@open-mercato/core 0.8.1-develop.7296.1.2111d779db → 0.9.0

package/dist/modules/feature_toggles/commands/global.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/feature_toggles/commands/global.ts"],
-  "sourcesContent": ["import type { CommandHandler } from '@open-mercato/shared/lib/commands'\nimport type { DataEngine } from '@open-mercato/shared/lib/data/engine'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { FeatureToggle, FeatureToggleOverride } from '../data/entities'\nimport { ToggleCreateInput, toggleCreateSchema, ToggleUpdateInput, toggleUpdateSchema } from '../data/validators'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { registerCommand } from '@open-mercato/shared/lib/commands'\nimport { CrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { enforceCommandOptimisticLock } from '@open-mercato/shared/lib/crud/optimistic-lock-command'\nimport { buildChanges, emitCrudSideEffects, emitCrudUndoSideEffects, requireId } from '@open-mercato/shared/lib/commands/helpers'\nimport { extractUndoPayload } from '@open-mercato/shared/lib/commands/undo'\nimport { resolveRedoSnapshot } from '@open-mercato/shared/lib/commands/redo'\nimport { FeatureTogglesService } from '../lib/feature-flag-check'\nimport { E } from '#generated/entities.ids.generated'\n\nfunction assertGlobalToggleSuperAdmin(ctx: { auth?: { [key: string]: unknown } | null; systemActor?: boolean }): void {\n  // Trusted server-side callers (CLI seed-defaults/toggle-*, tenant setup) run\n  // without an authenticated actor and opt in via `systemActor`. HTTP request\n  // paths never set it and always carry a real `auth` actor, so an authenticated\n  // but non-super-admin caller \u2014 the cross-tenant escalation vector (#2266) \u2014\n  // stays denied.\n  if (ctx.systemActor === true) return\n  if (ctx.auth?.isSuperAdmin !== true) {\n    throw new CrudHttpError(403, { error: 'Global feature toggles can only be managed by a super administrator.' })\n  }\n}\n\ntype ToggleSnapshot = {\n  id: string\n  identifier: string\n  name: string\n  description: string | null\n  category: string | null\n  type: 'boolean' | 'string' | 'number' | 'json'\n  defaultValue: any\n}\n\ntype OverrideSnapshot = {\n  id: string\n  toggleId: string\n  tenantId: string\n  value?: any\n}\n\ntype ToggleUndoPayload = {\n  after?: ToggleSnapshot | null\n  before?: ToggleSnapshot | null\n  overrides?: OverrideSnapshot[]\n}\n\nconst featureToggleCrudIndexer = { entityType: E.feature_toggles.feature_toggle }\n\nconst FEATURE_TOGGLE_LOCK_RESOURCE_KIND = 'feature_toggles.feature_toggle'\n\nfunction featureToggleIdentifiers(toggle: FeatureToggle | ToggleSnapshot) {\n  return {\n    id: toggle.id,\n    organizationId: null,\n    tenantId: null,\n  }\n}\n\nasync function loadToggleSnapshot(em: EntityManager, id: string): Promise<ToggleSnapshot | null> {\n  const toggle = await em.findOne(FeatureToggle, { id })\n  if (!toggle) return null\n  return {\n    id: toggle.id,\n    identifier: toggle.identifier,\n    name: toggle.name,\n    description: toggle.description ?? null,\n    category: toggle.category ?? null,\n    type: toggle.type ?? 'boolean',\n    defaultValue: toggle.defaultValue ?? null,\n  }\n}\n\nasync function loadOverrideSnapshots(em: EntityManager, toggleId: string): Promise<OverrideSnapshot[]> {\n  const overrides = await em.find(FeatureToggleOverride, { toggle: toggleId })\n  return overrides.map(o => ({\n    id: o.id,\n    toggleId: o.toggle.id,\n    tenantId: o.tenantId,\n    value: o.value,\n  }))\n}\n\nconst createToggleCommand: CommandHandler<ToggleCreateInput, { toggleId: string }> = {\n  id: 'feature_toggles.global.create',\n  async execute(rawInput, ctx) {\n    assertGlobalToggleSuperAdmin(ctx)\n    const parsed = toggleCreateSchema.parse(rawInput)\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n    const existing = await em.findOne(FeatureToggle, { identifier: parsed.identifier })\n    if (existing) {\n      throw new CrudHttpError(400, { error: 'Feature toggle identifier already exists' })\n    }\n    const toggle = em.create(FeatureToggle, {\n      identifier: parsed.identifier,\n      name: parsed.name,\n      description: parsed.description,\n      category: parsed.category,\n      type: parsed.type,\n      defaultValue: parsed.defaultValue,\n    })\n    em.persist(toggle)\n    await em.flush()\n\n    const dataEngine = ctx.container.resolve('dataEngine') as DataEngine\n    await emitCrudSideEffects({\n      dataEngine,\n      action: 'created',\n      entity: toggle,\n      identifiers: featureToggleIdentifiers(toggle),\n      syncOrigin: ctx.syncOrigin,\n      indexer: featureToggleCrudIndexer,\n    })\n\n    return { toggleId: toggle.id }\n  },\n  captureAfter: async (_input, result, ctx) => {\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n    return await loadToggleSnapshot(em, result.toggleId)\n  },\n  buildLog: async ({ result, ctx }) => {\n    const { translate } = await resolveTranslations()\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n    const snapshot = await loadToggleSnapshot(em, result.toggleId)\n    return {\n      actionLabel: translate('feature_toggles.audit.toggles.create', 'Create toggle'),\n      resourceKind: 'feature_toggles.global',\n      resourceId: result.toggleId,\n      snapshotAfter: snapshot ?? null,\n      payload: {\n        undo: {\n          after: snapshot ?? null,\n        } satisfies ToggleUndoPayload,\n      },\n    }\n  },\n  undo: async ({ logEntry, ctx }) => {\n    const toggleId = logEntry?.resourceId ?? null\n    if (!toggleId) return\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n    const overrides = await em.find(FeatureToggleOverride, { toggle: toggleId })\n    if (overrides.length > 0) {\n      em.remove(overrides)\n    }\n    const toggle = await em.findOne(FeatureToggle, { id: toggleId })\n    if (toggle) {\n      em.remove(toggle)\n      await em.flush()\n      const dataEngine = ctx.container.resolve('dataEngine') as DataEngine\n      await emitCrudUndoSideEffects({\n        dataEngine,\n        action: 'deleted',\n        entity: toggle,\n        identifiers: featureToggleIdentifiers(toggle),\n        syncOrigin: ctx.syncOrigin,\n        indexer: featureToggleCrudIndexer,\n      })\n      const featureTogglesService = ctx.container.resolve('featureTogglesService') as FeatureTogglesService\n      await featureTogglesService.invalidateIsEnabledCacheByIdentifierTag(toggle.identifier)\n    }\n  },\n  redo: async ({ logEntry, ctx }) => {\n    const after = resolveRedoSnapshot<ToggleSnapshot>(logEntry)\n    if (!after) throw new CrudHttpError(400, { error: '[internal] redo snapshot unavailable for toggle create' })\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n    let toggle = await em.findOne(FeatureToggle, { id: after.id })\n    if (!toggle) {\n      toggle = em.create(FeatureToggle, {\n        id: after.id,\n        identifier: after.identifier,\n        name: after.name,\n        description: after.description,\n        category: after.category,\n        type: after.type,\n        defaultValue: after.defaultValue,\n      })\n      em.persist(toggle)\n    } else {\n      toggle.deletedAt = null\n      toggle.identifier = after.identifier\n      toggle.name = after.name\n      toggle.description = after.description\n      toggle.category = after.category\n      toggle.type = after.type\n      toggle.defaultValue = after.defaultValue\n    }\n    await em.flush()\n    const dataEngine = ctx.container.resolve('dataEngine') as DataEngine\n    await emitCrudSideEffects({\n      dataEngine,\n      action: 'created',\n      entity: toggle,\n      identifiers: featureToggleIdentifiers(toggle),\n      syncOrigin: ctx.syncOrigin,\n      indexer: featureToggleCrudIndexer,\n    })\n    const featureTogglesService = ctx.container.resolve('featureTogglesService') as FeatureTogglesService\n    await featureTogglesService.invalidateIsEnabledCacheByIdentifierTag(toggle.identifier)\n    return { toggleId: toggle.id }\n  },\n}\n\nconst updateToggleCommand: CommandHandler<ToggleUpdateInput, { toggleId: string }> = {\n  id: 'feature_toggles.global.update',\n  async prepare(rawInput, ctx) {\n    const parsed = toggleUpdateSchema.parse(rawInput)\n    const em = (ctx.container.resolve('em') as EntityManager)\n    const snapshot = await loadToggleSnapshot(em, parsed.id)\n    return snapshot ? { before: snapshot } : {}\n  },\n  async execute(rawInput, ctx) {\n    assertGlobalToggleSuperAdmin(ctx)\n    const parsed = toggleUpdateSchema.parse(rawInput)\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n    const toggle = await em.findOne(FeatureToggle, { id: parsed.id, deletedAt: null })\n    if (!toggle) throw new CrudHttpError(404, { error: 'Toggle not found' })\n    enforceCommandOptimisticLock({\n      resourceKind: FEATURE_TOGGLE_LOCK_RESOURCE_KIND,\n      resourceId: toggle.id,\n      current: toggle.updatedAt ?? null,\n      request: ctx.request ?? null,\n    })\n    const previousIdentifier = toggle.identifier\n    if (parsed.identifier && parsed.identifier !== toggle.identifier) {\n      const existing = await em.findOne(FeatureToggle, { identifier: parsed.identifier })\n      if (existing && existing.id !== toggle.id) {\n        throw new CrudHttpError(400, { error: 'Feature toggle identifier already exists' })\n      }\n    }\n    toggle.identifier = parsed.identifier ?? toggle.identifier\n    toggle.name = parsed.name ?? toggle.name\n    toggle.description = parsed.description ?? toggle.description\n    toggle.category = parsed.category ?? toggle.category\n    toggle.type = parsed.type ?? toggle.type\n    toggle.defaultValue = parsed.defaultValue ?? toggle.defaultValue\n    await em.flush()\n    const dataEngine = ctx.container.resolve('dataEngine') as DataEngine\n    await emitCrudSideEffects({\n      dataEngine,\n      action: 'updated',\n      entity: toggle,\n      identifiers: featureToggleIdentifiers(toggle),\n      syncOrigin: ctx.syncOrigin,\n      indexer: featureToggleCrudIndexer,\n    })\n    const featureTogglesService = ctx.container.resolve('featureTogglesService') as FeatureTogglesService\n    if (previousIdentifier !== toggle.identifier) {\n      await featureTogglesService.invalidateIsEnabledCacheByIdentifierTag(previousIdentifier)\n    }\n    await featureTogglesService.invalidateIsEnabledCacheByIdentifierTag(toggle.identifier)\n    return { toggleId: toggle.id }\n  },\n  buildLog: async ({ snapshots, ctx }) => {\n    const { translate } = await resolveTranslations()\n    const before = snapshots.before as ToggleSnapshot | undefined\n    if (!before) return null\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n    const afterSnapshot = await loadToggleSnapshot(em, before.id)\n    const changes =\n      afterSnapshot && before\n        ? buildChanges(\n          before as unknown as Record<string, unknown>,\n          afterSnapshot as unknown as Record<string, unknown>,\n          [\n            'identifier',\n            'name',\n            'description',\n            'category',\n            'failMode',\n            'type',\n            'defaultValue',\n          ]\n        )\n        : {}\n\n    return {\n      actionLabel: translate('feature_toggles.audit.toggles.update', 'Update toggle'),\n      resourceKind: 'feature_toggles.global',\n      resourceId: before.id,\n      snapshotBefore: before,\n      snapshotAfter: afterSnapshot ?? null,\n      changes,\n      payload: {\n        undo: {\n          before,\n          after: afterSnapshot ?? null,\n        } satisfies ToggleUndoPayload,\n      },\n    }\n  },\n  undo: async ({ logEntry, ctx }) => {\n    const payload = extractUndoPayload<ToggleUndoPayload>(logEntry)\n    const before = payload?.before\n    if (!before) return\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n    let toggle = await em.findOne(FeatureToggle, { id: before.id })\n    if (!toggle) {\n      toggle = em.create(FeatureToggle, {\n        id: before.id,\n        identifier: before.identifier,\n        name: before.name,\n        description: before.description,\n        category: before.category,\n        type: before.type,\n        defaultValue: before.defaultValue,\n        createdAt: new Date(),\n        updatedAt: new Date(),\n      })\n      em.persist(toggle)\n    } else {\n      toggle.identifier = before.identifier\n      toggle.name = before.name\n      toggle.description = before.description\n      toggle.category = before.category\n      toggle.type = before.type\n      toggle.defaultValue = before.defaultValue\n      toggle.deletedAt = null\n    }\n    await em.flush()\n    const dataEngine = ctx.container.resolve('dataEngine') as DataEngine\n    await emitCrudUndoSideEffects({\n      dataEngine,\n      action: 'updated',\n      entity: toggle,\n      identifiers: featureToggleIdentifiers(toggle),\n      syncOrigin: ctx.syncOrigin,\n      indexer: featureToggleCrudIndexer,\n    })\n    const featureTogglesService = ctx.container.resolve('featureTogglesService') as FeatureTogglesService\n    await featureTogglesService.invalidateIsEnabledCacheByIdentifierTag(toggle.identifier)\n  }\n}\n\nconst deleteToggleCommand: CommandHandler<{ body?: Record<string, unknown>; query?: Record<string, unknown> }, { toggleId: string }> =\n{\n  id: 'feature_toggles.global.delete',\n  async prepare(input, ctx) {\n    const id = requireId(input, 'Feature toggle id required')\n    const em = (ctx.container.resolve('em') as EntityManager)\n    const snapshot = await loadToggleSnapshot(em, id)\n    const overrides = await