAW,uBAAuB;AAC1D,SAAS,8BAA8B;AACvC,SAAS,2BAA2B;AACpC,SAAS,oBAAoB;AAC7B,SAAS,0BAA0B;AACnC,SAAS,oBAAoB;AAC7B,SAAS,sBAAsB;AAE/B,SAAS,0CAA0C;AAGnD,SAAS,gBAAgB,yBAAyB;AAClD,SAAS,0BAA0B,8BAA8B;AACjE,SAAS,4BAAgD;AACzD,SAAS,gCAAgC;AACzC,SAAS,0CAA0C;AACnD,SAAS,gCAAgC;AAEzC,MAAM,SAAS,aAAa,OAAO,EAAE,MAAM,EAAE,WAAW,uCAAuC,CAAC;AAEhG,MAAM,qBAAqB;AAC3B,MAAM,qBAAqB;AAC3B,MAAM,gBAAgB,mCAAmC;AAGlD,MAAM,iCAAiC;AAG9C,MAAM,qBAAqB;AAEpB,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,kBAAkB,EAAE;AACnE;AAEA,MAAM,uBAAuB,EAAE,OAAO;AAAA,EACpC,UAAU,EAAE,OAAO,KAAK;AAAA,EACxB,QAAQ,EAAE,OAAO,KAAK;AAAA;AAAA,EAEtB,eAAe,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC1C,iBAAiB,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,KAAK;AACvD,CAAC;AAED,MAAM,oBAAoB,EAAE,OAAO;AAAA,EACjC,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,UAAU,EAAE,OAAO,EAAE,KAAK;AAAA,EAC1B,MAAM,EAAE,OAAO;AAAA,EACf,iBAAiB,EAAE,OAAO;AAAA,EAC1B,gBAAgB,EAAE,OAAO,EAAE,SAAS;AAAA,EACpC,eAAe,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC1C,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACnC,YAAY,EAAE,QAAQ;AAAA,EACtB,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,EACjC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC;AACnC,CAAC;AAED,MAAM,qBAAqB,EAAE,OAAO;AAAA,EAClC,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,QAAQ,EAAE,OAAO;AAAA,EACjB,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC3C,OAAO,EAAE,OAAO,EAAE,SAAS;AAC7B,CAAC;AAED,MAAM,wBAAwB,EAAE,OAAO;AAAA,EACrC,IAAI,EAAE,QAAQ,IAAI;AAAA,EAClB,UAAU,EAAE,OAAO;AAAA,EACnB,QAAQ,EAAE,OAAO;AAAA,EACjB,eAAe,EAAE,OAAO,EAAE,KAAK;AAAA,EAC/B,QAAQ,EAAE,OAAO;AAAA,EACjB,SAAS,EAAE,MAAM,iBAAiB;AAAA,EAClC,SAAS,EAAE,MAAM,kBAAkB;AACrC,CAAC;AAED,MAAM,uBAAuB,EAAE,OAAO;AAAA,EACpC,MAAM,EAAE,QAAQ,8BAA8B;AAAA,EAC9C,OAAO,EAAE,OAAO;AAAA,EAChB,QAAQ,EAAE,OAAO;AAAA,EACjB,oBAAoB,EAAE,OAAO;AAAA,EAC7B,kBAAkB,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC;AAC7C,CAAC;AAeD,SAAS,OAAO,OAAiD;AAC/D,MAAI,CAAC,MAAO,QAAO;AACnB,QAAM,OAAO,iBAAiB,OAAO,QAAQ,IAAI,KAAK,KAAK;AAC3D,SAAO,OAAO,MAAM,KAAK,QAAQ,CAAC,IAAI,OAAO,KAAK,IAAI,KAAK,YAAY,EAAE,MAAM,GAAG,EAAE;AACtF;AAEA,eAAe,2BAA2B,WAA0B,UAA0C;AAC5G,MAAI;AACF,UAAM,gBAAgB,UAAU,QAAQ,qBAAqB;AAC7D,UAAM,WAAW,MAAM,yBAAyB,eAAe,EAAE,SAAS,CAAC;AAC3E,WAAO,SAAS,OAAO;AAAA,EACzB,QAAQ;AAEN,WAAO;AAAA,EACT;AACF;AAEA,eAAe,kBACb,WACA,QACA,UACA,gBACA,iBACwB;AACxB,QAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,SAAO,qBAAqB;AAAA,IAC1B,IAAI,GAAG,KAAK;AAAA,IACZ;AAAA,IACA;AAAA,IACA;AAAA,IACA,cAAc;AAAA,IACd,qBAAqB,MAAM,2BAA2B,WAAW,QAAQ;AAAA,EAC3E,CAAC;AACH;AAQA,SAAS,mBACP,OACA,QACS;AACT,MAAI,OAAO,aAAc,QAAO;AAChC,QAAM,YAAY,MAAM,iBAAiB;AACzC,MAAI,UAAW,QAAO,OAAO,WAAW,SAAS,SAAS;AAC1D,SAAO,OAAO,kBAAkB,QAAQ,OAAO,kBAAkB,MAAM;AACzE;AAEA,eAAe,kBACb,IACA,UACA,UACA,gBACgC;AAChC,QAAM,YAAY,oBAAI,IAAsB;AAC5C,MAAI,SAAS,WAAW,EAAG,QAAO;AAClC,QAAM,cAAc,MAAM,GAAG,KAAK,mBAAmB;AAAA,IACnD,aAAa,EAAE,KAAK,SAAS;AAAA,IAC7B;AAAA,IACA;AAAA,EACF,CAAC;AACD,aAAW,cAAc,aAAa;AACpC,UAAM,OAAO,UAAU,IAAI,WAAW,WAAW,KAAK,CAAC;AACvD,SAAK,KAAK,WAAW,KAAK;AAC1B,cAAU,IAAI,WAAW,aAAa,IAAI;AAAA,EAC5C;AACA,SAAO;AACT;AAEA,eAAsB,KAAK,KAAc;AACvC,MAAI;AACF,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,QAAI,CAAC,MAAM;AACT,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,6BAA6B,cAAc,EAAE,CAAC;AAAA,IAChG;AAEA,UAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AACxF,UAAM,WAAW,OAAO,YAAY,KAAK,YAAY;AACrD,UAAM,iBAAiB,OAAO,cAAc,KAAK,SAAS;AAC1D,QAAI,CAAC,YAAY,CAAC,gBAAgB;AAChC,YAAM,IAAI,cAAc,KAAK;AAAA,QAC3B,OAAO,UAAU,6BAA6B,uCAAuC;AAAA,MACvF,CAAC;AAAA,IACH;AAEA,UAAM,UAAU,KAAK,OAAO;AAM5B,UAAM,YAAY,MAAM,qBAAqB,WAAW,SAAS,CAAC,kBAAkB,GAAG,EAAE,UAAU,eAAe,CAAC;AACnH,QAAI,CAAC,UAAU,SAAS;AACtB,YAAM,UAAU,UAAU,0BAA0B,WAAW,CAAC;AAAA,IAClE;AACA,UAAM,kBAAkB,UAAU;AAClC,UAAM,gBACJ,MAAM,qBAAqB,WAAW,SAAS,CAAC,kBAAkB,GAAG,EAAE,UAAU,eAAe,CAAC,GACjG;AAEF,UAAM,eAAe,MAAM,yBAAyB;AAAA,MAClD,SAAS;AAAA,MACT,QAAQ;AAAA,MACR,OAAO,EAAE,WAAW,QAAQ,SAAS,UAAU,gBAAgB,cAAc,gBAAgB;AAAA,MAC7F,MAAM,MAAM,aAAsC,KAAK,CAAC,CAAC;AAAA,IAC3D,CAAC;AACD,QAAI,CAAC,aAAa,GAAI,QAAO,aAAa;AAC1C,UAAM,EAAE,QAAQ,IAAI;AAEpB,UAAM,SAAS,qBAAqB,MAAM,QAAQ,IAAI;AACtD,UAAM,UAAU,OAAO,OAAO,QAAQ;AACtC,UAAM,QAAQ,OAAO,OAAO,MAAM;AAClC,QAAI,YAAY,OAAO;AAGrB,YAAM,IAAI,cAAc,KAAK;AAAA,QAC3B,OAAO;AAAA,UACL;AAAA,UACA;AAAA,QACF;AAAA,MACF,CAAC;AAAA,IACH;AAEA,UAAM,SAAS,MAAM,kBAAkB,WAAW,WAAW,MAAM,UAAU,gBAAgB,eAAe;AAK5G,QAAI,OAAO,iBAAiB,OAAO,kBAAkB,OAAO,iBAAiB,CAAC,cAAc;AAC1F,YAAM;AAAA,QACJ,UAAU,oCAAoC,4CAA4C;AAAA,MAC5F;AAAA,IACF;AACA,UAAM,gBAAgB,OAAO,iBAAiB,OAAO;AACrD,QAAI,CAAC,eAAe;AAClB,YAAM,IAAI,cAAc,KAAK;AAAA,QAC3B,OAAO,UAAU,yCAAyC,yCAAyC;AAAA,MACrG,CAAC;AAAA,IACH;AAEA,UAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC3D,UAAM,WAAW,EAAE,UAAU,eAAe;AAE5C,UAAM,WACJ,MAAM;AAAA,MACJ;AAAA,MACA;AAAA,MACA,EAAE,UAAU,gBAAgB,eAAe,MAAM,OAAO,UAAU,WAAW,KAAK;AAAA,MAClF,CAAC;AAAA,MACD;AAAA,IACF,GACA,OAAO,CAAC,UAAU,mBAAmB,OAAO,MAAM,CAAC;AAErD,QAAI,QAAQ,WAAW,GAAG;AACxB,aAAO,QAAQ,QAAQ,KAAK;AAAA,QAC1B,IAAI;AAAA,QACJ,UAAU;AAAA,QACV,QAAQ;AAAA,QACR;AAAA,QACA,QAAQ;AAAA,QACR,SAAS,CAAC;AAAA,QACV,SAAS,CAAC;AAAA,MACZ,CAAC;AAAA,IACH;AAEA,QAAI,CAAC,OAAO,iBAAiB;AAC3B,YAAM,WAAW,MAAM,GAAG;AAAA,QACxB;AAAA,QACA,EAAE,UAAU,gBAAgB,eAAe,MAAM,OAAO,QAAQ,WAAW,KAAK;AAAA,QAChF,EAAE,QAAQ,CAAC,IAAI,EAAE;AAAA,MACnB;AACA,UAAI,SAAS,SAAS,GAAG;AACvB,cAAM,IAAI,cAAc,KAAK;AAAA,UAC3B,MAAM;AAAA,UACN,OAAO;AAAA,YACL;AAAA,YACA;AAAA,UACF;AAAA,UACA,QAAQ;AAAA,UACR,oBAAoB,SAAS;AAAA,UAC7B,kBAAkB,SAAS,IAAI,CAAC,UAAU,MAAM,EAAE;AAAA,QACpD,CAAC;AAAA,MACH;AAAA,IACF;AAEA,UAAM,cAAc,MAAM,uBAAuB;AAAA,MAC/C;AAAA,MACA;AAAA,MACA,MAAM;AAAA,QACJ,QAAQ;AAAA,QACR;AAAA,QACA;AAAA,QACA,cAAc;AAAA,MAChB;AAAA,MACA,OAAO;AAAA,QACL,cAAc;AAAA,QACd,YAAY;AAAA,QACZ,WAAW;AAAA,QACX,iBAAiB;AAAA,MACnB;AAAA,IACF,CAAC;AACD,QAAI,CAAC,YAAY,GAAI,QAAO,YAAY;AAExC,UAAM,UAA2B,CAAC;AAClC,UAAM,WAA6B,CAAC;AACpC,eAAW,SAAS,SAAS;AAC3B,UAAI,MAAM,gBAAgB;AACxB,gBAAQ,KAAK;AAAA,UACX,IAAI,MAAM;AAAA,UACV,QAAQ;AAAA,UACR,gBAAgB,MAAM;AAAA,UACtB,OAAO;AAAA,QACT,CAAC;AACD;AAAA,MACF;AACA,eAAS,KAAK,KAAK;AAAA,IACrB;AAMA,UAAM,gBAAgB,MAAM,kBAAkB,IAAI,SAAS,IAAI,CAAC,UAAU,MAAM,EAAE,GAAG,UAAU,cAAc;AAE7G,UAAM,MAA6B;AAAA,MACjC;AAAA,MACA;AAAA,MACA,mBAAmB;AAAA,MACnB,wBAAwB,OAAO,cAAc,KAAK,SAAS;AAAA,MAC3D,iBAAiB,OAAO,cAAc,KAAK,QAAQ,CAAC,KAAK,KAAK,IAAI;AAAA,MAClE,SAAS;AAAA,IACX;AACA,UAAM,aAAa,UAAU,QAAQ,YAAY;AAEjD,UAAM,mBAAmB,oBAAI,IAAoB;AACjD,eAAW,SAAS,UAAU;AAC5B,UAAI;AACF,cAAM,EAAE,OAAO,IAAI,MAAM,WAAW;AAAA,UAClC,yBAAyB;AAAA,UACzB;AAAA,YACE,OAAO;AAAA,cACL,IAAI,MAAM;AAAA,cACV,MAAM,OAAO;AAAA,cACb,QAAQ,cAAc,IAAI,MAAM,EAAE,KAAK,CAAC;AAAA,YAC1C;AAAA,YACA;AAAA,UACF;AAAA,QACF;AACA,YAAI,QAAQ,YAAa,kBAAiB,IAAI,MAAM,IAAI,OAAO,WAAW;AAAA,MAC5E,SAAS,KAAK;AAYZ,cAAM,uBAAuB,mCAAmC,GAAG;AACnE,cAAM,eAAe,uBACjB,OAAO,qBAAqB,KAAK,SAAS,EAAE,KAAK,OACjD,gBAAgB,GAAG,IACjB,OAAQ,IAAI,MAA8B,SAAS,EAAE,KAAK,OAC1D;AACN,eAAO,KAAK,6DAA6D,EAAE,KAAK,UAAU,MAAM,GAAG,CAAC;AACpG,gBAAQ,KAAK;AAAA,UACX,IAAI,MAAM;AAAA,UACV,QAAQ;AAAA,UACR,gBAAgB;AAAA,UAChB,OAAO;AAAA,QACT,CAAC;AAAA,MACH;AAAA,IACF;AAEA,UAAM,YAAY,gBAAgB;AAElC,eAAW,CAAC,UAAU,SAAS,KAAK,kBAAkB;AACpD,WAAK,eAAe,sCAAsC;AAAA,QACxD,IAAI;AAAA,QACJ;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA,MAAM;AAAA,MACR,GAAG,EAAE,YAAY,KAAK,CAAC,EAAE,MAAM,CAAC,QAAQ;AACtC,eAAO,MAAM,kDAAkD,EAAE,KAAK,SAAS,CAAC;AAAA,MAClF,CAAC;AAAA,IACH;AAIA,UAAM,aAAa,MAAM,KAAK,iBAAiB,OAAO,CAAC;AACvD,UAAM,cAAc,WAAW,SAC3B,MAAM;AAAA,MACJ,GAAG,KAAK;AAAA,MACR;AAAA,MACA,EAAE,IAAI,EAAE,KAAK,WAAW,GAAG,UAAU,gBAAgB,WAAW,KAAK;AAAA,MACrE,CAAC;AAAA,MACD;AAAA,IACF,IACA,CAAC;AACL,UAAM,iBAAiB,IAAI,IAAI,YAAY,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC;AAEtE,UAAM,UAAU,MAAM,KAAK,iBAAiB,QAAQ,CAAC,EAAE,QAAQ,CAAC,CAAC,UAAU,SAAS,MAAM;AACxF,YAAM,MAAM,eAAe,IAAI,SAAS;AACxC,UAAI,CAAC,IAAK,QAAO,CAAC;AAClB,aAAO;AAAA,QACL;AAAA,UACE,IAAI,IAAI;AAAA,UACR;AAAA,UACA,MAAM,OAAO,IAAI,IAAI;AAAA,UACrB,iBAAiB,IAAI;AAAA,UACrB,gBAAgB,IAAI,kBAAkB;AAAA,UACtC,eAAe,IAAI,iBAAiB;AAAA,UACpC,QAAQ,IAAI,UAAU;AAAA,UACtB,YAAY,IAAI;AAAA,UAChB,aAAa,IAAI,SAAS;AAAA,UAC1B,QAAQ,cAAc,IAAI,QAAQ,KAAK,CAAC;AAAA,QAC1C;AAAA,MACF;AAAA,IACF,CAAC;AAED,WAAO,QAAQ,QAAQ,KAAK;AAAA,MAC1B,IAAI;AAAA,MACJ,UAAU;AAAA,MACV,QAAQ;AAAA,MACR;AAAA,MACA,QAAQ,QAAQ;AAAA,MAChB;AAAA,MACA;AAAA,IACF,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,GAAG;AACxB,aAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,IAC3D;AACA,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,QAAI,eAAe,EAAE,UAAU;AAC7B,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,UAAU,gCAAgC,iBAAiB,GAAG,SAAS,IAAI,OAAO;AAAA,QAC3F,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AACA,WAAO,MAAM,iDAAiD,EAAE,IAAI,CAAC;AACrE,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,UAAU,yBAAyB,uBAAuB,EAAE;AAAA,MACrE,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aACE;AAAA,MACF,aAAa;AAAA,QACX,aAAa;AAAA,QACb,QAAQ;AAAA,MACV;AAAA,MACA,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,qDAAqD,QAAQ,sBAAsB;AAAA,MACjH;AAAA,MACA,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,2DAA2D;AAAA,QACvF,EAAE,QAAQ,KAAK,aAAa,eAAe;AAAA,QAC3C,EAAE,QAAQ,KAAK,aAAa,yHAAyH;AAAA,QACrJ;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["/**\n * US-D6 \u2014 \"Kopiuj wczorajszy dzie\u0144\" (screen 1, note 5).\n *\n * The note is the design constraint: the button \"duplicates the previous working\n * day's entries **as versions to correct**\". So this endpoint is not a silent\n * commit \u2014 it answers with the entries it created, in full, so the caller can put\n * them straight in front of the user for review and adjustment rather than\n * reporting a count and leaving them to hunt for what landed.\n *\n * What \"the previous working day\" means is the CALLER's business. Weekends,\n * holidays and four-day weeks are calendar questions this module has no data for,\n * and a server-side weekend rule would be wrong for every tenant that does not\n * work Monday-to-Friday. The endpoint therefore takes two explicit days.\n *\n * Three decisions worth their reasoning:\n *\n *  1. **A locked SOURCE is skipped and reported, not fatal.** The lock protects\n *     the numbers a closed report has already billed (D-7), and a copy never\n *     writes to its source \u2014 the target day is a fresh, unlocked draft. This is\n *     what makes it different from the grid bulk save, where the rows being\n *     WRITTEN are the locked ones and the whole batch must fail. Here the caller\n *     did not hand-pick rows: they asked for a day. Failing the whole day because\n *     one of its entries sits in a closed report would break the button for\n *     exactly the people who report most regularly. Every skipped source comes\n *     back in `skipped[]` carrying the shared `time_entry_locked` code and the\n *     report that froze it, so the UI can say what was left behind.\n *  2. **Idempotency: a non-empty target day is refused.** A day of entries has no\n *     natural key to deduplicate on \u2014 two identical 30-minute stand-ups on one day\n *     are legitimate data \u2014 so a second call cannot tell a re-run from a genuine\n *     repeat, and would silently double the day into something the user cannot\n *     untangle from the grid. So the default is to refuse with `409\n *     copy_day_target_not_empty`, naming what is already there. `allowDuplicates:\n *     true` is the deliberate opt-in for the real case the refusal would\n *     otherwise block: the user already logged something today and still wants\n *     yesterday's set on top. Refusing is also what makes a partially completed\n *     run visible instead of compounding it.\n *  3. **The copy itself is the existing duplicate command, once per source.** It\n *     already resolves the source, runs the lock gate and delegates the write to\n *     the create command, so every copy inherits ownership, project access, the\n *     billable and currency defaults, rounding (D-7), tags and audit unchanged.\n *     The loop is NOT wrapped in a route-level transaction: the command bus forks\n *     its own EntityManager per command, so an outer `em.transactional` would\n *     enclose nothing and the atomicity would be a fiction. Each copy is atomic in\n *     itself; a copy that fails is reported in `skipped[]` and the rest still\n *     land, which is the behaviour a day of drafts wants.