loadOverrideSnapshots(em, id)\n    return snapshot ? { before: snapshot, overrides } : {}\n  },\n  async execute(input, ctx) {\n    assertGlobalToggleSuperAdmin(ctx)\n    const id = requireId(input, 'Feature toggle id required')\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n    const toggle = await em.findOne(FeatureToggle, { id, deletedAt: null })\n    if (!toggle) throw new CrudHttpError(404, { error: 'Feature toggle not found' })\n    enforceCommandOptimisticLock({\n      resourceKind: FEATURE_TOGGLE_LOCK_RESOURCE_KIND,\n      resourceId: toggle.id,\n      current: toggle.updatedAt ?? null,\n      request: ctx.request ?? null,\n    })\n    const featureTogglesService = ctx.container.resolve('featureTogglesService') as FeatureTogglesService\n    await featureTogglesService.invalidateIsEnabledCacheByIdentifierTag(toggle.identifier)\n\n    toggle.deletedAt = new Date()\n    await em.flush()\n    const dataEngine = ctx.container.resolve('dataEngine') as DataEngine\n    await emitCrudSideEffects({\n      dataEngine,\n      action: 'deleted',\n      entity: toggle,\n      identifiers: featureToggleIdentifiers(toggle),\n      syncOrigin: ctx.syncOrigin,\n      indexer: featureToggleCrudIndexer,\n    })\n\n    return { toggleId: toggle.id }\n  },\n  buildLog: async ({ snapshots }) => {\n    const before = snapshots.before as ToggleSnapshot | undefined\n    const overrides = (snapshots as any).overrides as OverrideSnapshot[] | undefined\n\n    if (!before) return null\n    const { translate } = await resolveTranslations()\n    return {\n      actionLabel: translate('feature_toggles.audit.toggles.delete', 'Delete toggle'),\n      resourceKind: 'feature_toggles.global',\n      resourceId: before.id,\n      snapshotBefore: before,\n      payload: {\n        undo: {\n          before,\n          overrides,\n        } satisfies ToggleUndoPayload,\n      },\n    }\n  },\n  undo: async ({ logEntry, ctx }) => {\n    const payload = extractUndoPayload<ToggleUndoPayload>(logEntry)\n    const before = payload?.before\n    const overrides = payload?.overrides || []\n\n    if (!before) return\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n    let toggle = await em.findOne(FeatureToggle, { id: before.id })\n    if (!toggle) {\n      toggle = em.create(FeatureToggle, {\n        id: before.id,\n        identifier: before.identifier,\n        name: before.name,\n        description: before.description,\n        category: before.category,\n        type: before.type,\n        defaultValue: before.defaultValue,\n        createdAt: new Date(),\n        updatedAt: new Date(),\n      })\n      em.persist(toggle)\n\n      for (const ov of overrides) {\n        const override = em.create(FeatureToggleOverride, {\n          id: ov.id,\n          toggle: toggle,\n          tenantId: ov.tenantId,\n          value: ov.value ?? null,\n        })\n        em.persist(override)\n      }\n    } else {\n      toggle.identifier = before.identifier\n      toggle.name = before.name\n      toggle.description = before.description\n      toggle.category = before.category\n      toggle.type = before.type\n      toggle.defaultValue = before.defaultValue\n      toggle.deletedAt = null\n    }\n    const featureTogglesService = ctx.container.resolve('featureTogglesService') as FeatureTogglesService\n    await featureTogglesService.invalidateIsEnabledCacheByIdentifierTag(toggle.identifier)\n    await em.flush()\n    const dataEngine = ctx.container.resolve('dataEngine') as DataEngine\n    await emitCrudUndoSideEffects({\n      dataEngine,\n      action: 'updated',\n      entity: toggle,\n      identifiers: featureToggleIdentifiers(toggle),\n      syncOrigin: ctx.syncOrigin,\n      indexer: featureToggleCrudIndexer,\n    })\n  },\n}\n\nregisterCommand(createToggleCommand)\nregisterCommand(updateToggleCommand)\nregisterCommand(deleteToggleCommand)\n"],
-  "mappings": "AAGA,SAAS,eAAe,6BAA6B;AACrD,SAA4B,oBAAuC,0BAA0B;AAC7F,SAAS,2BAA2B;AACpC,SAAS,uBAAuB;AAChC,SAAS,qBAAqB;AAC9B,SAAS,oCAAoC;AAC7C,SAAS,cAAc,qBAAqB,yBAAyB,iBAAiB;AACtF,SAAS,0BAA0B;AACnC,SAAS,2BAA2B;AAEpC,SAAS,SAAS;AAElB,SAAS,6BAA6B,KAAgF;AAMpH,MAAI,IAAI,gBAAgB,KAAM;AAC9B,MAAI,IAAI,MAAM,iBAAiB,MAAM;AACnC,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,uEAAuE,CAAC;AAAA,EAChH;AACF;AAyBA,MAAM,2BAA2B,EAAE,YAAY,EAAE,gBAAgB,eAAe;AAEhF,MAAM,oCAAoC;AAE1C,SAAS,yBAAyB,QAAwC;AACxE,SAAO;AAAA,IACL,IAAI,OAAO;AAAA,IACX,gBAAgB;AAAA,IAChB,UAAU;AAAA,EACZ;AACF;AAEA,eAAe,mBAAmB,IAAmB,IAA4C;AAC/F,QAAM,SAAS,MAAM,GAAG,QAAQ,eAAe,EAAE,GAAG,CAAC;AACrD,MAAI,CAAC,OAAQ,QAAO;AACpB,SAAO;AAAA,IACL,IAAI,OAAO;AAAA,IACX,YAAY,OAAO;AAAA,IACnB,MAAM,OAAO;AAAA,IACb,aAAa,OAAO,eAAe;AAAA,IACnC,UAAU,OAAO,YAAY;AAAA,IAC7B,MAAM,OAAO,QAAQ;AAAA,IACrB,cAAc,OAAO,gBAAgB;AAAA,EACvC;AACF;AAEA,eAAe,sBAAsB,IAAmB,UAA+C;AACrG,QAAM,YAAY,MAAM,GAAG,KAAK,uBAAuB,EAAE,QAAQ,SAAS,CAAC;AAC3E,SAAO,UAAU,IAAI,QAAM;AAAA,IACzB,IAAI,EAAE;AAAA,IACN,UAAU,EAAE,OAAO;AAAA,IACnB,UAAU,EAAE;AAAA,IACZ,OAAO,EAAE;AAAA,EACX,EAAE;AACJ;AAEA,MAAM,sBAA+E;AAAA,EACnF,IAAI;AAAA,EACJ,MAAM,QAAQ,UAAU,KAAK;AAC3B,iCAA6B,GAAG;AAChC,UAAM,SAAS,mBAAmB,MAAM,QAAQ;AAChD,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,UAAM,WAAW,MAAM,GAAG,QAAQ,eAAe,EAAE,YAAY,OAAO,WAAW,CAAC;AAClF,QAAI,UAAU;AACZ,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,2CAA2C,CAAC;AAAA,IACpF;AACA,UAAM,SAAS,GAAG,OAAO,eAAe;AAAA,MACtC,YAAY,OAAO;AAAA,MACnB,MAAM,OAAO;AAAA,MACb,aAAa,OAAO;AAAA,MACpB,UAAU,OAAO;AAAA,MACjB,MAAM,OAAO;AAAA,MACb,cAAc,OAAO;AAAA,IACvB,CAAC;AACD,OAAG,QAAQ,MAAM;AACjB,UAAM,GAAG,MAAM;AAEf,UAAM,aAAa,IAAI,UAAU,QAAQ,YAAY;AACrD,UAAM,oBAAoB;AAAA,MACxB;AAAA,MACA,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,aAAa,yBAAyB,MAAM;AAAA,MAC5C,YAAY,IAAI;AAAA,MAChB,SAAS;AAAA,IACX,CAAC;AAED,WAAO,EAAE,UAAU,OAAO,GAAG;AAAA,EAC/B;AAAA,EACA,cAAc,OAAO,QAAQ,QAAQ,QAAQ;AAC3C,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,WAAO,MAAM,mBAAmB,IAAI,OAAO,QAAQ;AAAA,EACrD;AAAA,EACA,UAAU,OAAO,EAAE,QAAQ,IAAI,MAAM;AACnC,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,UAAM,WAAW,MAAM,mBAAmB,IAAI,OAAO,QAAQ;AAC7D,WAAO;AAAA,MACL,aAAa,UAAU,wCAAwC,eAAe;AAAA,MAC9E,cAAc;AAAA,MACd,YAAY,OAAO;AAAA,MACnB,eAAe,YAAY;AAAA,MAC3B,SAAS;AAAA,QACP,MAAM;AAAA,UACJ,OAAO,YAAY;AAAA,QACrB;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA,MAAM,OAAO,EAAE,UAAU,IAAI,MAAM;AACjC,UAAM,WAAW,UAAU,cAAc;AACzC,QAAI,CAAC,SAAU;AACf,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,UAAM,YAAY,MAAM,GAAG,KAAK,uBAAuB,EAAE,QAAQ,SAAS,CAAC;AAC3E,QAAI,UAAU,SAAS,GAAG;AACxB,SAAG,OAAO,SAAS;AAAA,IACrB;AACA,UAAM,SAAS,MAAM,GAAG,QAAQ,eAAe,EAAE,IAAI,SAAS,CAAC;AAC/D,QAAI,QAAQ;AACV,SAAG,OAAO,MAAM;AAChB,YAAM,GAAG,MAAM;AACf,YAAM,aAAa,IAAI,UAAU,QAAQ,YAAY;AACrD,YAAM,wBAAwB;AAAA,QAC5B;AAAA,QACA,QAAQ;AAAA,QACR,QAAQ;AAAA,QACR,aAAa,yBAAyB,MAAM;AAAA,QAC5C,YAAY,IAAI;AAAA,QAChB,SAAS;AAAA,MACX,CAAC;AACD,YAAM,wBAAwB,IAAI,UAAU,QAAQ,uBAAuB;AAC3E,YAAM,sBAAsB,wCAAwC,OAAO,UAAU;AAAA,IACvF;AAAA,EACF;AAAA,EACA,MAAM,OAAO,EAAE,UAAU,IAAI,MAAM;AACjC,UAAM,QAAQ,oBAAoC,QAAQ;AAC1D,QAAI,CAAC,MAAO,OAAM,IAAI,cAAc,KAAK,EAAE,OAAO,yDAAyD,CAAC;AAC5G,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,QAAI,SAAS,MAAM,GAAG,QAAQ,eAAe,EAAE,IAAI,MAAM,GAAG,CAAC;AAC7D,QAAI,CAAC,QAAQ;AACX,eAAS,GAAG,OAAO,eAAe;AAAA,QAChC,IAAI,MAAM;AAAA,QACV,YAAY,MAAM;AAAA,QAClB,MAAM,MAAM;AAAA,QACZ,aAAa,MAAM;AAAA,QACnB,UAAU,MAAM;AAAA,QAChB,MAAM,MAAM;AAAA,QACZ,cAAc,MAAM;AAAA,MACtB,CAAC;AACD,SAAG,QAAQ,MAAM;AAAA,IACnB,OAAO;AACL,aAAO,YAAY;AACnB,aAAO,aAAa,MAAM;AAC1B,aAAO,OAAO,MAAM;AACpB,aAAO,cAAc,MAAM;AAC3B,aAAO,WAAW,MAAM;AACxB,aAAO,OAAO,MAAM;AACpB,aAAO,eAAe,MAAM;AAAA,IAC9B;AACA,UAAM,GAAG,MAAM;AACf,UAAM,aAAa,IAAI,UAAU,QAAQ,YAAY;AACrD,UAAM,oBAAoB;AAAA,MACxB;AAAA,MACA,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,aAAa,yBAAyB,MAAM;AAAA,MAC5C,YAAY,IAAI;AAAA,MAChB,SAAS;AAAA,IACX,CAAC;AACD,UAAM,wBAAwB,IAAI,UAAU,QAAQ,uBAAuB;AAC3E,UAAM,sBAAsB,wCAAwC,OAAO,UAAU;AACrF,WAAO,EAAE,UAAU,OAAO,GAAG;AAAA,EAC/B;AACF;AAEA,MAAM,sBAA+E;AAAA,EACnF,IAAI;AAAA,EACJ,MAAM,QAAQ,UAAU,KAAK;AAC3B,UAAM,SAAS,mBAAmB,MAAM,QAAQ;AAChD,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI;AACtC,UAAM,WAAW,MAAM,mBAAmB,IAAI,OAAO,EAAE;AACvD,WAAO,WAAW,EAAE,QAAQ,SAAS,IAAI,CAAC;AAAA,EAC5C;AAAA,EACA,MAAM,QAAQ,UAAU,KAAK;AAC3B,iCAA6B,GAAG;AAChC,UAAM,SAAS,mBAAmB,MAAM,QAAQ;AAChD,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,UAAM,SAAS,MAAM,GAAG,QAAQ,eAAe,EAAE,IAAI,OAAO,IAAI,WAAW,KAAK,CAAC;AACjF,QAAI,CAAC,OAAQ,OAAM,IAAI,cAAc,KAAK,EAAE,OAAO,mBAAmB,CAAC;AACvE,iCAA6B;AAAA,MAC3B,cAAc;AAAA,MACd,YAAY,OAAO;AAAA,MACnB,SAAS,OAAO,aAAa;AAAA,MAC7B,SAAS,IAAI,WAAW;AAAA,IAC1B,CAAC;AACD,UAAM,qBAAqB,OAAO;AAClC,QAAI,OAAO,cAAc,OAAO,eAAe,OAAO,YAAY;AAChE,YAAM,WAAW,MAAM,GAAG,QAAQ,eAAe,EAAE,YAAY,OAAO,WAAW,CAAC;AAClF,UAAI,YAAY,SAAS,OAAO,OAAO,IAAI;AACzC,cAAM,IAAI,cAAc,KAAK,EAAE,OAAO,2CAA2C,CAAC;AAAA,MACpF;AAAA,IACF;AACA,WAAO,aAAa,OAAO,cAAc,OAAO;AAChD,WAAO,OAAO,OAAO,QAAQ,OAAO;AACpC,WAAO,cAAc,OAAO,eAAe,OAAO;AAClD,WAAO,WAAW,OAAO,YAAY,OAAO;AAC5C,WAAO,OAAO,OAAO,QAAQ,OAAO;AACpC,WAAO,eAAe,OAAO,gBAAgB,OAAO;AACpD,UAAM,GAAG,MAAM;AACf,UAAM,aAAa,IAAI,UAAU,QAAQ,YAAY;AACrD,UAAM,oBAAoB;AAAA,MACxB;AAAA,MACA,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,aAAa,yBAAyB,MAAM;AAAA,MAC5C,YAAY,IAAI;AAAA,MAChB,SAAS;AAAA,IACX,CAAC;AACD,UAAM,wBAAwB,IAAI,UAAU,QAAQ,uBAAuB;AAC3E,QAAI,uBAAuB,OAAO,YAAY;AAC5C,YAAM,sBAAsB,wCAAwC,kBAAkB;AAAA,IACxF;AACA,UAAM,sBAAsB,wCAAwC,OAAO,UAAU;AACrF,WAAO,EAAE,UAAU,OAAO,GAAG;AAAA,EAC/B;AAAA,EACA,UAAU,OAAO,EAAE,WAAW,IAAI,MAAM;AACtC,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,UAAM,SAAS,UAAU;AACzB,QAAI,CAAC,OAAQ,QAAO;AACpB,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,UAAM,gBAAgB,MAAM,mBAAmB,IAAI,OAAO,EAAE;AAC5D,UAAM,UACJ,iBAAiB,SACb;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,QACE;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF,IACE,CAAC;AAEP,WAAO;AAAA,MACL,aAAa,UAAU,wCAAwC,eAAe;AAAA,MAC9E,cAAc;AAAA,MACd,YAAY,OAAO;AAAA,MACnB,gBAAgB;AAAA,MAChB,eAAe,iBAAiB;AAAA,MAChC;AAAA,MACA,SAAS;AAAA,QACP,MAAM;AAAA,UACJ;AAAA,UACA,OAAO,iBAAiB;AAAA,QAC1B;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA,MAAM,OAAO,EAAE,UAAU,IAAI,MAAM;AACjC,UAAM,UAAU,mBAAsC,QAAQ;AAC9D,UAAM,SAAS,SAAS;AACxB,QAAI,CAAC,OAAQ;AACb,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,QAAI,SAAS,MAAM,GAAG,QAAQ,eAAe,EAAE,IAAI,OAAO,GAAG,CAAC;AAC9D,QAAI,CAAC,QAAQ;AACX,eAAS,GAAG,OAAO,eAAe;AAAA,QAChC,IAAI,OAAO;AAAA,QACX,YAAY,OAAO;AAAA,QACnB,MAAM,OAAO;AAAA,QACb,aAAa,OAAO;AAAA,QACpB,UAAU,OAAO;AAAA,QACjB,MAAM,OAAO;AAAA,QACb,cAAc,OAAO;AAAA,QACrB,WAAW,oBAAI,KAAK;AAAA,QACpB,WAAW,oBAAI,KAAK;AAAA,MACtB,CAAC;AACD,SAAG,QAAQ,MAAM;AAAA,IACnB,OAAO;AACL,aAAO,aAAa,OAAO;AAC3B,aAAO,OAAO,OAAO;AACrB,aAAO,cAAc,OAAO;AAC5B,aAAO,WAAW,OAAO;AACzB,aAAO,OAAO,OAAO;AACrB,aAAO,eAAe,OAAO;AAC7B,aAAO,YAAY;AAAA,IACrB;AACA,UAAM,GAAG,MAAM;AACf,UAAM,aAAa,IAAI,UAAU,QAAQ,YAAY;AACrD,UAAM,wBAAwB;AAAA,MAC5B;AAAA,MACA,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,aAAa,yBAAyB,MAAM;AAAA,MAC5C,YAAY,IAAI;AAAA,MAChB,SAAS;AAAA,IACX,CAAC;AACD,UAAM,wBAAwB,IAAI,UAAU,QAAQ,uBAAuB;AAC3E,UAAM,sBAAsB,wCAAwC,OAAO,UAAU;AAAA,EACvF;AACF;AAEA,MAAM,sBACN;AAAA,EACE,IAAI;AAAA,EACJ,MAAM,QAAQ,OAAO,KAAK;AACxB,UAAM,KAAK,UAAU,OAAO,4BAA4B;AACxD,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI;AACtC,UAAM,WAAW,MAAM,mBAAmB,IAAI,EAAE;AAChD,UAAM,YAAY,MAAM,sBAAsB,IAAI,EAAE;AACpD,WAAO,WAAW,EAAE,QAAQ,UAAU,UAAU,IAAI,CAAC;AAAA,EACvD;AAAA,EACA,MAAM,QAAQ,OAAO,KAAK;AACxB,iCAA6B,GAAG;AAChC,UAAM,KAAK,UAAU,OAAO,4BAA4B;AACxD,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,UAAM,SAAS,MAAM,GAAG,QAAQ,eAAe,EAAE,IAAI,WAAW,KAAK,CAAC;AACtE,QAAI,CAAC,OAAQ,OAAM,IAAI,cAAc,KAAK,EAAE,OAAO,2BAA2B,CAAC;AAC/E,iCAA6B;AAAA,MAC3B,cAAc;AAAA,MACd,YAAY,OAAO;AAAA,MACnB,SAAS,OAAO,aAAa;AAAA,MAC7B,SAAS,IAAI,WAAW;AAAA,IAC1B,CAAC;AACD,UAAM,wBAAwB,IAAI,UAAU,QAAQ,uBAAuB;AAC3E,UAAM,sBAAsB,wCAAwC,OAAO,UAAU;AAErF,WAAO,YAAY,oBAAI,KAAK;AAC5B,UAAM,GAAG,MAAM;AACf,UAAM,aAAa,IAAI,UAAU,QAAQ,YAAY;AACrD,UAAM,oBAAoB;AAAA,MACxB;AAAA,MACA,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,aAAa,yBAAyB,MAAM;AAAA,MAC5C,YAAY,IAAI;AAAA,MAChB,SAAS;AAAA,IACX,CAAC;AAED,WAAO,EAAE,UAAU,OAAO,GAAG;AAAA,EAC/B;AAAA,EACA,UAAU,OAAO,EAAE,UAAU,MAAM;AACjC,UAAM,SAAS,UAAU;AACzB,UAAM,YAAa,UAAkB;AAErC,QAAI,CAAC,OAAQ,QAAO;AACpB,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,WAAO;AAAA,MACL,aAAa,UAAU,wCAAwC,eAAe;AAAA,MAC9E,cAAc;AAAA,MACd,YAAY,OAAO;AAAA,MACnB,gBAAgB;AAAA,MAChB,SAAS;AAAA,QACP,MAAM;AAAA,UACJ;AAAA,UACA;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA,MAAM,OAAO,EAAE,UAAU,IAAI,MAAM;AACjC,UAAM,UAAU,mBAAsC,QAAQ;AAC9D,UAAM,SAAS,SAAS;AACxB,UAAM,YAAY,SAAS,aAAa,CAAC;AAEzC,QAAI,CAAC,OAAQ;AACb,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,QAAI,SAAS,MAAM,GAAG,QAAQ,eAAe,EAAE,IAAI,OAAO,GAAG,CAAC;AAC9D,QAAI,CAAC,QAAQ;AACX,eAAS,GAAG,OAAO,eAAe;AAAA,QAChC,IAAI,OAAO;AAAA,QACX,YAAY,OAAO;AAAA,QACnB,MAAM,OAAO;AAAA,QACb,aAAa,OAAO;AAAA,QACpB,UAAU,OAAO;AAAA,QACjB,MAAM,OAAO;AAAA,QACb,cAAc,OAAO;AAAA,QACrB,WAAW,oBAAI,KAAK;AAAA,QACpB,WAAW,oBAAI,KAAK;AAAA,MACtB,CAAC;AACD,SAAG,QAAQ,MAAM;AAEjB,iBAAW,MAAM,WAAW;AAC1B,cAAM,WAAW,GAAG,OAAO,uBAAuB;AAAA,UAChD,IAAI,GAAG;AAAA,UACP;AAAA,UACA,UAAU,GAAG;AAAA,UACb,OAAO,GAAG,SAAS;AAAA,QACrB,CAAC;AACD,WAAG,QAAQ,QAAQ;AAAA,MACrB;AAAA,IACF,OAAO;AACL,aAAO,aAAa,OAAO;AAC3B,aAAO,OAAO,OAAO;AACrB,aAAO,cAAc,OAAO;AAC5B,aAAO,WAAW,OAAO;AACzB,aAAO,OAAO,OAAO;AACrB,aAAO,eAAe,OAAO;AAC7B,aAAO,YAAY;AAAA,IACrB;AACA,UAAM,wBAAwB,IAAI,UAAU,QAAQ,uBAAuB;AAC3E,UAAM,sBAAsB,wCAAwC,OAAO,UAAU;AACrF,UAAM,GAAG,MAAM;AACf,UAAM,aAAa,IAAI,UAAU,QAAQ,YAAY;AACrD,UAAM,wBAAwB;AAAA,MAC5B;AAAA,MACA,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,aAAa,yBAAyB,MAAM;AAAA,MAC5C,YAAY,IAAI;AAAA,MAChB,SAAS;AAAA,IACX,CAAC;AAAA,EACH;AACF;AAEA,gBAAgB,mBAAmB;AACnC,gBAAgB,mBAAmB;AACnC,gBAAgB,mBAAmB;",