\n */\n\nimport { NextResponse } from 'next/server'\nimport { resolveFeatureAccess } from '../../../../lib/time-tracking/featureAccess'\nimport { z } from 'zod'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { resolveSingleOrganizationIdOrDeny } from '@open-mercato/core/modules/directory/utils/organizationScopeFilter'\nimport { CrudHttpError, forbidden, isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { runRouteMutationGuards } from '@open-mercato/shared/lib/crud/route-mutation-guard'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { readJsonSafe } from '@open-mercato/shared/lib/http/readJsonSafe'\nimport { findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport { emitStaffEvent } from '../../../../events'\nimport type { CommandBus, CommandRuntimeContext } from '@open-mercato/shared/lib/commands'\nimport { getCommandInterceptorHttpRejection } from '@open-mercato/shared/lib/commands/errors'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport type { ModuleConfigService } from '@open-mercato/core/modules/configs/lib/module-config-service'\nimport { StaffTimeEntry, StaffTimeEntryTag } from '../../../../data/entities'\nimport { staffTimeEntryCommandIds, TIME_ENTRY_LOCKED_CODE } from '../../../../commands/timesheets-entries'\nimport { resolveProjectAccess, type ProjectAccess } from '../../../../lib/time-tracking/access'\nimport { readTimeTrackingSettings } from '../../../../lib/time-tracking/settings'\nimport { STAFF_TIME_TRACKING_RESOURCE_KINDS } from '../../../guards'\nimport { runTimesheetInterceptors } from '../../_shared/withTimesheetInterceptors'\n\nconst logger = createLogger('staff').child({ component: 'api/timesheets/time-entries/copy-day' })\n\nconst MANAGE_OWN_FEATURE = 'staff.timesheets.manage_own'\nconst MANAGE_ALL_FEATURE = 'staff.timesheets.manage_all'\nconst RESOURCE_KIND = STAFF_TIME_TRACKING_RESOURCE_KINDS.timeEntry\n\n/** The 409 a second \"copy yesterday\" click gets, rather than a doubled day. */\nexport const COPY_DAY_TARGET_NOT_EMPTY_CODE = 'copy_day_target_not_empty'\n\n/** Reason codes on `skipped[]`. The locked one is the shared code, not a second spelling of it. */\nconst COPY_FAILED_REASON = 'copy_failed'\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: [MANAGE_OWN_FEATURE] },\n}\n\nconst copyDayRequestSchema = z.object({\n  fromDate: z.coerce.date(),\n  toDate: z.coerce.date(),\n  /** Only a `staff.timesheets.manage_all` holder may copy somebody else's day. */\n  staffMemberId: z.string().uuid().optional(),\n  allowDuplicates: z.boolean().optional().default(false),\n})\n\nconst copiedEntrySchema = z.object({\n  id: z.string().uuid(),\n  sourceId: z.string().uuid(),\n  date: z.string(),\n  durationMinutes: z.number(),\n  roundedMinutes: z.number().nullable(),\n  timeProjectId: z.string().uuid().nullable(),\n  taskId: z.string().uuid().nullable(),\n  isBillable: z.boolean(),\n  description: z.string().nullable(),\n  tagIds: z.array(z.string().uuid()),\n})\n\nconst skippedEntrySchema = z.object({\n  id: z.string().uuid(),\n  reason: z.string(),\n  lockedReportId: z.string().uuid().nullable(),\n  error: z.string().nullable(),\n})\n\nconst copyDayResponseSchema = z.object({\n  ok: z.literal(true),\n  fromDate: z.string(),\n  toDate: z.string(),\n  staffMemberId: z.string().uuid(),\n  copied: z.number(),\n  created: z.array(copiedEntrySchema),\n  skipped: z.array(skippedEntrySchema),\n})\n\nconst targetNotEmptySchema = z.object({\n  code: z.literal(COPY_DAY_TARGET_NOT_EMPTY_CODE),\n  error: z.string(),\n  toDate: z.string(),\n  existingEntryCount: z.number(),\n  existingEntryIds: z.array(z.string().uuid()),\n})\n\ntype ContainerLike = { resolve: (name: string) => unknown }\n\ntype SkippedSource = {\n  id: string\n  reason: string\n  lockedReportId: string | null\n  error: string | null\n}\n\n/**\n * A day is addressed by its calendar day, never by a timestamp (D-8), so both the\n * request echo and the copied rows collapse to `YYYY-MM-DD`.\n */\nfunction dayKey(value: Date | string | null | undefined): string {\n  if (!value) return ''\n  const date = value instanceof Date ? value : new Date(value)\n  return Number.isNaN(date.getTime()) ? String(value) : date.toISOString().slice(0, 10)\n}\n\nasync function resolveAssignmentGraceDays(container: ContainerLike, tenantId: string): Promise<number | null> {\n  try {\n    const configService = container.resolve('moduleConfigService') as ModuleConfigService\n    const settings = await readTimeTrackingSettings(configService, { tenantId })\n    return settings.access.assignmentGraceDays\n  } catch {\n    // Fail safe to the documented default rather than widening the window.\n    return null\n  }\n}\n\nasync function loadProjectAccess(\n  container: ContainerLike,\n  userId: string | null,\n  tenantId: string,\n  organizationId: string,\n  grantedFeatures: readonly string[],\n): Promise<ProjectAccess> {\n  const em = container.resolve('em') as EntityManager\n  return resolveProjectAccess({\n    em: em.fork(),\n    userId,\n    tenantId,\n    organizationId,\n    userFeatures: grantedFeatures,\n    assignmentGraceDays: await resolveAssignmentGraceDays(container, tenantId),\n  })\n}\n\n/**\n * The per-row form of the list route's `$or` intersection: an entry on a project\n * is visible to the members of that project, and a project-less entry is visible\n * only to the member who logged it. A manager copying somebody else's day still\n * only copies the part of it their own project access covers.\n */\nfunction isTimeEntryVisible(\n  entry: { staffMemberId: string; timeProjectId?: string | null },\n  access: ProjectAccess,\n): boolean {\n  if (access.canManageAll) return true\n  const projectId = entry.timeProjectId ?? null\n  if (projectId) return access.projectIds.includes(projectId)\n  return access.staffMemberId !== null && access.staffMemberId === entry.staffMemberId\n}\n\nasync function loadTagIdsByEntry(\n  em: EntityManager,\n  entryIds: string[],\n  tenantId: string,\n  organizationId: string,\n): Promise<Map<string, string[]>> {\n  const byEntryId = new Map<string, string[]>()\n  if (entryIds.length === 0) return byEntryId\n  const assignments = await em.find(StaffTimeEntryTag, {\n    timeEntryId: { $in: entryIds },\n    tenantId,\n    organizationId,\n  })\n  for (const assignment of assignments) {\n    const list = byEntryId.get(assignment.timeEntryId) ?? []\n    list.push(assignment.tagId)\n    byEntryId.set(assignment.timeEntryId, list)\n  }\n  return byEntryId\n}\n\nexport async function POST(req: Request) {\n  try {\n    const container = await createRequestContainer()\n    const auth = await getAuthFromRequest(req)\n    const { translate } = await resolveTranslations()\n    if (!auth) {\n      throw new CrudHttpError(401, { error: translate('staff.errors.unauthorized', 'Unauthorized') })\n    }\n\n    const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n    const tenantId = scope?.tenantId ?? auth.tenantId ?? null\n    const organizationId = resolveSingleOrganizationIdOrDeny(scope, auth) ?? null\n    if (!tenantId || !organizationId) {\n      throw new CrudHttpError(400, {\n        error: translate('staff.errors.missingScope', 'Missing tenant or organization scope.'),\n      })\n    }\n\n    const actorId = auth.sub ?? ''\n    // Both decisions come from the module's single RBAC authority, which asks the\n    // service and fails closed on every path. The nullable grant array they were\n    // matched against could not say whether an empty answer meant \"no grants\" or\n    // \"could not ask\", and `grantedFeatures ? \u2026 : false` silently answered the\n    // second as the first.\n    const manageOwn = await resolveFeatureAccess(container, actorId, [MANAGE_OWN_FEATURE], { tenantId, organizationId })\n    if (!manageOwn.allowed) {\n      throw forbidden(translate('staff.errors.forbidden', 'Forbidden'))\n    }\n    const grantedFeatures = manageOwn.grantedFeatures\n    const hasManageAll = (\n      await resolveFeatureAccess(container, actorId, [MANAGE_ALL_FEATURE], { tenantId, organizationId })\n    ).allowed\n\n    const interceptors = await runTimesheetInterceptors({\n      request: req,\n      method: 'POST',\n      scope: { container, userId: actorId, tenantId, organizationId, userFeatures: grantedFeatures },\n      body: await readJsonSafe<Record<string, unknown>>(req, {}),\n    })\n    if (!interceptors.ok) return interceptors.response\n    const { session } = interceptors\n\n    const parsed = copyDayRequestSchema.parse(session.body)\n    const fromDay = dayKey(parsed.fromDate)\n    const toDay = dayKey(parsed.toDate)\n    if (fromDay === toDay) {\n      // Copying a day onto itself is always a mistake, never intent, and\n      // `allowDuplicates` would turn it into a silent doubling.\n      throw new CrudHttpError(400, {\n        error: translate(\n          'staff.timesheets.errors.copyDaySameDate',\n          'The source and target day must be different.',\n        ),\n      })\n    }\n\n    const access = await loadProjectAccess(container, actorId || null, tenantId, organizationId, grantedFeatures)\n    // Ownership: the copies are attributed by the create command, which silently\n    // files them under the caller unless they hold `staff.timesheets.manage_all`.\n    // Refusing here rather than letting that happen keeps a projects-manager from\n    // asking for a colleague's day and quietly receiving it under their own name.\n    if (parsed.staffMemberId && parsed.staffMemberId !== access.staffMemberId && !hasManageAll) {\n      throw forbidden(\n        translate('staff.timesheets.errors.notOwner', 'You can only manage your own time entries.'),\n      )\n    }\n    const staffMemberId = parsed.staffMemberId ?? access.staffMemberId\n    if (!staffMemberId) {\n      throw new CrudHttpError(403, {\n        error: translate('staff.timesheets.errors.noStaffMember', 'No staff member linked to your account.'),\n      })\n    }\n\n    const em = (container.resolve('em') as EntityManager).fork()\n    const scopeCtx = { tenantId, organizationId }\n\n    const sources = (\n      await findWithDecryption(\n        em,\n        StaffTimeEntry,\n        { tenantId, organizationId, staffMemberId, date: parsed.fromDate, deletedAt: null },\n        {},\n        scopeCtx,\n      )\n    ).filter((entry) => isTimeEntryVisible(entry, access))\n\n    if (sources.length === 0) {\n      return session.respond(200, {\n        ok: true,\n        fromDate: fromDay,\n        toDate: toDay,\n        staffMemberId,\n        copied: 0,\n        created: [],\n        skipped: [],\n      })\n    }\n\n    if (!parsed.allowDuplicates) {\n      const existing = await em.find(\n        StaffTimeEntry,\n        { tenantId, organizationId, staffMemberId, date: parsed.toDate, deletedAt: null },\n        { fields: ['id'] },\n      )\n      if (existing.length > 0) {\n        throw new CrudHttpError(409, {\n          code: COPY_DAY_TARGET_NOT_EMPTY_CODE,\n          error: translate(\n            'staff.timesheets.errors.copyDayTargetNotEmpty',\n            'The target day already has time entries. Review them first, or confirm to add these copies anyway.',\n          ),\n          toDate: toDay,\n          existingEntryCount: existing.length,\n          existingEntryIds: existing.map((entry) => entry.id),\n        })\n      }\n    }\n\n    const guardResult = await runRouteMutationGuards({\n      container,\n      req,\n      auth: {\n        userId: actorId,\n        tenantId,\n        organizationId,\n        userFeatures: grantedFeatures,\n      },\n      input: {\n        resourceKind: RESOURCE_KIND,\n        resourceId: staffMemberId,\n        operation: 'create',\n        mutationPayload: parsed,\n      },\n    })\n    if (!guardResult.ok) return guardResult.response\n\n    const skipped: SkippedSource[] = []\n    const copyable: StaffTimeEntry[] = []\n    for (const entry of sources) {\n      if (entry.lockedReportId) {\n        skipped.push({\n          id: entry.id,\n          reason: TIME_ENTRY_LOCKED_CODE,\n          lockedReportId: entry.lockedReportId,\n          error: null,\n        })\n        continue\n      }\n      copyable.push(entry)\n    }\n\n    // Tags are read here rather than inside the command: the command writes tags\n    // only through the tag commands and never touches `staff_time_entry_tags`, so\n    // \u2014 exactly as with the single-entry duplicate, where the client supplies the\n    // `tags[]` it already holds \u2014 the caller of the command supplies them.