+  "sourcesContent": ["import type { CommandHandler, CommandRuntimeContext } from '@open-mercato/shared/lib/commands'\nimport type { DataEngine } from '@open-mercato/shared/lib/data/engine'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { FeatureToggle, FeatureToggleOverride } from '../data/entities'\nimport { ToggleCreateInput, toggleCreateSchema, ToggleUpdateInput, toggleUpdateSchema } from '../data/validators'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { registerCommand } from '@open-mercato/shared/lib/commands'\nimport { CrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { enforceCommandOptimisticLock } from '@open-mercato/shared/lib/crud/optimistic-lock-command'\nimport { buildChanges, emitCrudSideEffects, emitCrudUndoSideEffects, requireId } from '@open-mercato/shared/lib/commands/helpers'\nimport { extractUndoPayload } from '@open-mercato/shared/lib/commands/undo'\nimport { resolveRedoSnapshot } from '@open-mercato/shared/lib/commands/redo'\nimport { FeatureTogglesService, isFeatureToggleCacheDisabled } from '../lib/feature-flag-check'\nimport { E } from '#generated/entities.ids.generated'\n\nfunction assertGlobalToggleSuperAdmin(ctx: { auth?: { [key: string]: unknown } | null; systemActor?: boolean }): void {\n  // Trusted server-side callers (CLI seed-defaults/toggle-*, tenant setup) run\n  // without an authenticated actor and opt in via `systemActor`. HTTP request\n  // paths never set it and always carry a real `auth` actor, so an authenticated\n  // but non-super-admin caller \u2014 the cross-tenant escalation vector (#2266) \u2014\n  // stays denied.\n  if (ctx.systemActor === true) return\n  if (ctx.auth?.isSuperAdmin !== true) {\n    throw new CrudHttpError(403, { error: 'Global feature toggles can only be managed by a super administrator.' })\n  }\n}\n\ntype ToggleSnapshot = {\n  id: string\n  identifier: string\n  name: string\n  description: string | null\n  category: string | null\n  type: 'boolean' | 'string' | 'number' | 'json'\n  defaultValue: any\n}\n\ntype OverrideSnapshot = {\n  id: string\n  toggleId: string\n  tenantId: string\n  value?: any\n}\n\ntype ToggleUndoPayload = {\n  after?: ToggleSnapshot | null\n  before?: ToggleSnapshot | null\n  overrides?: OverrideSnapshot[]\n}\n\nconst featureToggleCrudIndexer = { entityType: E.feature_toggles.feature_toggle }\n\nconst FEATURE_TOGGLE_LOCK_RESOURCE_KIND = 'feature_toggles.feature_toggle'\n\nasync function invalidateGlobalToggleCache(\n  ctx: Pick<CommandRuntimeContext, 'container'>,\n  identifier: string,\n): Promise<void> {\n  if (isFeatureToggleCacheDisabled()) return\n  const featureTogglesService = ctx.container.resolve('featureTogglesService') as FeatureTogglesService\n  await featureTogglesService.invalidateIsEnabledCacheByIdentifierTag(identifier)\n}\n\nfunction featureToggleIdentifiers(toggle: FeatureToggle | ToggleSnapshot) {\n  return {\n    id: toggle.id,\n    organizationId: null,\n    tenantId: null,\n  }\n}\n\nasync function loadToggleSnapshot(em: EntityManager, id: string): Promise<ToggleSnapshot | null> {\n  const toggle = await em.findOne(FeatureToggle, { id })\n  if (!toggle) return null\n  return {\n    id: toggle.id,\n    identifier: toggle.identifier,\n    name: toggle.name,\n    description: toggle.description ?? null,\n    category: toggle.category ?? null,\n    type: toggle.type ?? 'boolean',\n    defaultValue: toggle.defaultValue ?? null,\n  }\n}\n\nasync function loadOverrideSnapshots(em: EntityManager, toggleId: string): Promise<OverrideSnapshot[]> {\n  const overrides = await em.find(FeatureToggleOverride, { toggle: toggleId })\n  return overrides.map(o => ({\n    id: o.id,\n    toggleId: o.toggle.id,\n    tenantId: o.tenantId,\n    value: o.value,\n  }))\n}\n\nconst createToggleCommand: CommandHandler<ToggleCreateInput, { toggleId: string }> = {\n  id: 'feature_toggles.global.create',\n  async execute(rawInput, ctx) {\n    assertGlobalToggleSuperAdmin(ctx)\n    const parsed = toggleCreateSchema.parse(rawInput)\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n    const existing = await em.findOne(FeatureToggle, { identifier: parsed.identifier })\n    if (existing) {\n      throw new CrudHttpError(400, { error: 'Feature toggle identifier already exists' })\n    }\n    const toggle = em.create(FeatureToggle, {\n      identifier: parsed.identifier,\n      name: parsed.name,\n      description: parsed.description,\n      category: parsed.category,\n      type: parsed.type,\n      defaultValue: parsed.defaultValue,\n    })\n    em.persist(toggle)\n    await em.flush()\n\n    const dataEngine = ctx.container.resolve('dataEngine') as DataEngine\n    await emitCrudSideEffects({\n      dataEngine,\n      action: 'created',\n      entity: toggle,\n      identifiers: featureToggleIdentifiers(toggle),\n      syncOrigin: ctx.syncOrigin,\n      indexer: featureToggleCrudIndexer,\n    })\n\n    return { toggleId: toggle.id }\n  },\n  captureAfter: async (_input, result, ctx) => {\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n    return await loadToggleSnapshot(em, result.toggleId)\n  },\n  buildLog: async ({ result, ctx }) => {\n    const { translate } = await resolveTranslations()\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n    const snapshot = await loadToggleSnapshot(em, result.toggleId)\n    return {\n      actionLabel: translate('feature_toggles.audit.toggles.create', 'Create toggle'),\n      resourceKind: 'feature_toggles.global',\n      resourceId: result.toggleId,\n      snapshotAfter: snapshot ?? null,\n      payload: {\n        undo: {\n          after: snapshot ?? null,\n        } satisfies ToggleUndoPayload,\n      },\n    }\n  },\n  undo: async ({ logEntry, ctx }) => {\n    const toggleId = logEntry?.resourceId ?? null\n    if (!toggleId) return\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n    const overrides = await em.find(FeatureToggleOverride, { toggle: toggleId })\n    if (overrides.length > 0) {\n      em.remove(overrides)\n    }\n    const toggle = await em.findOne(FeatureToggle, { id: toggleId })\n    if (toggle) {\n      em.remove(toggle)\n      await em.flush()\n      const dataEngine = ctx.container.resolve('dataEngine') as DataEngine\n      await emitCrudUndoSideEffects({\n        dataEngine,\n        action: 'deleted',\n        entity: toggle,\n        identifiers: featureToggleIdentifiers(toggle),\n        syncOrigin: ctx.syncOrigin,\n        indexer: featureToggleCrudIndexer,\n      })\n      await invalidateGlobalToggleCache(ctx, toggle.identifier)\n    }\n  },\n  redo: async ({ logEntry, ctx }) => {\n    const after = resolveRedoSnapshot<ToggleSnapshot>(logEntry)\n    if (!after) throw new CrudHttpError(400, { error: '[internal] redo snapshot unavailable for toggle create' })\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n    let toggle = await em.findOne(FeatureToggle, { id: after.id })\n    if (!toggle) {\n      toggle = em.create(FeatureToggle, {\n        id: after.id,\n        identifier: after.identifier,\n        name: after.name,\n        description: after.description,\n        category: after.category,\n        type: after.type,\n        defaultValue: after.defaultValue,\n      })\n      em.persist(toggle)\n    } else {\n      toggle.deletedAt = null\n      toggle.identifier = after.identifier\n      toggle.name = after.name\n      toggle.description = after.description\n      toggle.category = after.category\n      toggle.type = after.type\n      toggle.defaultValue = after.defaultValue\n    }\n    await em.flush()\n    const dataEngine = ctx.container.resolve('dataEngine') as DataEngine\n    await emitCrudSideEffects({\n      dataEngine,\n      action: 'created',\n      entity: toggle,\n      identifiers: featureToggleIdentifiers(toggle),\n      syncOrigin: ctx.syncOrigin,\n      indexer: featureToggleCrudIndexer,\n    })\n    await invalidateGlobalToggleCache(ctx, toggle.identifier)\n    return { toggleId: toggle.id }\n  },\n}\n\nconst updateToggleCommand: CommandHandler<ToggleUpdateInput, { toggleId: string }> = {\n  id: 'feature_toggles.global.update',\n  async prepare(rawInput, ctx) {\n    const parsed = toggleUpdateSchema.parse(rawInput)\n    const em = (ctx.container.resolve('em') as EntityManager)\n    const snapshot = await loadToggleSnapshot(em, parsed.id)\n    return snapshot ? { before: snapshot } : {}\n  },\n  async execute(rawInput, ctx) {\n    assertGlobalToggleSuperAdmin(ctx)\n    const parsed = toggleUpdateSchema.parse(rawInput)\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n    const toggle = await em.findOne(FeatureToggle, { id: parsed.id, deletedAt: null })\n    if (!toggle) throw new CrudHttpError(404, { error: 'Toggle not found' })\n    enforceCommandOptimisticLock({\n      resourceKind: FEATURE_TOGGLE_LOCK_RESOURCE_KIND,\n      resourceId: toggle.id,\n      current: toggle.updatedAt ?? null,\n      request: ctx.request ?? null,\n    })\n    const previousIdentifier = toggle.identifier\n    if (parsed.identifier && parsed.identifier !== toggle.identifier) {\n      const existing = await em.findOne(FeatureToggle, { identifier: parsed.identifier })\n      if (existing && existing.id !== toggle.id) {\n        throw new CrudHttpError(400, { error: 'Feature toggle identifier already exists' })\n      }\n    }\n    toggle.identifier = parsed.identifier ?? toggle.identifier\n    toggle.name = parsed.name ?? toggle.name\n    toggle.description = parsed.description ?? toggle.description\n    toggle.category = parsed.category ?? toggle.category\n    toggle.type = parsed.type ?? toggle.type\n    toggle.defaultValue = parsed.defaultValue ?? toggle.defaultValue\n    await em.flush()\n    const dataEngine = ctx.container.resolve('dataEngine') as DataEngine\n    await emitCrudSideEffects({\n      dataEngine,\n      action: 'updated',\n      entity: toggle,\n      identifiers: featureToggleIdentifiers(toggle),\n      syncOrigin: ctx.syncOrigin,\n      indexer: featureToggleCrudIndexer,\n    })\n    if (previousIdentifier !== toggle.identifier) {\n      await invalidateGlobalToggleCache(ctx, previousIdentifier)\n    }\n    await invalidateGlobalToggleCache(ctx, toggle.identifier)\n    return { toggleId: toggle.id }\n  },\n  buildLog: async ({ snapshots, ctx }) => {\n    const { translate } = await resolveTranslations()\n    const before = snapshots.before as ToggleSnapshot | undefined\n    if (!before) return null\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n    const afterSnapshot = await loadToggleSnapshot(em, before.id)\n    const changes =\n      afterSnapshot && before\n        ? buildChanges(\n          before as unknown as Record<string, unknown>,\n          afterSnapshot as unknown as Record<string, unknown>,\n          [\n            'identifier',\n            'name',\n            'description',\n            'category',\n            'failMode',\n            'type',\n            'defaultValue',\n          ]\n        )\n        : {}\n\n    return {\n      actionLabel: translate('feature_toggles.audit.toggles.update', 'Update toggle'),\n      resourceKind: 'feature_toggles.global',\n      resourceId: before.id,\n      snapshotBefore: before,\n      snapshotAfter: afterSnapshot ?? null,\n      changes,\n      payload: {\n        undo: {\n          before,\n          after: afterSnapshot ?? null,\n        } satisfies ToggleUndoPayload,\n      },\n    }\n  },\n  undo: async ({ logEntry, ctx }) => {\n    const payload = extractUndoPayload<ToggleUndoPayload>(logEntry)\n    const before = payload?.before\n    if (!before) return\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n    let toggle = await em.findOne(FeatureToggle, { id: before.id })\n    if (!toggle) {\n      toggle = em.create(FeatureToggle, {\n        id: before.id,\n        identifier: before.identifier,\n        name: before.name,\n        description: before.description,\n        category: before.category,\n        type: before.type,\n        defaultValue: before.defaultValue,\n        createdAt: new Date(),\n        updatedAt: new Date(),\n      })\n      em.persist(toggle)\n    } else {\n      toggle.identifier = before.identifier\n      toggle.name = before.name\n      toggle.description = before.description\n      toggle.category = before.category\n      toggle.type = before.type\n      toggle.defaultValue = before.defaultValue\n      toggle.deletedAt = null\n    }\n    await em.flush()\n    const dataEngine = ctx.container.resolve('dataEngine') as DataEngine\n    await emitCrudUndoSideEffects({\n      dataEngine,\n      action: 'updated',\n      entity: toggle,\n      identifiers: featureToggleIdentifiers(toggle),\n      syncOrigin: ctx.syncOrigin,\n      indexer: featureToggleCrudIndexer,\n    })\n    await invalidateGlobalToggleCache(ctx, toggle.identifier)\n  }\n}\n\nconst deleteToggleCommand: CommandHandler<{ body?: Record<string, unknown>; query?: Record<string, unknown> }, { toggleId: string }> =\n{\n  id: 'feature_toggles.global.delete',\n  async prepare(input, ctx) {\n    const id = requireId(input, 'Feature toggle id required')\n    const em = (ctx.container.resolve('em') as EntityManager)\n    const snapshot = await loadToggleSnapshot(em, id)\n    const overrides = await loadOverrideSnapshots(em, id)\n    return snapshot ? { before: snapshot, overrides } : {}\n  },\n  async execute(input, ctx) {\n    assertGlobalToggleSuperAdmin(ctx)\n    const id = requireId(input, 'Feature toggle id required')\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n    const toggle = await em.findOne(FeatureToggle, { id, deletedAt: null })\n    if (!toggle) throw new CrudHttpError(404, { error: 'Feature toggle not found' })\n    enforceCommandOptimisticLock({\n      resourceKind: FEATURE_TOGGLE_LOCK_RESOURCE_KIND,\n      resourceId: toggle.id,\n      current: toggle.updatedAt ?? null,\n      request: ctx.request ?? null,\n    })\n    await invalidateGlobalToggleCache(ctx, toggle.identifier)\n\n    toggle.deletedAt = new Date()\n    await em.flush()\n    const dataEngine = ctx.container.resolve('dataEngine') as DataEngine\n    await emitCrudSideEffects({\n      dataEngine,\n      action: 'deleted',\n      entity: toggle,\n      identifiers: featureToggleIdentifiers(toggle),\n      syncOrigin: ctx.syncOrigin,\n      indexer: featureToggleCrudIndexer,\n    })\n\n    return { toggleId: toggle.id }\n  },\n  buildLog: async ({ snapshots }) => {\n    const before = snapshots.before as ToggleSnapshot | undefined\n    const overrides = (snapshots as any).overrides as OverrideSnapshot[] | undefined\n\n    if (!before) return null\n    const { translate } = await resolveTranslations()\n    return {\n      actionLabel: translate('feature_toggles.audit.toggles.delete', 'Delete toggle'),\n      resourceKind: 'feature_toggles.global',\n      resourceId: before.id,\n      snapshotBefore: before,\n      payload: {\n        undo: {\n          before,\n          overrides,\n        } satisfies ToggleUndoPayload,\n      },\n    }\n  },\n  undo: async ({ logEntry, ctx }) => {\n    const payload = extractUndoPayload<ToggleUndoPayload>(logEntry)\n    const before = payload?.before\n    const overrides = payload?.overrides || []\n\n    if (!before) return\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n    let toggle = await em.findOne(FeatureToggle, { id: before.id })\n    if (!toggle) {\n      toggle = em.create(FeatureToggle, {\n        id: before.id,\n        identifier: before.identifier,\n        name: before.name,\n        description: before.description,\n        category: before.category,\n        type: before.type,\n        defaultValue: before.defaultValue,\n        createdAt: new Date(),\n        updatedAt: new Date(),\n      })\n      em.persist(toggle)\n\n      for (const ov of overrides) {\n        const override = em.create(FeatureToggleOverride, {\n          id: ov.id,\n          toggle: toggle,\n          tenantId: ov.tenantId,\n          value: ov.value ?? null,\n        })\n        em.persist(override)\n      }\n    } else {\n      toggle.identifier = before.identifier\n      toggle.name = before.name\n      toggle.description = before.description\n      toggle.category = before.category\n      toggle.type = before.type\n      toggle.defaultValue = before.defaultValue\n      toggle.deletedAt = null\n    }\n    await invalidateGlobalToggleCache(ctx, toggle.identifier)\n    await em.flush()\n    const dataEngine = ctx.container.resolve('dataEngine') as DataEngine\n    await emitCrudUndoSideEffects({\n      dataEngine,\n      action: 'updated',\n      entity: toggle,\n      identifiers: featureToggleIdentifiers(toggle),\n      syncOrigin: ctx.syncOrigin,\n      indexer: featureToggleCrudIndexer,\n    })\n  },\n}\n\nregisterCommand(createToggleCommand)\nregisterCommand(updateToggleCommand)\nregisterCommand(deleteToggleCommand)\n"],
+  "mappings": "AAGA,SAAS,eAAe,6BAA6B;AACrD,SAA4B,oBAAuC,0BAA0B;AAC7F,SAAS,2BAA2B;AACpC,SAAS,uBAAuB;AAChC,SAAS,qBAAqB;AAC9B,SAAS,oCAAoC;AAC7C,SAAS,cAAc,qBAAqB,yBAAyB,iBAAiB;AACtF,SAAS,0BAA0B;AACnC,SAAS,2BAA2B;AACpC,SAAgC,oCAAoC;AACpE,SAAS,SAAS;AAElB,SAAS,6BAA6B,KAAgF;AAMpH,MAAI,IAAI,gBAAgB,KAAM;AAC9B,MAAI,IAAI,MAAM,iBAAiB,MAAM;AACnC,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,uEAAuE,CAAC;AAAA,EAChH;AACF;AAyBA,MAAM,2BAA2B,EAAE,YAAY,EAAE,gBAAgB,eAAe;AAEhF,MAAM,oCAAoC;AAE1C,eAAe,4BACb,KACA,YACe;AACf,MAAI,6BAA6B,EAAG;AACpC,QAAM,wBAAwB,IAAI,UAAU,QAAQ,uBAAuB;AAC3E,QAAM,sBAAsB,wCAAwC,UAAU;AAChF;AAEA,SAAS,yBAAyB,QAAwC;AACxE,SAAO;AAAA,IACL,IAAI,OAAO;AAAA,IACX,gBAAgB;AAAA,IAChB,UAAU;AAAA,EACZ;AACF;AAEA,eAAe,mBAAmB,IAAmB,IAA4C;AAC/F,QAAM,SAAS,MAAM,GAAG,QAAQ,eAAe,EAAE,GAAG,CAAC;AACrD,MAAI,CAAC,OAAQ,QAAO;AACpB,SAAO;AAAA,IACL,IAAI,OAAO;AAAA,IACX,YAAY,OAAO;AAAA,IACnB,MAAM,OAAO;AAAA,IACb,aAAa,OAAO,eAAe;AAAA,IACnC,UAAU,OAAO,YAAY;AAAA,IAC7B,MAAM,OAAO,QAAQ;AAAA,IACrB,cAAc,OAAO,gBAAgB;AAAA,EACvC;AACF;AAEA,eAAe,sBAAsB,IAAmB,UAA+C;AACrG,QAAM,YAAY,MAAM,GAAG,KAAK,uBAAuB,EAAE,QAAQ,SAAS,CAAC;AAC3E,SAAO,UAAU,IAAI,QAAM;AAAA,IACzB,IAAI,EAAE;AAAA,IACN,UAAU,EAAE,OAAO;AAAA,IACnB,UAAU,EAAE;AAAA,IACZ,OAAO,EAAE;AAAA,EACX,EAAE;AACJ;AAEA,MAAM,sBAA+E;AAAA,EACnF,IAAI;AAAA,EACJ,MAAM,QAAQ,UAAU,KAAK;AAC3B,iCAA6B,GAAG;AAChC,UAAM,SAAS,mBAAmB,MAAM,QAAQ;AAChD,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,UAAM,WAAW,MAAM,GAAG,QAAQ,eAAe,EAAE,YAAY,OAAO,WAAW,CAAC;AAClF,QAAI,UAAU;AACZ,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,2CAA2C,CAAC;AAAA,IACpF;AACA,UAAM,SAAS,GAAG,OAAO,eAAe;AAAA,MACtC,YAAY,OAAO;AAAA,MACnB,MAAM,OAAO;AAAA,MACb,aAAa,OAAO;AAAA,MACpB,UAAU,OAAO;AAAA,MACjB,MAAM,OAAO;AAAA,MACb,cAAc,OAAO;AAAA,IACvB,CAAC;AACD,OAAG,QAAQ,MAAM;AACjB,UAAM,GAAG,MAAM;AAEf,UAAM,aAAa,IAAI,UAAU,QAAQ,YAAY;AACrD,UAAM,oBAAoB;AAAA,MACxB;AAAA,MACA,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,aAAa,yBAAyB,MAAM;AAAA,MAC5C,YAAY,IAAI;AAAA,MAChB,SAAS;AAAA,IACX,CAAC;AAED,WAAO,EAAE,UAAU,OAAO,GAAG;AAAA,EAC/B;AAAA,EACA,cAAc,OAAO,QAAQ,QAAQ,QAAQ;AAC3C,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,WAAO,MAAM,mBAAmB,IAAI,OAAO,QAAQ;AAAA,EACrD;AAAA,EACA,UAAU,OAAO,EAAE,QAAQ,IAAI,MAAM;AACnC,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,UAAM,WAAW,MAAM,mBAAmB,IAAI,OAAO,QAAQ;AAC7D,WAAO;AAAA,MACL,aAAa,UAAU,wCAAwC,eAAe;AAAA,MAC9E,cAAc;AAAA,MACd,YAAY,OAAO;AAAA,MACnB,eAAe,YAAY;AAAA,MAC3B,SAAS;AAAA,QACP,MAAM;AAAA,UACJ,OAAO,YAAY;AAAA,QACrB;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA,MAAM,OAAO,EAAE,UAAU,IAAI,MAAM;AACjC,UAAM,WAAW,UAAU,cAAc;AACzC,QAAI,CAAC,SAAU;AACf,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,UAAM,YAAY,MAAM,GAAG,KAAK,uBAAuB,EAAE,QAAQ,SAAS,CAAC;AAC3E,QAAI,UAAU,SAAS,GAAG;AACxB,SAAG,OAAO,SAAS;AAAA,IACrB;AACA,UAAM,SAAS,MAAM,GAAG,QAAQ,eAAe,EAAE,IAAI,SAAS,CAAC;AAC/D,QAAI,QAAQ;AACV,SAAG,OAAO,MAAM;AAChB,YAAM,GAAG,MAAM;AACf,YAAM,aAAa,IAAI,UAAU,QAAQ,YAAY;AACrD,YAAM,wBAAwB;AAAA,QAC5B;AAAA,QACA,QAAQ;AAAA,QACR,QAAQ;AAAA,QACR,aAAa,yBAAyB,MAAM;AAAA,QAC5C,YAAY,IAAI;AAAA,QAChB,SAAS;AAAA,MACX,CAAC;AACD,YAAM,4BAA4B,KAAK,OAAO,UAAU;AAAA,IAC1D;AAAA,EACF;AAAA,EACA,MAAM,OAAO,EAAE,UAAU,IAAI,MAAM;AACjC,UAAM,QAAQ,oBAAoC,QAAQ;AAC1D,QAAI,CAAC,MAAO,OAAM,IAAI,cAAc,KAAK,EAAE,OAAO,yDAAyD,CAAC;AAC5G,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,QAAI,SAAS,MAAM,GAAG,QAAQ,eAAe,EAAE,IAAI,MAAM,GAAG,CAAC;AAC7D,QAAI,CAAC,QAAQ;AACX,eAAS,GAAG,OAAO,eAAe;AAAA,QAChC,IAAI,MAAM;AAAA,QACV,YAAY,MAAM;AAAA,QAClB,MAAM,MAAM;AAAA,QACZ,aAAa,MAAM;AAAA,QACnB,UAAU,MAAM;AAAA,QAChB,MAAM,MAAM;AAAA,QACZ,cAAc,MAAM;AAAA,MACtB,CAAC;AACD,SAAG,QAAQ,MAAM;AAAA,IACnB,OAAO;AACL,aAAO,YAAY;AACnB,aAAO,aAAa,MAAM;AAC1B,aAAO,OAAO,MAAM;AACpB,aAAO,cAAc,MAAM;AAC3B,aAAO,WAAW,MAAM;AACxB,aAAO,OAAO,MAAM;AACpB,aAAO,eAAe,MAAM;AAAA,IAC9B;AACA,UAAM,GAAG,MAAM;AACf,UAAM,aAAa,IAAI,UAAU,QAAQ,YAAY;AACrD,UAAM,oBAAoB;AAAA,MACxB;AAAA,MACA,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,aAAa,yBAAyB,MAAM;AAAA,MAC5C,YAAY,IAAI;AAAA,MAChB,SAAS;AAAA,IACX,CAAC;AACD,UAAM,4BAA4B,KAAK,OAAO,UAAU;AACxD,WAAO,EAAE,UAAU,OAAO,GAAG;AAAA,EAC/B;AACF;AAEA,MAAM,sBAA+E;AAAA,EACnF,IAAI;AAAA,EACJ,MAAM,QAAQ,UAAU,KAAK;AAC3B,UAAM,SAAS,mBAAmB,MAAM,QAAQ;AAChD,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI;AACtC,UAAM,WAAW,MAAM,mBAAmB,IAAI,OAAO,EAAE;AACvD,WAAO,WAAW,EAAE,QAAQ,SAAS,IAAI,CAAC;AAAA,EAC5C;AAAA,EACA,MAAM,QAAQ,UAAU,KAAK;AAC3B,iCAA6B,GAAG;AAChC,UAAM,SAAS,mBAAmB,MAAM,QAAQ;AAChD,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,UAAM,SAAS,MAAM,GAAG,QAAQ,eAAe,EAAE,IAAI,OAAO,IAAI,WAAW,KAAK,CAAC;AACjF,QAAI,CAAC,OAAQ,OAAM,IAAI,cAAc,KAAK,EAAE,OAAO,mBAAmB,CAAC;AACvE,iCAA6B;AAAA,MAC3B,cAAc;AAAA,MACd,YAAY,OAAO;AAAA,MACnB,SAAS,OAAO,aAAa;AAAA,MAC7B,SAAS,IAAI,WAAW;AAAA,IAC1B,CAAC;AACD,UAAM,qBAAqB,OAAO;AAClC,QAAI,OAAO,cAAc,OAAO,eAAe,OAAO,YAAY;AAChE,YAAM,WAAW,MAAM,GAAG,QAAQ,eAAe,EAAE,YAAY,OAAO,WAAW,CAAC;AAClF,UAAI,YAAY,SAAS,OAAO,OAAO,IAAI;AACzC,cAAM,IAAI,cAAc,KAAK,EAAE,OAAO,2CAA2C,CAAC;AAAA,MACpF;AAAA,IACF;AACA,WAAO,aAAa,OAAO,cAAc,OAAO;AAChD,WAAO,OAAO,OAAO,QAAQ,OAAO;AACpC,WAAO,cAAc,OAAO,eAAe,OAAO;AAClD,WAAO,WAAW,OAAO,YAAY,OAAO;AAC5C,WAAO,OAAO,OAAO,QAAQ,OAAO;AACpC,WAAO,eAAe,OAAO,gBAAgB,OAAO;AACpD,UAAM,GAAG,MAAM;AACf,UAAM,aAAa,IAAI,UAAU,QAAQ,YAAY;AACrD,UAAM,oBAAoB;AAAA,MACxB;AAAA,MACA,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,aAAa,yBAAyB,MAAM;AAAA,MAC5C,YAAY,IAAI;AAAA,MAChB,SAAS;AAAA,IACX,CAAC;AACD,QAAI,uBAAuB,OAAO,YAAY;AAC5C,YAAM,4BAA4B,KAAK,kBAAkB;AAAA,IAC3D;AACA,UAAM,4BAA4B,KAAK,OAAO,UAAU;AACxD,WAAO,EAAE,UAAU,OAAO,GAAG;AAAA,EAC/B;AAAA,EACA,UAAU,OAAO,EAAE,WAAW,IAAI,MAAM;AACtC,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,UAAM,SAAS,UAAU;AACzB,QAAI,CAAC,OAAQ,QAAO;AACpB,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,UAAM,gBAAgB,MAAM,mBAAmB,IAAI,OAAO,EAAE;AAC5D,UAAM,UACJ,iBAAiB,SACb;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,QACE;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF,IACE,CAAC;AAEP,WAAO;AAAA,MACL,aAAa,UAAU,wCAAwC,eAAe;AAAA,MAC9E,cAAc;AAAA,MACd,YAAY,OAAO;AAAA,MACnB,gBAAgB;AAAA,MAChB,eAAe,iBAAiB;AAAA,MAChC;AAAA,MACA,SAAS;AAAA,QACP,MAAM;AAAA,UACJ;AAAA,UACA,OAAO,iBAAiB;AAAA,QAC1B;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA,MAAM,OAAO,EAAE,UAAU,IAAI,MAAM;AACjC,UAAM,UAAU,mBAAsC,QAAQ;AAC9D,UAAM,SAAS,SAAS;AACxB,QAAI,CAAC,OAAQ;AACb,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,QAAI,SAAS,MAAM,GAAG,QAAQ,eAAe,EAAE,IAAI,OAAO,GAAG,CAAC;AAC9D,QAAI,CAAC,QAAQ;AACX,eAAS,GAAG,OAAO,eAAe;AAAA,QAChC,IAAI,OAAO;AAAA,QACX,YAAY,OAAO;AAAA,QACnB,MAAM,OAAO;AAAA,QACb,aAAa,OAAO;AAAA,QACpB,UAAU,OAAO;AAAA,QACjB,MAAM,OAAO;AAAA,QACb,cAAc,OAAO;AAAA,QACrB,WAAW,oBAAI,KAAK;AAAA,QACpB,WAAW,oBAAI,KAAK;AAAA,MACtB,CAAC;AACD,SAAG,QAAQ,MAAM;AAAA,IACnB,OAAO;AACL,aAAO,aAAa,OAAO;AAC3B,aAAO,OAAO,OAAO;AACrB,aAAO,cAAc,OAAO;AAC5B,aAAO,WAAW,OAAO;AACzB,aAAO,OAAO,OAAO;AACrB,aAAO,eAAe,OAAO;AAC7B,aAAO,YAAY;AAAA,IACrB;AACA,UAAM,GAAG,MAAM;AACf,UAAM,aAAa,IAAI,UAAU,QAAQ,YAAY;AACrD,UAAM,wBAAwB;AAAA,MAC5B;AAAA,MACA,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,aAAa,yBAAyB,MAAM;AAAA,MAC5C,YAAY,IAAI;AAAA,MAChB,SAAS;AAAA,IACX,CAAC;AACD,UAAM,4BAA4B,KAAK,OAAO,UAAU;AAAA,EAC1D;AACF;AAEA,MAAM,sBACN;AAAA,EACE,IAAI;AAAA,EACJ,MAAM,QAAQ,OAAO,KAAK;AACxB,UAAM,KAAK,UAAU,OAAO,4BAA4B;AACxD,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI;AACtC,UAAM,WAAW,MAAM,mBAAmB,IAAI,EAAE;AAChD,UAAM,YAAY,MAAM,sBAAsB,IAAI,EAAE;AACpD,WAAO,WAAW,EAAE,QAAQ,UAAU,UAAU,IAAI,CAAC;AAAA,EACvD;AAAA,EACA,MAAM,QAAQ,OAAO,KAAK;AACxB,iCAA6B,GAAG;AAChC,UAAM,KAAK,UAAU,OAAO,4BAA4B;AACxD,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,UAAM,SAAS,MAAM,GAAG,QAAQ,eAAe,EAAE,IAAI,WAAW,KAAK,CAAC;AACtE,QAAI,CAAC,OAAQ,OAAM,IAAI,cAAc,KAAK,EAAE,OAAO,2BAA2B,CAAC;AAC/E,iCAA6B;AAAA,MAC3B,cAAc;AAAA,MACd,YAAY,OAAO;AAAA,MACnB,SAAS,OAAO,aAAa;AAAA,MAC7B,SAAS,IAAI,WAAW;AAAA,IAC1B,CAAC;AACD,UAAM,4BAA4B,KAAK,OAAO,UAAU;AAExD,WAAO,YAAY,oBAAI,KAAK;AAC5B,UAAM,GAAG,MAAM;AACf,UAAM,aAAa,IAAI,UAAU,QAAQ,YAAY;AACrD,UAAM,oBAAoB;AAAA,MACxB;AAAA,MACA,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,aAAa,yBAAyB,MAAM;AAAA,MAC5C,YAAY,IAAI;AAAA,MAChB,SAAS;AAAA,IACX,CAAC;AAED,WAAO,EAAE,UAAU,OAAO,GAAG;AAAA,EAC/B;AAAA,EACA,UAAU,OAAO,EAAE,UAAU,MAAM;AACjC,UAAM,SAAS,UAAU;AACzB,UAAM,YAAa,UAAkB;AAErC,QAAI,CAAC,OAAQ,QAAO;AACpB,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,WAAO;AAAA,MACL,aAAa,UAAU,wCAAwC,eAAe;AAAA,MAC9E,cAAc;AAAA,MACd,YAAY,OAAO;AAAA,MACnB,gBAAgB;AAAA,MAChB,SAAS;AAAA,QACP,MAAM;AAAA,UACJ;AAAA,UACA;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA,MAAM,OAAO,EAAE,UAAU,IAAI,MAAM;AACjC,UAAM,UAAU,mBAAsC,QAAQ;AAC9D,UAAM,SAAS,SAAS;AACxB,UAAM,YAAY,SAAS,aAAa,CAAC;AAEzC,QAAI,CAAC,OAAQ;AACb,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,QAAI,SAAS,MAAM,GAAG,QAAQ,eAAe,EAAE,IAAI,OAAO,GAAG,CAAC;AAC9D,QAAI,CAAC,QAAQ;AACX,eAAS,GAAG,OAAO,eAAe;AAAA,QAChC,IAAI,OAAO;AAAA,QACX,YAAY,OAAO;AAAA,QACnB,MAAM,OAAO;AAAA,QACb,aAAa,OAAO;AAAA,QACpB,UAAU,OAAO;AAAA,QACjB,MAAM,OAAO;AAAA,QACb,cAAc,OAAO;AAAA,QACrB,WAAW,oBAAI,KAAK;AAAA,QACpB,WAAW,oBAAI,KAAK;AAAA,MACtB,CAAC;AACD,SAAG,QAAQ,MAAM;AAEjB,iBAAW,MAAM,WAAW;AAC1B,cAAM,WAAW,GAAG,OAAO,uBAAuB;AAAA,UAChD,IAAI,GAAG;AAAA,UACP;AAAA,UACA,UAAU,GAAG;AAAA,UACb,OAAO,GAAG,SAAS;AAAA,QACrB,CAAC;AACD,WAAG,QAAQ,QAAQ;AAAA,MACrB;AAAA,IACF,OAAO;AACL,aAAO,aAAa,OAAO;AAC3B,aAAO,OAAO,OAAO;AACrB,aAAO,cAAc,OAAO;AAC5B,aAAO,WAAW,OAAO;AACzB,aAAO,OAAO,OAAO;AACrB,aAAO,eAAe,OAAO;AAC7B,aAAO,YAAY;AAAA,IACrB;AACA,UAAM,4BAA4B,KAAK,OAAO,UAAU;AACxD,UAAM,GAAG,MAAM;AACf,UAAM,aAAa,IAAI,UAAU,QAAQ,YAAY;AACrD,UAAM,wBAAwB;AAAA,MAC5B;AAAA,MACA,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,aAAa,yBAAyB,MAAM;AAAA,MAC5C,YAAY,IAAI;AAAA,MAChB,SAAS;AAAA,IACX,CAAC;AAAA,EACH;AACF;AAEA,gBAAgB,mBAAmB;AACnC,gBAAgB,mBAAmB;AACnC,gBAAgB,mBAAmB;",
   "names": []
 }

package/dist/modules/feature_toggles/lib/feature-flag-check.js

@@ -17,6 +17,9 @@ const getTenantTag = (tenantId) => `feature_toggles:tenant:${tenantId}`;
 const getCacheTags = (identifier, tenantId) => {
   return [getIdentifierTag(identifier), getTenantTag(tenantId)];
 };
+function isFeatureToggleCacheDisabled() {
+  return process.env.OM_FEATURE_TOGGLES_CACHE_DISABLED === "1" || process.env.OM_FEATURE_TOGGLES_CACHE_DISABLED === "true";
+}
 class FeatureTogglesService {
   constructor(cache, em) {
     this.cache = cache;
@@ -27,7 +30,7 @@ class FeatureTogglesService {
     // overrides rapidly between cases). The 1-minute TTL is a production
     // optimization; under fast flag churn it can serve a stale value across
     // override set/clear despite invalidation, so tests opt out for determinism.