\n    const tagIdsByEntry = await loadTagIdsByEntry(em, copyable.map((entry) => entry.id), tenantId, organizationId)\n\n    const ctx: CommandRuntimeContext = {\n      container,\n      auth,\n      organizationScope: scope,\n      selectedOrganizationId: resolveSingleOrganizationIdOrDeny(scope, auth) ?? null,\n      organizationIds: scope?.filterIds ?? (auth.orgId ? [auth.orgId] : null),\n      request: req,\n    }\n    const commandBus = container.resolve('commandBus') as CommandBus\n\n    const copiedIdBySource = new Map<string, string>()\n    for (const entry of copyable) {\n      try {\n        const { result } = await commandBus.execute<unknown, { timeEntryId: string }>(\n          staffTimeEntryCommandIds.duplicate,\n          {\n            input: {\n              id: entry.id,\n              date: parsed.toDate,\n              tagIds: tagIdsByEntry.get(entry.id) ?? [],\n            },\n            ctx,\n          },\n        )\n        if (result?.timeEntryId) copiedIdBySource.set(entry.id, result.timeEntryId)\n      } catch (err) {\n        // A source can stop being copyable between the read and the write \u2014 its\n        // project soft-deleted, say. The day is a set of drafts, so one source\n        // that cannot be copied is reported beside the locked ones instead of\n        // discarding the copies that already landed.\n        //\n        // A command interceptor that refuses one source with an explicit status is\n        // that same per-source refusal, so it is reported here rather than in the\n        // route-level catch: this is the clause the rejection actually reaches, and\n        // aborting the day from it would strand the copies already committed. The\n        // batch contract carries no per-item status, so the interceptor's message\n        // travels on the skipped row instead of degrading to `null`.\n        const interceptorRejection = getCommandInterceptorHttpRejection(err)\n        const skippedError = interceptorRejection\n          ? String(interceptorRejection.body.error ?? '') || null\n          : isCrudHttpError(err)\n            ? String((err.body as { error?: unknown })?.error ?? '') || null\n            : null\n        logger.warn('staff.timesheets.time-entries.copy-day source copy failed', { err, sourceId: entry.id })\n        skipped.push({\n          id: entry.id,\n          reason: COPY_FAILED_REASON,\n          lockedReportId: null,\n          error: skippedError,\n        })\n      }\n    }\n\n    await guardResult.runAfterSuccess()\n\n    for (const [sourceId, createdId] of copiedIdBySource) {\n      void emitStaffEvent('staff.timesheets.time_entry.copied', {\n        id: createdId,\n        sourceId,\n        tenantId,\n        organizationId,\n        staffMemberId,\n        date: toDay,\n      }, { persistent: true }).catch((err) => {\n        logger.error('staff.timesheets emit time_entry.copied failed', { err, sourceId })\n      })\n    }\n\n    // Screen 1 note 5: these are drafts to correct, so the response carries the\n    // rows themselves rather than a count the UI would have to go and re-fetch.\n    const createdIds = Array.from(copiedIdBySource.values())\n    const createdRows = createdIds.length\n      ? await findWithDecryption(\n          em.fork(),\n          StaffTimeEntry,\n          { id: { $in: createdIds }, tenantId, organizationId, deletedAt: null },\n          {},\n          scopeCtx,\n        )\n      : []\n    const createdRowById = new Map(createdRows.map((row) => [row.id, row]))\n\n    const created = Array.from(copiedIdBySource.entries()).flatMap(([sourceId, createdId]) => {\n      const row = createdRowById.get(createdId)\n      if (!row) return []\n      return [\n        {\n          id: row.id,\n          sourceId,\n          date: dayKey(row.date),\n          durationMinutes: row.durationMinutes,\n          roundedMinutes: row.roundedMinutes ?? null,\n          timeProjectId: row.timeProjectId ?? null,\n          taskId: row.taskId ?? null,\n          isBillable: row.isBillable,\n          description: row.notes ?? null,\n          tagIds: tagIdsByEntry.get(sourceId) ?? [],\n        },\n      ]\n    })\n\n    return session.respond(200, {\n      ok: true,\n      fromDate: fromDay,\n      toDate: toDay,\n      staffMemberId,\n      copied: created.length,\n      created,\n      skipped,\n    })\n  } catch (err) {\n    if (isCrudHttpError(err)) {\n      return NextResponse.json(err.body, { status: err.status })\n    }\n    const { translate } = await resolveTranslations()\n    if (err instanceof z.ZodError) {\n      return NextResponse.json(\n        { error: translate('staff.errors.invalid_request', 'Invalid request'), details: err.issues },\n        { status: 400 },\n      )\n    }\n    logger.error('staff.timesheets.time-entries.copy-day failed', { err })\n    return NextResponse.json(\n      { error: translate('staff.errors.internal', 'Internal server error') },\n      { status: 500 },\n    )\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Staff',\n  summary: 'Copy a day of time entries',\n  methods: {\n    POST: {\n      summary: 'Copy a day of time entries',\n      description:\n        'US-D6, screen 1 note 5. Copies every unlocked time entry the caller owns on `fromDate` onto `toDate` as editable drafts, and returns the created rows so they can be reviewed and corrected. Which day is \"the previous working day\" is the caller decision \u2014 this endpoint takes explicit dates and applies no weekend or holiday rule. A source entry locked into a closed report is skipped and reported in `skipped[]` with the shared `time_entry_locked` code (nothing is written to it, so the batch is not failed). The request is refused with 409 `copy_day_target_not_empty` when the target day already holds entries, so a repeated call cannot silently double a day; pass `allowDuplicates: true` to add the copies anyway. `staffMemberId` targets another member and requires `staff.timesheets.manage_all`. Every copy is written through the duplicate command and therefore through the create command, so ownership, project access, the billable and currency defaults and the tenant rounding rule apply to it exactly as they do to a hand-made entry.',\n      requestBody: {\n        contentType: 'application/json',\n        schema: copyDayRequestSchema,\n      },\n      responses: [\n        { status: 200, description: 'Copies created, with the skipped sources reported', schema: copyDayResponseSchema },\n      ],\n      errors: [\n        { status: 400, description: 'Invalid body, missing scope, or fromDate equal to toDate' },\n        { status: 401, description: 'Unauthorized' },\n        { status: 403, description: 'Missing staff.timesheets.manage_own, no linked staff member, or another member day without staff.timesheets.manage_all' },\n        {\n          status: 409,\n          description: 'The target day already has entries; nothing was copied',\n          schema: targetNotEmptySchema,\n        },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AA+CA,SAAS,oBAAoB;AAC7B,SAAS,4BAA4B;AACrC,SAAS,SAAS;AAElB,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AACnD,SAAS,yCAAyC;AAClD,SAAS,eAAe,WAAW,uBAAuB;AAC1D,SAAS,8BAA8B;AACvC,SAAS,2BAA2B;AACpC,SAAS,oBAAoB;AAC7B,SAAS,0BAA0B;AACnC,SAAS,oBAAoB;AAC7B,SAAS,sBAAsB;AAE/B,SAAS,0CAA0C;AAGnD,SAAS,gBAAgB,yBAAyB;AAClD,SAAS,0BAA0B,8BAA8B;AACjE,SAAS,4BAAgD;AACzD,SAAS,gCAAgC;AACzC,SAAS,0CAA0C;AACnD,SAAS,gCAAgC;AAEzC,MAAM,SAAS,aAAa,OAAO,EAAE,MAAM,EAAE,WAAW,uCAAuC,CAAC;AAEhG,MAAM,qBAAqB;AAC3B,MAAM,qBAAqB;AAC3B,MAAM,gBAAgB,mCAAmC;AAGlD,MAAM,iCAAiC;AAG9C,MAAM,qBAAqB;AAEpB,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,kBAAkB,EAAE;AACnE;AAEA,MAAM,uBAAuB,EAAE,OAAO;AAAA,EACpC,UAAU,EAAE,OAAO,KAAK;AAAA,EACxB,QAAQ,EAAE,OAAO,KAAK;AAAA;AAAA,EAEtB,eAAe,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC1C,iBAAiB,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,KAAK;AACvD,CAAC;AAED,MAAM,oBAAoB,EAAE,OAAO;AAAA,EACjC,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,UAAU,EAAE,OAAO,EAAE,KAAK;AAAA,EAC1B,MAAM,EAAE,OAAO;AAAA,EACf,iBAAiB,EAAE,OAAO;AAAA,EAC1B,gBAAgB,EAAE,OAAO,EAAE,SAAS;AAAA,EACpC,eAAe,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC1C,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACnC,YAAY,EAAE,QAAQ;AAAA,EACtB,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,EACjC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC;AACnC,CAAC;AAED,MAAM,qBAAqB,EAAE,OAAO;AAAA,EAClC,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,QAAQ,EAAE,OAAO;AAAA,EACjB,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC3C,OAAO,EAAE,OAAO,EAAE,SAAS;AAC7B,CAAC;AAED,MAAM,wBAAwB,EAAE,OAAO;AAAA,EACrC,IAAI,EAAE,QAAQ,IAAI;AAAA,EAClB,UAAU,EAAE,OAAO;AAAA,EACnB,QAAQ,EAAE,OAAO;AAAA,EACjB,eAAe,EAAE,OAAO,EAAE,KAAK;AAAA,EAC/B,QAAQ,EAAE,OAAO;AAAA,EACjB,SAAS,EAAE,MAAM,iBAAiB;AAAA,EAClC,SAAS,EAAE,MAAM,kBAAkB;AACrC,CAAC;AAED,MAAM,uBAAuB,EAAE,OAAO;AAAA,EACpC,MAAM,EAAE,QAAQ,8BAA8B;AAAA,EAC9C,OAAO,EAAE,OAAO;AAAA,EAChB,QAAQ,EAAE,OAAO;AAAA,EACjB,oBAAoB,EAAE,OAAO;AAAA,EAC7B,kBAAkB,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC;AAC7C,CAAC;AAeD,SAAS,OAAO,OAAiD;AAC/D,MAAI,CAAC,MAAO,QAAO;AACnB,QAAM,OAAO,iBAAiB,OAAO,QAAQ,IAAI,KAAK,KAAK;AAC3D,SAAO,OAAO,MAAM,KAAK,QAAQ,CAAC,IAAI,OAAO,KAAK,IAAI,KAAK,YAAY,EAAE,MAAM,GAAG,EAAE;AACtF;AAEA,eAAe,2BAA2B,WAA0B,UAA0C;AAC5G,MAAI;AACF,UAAM,gBAAgB,UAAU,QAAQ,qBAAqB;AAC7D,UAAM,WAAW,MAAM,yBAAyB,eAAe,EAAE,SAAS,CAAC;AAC3E,WAAO,SAAS,OAAO;AAAA,EACzB,QAAQ;AAEN,WAAO;AAAA,EACT;AACF;AAEA,eAAe,kBACb,WACA,QACA,UACA,gBACA,iBACwB;AACxB,QAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,SAAO,qBAAqB;AAAA,IAC1B,IAAI,GAAG,KAAK;AAAA,IACZ;AAAA,IACA;AAAA,IACA;AAAA,IACA,cAAc;AAAA,IACd,qBAAqB,MAAM,2BAA2B,WAAW,QAAQ;AAAA,EAC3E,CAAC;AACH;AAQA,SAAS,mBACP,OACA,QACS;AACT,MAAI,OAAO,aAAc,QAAO;AAChC,QAAM,YAAY,MAAM,iBAAiB;AACzC,MAAI,UAAW,QAAO,OAAO,WAAW,SAAS,SAAS;AAC1D,SAAO,OAAO,kBAAkB,QAAQ,OAAO,kBAAkB,MAAM;AACzE;AAEA,eAAe,kBACb,IACA,UACA,UACA,gBACgC;AAChC,QAAM,YAAY,oBAAI,IAAsB;AAC5C,MAAI,SAAS,WAAW,EAAG,QAAO;AAClC,QAAM,cAAc,MAAM,GAAG,KAAK,mBAAmB;AAAA,IACnD,aAAa,EAAE,KAAK,SAAS;AAAA,IAC7B;AAAA,IACA;AAAA,EACF,CAAC;AACD,aAAW,cAAc,aAAa;AACpC,UAAM,OAAO,UAAU,IAAI,WAAW,WAAW,KAAK,CAAC;AACvD,SAAK,KAAK,WAAW,KAAK;AAC1B,cAAU,IAAI,WAAW,aAAa,IAAI;AAAA,EAC5C;AACA,SAAO;AACT;AAEA,eAAsB,KAAK,KAAc;AACvC,MAAI;AACF,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,QAAI,CAAC,MAAM;AACT,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,6BAA6B,cAAc,EAAE,CAAC;AAAA,IAChG;AAEA,UAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AACxF,UAAM,WAAW,OAAO,YAAY,KAAK,YAAY;AACrD,UAAM,iBAAiB,kCAAkC,OAAO,IAAI,KAAK;AACzE,QAAI,CAAC,YAAY,CAAC,gBAAgB;AAChC,YAAM,IAAI,cAAc,KAAK;AAAA,QAC3B,OAAO,UAAU,6BAA6B,uCAAuC;AAAA,MACvF,CAAC;AAAA,IACH;AAEA,UAAM,UAAU,KAAK,OAAO;AAM5B,UAAM,YAAY,MAAM,qBAAqB,WAAW,SAAS,CAAC,kBAAkB,GAAG,EAAE,UAAU,eAAe,CAAC;AACnH,QAAI,CAAC,UAAU,SAAS;AACtB,YAAM,UAAU,UAAU,0BAA0B,WAAW,CAAC;AAAA,IAClE;AACA,UAAM,kBAAkB,UAAU;AAClC,UAAM,gBACJ,MAAM,qBAAqB,WAAW,SAAS,CAAC,kBAAkB,GAAG,EAAE,UAAU,eAAe,CAAC,GACjG;AAEF,UAAM,eAAe,MAAM,yBAAyB;AAAA,MAClD,SAAS;AAAA,MACT,QAAQ;AAAA,MACR,OAAO,EAAE,WAAW,QAAQ,SAAS,UAAU,gBAAgB,cAAc,gBAAgB;AAAA,MAC7F,MAAM,MAAM,aAAsC,KAAK,CAAC,CAAC;AAAA,IAC3D,CAAC;AACD,QAAI,CAAC,aAAa,GAAI,QAAO,aAAa;AAC1C,UAAM,EAAE,QAAQ,IAAI;AAEpB,UAAM,SAAS,qBAAqB,MAAM,QAAQ,IAAI;AACtD,UAAM,UAAU,OAAO,OAAO,QAAQ;AACtC,UAAM,QAAQ,OAAO,OAAO,MAAM;AAClC,QAAI,YAAY,OAAO;AAGrB,YAAM,IAAI,cAAc,KAAK;AAAA,QAC3B,OAAO;AAAA,UACL;AAAA,UACA;AAAA,QACF;AAAA,MACF,CAAC;AAAA,IACH;AAEA,UAAM,SAAS,MAAM,kBAAkB,WAAW,WAAW,MAAM,UAAU,gBAAgB,eAAe;AAK5G,QAAI,OAAO,iBAAiB,OAAO,kBAAkB,OAAO,iBAAiB,CAAC,cAAc;AAC1F,YAAM;AAAA,QACJ,UAAU,oCAAoC,4CAA4C;AAAA,MAC5F;AAAA,IACF;AACA,UAAM,gBAAgB,OAAO,iBAAiB,OAAO;AACrD,QAAI,CAAC,eAAe;AAClB,YAAM,IAAI,cAAc,KAAK;AAAA,QAC3B,OAAO,UAAU,yCAAyC,yCAAyC;AAAA,MACrG,CAAC;AAAA,IACH;AAEA,UAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC3D,UAAM,WAAW,EAAE,UAAU,eAAe;AAE5C,UAAM,WACJ,MAAM;AAAA,MACJ;AAAA,MACA;AAAA,MACA,EAAE,UAAU,gBAAgB,eAAe,MAAM,OAAO,UAAU,WAAW,KAAK;AAAA,MAClF,CAAC;AAAA,MACD;AAAA,IACF,GACA,OAAO,CAAC,UAAU,mBAAmB,OAAO,MAAM,CAAC;AAErD,QAAI,QAAQ,WAAW,GAAG;AACxB,aAAO,QAAQ,QAAQ,KAAK;AAAA,QAC1B,IAAI;AAAA,QACJ,UAAU;AAAA,QACV,QAAQ;AAAA,QACR;AAAA,QACA,QAAQ;AAAA,QACR,SAAS,CAAC;AAAA,QACV,SAAS,CAAC;AAAA,MACZ,CAAC;AAAA,IACH;AAEA,QAAI,CAAC,OAAO,iBAAiB;AAC3B,YAAM,WAAW,MAAM,GAAG;AAAA,QACxB;AAAA,QACA,EAAE,UAAU,gBAAgB,eAAe,MAAM,OAAO,QAAQ,WAAW,KAAK;AAAA,QAChF,EAAE,QAAQ,CAAC,IAAI,EAAE;AAAA,MACnB;AACA,UAAI,SAAS,SAAS,GAAG;AACvB,cAAM,IAAI,cAAc,KAAK;AAAA,UAC3B,MAAM;AAAA,UACN,OAAO;AAAA,YACL;AAAA,YACA;AAAA,UACF;AAAA,UACA,QAAQ;AAAA,UACR,oBAAoB,SAAS;AAAA,UAC7B,kBAAkB,SAAS,IAAI,CAAC,UAAU,MAAM,EAAE;AAAA,QACpD,CAAC;AAAA,MACH;AAAA,IACF;AAEA,UAAM,cAAc,MAAM,uBAAuB;AAAA,MAC/C;AAAA,MACA;AAAA,MACA,MAAM;AAAA,QACJ,QAAQ;AAAA,QACR;AAAA,QACA;AAAA,QACA,cAAc;AAAA,MAChB;AAAA,MACA,OAAO;AAAA,QACL,cAAc;AAAA,QACd,YAAY;AAAA,QACZ,WAAW;AAAA,QACX,iBAAiB;AAAA,MACnB;AAAA,IACF,CAAC;AACD,QAAI,CAAC,YAAY,GAAI,QAAO,YAAY;AAExC,UAAM,UAA2B,CAAC;AAClC,UAAM,WAA6B,CAAC;AACpC,eAAW,SAAS,SAAS;AAC3B,UAAI,MAAM,gBAAgB;AACxB,gBAAQ,KAAK;AAAA,UACX,IAAI,MAAM;AAAA,UACV,QAAQ;AAAA,UACR,gBAAgB,MAAM;AAAA,UACtB,OAAO;AAAA,QACT,CAAC;AACD;AAAA,MACF;AACA,eAAS,KAAK,KAAK;AAAA,IACrB;AAMA,UAAM,gBAAgB,MAAM,kBAAkB,IAAI,SAAS,IAAI,CAAC,UAAU,MAAM,EAAE,GAAG,UAAU,cAAc;AAE7G,UAAM,MAA6B;AAAA,MACjC;AAAA,MACA;AAAA,MACA,mBAAmB;AAAA,MACnB,wBAAwB,kCAAkC,OAAO,IAAI,KAAK;AAAA,MAC1E,iBAAiB,OAAO,cAAc,KAAK,QAAQ,CAAC,KAAK,KAAK,IAAI;AAAA,MAClE,SAAS;AAAA,IACX;AACA,UAAM,aAAa,UAAU,QAAQ,YAAY;AAEjD,UAAM,mBAAmB,oBAAI,IAAoB;AACjD,eAAW,SAAS,UAAU;AAC5B,UAAI;AACF,cAAM,EAAE,OAAO,IAAI,MAAM,WAAW;AAAA,UAClC,yBAAyB;AAAA,UACzB;AAAA,YACE,OAAO;AAAA,cACL,IAAI,MAAM;AAAA,cACV,MAAM,OAAO;AAAA,cACb,QAAQ,cAAc,IAAI,MAAM,EAAE,KAAK,CAAC;AAAA,YAC1C;AAAA,YACA;AAAA,UACF;AAAA,QACF;AACA,YAAI,QAAQ,YAAa,kBAAiB,IAAI,MAAM,IAAI,OAAO,WAAW;AAAA,MAC5E,SAAS,KAAK;AAYZ,cAAM,uBAAuB,mCAAmC,GAAG;AACnE,cAAM,eAAe,uBACjB,OAAO,qBAAqB,KAAK,SAAS,EAAE,KAAK,OACjD,gBAAgB,GAAG,IACjB,OAAQ,IAAI,MAA8B,SAAS,EAAE,KAAK,OAC1D;AACN,eAAO,KAAK,6DAA6D,EAAE,KAAK,UAAU,MAAM,GAAG,CAAC;AACpG,gBAAQ,KAAK;AAAA,UACX,IAAI,MAAM;AAAA,UACV,QAAQ;AAAA,UACR,gBAAgB;AAAA,UAChB,OAAO;AAAA,QACT,CAAC;AAAA,MACH;AAAA,IACF;AAEA,UAAM,YAAY,gBAAgB;AAElC,eAAW,CAAC,UAAU,SAAS,KAAK,kBAAkB;AACpD,WAAK,eAAe,sCAAsC;AAAA,QACxD,IAAI;AAAA,QACJ;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA,MAAM;AAAA,MACR,GAAG,EAAE,YAAY,KAAK,CAAC,EAAE,MAAM,CAAC,QAAQ;AACtC,eAAO,MAAM,kDAAkD,EAAE,KAAK,SAAS,CAAC;AAAA,MAClF,CAAC;AAAA,IACH;AAIA,UAAM,aAAa,MAAM,KAAK,iBAAiB,OAAO,CAAC;AACvD,UAAM,cAAc,WAAW,SAC3B,MAAM;AAAA,MACJ,GAAG,KAAK;AAAA,MACR;AAAA,MACA,EAAE,IAAI,EAAE,KAAK,WAAW,GAAG,UAAU,gBAAgB,WAAW,KAAK;AAAA,MACrE,CAAC;AAAA,MACD;AAAA,IACF,IACA,CAAC;AACL,UAAM,iBAAiB,IAAI,IAAI,YAAY,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC;AAEtE,UAAM,UAAU,MAAM,KAAK,iBAAiB,QAAQ,CAAC,EAAE,QAAQ,CAAC,CAAC,UAAU,SAAS,MAAM;AACxF,YAAM,MAAM,eAAe,IAAI,SAAS;AACxC,UAAI,CAAC,IAAK,QAAO,CAAC;AAClB,aAAO;AAAA,QACL;AAAA,UACE,IAAI,IAAI;AAAA,UACR;AAAA,UACA,MAAM,OAAO,IAAI,IAAI;AAAA,UACrB,iBAAiB,IAAI;AAAA,UACrB,gBAAgB,IAAI,kBAAkB;AAAA,UACtC,eAAe,IAAI,iBAAiB;AAAA,UACpC,QAAQ,IAAI,UAAU;AAAA,UACtB,YAAY,IAAI;AAAA,UAChB,aAAa,IAAI,SAAS;AAAA,UAC1B,QAAQ,cAAc,IAAI,QAAQ,KAAK,CAAC;AAAA,QAC1C;AAAA,MACF;AAAA,IACF,CAAC;AAED,WAAO,QAAQ,QAAQ,KAAK;AAAA,MAC1B,IAAI;AAAA,MACJ,UAAU;AAAA,MACV,QAAQ;AAAA,MACR;AAAA,MACA,QAAQ,QAAQ;AAAA,MAChB;AAAA,MACA;AAAA,IACF,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,GAAG;AACxB,aAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,IAC3D;AACA,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,QAAI,eAAe,EAAE,UAAU;AAC7B,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,UAAU,gCAAgC,iBAAiB,GAAG,SAAS,IAAI,OAAO;AAAA,QAC3F,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AACA,WAAO,MAAM,iDAAiD,EAAE,IAAI,CAAC;AACrE,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,UAAU,yBAAyB,uBAAuB,EAAE;AAAA,MACrE,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aACE;AAAA,MACF,aAAa;AAAA,QACX,aAAa;AAAA,QACb,QAAQ;AAAA,MACV;AAAA,MACA,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,qDAAqD,QAAQ,sBAAsB;AAAA,MACjH;AAAA,MACA,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,2DAA2D;AAAA,QACvF,EAAE,QAAQ,KAAK,aAAa,eAAe;AAAA,QAC3C,EAAE,QAAQ,KAAK,aAAa,yHAAyH;AAAA,QACrJ;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/staff/api/timesheets/time-entries/overlaps/route.js

@@ -3,6 +3,7 @@ import { z } from "zod";
 import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
 import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
 import { resolveOrganizationScopeForRequest } from "@open-mercato/core/modules/directory/utils/organizationScope";
+import { resolveSingleOrganizationIdOrDeny } from "@open-mercato/core/modules/directory/utils/organizationScopeFilter";
 import { CrudHttpError, isCrudHttpError } from "@open-mercato/shared/lib/crud/errors";
 import { resolveTranslations } from "@open-mercato/shared/lib/i18n/server";
 import { findWithDecryption } from "@open-mercato/shared/lib/encryption/find";
@@ -177,7 +178,7 @@ async function GET(req) {
     }
     const orgScope = await resolveOrganizationScopeForRequest({ container, auth, request: req });
     const tenantId = orgScope?.tenantId ?? auth.tenantId ?? null;
-    const organizationId = orgScope?.selectedId ?? auth.orgId ?? null;
+    const organizationId = resolveSingleOrganizationIdOrDeny(orgScope, auth) ?? null;
     if (!tenantId || !organizationId) {
       throw new CrudHttpError(400, {
         error: translate("staff.errors.missingScope", "Missing tenant or organization scope.")

package/dist/modules/staff/api/timesheets/time-entries/overlaps/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../../src/modules/staff/api/timesheets/time-entries/overlaps/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { EntityManager, FilterQuery } from '@mikro-orm/postgresql'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { CrudHttpError, isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { authorizeFeatures } from '@open-mercato/shared/security/featurePolicy'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport type { ModuleConfigService } from '@open-mercato/core/modules/configs/lib/module-config-service'\nimport { StaffTimeEntry, StaffTimeProject, StaffTimeTask } from '../../../../data/entities'\nimport { deriveInterval, formatClock, parseClock } from '../../../../lib/time-tracking/interval'\nimport {\n  evaluateOverlapPolicies,\n  findOverlaps,\n  type OverlapSpan,\n} from '../../../../lib/time-tracking/overlap'\nimport { resolveFeatureAccess } from '../../../../lib/time-tracking/featureAccess'\nimport {\n  MANAGE_PROJECTS_FEATURE,\n  assertProjectAccess,\n  resolveProjectAccess,\n} from '../../../../lib/time-tracking/access'\nimport { readTimeTrackingSettings } from '../../../../lib/time-tracking/settings'\nimport {\n  readSearchParamsRecord,\n  runTimesheetInterceptors,\n} from '../../_shared/withTimesheetInterceptors'\n\nconst logger = createLogger('staff').child({ component: 'api/timesheets/time-entries/overlaps' })\n\nconst VIEW_FEATURE = 'staff.timesheets.view'\nconst MANAGE_ALL_FEATURE = 'staff.timesheets.manage_all'\n\n/**\n * Upper bound for the day-window scan. One staff member can only hold a handful\n * of entries across three days, so this is a guard against pathological data\n * rather than a paging contract.\n */\nconst MAX_WINDOW_ROWS = 500\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: [VIEW_FEATURE] },\n}\n\nconst DATE_PATTERN = /^\\d{4}-\\d{2}-\\d{2}$/\nconst DATE_PREFIX_PATTERN = /^(\\d{4}-\\d{2}-\\d{2})/\n\nconst querySchema = z.object({\n  date: z.string().regex(DATE_PATTERN),\n  startedAt: z.string().optional(),\n  endedAt: z.string().optional(),\n  durationMinutes: z.coerce.number().int().min(0).max(1440).optional(),\n  excludeId: z.string().uuid().optional(),\n  staffMemberId: z.string().uuid().optional(),\n})\n\nconst overlapItemSchema = z.object({\n  id: z.string().uuid(),\n  staff_member_id: z.string().uuid(),\n  date: z.string(),\n  started_at: z.string(),\n  ended_at: z.string(),\n  duration_minutes: z.number(),\n  overlap_minutes: z.number(),\n  crosses_midnight: z.boolean(),\n  task_id: z.string().uuid().nullable(),\n  task_title: z.string().nullable(),\n  time_project_id: z.string().uuid().nullable(),\n  project_name: z.string().nullable(),\n  notes: z.string().nullable(),\n})\n\nconst overlapsResponseSchema = z.object({\n  items: z.array(overlapItemSchema),\n  total: z.number(),\n  /**\n   * EP-38. `warn` is what this route has always meant; the field exists so a\n   * contributed policy that escalates to `block` reaches the form, and so a\n   * caller can tell \"the tenant turned the warning off\" from \"nothing overlaps\".\n   */\n  decision: z.enum(['allow', 'warn', 'block']),\n})\n\ntype OverlapItem = z.infer<typeof overlapItemSchema>\n\ntype RbacServiceLike = {\n  getGrantedFeatures?: (\n    userId: string,\n    options: { tenantId: string | null; organizationId: string | null },\n  ) => Promise<string[]>\n}\n\ntype EntryRow = Pick<\n  StaffTimeEntry,\n  | 'id'\n  | 'staffMemberId'\n  | 'durationMinutes'\n  | 'startedAt'\n  | 'endedAt'\n  | 'notes'\n  | 'taskId'\n  | 'timeProjectId'\n> & { date: unknown }\n\nconst EMPTY_OVERLAP_RESULT = { items: [], total: 0, decision: 'allow' as const }\n\nfunction pad(value: number): string {\n  return String(value).padStart(2, '0')\n}\n\nfunction formatLocalDate(value: Date): string {\n  return `${value.getFullYear()}-${pad(value.getMonth() + 1)}-${pad(value.getDate())}`\n}\n\nfunction shiftDate(date: string, days: number): string {\n  const [year, month, day] = date.split('-').map(Number)\n  const shifted = new Date(Date.UTC(year, month - 1, day + days))\n  return `${shifted.getUTCFullYear()}-${pad(shifted.getUTCMonth() + 1)}-${pad(shifted.getUTCDate())}`\n}\n\nfunction toDayString(value: unknown): string | null {\n  if (typeof value === 'string') {\n    const match = DATE_PREFIX_PATTERN.exec(value.trim())\n    return match ? match[1] : null\n  }\n  if (value instanceof Date && !Number.isNaN(value.getTime())) return formatLocalDate(value)\n  return null\n}\n\n/**\n * Accepts either a wall clock (`11:45`, what the entry form sends) or a full\n * timestamp (what the timer endpoints persist), and always answers in the\n * calendar the rest of the module reads dates in.\n */\nfunction toClock(value: unknown): string | null {\n  if (value instanceof Date) {\n    if (Number.isNaN(value.getTime())) return null\n    return formatClock(value.getHours() * 60 + value.getMinutes())\n  }\n  if (typeof value !== 'string') return null\n  const trimmed = value.trim()\n  if (!trimmed) return null\n  const clock = parseClock(trimmed)\n  if (clock !== null) return formatClock(clock)\n  const parsed = new Date(trimmed)\n  if (Number.isNaN(parsed.getTime())) return null\n  return formatClock(parsed.getHours() * 60 + parsed.getMinutes())\n}\n\nfunction toRowSpan(row: EntryRow): OverlapSpan | null {\n  const start = toClock(row.startedAt)\n  if (!start) return null\n  const date =\n    (row.startedAt instanceof Date && !Number.isNaN(row.startedAt.getTime())\n      ? formatLocalDate(row.startedAt)\n      : null) ?? toDayString(row.date)\n  if (!date) return null\n  return {\n    id: row.id,\n    date,\n    start,\n    end: toClock(row.endedAt),\n    durationMinutes: typeof row.durationMinutes === 'number' ? row.durationMinutes : null,\n  }\n}\n\nfunction readQuery(params: URLSearchParams): z.infer<typeof querySchema> {\n  const raw: Record<string, string> = {}\n  for (const key of ['date', 'startedAt', 'endedAt', 'durationMinutes', 'excludeId', 'staffMemberId']) {\n    const value = params.get(key)\n    if (value !== null && value.trim().length > 0) raw[key] = value.trim()\n  }\n  return querySchema.parse(raw)\n}\n\nasync function resolveGrantedFeatures(\n  container: Awaited<ReturnType<typeof createRequestContainer>>,\n  userId: string,\n  scope: { tenantId: string; organizationId: string },\n): Promise<string[]> {\n  try {\n    const rbac = container.resolve('rbacService') as RbacServiceLike | undefined\n    if (!rbac?.getGrantedFeatures) return []\n    return (await rbac.getGrantedFeatures(userId, scope)) ?? []\n  } catch {\n    return []\n  }\n}\n\nasync function resolveOverlapSettings(\n  container: Awaited<ReturnType<typeof createRequestContainer>>,\n  tenantId: string,\n): Promise<{ assignmentGraceDays: number | null; warningsEnabled: boolean }> {\n  try {\n    const configService = container.resolve('moduleConfigService') as ModuleConfigService\n    const settings = await readTimeTrackingSettings(configService, { tenantId })\n    return {\n      assignmentGraceDays: settings.access.assignmentGraceDays,\n      warningsEnabled: settings.warnings.overlap,\n    }\n  } catch {\n    // The same fail-safe the grace window uses: an unreadable settings row keeps\n    // the advisory warning on, which is what the module default says.\n    return { assignmentGraceDays: null, warningsEnabled: true }\n  }\n}\n\nasync function loadLabels(\n  em: EntityManager,\n  scope: { tenantId: string; organizationId: string },\n  taskIds: string[],\n  projectIds: string[],\n): Promise<{ tasks: Map<string, string>; projects: Map<string, string> }> {\n  const tasks = new Map<string, string>()\n  const projects = new Map<string, string>()\n  if (taskIds.length) {\n    const rows = await findWithDecryption(\n      em,\n      StaffTimeTask,\n      { id: { $in: taskIds }, ...scope, deletedAt: null },\n      {},\n      scope,\n    )\n    for (const row of rows) tasks.set(row.id, row.title)\n  }\n  if (projectIds.length) {\n    const rows = await findWithDecryption(\n      em,\n      StaffTimeProject,\n      { id: { $in: projectIds }, ...scope, deletedAt: null },\n      {},\n      scope,\n    )\n    for (const row of rows) projects.set(row.id, row.name)\n  }\n  return { tasks, projects }\n}\n\n/**\n * GET /api/staff/timesheets/time-entries/overlaps\n *\n * Advisory-only overlap probe for the time entry form (mockup screen 9). It is\n * read-only and never blocks a save: overlapping time is legitimate in\n * consulting work (a client call while taking notes), so the UI renders the\n * result as a warning with a suggested fix, never as a validation error. Any\n * failure here MUST degrade to \"no warning\" rather than break the form \u2014 the\n * route therefore answers `{ items: [], total: 0 }` for unusable input, a\n * caller without a linked staff member, or a lookup that yields nothing, and\n * the client is expected to ignore non-200 responses.\n *\n * Scoping: rows are always filtered by `tenant_id` + `organization_id` and\n * intersected with `resolveProjectAccess`, so the endpoint cannot be used to\n * probe entries on projects the caller cannot see. Asking about another staff\n * member requires `staff.timesheets.manage_all`; without it the request is\n * silently scoped back to the caller's own member instead of erroring.\n *\n * Query shape: the form calls this on blur, so the lookup reads a three-day\n * window (`date - 1 .. date + 1`) against the\n * `(organization_id, staff_member_id, date, started_at)` index. The adjacent\n * days cover midnight-crossing spans in both directions \u2014 a candidate that ends\n * after midnight, and a stored entry that started the previous evening \u2014 without\n * ever scanning history.\n */\nexport async function GET(req: Request) {\n  try {\n    const container = await createRequestContainer()\n    const auth = await getAuthFromRequest(req)\n    const { translate } = await resolveTranslations()\n    if (!auth) {\n      throw new CrudHttpError(401, { error: translate('staff.errors.unauthorized', 'Unauthorized') })\n    }\n\n    const orgScope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n    const tenantId = orgScope?.tenantId ?? auth.tenantId ?? null\n    const organizationId = orgScope?.selectedId ?? auth.orgId ?? null\n    if (!tenantId || !organizationId) {\n      throw new CrudHttpError(400, {\n        error: translate('staff.errors.missingScope', 'Missing tenant or organization scope.'),\n      })\n    }\n\n    const interceptors = await runTimesheetInterceptors({\n      request: req,\n      method: 'GET',\n      scope: { container, userId: auth.sub, tenantId, organizationId },\n      query: readSearchParamsRecord(req.url),\n    })\n    if (!interceptors.ok) return interceptors.response\n    const { session } = interceptors\n\n    const query = readQuery(session.searchParams)\n    const candidate: OverlapSpan = {\n      date: query.date,\n      start: toClock(query.startedAt),\n      end: toClock(query.endedAt),\n      durationMinutes: query.durationMinutes ?? null,\n    }\n    const derived = deriveInterval({\n      start: candidate.start,\n      end: candidate.end,\n      durationMinutes: candidate.durationMinutes,\n    })\n    if (!derived.start || derived.durationMinutes === null || derived.durationMinutes <= 0) {\n      return session.respond(200, EMPTY_OVERLAP_RESULT)\n    }\n\n    const scope = { tenantId, organizationId }\n    const em = (container.resolve('em') as EntityManager).fork()\n    const userId = typeof auth.sub === 'string' ? auth.sub : null\n    // Both questions go to the service. Asking one and inferring the other from a\n    // grant array is how the two could disagree when the read failed.\n    const manageAll = await resolveFeatureAccess(container, userId, [MANAGE_ALL_FEATURE], scope)\n    const manageProjects = await resolveFeatureAccess(container, userId, [MANAGE_PROJECTS_FEATURE], scope)\n    const canManageAll = manageAll.allowed\n\n    const overlapSettings = await resolveOverlapSettings(container, tenantId)\n    const access = await resolveProjectAccess({\n      em,\n      userId,\n      tenantId,\n      organizationId,\n      canManageAll: manageProjects.allowed,\n      userFeatures: manageAll.grantedFeatures,\n      assignmentGraceDays: overlapSettings.assignmentGraceDays,\n    })\n\n    const staffMemberId =\n      canManageAll && query.staffMemberId ? query.staffMemberId : access.staffMemberId\n    if (!staffMemberId) return session.respond(200, EMPTY_OVERLAP_RESULT)\n    const isSelfScope = staffMemberId === access.staffMemberId\n\n    const where = {\n      tenantId,\n      organizationId,\n      staffMemberId,\n      deletedAt: null,\n      date: { $gte: shiftDate(query.date, -1), $lte: shiftDate(query.date, 1) },\n    } as unknown as FilterQuery<StaffTimeEntry>\n    const rows = (await findWithDecryption(\n      em,\n      StaffTimeEntry,\n      where,\n      { orderBy: { startedAt: 'asc' }, limit: MAX_WINDOW_ROWS },\n      scope,\n    )) as unknown as EntryRow[]\n\n    const visible = rows.filter(\n      (row) =>\n        assertProjectAccess(access, row.timeProjectId ?? null) ||\n        (isSelfScope && !row.timeProjectId),\n    )\n    const byId = new Map(visible.map((row) => [row.id, row]))\n    const spans = visible\n      .map((row) => toRowSpan(row))\n      .filter((span): span is OverlapSpan => span !== null)\n\n    const candidateSpan: OverlapSpan = {\n      date: query.date,\n      start: derived.start,\n      end: derived.end,\n      durationMinutes: derived.durationMinutes,\n    }\n    const overlaps = findOverlaps(\n      candidateSpan,\n      spans,\n      query.excludeId ? { excludeId: query.excludeId } : undefined,\n    )\n    const decision = evaluateOverlapPolicies(overlaps, {\n      tenantId,\n      organizationId,\n      candidate: candidateSpan,\n      warningsEnabled: overlapSettings.warningsEnabled,\n      staffMemberId,\n      excludeId: query.excludeId ?? null,\n    })\n    // The item list is unchanged by the policy: this endpoint answers \"what\n    // intersects\", and `decision` answers \"and what should happen\". Collapsing\n    // the list when a tenant turns the warning off would make the two\n    // indistinguishable from \"nothing intersects\" for every other caller.\n    if (!overlaps.length) return session.respond(200, { ...EMPTY_OVERLAP_RESULT, decision })\n\n    const taskIds = new Set<string>()\n    const projectIds = new Set<string>()\n    for (const overlap of overlaps) {\n      const row = overlap.id ? byId.get(overlap.id) : undefined\n      if (row?.taskId) taskIds.add(row.taskId)\n      if (row?.timeProjectId) projectIds.add(row.timeProjectId)\n    }\n    const labels = await loadLabels(em, scope, [...taskIds], [...projectIds])\n\n    const items: OverlapItem[] = []\n    for (const overlap of overlaps) {\n      const row = overlap.id ? byId.get(overlap.id) : undefined\n      if (!row) continue\n      const interval = deriveInterval({\n        start: overlap.entry.start,\n        end: overlap.entry.end,\n        durationMinutes: overlap.entry.durationMinutes,\n      })\n      items.push({\n        id: row.id,\n        staff_member_id: row.staffMemberId,\n        date: overlap.entry.date,\n        started_at: interval.start ?? '',\n        ended_at: interval.end ?? '',\n        duration_minutes: interval.durationMinutes ?? 0,\n        overlap_minutes: overlap.overlapMinutes,\n        crosses_midnight: interval.crossesMidnight,\n        task_id: row.taskId ?? null,\n        task_title: row.taskId ? labels.tasks.get(row.taskId) ?? null : null,\n        time_project_id: row.timeProjectId ?? null,\n        project_name: row.timeProjectId ? labels.projects.get(row.timeProjectId) ?? null : null,\n        notes: row.notes ?? null,\n      })\n    }\n\n    return session.respond(200, { items, total: items.length, decision })\n  } catch (err) {\n    if (isCrudHttpError(err)) {\n      return NextResponse.json(err.body, { status: err.status })\n    }\n    const { translate } = await resolveTranslations()\n    if (err instanceof z.ZodError) {\n      return NextResponse.json(\n        { error: translate('staff.errors.invalid_request', 'Invalid request'), details: err.issues },\n        { status: 400 },\n      )\n    }\n    logger.error('staff.timesheets.time-entries.overlaps GET failed', { err })\n    return NextResponse.json(\n      { error: translate('staff.errors.internal', 'Internal server error') },\n      { status: 500 },\n    )\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Staff',\n  summary: 'Advisory time entry overlap check',\n  methods: {\n    GET: {\n      summary: 'List time entries overlapping a candidate span',\n      description:\n        'Advisory, read-only lookup used by the time entry form to warn about conflicting entries. Overlapping time is allowed, so the result never blocks a save. Returns an empty list when the supplied time information is insufficient. Checking another staff member requires staff.timesheets.manage_all; without it the request is silently scoped to the caller.',\n      query: querySchema,\n      responses: [\n        { status: 200, description: 'Overlapping entries', schema: overlapsResponseSchema },\n        { status: 400, description: 'Invalid query or missing scope', schema: z.object({ error: z.string() }) },\n        { status: 401, description: 'Unauthorized', schema: z.object({ error: z.string() }) },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAElB,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AACnD,SAAS,eAAe,uBAAuB;AAE/C,SAAS,2BAA2B;AACpC,SAAS,0BAA0B;AACnC,SAAS,oBAAoB;AAG7B,SAAS,gBAAgB,kBAAkB,qBAAqB;AAChE,SAAS,gBAAgB,aAAa,kBAAkB;AACxD;AAAA,EACE;AAAA,EACA;AAAA,OAEK;AACP,SAAS,4BAA4B;AACrC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,gCAAgC;AACzC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAEP,MAAM,SAAS,aAAa,OAAO,EAAE,MAAM,EAAE,WAAW,uCAAuC,CAAC;AAEhG,MAAM,eAAe;AACrB,MAAM,qBAAqB;AAO3B,MAAM,kBAAkB;AAEjB,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,YAAY,EAAE;AAC5D;AAEA,MAAM,eAAe;AACrB,MAAM,sBAAsB;AAE5B,MAAM,cAAc,EAAE,OAAO;AAAA,EAC3B,MAAM,EAAE,OAAO,EAAE,MAAM,YAAY;AAAA,EACnC,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,SAAS,EAAE,OAAO,EAAE,SAAS;AAAA,EAC7B,iBAAiB,EAAE,OAAO,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,IAAI,EAAE,SAAS;AAAA,EACnE,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACtC,eAAe,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAC5C,CAAC;AAED,MAAM,oBAAoB,EAAE,OAAO;AAAA,EACjC,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,iBAAiB,EAAE,OAAO,EAAE,KAAK;AAAA,EACjC,MAAM,EAAE,OAAO;AAAA,EACf,YAAY,EAAE,OAAO;AAAA,EACrB,UAAU,EAAE,OAAO;AAAA,EACnB,kBAAkB,EAAE,OAAO;AAAA,EAC3B,iBAAiB,EAAE,OAAO;AAAA,EAC1B,kBAAkB,EAAE,QAAQ;AAAA,EAC5B,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACpC,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,EAChC,iBAAiB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC5C,cAAc,EAAE,OAAO,EAAE,SAAS;AAAA,EAClC,OAAO,EAAE,OAAO,EAAE,SAAS;AAC7B,CAAC;AAED,MAAM,yBAAyB,EAAE,OAAO;AAAA,EACtC,OAAO,EAAE,MAAM,iBAAiB;AAAA,EAChC,OAAO,EAAE,OAAO;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMhB,UAAU,EAAE,KAAK,CAAC,SAAS,QAAQ,OAAO,CAAC;AAC7C,CAAC;AAuBD,MAAM,uBAAuB,EAAE,OAAO,CAAC,GAAG,OAAO,GAAG,UAAU,QAAiB;AAE/E,SAAS,IAAI,OAAuB;AAClC,SAAO,OAAO,KAAK,EAAE,SAAS,GAAG,GAAG;AACtC;AAEA,SAAS,gBAAgB,OAAqB;AAC5C,SAAO,GAAG,MAAM,YAAY,CAAC,IAAI,IAAI,MAAM,SAAS,IAAI,CAAC,CAAC,IAAI,IAAI,MAAM,QAAQ,CAAC,CAAC;AACpF;AAEA,SAAS,UAAU,MAAc,MAAsB;AACrD,QAAM,CAAC,MAAM,OAAO,GAAG,IAAI,KAAK,MAAM,GAAG,EAAE,IAAI,MAAM;AACrD,QAAM,UAAU,IAAI,KAAK,KAAK,IAAI,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC;AAC9D,SAAO,GAAG,QAAQ,eAAe,CAAC,IAAI,IAAI,QAAQ,YAAY,IAAI,CAAC,CAAC,IAAI,IAAI,QAAQ,WAAW,CAAC,CAAC;AACnG;AAEA,SAAS,YAAY,OAA+B;AAClD,MAAI,OAAO,UAAU,UAAU;AAC7B,UAAM,QAAQ,oBAAoB,KAAK,MAAM,KAAK,CAAC;AACnD,WAAO,QAAQ,MAAM,CAAC,IAAI;AAAA,EAC5B;AACA,MAAI,iBAAiB,QAAQ,CAAC,OAAO,MAAM,MAAM,QAAQ,CAAC,EAAG,QAAO,gBAAgB,KAAK;AACzF,SAAO;AACT;AAOA,SAAS,QAAQ,OAA+B;AAC9C,MAAI,iBAAiB,MAAM;AACzB,QAAI,OAAO,MAAM,MAAM,QAAQ,CAAC,EAAG,QAAO;AAC1C,WAAO,YAAY,MAAM,SAAS,IAAI,KAAK,MAAM,WAAW,CAAC;AAAA,EAC/D;AACA,MAAI,OAAO,UAAU,SAAU,QAAO;AACtC,QAAM,UAAU,MAAM,KAAK;AAC3B,MAAI,CAAC,QAAS,QAAO;AACrB,QAAM,QAAQ,WAAW,OAAO;AAChC,MAAI,UAAU,KAAM,QAAO,YAAY,KAAK;AAC5C,QAAM,SAAS,IAAI,KAAK,OAAO;AAC/B,MAAI,OAAO,MAAM,OAAO,QAAQ,CAAC,EAAG,QAAO;AAC3C,SAAO,YAAY,OAAO,SAAS,IAAI,KAAK,OAAO,WAAW,CAAC;AACjE;AAEA,SAAS,UAAU,KAAmC;AACpD,QAAM,QAAQ,QAAQ,IAAI,SAAS;AACnC,MAAI,CAAC,MAAO,QAAO;AACnB,QAAM,QACH,IAAI,qBAAqB,QAAQ,CAAC,OAAO,MAAM,IAAI,UAAU,QAAQ,CAAC,IACnE,gBAAgB,IAAI,SAAS,IAC7B,SAAS,YAAY,IAAI,IAAI;AACnC,MAAI,CAAC,KAAM,QAAO;AAClB,SAAO;AAAA,IACL,IAAI,IAAI;AAAA,IACR;AAAA,IACA;AAAA,IACA,KAAK,QAAQ,IAAI,OAAO;AAAA,IACxB,iBAAiB,OAAO,IAAI,oBAAoB,WAAW,IAAI,kBAAkB;AAAA,EACnF;AACF;AAEA,SAAS,UAAU,QAAsD;AACvE,QAAM,MAA8B,CAAC;AACrC,aAAW,OAAO,CAAC,QAAQ,aAAa,WAAW,mBAAmB,aAAa,eAAe,GAAG;AACnG,UAAM,QAAQ,OAAO,IAAI,GAAG;AAC5B,QAAI,UAAU,QAAQ,MAAM,KAAK,EAAE,SAAS,EAAG,KAAI,GAAG,IAAI,MAAM,KAAK;AAAA,EACvE;AACA,SAAO,YAAY,MAAM,GAAG;AAC9B;AAEA,eAAe,uBACb,WACA,QACA,OACmB;AACnB,MAAI;AACF,UAAM,OAAO,UAAU,QAAQ,aAAa;AAC5C,QAAI,CAAC,MAAM,mBAAoB,QAAO,CAAC;AACvC,WAAQ,MAAM,KAAK,mBAAmB,QAAQ,KAAK,KAAM,CAAC;AAAA,EAC5D,QAAQ;AACN,WAAO,CAAC;AAAA,EACV;AACF;AAEA,eAAe,uBACb,WACA,UAC2E;AAC3E,MAAI;AACF,UAAM,gBAAgB,UAAU,QAAQ,qBAAqB;AAC7D,UAAM,WAAW,MAAM,yBAAyB,eAAe,EAAE,SAAS,CAAC;AAC3E,WAAO;AAAA,MACL,qBAAqB,SAAS,OAAO;AAAA,MACrC,iBAAiB,SAAS,SAAS;AAAA,IACrC;AAAA,EACF,QAAQ;AAGN,WAAO,EAAE,qBAAqB,MAAM,iBAAiB,KAAK;AAAA,EAC5D;AACF;AAEA,eAAe,WACb,IACA,OACA,SACA,YACwE;AACxE,QAAM,QAAQ,oBAAI,IAAoB;AACtC,QAAM,WAAW,oBAAI,IAAoB;AACzC,MAAI,QAAQ,QAAQ;AAClB,UAAM,OAAO,MAAM;AAAA,MACjB;AAAA,MACA;AAAA,MACA,EAAE,IAAI,EAAE,KAAK,QAAQ,GAAG,GAAG,OAAO,WAAW,KAAK;AAAA,MAClD,CAAC;AAAA,MACD;AAAA,IACF;AACA,eAAW,OAAO,KAAM,OAAM,IAAI,IAAI,IAAI,IAAI,KAAK;AAAA,EACrD;AACA,MAAI,WAAW,QAAQ;AACrB,UAAM,OAAO,MAAM;AAAA,MACjB;AAAA,MACA;AAAA,MACA,EAAE,IAAI,EAAE,KAAK,WAAW,GAAG,GAAG,OAAO,WAAW,KAAK;AAAA,MACrD,CAAC;AAAA,MACD;AAAA,IACF;AACA,eAAW,OAAO,KAAM,UAAS,IAAI,IAAI,IAAI,IAAI,IAAI;AAAA,EACvD;AACA,SAAO,EAAE,OAAO,SAAS;AAC3B;AA2BA,eAAsB,IAAI,KAAc;AACtC,MAAI;AACF,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,QAAI,CAAC,MAAM;AACT,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,6BAA6B,cAAc,EAAE,CAAC;AAAA,IAChG;AAEA,UAAM,WAAW,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AAC3F,UAAM,WAAW,UAAU,YAAY,KAAK,YAAY;AACxD,UAAM,iBAAiB,UAAU,cAAc,KAAK,SAAS;AAC7D,QAAI,CAAC,YAAY,CAAC,gBAAgB;AAChC,YAAM,IAAI,cAAc,KAAK;AAAA,QAC3B,OAAO,UAAU,6BAA6B,uCAAuC;AAAA,MACvF,CAAC;AAAA,IACH;AAEA,UAAM,eAAe,MAAM,yBAAyB;AAAA,MAClD,SAAS;AAAA,MACT,QAAQ;AAAA,MACR,OAAO,EAAE,WAAW,QAAQ,KAAK,KAAK,UAAU,eAAe;AAAA,MAC/D,OAAO,uBAAuB,IAAI,GAAG;AAAA,IACvC,CAAC;AACD,QAAI,CAAC,aAAa,GAAI,QAAO,aAAa;AAC1C,UAAM,EAAE,QAAQ,IAAI;AAEpB,UAAM,QAAQ,UAAU,QAAQ,YAAY;AAC5C,UAAM,YAAyB;AAAA,MAC7B,MAAM,MAAM;AAAA,MACZ,OAAO,QAAQ,MAAM,SAAS;AAAA,MAC9B,KAAK,QAAQ,MAAM,OAAO;AAAA,MAC1B,iBAAiB,MAAM,mBAAmB;AAAA,IAC5C;AACA,UAAM,UAAU,eAAe;AAAA,MAC7B,OAAO,UAAU;AAAA,MACjB,KAAK,UAAU;AAAA,MACf,iBAAiB,UAAU;AAAA,IAC7B,CAAC;AACD,QAAI,CAAC,QAAQ,SAAS,QAAQ,oBAAoB,QAAQ,QAAQ,mBAAmB,GAAG;AACtF,aAAO,QAAQ,QAAQ,KAAK,oBAAoB;AAAA,IAClD;AAEA,UAAM,QAAQ,EAAE,UAAU,eAAe;AACzC,UAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC3D,UAAM,SAAS,OAAO,KAAK,QAAQ,WAAW,KAAK,MAAM;AAGzD,UAAM,YAAY,MAAM,qBAAqB,WAAW,QAAQ,CAAC,kBAAkB,GAAG,KAAK;AAC3F,UAAM,iBAAiB,MAAM,qBAAqB,WAAW,QAAQ,CAAC,uBAAuB,GAAG,KAAK;AACrG,UAAM,eAAe,UAAU;AAE/B,UAAM,kBAAkB,MAAM,uBAAuB,WAAW,QAAQ;AACxE,UAAM,SAAS,MAAM,qBAAqB;AAAA,MACxC;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,cAAc,eAAe;AAAA,MAC7B,cAAc,UAAU;AAAA,MACxB,qBAAqB,gBAAgB;AAAA,IACvC,CAAC;AAED,UAAM,gBACJ,gBAAgB,MAAM,gBAAgB,MAAM,gBAAgB,OAAO;AACrE,QAAI,CAAC,cAAe,QAAO,QAAQ,QAAQ,KAAK,oBAAoB;AACpE,UAAM,cAAc,kBAAkB,OAAO;AAE7C,UAAM,QAAQ;AAAA,MACZ;AAAA,MACA;AAAA,MACA;AAAA,MACA,WAAW;AAAA,MACX,MAAM,EAAE,MAAM,UAAU,MAAM,MAAM,EAAE,GAAG,MAAM,UAAU,MAAM,MAAM,CAAC,EAAE;AAAA,IAC1E;AACA,UAAM,OAAQ,MAAM;AAAA,MAClB;AAAA,MACA;AAAA,MACA;AAAA,MACA,EAAE,SAAS,EAAE,WAAW,MAAM,GAAG,OAAO,gBAAgB;AAAA,MACxD;AAAA,IACF;AAEA,UAAM,UAAU,KAAK;AAAA,MACnB,CAAC,QACC,oBAAoB,QAAQ,IAAI,iBAAiB,IAAI,KACpD,eAAe,CAAC,IAAI;AAAA,IACzB;AACA,UAAM,OAAO,IAAI,IAAI,QAAQ,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC;AACxD,UAAM,QAAQ,QACX,IAAI,CAAC,QAAQ,UAAU,GAAG,CAAC,EAC3B,OAAO,CAAC,SAA8B,SAAS,IAAI;AAEtD,UAAM,gBAA6B;AAAA,MACjC,MAAM,MAAM;AAAA,MACZ,OAAO,QAAQ;AAAA,MACf,KAAK,QAAQ;AAAA,MACb,iBAAiB,QAAQ;AAAA,IAC3B;AACA,UAAM,WAAW;AAAA,MACf;AAAA,MACA;AAAA,MACA,MAAM,YAAY,EAAE,WAAW,MAAM,UAAU,IAAI;AAAA,IACrD;AACA,UAAM,WAAW,wBAAwB,UAAU;AAAA,MACjD;AAAA,MACA;AAAA,MACA,WAAW;AAAA,MACX,iBAAiB,gBAAgB;AAAA,MACjC;AAAA,MACA,WAAW,MAAM,aAAa;AAAA,IAChC,CAAC;AAKD,QAAI,CAAC,SAAS,OAAQ,QAAO,QAAQ,QAAQ,KAAK,EAAE,GAAG,sBAAsB,SAAS,CAAC;AAEvF,UAAM,UAAU,oBAAI,IAAY;AAChC,UAAM,aAAa,oBAAI,IAAY;AACnC,eAAW,WAAW,UAAU;AAC9B,YAAM,MAAM,QAAQ,KAAK,KAAK,IAAI,QAAQ,EAAE,IAAI;AAChD,UAAI,KAAK,OAAQ,SAAQ,IAAI,IAAI,MAAM;AACvC,UAAI,KAAK,cAAe,YAAW,IAAI,IAAI,aAAa;AAAA,IAC1D;AACA,UAAM,SAAS,MAAM,WAAW,IAAI,OAAO,CAAC,GAAG,OAAO,GAAG,CAAC,GAAG,UAAU,CAAC;AAExE,UAAM,QAAuB,CAAC;AAC9B,eAAW,WAAW,UAAU;AAC9B,YAAM,MAAM,QAAQ,KAAK,KAAK,IAAI,QAAQ,EAAE,IAAI;AAChD,UAAI,CAAC,IAAK;AACV,YAAM,WAAW,eAAe;AAAA,QAC9B,OAAO,QAAQ,MAAM;AAAA,QACrB,KAAK,QAAQ,MAAM;AAAA,QACnB,iBAAiB,QAAQ,MAAM;AAAA,MACjC,CAAC;AACD,YAAM,KAAK;AAAA,QACT,IAAI,IAAI;AAAA,QACR,iBAAiB,IAAI;AAAA,QACrB,MAAM,QAAQ,MAAM;AAAA,QACpB,YAAY,SAAS,SAAS;AAAA,QAC9B,UAAU,SAAS,OAAO;AAAA,QAC1B,kBAAkB,SAAS,mBAAmB;AAAA,QAC9C,iBAAiB,QAAQ;AAAA,QACzB,kBAAkB,SAAS;AAAA,QAC3B,SAAS,IAAI,UAAU;AAAA,QACvB,YAAY,IAAI,SAAS,OAAO,MAAM,IAAI,IAAI,MAAM,KAAK,OAAO;AAAA,QAChE,iBAAiB,IAAI,iBAAiB;AAAA,QACtC,cAAc,IAAI,gBAAgB,OAAO,SAAS,IAAI,IAAI,aAAa,KAAK,OAAO;AAAA,QACnF,OAAO,IAAI,SAAS;AAAA,MACtB,CAAC;AAAA,IACH;AAEA,WAAO,QAAQ,QAAQ,KAAK,EAAE,OAAO,OAAO,MAAM,QAAQ,SAAS,CAAC;AAAA,EACtE,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,GAAG;AACxB,aAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,IAC3D;AACA,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,QAAI,eAAe,EAAE,UAAU;AAC7B,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,UAAU,gCAAgC,iBAAiB,GAAG,SAAS,IAAI,OAAO;AAAA,QAC3F,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AACA,WAAO,MAAM,qDAAqD,EAAE,IAAI,CAAC;AACzE,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,UAAU,yBAAyB,uBAAuB,EAAE;AAAA,MACrE,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aACE;AAAA,MACF,OAAO;AAAA,MACP,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,uBAAuB,QAAQ,uBAAuB;AAAA,QAClF,EAAE,QAAQ,KAAK,aAAa,kCAAkC,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,QACtG,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,MACtF;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { EntityManager, FilterQuery } from '@mikro-orm/postgresql'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { resolveSingleOrganizationIdOrDeny } from '@open-mercato/core/modules/directory/utils/organizationScopeFilter'\nimport { CrudHttpError, isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { authorizeFeatures } from '@open-mercato/shared/security/featurePolicy'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport type { ModuleConfigService } from '@open-mercato/core/modules/configs/lib/module-config-service'\nimport { StaffTimeEntry, StaffTimeProject, StaffTimeTask } from '../../../../data/entities'\nimport { deriveInterval, formatClock, parseClock } from '../../../../lib/time-tracking/interval'\nimport {\n  evaluateOverlapPolicies,\n  findOverlaps,\n  type OverlapSpan,\n} from '../../../../lib/time-tracking/overlap'\nimport { resolveFeatureAccess } from '../../../../lib/time-tracking/featureAccess'\nimport {\n  MANAGE_PROJECTS_FEATURE,\n  assertProjectAccess,\n  resolveProjectAccess,\n} from '../../../../lib/time-tracking/access'\nimport { readTimeTrackingSettings } from '../../../../lib/time-tracking/settings'\nimport {\n  readSearchParamsRecord,\n  runTimesheetInterceptors,\n} from '../../_shared/withTimesheetInterceptors'\n\nconst logger = createLogger('staff').child({ component: 'api/timesheets/time-entries/overlaps' })\n\nconst VIEW_FEATURE = 'staff.timesheets.view'\nconst MANAGE_ALL_FEATURE = 'staff.timesheets.manage_all'\n\n/**\n * Upper bound for the day-window scan. One staff member can only hold a handful\n * of entries across three days, so this is a guard against pathological data\n * rather than a paging contract.\n */\nconst MAX_WINDOW_ROWS = 500\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: [VIEW_FEATURE] },\n}\n\nconst DATE_PATTERN = /^\\d{4}-\\d{2}-\\d{2}$/\nconst DATE_PREFIX_PATTERN = /^(\\d{4}-\\d{2}-\\d{2})/\n\nconst querySchema = z.object({\n  date: z.string().regex(DATE_PATTERN),\n  startedAt: z.string().optional(),\n  endedAt: z.string().optional(),\n  durationMinutes: z.coerce.number().int().min(0).max(1440).optional(),\n  excludeId: z.string().uuid().optional(),\n  staffMemberId: z.string().uuid().optional(),\n})\n\nconst overlapItemSchema = z.object({\n  id: z.string().uuid(),\n  staff_member_id: z.string().uuid(),\n  date: z.string(),\n  started_at: z.string(),\n  ended_at: z.string(),\n  duration_minutes: z.number(),\n  overlap_minutes: z.number(),\n  crosses_midnight: z.boolean(),\n  task_id: z.string().uuid().nullable(),\n  task_title: z.string().nullable(),\n  time_project_id: z.string().uuid().nullable(),\n  project_name: z.string().nullable(),\n  notes: z.string().nullable(),\n})\n\nconst overlapsResponseSchema = z.object({\n  items: z.array(overlapItemSchema),\n  total: z.number(),\n  /**\n   * EP-38. `warn` is what this route has always meant; the field exists so a\n   * contributed policy that escalates to `block` reaches the form, and so a\n   * caller can tell \"the tenant turned the warning off\" from \"nothing overlaps\".