-    this.cacheDisabled = process.env.OM_FEATURE_TOGGLES_CACHE_DISABLED === "1" || process.env.OM_FEATURE_TOGGLES_CACHE_DISABLED === "true";
+    this.cacheDisabled = isFeatureToggleCacheDisabled();
   }
   async saveCache(identifier, tenantId, result) {
     if (this.cacheDisabled) return;
@@ -73,9 +76,11 @@ class FeatureTogglesService {
     return result;
   }
   async invalidateIsEnabledCacheByIdentifierTag(identifier) {
+    if (this.cacheDisabled) return;
     await this.cache.deleteByTags([getIdentifierTag(identifier)]);
   }
   async invalidateIsEnabledCacheByKey(identifier, tenantId) {
+    if (this.cacheDisabled) return;
     await runWithCacheTenant(tenantId, () => this.cache.delete(getIsEnabledCacheKey(identifier, tenantId)));
   }
   async getFeatureToggleValue(identifier, ctx) {
@@ -147,6 +152,7 @@ class FeatureTogglesService {
 }
 export {
   FeatureTogglesService,
-  getIsEnabledCacheKey
+  getIsEnabledCacheKey,
+  isFeatureToggleCacheDisabled
 };
 //# sourceMappingURL=feature-flag-check.js.map

package/dist/modules/feature_toggles/lib/feature-flag-check.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/feature_toggles/lib/feature-flag-check.ts"],
-  "sourcesContent": ["import { FeatureToggle, FeatureToggleOverride } from \"../data/entities\"\nimport { EntityManager } from \"@mikro-orm/core\"\nimport { CacheService, runWithCacheTenant } from \"@open-mercato/cache\"\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('feature_toggles').child({ component: 'flag-check' })\n\ntype ToggleValueType = \"boolean\" | \"string\" | \"number\" | \"json\"\n\ntype ToggleResolutionSource = \"override\" | \"default\" | \"missing\"\n\ntype ToggleResolutionResult = {\n  valueType: ToggleValueType\n  value: boolean | string | number | unknown | null\n  source: ToggleResolutionSource\n  toggleId: string\n  identifier: string\n  tenantId: string\n}\n\ntype ToggleErrorCode = \"TYPE_MISMATCH\" | \"MISSING_TOGGLE\" | \"INVALID_VALUE\"\n\ntype ToggleError = {\n  code: ToggleErrorCode\n  message: string\n  identifier: string\n  expectedType: ToggleValueType\n  actualType?: ToggleValueType\n  source?: ToggleResolutionSource\n}\n\ntype ResultOk<T> = { ok: true; value: T; resolution: ToggleResolutionResult }\ntype ResultErr = { ok: false; error: ToggleError; resolution: ToggleResolutionResult }\nexport type Result<T> = ResultOk<T> | ResultErr\n\ntype ResolutionContext = {\n  tenantId: string\n  valueType: ToggleValueType\n}\n\nconst toCachedResolution = (value: unknown): ToggleResolutionResult | null => {\n  if (typeof value !== \"object\" || value === null) return null\n  const record = value as Partial<ToggleResolutionResult>\n  if (\n    !record.valueType ||\n    typeof record.source !== \"string\" ||\n    !record.toggleId ||\n    !record.identifier ||\n    !record.tenantId\n  )\n    return null\n  return value as ToggleResolutionResult\n}\n\nexport const getIsEnabledCacheKey = (identifier: string, tenantId: string) => {\n  return `feature_toggles:resolution:${identifier}:${tenantId}`\n}\n\nconst getIdentifierTag = (identifier: string) => `feature_toggles:identifier:${identifier}`\nconst getTenantTag = (tenantId: string) => `feature_toggles:tenant:${tenantId}`\n\nconst getCacheTags = (identifier: string, tenantId: string) => {\n  return [getIdentifierTag(identifier), getTenantTag(tenantId)]\n}\n\nexport class FeatureTogglesService {\n  private cacheTtlMs: number = 1 * 60 * 1000 // 1 minute\n  // Resolution cache can be disabled via env (e.g. integration tests that flip\n  // overrides rapidly between cases). The 1-minute TTL is a production\n  // optimization; under fast flag churn it can serve a stale value across\n  // override set/clear despite invalidation, so tests opt out for determinism.\n  private readonly cacheDisabled: boolean =\n    process.env.OM_FEATURE_TOGGLES_CACHE_DISABLED === '1' ||\n    process.env.OM_FEATURE_TOGGLES_CACHE_DISABLED === 'true'\n  constructor(\n    private readonly cache: CacheService,\n    private readonly em: EntityManager\n  ) { }\n\n  private async saveCache(\n    identifier: string,\n    tenantId: string,\n    result: ToggleResolutionResult,\n  ) {\n    if (this.cacheDisabled) return\n    const key = getIsEnabledCacheKey(identifier, tenantId)\n    await runWithCacheTenant(\n      tenantId,\n      () => this.cache.set(key, result, { ttl: this.cacheTtlMs, tags: getCacheTags(identifier, tenantId) }),\n    )\n  }\n\n  private async resolveToggle(identifier: string, tenantId: string): Promise<ToggleResolutionResult> {\n    const key = getIsEnabledCacheKey(identifier, tenantId)\n\n    if (!this.cacheDisabled) {\n      const cached = await runWithCacheTenant(tenantId, () => this.cache.get(key))\n      if (cached) {\n        const parsed = toCachedResolution(cached)\n        if (parsed) return parsed\n      }\n    }\n\n    let toggle: FeatureToggle | null = null\n    toggle = await this.em.findOne(FeatureToggle, { identifier, deletedAt: null })\n\n    if (!toggle) {\n      const result: ToggleResolutionResult = {\n        valueType: \"boolean\",\n        value: null,\n        source: \"missing\",\n        toggleId: \"\",\n        identifier,\n        tenantId,\n      }\n      return result\n    }\n\n    let override: FeatureToggleOverride | null = null\n    override = await this.em.findOne(FeatureToggleOverride, { toggle: toggle.id, tenantId })\n\n\n    const result: ToggleResolutionResult = {\n      valueType: toggle.type,\n      value: override ? override.value : toggle.defaultValue,\n      source: override ? \"override\" : \"default\",\n      toggleId: toggle.id,\n      identifier: toggle.identifier,\n      tenantId,\n    }\n\n    await this.saveCache(identifier, tenantId, result)\n    return result\n  }\n\n  public async invalidateIsEnabledCacheByIdentifierTag(identifier: string) {\n    await this.cache.deleteByTags([getIdentifierTag(identifier)])\n  }\n\n  public async invalidateIsEnabledCacheByKey(identifier: string, tenantId: string) {\n    await runWithCacheTenant(tenantId, () => this.cache.delete(getIsEnabledCacheKey(identifier, tenantId)))\n  }\n\n  public async getFeatureToggleValue<T>(\n    identifier: string,\n    ctx: ResolutionContext\n  ): Promise<Result<T>> {\n    const resolution = await this.resolveToggle(identifier, ctx.tenantId)\n\n    if (resolution.source === \"missing\") {\n      logger.warn('Toggle not found', { identifier })\n      return {\n        ok: false,\n        error: {\n          code: \"MISSING_TOGGLE\",\n          message: `Toggle \"${identifier}\" not found (missing).`,\n          identifier,\n          expectedType: ctx.valueType,\n          actualType: resolution.valueType,\n          source: resolution.source,\n        },\n        resolution,\n      }\n    }\n\n\n\n    if (resolution.valueType !== ctx.valueType) {\n      logger.error('Toggle type mismatch', { identifier, expectedType: ctx.valueType, actualType: resolution.valueType, resolution })\n      return {\n        ok: false,\n        error: {\n          code: \"TYPE_MISMATCH\",\n          message: `Toggle \"${identifier}\" has type \"${resolution.valueType}\" but \"${ctx.valueType}\" was requested.`,\n          identifier,\n          expectedType: ctx.valueType,\n          actualType: resolution.valueType,\n          source: resolution.source,\n        },\n        resolution,\n      }\n    }\n\n    const isValueValid =\n      (ctx.valueType === \"boolean\" && typeof resolution.value === \"boolean\") ||\n      (ctx.valueType === \"string\" && typeof resolution.value === \"string\") ||\n      (ctx.valueType === \"number\" && typeof resolution.value === \"number\") ||\n      (ctx.valueType === \"json\")\n\n    if (!isValueValid) {\n      logger.error('Toggle has invalid value for type', { identifier, valueType: resolution.valueType, resolution })\n      return {\n        ok: false,\n        error: {\n          code: \"INVALID_VALUE\",\n          message: `Toggle \"${identifier}\" has invalid value for type \"${resolution.valueType}\".`,\n          identifier,\n          expectedType: ctx.valueType,\n          actualType: resolution.valueType,\n          source: resolution.source,\n        },\n        resolution,\n      }\n    }\n\n    return {\n      ok: true,\n      value: resolution.value as T,\n      resolution,\n    }\n  }\n\n  public async getBoolConfig(identifier: string, tenantId: string) {\n    return this.getFeatureToggleValue<boolean>(identifier, { tenantId, valueType: \"boolean\" })\n  }\n\n  public async getNumberConfig(identifier: string, tenantId: string) {\n    return this.getFeatureToggleValue<number>(identifier, { tenantId, valueType: \"number\" })\n  }\n\n  public async getStringConfig(identifier: string, tenantId: string) {\n    return this.getFeatureToggleValue<string>(identifier, { tenantId, valueType: \"string\" })\n  }\n\n  public async getJsonConfig<T = unknown>(identifier: string, tenantId: string) {\n    return this.getFeatureToggleValue<T>(identifier, { tenantId, valueType: \"json\" })\n  }\n}\n"],
-  "mappings": "AAAA,SAAS,eAAe,6BAA6B;AAErD,SAAuB,0BAA0B;AACjD,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,iBAAiB,EAAE,MAAM,EAAE,WAAW,aAAa,CAAC;AAmChF,MAAM,qBAAqB,CAAC,UAAkD;AAC5E,MAAI,OAAO,UAAU,YAAY,UAAU,KAAM,QAAO;AACxD,QAAM,SAAS;AACf,MACE,CAAC,OAAO,aACR,OAAO,OAAO,WAAW,YACzB,CAAC,OAAO,YACR,CAAC,OAAO,cACR,CAAC,OAAO;AAER,WAAO;AACT,SAAO;AACT;AAEO,MAAM,uBAAuB,CAAC,YAAoB,aAAqB;AAC5E,SAAO,8BAA8B,UAAU,IAAI,QAAQ;AAC7D;AAEA,MAAM,mBAAmB,CAAC,eAAuB,8BAA8B,UAAU;AACzF,MAAM,eAAe,CAAC,aAAqB,0BAA0B,QAAQ;AAE7E,MAAM,eAAe,CAAC,YAAoB,aAAqB;AAC7D,SAAO,CAAC,iBAAiB,UAAU,GAAG,aAAa,QAAQ,CAAC;AAC9D;AAEO,MAAM,sBAAsB;AAAA,EASjC,YACmB,OACA,IACjB;AAFiB;AACA;AAVnB,SAAQ,aAAqB,IAAI,KAAK;AAKtC;AAAA;AAAA;AAAA;AAAA;AAAA,SAAiB,gBACf,QAAQ,IAAI,sCAAsC,OAClD,QAAQ,IAAI,sCAAsC;AAAA,EAIhD;AAAA,EAEJ,MAAc,UACZ,YACA,UACA,QACA;AACA,QAAI,KAAK,cAAe;AACxB,UAAM,MAAM,qBAAqB,YAAY,QAAQ;AACrD,UAAM;AAAA,MACJ;AAAA,MACA,MAAM,KAAK,MAAM,IAAI,KAAK,QAAQ,EAAE,KAAK,KAAK,YAAY,MAAM,aAAa,YAAY,QAAQ,EAAE,CAAC;AAAA,IACtG;AAAA,EACF;AAAA,EAEA,MAAc,cAAc,YAAoB,UAAmD;AACjG,UAAM,MAAM,qBAAqB,YAAY,QAAQ;AAErD,QAAI,CAAC,KAAK,eAAe;AACvB,YAAM,SAAS,MAAM,mBAAmB,UAAU,MAAM,KAAK,MAAM,IAAI,GAAG,CAAC;AAC3E,UAAI,QAAQ;AACV,cAAM,SAAS,mBAAmB,MAAM;AACxC,YAAI,OAAQ,QAAO;AAAA,MACrB;AAAA,IACF;AAEA,QAAI,SAA+B;AACnC,aAAS,MAAM,KAAK,GAAG,QAAQ,eAAe,EAAE,YAAY,WAAW,KAAK,CAAC;AAE7E,QAAI,CAAC,QAAQ;AACX,YAAMA,UAAiC;AAAA,QACrC,WAAW;AAAA,QACX,OAAO;AAAA,QACP,QAAQ;AAAA,QACR,UAAU;AAAA,QACV;AAAA,QACA;AAAA,MACF;AACA,aAAOA;AAAA,IACT;AAEA,QAAI,WAAyC;AAC7C,eAAW,MAAM,KAAK,GAAG,QAAQ,uBAAuB,EAAE,QAAQ,OAAO,IAAI,SAAS,CAAC;AAGvF,UAAM,SAAiC;AAAA,MACrC,WAAW,OAAO;AAAA,MAClB,OAAO,WAAW,SAAS,QAAQ,OAAO;AAAA,MAC1C,QAAQ,WAAW,aAAa;AAAA,MAChC,UAAU,OAAO;AAAA,MACjB,YAAY,OAAO;AAAA,MACnB;AAAA,IACF;AAEA,UAAM,KAAK,UAAU,YAAY,UAAU,MAAM;AACjD,WAAO;AAAA,EACT;AAAA,EAEA,MAAa,wCAAwC,YAAoB;AACvE,UAAM,KAAK,MAAM,aAAa,CAAC,iBAAiB,UAAU,CAAC,CAAC;AAAA,EAC9D;AAAA,EAEA,MAAa,8BAA8B,YAAoB,UAAkB;AAC/E,UAAM,mBAAmB,UAAU,MAAM,KAAK,MAAM,OAAO,qBAAqB,YAAY,QAAQ,CAAC,CAAC;AAAA,EACxG;AAAA,EAEA,MAAa,sBACX,YACA,KACoB;AACpB,UAAM,aAAa,MAAM,KAAK,cAAc,YAAY,IAAI,QAAQ;AAEpE,QAAI,WAAW,WAAW,WAAW;AACnC,aAAO,KAAK,oBAAoB,EAAE,WAAW,CAAC;AAC9C,aAAO;AAAA,QACL,IAAI;AAAA,QACJ,OAAO;AAAA,UACL,MAAM;AAAA,UACN,SAAS,WAAW,UAAU;AAAA,UAC9B;AAAA,UACA,cAAc,IAAI;AAAA,UAClB,YAAY,WAAW;AAAA,UACvB,QAAQ,WAAW;AAAA,QACrB;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAIA,QAAI,WAAW,cAAc,IAAI,WAAW;AAC1C,aAAO,MAAM,wBAAwB,EAAE,YAAY,cAAc,IAAI,WAAW,YAAY,WAAW,WAAW,WAAW,CAAC;AAC9H,aAAO;AAAA,QACL,IAAI;AAAA,QACJ,OAAO;AAAA,UACL,MAAM;AAAA,UACN,SAAS,WAAW,UAAU,eAAe,WAAW,SAAS,UAAU,IAAI,SAAS;AAAA,UACxF;AAAA,UACA,cAAc,IAAI;AAAA,UAClB,YAAY,WAAW;AAAA,UACvB,QAAQ,WAAW;AAAA,QACrB;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,UAAM,eACH,IAAI,cAAc,aAAa,OAAO,WAAW,UAAU,aAC3D,IAAI,cAAc,YAAY,OAAO,WAAW,UAAU,YAC1D,IAAI,cAAc,YAAY,OAAO,WAAW,UAAU,YAC1D,IAAI,cAAc;AAErB,QAAI,CAAC,cAAc;AACjB,aAAO,MAAM,qCAAqC,EAAE,YAAY,WAAW,WAAW,WAAW,WAAW,CAAC;AAC7G,aAAO;AAAA,QACL,IAAI;AAAA,QACJ,OAAO;AAAA,UACL,MAAM;AAAA,UACN,SAAS,WAAW,UAAU,iCAAiC,WAAW,SAAS;AAAA,UACnF;AAAA,UACA,cAAc,IAAI;AAAA,UAClB,YAAY,WAAW;AAAA,UACvB,QAAQ,WAAW;AAAA,QACrB;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,WAAO;AAAA,MACL,IAAI;AAAA,MACJ,OAAO,WAAW;AAAA,MAClB;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAa,cAAc,YAAoB,UAAkB;AAC/D,WAAO,KAAK,sBAA+B,YAAY,EAAE,UAAU,WAAW,UAAU,CAAC;AAAA,EAC3F;AAAA,EAEA,MAAa,gBAAgB,YAAoB,UAAkB;AACjE,WAAO,KAAK,sBAA8B,YAAY,EAAE,UAAU,WAAW,SAAS,CAAC;AAAA,EACzF;AAAA,EAEA,MAAa,gBAAgB,YAAoB,UAAkB;AACjE,WAAO,KAAK,sBAA8B,YAAY,EAAE,UAAU,WAAW,SAAS,CAAC;AAAA,EACzF;AAAA,EAEA,MAAa,cAA2B,YAAoB,UAAkB;AAC5E,WAAO,KAAK,sBAAyB,YAAY,EAAE,UAAU,WAAW,OAAO,CAAC;AAAA,EAClF;AACF;",