\n   */\n  decision: z.enum(['allow', 'warn', 'block']),\n})\n\ntype OverlapItem = z.infer<typeof overlapItemSchema>\n\ntype RbacServiceLike = {\n  getGrantedFeatures?: (\n    userId: string,\n    options: { tenantId: string | null; organizationId: string | null },\n  ) => Promise<string[]>\n}\n\ntype EntryRow = Pick<\n  StaffTimeEntry,\n  | 'id'\n  | 'staffMemberId'\n  | 'durationMinutes'\n  | 'startedAt'\n  | 'endedAt'\n  | 'notes'\n  | 'taskId'\n  | 'timeProjectId'\n> & { date: unknown }\n\nconst EMPTY_OVERLAP_RESULT = { items: [], total: 0, decision: 'allow' as const }\n\nfunction pad(value: number): string {\n  return String(value).padStart(2, '0')\n}\n\nfunction formatLocalDate(value: Date): string {\n  return `${value.getFullYear()}-${pad(value.getMonth() + 1)}-${pad(value.getDate())}`\n}\n\nfunction shiftDate(date: string, days: number): string {\n  const [year, month, day] = date.split('-').map(Number)\n  const shifted = new Date(Date.UTC(year, month - 1, day + days))\n  return `${shifted.getUTCFullYear()}-${pad(shifted.getUTCMonth() + 1)}-${pad(shifted.getUTCDate())}`\n}\n\nfunction toDayString(value: unknown): string | null {\n  if (typeof value === 'string') {\n    const match = DATE_PREFIX_PATTERN.exec(value.trim())\n    return match ? match[1] : null\n  }\n  if (value instanceof Date && !Number.isNaN(value.getTime())) return formatLocalDate(value)\n  return null\n}\n\n/**\n * Accepts either a wall clock (`11:45`, what the entry form sends) or a full\n * timestamp (what the timer endpoints persist), and always answers in the\n * calendar the rest of the module reads dates in.\n */\nfunction toClock(value: unknown): string | null {\n  if (value instanceof Date) {\n    if (Number.isNaN(value.getTime())) return null\n    return formatClock(value.getHours() * 60 + value.getMinutes())\n  }\n  if (typeof value !== 'string') return null\n  const trimmed = value.trim()\n  if (!trimmed) return null\n  const clock = parseClock(trimmed)\n  if (clock !== null) return formatClock(clock)\n  const parsed = new Date(trimmed)\n  if (Number.isNaN(parsed.getTime())) return null\n  return formatClock(parsed.getHours() * 60 + parsed.getMinutes())\n}\n\nfunction toRowSpan(row: EntryRow): OverlapSpan | null {\n  const start = toClock(row.startedAt)\n  if (!start) return null\n  const date =\n    (row.startedAt instanceof Date && !Number.isNaN(row.startedAt.getTime())\n      ? formatLocalDate(row.startedAt)\n      : null) ?? toDayString(row.date)\n  if (!date) return null\n  return {\n    id: row.id,\n    date,\n    start,\n    end: toClock(row.endedAt),\n    durationMinutes: typeof row.durationMinutes === 'number' ? row.durationMinutes : null,\n  }\n}\n\nfunction readQuery(params: URLSearchParams): z.infer<typeof querySchema> {\n  const raw: Record<string, string> = {}\n  for (const key of ['date', 'startedAt', 'endedAt', 'durationMinutes', 'excludeId', 'staffMemberId']) {\n    const value = params.get(key)\n    if (value !== null && value.trim().length > 0) raw[key] = value.trim()\n  }\n  return querySchema.parse(raw)\n}\n\nasync function resolveGrantedFeatures(\n  container: Awaited<ReturnType<typeof createRequestContainer>>,\n  userId: string,\n  scope: { tenantId: string; organizationId: string },\n): Promise<string[]> {\n  try {\n    const rbac = container.resolve('rbacService') as RbacServiceLike | undefined\n    if (!rbac?.getGrantedFeatures) return []\n    return (await rbac.getGrantedFeatures(userId, scope)) ?? []\n  } catch {\n    return []\n  }\n}\n\nasync function resolveOverlapSettings(\n  container: Awaited<ReturnType<typeof createRequestContainer>>,\n  tenantId: string,\n): Promise<{ assignmentGraceDays: number | null; warningsEnabled: boolean }> {\n  try {\n    const configService = container.resolve('moduleConfigService') as ModuleConfigService\n    const settings = await readTimeTrackingSettings(configService, { tenantId })\n    return {\n      assignmentGraceDays: settings.access.assignmentGraceDays,\n      warningsEnabled: settings.warnings.overlap,\n    }\n  } catch {\n    // The same fail-safe the grace window uses: an unreadable settings row keeps\n    // the advisory warning on, which is what the module default says.\n    return { assignmentGraceDays: null, warningsEnabled: true }\n  }\n}\n\nasync function loadLabels(\n  em: EntityManager,\n  scope: { tenantId: string; organizationId: string },\n  taskIds: string[],\n  projectIds: string[],\n): Promise<{ tasks: Map<string, string>; projects: Map<string, string> }> {\n  const tasks = new Map<string, string>()\n  const projects = new Map<string, string>()\n  if (taskIds.length) {\n    const rows = await findWithDecryption(\n      em,\n      StaffTimeTask,\n      { id: { $in: taskIds }, ...scope, deletedAt: null },\n      {},\n      scope,\n    )\n    for (const row of rows) tasks.set(row.id, row.title)\n  }\n  if (projectIds.length) {\n    const rows = await findWithDecryption(\n      em,\n      StaffTimeProject,\n      { id: { $in: projectIds }, ...scope, deletedAt: null },\n      {},\n      scope,\n    )\n    for (const row of rows) projects.set(row.id, row.name)\n  }\n  return { tasks, projects }\n}\n\n/**\n * GET /api/staff/timesheets/time-entries/overlaps\n *\n * Advisory-only overlap probe for the time entry form (mockup screen 9). It is\n * read-only and never blocks a save: overlapping time is legitimate in\n * consulting work (a client call while taking notes), so the UI renders the\n * result as a warning with a suggested fix, never as a validation error. Any\n * failure here MUST degrade to \"no warning\" rather than break the form \u2014 the\n * route therefore answers `{ items: [], total: 0 }` for unusable input, a\n * caller without a linked staff member, or a lookup that yields nothing, and\n * the client is expected to ignore non-200 responses.\n *\n * Scoping: rows are always filtered by `tenant_id` + `organization_id` and\n * intersected with `resolveProjectAccess`, so the endpoint cannot be used to\n * probe entries on projects the caller cannot see. Asking about another staff\n * member requires `staff.timesheets.manage_all`; without it the request is\n * silently scoped back to the caller's own member instead of erroring.\n *\n * Query shape: the form calls this on blur, so the lookup reads a three-day\n * window (`date - 1 .. date + 1`) against the\n * `(organization_id, staff_member_id, date, started_at)` index. The adjacent\n * days cover midnight-crossing spans in both directions \u2014 a candidate that ends\n * after midnight, and a stored entry that started the previous evening \u2014 without\n * ever scanning history.\n */\nexport async function GET(req: Request) {\n  try {\n    const container = await createRequestContainer()\n    const auth = await getAuthFromRequest(req)\n    const { translate } = await resolveTranslations()\n    if (!auth) {\n      throw new CrudHttpError(401, { error: translate('staff.errors.unauthorized', 'Unauthorized') })\n    }\n\n    const orgScope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n    const tenantId = orgScope?.tenantId ?? auth.tenantId ?? null\n    const organizationId = resolveSingleOrganizationIdOrDeny(orgScope, auth) ?? null\n    if (!tenantId || !organizationId) {\n      throw new CrudHttpError(400, {\n        error: translate('staff.errors.missingScope', 'Missing tenant or organization scope.'),\n      })\n    }\n\n    const interceptors = await runTimesheetInterceptors({\n      request: req,\n      method: 'GET',\n      scope: { container, userId: auth.sub, tenantId, organizationId },\n      query: readSearchParamsRecord(req.url),\n    })\n    if (!interceptors.ok) return interceptors.response\n    const { session } = interceptors\n\n    const query = readQuery(session.searchParams)\n    const candidate: OverlapSpan = {\n      date: query.date,\n      start: toClock(query.startedAt),\n      end: toClock(query.endedAt),\n      durationMinutes: query.durationMinutes ?? null,\n    }\n    const derived = deriveInterval({\n      start: candidate.start,\n      end: candidate.end,\n      durationMinutes: candidate.durationMinutes,\n    })\n    if (!derived.start || derived.durationMinutes === null || derived.durationMinutes <= 0) {\n      return session.respond(200, EMPTY_OVERLAP_RESULT)\n    }\n\n    const scope = { tenantId, organizationId }\n    const em = (container.resolve('em') as EntityManager).fork()\n    const userId = typeof auth.sub === 'string' ? auth.sub : null\n    // Both questions go to the service. Asking one and inferring the other from a\n    // grant array is how the two could disagree when the read failed.\n    const manageAll = await resolveFeatureAccess(container, userId, [MANAGE_ALL_FEATURE], scope)\n    const manageProjects = await resolveFeatureAccess(container, userId, [MANAGE_PROJECTS_FEATURE], scope)\n    const canManageAll = manageAll.allowed\n\n    const overlapSettings = await resolveOverlapSettings(container, tenantId)\n    const access = await resolveProjectAccess({\n      em,\n      userId,\n      tenantId,\n      organizationId,\n      canManageAll: manageProjects.allowed,\n      userFeatures: manageAll.grantedFeatures,\n      assignmentGraceDays: overlapSettings.assignmentGraceDays,\n    })\n\n    const staffMemberId =\n      canManageAll && query.staffMemberId ? query.staffMemberId : access.staffMemberId\n    if (!staffMemberId) return session.respond(200, EMPTY_OVERLAP_RESULT)\n    const isSelfScope = staffMemberId === access.staffMemberId\n\n    const where = {\n      tenantId,\n      organizationId,\n      staffMemberId,\n      deletedAt: null,\n      date: { $gte: shiftDate(query.date, -1), $lte: shiftDate(query.date, 1) },\n    } as unknown as FilterQuery<StaffTimeEntry>\n    const rows = (await findWithDecryption(\n      em,\n      StaffTimeEntry,\n      where,\n      { orderBy: { startedAt: 'asc' }, limit: MAX_WINDOW_ROWS },\n      scope,\n    )) as unknown as EntryRow[]\n\n    const visible = rows.filter(\n      (row) =>\n        assertProjectAccess(access, row.timeProjectId ?? null) ||\n        (isSelfScope && !row.timeProjectId),\n    )\n    const byId = new Map(visible.map((row) => [row.id, row]))\n    const spans = visible\n      .map((row) => toRowSpan(row))\n      .filter((span): span is OverlapSpan => span !== null)\n\n    const candidateSpan: OverlapSpan = {\n      date: query.date,\n      start: derived.start,\n      end: derived.end,\n      durationMinutes: derived.durationMinutes,\n    }\n    const overlaps = findOverlaps(\n      candidateSpan,\n      spans,\n      query.excludeId ? { excludeId: query.excludeId } : undefined,\n    )\n    const decision = evaluateOverlapPolicies(overlaps, {\n      tenantId,\n      organizationId,\n      candidate: candidateSpan,\n      warningsEnabled: overlapSettings.warningsEnabled,\n      staffMemberId,\n      excludeId: query.excludeId ?? null,\n    })\n    // The item list is unchanged by the policy: this endpoint answers \"what\n    // intersects\", and `decision` answers \"and what should happen\". Collapsing\n    // the list when a tenant turns the warning off would make the two\n    // indistinguishable from \"nothing intersects\" for every other caller.\n    if (!overlaps.length) return session.respond(200, { ...EMPTY_OVERLAP_RESULT, decision })\n\n    const taskIds = new Set<string>()\n    const projectIds = new Set<string>()\n    for (const overlap of overlaps) {\n      const row = overlap.id ? byId.get(overlap.id) : undefined\n      if (row?.taskId) taskIds.add(row.taskId)\n      if (row?.timeProjectId) projectIds.add(row.timeProjectId)\n    }\n    const labels = await loadLabels(em, scope, [...taskIds], [...projectIds])\n\n    const items: OverlapItem[] = []\n    for (const overlap of overlaps) {\n      const row = overlap.id ? byId.get(overlap.id) : undefined\n      if (!row) continue\n      const interval = deriveInterval({\n        start: overlap.entry.start,\n        end: overlap.entry.end,\n        durationMinutes: overlap.entry.durationMinutes,\n      })\n      items.push({\n        id: row.id,\n        staff_member_id: row.staffMemberId,\n        date: overlap.entry.date,\n        started_at: interval.start ?? '',\n        ended_at: interval.end ?? '',\n        duration_minutes: interval.durationMinutes ?? 0,\n        overlap_minutes: overlap.overlapMinutes,\n        crosses_midnight: interval.crossesMidnight,\n        task_id: row.taskId ?? null,\n        task_title: row.taskId ? labels.tasks.get(row.taskId) ?? null : null,\n        time_project_id: row.timeProjectId ?? null,\n        project_name: row.timeProjectId ? labels.projects.get(row.timeProjectId) ?? null : null,\n        notes: row.notes ?? null,\n      })\n    }\n\n    return session.respond(200, { items, total: items.length, decision })\n  } catch (err) {\n    if (isCrudHttpError(err)) {\n      return NextResponse.json(err.body, { status: err.status })\n    }\n    const { translate } = await resolveTranslations()\n    if (err instanceof z.ZodError) {\n      return NextResponse.json(\n        { error: translate('staff.errors.invalid_request', 'Invalid request'), details: err.issues },\n        { status: 400 },\n      )\n    }\n    logger.error('staff.timesheets.time-entries.overlaps GET failed', { err })\n    return NextResponse.json(\n      { error: translate('staff.errors.internal', 'Internal server error') },\n      { status: 500 },\n    )\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Staff',\n  summary: 'Advisory time entry overlap check',\n  methods: {\n    GET: {\n      summary: 'List time entries overlapping a candidate span',\n      description:\n        'Advisory, read-only lookup used by the time entry form to warn about conflicting entries. Overlapping time is allowed, so the result never blocks a save. Returns an empty list when the supplied time information is insufficient. Checking another staff member requires staff.timesheets.manage_all; without it the request is silently scoped to the caller.',\n      query: querySchema,\n      responses: [\n        { status: 200, description: 'Overlapping entries', schema: overlapsResponseSchema },\n        { status: 400, description: 'Invalid query or missing scope', schema: z.object({ error: z.string() }) },\n        { status: 401, description: 'Unauthorized', schema: z.object({ error: z.string() }) },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAElB,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AACnD,SAAS,yCAAyC;AAClD,SAAS,eAAe,uBAAuB;AAE/C,SAAS,2BAA2B;AACpC,SAAS,0BAA0B;AACnC,SAAS,oBAAoB;AAG7B,SAAS,gBAAgB,kBAAkB,qBAAqB;AAChE,SAAS,gBAAgB,aAAa,kBAAkB;AACxD;AAAA,EACE;AAAA,EACA;AAAA,OAEK;AACP,SAAS,4BAA4B;AACrC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,gCAAgC;AACzC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAEP,MAAM,SAAS,aAAa,OAAO,EAAE,MAAM,EAAE,WAAW,uCAAuC,CAAC;AAEhG,MAAM,eAAe;AACrB,MAAM,qBAAqB;AAO3B,MAAM,kBAAkB;AAEjB,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,YAAY,EAAE;AAC5D;AAEA,MAAM,eAAe;AACrB,MAAM,sBAAsB;AAE5B,MAAM,cAAc,EAAE,OAAO;AAAA,EAC3B,MAAM,EAAE,OAAO,EAAE,MAAM,YAAY;AAAA,EACnC,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,SAAS,EAAE,OAAO,EAAE,SAAS;AAAA,EAC7B,iBAAiB,EAAE,OAAO,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,IAAI,EAAE,SAAS;AAAA,EACnE,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACtC,eAAe,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAC5C,CAAC;AAED,MAAM,oBAAoB,EAAE,OAAO;AAAA,EACjC,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,iBAAiB,EAAE,OAAO,EAAE,KAAK;AAAA,EACjC,MAAM,EAAE,OAAO;AAAA,EACf,YAAY,EAAE,OAAO;AAAA,EACrB,UAAU,EAAE,OAAO;AAAA,EACnB,kBAAkB,EAAE,OAAO;AAAA,EAC3B,iBAAiB,EAAE,OAAO;AAAA,EAC1B,kBAAkB,EAAE,QAAQ;AAAA,EAC5B,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACpC,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,EAChC,iBAAiB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC5C,cAAc,EAAE,OAAO,EAAE,SAAS;AAAA,EAClC,OAAO,EAAE,OAAO,EAAE,SAAS;AAC7B,CAAC;AAED,MAAM,yBAAyB,EAAE,OAAO;AAAA,EACtC,OAAO,EAAE,MAAM,iBAAiB;AAAA,EAChC,OAAO,EAAE,OAAO;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMhB,UAAU,EAAE,KAAK,CAAC,SAAS,QAAQ,OAAO,CAAC;AAC7C,CAAC;AAuBD,MAAM,uBAAuB,EAAE,OAAO,CAAC,GAAG,OAAO,GAAG,UAAU,QAAiB;AAE/E,SAAS,IAAI,OAAuB;AAClC,SAAO,OAAO,KAAK,EAAE,SAAS,GAAG,GAAG;AACtC;AAEA,SAAS,gBAAgB,OAAqB;AAC5C,SAAO,GAAG,MAAM,YAAY,CAAC,IAAI,IAAI,MAAM,SAAS,IAAI,CAAC,CAAC,IAAI,IAAI,MAAM,QAAQ,CAAC,CAAC;AACpF;AAEA,SAAS,UAAU,MAAc,MAAsB;AACrD,QAAM,CAAC,MAAM,OAAO,GAAG,IAAI,KAAK,MAAM,GAAG,EAAE,IAAI,MAAM;AACrD,QAAM,UAAU,IAAI,KAAK,KAAK,IAAI,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC;AAC9D,SAAO,GAAG,QAAQ,eAAe,CAAC,IAAI,IAAI,QAAQ,YAAY,IAAI,CAAC,CAAC,IAAI,IAAI,QAAQ,WAAW,CAAC,CAAC;AACnG;AAEA,SAAS,YAAY,OAA+B;AAClD,MAAI,OAAO,UAAU,UAAU;AAC7B,UAAM,QAAQ,oBAAoB,KAAK,MAAM,KAAK,CAAC;AACnD,WAAO,QAAQ,MAAM,CAAC,IAAI;AAAA,EAC5B;AACA,MAAI,iBAAiB,QAAQ,CAAC,OAAO,MAAM,MAAM,QAAQ,CAAC,EAAG,QAAO,gBAAgB,KAAK;AACzF,SAAO;AACT;AAOA,SAAS,QAAQ,OAA+B;AAC9C,MAAI,iBAAiB,MAAM;AACzB,QAAI,OAAO,MAAM,MAAM,QAAQ,CAAC,EAAG,QAAO;AAC1C,WAAO,YAAY,MAAM,SAAS,IAAI,KAAK,MAAM,WAAW,CAAC;AAAA,EAC/D;AACA,MAAI,OAAO,UAAU,SAAU,QAAO;AACtC,QAAM,UAAU,MAAM,KAAK;AAC3B,MAAI,CAAC,QAAS,QAAO;AACrB,QAAM,QAAQ,WAAW,OAAO;AAChC,MAAI,UAAU,KAAM,QAAO,YAAY,KAAK;AAC5C,QAAM,SAAS,IAAI,KAAK,OAAO;AAC/B,MAAI,OAAO,MAAM,OAAO,QAAQ,CAAC,EAAG,QAAO;AAC3C,SAAO,YAAY,OAAO,SAAS,IAAI,KAAK,OAAO,WAAW,CAAC;AACjE;AAEA,SAAS,UAAU,KAAmC;AACpD,QAAM,QAAQ,QAAQ,IAAI,SAAS;AACnC,MAAI,CAAC,MAAO,QAAO;AACnB,QAAM,QACH,IAAI,qBAAqB,QAAQ,CAAC,OAAO,MAAM,IAAI,UAAU,QAAQ,CAAC,IACnE,gBAAgB,IAAI,SAAS,IAC7B,SAAS,YAAY,IAAI,IAAI;AACnC,MAAI,CAAC,KAAM,QAAO;AAClB,SAAO;AAAA,IACL,IAAI,IAAI;AAAA,IACR;AAAA,IACA;AAAA,IACA,KAAK,QAAQ,IAAI,OAAO;AAAA,IACxB,iBAAiB,OAAO,IAAI,oBAAoB,WAAW,IAAI,kBAAkB;AAAA,EACnF;AACF;AAEA,SAAS,UAAU,QAAsD;AACvE,QAAM,MAA8B,CAAC;AACrC,aAAW,OAAO,CAAC,QAAQ,aAAa,WAAW,mBAAmB,aAAa,eAAe,GAAG;AACnG,UAAM,QAAQ,OAAO,IAAI,GAAG;AAC5B,QAAI,UAAU,QAAQ,MAAM,KAAK,EAAE,SAAS,EAAG,KAAI,GAAG,IAAI,MAAM,KAAK;AAAA,EACvE;AACA,SAAO,YAAY,MAAM,GAAG;AAC9B;AAEA,eAAe,uBACb,WACA,QACA,OACmB;AACnB,MAAI;AACF,UAAM,OAAO,UAAU,QAAQ,aAAa;AAC5C,QAAI,CAAC,MAAM,mBAAoB,QAAO,CAAC;AACvC,WAAQ,MAAM,KAAK,mBAAmB,QAAQ,KAAK,KAAM,CAAC;AAAA,EAC5D,QAAQ;AACN,WAAO,CAAC;AAAA,EACV;AACF;AAEA,eAAe,uBACb,WACA,UAC2E;AAC3E,MAAI;AACF,UAAM,gBAAgB,UAAU,QAAQ,qBAAqB;AAC7D,UAAM,WAAW,MAAM,yBAAyB,eAAe,EAAE,SAAS,CAAC;AAC3E,WAAO;AAAA,MACL,qBAAqB,SAAS,OAAO;AAAA,MACrC,iBAAiB,SAAS,SAAS;AAAA,IACrC;AAAA,EACF,QAAQ;AAGN,WAAO,EAAE,qBAAqB,MAAM,iBAAiB,KAAK;AAAA,EAC5D;AACF;AAEA,eAAe,WACb,IACA,OACA,SACA,YACwE;AACxE,QAAM,QAAQ,oBAAI,IAAoB;AACtC,QAAM,WAAW,oBAAI,IAAoB;AACzC,MAAI,QAAQ,QAAQ;AAClB,UAAM,OAAO,MAAM;AAAA,MACjB;AAAA,MACA;AAAA,MACA,EAAE,IAAI,EAAE,KAAK,QAAQ,GAAG,GAAG,OAAO,WAAW,KAAK;AAAA,MAClD,CAAC;AAAA,MACD;AAAA,IACF;AACA,eAAW,OAAO,KAAM,OAAM,IAAI,IAAI,IAAI,IAAI,KAAK;AAAA,EACrD;AACA,MAAI,WAAW,QAAQ;AACrB,UAAM,OAAO,MAAM;AAAA,MACjB;AAAA,MACA;AAAA,MACA,EAAE,IAAI,EAAE,KAAK,WAAW,GAAG,GAAG,OAAO,WAAW,KAAK;AAAA,MACrD,CAAC;AAAA,MACD;AAAA,IACF;AACA,eAAW,OAAO,KAAM,UAAS,IAAI,IAAI,IAAI,IAAI,IAAI;AAAA,EACvD;AACA,SAAO,EAAE,OAAO,SAAS;AAC3B;AA2BA,eAAsB,IAAI,KAAc;AACtC,MAAI;AACF,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,QAAI,CAAC,MAAM;AACT,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,6BAA6B,cAAc,EAAE,CAAC;AAAA,IAChG;AAEA,UAAM,WAAW,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AAC3F,UAAM,WAAW,UAAU,YAAY,KAAK,YAAY;AACxD,UAAM,iBAAiB,kCAAkC,UAAU,IAAI,KAAK;AAC5E,QAAI,CAAC,YAAY,CAAC,gBAAgB;AAChC,YAAM,IAAI,cAAc,KAAK;AAAA,QAC3B,OAAO,UAAU,6BAA6B,uCAAuC;AAAA,MACvF,CAAC;AAAA,IACH;AAEA,UAAM,eAAe,MAAM,yBAAyB;AAAA,MAClD,SAAS;AAAA,MACT,QAAQ;AAAA,MACR,OAAO,EAAE,WAAW,QAAQ,KAAK,KAAK,UAAU,eAAe;AAAA,MAC/D,OAAO,uBAAuB,IAAI,GAAG;AAAA,IACvC,CAAC;AACD,QAAI,CAAC,aAAa,GAAI,QAAO,aAAa;AAC1C,UAAM,EAAE,QAAQ,IAAI;AAEpB,UAAM,QAAQ,UAAU,QAAQ,YAAY;AAC5C,UAAM,YAAyB;AAAA,MAC7B,MAAM,MAAM;AAAA,MACZ,OAAO,QAAQ,MAAM,SAAS;AAAA,MAC9B,KAAK,QAAQ,MAAM,OAAO;AAAA,MAC1B,iBAAiB,MAAM,mBAAmB;AAAA,IAC5C;AACA,UAAM,UAAU,eAAe;AAAA,MAC7B,OAAO,UAAU;AAAA,MACjB,KAAK,UAAU;AAAA,MACf,iBAAiB,UAAU;AAAA,IAC7B,CAAC;AACD,QAAI,CAAC,QAAQ,SAAS,QAAQ,oBAAoB,QAAQ,QAAQ,mBAAmB,GAAG;AACtF,aAAO,QAAQ,QAAQ,KAAK,oBAAoB;AAAA,IAClD;AAEA,UAAM,QAAQ,EAAE,UAAU,eAAe;AACzC,UAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC3D,UAAM,SAAS,OAAO,KAAK,QAAQ,WAAW,KAAK,MAAM;AAGzD,UAAM,YAAY,MAAM,qBAAqB,WAAW,QAAQ,CAAC,kBAAkB,GAAG,KAAK;AAC3F,UAAM,iBAAiB,MAAM,qBAAqB,WAAW,QAAQ,CAAC,uBAAuB,GAAG,KAAK;AACrG,UAAM,eAAe,UAAU;AAE/B,UAAM,kBAAkB,MAAM,uBAAuB,WAAW,QAAQ;AACxE,UAAM,SAAS,MAAM,qBAAqB;AAAA,MACxC;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,cAAc,eAAe;AAAA,MAC7B,cAAc,UAAU;AAAA,MACxB,qBAAqB,gBAAgB;AAAA,IACvC,CAAC;AAED,UAAM,gBACJ,gBAAgB,MAAM,gBAAgB,MAAM,gBAAgB,OAAO;AACrE,QAAI,CAAC,cAAe,QAAO,QAAQ,QAAQ,KAAK,oBAAoB;AACpE,UAAM,cAAc,kBAAkB,OAAO;AAE7C,UAAM,QAAQ;AAAA,MACZ;AAAA,MACA;AAAA,MACA;AAAA,MACA,WAAW;AAAA,MACX,MAAM,EAAE,MAAM,UAAU,MAAM,MAAM,EAAE,GAAG,MAAM,UAAU,MAAM,MAAM,CAAC,EAAE;AAAA,IAC1E;AACA,UAAM,OAAQ,MAAM;AAAA,MAClB;AAAA,MACA;AAAA,MACA;AAAA,MACA,EAAE,SAAS,EAAE,WAAW,MAAM,GAAG,OAAO,gBAAgB;AAAA,MACxD;AAAA,IACF;AAEA,UAAM,UAAU,KAAK;AAAA,MACnB,CAAC,QACC,oBAAoB,QAAQ,IAAI,iBAAiB,IAAI,KACpD,eAAe,CAAC,IAAI;AAAA,IACzB;AACA,UAAM,OAAO,IAAI,IAAI,QAAQ,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC;AACxD,UAAM,QAAQ,QACX,IAAI,CAAC,QAAQ,UAAU,GAAG,CAAC,EAC3B,OAAO,CAAC,SAA8B,SAAS,IAAI;AAEtD,UAAM,gBAA6B;AAAA,MACjC,MAAM,MAAM;AAAA,MACZ,OAAO,QAAQ;AAAA,MACf,KAAK,QAAQ;AAAA,MACb,iBAAiB,QAAQ;AAAA,IAC3B;AACA,UAAM,WAAW;AAAA,MACf;AAAA,MACA;AAAA,MACA,MAAM,YAAY,EAAE,WAAW,MAAM,UAAU,IAAI;AAAA,IACrD;AACA,UAAM,WAAW,wBAAwB,UAAU;AAAA,MACjD;AAAA,MACA;AAAA,MACA,WAAW;AAAA,MACX,iBAAiB,gBAAgB;AAAA,MACjC;AAAA,MACA,WAAW,MAAM,aAAa;AAAA,IAChC,CAAC;AAKD,QAAI,CAAC,SAAS,OAAQ,QAAO,QAAQ,QAAQ,KAAK,EAAE,GAAG,sBAAsB,SAAS,CAAC;AAEvF,UAAM,UAAU,oBAAI,IAAY;AAChC,UAAM,aAAa,oBAAI,IAAY;AACnC,eAAW,WAAW,UAAU;AAC9B,YAAM,MAAM,QAAQ,KAAK,KAAK,IAAI,QAAQ,EAAE,IAAI;AAChD,UAAI,KAAK,OAAQ,SAAQ,IAAI,IAAI,MAAM;AACvC,UAAI,KAAK,cAAe,YAAW,IAAI,IAAI,aAAa;AAAA,IAC1D;AACA,UAAM,SAAS,MAAM,WAAW,IAAI,OAAO,CAAC,GAAG,OAAO,GAAG,CAAC,GAAG,UAAU,CAAC;AAExE,UAAM,QAAuB,CAAC;AAC9B,eAAW,WAAW,UAAU;AAC9B,YAAM,MAAM,QAAQ,KAAK,KAAK,IAAI,QAAQ,EAAE,IAAI;AAChD,UAAI,CAAC,IAAK;AACV,YAAM,WAAW,eAAe;AAAA,QAC9B,OAAO,QAAQ,MAAM;AAAA,QACrB,KAAK,QAAQ,MAAM;AAAA,QACnB,iBAAiB,QAAQ,MAAM;AAAA,MACjC,CAAC;AACD,YAAM,KAAK;AAAA,QACT,IAAI,IAAI;AAAA,QACR,iBAAiB,IAAI;AAAA,QACrB,MAAM,QAAQ,MAAM;AAAA,QACpB,YAAY,SAAS,SAAS;AAAA,QAC9B,UAAU,SAAS,OAAO;AAAA,QAC1B,kBAAkB,SAAS,mBAAmB;AAAA,QAC9C,iBAAiB,QAAQ;AAAA,QACzB,kBAAkB,SAAS;AAAA,QAC3B,SAAS,IAAI,UAAU;AAAA,QACvB,YAAY,IAAI,SAAS,OAAO,MAAM,IAAI,IAAI,MAAM,KAAK,OAAO;AAAA,QAChE,iBAAiB,IAAI,iBAAiB;AAAA,QACtC,cAAc,IAAI,gBAAgB,OAAO,SAAS,IAAI,IAAI,aAAa,KAAK,OAAO;AAAA,QACnF,OAAO,IAAI,SAAS;AAAA,MACtB,CAAC;AAAA,IACH;AAEA,WAAO,QAAQ,QAAQ,KAAK,EAAE,OAAO,OAAO,MAAM,QAAQ,SAAS,CAAC;AAAA,EACtE,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,GAAG;AACxB,aAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,IAC3D;AACA,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,QAAI,eAAe,EAAE,UAAU;AAC7B,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,UAAU,gCAAgC,iBAAiB,GAAG,SAAS,IAAI,OAAO;AAAA,QAC3F,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AACA,WAAO,MAAM,qDAAqD,EAAE,IAAI,CAAC;AACzE,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,UAAU,yBAAyB,uBAAuB,EAAE;AAAA,MACrE,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aACE;AAAA,MACF,OAAO;AAAA,MACP,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,uBAAuB,QAAQ,uBAAuB;AAAA,QAClF,EAAE,QAAQ,KAAK,aAAa,kCAAkC,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,QACtG,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,MACtF;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/staff/api/timesheets/time-entries/start-timer/route.js

@@ -3,6 +3,7 @@ import { z } from "zod";
 import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
 import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
 import { resolveOrganizationScopeForRequest } from "@open-mercato/core/modules/directory/utils/organizationScope";
+import { resolveSingleOrganizationIdOrDeny } from "@open-mercato/core/modules/directory/utils/organizationScopeFilter";
 import { serializeOperationMetadata } from "@open-mercato/shared/lib/commands/operationMetadata";
 import { CrudHttpError, isCrudHttpError } from "@open-mercato/shared/lib/crud/errors";
 import { resolveTranslations } from "@open-mercato/shared/lib/i18n/server";
@@ -27,7 +28,7 @@ async function buildContext(req) {
     container,
     auth,
     organizationScope: scope,
-    selectedOrganizationId: scope?.selectedId ?? auth.orgId ?? null,
+    selectedOrganizationId: resolveSingleOrganizationIdOrDeny(scope, auth) ?? null,
     organizationIds: scope?.filterIds ?? (auth.orgId ? [auth.orgId] : null),
     request: req
   };
@@ -35,7 +36,7 @@ async function buildContext(req) {
     ctx,
     translate,
     tenantId: scope?.tenantId ?? auth.tenantId ?? null,
-    organizationId: scope?.selectedId ?? auth.orgId ?? null
+    organizationId: resolveSingleOrganizationIdOrDeny(scope, auth) ?? null
   };
 }
 async function POST(req) {