+  "sourcesContent": ["import { FeatureToggle, FeatureToggleOverride } from \"../data/entities\"\nimport { EntityManager } from \"@mikro-orm/core\"\nimport { CacheService, runWithCacheTenant } from \"@open-mercato/cache\"\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('feature_toggles').child({ component: 'flag-check' })\n\ntype ToggleValueType = \"boolean\" | \"string\" | \"number\" | \"json\"\n\ntype ToggleResolutionSource = \"override\" | \"default\" | \"missing\"\n\ntype ToggleResolutionResult = {\n  valueType: ToggleValueType\n  value: boolean | string | number | unknown | null\n  source: ToggleResolutionSource\n  toggleId: string\n  identifier: string\n  tenantId: string\n}\n\ntype ToggleErrorCode = \"TYPE_MISMATCH\" | \"MISSING_TOGGLE\" | \"INVALID_VALUE\"\n\ntype ToggleError = {\n  code: ToggleErrorCode\n  message: string\n  identifier: string\n  expectedType: ToggleValueType\n  actualType?: ToggleValueType\n  source?: ToggleResolutionSource\n}\n\ntype ResultOk<T> = { ok: true; value: T; resolution: ToggleResolutionResult }\ntype ResultErr = { ok: false; error: ToggleError; resolution: ToggleResolutionResult }\nexport type Result<T> = ResultOk<T> | ResultErr\n\ntype ResolutionContext = {\n  tenantId: string\n  valueType: ToggleValueType\n}\n\nconst toCachedResolution = (value: unknown): ToggleResolutionResult | null => {\n  if (typeof value !== \"object\" || value === null) return null\n  const record = value as Partial<ToggleResolutionResult>\n  if (\n    !record.valueType ||\n    typeof record.source !== \"string\" ||\n    !record.toggleId ||\n    !record.identifier ||\n    !record.tenantId\n  )\n    return null\n  return value as ToggleResolutionResult\n}\n\nexport const getIsEnabledCacheKey = (identifier: string, tenantId: string) => {\n  return `feature_toggles:resolution:${identifier}:${tenantId}`\n}\n\nconst getIdentifierTag = (identifier: string) => `feature_toggles:identifier:${identifier}`\nconst getTenantTag = (tenantId: string) => `feature_toggles:tenant:${tenantId}`\n\nconst getCacheTags = (identifier: string, tenantId: string) => {\n  return [getIdentifierTag(identifier), getTenantTag(tenantId)]\n}\n\nexport function isFeatureToggleCacheDisabled(): boolean {\n  return process.env.OM_FEATURE_TOGGLES_CACHE_DISABLED === '1' ||\n    process.env.OM_FEATURE_TOGGLES_CACHE_DISABLED === 'true'\n}\n\nexport class FeatureTogglesService {\n  private cacheTtlMs: number = 1 * 60 * 1000 // 1 minute\n  // Resolution cache can be disabled via env (e.g. integration tests that flip\n  // overrides rapidly between cases). The 1-minute TTL is a production\n  // optimization; under fast flag churn it can serve a stale value across\n  // override set/clear despite invalidation, so tests opt out for determinism.\n  private readonly cacheDisabled: boolean = isFeatureToggleCacheDisabled()\n  constructor(\n    private readonly cache: CacheService,\n    private readonly em: EntityManager\n  ) { }\n\n  private async saveCache(\n    identifier: string,\n    tenantId: string,\n    result: ToggleResolutionResult,\n  ) {\n    if (this.cacheDisabled) return\n    const key = getIsEnabledCacheKey(identifier, tenantId)\n    await runWithCacheTenant(\n      tenantId,\n      () => this.cache.set(key, result, { ttl: this.cacheTtlMs, tags: getCacheTags(identifier, tenantId) }),\n    )\n  }\n\n  private async resolveToggle(identifier: string, tenantId: string): Promise<ToggleResolutionResult> {\n    const key = getIsEnabledCacheKey(identifier, tenantId)\n\n    if (!this.cacheDisabled) {\n      const cached = await runWithCacheTenant(tenantId, () => this.cache.get(key))\n      if (cached) {\n        const parsed = toCachedResolution(cached)\n        if (parsed) return parsed\n      }\n    }\n\n    let toggle: FeatureToggle | null = null\n    toggle = await this.em.findOne(FeatureToggle, { identifier, deletedAt: null })\n\n    if (!toggle) {\n      const result: ToggleResolutionResult = {\n        valueType: \"boolean\",\n        value: null,\n        source: \"missing\",\n        toggleId: \"\",\n        identifier,\n        tenantId,\n      }\n      return result\n    }\n\n    let override: FeatureToggleOverride | null = null\n    override = await this.em.findOne(FeatureToggleOverride, { toggle: toggle.id, tenantId })\n\n\n    const result: ToggleResolutionResult = {\n      valueType: toggle.type,\n      value: override ? override.value : toggle.defaultValue,\n      source: override ? \"override\" : \"default\",\n      toggleId: toggle.id,\n      identifier: toggle.identifier,\n      tenantId,\n    }\n\n    await this.saveCache(identifier, tenantId, result)\n    return result\n  }\n\n  public async invalidateIsEnabledCacheByIdentifierTag(identifier: string) {\n    if (this.cacheDisabled) return\n    await this.cache.deleteByTags([getIdentifierTag(identifier)])\n  }\n\n  public async invalidateIsEnabledCacheByKey(identifier: string, tenantId: string) {\n    if (this.cacheDisabled) return\n    await runWithCacheTenant(tenantId, () => this.cache.delete(getIsEnabledCacheKey(identifier, tenantId)))\n  }\n\n  public async getFeatureToggleValue<T>(\n    identifier: string,\n    ctx: ResolutionContext\n  ): Promise<Result<T>> {\n    const resolution = await this.resolveToggle(identifier, ctx.tenantId)\n\n    if (resolution.source === \"missing\") {\n      logger.warn('Toggle not found', { identifier })\n      return {\n        ok: false,\n        error: {\n          code: \"MISSING_TOGGLE\",\n          message: `Toggle \"${identifier}\" not found (missing).`,\n          identifier,\n          expectedType: ctx.valueType,\n          actualType: resolution.valueType,\n          source: resolution.source,\n        },\n        resolution,\n      }\n    }\n\n\n\n    if (resolution.valueType !== ctx.valueType) {\n      logger.error('Toggle type mismatch', { identifier, expectedType: ctx.valueType, actualType: resolution.valueType, resolution })\n      return {\n        ok: false,\n        error: {\n          code: \"TYPE_MISMATCH\",\n          message: `Toggle \"${identifier}\" has type \"${resolution.valueType}\" but \"${ctx.valueType}\" was requested.`,\n          identifier,\n          expectedType: ctx.valueType,\n          actualType: resolution.valueType,\n          source: resolution.source,\n        },\n        resolution,\n      }\n    }\n\n    const isValueValid =\n      (ctx.valueType === \"boolean\" && typeof resolution.value === \"boolean\") ||\n      (ctx.valueType === \"string\" && typeof resolution.value === \"string\") ||\n      (ctx.valueType === \"number\" && typeof resolution.value === \"number\") ||\n      (ctx.valueType === \"json\")\n\n    if (!isValueValid) {\n      logger.error('Toggle has invalid value for type', { identifier, valueType: resolution.valueType, resolution })\n      return {\n        ok: false,\n        error: {\n          code: \"INVALID_VALUE\",\n          message: `Toggle \"${identifier}\" has invalid value for type \"${resolution.valueType}\".`,\n          identifier,\n          expectedType: ctx.valueType,\n          actualType: resolution.valueType,\n          source: resolution.source,\n        },\n        resolution,\n      }\n    }\n\n    return {\n      ok: true,\n      value: resolution.value as T,\n      resolution,\n    }\n  }\n\n  public async getBoolConfig(identifier: string, tenantId: string) {\n    return this.getFeatureToggleValue<boolean>(identifier, { tenantId, valueType: \"boolean\" })\n  }\n\n  public async getNumberConfig(identifier: string, tenantId: string) {\n    return this.getFeatureToggleValue<number>(identifier, { tenantId, valueType: \"number\" })\n  }\n\n  public async getStringConfig(identifier: string, tenantId: string) {\n    return this.getFeatureToggleValue<string>(identifier, { tenantId, valueType: \"string\" })\n  }\n\n  public async getJsonConfig<T = unknown>(identifier: string, tenantId: string) {\n    return this.getFeatureToggleValue<T>(identifier, { tenantId, valueType: \"json\" })\n  }\n}\n"],
+  "mappings": "AAAA,SAAS,eAAe,6BAA6B;AAErD,SAAuB,0BAA0B;AACjD,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,iBAAiB,EAAE,MAAM,EAAE,WAAW,aAAa,CAAC;AAmChF,MAAM,qBAAqB,CAAC,UAAkD;AAC5E,MAAI,OAAO,UAAU,YAAY,UAAU,KAAM,QAAO;AACxD,QAAM,SAAS;AACf,MACE,CAAC,OAAO,aACR,OAAO,OAAO,WAAW,YACzB,CAAC,OAAO,YACR,CAAC,OAAO,cACR,CAAC,OAAO;AAER,WAAO;AACT,SAAO;AACT;AAEO,MAAM,uBAAuB,CAAC,YAAoB,aAAqB;AAC5E,SAAO,8BAA8B,UAAU,IAAI,QAAQ;AAC7D;AAEA,MAAM,mBAAmB,CAAC,eAAuB,8BAA8B,UAAU;AACzF,MAAM,eAAe,CAAC,aAAqB,0BAA0B,QAAQ;AAE7E,MAAM,eAAe,CAAC,YAAoB,aAAqB;AAC7D,SAAO,CAAC,iBAAiB,UAAU,GAAG,aAAa,QAAQ,CAAC;AAC9D;AAEO,SAAS,+BAAwC;AACtD,SAAO,QAAQ,IAAI,sCAAsC,OACvD,QAAQ,IAAI,sCAAsC;AACtD;AAEO,MAAM,sBAAsB;AAAA,EAOjC,YACmB,OACA,IACjB;AAFiB;AACA;AARnB,SAAQ,aAAqB,IAAI,KAAK;AAKtC;AAAA;AAAA;AAAA;AAAA;AAAA,SAAiB,gBAAyB,6BAA6B;AAAA,EAInE;AAAA,EAEJ,MAAc,UACZ,YACA,UACA,QACA;AACA,QAAI,KAAK,cAAe;AACxB,UAAM,MAAM,qBAAqB,YAAY,QAAQ;AACrD,UAAM;AAAA,MACJ;AAAA,MACA,MAAM,KAAK,MAAM,IAAI,KAAK,QAAQ,EAAE,KAAK,KAAK,YAAY,MAAM,aAAa,YAAY,QAAQ,EAAE,CAAC;AAAA,IACtG;AAAA,EACF;AAAA,EAEA,MAAc,cAAc,YAAoB,UAAmD;AACjG,UAAM,MAAM,qBAAqB,YAAY,QAAQ;AAErD,QAAI,CAAC,KAAK,eAAe;AACvB,YAAM,SAAS,MAAM,mBAAmB,UAAU,MAAM,KAAK,MAAM,IAAI,GAAG,CAAC;AAC3E,UAAI,QAAQ;AACV,cAAM,SAAS,mBAAmB,MAAM;AACxC,YAAI,OAAQ,QAAO;AAAA,MACrB;AAAA,IACF;AAEA,QAAI,SAA+B;AACnC,aAAS,MAAM,KAAK,GAAG,QAAQ,eAAe,EAAE,YAAY,WAAW,KAAK,CAAC;AAE7E,QAAI,CAAC,QAAQ;AACX,YAAMA,UAAiC;AAAA,QACrC,WAAW;AAAA,QACX,OAAO;AAAA,QACP,QAAQ;AAAA,QACR,UAAU;AAAA,QACV;AAAA,QACA;AAAA,MACF;AACA,aAAOA;AAAA,IACT;AAEA,QAAI,WAAyC;AAC7C,eAAW,MAAM,KAAK,GAAG,QAAQ,uBAAuB,EAAE,QAAQ,OAAO,IAAI,SAAS,CAAC;AAGvF,UAAM,SAAiC;AAAA,MACrC,WAAW,OAAO;AAAA,MAClB,OAAO,WAAW,SAAS,QAAQ,OAAO;AAAA,MAC1C,QAAQ,WAAW,aAAa;AAAA,MAChC,UAAU,OAAO;AAAA,MACjB,YAAY,OAAO;AAAA,MACnB;AAAA,IACF;AAEA,UAAM,KAAK,UAAU,YAAY,UAAU,MAAM;AACjD,WAAO;AAAA,EACT;AAAA,EAEA,MAAa,wCAAwC,YAAoB;AACvE,QAAI,KAAK,cAAe;AACxB,UAAM,KAAK,MAAM,aAAa,CAAC,iBAAiB,UAAU,CAAC,CAAC;AAAA,EAC9D;AAAA,EAEA,MAAa,8BAA8B,YAAoB,UAAkB;AAC/E,QAAI,KAAK,cAAe;AACxB,UAAM,mBAAmB,UAAU,MAAM,KAAK,MAAM,OAAO,qBAAqB,YAAY,QAAQ,CAAC,CAAC;AAAA,EACxG;AAAA,EAEA,MAAa,sBACX,YACA,KACoB;AACpB,UAAM,aAAa,MAAM,KAAK,cAAc,YAAY,IAAI,QAAQ;AAEpE,QAAI,WAAW,WAAW,WAAW;AACnC,aAAO,KAAK,oBAAoB,EAAE,WAAW,CAAC;AAC9C,aAAO;AAAA,QACL,IAAI;AAAA,QACJ,OAAO;AAAA,UACL,MAAM;AAAA,UACN,SAAS,WAAW,UAAU;AAAA,UAC9B;AAAA,UACA,cAAc,IAAI;AAAA,UAClB,YAAY,WAAW;AAAA,UACvB,QAAQ,WAAW;AAAA,QACrB;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAIA,QAAI,WAAW,cAAc,IAAI,WAAW;AAC1C,aAAO,MAAM,wBAAwB,EAAE,YAAY,cAAc,IAAI,WAAW,YAAY,WAAW,WAAW,WAAW,CAAC;AAC9H,aAAO;AAAA,QACL,IAAI;AAAA,QACJ,OAAO;AAAA,UACL,MAAM;AAAA,UACN,SAAS,WAAW,UAAU,eAAe,WAAW,SAAS,UAAU,IAAI,SAAS;AAAA,UACxF;AAAA,UACA,cAAc,IAAI;AAAA,UAClB,YAAY,WAAW;AAAA,UACvB,QAAQ,WAAW;AAAA,QACrB;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,UAAM,eACH,IAAI,cAAc,aAAa,OAAO,WAAW,UAAU,aAC3D,IAAI,cAAc,YAAY,OAAO,WAAW,UAAU,YAC1D,IAAI,cAAc,YAAY,OAAO,WAAW,UAAU,YAC1D,IAAI,cAAc;AAErB,QAAI,CAAC,cAAc;AACjB,aAAO,MAAM,qCAAqC,EAAE,YAAY,WAAW,WAAW,WAAW,WAAW,CAAC;AAC7G,aAAO;AAAA,QACL,IAAI;AAAA,QACJ,OAAO;AAAA,UACL,MAAM;AAAA,UACN,SAAS,WAAW,UAAU,iCAAiC,WAAW,SAAS;AAAA,UACnF;AAAA,UACA,cAAc,IAAI;AAAA,UAClB,YAAY,WAAW;AAAA,UACvB,QAAQ,WAAW;AAAA,QACrB;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,WAAO;AAAA,MACL,IAAI;AAAA,MACJ,OAAO,WAAW;AAAA,MAClB;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAa,cAAc,YAAoB,UAAkB;AAC/D,WAAO,KAAK,sBAA+B,YAAY,EAAE,UAAU,WAAW,UAAU,CAAC;AAAA,EAC3F;AAAA,EAEA,MAAa,gBAAgB,YAAoB,UAAkB;AACjE,WAAO,KAAK,sBAA8B,YAAY,EAAE,UAAU,WAAW,SAAS,CAAC;AAAA,EACzF;AAAA,EAEA,MAAa,gBAAgB,YAAoB,UAAkB;AACjE,WAAO,KAAK,sBAA8B,YAAY,EAAE,UAAU,WAAW,SAAS,CAAC;AAAA,EACzF;AAAA,EAEA,MAAa,cAA2B,YAAoB,UAAkB;AAC5E,WAAO,KAAK,sBAAyB,YAAY,EAAE,UAAU,WAAW,OAAO,CAAC;AAAA,EAClF;AACF;",
   "names": ["result"]
 }

package/dist/modules/forms/acl.js

@@ -0,0 +1,14 @@
+const features = [
+  { id: "forms.view", title: "View forms and submissions", module: "forms" },
+  { id: "forms.design", title: "Design forms (create, edit, publish versions)", module: "forms" },
+  { id: "forms.submissions.manage", title: "Manage submissions (reopen, assign actors, export)", module: "forms" },
+  { id: "forms.submissions.export", title: "Export submission data (GDPR Art. 15/20 portability)", module: "forms" },
+  { id: "forms.submissions.anonymize", title: "Anonymize submissions (GDPR erasure)", module: "forms" },
+  { id: "forms.distribute", title: "Create and manage form distributions and invitations", module: "forms" }
+];
+var acl_default = features;
+export {
+  acl_default as default,
+  features
+};
+//# sourceMappingURL=acl.js.map

package/dist/modules/forms/acl.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/modules/forms/acl.ts"],
+  "sourcesContent": ["export const features = [\n  { id: 'forms.view', title: 'View forms and submissions', module: 'forms' },\n  { id: 'forms.design', title: 'Design forms (create, edit, publish versions)', module: 'forms' },\n  { id: 'forms.submissions.manage', title: 'Manage submissions (reopen, assign actors, export)', module: 'forms' },\n  { id: 'forms.submissions.export', title: 'Export submission data (GDPR Art. 15/20 portability)', module: 'forms' },\n  { id: 'forms.submissions.anonymize', title: 'Anonymize submissions (GDPR erasure)', module: 'forms' },\n  { id: 'forms.distribute', title: 'Create and manage form distributions and invitations', module: 'forms' },\n]\n\nexport default features\n"],
+  "mappings": "AAAO,MAAM,WAAW;AAAA,EACtB,EAAE,IAAI,cAAc,OAAO,8BAA8B,QAAQ,QAAQ;AAAA,EACzE,EAAE,IAAI,gBAAgB,OAAO,iDAAiD,QAAQ,QAAQ;AAAA,EAC9F,EAAE,IAAI,4BAA4B,OAAO,sDAAsD,QAAQ,QAAQ;AAAA,EAC/G,EAAE,IAAI,4BAA4B,OAAO,wDAAwD,QAAQ,QAAQ;AAAA,EACjH,EAAE,IAAI,+BAA+B,OAAO,wCAAwC,QAAQ,QAAQ;AAAA,EACpG,EAAE,IAAI,oBAAoB,OAAO,wDAAwD,QAAQ,QAAQ;AAC3G;AAEA,IAAO,cAAQ;",
+  "names": []
+}

package/dist/modules/forms/api/[id]/analytics/route.js

@@ -0,0 +1,113 @@
+import { NextResponse } from "next/server";
+import { z } from "zod";
+import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
+import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
+import {
+  MAX_ANALYTICS_SCAN_LIMIT
+} from "../../../services/analytics-service.js";
+const metadata = {
+  GET: { requireAuth: true, requireFeatures: ["forms.view"] }
+};
+const querySchema = z.object({
+  from: z.coerce.date().optional(),
+  to: z.coerce.date().optional(),
+  limit: z.coerce.number().int().min(1).max(MAX_ANALYTICS_SCAN_LIMIT).optional()
+});
+async function GET(req, context) {
+  const auth = await getAuthFromRequest(req);
+  if (!auth) {
+    return NextResponse.json({ error: "Authentication required" }, { status: 401 });
+  }
+  if (!auth.tenantId || !auth.orgId) {
+    return NextResponse.json({ error: "Tenant scope required" }, { status: 403 });
+  }
+  const params = await Promise.resolve(context.params);
+  const formId = String(params.id);
+  const url = new URL(req.url);
+  const parsed = querySchema.safeParse(Object.fromEntries(url.searchParams));
+  if (!parsed.success) {
+    return NextResponse.json(
+      { error: "VALIDATION_FAILED", details: parsed.error.flatten() },
+      { status: 422 }
+    );
+  }
+  const container = await createRequestContainer();
+  const service = container.resolve("formsAnalyticsService");
+  try {
+    const analytics = await service.computeFormAnalytics({
+      organizationId: auth.orgId,
+      tenantId: auth.tenantId,
+      formId,
+      from: parsed.data.from ?? null,
+      to: parsed.data.to ?? null,
+      limit: parsed.data.limit ?? null
+    });
+    return NextResponse.json(analytics);
+  } catch {
+    return NextResponse.json({ error: "INTERNAL", message: "Failed to compute analytics." }, { status: 500 });
+  }
+}
+const errorSchema = z.object({
+  error: z.string(),
+  message: z.string().optional(),
+  details: z.unknown().optional()
+});
+const fieldStatsSchema = z.object({
+  fieldKey: z.string(),
+  type: z.string(),
+  sensitive: z.boolean(),
+  answered: z.number().int().nonnegative(),
+  blank: z.number().int().nonnegative(),
+  choices: z.array(z.object({ value: z.string(), count: z.number().int().nonnegative() })).optional()
+});
+const responseSchema = z.object({
+  formId: z.string(),
+  window: z.object({ from: z.string().nullable(), to: z.string().nullable() }),
+  scan: z.object({
+    limit: z.number().int().positive(),
+    scanned: z.number().int().nonnegative(),
+    capped: z.boolean()
+  }),
+  funnel: z.object({
+    started: z.number().int().nonnegative(),
+    submitted: z.number().int().nonnegative(),
+    completionRate: z.number(),
+    byStatus: z.record(z.string(), z.number().int().nonnegative())
+  }),
+  volume: z.array(
+    z.object({
+      date: z.string(),
+      started: z.number().int().nonnegative(),
+      submitted: z.number().int().nonnegative()
+    })
+  ),
+  timeToComplete: z.object({
+    sampleSize: z.number().int().nonnegative(),
+    medianSeconds: z.number().nullable(),
+    averageSeconds: z.number().nullable()
+  }),
+  fields: z.array(fieldStatsSchema),
+  dropOff: z.array(z.object({ sectionKey: z.string(), count: z.number().int().nonnegative() }))
+});
+const getMethodDoc = {
+  summary: "Aggregate analytics for a form",
+  description: "Tenant-scoped, PII-safe aggregate analytics across all versions of a form: funnel/completion, daily volume, time-to-complete, per-field response counts (value distributions only for non-sensitive enumerable types), and best-effort draft drop-off. Counts only \u2014 never raw answer values.",
+  tags: ["Forms Admin"],
+  responses: [{ status: 200, description: "Aggregate analytics", schema: responseSchema }],
+  errors: [
+    { status: 401, description: "Not authenticated", schema: errorSchema },
+    { status: 403, description: "Tenant scope required", schema: errorSchema },
+    { status: 422, description: "Bad query parameters", schema: errorSchema },
+    { status: 500, description: "Computation failed", schema: errorSchema }
+  ]
+};
+const openApi = {
+  summary: "Form analytics",
+  methods: { GET: getMethodDoc }
+};
+export {
+  GET,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/forms/api/[id]/analytics/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../src/modules/forms/api/%5Bid%5D/analytics/route.ts"],
+  "sourcesContent": ["/**\n * Admin API \u2014 GET /api/forms/:id/analytics\n *\n * Aggregate, PII-safe analytics for a form's submissions across every version.\n * Staff auth + `forms.view` feature required. The response carries COUNTS ONLY\n * \u2014 never raw answer text/values. Sensitive (`x-om-sensitive`) and free-text /\n * non-enumerable fields are excluded from value distributions by the service.\n *\n * Tenant isolation: every query is scoped by `organizationId` + `tenantId`.\n */\n\nimport { NextResponse, type NextRequest } from 'next/server'\nimport { z } from 'zod'\nimport type { OpenApiRouteDoc, OpenApiMethodDoc } from '@open-mercato/shared/lib/openapi'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport {\n  AnalyticsService,\n  MAX_ANALYTICS_SCAN_LIMIT,\n} from '../../../services/analytics-service'\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['forms.view'] },\n}\n\nconst querySchema = z.object({\n  from: z.coerce.date().optional(),\n  to: z.coerce.date().optional(),\n  limit: z.coerce.number().int().min(1).max(MAX_ANALYTICS_SCAN_LIMIT).optional(),\n})\n\nexport async function GET(\n  req: NextRequest,\n  context: { params: { id: string } | Promise<{ id: string }> },\n) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth) {\n    return NextResponse.json({ error: 'Authentication required' }, { status: 401 })\n  }\n  if (!auth.tenantId || !auth.orgId) {\n    return NextResponse.json({ error: 'Tenant scope required' }, { status: 403 })\n  }\n  const params = await Promise.resolve(context.params)\n  const formId = String(params.id)\n\n  const url = new URL(req.url)\n  const parsed = querySchema.safeParse(Object.fromEntries(url.searchParams))\n  if (!parsed.success) {\n    return NextResponse.json(\n      { error: 'VALIDATION_FAILED', details: parsed.error.flatten() },\n      { status: 422 },\n    )\n  }\n\n  const container = await createRequestContainer()\n  const service = container.resolve('formsAnalyticsService') as AnalyticsService\n\n  try {\n    const analytics = await service.computeFormAnalytics({\n      organizationId: auth.orgId,\n      tenantId: auth.tenantId,\n      formId,\n      from: parsed.data.from ?? null,\n      to: parsed.data.to ?? null,\n      limit: parsed.data.limit ?? null,\n    })\n    return NextResponse.json(analytics)\n  } catch {\n    return NextResponse.json({ error: 'INTERNAL', message: 'Failed to compute analytics.' }, { status: 500 })\n  }\n}\n\nconst errorSchema = z.object({\n  error: z.string(),\n  message: z.string().optional(),\n  details: z.unknown().optional(),\n})\n\nconst fieldStatsSchema = z.object({\n  fieldKey: z.string(),\n  type: z.string(),\n  sensitive: z.boolean(),\n  answered: z.number().int().nonnegative(),\n  blank: z.number().int().nonnegative(),\n  choices: z\n    .array(z.object({ value: z.string(), count: z.number().int().nonnegative() }))\n    .optional(),\n})\n\nconst responseSchema = z.object({\n  formId: z.string(),\n  window: z.object({ from: z.string().nullable(), to: z.string().nullable() }),\n  scan: z.object({\n    limit: z.number().int().positive(),\n    scanned: z.number().int().nonnegative(),\n    capped: z.boolean(),\n  }),\n  funnel: z.object({\n    started: z.number().int().nonnegative(),\n    submitted: z.number().int().nonnegative(),\n    completionRate: z.number(),\n    byStatus: z.record(z.string(), z.number().int().nonnegative()),\n  }),\n  volume: z.array(\n    z.object({\n      date: z.string(),\n      started: z.number().int().nonnegative(),\n      submitted: z.number().int().nonnegative(),\n    }),\n  ),\n  timeToComplete: z.object({\n    sampleSize: z.number().int().nonnegative(),\n    medianSeconds: z.number().nullable(),\n    averageSeconds: z.number().nullable(),\n  }),\n  fields: z.array(fieldStatsSchema),\n  dropOff: z.array(z.object({ sectionKey: z.string(), count: z.number().int().nonnegative() })),\n})\n\nconst getMethodDoc: OpenApiMethodDoc = {\n  summary: 'Aggregate analytics for a form',\n  description:\n    'Tenant-scoped, PII-safe aggregate analytics across all versions of a form: funnel/completion, daily volume, time-to-complete, per-field response counts (value distributions only for non-sensitive enumerable types), and best-effort draft drop-off. Counts only \u2014 never raw answer values.',\n  tags: ['Forms Admin'],\n  responses: [{ status: 200, description: 'Aggregate analytics', schema: responseSchema }],\n  errors: [\n    { status: 401, description: 'Not authenticated', schema: errorSchema },\n    { status: 403, description: 'Tenant scope required', schema: errorSchema },\n    { status: 422, description: 'Bad query parameters', schema: errorSchema },\n    { status: 500, description: 'Computation failed', schema: errorSchema },\n  ],\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  summary: 'Form analytics',\n  methods: { GET: getMethodDoc },\n}\n"],
+  "mappings": "AAWA,SAAS,oBAAsC;AAC/C,SAAS,SAAS;AAElB,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC;AAAA,EAEE;AAAA,OACK;AAEA,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,YAAY,EAAE;AAC5D;AAEA,MAAM,cAAc,EAAE,OAAO;AAAA,EAC3B,MAAM,EAAE,OAAO,KAAK,EAAE,SAAS;AAAA,EAC/B,IAAI,EAAE,OAAO,KAAK,EAAE,SAAS;AAAA,EAC7B,OAAO,EAAE,OAAO,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,wBAAwB,EAAE,SAAS;AAC/E,CAAC;AAED,eAAsB,IACpB,KACA,SACA;AACA,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM;AACT,WAAO,aAAa,KAAK,EAAE,OAAO,0BAA0B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAChF;AACA,MAAI,CAAC,KAAK,YAAY,CAAC,KAAK,OAAO;AACjC,WAAO,aAAa,KAAK,EAAE,OAAO,wBAAwB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC9E;AACA,QAAM,SAAS,MAAM,QAAQ,QAAQ,QAAQ,MAAM;AACnD,QAAM,SAAS,OAAO,OAAO,EAAE;AAE/B,QAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,QAAM,SAAS,YAAY,UAAU,OAAO,YAAY,IAAI,YAAY,CAAC;AACzE,MAAI,CAAC,OAAO,SAAS;AACnB,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,qBAAqB,SAAS,OAAO,MAAM,QAAQ,EAAE;AAAA,MAC9D,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,UAAU,UAAU,QAAQ,uBAAuB;AAEzD,MAAI;AACF,UAAM,YAAY,MAAM,QAAQ,qBAAqB;AAAA,MACnD,gBAAgB,KAAK;AAAA,MACrB,UAAU,KAAK;AAAA,MACf;AAAA,MACA,MAAM,OAAO,KAAK,QAAQ;AAAA,MAC1B,IAAI,OAAO,KAAK,MAAM;AAAA,MACtB,OAAO,OAAO,KAAK,SAAS;AAAA,IAC9B,CAAC;AACD,WAAO,aAAa,KAAK,SAAS;AAAA,EACpC,QAAQ;AACN,WAAO,aAAa,KAAK,EAAE,OAAO,YAAY,SAAS,+BAA+B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC1G;AACF;AAEA,MAAM,cAAc,EAAE,OAAO;AAAA,EAC3B,OAAO,EAAE,OAAO;AAAA,EAChB,SAAS,EAAE,OAAO,EAAE,SAAS;AAAA,EAC7B,SAAS,EAAE,QAAQ,EAAE,SAAS;AAChC,CAAC;AAED,MAAM,mBAAmB,EAAE,OAAO;AAAA,EAChC,UAAU,EAAE,OAAO;AAAA,EACnB,MAAM,EAAE,OAAO;AAAA,EACf,WAAW,EAAE,QAAQ;AAAA,EACrB,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY;AAAA,EACvC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY;AAAA,EACpC,SAAS,EACN,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC,EAC5E,SAAS;AACd,CAAC;AAED,MAAM,iBAAiB,EAAE,OAAO;AAAA,EAC9B,QAAQ,EAAE,OAAO;AAAA,EACjB,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,GAAG,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;AAAA,EAC3E,MAAM,EAAE,OAAO;AAAA,IACb,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS;AAAA,IACjC,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY;AAAA,IACtC,QAAQ,EAAE,QAAQ;AAAA,EACpB,CAAC;AAAA,EACD,QAAQ,EAAE,OAAO;AAAA,IACf,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY;AAAA,IACtC,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY;AAAA,IACxC,gBAAgB,EAAE,OAAO;AAAA,IACzB,UAAU,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,CAAC;AAAA,EAC/D,CAAC;AAAA,EACD,QAAQ,EAAE;AAAA,IACR,EAAE,OAAO;AAAA,MACP,MAAM,EAAE,OAAO;AAAA,MACf,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY;AAAA,MACtC,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY;AAAA,IAC1C,CAAC;AAAA,EACH;AAAA,EACA,gBAAgB,EAAE,OAAO;AAAA,IACvB,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY;AAAA,IACzC,eAAe,EAAE,OAAO,EAAE,SAAS;AAAA,IACnC,gBAAgB,EAAE,OAAO,EAAE,SAAS;AAAA,EACtC,CAAC;AAAA,EACD,QAAQ,EAAE,MAAM,gBAAgB;AAAA,EAChC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,OAAO,GAAG,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;AAC9F,CAAC;AAED,MAAM,eAAiC;AAAA,EACrC,SAAS;AAAA,EACT,aACE;AAAA,EACF,MAAM,CAAC,aAAa;AAAA,EACpB,WAAW,CAAC,EAAE,QAAQ,KAAK,aAAa,uBAAuB,QAAQ,eAAe,CAAC;AAAA,EACvF,QAAQ;AAAA,IACN,EAAE,QAAQ,KAAK,aAAa,qBAAqB,QAAQ,YAAY;AAAA,IACrE,EAAE,QAAQ,KAAK,aAAa,yBAAyB,QAAQ,YAAY;AAAA,IACzE,EAAE,QAAQ,KAAK,aAAa,wBAAwB,QAAQ,YAAY;AAAA,IACxE,EAAE,QAAQ,KAAK,aAAa,sBAAsB,QAAQ,YAAY;AAAA,EACxE;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,SAAS;AAAA,EACT,SAAS,EAAE,KAAK,aAAa;AAC/B;",
+  "names": []
+}

package/dist/modules/forms/api/[id]/distributions/route.js

@@ -0,0 +1,176 @@
+import { NextResponse } from "next/server";
+import { z } from "zod";
+import { getCommandInterceptorHttpRejection } from "@open-mercato/shared/lib/commands/errors";
+import { readJsonSafe } from "@open-mercato/shared/lib/http/readJsonSafe";
+import { FormDistribution } from "../../../data/entities.js";
+import {
+  distributionCreateCommandSchema
+} from "../../../data/validators.js";
+import {
+  attachOperationMetadata,
+  buildFormsRouteContext,
+  handleRouteError,
+  jsonError,
+  withMutationGuard,
+  withScopedPayload
+} from "../../helpers.js";
+import { findFormInScope } from "../../../commands/shared.js";
+import { FORM_DISTRIBUTION_RESOURCE_KIND } from "../../../commands/distribution.js";
+const metadata = {
+  GET: { requireAuth: true, requireFeatures: ["forms.distribute"] },
+  POST: { requireAuth: true, requireFeatures: ["forms.distribute"] }
+};
+const distributionItemSchema = z.object({
+  id: z.string().uuid(),
+  formId: z.string().uuid(),
+  mode: z.enum(["open", "personal"]),
+  status: z.enum(["active", "paused", "closed"]),
+  publicSlug: z.string().nullable(),
+  title: z.string().nullable(),
+  defaultLocale: z.string(),
+  pinnedVersionId: z.string().uuid().nullable(),
+  requireCustomerAuth: z.boolean(),
+  allowMultipleSubmissions: z.boolean(),
+  maxResponses: z.number().int().nullable(),
+  responseCount: z.number().int(),
+  opensAt: z.string().nullable(),
+  closesAt: z.string().nullable(),
+  redirectUrl: z.string().nullable(),
+  createdAt: z.string(),
+  updatedAt: z.string()
+});
+const listResponseSchema = z.object({
+  items: z.array(distributionItemSchema),
+  total: z.number().int()
+});
+const createResponseSchema = z.object({ id: z.string().uuid() });
+const errorSchema = z.object({ error: z.string() });
+const requestBodySchema = distributionCreateCommandSchema.omit({
+  tenantId: true,
+  organizationId: true,
+  formId: true
+});
+function extractFormId(req) {
+  const url = new URL(req.url);
+  const segments = url.pathname.split("/").filter(Boolean);
+  const formsIdx = segments.findIndex((segment) => segment === "forms");
+  return formsIdx >= 0 ? segments[formsIdx + 1] ?? "" : "";
+}
+function serializeDistribution(distribution) {
+  return {
+    id: distribution.id,
+    formId: distribution.formId,
+    mode: distribution.mode,
+    status: distribution.status,
+    publicSlug: distribution.publicSlug ?? null,
+    title: distribution.title ?? null,
+    defaultLocale: distribution.defaultLocale,
+    pinnedVersionId: distribution.pinnedVersionId ?? null,
+    requireCustomerAuth: distribution.requireCustomerAuth,
+    allowMultipleSubmissions: distribution.allowMultipleSubmissions,
+    maxResponses: distribution.maxResponses ?? null,
+    responseCount: distribution.responseCount,
+    opensAt: distribution.opensAt ? distribution.opensAt.toISOString() : null,
+    closesAt: distribution.closesAt ? distribution.closesAt.toISOString() : null,
+    redirectUrl: distribution.redirectUrl ?? null,
+    createdAt: distribution.createdAt.toISOString(),
+    updatedAt: distribution.updatedAt.toISOString()
+  };
+}
+async function GET(req) {
+  try {
+    const { ctx, organizationId, tenantId } = await buildFormsRouteContext(req);
+    if (!organizationId || !tenantId) {
+      return jsonError(400, "forms.errors.organization_required");
+    }
+    const formId = extractFormId(req);
+    if (!formId) return jsonError(400, "forms.errors.invalid_id");
+    const em = ctx.container.resolve("em");
+    await findFormInScope(em, formId, tenantId, organizationId);
+    const [distributions, total] = await em.findAndCount(
+      FormDistribution,
+      { formId, tenantId, organizationId, deletedAt: null },
+      { orderBy: { createdAt: "desc" } }
+    );
+    return NextResponse.json({
+      items: distributions.map(serializeDistribution),
+      total
+    });
+  } catch (error) {
+    return handleRouteError("distributions.GET", error);
+  }
+}
+async function POST(req) {
+  try {
+    const { ctx, organizationId, tenantId, translate } = await buildFormsRouteContext(req);
+    if (!organizationId || !tenantId) {
+      return jsonError(400, "forms.errors.organization_required");
+    }
+    const formId = extractFormId(req);
+    if (!formId) return jsonError(400, "forms.errors.invalid_id");
+    const body = await readJsonSafe(req, {}) ?? {};
+    const parsedBody = requestBodySchema.parse(body);
+    const scoped = withScopedPayload({ ...parsedBody, formId }, ctx, translate);
+    const input = distributionCreateCommandSchema.parse(scoped);
+    return await withMutationGuard({
+      ctx,
+      tenantId,
+      organizationId,
+      resourceKind: FORM_DISTRIBUTION_RESOURCE_KIND,
+      resourceId: "new",
+      operation: "create",
+      request: req,
+      payload: scoped,
+      run: async () => {
+        const commandBus = ctx.container.resolve("commandBus");
+        const { result, logEntry } = await commandBus.execute("forms.distribution.create", { input, ctx });
+        const response = NextResponse.json({ id: result?.distributionId ?? null }, { status: 201 });
+        return attachOperationMetadata(
+          response,
+          logEntry,
+          FORM_DISTRIBUTION_RESOURCE_KIND,
+          result?.distributionId ?? null
+        );
+      }
+    });
+  } catch (error) {
+    const interceptorRejection = getCommandInterceptorHttpRejection(error);
+    if (interceptorRejection) {
+      return NextResponse.json(interceptorRejection.body, { status: interceptorRejection.status });
+    }
+    return handleRouteError("distributions.POST", error);
+  }
+}
+const openApi = {
+  tag: "Forms",
+  summary: "Manage form distributions",
+  pathParams: z.object({ id: z.string().uuid() }),
+  methods: {
+    GET: {
+      summary: "List distributions",
+      description: "Returns all distributions for a form scoped to the authenticated organization.",
+      responses: [{ status: 200, description: "Distribution list", schema: listResponseSchema }],
+      errors: [
+        { status: 400, description: "Organization context missing", schema: errorSchema },
+        { status: 404, description: "Form not found", schema: errorSchema }
+      ]
+    },
+    POST: {
+      summary: "Create distribution",
+      description: "Creates an open (public link) or personal (per-recipient invitations) distribution. Open distributions mint a public_slug.",
+      requestBody: { contentType: "application/json", schema: requestBodySchema },
+      responses: [{ status: 201, description: "Distribution created", schema: createResponseSchema }],
+      errors: [
+        { status: 400, description: "Invalid payload", schema: errorSchema },
+        { status: 404, description: "Form not found", schema: errorSchema }
+      ]
+    }
+  }
+};
+export {
+  GET,
+  POST,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/forms/api/[id]/distributions/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../src/modules/forms/api/%5Bid%5D/distributions/route.ts"],
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport type { CommandBus } from '@open-mercato/shared/lib/commands'\nimport { getCommandInterceptorHttpRejection } from '@open-mercato/shared/lib/commands/errors'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { readJsonSafe } from '@open-mercato/shared/lib/http/readJsonSafe'\nimport { FormDistribution } from '../../../data/entities'\nimport {\n  distributionCreateCommandSchema,\n  type FormDistributionCreateCommandInput,\n} from '../../../data/validators'\nimport {\n  attachOperationMetadata,\n  buildFormsRouteContext,\n  handleRouteError,\n  jsonError,\n  withMutationGuard,\n  withScopedPayload,\n} from '../../helpers'\nimport { findFormInScope } from '../../../commands/shared'\nimport { FORM_DISTRIBUTION_RESOURCE_KIND } from '../../../commands/distribution'\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['forms.distribute'] },\n  POST: { requireAuth: true, requireFeatures: ['forms.distribute'] },\n}\n\nconst distributionItemSchema = z.object({\n  id: z.string().uuid(),\n  formId: z.string().uuid(),\n  mode: z.enum(['open', 'personal']),\n  status: z.enum(['active', 'paused', 'closed']),\n  publicSlug: z.string().nullable(),\n  title: z.string().nullable(),\n  defaultLocale: z.string(),\n  pinnedVersionId: z.string().uuid().nullable(),\n  requireCustomerAuth: z.boolean(),\n  allowMultipleSubmissions: z.boolean(),\n  maxResponses: z.number().int().nullable(),\n  responseCount: z.number().int(),\n  opensAt: z.string().nullable(),\n  closesAt: z.string().nullable(),\n  redirectUrl: z.string().nullable(),\n  createdAt: z.string(),\n  updatedAt: z.string(),\n})\n\nconst listResponseSchema = z.object({\n  items: z.array(distributionItemSchema),\n  total: z.number().int(),\n})\n\nconst createResponseSchema = z.object({ id: z.string().uuid() })\nconst errorSchema = z.object({ error: z.string() })\n\nconst requestBodySchema = distributionCreateCommandSchema.omit({\n  tenantId: true,\n  organizationId: true,\n  formId: true,\n})\n\nfunction extractFormId(req: Request): string {\n  const url = new URL(req.url)\n  const segments = url.pathname.split('/').filter(Boolean)\n  const formsIdx = segments.findIndex((segment) => segment === 'forms')\n  return formsIdx >= 0 ? segments[formsIdx + 1] ?? '' : ''\n}\n\nfunction serializeDistribution(distribution: FormDistribution) {\n  return {\n    id: distribution.id,\n    formId: distribution.formId,\n    mode: distribution.mode,\n    status: distribution.status,\n    publicSlug: distribution.publicSlug ?? null,\n    title: distribution.title ?? null,\n    defaultLocale: distribution.defaultLocale,\n    pinnedVersionId: distribution.pinnedVersionId ?? null,\n    requireCustomerAuth: distribution.requireCustomerAuth,\n    allowMultipleSubmissions: distribution.allowMultipleSubmissions,\n    maxResponses: distribution.maxResponses ?? null,\n    responseCount: distribution.responseCount,\n    opensAt: distribution.opensAt ? distribution.opensAt.toISOString() : null,\n    closesAt: distribution.closesAt ? distribution.closesAt.toISOString() : null,\n    redirectUrl: distribution.redirectUrl ?? null,\n    createdAt: distribution.createdAt.toISOString(),\n    updatedAt: distribution.updatedAt.toISOString(),\n  }\n}\n\nexport async function GET(req: Request) {\n  try {\n    const { ctx, organizationId, tenantId } = await buildFormsRouteContext(req)\n    if (!organizationId || !tenantId) {\n      return jsonError(400, 'forms.errors.organization_required')\n    }\n    const formId = extractFormId(req)\n    if (!formId) return jsonError(400, 'forms.errors.invalid_id')\n\n    const em = ctx.container.resolve('em') as EntityManager\n    await findFormInScope(em, formId, tenantId, organizationId)\n\n    const [distributions, total] = await em.findAndCount(\n      FormDistribution,\n      { formId, tenantId, organizationId, deletedAt: null },\n      { orderBy: { createdAt: 'desc' } },\n    )\n\n    return NextResponse.json({\n      items: distributions.map(serializeDistribution),\n      total,\n    })\n  } catch (error) {\n    return handleRouteError('distributions.GET', error)\n  }\n}\n\nexport async function POST(req: Request) {\n  try {\n    const { ctx, organizationId, tenantId, translate } = await buildFormsRouteContext(req)\n    if (!organizationId || !tenantId) {\n      return jsonError(400, 'forms.errors.organization_required')\n    }\n    const formId = extractFormId(req)\n    if (!formId) return jsonError(400, 'forms.errors.invalid_id')\n\n    const body = (await readJsonSafe<Record<string, unknown>>(req, {})) ?? {}\n    const parsedBody = requestBodySchema.parse(body)\n    const scoped = withScopedPayload({ ...parsedBody, formId }, ctx, translate)\n    const input = distributionCreateCommandSchema.parse(scoped) satisfies FormDistributionCreateCommandInput\n\n    return await withMutationGuard({\n      ctx,\n      tenantId,\n      organizationId,\n      resourceKind: FORM_DISTRIBUTION_RESOURCE_KIND,\n      resourceId: 'new',\n      operation: 'create',\n      request: req,\n      payload: scoped as Record<string, unknown>,\n      run: async () => {\n        const commandBus = ctx.container.resolve('commandBus') as CommandBus\n        const { result, logEntry } = await commandBus.execute<\n          FormDistributionCreateCommandInput,\n          { distributionId: string }\n        >('forms.distribution.create', { input, ctx })\n        const response = NextResponse.json({ id: result?.distributionId ?? null }, { status: 201 })\n        return attachOperationMetadata(\n          response,\n          logEntry,\n          FORM_DISTRIBUTION_RESOURCE_KIND,\n          result?.distributionId ?? null,\n        )\n      },\n    })\n  } catch (error) {\n    const interceptorRejection = getCommandInterceptorHttpRejection(error)\n    if (interceptorRejection) {\n      return NextResponse.json(interceptorRejection.body, { status: interceptorRejection.status })\n    }\n    return handleRouteError('distributions.POST', error)\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Forms',\n  summary: 'Manage form distributions',\n  pathParams: z.object({ id: z.string().uuid() }),\n  methods: {\n    GET: {\n      summary: 'List distributions',\n      description: 'Returns all distributions for a form scoped to the authenticated organization.',\n      responses: [{ status: 200, description: 'Distribution list', schema: listResponseSchema }],\n      errors: [\n        { status: 400, description: 'Organization context missing', schema: errorSchema },\n        { status: 404, description: 'Form not found', schema: errorSchema },\n      ],\n    },\n    POST: {\n      summary: 'Create distribution',\n      description:\n        'Creates an open (public link) or personal (per-recipient invitations) distribution. Open distributions mint a public_slug.',\n      requestBody: { contentType: 'application/json', schema: requestBodySchema },\n      responses: [{ status: 201, description: 'Distribution created', schema: createResponseSchema }],\n      errors: [\n        { status: 400, description: 'Invalid payload', schema: errorSchema },\n        { status: 404, description: 'Form not found', schema: errorSchema },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAGlB,SAAS,0CAA0C;AAEnD,SAAS,oBAAoB;AAC7B,SAAS,wBAAwB;AACjC;AAAA,EACE;AAAA,OAEK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,uBAAuB;AAChC,SAAS,uCAAuC;AAEzC,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,kBAAkB,EAAE;AAAA,EAChE,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,kBAAkB,EAAE;AACnE;AAEA,MAAM,yBAAyB,EAAE,OAAO;AAAA,EACtC,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,QAAQ,EAAE,OAAO,EAAE,KAAK;AAAA,EACxB,MAAM,EAAE,KAAK,CAAC,QAAQ,UAAU,CAAC;AAAA,EACjC,QAAQ,EAAE,KAAK,CAAC,UAAU,UAAU,QAAQ,CAAC;AAAA,EAC7C,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,EAChC,OAAO,EAAE,OAAO,EAAE,SAAS;AAAA,EAC3B,eAAe,EAAE,OAAO;AAAA,EACxB,iBAAiB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC5C,qBAAqB,EAAE,QAAQ;AAAA,EAC/B,0BAA0B,EAAE,QAAQ;AAAA,EACpC,cAAc,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS;AAAA,EACxC,eAAe,EAAE,OAAO,EAAE,IAAI;AAAA,EAC9B,SAAS,EAAE,OAAO,EAAE,SAAS;AAAA,EAC7B,UAAU,EAAE,OAAO,EAAE,SAAS;AAAA,EAC9B,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,EACjC,WAAW,EAAE,OAAO;AAAA,EACpB,WAAW,EAAE,OAAO;AACtB,CAAC;AAED,MAAM,qBAAqB,EAAE,OAAO;AAAA,EAClC,OAAO,EAAE,MAAM,sBAAsB;AAAA,EACrC,OAAO,EAAE,OAAO,EAAE,IAAI;AACxB,CAAC;AAED,MAAM,uBAAuB,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAC/D,MAAM,cAAc,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAElD,MAAM,oBAAoB,gCAAgC,KAAK;AAAA,EAC7D,UAAU;AAAA,EACV,gBAAgB;AAAA,EAChB,QAAQ;AACV,CAAC;AAED,SAAS,cAAc,KAAsB;AAC3C,QAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,QAAM,WAAW,IAAI,SAAS,MAAM,GAAG,EAAE,OAAO,OAAO;AACvD,QAAM,WAAW,SAAS,UAAU,CAAC,YAAY,YAAY,OAAO;AACpE,SAAO,YAAY,IAAI,SAAS,WAAW,CAAC,KAAK,KAAK;AACxD;AAEA,SAAS,sBAAsB,cAAgC;AAC7D,SAAO;AAAA,IACL,IAAI,aAAa;AAAA,IACjB,QAAQ,aAAa;AAAA,IACrB,MAAM,aAAa;AAAA,IACnB,QAAQ,aAAa;AAAA,IACrB,YAAY,aAAa,cAAc;AAAA,IACvC,OAAO,aAAa,SAAS;AAAA,IAC7B,eAAe,aAAa;AAAA,IAC5B,iBAAiB,aAAa,mBAAmB;AAAA,IACjD,qBAAqB,aAAa;AAAA,IAClC,0BAA0B,aAAa;AAAA,IACvC,cAAc,aAAa,gBAAgB;AAAA,IAC3C,eAAe,aAAa;AAAA,IAC5B,SAAS,aAAa,UAAU,aAAa,QAAQ,YAAY,IAAI;AAAA,IACrE,UAAU,aAAa,WAAW,aAAa,SAAS,YAAY,IAAI;AAAA,IACxE,aAAa,aAAa,eAAe;AAAA,IACzC,WAAW,aAAa,UAAU,YAAY;AAAA,IAC9C,WAAW,aAAa,UAAU,YAAY;AAAA,EAChD;AACF;AAEA,eAAsB,IAAI,KAAc;AACtC,MAAI;AACF,UAAM,EAAE,KAAK,gBAAgB,SAAS,IAAI,MAAM,uBAAuB,GAAG;AAC1E,QAAI,CAAC,kBAAkB,CAAC,UAAU;AAChC,aAAO,UAAU,KAAK,oCAAoC;AAAA,IAC5D;AACA,UAAM,SAAS,cAAc,GAAG;AAChC,QAAI,CAAC,OAAQ,QAAO,UAAU,KAAK,yBAAyB;AAE5D,UAAM,KAAK,IAAI,UAAU,QAAQ,IAAI;AACrC,UAAM,gBAAgB,IAAI,QAAQ,UAAU,cAAc;AAE1D,UAAM,CAAC,eAAe,KAAK,IAAI,MAAM,GAAG;AAAA,MACtC;AAAA,MACA,EAAE,QAAQ,UAAU,gBAAgB,WAAW,KAAK;AAAA,MACpD,EAAE,SAAS,EAAE,WAAW,OAAO,EAAE;AAAA,IACnC;AAEA,WAAO,aAAa,KAAK;AAAA,MACvB,OAAO,cAAc,IAAI,qBAAqB;AAAA,MAC9C;AAAA,IACF,CAAC;AAAA,EACH,SAAS,OAAO;AACd,WAAO,iBAAiB,qBAAqB,KAAK;AAAA,EACpD;AACF;AAEA,eAAsB,KAAK,KAAc;AACvC,MAAI;AACF,UAAM,EAAE,KAAK,gBAAgB,UAAU,UAAU,IAAI,MAAM,uBAAuB,GAAG;AACrF,QAAI,CAAC,kBAAkB,CAAC,UAAU;AAChC,aAAO,UAAU,KAAK,oCAAoC;AAAA,IAC5D;AACA,UAAM,SAAS,cAAc,GAAG;AAChC,QAAI,CAAC,OAAQ,QAAO,UAAU,KAAK,yBAAyB;AAE5D,UAAM,OAAQ,MAAM,aAAsC,KAAK,CAAC,CAAC,KAAM,CAAC;AACxE,UAAM,aAAa,kBAAkB,MAAM,IAAI;AAC/C,UAAM,SAAS,kBAAkB,EAAE,GAAG,YAAY,OAAO,GAAG,KAAK,SAAS;AAC1E,UAAM,QAAQ,gCAAgC,MAAM,MAAM;AAE1D,WAAO,MAAM,kBAAkB;AAAA,MAC7B;AAAA,MACA;AAAA,MACA;AAAA,MACA,cAAc;AAAA,MACd,YAAY;AAAA,MACZ,WAAW;AAAA,MACX,SAAS;AAAA,MACT,SAAS;AAAA,MACT,KAAK,YAAY;AACf,cAAM,aAAa,IAAI,UAAU,QAAQ,YAAY;AACrD,cAAM,EAAE,QAAQ,SAAS,IAAI,MAAM,WAAW,QAG5C,6BAA6B,EAAE,OAAO,IAAI,CAAC;AAC7C,cAAM,WAAW,aAAa,KAAK,EAAE,IAAI,QAAQ,kBAAkB,KAAK,GAAG,EAAE,QAAQ,IAAI,CAAC;AAC1F,eAAO;AAAA,UACL;AAAA,UACA;AAAA,UACA;AAAA,UACA,QAAQ,kBAAkB;AAAA,QAC5B;AAAA,MACF;AAAA,IACF,CAAC;AAAA,EACH,SAAS,OAAO;AACd,UAAM,uBAAuB,mCAAmC,KAAK;AACrE,QAAI,sBAAsB;AACxB,aAAO,aAAa,KAAK,qBAAqB,MAAM,EAAE,QAAQ,qBAAqB,OAAO,CAAC;AAAA,IAC7F;AACA,WAAO,iBAAiB,sBAAsB,KAAK;AAAA,EACrD;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAAA,EAC9C,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aAAa;AAAA,MACb,WAAW,CAAC,EAAE,QAAQ,KAAK,aAAa,qBAAqB,QAAQ,mBAAmB,CAAC;AAAA,MACzF,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,gCAAgC,QAAQ,YAAY;AAAA,QAChF,EAAE,QAAQ,KAAK,aAAa,kBAAkB,QAAQ,YAAY;AAAA,MACpE;AAAA,IACF;AAAA,IACA,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aACE;AAAA,MACF,aAAa,EAAE,aAAa,oBAAoB,QAAQ,kBAAkB;AAAA,MAC1E,WAAW,CAAC,EAAE,QAAQ,KAAK,aAAa,wBAAwB,QAAQ,qBAAqB,CAAC;AAAA,MAC9F,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,mBAAmB,QAAQ,YAAY;AAAA,QACnE,EAAE,QAAQ,KAAK,aAAa,kBAAkB,QAAQ,YAAY;AAAA,MACpE;AAAA,IACF;AAAA,EACF;AACF;",
+  "names": []
+}